Function at 0x1800a98f0
Capabilities:
Query or enumerate registry key

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x670]
sub rsp, 0x770
mov rax, qword [0x180124010]
xor rax, rsp
mov qword [rbp + 0x660], rax
xor r14d, r14d
mov qword [rbp + 0x28], rcx
mov rsi, rcx
mov qword [rbp + 0x1e8], r14
lea rdx, str.SOFTWAREMartin_PrikrylWinSCP_2Sessions
mov qword [rbp + 0x1f0], 0xf
lea rcx, [rbp + 0x1d8]
mov byte [rbp + 0x1d8], r14b
lea r8d, [r14 + 0x29]
call fcn.1800bdba0
cmp qword [rbp + 0x1f0], 0x10
lea rax, [rbp + 0x140]
lea rdx, [rbp + 0x1d8]
mov qword [rsp + 0x20], rax
cmovae rdx, qword [rbp + 0x1d8]
mov r9d, 0x20019
xor r8d, r8d
mov rcx, 0xffffffff80000001
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x1800aaec7
xor edx, edx
lea rcx, [rbp + 0x240]
mov r8d, 0x208
call fcn.1800cdea0
xor edx, edx
lea rcx, [rbp + 0x450]
mov r8d, 0x208
call fcn.1800cdea0
mov rcx, qword [rbp + 0x140]
lea rax, [rbp + 0x218]
mov qword [rsp + 0x58], rax
lea r8, [rbp + 0x1b4]
mov r15d, 0xf
mov dword [rbp + 0x1b4], 0x104
lea rax, [rbp + 0x234]
mov dword [rbp + 0x148], r14d
mov qword [rsp + 0x50], rax
lea rdx, [rbp + 0x450]
lea rax, [rbp + 0x230]
mov byte [rbp + 0x190], r14b
mov qword [rsp + 0x48], rax
mov ebx, r15d
lea rax, [rbp + 0x22c]
mov qword [rbp + 0x160], r14
mov qword [rsp + 0x40], rax
xor r9d, r9d
lea rax, [rbp + 0x228]
mov qword [rbp + 0x168], r15
mov qword [rsp + 0x38], rax
mov r12d, r15d
lea rax, [rbp + 0x224]
mov byte [rbp + 0x150], r14b
mov qword [rsp + 0x30], rax
mov r13d, r15d
lea rax, [rbp + 0x220]
mov qword [rbp + 0x180], r14
mov qword [rsp + 0x28], rax
lea rax, [rbp + 0x148]
mov qword [rsp + 0x20], rax
mov qword [rbp + 0x188], r15
mov byte [rbp + 0x170], r14b
mov qword [rbp + 0x1c8], r14
mov qword [rbp + 0x1d0], rbx
mov byte [rbp + 0x1b8], r14b
call qword [sym.imp.ADVAPI32.dll_RegQueryInfoKeyW]
mov eax, dword [rbp + 0x148]
test eax, eax
je 0x1800aadcd
mov ecx, r14d
mov dword [rbp], ecx
lea rax, [rbp + 0x218]
mov dword [rbp + 0x1b0], 0x1000
mov qword [rsp + 0x38], rax
lea r9, [rbp + 0x1b0]
mov qword [rsp + 0x30], r14
lea r8, [rbp + 0x240]
mov edx, ecx
mov qword [rsp + 0x28], r14
mov rcx, qword [rbp + 0x140]
mov qword [rsp + 0x20], r14
call qword [sym.imp.ADVAPI32.dll_RegEnumKeyExW]
test eax, eax
jne 0x1800aadb2
mov qword [rbp + 0x208], r14
lea rax, [rbp + 0x240]
mov qword [rbp + 0x210], 7
mov r8, 0xffffffffffffffff
mov word [rbp + 0x1f8], r14w
inc r8
cmp word [rax + r8*2], 0
jne 0x1800a9b35
lea rdx, [rbp + 0x240]
lea rcx, [rbp + 0x1f8]
call fcn.1800bd8c0
cmp qword [rbp + 0x210], 8
lea rdx, [rbp + 0x1f8]
mov rax, qword [rbp + 0x208]
lea rsi, [rbp + 0x1f8]
cmovae rdx, qword [rbp + 0x1f8]
mov rdi, r14
cmovae rsi, qword [rbp + 0x1f8]
mov qword [rbp + 0x18], r14
mov r14d, 0xf
mov qword [rbp + 0x20], r14
lea rbx, [rdx + rax*2]
mov byte [rbp + 8], 0
mov rdx, rbx
sub rdx, rsi
sar rdx, 1
cmp rdx, 0x10
jb 0x1800a9bbb
lea rcx, [rbp + 8]
call fcn.1800c3fa0
mov r14, qword [rbp + 0x20]
xor edi, edi
mov qword [rbp + 0x18], rdi
cmp rsi, rbx
je 0x1800a9c03
movzx r9d, byte [rsi]
cmp rdi, r14
jae 0x1800a9be9
lea rax, [rdi + 1]
cmp r14, 0x10
mov qword [rbp + 0x18], rax
lea rax, [rbp + 8]
cmovae rax, qword [rbp + 8]
mov byte [rax + rdi], r9b
mov byte [rax + rdi + 1], 0
jmp 0x1800a9bf2
lea rcx, [rbp + 8]
call fcn.1800beae0
mov r14, qword [rbp + 0x20]
add rsi, 2
mov rdi, qword [rbp + 0x18]
cmp rsi, rbx
jne 0x1800a9bc0
cmp r15, 0x10
jb 0x1800a9c3e
mov rcx, qword [rbp + 0x190]
lea rdx, [r15 + 1]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800a9c39
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800aaf96
call fcn.1800caa30
movups xmm0, xmmword [rbp + 8]
xor ebx, ebx
lea rdx, str.HostName
movups xmm1, xmmword [rbp + 0x18]
lea rcx, [rbp - 0x60]
mov qword [rbp - 0x50], rbx
movups xmmword [rbp + 0x190], xmm0
lea r8d, [rbx + 8]
mov qword [rbp - 0x48], 0xf
movups xmmword [rbp + 0x1a0], xmm1
mov byte [rbp - 0x60], bl
call fcn.1800bdba0
lea rdx, [rdi + 0x2a]
mov qword [rsp + 0x70], rbx
mov qword [rsp + 0x78], 0xf
mov byte [rsp + 0x60], bl
cmp rdx, 0x10
jb 0x1800a9ca4
lea rcx, [rsp + 0x60]
call fcn.1800c3fa0
mov qword [rsp + 0x70], rbx
mov r8d, 0x2a
lea rdx, str.SOFTWAREMartin_PrikrylWinSCP_2Sessions_
lea rcx, [rsp + 0x60]
call fcn.1800bd330
cmp r14, 0x10
lea rdx, [rbp + 0x190]
mov r8, rdi
lea rcx, [rsp + 0x60]
cmovae rdx, qword [rbp + 8]
call fcn.1800bd330
lea r9, [rbp - 0x60]
lea r8, [rsp + 0x60]
lea rcx, [rbp - 0x20]
call fcn.1800a9740
mov rbx, rax
lea rax, [rbp + 0x150]
cmp rax, rbx
je 0x1800a9d65
cmp r12, 0x10
jb 0x1800a9d35
mov rcx, qword [rbp + 0x150]
lea rdx, [r12 + 1]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800a9d30
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800aafa8
call fcn.1800caa30
movups xmm1, xmmword [rbx + 0x10]
xor r14d, r14d
movups xmm0, xmmword [rbx]
mov qword [rbx + 0x10], r14
movups xmmword [rbp + 0x160], xmm1
mov r12, qword [rbp + 0x168]
movups xmmword [rbp + 0x150], xmm0
mov qword [rbx + 0x18], 0xf
mov byte [rbx], r14b
jmp 0x1800a9d68
xor r14d, r14d
mov rdx, qword [rbp - 8]
cmp rdx, 0x10
jb 0x1800a9da3
mov rcx, qword [rbp - 0x20]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800a9d9e
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800aafa8
call fcn.1800caa30
mov r8d, 8
mov qword [rbp - 0x50], r14
lea rdx, str.UserName
mov qword [rbp - 0x48], 0xf
lea rcx, [rbp - 0x60]
mov byte [rbp - 0x60], 0
call fcn.1800bdba0
mov rbx, qword [rbp + 0x1a0]
mov qword [rsp + 0x70], r14
mov qword [rsp + 0x78], 0xf
mov byte [rsp + 0x60], 0
lea rdx, [rbx + 0x2a]
cmp rdx, 0x10
jb 0x1800a9dfc
lea rcx, [rsp + 0x60]
call fcn.1800c3fa0
mov qword [rsp + 0x70], r14
mov r8d, 0x2a
lea rdx, str.SOFTWAREMartin_PrikrylWinSCP_2Sessions_
lea rcx, [rsp + 0x60]
call fcn.1800bd330
cmp qword [rbp + 0x1a8], 0x10
lea rdx, [rbp + 0x190]
mov r8, rbx
lea rcx, [rsp + 0x60]
cmovae rdx, qword [rbp + 0x190]
call fcn.1800bd330
lea r9, [rbp - 0x60]
lea r8, [rsp + 0x60]
lea rcx, [rbp - 0x20]
call fcn.1800a9740
mov rbx, rax
lea rax, [rbp + 0x170]
cmp rax, rbx
je 0x1800a9ebe
cmp r13, 0x10
jb 0x1800a9e93
mov rcx, qword [rbp + 0x170]
lea rdx, [r13 + 1]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800a9e8e
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800aafae
call fcn.1800caa30
movups xmm1, xmmword [rbx + 0x10]
movups xmm0, xmmword [rbx]
mov qword [rbx + 0x10], r14
movups xmmword [rbp + 0x180], xmm1
mov r13, qword [rbp + 0x188]
movups xmmword [rbp + 0x170], xmm0
mov qword [rbx + 0x18], 0xf
mov byte [rbx], 0
mov rdx, qword [rbp - 8]
cmp rdx, 0x10
jb 0x1800a9ef9
mov rcx, qword [rbp - 0x20]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800a9ef4
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800aafae
call fcn.1800caa30
mov r8d, 8
mov qword [rbp - 0x50], r14
lea rdx, str.Password
mov qword [rbp - 0x48], 0xf
lea rcx, [rbp - 0x60]
mov byte [rbp - 0x60], 0
call fcn.1800bdba0
mov rbx, qword [rbp + 0x1a0]
mov qword [rsp + 0x70], r14
mov qword [rsp + 0x78], 0xf
mov byte [rsp + 0x60], 0
lea rdx, [rbx + 0x2a]
cmp rdx, 0x10
jb 0x1800a9f52
lea rcx, [rsp + 0x60]
call fcn.1800c3fa0
mov qword [rsp + 0x70], r14
mov r8d, 0x2a
lea rdx, str.SOFTWAREMartin_PrikrylWinSCP_2Sessions_
lea rcx, [rsp + 0x60]
call fcn.1800bd330
cmp qword [rbp + 0x1a8], 0x10
lea rdx, [rbp + 0x190]
mov r8, rbx
lea rcx, [rsp + 0x60]
cmovae rdx, qword [rbp + 0x190]
call fcn.1800bd330
lea r9, [rbp - 0x60]
lea r8, [rsp + 0x60]
lea rcx, [rbp - 0x20]
call fcn.1800a9740
mov rbx, rax
lea rax, [rbp + 0x1b8]
cmp rax, rbx
je 0x1800aa014
mov rax, qword [rbp + 0x1d0]
cmp rax, 0x10
jb 0x1800a9ff0
mov rcx, qword [rbp + 0x1b8]
lea rdx, [rax + 1]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800a9feb
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800aafb4
call fcn.1800caa30
movups xmm0, xmmword [rbx]
movups xmm1, xmmword [rbx + 0x10]
mov qword [rbx + 0x10], r14
movups xmmword [rbp + 0x1b8], xmm0
mov qword [rbx + 0x18], 0xf
movups xmmword [rbp + 0x1c8], xmm1
mov byte [rbx], 0
mov rdx, qword [rbp - 8]
cmp rdx, 0x10
jb 0x1800aa04f
mov rcx, qword [rbp - 0x20]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800aa04a
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800aafb4
call fcn.1800caa30
cmp qword [rbp + 0x160], 0
mov rsi, qword [rbp + 0x28]
je 0x1800aad15
cmp qword [rbp + 0x180], 0
je 0x1800aad15
cmp qword [rbp + 0x1c8], 0
je 0x1800aad15
mov rax, qword [rsi + 0x18]
mov rcx, rsi
cmp rax, 0x10
jb 0x1800aa08d
mov rcx, qword [rsi]
cmp qword [rsi + 0x10], 1
jne 0x1800aa09d
cmp byte [rcx], 0x30
jne 0x1800aa09d
mov cl, 1
jmp 0x1800aa09f
xor cl, cl
test cl, cl
je 0x1800aa68d
mov r8, qword [0x180126a48]
mov qword [rbp - 0x30], r14
mov qword [rbp - 0x28], 0xf
mov byte [rbp - 0x40], 0
lea rdx, [r8 + 1]
cmp rdx, 0x10
jb 0x1800aa0dc
lea rcx, [rbp - 0x40]
call fcn.1800c3fa0
mov r8, qword [0x180126a48]
mov qword [rbp - 0x30], r14
cmp qword [0x180126a50], 0x10
lea rdx, [0x180126a38]
lea rcx, [rbp - 0x40]
cmovae rdx, qword [0x180126a38]
call fcn.1800bd330
mov r8d, 1
lea rdx, [0x180112cf8]
lea rcx, [rbp - 0x40]
call fcn.1800bd330
mov r8, qword [rbp + 0x160]
lea rdx, [rbp + 0x150]
cmp r12, 0x10
lea rcx, [rbp - 0x40]
cmovae rdx, qword [rbp + 0x150]
call fcn.1800bd330
mov r8d, 1
lea rdx, [0x180112cf4]
lea rcx, [rbp - 0x20]
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x20], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x10], xmm1
mov qword [rax + 0x10], r14
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
call fcn.1800bd330
mov r8d, 1
lea rdx, [0x180112cf8]
lea rcx, [rbp + 0x30]
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x30], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x40], xmm1
mov qword [rax + 0x10], r14
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
call fcn.1800bd330
mov r8, qword [rbp + 0x180]
lea rdx, [rbp + 0x170]
cmp r13, 0x10
lea rcx, [rbp + 0x50]
movups xmm0, xmmword [rax]
cmovae rdx, qword [rbp + 0x170]
movups xmmword [rbp + 0x50], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x60], xmm1
mov qword [rax + 0x10], r14
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
call fcn.1800bd330
mov r8d, 1
lea rdx, [0x180112cf4]
lea rcx, [rbp + 0x70]
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x70], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x80], xmm1
mov qword [rax + 0x10], r14
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
call fcn.1800bd330
mov r8d, 1
lea rdx, [0x180112cf8]
lea rcx, [rbp + 0x90]
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x90], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0xa0], xmm1
mov qword [rax + 0x10], r14
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
call fcn.1800bd330
mov qword [rbp - 0x70], r14
mov qword [rbp - 0x68], r14
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x80], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x70], xmm1
mov qword [rax + 0x10], r14
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
lea rdx, [rbp + 0x1b8]
lea rcx, [rbp + 0xc0]
call fcn.1800bd4e0
lea rdx, [rbp + 0x150]
mov rdi, rax
lea rcx, [rbp + 0x100]
call fcn.1800bd4e0
lea rdx, [rbp + 0x170]
mov rbx, rax
lea rcx, [rbp + 0xe0]
call fcn.1800bd4e0
mov rdx, rax
lea rcx, [rbp - 0x60]
mov r9, rdi
mov r8, rbx
call fcn.1800a57d0
mov rcx, qword [rbp - 0x68]
mov rdx, rax
mov r9, qword [rbp - 0x70]
mov r8, qword [rax + 0x10]
mov rax, rcx
sub rax, r9
cmp r8, rax
jbe 0x1800aa306
mov rax, qword [rdx + 0x18]
sub rax, r8
cmp rax, r9
jb 0x1800aa306
cmp rcx, 0x10
lea r8, [rbp - 0x80]
mov rcx, rdx
cmovae r8, qword [rbp - 0x80]
call fcn.1800c2200
jmp 0x1800aa319
cmp qword [rdx + 0x18], 0x10
jb 0x1800aa310
mov rdx, qword [rdx]
lea rcx, [rbp - 0x80]
call fcn.1800bd330
movups xmm0, xmmword [rax]
mov r8d, 2
lea rdx, [0x180112d08]
lea rcx, [rsp + 0x60]
movups xmmword [rsp + 0x60], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x70], xmm1
mov byte [rax], 0
mov qword [rax + 0x18], 0xf
mov qword [rax + 0x10], r14
call fcn.1800bd330
movups xmm0, xmmword [rax]
movups xmm1, xmmword [rax + 0x10]
mov qword [rax + 0x10], r14
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
mov rdx, qword [0x180126a50]
movups xmmword [rbp + 0xb0], xmm0
movups xmmword [rbp + 8], xmm1
cmp rdx, 0x10
jb 0x1800aa3bd
mov rcx, qword [0x180126a38]
inc rdx
cmp rdx, 0x1000
jb 0x1800aa3ad
mov r8, qword [rcx - 8]
add rdx, 0x27
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x1800aafba
mov rcx, r8
call fcn.1800caa30
movups xmm0, xmmword [rbp + 0xb0]
movups xmm1, xmmword [rbp + 8]
mov rdx, qword [rsp + 0x78]
movups xmmword [0x180126a38], xmm0
movups xmmword [0x180126a48], xmm1
cmp rdx, 0x10
jb 0x1800aa408
mov rcx, qword [rsp + 0x60]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800aa403
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800aafba
call fcn.1800caa30
mov rdx, qword [rbp - 0x68]
mov qword [rsp + 0x70], r14
mov qword [rsp + 0x78], 0xf
mov byte [rsp + 0x60], 0
cmp rdx, 0x10
jb 0x1800aa456
mov rcx, qword [rbp - 0x80]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800aa451
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800aafba
call fcn.1800caa30
mov rdx, qword [rbp + 0xa8]
mov qword [rbp - 0x70], r14
mov qword [rbp - 0x68], 0xf
mov byte [rbp - 0x80], 0
cmp rdx, 0x10
jb 0x1800aa4a7
mov rcx, qword [rbp + 0x90]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800aa4a2
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800aafba
call fcn.1800caa30
mov rdx, qword [rbp + 0x88]
mov qword [rbp + 0xa0], r14
mov qword [rbp + 0xa8], 0xf
mov byte [rbp + 0x90], 0
cmp rdx, 0x10
jb 0x1800aa4fe
mov rcx, qword [rbp + 0x70]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800aa4f9
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800aafba
call fcn.1800caa30
mov rdx, qword [rbp + 0x68]
mov qword [rbp + 0x80], r14
mov qword [rbp + 0x88], 0xf
mov byte [rbp + 0x70], 0
cmp rdx, 0x10
jb 0x1800aa54f
mov rcx, qword [rbp + 0x50]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800aa54a
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800aafba
call fcn.1800caa30
mov rdx, qword [rbp + 0x48]
mov qword [rbp + 0x60], r14
mov qword [rbp + 0x68], 0xf
mov byte [rbp + 0x50], 0
cmp rdx, 0x10
jb 0x1800aa59a
mov rcx, qword [rbp + 0x30]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800aa595
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800aafba
call fcn.1800caa30
mov rdx, qword [rbp - 8]
mov qword [rbp + 0x40], r14
mov qword [rbp + 0x48], 0xf
mov byte [rbp + 0x30], 0
cmp rdx, 0x10
jb 0x1800aa5e5
mov rcx, qword [rbp - 0x20]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800aa5e0
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800aafba
call fcn.1800caa30
mov rdx, qword [rbp - 0x28]
mov qword [rbp - 0x10], r14
mov qword [rbp - 8], 0xf
mov byte [rbp - 0x20], 0
cmp rdx, 0x10
jb 0x1800aa630
mov rcx, qword [rbp - 0x40]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800aa62b
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800aafba
call fcn.1800caa30
mov rdx, qword [rbp - 0x48]
mov qword [rbp - 0x30], r14
mov qword [rbp - 0x28], 0xf
mov byte [rbp - 0x40], 0
cmp rdx, 0x10
jb 0x1800aa67b
mov rcx, qword [rbp - 0x60]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800aa676
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800aafba
call fcn.1800caa30
mov rax, qword [rsi + 0x18]
mov r12, qword [rbp + 0x168]
mov r13, qword [rbp + 0x188]
mov rcx, rsi
cmp rax, 0x10
jb 0x1800aa699
mov rcx, qword [rsi]
cmp qword [rsi + 0x10], 1
jne 0x1800aa6a9
cmp byte [rcx], 0x31
jne 0x1800aa6a9
mov al, 1
jmp 0x1800aa6ab
xor al, al
test al, al
je 0x1800aad0f
mov r8, qword [0x180126a48]
mov qword [rbp - 0x30], r14
mov qword [rbp - 0x28], 0xf
mov byte [rbp - 0x40], 0
lea rdx, [r8 + 3]
cmp rdx, 0x10
jb 0x1800aa6e8
lea rcx, [rbp - 0x40]
call fcn.1800c3fa0
mov r8, qword [0x180126a48]
mov qword [rbp - 0x30], r14
cmp qword [0x180126a50], 0x10
lea rdx, [0x180126a38]
lea rcx, [rbp - 0x40]
cmovae rdx, qword [0x180126a38]
call fcn.1800bd330
mov r8d, 3
lea rdx, [0x1801131f4]
lea rcx, [rbp - 0x40]
call fcn.1800bd330
mov r8d, 1
lea rdx, [0x180112d00]
lea rcx, [rbp - 0x40]
call fcn.1800bd330
mov r8d, 6
lea rdx, str.WinSCP
lea rcx, [rbp - 0x60]
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x60], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x50], xmm1
mov qword [rax + 0x10], r14
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
call fcn.1800bd330
mov r8d, 1
lea rdx, [0x180112d00]
lea rcx, [rbp + 0x90]
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x90], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0xa0], xmm1
mov qword [rax + 0x10], r14
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
call fcn.1800bd330
mov r8, qword [rbp + 0x160]
lea rdx, [rbp + 0x150]
cmp r12, 0x10
lea rcx, [rbp + 0x70]
movups xmm0, xmmword [rax]
cmovae rdx, qword [rbp + 0x150]
movups xmmword [rbp + 0x70], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x80], xmm1
mov qword [rax + 0x10], r14
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
call fcn.1800bd330
mov r8d, 1
lea rdx, [0x180112d00]
lea rcx, [rbp + 0x50]
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x50], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x60], xmm1
mov qword [rax + 0x10], r14
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
call fcn.1800bd330
mov r8, qword [rbp + 0x180]
lea rdx, [rbp + 0x170]
cmp r13, 0x10
lea rcx, [rbp + 0x30]
movups xmm0, xmmword [rax]
cmovae rdx, qword [rbp + 0x170]
movups xmmword [rbp + 0x30], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x40], xmm1
mov qword [rax + 0x10], r14
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
call fcn.1800bd330
mov r8d, 1
lea rdx, [0x180112d00]
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x20], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x10], xmm1
mov qword [rax + 0x10], r14
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
lea rcx, [rbp - 0x20]
call fcn.1800bd330
mov qword [rbp - 0x70], r14
lea rdx, [rbp + 0x1b8]
mov qword [rbp - 0x68], r14
lea rcx, [rbp + 0xe0]
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x80], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x70], xmm1
mov qword [rax + 0x10], r14
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
call fcn.1800bd4e0
lea rdx, [rbp + 0x150]
mov rdi, rax
lea rcx, [rbp + 0x100]
call fcn.1800bd4e0
lea rdx, [rbp + 0x170]
mov rbx, rax
lea rcx, [rbp + 0x120]
call fcn.1800bd4e0
mov rdx, rax
lea rcx, [rbp + 0xc0]
mov r9, rdi
mov r8, rbx
call fcn.1800a57d0
mov rcx, qword [rbp - 0x68]
mov rdx, rax
mov r9, qword [rbp - 0x70]
mov r8, qword [rax + 0x10]
mov rax, rcx
sub rax, r9
cmp r8, rax
jbe 0x1800aa949
mov rax, qword [rdx + 0x18]
sub rax, r8
cmp rax, r9
jb 0x1800aa949
cmp rcx, 0x10
lea r8, [rbp - 0x80]
mov rcx, rdx
cmovae r8, qword [rbp - 0x80]
call fcn.1800c2200
jmp 0x1800aa95c
cmp qword [rdx + 0x18], 0x10
jb 0x1800aa953
mov rdx, qword [rdx]
lea rcx, [rbp - 0x80]
call fcn.1800bd330
movups xmm0, xmmword [rax]
mov r8d, 3
lea rdx, [0x180112cfc]
lea rcx, [rsp + 0x60]
movups xmmword [rsp + 0x60], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x70], xmm1
mov byte [rax], 0
mov qword [rax + 0x18], 0xf
mov qword [rax + 0x10], r14
call fcn.1800bd330
movups xmm0, xmmword [rax]
movups xmm1, xmmword [rax + 0x10]
mov qword [rax + 0x10], r14
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
mov rdx, qword [0x180126a50]
movups xmmword [rbp + 8], xmm0
movups xmmword [rbp + 0xb0], xmm1
cmp rdx, 0x10
jb 0x1800aaa00
mov rcx, qword [0x180126a38]
inc rdx
cmp rdx, 0x1000
jb 0x1800aa9f0
mov r8, qword [rcx - 8]
add rdx, 0x27
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x1800aafc0
mov rcx, r8
call fcn.1800caa30
movups xmm0, xmmword [rbp + 8]
movups xmm1, xmmword [rbp + 0xb0]
mov rdx, qword [rsp + 0x78]
movups xmmword [0x180126a38], xmm0
movups xmmword [0x180126a48], xmm1
cmp rdx, 0x10
jb 0x1800aaa4b
mov rcx, qword [rsp + 0x60]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800aaa46
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800aafc0
call fcn.1800caa30
mov rdx, qword [rbp - 0x68]
mov qword [rsp + 0x70], r14
mov qword [rsp + 0x78], 0xf
mov byte [rsp + 0x60], 0
cmp rdx, 0x10
jb 0x1800aaa99
mov rcx, qword [rbp - 0x80]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800aaa94
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800aafc0
call fcn.1800caa30
mov rdx, qword [rbp - 8]
mov qword [rbp - 0x70], r14
mov qword [rbp - 0x68], 0xf
mov byte [rbp - 0x80], 0
cmp rdx, 0x10
jb 0x1800aaae4
mov rcx, qword [rbp - 0x20]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800aaadf
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800aafc0
call fcn.1800caa30
mov rdx, qword [rbp + 0x48]
mov qword [rbp - 0x10], r14
mov qword [rbp - 8], 0xf
mov byte [rbp - 0x20], 0
cmp rdx, 0x10
jb 0x1800aab2f
mov rcx, qword [rbp + 0x30]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800aab2a
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800aafc0
call fcn.1800caa30
mov rdx, qword [rbp + 0x68]
mov qword [rbp + 0x40], r14
mov qword [rbp + 0x48], 0xf
mov byte [rbp + 0x30], 0
cmp rdx, 0x10
jb 0x1800aab7a
mov rcx, qword [rbp + 0x50]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800aab75
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800aafc0
call fcn.1800caa30
mov rdx, qword [rbp + 0x88]
mov qword [rbp + 0x60], r14
mov qword [rbp + 0x68], 0xf
mov byte [rbp + 0x50], 0
cmp rdx, 0x10
jb 0x1800aabc8
mov rcx, qword [rbp + 0x70]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800aabc3
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800aafc0
call fcn.1800caa30
mov rdx, qword [rbp + 0xa8]
mov qword [rbp + 0x80], r14
mov qword [rbp + 0x88], 0xf
mov byte [rbp + 0x70], 0
cmp rdx, 0x10
jb 0x1800aac1f
mov rcx, qword [rbp + 0x90]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800aac1a
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800aafc0
call fcn.1800caa30
mov rdx, qword [rbp - 0x48]
mov qword [rbp + 0xa0], r14
mov qword [rbp + 0xa8], 0xf
mov byte [rbp + 0x90], 0
cmp rdx, 0x10
jb 0x1800aac73
mov rcx, qword [rbp - 0x60]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800aac6e
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800aafc0
call fcn.1800caa30
mov rdx, qword [rbp - 0x28]
mov qword [rbp - 0x50], r14
mov qword [rbp - 0x48], 0xf
mov byte [rbp - 0x60], 0
cmp rdx, 0x10
jb 0x1800aacbe
mov rcx, qword [rbp - 0x40]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800aacb9
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800aafc0
call fcn.1800caa30
mov rdx, qword [rbp + 0xd8]
mov qword [rbp - 0x30], r14
mov qword [rbp - 0x28], 0xf
mov byte [rbp - 0x40], 0
cmp rdx, 0x10
jb 0x1800aad0f
mov rcx, qword [rbp + 0xc0]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800aad0a
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800aafc0
call fcn.1800caa30
inc dword [0x180129a38]
xor r8d, r8d
lea rdx, [0x1801080b0]
lea rcx, [rbp + 0x150]
call fcn.1800bdba0
xor r8d, r8d
lea rdx, [0x1801080b0]
lea rcx, [rbp + 0x170]
call fcn.1800bdba0
xor r8d, r8d
lea rdx, [0x1801080b0]
lea rcx, [rbp + 0x1b8]
call fcn.1800bdba0
mov rdx, qword [rbp + 0x210]
cmp rdx, 8
jb 0x1800aad9d
mov rcx, qword [rbp + 0x1f8]
lea rdx, [rdx*2 + 2]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800aad98
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800aaf96
call fcn.1800caa30
mov r13, qword [rbp + 0x188]
mov r12, qword [rbp + 0x168]
mov r15, qword [rbp + 0x1a8]
mov ecx, dword [rbp]
inc ecx
mov dword [rbp], ecx
cmp ecx, dword [rbp + 0x148]
jb 0x1800a9ac3
mov rbx, qword [rbp + 0x1d0]
mov rcx, qword [rbp + 0x140]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
cmp rbx, 0x10
jb 0x1800aae15
mov rcx, qword [rbp + 0x1b8]
lea rdx, [rbx + 1]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800aae10
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800aafa2
call fcn.1800caa30
cmp r13, 0x10
jb 0x1800aae50
mov rcx, qword [rbp + 0x170]
lea rdx, [r13 + 1]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800aae4b
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800aafa2
call fcn.1800caa30
cmp r12, 0x10
jb 0x1800aae8c
mov rcx, qword [rbp + 0x150]
lea rdx, [r12 + 1]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800aae87
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800aafa2
call fcn.1800caa30
cmp r15, 0x10
jb 0x1800aaec7
mov rcx, qword [rbp + 0x190]
lea rdx, [r15 + 1]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800aaec2
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800aafa2
call fcn.1800caa30
mov rdx, qword [rbp + 0x1f0]
cmp rdx, 0x10
jb 0x1800aaf08
mov rcx, qword [rbp + 0x1d8]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800aaf03
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800aaf9c
call fcn.1800caa30
mov rdx, qword [rsi + 0x18]
mov qword [rbp + 0x1e8], r14
mov qword [rbp + 0x1f0], 0xf
mov byte [rbp + 0x1d8], 0
cmp rdx, 0x10
jb 0x1800aaf57
mov rcx, qword [rsi]
inc rdx
cmp rdx, 0x1000
jb 0x1800aaf52
mov r8, qword [rcx - 8]
add rdx, 0x27
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x1800aaf9c
mov rcx, r8
call fcn.1800caa30
mov qword [rsi + 0x10], r14
mov qword [rsi + 0x18], 0xf
mov byte [rsi], 0
mov rcx, qword [rbp + 0x660]
xor rcx, rsp
call fcn.1800ca770
lea r11, [rsp + 0x770]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call fcn.1800d9c90
int3
call fcn.1800d9c90
int3
call fcn.1800d9c90
int3
call fcn.1800d9c90
int3
call fcn.1800d9c90
int3
call fcn.1800d9c90
int3
call fcn.1800d9c90
int3
call fcn.1800d9c90
int3