Function at 0x1000e750
Capabilities:
Query or enumerate registry value

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x14
movzx eax, byte [0x10040b84]
test eax, eax
je 0x1000e768
jmp 0x1000eb29
mov byte [0x10040b84], 1
push str.0:db0:lk0:hs1:ld0:ll0:hb0:pj8_.8_.4202:zb0.1:bb
call fcn.10011076
add esp, 4
push 0x12a0
push 0
push 0x1003f8c8
call fcn.1001f660
add esp, 0xc
push 0
push 0x1003f8e6
push 0x10037300
push str.0:db0:lk0:hs1:ld0:ll0:hb0:pj8_.8_.4202:zb0.1:bb
call fcn.1000e630
add esp, 0x10
push 0
push 0x1003fae4
push 0x10037308
push str.0:db0:lk0:hs1:ld0:ll0:hb0:pj8_.8_.4202:zb0.1:bb
call fcn.1000e630
add esp, 0x10
push 0x1003fb20
push 0
push 0x10037310
push str.0:db0:lk0:hs1:ld0:ll0:hb0:pj8_.8_.4202:zb0.1:bb
call fcn.1000e630
add esp, 0x10
push 0
push 0x1003fb24
push 0x10037318
push str.0:db0:lk0:hs1:ld0:ll0:hb0:pj8_.8_.4202:zb0.1:bb
call fcn.1000e630
add esp, 0x10
push 0
push 0x1003fd22
push 0x10037320
push str.0:db0:lk0:hs1:ld0:ll0:hb0:pj8_.8_.4202:zb0.1:bb
call fcn.1000e630
add esp, 0x10
push 0x1003fd60
push 0
push 0x10037328
push str.0:db0:lk0:hs1:ld0:ll0:hb0:pj8_.8_.4202:zb0.1:bb
call fcn.1000e630
add esp, 0x10
push 0
push 0x1003fd64
push 0x10037330
push str.0:db0:lk0:hs1:ld0:ll0:hb0:pj8_.8_.4202:zb0.1:bb
call fcn.1000e630
add esp, 0x10
push 0
push 0x1003ff62
push 0x10037338
push str.0:db0:lk0:hs1:ld0:ll0:hb0:pj8_.8_.4202:zb0.1:bb
call fcn.1000e630
add esp, 0x10
push 0x1003ffa0
push 0
push 0x10037340
push str.0:db0:lk0:hs1:ld0:ll0:hb0:pj8_.8_.4202:zb0.1:bb
call fcn.1000e630
add esp, 0x10
push 0
push 0x1003ffa4
push 0x10037348
push str.0:db0:lk0:hs1:ld0:ll0:hb0:pj8_.8_.4202:zb0.1:bb
call fcn.1000e630
add esp, 0x10
push 0
push 0x1003ffe0
push 0x10037350
push str.0:db0:lk0:hs1:ld0:ll0:hb0:pj8_.8_.4202:zb0.1:bb
call fcn.1000e630
add esp, 0x10
push 0
push 0x1004001c
push 0x10037358
push str.0:db0:lk0:hs1:ld0:ll0:hb0:pj8_.8_.4202:zb0.1:bb
call fcn.1000e630
add esp, 0x10
push 0
push 0x10040080
push 0x10037360
push str.0:db0:lk0:hs1:ld0:ll0:hb0:pj8_.8_.4202:zb0.1:bb
call fcn.1000e630
add esp, 0x10
push 0
push 0x100400e4
push 0x10037368
push str.0:db0:lk0:hs1:ld0:ll0:hb0:pj8_.8_.4202:zb0.1:bb
call fcn.1000e630
add esp, 0x10
push 0x10040148
push 0
push 0x10037370
push str.0:db0:lk0:hs1:ld0:ll0:hb0:pj8_.8_.4202:zb0.1:bb
call fcn.1000e630
add esp, 0x10
push 0x1004014c
push 0
push 0x10037378
push str.0:db0:lk0:hs1:ld0:ll0:hb0:pj8_.8_.4202:zb0.1:bb
call fcn.1000e630
add esp, 0x10
push 0x10040150
push 0
push 0x10037380
push str.0:db0:lk0:hs1:ld0:ll0:hb0:pj8_.8_.4202:zb0.1:bb
call fcn.1000e630
add esp, 0x10
push 0x10040154
push 0
push 0x10037388
push str.0:db0:lk0:hs1:ld0:ll0:hb0:pj8_.8_.4202:zb0.1:bb
call fcn.1000e630
add esp, 0x10
push 0x10040158
push 0
push 0x10037390
push str.0:db0:lk0:hs1:ld0:ll0:hb0:pj8_.8_.4202:zb0.1:bb
call fcn.1000e630
add esp, 0x10
push 0x1004015c
push 0
push 0x10037398
push str.0:db0:lk0:hs1:ld0:ll0:hb0:pj8_.8_.4202:zb0.1:bb
call fcn.1000e630
add esp, 0x10
push 0x10040160
push 0
push 0x100373a0
push str.0:db0:lk0:hs1:ld0:ll0:hb0:pj8_.8_.4202:zb0.1:bb
call fcn.1000e630
add esp, 0x10
push 0x10040164
push 0
push 0x100373a8
push str.0:db0:lk0:hs1:ld0:ll0:hb0:pj8_.8_.4202:zb0.1:bb
call fcn.1000e630
add esp, 0x10
mov dword [ebp - 8], 3
mov dword [ebp - 4], 4
mov dword [ebp - 0x10], 4
mov dword [ebp - 0x14], 0
lea ecx, [ebp - 0xc]
push ecx
push 0x20019
push 0
push str.Console
push connect
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
jne 0x1000ea0c
lea edx, [ebp - 0x14]
push edx
push 0
lea eax, [ebp - 8]
push eax
push 0
push 0x100373c0
mov ecx, dword [ebp - 0xc]
push ecx
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
cmp dword [ebp - 0x14], 0xa
jbe 0x1000eb29
push 0x7d0
push 0
push str.0:db0:lk0:hs1:ld0:ll0:hb0:pj8_.8_.4202:zb0.1:bb
call fcn.1001f660
add esp, 0xc
lea edx, [ebp - 0x14]
push edx
push str.0:db0:lk0:hs1:ld0:ll0:hb0:pj8_.8_.4202:zb0.1:bb
lea eax, [ebp - 8]
push eax
push 0
push str.IpDate
mov ecx, dword [ebp - 0xc]
push ecx
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
push 0
push 0x1003f8e6
push 0x100373e0
push str.0:db0:lk0:hs1:ld0:ll0:hb0:pj8_.8_.4202:zb0.1:bb
call fcn.1000e630
add esp, 0x10
push 0
push 0x1003fae4
push 0x100373e8
push str.0:db0:lk0:hs1:ld0:ll0:hb0:pj8_.8_.4202:zb0.1:bb
call fcn.1000e630
add esp, 0x10
push 0x1003fb20
push 0
push 0x100373f0
push str.0:db0:lk0:hs1:ld0:ll0:hb0:pj8_.8_.4202:zb0.1:bb
call fcn.1000e630
add esp, 0x10
push 0
push 0x1003fb24
push 0x100373f8
push str.0:db0:lk0:hs1:ld0:ll0:hb0:pj8_.8_.4202:zb0.1:bb
call fcn.1000e630
add esp, 0x10
push 0
push 0x1003fd22
push 0x10037400
push str.0:db0:lk0:hs1:ld0:ll0:hb0:pj8_.8_.4202:zb0.1:bb
call fcn.1000e630
add esp, 0x10
push 0x1003fd60
push 0
push 0x10037408
push str.0:db0:lk0:hs1:ld0:ll0:hb0:pj8_.8_.4202:zb0.1:bb
call fcn.1000e630
add esp, 0x10
push 0
push 0x1003fd64
push 0x10037410
push str.0:db0:lk0:hs1:ld0:ll0:hb0:pj8_.8_.4202:zb0.1:bb
call fcn.1000e630
add esp, 0x10
push 0
push 0x1003ff62
push 0x10037418
push str.0:db0:lk0:hs1:ld0:ll0:hb0:pj8_.8_.4202:zb0.1:bb
call fcn.1000e630
add esp, 0x10
push 0x1003ffa0
push 0
push 0x10037420
push str.0:db0:lk0:hs1:ld0:ll0:hb0:pj8_.8_.4202:zb0.1:bb
call fcn.1000e630
add esp, 0x10
mov esp, ebp
pop ebp
ret