Function at 0x180007380
Capabilities:
Query or enumerate registry value

Disassembly:
mov qword [rsp + 8], rbx
push rbp
mov rbp, rsp
sub rsp, 0x50
mov rax, qword [0x180051010]
xor rax, rsp
mov qword [rbp - 0x10], rax
lea rax, [rbp - 0x20]
mov r9d, 0x20019
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, str.SYSTEMCurrentControlSetServicesuKey
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
xor ebx, ebx
test eax, eax
jne 0x1800073fe
mov rcx, qword [rbp - 0x20]
lea rax, [rbp - 0x18]
mov qword [rsp + 0x28], rax
lea r9, [rbp - 0x14]
lea rax, [0x180059a9a]
mov dword [rbp - 0x14], ebx
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, [0x180046bd8]
mov dword [rbp - 0x18], 1
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
lea rax, [rbp - 0x20]
mov r9d, 0x20019
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, str.SYSTEMCurrentControlSetServicesuKey
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x18000745f
mov rcx, qword [rbp - 0x20]
lea rax, [rbp - 0x14]
mov qword [rsp + 0x28], rax
lea r9, [rbp - 0x18]
lea rax, [0x180059a94]
mov dword [rbp - 0x18], ebx
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, [0x180046be8]
mov dword [rbp - 0x14], 1
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
lea rax, [rbp - 0x20]
mov r9d, 0x20019
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, str.SYSTEMCurrentControlSetServicesuKey
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x1800074c0
mov rcx, qword [rbp - 0x20]
lea rax, [rbp - 0x14]
mov qword [rsp + 0x28], rax
lea r9, [rbp - 0x18]
lea rax, [0x18005105f]
mov dword [rbp - 0x18], ebx
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, [0x180046bf8]
mov dword [rbp - 0x14], 1
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
lea rax, [rbp - 0x20]
mov r9d, 0x20019
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, str.SYSTEMCurrentControlSetServicesuKey
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x180007521
mov rcx, qword [rbp - 0x20]
lea rax, [rbp - 0x14]
mov qword [rsp + 0x28], rax
lea r9, [rbp - 0x18]
lea rax, [0x180051060]
mov dword [rbp - 0x18], ebx
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, [0x180046c08]
mov dword [rbp - 0x14], 1
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
lea rax, [rbp - 0x20]
mov r9d, 0x20019
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, str.SYSTEMCurrentControlSetServicesuKey
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x180007582
mov rcx, qword [rbp - 0x20]
lea rax, [rbp - 0x14]
mov qword [rsp + 0x28], rax
lea r9, [rbp - 0x18]
lea rax, [0x180059a8d]
mov dword [rbp - 0x18], ebx
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, [0x180046c18]
mov dword [rbp - 0x14], 1
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
lea rax, [rbp - 0x20]
mov r9d, 0x20019
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, str.SYSTEMCurrentControlSetServicesuKey
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x1800075e3
mov rcx, qword [rbp - 0x20]
lea rax, [rbp - 0x14]
mov qword [rsp + 0x28], rax
lea r9, [rbp - 0x18]
lea rax, [0x180059a8e]
mov dword [rbp - 0x18], ebx
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, [0x180046c28]
mov dword [rbp - 0x14], 1
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
lea rax, [rbp - 0x20]
mov r9d, 0x20019
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, str.SYSTEMCurrentControlSetServicesuKey
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x180007644
mov rcx, qword [rbp - 0x20]
lea rax, [rbp - 0x14]
mov qword [rsp + 0x28], rax
lea r9, [rbp - 0x18]
lea rax, [0x180059a85]
mov dword [rbp - 0x18], ebx
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, [0x180046c38]
mov dword [rbp - 0x14], 1
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
lea rax, [rbp - 0x20]
mov r9d, 0x20019
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, str.SYSTEMCurrentControlSetServicesuKey
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x1800076a5
mov rcx, qword [rbp - 0x20]
lea rax, [rbp - 0x14]
mov qword [rsp + 0x28], rax
lea r9, [rbp - 0x18]
lea rax, [0x180059a84]
mov dword [rbp - 0x18], ebx
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, [0x180046c48]
mov dword [rbp - 0x14], 1
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
lea rax, [rbp - 0x20]
mov r9d, 0x20019
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, str.SYSTEMCurrentControlSetServicesuKey
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x180007706
mov rcx, qword [rbp - 0x20]
lea rax, [rbp - 0x14]
mov qword [rsp + 0x28], rax
lea r9, [rbp - 0x18]
lea rax, [0x180059a8f]
mov dword [rbp - 0x18], ebx
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, [0x180046c58]
mov dword [rbp - 0x14], 1
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
lea rax, [rbp - 0x20]
mov r9d, 0x20019
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, str.SYSTEMCurrentControlSetServicesuKey
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x180007767
mov rcx, qword [rbp - 0x20]
lea rax, [rbp - 0x14]
mov qword [rsp + 0x28], rax
lea r9, [rbp - 0x18]
lea rax, [0x180059a97]
mov dword [rbp - 0x18], ebx
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, [0x180046c68]
mov dword [rbp - 0x14], 1
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
lea rax, [rbp - 0x20]
mov r9d, 0x20019
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, str.SYSTEMCurrentControlSetServicesuKey
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x1800077c8
mov rcx, qword [rbp - 0x20]
lea rax, [rbp - 0x14]
mov qword [rsp + 0x28], rax
lea r9, [rbp - 0x18]
lea rax, [0x180059a8c]
mov dword [rbp - 0x18], ebx
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, [0x180046c78]
mov dword [rbp - 0x14], 1
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
lea rax, [rbp - 0x20]
mov r9d, 0x20019
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, str.SYSTEMCurrentControlSetServicesuKey
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x180007829
mov rcx, qword [rbp - 0x20]
lea rax, [rbp - 0x14]
mov qword [rsp + 0x28], rax
lea r9, [rbp - 0x18]
lea rax, [0x180059a9c]
mov dword [rbp - 0x18], ebx
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, [0x180046c88]
mov dword [rbp - 0x14], 1
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
lea rax, [rbp - 0x20]
mov r9d, 0x20019
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, str.SYSTEMCurrentControlSetServicesuKey
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x18000788a
mov rcx, qword [rbp - 0x20]
lea rax, [rbp - 0x14]
mov qword [rsp + 0x28], rax
lea r9, [rbp - 0x18]
lea rax, [0x180059a9d]
mov dword [rbp - 0x18], ebx
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, [0x180046c98]
mov dword [rbp - 0x14], 1
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
lea rax, [rbp - 0x20]
mov r9d, 0x20019
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, str.SYSTEMCurrentControlSetServicesuKey
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x1800078eb
mov rcx, qword [rbp - 0x20]
lea rax, [rbp - 0x14]
mov qword [rsp + 0x28], rax
lea r9, [rbp - 0x18]
lea rax, [0x180059a86]
mov dword [rbp - 0x18], ebx
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, [0x180046ca8]
mov dword [rbp - 0x14], 1
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
lea rax, [rbp - 0x20]
mov r9d, 0x20019
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, str.SYSTEMCurrentControlSetServicesuKey
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x18000794c
mov rcx, qword [rbp - 0x20]
lea rax, [rbp - 0x14]
mov qword [rsp + 0x28], rax
lea r9, [rbp - 0x18]
lea rax, [0x180059a83]
mov dword [rbp - 0x18], ebx
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, [0x180046cb8]
mov dword [rbp - 0x14], 1
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
lea rax, [rbp - 0x20]
mov r9d, 0x20019
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, str.SYSTEMCurrentControlSetServicesuKey
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x1800079ad
mov rcx, qword [rbp - 0x20]
lea rax, [rbp - 0x14]
mov qword [rsp + 0x28], rax
lea r9, [rbp - 0x18]
lea rax, [0x180059a87]
mov dword [rbp - 0x18], ebx
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, [0x180046cc8]
mov dword [rbp - 0x14], 1
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
lea rax, [rbp - 0x20]
mov r9d, 0x20019
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, str.SYSTEMCurrentControlSetServicesuKey
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x180007a0e
mov rcx, qword [rbp - 0x20]
lea rax, [rbp - 0x14]
mov qword [rsp + 0x28], rax
lea r9, [rbp - 0x18]
lea rax, [0x180059a98]
mov dword [rbp - 0x18], ebx
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, [0x180046cd8]
mov dword [rbp - 0x14], 1
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
lea rax, [rbp - 0x20]
mov r9d, 0x20019
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, str.SYSTEMCurrentControlSetServicesuKey
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x180007a6f
mov rcx, qword [rbp - 0x20]
lea rax, [rbp - 0x14]
mov qword [rsp + 0x28], rax
lea r9, [rbp - 0x18]
lea rax, [0x180059a99]
mov dword [rbp - 0x18], ebx
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, [0x180046ce8]
mov dword [rbp - 0x14], 1
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
lea rax, [rbp - 0x20]
mov r9d, 0x20019
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, str.SYSTEMCurrentControlSetServicesuKey
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x180007ad0
mov rcx, qword [rbp - 0x20]
lea rax, [rbp - 0x14]
mov qword [rsp + 0x28], rax
lea r9, [rbp - 0x18]
lea rax, [0x180059a9e]
mov dword [rbp - 0x18], ebx
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, [0x180046cf8]
mov dword [rbp - 0x14], 1
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
lea rax, [rbp - 0x20]
mov r9d, 0x20019
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, str.SYSTEMCurrentControlSetServicesuKey
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x180007b31
mov rcx, qword [rbp - 0x20]
lea rax, [rbp - 0x14]
mov qword [rsp + 0x28], rax
lea r9, [rbp - 0x18]
lea rax, [0x180059a95]
mov dword [rbp - 0x18], ebx
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, [0x180046d08]
mov dword [rbp - 0x14], 1
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
lea rax, [rbp - 0x20]
mov r9d, 0x20019
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, str.SYSTEMCurrentControlSetServicesuKey
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x180007b92
mov rcx, qword [rbp - 0x20]
lea rax, [rbp - 0x14]
mov qword [rsp + 0x28], rax
lea r9, [rbp - 0x18]
lea rax, [0x180051068]
mov dword [rbp - 0x18], ebx
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, [0x180046d18]
mov dword [rbp - 0x14], 4
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
lea rax, [rbp - 0x20]
mov r9d, 0x20019
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, str.SYSTEMCurrentControlSetServicesuKey
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x180007bf3
mov rcx, qword [rbp - 0x20]
lea rax, [rbp - 0x14]
mov qword [rsp + 0x28], rax
lea r9, [rbp - 0x18]
lea rax, [0x18005109b]
mov dword [rbp - 0x18], ebx
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, [0x180046d28]
mov dword [rbp - 0x14], 1
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
lea rax, [rbp - 0x20]
mov r9d, 0x20019
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, str.SYSTEMCurrentControlSetServicesuKey
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x180007c54
mov rcx, qword [rbp - 0x20]
lea rax, [rbp - 0x14]
mov qword [rsp + 0x28], rax
lea r9, [rbp - 0x18]
lea rax, [0x180051062]
mov dword [rbp - 0x18], ebx
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, [0x180046d38]
mov dword [rbp - 0x14], 1
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
lea rax, [rbp - 0x20]
mov r9d, 0x20019
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, str.SYSTEMCurrentControlSetServicesuKey
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x180007cb5
mov rcx, qword [rbp - 0x20]
lea rax, [rbp - 0x14]
mov qword [rsp + 0x28], rax
lea r9, [rbp - 0x18]
lea rax, [0x18005107e]
mov dword [rbp - 0x18], ebx
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, [0x180046d48]
mov dword [rbp - 0x14], 1
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
lea rax, [rbp - 0x20]
mov r9d, 0x20019
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, str.SYSTEMCurrentControlSetServicesuKey
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x180007d16
mov rcx, qword [rbp - 0x20]
lea rax, [rbp - 0x14]
mov qword [rsp + 0x28], rax
lea r9, [rbp - 0x18]
lea rax, [0x180051084]
mov dword [rbp - 0x18], ebx
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, [0x180046d58]
mov dword [rbp - 0x14], 1
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
lea rax, [rbp - 0x20]
mov r9d, 0x20019
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, str.SYSTEMCurrentControlSetServicesuKey
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x180007d77
mov rcx, qword [rbp - 0x20]
lea rax, [rbp - 0x14]
mov qword [rsp + 0x28], rax
lea r9, [rbp - 0x18]
lea rax, [0x180051058]
mov dword [rbp - 0x18], ebx
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, [0x180046d68]
mov dword [rbp - 0x14], 4
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
lea rax, [rbp - 0x20]
mov r9d, 0x20019
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, str.SYSTEMCurrentControlSetServicesuKey
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x180007dd8
mov rcx, qword [rbp - 0x20]
lea rax, [rbp - 0x14]
mov qword [rsp + 0x28], rax
lea r9, [rbp - 0x18]
lea rax, [0x180051057]
mov dword [rbp - 0x18], ebx
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, [0x180046d78]
mov dword [rbp - 0x14], 1
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
lea rax, [rbp - 0x20]
mov r9d, 0x20019
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, str.SYSTEMCurrentControlSetServicesuKey
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x180007e39
mov rcx, qword [rbp - 0x20]
lea rax, [rbp - 0x14]
mov qword [rsp + 0x28], rax
lea r9, [rbp - 0x18]
lea rax, [0x18005105d]
mov dword [rbp - 0x18], ebx
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, [0x180046d88]
mov dword [rbp - 0x14], 1
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
lea rax, [rbp - 0x20]
mov r9d, 0x20019
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, str.SYSTEMCurrentControlSetServicesuKey
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x180007e9a
mov rcx, qword [rbp - 0x20]
lea rax, [rbp - 0x14]
mov qword [rsp + 0x28], rax
lea r9, [rbp - 0x18]
lea rax, [0x18005107f]
mov dword [rbp - 0x18], ebx
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, [0x180046d98]
mov dword [rbp - 0x14], 1
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
lea rax, [rbp - 0x20]
mov r9d, 0x20019
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, str.SYSTEMCurrentControlSetServicesuKey
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x180007efb
mov rcx, qword [rbp - 0x20]
lea rax, [rbp - 0x14]
mov qword [rsp + 0x28], rax
lea r9, [rbp - 0x18]
lea rax, [0x180059ade]
mov dword [rbp - 0x18], ebx
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, [0x180046da4]
mov dword [rbp - 0x14], 1
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
lea rax, [rbp - 0x20]
mov r9d, 0x20019
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, str.SYSTEMCurrentControlSetServicesuKey
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x180007f5c
mov rcx, qword [rbp - 0x20]
lea rax, [rbp - 0x14]
mov qword [rsp + 0x28], rax
lea r9, [rbp - 0x18]
lea rax, [0x180059abc]
mov dword [rbp - 0x18], ebx
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, [0x180046da8]
mov dword [rbp - 0x14], 1
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
lea rax, [rbp - 0x20]
mov r9d, 0x20019
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, str.SYSTEMCurrentControlSetServicesuKey
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x180007fbd
mov rcx, qword [rbp - 0x20]
lea rax, [rbp - 0x14]
mov qword [rsp + 0x28], rax
lea r9, [rbp - 0x18]
lea rax, [0x18005109c]
mov dword [rbp - 0x18], ebx
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, [0x180046db0]
mov dword [rbp - 0x14], 1
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
lea rax, [rbp - 0x20]
mov r9d, 0x20019
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, str.SYSTEMCurrentControlSetServicesuKey
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x18000801e
mov rcx, qword [rbp - 0x20]
lea rax, [rbp - 0x14]
mov qword [rsp + 0x28], rax
lea r9, [rbp - 0x18]
lea rax, [0x180059aba]
mov dword [rbp - 0x18], ebx
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, [0x180046dbc]
mov dword [rbp - 0x14], 1
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
lea rax, [rbp - 0x20]
mov r9d, 0x20019
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, str.SYSTEMCurrentControlSetServicesuKey
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x18000807f
mov rcx, qword [rbp - 0x20]
lea rax, [rbp - 0x14]
mov qword [rsp + 0x28], rax
lea r9, [rbp - 0x18]
lea rax, [0x180059ad3]
mov dword [rbp - 0x18], ebx
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, [0x180046dc4]
mov dword [rbp - 0x14], 1
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
lea rax, [rbp - 0x20]
mov r9d, 0x20019
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, str.SYSTEMCurrentControlSetServicesuKey
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x1800080e0
mov rcx, qword [rbp - 0x20]
lea rax, [rbp - 0x14]
mov qword [rsp + 0x28], rax
lea r9, [rbp - 0x18]
lea rax, [0x180059ad6]
mov dword [rbp - 0x18], ebx
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, [0x180046dcc]
mov dword [rbp - 0x14], 1
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
lea rax, [rbp - 0x20]
mov r9d, 0x20019
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, str.SYSTEMCurrentControlSetServicesuKey
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x180008141
mov rcx, qword [rbp - 0x20]
lea rax, [rbp - 0x14]
mov qword [rsp + 0x28], rax
lea r9, [rbp - 0x18]
lea rax, [0x180059abe]
mov dword [rbp - 0x18], ebx
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, [0x180046dd4]
mov dword [rbp - 0x14], 1
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
lea rax, [rbp - 0x20]
mov r9d, 0x20019
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, str.SYSTEMCurrentControlSetServicesuKey
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x1800081a2
mov rcx, qword [rbp - 0x20]
lea rax, [rbp - 0x14]
mov qword [rsp + 0x28], rax
lea r9, [rbp - 0x18]
lea rax, [0x180051056]
mov dword [rbp - 0x18], ebx
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, [0x180046de0]
mov dword [rbp - 0x14], 1
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
lea rax, [rbp - 0x20]
mov r9d, 0x20019
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, str.SYSTEMCurrentControlSetServicesuKey
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x180008203
mov rcx, qword [rbp - 0x20]
lea rax, [rbp - 0x14]
mov qword [rsp + 0x28], rax
lea r9, [rbp - 0x18]
lea rax, [0x180059ab5]
mov dword [rbp - 0x18], ebx
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, [0x180046df0]
mov dword [rbp - 0x14], 1
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
lea rax, [rbp - 0x20]
mov r9d, 0x20019
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, str.SYSTEMCurrentControlSetServicesuKey
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x180008264
mov rcx, qword [rbp - 0x20]
lea rax, [rbp - 0x14]
mov qword [rsp + 0x28], rax
lea r9, [rbp - 0x18]
lea rax, [0x180059ad4]
mov dword [rbp - 0x18], ebx
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, [0x180046dfc]
mov dword [rbp - 0x14], 1
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
lea rax, [rbp - 0x20]
mov r9d, 0x20019
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, str.SYSTEMCurrentControlSetServicesuKey
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x1800082c5
mov rcx, qword [rbp - 0x20]
lea rax, [rbp - 0x14]
mov qword [rsp + 0x28], rax
lea r9, [rbp - 0x18]
lea rax, [0x180059aac]
mov dword [rbp - 0x18], ebx
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, [0x180046e08]
mov dword [rbp - 0x14], 1
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
lea rax, [rbp - 0x20]
mov r9d, 0x20019
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, str.SYSTEMCurrentControlSetServicesuKey
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x180008326
mov rcx, qword [rbp - 0x20]
lea rax, [rbp - 0x14]
mov qword [rsp + 0x28], rax
lea r9, [rbp - 0x18]
lea rax, [0x180059ac9]
mov dword [rbp - 0x18], ebx
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, [0x180046e14]
mov dword [rbp - 0x14], 1
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
lea rax, [rbp - 0x20]
mov r9d, 0x20019
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, str.SYSTEMCurrentControlSetServicesuKey
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x180008387
mov rcx, qword [rbp - 0x20]
lea rax, [rbp - 0x14]
mov qword [rsp + 0x28], rax
lea r9, [rbp - 0x18]
lea rax, [0x180059aad]
mov dword [rbp - 0x18], ebx
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, [0x180046e20]
mov dword [rbp - 0x14], 1
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
lea rax, [rbp - 0x20]
mov r9d, 0x20019
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, str.SYSTEMCurrentControlSetServicesuKey
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x1800083e8
mov rcx, qword [rbp - 0x20]
lea rax, [rbp - 0x14]
mov qword [rsp + 0x28], rax
lea r9, [rbp - 0x18]
lea rax, [0x180059ab4]
mov dword [rbp - 0x18], ebx
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, [0x180046e2c]
mov dword [rbp - 0x14], 1
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
lea rax, [rbp - 0x20]
mov r9d, 0x20019
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, str.SYSTEMCurrentControlSetServicesuKey
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x180008449
mov rcx, qword [rbp - 0x20]
lea rax, [rbp - 0x14]
mov qword [rsp + 0x28], rax
lea r9, [rbp - 0x18]
lea rax, [0x180059abd]
mov dword [rbp - 0x18], ebx
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, [0x180046e34]
mov dword [rbp - 0x14], 1
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
lea rax, [rbp - 0x20]
mov r9d, 0x20019
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, str.SYSTEMCurrentControlSetServicesuKey
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x1800084aa
mov rcx, qword [rbp - 0x20]
lea rax, [rbp - 0x14]
mov qword [rsp + 0x28], rax
lea r9, [rbp - 0x18]
lea rax, [0x180059ad9]
mov dword [rbp - 0x18], ebx
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, [0x180046e40]
mov dword [rbp - 0x14], 1
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
lea rax, [rbp - 0x20]
mov r9d, 0x20019
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, str.SYSTEMCurrentControlSetServicesuKey
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x18000850b
mov rcx, qword [rbp - 0x20]
lea rax, [rbp - 0x14]
mov qword [rsp + 0x28], rax
lea r9, [rbp - 0x18]
lea rax, [0x18005109d]
mov dword [rbp - 0x18], ebx
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, [0x180046e4c]
mov dword [rbp - 0x14], 1
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
lea rax, [rbp - 0x20]
mov r9d, 0x20019
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, str.SYSTEMCurrentControlSetServicesuKey
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x18000856c
mov rcx, qword [rbp - 0x20]
lea rax, [rbp - 0x14]
mov qword [rsp + 0x28], rax
lea r9, [rbp - 0x18]
lea rax, [0x1800510a8]
mov dword [rbp - 0x18], ebx
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, [0x180046e54]
mov dword [rbp - 0x14], 1
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
lea rax, [rbp - 0x20]
mov r9d, 0x20019
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, str.SYSTEMCurrentControlSetServicesuKey
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x1800085cd
mov rcx, qword [rbp - 0x20]
lea rax, [rbp - 0x14]
mov qword [rsp + 0x28], rax
lea r9, [rbp - 0x18]
lea rax, [0x180059aaf]
mov dword [rbp - 0x18], ebx
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, [0x180046e5c]
mov dword [rbp - 0x14], 1
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
lea rax, [rbp - 0x20]
mov r9d, 0x20019
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, str.SYSTEMCurrentControlSetServicesuKey
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x18000862e
mov rcx, qword [rbp - 0x20]
lea rax, [rbp - 0x14]
mov qword [rsp + 0x28], rax
lea r9, [rbp - 0x18]
lea rax, [0x180051098]
mov dword [rbp - 0x18], ebx
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, [0x180046e68]
mov dword [rbp - 0x14], 1
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
lea rax, [rbp - 0x20]
mov r9d, 0x20019
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, str.SYSTEMCurrentControlSetServicesuKey
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x18000868f
mov rcx, qword [rbp - 0x20]
lea rax, [rbp - 0x14]
mov qword [rsp + 0x28], rax
lea r9, [rbp - 0x18]
lea rax, [0x18005109e]
mov dword [rbp - 0x18], ebx
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, [0x180046e78]
mov dword [rbp - 0x14], 1
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
lea rax, [rbp - 0x20]
mov r9d, 0x20019
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, str.SYSTEMCurrentControlSetServicesuKey
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x1800086f0
mov rcx, qword [rbp - 0x20]
lea rax, [rbp - 0x14]
mov qword [rsp + 0x28], rax
lea r9, [rbp - 0x18]
lea rax, [0x180059a66]
mov dword [rbp - 0x18], ebx
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, [0x180046e88]
mov dword [rbp - 0x14], 1
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
lea rax, [rbp - 0x20]
mov r9d, 0x20019
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, str.SYSTEMCurrentControlSetServicesuKey
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x180008751
mov rcx, qword [rbp - 0x20]
lea rax, [rbp - 0x14]
mov qword [rsp + 0x28], rax
lea r9, [rbp - 0x18]
lea rax, [0x180059acc]
mov dword [rbp - 0x18], ebx
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, [0x180046e98]
mov dword [rbp - 0x14], 1
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
lea rax, [rbp - 0x20]
mov r9d, 0x20019
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, str.SYSTEMCurrentControlSetServicesuKey
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x1800087b2
mov rcx, qword [rbp - 0x20]
lea rax, [rbp - 0x14]
mov qword [rsp + 0x28], rax
lea r9, [rbp - 0x18]
lea rax, [0x180059a76]
mov dword [rbp - 0x18], ebx
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, [0x180046ea8]
mov dword [rbp - 0x14], 1
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
lea rax, [rbp - 0x20]
mov r9d, 0x20019
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, str.SYSTEMCurrentControlSetServicesuKey
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x180008813
mov rcx, qword [rbp - 0x20]
lea rax, [rbp - 0x14]
mov qword [rsp + 0x28], rax
lea r9, [rbp - 0x18]
lea rax, [0x180059ada]
mov dword [rbp - 0x18], ebx
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, [0x180046eb8]
mov dword [rbp - 0x14], 1
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
lea rax, [rbp - 0x20]
mov r9d, 0x20019
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, str.SYSTEMCurrentControlSetServicesuKey
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x180008874
mov rcx, qword [rbp - 0x20]
lea rax, [rbp - 0x14]
mov qword [rsp + 0x28], rax
lea r9, [rbp - 0x18]
lea rax, [0x180059aa5]
mov dword [rbp - 0x18], ebx
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, [0x180046ec8]
mov dword [rbp - 0x14], 1
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
lea rax, [rbp - 0x20]
mov r9d, 0x20019
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, str.SYSTEMCurrentControlSetServicesuKey
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x1800088d5
mov rcx, qword [rbp - 0x20]
lea rax, [rbp - 0x14]
mov qword [rsp + 0x28], rax
lea r9, [rbp - 0x18]
lea rax, [0x180051051]
mov dword [rbp - 0x18], ebx
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, [0x180046ed8]
mov dword [rbp - 0x14], 1
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
lea rax, [rbp - 0x20]
mov r9d, 0x20019
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, str.SYSTEMCurrentControlSetServicesuKey
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x180008936
mov rcx, qword [rbp - 0x20]
lea rax, [rbp - 0x14]
mov qword [rsp + 0x28], rax
lea r9, [rbp - 0x18]
lea rax, [0x180059ac1]
mov dword [rbp - 0x18], ebx
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, [0x180046ee8]
mov dword [rbp - 0x14], 1
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
lea rax, [rbp - 0x20]
mov r9d, 0x20019
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, str.SYSTEMCurrentControlSetServicesuKey
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x180008997
mov rcx, qword [rbp - 0x20]
lea rax, [rbp - 0x14]
mov qword [rsp + 0x28], rax
lea r9, [rbp - 0x18]
lea rax, [0x18005107d]
mov dword [rbp - 0x18], ebx
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, [0x180046ef8]
mov dword [rbp - 0x14], 1
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
lea rax, [rbp - 0x20]
mov r9d, 0x20019
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, str.SYSTEMCurrentControlSetServicesuKey
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x1800089f8
mov rcx, qword [rbp - 0x20]
lea rax, [rbp - 0x14]
mov qword [rsp + 0x28], rax
lea r9, [rbp - 0x18]
lea rax, [0x180059ad7]
mov dword [rbp - 0x18], ebx
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, [0x180046f08]
mov dword [rbp - 0x14], 1
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
lea rax, [rbp - 0x20]
mov r9d, 0x20019
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, str.SYSTEMCurrentControlSetServicesuKey
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x180008a59
mov rcx, qword [rbp - 0x20]
lea rax, [rbp - 0x14]
mov qword [rsp + 0x28], rax
lea r9, [rbp - 0x18]
lea rax, [0x180059ab7]
mov dword [rbp - 0x18], ebx
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, [0x180046f18]
mov dword [rbp - 0x14], 1
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
lea rax, [rbp - 0x20]
mov r9d, 0x20019
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, str.SYSTEMCurrentControlSetServicesuKey
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x180008aba
mov rcx, qword [rbp - 0x20]
lea rax, [rbp - 0x14]
mov qword [rsp + 0x28], rax
lea r9, [rbp - 0x18]
lea rax, [0x180059ad1]
mov dword [rbp - 0x18], ebx
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, [0x180046f28]
mov dword [rbp - 0x14], 1
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
lea rax, [rbp - 0x20]
mov r9d, 0x20019
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, str.SYSTEMCurrentControlSetServicesuKey
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x180008b1b
mov rcx, qword [rbp - 0x20]
lea rax, [rbp - 0x14]
mov qword [rsp + 0x28], rax
lea r9, [rbp - 0x18]
lea rax, [0x180059adc]
mov dword [rbp - 0x18], ebx
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, [0x180046f38]
mov dword [rbp - 0x14], 1
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
lea rax, [rbp - 0x20]
mov r9d, 0x20019
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, str.SYSTEMCurrentControlSetServicesuKey
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x180008b7c
mov rcx, qword [rbp - 0x20]
lea rax, [rbp - 0x14]
mov qword [rsp + 0x28], rax
lea r9, [rbp - 0x18]
lea rax, [0x180059ad5]
mov dword [rbp - 0x18], ebx
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, [0x180046f48]
mov dword [rbp - 0x14], 1
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
lea rax, [rbp - 0x20]
mov r9d, 0x20019
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, str.SYSTEMCurrentControlSetServicesuKey
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x180008bdd
mov rcx, qword [rbp - 0x20]
lea rax, [rbp - 0x14]
mov qword [rsp + 0x28], rax
lea r9, [rbp - 0x18]
lea rax, [0x180051054]
mov dword [rbp - 0x18], ebx
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, [0x180046f58]
mov dword [rbp - 0x14], 1
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
lea rax, [rbp - 0x20]
mov r9d, 0x20019
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, str.SYSTEMCurrentControlSetServicesuKey
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x180008c3e
mov rcx, qword [rbp - 0x20]
lea rax, [rbp - 0x14]
mov qword [rsp + 0x28], rax
lea r9, [rbp - 0x18]
lea rax, [0x180059adf]
mov dword [rbp - 0x18], ebx
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, [0x180046f68]
mov dword [rbp - 0x14], 1
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
lea rax, [rbp - 0x20]
mov r9d, 0x20019
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, str.SYSTEMCurrentControlSetServicesuKey
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x180008c9f
mov rcx, qword [rbp - 0x20]
lea rax, [rbp - 0x14]
mov qword [rsp + 0x28], rax
lea r9, [rbp - 0x18]
lea rax, [0x180059aa0]
mov dword [rbp - 0x18], ebx
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, [0x180046f78]
mov dword [rbp - 0x14], 1
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
lea rax, [rbp - 0x20]
mov r9d, 0x20019
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, str.SYSTEMCurrentControlSetServicesuKey
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x180008d00
mov rcx, qword [rbp - 0x20]
lea rax, [rbp - 0x14]
mov qword [rsp + 0x28], rax
lea r9, [rbp - 0x18]
lea rax, [0x180059a75]
mov dword [rbp - 0x18], ebx
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, [0x180046f88]
mov dword [rbp - 0x14], 1
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
lea rax, [rbp - 0x20]
mov r9d, 0x20019
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, str.SYSTEMCurrentControlSetServicesuKey
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x180008d61
mov rcx, qword [rbp - 0x20]
lea rax, [rbp - 0x14]
mov qword [rsp + 0x28], rax
lea r9, [rbp - 0x18]
lea rax, [0x180059a9f]
mov dword [rbp - 0x18], ebx
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, [0x180046f98]
mov dword [rbp - 0x14], 1
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
lea rax, [rbp - 0x20]
mov r9d, 0x20019
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, str.SYSTEMCurrentControlSetServicesuKey
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x180008dc2
mov rcx, qword [rbp - 0x20]
lea rax, [rbp - 0x14]
mov qword [rsp + 0x28], rax
lea r9, [rbp - 0x18]
lea rax, [0x180059ab9]
mov dword [rbp - 0x18], ebx
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, [0x180046fa8]
mov dword [rbp - 0x14], 1
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
lea rax, [rbp - 0x20]
mov r9d, 0x20019
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, str.SYSTEMCurrentControlSetServicesuKey
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x180008e23
mov rcx, qword [rbp - 0x20]
lea rax, [rbp - 0x14]
mov qword [rsp + 0x28], rax
lea r9, [rbp - 0x18]
lea rax, [0x180059ab3]
mov dword [rbp - 0x18], ebx
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, [0x180046fb8]
mov dword [rbp - 0x14], 1
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
lea rax, [rbp - 0x20]
mov r9d, 0x20019
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, str.SYSTEMCurrentControlSetServicesuKey
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x180008e84
mov rcx, qword [rbp - 0x20]
lea rax, [rbp - 0x14]
mov qword [rsp + 0x28], rax
lea r9, [rbp - 0x18]
lea rax, [0x180051095]
mov dword [rbp - 0x18], ebx
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, [0x180046fc8]
mov dword [rbp - 0x14], 1
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
lea rax, [rbp - 0x20]
mov r9d, 0x20019
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, str.SYSTEMCurrentControlSetServicesuKey
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x180008ee5
mov rcx, qword [rbp - 0x20]
lea rax, [rbp - 0x14]
mov qword [rsp + 0x28], rax
lea r9, [rbp - 0x18]
lea rax, [0x180059add]
mov dword [rbp - 0x18], ebx
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, [0x180046fd8]
mov dword [rbp - 0x14], 1
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
lea rax, [rbp - 0x20]
mov r9d, 0x20019
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, str.SYSTEMCurrentControlSetServicesuKey
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x180008f46
mov rcx, qword [rbp - 0x20]
lea rax, [rbp - 0x14]
mov qword [rsp + 0x28], rax
lea r9, [rbp - 0x18]
lea rax, [0x180059ace]
mov dword [rbp - 0x18], ebx
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, [0x180046fe8]
mov dword [rbp - 0x14], 1
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
lea rax, [rbp - 0x20]
mov r9d, 0x20019
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, str.SYSTEMCurrentControlSetServicesuKey
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x180008fa7
mov rcx, qword [rbp - 0x20]
lea rax, [rbp - 0x14]
mov qword [rsp + 0x28], rax
lea r9, [rbp - 0x18]
lea rax, [0x1800510a4]
mov dword [rbp - 0x18], ebx
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, [0x180046ff8]
mov dword [rbp - 0x14], 4
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
lea rax, [rbp - 0x20]
mov r9d, 0x20019
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, str.SYSTEMCurrentControlSetServicesuKey
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x180009008
mov rcx, qword [rbp - 0x20]
lea rax, [rbp - 0x14]
mov qword [rsp + 0x28], rax
lea r9, [rbp - 0x18]
lea rax, [0x180059a77]
mov dword [rbp - 0x18], ebx
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, [0x180047008]
mov dword [rbp - 0x14], 1
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
lea rax, [rbp - 0x20]
mov r9d, 0x20019
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, str.SYSTEMCurrentControlSetServicesuKey
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x180009069
mov rcx, qword [rbp - 0x20]
lea rax, [rbp - 0x14]
mov qword [rsp + 0x28], rax
lea r9, [rbp - 0x18]
lea rax, [0x180059ad8]
mov dword [rbp - 0x18], ebx
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, [0x180047018]
mov dword [rbp - 0x14], 1
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
lea rax, [rbp - 0x20]
mov r9d, 0x20019
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, str.SYSTEMCurrentControlSetServicesuKey
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x1800090ca
mov rcx, qword [rbp - 0x20]
lea rax, [rbp - 0x14]
mov qword [rsp + 0x28], rax
lea r9, [rbp - 0x18]
lea rax, [0x180059acd]
mov dword [rbp - 0x18], ebx
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, [0x180047028]
mov dword [rbp - 0x14], 1
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
lea rax, [rbp - 0x20]
mov r9d, 0x20019
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, str.SYSTEMCurrentControlSetServicesuKey
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x18000912b
mov rcx, qword [rbp - 0x20]
lea rax, [rbp - 0x14]
mov qword [rsp + 0x28], rax
lea r9, [rbp - 0x18]
lea rax, [0x180059a7a]
mov dword [rbp - 0x18], ebx
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, [0x180047038]
mov dword [rbp - 0x14], 1
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
lea rax, [rbp - 0x20]
mov r9d, 0x20019
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, str.SYSTEMCurrentControlSetServicesuKey
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x18000918c
mov rcx, qword [rbp - 0x20]
lea rax, [rbp - 0x14]
mov qword [rsp + 0x28], rax
lea r9, [rbp - 0x18]
lea rax, [0x180059ab6]
mov dword [rbp - 0x18], ebx
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, [0x180047048]
mov dword [rbp - 0x14], 1
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
lea rax, [rbp - 0x20]
mov r9d, 0x20019
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, str.SYSTEMCurrentControlSetServicesuKey
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x1800091ed
mov rcx, qword [rbp - 0x20]
lea rax, [rbp - 0x14]
mov qword [rsp + 0x28], rax
lea r9, [rbp - 0x18]
lea rax, [0x180059aae]
mov dword [rbp - 0x18], ebx
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, [0x180047054]
mov dword [rbp - 0x14], 1
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
lea rax, [rbp - 0x20]
mov r9d, 0x20019
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, str.SYSTEMCurrentControlSetServicesuKey
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x18000924e
mov rcx, qword [rbp - 0x20]
lea rax, [rbp - 0x14]
mov qword [rsp + 0x28], rax
lea r9, [rbp - 0x18]
lea rax, [0x180059ab2]
mov dword [rbp - 0x18], ebx
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, [0x180047060]
mov dword [rbp - 0x14], 1
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
lea rax, [rbp - 0x20]
mov r9d, 0x20019
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, str.SYSTEMCurrentControlSetServicesuKey
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x1800092af
mov rcx, qword [rbp - 0x20]
lea rax, [rbp - 0x14]
mov qword [rsp + 0x28], rax
lea r9, [rbp - 0x18]
lea rax, [0x180051094]
mov dword [rbp - 0x18], ebx
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, [0x180047070]
mov dword [rbp - 0x14], 1
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
lea rax, [rbp - 0x20]
mov r9d, 0x20019
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, str.SYSTEMCurrentControlSetServicesuKey
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x180009310
mov rcx, qword [rbp - 0x20]
lea rax, [rbp - 0x14]
mov qword [rsp + 0x28], rax
lea r9, [rbp - 0x18]
lea rax, [0x180059aca]
mov dword [rbp - 0x18], ebx
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, [0x180047080]
mov dword [rbp - 0x14], 1
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
lea rax, [rbp - 0x20]
mov r9d, 0x20019
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, str.SYSTEMCurrentControlSetServicesuKey
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x180009371
mov rcx, qword [rbp - 0x20]
lea rax, [rbp - 0x14]
mov qword [rsp + 0x28], rax
lea r9, [rbp - 0x18]
lea rax, [0x180059abb]
mov dword [rbp - 0x18], ebx
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, [0x180047090]
mov dword [rbp - 0x14], 1
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
lea rax, [rbp - 0x20]
mov r9d, 0x20019
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, str.SYSTEMCurrentControlSetServicesuKey
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x1800093d2
mov rcx, qword [rbp - 0x20]
lea rax, [rbp - 0x14]
mov qword [rsp + 0x28], rax
lea r9, [rbp - 0x18]
lea rax, [0x180051086]
mov dword [rbp - 0x18], ebx
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, [0x1800470a0]
mov dword [rbp - 0x14], 1
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
lea rax, [rbp - 0x20]
mov r9d, 0x20019
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, str.SYSTEMCurrentControlSetServicesuKey
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x180009433
mov rcx, qword [rbp - 0x20]
lea rax, [rbp - 0x14]
mov qword [rsp + 0x28], rax
lea r9, [rbp - 0x18]
lea rax, [0x180051085]
mov dword [rbp - 0x18], ebx
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, [0x1800470b0]
mov dword [rbp - 0x14], 1
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
lea rax, [rbp - 0x20]
mov r9d, 0x20019
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, str.SYSTEMCurrentControlSetServicesuKey
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x180009494
mov rcx, qword [rbp - 0x20]
lea rax, [rbp - 0x14]
mov qword [rsp + 0x28], rax
lea r9, [rbp - 0x18]
lea rax, [0x180059aa7]
mov dword [rbp - 0x18], ebx
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, [0x1800470c0]
mov dword [rbp - 0x14], 1
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
lea rax, [rbp - 0x20]
mov r9d, 0x20019
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, str.SYSTEMCurrentControlSetServicesuKey
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x1800094f5
mov rcx, qword [rbp - 0x20]
lea rax, [rbp - 0x14]
mov qword [rsp + 0x28], rax
lea r9, [rbp - 0x18]
lea rax, [0x180051097]
mov dword [rbp - 0x18], ebx
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, [0x1800470d0]
mov dword [rbp - 0x14], 1
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
lea rax, [rbp - 0x20]
mov r9d, 0x20019
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, str.SYSTEMCurrentControlSetServicesuKey
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x180009556
mov rcx, qword [rbp - 0x20]
lea rax, [rbp - 0x14]
mov qword [rsp + 0x28], rax
lea r9, [rbp - 0x18]
lea rax, [0x18005107c]
mov dword [rbp - 0x18], ebx
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, [0x1800470e0]
mov dword [rbp - 0x14], 1
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
lea rax, [rbp - 0x20]
mov r9d, 0x20019
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, str.SYSTEMCurrentControlSetServicesuKey
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x1800095b7
mov rcx, qword [rbp - 0x20]
lea rax, [rbp - 0x14]
mov qword [rsp + 0x28], rax
lea r9, [rbp - 0x18]
lea rax, [0x180051061]
mov dword [rbp - 0x18], ebx
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, [0x1800470f0]
mov dword [rbp - 0x14], 1
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
lea rax, [rbp - 0x20]
mov r9d, 0x20019
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, str.SYSTEMCurrentControlSetServicesuKey
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x180009618
mov rcx, qword [rbp - 0x20]
lea rax, [rbp - 0x14]
mov qword [rsp + 0x28], rax
lea r9, [rbp - 0x18]
lea rax, [0x180051053]
mov dword [rbp - 0x18], ebx
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, [0x180047100]
mov dword [rbp - 0x14], 1
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
lea rax, [rbp - 0x20]
mov r9d, 0x20019
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, str.SYSTEMCurrentControlSetServicesuKey
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x180009679
mov rcx, qword [rbp - 0x20]
lea rax, [rbp - 0x14]
mov qword [rsp + 0x28], rax
lea r9, [rbp - 0x18]
lea rax, [0x180059a67]
mov dword [rbp - 0x18], ebx
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, [0x180047110]
mov dword [rbp - 0x14], 1
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
lea rax, [rbp - 0x20]
mov r9d, 0x20019
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, str.SYSTEMCurrentControlSetServicesuKey
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x1800096da
mov rcx, qword [rbp - 0x20]
lea rax, [rbp - 0x14]
mov qword [rsp + 0x28], rax
lea r9, [rbp - 0x18]
lea rax, [0x180051096]
mov dword [rbp - 0x18], ebx
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, [0x180047120]
mov dword [rbp - 0x14], 1
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
lea rax, [rbp - 0x20]
mov r9d, 0x20019
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, str.SYSTEMCurrentControlSetServicesuKey
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x18000973b
mov rcx, qword [rbp - 0x20]
lea rax, [rbp - 0x14]
mov qword [rsp + 0x28], rax
lea r9, [rbp - 0x18]
lea rax, [0x180051087]
mov dword [rbp - 0x18], ebx
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, [0x180047130]
mov dword [rbp - 0x14], 1
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
lea rax, [rbp - 0x20]
mov r9d, 0x20019
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, str.SYSTEMCurrentControlSetServicesuKey
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x18000979c
mov rcx, qword [rbp - 0x20]
lea rax, [rbp - 0x14]
mov qword [rsp + 0x28], rax
lea r9, [rbp - 0x18]
lea rax, [0x180059a78]
mov dword [rbp - 0x18], ebx
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, [0x180047140]
mov dword [rbp - 0x14], 1
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
lea rax, [rbp - 0x20]
mov r9d, 0x20019
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, str.SYSTEMCurrentControlSetServicesuKey
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x1800097fd
mov rcx, qword [rbp - 0x20]
lea rax, [rbp - 0x14]
mov qword [rsp + 0x28], rax
lea r9, [rbp - 0x18]
lea rax, [0x18005109f]
mov dword [rbp - 0x18], ebx
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, [0x180047150]
mov dword [rbp - 0x14], 1
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
lea rax, [rbp - 0x20]
mov r9d, 0x20019
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, str.SYSTEMCurrentControlSetServicesuKey
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x18000985e
mov rcx, qword [rbp - 0x20]
lea rax, [rbp - 0x14]
mov qword [rsp + 0x28], rax
lea r9, [rbp - 0x18]
lea rax, [0x1800510ac]
mov dword [rbp - 0x18], ebx
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, [0x180047160]
mov dword [rbp - 0x14], 4
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
lea rax, [rbp - 0x20]
mov r9d, 0x20019
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, str.SYSTEMCurrentControlSetServicesuKey
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x1800098bf
mov rcx, qword [rbp - 0x20]
lea rax, [rbp - 0x14]
mov qword [rsp + 0x28], rax
lea r9, [rbp - 0x18]
lea rax, [0x1800510a0]
mov dword [rbp - 0x18], ebx
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, [0x180047170]
mov dword [rbp - 0x14], 4
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
lea rax, [rbp - 0x20]
mov r9d, 0x20019
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, str.SYSTEMCurrentControlSetServicesuKey
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x180009920
mov rcx, qword [rbp - 0x20]
lea rax, [rbp - 0x14]
mov qword [rsp + 0x28], rax
lea r9, [rbp - 0x18]
lea rax, [0x180051099]
mov dword [rbp - 0x18], ebx
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, [0x180047180]
mov dword [rbp - 0x14], 1
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
lea rax, [rbp - 0x20]
mov r9d, 0x20019
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, str.SYSTEMCurrentControlSetServicesuKey
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x180009981
mov rcx, qword [rbp - 0x20]
lea rax, [rbp - 0x14]
mov qword [rsp + 0x28], rax
lea r9, [rbp - 0x18]
lea rax, [0x180059ac8]
mov dword [rbp - 0x18], ebx
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, [0x180047190]
mov dword [rbp - 0x14], 1
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
lea rax, [rbp - 0x20]
mov r9d, 0x20019
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, str.SYSTEMCurrentControlSetServicesuKey
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x1800099e2
mov rcx, qword [rbp - 0x20]
lea rax, [rbp - 0x14]
mov qword [rsp + 0x28], rax
lea r9, [rbp - 0x18]
lea rax, [0x180059adb]
mov dword [rbp - 0x18], ebx
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, [0x1800471a0]
mov dword [rbp - 0x14], 1
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
lea rax, [rbp - 0x20]
mov r9d, 0x20019
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, str.SYSTEMCurrentControlSetServicesuKey
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x180009a43
mov rcx, qword [rbp - 0x20]
lea rax, [rbp - 0x14]
mov qword [rsp + 0x28], rax
lea r9, [rbp - 0x18]
lea rax, [0x180059acb]
mov dword [rbp - 0x18], ebx
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, [0x1800471b0]
mov dword [rbp - 0x14], 1
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
lea rax, [rbp - 0x20]
mov r9d, 0x20019
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, str.SYSTEMCurrentControlSetServicesuKey
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x180009aa4
mov rcx, qword [rbp - 0x20]
lea rax, [rbp - 0x14]
mov qword [rsp + 0x28], rax
lea r9, [rbp - 0x18]
lea rax, [0x180051050]
mov dword [rbp - 0x18], ebx
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, [0x1800471c0]
mov dword [rbp - 0x14], 1
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
lea rax, [rbp - 0x20]
mov r9d, 0x20019
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, str.SYSTEMCurrentControlSetServicesuKey
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x180009b05
mov rcx, qword [rbp - 0x20]
lea rax, [rbp - 0x14]
mov qword [rsp + 0x28], rax
lea r9, [rbp - 0x18]
lea rax, [0x180059ae0]
mov dword [rbp - 0x18], ebx
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, [0x1800471cc]
mov dword [rbp - 0x14], 1
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
lea rax, [rbp - 0x20]
mov r9d, 0x20019
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, str.SYSTEMCurrentControlSetServicesuKey
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x180009b66
mov rcx, qword [rbp - 0x20]
lea rax, [rbp - 0x14]
mov qword [rsp + 0x28], rax
lea r9, [rbp - 0x18]
lea rax, [0x180059ab1]
mov dword [rbp - 0x18], ebx
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, [0x1800471d8]
mov dword [rbp - 0x14], 1
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
lea rax, [rbp - 0x20]
mov r9d, 0x20019
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, str.SYSTEMCurrentControlSetServicesuKey
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x180009bc7
mov rcx, qword [rbp - 0x20]
lea rax, [rbp - 0x14]
mov qword [rsp + 0x28], rax
lea r9, [rbp - 0x18]
lea rax, [0x180059aa4]
mov dword [rbp - 0x18], ebx
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, [0x1800471e8]
mov dword [rbp - 0x14], 1
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
lea rax, [rbp - 0x20]
mov r9d, 0x20019
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, str.SYSTEMCurrentControlSetServicesuKey
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x180009c28
mov rcx, qword [rbp - 0x20]
lea rax, [rbp - 0x14]
mov qword [rsp + 0x28], rax
lea r9, [rbp - 0x18]
lea rax, [0x180059ac4]
mov dword [rbp - 0x18], ebx
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, [0x1800471f8]
mov dword [rbp - 0x14], 4
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
lea rax, [rbp - 0x20]
mov r9d, 0x20019
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, str.SYSTEMCurrentControlSetServicesuKey
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x180009c89
mov rcx, qword [rbp - 0x20]
lea rax, [rbp - 0x14]
mov qword [rsp + 0x28], rax
lea r9, [rbp - 0x18]
lea rax, [0x180059aa8]
mov dword [rbp - 0x18], ebx
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, [0x180047200]
mov dword [rbp - 0x14], 4
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
lea rax, [rbp - 0x20]
mov r9d, 0x20019
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, str.SYSTEMCurrentControlSetServicesuKey
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x180009cea
mov rcx, qword [rbp - 0x20]
lea rax, [rbp - 0x14]
mov qword [rsp + 0x28], rax
lea r9, [rbp - 0x18]
lea rax, [0x180059ac3]
mov dword [rbp - 0x18], ebx
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, [0x180047210]
mov dword [rbp - 0x14], 1
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
lea rax, [rbp - 0x20]
mov r9d, 0x20019
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, str.SYSTEMCurrentControlSetServicesuKey
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x180009d4b
mov rcx, qword [rbp - 0x20]
lea rax, [rbp - 0x14]
mov qword [rsp + 0x28], rax
lea r9, [rbp - 0x18]
lea rax, [0x180051088]
mov dword [rbp - 0x18], ebx
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, [0x18004721c]
mov dword [rbp - 0x14], 4
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
lea rax, [rbp - 0x20]
mov r9d, 0x20019
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, str.SYSTEMCurrentControlSetServicesuKey
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x180009dac
mov rcx, qword [rbp - 0x20]
lea rax, [rbp - 0x14]
mov qword [rsp + 0x28], rax
lea r9, [rbp - 0x18]
lea rax, [0x180051078]
mov dword [rbp - 0x18], ebx
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, [0x180047228]
mov dword [rbp - 0x14], 4
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
lea rax, [rbp - 0x20]
mov r9d, 0x20019
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, str.SYSTEMCurrentControlSetServicesuKey
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x180009e0d
mov rcx, qword [rbp - 0x20]
lea rax, [rbp - 0x14]
mov qword [rsp + 0x28], rax
lea r9, [rbp - 0x18]
lea rax, [0x180059ae1]
mov dword [rbp - 0x18], ebx
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, [0x180047238]
mov dword [rbp - 0x14], 1
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
lea rax, [rbp - 0x20]
mov r9d, 0x20019
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, str.SYSTEMCurrentControlSetServicesuKey
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x180009e6e
mov rcx, qword [rbp - 0x20]
lea rax, [rbp - 0x14]
mov qword [rsp + 0x28], rax
lea r9, [rbp - 0x18]
lea rax, [0x180051055]
mov dword [rbp - 0x18], ebx
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, [0x180047248]
mov dword [rbp - 0x14], 1
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
mov rcx, qword [rbp - 0x10]
xor rcx, rsp
call fcn.18003e990
mov rbx, qword [rsp + 0x60]
add rsp, 0x50
pop rbp
ret