Function at 0x180004c60
Capabilities:
Query or enumerate registry value
Set registry value

Disassembly:
mov rax, rsp
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x368]
sub rsp, 0x440
mov qword [rbp + 0x18], 0xfffffffffffffffe
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], rsi
mov qword [rax + 0x20], rdi
mov rax, qword [0x1800f4320]
xor rax, rsp
mov qword [rbp + 0x330], rax
movzx r14d, dl
mov rdi, rcx
xor r12d, r12d
mov dword [rbp + 0xe8], r12d
xor eax, eax
mov qword [rbp + 0x128], rax
mov qword [rbp + 0x130], rax
mov qword [rbp + 0x138], rax
lea r8, [rcx + 0xe0]
cmp qword [r8 + 0x18], 8
jb 0x180004cd8
mov r8, qword [r8]
mov qword [rbp + 0x128], r12
mov dword [rbp + 0x130], r12d
mov qword [rbp + 0x138], r12
mov r9d, 0x2001f
lea rcx, [rbp + 0x128]
call fcn.18002ba90
nop
mov ebx, r12d
mov dword [rbp + 0xe0], 4
mov dword [rsp + 0x50], 4
mov dword [rbp + 0xe8], r12d
lea rax, [rsp + 0x50]
mov qword [rsp + 0x28], rax
lea rax, [rbp + 0xe8]
mov qword [rsp + 0x20], rax
lea r9, [rbp + 0xe0]
xor r8d, r8d
lea rdx, str.cl_time
mov r15, qword [rbp + 0x128]
mov rcx, r15
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
test eax, eax
jne 0x180004d71
mov eax, dword [rbp + 0xe0]
add eax, 0xfffffffd
cmp eax, 1
ja 0x180004d71
cmp dword [rsp + 0x50], 4
cmove ebx, dword [rbp + 0xe8]
mov qword [rsp + 0x28], r12
mov qword [rsp + 0x20], r12
xor r9d, r9d
xor r8d, r8d
lea rdx, str.cl_time
mov rcx, r15
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
test eax, eax
sete sil
xor ecx, ecx
call fcn.1800868bc
mov rdx, rax
mov ecx, ebx
sub rdx, rcx
mov qword [rbp + 0x118], r12
mov qword [rbp + 0x120], r12
mov qword [rbp + 0x120], reloc.WS2_32.dll_ntohs
mov qword [rbp + 0x118], r12
lea rax, [rbp + 0x108]
cmp qword [rbp + 0x120], 0x10
cmovae rax, qword [rbp + 0x108]
mov byte [rax], 0
test r14b, r14b
je 0x180004f31
test sil, sil
je 0x180004dfb
cmp rdx, 0xe10
jle 0x180004f31
cmp qword [rdi + 0x18], 0x10
jb 0x180004e07
mov rdx, qword [rdi]
jmp 0x180004e0a
mov rdx, rdi
lea rcx, [rsp + 0x58]
call fcn.180008ac0
nop
mov rdx, rax
lea rcx, [rbp + 0x108]
call fcn.180006860
nop
cmp qword [rsp + 0x70], 0x10
jb 0x180004e80
mov rcx, qword [rsp + 0x58]
mov rax, qword [rsp + 0x70]
inc rax
cmp rax, 0x1000
jb 0x180004e7a
test cl, 0x1f
je 0x180004e4d
call fcn.180086214
int3
mov rax, qword [rcx - 8]
cmp rax, rcx
jb 0x180004e5c
call fcn.180086214
int3
sub rcx, rax
cmp rcx, 8
jae 0x180004e6b
call fcn.180086214
int3
cmp rcx, 0x27
jbe 0x180004e77
call fcn.180086214
int3
mov rcx, rax
call fcn.180081458
nop
mov qword [rsp + 0x70], reloc.WS2_32.dll_ntohs
mov qword [rsp + 0x68], r12
lea rax, [rsp + 0x58]
cmp qword [rsp + 0x70], 0x10
cmovae rax, qword [rsp + 0x58]
mov byte [rax], 0
mov rax, qword [rbp + 0x118]
test rax, rax
je 0x180005b7e
mov rcx, qword [rbp + 0x118]
lea rax, [rbp + 0x108]
cmp qword [rbp + 0x120], 0x10
cmovae rax, qword [rbp + 0x108]
mov dword [rsp + 0x28], ecx
mov qword [rsp + 0x20], rax
mov r9d, 3
xor r8d, r8d
lea rdx, str.cl_data
mov rcx, r15
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
xor ecx, ecx
call fcn.1800868bc
mov dword [rbp + 0xe8], eax
mov dword [rsp + 0x28], 4
lea rax, [rbp + 0xe8]
mov qword [rsp + 0x20], rax
mov r9d, 4
xor r8d, r8d
lea rdx, str.cl_time
mov rcx, r15
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
jmp 0x180005004
mov dword [rbp + 0xe0], r12d
mov dword [rbp + 0xe8], 3
lea rax, [rbp + 0xe0]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], r12
lea r9, [rbp + 0xe8]
xor r8d, r8d
lea rdx, str.cl_data
mov rcx, r15
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
mov eax, dword [rbp + 0xe0]
test eax, eax
je 0x180005004
mov edx, eax
cmp rax, qword [rbp + 0x118]
ja 0x180004faa
mov qword [rbp + 0x118], rax
lea rax, [rbp + 0x108]
cmp qword [rbp + 0x120], 0x10
cmovae rax, qword [rbp + 0x108]
mov byte [rdx + rax], 0
jmp 0x180004fc1
sub rdx, qword [rbp + 0x118]
xor r8d, r8d
lea rcx, [rbp + 0x108]
call fcn.180004080
nop
lea rax, [rbp + 0x108]
cmp qword [rbp + 0x120], 0x10
cmovae rax, qword [rbp + 0x108]
lea rcx, [rbp + 0xe0]
mov qword [rsp + 0x28], rcx
mov qword [rsp + 0x20], rax
lea r9, [rbp + 0xe8]
xor r8d, r8d
lea rdx, str.cl_data
mov rcx, r15
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
nop
mov rax, qword [rbp + 0x118]
test rax, rax
je 0x180005b7e
xor edx, edx
mov r8d, VarDecFix
lea rcx, [rbp + 0x270]
call fcn.180084ad0
nop
lea rcx, [rbp + 0x270]
call fcn.180013b20
nop
mov qword [rbp + 0x1e0], r12
mov qword [rbp + 0x1e8], r12
mov qword [rbp + 0x1e8], 7
mov qword [rbp + 0x1e0], r12
lea rax, [rbp + 0x1d0]
cmp qword [rbp + 0x1e8], 8
cmovae rax, qword [rbp + 0x1d0]
mov word [rax], r12w
lea r13, [rdi + 0x118]
mov qword [rbp + 0xe8], r13
mov rdi, qword [r13 + 8]
mov rbx, qword [r13]
cmp rbx, rdi
je 0x1800050a2
nop dword [rax]
mov rcx, rbx
call fcn.180005c20
nop
add rbx, 0x60
cmp rbx, rdi
jne 0x180005090
mov rax, qword [r13]
mov qword [r13 + 8], rax
mov r8, qword [rbp + 0x118]
lea rdx, [rbp + 0x108]
cmp qword [rbp + 0x120], 0x10
cmovae rdx, qword [rbp + 0x108]
lea r9, [rbp + 0x1d0]
mov rcx, qword [rbp + 0x270]
call fcn.180017950
test al, al
je 0x180005b5f
mov rax, qword [rbp + 0x270]
mov rcx, qword [rax + 0x20]
mov qword [rbp + 0x278], rcx
lea rcx, [rbp + 0x278]
call fcn.1800135a0
nop
mov r14, qword [rax]
mov r15, qword [rax + 8]
cmp r14, r15
je 0x180005b58
xor eax, eax
mov qword [rbp + 0xf0], rax
mov qword [rbp + 0xf8], rax
mov qword [rbp + 0x100], rax
xorps xmm0, xmm0
movdqu xmmword [rbp + 0xf0], xmm0
mov qword [rbp + 0x100], r12
lea rax, [rsp + 0x30]
mov qword [rsp + 0x50], rax
xor ecx, ecx
mov qword [rsp + 0x40], rcx
mov qword [rsp + 0x48], rcx
mov qword [rsp + 0x48], 7
mov qword [rsp + 0x40], rcx
lea rax, [rsp + 0x30]
cmp qword [rsp + 0x48], 8
cmovae rax, qword [rsp + 0x30]
mov word [rax], cx
lea r8d, [rcx + 3]
lea rdx, [0x1800d52b8]
lea rcx, [rsp + 0x30]
call fcn.1800034d0
nop
lea rdx, [rsp + 0x30]
mov rcx, r14
call fcn.1800132a0
mov rcx, rax
lea rdx, [rbp + 0x188]
call fcn.180012ed0
nop
mov rdi, qword [rbp + 0x188]
mov rbx, rdi
mov rsi, qword [rbp + 0x190]
cmp rdi, rsi
je 0x18000540a
mov rdi, qword [rbp + 0xf8]
mov r13, qword [rbp + 0xf0]
nop
lea rdx, [rsp + 0x78]
mov rcx, rbx
call fcn.180011a50
nop
mov rdx, rax
lea rcx, [rbp - 8]
call fcn.18002add0
nop
lea rax, [rbp - 8]
cmp rax, rdi
jae 0x1800052e2
lea rax, [rbp - 8]
cmp r13, rax
ja 0x1800052e2
lea rsi, [rbp - 8]
sub rsi, r13
cmp rdi, r12
jne 0x18000528b
mov rax, r12
sub rax, rdi
sar rax, 5
cmp rax, 1
jae 0x18000528b
sub rdi, r13
sar rdi, 5
movabs rcx, 0x7ffffffffffffff
mov rax, rcx
sub rax, rdi
cmp rax, 1
jb 0x180005b3e
lea rdx, [rdi + 1]
sub r12, r13
sar r12, 5
mov rax, r12
shr rax, 1
sub rcx, rax
add rax, r12
xor r8d, r8d
cmp rcx, r12
cmovae r8, rax
cmp r8, rdx
cmovae rdx, r8
lea rcx, [rbp + 0xf0]
call fcn.1800071d0
mov r12, qword [rbp + 0x100]
mov rdi, qword [rbp + 0xf8]
mov r13, qword [rbp + 0xf0]
and rsi, 0xffffffffffffffe0
add rsi, r13
test rdi, rdi
je 0x1800052cb
xor eax, eax
mov qword [rdi + 0x10], rax
mov qword [rdi + 0x18], rax
mov qword [rdi + 0x18], reloc.WS2_32.dll_ntohs
mov qword [rdi + 0x10], rax
cmp qword [rdi + 0x18], 0x10
jb 0x1800052b9
mov rax, qword [rdi]
jmp 0x1800052bc
mov rax, rdi
mov byte [rax], 0
mov rdx, rsi
mov rcx, rdi
call fcn.180006da0
nop
add rdi, 0x20
mov qword [rbp + 0xf8], rdi
mov rsi, qword [rbp + 0x190]
jmp 0x1800053a6
cmp rdi, r12
jne 0x180005361
mov rax, r12
sub rax, rdi
sar rax, 5
cmp rax, 1
jae 0x180005361
sub rdi, r13
sar rdi, 5
movabs rcx, 0x7ffffffffffffff
mov rax, rcx
sub rax, rdi
cmp rax, 1
jb 0x180005b4b
lea rdx, [rdi + 1]
sub r12, r13
sar r12, 5
mov rax, r12
shr rax, 1
sub rcx, rax
add rax, r12
xor r8d, r8d
cmp rcx, r12
cmovae r8, rax
cmp r8, rdx
cmovae rdx, r8
lea rcx, [rbp + 0xf0]
call fcn.1800071d0
mov r12, qword [rbp + 0x100]
mov rdi, qword [rbp + 0xf8]
mov r13, qword [rbp + 0xf0]
test rdi, rdi
je 0x18000539b
xor eax, eax
mov qword [rdi + 0x10], rax
mov qword [rdi + 0x18], rax
mov qword [rdi + 0x18], reloc.WS2_32.dll_ntohs
mov qword [rdi + 0x10], rax
cmp qword [rdi + 0x18], 0x10
jb 0x180005388
mov rax, qword [rdi]
jmp 0x18000538b
mov rax, rdi
mov byte [rax], 0
lea rdx, [rbp - 8]
mov rcx, rdi
call fcn.180006da0
nop
add rdi, 0x20
mov qword [rbp + 0xf8], rdi
lea rcx, [rbp - 8]
call fcn.180003280
nop
cmp qword [rbp - 0x70], 8
jb 0x1800053ce
mov rdx, qword [rsp + 0x78]
mov r8, qword [rbp - 0x70]
inc r8
lea rcx, [rsp + 0x78]
call fcn.180003df0
nop
mov qword [rbp - 0x70], 7
xor ecx, ecx
mov qword [rbp - 0x78], rcx
lea rax, [rsp + 0x78]
cmp qword [rbp - 0x70], 8
cmovae rax, qword [rsp + 0x78]
mov word [rax], cx
sub rbx, 0xffffffffffffff80
cmp rbx, rsi
jne 0x1800051d0
mov rdi, qword [rbp + 0x188]
mov r13, qword [rbp + 0xe8]
test rdi, rdi
je 0x18000545a
mov rbx, rdi
cmp rdi, rsi
je 0x180005429
mov rcx, rbx
call fcn.1800119a0
nop
sub rbx, 0xffffffffffffff80
cmp rbx, rsi
jne 0x180005417
mov r8, qword [rbp + 0x198]
sub r8, rdi
sar r8, 7
mov rdx, rdi
call fcn.180007270
nop
xor r12d, r12d
mov qword [rbp + 0x188], r12
mov qword [rbp + 0x190], r12
mov qword [rbp + 0x198], r12
jmp 0x18000545d
xor r12d, r12d
xor eax, eax
mov qword [rbp + 0x170], rax
mov qword [rbp + 0x178], rax
mov qword [rbp + 0x180], rax
xorps xmm0, xmm0
movdqu xmmword [rbp + 0x170], xmm0
mov qword [rbp + 0x180], r12
lea rax, [rsp + 0x30]
mov qword [rsp + 0x50], rax
mov qword [rsp + 0x40], r12
mov qword [rsp + 0x48], r12
mov qword [rsp + 0x48], 7
mov qword [rsp + 0x40], r12
lea rax, [rsp + 0x30]
cmp qword [rsp + 0x48], 8
cmovae rax, qword [rsp + 0x30]
mov word [rax], r12w
mov r8d, 7
lea rdx, str.version
lea rcx, [rsp + 0x30]
call fcn.1800034d0
nop
lea rdx, [rsp + 0x30]
mov rcx, r14
call fcn.1800132a0
mov rcx, rax
lea rdx, [rbp + 0x1a0]
call fcn.180012ed0
nop
mov rsi, qword [rbp + 0x1a0]
mov rbx, rsi
mov rdi, qword [rbp + 0x1a8]
cmp rsi, rdi
je 0x180005588
nop dword [rax]
lea rdx, [rbp - 0x68]
mov rcx, rbx
call fcn.180011a50
nop
mov rdx, rax
lea rcx, [rbp + 0x20]
call fcn.18002add0
nop
lea rdx, [rbp + 0x20]
lea rcx, [rbp + 0x170]
call fcn.180006680
nop
lea rcx, [rbp + 0x20]
call fcn.180003280
nop
cmp qword [rbp - 0x50], 8
jb 0x180005561
mov rdx, qword [rbp - 0x68]
mov r8, qword [rbp - 0x50]
inc r8
lea rcx, [rbp - 0x68]
call fcn.180003df0
nop
mov qword [rbp - 0x50], 7
mov qword [rbp - 0x58], r12
lea rax, [rbp - 0x68]
cmp qword [rbp - 0x50], 8
cmovae rax, qword [rbp - 0x68]
mov word [rax], r12w
sub rbx, 0xffffffffffffff80
cmp rbx, rdi
jne 0x180005510
test rsi, rsi
je 0x1800055d3
mov rbx, rsi
cmp rsi, rdi
je 0x1800055a7
mov rcx, rbx
call fcn.1800119a0
nop
sub rbx, 0xffffffffffffff80
cmp rbx, rdi
jne 0x180005595
mov r8, qword [rbp + 0x1b0]
sub r8, rsi
sar r8, 7
mov rdx, rsi
call fcn.180007270
nop
mov qword [rbp + 0x1a0], r12
mov qword [rbp + 0x1a8], r12
mov qword [rbp + 0x1b0], r12
xor eax, eax
mov qword [rbp + 0x158], rax
mov qword [rbp + 0x160], rax
mov qword [rbp + 0x168], rax
xorps xmm0, xmm0
movdqu xmmword [rbp + 0x158], xmm0
mov qword [rbp + 0x168], r12
lea rax, [rsp + 0x30]
mov qword [rsp + 0x50], rax
mov qword [rsp + 0x40], r12
mov qword [rsp + 0x48], r12
mov qword [rsp + 0x48], 7
mov qword [rsp + 0x40], r12
lea rax, [rsp + 0x30]
cmp qword [rsp + 0x48], 8
cmovae rax, qword [rsp + 0x30]
mov word [rax], r12w
mov r8d, 3
lea rdx, [0x1800d52d0]
lea rcx, [rsp + 0x30]
call fcn.1800034d0
nop
lea rdx, [rsp + 0x30]
mov rcx, r14
call fcn.1800132a0
mov rcx, rax
lea rdx, [rbp + 0x1b8]
call fcn.180012ed0
nop
mov rsi, qword [rbp + 0x1b8]
mov rbx, rsi
mov rdi, qword [rbp + 0x1c0]
cmp rsi, rdi
je 0x1800056f8
nop
lea rdx, [rbp - 0x48]
mov rcx, rbx
call fcn.180011a50
nop
mov rdx, rax
lea rcx, [rbp + 0x40]
call fcn.18002add0
nop
lea rdx, [rbp + 0x40]
lea rcx, [rbp + 0x158]
call fcn.180006680
nop
lea rcx, [rbp + 0x40]
call fcn.180003280
nop
cmp qword [rbp - 0x30], 8
jb 0x1800056d1
mov rdx, qword [rbp - 0x48]
mov r8, qword [rbp - 0x30]
inc r8
lea rcx, [rbp - 0x48]
call fcn.180003df0
nop
mov qword [rbp - 0x30], 7
mov qword [rbp - 0x38], r12
lea rax, [rbp - 0x48]
cmp qword [rbp - 0x30], 8
cmovae rax, qword [rbp - 0x48]
mov word [rax], r12w
sub rbx, 0xffffffffffffff80
cmp rbx, rdi
jne 0x180005680
test rsi, rsi
je 0x180005743
mov rbx, rsi
cmp rsi, rdi
je 0x180005717
mov rcx, rbx
call fcn.1800119a0
nop
sub rbx, 0xffffffffffffff80
cmp rbx, rdi
jne 0x180005705
mov r8, qword [rbp + 0x1c8]
sub r8, rsi
sar r8, 7
mov rdx, rsi
call fcn.180007270
nop
mov qword [rbp + 0x1b8], r12
mov qword [rbp + 0x1c0], r12
mov qword [rbp + 0x1c8], r12
xor eax, eax
mov qword [rbp + 0x140], rax
mov qword [rbp + 0x148], rax
mov qword [rbp + 0x150], rax
xorps xmm0, xmm0
movdqu xmmword [rbp + 0x140], xmm0
mov qword [rbp + 0x150], r12
lea rax, [rsp + 0x30]
mov qword [rsp + 0x50], rax
mov qword [rsp + 0x40], r12
mov qword [rsp + 0x48], r12
mov qword [rsp + 0x48], 7
mov qword [rsp + 0x40], r12
lea rax, [rsp + 0x30]
cmp qword [rsp + 0x48], 8
cmovae rax, qword [rsp + 0x30]
mov word [rax], r12w
mov r8d, 0xa
lea rdx, str.allow_list
lea rcx, [rsp + 0x30]
call fcn.1800034d0
nop
lea rdx, [rsp + 0x30]
mov rcx, r14
call fcn.1800132a0
mov rcx, rax
call fcn.1800135a0
nop
mov rdi, qword [rax]
mov rsi, qword [rax + 8]
cmp rdi, rsi
je 0x1800059a5
lea rdx, [rbp - 0x28]
mov rcx, rdi
call fcn.180012e00
nop
mov rdx, rax
lea rcx, [rbp + 0x248]
call fcn.18002add0
nop
cmp qword [rbp - 0x10], 8
jb 0x18000581a
mov rdx, qword [rbp - 0x28]
mov r8, qword [rbp - 0x10]
inc r8
lea rcx, [rbp - 0x28]
call fcn.180003df0
nop
mov qword [rbp - 0x10], 7
mov qword [rbp - 0x18], r12
lea rax, [rbp - 0x28]
cmp qword [rbp - 0x10], 8
cmovae rax, qword [rbp - 0x28]
mov word [rax], r12w
lea rdx, [rbp + 0x230]
mov rcx, rdi
call fcn.180012ed0
nop
mov rbx, qword [rbp + 0x230]
mov r12, qword [rbp + 0x238]
cmp rbx, r12
je 0x18000596f
xor r13d, r13d
mov qword [rbp + 0x200], r13
mov qword [rbp + 0x208], r13
xor r8d, r8d
xor edx, edx
lea rcx, [rbp + 0x1f0]
call fcn.180003760
nop
mov qword [rbp + 0x220], r13
mov qword [rbp + 0x228], r13
xor r8d, r8d
xor edx, edx
lea rcx, [rbp + 0x210]
call fcn.180003760
nop
or r9, 0xffffffffffffffff
xor r8d, r8d
lea rdx, [rbp + 0x248]
lea rcx, [rbp + 0x1f0]
call fcn.180003a30
lea rdx, [rsp + 0x58]
mov rcx, rbx
call fcn.180011a50
nop
mov rdx, rax
lea rcx, [rbp + 0x60]
call fcn.18002add0
nop
lea rdx, [rbp + 0x60]
lea rcx, [rbp + 0x210]
call fcn.180006860
nop
lea rcx, [rbp + 0x60]
call fcn.180003280
nop
cmp qword [rsp + 0x70], 8
jb 0x180005912
mov rdx, qword [rsp + 0x58]
mov r8, qword [rsp + 0x70]
inc r8
lea rcx, [rsp + 0x58]
call fcn.180003df0
nop
mov qword [rsp + 0x70], 7
mov qword [rsp + 0x68], r13
lea rax, [rsp + 0x58]
cmp qword [rsp + 0x70], 8
cmovae rax, qword [rsp + 0x58]
mov word [rax], r13w
lea rdx, [rbp + 0x1f0]
lea rcx, [rbp + 0x140]
call fcn.1800064f0
nop
lea rcx, [rbp + 0x210]
call fcn.180003280
lea rcx, [rbp + 0x1f0]
call fcn.180003280
nop
sub rbx, 0xffffffffffffff80
cmp rbx, r12
jne 0x180005862
lea rcx, [rbp + 0x230]
call fcn.180006bc0
nop
lea rcx, [rbp + 0x248]
call fcn.180003280
add rdi, 0xb0
cmp rdi, rsi
mov r12d, 0
jne 0x1800057e1
mov r13, qword [rbp + 0xe8]
lea rdx, [rbp + 0xf0]
lea rcx, [rbp + 0x80]
call fcn.180006710
nop
lea rdx, [rbp + 0x170]
lea rcx, [rbp + 0x98]
call fcn.180006710
nop
lea rdx, [rbp + 0x158]
lea rcx, [rbp + 0xb0]
call fcn.180006710
nop
lea rdx, [rbp + 0x140]
lea rcx, [rbp + 0xc8]
call fcn.1800065d0
nop
lea rdx, [rbp + 0x80]
mov rcx, r13
call fcn.180006450
nop
lea rcx, [rbp + 0x80]
call fcn.180005c20
nop
mov rbx, qword [rbp + 0x140]
test rbx, rbx
je 0x180005a5a
mov rdx, qword [rbp + 0x148]
mov rcx, rbx
call fcn.1800075a0
nop
mov r8, qword [rbp + 0x150]
sub r8, rbx
sar r8, 6
mov rdx, rbx
call fcn.180006fe0
nop
mov qword [rbp + 0x140], r12
mov qword [rbp + 0x148], r12
mov qword [rbp + 0x150], r12
mov rbx, qword [rbp + 0x158]
test rbx, rbx
je 0x180005aa2
mov rdx, qword [rbp + 0x160]
mov rcx, rbx
call fcn.1800044e0
nop
mov r8, qword [rbp + 0x168]
sub r8, rbx
sar r8, 5
mov rdx, rbx
call fcn.180003d50
nop
mov qword [rbp + 0x158], r12
mov qword [rbp + 0x160], r12
mov qword [rbp + 0x168], r12
mov rbx, qword [rbp + 0x170]
test rbx, rbx
je 0x180005aea
mov rdx, qword [rbp + 0x178]
mov rcx, rbx
call fcn.1800044e0
nop
mov r8, qword [rbp + 0x180]
sub r8, rbx
sar r8, 5
mov rdx, rbx
call fcn.180003d50
nop
mov qword [rbp + 0x170], r12
mov qword [rbp + 0x178], r12
mov qword [rbp + 0x180], r12
mov rbx, qword [rbp + 0xf0]
test rbx, rbx
je 0x180005b32
mov rdx, qword [rbp + 0xf8]
mov rcx, rbx
call fcn.1800044e0
nop
mov r8, qword [rbp + 0x100]
sub r8, rbx
sar r8, 5
mov rdx, rbx
call fcn.180003d50
nop
mov qword [rbp + 0xf0], r12
mov qword [rbp + 0xf8], r12
mov qword [rbp + 0x100], r12
add r14, 0xb0
jmp 0x180005109
lea rcx, str.vector_T__too_long
call fcn.18007e060
int3
lea rcx, str.vector_T__too_long
call fcn.18007e060
nop
mov r15, qword [rbp + 0x128]
xor r8d, r8d
mov dl, 1
lea rcx, [rbp + 0x1d0]
call fcn.180003450
nop
lea rcx, [rbp + 0x270]
call fcn.180013c40
nop
lea rcx, [rbp + 0x108]
call fcn.180003280
nop
test r15, r15
je 0x180005ba7
mov rcx, r15
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov qword [rbp + 0x128], r12
mov dword [rbp + 0x130], r12d
mov rcx, qword [rbp + 0x138]
mov qword [rbp + 0x138], r12
test rcx, rcx
je 0x180005bc4
mov rax, qword [rcx]
mov edx, 1
call qword [rax]
mov rcx, qword [rbp + 0x330]
xor rcx, rsp
call fcn.180081d90
lea r11, [rsp + 0x440]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret