Function at 0x1800af540
Capabilities:
Query or enumerate registry key

Disassembly:
mov qword [rsp + 0x18], rbx
mov qword [rsp + 0x10], rdx
mov qword [rsp + 8], rcx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0xf0]
sub rsp, 0x1f0
mov rsi, rcx
mov r14, r8
mov ecx, 0x400
mov r13, rdx
call fcn.1800cbc94
xor r15d, r15d
mov qword [rbp + 0x20], 0xf
mov ebx, r15d
mov qword [rbp + 0x18], r15
mov edi, 0xf
mov dword [rbp + 0x148], ebx
mov r9d, 0x400
mov byte [rbp + 8], bl
mov r8, rax
mov byte [rbp - 0x18], bl
xor edx, edx
mov byte [rbp - 0x58], bl
mov rcx, rsi
mov qword [rbp - 8], r15
mov r12, rax
mov qword [rbp], 0xf
mov qword [rbp - 0x48], r15
mov qword [rbp - 0x40], rdi
call qword [sym.imp.ADVAPI32.dll_RegEnumKeyA]
test eax, eax
jne 0x1800b06fe
nop word [rax + rax]
mov qword [rsp + 0x30], r15
mov r8, 0xffffffffffffffff
mov qword [rsp + 0x38], 0xf
mov byte [rsp + 0x20], 0
nop word [rax + rax]
inc r8
cmp byte [r12 + r8], 0
jne 0x1800af600
mov rdx, r12
lea rcx, [rsp + 0x20]
call fcn.1800bef90
mov rdx, qword [r13 + 0x10]
lea rcx, [rsp + 0x40]
inc rdx
mov qword [rsp + 0x50], r15
mov qword [rsp + 0x58], 0xf
mov byte [rsp + 0x40], 0
call fcn.1800c17c0
cmp qword [r13 + 0x18], 0x10
mov rdx, r13
jb 0x1800af649
mov rdx, qword [r13]
mov r8, qword [r13 + 0x10]
lea rcx, [rsp + 0x40]
call fcn.1800be770
mov rcx, qword [rsp + 0x50]
mov rdx, qword [rsp + 0x58]
cmp rcx, rdx
jae 0x1800af686
lea rax, [rcx + 1]
cmp rdx, 0x10
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x40]
cmovae rax, qword [rsp + 0x40]
mov word [rax + rcx], 0x5c
jmp 0x1800af693
mov r9b, 0x5c
lea rcx, [rsp + 0x40]
call fcn.1800bfda0
mov rdx, qword [rsp + 0x58]
mov r9, qword [rsp + 0x50]
mov rax, rdx
mov r8, qword [rsp + 0x30]
sub rax, r9
mov rcx, qword [rsp + 0x38]
cmp r8, rax
jbe 0x1800af6d8
mov rax, rcx
sub rax, r8
cmp rax, r9
jb 0x1800af6d8
cmp rdx, 0x10
lea r8, [rsp + 0x40]
lea rcx, [rsp + 0x20]
cmovae r8, qword [rsp + 0x40]
call fcn.1800c34e0
jmp 0x1800af6f1
cmp rcx, 0x10
lea rdx, [rsp + 0x20]
lea rcx, [rsp + 0x40]
cmovae rdx, qword [rsp + 0x20]
call fcn.1800be770
mov qword [rbp - 0x68], r15
lea rdx, [rbp - 0x78]
mov qword [rbp - 0x60], r15
lea r8, [rbp - 0x80]
movups xmm0, xmmword [rax]
mov rcx, 0xffffffff80000001
movups xmmword [rbp - 0x78], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x68], xmm1
mov byte [rax], 0
mov qword [rax + 0x18], 0xf
mov qword [rax + 0x10], r15
cmp qword [rbp - 0x60], 0x10
cmovae rdx, qword [rbp - 0x78]
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyA]
mov rdx, qword [rbp - 0x60]
cmp rdx, 0x10
jb 0x1800af771
mov rcx, qword [rbp - 0x78]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800af76c
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800b0a46
call fcn.1800cb8d0
mov rdx, qword [rsp + 0x58]
mov qword [rbp - 0x68], r15
mov qword [rbp - 0x60], 0xf
mov byte [rbp - 0x78], 0
cmp rdx, 0x10
jb 0x1800af7be
mov rcx, qword [rsp + 0x40]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800af7b9
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800b0a46
call fcn.1800cb8d0
mov rdx, qword [rsp + 0x38]
mov qword [rsp + 0x50], r15
mov qword [rsp + 0x58], 0xf
mov byte [rsp + 0x40], 0
cmp rdx, 0x10
jb 0x1800af80e
mov rcx, qword [rsp + 0x20]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800af809
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800b0a46
call fcn.1800cb8d0
cmp qword [rbp - 0x80], 0
je 0x1800b06da
mov qword [rsp + 0x30], r15
mov r8, 0xffffffffffffffff
mov qword [rsp + 0x38], 0xf
mov byte [rsp + 0x20], 0
inc r8
cmp byte [r12 + r8], 0
jne 0x1800af833
mov rdx, r12
lea rcx, [rsp + 0x20]
call fcn.1800bef90
mov rsi, qword [rsp + 0x38]
lea rcx, [rsp + 0x20]
mov rbx, qword [rsp + 0x20]
cmp rsi, 0x10
cmovae rcx, rbx
cmp qword [rsp + 0x30], 0x20
jne 0x1800af884
mov r8d, 0x20
lea rdx, str.9375CFF0413111d3B88A00104B2A6676
call fcn.1800d00a0
test eax, eax
jne 0x1800af884
mov r15b, 1
jmp 0x1800af887
xor r15b, r15b
cmp rsi, 0x10
jb 0x1800af8be
lea rdx, [rsi + 1]
mov rax, rbx
cmp rdx, 0x1000
jb 0x1800af8b6
mov rbx, qword [rbx - 8]
add rdx, 0x27
sub rax, rbx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800b0a4c
mov rcx, rbx
call fcn.1800cb8d0
test r15b, r15b
je 0x1800b086a
mov ecx, pe_nt_image_headers64
xor r15d, r15d
call fcn.1800cbc94
mov rcx, qword [rbp - 0x80]
mov r9d, pe_nt_image_headers64
mov r8, rax
xor edx, edx
mov r13, rax
call qword [sym.imp.ADVAPI32.dll_RegEnumKeyA]
test eax, eax
jne 0x1800b06ac
mov rcx, qword [rbp - 0x80]
lea r8, [rbp + 0x28]
mov rdx, r13
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyA]
test eax, eax
jne 0x1800b068b
mov rcx, qword [rbp + 0x28]
test rcx, rcx
je 0x1800b068b
call fcn.1800aefd0
mov rcx, qword [rbp + 0x28]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
cmp qword [0x1801278b0], 0x10
lea rdx, [0x180127898]
mov r8, qword [0x1801278a8]
lea rcx, [rbp + 8]
cmovae rdx, qword [0x180127898]
call fcn.1800bef90
cmp qword [0x180127630], 0x10
lea rdx, [0x180127618]
mov r8, qword [0x180127628]
lea rcx, [rbp - 0x18]
cmovae rdx, qword [0x180127618]
call fcn.1800bef90
lea rcx, [rsp + 0x40]
call fcn.1800aebe0
mov rdx, rax
lea rcx, [rbp - 0x38]
call fcn.1800ae960
mov rbx, rax
lea rax, [rbp - 0x58]
cmp rax, rbx
je 0x1800af9f7
cmp rdi, 0x10
jb 0x1800af9d1
mov rcx, qword [rbp - 0x58]
lea rdx, [rdi + 1]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800af9cc
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800b0a52
call fcn.1800cb8d0
movups xmm1, xmmword [rbx + 0x10]
movups xmm0, xmmword [rbx]
mov qword [rbx + 0x10], 0
movups xmmword [rbp - 0x48], xmm1
mov rdi, qword [rbp - 0x40]
movups xmmword [rbp - 0x58], xmm0
mov qword [rbx + 0x18], 0xf
mov byte [rbx], 0
mov rdx, qword [rbp - 0x20]
cmp rdx, 0x10
jb 0x1800afa32
mov rcx, qword [rbp - 0x38]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800afa2d
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800b0a52
call fcn.1800cb8d0
mov rcx, qword [rsp + 0x40]
mov qword [rbp - 0x28], 0
mov qword [rbp - 0x20], 0xf
mov byte [rbp - 0x38], 0
test rcx, rcx
je 0x1800afa82
mov rdx, qword [rsp + 0x50]
mov rax, rcx
sub rdx, rcx
cmp rdx, 0x1000
jb 0x1800afa7d
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800b0a52
call fcn.1800cb8d0
mov rbx, qword [rbp + 0x18]
test rbx, rbx
je 0x1800b068b
mov rsi, qword [rbp - 8]
test rsi, rsi
je 0x1800b068b
cmp qword [rbp - 0x48], 0
je 0x1800b068b
inc dword [0x180129a94]
mov rcx, r14
mov rax, qword [r14 + 0x18]
cmp rax, 0x10
jb 0x1800afabd
mov rcx, qword [r14]
cmp qword [r14 + 0x10], 1
jne 0x1800afacd
cmp byte [rcx], 0x30
jne 0x1800afacd
mov cl, 1
jmp 0x1800afacf
xor cl, cl
test cl, cl
je 0x1800b00d1
mov rdx, qword [0x180126a88]
lea rcx, [rsp + 0x20]
inc rdx
mov qword [rsp + 0x30], 0
mov qword [rsp + 0x38], 0xf
mov byte [rsp + 0x20], 0
call fcn.1800c17c0
cmp qword [0x180126a90], 0x10
lea rdx, [0x180126a78]
mov r8, qword [0x180126a88]
lea rcx, [rsp + 0x20]
cmovae rdx, qword [0x180126a78]
call fcn.1800be770
mov r8d, 1
lea rdx, [0x180113c60]
lea rcx, [rsp + 0x20]
call fcn.1800be770
cmp qword [rbp + 0x20], 0x10
lea rdx, [rbp + 8]
mov r8, rbx
lea rcx, [rsp + 0x20]
cmovae rdx, qword [rbp + 8]
call fcn.1800be770
xor ebx, ebx
lea rdx, [0x180113c5c]
lea rcx, [rsp + 0x60]
movups xmm0, xmmword [rax]
lea r8d, [rbx + 1]
movups xmmword [rsp + 0x60], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x70], xmm1
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], 0xf
mov byte [rax], bl
call fcn.1800be770
movups xmm0, xmmword [rax]
movups xmm1, xmmword [rax + 0x10]
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], 0xf
mov byte [rax], bl
mov rdx, qword [0x180126a90]
movups xmmword [rbp - 0x78], xmm0
movups xmmword [rsp + 0x40], xmm1
cmp rdx, 0x10
jb 0x1800afbfa
mov rcx, qword [0x180126a78]
inc rdx
cmp rdx, 0x1000
jb 0x1800afbec
mov r8, qword [rcx - 8]
add rdx, 0x27
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x1800b0a58
mov rcx, r8
call fcn.1800cb8d0
movups xmm0, xmmword [rbp - 0x78]
movups xmm1, xmmword [rsp + 0x40]
mov rdx, qword [rsp + 0x78]
movups xmmword [0x180126a78], xmm0
movups xmmword [0x180126a88], xmm1
cmp rdx, 0x10
jb 0x1800afc45
mov rcx, qword [rsp + 0x60]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800afc40
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800b0a58
call fcn.1800cb8d0
mov rdx, qword [rsp + 0x38]
mov qword [rsp + 0x70], rbx
mov qword [rsp + 0x78], 0xf
mov byte [rsp + 0x60], bl
cmp rdx, 0x10
jb 0x1800afc94
mov rcx, qword [rsp + 0x20]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800afc8f
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800b0a58
call fcn.1800cb8d0
mov rdx, qword [0x180126a88]
lea rcx, [rsp + 0x20]
inc rdx
mov qword [rsp + 0x30], rbx
mov qword [rsp + 0x38], 0xf
mov byte [rsp + 0x20], bl
call fcn.1800c17c0
cmp qword [0x180126a90], 0x10
lea rdx, [0x180126a78]
mov r8, qword [0x180126a88]
lea rcx, [rsp + 0x20]
cmovae rdx, qword [0x180126a78]
call fcn.1800be770
mov r8d, 1
lea rdx, [0x180113c60]
lea rcx, [rsp + 0x20]
call fcn.1800be770
cmp qword [rbp], 0x10
lea rdx, [rbp - 0x18]
mov r8, rsi
lea rcx, [rsp + 0x20]
cmovae rdx, qword [rbp - 0x18]
call fcn.1800be770
mov r8d, 1
lea rdx, [0x180113c5c]
lea rcx, [rsp + 0x60]
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x60], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x70], xmm1
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], 0xf
mov byte [rax], bl
call fcn.1800be770
movups xmm0, xmmword [rax]
movups xmm1, xmmword [rax + 0x10]
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], 0xf
mov byte [rax], bl
mov rdx, qword [0x180126a90]
movups xmmword [rsp + 0x40], xmm0
movups xmmword [rbp - 0x78], xmm1
cmp rdx, 0x10
jb 0x1800afdb2
mov rcx, qword [0x180126a78]
inc rdx
cmp rdx, 0x1000
jb 0x1800afda4
mov r8, qword [rcx - 8]
add rdx, 0x27
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x1800b0a5e
mov rcx, r8
call fcn.1800cb8d0
movups xmm0, xmmword [rsp + 0x40]
movups xmm1, xmmword [rbp - 0x78]
mov rdx, qword [rsp + 0x78]
movups xmmword [0x180126a78], xmm0
movups xmmword [0x180126a88], xmm1
cmp rdx, 0x10
jb 0x1800afdfd
mov rcx, qword [rsp + 0x60]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800afdf8
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800b0a5e
call fcn.1800cb8d0
mov rdx, qword [rsp + 0x38]
mov qword [rsp + 0x70], rbx
mov qword [rsp + 0x78], 0xf
mov byte [rsp + 0x60], bl
cmp rdx, 0x10
jb 0x1800afe4c
mov rcx, qword [rsp + 0x20]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800afe47
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800b0a5e
call fcn.1800cb8d0
mov rdx, qword [0x180126a88]
lea rcx, [rsp + 0x20]
inc rdx
mov qword [rsp + 0x30], rbx
mov qword [rsp + 0x38], 0xf
mov byte [rsp + 0x20], bl
call fcn.1800c17c0
cmp qword [0x180126a90], 0x10
lea rsi, [0x180126a78]
mov r8, qword [0x180126a88]
lea rcx, [rsp + 0x20]
mov rdx, rsi
cmovae rdx, qword [0x180126a78]
call fcn.1800be770
mov r8d, 1
lea rdx, [0x180113c60]
lea rcx, [rsp + 0x20]
call fcn.1800be770
mov r8, qword [rbp - 0x48]
lea rdx, [rbp - 0x58]
cmp rdi, 0x10
lea rcx, [rsp + 0x20]
cmovae rdx, qword [rbp - 0x58]
call fcn.1800be770
mov r8d, 1
lea rdx, [0x180113c5c]
lea rcx, [rsp + 0x60]
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x60], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x70], xmm1
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], 0xf
mov byte [rax], bl
call fcn.1800be770
movups xmm0, xmmword [rax]
movups xmm1, xmmword [rax + 0x10]
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], 0xf
mov byte [rax], bl
mov rdx, qword [0x180126a90]
movups xmmword [rsp + 0x40], xmm0
movups xmmword [rbp - 0x78], xmm1
cmp rdx, 0x10
jb 0x1800aff6d
mov rcx, qword [0x180126a78]
inc rdx
cmp rdx, 0x1000
jb 0x1800aff5f
mov r8, qword [rcx - 8]
add rdx, 0x27
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x1800b0a64
mov rcx, r8
call fcn.1800cb8d0
movups xmm0, xmmword [rsp + 0x40]
movups xmm1, xmmword [rbp - 0x78]
mov rdx, qword [rsp + 0x78]
movups xmmword [0x180126a78], xmm0
movups xmmword [0x180126a88], xmm1
cmp rdx, 0x10
jb 0x1800affb8
mov rcx, qword [rsp + 0x60]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800affb3
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800b0a64
call fcn.1800cb8d0
mov rdx, qword [rsp + 0x38]
mov qword [rsp + 0x70], rbx
mov qword [rsp + 0x78], 0xf
mov byte [rsp + 0x60], bl
cmp rdx, 0x10
jb 0x1800b0007
mov rcx, qword [rsp + 0x20]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800b0002
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800b0a64
call fcn.1800cb8d0
mov rdx, qword [0x180126a88]
lea rcx, [rsp + 0x60]
inc rdx
mov qword [rsp + 0x70], rbx
mov qword [rsp + 0x78], 0xf
mov byte [rsp + 0x60], bl
call fcn.1800c17c0
cmp qword [0x180126a90], 0x10
lea rcx, [rsp + 0x60]
mov r8, qword [0x180126a88]
mov rdx, rsi
cmovae rdx, qword [0x180126a78]
call fcn.1800be770
mov r8d, 1
lea rdx, [0x18010a0cc]
lea rcx, [rsp + 0x60]
call fcn.1800be770
mov rdx, qword [0x180126a90]
cmp rdx, 0x10
jb 0x1800b00a9
mov rcx, qword [0x180126a78]
inc rdx
cmp rdx, 0x1000
jb 0x1800b00a4
mov r8, qword [rcx - 8]
add rdx, 0x27
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x1800b0a6a
mov rcx, r8
call fcn.1800cb8d0
movups xmm0, xmmword [rsp + 0x60]
mov rbx, qword [rbp + 0x18]
movups xmm1, xmmword [rsp + 0x70]
mov rsi, qword [rbp - 8]
mov rdi, qword [rbp - 0x40]
movups xmmword [0x180126a78], xmm0
movups xmmword [0x180126a88], xmm1
mov rax, qword [r14 + 0x18]
mov rcx, r14
cmp rax, 0x10
jb 0x1800b00dd
mov rcx, qword [r14]
cmp qword [r14 + 0x10], 1
jne 0x1800b00ed
cmp byte [rcx], 0x31
jne 0x1800b00ed
mov al, 1
jmp 0x1800b00ef
xor al, al
test al, al
je 0x1800b068b
mov rdx, qword [0x180126a88]
lea rcx, [rsp + 0x20]
add rdx, 4
mov qword [rsp + 0x30], 0
mov qword [rsp + 0x38], 0xf
mov byte [rsp + 0x20], 0
call fcn.1800c17c0
cmp qword [0x180126a90], 0x10
lea rdx, [0x180126a78]
mov r8, qword [0x180126a88]
lea rcx, [rsp + 0x20]
cmovae rdx, qword [0x180126a78]
call fcn.1800be770
mov r8d, 4
lea rdx, str.mail
lea rcx, [rsp + 0x20]
call fcn.1800be770
mov r8d, 1
lea rdx, [0x180113c68]
lea rcx, [rsp + 0x20]
call fcn.1800be770
mov r8d, 7
lea rdx, str.Outlook
lea rcx, [rbp - 0x38]
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x38], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x28], xmm1
mov qword [rax + 0x10], 0
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
call fcn.1800be770
mov r8d, 1
lea rdx, [0x180113c68]
lea rcx, [rbp + 0x30]
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x30], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x40], xmm1
mov qword [rax + 0x10], 0
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
call fcn.1800be770
cmp qword [rbp + 0x20], 0x10
lea rdx, [rbp + 8]
mov r8, rbx
lea rcx, [rbp + 0xd0]
cmovae rdx, qword [rbp + 8]
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0xd0], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0xe0], xmm1
mov qword [rax + 0x10], 0
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
call fcn.1800be770
xor ebx, ebx
lea rdx, [0x180113c68]
lea rcx, [rbp + 0xb0]
movups xmm0, xmmword [rax]
lea r8d, [rbx + 1]
movups xmmword [rbp + 0xb0], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0xc0], xmm1
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], 0xf
mov byte [rax], bl
call fcn.1800be770
cmp qword [rbp], 0x10
lea rdx, [rbp - 0x18]
mov r8, rsi
lea rcx, [rbp + 0x90]
cmovae rdx, qword [rbp - 0x18]
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x90], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0xa0], xmm1
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], 0xf
mov byte [rax], bl
call fcn.1800be770
movups xmm0, xmmword [rax]
lea r8d, [rbx + 1]
lea rdx, [0x180113c68]
movups xmmword [rbp + 0x70], xmm0
lea rcx, [rbp + 0x70]
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x80], xmm1
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], 0xf
mov byte [rax], bl
call fcn.1800be770
mov r8, qword [rbp - 0x48]
lea rdx, [rbp - 0x58]
cmp rdi, 0x10
lea rcx, [rbp + 0x50]
movups xmm0, xmmword [rax]
cmovae rdx, qword [rbp - 0x58]
movups xmmword [rbp + 0x50], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x60], xmm1
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], 0xf
mov byte [rax], bl
call fcn.1800be770
lea r8d, [rbx + 3]
lea rdx, [0x180113c64]
lea rcx, [rsp + 0x60]
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x60], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x70], xmm1
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], 0xf
mov byte [rax], bl
call fcn.1800be770
movups xmm0, xmmword [rax]
movups xmm1, xmmword [rax + 0x10]
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], 0xf
mov byte [rax], bl
mov rdx, qword [0x180126a90]
movups xmmword [rsp + 0x40], xmm0
movups xmmword [rbp - 0x78], xmm1
cmp rdx, 0x10
jb 0x1800b03b1
mov rcx, qword [0x180126a78]
inc rdx
cmp rdx, 0x1000
jb 0x1800b03a3
mov r8, qword [rcx - 8]
add rdx, 0x27
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x1800b0a70
mov rcx, r8
call fcn.1800cb8d0
movups xmm0, xmmword [rsp + 0x40]
movups xmm1, xmmword [rbp - 0x78]
mov rdx, qword [rsp + 0x78]
movups xmmword [0x180126a78], xmm0
movups xmmword [0x180126a88], xmm1
cmp rdx, 0x10
jb 0x1800b03fc
mov rcx, qword [rsp + 0x60]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800b03f7
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800b0a70
call fcn.1800cb8d0
mov rdx, qword [rbp + 0x68]
mov qword [rsp + 0x70], rbx
mov qword [rsp + 0x78], 0xf
mov byte [rsp + 0x60], bl
cmp rdx, 0x10
jb 0x1800b0449
mov rcx, qword [rbp + 0x50]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800b0444
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800b0a70
call fcn.1800cb8d0
mov rdx, qword [rbp + 0x88]
mov qword [rbp + 0x60], rbx
mov qword [rbp + 0x68], 0xf
mov byte [rbp + 0x50], bl
cmp rdx, 0x10
jb 0x1800b0496
mov rcx, qword [rbp + 0x70]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800b0491
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800b0a70
call fcn.1800cb8d0
mov rdx, qword [rbp + 0xa8]
mov qword [rbp + 0x80], rbx
mov qword [rbp + 0x88], 0xf
mov byte [rbp + 0x70], bl
cmp rdx, 0x10
jb 0x1800b04ec
mov rcx, qword [rbp + 0x90]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800b04e7
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800b0a70
call fcn.1800cb8d0
mov rdx, qword [rbp + 0xc8]
mov qword [rbp + 0xa0], rbx
mov qword [rbp + 0xa8], 0xf
mov byte [rbp + 0x90], bl
cmp rdx, 0x10
jb 0x1800b0545
mov rcx, qword [rbp + 0xb0]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800b0540
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800b0a70
call fcn.1800cb8d0
mov rdx, qword [rbp + 0xe8]
mov qword [rbp + 0xc0], rbx
mov qword [rbp + 0xc8], 0xf
mov byte [rbp + 0xb0], bl
cmp rdx, 0x10
jb 0x1800b059e
mov rcx, qword [rbp + 0xd0]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800b0599
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800b0a70
call fcn.1800cb8d0
mov rdx, qword [rbp + 0x48]
mov qword [rbp + 0xe0], rbx
mov qword [rbp + 0xe8], 0xf
mov byte [rbp + 0xd0], bl
cmp rdx, 0x10
jb 0x1800b05f1
mov rcx, qword [rbp + 0x30]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800b05ec
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800b0a70
call fcn.1800cb8d0
mov rdx, qword [rbp - 0x20]
mov qword [rbp + 0x40], rbx
mov qword [rbp + 0x48], 0xf
mov byte [rbp + 0x30], bl
cmp rdx, 0x10
jb 0x1800b063b
mov rcx, qword [rbp - 0x38]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800b0636
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800b0a70
call fcn.1800cb8d0
mov rdx, qword [rsp + 0x38]
mov qword [rbp - 0x28], rbx
mov qword [rbp - 0x20], 0xf
mov byte [rbp - 0x38], bl
cmp rdx, 0x10
jb 0x1800b0687
mov rcx, qword [rsp + 0x20]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800b0682
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800b0a70
call fcn.1800cb8d0
mov rdi, qword [rbp - 0x40]
mov rcx, qword [rbp - 0x80]
inc r15d
mov edx, r15d
mov r9d, pe_nt_image_headers64
mov r8, r13
call qword [sym.imp.ADVAPI32.dll_RegEnumKeyA]
test eax, eax
je 0x1800af8f4
test r13, r13
je 0x1800b06b9
mov rcx, r13
call fcn.1800cb8d0
mov r13, qword [rbp + 0x138]
mov rcx, qword [rbp - 0x80]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov ebx, dword [rbp + 0x148]
xor r15d, r15d
mov rsi, qword [rbp + 0x130]
inc ebx
mov r9d, 0x400
mov edx, ebx
mov dword [rbp + 0x148], ebx
mov r8, r12
mov rcx, rsi
call qword [sym.imp.ADVAPI32.dll_RegEnumKeyA]
test eax, eax
je 0x1800af5e0
test r12, r12
je 0x1800b070b
mov rcx, r12
call fcn.1800cb8d0
cmp rdi, 0x10
jb 0x1800b0743
mov rcx, qword [rbp - 0x58]
lea rdx, [rdi + 1]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800b073e
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800b0a40
call fcn.1800cb8d0
mov rdx, qword [rbp]
cmp rdx, 0x10
jb 0x1800b077e
mov rcx, qword [rbp - 0x18]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800b0779
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800b0a40
call fcn.1800cb8d0
mov rdx, qword [rbp + 0x20]
cmp rdx, 0x10
jb 0x1800b07b9
mov rcx, qword [rbp + 8]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800b07b4
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800b0a40
call fcn.1800cb8d0
mov rdx, qword [r13 + 0x18]
cmp rdx, 0x10
jb 0x1800b07f4
mov rcx, qword [r13]
inc rdx
cmp rdx, 0x1000
jb 0x1800b07ef
mov r8, qword [rcx - 8]
add rdx, 0x27
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x1800b0a40
mov rcx, r8
call fcn.1800cb8d0
mov qword [r13 + 0x10], r15
mov qword [r13 + 0x18], 0xf
mov byte [r13], 0
mov rdx, qword [r14 + 0x18]
cmp rdx, 0x10
jb 0x1800b083f
mov rcx, qword [r14]
inc rdx
cmp rdx, 0x1000
jb 0x1800b083a
mov r8, qword [rcx - 8]
add rdx, 0x27
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x1800b0a40
mov rcx, r8
call fcn.1800cb8d0
mov rbx, qword [rsp + 0x240]
mov qword [r14 + 0x10], r15
mov qword [r14 + 0x18], 0xf
mov byte [r14], 0
add rsp, 0x1f0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
xor ebx, ebx
mov qword [rsp + 0x38], 0xf
mov qword [rsp + 0x30], rbx
mov r8, 0xffffffffffffffff
mov byte [rsp + 0x20], bl
inc r8
cmp byte [r12 + r8], bl
jne 0x1800b0885
mov rdx, r12
lea rcx, [rsp + 0x20]
call fcn.1800bef90
mov rdx, qword [r13 + 0x10]
lea rcx, [rsp + 0x40]
inc rdx
mov qword [rsp + 0x50], rbx
mov qword [rsp + 0x58], 0xf
mov byte [rsp + 0x40], bl
call fcn.1800c17c0
cmp qword [r13 + 0x18], 0x10
mov rdx, r13
jb 0x1800b08cc
mov rdx, qword [r13]
mov r8, qword [r13 + 0x10]
lea rcx, [rsp + 0x40]
call fcn.1800be770
mov rcx, qword [rsp + 0x50]
mov rdx, qword [rsp + 0x58]
cmp rcx, rdx
jae 0x1800b0909
lea rax, [rcx + 1]
cmp rdx, 0x10
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x40]
cmovae rax, qword [rsp + 0x40]
mov word [rax + rcx], 0x5c
jmp 0x1800b0916
mov r9b, 0x5c
lea rcx, [rsp + 0x40]
call fcn.1800bfda0
mov rdx, qword [rsp + 0x58]
mov r9, qword [rsp + 0x50]
mov rax, rdx
mov r8, qword [rsp + 0x30]
sub rax, r9
mov rcx, qword [rsp + 0x38]
cmp r8, rax
jbe 0x1800b095b
mov rax, rcx
sub rax, r8
cmp rax, r9
jb 0x1800b095b
cmp rdx, 0x10
lea r8, [rsp + 0x40]
lea rcx, [rsp + 0x20]
cmovae r8, qword [rsp + 0x40]
call fcn.1800c34e0
jmp 0x1800b0974
cmp rcx, 0x10
lea rdx, [rsp + 0x20]
lea rcx, [rsp + 0x40]
cmovae rdx, qword [rsp + 0x20]
call fcn.1800be770
movups xmm0, xmmword [rax]
mov rdx, r14
lea rcx, [rbp + 0x30]
movups xmmword [rbp - 0x38], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x28], xmm1
mov byte [rax], bl
mov qword [rax + 0x18], 0xf
mov qword [rax + 0x10], rbx
call fcn.1800bea10
mov rcx, qword [rbp - 0x80]
lea rdx, [rbp - 0x38]
mov r8, rax
call fcn.1800af540
mov rdx, qword [rsp + 0x58]
cmp rdx, 0x10
jb 0x1800b09e6
mov rcx, qword [rsp + 0x40]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800b09e1
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800b0a3a
call fcn.1800cb8d0
mov rdx, qword [rsp + 0x38]
mov qword [rsp + 0x50], rbx
mov qword [rsp + 0x58], 0xf
mov byte [rsp + 0x40], bl
cmp rdx, 0x10
jb 0x1800b06c0
mov rcx, qword [rsp + 0x20]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800b0a30
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800b0a3a
call fcn.1800cb8d0
jmp 0x1800b06c0
call fcn.1800dab30
int3
call fcn.1800dab30
int3
call fcn.1800dab30
int3
call fcn.1800dab30
int3
call fcn.1800dab30
int3
call fcn.1800dab30
int3
call fcn.1800dab30
int3
call fcn.1800dab30
int3
call fcn.1800dab30
int3
call fcn.1800dab30
int3