Function at 0x14005bff0
Capabilities:
Query or enumerate registry value

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x37]
sub rsp, 0xf0
mov rax, qword [0x1400e1700]
xor rax, rsp
mov qword [rbp + 0x27], rax
xorps xmm0, xmm0
movups xmmword [rbp - 0x41], xmm0
xor r13d, r13d
mov qword [rbp - 0x31], r13
mov qword [rbp - 0x29], reloc.WS2_32.dll_ntohs
mov byte [rbp - 0x41], r13b
mov dword [rbp - 0x49], 0x40
mov dword [rbp - 0x45], 1
movdqa xmm1, xmmword [0x1400d0770]
movdqu xmmword [rsp + 0x30], xmm1
movdqa xmm2, xmmword [0x1400d06b0]
movdqu xmmword [rbp - 0x79], xmm2
movdqa xmm0, xmm1
psrldq xmm0, 1
movd eax, xmm0
movd ecx, xmm1
xor al, cl
mov byte [rsp + 0x31], al
xor byte [rsp + 0x32], cl
xor byte [rsp + 0x33], cl
xor byte [rsp + 0x34], cl
xor byte [rsp + 0x35], cl
xor byte [rsp + 0x36], cl
xor byte [rsp + 0x37], cl
xor byte [rsp + 0x38], cl
xor byte [rbp - 0x80], cl
xor byte [rbp - 0x7f], cl
xor byte [rbp - 0x7e], cl
xor byte [rbp - 0x7d], cl
xor byte [rbp - 0x7c], cl
xor byte [rbp - 0x7b], cl
xor byte [rbp - 0x7a], cl
movd eax, xmm2
xor al, cl
mov byte [rbp - 0x79], al
xor byte [rbp - 0x78], cl
xor byte [rbp - 0x77], cl
xor byte [rbp - 0x76], cl
xor byte [rbp - 0x75], cl
xor byte [rbp - 0x74], cl
xor byte [rbp - 0x73], cl
xor byte [rbp - 0x72], cl
xor byte [rbp - 0x71], cl
xor byte [rbp - 0x70], cl
xor byte [rbp - 0x6f], cl
xor byte [rbp - 0x6e], cl
xor byte [rbp - 0x6d], cl
xor byte [rbp - 0x6c], cl
xor byte [rbp - 0x6b], cl
xor byte [rbp - 0x6a], cl
mov byte [rbp - 0x69], r13b
lea rax, [rbp - 0x51]
mov qword [rsp + 0x20], rax
mov r9d, 0x20119
xor r8d, r8d
lea rdx, [rsp + 0x31]
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
mov r12d, eax
mov byte [rbp - 0x61], recv
mov cl, 0x43
mov dl, reloc.WS2_32.dll_WSAGetLastError
mov r8b, WSAGetLastError
mov r9b, 0x66
mov r10b, 0x67
mov r11b, 0x60
mov bl, 0x6b
mov dil, 0x49
mov sil, 0x7b
movzx r14d, r10b
mov r15b, 0x6a
xor eax, eax
xor cl, 0xe
mov byte [rbp - 0x60], cl
xor dl, 0xe
mov byte [rbp - 0x5f], dl
xor r8b, 0xe
mov byte [rbp - 0x5e], r8b
xor r9b, 0xe
mov byte [rbp - 0x5d], r9b
xor r10b, 0xe
mov byte [rbp - 0x5c], r10b
xor r11b, 0xe
mov byte [rbp - 0x5b], r11b
xor bl, 0xe
mov byte [rbp - 0x5a], bl
xor dil, 0xe
mov byte [rbp - 0x59], dil
xor sil, 0xe
mov byte [rbp - 0x58], sil
xor r14b, 0xe
mov byte [rbp - 0x57], r14b
xor r15b, 0xe
mov byte [rbp - 0x56], r15b
mov byte [rbp - 0x55], al
lea rax, [rbp - 0x49]
mov qword [rsp + 0x28], rax
lea rax, [rbp - 0x19]
mov qword [rsp + 0x20], rax
lea r9, [rbp - 0x45]
xor r8d, r8d
lea rdx, [rbp - 0x60]
mov rcx, qword [rbp - 0x51]
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
test r12d, r12d
jne 0x14005c20b
test eax, eax
jne 0x14005c20b
lea rax, [rbp - 0x19]
mov rbx, 0xffffffffffffffff
inc rbx
cmp byte [rax + rbx], 0
jne 0x14005c1c3
mov rax, qword [rbp - 0x29]
cmp rbx, rax
ja 0x14005c1fb
lea rdi, [rbp - 0x41]
cmp rax, 0x10
cmovae rdi, qword [rbp - 0x41]
mov qword [rbp - 0x31], rbx
mov r8, rbx
lea rdx, [rbp - 0x19]
mov rcx, rdi
call fcn.1400b9b2c
mov byte [rdi + rbx], 0
jmp 0x14005c20b
lea r9, [rbp - 0x19]
mov rdx, rbx
lea rcx, [rbp - 0x41]
call fcn.140007180
mov rcx, qword [rbp - 0x51]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov rdi, qword [0x1401d5178]
lea rcx, [rdi + 0x2b8]
lea rax, [rbp - 0x41]
cmp rcx, rax
je 0x14005c27a
mov rbx, qword [rbp - 0x31]
lea r9, [rbp - 0x41]
cmp qword [rbp - 0x29], 0x10
cmovae r9, qword [rbp - 0x41]
mov rax, qword [rcx + 0x18]
cmp rbx, rax
ja 0x14005c26b
mov rsi, rcx
cmp rax, 0x10
jb 0x14005c253
mov rsi, qword [rcx]
mov qword [rcx + 0x10], rbx
mov r8, rbx
mov rdx, r9
mov rcx, rsi
call fcn.1400b9b2c
mov byte [rsi + rbx], 0
jmp 0x14005c27a
mov rdx, rbx
call fcn.140007180
mov rdi, qword [0x1401d5178]
xorps xmm0, xmm0
movups xmmword [rbp - 0x19], xmm0
movups xmmword [rbp - 9], xmm0
movups xmmword [rbp + 7], xmm0
movups xmmword [rbp + 0x17], xmm0
mov dword [rbp - 0x49], r13d
mov dword [rbp - 0x45], r13d
mov qword [rbp - 0x51], r13
cmp qword [rdi + 0x2c8], 1
seta bl
mov rdx, qword [rbp - 0x29]
cmp rdx, 0x10
jb 0x14005c2e2
inc rdx
mov rcx, qword [rbp - 0x41]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14005c2dd
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14005c2dd
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400b8b1c
movzx eax, bl
mov rcx, qword [rbp + 0x27]
xor rcx, rsp
call fcn.1400b8870
lea r11, [rsp + 0xf0]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret