Function at 0x14015ed70
Capabilities:
Query or enumerate registry value

Disassembly:
push rbp
push rbx
push rsi
push rdi
push r14
lea rbp, [rsp - 0x80]
sub rsp, 0x180
mov rsi, r8
mov rdi, rdx
mov r14, rcx
mov dword [rbp + 0xc8], 1
and dword [rbp + 0xb0], 0
mov rdx, r8
cmp qword [r8 + 0x18], 0xf
jbe 0x14015edaa
mov rdx, qword [r8]
lea rax, [rbp + 0xb0]
mov qword [rsp + 0x28], rax
and qword [rsp + 0x20], 0
lea r9, [rbp + 0xc8]
xor r8d, r8d
mov rcx, qword [rcx]
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
mov dword [rbp + 0xc0], eax
test eax, eax
jne 0x14015eecf
mov edx, dword [rbp + 0xb0]
xorps xmm0, xmm0
movdqu xmmword [rbp - 0x80], xmm0
and qword [rbp - 0x70], 0
lea rcx, [rbp - 0x80]
call fcn.14015fc98
nop
mov rdx, rsi
cmp qword [rsi + 0x18], 0xf
jbe 0x14015ee07
mov rdx, qword [rsi]
lea rax, [rbp + 0xb0]
mov qword [rsp + 0x28], rax
mov rbx, qword [rbp - 0x80]
mov qword [rsp + 0x20], rbx
lea r9, [rbp + 0xc8]
xor r8d, r8d
mov rcx, qword [r14]
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
mov dword [rbp + 0xc0], eax
test eax, eax
jne 0x14015f06d
mov r8, qword [rbp - 0x78]
dec r8
xorps xmm0, xmm0
movups xmmword [rbp - 0x68], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x58], xmm1
cmp rbx, r8
jne 0x14015ee65
mov qword [rbp - 0x50], reloc.WS2_32.dll_ntohs
mov byte [rbp - 0x68], al
jmp 0x14015ee74
sub r8, rbx
mov rdx, rbx
lea rcx, [rbp - 0x68]
call fcn.14015a098
movups xmm0, xmmword [rbp - 0x68]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [rbp - 0x58]
movups xmmword [rdi + 0x10], xmm1
test rbx, rbx
je 0x14015eeb8
mov rdx, qword [rbp - 0x70]
sub rdx, rbx
mov rax, rbx
cmp rdx, 0x1000
jb 0x14015eeb0
add rdx, 0x27
mov rbx, qword [rbx - 8]
sub rax, rbx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14015eec9
mov rcx, rbx
call fcn.140cba258
mov rax, rdi
add rsp, 0x180
pop r14
pop rdi
pop rsi
pop rbx
pop rbp
ret
call fcn.140cd6fcc
int3
movabs rax, 0x51e63c4c552fcc8f
mov qword [rbp - 0x40], rax
movabs rax, 0xbb7efffe254563c
mov qword [rbp - 0x38], rax
movabs rax, 0xa9bbbf070e7fefef
mov qword [rbp - 0x30], rax
movabs rax, 0xb1bafdc54dea14d8
mov qword [rbp - 0x28], rax
movabs rax, 0xc2ba0a57910d1eb8
mov qword [rbp - 0x20], rax
movabs rax, 0x670a90a831ec5cea
mov qword [rbp - 0x18], rax
movabs rax, 0x533cfa9e6554dc13
mov qword [rbp - 0x10], rax
movabs rax, 0xfb79b95803fe49a7
mov qword [rbp - 8], rax
movabs rax, 0x2894483f3c48a9dd
mov qword [rsp + 0x40], rax
movabs rax, 0x6fd2839683127606
mov qword [rsp + 0x48], rax
movabs rax, 0xcddada752e109bcf
mov qword [rsp + 0x50], rax
movabs rax, 0xc3ce8eac2a8f66f8
mov qword [rsp + 0x58], rax
movabs rax, 0xe3df7f3bf07b3ec1
mov qword [rsp + 0x60], rax
movabs rax, 0x1a71b092488917ca
mov qword [rsp + 0x68], rax
movabs rax, 0x730688f117269933
mov qword [rsp + 0x70], rax
movabs rax, 0xfb79b95803fe34dc
mov qword [rsp + 0x78], rax
movdqa xmm0, xmmword [rbp - 0x40]
xorps xmm0, xmmword [rsp + 0x40]
movdqa xmmword [rbp - 0x40], xmm0
movdqa xmm1, xmmword [rbp - 0x30]
xorps xmm1, xmmword [rsp + 0x50]
movdqa xmmword [rbp - 0x30], xmm1
movdqa xmm0, xmmword [rbp - 0x20]
xorps xmm0, xmmword [rsp + 0x60]
movdqa xmmword [rbp - 0x20], xmm0
movdqa xmm1, xmmword [rbp - 0x10]
xorps xmm1, xmmword [rsp + 0x70]
movdqa xmmword [rbp - 0x10], xmm1
lea rdx, [rbp - 0x40]
lea rcx, [rbp + 0x50]
call fcn.140155ef0
movups xmm0, xmmword [rax]
movdqu xmmword [rsp + 0x30], xmm0
lea rdx, [rsp + 0x30]
lea rcx, [rbp + 0x60]
call fcn.14015e888
movups xmm1, xmmword [rax]
movdqu xmmword [rsp + 0x30], xmm1
lea rdx, [rsp + 0x30]
lea rcx, [rbp + 0x70]
call fcn.14015e888
movups xmm1, xmmword [rax]
movdqu xmmword [rsp + 0x30], xmm1
lea r9, [rbp + 0xc0]
mov r8, rsi
lea rdx, [rsp + 0x30]
lea rcx, [rbp - 0x68]
call fcn.14015fb70
nop
mov rdx, rax
lea rcx, [rbp - 0x80]
call fcn.14015e834
lea rdx, [0x140f44bc0]
lea rcx, [rbp - 0x80]
call fcn.140cc0808
nop
movabs rax, 0x51e63c4c552fcc8f
mov qword [rsp + 0x40], rax
movabs rax, 0xbb7efffe254563c
mov qword [rsp + 0x48], rax
movabs rax, 0xa9bbbf070e7fefef
mov qword [rsp + 0x50], rax
movabs rax, 0xb1bafdc54dea14d8
mov qword [rsp + 0x58], rax
movabs rax, 0xc2ba0a57910d1eb8
mov qword [rsp + 0x60], rax
movabs rax, 0x670a90a831ec5cea
mov qword [rsp + 0x68], rax
movabs rax, 0x533cfa9e6554dc13
mov qword [rsp + 0x70], rax
movabs rax, 0xfb79b95803fe49a7
mov qword [rsp + 0x78], rax
movabs rax, 0x2894483f3c48a9dd
mov qword [rbp + 0x10], rax
movabs rax, 0x6fd2839683127606
mov qword [rbp + 0x18], rax
movabs rax, 0xcddada752e109bcf
mov qword [rbp + 0x20], rax
movabs rax, 0xc3ce8eac2a8f66f8
mov qword [rbp + 0x28], rax
movabs rax, 0xe3df7f3bf07b3ec1
mov qword [rbp + 0x30], rax
movabs rax, 0x1a71b092488917ca
mov qword [rbp + 0x38], rax
movabs rax, 0x730688f117269933
mov qword [rbp + 0x40], rax
movabs rax, 0xfb79b95803fe34dc
mov qword [rbp + 0x48], rax
movdqa xmm0, xmmword [rsp + 0x40]
xorps xmm0, xmmword [rbp + 0x10]
movdqa xmmword [rsp + 0x40], xmm0
movdqa xmm1, xmmword [rsp + 0x50]
xorps xmm1, xmmword [rbp + 0x20]
movdqa xmmword [rsp + 0x50], xmm1
movdqa xmm0, xmmword [rsp + 0x60]
xorps xmm0, xmmword [rbp + 0x30]
movdqa xmmword [rsp + 0x60], xmm0
movdqa xmm1, xmmword [rsp + 0x70]
xorps xmm1, xmmword [rbp + 0x40]
movdqa xmmword [rsp + 0x70], xmm1
lea rdx, [rsp + 0x40]
lea rcx, [rbp + 0x70]
call fcn.140155ef0
movups xmm0, xmmword [rax]
movdqu xmmword [rsp + 0x30], xmm0
lea rdx, [rsp + 0x30]
lea rcx, [rbp + 0x60]
call fcn.14015e888
movups xmm1, xmmword [rax]
movdqu xmmword [rsp + 0x30], xmm1
lea rdx, [rsp + 0x30]
lea rcx, [rbp + 0x50]
call fcn.14015e888
movups xmm1, xmmword [rax]
movdqu xmmword [rsp + 0x30], xmm1
lea r9, [rbp + 0xc0]
mov r8, rsi
lea rdx, [rsp + 0x30]
lea rcx, [rbp - 0x40]
call fcn.14015fb70
nop
mov rdx, rax
lea rcx, [rbp - 0x68]
call fcn.14015e834
lea rdx, [0x140f44bc0]
lea rcx, [rbp - 0x68]
call fcn.140cc0808
int3