Function at 0x1800236d0
Capabilities:
Send data
Send data on socket
Send http request

Disassembly:
push rbp
push rbx
push rsi
push rdi
push r14
push r15
lea rbp, [rsp - 0x2198]
mov eax, 0x2298
call fcn.18002add0
sub rsp, rax
mov rax, qword [0x1800990e0]
xor rax, rsp
mov qword [rbp + 0x2180], rax
mov r15, rcx
mov rsi, r8
mov rbx, rdx
lea rcx, [rbp + 0x981]
xor edx, edx
mov r8d, 0x7ff
movsxd r14, r9d
mov byte [rbp + 0x980], 0
call fcn.1800292e0
lea rcx, [rbp + 0x1181]
xor edx, edx
mov r8d, 0x7ff
mov byte [rbp + 0x1180], 0
call fcn.1800292e0
lea rcx, [rbp + 0x181]
xor edx, edx
mov r8d, 0x7ff
mov byte [rbp + 0x180], 0
call fcn.1800292e0
lea rcx, [rbp + 0x1981]
xor edx, edx
mov r8d, 0x7ff
mov byte [rbp + 0x1980], 0
call fcn.1800292e0
lea r9, [rbp + 0x1180]
lea rdx, [rbp + 0x980]
mov r8d, 0x800
mov rcx, rbx
mov dword [rsp + 0x20], 0x800
call fcn.180026680
or rbx, 0xffffffffffffffff
mov rdi, rax
test rax, rax
je 0x180023846
nop dword [rax + rax]
lea rdx, str.str_Base
lea rcx, [rbp + 0x980]
call fcn.180028678
test rax, rax
je 0x1800237e3
lea r8, [rbp + 0x1180]
lea rcx, [rbp + 0x180]
mov r9, rbx
mov edx, 0x800
call fcn.18002a5b4
lea rdx, str.str_SubKey
lea rcx, [rbp + 0x980]
call fcn.180028678
test rax, rax
je 0x180023816
lea r8, [rbp + 0x1180]
lea rcx, [rbp + 0x1980]
mov r9, rbx
mov edx, 0x800
call fcn.18002a5b4
lea r9, [rbp + 0x1180]
lea rdx, [rbp + 0x980]
mov r8d, 0x800
mov rcx, rdi
mov dword [rsp + 0x20], 0x800
call fcn.180026680
mov rdi, rax
test rax, rax
jne 0x1800237b0
lea rcx, [rbp + 0x180]
mov rax, rbx
inc rax
cmp byte [rcx + rax], 0
jne 0x180023850
test rax, rax
jne 0x18002387a
lea r8, str._ul__li__a_href__RegDump_str_BaseHKEY_CLASSES_ROOT__HKEY_CLASSES_ROOT__a__br__li__a_href__RegDump_str_BaseHKEY_CURRENT_CONFIG__HKEY_CURRENT_CONFIG__a__br__li__a_href__RegDump_str_BaseHKEY_CURRENT_USER__HKEY_CURRENT_USER__a__br__li__a_href__RegDump_str_BaseHKEY_LOCAL_MACHINE__HKEY_LOCAL_MACHINE__a__br__li__a_href__RegDump_str_BaseHKEY_USERS__HKEY_USERS__a__br___ul__p_Note:_You_can_also_supply_a_str_SubKey_argument_to_the_URL_to_restrict_your_scan_to_certain_registry_keys._Backslashes_must_be_escaped._Eg:__a_href__RegDump_str_BaseHKEY_LOCAL_MACHINEstr_SubKeyHARDWAREDESCRIPTIONSystem__HKEY_LOCAL_MACHINEHARDWAREDESCRIPTIONSystem__a_
mov rdx, r14
mov r9, rbx
mov rcx, rsi
call fcn.18002a5b4
mov eax, ebx
jmp 0x180023a57
lea rdx, str.HKEY_CLASSES_ROOT
lea rcx, [rbp + 0x180]
mov rdi, 0xffffffff80000002
call fcn.18002b030
test eax, eax
jne 0x1800238a1
mov rdi, 0xffffffff80000000
jmp 0x180023918
lea rdx, str.HKEY_CURRENT_CONFIG
lea rcx, [rbp + 0x180]
call fcn.18002b030
test eax, eax
jne 0x1800238c1
mov rdi, 0xffffffff80000005
jmp 0x180023918
lea rdx, str.HKEY_CURRENT_USER
lea rcx, [rbp + 0x180]
call fcn.18002b030
test eax, eax
jne 0x1800238e1
mov rdi, 0xffffffff80000001
jmp 0x180023918
lea rdx, str.HKEY_LOCAL_MACHINE
lea rcx, [rbp + 0x180]
call fcn.18002b030
test eax, eax
je 0x180023918
lea rdx, str.HKEY_USERS
lea rcx, [rbp + 0x180]
call fcn.18002b030
mov rcx, 0xffffffff80000003
test eax, eax
cmove rdi, rcx
lea rax, [rsp + 0x30]
lea rdx, [rbp + 0x1980]
mov r9d, 0x20019
xor r8d, r8d
mov rcx, rdi
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
je 0x180023964
cmp eax, 2
jne 0x180023873
lea r8, str._div_aligncenter__font_color_red__Sorry___the_supplied_subkey_cannot_be_found.__font___div_
mov rdx, r14
mov r9, rbx
mov rcx, rsi
call fcn.18002a5b4
mov eax, ebx
jmp 0x180023a57
xor eax, eax
lea r8, str.text_plain
lea rcx, [rsp + 0x40]
lea edx, [rax + 0x40]
mov r9, rbx
mov byte [rsp + 0x40], 0
mov qword [rsp + 0x41], rax
mov qword [rsp + 0x49], rax
mov qword [rsp + 0x51], rax
mov qword [rsp + 0x59], rax
mov qword [rsp + 0x61], rax
mov qword [rsp + 0x69], rax
mov qword [rsp + 0x71], rax
mov dword [rsp + 0x79], eax
mov word [rsp + 0x7d], ax
mov byte [rsp + 0x7f], al
call fcn.18002a5b4
cmp dword [0x18009caf4], 5
jl 0x1800239cc
lea rdx, [rsp + 0x40]
lea rcx, str.DisplayHTMLHeader:__s
call fcn.1800169b0
lea rax, [rsp + 0x40]
lea r9, str.HTTP_1.0_200_OK_r_nServer:_SNARE_1.0_r_nMIME_version:_1.0_r_nContent_type:__s_r_n
lea rcx, [rbp - 0x80]
mov r8, rbx
mov edx, 0x200
mov qword [rsp + 0x20], rax
call fcn.180029e64
lea r8, [0x18007038c]
lea rcx, [rbp - 0x80]
mov r9, rbx
mov edx, 0x200
call fcn.180029f1c
lea rax, [rbp - 0x80]
nop word [rax + rax]
inc rbx
cmp byte [rax + rbx], 0
jne 0x180023a10
lea rdx, [rbp - 0x80]
mov r8, rbx
xor r9d, r9d
mov rcx, r15
call qword [sym.imp.WS2_32.dll_send]
mov rcx, qword [rsp + 0x30]
lea r8, [rbp + 0x1980]
lea rdx, [rbp + 0x180]
mov r9, r15
call fcn.180023a80
mov rcx, qword [rsp + 0x30]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov eax, 1
mov rcx, qword [rbp + 0x2180]
xor rcx, rsp
call fcn.1800292b0
add rsp, 0x2298
pop r15
pop r14
pop rdi
pop rsi
pop rbx
pop rbp
ret