Function at 0x1403fb874
Capabilities:
Set registry value

Disassembly:
push r15
rol ax, cl
bts ax, dx
movsxd r15, r13d
push r14
xadd r14b, r14b
or rax, 0x648c2fcc
or r14w, r13w
push r13
movsx r13, cx
ror r14b, 0x40
push r12
xadd r15w, r12w
cdqe
clc
push rsi
movzx r15d, r13w
rcr r12d, 0x2c
xadd sil, r12b
push rdi
sub r13b, bl
xor r14b, r8b
ror ax, 0xc
push rbp
movzx r13w, r13b
push rbx
bt r14, 0x9b
movsx r12, r8w
sub rsp, 0x2f8
movsx rax, si
setns sil
movsx bx, bl
movabs rax, 0xe009ec3224c8fd6e
mov qword [rsp + 0x2e0], rax
mov rbp, r14
movsx r12, ax
movzx r12w, dil
mov qword [rsp + 0x40], rax
movabs rax, 0x2204bcb80ebea5a3
mov r12, rbp
cmovne di, ax
mov qword [rsp + 0x2d8], rax
cmovl r15w, bx
not r15b
mov qword [rsp + 0x48], rax
lahf
setbe r13b
movabs rax, 0xfbc9f38de01f2fa2
movsx r13d, cx
jmp 0x1403fb941
mov qword [rsp + 0x2d0], rax
xchg bpl, bpl
mov bpl, r10b
movzx rbx, dx
mov qword [rsp + 0x50], rax
mov si, r13w
movabs rax, 0x17a75ff95317a686
mov qword [rsp + 0x2c8], rax
mov qword [rsp + 0x58], rax
movzx bx, r8b
movsx r15d, r8w
movabs rax, 0xfd99d5578f55fa6f
xchg bl, r15b
mov r14w, bx
mov qword [rsp + 0x2c0], rax
mov qword [rsp + 0x60], rax
mov bpl, r11b
xchg bx, r13w
movabs rax, 0x4b3964fdcd447246
movsx esi, r12w
movzx r14d, cx
xchg r12b, r14b
mov qword [rsp + 0x2b8], rax
mov dil, dl
setge bh
not bpl
mov qword [rsp + 0x68], rax
bswap r12d
movzx edi, cx
movabs rax, 0xee88324679eb2227
mov qword [rsp + 0x2b0], rax
movsxd r12, edx
jmp 0x1403fb9ec
mov qword [rsp + 0x70], rax
movabs rax, 0x6d7346ad6d4ffefa
movsx esi, sp
mov di, 0x6e8d
movzx ebp, dx
mov qword [rsp + 0x2a8], rax
movsxd r13, eax
mov qword [rsp + 0x78], rax
jmp 0x1403fba1a
movabs rax, 0xd093683aef376a76
mov qword [rsp + 0x2a0], rax
movzx ebp, bp
movsx ebp, r12w
not r15b
mov qword [rsp + 0x80], rax
movabs rax, 0xa80f93e9d32b8c6f
movzx r12, dx
movsx bp, bl
xchg r13w, bp
mov qword [rsp + 0x298], rax
mov r14b, r11b
bswap r13
movzx r12, r13w
mov qword [rsp + 0x88], rax
cmovo r12w, di
movzx r15, bx
movabs rax, 0x33e730243394033e
mov qword [rsp + 0x290], rax
movsx r14, r14w
movzx di, bl
mov qword [rsp + 0x90], rax
movabs rax, 0xe7e3977e114e6703
xchg si, r12w
mov r13b, 0xe9
movsx r15w, dil
mov qword [rsp + 0x288], rax
cmova esi, ebx
movzx rdi, r13w
mov r12w, r12w
mov qword [rsp + 0x98], rax
xchg bx, r14w
movsx ebp, ax
movabs rax, 0xb0b65ec58a603c8
movsx r12w, dl
mov r12b, bl
mov qword [rsp + 0x280], rax
movzx r15w, al
movsxd rbp, eax
xchg r15d, r15d
mov qword [rsp + 0xa0], rax
setbe bh
mov r12d, r10d
movsx esi, r14w
movabs rax, 0x6708be65ca8156d7
not rbx
movsxd rsi, edx
xchg r12b, sil
mov qword [rsp + 0x278], rax
mov qword [rsp + 0xa8], rax
cwde
lahf
mov rbx, r10
movabs rax, 0x46a7044da5524090
mov qword [rsp + 0x270], rax
cmovo edi, r14d
mov qword [rsp + 0xb0], rax
mov r12w, r8w
cbw
mov r14w, 0x6988
movabs rax, 0x4b8cb541ca050f46
movsx bx, sil
mov r12d, r15d
movzx r13, si
mov qword [rsp + 0x268], rax
bswap bx
mov ebx, r10d
cmovl bx, r15w
mov qword [rsp + 0xb8], rax
movsxd r14, edi
mov ax, r15w
movabs rax, 0xe627ab41184af921
movsx si, dil
movzx r14d, r11w
mov qword [rsp + 0x260], rax
movsx r12, r11w
mov r14b, spl
jmp 0x1403fbbb8
mov qword [rsp + 0xc0], rax
movsxd r15, r9d
movabs rax, 0x34c77b6e31b9a
mov r13w, r13w
movsx r13, r14w
mov qword [rsp + 0x258], rax
mov qword [rsp + 0xc8], rax
cbw
movabs rax, 0xd8cf4ec0049852bb
cmovnp si, ax
mov qword [rsp + 0xd0], rax
movsxd r13, eax
movzx bp, r12b
lahf
movabs rax, 0xa5eac9844f8ea419
bswap r13w
movzx rdi, r9w
mov qword [rsp + 0xd8], rax
movsx r12, cx
movzx rsi, bp
mov qword [rsp + 0x30], 0
movzx r15d, sp
mov dword [rsp + 0x3c], 0
movabs rbp, 0x2eb490333e21dae3
movsxd r14, r12d
jmp 0x1403fbc52
mov qword [rsp + 0xe0], rbp
not al
movzx bx, al
movabs r14, 0x28903e48668cb956
jmp 0x1403fbc72
mov qword [rsp + 0xe8], r14
cdqe
movzx r12, r12w
movabs r15, 0xe05dec612491fd3d
mov dil, 7
cwde
mov qword [rsp + 0x100], r15
cbw
movabs r12, 0x2247bce40ef3a5e6
movsx ax, r9b
mov qword [rsp + 0x108], r12
movzx rsi, sp
movzx di, al
movsx edi, r11w
movabs rsi, 0xfbacf3ffe06d2fd7
movsx ax, r11b
mov qword [rsp + 0x110], rsi
cwde
movsx rbx, r15w
movabs rdi, 0x17c85fba5363a6e8
cdqe
not ah
movzx eax, r13w
mov qword [rsp + 0x118], rdi
cmovg ebx, eax
movsx rax, bp
movzx r13d, r13w
movabs rax, 0xfdf6d5258f21fa01
mov qword [rsp + 0x120], rax
movsx rbx, r10w
mov rbx, rax
movsx eax, r13w
cdqe
movsxd rax, r12d
movabs rax, 0x4b4d6498cd17722a
not r13b
setae r13b
movsx r13w, spl
mov qword [rsp + 0x2f0], rax
bswap r13w
movsx r13d, dx
mov qword [rsp + 0x128], rax
xchg r13b, al
bswap rax
setno ah
movabs rax, 0xeefa322379b8227b
mov qword [rsp + 0x250], rax
movzx r13d, di
mov qword [rsp + 0x130], rax
bswap eax
mov r13w, sp
cwde
movabs rax, 0x6d1646ce6d26fe8c
movsxd r13, ebp
movzx r13d, r9w
mov qword [rsp + 0x248], rax
movzx r13, ax
mov r13b, 0x69
movsx r13, r14w
mov qword [rsp + 0x138], rax
cmove r13w, si
movzx rax, bx
jmp 0x1403fbdb4
movabs rax, 0xd0fb6869ef6b6a05
mov r13b, 0xa0
mov qword [rsp + 0x240], rax
cmovl r13, rsi
movzx r13, bp
mov qword [rsp + 0x140], rax
jmp 0x1403fbde6
movabs rax, 0xa86b938cd3598c0e
not r13w
mov r13b, 0xf3
mov qword [rsp + 0x238], rax
bswap r13d
movsx r13d, r14w
movsx r13w, r8b
mov qword [rsp + 0x148], rax
cmove ax, ax
movabs rax, 0x3382304733f7037f
xchg r13b, r13b
mov qword [rsp + 0x230], rax
movsx r13, si
cmove r13w, r13w
mov qword [rsp + 0x150], rax
movsxd rax, r9d
cdqe
jmp 0x1403fbe47
movabs rax, 0xe7b39722113d6770
movsx r13, r8w
mov qword [rsp + 0x228], rax
movzx r13, cx
mov r13, rsp
mov r13d, 0x46e0371a
mov qword [rsp + 0x158], rax
cbw
setle r13b
movabs rax, 0xb66658d58d403a9
movsx r13, r10w
bswap r13w
mov r13w, r9w
mov qword [rsp + 0x220], rax
mov qword [rsp + 0x160], rax
cwde
movzx ax, r13b
mov r13b, 0x2b
movabs rax, 0x677abe00caf556b2
setb r13b
mov qword [rsp + 0x218], rax
movsxd r13, ebx
movzx r13w, r9b
mov qword [rsp + 0x168], rax
mov r13d, esi
cdqe
movsx r13, dx
movabs rax, 0x46ce040ba50e40e3
movsxd r13, r9d
mov qword [rsp + 0x210], rax
xchg r13b, r13b
mov qword [rsp + 0x170], rax
mov ah, 0xb
cmovg r13w, r9w
jmp 0x1403fbf03
movabs rax, 0x4bedb536ca600f34
movzx r13, bx
movsx r13d, r12w
mov qword [rsp + 0x208], rax
mov qword [rsp + 0x178], rax
movabs rax, 0xe648ab111826f94d
movsxd r13, r10d
xchg r13w, r13w
mov r13w, 0x2fcf
mov qword [rsp + 0x200], rax
movzx r13d, r9w
movsxd r13, ebx
mov qword [rsp + 0x180], rax
movsxd rax, r10d
movabs rax, 0x7a4c14b68a1bf6
mov qword [rsp + 0x1f8], rax
mov qword [rsp + 0x188], rax
mov al, r10b
movabs rax, 0xd8a24eaf04dc52e7
mov qword [rsp + 0x1f0], rax
mov qword [rsp + 0x190], rax
movsxd r13, esi
cbw
mov ax, dx
movabs rax, 0xa5bac9ea4fe7a478
movsxd r13, edx
setnp r13b
not r13d
mov qword [rsp + 0x1e8], rax
not r13w
movzx r13d, r13w
movsxd r13, r12d
mov qword [rsp + 0x198], rax
movsxd rax, r15d
setp r13b
movabs rax, 0x2edd90553e4eda91
mov qword [rsp + 0x1e0], rax
bswap r13w
cmovle r13, r9
xchg r13, r13
mov qword [rsp + 0x1a0], rax
movzx eax, r14w
movabs rax, 0x28903e4866e9b93a
mov qword [rsp + 0x1d8], rax
mov qword [rsp + 0x1a8], rax
mov ah, 0x6a
lea r13, [rsp + 0x100]
lahf
movsxd rax, r9d
movzx ax, bpl
mov rax, r13
jmp 0x1403fc029
movaps xmm0, xmmword [rsp + 0x40]
xorps xmm0, xmmword [rax]
movaps xmmword [rsp + 0x40], xmm0
jmp 0x1403fc03b
movaps xmm0, xmmword [rsp + 0x50]
jmp 0x1403fc045
xorps xmm0, xmmword [rax + 0x10]
movaps xmmword [rsp + 0x50], xmm0
jmp 0x1403fc053
movaps xmm0, xmmword [rsp + 0x60]
xorps xmm0, xmmword [rax + 0x20]
movaps xmmword [rsp + 0x60], xmm0
jmp 0x1403fc066
movaps xmm0, xmmword [rsp + 0x70]
jmp 0x1403fc070
xorps xmm0, xmmword [rax + 0x30]
movaps xmmword [rsp + 0x70], xmm0
jmp 0x1403fc07e
movaps xmm0, xmmword [rsp + 0x80]
jmp 0x1403fc08b
xorps xmm0, xmmword [rax + 0x40]
movaps xmmword [rsp + 0x80], xmm0
movaps xmm0, xmmword [rsp + 0x90]
jmp 0x1403fc0a4
xorps xmm0, xmmword [rax + 0x50]
movaps xmmword [rsp + 0x90], xmm0
jmp 0x1403fc0b5
movaps xmm0, xmmword [rsp + 0xa0]
jmp 0x1403fc0c2
xorps xmm0, xmmword [rax + 0x60]
movaps xmmword [rsp + 0xa0], xmm0
jmp 0x1403fc0d3
movaps xmm0, xmmword [rsp + 0xb0]
jmp 0x1403fc0e0
xorps xmm0, xmmword [rax + 0x70]
movaps xmmword [rsp + 0xb0], xmm0
jmp 0x1403fc0f1
movaps xmm0, xmmword [rsp + 0xc0]
xorps xmm0, xmmword [rax + 0x80]
movaps xmmword [rsp + 0xc0], xmm0
jmp 0x1403fc10d
movaps xmm0, xmmword [rsp + 0xd0]
jmp 0x1403fc11a
xorps xmm0, xmmword [rax + 0x90]
movaps xmmword [rsp + 0xd0], xmm0
movaps xmm0, xmmword [rsp + 0xe0]
jmp 0x1403fc136
xorps xmm0, xmmword [rax + 0xa0]
movaps xmmword [rsp + 0xe0], xmm0
mov dh, 0x4f
lea rdx, [rsp + 0x40]
movsx cx, r9b
lea r8, [rsp + 0x30]
movsx cx, r15b
movzx cx, spl
mov cx, 0x31ad
mov rcx, 0xffffffff80000002
jmp 0x1403fc171
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyW]
movabs rax, 0xe03fec0024fffd78
mov qword [rsp + 0x1d0], rax
mov qword [rsp + 0x40], rax
setns ah
cwde
movabs rax, 0x222ebca20e96a58a
jmp 0x1403fc1a1
mov qword [rsp + 0x1c8], rax
jmp 0x1403fc1ae
mov qword [rsp + 0x48], rax
lahf
movabs rax, 0xfbcdf388e0082fa5
jmp 0x1403fc1c3
mov qword [rsp + 0x2e8], rax
jmp 0x1403fc1d0
mov qword [rsp + 0x50], rax
movzx ax, bh
cwde
movabs rax, 0x17c85fba530fa684
jmp 0x1403fc1e9
mov qword [rsp + 0x1c0], rax
mov qword [rsp + 0x58], rax
movsx rax, cx
mov qword [rsp + 0x100], r15
jmp 0x1403fc20a
mov qword [rsp + 0x108], r12
movzx ax, r8b
mov qword [rsp + 0x110], rsi
movsx ax, bh
lahf
mov qword [rsp + 0x118], rdi
mov rax, r13
jmp 0x1403fc234
movaps xmm0, xmmword [rsp + 0x40]
xorps xmm0, xmmword [rax]
movaps xmmword [rsp + 0x40], xmm0
jmp 0x1403fc246
movaps xmm0, xmmword [rsp + 0x50]
jmp 0x1403fc250
xorps xmm0, xmmword [rax + 0x10]
movaps xmmword [rsp + 0x50], xmm0
neg ax
movzx ax, r14b
mov rcx, qword [rsp + 0x30]
or dl, dil
movsx r9w, r10b
lea rax, [rsp + 0x3c]
xor dx, 0x4b7b
mov qword [rsp + 0x20], rax
mov dword [rsp + 0x28], 4
lea rdx, [rsp + 0x40]
neg r9
xor r9w, dx
btc r9w, r9w
sub r8d, r8d
mov r9d, 4
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
mov rcx, qword [rsp + 0x30]
jmp 0x1403fc2af
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov rax, qword [rsp + 0x2e0]
mov qword [rsp + 0x40], rax
movsxd rax, edi
movzx ax, r9b
mov rax, qword [rsp + 0x2d8]
jmp 0x1403fc2d7
mov qword [rsp + 0x48], rax
mov rax, qword [rsp + 0x2d0]
jmp 0x1403fc2e9
mov qword [rsp + 0x50], rax
jmp 0x1403fc2f3
mov rax, qword [rsp + 0x2c8]
jmp 0x1403fc300
mov qword [rsp + 0x58], rax
mov rax, qword [rsp + 0x2c0]
jmp 0x1403fc312
mov qword [rsp + 0x60], rax
cbw
mov rax, qword [rsp + 0x2b8]
jmp 0x1403fc326
mov qword [rsp + 0x68], rax
mov rax, qword [rsp + 0x2b0]
jmp 0x1403fc338
mov qword [rsp + 0x70], rax
lahf
setge ah
mov rax, qword [rsp + 0x2a8]
jmp 0x1403fc34e
mov qword [rsp + 0x78], rax
bswap eax
cmovo rax, r14
lahf
mov rax, qword [rsp + 0x2a0]
jmp 0x1403fc367
mov qword [rsp + 0x80], rax
mov rax, qword [rsp + 0x298]
jmp 0x1403fc37c
mov qword [rsp + 0x88], rax
movzx eax, si
mov rax, qword [rsp + 0x290]
jmp 0x1403fc394
mov qword [rsp + 0x90], rax
movsx ax, al
mov rax, qword [rsp + 0x288]
jmp 0x1403fc3ad
mov qword [rsp + 0x98], rax
mov rax, qword [rsp + 0x280]
jmp 0x1403fc3c2
mov qword [rsp + 0xa0], rax
xchg ah, ah
movsxd rax, r11d
movsx eax, sp
mov rax, qword [rsp + 0x278]
jmp 0x1403fc3df
mov qword [rsp + 0xa8], rax
movsxd rax, r11d
mov rax, qword [rsp + 0x270]
mov qword [rsp + 0xb0], rax
cdqe
mov rax, qword [rsp + 0x268]
jmp 0x1403fc409
mov qword [rsp + 0xb8], rax
mov rax, qword [rsp + 0x260]
jmp 0x1403fc41e
mov qword [rsp + 0xc0], rax
mov rax, qword [rsp + 0x258]
jmp 0x1403fc433
mov qword [rsp + 0xc8], rax
movsx eax, bp
movabs rax, 0xd8c04eda048c52bb
jmp 0x1403fc44d
mov qword [rsp + 0xd0], rax
jmp 0x1403fc45c
movabs rax, 0xa5eac9894f8ea414
jmp 0x1403fc46b
mov qword [rsp + 0xd8], rax
not ah
lahf
mov qword [rsp + 0xe0], rbp
mov qword [rsp + 0xe8], r14
movsx r14w, r12b
not bpl
mov qword [rsp + 0x100], r15
movzx eax, r8w
not bp
bswap bp
mov qword [rsp + 0x108], r12
setle r14b
mov qword [rsp + 0x110], rsi
mov qword [rsp + 0x118], rdi
cdqe
movsx eax, r11w
mov rbp, rbx
cdqe
lahf
mov qword [rsp + 0x120], rbx
cmovp r14w, sp
mov r14, qword [rsp + 0x2f0]
mov al, dl
not ah
mov qword [rsp + 0x128], r14
bswap eax
mov rax, qword [rsp + 0x250]
mov qword [rsp + 0x130], rax
cbw
mov rax, qword [rsp + 0x248]
jmp 0x1403fc50a
mov qword [rsp + 0x138], rax
setl al
movsx eax, r14w
mov rax, qword [rsp + 0x240]
mov qword [rsp + 0x140], rax
movsx eax, r15w
movsx ax, bh
mov rax, qword [rsp + 0x238]
mov qword [rsp + 0x148], rax
cdqe
cmovne ax, r10w
jmp 0x1403fc54d
mov rax, qword [rsp + 0x230]
jmp 0x1403fc55a
mov qword [rsp + 0x150], rax
movzx ax, spl
mov ax, r13w
cmovno ax, ax
mov rax, qword [rsp + 0x228]
jmp 0x1403fc57c
mov qword [rsp + 0x158], rax
cbw
movsx ax, r13b
mov rax, qword [rsp + 0x220]
jmp 0x1403fc598
mov qword [rsp + 0x160], rax
jmp 0x1403fc5ad
mov rax, qword [rsp + 0x218]
mov qword [rsp + 0x168], rax
jmp 0x1403fc5c2
mov rax, qword [rsp + 0x210]
jmp 0x1403fc5cf
mov qword [rsp + 0x170], rax
movzx ax, r12b
cdqe
movsx rax, r15w
mov rax, qword [rsp + 0x208]
jmp 0x1403fc5ef
mov qword [rsp + 0x178], rax
mov rax, qword [rsp + 0x200]
jmp 0x1403fc604
mov qword [rsp + 0x180], rax
mov rax, qword [rsp + 0x1f8]
mov qword [rsp + 0x188], rax
mov rax, qword [rsp + 0x1f0]
mov qword [rsp + 0x190], rax
nop
mov rax, qword [rsp + 0x1e8]
jmp 0x1403fc63b
mov qword [rsp + 0x198], rax
lahf
movsxd rax, r12d
mov rax, qword [rsp + 0x1e0]
jmp 0x1403fc654
mov qword [rsp + 0x1a0], rax
nop
cwde
mov rax, qword [rsp + 0x1d8]
jmp 0x1403fc66c
mov qword [rsp + 0x1a8], rax
movzx eax, si
mov rax, r13
jmp 0x1403fc67f
movaps xmm0, xmmword [rsp + 0x40]
jmp 0x1403fc689
movaps xmm1, xmmword [rsp + 0x50]
jmp 0x1403fc693
movaps xmm2, xmmword [rsp + 0x60]
jmp 0x1403fc69d
xorps xmm0, xmmword [rax]
movaps xmm3, xmmword [rsp + 0x70]
jmp 0x1403fc6aa
movaps xmmword [rsp + 0x40], xmm0
jmp 0x1403fc6b4
xorps xmm1, xmmword [rax + 0x10]
movaps xmmword [rsp + 0x50], xmm1
jmp 0x1403fc6c2
xorps xmm2, xmmword [rax + 0x20]
movaps xmmword [rsp + 0x60], xmm2
jmp 0x1403fc6d0
xorps xmm3, xmmword [rax + 0x30]
movaps xmmword [rsp + 0x70], xmm3
jmp 0x1403fc6de
movaps xmm0, xmmword [rsp + 0x80]
xorps xmm0, xmmword [rax + 0x40]
movaps xmmword [rsp + 0x80], xmm0
movaps xmm0, xmmword [rsp + 0x90]
jmp 0x1403fc6ff
xorps xmm0, xmmword [rax + 0x50]
movaps xmmword [rsp + 0x90], xmm0
jmp 0x1403fc710
movaps xmm0, xmmword [rsp + 0xa0]
jmp 0x1403fc71d
xorps xmm0, xmmword [rax + 0x60]
movaps xmmword [rsp + 0xa0], xmm0
jmp 0x1403fc72e
movaps xmm0, xmmword [rsp + 0xb0]
jmp 0x1403fc73b
xorps xmm0, xmmword [rax + 0x70]
movaps xmmword [rsp + 0xb0], xmm0
movaps xmm0, xmmword [rsp + 0xc0]
xorps xmm0, xmmword [rax + 0x80]
movaps xmmword [rsp + 0xc0], xmm0
jmp 0x1403fc763
movaps xmm0, xmmword [rsp + 0xd0]
xorps xmm0, xmmword [rax + 0x90]
movaps xmmword [rsp + 0xd0], xmm0
jmp 0x1403fc77f
movaps xmm0, xmmword [rsp + 0xe0]
jmp 0x1403fc78c
xorps xmm0, xmmword [rax + 0xa0]
movaps xmmword [rsp + 0xe0], xmm0
lea rdx, [rsp + 0x40]
movsx r8w, r15b
movzx rcx, si
mov rcx, 0xffffffff80000002
movsx r8w, dl
cmovb r8, r10
lea r8, [rsp + 0x30]
jmp 0x1403fc7c3
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyW]
mov rax, qword [rsp + 0x1d0]
cmovo bx, r12w
mov qword [rsp + 0x40], rax
movsx eax, r10w
mov rax, qword [rsp + 0x1c8]
mov qword [rsp + 0x48], rax
mov rbx, qword [rsp + 0x2e8]
movzx rax, r13w
nop
movzx eax, r12w
mov qword [rsp + 0x50], rbx
mov rax, qword [rsp + 0x1c0]
jmp 0x1403fc80f
mov qword [rsp + 0x58], rax
nop
mov qword [rsp + 0x100], r15
mov rax, 0x56e963d3
mov qword [rsp + 0x108], r12
mov qword [rsp + 0x110], rsi
movsxd rax, r13d
sets al
not al
mov qword [rsp + 0x118], rdi
lahf
not ah
mov rax, r13
jmp 0x1403fc850
movaps xmm0, xmmword [rsp + 0x40]
jmp 0x1403fc85a
xorps xmm0, xmmword [rax]
movaps xmmword [rsp + 0x40], xmm0
jmp 0x1403fc867
movaps xmm0, xmmword [rsp + 0x50]
xorps xmm0, xmmword [rax + 0x10]
movaps xmmword [rsp + 0x50], xmm0
test bl, r13b
dec dx
mov rcx, qword [rsp + 0x30]
bt dx, 0x4b
xchg r9, rax
mov r9w, sp
lea rax, [rsp + 0x3c]
shl dx, 0xbc
mov qword [rsp + 0x20], rax
not dh
bswap dx
ror dh, 0x2e
mov dword [rsp + 0x28], 4
shrd r9w, bx, 0xfe
lea rdx, [rsp + 0x40]
xor r8d, r8d
movsx r9d, r8w
mov r9d, 4
jmp 0x1403fc8c6
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
mov rcx, qword [rsp + 0x30]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov rax, qword [rsp + 0x2e0]
jmp 0x1403fc8e4
mov qword [rsp + 0x40], rax
mov ah, al
mov rax, qword [rsp + 0x2d8]
mov qword [rsp + 0x48], rax
bswap eax
mov rax, qword [rsp + 0x2d0]
mov qword [rsp + 0x50], rax
bswap eax
cdqe
mov rax, qword [rsp + 0x2c8]
jmp 0x1403fc918
mov qword [rsp + 0x58], rax
mov rax, qword [rsp + 0x2c0]
mov qword [rsp + 0x60], rax
mov rax, rbx
cbw
lahf
mov rax, qword [rsp + 0x2b8]
jmp 0x1403fc93d
mov qword [rsp + 0x68], rax
cbw
cmove eax, eax
mov rax, qword [rsp + 0x2b0]
jmp 0x1403fc954
mov qword [rsp + 0x70], rax
not ax
cwde
mov rax, qword [rsp + 0x2a8]
jmp 0x1403fc96a
mov qword [rsp + 0x78], rax
movsx eax, bx
mov rax, qword [rsp + 0x2a0]
mov qword [rsp + 0x80], rax
cdqe
mov rax, qword [rsp + 0x298]
jmp 0x1403fc991
mov qword [rsp + 0x88], rax
mov eax, r8d
mov rax, qword [rsp + 0x290]
mov qword [rsp + 0x90], rax
cwde
mov rax, qword [rsp + 0x288]
mov qword [rsp + 0x98], rax
setl al
movsx ax, dl
cmovge eax, ebp
mov rax, qword [rsp + 0x280]
jmp 0x1403fc9d4
mov qword [rsp + 0xa0], rax
cwde
cmovbe ax, r10w
movsx ax, bl
mov rax, qword [rsp + 0x278]
jmp 0x1403fc9f3
mov qword [rsp + 0xa8], rax
cbw
mov rax, qword [rsp + 0x270]
mov qword [rsp + 0xb0], rax
cbw
not ax
movzx eax, r15w
mov rax, qword [rsp + 0x268]
jmp 0x1403fca23
mov qword [rsp + 0xb8], rax
movsxd rax, r13d
cwde
mov eax, 0x65980b79
mov rax, qword [rsp + 0x260]
jmp 0x1403fca41
mov qword [rsp + 0xc0], rax
mov rax, qword [rsp + 0x258]
jmp 0x1403fca56
mov qword [rsp + 0xc8], rax
movsx ax, r15b
cbw
setbe al
movabs rax, 0xd8c34edb048f52bb
jmp 0x1403fca77
mov qword [rsp + 0xd0], rax
movabs rax, 0xa5c8c98b4f83a416
jmp 0x1403fca8e
mov qword [rsp + 0xd8], rax
movsx rax, r9w
movzx eax, r9w
lahf
movabs rax, 0x2eb290273e1edaf5
jmp 0x1403fcaae
mov qword [rsp + 0xe0], rax
seto ah
bswap ax
movabs rax, 0x28f53e246680b95c
jmp 0x1403fcacb
mov qword [rsp + 0xe8], rax
mov al, 0x74
cmovnp eax, ebp
mov qword [rsp + 0x100], r15
mov qword [rsp + 0x108], r12
not al
movsx eax, ax
mov qword [rsp + 0x110], rsi
mov qword [rsp + 0x118], rdi
mov qword [rsp + 0x120], rbp
not ax
mov qword [rsp + 0x128], r14
lahf
mov rax, qword [rsp + 0x250]
mov qword [rsp + 0x130], rax
movsxd rax, r14d
mov rax, qword [rsp + 0x248]
jmp 0x1403fcb31
mov qword [rsp + 0x138], rax
setg ah
jmp 0x1403fcb46
mov rax, qword [rsp + 0x240]
mov qword [rsp + 0x140], rax
setp al
mov rax, qword [rsp + 0x238]
jmp 0x1403fcb66
mov qword [rsp + 0x148], rax
setl al
mov rax, qword [rsp + 0x230]
jmp 0x1403fcb7e
mov qword [rsp + 0x150], rax
bswap rax
mov rax, qword [rsp + 0x228]
mov qword [rsp + 0x158], rax
lahf
jmp 0x1403fcba3
mov rax, qword [rsp + 0x220]
jmp 0x1403fcbb0
mov qword [rsp + 0x160], rax
cwde
movzx rax, r15w
jmp 0x1403fcbc2
mov rax, qword [rsp + 0x218]
jmp 0x1403fcbcf
mov qword [rsp + 0x168], rax
cbw
mov rax, qword [rsp + 0x210]
jmp 0x1403fcbe6
mov qword [rsp + 0x170], rax
cwde
mov rax, qword [rsp + 0x208]
jmp 0x1403fcbfc
mov qword [rsp + 0x178], rax
cdqe
movsxd rax, ebp
jmp 0x1403fcc0e
mov rax, qword [rsp + 0x200]
mov qword [rsp + 0x180], rax
bswap ax
setle al
mov rax, qword [rsp + 0x1f8]
jmp 0x1403fcc31
mov qword [rsp + 0x188], rax
movsxd rax, ebx
nop
mov rax, qword [rsp + 0x1f0]
jmp 0x1403fcc4a
mov qword [rsp + 0x190], rax
movzx eax, r12w
movsx eax, r10w
mov rax, qword [rsp + 0x1e8]
jmp 0x1403fcc67
mov qword [rsp + 0x198], rax
movzx rax, r8w
cbw
movsx rax, cx
mov rax, qword [rsp + 0x1e0]
jmp 0x1403fcc86
mov qword [rsp + 0x1a0], rax
mov ah, 0x7e
setb al
mov rax, qword [rsp + 0x1d8]
mov qword [rsp + 0x1a8], rax
movabs rax, 0xa1410f538a85c08b
jmp 0x1403fccb3
mov qword [rsp + 0xf0], rax
jmp 0x1403fccc0
mov qword [rsp + 0x1b0], rax
lahf
movabs rax, 0x6078a8fe5539451c
jmp 0x1403fccd8
mov qword [rsp + 0xf8], rax
jmp 0x1403fcce5
mov qword [rsp + 0x1b8], rax
mov al, spl
movsx ax, r13b
mov rax, r13
jmp 0x1403fccfd