Function at 0x1400ba110
Capabilities:
Query or enumerate registry key

Disassembly:
mov qword [rsp + 8], rcx
push rbp
push rsi
push r12
push r14
lea rbp, [rsp - 0x3c8]
sub rsp, 0x4c8
xor r14d, r14d
mov rax, rdx
mov qword [rcx], r14
mov r12, r8
mov qword [rcx + 8], r14
mov rsi, rcx
mov qword [rcx + 0x10], r14
mov rdx, r8
cmp qword [r8 + 0x18], 0x10
mov qword [rsp + 0x40], r14
mov dword [rbp + 0x400], r14d
jb 0x1400ba15a
mov rdx, qword [r8]
mov qword [rsp + 0x4f8], rbx
lea rcx, [rsp + 0x40]
mov qword [rsp + 0x20], rcx
mov r9d, 0x20019
mov qword [rsp + 0x4c0], rdi
mov rcx, rax
mov qword [rsp + 0x4b8], r13
xor r8d, r8d
mov qword [rsp + 0x4b0], r15
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x1400ba419
movzx ebx, byte [rbp + 0x3f0]
mov r13d, r14d
movzx edi, byte [rbp + 0x3f0]
nop
mov rcx, qword [rsp + 0x40]
lea r9, [rbp + 0x400]
mov qword [rsp + 0x38], r14
lea r8, [rbp - 0x50]
mov qword [rsp + 0x30], r14
mov edx, r13d
mov qword [rsp + 0x28], r14
mov qword [rsp + 0x20], r14
mov dword [rbp + 0x400], 0x400
call qword [sym.imp.ADVAPI32.dll_RegEnumKeyExA]
mov dword [rbp + 0x408], eax
mov r14d, eax
test eax, eax
jne 0x1400ba405
mov r15d, dword [rbp + 0x400]
lea rcx, [rsp + 0x48]
xorps xmm0, xmm0
movups xmmword [rsp + 0x48], xmm0
cmp r15, 0x10
jae 0x1400ba233
mov r8d, r15d
mov qword [rsp + 0x58], r15
lea rdx, [rbp - 0x50]
mov qword [rsp + 0x60], send
call fcn.1400e4c90
mov byte [rsp + r15 + 0x48], r14b
jmp 0x1400ba284
mov eax, socket
mov r14, r15
or r14, 0xf
cmp r14, 0x16
cmovb r14, rax
lea rdx, [r14 + 1]
call fcn.140027ca0
mov r8, r15
mov qword [rsp + 0x48], rax
lea rdx, [rbp - 0x50]
mov qword [rsp + 0x58], r15
mov rcx, rax
mov qword [rsp + 0x60], r14
mov rsi, rax
call fcn.1400e4c90
mov r14d, dword [rbp + 0x408]
mov byte [rsi + r15], 0
mov rsi, qword [rbp + 0x3f0]
mov rcx, qword [r12 + 0x10]
movabs rax, 0x7fffffffffffffff
sub rax, rcx
cmp rax, 1
jb 0x1400ba45a
cmp qword [r12 + 0x18], 0x10
mov r9, r12
jb 0x1400ba2af
mov r9, qword [r12]
lea rax, [0x1400f0be8]
mov qword [rsp + 0x30], 1
mov qword [rsp + 0x28], rax
mov r8, r12
mov qword [rsp + 0x20], rcx
movzx edx, bl
lea rcx, [rbp - 0x78]
call fcn.140024b40
lea r9, [rsp + 0x48]
movzx edx, dil
lea r8, [rbp - 0x78]
lea rcx, [rsp + 0x68]
call fcn.1400b23a0
mov rdx, qword [rsi + 8]
cmp rdx, qword [rsi + 0x10]
je 0x1400ba327
xorps xmm0, xmm0
movups xmmword [rdx], xmm0
mov qword [rdx + 0x10], 0
mov qword [rdx + 0x18], 0
movups xmm0, xmmword [rsp + 0x68]
movups xmmword [rdx], xmm0
movups xmm1, xmmword [rsp + 0x78]
movups xmmword [rdx + 0x10], xmm1
add qword [rsi + 8], 0x20
jmp 0x1400ba370
lea r8, [rsp + 0x68]
mov rcx, rsi
call fcn.140022d80
mov rdx, qword [rbp - 0x80]
cmp rdx, 0x10
jb 0x1400ba370
mov rcx, qword [rsp + 0x68]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400ba36b
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400ba460
call fcn.1400e2cd8
mov rdx, qword [rbp - 0x60]
mov qword [rsp + 0x78], 0
mov qword [rbp - 0x80], send
mov byte [rsp + 0x68], 0
cmp rdx, 0x10
jb 0x1400ba3c1
mov rcx, qword [rbp - 0x78]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400ba3bc
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400ba460
call fcn.1400e2cd8
mov rdx, qword [rsp + 0x60]
cmp rdx, 0x10
jb 0x1400ba405
mov rcx, qword [rsp + 0x48]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400ba3f5
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400ba460
call fcn.1400e2cd8
inc r13d
xor r14d, r14d
jmp 0x1400ba1b0
inc r13d
cmp r14d, 0x103
je 0x1400ba419
xor r14d, r14d
jmp 0x1400ba1b0
mov rcx, qword [rsp + 0x40]
test rcx, rcx
je 0x1400ba429
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov r15, qword [rsp + 0x4b0]
mov rax, rsi
mov r13, qword [rsp + 0x4b8]
mov rdi, qword [rsp + 0x4c0]
mov rbx, qword [rsp + 0x4f8]
add rsp, 0x4c8
pop r14
pop r12
pop rsi
pop rbp
ret
call fcn.140027c40
int3
call fcn.1400c4dc4
int3