Function at 0x14003f9e0
Capabilities:
Parse pe header
Query or enumerate registry value

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x20]
sub rsp, 0x120
mov rax, qword [0x140278800]
xor rax, rsp
mov qword [rbp + 0x18], rax
movzx r10d, byte [rsp + 0x30]
xor eax, eax
xorps xmm0, xmm0
mov qword [rbp - 0x7a], rax
movups xmmword [rsp + 0x76], xmm0
mov dword [rbp - 0x72], eax
movabs r13, 0xd506cf7cc5393534
mov byte [rbp - 0x6e], al
movabs r14, 0x798f053c2db15d44
mov dword [rsp + 0x40], 0x87889880
movabs r15, 0xaab2a8bf160fe33c
mov dword [rsp + 0x44], 0x8a8494fb
movabs r12, 0xa509c58b9d78d4
mov dword [rsp + 0x48], 0x808f83f4
mov dword [rsp + 0x4c], 0xecfc80fb
mov dword [rsp + 0x50], 0xfbebfcf5
mov dword [rsp + 0x54], 0x94aff680
mov dword [rsp + 0x58], 0xc3979cac
mov dword [rsp + 0x5c], 0x888d80ee
mov dword [rsp + 0x60], 0x86998bb5
mov dword [rsp + 0x64], 0x8fe69187
mov dword [rsp + 0x68], 0x908b82b9
mov dword [rsp + 0x6c], 0xdaeeb9ad
mov dword [rsp + 0x70], 0xb9bdbcb5
mov word [rsp + 0x74], 0x58d
nop dword [rax]
nop word [rax + rax]
mov r8, qword [0x1402cdf20]
mov r9, qword [0x1402cdf18]
nop
xor r11d, r11d
cmp r11, 0x53
jae 0x140040650
movzx esi, byte [rsp + r11 + 0x40]
mov ebx, esi
nop word [rax + rax]
mov rdi, rbx
cmp r8, r11
ja 0x140040647
lea rax, [r9 + 1]
cmp r8, rax
jae 0x14003fb2f
lea rcx, [r11 + r13]
mov rax, rcx
and rax, rbx
imul r10, rax, 0xfffffffffffffffe
add r10, rcx
add r10, rbx
sub r10b, 0x6c
jmp 0x14003fb60
je 0x1400405c4
lea rax, [r9 + 2]
cmp r8, rax
je 0x140040527
lea rax, [r9 + 5]
cmp r8, rax
je 0x1400404e9
lea rax, [r9 + 7]
cmp r8, rax
je 0x1400404c0
nop dword [rax]
cmp r9, r11
ja 0x14004063e
lea rax, [r9 + 0x2a]
cmp r8, rax
jae 0x14003fb8f
lea rdx, [r11 + r14]
mov ecx, reloc.WS2_32.dll_select
movzx eax, dl
and al, dil
sub cl, al
lea r10d, [rcx + rcx]
add r10b, bl
add r10b, dl
jmp 0x14003fbd0
lea rax, [r9 + 1]
cmp r8, rax
je 0x14004046c
inc rax
cmp r8, rax
je 0x14004043c
lea rax, [r9 + 3]
cmp r8, rax
je 0x1400403f4
lea rax, [r9 + 4]
cmp r8, rax
je 0x1400403cd
lea rax, [r9 + 5]
cmp r8, rax
je 0x1400403b9
nop
lea rax, [r9 + r8]
cmp rax, r11
jbe 0x14003ff57
nop dword [rax]
lea rax, [r9 + 0x28]
cmp r8, rax
je 0x14003ff33
lea rax, [r9 + 9]
cmp r8, rax
je 0x14003ff06
lea rax, [r9 + 4]
cmp r8, rax
je 0x14003fedc
lea rax, [r9 + 0x80]
cmp r8, rax
je 0x14003fecd
lea rax, [r9 + 0x1000]
cmp r8, rax
je 0x14003fea9
lea rax, [r9 + 0x5a]
cmp r8, rax
je 0x14003fbe0
lea r8, [r9 + 0x7a]
lea r9, [r8 + 0x1000]
lea rax, [r9 + 0x3e8]
cmp r8, rax
jb 0x14004061a
lea rax, [r9 + 5]
cmp r8, rax
jb 0x1400405f6
lea rax, [r9 + 1]
cmp r8, rax
jb 0x14003fd30
lea rax, [r9 + 0x7a]
cmp r8, rax
jb 0x14003fd10
lea rax, [r9 + 0xa]
cmp r8, rax
jb 0x14003fcf0
lea rax, [r9 + 0x40]
cmp r8, rax
jb 0x14003fe56
lea r8, [r9 + 0x400]
lea r9, [r8 + 0x200]
lea rax, [r9 + 0x64]
cmp r8, rax
ja 0x14003fe23
lea rax, [r9 + 0x20]
cmp r8, rax
ja 0x14003fdfa
lea rax, [r9 + 0x41]
cmp r8, rax
ja 0x14003fdd1
lea rax, [r9 + 0x400]
cmp r8, rax
ja 0x14003fda8
lea rax, [r9 + 2]
cmp r8, rax
ja 0x14003fd80
lea rax, [r9 + 6]
cmp r8, rax
ja 0x14003fd57
lea r8, [r9 + 0x2a]
lea r9, [r8 + 0x41]
jmp 0x14003fbe0
lea rdx, [r11 + r15]
mov ecx, reloc.WLDAP32.dll_Ordinal_46
movzx eax, dil
and al, dl
sub cl, al
lea r10d, [rcx + rcx]
add r10b, bl
add r10b, dl
jmp 0x14003fbd0
lea rdx, [r11 + r12]
mov ecx, reloc.WLDAP32.dll_Ordinal_26
movzx eax, dil
and al, dl
sub cl, al
lea r10d, [rcx + rcx]
add r10b, bl
add r10b, dl
jmp 0x14003fb60
mov eax, 6
movabs rcx, 0x56976acc012b0e6c
add rcx, r11
and dil, cl
sub al, dil
lea r10d, [rax + rax]
add r10b, bl
add r10b, cl
jmp 0x14003fb00
mov ecx, reloc.WS2_32.dll_recv
movabs rdx, 0xcc7829e16d8aea20
add rdx, r11
movzx eax, dl
and al, sil
sub cl, al
lea r10d, [rcx + rcx]
add r10b, dl
add r10b, sil
jmp 0x140040490
movabs rdx, 0xce4f4cf4ce33aae8
movzx r10d, sil
add rdx, r11
movzx eax, dl
and al, sil
add al, al
sub r10b, al
sub r10b, 0x58
add r10b, dl
jmp 0x140040412
mov ecx, Ordinal_46
movabs rdx, 0x7a340f01b94ed618
add rdx, r11
movzx eax, dl
and al, sil
sub cl, al
lea r10d, [rcx + rcx]
add r10b, dl
add r10b, sil
jmp 0x14004050e
mov ecx, Ordinal_27
movabs rdx, 0xd02670082edc6bb0
add rdx, r11
movzx eax, dl
and al, sil
sub cl, al
lea r10d, [rcx + rcx]
add r10b, dl
add r10b, sil
jmp 0x140040549
mov ecx, 4
movabs rdx, 0x2618d10ea46a0148
add rdx, r11
movzx eax, dl
and al, sil
sub cl, al
lea r10d, [rcx + rcx]
add r10b, dl
add r10b, sil
jmp 0x14004057a
movabs rcx, 0x7c0b321519f796e0
add rcx, r11
movzx eax, cl
and al, sil
add al, al
sub cl, al
movzx eax, byte [rsp + r11 + 0x40]
add rax, r9
add r11, rax
lea r10d, [rsi + rcx]
sub r10b, 0x20
inc r11
jmp 0x14003fae3
movabs rcx, 0xa8db85abb5672274
add rcx, r11
movzx eax, cl
and al, sil
add al, al
sub cl, al
lea r10d, [rsi + rcx]
sub r10b, 0x2c
cmp r9, 0x61
jb 0x140040350
movzx ecx, sil
movabs rdx, 0xe0b6abb694cb32b8
add rdx, r11
movzx eax, dl
and al, sil
add al, al
sub cl, al
add cl, dl
lea r10d, [rcx*2 - 0x10]
jmp 0x140040490
movabs rcx, 0x853ee175fd435ac8
add rcx, r11
movzx eax, cl
and al, sil
add al, al
sub cl, al
lea r10d, [rsi + rcx]
sub r10b, 0x78
jmp 0x140040549
movabs rdx, 0x871604895dec1b90
jmp 0x14004007b
movabs rcx, 0xdd08658fd379b128
add rcx, r11
dec r11
movzx eax, cl
and al, sil
add al, al
sub cl, al
lea r10d, [rsi + rcx]
sub r10b, 0x18
inc r11
jmp 0x14003fae3
movabs rcx, 0x32fac696490746c0
inc r9
add rcx, r11
dec r11
movzx eax, cl
and al, sil
add al, al
sub cl, al
lea r10d, [rsi + rcx]
sub r10b, 0x40
inc r11
jmp 0x14003fae3
movabs rcx, 0x88ed279cbe94dc58
add rcx, r11
movzx eax, cl
and al, sil
add al, al
sub cl, al
lea r10d, [rsi + rcx]
sub r10b, 0x68
jmp 0x140040490
lea rax, [r9 + 9]
cmp r8, rax
jae 0x14003fffa
lea rax, [r11 + r13]
and dil, al
add dil, dil
sub bl, dil
lea r10d, [rax + rbx]
sub r10b, 0x6c
lea rax, [r9 + r8]
cmp rax, 0x3e8
je 0x14004038b
lea rax, [r9 + 8]
cmp r8, rax
jbe 0x14004013e
mov ecx, Ordinal_35
movabs rdx, 0xc29f70bafea1ad64
add rdx, r11
movzx eax, dl
and al, sil
sub cl, al
lea r10d, [rcx + rcx]
add r10b, dl
add r10b, sil
cmp r8, 0x64
jae 0x14004035d
lea rax, [r9 + 0x40]
cmp r8, rax
jbe 0x140040248
mov ecx, 0x34
movabs rdx, 0x3c2e75f72c530aa8
add rdx, r11
movzx eax, sil
and al, dl
sub cl, al
lea r10d, [rcx + rcx]
add r10b, sil
add r10b, dl
jmp 0x14003fe75
lea rax, [r9 + 1]
cmp r8, rax
jne 0x14004003b
mov ecx, 0x24
movabs rdx, 0xf31e0a785b62ba88
add rdx, r11
movzx eax, dl
and al, sil
sub cl, al
movzx eax, byte [rsp + r11 + 0x40]
add rax, r9
add r11, rax
lea r10d, [rcx + rcx]
add r10b, dl
add r10b, sil
inc r11
jmp 0x14003fae3
lea rax, [r9 + 3]
cmp r8, rax
jne 0x140040068
movabs rcx, 0x9b54865e852c6428
add rcx, r11
movzx eax, cl
and al, sil
add al, al
sub cl, al
lea r10d, [rsi + rcx]
sub r10b, 0x18
jmp 0x14004050b
lea rax, [r9 + 5]
cmp r8, rax
jne 0x14004009a
movabs rdx, 0x456225580f9ece90
add rdx, r11
mov ecx, 8
movzx eax, dl
and al, sil
sub cl, al
lea r10d, [rcx + rcx]
add r10b, dl
add r10b, sil
jmp 0x140040412
lea rax, [r9 + 4]
cmp r8, rax
jne 0x1400400d2
mov ecx, Ordinal_32
movabs rdx, 0xef6fc4519a1138f8
add rdx, r11
dec r11
movzx eax, dl
and al, sil
sub cl, al
lea r10d, [rcx + rcx]
add r10b, dl
add r10b, sil
inc r11
jmp 0x14003fae3
lea rax, [r9 + 2]
cmp r8, rax
jne 0x14004010d
mov ecx, Ordinal_50
movabs rdx, 0x997d634b2483a360
add rdx, r11
inc r9
movzx eax, dl
dec r11
and al, sil
sub cl, al
lea r10d, [rcx + rcx]
add r10b, dl
add r10b, sil
inc r11
jmp 0x14003fae3
lea rax, [r9 + 6]
cmp r8, rax
jne 0x14003ff79
movabs rcx, 0x438b0244aef60dc8
add rcx, r11
movzx eax, cl
and al, sil
add al, al
sub cl, al
lea r10d, [rsi + rcx]
sub r10b, 0x78
jmp 0x140040490
lea rax, [r9 + 1]
cmp r8, rax
jne 0x140040170
mov ecx, gethostname
movabs rdx, 0x6cad0fb4891417cc
add rdx, r11
movzx eax, dl
and al, sil
sub cl, al
lea r10d, [rcx + rcx]
add r10b, dl
add r10b, sil
jmp 0x140040490
lea rax, [r9 + 3]
cmp r8, rax
jne 0x1400401a3
movabs rcx, 0xc0c84da79df8ec9c
add rcx, r11
dec r11
movzx eax, cl
and al, sil
add al, al
sub cl, al
lea r10d, [rsi + rcx]
sub r10b, 0x44
inc r11
jmp 0x14003fae3
lea rax, [r9 + 4]
cmp r8, rax
jne 0x1400401d5
mov ecx, 6
movabs rdx, 0x14e38b9ab2ddc16c
add rdx, r11
movzx eax, dl
and al, sil
sub cl, al
lea r10d, [rcx + rcx]
add r10b, dl
add r10b, sil
jmp 0x14004050b
lea rax, [r9 + 5]
cmp r8, rax
jne 0x140040207
mov ecx, reloc.WLDAP32.dll_Ordinal_26
movabs rdx, 0xbef12a943d502bd4
add rdx, r11
movzx eax, dl
and al, sil
sub cl, al
lea r10d, [rcx + rcx]
add r10b, dl
add r10b, sil
jmp 0x14004050e
lea rax, [r9 + 8]
cmp r8, rax
jne 0x14003ffba
movzx eax, sil
movabs rcx, 0xbd1a0780dca76b0c
add rcx, r11
and al, cl
add al, al
sub sil, al
movzx eax, byte [rsp + r11 + 0x40]
add rax, r9
add r11, rax
lea r10d, [rcx + rsi]
sub r10b, 0x54
inc r11
jmp 0x14003fae3
lea rax, [r9 + 1]
cmp r8, rax
jne 0x140040284
movabs rcx, 0xe63c14f0b6c57510
add rcx, r11
movzx eax, cl
and al, sil
add al, al
sub cl, al
movzx eax, byte [rsp + r11 + 0x40]
add rax, r9
add r11, rax
lea r10d, [rsi + rcx]
sub r10b, 0x70
inc r11
jmp 0x14003fae3
inc rax
cmp r8, rax
jne 0x1400402b4
movabs rdx, 0x9049b3ea4137df78
movzx r10d, sil
add rdx, r11
movzx eax, dl
and al, sil
add al, al
sub r10b, al
sub r10b, 0x48
add r10b, dl
jmp 0x14004057a
lea rax, [r9 + 3]
cmp r8, rax
jne 0x1400402e5
movabs rdx, 0x3a5752e3cbaa49e0
movzx r10d, sil
add rdx, r11
movzx eax, dl
and al, sil
add al, al
sub r10b, al
sub r10b, 0x20
add r10b, dl
jmp 0x140040549
lea rax, [r9 + 5]
cmp r8, rax
jne 0x14004031b
movabs rcx, 0x8c9b6dc37fe65de8
inc r9
add rcx, r11
dec r11
movzx eax, cl
and al, sil
add al, al
sub cl, al
lea r10d, [rsi + rcx]
sub r10b, 0x58
inc r11
jmp 0x14003fae3
lea rax, [r9 + 7]
cmp r8, rax
jne 0x14003fe75
movabs rdx, 0x36a90cbd0a58c850
movzx r10d, sil
add rdx, r11
movzx eax, dl
and al, sil
add al, al
sub r10b, al
sub r10b, 0x30
add r10b, dl
jmp 0x140040490
mov byte [rsp + r11 + 0x40], r10b
inc r11
jmp 0x14003fae3
mov ecx, reloc.WS2_32.dll_recv
movabs rdx, 0x8ac44ab01f3d9d20
add rdx, r11
movzx eax, dl
and al, sil
sub cl, al
lea r10d, [rcx + rcx]
add r10b, byte [rsp + r11 + 0x40]
add r10b, sil
add r10b, dl
jmp 0x140040412
mov ecx, 0x24
movabs rdx, 0x34d1e9a9a9b00788
add rdx, r11
movzx eax, sil
and al, dl
sub cl, al
lea r10d, [rcx + rcx]
sub r10b, byte [rsp + r11 + 0x40]
add r10b, sil
add r10b, dl
jmp 0x140040549
movabs rcx, 0x1fee5e0ef6d2461c
mov eax, reloc.WLDAP32.dll_Ordinal_30
jmp 0x140040536
mov eax, 0xa
movabs rcx, 0x75e0bf156c5fdbb4
add rcx, r11
and dil, cl
sub al, dil
lea r10d, [rax + rax]
add r10b, bl
add r10b, cl
jmp 0x14004050e
movabs rax, 0x21c58122577b06e4
add rax, r11
and dil, al
add dil, dil
sub al, dil
lea r10d, [rsi + rax]
sub r10b, 0x3c
movabs rcx, 0x5fcb1a2ce476d254
add rcx, r11
movzx eax, cl
and al, sil
add al, al
sub cl, al
sub cl, 0x4c
add cl, sil
add cl, r10b
mov byte [rsp + r11 + 0x40], cl
jmp 0x14004050b
mov eax, Ordinal_60
movabs rcx, 0xcdaa432f42963214
add rcx, r11
inc r9
and dil, cl
dec r11
sub al, dil
lea r10d, [rax + rax]
add r10b, bl
add r10b, cl
inc r11
jmp 0x14003fae3
mov ecx, Ordinal_41
movabs rdx, 0x239ca435b823c7ac
add rdx, r11
movzx eax, dl
and al, dil
sub cl, al
lea r10d, [rcx + rcx]
add r10b, dl
add r10b, bl
movabs rcx, 0xb5bd7b335a0467ec
add rcx, r11
movzx eax, cl
and al, sil
add al, al
sub cl, al
sub cl, 0x74
add cl, sil
mov byte [rsp + r11 + 0x40], cl
inc r9
dec r11
inc r11
jmp 0x14003fae3
movabs rax, 0x7b66284f8e5a1e0c
add rax, r11
and dil, al
add dil, dil
sub bl, dil
lea r10d, [rax + rbx]
sub r10b, 0x54
dec r11
inc r11
jmp 0x14003fae3
mov eax, reloc.WLDAP32.dll_Ordinal_46
movabs rcx, 0x274aea5c7975493c
add rcx, r11
and dil, cl
sub al, dil
lea r10d, [rax + rax]
add r10b, bl
add r10b, cl
add r8, r9
movzx eax, r10b
mov rcx, 0xffffffffffffffff
sub rcx, rax
add r11, rcx
inc r11
jmp 0x14003fae3
movabs rcx, 0xd32fac696490746c
mov eax, 6
add rcx, r11
and dil, cl
sub al, dil
lea r10d, [rax + rax]
add r10b, cl
add r10b, bl
movzx eax, sil
inc r9
movabs rdx, 0x9d8b9266ee93cbc
movzx ecx, sil
add rdx, r11
and al, dl
add al, al
sub cl, al
sub cl, 0x24
add cl, dl
movzx eax, cl
mov byte [rsp + r11 + 0x40], al
add rax, r9
sub r11, rax
movzx eax, sil
inc r8
movabs rdx, 0xdedf88a3342271f0
mov ecx, gethostname
add rdx, r11
and al, dl
sub cl, al
mov rax, 0xffffffffffffffff
sub rax, r8
add cl, cl
add cl, sil
add cl, dl
mov byte [rsp + r11 + 0x40], cl
add r11, rax
movzx eax, byte [rsp + r11 + 0x40]
add rax, r9
add r11, rax
inc r11
jmp 0x14003fae3
movabs rax, 0x7f146e764fab9f9c
add rax, r11
and dil, al
add dil, dil
sub bl, dil
lea r10d, [rax + rbx]
sub r10b, 0x44
movzx eax, byte [rsp + r11 + 0x40]
add rax, r9
add r11, rax
inc r11
jmp 0x14003fae3
movabs rcx, 0xac89cbd276b8a404
add rcx, r11
movzx eax, cl
and al, sil
add al, al
sub cl, al
lea r10d, [rsi + rcx]
sub r10b, 0x1c
jmp 0x14003fae0
movabs rcx, 0x27c2cd8ec46399c
add rcx, r11
movzx eax, cl
and al, sil
add al, al
sub cl, al
lea r10d, [rsi + rcx]
sub r10b, 0x44
jmp 0x14003fad0
lea rdx, [rbp + 0x16fbe30]
jmp 0x140040655
lea rdx, [rbp + 0xa8f364]
jmp 0x140040655
lea rdx, [rsp + 0x40]
lea rax, [rbp - 8]
mov r9d, 0x20019
xor r8d, r8d
mov qword [rsp + 0x20], rax
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
movzx r10d, byte [rsp + 0x30]
xor eax, eax
xorps xmm0, xmm0
mov dword [rbp - 0x44], eax
movups xmmword [rbp - 0x54], xmm0
mov word [rbp - 0x40], ax
movabs rdi, 0x4fd0e8f5a0638d05
mov byte [rbp - 0x3e], al
movabs rsi, 0xd35a98416ec3b19b
mov dword [rbp - 0x60], 0x8cfa99b4
movabs r15, 0xeb6b78cebe7ea531
mov dword [rbp - 0x5c], 0x80f4fcf0
movabs r14, 0xfc83a6a3f1c66739
mov dword [rbp - 0x58], 0x6b8086f2
movabs r12, 0x25acb50674c91cd7
movabs r13, 0xa7b0560f861f1dc6
nop
mov rax, qword [0x1402cdf20]
mov r9, qword [0x1402cdf18]
nop
xor ebx, ebx
cmp rbx, 0x23
jae 0x140041348
movzx r11d, byte [rbp + rbx - 0x60]
mov r8, r11
cmp rax, rbx
ja 0x14004133f
lea rcx, [r9 + 1]
cmp rax, rcx
jae 0x140040731
lea rdx, [rbx + r15]
mov rcx, rdx
and rcx, r11
imul r10, rcx, 0xfffffffffffffffe
add r10, rdx
add r10, r11
sub r10b, 0x57
jmp 0x140040760
je 0x1400412bb
inc rcx
cmp rax, rcx
je 0x14004124f
lea rcx, [r9 + 3]
cmp rax, rcx
je 0x140041225
lea rcx, [r9 + 5]
cmp rax, rcx
je 0x1400411d8
nop dword [rax]
cmp r9, rbx
ja 0x140041336
lea rcx, [r9 + 0x41]
cmp rax, rcx
jae 0x14004078a
lea rdx, [rbx + rdi]
movzx ecx, dl
and cl, r11b
add cl, cl
sub dl, cl
lea r10d, [r11 + rdx]
sub r10b, 0x23
jmp 0x1400407b0
lea rcx, [r9 + 1]
cmp rax, rcx
je 0x1400411b7
inc rcx
cmp rax, rcx
je 0x14004118d
lea rcx, [r9 + 4]
cmp rax, rcx
je 0x140041155
lea rcx, [r9 + rax]
cmp rcx, rbx
jbe 0x140040dff
nop dword [rax]
lea rcx, [r9 + 0x3e8]
cmp rax, rcx
je 0x140040dd6
lea rcx, [r9 + 0x28]
cmp rax, rcx
je 0x140040da9
lea rcx, [r9 + 0x7a]
cmp rax, rcx
je 0x140040d79
lea rcx, [r9 + 0x80]
cmp rax, rcx
je 0x140040d55
lea rcx, [r9 + 0x10]
cmp rax, rcx
je 0x140040d2e
lea rcx, [r9 + 4]
cmp rax, rcx
je 0x140040d04
lea rcx, [r9 + 0x41]
cmp rax, rcx
je 0x140040cde
lea rcx, [r9 + 0x200]
cmp rax, rcx
je 0x140040cba
lea rcx, [r9 + 2]
cmp rax, rcx
je 0x140040c82
lea rcx, [r9 + 0x61]
cmp rax, rcx
je 0x1400407c0
lea rax, [r9 + 0x3e8]
lea r9, [rax + 0x64]
lea rcx, [r9 + 0x28]
cmp rax, rcx
jb 0x140041312
lea rcx, [r9 + 6]
cmp rax, rcx
jb 0x1400412ee
lea rcx, [r9 + 0x2a]
cmp rax, rcx
jb 0x1400409ad
lea rcx, [r9 + 0x400]
cmp rax, rcx
jb 0x140040992
lea rcx, [r9 + 4]
cmp rax, rcx
jb 0x140040977
lea rcx, [r9 + 0x41]
cmp rax, rcx
jb 0x140040c24
lea rcx, [r9 + 0x200]
cmp rax, rcx
jb 0x140040bbc
lea rcx, [r9 + 0x20]
cmp rax, rcx
jb 0x140040b68
lea rcx, [r9 + 5]
cmp rax, rcx
jb 0x140040b3c
lea rcx, [r9 + 0x5a]
cmp rax, rcx
jb 0x1400407c0
lea rax, [r9 + 0x61]
lea r9, [rax + 0xa]
lea rcx, [r9 + 6]
cmp rax, rcx
ja 0x140040b04
lea rcx, [r9 + 0x2a]
cmp rax, rcx
ja 0x140040ae0
lea rcx, [r9 + 0x400]
cmp rax, rcx
ja 0x140040aba
lea rcx, [r9 + 0x40]
cmp rax, rcx
ja 0x140040a90
lea rcx, [r9 + 8]
cmp rax, rcx
ja 0x140040a69
lea rcx, [r9 + 1]
cmp rax, rcx
ja 0x140040a45
lea rcx, [r9 + 0x20]
cmp rax, rcx
ja 0x140040a15
lea rcx, [r9 + 5]
cmp rax, rcx
ja 0x1400409f1
lea rcx, [r9 + 0x5a]
cmp rax, rcx
ja 0x1400409c8
lea rcx, [r9 + 0x3e8]
cmp rax, rcx
ja 0x1400407c0
lea rax, [r9 + 0x64]
lea r9, [rax + 0x28]
jmp 0x1400407c0
lea rdx, [rbx + rsi]
movzx ecx, dl
and cl, r11b
add cl, cl
sub dl, cl
lea r10d, [r11 + rdx]
sub r10b, 0x3d
jmp 0x1400407b0
lea rdx, [rbx + r14]
movzx ecx, dl
and cl, r11b
add cl, cl
sub dl, cl
lea r10d, [r11 + rdx]
add r10b, 0x71
jmp 0x140040760
lea rdx, [rbx + r12]
movzx ecx, dl
and cl, r11b
add cl, cl
sub dl, cl
lea r10d, [r11 + rdx]
add r10b, 0x1f
jmp 0x140040702
movabs r8, 0x7e8747ad031c6828
movzx r10d, r11b
add r8, rbx
movzx ecx, r8b
and cl, r11b
add cl, cl
sub r10b, cl
sub r10b, 0x18
add r10b, r8b
jmp 0x1400411f7
lea rdx, [rbx + r13]
inc r9
movzx ecx, dl
dec rbx
and cl, r11b
add cl, cl
sub dl, cl
lea r10d, [r11 + rdx]
sub r10b, 0x6a
inc rbx
jmp 0x1400406f2
mov edx, Ordinal_35
movabs r8, 0xd0d964720921d364
add r8, rbx
dec rbx
movzx ecx, r8b
and cl, r11b
sub dl, cl
lea r10d, [rdx + rdx]
add r10b, r8b
add r10b, r11b
inc rbx
jmp 0x1400406f2
movabs rdx, 0xfa0272d48c248902
add rdx, rbx
movzx ecx, dl
and cl, r11b
add cl, cl
sub dl, cl
lea r10d, [r11 + rdx]
sub r10b, 0xe
jmp 0x1400410cc
movabs rdx, 0x232b81370f273ea0
add rdx, rbx
movzx ecx, dl
and cl, r11b
add cl, cl
sub dl, cl
lea r10d, [r11 + rdx]
sub r10b, 0x60
add rax, r9
jmp 0x140041174
mov edx, Ordinal_41
movabs r8, 0x4c548f999229f43e
add r8, rbx
movzx ecx, r8b
and cl, r11b
sub dl, cl
lea r10d, [rdx + rdx]
add r10b, r8b
add r10b, r11b
jmp 0x140041174
movabs r8, 0x757d9dfc152ca9dc
movzx r10d, r11b
add r8, rbx
movzx ecx, r8b
and cl, r11b
add cl, cl
sub r10b, cl
sub r10b, 4
jmp 0x140041120
movabs rdx, 0x9ea6ac5e982f5f7a
add rdx, rbx
movzx ecx, dl
and cl, r11b
add cl, cl
sub dl, cl
lea r10d, [r11 + rdx]
sub r10b, 0x56
jmp 0x140041271
mov edx, Ordinal_46
movabs r8, 0xc7cfbac11b321518
add r8, rbx
movzx ecx, r8b
and cl, r11b
sub dl, cl
movzx ecx, byte [rbp + rbx - 0x60]
add rcx, r9
add rbx, rcx
lea r10d, [rdx + rdx]
add r10b, r8b
add r10b, r11b
inc rbx
jmp 0x1400406f2
movabs rdx, 0x2eb65eb762b8db23
add rdx, rbx
movzx ecx, dl
and cl, r11b
add cl, cl
sub dl, cl
lea r10d, [r11 + rdx]
add r10b, 0xb
mov byte [rbp + rbx - 0x60], r10b
inc rbx
jmp 0x1400406f2
movabs rdx, 0x57df6d19e5bb90c1
add rdx, rbx
movzx ecx, dl
and cl, r11b
add cl, cl
sub dl, cl
lea r10d, [r11 + rdx]
sub r10b, 0x47
cmp r9, 0x200
jb 0x140040b5b
movzx edx, r11b
movabs r8, 0xccd2225fe675d186
add r8, rbx
movzx ecx, r8b
and cl, r11b
add cl, cl
sub dl, cl
add dl, r8b
lea r10d, [rdx*2 - 0x54]
jmp 0x1400411f7
movabs r8, 0x81087b7c68be465f
movzx ecx, r11b
add r8, rbx
movzx r10d, r11b
and cl, r8b
add cl, cl
sub r10b, cl
add r10b, 0x67
add r10b, r8b
cmp rax, 0x41
jae 0x1400410a3
lea rcx, [r9 + 0x1000]
cmp rax, rcx
jbe 0x140040f99
mov edx, reloc.WS2_32.dll_recvfrom
movabs r8, 0x686cb2390490e9b2
add r8, rbx
movzx ecx, r11b
and cl, r8b
sub dl, cl
lea r10d, [rdx + rdx]
add r10b, r11b
add r10b, r8b
jmp 0x140040b87
movabs rdx, 0xaa3189deebc0fbfd
add rdx, rbx
movzx ecx, dl
and cl, r11b
add cl, cl
sub dl, cl
lea r10d, [r11 + rdx]
add r10b, 0x15
lea rcx, [r9 + rax]
cmp rcx, 4
je 0x1400410fa
lea rcx, [r9 + 1]
cmp rax, rcx
jbe 0x140040efe
movabs rdx, 0x189bc943642d5cad
add rdx, rbx
movzx ecx, dl
and cl, r11b
add cl, cl
sub dl, cl
lea r10d, [r11 + rdx]
add r10b, 0x45
jmp 0x140040be0
mov edx, reloc.WS2_32.dll_socket
movabs r8, 0xdee575c1c2554e1e
add r8, rbx
movzx ecx, r8b
and cl, r11b
sub dl, cl
movzx ecx, byte [rbp + rbx - 0x60]
add rcx, r9
add rbx, rcx
lea r10d, [rdx + rdx]
add r10b, r8b
add r10b, r11b
inc rbx
jmp 0x1400406f2
movabs rdx, 0x80e8424455803bc
add rdx, rbx
movzx ecx, dl
and cl, r11b
add cl, cl
sub dl, cl
lea r10d, [r11 + rdx]
sub r10b, 0x24
jmp 0x140041271
movabs r8, 0x31379286c85ab95a
movzx r10d, r11b
add r8, rbx
movzx ecx, r8b
and cl, r11b
add cl, cl
sub r10b, cl
sub r10b, 0x76
jmp 0x140041120
mov edx, Ordinal_32
movabs r8, 0x5a60a0e94b5d6ef8
add r8, rbx
movzx ecx, r8b
and cl, r11b
sub dl, cl
lea r10d, [rdx + rdx]
add r10b, r8b
add r10b, r11b
jmp 0x140041174
movabs rdx, 0x8389af4bce602496
add rdx, rbx
movzx ecx, dl
and cl, r11b
add cl, cl
sub dl, cl
lea r10d, [r11 + rdx]
sub r10b, 0x1a
add rax, r9
jmp 0x140041174
movabs rdx, 0xacb2bdae5162da34
add rdx, rbx
movzx ecx, dl
and cl, r11b
add cl, cl
sub dl, cl
lea r10d, [r11 + rdx]
sub r10b, 0x6c
jmp 0x1400410cc
mov edx, reloc.WLDAP32.dll_Ordinal_33
movabs r8, 0xd5dbcc10d4658fd2
add r8, rbx
dec rbx
movzx ecx, r8b
and cl, r11b
sub dl, cl
lea r10d, [rdx + rdx]
add r10b, r8b
add r10b, r11b
inc rbx
jmp 0x1400406f2
movabs rdx, 0xff04da7357684570
inc r9
add rdx, rbx
dec rbx
movzx ecx, dl
and cl, r11b
add cl, cl
sub dl, cl
lea r10d, [r11 + rdx]
sub r10b, 0x10
inc rbx
jmp 0x1400406f2
movabs r8, 0x282de8d5da6afb0e
movzx r10d, r11b
add r8, rbx
movzx ecx, r8b
and cl, r11b
add cl, cl
sub r10b, cl
sub r10b, 0x62
add r10b, r8b
jmp 0x1400411f7
lea rcx, [r9 + 0x1000]
cmp rax, rcx
jae 0x140040e26
lea rdx, [rbx + r15]
movzx ecx, dl
and cl, r11b
add cl, cl
sub dl, cl
lea r10d, [r11 + rdx]
sub r10b, 0x57
jmp 0x140040c43
lea rcx, [r9 + 1]
cmp rax, rcx
jne 0x140040e61
movabs rdx, 0x9fa1d1eb40c71a0a
add rdx, rbx
movzx ecx, dl
and cl, r11b
add cl, cl
sub dl, cl
movzx ecx, byte [rbp + rbx - 0x60]
add rcx, r9
add rbx, rcx
lea r10d, [r11 + rdx]
sub r10b, 0x46
inc rbx
jmp 0x1400406f2
lea rcx, [r9 + 3]
cmp rax, rcx
jne 0x140040e94
mov edx, Ordinal_50
movabs r8, 0x4d4fb5263ac1aece
add r8, rbx
movzx ecx, r8b
and cl, r11b
sub dl, cl
lea r10d, [rdx + rdx]
add r10b, r8b
add r10b, r11b
jmp 0x140041123
lea rcx, [r9 + 4]
cmp rax, rcx
jne 0x140040ec7
mov edx, Ordinal_46
movabs r8, 0xd1d489feb1b98df4
add r8, rbx
movzx ecx, r8b
and cl, r11b
sub dl, cl
lea r10d, [rdx + rdx]
add r10b, r8b
add r10b, r11b
jmp 0x1400410cc
lea rcx, [r9 + 8]
cmp rax, rcx
jne 0x140040c43
mov edx, Ordinal_41
movabs r8, 0x56595ed728b16d1a
add r8, rbx
movzx ecx, r8b
and cl, r11b
sub dl, cl
lea r10d, [rdx + rdx]
add r10b, r8b
add r10b, r11b
jmp 0x1400411f7
jne 0x140040f24
movabs rdx, 0xef72bae0e12aa70f
add rdx, rbx
movzx ecx, dl
and cl, r11b
add cl, cl
sub dl, cl
lea r10d, [r11 + rdx]
sub r10b, 0x69
jmp 0x1400411f7
inc rcx
cmp rax, rcx
jne 0x140040f59
movabs rdx, 0xc649ac7e5e27f171
inc r9
add rdx, rbx
dec rbx
movzx ecx, dl
and cl, r11b
add cl, cl
sub dl, cl
lea r10d, [r11 + rdx]
sub r10b, 0x17
inc rbx
jmp 0x1400406f2
lea rcx, [r9 + 5]
cmp rax, rcx
jne 0x140040be0
movzx ecx, r11b
movabs rdx, 0xa62a47ccc914fa1f
add rdx, rbx
and cl, dl
add cl, cl
sub r11b, cl
movzx ecx, byte [rbp + rbx - 0x60]
add rcx, r9
add rbx, rcx
lea r10d, [rdx + r11]
add r10b, 0x27
inc rbx
jmp 0x1400406f2
lea rcx, [r9 + 1]
cmp rax, rcx
jne 0x140040fda
movzx ecx, r11b
mov edx, Ordinal_60
movabs r8, 0x3f43a3d6818e3414
add r8, rbx
and cl, r8b
sub dl, cl
movzx ecx, byte [rbp + rbx - 0x60]
add rcx, r9
add rbx, rcx
lea r10d, [rdx + rdx]
add r10b, r11b
add r10b, r8b
inc rbx
jmp 0x1400406f2
inc rcx
cmp rax, rcx
jne 0x14004100b
movabs r8, 0x161a9573fe8b7e76
movzx ecx, r11b
add r8, rbx
movzx r10d, r11b
and cl, r8b
add cl, cl
sub r10b, cl
sub r10b, 0x3a
add r10b, r8b
jmp 0x140041271
lea rcx, [r9 + 3]
cmp rax, rcx
jne 0x14004103b
mov edx, recv
movabs r8, 0xecf187117b88c8d8
add r8, rbx
movzx ecx, r11b
and cl, r8b
sub dl, cl
lea r10d, [rdx + rdx]
add r10b, r11b
jmp 0x140041120
lea rcx, [r9 + 2]
cmp rax, rcx
jne 0x14004106c
movzx ecx, r11b
movabs rdx, 0x9a9f6a4c75835d9c
add rdx, rbx
and cl, dl
add cl, cl
sub r11b, cl
lea r10d, [rdx + r11]
sub r10b, 0x44
add rax, r9
jmp 0x140041174
lea rcx, [r9 + 9]
cmp rax, rcx
jne 0x140040b87
mov edx, 2
movabs r8, 0xf5fb30c269788724
add r8, rbx
movzx ecx, r8b
and cl, r11b
sub dl, cl
lea r10d, [rdx + rdx]
add r10b, r11b
add r10b, r8b
jmp 0x1400411f7
movzx r10d, byte [rbp + rbx - 0x60]
movabs r8, 0xa3a913fd63731be8
add r8, rbx
movzx ecx, r8b
and cl, r11b
add cl, cl
sub r10b, cl
sub r10b, 0x58
add r10b, r11b
add r10b, r8b
movabs r8, 0x8f148ccc21f1c119
movzx edx, r10b
add r8, rbx
movzx ecx, r8b
and cl, r11b
add cl, cl
sub dl, cl
add dl, 0x51
add dl, r8b
add dl, r11b
mov byte [rbp + rbx - 0x60], dl
add rax, r9
jmp 0x140041174
movabs r8, 0x7a80059ae070664a
movzx ecx, r11b
add r8, rbx
movzx r10d, r11b
and cl, r8b
add cl, cl
sub r10b, cl
sub r10b, byte [rbp + rbx - 0x60]
sub r10b, 6
add r10b, r8b
inc r9
movabs rdx, 0x65eb7e699eef0b7b
add rdx, rbx
movzx ecx, dl
and cl, r11b
add cl, cl
sub dl, cl
sub dl, 0x5d
add dl, r11b
movzx ecx, dl
mov byte [rbp + rbx - 0x60], cl
add rcx, r9
sub rbx, rcx
jmp 0x140041271
movabs rdx, 0x58da92a68e534b51
add rdx, rbx
movzx ecx, dl
and cl, r11b
add cl, cl
sub dl, cl
lea r10d, [r11 + rdx]
sub r10b, 0x37
movzx ecx, r10b
mov rdx, 0xffffffffffffffff
sub rdx, rcx
add rbx, rdx
inc rbx
jmp 0x1400406f2
movabs rdx, 0xd455bdce175b6c2b
add rdx, rbx
dec rbx
movzx ecx, dl
and cl, r11b
add cl, cl
sub dl, cl
lea r10d, [r11 + rdx]
sub r10b, 0x2d
inc rbx
jmp 0x1400406f2
movabs rdx, 0x26a7da931d60d767
add rdx, rbx
movzx ecx, dl
and cl, r11b
add cl, cl
sub dl, cl
lea r10d, [r11 + rdx]
add r10b, 0x2f
jmp 0x1400411f7
movabs rdx, 0x78f9f758236642a3
add rdx, rbx
movzx ecx, dl
and cl, r11b
add cl, cl
sub dl, cl
lea r10d, [r11 + rdx]
sub r10b, 0x75
movabs rdx, 0xb83d9b2ea4f476b7
add rdx, rbx
movzx ecx, dl
and cl, r11b
add cl, cl
sub dl, cl
dec dl
add dl, r11b
mov byte [rbp + rbx - 0x60], dl
inc r9
dec rbx
inc rbx
jmp 0x1400406f2
movabs rdx, 0xcb4c141d296baddf
add rdx, rbx
movzx ecx, dl
and cl, r11b
add cl, cl
sub dl, cl
lea r10d, [r11 + rdx]
sub r10b, 0x19
dec rbx
inc rbx
jmp 0x1400406f2
movabs rdx, 0x99195c09b87939f5
mov r11, r8
add rdx, rbx
movzx ecx, dl
and cl, r8b
add cl, cl
sub dl, cl
lea r10d, [r8 + rdx]
add r10b, 0x4d
movzx ecx, r11b
inc rax
movabs r8, 0x5156f7385d6db0ac
mov edx, Ordinal_41
add r8, rbx
and cl, r8b
sub dl, cl
mov rcx, 0xffffffffffffffff
sub rcx, rax
add dl, dl
add dl, r11b
add dl, r8b
mov byte [rbp + rbx - 0x60], dl
add rbx, rcx
movzx ecx, byte [rbp + rbx - 0x60]
add rcx, r9
add rbx, rcx
inc rbx
jmp 0x1400406f2
movzx ecx, r8b
movabs rdx, 0xc2426a6c3b7bef93
add rdx, rbx
and cl, dl
add cl, cl
sub r8b, cl
lea r10d, [rdx + r8]
sub r10b, 5
movzx ecx, byte [rbp + rbx - 0x60]
add rcx, r9
add rbx, rcx
inc rbx
jmp 0x1400406f2
movabs rdx, 0x4ed5c368f7cbd275
add rdx, rbx
movzx ecx, dl
and cl, r11b
add cl, cl
sub dl, cl
lea r10d, [r11 + rdx]
sub r10b, 0x33
jmp 0x1400406f0
movabs rcx, 0x77fed1cb7ace8813
add rcx, rbx
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea r10d, [r11 + rcx]
add r10b, 0x7b
jmp 0x1400406e0
lea rdx, [rbp + 0x156fc8c]
jmp 0x14004134c
lea rdx, [rbp + 0xd5a1bd]
jmp 0x14004134c
lea rdx, [rbp - 0x60]
mov rcx, qword [rbp - 8]
lea rax, [rbp - 0x10]
mov qword [rsp + 0x28], rax
lea r9, [rbp + 0x10]
xor r8d, r8d
mov qword [rsp + 0x20], 0
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
mov ecx, dword [rbp - 0x10]
call fcn.140213288
movzx r11d, byte [rsp + 0x30]
mov rsi, rax
xor eax, eax
mov dword [rbp - 0x38], 0x6a4461be
xorps xmm0, xmm0
mov dword [rbp - 0x1c], eax
mov word [rbp - 0x18], ax
movabs r13, 0x6602d312a79b11e2
mov byte [rbp - 0x16], al
movabs r14, 0x5e3b5087bfb8778a
mov dword [rbp - 0x34], 0x6672467a
movabs r15, 0x63889b210132b5b6
mov dword [rbp - 0x30], 0xc37e7848
movabs r12, 0x9782f4fbb1fc91f2
movups xmmword [rbp - 0x2c], xmm0
mov r8, qword [0x1402cdf20]
mov r9, qword [0x1402cdf18]
nop
xor ebx, ebx
cmp rbx, 0x23
jae 0x1400421e2
movzx edi, byte [rbp + rbx - 0x38]
mov r10, rdi
cmp r8, rbx
ja 0x1400421d9
lea rax, [r9 + 1]
cmp r8, rax
jae 0x140041421
lea rcx, [rbx + r13]
mov r11, rdi
movzx eax, cl
and al, r10b
add al, al
sub r11b, al
sub r11b, 0x2e
add r11b, cl
jmp 0x140041470
je 0x140042147
lea rax, [r9 + 2]
cmp r8, rax
je 0x1400420af
lea rax, [r9 + 3]
cmp r8, rax
je 0x140042072
lea rax, [r9 + 5]
cmp r8, rax
je 0x140042049
lea rax, [r9 + 6]
cmp r8, rax
je 0x140041ffd
lea rax, [r9 + 4]
cmp r8, rax
je 0x140041fd0
nop dword [rax + rax]
cmp r9, rbx
ja 0x1400421d0
lea rax, [r9 + 0x5a]
cmp r8, rax
jae 0x14004149f
lea rdx, [rbx + r14]
mov ecx, Ordinal_32
movzx eax, dl
and al, dil
sub cl, al
lea r11d, [rcx + rcx]
add r11b, dl
add r11b, dil
jmp 0x1400414f0
lea rax, [r9 + 1]
cmp r8, rax
je 0x140041f7e
inc rax
cmp r8, rax
je 0x140041f4f
lea rax, [r9 + 3]
cmp r8, rax
je 0x140041f2b
lea rax, [r9 + 6]
cmp r8, rax
je 0x140041f02
lea rax, [r9 + 2]
cmp r8, rax
je 0x140041eda
lea rax, [r9 + 7]
cmp r8, rax
je 0x140041ea8
nop dword [rax]
lea rax, [r9 + r8]
cmp rax, rbx
jbe 0x140041b46
nop dword [rax]
lea rax, [r9 + 0x64]
cmp r8, rax
je 0x140041b1d
lea rax, [r9 + 5]
cmp r8, rax
je 0x140041af0
lea rax, [r9 + 0x1000]
cmp r8, rax
je 0x140041ac6
lea rax, [r9 + 1]
cmp r8, rax
je 0x140041a9d
lea rax, [r9 + 0x80]
cmp r8, rax
je 0x140041a76
lea rax, [r9 + 6]
cmp r8, rax
je 0x140041a4d
lea rax, [r9 + 0x61]
cmp r8, rax
je 0x140041a24
lea rax, [r9 + 0x20]
cmp r8, rax
je 0x140041a00
lea rax, [r9 + 0x200]
cmp r8, rax
je 0x1400419c9
lea rax, [r9 + 8]
cmp r8, rax
je 0x140041500
lea r8, [r9 + 0x400]
lea r9, [r8 + 0x7a]
lea rax, [r9 + 0x2a]
cmp r8, rax
jb 0x1400421a7
lea rax, [r9 + 0x64]
cmp r8, rax
jb 0x14004217e
lea rax, [r9 + 5]
cmp r8, rax
jb 0x1400416fd
lea rax, [r9 + 0x1000]
cmp r8, rax
jb 0x1400416dd
lea rax, [r9 + 1]
cmp r8, rax
jb 0x1400416bd
lea rax, [r9 + 0x80]
cmp r8, rax
jb 0x140041966
lea rax, [r9 + 6]
cmp r8, rax
jb 0x1400418ff
lea rax, [r9 + 0x61]
cmp r8, rax
jb 0x1400418b0
lea rax, [r9 + 0x20]
cmp r8, rax
jb 0x140041884
lea rax, [r9 + 0x200]
cmp r8, rax
jb 0x140041500
lea r8, [r9 + 4]
lea r9, [r8 + 8]
lea rax, [r9 + 0x400]
cmp r8, rax
ja 0x140041852
lea rax, [r9 + 0x2a]
cmp r8, rax
ja 0x140041829
lea rax, [r9 + 0x64]
cmp r8, rax
ja 0x140041801
lea rax, [r9 + 5]
cmp r8, rax
ja 0x1400417dd
lea rax, [r9 + 0x1000]
cmp r8, rax
ja 0x1400417c9
lea rax, [r9 + 0x10]
cmp r8, rax
ja 0x1400417a1
lea rax, [r9 + 0x80]
cmp r8, rax
ja 0x140041777
lea rax, [r9 + 6]
cmp r8, rax
ja 0x140041745
lea rax, [r9 + 0x61]
cmp r8, rax
ja 0x140041721
lea rax, [r9 + 0x20]
cmp r8, rax
ja 0x140041500
lea r8, [r9 + 0x42]
lea r9, [r8 + 1]
jmp 0x140041500
lea rdx, [rbx + r15]
mov ecx, 3
movzx eax, dl
and al, dil
sub cl, al
lea r11d, [rcx + rcx]
add r11b, dl
add r11b, dil
jmp 0x1400414f0
lea rdx, [rbx + r12]
mov ecx, Ordinal_50
movzx eax, dl
and al, dil
sub cl, al
lea r11d, [rcx + rcx]
add r11b, dl
add r11b, dil
jmp 0x140041470
movabs rcx, 0xcb7d4ed662c66e2e
add rcx, rbx
movzx eax, cl
and al, dil
add al, al
sub cl, al
lea r11d, [rdi + rcx]
sub r11b, 0x42
jmp 0x1400413f1
movabs rcx, 0xf1da843dfdc3bc50
add rcx, rbx
movzx eax, cl
and al, dil
add al, al
sub cl, al
lea r11d, [rdi + rcx]
sub r11b, 0x30
jmp 0x140041f9d
mov ecx, reloc.WLDAP32.dll_Ordinal_22
movabs rdx, 0x25d4de18ae8d988c
add rdx, rbx
inc r9
movzx eax, dl
dec rbx
and al, dil
sub cl, al
lea r11d, [rcx + rcx]
add r11b, dl
add r11b, dil
inc rbx
jmp 0x1400413e2
movabs rcx, 0x59cf37f35f5774c8
add rcx, rbx
dec rbx
movzx eax, cl
and al, dil
add al, al
sub cl, al
lea r11d, [rdi + rcx]
sub r11b, 0x78
inc rbx
jmp 0x1400413e2
movabs rdx, 0x8dc991ce10215104
movzx r11d, dil
add rdx, rbx
movzx eax, dl
and al, dil
add al, al
sub r11b, al
sub r11b, 0x1c
add r11b, dl
jmp 0x14004201c
movabs rdx, 0xc1c3eba8c0eb2d40
mov ecx, reloc.WLDAP32.dll_Ordinal_32
jmp 0x140042058
movabs rcx, 0xf5be458371b5097c
add rcx, rbx
movzx eax, cl
and al, dil
add al, al
sub cl, al
lea r11d, [rdi + rcx]
sub r11b, 0x64
jmp 0x140042096
movabs rdx, 0x29b89f5e227ee5b8
movzx r11d, dil
add rdx, rbx
movzx eax, dl
and al, dil
add al, al
sub r11b, al
sub r11b, 8
add r11b, dl
jmp 0x1400420d0
mov ecx, Ordinal_46
movabs rdx, 0x5db2f938d348c1f4
add rdx, rbx
movzx eax, dl
and al, dil
sub cl, al
lea r11d, [rcx + rcx]
add r11b, dil
add r11b, dl
jmp 0x140042100
movabs rcx, 0x91ad531384129e30
add rcx, rbx
movzx eax, cl
and al, dil
add al, al
sub cl, al
movzx eax, byte [rbp + rbx - 0x38]
add rax, r9
add rbx, rax
lea r11d, [rdi + rcx]
sub r11b, 0x50
inc rbx
jmp 0x1400413e2
movabs rcx, 0x939f33b63e0b44c6
add rcx, rbx
movzx eax, cl
and al, dil
add al, al
sub cl, al
lea r11d, [rdi + rcx]
sub r11b, 0x6a
mov byte [rbp + rbx - 0x38], r11b
inc rbx
jmp 0x1400413e2
movabs rcx, 0xc7998d90eed52102
add rcx, rbx
movzx eax, cl
and al, dil
add al, al
sub cl, al
lea r11d, [rdi + rcx]
sub r11b, 0xe
cmp r9, 0x42
jb 0x1400418a3
mov edx, reloc.WLDAP32.dll_Ordinal_22
movabs rcx, 0xa520196ec7c9200c
add rcx, rbx
movzx eax, cl
and al, dil
sub dl, al
add dl, dl
add dl, cl
add dl, dil
lea r11d, [rdx + rdx]
jmp 0x140041f9d
mov ecx, Ordinal_41
movabs rdx, 0xfb93e76b9f9efd3e
add rdx, rbx
movzx eax, dil
and al, dl
sub cl, al
lea r11d, [rcx + rcx]
add r11b, dil
add r11b, dl
cmp r8, 0x1000
jae 0x140041e4d
lea rax, [r9 + 8]
cmp r8, rax
jbe 0x140041d47
mov ecx, Ordinal_35
movabs rdx, 0xace79bf9afabba64
add rdx, rbx
movzx eax, dl
and al, dil
sub cl, al
lea r11d, [rcx + rcx]
add r11b, dl
add r11b, dil
jmp 0x1400418cf
movabs rcx, 0x2f8e41465068d97a
add rcx, rbx
movzx eax, cl
and al, dil
add al, al
sub cl, al
lea r11d, [rdi + rcx]
sub r11b, 0x56
lea rax, [r9 + r8]
cmp rax, 0x10
je 0x140041e7b
lea rax, [r9 + 0x40]
cmp r8, rax
jbe 0x140041c6a
mov ecx, 5
movabs rdx, 0x4eac4b71eff342da
add rdx, rbx
movzx eax, dl
and al, dil
sub cl, al
lea r11d, [rcx + rcx]
add r11b, dl
add r11b, dil
jmp 0x140041923
mov ecx, reloc.WLDAP32.dll_Ordinal_46
movabs rdx, 0x3563e32e7e52cd3c
add rdx, rbx
movzx eax, dl
and al, dil
sub cl, al
movzx eax, byte [rbp + rbx - 0x38]
add rax, r9
add rbx, rax
lea r11d, [rcx + rcx]
add r11b, dl
add r11b, dil
inc rbx
jmp 0x1400413e2
movabs rcx, 0x695e3d092f1ca978
add rcx, rbx
movzx eax, cl
and al, dil
add al, al
sub cl, al
lea r11d, [rdi + rcx]
sub r11b, 0x48
jmp 0x140042100
mov ecx, 0xa
movabs rdx, 0x9d5896e3dfe685b4
add rdx, rbx
movzx eax, dl
and al, dil
sub cl, al
lea r11d, [rcx + rcx]
add r11b, dl
add r11b, dil
jmp 0x1400420d0
mov ecx, gethostname
movabs rdx, 0xd152f0be90b061f0
add rdx, rbx
movzx eax, dl
and al, dil
sub cl, al
lea r11d, [rcx + rcx]
add r11b, dl
add r11b, dil
jmp 0x140042096
movabs rcx, 0x54d4a99417a3e2c
add rcx, rbx
movzx eax, cl
and al, dil
add al, al
sub cl, al
lea r11d, [rdi + rcx]
sub r11b, 0x34
add r8, r9
jmp 0x140042096
mov ecx, reloc.WS2_32.dll_sendto
movabs rdx, 0x3947a473f2441a68
add rdx, rbx
movzx eax, dl
and al, dil
sub cl, al
lea r11d, [rcx + rcx]
add r11b, dl
add r11b, dil
jmp 0x14004201c
movabs rcx, 0x6d41fe4ea30df6a4
add rcx, rbx
dec rbx
movzx eax, cl
and al, dil
add al, al
sub cl, al
lea r11d, [rdi + rcx]
sub r11b, 0x7c
inc rbx
jmp 0x1400413e2
movabs rcx, 0xa13c582953d7d2e0
inc r9
add rcx, rbx
dec rbx
movzx eax, cl
and al, dil
add al, al
sub cl, al
lea r11d, [rdi + rcx]
sub r11b, 0x20
inc rbx
jmp 0x1400413e2
mov ecx, reloc.WLDAP32.dll_Ordinal_30
movabs rdx, 0xd536b20404a1af1c
add rdx, rbx
movzx eax, dl
and al, dil
sub cl, al
lea r11d, [rcx + rcx]
add r11b, dl
add r11b, dil
jmp 0x140041f9d
lea rax, [r9 + 6]
cmp r8, rax
jae 0x140041b6a
lea rcx, [rbx + r13]
movzx eax, cl
and al, dil
add al, al
sub cl, al
lea r11d, [rdi + rcx]
sub r11b, 0x2e
jmp 0x140041985
lea rax, [r9 + 1]
cmp r8, rax
jne 0x140041baa
mov ecx, Ordinal_60
movabs rdx, 0xbc76a10f7f70ef14
add rdx, rbx
movzx eax, dl
and al, dil
sub cl, al
movzx eax, byte [rbp + rbx - 0x38]
add rax, r9
add rbx, rax
lea r11d, [rcx + rcx]
add r11b, dl
add r11b, dil
inc rbx
jmp 0x1400413e2
inc rax
cmp r8, rax
jne 0x140041bdb
mov ecx, recv
movabs rdx, 0x887c4734cea712d8
add rdx, rbx
movzx eax, dl
and al, dil
sub cl, al
lea r11d, [rcx + rcx]
add r11b, dil
add r11b, dl
jmp 0x140042100
lea rax, [r9 + 5]
cmp r8, rax
jne 0x140041bf8
movabs rdx, 0xec8d39a4bc497e24
mov ecx, 2
jmp 0x140042058
lea rax, [r9 + 7]
cmp r8, rax
jne 0x140041c30
mov ecx, Ordinal_41
movabs rdx, 0x849885ef5ab5c5ac
add rdx, rbx
dec rbx
movzx eax, dl
and al, dil
sub cl, al
lea r11d, [rcx + rcx]
add r11b, dl
add r11b, dil
inc rbx
jmp 0x1400413e2
lea rax, [r9 + 6]
cmp r8, rax
jne 0x140041985
movabs rcx, 0x509e2c14a9ebe970
inc r9
add rcx, rbx
dec rbx
movzx eax, cl
and al, dil
add al, al
sub cl, al
lea r11d, [rdi + rcx]
sub r11b, 0x10
inc rbx
jmp 0x1400413e2
lea rax, [r9 + 1]
cmp r8, rax
jne 0x140041c9b
movabs rdx, 0x1ab1f1973f29669e
movzx r11d, dil
add rdx, rbx
movzx eax, dl
and al, dil
add al, al
sub r11b, al
sub r11b, 0x52
add r11b, dl
jmp 0x140041f9d
inc rax
cmp r8, rax
jne 0x140041cc7
movabs rcx, 0x7ec2e4072ccbd1ea
add rcx, rbx
movzx eax, cl
and al, dil
add al, al
sub cl, al
lea r11d, [rdi + rcx]
sub r11b, 0x66
jmp 0x14004201c
lea rax, [r9 + 5]
cmp r8, rax
jne 0x140041ce4
movabs rdx, 0x4ac88a2c7c01f5ae
mov ecx, Ordinal_32
jmp 0x140042058
lea rax, [r9 + 4]
cmp r8, rax
jne 0x140041d11
movabs rcx, 0xe2d3d6771a6e3d36
add rcx, rbx
movzx eax, cl
and al, dil
add al, al
sub cl, al
lea r11d, [rdi + rcx]
sub r11b, 0x7a
jmp 0x1400420d0
lea rax, [r9 + 3]
cmp r8, rax
jne 0x140041923
mov ecx, reloc.WS2_32.dll_setsockopt
movabs rdx, 0xaed97c9c69a460fa
add rdx, rbx
movzx eax, dl
and al, dil
sub cl, al
lea r11d, [rcx + rcx]
add r11b, dl
add r11b, dil
jmp 0x140042100
lea rax, [r9 + 1]
cmp r8, rax
jne 0x140041d82
movabs rcx, 0x78ed421efee1de28
add rcx, rbx
movzx eax, cl
and al, dil
add al, al
sub cl, al
movzx eax, byte [rbp + rbx - 0x38]
add rax, r9
add rbx, rax
lea r11d, [rdi + rcx]
sub r11b, 0x18
inc rbx
jmp 0x1400413e2
inc rax
cmp r8, rax
jne 0x140041db2
movabs rdx, 0x44f2e8444e1801ec
movzx r11d, dil
add rdx, rbx
movzx eax, dl
and al, dil
add al, al
sub r11b, al
sub r11b, 0x74
add r11b, dl
jmp 0x140042100
lea rax, [r9 + 2]
cmp r8, rax
jne 0x140041de4
mov ecx, Ordinal_27
movabs rdx, 0x10f88e699d4e25b0
add rdx, rbx
movzx eax, dl
and al, dil
sub cl, al
lea r11d, [rcx + rcx]
add r11b, dil
add r11b, dl
jmp 0x1400420d0
lea rax, [r9 + 5]
cmp r8, rax
jne 0x140041e16
mov ecx, recv
movabs rdx, 0x750980d98af090fc
add rdx, rbx
movzx eax, dl
and al, dil
sub cl, al
lea r11d, [rcx + rcx]
add r11b, dil
add r11b, dl
jmp 0x14004201c
lea rax, [r9 + 3]
cmp r8, rax
jne 0x1400418cf
movabs rcx, 0x410f26feda26b4c0
add rcx, rbx
dec rbx
movzx eax, cl
and al, dil
add al, al
sub cl, al
lea r11d, [rdi + rcx]
sub r11b, 0x40
inc rbx
jmp 0x1400413e2
mov ecx, Ordinal_41
movabs rdx, 0x7125bf9416ff43d0
add rdx, rbx
movzx eax, dl
and al, dil
sub cl, al
lea r11d, [rcx + rcx]
add r11b, byte [rbp + rbx - 0x38]
add r11b, dl
add r11b, dil
jmp 0x14004201c
movabs rdx, 0x3d2b65b966356794
movzx eax, dil
add rdx, rbx
movzx r11d, dil
and al, dl
add al, al
sub r11b, al
sub r11b, byte [rbp + rbx - 0x38]
sub r11b, 0xc
add r11b, dl
jmp 0x1400420d0
movabs rcx, 0x8a6e27d7889fb96e
add rcx, rbx
movzx eax, cl
and al, dil
add al, al
sub cl, al
movzx eax, byte [rbp + rbx - 0x38]
add rax, r9
add rbx, rax
lea r11d, [rdi + rcx]
sub r11b, 2
inc rbx
jmp 0x1400413e2
movabs rdx, 0xf262db8cea3371e6
movzx r11d, dil
add rdx, rbx
movzx eax, dl
and al, dil
add al, al
sub r11b, al
sub r11b, 0x4a
add r11b, dl
jmp 0x1400420d0
mov ecx, 9
movabs rdx, 0x265d35679afd4e22
add rdx, rbx
movzx eax, dl
and al, dil
sub cl, al
lea r11d, [rcx + rcx]
add r11b, dl
add r11b, dil
jmp 0x140042096
movabs rcx, 0x8e51e91cfc91069a
add rcx, rbx
movzx eax, cl
and al, dil
add al, al
sub cl, al
lea r11d, [rdi + rcx]
sub r11b, 0x36
jmp 0x14004201c
mov ecx, reloc.WS2_32.dll_send
movabs rdx, 0xc24c42f7ad5ae2d6
add rdx, rbx
dec rbx
movzx eax, dl
and al, dil
sub cl, al
lea r11d, [rcx + rcx]
add r11b, dl
add r11b, dil
inc rbx
jmp 0x1400413e2
movabs rcx, 0x2a40f6ad0eee9b4e
add rcx, rbx
movzx eax, cl
and al, dil
add al, al
sub cl, al
lea r11d, [rdi + rcx]
sub r11b, 0x22
movabs rdx, 0xb22ec816f6431ee
mov ecx, 0x3f
add rdx, rbx
inc r9
movzx eax, dl
and al, dil
sub cl, al
add cl, cl
add cl, dl
add cl, dil
mov byte [rbp + rbx - 0x38], cl
dec rbx
inc rbx
jmp 0x1400413e2
movabs rcx, 0xc630043d214c3002
add rcx, rbx
movzx eax, cl
and al, dil
add al, al
sub cl, al
lea r11d, [rdi + rcx]
sub r11b, 0xe
inc r9
dec rbx
inc rbx
jmp 0x1400413e2
movabs rcx, 0x2e24b7f282dfe87a
add rcx, rbx
movzx eax, cl
and al, dil
add al, al
sub cl, al
lea r11d, [rdi + rcx]
sub r11b, 0x56
movabs rdx, 0xd72892a6be9a55b2
mov ecx, reloc.WS2_32.dll_recvfrom
add rdx, rbx
movzx eax, dl
and al, dil
sub cl, al
add cl, cl
add cl, r11b
add cl, dl
add cl, dil
mov byte [rbp + rbx - 0x38], cl
add r8, r9
jmp 0x140042096
movabs rdx, 0x621f11cd33a9c4b6
mov ecx, 3
add rdx, rbx
movzx eax, dl
and al, dil
sub cl, al
lea r11d, [rcx + rcx]
add r11b, dl
add r11b, dil
add r8, r9
jmp 0x140042096
mov ecx, Ordinal_50
movabs rdx, 0x96196ba7e473a0f2
add rdx, rbx
movzx eax, dl
and al, r10b
sub cl, al
lea r11d, [rcx + rcx]
add r11b, r10b
add r11b, dl
movzx eax, r11b
mov rcx, 0xffffffffffffffff
sub rcx, rax
add rbx, rcx
inc rbx
jmp 0x1400413e2
mov rdi, r10
movabs rax, 0xca13c582953d7d2e
add rax, rbx
and r10b, al
add r10b, r10b
sub al, r10b
lea r11d, [rdi + rax]
sub r11b, 0x42
movzx eax, dil
inc r9
movabs rdx, 0xa32e38cc0dd07976
movzx ecx, dil
add rdx, rbx
and al, dl
add al, al
sub cl, al
sub cl, 0x3a
add cl, dl
movzx eax, cl
mov byte [rbp + rbx - 0x38], al
add rax, r9
sub rbx, rax
movzx eax, dil
inc r8
movabs rcx, 0x9310bdeb56b8b58
add rcx, rbx
and al, cl
add al, al
sub dil, al
mov rax, 0xffffffffffffffff
sub rax, r8
sub dil, 0x68
add dil, cl
mov byte [rbp + rbx - 0x38], dil
add rbx, rax
movzx eax, byte [rbp + rbx - 0x38]
add rax, r9
add rbx, rax
inc rbx
jmp 0x1400413e2
mov ecx, Ordinal_60
movabs rdx, 0x32087937f6d135a6
add rdx, rbx
movzx eax, r10b
and al, dl
sub cl, al
lea r11d, [rcx + rcx]
add r11b, r10b
add r11b, dl
movzx eax, byte [rbp + rbx - 0x38]
add rax, r9
add rbx, rax
inc rbx
jmp 0x1400413e2
mov ecx, reloc.WS2_32.dll_listen
movabs rdx, 0xff77a8b113904a6a
add rdx, rbx
movzx eax, dl
and al, dil
sub cl, al
lea r11d, [rcx + rcx]
add r11b, dl
add r11b, dil
jmp 0x1400413e0
mov ecx, Ordinal_60
movabs rdx, 0x3372028bc45a26a6
add rdx, rbx
movzx eax, dl
and al, dil
sub cl, al
lea r11d, [rcx + rcx]
add r11b, dl
add r11b, dil
jmp 0x1400413d0
lea rdx, [rbp + 0x17003a0]
jmp 0x1400421e6
lea rdx, [rbp + 0xcb1582]
jmp 0x1400421e6
lea rdx, [rbp - 0x38]
mov rcx, qword [rbp - 8]
lea rax, [rbp - 0x10]
mov qword [rsp + 0x28], rax
lea r9, [rbp + 0x10]
xor r8d, r8d
mov qword [rsp + 0x20], rsi
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
mov eax, dword [rsi + 0x10]
lea rbx, [rsi + 0x18]
test eax, eax
je 0x140042233
mov edi, eax
lea r9, [rbx + 8]
mov r8, rbx
lea rdx, [rbp]
lea rcx, [0x1402cd9a8]
call fcn.14004ec60
add rbx, 0x14
sub rdi, 1
jne 0x140042212
mov rcx, rsi
call fcn.140212ef4
mov rcx, qword [rbp - 8]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov al, 1
mov rcx, qword [rbp + 0x18]
xor rcx, rsp
call fcn.140212e90
lea r11, [rsp + 0x120]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret