Function at 0x140404bdb
Capabilities:
Set registry value

Disassembly:
push r15
rol ah, 0x65
push r14
test r12, 0x5e6186
cmovl ax, ax
movsx r15, r14w
push r13
push r12
shr al, 0xc0
sar ax, 0x81
push rsi
setl r13b
dec r14
push rdi
xadd sil, r14b
bts r12w, r10w
push rbp
movzx r14, si
sbb rax, rsi
sar dil, 0xfd
push rbx
cbw
adc r14w, ax
sub rsp, 0x2f8
setg bpl
movabs rax, 0xe009ec3224c8fd6e
mov qword [rsp + 0x2e0], rax
movsx r14d, r9w
not edi
mov qword [rsp + 0x40], rax
movsx ebx, bp
movsxd r13, ecx
movabs rax, 0x2204bcb80ebea5a3
xchg r15b, bpl
not ebx
mov qword [rsp + 0x2d8], rax
movzx r14, ax
mov qword [rsp + 0x48], rax
movsx r14w, bl
movabs rax, 0xfbc9f38de01f2fa2
setl r14b
mov qword [rsp + 0x2d0], rax
setne r15b
bswap r14w
mov qword [rsp + 0x50], rax
movsx r12w, r11b
movabs rax, 0x17a75ff95317a686
seta sil
mov r15b, r9b
mov qword [rsp + 0x2c8], rax
cmovp di, si
mov bpl, 0x9d
mov qword [rsp + 0x58], rax
movsx r15w, r9b
movabs rax, 0xfd99d5578f55fa6f
mov qword [rsp + 0x2c0], rax
mov qword [rsp + 0x60], rax
lahf
movabs rax, 0x4b3964fdcd447246
movzx esi, sp
not r15b
mov qword [rsp + 0x2b8], rax
movzx r13d, di
bswap di
mov qword [rsp + 0x68], rax
bswap rsi
lahf
movabs rax, 0xee88324679eb2227
not r15d
sets dil
movsxd rsi, r13d
mov qword [rsp + 0x2b0], rax
mov r12d, ecx
movzx r13, r11w
mov qword [rsp + 0x70], rax
movzx edi, r8w
mov r12b, dil
movsx r15, r8w
movabs rax, 0x6d7346ad6d4ffefa
mov qword [rsp + 0x2a8], rax
mov qword [rsp + 0x78], rax
mov r13w, 0x33b3
movsxd rbp, esi
movsx ebx, r10w
movabs rax, 0xd093683aef376a76
cmovl bp, bp
movzx r13d, r12w
setns sil
mov qword [rsp + 0x2a0], rax
movzx r12, r9w
mov r15b, 0xcc
mov qword [rsp + 0x80], rax
bswap r15d
cmovo si, r12w
movabs rax, 0xa80f93e9d32b8c6f
mov qword [rsp + 0x298], rax
movzx rdi, si
mov qword [rsp + 0x88], rax
movzx bp, sil
movabs rax, 0x33e730243394033e
movsxd r14, edx
movzx rsi, sp
mov qword [rsp + 0x290], rax
mov qword [rsp + 0x90], rax
movsx r12w, bpl
xchg sil, al
mov dil, r8b
movabs rax, 0xe7e3977e114e6703
movzx bx, r14b
setnp r12b
mov qword [rsp + 0x288], rax
movzx r12w, r10b
mov rsi, r13
mov qword [rsp + 0x98], rax
sets r12b
movabs rax, 0xb0b65ec58a603c8
mov qword [rsp + 0x280], rax
xchg bl, r12b
jmp 0x140404e2c
mov qword [rsp + 0xa0], rax
setp ah
xchg rdi, rdi
mov r13w, 0x1d2b
movabs rax, 0x6708be65ca8156d7
mov qword [rsp + 0x278], rax
movzx r14, r10w
mov bpl, r14b
cmovb si, ax
mov qword [rsp + 0xa8], rax
cbw
cdqe
movabs rax, 0x46a7044da5524090
not di
movsx edi, r9w
bswap r15w
mov qword [rsp + 0x270], rax
mov qword [rsp + 0xb0], rax
jmp 0x140404e92
movabs rax, 0x4b8cb541ca050f46
movzx si, r15b
mov qword [rsp + 0x268], rax
movsx rbx, r13w
mov bx, r14w
movsx r14w, bl
mov qword [rsp + 0xb8], rax
movabs rax, 0xe627ab41184af921
jmp 0x140404ed2
mov qword [rsp + 0x260], rax
mov qword [rsp + 0xc0], rax
cmovge ax, r11w
bswap rdi
movzx r13d, ax
movabs rax, 0x34c77b6e31b9a
not ebp
cmovl esi, eax
movzx ebp, r8w
mov qword [rsp + 0x258], rax
mov qword [rsp + 0xc8], rax
movabs rax, 0xd8cf4ec0049852bb
setl bl
mov qword [rsp + 0xd0], rax
not r13b
mov rbx, r14
movabs rax, 0xa5eac9844f8ea419
mov qword [rsp + 0xd8], rax
setg r12b
movzx r15d, r8w
movzx r15w, dl
mov qword [rsp + 0x30], 0
lahf
mov dword [rsp + 0x3c], 0
lahf
jmp 0x140404f66
movabs rbp, 0x2eb490333e21dae3
movzx rdi, r11w
mov r15, r9
movzx r14w, r11b
mov qword [rsp + 0xe0], rbp
jmp 0x140404f8e
movabs r14, 0x28903e48668cb956
cwde
movsx r15d, ax
mov sil, r15b
mov qword [rsp + 0xe8], r14
cbw
movabs r15, 0xe05dec612491fd3d
mov qword [rsp + 0x100], r15
movabs r12, 0x2247bce40ef3a5e6
movsx si, r11b
mov qword [rsp + 0x108], r12
xchg al, dil
movsx bx, dh
mov edi, r11d
movabs rsi, 0xfbacf3ffe06d2fd7
mov rax, 0x6522283
lahf
movzx di, bl
mov qword [rsp + 0x110], rsi
cdqe
movsxd rbx, esp
movabs rdi, 0x17c85fba5363a6e8
cbw
movsxd r13, edx
jmp 0x140405014
mov qword [rsp + 0x118], rdi
sete al
not ah
cmovno r13w, sp
movabs rax, 0xfdf6d5258f21fa01
movsx r13w, cl
mov qword [rsp + 0x120], rax
movsx r13w, cl
bswap r13w
movzx ebx, r8w
mov rbx, rax
movsx r13w, bl
xchg r13b, al
movabs rax, 0x4b4d6498cd17722a
not r13b
movsx r13d, r11w
movzx r13w, bl
mov qword [rsp + 0x2f0], rax
cmovo r13, r11
mov qword [rsp + 0x128], rax
movsx r13, bx
movabs rax, 0xeefa322379b8227b
movzx r13w, r11b
mov qword [rsp + 0x250], rax
movzx r13w, r10b
not r13w
mov r13w, cx
mov qword [rsp + 0x130], rax
movabs rax, 0x6d1646ce6d26fe8c
movzx r13, r11w
mov qword [rsp + 0x248], rax
movzx r13w, r14b
mov qword [rsp + 0x138], rax
movsxd r13, r14d
cdqe
movabs rax, 0xd0fb6869ef6b6a05
movzx r13, r12w
mov qword [rsp + 0x240], rax
mov qword [rsp + 0x140], rax
movsx r13w, al
xchg r13w, r13w
movabs rax, 0xa86b938cd3598c0e
not r13b
cmovo r13, rdi
mov qword [rsp + 0x238], rax
cmovns r13w, di
bswap r13w
mov r13b, bl
mov qword [rsp + 0x148], rax
movabs rax, 0x3382304733f7037f
movzx r13d, r14w
mov r13b, 0x73
mov qword [rsp + 0x230], rax
movsxd r13, r9d
mov qword [rsp + 0x150], rax
cbw
lahf
jmp 0x140405157
movabs rax, 0xe7b39722113d6770
setns r13b
mov qword [rsp + 0x228], rax
xchg r13b, r13b
movzx r13d, r12w
mov qword [rsp + 0x158], rax
mov r13b, al
cdqe
movsxd rax, r13d
movabs rax, 0xb66658d58d403a9
mov qword [rsp + 0x220], rax
bswap r13
mov qword [rsp + 0x160], rax
movsx eax, r14w
movzx r13, dx
mov r13b, bpl
movabs rax, 0x677abe00caf556b2
cmove r13w, r12w
mov r13b, 0xa0
movsxd r13, r8d
mov qword [rsp + 0x218], rax
movzx r13d, r11w
movsx r13, r8w
mov qword [rsp + 0x168], rax
cbw
movabs rax, 0x46ce040ba50e40e3
movzx r13d, r12w
mov qword [rsp + 0x210], rax
movsx r13w, dl
jmp 0x1404051fb
mov qword [rsp + 0x170], rax
xchg r13w, ax
movabs rax, 0x4bedb536ca600f34
movsx r13, di
bswap r13d
jmp 0x14040521c
mov qword [rsp + 0x208], rax
movzx r13, r15w
mov qword [rsp + 0x178], rax
mov r13b, 0x1a
cbw
movabs rax, 0xe648ab111826f94d
movzx r13d, r15w
mov qword [rsp + 0x200], rax
movsx r13w, r13b
mov qword [rsp + 0x180], rax
movsxd r13, r9d
cdqe
bswap r13w
movabs rax, 0x7a4c14b68a1bf6
mov r13w, si
not r13w
movsx r13d, r11w
mov qword [rsp + 0x1f8], rax
not r13d
mov qword [rsp + 0x188], rax
lahf
not r13w
movabs rax, 0xd8a24eaf04dc52e7
jmp 0x1404052a3
mov qword [rsp + 0x1f0], rax
movzx r13, dx
movsx r13d, r14w
mov qword [rsp + 0x190], rax
movabs rax, 0xa5bac9ea4fe7a478
not r13w
xchg r13b, r13b
mov qword [rsp + 0x1e8], rax
mov r13b, 0x6d
mov qword [rsp + 0x198], rax
not al
movsxd r13, edx
movabs rax, 0x2edd90553e4eda91
movzx r13d, sp
mov qword [rsp + 0x1e0], rax
mov qword [rsp + 0x1a0], rax
movzx eax, r9w
cmovne r13w, sp
mov ah, ch
movabs rax, 0x28903e4866e9b93a
movzx r13, r13w
xchg r13, r13
mov qword [rsp + 0x1d8], rax
movsxd r13, ebx
mov qword [rsp + 0x1a8], rax
lea r13, [rsp + 0x100]
nop
lahf
not al
mov rax, r13
jmp 0x140405346
movaps xmm0, xmmword [rsp + 0x40]
jmp 0x140405350
xorps xmm0, xmmword [rax]
movaps xmmword [rsp + 0x40], xmm0
jmp 0x14040535d
movaps xmm0, xmmword [rsp + 0x50]
xorps xmm0, xmmword [rax + 0x10]
movaps xmmword [rsp + 0x50], xmm0
jmp 0x140405370
movaps xmm0, xmmword [rsp + 0x60]
jmp 0x14040537a
xorps xmm0, xmmword [rax + 0x20]
movaps xmmword [rsp + 0x60], xmm0
jmp 0x140405388
movaps xmm0, xmmword [rsp + 0x70]
jmp 0x140405392
xorps xmm0, xmmword [rax + 0x30]
movaps xmmword [rsp + 0x70], xmm0
jmp 0x1404053a0
movaps xmm0, xmmword [rsp + 0x80]
jmp 0x1404053ad
xorps xmm0, xmmword [rax + 0x40]
movaps xmmword [rsp + 0x80], xmm0
movaps xmm0, xmmword [rsp + 0x90]
jmp 0x1404053c6
xorps xmm0, xmmword [rax + 0x50]
movaps xmmword [rsp + 0x90], xmm0
movaps xmm0, xmmword [rsp + 0xa0]
xorps xmm0, xmmword [rax + 0x60]
movaps xmmword [rsp + 0xa0], xmm0
jmp 0x1404053eb
movaps xmm0, xmmword [rsp + 0xb0]
jmp 0x1404053f8
xorps xmm0, xmmword [rax + 0x70]
movaps xmmword [rsp + 0xb0], xmm0
jmp 0x140405409
movaps xmm0, xmmword [rsp + 0xc0]
jmp 0x140405416
xorps xmm0, xmmword [rax + 0x80]
movaps xmmword [rsp + 0xc0], xmm0
jmp 0x14040542a
movaps xmm0, xmmword [rsp + 0xd0]
jmp 0x140405437
xorps xmm0, xmmword [rax + 0x90]
movaps xmmword [rsp + 0xd0], xmm0
jmp 0x14040544b
movaps xmm0, xmmword [rsp + 0xe0]
xorps xmm0, xmmword [rax + 0xa0]
movaps xmmword [rsp + 0xe0], xmm0
lea rdx, [rsp + 0x40]
lea r8, [rsp + 0x30]
not rcx
movzx ecx, r11w
mov rcx, 0xffffffff80000002
jmp 0x14040547f
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyW]
movabs rax, 0xe03fec0024fffd78
jmp 0x140405494
mov qword [rsp + 0x1d0], rax
jmp 0x1404054a1
mov qword [rsp + 0x40], rax
bswap ax
movsxd rax, r12d
movabs rax, 0x222ebca20e96a58a
mov qword [rsp + 0x1c8], rax
jmp 0x1404054c3
mov qword [rsp + 0x48], rax
cwde
mov ah, 0x74
movabs rax, 0xfbcdf388e0082fa5
mov qword [rsp + 0x2e8], rax
jmp 0x1404054e3
mov qword [rsp + 0x50], rax
bswap ax
movsxd rax, r14d
movabs rax, 0x17c85fba530fa684
jmp 0x1404054fd
mov qword [rsp + 0x1c0], rax
jmp 0x14040550a
mov qword [rsp + 0x58], rax
cbw
mov qword [rsp + 0x100], r15
jmp 0x140405524
mov qword [rsp + 0x108], r12
xchg ah, ah
mov rax, r9
mov qword [rsp + 0x110], rsi
mov qword [rsp + 0x118], rdi
lahf
mov rax, r13
jmp 0x14040554a
movaps xmm0, xmmword [rsp + 0x40]
jmp 0x140405554
xorps xmm0, xmmword [rax]
movaps xmmword [rsp + 0x40], xmm0
jmp 0x140405561
movaps xmm0, xmmword [rsp + 0x50]
xorps xmm0, xmmword [rax + 0x10]
movaps xmmword [rsp + 0x50], xmm0
mov rcx, qword [rsp + 0x30]
lea rax, [rsp + 0x3c]
btr dx, r9w
and dx, 0x7ac6
mov qword [rsp + 0x20], rax
mov dword [rsp + 0x28], 4
xor r9, r13
lea rdx, [rsp + 0x40]
shrd r9d, r15d, 9
shr r9b, 0x71
sub r8d, r8d
mov r9b, r12b
movzx r9w, r13b
mov r9d, 4
jmp 0x1404055b7
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
mov rcx, qword [rsp + 0x30]
jmp 0x1404055c7
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov rax, qword [rsp + 0x2e0]
mov qword [rsp + 0x40], rax
seta al
mov rax, r15
mov rax, qword [rsp + 0x2d8]
jmp 0x1404055ed
mov qword [rsp + 0x48], rax
lahf
movsx eax, bp
mov rax, qword [rsp + 0x2d0]
jmp 0x140405603
mov qword [rsp + 0x50], rax
cdqe
mov rax, qword [rsp + 0x2c8]
jmp 0x140405617
mov qword [rsp + 0x58], rax
mov rax, qword [rsp + 0x2c0]
jmp 0x140405629
mov qword [rsp + 0x60], rax
movsx ax, sil
cwde
movsxd rax, esi
mov rax, qword [rsp + 0x2b8]
jmp 0x140405644
mov qword [rsp + 0x68], rax
jmp 0x140405651
mov rax, qword [rsp + 0x2b0]
mov qword [rsp + 0x70], rax
mov rax, qword [rsp + 0x2a8]
jmp 0x14040566b
mov qword [rsp + 0x78], rax
movsx rax, cx
mov rax, qword [rsp + 0x2a0]
jmp 0x140405681
mov qword [rsp + 0x80], rax
cdqe
mov rax, qword [rsp + 0x298]
jmp 0x140405698
mov qword [rsp + 0x88], rax
cbw
not ax
mov rax, qword [rsp + 0x290]
jmp 0x1404056b2
mov qword [rsp + 0x90], rax
sets ah
movzx eax, r11w
jmp 0x1404056c6
mov rax, qword [rsp + 0x288]
jmp 0x1404056d3
mov qword [rsp + 0x98], rax
movsx ax, spl
nop
cmovle ax, r12w
mov rax, qword [rsp + 0x280]
jmp 0x1404056f4
mov qword [rsp + 0xa0], rax
mov ah, ch
setle ah
not ax
mov rax, qword [rsp + 0x278]
jmp 0x140405711
mov qword [rsp + 0xa8], rax
movsxd rax, edi
movsx rax, sp
mov rax, qword [rsp + 0x270]
jmp 0x14040572d
mov qword [rsp + 0xb0], rax
movzx eax, dx
mov rax, qword [rsp + 0x268]
jmp 0x140405745
mov qword [rsp + 0xb8], rax
not ax
cbw
mov rax, qword [rsp + 0x260]
mov qword [rsp + 0xc0], rax
nop
not eax
movzx rax, di
mov rax, qword [rsp + 0x258]
jmp 0x140405777
mov qword [rsp + 0xc8], rax
cbw
movabs rax, 0xd8c04eda048c52bb
mov qword [rsp + 0xd0], rax
movabs rax, 0xa5eac9894f8ea414
jmp 0x1404057a2
mov qword [rsp + 0xd8], rax
mov qword [rsp + 0xe0], rbp
cdqe
mov qword [rsp + 0xe8], r14
mov qword [rsp + 0x100], r15
mov qword [rsp + 0x108], r12
cdqe
mov qword [rsp + 0x110], rsi
setae r14b
cdqe
mov qword [rsp + 0x118], rdi
mov rbp, rbx
cdqe
jmp 0x1404057ee
mov qword [rsp + 0x120], rbx
lahf
nop
not r14d
mov r14, qword [rsp + 0x2f0]
cbw
mov qword [rsp + 0x128], r14
cmovne ax, r11w
setge al
cbw
mov rax, qword [rsp + 0x250]
jmp 0x140405825
mov qword [rsp + 0x130], rax
mov al, r8b
cbw
cdqe
mov rax, qword [rsp + 0x248]
mov qword [rsp + 0x138], rax
movzx ax, al
movsx eax, r13w
mov rax, qword [rsp + 0x240]
mov qword [rsp + 0x140], rax
mov al, sil
mov rax, qword [rsp + 0x238]
jmp 0x14040586c
mov qword [rsp + 0x148], rax
movzx eax, r8w
movsx ax, dil
mov rax, qword [rsp + 0x230]
mov qword [rsp + 0x150], rax
cbw
mov rax, qword [rsp + 0x228]
jmp 0x14040589c
mov qword [rsp + 0x158], rax
xchg ah, al
mov rax, qword [rsp + 0x220]
jmp 0x1404058b3
mov qword [rsp + 0x160], rax
mov rax, qword [rsp + 0x218]
jmp 0x1404058c8
mov qword [rsp + 0x168], rax
mov rax, qword [rsp + 0x210]
jmp 0x1404058dd
mov qword [rsp + 0x170], rax
nop
movzx eax, r15w
mov rax, qword [rsp + 0x208]
mov qword [rsp + 0x178], rax
mov rax, qword [rsp + 0x200]
jmp 0x140405908
mov qword [rsp + 0x180], rax
jmp 0x140405918
mov rax, qword [rsp + 0x1f8]
jmp 0x140405925
mov qword [rsp + 0x188], rax
bswap eax
nop
cdqe
mov rax, qword [rsp + 0x1f0]
jmp 0x140405940
mov qword [rsp + 0x190], rax
movzx eax, r15w
mov ah, 0xfe
cdqe
mov rax, qword [rsp + 0x1e8]
jmp 0x14040595e
mov qword [rsp + 0x198], rax
jmp 0x14040596b
mov rax, qword [rsp + 0x1e0]
mov qword [rsp + 0x1a0], rax
bswap eax
mov rax, qword [rsp + 0x1d8]
jmp 0x14040598a
mov qword [rsp + 0x1a8], rax
cmove ax, di
not rax
setnp ah
mov rax, r13
jmp 0x1404059a4
movaps xmm0, xmmword [rsp + 0x40]
jmp 0x1404059ae
movaps xmm1, xmmword [rsp + 0x50]
movaps xmm2, xmmword [rsp + 0x60]
xorps xmm0, xmmword [rax]
movaps xmm3, xmmword [rsp + 0x70]
jmp 0x1404059c5
movaps xmmword [rsp + 0x40], xmm0
jmp 0x1404059cf
xorps xmm1, xmmword [rax + 0x10]
movaps xmmword [rsp + 0x50], xmm1
jmp 0x1404059dd
xorps xmm2, xmmword [rax + 0x20]
movaps xmmword [rsp + 0x60], xmm2
jmp 0x1404059eb
xorps xmm3, xmmword [rax + 0x30]
movaps xmmword [rsp + 0x70], xmm3
jmp 0x1404059f9
movaps xmm0, xmmword [rsp + 0x80]
xorps xmm0, xmmword [rax + 0x40]
movaps xmmword [rsp + 0x80], xmm0
jmp 0x140405a12
movaps xmm0, xmmword [rsp + 0x90]
jmp 0x140405a1f
xorps xmm0, xmmword [rax + 0x50]
movaps xmmword [rsp + 0x90], xmm0
movaps xmm0, xmmword [rsp + 0xa0]
jmp 0x140405a38
xorps xmm0, xmmword [rax + 0x60]
movaps xmmword [rsp + 0xa0], xmm0
jmp 0x140405a49
movaps xmm0, xmmword [rsp + 0xb0]
xorps xmm0, xmmword [rax + 0x70]
movaps xmmword [rsp + 0xb0], xmm0
jmp 0x140405a62
movaps xmm0, xmmword [rsp + 0xc0]
jmp 0x140405a6f
xorps xmm0, xmmword [rax + 0x80]
movaps xmmword [rsp + 0xc0], xmm0
movaps xmm0, xmmword [rsp + 0xd0]
jmp 0x140405a8b
xorps xmm0, xmmword [rax + 0x90]
movaps xmmword [rsp + 0xd0], xmm0
jmp 0x140405a9f
movaps xmm0, xmmword [rsp + 0xe0]
jmp 0x140405aac
xorps xmm0, xmmword [rax + 0xa0]
movaps xmmword [rsp + 0xe0], xmm0
movzx rdx, bx
jmp 0x140405ac4
lea rdx, [rsp + 0x40]
movsxd r8, r12d
movzx r8d, sp
mov rcx, 0xffffffff80000002
movzx r8, bx
movzx r8d, r9w
lea r8, [rsp + 0x30]
jmp 0x140405ae9
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyW]
mov rax, qword [rsp + 0x1d0]
bswap bx
not ebx
movsxd rbx, ebx
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x1c8]
not bl
xchg bx, bx
mov qword [rsp + 0x48], rax
movzx ebx, di
mov rbx, qword [rsp + 0x2e8]
movsx rax, bx
bswap rax
mov qword [rsp + 0x50], rbx
sets al
movsx rax, ax
jmp 0x140405b39
mov rax, qword [rsp + 0x1c0]
jmp 0x140405b46
mov qword [rsp + 0x58], rax
mov qword [rsp + 0x100], r15
jmp 0x140405b5d
mov qword [rsp + 0x108], r12
cwde
movzx eax, bx
mov qword [rsp + 0x110], rsi
seto ah
mov qword [rsp + 0x118], rdi
mov rax, r13
jmp 0x140405b84
movaps xmm0, xmmword [rsp + 0x40]
jmp 0x140405b8e
xorps xmm0, xmmword [rax]
movaps xmmword [rsp + 0x40], xmm0
jmp 0x140405b9b
movaps xmm0, xmmword [rsp + 0x50]
jmp 0x140405ba5
xorps xmm0, xmmword [rax + 0x10]
movaps xmmword [rsp + 0x50], xmm0
shr rax, 0xd9
btc r9, rdi
shl r9, 0x21
mov rcx, qword [rsp + 0x30]
ror dh, cl
rcr rax, 0x6b
clc
lea rax, [rsp + 0x3c]
inc dh
xor edx, r13d
bts r9w, cx
mov qword [rsp + 0x20], rax
xadd r9b, r9b
rol dh, 0x57
mov dword [rsp + 0x28], 4
bswap dx
shld dx, r15w, 0x29
dec r9
lea rdx, [rsp + 0x40]
test rax, rsp
test r14b, 0x8c
sub r8d, r8d
mov r9d, 4
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
mov rcx, qword [rsp + 0x30]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov rax, qword [rsp + 0x2e0]
jmp 0x140405c28
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x2d8]
jmp 0x140405c3a
mov qword [rsp + 0x48], rax
movsx eax, cx
mov rax, r11
movsx ax, cl
mov rax, qword [rsp + 0x2d0]
jmp 0x140405c56
mov qword [rsp + 0x50], rax
movzx rax, r8w
movsx rax, r15w
jmp 0x140405c68
mov rax, qword [rsp + 0x2c8]
jmp 0x140405c75
mov qword [rsp + 0x58], rax
movsx ax, r8b
mov rax, qword [rsp + 0x2c0]
jmp 0x140405c8c
mov qword [rsp + 0x60], rax
mov rax, qword [rsp + 0x2b8]
jmp 0x140405c9e
mov qword [rsp + 0x68], rax
movzx eax, r14w
mov rax, qword [rsp + 0x2b0]
jmp 0x140405cb4
mov qword [rsp + 0x70], rax
not ah
mov rax, qword [rsp + 0x2a8]
jmp 0x140405cc8
mov qword [rsp + 0x78], rax
not ah
lahf
cwde
mov rax, qword [rsp + 0x2a0]
mov qword [rsp + 0x80], rax
mov eax, 0x397100c8
mov rax, qword [rsp + 0x298]
jmp 0x140405cf3
mov qword [rsp + 0x88], rax
mov rax, qword [rsp + 0x290]
mov qword [rsp + 0x90], rax
movzx ax, r11b
mov rax, qword [rsp + 0x288]
mov qword [rsp + 0x98], rax
movsxd rax, r10d
not al
cwde
mov rax, qword [rsp + 0x280]
jmp 0x140405d33
mov qword [rsp + 0xa0], rax
mov rax, qword [rsp + 0x278]
jmp 0x140405d48
mov qword [rsp + 0xa8], rax
movzx rax, cx
mov rax, qword [rsp + 0x270]
jmp 0x140405d61
mov qword [rsp + 0xb0], rax
mov rax, qword [rsp + 0x268]
mov qword [rsp + 0xb8], rax
mov rax, qword [rsp + 0x260]
jmp 0x140405d86
mov qword [rsp + 0xc0], rax
seto ah
movzx rax, r11w
mov rax, qword [rsp + 0x258]
mov qword [rsp + 0xc8], rax
bswap rax
movabs rax, 0xd8c34edb048f52bb
mov qword [rsp + 0xd0], rax
movzx ax, r11b
movabs rax, 0xa5c8c98b4f83a416
jmp 0x140405dce
mov qword [rsp + 0xd8], rax
mov eax, 0x210e1656
cmova ax, r8w
not ah
movabs rax, 0x2eb290273e1edaf5
jmp 0x140405df1
mov qword [rsp + 0xe0], rax
movabs rax, 0x28f53e246680b95c
jmp 0x140405e08
mov qword [rsp + 0xe8], rax
cdqe
bswap rax
movsx rax, r13w
mov qword [rsp + 0x100], r15
mov qword [rsp + 0x108], r12
movsx ax, dl
cbw
not eax
mov qword [rsp + 0x110], rsi
mov qword [rsp + 0x118], rdi
mov qword [rsp + 0x120], rbp
not ax
mov qword [rsp + 0x128], r14
bswap eax
movsx ax, ch
setp ah
mov rax, qword [rsp + 0x250]
jmp 0x140405e6a
mov qword [rsp + 0x130], rax
cwde
jmp 0x140405e78
mov rax, qword [rsp + 0x248]
mov qword [rsp + 0x138], rax
movzx eax, bx
mov rax, qword [rsp + 0x240]
mov qword [rsp + 0x140], rax
mov rax, qword [rsp + 0x238]
jmp 0x140405ea8
mov qword [rsp + 0x148], rax
jmp 0x140405eb6
mov rax, qword [rsp + 0x230]
jmp 0x140405ec3
mov qword [rsp + 0x150], rax
not ax
lahf
mov rax, qword [rsp + 0x228]
jmp 0x140405edc
mov qword [rsp + 0x158], rax
movzx ax, bpl
cwde
cmovns ax, sp
mov rax, qword [rsp + 0x220]
jmp 0x140405efb
mov qword [rsp + 0x160], rax
mov rax, qword [rsp + 0x218]
jmp 0x140405f10
mov qword [rsp + 0x168], rax
mov rax, qword [rsp + 0x210]
jmp 0x140405f25
mov qword [rsp + 0x170], rax
movsx ax, r12b
mov rax, qword [rsp + 0x208]
jmp 0x140405f3f
mov qword [rsp + 0x178], rax
movzx eax, r9w
not eax
mov eax, 0x59511801
mov rax, qword [rsp + 0x200]
jmp 0x140405f5f
mov qword [rsp + 0x180], rax
jmp 0x140405f70
mov rax, qword [rsp + 0x1f8]
jmp 0x140405f7d
mov qword [rsp + 0x188], rax
setns al
bswap ax
mov rax, qword [rsp + 0x1f0]
mov qword [rsp + 0x190], rax
cmovbe ax, dx
movsx ax, spl
mov rax, qword [rsp + 0x1e8]
jmp 0x140405fb1
mov qword [rsp + 0x198], rax
movsxd rax, r14d
mov rax, qword [rsp + 0x1e0]
jmp 0x140405fc9