Function at 0x140135bf0
Capabilities:
Get proxy

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x188
mov r15, rcx
lea rdx, str.SoftwareMicrosoftWindowsCurrentVersionInternet_SettingsProxyEnableProxyServer
lea rcx, [rsp + 0x70]
mov r8d, 0x3b
call fcn.1400bd790
mov qword [rsp + 0xf8], 0
mov rbx, qword [rsp + 0x70]
lea rax, [rsp + 0xf8]
mov qword [rsp + 0x20], rax
mov rcx, 0xffffffff80000001
mov rdx, rbx
xor r8d, r8d
mov r9d, 0x20019
call sub.ADVAPI32.dll_RegOpenKeyExW
mov edi, eax
test eax, eax
jne 0x140135c63
mov rbp, qword [rsp + 0xf8]
jmp 0x140135c6a
mov rbp, rdi
shl rbp, 0x20
movabs rax, 0x8000000000000000
mov rcx, qword [rsp + 0x78]
or rcx, rax
cmp rcx, rax
jne 0x140135cb6
test edi, edi
je 0x140135ccc
call sub.KERNEL32.dll_GetProcessHeap
mov r8d, reloc.WS2_32.dll_recv
mov rcx, rax
xor edx, edx
call sub.KERNEL32.dll_HeapAlloc
test rax, rax
je 0x140136947
mov rbx, rax
mov qword [rax], rbp
mov qword [rax + 8], 0
jmp 0x140135d98
call sub.KERNEL32.dll_GetProcessHeap
mov rcx, rax
xor edx, edx
mov r8, rbx
call fcn.14021dfcd
test edi, edi
jne 0x140135c85
mov qword [rsp + 0x68], rbp
lea r8, [0x14026e453]
lea rcx, [rsp + 0x70]
lea rdx, [rsp + 0x68]
call fcn.1400bdbb0
cmp dword [rsp + 0x70], 1
jne 0x140135cfd
mov rsi, qword [rsp + 0x78]
mov rdi, qword [rsp + 0x80]
jmp 0x140135d59
cmp byte [rsp + 0x90], 4
jne 0x140135d1e
mov rax, qword [rsp + 0x78]
mov r14d, dword [rax]
xor esi, esi
cmp qword [rsp + 0x80], 0
jne 0x140135d2e
jmp 0x140135d45
mov esi, 1
cmp qword [rsp + 0x80], 0
je 0x140135d45
mov rdi, qword [rsp + 0x78]
call sub.KERNEL32.dll_GetProcessHeap
mov rcx, rax
xor edx, edx
mov r8, rdi
call fcn.14021dfcd
test esi, esi
je 0x140135dcf
movabs rsi, 0xde00000000
xor edi, edi
call sub.KERNEL32.dll_GetProcessHeap
mov r8d, reloc.WS2_32.dll_recv
mov rcx, rax
xor edx, edx
call sub.KERNEL32.dll_HeapAlloc
test rax, rax
je 0x140136947
mov rbx, rax
mov qword [rax], rsi
mov qword [rax + 8], rdi
movabs rax, 0xffffffff7fffffff
cmp rbp, rax
ja 0x140135d98
mov rcx, rbp
call sub.ADVAPI32.dll_RegCloseKey
mov qword [r15 + 8], 0
mov rcx, rbx
call fcn.1400cda00
call sub.KERNEL32.dll_GetProcessHeap
mov rcx, rax
xor edx, edx
mov r8, rbx
call fcn.14021dfcd
nop
add rsp, 0x188
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
lea r8, [0x14026e45e]
lea rcx, [rsp + 0x160]
lea rdx, [rsp + 0x68]
call fcn.1400bdbb0
cmp dword [rsp + 0x160], 1
mov qword [rsp + 0xd8], r15
jne 0x140135e14
mov rsi, qword [rsp + 0x168]
mov r8, qword [rsp + 0x170]
mov ebp, 1
jmp 0x1401368b8
movzx ebx, byte [rsp + 0x180]
xor r8d, r8d
mov ebp, 1
movabs rsi, 0xde00000000
cmp rbx, 7
ja 0x140136368
mov eax, 0x86
bt rax, rbx
jae 0x140136883
mov rdi, qword [rsp + 0x168]
mov rbp, qword [rsp + 0x178]
mov rax, rbp
shr rax, 2
je 0x140135ebf
cmp rax, 8
mov edx, 8
cmova rdx, rax
mov qword [rsp + 0x70], 0
lea rcx, [rsp + 0xf8]
lea r9, [rsp + 0x70]
mov r8d, 1
call fcn.1401779a0
mov rsi, qword [rsp + 0x100]
mov r8, qword [rsp + 0x108]
cmp qword [rsp + 0xf8], 1
jne 0x140135ec7
test r8, r8
je 0x1401369ac
mov rdx, r8
mov rcx, rsi
call fcn.1400182a0
ud2
mov esi, 1
xor r8d, r8d
shr rbp, 1
mov dword [rsp + 0x3c], r14d
je 0x140135f65
lea r15, [rdi + 2]
movzx ecx, word [rdi]
movzx eax, cx
mov edx, ecx
and edx, 0xf800
cmp edx, 0xd800
mov qword [rsp + 0x58], rbx
jne 0x140135f5b
xor ebx, ebx
cmp eax, 0xdbff
mov eax, 1
ja 0x140135f6f
cmp rbp, 1
je 0x140135f6f
lea r15, [rdi + 4]
movzx ebx, word [rdi + 2]
mov edx, ebx
and edx, 0xfc00
mov r14w, 1
cmp edx, 0xdc00
jne 0x140135f72
lea eax, [rcx + 0x2800]
movzx eax, ax
lea ecx, [rbx + 0x2400]
movzx ecx, cx
shl rax, 0x2a
shl rcx, 0x20
or rcx, rax
movabs rax, 0x1000000000000
add rax, rcx
mov r14d, dword [rsp + 0x3c]
mov rbx, qword [rsp + 0x58]
jmp 0x140135f5f
shl rax, 0x20
cmp ax, 2
jne 0x140135f6d
xor r12d, r12d
jmp 0x140136377
xor ebx, ebx
xor r14d, r14d
lea rcx, [rdi + rbp*2]
mov qword [rsp + 0x60], rcx
xor r12d, r12d
mov edi, 0xfffd
jmp 0x140135fbd
mov eax, ebx
and eax, 0xf800
movzx edx, bx
cmp eax, 0xd800
je 0x140136068
shl rdx, 0x20
xor r14d, r14d
xor ecx, ecx
mov rax, rdx
mov ebx, ecx
cmp ax, 2
je 0x140136269
mov rbp, rax
shr rbp, 0x20
test ax, ax
cmovne ebp, edi
cmp ebp, 0x80
jae 0x140136023
cmp r8, r12
jne 0x1401361d9
mov rdx, r8
inc rdx
je 0x1401369ac
lea rax, [r8 + r8]
cmp rax, rdx
cmova rdx, rax
cmp rdx, 8
mov eax, 8
cmovbe rdx, rax
test r8, r8
je 0x140136199
mov qword [rsp + 0x70], rsi
mov qword [rsp + 0x78], r8
mov qword [rsp + 0x80], 1
jmp 0x1401361a2
mov dword [rsp + 0x40], 0
mov eax, ebp
cmp ebp, 0x800
jae 0x1401360d1
shr eax, 6
or al, 0xc0
mov byte [rsp + 0x40], al
and bpl, 0x3f
or bpl, 0x80
mov byte [rsp + 0x41], bpl
mov ebp, 2
mov rax, r8
sub rax, r12
cmp rax, rbp
jae 0x14013610c
jmp 0x140136158
mov eax, 1
cmp edx, 0xdbff
ja 0x1401360c7
cmp qword [rsp + 0x60], r15
je 0x1401360c7
movzx ecx, word [r15]
add r15, 2
mov edx, ecx
and edx, 0xfc00
mov r14w, 1
cmp edx, 0xdc00
jne 0x140135fb1
add ebx, 0x2800
movzx edx, bx
lea eax, [rcx + 0x2400]
movzx eax, ax
shl rdx, 0x2a
shl rax, 0x20
or rax, rdx
movabs rcx, 0x1000000000000
add rax, rcx
xor r14d, r14d
xor ecx, ecx
jmp 0x140135fb1
cmp ebp, 0x10000
jae 0x140136118
shr eax, 0xc
or al, 0xe0
mov byte [rsp + 0x40], al
mov eax, ebp
shr eax, 6
and al, 0x3f
or al, 0x80
mov byte [rsp + 0x41], al
and bpl, 0x3f
or bpl, 0x80
mov byte [rsp + 0x42], bpl
mov ebp, 3
mov rax, r8
sub rax, r12
cmp rax, rbp
jb 0x140136158
mov r13, r8
lea rdi, [r12 + rbp]
jmp 0x14013622d
shr eax, 0x12
or al, 0xf0
mov byte [rsp + 0x40], al
mov eax, ebp
shr eax, 0xc
and al, 0x3f
or al, 0x80
mov byte [rsp + 0x41], al
mov eax, ebp
shr eax, 6
and al, 0x3f
or al, 0x80
mov byte [rsp + 0x42], al
and bpl, 0x3f
or bpl, 0x80
mov byte [rsp + 0x43], bpl
mov ebp, 4
mov rax, r8
sub rax, r12
cmp rax, rbp
jae 0x14013610c
mov rdi, r12
add rdi, rbp
jb 0x1401369ac
lea rdx, [r8 + r8]
cmp rdx, rdi
cmovbe rdx, rdi
cmp rdx, 8
mov eax, 8
cmovbe rdx, rax
test r8, r8
je 0x1401361ed
mov qword [rsp + 0x70], rsi
mov qword [rsp + 0x78], r8
mov qword [rsp + 0x80], 1
jmp 0x1401361f6
mov qword [rsp + 0x70], 0
mov r8d, 1
lea rcx, [rsp + 0xf8]
lea r9, [rsp + 0x70]
call fcn.1401779a0
mov rsi, qword [rsp + 0x100]
mov r8, qword [rsp + 0x108]
cmp qword [rsp + 0xf8], 1
je 0x140136971
mov byte [rsi + r12], bpl
add r12, 1
test r14w, r14w
jne 0x140135f90
jmp 0x140136255
mov qword [rsp + 0x70], 0
mov r8d, 1
lea rcx, [rsp + 0xf8]
lea r9, [rsp + 0x70]
call fcn.1401779a0
mov rsi, qword [rsp + 0x100]
mov r13, qword [rsp + 0x108]
cmp qword [rsp + 0xf8], 1
je 0x140136983
add r12, rsi
mov rcx, r12
lea rdx, [rsp + 0x40]
mov r8, rbp
call sub.VCRUNTIME140.dll_memcpy
mov r12, rdi
mov r8, r13
mov edi, 0xfffd
test r14w, r14w
jne 0x140135f90
cmp qword [rsp + 0x60], r15
je 0x140136269
movzx ebx, word [r15]
add r15, 2
jmp 0x140135f90
test r12, r12
je 0x14013636d
cmp byte [r12 + rsi - 1], 0
mov r14d, dword [rsp + 0x3c]
mov rbx, qword [rsp + 0x58]
jne 0x140136377
jmp 0x14013629f
add r12, rax
je 0x140136377
cmp byte [r12 + rsi - 1], 0
jne 0x140136377
movzx ecx, byte [rsi + r12 - 1]
mov rax, 0xffffffffffffffff
test cl, cl
jns 0x14013628a
lea rdx, [rsi + r12]
add rdx, 0xffffffffffffffff
cmp rsi, rdx
je 0x1401362fb
lea rdi, [rsi + r12]
movzx edx, byte [rdi - 2]
mov ebx, edx
and bl, 0xc0
cmp bl, 0x80
jne 0x1401362ff
lea rbp, [rdi - 2]
cmp rsi, rbp
je 0x140136304
movzx ebp, byte [rdi - 3]
mov ebx, ebp
and bl, 0xc0
cmp bl, 0x80
jne 0x140136308
lea rbx, [rdi - 3]
cmp rsi, rbx
je 0x14013630d
movzx ebx, byte [rdi - 4]
and ebx, 7
shl ebx, 6
jmp 0x14013630f
xor edx, edx
jmp 0x140136321
and edx, 0x1f
jmp 0x14013631c
xor ebp, ebp
jmp 0x140136314
and ebp, 0xf
jmp 0x140136314
xor ebx, ebx
and ebp, 0x3f
or ebp, ebx
shl ebp, 6
and edx, 0x3f
or edx, ebp
mov rbx, qword [rsp + 0x58]
shl edx, 6
and ecx, 0x3f
or ecx, edx
cmp ecx, 0x110000
je 0x140136293
cmp ecx, 0x80
jb 0x14013628a
mov rax, 0xfffffffffffffffe
cmp ecx, 0x800
jb 0x14013628a
xor eax, eax
cmp ecx, 0x10000
setb al
or rax, 0xfffffffffffffffc
jmp 0x14013628a
jmp 0x140136883
mov r14d, dword [rsp + 0x3c]
mov rbx, qword [rsp + 0x58]
cmp bl, 7
jne 0x140136429
mov qword [rsp + 0x58], r8
mov qword [rsp + 0x20], 1
lea r9, [0x1402af86d]
lea rcx, [rsp + 0xf8]
mov qword [rsp + 0x60], rsi
mov rdx, rsi
mov r8, r12
call fcn.140023920
mov rax, qword [rsp + 0x158]
mov qword [rsp + 0xd0], rax
movups xmm0, xmmword [rsp + 0x148]
movaps xmmword [rsp + 0xc0], xmm0
movups xmm0, xmmword [rsp + 0x138]
movaps xmmword [rsp + 0xb0], xmm0
movups xmm0, xmmword [rsp + 0xf8]
movups xmm1, xmmword [rsp + 0x108]
movups xmm2, xmmword [rsp + 0x118]
movups xmm3, xmmword [rsp + 0x128]
movaps xmmword [rsp + 0xa0], xmm3
movaps xmmword [rsp + 0x90], xmm2
movaps xmmword [rsp + 0x80], xmm1
movaps xmmword [rsp + 0x70], xmm0
mov r13d, 1
xor esi, esi
xor r14d, r14d
xor edi, edi
jmp 0x140136480
xor ebp, ebp
jmp 0x140136883
mov qword [rsp + 0x40], 0
mov r8d, 1
lea rcx, [rsp + 0xe0]
lea r9, [rsp + 0x40]
call fcn.1401779a0
mov r13, qword [rsp + 0xe8]
mov rsi, qword [rsp + 0xf0]
cmp qword [rsp + 0xe0], 1
je 0x1401369a7
mov byte [r13 + rbx], 0xa
add rbx, 1
mov r14, rbx
mov rdi, r15
cmp dword [rsp + 0x90], 1
jne 0x1401364c7
cmp qword [rsp + 0xc8], 0xffffffffffffffff
mov r8, qword [rsp + 0x70]
mov r9, qword [rsp + 0x78]
mov rax, qword [rsp + 0x80]
mov rcx, qword [rsp + 0x88]
je 0x1401365f8
mov qword [rsp + 0x28], rcx
mov qword [rsp + 0x20], rax
mov byte [rsp + 0x30], 0
jmp 0x140136607
mov r11, rdi
mov r10, rsi
mov rcx, qword [rsp + 0x70]
mov r15, qword [rsp + 0x78]
lea rdi, [rcx + r15]
mov r9b, byte [rsp + 0xa8]
mov r8, qword [rsp + 0x98]
jmp 0x1401364f6
add r8, rax
mov r9b, 1
test r8, r8
je 0x140136511
cmp r15, r8
je 0x140136511
jbe 0x140136958
cmp byte [rcx + r8], 0xbf
jle 0x140136958
cmp r15, r8
je 0x140136636
lea rax, [rcx + r8]
movzx edx, byte [rax]
movzx ebx, dl
test bl, bl
jns 0x1401365ad
lea rbp, [rax + 1]
cmp rbp, rdi
je 0x140136570
movzx ebp, byte [rax + 1]
add rax, 2
and ebp, 0x3f
mov esi, ebx
and esi, 0x1f
cmp bl, 0xdf
jbe 0x14013657f
cmp rax, rdi
je 0x140136586
movzx ebx, byte [rax]
add rax, 1
and ebx, 0x3f
shl ebp, 6
or ebp, ebx
cmp dl, 0xf0
jb 0x140136595
cmp rax, rdi
je 0x14013659c
movzx eax, byte [rax]
and eax, 0x3f
jmp 0x14013659e
xor ebp, ebp
mov rax, rdi
mov esi, ebx
and esi, 0x1f
cmp bl, 0xdf
ja 0x14013654a
shl esi, 6
or ebp, esi
jmp 0x1401365ab
xor ebx, ebx
mov rax, rdi
shl ebp, 6
or ebp, ebx
cmp dl, 0xf0
jae 0x140136563
shl esi, 0xc
or ebp, esi
jmp 0x1401365ab
xor eax, eax
and esi, 7
shl esi, 0x12
shl ebp, 6
or ebp, esi
or ebp, eax
mov ebx, ebp
test r9b, r9b
jne 0x140136654
cmp ebx, 0x110000
je 0x140136783
mov eax, 1
cmp ebx, 0x80
jb 0x1401364f0
mov eax, 2
cmp ebx, 0x800
jb 0x1401364f0
cmp ebx, 0x10000
mov eax, 4
sbb rax, 0
jmp 0x1401364f0
mov qword [rsp + 0x28], rcx
mov qword [rsp + 0x20], rax
mov byte [rsp + 0x30], 1
lea rcx, [rsp + 0x40]
lea rdx, [rsp + 0x98]
call fcn.1400c1550
cmp qword [rsp + 0x40], 1
mov rax, qword [rsp + 0x60]
jne 0x1401367a7
mov rbp, qword [rsp + 0x48]
mov r15, qword [rsp + 0x50]
jmp 0x14013668c
mov eax, r9d
xor al, 1
mov byte [rsp + 0xa8], al
mov qword [rsp + 0x98], r15
test r9b, r9b
jne 0x14013666b
jmp 0x140136793
xor r9b, 1
mov byte [rsp + 0xa8], r9b
mov qword [rsp + 0x98], r8
mov r15, r8
mov qword [rsp + 0x48], r15
mov qword [rsp + 0x50], r15
mov qword [rsp + 0x40], 1
mov rbp, r15
mov rax, qword [rsp + 0x60]
mov rsi, r10
mov rdi, r11
add rdi, rax
add rbp, rax
sub rbp, rdi
mov rax, rsi
sub rax, r14
cmp rax, rbp
jae 0x1401366de
mov rbx, r14
add rbx, rbp
jb 0x1401369ac
lea rdx, [rsi + rsi]
cmp rdx, rbx
cmovbe rdx, rbx
cmp rdx, 8
mov eax, 8
cmovbe rdx, rax
test rsi, rsi
je 0x1401366e4
mov qword [rsp + 0x40], r13
mov qword [rsp + 0x48], rsi
mov qword [rsp + 0x50], 1
jmp 0x1401366ed
lea rbx, [r14 + rbp]
jmp 0x140136724
mov qword [rsp + 0x40], 0
mov r8d, 1
lea rcx, [rsp + 0xe0]
lea r9, [rsp + 0x40]
call fcn.1401779a0
mov r13, qword [rsp + 0xe8]
mov rsi, qword [rsp + 0xf0]
cmp qword [rsp + 0xe0], 1
je 0x140136995
add r14, r13
mov rcx, r14
mov rdx, rdi
mov r8, rbp
call sub.VCRUNTIME140.dll_memcpy
cmp rsi, rbx
jne 0x140136470
mov rdx, rbx
inc rdx
je 0x1401369ac
lea rax, [rbx + rbx]
cmp rax, rdx
cmova rdx, rax
cmp rdx, 8
mov eax, 8
cmovbe rdx, rax
test rbx, rbx
je 0x140136430
mov qword [rsp + 0x40], r13
mov qword [rsp + 0x48], rbx
mov qword [rsp + 0x50], 1
jmp 0x140136439
mov byte [rsp + 0xa8], 1
mov qword [rsp + 0x98], r8
mov qword [rsp + 0x40], 0
mov rax, qword [rsp + 0x60]
mov rsi, r10
mov rdi, r11
add rdi, rax
add r12, rax
mov rbp, r12
sub rbp, rdi
mov rax, rsi
sub rax, r14
cmp rax, rbp
jae 0x1401367ff
mov r12, r14
add r12, rbp
jb 0x1401369ac
lea rax, [rsi + rsi]
cmp rax, r12
cmovbe rax, r12
cmp rax, 8
mov edx, 8
cmova rdx, rax
test rsi, rsi
je 0x140136805
mov qword [rsp + 0x70], r13
mov qword [rsp + 0x78], rsi
mov qword [rsp + 0x80], 1
jmp 0x14013680e
lea r12, [r14 + rbp]
jmp 0x140136845
mov qword [rsp + 0x70], 0
lea rcx, [rsp + 0xf8]
lea r9, [rsp + 0x70]
mov r8d, 1
call fcn.1401779a0
mov r13, qword [rsp + 0x100]
mov rsi, qword [rsp + 0x108]
cmp qword [rsp + 0xf8], 1
je 0x140136995
add r14, r13
mov rcx, r14
mov rdx, rdi
mov r8, rbp
call sub.VCRUNTIME140.dll_memcpy
cmp qword [rsp + 0x58], 0
je 0x140136876
call sub.KERNEL32.dll_GetProcessHeap
xor ebp, ebp
mov rcx, rax
xor edx, edx
mov r8, qword [rsp + 0x60]
call fcn.14021dfcd
jmp 0x140136878
xor ebp, ebp
mov r8, rsi
mov rsi, r13
mov r14d, dword [rsp + 0x3c]
cmp dword [rsp + 0x160], 1
je 0x1401368b8
cmp qword [rsp + 0x170], 0
je 0x1401368b8
mov rbx, qword [rsp + 0x168]
mov rdi, r8
call sub.KERNEL32.dll_GetProcessHeap
mov rcx, rax
xor edx, edx
mov r8, rbx
call fcn.14021dfcd
mov r8, rdi
test rbp, rbp
je 0x140136909
mov rdi, r8
call sub.KERNEL32.dll_GetProcessHeap
mov r8d, reloc.WS2_32.dll_recv
mov rcx, rax
xor edx, edx
call sub.KERNEL32.dll_HeapAlloc
test rax, rax
je 0x140136947
mov rbx, rax
mov qword [rax], rsi
mov qword [rax + 8], rdi
mov rbp, qword [rsp + 0x68]
mov r15, qword [rsp + 0xd8]
movabs rax, 0xffffffff7fffffff
cmp rbp, rax
jbe 0x140135d90
jmp 0x140135d98
mov edi, r14d
mov rcx, qword [rsp + 0x68]
movabs rax, 0xffffffff7fffffff
cmp rcx, rax
ja 0x14013692b
mov rbx, r8
call sub.ADVAPI32.dll_RegCloseKey
mov r8, rbx
mov rax, qword [rsp + 0xd8]
mov qword [rax], rdi
mov qword [rax + 8], rsi
mov qword [rax + 0x10], r8
mov qword [rax + 0x18], r12
jmp 0x140135dba
mov ecx, reloc.WS2_32.dll_recv
mov edx, 8
call fcn.1400182a0
ud2
lea rax, str.C:Usersdarkarp.rustup_toolchains_stable_x86_64_pc_windows_msvclib_rustlib_src_rustlibrarycore_src_strpattern.rs
mov qword [rsp + 0x20], rax
mov rdx, r15
mov r9, r15
call fcn.1400208e0
ud2
test r8, r8
je 0x1401369ac
mov rcx, rsi
mov rdx, r8
call fcn.1400182a0
ud2
test r13, r13
je 0x1401369ac
mov rcx, rsi
mov rdx, r13
call fcn.1400182a0
ud2
test rsi, rsi
je 0x1401369ac
mov rcx, r13
mov rdx, rsi
call fcn.1400182a0
ud2
test rsi, rsi
jne 0x1401369b3
call fcn.1400182c0
ud2
mov rdx, rsi
mov rcx, r13
call fcn.1400182a0
ud2