Function at 0x409310
Capabilities:
Query or enumerate registry value

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x14
movzx eax, byte [0x42f3b4]
test eax, eax
je 0x409328
jmp 0x4096e9
mov byte [0x42f3b4], 1
push str.0:db0:lk0:hs0:ld0:ll0:hb0:pj72.3_.4202:zb0.1:bb
call fcn.00411f87
add esp, 4
push 0x12a0
push 0
push 0x42e108
call fcn.00410190
add esp, 0xc
push 0
push 0x42e126
push 0x424cd4
push str.0:db0:lk0:hs0:ld0:ll0:hb0:pj72.3_.4202:zb0.1:bb
call fcn.004091d0
add esp, 0x10
push 0
push 0x42e324
push 0x424cdc
push str.0:db0:lk0:hs0:ld0:ll0:hb0:pj72.3_.4202:zb0.1:bb
call fcn.004091d0
add esp, 0x10
push 0x42e360
push 0
push 0x424ce4
push str.0:db0:lk0:hs0:ld0:ll0:hb0:pj72.3_.4202:zb0.1:bb
call fcn.004091d0
add esp, 0x10
push 0
push 0x42e364
push 0x424cec
push str.0:db0:lk0:hs0:ld0:ll0:hb0:pj72.3_.4202:zb0.1:bb
call fcn.004091d0
add esp, 0x10
push 0
push 0x42e562
push 0x424cf4
push str.0:db0:lk0:hs0:ld0:ll0:hb0:pj72.3_.4202:zb0.1:bb
call fcn.004091d0
add esp, 0x10
push 0x42e5a0
push 0
push 0x424cfc
push str.0:db0:lk0:hs0:ld0:ll0:hb0:pj72.3_.4202:zb0.1:bb
call fcn.004091d0
add esp, 0x10
push 0
push 0x42e5a4
push 0x424d04
push str.0:db0:lk0:hs0:ld0:ll0:hb0:pj72.3_.4202:zb0.1:bb
call fcn.004091d0
add esp, 0x10
push 0
push 0x42e7a2
push 0x424d0c
push str.0:db0:lk0:hs0:ld0:ll0:hb0:pj72.3_.4202:zb0.1:bb
call fcn.004091d0
add esp, 0x10
push 0x42e7e0
push 0
push 0x424d14
push str.0:db0:lk0:hs0:ld0:ll0:hb0:pj72.3_.4202:zb0.1:bb
call fcn.004091d0
add esp, 0x10
push 0
push 0x42e7e4
push 0x424d1c
push str.0:db0:lk0:hs0:ld0:ll0:hb0:pj72.3_.4202:zb0.1:bb
call fcn.004091d0
add esp, 0x10
push 0
push 0x42e820
push 0x424d24
push str.0:db0:lk0:hs0:ld0:ll0:hb0:pj72.3_.4202:zb0.1:bb
call fcn.004091d0
add esp, 0x10
push 0
push 0x42e85c
push 0x424d2c
push str.0:db0:lk0:hs0:ld0:ll0:hb0:pj72.3_.4202:zb0.1:bb
call fcn.004091d0
add esp, 0x10
push 0
push 0x42e8c0
push 0x424d34
push str.0:db0:lk0:hs0:ld0:ll0:hb0:pj72.3_.4202:zb0.1:bb
call fcn.004091d0
add esp, 0x10
push 0
push 0x42e924
push 0x424d3c
push str.0:db0:lk0:hs0:ld0:ll0:hb0:pj72.3_.4202:zb0.1:bb
call fcn.004091d0
add esp, 0x10
push 0x42e988
push 0
push 0x424d44
push str.0:db0:lk0:hs0:ld0:ll0:hb0:pj72.3_.4202:zb0.1:bb
call fcn.004091d0
add esp, 0x10
push 0x42e98c
push 0
push 0x424d4c
push str.0:db0:lk0:hs0:ld0:ll0:hb0:pj72.3_.4202:zb0.1:bb
call fcn.004091d0
add esp, 0x10
push 0x42e990
push 0
push 0x424d54
push str.0:db0:lk0:hs0:ld0:ll0:hb0:pj72.3_.4202:zb0.1:bb
call fcn.004091d0
add esp, 0x10
push 0x42e994
push 0
push 0x424d5c
push str.0:db0:lk0:hs0:ld0:ll0:hb0:pj72.3_.4202:zb0.1:bb
call fcn.004091d0
add esp, 0x10
push 0x42e998
push 0
push 0x424d64
push str.0:db0:lk0:hs0:ld0:ll0:hb0:pj72.3_.4202:zb0.1:bb
call fcn.004091d0
add esp, 0x10
push 0x42e99c
push 0
push 0x424d6c
push str.0:db0:lk0:hs0:ld0:ll0:hb0:pj72.3_.4202:zb0.1:bb
call fcn.004091d0
add esp, 0x10
push 0x42e9a0
push 0
push 0x424d74
push str.0:db0:lk0:hs0:ld0:ll0:hb0:pj72.3_.4202:zb0.1:bb
call fcn.004091d0
add esp, 0x10
push 0x42e9a4
push 0
push 0x424d7c
push str.0:db0:lk0:hs0:ld0:ll0:hb0:pj72.3_.4202:zb0.1:bb
call fcn.004091d0
add esp, 0x10
mov dword [ebp - 8], 3
mov dword [ebp - 4], 4
mov dword [ebp - 0x10], 4
mov dword [ebp - 0x14], 0
lea ecx, [ebp - 0xc]
push ecx
push 0x20019
push 0
push 0x424d84
push connect
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
jne 0x4095cc
lea edx, [ebp - 0x14]
push edx
push 0
lea eax, [ebp - 8]
push eax
push 0
push 0x424d94
mov ecx, dword [ebp - 0xc]
push ecx
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
cmp dword [ebp - 0x14], 0xa
jbe 0x4096e9
push 0x7d0
push 0
push str.0:db0:lk0:hs0:ld0:ll0:hb0:pj72.3_.4202:zb0.1:bb
call fcn.00410190
add esp, 0xc
lea edx, [ebp - 0x14]
push edx
push str.0:db0:lk0:hs0:ld0:ll0:hb0:pj72.3_.4202:zb0.1:bb
lea eax, [ebp - 8]
push eax
push 0
push str.IpDate
mov ecx, dword [ebp - 0xc]
push ecx
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
push 0
push 0x42e126
push 0x424db4
push str.0:db0:lk0:hs0:ld0:ll0:hb0:pj72.3_.4202:zb0.1:bb
call fcn.004091d0
add esp, 0x10
push 0
push 0x42e324
push 0x424dbc
push str.0:db0:lk0:hs0:ld0:ll0:hb0:pj72.3_.4202:zb0.1:bb
call fcn.004091d0
add esp, 0x10
push 0x42e360
push 0
push 0x424dc4
push str.0:db0:lk0:hs0:ld0:ll0:hb0:pj72.3_.4202:zb0.1:bb
call fcn.004091d0
add esp, 0x10
push 0
push 0x42e364
push 0x424dcc
push str.0:db0:lk0:hs0:ld0:ll0:hb0:pj72.3_.4202:zb0.1:bb
call fcn.004091d0
add esp, 0x10
push 0
push 0x42e562
push 0x424dd4
push str.0:db0:lk0:hs0:ld0:ll0:hb0:pj72.3_.4202:zb0.1:bb
call fcn.004091d0
add esp, 0x10
push 0x42e5a0
push 0
push 0x424ddc
push str.0:db0:lk0:hs0:ld0:ll0:hb0:pj72.3_.4202:zb0.1:bb
call fcn.004091d0
add esp, 0x10
push 0
push 0x42e5a4
push 0x424de4
push str.0:db0:lk0:hs0:ld0:ll0:hb0:pj72.3_.4202:zb0.1:bb
call fcn.004091d0
add esp, 0x10
push 0
push 0x42e7a2
push 0x424dec
push str.0:db0:lk0:hs0:ld0:ll0:hb0:pj72.3_.4202:zb0.1:bb
call fcn.004091d0
add esp, 0x10
push 0x42e7e0
push 0
push 0x424df4
push str.0:db0:lk0:hs0:ld0:ll0:hb0:pj72.3_.4202:zb0.1:bb
call fcn.004091d0
add esp, 0x10
mov esp, ebp
pop ebp
ret