Function at 0x1800a9680
Capabilities:
Query or enumerate registry key

Disassembly:
mov qword [rsp + 0x18], rbx
mov qword [rsp + 0x10], rdx
mov qword [rsp + 8], rcx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0xf0]
sub rsp, 0x1f0
mov rsi, rcx
mov r14, r8
mov ecx, 0x400
mov r13, rdx
call fcn.1800c1544
xor r15d, r15d
mov qword [rbp + 0x20], 0xf
mov ebx, r15d
mov qword [rbp + 0x18], r15
mov edi, 0xf
mov dword [rbp + 0x148], ebx
mov r9d, 0x400
mov byte [rbp + 8], bl
mov r8, rax
mov byte [rbp - 0x18], bl
xor edx, edx
mov byte [rbp - 0x58], bl
mov rcx, rsi
mov qword [rbp - 8], r15
mov r12, rax
mov qword [rbp], 0xf
mov qword [rbp - 0x48], r15
mov qword [rbp - 0x40], rdi
call qword [sym.imp.ADVAPI32.dll_RegEnumKeyA]
test eax, eax
jne 0x1800aa83e
nop word [rax + rax]
mov qword [rsp + 0x30], r15
mov r8, 0xffffffffffffffff
mov qword [rsp + 0x38], 0xf
mov byte [rsp + 0x20], 0
nop word [rax + rax]
inc r8
cmp byte [r12 + r8], 0
jne 0x1800a9740
mov rdx, r12
lea rcx, [rsp + 0x20]
call fcn.1800b8fb0
mov rdx, qword [r13 + 0x10]
lea rcx, [rsp + 0x40]
inc rdx
mov qword [rsp + 0x50], r15
mov qword [rsp + 0x58], 0xf
mov byte [rsp + 0x40], 0
call fcn.1800ba640
cmp qword [r13 + 0x18], 0x10
mov rdx, r13
jb 0x1800a9789
mov rdx, qword [r13]
mov r8, qword [r13 + 0x10]
lea rcx, [rsp + 0x40]
call fcn.1800b8790
mov rcx, qword [rsp + 0x50]
mov rdx, qword [rsp + 0x58]
cmp rcx, rdx
jae 0x1800a97c6
lea rax, [rcx + 1]
cmp rdx, 0x10
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x40]
cmovae rax, qword [rsp + 0x40]
mov word [rax + rcx], 0x5c
jmp 0x1800a97d3
mov r9b, 0x5c
lea rcx, [rsp + 0x40]
call fcn.1800b9b90
mov rdx, qword [rsp + 0x58]
mov r9, qword [rsp + 0x50]
mov rax, rdx
mov r8, qword [rsp + 0x30]
sub rax, r9
mov rcx, qword [rsp + 0x38]
cmp r8, rax
jbe 0x1800a9818
mov rax, rcx
sub rax, r8
cmp rax, r9
jb 0x1800a9818
cmp rdx, 0x10
lea r8, [rsp + 0x40]
lea rcx, [rsp + 0x20]
cmovae r8, qword [rsp + 0x40]
call fcn.1800ba920
jmp 0x1800a9831
cmp rcx, 0x10
lea rdx, [rsp + 0x20]
lea rcx, [rsp + 0x40]
cmovae rdx, qword [rsp + 0x20]
call fcn.1800b8790
mov qword [rbp - 0x68], r15
lea rdx, [rbp - 0x78]
mov qword [rbp - 0x60], r15
lea r8, [rbp - 0x80]
movups xmm0, xmmword [rax]
mov rcx, 0xffffffff80000001
movups xmmword [rbp - 0x78], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x68], xmm1
mov byte [rax], 0
mov qword [rax + 0x18], 0xf
mov qword [rax + 0x10], r15
cmp qword [rbp - 0x60], 0x10
cmovae rdx, qword [rbp - 0x78]
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyA]
mov rdx, qword [rbp - 0x60]
cmp rdx, 0x10
jb 0x1800a98b1
mov rcx, qword [rbp - 0x78]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800a98ac
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800aab86
call fcn.1800c1180
mov rdx, qword [rsp + 0x58]
mov qword [rbp - 0x68], r15
mov qword [rbp - 0x60], 0xf
mov byte [rbp - 0x78], 0
cmp rdx, 0x10
jb 0x1800a98fe
mov rcx, qword [rsp + 0x40]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800a98f9
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800aab86
call fcn.1800c1180
mov rdx, qword [rsp + 0x38]
mov qword [rsp + 0x50], r15
mov qword [rsp + 0x58], 0xf
mov byte [rsp + 0x40], 0
cmp rdx, 0x10
jb 0x1800a994e
mov rcx, qword [rsp + 0x20]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800a9949
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800aab86
call fcn.1800c1180
cmp qword [rbp - 0x80], 0
je 0x1800aa81a
mov qword [rsp + 0x30], r15
mov r8, 0xffffffffffffffff
mov qword [rsp + 0x38], 0xf
mov byte [rsp + 0x20], 0
inc r8
cmp byte [r12 + r8], 0
jne 0x1800a9973
mov rdx, r12
lea rcx, [rsp + 0x20]
call fcn.1800b8fb0
mov rsi, qword [rsp + 0x38]
lea rcx, [rsp + 0x20]
mov rbx, qword [rsp + 0x20]
cmp rsi, 0x10
cmovae rcx, rbx
cmp qword [rsp + 0x30], 0x20
jne 0x1800a99c4
mov r8d, 0x20
lea rdx, str.9375CFF0413111d3B88A00104B2A6676
call fcn.1800c52b0
test eax, eax
jne 0x1800a99c4
mov r15b, 1
jmp 0x1800a99c7
xor r15b, r15b
cmp rsi, 0x10
jb 0x1800a99fe
lea rdx, [rsi + 1]
mov rax, rbx
cmp rdx, 0x1000
jb 0x1800a99f6
mov rbx, qword [rbx - 8]
add rdx, 0x27
sub rax, rbx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800aab8c
mov rcx, rbx
call fcn.1800c1180
test r15b, r15b
je 0x1800aa9aa
mov ecx, 0x100
xor r15d, r15d
call fcn.1800c1544
mov rcx, qword [rbp - 0x80]
mov r9d, 0x100
mov r8, rax
xor edx, edx
mov r13, rax
call qword [sym.imp.ADVAPI32.dll_RegEnumKeyA]
test eax, eax
jne 0x1800aa7ec
mov rcx, qword [rbp - 0x80]
lea r8, [rbp + 0x28]
mov rdx, r13
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyA]
test eax, eax
jne 0x1800aa7cb
mov rcx, qword [rbp + 0x28]
test rcx, rcx
je 0x1800aa7cb
call fcn.1800a9110
mov rcx, qword [rbp + 0x28]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
cmp qword [0x180117410], 0x10
lea rdx, [0x1801173f8]
mov r8, qword [0x180117408]
lea rcx, [rbp + 8]
cmovae rdx, qword [0x1801173f8]
call fcn.1800b8fb0
cmp qword [0x180117230], 0x10
lea rdx, [0x180117218]
mov r8, qword [0x180117228]
lea rcx, [rbp - 0x18]
cmovae rdx, qword [0x180117218]
call fcn.1800b8fb0
lea rcx, [rsp + 0x40]
call fcn.1800a8d20
mov rdx, rax
lea rcx, [rbp - 0x38]
call fcn.1800a8aa0
mov rbx, rax
lea rax, [rbp - 0x58]
cmp rax, rbx
je 0x1800a9b37
cmp rdi, 0x10
jb 0x1800a9b11
mov rcx, qword [rbp - 0x58]
lea rdx, [rdi + 1]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800a9b0c
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800aab92
call fcn.1800c1180
movups xmm1, xmmword [rbx + 0x10]
movups xmm0, xmmword [rbx]
mov qword [rbx + 0x10], 0
movups xmmword [rbp - 0x48], xmm1
mov rdi, qword [rbp - 0x40]
movups xmmword [rbp - 0x58], xmm0
mov qword [rbx + 0x18], 0xf
mov byte [rbx], 0
mov rdx, qword [rbp - 0x20]
cmp rdx, 0x10
jb 0x1800a9b72
mov rcx, qword [rbp - 0x38]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800a9b6d
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800aab92
call fcn.1800c1180
mov rcx, qword [rsp + 0x40]
mov qword [rbp - 0x28], 0
mov qword [rbp - 0x20], 0xf
mov byte [rbp - 0x38], 0
test rcx, rcx
je 0x1800a9bc2
mov rdx, qword [rsp + 0x50]
mov rax, rcx
sub rdx, rcx
cmp rdx, 0x1000
jb 0x1800a9bbd
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800aab92
call fcn.1800c1180
mov rbx, qword [rbp + 0x18]
test rbx, rbx
je 0x1800aa7cb
mov rsi, qword [rbp - 8]
test rsi, rsi
je 0x1800aa7cb
cmp qword [rbp - 0x48], 0
je 0x1800aa7cb
inc dword [0x180119560]
mov rcx, r14
mov rax, qword [r14 + 0x18]
cmp rax, 0x10
jb 0x1800a9bfd
mov rcx, qword [r14]
cmp qword [r14 + 0x10], 1
jne 0x1800a9c0d
cmp byte [rcx], 0x30
jne 0x1800a9c0d
mov cl, 1
jmp 0x1800a9c0f
xor cl, cl
test cl, cl
je 0x1800aa211
mov rdx, qword [0x180116a28]
lea rcx, [rsp + 0x20]
inc rdx
mov qword [rsp + 0x30], 0
mov qword [rsp + 0x38], 0xf
mov byte [rsp + 0x20], 0
call fcn.1800ba640
cmp qword [0x180116a30], 0x10
lea rdx, [0x180116a18]
mov r8, qword [0x180116a28]
lea rcx, [rsp + 0x20]
cmovae rdx, qword [0x180116a18]
call fcn.1800b8790
mov r8d, 1
lea rdx, [0x180103f54]
lea rcx, [rsp + 0x20]
call fcn.1800b8790
cmp qword [rbp + 0x20], 0x10
lea rdx, [rbp + 8]
mov r8, rbx
lea rcx, [rsp + 0x20]
cmovae rdx, qword [rbp + 8]
call fcn.1800b8790
xor ebx, ebx
lea rdx, [0x180103f50]
lea rcx, [rsp + 0x60]
movups xmm0, xmmword [rax]
lea r8d, [rbx + 1]
movups xmmword [rsp + 0x60], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x70], xmm1
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], 0xf
mov byte [rax], bl
call fcn.1800b8790
movups xmm0, xmmword [rax]
movups xmm1, xmmword [rax + 0x10]
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], 0xf
mov byte [rax], bl
mov rdx, qword [0x180116a30]
movups xmmword [rbp - 0x78], xmm0
movups xmmword [rsp + 0x40], xmm1
cmp rdx, 0x10
jb 0x1800a9d3a
mov rcx, qword [0x180116a18]
inc rdx
cmp rdx, 0x1000
jb 0x1800a9d2c
mov r8, qword [rcx - 8]
add rdx, 0x27
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x1800aab98
mov rcx, r8
call fcn.1800c1180
movups xmm0, xmmword [rbp - 0x78]
movups xmm1, xmmword [rsp + 0x40]
mov rdx, qword [rsp + 0x78]
movups xmmword [0x180116a18], xmm0
movups xmmword [0x180116a28], xmm1
cmp rdx, 0x10
jb 0x1800a9d85
mov rcx, qword [rsp + 0x60]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800a9d80
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800aab98
call fcn.1800c1180
mov rdx, qword [rsp + 0x38]
mov qword [rsp + 0x70], rbx
mov qword [rsp + 0x78], 0xf
mov byte [rsp + 0x60], bl
cmp rdx, 0x10
jb 0x1800a9dd4
mov rcx, qword [rsp + 0x20]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800a9dcf
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800aab98
call fcn.1800c1180
mov rdx, qword [0x180116a28]
lea rcx, [rsp + 0x20]
inc rdx
mov qword [rsp + 0x30], rbx
mov qword [rsp + 0x38], 0xf
mov byte [rsp + 0x20], bl
call fcn.1800ba640
cmp qword [0x180116a30], 0x10
lea rdx, [0x180116a18]
mov r8, qword [0x180116a28]
lea rcx, [rsp + 0x20]
cmovae rdx, qword [0x180116a18]
call fcn.1800b8790
mov r8d, 1
lea rdx, [0x180103f54]
lea rcx, [rsp + 0x20]
call fcn.1800b8790
cmp qword [rbp], 0x10
lea rdx, [rbp - 0x18]
mov r8, rsi
lea rcx, [rsp + 0x20]
cmovae rdx, qword [rbp - 0x18]
call fcn.1800b8790
mov r8d, 1
lea rdx, [0x180103f50]
lea rcx, [rsp + 0x60]
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x60], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x70], xmm1
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], 0xf
mov byte [rax], bl
call fcn.1800b8790
movups xmm0, xmmword [rax]
movups xmm1, xmmword [rax + 0x10]
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], 0xf
mov byte [rax], bl
mov rdx, qword [0x180116a30]
movups xmmword [rsp + 0x40], xmm0
movups xmmword [rbp - 0x78], xmm1
cmp rdx, 0x10
jb 0x1800a9ef2
mov rcx, qword [0x180116a18]
inc rdx
cmp rdx, 0x1000
jb 0x1800a9ee4
mov r8, qword [rcx - 8]
add rdx, 0x27
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x1800aab9e
mov rcx, r8
call fcn.1800c1180
movups xmm0, xmmword [rsp + 0x40]
movups xmm1, xmmword [rbp - 0x78]
mov rdx, qword [rsp + 0x78]
movups xmmword [0x180116a18], xmm0
movups xmmword [0x180116a28], xmm1
cmp rdx, 0x10
jb 0x1800a9f3d
mov rcx, qword [rsp + 0x60]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800a9f38
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800aab9e
call fcn.1800c1180
mov rdx, qword [rsp + 0x38]
mov qword [rsp + 0x70], rbx
mov qword [rsp + 0x78], 0xf
mov byte [rsp + 0x60], bl
cmp rdx, 0x10
jb 0x1800a9f8c
mov rcx, qword [rsp + 0x20]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800a9f87
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800aab9e
call fcn.1800c1180
mov rdx, qword [0x180116a28]
lea rcx, [rsp + 0x20]
inc rdx
mov qword [rsp + 0x30], rbx
mov qword [rsp + 0x38], 0xf
mov byte [rsp + 0x20], bl
call fcn.1800ba640
cmp qword [0x180116a30], 0x10
lea rsi, [0x180116a18]
mov r8, qword [0x180116a28]
lea rcx, [rsp + 0x20]
mov rdx, rsi
cmovae rdx, qword [0x180116a18]
call fcn.1800b8790
mov r8d, 1
lea rdx, [0x180103f54]
lea rcx, [rsp + 0x20]
call fcn.1800b8790
mov r8, qword [rbp - 0x48]
lea rdx, [rbp - 0x58]
cmp rdi, 0x10
lea rcx, [rsp + 0x20]
cmovae rdx, qword [rbp - 0x58]
call fcn.1800b8790
mov r8d, 1
lea rdx, [0x180103f50]
lea rcx, [rsp + 0x60]
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x60], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x70], xmm1
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], 0xf
mov byte [rax], bl
call fcn.1800b8790
movups xmm0, xmmword [rax]
movups xmm1, xmmword [rax + 0x10]
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], 0xf
mov byte [rax], bl
mov rdx, qword [0x180116a30]
movups xmmword [rsp + 0x40], xmm0
movups xmmword [rbp - 0x78], xmm1
cmp rdx, 0x10
jb 0x1800aa0ad
mov rcx, qword [0x180116a18]
inc rdx
cmp rdx, 0x1000
jb 0x1800aa09f
mov r8, qword [rcx - 8]
add rdx, 0x27
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x1800aaba4
mov rcx, r8
call fcn.1800c1180
movups xmm0, xmmword [rsp + 0x40]
movups xmm1, xmmword [rbp - 0x78]
mov rdx, qword [rsp + 0x78]
movups xmmword [0x180116a18], xmm0
movups xmmword [0x180116a28], xmm1
cmp rdx, 0x10
jb 0x1800aa0f8
mov rcx, qword [rsp + 0x60]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800aa0f3
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800aaba4
call fcn.1800c1180
mov rdx, qword [rsp + 0x38]
mov qword [rsp + 0x70], rbx
mov qword [rsp + 0x78], 0xf
mov byte [rsp + 0x60], bl
cmp rdx, 0x10
jb 0x1800aa147
mov rcx, qword [rsp + 0x20]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800aa142
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800aaba4
call fcn.1800c1180
mov rdx, qword [0x180116a28]
lea rcx, [rsp + 0x60]
inc rdx
mov qword [rsp + 0x70], rbx
mov qword [rsp + 0x78], 0xf
mov byte [rsp + 0x60], bl
call fcn.1800ba640
cmp qword [0x180116a30], 0x10
lea rcx, [rsp + 0x60]
mov r8, qword [0x180116a28]
mov rdx, rsi
cmovae rdx, qword [0x180116a18]
call fcn.1800b8790
mov r8d, 1
lea rdx, [0x1800fa9ec]
lea rcx, [rsp + 0x60]
call fcn.1800b8790
mov rdx, qword [0x180116a30]
cmp rdx, 0x10
jb 0x1800aa1e9
mov rcx, qword [0x180116a18]
inc rdx
cmp rdx, 0x1000
jb 0x1800aa1e4
mov r8, qword [rcx - 8]
add rdx, 0x27
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x1800aabaa
mov rcx, r8
call fcn.1800c1180
movups xmm0, xmmword [rsp + 0x60]
mov rbx, qword [rbp + 0x18]
movups xmm1, xmmword [rsp + 0x70]
mov rsi, qword [rbp - 8]
mov rdi, qword [rbp - 0x40]
movups xmmword [0x180116a18], xmm0
movups xmmword [0x180116a28], xmm1
mov rax, qword [r14 + 0x18]
mov rcx, r14
cmp rax, 0x10
jb 0x1800aa21d
mov rcx, qword [r14]
cmp qword [r14 + 0x10], 1
jne 0x1800aa22d
cmp byte [rcx], 0x31
jne 0x1800aa22d
mov al, 1
jmp 0x1800aa22f
xor al, al
test al, al
je 0x1800aa7cb
mov rdx, qword [0x180116a28]
lea rcx, [rsp + 0x20]
add rdx, 4
mov qword [rsp + 0x30], 0
mov qword [rsp + 0x38], 0xf
mov byte [rsp + 0x20], 0
call fcn.1800ba640
cmp qword [0x180116a30], 0x10
lea rdx, [0x180116a18]
mov r8, qword [0x180116a28]
lea rcx, [rsp + 0x20]
cmovae rdx, qword [0x180116a18]
call fcn.1800b8790
mov r8d, 4
lea rdx, str.mail
lea rcx, [rsp + 0x20]
call fcn.1800b8790
mov r8d, 1
lea rdx, [0x180103f5c]
lea rcx, [rsp + 0x20]
call fcn.1800b8790
mov r8d, 7
lea rdx, str.Outlook
lea rcx, [rbp - 0x38]
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x38], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x28], xmm1
mov qword [rax + 0x10], 0
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
call fcn.1800b8790
mov r8d, 1
lea rdx, [0x180103f5c]
lea rcx, [rbp + 0x30]
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x30], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x40], xmm1
mov qword [rax + 0x10], 0
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
call fcn.1800b8790
cmp qword [rbp + 0x20], 0x10
lea rdx, [rbp + 8]
mov r8, rbx
lea rcx, [rbp + 0xd0]
cmovae rdx, qword [rbp + 8]
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0xd0], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0xe0], xmm1
mov qword [rax + 0x10], 0
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
call fcn.1800b8790
xor ebx, ebx
lea rdx, [0x180103f5c]
lea rcx, [rbp + 0xb0]
movups xmm0, xmmword [rax]
lea r8d, [rbx + 1]
movups xmmword [rbp + 0xb0], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0xc0], xmm1
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], 0xf
mov byte [rax], bl
call fcn.1800b8790
cmp qword [rbp], 0x10
lea rdx, [rbp - 0x18]
mov r8, rsi
lea rcx, [rbp + 0x90]
cmovae rdx, qword [rbp - 0x18]
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x90], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0xa0], xmm1
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], 0xf
mov byte [rax], bl
call fcn.1800b8790
movups xmm0, xmmword [rax]
lea r8d, [rbx + 1]
lea rdx, [0x180103f5c]
movups xmmword [rbp + 0x70], xmm0
lea rcx, [rbp + 0x70]
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x80], xmm1
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], 0xf
mov byte [rax], bl
call fcn.1800b8790
mov r8, qword [rbp - 0x48]
lea rdx, [rbp - 0x58]
cmp rdi, 0x10
lea rcx, [rbp + 0x50]
movups xmm0, xmmword [rax]
cmovae rdx, qword [rbp - 0x58]
movups xmmword [rbp + 0x50], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x60], xmm1
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], 0xf
mov byte [rax], bl
call fcn.1800b8790
lea r8d, [rbx + 3]
lea rdx, [0x180103f58]
lea rcx, [rsp + 0x60]
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x60], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x70], xmm1
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], 0xf
mov byte [rax], bl
call fcn.1800b8790
movups xmm0, xmmword [rax]
movups xmm1, xmmword [rax + 0x10]
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], 0xf
mov byte [rax], bl
mov rdx, qword [0x180116a30]
movups xmmword [rsp + 0x40], xmm0
movups xmmword [rbp - 0x78], xmm1
cmp rdx, 0x10
jb 0x1800aa4f1
mov rcx, qword [0x180116a18]
inc rdx
cmp rdx, 0x1000
jb 0x1800aa4e3
mov r8, qword [rcx - 8]
add rdx, 0x27
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x1800aabb0
mov rcx, r8
call fcn.1800c1180
movups xmm0, xmmword [rsp + 0x40]
movups xmm1, xmmword [rbp - 0x78]
mov rdx, qword [rsp + 0x78]
movups xmmword [0x180116a18], xmm0
movups xmmword [0x180116a28], xmm1
cmp rdx, 0x10
jb 0x1800aa53c
mov rcx, qword [rsp + 0x60]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800aa537
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800aabb0
call fcn.1800c1180
mov rdx, qword [rbp + 0x68]
mov qword [rsp + 0x70], rbx
mov qword [rsp + 0x78], 0xf
mov byte [rsp + 0x60], bl
cmp rdx, 0x10
jb 0x1800aa589
mov rcx, qword [rbp + 0x50]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800aa584
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800aabb0
call fcn.1800c1180
mov rdx, qword [rbp + 0x88]
mov qword [rbp + 0x60], rbx
mov qword [rbp + 0x68], 0xf
mov byte [rbp + 0x50], bl
cmp rdx, 0x10
jb 0x1800aa5d6
mov rcx, qword [rbp + 0x70]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800aa5d1
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800aabb0
call fcn.1800c1180
mov rdx, qword [rbp + 0xa8]
mov qword [rbp + 0x80], rbx
mov qword [rbp + 0x88], 0xf
mov byte [rbp + 0x70], bl
cmp rdx, 0x10
jb 0x1800aa62c
mov rcx, qword [rbp + 0x90]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800aa627
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800aabb0
call fcn.1800c1180
mov rdx, qword [rbp + 0xc8]
mov qword [rbp + 0xa0], rbx
mov qword [rbp + 0xa8], 0xf
mov byte [rbp + 0x90], bl
cmp rdx, 0x10
jb 0x1800aa685
mov rcx, qword [rbp + 0xb0]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800aa680
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800aabb0
call fcn.1800c1180
mov rdx, qword [rbp + 0xe8]
mov qword [rbp + 0xc0], rbx
mov qword [rbp + 0xc8], 0xf
mov byte [rbp + 0xb0], bl
cmp rdx, 0x10
jb 0x1800aa6de
mov rcx, qword [rbp + 0xd0]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800aa6d9
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800aabb0
call fcn.1800c1180
mov rdx, qword [rbp + 0x48]
mov qword [rbp + 0xe0], rbx
mov qword [rbp + 0xe8], 0xf
mov byte [rbp + 0xd0], bl
cmp rdx, 0x10
jb 0x1800aa731
mov rcx, qword [rbp + 0x30]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800aa72c
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800aabb0
call fcn.1800c1180
mov rdx, qword [rbp - 0x20]
mov qword [rbp + 0x40], rbx
mov qword [rbp + 0x48], 0xf
mov byte [rbp + 0x30], bl
cmp rdx, 0x10
jb 0x1800aa77b
mov rcx, qword [rbp - 0x38]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800aa776
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800aabb0
call fcn.1800c1180
mov rdx, qword [rsp + 0x38]
mov qword [rbp - 0x28], rbx
mov qword [rbp - 0x20], 0xf
mov byte [rbp - 0x38], bl
cmp rdx, 0x10
jb 0x1800aa7c7
mov rcx, qword [rsp + 0x20]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800aa7c2
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800aabb0
call fcn.1800c1180
mov rdi, qword [rbp - 0x40]
mov rcx, qword [rbp - 0x80]
inc r15d
mov edx, r15d
mov r9d, 0x100
mov r8, r13
call qword [sym.imp.ADVAPI32.dll_RegEnumKeyA]
test eax, eax
je 0x1800a9a34
test r13, r13
je 0x1800aa7f9
mov rcx, r13
call fcn.1800c1180
mov r13, qword [rbp + 0x138]
mov rcx, qword [rbp - 0x80]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov ebx, dword [rbp + 0x148]
xor r15d, r15d
mov rsi, qword [rbp + 0x130]
inc ebx
mov r9d, 0x400
mov edx, ebx
mov dword [rbp + 0x148], ebx
mov r8, r12
mov rcx, rsi
call qword [sym.imp.ADVAPI32.dll_RegEnumKeyA]
test eax, eax
je 0x1800a9720
test r12, r12
je 0x1800aa84b
mov rcx, r12
call fcn.1800c1180
cmp rdi, 0x10
jb 0x1800aa883
mov rcx, qword [rbp - 0x58]
lea rdx, [rdi + 1]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800aa87e
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800aab80
call fcn.1800c1180
mov rdx, qword [rbp]
cmp rdx, 0x10
jb 0x1800aa8be
mov rcx, qword [rbp - 0x18]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800aa8b9
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800aab80
call fcn.1800c1180
mov rdx, qword [rbp + 0x20]
cmp rdx, 0x10
jb 0x1800aa8f9
mov rcx, qword [rbp + 8]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800aa8f4
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800aab80
call fcn.1800c1180
mov rdx, qword [r13 + 0x18]
cmp rdx, 0x10
jb 0x1800aa934
mov rcx, qword [r13]
inc rdx
cmp rdx, 0x1000
jb 0x1800aa92f
mov r8, qword [rcx - 8]
add rdx, 0x27
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x1800aab80
mov rcx, r8
call fcn.1800c1180
mov qword [r13 + 0x10], r15
mov qword [r13 + 0x18], 0xf
mov byte [r13], 0
mov rdx, qword [r14 + 0x18]
cmp rdx, 0x10
jb 0x1800aa97f
mov rcx, qword [r14]
inc rdx
cmp rdx, 0x1000
jb 0x1800aa97a
mov r8, qword [rcx - 8]
add rdx, 0x27
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x1800aab80
mov rcx, r8
call fcn.1800c1180
mov rbx, qword [rsp + 0x240]
mov qword [r14 + 0x10], r15
mov qword [r14 + 0x18], 0xf
mov byte [r14], 0
add rsp, 0x1f0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
xor ebx, ebx
mov qword [rsp + 0x38], 0xf
mov qword [rsp + 0x30], rbx
mov r8, 0xffffffffffffffff
mov byte [rsp + 0x20], bl
inc r8
cmp byte [r12 + r8], bl
jne 0x1800aa9c5
mov rdx, r12
lea rcx, [rsp + 0x20]
call fcn.1800b8fb0
mov rdx, qword [r13 + 0x10]
lea rcx, [rsp + 0x40]
inc rdx
mov qword [rsp + 0x50], rbx
mov qword [rsp + 0x58], 0xf
mov byte [rsp + 0x40], bl
call fcn.1800ba640
cmp qword [r13 + 0x18], 0x10
mov rdx, r13
jb 0x1800aaa0c
mov rdx, qword [r13]
mov r8, qword [r13 + 0x10]
lea rcx, [rsp + 0x40]
call fcn.1800b8790
mov rcx, qword [rsp + 0x50]
mov rdx, qword [rsp + 0x58]
cmp rcx, rdx
jae 0x1800aaa49
lea rax, [rcx + 1]
cmp rdx, 0x10
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x40]
cmovae rax, qword [rsp + 0x40]
mov word [rax + rcx], 0x5c
jmp 0x1800aaa56
mov r9b, 0x5c
lea rcx, [rsp + 0x40]
call fcn.1800b9b90
mov rdx, qword [rsp + 0x58]
mov r9, qword [rsp + 0x50]
mov rax, rdx
mov r8, qword [rsp + 0x30]
sub rax, r9
mov rcx, qword [rsp + 0x38]
cmp r8, rax
jbe 0x1800aaa9b
mov rax, rcx
sub rax, r8
cmp rax, r9
jb 0x1800aaa9b
cmp rdx, 0x10
lea r8, [rsp + 0x40]
lea rcx, [rsp + 0x20]
cmovae r8, qword [rsp + 0x40]
call fcn.1800ba920
jmp 0x1800aaab4
cmp rcx, 0x10
lea rdx, [rsp + 0x20]
lea rcx, [rsp + 0x40]
cmovae rdx, qword [rsp + 0x20]
call fcn.1800b8790
movups xmm0, xmmword [rax]
mov rdx, r14
lea rcx, [rbp + 0x30]
movups xmmword [rbp - 0x38], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x28], xmm1
mov byte [rax], bl
mov qword [rax + 0x18], 0xf
mov qword [rax + 0x10], rbx
call fcn.1800b8a30
mov rcx, qword [rbp - 0x80]
lea rdx, [rbp - 0x38]
mov r8, rax
call fcn.1800a9680
mov rdx, qword [rsp + 0x58]
cmp rdx, 0x10
jb 0x1800aab26
mov rcx, qword [rsp + 0x40]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800aab21
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800aab7a
call fcn.1800c1180
mov rdx, qword [rsp + 0x38]
mov qword [rsp + 0x50], rbx
mov qword [rsp + 0x58], 0xf
mov byte [rsp + 0x40], bl
cmp rdx, 0x10
jb 0x1800aa800
mov rcx, qword [rsp + 0x20]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800aab70
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800aab7a
call fcn.1800c1180
jmp 0x1800aa800
call fcn.1800cc350
int3
call fcn.1800cc350
int3
call fcn.1800cc350
int3
call fcn.1800cc350
int3
call fcn.1800cc350
int3
call fcn.1800cc350
int3
call fcn.1800cc350
int3
call fcn.1800cc350
int3
call fcn.1800cc350
int3
call fcn.1800cc350
int3