Function at 0x1403ff5d6
Capabilities:
Set registry value

Disassembly:
push r15
push r14
add r15w, 0x6169
movsx rax, sp
push r13
movsx r13w, r9b
dec r13w
push r12
rcl r15b, cl
movsxd rax, r13d
btc r12d, 0xdc
push rsi
btc rax, 0x12
rol r15b, cl
push rdi
mov r13b, r12b
xor r15w, 0x7c46
push rbp
rcl r15b, cl
xor r14, r9
stc
push rbx
xchg r13b, al
sub rsp, 0x2f8
movabs rax, 0xe009ec3224c8fd6e
movsx ebp, dx
mov qword [rsp + 0x2e0], rax
movzx ebp, dx
mov qword [rsp + 0x40], rax
movabs rax, 0x2204bcb80ebea5a3
mov bx, 0x210e
mov qword [rsp + 0x2d8], rax
cmovb r14, r10
mov qword [rsp + 0x48], rax
movabs rax, 0xfbc9f38de01f2fa2
jmp 0x1403ff671
mov qword [rsp + 0x2d0], rax
movsx rsi, bp
mov qword [rsp + 0x50], rax
movabs rax, 0x17a75ff95317a686
mov qword [rsp + 0x2c8], rax
movsx r15, bp
mov qword [rsp + 0x58], rax
movzx rsi, di
setl bpl
movsx r15w, sil
movabs rax, 0xfd99d5578f55fa6f
mov qword [rsp + 0x2c0], rax
mov qword [rsp + 0x60], rax
not ebp
movzx r13d, r9w
movabs rax, 0x4b3964fdcd447246
movzx ebp, si
setp r12b
mov qword [rsp + 0x2b8], rax
setne bl
movsx r14, di
movzx r12, bx
mov qword [rsp + 0x68], rax
movabs rax, 0xee88324679eb2227
mov qword [rsp + 0x2b0], rax
cmovo r14, r12
movsx r13d, r12w
mov qword [rsp + 0x70], rax
movzx si, sil
movabs rax, 0x6d7346ad6d4ffefa
mov qword [rsp + 0x2a8], rax
bswap rsi
movsx r15d, dx
movsx bp, r12b
mov qword [rsp + 0x78], rax
movzx r14, r13w
movabs rax, 0xd093683aef376a76
mov qword [rsp + 0x2a0], rax
mov r13b, spl
bswap r14
not si
mov qword [rsp + 0x80], rax
not r13d
cwde
mov edi, 0x79cf6fda
movabs rax, 0xa80f93e9d32b8c6f
mov qword [rsp + 0x298], rax
movsx rdi, r11w
movzx r13d, r12w
movzx rbp, bp
mov qword [rsp + 0x88], rax
not bx
movzx rsi, ax
movabs rax, 0x33e730243394033e
mov qword [rsp + 0x290], rax
mov bp, 0x79dc
mov qword [rsp + 0x90], rax
setg sil
movabs rax, 0xe7e3977e114e6703
mov ebp, 0x15ea3541
movzx si, r13b
mov qword [rsp + 0x288], rax
mov qword [rsp + 0x98], rax
movsx r15w, dil
bswap ebp
movsx rdi, r11w
movabs rax, 0xb0b65ec58a603c8
mov qword [rsp + 0x280], rax
movzx r13w, bpl
bswap r14w
mov bh, 0x31
mov qword [rsp + 0xa0], rax
movabs rax, 0x6708be65ca8156d7
mov qword [rsp + 0x278], rax
mov qword [rsp + 0xa8], rax
movabs rax, 0x46a7044da5524090
not r15w
movzx r15d, si
mov qword [rsp + 0x270], rax
setae r15b
jmp 0x1403ff848
mov qword [rsp + 0xb0], rax
cdqe
movzx bp, spl
movabs rax, 0x4b8cb541ca050f46
movsxd rbp, ecx
movsx rbx, di
setle r14b
mov qword [rsp + 0x268], rax
movsxd rdi, r8d
xchg bl, bpl
jmp 0x1403ff87f
mov qword [rsp + 0xb8], rax
cmovbe rbp, rsi
xchg bh, ah
mov bpl, 0x9b
movabs rax, 0xe627ab41184af921
movzx r12w, r12b
mov r14b, bl
mov qword [rsp + 0x260], rax
mov bpl, r12b
mov qword [rsp + 0xc0], rax
cwde
movzx r14w, r10b
jmp 0x1403ff8c0
movabs rax, 0x34c77b6e31b9a
movsx rdi, r14w
cmovns r12d, ebx
mov qword [rsp + 0x258], rax
bswap rdi
not edi
mov qword [rsp + 0xc8], rax
movabs rax, 0xd8cf4ec0049852bb
mov qword [rsp + 0xd0], rax
not esi
movabs rax, 0xa5eac9844f8ea419
mov qword [rsp + 0xd8], rax
movsx edi, dx
jmp 0x1403ff915
mov qword [rsp + 0x30], 0
cwde
mov r12b, r14b
movsx r14, cx
mov dword [rsp + 0x3c], 0
xchg bl, r14b
not si
movabs rbp, 0x2eb490333e21dae3
mov qword [rsp + 0xe0], rbp
movzx r12, r13w
movsx bx, dl
movsx eax, sp
movabs r14, 0x28903e48668cb956
mov qword [rsp + 0xe8], r14
movabs r15, 0xe05dec612491fd3d
mov bx, 0x263e
movzx r13, r12w
cbw
mov qword [rsp + 0x100], r15
movabs r12, 0x2247bce40ef3a5e6
cwde
mov bl, spl
mov qword [rsp + 0x108], r12
bswap ax
cwde
xchg bl, r13b
movabs rsi, 0xfbacf3ffe06d2fd7
bswap r13w
movzx r13w, r10b
mov qword [rsp + 0x110], rsi
mov bx, bp
movabs rdi, 0x17c85fba5363a6e8
movsxd r13, esp
setno ah
mov qword [rsp + 0x118], rdi
movsx r13, r12w
movsxd rax, r10d
movabs rax, 0xfdf6d5258f21fa01
movzx bx, bpl
mov qword [rsp + 0x120], rax
movzx ebx, r9w
mov bh, al
bswap r13
mov rbx, rax
movzx r13w, dl
cwde
xchg al, r13b
movabs rax, 0x4b4d6498cd17722a
mov r13b, 0x42
movzx r13w, dil
movzx r13, di
mov qword [rsp + 0x2f0], rax
bswap r13w
mov qword [rsp + 0x128], rax
mov ax, r10w
movzx r13, r12w
cbw
movabs rax, 0xeefa322379b8227b
mov qword [rsp + 0x250], rax
mov r13w, r10w
movsx r13, ax
mov qword [rsp + 0x130], rax
bswap eax
movabs rax, 0x6d1646ce6d26fe8c
movsx r13, si
mov qword [rsp + 0x248], rax
jmp 0x1403ffa7b
mov qword [rsp + 0x138], rax
movsx eax, r8w
mov al, r10b
lahf
movabs rax, 0xd0fb6869ef6b6a05
xchg r13d, r13d
cmovae r13, r12
mov qword [rsp + 0x240], rax
movsxd r13, r12d
movsx r13w, bl
mov qword [rsp + 0x140], rax
movsxd r13, esp
movabs rax, 0xa86b938cd3598c0e
cmovl r13w, cx
movsx r13d, r13w
mov qword [rsp + 0x238], rax
movsxd r13, ebp
movzx r13d, ax
xchg r13d, r13d
mov qword [rsp + 0x148], rax
mov al, 0xe0
movabs rax, 0x3382304733f7037f
mov qword [rsp + 0x230], rax
xchg r13d, r13d
setp r13b
movsxd r13, r10d
mov qword [rsp + 0x150], rax
movabs rax, 0xe7b39722113d6770
movsx r13w, bpl
movsx r13, r15w
not r13w
mov qword [rsp + 0x228], rax
mov qword [rsp + 0x158], rax
mov r13b, 0xe4
cwde
movabs rax, 0xb66658d58d403a9
mov qword [rsp + 0x220], rax
movzx r13w, bpl
not r13b
mov qword [rsp + 0x160], rax
nop
movabs rax, 0x677abe00caf556b2
movzx r13d, bx
movzx r13w, r11b
mov qword [rsp + 0x218], rax
xchg r13b, r13b
mov qword [rsp + 0x168], rax
movsx ax, r8b
jmp 0x1403ffb8d
movabs rax, 0x46ce040ba50e40e3
not r13b
cmovg r13w, bp
movsx r13d, r14w
mov qword [rsp + 0x210], rax
movsx r13w, spl
movsx r13, r11w
mov qword [rsp + 0x170], rax
movsx r13d, di
cwde
movabs rax, 0x4bedb536ca600f34
mov qword [rsp + 0x208], rax
mov qword [rsp + 0x178], rax
movzx r13w, r13b
movabs rax, 0xe648ab111826f94d
mov r13d, r15d
movsxd r13, r8d
bswap r13w
mov qword [rsp + 0x200], rax
cmovae r13w, si
movzx r13w, cl
mov qword [rsp + 0x180], rax
movabs rax, 0x7a4c14b68a1bf6
movzx r13, bx
not r13b
movzx r13d, si
mov qword [rsp + 0x1f8], rax
setne r13b
mov r13w, 0x5490
cmovb r13d, ebp
mov qword [rsp + 0x188], rax
movzx ax, dl
cdqe
movabs rax, 0xd8a24eaf04dc52e7
bswap r13d
movzx r13w, bl
mov qword [rsp + 0x1f0], rax
cmovno r13w, sp
mov qword [rsp + 0x190], rax
movzx eax, dx
cdqe
movabs rax, 0xa5bac9ea4fe7a478
mov qword [rsp + 0x1e8], rax
sets r13b
xchg r13b, r13b
mov qword [rsp + 0x198], rax
movzx ax, bh
bswap rax
cwde
movabs rax, 0x2edd90553e4eda91
movsx r13d, cx
movsx r13, di
mov qword [rsp + 0x1e0], rax
mov qword [rsp + 0x1a0], rax
movabs rax, 0x28903e4866e9b93a
movsx r13d, r12w
cmovns r13w, dx
mov qword [rsp + 0x1d8], rax
movzx r13w, al
movzx r13, bx
mov qword [rsp + 0x1a8], rax
mov r13b, 0x3f
lea r13, [rsp + 0x100]
cmovp ax, r15w
mov ax, 0x6ad5
mov al, r10b
mov rax, r13
jmp 0x1403ffd08
movaps xmm0, xmmword [rsp + 0x40]
jmp 0x1403ffd12
xorps xmm0, xmmword [rax]
movaps xmmword [rsp + 0x40], xmm0
movaps xmm0, xmmword [rsp + 0x50]
jmp 0x1403ffd24
xorps xmm0, xmmword [rax + 0x10]
movaps xmmword [rsp + 0x50], xmm0
jmp 0x1403ffd32
movaps xmm0, xmmword [rsp + 0x60]
jmp 0x1403ffd3c
xorps xmm0, xmmword [rax + 0x20]
movaps xmmword [rsp + 0x60], xmm0
jmp 0x1403ffd4a
movaps xmm0, xmmword [rsp + 0x70]
jmp 0x1403ffd54
xorps xmm0, xmmword [rax + 0x30]
movaps xmmword [rsp + 0x70], xmm0
jmp 0x1403ffd62
movaps xmm0, xmmword [rsp + 0x80]
jmp 0x1403ffd6f
xorps xmm0, xmmword [rax + 0x40]
movaps xmmword [rsp + 0x80], xmm0
jmp 0x1403ffd80
movaps xmm0, xmmword [rsp + 0x90]
jmp 0x1403ffd8d
xorps xmm0, xmmword [rax + 0x50]
movaps xmmword [rsp + 0x90], xmm0
jmp 0x1403ffd9e
movaps xmm0, xmmword [rsp + 0xa0]
jmp 0x1403ffdab
xorps xmm0, xmmword [rax + 0x60]
movaps xmmword [rsp + 0xa0], xmm0
jmp 0x1403ffdbc
movaps xmm0, xmmword [rsp + 0xb0]
jmp 0x1403ffdc9
xorps xmm0, xmmword [rax + 0x70]
movaps xmmword [rsp + 0xb0], xmm0
jmp 0x1403ffdda
movaps xmm0, xmmword [rsp + 0xc0]
jmp 0x1403ffde7
xorps xmm0, xmmword [rax + 0x80]
movaps xmmword [rsp + 0xc0], xmm0
jmp 0x1403ffdfb
movaps xmm0, xmmword [rsp + 0xd0]
jmp 0x1403ffe08
xorps xmm0, xmmword [rax + 0x90]
movaps xmmword [rsp + 0xd0], xmm0
movaps xmm0, xmmword [rsp + 0xe0]
jmp 0x1403ffe24
xorps xmm0, xmmword [rax + 0xa0]
movaps xmmword [rsp + 0xe0], xmm0
lea rdx, [rsp + 0x40]
bswap cx
cmovns ecx, r15d
jmp 0x1403ffe44
lea r8, [rsp + 0x30]
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyW]
movabs rax, 0xe03fec0024fffd78
jmp 0x1403ffe65
mov qword [rsp + 0x1d0], rax
jmp 0x1403ffe72
mov qword [rsp + 0x40], rax
bswap eax
mov ax, 0x105e
movzx eax, r8w
movabs rax, 0x222ebca20e96a58a
jmp 0x1403ffe90
mov qword [rsp + 0x1c8], rax
mov qword [rsp + 0x48], rax
cwde
seta ah
xchg ah, ah
movabs rax, 0xfbcdf388e0082fa5
jmp 0x1403ffeb2
mov qword [rsp + 0x2e8], rax
jmp 0x1403ffebf
mov qword [rsp + 0x50], rax
cmovne ax, cx
cwde
movabs rax, 0x17c85fba530fa684
mov qword [rsp + 0x1c0], rax
mov qword [rsp + 0x58], rax
cbw
mov qword [rsp + 0x100], r15
mov ah, 0x65
movzx ax, bpl
mov qword [rsp + 0x108], r12
movzx ax, ah
movsxd rax, esp
cdqe
mov qword [rsp + 0x110], rsi
jmp 0x1403fff10
mov qword [rsp + 0x118], rdi
mov rax, r13
jmp 0x1403fff20
movaps xmm0, xmmword [rsp + 0x40]
jmp 0x1403fff2a
xorps xmm0, xmmword [rax]
movaps xmmword [rsp + 0x40], xmm0
jmp 0x1403fff37
movaps xmm0, xmmword [rsp + 0x50]
xorps xmm0, xmmword [rax + 0x10]
movaps xmmword [rsp + 0x50], xmm0
add ecx, 0x5dd72891
ror r9b, 0xe2
btc eax, r11d
mov rcx, qword [rsp + 0x30]
or r9b, 0xd3
cmp di, 0x40aa
lea rax, [rsp + 0x3c]
test r8b, 0xa7
mov qword [rsp + 0x20], rax
stc
mov dword [rsp + 0x28], 4
clc
lea rdx, [rsp + 0x40]
rcl r9w, cl
sub r8d, r8d
bswap r9
mov r9d, 4
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
mov rcx, qword [rsp + 0x30]
jmp 0x1403fff9e
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov rax, qword [rsp + 0x2e0]
jmp 0x1403fffb1
mov qword [rsp + 0x40], rax
lahf
mov rax, qword [rsp + 0x2d8]
jmp 0x1403fffc4
mov qword [rsp + 0x48], rax
cwde
mov rax, qword [rsp + 0x2d0]
jmp 0x1403fffd7
mov qword [rsp + 0x50], rax
setns al
mov eax, r8d
bswap ax
mov rax, qword [rsp + 0x2c8]
jmp 0x1403ffff2
mov qword [rsp + 0x58], rax
movzx rax, r9w
jmp 0x140400003
mov rax, qword [rsp + 0x2c0]
jmp 0x140400010
mov qword [rsp + 0x60], rax
mov ah, 0x89
seto ah
mov rax, qword [rsp + 0x2b8]
jmp 0x140400028
mov qword [rsp + 0x68], rax
lahf
mov rax, qword [rsp + 0x2b0]
jmp 0x14040003b
mov qword [rsp + 0x70], rax
seto al
movzx eax, bp
mov rax, qword [rsp + 0x2a8]
jmp 0x140400053
mov qword [rsp + 0x78], rax
mov rax, 0x206907f7
lahf
movsx eax, sp
mov rax, qword [rsp + 0x2a0]
jmp 0x140400070
mov qword [rsp + 0x80], rax
mov rax, qword [rsp + 0x298]
jmp 0x140400085
mov qword [rsp + 0x88], rax
not ax
mov rax, qword [rsp + 0x290]
jmp 0x14040009d
mov qword [rsp + 0x90], rax
mov rax, qword [rsp + 0x288]
jmp 0x1404000b2
mov qword [rsp + 0x98], rax
cwde
movzx rax, r15w
mov rax, qword [rsp + 0x280]
jmp 0x1404000cc
mov qword [rsp + 0xa0], rax
cwde
nop
mov rax, qword [rsp + 0x278]
jmp 0x1404000e4
mov qword [rsp + 0xa8], rax
movzx eax, r11w
movzx rax, r11w
lahf
mov rax, qword [rsp + 0x270]
mov qword [rsp + 0xb0], rax
jmp 0x140400110
mov rax, qword [rsp + 0x268]
jmp 0x14040011d
mov qword [rsp + 0xb8], rax
mov ax, r9w
setae al
movzx ax, bpl
mov rax, qword [rsp + 0x260]
jmp 0x14040013e
mov qword [rsp + 0xc0], rax
mov ah, 0x86
movsxd rax, ebx
movsx rax, bx
mov rax, qword [rsp + 0x258]
mov qword [rsp + 0xc8], rax
movabs rax, 0xd8c04eda048c52bb
jmp 0x14040016f
mov qword [rsp + 0xd0], rax
not ax
cdqe
nop
movabs rax, 0xa5eac9894f8ea414
jmp 0x14040018c
mov qword [rsp + 0xd8], rax
lahf
movzx rax, r9w
mov qword [rsp + 0xe0], rbp
cmovp bp, r12w
mov qword [rsp + 0xe8], r14
not al
seta r14b
mov qword [rsp + 0x100], r15
mov qword [rsp + 0x108], r12
mov qword [rsp + 0x110], rsi
jmp 0x1404001d5
mov qword [rsp + 0x118], rdi
mov rbp, rbx
jmp 0x1404001ed
mov qword [rsp + 0x120], rbx
lahf
mov r14, qword [rsp + 0x2f0]
mov qword [rsp + 0x128], r14
movzx ax, r10b
mov rax, qword [rsp + 0x250]
jmp 0x140400218
mov qword [rsp + 0x130], rax
lahf
jmp 0x140400228
mov rax, qword [rsp + 0x248]
jmp 0x140400235
mov qword [rsp + 0x138], rax
cwde
mov rax, qword [rsp + 0x240]
jmp 0x14040024b
mov qword [rsp + 0x140], rax
mov rax, qword [rsp + 0x238]
jmp 0x140400260
mov qword [rsp + 0x148], rax
movzx rax, di
mov rax, qword [rsp + 0x230]
mov qword [rsp + 0x150], rax
jmp 0x140400281
mov rax, qword [rsp + 0x228]
jmp 0x14040028e
mov qword [rsp + 0x158], rax
xchg ah, ah
mov rax, qword [rsp + 0x220]
mov qword [rsp + 0x160], rax
jmp 0x1404002b4
mov rax, qword [rsp + 0x218]
mov qword [rsp + 0x168], rax
cmovs eax, r8d
jmp 0x1404002d1
mov rax, qword [rsp + 0x210]
jmp 0x1404002de
mov qword [rsp + 0x170], rax
movsx rax, cx
mov ax, 0x7608
movsx eax, di
mov rax, qword [rsp + 0x208]
jmp 0x1404002fe
mov qword [rsp + 0x178], rax
mov eax, 0x6ca315c3
cbw
mov rax, qword [rsp + 0x200]
jmp 0x14040031a
mov qword [rsp + 0x180], rax
cmovae rax, rbx
movsx ax, r11b
mov rax, qword [rsp + 0x1f8]
jmp 0x140400338
mov qword [rsp + 0x188], rax
setp ah
movzx ax, r13b
mov rax, qword [rsp + 0x1f0]
mov qword [rsp + 0x190], rax
mov rax, qword [rsp + 0x1e8]
jmp 0x140400365
mov qword [rsp + 0x198], rax
not eax
movsx ax, dil
mov rax, qword [rsp + 0x1e0]
mov qword [rsp + 0x1a0], rax
nop
bswap ax
movsx eax, r12w
mov rax, qword [rsp + 0x1d8]
jmp 0x14040039a
mov qword [rsp + 0x1a8], rax
seta al
movsx ax, ah
mov rax, r13
jmp 0x1404003b1
movaps xmm0, xmmword [rsp + 0x40]
movaps xmm1, xmmword [rsp + 0x50]
jmp 0x1404003c0
movaps xmm2, xmmword [rsp + 0x60]
jmp 0x1404003ca
xorps xmm0, xmmword [rax]
movaps xmm3, xmmword [rsp + 0x70]
jmp 0x1404003d7
movaps xmmword [rsp + 0x40], xmm0
jmp 0x1404003e1
xorps xmm1, xmmword [rax + 0x10]
movaps xmmword [rsp + 0x50], xmm1
jmp 0x1404003ef
xorps xmm2, xmmword [rax + 0x20]
movaps xmmword [rsp + 0x60], xmm2
jmp 0x1404003fd
xorps xmm3, xmmword [rax + 0x30]
movaps xmmword [rsp + 0x70], xmm3
jmp 0x14040040b
movaps xmm0, xmmword [rsp + 0x80]
jmp 0x140400418
xorps xmm0, xmmword [rax + 0x40]
movaps xmmword [rsp + 0x80], xmm0
jmp 0x140400429
movaps xmm0, xmmword [rsp + 0x90]
jmp 0x140400436
xorps xmm0, xmmword [rax + 0x50]
movaps xmmword [rsp + 0x90], xmm0
jmp 0x140400447
movaps xmm0, xmmword [rsp + 0xa0]
xorps xmm0, xmmword [rax + 0x60]
movaps xmmword [rsp + 0xa0], xmm0
jmp 0x140400460
movaps xmm0, xmmword [rsp + 0xb0]
jmp 0x14040046d
xorps xmm0, xmmword [rax + 0x70]
movaps xmmword [rsp + 0xb0], xmm0
jmp 0x14040047e
movaps xmm0, xmmword [rsp + 0xc0]
jmp 0x14040048b
xorps xmm0, xmmword [rax + 0x80]
movaps xmmword [rsp + 0xc0], xmm0
jmp 0x14040049f
movaps xmm0, xmmword [rsp + 0xd0]
jmp 0x1404004ac
xorps xmm0, xmmword [rax + 0x90]
movaps xmmword [rsp + 0xd0], xmm0
movaps xmm0, xmmword [rsp + 0xe0]
jmp 0x1404004c8
xorps xmm0, xmmword [rax + 0xa0]
movaps xmmword [rsp + 0xe0], xmm0
lea rdx, [rsp + 0x40]
movzx ecx, ax
setns r8b
not cx
mov rcx, 0xffffffff80000002
lea r8, [rsp + 0x30]
jmp 0x1404004f7
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyW]
mov rax, qword [rsp + 0x1d0]
movzx bx, r13b
mov bx, 0x525b
xchg bh, bh
mov qword [rsp + 0x40], rax
mov eax, edi
cwde
mov rax, qword [rsp + 0x1c8]
movsx ebx, r10w
mov qword [rsp + 0x48], rax
bswap rbx
mov rbx, qword [rsp + 0x2e8]
mov al, 0x70
mov qword [rsp + 0x50], rbx
mov rax, qword [rsp + 0x1c0]
jmp 0x140400548
mov qword [rsp + 0x58], rax
bswap ax
xchg ah, ah
movsx eax, bp
mov qword [rsp + 0x100], r15
movsx ax, r14b
movzx rax, bp
mov qword [rsp + 0x108], r12
cmovle eax, r12d
mov qword [rsp + 0x110], rsi
not al
mov qword [rsp + 0x118], rdi
mov rax, r13
movaps xmm0, xmmword [rsp + 0x40]
xorps xmm0, xmmword [rax]
movaps xmmword [rsp + 0x40], xmm0
jmp 0x140400599
movaps xmm0, xmmword [rsp + 0x50]
xorps xmm0, xmmword [rax + 0x10]
movaps xmmword [rsp + 0x50], xmm0
cmovp cx, r9w
cdq
mov rcx, qword [rsp + 0x30]
btr r9w, r13w
rol eax, 0xc5
shr dl, 0x23
lea rax, [rsp + 0x3c]
jmp 0x1404005ca
mov qword [rsp + 0x20], rax
jmp 0x1404005d4
mov dword [rsp + 0x28], 4
inc rdx
lea rdx, [rsp + 0x40]
shl r9b, cl
xor r8d, r8d
movzx r9w, r15b
mov r9d, 4
jmp 0x1404005fa
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
mov rcx, qword [rsp + 0x30]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov rax, qword [rsp + 0x2e0]
jmp 0x140400618
mov qword [rsp + 0x40], rax
jmp 0x140400622
mov rax, qword [rsp + 0x2d8]
jmp 0x14040062f
mov qword [rsp + 0x48], rax
mov rax, qword [rsp + 0x2d0]
jmp 0x140400641
mov qword [rsp + 0x50], rax
mov rax, qword [rsp + 0x2c8]
jmp 0x140400653
mov qword [rsp + 0x58], rax
cdqe
bswap rax
mov rax, qword [rsp + 0x2c0]
jmp 0x14040066a
mov qword [rsp + 0x60], rax
movzx rax, r15w
mov ax, 0x362e
mov rax, qword [rsp + 0x2b8]
mov qword [rsp + 0x68], rax
lahf
mov rax, qword [rsp + 0x2b0]
mov qword [rsp + 0x70], rax
mov rax, qword [rsp + 0x2a8]
jmp 0x14040069f
mov qword [rsp + 0x78], rax
cdqe
not ax
movzx rax, r13w
mov rax, qword [rsp + 0x2a0]
jmp 0x1404006ba
mov qword [rsp + 0x80], rax
movsx rax, si
mov rax, qword [rsp + 0x298]
jmp 0x1404006d3
mov qword [rsp + 0x88], rax
mov rax, qword [rsp + 0x290]
jmp 0x1404006e8
mov qword [rsp + 0x90], rax
mov rax, qword [rsp + 0x288]
mov qword [rsp + 0x98], rax
jmp 0x140400709
mov rax, qword [rsp + 0x280]
mov qword [rsp + 0xa0], rax
mov rax, qword [rsp + 0x278]
jmp 0x140400726
mov qword [rsp + 0xa8], rax
cdqe
lahf
nop
mov rax, qword [rsp + 0x270]
jmp 0x140400740
mov qword [rsp + 0xb0], rax
movsxd rax, ebp
not rax
mov rax, qword [rsp + 0x268]
jmp 0x14040075b
mov qword [rsp + 0xb8], rax
movsxd rax, r11d
mov rax, qword [rsp + 0x260]
jmp 0x140400773
mov qword [rsp + 0xc0], rax
cdqe
mov rax, qword [rsp + 0x258]
mov qword [rsp + 0xc8], rax
jmp 0x140400797
movabs rax, 0xd8c34edb048f52bb
jmp 0x1404007a6
mov qword [rsp + 0xd0], rax
movzx rax, r12w
movabs rax, 0xa5c8c98b4f83a416
jmp 0x1404007c1
mov qword [rsp + 0xd8], rax
movabs rax, 0x2eb290273e1edaf5
mov qword [rsp + 0xe0], rax
seto al
movabs rax, 0x28f53e246680b95c
mov qword [rsp + 0xe8], rax
nop
mov qword [rsp + 0x100], r15
mov al, r8b
mov qword [rsp + 0x108], r12
cwde
setns al
cmovle ax, r10w
mov qword [rsp + 0x110], rsi
movsx ax, dh
mov qword [rsp + 0x118], rdi
mov qword [rsp + 0x120], rbp
lahf
cwde
not eax
mov qword [rsp + 0x128], r14
mov rax, qword [rsp + 0x250]
jmp 0x140400843
mov qword [rsp + 0x130], rax
movzx ax, sil
jmp 0x140400858
mov rax, qword [rsp + 0x248]
jmp 0x140400865
mov qword [rsp + 0x138], rax
cwde
movzx eax, bp
mov rax, qword [rsp + 0x240]
jmp 0x14040087e
mov qword [rsp + 0x140], rax
movsx ax, bh
movsxd rax, r11d
movzx rax, bp
mov rax, qword [rsp + 0x238]
jmp 0x14040089e
mov qword [rsp + 0x148], rax
jmp 0x1404008b2
mov rax, qword [rsp + 0x230]
jmp 0x1404008bf
mov qword [rsp + 0x150], rax
cdqe
not ax
mov al, r9b
mov rax, qword [rsp + 0x228]
jmp 0x1404008dc
mov qword [rsp + 0x158], rax
cbw
movzx eax, di
mov rax, qword [rsp + 0x220]
jmp 0x1404008f6
mov qword [rsp + 0x160], rax
cmovno ax, di
mov rax, qword [rsp + 0x218]
mov qword [rsp + 0x168], rax
movsxd rax, ecx
xchg ah, ah
mov rax, qword [rsp + 0x210]
jmp 0x140400924
mov qword [rsp + 0x170], rax
movsx ax, sil
mov rax, qword [rsp + 0x208]
jmp 0x14040093e