Function at 0x14073d0
Capabilities:
Query or enumerate registry value

Disassembly:
mov rax, rsp
sub rsp, 0x68
cmp byte [0x01423508], 0
jne 0x14080cc
mov qword [rax - 8], rbx
mov qword [rax - 0x10], rbp
mov qword [rax - 0x18], rsi
mov qword [rax - 0x20], rdi
mov qword [rax - 0x28], r12
mov qword [rax - 0x30], r14
lea rbp, str.0:db0:lk0:hs0:ld0:ll0:hb0:pj2_.21.3202:zb0.1:bb
mov qword [rax - 0x38], r15
mov byte [0x01423508], 1
mov rcx, rbp
call fcn.014098bc
lea rcx, [0x01422250]
xor edx, edx
mov r8d, 0x12a0
call fcn.0140b7c0
lea rdx, [0x0142226e]
lea rcx, [0x0141aa98]
xor r8d, r8d
call fcn.014072a0
lea rdx, [0x0142246c]
lea rcx, [0x0141aaa0]
xor r8d, r8d
call fcn.014072a0
mov rcx, rbp
call qword [sym.imp.KERNEL32.dll_lstrlenW]
lea r15, [0x0141aaa8]
mov rcx, r15
movsxd rbx, eax
call qword [sym.imp.KERNEL32.dll_lstrlenW]
xor r9d, r9d
xor edx, edx
mov r11, rbx
lea r14d, [r9 + 1]
movsxd rsi, eax
test ebx, ebx
jle 0x1407519
nop dword [rax]
xor r10d, r10d
xor r8d, r8d
test esi, esi
jle 0x14074cb
lea rbx, [rdx + rdx]
sub rbx, r15
add rbx, rbp
nop word [rax + rax]
movzx eax, word [r15 + r8*2]
lea rcx, [rbx + r8*2]
cmp word [rcx + r15], ax
jne 0x14074cb
inc r8
inc r10d
cmp r8, rsi
jl 0x14074b0
cmp r10d, esi
jne 0x14074f3
add rdx, rsi
add r9d, esi
cmp rdx, r11
jge 0x14074f3
nop dword [rax + rax]
cmp word [rbp + rdx*2], 0x7c
je 0x1407500
inc rdx
inc r9d
cmp rdx, r11
jl 0x14074e0
inc rdx
inc r9d
cmp rdx, r11
jl 0x1407490
jmp 0x1407519
mov ecx, dword [0x014224a8]
movsxd rax, r9d
cmp word [rbp + rax*2 - 2], 0x31
cmove ecx, r14d
mov dword [0x014224a8], ecx
lea rdx, [0x014224ac]
lea rcx, [0x0141aab0]
xor r8d, r8d
call fcn.014072a0
lea rdx, [0x014226aa]
lea rcx, [0x0141aab8]
xor r8d, r8d
call fcn.014072a0
mov rcx, rbp
call qword [sym.imp.KERNEL32.dll_lstrlenW]
lea r12, [0x0141aac0]
mov rcx, r12
movsxd rbx, eax
call qword [sym.imp.KERNEL32.dll_lstrlenW]
xor r9d, r9d
xor edx, edx
mov r11, rbx
movsxd rsi, eax
test ebx, ebx
jle 0x14075f9
xor r10d, r10d
xor r8d, r8d
test esi, esi
jle 0x14075ab
lea rbx, [rdx + rdx]
sub rbx, r12
add rbx, rbp
nop dword [rax + rax]
movzx eax, word [r12 + r8*2]
lea rcx, [rbx + r8*2]
cmp word [rcx + r12], ax
jne 0x14075ab
inc r8
inc r10d
cmp r8, rsi
jl 0x1407590
cmp r10d, esi
jne 0x14075d3
add rdx, rsi
add r9d, esi
cmp rdx, r11
jge 0x14075d3
nop dword [rax + rax]
cmp word [rbp + rdx*2], 0x7c
je 0x14075e0
inc rdx
inc r9d
cmp rdx, r11
jl 0x14075c0
inc rdx
inc r9d
cmp rdx, r11
jl 0x1407574
jmp 0x14075f9
mov ecx, dword [0x014226e8]
movsxd rax, r9d
cmp word [rbp + rax*2 - 2], 0x31
cmove ecx, r14d
mov dword [0x014226e8], ecx
lea rdx, [0x014226ec]
lea rcx, [0x0141aac8]
xor r8d, r8d
call fcn.014072a0
lea rdx, [0x014228ea]
lea rcx, [0x0141aad0]
xor r8d, r8d
call fcn.014072a0
mov rcx, rbp
call qword [sym.imp.KERNEL32.dll_lstrlenW]
lea r14, [0x0141aad8]
mov rcx, r14
movsxd rbx, eax
call qword [sym.imp.KERNEL32.dll_lstrlenW]
xor r9d, r9d
xor edx, edx
mov r11, rbx
movsxd rsi, eax
test ebx, ebx
jle 0x14076dd
xor r10d, r10d
xor r8d, r8d
test esi, esi
jle 0x140768b
lea rbx, [rdx + rdx]
sub rbx, r14
add rbx, rbp
nop dword [rax + rax]
movzx eax, word [r14 + r8*2]
lea rcx, [rbx + r8*2]
cmp word [rcx + r14], ax
jne 0x140768b
inc r8
inc r10d
cmp r8, rsi
jl 0x1407670
cmp r10d, esi
jne 0x14076b3
add rdx, rsi
add r9d, esi
cmp rdx, r11
jge 0x14076b3
nop dword [rax + rax]
cmp word [rbp + rdx*2], 0x7c
je 0x14076c0
inc rdx
inc r9d
cmp rdx, r11
jl 0x14076a0
inc rdx
inc r9d
cmp rdx, r11
jl 0x1407654
jmp 0x14076dd
mov ecx, dword [0x01422928]
movsxd rax, r9d
cmp word [rbp + rax*2 - 2], 0x31
mov eax, 1
cmove ecx, eax
mov dword [0x01422928], ecx
lea rdx, [0x0142292c]
lea rcx, [0x0141aae0]
xor r8d, r8d
call fcn.014072a0
lea rdx, [0x01422968]
lea rcx, [0x0141aae8]
xor r8d, r8d
call fcn.014072a0
lea rdx, [0x014229a4]
lea rcx, [0x0141aaf0]
xor r8d, r8d
call fcn.014072a0
lea rdx, [0x01422a08]
lea rcx, [0x0141aaf8]
xor r8d, r8d
call fcn.014072a0
lea rdx, [0x01422a6c]
lea rcx, [0x0141ab00]
xor r8d, r8d
call fcn.014072a0
mov rcx, rbp
call qword [sym.imp.KERNEL32.dll_lstrlenW]
lea r12, [0x0141ab08]
mov rcx, r12
movsxd rbx, eax
call qword [sym.imp.KERNEL32.dll_lstrlenW]
xor r9d, r9d
xor edx, edx
mov r11, rbx
movsxd rsi, eax
test ebx, ebx
jle 0x140780d
nop word [rax + rax]
xor r10d, r10d
xor r8d, r8d
test esi, esi
jle 0x14077bb
lea rbx, [rdx + rdx]
sub rbx, r12
add rbx, rbp
nop word [rax + rax]
movzx eax, word [r12 + r8*2]
lea rcx, [rbx + r8*2]
cmp word [rcx + r12], ax
jne 0x14077bb
inc r8
inc r10d
cmp r8, rsi
jl 0x14077a0
cmp r10d, esi
jne 0x14077e3
add rdx, rsi
add r9d, esi
cmp rdx, r11
jge 0x14077e3
nop dword [rax + rax]
cmp word [rbp + rdx*2], 0x7c
je 0x14077f0
inc rdx
inc r9d
cmp rdx, r11
jl 0x14077d0
inc rdx
inc r9d
cmp rdx, r11
jl 0x1407780
jmp 0x140780d
mov ecx, dword [0x01422ad0]
movsxd rax, r9d
cmp word [rbp + rax*2 - 2], 0x31
mov eax, 1
cmove ecx, eax
mov dword [0x01422ad0], ecx
mov rcx, rbp
call qword [sym.imp.KERNEL32.dll_lstrlenW]
lea r12, [0x0141ab10]
mov rcx, r12
movsxd rbx, eax
call qword [sym.imp.KERNEL32.dll_lstrlenW]
xor r9d, r9d
xor edx, edx
mov r11, rbx
movsxd rsi, eax
test ebx, ebx
jle 0x14078cd
nop dword [rax]
xor r10d, r10d
xor r8d, r8d
test esi, esi
jle 0x140787b
lea rbx, [rdx + rdx]
sub rbx, r12
add rbx, rbp
nop word [rax + rax]
movzx eax, word [r12 + r8*2]
lea rcx, [rbx + r8*2]
cmp word [rcx + r12], ax
jne 0x140787b
inc r8
inc r10d
cmp r8, rsi
jl 0x1407860
cmp r10d, esi
jne 0x14078a3
add rdx, rsi
add r9d, esi
cmp rdx, r11
jge 0x14078a3
nop dword [rax + rax]
cmp word [rbp + rdx*2], 0x7c
je 0x14078b0
inc rdx
inc r9d
cmp rdx, r11
jl 0x1407890
inc rdx
inc r9d
cmp rdx, r11
jl 0x1407840
jmp 0x14078cd
mov ecx, dword [0x01422ad4]
movsxd rax, r9d
cmp word [rbp + rax*2 - 2], 0x31
mov eax, 1
cmove ecx, eax
mov dword [0x01422ad4], ecx
mov rcx, rbp
call qword [sym.imp.KERNEL32.dll_lstrlenW]
lea r12, [0x0141ab18]
mov rcx, r12
movsxd rbx, eax
call qword [sym.imp.KERNEL32.dll_lstrlenW]
xor r9d, r9d
xor edx, edx
mov r11, rbx
movsxd rsi, eax
test ebx, ebx
jle 0x140798d
nop dword [rax]
xor r10d, r10d
xor r8d, r8d
test esi, esi
jle 0x140793b
lea rbx, [rdx + rdx]
sub rbx, r12
add rbx, rbp
nop word [rax + rax]
movzx eax, word [r12 + r8*2]
lea rcx, [rbx + r8*2]
cmp word [rcx + r12], ax
jne 0x140793b
inc r8
inc r10d
cmp r8, rsi
jl 0x1407920
cmp r10d, esi
jne 0x1407963
add rdx, rsi
add r9d, esi
cmp rdx, r11
jge 0x1407963
nop dword [rax + rax]
cmp word [rbp + rdx*2], 0x7c
je 0x1407970
inc rdx
inc r9d
cmp rdx, r11
jl 0x1407950
inc rdx
inc r9d
cmp rdx, r11
jl 0x1407900
jmp 0x140798d
mov ecx, dword [0x01422ad8]
movsxd rax, r9d
cmp word [rbp + rax*2 - 2], 0x31
mov eax, 1
cmove ecx, eax
mov dword [0x01422ad8], ecx
mov rcx, rbp
call qword [sym.imp.KERNEL32.dll_lstrlenW]
lea r12, [0x0141ab20]
mov rcx, r12
movsxd rbx, eax
call qword [sym.imp.KERNEL32.dll_lstrlenW]
xor r9d, r9d
xor edx, edx
mov r11, rbx
movsxd rsi, eax
test ebx, ebx
jle 0x1407a4d
nop dword [rax]
xor r10d, r10d
xor r8d, r8d
test esi, esi
jle 0x14079fb
lea rbx, [rdx + rdx]
sub rbx, r12
add rbx, rbp
nop word [rax + rax]
movzx eax, word [r12 + r8*2]
lea rcx, [rbx + r8*2]
cmp word [rcx + r12], ax
jne 0x14079fb
inc r8
inc r10d
cmp r8, rsi
jl 0x14079e0
cmp r10d, esi
jne 0x1407a23
add rdx, rsi
add r9d, esi
cmp rdx, r11
jge 0x1407a23
nop dword [rax + rax]
cmp word [rbp + rdx*2], 0x7c
je 0x1407a30
inc rdx
inc r9d
cmp rdx, r11
jl 0x1407a10
inc rdx
inc r9d
cmp rdx, r11
jl 0x14079c0
jmp 0x1407a4d
mov ecx, dword [0x01422adc]
movsxd rax, r9d
cmp word [rbp + rax*2 - 2], 0x31
mov eax, 1
cmove ecx, eax
mov dword [0x01422adc], ecx
mov rcx, rbp
call qword [sym.imp.KERNEL32.dll_lstrlenW]
lea r12, [0x0141ab28]
mov rcx, r12
movsxd rbx, eax
call qword [sym.imp.KERNEL32.dll_lstrlenW]
xor r9d, r9d
xor edx, edx
mov r11, rbx
movsxd rsi, eax
test ebx, ebx
jle 0x1407b0d
nop dword [rax]
xor r10d, r10d
xor r8d, r8d
test esi, esi
jle 0x1407abb
lea rbx, [rdx + rdx]
sub rbx, r12
add rbx, rbp
nop word [rax + rax]
movzx eax, word [r12 + r8*2]
lea rcx, [rbx + r8*2]
cmp word [rcx + r12], ax
jne 0x1407abb
inc r8
inc r10d
cmp r8, rsi
jl 0x1407aa0
cmp r10d, esi
jne 0x1407ae3
add rdx, rsi
add r9d, esi
cmp rdx, r11
jge 0x1407ae3
nop dword [rax + rax]
cmp word [rbp + rdx*2], 0x7c
je 0x1407af0
inc rdx
inc r9d
cmp rdx, r11
jl 0x1407ad0
inc rdx
inc r9d
cmp rdx, r11
jl 0x1407a80
jmp 0x1407b0d
mov ecx, dword [0x01422ae0]
movsxd rax, r9d
cmp word [rbp + rax*2 - 2], 0x31
mov eax, 1
cmove ecx, eax
mov dword [0x01422ae0], ecx
mov rcx, rbp
call qword [sym.imp.KERNEL32.dll_lstrlenW]
lea r12, [0x0141ab30]
mov rcx, r12
movsxd rbx, eax
call qword [sym.imp.KERNEL32.dll_lstrlenW]
xor r9d, r9d
xor edx, edx
mov r11, rbx
movsxd rsi, eax
test ebx, ebx
jle 0x1407bcd
nop dword [rax]
xor r10d, r10d
xor r8d, r8d
test esi, esi
jle 0x1407b7b
lea rbx, [rdx + rdx]
sub rbx, r12
add rbx, rbp
nop word [rax + rax]
movzx eax, word [r12 + r8*2]
lea rcx, [rbx + r8*2]
cmp word [rcx + r12], ax
jne 0x1407b7b
inc r8
inc r10d
cmp r8, rsi
jl 0x1407b60
cmp r10d, esi
jne 0x1407ba3
add rdx, rsi
add r9d, esi
cmp rdx, r11
jge 0x1407ba3
nop dword [rax + rax]
cmp word [rbp + rdx*2], 0x7c
je 0x1407bb0
inc rdx
inc r9d
cmp rdx, r11
jl 0x1407b90
inc rdx
inc r9d
cmp rdx, r11
jl 0x1407b40
jmp 0x1407bcd
mov ecx, dword [0x01422ae4]
movsxd rax, r9d
cmp word [rbp + rax*2 - 2], 0x31
mov eax, 1
cmove ecx, eax
mov dword [0x01422ae4], ecx
mov rcx, rbp
call qword [sym.imp.KERNEL32.dll_lstrlenW]
lea r12, [0x0141ab38]
mov rcx, r12
movsxd rbx, eax
call qword [sym.imp.KERNEL32.dll_lstrlenW]
xor r9d, r9d
xor edx, edx
mov r11, rbx
movsxd rsi, eax
test ebx, ebx
jle 0x1407c8d
nop dword [rax]
xor r10d, r10d
xor r8d, r8d
test esi, esi
jle 0x1407c3b
lea rbx, [rdx + rdx]
sub rbx, r12
add rbx, rbp
nop word [rax + rax]
movzx eax, word [r12 + r8*2]
lea rcx, [rbx + r8*2]
cmp word [rcx + r12], ax
jne 0x1407c3b
inc r8
inc r10d
cmp r8, rsi
jl 0x1407c20
cmp r10d, esi
jne 0x1407c63
add rdx, rsi
add r9d, esi
cmp rdx, r11
jge 0x1407c63
nop dword [rax + rax]
cmp word [rbp + rdx*2], 0x7c
je 0x1407c70
inc rdx
inc r9d
cmp rdx, r11
jl 0x1407c50
inc rdx
inc r9d
cmp rdx, r11
jl 0x1407c00
jmp 0x1407c8d
mov ecx, dword [0x01422ae8]
movsxd rax, r9d
cmp word [rbp + rax*2 - 2], 0x31
mov eax, 1
cmove ecx, eax
mov dword [0x01422ae8], ecx
mov rcx, rbp
call qword [sym.imp.KERNEL32.dll_lstrlenW]
lea r12, [0x0141ab40]
mov rcx, r12
movsxd rbx, eax
call qword [sym.imp.KERNEL32.dll_lstrlenW]
xor r9d, r9d
xor edx, edx
mov r11, rbx
movsxd rsi, eax
test ebx, ebx
jle 0x1407d4d
nop dword [rax]
xor r10d, r10d
xor r8d, r8d
test esi, esi
jle 0x1407cfb
lea rbx, [rdx + rdx]
sub rbx, r12
add rbx, rbp
nop word [rax + rax]
movzx eax, word [r12 + r8*2]
lea rcx, [rbx + r8*2]
cmp word [rcx + r12], ax
jne 0x1407cfb
inc r8
inc r10d
cmp r8, rsi
jl 0x1407ce0
cmp r10d, esi
jne 0x1407d23
add rdx, rsi
add r9d, esi
cmp rdx, r11
jge 0x1407d23
nop dword [rax + rax]
cmp word [rbp + rdx*2], 0x7c
je 0x1407d30
inc rdx
inc r9d
cmp rdx, r11
jl 0x1407d10
inc rdx
inc r9d
cmp rdx, r11
jl 0x1407cc0
jmp 0x1407d4d
mov ecx, dword [0x01422aec]
movsxd rax, r9d
cmp word [rbp + rax*2 - 2], 0x31
mov eax, 1
cmove ecx, eax
mov dword [0x01422aec], ecx
lea rax, [rsp + 0x80]
lea rdx, str.Console
mov r9d, 0x20019
xor r8d, r8d
mov rcx, 0xffffffff80000001
mov dword [rsp + 0x78], 3
mov qword [rsp + 0x20], rax
mov dword [rsp + 0x70], 0
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
jne 0x1407dbb
mov rcx, qword [rsp + 0x80]
lea rax, [rsp + 0x70]
lea r9, [rsp + 0x78]
mov qword [rsp + 0x28], rax
lea rdx, str.IpDate
xor r8d, r8d
mov qword [rsp + 0x20], 0
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
cmp dword [rsp + 0x70], 0xa
jbe 0x14080a9
xor edx, edx
mov r8d, 0x7d0
mov rcx, rbp
call fcn.0140b7c0
mov rcx, qword [rsp + 0x80]
lea r11, [rsp + 0x70]
mov qword [rsp + 0x28], r11
lea r9, [rsp + 0x78]
lea rdx, str.IpDate
xor r8d, r8d
mov qword [rsp + 0x20], rbp
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
lea rdx, [0x0142226e]
lea rcx, [0x0141aa98]
xor r8d, r8d
call fcn.014072a0
lea rdx, [0x0142246c]
lea rcx, [0x0141aaa0]
xor r8d, r8d
call fcn.014072a0
mov rcx, rbp
call qword [sym.imp.KERNEL32.dll_lstrlenW]
mov rcx, r15
movsxd rbx, eax
call qword [sym.imp.KERNEL32.dll_lstrlenW]
xor r9d, r9d
xor edx, edx
mov r11, rbx
movsxd rsi, eax
test ebx, ebx
jle 0x1407ec2
xor r10d, r10d
xor r8d, r8d
test esi, esi
jle 0x1407e8b
lea rbx, [rdx + rdx]
sub rbx, r15
add rbx, rbp
nop word [rax + rax]
movzx eax, word [r15 + r8*2]
lea rcx, [rbx + r8*2]
cmp word [rcx + r15], ax
jne 0x1407e8b
inc r8
inc r10d
cmp r8, rsi
jl 0x1407e70
cmp r10d, esi
jne 0x1407eb7
add rdx, rsi
add r9d, esi
cmp rdx, r11
jge 0x1407eb7
nop dword [rax + rax]
cmp word [rbp + rdx*2], 0x7c
je 0x1407f90
inc rdx
inc r9d
cmp rdx, r11
jl 0x1407ea0
inc rdx
inc r9d
cmp rdx, r11
jl 0x1407e52
mov r15d, 1
lea rdx, [0x014224ac]
lea rcx, [0x0141aab0]
xor r8d, r8d
call fcn.014072a0
lea rdx, [0x014226aa]
lea rcx, [0x0141aab8]
xor r8d, r8d
call fcn.014072a0
mov rcx, rbp
call qword [sym.imp.KERNEL32.dll_lstrlenW]
lea r12, [0x0141aac0]
mov rcx, r12
movsxd rbx, eax
call qword [sym.imp.KERNEL32.dll_lstrlenW]
xor r9d, r9d
xor edx, edx
mov r11, rbx
movsxd rsi, eax
test ebx, ebx
jle 0x1407fcd
xor r10d, r10d
xor r8d, r8d
test esi, esi
jle 0x1407f5b
lea rbx, [rdx + rdx]
sub rbx, r12
add rbx, rbp
nop word [rax + rax]
movzx eax, word [r12 + r8*2]
lea rcx, [rbx + r8*2]
cmp word [rcx + r12], ax
jne 0x1407f5b
inc r8
inc r10d
cmp r8, rsi
jl 0x1407f40
cmp r10d, esi
jne 0x1407f83
add rdx, rsi
add r9d, esi
cmp rdx, r11
jge 0x1407f83
nop dword [rax + rax]
cmp word [rbp + rdx*2], 0x7c
je 0x1407fb4
inc rdx
inc r9d
cmp rdx, r11
jl 0x1407f70
inc rdx
inc r9d
cmp rdx, r11
jl 0x1407f23
jmp 0x1407fcd
mov ecx, dword [0x014224a8]
movsxd rax, r9d
mov r15d, 1
cmp word [rbp + rax*2 - 2], 0x31
cmove ecx, r15d
mov dword [0x014224a8], ecx
jmp 0x1407ec8
mov ecx, dword [0x014226e8]
movsxd rax, r9d
cmp word [rbp + rax*2 - 2], 0x31
cmove ecx, r15d
mov dword [0x014226e8], ecx
lea rdx, [0x014226ec]
lea rcx, [0x0141aac8]
xor r8d, r8d
call fcn.014072a0
lea rdx, [0x014228ea]
lea rcx, [0x0141aad0]
xor r8d, r8d
call fcn.014072a0
mov rcx, rbp
call qword [sym.imp.KERNEL32.dll_lstrlenW]
mov rcx, r14
movsxd rbx, eax
call qword [sym.imp.KERNEL32.dll_lstrlenW]
xor r9d, r9d
xor edx, edx
mov r11, rbx
movsxd rsi, eax
test ebx, ebx
jle 0x14080a9
xor r10d, r10d
xor r8d, r8d
test esi, esi
jle 0x140805b
lea rbx, [rdx + rdx]
sub rbx, r14
add rbx, rbp
nop word [rax + rax]
movzx eax, word [r14 + r8*2]
lea rcx, [rbx + r8*2]
cmp word [rcx + r14], ax
jne 0x140805b
inc r8
inc r10d
cmp r8, rsi
jl 0x1408040
cmp r10d, esi
jne 0x1408083
add rdx, rsi
add r9d, esi
cmp rdx, r11
jge 0x1408083
nop dword [rax + rax]
cmp word [rbp + rdx*2], 0x7c
je 0x1408090
inc rdx
inc r9d
cmp rdx, r11
jl 0x1408070
inc rdx
inc r9d
cmp rdx, r11
jl 0x1408021
jmp 0x14080a9
mov ecx, dword [0x01422928]
movsxd rax, r9d
cmp word [rbp + rax*2 - 2], 0x31
cmove ecx, r15d
mov dword [0x01422928], ecx
mov r14, qword [rsp + 0x38]
mov r12, qword [rsp + 0x40]
mov rdi, qword [rsp + 0x48]
mov rsi, qword [rsp + 0x50]
mov rbp, qword [rsp + 0x58]
mov rbx, qword [rsp + 0x60]
mov r15, qword [rsp + 0x30]
add rsp, 0x68
ret