Function at 0x1800ac280
Capabilities:
Query or enumerate registry key

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x670]
sub rsp, 0x770
mov rax, qword [0x180126010]
xor rax, rsp
mov qword [rbp + 0x660], rax
xor r14d, r14d
mov qword [rbp - 8], rcx
mov rbx, rcx
mov qword [rbp + 0x1d8], r14
lea rdx, str.SOFTWAREMartin_PrikrylWinSCP_2Sessions
mov qword [rbp + 0x1e8], r14
lea rcx, [rbp + 0x1d8]
mov qword [rbp + 0x1f0], 0xf
lea r8d, [r14 + 0x29]
call fcn.1800bfba0
cmp qword [rbp + 0x1f0], 0x10
lea rax, [rbp + 0x140]
lea rdx, [rbp + 0x1d8]
mov qword [rsp + 0x20], rax
cmovae rdx, qword [rbp + 0x1d8]
mov r9d, 0x20019
xor r8d, r8d
mov rcx, 0xffffffff80000001
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x1800ad498
xor edx, edx
lea rcx, [rbp + 0x240]
mov r8d, 0x208
call fcn.1800d0180
xor edx, edx
lea rcx, [rbp + 0x450]
mov r8d, 0x208
call fcn.1800d0180
mov rcx, qword [rbp + 0x140]
lea rax, [rbp + 0x228]
mov qword [rsp + 0x58], rax
lea r8, [rbp + 0x190]
mov edi, 0xf
mov dword [rbp + 0x148], r14d
xor ebx, ebx
mov qword [rbp + 0x170], r14
lea rax, [rbp + 0x224]
mov qword [rbp + 0x180], r14
mov qword [rsp + 0x50], rax
lea rdx, [rbp + 0x450]
lea rax, [rbp + 0x220]
mov qword [rbp + 0x150], r14
mov qword [rsp + 0x48], rax
mov r15d, r14d
lea rax, [rbp + 0x21c]
mov qword [rbp + 0x160], r14
mov qword [rsp + 0x40], rax
mov r13d, r14d
lea rax, [rbp + 0x218]
mov dword [rbp + 0x190], 0x104
mov qword [rsp + 0x38], rax
mov r12d, r14d
lea rax, [rbp + 0x234]
mov qword [rbp - 0x18], rdi
mov qword [rsp + 0x30], rax
xor r9d, r9d
lea rax, [rbp + 0x230]
mov qword [rbp + 0x188], rdi
mov qword [rsp + 0x28], rax
mov esi, edi
lea rax, [rbp + 0x148]
mov qword [rbp + 0x168], rdi
mov qword [rsp + 0x20], rax
mov r14d, edi
mov qword [rbp - 0x10], rbx
mov qword [rbp + 0x1b8], rbx
mov qword [rbp + 0x1c8], rbx
mov qword [rbp + 0x1d0], rdi
call qword [sym.imp.ADVAPI32.dll_RegQueryInfoKeyW]
mov eax, dword [rbp + 0x148]
test eax, eax
je 0x1800ad3a1
xor ecx, ecx
mov dword [rbp - 0x60], ecx
test eax, eax
je 0x1800ad3a1
xor r14d, r14d
lea rax, [rbp + 0x228]
mov dword [rbp + 0x194], 0x1000
mov qword [rsp + 0x38], rax
lea r9, [rbp + 0x194]
mov qword [rsp + 0x30], r14
lea r8, [rbp + 0x240]
mov edx, ecx
mov qword [rsp + 0x28], r14
mov rcx, qword [rbp + 0x140]
mov qword [rsp + 0x20], r14
call qword [sym.imp.ADVAPI32.dll_RegEnumKeyExW]
test eax, eax
jne 0x1800ad37f
mov qword [rbp + 0x1f8], r14
lea rax, [rbp + 0x240]
mov qword [rbp + 0x208], r14
mov r8, 0xffffffffffffffff
mov qword [rbp + 0x210], 7
inc r8
cmp word [rax + r8*2], 0
jne 0x1800ac4d5
lea rdx, [rbp + 0x240]
lea rcx, [rbp + 0x1f8]
call fcn.1800bf8b0
cmp qword [rbp + 0x210], 8
lea rdx, [rbp + 0x1f8]
mov rax, qword [rbp + 0x208]
lea rsi, [rbp + 0x1f8]
cmovae rdx, qword [rbp + 0x1f8]
mov rdi, r14
cmovae rsi, qword [rbp + 0x1f8]
mov qword [rsp + 0x60], r14
mov qword [rsp + 0x70], r14
mov r14d, 0xf
lea rbx, [rdx + rax*2]
mov qword [rsp + 0x78], r14
mov rdx, rbx
sub rdx, rsi
sar rdx, 1
cmp rdx, 0x10
jb 0x1800ac561
lea rcx, [rsp + 0x60]
call fcn.1800c7440
mov r14, qword [rsp + 0x78]
xor edi, edi
mov qword [rsp + 0x70], rdi
cmp rsi, rbx
je 0x1800ac5af
movzx r9d, byte [rsi]
cmp rdi, r14
jae 0x1800ac592
lea rax, [rdi + 1]
cmp r14, 0x10
mov qword [rsp + 0x70], rax
lea rax, [rsp + 0x60]
cmovae rax, qword [rsp + 0x60]
mov byte [rax + rdi], r9b
mov byte [rax + rdi + 1], 0
jmp 0x1800ac59c
lea rcx, [rsp + 0x60]
call fcn.1800c0bc0
mov r14, qword [rsp + 0x78]
add rsi, 2
mov rdi, qword [rsp + 0x70]
cmp rsi, rbx
jne 0x1800ac566
mov rdx, qword [rbp - 0x18]
cmp rdx, 0x10
jb 0x1800ac5e9
inc rdx
mov rax, r15
cmp rdx, 0x1000
jb 0x1800ac5e1
mov r15, qword [r15 - 8]
add rdx, 0x27
sub rax, r15
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800ad5a3
mov rcx, r15
call fcn.1800cd2cc
movups xmm0, xmmword [rsp + 0x60]
xor eax, eax
lea rdx, str.HostName
movups xmm1, xmmword [rsp + 0x70]
lea rcx, [rbp - 0x80]
mov qword [rbp - 0x80], rax
movups xmmword [rbp + 0x198], xmm0
lea r8d, [rax + 8]
mov qword [rbp - 0x70], rax
movups xmmword [rbp + 0x1a8], xmm1
mov qword [rbp - 0x68], 0xf
call fcn.1800bfba0
movabs r15, 0x7fffffffffffffff
mov rax, r15
sub rax, rdi
cmp rax, 0x2a
jb 0x1800ad567
mov qword [rsp + 0x30], rdi
lea rax, [rbp + 0x198]
cmp r14, 0x10
lea r9, str.SOFTWAREMartin_PrikrylWinSCP_2Sessions_
lea rcx, [rbp]
cmovae rax, qword [rsp + 0x60]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], 0x2a
call fcn.1800c27f0
lea r9, [rbp - 0x80]
lea r8, [rbp]
lea rcx, [rbp - 0x58]
call fcn.1800ac0e0
mov rbx, rax
lea rax, [rbp + 0x170]
cmp rax, rbx
je 0x1800ac703
mov rax, qword [rbp + 0x188]
cmp rax, 0x10
jb 0x1800ac6d3
lea rdx, [rax + 1]
mov rax, r13
cmp rdx, 0x1000
jb 0x1800ac6cb
mov r13, qword [r13 - 8]
add rdx, 0x27
sub rax, r13
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800ad579
mov rcx, r13
call fcn.1800cd2cc
movups xmm0, xmmword [rbx]
xor r14d, r14d
movups xmm1, xmmword [rbx + 0x10]
mov qword [rbx + 0x10], r14
movups xmmword [rbp + 0x170], xmm0
mov r13, qword [rbp + 0x170]
movups xmmword [rbp + 0x180], xmm1
mov qword [rbx + 0x18], 0xf
mov byte [rbx], r14b
jmp 0x1800ac706
xor r14d, r14d
mov rdx, qword [rbp - 0x40]
cmp rdx, 0x10
jb 0x1800ac741
mov rcx, qword [rbp - 0x58]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800ac73c
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800ad579
call fcn.1800cd2cc
mov r8d, 8
mov qword [rbp - 0x80], r14
lea rdx, str.UserName
mov qword [rbp - 0x70], r14
lea rcx, [rbp - 0x80]
mov qword [rbp - 0x68], 0xf
call fcn.1800bfba0
mov rcx, qword [rbp + 0x1a8]
mov rax, r15
sub rax, rcx
cmp rax, 0x2a
jb 0x1800ad5af
cmp qword [rbp + 0x1b0], 0x10
lea rax, [rbp + 0x198]
mov qword [rsp + 0x30], rcx
lea r9, str.SOFTWAREMartin_PrikrylWinSCP_2Sessions_
cmovae rax, qword [rbp + 0x198]
lea rcx, [rbp]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], 0x2a
call fcn.1800c27f0
lea r9, [rbp - 0x80]
lea r8, [rbp]
lea rcx, [rbp - 0x58]
call fcn.1800ac0e0
mov rbx, rax
lea rax, [rbp + 0x150]
cmp rax, rbx
je 0x1800ac842
mov rax, qword [rbp + 0x168]
cmp rax, 0x10
jb 0x1800ac817
lea rdx, [rax + 1]
mov rax, r12
cmp rdx, 0x1000
jb 0x1800ac80f
mov r12, qword [r12 - 8]
add rdx, 0x27
sub rax, r12
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800ad57f
mov rcx, r12
call fcn.1800cd2cc
movups xmm0, xmmword [rbx]
movups xmm1, xmmword [rbx + 0x10]
mov qword [rbx + 0x10], r14
movups xmmword [rbp + 0x150], xmm0
mov r12, qword [rbp + 0x150]
movups xmmword [rbp + 0x160], xmm1
mov qword [rbx + 0x18], 0xf
mov byte [rbx], 0
mov rdx, qword [rbp - 0x40]
cmp rdx, 0x10
jb 0x1800ac87d
mov rcx, qword [rbp - 0x58]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800ac878
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800ad57f
call fcn.1800cd2cc
mov r8d, 8
mov qword [rbp - 0x80], r14
lea rdx, str.Password
mov qword [rbp - 0x70], r14
lea rcx, [rbp - 0x80]
mov qword [rbp - 0x68], 0xf
call fcn.1800bfba0
mov rcx, qword [rbp + 0x1a8]
mov rax, r15
sub rax, rcx
cmp rax, 0x2a
jb 0x1800ad5a9
cmp qword [rbp + 0x1b0], 0x10
lea rax, [rbp + 0x198]
mov qword [rsp + 0x30], rcx
lea r9, str.SOFTWAREMartin_PrikrylWinSCP_2Sessions_
cmovae rax, qword [rbp + 0x198]
lea rcx, [rbp]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], 0x2a
call fcn.1800c27f0
lea r9, [rbp - 0x80]
lea r8, [rbp]
lea rcx, [rbp - 0x58]
call fcn.1800ac0e0
mov rbx, rax
lea rax, [rbp + 0x1b8]
cmp rax, rbx
je 0x1800ac977
mov rax, qword [rbp + 0x1d0]
cmp rax, 0x10
jb 0x1800ac953
mov rcx, qword [rbp - 0x10]
lea rdx, [rax + 1]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800ac94e
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800ad585
call fcn.1800cd2cc
movups xmm0, xmmword [rbx]
movups xmm1, xmmword [rbx + 0x10]
mov qword [rbx + 0x10], r14
movups xmmword [rbp + 0x1b8], xmm0
mov qword [rbx + 0x18], 0xf
movups xmmword [rbp + 0x1c8], xmm1
mov byte [rbx], 0
mov rdx, qword [rbp - 0x40]
cmp rdx, 0x10
jb 0x1800ac9b2
mov rcx, qword [rbp - 0x58]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800ac9ad
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800ad585
call fcn.1800cd2cc
mov rcx, qword [rbp + 0x180]
test rcx, rcx
je 0x1800ad2cc
cmp qword [rbp + 0x160], 0
je 0x1800ad2cc
cmp qword [rbp + 0x1c8], 0
je 0x1800ad2cc
mov rsi, qword [rbp - 8]
mov rdx, rsi
mov rax, qword [rsi + 0x18]
cmp rax, 0x10
jb 0x1800ac9f2
mov rdx, qword [rsi]
cmp qword [rsi + 0x10], 1
jne 0x1800aca02
cmp byte [rdx], 0x30
jne 0x1800aca02
mov dl, 1
jmp 0x1800aca04
xor dl, dl
test dl, dl
je 0x1800aceda
mov rax, r15
sub rax, rcx
cmp rax, 1
jb 0x1800ad591
cmp qword [rbp + 0x188], 0x10
lea rax, [rbp + 0x170]
mov qword [rsp + 0x30], rcx
lea r9, [0x180115190]
cmovae rax, r13
lea rcx, [rbp - 0x80]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], 1
call fcn.1800c27f0
mov r8d, 1
lea rdx, [0x18011518c]
lea rcx, [rbp - 0x80]
call fcn.1800bf270
mov r8d, 1
lea rdx, [0x180115190]
lea rcx, [rbp - 0x38]
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x38], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x28], xmm1
mov qword [rax + 0x10], r14
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
call fcn.1800bf270
cmp qword [rbp + 0x168], 0x10
lea rdx, [rbp + 0x150]
mov r8, qword [rbp + 0x160]
lea rcx, [rsp + 0x60]
mov qword [rsp + 0x60], r14
cmovae rdx, r12
mov qword [rsp + 0x70], r14
mov qword [rsp + 0x78], r14
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x60], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x70], xmm1
mov qword [rax + 0x10], r14
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
call fcn.1800bf270
mov r8d, 1
lea rdx, [0x18011518c]
lea rcx, [rbp + 0x20]
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x20], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x30], xmm1
mov qword [rax + 0x10], r14
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
call fcn.1800bf270
mov r8d, 1
lea rdx, [0x180115190]
lea rcx, [rbp + 0x40]
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x40], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x50], xmm1
mov qword [rax + 0x10], r14
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
call fcn.1800bf270
lea rdx, [rbp + 0x1b8]
lea rcx, [rbp + 0xe0]
movups xmm0, xmmword [rax]
movups xmm1, xmmword [rax + 0x10]
mov qword [rax + 0x10], r14
movups xmmword [rbp + 0x60], xmm0
mov qword [rax + 0x18], 0xf
movups xmmword [rbp + 0x70], xmm1
mov byte [rax], 0
call fcn.1800bf440
lea rdx, [rbp + 0x170]
mov rdi, rax
lea rcx, [rbp + 0x100]
call fcn.1800bf440
lea rdx, [rbp + 0x150]
mov rbx, rax
lea rcx, [rbp + 0x120]
call fcn.1800bf440
mov rdx, rax
mov r9, rdi
lea rcx, [rbp]
mov r8, rbx
call fcn.1800a8530
mov r9, rax
lea r8, [rbp + 0x60]
lea rcx, [rbp - 0x58]
call fcn.1800c2600
mov r8d, 2
lea rdx, [0x1801151a0]
lea rcx, [rbp - 0x58]
call fcn.1800bf270
lea rdx, [rbp + 0x80]
movups xmm0, xmmword [rax]
movups xmm1, xmmword [rax + 0x10]
mov qword [rax + 0x10], r14
movq rcx, xmm0
mov qword [rax + 0x18], 0xf
movups xmmword [rbp + 0x80], xmm0
mov byte [rax], 0
movdqa xmm0, xmm1
movq r8, xmm1
psrldq xmm0, 8
movq rax, xmm0
cmp rax, 0x10
movups xmmword [rbp + 0x90], xmm1
cmovae rdx, rcx
lea rcx, [0x180128b58]
call fcn.1800bf270
mov rdx, qword [rbp + 0x98]
cmp rdx, 0x10
jb 0x1800acc84
mov rcx, qword [rbp + 0x80]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800acc7f
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800ad58b
call fcn.1800cd2cc
mov rdx, qword [rbp - 0x40]
cmp rdx, 0x10
jb 0x1800accbf
mov rcx, qword [rbp - 0x58]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800accba
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800ad58b
call fcn.1800cd2cc
mov rdx, qword [rbp + 0x78]
mov qword [rbp - 0x48], r14
mov qword [rbp - 0x40], 0xf
mov byte [rbp - 0x58], 0
cmp rdx, 0x10
jb 0x1800acd0a
mov rcx, qword [rbp + 0x60]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800acd05
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800ad58b
call fcn.1800cd2cc
mov rdx, qword [rbp + 0x58]
cmp rdx, 0x10
jb 0x1800acd45
mov rcx, qword [rbp + 0x40]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800acd40
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800ad58b
call fcn.1800cd2cc
mov rdx, qword [rbp + 0x38]
mov qword [rbp + 0x50], r14
mov qword [rbp + 0x58], 0xf
mov byte [rbp + 0x40], 0
cmp rdx, 0x10
jb 0x1800acd90
mov rcx, qword [rbp + 0x20]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800acd8b
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800ad58b
call fcn.1800cd2cc
mov rdx, qword [rsp + 0x78]
mov qword [rbp + 0x30], r14
mov qword [rbp + 0x38], 0xf
mov byte [rbp + 0x20], 0
cmp rdx, 0x10
jb 0x1800acddd
mov rcx, qword [rsp + 0x60]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800acdd8
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800ad58b
call fcn.1800cd2cc
mov rdx, qword [rbp - 0x20]
mov qword [rsp + 0x70], r14
mov qword [rsp + 0x78], 0xf
mov byte [rsp + 0x60], 0
cmp rdx, 0x10
jb 0x1800ace2b
mov rcx, qword [rbp - 0x38]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800ace26
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800ad58b
call fcn.1800cd2cc
mov rdx, qword [rbp - 0x68]
mov qword [rbp - 0x28], r14
mov qword [rbp - 0x20], 0xf
mov byte [rbp - 0x38], 0
cmp rdx, 0x10
jb 0x1800ace76
mov rcx, qword [rbp - 0x80]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800ace71
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800ad58b
call fcn.1800cd2cc
mov rdx, qword [rbp + 0x18]
mov qword [rbp - 0x70], r14
mov qword [rbp - 0x68], 0xf
mov byte [rbp - 0x80], 0
cmp rdx, 0x10
jb 0x1800acec1
mov rcx, qword [rbp]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800acebc
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800ad58b
call fcn.1800cd2cc
mov rax, qword [rsi + 0x18]
mov r13, qword [rbp + 0x170]
mov r12, qword [rbp + 0x150]
mov rcx, qword [rbp + 0x180]
mov rdx, rsi
cmp rax, 0x10
jb 0x1800acee6
mov rdx, qword [rsi]
cmp qword [rsi + 0x10], 1
jne 0x1800acef6
cmp byte [rdx], 0x31
jne 0x1800acef6
mov al, 1
jmp 0x1800acef8
xor al, al
test al, al
je 0x1800ad2c6
mov rax, r15
sub rax, rcx
cmp rax, 0xb
jb 0x1800ad59d
cmp qword [rbp + 0x188], 0x10
lea rax, [rbp + 0x170]
mov qword [rsp + 0x30], rcx
lea r9, str.sshWinSCP
cmovae rax, r13
lea rcx, [rbp - 0x58]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], 0xb
call fcn.1800c27f0
mov r8d, 1
lea rdx, [0x180115198]
lea rcx, [rbp - 0x58]
call fcn.1800bf270
cmp qword [rbp + 0x168], 0x10
lea rdx, [rbp + 0x150]
mov r8, qword [rbp + 0x160]
lea rcx, [rsp + 0x60]
mov qword [rsp + 0x60], r14
cmovae rdx, r12
mov qword [rsp + 0x70], r14
mov qword [rsp + 0x78], r14
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x60], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x70], xmm1
mov qword [rax + 0x10], r14
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
call fcn.1800bf270
mov r8d, 1
lea rdx, [0x180115198]
lea rcx, [rbp - 0x38]
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x38], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x28], xmm1
mov qword [rax + 0x10], r14
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
call fcn.1800bf270
lea rdx, [rbp + 0x1b8]
lea rcx, [rbp + 0x120]
movups xmm0, xmmword [rax]
movups xmm1, xmmword [rax + 0x10]
mov qword [rax + 0x10], r14
movups xmmword [rbp + 0xc0], xmm0
mov qword [rax + 0x18], 0xf
movups xmmword [rbp + 0xd0], xmm1
mov byte [rax], 0
call fcn.1800bf440
lea rdx, [rbp + 0x170]
mov rdi, rax
lea rcx, [rbp + 0x100]
call fcn.1800bf440
lea rdx, [rbp + 0x150]
mov rbx, rax
lea rcx, [rbp + 0xe0]
call fcn.1800bf440
mov rdx, rax
lea rcx, [rbp]
mov r9, rdi
mov r8, rbx
call fcn.1800a8530
mov r9, rax
lea r8, [rbp + 0xc0]
lea rcx, [rbp - 0x80]
call fcn.1800c2600
mov r8d, 3
lea rdx, [0x180115194]
lea rcx, [rbp - 0x80]
call fcn.1800bf270
lea rdx, [rbp + 0xa0]
movups xmm0, xmmword [rax]
movups xmm1, xmmword [rax + 0x10]
mov qword [rax + 0x10], r14
movups xmmword [rbp + 0xa0], xmm0
mov qword [rax + 0x18], 0xf
movq rcx, xmm0
mov byte [rax], 0
movdqa xmm0, xmm1
movups xmmword [rbp + 0xb0], xmm1
psrldq xmm0, 8
movq r8, xmm1
movq rax, xmm0
cmp rax, 0x10
cmovae rdx, rcx
lea rcx, [0x180128b58]
call fcn.1800bf270
mov rdx, qword [rbp + 0xb8]
cmp rdx, 0x10
jb 0x1800ad119
mov rcx, qword [rbp + 0xa0]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800ad114
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800ad597
call fcn.1800cd2cc
mov rdx, qword [rbp - 0x68]
cmp rdx, 0x10
jb 0x1800ad154
mov rcx, qword [rbp - 0x80]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800ad14f
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800ad597
call fcn.1800cd2cc
mov rdx, qword [rbp + 0xd8]
mov qword [rbp - 0x70], r14
mov qword [rbp - 0x68], 0xf
mov byte [rbp - 0x80], 0
cmp rdx, 0x10
jb 0x1800ad1a5
mov rcx, qword [rbp + 0xc0]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800ad1a0
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800ad597
call fcn.1800cd2cc
mov rdx, qword [rbp - 0x20]
cmp rdx, 0x10
jb 0x1800ad1e0
mov rcx, qword [rbp - 0x38]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800ad1db
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800ad597
call fcn.1800cd2cc
mov rdx, qword [rsp + 0x78]
mov qword [rbp - 0x28], r14
mov qword [rbp - 0x20], 0xf
mov byte [rbp - 0x38], 0
cmp rdx, 0x10
jb 0x1800ad22d
mov rcx, qword [rsp + 0x60]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800ad228
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800ad597
call fcn.1800cd2cc
mov rdx, qword [rbp - 0x40]
mov qword [rsp + 0x70], r14
mov qword [rsp + 0x78], 0xf
mov byte [rsp + 0x60], 0
cmp rdx, 0x10
jb 0x1800ad27b
mov rcx, qword [rbp - 0x58]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800ad276
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800ad597
call fcn.1800cd2cc
mov rdx, qword [rbp + 0x18]
mov qword [rbp - 0x48], r14
mov qword [rbp - 0x40], 0xf
mov byte [rbp - 0x58], 0
cmp rdx, 0x10
jb 0x1800ad2c6
mov rcx, qword [rbp]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800ad2c1
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800ad597
call fcn.1800cd2cc
inc dword [0x18012bad0]
xor r8d, r8d
lea rdx, [0x18010a500]
lea rcx, [rbp + 0x170]
call fcn.1800bfba0
xor r8d, r8d
lea rdx, [0x18010a500]
lea rcx, [rbp + 0x150]
call fcn.1800bfba0
xor r8d, r8d
lea rdx, [0x18010a500]
lea rcx, [rbp + 0x1b8]
call fcn.1800bfba0
mov rdx, qword [rbp + 0x210]
cmp rdx, 8
jb 0x1800ad354
mov rcx, qword [rbp + 0x1f8]
lea rdx, [rdx*2 + 2]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800ad34f
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800ad5a3
call fcn.1800cd2cc
mov rbx, qword [rbp + 0x1b8]
mov rdi, qword [rbp + 0x1b0]
mov r12, qword [rbp + 0x150]
mov r13, qword [rbp + 0x170]
mov r15, qword [rbp + 0x198]
mov qword [rbp - 0x10], rbx
mov qword [rbp - 0x18], rdi
mov ecx, dword [rbp - 0x60]
inc ecx
mov dword [rbp - 0x60], ecx
cmp ecx, dword [rbp + 0x148]
jb 0x1800ac464
mov rsi, qword [rbp + 0x188]
mov r14, qword [rbp + 0x168]
mov rcx, qword [rbp + 0x140]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov rdx, qword [rbp + 0x1d0]
cmp rdx, 0x10
jb 0x1800ad3eb
inc rdx
mov rax, rbx
cmp rdx, 0x1000
jb 0x1800ad3e3
mov rbx, qword [rbx - 8]
add rdx, 0x27
sub rax, rbx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800ad573
mov rcx, rbx
call fcn.1800cd2cc
cmp r14, 0x10
jb 0x1800ad423
lea rdx, [r14 + 1]
mov rax, r12
cmp rdx, 0x1000
jb 0x1800ad41b
mov r12, qword [r12 - 8]
add rdx, 0x27
sub rax, r12
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800ad573
mov rcx, r12
call fcn.1800cd2cc
cmp rsi, 0x10
jb 0x1800ad45a
lea rdx, [rsi + 1]
mov rax, r13
cmp rdx, 0x1000
jb 0x1800ad452
mov r13, qword [r13 - 8]
add rdx, 0x27
sub rax, r13
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800ad573
mov rcx, r13
call fcn.1800cd2cc
cmp rdi, 0x10
jb 0x1800ad491
lea rdx, [rdi + 1]
mov rax, r15
cmp rdx, 0x1000
jb 0x1800ad489
mov r15, qword [r15 - 8]
add rdx, 0x27
sub rax, r15
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800ad573
mov rcx, r15
call fcn.1800cd2cc
mov rbx, qword [rbp - 8]
xor r14d, r14d
mov rdx, qword [rbp + 0x1f0]
cmp rdx, 0x10
jb 0x1800ad4d9
mov rcx, qword [rbp + 0x1d8]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800ad4d4
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800ad56d
call fcn.1800cd2cc
mov rdx, qword [rbx + 0x18]
mov qword [rbp + 0x1e8], r14
mov qword [rbp + 0x1f0], 0xf
mov byte [rbp + 0x1d8], 0
cmp rdx, 0x10
jb 0x1800ad528
mov rcx, qword [rbx]
inc rdx
cmp rdx, 0x1000
jb 0x1800ad523
mov r8, qword [rcx - 8]
add rdx, 0x27
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x1800ad56d
mov rcx, r8
call fcn.1800cd2cc
mov qword [rbx + 0x10], r14
mov qword [rbx + 0x18], 0xf
mov byte [rbx], 0
mov rcx, qword [rbp + 0x660]
xor rcx, rsp
call fcn.1800cd010
lea r11, [rsp + 0x770]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call fcn.180088c60
int3
call fcn.1800dc358
int3
call fcn.1800dc358
int3
call fcn.1800dc358
int3
call fcn.1800dc358
int3
call fcn.1800dc358
int3
call fcn.1800dc358
int3
call fcn.180088c60
int3
call fcn.1800dc358
int3
call fcn.180088c60
int3
call fcn.1800dc358
int3
call fcn.180088c60
int3
call fcn.180088c60
int3