Function at 0x140054986
Capabilities:
Get networking parameters
Query or enumerate registry value

Disassembly:
push r15
push r14
push r13
push r12
push rdi
push rsi
push rbp
push rbx
sub rsp, 0x5e8
mov rax, qword [0x140079508]
mov qword [rsp + 0x240], r8
mov r14, rdx
mov qword [rsp + 0x5e0], rax
mov r15, rcx
xor ebp, ebp
xor ecx, ecx
lea rdx, str.nameserver
call fcn.1400081f4
mov dword [rsp + 0x5d8], 0x1f4
xor r12d, r12d
xor esi, esi
mov dword [rsp + 0x5d4], r12d
xor edi, edi
xor ebx, ebx
test r15, r15
mov dword [rsp + 0x5dc], r12d
je 0x14005501e
mov r13, r15
lea rdx, [rsp + 0x4c0]
xor eax, eax
pxor xmm0, xmm0
movaps xmmword [rdx], xmm0
movaps xmmword [rdx + 0x10], xmm0
movaps xmmword [rdx + 0x20], xmm0
movaps xmmword [rdx + 0x30], xmm0
movaps xmmword [rdx + 0x40], xmm0
movaps xmmword [rdx + 0x50], xmm0
movaps xmmword [rdx + 0x60], xmm0
movaps xmmword [rdx + 0x70], xmm0
movaps xmmword [rdx + 0x80], xmm0
movaps xmmword [rdx + 0x90], xmm0
movaps xmmword [rdx + 0xa0], xmm0
movaps xmmword [rdx + 0xb0], xmm0
movaps xmmword [rdx + 0xc0], xmm0
movaps xmmword [rdx + 0xd0], xmm0
movaps xmmword [rdx + 0xe0], xmm0
movlps qword [rdx + 0xf0], xmm0
mov dword [rdx + 0xf8], eax
mov word [rdx + 0xfc], ax
mov byte [rdx + 0xfe], al
xor ecx, ecx
lea rdx, str.ORA_LDAP_DNS
call fcn.1400081f4
mov qword [rsp + 0x20], 0xff
lea rcx, [rsp + 0x5c8]
movsxd r8, eax
lea rdx, str.ORA_LDAP_DNS
mov dword [rsp + 0x28], 0
lea r9, [rsp + 0x4c0]
call sub.oracore11.dll_slzgetevar
test eax, eax
jl 0x140054b37
mov rcx, r13
mov edx, reloc.WS2_32.dll_inet_ntoa
call fcn.14000afa0
mov rsi, rax
test rsi, rsi
jne 0x140054ad4
mov r12d, 5
jmp 0x140054df1
lea rcx, [rsp + 0x4c0]
call fcn.140056aca
test eax, eax
je 0x140054af5
lea rcx, [rsp + 0x4c0]
call qword [sym.imp.WS2_32.dll_inet_addr]
jmp 0x140054b02
lea rcx, [rsp + 0x4c0]
call fcn.14004fc18
cmp eax, 0xffffffff
jne 0x140054b12
mov r12d, 2
jmp 0x140054de6
mov dword [rsi], eax
mov eax, 1
mov word [rsi + 4], ax
mov dword [rsi + 8], eax
mov edi, 1
mov rax, qword [rsp + 0x240]
mov qword [r14], rsi
mov dword [rax], edi
jmp 0x140054df1
cmp eax, 0xfffffffe
je 0x140055013
mov dword [rsp + 0x428], 0x94
lea rcx, [rsp + 0x428]
call qword [sym.imp.KERNEL32.dll_GetVersionExA]
test eax, eax
jne 0x140054b68
mov r12d, 2
jmp 0x140054de1
mov eax, dword [rsp + 0x438]
cmp eax, 2
jne 0x140054d84
mov eax, dword [rsp + 0x42c]
cmp eax, 4
jne 0x140054d84
lea rax, [rsp + 0x5c0]
mov qword [rsp + 0x20], rax
movabs rcx, 0xffffffff80000002
lea rdx, str.SYSTEMCURRENTCONTROLSETSERVICESTCPIPPARAMETERS
xor r8d, r8d
mov r9d, 1
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
je 0x140054bfd
mov dword [rsp + 0x28], 0x1f4
lea rbx, [rsp + 0x234]
mov ecx, 0x1000
xor edx, edx
mov qword [rsp + 0x30], 0
mov qword [rsp + 0x20], rbx
mov r8d, eax
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_FormatMessageA]
test eax, eax
jne 0x140054f39
mov r12d, 2
jmp 0x140054de1
mov rcx, qword [rsp + 0x5c0]
lea rax, [rsp + 0x40]
mov qword [rsp + 0x20], rax
lea rdx, str.nameserver
xor r8d, r8d
lea rbp, [rsp + 0x5d8]
mov qword [rsp + 0x28], rbp
lea r9, [rsp + 0x5dc]
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
mov r12d, eax
test r12d, r12d
jne 0x140054d43
mov eax, dword [rsp + 0x5dc]
cmp eax, 1
jne 0x140054d21
lea rdx, [rsp + 0x40]
lea r9, [rsp + 0x5d4]
mov rcx, r13
lea r8, [0x140060ea4]
call fcn.140008f60
mov rbp, rax
test rbp, rbp
je 0x140054b5d
mov qword [rsp + 0x238], r14
mov r15, rbp
mov r14, qword [r15]
test rsi, rsi
je 0x140054f80
lea eax, [rdi + 1]
lea r10, [rax*8]
lea rdx, [r10 + rax*4]
mov edi, edi
lea r11, [rdi*8]
lea r9, [r11 + rdi*4]
mov rcx, r13
mov r8, rsi
call fcn.14000aea8
mov rsi, rax
test rsi, rsi
je 0x140054ef5
mov rcx, r14
call fcn.140056aca
test eax, eax
je 0x140054cda
mov rcx, r14
call qword [sym.imp.WS2_32.dll_inet_addr]
jmp 0x140054ce2
mov rcx, r14
call fcn.14004fc18
cmp eax, 0xffffffff
je 0x140054f70
mov edi, edi
lea rdx, [rdi*8]
lea rcx, [rdx + rdi*4]
mov dword [rcx + rsi], eax
lea eax, [rdi + 1]
mov dword [rcx + rsi + 8], 1
mov word [rcx + rsi + 4], ax
mov r15, qword [r15 + 8]
add edi, 1
test r15, r15
je 0x140054f66
jmp 0x140054c83
mov edx, 0x1000000
mov rcx, r15
lea r8, str.sgslun_GetDNSAddress:____________________________Error____nameserver_value_not_a_string__n
xor r9d, r9d
call fcn.14001f070
mov r12d, 2
jmp 0x140054de1
mov dword [rsp + 0x28], 0x1f4
lea rbx, [rsp + 0x234]
mov ecx, 0x1000
xor edx, edx
mov qword [rsp + 0x30], 0
mov qword [rsp + 0x20], rbx
mov r8d, r12d
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_FormatMessageA]
test eax, eax
jne 0x140054f9e
mov r12d, 2
jmp 0x140054de1
mov dword [rsp + 0x4bc], 0x258
mov rcx, r15
mov edx, 0x258
call fcn.14000afa0
mov rbx, rax
test rbx, rbx
je 0x140054ddb
lea rdx, [rsp + 0x4bc]
mov rcx, rbx
call sub.iphlpapi.dll_GetNetworkParams
cmp eax, 0x6f
jne 0x140054e25
mov rcx, r15
mov rdx, rbx
call fcn.14000adf4
mov edx, dword [rsp + 0x4bc]
mov rcx, r15
call fcn.14000afa0
mov rbx, rax
test rbx, rbx
jne 0x140054e15
mov r12d, 5
test rsi, rsi
je 0x140054df1
mov rcx, r13
mov rdx, rsi
call fcn.14000adf4
mov rcx, qword [rsp + 0x5e0]
call fcn.14005fbf0
mov eax, r12d
add rsp, 0x5e8
pop rbx
pop rbp
pop rsi
pop rdi
pop r12
pop r13
pop r14
pop r15
ret
lea rdx, [rsp + 0x4bc]
mov rcx, rbx
call sub.iphlpapi.dll_GetNetworkParams
test eax, eax
je 0x140054e34
mov r12d, 2
jmp 0x140054f08
mov r15, rbx
add r15, 0x110
je 0x140054f08
mov rcx, r13
mov edx, reloc.WS2_32.dll_inet_ntoa
call fcn.14000afa0
mov rsi, rax
test rsi, rsi
je 0x140055008
mov qword [rsp + 0x238], r14
lea r14, [r15 + 8]
mov rcx, r14
call fcn.140056aca
test eax, eax
je 0x140054e80
mov rcx, r14
call qword [sym.imp.WS2_32.dll_inet_addr]
jmp 0x140054e88
mov rcx, r14
call fcn.14004fc18
cmp eax, 0xffffffff
je 0x140054f70
mov edi, edi
lea rdx, [rdi*8]
lea rcx, [rdx + rdi*4]
mov dword [rcx + rsi], eax
lea eax, [rdi + 1]
mov dword [rcx + rsi + 8], 1
mov word [rcx + rsi + 4], ax
mov r15, qword [r15]
add edi, 1
test r15, r15
je 0x140054f66
lea eax, [rdi + 1]
lea r10, [rax*8]
lea rdx, [r10 + rax*4]
mov edi, edi
lea r11, [rdi*8]
lea r9, [r11 + rdi*4]
mov rcx, r13
mov r8, rsi
call fcn.14000aea8
mov rsi, rax
test rsi, rsi
jne 0x140054e65
mov r14, qword [rsp + 0x238]
mov r12d, 5
test rbx, rbx
je 0x140054f13
mov rcx, r13
mov rdx, rbx
call fcn.14000adf4
test rbp, rbp
je 0x140054ffa
mov rbx, rbp
mov rdx, qword [rbx]
mov rcx, r13
call fcn.14000adf4
mov rbx, qword [rbx + 8]
test rbx, rbx
je 0x140054fcb
jmp 0x140054f1f
mov qword [rsp + 0x28], 0
mov qword [rsp + 0x20], rbx
mov rcx, r15
mov edx, 0x1000000
lea r8, str.sgslun_GetDNSAddress:_Error_____s_n
mov r9d, 0x19
call fcn.14001f070
jmp 0x140054bf2
mov r14, qword [rsp + 0x238]
jmp 0x140054f03
mov r14, qword [rsp + 0x238]
mov r12d, 2
jmp 0x140054f03
mov rcx, r13
mov edx, reloc.WS2_32.dll_inet_ntoa
call fcn.14000afa0
mov rsi, rax
test rsi, rsi
je 0x140054ef5
jmp 0x140054cc3
mov qword [rsp + 0x28], 0
mov qword [rsp + 0x20], rbx
mov rcx, r15
mov edx, 0x1000000
lea r8, str.sgslun_GetDNSAddress:_Error_____s_n
mov r9d, 0x19
call fcn.14001f070
jmp 0x140054d7c
mov rax, qword [rbp + 8]
test rax, rax
je 0x140054fef
mov rbx, qword [rbp + 8]
mov rcx, r13
mov rdx, rbp
call fcn.14000adf4
mov rax, qword [rbx + 8]
mov rbp, rbx
test rax, rax
jne 0x140054fd4
mov rcx, r13
mov rdx, rbp
call fcn.14000adf4
test r12d, r12d
je 0x140054b25
jmp 0x140054de1
mov r12d, 5
jmp 0x140054f03
mov r12d, 2
jmp 0x140054df1
call fcn.140006c40
mov r13, rax
jmp 0x1400549f6