https://blog.khairulazam.net/2022/10/03/decrypting-qbot-qakbot-registry/