Function at 0x180007370
Capabilities:
Query or enumerate registry value

Disassembly:
mov qword [rsp + 8], rbx
push rbp
mov rbp, rsp
sub rsp, 0x50
mov rax, qword [0x18004f010]
xor rax, rsp
mov qword [rbp - 0x10], rax
lea rax, [rbp - 0x20]
mov r9d, 0x20019
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, str.SYSTEMCurrentControlSetServicesuKey
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
xor ebx, ebx
test eax, eax
jne 0x1800073ee
mov rcx, qword [rbp - 0x20]
lea rax, [rbp - 0x18]
mov qword [rsp + 0x28], rax
lea r9, [rbp - 0x14]
lea rax, [0x180057b7e]
mov dword [rbp - 0x14], ebx
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, [0x180044bd8]
mov dword [rbp - 0x18], 1
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
lea rax, [rbp - 0x20]
mov r9d, 0x20019
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, str.SYSTEMCurrentControlSetServicesuKey
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x18000744f
mov rcx, qword [rbp - 0x20]
lea rax, [rbp - 0x14]
mov qword [rsp + 0x28], rax
lea r9, [rbp - 0x18]
lea rax, [0x180057b7a]
mov dword [rbp - 0x18], ebx
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, [0x180044be8]
mov dword [rbp - 0x14], 1
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
lea rax, [rbp - 0x20]
mov r9d, 0x20019
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, str.SYSTEMCurrentControlSetServicesuKey
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x1800074b0
mov rcx, qword [rbp - 0x20]
lea rax, [rbp - 0x14]
mov qword [rsp + 0x28], rax
lea r9, [rbp - 0x18]
lea rax, [0x18004f106]
mov dword [rbp - 0x18], ebx
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, [0x180044bf8]
mov dword [rbp - 0x14], 1
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
lea rax, [rbp - 0x20]
mov r9d, 0x20019
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, str.SYSTEMCurrentControlSetServicesuKey
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x180007511
mov rcx, qword [rbp - 0x20]
lea rax, [rbp - 0x14]
mov qword [rsp + 0x28], rax
lea r9, [rbp - 0x18]
lea rax, [0x18004f107]
mov dword [rbp - 0x18], ebx
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, [0x180044c08]
mov dword [rbp - 0x14], 1
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
lea rax, [rbp - 0x20]
mov r9d, 0x20019
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, str.SYSTEMCurrentControlSetServicesuKey
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x180007572
mov rcx, qword [rbp - 0x20]
lea rax, [rbp - 0x14]
mov qword [rsp + 0x28], rax
lea r9, [rbp - 0x18]
lea rax, [0x180057b73]
mov dword [rbp - 0x18], ebx
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, [0x180044c18]
mov dword [rbp - 0x14], 1
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
lea rax, [rbp - 0x20]
mov r9d, 0x20019
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, str.SYSTEMCurrentControlSetServicesuKey
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x1800075d3
mov rcx, qword [rbp - 0x20]
lea rax, [rbp - 0x14]
mov qword [rsp + 0x28], rax
lea r9, [rbp - 0x18]
lea rax, [0x180057b72]
mov dword [rbp - 0x18], ebx
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, [0x180044c28]
mov dword [rbp - 0x14], 1
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
lea rax, [rbp - 0x20]
mov r9d, 0x20019
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, str.SYSTEMCurrentControlSetServicesuKey
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x180007634
mov rcx, qword [rbp - 0x20]
lea rax, [rbp - 0x14]
mov qword [rsp + 0x28], rax
lea r9, [rbp - 0x18]
lea rax, [0x180057b6a]
mov dword [rbp - 0x18], ebx
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, [0x180044c38]
mov dword [rbp - 0x14], 1
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
lea rax, [rbp - 0x20]
mov r9d, 0x20019
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, str.SYSTEMCurrentControlSetServicesuKey
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x180007695
mov rcx, qword [rbp - 0x20]
lea rax, [rbp - 0x14]
mov qword [rsp + 0x28], rax
lea r9, [rbp - 0x18]
lea rax, [0x180057b69]
mov dword [rbp - 0x18], ebx
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, [0x180044c48]
mov dword [rbp - 0x14], 1
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
lea rax, [rbp - 0x20]
mov r9d, 0x20019
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, str.SYSTEMCurrentControlSetServicesuKey
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x1800076f6
mov rcx, qword [rbp - 0x20]
lea rax, [rbp - 0x14]
mov qword [rsp + 0x28], rax
lea r9, [rbp - 0x18]
lea rax, [0x180057b78]
mov dword [rbp - 0x18], ebx
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, [0x180044c58]
mov dword [rbp - 0x14], 1
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
lea rax, [rbp - 0x20]
mov r9d, 0x20019
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, str.SYSTEMCurrentControlSetServicesuKey
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x180007757
mov rcx, qword [rbp - 0x20]
lea rax, [rbp - 0x14]
mov qword [rsp + 0x28], rax
lea r9, [rbp - 0x18]
lea rax, [0x180057b7b]
mov dword [rbp - 0x18], ebx
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, [0x180044c68]
mov dword [rbp - 0x14], 1
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
lea rax, [rbp - 0x20]
mov r9d, 0x20019
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, str.SYSTEMCurrentControlSetServicesuKey
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x1800077b8
mov rcx, qword [rbp - 0x20]
lea rax, [rbp - 0x14]
mov qword [rsp + 0x28], rax
lea r9, [rbp - 0x18]
lea rax, [0x180057b71]
mov dword [rbp - 0x18], ebx
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, [0x180044c78]
mov dword [rbp - 0x14], 1
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
lea rax, [rbp - 0x20]
mov r9d, 0x20019
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, str.SYSTEMCurrentControlSetServicesuKey
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x180007819
mov rcx, qword [rbp - 0x20]
lea rax, [rbp - 0x14]
mov qword [rsp + 0x28], rax
lea r9, [rbp - 0x18]
lea rax, [0x180057b80]
mov dword [rbp - 0x18], ebx
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, [0x180044c88]
mov dword [rbp - 0x14], 1
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
lea rax, [rbp - 0x20]
mov r9d, 0x20019
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, str.SYSTEMCurrentControlSetServicesuKey
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x18000787a
mov rcx, qword [rbp - 0x20]
lea rax, [rbp - 0x14]
mov qword [rsp + 0x28], rax
lea r9, [rbp - 0x18]
lea rax, [0x180057b83]
mov dword [rbp - 0x18], ebx
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, [0x180044c98]
mov dword [rbp - 0x14], 1
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
lea rax, [rbp - 0x20]
mov r9d, 0x20019
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, str.SYSTEMCurrentControlSetServicesuKey
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x1800078db
mov rcx, qword [rbp - 0x20]
lea rax, [rbp - 0x14]
mov qword [rsp + 0x28], rax
lea r9, [rbp - 0x18]
lea rax, [0x180057b70]
mov dword [rbp - 0x18], ebx
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, [0x180044ca8]
mov dword [rbp - 0x14], 1
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
lea rax, [rbp - 0x20]
mov r9d, 0x20019
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, str.SYSTEMCurrentControlSetServicesuKey
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x18000793c
mov rcx, qword [rbp - 0x20]
lea rax, [rbp - 0x14]
mov qword [rsp + 0x28], rax
lea r9, [rbp - 0x18]
lea rax, [0x180057b68]
mov dword [rbp - 0x18], ebx
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, [0x180044cb8]
mov dword [rbp - 0x14], 1
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
lea rax, [rbp - 0x20]
mov r9d, 0x20019
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, str.SYSTEMCurrentControlSetServicesuKey
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x18000799d
mov rcx, qword [rbp - 0x20]
lea rax, [rbp - 0x14]
mov qword [rsp + 0x28], rax
lea r9, [rbp - 0x18]
lea rax, [0x180057b6b]
mov dword [rbp - 0x18], ebx
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, [0x180044cc8]
mov dword [rbp - 0x14], 1
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
lea rax, [rbp - 0x20]
mov r9d, 0x20019
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, str.SYSTEMCurrentControlSetServicesuKey
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x1800079fe
mov rcx, qword [rbp - 0x20]
lea rax, [rbp - 0x14]
mov qword [rsp + 0x28], rax
lea r9, [rbp - 0x18]
lea rax, [0x180057b7d]
mov dword [rbp - 0x18], ebx
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, [0x180044cd8]
mov dword [rbp - 0x14], 1
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
lea rax, [rbp - 0x20]
mov r9d, 0x20019
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, str.SYSTEMCurrentControlSetServicesuKey
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x180007a5f
mov rcx, qword [rbp - 0x20]
lea rax, [rbp - 0x14]
mov qword [rsp + 0x28], rax
lea r9, [rbp - 0x18]
lea rax, [0x180057b7f]
mov dword [rbp - 0x18], ebx
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, [0x180044ce8]
mov dword [rbp - 0x14], 1
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
lea rax, [rbp - 0x20]
mov r9d, 0x20019
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, str.SYSTEMCurrentControlSetServicesuKey
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x180007ac0
mov rcx, qword [rbp - 0x20]
lea rax, [rbp - 0x14]
mov qword [rsp + 0x28], rax
lea r9, [rbp - 0x18]
lea rax, [0x180057b82]
mov dword [rbp - 0x18], ebx
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, [0x180044cf8]
mov dword [rbp - 0x14], 1
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
lea rax, [rbp - 0x20]
mov r9d, 0x20019
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, str.SYSTEMCurrentControlSetServicesuKey
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x180007b21
mov rcx, qword [rbp - 0x20]
lea rax, [rbp - 0x14]
mov qword [rsp + 0x28], rax
lea r9, [rbp - 0x18]
lea rax, [0x180057b79]
mov dword [rbp - 0x18], ebx
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, [0x180044d08]
mov dword [rbp - 0x14], 1
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
lea rax, [rbp - 0x20]
mov r9d, 0x20019
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, str.SYSTEMCurrentControlSetServicesuKey
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x180007b82
mov rcx, qword [rbp - 0x20]
lea rax, [rbp - 0x14]
mov qword [rsp + 0x28], rax
lea r9, [rbp - 0x18]
lea rax, [0x18004f110]
mov dword [rbp - 0x18], ebx
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, [0x180044d18]
mov dword [rbp - 0x14], 4
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
lea rax, [rbp - 0x20]
mov r9d, 0x20019
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, str.SYSTEMCurrentControlSetServicesuKey
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x180007be3
mov rcx, qword [rbp - 0x20]
lea rax, [rbp - 0x14]
mov qword [rsp + 0x28], rax
lea r9, [rbp - 0x18]
lea rax, [0x18004f142]
mov dword [rbp - 0x18], ebx
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, [0x180044d28]
mov dword [rbp - 0x14], 1
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
lea rax, [rbp - 0x20]
mov r9d, 0x20019
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, str.SYSTEMCurrentControlSetServicesuKey
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x180007c44
mov rcx, qword [rbp - 0x20]
lea rax, [rbp - 0x14]
mov qword [rsp + 0x28], rax
lea r9, [rbp - 0x18]
lea rax, [0x18004f11d]
mov dword [rbp - 0x18], ebx
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, [0x180044d38]
mov dword [rbp - 0x14], 1
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
lea rax, [rbp - 0x20]
mov r9d, 0x20019
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, str.SYSTEMCurrentControlSetServicesuKey
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x180007ca5
mov rcx, qword [rbp - 0x20]
lea rax, [rbp - 0x14]
mov qword [rsp + 0x28], rax
lea r9, [rbp - 0x18]
lea rax, [0x18004f125]
mov dword [rbp - 0x18], ebx
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, [0x180044d48]
mov dword [rbp - 0x14], 1
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
lea rax, [rbp - 0x20]
mov r9d, 0x20019
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, str.SYSTEMCurrentControlSetServicesuKey
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x180007d06
mov rcx, qword [rbp - 0x20]
lea rax, [rbp - 0x14]
mov qword [rsp + 0x28], rax
lea r9, [rbp - 0x18]
lea rax, [0x18004f127]
mov dword [rbp - 0x18], ebx
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, [0x180044d58]
mov dword [rbp - 0x14], 1
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
lea rax, [rbp - 0x20]
mov r9d, 0x20019
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, str.SYSTEMCurrentControlSetServicesuKey
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x180007d67
mov rcx, qword [rbp - 0x20]
lea rax, [rbp - 0x14]
mov qword [rsp + 0x28], rax
lea r9, [rbp - 0x18]
lea rax, [0x18004f100]
mov dword [rbp - 0x18], ebx
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, [0x180044d68]
mov dword [rbp - 0x14], 4
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
lea rax, [rbp - 0x20]
mov r9d, 0x20019
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, str.SYSTEMCurrentControlSetServicesuKey
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x180007dc8
mov rcx, qword [rbp - 0x20]
lea rax, [rbp - 0x14]
mov qword [rsp + 0x28], rax
lea r9, [rbp - 0x18]
lea rax, [0x18004f0ff]
mov dword [rbp - 0x18], ebx
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, [0x180044d78]
mov dword [rbp - 0x14], 1
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
lea rax, [rbp - 0x20]
mov r9d, 0x20019
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, str.SYSTEMCurrentControlSetServicesuKey
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x180007e29
mov rcx, qword [rbp - 0x20]
lea rax, [rbp - 0x14]
mov qword [rsp + 0x28], rax
lea r9, [rbp - 0x18]
lea rax, [0x18004f104]
mov dword [rbp - 0x18], ebx
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, [0x180044d88]
mov dword [rbp - 0x14], 1
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
lea rax, [rbp - 0x20]
mov r9d, 0x20019
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, str.SYSTEMCurrentControlSetServicesuKey
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x180007e8a
mov rcx, qword [rbp - 0x20]
lea rax, [rbp - 0x14]
mov qword [rsp + 0x28], rax
lea r9, [rbp - 0x18]
lea rax, [0x18004f126]
mov dword [rbp - 0x18], ebx
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, [0x180044d98]
mov dword [rbp - 0x14], 1
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
lea rax, [rbp - 0x20]
mov r9d, 0x20019
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, str.SYSTEMCurrentControlSetServicesuKey
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x180007eeb
mov rcx, qword [rbp - 0x20]
lea rax, [rbp - 0x14]
mov qword [rsp + 0x28], rax
lea r9, [rbp - 0x18]
lea rax, [0x180057bc2]
mov dword [rbp - 0x18], ebx
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, [0x180044da4]
mov dword [rbp - 0x14], 1
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
lea rax, [rbp - 0x20]
mov r9d, 0x20019
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, str.SYSTEMCurrentControlSetServicesuKey
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x180007f4c
mov rcx, qword [rbp - 0x20]
lea rax, [rbp - 0x14]
mov qword [rsp + 0x28], rax
lea r9, [rbp - 0x18]
lea rax, [0x180057ba0]
mov dword [rbp - 0x18], ebx
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, [0x180044da8]
mov dword [rbp - 0x14], 1
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
lea rax, [rbp - 0x20]
mov r9d, 0x20019
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, str.SYSTEMCurrentControlSetServicesuKey
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x180007fad
mov rcx, qword [rbp - 0x20]
lea rax, [rbp - 0x14]
mov qword [rsp + 0x28], rax
lea r9, [rbp - 0x18]
lea rax, [0x18004f143]
mov dword [rbp - 0x18], ebx
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, [0x180044db0]
mov dword [rbp - 0x14], 1
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
lea rax, [rbp - 0x20]
mov r9d, 0x20019
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, str.SYSTEMCurrentControlSetServicesuKey
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x18000800e
mov rcx, qword [rbp - 0x20]
lea rax, [rbp - 0x14]
mov qword [rsp + 0x28], rax
lea r9, [rbp - 0x18]
lea rax, [0x180057b9d]
mov dword [rbp - 0x18], ebx
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, [0x180044dbc]
mov dword [rbp - 0x14], 1
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
lea rax, [rbp - 0x20]
mov r9d, 0x20019
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, str.SYSTEMCurrentControlSetServicesuKey
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x18000806f
mov rcx, qword [rbp - 0x20]
lea rax, [rbp - 0x14]
mov qword [rsp + 0x28], rax
lea r9, [rbp - 0x18]
lea rax, [0x180057bb8]
mov dword [rbp - 0x18], ebx
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, [0x180044dc4]
mov dword [rbp - 0x14], 1
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
lea rax, [rbp - 0x20]
mov r9d, 0x20019
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, str.SYSTEMCurrentControlSetServicesuKey
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x1800080d0
mov rcx, qword [rbp - 0x20]
lea rax, [rbp - 0x14]
mov qword [rsp + 0x28], rax
lea r9, [rbp - 0x18]
lea rax, [0x180057bb9]
mov dword [rbp - 0x18], ebx
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, [0x180044dcc]
mov dword [rbp - 0x14], 1
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
lea rax, [rbp - 0x20]
mov r9d, 0x20019
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, str.SYSTEMCurrentControlSetServicesuKey
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x180008131
mov rcx, qword [rbp - 0x20]
lea rax, [rbp - 0x14]
mov qword [rsp + 0x28], rax
lea r9, [rbp - 0x18]
lea rax, [0x180057ba1]
mov dword [rbp - 0x18], ebx
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, [0x180044dd4]
mov dword [rbp - 0x14], 1
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
lea rax, [rbp - 0x20]
mov r9d, 0x20019
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, str.SYSTEMCurrentControlSetServicesuKey
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x180008192
mov rcx, qword [rbp - 0x20]
lea rax, [rbp - 0x14]
mov qword [rsp + 0x28], rax
lea r9, [rbp - 0x18]
lea rax, [0x18004f0fd]
mov dword [rbp - 0x18], ebx
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, [0x180044de0]
mov dword [rbp - 0x14], 1
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
lea rax, [rbp - 0x20]
mov r9d, 0x20019
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, str.SYSTEMCurrentControlSetServicesuKey
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x1800081f3
mov rcx, qword [rbp - 0x20]
lea rax, [rbp - 0x14]
mov qword [rsp + 0x28], rax
lea r9, [rbp - 0x18]
lea rax, [0x180057b98]
mov dword [rbp - 0x18], ebx
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, [0x180044df0]
mov dword [rbp - 0x14], 1
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
lea rax, [rbp - 0x20]
mov r9d, 0x20019
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, str.SYSTEMCurrentControlSetServicesuKey
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x180008254
mov rcx, qword [rbp - 0x20]
lea rax, [rbp - 0x14]
mov qword [rsp + 0x28], rax
lea r9, [rbp - 0x18]
lea rax, [0x180057bb7]
mov dword [rbp - 0x18], ebx
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, [0x180044dfc]
mov dword [rbp - 0x14], 1
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
lea rax, [rbp - 0x20]
mov r9d, 0x20019
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, str.SYSTEMCurrentControlSetServicesuKey
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x1800082b5
mov rcx, qword [rbp - 0x20]
lea rax, [rbp - 0x14]
mov qword [rsp + 0x28], rax
lea r9, [rbp - 0x18]
lea rax, [0x180057b8c]
mov dword [rbp - 0x18], ebx
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, [0x180044e08]
mov dword [rbp - 0x14], 1
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
lea rax, [rbp - 0x20]
mov r9d, 0x20019
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, str.SYSTEMCurrentControlSetServicesuKey
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x180008316
mov rcx, qword [rbp - 0x20]
lea rax, [rbp - 0x14]
mov qword [rsp + 0x28], rax
lea r9, [rbp - 0x18]
lea rax, [0x180057bad]
mov dword [rbp - 0x18], ebx
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, [0x180044e14]
mov dword [rbp - 0x14], 1
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
lea rax, [rbp - 0x20]
mov r9d, 0x20019
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, str.SYSTEMCurrentControlSetServicesuKey
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x180008377
mov rcx, qword [rbp - 0x20]
lea rax, [rbp - 0x14]
mov qword [rsp + 0x28], rax
lea r9, [rbp - 0x18]
lea rax, [0x180057b8e]
mov dword [rbp - 0x18], ebx
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, [0x180044e20]
mov dword [rbp - 0x14], 1
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
lea rax, [rbp - 0x20]
mov r9d, 0x20019
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, str.SYSTEMCurrentControlSetServicesuKey
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x1800083d8
mov rcx, qword [rbp - 0x20]
lea rax, [rbp - 0x14]
mov qword [rsp + 0x28], rax
lea r9, [rbp - 0x18]
lea rax, [0x180057b99]
mov dword [rbp - 0x18], ebx
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, [0x180044e2c]
mov dword [rbp - 0x14], 1
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
lea rax, [rbp - 0x20]
mov r9d, 0x20019
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, str.SYSTEMCurrentControlSetServicesuKey
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x180008439
mov rcx, qword [rbp - 0x20]
lea rax, [rbp - 0x14]
mov qword [rsp + 0x28], rax
lea r9, [rbp - 0x18]
lea rax, [0x180057ba2]
mov dword [rbp - 0x18], ebx
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, [0x180044e34]
mov dword [rbp - 0x14], 1
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
lea rax, [rbp - 0x20]
mov r9d, 0x20019
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, str.SYSTEMCurrentControlSetServicesuKey
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x18000849a
mov rcx, qword [rbp - 0x20]
lea rax, [rbp - 0x14]
mov qword [rsp + 0x28], rax
lea r9, [rbp - 0x18]
lea rax, [0x180057bbe]
mov dword [rbp - 0x18], ebx
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, [0x180044e40]
mov dword [rbp - 0x14], 1
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
lea rax, [rbp - 0x20]
mov r9d, 0x20019
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, str.SYSTEMCurrentControlSetServicesuKey
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x1800084fb
mov rcx, qword [rbp - 0x20]
lea rax, [rbp - 0x14]
mov qword [rsp + 0x28], rax
lea r9, [rbp - 0x18]
lea rax, [0x18004f144]
mov dword [rbp - 0x18], ebx
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, [0x180044e4c]
mov dword [rbp - 0x14], 1
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
lea rax, [rbp - 0x20]
mov r9d, 0x20019
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, str.SYSTEMCurrentControlSetServicesuKey
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x18000855c
mov rcx, qword [rbp - 0x20]
lea rax, [rbp - 0x14]
mov qword [rsp + 0x28], rax
lea r9, [rbp - 0x18]
lea rax, [0x18004f147]
mov dword [rbp - 0x18], ebx
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, [0x180044e54]
mov dword [rbp - 0x14], 1
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
lea rax, [rbp - 0x20]
mov r9d, 0x20019
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, str.SYSTEMCurrentControlSetServicesuKey
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x1800085bd
mov rcx, qword [rbp - 0x20]
lea rax, [rbp - 0x14]
mov qword [rsp + 0x28], rax
lea r9, [rbp - 0x18]
lea rax, [0x180057b8f]
mov dword [rbp - 0x18], ebx
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, [0x180044e5c]
mov dword [rbp - 0x14], 1
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
lea rax, [rbp - 0x20]
mov r9d, 0x20019
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, str.SYSTEMCurrentControlSetServicesuKey
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x18000861e
mov rcx, qword [rbp - 0x20]
lea rax, [rbp - 0x14]
mov qword [rsp + 0x28], rax
lea r9, [rbp - 0x18]
lea rax, [0x18004f13f]
mov dword [rbp - 0x18], ebx
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, [0x180044e68]
mov dword [rbp - 0x14], 1
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
lea rax, [rbp - 0x20]
mov r9d, 0x20019
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, str.SYSTEMCurrentControlSetServicesuKey
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x18000867f
mov rcx, qword [rbp - 0x20]
lea rax, [rbp - 0x14]
mov qword [rsp + 0x28], rax
lea r9, [rbp - 0x18]
lea rax, [0x18004f145]
mov dword [rbp - 0x18], ebx
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, [0x180044e78]
mov dword [rbp - 0x14], 1
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
lea rax, [rbp - 0x20]
mov r9d, 0x20019
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, str.SYSTEMCurrentControlSetServicesuKey
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x1800086e0
mov rcx, qword [rbp - 0x20]
lea rax, [rbp - 0x14]
mov qword [rsp + 0x28], rax
lea r9, [rbp - 0x18]
lea rax, [0x180057b58]
mov dword [rbp - 0x18], ebx
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, [0x180044e88]
mov dword [rbp - 0x14], 1
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
lea rax, [rbp - 0x20]
mov r9d, 0x20019
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, str.SYSTEMCurrentControlSetServicesuKey
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x180008741
mov rcx, qword [rbp - 0x20]
lea rax, [rbp - 0x14]
mov qword [rsp + 0x28], rax
lea r9, [rbp - 0x18]
lea rax, [0x180057bb1]
mov dword [rbp - 0x18], ebx
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, [0x180044e98]
mov dword [rbp - 0x14], 1
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
lea rax, [rbp - 0x20]
mov r9d, 0x20019
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, str.SYSTEMCurrentControlSetServicesuKey
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x1800087a2
mov rcx, qword [rbp - 0x20]
lea rax, [rbp - 0x14]
mov qword [rsp + 0x28], rax
lea r9, [rbp - 0x18]
lea rax, [0x180057b5c]
mov dword [rbp - 0x18], ebx
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, [0x180044ea8]
mov dword [rbp - 0x14], 1
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
lea rax, [rbp - 0x20]
mov r9d, 0x20019
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, str.SYSTEMCurrentControlSetServicesuKey
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x180008803
mov rcx, qword [rbp - 0x20]
lea rax, [rbp - 0x14]
mov qword [rsp + 0x28], rax
lea r9, [rbp - 0x18]
lea rax, [0x180057bbd]
mov dword [rbp - 0x18], ebx
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, [0x180044eb8]
mov dword [rbp - 0x14], 1
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
lea rax, [rbp - 0x20]
mov r9d, 0x20019
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, str.SYSTEMCurrentControlSetServicesuKey
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x180008864
mov rcx, qword [rbp - 0x20]
lea rax, [rbp - 0x14]
mov qword [rsp + 0x28], rax
lea r9, [rbp - 0x18]
lea rax, [0x180057b89]
mov dword [rbp - 0x18], ebx
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, [0x180044ec8]
mov dword [rbp - 0x14], 1
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
lea rax, [rbp - 0x20]
mov r9d, 0x20019
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, str.SYSTEMCurrentControlSetServicesuKey
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x1800088c5
mov rcx, qword [rbp - 0x20]
lea rax, [rbp - 0x14]
mov qword [rsp + 0x28], rax
lea r9, [rbp - 0x18]
lea rax, [0x18004f05c]
mov dword [rbp - 0x18], ebx
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, [0x180044ed8]
mov dword [rbp - 0x14], 1
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
lea rax, [rbp - 0x20]
mov r9d, 0x20019
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, str.SYSTEMCurrentControlSetServicesuKey
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x180008926
mov rcx, qword [rbp - 0x20]
lea rax, [rbp - 0x14]
mov qword [rsp + 0x28], rax
lea r9, [rbp - 0x18]
lea rax, [0x180057ba6]
mov dword [rbp - 0x18], ebx
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, [0x180044ee8]
mov dword [rbp - 0x14], 1
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
lea rax, [rbp - 0x20]
mov r9d, 0x20019
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, str.SYSTEMCurrentControlSetServicesuKey
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x180008987
mov rcx, qword [rbp - 0x20]
lea rax, [rbp - 0x14]
mov qword [rsp + 0x28], rax
lea r9, [rbp - 0x18]
lea rax, [0x18004f124]
mov dword [rbp - 0x18], ebx
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, [0x180044ef8]
mov dword [rbp - 0x14], 1
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
lea rax, [rbp - 0x20]
mov r9d, 0x20019
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, str.SYSTEMCurrentControlSetServicesuKey
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x1800089e8
mov rcx, qword [rbp - 0x20]
lea rax, [rbp - 0x14]
mov qword [rsp + 0x28], rax
lea r9, [rbp - 0x18]
lea rax, [0x180057bbb]
mov dword [rbp - 0x18], ebx
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, [0x180044f08]
mov dword [rbp - 0x14], 1
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
lea rax, [rbp - 0x20]
mov r9d, 0x20019
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, str.SYSTEMCurrentControlSetServicesuKey
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x180008a49
mov rcx, qword [rbp - 0x20]
lea rax, [rbp - 0x14]
mov qword [rsp + 0x28], rax
lea r9, [rbp - 0x18]
lea rax, [0x180057b9c]
mov dword [rbp - 0x18], ebx
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, [0x180044f18]
mov dword [rbp - 0x14], 1
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
lea rax, [rbp - 0x20]
mov r9d, 0x20019
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, str.SYSTEMCurrentControlSetServicesuKey
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x180008aaa
mov rcx, qword [rbp - 0x20]
lea rax, [rbp - 0x14]
mov qword [rsp + 0x28], rax
lea r9, [rbp - 0x18]
lea rax, [0x180057bb5]
mov dword [rbp - 0x18], ebx
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, [0x180044f28]
mov dword [rbp - 0x14], 1
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
lea rax, [rbp - 0x20]
mov r9d, 0x20019
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, str.SYSTEMCurrentControlSetServicesuKey
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x180008b0b
mov rcx, qword [rbp - 0x20]
lea rax, [rbp - 0x14]
mov qword [rsp + 0x28], rax
lea r9, [rbp - 0x18]
lea rax, [0x180057bbf]
mov dword [rbp - 0x18], ebx
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, [0x180044f38]
mov dword [rbp - 0x14], 1
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
lea rax, [rbp - 0x20]
mov r9d, 0x20019
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, str.SYSTEMCurrentControlSetServicesuKey
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x180008b6c
mov rcx, qword [rbp - 0x20]
lea rax, [rbp - 0x14]
mov qword [rsp + 0x28], rax
lea r9, [rbp - 0x18]
lea rax, [0x180057bba]
mov dword [rbp - 0x18], ebx
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, [0x180044f48]
mov dword [rbp - 0x14], 1
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
lea rax, [rbp - 0x20]
mov r9d, 0x20019
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, str.SYSTEMCurrentControlSetServicesuKey
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x180008bcd
mov rcx, qword [rbp - 0x20]
lea rax, [rbp - 0x14]
mov qword [rsp + 0x28], rax
lea r9, [rbp - 0x18]
lea rax, [0x18004f0fb]
mov dword [rbp - 0x18], ebx
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, [0x180044f58]
mov dword [rbp - 0x14], 1
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
lea rax, [rbp - 0x20]
mov r9d, 0x20019
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, str.SYSTEMCurrentControlSetServicesuKey
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x180008c2e
mov rcx, qword [rbp - 0x20]
lea rax, [rbp - 0x14]
mov qword [rsp + 0x28], rax
lea r9, [rbp - 0x18]
lea rax, [0x180057bc4]
mov dword [rbp - 0x18], ebx
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, [0x180044f68]
mov dword [rbp - 0x14], 1
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
lea rax, [rbp - 0x20]
mov r9d, 0x20019
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, str.SYSTEMCurrentControlSetServicesuKey
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x180008c8f
mov rcx, qword [rbp - 0x20]
lea rax, [rbp - 0x14]
mov qword [rsp + 0x28], rax
lea r9, [rbp - 0x18]
lea rax, [0x180057b86]
mov dword [rbp - 0x18], ebx
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, [0x180044f78]
mov dword [rbp - 0x14], 1
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
lea rax, [rbp - 0x20]
mov r9d, 0x20019
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, str.SYSTEMCurrentControlSetServicesuKey
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x180008cf0
mov rcx, qword [rbp - 0x20]
lea rax, [rbp - 0x14]
mov qword [rsp + 0x28], rax
lea r9, [rbp - 0x18]
lea rax, [0x180057b5b]
mov dword [rbp - 0x18], ebx
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, [0x180044f88]
mov dword [rbp - 0x14], 1
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
lea rax, [rbp - 0x20]
mov r9d, 0x20019
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, str.SYSTEMCurrentControlSetServicesuKey
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x180008d51
mov rcx, qword [rbp - 0x20]
lea rax, [rbp - 0x14]
mov qword [rsp + 0x28], rax
lea r9, [rbp - 0x18]
lea rax, [0x180057b84]
mov dword [rbp - 0x18], ebx
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, [0x180044f98]
mov dword [rbp - 0x14], 1
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
lea rax, [rbp - 0x20]
mov r9d, 0x20019
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, str.SYSTEMCurrentControlSetServicesuKey
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x180008db2
mov rcx, qword [rbp - 0x20]
lea rax, [rbp - 0x14]
mov qword [rsp + 0x28], rax
lea r9, [rbp - 0x18]
lea rax, [0x180057b9e]
mov dword [rbp - 0x18], ebx
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, [0x180044fa8]
mov dword [rbp - 0x14], 1
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
lea rax, [rbp - 0x20]
mov r9d, 0x20019
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, str.SYSTEMCurrentControlSetServicesuKey
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x180008e13
mov rcx, qword [rbp - 0x20]
lea rax, [rbp - 0x14]
mov qword [rsp + 0x28], rax
lea r9, [rbp - 0x18]
lea rax, [0x180057b96]
mov dword [rbp - 0x18], ebx
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, [0x180044fb8]
mov dword [rbp - 0x14], 1
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
lea rax, [rbp - 0x20]
mov r9d, 0x20019
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, str.SYSTEMCurrentControlSetServicesuKey
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x180008e74
mov rcx, qword [rbp - 0x20]
lea rax, [rbp - 0x14]
mov qword [rsp + 0x28], rax
lea r9, [rbp - 0x18]
lea rax, [0x18004f13c]
mov dword [rbp - 0x18], ebx
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, [0x180044fc8]
mov dword [rbp - 0x14], 1
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
lea rax, [rbp - 0x20]
mov r9d, 0x20019
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, str.SYSTEMCurrentControlSetServicesuKey
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x180008ed5
mov rcx, qword [rbp - 0x20]
lea rax, [rbp - 0x14]
mov qword [rsp + 0x28], rax
lea r9, [rbp - 0x18]
lea rax, [0x180057bc1]
mov dword [rbp - 0x18], ebx
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, [0x180044fd8]
mov dword [rbp - 0x14], 1
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
lea rax, [rbp - 0x20]
mov r9d, 0x20019
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, str.SYSTEMCurrentControlSetServicesuKey
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x180008f36
mov rcx, qword [rbp - 0x20]
lea rax, [rbp - 0x14]
mov qword [rsp + 0x28], rax
lea r9, [rbp - 0x18]
lea rax, [0x180057bb2]
mov dword [rbp - 0x18], ebx
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, [0x180044fe8]
mov dword [rbp - 0x14], 1
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
lea rax, [rbp - 0x20]
mov r9d, 0x20019
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, str.SYSTEMCurrentControlSetServicesuKey
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x180008f97
mov rcx, qword [rbp - 0x20]
lea rax, [rbp - 0x14]
mov qword [rsp + 0x28], rax
lea r9, [rbp - 0x18]
lea rax, [0x18004f14c]
mov dword [rbp - 0x18], ebx
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, [0x180044ff8]
mov dword [rbp - 0x14], 4
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
lea rax, [rbp - 0x20]
mov r9d, 0x20019
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, str.SYSTEMCurrentControlSetServicesuKey
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x180008ff8
mov rcx, qword [rbp - 0x20]
lea rax, [rbp - 0x14]
mov qword [rsp + 0x28], rax
lea r9, [rbp - 0x18]
lea rax, [0x180057b5d]
mov dword [rbp - 0x18], ebx
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, [0x180045008]
mov dword [rbp - 0x14], 1
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
lea rax, [rbp - 0x20]
mov r9d, 0x20019
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, str.SYSTEMCurrentControlSetServicesuKey
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x180009059
mov rcx, qword [rbp - 0x20]
lea rax, [rbp - 0x14]
mov qword [rsp + 0x28], rax
lea r9, [rbp - 0x18]
lea rax, [0x180057bbc]
mov dword [rbp - 0x18], ebx
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, [0x180045018]
mov dword [rbp - 0x14], 1
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
lea rax, [rbp - 0x20]
mov r9d, 0x20019
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, str.SYSTEMCurrentControlSetServicesuKey
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x1800090ba
mov rcx, qword [rbp - 0x20]
lea rax, [rbp - 0x14]
mov qword [rsp + 0x28], rax
lea r9, [rbp - 0x18]
lea rax, [0x180057bb0]
mov dword [rbp - 0x18], ebx
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, [0x180045028]
mov dword [rbp - 0x14], 1
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
lea rax, [rbp - 0x20]
mov r9d, 0x20019
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, str.SYSTEMCurrentControlSetServicesuKey
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x18000911b
mov rcx, qword [rbp - 0x20]
lea rax, [rbp - 0x14]
mov qword [rsp + 0x28], rax
lea r9, [rbp - 0x18]
lea rax, [0x180057b61]
mov dword [rbp - 0x18], ebx
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, [0x180045038]
mov dword [rbp - 0x14], 1
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
lea rax, [rbp - 0x20]
mov r9d, 0x20019
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, str.SYSTEMCurrentControlSetServicesuKey
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x18000917c
mov rcx, qword [rbp - 0x20]
lea rax, [rbp - 0x14]
mov qword [rsp + 0x28], rax
lea r9, [rbp - 0x18]
lea rax, [0x180057b9a]
mov dword [rbp - 0x18], ebx
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, [0x180045048]
mov dword [rbp - 0x14], 1
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
lea rax, [rbp - 0x20]
mov r9d, 0x20019
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, str.SYSTEMCurrentControlSetServicesuKey
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x1800091dd
mov rcx, qword [rbp - 0x20]
lea rax, [rbp - 0x14]
mov qword [rsp + 0x28], rax
lea r9, [rbp - 0x18]
lea rax, [0x180057b8d]
mov dword [rbp - 0x18], ebx
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, [0x180045054]
mov dword [rbp - 0x14], 1
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
lea rax, [rbp - 0x20]
mov r9d, 0x20019
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, str.SYSTEMCurrentControlSetServicesuKey
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x18000923e
mov rcx, qword [rbp - 0x20]
lea rax, [rbp - 0x14]
mov qword [rsp + 0x28], rax
lea r9, [rbp - 0x18]
lea rax, [0x180057b97]
mov dword [rbp - 0x18], ebx
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, [0x180045060]
mov dword [rbp - 0x14], 1
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
lea rax, [rbp - 0x20]
mov r9d, 0x20019
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, str.SYSTEMCurrentControlSetServicesuKey
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x18000929f
mov rcx, qword [rbp - 0x20]
lea rax, [rbp - 0x14]
mov qword [rsp + 0x28], rax
lea r9, [rbp - 0x18]
lea rax, [0x18004f12f]
mov dword [rbp - 0x18], ebx
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, [0x180045070]
mov dword [rbp - 0x14], 1
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
lea rax, [rbp - 0x20]
mov r9d, 0x20019
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, str.SYSTEMCurrentControlSetServicesuKey
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x180009300
mov rcx, qword [rbp - 0x20]
lea rax, [rbp - 0x14]
mov qword [rsp + 0x28], rax
lea r9, [rbp - 0x18]
lea rax, [0x180057bae]
mov dword [rbp - 0x18], ebx
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, [0x180045080]
mov dword [rbp - 0x14], 1
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
lea rax, [rbp - 0x20]
mov r9d, 0x20019
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, str.SYSTEMCurrentControlSetServicesuKey
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x180009361
mov rcx, qword [rbp - 0x20]
lea rax, [rbp - 0x14]
mov qword [rsp + 0x28], rax
lea r9, [rbp - 0x18]
lea rax, [0x180057b9f]
mov dword [rbp - 0x18], ebx
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, [0x180045090]
mov dword [rbp - 0x14], 1
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
lea rax, [rbp - 0x20]
mov r9d, 0x20019
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, str.SYSTEMCurrentControlSetServicesuKey
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x1800093c2
mov rcx, qword [rbp - 0x20]
lea rax, [rbp - 0x14]
mov qword [rsp + 0x28], rax
lea r9, [rbp - 0x18]
lea rax, [0x18004f12d]
mov dword [rbp - 0x18], ebx
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, [0x1800450a0]
mov dword [rbp - 0x14], 1
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
lea rax, [rbp - 0x20]
mov r9d, 0x20019
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, str.SYSTEMCurrentControlSetServicesuKey
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x180009423
mov rcx, qword [rbp - 0x20]
lea rax, [rbp - 0x14]
mov qword [rsp + 0x28], rax
lea r9, [rbp - 0x18]
lea rax, [0x18004f12c]
mov dword [rbp - 0x18], ebx
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, [0x1800450b0]
mov dword [rbp - 0x14], 1
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
lea rax, [rbp - 0x20]
mov r9d, 0x20019
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, str.SYSTEMCurrentControlSetServicesuKey
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x180009484
mov rcx, qword [rbp - 0x20]
lea rax, [rbp - 0x14]
mov qword [rsp + 0x28], rax
lea r9, [rbp - 0x18]
lea rax, [0x180057b8b]
mov dword [rbp - 0x18], ebx
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, [0x1800450c0]
mov dword [rbp - 0x14], 1
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
lea rax, [rbp - 0x20]
mov r9d, 0x20019
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, str.SYSTEMCurrentControlSetServicesuKey
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x1800094e5
mov rcx, qword [rbp - 0x20]
lea rax, [rbp - 0x14]
mov qword [rsp + 0x28], rax
lea r9, [rbp - 0x18]
lea rax, [0x18004f13e]
mov dword [rbp - 0x18], ebx
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, [0x1800450d0]
mov dword [rbp - 0x14], 1
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
lea rax, [rbp - 0x20]
mov r9d, 0x20019
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, str.SYSTEMCurrentControlSetServicesuKey
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x180009546
mov rcx, qword [rbp - 0x20]
lea rax, [rbp - 0x14]
mov qword [rsp + 0x28], rax
lea r9, [rbp - 0x18]
lea rax, [0x18004f11f]
mov dword [rbp - 0x18], ebx
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, [0x1800450e0]
mov dword [rbp - 0x14], 1
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
lea rax, [rbp - 0x20]
mov r9d, 0x20019
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, str.SYSTEMCurrentControlSetServicesuKey
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x1800095a7
mov rcx, qword [rbp - 0x20]
lea rax, [rbp - 0x14]
mov qword [rsp + 0x28], rax
lea r9, [rbp - 0x18]
lea rax, [0x18004f11c]
mov dword [rbp - 0x18], ebx
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, [0x1800450f0]
mov dword [rbp - 0x14], 1
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
lea rax, [rbp - 0x20]
mov r9d, 0x20019
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, str.SYSTEMCurrentControlSetServicesuKey
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x180009608
mov rcx, qword [rbp - 0x20]
lea rax, [rbp - 0x14]
mov qword [rsp + 0x28], rax
lea r9, [rbp - 0x18]
lea rax, [0x18004f05f]
mov dword [rbp - 0x18], ebx
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, [0x180045100]
mov dword [rbp - 0x14], 1
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
lea rax, [rbp - 0x20]
mov r9d, 0x20019
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, str.SYSTEMCurrentControlSetServicesuKey
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x180009669
mov rcx, qword [rbp - 0x20]
lea rax, [rbp - 0x14]
mov qword [rsp + 0x28], rax
lea r9, [rbp - 0x18]
lea rax, [0x180057b5a]
mov dword [rbp - 0x18], ebx
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, [0x180045110]
mov dword [rbp - 0x14], 1
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
lea rax, [rbp - 0x20]
mov r9d, 0x20019
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, str.SYSTEMCurrentControlSetServicesuKey
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x1800096ca
mov rcx, qword [rbp - 0x20]
lea rax, [rbp - 0x14]
mov qword [rsp + 0x28], rax
lea r9, [rbp - 0x18]
lea rax, [0x18004f13d]
mov dword [rbp - 0x18], ebx
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, [0x180045120]
mov dword [rbp - 0x14], 1
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
lea rax, [rbp - 0x20]
mov r9d, 0x20019
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, str.SYSTEMCurrentControlSetServicesuKey
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x18000972b
mov rcx, qword [rbp - 0x20]
lea rax, [rbp - 0x14]
mov qword [rsp + 0x28], rax
lea r9, [rbp - 0x18]
lea rax, [0x18004f12e]
mov dword [rbp - 0x18], ebx
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, [0x180045130]
mov dword [rbp - 0x14], 1
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
lea rax, [rbp - 0x20]
mov r9d, 0x20019
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, str.SYSTEMCurrentControlSetServicesuKey
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x18000978c
mov rcx, qword [rbp - 0x20]
lea rax, [rbp - 0x14]
mov qword [rsp + 0x28], rax
lea r9, [rbp - 0x18]
lea rax, [0x180057b5f]
mov dword [rbp - 0x18], ebx
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, [0x180045140]
mov dword [rbp - 0x14], 1
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
lea rax, [rbp - 0x20]
mov r9d, 0x20019
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, str.SYSTEMCurrentControlSetServicesuKey
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x1800097ed
mov rcx, qword [rbp - 0x20]
lea rax, [rbp - 0x14]
mov qword [rsp + 0x28], rax
lea r9, [rbp - 0x18]
lea rax, [0x18004f146]
mov dword [rbp - 0x18], ebx
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, [0x180045150]
mov dword [rbp - 0x14], 1
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
lea rax, [rbp - 0x20]
mov r9d, 0x20019
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, str.SYSTEMCurrentControlSetServicesuKey
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x18000984e
mov rcx, qword [rbp - 0x20]
lea rax, [rbp - 0x14]
mov qword [rsp + 0x28], rax
lea r9, [rbp - 0x18]
lea rax, [0x18004f150]
mov dword [rbp - 0x18], ebx
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, [0x180045160]
mov dword [rbp - 0x14], 4
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
lea rax, [rbp - 0x20]
mov r9d, 0x20019
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, str.SYSTEMCurrentControlSetServicesuKey
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x1800098af
mov rcx, qword [rbp - 0x20]
lea rax, [rbp - 0x14]
mov qword [rsp + 0x28], rax
lea r9, [rbp - 0x18]
lea rax, [0x18004f148]
mov dword [rbp - 0x18], ebx
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, [0x180045170]
mov dword [rbp - 0x14], 4
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
lea rax, [rbp - 0x20]
mov r9d, 0x20019
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, str.SYSTEMCurrentControlSetServicesuKey
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x180009910
mov rcx, qword [rbp - 0x20]
lea rax, [rbp - 0x14]
mov qword [rsp + 0x28], rax
lea r9, [rbp - 0x18]
lea rax, [0x18004f141]
mov dword [rbp - 0x18], ebx
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, [0x180045180]
mov dword [rbp - 0x14], 1
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
lea rax, [rbp - 0x20]
mov r9d, 0x20019
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, str.SYSTEMCurrentControlSetServicesuKey
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x180009971
mov rcx, qword [rbp - 0x20]
lea rax, [rbp - 0x14]
mov qword [rsp + 0x28], rax
lea r9, [rbp - 0x18]
lea rax, [0x180057bac]
mov dword [rbp - 0x18], ebx
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, [0x180045190]
mov dword [rbp - 0x14], 1
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
lea rax, [rbp - 0x20]
mov r9d, 0x20019
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, str.SYSTEMCurrentControlSetServicesuKey
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x1800099d2
mov rcx, qword [rbp - 0x20]
lea rax, [rbp - 0x14]
mov qword [rsp + 0x28], rax
lea r9, [rbp - 0x18]
lea rax, [0x180057bc0]
mov dword [rbp - 0x18], ebx
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, [0x1800451a0]
mov dword [rbp - 0x14], 1
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
lea rax, [rbp - 0x20]
mov r9d, 0x20019
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, str.SYSTEMCurrentControlSetServicesuKey
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x180009a33
mov rcx, qword [rbp - 0x20]
lea rax, [rbp - 0x14]
mov qword [rsp + 0x28], rax
lea r9, [rbp - 0x18]
lea rax, [0x180057baf]
mov dword [rbp - 0x18], ebx
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, [0x1800451b0]
mov dword [rbp - 0x14], 1
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
lea rax, [rbp - 0x20]
mov r9d, 0x20019
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, str.SYSTEMCurrentControlSetServicesuKey
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x180009a94
mov rcx, qword [rbp - 0x20]
lea rax, [rbp - 0x14]
mov qword [rsp + 0x28], rax
lea r9, [rbp - 0x18]
lea rax, [0x18004f05d]
mov dword [rbp - 0x18], ebx
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, [0x1800451c0]
mov dword [rbp - 0x14], 1
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
lea rax, [rbp - 0x20]
mov r9d, 0x20019
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, str.SYSTEMCurrentControlSetServicesuKey
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x180009af5
mov rcx, qword [rbp - 0x20]
lea rax, [rbp - 0x14]
mov qword [rsp + 0x28], rax
lea r9, [rbp - 0x18]
lea rax, [0x180057bc3]
mov dword [rbp - 0x18], ebx
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, [0x1800451cc]
mov dword [rbp - 0x14], 1
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
lea rax, [rbp - 0x20]
mov r9d, 0x20019
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, str.SYSTEMCurrentControlSetServicesuKey
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x180009b56
mov rcx, qword [rbp - 0x20]
lea rax, [rbp - 0x14]
mov qword [rsp + 0x28], rax
lea r9, [rbp - 0x18]
lea rax, [0x180057b95]
mov dword [rbp - 0x18], ebx
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, [0x1800451d8]
mov dword [rbp - 0x14], 1
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
lea rax, [rbp - 0x20]
mov r9d, 0x20019
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, str.SYSTEMCurrentControlSetServicesuKey
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x180009bb7
mov rcx, qword [rbp - 0x20]
lea rax, [rbp - 0x14]
mov qword [rsp + 0x28], rax
lea r9, [rbp - 0x18]
lea rax, [0x180057b8a]
mov dword [rbp - 0x18], ebx
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, [0x1800451e8]
mov dword [rbp - 0x14], 1
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
lea rax, [rbp - 0x20]
mov r9d, 0x20019
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, str.SYSTEMCurrentControlSetServicesuKey
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x180009c18
mov rcx, qword [rbp - 0x20]
lea rax, [rbp - 0x14]
mov qword [rsp + 0x28], rax
lea r9, [rbp - 0x18]
lea rax, [0x180057ba8]
mov dword [rbp - 0x18], ebx
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, [0x1800451f8]
mov dword [rbp - 0x14], 4
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
lea rax, [rbp - 0x20]
mov r9d, 0x20019
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, str.SYSTEMCurrentControlSetServicesuKey
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x180009c79
mov rcx, qword [rbp - 0x20]
lea rax, [rbp - 0x14]
mov qword [rsp + 0x28], rax
lea r9, [rbp - 0x18]
lea rax, [0x180057b90]
mov dword [rbp - 0x18], ebx
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, [0x180045200]
mov dword [rbp - 0x14], 4
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
lea rax, [rbp - 0x20]
mov r9d, 0x20019
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, str.SYSTEMCurrentControlSetServicesuKey
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x180009cda
mov rcx, qword [rbp - 0x20]
lea rax, [rbp - 0x14]
mov qword [rsp + 0x28], rax
lea r9, [rbp - 0x18]
lea rax, [0x180057ba7]
mov dword [rbp - 0x18], ebx
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, [0x180045210]
mov dword [rbp - 0x14], 1
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
lea rax, [rbp - 0x20]
mov r9d, 0x20019
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, str.SYSTEMCurrentControlSetServicesuKey
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x180009d3b
mov rcx, qword [rbp - 0x20]
lea rax, [rbp - 0x14]
mov qword [rsp + 0x28], rax
lea r9, [rbp - 0x18]
lea rax, [0x18004f130]
mov dword [rbp - 0x18], ebx
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, [0x18004521c]
mov dword [rbp - 0x14], 4
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
lea rax, [rbp - 0x20]
mov r9d, 0x20019
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, str.SYSTEMCurrentControlSetServicesuKey
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x180009d9c
mov rcx, qword [rbp - 0x20]
lea rax, [rbp - 0x14]
mov qword [rsp + 0x28], rax
lea r9, [rbp - 0x18]
lea rax, [0x18004f120]
mov dword [rbp - 0x18], ebx
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, [0x180045228]
mov dword [rbp - 0x14], 4
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
lea rax, [rbp - 0x20]
mov r9d, 0x20019
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, str.SYSTEMCurrentControlSetServicesuKey
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x180009dfd
mov rcx, qword [rbp - 0x20]
lea rax, [rbp - 0x14]
mov qword [rsp + 0x28], rax
lea r9, [rbp - 0x18]
lea rax, [0x180057bc5]
mov dword [rbp - 0x18], ebx
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, [0x180045238]
mov dword [rbp - 0x14], 1
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
lea rax, [rbp - 0x20]
mov r9d, 0x20019
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, str.SYSTEMCurrentControlSetServicesuKey
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x180009e5e
mov rcx, qword [rbp - 0x20]
lea rax, [rbp - 0x14]
mov qword [rsp + 0x28], rax
lea r9, [rbp - 0x18]
lea rax, [0x18004f0fc]
mov dword [rbp - 0x18], ebx
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, [0x180045248]
mov dword [rbp - 0x14], 1
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
mov rcx, qword [rbp - 0x10]
xor rcx, rsp
call fcn.18003d5f0
mov rbx, qword [rsp + 0x60]
add rsp, 0x50
pop rbp
ret