Function at 0x1800024a0
Capabilities:
Query or enumerate registry value

Disassembly:
mov r11, rsp
push rsi
push rdi
sub rsp, 0x178
mov rax, qword [section..data]
xor rax, rsp
mov qword [rsp + 0x150], rax
mov qword [r11 - 0x18], rbx
mov qword [r11 - 0x20], rbp
lea rax, [rsp + 0x40]
mov qword [rsp + 0x30], rax
lea rax, [rsp + 0x50]
mov edi, r8d
mov rsi, rdx
mov qword [r11 - 0x28], r14
mov ebp, r9d
mov r14, rcx
mov qword [rsp + 0x28], rax
lea r8, str.LangCode
lea rdx, str.SOFTWAREinnovanathinklabs.comITL_Total_Security
mov r9d, 0xffff
mov rcx, 0xffffffff80000002
mov qword [rsp + 0x20], 0
mov dword [rsp + 0x40], 0x2000
call qword [sym.imp.ADVAPI32.dll_RegGetValueW]
lea rdx, [0x1800197a4]
lea rcx, [rsp + 0x50]
call qword [sym.imp.KERNEL32.dll_lstrcmpW]
test eax, eax
jne 0x18000253e
lea rbx, str.Scan_with_ITL_Total_Security
jmp 0x1800026f6
lea rdx, [0x1800197ec]
lea rcx, [rsp + 0x50]
call qword [sym.imp.KERNEL32.dll_lstrcmpW]
test eax, eax
jne 0x180002560
lea rbx, str.Scan_med_ITL_Total_Security
jmp 0x1800026f6
lea rdx, [0x180019830]
lea rcx, [rsp + 0x50]
call qword [sym.imp.KERNEL32.dll_lstrcmpW]
test eax, eax
jne 0x180002582
lea rbx, str.Scannen_met_ITL_Total_Security
jmp 0x1800026f6
lea rdx, [0x180019878]
lea rcx, [rsp + 0x50]
call qword [sym.imp.KERNEL32.dll_lstrcmpW]
test eax, eax
jne 0x1800025a4
lea rbx, str.Scan_avec_ITL_Total_Security
jmp 0x1800026f6
lea rdx, [0x1800198bc]
lea rcx, [rsp + 0x50]
call qword [sym.imp.KERNEL32.dll_lstrcmpW]
test eax, eax
jne 0x1800025c6
lea rbx, str.Scannen_Sie_mit_ITL_Total_Security
jmp 0x1800026f6
lea rdx, [0x180019918]
lea rcx, [rsp + 0x50]
call qword [sym.imp.KERNEL32.dll_lstrcmpW]
test eax, eax
jne 0x1800025e8
lea rbx, str.Scansione_con_ITL_Total_Security
jmp 0x1800026f6
lea rdx, [0x180019964]
lea rcx, [rsp + 0x50]
call qword [sym.imp.KERNEL32.dll_lstrcmpW]
test eax, eax
jne 0x18000260a
lea rbx, [0x180019970]
jmp 0x1800026f6
lea rdx, [0x1800199a4]
lea rcx, [rsp + 0x50]
call qword [sym.imp.KERNEL32.dll_lstrcmpW]
test eax, eax
jne 0x18000262c
lea rbx, str.Skann_med_ex_ITL_Total_Security
jmp 0x1800026f6
lea rdx, str.ptbr
lea rcx, [rsp + 0x50]
call qword [sym.imp.KERNEL32.dll_lstrcmpW]
test eax, eax
jne 0x18000264e
lea rbx, str.Varredura_com_o_ITL_Total_Security
jmp 0x1800026f6
lea rdx, [0x180019a48]
lea rcx, [rsp + 0x50]
call qword [sym.imp.KERNEL32.dll_lstrcmpW]
test eax, eax
jne 0x180002670
lea rbx, str.Escanear_con_ITL_Total_Security
jmp 0x1800026f6
lea rdx, [0x180019a90]
lea rcx, [rsp + 0x50]
call qword [sym.imp.KERNEL32.dll_lstrcmpW]
test eax, eax
jne 0x18000268f
lea rbx, str.Skanna_med_ITL_Total_Security
jmp 0x1800026f6
lea rdx, [0x180019ad4]
lea rcx, [rsp + 0x50]
call qword [sym.imp.KERNEL32.dll_lstrcmpW]
test eax, eax
jne 0x1800026ae
lea rbx, str.Skannata_ITL_Total_Security
jmp 0x1800026f6
lea rdx, [0x180019b18]
lea rcx, [rsp + 0x50]
call qword [sym.imp.KERNEL32.dll_lstrcmpW]
test eax, eax
jne 0x1800026cd
lea rbx, [0x180019b20]
jmp 0x1800026f6
lea rdx, str.zhcn
lea rcx, [rsp + 0x50]
call qword [sym.imp.KERNEL32.dll_lstrcmpW]
lea rbx, str.Scan_with_ITL_Total_Security
lea rcx, str._ukb
test eax, eax
cmovne rcx, rbx
mov rbx, rcx
xor r9d, r9d
mov r8d, 0xc00
mov edx, edi
mov rcx, rsi
mov qword [rsp + 0x20], 0
call qword [sym.imp.USER32.dll_InsertMenuW]
inc edi
mov r9, rbp
mov r8d, 0x400
mov rcx, rsi
mov edx, edi
mov qword [rsp + 0x20], rbx
call qword [sym.imp.USER32.dll_InsertMenuW]
mov r9, qword [r14 + 0x20]
mov r14, qword [rsp + 0x160]
mov rbp, qword [rsp + 0x168]
mov rbx, qword [rsp + 0x170]
test r9, r9
je 0x180002765
mov r8d, 0x404
mov edx, edi
mov rcx, rsi
mov qword [rsp + 0x20], r9
call qword [sym.imp.USER32.dll_SetMenuItemBitmaps]
lea edx, [rdi + 1]
xor r9d, r9d
mov r8d, 0xc00
mov rcx, rsi
mov qword [rsp + 0x20], 0
call qword [sym.imp.USER32.dll_InsertMenuW]
mov eax, 2
mov rcx, qword [rsp + 0x150]
xor rcx, rsp
call fcn.180004430
add rsp, 0x178
pop rdi
pop rsi
ret