Function at 0x1400ff730
Capabilities:
Parse pe header
Set registry value

Disassembly:
mov qword [rsp + 0x18], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x60]
sub rsp, 0x160
mov rax, qword [0x1401d8800]
xor rax, rsp
mov qword [rbp + 0x58], rax
mov rdi, rdx
mov r14, rcx
mov dword [rsp + 0x60], 0x9fa15a83
mov dword [rsp + 0x64], 0xaa849a91
mov dword [rsp + 0x68], 0x989a9b65
mov dword [rsp + 0x6c], 0x96a59590
mov dword [rsp + 0x70], 0x8a929194
mov dword [rsp + 0x74], 0x8b83ac86
mov dword [rsp + 0x78], 0x8587a892
mov dword [rsp + 0x7c], 0x8c958e78
mov word [rbp - 0x80], 0x9983
mov byte [rbp - 0x7e], 0xf4
xorps xmm0, xmm0
movups xmmword [rbp - 0x7d], xmm0
movups xmmword [rbp - 0x6d], xmm0
movabs rsi, 0x6111ba54ab1a1
movabs r13, 0x49f52040825d
movabs r15, 0x2828188306c87f
movabs r12, 0x27942e4285c3c5
movzx r10d, byte [rbp + 0x30]
nop dword [rax]
nop word [rax + rax]
mov r8, qword [0x14022c4b8]
mov r9, qword [0x14022c4b0]
nop
xor ebx, ebx
cmp rbx, 0x43
jae 0x140100394
movzx r11d, byte [rsp + rbx + 0x60]
movzx edx, r11b
cmp r8, rbx
ja 0x14010038b
lea rax, [r9 + 1]
cmp r8, rax
jae 0x1400ff842
lea rcx, [rbx + r13]
mov rax, rcx
and rax, r11
imul r10, rax, 0xfffffffffffffffe
add r10, rcx
add r10, r11
add r10b, 0x75
jmp 0x1400ff87b
je 0x14010031c
inc rax
cmp r8, rax
je 0x140100298
lea rax, [r9 + 3]
cmp r8, rax
je 0x14010025d
lea rax, [r9 + 5]
cmp r8, rax
je 0x14010021e
lea rax, [r9 + 7]
cmp r8, rax
je 0x1401001f4
movzx edx, r11b
nop
cmp r9, rbx
ja 0x140100382
lea rax, [r9 + 0x80]
cmp r8, rax
jae 0x1400ff8ad
lea rcx, [rbx + rsi]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea r10d, [rdx + rcx]
sub r10b, 0x67
jmp 0x1400ff8e1
lea rax, [r9 + 1]
cmp r8, rax
je 0x1401001b0
lea rax, [r9 + 3]
cmp r8, rax
je 0x14010018c
lea rax, [r9 + 4]
cmp r8, rax
je 0x140100169
lea rax, [r9 + 9]
cmp r8, rax
je 0x140100137
lea rax, [r9 + r8]
cmp rax, rbx
jbe 0x1400ffe30
nop
lea rax, [r9 + 0x42]
cmp r8, rax
je 0x1400ffe11
lea rax, [r9 + 3]
cmp r8, rax
je 0x1400ffde9
lea rax, [r9 + 0x200]
cmp r8, rax
je 0x1400ffdc4
lea rax, [r9 + 6]
cmp r8, rax
je 0x1400ffda5
lea rax, [r9 + 0x1000]
cmp r8, rax
je 0x1400ffd8b
lea rax, [r9 + 0xa]
cmp r8, rax
je 0x1400ffd71
lea rax, [r9 + 0x41]
cmp r8, rax
je 0x1400ffd57
lea rax, [r9 + 0x28]
cmp r8, rax
je 0x1400ffd3d
lea rax, [r9 + 1]
cmp r8, rax
je 0x1400ffd15
lea rax, [r9 + 0x64]
cmp r8, rax
je 0x1400ff8f0
lea r8, [r9 + 0x7a]
lea r9, [r8 + 4]
lea rax, [r9 + 0x20]
cmp r8, rax
jb 0x140100368
lea rax, [r9 + 0x2a]
cmp r8, rax
jb 0x14010034e
lea rax, [r9 + 0x42]
cmp r8, rax
jb 0x1400ffadd
lea rax, [r9 + 3]
cmp r8, rax
jb 0x1400ffac2
lea rax, [r9 + 0x200]
cmp r8, rax
jb 0x1400ffaa7
lea rax, [r9 + 6]
cmp r8, rax
jb 0x1400ffcce
lea rax, [r9 + 0x1000]
cmp r8, rax
jb 0x1400ffc83
lea rax, [r9 + 0xa]
cmp r8, rax
jb 0x1400ffc48
lea rax, [r9 + 0x41]
cmp r8, rax
jb 0x1400ffc26
lea rax, [r9 + 0x28]
cmp r8, rax
jb 0x1400ff8f0
lea r8, [r9 + 0x400]
lea r9, [r8 + 1]
lea rax, [r9 + 9]
cmp r8, rax
ja 0x1400ffbf9
lea rax, [r9 + 0x7a]
cmp r8, rax
ja 0x1400ffbda
lea rax, [r9 + 0x20]
cmp r8, rax
ja 0x1400ffbbb
lea rax, [r9 + 0x2a]
cmp r8, rax
ja 0x1400ffb9c
lea rax, [r9 + 0x42]
cmp r8, rax
ja 0x1400ffb7d
lea rax, [r9 + 3]
cmp r8, rax
ja 0x1400ffb5e
lea rax, [r9 + 0x200]
cmp r8, rax
ja 0x1400ffb3e
lea rax, [r9 + 6]
cmp r8, rax
ja 0x1400ffb1b
lea rax, [r9 + 0x1000]
cmp r8, rax
ja 0x1400ffb01
lea rax, [r9 + 0xa]
cmp r8, rax
ja 0x1400ff8f0
lea r8, [r9 + 0x80]
lea r9, [r8 + 0x41]
jmp 0x1400ff8f0
lea rcx, [rbx + r15]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea r10d, [rdx + rcx]
sub r10b, 0x79
jmp 0x1400ff8e1
lea rcx, [rbx + r12]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea r10d, [rdx + rcx]
sub r10b, 0x63
jmp 0x1400ff880
movabs rcx, 0x2700440204bf0b
add rcx, rbx
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea r10d, [rdx + rcx]
sub r10b, 0x4d
jmp 0x1400ff816
lea ecx, [rbx + 8]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea r10d, [r11 + rcx]
sub r10b, 0x38
jmp 0x1401001cf
lea ecx, [rbx + 0x4e]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea r10d, [r11 + rcx]
sub r10b, 0x22
inc r9
dec rbx
inc rbx
jmp 0x1400ff802
lea ecx, [rbx - 0x6c]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea r10d, [r11 + rcx]
sub r10b, 0xc
dec rbx
inc rbx
jmp 0x1400ff802
lea edx, [rbx - 0x26]
movzx eax, dl
and al, r11b
mov ecx, 5
sub cl, al
lea r10d, [rcx + rcx]
add r10b, dl
add r10b, r11b
jmp 0x140100241
lea edx, [rbx + 0x20]
movzx eax, dl
and al, r11b
mov ecx, reloc.WS2_32.dll_recv
sub cl, al
lea r10d, [rcx + rcx]
add r10b, dl
add r10b, r11b
jmp 0x14010027c
lea edx, [rbx + 0x66]
movzx eax, dl
and al, r11b
mov ecx, reloc.WLDAP32.dll_Ordinal_27
sub cl, al
lea r10d, [rcx + rcx]
add r10b, dl
add r10b, r11b
jmp 0x14010027f
lea edx, [rbx - 0x54]
movzx eax, dl
and al, r11b
mov ecx, Ordinal_41
sub cl, al
lea r10d, [rcx + rcx]
add r10b, dl
add r10b, r11b
jmp 0x1401002bb
lea edx, [rbx - 0xe]
movzx eax, dl
and al, r11b
mov ecx, Ordinal_50
sub cl, al
lea r10d, [rcx + rcx]
add r10b, dl
add r10b, r11b
jmp 0x1401002de
lea edx, [rbx + 0x38]
movzx eax, dl
and al, r11b
mov ecx, reloc.WLDAP32.dll_Ordinal_60
sub cl, al
lea r10d, [rcx + rcx]
add r10b, dl
add r10b, r11b
movzx eax, byte [rsp + rbx + 0x60]
add rax, r9
add rbx, rax
inc rbx
jmp 0x1400ff802
lea ecx, [rbx + 0x67]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea r10d, [r11 + rcx]
add r10b, 0x2f
mov byte [rsp + rbx + 0x60], r10b
inc rbx
jmp 0x1400ff802
lea ecx, [rbx - 0x53]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea r10d, [r11 + rcx]
add r10b, 0x45
cmp r9, 9
jb 0x1400ffc3b
lea ecx, [rbx + 0xe]
movzx eax, cl
and al, r11b
mov edx, reloc.WS2_32.dll_ntohs
sub dl, al
add dl, dl
add dl, cl
add dl, r11b
lea r10d, [rdx + rdx]
jmp 0x1401001cf
lea ecx, [rbx - 0xd]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea r10d, [r11 + rcx]
add r10b, 0x5b
cmp r8, 0x20
jae 0x1401000fa
lea rax, [r9 + 0x3e8]
cmp r8, rax
jbe 0x1400ffffa
lea edx, [rbx - 0x36]
movzx eax, dl
and al, r11b
mov ecx, 0x3d
sub cl, al
lea r10d, [rcx + rcx]
add r10b, dl
add r10b, r11b
jmp 0x1400ffc5d
lea ecx, [rbx + 0x39]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea r10d, [r11 + rcx]
add r10b, 0x71
lea rax, [r9 + r8]
cmp rax, 0x42
je 0x14010011b
lea rax, [r9 + 0x61]
cmp r8, rax
jbe 0x1400fff42
lea ecx, [rbx + 0x29]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea r10d, [r11 + rcx]
sub r10b, 0x1f
jmp 0x1400ffc98
lea ecx, [rbx - 0x3a]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea r10d, [r11 + rcx]
sub r10b, 0x6a
movzx eax, byte [rsp + rbx + 0x60]
add rax, r9
add rbx, rax
inc rbx
jmp 0x1400ff802
lea ecx, [rbx + 0xc]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea r10d, [r11 + rcx]
sub r10b, 0x54
jmp 0x1401002de
lea ecx, [rbx + 0x52]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea r10d, [r11 + rcx]
sub r10b, 0x3e
jmp 0x1401002bb
lea ecx, [rbx - 0x68]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea r10d, [r11 + rcx]
sub r10b, 0x28
jmp 0x14010027f
lea ecx, [rbx - 0x22]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea r10d, [r11 + rcx]
sub r10b, 0x12
jmp 0x14010027c
lea edx, [rbx + 0x24]
movzx eax, dl
and al, r11b
mov ecx, 2
sub cl, al
lea r10d, [rcx + rcx]
add r10b, dl
add r10b, r11b
jmp 0x140100241
lea edx, [rbx + 0x6a]
movzx eax, dl
and al, r11b
mov ecx, reloc.WS2_32.dll_listen
sub cl, al
lea r10d, [rcx + rcx]
add r10b, dl
add r10b, r11b
dec rbx
inc rbx
jmp 0x1400ff802
lea edx, [rbx - 0x50]
movzx eax, dl
and al, r11b
mov ecx, Ordinal_26
sub cl, al
lea r10d, [rcx + rcx]
add r10b, dl
add r10b, r11b
inc r9
dec rbx
inc rbx
jmp 0x1400ff802
lea edx, [rbx - 0xa]
movzx eax, dl
and al, r11b
mov ecx, reloc.WLDAP32.dll_Ordinal_35
sub cl, al
lea r10d, [rcx + rcx]
add r10b, dl
add r10b, r11b
jmp 0x1401001cf
lea rax, [r9 + 6]
cmp r8, rax
jae 0x1400ffe54
lea rcx, [rbx + r13]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea r10d, [rdx + rcx]
add r10b, 0x75
jmp 0x1400ffce3
lea rcx, [r9 + 1]
cmp r8, rcx
jne 0x1400ffe8a
lea edx, [rbx + 0x42]
movzx eax, dl
and al, r11b
mov ecx, Ordinal_26
sub cl, al
lea r10d, [rcx + rcx]
add r10b, dl
add r10b, r11b
movzx eax, byte [rsp + rbx + 0x60]
add rax, r9
add rbx, rax
inc rbx
jmp 0x1400ff802
lea rax, [r9 + 3]
cmp r8, rax
jne 0x1400ffeb2
lea edx, [rbx - 0x4a]
movzx eax, dl
and al, r11b
mov ecx, 3
sub cl, al
lea r10d, [rcx + rcx]
add r10b, dl
add r10b, r11b
jmp 0x1401002bb
lea rax, [rcx + 1]
cmp r8, rax
jne 0x1400ffed5
lea ecx, [rbx + 0x70]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea r10d, [r11 + rcx]
sub r10b, 0x10
jmp 0x14010027f
lea rax, [r9 + 5]
cmp r8, rax
jne 0x1400ffef8
lea ecx, [rbx + 0x2a]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea r10d, [r11 + rcx]
sub r10b, 0x26
jmp 0x14010027c
lea rax, [r9 + 4]
cmp r8, rax
jne 0x1400fff1b
lea ecx, [rbx - 0x1c]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea r10d, [r11 + rcx]
sub r10b, 0x3c
jmp 0x140100241
lea rax, [r9 + 7]
cmp r8, rax
jne 0x1400ffce3
lea ecx, [rbx + 0x12]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea r10d, [r11 + rcx]
sub r10b, 0x7e
jmp 0x1401001cf
lea rax, [r9 + 1]
cmp r8, rax
jne 0x1400fff65
lea ecx, [rbx - 0x1d]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea r10d, [r11 + rcx]
sub r10b, 0x35
jmp 0x1401001cf
inc rax
cmp r8, rax
jne 0x1400fff8d
lea ecx, [rbx + 0x57]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea r10d, [r11 + rcx]
sub r10b, 0x61
dec rbx
inc rbx
jmp 0x1400ff802
lea rax, [r9 + 3]
cmp r8, rax
jne 0x1400fffb0
lea ecx, [rbx + 0x11]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea r10d, [r11 + rcx]
sub r10b, 0x77
jmp 0x140100241
lea rax, [r9 + 4]
cmp r8, rax
jne 0x1400fffd3
lea ecx, [rbx - 0x35]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea r10d, [r11 + rcx]
add r10b, 0x73
jmp 0x14010027c
lea rax, [r9 + 6]
cmp r8, rax
jne 0x1400ffc98
lea ecx, [rbx - 0x7b]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea r10d, [r11 + rcx]
add r10b, 0x5d
jmp 0x14010027f
lea rax, [r9 + 1]
cmp r8, rax
jne 0x140100030
lea edx, [rbx - 0x7c]
movzx eax, dl
and al, r11b
mov ecx, reloc.WLDAP32.dll_Ordinal_50
sub cl, al
lea r10d, [rcx + rcx]
add r10b, dl
add r10b, r11b
movzx eax, byte [rsp + rbx + 0x60]
add rax, r9
add rbx, rax
inc rbx
jmp 0x1400ff802
inc rax
cmp r8, rax
jne 0x140100057
lea edx, [rbx + 0x3e]
movzx eax, dl
and al, r11b
mov ecx, Ordinal_41
sub cl, al
lea r10d, [rcx + rcx]
add r10b, dl
add r10b, r11b
jmp 0x1401002de
lea rax, [r9 + 3]
cmp r8, rax
jne 0x14010007f
lea edx, [rbx - 0x4e]
movzx eax, dl
and al, r11b
mov ecx, reloc.WS2_32.dll_recvfrom
sub cl, al
lea r10d, [rcx + rcx]
add r10b, dl
add r10b, r11b
jmp 0x14010027f
lea rax, [r9 + 5]
cmp r8, rax
jne 0x1401000a7
lea edx, [rbx + 0x6c]
movzx eax, dl
and al, r11b
mov ecx, 6
sub cl, al
lea r10d, [rcx + rcx]
add r10b, dl
add r10b, r11b
jmp 0x14010027c
lea rax, [r9 + 6]
cmp r8, rax
jne 0x1401000d3
lea ecx, [rbx - 0x66]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea r10d, [r11 + rcx]
sub r10b, 0x36
inc r9
dec rbx
inc rbx
jmp 0x1400ff802
lea rax, [r9 + 8]
cmp r8, rax
jne 0x1400ffc5d
lea ecx, [rbx + 0x54]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea r10d, [r11 + rcx]
sub r10b, 0x4c
jmp 0x1401001cf
lea edx, [rbx - 0x38]
movzx eax, dl
and al, r11b
add al, al
movzx r10d, r11b
sub r10b, al
sub r10b, 0x78
add r10b, dl
add r10b, r11b
jmp 0x140100241
lea edx, [rbx - 0x7e]
movzx eax, dl
and al, r11b
mov ecx, reloc.WS2_32.dll_gethostname
sub cl, al
lea r10d, [rcx + rcx]
add r10b, dl
jmp 0x1401002bb
movabs rcx, 0xb4457e9d3dc2b
add rcx, rbx
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea r10d, [rdx + rcx]
sub r10b, 0x2d
movzx eax, byte [rsp + rbx + 0x60]
add rax, r9
add rbx, rax
inc rbx
jmp 0x1400ff802
movabs rcx, 0xa1c8368d1d2b7
add rcx, rbx
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea r10d, [rdx + rcx]
dec r10b
jmp 0x1401002bb
movabs rcx, 0x860c4a74ec489
add rcx, rbx
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea r10d, [rdx + rcx]
add r10b, 0x41
jmp 0x140100241
movabs rcx, 0x6a505e5cbb65b
add rcx, rbx
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea r10d, [rdx + rcx]
sub r10b, 0x7d
lea ecx, [rbx + 0x6b]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
add cl, 0x13
add cl, r11b
mov byte [rsp + rbx + 0x60], cl
inc r9
dec rbx
inc rbx
jmp 0x1400ff802
movabs rcx, 0x4555ce3c7a373
add rcx, rbx
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea r10d, [rdx + rcx]
sub r10b, 0x25
dec rbx
inc rbx
jmp 0x1400ff802
movabs rcx, 0x3c172a3469eb9
add rcx, rbx
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea r10d, [rdx + rcx]
sub r10b, 0xf
movzx r11d, dl
lea ecx, [rbx + 0x25]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
sub cl, 3
add cl, r11b
add cl, r10b
mov byte [rsp + rbx + 0x60], cl
jmp 0x14010027c
movabs rcx, 0x32d8862c599ff
add rcx, rbx
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea r10d, [rdx + rcx]
add r10b, 7
add r8, r9
movzx eax, r10b
mov rcx, 0xffffffffffffffff
sub rcx, rax
add rbx, rcx
inc rbx
jmp 0x1400ff802
movabs rcx, 0x205b3e1c3908b
add rcx, rbx
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea r10d, [rdx + rcx]
add r10b, 0x33
movzx r11d, dl
lea ecx, [rbx - 0x21]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
sub cl, 0x19
add cl, r11b
movzx eax, cl
mov byte [rsp + rbx + 0x60], al
inc r9
add rax, r9
sub rbx, rax
lea edx, [rbx + 0x3c]
movzx eax, dl
and al, r11b
mov ecx, reloc.WLDAP32.dll_Ordinal_46
sub cl, al
add cl, cl
add cl, dl
add cl, r11b
mov byte [rsp + rbx + 0x60], cl
inc r8
mov rax, 0xffffffffffffffff
sub rax, r8
add rbx, rax
movzx eax, byte [rsp + rbx + 0x60]
add rax, r9
add rbx, rax
inc rbx
jmp 0x1400ff802
movabs rcx, 0xdddf60c18717
add rcx, rbx
movzx eax, cl
and al, r11b
add al, al
sub dl, al
lea r10d, [rcx + rdx]
add r10b, 0x5f
movzx eax, byte [rsp + rbx + 0x60]
add rax, r9
add rbx, rax
inc rbx
jmp 0x1400ff802
add bl, 0x51
movzx eax, bl
and al, r11b
add al, al
sub bl, al
lea r10d, [r11 + rbx]
sub r10b, 0x37
jmp 0x1400ff800
sub bl, 0x69
movzx eax, bl
and al, r11b
add al, al
sub bl, al
lea r10d, [r11 + rbx]
sub r10b, 0x21
jmp 0x1400ff7f0
lea rbx, [rbp + 0x15795dc]
jmp 0x140100399
lea rbx, [rbp + 0x1581839]
jmp 0x140100399
lea rbx, [rsp + 0x60]
movzx edx, byte [rbp + 0x30]
lea rcx, [rbp + 0x38]
call fcn.1400029f0
nop
mov r8, 0xffffffffffffffff
nop
inc r8
cmp byte [rbx + r8], 0
jne 0x1401003b0
mov rdx, rbx
lea rcx, [rbp + 0x38]
call fcn.140004460
nop
mov rdx, rdi
lea rcx, [rbp + 0x38]
call fcn.1400030f0
lea rdx, [rbp + 0x38]
cmp qword [rbp + 0x50], 0xf
cmova rdx, qword [rbp + 0x38]
lea r8, [rbp + 0x28]
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegCreateKeyA]
test eax, eax
jne 0x1401030db
mov byte [rbp + 0x31], 1
mov dword [rbp], 0x362a2004
mov byte [rbp + 4], 0xe4
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp + 5], xmm0
mov qword [rbp + 0x15], rax
mov dword [rbp + 0x1d], eax
mov word [rbp + 0x21], ax
movabs r15, 0x6a17a0f280ce179c
movabs r13, 0x127624bc8406760c
movabs r12, 0x3e46e2d7826a46d4
movzx ebx, byte [rbp + 0x30]
nop
mov r8, qword [0x14022c4b8]
mov r9, qword [0x14022c4b0]
nop
xor edi, edi
cmp rdi, 0x23
jae 0x140100dd4
movzx r10d, byte [rbp + rdi]
mov esi, r10d
cmp r8, rdi
ja 0x140100dcb
lea rax, [r9 + 1]
cmp r8, rax
jae 0x140100490
lea rcx, [rdi + r15]
mov rax, rcx
and rax, rsi
imul rbx, rax, 0xfffffffffffffffe
add rbx, rcx
add rbx, rsi
sub bl, 0x44
jmp 0x1401004d6
je 0x140100d5c
inc rax
cmp r8, rax
je 0x140100d0a
lea rax, [r9 + 2]
cmp r8, rax
je 0x140100cbc
lea rax, [r9 + 3]
cmp r8, rax
je 0x140100c89
lea rax, [r9 + 5]
cmp r8, rax
je 0x140100c4c
lea rax, [r9 + 6]
cmp r8, rax
je 0x140100c07
movzx r11d, dil
nop word [rax + rax]
cmp r9, rdi
ja 0x140100dc2
lea rax, [r9 + 3]
cmp r8, rax
jae 0x14010050d
lea edx, [r11 - 0x34]
movzx eax, dl
and al, r10b
mov ecx, gethostname
sub cl, al
lea ebx, [rcx + rcx]
add bl, dl
add bl, r10b
jmp 0x140100540
lea rax, [r9 + 1]
cmp r8, rax
je 0x140100bf0
inc rax
cmp r8, rax
je 0x140100bc7
lea rax, [r9 + 5]
cmp r8, rax
je 0x140100bab
lea rax, [r9 + 2]
cmp r8, rax
je 0x140100b81
lea rax, [r9 + r8]
cmp rax, rdi
jbe 0x14010093d
nop dword [rax]
lea rax, [r9 + 0x200]
cmp r8, rax
je 0x140100923
lea rax, [r9 + 0xa]
cmp r8, rax
je 0x1401008fa
lea rax, [r9 + 1]
cmp r8, rax
je 0x1401008de
lea rax, [r9 + 0x3e8]
cmp r8, rax
je 0x1401008be
lea rax, [r9 + 0x10]
cmp r8, rax
je 0x1401008a2
lea rax, [r9 + 2]
cmp r8, rax
je 0x140100550
lea r8, [r9 + 0x64]
lea r9, [r8 + 0x400]
lea rax, [r9 + 0x41]
cmp r8, rax
jb 0x140100da2
lea rax, [r9 + 0x64]
cmp r8, rax
jb 0x140100d86
lea rax, [r9 + 8]
cmp r8, rax
jb 0x1401006cc
lea rax, [r9 + 0x5a]
cmp r8, rax
jb 0x1401006b0
lea rax, [r9 + 0x80]
cmp r8, rax
jb 0x140100692
lea rax, [r9 + 9]
cmp r8, rax
jb 0x1401007fc
lea rax, [r9 + 0x2a]
cmp r8, rax
jb 0x1401007d9
lea rax, [r9 + 0x200]
cmp r8, rax
jb 0x140100550
lea r8, [r9 + 0x61]
lea r9, [r8 + 0xa]
lea rax, [r9 + 0x40]
cmp r8, rax
ja 0x1401007af
lea rax, [r9 + 5]
cmp r8, rax
ja 0x14010078f
lea rax, [r9 + 0x7a]
cmp r8, rax
ja 0x140100773
lea rax, [r9 + 0x42]
cmp r8, rax
ja 0x140100753
lea rax, [r9 + 6]
cmp r8, rax
ja 0x14010072d
lea rax, [r9 + 0x41]
cmp r8, rax
ja 0x140100708
lea rax, [r9 + 0x64]
cmp r8, rax
ja 0x1401006ec
lea rax, [r9 + 8]
cmp r8, rax
ja 0x140100550
lea r8, [r9 + 0x20]
lea r9, [r8 + 0x64]
jmp 0x140100550
lea edx, [r11 - 0x4c]
movzx eax, r10b
and al, dl
mov ecx, 0xa
sub cl, al
lea ebx, [rcx + rcx]
add bl, r10b
add bl, dl
jmp 0x140100540
lea edx, [r11 + 0x7c]
movzx eax, r10b
and al, dl
add al, al
movzx ebx, r10b
sub bl, al
sub bl, 0x64
add bl, dl
jmp 0x1401004e0
add r11b, 0x44
movzx eax, r10b
and al, r11b
mov ecx, reloc.WS2_32.dll_select
sub cl, al
lea ebx, [rcx + rcx]
add bl, r10b
add bl, r11b
jmp 0x140100465
lea edx, [r11 + 0x60]
movzx eax, r10b
and al, dl
mov ecx, Ordinal_50
sub cl, al
lea ebx, [rcx + rcx]
add bl, r10b
jmp 0x140100c20
add r11b, 0x28
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea ebx, [r11 + r10]
sub bl, 0x18
inc r9
dec rdi
inc rdi
jmp 0x140100452
sub r11b, 0x10
movzx eax, r10b
and al, r11b
mov ecx, gethostname
sub cl, al
lea ebx, [rcx + rcx]
add bl, r10b
add bl, r11b
dec rdi
inc rdi
jmp 0x140100452
add r11b, 0x48
movzx eax, r10b
and al, r11b
mov ecx, 4
sub cl, al
lea ebx, [rcx + rcx]
add bl, r10b
add bl, r11b
jmp 0x140100ca4
lea edx, [r11 + 0x10]
movzx eax, r10b
and al, dl
add al, al
movzx ebx, r10b
sub bl, al
sub bl, 0x70
add bl, dl
jmp 0x140100ce0
sub r11b, 0x28
movzx eax, r10b
and al, r11b
mov ecx, recv
sub cl, al
lea ebx, [rcx + rcx]
add bl, r10b
add bl, r11b
jmp 0x140100d1e
sub r11b, 0x60
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea ebx, [r11 + r10]
sub bl, 0x60
movzx eax, byte [rbp + rdi]
add rax, r9
add rdi, rax
inc rdi
jmp 0x140100452
sub r11b, 0x6c
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea ebx, [r11 + r10]
sub bl, 0xc
mov byte [rbp + rdi], bl
inc rdi
jmp 0x140100452
lea edx, [r11 - 0x14]
movzx eax, r10b
and al, dl
add al, al
movzx ebx, r10b
sub bl, al
sub bl, 0x74
add bl, dl
lea rax, [r9 + r8]
cmp rax, 3
je 0x140100b62
lea rax, [r9 + 8]
cmp r8, rax
jbe 0x140100a28
lea edx, [r11 + 0x2c]
movzx eax, r10b
and al, dl
add al, al
movzx ebx, r10b
sub bl, al
sub bl, 0x34
add bl, dl
cmp r8, 0x3e8
jae 0x140100b47
lea rax, [r9 + 0x7a]
cmp r8, rax
jbe 0x140100a9b
lea edx, [r11 - 8]
movzx eax, r10b
and al, dl
mov ecx, Ordinal_30
sub cl, al
lea ebx, [rcx + rcx]
add bl, r10b
add bl, dl
cmp r9, 0x5a
jb 0x1401007f0
lea edx, [r11 + 0x28]
movzx eax, r10b
and al, dl
add al, al
movzx ecx, r10b
sub cl, al
add cl, dl
lea ebx, [rcx*2 - 0x30]
jmp 0x140100c22
lea edx, [r11 + 0x58]
movzx eax, r10b
and al, dl
add al, al
movzx ebx, r10b
sub bl, al
sub bl, 0x68
add bl, dl
jmp 0x140100ce0
add r11b, 0x20
movzx eax, r10b
and al, r11b
mov ecx, reloc.WS2_32.dll_recv
sub cl, al
lea ebx, [rcx + rcx]
add bl, r10b
add bl, r11b
jmp 0x140100ca4
sub r11b, 0x18
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea ebx, [r11 + r10]
sub bl, 0x58
jmp 0x140100ca1
add r11b, 0x40
movzx eax, r10b
and al, r11b
mov ecx, reloc.WLDAP32.dll_Ordinal_32
sub cl, al
lea ebx, [rcx + rcx]
add bl, r10b
add bl, r11b
inc r9
dec rdi
inc rdi
jmp 0x140100452
lea edx, [r11 + 8]
movzx eax, r10b
and al, dl
add al, al
movzx ebx, r10b
sub bl, al
sub bl, 0x38
jmp 0x140100c20
lea rcx, [r9 + 5]
cmp r8, rcx
jae 0x140100960
lea edx, [r11 - 0x64]
movzx eax, r10b
and al, dl
add al, al
movzx ebx, r10b
sub bl, al
sub bl, 0x44
jmp 0x140100811
lea rax, [r9 + 1]
cmp r8, rax
jne 0x140100993
sub r11b, 0x68
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea ebx, [r11 + r10]
sub bl, 0x28
movzx eax, byte [rbp + rdi]
add rax, r9
add rdi, rax
inc rdi
jmp 0x140100452
inc rax
cmp r8, rax
jne 0x1401009bb
sub r11b, 0x30
movzx eax, r10b
and al, r11b
mov ecx, Ordinal_41
sub cl, al
lea ebx, [rcx + rcx]
add bl, r10b
add bl, r11b
jmp 0x140100d1e
lea rax, [r9 + 3]
cmp r8, rax
jne 0x1401009e0
add r11b, 0x78
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea ebx, [r11 + r10]
sub bl, 0x48
jmp 0x140100ca1
cmp r8, rcx
jne 0x140100a01
lea edx, [r11 - 0x50]
movzx eax, r10b
and al, dl
mov ecx, Ordinal_26
sub cl, al
lea ebx, [rcx + rcx]
add bl, r10b
jmp 0x140100c65
lea rax, [r9 + 6]
cmp r8, rax
jne 0x140100813
lea edx, [r11 + 0x58]
movzx eax, r10b
and al, dl
add al, al
movzx ebx, r10b
sub bl, al
sub bl, 0x68
jmp 0x140100c20
lea rax, [r9 + 1]
cmp r8, rax
jne 0x140100a4d
lea edx, [r11 + 0x64]
movzx eax, r10b
and al, dl
mov ecx, Ordinal_35
sub cl, al
lea ebx, [rcx + rcx]
add bl, r10b
jmp 0x140100c20
lea rax, [r9 + 3]
cmp r8, rax
jne 0x140100a70
lea edx, [r11 + 0xc]
movzx eax, r10b
and al, dl
add al, al
movzx ebx, r10b
sub bl, al
sub bl, 0x54
jmp 0x140100c65
lea rax, [r9 + 2]
cmp r8, rax
jne 0x140100845
lea edx, [r11 - 0x4c]
movzx eax, r10b
and al, dl
mov ecx, 0xa
sub cl, al
lea ebx, [rcx + rcx]
add bl, r10b
add bl, dl
jmp 0x140100ce0
lea rax, [r9 + 1]
cmp r8, rax
jne 0x140100ace
add r11b, 0x30
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea ebx, [r11 + r10]
sub bl, 0x50
movzx eax, byte [rbp + rdi]
add rax, r9
add rdi, rax
inc rdi
jmp 0x140100452
lea rax, [r9 + 3]
cmp r8, rax
jne 0x140100af3
lea edx, [r11 - 0x60]
movzx eax, r10b
and al, dl
add al, al
movzx ebx, r10b
sub bl, al
sub bl, 0x60
add bl, dl
jmp 0x140100ce0
lea rax, [r9 + 5]
cmp r8, rax
jne 0x140100b18
lea edx, [r11 + 0x48]
movzx eax, r10b
and al, dl
mov ecx, 4
sub cl, al
lea ebx, [rcx + rcx]
add bl, r10b
jmp 0x140100c65
lea rax, [r9 + 2]
cmp r8, rax
jne 0x140100878
add r11b, 0x80
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea ebx, [r11 + r10]
add bl, 0x80
dec rdi
inc rdi
jmp 0x140100452
lea edx, [r11 + 0x60]
movzx eax, r10b
and al, dl
movzx ecx, r10b
sub cl, al
add cl, 0x30
lea ebx, [rcx + rcx]
jmp 0x140100c65
lea edx, [r11 - 0x68]
movzx eax, r10b
and al, dl
add al, al
movzx ebx, r10b
sub bl, al
sub bl, r10b
sub bl, 0x28
add bl, dl
jmp 0x140100ce0
sub r11b, 0x3c
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea ebx, [r11 + r10]
sub bl, 0x5c
movzx eax, byte [rbp + rdi]
add rax, r9
add rdi, rax
inc rdi
jmp 0x140100452
sub r11b, 0x1c
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea ebx, [r11 + r10]
sub bl, 0x3c
jmp 0x140100ca1
add r11b, 0x3c
movzx eax, r10b
and al, r11b
mov ecx, reloc.WLDAP32.dll_Ordinal_46
sub cl, al
lea ebx, [rcx + rcx]
add bl, r10b
add bl, r11b
inc r9
dec rdi
inc rdi
jmp 0x140100452
lea edx, [r11 + 4]
movzx eax, r10b
and al, dl
add al, al
movzx ebx, r10b
sub bl, al
sub bl, 0x1c
jmp 0x140100c20
movzx r11d, dil
lea edx, [r11 - 0x6c]
movzx eax, r10b
and al, dl
add al, al
movzx ebx, r10b
sub bl, al
sub bl, 0xc
add bl, dl
sub r11b, 0x3c
movzx eax, r11b
and al, r10b
add al, al
sub r11b, al
sub r11b, 0x5c
add r11b, r10b
mov byte [rbp + rdi], r11b
inc r9
dec rdi
inc rdi
jmp 0x140100452
movzx r11d, dil
lea edx, [r11 - 0x14]
movzx eax, r10b
and al, dl
add al, al
movzx ebx, r10b
sub bl, al
sub bl, 0x74
add bl, dl
sub r11b, 4
movzx eax, r11b
and al, r10b
mov ecx, recv
sub cl, al
add cl, cl
add cl, r11b
add cl, bl
add cl, r10b
mov byte [rbp + rdi], cl
jmp 0x140100ca1
lea edx, [rdi - 0x4c]
movzx eax, r10b
and al, dl
mov ecx, 0xa
sub cl, al
lea ebx, [rcx + rcx]
add bl, r10b
add bl, dl
add r8, r9
movzx eax, bl
mov rcx, 0xffffffffffffffff
sub rcx, rax
add rdi, rcx
inc rdi
jmp 0x140100452
movabs rax, 0xe6a566a185a2a544
add rax, rdi
and sil, al
mov ecx, reloc.WS2_32.dll_select
sub cl, sil
lea ebx, [rcx + rcx]
add bl, al
add bl, r10b
movzx r11d, dil
add r11b, 0x34
movzx eax, r11b
and al, r10b
add al, al
sub r11b, al
sub r11b, 0x6c
add r11b, r10b
movzx eax, r11b
mov byte [rbp + rdi], al
inc r9
add rax, r9
sub rdi, rax
jmp 0x140100d1e
lea rax, [rdi + r13]
and sil, al
add sil, sil
sub al, sil
lea ebx, [r10 + rax]
sub bl, 0x54
lea edx, [rdi - 0x30]
movzx eax, r10b
and al, dl
mov ecx, Ordinal_41
sub cl, al
add cl, cl
add cl, r10b
add cl, dl
mov byte [rbp + rdi], cl
inc r8
mov rax, 0xffffffffffffffff
sub rax, r8
add rdi, rax
movzx eax, byte [rbp + rdi]
add rax, r9
add rdi, rax
inc rdi
jmp 0x140100452
lea rax, [rdi + r12]
and sil, al
mov ecx, reloc.WLDAP32.dll_Ordinal_26
sub cl, sil
lea ebx, [rcx + rcx]
add bl, al
add bl, r10b
movzx eax, byte [rbp + rdi]
add rax, r9
add rdi, rax
inc rdi
jmp 0x140100452
add r11b, 0xc
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea ebx, [r11 + r10]
sub bl, 0x54
jmp 0x140100450
sub r11b, 0x2c
movzx eax, r10b
and al, r11b
mov ecx, reloc.WLDAP32.dll_Ordinal_26
sub cl, al
lea ebx, [rcx + rcx]
add bl, r10b
add bl, r11b
jmp 0x140100440
lea rdx, [rbp + 0x177dcd0]
jmp 0x140100dd8
lea rdx, [rbp + 0x85f46c]
jmp 0x140100dd8
lea rdx, [rbp]
mov dword [rsp + 0x28], 4
lea rax, [rbp + 0x31]
mov qword [rsp + 0x20], rax
mov r9d, 4
xor r8d, r8d
mov rcx, qword [rbp + 0x28]
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
test eax, eax
jne 0x1401030db
mov byte [rbp + 0x32], 3
mov dword [rsp + 0x30], 0xd0d4db09
mov dword [rsp + 0x34], 0xd5d506d6
mov dword [rsp + 0x38], 0x2729d3d0
mov byte [rsp + 0x3c], 0xb8
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rsp + 0x3d], xmm0
mov dword [rsp + 0x4d], eax
mov word [rsp + 0x51], ax
movabs rsi, 0x52daab436f1fc7f6
movabs r12, 0x43faaed809de77ba
movabs r15, 0xf89001ca4d5f57e2
movzx edx, byte [rbp + 0x30]
nop word [rax + rax]
mov r8, qword [0x14022c4b8]
mov r9, qword [0x14022c4b0]
nop
xor ebx, ebx
cmp rbx, 0x23
jae 0x140101902
movzx r11d, byte [rsp + rbx + 0x30]
mov edi, r11d
cmp r8, rbx
ja 0x1401018f9
lea rax, [r9 + 1]
cmp r8, rax
jae 0x140100eb0
lea rcx, [rbx + rsi]
mov rax, rdi
and rax, rcx
imul rdx, rax, 0xfffffffffffffffe
add rdx, rdi
add rdx, rcx
add dl, 0x46
jmp 0x140100ef7
je 0x14010188d
lea rax, [r9 + 3]
cmp r8, rax
je 0x14010180e
lea rax, [r9 + 4]
cmp r8, rax
je 0x1401017dc
lea rax, [r9 + 5]
cmp r8, rax
je 0x1401017a2
lea rax, [r9 + 2]
cmp r8, rax
je 0x140101780
lea rax, [r9 + 7]
cmp r8, rax
je 0x140101738
movzx r10d, bl
nop dword [rax + rax]
cmp r9, rbx
ja 0x1401018f0
lea rax, [r9 + 5]
cmp r8, rax
jae 0x140100f29
lea ecx, [r10 + 0x2e]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea edx, [r11 + rcx]
sub dl, 0x42
jmp 0x140100f70
lea rax, [r9 + 1]
cmp r8, rax
je 0x14010172d
inc rax
cmp r8, rax
je 0x140101707
lea rax, [r9 + 4]
cmp r8, rax
je 0x1401016ea
lea rax, [r9 + 6]
cmp r8, rax
je 0x1401016d0
lea rax, [r9 + 8]
cmp r8, rax
je 0x1401016a6
nop dword [rax]
lea rax, [r9 + r8]
cmp rax, rbx
jbe 0x1401013fa
nop dword [rax]
lea rax, [r9 + 0x61]
cmp r8, rax
je 0x1401013ec
lea rax, [r9 + 0x20]
cmp r8, rax
je 0x1401013c7
lea rax, [r9 + 0x10]
cmp r8, rax
je 0x1401013a1
lea rax, [r9 + 0xa]
cmp r8, rax
je 0x140101385
lea rax, [r9 + 0x5a]
cmp r8, rax
je 0x140101365
lea rax, [r9 + 0x41]
cmp r8, rax
je 0x140101349
lea rax, [r9 + 0x7a]
cmp r8, rax
je 0x14010132c
lea rax, [r9 + 0x28]
cmp r8, rax
je 0x14010130e
lea r8, [r9 + 5]
lea r9, [r8 + 0x2a]
lea rax, [r9 + 4]
cmp r8, rax
jb 0x1401018d4
lea rax, [r9 + 0x400]
cmp r8, rax
jb 0x1401018b4
lea rax, [r9 + 0x3e8]
cmp r8, rax
jb 0x14010112d
lea rax, [r9 + 0x200]
cmp r8, rax
jb 0x140101110
lea rax, [r9 + 8]
cmp r8, rax
jb 0x1401010f3
lea rax, [r9 + 6]
cmp r8, rax
jb 0x1401012c2
lea rax, [r9 + 0x61]
cmp r8, rax
jb 0x140101269
lea rax, [r9 + 0x1000]
cmp r8, rax
jb 0x14010122a
lea rax, [r9 + 0xa]
cmp r8, rax
jb 0x140100f80
lea r8, [r9 + 0x40]
lea r9, [r8 + 9]
lea rax, [r9 + 3]
cmp r8, rax
ja 0x140101200
lea rax, [r9 + 2]
cmp r8, rax
ja 0x1401011e0
lea rax, [r9 + 1]
cmp r8, rax
ja 0x1401011c4
lea rax, [r9 + 0x80]
cmp r8, rax
ja 0x1401011a4
lea rax, [r9 + 0x64]
cmp r8, rax
ja 0x140101188
lea rax, [r9 + 0x42]
cmp r8, rax
ja 0x14010116b
lea rax, [r9 + 4]
cmp r8, rax
ja 0x140101149
lea rax, [r9 + 0x200]
cmp r8, rax
ja 0x140100f80
lea r8, [r9 + 0x61]
lea r9, [r8 + 0x80]
jmp 0x140100f80
lea edx, [r10 - 0x6e]
movzx eax, dl
and al, r11b
mov ecx, 1
sub cl, al
add cl, cl
add dl, cl
add dl, r11b
jmp 0x140100f70
lea edx, [r10 - 0x5a]
movzx eax, dl
and al, r11b
mov ecx, Ordinal_60
sub cl, al
add cl, cl
add dl, cl
add dl, r11b
jmp 0x140100f00
sub r10b, 0x46
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea edx, [r11 + r10]
sub dl, 0x16
jmp 0x140100e85
sub r10b, 0x68
movzx eax, r11b
and al, r10b
add al, al
sub r11b, al
lea edx, [r10 + r11]
sub dl, 0x28
dec rbx
inc rbx
jmp 0x140100e72
lea edx, [r10 - 0x54]
movzx eax, r11b
and al, dl
mov ecx, Ordinal_41
sub cl, al
add cl, cl
add cl, r11b
add dl, cl
jmp 0x1401017bb
sub r10b, 0x40
movzx eax, r11b
and al, r10b
add al, al
sub r11b, al
lea edx, [r10 + r11]
sub dl, 0x40
jmp 0x1401017f3
sub r10b, 0x2c
movzx eax, r11b
and al, r10b
mov ecx, reloc.WLDAP32.dll_Ordinal_26
sub cl, al
lea edx, [rcx + rcx]
add dl, r11b
add dl, r10b
jmp 0x1401017f6
lea edx, [r10 - 0x18]
movzx eax, r11b
and al, dl
add al, al
movzx ecx, r11b
sub cl, al
sub dl, 0x58
add dl, cl
jmp 0x140101826
sub r10b, 4
movzx eax, r11b
and al, r10b
mov ecx, recv
sub cl, al
lea edx, [rcx + rcx]
add dl, r11b
add dl, r10b
jmp 0x140101850
add r10b, 0x10
movzx eax, r11b
and al, r10b
add al, al
sub r11b, al
lea edx, [r10 + r11]
sub dl, 0x70
movzx eax, byte [rsp + rbx + 0x30]
add rax, r9
add rbx, rax
inc rbx
jmp 0x140100e72
lea ecx, [r10 + 0x56]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea edx, [r11 + rcx]
sub dl, 0x5a
cmp r9, 0xa
jb 0x14010165f
lea edx, [r10 + 4]
movzx eax, r11b
and al, dl
add al, al
movzx ecx, r11b
sub cl, al
add cl, dl
lea edx, [rcx*2 - 0x38]
jmp 0x140101754
lea edx, [r10 + 0x6a]
movzx eax, dl
and al, r11b
mov ecx, reloc.WS2_32.dll_listen
sub cl, al
add cl, cl
add dl, cl
add dl, r11b
cmp r8, 1
jae 0x14010166b
lea rax, [r9 + 1]
cmp r8, rax
jne 0x1401015b8
sub r10b, 0x48
movzx eax, r11b
and al, r10b
add al, al
sub r11b, al
lea edx, [r10 + r11]
sub dl, 8
movzx eax, byte [rsp + rbx + 0x30]
add rax, r9
add rbx, rax
inc rbx
jmp 0x140100e72
lea ecx, [r10 + 0x7e]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea edx, [r11 + rcx]
sub dl, 0x72
lea rax, [r9 + r8]
cmp rax, 2
je 0x140101687
lea rax, [r9 + 0x7a]
cmp r8, rax
jbe 0x1401014f1
lea edx, [r10 - 0x62]
movzx eax, r11b
and al, dl
add al, al
movzx ecx, r11b
sub cl, al
sub dl, 0x52
add dl, cl
jmp 0x140101281
add r10b, 0x28
movzx eax, r11b
and al, r10b
add al, al
movzx edx, r11b
sub dl, al
sub dl, 0x18
add dl, r10b
jmp 0x140101850
lea edx, [r10 + 0x3c]
movzx eax, r11b
and al, dl
mov ecx, reloc.WLDAP32.dll_Ordinal_46
sub cl, al
add cl, cl
add cl, r11b
add dl, cl
jmp 0x140101826
add r10b, 0x50
movzx eax, r11b
and al, r10b
add al, al
sub r11b, al
lea edx, [r10 + r11]
sub dl, 0x30
jmp 0x1401017f6
add r10b, 0x64
movzx eax, r11b
and al, r10b
mov ecx, Ordinal_35
sub cl, al
lea edx, [rcx + rcx]
add dl, r11b
add dl, r10b
jmp 0x1401017f3
lea edx, [r10 + 0x78]
movzx eax, r11b
and al, dl
add al, al
movzx ecx, r11b
sub cl, al
sub dl, 0x48
add dl, cl
jmp 0x1401017bb
sub r10b, 0x74
movzx eax, r11b
and al, r10b
mov ecx, reloc.WLDAP32.dll_Ordinal_22
sub cl, al
lea edx, [rcx + rcx]
add dl, r11b
add dl, r10b
dec rbx
inc rbx
jmp 0x140100e72
sub r10b, 0x60
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea edx, [r11 + r10]
sub dl, 0x60
inc r9
dec rbx
inc rbx
jmp 0x140100e72
lea edx, [r10 - 0x4c]
mov ecx, 0xa
jmp 0x140101745
lea rax, [r9 + 0xa]
cmp r8, rax
jae 0x140101420
lea edx, [r10 - 0xa]
movzx eax, dl
and al, r11b
mov ecx, reloc.WLDAP32.dll_Ordinal_35
sub cl, al
add cl, cl
add dl, cl
add dl, r11b
jmp 0x1401012d7
lea rax, [r9 + 1]
cmp r8, rax
jne 0x140101457
add r10b, 0x5c
movzx eax, r10b
and al, r11b
mov ecx, 0x3e
sub cl, al
lea edx, [rcx + rcx]
add dl, r10b
add dl, r11b
movzx eax, byte [rsp + rbx + 0x30]
add rax, r9
add rbx, rax
inc rbx
jmp 0x140100e72
inc rax
cmp r8, rax
jne 0x14010147f
add r10b, 0x48
movzx eax, r10b
and al, r11b
mov ecx, 4
sub cl, al
lea edx, [rcx + rcx]
add dl, r10b
add dl, r11b
jmp 0x140101850
lea rax, [r9 + 3]
cmp r8, rax
jne 0x1401014a2
lea ecx, [r10 + 0x34]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea edx, [r11 + rcx]
sub dl, 0x6c
jmp 0x140101826
lea rax, [r9 + 4]
cmp r8, rax
jne 0x1401014c7
add r10b, 0xc
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea edx, [r11 + r10]
sub dl, 0x54
jmp 0x1401017f3
lea rax, [r9 + 5]
cmp r8, rax
jne 0x1401012d7
lea edx, [r10 - 8]
movzx eax, dl
and al, r11b
mov ecx, Ordinal_30
sub cl, al
add cl, cl
add dl, cl
add dl, r11b
jmp 0x1401017bb
lea rax, [r9 + 1]
cmp r8, rax
jne 0x140101517
lea edx, [r10 - 0x76]
movzx eax, r11b
and al, dl
mov ecx, Ordinal_30
sub cl, al
add cl, cl
add cl, r11b
add dl, cl
jmp 0x140101754
inc rax
cmp r8, rax
jne 0x140101545
add r10b, 0x62
movzx eax, r11b
and al, r10b
mov ecx, reloc.WLDAP32.dll_Ordinal_41
sub cl, al
lea edx, [rcx + rcx]
add dl, r11b
add dl, r10b
dec rbx
inc rbx
jmp 0x140100e72
lea rax, [r9 + 3]
cmp r8, rax
jne 0x14010156a
lea edx, [r10 + 0x4e]
movzx eax, r11b
and al, dl
add al, al
movzx ecx, r11b
sub cl, al
sub dl, 0x22
add dl, cl
jmp 0x1401017bb
lea rax, [r9 + 6]
cmp r8, rax
jne 0x14010158f
add r10b, 0x26
movzx eax, r11b
and al, r10b
add al, al
sub r11b, al
lea edx, [r10 + r11]
sub dl, 0xa
jmp 0x1401017f6
lea rax, [r9 + 2]
cmp r8, rax
jne 0x140101281
lea edx, [r10 + 0x12]
movzx eax, r11b
and al, dl
add al, al
movzx ecx, r11b
sub cl, al
sub dl, 0x7e
add dl, cl
jmp 0x140101826
inc rax
cmp r8, rax
jne 0x1401015dd
lea edx, [r10 - 0x70]
movzx eax, r11b
and al, dl
mov ecx, 8
sub cl, al
add cl, cl
add cl, r11b
add dl, cl
jmp 0x140101826
lea rax, [r9 + 4]
cmp r8, rax
jne 0x140101606
add r10b, 0x68
movzx eax, r11b
and al, r10b
mov ecx, reloc.WS2_32.dll_sendto
sub cl, al
lea edx, [rcx + rcx]
add dl, r11b
add dl, r10b
jmp 0x1401017f3
lea rax, [r9 + 7]
cmp r8, rax
jne 0x140101635
add r10b, 0x40
movzx eax, r11b
and al, r10b
mov ecx, reloc.WLDAP32.dll_Ordinal_32
sub cl, al
lea edx, [rcx + rcx]
add dl, r11b
add dl, r10b
dec rbx
inc rbx
jmp 0x140100e72
lea rax, [r9 + 8]
cmp r8, rax
jne 0x14010123f
lea edx, [r10 + 0x18]
movzx eax, r11b
and al, dl
mov ecx, Ordinal_45
sub cl, al
add cl, cl
add cl, r11b
add dl, cl
jmp 0x140101754
mov byte [rsp + rbx + 0x30], dl
inc rbx
jmp 0x140100e72
lea edx, [r10 - 0x10]
movzx eax, r11b
and al, dl
movzx ecx, r11b
sub cl, al
add cl, 0x38
add cl, cl
add dl, cl
jmp 0x1401017bb
lea edx, [r10 - 0x24]
movzx eax, r11b
and al, dl
add al, al
movzx ecx, r11b
sub cl, al
sub cl, r11b
sub dl, 4
add dl, cl
jmp 0x140101826
add r10b, 0x7a
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea edx, [r11 + r10]
sub dl, 0x56
movzx eax, byte [rsp + rbx + 0x30]
add rax, r9
add rbx, rax
inc rbx
jmp 0x140100e72
lea ecx, [r10 - 0x5e]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea edx, [r11 + rcx]
sub dl, 0x6e
jmp 0x140101826
sub r10b, 0x36
movzx eax, r10b
and al, r11b
mov ecx, 0x3d
sub cl, al
lea edx, [rcx + rcx]
add dl, r10b
jmp 0x1401017f0
sub r10b, 0xe
movzx eax, r10b
and al, r11b
mov ecx, Ordinal_50
sub cl, al
lea edx, [rcx + rcx]
add dl, r10b
add dl, r11b
dec rbx
inc rbx
jmp 0x140100e72
lea edx, [r10 + 0x1a]
mov ecx, Ordinal_41
jmp 0x140101745
movzx r10d, bl
lea edx, [r10 + 0x42]
mov ecx, Ordinal_26
movzx eax, dl
and al, r11b
sub cl, al
add cl, cl
add dl, cl
add dl, r11b
sub r10b, 6
movzx eax, r10b
and al, r11b
mov ecx, reloc.WS2_32.dll_setsockopt
sub cl, al
add cl, cl
add cl, r10b
add cl, r11b
mov byte [rsp + rbx + 0x30], cl
inc r9
dec rbx
inc rbx
jmp 0x140100e72
lea edx, [rbx + 0x6a]
movzx eax, dl
and al, r11b
mov ecx, reloc.WS2_32.dll_listen
sub cl, al
add cl, cl
add dl, cl
add dl, r11b
dec rbx
inc rbx
jmp 0x140100e72
movzx r10d, bl
lea ecx, [r10 + 0x7e]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea edx, [r11 + rcx]
sub dl, 0x72
sub r10b, 0x1a
movzx eax, r10b
and al, r11b
add al, al
movzx ecx, dl
sub cl, al
sub cl, 0x4a
add cl, r10b
add cl, r11b
mov byte [rsp + rbx + 0x30], cl
jmp 0x1401017f3
lea edx, [rbx - 0x6e]
movzx eax, dl
and al, r11b
mov ecx, 1
sub cl, al
add cl, cl
add dl, cl
add dl, r11b
add r8, r9
movzx eax, dl
mov rcx, 0xffffffffffffffff
sub rcx, rax
add rbx, rcx
inc rbx
jmp 0x140100e72
lea rax, [rbx + r12]
and dil, al
add dil, dil
sub al, dil
lea edx, [r11 + rax]
sub dl, 0x16
movzx r10d, bl
sub r10b, 0x2e
movzx eax, r11b
and al, r10b
mov ecx, reloc.WLDAP32.dll_Ordinal_33
sub cl, al
add cl, cl
add cl, r11b
add cl, r10b
movzx eax, cl
mov byte [rsp + rbx + 0x30], al
inc r9
add rax, r9
sub rbx, rax
lea ecx, [rbx - 0x38]
movzx eax, r11b
and al, cl
add al, al
sub r11b, al
sub r11b, 0x78
add r11b, cl
mov byte [rsp + rbx + 0x30], r11b
inc r8
mov rax, 0xffffffffffffffff
sub rax, r8
add rbx, rax
movzx eax, byte [rsp + rbx + 0x30]
add rax, r9
add rbx, rax
inc rbx
jmp 0x140100e72
lea rax, [rbx + r15]
and dil, al
add dil, dil
sub al, dil
lea edx, [r11 + rax]
sub dl, 0x2e
movzx eax, byte [rsp + rbx + 0x30]
add rax, r9
add rbx, rax
inc rbx
jmp 0x140100e72
sub r10b, 0x32
movzx eax, r11b
and al, r10b
mov ecx, Ordinal_50
sub cl, al
lea edx, [rcx + rcx]
add dl, r11b
add dl, r10b
jmp 0x140100e70
sub r10b, 0x1e
movzx eax, r11b
and al, r10b
add al, al
sub r11b, al
lea edx, [r10 + r11]
sub dl, 0x2e
jmp 0x140100e60
lea rdx, [rbp + 0x15a5878]
jmp 0x140101907
lea rdx, [rbp + 0x13a206e]
jmp 0x140101907
lea rdx, [rsp + 0x30]
mov dword [rsp + 0x28], 4
lea rax, [rbp + 0x32]
mov qword [rsp + 0x20], rax
mov r9d, 4
xor r8d, r8d
mov rcx, qword [rbp + 0x28]
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
test eax, eax
jne 0x1401030db
mov byte [rbp + 0x30], 3
mov dword [rbp - 0x28], 0x352b3153
mov word [rbp - 0x24], 0x8934
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp - 0x22], xmm0
mov qword [rbp - 0x12], rax
mov dword [rbp - 0xa], eax
mov byte [rbp - 6], al
movabs rsi, 0xac30e873997c8aea
movabs r13, 0xb5565b293267cc66
movabs r12, 0x5cf48a41ff6eb692
movabs r15, 0x492b95acc75a0be
movzx edx, byte [rbp + 0x30]
nop dword [rax]
nop word [rax + rax]
mov r8, qword [0x14022c4b8]
mov r9, qword [0x14022c4b0]
nop
xor ebx, ebx
cmp rbx, 0x23
jae 0x14010250c
movzx r11d, byte [rbp + rbx - 0x28]
mov edi, r11d
cmp r8, rbx
ja 0x140102503
lea rax, [r9 + 1]
cmp r8, rax
jae 0x1401019e0
lea rcx, [rbx + rsi]
mov rax, rcx
and rax, rdi
imul rdx, rax, 0xfffffffffffffffe
add rdx, rcx
add rdx, rdi
sub dl, 0x66
jmp 0x140101a26
je 0x140102496
inc rax
cmp r8, rax
je 0x140102441
lea rax, [r9 + 2]
cmp r8, rax
je 0x1401023fa
lea rax, [r9 + 5]
cmp r8, rax
je 0x1401023a6
lea rax, [r9 + 7]
cmp r8, rax
je 0x140102384
lea rax, [r9 + 3]
cmp r8, rax
je 0x14010233e
movzx r10d, bl
nop word [rax + rax]
cmp r9, rbx
ja 0x1401024fa
lea rax, [r9 + 0x40]
cmp r8, rax
jae 0x140101a59
lea ecx, [r10 + 0x32]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea edx, [r11 + rcx]
sub dl, 0x5e
jmp 0x140101a80
lea rax, [r9 + 1]
cmp r8, rax
je 0x140102327
lea rax, [r9 + 3]
cmp r8, rax
je 0x140102301
lea rax, [r9 + 4]
cmp r8, rax
je 0x1401022e4
lea rax, [r9 + r8]
cmp rax, rbx
jbe 0x140101fc0
nop dword [rax]
lea rax, [r9 + 0x200]
cmp r8, rax
je 0x140101fb2
lea rcx, [r9 + 3]
cmp r8, rcx
je 0x140101f89
lea rax, [r9 + 0x41]
cmp r8, rax
je 0x140101f67
lea rax, [r9 + 0xa]
cmp r8, rax
je 0x140101f4d
lea rax, [r9 + 0x1000]
cmp r8, rax
je 0x140101f31
lea rax, [r9 + 0x64]
cmp r8, rax
je 0x140101f11
lea rax, [r9 + 1]
cmp r8, rax
je 0x140101ef4
lea rax, [r9 + 0x28]
cmp r8, rax
je 0x140101ed8
lea rax, [r9 + 8]
cmp r8, rax
je 0x140101eae
lea rax, [r9 + 0x3e8]
cmp r8, rax
je 0x140101a90
mov r8, rcx
lea r9, [rcx + 4]
lea rax, [r9 + 0x42]
cmp rcx, rax
jb 0x1401024de
lea rcx, [r9 + 0x2a]
cmp r8, rcx
jb 0x1401024be
lea rax, [r9 + 0x1000]
cmp r8, rax
jb 0x140101c78
lea rax, [r9 + 6]
cmp r8, rax
jb 0x140101c5b
lea rax, [r9 + 0x200]
cmp r8, rax
jb 0x140101c41
lea rax, [r9 + 0x28]
cmp r8, rax
jb 0x140101e67
lea rax, [r9 + 0x41]
cmp r8, rax
jb 0x140101e24
lea rax, [r9 + 0xa]
cmp r8, rax
jb 0x140101de6
lea rax, [r9 + 4]
cmp r8, rax
jb 0x140101dbf
lea rax, [r9 + 0x64]
cmp r8, rax
jb 0x140101a90
mov r8, rcx
lea r9, [rcx + 1]
lea rax, [r9 + 0x20]
cmp rcx, rax
ja 0x140101d91
lea rcx, [r9 + 0x7a]
cmp r8, rcx
ja 0x140101d73
lea rax, [r9 + 0x200]
cmp r8, rax
ja 0x140101d59
lea rax, [r9 + 3]
cmp r8, rax
ja 0x140101d39
lea rax, [r9 + 0x42]
cmp r8, rax
ja 0x140101d19
lea rax, [r9 + 0xa]
cmp r8, rax
ja 0x140101cfc
lea rax, [r9 + 0x1000]
cmp r8, rax
ja 0x140101cda
lea rax, [r9 + 6]
cmp r8, rax
ja 0x140101cb5
lea rax, [r9 + 1]
cmp r8, rax
ja 0x140101c98
lea rax, [r9 + 0x28]
cmp r8, rax
ja 0x140101a90
mov r8, rcx
lea r9, [rcx + 8]
jmp 0x140101a90
lea ecx, [r10 + 0xe]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea edx, [r11 + rcx]
sub dl, 0x62
jmp 0x140101a80
lea edx, [r10 + 0x3a]
movzx eax, dl
and al, r11b
mov ecx, gethostname
sub cl, al
add cl, cl
add dl, cl
add dl, r11b
jmp 0x140101a30
add r10b, 0x66
movzx eax, r10b
and al, r11b
mov ecx, reloc.WLDAP32.dll_Ordinal_27
sub cl, al
lea edx, [rcx + rcx]
add dl, r10b
add dl, r11b
jmp 0x1401019b5
lea edx, [r10 - 0x70]
movzx eax, r11b
and al, dl
mov ecx, 8
sub cl, al
add cl, cl
add cl, r11b
add dl, cl
jmp 0x14010235a
sub r10b, 0x44
movzx eax, r11b
and al, r10b
add al, al
sub r11b, al
lea edx, [r10 + r11]
sub dl, 0x24
inc r9
dec rbx
inc rbx
jmp 0x1401019a2
sub r10b, 0x18
movzx eax, r11b
and al, r10b
add al, al
sub r11b, al
lea edx, [r10 + r11]
sub dl, 0x58
dec rbx
inc rbx
jmp 0x1401019a2
lea edx, [r10 + 0x14]
movzx eax, r11b
and al, dl
mov ecx, Ordinal_60
sub cl, al
add cl, cl
add cl, r11b
add dl, cl
jmp 0x1401023bf
add r10b, 0x40
movzx eax, r11b
and al, r10b
mov ecx, reloc.WLDAP32.dll_Ordinal_32
sub cl, al
lea edx, [rcx + rcx]
add dl, r11b
add dl, r10b
jmp 0x1401023df
add r10b, 0x6c
movzx eax, r11b
and al, r10b
mov ecx, 6
sub cl, al
lea edx, [rcx + rcx]
add dl, r11b
add dl, r10b
jmp 0x1401023e2
lea edx, [r10 - 0x68]
movzx eax, r11b
and al, dl
add al, al
movzx ecx, r11b
sub cl, al
sub dl, 0x28
jmp 0x140102413
sub r10b, 0x3c
movzx eax, r11b
and al, r10b
add al, al
movzx edx, r11b
sub dl, al
sub dl, 0x5c
add dl, r10b
jmp 0x140102459
sub r10b, 0x10
movzx eax, r11b
and al, r10b
mov ecx, gethostname
sub cl, al
lea edx, [rcx + rcx]
add dl, r11b
add dl, r10b
movzx eax, byte [rbp + rbx - 0x28]
add rax, r9
add rbx, rax
inc rbx
jmp 0x1401019a2
add r10b, 0x5e
movzx eax, r10b
and al, r11b
mov ecx, gethostname
sub cl, al
lea edx, [rcx + rcx]
add dl, r10b
add dl, r11b
mov byte [rbp + rbx - 0x28], dl
inc rbx
jmp 0x1401019a2
lea edx, [r10 - 0x76]
movzx eax, dl
and al, r11b
mov ecx, Ordinal_30
sub cl, al
add cl, cl
add dl, cl
add dl, r11b
cmp r9, 5
jb 0x140101dda
lea edx, [r10 + 0x3c]
movzx eax, r11b
and al, dl
add al, al
movzx ecx, r11b
sub cl, al
add cl, dl
lea edx, [rcx*2 - 0x48]
jmp 0x14010235a
lea edx, [r10 - 0x4a]
movzx eax, dl
and al, r11b
mov ecx, 3
sub cl, al
add cl, cl
add dl, cl
add dl, r11b
cmp r8, 9
jae 0x1401022af
lea rax, [r9 + 0x3e8]
cmp r8, rax
jbe 0x1401021c9
lea edx, [r10 - 0xc]
movzx eax, dl
and al, r11b
mov ecx, Ordinal_45
jmp 0x140101df5
lea ecx, [r10 - 0x1e]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea edx, [r11 + rcx]
sub dl, 0x2e
lea rax, [r9 + r8]
cmp rax, 0x20
je 0x1401022ce
lea rax, [r9 + 0x61]
cmp r8, rax
jbe 0x140102106
lea ecx, [r10 - 0x3e]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea edx, [r11 + rcx]
sub dl, 0x4e
jmp 0x140101e3c
add r10b, 0x2c
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea edx, [r11 + r10]
sub dl, 0x34
movzx eax, byte [rbp + rbx - 0x28]
add rax, r9
add rbx, rax
inc rbx
jmp 0x1401019a2
add r10b, 0x58
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea edx, [r11 + r10]
sub dl, 0x68
jmp 0x140102459
lea edx, [r10 - 0x7c]
movzx eax, dl
and al, r11b
mov ecx, reloc.WLDAP32.dll_Ordinal_50
sub cl, al
add cl, cl
add dl, cl
add dl, r11b
jmp 0x140102415
sub r10b, 0x50
movzx eax, r10b
and al, r11b
mov ecx, Ordinal_26
sub cl, al
lea edx, [rcx + rcx]
add dl, r10b
add dl, r11b
jmp 0x1401023e2
sub r10b, 0x24
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea edx, [r11 + r10]
sub dl, 4
jmp 0x1401023df
lea ecx, [r10 + 8]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea edx, [r11 + rcx]
sub dl, 0x38
jmp 0x1401023bf
add r10b, 0x34
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea edx, [r11 + r10]
sub dl, 0x6c
dec rbx
inc rbx
jmp 0x1401019a2
add r10b, 0x60
movzx eax, r10b
and al, r11b
mov ecx, Ordinal_50
sub cl, al
lea edx, [rcx + rcx]
add dl, r10b
add dl, r11b
inc r9
dec rbx
inc rbx
jmp 0x1401019a2
lea edx, [r10 - 0x74]
mov ecx, reloc.WLDAP32.dll_Ordinal_22
jmp 0x14010234b
lea rax, [r9 + 0x2a]
cmp r8, rax
jae 0x140101fe3
lea ecx, [r10 - 0x16]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea edx, [r11 + rcx]
sub dl, 0x66
jmp 0x140101e7c
lea rax, [r9 + 1]
cmp r8, rax
jne 0x14010201a
add r10b, 0x64
movzx eax, r10b
and al, r11b
mov ecx, Ordinal_35
sub cl, al
lea edx, [rcx + rcx]
add dl, r10b
add dl, r11b
movzx eax, byte [rbp + rbx - 0x28]
add rax, r9
add rbx, rax
inc rbx
jmp 0x1401019a2
inc rax
cmp r8, rax
jne 0x14010203f
add r10b, 0x38
movzx eax, r10b
and al, r11b
mov ecx, reloc.WLDAP32.dll_Ordinal_60
sub cl, al
lea edx, [rcx + rcx]
add dl, r10b
jmp 0x140102456
lea rax, [r9 + 3]
cmp r8, rax
jne 0x140102062
lea ecx, [r10 + 0xc]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea edx, [r11 + rcx]
sub dl, 0x54
jmp 0x140102415
lea rax, [r9 + 5]
cmp r8, rax
jne 0x14010208b
sub r10b, 0x4c
movzx eax, r10b
and al, r11b
mov ecx, 0xa
sub cl, al
lea edx, [rcx + rcx]
add dl, r10b
add dl, r11b
jmp 0x1401023df
lea rax, [r9 + 4]
cmp r8, rax
jne 0x1401020b1
lea edx, [r10 - 0x78]
movzx eax, dl
and al, r11b
mov ecx, 0x24
sub cl, al
add cl, cl
add dl, cl
add dl, r11b
jmp 0x1401023bf
lea rax, [r9 + 6]
cmp r8, rax
jne 0x1401020df
add r10b, 0x30
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea edx, [r11 + r10]
sub dl, 0x50
inc r9
dec rbx
inc rbx
jmp 0x1401019a2
lea rax, [r9 + 7]
cmp r8, rax
jne 0x140101e7c
lea ecx, [r10 + 4]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea edx, [r11 + rcx]
sub dl, 0x1c
jmp 0x14010235a
lea rax, [r9 + 1]
cmp r8, rax
jne 0x140102129
lea ecx, [r10 - 0x6a]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea edx, [r11 + rcx]
sub dl, 0x1a
jmp 0x14010235a
lea rax, [r9 + 2]
cmp r8, rax
jne 0x140102158
add r10b, 0x3e
movzx eax, r10b
and al, r11b
mov ecx, Ordinal_41
sub cl, al
lea edx, [rcx + rcx]
add dl, r10b
add dl, r11b
dec rbx
inc rbx
jmp 0x1401019a2
lea rax, [r9 + 3]
cmp r8, rax
jne 0x14010217b
lea ecx, [r10 + 0x12]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea edx, [r11 + rcx]
sub dl, 0x7e
jmp 0x1401023bf
lea rax, [r9 + 5]
cmp r8, rax
jne 0x1401021a0
sub r10b, 0x1a
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea edx, [r11 + r10]
sub dl, 0x4a
jmp 0x1401023df
lea rax, [r9 + 6]
cmp r8, rax
jne 0x140101e3c
sub r10b, 0x46
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea edx, [r11 + r10]
sub dl, 0x16
jmp 0x1401023e2
lea rcx, [r9 + 1]
cmp r8, rcx
jne 0x1401021fc
sub r10b, 0x38
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea edx, [r11 + r10]
sub dl, 0x78
movzx eax, byte [rbp + rbx - 0x28]
add rax, r9
add rbx, rax
inc rbx
jmp 0x1401019a2
lea rax, [r9 + 2]
cmp r8, rax
jne 0x14010221f
lea ecx, [r10 + 0x70]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea edx, [r11 + rcx]
sub dl, 0x10
jmp 0x140102415
lea rax, [rcx + 1]
cmp r8, rax
jne 0x140102248
add r10b, 0x44
movzx eax, r10b
and al, r11b
mov ecx, reloc.WS2_32.dll_select
sub cl, al
lea edx, [rcx + rcx]
add dl, r10b
add dl, r11b
jmp 0x1401023e2
lea rax, [r9 + 4]
cmp r8, rax
jne 0x140102271
add r10b, 0x18
movzx eax, r10b
and al, r11b
mov ecx, Ordinal_45
sub cl, al
lea edx, [rcx + rcx]
add dl, r10b
add dl, r11b
jmp 0x1401023df
lea rax, [r9 + 3]
cmp r8, rax
jne 0x140102294
lea ecx, [r10 - 0x14]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea edx, [r11 + rcx]
sub dl, 0x74
jmp 0x1401023bf
lea rax, [r9 + 8]
cmp r8, rax
jne 0x140101dfe
lea edx, [r10 + 0x68]
mov ecx, reloc.WS2_32.dll_sendto
jmp 0x14010234b
lea edx, [r10 + 0x10]
movzx eax, r11b
and al, dl
add al, al
movzx ecx, r11b
sub cl, al
add cl, r11b
sub dl, 0x70
add dl, cl
jmp 0x1401023bf
lea ecx, [r10 - 0x1c]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea edx, [rcx - 0x3c]
jmp 0x140102415
sub r10b, 0x2e
movzx eax, r10b
and al, r11b
mov ecx, reloc.WLDAP32.dll_Ordinal_33
sub cl, al
lea edx, [rcx + rcx]
add dl, r10b
jmp 0x140102456
sub r10b, 0x52
movzx eax, r10b
and al, r11b
mov ecx, Ordinal_35
sub cl, al
lea edx, [rcx + rcx]
add dl, r10b
add dl, r11b
dec rbx
inc rbx
jmp 0x1401019a2
lea ecx, [r10 + 6]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea edx, [r11 + rcx]
sub dl, 0x2a
jmp 0x14010235a
movzx r10d, bl
lea edx, [r10 + 0x5e]
mov ecx, gethostname
movzx eax, dl
and al, r11b
sub cl, al
add cl, cl
add dl, cl
add dl, r11b
add r10b, 0x26
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
sub r10b, 0xa
add r10b, r11b
mov byte [rbp + rbx - 0x28], r10b
inc r9
dec rbx
inc rbx
jmp 0x1401019a2
lea edx, [rbx - 0x4a]
movzx eax, dl
and al, r11b
mov ecx, 3
sub cl, al
add cl, cl
add dl, cl
add dl, r11b
dec rbx
inc rbx
jmp 0x1401019a2
movzx r10d, bl
lea ecx, [r10 - 0x1e]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea edx, [r11 + rcx]
sub dl, 0x2e
sub r10b, 6
movzx eax, r10b
and al, r11b
mov ecx, reloc.WS2_32.dll_setsockopt
sub cl, al
add cl, cl
add cl, dl
add cl, r10b
add cl, r11b
mov byte [rbp + rbx - 0x28], cl
add r8, r9
movzx eax, dl
mov rcx, 0xffffffffffffffff
sub rcx, rax
add rbx, rcx
inc rbx
jmp 0x1401019a2
lea rcx, [rbx + r13]
and dil, cl
mov eax, reloc.WLDAP32.dll_Ordinal_27
sub al, dil
lea edx, [rax + rax]
add dl, r11b
movzx r10d, bl
add dl, cl
sub r10b, 0x32
movzx eax, r11b
and al, r10b
mov ecx, Ordinal_50
sub cl, al
add cl, cl
add cl, r11b
add cl, r10b
movzx eax, cl
mov byte [rbp + rbx - 0x28], al
inc r9
add rax, r9
sub rbx, rax
jmp 0x140102459
lea rcx, [rbx + r12]
movzx eax, cl
and al, dil
mov edx, 1
sub dl, al
add dl, dl
add dl, cl
add dl, r11b
lea ecx, [rbx - 0x48]
movzx eax, r11b
and al, cl
add al, al
sub r11b, al
sub r11b, 8
add r11b, cl
mov byte [rbp + rbx - 0x28], r11b
inc r8
mov rax, 0xffffffffffffffff
sub rax, r8
add rbx, rax
movzx eax, byte [rbp + rbx - 0x28]
add rax, r9
add rbx, rax
inc rbx
jmp 0x1401019a2
lea rcx, [rbx + r15]
movzx eax, cl
and al, dil
add al, al
sub cl, al
lea edx, [r11 + rcx]
sub dl, 0x32
movzx eax, byte [rbp + rbx - 0x28]
add rax, r9
add rbx, rax
inc rbx
jmp 0x1401019a2
sub r10b, 0x6e
movzx eax, r11b
and al, r10b
mov ecx, 1
sub cl, al
lea edx, [rcx + rcx]
add dl, r11b
add dl, r10b
jmp 0x1401019a0
sub r10b, 0x42
movzx eax, r11b
and al, r10b
add al, al
sub r11b, al
lea edx, [r10 + r11]
sub dl, 0x32
jmp 0x140101990
lea rdx, [rbp + 0x16d5510]
jmp 0x140102510
lea rdx, [rbp + 0xe9dffa]
jmp 0x140102510
lea rdx, [rbp - 0x28]
mov dword [rsp + 0x28], 4
lea rax, [rbp + 0x30]
mov qword [rsp + 0x20], rax
mov r9d, 4
xor r8d, r8d
mov rcx, qword [rbp + 0x28]
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
test eax, eax
jne 0x1401030db
mov rsi, qword [r14 + 0x10]
cmp qword [r14 + 0x18], 0xf
jbe 0x14010254a
mov r14, qword [r14]
mov dword [rbp - 0x50], 0x7a73865d
mov dword [rbp - 0x4c], 0x837f6d7d
mov word [rbp - 0x48], 0x1976
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp - 0x46], xmm0
mov qword [rbp - 0x36], rax
mov byte [rbp - 0x2e], al
movabs r15, 0xaeb5d6e0cb62f503
movabs r12, 0xc2184a26228df09
movzx ebx, byte [rbp + 0x30]
nop word [rax + rax]
mov rax, qword [0x14022c4b8]
mov r9, qword [0x14022c4b0]
nop
xor edi, edi
cmp rdi, 0x23
jae 0x1401030a6
movzx r11d, byte [rbp + rdi - 0x50]
mov r8d, r11d
cmp rax, rdi
ja 0x14010309d
lea rcx, [r9 + 1]
cmp rax, rcx
jae 0x1401025e0
lea rdx, [rdi + r15]
mov rcx, rdx
and rcx, r8
imul rbx, rcx, 0xfffffffffffffffe
add rbx, rdx
add rbx, r8
sub bl, 0x15
jmp 0x140102600
je 0x140103035
lea rcx, [r9 + 3]
cmp rax, rcx
je 0x140103006
lea rcx, [r9 + 2]
cmp rax, rcx
je 0x140102fe7
movzx r10d, dil
cmp r9, rdi
ja 0x140103094
lea rcx, [r9 + 9]
cmp rax, rcx
jae 0x14010262d
lea edx, [r10 + 0x3f]
movzx ecx, dl
and cl, r11b
add cl, cl
sub dl, cl
lea ebx, [r11 + rdx]
add bl, 0x47
jmp 0x140102680
lea rcx, [r9 + 1]
cmp rax, rcx
je 0x140102fa8
inc rcx
cmp rax, rcx
je 0x140102f83
lea rcx, [r9 + 2]
cmp rax, rcx
je 0x140102f61
lea rcx, [r9 + 4]
cmp rax, rcx
je 0x140102f45
lea rcx, [r9 + 5]
cmp rax, rcx
je 0x140102f29
lea rcx, [r9 + 6]
cmp rax, rcx
je 0x140102eff
nop word [rax + rax]
lea rcx, [r9 + rax]
cmp rcx, rdi
jbe 0x140102bd1
nop dword [rax]
lea rcx, [r9 + 0x1000]
cmp rax, rcx
je 0x140102bb7
lea rcx, [r9 + 0x40]
cmp rax, rcx
je 0x140102b92
lea rcx, [r9 + 0x64]
cmp rax, rcx
je 0x140102b70
lea rcx, [r9 + 9]
cmp rax, rcx
je 0x140102b50
lea rcx, [r9 + 1]
cmp rax, rcx
je 0x140102b30
lea rcx, [r9 + 3]
cmp rax, rcx
je 0x140102b10
lea rcx, [r9 + 0x61]
cmp rax, rcx
je 0x140102af6
lea rcx, [r9 + 0x42]
cmp rax, rcx
je 0x140102ada
lea rcx, [r9 + 0x80]
cmp rax, rcx
je 0x140102ab0
lea rcx, [r9 + 0xa]
cmp rax, rcx
je 0x140102690
lea rax, [r9 + 0x10]
lea r9, [rax + 0x20]
lea rcx, [r9 + 3]
cmp rax, rcx
jb 0x140103078
lea rcx, [r9 + 5]
cmp rax, rcx
jb 0x14010305c
lea rcx, [r9 + 0x41]
cmp rax, rcx
jb 0x140102877
lea rcx, [r9 + 0x80]
cmp rax, rcx
jb 0x14010285d
lea rdx, [r9 + 0x3e8]
cmp rax, rdx
jb 0x140102843
lea rcx, [r9 + 0x20]
cmp rax, rcx
jb 0x140102a6a
lea rcx, [r9 + 4]
cmp rax, rcx
jb 0x140102a21
lea rcx, [r9 + 6]
cmp rax, rcx
jb 0x1401029e1
lea rcx, [r9 + 0x5a]
cmp rax, rcx
jb 0x1401029be
lea rcx, [r9 + 1]
cmp rax, rcx
jb 0x140102690
mov rax, rdx
lea r9, [rdx + 0x400]
lea rcx, [r9 + 0x1000]
cmp rdx, rcx
ja 0x140102994
lea rcx, [r9 + 0x40]
cmp rdx, rcx
ja 0x140102974
lea rcx, [r9 + 6]
cmp rdx, rcx
ja 0x140102954
lea rcx, [r9 + 9]
cmp rdx, rcx
ja 0x140102934
lea rcx, [r9 + 1]
cmp rdx, rcx
ja 0x140102918
lea rcx, [r9 + 0x400]
cmp rdx, rcx
ja 0x1401028fe
lea rcx, [r9 + 0x61]
cmp rdx, rcx
ja 0x1401028dc
lea rcx, [r9 + 0x42]
cmp rdx, rcx
ja 0x1401028b3
lea rcx, [r9 + 8]
cmp rdx, rcx
ja 0x140102893
lea rcx, [r9 + 0xa]
cmp rdx, rcx
ja 0x140102690
lea rax, [r9 + 0x10]
lea r9, [rax + 2]
jmp 0x140102690
lea edx, [r10 - 0x5f]
movzx ecx, dl
and cl, r11b
add cl, cl
sub dl, cl
lea ebx, [r11 + rdx]
sub bl, 0x67
jmp 0x140102680
lea edx, [r10 - 0x65]
movzx ecx, dl
and cl, r11b
add cl, cl
sub dl, cl
lea ebx, [r11 + rdx]
sub bl, 0x3d
jmp 0x140102604
sub r10b, 0x6b
movzx ecx, r10b
and cl, r11b
add cl, cl
sub r10b, cl
lea ebx, [r11 + r10]
sub bl, 0x13
jmp 0x1401025b5
lea r8d, [r10 - 8]
movzx ecx, r8b
and cl, r11b
mov edx, Ordinal_30
sub dl, cl
lea ebx, [rdx + rdx]
add bl, r8b
add bl, r11b
jmp 0x140102fbd
sub r10b, 0xe
movzx ecx, r10b
and cl, r11b
mov edx, Ordinal_50
sub dl, cl
lea ebx, [rdx + rdx]
add bl, r10b
add bl, r11b
inc r9
dec rdi
inc rdi
jmp 0x1401025a2
sub r10b, 0x14
movzx ecx, r10b
and cl, r11b
add cl, cl
sub r10b, cl
lea ebx, [r11 + r10]
sub bl, 0x74
dec rdi
inc rdi
jmp 0x1401025a2
lea edx, [r10 - 0x1a]
movzx ecx, dl
and cl, r11b
add cl, cl
sub dl, cl
lea ebx, [r11 + rdx]
sub bl, 0x4a
jmp 0x140102e5a
sub r10b, 0x20
movzx ecx, r10b
and cl, r11b
add cl, cl
sub r10b, cl
lea ebx, [r11 + r10]
sub bl, 0x20
jmp 0x14010301a
sub r10b, 0x26
movzx ecx, r10b
and cl, r11b
mov edx, 5
sub dl, cl
lea ebx, [rdx + rdx]
add bl, r10b
add bl, r11b
jmp 0x14010301d
lea r8d, [r10 - 0x2c]
movzx ecx, r8b
and cl, r11b
mov edx, reloc.WLDAP32.dll_Ordinal_26
sub dl, cl
lea ebx, [rdx + rdx]
add bl, r8b
add bl, r11b
jmp 0x140102e96
sub r10b, 0x32
movzx ecx, r10b
and cl, r11b
mov edx, Ordinal_50
sub dl, cl
lea ebx, [rdx + rdx]
add bl, r10b
add bl, r11b
jmp 0x140102ebe
sub r10b, 0x38
movzx ecx, r10b
and cl, r11b
add cl, cl
sub r10b, cl
lea ebx, [r11 + r10]
sub bl, 0x78
movzx ecx, byte [rbp + rdi - 0x50]
add rcx, r9
add rdi, rcx
inc rdi
jmp 0x1401025a2
sub r10b, 0x47
movzx ecx, r10b
and cl, r11b
add cl, cl
sub r10b, cl
lea ebx, [r11 + r10]
sub bl, 0xf
mov byte [rbp + rdi - 0x50], bl
inc rdi
jmp 0x1401025a2
lea edx, [r10 - 0x4d]
movzx ecx, dl
and cl, r11b
add cl, cl
sub dl, cl
lea ebx, [r11 + rdx]
add bl, 0x1b
cmp r9, 5
jb 0x1401029d5
lea edx, [r10 + 0x32]
movzx ecx, dl
and cl, r11b
mov r8d, reloc.WS2_32.dll_recvfrom
sub r8b, cl
add r8b, r8b
add r8b, dl
add r8b, r11b
lea ebx, [r8 + r8]
jmp 0x140102fbd
lea edx, [r10 - 0x53]
movzx ecx, dl
and cl, r11b
add cl, cl
sub dl, cl
lea ebx, [r11 + rdx]
add bl, 0x45
cmp rax, 0x7a
jae 0x140102e40
lea rcx, [r9 + 0x41]
cmp rax, rcx
jbe 0x140102d96
lea r8d, [r10 - 0xa]
movzx ecx, r8b
and cl, r11b
mov edx, reloc.WLDAP32.dll_Ordinal_35
sub dl, cl
lea ebx, [rdx + rdx]
add bl, r8b
add bl, r11b
jmp 0x1401029f6
lea edx, [r10 - 0x59]
movzx ecx, dl
and cl, r11b
add cl, cl
sub dl, cl
lea ebx, [r11 + rdx]
add bl, 0x6f
lea rcx, [r9 + rax]
cmp rcx, 0x42
je 0x140102e7e
lea rcx, [r9 + 6]
cmp rax, rcx
jbe 0x140102ca2
lea edx, [r10 - 0x49]
movzx ecx, dl
and cl, r11b
add cl, cl
sub dl, cl
lea ebx, [r11 + rdx]
dec bl
jmp 0x140102a36
add r10b, 0x7a
movzx ecx, r10b
and cl, r11b
add cl, cl
sub r10b, cl
lea ebx, [r11 + r10]
sub bl, 0x56
movzx ecx, byte [rbp + rdi - 0x50]
add rcx, r9
add rdi, rcx
inc rdi
jmp 0x1401025a2
add r10b, 0x74
movzx ecx, r10b
and cl, r11b
add cl, cl
sub r10b, cl
lea ebx, [r11 + r10]
sub bl, 0x2c
jmp 0x140102ebe
lea edx, [r10 + 0x6e]
movzx ecx, dl
and cl, r11b
add cl, cl
sub dl, cl
lea ebx, [r11 + rdx]
sub bl, 2
jmp 0x140102e96
add r10b, 0x68
movzx ecx, r10b
and cl, r11b
mov edx, reloc.WS2_32.dll_sendto
sub dl, cl
lea ebx, [rdx + rdx]
add bl, r10b
add bl, r11b
jmp 0x14010301d
add r10b, 0x62
movzx ecx, r10b
and cl, r11b
mov edx, reloc.WLDAP32.dll_Ordinal_41
sub dl, cl
lea ebx, [rdx + rdx]
add bl, r10b
add bl, r11b
jmp 0x14010301a
lea r8d, [r10 + 0x5c]
movzx ecx, r8b
and cl, r11b
mov edx, 0x3e
sub dl, cl
lea ebx, [rdx + rdx]
add bl, r8b
add bl, r11b
jmp 0x140102e5a
add r10b, 0x56
movzx ecx, r10b
and cl, r11b
add cl, cl
sub r10b, cl
lea ebx, [r11 + r10]
sub bl, 0x5a
dec rdi
inc rdi
jmp 0x1401025a2
add r10b, 0x50
movzx ecx, r10b
and cl, r11b
add cl, cl
sub r10b, cl
lea ebx, [r11 + r10]
sub bl, 0x30
inc r9
dec rdi
inc rdi
jmp 0x1401025a2
lea edx, [r10 + 0x4a]
movzx ecx, dl
and cl, r11b
add cl, cl
sub dl, cl
lea ebx, [r11 + rdx]
sub bl, 6
jmp 0x140102fbd
lea rcx, [r9 + 0x5a]
cmp rax, rcx
jae 0x140102bf4
lea edx, [r10 + 3]
movzx ecx, dl
and cl, r11b
add cl, cl
sub dl, cl
lea ebx, [r11 + rdx]
sub bl, 0x15
jmp 0x140102a7f
lea rcx, [r9 + 1]
cmp rax, rcx
jne 0x140102c27
add r10b, 0x7e
movzx ecx, r10b
and cl, r11b
add cl, cl
sub r10b, cl
lea ebx, [r11 + r10]
sub bl, 0x72
movzx ecx, byte [rbp + rdi - 0x50]
add rcx, r9
add rdi, rcx
inc rdi
jmp 0x1401025a2
lea rcx, [r9 + 3]
cmp rax, rcx
jne 0x140102c50
lea r8d, [r10 - 0x76]
movzx ecx, r8b
and cl, r11b
mov edx, Ordinal_30
sub dl, cl
lea ebx, [rdx + rdx]
add bl, r8b
add bl, r11b
jmp 0x140102e96
lea rcx, [r9 + 2]
cmp rax, rcx
jne 0x140102c75
sub r10b, 0x6a
movzx ecx, r10b
and cl, r11b
add cl, cl
sub r10b, cl
lea ebx, [r11 + r10]
sub bl, 0x1a
jmp 0x14010301a
lea rcx, [r9 + 5]
cmp rax, rcx
jne 0x140102a7f
lea r8d, [r10 - 0x52]
movzx ecx, r8b
and cl, r11b
mov edx, Ordinal_35
sub dl, cl
lea ebx, [rdx + rdx]
add bl, r8b
add bl, r11b
jmp 0x140102fbd
lea rcx, [r9 + 1]
cmp rax, rcx
jne 0x140102cc5
lea edx, [r10 - 0x43]
movzx ecx, dl
and cl, r11b
add cl, cl
sub dl, cl
lea ebx, [r11 + rdx]
sub bl, 0x2b
jmp 0x140102fbd
inc rcx
cmp rax, rcx
jne 0x140102cf2
sub r10b, 0x3d
movzx ecx, r10b
and cl, r11b
add cl, cl
sub r10b, cl
lea ebx, [r11 + r10]
sub bl, 0x55
inc r9
dec rdi
inc rdi
jmp 0x1401025a2
lea rcx, [r9 + 2]
cmp rax, rcx
jne 0x140102d17
sub r10b, 0x2b
movzx ecx, r10b
and cl, r11b
add cl, cl
sub r10b, cl
lea ebx, [r11 + r10]
add bl, 0x2d
jmp 0x14010301a
lea rcx, [r9 + 3]
cmp rax, rcx
jne 0x140102d3c
sub r10b, 0x25
movzx ecx, r10b
and cl, r11b
add cl, cl
sub r10b, cl
lea ebx, [r11 + r10]
add bl, 3
jmp 0x14010301d
lea rcx, [r9 + 4]
cmp rax, rcx
jne 0x140102d5f
lea edx, [r10 - 0x1f]
movzx ecx, dl
and cl, r11b
add cl, cl
sub dl, cl
lea ebx, [r11 + rdx]
sub bl, 0x27
jmp 0x140102e96
lea rcx, [r9 + 5]
cmp rax, rcx
jne 0x140102a36
sub r10b, 0x13
movzx ecx, r10b
and cl, r11b
add cl, cl
sub r10b, cl
lea ebx, [r11 + r10]
sub bl, 0x7b
movzx ecx, byte [rbp + rdi - 0x50]
add rcx, r9
add rdi, rcx
inc rdi
jmp 0x1401025a2
lea rcx, [r9 + 1]
cmp rax, rcx
jne 0x140102dcd
sub r10b, 4
movzx ecx, r10b
and cl, r11b
mov edx, recv
sub dl, cl
lea ebx, [rdx + rdx]
add bl, r10b
add bl, r11b
movzx ecx, byte [rbp + rdi - 0x50]
add rcx, r9
add rdi, rcx
inc rdi
jmp 0x1401025a2
lea rcx, [r9 + 3]
cmp rax, rcx
jne 0x140102df0
lea edx, [r10 + 8]
movzx ecx, dl
and cl, r11b
add cl, cl
sub dl, cl
lea ebx, [r11 + rdx]
sub bl, 0x38
jmp 0x140102e96
lea rcx, [r9 + 2]
cmp rax, rcx
jne 0x140102e19
add r10b, 0x14
movzx ecx, r10b
and cl, r11b
mov edx, Ordinal_60
sub dl, cl
lea ebx, [rdx + rdx]
add bl, r10b
add bl, r11b
jmp 0x14010301a
lea rcx, [r9 + 5]
cmp rax, rcx
jne 0x1401029f6
lea edx, [r10 + 0x2c]
movzx ecx, dl
and cl, r11b
add cl, cl
sub dl, cl
lea ebx, [r11 + rdx]
sub bl, 0x34
jmp 0x140102fbd
lea r8d, [r10 + 0x38]
movzx ecx, r8b
and cl, r11b
movzx edx, r11b
sub dl, cl
add dl, 0x3c
lea ebx, [rdx + rdx]
add bl, r8b
add r10b, 0x3b
movzx ecx, r10b
and cl, r11b
add cl, cl
sub r10b, cl
add r10b, 0x63
add r10b, bl
add r10b, r11b
mov byte [rbp + rdi - 0x50], r10b
jmp 0x14010301a
lea r8d, [r10 + 0x3e]
movzx ecx, r8b
and cl, r11b
mov edx, Ordinal_41
sub dl, cl
lea ebx, [rdx + rdx]
add bl, r8b
add r10b, 0x41
movzx ecx, r10b
and cl, r11b
add cl, cl
sub r10b, cl
add r10b, 0x39
add r10b, r11b
movzx ecx, r10b
mov byte [rbp + rdi - 0x50], cl
inc r9
add rcx, r9
sub rdi, rcx
lea r8d, [rdi + 0x44]
movzx ecx, r8b
and cl, r11b
mov edx, reloc.WS2_32.dll_select
sub dl, cl
add dl, dl
add dl, r8b
add dl, r11b
mov byte [rbp + rdi - 0x50], dl
inc rax
mov rcx, 0xffffffffffffffff
sub rcx, rax
add rdi, rcx
movzx ecx, byte [rbp + rdi - 0x50]
add rcx, r9
add rdi, rcx
inc rdi
jmp 0x1401025a2
add r10b, 0x75
movzx ecx, r10b
and cl, r11b
add cl, cl
sub r10b, cl
lea ebx, [r11 + r10]
sub bl, 0x33
movzx ecx, byte [rbp + rdi - 0x50]
add rcx, r9
add rdi, rcx
inc rdi
jmp 0x1401025a2
add r10b, 0x63
movzx ecx, r10b
and cl, r11b
add cl, cl
sub r10b, cl
lea ebx, [r11 + r10]
add bl, 0x4b
jmp 0x14010301d
add r10b, 0x5d
movzx ecx, r10b
and cl, r11b
add cl, cl
sub r10b, cl
lea ebx, [r11 + r10]
add bl, 0x75
jmp 0x14010301a
add r10b, 0x51
movzx ecx, r10b
and cl, r11b
add cl, cl
sub r10b, cl
lea ebx, [r11 + r10]
sub bl, 0x37
dec rdi
inc rdi
jmp 0x1401025a2
add r10b, 0x4b
movzx ecx, r10b
and cl, r11b
add cl, cl
sub r10b, cl
lea ebx, [r11 + r10]
sub bl, 0xd
inc r9
dec rdi
inc rdi
jmp 0x1401025a2
lea edx, [r10 + 0x45]
movzx ecx, dl
and cl, r11b
add cl, cl
sub dl, cl
lea ebx, [r11 + rdx]
add bl, 0x1d
add r10b, 0x35
movzx ecx, r10b
and cl, r11b
add cl, cl
sub r10b, cl
sub r10b, 0x73
add r10b, r11b
mov byte [rbp + rdi - 0x50], r10b
inc r9
dec rdi
inc rdi
jmp 0x1401025a2
lea edx, [rdi + 0x2d]
movzx ecx, dl
and cl, r11b
add cl, cl
sub dl, cl
lea ebx, [r11 + rdx]
sub bl, 0x3b
dec rdi
inc rdi
jmp 0x1401025a2
lea edx, [rdi + 0x21]
movzx ecx, dl
and cl, r11b
add cl, cl
sub dl, cl
lea ebx, [r11 + rdx]
add bl, 0x19
add rax, r9
movzx ecx, bl
mov rdx, 0xffffffffffffffff
sub rdx, rcx
add rdi, rdx
inc rdi
jmp 0x1401025a2
lea rcx, [rdi + r12]
and r8b, cl
add r8b, r8b
sub cl, r8b
lea ebx, [r11 + rcx]
sub bl, 0x3f
movzx ecx, byte [rbp + rdi - 0x50]
add rcx, r9
add rdi, rcx
inc rdi
jmp 0x1401025a2
sub r10b, 0x71
movzx ecx, r10b
and cl, r11b
add cl, cl
sub r10b, cl
lea ebx, [r11 + r10]
add bl, 0x17
jmp 0x1401025a0
sub r10b, 0x77
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea ebx, [r11 + r10]
add bl, 0x41
jmp 0x140102590
lea rdx, [rbp + 0x17c9db4]
jmp 0x1401030aa
lea rdx, [rbp + 0xdf92b7]
jmp 0x1401030aa
lea rdx, [rbp - 0x50]
mov dword [rsp + 0x28], esi
mov qword [rsp + 0x20], r14
mov r9d, 1
xor r8d, r8d
mov rcx, qword [rbp + 0x28]
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
test eax, eax
jne 0x1401030db
mov rcx, qword [rbp + 0x28]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
test eax, eax
sete bl
jmp 0x1401030dd
xor bl, bl
lea rcx, [rbp + 0x38]
call fcn.140002820
movzx eax, bl
mov rcx, qword [rbp + 0x58]
xor rcx, rsp
call fcn.140196270
mov rbx, qword [rsp + 0x1b0]
add rsp, 0x160
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret