Function at 0x1800addd0
Capabilities:
Query or enumerate registry key

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x640]
sub rsp, 0x740
mov rax, qword [0x18012a010]
xor rax, rsp
mov qword [rbp + 0x630], rax
xor r14d, r14d
mov qword [rbp + 8], rcx
mov rsi, rcx
mov qword [rbp + 0x1b8], r14
lea rdx, str.SOFTWAREMartin_PrikrylWinSCP_2Sessions
mov qword [rbp + 0x1c0], 0xf
lea rcx, [rbp + 0x1a8]
mov byte [rbp + 0x1a8], r14b
lea r8d, [r14 + 0x29]
call fcn.1800c30f0
cmp qword [rbp + 0x1c0], 0x10
lea rax, [rbp + 0x110]
lea rdx, [rbp + 0x1a8]
mov qword [rsp + 0x20], rax
cmovae rdx, qword [rbp + 0x1a8]
mov r9d, 0x20019
xor r8d, r8d
mov rcx, 0xffffffff80000001
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x1800af0f3
xor edx, edx
lea rcx, [rbp + 0x210]
mov r8d, 0x208
call fcn.1800d33c0
xor edx, edx
lea rcx, [rbp + 0x420]
mov r8d, 0x208
call fcn.1800d33c0
mov rcx, qword [rbp + 0x110]
lea rax, [rbp + 0x1f8]
mov qword [rsp + 0x58], rax
lea r8, [rbp + 0x160]
mov r15d, 0xf
mov dword [rbp + 0x160], 0x104
mov r13d, r14d
mov dword [rbp + 0x118], r14d
lea rax, [rbp + 0x1f4]
mov byte [rbp + 0x168], r14b
mov qword [rsp + 0x50], rax
lea rdx, [rbp + 0x420]
lea rax, [rbp + 0x1f0]
mov qword [rbp + 0x130], r14
mov qword [rsp + 0x48], rax
mov ebx, r15d
lea rax, [rbp + 0x1ec]
mov qword [rbp + 0x138], r15
mov qword [rsp + 0x40], rax
xor r9d, r9d
lea rax, [rbp + 0x1e8]
mov byte [rbp + 0x120], r13b
mov qword [rsp + 0x38], rax
mov r12d, r15d
lea rax, [rbp + 0x204]
mov qword [rbp + 0x150], r14
mov qword [rsp + 0x30], rax
mov edi, ebx
lea rax, [rbp + 0x200]
mov qword [rbp + 0x158], rbx
mov qword [rsp + 0x28], rax
lea rax, [rbp + 0x118]
mov qword [rsp + 0x20], rax
mov byte [rbp + 0x140], r13b
mov qword [rbp + 0x198], r14
mov qword [rbp + 0x1a0], r15
mov byte [rbp + 0x188], r13b
call qword [sym.imp.ADVAPI32.dll_RegQueryInfoKeyW]
mov eax, dword [rbp + 0x118]
test eax, eax
je 0x1800aeff9
mov ecx, r14d
mov dword [rbp], ecx
lea rax, [rbp + 0x1f8]
mov dword [rbp + 0x164], 0x1000
mov qword [rsp + 0x38], rax
lea r9, [rbp + 0x164]
mov qword [rsp + 0x30], r14
lea r8, [rbp + 0x210]
mov edx, ecx
mov qword [rsp + 0x28], r14
mov rcx, qword [rbp + 0x110]
mov qword [rsp + 0x20], r14
call qword [sym.imp.ADVAPI32.dll_RegEnumKeyExW]
test eax, eax
jne 0x1800aefd7
mov qword [rbp + 0x1d8], r14
lea rax, [rbp + 0x210]
mov qword [rbp + 0x1e0], 7
mov r8, 0xffffffffffffffff
mov word [rbp + 0x1c8], r14w
nop word [rax + rax]
inc r8
cmp word [rax + r8*2], 0
jne 0x1800ae020
lea rdx, [rbp + 0x210]
lea rcx, [rbp + 0x1c8]
call fcn.1800c2e10
cmp qword [rbp + 0x1e0], 8
lea rdx, [rbp + 0x1c8]
mov rax, qword [rbp + 0x1d8]
lea rsi, [rbp + 0x1c8]
cmovae rdx, qword [rbp + 0x1c8]
mov rdi, r14
cmovae rsi, qword [rbp + 0x1c8]
mov qword [rsp + 0x70], r14
mov r14d, 0xf
mov qword [rsp + 0x78], r14
lea rbx, [rdx + rax*2]
mov byte [rsp + 0x60], 0
mov rdx, rbx
sub rdx, rsi
sar rdx, 1
cmp rdx, 0x10
jb 0x1800ae0ac
lea rcx, [rsp + 0x60]
call fcn.1800c9530
mov r14, qword [rsp + 0x78]
xor edi, edi
mov qword [rsp + 0x70], rdi
cmp rsi, rbx
je 0x1800ae0fa
movzx r9d, byte [rsi]
cmp rdi, r14
jae 0x1800ae0dd
lea rax, [rdi + 1]
cmp r14, 0x10
mov qword [rsp + 0x70], rax
lea rax, [rsp + 0x60]
cmovae rax, qword [rsp + 0x60]
mov byte [rax + rdi], r9b
mov byte [rax + rdi + 1], 0
jmp 0x1800ae0e7
lea rcx, [rsp + 0x60]
call fcn.1800c4190
mov r14, qword [rsp + 0x78]
add rsi, 2
mov rdi, qword [rsp + 0x70]
cmp rsi, rbx
jne 0x1800ae0b1
cmp r15, 0x10
jb 0x1800ae135
mov rcx, qword [rbp + 0x168]
lea rdx, [r15 + 1]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800ae130
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800af1c2
call fcn.1800cff50
movups xmm0, xmmword [rsp + 0x60]
xor ebx, ebx
lea rdx, str.HostName
movups xmm1, xmmword [rsp + 0x70]
lea rcx, [rbp - 0x60]
mov qword [rbp - 0x50], rbx
movups xmmword [rbp + 0x168], xmm0
lea r8d, [rbx + 8]
mov qword [rbp - 0x48], 0xf
movups xmmword [rbp + 0x178], xmm1
mov byte [rbp - 0x60], bl
call fcn.1800c30f0
lea rdx, [rdi + 0x2a]
mov qword [rbp - 0x70], rbx
mov qword [rbp - 0x68], 0xf
mov byte [rbp - 0x80], bl
cmp rdx, 0x10
jb 0x1800ae198
lea rcx, [rbp - 0x80]
call fcn.1800c9530
mov qword [rbp - 0x70], rbx
mov r8d, 0x2a
lea rdx, str.SOFTWAREMartin_PrikrylWinSCP_2Sessions_
lea rcx, [rbp - 0x80]
call fcn.1800c2860
cmp r14, 0x10
lea rdx, [rbp + 0x168]
mov r8, rdi
lea rcx, [rbp - 0x80]
cmovae rdx, qword [rsp + 0x60]
call fcn.1800c2860
lea r9, [rbp - 0x60]
lea r8, [rbp - 0x80]
lea rcx, [rbp - 0x20]
call fcn.1800adc20
mov rbx, rax
lea rax, [rbp + 0x120]
cmp rax, rbx
je 0x1800ae25e
cmp r12, 0x10
jb 0x1800ae227
mov rcx, qword [rbp + 0x120]
lea rdx, [r12 + 1]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800ae222
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800af1d4
call fcn.1800cff50
movups xmm1, xmmword [rbx + 0x10]
xor r14d, r14d
movups xmm0, xmmword [rbx]
mov qword [rbx + 0x10], r14
movups xmmword [rbp + 0x130], xmm1
mov r12, qword [rbp + 0x138]
mov r13, qword [rbp + 0x130]
movups xmmword [rbp + 0x120], xmm0
mov qword [rbx + 0x18], 0xf
mov byte [rbx], r14b
jmp 0x1800ae261
xor r14d, r14d
mov rdx, qword [rbp - 8]
cmp rdx, 0x10
jb 0x1800ae29c
mov rcx, qword [rbp - 0x20]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800ae297
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800af1d4
call fcn.1800cff50
mov r8d, 8
mov qword [rbp - 0x50], r14
lea rdx, str.UserName
mov qword [rbp - 0x48], 0xf
lea rcx, [rbp - 0x60]
mov byte [rbp - 0x60], 0
call fcn.1800c30f0
mov rbx, qword [rbp + 0x178]
mov qword [rbp - 0x70], r14
mov qword [rbp - 0x68], 0xf
mov byte [rbp - 0x80], 0
lea rdx, [rbx + 0x2a]
cmp rdx, 0x10
jb 0x1800ae2f0
lea rcx, [rbp - 0x80]
call fcn.1800c9530
mov qword [rbp - 0x70], r14
mov r8d, 0x2a
lea rdx, str.SOFTWAREMartin_PrikrylWinSCP_2Sessions_
lea rcx, [rbp - 0x80]
call fcn.1800c2860
cmp qword [rbp + 0x180], 0x10
lea rdx, [rbp + 0x168]
mov r8, rbx
lea rcx, [rbp - 0x80]
cmovae rdx, qword [rbp + 0x168]
call fcn.1800c2860
lea r9, [rbp - 0x60]
lea r8, [rbp - 0x80]
lea rcx, [rbp - 0x20]
call fcn.1800adc20
mov rbx, rax
lea rax, [rbp + 0x140]
cmp rax, rbx
je 0x1800ae3af
mov rax, qword [rbp + 0x158]
cmp rax, 0x10
jb 0x1800ae38b
mov rcx, qword [rbp + 0x140]
lea rdx, [rax + 1]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800ae386
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800af1da
call fcn.1800cff50
movups xmm0, xmmword [rbx]
movups xmm1, xmmword [rbx + 0x10]
mov qword [rbx + 0x10], r14
movups xmmword [rbp + 0x140], xmm0
mov qword [rbx + 0x18], 0xf
movups xmmword [rbp + 0x150], xmm1
mov byte [rbx], 0
mov rdx, qword [rbp - 8]
cmp rdx, 0x10
jb 0x1800ae3ea
mov rcx, qword [rbp - 0x20]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800ae3e5
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800af1da
call fcn.1800cff50
mov r8d, 8
mov qword [rbp - 0x50], r14
lea rdx, str.Password
mov qword [rbp - 0x48], 0xf
lea rcx, [rbp - 0x60]
mov byte [rbp - 0x60], 0
call fcn.1800c30f0
mov rbx, qword [rbp + 0x178]
mov qword [rbp - 0x70], r14
mov qword [rbp - 0x68], 0xf
mov byte [rbp - 0x80], 0
lea rdx, [rbx + 0x2a]
cmp rdx, 0x10
jb 0x1800ae43e
lea rcx, [rbp - 0x80]
call fcn.1800c9530
mov qword [rbp - 0x70], r14
mov r8d, 0x2a
lea rdx, str.SOFTWAREMartin_PrikrylWinSCP_2Sessions_
lea rcx, [rbp - 0x80]
call fcn.1800c2860
cmp qword [rbp + 0x180], 0x10
lea rdx, [rbp + 0x168]
mov r8, rbx
lea rcx, [rbp - 0x80]
cmovae rdx, qword [rbp + 0x168]
call fcn.1800c2860
lea r9, [rbp - 0x60]
lea r8, [rbp - 0x80]
lea rcx, [rbp - 0x20]
call fcn.1800adc20
mov rbx, rax
lea rax, [rbp + 0x188]
cmp rax, rbx
je 0x1800ae4fd
mov rax, qword [rbp + 0x1a0]
cmp rax, 0x10
jb 0x1800ae4d9
mov rcx, qword [rbp + 0x188]
lea rdx, [rax + 1]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800ae4d4
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800af1e0
call fcn.1800cff50
movups xmm0, xmmword [rbx]
movups xmm1, xmmword [rbx + 0x10]
mov qword [rbx + 0x10], r14
movups xmmword [rbp + 0x188], xmm0
mov qword [rbx + 0x18], 0xf
movups xmmword [rbp + 0x198], xmm1
mov byte [rbx], 0
mov rdx, qword [rbp - 8]
cmp rdx, 0x10
jb 0x1800ae538
mov rcx, qword [rbp - 0x20]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800ae533
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800af1e0
call fcn.1800cff50
mov rsi, qword [rbp + 8]
test r13, r13
je 0x1800aef3a
cmp qword [rbp + 0x150], 0
je 0x1800aef3a
cmp qword [rbp + 0x198], 0
je 0x1800aef3a
mov rax, qword [rsi + 0x18]
mov rcx, rsi
cmp rax, 0x10
jb 0x1800ae571
mov rcx, qword [rsi]
cmp qword [rsi + 0x10], 1
jne 0x1800ae581
cmp byte [rcx], 0x30
jne 0x1800ae581
mov cl, 1
jmp 0x1800ae583
xor cl, cl
test cl, cl
je 0x1800aead0
lea rdx, [r13 + 1]
mov qword [rbp - 0x30], r14
mov qword [rbp - 0x28], 0xf
mov byte [rbp - 0x40], 0
cmp rdx, 0x10
jb 0x1800ae5b2
lea rcx, [rbp - 0x40]
call fcn.1800c9530
mov qword [rbp - 0x30], r14
mov r8d, 1
lea rdx, [0x180118d10]
lea rcx, [rbp - 0x40]
call fcn.1800c2860
cmp r12, 0x10
lea rdx, [rbp + 0x120]
mov r8, r13
lea rcx, [rbp - 0x40]
cmovae rdx, qword [rbp + 0x120]
call fcn.1800c2860
mov r8d, 1
lea rdx, [0x180118d0c]
lea rcx, [rbp - 0x40]
call fcn.1800c2860
mov r8d, 1
lea rdx, [0x180118d10]
lea rcx, [rbp - 0x60]
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x60], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x50], xmm1
mov qword [rax + 0x10], r14
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
call fcn.1800c2860
cmp qword [rbp + 0x158], 0x10
lea rdx, [rbp + 0x140]
mov r8, qword [rbp + 0x150]
lea rcx, [rbp - 0x20]
cmovae rdx, qword [rbp + 0x140]
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x20], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x10], xmm1
mov qword [rax + 0x10], r14
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
call fcn.1800c2860
mov r8d, 1
lea rdx, [0x180118d0c]
lea rcx, [rbp + 0x10]
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x10], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x20], xmm1
mov qword [rax + 0x10], r14
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
call fcn.1800c2860
mov r8d, 1
lea rdx, [0x180118d10]
lea rcx, [rbp + 0x30]
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x30], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x40], xmm1
mov qword [rax + 0x10], r14
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
call fcn.1800c2860
mov qword [rsp + 0x70], r14
lea rdx, [rbp + 0x188]
mov qword [rsp + 0x78], r14
lea rcx, [rbp + 0xb0]
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x60], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x70], xmm1
mov qword [rax + 0x10], r14
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
call fcn.1800c2a30
lea rdx, [rbp + 0x120]
mov rdi, rax
lea rcx, [rbp + 0xd0]
call fcn.1800c2a30
lea rdx, [rbp + 0x140]
mov rbx, rax
lea rcx, [rbp + 0xf0]
call fcn.1800c2a30
mov rdx, rax
mov r9, rdi
lea rcx, [rbp + 0x50]
mov r8, rbx
call fcn.1800a9cb0
mov rcx, qword [rsp + 0x78]
mov rdx, rax
mov r9, qword [rsp + 0x70]
mov r8, qword [rax + 0x10]
mov rax, rcx
sub rax, r9
cmp r8, rax
jbe 0x1800ae79a
mov rax, qword [rdx + 0x18]
sub rax, r8
cmp rax, r9
jb 0x1800ae79a
cmp rcx, 0x10
lea r8, [rsp + 0x60]
mov rcx, rdx
cmovae r8, qword [rsp + 0x60]
call fcn.1800c77e0
jmp 0x1800ae7ae
cmp qword [rdx + 0x18], 0x10
jb 0x1800ae7a4
mov rdx, qword [rdx]
lea rcx, [rsp + 0x60]
call fcn.1800c2860
movups xmm0, xmmword [rax]
mov r8d, 2
lea rdx, [0x180118d20]
lea rcx, [rbp - 0x80]
movups xmmword [rbp - 0x80], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x70], xmm1
mov byte [rax], 0
mov qword [rax + 0x18], 0xf
mov qword [rax + 0x10], r14
call fcn.1800c2860
lea rdx, [rbp + 0x70]
movups xmm0, xmmword [rax]
movups xmm1, xmmword [rax + 0x10]
mov qword [rax + 0x10], r14
movq rcx, xmm0
mov qword [rax + 0x18], 0xf
movups xmmword [rbp + 0x70], xmm0
mov byte [rax], 0
movdqa xmm0, xmm1
movq r8, xmm1
psrldq xmm0, 8
movq rax, xmm0
cmp rax, 0x10
movups xmmword [rbp + 0x80], xmm1
cmovae rdx, rcx
lea rcx, [0x18012ca38]
call fcn.1800c2860
mov rdx, qword [rbp + 0x88]
cmp rdx, 0x10
jb 0x1800ae871
mov rcx, qword [rbp + 0x70]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800ae86c
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800af1e6
call fcn.1800cff50
mov rdx, qword [rbp - 0x68]
cmp rdx, 0x10
jb 0x1800ae8ac
mov rcx, qword [rbp - 0x80]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800ae8a7
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800af1e6
call fcn.1800cff50
mov rdx, qword [rsp + 0x78]
mov qword [rbp - 0x70], r14
mov qword [rbp - 0x68], 0xf
mov byte [rbp - 0x80], 0
cmp rdx, 0x10
jb 0x1800ae8f9
mov rcx, qword [rsp + 0x60]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800ae8f4
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800af1e6
call fcn.1800cff50
mov rdx, qword [rbp + 0x48]
mov qword [rsp + 0x70], r14
mov qword [rsp + 0x78], 0xf
mov byte [rsp + 0x60], 0
cmp rdx, 0x10
jb 0x1800ae947
mov rcx, qword [rbp + 0x30]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800ae942
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800af1e6
call fcn.1800cff50
mov rdx, qword [rbp + 0x28]
mov qword [rbp + 0x40], r14
mov qword [rbp + 0x48], 0xf
mov byte [rbp + 0x30], 0
cmp rdx, 0x10
jb 0x1800ae992
mov rcx, qword [rbp + 0x10]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800ae98d
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800af1e6
call fcn.1800cff50
mov rdx, qword [rbp - 8]
mov qword [rbp + 0x20], r14
mov qword [rbp + 0x28], 0xf
mov byte [rbp + 0x10], 0
cmp rdx, 0x10
jb 0x1800ae9dd
mov rcx, qword [rbp - 0x20]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800ae9d8
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800af1e6
call fcn.1800cff50
mov rdx, qword [rbp - 0x48]
mov qword [rbp - 0x10], r14
mov qword [rbp - 8], 0xf
mov byte [rbp - 0x20], 0
cmp rdx, 0x10
jb 0x1800aea28
mov rcx, qword [rbp - 0x60]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800aea23
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800af1e6
call fcn.1800cff50
mov rdx, qword [rbp - 0x28]
mov qword [rbp - 0x50], r14
mov qword [rbp - 0x48], 0xf
mov byte [rbp - 0x60], 0
cmp rdx, 0x10
jb 0x1800aea73
mov rcx, qword [rbp - 0x40]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800aea6e
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800af1e6
call fcn.1800cff50
mov rdx, qword [rbp + 0x68]
mov qword [rbp - 0x30], r14
mov qword [rbp - 0x28], 0xf
mov byte [rbp - 0x40], 0
cmp rdx, 0x10
jb 0x1800aeabe
mov rcx, qword [rbp + 0x50]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800aeab9
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800af1e6
call fcn.1800cff50
mov rax, qword [rsi + 0x18]
mov r12, qword [rbp + 0x138]
mov r13, qword [rbp + 0x130]
mov rcx, rsi
cmp rax, 0x10
jb 0x1800aeadc
mov rcx, qword [rsi]
cmp qword [rsi + 0x10], 1
jne 0x1800aeaec
cmp byte [rcx], 0x31
jne 0x1800aeaec
mov al, 1
jmp 0x1800aeaee
xor al, al
test al, al
je 0x1800aef34
lea rdx, [r13 + 0xb]
mov qword [rbp - 0x30], r14
mov qword [rbp - 0x28], 0xf
mov byte [rbp - 0x40], 0
cmp rdx, 0x10
jb 0x1800aeb1d
lea rcx, [rbp - 0x40]
call fcn.1800c9530
mov qword [rbp - 0x30], r14
mov r8d, 0xb
lea rdx, str.sshWinSCP
lea rcx, [rbp - 0x40]
call fcn.1800c2860
cmp r12, 0x10
lea rdx, [rbp + 0x120]
mov r8, r13
lea rcx, [rbp - 0x40]
cmovae rdx, qword [rbp + 0x120]
call fcn.1800c2860
mov r8d, 1
lea rdx, [0x180118d18]
lea rcx, [rbp - 0x40]
call fcn.1800c2860
cmp qword [rbp + 0x158], 0x10
lea rdx, [rbp + 0x140]
mov r8, qword [rbp + 0x150]
lea rcx, [rbp - 0x20]
cmovae rdx, qword [rbp + 0x140]
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x20], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x10], xmm1
mov qword [rax + 0x10], r14
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
call fcn.1800c2860
mov r8d, 1
lea rdx, [0x180118d18]
lea rcx, [rbp - 0x60]
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x60], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x50], xmm1
mov qword [rax + 0x10], r14
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
call fcn.1800c2860
mov qword [rsp + 0x70], r14
lea rdx, [rbp + 0x188]
mov qword [rsp + 0x78], r14
lea rcx, [rbp + 0xf0]
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x60], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x70], xmm1
mov qword [rax + 0x10], r14
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
call fcn.1800c2a30
lea rdx, [rbp + 0x120]
mov rdi, rax
lea rcx, [rbp + 0xd0]
call fcn.1800c2a30
lea rdx, [rbp + 0x140]
mov rbx, rax
lea rcx, [rbp + 0xb0]
call fcn.1800c2a30
mov rdx, rax
lea rcx, [rbp + 0x50]
mov r9, rdi
mov r8, rbx
call fcn.1800a9cb0
mov rcx, qword [rsp + 0x78]
mov rdx, rax
mov r9, qword [rsp + 0x70]
mov r8, qword [rax + 0x10]
mov rax, rcx
sub rax, r9
cmp r8, rax
jbe 0x1800aec9d
mov rax, qword [rdx + 0x18]
sub rax, r8
cmp rax, r9
jb 0x1800aec9d
cmp rcx, 0x10
lea r8, [rsp + 0x60]
mov rcx, rdx
cmovae r8, qword [rsp + 0x60]
call fcn.1800c77e0
jmp 0x1800aecb1
cmp qword [rdx + 0x18], 0x10
jb 0x1800aeca7
mov rdx, qword [rdx]
lea rcx, [rsp + 0x60]
call fcn.1800c2860
movups xmm0, xmmword [rax]
mov r8d, 3
lea rdx, [0x180118d14]
lea rcx, [rbp - 0x80]
movups xmmword [rbp - 0x80], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x70], xmm1
mov byte [rax], 0
mov qword [rax + 0x18], 0xf
mov qword [rax + 0x10], r14
call fcn.1800c2860
lea rdx, [rbp + 0x90]
movups xmm0, xmmword [rax]
movups xmm1, xmmword [rax + 0x10]
mov qword [rax + 0x10], r14
movq rcx, xmm0
mov qword [rax + 0x18], 0xf
movups xmmword [rbp + 0x90], xmm0
mov byte [rax], 0
movdqa xmm0, xmm1
movq r8, xmm1
psrldq xmm0, 8
movq rax, xmm0
cmp rax, 0x10
movups xmmword [rbp + 0xa0], xmm1
cmovae rdx, rcx
lea rcx, [0x18012ca38]
call fcn.1800c2860
mov rdx, qword [rbp + 0xa8]
cmp rdx, 0x10
jb 0x1800aed7d
mov rcx, qword [rbp + 0x90]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800aed78
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800af1ec
call fcn.1800cff50
mov rdx, qword [rbp - 0x68]
cmp rdx, 0x10
jb 0x1800aedb8
mov rcx, qword [rbp - 0x80]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800aedb3
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800af1ec
call fcn.1800cff50
mov rdx, qword [rsp + 0x78]
mov qword [rbp - 0x70], r14
mov qword [rbp - 0x68], 0xf
mov byte [rbp - 0x80], 0
cmp rdx, 0x10
jb 0x1800aee05
mov rcx, qword [rsp + 0x60]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800aee00
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800af1ec
call fcn.1800cff50
mov rdx, qword [rbp - 0x48]
mov qword [rsp + 0x70], r14
mov qword [rsp + 0x78], 0xf
mov byte [rsp + 0x60], 0
cmp rdx, 0x10
jb 0x1800aee53
mov rcx, qword [rbp - 0x60]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800aee4e
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800af1ec
call fcn.1800cff50
mov rdx, qword [rbp - 8]
mov qword [rbp - 0x50], r14
mov qword [rbp - 0x48], 0xf
mov byte [rbp - 0x60], 0
cmp rdx, 0x10
jb 0x1800aee9e
mov rcx, qword [rbp - 0x20]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800aee99
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800af1ec
call fcn.1800cff50
mov rdx, qword [rbp - 0x28]
mov qword [rbp - 0x10], r14
mov qword [rbp - 8], 0xf
mov byte [rbp - 0x20], 0
cmp rdx, 0x10
jb 0x1800aeee9
mov rcx, qword [rbp - 0x40]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800aeee4
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800af1ec
call fcn.1800cff50
mov rdx, qword [rbp + 0x68]
mov qword [rbp - 0x30], r14
mov qword [rbp - 0x28], 0xf
mov byte [rbp - 0x40], 0
cmp rdx, 0x10
jb 0x1800aef34
mov rcx, qword [rbp + 0x50]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800aef2f
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800af1ec
call fcn.1800cff50
inc dword [0x18012faa0]
xor r8d, r8d
lea rdx, [0x18010e0e0]
lea rcx, [rbp + 0x120]
call fcn.1800c30f0
xor r8d, r8d
lea rdx, [0x18010e0e0]
lea rcx, [rbp + 0x140]
call fcn.1800c30f0
xor r8d, r8d
lea rdx, [0x18010e0e0]
lea rcx, [rbp + 0x188]
call fcn.1800c30f0
mov rdx, qword [rbp + 0x1e0]
cmp rdx, 8
jb 0x1800aefc2
mov rcx, qword [rbp + 0x1c8]
lea rdx, [rdx*2 + 2]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800aefbd
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800af1c2
call fcn.1800cff50
mov r13, qword [rbp + 0x130]
mov r12, qword [rbp + 0x138]
mov r15, qword [rbp + 0x180]
mov ecx, dword [rbp]
inc ecx
mov dword [rbp], ecx
cmp ecx, dword [rbp + 0x118]
jb 0x1800adfa5
mov rbx, qword [rbp + 0x158]
mov rdi, qword [rbp + 0x1a0]
mov rcx, qword [rbp + 0x110]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
cmp rdi, 0x10
jb 0x1800af041
mov rcx, qword [rbp + 0x188]
lea rdx, [rdi + 1]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800af03c
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800af1ce
call fcn.1800cff50
cmp rbx, 0x10
jb 0x1800af07c
mov rcx, qword [rbp + 0x140]
lea rdx, [rbx + 1]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800af077
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800af1ce
call fcn.1800cff50
cmp r12, 0x10
jb 0x1800af0b8
mov rcx, qword [rbp + 0x120]
lea rdx, [r12 + 1]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800af0b3
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800af1ce
call fcn.1800cff50
cmp r15, 0x10
jb 0x1800af0f3
mov rcx, qword [rbp + 0x168]
lea rdx, [r15 + 1]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800af0ee
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800af1ce
call fcn.1800cff50
mov rdx, qword [rbp + 0x1c0]
cmp rdx, 0x10
jb 0x1800af134
mov rcx, qword [rbp + 0x1a8]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800af12f
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800af1c8
call fcn.1800cff50
mov rdx, qword [rsi + 0x18]
mov qword [rbp + 0x1b8], r14
mov qword [rbp + 0x1c0], 0xf
mov byte [rbp + 0x1a8], 0
cmp rdx, 0x10
jb 0x1800af183
mov rcx, qword [rsi]
inc rdx
cmp rdx, 0x1000
jb 0x1800af17e
mov r8, qword [rcx - 8]
add rdx, 0x27
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x1800af1c8
mov rcx, r8
call fcn.1800cff50
mov qword [rsi + 0x10], r14
mov qword [rsi + 0x18], 0xf
mov byte [rsi], 0
mov rcx, qword [rbp + 0x630]
xor rcx, rsp
call fcn.1800cfc90
lea r11, [rsp + 0x740]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call fcn.1800df1b0
int3
call fcn.1800df1b0
int3
call fcn.1800df1b0
int3
call fcn.1800df1b0
int3
call fcn.1800df1b0
int3
call fcn.1800df1b0
int3
call fcn.1800df1b0
int3
call fcn.1800df1b0
int3