Function at 0x1401018a0
Capabilities:
Parse pe header
Set registry value

Disassembly:
mov qword [rsp + 0x18], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x60]
sub rsp, 0x160
mov rax, qword [0x14021a800]
xor rax, rsp
mov qword [rbp + 0x58], rax
mov rdi, rdx
mov r14, rcx
mov dword [rsp + 0x60], 0x8f8d8a6b
mov dword [rsp + 0x64], 0x52788a7d
mov dword [rsp + 0x68], 0x748a8b81
mov dword [rsp + 0x6c], 0x9649998c
mov dword [rsp + 0x70], 0x92929d90
mov dword [rsp + 0x74], 0x93637096
mov dword [rsp + 0x78], 0x9967746a
mov dword [rsp + 0x7c], 0x58595e94
mov word [rbp - 0x80], 0x55ab
mov byte [rbp - 0x7e], Ordinal_50
xorps xmm0, xmm0
movups xmmword [rbp - 0x7d], xmm0
movups xmmword [rbp - 0x6d], xmm0
movabs rsi, 0x1cf05848fcd00f03
movabs r15, 0x5fb73dfcbd113b3f
movabs r12, 0x42be8e7d51b7ea95
movabs r13, 0xb2152c46d030e12d
movzx r11d, byte [rbp + 0x30]
nop dword [rax]
nop word [rax + rax]
mov r8, qword [0x140220a80]
mov r9, qword [0x140220a78]
nop
xor ebx, ebx
cmp rbx, 0x43
jae 0x140102307
movzx r10d, byte [rsp + rbx + 0x60]
movzx edx, r10b
cmp r8, rbx
ja 0x1401022fe
lea rcx, [r9 + 1]
cmp r8, rcx
jae 0x1401019b2
lea rcx, [rbx + rsi]
mov rax, rcx
and rax, r10
imul r11, rax, 0xfffffffffffffffe
add r11, rcx
add r11, r10
sub r11b, 0x15
jmp 0x1401019ec
je 0x14010228e
lea rax, [r9 + 3]
cmp r8, rax
je 0x140102208
lea rax, [rcx + 1]
cmp r8, rax
je 0x1401021ce
lea rax, [r9 + 4]
cmp r8, rax
je 0x1401021ae
lea rax, [r9 + 9]
cmp r8, rax
je 0x140102164
movzx edx, r10b
cmp r9, rbx
ja 0x1401022f5
lea rax, [r9 + 0x42]
cmp r8, rax
jae 0x140101a1b
lea r11, [rbx + r15]
movzx eax, r10b
and al, r11b
add al, al
sub r11b, al
add r11b, 0x47
add r11b, dl
jmp 0x140101a5b
lea rax, [r9 + 1]
cmp r8, rax
je 0x140102144
inc rax
cmp r8, rax
je 0x140102118
lea rax, [r9 + 3]
cmp r8, rax
je 0x1401020ef
lea rax, [r9 + 5]
cmp r8, rax
je 0x1401020cc
lea rax, [r9 + 6]
cmp r8, rax
je 0x1401020a9
nop dword [rax + rax]
lea rax, [r9 + r8]
cmp rax, rbx
jbe 0x140101d72
nop dword [rax]
lea rax, [r9 + 9]
cmp r8, rax
je 0x140101d54
lea rax, [r9 + 5]
cmp r8, rax
je 0x140101d30
lea rax, [r9 + 2]
cmp r8, rax
je 0x140101d0f
lea rax, [r9 + 0x5a]
cmp r8, rax
je 0x140101cf3
lea rax, [r9 + 0x61]
cmp r8, rax
je 0x140101cd5
lea r8, [r9 + 0x10]
lea r9, [r8 + 0x61]
lea rax, [r9 + 8]
cmp r8, rax
jb 0x1401022da
lea rax, [r9 + 4]
cmp r8, rax
jb 0x1401022bf
lea rax, [r9 + 0x10]
cmp r8, rax
jb 0x140101b53
lea rax, [r9 + 1]
cmp r8, rax
jb 0x140101c2e
lea rax, [r9 + 0x41]
cmp r8, rax
jb 0x140101a70
lea r8, [r9 + 0xa]
lea r9, [r8 + 0x1000]
lea rax, [r9 + 0x64]
cmp r8, rax
ja 0x140101c05
lea rax, [r9 + 0x28]
cmp r8, rax
ja 0x140101be6
lea rax, [r9 + 0xa]
cmp r8, rax
ja 0x140101bc7
lea rax, [r9 + 6]
cmp r8, rax
ja 0x140101ba8
lea rax, [r9 + 3]
cmp r8, rax
ja 0x140101b8d
lea rax, [r9 + 0x2a]
cmp r8, rax
ja 0x140101b6e
lea r8, [r9 + 0x200]
lea r9, [r8 + 3]
jmp 0x140101a70
lea rcx, [rbx + r12]
movzx eax, r10b
and al, cl
add al, al
sub cl, al
lea r11d, [rdx + rcx]
sub r11b, 0x13
jmp 0x140101986
lea edx, [rbx - 8]
movzx eax, r10b
and al, dl
mov ecx, Ordinal_30
sub cl, al
lea r11d, [rcx + rcx]
add r11b, r10b
add r11b, dl
jmp 0x140102189
lea ecx, [rbx - 0x20]
movzx eax, r10b
and al, cl
add al, al
sub r10b, al
lea r11d, [rcx + r10]
sub r11b, 0x20
jmp 0x1401021ec
lea edx, [rbx - 0x26]
movzx eax, r10b
and al, dl
mov ecx, 5
sub cl, al
lea r11d, [rcx + rcx]
add r11b, r10b
add r11b, dl
jmp 0x1401021ef
lea edx, [rbx - 0x2c]
movzx eax, r10b
and al, dl
mov ecx, reloc.WLDAP32.dll_Ordinal_26
sub cl, al
lea r11d, [rcx + rcx]
add r11b, r10b
add r11b, dl
jmp 0x14010222d
lea edx, [rbx - 0x32]
movzx eax, r10b
and al, dl
mov ecx, Ordinal_50
sub cl, al
lea r11d, [rcx + rcx]
add r11b, r10b
add r11b, dl
jmp 0x140102250
lea ecx, [rbx - 0x38]
movzx eax, r10b
and al, cl
add al, al
sub r10b, al
lea r11d, [rcx + r10]
sub r11b, 0x78
movzx eax, byte [rsp + rbx + 0x60]
add rax, r9
add rbx, rax
inc rbx
jmp 0x140101972
lea ecx, [rbx - 0x59]
movzx eax, r10b
and al, cl
add al, al
movzx r11d, r10b
sub r11b, al
add r11b, 0x6f
add r11b, cl
lea rax, [r9 + r8]
cmp rax, 4
je 0x14010208d
lea rax, [r9 + 0x64]
cmp r8, rax
jbe 0x140101e6b
lea edx, [rbx - 0x49]
movzx eax, r10b
and al, dl
add al, al
movzx r11d, r10b
sub r11b, al
dec r11b
add r11b, dl
cmp r8, 0x28
jae 0x140102054
lea rax, [r9 + 0x41]
cmp r8, rax
jbe 0x140101f63
lea edx, [rbx - 0xa]
movzx eax, r10b
and al, dl
mov ecx, reloc.WLDAP32.dll_Ordinal_35
sub cl, al
lea r11d, [rcx + rcx]
add r11b, r10b
add r11b, dl
cmp r9, 0x20
jb 0x140102047
lea edx, [rbx + 0x32]
movzx eax, r10b
and al, dl
mov ecx, reloc.WS2_32.dll_recvfrom
sub cl, al
add cl, cl
add cl, r10b
add cl, dl
lea r11d, [rcx + rcx]
jmp 0x140102189
lea edx, [rbx + 0x74]
movzx eax, r10b
and al, dl
add al, al
movzx r11d, r10b
sub r11b, al
sub r11b, 0x2c
add r11b, dl
jmp 0x140102250
lea edx, [rbx + 0x5c]
movzx eax, r10b
and al, dl
mov ecx, 0x3e
sub cl, al
lea r11d, [rcx + rcx]
add r11b, r10b
jmp 0x14010206b
lea ecx, [rbx + 0x56]
movzx eax, r10b
and al, cl
add al, al
sub r10b, al
lea r11d, [rcx + r10]
sub r11b, 0x5a
dec rbx
inc rbx
jmp 0x140101972
lea ecx, [rbx + 0x50]
movzx eax, r10b
and al, cl
add al, al
sub r10b, al
lea r11d, [rcx + r10]
sub r11b, 0x30
inc r9
dec rbx
inc rbx
jmp 0x140101972
lea edx, [rbx + 0x4a]
movzx eax, r10b
and al, dl
add al, al
movzx r11d, r10b
sub r11b, al
sub r11b, 6
add r11b, dl
jmp 0x140102189
lea rax, [r9 + 2]
cmp r8, rax
jae 0x140101d97
lea r11, [rbx + rsi]
movzx eax, r10b
and al, r11b
add al, al
sub r11b, al
sub r11b, 0x15
add r11b, dl
jmp 0x140101c47
lea rcx, [r9 + 1]
cmp r8, rcx
jne 0x140101dc9
lea ecx, [rbx + 0x7e]
movzx eax, r10b
and al, cl
add al, al
sub r10b, al
lea r11d, [rcx + r10]
sub r11b, 0x72
movzx eax, byte [rsp + rbx + 0x60]
add rax, r9
add rbx, rax
inc rbx
jmp 0x140101972
lea rax, [r9 + 3]
cmp r8, rax
jne 0x140101df1
lea edx, [rbx - 0x76]
movzx eax, r10b
and al, dl
mov ecx, Ordinal_33
sub cl, al
lea r11d, [rcx + rcx]
add r11b, r10b
add r11b, dl
jmp 0x14010222d
lea rax, [rcx + 1]
cmp r8, rax
jne 0x140101e15
lea ecx, [rbx - 0x6a]
movzx eax, r10b
and al, cl
add al, al
sub r10b, al
lea r11d, [rcx + r10]
sub r11b, 0x1a
jmp 0x1401021ec
lea rax, [r9 + 5]
cmp r8, rax
jne 0x140101e3f
lea ecx, [rbx - 0x5e]
movzx eax, r10b
and al, cl
add al, al
sub r10b, al
lea r11d, [rcx + r10]
sub r11b, 0x6e
dec rbx
inc rbx
jmp 0x140101972
lea rax, [r9 + 9]
cmp r8, rax
jne 0x140101c47
lea edx, [rbx - 0x52]
movzx eax, r10b
and al, dl
mov ecx, Ordinal_33
sub cl, al
lea r11d, [rcx + rcx]
add r11b, r10b
add r11b, dl
jmp 0x140102189
lea rax, [r9 + 1]
cmp r8, rax
jne 0x140101e92
lea edx, [rbx - 0x43]
movzx eax, r10b
and al, dl
add al, al
movzx r11d, r10b
sub r11b, al
sub r11b, 0x2b
add r11b, dl
jmp 0x140102189
inc rax
cmp r8, rax
jne 0x140101ebb
lea ecx, [rbx - 0x37]
movzx eax, r10b
and al, cl
add al, al
sub r10b, al
lea r11d, [rcx + r10]
sub r11b, 0x7f
dec rbx
inc rbx
jmp 0x140101972
lea rax, [r9 + 5]
cmp r8, rax
jne 0x140101edf
lea ecx, [rbx - 0x25]
movzx eax, r10b
and al, cl
add al, al
sub r10b, al
lea r11d, [rcx + r10]
add r11b, 3
jmp 0x1401021ef
lea rax, [r9 + 6]
cmp r8, rax
jne 0x140101f06
lea edx, [rbx - 0x1f]
movzx eax, r10b
and al, dl
add al, al
movzx r11d, r10b
sub r11b, al
sub r11b, 0x27
add r11b, dl
jmp 0x14010222d
lea rax, [r9 + 3]
cmp r8, rax
jne 0x140101f2d
lea edx, [rbx - 0x19]
movzx eax, r10b
and al, dl
add al, al
movzx r11d, r10b
sub r11b, al
sub r11b, 0x51
add r11b, dl
jmp 0x140102250
lea rax, [r9 + 7]
cmp r8, rax
jne 0x140101c7a
lea ecx, [rbx - 0x13]
movzx eax, r10b
and al, cl
add al, al
sub r10b, al
lea r11d, [rcx + r10]
sub r11b, 0x7b
movzx eax, byte [rsp + rbx + 0x60]
add rax, r9
add rbx, rax
inc rbx
jmp 0x140101972
lea rax, [r9 + 1]
cmp r8, rax
jne 0x140101f99
lea edx, [rbx - 4]
movzx eax, r10b
and al, dl
mov ecx, select
sub cl, al
lea r11d, [rcx + rcx]
add r11b, r10b
add r11b, dl
movzx eax, byte [rsp + rbx + 0x60]
add rax, r9
add rbx, rax
inc rbx
jmp 0x140101972
lea rax, [r9 + 3]
cmp r8, rax
jne 0x140101fc1
lea edx, [rbx + 0x14]
movzx eax, r10b
and al, dl
mov ecx, Ordinal_60
sub cl, al
lea r11d, [rcx + rcx]
add r11b, r10b
add r11b, dl
jmp 0x1401021ec
lea rax, [r9 + 5]
cmp r8, rax
jne 0x140101fef
lea edx, [rbx + 0x20]
movzx eax, r10b
and al, dl
mov ecx, reloc.WS2_32.dll_recv
sub cl, al
lea r11d, [rcx + rcx]
add r11b, r10b
add r11b, dl
dec rbx
inc rbx
jmp 0x140101972
lea rax, [r9 + 2]
cmp r8, rax
jne 0x14010201c
lea ecx, [rbx + 0x26]
movzx eax, r10b
and al, cl
add al, al
sub r10b, al
lea r11d, [rcx + r10]
sub r11b, 0xa
inc r9
dec rbx
inc rbx
jmp 0x140101972
lea rax, [r9 + 4]
cmp r8, rax
jne 0x140101cab
lea edx, [rbx + 0x2c]
movzx eax, r10b
and al, dl
add al, al
movzx r11d, r10b
sub r11b, al
sub r11b, 0x34
add r11b, dl
jmp 0x140102189
mov byte [rsp + rbx + 0x60], r11b
inc rbx
jmp 0x140101972
lea edx, [rbx + 0x38]
movzx eax, r10b
and al, dl
movzx ecx, byte [rsp + rbx + 0x60]
sub cl, al
add cl, 0x3c
lea r11d, [rcx + rcx]
add r11b, dl
lea ecx, [rbx + 0x3b]
movzx eax, cl
and al, r10b
add al, al
sub cl, al
add cl, 0x63
add cl, r10b
add cl, r11b
mov byte [rsp + rbx + 0x60], cl
jmp 0x1401021ec
lea edx, [rbx + 0x3e]
movzx eax, r10b
and al, dl
mov ecx, Ordinal_41
sub cl, al
lea r11d, [rcx + rcx]
add r11b, dl
jmp 0x14010222d
movabs rax, 0xbafb616896d1ef63
add rax, rbx
and r10b, al
add r10b, r10b
sub dl, r10b
lea r11d, [rax + rdx]
add r11b, 0x4b
jmp 0x1401021ef
movabs rax, 0x811ab0d69d31d15d
add rax, rbx
and r10b, al
add r10b, r10b
sub dl, r10b
lea r11d, [rax + rdx]
add r11b, 0x75
jmp 0x1401021ec
movabs rax, 0xd594fb2a9f19551
add rax, rbx
and r10b, al
add r10b, r10b
sub dl, r10b
lea r11d, [rax + rdx]
sub r11b, 0x37
dec rbx
inc rbx
jmp 0x140101972
movabs rax, 0xd3789f20b051774b
add rax, rbx
and r10b, al
add r10b, r10b
sub dl, r10b
lea r11d, [rax + rdx]
sub r11b, 0xd
inc r9
dec rbx
inc rbx
jmp 0x140101972
movabs rcx, 0x9997ee8eb6b15945
add rcx, rbx
and r10b, cl
add r10b, r10b
movzx r11d, dl
sub r11b, r10b
add r11b, 0x1d
jmp 0x140102182
movabs rcx, 0x25d68d6ac3711d39
add rcx, rbx
and r10b, cl
add r10b, r10b
movzx r11d, dl
sub r11b, r10b
add r11b, 0x71
movzx r10d, dl
add r11b, cl
lea ecx, [rbx + 0x35]
movzx eax, cl
and al, r10b
add al, al
sub cl, al
sub cl, 0x73
add cl, r10b
mov byte [rsp + rbx + 0x60], cl
inc r9
dec rbx
inc rbx
jmp 0x140101972
lea rax, [rbx + r13]
and r10b, al
add r10b, r10b
sub dl, r10b
lea r11d, [rax + rdx]
sub r11b, 0x3b
dec rbx
inc rbx
jmp 0x140101972
movabs rax, 0x3e53cb22dcf0a521
add rax, rbx
and r10b, al
add r10b, r10b
sub dl, r10b
lea r11d, [rax + rdx]
add r11b, 0x19
add r8, r9
movzx eax, r11b
mov rcx, 0xffffffffffffffff
sub rcx, rax
add rbx, rcx
inc rbx
jmp 0x140101972
movabs rcx, 0xca9269fee9b06915
add rcx, rbx
and r10b, cl
add r10b, r10b
movzx r11d, dl
sub r11b, r10b
add r11b, 0x6d
add r11b, cl
movzx r10d, dl
lea ecx, [rbx + 0x41]
movzx eax, cl
and al, r10b
add al, al
sub cl, al
add cl, 0x39
add cl, r10b
movzx eax, cl
mov byte [rsp + rbx + 0x60], al
inc r9
add rax, r9
sub rbx, rax
lea edx, [rbx + 0x44]
movzx eax, dl
and al, r10b
mov ecx, reloc.WS2_32.dll_select
sub cl, al
add cl, cl
add cl, dl
add cl, r10b
mov byte [rsp + rbx + 0x60], cl
inc r8
mov rax, 0xffffffffffffffff
sub rax, r8
add rbx, rax
movzx eax, byte [rsp + rbx + 0x60]
add rax, r9
add rbx, rax
inc rbx
jmp 0x140101972
movabs rax, 0x56d108daf6702d09
add rax, rbx
and r10b, al
add r10b, r10b
sub dl, r10b
lea r11d, [rax + rdx]
sub r11b, 0x3f
movzx eax, byte [rsp + rbx + 0x60]
add rax, r9
add rbx, rax
inc rbx
jmp 0x140101972
sub bl, 0x71
movzx eax, r10b
and al, bl
add al, al
sub r10b, al
lea r11d, [rbx + r10]
add r11b, 0x17
jmp 0x140101970
sub bl, 0x77
movzx eax, r10b
and al, bl
add al, al
sub r10b, al
lea r11d, [rbx + r10]
add r11b, 0x41
jmp 0x140101960
lea rbx, [rbp + 0x14a1564]
jmp 0x14010230c
lea rbx, [rbp + 0x9a2467]
jmp 0x14010230c
lea rbx, [rsp + 0x60]
movzx edx, byte [rbp + 0x30]
lea rcx, [rbp + 0x38]
call fcn.140002620
nop
mov r8, 0xffffffffffffffff
inc r8
cmp byte [rbx + r8], 0
jne 0x140102321
mov rdx, rbx
lea rcx, [rbp + 0x38]
call fcn.140004030
nop
mov rdx, rdi
lea rcx, [rbp + 0x38]
call fcn.140002d10
lea rdx, [rbp + 0x38]
cmp qword [rbp + 0x50], 0xf
cmova rdx, qword [rbp + 0x38]
lea r8, [rbp + 0x28]
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegCreateKeyA]
test eax, eax
jne 0x140105063
mov byte [rbp + 0x31], 1
mov dword [rbp], 0xe6ead0f4
mov byte [rbp + 4], 0x54
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp + 5], xmm0
mov qword [rbp + 0x15], rax
mov dword [rbp + 0x1d], eax
mov word [rbp + 0x21], ax
movabs rsi, 0xf717da6008cc3b4
movabs r15, 0x8afd6ad604f2e154
movabs r13, 0x6c1a6f8a03d959ec
movabs r12, 0x2e5478f201a64b1c
movzx r11d, byte [rbp + 0x30]
nop dword [rax + rax]
mov r8, qword [0x140220a80]
mov r9, qword [0x140220a78]
nop
xor edi, edi
cmp rdi, 0x23
jae 0x140102e44
movzx r10d, byte [rbp + rdi]
mov rbx, r10
cmp r8, rdi
ja 0x140102e3b
lea rax, [r9 + 1]
cmp r8, rax
jae 0x140102411
lea rcx, [rdi + rsi]
mov rax, rcx
and rax, rbx
imul r11, rax, 0xfffffffffffffffe
add r11, rcx
add r11, rbx
add r11b, 0x14
jmp 0x140102460
je 0x140102dc3
lea rax, [r9 + 2]
cmp r8, rax
je 0x140102d45
lea rax, [r9 + 4]
cmp r8, rax
je 0x140102d17
lea rax, [r9 + 5]
cmp r8, rax
je 0x140102cd6
lea rax, [r9 + 6]
cmp r8, rax
je 0x140102cae
lea rax, [r9 + 3]
cmp r8, rax
je 0x140102c67
nop dword [rax + rax]
cmp r9, rdi
ja 0x140102e32
lea rax, [r9 + 0x64]
cmp r8, rax
jae 0x140102489
lea ecx, [rdi - 0x3c]
movzx eax, cl
and al, r10b
add al, al
sub cl, al
lea r11d, [r10 + rcx]
sub r11b, 0x5c
jmp 0x1401024d0
lea rax, [r9 + 1]
cmp r8, rax
je 0x140102c4c
inc rax
cmp r8, rax
je 0x140102c27
lea rax, [r9 + 5]
cmp r8, rax
je 0x140102c0d
lea rax, [r9 + 3]
cmp r8, rax
je 0x140102bf3
lea rax, [r9 + 4]
cmp r8, rax
je 0x140102bd9
nop dword [rax]
lea rax, [r9 + r8]
cmp rax, rdi
jbe 0x14010292d
nop dword [rax]
lea rax, [r9 + 1]
cmp r8, rax
je 0x14010290f
lea rax, [r9 + 0x42]
cmp r8, rax
je 0x1401028eb
lea rax, [r9 + 2]
cmp r8, rax
je 0x1401028cb
lea rax, [r9 + 0x64]
cmp r8, rax
je 0x1401028ba
lea rax, [r9 + 0x28]
cmp r8, rax
je 0x140102898
lea rax, [r9 + 0x2a]
cmp r8, rax
je 0x140102879
lea rax, [r9 + 0x40]
cmp r8, rax
je 0x14010285b
lea r8, [r9 + 0x61]
lea r9, [r8 + 0x64]
lea rax, [r9 + 0xa]
cmp r8, rax
jb 0x140102e11
lea rax, [r9 + 0x7a]
cmp r8, rax
jb 0x140102df0
lea rax, [r9 + 0x400]
cmp r8, rax
jb 0x140102664
lea rax, [r9 + 8]
cmp r8, rax
jb 0x14010264a
lea rax, [r9 + 0x1000]
cmp r8, rax
jb 0x140102630
lea rax, [r9 + 9]
cmp r8, rax
jb 0x140102805
lea rax, [r9 + 0x61]
cmp r8, rax
jb 0x14010278c
lea rax, [r9 + 0x10]
cmp r8, rax
jb 0x1401024e0
lea r8, [r9 + 4]
lea r9, [r8 + 8]
lea rax, [r9 + 1]
cmp r8, rax
ja 0x140102763
lea rax, [r9 + 0x42]
cmp r8, rax
ja 0x140102744
lea rax, [r9 + 2]
cmp r8, rax
ja 0x140102725
lea rax, [r9 + 0x64]
cmp r8, rax
ja 0x140102706
lea rax, [r9 + 3]
cmp r8, rax
ja 0x1401026e5
lea rax, [r9 + 0x80]
cmp r8, rax
ja 0x1401026c3
lea rax, [r9 + 4]
cmp r8, rax
ja 0x1401026a2
lea rax, [r9 + 0x200]
cmp r8, rax
ja 0x14010267e
lea r8, [r9 + 0x61]
lea r9, [r8 + 0x64]
jmp 0x1401024e0
lea ecx, [rdi - 0x44]
movzx eax, cl
and al, r10b
add al, al
sub cl, al
lea r11d, [r10 + rcx]
sub r11b, 0x24
jmp 0x1401024d0
lea ecx, [rdi + 0x54]
movzx eax, cl
and al, r10b
add al, al
sub cl, al
lea r11d, [r10 + rcx]
sub r11b, 0x4c
jmp 0x140102460
lea ecx, [rdi - 0x14]
movzx eax, cl
and al, r10b
add al, al
sub cl, al
lea r11d, [r10 + rcx]
sub r11b, 0x74
jmp 0x1401023e2
lea ecx, [rdi - 0x48]
movzx eax, r10b
and al, cl
add al, al
sub r10b, al
lea r11d, [rcx + r10]
sub r11b, 8
inc r9
dec rdi
inc rdi
jmp 0x1401023d2
lea ecx, [rdi + 0x50]
movzx eax, r10b
and al, cl
add al, al
sub r10b, al
lea r11d, [rcx + r10]
sub r11b, 0x30
dec rdi
inc rdi
jmp 0x1401023d2
lea edx, [rdi - 0x18]
movzx eax, r10b
and al, dl
add al, al
movzx r11d, r10b
sub r11b, al
sub r11b, 0x58
add r11b, dl
movzx ebx, dil
jmp 0x140102cf4
lea ecx, [rdi + 0x80]
movzx eax, r10b
and al, cl
add al, al
sub r10b, al
lea r11d, [rcx + r10]
add r11b, 0x80
add r8, r9
jmp 0x140102d2c
lea edx, [rdi + 0x18]
movzx eax, r10b
and al, dl
mov ecx, Ordinal_46
sub cl, al
lea r11d, [rcx + rcx]
add r11b, r10b
add r11b, dl
jmp 0x140102d2c
lea edx, [rdi - 0x50]
movzx eax, r10b
and al, dl
mov ecx, Ordinal_27
sub cl, al
lea r11d, [rcx + rcx]
add r11b, r10b
add r11b, dl
jmp 0x140102d5e
lea edx, [rdi + 0x48]
movzx eax, r10b
and al, dl
mov ecx, 4
sub cl, al
lea r11d, [rcx + rcx]
add r11b, r10b
add r11b, dl
jmp 0x140102d85
lea ecx, [rdi - 0x20]
movzx eax, r10b
and al, cl
add al, al
sub r10b, al
lea r11d, [rcx + r10]
sub r11b, 0x20
movzx eax, byte [rbp + rdi]
add rax, r9
add rdi, rax
inc rdi
jmp 0x1401023d2
lea edx, [rdi - 0x74]
movzx eax, dl
and al, r10b
mov ecx, reloc.WLDAP32.dll_Ordinal_22
sub cl, al
lea r11d, [rcx + rcx]
add r11b, dl
add r11b, r10b
cmp r8, 8
jae 0x140102b9a
lea rax, [r9 + 1]
cmp r8, rax
jbe 0x140102ada
lea edx, [rdi - 0x58]
movzx eax, r10b
and al, dl
mov ecx, 0x34
sub cl, al
lea r11d, [rcx + rcx]
add r11b, r10b
add r11b, dl
cmp r9, 0x5a
jb 0x140102b8d
movzx ebx, dil
lea edx, [rbx - 0x48]
movzx eax, r10b
and al, dl
add al, al
movzx ecx, r10b
sub cl, al
add cl, dl
lea r11d, [rcx*2 - 0x10]
jmp 0x140102c85
lea edx, [rdi + 0x24]
movzx eax, dl
and al, r10b
mov ecx, 2
sub cl, al
lea r11d, [rcx + rcx]
add r11b, dl
add r11b, r10b
lea rax, [r9 + r8]
cmp rax, 0x5a
je 0x140102bbd
lea rax, [r9 + 0x3e8]
cmp r8, rax
jbe 0x140102a05
lea edx, [rdi - 0x1c]
movzx eax, r10b
and al, dl
add al, al
movzx r11d, r10b
sub r11b, al
sub r11b, 0x3c
add r11b, dl
jmp 0x1401027a6
lea edx, [rdi - 0x38]
movzx eax, r10b
and al, dl
add al, al
movzx r11d, r10b
sub r11b, al
sub r11b, 0x78
add r11b, dl
jmp 0x140102d5e
lea edx, [rdi + 0x60]
movzx eax, r10b
and al, dl
mov ecx, Ordinal_50
sub cl, al
lea r11d, [rcx + rcx]
add r11b, r10b
add r11b, dl
jmp 0x140102d2c
lea edx, [rdi - 8]
movzx eax, dl
and al, r10b
mov ecx, Ordinal_30
sub cl, al
lea r11d, [rcx + rcx]
add r11b, dl
add r11b, r10b
add r8, r9
jmp 0x140102d2c
movzx ebx, dil
lea edx, [rbx - 0x70]
mov ecx, 8
jmp 0x140102ce2
lea ecx, [rdi + 0x28]
movzx eax, cl
and al, r10b
add al, al
sub cl, al
lea r11d, [r10 + rcx]
sub r11b, 0x18
dec rdi
inc rdi
jmp 0x1401023d2
lea ecx, [rdi - 0x40]
movzx eax, r10b
and al, cl
add al, al
sub r10b, al
lea r11d, [rcx + r10]
sub r11b, 0x40
inc r9
dec rdi
inc rdi
jmp 0x1401023d2
lea ecx, [rdi + 0x58]
movzx eax, cl
and al, r10b
add al, al
sub cl, al
lea r11d, [r10 + rcx]
sub r11b, 0x68
movzx ebx, dil
jmp 0x140102c85
lea rax, [r9 + 4]
cmp r8, rax
jae 0x140102949
lea edx, [rdi - 0x4c]
movzx eax, dl
and al, r10b
mov ecx, 0xa
jmp 0x140102813
lea rax, [r9 + 1]
cmp r8, rax
jne 0x14010297f
lea edx, [rdi - 0x78]
movzx eax, dl
and al, r10b
mov ecx, 0x24
sub cl, al
lea r11d, [rcx + rcx]
add r11b, dl
add r11b, r10b
movzx eax, byte [rbp + rdi]
add rax, r9
add rdi, rax
inc rdi
jmp 0x1401023d2
lea rax, [r9 + 3]
cmp r8, rax
jne 0x1401029a5
lea ecx, [rdi + 0x28]
movzx eax, cl
and al, r10b
add al, al
sub cl, al
lea r11d, [r10 + rcx]
sub r11b, 0x18
add r8, r9
jmp 0x140102d2c
lea rax, [r9 + 2]
cmp r8, rax
jne 0x1401029d6
lea edx, [rdi + 0x60]
movzx eax, r10b
and al, dl
mov ecx, Ordinal_50
sub cl, al
lea r11d, [rcx + rcx]
add r11b, r10b
add r11b, dl
inc r9
dec rdi
inc rdi
jmp 0x1401023d2
lea rax, [r9 + 6]
cmp r8, rax
jne 0x14010281f
movzx ebx, dil
lea edx, [rbx - 0x38]
movzx eax, r10b
and al, dl
add al, al
movzx r11d, r10b
sub r11b, al
sub r11b, 0x78
add r11b, dl
jmp 0x140102c85
lea rax, [r9 + 1]
cmp r8, rax
jne 0x140102a30
movzx ebx, dil
lea edx, [rbx + 0x4c]
movzx eax, r10b
and al, dl
add al, al
movzx r11d, r10b
sub r11b, al
sub r11b, 0x14
add r11b, dl
jmp 0x140102c85
lea rax, [r9 + 3]
cmp r8, rax
jne 0x140102a5e
lea edx, [rdi + 0x1c]
movzx eax, r10b
and al, dl
mov ecx, reloc.WLDAP32.dll_Ordinal_30
sub cl, al
lea r11d, [rcx + rcx]
add r11b, r10b
add r11b, dl
dec rdi
inc rdi
jmp 0x1401023d2
lea rax, [r9 + 6]
cmp r8, rax
jne 0x140102a7d
lea ecx, [rdi + 0x54]
movzx eax, cl
and al, r10b
add al, al
sub cl, al
lea r11d, [r10 + rcx]
jmp 0x140102d28
lea rax, [r9 + 7]
cmp r8, rax
jne 0x140102aa0
lea ecx, [rdi - 0x44]
movzx eax, cl
and al, r10b
add al, al
sub cl, al
lea r11d, [r10 + rcx]
sub r11b, 0x24
jmp 0x140102d5e
lea rax, [r9 + 8]
cmp r8, rax
jne 0x1401027a6
lea edx, [rdi - 0x74]
movzx eax, dl
and al, r10b
mov ecx, reloc.WLDAP32.dll_Ordinal_22
sub cl, al
lea r11d, [rcx + rcx]
add r11b, dl
add r11b, r10b
movzx eax, byte [rbp + rdi]
add rax, r9
add rdi, rax
inc rdi
jmp 0x1401023d2
jne 0x140102b05
lea ecx, [rdi + 0x10]
movzx eax, r10b
and al, cl
add al, al
sub r10b, al
lea r11d, [rcx + r10]
sub r11b, 0x70
movzx eax, byte [rbp + rdi]
add rax, r9
add rdi, rax
inc rdi
jmp 0x1401023d2
lea rax, [r9 + 3]
cmp r8, rax
jne 0x140102b30
lea edx, [rdi - 0x50]
movzx eax, r10b
and al, dl
mov ecx, Ordinal_27
sub cl, al
lea r11d, [rcx + rcx]
add r11b, r10b
add r11b, dl
add r8, r9
jmp 0x140102d2c
lea rax, [r9 + 5]
cmp r8, rax
jne 0x140102b5c
movzx ebx, dil
lea edx, [rbx + 0x18]
movzx eax, r10b
and al, dl
mov ecx, Ordinal_46
sub cl, al
lea r11d, [rcx + rcx]
add r11b, r10b
add r11b, dl
jmp 0x140102cf4
lea rax, [r9 + 2]
cmp r8, rax
jne 0x1401027d7
lea ecx, [rdi + 0x80]
movzx eax, r10b
and al, cl
add al, al
sub r10b, al
lea r11d, [rcx + r10]
add r11b, 0x80
dec rdi
inc rdi
jmp 0x1401023d2
mov byte [rbp + rdi], r11b
inc rdi
jmp 0x1401023d2
movzx ebx, dil
lea edx, [rbx + 0x20]
movzx eax, r10b
and al, dl
movzx ecx, byte [rbp + rdi]
sub cl, al
add cl, 0x10
lea r11d, [rcx + rcx]
add r11b, dl
jmp 0x140102cf4
lea edx, [rdi - 0x78]
movzx eax, dl
and al, r10b
mov ecx, 0x24
sub cl, al
lea r11d, [rcx + rcx]
add r11b, dl
jmp 0x140102d5e
lea ecx, [rdi + 4]
movzx eax, cl
and al, r10b
add al, al
sub cl, al
lea r11d, [r10 + rcx]
sub r11b, 0x1c
jmp 0x140102d85
lea ecx, [rdi - 0x64]
movzx eax, cl
and al, r10b
add al, al
sub cl, al
lea r11d, [r10 + rcx]
sub r11b, 0x44
jmp 0x140102d5e
lea ecx, [rdi + 0x34]
movzx eax, cl
and al, r10b
add al, al
sub cl, al
lea r11d, [r10 + rcx]
sub r11b, 0x6c
jmp 0x140102d2c
lea edx, [rdi - 4]
movzx eax, dl
and al, r10b
mov ecx, select
sub cl, al
lea r11d, [rcx + rcx]
add r11b, dl
add r11b, r10b
dec rdi
inc rdi
jmp 0x1401023d2
movzx ebx, dil
lea ecx, [rbx + 0x2c]
movzx eax, cl
and al, r10b
add al, al
sub cl, al
lea r11d, [r10 + rcx]
sub r11b, 0x34
jmp 0x140102c85
movzx ebx, dil
lea edx, [rbx + 0x5c]
movzx eax, dl
and al, r10b
mov ecx, 0x3e
sub cl, al
lea r11d, [rcx + rcx]
add r11b, dl
add r11b, r10b
add bl, 0x6c
movzx eax, bl
and al, r10b
mov ecx, 6
sub cl, al
add cl, cl
add cl, bl
add cl, r10b
mov byte [rbp + rdi], cl
inc r9
dec rdi
inc rdi
jmp 0x1401023d2
lea edx, [rdi - 0xc]
movzx eax, dl
and al, r10b
mov ecx, Ordinal_46
sub cl, al
lea r11d, [rcx + rcx]
add r11b, dl
add r11b, r10b
inc r9
dec rdi
inc rdi
jmp 0x1401023d2
movzx ebx, dil
lea edx, [rbx + 0x24]
mov ecx, 2
movzx eax, dl
and al, r10b
sub cl, al
lea r11d, [rcx + rcx]
add r11b, dl
add r11b, r10b
sub bl, 0x2c
movzx eax, r10b
and al, bl
mov ecx, reloc.WLDAP32.dll_Ordinal_26
sub cl, al
add cl, cl
add cl, r11b
add cl, r10b
add cl, bl
mov byte [rbp + rdi], cl
add r8, r9
jmp 0x140102d2c
lea rcx, [rdi + r15]
movzx eax, cl
and al, bl
add al, al
sub cl, al
lea r11d, [rbx + rcx]
sub r11b, 0x4c
movzx eax, r11b
mov rcx, 0xffffffffffffffff
sub rcx, rax
add rdi, rcx
inc rdi
jmp 0x1401023d2
lea rcx, [rdi + r13]
movzx r10d, bl
movzx eax, cl
and al, bl
add al, al
sub cl, al
lea r11d, [r10 + rcx]
sub r11b, 0x74
lea edx, [rdi + 0x3c]
movzx eax, r10b
and al, dl
mov ecx, reloc.WLDAP32.dll_Ordinal_46
sub cl, al
add cl, cl
add cl, r10b
add cl, dl
movzx eax, cl
mov byte [rbp + rdi], al
inc r9
add rax, r9
sub rdi, rax
lea edx, [rdi - 0x10]
movzx eax, r10b
and al, dl
mov ecx, gethostname
sub cl, al
add cl, cl
add cl, r10b
add cl, dl
mov byte [rbp + rdi], cl
inc r8
mov rax, 0xffffffffffffffff
sub rax, r8
add rdi, rax
movzx eax, byte [rbp + rdi]
add rax, r9
add rdi, rax
inc rdi
jmp 0x1401023d2
lea rcx, [rdi + r12]
movzx eax, cl
and al, bl
mov edx, reloc.WLDAP32.dll_Ordinal_30
sub dl, al
lea r11d, [rdx + rdx]
add r11b, cl
add r11b, bl
movzx eax, byte [rbp + rdi]
add rax, r9
add rdi, rax
inc rdi
jmp 0x1401023d2
sub dil, 0x7c
movzx eax, r10b
and al, dil
mov ecx, reloc.WLDAP32.dll_Ordinal_50
sub cl, al
lea r11d, [rcx + rcx]
add r11b, r10b
add r11b, dil
jmp 0x1401023d0
add dil, 0x1c
movzx eax, r10b
and al, dil
mov ecx, reloc.WLDAP32.dll_Ordinal_30
sub cl, al
lea r11d, [rcx + rcx]
add r11b, r10b
add r11b, dil
jmp 0x1401023c0
lea rdx, [rbp + 0x1537cf0]
jmp 0x140102e48
lea rdx, [rbp + 0x12040a4]
jmp 0x140102e48
lea rdx, [rbp]
mov dword [rsp + 0x28], 4
lea rax, [rbp + 0x31]
mov qword [rsp + 0x20], rax
mov r9d, 4
xor r8d, r8d
mov rcx, qword [rbp + 0x28]
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
test eax, eax
jne 0x140105063
mov byte [rbp + 0x32], 3
mov dword [rsp + 0x30], 0x90949b69
mov dword [rsp + 0x34], 0x95956696
mov dword [rsp + 0x38], 0x87899390
mov byte [rsp + 0x3c], gethostname
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rsp + 0x3d], xmm0
mov dword [rsp + 0x4d], eax
mov word [rsp + 0x51], ax
movabs r15, 0xb9477cde6cff5506
movabs r12, 0x838363d1d4f9fd36
movabs r13, 0x2bd6769b46fdff12
movzx r11d, byte [rbp + 0x30]
nop dword [rax + rax]
mov r8, qword [0x140220a80]
mov r9, qword [0x140220a78]
nop
xor edi, edi
cmp rdi, 0x23
jae 0x1401039ea
movzx ebx, byte [rsp + rdi + 0x30]
mov r10, rbx
cmp r8, rdi
ja 0x1401039e1
lea rax, [r9 + 1]
cmp r8, rax
jae 0x140102f20
lea rcx, [rdi + r15]
mov rax, rbx
and rax, rcx
imul r11, rax, 0xfffffffffffffffe
add r11, rbx
add r11, rcx
sub r11b, 0x2a
jmp 0x140102f60
je 0x140103974
inc rax
cmp r8, rax
je 0x140103910
lea rax, [r9 + 2]
cmp r8, rax
je 0x1401038c2
lea rax, [r9 + 3]
cmp r8, rax
je 0x140103893
lea rax, [r9 + 8]
cmp r8, rax
je 0x140103850
nop dword [rax]
cmp r9, rdi
ja 0x1401039d8
lea rax, [r9 + 0x7a]
cmp r8, rax
jae 0x140102f88
lea ecx, [rdi + 0x7e]
movzx eax, cl
and al, bl
add al, al
sub cl, al
lea r11d, [rbx + rcx]
sub r11b, 0x72
jmp 0x140102fd0
lea rax, [r9 + 1]
cmp r8, rax
je 0x140103830
inc rax
cmp r8, rax
je 0x14010380e
lea rax, [r9 + 6]
cmp r8, rax
je 0x1401037f5
lea rax, [r9 + 7]
cmp r8, rax
je 0x1401037d7
lea rax, [r9 + 9]
cmp r8, rax
je 0x1401037b0
nop dword [rax + rax]
lea rax, [r9 + r8]
cmp rax, rdi
jbe 0x140103505
nop dword [rax]
lea rax, [r9 + 0x200]
cmp r8, rax
je 0x1401034e7
lea rax, [r9 + 2]
cmp r8, rax
je 0x1401034c5
lea rax, [r9 + 3]
cmp r8, rax
je 0x1401034a1
lea rax, [r9 + 0x40]
cmp r8, rax
je 0x140103483
lea rax, [r9 + 0x42]
cmp r8, rax
je 0x140103467
lea rax, [r9 + 0x5a]
cmp r8, rax
je 0x140103449
lea rax, [r9 + 0x2a]
cmp r8, rax
je 0x140103430
lea rax, [r9 + 0x10]
cmp r8, rax
je 0x140103417
lea rax, [r9 + 0x20]
cmp r8, rax
je 0x1401033eb
lea rax, [r9 + 0x28]
cmp r8, rax
je 0x140102fe0
lea r8, [r9 + 0x200]
lea r9, [r8 + 0x7a]
lea rax, [r9 + 2]
cmp r8, rax
jb 0x1401039bd
lea rax, [r9 + 3]
cmp r8, rax
jb 0x14010399d
lea rax, [r9 + 4]
cmp r8, rax
jb 0x1401031bf
lea rax, [r9 + 0x42]
cmp r8, rax
jb 0x1401031a6
lea rax, [r9 + 0x64]
cmp r8, rax
jb 0x140103188
lea rax, [r9 + 0x2a]
cmp r8, rax
jb 0x1401033a4
lea rax, [r9 + 1]
cmp r8, rax
jb 0x140103360
lea rax, [r9 + 0x20]
cmp r8, rax
jb 0x14010331e
lea rax, [r9 + 0x28]
cmp r8, rax
jb 0x1401032fd
lea rax, [r9 + 0x7a]
cmp r8, rax
jb 0x140102fe0
lea r8, [r9 + 0x3e8]
lea r9, [r8 + 0x41]
lea rax, [r9 + 3]
cmp r8, rax
ja 0x1401032d1
lea rax, [r9 + 4]
cmp r8, rax
ja 0x1401032b7
lea rax, [r9 + 0x42]
cmp r8, rax
ja 0x14010329c
lea rax, [r9 + 0x64]
cmp r8, rax
ja 0x14010327e
lea rax, [r9 + 0x2a]
cmp r8, rax
ja 0x140103262
lea rax, [r9 + 1]
cmp r8, rax
ja 0x140103240
lea rax, [r9 + 2]
cmp r8, rax
ja 0x14010321c
lea rax, [r9 + 0x28]
cmp r8, rax
ja 0x1401031fa
lea rax, [r9 + 0x40]
cmp r8, rax
ja 0x1401031d8
lea rax, [r9 + 0x41]
cmp r8, rax
ja 0x140102fe0
lea r8, [r9 + 3]
lea r9, [r8 + 0x5a]
jmp 0x140102fe0
lea edx, [rdi + 0x42]
movzx eax, dl
and al, bl
mov ecx, Ordinal_27
sub cl, al
lea r11d, [rcx + rcx]
add r11b, dl
add r11b, bl
jmp 0x140102fd0
lea ecx, [rdi + 0x36]
movzx eax, cl
and al, bl
add al, al
sub cl, al
lea r11d, [rbx + rcx]
sub r11b, 0x7a
jmp 0x140102f60
lea ecx, [rdi + 0x2a]
movzx eax, cl
and al, bl
add al, al
sub cl, al
lea r11d, [rbx + rcx]
sub r11b, 0x26
jmp 0x140102ef1
lea edx, [rdi - 0x10]
movzx eax, bl
and al, dl
mov ecx, gethostname
sub cl, al
lea r11d, [rcx + rcx]
add r11b, bl
add r11b, dl
movzx r10d, dil
jmp 0x140103869
lea ecx, [rdi - 0x1c]
movzx eax, bl
and al, cl
add al, al
sub bl, al
lea r11d, [rcx + rbx]
sub r11b, 0x3c
inc r9
dec rdi
inc rdi
jmp 0x140102ee2
lea edx, [rdi - 0x28]
movzx eax, bl
and al, dl
mov ecx, listen
sub cl, al
lea r11d, [rcx + rcx]
add r11b, bl
add r11b, dl
dec rdi
inc rdi
jmp 0x140102ee2
lea edx, [rdi - 0x34]
movzx eax, bl
and al, dl
mov ecx, gethostname
sub cl, al
lea r11d, [rcx + rcx]
add r11b, bl
add r11b, dl
movzx r10d, dil
jmp 0x140103770
lea ecx, [rdi - 0x40]
movzx eax, bl
and al, cl
add al, al
sub bl, al
lea r11d, [rcx + rbx]
sub r11b, 0x40
add r8, r9
jmp 0x1401038a9
lea edx, [rdi - 0x4c]
movzx eax, bl
and al, dl
mov ecx, 0xa
sub cl, al
lea r11d, [rcx + rcx]
add r11b, bl
add r11b, dl
jmp 0x1401038a9
lea edx, [rdi - 0x58]
movzx eax, bl
and al, dl
mov ecx, 0x34
sub cl, al
lea r11d, [rcx + rcx]
add r11b, bl
jmp 0x1401038e6
lea edx, [rdi - 0x64]
movzx eax, bl
and al, dl
add al, al
movzx r11d, bl
sub r11b, al
sub r11b, 0x44
jmp 0x140103935
lea edx, [rdi - 0x70]
movzx eax, bl
and al, dl
mov ecx, 8
sub cl, al
lea r11d, [rcx + rcx]
add r11b, bl
add r11b, dl
movzx eax, byte [rsp + rdi + 0x30]
add rax, r9
add rdi, rax
inc rdi
jmp 0x140102ee2
lea ecx, [rdi + 0x72]
movzx eax, cl
and al, bl
add al, al
sub cl, al
lea r11d, [rbx + rcx]
sub r11b, 0x1e
mov byte [rsp + rdi + 0x30], r11b
inc rdi
jmp 0x140102ee2
lea edx, [rdi + 0x66]
movzx eax, dl
and al, bl
mov ecx, reloc.WLDAP32.dll_Ordinal_27
sub cl, al
lea r11d, [rcx + rcx]
add r11b, dl
add r11b, bl
cmp r9, 4
jb 0x140103311
movzx r10d, dil
lea edx, [r10 + 0x64]
movzx eax, bl
and al, dl
add al, al
movzx ecx, bl
sub cl, al
add cl, dl
lea r11d, [rcx*2 - 0x78]
jmp 0x140103869
lea ecx, [rdi + 0x5a]
movzx eax, cl
and al, bl
add al, al
sub cl, al
lea r11d, [rbx + rcx]
sub r11b, 0x76
cmp r8, 0x400
jae 0x14010374e
lea rax, [r9 + 0x5a]
cmp r8, rax
jbe 0x1401036a5
lea ecx, [rdi - 0x14]
movzx eax, cl
and al, bl
add al, al
sub cl, al
lea r11d, [rbx + rcx]
sub r11b, 0x74
jmp 0x140103337
lea ecx, [rdi + 0x4e]
movzx eax, cl
and al, bl
add al, al
sub cl, al
lea r11d, [rbx + rcx]
sub r11b, 0x22
lea rax, [r9 + r8]
cmp rax, 0x3e8
je 0x140103793
lea rax, [r9 + 0x41]
cmp r8, rax
jbe 0x140103602
lea ecx, [rdi + 0x6e]
movzx eax, cl
and al, bl
add al, al
sub cl, al
lea r11d, [rbx + rcx]
sub r11b, 2
jmp 0x140103374
lea edx, [rdi - 0xc]
movzx eax, dl
and al, bl
mov ecx, Ordinal_46
sub cl, al
lea r11d, [rcx + rcx]
add r11b, dl
add r11b, bl
movzx eax, byte [rsp + rdi + 0x30]
add rax, r9
add rdi, rax
inc rdi
jmp 0x140102ee2
lea ecx, [rdi - 0x18]
movzx eax, cl
and al, bl
add al, al
sub cl, al
lea r11d, [rbx + rcx]
sub r11b, 0x58
jmp 0x140103938
lea ecx, [rdi - 0x24]
movzx eax, cl
and al, bl
add al, al
sub cl, al
lea r11d, [rbx + rcx]
sub r11b, 4
jmp 0x1401038e9
lea edx, [rdi - 0x30]
movzx eax, dl
and al, bl
mov ecx, Ordinal_41
sub cl, al
lea r11d, [rcx + rcx]
add r11b, dl
add r11b, bl
jmp 0x1401038a9
lea ecx, [rdi - 0x3c]
movzx eax, cl
and al, bl
add al, al
sub cl, al
lea r11d, [rbx + rcx]
sub r11b, 0x5c
add r8, r9
jmp 0x1401038a9
movzx r10d, dil
lea ecx, [r10 - 0x48]
movzx eax, cl
and al, bl
add al, al
sub cl, al
lea r11d, [rbx + rcx]
sub r11b, 8
jmp 0x140103770
lea edx, [rdi - 0x54]
movzx eax, dl
and al, bl
mov ecx, Ordinal_41
sub cl, al
lea r11d, [rcx + rcx]
add r11b, dl
add r11b, bl
dec rdi
inc rdi
jmp 0x140102ee2
lea ecx, [rdi - 0x60]
movzx eax, cl
and al, bl
add al, al
sub cl, al
lea r11d, [rbx + rcx]
sub r11b, 0x60
inc r9
dec rdi
inc rdi
jmp 0x140102ee2
movzx r10d, dil
lea ecx, [r10 - 0x6c]
movzx eax, cl
and al, bl
add al, al
sub cl, al
lea r11d, [rbx + rcx]
sub r11b, 0xc
jmp 0x140103869
lea rax, [r9 + 0x3e8]
cmp r8, rax
jae 0x14010352a
lea ecx, [rdi + 6]
movzx eax, cl
and al, bl
add al, al
sub cl, al
lea r11d, [rbx + rcx]
sub r11b, 0x2a
jmp 0x1401033b8
lea rax, [r9 + 1]
cmp r8, rax
jne 0x14010355f
lea edx, [rdi - 4]
movzx eax, dl
and al, bl
mov ecx, select
sub cl, al
lea r11d, [rcx + rcx]
add r11b, dl
add r11b, bl
movzx eax, byte [rsp + rdi + 0x30]
add rax, r9
add rdi, rax
inc rdi
jmp 0x140102ee2
inc rax
cmp r8, rax
jne 0x140103580
lea ecx, [rdi + 8]
movzx eax, cl
and al, bl
add al, al
sub cl, al
lea r11d, [rbx + rcx]
sub r11b, 0x38
jmp 0x140103938
lea rax, [r9 + 2]
cmp r8, rax
jne 0x1401035a5
lea ecx, [rdi + 0x2c]
movzx eax, cl
and al, bl
add al, al
sub cl, al
lea r11d, [rbx + rcx]
sub r11b, 0x34
add r8, r9
jmp 0x1401038a9
lea rax, [r9 + 7]
cmp r8, rax
jne 0x1401035d2
lea edx, [rdi + 0x44]
movzx eax, dl
and al, bl
mov ecx, reloc.WS2_32.dll_select
sub cl, al
lea r11d, [rcx + rcx]
add r11b, dl
add r11b, bl
dec rdi
inc rdi
jmp 0x140102ee2
lea rax, [r9 + 9]
cmp r8, rax
jne 0x1401033b8
movzx r10d, dil
lea edx, [r10 + 0x5c]
movzx eax, dl
and al, bl
mov ecx, 0x3e
sub cl, al
lea r11d, [rcx + rcx]
add r11b, dl
add r11b, bl
jmp 0x140103869
lea rax, [r9 + 1]
cmp r8, rax
jne 0x140103629
movzx r10d, dil
lea ecx, [r10 + 0x7a]
movzx eax, cl
and al, bl
add al, al
sub cl, al
lea r11d, [rbx + rcx]
sub r11b, 0x56
jmp 0x140103869
inc rax
cmp r8, rax
jne 0x140103655
lea edx, [rdi - 0x6e]
movzx eax, dl
and al, bl
mov ecx, 1
sub cl, al
lea r11d, [rcx + rcx]
add r11b, dl
add r11b, bl
dec rdi
inc rdi
jmp 0x140102ee2
lea rax, [r9 + 3]
cmp r8, rax
jne 0x14010367f
lea edx, [rdi - 0x56]
movzx eax, dl
and al, bl
mov ecx, reloc.WLDAP32.dll_Ordinal_45
sub cl, al
lea r11d, [rcx + rcx]
add r11b, dl
add r11b, bl
add r8, r9
jmp 0x1401038a9
lea rax, [r9 + 2]
cmp r8, rax
jne 0x140103374
lea ecx, [rdi - 0x3e]
movzx eax, cl
and al, bl
add al, al
sub cl, al
lea r11d, [rbx + rcx]
sub r11b, 0x4e
jmp 0x1401038e9
lea rcx, [r9 + 1]
cmp r8, rcx
jne 0x1401036da
lea edx, [rdi - 8]
movzx eax, dl
and al, bl
mov ecx, Ordinal_30
sub cl, al
lea r11d, [rcx + rcx]
add r11b, dl
add r11b, bl
movzx eax, byte [rsp + rdi + 0x30]
add rax, r9
add rdi, rax
inc rdi
jmp 0x140102ee2
lea rax, [r9 + 3]
cmp r8, rax
jne 0x1401036fc
lea ecx, [rdi + 0x10]
movzx eax, cl
and al, bl
add al, al
sub cl, al
lea r11d, [rbx + rcx]
sub r11b, 0x70
jmp 0x1401038e9
lea rax, [rcx + 1]
cmp r8, rax
jne 0x140103723
lea edx, [rdi + 0x1c]
movzx eax, dl
and al, bl
mov ecx, reloc.WLDAP32.dll_Ordinal_30
sub cl, al
lea r11d, [rcx + rcx]
add r11b, dl
add r11b, bl
jmp 0x1401038a9
lea rax, [r9 + 8]
cmp r8, rax
jne 0x140103337
movzx r10d, dil
lea ecx, [r10 + 0x58]
movzx eax, cl
and al, bl
add al, al
sub cl, al
lea r11d, [rbx + rcx]
sub r11b, 0x68
jmp 0x140103869
movzx r10d, dil
lea edx, [r10 + 0x70]
movzx eax, dl
and al, bl
add al, al
movzx r11d, byte [rsp + rdi + 0x30]
sub r11b, al
sub r11b, 0x10
add r11b, dl
add r11b, bl
add r10b, 0x76
movzx eax, bl
and al, r10b
add al, al
sub bl, al
sub bl, 0x3a
add bl, r11b
add bl, r10b
mov byte [rsp + rdi + 0x30], bl
add r8, r9
jmp 0x1401038a9
lea ecx, [rdi + 0x7c]
movzx eax, cl
and al, bl
add al, al
sub cl, al
sub cl, byte [rsp + rdi + 0x30]
lea r11d, [rbx + rcx]
sub r11b, 0x64
jmp 0x1401038e9
lea ecx, [rdi - 0x16]
movzx eax, cl
and al, bl
add al, al
sub cl, al
lea r11d, [rbx + rcx]
sub r11b, 0x66
movzx eax, byte [rsp + rdi + 0x30]
add rax, r9
add rdi, rax
inc rdi
jmp 0x140102ee2
lea edx, [rdi - 0x2e]
movzx eax, dl
and al, bl
mov ecx, reloc.WLDAP32.dll_Ordinal_33
sub cl, al
lea r11d, [rcx + rcx]
add r11b, dl
add r11b, bl
jmp 0x1401038e9
lea ecx, [rdi - 0x3a]
movzx eax, cl
and al, bl
add al, al
sub cl, al
lea r11d, [rbx + rcx]
sub r11b, 0x6a
jmp 0x1401038a9
lea ecx, [rdi - 0x6a]
movzx eax, cl
and al, bl
add al, al
sub cl, al
lea r11d, [rbx + rcx]
sub r11b, 0x1a
inc r9
dec rdi
inc rdi
jmp 0x140102ee2
movzx r10d, dil
lea edx, [r10 - 0x76]
movzx eax, dl
and al, bl
mov ecx, Ordinal_33
sub cl, al
lea r11d, [rcx + rcx]
add r11b, dl
add r11b, bl
jmp 0x140103869
movzx r10d, dil
lea ecx, [r10 + 0x72]
movzx eax, cl
and al, bl
add al, al
sub cl, al
lea r11d, [rbx + rcx]
sub r11b, 0x1e
add r10b, 0x6a
movzx eax, bl
and al, r10b
mov ecx, reloc.WS2_32.dll_listen
sub cl, al
add cl, cl
add cl, bl
add cl, r10b
mov byte [rsp + rdi + 0x30], cl
inc r9
dec rdi
inc rdi
jmp 0x140102ee2
lea rcx, [rdi + r12]
movzx eax, cl
and al, r10b
add al, al
sub cl, al
lea r11d, [r10 + rcx]
sub r11b, 0x7a
movzx eax, r11b
mov rcx, 0xffffffffffffffff
sub rcx, rax
add rdi, rcx
inc rdi
jmp 0x140102ee2
movabs rdx, 0x10f46a14fafb532a
add rdx, rdi
movzx ebx, r10b
movzx eax, dl
and al, r10b
add al, al
movzx r11d, r10b
sub r11b, al
sub r11b, 0x26
add r11b, dl
lea edx, [rdi - 0x7e]
movzx eax, bl
and al, dl
mov ecx, reloc.WS2_32.dll_gethostname
sub cl, al
add cl, cl
add cl, bl
add cl, dl
movzx eax, cl
mov byte [rsp + rdi + 0x30], al
inc r9
add rax, r9
sub rdi, rax
jmp 0x140103938
movabs rdx, 0x9e65705820fca91e
add rdx, rdi
movzx ebx, r10b
movzx eax, dl
and al, r10b
mov ecx, reloc.WS2_32.dll_socket
sub cl, al
lea r11d, [rcx + rcx]
add r11b, r10b
add r11b, dl
lea edx, [rdi - 0x78]
movzx eax, bl
and al, dl
mov ecx, 0x24
sub cl, al
add cl, cl
add cl, bl
add cl, dl
mov byte [rsp + rdi + 0x30], cl
inc r8
mov rax, 0xffffffffffffffff
sub rax, r8
add rdi, rax
movzx eax, byte [rsp + rdi + 0x30]
add rax, r9
add rdi, rax
inc rdi
jmp 0x140102ee2
lea rcx, [rdi + r13]
movzx eax, cl
and al, r10b
add al, al
sub cl, al
lea r11d, [r10 + rcx]
sub r11b, 0x7e
movzx eax, byte [rsp + rdi + 0x30]
add rax, r9
add rdi, rax
inc rdi
jmp 0x140102ee2
add dil, 0x1e
movzx eax, bl
and al, dil
mov ecx, reloc.WS2_32.dll_socket
sub cl, al
lea r11d, [rcx + rcx]
add r11b, bl
add r11b, dil
jmp 0x140102ee0
add dil, 0x12
movzx eax, bl
and al, dil
add al, al
sub bl, al
lea r11d, [rdi + rbx]
sub r11b, 0x7e
jmp 0x140102ed0
lea rdx, [rbp + 0x14d1f38]
jmp 0x1401039ef
lea rdx, [rbp + 0x4c743e]
jmp 0x1401039ef
lea rdx, [rsp + 0x30]
mov dword [rsp + 0x28], 4
lea rax, [rbp + 0x32]
mov qword [rsp + 0x20], rax
mov r9d, 4
xor r8d, r8d
mov rcx, qword [rbp + 0x28]
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
test eax, eax
jne 0x140105063
mov byte [rbp + 0x30], 3
mov dword [rbp - 0x28], 0xc93bc52b
mov word [rbp - 0x24], 0x45d8
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp - 0x22], xmm0
mov qword [rbp - 0x12], rax
mov dword [rbp - 0xa], eax
mov byte [rbp - 6], al
movabs rsi, 0xc16ca6d9194d94c
movabs r15, 0x6ccd1dda1e3ba3ac
movabs r13, 0x549f88fefb11f114
movabs r12, 0x24445f48b4be8be4
movzx edx, byte [rbp + 0x30]
nop dword [rax + rax]
mov r8, qword [0x140220a80]
mov r9, qword [0x140220a78]
nop
xor ebx, ebx
cmp rbx, 0x23
jae 0x14010450c
movzx r11d, byte [rbp + rbx - 0x28]
mov r10, r11
cmp r8, rbx
ja 0x140104503
lea rax, [r9 + 1]
cmp r8, rax
jae 0x140103ac0
lea rcx, [rbx + rsi]
mov rax, r11
and rax, rcx
imul rdx, rax, 0xfffffffffffffffe
add rdx, r11
add rdx, rcx
sub dl, 0x14
jmp 0x140103af0
je 0x1401044a0
lea rax, [r9 + 2]
cmp r8, rax
je 0x140104427
lea rax, [r9 + 3]
cmp r8, rax
je 0x1401043f7
lea rax, [r9 + 6]
cmp r8, rax
je 0x1401043ba
nop dword [rax]
cmp r9, rbx
ja 0x1401044fa
lea rax, [r9 + 0x61]
cmp r8, rax
jae 0x140103b1b
lea edx, [rbx + 0x3c]
movzx eax, dl
and al, r11b
mov ecx, reloc.WLDAP32.dll_Ordinal_46
sub cl, al
add cl, cl
add dl, cl
add dl, r11b
jmp 0x140103b50
lea rax, [r9 + 1]
cmp r8, rax
je 0x140104374
lea rax, [r9 + 3]
cmp r8, rax
je 0x140104355
lea rax, [r9 + 4]
cmp r8, rax
je 0x14010433a
lea rax, [r9 + 2]
cmp r8, rax
je 0x14010431e
nop
lea rax, [r9 + r8]
cmp rax, rbx
jbe 0x140104073
nop dword [rax]
lea rax, [r9 + 0x2a]
cmp r8, rax
je 0x140104061
lea rax, [r9 + 0x28]
cmp r8, rax
je 0x14010403c
lea rax, [r9 + 0x5a]
cmp r8, rax
je 0x14010401a
lea rax, [r9 + 0x20]
cmp r8, rax
je 0x140103ffc
lea rcx, [r9 + 0x41]
cmp r8, rcx
je 0x140103fe0
lea rax, [r9 + 0x10]
cmp r8, rax
je 0x140103fc7
lea rax, [r9 + 0x7a]
cmp r8, rax
je 0x140103fab
lea rax, [r9 + 0xa]
cmp r8, rax
je 0x140103f8f
lea rax, [r9 + 0x61]
cmp r8, rax
je 0x140103f65
lea rax, [r9 + 9]
cmp r8, rax
je 0x140103b60
mov r8, rcx
lea r9, [rcx + 4]
lea rax, [r9 + 0x10]
cmp rcx, rax
jb 0x1401044e1
lea rax, [r9 + 0x7a]
cmp rcx, rax
jb 0x1401044c8
lea rax, [r9 + 0xa]
cmp rcx, rax
jb 0x140103d48
lea rax, [r9 + 0x61]
cmp rcx, rax
jb 0x140103d2c
lea rcx, [r9 + 9]
cmp r8, rcx
jb 0x140103d10
lea rax, [r9 + 0x1000]
cmp r8, rax
jb 0x140103f1d
lea rax, [r9 + 8]
cmp r8, rax
jb 0x140103edc
lea rax, [r9 + 0x400]
cmp r8, rax
jb 0x140103e9c
lea rax, [r9 + 6]
cmp r8, rax
jb 0x140103e7c
lea rax, [r9 + 0x3e8]
cmp r8, rax
jb 0x140103b60
mov r8, rcx
lea r9, [rcx + 0x42]
lea rax, [r9 + 0x1000]
cmp rcx, rax
ja 0x140103e52
lea rax, [r9 + 8]
cmp rcx, rax
ja 0x140103e39
lea rax, [r9 + 0x400]
cmp rcx, rax
ja 0x140103e20
lea rax, [r9 + 6]
cmp rcx, rax
ja 0x140103e07
lea rcx, [r9 + 0x3e8]
cmp r8, rcx
ja 0x140103de8
lea rax, [r9 + 5]
cmp r8, rax
ja 0x140103dc8
lea rax, [r9 + 0x200]
cmp r8, rax
ja 0x140103da6
lea rax, [r9 + 4]
cmp r8, rax
ja 0x140103d81
lea rax, [r9 + 0x80]
cmp r8, rax
ja 0x140103d64
lea rax, [r9 + 3]
cmp r8, rax
ja 0x140103b60
mov r8, rcx
lea r9, [rcx + 0x5a]
jmp 0x140103b60
lea edx, [rbx + 0x44]
movzx eax, dl
and al, r11b
mov ecx, reloc.WS2_32.dll_select
sub cl, al
add cl, cl
add dl, cl
add dl, r11b
jmp 0x140103b50
lea edx, [rbx - 0x54]
movzx eax, dl
and al, r11b
mov ecx, Ordinal_41
sub cl, al
add cl, cl
add dl, cl
add dl, r11b
jmp 0x140103af0
lea edx, [rbx + 0x14]
movzx eax, dl
and al, r11b
mov ecx, Ordinal_60
sub cl, al
add cl, cl
add dl, cl
add dl, r11b
jmp 0x140103a92
lea ecx, [rbx - 0x20]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea edx, [r11 + rcx]
sub dl, 0x20
movzx r10d, bl
jmp 0x140104390
lea edx, [rbx + 0x48]
movzx eax, dl
and al, r11b
mov ecx, 4
sub cl, al
add cl, cl
add dl, cl
add dl, r11b
inc r9
dec rbx
inc rbx
jmp 0x140103a82
lea edx, [rbx - 0x50]
movzx eax, dl
and al, r11b
mov ecx, Ordinal_27
sub cl, al
add cl, cl
add dl, cl
add dl, r11b
dec rbx
inc rbx
jmp 0x140103a82
lea edx, [rbx + 0x18]
movzx eax, dl
and al, r11b
mov ecx, Ordinal_46
sub cl, al
add cl, cl
add dl, cl
add dl, r11b
movzx r10d, bl
jmp 0x1401043d3
lea ecx, [rbx + 0x80]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea edx, [r11 + rcx]
add dl, 0x80
add r8, r9
jmp 0x14010440f
lea ecx, [rbx - 0x18]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea edx, [r11 + rcx]
sub dl, 0x58
jmp 0x14010440f
lea ecx, [rbx + 0x50]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea edx, [r11 + rcx]
sub dl, 0x30
jmp 0x140104443
lea ecx, [rbx - 0x48]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea edx, [r11 + rcx]
sub dl, 8
jmp 0x140104466
lea edx, [rbx + 0x20]
movzx eax, dl
and al, r11b
mov ecx, reloc.WS2_32.dll_recv
sub cl, al
add cl, cl
add dl, cl
add dl, r11b
movzx eax, byte [rbp + rbx - 0x28]
add rax, r9
add rbx, rax
inc rbx
jmp 0x140103a82
lea ecx, [rbx - 0x5c]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea edx, [r11 + rcx]
sub dl, 0x7c
mov byte [rbp + rbx - 0x28], dl
inc rbx
jmp 0x140103a82
lea ecx, [rbx + 0xc]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea edx, [r11 + rcx]
sub dl, 0x54
cmp r9, 0x3e8
jb 0x140103e90
movzx r10d, bl
lea ecx, [r10 + 0x48]
movzx eax, cl
and al, r11b
mov edx, 4
sub dl, al
add dl, dl
add dl, cl
add dl, r11b
add dl, dl
jmp 0x140104390
lea ecx, [rbx + 0x74]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea edx, [r11 + rcx]
sub dl, 0x2c
cmp r8, 9
jae 0x1401042dd
lea rax, [r9 + 0x42]
cmp r8, rax
jbe 0x14010421f
lea ecx, [rbx + 0x58]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea edx, [r11 + rcx]
sub dl, 0x68
jmp 0x140103eb0
lea ecx, [rbx - 0x24]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea edx, [r11 + rcx]
sub dl, 4
lea rax, [r9 + r8]
cmp rax, 0x41
je 0x140104301
lea rcx, [r9 + 4]
cmp r8, rcx
jbe 0x140104168
lea edx, [rbx + 0x1c]
movzx eax, dl
and al, r11b
mov ecx, reloc.WLDAP32.dll_Ordinal_30
sub cl, al
add cl, cl
add dl, cl
add dl, r11b
jmp 0x140103ef0
lea edx, [rbx + 0x68]
movzx eax, dl
and al, r11b
mov ecx, reloc.WS2_32.dll_sendto
sub cl, al
add cl, cl
add dl, cl
add dl, r11b
movzx eax, byte [rbp + rbx - 0x28]
add rax, r9
add rbx, rax
inc rbx
jmp 0x140103a82
lea edx, [rbx - 0x30]
movzx eax, dl
and al, r11b
mov ecx, Ordinal_41
sub cl, al
add cl, cl
add dl, cl
add dl, r11b
jmp 0x140104466
lea edx, [rbx + 0x38]
movzx eax, dl
and al, r11b
mov ecx, reloc.WLDAP32.dll_Ordinal_60
sub cl, al
add cl, cl
add dl, cl
add dl, r11b
jmp 0x140104443
lea ecx, [rbx - 0x60]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea edx, [r11 + rcx]
sub dl, 0x60
jmp 0x14010440f
lea ecx, [rbx + 8]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea edx, [r11 + rcx]
sub dl, 0x38
add r8, r9
jmp 0x14010440f
movzx r10d, bl
lea ecx, [r10 + 0x70]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea edx, [r11 + rcx]
sub dl, 0x10
jmp 0x1401043d3
lea edx, [rbx - 0x28]
movzx eax, dl
and al, r11b
mov ecx, listen
sub cl, al
add cl, cl
add dl, cl
add dl, r11b
dec rbx
inc rbx
jmp 0x140103a82
lea edx, [rbx + 0x40]
movzx eax, dl
and al, r11b
mov ecx, reloc.WLDAP32.dll_Ordinal_32
sub cl, al
add cl, cl
add dl, cl
add dl, r11b
inc r9
dec rbx
inc rbx
jmp 0x140103a82
movzx r10d, bl
lea edx, [r10 - 0x58]
mov ecx, 0x34
jmp 0x140104381
lea rax, [r9 + 0x2a]
cmp r8, rax
jae 0x140104095
lea ecx, [rbx + 0x4c]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea edx, [r11 + rcx]
sub dl, 0x14
jmp 0x140103f31
lea rax, [r9 + 1]
cmp r8, rax
jne 0x1401040c5
lea ecx, [rbx + 0x78]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea edx, [r11 + rcx]
sub dl, 0x48
movzx eax, byte [rbp + rbx - 0x28]
add rax, r9
add rbx, rax
inc rbx
jmp 0x140103a82
inc rax
cmp r8, rax
jne 0x1401040e9
lea edx, [rbx + 0x40]
movzx eax, dl
and al, r11b
mov ecx, reloc.WLDAP32.dll_Ordinal_32
sub cl, al
add cl, cl
add dl, cl
add dl, r11b
jmp 0x14010440f
lea rax, [r9 + 5]
cmp r8, rax
jne 0x140104111
lea edx, [rbx - 0x28]
movzx eax, dl
and al, r11b
mov ecx, listen
sub cl, al
add cl, cl
add dl, cl
add dl, r11b
add r8, r9
jmp 0x14010440f
lea rax, [r9 + 6]
cmp r8, rax
jne 0x140104139
lea ecx, [rbx + 8]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea edx, [r11 + rcx]
sub dl, 0x38
dec rbx
inc rbx
jmp 0x140103a82
lea rax, [r9 + 3]
cmp r8, rax
jne 0x140103f31
lea ecx, [rbx - 0x60]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea edx, [r11 + rcx]
sub dl, 0x60
inc r9
dec rbx
inc rbx
jmp 0x140103a82
lea rax, [r9 + 1]
cmp r8, rax
jne 0x140104183
movzx r10d, bl
lea edx, [r10 - 0x4c]
mov ecx, 0xa
jmp 0x140104381
lea rax, [r9 + 5]
cmp r8, rax
jne 0x1401041a8
lea edx, [rbx - 0x54]
movzx eax, dl
and al, r11b
mov ecx, Ordinal_41
sub cl, al
add cl, cl
add dl, cl
add dl, r11b
jmp 0x14010440f
cmp r8, rcx
jne 0x1401041c9
lea edx, [rbx + 0x44]
movzx eax, dl
and al, r11b
mov ecx, reloc.WS2_32.dll_select
sub cl, al
add cl, cl
add dl, cl
add dl, r11b
jmp 0x140104443
lea rax, [r9 + 3]
cmp r8, rax
jne 0x1401041eb
lea ecx, [rbx - 0x24]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea edx, [r11 + rcx]
sub dl, 4
jmp 0x140104466
lea rax, [r9 + 8]
cmp r8, rax
jne 0x140103ef0
lea ecx, [rbx + 0x74]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea edx, [r11 + rcx]
sub dl, 0x2c
movzx eax, byte [rbp + rbx - 0x28]
add rax, r9
add rbx, rax
inc rbx
jmp 0x140103a82
lea rcx, [r9 + 1]
cmp r8, rcx
jne 0x140104252
lea edx, [rbx - 0x10]
movzx eax, dl
and al, r11b
mov ecx, gethostname
sub cl, al
add cl, cl
add dl, cl
add dl, r11b
movzx eax, byte [rbp + rbx - 0x28]
add rax, r9
add rbx, rax
inc rbx
jmp 0x140103a82
lea rax, [r9 + 2]
cmp r8, rax
jne 0x140104277
lea edx, [rbx + 0x20]
movzx eax, dl
and al, r11b
mov ecx, reloc.WS2_32.dll_recv
sub cl, al
add cl, cl
add dl, cl
add dl, r11b
jmp 0x140104443
lea rax, [rcx + 1]
cmp r8, rax
jne 0x140104299
lea ecx, [rbx - 0x48]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea edx, [r11 + rcx]
sub dl, 8
jmp 0x14010440f
lea rax, [r9 + 5]
cmp r8, rax
jne 0x1401042be
lea ecx, [rbx + 0x50]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea edx, [r11 + rcx]
sub dl, 0x30
add r8, r9
jmp 0x14010440f
lea rax, [r9 + 7]
cmp r8, rax
jne 0x140103eb0
movzx r10d, bl
lea edx, [r10 - 0x50]
mov ecx, Ordinal_27
jmp 0x140104381
movzx r10d, bl
lea edx, [r10 - 0x20]
movzx eax, dl
and al, r11b
add al, al
movzx ecx, byte [rbp + rbx - 0x28]
sub cl, al
sub dl, 0x20
add dl, cl
add dl, r11b
jmp 0x1401043d3
lea ecx, [rbx + 0x78]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
sub cl, byte [rbp + rbx - 0x28]
lea edx, [r11 + rcx]
sub dl, 0x48
jmp 0x140104443
lea edx, [rbx - 4]
movzx eax, dl
and al, r11b
mov ecx, select
sub cl, al
add cl, cl
add dl, cl
add dl, r11b
jmp 0x140104466
movzx r10d, bl
lea ecx, [r10 - 0x64]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea edx, [r11 + rcx]
sub dl, 0x44
jmp 0x1401043d3
lea ecx, [rbx + 4]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea edx, [r11 + rcx]
sub dl, 0x1c
dec rbx
inc rbx
jmp 0x140103a82
movzx r10d, bl
lea edx, [r10 - 0x2c]
mov ecx, reloc.WLDAP32.dll_Ordinal_26
movzx eax, dl
and al, r11b
sub cl, al
add cl, cl
add dl, cl
add dl, r11b
sub r10b, 0x6c
movzx eax, r11b
and al, r10b
add al, al
sub r11b, al
sub r11b, 0xc
add r11b, r10b
mov byte [rbp + rbx - 0x28], r11b
inc r9
dec rbx
inc rbx
jmp 0x140103a82
movzx r10d, bl
lea ecx, [r10 - 0x24]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea edx, [r11 + rcx]
sub dl, 4
add r10b, 0x2c
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
sub r10b, 0x34
add r10b, dl
add r10b, r11b
mov byte [rbp + rbx - 0x28], r10b
add r8, r9
jmp 0x14010440f
lea rcx, [rbx + r15]
movzx eax, cl
and al, r10b
mov edx, Ordinal_41
sub dl, al
add dl, dl
add dl, cl
add dl, r10b
movzx eax, dl
mov rcx, 0xffffffffffffffff
sub rcx, rax
add rbx, rcx
inc rbx
jmp 0x140103a82
lea rdx, [rbx + r13]
movzx r11d, r10b
movzx eax, dl
and al, r10b
mov ecx, Ordinal_60
sub cl, al
add cl, cl
add cl, r10b
add dl, cl
lea ecx, [rbx - 0x3c]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
sub cl, 0x5c
add cl, r11b
movzx eax, cl
mov byte [rbp + rbx - 0x28], al
inc r9
add rax, r9
sub rbx, rax
lea ecx, [rbx + 0x10]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
sub cl, 0x70
add cl, r11b
mov byte [rbp + rbx - 0x28], cl
inc r8
mov rax, 0xffffffffffffffff
sub rax, r8
add rbx, rax
movzx eax, byte [rbp + rbx - 0x28]
add rax, r9
add rbx, rax
inc rbx
jmp 0x140103a82
lea rcx, [rbx + r12]
movzx eax, cl
and al, r10b
add al, al
sub cl, al
lea edx, [r10 + rcx]
sub dl, 0x3c
movzx eax, byte [rbp + rbx - 0x28]
add rax, r9
add rbx, rax
inc rbx
jmp 0x140103a82
add bl, 0x7c
movzx eax, bl
and al, r11b
add al, al
sub bl, al
lea edx, [r11 + rbx]
sub dl, 0x64
jmp 0x140103a80
sub bl, 0x1c
movzx eax, bl
and al, r11b
add al, al
sub bl, al
lea edx, [r11 + rbx]
sub dl, 0x3c
jmp 0x140103a70
lea rdx, [rbp + 0x141fee8]
jmp 0x140104510
lea rdx, [rbp + 0x56d834]
jmp 0x140104510
lea rdx, [rbp - 0x28]
mov dword [rsp + 0x28], 4
lea rax, [rbp + 0x30]
mov qword [rsp + 0x20], rax
mov r9d, 4
xor r8d, r8d
mov rcx, qword [rbp + 0x28]
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
test eax, eax
jne 0x140105063
mov rsi, qword [r14 + 0x10]
cmp qword [r14 + 0x18], 0xf
jbe 0x14010454a
mov r14, qword [r14]
mov dword [rbp - 0x50], 0xfaf3e6dd
mov dword [rbp - 0x4c], 0xe3ffcdfd
mov word [rbp - 0x48], 0x99f6
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp - 0x46], xmm0
mov qword [rbp - 0x36], rax
mov byte [rbp - 0x2e], al
movabs r15, 0x4e4253bbffe5d13
movabs r12, 0x2c054f19bff145ab
movabs r13, 0xeac6fb33ffb1739
movzx ebx, byte [rbp + 0x30]
mov rax, qword [0x140220a80]
mov r9, qword [0x140220a78]
nop
xor r11d, r11d
cmp r11, 0x23
jae 0x14010502e
movzx r10d, byte [rbp + r11 - 0x50]
mov r8, r10
cmp rax, r11
ja 0x140105025
lea rdx, [r9 + 1]
cmp rax, rdx
jae 0x1401045e1
lea rdx, [r11 + r15]
mov rcx, r10
and rcx, rdx
imul rbx, rcx, 0xfffffffffffffffe
add rbx, r10
add rbx, rdx
add bl, 0x7b
jmp 0x140104620
je 0x140104fbb
lea rcx, [r9 + 3]
cmp rax, rcx
je 0x140104f30
lea rcx, [rdx + 1]
cmp rax, rcx
je 0x140104f03
lea rcx, [r9 + 5]
cmp rax, rcx
je 0x140104ee2
lea rcx, [r9 + 8]
cmp rax, rcx
je 0x140104e9b
nop dword [rax + rax]
cmp r9, r11
ja 0x14010501c
lea rdx, [r9 + 1]
cmp rax, rdx
jae 0x140104649
lea edx, [r11 - 0x71]
movzx ecx, dl
and cl, r10b
add cl, cl
sub dl, cl
lea ebx, [r10 + rdx]
add bl, 0x17
jmp 0x140104690
je 0x140104e7f
lea rcx, [r9 + 3]
cmp rax, rcx
je 0x140104e5e
lea rcx, [rdx + 1]
cmp rax, rcx
je 0x140104e1a
lea rcx, [r9 + 2]
cmp rax, rcx
je 0x140104dfc
lea rcx, [r9 + 5]
cmp rax, rcx
je 0x140104dde
lea rcx, [r9 + 8]
cmp rax, rcx
je 0x140104db4
lea rcx, [r9 + rax]
cmp rcx, r11
jbe 0x1401049e4
nop dword [rax]
lea rcx, [r9 + 4]
cmp rax, rcx
je 0x1401049c5
lea rcx, [r9 + 0xa]
cmp rax, rcx
je 0x1401049a1
lea rcx, [r9 + 0x42]
cmp rax, rcx
je 0x140104980
lea rcx, [r9 + 0x400]
cmp rax, rcx
je 0x140104961
lea rcx, [r9 + 0x5a]
cmp rax, rcx
je 0x140104943
lea rax, [r9 + 0x42]
lea r9, [rax + 4]
lea rcx, [r9 + 0x400]
cmp rax, rcx
jb 0x140105000
lea rcx, [r9 + 0x5a]
cmp rax, rcx
jb 0x140104fe4
lea rcx, [r9 + 4]
cmp rax, rcx
jb 0x1401047fd
lea rcx, [r9 + 0xa]
cmp rax, rcx
jb 0x1401047df
lea rcx, [r9 + 0x42]
cmp rax, rcx
jb 0x1401047c1
lea rax, [r9 + 4]
lea r9, [rax + 0x400]
lea rcx, [r9 + 0xa]
cmp rax, rcx
ja 0x140104914
lea rcx, [r9 + 0x42]
cmp rax, rcx
ja 0x1401048f6
lea rcx, [r9 + 0x400]
cmp rax, rcx
ja 0x1401048d8
lea rcx, [r9 + 0x5a]
cmp rax, rcx
ja 0x1401048bd
lea rcx, [r9 + 0x40]
cmp rax, rcx
ja 0x14010489f
lea rcx, [r9 + 0x3e8]
cmp rax, rcx
ja 0x140104880
lea rcx, [r9 + 0x41]
cmp rax, rcx
ja 0x14010485f
lea rdx, [r9 + 3]
cmp rax, rdx
ja 0x14010483b
lea rcx, [r9 + 9]
cmp rax, rcx
ja 0x14010481c
mov rax, rdx
lea r9, [rdx + 0x3e8]
jmp 0x1401046a0
lea r8d, [r11 + 0x51]
movzx ecx, r10b
and cl, r8b
add cl, cl
movzx ebx, r10b
sub bl, cl
sub bl, 0x37
add bl, r8b
jmp 0x140104690
lea r8d, [r11 + 0x2b]
movzx ecx, r10b
and cl, r8b
add cl, cl
movzx ebx, r10b
sub bl, cl
sub bl, 0x2d
add bl, r8b
jmp 0x140104620
lea r8d, [r11 + 5]
movzx ecx, r10b
and cl, r8b
add cl, cl
movzx ebx, r10b
sub bl, cl
sub r8b, 0x23
add bl, r8b
jmp 0x1401045b3
lea r8d, [r11 + 0x78]
movzx ecx, r10b
and cl, r8b
add cl, cl
movzx ebx, r10b
sub bl, cl
sub bl, 0x48
movzx edi, r11b
jmp 0x140104eb5
lea edx, [r11 + 0x52]
movzx ecx, r10b
and cl, dl
add cl, cl
sub r10b, cl
lea ebx, [rdx + r10]
sub bl, 0x3e
inc r9
dec r11
inc r11
jmp 0x1401045a3
lea edx, [r11 + 0x2c]
movzx ecx, r10b
and cl, dl
add cl, cl
sub r10b, cl
lea ebx, [rdx + r10]
sub bl, 0x34
dec r11
inc r11
jmp 0x1401045a3
lea r8d, [r11 + 6]
movzx ecx, r10b
and cl, r8b
add cl, cl
movzx ebx, r10b
sub bl, cl
sub bl, 0x2a
movzx edi, r11b
jmp 0x140104e34
lea edx, [r11 - 0x20]
movzx ecx, r10b
and cl, dl
add cl, cl
sub r10b, cl
lea ebx, [rdx + r10]
sub bl, 0x20
add rax, r9
jmp 0x140104f18
lea edx, [r11 - 0x46]
movzx ecx, r10b
and cl, dl
add cl, cl
sub r10b, cl
lea ebx, [rdx + r10]
sub bl, 0x16
jmp 0x140104f18
lea r8d, [r11 - 0x6c]
movzx ecx, r10b
and cl, r8b
add cl, cl
movzx ebx, r10b
sub bl, cl
sub bl, 0xc
add bl, r8b
jmp 0x140104f52
lea r8d, [r11 + 0x6e]
movzx ecx, r10b
and cl, r8b
add cl, cl
movzx ebx, r10b
sub bl, cl
sub bl, 2
add bl, r8b
jmp 0x140104f7c
lea r8d, [r11 + 0x48]
movzx ecx, r10b
and cl, r8b
mov edx, 4
sub dl, cl
lea ebx, [rdx + rdx]
add bl, r10b
add bl, r8b
movzx ecx, byte [rbp + r11 - 0x50]
add rcx, r9
add r11, rcx
inc r11
jmp 0x1401045a3
lea edx, [r11 - 0x3e]
movzx ecx, r10b
and cl, dl
add cl, cl
sub r10b, cl
lea ebx, [rdx + r10]
sub bl, 0x4e
add rax, r9
jmp 0x140104f18
movzx edi, r11b
lea r8d, [rdi - 0x64]
movzx ecx, r10b
and cl, r8b
add cl, cl
movzx ebx, r10b
sub bl, cl
sub bl, 0x44
jmp 0x140104e34
lea edx, [r11 + 0x76]
movzx ecx, r10b
and cl, dl
add cl, cl
sub r10b, cl
lea ebx, [rdx + r10]
sub bl, 0x3a
dec r11
inc r11
jmp 0x1401045a3
lea edx, [r11 + 0x50]
movzx ecx, r10b
and cl, dl
add cl, cl
sub r10b, cl
lea ebx, [rdx + r10]
sub bl, 0x30
inc r9
dec r11
inc r11
jmp 0x1401045a3
movzx edi, r11b
lea r8d, [rdi + 0x2a]
movzx ecx, r10b
and cl, r8b
add cl, cl
movzx ebx, r10b
sub bl, cl
sub bl, 0x26
jmp 0x140104eb5
lea rcx, [r9 + 1]
cmp rax, rcx
jae 0x140104aa3
lea r8d, [r11 + 0x13]
movzx ecx, r10b
and cl, r8b
add cl, cl
movzx ebx, r10b
sub bl, cl
add bl, 0x7b
add bl, r8b
lea rcx, [r9 + rax]
cmp rcx, 0x1000
je 0x140104d91
lea rcx, [r9 + 0x10]
cmp rax, rcx
jbe 0x140104b7c
lea r8d, [r11 - 0x79]
movzx ecx, r10b
and cl, r8b
add cl, cl
movzx ebx, r10b
sub bl, cl
add bl, 0x4f
add bl, r8b
cmp rax, 0x10
jae 0x140104d6d
lea rcx, [r9 + 0x2a]
cmp rax, rcx
jbe 0x140104c73
lea r8d, [r11 + 0x16]
movzx ecx, r10b
and cl, r8b
mov edx, 0x33
sub dl, cl
lea ebx, [rdx + rdx]
add bl, r10b
add bl, r8b
cmp r9, 0x2a
jb 0x140104d60
movzx edi, r11b
lea r8d, [rdi - 0x6e]
movzx ecx, r10b
and cl, r8b
mov edx, 1
sub dl, cl
add dl, dl
add dl, r10b
add dl, r8b
lea ebx, [rdx + rdx]
jmp 0x140104eb8
jne 0x140104ad4
lea r8d, [r11 + 0x1e]
movzx ecx, r10b
and cl, r8b
mov edx, reloc.WS2_32.dll_socket
sub dl, cl
lea ebx, [rdx + rdx]
add bl, r10b
add bl, r8b
movzx ecx, byte [rbp + r11 - 0x50]
add rcx, r9
add r11, rcx
inc r11
jmp 0x1401045a3
inc rcx
cmp rax, rcx
jne 0x140104afc
lea r8d, [r11 + 0x44]
movzx ecx, r10b
and cl, r8b
mov edx, reloc.WS2_32.dll_select
sub dl, cl
lea ebx, [rdx + rdx]
add bl, r10b
add bl, r8b
jmp 0x140104f7c
lea rcx, [r9 + 2]
cmp rax, rcx
jne 0x140104b25
lea r8d, [r11 + 0x6a]
movzx ecx, r10b
and cl, r8b
mov edx, reloc.WS2_32.dll_listen
sub dl, cl
lea ebx, [rdx + rdx]
add bl, r10b
add bl, r8b
jmp 0x140104f52
lea rcx, [r9 + 3]
cmp rax, rcx
jne 0x140104b4e
lea r8d, [r11 - 0x70]
movzx ecx, r10b
and cl, r8b
mov edx, 8
sub dl, cl
lea ebx, [rdx + rdx]
add bl, r10b
add bl, r8b
jmp 0x140104f18
lea rcx, [r9 + 6]
cmp rax, rcx
jne 0x140104a0a
lea edx, [r11 + 2]
movzx ecx, r10b
and cl, dl
add cl, cl
sub r10b, cl
lea ebx, [rdx + r10]
sub bl, 0xe
dec r11
inc r11
jmp 0x1401045a3
lea rcx, [r9 + 1]
cmp rax, rcx
jne 0x140104ba4
movzx edi, r11b
lea r8d, [rdi - 0x53]
movzx ecx, r10b
and cl, r8b
add cl, cl
movzx ebx, r10b
sub bl, cl
add bl, 0x45
jmp 0x140104eb5
inc rcx
cmp rax, rcx
jne 0x140104bcb
movzx edi, r11b
lea r8d, [rdi + 0x1f]
movzx ecx, r10b
and cl, r8b
add cl, cl
movzx ebx, r10b
sub bl, cl
add bl, 0x27
jmp 0x140104e34
lea rcx, [r9 + 2]
cmp rax, rcx
jne 0x140104bf2
lea edx, [r11 + 0x45]
movzx ecx, r10b
and cl, dl
add cl, cl
sub r10b, cl
lea ebx, [rdx + r10]
add bl, 0x1d
add rax, r9
jmp 0x140104f18
lea rcx, [r9 + 5]
cmp rax, rcx
jne 0x140104c16
lea edx, [r11 + 0x6b]
movzx ecx, r10b
and cl, dl
add cl, cl
sub r10b, cl
lea ebx, [rdx + r10]
add bl, 0x13
jmp 0x140104f18
lea rcx, [r9 + 3]
cmp rax, rcx
jne 0x140104c3c
lea r8d, [r11 - 0x49]
movzx ecx, r10b
and cl, r8b
add cl, cl
movzx ebx, r10b
sub bl, cl
dec bl
add bl, r8b
jmp 0x140104f7c
lea rcx, [r9 + 6]
cmp rax, rcx
jne 0x140104a41
lea edx, [r11 - 0x23]
movzx ecx, r10b
and cl, dl
add cl, cl
sub r10b, cl
lea ebx, [rdx + r10]
sub bl, 0xb
movzx ecx, byte [rbp + r11 - 0x50]
add rcx, r9
add r11, rcx
inc r11
jmp 0x1401045a3
lea rcx, [r9 + 1]
cmp rax, rcx
jne 0x140104cab
lea r8d, [r11 + 0x3c]
movzx ecx, r10b
and cl, r8b
mov edx, reloc.WLDAP32.dll_Ordinal_46
sub dl, cl
lea ebx, [rdx + rdx]
add bl, r10b
add bl, r8b
movzx ecx, byte [rbp + r11 - 0x50]
add rcx, r9
add r11, rcx
inc r11
jmp 0x1401045a3
lea rcx, [r9 + 2]
cmp rax, rcx
jne 0x140104cd4
lea r8d, [r11 - 0x78]
movzx ecx, r10b
and cl, r8b
mov edx, 0x24
sub dl, cl
lea ebx, [rdx + rdx]
add bl, r10b
add bl, r8b
jmp 0x140104f52
lea rcx, [r9 + 3]
cmp rax, rcx
jne 0x140104d00
lea r8d, [r11 - 0x2c]
movzx ecx, r10b
and cl, r8b
mov edx, reloc.WLDAP32.dll_Ordinal_26
sub dl, cl
lea ebx, [rdx + rdx]
add bl, r10b
add bl, r8b
add rax, r9
jmp 0x140104f18
lea rcx, [r9 + 6]
cmp rax, rcx
jne 0x140104d2a
movzx edi, r11b
lea r8d, [rdi - 6]
movzx ecx, r10b
and cl, r8b
mov edx, reloc.WS2_32.dll_setsockopt
sub dl, cl
lea ebx, [rdx + rdx]
add bl, r10b
jmp 0x140104e34
lea rcx, [r9 + 5]
cmp rax, rcx
jne 0x140104a73
lea r8d, [r11 + 0x46]
movzx ecx, r10b
and cl, r8b
mov edx, listen
sub dl, cl
lea ebx, [rdx + rdx]
add bl, r10b
add bl, r8b
inc r9
dec r11
inc r11
jmp 0x1401045a3
mov byte [rbp + r11 - 0x50], bl
inc r11
jmp 0x1401045a3
movzx edi, r11b
lea r8d, [rdi - 0x48]
movzx ecx, r10b
and cl, r8b
add cl, cl
movzx ebx, byte [rbp + r11 - 0x50]
sub bl, cl
sub bl, 8
add bl, r10b
jmp 0x140104e34
lea r8d, [r11 - 0x22]
movzx ecx, r10b
and cl, r8b
add cl, cl
movzx ebx, r10b
sub bl, cl
sub bl, byte [rbp + r11 - 0x50]
sub bl, 0x12
add bl, r8b
jmp 0x140104f52
lea edx, [r11 - 0x1b]
movzx ecx, r10b
and cl, dl
add cl, cl
sub r10b, cl
lea ebx, [rdx + r10]
sub bl, 0x43
movzx ecx, byte [rbp + r11 - 0x50]
add rcx, r9
add r11, rcx
inc r11
jmp 0x1401045a3
lea r8d, [r11 - 0x67]
movzx ecx, r10b
and cl, r8b
add cl, cl
movzx ebx, r10b
sub bl, cl
sub bl, 0x2f
add bl, r8b
jmp 0x140104f52
lea edx, [r11 + 0x4d]
movzx ecx, r10b
and cl, dl
add cl, cl
sub r10b, cl
lea ebx, [rdx + r10]
sub bl, 0x1b
add rax, r9
jmp 0x140104f18
movzx edi, r11b
lea r8d, [rdi + 0x27]
movzx ecx, r10b
and cl, r8b
add cl, cl
movzx ebx, r10b
sub bl, cl
sub bl, 0x11
add bl, r8b
sub dil, 0x35
movzx ecx, r10b
and cl, dil
add cl, cl
sub r10b, cl
add r10b, 0x73
add r10b, bl
add r10b, dil
mov byte [rbp + r11 - 0x50], r10b
add rax, r9
jmp 0x140104f18
lea edx, [r11 + 1]
movzx ecx, r10b
and cl, dl
add cl, cl
sub r10b, cl
lea ebx, [rdx + r10]
sub bl, 7
dec r11
inc r11
jmp 0x1401045a3
movzx edi, r11b
lea r8d, [rdi - 0x4b]
movzx ecx, r10b
and cl, r8b
add cl, cl
movzx ebx, r10b
sub bl, cl
add bl, 0xd
jmp 0x140104eb5
movzx edi, r11b
lea r8d, [rdi + 0x69]
movzx ecx, r10b
and cl, r8b
add cl, cl
movzx ebx, r10b
sub bl, cl
add bl, 0x21
add bl, r8b
sub dil, 0x5b
movzx ecx, r10b
and cl, dil
add cl, cl
sub r10b, cl
add r10b, 0x7d
add r10b, dil
mov byte [rbp + r11 - 0x50], r10b
inc r9
dec r11
inc r11
jmp 0x1401045a3
lea edx, [r11 + 0x1d]
movzx ecx, r10b
and cl, dl
add cl, cl
sub r10b, cl
lea ebx, [rdx + r10]
add bl, 0x35
dec r11
inc r11
jmp 0x1401045a3
lea rdx, [r11 + r12]
movzx ecx, dl
and cl, r8b
add cl, cl
sub dl, cl
lea ebx, [r8 + rdx]
add bl, 0x53
movzx ecx, bl
mov rdx, 0xffffffffffffffff
sub rdx, rcx
add r11, rdx
inc r11
jmp 0x1401045a3
movabs rdx, 0x223d04a23ff48b85
add rdx, r11
movzx r10d, r8b
movzx ecx, dl
and cl, r8b
add cl, cl
sub dl, cl
lea ebx, [r10 + rdx]
add bl, 0x5d
lea r8d, [r11 - 0xf]
movzx ecx, r10b
and cl, r8b
add cl, cl
movzx edx, r10b
sub dl, cl
add dl, 0x69
add dl, r8b
movzx ecx, dl
mov byte [rbp + r11 - 0x50], cl
inc r9
add rcx, r9
sub r11, rcx
lea edx, [r11 + 4]
movzx ecx, r10b
and cl, dl
add cl, cl
sub r10b, cl
sub r10b, 0x1c
add r10b, dl
mov byte [rbp + r11 - 0x50], r10b
inc rax
mov rcx, 0xffffffffffffffff
sub rcx, rax
add r11, rcx
movzx ecx, byte [rbp + r11 - 0x50]
add rcx, r9
add r11, rcx
inc r11
jmp 0x1401045a3
lea rdx, [r11 + r13]
movzx ecx, dl
and cl, r8b
add cl, cl
sub dl, cl
lea ebx, [r8 + rdx]
add bl, 0x71
movzx ecx, byte [rbp + r11 - 0x50]
add rcx, r9
add r11, rcx
inc r11
jmp 0x1401045a3
sub r11b, 0x21
movzx ecx, r10b
and cl, r11b
add cl, cl
sub r10b, cl
lea ebx, [r11 + r10]
sub bl, 0x19
jmp 0x1401045a0
sub r11b, 0x47
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea ebx, [r11 + r10]
sub bl, 0xf
jmp 0x140104590
lea rdx, [rbp + 0x1668874]
jmp 0x140105032
lea rdx, [rbp + 0x124e587]
jmp 0x140105032
lea rdx, [rbp - 0x50]
mov dword [rsp + 0x28], esi
mov qword [rsp + 0x20], r14
mov r9d, 1
xor r8d, r8d
mov rcx, qword [rbp + 0x28]
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
test eax, eax
jne 0x140105063
mov rcx, qword [rbp + 0x28]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
test eax, eax
sete bl
jmp 0x140105065
xor bl, bl
lea rcx, [rbp + 0x38]
call fcn.140002490
movzx eax, bl
mov rcx, qword [rbp + 0x58]
xor rcx, rsp
call fcn.1401830b0
mov rbx, qword [rsp + 0x1b0]
add rsp, 0x160
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret