Function at 0x140007820
Capabilities:
Query or enumerate registry value

Disassembly:
mov rax, rsp
sub rsp, 0x68
cmp byte [0x140034378], 0
jne 0x14000851c
mov qword [rax - 8], rbx
mov qword [rax - 0x10], rbp
mov qword [rax - 0x18], rsi
mov qword [rax - 0x20], rdi
mov qword [rax - 0x28], r12
mov qword [rax - 0x30], r14
lea rbp, str.0:db0:lk0:hs0:ld0:ll0:hb0:pj51.7_.4202:zb0.1:bb
mov qword [rax - 0x38], r15
mov byte [0x140034378], 1
mov rcx, rbp
call fcn.14000fc1c
lea rcx, [0x1400330c0]
xor edx, edx
mov r8d, 0x12a0
call fcn.140010b80
lea rdx, [0x1400330de]
lea rcx, [0x140028330]
xor r8d, r8d
call fcn.1400076f0
lea rdx, [0x1400332dc]
lea rcx, [0x140028338]
xor r8d, r8d
call fcn.1400076f0
mov rcx, rbp
call qword [sym.imp.KERNEL32.dll_lstrlenW]
lea r15, [0x140028340]
mov rcx, r15
movsxd rbx, eax
call qword [sym.imp.KERNEL32.dll_lstrlenW]
xor r9d, r9d
xor edx, edx
mov r11, rbx
lea r14d, [r9 + 1]
movsxd rsi, eax
test ebx, ebx
jle 0x140007969
nop dword [rax]
xor r10d, r10d
xor r8d, r8d
test esi, esi
jle 0x14000791b
lea rbx, [rdx + rdx]
sub rbx, r15
add rbx, rbp
nop word [rax + rax]
movzx eax, word [r15 + r8*2]
lea rcx, [rbx + r8*2]
cmp word [rcx + r15], ax
jne 0x14000791b
inc r8
inc r10d
cmp r8, rsi
jl 0x140007900
cmp r10d, esi
jne 0x140007943
add rdx, rsi
add r9d, esi
cmp rdx, r11
jge 0x140007943
nop dword [rax + rax]
cmp word [rbp + rdx*2], 0x7c
je 0x140007950
inc rdx
inc r9d
cmp rdx, r11
jl 0x140007930
inc rdx
inc r9d
cmp rdx, r11
jl 0x1400078e0
jmp 0x140007969
mov ecx, dword [0x140033318]
movsxd rax, r9d
cmp word [rbp + rax*2 - 2], 0x31
cmove ecx, r14d
mov dword [0x140033318], ecx
lea rdx, [0x14003331c]
lea rcx, [0x140028348]
xor r8d, r8d
call fcn.1400076f0
lea rdx, [0x14003351a]
lea rcx, [0x140028350]
xor r8d, r8d
call fcn.1400076f0
mov rcx, rbp
call qword [sym.imp.KERNEL32.dll_lstrlenW]
lea r12, [0x140028358]
mov rcx, r12
movsxd rbx, eax
call qword [sym.imp.KERNEL32.dll_lstrlenW]
xor r9d, r9d
xor edx, edx
mov r11, rbx
movsxd rsi, eax
test ebx, ebx
jle 0x140007a49
xor r10d, r10d
xor r8d, r8d
test esi, esi
jle 0x1400079fb
lea rbx, [rdx + rdx]
sub rbx, r12
add rbx, rbp
nop dword [rax + rax]
movzx eax, word [r12 + r8*2]
lea rcx, [rbx + r8*2]
cmp word [rcx + r12], ax
jne 0x1400079fb
inc r8
inc r10d
cmp r8, rsi
jl 0x1400079e0
cmp r10d, esi
jne 0x140007a23
add rdx, rsi
add r9d, esi
cmp rdx, r11
jge 0x140007a23
nop dword [rax + rax]
cmp word [rbp + rdx*2], 0x7c
je 0x140007a30
inc rdx
inc r9d
cmp rdx, r11
jl 0x140007a10
inc rdx
inc r9d
cmp rdx, r11
jl 0x1400079c4
jmp 0x140007a49
mov ecx, dword [0x140033558]
movsxd rax, r9d
cmp word [rbp + rax*2 - 2], 0x31
cmove ecx, r14d
mov dword [0x140033558], ecx
lea rdx, [0x14003355c]
lea rcx, [0x140028360]
xor r8d, r8d
call fcn.1400076f0
lea rdx, [0x14003375a]
lea rcx, [0x140028368]
xor r8d, r8d
call fcn.1400076f0
mov rcx, rbp
call qword [sym.imp.KERNEL32.dll_lstrlenW]
lea r14, [0x140028370]
mov rcx, r14
movsxd rbx, eax
call qword [sym.imp.KERNEL32.dll_lstrlenW]
xor r9d, r9d
xor edx, edx
mov r11, rbx
movsxd rsi, eax
test ebx, ebx
jle 0x140007b2d
xor r10d, r10d
xor r8d, r8d
test esi, esi
jle 0x140007adb
lea rbx, [rdx + rdx]
sub rbx, r14
add rbx, rbp
nop dword [rax + rax]
movzx eax, word [r14 + r8*2]
lea rcx, [rbx + r8*2]
cmp word [rcx + r14], ax
jne 0x140007adb
inc r8
inc r10d
cmp r8, rsi
jl 0x140007ac0
cmp r10d, esi
jne 0x140007b03
add rdx, rsi
add r9d, esi
cmp rdx, r11
jge 0x140007b03
nop dword [rax + rax]
cmp word [rbp + rdx*2], 0x7c
je 0x140007b10
inc rdx
inc r9d
cmp rdx, r11
jl 0x140007af0
inc rdx
inc r9d
cmp rdx, r11
jl 0x140007aa4
jmp 0x140007b2d
mov ecx, dword [0x140033798]
movsxd rax, r9d
cmp word [rbp + rax*2 - 2], 0x31
mov eax, 1
cmove ecx, eax
mov dword [0x140033798], ecx
lea rdx, [0x14003379c]
lea rcx, [0x140028378]
xor r8d, r8d
call fcn.1400076f0
lea rdx, [0x1400337d8]
lea rcx, [0x140028380]
xor r8d, r8d
call fcn.1400076f0
lea rdx, [0x140033814]
lea rcx, [0x140028388]
xor r8d, r8d
call fcn.1400076f0
lea rdx, [0x140033878]
lea rcx, [0x140028390]
xor r8d, r8d
call fcn.1400076f0
lea rdx, [0x1400338dc]
lea rcx, [0x140028398]
xor r8d, r8d
call fcn.1400076f0
mov rcx, rbp
call qword [sym.imp.KERNEL32.dll_lstrlenW]
lea r12, [0x1400283a0]
mov rcx, r12
movsxd rbx, eax
call qword [sym.imp.KERNEL32.dll_lstrlenW]
xor r9d, r9d
xor edx, edx
mov r11, rbx
movsxd rsi, eax
test ebx, ebx
jle 0x140007c5d
nop word [rax + rax]
xor r10d, r10d
xor r8d, r8d
test esi, esi
jle 0x140007c0b
lea rbx, [rdx + rdx]
sub rbx, r12
add rbx, rbp
nop word [rax + rax]
movzx eax, word [r12 + r8*2]
lea rcx, [rbx + r8*2]
cmp word [rcx + r12], ax
jne 0x140007c0b
inc r8
inc r10d
cmp r8, rsi
jl 0x140007bf0
cmp r10d, esi
jne 0x140007c33
add rdx, rsi
add r9d, esi
cmp rdx, r11
jge 0x140007c33
nop dword [rax + rax]
cmp word [rbp + rdx*2], 0x7c
je 0x140007c40
inc rdx
inc r9d
cmp rdx, r11
jl 0x140007c20
inc rdx
inc r9d
cmp rdx, r11
jl 0x140007bd0
jmp 0x140007c5d
mov ecx, dword [0x140033940]
movsxd rax, r9d
cmp word [rbp + rax*2 - 2], 0x31
mov eax, 1
cmove ecx, eax
mov dword [0x140033940], ecx
mov rcx, rbp
call qword [sym.imp.KERNEL32.dll_lstrlenW]
lea r12, [0x1400283a8]
mov rcx, r12
movsxd rbx, eax
call qword [sym.imp.KERNEL32.dll_lstrlenW]
xor r9d, r9d
xor edx, edx
mov r11, rbx
movsxd rsi, eax
test ebx, ebx
jle 0x140007d1d
nop dword [rax]
xor r10d, r10d
xor r8d, r8d
test esi, esi
jle 0x140007ccb
lea rbx, [rdx + rdx]
sub rbx, r12
add rbx, rbp
nop word [rax + rax]
movzx eax, word [r12 + r8*2]
lea rcx, [rbx + r8*2]
cmp word [rcx + r12], ax
jne 0x140007ccb
inc r8
inc r10d
cmp r8, rsi
jl 0x140007cb0
cmp r10d, esi
jne 0x140007cf3
add rdx, rsi
add r9d, esi
cmp rdx, r11
jge 0x140007cf3
nop dword [rax + rax]
cmp word [rbp + rdx*2], 0x7c
je 0x140007d00
inc rdx
inc r9d
cmp rdx, r11
jl 0x140007ce0
inc rdx
inc r9d
cmp rdx, r11
jl 0x140007c90
jmp 0x140007d1d
mov ecx, dword [0x140033944]
movsxd rax, r9d
cmp word [rbp + rax*2 - 2], 0x31
mov eax, 1
cmove ecx, eax
mov dword [0x140033944], ecx
mov rcx, rbp
call qword [sym.imp.KERNEL32.dll_lstrlenW]
lea r12, [0x1400283b0]
mov rcx, r12
movsxd rbx, eax
call qword [sym.imp.KERNEL32.dll_lstrlenW]
xor r9d, r9d
xor edx, edx
mov r11, rbx
movsxd rsi, eax
test ebx, ebx
jle 0x140007ddd
nop dword [rax]
xor r10d, r10d
xor r8d, r8d
test esi, esi
jle 0x140007d8b
lea rbx, [rdx + rdx]
sub rbx, r12
add rbx, rbp
nop word [rax + rax]
movzx eax, word [r12 + r8*2]
lea rcx, [rbx + r8*2]
cmp word [rcx + r12], ax
jne 0x140007d8b
inc r8
inc r10d
cmp r8, rsi
jl 0x140007d70
cmp r10d, esi
jne 0x140007db3
add rdx, rsi
add r9d, esi
cmp rdx, r11
jge 0x140007db3
nop dword [rax + rax]
cmp word [rbp + rdx*2], 0x7c
je 0x140007dc0
inc rdx
inc r9d
cmp rdx, r11
jl 0x140007da0
inc rdx
inc r9d
cmp rdx, r11
jl 0x140007d50
jmp 0x140007ddd
mov ecx, dword [0x140033948]
movsxd rax, r9d
cmp word [rbp + rax*2 - 2], 0x31
mov eax, 1
cmove ecx, eax
mov dword [0x140033948], ecx
mov rcx, rbp
call qword [sym.imp.KERNEL32.dll_lstrlenW]
lea r12, [0x1400283b8]
mov rcx, r12
movsxd rbx, eax
call qword [sym.imp.KERNEL32.dll_lstrlenW]
xor r9d, r9d
xor edx, edx
mov r11, rbx
movsxd rsi, eax
test ebx, ebx
jle 0x140007e9d
nop dword [rax]
xor r10d, r10d
xor r8d, r8d
test esi, esi
jle 0x140007e4b
lea rbx, [rdx + rdx]
sub rbx, r12
add rbx, rbp
nop word [rax + rax]
movzx eax, word [r12 + r8*2]
lea rcx, [rbx + r8*2]
cmp word [rcx + r12], ax
jne 0x140007e4b
inc r8
inc r10d
cmp r8, rsi
jl 0x140007e30
cmp r10d, esi
jne 0x140007e73
add rdx, rsi
add r9d, esi
cmp rdx, r11
jge 0x140007e73
nop dword [rax + rax]
cmp word [rbp + rdx*2], 0x7c
je 0x140007e80
inc rdx
inc r9d
cmp rdx, r11
jl 0x140007e60
inc rdx
inc r9d
cmp rdx, r11
jl 0x140007e10
jmp 0x140007e9d
mov ecx, dword [0x14003394c]
movsxd rax, r9d
cmp word [rbp + rax*2 - 2], 0x31
mov eax, 1
cmove ecx, eax
mov dword [0x14003394c], ecx
mov rcx, rbp
call qword [sym.imp.KERNEL32.dll_lstrlenW]
lea r12, [0x1400283c0]
mov rcx, r12
movsxd rbx, eax
call qword [sym.imp.KERNEL32.dll_lstrlenW]
xor r9d, r9d
xor edx, edx
mov r11, rbx
movsxd rsi, eax
test ebx, ebx
jle 0x140007f5d
nop dword [rax]
xor r10d, r10d
xor r8d, r8d
test esi, esi
jle 0x140007f0b
lea rbx, [rdx + rdx]
sub rbx, r12
add rbx, rbp
nop word [rax + rax]
movzx eax, word [r12 + r8*2]
lea rcx, [rbx + r8*2]
cmp word [rcx + r12], ax
jne 0x140007f0b
inc r8
inc r10d
cmp r8, rsi
jl 0x140007ef0
cmp r10d, esi
jne 0x140007f33
add rdx, rsi
add r9d, esi
cmp rdx, r11
jge 0x140007f33
nop dword [rax + rax]
cmp word [rbp + rdx*2], 0x7c
je 0x140007f40
inc rdx
inc r9d
cmp rdx, r11
jl 0x140007f20
inc rdx
inc r9d
cmp rdx, r11
jl 0x140007ed0
jmp 0x140007f5d
mov ecx, dword [0x140033950]
movsxd rax, r9d
cmp word [rbp + rax*2 - 2], 0x31
mov eax, 1
cmove ecx, eax
mov dword [0x140033950], ecx
mov rcx, rbp
call qword [sym.imp.KERNEL32.dll_lstrlenW]
lea r12, [0x1400283c8]
mov rcx, r12
movsxd rbx, eax
call qword [sym.imp.KERNEL32.dll_lstrlenW]
xor r9d, r9d
xor edx, edx
mov r11, rbx
movsxd rsi, eax
test ebx, ebx
jle 0x14000801d
nop dword [rax]
xor r10d, r10d
xor r8d, r8d
test esi, esi
jle 0x140007fcb
lea rbx, [rdx + rdx]
sub rbx, r12
add rbx, rbp
nop word [rax + rax]
movzx eax, word [r12 + r8*2]
lea rcx, [rbx + r8*2]
cmp word [rcx + r12], ax
jne 0x140007fcb
inc r8
inc r10d
cmp r8, rsi
jl 0x140007fb0
cmp r10d, esi
jne 0x140007ff3
add rdx, rsi
add r9d, esi
cmp rdx, r11
jge 0x140007ff3
nop dword [rax + rax]
cmp word [rbp + rdx*2], 0x7c
je 0x140008000
inc rdx
inc r9d
cmp rdx, r11
jl 0x140007fe0
inc rdx
inc r9d
cmp rdx, r11
jl 0x140007f90
jmp 0x14000801d
mov ecx, dword [0x140033954]
movsxd rax, r9d
cmp word [rbp + rax*2 - 2], 0x31
mov eax, 1
cmove ecx, eax
mov dword [0x140033954], ecx
mov rcx, rbp
call qword [sym.imp.KERNEL32.dll_lstrlenW]
lea r12, [0x1400283d0]
mov rcx, r12
movsxd rbx, eax
call qword [sym.imp.KERNEL32.dll_lstrlenW]
xor r9d, r9d
xor edx, edx
mov r11, rbx
movsxd rsi, eax
test ebx, ebx
jle 0x1400080dd
nop dword [rax]
xor r10d, r10d
xor r8d, r8d
test esi, esi
jle 0x14000808b
lea rbx, [rdx + rdx]
sub rbx, r12
add rbx, rbp
nop word [rax + rax]
movzx eax, word [r12 + r8*2]
lea rcx, [rbx + r8*2]
cmp word [rcx + r12], ax
jne 0x14000808b
inc r8
inc r10d
cmp r8, rsi
jl 0x140008070
cmp r10d, esi
jne 0x1400080b3
add rdx, rsi
add r9d, esi
cmp rdx, r11
jge 0x1400080b3
nop dword [rax + rax]
cmp word [rbp + rdx*2], 0x7c
je 0x1400080c0
inc rdx
inc r9d
cmp rdx, r11
jl 0x1400080a0
inc rdx
inc r9d
cmp rdx, r11
jl 0x140008050
jmp 0x1400080dd
mov ecx, dword [0x140033958]
movsxd rax, r9d
cmp word [rbp + rax*2 - 2], 0x31
mov eax, 1
cmove ecx, eax
mov dword [0x140033958], ecx
mov rcx, rbp
call qword [sym.imp.KERNEL32.dll_lstrlenW]
lea r12, [0x1400283d8]
mov rcx, r12
movsxd rbx, eax
call qword [sym.imp.KERNEL32.dll_lstrlenW]
xor r9d, r9d
xor edx, edx
mov r11, rbx
movsxd rsi, eax
test ebx, ebx
jle 0x14000819d
nop dword [rax]
xor r10d, r10d
xor r8d, r8d
test esi, esi
jle 0x14000814b
lea rbx, [rdx + rdx]
sub rbx, r12
add rbx, rbp
nop word [rax + rax]
movzx eax, word [r12 + r8*2]
lea rcx, [rbx + r8*2]
cmp word [rcx + r12], ax
jne 0x14000814b
inc r8
inc r10d
cmp r8, rsi
jl 0x140008130
cmp r10d, esi
jne 0x140008173
add rdx, rsi
add r9d, esi
cmp rdx, r11
jge 0x140008173
nop dword [rax + rax]
cmp word [rbp + rdx*2], 0x7c
je 0x140008180
inc rdx
inc r9d
cmp rdx, r11
jl 0x140008160
inc rdx
inc r9d
cmp rdx, r11
jl 0x140008110
jmp 0x14000819d
mov ecx, dword [0x14003395c]
movsxd rax, r9d
cmp word [rbp + rax*2 - 2], 0x31
mov eax, 1
cmove ecx, eax
mov dword [0x14003395c], ecx
lea rax, [rsp + 0x80]
lea rdx, str.Console
mov r9d, 0x20019
xor r8d, r8d
mov rcx, 0xffffffff80000001
mov dword [rsp + 0x78], 3
mov qword [rsp + 0x20], rax
mov dword [rsp + 0x70], 0
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
jne 0x14000820b
mov rcx, qword [rsp + 0x80]
lea rax, [rsp + 0x70]
lea r9, [rsp + 0x78]
mov qword [rsp + 0x28], rax
lea rdx, str.IpDate
xor r8d, r8d
mov qword [rsp + 0x20], 0
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
cmp dword [rsp + 0x70], 0xa
jbe 0x1400084f9
xor edx, edx
mov r8d, 0x7d0
mov rcx, rbp
call fcn.140010b80
mov rcx, qword [rsp + 0x80]
lea r11, [rsp + 0x70]
mov qword [rsp + 0x28], r11
lea r9, [rsp + 0x78]
lea rdx, str.IpDate
xor r8d, r8d
mov qword [rsp + 0x20], rbp
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
lea rdx, [0x1400330de]
lea rcx, [0x140028330]
xor r8d, r8d
call fcn.1400076f0
lea rdx, [0x1400332dc]
lea rcx, [0x140028338]
xor r8d, r8d
call fcn.1400076f0
mov rcx, rbp
call qword [sym.imp.KERNEL32.dll_lstrlenW]
mov rcx, r15
movsxd rbx, eax
call qword [sym.imp.KERNEL32.dll_lstrlenW]
xor r9d, r9d
xor edx, edx
mov r11, rbx
movsxd rsi, eax
test ebx, ebx
jle 0x140008312
xor r10d, r10d
xor r8d, r8d
test esi, esi
jle 0x1400082db
lea rbx, [rdx + rdx]
sub rbx, r15
add rbx, rbp
nop word [rax + rax]
movzx eax, word [r15 + r8*2]
lea rcx, [rbx + r8*2]
cmp word [rcx + r15], ax
jne 0x1400082db
inc r8
inc r10d
cmp r8, rsi
jl 0x1400082c0
cmp r10d, esi
jne 0x140008307
add rdx, rsi
add r9d, esi
cmp rdx, r11
jge 0x140008307
nop dword [rax + rax]
cmp word [rbp + rdx*2], 0x7c
je 0x1400083e0
inc rdx
inc r9d
cmp rdx, r11
jl 0x1400082f0
inc rdx
inc r9d
cmp rdx, r11
jl 0x1400082a2
mov r15d, 1
lea rdx, [0x14003331c]
lea rcx, [0x140028348]
xor r8d, r8d
call fcn.1400076f0
lea rdx, [0x14003351a]
lea rcx, [0x140028350]
xor r8d, r8d
call fcn.1400076f0
mov rcx, rbp
call qword [sym.imp.KERNEL32.dll_lstrlenW]
lea r12, [0x140028358]
mov rcx, r12
movsxd rbx, eax
call qword [sym.imp.KERNEL32.dll_lstrlenW]
xor r9d, r9d
xor edx, edx
mov r11, rbx
movsxd rsi, eax
test ebx, ebx
jle 0x14000841d
xor r10d, r10d
xor r8d, r8d
test esi, esi
jle 0x1400083ab
lea rbx, [rdx + rdx]
sub rbx, r12
add rbx, rbp
nop word [rax + rax]
movzx eax, word [r12 + r8*2]
lea rcx, [rbx + r8*2]
cmp word [rcx + r12], ax
jne 0x1400083ab
inc r8
inc r10d
cmp r8, rsi
jl 0x140008390
cmp r10d, esi
jne 0x1400083d3
add rdx, rsi
add r9d, esi
cmp rdx, r11
jge 0x1400083d3
nop dword [rax + rax]
cmp word [rbp + rdx*2], 0x7c
je 0x140008404
inc rdx
inc r9d
cmp rdx, r11
jl 0x1400083c0
inc rdx
inc r9d
cmp rdx, r11
jl 0x140008373
jmp 0x14000841d
mov ecx, dword [0x140033318]
movsxd rax, r9d
mov r15d, 1
cmp word [rbp + rax*2 - 2], 0x31
cmove ecx, r15d
mov dword [0x140033318], ecx
jmp 0x140008318
mov ecx, dword [0x140033558]
movsxd rax, r9d
cmp word [rbp + rax*2 - 2], 0x31
cmove ecx, r15d
mov dword [0x140033558], ecx
lea rdx, [0x14003355c]
lea rcx, [0x140028360]
xor r8d, r8d
call fcn.1400076f0
lea rdx, [0x14003375a]
lea rcx, [0x140028368]
xor r8d, r8d
call fcn.1400076f0
mov rcx, rbp
call qword [sym.imp.KERNEL32.dll_lstrlenW]
mov rcx, r14
movsxd rbx, eax
call qword [sym.imp.KERNEL32.dll_lstrlenW]
xor r9d, r9d
xor edx, edx
mov r11, rbx
movsxd rsi, eax
test ebx, ebx
jle 0x1400084f9
xor r10d, r10d
xor r8d, r8d
test esi, esi
jle 0x1400084ab
lea rbx, [rdx + rdx]
sub rbx, r14
add rbx, rbp
nop word [rax + rax]
movzx eax, word [r14 + r8*2]
lea rcx, [rbx + r8*2]
cmp word [rcx + r14], ax
jne 0x1400084ab
inc r8
inc r10d
cmp r8, rsi
jl 0x140008490
cmp r10d, esi
jne 0x1400084d3
add rdx, rsi
add r9d, esi
cmp rdx, r11
jge 0x1400084d3
nop dword [rax + rax]
cmp word [rbp + rdx*2], 0x7c
je 0x1400084e0
inc rdx
inc r9d
cmp rdx, r11
jl 0x1400084c0
inc rdx
inc r9d
cmp rdx, r11
jl 0x140008471
jmp 0x1400084f9
mov ecx, dword [0x140033798]
movsxd rax, r9d
cmp word [rbp + rax*2 - 2], 0x31
cmove ecx, r15d
mov dword [0x140033798], ecx
mov r14, qword [rsp + 0x38]
mov r12, qword [rsp + 0x40]
mov rdi, qword [rsp + 0x48]
mov rsi, qword [rsp + 0x50]
mov rbp, qword [rsp + 0x58]
mov rbx, qword [rsp + 0x60]
mov r15, qword [rsp + 0x30]
add rsp, 0x68
ret