Function at 0x140400f26
Capabilities:
Set registry value

Disassembly:
push r15
adc eax, 0x70c0496f
btr r15w, 0xae
push r14
cmp r9b, sil
sar al, 0x67
push r13
bts r14, r10
push r12
push rsi
rcl r15b, 0x22
movzx r14w, sil
push rdi
rcl r14w, 0x87
setbe r12b
movsx si, r15b
push rbp
push rbx
sal bh, 0xfb
sub rsp, 0x2f8
jmp 0x140400f71
movabs rax, 0xe009ec3224c8fd6e
mov qword [rsp + 0x2e0], rax
cmovg rbx, rdx
mov qword [rsp + 0x40], rax
lahf
bswap di
movabs rax, 0x2204bcb80ebea5a3
xchg r13d, esi
setbe sil
bswap r15w
mov qword [rsp + 0x2d8], rax
bswap edi
mov qword [rsp + 0x48], rax
jmp 0x140400fc1
movabs rax, 0xfbc9f38de01f2fa2
mov qword [rsp + 0x2d0], rax
not r13w
jmp 0x140400fdc
mov qword [rsp + 0x50], rax
movsx r13w, spl
xchg sil, sil
movabs rax, 0x17a75ff95317a686
mov qword [rsp + 0x2c8], rax
mov r12w, ax
mov qword [rsp + 0x58], rax
bswap r14d
movsx r15w, r11b
jmp 0x140401011
movabs rax, 0xfd99d5578f55fa6f
setge r13b
not r13w
xchg bl, r15b
mov qword [rsp + 0x2c0], rax
movsx si, r9b
movsx rbp, r11w
mov qword [rsp + 0x60], rax
cwde
cdqe
movsx r12w, dil
movabs rax, 0x4b3964fdcd447246
xchg r13w, bp
movsx bx, r11b
movsxd r15, ebp
mov qword [rsp + 0x2b8], rax
mov qword [rsp + 0x68], rax
movabs rax, 0xee88324679eb2227
movsx r12w, sil
jmp 0x14040107b
mov qword [rsp + 0x2b0], rax
mov r12w, di
mov r12, 0x769235b9
movzx r13d, bx
mov qword [rsp + 0x70], rax
movsx r12, r13w
movabs rax, 0x6d7346ad6d4ffefa
mov qword [rsp + 0x2a8], rax
mov qword [rsp + 0x78], rax
cmovs esi, eax
movzx edi, r8w
movsx r14, si
movabs rax, 0xd093683aef376a76
mov r15d, r13d
mov qword [rsp + 0x2a0], rax
mov qword [rsp + 0x80], rax
cwde
movabs rax, 0xa80f93e9d32b8c6f
movzx di, r14b
mov qword [rsp + 0x298], rax
mov r13w, 0x5e38
xchg dil, r14b
mov qword [rsp + 0x88], rax
cbw
cdqe
cwde
movabs rax, 0x33e730243394033e
mov r15, rsi
mov qword [rsp + 0x290], rax
bswap bx
movsx r13w, r10b
mov qword [rsp + 0x90], rax
movabs rax, 0xe7e3977e114e6703
movsxd rbp, edi
mov si, 0x1294
mov qword [rsp + 0x288], rax
movsx esi, r15w
movzx r13d, si
mov qword [rsp + 0x98], rax
mov al, r15b
cdqe
movabs rax, 0xb0b65ec58a603c8
not r14w
movsx rdi, dx
xchg bh, bl
mov qword [rsp + 0x280], rax
mov qword [rsp + 0xa0], rax
movzx r14, r11w
movabs rax, 0x6708be65ca8156d7
mov r15b, 0x73
mov qword [rsp + 0x278], rax
seta sil
mov qword [rsp + 0xa8], rax
mov rdi, 0x58bd6e55
movabs rax, 0x46a7044da5524090
movzx r15d, r12w
movsx r15w, sil
movsx r12d, si
mov qword [rsp + 0x270], rax
movsx si, bl
mov qword [rsp + 0xb0], rax
setle r12b
movabs rax, 0x4b8cb541ca050f46
setb r12b
mov qword [rsp + 0x268], rax
movzx r13, r14w
mov bl, 0xdd
movsxd r15, esp
mov qword [rsp + 0xb8], rax
movzx ax, r15b
movsx bp, r15b
cmovbe rbp, r15
movabs rax, 0xe627ab41184af921
mov r13w, 0x5289
cmovs bx, r14w
mov qword [rsp + 0x260], rax
movsxd r13, eax
movzx esi, r10w
mov qword [rsp + 0xc0], rax
movabs rax, 0x34c77b6e31b9a
mov r14b, r8b
movsx rsi, di
jmp 0x14040124f
mov qword [rsp + 0x258], rax
mov qword [rsp + 0xc8], rax
mov r15b, 0xdc
movzx r12d, r12w
movabs rax, 0xd8cf4ec0049852bb
bswap r14w
not r15b
mov qword [rsp + 0xd0], rax
lahf
movabs rax, 0xa5eac9844f8ea419
cmovp r14d, r11d
mov bh, 0x26
mov qword [rsp + 0xd8], rax
lahf
movzx si, cl
mov qword [rsp + 0x30], 0
mov ebx, r9d
mov r13, 0x4aa840cc
movzx eax, r12w
mov dword [rsp + 0x3c], 0
mov r15w, 0x14bf
xchg r12b, bpl
movzx r13d, r8w
movabs rbp, 0x2eb490333e21dae3
movsx r15d, ax
mov r13b, 0x4c
sets sil
mov qword [rsp + 0xe0], rbp
mov dil, spl
cdqe
movabs r14, 0x28903e48668cb956
mov qword [rsp + 0xe8], r14
movzx esi, cx
movsx si, r13b
movabs r15, 0xe05dec612491fd3d
mov qword [rsp + 0x100], r15
cmovle di, cx
cdqe
movsx rsi, ax
movabs r12, 0x2247bce40ef3a5e6
bswap r13w
cmove bx, cx
mov qword [rsp + 0x108], r12
lahf
not bl
movsxd r13, edx
movabs rsi, 0xfbacf3ffe06d2fd7
cbw
jmp 0x140401356
mov qword [rsp + 0x110], rsi
movabs rdi, 0x17c85fba5363a6e8
mov qword [rsp + 0x118], rdi
jmp 0x14040137c
movabs rax, 0xfdf6d5258f21fa01
seto bl
movsx r13d, cx
movsx rbx, bx
mov qword [rsp + 0x120], rax
mov rbx, rax
mov ah, 0x95
movzx rax, r15w
jmp 0x1404013a8
movabs rax, 0x4b4d6498cd17722a
mov qword [rsp + 0x2f0], rax
not r13w
mov qword [rsp + 0x128], rax
jmp 0x1404013d5
movabs rax, 0xeefa322379b8227b
movsx r13, r13w
setp r13b
mov qword [rsp + 0x250], rax
mov qword [rsp + 0x130], rax
cdqe
movzx r13, r11w
movabs rax, 0x6d1646ce6d26fe8c
movsx r13, r8w
mov qword [rsp + 0x248], rax
movsx r13d, sp
movsx r13w, r13b
mov qword [rsp + 0x138], rax
cmovs r13w, r14w
cdqe
bswap ax
movabs rax, 0xd0fb6869ef6b6a05
not r13d
mov qword [rsp + 0x240], rax
mov qword [rsp + 0x140], rax
jmp 0x140401455
movabs rax, 0xa86b938cd3598c0e
mov qword [rsp + 0x238], rax
movsx r13, dx
movsx r13d, r14w
movsx r13w, sil
mov qword [rsp + 0x148], rax
seta ah
cdqe
movabs rax, 0x3382304733f7037f
movzx r13d, r10w
seta r13b
mov r13d, 0x6ed92e72
mov qword [rsp + 0x230], rax
mov qword [rsp + 0x150], rax
movsx ax, sil
movzx rax, r14w
mov r13d, esi
movabs rax, 0xe7b39722113d6770
mov qword [rsp + 0x228], rax
mov qword [rsp + 0x158], rax
jmp 0x1404014d4
movabs rax, 0xb66658d58d403a9
movzx r13, r13w
cmovl r13w, sp
mov qword [rsp + 0x220], rax
movsx r13w, al
not r13b
mov qword [rsp + 0x160], rax
lahf
not r13d
movabs rax, 0x677abe00caf556b2
mov qword [rsp + 0x218], rax
mov qword [rsp + 0x168], rax
movabs rax, 0x46ce040ba50e40e3
movsx r13w, r15b
movsx r13, r10w
mov qword [rsp + 0x210], rax
movzx r13, r13w
movsx r13, cx
mov qword [rsp + 0x170], rax
not r13b
movabs rax, 0x4bedb536ca600f34
mov qword [rsp + 0x208], rax
cmove r13, r8
mov qword [rsp + 0x178], rax
setge r13b
movabs rax, 0xe648ab111826f94d
movzx r13, di
setns r13b
movzx r13d, r9w
mov qword [rsp + 0x200], rax
movzx r13d, dx
movsxd r13, edi
mov qword [rsp + 0x180], rax
movsxd rax, r11d
bswap ax
movabs rax, 0x7a4c14b68a1bf6
movzx r13d, bp
movzx r13w, bpl
mov qword [rsp + 0x1f8], rax
movsxd r13, ebp
movzx r13, r11w
xchg r13b, r13b
mov qword [rsp + 0x188], rax
movabs rax, 0xd8a24eaf04dc52e7
movsxd r13, edi
movzx r13w, dl
movzx r13, di
mov qword [rsp + 0x1f0], rax
movzx r13w, r12b
mov r13b, spl
cmovs r13, rsi
mov qword [rsp + 0x190], rax
jmp 0x140401608
movabs rax, 0xa5bac9ea4fe7a478
not r13
bswap r13
mov r13w, bx
mov qword [rsp + 0x1e8], rax
mov r13b, 0x76
movzx r13d, di
movsx r13w, r8b
mov qword [rsp + 0x198], rax
cbw
cmove r13w, ax
movabs rax, 0x2edd90553e4eda91
movzx r13d, r14w
not r13b
cmovns r13w, r11w
mov qword [rsp + 0x1e0], rax
movsx r13w, r15b
movsx r13d, r10w
not r13w
mov qword [rsp + 0x1a0], rax
setge r13b
cmovle r13w, r13w
movzx eax, bp
movabs rax, 0x28903e4866e9b93a
setno r13b
movsx r13w, sil
cmovae r13d, r13d
mov qword [rsp + 0x1d8], rax
cmovg r13, rbp
movzx r13w, sil
mov qword [rsp + 0x1a8], rax
bswap eax
lea r13, [rsp + 0x100]
mov rax, r13
jmp 0x1404016c0
movaps xmm0, xmmword [rsp + 0x40]
jmp 0x1404016ca
xorps xmm0, xmmword [rax]
movaps xmmword [rsp + 0x40], xmm0
jmp 0x1404016d7
movaps xmm0, xmmword [rsp + 0x50]
jmp 0x1404016e1
xorps xmm0, xmmword [rax + 0x10]
movaps xmmword [rsp + 0x50], xmm0
jmp 0x1404016ef
movaps xmm0, xmmword [rsp + 0x60]
jmp 0x1404016f9
xorps xmm0, xmmword [rax + 0x20]
movaps xmmword [rsp + 0x60], xmm0
jmp 0x140401707
movaps xmm0, xmmword [rsp + 0x70]
xorps xmm0, xmmword [rax + 0x30]
movaps xmmword [rsp + 0x70], xmm0
movaps xmm0, xmmword [rsp + 0x80]
jmp 0x140401722
xorps xmm0, xmmword [rax + 0x40]
movaps xmmword [rsp + 0x80], xmm0
jmp 0x140401733
movaps xmm0, xmmword [rsp + 0x90]
jmp 0x140401740
xorps xmm0, xmmword [rax + 0x50]
movaps xmmword [rsp + 0x90], xmm0
jmp 0x140401751
movaps xmm0, xmmword [rsp + 0xa0]
jmp 0x14040175e
xorps xmm0, xmmword [rax + 0x60]
movaps xmmword [rsp + 0xa0], xmm0
jmp 0x14040176f
movaps xmm0, xmmword [rsp + 0xb0]
jmp 0x14040177c
xorps xmm0, xmmword [rax + 0x70]
movaps xmmword [rsp + 0xb0], xmm0
movaps xmm0, xmmword [rsp + 0xc0]
jmp 0x140401795
xorps xmm0, xmmword [rax + 0x80]
movaps xmmword [rsp + 0xc0], xmm0
jmp 0x1404017a9
movaps xmm0, xmmword [rsp + 0xd0]
jmp 0x1404017b6
xorps xmm0, xmmword [rax + 0x90]
movaps xmmword [rsp + 0xd0], xmm0
jmp 0x1404017ca
movaps xmm0, xmmword [rsp + 0xe0]
jmp 0x1404017d7
xorps xmm0, xmmword [rax + 0xa0]
movaps xmmword [rsp + 0xe0], xmm0
xchg rdx, r8
movzx r8d, di
lea rdx, [rsp + 0x40]
lea r8, [rsp + 0x30]
mov rcx, 0xffffffff80000002
jmp 0x140401803
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyW]
movabs rax, 0xe03fec0024fffd78
jmp 0x140401818
mov qword [rsp + 0x1d0], rax
jmp 0x140401825
mov qword [rsp + 0x40], rax
movabs rax, 0x222ebca20e96a58a
jmp 0x140401839
mov qword [rsp + 0x1c8], rax
mov qword [rsp + 0x48], rax
movsxd rax, esi
movabs rax, 0xfbcdf388e0082fa5
jmp 0x140401858
mov qword [rsp + 0x2e8], rax
jmp 0x140401865
mov qword [rsp + 0x50], rax
movabs rax, 0x17c85fba530fa684
jmp 0x140401879
mov qword [rsp + 0x1c0], rax
mov qword [rsp + 0x58], rax
mov ah, 0xdb
not ax
mov qword [rsp + 0x100], r15
mov al, sil
movzx ax, r10b
bswap rax
mov qword [rsp + 0x108], r12
movzx rax, r8w
lahf
cwde
mov qword [rsp + 0x110], rsi
cmovb eax, edi
movsx ax, dh
cdqe
mov qword [rsp + 0x118], rdi
not ah
mov rax, r13
movaps xmm0, xmmword [rsp + 0x40]
jmp 0x1404018d5
xorps xmm0, xmmword [rax]
movaps xmmword [rsp + 0x40], xmm0
jmp 0x1404018e2
movaps xmm0, xmmword [rsp + 0x50]
jmp 0x1404018ec
xorps xmm0, xmmword [rax + 0x10]
movaps xmmword [rsp + 0x50], xmm0
mov rcx, qword [rsp + 0x30]
lea rax, [rsp + 0x3c]
inc dh
add dx, 0x269
adc r9w, 0x2e7
mov qword [rsp + 0x20], rax
bswap r9
sal r9, 0x1f
mov dword [rsp + 0x28], 4
lea rdx, [rsp + 0x40]
cmovle r9, r11
sub r8d, r8d
mov r9d, 4
jmp 0x140401937
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
mov rcx, qword [rsp + 0x30]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov rax, qword [rsp + 0x2e0]
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x2d8]
jmp 0x140401962
mov qword [rsp + 0x48], rax
cwde
mov rax, qword [rsp + 0x2d0]
mov qword [rsp + 0x50], rax
jmp 0x140401980
mov rax, qword [rsp + 0x2c8]
jmp 0x14040198d
mov qword [rsp + 0x58], rax
mov rax, qword [rsp + 0x2c0]
jmp 0x14040199f
mov qword [rsp + 0x60], rax
not al
mov rax, qword [rsp + 0x2b8]
mov qword [rsp + 0x68], rax
mov rax, qword [rsp + 0x2b0]
mov qword [rsp + 0x70], rax
mov rax, qword [rsp + 0x2a8]
mov qword [rsp + 0x78], rax
cmovno rax, r15
movsxd rax, r9d
mov rax, qword [rsp + 0x2a0]
jmp 0x1404019e1
mov qword [rsp + 0x80], rax
movsxd rax, r15d
mov rax, qword [rsp + 0x298]
mov qword [rsp + 0x88], rax
movsx ax, r11b
mov rax, qword [rsp + 0x290]
mov qword [rsp + 0x90], rax
jmp 0x140401a16
mov rax, qword [rsp + 0x288]
jmp 0x140401a23
mov qword [rsp + 0x98], rax
movsx rax, r12w
cbw
mov rax, qword [rsp + 0x280]
jmp 0x140401a3e
mov qword [rsp + 0xa0], rax
sets al
movzx rax, r11w
movzx ax, r9b
mov rax, qword [rsp + 0x278]
jmp 0x140401a5f
mov qword [rsp + 0xa8], rax
movzx rax, r10w
mov ax, 0x2111
mov eax, r14d
mov rax, qword [rsp + 0x270]
jmp 0x140401a7f
mov qword [rsp + 0xb0], rax
not ax
mov ah, 0x60
mov rax, qword [rsp + 0x268]
jmp 0x140401a9a
mov qword [rsp + 0xb8], rax
setae al
mov rax, qword [rsp + 0x260]
mov qword [rsp + 0xc0], rax
mov rax, qword [rsp + 0x258]
mov qword [rsp + 0xc8], rax
movabs rax, 0xd8c04eda048c52bb
jmp 0x140401ad4
mov qword [rsp + 0xd0], rax
movsx rax, cx
movabs rax, 0xa5eac9894f8ea414
jmp 0x140401aef
mov qword [rsp + 0xd8], rax
mov qword [rsp + 0xe0], rbp
movsxd rbp, r15d
movzx rax, bp
mov qword [rsp + 0xe8], r14
mov qword [rsp + 0x100], r15
not bpl
xchg r14b, bpl
mov r14d, ecx
mov qword [rsp + 0x108], r12
setnp r14b
mov qword [rsp + 0x110], rsi
movsxd r14, esp
movsx rbp, cx
mov qword [rsp + 0x118], rdi
movzx rbp, r10w
cdqe
mov rbp, rbx
cbw
mov ah, 0x34
mov qword [rsp + 0x120], rbx
cbw
movsxd r14, eax
cdqe
mov r14, qword [rsp + 0x2f0]
lahf
mov qword [rsp + 0x128], r14
bswap eax
movsxd rax, eax
cwde
mov rax, qword [rsp + 0x250]
jmp 0x140401b83
mov qword [rsp + 0x130], rax
movsx ax, r14b
not al
cmovl ax, di
mov rax, qword [rsp + 0x248]
jmp 0x140401ba3
mov qword [rsp + 0x138], rax
movsxd rax, r11d
movzx eax, r11w
mov rax, qword [rsp + 0x240]
jmp 0x140401bbf
mov qword [rsp + 0x140], rax
mov rax, qword [rsp + 0x238]
jmp 0x140401bd4
mov qword [rsp + 0x148], rax
cwde
mov rax, qword [rsp + 0x230]
mov qword [rsp + 0x150], rax
movsxd rax, eax
setae al
movzx eax, r9w
mov rax, qword [rsp + 0x228]
jmp 0x140401c04
mov qword [rsp + 0x158], rax
movsx rax, r13w
mov rax, qword [rsp + 0x220]
mov qword [rsp + 0x160], rax
movsx eax, r14w
cmove ax, r13w
mov rax, qword [rsp + 0x218]
jmp 0x140401c36
mov qword [rsp + 0x168], rax
mov rax, qword [rsp + 0x210]
mov qword [rsp + 0x170], rax
movzx ax, spl
mov rax, qword [rsp + 0x208]
jmp 0x140401c60
mov qword [rsp + 0x178], rax
not al
mov rax, qword [rsp + 0x200]
jmp 0x140401c77
mov qword [rsp + 0x180], rax
movzx ax, sil
mov rax, qword [rsp + 0x1f8]
jmp 0x140401c91
mov qword [rsp + 0x188], rax
not al
mov rax, qword [rsp + 0x1f0]
jmp 0x140401ca8
mov qword [rsp + 0x190], rax
mov ax, r14w
movsx rax, r15w
cbw
mov rax, qword [rsp + 0x1e8]
mov qword [rsp + 0x198], rax
movzx eax, sp
mov al, r8b
mov rax, qword [rsp + 0x1e0]
jmp 0x140401cdd
mov qword [rsp + 0x1a0], rax
not al
bswap ax
mov rax, qword [rsp + 0x1d8]
jmp 0x140401cf7
mov qword [rsp + 0x1a8], rax
movzx rax, di
xchg al, al
mov rax, r13
jmp 0x140401d0d
movaps xmm0, xmmword [rsp + 0x40]
jmp 0x140401d17
movaps xmm1, xmmword [rsp + 0x50]
jmp 0x140401d21
movaps xmm2, xmmword [rsp + 0x60]
jmp 0x140401d2b
xorps xmm0, xmmword [rax]
movaps xmm3, xmmword [rsp + 0x70]
movaps xmmword [rsp + 0x40], xmm0
xorps xmm1, xmmword [rax + 0x10]
movaps xmmword [rsp + 0x50], xmm1
jmp 0x140401d46
xorps xmm2, xmmword [rax + 0x20]
movaps xmmword [rsp + 0x60], xmm2
xorps xmm3, xmmword [rax + 0x30]
movaps xmmword [rsp + 0x70], xmm3
movaps xmm0, xmmword [rsp + 0x80]
jmp 0x140401d65
xorps xmm0, xmmword [rax + 0x40]
movaps xmmword [rsp + 0x80], xmm0
jmp 0x140401d76
movaps xmm0, xmmword [rsp + 0x90]
jmp 0x140401d83
xorps xmm0, xmmword [rax + 0x50]
movaps xmmword [rsp + 0x90], xmm0
movaps xmm0, xmmword [rsp + 0xa0]
xorps xmm0, xmmword [rax + 0x60]
movaps xmmword [rsp + 0xa0], xmm0
jmp 0x140401da8
movaps xmm0, xmmword [rsp + 0xb0]
xorps xmm0, xmmword [rax + 0x70]
movaps xmmword [rsp + 0xb0], xmm0
jmp 0x140401dc1
movaps xmm0, xmmword [rsp + 0xc0]
xorps xmm0, xmmword [rax + 0x80]
movaps xmmword [rsp + 0xc0], xmm0
jmp 0x140401ddd
movaps xmm0, xmmword [rsp + 0xd0]
jmp 0x140401dea
xorps xmm0, xmmword [rax + 0x90]
movaps xmmword [rsp + 0xd0], xmm0
jmp 0x140401dfe
movaps xmm0, xmmword [rsp + 0xe0]
jmp 0x140401e0b
xorps xmm0, xmmword [rax + 0xa0]
movaps xmmword [rsp + 0xe0], xmm0
cwd
lea rdx, [rsp + 0x40]
movsx r8, cx
movsxd rcx, r15d
jmp 0x140401e2d
mov rcx, 0xffffffff80000002
lea r8, [rsp + 0x30]
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyW]
mov rax, qword [rsp + 0x1d0]
xchg bx, bx
movsx bx, ah
mov qword [rsp + 0x40], rax
mov al, 0x9b
mov rax, qword [rsp + 0x1c8]
movzx ebx, r12w
mov qword [rsp + 0x48], rax
movsxd rbx, esi
cbw
movzx bx, r14b
mov rbx, qword [rsp + 0x2e8]
cwde
movsxd rax, ecx
mov qword [rsp + 0x50], rbx
movsx ax, r15b
mov rax, qword [rsp + 0x1c0]
jmp 0x140401e93
mov qword [rsp + 0x58], rax
movzx rax, r11w
movsx rax, ax
mov qword [rsp + 0x100], r15
mov qword [rsp + 0x108], r12
cbw
mov qword [rsp + 0x110], rsi
mov ax, di
mov qword [rsp + 0x118], rdi
movsxd rax, r11d
mov rax, r13
movaps xmm0, xmmword [rsp + 0x40]
xorps xmm0, xmmword [rax]
movaps xmmword [rsp + 0x40], xmm0
jmp 0x140401edd
movaps xmm0, xmmword [rsp + 0x50]
jmp 0x140401ee7
xorps xmm0, xmmword [rax + 0x10]
movaps xmmword [rsp + 0x50], xmm0
mov rax, r10
mov rcx, qword [rsp + 0x30]
shl r9w, 0x30
cmp sil, r10b
lea rax, [rsp + 0x3c]
bswap r9w
cmp bpl, r14b
mov qword [rsp + 0x20], rax
rcr dx, cl
mov dword [rsp + 0x28], 4
sar r9b, 0xaa
cmp eax, ebp
test dl, dil
lea rdx, [rsp + 0x40]
sub r9b, 0xf6
bts r9, rsp
mov r9, 0x4ecd2c85
sub r8d, r8d
mov r9d, 4
jmp 0x140401f47
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
mov rcx, qword [rsp + 0x30]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov rax, qword [rsp + 0x2e0]
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x2d8]
jmp 0x140401f72
mov qword [rsp + 0x48], rax
cbw
movsx ax, sil
mov rax, qword [rsp + 0x2d0]
mov qword [rsp + 0x50], rax
cbw
mov rax, qword [rsp + 0x2c8]
mov qword [rsp + 0x58], rax
movzx eax, cx
movsx ax, bh
mov rax, qword [rsp + 0x2c0]
jmp 0x140401fae
mov qword [rsp + 0x60], rax
mov ah, 0x5e
jmp 0x140401fbb
mov rax, qword [rsp + 0x2b8]
jmp 0x140401fc8
mov qword [rsp + 0x68], rax
mov rax, qword [rsp + 0x2b0]
jmp 0x140401fda
mov qword [rsp + 0x70], rax
lahf
mov rax, qword [rsp + 0x2a8]
mov qword [rsp + 0x78], rax
mov rax, qword [rsp + 0x2a0]
mov qword [rsp + 0x80], rax
mov rax, qword [rsp + 0x298]
jmp 0x14040200a
mov qword [rsp + 0x88], rax
movsx eax, ax
setae ah
mov rax, 0x22b94cf7
mov rax, qword [rsp + 0x290]
jmp 0x14040202c
mov qword [rsp + 0x90], rax
sete al
movzx ax, bl
nop
mov rax, qword [rsp + 0x288]
mov qword [rsp + 0x98], rax
cdqe
movzx eax, r11w
mov rax, qword [rsp + 0x280]
jmp 0x140402060
mov qword [rsp + 0xa0], rax
cdqe
mov rax, qword [rsp + 0x278]
mov qword [rsp + 0xa8], rax
mov rax, qword [rsp + 0x270]
jmp 0x140402087
mov qword [rsp + 0xb0], rax
mov rax, 0x2af64987
lahf
mov eax, r15d
mov rax, qword [rsp + 0x268]
jmp 0x1404020a7
mov qword [rsp + 0xb8], rax
mov rax, qword [rsp + 0x260]
jmp 0x1404020bc
mov qword [rsp + 0xc0], rax
cdqe
mov rax, qword [rsp + 0x258]
jmp 0x1404020d3
mov qword [rsp + 0xc8], rax
movzx rax, dx
cdqe
sete al
movabs rax, 0xd8c34edb048f52bb
mov qword [rsp + 0xd0], rax
not rax
bswap ax
cmovnp eax, r11d
movabs rax, 0xa5c8c98b4f83a416
jmp 0x14040210f
mov qword [rsp + 0xd8], rax
movsx eax, dx
mov al, r11b
nop
movabs rax, 0x2eb290273e1edaf5
jmp 0x14040212e
mov qword [rsp + 0xe0], rax
movsx eax, si
mov al, 0xf7
mov al, r14b
movabs rax, 0x28f53e246680b95c
mov qword [rsp + 0xe8], rax
lahf
movsxd rax, edi
mov qword [rsp + 0x100], r15
mov qword [rsp + 0x108], r12
jmp 0x14040216c
mov qword [rsp + 0x110], rsi
movsxd rax, esi
jmp 0x14040217c
mov qword [rsp + 0x118], rdi
setnp ah
cmovbe ax, r10w
movsx ax, bh
mov qword [rsp + 0x120], rbp
mov qword [rsp + 0x128], r14
not al
mov rax, qword [rsp + 0x250]
jmp 0x1404021af
mov qword [rsp + 0x130], rax
movsxd rax, r12d
bswap ax
mov rax, qword [rsp + 0x248]
jmp 0x1404021ca
mov qword [rsp + 0x138], rax
bswap ax
mov rax, qword [rsp + 0x240]
jmp 0x1404021e2
mov qword [rsp + 0x140], rax
mov rax, qword [rsp + 0x238]
jmp 0x1404021f7
mov qword [rsp + 0x148], rax
setno ah
movzx ax, dil
mov ax, 0x4653
mov rax, qword [rsp + 0x230]
jmp 0x140402218
mov qword [rsp + 0x150], rax
movsx eax, r9w
jmp 0x14040222e
mov rax, qword [rsp + 0x228]
jmp 0x14040223b
mov qword [rsp + 0x158], rax
cwde
mov ah, 0xef
nop
mov rax, qword [rsp + 0x220]
mov qword [rsp + 0x160], rax
mov rax, qword [rsp + 0x218]
jmp 0x140402265
mov qword [rsp + 0x168], rax
movsx ax, r9b
movzx ax, dil
mov rax, qword [rsp + 0x210]
jmp 0x140402284
mov qword [rsp + 0x170], rax
mov eax, 0x766e05e4
nop
cwde
mov rax, qword [rsp + 0x208]
jmp 0x1404022a1
mov qword [rsp + 0x178], rax
bswap eax
cmovge eax, edx
seto ah
mov rax, qword [rsp + 0x200]
jmp 0x1404022be
mov qword [rsp + 0x180], rax
cwde
mov rax, qword [rsp + 0x1f8]
jmp 0x1404022d4
mov qword [rsp + 0x188], rax
mov rax, qword [rsp + 0x1f0]
jmp 0x1404022e9
mov qword [rsp + 0x190], rax
movsx rax, r10w
mov ah, 3
not rax
mov rax, qword [rsp + 0x1e8]
jmp 0x140402308
mov qword [rsp + 0x198], rax
movsxd rax, edx
mov ax, 0x6b74
not ax
mov rax, qword [rsp + 0x1e0]
jmp 0x140402327
mov qword [rsp + 0x1a0], rax
mov eax, r13d
movsxd rax, r10d
mov rax, qword [rsp + 0x1d8]
jmp 0x140402342
mov qword [rsp + 0x1a8], rax
jmp 0x14040234f
movabs rax, 0xa1410f538a85c08b
jmp 0x14040235e
mov qword [rsp + 0xf0], rax
jmp 0x14040236b
mov qword [rsp + 0x1b0], rax
jmp 0x140402378
movabs rax, 0x6078a8fe5539451c
mov qword [rsp + 0xf8], rax
mov qword [rsp + 0x1b8], rax
cwde
mov rax, r13
jmp 0x14040239b
movaps xmm0, xmmword [rsp + 0x40]
jmp 0x1404023a5
movaps xmm1, xmmword [rsp + 0x50]
movaps xmm2, xmmword [rsp + 0x60]
jmp 0x1404023b4
xorps xmm0, xmmword [rax]
movaps xmm3, xmmword [rsp + 0x70]
jmp 0x1404023c1
movaps xmmword [rsp + 0x40], xmm0
jmp 0x1404023cb
xorps xmm1, xmmword [rax + 0x10]
movaps xmmword [rsp + 0x50], xmm1
xorps xmm2, xmmword [rax + 0x20]
movaps xmmword [rsp + 0x60], xmm2
xorps xmm3, xmmword [rax + 0x30]
movaps xmmword [rsp + 0x70], xmm3
jmp 0x1404023eb