Function at 0x1403ff32d
Capabilities:
Set registry value

Disassembly:
push r15
push r14
test rax, 0x666c2a4e
push r13
push r12
ror r12b, cl
push rsi
push rdi
sbb r15b, r9b
mov r12w, bp
ror sil, cl
push rbp
rcl al, 0x5a
btr ax, 0x6e
shr si, 0xd1
push rbx
or ah, 0x16
rcl bl, cl
clc
sub rsp, 0x2f8
jmp 0x1403ff372
movabs rax, 0xe009ec3224c8fd6e
movsx r15, r12w
movzx r12w, cl
mov r12, 0x5f030720
mov qword [rsp + 0x2e0], rax
mov qword [rsp + 0x40], rax
movabs rax, 0x2204bcb80ebea5a3
jmp 0x1403ff3ad
mov qword [rsp + 0x2d8], rax
movzx r13, r11w
movsx r15, r11w
cmova r14, r9
mov qword [rsp + 0x48], rax
bswap di
seto dil
movabs rax, 0xfbc9f38de01f2fa2
mov qword [rsp + 0x2d0], rax
movzx r14w, r13b
movsx rbp, r9w
movsxd r14, ebx
mov qword [rsp + 0x50], rax
cmove r12d, esi
movabs rax, 0x17a75ff95317a686
cmovbe rdi, rax
movsx r14d, r13w
mov qword [rsp + 0x2c8], rax
not di
mov qword [rsp + 0x58], rax
setnp r15b
movzx r12d, r9w
movabs rax, 0xfd99d5578f55fa6f
mov qword [rsp + 0x2c0], rax
movzx bx, sil
mov qword [rsp + 0x60], rax
mov bx, 0x72de
movsx r15w, r12b
movabs rax, 0x4b3964fdcd447246
not r12w
jmp 0x1403ff456
mov qword [rsp + 0x2b8], rax
xchg r12w, di
movsx r14w, r15b
mov r12b, 0x42
mov qword [rsp + 0x68], rax
movzx rbp, ax
movabs rax, 0xee88324679eb2227
movsx r13, di
mov qword [rsp + 0x2b0], rax
movsxd r14, ebx
movsx r15w, r8b
cmovl si, r11w
mov qword [rsp + 0x70], rax
movabs rax, 0x6d7346ad6d4ffefa
xchg r14d, r14d
sete r13b
movsxd r15, r13d
mov qword [rsp + 0x2a8], rax
mov qword [rsp + 0x78], rax
movabs rax, 0xd093683aef376a76
xchg r12, r13
movzx r15, dx
movzx bx, r12b
mov qword [rsp + 0x2a0], rax
jmp 0x1403ff4df
mov qword [rsp + 0x80], rax
movzx ax, r14b
movabs rax, 0xa80f93e9d32b8c6f
mov qword [rsp + 0x298], rax
xchg r15b, r14b
bswap r12w
mov qword [rsp + 0x88], rax
movzx r15, di
movsx r14w, r13b
movabs rax, 0x33e730243394033e
movzx r12d, dx
movsxd r14, eax
mov qword [rsp + 0x290], rax
setns r12b
movsx bx, r15b
bswap bx
mov qword [rsp + 0x90], rax
cbw
movabs rax, 0xe7e3977e114e6703
mov bpl, 0x36
xchg bp, r12w
jmp 0x1403ff55b
mov qword [rsp + 0x288], rax
mov qword [rsp + 0x98], rax
movsx r12, sp
xchg r13, r14
movabs rax, 0xb0b65ec58a603c8
bswap r15
xchg dil, r14b
mov qword [rsp + 0x280], rax
not bh
mov qword [rsp + 0xa0], rax
xchg edi, esi
bswap r13w
cmovae esi, r12d
movabs rax, 0x6708be65ca8156d7
movzx edi, r11w
cmovp r14, r13
mov qword [rsp + 0x278], rax
xchg bp, r14w
mov qword [rsp + 0xa8], rax
movabs rax, 0x46a7044da5524090
movzx esi, bx
mov qword [rsp + 0x270], rax
cmovnp r12d, r12d
mov sil, 0xef
movsxd rsi, edx
mov qword [rsp + 0xb0], rax
movabs rax, 0x4b8cb541ca050f46
mov qword [rsp + 0x268], rax
movzx r15, r12w
mov qword [rsp + 0xb8], rax
mov al, dil
movsx r13, r9w
xchg r15, rbp
movabs rax, 0xe627ab41184af921
mov qword [rsp + 0x260], rax
jmp 0x1403ff62e
mov qword [rsp + 0xc0], rax
cmovbe bp, r12w
movzx r12d, dx
xchg r13d, r14d
movabs rax, 0x34c77b6e31b9a
mov qword [rsp + 0x258], rax
bswap rbp
mov qword [rsp + 0xc8], rax
movabs rax, 0xd8cf4ec0049852bb
jmp 0x1403ff66e
mov qword [rsp + 0xd0], rax
movabs rax, 0xa5eac9844f8ea419
movsx rdi, cx
mov qword [rsp + 0xd8], rax
not bpl
movsxd rbx, r8d
mov qword [rsp + 0x30], 0
movsx r15w, r13b
cbw
movzx di, r13b
mov dword [rsp + 0x3c], 0
movzx ebp, di
mov bp, 0x433e
bswap bx
movabs rbp, 0x2eb490333e21dae3
movsx r13d, r10w
cwde
movsx r13w, r9b
mov qword [rsp + 0xe0], rbp
jmp 0x1403ff6e2
movabs r14, 0x28903e48668cb956
mov qword [rsp + 0xe8], r14
xchg si, si
movabs r15, 0xe05dec612491fd3d
jmp 0x1403ff706
mov qword [rsp + 0x100], r15
cwde
movabs r12, 0x2247bce40ef3a5e6
mov qword [rsp + 0x108], r12
mov r13, 0x3fdb7980
movabs rsi, 0xfbacf3ffe06d2fd7
lahf
mov qword [rsp + 0x110], rsi
not r13b
movzx rax, di
movabs rdi, 0x17c85fba5363a6e8
mov qword [rsp + 0x118], rdi
cmovb ax, r15w
lahf
movabs rax, 0xfdf6d5258f21fa01
mov qword [rsp + 0x120], rax
mov rbx, rax
cbw
jmp 0x1403ff77a
movabs rax, 0x4b4d6498cd17722a
cmovp r13d, r13d
mov r13w, 0x5a31
xchg r13b, r13b
mov qword [rsp + 0x2f0], rax
bswap r13
mov qword [rsp + 0x128], rax
movabs rax, 0xeefa322379b8227b
not r13b
movzx r13, di
mov qword [rsp + 0x250], rax
movzx r13w, dl
movsx r13d, si
mov qword [rsp + 0x130], rax
movsxd r13, r11d
mov r13, 0x268065dc
movabs rax, 0x6d1646ce6d26fe8c
xchg r13b, r13b
movsx r13d, cx
movzx r13d, r14w
mov qword [rsp + 0x248], rax
mov r13b, bl
not r13b
jmp 0x1403ff7ff
mov qword [rsp + 0x138], rax
movzx ax, dh
cmovne r13w, ax
bswap rax
movabs rax, 0xd0fb6869ef6b6a05
movsx r13, r13w
mov qword [rsp + 0x240], rax
cmovbe r13d, eax
mov r13b, 0xf6
mov qword [rsp + 0x140], rax
movabs rax, 0xa86b938cd3598c0e
mov r13w, 0x643d
movzx r13d, r15w
jmp 0x1403ff850
mov qword [rsp + 0x238], rax
mov qword [rsp + 0x148], rax
mov ax, r15w
movabs rax, 0x3382304733f7037f
movzx r13w, al
mov qword [rsp + 0x230], rax
mov qword [rsp + 0x150], rax
movsxd r13, esi
movsx r13, bx
movabs rax, 0xe7b39722113d6770
setns r13b
mov qword [rsp + 0x228], rax
movzx r13w, spl
mov qword [rsp + 0x158], rax
mov al, r12b
movsx rax, di
movzx ax, r12b
movabs rax, 0xb66658d58d403a9
movsx r13, r11w
mov qword [rsp + 0x220], rax
setne r13b
mov r13b, 0xb
not r13b
mov qword [rsp + 0x160], rax
bswap r13w
mov eax, r8d
movabs rax, 0x677abe00caf556b2
setnp r13b
movzx r13d, dx
mov qword [rsp + 0x218], rax
xchg r13b, r13b
mov qword [rsp + 0x168], rax
movzx r13d, r11w
movabs rax, 0x46ce040ba50e40e3
bswap r13
mov qword [rsp + 0x210], rax
movzx r13d, di
movsx r13, bp
mov qword [rsp + 0x170], rax
mov r13b, bl
cmovp r13w, sp
movsx r13w, r9b
movabs rax, 0x4bedb536ca600f34
xchg r13b, r13b
movzx r13d, bx
movzx r13w, r12b
mov qword [rsp + 0x208], rax
mov qword [rsp + 0x178], rax
movsx r13w, al
cbw
movabs rax, 0xe648ab111826f94d
movsx r13d, r14w
mov r13b, al
cmovbe r13d, edi
mov qword [rsp + 0x200], rax
not r13w
movsx r13w, r13b
mov qword [rsp + 0x180], rax
movzx rax, r13w
mov r13, r13
movzx ax, r11b
movabs rax, 0x7a4c14b68a1bf6
movsx r13d, si
movsxd r13, eax
mov r13w, 0x3c95
mov qword [rsp + 0x1f8], rax
cmovl r13w, r13w
mov qword [rsp + 0x188], rax
movabs rax, 0xd8a24eaf04dc52e7
mov r13b, bl
jmp 0x1403ff9e7
mov qword [rsp + 0x1f0], rax
bswap r13d
not r13b
mov qword [rsp + 0x190], rax
not r13b
cmovb eax, r8d
movabs rax, 0xa5bac9ea4fe7a478
movzx r13, r9w
mov qword [rsp + 0x1e8], rax
cmovb r13w, dx
mov qword [rsp + 0x198], rax
lahf
movabs rax, 0x2edd90553e4eda91
mov qword [rsp + 0x1e0], rax
movsx r13w, al
movzx r13, bp
not r13b
mov qword [rsp + 0x1a0], rax
jmp 0x1403ffa55
movabs rax, 0x28903e4866e9b93a
movzx r13w, bpl
xchg r13w, r13w
mov qword [rsp + 0x1d8], rax
cmovl r13, r8
movsx r13w, r10b
movsx r13, bp
mov qword [rsp + 0x1a8], rax
lea r13, [rsp + 0x100]
mov rax, r13
movaps xmm0, xmmword [rsp + 0x40]
xorps xmm0, xmmword [rax]
movaps xmmword [rsp + 0x40], xmm0
jmp 0x1403ffaa2
movaps xmm0, xmmword [rsp + 0x50]
jmp 0x1403ffaac
xorps xmm0, xmmword [rax + 0x10]
movaps xmmword [rsp + 0x50], xmm0
movaps xmm0, xmmword [rsp + 0x60]
jmp 0x1403ffabf
xorps xmm0, xmmword [rax + 0x20]
movaps xmmword [rsp + 0x60], xmm0
jmp 0x1403ffacd
movaps xmm0, xmmword [rsp + 0x70]
jmp 0x1403ffad7
xorps xmm0, xmmword [rax + 0x30]
movaps xmmword [rsp + 0x70], xmm0
jmp 0x1403ffae5
movaps xmm0, xmmword [rsp + 0x80]
xorps xmm0, xmmword [rax + 0x40]
movaps xmmword [rsp + 0x80], xmm0
jmp 0x1403ffafe
movaps xmm0, xmmword [rsp + 0x90]
jmp 0x1403ffb0b
xorps xmm0, xmmword [rax + 0x50]
movaps xmmword [rsp + 0x90], xmm0
jmp 0x1403ffb1c
movaps xmm0, xmmword [rsp + 0xa0]
jmp 0x1403ffb29
xorps xmm0, xmmword [rax + 0x60]
movaps xmmword [rsp + 0xa0], xmm0
jmp 0x1403ffb3a
movaps xmm0, xmmword [rsp + 0xb0]
jmp 0x1403ffb47
xorps xmm0, xmmword [rax + 0x70]
movaps xmmword [rsp + 0xb0], xmm0
jmp 0x1403ffb58
movaps xmm0, xmmword [rsp + 0xc0]
jmp 0x1403ffb65
xorps xmm0, xmmword [rax + 0x80]
movaps xmmword [rsp + 0xc0], xmm0
jmp 0x1403ffb79
movaps xmm0, xmmword [rsp + 0xd0]
jmp 0x1403ffb86
xorps xmm0, xmmword [rax + 0x90]
movaps xmmword [rsp + 0xd0], xmm0
jmp 0x1403ffb9a
movaps xmm0, xmmword [rsp + 0xe0]
jmp 0x1403ffba7
xorps xmm0, xmmword [rax + 0xa0]
movaps xmmword [rsp + 0xe0], xmm0
movsx ecx, si
not r8b
lea rdx, [rsp + 0x40]
movsx rcx, si
not cx
lea r8, [rsp + 0x30]
xchg cx, cx
movsxd rcx, r15d
jmp 0x1403ffbd8
mov rcx, 0xffffffff80000002
jmp 0x1403ffbe4
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyW]
movabs rax, 0xe03fec0024fffd78
jmp 0x1403ffbf9
mov qword [rsp + 0x1d0], rax
jmp 0x1403ffc06
mov qword [rsp + 0x40], rax
movabs rax, 0x222ebca20e96a58a
mov qword [rsp + 0x1c8], rax
jmp 0x1403ffc22
mov qword [rsp + 0x48], rax
mov al, r14b
movabs rax, 0xfbcdf388e0082fa5
jmp 0x1403ffc39
mov qword [rsp + 0x2e8], rax
jmp 0x1403ffc46
mov qword [rsp + 0x50], rax
movsxd rax, ebx
mov al, ch
nop
movabs rax, 0x17c85fba530fa684
mov qword [rsp + 0x1c0], rax
jmp 0x1403ffc69
mov qword [rsp + 0x58], rax
mov qword [rsp + 0x100], r15
movsxd rax, eax
mov qword [rsp + 0x108], r12
mov qword [rsp + 0x110], rsi
mov qword [rsp + 0x118], rdi
movzx rax, dx
mov rax, r13
movaps xmm0, xmmword [rsp + 0x40]
jmp 0x1403ffca2
xorps xmm0, xmmword [rax]
movaps xmmword [rsp + 0x40], xmm0
movaps xmm0, xmmword [rsp + 0x50]
jmp 0x1403ffcb4
xorps xmm0, xmmword [rax + 0x10]
movaps xmmword [rsp + 0x50], xmm0
shr cx, 0x2d
rol dl, 0x15
mov rcx, qword [rsp + 0x30]
bts ax, r13w
cmovle ax, r12w
lea rax, [rsp + 0x3c]
movsxd r9, r11d
movzx r9, r14w
test ch, 0x4d
mov qword [rsp + 0x20], rax
ror dx, 0x15
mov dword [rsp + 0x28], 4
movsxd rdx, r8d
shr dl, cl
lea rdx, [rsp + 0x40]
cmp r13w, 0x1a00
rol r9b, cl
stc
sub r8d, r8d
movzx r9w, r12b
mov r9d, 4
jmp 0x1403ffd1a
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
mov rcx, qword [rsp + 0x30]
jmp 0x1403ffd2a
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov rax, qword [rsp + 0x2e0]
jmp 0x1403ffd3d
mov qword [rsp + 0x40], rax
not al
mov rax, qword [rsp + 0x2d8]
jmp 0x1403ffd51
mov qword [rsp + 0x48], rax
movsxd rax, edi
cwde
cmovs eax, eax
mov rax, qword [rsp + 0x2d0]
jmp 0x1403ffd6a
mov qword [rsp + 0x50], rax
setp ah
mov rax, qword [rsp + 0x2c8]
mov qword [rsp + 0x58], rax
cbw
movzx rax, bp
mov ax, 0xf57
mov rax, qword [rsp + 0x2c0]
jmp 0x1403ffd96
mov qword [rsp + 0x60], rax
movsx rax, cx
mov rax, qword [rsp + 0x2b8]
jmp 0x1403ffdac
mov qword [rsp + 0x68], rax
mov rax, qword [rsp + 0x2b0]
jmp 0x1403ffdbe
mov qword [rsp + 0x70], rax
mov rax, qword [rsp + 0x2a8]
jmp 0x1403ffdd0
mov qword [rsp + 0x78], rax
jmp 0x1403ffde1
mov rax, qword [rsp + 0x2a0]
jmp 0x1403ffdee
mov qword [rsp + 0x80], rax
bswap ax
mov rax, qword [rsp + 0x298]
jmp 0x1403ffe06
mov qword [rsp + 0x88], rax
cmovns eax, r12d
bswap ax
mov rax, qword [rsp + 0x290]
mov qword [rsp + 0x90], rax
nop
movsx ax, r12b
mov rax, qword [rsp + 0x288]
jmp 0x1403ffe39
mov qword [rsp + 0x98], rax
nop
mov al, 0xa8
mov rax, qword [rsp + 0x280]
jmp 0x1403ffe52
mov qword [rsp + 0xa0], rax
xchg ah, al
mov rax, qword [rsp + 0x278]
jmp 0x1403ffe69
mov qword [rsp + 0xa8], rax
mov rax, qword [rsp + 0x270]
jmp 0x1403ffe7e
mov qword [rsp + 0xb0], rax
lahf
mov rax, qword [rsp + 0x268]
jmp 0x1403ffe94
mov qword [rsp + 0xb8], rax
mov al, dil
movsx eax, si
mov rax, qword [rsp + 0x260]
jmp 0x1403ffeaf
mov qword [rsp + 0xc0], rax
cdqe
cwde
mov rax, qword [rsp + 0x258]
jmp 0x1403ffec7
mov qword [rsp + 0xc8], rax
mov ax, r14w
movabs rax, 0xd8c04eda048c52bb
jmp 0x1403ffee2
mov qword [rsp + 0xd0], rax
movabs rax, 0xa5eac9894f8ea414
jmp 0x1403ffef9
mov qword [rsp + 0xd8], rax
not eax
movsxd rax, ecx
movsx rax, r9w
mov qword [rsp + 0xe0], rbp
jmp 0x1403fff20
mov qword [rsp + 0xe8], r14
xchg r14, rbp
mov al, spl
bswap r14w
mov qword [rsp + 0x100], r15
mov qword [rsp + 0x108], r12
not ax
mov qword [rsp + 0x110], rsi
bswap rax
mov qword [rsp + 0x118], rdi
movsx rax, cx
bswap rbp
mov rbp, rbx
cbw
movzx ax, dh
mov qword [rsp + 0x120], rbx
cdqe
movzx r14d, r15w
mov r14, qword [rsp + 0x2f0]
movzx ax, dil
mov qword [rsp + 0x128], r14
movsxd rax, r15d
movsx ax, r8b
mov rax, qword [rsp + 0x250]
jmp 0x1403fffa0
mov qword [rsp + 0x130], rax
movzx ax, r8b
mov rax, qword [rsp + 0x248]
jmp 0x1403fffba
mov qword [rsp + 0x138], rax
movsx rax, r11w
mov rax, qword [rsp + 0x240]
jmp 0x1403fffd3
mov qword [rsp + 0x140], rax
xchg al, al
movsxd rax, r11d
mov rax, qword [rsp + 0x238]
jmp 0x1403fffed
mov qword [rsp + 0x148], rax
mov rax, qword [rsp + 0x230]
jmp 0x140400002
mov qword [rsp + 0x150], rax
movsx rax, si
cbw
mov ax, 0x51e4
mov rax, qword [rsp + 0x228]
jmp 0x140400021
mov qword [rsp + 0x158], rax
cwde
not ah
lahf
mov rax, qword [rsp + 0x220]
jmp 0x14040003a
mov qword [rsp + 0x160], rax
mov rax, qword [rsp + 0x218]
jmp 0x14040004f
mov qword [rsp + 0x168], rax
mov al, r12b
cmovae eax, r14d
movsx ax, r9b
mov rax, qword [rsp + 0x210]
jmp 0x140400070
mov qword [rsp + 0x170], rax
cbw
mov rax, qword [rsp + 0x208]
mov qword [rsp + 0x178], rax
cbw
jmp 0x140400091
mov rax, qword [rsp + 0x200]
jmp 0x14040009e
mov qword [rsp + 0x180], rax
cbw
movzx eax, si
mov rax, qword [rsp + 0x1f8]
jmp 0x1404000b8
mov qword [rsp + 0x188], rax
movsxd rax, ebp
mov rax, qword [rsp + 0x1f0]
mov qword [rsp + 0x190], rax
cbw
cdqe
mov rax, qword [rsp + 0x1e8]
mov qword [rsp + 0x198], rax
movzx rax, sp
movsx ax, r15b
movzx eax, si
mov rax, qword [rsp + 0x1e0]
jmp 0x140400100
mov qword [rsp + 0x1a0], rax
cwde
not rax
mov rax, qword [rsp + 0x1d8]
jmp 0x140400119
mov qword [rsp + 0x1a8], rax
movzx ax, dil
jmp 0x14040012b
mov rax, r13
jmp 0x140400133
movaps xmm0, xmmword [rsp + 0x40]
jmp 0x14040013d
movaps xmm1, xmmword [rsp + 0x50]
jmp 0x140400147
movaps xmm2, xmmword [rsp + 0x60]
jmp 0x140400151
xorps xmm0, xmmword [rax]
movaps xmm3, xmmword [rsp + 0x70]
jmp 0x14040015e
movaps xmmword [rsp + 0x40], xmm0
jmp 0x140400168
xorps xmm1, xmmword [rax + 0x10]
movaps xmmword [rsp + 0x50], xmm1
jmp 0x140400176
xorps xmm2, xmmword [rax + 0x20]
movaps xmmword [rsp + 0x60], xmm2
jmp 0x140400184
xorps xmm3, xmmword [rax + 0x30]
movaps xmmword [rsp + 0x70], xmm3
movaps xmm0, xmmword [rsp + 0x80]
xorps xmm0, xmmword [rax + 0x40]
movaps xmmword [rsp + 0x80], xmm0
jmp 0x1404001a6
movaps xmm0, xmmword [rsp + 0x90]
jmp 0x1404001b3
xorps xmm0, xmmword [rax + 0x50]
movaps xmmword [rsp + 0x90], xmm0
jmp 0x1404001c4
movaps xmm0, xmmword [rsp + 0xa0]
jmp 0x1404001d1
xorps xmm0, xmmword [rax + 0x60]
movaps xmmword [rsp + 0xa0], xmm0
movaps xmm0, xmmword [rsp + 0xb0]
jmp 0x1404001ea
xorps xmm0, xmmword [rax + 0x70]
movaps xmmword [rsp + 0xb0], xmm0
jmp 0x1404001fb
movaps xmm0, xmmword [rsp + 0xc0]
jmp 0x140400208
xorps xmm0, xmmword [rax + 0x80]
movaps xmmword [rsp + 0xc0], xmm0
movaps xmm0, xmmword [rsp + 0xd0]
jmp 0x140400224
xorps xmm0, xmmword [rax + 0x90]
movaps xmmword [rsp + 0xd0], xmm0
movaps xmm0, xmmword [rsp + 0xe0]
jmp 0x140400240
xorps xmm0, xmmword [rax + 0xa0]
movaps xmmword [rsp + 0xe0], xmm0
movzx rcx, dx
lea rdx, [rsp + 0x40]
movzx r8d, dx
movsx r8d, r14w
mov rcx, rdi
mov rcx, 0xffffffff80000002
setle r8b
mov r8w, r14w
cmovae r8, rsi
lea r8, [rsp + 0x30]
jmp 0x140400280
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyW]
mov rax, qword [rsp + 0x1d0]
mov qword [rsp + 0x40], rax
mov bh, 0xea
mov rax, qword [rsp + 0x1c8]
bswap bx
mov qword [rsp + 0x48], rax
mov rbx, qword [rsp + 0x2e8]
not ah
cbw
movzx rax, r10w
mov qword [rsp + 0x50], rbx
setns ah
mov rax, qword [rsp + 0x1c0]
mov qword [rsp + 0x58], rax
setg al
cbw
movsx ax, r11b
mov qword [rsp + 0x100], r15
mov qword [rsp + 0x108], r12
mov qword [rsp + 0x110], rsi
nop
movsx ax, r8b
not ah
mov qword [rsp + 0x118], rdi
mov rax, r13
movaps xmm0, xmmword [rsp + 0x40]
xorps xmm0, xmmword [rax]
movaps xmmword [rsp + 0x40], xmm0
jmp 0x140400313
movaps xmm0, xmmword [rsp + 0x50]
xorps xmm0, xmmword [rax + 0x10]
movaps xmmword [rsp + 0x50], xmm0
bt r9w, r13w
bts dx, r11w
mov rcx, qword [rsp + 0x30]
lea rax, [rsp + 0x3c]
mov qword [rsp + 0x20], rax
sub r9, r11
mov dword [rsp + 0x28], 4
lea rdx, [rsp + 0x40]
xor r8d, r8d
mov r9d, 4
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
mov rcx, qword [rsp + 0x30]
jmp 0x140400363
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov rax, qword [rsp + 0x2e0]
jmp 0x140400376
mov qword [rsp + 0x40], rax
cmovb rax, rbp
movzx rax, si
cdqe
mov rax, qword [rsp + 0x2d8]
jmp 0x140400392
mov qword [rsp + 0x48], rax
movzx rax, sp
cdqe
mov rax, qword [rsp + 0x2d0]
jmp 0x1404003aa
mov qword [rsp + 0x50], rax
not ax
bswap ax
movzx ax, bl
mov rax, qword [rsp + 0x2c8]
mov qword [rsp + 0x58], rax
jmp 0x1404003d3
mov rax, qword [rsp + 0x2c0]
jmp 0x1404003e0
mov qword [rsp + 0x60], rax
setge al
movzx eax, si
mov rax, qword [rsp + 0x2b8]
jmp 0x1404003f8
mov qword [rsp + 0x68], rax
movsx eax, cx
lahf
mov rax, qword [rsp + 0x2b0]
jmp 0x14040040e
mov qword [rsp + 0x70], rax
mov rax, qword [rsp + 0x2a8]
jmp 0x140400420
mov qword [rsp + 0x78], rax
mov rax, qword [rsp + 0x2a0]
mov qword [rsp + 0x80], rax
mov rax, qword [rsp + 0x298]
jmp 0x140400442
mov qword [rsp + 0x88], rax
seto al
mov rax, qword [rsp + 0x290]
jmp 0x14040045a
mov qword [rsp + 0x90], rax
movsx ax, dl
cmovno eax, r15d
xchg ah, al
mov rax, qword [rsp + 0x288]
jmp 0x140400479
mov qword [rsp + 0x98], rax
mov rax, qword [rsp + 0x280]
jmp 0x14040048e
mov qword [rsp + 0xa0], rax
mov rax, qword [rsp + 0x278]
jmp 0x1404004a3
mov qword [rsp + 0xa8], rax
xchg al, al
mov rax, qword [rsp + 0x270]
jmp 0x1404004ba
mov qword [rsp + 0xb0], rax
mov rax, 0x68203eb0
bswap ax
movsxd rax, r10d
mov rax, qword [rsp + 0x268]
jmp 0x1404004dc
mov qword [rsp + 0xb8], rax
movzx ax, dh
movsx ax, al
cmovo eax, ecx
mov rax, qword [rsp + 0x260]
jmp 0x1404004fc
mov qword [rsp + 0xc0], rax
movsx rax, si
mov rax, qword [rsp + 0x258]
jmp 0x140400515
mov qword [rsp + 0xc8], rax
mov rax, 0x2b1e7f9b
movabs rax, 0xd8c34edb048f52bb
jmp 0x140400533
mov qword [rsp + 0xd0], rax
movabs rax, 0xa5c8c98b4f83a416
mov qword [rsp + 0xd8], rax
cbw
movabs rax, 0x2eb290273e1edaf5
jmp 0x14040055e
mov qword [rsp + 0xe0], rax
xchg al, ah
cwde
movsx eax, r8w
movabs rax, 0x28f53e246680b95c
mov qword [rsp + 0xe8], rax
bswap ax
movsxd rax, r15d
mov qword [rsp + 0x100], r15
movzx ax, ah
nop
mov qword [rsp + 0x108], r12
mov qword [rsp + 0x110], rsi
lahf
mov qword [rsp + 0x118], rdi
mov qword [rsp + 0x120], rbp
lahf
movsxd rax, r10d
movsx ax, r11b
mov qword [rsp + 0x128], r14
movsx eax, si
cmovo rax, r14
mov rax, qword [rsp + 0x250]
mov qword [rsp + 0x130], rax
mov rax, qword [rsp + 0x248]
jmp 0x1404005e9
mov qword [rsp + 0x138], rax
not ax
cwde
setae al
mov rax, qword [rsp + 0x240]
jmp 0x140400605
mov qword [rsp + 0x140], rax
cbw
xchg al, ah
mov rax, qword [rsp + 0x238]
jmp 0x14040061e
mov qword [rsp + 0x148], rax
lahf
movzx eax, sp
mov rax, qword [rsp + 0x230]
jmp 0x140400637
mov qword [rsp + 0x150], rax
not ax
lahf
mov al, r11b
mov rax, qword [rsp + 0x228]
jmp 0x140400653
mov qword [rsp + 0x158], rax
cbw
mov rax, qword [rsp + 0x220]
jmp 0x14040066a
mov qword [rsp + 0x160], rax
xchg ah, ah
movsx ax, r9b
mov rax, qword [rsp + 0x218]
jmp 0x140400686
mov qword [rsp + 0x168], rax
xchg ah, ah
mov rax, qword [rsp + 0x210]
jmp 0x14040069d
mov qword [rsp + 0x170], rax
bswap rax
jmp 0x1404006b0
mov rax, qword [rsp + 0x208]
jmp 0x1404006bd
mov qword [rsp + 0x178], rax
movzx rax, r10w
movsxd rax, r12d
cbw
mov rax, qword [rsp + 0x200]
jmp 0x1404006db