Function at 0x40a3d0
Capabilities:
Query or enumerate registry value

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x4468b5], 0
jne 0x40a74c
push str.0:db0:lk0:hs0:ld0:ll0:hb0:pj
mov byte [0x4468b5], 1
call fcn.0041aa1d
push 0x12a0
push 0
push 0x4451c8
call fcn.00415b60
push 0
push 0x4451e6
push 0x4307e4
push str.0:db0:lk0:hs0:ld0:ll0:hb0:pj
call fcn.0040a750
push 0
push 0x4453e4
push 0x4307ec
push str.0:db0:lk0:hs0:ld0:ll0:hb0:pj
call fcn.0040a750
push 0x445420
push 0
push 0x4307f4
push str.0:db0:lk0:hs0:ld0:ll0:hb0:pj
call fcn.0040a750
add esp, 0x40
push 0
push 0x445424
push 0x4307fc
push str.0:db0:lk0:hs0:ld0:ll0:hb0:pj
call fcn.0040a750
push 0
push 0x445622
push 0x430804
push str.0:db0:lk0:hs0:ld0:ll0:hb0:pj
call fcn.0040a750
push 0x445660
push 0
push 0x43080c
push str.0:db0:lk0:hs0:ld0:ll0:hb0:pj
call fcn.0040a750
push 0
push 0x445664
push 0x430814
push str.0:db0:lk0:hs0:ld0:ll0:hb0:pj
call fcn.0040a750
add esp, 0x40
push 0
push 0x445862
push 0x43081c
push str.0:db0:lk0:hs0:ld0:ll0:hb0:pj
call fcn.0040a750
push 0x4458a0
push 0
push 0x430824
push str.0:db0:lk0:hs0:ld0:ll0:hb0:pj
call fcn.0040a750
push 0
push 0x4458a4
push 0x43082c
push str.0:db0:lk0:hs0:ld0:ll0:hb0:pj
call fcn.0040a750
push 0
push 0x4458e0
push 0x430834
push str.0:db0:lk0:hs0:ld0:ll0:hb0:pj
call fcn.0040a750
add esp, 0x40
push 0
push 0x44591c
push 0x43083c
push str.0:db0:lk0:hs0:ld0:ll0:hb0:pj
call fcn.0040a750
push 0
push 0x445980
push 0x430844
push str.0:db0:lk0:hs0:ld0:ll0:hb0:pj
call fcn.0040a750
push 0
push 0x4459e4
push 0x43084c
push str.0:db0:lk0:hs0:ld0:ll0:hb0:pj
call fcn.0040a750
push 0x445a48
push 0
push 0x430854
push str.0:db0:lk0:hs0:ld0:ll0:hb0:pj
call fcn.0040a750
add esp, 0x40
push 0x445a4c
push 0
push 0x43085c
push str.0:db0:lk0:hs0:ld0:ll0:hb0:pj
call fcn.0040a750
push 0x445a50
push 0
push 0x430864
push str.0:db0:lk0:hs0:ld0:ll0:hb0:pj
call fcn.0040a750
push 0x445a54
push 0
push 0x43086c
push str.0:db0:lk0:hs0:ld0:ll0:hb0:pj
call fcn.0040a750
push 0x445a58
push 0
push 0x430874
push str.0:db0:lk0:hs0:ld0:ll0:hb0:pj
call fcn.0040a750
add esp, 0x40
push 0x445a5c
push 0
push 0x43087c
push str.0:db0:lk0:hs0:ld0:ll0:hb0:pj
call fcn.0040a750
push 0x445a60
push 0
push 0x430884
push str.0:db0:lk0:hs0:ld0:ll0:hb0:pj
call fcn.0040a750
push 0x445a64
push 0
push 0x43088c
push str.0:db0:lk0:hs0:ld0:ll0:hb0:pj
call fcn.0040a750
add esp, 0x30
mov dword [ebp - 8], 3
lea eax, [ebp - 0xc]
mov dword [ebp - 4], 0
push eax
push 0x20019
push 0
push str.Console
push connect
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
jne 0x40a642
lea eax, [ebp - 4]
push eax
push 0
lea eax, [ebp - 8]
push eax
push 0
push str.IpDate
push dword [ebp - 0xc]
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
cmp dword [ebp - 4], 0xa
jbe 0x40a74c
push 0x7d0
push 0
push str.0:db0:lk0:hs0:ld0:ll0:hb0:pj
call fcn.00415b60
add esp, 0xc
lea eax, [ebp - 4]
push eax
push str.0:db0:lk0:hs0:ld0:ll0:hb0:pj
lea eax, [ebp - 8]
push eax
push 0
push str.IpDate
push dword [ebp - 0xc]
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
push 0
push 0x4451e6
push 0x4307e4
push str.0:db0:lk0:hs0:ld0:ll0:hb0:pj
call fcn.0040a750
push 0
push 0x4453e4
push 0x4307ec
push str.0:db0:lk0:hs0:ld0:ll0:hb0:pj
call fcn.0040a750
push 0x445420
push 0
push 0x4307f4
push str.0:db0:lk0:hs0:ld0:ll0:hb0:pj
call fcn.0040a750
push 0
push 0x445424
push 0x4307fc
push str.0:db0:lk0:hs0:ld0:ll0:hb0:pj
call fcn.0040a750
add esp, 0x40
push 0
push 0x445622
push 0x430804
push str.0:db0:lk0:hs0:ld0:ll0:hb0:pj
call fcn.0040a750
push 0x445660
push 0
push 0x43080c
push str.0:db0:lk0:hs0:ld0:ll0:hb0:pj
call fcn.0040a750
push 0
push 0x445664
push 0x430814
push str.0:db0:lk0:hs0:ld0:ll0:hb0:pj
call fcn.0040a750
push 0
push 0x445862
push 0x43081c
push str.0:db0:lk0:hs0:ld0:ll0:hb0:pj
call fcn.0040a750
add esp, 0x40
push 0x4458a0
push 0
push 0x430824
push str.0:db0:lk0:hs0:ld0:ll0:hb0:pj
call fcn.0040a750
add esp, 0x10
mov esp, ebp
pop ebp
ret