Function at 0x1403ff3a7
Capabilities:
Set registry value

Disassembly:
push r15
movsx ax, dil
sal r15w, 0x52
sal ah, cl
push r14
btc eax, r15d
push r13
or r13b, 0x34
push r12
btc r13, 0x32
push rsi
not r15b
shl ah, 0x39
shr al, cl
push rdi
add r15b, 0xb9
push rbp
push rbx
cmova r12w, ax
sub bpl, 0xd3
or r15b, 0x1c
sub rsp, 0x2f8
cbw
setno r13b
not ebp
movabs rax, 0xe009ec3224c8fd6e
movsx r12d, r8w
mov qword [rsp + 0x2e0], rax
movzx si, r15b
mov r13b, 0x3b
mov qword [rsp + 0x40], rax
movzx r12, r11w
mov r13w, cx
movabs rax, 0x2204bcb80ebea5a3
mov qword [rsp + 0x2d8], rax
mov sil, 0x8e
movsxd r12, r8d
movzx r15d, di
mov qword [rsp + 0x48], rax
cbw
movabs rax, 0xfbc9f38de01f2fa2
mov qword [rsp + 0x2d0], rax
mov qword [rsp + 0x50], rax
xchg sil, r13b
movabs rax, 0x17a75ff95317a686
mov qword [rsp + 0x2c8], rax
bswap rsi
movsxd rbx, ebp
mov qword [rsp + 0x58], rax
cwde
setnp r14b
movabs rax, 0xfd99d5578f55fa6f
movsx ebp, r8w
mov qword [rsp + 0x2c0], rax
setle r15b
cmovle di, r15w
mov r12d, r13d
mov qword [rsp + 0x60], rax
lahf
cmovb r12, r11
mov sil, dl
movabs rax, 0x4b3964fdcd447246
setno bpl
movsxd rsi, eax
not r14b
mov qword [rsp + 0x2b8], rax
mov qword [rsp + 0x68], rax
xchg dil, r14b
not bpl
cwde
movabs rax, 0xee88324679eb2227
movsx r15d, bx
movzx si, spl
xchg dil, r13b
mov qword [rsp + 0x2b0], rax
not r15b
mov qword [rsp + 0x70], rax
movabs rax, 0x6d7346ad6d4ffefa
jmp 0x1403ff50e
mov qword [rsp + 0x2a8], rax
cmovge bp, r9w
mov qword [rsp + 0x78], rax
movabs rax, 0xd093683aef376a76
mov qword [rsp + 0x2a0], rax
mov qword [rsp + 0x80], rax
movabs rax, 0xa80f93e9d32b8c6f
movzx r13d, bp
setns r12b
mov qword [rsp + 0x298], rax
movsx r12d, r10w
movzx r12w, cl
movzx ebx, r13w
mov qword [rsp + 0x88], rax
cdqe
cmovno r14w, di
movabs rax, 0x33e730243394033e
movsx edi, bp
not r13w
mov qword [rsp + 0x290], rax
bswap r12
mov qword [rsp + 0x90], rax
movzx r15w, dl
xchg bpl, al
movabs rax, 0xe7e3977e114e6703
mov qword [rsp + 0x288], rax
mov qword [rsp + 0x98], rax
setns bpl
movabs rax, 0xb0b65ec58a603c8
mov qword [rsp + 0x280], rax
mov qword [rsp + 0xa0], rax
mov r14b, 0x6a
cwde
sets r14b
movabs rax, 0x6708be65ca8156d7
movsx rbx, bp
movzx edi, di
mov qword [rsp + 0x278], rax
movsxd rbp, r12d
mov qword [rsp + 0xa8], rax
not al
mov si, r10w
bswap r15w
movabs rax, 0x46a7044da5524090
mov qword [rsp + 0x270], rax
movzx r12, si
mov qword [rsp + 0xb0], rax
movabs rax, 0x4b8cb541ca050f46
bswap r15w
not bpl
movsxd r15, r8d
mov qword [rsp + 0x268], rax
setne bpl
movsx esi, r11w
not r13w
mov qword [rsp + 0xb8], rax
movabs rax, 0xe627ab41184af921
setns dil
jmp 0x1403ff66f
mov qword [rsp + 0x260], rax
movsx rdi, r8w
movsx bp, r11b
mov r13b, al
mov qword [rsp + 0xc0], rax
movabs rax, 0x34c77b6e31b9a
mov qword [rsp + 0x258], rax
movzx rbp, bp
movzx r14w, dil
movsx r13d, r14w
mov qword [rsp + 0xc8], rax
movabs rax, 0xd8cf4ec0049852bb
mov qword [rsp + 0xd0], rax
xchg ah, ah
mov r14b, bpl
movabs rax, 0xa5eac9844f8ea419
mov qword [rsp + 0xd8], rax
movzx edi, r9w
mov qword [rsp + 0x30], 0
movsx rbp, cx
cmovb r14w, bx
movzx r15w, sil
mov dword [rsp + 0x3c], 0
movsx si, bpl
movzx rbp, ax
lahf
movabs rbp, 0x2eb490333e21dae3
mov qword [rsp + 0xe0], rbp
xchg r12b, r12b
movabs r14, 0x28903e48668cb956
movzx ax, ch
movsx r13w, r8b
cwde
mov qword [rsp + 0xe8], r14
movabs r15, 0xe05dec612491fd3d
mov qword [rsp + 0x100], r15
movabs r12, 0x2247bce40ef3a5e6
mov qword [rsp + 0x108], r12
movabs rsi, 0xfbacf3ffe06d2fd7
mov qword [rsp + 0x110], rsi
xchg bx, r13w
cdqe
movzx ebx, r8w
movabs rdi, 0x17c85fba5363a6e8
mov qword [rsp + 0x118], rdi
movabs rax, 0xfdf6d5258f21fa01
mov rbx, r10
movsx rbx, r14w
mov qword [rsp + 0x120], rax
mov rbx, rax
cwde
mov al, r10b
movabs rax, 0x4b4d6498cd17722a
movzx r13, di
mov r13b, r14b
not r13w
mov qword [rsp + 0x2f0], rax
movsx r13, r8w
mov r13b, r14b
movsx r13w, r12b
mov qword [rsp + 0x128], rax
xchg r13b, r13b
movabs rax, 0xeefa322379b8227b
mov qword [rsp + 0x250], rax
movzx r13d, r14w
movzx r13w, r10b
not r13b
mov qword [rsp + 0x130], rax
movsx rax, r11w
movabs rax, 0x6d1646ce6d26fe8c
setbe r13b
mov qword [rsp + 0x248], rax
mov qword [rsp + 0x138], rax
cdqe
movabs rax, 0xd0fb6869ef6b6a05
mov qword [rsp + 0x240], rax
not r13w
movsx r13d, dx
setns r13b
mov qword [rsp + 0x140], rax
mov al, 0x80
bswap eax
jmp 0x1403ff858
movabs rax, 0xa86b938cd3598c0e
movsx r13d, di
mov qword [rsp + 0x238], rax
movsx r13, r14w
movsx r13w, cl
movsx r13d, sp
mov qword [rsp + 0x148], rax
cmovb eax, esp
movabs rax, 0x3382304733f7037f
jmp 0x1403ff895
mov qword [rsp + 0x230], rax
mov qword [rsp + 0x150], rax
movabs rax, 0xe7b39722113d6770
movzx r13w, bpl
movzx r13, cx
movsx r13d, r9w
mov qword [rsp + 0x228], rax
mov r13, 0x1cfd1542
movsx r13d, si
mov r13d, edx
mov qword [rsp + 0x158], rax
movsx r13w, r14b
movsx r13d, di
movzx eax, r12w
movabs rax, 0xb66658d58d403a9
xchg r13b, r13b
mov qword [rsp + 0x220], rax
mov qword [rsp + 0x160], rax
not al
movabs rax, 0x677abe00caf556b2
movsx r13w, dil
bswap r13w
movzx r13w, spl
mov qword [rsp + 0x218], rax
movzx r13, r12w
setl r13b
bswap r13w
mov qword [rsp + 0x168], rax
jmp 0x1403ff941
movabs rax, 0x46ce040ba50e40e3
movsxd r13, eax
mov r13, 0x6a8d1579
mov qword [rsp + 0x210], rax
movzx r13w, r14b
movzx r13d, bx
movzx r13, r10w
mov qword [rsp + 0x170], rax
movabs rax, 0x4bedb536ca600f34
cmovle r13w, r9w
xchg r13w, r13w
movsxd r13, edx
mov qword [rsp + 0x208], rax
mov r13w, 0x19ee
mov qword [rsp + 0x178], rax
lahf
movabs rax, 0xe648ab111826f94d
not r13w
mov r13b, 0x5f
xchg r13w, r13w
mov qword [rsp + 0x200], rax
mov qword [rsp + 0x180], rax
movsx r13w, r9b
cwde
movabs rax, 0x7a4c14b68a1bf6
mov qword [rsp + 0x1f8], rax
mov r13b, 0x6b
movzx r13d, r10w
setb r13b
mov qword [rsp + 0x188], rax
movzx r13, bx
movzx r13w, bpl
mov r13, 0x367c724d
movabs rax, 0xd8a24eaf04dc52e7
cmova r13w, r8w
mov qword [rsp + 0x1f0], rax
bswap r13
movzx r13w, al
mov qword [rsp + 0x190], rax
cdqe
movabs rax, 0xa5bac9ea4fe7a478
mov qword [rsp + 0x1e8], rax
sets r13b
mov qword [rsp + 0x198], rax
cbw
bswap ax
movsx r13w, cl
movabs rax, 0x2edd90553e4eda91
not r13
mov qword [rsp + 0x1e0], rax
cmovp r13, r10
mov qword [rsp + 0x1a0], rax
movzx eax, sp
cdqe
jmp 0x1403ffa7a
movabs rax, 0x28903e4866e9b93a
mov qword [rsp + 0x1d8], rax
mov qword [rsp + 0x1a8], rax
lea r13, [rsp + 0x100]
mov rax, r13
jmp 0x1403ffaa4
movaps xmm0, xmmword [rsp + 0x40]
jmp 0x1403ffaae
xorps xmm0, xmmword [rax]
movaps xmmword [rsp + 0x40], xmm0
jmp 0x1403ffabb
movaps xmm0, xmmword [rsp + 0x50]
xorps xmm0, xmmword [rax + 0x10]
movaps xmmword [rsp + 0x50], xmm0
jmp 0x1403fface
movaps xmm0, xmmword [rsp + 0x60]
jmp 0x1403ffad8
xorps xmm0, xmmword [rax + 0x20]
movaps xmmword [rsp + 0x60], xmm0
jmp 0x1403ffae6
movaps xmm0, xmmword [rsp + 0x70]
jmp 0x1403ffaf0
xorps xmm0, xmmword [rax + 0x30]
movaps xmmword [rsp + 0x70], xmm0
jmp 0x1403ffafe
movaps xmm0, xmmword [rsp + 0x80]
xorps xmm0, xmmword [rax + 0x40]
movaps xmmword [rsp + 0x80], xmm0
jmp 0x1403ffb17
movaps xmm0, xmmword [rsp + 0x90]
jmp 0x1403ffb24
xorps xmm0, xmmword [rax + 0x50]
movaps xmmword [rsp + 0x90], xmm0
jmp 0x1403ffb35
movaps xmm0, xmmword [rsp + 0xa0]
jmp 0x1403ffb42
xorps xmm0, xmmword [rax + 0x60]
movaps xmmword [rsp + 0xa0], xmm0
jmp 0x1403ffb53
movaps xmm0, xmmword [rsp + 0xb0]
jmp 0x1403ffb60
xorps xmm0, xmmword [rax + 0x70]
movaps xmmword [rsp + 0xb0], xmm0
jmp 0x1403ffb71
movaps xmm0, xmmword [rsp + 0xc0]
xorps xmm0, xmmword [rax + 0x80]
movaps xmmword [rsp + 0xc0], xmm0
movaps xmm0, xmmword [rsp + 0xd0]
jmp 0x1403ffb95
xorps xmm0, xmmword [rax + 0x90]
movaps xmmword [rsp + 0xd0], xmm0
jmp 0x1403ffba9
movaps xmm0, xmmword [rsp + 0xe0]
xorps xmm0, xmmword [rax + 0xa0]
movaps xmmword [rsp + 0xe0], xmm0
movzx edx, r12w
lea rdx, [rsp + 0x40]
mov r8d, r9d
movzx r8, r14w
lea r8, [rsp + 0x30]
movsx rcx, dx
movzx ecx, r10w
setb ch
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyW]
movabs rax, 0xe03fec0024fffd78
jmp 0x1403ffbfc
mov qword [rsp + 0x1d0], rax
jmp 0x1403ffc09
mov qword [rsp + 0x40], rax
nop
cwde
bswap ax
movabs rax, 0x222ebca20e96a58a
jmp 0x1403ffc23
mov qword [rsp + 0x1c8], rax
jmp 0x1403ffc30
mov qword [rsp + 0x48], rax
mov al, 0xbf
movzx rax, cx
movabs rax, 0xfbcdf388e0082fa5
jmp 0x1403ffc4a
mov qword [rsp + 0x2e8], rax
jmp 0x1403ffc57
mov qword [rsp + 0x50], rax
bswap ax
movabs rax, 0x17c85fba530fa684
jmp 0x1403ffc6e
mov qword [rsp + 0x1c0], rax
jmp 0x1403ffc7b
mov qword [rsp + 0x58], rax
mov al, r8b
mov qword [rsp + 0x100], r15
movzx ax, r13b
mov qword [rsp + 0x108], r12
movsxd rax, edx
bswap rax
mov qword [rsp + 0x110], rsi
mov qword [rsp + 0x118], rdi
jmp 0x1403ffcb7
mov rax, r13
jmp 0x1403ffcbf
movaps xmm0, xmmword [rsp + 0x40]
jmp 0x1403ffcc9
xorps xmm0, xmmword [rax]
movaps xmmword [rsp + 0x40], xmm0
jmp 0x1403ffcd6
movaps xmm0, xmmword [rsp + 0x50]
xorps xmm0, xmmword [rax + 0x10]
movaps xmmword [rsp + 0x50], xmm0
adc r9, r15
mov rcx, qword [rsp + 0x30]
movzx eax, r14w
lea rax, [rsp + 0x3c]
mov qword [rsp + 0x20], rax
adc r9d, 0x683f3b74
inc r9w
shrd r9w, si, 0xf7
mov dword [rsp + 0x28], 4
inc dl
lea rdx, [rsp + 0x40]
movsx r9w, r9b
bswap r9w
movzx r9d, r9w
xor r8d, r8d
mov r9d, 4
jmp 0x1403ffd35
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
mov rcx, qword [rsp + 0x30]
jmp 0x1403ffd45
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov rax, qword [rsp + 0x2e0]
jmp 0x1403ffd58
mov qword [rsp + 0x40], rax
movsx rax, r13w
movsxd rax, esi
mov rax, qword [rsp + 0x2d8]
jmp 0x1403ffd71
mov qword [rsp + 0x48], rax
not eax
cmove ax, r15w
cdqe
mov rax, qword [rsp + 0x2d0]
jmp 0x1403ffd8c
mov qword [rsp + 0x50], rax
not ax
mov ax, 0x4b7a
mov rax, qword [rsp + 0x2c8]
mov qword [rsp + 0x58], rax
mov rax, qword [rsp + 0x2c0]
mov qword [rsp + 0x60], rax
bswap eax
xchg ah, al
mov rax, qword [rsp + 0x2b8]
jmp 0x1403ffdc3
mov qword [rsp + 0x68], rax
cdqe
mov rax, qword [rsp + 0x2b0]
mov qword [rsp + 0x70], rax
not al
movzx eax, bx
mov rax, qword [rsp + 0x2a8]
jmp 0x1403ffde9
mov qword [rsp + 0x78], rax
mov rax, qword [rsp + 0x2a0]
jmp 0x1403ffdfb
mov qword [rsp + 0x80], rax
cbw
mov rax, qword [rsp + 0x298]
jmp 0x1403ffe12
mov qword [rsp + 0x88], rax
bswap ax
mov eax, 0x64e744fd
mov rax, qword [rsp + 0x290]
jmp 0x1403ffe2f
mov qword [rsp + 0x90], rax
cdqe
bswap rax
not al
mov rax, qword [rsp + 0x288]
jmp 0x1403ffe4b
mov qword [rsp + 0x98], rax
movsx eax, r14w
movzx ax, bl
mov rax, qword [rsp + 0x280]
mov qword [rsp + 0xa0], rax
movzx ax, ah
cwde
cmovl eax, ebx
mov rax, qword [rsp + 0x278]
mov qword [rsp + 0xa8], rax
mov ah, al
bswap ax
cbw
mov rax, qword [rsp + 0x270]
jmp 0x1403ffe97
mov qword [rsp + 0xb0], rax
movsx eax, r9w
jmp 0x1403ffea8
mov rax, qword [rsp + 0x268]
jmp 0x1403ffeb5
mov qword [rsp + 0xb8], rax
setbe al
mov ax, 0x4f64
mov rax, qword [rsp + 0x260]
jmp 0x1403ffed1
mov qword [rsp + 0xc0], rax
mov rax, qword [rsp + 0x258]
mov qword [rsp + 0xc8], rax
movzx eax, sp
movabs rax, 0xd8c04eda048c52bb
jmp 0x1403ffefb
mov qword [rsp + 0xd0], rax
jmp 0x1403fff12
movabs rax, 0xa5eac9894f8ea414
jmp 0x1403fff21
mov qword [rsp + 0xd8], rax
movzx ax, bpl
movsx rax, r12w
mov qword [rsp + 0xe0], rbp
mov qword [rsp + 0xe8], r14
movzx ax, spl
movsxd rax, r10d
movzx rbp, r13w
mov qword [rsp + 0x100], r15
mov rbp, 0xa312cba
mov qword [rsp + 0x108], r12
mov qword [rsp + 0x110], rsi
movzx r14d, r14w
mov qword [rsp + 0x118], rdi
mov rbp, rbx
mov qword [rsp + 0x120], rbx
movsx rax, si
movsx ax, cl
mov r14, qword [rsp + 0x2f0]
mov qword [rsp + 0x128], r14
movsx rax, r13w
movzx eax, r11w
mov rax, qword [rsp + 0x250]
jmp 0x1403fffb1
mov qword [rsp + 0x130], rax
movzx ax, spl
movsx ax, dil
mov rax, qword [rsp + 0x248]
jmp 0x1403fffd0
mov qword [rsp + 0x138], rax
movsx eax, bp
cbw
movzx ax, sil
mov rax, qword [rsp + 0x240]
jmp 0x1403fffef
mov qword [rsp + 0x140], rax
mov eax, 0x7a3f1210
mov rax, qword [rsp + 0x238]
jmp 0x140400009
mov qword [rsp + 0x148], rax
jmp 0x14040001d
mov rax, qword [rsp + 0x230]
jmp 0x14040002a
mov qword [rsp + 0x150], rax
mov rax, qword [rsp + 0x228]
jmp 0x14040003f
mov qword [rsp + 0x158], rax
mov rax, qword [rsp + 0x220]
jmp 0x140400054
mov qword [rsp + 0x160], rax
jmp 0x140400064
mov rax, qword [rsp + 0x218]
jmp 0x140400071
mov qword [rsp + 0x168], rax
cmovo ax, sp
not ah
jmp 0x140400084
mov rax, qword [rsp + 0x210]
jmp 0x140400091
mov qword [rsp + 0x170], rax
mov rax, qword [rsp + 0x208]
jmp 0x1404000a6
mov qword [rsp + 0x178], rax
cbw
nop
mov rax, qword [rsp + 0x200]
jmp 0x1404000bf
mov qword [rsp + 0x180], rax
mov rax, qword [rsp + 0x1f8]
mov qword [rsp + 0x188], rax
movsxd rax, r11d
movsx eax, r12w
mov rax, qword [rsp + 0x1f0]
jmp 0x1404000eb
mov qword [rsp + 0x190], rax
mov rax, qword [rsp + 0x1e8]
jmp 0x140400100
mov qword [rsp + 0x198], rax
movzx eax, dx
seta ah
mov rax, qword [rsp + 0x1e0]
jmp 0x14040011b
mov qword [rsp + 0x1a0], rax
mov rax, qword [rsp + 0x1d8]
jmp 0x140400130
mov qword [rsp + 0x1a8], rax
not eax
movsx ax, r12b
nop
mov rax, r13
jmp 0x140400149
movaps xmm0, xmmword [rsp + 0x40]
jmp 0x140400153
movaps xmm1, xmmword [rsp + 0x50]
movaps xmm2, xmmword [rsp + 0x60]
xorps xmm0, xmmword [rax]
movaps xmm3, xmmword [rsp + 0x70]
movaps xmmword [rsp + 0x40], xmm0
jmp 0x14040016f
xorps xmm1, xmmword [rax + 0x10]
movaps xmmword [rsp + 0x50], xmm1
jmp 0x14040017d
xorps xmm2, xmmword [rax + 0x20]
movaps xmmword [rsp + 0x60], xmm2
jmp 0x14040018b
xorps xmm3, xmmword [rax + 0x30]
movaps xmmword [rsp + 0x70], xmm3
jmp 0x140400199
movaps xmm0, xmmword [rsp + 0x80]
jmp 0x1404001a6
xorps xmm0, xmmword [rax + 0x40]
movaps xmmword [rsp + 0x80], xmm0
jmp 0x1404001b7
movaps xmm0, xmmword [rsp + 0x90]
jmp 0x1404001c4
xorps xmm0, xmmword [rax + 0x50]
movaps xmmword [rsp + 0x90], xmm0
jmp 0x1404001d5
movaps xmm0, xmmword [rsp + 0xa0]
jmp 0x1404001e2
xorps xmm0, xmmword [rax + 0x60]
movaps xmmword [rsp + 0xa0], xmm0
movaps xmm0, xmmword [rsp + 0xb0]
jmp 0x1404001fb
xorps xmm0, xmmword [rax + 0x70]
movaps xmmword [rsp + 0xb0], xmm0
jmp 0x14040020c
movaps xmm0, xmmword [rsp + 0xc0]
jmp 0x140400219
xorps xmm0, xmmword [rax + 0x80]
movaps xmmword [rsp + 0xc0], xmm0
jmp 0x14040022d
movaps xmm0, xmmword [rsp + 0xd0]
xorps xmm0, xmmword [rax + 0x90]
movaps xmmword [rsp + 0xd0], xmm0
movaps xmm0, xmmword [rsp + 0xe0]
jmp 0x140400251
xorps xmm0, xmmword [rax + 0xa0]
movaps xmmword [rsp + 0xe0], xmm0
cwd
lea rdx, [rsp + 0x40]
setno cl
not ecx
mov rcx, 0xffffffff80000002
movsx r8d, ax
movzx r8d, r8w
bswap r8w
lea r8, [rsp + 0x30]
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyW]
mov rax, qword [rsp + 0x1d0]
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x1c8]
movsxd rbx, r13d
movsx rbx, r11w
not bl
mov qword [rsp + 0x48], rax
mov rbx, qword [rsp + 0x2e8]
cwde
movzx rax, sp
mov qword [rsp + 0x50], rbx
mov rax, qword [rsp + 0x1c0]
jmp 0x1404002cc
mov qword [rsp + 0x58], rax
cbw
mov qword [rsp + 0x100], r15
not eax
mov qword [rsp + 0x108], r12
xchg al, ah
mov qword [rsp + 0x110], rsi
setb al
movzx ax, r9b
mov qword [rsp + 0x118], rdi
cwde
bswap ax
movzx ax, r12b
mov rax, r13
jmp 0x140400310
movaps xmm0, xmmword [rsp + 0x40]
jmp 0x14040031a
xorps xmm0, xmmword [rax]
movaps xmmword [rsp + 0x40], xmm0
jmp 0x140400327
movaps xmm0, xmmword [rsp + 0x50]
jmp 0x140400331
xorps xmm0, xmmword [rax + 0x10]
movaps xmmword [rsp + 0x50], xmm0
shl dx, 0x32
cmovne rcx, r8
mov rcx, qword [rsp + 0x30]
and r9d, 0x5a5e5fdb
cwde
btc rax, rcx
lea rax, [rsp + 0x3c]
movsx r9d, dx
mov qword [rsp + 0x20], rax
ror edx, cl
mov dword [rsp + 0x28], 4
lea rdx, [rsp + 0x40]
bt r9, rcx
sub r8d, r8d
mov r9d, 4
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
mov rcx, qword [rsp + 0x30]
jmp 0x14040038d
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov rax, qword [rsp + 0x2e0]
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x2d8]
jmp 0x1404003ad
mov qword [rsp + 0x48], rax
mov al, dil
bswap ax
mov ax, 0x3024
mov rax, qword [rsp + 0x2d0]
jmp 0x1404003c9
mov qword [rsp + 0x50], rax
not ah
mov rax, 0x6be24529
bswap rax
mov rax, qword [rsp + 0x2c8]
mov qword [rsp + 0x58], rax
movzx eax, bp
mov rax, qword [rsp + 0x2c0]
jmp 0x1404003f7
mov qword [rsp + 0x60], rax
movsx rax, r11w
mov rax, qword [rsp + 0x2b8]
jmp 0x14040040d
mov qword [rsp + 0x68], rax
movzx ax, cl
jmp 0x14040041e
mov rax, qword [rsp + 0x2b0]
jmp 0x14040042b
mov qword [rsp + 0x70], rax
movsx eax, r11w
cdqe
mov rax, qword [rsp + 0x2a8]
jmp 0x140400443
mov qword [rsp + 0x78], rax
movsx eax, r14w
mov rax, qword [rsp + 0x2a0]
jmp 0x140400459
mov qword [rsp + 0x80], rax
cwde
cdqe
mov rax, qword [rsp + 0x298]
jmp 0x140400471
mov qword [rsp + 0x88], rax
mov rax, qword [rsp + 0x290]
jmp 0x140400486
mov qword [rsp + 0x90], rax
mov rax, qword [rsp + 0x288]
jmp 0x14040049b
mov qword [rsp + 0x98], rax
mov rax, qword [rsp + 0x280]
jmp 0x1404004b0
mov qword [rsp + 0xa0], rax
mov rax, qword [rsp + 0x278]
jmp 0x1404004c5
mov qword [rsp + 0xa8], rax
movsxd rax, esp
bswap ax
mov rax, qword [rsp + 0x270]
jmp 0x1404004e0
mov qword [rsp + 0xb0], rax
mov al, ch
lahf
mov rax, qword [rsp + 0x268]
jmp 0x1404004f8
mov qword [rsp + 0xb8], rax
cwde
mov rax, qword [rsp + 0x260]
jmp 0x14040050e
mov qword [rsp + 0xc0], rax
mov rax, qword [rsp + 0x258]
mov qword [rsp + 0xc8], rax
movsx eax, r15w
movzx ax, bpl
bswap ax
movabs rax, 0xd8c34edb048f52bb
jmp 0x140400541
mov qword [rsp + 0xd0], rax
bswap rax
movsx rax, bx
movabs rax, 0xa5c8c98b4f83a416
jmp 0x14040055f
mov qword [rsp + 0xd8], rax
cmovs ax, si
movsx rax, r14w
movabs rax, 0x2eb290273e1edaf5
jmp 0x14040057e
mov qword [rsp + 0xe0], rax
movsxd rax, edx
cwde
movabs rax, 0x28f53e246680b95c
jmp 0x140400599
mov qword [rsp + 0xe8], rax
xchg al, al
movsx eax, r10w
mov qword [rsp + 0x100], r15
movzx rax, bx
lahf
mov qword [rsp + 0x108], r12
not ax
movsxd rax, ebp
mov qword [rsp + 0x110], rsi
mov qword [rsp + 0x118], rdi
nop
movsx ax, r14b
movzx ax, ah
mov qword [rsp + 0x120], rbp
not ax
mov qword [rsp + 0x128], r14
setl al
movzx rax, cx
nop
mov rax, qword [rsp + 0x250]
jmp 0x140400605
mov qword [rsp + 0x130], rax
mov rax, qword [rsp + 0x248]
jmp 0x14040061a
mov qword [rsp + 0x138], rax
jmp 0x14040062b
mov rax, qword [rsp + 0x240]
jmp 0x140400638
mov qword [rsp + 0x140], rax
mov rax, qword [rsp + 0x238]
jmp 0x14040064d
mov qword [rsp + 0x148], rax
setp al
movzx ax, spl
movsx eax, sp
mov rax, qword [rsp + 0x230]
jmp 0x14040066d
mov qword [rsp + 0x150], rax
movsxd rax, r11d
movzx eax, di
lahf
mov rax, qword [rsp + 0x228]
mov qword [rsp + 0x158], rax
setno ah
movsx ax, dil
bswap eax
mov rax, qword [rsp + 0x220]
jmp 0x1404006a3
mov qword [rsp + 0x160], rax
mov rax, qword [rsp + 0x218]
mov qword [rsp + 0x168], rax
cmovs ax, r11w
not rax
cbw
mov rax, qword [rsp + 0x210]
jmp 0x1404006d2
mov qword [rsp + 0x170], rax
movsx rax, cx
mov rax, qword [rsp + 0x208]
jmp 0x1404006eb
mov qword [rsp + 0x178], rax
mov rax, qword [rsp + 0x200]
jmp 0x140400700
mov qword [rsp + 0x180], rax
movzx ax, al
movsxd rax, r11d
mov rax, qword [rsp + 0x1f8]
mov qword [rsp + 0x188], rax
bswap ax
movzx ax, r8b
sete al
mov rax, qword [rsp + 0x1f0]
jmp 0x140400737
mov qword [rsp + 0x190], rax
movzx rax, r11w
cmovns rax, r8
lahf
mov rax, qword [rsp + 0x1e8]
jmp 0x140400755
mov qword [rsp + 0x198], rax
movzx eax, si
mov rax, qword [rsp + 0x1e0]
jmp 0x14040076d
mov qword [rsp + 0x1a0], rax
cwde
mov rax, qword [rsp + 0x1d8]
jmp 0x140400783
mov qword [rsp + 0x1a8], rax
movabs rax, 0xa1410f538a85c08b
jmp 0x14040079a
mov qword [rsp + 0xf0], rax
jmp 0x1404007a7