Function at 0x1800adbc0
Capabilities:
Query or enumerate registry key

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x640]
sub rsp, 0x740
mov rax, qword [0x18012a010]
xor rax, rsp
mov qword [rbp + 0x630], rax
xor r14d, r14d
mov qword [rbp + 8], rcx
mov rsi, rcx
mov qword [rbp + 0x1b8], r14
lea rdx, str.SOFTWAREMartin_PrikrylWinSCP_2Sessions
mov qword [rbp + 0x1c0], 0xf
lea rcx, [rbp + 0x1a8]
mov byte [rbp + 0x1a8], r14b
lea r8d, [r14 + 0x29]
call fcn.1800c2ee0
cmp qword [rbp + 0x1c0], 0x10
lea rax, [rbp + 0x110]
lea rdx, [rbp + 0x1a8]
mov qword [rsp + 0x20], rax
cmovae rdx, qword [rbp + 0x1a8]
mov r9d, 0x20019
xor r8d, r8d
mov rcx, 0xffffffff80000001
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x1800aeee3
xor edx, edx
lea rcx, [rbp + 0x210]
mov r8d, 0x208
call fcn.1800d31b0
xor edx, edx
lea rcx, [rbp + 0x420]
mov r8d, 0x208
call fcn.1800d31b0
mov rcx, qword [rbp + 0x110]
lea rax, [rbp + 0x1f8]
mov qword [rsp + 0x58], rax
lea r8, [rbp + 0x160]
mov r15d, 0xf
mov dword [rbp + 0x160], 0x104
mov r13d, r14d
mov dword [rbp + 0x118], r14d
lea rax, [rbp + 0x1f4]
mov byte [rbp + 0x168], r14b
mov qword [rsp + 0x50], rax
lea rdx, [rbp + 0x420]
lea rax, [rbp + 0x1f0]
mov qword [rbp + 0x130], r14
mov qword [rsp + 0x48], rax
mov ebx, r15d
lea rax, [rbp + 0x1ec]
mov qword [rbp + 0x138], r15
mov qword [rsp + 0x40], rax
xor r9d, r9d
lea rax, [rbp + 0x1e8]
mov byte [rbp + 0x120], r13b
mov qword [rsp + 0x38], rax
mov r12d, r15d
lea rax, [rbp + 0x204]
mov qword [rbp + 0x150], r14
mov qword [rsp + 0x30], rax
mov edi, ebx
lea rax, [rbp + 0x200]
mov qword [rbp + 0x158], rbx
mov qword [rsp + 0x28], rax
lea rax, [rbp + 0x118]
mov qword [rsp + 0x20], rax
mov byte [rbp + 0x140], r13b
mov qword [rbp + 0x198], r14
mov qword [rbp + 0x1a0], r15
mov byte [rbp + 0x188], r13b
call qword [sym.imp.ADVAPI32.dll_RegQueryInfoKeyW]
mov eax, dword [rbp + 0x118]
test eax, eax
je 0x1800aede9
mov ecx, r14d
mov dword [rbp], ecx
lea rax, [rbp + 0x1f8]
mov dword [rbp + 0x164], 0x1000
mov qword [rsp + 0x38], rax
lea r9, [rbp + 0x164]
mov qword [rsp + 0x30], r14
lea r8, [rbp + 0x210]
mov edx, ecx
mov qword [rsp + 0x28], r14
mov rcx, qword [rbp + 0x110]
mov qword [rsp + 0x20], r14
call qword [sym.imp.ADVAPI32.dll_RegEnumKeyExW]
test eax, eax
jne 0x1800aedc7
mov qword [rbp + 0x1d8], r14
lea rax, [rbp + 0x210]
mov qword [rbp + 0x1e0], 7
mov r8, 0xffffffffffffffff
mov word [rbp + 0x1c8], r14w
nop word [rax + rax]
inc r8
cmp word [rax + r8*2], 0
jne 0x1800ade10
lea rdx, [rbp + 0x210]
lea rcx, [rbp + 0x1c8]
call fcn.1800c2c00
cmp qword [rbp + 0x1e0], 8
lea rdx, [rbp + 0x1c8]
mov rax, qword [rbp + 0x1d8]
lea rsi, [rbp + 0x1c8]
cmovae rdx, qword [rbp + 0x1c8]
mov rdi, r14
cmovae rsi, qword [rbp + 0x1c8]
mov qword [rsp + 0x70], r14
mov r14d, 0xf
mov qword [rsp + 0x78], r14
lea rbx, [rdx + rax*2]
mov byte [rsp + 0x60], 0
mov rdx, rbx
sub rdx, rsi
sar rdx, 1
cmp rdx, 0x10
jb 0x1800ade9c
lea rcx, [rsp + 0x60]
call fcn.1800c9320
mov r14, qword [rsp + 0x78]
xor edi, edi
mov qword [rsp + 0x70], rdi
cmp rsi, rbx
je 0x1800adeea
movzx r9d, byte [rsi]
cmp rdi, r14
jae 0x1800adecd
lea rax, [rdi + 1]
cmp r14, 0x10
mov qword [rsp + 0x70], rax
lea rax, [rsp + 0x60]
cmovae rax, qword [rsp + 0x60]
mov byte [rax + rdi], r9b
mov byte [rax + rdi + 1], 0
jmp 0x1800aded7
lea rcx, [rsp + 0x60]
call fcn.1800c3f80
mov r14, qword [rsp + 0x78]
add rsi, 2
mov rdi, qword [rsp + 0x70]
cmp rsi, rbx
jne 0x1800adea1
cmp r15, 0x10
jb 0x1800adf25
mov rcx, qword [rbp + 0x168]
lea rdx, [r15 + 1]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800adf20
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800aefb2
call fcn.1800cfd40
movups xmm0, xmmword [rsp + 0x60]
xor ebx, ebx
lea rdx, str.HostName
movups xmm1, xmmword [rsp + 0x70]
lea rcx, [rbp - 0x60]
mov qword [rbp - 0x50], rbx
movups xmmword [rbp + 0x168], xmm0
lea r8d, [rbx + 8]
mov qword [rbp - 0x48], 0xf
movups xmmword [rbp + 0x178], xmm1
mov byte [rbp - 0x60], bl
call fcn.1800c2ee0
lea rdx, [rdi + 0x2a]
mov qword [rbp - 0x70], rbx
mov qword [rbp - 0x68], 0xf
mov byte [rbp - 0x80], bl
cmp rdx, 0x10
jb 0x1800adf88
lea rcx, [rbp - 0x80]
call fcn.1800c9320
mov qword [rbp - 0x70], rbx
mov r8d, 0x2a
lea rdx, str.SOFTWAREMartin_PrikrylWinSCP_2Sessions_
lea rcx, [rbp - 0x80]
call fcn.1800c2650
cmp r14, 0x10
lea rdx, [rbp + 0x168]
mov r8, rdi
lea rcx, [rbp - 0x80]
cmovae rdx, qword [rsp + 0x60]
call fcn.1800c2650
lea r9, [rbp - 0x60]
lea r8, [rbp - 0x80]
lea rcx, [rbp - 0x20]
call fcn.1800ada10
mov rbx, rax
lea rax, [rbp + 0x120]
cmp rax, rbx
je 0x1800ae04e
cmp r12, 0x10
jb 0x1800ae017
mov rcx, qword [rbp + 0x120]
lea rdx, [r12 + 1]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800ae012
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800aefc4
call fcn.1800cfd40
movups xmm1, xmmword [rbx + 0x10]
xor r14d, r14d
movups xmm0, xmmword [rbx]
mov qword [rbx + 0x10], r14
movups xmmword [rbp + 0x130], xmm1
mov r12, qword [rbp + 0x138]
mov r13, qword [rbp + 0x130]
movups xmmword [rbp + 0x120], xmm0
mov qword [rbx + 0x18], 0xf
mov byte [rbx], r14b
jmp 0x1800ae051
xor r14d, r14d
mov rdx, qword [rbp - 8]
cmp rdx, 0x10
jb 0x1800ae08c
mov rcx, qword [rbp - 0x20]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800ae087
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800aefc4
call fcn.1800cfd40
mov r8d, 8
mov qword [rbp - 0x50], r14
lea rdx, str.UserName
mov qword [rbp - 0x48], 0xf
lea rcx, [rbp - 0x60]
mov byte [rbp - 0x60], 0
call fcn.1800c2ee0
mov rbx, qword [rbp + 0x178]
mov qword [rbp - 0x70], r14
mov qword [rbp - 0x68], 0xf
mov byte [rbp - 0x80], 0
lea rdx, [rbx + 0x2a]
cmp rdx, 0x10
jb 0x1800ae0e0
lea rcx, [rbp - 0x80]
call fcn.1800c9320
mov qword [rbp - 0x70], r14
mov r8d, 0x2a
lea rdx, str.SOFTWAREMartin_PrikrylWinSCP_2Sessions_
lea rcx, [rbp - 0x80]
call fcn.1800c2650
cmp qword [rbp + 0x180], 0x10
lea rdx, [rbp + 0x168]
mov r8, rbx
lea rcx, [rbp - 0x80]
cmovae rdx, qword [rbp + 0x168]
call fcn.1800c2650
lea r9, [rbp - 0x60]
lea r8, [rbp - 0x80]
lea rcx, [rbp - 0x20]
call fcn.1800ada10
mov rbx, rax
lea rax, [rbp + 0x140]
cmp rax, rbx
je 0x1800ae19f
mov rax, qword [rbp + 0x158]
cmp rax, 0x10
jb 0x1800ae17b
mov rcx, qword [rbp + 0x140]
lea rdx, [rax + 1]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800ae176
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800aefca
call fcn.1800cfd40
movups xmm0, xmmword [rbx]
movups xmm1, xmmword [rbx + 0x10]
mov qword [rbx + 0x10], r14
movups xmmword [rbp + 0x140], xmm0
mov qword [rbx + 0x18], 0xf
movups xmmword [rbp + 0x150], xmm1
mov byte [rbx], 0
mov rdx, qword [rbp - 8]
cmp rdx, 0x10
jb 0x1800ae1da
mov rcx, qword [rbp - 0x20]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800ae1d5
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800aefca
call fcn.1800cfd40
mov r8d, 8
mov qword [rbp - 0x50], r14
lea rdx, str.Password
mov qword [rbp - 0x48], 0xf
lea rcx, [rbp - 0x60]
mov byte [rbp - 0x60], 0
call fcn.1800c2ee0
mov rbx, qword [rbp + 0x178]
mov qword [rbp - 0x70], r14
mov qword [rbp - 0x68], 0xf
mov byte [rbp - 0x80], 0
lea rdx, [rbx + 0x2a]
cmp rdx, 0x10
jb 0x1800ae22e
lea rcx, [rbp - 0x80]
call fcn.1800c9320
mov qword [rbp - 0x70], r14
mov r8d, 0x2a
lea rdx, str.SOFTWAREMartin_PrikrylWinSCP_2Sessions_
lea rcx, [rbp - 0x80]
call fcn.1800c2650
cmp qword [rbp + 0x180], 0x10
lea rdx, [rbp + 0x168]
mov r8, rbx
lea rcx, [rbp - 0x80]
cmovae rdx, qword [rbp + 0x168]
call fcn.1800c2650
lea r9, [rbp - 0x60]
lea r8, [rbp - 0x80]
lea rcx, [rbp - 0x20]
call fcn.1800ada10
mov rbx, rax
lea rax, [rbp + 0x188]
cmp rax, rbx
je 0x1800ae2ed
mov rax, qword [rbp + 0x1a0]
cmp rax, 0x10
jb 0x1800ae2c9
mov rcx, qword [rbp + 0x188]
lea rdx, [rax + 1]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800ae2c4
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800aefd0
call fcn.1800cfd40
movups xmm0, xmmword [rbx]
movups xmm1, xmmword [rbx + 0x10]
mov qword [rbx + 0x10], r14
movups xmmword [rbp + 0x188], xmm0
mov qword [rbx + 0x18], 0xf
movups xmmword [rbp + 0x198], xmm1
mov byte [rbx], 0
mov rdx, qword [rbp - 8]
cmp rdx, 0x10
jb 0x1800ae328
mov rcx, qword [rbp - 0x20]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800ae323
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800aefd0
call fcn.1800cfd40
mov rsi, qword [rbp + 8]
test r13, r13
je 0x1800aed2a
cmp qword [rbp + 0x150], 0
je 0x1800aed2a
cmp qword [rbp + 0x198], 0
je 0x1800aed2a
mov rax, qword [rsi + 0x18]
mov rcx, rsi
cmp rax, 0x10
jb 0x1800ae361
mov rcx, qword [rsi]
cmp qword [rsi + 0x10], 1
jne 0x1800ae371
cmp byte [rcx], 0x30
jne 0x1800ae371
mov cl, 1
jmp 0x1800ae373
xor cl, cl
test cl, cl
je 0x1800ae8c0
lea rdx, [r13 + 1]
mov qword [rbp - 0x30], r14
mov qword [rbp - 0x28], 0xf
mov byte [rbp - 0x40], 0
cmp rdx, 0x10
jb 0x1800ae3a2
lea rcx, [rbp - 0x40]
call fcn.1800c9320
mov qword [rbp - 0x30], r14
mov r8d, 1
lea rdx, [0x180118c90]
lea rcx, [rbp - 0x40]
call fcn.1800c2650
cmp r12, 0x10
lea rdx, [rbp + 0x120]
mov r8, r13
lea rcx, [rbp - 0x40]
cmovae rdx, qword [rbp + 0x120]
call fcn.1800c2650
mov r8d, 1
lea rdx, [0x180118c8c]
lea rcx, [rbp - 0x40]
call fcn.1800c2650
mov r8d, 1
lea rdx, [0x180118c90]
lea rcx, [rbp - 0x60]
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x60], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x50], xmm1
mov qword [rax + 0x10], r14
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
call fcn.1800c2650
cmp qword [rbp + 0x158], 0x10
lea rdx, [rbp + 0x140]
mov r8, qword [rbp + 0x150]
lea rcx, [rbp - 0x20]
cmovae rdx, qword [rbp + 0x140]
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x20], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x10], xmm1
mov qword [rax + 0x10], r14
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
call fcn.1800c2650
mov r8d, 1
lea rdx, [0x180118c8c]
lea rcx, [rbp + 0x10]
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x10], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x20], xmm1
mov qword [rax + 0x10], r14
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
call fcn.1800c2650
mov r8d, 1
lea rdx, [0x180118c90]
lea rcx, [rbp + 0x30]
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x30], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x40], xmm1
mov qword [rax + 0x10], r14
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
call fcn.1800c2650
mov qword [rsp + 0x70], r14
lea rdx, [rbp + 0x188]
mov qword [rsp + 0x78], r14
lea rcx, [rbp + 0xb0]
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x60], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x70], xmm1
mov qword [rax + 0x10], r14
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
call fcn.1800c2820
lea rdx, [rbp + 0x120]
mov rdi, rax
lea rcx, [rbp + 0xd0]
call fcn.1800c2820
lea rdx, [rbp + 0x140]
mov rbx, rax
lea rcx, [rbp + 0xf0]
call fcn.1800c2820
mov rdx, rax
mov r9, rdi
lea rcx, [rbp + 0x50]
mov r8, rbx
call fcn.1800a9aa0
mov rcx, qword [rsp + 0x78]
mov rdx, rax
mov r9, qword [rsp + 0x70]
mov r8, qword [rax + 0x10]
mov rax, rcx
sub rax, r9
cmp r8, rax
jbe 0x1800ae58a
mov rax, qword [rdx + 0x18]
sub rax, r8
cmp rax, r9
jb 0x1800ae58a
cmp rcx, 0x10
lea r8, [rsp + 0x60]
mov rcx, rdx
cmovae r8, qword [rsp + 0x60]
call fcn.1800c75d0
jmp 0x1800ae59e
cmp qword [rdx + 0x18], 0x10
jb 0x1800ae594
mov rdx, qword [rdx]
lea rcx, [rsp + 0x60]
call fcn.1800c2650
movups xmm0, xmmword [rax]
mov r8d, 2
lea rdx, [0x180118ca0]
lea rcx, [rbp - 0x80]
movups xmmword [rbp - 0x80], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x70], xmm1
mov byte [rax], 0
mov qword [rax + 0x18], 0xf
mov qword [rax + 0x10], r14
call fcn.1800c2650
lea rdx, [rbp + 0x70]
movups xmm0, xmmword [rax]
movups xmm1, xmmword [rax + 0x10]
mov qword [rax + 0x10], r14
movq rcx, xmm0
mov qword [rax + 0x18], 0xf
movups xmmword [rbp + 0x70], xmm0
mov byte [rax], 0
movdqa xmm0, xmm1
movq r8, xmm1
psrldq xmm0, 8
movq rax, xmm0
cmp rax, 0x10
movups xmmword [rbp + 0x80], xmm1
cmovae rdx, rcx
lea rcx, [0x18012ca38]
call fcn.1800c2650
mov rdx, qword [rbp + 0x88]
cmp rdx, 0x10
jb 0x1800ae661
mov rcx, qword [rbp + 0x70]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800ae65c
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800aefd6
call fcn.1800cfd40
mov rdx, qword [rbp - 0x68]
cmp rdx, 0x10
jb 0x1800ae69c
mov rcx, qword [rbp - 0x80]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800ae697
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800aefd6
call fcn.1800cfd40
mov rdx, qword [rsp + 0x78]
mov qword [rbp - 0x70], r14
mov qword [rbp - 0x68], 0xf
mov byte [rbp - 0x80], 0
cmp rdx, 0x10
jb 0x1800ae6e9
mov rcx, qword [rsp + 0x60]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800ae6e4
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800aefd6
call fcn.1800cfd40
mov rdx, qword [rbp + 0x48]
mov qword [rsp + 0x70], r14
mov qword [rsp + 0x78], 0xf
mov byte [rsp + 0x60], 0
cmp rdx, 0x10
jb 0x1800ae737
mov rcx, qword [rbp + 0x30]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800ae732
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800aefd6
call fcn.1800cfd40
mov rdx, qword [rbp + 0x28]
mov qword [rbp + 0x40], r14
mov qword [rbp + 0x48], 0xf
mov byte [rbp + 0x30], 0
cmp rdx, 0x10
jb 0x1800ae782
mov rcx, qword [rbp + 0x10]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800ae77d
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800aefd6
call fcn.1800cfd40
mov rdx, qword [rbp - 8]
mov qword [rbp + 0x20], r14
mov qword [rbp + 0x28], 0xf
mov byte [rbp + 0x10], 0
cmp rdx, 0x10
jb 0x1800ae7cd
mov rcx, qword [rbp - 0x20]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800ae7c8
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800aefd6
call fcn.1800cfd40
mov rdx, qword [rbp - 0x48]
mov qword [rbp - 0x10], r14
mov qword [rbp - 8], 0xf
mov byte [rbp - 0x20], 0
cmp rdx, 0x10
jb 0x1800ae818
mov rcx, qword [rbp - 0x60]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800ae813
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800aefd6
call fcn.1800cfd40
mov rdx, qword [rbp - 0x28]
mov qword [rbp - 0x50], r14
mov qword [rbp - 0x48], 0xf
mov byte [rbp - 0x60], 0
cmp rdx, 0x10
jb 0x1800ae863
mov rcx, qword [rbp - 0x40]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800ae85e
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800aefd6
call fcn.1800cfd40
mov rdx, qword [rbp + 0x68]
mov qword [rbp - 0x30], r14
mov qword [rbp - 0x28], 0xf
mov byte [rbp - 0x40], 0
cmp rdx, 0x10
jb 0x1800ae8ae
mov rcx, qword [rbp + 0x50]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800ae8a9
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800aefd6
call fcn.1800cfd40
mov rax, qword [rsi + 0x18]
mov r12, qword [rbp + 0x138]
mov r13, qword [rbp + 0x130]
mov rcx, rsi
cmp rax, 0x10
jb 0x1800ae8cc
mov rcx, qword [rsi]
cmp qword [rsi + 0x10], 1
jne 0x1800ae8dc
cmp byte [rcx], 0x31
jne 0x1800ae8dc
mov al, 1
jmp 0x1800ae8de
xor al, al
test al, al
je 0x1800aed24
lea rdx, [r13 + 0xb]
mov qword [rbp - 0x30], r14
mov qword [rbp - 0x28], 0xf
mov byte [rbp - 0x40], 0
cmp rdx, 0x10
jb 0x1800ae90d
lea rcx, [rbp - 0x40]
call fcn.1800c9320
mov qword [rbp - 0x30], r14
mov r8d, 0xb
lea rdx, str.sshWinSCP
lea rcx, [rbp - 0x40]
call fcn.1800c2650
cmp r12, 0x10
lea rdx, [rbp + 0x120]
mov r8, r13
lea rcx, [rbp - 0x40]
cmovae rdx, qword [rbp + 0x120]
call fcn.1800c2650
mov r8d, 1
lea rdx, [0x180118c98]
lea rcx, [rbp - 0x40]
call fcn.1800c2650
cmp qword [rbp + 0x158], 0x10
lea rdx, [rbp + 0x140]
mov r8, qword [rbp + 0x150]
lea rcx, [rbp - 0x20]
cmovae rdx, qword [rbp + 0x140]
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x20], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x10], xmm1
mov qword [rax + 0x10], r14
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
call fcn.1800c2650
mov r8d, 1
lea rdx, [0x180118c98]
lea rcx, [rbp - 0x60]
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x60], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x50], xmm1
mov qword [rax + 0x10], r14
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
call fcn.1800c2650
mov qword [rsp + 0x70], r14
lea rdx, [rbp + 0x188]
mov qword [rsp + 0x78], r14
lea rcx, [rbp + 0xf0]
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x60], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x70], xmm1
mov qword [rax + 0x10], r14
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
call fcn.1800c2820
lea rdx, [rbp + 0x120]
mov rdi, rax
lea rcx, [rbp + 0xd0]
call fcn.1800c2820
lea rdx, [rbp + 0x140]
mov rbx, rax
lea rcx, [rbp + 0xb0]
call fcn.1800c2820
mov rdx, rax
lea rcx, [rbp + 0x50]
mov r9, rdi
mov r8, rbx
call fcn.1800a9aa0
mov rcx, qword [rsp + 0x78]
mov rdx, rax
mov r9, qword [rsp + 0x70]
mov r8, qword [rax + 0x10]
mov rax, rcx
sub rax, r9
cmp r8, rax
jbe 0x1800aea8d
mov rax, qword [rdx + 0x18]
sub rax, r8
cmp rax, r9
jb 0x1800aea8d
cmp rcx, 0x10
lea r8, [rsp + 0x60]
mov rcx, rdx
cmovae r8, qword [rsp + 0x60]
call fcn.1800c75d0
jmp 0x1800aeaa1
cmp qword [rdx + 0x18], 0x10
jb 0x1800aea97
mov rdx, qword [rdx]
lea rcx, [rsp + 0x60]
call fcn.1800c2650
movups xmm0, xmmword [rax]
mov r8d, 3
lea rdx, [0x180118c94]
lea rcx, [rbp - 0x80]
movups xmmword [rbp - 0x80], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x70], xmm1
mov byte [rax], 0
mov qword [rax + 0x18], 0xf
mov qword [rax + 0x10], r14
call fcn.1800c2650
lea rdx, [rbp + 0x90]
movups xmm0, xmmword [rax]
movups xmm1, xmmword [rax + 0x10]
mov qword [rax + 0x10], r14
movq rcx, xmm0
mov qword [rax + 0x18], 0xf
movups xmmword [rbp + 0x90], xmm0
mov byte [rax], 0
movdqa xmm0, xmm1
movq r8, xmm1
psrldq xmm0, 8
movq rax, xmm0
cmp rax, 0x10
movups xmmword [rbp + 0xa0], xmm1
cmovae rdx, rcx
lea rcx, [0x18012ca38]
call fcn.1800c2650
mov rdx, qword [rbp + 0xa8]
cmp rdx, 0x10
jb 0x1800aeb6d
mov rcx, qword [rbp + 0x90]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800aeb68
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800aefdc
call fcn.1800cfd40
mov rdx, qword [rbp - 0x68]
cmp rdx, 0x10
jb 0x1800aeba8
mov rcx, qword [rbp - 0x80]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800aeba3
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800aefdc
call fcn.1800cfd40
mov rdx, qword [rsp + 0x78]
mov qword [rbp - 0x70], r14
mov qword [rbp - 0x68], 0xf
mov byte [rbp - 0x80], 0
cmp rdx, 0x10
jb 0x1800aebf5
mov rcx, qword [rsp + 0x60]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800aebf0
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800aefdc
call fcn.1800cfd40
mov rdx, qword [rbp - 0x48]
mov qword [rsp + 0x70], r14
mov qword [rsp + 0x78], 0xf
mov byte [rsp + 0x60], 0
cmp rdx, 0x10
jb 0x1800aec43
mov rcx, qword [rbp - 0x60]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800aec3e
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800aefdc
call fcn.1800cfd40
mov rdx, qword [rbp - 8]
mov qword [rbp - 0x50], r14
mov qword [rbp - 0x48], 0xf
mov byte [rbp - 0x60], 0
cmp rdx, 0x10
jb 0x1800aec8e
mov rcx, qword [rbp - 0x20]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800aec89
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800aefdc
call fcn.1800cfd40
mov rdx, qword [rbp - 0x28]
mov qword [rbp - 0x10], r14
mov qword [rbp - 8], 0xf
mov byte [rbp - 0x20], 0
cmp rdx, 0x10
jb 0x1800aecd9
mov rcx, qword [rbp - 0x40]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800aecd4
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800aefdc
call fcn.1800cfd40
mov rdx, qword [rbp + 0x68]
mov qword [rbp - 0x30], r14
mov qword [rbp - 0x28], 0xf
mov byte [rbp - 0x40], 0
cmp rdx, 0x10
jb 0x1800aed24
mov rcx, qword [rbp + 0x50]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800aed1f
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800aefdc
call fcn.1800cfd40
inc dword [0x18012fa60]
xor r8d, r8d
lea rdx, [0x18010e0d0]
lea rcx, [rbp + 0x120]
call fcn.1800c2ee0
xor r8d, r8d
lea rdx, [0x18010e0d0]
lea rcx, [rbp + 0x140]
call fcn.1800c2ee0
xor r8d, r8d
lea rdx, [0x18010e0d0]
lea rcx, [rbp + 0x188]
call fcn.1800c2ee0
mov rdx, qword [rbp + 0x1e0]
cmp rdx, 8
jb 0x1800aedb2
mov rcx, qword [rbp + 0x1c8]
lea rdx, [rdx*2 + 2]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800aedad
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800aefb2
call fcn.1800cfd40
mov r13, qword [rbp + 0x130]
mov r12, qword [rbp + 0x138]
mov r15, qword [rbp + 0x180]
mov ecx, dword [rbp]
inc ecx
mov dword [rbp], ecx
cmp ecx, dword [rbp + 0x118]
jb 0x1800add95
mov rbx, qword [rbp + 0x158]
mov rdi, qword [rbp + 0x1a0]
mov rcx, qword [rbp + 0x110]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
cmp rdi, 0x10
jb 0x1800aee31
mov rcx, qword [rbp + 0x188]
lea rdx, [rdi + 1]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800aee2c
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800aefbe
call fcn.1800cfd40
cmp rbx, 0x10
jb 0x1800aee6c
mov rcx, qword [rbp + 0x140]
lea rdx, [rbx + 1]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800aee67
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800aefbe
call fcn.1800cfd40
cmp r12, 0x10
jb 0x1800aeea8
mov rcx, qword [rbp + 0x120]
lea rdx, [r12 + 1]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800aeea3
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800aefbe
call fcn.1800cfd40
cmp r15, 0x10
jb 0x1800aeee3
mov rcx, qword [rbp + 0x168]
lea rdx, [r15 + 1]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800aeede
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800aefbe
call fcn.1800cfd40
mov rdx, qword [rbp + 0x1c0]
cmp rdx, 0x10
jb 0x1800aef24
mov rcx, qword [rbp + 0x1a8]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800aef1f
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800aefb8
call fcn.1800cfd40
mov rdx, qword [rsi + 0x18]
mov qword [rbp + 0x1b8], r14
mov qword [rbp + 0x1c0], 0xf
mov byte [rbp + 0x1a8], 0
cmp rdx, 0x10
jb 0x1800aef73
mov rcx, qword [rsi]
inc rdx
cmp rdx, 0x1000
jb 0x1800aef6e
mov r8, qword [rcx - 8]
add rdx, 0x27
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x1800aefb8
mov rcx, r8
call fcn.1800cfd40
mov qword [rsi + 0x10], r14
mov qword [rsi + 0x18], 0xf
mov byte [rsi], 0
mov rcx, qword [rbp + 0x630]
xor rcx, rsp
call fcn.1800cfa80
lea r11, [rsp + 0x740]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call fcn.1800defa0
int3
call fcn.1800defa0
int3
call fcn.1800defa0
int3
call fcn.1800defa0
int3
call fcn.1800defa0
int3
call fcn.1800defa0
int3
call fcn.1800defa0
int3
call fcn.1800defa0
int3