Function at 0x1800a9950
Capabilities:
Query or enumerate registry key

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x670]
sub rsp, 0x770
mov rax, qword [0x180128010]
xor rax, rsp
mov qword [rbp + 0x660], rax
xor r14d, r14d
mov qword [rbp + 0x28], rcx
mov rsi, rcx
mov qword [rbp + 0x1e8], r14
lea rdx, str.SOFTWAREMartin_PrikrylWinSCP_2Sessions
mov qword [rbp + 0x1f0], 0xf
lea rcx, [rbp + 0x1d8]
mov byte [rbp + 0x1d8], r14b
lea r8d, [r14 + 0x29]
call fcn.1800c0190
cmp qword [rbp + 0x1f0], 0x10
lea rax, [rbp + 0x140]
lea rdx, [rbp + 0x1d8]
mov qword [rsp + 0x20], rax
cmovae rdx, qword [rbp + 0x1d8]
mov r9d, 0x20019
xor r8d, r8d
mov rcx, 0xffffffff80000001
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x1800aaf27
xor edx, edx
lea rcx, [rbp + 0x240]
mov r8d, 0x208
call fcn.1800d0490
xor edx, edx
lea rcx, [rbp + 0x450]
mov r8d, 0x208
call fcn.1800d0490
mov rcx, qword [rbp + 0x140]
lea rax, [rbp + 0x218]
mov qword [rsp + 0x58], rax
lea r8, [rbp + 0x1b4]
mov r15d, 0xf
mov dword [rbp + 0x1b4], 0x104
lea rax, [rbp + 0x234]
mov dword [rbp + 0x148], r14d
mov qword [rsp + 0x50], rax
lea rdx, [rbp + 0x450]
lea rax, [rbp + 0x230]
mov byte [rbp + 0x190], r14b
mov qword [rsp + 0x48], rax
mov ebx, r15d
lea rax, [rbp + 0x22c]
mov qword [rbp + 0x160], r14
mov qword [rsp + 0x40], rax
xor r9d, r9d
lea rax, [rbp + 0x228]
mov qword [rbp + 0x168], r15
mov qword [rsp + 0x38], rax
mov r12d, r15d
lea rax, [rbp + 0x224]
mov byte [rbp + 0x150], r14b
mov qword [rsp + 0x30], rax
mov r13d, r15d
lea rax, [rbp + 0x220]
mov qword [rbp + 0x180], r14
mov qword [rsp + 0x28], rax
lea rax, [rbp + 0x148]
mov qword [rsp + 0x20], rax
mov qword [rbp + 0x188], r15
mov byte [rbp + 0x170], r14b
mov qword [rbp + 0x1c8], r14
mov qword [rbp + 0x1d0], rbx
mov byte [rbp + 0x1b8], r14b
call qword [sym.imp.ADVAPI32.dll_RegQueryInfoKeyW]
mov eax, dword [rbp + 0x148]
test eax, eax
je 0x1800aae2d
mov ecx, r14d
mov dword [rbp], ecx
lea rax, [rbp + 0x218]
mov dword [rbp + 0x1b0], 0x1000
mov qword [rsp + 0x38], rax
lea r9, [rbp + 0x1b0]
mov qword [rsp + 0x30], r14
lea r8, [rbp + 0x240]
mov edx, ecx
mov qword [rsp + 0x28], r14
mov rcx, qword [rbp + 0x140]
mov qword [rsp + 0x20], r14
call qword [sym.imp.ADVAPI32.dll_RegEnumKeyExW]
test eax, eax
jne 0x1800aae12
mov qword [rbp + 0x208], r14
lea rax, [rbp + 0x240]
mov qword [rbp + 0x210], 7
mov r8, 0xffffffffffffffff
mov word [rbp + 0x1f8], r14w
inc r8
cmp word [rax + r8*2], 0
jne 0x1800a9b95
lea rdx, [rbp + 0x240]
lea rcx, [rbp + 0x1f8]
call fcn.1800bfeb0
cmp qword [rbp + 0x210], 8
lea rdx, [rbp + 0x1f8]
mov rax, qword [rbp + 0x208]
lea rsi, [rbp + 0x1f8]
cmovae rdx, qword [rbp + 0x1f8]
mov rdi, r14
cmovae rsi, qword [rbp + 0x1f8]
mov qword [rbp + 0x18], r14
mov r14d, 0xf
mov qword [rbp + 0x20], r14
lea rbx, [rdx + rax*2]
mov byte [rbp + 8], 0
mov rdx, rbx
sub rdx, rsi
sar rdx, 1
cmp rdx, 0x10
jb 0x1800a9c1b
lea rcx, [rbp + 8]
call fcn.1800c6590
mov r14, qword [rbp + 0x20]
xor edi, edi
mov qword [rbp + 0x18], rdi
cmp rsi, rbx
je 0x1800a9c63
movzx r9d, byte [rsi]
cmp rdi, r14
jae 0x1800a9c49
lea rax, [rdi + 1]
cmp r14, 0x10
mov qword [rbp + 0x18], rax
lea rax, [rbp + 8]
cmovae rax, qword [rbp + 8]
mov byte [rax + rdi], r9b
mov byte [rax + rdi + 1], 0
jmp 0x1800a9c52
lea rcx, [rbp + 8]
call fcn.1800c10d0
mov r14, qword [rbp + 0x20]
add rsi, 2
mov rdi, qword [rbp + 0x18]
cmp rsi, rbx
jne 0x1800a9c20
cmp r15, 0x10
jb 0x1800a9c9e
mov rcx, qword [rbp + 0x190]
lea rdx, [r15 + 1]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800a9c99
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800aaff6
call fcn.1800cd020
movups xmm0, xmmword [rbp + 8]
xor ebx, ebx
lea rdx, str.HostName
movups xmm1, xmmword [rbp + 0x18]
lea rcx, [rbp - 0x60]
mov qword [rbp - 0x50], rbx
movups xmmword [rbp + 0x190], xmm0
lea r8d, [rbx + 8]
mov qword [rbp - 0x48], 0xf
movups xmmword [rbp + 0x1a0], xmm1
mov byte [rbp - 0x60], bl
call fcn.1800c0190
lea rdx, [rdi + 0x2a]
mov qword [rsp + 0x70], rbx
mov qword [rsp + 0x78], 0xf
mov byte [rsp + 0x60], bl
cmp rdx, 0x10
jb 0x1800a9d04
lea rcx, [rsp + 0x60]
call fcn.1800c6590
mov qword [rsp + 0x70], rbx
mov r8d, 0x2a
lea rdx, str.SOFTWAREMartin_PrikrylWinSCP_2Sessions_
lea rcx, [rsp + 0x60]
call fcn.1800bf920
cmp r14, 0x10
lea rdx, [rbp + 0x190]
mov r8, rdi
lea rcx, [rsp + 0x60]
cmovae rdx, qword [rbp + 8]
call fcn.1800bf920
lea r9, [rbp - 0x60]
lea r8, [rsp + 0x60]
lea rcx, [rbp - 0x20]
call fcn.1800a97a0
mov rbx, rax
lea rax, [rbp + 0x150]
cmp rax, rbx
je 0x1800a9dc5
cmp r12, 0x10
jb 0x1800a9d95
mov rcx, qword [rbp + 0x150]
lea rdx, [r12 + 1]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800a9d90
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800ab008
call fcn.1800cd020
movups xmm1, xmmword [rbx + 0x10]
xor r14d, r14d
movups xmm0, xmmword [rbx]
mov qword [rbx + 0x10], r14
movups xmmword [rbp + 0x160], xmm1
mov r12, qword [rbp + 0x168]
movups xmmword [rbp + 0x150], xmm0
mov qword [rbx + 0x18], 0xf
mov byte [rbx], r14b
jmp 0x1800a9dc8
xor r14d, r14d
mov rdx, qword [rbp - 8]
cmp rdx, 0x10
jb 0x1800a9e03
mov rcx, qword [rbp - 0x20]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800a9dfe
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800ab008
call fcn.1800cd020
mov r8d, 8
mov qword [rbp - 0x50], r14
lea rdx, str.UserName
mov qword [rbp - 0x48], 0xf
lea rcx, [rbp - 0x60]
mov byte [rbp - 0x60], 0
call fcn.1800c0190
mov rbx, qword [rbp + 0x1a0]
mov qword [rsp + 0x70], r14
mov qword [rsp + 0x78], 0xf
mov byte [rsp + 0x60], 0
lea rdx, [rbx + 0x2a]
cmp rdx, 0x10
jb 0x1800a9e5c
lea rcx, [rsp + 0x60]
call fcn.1800c6590
mov qword [rsp + 0x70], r14
mov r8d, 0x2a
lea rdx, str.SOFTWAREMartin_PrikrylWinSCP_2Sessions_
lea rcx, [rsp + 0x60]
call fcn.1800bf920
cmp qword [rbp + 0x1a8], 0x10
lea rdx, [rbp + 0x190]
mov r8, rbx
lea rcx, [rsp + 0x60]
cmovae rdx, qword [rbp + 0x190]
call fcn.1800bf920
lea r9, [rbp - 0x60]
lea r8, [rsp + 0x60]
lea rcx, [rbp - 0x20]
call fcn.1800a97a0
mov rbx, rax
lea rax, [rbp + 0x170]
cmp rax, rbx
je 0x1800a9f1e
cmp r13, 0x10
jb 0x1800a9ef3
mov rcx, qword [rbp + 0x170]
lea rdx, [r13 + 1]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800a9eee
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800ab00e
call fcn.1800cd020
movups xmm1, xmmword [rbx + 0x10]
movups xmm0, xmmword [rbx]
mov qword [rbx + 0x10], r14
movups xmmword [rbp + 0x180], xmm1
mov r13, qword [rbp + 0x188]
movups xmmword [rbp + 0x170], xmm0
mov qword [rbx + 0x18], 0xf
mov byte [rbx], 0
mov rdx, qword [rbp - 8]
cmp rdx, 0x10
jb 0x1800a9f59
mov rcx, qword [rbp - 0x20]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800a9f54
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800ab00e
call fcn.1800cd020
mov r8d, 8
mov qword [rbp - 0x50], r14
lea rdx, str.Password
mov qword [rbp - 0x48], 0xf
lea rcx, [rbp - 0x60]
mov byte [rbp - 0x60], 0
call fcn.1800c0190
mov rbx, qword [rbp + 0x1a0]
mov qword [rsp + 0x70], r14
mov qword [rsp + 0x78], 0xf
mov byte [rsp + 0x60], 0
lea rdx, [rbx + 0x2a]
cmp rdx, 0x10
jb 0x1800a9fb2
lea rcx, [rsp + 0x60]
call fcn.1800c6590
mov qword [rsp + 0x70], r14
mov r8d, 0x2a
lea rdx, str.SOFTWAREMartin_PrikrylWinSCP_2Sessions_
lea rcx, [rsp + 0x60]
call fcn.1800bf920
cmp qword [rbp + 0x1a8], 0x10
lea rdx, [rbp + 0x190]
mov r8, rbx
lea rcx, [rsp + 0x60]
cmovae rdx, qword [rbp + 0x190]
call fcn.1800bf920
lea r9, [rbp - 0x60]
lea r8, [rsp + 0x60]
lea rcx, [rbp - 0x20]
call fcn.1800a97a0
mov rbx, rax
lea rax, [rbp + 0x1b8]
cmp rax, rbx
je 0x1800aa074
mov rax, qword [rbp + 0x1d0]
cmp rax, 0x10
jb 0x1800aa050
mov rcx, qword [rbp + 0x1b8]
lea rdx, [rax + 1]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800aa04b
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800ab014
call fcn.1800cd020
movups xmm0, xmmword [rbx]
movups xmm1, xmmword [rbx + 0x10]
mov qword [rbx + 0x10], r14
movups xmmword [rbp + 0x1b8], xmm0
mov qword [rbx + 0x18], 0xf
movups xmmword [rbp + 0x1c8], xmm1
mov byte [rbx], 0
mov rdx, qword [rbp - 8]
cmp rdx, 0x10
jb 0x1800aa0af
mov rcx, qword [rbp - 0x20]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800aa0aa
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800ab014
call fcn.1800cd020
cmp qword [rbp + 0x160], 0
mov rsi, qword [rbp + 0x28]
je 0x1800aad75
cmp qword [rbp + 0x180], 0
je 0x1800aad75
cmp qword [rbp + 0x1c8], 0
je 0x1800aad75
mov rax, qword [rsi + 0x18]
mov rcx, rsi
cmp rax, 0x10
jb 0x1800aa0ed
mov rcx, qword [rsi]
cmp qword [rsi + 0x10], 1
jne 0x1800aa0fd
cmp byte [rcx], 0x30
jne 0x1800aa0fd
mov cl, 1
jmp 0x1800aa0ff
xor cl, cl
test cl, cl
je 0x1800aa6ed
mov r8, qword [0x18012aa48]
mov qword [rbp - 0x30], r14
mov qword [rbp - 0x28], 0xf
mov byte [rbp - 0x40], 0
lea rdx, [r8 + 1]
cmp rdx, 0x10
jb 0x1800aa13c
lea rcx, [rbp - 0x40]
call fcn.1800c6590
mov r8, qword [0x18012aa48]
mov qword [rbp - 0x30], r14
cmp qword [0x18012aa50], 0x10
lea rdx, [0x18012aa38]
lea rcx, [rbp - 0x40]
cmovae rdx, qword [0x18012aa38]
call fcn.1800bf920
mov r8d, 1
lea rdx, [0x180116ca8]
lea rcx, [rbp - 0x40]
call fcn.1800bf920
mov r8, qword [rbp + 0x160]
lea rdx, [rbp + 0x150]
cmp r12, 0x10
lea rcx, [rbp - 0x40]
cmovae rdx, qword [rbp + 0x150]
call fcn.1800bf920
mov r8d, 1
lea rdx, [0x180116ca4]
lea rcx, [rbp - 0x20]
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x20], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x10], xmm1
mov qword [rax + 0x10], r14
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
call fcn.1800bf920
mov r8d, 1
lea rdx, [0x180116ca8]
lea rcx, [rbp + 0x30]
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x30], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x40], xmm1
mov qword [rax + 0x10], r14
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
call fcn.1800bf920
mov r8, qword [rbp + 0x180]
lea rdx, [rbp + 0x170]
cmp r13, 0x10
lea rcx, [rbp + 0x50]
movups xmm0, xmmword [rax]
cmovae rdx, qword [rbp + 0x170]
movups xmmword [rbp + 0x50], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x60], xmm1
mov qword [rax + 0x10], r14
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
call fcn.1800bf920
mov r8d, 1
lea rdx, [0x180116ca4]
lea rcx, [rbp + 0x70]
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x70], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x80], xmm1
mov qword [rax + 0x10], r14
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
call fcn.1800bf920
mov r8d, 1
lea rdx, [0x180116ca8]
lea rcx, [rbp + 0x90]
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x90], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0xa0], xmm1
mov qword [rax + 0x10], r14
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
call fcn.1800bf920
mov qword [rbp - 0x70], r14
mov qword [rbp - 0x68], r14
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x80], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x70], xmm1
mov qword [rax + 0x10], r14
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
lea rdx, [rbp + 0x1b8]
lea rcx, [rbp + 0xc0]
call fcn.1800bfad0
lea rdx, [rbp + 0x150]
mov rdi, rax
lea rcx, [rbp + 0x100]
call fcn.1800bfad0
lea rdx, [rbp + 0x170]
mov rbx, rax
lea rcx, [rbp + 0xe0]
call fcn.1800bfad0
mov rdx, rax
lea rcx, [rbp - 0x60]
mov r9, rdi
mov r8, rbx
call fcn.1800a5830
mov rcx, qword [rbp - 0x68]
mov rdx, rax
mov r9, qword [rbp - 0x70]
mov r8, qword [rax + 0x10]
mov rax, rcx
sub rax, r9
cmp r8, rax
jbe 0x1800aa366
mov rax, qword [rdx + 0x18]
sub rax, r8
cmp rax, r9
jb 0x1800aa366
cmp rcx, 0x10
lea r8, [rbp - 0x80]
mov rcx, rdx
cmovae r8, qword [rbp - 0x80]
call fcn.1800c47f0
jmp 0x1800aa379
cmp qword [rdx + 0x18], 0x10
jb 0x1800aa370
mov rdx, qword [rdx]
lea rcx, [rbp - 0x80]
call fcn.1800bf920
movups xmm0, xmmword [rax]
mov r8d, 2
lea rdx, [0x180116cb8]
lea rcx, [rsp + 0x60]
movups xmmword [rsp + 0x60], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x70], xmm1
mov byte [rax], 0
mov qword [rax + 0x18], 0xf
mov qword [rax + 0x10], r14
call fcn.1800bf920
movups xmm0, xmmword [rax]
movups xmm1, xmmword [rax + 0x10]
mov qword [rax + 0x10], r14
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
mov rdx, qword [0x18012aa50]
movups xmmword [rbp + 0xb0], xmm0
movups xmmword [rbp + 8], xmm1
cmp rdx, 0x10
jb 0x1800aa41d
mov rcx, qword [0x18012aa38]
inc rdx
cmp rdx, 0x1000
jb 0x1800aa40d
mov r8, qword [rcx - 8]
add rdx, 0x27
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x1800ab01a
mov rcx, r8
call fcn.1800cd020
movups xmm0, xmmword [rbp + 0xb0]
movups xmm1, xmmword [rbp + 8]
mov rdx, qword [rsp + 0x78]
movups xmmword [0x18012aa38], xmm0
movups xmmword [0x18012aa48], xmm1
cmp rdx, 0x10
jb 0x1800aa468
mov rcx, qword [rsp + 0x60]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800aa463
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800ab01a
call fcn.1800cd020
mov rdx, qword [rbp - 0x68]
mov qword [rsp + 0x70], r14
mov qword [rsp + 0x78], 0xf
mov byte [rsp + 0x60], 0
cmp rdx, 0x10
jb 0x1800aa4b6
mov rcx, qword [rbp - 0x80]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800aa4b1
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800ab01a
call fcn.1800cd020
mov rdx, qword [rbp + 0xa8]
mov qword [rbp - 0x70], r14
mov qword [rbp - 0x68], 0xf
mov byte [rbp - 0x80], 0
cmp rdx, 0x10
jb 0x1800aa507
mov rcx, qword [rbp + 0x90]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800aa502
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800ab01a
call fcn.1800cd020
mov rdx, qword [rbp + 0x88]
mov qword [rbp + 0xa0], r14
mov qword [rbp + 0xa8], 0xf
mov byte [rbp + 0x90], 0
cmp rdx, 0x10
jb 0x1800aa55e
mov rcx, qword [rbp + 0x70]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800aa559
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800ab01a
call fcn.1800cd020
mov rdx, qword [rbp + 0x68]
mov qword [rbp + 0x80], r14
mov qword [rbp + 0x88], 0xf
mov byte [rbp + 0x70], 0
cmp rdx, 0x10
jb 0x1800aa5af
mov rcx, qword [rbp + 0x50]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800aa5aa
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800ab01a
call fcn.1800cd020
mov rdx, qword [rbp + 0x48]
mov qword [rbp + 0x60], r14
mov qword [rbp + 0x68], 0xf
mov byte [rbp + 0x50], 0
cmp rdx, 0x10
jb 0x1800aa5fa
mov rcx, qword [rbp + 0x30]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800aa5f5
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800ab01a
call fcn.1800cd020
mov rdx, qword [rbp - 8]
mov qword [rbp + 0x40], r14
mov qword [rbp + 0x48], 0xf
mov byte [rbp + 0x30], 0
cmp rdx, 0x10
jb 0x1800aa645
mov rcx, qword [rbp - 0x20]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800aa640
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800ab01a
call fcn.1800cd020
mov rdx, qword [rbp - 0x28]
mov qword [rbp - 0x10], r14
mov qword [rbp - 8], 0xf
mov byte [rbp - 0x20], 0
cmp rdx, 0x10
jb 0x1800aa690
mov rcx, qword [rbp - 0x40]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800aa68b
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800ab01a
call fcn.1800cd020
mov rdx, qword [rbp - 0x48]
mov qword [rbp - 0x30], r14
mov qword [rbp - 0x28], 0xf
mov byte [rbp - 0x40], 0
cmp rdx, 0x10
jb 0x1800aa6db
mov rcx, qword [rbp - 0x60]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800aa6d6
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800ab01a
call fcn.1800cd020
mov rax, qword [rsi + 0x18]
mov r12, qword [rbp + 0x168]
mov r13, qword [rbp + 0x188]
mov rcx, rsi
cmp rax, 0x10
jb 0x1800aa6f9
mov rcx, qword [rsi]
cmp qword [rsi + 0x10], 1
jne 0x1800aa709
cmp byte [rcx], 0x31
jne 0x1800aa709
mov al, 1
jmp 0x1800aa70b
xor al, al
test al, al
je 0x1800aad6f
mov r8, qword [0x18012aa48]
mov qword [rbp - 0x30], r14
mov qword [rbp - 0x28], 0xf
mov byte [rbp - 0x40], 0
lea rdx, [r8 + 3]
cmp rdx, 0x10
jb 0x1800aa748
lea rcx, [rbp - 0x40]
call fcn.1800c6590
mov r8, qword [0x18012aa48]
mov qword [rbp - 0x30], r14
cmp qword [0x18012aa50], 0x10
lea rdx, [0x18012aa38]
lea rcx, [rbp - 0x40]
cmovae rdx, qword [0x18012aa38]
call fcn.1800bf920
mov r8d, 3
lea rdx, [0x1801171a4]
lea rcx, [rbp - 0x40]
call fcn.1800bf920
mov r8d, 1
lea rdx, [0x180116cb0]
lea rcx, [rbp - 0x40]
call fcn.1800bf920
mov r8d, 6
lea rdx, str.WinSCP
lea rcx, [rbp - 0x60]
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x60], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x50], xmm1
mov qword [rax + 0x10], r14
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
call fcn.1800bf920
mov r8d, 1
lea rdx, [0x180116cb0]
lea rcx, [rbp + 0x90]
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x90], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0xa0], xmm1
mov qword [rax + 0x10], r14
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
call fcn.1800bf920
mov r8, qword [rbp + 0x160]
lea rdx, [rbp + 0x150]
cmp r12, 0x10
lea rcx, [rbp + 0x70]
movups xmm0, xmmword [rax]
cmovae rdx, qword [rbp + 0x150]
movups xmmword [rbp + 0x70], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x80], xmm1
mov qword [rax + 0x10], r14
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
call fcn.1800bf920
mov r8d, 1
lea rdx, [0x180116cb0]
lea rcx, [rbp + 0x50]
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x50], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x60], xmm1
mov qword [rax + 0x10], r14
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
call fcn.1800bf920
mov r8, qword [rbp + 0x180]
lea rdx, [rbp + 0x170]
cmp r13, 0x10
lea rcx, [rbp + 0x30]
movups xmm0, xmmword [rax]
cmovae rdx, qword [rbp + 0x170]
movups xmmword [rbp + 0x30], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x40], xmm1
mov qword [rax + 0x10], r14
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
call fcn.1800bf920
mov r8d, 1
lea rdx, [0x180116cb0]
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x20], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x10], xmm1
mov qword [rax + 0x10], r14
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
lea rcx, [rbp - 0x20]
call fcn.1800bf920
mov qword [rbp - 0x70], r14
lea rdx, [rbp + 0x1b8]
mov qword [rbp - 0x68], r14
lea rcx, [rbp + 0xe0]
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x80], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x70], xmm1
mov qword [rax + 0x10], r14
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
call fcn.1800bfad0
lea rdx, [rbp + 0x150]
mov rdi, rax
lea rcx, [rbp + 0x100]
call fcn.1800bfad0
lea rdx, [rbp + 0x170]
mov rbx, rax
lea rcx, [rbp + 0x120]
call fcn.1800bfad0
mov rdx, rax
lea rcx, [rbp + 0xc0]
mov r9, rdi
mov r8, rbx
call fcn.1800a5830
mov rcx, qword [rbp - 0x68]
mov rdx, rax
mov r9, qword [rbp - 0x70]
mov r8, qword [rax + 0x10]
mov rax, rcx
sub rax, r9
cmp r8, rax
jbe 0x1800aa9a9
mov rax, qword [rdx + 0x18]
sub rax, r8
cmp rax, r9
jb 0x1800aa9a9
cmp rcx, 0x10
lea r8, [rbp - 0x80]
mov rcx, rdx
cmovae r8, qword [rbp - 0x80]
call fcn.1800c47f0
jmp 0x1800aa9bc
cmp qword [rdx + 0x18], 0x10
jb 0x1800aa9b3
mov rdx, qword [rdx]
lea rcx, [rbp - 0x80]
call fcn.1800bf920
movups xmm0, xmmword [rax]
mov r8d, 3
lea rdx, [0x180116cac]
lea rcx, [rsp + 0x60]
movups xmmword [rsp + 0x60], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x70], xmm1
mov byte [rax], 0
mov qword [rax + 0x18], 0xf
mov qword [rax + 0x10], r14
call fcn.1800bf920
movups xmm0, xmmword [rax]
movups xmm1, xmmword [rax + 0x10]
mov qword [rax + 0x10], r14
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
mov rdx, qword [0x18012aa50]
movups xmmword [rbp + 8], xmm0
movups xmmword [rbp + 0xb0], xmm1
cmp rdx, 0x10
jb 0x1800aaa60
mov rcx, qword [0x18012aa38]
inc rdx
cmp rdx, 0x1000
jb 0x1800aaa50
mov r8, qword [rcx - 8]
add rdx, 0x27
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x1800ab020
mov rcx, r8
call fcn.1800cd020
movups xmm0, xmmword [rbp + 8]
movups xmm1, xmmword [rbp + 0xb0]
mov rdx, qword [rsp + 0x78]
movups xmmword [0x18012aa38], xmm0
movups xmmword [0x18012aa48], xmm1
cmp rdx, 0x10
jb 0x1800aaaab
mov rcx, qword [rsp + 0x60]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800aaaa6
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800ab020
call fcn.1800cd020
mov rdx, qword [rbp - 0x68]
mov qword [rsp + 0x70], r14
mov qword [rsp + 0x78], 0xf
mov byte [rsp + 0x60], 0
cmp rdx, 0x10
jb 0x1800aaaf9
mov rcx, qword [rbp - 0x80]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800aaaf4
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800ab020
call fcn.1800cd020
mov rdx, qword [rbp - 8]
mov qword [rbp - 0x70], r14
mov qword [rbp - 0x68], 0xf
mov byte [rbp - 0x80], 0
cmp rdx, 0x10
jb 0x1800aab44
mov rcx, qword [rbp - 0x20]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800aab3f
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800ab020
call fcn.1800cd020
mov rdx, qword [rbp + 0x48]
mov qword [rbp - 0x10], r14
mov qword [rbp - 8], 0xf
mov byte [rbp - 0x20], 0
cmp rdx, 0x10
jb 0x1800aab8f
mov rcx, qword [rbp + 0x30]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800aab8a
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800ab020
call fcn.1800cd020
mov rdx, qword [rbp + 0x68]
mov qword [rbp + 0x40], r14
mov qword [rbp + 0x48], 0xf
mov byte [rbp + 0x30], 0
cmp rdx, 0x10
jb 0x1800aabda
mov rcx, qword [rbp + 0x50]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800aabd5
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800ab020
call fcn.1800cd020
mov rdx, qword [rbp + 0x88]
mov qword [rbp + 0x60], r14
mov qword [rbp + 0x68], 0xf
mov byte [rbp + 0x50], 0
cmp rdx, 0x10
jb 0x1800aac28
mov rcx, qword [rbp + 0x70]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800aac23
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800ab020
call fcn.1800cd020
mov rdx, qword [rbp + 0xa8]
mov qword [rbp + 0x80], r14
mov qword [rbp + 0x88], 0xf
mov byte [rbp + 0x70], 0
cmp rdx, 0x10
jb 0x1800aac7f
mov rcx, qword [rbp + 0x90]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800aac7a
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800ab020
call fcn.1800cd020
mov rdx, qword [rbp - 0x48]
mov qword [rbp + 0xa0], r14
mov qword [rbp + 0xa8], 0xf
mov byte [rbp + 0x90], 0
cmp rdx, 0x10
jb 0x1800aacd3
mov rcx, qword [rbp - 0x60]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800aacce
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800ab020
call fcn.1800cd020
mov rdx, qword [rbp - 0x28]
mov qword [rbp - 0x50], r14
mov qword [rbp - 0x48], 0xf
mov byte [rbp - 0x60], 0
cmp rdx, 0x10
jb 0x1800aad1e
mov rcx, qword [rbp - 0x40]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800aad19
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800ab020
call fcn.1800cd020
mov rdx, qword [rbp + 0xd8]
mov qword [rbp - 0x30], r14
mov qword [rbp - 0x28], 0xf
mov byte [rbp - 0x40], 0
cmp rdx, 0x10
jb 0x1800aad6f
mov rcx, qword [rbp + 0xc0]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800aad6a
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800ab020
call fcn.1800cd020
inc dword [0x18012da18]
xor r8d, r8d
lea rdx, [0x18010c0b0]
lea rcx, [rbp + 0x150]
call fcn.1800c0190
xor r8d, r8d
lea rdx, [0x18010c0b0]
lea rcx, [rbp + 0x170]
call fcn.1800c0190
xor r8d, r8d
lea rdx, [0x18010c0b0]
lea rcx, [rbp + 0x1b8]
call fcn.1800c0190
mov rdx, qword [rbp + 0x210]
cmp rdx, 8
jb 0x1800aadfd
mov rcx, qword [rbp + 0x1f8]
lea rdx, [rdx*2 + 2]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800aadf8
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800aaff6
call fcn.1800cd020
mov r13, qword [rbp + 0x188]
mov r12, qword [rbp + 0x168]
mov r15, qword [rbp + 0x1a8]
mov ecx, dword [rbp]
inc ecx
mov dword [rbp], ecx
cmp ecx, dword [rbp + 0x148]
jb 0x1800a9b23
mov rbx, qword [rbp + 0x1d0]
mov rcx, qword [rbp + 0x140]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
cmp rbx, 0x10
jb 0x1800aae75
mov rcx, qword [rbp + 0x1b8]
lea rdx, [rbx + 1]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800aae70
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800ab002
call fcn.1800cd020
cmp r13, 0x10
jb 0x1800aaeb0
mov rcx, qword [rbp + 0x170]
lea rdx, [r13 + 1]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800aaeab
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800ab002
call fcn.1800cd020
cmp r12, 0x10
jb 0x1800aaeec
mov rcx, qword [rbp + 0x150]
lea rdx, [r12 + 1]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800aaee7
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800ab002
call fcn.1800cd020
cmp r15, 0x10
jb 0x1800aaf27
mov rcx, qword [rbp + 0x190]
lea rdx, [r15 + 1]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800aaf22
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800ab002
call fcn.1800cd020
mov rdx, qword [rbp + 0x1f0]
cmp rdx, 0x10
jb 0x1800aaf68
mov rcx, qword [rbp + 0x1d8]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800aaf63
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800aaffc
call fcn.1800cd020
mov rdx, qword [rsi + 0x18]
mov qword [rbp + 0x1e8], r14
mov qword [rbp + 0x1f0], 0xf
mov byte [rbp + 0x1d8], 0
cmp rdx, 0x10
jb 0x1800aafb7
mov rcx, qword [rsi]
inc rdx
cmp rdx, 0x1000
jb 0x1800aafb2
mov r8, qword [rcx - 8]
add rdx, 0x27
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x1800aaffc
mov rcx, r8
call fcn.1800cd020
mov qword [rsi + 0x10], r14
mov qword [rsi + 0x18], 0xf
mov byte [rsi], 0
mov rcx, qword [rbp + 0x660]
xor rcx, rsp
call fcn.1800ccd60
lea r11, [rsp + 0x770]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call fcn.1800dce48
int3
call fcn.1800dce48
int3
call fcn.1800dce48
int3
call fcn.1800dce48
int3
call fcn.1800dce48
int3
call fcn.1800dce48
int3
call fcn.1800dce48
int3
call fcn.1800dce48
int3