Function at 0x180008d40
Capabilities:
Query or enumerate registry value

Disassembly:
mov rax, rsp
sub rsp, 0x68
cmp byte [0x180071430], 0
jne 0x180009a3c
mov qword [rax - 8], rbx
mov qword [rax - 0x10], rbp
mov qword [rax - 0x18], rsi
mov qword [rax - 0x20], rdi
mov qword [rax - 0x28], r12
mov qword [rax - 0x30], r14
lea rbp, str.xiugaishiyong
mov qword [rax - 0x38], r15
mov byte [0x180071430], 1
mov rcx, rbp
call fcn.180012828
lea rcx, [0x180070150]
xor edx, edx
mov r8d, 0x12a0
call fcn.180018270
lea rdx, [0x18007016e]
lea rcx, [0x18002d2b0]
xor r8d, r8d
call fcn.180008c10
lea rdx, [0x18007036c]
lea rcx, [0x18002d2b8]
xor r8d, r8d
call fcn.180008c10
mov rcx, rbp
call qword [sym.imp.KERNEL32.dll_lstrlenW]
lea r15, [0x18002d2c0]
mov rcx, r15
movsxd rbx, eax
call qword [sym.imp.KERNEL32.dll_lstrlenW]
xor r9d, r9d
xor edx, edx
mov r11, rbx
lea r14d, [r9 + 1]
movsxd rsi, eax
test ebx, ebx
jle 0x180008e89
nop dword [rax]
xor r10d, r10d
xor r8d, r8d
test esi, esi
jle 0x180008e3b
lea rbx, [rdx + rdx]
sub rbx, r15
add rbx, rbp
nop word [rax + rax]
movzx eax, word [r15 + r8*2]
lea rcx, [rbx + r8*2]
cmp word [rcx + r15], ax
jne 0x180008e3b
inc r8
inc r10d
cmp r8, rsi
jl 0x180008e20
cmp r10d, esi
jne 0x180008e63
add rdx, rsi
add r9d, esi
cmp rdx, r11
jge 0x180008e63
nop dword [rax + rax]
cmp word [rbp + rdx*2], 0x7c
je 0x180008e70
inc rdx
inc r9d
cmp rdx, r11
jl 0x180008e50
inc rdx
inc r9d
cmp rdx, r11
jl 0x180008e00
jmp 0x180008e89
mov ecx, dword [0x1800703a8]
movsxd rax, r9d
cmp word [rbp + rax*2 - 2], 0x31
cmove ecx, r14d
mov dword [0x1800703a8], ecx
lea rdx, [0x1800703ac]
lea rcx, [0x18002d2c8]
xor r8d, r8d
call fcn.180008c10
lea rdx, [0x1800705aa]
lea rcx, [0x18002d2d0]
xor r8d, r8d
call fcn.180008c10
mov rcx, rbp
call qword [sym.imp.KERNEL32.dll_lstrlenW]
lea r12, [0x18002d2d8]
mov rcx, r12
movsxd rbx, eax
call qword [sym.imp.KERNEL32.dll_lstrlenW]
xor r9d, r9d
xor edx, edx
mov r11, rbx
movsxd rsi, eax
test ebx, ebx
jle 0x180008f69
xor r10d, r10d
xor r8d, r8d
test esi, esi
jle 0x180008f1b
lea rbx, [rdx + rdx]
sub rbx, r12
add rbx, rbp
nop dword [rax + rax]
movzx eax, word [r12 + r8*2]
lea rcx, [rbx + r8*2]
cmp word [rcx + r12], ax
jne 0x180008f1b
inc r8
inc r10d
cmp r8, rsi
jl 0x180008f00
cmp r10d, esi
jne 0x180008f43
add rdx, rsi
add r9d, esi
cmp rdx, r11
jge 0x180008f43
nop dword [rax + rax]
cmp word [rbp + rdx*2], 0x7c
je 0x180008f50
inc rdx
inc r9d
cmp rdx, r11
jl 0x180008f30
inc rdx
inc r9d
cmp rdx, r11
jl 0x180008ee4
jmp 0x180008f69
mov ecx, dword [0x1800705e8]
movsxd rax, r9d
cmp word [rbp + rax*2 - 2], 0x31
cmove ecx, r14d
mov dword [0x1800705e8], ecx
lea rdx, [0x1800705ec]
lea rcx, [0x18002d2e0]
xor r8d, r8d
call fcn.180008c10
lea rdx, [0x1800707ea]
lea rcx, [0x18002d2e8]
xor r8d, r8d
call fcn.180008c10
mov rcx, rbp
call qword [sym.imp.KERNEL32.dll_lstrlenW]
lea r14, [0x18002d2f0]
mov rcx, r14
movsxd rbx, eax
call qword [sym.imp.KERNEL32.dll_lstrlenW]
xor r9d, r9d
xor edx, edx
mov r11, rbx
movsxd rsi, eax
test ebx, ebx
jle 0x18000904d
xor r10d, r10d
xor r8d, r8d
test esi, esi
jle 0x180008ffb
lea rbx, [rdx + rdx]
sub rbx, r14
add rbx, rbp
nop dword [rax + rax]
movzx eax, word [r14 + r8*2]
lea rcx, [rbx + r8*2]
cmp word [rcx + r14], ax
jne 0x180008ffb
inc r8
inc r10d
cmp r8, rsi
jl 0x180008fe0
cmp r10d, esi
jne 0x180009023
add rdx, rsi
add r9d, esi
cmp rdx, r11
jge 0x180009023
nop dword [rax + rax]
cmp word [rbp + rdx*2], 0x7c
je 0x180009030
inc rdx
inc r9d
cmp rdx, r11
jl 0x180009010
inc rdx
inc r9d
cmp rdx, r11
jl 0x180008fc4
jmp 0x18000904d
mov ecx, dword [0x180070828]
movsxd rax, r9d
cmp word [rbp + rax*2 - 2], 0x31
mov eax, 1
cmove ecx, eax
mov dword [0x180070828], ecx
lea rdx, [0x18007082c]
lea rcx, [0x18002d2f8]
xor r8d, r8d
call fcn.180008c10
lea rdx, [0x180070868]
lea rcx, [0x18002d300]
xor r8d, r8d
call fcn.180008c10
lea rdx, [0x1800708a4]
lea rcx, [0x18002d308]
xor r8d, r8d
call fcn.180008c10
lea rdx, [0x180070908]
lea rcx, [0x18002d310]
xor r8d, r8d
call fcn.180008c10
lea rdx, [0x18007096c]
lea rcx, [0x18002d318]
xor r8d, r8d
call fcn.180008c10
mov rcx, rbp
call qword [sym.imp.KERNEL32.dll_lstrlenW]
lea r12, [0x18002d320]
mov rcx, r12
movsxd rbx, eax
call qword [sym.imp.KERNEL32.dll_lstrlenW]
xor r9d, r9d
xor edx, edx
mov r11, rbx
movsxd rsi, eax
test ebx, ebx
jle 0x18000917d
nop word [rax + rax]
xor r10d, r10d
xor r8d, r8d
test esi, esi
jle 0x18000912b
lea rbx, [rdx + rdx]
sub rbx, r12
add rbx, rbp
nop word [rax + rax]
movzx eax, word [r12 + r8*2]
lea rcx, [rbx + r8*2]
cmp word [rcx + r12], ax
jne 0x18000912b
inc r8
inc r10d
cmp r8, rsi
jl 0x180009110
cmp r10d, esi
jne 0x180009153
add rdx, rsi
add r9d, esi
cmp rdx, r11
jge 0x180009153
nop dword [rax + rax]
cmp word [rbp + rdx*2], 0x7c
je 0x180009160
inc rdx
inc r9d
cmp rdx, r11
jl 0x180009140
inc rdx
inc r9d
cmp rdx, r11
jl 0x1800090f0
jmp 0x18000917d
mov ecx, dword [0x1800709d0]
movsxd rax, r9d
cmp word [rbp + rax*2 - 2], 0x31
mov eax, 1
cmove ecx, eax
mov dword [0x1800709d0], ecx
mov rcx, rbp
call qword [sym.imp.KERNEL32.dll_lstrlenW]
lea r12, [0x18002d328]
mov rcx, r12
movsxd rbx, eax
call qword [sym.imp.KERNEL32.dll_lstrlenW]
xor r9d, r9d
xor edx, edx
mov r11, rbx
movsxd rsi, eax
test ebx, ebx
jle 0x18000923d
nop dword [rax]
xor r10d, r10d
xor r8d, r8d
test esi, esi
jle 0x1800091eb
lea rbx, [rdx + rdx]
sub rbx, r12
add rbx, rbp
nop word [rax + rax]
movzx eax, word [r12 + r8*2]
lea rcx, [rbx + r8*2]
cmp word [rcx + r12], ax
jne 0x1800091eb
inc r8
inc r10d
cmp r8, rsi
jl 0x1800091d0
cmp r10d, esi
jne 0x180009213
add rdx, rsi
add r9d, esi
cmp rdx, r11
jge 0x180009213
nop dword [rax + rax]
cmp word [rbp + rdx*2], 0x7c
je 0x180009220
inc rdx
inc r9d
cmp rdx, r11
jl 0x180009200
inc rdx
inc r9d
cmp rdx, r11
jl 0x1800091b0
jmp 0x18000923d
mov ecx, dword [0x1800709d4]
movsxd rax, r9d
cmp word [rbp + rax*2 - 2], 0x31
mov eax, 1
cmove ecx, eax
mov dword [0x1800709d4], ecx
mov rcx, rbp
call qword [sym.imp.KERNEL32.dll_lstrlenW]
lea r12, [0x18002d330]
mov rcx, r12
movsxd rbx, eax
call qword [sym.imp.KERNEL32.dll_lstrlenW]
xor r9d, r9d
xor edx, edx
mov r11, rbx
movsxd rsi, eax
test ebx, ebx
jle 0x1800092fd
nop dword [rax]
xor r10d, r10d
xor r8d, r8d
test esi, esi
jle 0x1800092ab
lea rbx, [rdx + rdx]
sub rbx, r12
add rbx, rbp
nop word [rax + rax]
movzx eax, word [r12 + r8*2]
lea rcx, [rbx + r8*2]
cmp word [rcx + r12], ax
jne 0x1800092ab
inc r8
inc r10d
cmp r8, rsi
jl 0x180009290
cmp r10d, esi
jne 0x1800092d3
add rdx, rsi
add r9d, esi
cmp rdx, r11
jge 0x1800092d3
nop dword [rax + rax]
cmp word [rbp + rdx*2], 0x7c
je 0x1800092e0
inc rdx
inc r9d
cmp rdx, r11
jl 0x1800092c0
inc rdx
inc r9d
cmp rdx, r11
jl 0x180009270
jmp 0x1800092fd
mov ecx, dword [0x1800709d8]
movsxd rax, r9d
cmp word [rbp + rax*2 - 2], 0x31
mov eax, 1
cmove ecx, eax
mov dword [0x1800709d8], ecx
mov rcx, rbp
call qword [sym.imp.KERNEL32.dll_lstrlenW]
lea r12, [0x18002d338]
mov rcx, r12
movsxd rbx, eax
call qword [sym.imp.KERNEL32.dll_lstrlenW]
xor r9d, r9d
xor edx, edx
mov r11, rbx
movsxd rsi, eax
test ebx, ebx
jle 0x1800093bd
nop dword [rax]
xor r10d, r10d
xor r8d, r8d
test esi, esi
jle 0x18000936b
lea rbx, [rdx + rdx]
sub rbx, r12
add rbx, rbp
nop word [rax + rax]
movzx eax, word [r12 + r8*2]
lea rcx, [rbx + r8*2]
cmp word [rcx + r12], ax
jne 0x18000936b
inc r8
inc r10d
cmp r8, rsi
jl 0x180009350
cmp r10d, esi
jne 0x180009393
add rdx, rsi
add r9d, esi
cmp rdx, r11
jge 0x180009393
nop dword [rax + rax]
cmp word [rbp + rdx*2], 0x7c
je 0x1800093a0
inc rdx
inc r9d
cmp rdx, r11
jl 0x180009380
inc rdx
inc r9d
cmp rdx, r11
jl 0x180009330
jmp 0x1800093bd
mov ecx, dword [0x1800709dc]
movsxd rax, r9d
cmp word [rbp + rax*2 - 2], 0x31
mov eax, 1
cmove ecx, eax
mov dword [0x1800709dc], ecx
mov rcx, rbp
call qword [sym.imp.KERNEL32.dll_lstrlenW]
lea r12, [0x18002d340]
mov rcx, r12
movsxd rbx, eax
call qword [sym.imp.KERNEL32.dll_lstrlenW]
xor r9d, r9d
xor edx, edx
mov r11, rbx
movsxd rsi, eax
test ebx, ebx
jle 0x18000947d
nop dword [rax]
xor r10d, r10d
xor r8d, r8d
test esi, esi
jle 0x18000942b
lea rbx, [rdx + rdx]
sub rbx, r12
add rbx, rbp
nop word [rax + rax]
movzx eax, word [r12 + r8*2]
lea rcx, [rbx + r8*2]
cmp word [rcx + r12], ax
jne 0x18000942b
inc r8
inc r10d
cmp r8, rsi
jl 0x180009410
cmp r10d, esi
jne 0x180009453
add rdx, rsi
add r9d, esi
cmp rdx, r11
jge 0x180009453
nop dword [rax + rax]
cmp word [rbp + rdx*2], 0x7c
je 0x180009460
inc rdx
inc r9d
cmp rdx, r11
jl 0x180009440
inc rdx
inc r9d
cmp rdx, r11
jl 0x1800093f0
jmp 0x18000947d
mov ecx, dword [0x1800709e0]
movsxd rax, r9d
cmp word [rbp + rax*2 - 2], 0x31
mov eax, 1
cmove ecx, eax
mov dword [0x1800709e0], ecx
mov rcx, rbp
call qword [sym.imp.KERNEL32.dll_lstrlenW]
lea r12, [0x18002d348]
mov rcx, r12
movsxd rbx, eax
call qword [sym.imp.KERNEL32.dll_lstrlenW]
xor r9d, r9d
xor edx, edx
mov r11, rbx
movsxd rsi, eax
test ebx, ebx
jle 0x18000953d
nop dword [rax]
xor r10d, r10d
xor r8d, r8d
test esi, esi
jle 0x1800094eb
lea rbx, [rdx + rdx]
sub rbx, r12
add rbx, rbp
nop word [rax + rax]
movzx eax, word [r12 + r8*2]
lea rcx, [rbx + r8*2]
cmp word [rcx + r12], ax
jne 0x1800094eb
inc r8
inc r10d
cmp r8, rsi
jl 0x1800094d0
cmp r10d, esi
jne 0x180009513
add rdx, rsi
add r9d, esi
cmp rdx, r11
jge 0x180009513
nop dword [rax + rax]
cmp word [rbp + rdx*2], 0x7c
je 0x180009520
inc rdx
inc r9d
cmp rdx, r11
jl 0x180009500
inc rdx
inc r9d
cmp rdx, r11
jl 0x1800094b0
jmp 0x18000953d
mov ecx, dword [0x1800709e4]
movsxd rax, r9d
cmp word [rbp + rax*2 - 2], 0x31
mov eax, 1
cmove ecx, eax
mov dword [0x1800709e4], ecx
mov rcx, rbp
call qword [sym.imp.KERNEL32.dll_lstrlenW]
lea r12, [0x18002d350]
mov rcx, r12
movsxd rbx, eax
call qword [sym.imp.KERNEL32.dll_lstrlenW]
xor r9d, r9d
xor edx, edx
mov r11, rbx
movsxd rsi, eax
test ebx, ebx
jle 0x1800095fd
nop dword [rax]
xor r10d, r10d
xor r8d, r8d
test esi, esi
jle 0x1800095ab
lea rbx, [rdx + rdx]
sub rbx, r12
add rbx, rbp
nop word [rax + rax]
movzx eax, word [r12 + r8*2]
lea rcx, [rbx + r8*2]
cmp word [rcx + r12], ax
jne 0x1800095ab
inc r8
inc r10d
cmp r8, rsi
jl 0x180009590
cmp r10d, esi
jne 0x1800095d3
add rdx, rsi
add r9d, esi
cmp rdx, r11
jge 0x1800095d3
nop dword [rax + rax]
cmp word [rbp + rdx*2], 0x7c
je 0x1800095e0
inc rdx
inc r9d
cmp rdx, r11
jl 0x1800095c0
inc rdx
inc r9d
cmp rdx, r11
jl 0x180009570
jmp 0x1800095fd
mov ecx, dword [0x1800709e8]
movsxd rax, r9d
cmp word [rbp + rax*2 - 2], 0x31
mov eax, 1
cmove ecx, eax
mov dword [0x1800709e8], ecx
mov rcx, rbp
call qword [sym.imp.KERNEL32.dll_lstrlenW]
lea r12, [0x18002d358]
mov rcx, r12
movsxd rbx, eax
call qword [sym.imp.KERNEL32.dll_lstrlenW]
xor r9d, r9d
xor edx, edx
mov r11, rbx
movsxd rsi, eax
test ebx, ebx
jle 0x1800096bd
nop dword [rax]
xor r10d, r10d
xor r8d, r8d
test esi, esi
jle 0x18000966b
lea rbx, [rdx + rdx]
sub rbx, r12
add rbx, rbp
nop word [rax + rax]
movzx eax, word [r12 + r8*2]
lea rcx, [rbx + r8*2]
cmp word [rcx + r12], ax
jne 0x18000966b
inc r8
inc r10d
cmp r8, rsi
jl 0x180009650
cmp r10d, esi
jne 0x180009693
add rdx, rsi
add r9d, esi
cmp rdx, r11
jge 0x180009693
nop dword [rax + rax]
cmp word [rbp + rdx*2], 0x7c
je 0x1800096a0
inc rdx
inc r9d
cmp rdx, r11
jl 0x180009680
inc rdx
inc r9d
cmp rdx, r11
jl 0x180009630
jmp 0x1800096bd
mov ecx, dword [0x1800709ec]
movsxd rax, r9d
cmp word [rbp + rax*2 - 2], 0x31
mov eax, 1
cmove ecx, eax
mov dword [0x1800709ec], ecx
lea rax, [rsp + 0x80]
lea rdx, str.Console
mov r9d, 0x20019
xor r8d, r8d
mov rcx, 0xffffffff80000001
mov dword [rsp + 0x78], 3
mov qword [rsp + 0x20], rax
mov dword [rsp + 0x70], 0
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
jne 0x18000972b
mov rcx, qword [rsp + 0x80]
lea rax, [rsp + 0x70]
lea r9, [rsp + 0x78]
mov qword [rsp + 0x28], rax
lea rdx, str.IpDate
xor r8d, r8d
mov qword [rsp + 0x20], 0
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
cmp dword [rsp + 0x70], 0xa
jbe 0x180009a19
xor edx, edx
mov r8d, 0x7d0
mov rcx, rbp
call fcn.180018270
mov rcx, qword [rsp + 0x80]
lea r11, [rsp + 0x70]
mov qword [rsp + 0x28], r11
lea r9, [rsp + 0x78]
lea rdx, str.IpDate
xor r8d, r8d
mov qword [rsp + 0x20], rbp
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
lea rdx, [0x18007016e]
lea rcx, [0x18002d2b0]
xor r8d, r8d
call fcn.180008c10
lea rdx, [0x18007036c]
lea rcx, [0x18002d2b8]
xor r8d, r8d
call fcn.180008c10
mov rcx, rbp
call qword [sym.imp.KERNEL32.dll_lstrlenW]
mov rcx, r15
movsxd rbx, eax
call qword [sym.imp.KERNEL32.dll_lstrlenW]
xor r9d, r9d
xor edx, edx
mov r11, rbx
movsxd rsi, eax
test ebx, ebx
jle 0x180009832
xor r10d, r10d
xor r8d, r8d
test esi, esi
jle 0x1800097fb
lea rbx, [rdx + rdx]
sub rbx, r15
add rbx, rbp
nop word [rax + rax]
movzx eax, word [r15 + r8*2]
lea rcx, [rbx + r8*2]
cmp word [rcx + r15], ax
jne 0x1800097fb
inc r8
inc r10d
cmp r8, rsi
jl 0x1800097e0
cmp r10d, esi
jne 0x180009827
add rdx, rsi
add r9d, esi
cmp rdx, r11
jge 0x180009827
nop dword [rax + rax]
cmp word [rbp + rdx*2], 0x7c
je 0x180009900
inc rdx
inc r9d
cmp rdx, r11
jl 0x180009810
inc rdx
inc r9d
cmp rdx, r11
jl 0x1800097c2
mov r15d, 1
lea rdx, [0x1800703ac]
lea rcx, [0x18002d2c8]
xor r8d, r8d
call fcn.180008c10
lea rdx, [0x1800705aa]
lea rcx, [0x18002d2d0]
xor r8d, r8d
call fcn.180008c10
mov rcx, rbp
call qword [sym.imp.KERNEL32.dll_lstrlenW]
lea r12, [0x18002d2d8]
mov rcx, r12
movsxd rbx, eax
call qword [sym.imp.KERNEL32.dll_lstrlenW]
xor r9d, r9d
xor edx, edx
mov r11, rbx
movsxd rsi, eax
test ebx, ebx
jle 0x18000993d
xor r10d, r10d
xor r8d, r8d
test esi, esi
jle 0x1800098cb
lea rbx, [rdx + rdx]
sub rbx, r12
add rbx, rbp
nop word [rax + rax]
movzx eax, word [r12 + r8*2]
lea rcx, [rbx + r8*2]
cmp word [rcx + r12], ax
jne 0x1800098cb
inc r8
inc r10d
cmp r8, rsi
jl 0x1800098b0
cmp r10d, esi
jne 0x1800098f3
add rdx, rsi
add r9d, esi
cmp rdx, r11
jge 0x1800098f3
nop dword [rax + rax]
cmp word [rbp + rdx*2], 0x7c
je 0x180009924
inc rdx
inc r9d
cmp rdx, r11
jl 0x1800098e0
inc rdx
inc r9d
cmp rdx, r11
jl 0x180009893
jmp 0x18000993d
mov ecx, dword [0x1800703a8]
movsxd rax, r9d
mov r15d, 1
cmp word [rbp + rax*2 - 2], 0x31
cmove ecx, r15d
mov dword [0x1800703a8], ecx
jmp 0x180009838
mov ecx, dword [0x1800705e8]
movsxd rax, r9d
cmp word [rbp + rax*2 - 2], 0x31
cmove ecx, r15d
mov dword [0x1800705e8], ecx
lea rdx, [0x1800705ec]
lea rcx, [0x18002d2e0]
xor r8d, r8d
call fcn.180008c10
lea rdx, [0x1800707ea]
lea rcx, [0x18002d2e8]
xor r8d, r8d
call fcn.180008c10
mov rcx, rbp
call qword [sym.imp.KERNEL32.dll_lstrlenW]
mov rcx, r14
movsxd rbx, eax
call qword [sym.imp.KERNEL32.dll_lstrlenW]
xor r9d, r9d
xor edx, edx
mov r11, rbx
movsxd rsi, eax
test ebx, ebx
jle 0x180009a19
xor r10d, r10d
xor r8d, r8d
test esi, esi
jle 0x1800099cb
lea rbx, [rdx + rdx]
sub rbx, r14
add rbx, rbp
nop word [rax + rax]
movzx eax, word [r14 + r8*2]
lea rcx, [rbx + r8*2]
cmp word [rcx + r14], ax
jne 0x1800099cb
inc r8
inc r10d
cmp r8, rsi
jl 0x1800099b0
cmp r10d, esi
jne 0x1800099f3
add rdx, rsi
add r9d, esi
cmp rdx, r11
jge 0x1800099f3
nop dword [rax + rax]
cmp word [rbp + rdx*2], 0x7c
je 0x180009a00
inc rdx
inc r9d
cmp rdx, r11
jl 0x1800099e0
inc rdx
inc r9d
cmp rdx, r11
jl 0x180009991
jmp 0x180009a19
mov ecx, dword [0x180070828]
movsxd rax, r9d
cmp word [rbp + rax*2 - 2], 0x31
cmove ecx, r15d
mov dword [0x180070828], ecx
mov r14, qword [rsp + 0x38]
mov r12, qword [rsp + 0x40]
mov rdi, qword [rsp + 0x48]
mov rsi, qword [rsp + 0x50]
mov rbp, qword [rsp + 0x58]
mov rbx, qword [rsp + 0x60]
mov r15, qword [rsp + 0x30]
add rsp, 0x68
ret