Function at 0x14005502c
Capabilities:
Get networking parameters
Query or enumerate registry value

Disassembly:
push r15
push r14
push r13
push r12
push rdi
sub rsp, 0x5e0
mov r14, rcx
mov rax, qword [0x140079508]
mov qword [rsp + 0x5d8], rax
xor ecx, ecx
lea rdx, str.domain
call fcn.1400081f4
mov dword [rsp + 0x4bc], 0x1f4
xor edi, edi
xor r12d, r12d
test r14, r14
mov dword [rsp + 0x5d4], 0
je 0x1400554e4
mov r13, r14
lea r15, [rsp + 0x4c0]
xor eax, eax
pxor xmm0, xmm0
movaps xmmword [r15], xmm0
movaps xmmword [r15 + 0x10], xmm0
movaps xmmword [r15 + 0x20], xmm0
movaps xmmword [r15 + 0x30], xmm0
movaps xmmword [r15 + 0x40], xmm0
movaps xmmword [r15 + 0x50], xmm0
movaps xmmword [r15 + 0x60], xmm0
movaps xmmword [r15 + 0x70], xmm0
movaps xmmword [r15 + 0x80], xmm0
movaps xmmword [r15 + 0x90], xmm0
movaps xmmword [r15 + 0xa0], xmm0
movaps xmmword [r15 + 0xb0], xmm0
movaps xmmword [r15 + 0xc0], xmm0
movaps xmmword [r15 + 0xd0], xmm0
movaps xmmword [r15 + 0xe0], xmm0
movlps qword [r15 + 0xf0], xmm0
mov dword [r15 + 0xf8], eax
mov word [r15 + 0xfc], ax
mov byte [r15 + 0xfe], al
xor eax, eax
pxor xmm0, xmm0
movaps xmmword [rsp + 0x4c0], xmm0
movaps xmmword [rsp + 0x4d0], xmm0
movaps xmmword [rsp + 0x4e0], xmm0
movaps xmmword [rsp + 0x4f0], xmm0
movaps xmmword [rsp + 0x500], xmm0
movaps xmmword [rsp + 0x510], xmm0
movaps xmmword [rsp + 0x520], xmm0
movaps xmmword [rsp + 0x530], xmm0
movaps xmmword [rsp + 0x540], xmm0
movaps xmmword [rsp + 0x550], xmm0
movaps xmmword [rsp + 0x560], xmm0
movaps xmmword [rsp + 0x570], xmm0
movaps xmmword [rsp + 0x580], xmm0
movaps xmmword [rsp + 0x590], xmm0
movaps xmmword [rsp + 0x5a0], xmm0
movlps qword [rsp + 0x5b0], xmm0
mov dword [rsp + 0x5b8], eax
mov word [rsp + 0x5bc], ax
mov byte [rsp + 0x5be], al
xor ecx, ecx
lea rdx, str.ORA_LDAP_DOMAIN
call fcn.1400081f4
mov qword [rsp + 0x20], 0xff
lea rcx, [rsp + 0x5c8]
movsxd r8, eax
lea rdx, str.ORA_LDAP_DOMAIN
mov dword [rsp + 0x28], 0
mov r9, r15
call sub.oracore11.dll_slzgetevar
test eax, eax
jl 0x1400551fa
mov rcx, r13
mov rdx, r15
call fcn.140008de0
mov rdi, rax
jmp 0x140055432
cmp eax, 0xfffffffe
je 0x1400554f1
mov dword [rsp + 0x428], 0x94
lea rcx, [rsp + 0x428]
call qword [sym.imp.KERNEL32.dll_GetVersionExA]
test eax, eax
je 0x140055432
mov eax, dword [rsp + 0x438]
cmp eax, 2
jne 0x140055385
mov eax, dword [rsp + 0x42c]
cmp eax, 4
jne 0x140055385
lea rax, [rsp + 0x5c0]
mov qword [rsp + 0x20], rax
movabs rcx, 0xffffffff80000002
lea rdx, str.SYSTEMCURRENTCONTROLSETSERVICESTCPIPPARAMETERS
xor r8d, r8d
mov r9d, 1
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
je 0x1400552ce
mov dword [rsp + 0x28], 0x1f4
lea rdi, [rsp + 0x234]
mov ecx, 0x1000
xor edx, edx
mov qword [rsp + 0x30], 0
mov qword [rsp + 0x20], rdi
mov r8d, eax
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_FormatMessageA]
test eax, eax
jne 0x140055453
mov rcx, qword [rsp + 0x5d8]
call fcn.14005fbf0
xor eax, eax
add rsp, 0x5e0
pop rdi
pop r12
pop r13
pop r14
pop r15
ret
mov rcx, qword [rsp + 0x5c0]
lea rdi, [rsp + 0x40]
mov qword [rsp + 0x20], rdi
lea rdx, str.Domain
xor r8d, r8d
lea rax, [rsp + 0x4bc]
mov qword [rsp + 0x28], rax
lea r9, [rsp + 0x5d4]
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
test eax, eax
jne 0x14005532c
mov eax, dword [rsp + 0x5d4]
cmp eax, 1
jne 0x140055480
mov rcx, r13
mov rdx, rdi
call fcn.140008de0
mov rdi, rax
jmp 0x140055432
mov dword [rsp + 0x28], 0x1f4
lea rdi, [rsp + 0x234]
mov ecx, 0x1000
xor edx, edx
mov qword [rsp + 0x30], 0
mov qword [rsp + 0x20], rdi
mov r8d, eax
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_FormatMessageA]
test eax, eax
jne 0x1400554b7
mov rcx, qword [rsp + 0x5d8]
call fcn.14005fbf0
xor eax, eax
add rsp, 0x5e0
pop rdi
pop r12
pop r13
pop r14
pop r15
ret
mov dword [rsp + 0x234], 0x258
mov rcx, r14
mov edx, 0x258
call fcn.14000afa0
mov r15, rax
test r15, r15
je 0x140055531
lea rdx, [rsp + 0x234]
mov rcx, r15
call sub.iphlpapi.dll_GetNetworkParams
cmp eax, 0x6f
jne 0x1400553f4
mov rcx, r14
mov rdx, r15
call fcn.14000adf4
mov edx, dword [rsp + 0x234]
mov rcx, r14
call fcn.14000afa0
mov r15, rax
test r15, r15
je 0x140055511
lea rdx, [rsp + 0x234]
mov rcx, r15
call sub.iphlpapi.dll_GetNetworkParams
test eax, eax
je 0x140055400
mov r12d, 2
jmp 0x140055412
lea rdx, [r15 + 0x84]
mov rcx, r13
call fcn.140008de0
mov rdi, rax
mov rcx, r13
mov rdx, r15
call fcn.14000adf4
test r12d, r12d
je 0x140055432
test rdi, rdi
je 0x140055432
mov rcx, r13
mov rdx, rdi
call fcn.14000adf4
mov rcx, qword [rsp + 0x5d8]
call fcn.14005fbf0
mov rax, rdi
add rsp, 0x5e0
pop rdi
pop r12
pop r13
pop r14
pop r15
ret
mov qword [rsp + 0x28], 0
mov qword [rsp + 0x20], rdi
mov rcx, r14
mov edx, 0x1000000
lea r8, str.sgslun_GetMCDomainName:_Error_____s_n
mov r9d, 0x19
call fcn.14001f070
jmp 0x1400552ae
mov edx, 0x1000000
mov rcx, r14
lea r8, str.sgslun_GetMCDomainName:_________________________Error____domain_value_not_a_string__n
xor r9d, r9d
call fcn.14001f070
mov rcx, qword [rsp + 0x5d8]
call fcn.14005fbf0
xor eax, eax
add rsp, 0x5e0
pop rdi
pop r12
pop r13
pop r14
pop r15
ret
mov qword [rsp + 0x28], 0
mov qword [rsp + 0x20], rdi
mov rcx, r14
mov edx, 0x1000000
lea r8, str.sgslun_GetMCDomainName:_Error_____s_n
mov r9d, 0x19
call fcn.14001f070
jmp 0x140055365
call fcn.140006c40
mov r13, rax
jmp 0x140055083
mov rcx, qword [rsp + 0x5d8]
call fcn.14005fbf0
xor eax, eax
add rsp, 0x5e0
pop rdi
pop r12
pop r13
pop r14
pop r15
ret
mov rcx, qword [rsp + 0x5d8]
call fcn.14005fbf0
xor eax, eax
add rsp, 0x5e0
pop rdi
pop r12
pop r13
pop r14
pop r15
ret
mov rcx, qword [rsp + 0x5d8]
call fcn.14005fbf0
xor eax, eax
add rsp, 0x5e0
pop rdi
pop r12
pop r13
pop r14
pop r15
ret