Function at 0x180008f00
Capabilities:
Query or enumerate registry value

Disassembly:
mov rax, rsp
sub rsp, 0x68
cmp byte [0x18007d750], 0
jne 0x180009bfc
mov qword [rax - 8], rbx
mov qword [rax - 0x10], rbp
mov qword [rax - 0x18], rsi
mov qword [rax - 0x20], rdi
mov qword [rax - 0x28], r12
mov qword [rax - 0x30], r14
lea rbp, str.xiugaishiyong
mov qword [rax - 0x38], r15
mov byte [0x18007d750], 1
mov rcx, rbp
call fcn.180019d24
lea rcx, [0x18007c470]
xor edx, edx
mov r8d, 0x12a0
call fcn.18001b160
lea rdx, [0x18007c48e]
lea rcx, [0x1800369a0]
xor r8d, r8d
call fcn.180008dd0
lea rdx, [0x18007c68c]
lea rcx, [0x1800369a8]
xor r8d, r8d
call fcn.180008dd0
mov rcx, rbp
call qword [sym.imp.KERNEL32.dll_lstrlenW]
lea r15, [0x1800369b0]
mov rcx, r15
movsxd rbx, eax
call qword [sym.imp.KERNEL32.dll_lstrlenW]
xor r9d, r9d
xor edx, edx
mov r11, rbx
lea r14d, [r9 + 1]
movsxd rsi, eax
test ebx, ebx
jle 0x180009049
nop dword [rax]
xor r10d, r10d
xor r8d, r8d
test esi, esi
jle 0x180008ffb
lea rbx, [rdx + rdx]
sub rbx, r15
add rbx, rbp
nop word [rax + rax]
movzx eax, word [r15 + r8*2]
lea rcx, [rbx + r8*2]
cmp word [rcx + r15], ax
jne 0x180008ffb
inc r8
inc r10d
cmp r8, rsi
jl 0x180008fe0
cmp r10d, esi
jne 0x180009023
add rdx, rsi
add r9d, esi
cmp rdx, r11
jge 0x180009023
nop dword [rax + rax]
cmp word [rbp + rdx*2], 0x7c
je 0x180009030
inc rdx
inc r9d
cmp rdx, r11
jl 0x180009010
inc rdx
inc r9d
cmp rdx, r11
jl 0x180008fc0
jmp 0x180009049
mov ecx, dword [0x18007c6c8]
movsxd rax, r9d
cmp word [rbp + rax*2 - 2], 0x31
cmove ecx, r14d
mov dword [0x18007c6c8], ecx
lea rdx, [0x18007c6cc]
lea rcx, [0x1800369b8]
xor r8d, r8d
call fcn.180008dd0
lea rdx, [0x18007c8ca]
lea rcx, [0x1800369c0]
xor r8d, r8d
call fcn.180008dd0
mov rcx, rbp
call qword [sym.imp.KERNEL32.dll_lstrlenW]
lea r12, [0x1800369c8]
mov rcx, r12
movsxd rbx, eax
call qword [sym.imp.KERNEL32.dll_lstrlenW]
xor r9d, r9d
xor edx, edx
mov r11, rbx
movsxd rsi, eax
test ebx, ebx
jle 0x180009129
xor r10d, r10d
xor r8d, r8d
test esi, esi
jle 0x1800090db
lea rbx, [rdx + rdx]
sub rbx, r12
add rbx, rbp
nop dword [rax + rax]
movzx eax, word [r12 + r8*2]
lea rcx, [rbx + r8*2]
cmp word [rcx + r12], ax
jne 0x1800090db
inc r8
inc r10d
cmp r8, rsi
jl 0x1800090c0
cmp r10d, esi
jne 0x180009103
add rdx, rsi
add r9d, esi
cmp rdx, r11
jge 0x180009103
nop dword [rax + rax]
cmp word [rbp + rdx*2], 0x7c
je 0x180009110
inc rdx
inc r9d
cmp rdx, r11
jl 0x1800090f0
inc rdx
inc r9d
cmp rdx, r11
jl 0x1800090a4
jmp 0x180009129
mov ecx, dword [0x18007c908]
movsxd rax, r9d
cmp word [rbp + rax*2 - 2], 0x31
cmove ecx, r14d
mov dword [0x18007c908], ecx
lea rdx, [0x18007c90c]
lea rcx, [0x1800369d0]
xor r8d, r8d
call fcn.180008dd0
lea rdx, [0x18007cb0a]
lea rcx, [0x1800369d8]
xor r8d, r8d
call fcn.180008dd0
mov rcx, rbp
call qword [sym.imp.KERNEL32.dll_lstrlenW]
lea r14, [0x1800369e0]
mov rcx, r14
movsxd rbx, eax
call qword [sym.imp.KERNEL32.dll_lstrlenW]
xor r9d, r9d
xor edx, edx
mov r11, rbx
movsxd rsi, eax
test ebx, ebx
jle 0x18000920d
xor r10d, r10d
xor r8d, r8d
test esi, esi
jle 0x1800091bb
lea rbx, [rdx + rdx]
sub rbx, r14
add rbx, rbp
nop dword [rax + rax]
movzx eax, word [r14 + r8*2]
lea rcx, [rbx + r8*2]
cmp word [rcx + r14], ax
jne 0x1800091bb
inc r8
inc r10d
cmp r8, rsi
jl 0x1800091a0
cmp r10d, esi
jne 0x1800091e3
add rdx, rsi
add r9d, esi
cmp rdx, r11
jge 0x1800091e3
nop dword [rax + rax]
cmp word [rbp + rdx*2], 0x7c
je 0x1800091f0
inc rdx
inc r9d
cmp rdx, r11
jl 0x1800091d0
inc rdx
inc r9d
cmp rdx, r11
jl 0x180009184
jmp 0x18000920d
mov ecx, dword [0x18007cb48]
movsxd rax, r9d
cmp word [rbp + rax*2 - 2], 0x31
mov eax, 1
cmove ecx, eax
mov dword [0x18007cb48], ecx
lea rdx, [0x18007cb4c]
lea rcx, [0x1800369e8]
xor r8d, r8d
call fcn.180008dd0
lea rdx, [0x18007cb88]
lea rcx, [0x1800369f0]
xor r8d, r8d
call fcn.180008dd0
lea rdx, [0x18007cbc4]
lea rcx, [0x1800369f8]
xor r8d, r8d
call fcn.180008dd0
lea rdx, [0x18007cc28]
lea rcx, [0x180036a00]
xor r8d, r8d
call fcn.180008dd0
lea rdx, [0x18007cc8c]
lea rcx, [0x180036a08]
xor r8d, r8d
call fcn.180008dd0
mov rcx, rbp
call qword [sym.imp.KERNEL32.dll_lstrlenW]
lea r12, [0x180036a10]
mov rcx, r12
movsxd rbx, eax
call qword [sym.imp.KERNEL32.dll_lstrlenW]
xor r9d, r9d
xor edx, edx
mov r11, rbx
movsxd rsi, eax
test ebx, ebx
jle 0x18000933d
nop word [rax + rax]
xor r10d, r10d
xor r8d, r8d
test esi, esi
jle 0x1800092eb
lea rbx, [rdx + rdx]
sub rbx, r12
add rbx, rbp
nop word [rax + rax]
movzx eax, word [r12 + r8*2]
lea rcx, [rbx + r8*2]
cmp word [rcx + r12], ax
jne 0x1800092eb
inc r8
inc r10d
cmp r8, rsi
jl 0x1800092d0
cmp r10d, esi
jne 0x180009313
add rdx, rsi
add r9d, esi
cmp rdx, r11
jge 0x180009313
nop dword [rax + rax]
cmp word [rbp + rdx*2], 0x7c
je 0x180009320
inc rdx
inc r9d
cmp rdx, r11
jl 0x180009300
inc rdx
inc r9d
cmp rdx, r11
jl 0x1800092b0
jmp 0x18000933d
mov ecx, dword [0x18007ccf0]
movsxd rax, r9d
cmp word [rbp + rax*2 - 2], 0x31
mov eax, 1
cmove ecx, eax
mov dword [0x18007ccf0], ecx
mov rcx, rbp
call qword [sym.imp.KERNEL32.dll_lstrlenW]
lea r12, [0x180036a18]
mov rcx, r12
movsxd rbx, eax
call qword [sym.imp.KERNEL32.dll_lstrlenW]
xor r9d, r9d
xor edx, edx
mov r11, rbx
movsxd rsi, eax
test ebx, ebx
jle 0x1800093fd
nop dword [rax]
xor r10d, r10d
xor r8d, r8d
test esi, esi
jle 0x1800093ab
lea rbx, [rdx + rdx]
sub rbx, r12
add rbx, rbp
nop word [rax + rax]
movzx eax, word [r12 + r8*2]
lea rcx, [rbx + r8*2]
cmp word [rcx + r12], ax
jne 0x1800093ab
inc r8
inc r10d
cmp r8, rsi
jl 0x180009390
cmp r10d, esi
jne 0x1800093d3
add rdx, rsi
add r9d, esi
cmp rdx, r11
jge 0x1800093d3
nop dword [rax + rax]
cmp word [rbp + rdx*2], 0x7c
je 0x1800093e0
inc rdx
inc r9d
cmp rdx, r11
jl 0x1800093c0
inc rdx
inc r9d
cmp rdx, r11
jl 0x180009370
jmp 0x1800093fd
mov ecx, dword [0x18007ccf4]
movsxd rax, r9d
cmp word [rbp + rax*2 - 2], 0x31
mov eax, 1
cmove ecx, eax
mov dword [0x18007ccf4], ecx
mov rcx, rbp
call qword [sym.imp.KERNEL32.dll_lstrlenW]
lea r12, [0x180036a20]
mov rcx, r12
movsxd rbx, eax
call qword [sym.imp.KERNEL32.dll_lstrlenW]
xor r9d, r9d
xor edx, edx
mov r11, rbx
movsxd rsi, eax
test ebx, ebx
jle 0x1800094bd
nop dword [rax]
xor r10d, r10d
xor r8d, r8d
test esi, esi
jle 0x18000946b
lea rbx, [rdx + rdx]
sub rbx, r12
add rbx, rbp
nop word [rax + rax]
movzx eax, word [r12 + r8*2]
lea rcx, [rbx + r8*2]
cmp word [rcx + r12], ax
jne 0x18000946b
inc r8
inc r10d
cmp r8, rsi
jl 0x180009450
cmp r10d, esi
jne 0x180009493
add rdx, rsi
add r9d, esi
cmp rdx, r11
jge 0x180009493
nop dword [rax + rax]
cmp word [rbp + rdx*2], 0x7c
je 0x1800094a0
inc rdx
inc r9d
cmp rdx, r11
jl 0x180009480
inc rdx
inc r9d
cmp rdx, r11
jl 0x180009430
jmp 0x1800094bd
mov ecx, dword [0x18007ccf8]
movsxd rax, r9d
cmp word [rbp + rax*2 - 2], 0x31
mov eax, 1
cmove ecx, eax
mov dword [0x18007ccf8], ecx
mov rcx, rbp
call qword [sym.imp.KERNEL32.dll_lstrlenW]
lea r12, [0x180036a28]
mov rcx, r12
movsxd rbx, eax
call qword [sym.imp.KERNEL32.dll_lstrlenW]
xor r9d, r9d
xor edx, edx
mov r11, rbx
movsxd rsi, eax
test ebx, ebx
jle 0x18000957d
nop dword [rax]
xor r10d, r10d
xor r8d, r8d
test esi, esi
jle 0x18000952b
lea rbx, [rdx + rdx]
sub rbx, r12
add rbx, rbp
nop word [rax + rax]
movzx eax, word [r12 + r8*2]
lea rcx, [rbx + r8*2]
cmp word [rcx + r12], ax
jne 0x18000952b
inc r8
inc r10d
cmp r8, rsi
jl 0x180009510
cmp r10d, esi
jne 0x180009553
add rdx, rsi
add r9d, esi
cmp rdx, r11
jge 0x180009553
nop dword [rax + rax]
cmp word [rbp + rdx*2], 0x7c
je 0x180009560
inc rdx
inc r9d
cmp rdx, r11
jl 0x180009540
inc rdx
inc r9d
cmp rdx, r11
jl 0x1800094f0
jmp 0x18000957d
mov ecx, dword [0x18007ccfc]
movsxd rax, r9d
cmp word [rbp + rax*2 - 2], 0x31
mov eax, 1
cmove ecx, eax
mov dword [0x18007ccfc], ecx
mov rcx, rbp
call qword [sym.imp.KERNEL32.dll_lstrlenW]
lea r12, [0x180036a30]
mov rcx, r12
movsxd rbx, eax
call qword [sym.imp.KERNEL32.dll_lstrlenW]
xor r9d, r9d
xor edx, edx
mov r11, rbx
movsxd rsi, eax
test ebx, ebx
jle 0x18000963d
nop dword [rax]
xor r10d, r10d
xor r8d, r8d
test esi, esi
jle 0x1800095eb
lea rbx, [rdx + rdx]
sub rbx, r12
add rbx, rbp
nop word [rax + rax]
movzx eax, word [r12 + r8*2]
lea rcx, [rbx + r8*2]
cmp word [rcx + r12], ax
jne 0x1800095eb
inc r8
inc r10d
cmp r8, rsi
jl 0x1800095d0
cmp r10d, esi
jne 0x180009613
add rdx, rsi
add r9d, esi
cmp rdx, r11
jge 0x180009613
nop dword [rax + rax]
cmp word [rbp + rdx*2], 0x7c
je 0x180009620
inc rdx
inc r9d
cmp rdx, r11
jl 0x180009600
inc rdx
inc r9d
cmp rdx, r11
jl 0x1800095b0
jmp 0x18000963d
mov ecx, dword [0x18007cd00]
movsxd rax, r9d
cmp word [rbp + rax*2 - 2], 0x31
mov eax, 1
cmove ecx, eax
mov dword [0x18007cd00], ecx
mov rcx, rbp
call qword [sym.imp.KERNEL32.dll_lstrlenW]
lea r12, [0x180036a38]
mov rcx, r12
movsxd rbx, eax
call qword [sym.imp.KERNEL32.dll_lstrlenW]
xor r9d, r9d
xor edx, edx
mov r11, rbx
movsxd rsi, eax
test ebx, ebx
jle 0x1800096fd
nop dword [rax]
xor r10d, r10d
xor r8d, r8d
test esi, esi
jle 0x1800096ab
lea rbx, [rdx + rdx]
sub rbx, r12
add rbx, rbp
nop word [rax + rax]
movzx eax, word [r12 + r8*2]
lea rcx, [rbx + r8*2]
cmp word [rcx + r12], ax
jne 0x1800096ab
inc r8
inc r10d
cmp r8, rsi
jl 0x180009690
cmp r10d, esi
jne 0x1800096d3
add rdx, rsi
add r9d, esi
cmp rdx, r11
jge 0x1800096d3
nop dword [rax + rax]
cmp word [rbp + rdx*2], 0x7c
je 0x1800096e0
inc rdx
inc r9d
cmp rdx, r11
jl 0x1800096c0
inc rdx
inc r9d
cmp rdx, r11
jl 0x180009670
jmp 0x1800096fd
mov ecx, dword [0x18007cd04]
movsxd rax, r9d
cmp word [rbp + rax*2 - 2], 0x31
mov eax, 1
cmove ecx, eax
mov dword [0x18007cd04], ecx
mov rcx, rbp
call qword [sym.imp.KERNEL32.dll_lstrlenW]
lea r12, [0x180036a40]
mov rcx, r12
movsxd rbx, eax
call qword [sym.imp.KERNEL32.dll_lstrlenW]
xor r9d, r9d
xor edx, edx
mov r11, rbx
movsxd rsi, eax
test ebx, ebx
jle 0x1800097bd
nop dword [rax]
xor r10d, r10d
xor r8d, r8d
test esi, esi
jle 0x18000976b
lea rbx, [rdx + rdx]
sub rbx, r12
add rbx, rbp
nop word [rax + rax]
movzx eax, word [r12 + r8*2]
lea rcx, [rbx + r8*2]
cmp word [rcx + r12], ax
jne 0x18000976b
inc r8
inc r10d
cmp r8, rsi
jl 0x180009750
cmp r10d, esi
jne 0x180009793
add rdx, rsi
add r9d, esi
cmp rdx, r11
jge 0x180009793
nop dword [rax + rax]
cmp word [rbp + rdx*2], 0x7c
je 0x1800097a0
inc rdx
inc r9d
cmp rdx, r11
jl 0x180009780
inc rdx
inc r9d
cmp rdx, r11
jl 0x180009730
jmp 0x1800097bd
mov ecx, dword [0x18007cd08]
movsxd rax, r9d
cmp word [rbp + rax*2 - 2], 0x31
mov eax, 1
cmove ecx, eax
mov dword [0x18007cd08], ecx
mov rcx, rbp
call qword [sym.imp.KERNEL32.dll_lstrlenW]
lea r12, [0x180036a48]
mov rcx, r12
movsxd rbx, eax
call qword [sym.imp.KERNEL32.dll_lstrlenW]
xor r9d, r9d
xor edx, edx
mov r11, rbx
movsxd rsi, eax
test ebx, ebx
jle 0x18000987d
nop dword [rax]
xor r10d, r10d
xor r8d, r8d
test esi, esi
jle 0x18000982b
lea rbx, [rdx + rdx]
sub rbx, r12
add rbx, rbp
nop word [rax + rax]
movzx eax, word [r12 + r8*2]
lea rcx, [rbx + r8*2]
cmp word [rcx + r12], ax
jne 0x18000982b
inc r8
inc r10d
cmp r8, rsi
jl 0x180009810
cmp r10d, esi
jne 0x180009853
add rdx, rsi
add r9d, esi
cmp rdx, r11
jge 0x180009853
nop dword [rax + rax]
cmp word [rbp + rdx*2], 0x7c
je 0x180009860
inc rdx
inc r9d
cmp rdx, r11
jl 0x180009840
inc rdx
inc r9d
cmp rdx, r11
jl 0x1800097f0
jmp 0x18000987d
mov ecx, dword [0x18007cd0c]
movsxd rax, r9d
cmp word [rbp + rax*2 - 2], 0x31
mov eax, 1
cmove ecx, eax
mov dword [0x18007cd0c], ecx
lea rax, [rsp + 0x80]
lea rdx, str.Console
mov r9d, 0x20019
xor r8d, r8d
mov rcx, 0xffffffff80000001
mov dword [rsp + 0x78], 3
mov qword [rsp + 0x20], rax
mov dword [rsp + 0x70], 0
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
jne 0x1800098eb
mov rcx, qword [rsp + 0x80]
lea rax, [rsp + 0x70]
lea r9, [rsp + 0x78]
mov qword [rsp + 0x28], rax
lea rdx, str.IpDate
xor r8d, r8d
mov qword [rsp + 0x20], 0
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
cmp dword [rsp + 0x70], 0xa
jbe 0x180009bd9
xor edx, edx
mov r8d, 0x7d0
mov rcx, rbp
call fcn.18001b160
mov rcx, qword [rsp + 0x80]
lea r11, [rsp + 0x70]
mov qword [rsp + 0x28], r11
lea r9, [rsp + 0x78]
lea rdx, str.IpDate
xor r8d, r8d
mov qword [rsp + 0x20], rbp
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
lea rdx, [0x18007c48e]
lea rcx, [0x1800369a0]
xor r8d, r8d
call fcn.180008dd0
lea rdx, [0x18007c68c]
lea rcx, [0x1800369a8]
xor r8d, r8d
call fcn.180008dd0
mov rcx, rbp
call qword [sym.imp.KERNEL32.dll_lstrlenW]
mov rcx, r15
movsxd rbx, eax
call qword [sym.imp.KERNEL32.dll_lstrlenW]
xor r9d, r9d
xor edx, edx
mov r11, rbx
movsxd rsi, eax
test ebx, ebx
jle 0x1800099f2
xor r10d, r10d
xor r8d, r8d
test esi, esi
jle 0x1800099bb
lea rbx, [rdx + rdx]
sub rbx, r15
add rbx, rbp
nop word [rax + rax]
movzx eax, word [r15 + r8*2]
lea rcx, [rbx + r8*2]
cmp word [rcx + r15], ax
jne 0x1800099bb
inc r8
inc r10d
cmp r8, rsi
jl 0x1800099a0
cmp r10d, esi
jne 0x1800099e7
add rdx, rsi
add r9d, esi
cmp rdx, r11
jge 0x1800099e7
nop dword [rax + rax]
cmp word [rbp + rdx*2], 0x7c
je 0x180009ac0
inc rdx
inc r9d
cmp rdx, r11
jl 0x1800099d0
inc rdx
inc r9d
cmp rdx, r11
jl 0x180009982
mov r15d, 1
lea rdx, [0x18007c6cc]
lea rcx, [0x1800369b8]
xor r8d, r8d
call fcn.180008dd0
lea rdx, [0x18007c8ca]
lea rcx, [0x1800369c0]
xor r8d, r8d
call fcn.180008dd0
mov rcx, rbp
call qword [sym.imp.KERNEL32.dll_lstrlenW]
lea r12, [0x1800369c8]
mov rcx, r12
movsxd rbx, eax
call qword [sym.imp.KERNEL32.dll_lstrlenW]
xor r9d, r9d
xor edx, edx
mov r11, rbx
movsxd rsi, eax
test ebx, ebx
jle 0x180009afd
xor r10d, r10d
xor r8d, r8d
test esi, esi
jle 0x180009a8b
lea rbx, [rdx + rdx]
sub rbx, r12
add rbx, rbp
nop word [rax + rax]
movzx eax, word [r12 + r8*2]
lea rcx, [rbx + r8*2]
cmp word [rcx + r12], ax
jne 0x180009a8b
inc r8
inc r10d
cmp r8, rsi
jl 0x180009a70
cmp r10d, esi
jne 0x180009ab3
add rdx, rsi
add r9d, esi
cmp rdx, r11
jge 0x180009ab3
nop dword [rax + rax]
cmp word [rbp + rdx*2], 0x7c
je 0x180009ae4
inc rdx
inc r9d
cmp rdx, r11
jl 0x180009aa0
inc rdx
inc r9d
cmp rdx, r11
jl 0x180009a53
jmp 0x180009afd
mov ecx, dword [0x18007c6c8]
movsxd rax, r9d
mov r15d, 1
cmp word [rbp + rax*2 - 2], 0x31
cmove ecx, r15d
mov dword [0x18007c6c8], ecx
jmp 0x1800099f8
mov ecx, dword [0x18007c908]
movsxd rax, r9d
cmp word [rbp + rax*2 - 2], 0x31
cmove ecx, r15d
mov dword [0x18007c908], ecx
lea rdx, [0x18007c90c]
lea rcx, [0x1800369d0]
xor r8d, r8d
call fcn.180008dd0
lea rdx, [0x18007cb0a]
lea rcx, [0x1800369d8]
xor r8d, r8d
call fcn.180008dd0
mov rcx, rbp
call qword [sym.imp.KERNEL32.dll_lstrlenW]
mov rcx, r14
movsxd rbx, eax
call qword [sym.imp.KERNEL32.dll_lstrlenW]
xor r9d, r9d
xor edx, edx
mov r11, rbx
movsxd rsi, eax
test ebx, ebx
jle 0x180009bd9
xor r10d, r10d
xor r8d, r8d
test esi, esi
jle 0x180009b8b
lea rbx, [rdx + rdx]
sub rbx, r14
add rbx, rbp
nop word [rax + rax]
movzx eax, word [r14 + r8*2]
lea rcx, [rbx + r8*2]
cmp word [rcx + r14], ax
jne 0x180009b8b
inc r8
inc r10d
cmp r8, rsi
jl 0x180009b70
cmp r10d, esi
jne 0x180009bb3
add rdx, rsi
add r9d, esi
cmp rdx, r11
jge 0x180009bb3
nop dword [rax + rax]
cmp word [rbp + rdx*2], 0x7c
je 0x180009bc0
inc rdx
inc r9d
cmp rdx, r11
jl 0x180009ba0
inc rdx
inc r9d
cmp rdx, r11
jl 0x180009b51
jmp 0x180009bd9
mov ecx, dword [0x18007cb48]
movsxd rax, r9d
cmp word [rbp + rax*2 - 2], 0x31
cmove ecx, r15d
mov dword [0x18007cb48], ecx
mov r14, qword [rsp + 0x38]
mov r12, qword [rsp + 0x40]
mov rdi, qword [rsp + 0x48]
mov rsi, qword [rsp + 0x50]
mov rbp, qword [rsp + 0x58]
mov rbx, qword [rsp + 0x60]
mov r15, qword [rsp + 0x30]
add rsp, 0x68
ret