Function at 0x14013dfd0
Capabilities:
Delete registry value

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rbp
push rsi
push rdi
push r14
sub rsp, 0x30
movzx ebp, dl
mov rdi, rcx
mov rcx, qword [0x14024fa68]
lea r14, [0x14024fa68]
cmp rcx, r14
je 0x14013e030
test byte [rcx + 0x1c], 1
je 0x14013e030
cmp byte [rcx + 0x19], 5
jb 0x14013e030
mov rcx, qword [rcx + 0x10]
lea rax, str.true
test dl, dl
lea r9, str.false
mov edx, reloc.WS2_32.dll_inet_addr
lea r8, [0x140203bc0]
cmovne r9, rax
call fcn.14008ed70
xor edx, edx
xor ecx, ecx
mov r8d, 0xf003f
xor bl, bl
call qword [sym.imp.ADVAPI32.dll_OpenSCManagerW]
mov rsi, rax
test rax, rax
je 0x14013e145
lea rdx, [rdi + 0x38]
mov r8d, 2
mov rcx, rax
call qword [case.0x1401ba071.44]
mov rdi, rax
test rax, rax
je 0x14013e105
movzx ecx, bpl
lea r8, [rsp + 0x60]
neg cl
mov rcx, rax
sbb edx, edx
and edx, 3
mov dword [rsp + 0x60], edx
mov edx, reloc.WS2_32.dll_inet_ntoa
call qword [case.0x1401ba071.45]
test eax, eax
je 0x14013e0cd
mov rcx, qword [0x14024fa68]
cmp rcx, r14
je 0x14013e0c0
test byte [rcx + 0x1c], 1
je 0x14013e0c0
cmp byte [rcx + 0x19], 5
jb 0x14013e0c0
mov rcx, qword [rcx + 0x10]
lea r8, [0x140203bc0]
mov edx, reloc.WS2_32.dll_inet_ntoa
call fcn.14008eb30
mov rcx, rdi
mov bl, 1
call qword [case.0x1401ba071.43]
jmp 0x14013e132
mov rcx, qword [0x14024fa68]
cmp rcx, r14
je 0x14013e0fa
test byte [rcx + 0x1c], 1
je 0x14013e0fa
cmp byte [rcx + 0x19], 3
jb 0x14013e0fa
mov rcx, qword [rcx + 0x10]
lea r8, [0x140203bc0]
mov edx, reloc.WS2_32.dll_listen
call fcn.14008eb30
mov rcx, rdi
call qword [case.0x1401ba071.43]
jmp 0x14013e132
mov rcx, qword [0x14024fa68]
cmp rcx, r14
je 0x14013e132
test byte [rcx + 0x1c], 1
je 0x14013e132
cmp byte [rcx + 0x19], 3
jb 0x14013e132
mov rcx, qword [rcx + 0x10]
lea r8, [0x140203bc0]
mov edx, select
call fcn.14008eb30
mov rcx, rsi
call qword [case.0x1401ba071.43]
test bl, bl
jne 0x14013e290
jmp 0x14013e172
mov rcx, qword [0x14024fa68]
cmp rcx, r14
je 0x14013e172
test byte [rcx + 0x1c], 1
je 0x14013e172
cmp byte [rcx + 0x19], 3
jb 0x14013e172
mov rcx, qword [rcx + 0x10]
lea r8, [0x140203bc0]
mov edx, reloc.WS2_32.dll_ntohs
call fcn.14008eb30
mov r9d, 2
mov byte [rsp + 0x20], 1
lea r8, [rsp + 0x68]
mov rcx, 0xffffffff80000002
lea rdx, str.SYSTEMCurrentControlSetServicesekrn
call fcn.1401a5450
test al, al
je 0x14013e263
mov rcx, qword [rsp + 0x68]
lea rdx, str.LaunchProtected
test bpl, bpl
je 0x14013e22c
lea rax, [rsp + 0x60]
mov dword [rsp + 0x28], 4
mov r9d, 4
mov qword [rsp + 0x20], rax
xor r8d, r8d
mov dword [rsp + 0x60], 3
call qword [case.0x1401ba071.80]
mov ecx, eax
mov ebx, eax
call qword [sym.imp.KERNEL32.dll_SetLastError]
test ebx, ebx
sete al
test al, al
je 0x14013e244
mov rcx, qword [0x14024fa68]
cmp rcx, r14
je 0x14013e217
test byte [rcx + 0x1c], 1
je 0x14013e217
cmp byte [rcx + 0x19], 5
jb 0x14013e217
mov edx, reloc.WS2_32.dll_recv
mov rcx, qword [rcx + 0x10]
lea r8, [0x140203bc0]
call fcn.14008eb30
mov rcx, qword [rsp + 0x68]
call qword [0x14024f048]
mov ecx, eax
call qword [sym.imp.KERNEL32.dll_SetLastError]
jmp 0x14013e290
call qword [sym.imp.ADVAPI32.dll_RegDeleteValueW]
mov ecx, eax
mov ebx, eax
call qword [sym.imp.KERNEL32.dll_SetLastError]
test ebx, 0xfffffffd
je 0x14013e1ea
mov rcx, qword [0x14024fa68]
cmp rcx, r14
je 0x14013e217
test byte [rcx + 0x1c], 1
je 0x14013e217
cmp byte [rcx + 0x19], 2
jb 0x14013e217
mov edx, reloc.WS2_32.dll_recvfrom
jmp 0x14013e207
mov rcx, qword [0x14024fa68]
cmp rcx, r14
je 0x14013e290
test byte [rcx + 0x1c], 1
je 0x14013e290
cmp byte [rcx + 0x19], 3
jb 0x14013e290
mov rcx, qword [rcx + 0x10]
lea r8, [0x140203bc0]
mov edx, reloc.WS2_32.dll_select
call fcn.14008eb30
mov rbx, qword [rsp + 0x50]
mov rbp, qword [rsp + 0x58]
add rsp, 0x30
pop r14
pop rdi
pop rsi
ret