Function at 0x14000bd50
Capabilities:
Query or enumerate registry value

Disassembly:
push rdi
sub rsp, 0x50
movzx eax, byte [0x140027510]
test eax, eax
je 0x14000bd68
jmp 0x14000c1d7
mov byte [0x140027510], 1
lea rcx, str.0:db0:lk0:hs0:ld0:ll0:hb0:pj8_.4_.4202:zb0.1:bb
call fcn.14000d850
lea rax, [0x140026250]
mov rdi, rax
xor eax, eax
mov ecx, 0x12a0
rep stosb byte [rdi], al
xor r9d, r9d
lea r8, [0x14002626e]
lea rdx, [0x14001da50]
lea rcx, str.0:db0:lk0:hs0:ld0:ll0:hb0:pj8_.4_.4202:zb0.1:bb
call fcn.14000bb90
xor r9d, r9d
lea r8, [0x14002646c]
lea rdx, [0x14001da58]
lea rcx, str.0:db0:lk0:hs0:ld0:ll0:hb0:pj8_.4_.4202:zb0.1:bb
call fcn.14000bb90
lea r9, [0x1400264a8]
xor r8d, r8d
lea rdx, [0x14001da60]
lea rcx, str.0:db0:lk0:hs0:ld0:ll0:hb0:pj8_.4_.4202:zb0.1:bb
call fcn.14000bb90
xor r9d, r9d
lea r8, [0x1400264ac]
lea rdx, [0x14001da68]
lea rcx, str.0:db0:lk0:hs0:ld0:ll0:hb0:pj8_.4_.4202:zb0.1:bb
call fcn.14000bb90
xor r9d, r9d
lea r8, [0x1400266aa]
lea rdx, [0x14001da70]
lea rcx, str.0:db0:lk0:hs0:ld0:ll0:hb0:pj8_.4_.4202:zb0.1:bb
call fcn.14000bb90
lea r9, [0x1400266e8]
xor r8d, r8d
lea rdx, [0x14001da78]
lea rcx, str.0:db0:lk0:hs0:ld0:ll0:hb0:pj8_.4_.4202:zb0.1:bb
call fcn.14000bb90
xor r9d, r9d
lea r8, [0x1400266ec]
lea rdx, [0x14001da80]
lea rcx, str.0:db0:lk0:hs0:ld0:ll0:hb0:pj8_.4_.4202:zb0.1:bb
call fcn.14000bb90
xor r9d, r9d
lea r8, [0x1400268ea]
lea rdx, [0x14001da88]
lea rcx, str.0:db0:lk0:hs0:ld0:ll0:hb0:pj8_.4_.4202:zb0.1:bb
call fcn.14000bb90
lea r9, [0x140026928]
xor r8d, r8d
lea rdx, [0x14001da90]
lea rcx, str.0:db0:lk0:hs0:ld0:ll0:hb0:pj8_.4_.4202:zb0.1:bb
call fcn.14000bb90
xor r9d, r9d
lea r8, [0x14002692c]
lea rdx, [0x14001da98]
lea rcx, str.0:db0:lk0:hs0:ld0:ll0:hb0:pj8_.4_.4202:zb0.1:bb
call fcn.14000bb90
xor r9d, r9d
lea r8, [0x140026968]
lea rdx, [0x14001daa0]
lea rcx, str.0:db0:lk0:hs0:ld0:ll0:hb0:pj8_.4_.4202:zb0.1:bb
call fcn.14000bb90
xor r9d, r9d
lea r8, [0x1400269a4]
lea rdx, [0x14001daa8]
lea rcx, str.0:db0:lk0:hs0:ld0:ll0:hb0:pj8_.4_.4202:zb0.1:bb
call fcn.14000bb90
xor r9d, r9d
lea r8, [0x140026a08]
lea rdx, [0x14001dab0]
lea rcx, str.0:db0:lk0:hs0:ld0:ll0:hb0:pj8_.4_.4202:zb0.1:bb
call fcn.14000bb90
xor r9d, r9d
lea r8, [0x140026a6c]
lea rdx, [0x14001dab8]
lea rcx, str.0:db0:lk0:hs0:ld0:ll0:hb0:pj8_.4_.4202:zb0.1:bb
call fcn.14000bb90
lea r9, [0x140026ad0]
xor r8d, r8d
lea rdx, [0x14001dac0]
lea rcx, str.0:db0:lk0:hs0:ld0:ll0:hb0:pj8_.4_.4202:zb0.1:bb
call fcn.14000bb90
lea r9, [0x140026ad4]
xor r8d, r8d
lea rdx, [0x14001dac8]
lea rcx, str.0:db0:lk0:hs0:ld0:ll0:hb0:pj8_.4_.4202:zb0.1:bb
call fcn.14000bb90
lea r9, [0x140026ad8]
xor r8d, r8d
lea rdx, [0x14001dad0]
lea rcx, str.0:db0:lk0:hs0:ld0:ll0:hb0:pj8_.4_.4202:zb0.1:bb
call fcn.14000bb90
lea r9, [0x140026adc]
xor r8d, r8d
lea rdx, [0x14001dad8]
lea rcx, str.0:db0:lk0:hs0:ld0:ll0:hb0:pj8_.4_.4202:zb0.1:bb
call fcn.14000bb90
lea r9, [0x140026ae0]
xor r8d, r8d
lea rdx, [0x14001dae0]
lea rcx, str.0:db0:lk0:hs0:ld0:ll0:hb0:pj8_.4_.4202:zb0.1:bb
call fcn.14000bb90
lea r9, [0x140026ae4]
xor r8d, r8d
lea rdx, [0x14001dae8]
lea rcx, str.0:db0:lk0:hs0:ld0:ll0:hb0:pj8_.4_.4202:zb0.1:bb
call fcn.14000bb90
lea r9, [0x140026ae8]
xor r8d, r8d
lea rdx, [0x14001daf0]
lea rcx, str.0:db0:lk0:hs0:ld0:ll0:hb0:pj8_.4_.4202:zb0.1:bb
call fcn.14000bb90
lea r9, [0x140026aec]
xor r8d, r8d
lea rdx, [0x14001daf8]
lea rcx, str.0:db0:lk0:hs0:ld0:ll0:hb0:pj8_.4_.4202:zb0.1:bb
call fcn.14000bb90
mov dword [rsp + 0x34], 3
mov dword [rsp + 0x30], 4
mov dword [rsp + 0x40], 4
mov dword [rsp + 0x44], 0
lea rax, [rsp + 0x38]
mov qword [rsp + 0x20], rax
mov r9d, 0x20019
xor r8d, r8d
lea rdx, str.Console
mov rcx, 0xffffffff80000001
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
jne 0x14000c084
lea rax, [rsp + 0x44]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], 0
lea r9, [rsp + 0x34]
xor r8d, r8d
lea rdx, [0x14001db10]
mov rcx, qword [rsp + 0x38]
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
cmp dword [rsp + 0x44], 0xa
jbe 0x14000c1d7
lea rax, str.0:db0:lk0:hs0:ld0:ll0:hb0:pj8_.4_.4202:zb0.1:bb
mov rdi, rax
xor eax, eax
mov ecx, 0x7d0
rep stosb byte [rdi], al
lea rax, [rsp + 0x44]
mov qword [rsp + 0x28], rax
lea rax, str.0:db0:lk0:hs0:ld0:ll0:hb0:pj8_.4_.4202:zb0.1:bb
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x34]
xor r8d, r8d
lea rdx, str.IpDate
mov rcx, qword [rsp + 0x38]
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
xor r9d, r9d
lea r8, [0x14002626e]
lea rdx, [0x14001db30]
lea rcx, str.0:db0:lk0:hs0:ld0:ll0:hb0:pj8_.4_.4202:zb0.1:bb
call fcn.14000bb90
xor r9d, r9d
lea r8, [0x14002646c]
lea rdx, [0x14001db38]
lea rcx, str.0:db0:lk0:hs0:ld0:ll0:hb0:pj8_.4_.4202:zb0.1:bb
call fcn.14000bb90
lea r9, [0x1400264a8]
xor r8d, r8d
lea rdx, [0x14001db40]
lea rcx, str.0:db0:lk0:hs0:ld0:ll0:hb0:pj8_.4_.4202:zb0.1:bb
call fcn.14000bb90
xor r9d, r9d
lea r8, [0x1400264ac]
lea rdx, [0x14001db48]
lea rcx, str.0:db0:lk0:hs0:ld0:ll0:hb0:pj8_.4_.4202:zb0.1:bb
call fcn.14000bb90
xor r9d, r9d
lea r8, [0x1400266aa]
lea rdx, [0x14001db50]
lea rcx, str.0:db0:lk0:hs0:ld0:ll0:hb0:pj8_.4_.4202:zb0.1:bb
call fcn.14000bb90
lea r9, [0x1400266e8]
xor r8d, r8d
lea rdx, [0x14001db58]
lea rcx, str.0:db0:lk0:hs0:ld0:ll0:hb0:pj8_.4_.4202:zb0.1:bb
call fcn.14000bb90
xor r9d, r9d
lea r8, [0x1400266ec]
lea rdx, [0x14001db60]
lea rcx, str.0:db0:lk0:hs0:ld0:ll0:hb0:pj8_.4_.4202:zb0.1:bb
call fcn.14000bb90
xor r9d, r9d
lea r8, [0x1400268ea]
lea rdx, [0x14001db68]
lea rcx, str.0:db0:lk0:hs0:ld0:ll0:hb0:pj8_.4_.4202:zb0.1:bb
call fcn.14000bb90
lea r9, [0x140026928]
xor r8d, r8d
lea rdx, [0x14001db70]
lea rcx, str.0:db0:lk0:hs0:ld0:ll0:hb0:pj8_.4_.4202:zb0.1:bb
call fcn.14000bb90
add rsp, 0x50
pop rdi
ret