Function at 0x1800ade60
Capabilities:
Query or enumerate registry key

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x640]
sub rsp, 0x740
mov rax, qword [0x18012a010]
xor rax, rsp
mov qword [rbp + 0x630], rax
xor r14d, r14d
mov qword [rbp + 8], rcx
mov rsi, rcx
mov qword [rbp + 0x1b8], r14
lea rdx, str.SOFTWAREMartin_PrikrylWinSCP_2Sessions
mov qword [rbp + 0x1c0], 0xf
lea rcx, [rbp + 0x1a8]
mov byte [rbp + 0x1a8], r14b
lea r8d, [r14 + 0x29]
call fcn.1800c2b50
cmp qword [rbp + 0x1c0], 0x10
lea rax, [rbp + 0x110]
lea rdx, [rbp + 0x1a8]
mov qword [rsp + 0x20], rax
cmovae rdx, qword [rbp + 0x1a8]
mov r9d, 0x20019
xor r8d, r8d
mov rcx, 0xffffffff80000001
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x1800af183
xor edx, edx
lea rcx, [rbp + 0x210]
mov r8d, 0x208
call fcn.1800d2e20
xor edx, edx
lea rcx, [rbp + 0x420]
mov r8d, 0x208
call fcn.1800d2e20
mov rcx, qword [rbp + 0x110]
lea rax, [rbp + 0x1f8]
mov qword [rsp + 0x58], rax
lea r8, [rbp + 0x160]
mov r15d, 0xf
mov dword [rbp + 0x160], 0x104
mov r13d, r14d
mov dword [rbp + 0x118], r14d
lea rax, [rbp + 0x1f4]
mov byte [rbp + 0x168], r14b
mov qword [rsp + 0x50], rax
lea rdx, [rbp + 0x420]
lea rax, [rbp + 0x1f0]
mov qword [rbp + 0x130], r14
mov qword [rsp + 0x48], rax
mov ebx, r15d
lea rax, [rbp + 0x1ec]
mov qword [rbp + 0x138], r15
mov qword [rsp + 0x40], rax
xor r9d, r9d
lea rax, [rbp + 0x1e8]
mov byte [rbp + 0x120], r13b
mov qword [rsp + 0x38], rax
mov r12d, r15d
lea rax, [rbp + 0x204]
mov qword [rbp + 0x150], r14
mov qword [rsp + 0x30], rax
mov edi, ebx
lea rax, [rbp + 0x200]
mov qword [rbp + 0x158], rbx
mov qword [rsp + 0x28], rax
lea rax, [rbp + 0x118]
mov qword [rsp + 0x20], rax
mov byte [rbp + 0x140], r13b
mov qword [rbp + 0x198], r14
mov qword [rbp + 0x1a0], r15
mov byte [rbp + 0x188], r13b
call qword [sym.imp.ADVAPI32.dll_RegQueryInfoKeyW]
mov eax, dword [rbp + 0x118]
test eax, eax
je 0x1800af089
mov ecx, r14d
mov dword [rbp], ecx
lea rax, [rbp + 0x1f8]
mov dword [rbp + 0x164], 0x1000
mov qword [rsp + 0x38], rax
lea r9, [rbp + 0x164]
mov qword [rsp + 0x30], r14
lea r8, [rbp + 0x210]
mov edx, ecx
mov qword [rsp + 0x28], r14
mov rcx, qword [rbp + 0x110]
mov qword [rsp + 0x20], r14
call qword [sym.imp.ADVAPI32.dll_RegEnumKeyExW]
test eax, eax
jne 0x1800af067
mov qword [rbp + 0x1d8], r14
lea rax, [rbp + 0x210]
mov qword [rbp + 0x1e0], 7
mov r8, 0xffffffffffffffff
mov word [rbp + 0x1c8], r14w
nop word [rax + rax]
inc r8
cmp word [rax + r8*2], 0
jne 0x1800ae0b0
lea rdx, [rbp + 0x210]
lea rcx, [rbp + 0x1c8]
call fcn.1800c2870
cmp qword [rbp + 0x1e0], 8
lea rdx, [rbp + 0x1c8]
mov rax, qword [rbp + 0x1d8]
lea rsi, [rbp + 0x1c8]
cmovae rdx, qword [rbp + 0x1c8]
mov rdi, r14
cmovae rsi, qword [rbp + 0x1c8]
mov qword [rsp + 0x70], r14
mov r14d, 0xf
mov qword [rsp + 0x78], r14
lea rbx, [rdx + rax*2]
mov byte [rsp + 0x60], 0
mov rdx, rbx
sub rdx, rsi
sar rdx, 1
cmp rdx, 0x10
jb 0x1800ae13c
lea rcx, [rsp + 0x60]
call fcn.1800c8f90
mov r14, qword [rsp + 0x78]
xor edi, edi
mov qword [rsp + 0x70], rdi
cmp rsi, rbx
je 0x1800ae18a
movzx r9d, byte [rsi]
cmp rdi, r14
jae 0x1800ae16d
lea rax, [rdi + 1]
cmp r14, 0x10
mov qword [rsp + 0x70], rax
lea rax, [rsp + 0x60]
cmovae rax, qword [rsp + 0x60]
mov byte [rax + rdi], r9b
mov byte [rax + rdi + 1], 0
jmp 0x1800ae177
lea rcx, [rsp + 0x60]
call fcn.1800c3bf0
mov r14, qword [rsp + 0x78]
add rsi, 2
mov rdi, qword [rsp + 0x70]
cmp rsi, rbx
jne 0x1800ae141
cmp r15, 0x10
jb 0x1800ae1c5
mov rcx, qword [rbp + 0x168]
lea rdx, [r15 + 1]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800ae1c0
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800af252
call fcn.1800cf9b0
movups xmm0, xmmword [rsp + 0x60]
xor ebx, ebx
lea rdx, str.HostName
movups xmm1, xmmword [rsp + 0x70]
lea rcx, [rbp - 0x60]
mov qword [rbp - 0x50], rbx
movups xmmword [rbp + 0x168], xmm0
lea r8d, [rbx + 8]
mov qword [rbp - 0x48], 0xf
movups xmmword [rbp + 0x178], xmm1
mov byte [rbp - 0x60], bl
call fcn.1800c2b50
lea rdx, [rdi + 0x2a]
mov qword [rbp - 0x70], rbx
mov qword [rbp - 0x68], 0xf
mov byte [rbp - 0x80], bl
cmp rdx, 0x10
jb 0x1800ae228
lea rcx, [rbp - 0x80]
call fcn.1800c8f90
mov qword [rbp - 0x70], rbx
mov r8d, 0x2a
lea rdx, str.SOFTWAREMartin_PrikrylWinSCP_2Sessions_
lea rcx, [rbp - 0x80]
call fcn.1800c22c0
cmp r14, 0x10
lea rdx, [rbp + 0x168]
mov r8, rdi
lea rcx, [rbp - 0x80]
cmovae rdx, qword [rsp + 0x60]
call fcn.1800c22c0
lea r9, [rbp - 0x60]
lea r8, [rbp - 0x80]
lea rcx, [rbp - 0x20]
call fcn.1800adcb0
mov rbx, rax
lea rax, [rbp + 0x120]
cmp rax, rbx
je 0x1800ae2ee
cmp r12, 0x10
jb 0x1800ae2b7
mov rcx, qword [rbp + 0x120]
lea rdx, [r12 + 1]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800ae2b2
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800af264
call fcn.1800cf9b0
movups xmm1, xmmword [rbx + 0x10]
xor r14d, r14d
movups xmm0, xmmword [rbx]
mov qword [rbx + 0x10], r14
movups xmmword [rbp + 0x130], xmm1
mov r12, qword [rbp + 0x138]
mov r13, qword [rbp + 0x130]
movups xmmword [rbp + 0x120], xmm0
mov qword [rbx + 0x18], 0xf
mov byte [rbx], r14b
jmp 0x1800ae2f1
xor r14d, r14d
mov rdx, qword [rbp - 8]
cmp rdx, 0x10
jb 0x1800ae32c
mov rcx, qword [rbp - 0x20]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800ae327
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800af264
call fcn.1800cf9b0
mov r8d, 8
mov qword [rbp - 0x50], r14
lea rdx, str.UserName
mov qword [rbp - 0x48], 0xf
lea rcx, [rbp - 0x60]
mov byte [rbp - 0x60], 0
call fcn.1800c2b50
mov rbx, qword [rbp + 0x178]
mov qword [rbp - 0x70], r14
mov qword [rbp - 0x68], 0xf
mov byte [rbp - 0x80], 0
lea rdx, [rbx + 0x2a]
cmp rdx, 0x10
jb 0x1800ae380
lea rcx, [rbp - 0x80]
call fcn.1800c8f90
mov qword [rbp - 0x70], r14
mov r8d, 0x2a
lea rdx, str.SOFTWAREMartin_PrikrylWinSCP_2Sessions_
lea rcx, [rbp - 0x80]
call fcn.1800c22c0
cmp qword [rbp + 0x180], 0x10
lea rdx, [rbp + 0x168]
mov r8, rbx
lea rcx, [rbp - 0x80]
cmovae rdx, qword [rbp + 0x168]
call fcn.1800c22c0
lea r9, [rbp - 0x60]
lea r8, [rbp - 0x80]
lea rcx, [rbp - 0x20]
call fcn.1800adcb0
mov rbx, rax
lea rax, [rbp + 0x140]
cmp rax, rbx
je 0x1800ae43f
mov rax, qword [rbp + 0x158]
cmp rax, 0x10
jb 0x1800ae41b
mov rcx, qword [rbp + 0x140]
lea rdx, [rax + 1]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800ae416
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800af26a
call fcn.1800cf9b0
movups xmm0, xmmword [rbx]
movups xmm1, xmmword [rbx + 0x10]
mov qword [rbx + 0x10], r14
movups xmmword [rbp + 0x140], xmm0
mov qword [rbx + 0x18], 0xf
movups xmmword [rbp + 0x150], xmm1
mov byte [rbx], 0
mov rdx, qword [rbp - 8]
cmp rdx, 0x10
jb 0x1800ae47a
mov rcx, qword [rbp - 0x20]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800ae475
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800af26a
call fcn.1800cf9b0
mov r8d, 8
mov qword [rbp - 0x50], r14
lea rdx, str.Password
mov qword [rbp - 0x48], 0xf
lea rcx, [rbp - 0x60]
mov byte [rbp - 0x60], 0
call fcn.1800c2b50
mov rbx, qword [rbp + 0x178]
mov qword [rbp - 0x70], r14
mov qword [rbp - 0x68], 0xf
mov byte [rbp - 0x80], 0
lea rdx, [rbx + 0x2a]
cmp rdx, 0x10
jb 0x1800ae4ce
lea rcx, [rbp - 0x80]
call fcn.1800c8f90
mov qword [rbp - 0x70], r14
mov r8d, 0x2a
lea rdx, str.SOFTWAREMartin_PrikrylWinSCP_2Sessions_
lea rcx, [rbp - 0x80]
call fcn.1800c22c0
cmp qword [rbp + 0x180], 0x10
lea rdx, [rbp + 0x168]
mov r8, rbx
lea rcx, [rbp - 0x80]
cmovae rdx, qword [rbp + 0x168]
call fcn.1800c22c0
lea r9, [rbp - 0x60]
lea r8, [rbp - 0x80]
lea rcx, [rbp - 0x20]
call fcn.1800adcb0
mov rbx, rax
lea rax, [rbp + 0x188]
cmp rax, rbx
je 0x1800ae58d
mov rax, qword [rbp + 0x1a0]
cmp rax, 0x10
jb 0x1800ae569
mov rcx, qword [rbp + 0x188]
lea rdx, [rax + 1]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800ae564
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800af270
call fcn.1800cf9b0
movups xmm0, xmmword [rbx]
movups xmm1, xmmword [rbx + 0x10]
mov qword [rbx + 0x10], r14
movups xmmword [rbp + 0x188], xmm0
mov qword [rbx + 0x18], 0xf
movups xmmword [rbp + 0x198], xmm1
mov byte [rbx], 0
mov rdx, qword [rbp - 8]
cmp rdx, 0x10
jb 0x1800ae5c8
mov rcx, qword [rbp - 0x20]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800ae5c3
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800af270
call fcn.1800cf9b0
mov rsi, qword [rbp + 8]
test r13, r13
je 0x1800aefca
cmp qword [rbp + 0x150], 0
je 0x1800aefca
cmp qword [rbp + 0x198], 0
je 0x1800aefca
mov rax, qword [rsi + 0x18]
mov rcx, rsi
cmp rax, 0x10
jb 0x1800ae601
mov rcx, qword [rsi]
cmp qword [rsi + 0x10], 1
jne 0x1800ae611
cmp byte [rcx], 0x30
jne 0x1800ae611
mov cl, 1
jmp 0x1800ae613
xor cl, cl
test cl, cl
je 0x1800aeb60
lea rdx, [r13 + 1]
mov qword [rbp - 0x30], r14
mov qword [rbp - 0x28], 0xf
mov byte [rbp - 0x40], 0
cmp rdx, 0x10
jb 0x1800ae642
lea rcx, [rbp - 0x40]
call fcn.1800c8f90
mov qword [rbp - 0x30], r14
mov r8d, 1
lea rdx, [0x180118dc0]
lea rcx, [rbp - 0x40]
call fcn.1800c22c0
cmp r12, 0x10
lea rdx, [rbp + 0x120]
mov r8, r13
lea rcx, [rbp - 0x40]
cmovae rdx, qword [rbp + 0x120]
call fcn.1800c22c0
mov r8d, 1
lea rdx, [0x180118dbc]
lea rcx, [rbp - 0x40]
call fcn.1800c22c0
mov r8d, 1
lea rdx, [0x180118dc0]
lea rcx, [rbp - 0x60]
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x60], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x50], xmm1
mov qword [rax + 0x10], r14
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
call fcn.1800c22c0
cmp qword [rbp + 0x158], 0x10
lea rdx, [rbp + 0x140]
mov r8, qword [rbp + 0x150]
lea rcx, [rbp - 0x20]
cmovae rdx, qword [rbp + 0x140]
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x20], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x10], xmm1
mov qword [rax + 0x10], r14
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
call fcn.1800c22c0
mov r8d, 1
lea rdx, [0x180118dbc]
lea rcx, [rbp + 0x10]
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x10], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x20], xmm1
mov qword [rax + 0x10], r14
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
call fcn.1800c22c0
mov r8d, 1
lea rdx, [0x180118dc0]
lea rcx, [rbp + 0x30]
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x30], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x40], xmm1
mov qword [rax + 0x10], r14
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
call fcn.1800c22c0
mov qword [rsp + 0x70], r14
lea rdx, [rbp + 0x188]
mov qword [rsp + 0x78], r14
lea rcx, [rbp + 0xb0]
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x60], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x70], xmm1
mov qword [rax + 0x10], r14
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
call fcn.1800c2490
lea rdx, [rbp + 0x120]
mov rdi, rax
lea rcx, [rbp + 0xd0]
call fcn.1800c2490
lea rdx, [rbp + 0x140]
mov rbx, rax
lea rcx, [rbp + 0xf0]
call fcn.1800c2490
mov rdx, rax
mov r9, rdi
lea rcx, [rbp + 0x50]
mov r8, rbx
call fcn.1800a9d40
mov rcx, qword [rsp + 0x78]
mov rdx, rax
mov r9, qword [rsp + 0x70]
mov r8, qword [rax + 0x10]
mov rax, rcx
sub rax, r9
cmp r8, rax
jbe 0x1800ae82a
mov rax, qword [rdx + 0x18]
sub rax, r8
cmp rax, r9
jb 0x1800ae82a
cmp rcx, 0x10
lea r8, [rsp + 0x60]
mov rcx, rdx
cmovae r8, qword [rsp + 0x60]
call fcn.1800c7240
jmp 0x1800ae83e
cmp qword [rdx + 0x18], 0x10
jb 0x1800ae834
mov rdx, qword [rdx]
lea rcx, [rsp + 0x60]
call fcn.1800c22c0
movups xmm0, xmmword [rax]
mov r8d, 2
lea rdx, [0x180118dd0]
lea rcx, [rbp - 0x80]
movups xmmword [rbp - 0x80], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x70], xmm1
mov byte [rax], 0
mov qword [rax + 0x18], 0xf
mov qword [rax + 0x10], r14
call fcn.1800c22c0
lea rdx, [rbp + 0x70]
movups xmm0, xmmword [rax]
movups xmm1, xmmword [rax + 0x10]
mov qword [rax + 0x10], r14
movq rcx, xmm0
mov qword [rax + 0x18], 0xf
movups xmmword [rbp + 0x70], xmm0
mov byte [rax], 0
movdqa xmm0, xmm1
movq r8, xmm1
psrldq xmm0, 8
movq rax, xmm0
cmp rax, 0x10
movups xmmword [rbp + 0x80], xmm1
cmovae rdx, rcx
lea rcx, [0x18012ca38]
call fcn.1800c22c0
mov rdx, qword [rbp + 0x88]
cmp rdx, 0x10
jb 0x1800ae901
mov rcx, qword [rbp + 0x70]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800ae8fc
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800af276
call fcn.1800cf9b0
mov rdx, qword [rbp - 0x68]
cmp rdx, 0x10
jb 0x1800ae93c
mov rcx, qword [rbp - 0x80]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800ae937
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800af276
call fcn.1800cf9b0
mov rdx, qword [rsp + 0x78]
mov qword [rbp - 0x70], r14
mov qword [rbp - 0x68], 0xf
mov byte [rbp - 0x80], 0
cmp rdx, 0x10
jb 0x1800ae989
mov rcx, qword [rsp + 0x60]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800ae984
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800af276
call fcn.1800cf9b0
mov rdx, qword [rbp + 0x48]
mov qword [rsp + 0x70], r14
mov qword [rsp + 0x78], 0xf
mov byte [rsp + 0x60], 0
cmp rdx, 0x10
jb 0x1800ae9d7
mov rcx, qword [rbp + 0x30]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800ae9d2
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800af276
call fcn.1800cf9b0
mov rdx, qword [rbp + 0x28]
mov qword [rbp + 0x40], r14
mov qword [rbp + 0x48], 0xf
mov byte [rbp + 0x30], 0
cmp rdx, 0x10
jb 0x1800aea22
mov rcx, qword [rbp + 0x10]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800aea1d
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800af276
call fcn.1800cf9b0
mov rdx, qword [rbp - 8]
mov qword [rbp + 0x20], r14
mov qword [rbp + 0x28], 0xf
mov byte [rbp + 0x10], 0
cmp rdx, 0x10
jb 0x1800aea6d
mov rcx, qword [rbp - 0x20]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800aea68
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800af276
call fcn.1800cf9b0
mov rdx, qword [rbp - 0x48]
mov qword [rbp - 0x10], r14
mov qword [rbp - 8], 0xf
mov byte [rbp - 0x20], 0
cmp rdx, 0x10
jb 0x1800aeab8
mov rcx, qword [rbp - 0x60]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800aeab3
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800af276
call fcn.1800cf9b0
mov rdx, qword [rbp - 0x28]
mov qword [rbp - 0x50], r14
mov qword [rbp - 0x48], 0xf
mov byte [rbp - 0x60], 0
cmp rdx, 0x10
jb 0x1800aeb03
mov rcx, qword [rbp - 0x40]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800aeafe
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800af276
call fcn.1800cf9b0
mov rdx, qword [rbp + 0x68]
mov qword [rbp - 0x30], r14
mov qword [rbp - 0x28], 0xf
mov byte [rbp - 0x40], 0
cmp rdx, 0x10
jb 0x1800aeb4e
mov rcx, qword [rbp + 0x50]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800aeb49
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800af276
call fcn.1800cf9b0
mov rax, qword [rsi + 0x18]
mov r12, qword [rbp + 0x138]
mov r13, qword [rbp + 0x130]
mov rcx, rsi
cmp rax, 0x10
jb 0x1800aeb6c
mov rcx, qword [rsi]
cmp qword [rsi + 0x10], 1
jne 0x1800aeb7c
cmp byte [rcx], 0x31
jne 0x1800aeb7c
mov al, 1
jmp 0x1800aeb7e
xor al, al
test al, al
je 0x1800aefc4
lea rdx, [r13 + 0xb]
mov qword [rbp - 0x30], r14
mov qword [rbp - 0x28], 0xf
mov byte [rbp - 0x40], 0
cmp rdx, 0x10
jb 0x1800aebad
lea rcx, [rbp - 0x40]
call fcn.1800c8f90
mov qword [rbp - 0x30], r14
mov r8d, 0xb
lea rdx, str.sshWinSCP
lea rcx, [rbp - 0x40]
call fcn.1800c22c0
cmp r12, 0x10
lea rdx, [rbp + 0x120]
mov r8, r13
lea rcx, [rbp - 0x40]
cmovae rdx, qword [rbp + 0x120]
call fcn.1800c22c0
mov r8d, 1
lea rdx, [0x180118dc8]
lea rcx, [rbp - 0x40]
call fcn.1800c22c0
cmp qword [rbp + 0x158], 0x10
lea rdx, [rbp + 0x140]
mov r8, qword [rbp + 0x150]
lea rcx, [rbp - 0x20]
cmovae rdx, qword [rbp + 0x140]
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x20], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x10], xmm1
mov qword [rax + 0x10], r14
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
call fcn.1800c22c0
mov r8d, 1
lea rdx, [0x180118dc8]
lea rcx, [rbp - 0x60]
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x60], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x50], xmm1
mov qword [rax + 0x10], r14
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
call fcn.1800c22c0
mov qword [rsp + 0x70], r14
lea rdx, [rbp + 0x188]
mov qword [rsp + 0x78], r14
lea rcx, [rbp + 0xf0]
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x60], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x70], xmm1
mov qword [rax + 0x10], r14
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
call fcn.1800c2490
lea rdx, [rbp + 0x120]
mov rdi, rax
lea rcx, [rbp + 0xd0]
call fcn.1800c2490
lea rdx, [rbp + 0x140]
mov rbx, rax
lea rcx, [rbp + 0xb0]
call fcn.1800c2490
mov rdx, rax
lea rcx, [rbp + 0x50]
mov r9, rdi
mov r8, rbx
call fcn.1800a9d40
mov rcx, qword [rsp + 0x78]
mov rdx, rax
mov r9, qword [rsp + 0x70]
mov r8, qword [rax + 0x10]
mov rax, rcx
sub rax, r9
cmp r8, rax
jbe 0x1800aed2d
mov rax, qword [rdx + 0x18]
sub rax, r8
cmp rax, r9
jb 0x1800aed2d
cmp rcx, 0x10
lea r8, [rsp + 0x60]
mov rcx, rdx
cmovae r8, qword [rsp + 0x60]
call fcn.1800c7240
jmp 0x1800aed41
cmp qword [rdx + 0x18], 0x10
jb 0x1800aed37
mov rdx, qword [rdx]
lea rcx, [rsp + 0x60]
call fcn.1800c22c0
movups xmm0, xmmword [rax]
mov r8d, 3
lea rdx, [0x180118dc4]
lea rcx, [rbp - 0x80]
movups xmmword [rbp - 0x80], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x70], xmm1
mov byte [rax], 0
mov qword [rax + 0x18], 0xf
mov qword [rax + 0x10], r14
call fcn.1800c22c0
lea rdx, [rbp + 0x90]
movups xmm0, xmmword [rax]
movups xmm1, xmmword [rax + 0x10]
mov qword [rax + 0x10], r14
movq rcx, xmm0
mov qword [rax + 0x18], 0xf
movups xmmword [rbp + 0x90], xmm0
mov byte [rax], 0
movdqa xmm0, xmm1
movq r8, xmm1
psrldq xmm0, 8
movq rax, xmm0
cmp rax, 0x10
movups xmmword [rbp + 0xa0], xmm1
cmovae rdx, rcx
lea rcx, [0x18012ca38]
call fcn.1800c22c0
mov rdx, qword [rbp + 0xa8]
cmp rdx, 0x10
jb 0x1800aee0d
mov rcx, qword [rbp + 0x90]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800aee08
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800af27c
call fcn.1800cf9b0
mov rdx, qword [rbp - 0x68]
cmp rdx, 0x10
jb 0x1800aee48
mov rcx, qword [rbp - 0x80]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800aee43
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800af27c
call fcn.1800cf9b0
mov rdx, qword [rsp + 0x78]
mov qword [rbp - 0x70], r14
mov qword [rbp - 0x68], 0xf
mov byte [rbp - 0x80], 0
cmp rdx, 0x10
jb 0x1800aee95
mov rcx, qword [rsp + 0x60]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800aee90
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800af27c
call fcn.1800cf9b0
mov rdx, qword [rbp - 0x48]
mov qword [rsp + 0x70], r14
mov qword [rsp + 0x78], 0xf
mov byte [rsp + 0x60], 0
cmp rdx, 0x10
jb 0x1800aeee3
mov rcx, qword [rbp - 0x60]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800aeede
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800af27c
call fcn.1800cf9b0
mov rdx, qword [rbp - 8]
mov qword [rbp - 0x50], r14
mov qword [rbp - 0x48], 0xf
mov byte [rbp - 0x60], 0
cmp rdx, 0x10
jb 0x1800aef2e
mov rcx, qword [rbp - 0x20]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800aef29
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800af27c
call fcn.1800cf9b0
mov rdx, qword [rbp - 0x28]
mov qword [rbp - 0x10], r14
mov qword [rbp - 8], 0xf
mov byte [rbp - 0x20], 0
cmp rdx, 0x10
jb 0x1800aef79
mov rcx, qword [rbp - 0x40]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800aef74
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800af27c
call fcn.1800cf9b0
mov rdx, qword [rbp + 0x68]
mov qword [rbp - 0x30], r14
mov qword [rbp - 0x28], 0xf
mov byte [rbp - 0x40], 0
cmp rdx, 0x10
jb 0x1800aefc4
mov rcx, qword [rbp + 0x50]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800aefbf
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800af27c
call fcn.1800cf9b0
inc dword [0x18012fb00]
xor r8d, r8d
lea rdx, [0x18010e0f0]
lea rcx, [rbp + 0x120]
call fcn.1800c2b50
xor r8d, r8d
lea rdx, [0x18010e0f0]
lea rcx, [rbp + 0x140]
call fcn.1800c2b50
xor r8d, r8d
lea rdx, [0x18010e0f0]
lea rcx, [rbp + 0x188]
call fcn.1800c2b50
mov rdx, qword [rbp + 0x1e0]
cmp rdx, 8
jb 0x1800af052
mov rcx, qword [rbp + 0x1c8]
lea rdx, [rdx*2 + 2]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800af04d
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800af252
call fcn.1800cf9b0
mov r13, qword [rbp + 0x130]
mov r12, qword [rbp + 0x138]
mov r15, qword [rbp + 0x180]
mov ecx, dword [rbp]
inc ecx
mov dword [rbp], ecx
cmp ecx, dword [rbp + 0x118]
jb 0x1800ae035
mov rbx, qword [rbp + 0x158]
mov rdi, qword [rbp + 0x1a0]
mov rcx, qword [rbp + 0x110]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
cmp rdi, 0x10
jb 0x1800af0d1
mov rcx, qword [rbp + 0x188]
lea rdx, [rdi + 1]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800af0cc
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800af25e
call fcn.1800cf9b0
cmp rbx, 0x10
jb 0x1800af10c
mov rcx, qword [rbp + 0x140]
lea rdx, [rbx + 1]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800af107
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800af25e
call fcn.1800cf9b0
cmp r12, 0x10
jb 0x1800af148
mov rcx, qword [rbp + 0x120]
lea rdx, [r12 + 1]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800af143
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800af25e
call fcn.1800cf9b0
cmp r15, 0x10
jb 0x1800af183
mov rcx, qword [rbp + 0x168]
lea rdx, [r15 + 1]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800af17e
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800af25e
call fcn.1800cf9b0
mov rdx, qword [rbp + 0x1c0]
cmp rdx, 0x10
jb 0x1800af1c4
mov rcx, qword [rbp + 0x1a8]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800af1bf
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800af258
call fcn.1800cf9b0
mov rdx, qword [rsi + 0x18]
mov qword [rbp + 0x1b8], r14
mov qword [rbp + 0x1c0], 0xf
mov byte [rbp + 0x1a8], 0
cmp rdx, 0x10
jb 0x1800af213
mov rcx, qword [rsi]
inc rdx
cmp rdx, 0x1000
jb 0x1800af20e
mov r8, qword [rcx - 8]
add rdx, 0x27
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x1800af258
mov rcx, r8
call fcn.1800cf9b0
mov qword [rsi + 0x10], r14
mov qword [rsi + 0x18], 0xf
mov byte [rsi], 0
mov rcx, qword [rbp + 0x630]
xor rcx, rsp
call fcn.1800cf6f0
lea r11, [rsp + 0x740]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call fcn.1800dec10
int3
call fcn.1800dec10
int3
call fcn.1800dec10
int3
call fcn.1800dec10
int3
call fcn.1800dec10
int3
call fcn.1800dec10
int3
call fcn.1800dec10
int3
call fcn.1800dec10
int3