Function at 0x140011dd0
Capabilities:
Query or enumerate registry value

Disassembly:
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x880]
sub rsp, 0x980
mov qword [rbp - 0x30], 0xfffffffffffffffe
mov qword [rsp + 0x9d0], rbx
mov rax, qword [0x140064d98]
xor rax, rsp
mov qword [rbp + 0x870], rax
mov dword [rbp - 0x50], r8d
mov rsi, rdx
mov qword [rbp - 0x38], rdx
mov rbx, rcx
mov qword [rbp - 0x40], rcx
cmp dword [0x140063150], 1
jne 0x1400136f9
cmp dword [0x140063154], 1
jne 0x1400136f9
mov r14d, 0x2580
mov dword [rsp + 0x58], r14d
xor edx, edx
mov r8d, 0x200
lea rcx, [rbp + 0x270]
call fcn.14002d420
xor edx, edx
mov r8d, 0x100
lea rcx, [rbp + 0x470]
call fcn.14002d420
xor edx, edx
mov r8d, 0x100
lea rcx, [rbp + 0x570]
call fcn.14002d420
xor edx, edx
lea r8d, [rdx + 0x60]
lea rcx, [rbp + 0x210]
call fcn.14002d420
movzx r12d, word [0x14006e862]
add r12w, word [0x14006e866]
mov word [rsp + 0x50], r12w
xor edi, edi
movzx r13d, di
lea rdx, [0x140044950]
lea rcx, [rbp + 0x100]
call fcn.140001e10
nop
lea rdx, [0x140044950]
lea rcx, [rbp + 0x160]
call fcn.140001e10
nop
mov dword [rsp + 0x54], edi
xor edx, edx
lea r8d, [rdi + 0x50]
lea rcx, [rbp + 0x1c0]
call fcn.14002d420
xor edx, edx
mov rcx, rsi
call fcn.140007c60
lea r15d, [rdi + 1]
cmp word [rax], di
je 0x140012e58
mov dword [rbp - 0x20], 0x44c0
mov ecx, 0x44c0
call fcn.140002ff0
mov r14, rax
mov qword [rbp - 0x48], rax
test rax, rax
je 0x140011f31
xor edx, edx
mov r8d, 0x44c0
mov rcx, rax
call fcn.14002d420
jmp 0x140011f38
xor r14d, r14d
mov qword [rbp - 0x48], r14
lea rdx, [rbp - 0x20]
mov rcx, r14
call sub.IPHLPAPI.DLL_GetAdaptersInfo
test eax, eax
jne 0x140012dfc
mov r12, r14
test r14, r14
je 0x140012dd7
mov dword [rbp - 0x28], 0x2582
lea r14, [0x14006309c]
nop word [rax + rax]
lea r9, [r12 + 0xc]
lea r8, [0x14004fb08]
mov rdx, 0xffffffffffffffff
lea rcx, [rbp + 0x1c0]
call fcn.14000a9d0
mov rcx, rsi
call fcn.140005da0
mov rcx, rax
lea rdx, [rbp + 0x1c0]
call fcn.14002d7c8
test rax, rax
jne 0x140011fb4
mov r12, qword [r12]
jmp 0x140012dca
mov edx, 0x35
lea rcx, [0x14006bf80]
call fcn.14000b480
mov rcx, rax
call fcn.140005da0
mov qword [rsp + 0x38], rax
mov qword [rsp + 0x30], r14
lea rax, [rbp + 0x1c0]
mov qword [rsp + 0x28], rax
lea rax, str.ControlNetwork4D36E972_E325_11CE_BFC1_08002BE10318_
mov qword [rsp + 0x20], rax
lea r9, [0x14006cf9c]
lea r8, str._s_s_s_s_s
mov rdx, 0xffffffffffffffff
lea rcx, [rbp + 0x270]
call fcn.14000a910
mov edx, 0x36
lea rcx, [0x14006bf80]
call fcn.14000b480
mov rcx, rax
call fcn.140005da0
mov rdx, rax
xor r8d, r8d
lea rcx, [rbp + 0x270]
call fcn.14001ced0
mov rdx, rax
lea rcx, [rbp + 0x140]
call fcn.140001e10
nop
xor edx, edx
lea rcx, [rbp + 0x140]
call fcn.140007c60
cmp word [rax], 0x32
jne 0x140012074
mov r12, qword [r12]
lea rcx, [rbp + 0x140]
call fcn.140001e70
jmp 0x140012dca
lea rdx, [0x140044950]
lea rcx, [rbp + 0x120]
call fcn.140001e10
nop
lea rdx, [0x140044950]
lea rcx, [rbp + 0xe0]
call fcn.140001e10
nop
lea rdx, [0x140044950]
lea rcx, [rbp + 0xc0]
call fcn.140001e10
nop
lea rdx, [0x140044950]
lea rcx, [rbp + 0x1a0]
call fcn.140001e10
nop
mov edx, 0x34
lea rcx, [0x14006de90]
call fcn.14000b480
mov rdx, rax
lea rcx, [rbp + 0x40]
call fcn.140007b70
nop
lea rdx, [0x140044950]
lea rcx, [rbp + 0x80]
call fcn.140001e10
nop
lea rdx, [0x140044950]
lea rcx, [rbp + 0x180]
call fcn.140001e10
nop
lea rax, [rbp + 0x1c0]
mov qword [rsp + 0x28], rax
lea rax, str.ServicesTcpipParametersInterfaces_
mov qword [rsp + 0x20], rax
lea r9, [0x14006cf9c]
lea r8, str._s_s_s
mov rdx, 0xffffffffffffffff
lea rcx, [rbp + 0x270]
call fcn.14000a910
cmp byte [r12 + 0x1c0], 0x30
jne 0x1400121dc
mov edx, 0x49
lea rcx, [0x14006bf80]
call fcn.14000b480
mov rcx, rax
call fcn.140005da0
mov rdx, rax
mov r8d, r15d
lea rcx, [rbp + 0x270]
call fcn.14001ced0
mov rdx, rax
lea rcx, [rbp + 0xe0]
call fcn.140001ee0
xor edx, edx
lea rcx, [rbp + 0xe0]
call fcn.140007c60
cmp word [rax], 0x30
jne 0x14001221f
mov edx, 0x48
lea rcx, [0x14006bf80]
call fcn.14000b480
mov rcx, rax
call fcn.140005da0
mov rdx, rax
mov r8d, r15d
lea rcx, [rbp + 0x270]
call fcn.14001ced0
mov rdx, rax
lea rcx, [rbp + 0xe0]
call fcn.140001ee0
jmp 0x14001221f
lea rdx, [r12 + 0x1c0]
lea rcx, [rbp + 0x20]
call fcn.140004dd0
nop
lea rdx, [rbp + 0x20]
lea rcx, [rsp + 0x70]
call fcn.140009330
mov rdx, rax
lea rcx, [rbp + 0xe0]
call fcn.140001e90
lea rcx, [rsp + 0x70]
call fcn.140001e70
nop
lea rcx, [rbp + 0x20]
call fcn.140004e80
lea r15, [r12 + 0x1f0]
cmp byte [r15], 0x30
jne 0x1400122c1
mov edx, 0x44
lea rcx, [0x14006bf80]
call fcn.14000b480
mov rcx, rax
call fcn.140005da0
mov rdx, rax
mov r8d, 1
lea rcx, [rbp + 0x270]
call fcn.14001ced0
mov rdx, rax
lea rcx, [rbp + 0xc0]
call fcn.140001ee0
xor edx, edx
lea rcx, [rbp + 0xc0]
call fcn.140007c60
cmp word [rax], 0x30
jne 0x1400122ff
mov edx, 0x45
lea rcx, [0x14006bf80]
call fcn.14000b480
mov rcx, rax
call fcn.140005da0
mov rdx, rax
mov r8d, 1
lea rcx, [rbp + 0x270]
call fcn.14001ced0
mov rdx, rax
lea rcx, [rbp + 0xc0]
call fcn.140001ee0
jmp 0x1400122ff
mov rdx, r15
lea rcx, [rbp + 0x20]
call fcn.140004dd0
nop
lea rdx, [rbp + 0x20]
lea rcx, [rsp + 0x70]
call fcn.140009330
mov rdx, rax
lea rcx, [rbp + 0xc0]
call fcn.140001e90
lea rcx, [rsp + 0x70]
call fcn.140001e70
nop
lea rcx, [rbp + 0x20]
call fcn.140004e80
lea rdx, [r12 + 0x110]
lea rcx, [rbp + 0x20]
call fcn.140004dd0
nop
lea rdx, [rbp + 0x20]
lea rcx, [rsp + 0x70]
call fcn.140009330
mov rdx, rax
lea rcx, [rbp + 0x80]
call fcn.140001e90
lea rcx, [rsp + 0x70]
call fcn.140001e70
nop
lea rcx, [rbp + 0x20]
call fcn.140004e80
lea rdx, [rbp + 0x80]
lea rcx, [rbp]
call fcn.140007b70
nop
lea rcx, [rbp]
call fcn.140003660
cmp rax, 0x24
jbe 0x140012459
mov edx, 0x23
lea rcx, [0x14006bf80]
call fcn.14000b480
mov rcx, rax
call fcn.140005da0
mov r8, rax
lea r9, [0x140044950]
lea rdx, [rbp]
lea rcx, [rsp + 0x70]
call fcn.140009990
lea rcx, [rsp + 0x70]
call fcn.140001e70
mov edx, 0x35
lea rcx, [0x14006bf80]
call fcn.14000b480
mov rcx, rax
call fcn.140005da0
mov r8, rax
lea r9, [0x140044950]
lea rdx, [rbp]
lea rcx, [rsp + 0x70]
call fcn.140009990
lea rcx, [rsp + 0x70]
call fcn.140001e70
lea rcx, [rbp]
call fcn.140003660
cmp rax, 0x24
jbe 0x140012433
lea rcx, [rbp]
call fcn.140005da0
mov rcx, rax
mov r8d, 5
lea rdx, [0x140063094]
call fcn.1400096a0
mov r9d, eax
xor r8d, r8d
lea rdx, [rsp + 0x70]
lea rcx, [rbp]
call fcn.140009710
mov rdx, rax
lea rcx, [rbp]
call fcn.140001e90
lea rcx, [rsp + 0x70]
call fcn.140001e70
lea r9, [0x140063094]
lea r8, [0x14004fb28]
lea rdx, [rbp]
lea rcx, [rsp + 0x70]
call fcn.140009990
lea rcx, [rsp + 0x70]
call fcn.140001e70
inc r13w
xor edx, edx
lea rcx, [rbp]
call fcn.140007c60
cmp word [rax], 0
jne 0x14001247e
lea rdx, [rbp + 0x80]
lea rcx, [rbp]
call fcn.14000b3f0
lea rcx, [rbp]
call fcn.140005da0
movsx r9d, r13w
mov qword [rsp + 0x28], rax
lea rax, [0x14004fa70]
mov qword [rsp + 0x20], rax
lea r8, str._d_s_s
mov rdx, 0xffffffffffffffff
lea rcx, [rbp + 0x270]
call fcn.14000a910
lea rdx, [0x140044950]
lea rcx, [rbp + 0x80]
call fcn.140001ee0
mov edx, 0x18
lea rcx, [rbp - 0x18]
call fcn.1400089d0
lea rcx, [rbp - 0x18]
call fcn.14000ae50
nop
lea rdx, [0x140063098]
lea rcx, [rbp + 0x20]
call fcn.140001e10
nop
lea r8, [rbp + 0x20]
lea rdx, [rbp - 0x18]
mov rcx, rsi
call fcn.140007f90
nop
lea rcx, [rbp + 0x20]
call fcn.140001e70
xor eax, eax
movzx esi, ax
lea rcx, [rbp - 0x18]
call fcn.1400093e0
test rax, rax
je 0x1400128ee
xor eax, eax
mov edi, eax
lea r15, [0x14006309c]
lea rbx, str.ControlNetwork4D36E972_E325_11CE_BFC1_08002BE10318_
nop word [rax + rax]
mov rdx, rdi
lea rcx, [rbp - 0x18]
call fcn.14000b480
mov rcx, rax
call fcn.140005da0
mov rcx, rax
lea rdx, [rbp + 0x1c0]
call fcn.14002d7c8
test rax, rax
je 0x1400128c6
mov rdx, rdi
lea rcx, [rbp - 0x18]
call fcn.14000b480
mov rcx, rax
call fcn.140005da0
mov rdx, rax
lea rcx, [rbp + 0xa0]
call fcn.140001e10
nop
mov r9d, 2
lea r8, str.__n___
lea rdx, [rbp + 0xa0]
lea rcx, [rsp + 0x70]
call fcn.1400095b0
mov rdx, rax
lea rcx, [rbp + 0x1a0]
call fcn.140001e90
lea rcx, [rsp + 0x70]
call fcn.140001e70
nop
lea rcx, [rbp + 0xa0]
call fcn.140001e70
mov rdx, rdi
lea rcx, [rbp - 0x18]
call fcn.14000b480
mov rcx, rax
call fcn.140005da0
mov rdx, rax
lea rcx, [rbp + 0xa0]
call fcn.140001e10
nop
mov r9d, 3
lea r8, str.__n___
lea rdx, [rbp + 0xa0]
lea rcx, [rbp + 0x20]
call fcn.1400095b0
nop
lea rcx, [rbp + 0xa0]
call fcn.140001e70
mov rdx, rdi
lea rcx, [rbp - 0x18]
call fcn.14000b480
mov rcx, rax
call fcn.140005da0
mov rdx, rax
lea rcx, [rsp + 0x70]
call fcn.140001e10
nop
mov r9d, 4
lea r8, str.__n___
lea rdx, [rsp + 0x70]
lea rcx, [rbp - 0x70]
call fcn.1400095b0
mov rdx, rax
lea rcx, [rbp + 0x80]
call fcn.140001e90
lea rcx, [rbp - 0x70]
call fcn.140001e70
nop
lea rcx, [rsp + 0x70]
call fcn.140001e70
mov rdx, rdi
lea rcx, [rbp - 0x18]
call fcn.14000b480
mov rcx, rax
call fcn.140005da0
mov rdx, rax
lea rcx, [rsp + 0x70]
call fcn.140001e10
nop
mov r9d, 5
lea r8, str.__n___
lea rdx, [rsp + 0x70]
lea rcx, [rbp - 0x70]
call fcn.1400095b0
mov rdx, rax
lea rcx, [rbp + 0x180]
call fcn.140001e90
lea rcx, [rbp - 0x70]
call fcn.140001e70
nop
lea rcx, [rsp + 0x70]
call fcn.140001e70
lea rdx, [rbp + 0x20]
lea rcx, [rbp + 0x60]
call fcn.140007b70
nop
xor edx, edx
mov r8d, 0x200
lea rcx, [rbp + 0x670]
call fcn.14002d420
mov edx, 0x35
lea rcx, [0x14006bf80]
call fcn.14000b480
mov rcx, rax
call fcn.140005da0
mov qword [rsp + 0x38], rax
mov qword [rsp + 0x30], r15
lea rax, [rbp + 0x1c0]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rbx
lea r9, [0x14006cf9c]
lea r8, str._s_s_s_s_s
mov rdx, 0xffffffffffffffff
lea rcx, [rbp + 0x670]
call fcn.14000a910
mov edx, 0x36
lea rcx, [0x14006bf80]
call fcn.14000b480
mov rcx, rax
call fcn.140005da0
mov rdx, rax
mov r8d, 2
lea rcx, [rbp + 0x670]
call fcn.14001ced0
mov rdx, rax
lea rcx, [rbp + 0x120]
call fcn.140001ee0
xor edx, edx
lea rcx, [rbp + 0x20]
call fcn.140007c60
cmp word [rax], 0
jne 0x1400127e1
mov edx, 0x21
lea rcx, [0x14006bf80]
call fcn.14000b480
mov rcx, rax
call fcn.140005da0
mov rdx, rax
mov r8d, 2
lea rcx, [rbp + 0x670]
call fcn.14001ced0
mov rdx, rax
lea rcx, [rbp + 0x60]
call fcn.140001ee0
cmp byte [r12 + 0x1c0], 0x30
jne 0x14001282f
lea r8, [0x14006bf98]
lea rdx, [rbp + 0x60]
lea rcx, [rsp + 0x70]
call fcn.140001730
nop
lea r8, [rbp + 0x40]
mov rdx, rax
lea rcx, [rbp - 0x70]
call fcn.1400016b0
mov rdx, rax
lea rcx, [rbp + 0x40]
call fcn.140001e90
lea rcx, [rbp - 0x70]
call fcn.140001e70
nop
lea rcx, [rsp + 0x70]
jmp 0x1400128ad
lea rdx, [rbp + 0x1c0]
lea rcx, [rbp - 0x70]
call fcn.14001c1c0
mov rdx, rax
lea rcx, [rbp + 0x40]
call fcn.140001e90
lea rcx, [rbp - 0x70]
call fcn.140001e70
xor edx, edx
lea rcx, [rbp + 0x40]
call fcn.140007c60
cmp word [rax], 0
jne 0x140012874
lea rdx, [rbp + 0x60]
lea rcx, [rbp + 0x40]
call fcn.14000b3f0
jmp 0x1400128b3
mov edx, 0x24
lea rcx, [0x14006bf80]
call fcn.14000b480
mov rcx, rax
call fcn.140005da0
mov rdx, rax
lea r8, [rbp + 0x40]
lea rcx, [rbp - 0x70]
call fcn.140009d70
mov rdx, rax
lea rcx, [rbp + 0x40]
call fcn.140001e90
lea rcx, [rbp - 0x70]
call fcn.140001e70
nop
lea rcx, [rbp + 0x60]
call fcn.140001e70
nop
lea rcx, [rbp + 0x20]
call fcn.140001e70
inc si
movzx edi, si
lea rcx, [rbp - 0x18]
call fcn.1400093e0
cmp rdi, rax
jb 0x140012540
mov rbx, qword [rbp - 0x40]
lea r15, [r12 + 0x1f0]
mov edi, dword [rsp + 0x54]
lea rcx, [rbp + 0x60]
call fcn.14000ae50
lea rdx, [rbp - 0x18]
mov rcx, rax
call fcn.140029bd0
lea rcx, [rbp + 0x60]
call fcn.14000b2f0
xor edx, edx
lea rcx, [rbp + 0x180]
call fcn.140007c60
cmp word [rax], 0x31
jne 0x140012977
cmp byte [r12 + 0x1c0], 0x30
je 0x14001293d
cmp byte [r15], 0x30
mov ecx, 1
cmovne edi, ecx
mov dword [rsp + 0x54], edi
jne 0x140012977
xor eax, eax
mov qword [0x14006cffc], rax
mov qword [0x14006d004], rax
mov qword [0x14006d00c], rax
mov qword [0x14006d014], rax
mov qword [0x14006d01c], rax
mov qword [0x14006d024], rax
mov qword [0x14006d02c], rax
mov qword [0x14006d034], rax
cmp byte [r12 + 0x1c0], 0x30
je 0x14001298f
cmp byte [r15], 0x30
lea rdx, [0x14004f42c]
jne 0x140012996
lea rdx, [0x14004fb40]
lea rcx, [rbp + 0x100]
call fcn.140001fd0
lea rcx, [rbp + 0x1a0]
call fcn.140005da0
mov rsi, rax
lea rcx, [rbp + 0x80]
call fcn.140005da0
mov rdi, rax
mov edx, 1
lea rcx, [0x14006bf80]
call fcn.14000b480
mov rcx, rax
call fcn.140005da0
mov qword [rsp + 0x28], rsi
mov qword [rsp + 0x20], rdi
mov r9, rax
lea r8, str._s_s__s
mov rdx, 0xffffffffffffffff
lea rcx, [rbp + 0x470]
call fcn.14000aa60
lea rcx, [rbp + 0x40]
call fcn.140005da0
mov rsi, rax
lea rcx, [rbp + 0xe0]
call fcn.140005da0
mov rdi, rax
mov edx, 2
lea rcx, [0x14006bf80]
call fcn.14000b480
mov rcx, rax
call fcn.140005da0
mov qword [rsp + 0x28], rsi
mov qword [rsp + 0x20], rdi
mov r9, rax
lea r8, str._s_s___s
mov rdx, 0xffffffffffffffff
lea rcx, [rbp + 0x570]
call fcn.14000aa60
lea rcx, [rbp + 0xc0]
call fcn.140005da0
mov rdi, rax
mov edx, 0x5b
lea rcx, [0x14006de90]
call fcn.14000b480
mov rcx, rax
call fcn.140005da0
mov qword [rsp + 0x20], rdi
mov r9, rax
lea r8, str._s__s
mov rdx, 0xffffffffffffffff
lea rcx, [rbp + 0x210]
call fcn.140001cf0
cmp r13w, 1
jne 0x140012b73
mov edx, 0x2580
mov rcx, rbx
call qword [sym.imp.USER32.dll_GetDlgItem]
test rax, rax
jne 0x140012b73
movsx ecx, word [0x14006e862]
movsx edx, word [0x14006e866]
inc ecx
add edx, ecx
mov eax, dword [0x14006e6d4]
add eax, 3
imul edx, eax
movsxd r8, edx
mov edx, 0x467
mov r9d, 0x2580
mov rcx, rbx
call qword [sym.imp.USER32.dll_SendMessageW]
mov edx, 0x14
lea rcx, [0x14006de90]
call fcn.14000b480
mov rcx, rax
call fcn.140005da0
mov r8, rax
mov edx, 0x2580
mov rcx, rbx
call qword [sym.imp.USER32.dll_SetDlgItemTextW]
xor eax, eax
mov dword [rsp + 0x60], eax
mov eax, dword [0x14006e6d0]
lea ecx, [rax + rax*8]
mov dword [rsp + 0x64], ecx
movsx ecx, word [0x14006e862]
movsx edx, word [0x14006e866]
inc ecx
add edx, ecx
mov ecx, dword [0x14006e6d4]
lea eax, [rcx + 3]
imul eax, edx
mov dword [rsp + 0x68], eax
add eax, ecx
mov dword [rsp + 0x6c], eax
movups xmm0, xmmword [rsp + 0x60]
movaps xmmword [0x14006e8a0], xmm0
mov dword [0x14006e7dc], edx
movsxd r14, dword [rbp - 0x28]
lea esi, [r14 + 2]
mov edx, esi
mov rcx, rbx
call qword [sym.imp.USER32.dll_GetDlgItem]
test rax, rax
jne 0x140012c28
movsx edi, word [rsp + 0x50]
lea eax, [r14 - 1]
movsxd r9, eax
lea ecx, [rdi + 1]
mov eax, dword [0x14006e6d4]
add eax, 3
imul ecx, eax
movsxd r8, ecx
mov edx, 0x467
mov rcx, rbx
call qword [sym.imp.USER32.dll_SendMessageW]
mov r9, r14
lea ecx, [rdi + 2]
mov eax, dword [0x14006e6d4]
add eax, 3
imul ecx, eax
movsxd r8, ecx
mov edx, 0x467
mov rcx, rbx
call qword [sym.imp.USER32.dll_SendMessageW]
lea eax, [r14 + 1]
movsxd r9, eax
lea ecx, [rdi + 3]
mov eax, dword [0x14006e6d4]
add eax, 3
imul ecx, eax
movsxd r8, ecx
mov edx, 0x467
mov rcx, rbx
call qword [sym.imp.USER32.dll_SendMessageW]
movsxd r9, esi
lea ecx, [rdi + 4]
mov eax, dword [0x14006e6d4]
add eax, 3
imul ecx, eax
movsxd r8, ecx
mov edx, 0x467
mov rcx, rbx
call qword [sym.imp.USER32.dll_SendMessageW]
lea edx, [r14 - 1]
lea r8, [rbp + 0x270]
mov rcx, rbx
call qword [sym.imp.USER32.dll_SetDlgItemTextW]
lea r8, [rbp + 0x470]
mov edx, r14d
mov rcx, rbx
call qword [sym.imp.USER32.dll_SetDlgItemTextW]
lea edx, [r14 + 1]
lea r8, [rbp + 0x570]
mov rcx, rbx
call qword [sym.imp.USER32.dll_SetDlgItemTextW]
lea r8, [rbp + 0x210]
mov edx, esi
mov rcx, rbx
call qword [sym.imp.USER32.dll_SetDlgItemTextW]
add word [rsp + 0x50], 4
add dword [rsp + 0x58], 4
add r14d, 4
mov dword [rbp - 0x28], r14d
movzx eax, r13w
shl ax, 2
mov word [0x14006e868], ax
lea rcx, [rbp + 0x40]
call fcn.140005da0
mov r14, rax
lea rcx, [rbp + 0x120]
call fcn.140005da0
mov r15, rax
lea rcx, [rbp + 0x80]
call fcn.140005da0
mov rsi, rax
lea rcx, [rbp + 0xc0]
call fcn.140005da0
mov rdi, rax
lea rcx, [rbp + 0xe0]
call fcn.140005da0
lea rcx, [r12 + 0x1d0]
mov qword [rsp + 0x48], r14
lea rdx, [rbp + 0x1c0]
mov qword [rsp + 0x40], rdx
mov qword [rsp + 0x38], r15
mov qword [rsp + 0x30], rsi
mov qword [rsp + 0x28], rcx
mov qword [rsp + 0x20], rdi
mov r9, rax
lea r8, str._s_s_hs_s_s_s_s_n
mov rdx, 0xffffffffffffffff
lea rcx, [rbp + 0x270]
call fcn.14000a910
lea rdx, [rbp + 0x270]
lea rcx, [rbp + 0x160]
call fcn.140001fd0
mov r12, qword [r12]
lea rcx, [rbp - 0x18]
call fcn.14000b2f0
nop
lea rcx, [rbp]
call fcn.140001e70
nop
lea rcx, [rbp + 0x180]
call fcn.140001e70
nop
lea rcx, [rbp + 0x80]
call fcn.140001e70
nop
lea rcx, [rbp + 0x40]
call fcn.140001e70
nop
lea rcx, [rbp + 0x1a0]
call fcn.140001e70
nop
lea rcx, [rbp + 0xc0]
call fcn.140001e70
nop
lea rcx, [rbp + 0xe0]
call fcn.140001e70
nop
lea rcx, [rbp + 0x120]
call fcn.140001e70
nop
lea rcx, [rbp + 0x140]
call fcn.140001e70
mov edi, dword [rsp + 0x54]
mov rsi, qword [rbp - 0x38]
mov r15d, 1
lea r14, [0x14006309c]
test r12, r12
jne 0x140011f70
mov r14, qword [rbp - 0x48]
lea rcx, [0x14006d9a0]
call fcn.1400290a0
lea rdx, [rbp + 0x160]
lea rcx, [0x14006d9a0]
call fcn.14000b3f0
movzx r12d, word [rsp + 0x50]
cmp r13w, word [0x14006e804]
je 0x140012e10
cmp word [0x14006e806], 0
je 0x140012e16
test r13w, r13w
jne 0x140012e39
mov word [0x14006e806], r15w
xor r9d, r9d
mov edx, 0x46c
mov r8d, 0x9c4
mov rcx, qword [0x14006e728]
call qword [sym.imp.USER32.dll_SetTimer]
mov word [0x14006e804], r13w
mov rcx, r14
call fcn.14002ba80
test r13w, r13w
jne 0x140013481
mov r14d, dword [rsp + 0x58]
xor edi, edi
mov qword [rbp - 0x28], rdi
mov edx, r15d
lea rcx, [rbp + 0xa0]
call fcn.140014430
nop
lea edx, [rdi + 0x18]
lea rcx, [rbp - 0x18]
call fcn.1400089d0
lea rcx, [rbp - 0x18]
call fcn.14000ae50
nop
lea rdx, [0x140063098]
lea rcx, [rsp + 0x70]
call fcn.140001e10
nop
lea r8, [rsp + 0x70]
lea rdx, [rbp - 0x18]
lea rcx, [rbp + 0xa0]
call fcn.140007f90
nop
lea rcx, [rsp + 0x70]
call fcn.140001e70
movzx r15d, di
lea rcx, [rbp - 0x18]
call fcn.1400093e0
test rax, rax
je 0x14001344c
lea esi, [r14 + 2]
lea r14, str.0.0.0.0
nop word [rax + rax]
mov rdx, rdi
lea rcx, [rbp - 0x18]
call fcn.14000b480
mov rcx, rax
call fcn.140005da0
mov rdi, rax
mov edx, 0x1e
lea rcx, [0x14006bf80]
call fcn.14000b480
mov rcx, rax
call fcn.140005da0
mov qword [rsp + 0x28], rdi
mov qword [rsp + 0x20], rax
lea r9, [0x14006cf9c]
lea r8, str._s_s_s
mov rdx, 0xffffffffffffffff
lea rcx, [rbp + 0x270]
call fcn.14000a910
lea rax, [rbp - 0x28]
mov qword [rsp + 0x20], rax
mov r9d, 0x20019
xor r8d, r8d
lea rdx, [rbp + 0x270]
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
jne 0x140013432
inc r13w
cmp r13w, 1
jne 0x14001303b
mov edx, 0x2580
mov rcx, rbx
call qword [sym.imp.USER32.dll_GetDlgItem]
test rax, rax
jne 0x14001303b
movsx ecx, word [0x14006e862]
movsx edx, word [0x14006e866]
inc ecx
add edx, ecx
mov eax, dword [0x14006e6d4]
add eax, 3
imul edx, eax
movsxd r8, edx
mov edx, 0x467
mov r9d, 0x2580
mov rcx, rbx
call qword [sym.imp.USER32.dll_SendMessageW]
mov edx, 0x14
lea rcx, [0x14006de90]
call fcn.14000b480
mov rcx, rax
call fcn.140005da0
mov r8, rax
mov edx, 0x2580
mov rcx, rbx
call qword [sym.imp.USER32.dll_SetDlgItemTextW]
xor eax, eax
mov dword [rsp + 0x60], eax
mov eax, dword [0x14006e6d0]
lea ecx, [rax + rax*8]
mov dword [rsp + 0x64], ecx
movsx ecx, word [0x14006e862]
movsx edx, word [0x14006e866]
inc ecx
add edx, ecx
mov ecx, dword [0x14006e6d4]
lea eax, [rcx + 3]
imul eax, edx
mov dword [rsp + 0x68], eax
add eax, ecx
mov dword [rsp + 0x6c], eax
movups xmm0, xmmword [rsp + 0x60]
movaps xmmword [0x14006e8a0], xmm0
mov dword [0x14006e7dc], edx
xor edx, edx
mov r8d, 0x200
lea rcx, [rbp + 0x270]
call fcn.14002d420
mov dword [rbp - 0x20], 0x200
mov edx, 0x10
lea rcx, [0x14006bf80]
call fcn.14000b480
mov rcx, rax
call fcn.140005da0
lea rcx, [rbp - 0x20]
mov qword [rsp + 0x28], rcx
lea rcx, [rbp + 0x270]
mov qword [rsp + 0x20], rcx
xor r9d, r9d
xor r8d, r8d
mov rdx, rax
mov rcx, qword [rbp - 0x28]
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
test eax, eax
jne 0x140013419
lea rdx, [rbp + 0x270]
lea rcx, [rsp + 0x70]
call fcn.140001e10
nop
mov r9d, 2
lea r8, [0x1400630a0]
lea rdx, [rsp + 0x70]
lea rcx, [rbp]
call fcn.1400095b0
nop
lea rcx, [rsp + 0x70]
call fcn.140001e70
xor edx, edx
lea rcx, [rbp]
call fcn.140007c60
cmp word [rax], 0
jne 0x1400130f8
lea rdx, [rbp + 0x270]
lea rcx, [rbp]
call fcn.140001ee0
lea rcx, [rbp]
call fcn.140003660
cmp rax, 0x24
jbe 0x1400131f6
mov edx, 0x23
lea rcx, [0x14006bf80]
call fcn.14000b480
mov rcx, rax
call fcn.140005da0
mov r8, rax
lea r9, [0x140044950]
lea rdx, [rbp]
lea rcx, [rbp - 0x70]
call fcn.140009990
lea rcx, [rbp - 0x70]
call fcn.140001e70
mov edx, 0x35
lea rcx, [0x14006bf80]
call fcn.14000b480
mov rcx, rax
call fcn.140005da0
mov r8, rax
lea r9, [0x140044950]
lea rdx, [rbp]
lea rcx, [rbp - 0x70]
call fcn.140009990
lea rcx, [rbp - 0x70]
call fcn.140001e70
lea rcx, [rbp]
call fcn.140003660
cmp rax, 0x24
jbe 0x1400131d2
lea rcx, [rbp]
call fcn.140005da0
mov rcx, rax
mov r8d, 5
lea rdx, [0x140063094]
call fcn.1400096a0
mov r9d, eax
xor r8d, r8d
lea rdx, [rbp - 0x70]
lea rcx, [rbp]
call fcn.140009710
mov rdx, rax
lea rcx, [rbp]
call fcn.140001e90
lea rcx, [rbp - 0x70]
call fcn.140001e70
lea r9, [0x140063094]
lea r8, [0x14004fb28]
lea rdx, [rbp]
lea rcx, [rbp - 0x70]
call fcn.140009990
lea rcx, [rbp - 0x70]
call fcn.140001e70
lea rcx, [rbp]
call fcn.140005da0
movsx r9d, r13w
mov qword [rsp + 0x28], rax
lea rax, [0x14004fa70]
mov qword [rsp + 0x20], rax
lea r8, str._d_s_s
mov rdx, 0xffffffffffffffff
lea rcx, [rbp + 0x270]
call fcn.14000a910
mov edx, 0x4d
lea rcx, [0x14006de90]
call fcn.14000b480
mov rcx, rax
call fcn.140005da0
mov rdi, rax
mov edx, 1
lea rcx, [0x14006bf80]
call fcn.14000b480
mov rcx, rax
call fcn.140005da0
mov qword [rsp + 0x28], rdi
lea rcx, str.00_00_00_00_00_00
mov qword [rsp + 0x20], rcx
mov r9, rax
lea r8, str._s_s_s
mov rdx, 0xffffffffffffffff
lea rcx, [rbp + 0x470]
call fcn.14000aa60
mov edx, 2
lea rcx, [0x14006bf80]
call fcn.14000b480
mov rcx, rax
call fcn.140005da0
mov r9, rax
mov qword [rsp + 0x20], r14
lea r8, [0x1400458a0]
mov rdx, 0xffffffffffffffff
lea rcx, [rbp + 0x570]
call fcn.14000aa60
mov edx, 0x5b
lea rcx, [0x14006de90]
call fcn.14000b480
mov rcx, rax
call fcn.140005da0
mov r9, rax
mov qword [rsp + 0x20], r14
lea r8, str._s__s
mov rdx, 0xffffffffffffffff
lea rcx, [rbp + 0x210]
call fcn.140001cf0
lea r14d, [rsi + 2]
mov edx, r14d
mov rcx, rbx
call qword [sym.imp.USER32.dll_GetDlgItem]
test rax, rax
jne 0x1400133b6
movsx edi, r12w
lea eax, [rsi - 1]
movsxd r9, eax
lea ecx, [rdi + 1]
mov eax, dword [0x14006e6d4]
add eax, 3
imul ecx, eax
movsxd r8, ecx
mov edx, 0x467
mov rcx, rbx
call qword [sym.imp.USER32.dll_SendMessageW]
movsxd r9, esi
lea ecx, [rdi + 2]
mov eax, dword [0x14006e6d4]
add eax, 3
imul ecx, eax
movsxd r8, ecx
mov edx, 0x467
mov rcx, rbx
call qword [sym.imp.USER32.dll_SendMessageW]
lea eax, [rsi + 1]
movsxd r9, eax
lea ecx, [rdi + 3]
mov eax, dword [0x14006e6d4]
add eax, 3
imul ecx, eax
movsxd r8, ecx
mov edx, 0x467
mov rcx, rbx
call qword [sym.imp.USER32.dll_SendMessageW]
movsxd r9, r14d
lea ecx, [rdi + 4]
mov eax, dword [0x14006e6d4]
add eax, 3
imul ecx, eax
movsxd r8, ecx
mov edx, 0x467
mov rcx, rbx
call qword [sym.imp.USER32.dll_SendMessageW]
lea edx, [rsi - 1]
lea r8, [rbp + 0x270]
mov rcx, rbx
call qword [sym.imp.USER32.dll_SetDlgItemTextW]
lea r8, [rbp + 0x470]
mov edx, esi
mov rcx, rbx
call qword [sym.imp.USER32.dll_SetDlgItemTextW]
lea edx, [rsi + 1]
lea r8, [rbp + 0x570]
mov rcx, rbx
call qword [sym.imp.USER32.dll_SetDlgItemTextW]
lea r8, [rbp + 0x210]
mov edx, r14d
mov rcx, rbx
call qword [sym.imp.USER32.dll_SetDlgItemTextW]
add r12w, 4
add esi, 4
lea rcx, [rbp]
call fcn.140001e70
lea r14, str.0.0.0.0
mov rcx, qword [rbp - 0x28]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
movzx eax, r13w
shl ax, 2
mov word [0x14006e868], ax
inc r15w
movzx edi, r15w
lea rcx, [rbp - 0x18]
call fcn.1400093e0
cmp rdi, rax
jb 0x140012ee0
lea rcx, [rbp + 0x60]
call fcn.14000ae50
lea rdx, [rbp - 0x18]
mov rcx, rax
call fcn.140029bd0
lea rcx, [rbp + 0x60]
call fcn.14000b2f0
nop
lea rcx, [rbp - 0x18]
call fcn.14000b2f0
nop
lea rcx, [rbp + 0xa0]
call fcn.140001e70
movsx esi, r12w
lea edi, [rsi + 1]
mov dword [0x14006e7e0], edi
mov dword [0x14006e7f8], edi
lea rcx, [rbp + 0x100]
call fcn.140005da0
lea r8, [0x14006d77c]
sub r8, rax
nop word [rax + rax]
movzx edx, word [rax]
movzx ecx, word [rax + r8]
sub edx, ecx
jne 0x1400134c4
add rax, 2
test ecx, ecx
jne 0x1400134b0
test edx, edx
je 0x140013546
cmp dword [rsp + 0x54], 1
jne 0x140013546
mov rcx, qword [0x14006e9d8]
test rcx, rcx
je 0x1400134e1
call qword [sym.imp.WINHTTP.dll_WinHttpCloseHandle]
mov rcx, qword [0x14006e948]
test rcx, rcx
je 0x1400134ff
call qword [sym.imp.KERNEL32.dll_CloseHandle]
xor r14d, r14d
mov qword [0x14006e948], r14
jmp 0x140013502
xor r14d, r14d
mov rcx, qword [0x14006e960]
test rcx, rcx
je 0x14001351b
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov qword [0x14006e948], r14
mov qword [0x14006e9d8], r14
mov dword [0x14006e84c], r14d
mov dword [0x14006e83c], r14d
xor r9d, r9d
xor r8d, r8d
mov edx, 0x5bb
mov rcx, rbx
call qword [sym.imp.USER32.dll_PostMessageW]
jmp 0x140013549
xor r14d, r14d
lea rcx, [rbp + 0x100]
call fcn.140005da0
mov rdx, rax
mov r8, 0xffffffffffffffff
lea rcx, [0x14006d77c]
call fcn.14000add0
movsx ecx, word [0x14006e862]
movsx eax, word [0x14006e866]
add ecx, eax
cmp esi, ecx
je 0x1400136e0
movzx eax, word [0x14006e864]
movzx ecx, word [0x14006e868]
cmp ax, cx
jne 0x1400135a0
cmp dword [rbp - 0x50], 0
je 0x1400136e0
mov esi, 1
test ax, ax
je 0x140013647
mov edx, esi
mov rcx, rbx
call fcn.140021af0
mov r9d, 0x2329
xor r8d, r8d
mov edx, 0x465
mov rcx, rbx
call qword [sym.imp.USER32.dll_PostMessageW]
mov r9d, 0x232a
xor r8d, r8d
mov edx, 0x465
mov rcx, rbx
call qword [sym.imp.USER32.dll_PostMessageW]
mov r9d, 0x232b
xor r8d, r8d
mov edx, 0x465
mov rcx, rbx
call qword [sym.imp.USER32.dll_PostMessageW]
mov r9d, 0x232c
xor r8d, r8d
mov edx, 0x465
mov rcx, rbx
call qword [sym.imp.USER32.dll_PostMessageW]
mov r9d, 0x232d
xor r8d, r8d
mov edx, 0x465
mov rcx, rbx
call qword [sym.imp.USER32.dll_PostMessageW]
movzx eax, word [0x1400702a0]
movzx ecx, word [0x14006e868]
cmp cx, ax
cmovne ax, cx
mov word [0x1400702a0], ax
mov word [0x14006e864], cx
mov dword [rsp + 0x60], r14d
mov r10d, dword [0x14006e6d0]
lea eax, [r10 + r10*8]
mov dword [rsp + 0x64], eax
mov ecx, dword [0x14006e6d4]
lea r8d, [rcx + 3]
mov eax, edi
imul eax, r8d
mov dword [rsp + 0x68], eax
add eax, ecx
mov dword [rsp + 0x6c], eax
movups xmm0, xmmword [rsp + 0x60]
movaps xmmword [0x14006e8b0], xmm0
mov edx, dword [0x14006e7f8]
inc edx
imul edx, r8d
imul eax, r10d, 0x78
mov dword [rsp + 0x30], r14d
mov dword [rsp + 0x28], edx
mov dword [rsp + 0x20], eax
mov r9d, dword [0x14006e710]
mov r8d, dword [0x14006e6ec]
mov rdx, rsi
mov rcx, rbx
call qword [sym.imp.USER32.dll_SetWindowPos]
mov eax, dword [0x14006e6d4]
add eax, 3
imul eax, edi
movsxd r8, eax
mov r9, rsi
mov edx, 0x468
mov rcx, rbx
call qword [sym.imp.USER32.dll_SendMessageW]
nop
lea rcx, [rbp + 0x160]
call fcn.140001e70
nop
lea rcx, [rbp + 0x100]
call fcn.140001e70
mov rcx, qword [rbp + 0x870]
xor rcx, rsp
call fcn.14002ba20
mov rbx, qword [rsp + 0x9d0]
add rsp, 0x980
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret