Function at 0x14001d430
Capabilities:
Create process on windows

Disassembly:
sub rsp, 0x28
lea rcx, str.Reg.exe_add__HKCUSOFTWAREMicrosoftWindowsCurrentVersionThemesPersonalize___v__EnableTransparency___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUSoftwareMicrosoftWindowsCurrentVersionExplorerAdvanced___v__TaskbarAnimations___t_REG_DWORD__d_0__f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUSoftwareMicrosoftWindowsCurrentVersionExplorerAdvanced___v__ListviewAlphaSelect___t_REG_DWORD__d_0__f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUSOFTWAREMicrosoftWindowsCurrentVersionExplorerAdvanced___v__EnableBalloonTips___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUSoftwareMicrosoftWindowsCurrentVersionExplorerAdvanced___v__DisallowShaking___t_REG_DWORD__d__1___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUSoftwareMicrosoftWindowsCurrentVersionExplorerAdvancedPeople___v__PeopleBand___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSoftwarePoliciesMicrosoftWindowsCloudContent___v_DisableSoftLanding__t_REG_DWORD__d_1__f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetControlFileSystem___v__LongPathsEnabled___t_REG_DWORD__d__1___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUSoftwareMicrosoftWindowsCurrentVersionExplorerAdvanced___v__ShowSyncProviderNotifications___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREMicrosoftWindowsCurrentVersionThemesPersonalize___v__AppsUseLightTheme___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUSOFTWAREMicrosoftWindowsCurrentVersionThemesPersonalize___v__AppsUseLightTheme___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUSOFTWAREClassesLocal_SettingsSoftwareMicrosoftWindowsCurrentVersionAppContainerStoragemicrosoft.microsoftedge_8wekyb3d8bbweMicrosoftEdgeMain___v__Theme___t_REG_DWORD__d__1___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKEY_USERS.DEFAULTControl_PanelKeyboard___v_InitialKeyboardIndicators__t_REG_SZ__d__2147483650___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUControl_PanelKeyboard___v__KeyboardSpeed___t_REG_SZ__d__31___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKEY_USERS.DEFAULTControl_PanelKeyboard___v__InitialKeyboardIndicators___t_REG_SZ__d__2___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUControl_PanelKeyboard___v__InitialKeyboardIndicators___t_REG_SZ__d__2___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKEY_USERS.DEFAULTControl_PanelKeyboard___v__KeyboardDelay___t_REG_SZ__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKEY_USERS.DEFAULTControl_PanelKeyboard___v__KeyboardSpeed___t_REG_SZ__d__31___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_delete__HKLMSOFTWAREPoliciesMicrosoftWindowsAppPrivacy___v__LetAppsAccessMicrophone___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_delete__HKLMSOFTWAREPoliciesMicrosoftWindowsAppPrivacy___v__LetAppsAccessCamera___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREPoliciesMicrosoftWindowsAppPrivacy___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUControl_PanelDesktop___v__JPEGImportQuality___t_REG_DWORD__d__100___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUControl_PanelDesktop___v__MenuShowDelay___t_REG_SZ__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUControl_PanelMouse___v__MouseHoverTime___t_REG_SZ__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREMicrosoftWindows_NTCurrentVersionMultimediaSystemProfile___v__SystemResponsiveness___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREMicrosoftWindows_NTCurrentVersionMultimediaSystemProfile___v__NetworkThrottlingIndex___t_REG_DWORD__d__4294967295___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREMicrosoftWindows_NTCurrentVersionMultimediaSystemProfileTasksGames___v__Affinity___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREMicrosoftWindows_NTCurrentVersionMultimediaSystemProfileTasksGames___v__Background_Only___t_REG_SZ__d__False___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREMicrosoftWindows_NTCurrentVersionMultimediaSystemProfileTasksGames___v__Clock_Rate___t_REG_DWORD__d__10000___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREMicrosoftWindows_NTCurrentVersionMultimediaSystemProfileTasksGames___v__GPU_Priority___t_REG_DWORD__d__8___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREMicrosoftWindows_NTCurrentVersionMultimediaSystemProfileTasksGames___v__Priority___t_REG_DWORD__d__6___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREMicrosoftWindows_NTCurrentVersionMultimediaSystemProfileTasksGames___v__Scheduling_Category___t_REG_SZ__d__High___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREMicrosoftWindows_NTCurrentVersionMultimediaSystemProfileTasksGames___v__SFIO_Priority___t_REG_SZ__d__High___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.bcdedit__deletevalue_useplatformclock
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.bcdedit__set_debug_No
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.bcdedit__deletevalue_usefirmwarepcisettings
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUSOFTWAREMicrosoftWindowsCurrentVersionSettingSync___v__SyncPolicy___t_REG_DWORD__d__5___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUSOFTWAREMicrosoftWindowsCurrentVersionSettingSyncGroupsPersonalization___v__Enabled___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUSOFTWAREMicrosoftWindowsCurrentVersionSettingSyncGroupsBrowserSettings___v__Enabled___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUSOFTWAREMicrosoftWindowsCurrentVersionSettingSyncGroupsCredentials___v__Enabled___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUSOFTWAREMicrosoftWindowsCurrentVersionSettingSyncGroupsAccessibility___v__Enabled___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUSOFTWAREMicrosoftWindowsCurrentVersionSettingSyncGroupsWindows___v__Enabled___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUSOFTWAREMicrosoftWindowsCurrentVersionThemesPersonalize___v__EnableTransparency___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREMicrosoftPolicyManagerdefaultApplicationManagementAllowGameDVR___v__value___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREPoliciesMicrosoftWindowsGameDVR___v__AllowGameDVR___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUSystemGameConfigStore___v__GameDVR_Enabled___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUSOFTWAREMicrosoftWindowsCurrentVersionGameDVR___v__AppCaptureEnabled___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUSOFTWAREMicrosoftGameBar___v__AllowAutoGameMode___t_REG_DWORD__d__1___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUSOFTWAREMicrosoftGameBar___v__AutoGameModeEnabled___t_REG_DWORD__d__1___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetControlGraphicsDrivers___v__HwSchMode___t_REG_DWORD__d__2___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUSOFTWAREMicrosoftDirectXUserGpuPreferences___v__DirectXUserGlobalSettings___t_REG_SZ__d__VRROptimizeEnable0____f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUControl_PanelAccessibilityMouseKeys___v__Flags___t_REG_SZ__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUControl_PanelAccessibilityStickyKeys___v__Flags___t_REG_SZ__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUControl_PanelAccessibilityKeyboard_Response___v__Flags___t_REG_SZ__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUControl_PanelAccessibilityToggleKeys___v__Flags___t_REG_SZ__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUSOFTWAREMicrosoftWindowsCurrentVersionAdvertisingInfo___v__Enabled___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUControl_PanelInternationalUser_Profile___v__HttpAcceptLanguageOptOut___t_REG_DWORD__d__1___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUSOFTWAREMicrosoftWindowsCurrentVersionExplorerAdvanced___v__Start_TrackProgs___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUSOFTWAREMicrosoftSpeech_OneCoreSettingsOnlineSpeechPrivacy___v__HasAccepted___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUSOFTWAREMicrosoftPersonalizationSettings___v__AcceptedPrivacyPolicy___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUSOFTWAREMicrosoftInputPersonalization___v__RestrictImplicitInkCollection___t_REG_DWORD__d__1___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUSOFTWAREMicrosoftInputPersonalization___v__RestrictImplicitTextCollection___t_REG_DWORD__d__1___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUSOFTWAREMicrosoftInputPersonalizationTrainedDataStore___v__HarvestContacts___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUSOFTWAREMicrosoftWindowsCurrentVersionDiagnosticsDiagTrack___v__ShowedToastAtLevel___t_REG_DWORD__d__1___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREMicrosoftWindowsCurrentVersionPoliciesDataCollection___v__AllowTelemetry___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREPoliciesMicrosoftWindowsDataCollection___v__AllowTelemetry___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREPoliciesMicrosoftWindowsDataCollection___v__AllowDeviceNameInTelemetry___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREWow6432NodeMicrosoftWindowsCurrentVersionPoliciesDataCollection___v__AllowTelemetry___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUSOFTWAREMicrosoftWindowsCurrentVersionPrivacy___v__TailoredExperiencesWithDiagnosticDataEnabled___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREMicrosoftWindowsCurrentVersionDiagnosticsDiagTrackEventTranscriptKey___v__EnableEventTranscript___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUSOFTWAREMicrosoftSiufRules___v__NumberOfSIUFInPeriod___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_delete__HKCUSOFTWAREMicrosoftSiufRules___v__PeriodInNanoSeconds___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREPoliciesMicrosoftWindowsSystem___v__PublishUserActivities___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREPoliciesMicrosoftWindowsSystem___v__UploadUserActivities___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREMicrosoftWindowsCurrentVersionCapabilityAccessManagerConsentStoreuserNotificationListener___v__Value___t_REG_SZ__d__Deny___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUSOFTWAREMicrosoftWindowsCurrentVersionCapabilityAccessManagerConsentStorelocation___v__Value___t_REG_SZ__d__Deny___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUSOFTWAREMicrosoftWindowsCurrentVersionCapabilityAccessManagerConsentStore_appDiagnostics___v__Value___t_REG_SZ__d__Deny___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUSOFTWAREMicrosoftWindowsCurrentVersionCapabilityAccessManagerConsentStoreuserAccountInformation___v__Value___t_REG_SZ__d__Deny___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUSOFTWAREMicrosoftWindowsCurrentVersionBackgroundAccessApplications___v__GlobalUserDisabled___t_REG_DWORD__d__1___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUSOFTWAREMicrosoftWindowsCurrentVersionSearch___v__BackgroundAppGlobalToggle___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUSOFTWAREMicrosoftWindowsCurrentVersionContentDeliveryManager___v__SubscribedContent_338393Enabled___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUSOFTWAREMicrosoftWindowsCurrentVersionContentDeliveryManager___v__SubscribedContent_353694Enabled___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUSOFTWAREMicrosoftWindowsCurrentVersionContentDeliveryManager___v__SubscribedContent_353696Enabled___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUSOFTWAREMicrosoftWindowsCurrentVersionContentDeliveryManager___v__SubscribedContent_338387Enabled___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUSOFTWAREMicrosoftWindowsCurrentVersionContentDeliveryManager___v__SubscribedContent_338389Enabled___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUSOFTWAREMicrosoftWindowsCurrentVersionContentDeliveryManager___v__SubscribedContent_310093Enabled___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUSOFTWAREMicrosoftWindowsCurrentVersionContentDeliveryManager___v__SubscribedContent_338388Enabled___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUSOFTWAREMicrosoftWindowsCurrentVersionContentDeliveryManager___v__SubscribedContent_314563Enabled___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUSOFTWAREMicrosoftWindowsCurrentVersionContentDeliveryManager___v__RotatingLockScreenOverlayEnabled___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUSOFTWAREMicrosoftWindowsCurrentVersionContentDeliveryManager___v__RotatingLockScreenEnabled___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUSOFTWAREMicrosoftWindowsCurrentVersionContentDeliveryManager___v__ContentDeliveryAllowed___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUSOFTWAREMicrosoftWindowsCurrentVersionContentDeliveryManager___v__OemPreInstalledAppsEnabled___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUSOFTWAREMicrosoftWindowsCurrentVersionContentDeliveryManager___v__PreInstalledAppsEnabled___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUSOFTWAREMicrosoftWindowsCurrentVersionContentDeliveryManager___v__PreInstalledAppsEverEnabled___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUSOFTWAREMicrosoftWindowsCurrentVersionContentDeliveryManager___v__SilentInstalledAppsEnabled___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUSOFTWAREMicrosoftWindowsCurrentVersionContentDeliveryManager___v__SoftLandingEnabled___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUSOFTWAREMicrosoftWindowsCurrentVersionContentDeliveryManager___v__SubscribedContentEnabled___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUSOFTWAREMicrosoftWindowsCurrentVersionContentDeliveryManager___v__FeatureManagementEnabled___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUSOFTWAREMicrosoftWindowsCurrentVersionContentDeliveryManager___v__SystemPaneSuggestionsEnabled___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUSOFTWAREMicrosoftWindowsCurrentVersionContentDeliveryManager___v__RemediationRequired___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_delete__HKCUSOFTWAREMicrosoftWindowsCurrentVersionContentDeliveryManagerSubscriptions___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_delete__HKCUSOFTWAREMicrosoftWindowsCurrentVersionContentDeliveryManagerSuggestedApps___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUSOFTWAREMicrosoftWindowsCurrentVersionExplorerAdvanced___v__ShowSyncProviderNotifications___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUSOFTWAREMicrosoftWindowsCurrentVersionUserProfileEngagement___v__ScoobeSystemSettingEnabled___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUSOFTWAREPoliciesMicrosoftWindowsCloudContent___v__ConfigureWindowsSpotlight___t_REG_DWORD__d__2___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUSOFTWAREPoliciesMicrosoftWindowsCloudContent___v__IncludeEnterpriseSpotlight___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUSOFTWAREPoliciesMicrosoftWindowsCloudContent___v__DisableWindowsSpotlightFeatures___t_REG_DWORD__d__1___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUSOFTWAREPoliciesMicrosoftWindowsCloudContent___v__DisableWindowsSpotlightWindowsWelcomeExperience___t_REG_DWORD__d__1___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUSOFTWAREPoliciesMicrosoftWindowsCloudContent___v__DisableWindowsSpotlightOnActionCenter___t_REG_DWORD__d__1___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUSOFTWAREPoliciesMicrosoftWindowsCloudContent___v__DisableWindowsSpotlightOnSettings___t_REG_DWORD__d__1___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUSOFTWAREPoliciesMicrosoftWindowsCloudContent___v__DisableThirdPartySuggestions___t_REG_DWORD__d__1___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUSOFTWAREPoliciesMicrosoftWindowsCloudContent___v__DisableTailoredExperiencesWithDiagnosticData___t_REG_DWORD__d__1___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREPoliciesMicrosoftWindowsCloudContent___v__DisableThirdPartySuggestions___t_REG_DWORD__d__1___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREPoliciesMicrosoftWindowsCloudContent___v__DisableWindowsConsumerFeatures___t_REG_DWORD__d__1___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.bcdedit__set_quietboot_Yes
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.bcdedit__set_ems_No
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.bcdedit__set_bootems_No
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.bcdedit__set_perfmem_0
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.bcdedit__set_configflags_0
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.bcdedit__set_integrityservices_disable
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.bcdedit__set_bootux_Disabled
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.bcdedit__set_hypervisorlaunchtype_Off
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.bcdedit__set_nx_AlwaysOff
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.bcdedit__set_tpmbootentropy_ForceDisable
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.bcdedit__set_bootlog_no
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.bcdedit__event_off
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.bcdedit__bootdebug_off
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetControlPowerEnergyEstimationTaggedEnergy___v__DisableTaggedEnergyLogging___t_REG_DWORD__d__1___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetControlPowerEnergyEstimationTaggedEnergy___v__TelemetryMaxApplication___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetControlPowerEnergyEstimationTaggedEnergy___v__TelemetryMaxTagPerApplication___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetControlProcessor___v__Cstates___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetControlProcessor___v__Capabilities___t_REG_DWORD__d__516198___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetControlPower___v__HighPerformance___t_REG_DWORD__d__1___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetControlPower___v__HighestPerformance___t_REG_DWORD__d__1___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetControlPower___v__MinimumThrottlePercent___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetControlPower___v__MaximumThrottlePercent___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetControlPower___v__MaximumPerformancePercent___t_REG_DWORD__d__100___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetControlPower___v__Class1InitialUnparkCount___t_REG_DWORD__d__100___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetControlPower___v__InitialUnparkCount___t_REG_DWORD__d__100___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetControlPower___v__MaximumPerformancePercent___t_REG_DWORD__d__100___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetControlPowerPowerThrottling___v__PowerThrottlingOff___t_REG_DWORD__d__1___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREPoliciesMicrosoftWindowsWcmSvcGroupPolicy___v__fDisablePowerManagement___t_REG_DWORD__d__1___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetControlPowerPDCActivatorsDefaultVetoPolicy___v__EA:EnergySaverEngaged___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetControlPowerPDCActivators28VetoPolicy___v__EA:PowerStateDischarging___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetControlPowerPolicySettingsMisc___v__DeviceIdlePolicy___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetControlPowerPolicySettingsProcessor___v__PerfEnergyPreference___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetControlPowerPolicySettingsProcessor___v__PerfEnergyPreference___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetControlPowerPolicySettingsProcessor___v__CPMinCores___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetControlPowerPolicySettingsProcessor___v__CPMaxCores___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetControlPowerPolicySettingsProcessor___v__CPMinCores1___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetControlPowerPolicySettingsProcessor___v__CPMaxCores1___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetControlPowerPolicySettingsProcessor___v__CpLatencyHintUnpark1___t_REG_DWORD__d__100___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetControlPowerPolicySettingsProcessor___v__CPDistribution___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetControlPowerPolicySettingsProcessor___v__CpLatencyHintUnpark___t_REG_DWORD__d__100___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetControlPowerPolicySettingsProcessor___v__MaxPerformance1___t_REG_DWORD__d__100___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetControlPowerPolicySettingsProcessor___v__MaxPerformance___t_REG_DWORD__d__100___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetControlPowerPolicySettingsProcessor___v__CPDistribution1___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetControlPowerPolicySettingsProcessor___v__CPHEADROOM___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetControlPowerPolicySettingsProcessor___v__CPCONCURRENCY___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetServicesIntelPPM___v_Start__t_REG_DWORD__d_3__f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetServicesAmdPPM___v_Start__t_REG_DWORD__d_3__f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKU.DEFAULTControl_PanelAccessibilityHighContrast___v__Flags___t_REG_SZ__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKU.DEFAULTControl_PanelAccessibilityKeyboard_Response___v__Flags___t_REG_SZ__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKU.DEFAULTControl_PanelAccessibilityMouseKeys___v__Flags___t_REG_SZ__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKU.DEFAULTControl_PanelAccessibilitySoundSentry___v__Flags___t_REG_SZ__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKU.DEFAULTControl_PanelAccessibilityStickyKeys___v__Flags___t_REG_SZ__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKU.DEFAULTControl_PanelAccessibilityTimeOut___v__Flags___t_REG_SZ__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKU.DEFAULTControl_PanelAccessibilityToggleKeys___v__Flags___t_REG_SZ__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUControl_PanelAccessibilityMouseKeys___v__Flags___t_REG_SZ__d__186___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUControl_PanelAccessibilityMouseKeys___v__MaximumSpeed___t_REG_SZ__d__40___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUControl_PanelAccessibilityMouseKeys___v__TimeToMaximumSpeed___t_REG_SZ__d__3000___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUSOFTWAREMicrosoftWindowsCurrentVersionThemesPersonalize___v__ColorPrevalence___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUSOFTWAREMicrosoftWindowsCurrentVersionThemesPersonalize___v__EnableTransparency___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUSOFTWAREMicrosoftWindowsCurrentVersionThemesPersonalize___v__AppsUseLightTheme___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUSOFTWAREMicrosoftWindowsCurrentVersionThemesPersonalize___v__SystemUsesLightTheme___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREMicrosoftWindows_NTCurrentVersionImage_File_Execution_Optionscsrss.exePerfOptions___v__CpuPriorityClass___t_REG_DWORD__d__4___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREMicrosoftWindows_NTCurrentVersionImage_File_Execution_Optionscsrss.exePerfOptions___v__IoPriority___t_REG_DWORD__d__3___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUControl_PanelDesktop___v__CursorBlinkRate___t_REG_SZ__d___1___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREMicrosoftWindows_NTCurrentVersionScheduleMaintenance___v__MaintenanceDisabled___t_REG_DWORD__d__1___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetControlSession_ManagerMemory_Management___v__ClearPageFileAtShutdown___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMControlSet001ControlPower___v__HibernateEnabled___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetControlPower___v__HibernateEnabled___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetControlSession_ManagerMemory_Management___v__FeatureSettings___t_REG_DWORD__d__1___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetControlSession_ManagerMemory_Management___v__FeatureSettingsOverride___t_REG_DWORD__d__3___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetControlSession_ManagerMemory_Management___v__FeatureSettingsOverrideMask___t_REG_DWORD__d__3___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetControlSession_ManagerMemory_Management___v__EnableCfg___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMControlSet001ControlSession_ManagerMemory_Management___v__FeatureSettings___t_REG_DWORD__d__1___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMControlSet001ControlSession_ManagerMemory_Management___v__FeatureSettingsOverride___t_REG_DWORD__d__3___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMControlSet001ControlSession_ManagerMemory_Management___v__FeatureSettingsOverrideMask___t_REG_DWORD__d__3___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMControlSet001ControlSession_ManagerMemory_Management___v__EnableCfg___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMControlSet002ControlSession_ManagerMemory_Management___v__FeatureSettings___t_REG_DWORD__d__1___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMControlSet002ControlSession_ManagerMemory_Management___v__FeatureSettingsOverride___t_REG_DWORD__d__3___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMControlSet002ControlSession_ManagerMemory_Management___v__FeatureSettingsOverrideMask___t_REG_DWORD__d__3___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMControlSet002ControlSession_ManagerMemory_Management___v__EnableCfg___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetControlSession_Managerkernel___v__DisableExceptionChainValidation___t_REG_DWORD__d__1___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetControlSession_Managerkernel___v__KernelSEHOPEnabled___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMControlSet001ControlSession_Managerkernel___v__DisableExceptionChainValidation___t_REG_DWORD__d__1___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMControlSet001ControlSession_Managerkernel___v__KernelSEHOPEnabled___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMControlSet002ControlSession_Managerkernel___v__DisableExceptionChainValidation___t_REG_DWORD__d__1___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMControlSet002ControlSession_Managerkernel___v__KernelSEHOPEnabled___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREMicrosoftWindows_NTCurrentVersionMultimediaSystemProfile___v__NetworkThrottlingIndex___t_REG_DWORD__d__4294967295___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREMicrosoftWindows_NTCurrentVersionMultimediaSystemProfile___v__SystemResponsiveness___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREMicrosoftWindows_NTCurrentVersionScheduleMaintenance___v__MaintenanceDisabled___t_REG_DWORD__d__1___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSystemCurrentControlSetControlPower___v__HibernateEnabled___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSystemCurrentControlSetControlSession_ManagerPower___v__HiberbootEnabled___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetControlSession_ManagerPower___v__SleepStudyDisabled___t_REG_DWORD__d__1___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUSOFTWAREMicrosoftWindowsCurrentVersionExplorerAdvanced___v__DisallowShaking___t_REG_DWORD__d__1___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUKeyboard_LayoutToggle___v__Language_Hotkey___t_REG_SZ__d__3___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUKeyboard_LayoutToggle___v__Hotkey___t_REG_SZ__d__3___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUKeyboard_LayoutToggle___v__Layout_Hotkey___t_REG_SZ__d__3___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUSOFTWAREMicrosoftMultimediaAudio___v__UserDuckingPreference___t_REG_DWORD__d__3___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUAppEventsSchemes___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREMicrosoftWindows_NTCurrentVersionPoliciesSystem___v__DelayedDesktopSwitchTimeout___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSystemCurrentControlSetControlSession_ManagerMemory_ManagementPrefetchParameters___v__EnablePrefetcher___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSystemCurrentControlSetControlSession_ManagerMemory_ManagementPrefetchParameters___v__EnableSuperfetch___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREPoliciesMicrosoftWindowsCloudContent___v__DisableWindowsConsumerFeatures___t_REG_DWORD__d__1___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.bcdedit__deletevalue_useplatformclock
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.bcdedit__set_disabledynamictick_yes
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.bcdedit__set_useplatformtick_yes
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.bcdedit__set_globalsettings_custom:16000067_true
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.bcdedit__set_globalsettings_custom:16000069_true
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.bcdedit__set_globalsettings_custom:16000068_true
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.bcdedit__set_bootux_disabled
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.bcdedit__timeout_0
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.bcdedit__deletevalue_usefirmwarepcisettings
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.bcdedit__set_perfmem_0
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.bcdedit__set_hypervisorlaunchtype_Off
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.bcdedit__set_avoidlowmemory_0x8000000
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.bcdedit__set_nolowmem_Yes
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.bcdedit__set_vsmlaunchtype_Off
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.bcdedit__set_vm_No
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetControlProcessor___v__Cstates___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetControlProcessor___v__Capabilities___t_REG_DWORD__d__516198___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetControlPower___v__HighPerformance___t_REG_DWORD__d__1___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetControlPower___v__HighestPerformance___t_REG_DWORD__d__1___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetControlPower___v__MinimumThrottlePercent___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetControlPower___v__MaximumThrottlePercent___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetControlPower___v__MaximumPerformancePercent___t_REG_DWORD__d__100___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetControlPower___v__Class1InitialUnparkCount___t_REG_DWORD__d__100___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetControlPower___v__InitialUnparkCount___t_REG_DWORD__d__100___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetControlPower___v__MaximumPerformancePercent___t_REG_DWORD__d__100___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetControlPowerPowerThrottling___v__PowerThrottlingOff___t_REG_DWORD__d__1___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREPoliciesMicrosoftWindowsWcmSvcGroupPolicy___v__fDisablePowerManagement___t_REG_DWORD__d__1___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetControlPowerPDCActivatorsDefaultVetoPolicy___v__EA:EnergySaverEngaged___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetControlPowerPDCActivators28VetoPolicy___v__EA:PowerStateDischarging___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetControlPowerPolicySettingsMisc___v__DeviceIdlePolicy___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetControlPowerPolicySettingsProcessor___v__PerfEnergyPreference___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetControlPowerPolicySettingsProcessor___v__PerfEnergyPreference___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetControlPowerPolicySettingsProcessor___v__CPMinCores___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetControlPowerPolicySettingsProcessor___v__CPMaxCores___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetControlPowerPolicySettingsProcessor___v__CPMinCores1___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetControlPowerPolicySettingsProcessor___v__CPMaxCores1___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetControlPowerPolicySettingsProcessor___v__CpLatencyHintUnpark1___t_REG_DWORD__d__100___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetControlPowerPolicySettingsProcessor___v__CPDistribution___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetControlPowerPolicySettingsProcessor___v__CpLatencyHintUnpark___t_REG_DWORD__d__100___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetControlPowerPolicySettingsProcessor___v__MaxPerformance1___t_REG_DWORD__d__100___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetControlPowerPolicySettingsProcessor___v__MaxPerformance___t_REG_DWORD__d__100___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetControlPowerPolicySettingsProcessor___v__CPDistribution1___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetControlPowerPolicySettingsProcessor___v__CPHEADROOM___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetControlPowerPolicySettingsProcessor___v__CPCONCURRENCY___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetControlPowerEnergyEstimationTaggedEnergy___v__DisableTaggedEnergyLogging___t_REG_DWORD__d__1___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetControlPowerEnergyEstimationTaggedEnergy___v__TelemetryMaxApplication___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetControlPowerEnergyEstimationTaggedEnergy___v__TelemetryMaxTagPerApplication___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREMicrosoftWindows_NTCurrentVersionImage_File_Execution_Options_audiodg.exePerfOptions___v__CpuPriorityClass___t_REG_DWORD__d__3___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetServicesAFDParameters___v__DoNotHoldNicBuffers___t_REG_DWORD__d__1___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetServicesAFDParameters___v__DefaultReceiveWindow___t_REG_DWORD__d__16384___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetServicesAFDParameters___v__DefaultSendWindow___t_REG_DWORD__d__16384___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetServicesAFDParameters___v__FastCopyReceiveThreshold___t_REG_DWORD__d__16384___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetServicesAFDParameters___v__FastSendDatagramThreshold___t_REG_DWORD__d__16384___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetServicesAFDParameters___v__DynamicSendBufferDisable___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetServicesAFDParameters___v__IgnorePushBitOnReceives___t_REG_DWORD__d__1___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetServicesAFDParameters___v__NonBlockingSendSpecialBuffering___t_REG_DWORD__d__1___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetServicesAFDParameters___v__DisableRawSecurity___t_REG_DWORD__d__1___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetServices_nvlddmkm___v__DisablePreemption___t_REG_DWORD__d__1___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetServices_nvlddmkm___v__DisableCudaContextPreemption___t_REG_DWORD__d__1___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetControlGraphicsDriversScheduler___v__EnablePreemption___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetControlGraphicsDriversScheduler___v__VsyncIdleTimeout___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREMicrosoftWindows_NTCurrentVersionMultimediaSystemProfile___v__NetworkThrottlingIndex___t_REG_DWORD__d__10___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREMicrosoftWindows_NTCurrentVersionMultimediaSystemProfile___v__SystemResponsiveness___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUControl_PanelDesktopWindowMetrics___v__MinAnimate___t_REG_SZ__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUControl_PanelDesktopWindowMetrics___v__MaxAnimate___t_REG_SZ__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUSOFTWAREMicrosoftWindowsCurrentVersionExplorerAdvanced___v__ExtendedUIHoverTime___t_REG_DWORD__d__196608___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUSOFTWAREMicrosoftWindowsCurrentVersionExplorerAdvanced___v__DontPrettyPath___t_REG_DWORD__d__1___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUSOFTWAREMicrosoftWindowsCurrentVersionExplorerAdvanced___v__ListviewShadow___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUSOFTWAREMicrosoftWindowsCurrentVersionExplorerAdvanced___v__TaskbarAnimations___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUSoftwareMicrosoftWindowsDWM___v__EnableAeroPeek___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREPoliciesMicrosoftWindowsDWM___v__DWMWA_TRANSITIONS_FORCEDISABLED___t_REG_DWORD__d__1___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREPoliciesMicrosoftWindowsDWM___v__DisallowAnimations___t_REG_DWORD__d__1___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetControlPowerEnergyEstimationTaggedEnergy___v__DisableTaggedEnergyLogging___t_REG_DWORD__d__1___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetControlPowerEnergyEstimationTaggedEnergy___v__TelemetryMaxApplication___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetControlPowerEnergyEstimationTaggedEnergy___v__TelemetryMaxTagPerApplication___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetControlPowerEnergyEstimationTaggedEnergy___v__EnergyEstimationEnabled___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUControl_PanelDesktop___v__FontSmoothing___t_REG_SZ__d__2___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUControl_PanelDesktop___v__FontSmoothingType___t_REG_DWORD__d__2___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUSOFTWAREMicrosoftWindowsCurrentVersionExplorerMultitaskingViewAllUpView___v__AllUpView___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUSOFTWAREMicrosoftWindowsCurrentVersionExplorerMultitaskingViewAllUpView___v__Remove_TaskView___t_REG_DWORD__d__1___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUSoftwareMicrosoftWindowsCurrentVersionExplorer___v__AltTabSettings___t_REG_DWORD__d__1___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_delete__HKCUSystemGameConfigStoreChildren___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_delete__HKCUSystemGameConfigStoreParents___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUSystemGameConfigStore___v__GameDVR_Enabled___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUSystemGameConfigStore___v__GameDVR_FSEBehaviorMode___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUSystemGameConfigStore___v__GameDVR_HonorUserFSEBehaviorMode___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUSystemGameConfigStore___v__GameDVR_DXGIHonorFSEWindowsCompatible___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUSystemGameConfigStore___v__GameDVR_EFSEFeatureFlags___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREPoliciesMicrosoftWindowsGameDVR___v__AllowGameDVR___t_REG_SZ__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUSoftwareMicrosoftGameBar___v__AllowAutoGameMode___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUSoftwareMicrosoftGameBar___v__AutoGameModeEnabled___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUSoftwareMicrosoftGameBar___v__UseNexusForGameBarEnabled___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUSoftwareMicrosoftWindowsCurrentVersionGameDVR___v__AppCaptureEnabled___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREMicrosoftWindows_NTCurrentVersionMultimediaSystemProfileTasksLow_Latency___v__Affinity___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREMicrosoftWindows_NTCurrentVersionMultimediaSystemProfileTasksLow_Latency___v__Background_Only___t_REG_SZ__d__False___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREMicrosoftWindows_NTCurrentVersionMultimediaSystemProfileTasksLow_Latency___v__BackgroundPriority___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREMicrosoftWindows_NTCurrentVersionMultimediaSystemProfileTasksLow_Latency___v__Clock_Rate___t_REG_DWORD__d__10000___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREMicrosoftWindows_NTCurrentVersionMultimediaSystemProfileTasksLow_Latency___v__GPU_Priority___t_REG_DWORD__d__8___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREMicrosoftWindows_NTCurrentVersionMultimediaSystemProfileTasksLow_Latency___v__Priority___t_REG_DWORD__d__2___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREMicrosoftWindows_NTCurrentVersionMultimediaSystemProfileTasksLow_Latency___v__Scheduling_Category___t_REG_SZ__d__Medium___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREMicrosoftWindows_NTCurrentVersionMultimediaSystemProfileTasksLow_Latency___v__SFIO_Priority___t_REG_SZ__d__High___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREMicrosoftWindows_NTCurrentVersionMultimediaSystemProfileTasksLow_Latency___v__Latency_Sensitive___t_REG_SZ__d__True___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREMicrosoftWindows_NTCurrentVersionMultimediaSystemProfileTasksAudio___v__Affinity___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREMicrosoftWindows_NTCurrentVersionMultimediaSystemProfileTasksAudio___v__Background_Only___t_REG_SZ__d__True___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREMicrosoftWindows_NTCurrentVersionMultimediaSystemProfileTasksAudio___v__Clock_Rate___t_REG_DWORD__d__10000___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREMicrosoftWindows_NTCurrentVersionMultimediaSystemProfileTasksAudio___v__GPU_Priority___t_REG_DWORD__d__1___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREMicrosoftWindows_NTCurrentVersionMultimediaSystemProfileTasksAudio___v__Priority___t_REG_DWORD__d__2___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREMicrosoftWindows_NTCurrentVersionMultimediaSystemProfileTasksAudio___v__Scheduling_Category___t_REG_SZ__d__Medium___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREMicrosoftWindows_NTCurrentVersionMultimediaSystemProfileTasksAudio___v__SFIO_Priority___t_REG_SZ__d__High___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREMicrosoftWindows_NTCurrentVersionMultimediaSystemProfileTasksGames___v__Affinity___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREMicrosoftWindows_NTCurrentVersionMultimediaSystemProfileTasksGames___v__Background_Only___t_REG_SZ__d__False___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREMicrosoftWindows_NTCurrentVersionMultimediaSystemProfileTasksGames___v__BackgroundPriority___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREMicrosoftWindows_NTCurrentVersionMultimediaSystemProfileTasksGames___v__Clock_Rate___t_REG_DWORD__d__10000___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREMicrosoftWindows_NTCurrentVersionMultimediaSystemProfileTasksGames___v__GPU_Priority___t_REG_DWORD__d__18___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREMicrosoftWindows_NTCurrentVersionMultimediaSystemProfileTasksGames___v__Priority___t_REG_DWORD__d__2___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREMicrosoftWindows_NTCurrentVersionMultimediaSystemProfileTasksGames___v__Scheduling_Category___t_REG_SZ__d__High___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREMicrosoftWindows_NTCurrentVersionMultimediaSystemProfileTasksGames___v__SFIO_Priority___t_REG_SZ__d__High___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREPoliciesMicrosoftSQMClientWindows___v__CEIPEnable___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREPoliciesMicrosoftWindowsAppCompat___v__AITEnable___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREPoliciesMicrosoftWindowsAppCompat___v__DisableInventory___t_REG_DWORD__d__1___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREPoliciesMicrosoftWindowsAppCompat___v__DisableUAR___t_REG_DWORD__d__1___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKU.DEFAULTControl_PanelMouse___v__MouseSpeed___t_REG_SZ__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKU.DEFAULTControl_PanelMouse___v__MouseThreshold1___t_REG_SZ__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKU.DEFAULTControl_PanelMouse___v__MouseThreshold2___t_REG_SZ__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKU.DEFAULTControl_PanelMouse___v__MouseWheelRouting___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUControl_PanelCursors___v__ContactVisualization___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUControl_PanelCursors___v__GestureVisualization___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREMicrosoftInputSettingsControllerProcessorCursorSpeed___v__CursorSensitivity___t_REG_DWORD__d__10000___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREMicrosoftInputSettingsControllerProcessorCursorSpeed___v__CursorUpdateInterval___t_REG_DWORD__d__1___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREMicrosoftInputSettingsControllerProcessorCursorSpeed___v__IRRemoteNavigationDelta___t_REG_DWORD__d__1___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREMicrosoftInputSettingsControllerProcessorCursorMagnetism___v__AttractionRectInsetInDIPS___t_REG_DWORD__d__5___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREMicrosoftInputSettingsControllerProcessorCursorMagnetism___v__DistanceThresholdInDIPS___t_REG_DWORD__d__40___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREMicrosoftInputSettingsControllerProcessorCursorMagnetism___v__MagnetismDelayInMilliseconds___t_REG_DWORD__d__50___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREMicrosoftInputSettingsControllerProcessorCursorMagnetism___v__MagnetismUpdateIntervalInMilliseconds___t_REG_DWORD__d__16___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREMicrosoftInputSettingsControllerProcessorCursorMagnetism___v__VelocityInDIPSPerSecond___t_REG_DWORD__d__360___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUControl_PanelMouse___v__MouseHoverTime___t_REG_SZ__d__8___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUControl_PanelMouse___v__MouseSensitivity___t_REG_SZ__d__10___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREMicrosoftWindowsCurrentVersionDriverSearching___v__SearchOrderConfig___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUSOFTWAREMicrosoftWindowsCurrentVersionExplorerAdvancedPeople___v__PeopleBand___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUSOFTWAREMicrosoftInputPersonalizationTrainedDataStore___v__HarvestContacts___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUSOFTWAREMicrosoftWindowsCurrentVersionDiagnosticsDiagTrack___v__ShowedToastAtLevel___t_REG_DWORD__d__1___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUSOFTWAREMicrosoftWindowsCurrentVersionDiagnosticsDiagTrack___v__DiagTrackAuthorization___t_REG_DWORD__d__775___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUSOFTWAREMicrosoftWindowsCurrentVersionDiagnosticsDiagTrack___v__DiagTrackStatus___t_REG_DWORD__d__2___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUSOFTWAREMicrosoftWindowsCurrentVersionDiagnosticsDiagTrack___v__UploadPermissionReceived___t_REG_DWORD__d__1___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSoftwareMicrosoftWindowsCurrentVersionDiagnosticsDiagTrack___v__DiagTrackStatus___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSoftwareMicrosoftWindowsCurrentVersionDiagnosticsDiagTrack___v__TriggerLatency___t_REG_SZ__d__0.072253___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSoftwareMicrosoftWindowsCurrentVersionDiagnosticsDiagTrack___v__HttpRequestLatency___t_REG_SZ__d__1.502418___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSoftwareMicrosoftWindowsCurrentVersionDiagnosticsDiagTrackHeartBeatsDefault___v__EventDroppedDecoding___t_REG_DWORD__d__8___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSoftwareMicrosoftWindowsCurrentVersionDiagnosticsDiagTrackHeartBeatsDefault___v__VortexHttpAttempts___t_REG_DWORD__d__2___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSoftwareMicrosoftWindowsCurrentVersionDiagnosticsDiagTrackHeartBeatsDefault___v__EventsUploaded___t_REG_DWORD__d__10___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSoftwareMicrosoftWindowsCurrentVersionDiagnosticsDiagTrackHeartBeatsDefault___v__EventsPersistedCounter___t_REG_DWORD__d__87___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSoftwarePoliciesMicrosoftWindowsCloudContent___v__DisableWindowsConsumerFeatures___t_REG_DWORD__d__1___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSoftwarePoliciesMicrosoftWindowsLocationAndSensors___v__DisableWindowsLocationProvider___t_REG_DWORD__d__1___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSoftwarePoliciesMicrosoftWindowsLocationAndSensors___v__DisableSensors___t_REG_DWORD__d__1___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSoftwarePoliciesMicrosoftWindowsLocationAndSensors___v__DisableLocationScripting___t_REG_DWORD__d__1___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSoftwarePoliciesMicrosoftWindowsLocationAndSensors___v__DisableLocation___t_REG_DWORD__d__1___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSystemControlSet001ServicesSharedAccessEpoch___v__Epoch___t_REG_DWORD__d__3694___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSoftwareTrendMicroUniClient1700UBM___v__UBMEnable___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSoftwareWOW6432NodeMicrosoftPolicyManagerdefaultWiFiAllowAutoConnectToWiFiSenseHotspots___v__value___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSoftwareWOW6432NodeMicrosoftPolicyManagerdefaultWiFiAllowWiFiHotSpotReporting___v__value___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSoftwareMicrosoftWindowsCurrentVersionDiagnosticsDiagTrackSevilleEventlogManager___v__EventsUploaded___t_REG_DWORD__d__10___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSoftwareMicrosoftWindowsCurrentVersionDiagnosticsDiagTrackSevilleEventlogManager___v__EventsDropped___t_REG_DWORD__d__8___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUSOFTWAREMicrosoftSiufRules___v__NumberOfSIUFInPeriod___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREPoliciesMicrosoftWindowsWindowsUpdateAU___v__NoAutoUpdate___t_REG_DWORD__d__1___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREPoliciesMicrosoftWindowsStore___v__AutoDownload___t_REG_DWORD__d__2___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREMicrosoftWindowsCurrentVersionPoliciesSystem___v__EnableVirtualization___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREMicrosoftWindowsCurrentVersionPoliciesSystem___v__EnableInstallerDetection___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREMicrosoftWindowsCurrentVersionPoliciesSystem___v__PromptOnSecureDesktop___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREMicrosoftWindowsCurrentVersionPoliciesSystem___v__EnableLUA___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREMicrosoftWindowsCurrentVersionPoliciesSystem___v__EnableSecureUIAPaths___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREMicrosoftWindowsCurrentVersionPoliciesSystem___v__ConsentPromptBehaviorAdmin___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREMicrosoftWindowsCurrentVersionPoliciesSystem___v__ValidateAdminCodeSignatures___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREMicrosoftWindowsCurrentVersionPoliciesSystem___v__EnableUIADesktopToggle___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREMicrosoftWindowsCurrentVersionPoliciesSystem___v__ConsentPromptBehaviorUser___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREMicrosoftWindowsCurrentVersionPoliciesSystem___v__FilterAdministratorToken___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUSOFTWAREMicrosoftWindowsCurrentVersionNotificationsSettings___v__NOC_GLOBAL_SETTING_ALLOW_TOASTS_ABOVE_LOCK___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUSOFTWAREMicrosoftWindowsCurrentVersionNotificationsSettings___v__NOC_GLOBAL_SETTING_ALLOW_CRITICAL_TOASTS_ABOVE_LOCK___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUSOFTWAREMicrosoftWindowsCurrentVersionNotificationsSettings___v__NOC_GLOBAL_SETTING_TOASTS_ENABLED___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREMicrosoftWindowsCurrentVersionCapabilityAccessManagerConsentStoreuserNotificationListener___v__Value___t_REG_SZ__d__Deny___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREMicrosoftWindowsCurrentVersionCapabilityAccessManagerConsentStoreuserAccountInformation___v__Value___t_REG_SZ__d__Deny___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREMicrosoftWindowsCurrentVersionCapabilityAccessManagerConsentStorecontacts___v__Value___t_REG_SZ__d__Deny___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREMicrosoftWindowsCurrentVersionCapabilityAccessManagerConsentStorephoneCall___v__Value___t_REG_SZ__d__Deny___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREMicrosoftWindowsCurrentVersionCapabilityAccessManagerConsentStore_appointments___v__Value___t_REG_SZ__d__Deny___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREMicrosoftWindowsCurrentVersionCapabilityAccessManagerConsentStorephoneCallHistory___v__Value___t_REG_SZ__d__Deny___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREMicrosoftWindowsCurrentVersionCapabilityAccessManagerConsentStoreemail___v__Value___t_REG_SZ__d__Deny___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREMicrosoftWindowsCurrentVersionCapabilityAccessManagerConsentStoreuserDataTasks___v__Value___t_REG_SZ__d__Deny___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREPoliciesMicrosoftWindowsExplorer___v__DisableNotificationCenter___t_REG_DWORD__d__1___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREMicrosoftWindowsCurrentVersionCapabilityAccessManagerConsentStorechat___v__Value___t_REG_SZ__d__Deny___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUSOFTWAREPoliciesMicrosoftWindowsExplorer___v__DisableNotificationCenter___t_REG_DWORD__d__1___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREMicrosoftWindowsCurrentVersionCapabilityAccessManagerConsentStore_radios___v__Value___t_REG_SZ__d__Deny___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREMicrosoftWindowsCurrentVersionCapabilityAccessManagerConsentStore_appDiagnostics___v__Value___t_REG_SZ__d__Deny___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREMicrosoftWindowsCurrentVersionCapabilityAccessManagerConsentStoredocumentsLibrary___v__Value___t_REG_SZ__d__Deny___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetControlRemote_Assistance___v__fAllowToGetHelp___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREMicrosoftWindowsCurrentVersionCapabilityAccessManagerConsentStorepicturesLibrary___v__Value___t_REG_SZ__d__Deny___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetServicesTcpip6Parameters___v__DisabledComponents___t_REG_DWORD__d__32___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREMicrosoftWindowsCurrentVersionCapabilityAccessManagerConsentStore_videosLibrary___v__Value___t_REG_SZ__d__Deny___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREMicrosoftWindowsCurrentVersionCapabilityAccessManagerConsentStore_broadFileSystemAccess___v__Value___t_REG_SZ__d__Deny___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUControl_PanelInternationalUser_Profile___v__HttpAcceptLanguageOptOut___t_REG_DWORD__d__1___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUSOFTWAREMicrosoftSpeech_OneCoreSettingsOnlineSpeechPrivacy___v__HasAccepted___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREPoliciesMicrosoftWindowsWindows_Search___v__AllowCortana___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREPoliciesMicrosoftWindowsWindows_Search___v__BingSearchEnabled___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREPoliciesMicrosoftWindowsWindows_Search___v__CortanaConsent___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREPoliciesMicrosoftWindowsWindows_Search___v__BackgroundAppGlobalToggle___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUSoftwareMicrosoftWindowsCurrentVersionAdvertisingInfo___v__Enabled___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREPoliciesMicrosoftWindowsSystem___v__EnableActivityFeed___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREPoliciesMicrosoftWindowsSystem___v__EnableSmartScreen___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUSoftwareMicrosoftWindowsCurrentVersionContentDeliveryManager___v__SilentInstalledAppsEnabled___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUSoftwareMicrosoftWindowsCurrentVersionContentDeliveryManager___v__SilentInstalledAppsEnabled___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUSOFTWAREMicrosoftWindowsCurrentVersionContentDeliveryManager___v__SystemPaneSuggestionsEnabled___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUSOFTWAREMicrosoftWindowsCurrentVersionExplorerAdvanced___v__ShowSyncProviderNotifications___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUSOFTWAREMicrosoftWindowsCurrentVersionContentDeliveryManager___v__SoftLandingEnabled___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUSOFTWAREMicrosoftWindowsCurrentVersionContentDeliveryManager___v__RotatingLockScreenEnabled___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUSOFTWAREMicrosoftWindowsCurrentVersionContentDeliveryManager___v__RotatingLockScreenOverlayEnabled___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREMicrosoftWindowsCurrentVersionPoliciesDataCollection___v__AllowTelemetry___t_REG_DWORD__d__1___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREMicrosoftWindowsCurrentVersionPoliciesDataCollection___v__MaxTelemetryAllowed___t_REG_DWORD__d__1___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUSOFTWAREMicrosoftWindowsCurrentVersionContentDeliveryManager___v__SubscribedContent_310093Enabled___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREMicrosoftPolicyManagerdefaultApplicationManagementAllowGameDVR___v__value___t_REG_SZ__d__00000000___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUSOFTWAREMicrosoftWindows_NTCurrentVersionAccessibilityTemp___v__narrator___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREMicrosoftPolicyManagerdefaultApplicationManagementAllowSharedUserAppData___v__value___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUSOFTWAREMicrosoftTabletTip1.7___v__EnableAutocorrection___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUSOFTWAREMicrosoftTabletTip1.7___v__EnableSpellchecking___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUSOFTWAREMicrosoftTabletTip1.7___v__EnableTextPrediction___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUSOFTWAREMicrosoftTabletTip1.7___v__EnablePredictionSpaceInsertion___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUSOFTWAREMicrosoftTabletTip1.7___v__EnableDoubleTapSpace___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUSOFTWAREMicrosoftTabletTip1.7___v__EnableInkingWithTouch___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUSOFTWAREMicrosoftWindowsCurrentVersionPenWorkspace___v__PenWorkspaceAppSuggestionsEnabled___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUSOFTWAREMicrosoftWindowsCurrentVersionExplorerAutoplayHandlers___v__DisableAutoplay___t_REG_DWORD__d__1___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUSOFTWAREMicrosoftNarratorNoRoam___v__RunningState___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUSOFTWAREMicrosoftWindowsCurrentVersionAppBroadcastGlobalSettings___v__AudioCaptureEnabled___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUSOFTWAREMicrosoftWindowsCurrentVersionAppBroadcastGlobalSettings___v__MicrophoneCaptureEnabledByDefault___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUSOFTWAREMicrosoftWindowsCurrentVersionAppBroadcastGlobalSettings___v__CursorCaptureEnabled___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUSOFTWAREMicrosoftWindowsCurrentVersionAppBroadcastGlobalSettings___v__CameraCaptureEnabledByDefault___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUSOFTWAREMicrosoftInputSettings___v__InsightsEnabled___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREMicrosoftPolicyManagerdefaultApplicationManagementAllowStore___v__value___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREMicrosoftWindows_NTCurrentVersionScheduleMaintenance___v__MaintenanceDisabled___t_REG_DWORD__d__1___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetControlPower___v__HibernateEnabled___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetControlSession_ManagerPower___v__HiberbootEnabled___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetControlPowerPowerThrottling___v__PowerThrottlingOff___t_REG_DWORD__d__1___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUControl_PanelAccessibilityMouseKeys___v__Flags___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUControl_PanelAccessibilityStickyKeys___v__Flags___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUControl_PanelAccessibilityKeyboard_Response___v__Flags___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUControl_PanelAccessibilityToggleKeys___v__Flags___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetControlPowerPowerSettings54533251_82be_4824_96c1_47b60b740d00943c8cb6_6f93_4227_ad87_e9a3feec08d1___v__Attributes___t_REG_SZ__d__2___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCRAllFilesystemObjects_shellexContextMenuHandlersCopy_To___ve__t_REG_SZ__d__C2FBB630_2971_11D1_A18C_00C04FD75D13___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCRAllFilesystemObjects_shellexContextMenuHandlersMove_To___ve__t_REG_SZ__d__C2FBB631_2971_11D1_A18C_00C04FD75D13___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUSoftwareMicrosoftWindowsCurrentVersionPoliciesExplorer___v__NoLowDiskSpaceChecks___t_REG_DWORD__d__1___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUSoftwareMicrosoftWindowsCurrentVersionPoliciesExplorer___v__LinkResolveIgnoreLinkInfo___t_REG_DWORD__d__1___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUSoftwareMicrosoftWindowsCurrentVersionPoliciesExplorer___v__NoResolveSearch___t_REG_DWORD__d__1___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUSoftwareMicrosoftWindowsCurrentVersionPoliciesExplorer___v__NoResolveTrack___t_REG_DWORD__d__1___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUSoftwareMicrosoftWindowsCurrentVersionPoliciesExplorer___v__NoInternetOpenWith___t_REG_DWORD__d__1___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUSOFTWAREMicrosoftWindowsCurrentVersionExplorer___v__EnableAutoTray___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetServicesTcpipParameters___v__DisableTaskOffload___t_REG_DWORD__d__1___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetServicesTcpipParameters___v__DelayedAckFrequency___t_REG_DWORD__d__1___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetServicesTcpipParameters___v__DelayedAckTicks___t_REG_DWORD__d__1___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetServicesTcpipParameters___v__CongestionAlgorithm___t_REG_DWORD__d__1___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetServicesTcpipParameters___v__MultihopSets___t_REG_DWORD__d__15___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetServicesTcpipParameters___v__FastCopyReceiveThreshold___t_REG_DWORD__d__16384___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetServicesTcpipParameters___v__FastSendDatagramThreshold___t_REG_DWORD__d__16384___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetServicesTcpipParameters___v__TcpNoDelay___t_REG_DWORD__d__1___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetServicesTcpipParameters___v__TCPDelAckTicks___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetServicesTcpipParameters___v__TcpAckFrequency___t_REG_DWORD__d__1___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetServicesTcpipParameters___v__MaxFreeTcbs___t_REG_DWORD__d__415030___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetServicesTcpipParameters___v__MaxUserPort___t_REG_DWORD__d__415028___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetServicesTcpipParameters___v__DefaultTTL___t_REG_DWORD__d__64___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREMicrosoftWindowsCurrentVersionDeliveryOptimizationSettings___v__DownloadMode___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREPoliciesMicrosoftWindowsOneDrive___v__DisableFileSyncNGSC___t_REG_DWORD__d__1___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUSoftwareMicrosoftWindowsCurrentVersionExplorerAdvanced___v__DisallowShaking___t_REG_DWORD__d__1___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUSoftwareMicrosoftWindowsCurrentVersionExplorerAdvanced___v__EnableBalloonTips___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUSOFTWAREMicrosoftWindowsCurrentVersionExplorerSerialize___v__StartupDelayInMSec___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetServicesTcpipServiceProvider___v__LocalPriority___t_REG_DWORD__d__4___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetServicesTcpipServiceProvider___v__HostsPriority___t_REG_DWORD__d__5___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetServicesTcpipServiceProvider___v__DnsPriority___t_REG_DWORD__d__6___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetServicesTcpipServiceProvider___v__NetbtPriority___t_REG_DWORD__d__7___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREPoliciesMicrosoftWindowsPsched___v__NonBestEffortLimit___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetServicesPsched___v__NonBestEffortLimit___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUSOFTWAREPoliciesMicrosoftWindowsCurrentVersionPushNotifications___v__NoTileApplicationNotification___t_REG_DWORD__d__1___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUSOFTWAREPoliciesMicrosoftWindowsCurrentVersionPushNotifications___v__LockScreenToastEnabled___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUSOFTWAREPoliciesMicrosoftWindowsCurrentVersionPushNotifications___v__ToastEnabled___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREMicrosoftWindows_Photo_ViewerCapabilitiesFileAssociations___v__.tif___t_REG_SZ__d__PhotoViewer.FileAssoc.Tiff___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREMicrosoftWindows_Photo_ViewerCapabilitiesFileAssociations___v__.tiff___t_REG_SZ__d__PhotoViewer.FileAssoc.Tiff___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREMicrosoftWindows_Photo_ViewerCapabilitiesFileAssociations___v__.bmp___t_REG_SZ__d__PhotoViewer.FileAssoc.Tiff___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREMicrosoftWindows_Photo_ViewerCapabilitiesFileAssociations___v__.dib___t_REG_SZ__d__PhotoViewer.FileAssoc.Tiff___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREMicrosoftWindows_Photo_ViewerCapabilitiesFileAssociations___v__.gif___t_REG_SZ__d__PhotoViewer.FileAssoc.Tiff___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREMicrosoftWindows_Photo_ViewerCapabilitiesFileAssociations___v__.jfif___t_REG_SZ__d__PhotoViewer.FileAssoc.Tiff___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREMicrosoftWindows_Photo_ViewerCapabilitiesFileAssociations___v__.jpe___t_REG_SZ__d__PhotoViewer.FileAssoc.Tiff___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREMicrosoftWindows_Photo_ViewerCapabilitiesFileAssociations___v__.jpeg___t_REG_SZ__d__PhotoViewer.FileAssoc.Tiff___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREMicrosoftWindows_Photo_ViewerCapabilitiesFileAssociations___v__.jpg___t_REG_SZ__d__PhotoViewer.FileAssoc.Tiff___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREMicrosoftWindows_Photo_ViewerCapabilitiesFileAssociations___v__.jxr___t_REG_SZ__d__PhotoViewer.FileAssoc.Tiff___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREMicrosoftWindows_Photo_ViewerCapabilitiesFileAssociations___v__.png___t_REG_SZ__d__PhotoViewer.FileAssoc.Tiff___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUControl_PanelDesktop___v__MenuShowDelay___t_REG_SZ__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUControl_PanelDesktop___v__AutoEndTasks___t_REG_SZ__d__1___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUControl_PanelDesktop___v__HungAppTimeout___t_REG_SZ__d__1000___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUControl_PanelDesktop___v__WaitToKillAppTimeout___t_REG_SZ__d__2000___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUControl_PanelDesktop___v__LowLevelHooksTimeout___t_REG_SZ__d__1000___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetControlSession_ManagerMemory_ManagementPrefetchParameters___v__EnablePrefetcher___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetControlSession_ManagerMemory_ManagementPrefetchParameters___v__EnableSuperfetch___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetControlSession_ManagerMemory_ManagementPrefetchParameters___v__SfTracingState___t_REG_DWORD__d__1___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREMicrosoftWindowsCurrentVersionWINEVTChannelsMicrosoft_Windows_SuperfetchMain___v__Enabled___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREMicrosoftWindowsCurrentVersionWINEVTChannelsMicrosoft_Windows_SuperfetchPfApLog___v__Enabled___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREMicrosoftWindowsCurrentVersionWINEVTChannelsMicrosoft_Windows_SuperfetchStoreLog___v__Enabled___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSoftwarePoliciesMicrosoftWindowsPsched___v__NonBestEffortLimit___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetServicesPsched___v__NonBestEffortLimit___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREMicrosoftWindowsCurrentVersionExplorerVolumeCachesTemporary_Files___v__LastAccess___t_REG_DWORD__d__7___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetControl___v__WaitToKillServiceTimeout___t_REG_SZ__d__2000___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREMicrosoftMSMQParametersSecurity___v__SecureDSCommunication___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_delete__HKLMSOFTWAREPoliciesMicrosoftWindowsWindowsUpdate___v__DeferUpgrade___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREPoliciesMicrosoftWindowsWindowsUpdate___v__DoNotConnectToWindowsUpdateInternetLocations___t_REG_DWORD__d__1___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUSOFTWAREMicrosoftWindowsCurrentVersionExplorerAdvanced___v__Start_TrackProgs___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCR_shell_runas___ve__t_REG_SZ__d__Take_ownership___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCR_shell_runas___v__HasLUAShield___t_REG_SZ__d_____f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCR_shell_runas___v__NoWorkingDirectory___t_REG_SZ__d_____f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUSOFTWAREMicrosoftWindowsCurrentVersionSettingSyncGroupsLanguage___v__SettingsVersion___t_REG_DWORD__d__3___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUSOFTWAREMicrosoftWindowsCurrentVersionSettingSyncGroupsLanguage___v__Enabled___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUSOFTWAREMicrosoftWindowsCurrentVersionBackgroundAccessApplications___v__GlobalUserDisabled___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUSOFTWAREMicrosoftWindowsCurrentVersionThemesPersonalize___v__EnableTransparency___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUSOFTWAREMicrosoftWindowsCurrentVersionCDP___v__RomeSdkChannelUserAuthzPolicy___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUSOFTWAREMicrosoftWindowsCurrentVersionCDP___v__CdpSessionUserAuthzPolicy___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUSOFTWAREMicrosoftWindowsCurrentVersionExplorerAdvanced___v__HideFileExt___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREPoliciesMicrosoftInputPersonalization___v__RestrictImplicitInkCollection___t_REG_DWORD__d__1___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREPoliciesMicrosoftInputPersonalization___v__RestrictImplicitTextCollection___t_REG_DWORD__d__1___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREPoliciesMicrosoftInputPersonalization___v__AllowInputPersonalization___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUSOFTWAREPoliciesMicrosoftInputPersonalization___v__RestrictImplicitInkCollection___t_REG_DWORD__d__1___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUSOFTWAREPoliciesMicrosoftInputPersonalization___v__RestrictImplicitTextCollection___t_REG_DWORD__d__1___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUSOFTWAREMicrosoftInputPersonalization___v__RestrictImplicitInkCollection___t_REG_DWORD__d__1___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUSOFTWAREMicrosoftInputPersonalization___v__RestrictImplicitTextCollection___t_REG_DWORD__d__1___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetControlSession_ManagerMemory_Management___v__FeatureSettingsOverride___t_REG_DWORD__d__3___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetControlSession_ManagerMemory_Management___v__FeatureSettingsOverrideMask___t_REG_DWORD__d__3___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetControlSession_ManagerMemory_Management___v__LargeSystemCache___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetControlSession_ManagerMemory_Management___v__IoPageLockLimit___t_REG_DWORD__d__983040___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREMicrosoftWindowsCurrentVersionDriverSearching___v__SearchOrderConfig___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREMicrosoftWindowsCurrentVersionPoliciesSystem___v__EnableLUA___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREMicrosoftWindowsCurrentVersionPoliciesSystem___v__DisableAutomaticRestartSignOn___t_REG_DWORD__d__1___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREPoliciesMicrosoftWindowsCloudContent___v__DisableWindowsConsumerFeatures___t_REG_DWORD__d__1___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREMicrosoftWindows_Photo_ViewerCapabilitiesFileAssociations___v__.tif___t_REG_SZ__d__PhotoViewer.FileAssoc.Tiff___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREMicrosoftWindows_Photo_ViewerCapabilitiesFileAssociations___v__.tiff___t_REG_SZ__d__PhotoViewer.FileAssoc.Tiff___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREMicrosoftWindows_Photo_ViewerCapabilitiesFileAssociations___v__.bmp___t_REG_SZ__d__PhotoViewer.FileAssoc.Tiff___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREMicrosoftWindows_Photo_ViewerCapabilitiesFileAssociations___v__.dib___t_REG_SZ__d__PhotoViewer.FileAssoc.Tiff___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREMicrosoftWindows_Photo_ViewerCapabilitiesFileAssociations___v__.gif___t_REG_SZ__d__PhotoViewer.FileAssoc.Tiff___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREMicrosoftWindows_Photo_ViewerCapabilitiesFileAssociations___v__.jfif___t_REG_SZ__d__PhotoViewer.FileAssoc.Tiff___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREMicrosoftWindows_Photo_ViewerCapabilitiesFileAssociations___v__.jpe___t_REG_SZ__d__PhotoViewer.FileAssoc.Tiff___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREMicrosoftWindows_Photo_ViewerCapabilitiesFileAssociations___v__.jpeg___t_REG_SZ__d__PhotoViewer.FileAssoc.Tiff___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREMicrosoftWindows_Photo_ViewerCapabilitiesFileAssociations___v__.jpg___t_REG_SZ__d__PhotoViewer.FileAssoc.Tiff___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREMicrosoftWindows_Photo_ViewerCapabilitiesFileAssociations___v__.jxr___t_REG_SZ__d__PhotoViewer.FileAssoc.Tiff___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREMicrosoftWindows_Photo_ViewerCapabilitiesFileAssociations___v__.png___t_REG_SZ__d__PhotoViewer.FileAssoc.Tiff___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREMicrosoftWindows_NTCurrentVersionScheduleMaintenance___v__MaintenanceDisabled___t_REG_DWORD__d__1___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetControlSession_ManagerPower___v__HiberbootEnabled___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetControlPowerPowerThrottling___v__PowerThrottlingOff___t_REG_DWORD__d__1___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetControlSession_ManagerMemory_Management___v__FeatureSettingsOverride___t_REG_DWORD__d__3___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetControlSession_ManagerMemory_Management___v__FeatureSettingsOverrideMask___t_REG_DWORD__d__3___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetControlPriorityControl___v__Win32PrioritySeparation___t_REG_DWORD__d__38___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUSoftwareMicrosoftWindowsCurrentVersionExplorerVisualEffects___v__VisualFXSetting___t_REG_DWORD__d__2___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUSystemGameConfigStore___v__GameDVR_Enabled___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUSystemGameConfigStore___v__GameDVR_FSEBehaviorMode___t_REG_DWORD__d__2___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUSystemGameConfigStore___v__GameDVR_HonorUserFSEBehaviorMode___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUSystemGameConfigStore___v__GameDVR_DXGIHonorFSEWindowsCompatible___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUSystemGameConfigStore___v__GameDVR_EFSEFeatureFlags___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREMicrosoftPolicyManagerdefaultApplicationManagementAllowGameDVR___v__value___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUControl_PanelDesktop___v__MenuShowDelay___t_REG_SZ__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.bcdedit__set_allowedinmemorysettings_0x0
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.bcdedit__set_isolatedcontext_No
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_add__HKLMSOFTWAREMicrosoftWindows_NTCurrentVersionWUDF___v__LogEnable___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_add__HKLMSOFTWAREMicrosoftWindows_NTCurrentVersionWUDF___v__LogLevel___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_add__HKLMSOFTWAREPoliciesMicrosoftPeernet___v__Disabled___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_add__HKLMSOFTWAREPoliciesMicrosoftInternet_ExplorerMain___v__DEPOff___t_REG_DWORD__d__1___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_add__HKCUSOFTWAREMicrosoftWindowsCurrentVersionAdvertisingInfo___v__Enabled___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_add__HKCUSOFTWAREMicrosoftWindowsCurrentVersionContentDeliveryManager___v__SubscribedContent_310093Enabled___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_add__HKCUSOFTWAREMicrosoftWindowsCurrentVersionContentDeliveryManager___v__SubscribedContent_338389Enabled___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_add__HKCUSOFTWAREMicrosoftWindowsCurrentVersionContentDeliveryManager___v__SubscribedContent_338393Enabled___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_add__HKCUSOFTWAREMicrosoftWindowsCurrentVersionContentDeliveryManager___v__SubscribedContent_353694Enabled___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_add__HKCUSOFTWAREMicrosoftWindowsCurrentVersionContentDeliveryManager___v__SubscribedContent_353696Enabled___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_add__HKCUSOFTWAREMicrosoftWindowsCurrentVersionContentDeliveryManager___v__SilentInstalledAppsEnabled___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_add__HKCUSOFTWAREMicrosoftWindowsCurrentVersionUserProfileEngagement___v__ScoobeSystemSettingEnabled___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_add__HKCUSOFTWAREMicrosoftWindowsCurrentVersionPrivacy___v__TailoredExperiencesWithDiagnosticDataEnabled___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_add__HKLMSOFTWAREPoliciesMicrosoftWindowsAdvertisingInfo___v__DisabledByGroupPolicy___t_REG_DWORD__d__1___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_add__HKLMSOFTWAREPoliciesMicrosoftWindows_safercodeidentifiers___v__authenticodeenabled___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_add__HKLMSystemCurrentControlSetControlWMIAutoLoggerAutoLogger_Diagtrack_Listener___v__Start___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_add__HKLMSystemCurrentControlSetControlWMIAutoLoggerSQMLogger___v__Start___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_add__HKLMSOFTWAREMicrosoftWindowsCurrentVersionPoliciesDataCollection___v__AllowTelemetry___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_add__HKLMSOFTWAREPoliciesMicrosoftWindowsDataCollection___v__AllowTelemetry___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_add__HKLMSOFTWAREWow6432NodeMicrosoftWindowsCurrentVersionPoliciesDataCollection___v__AllowTelemetry___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_add__HKCUSOFTWAREMicrosoftGameBar___v__ShowStartupPanel___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_add__HKCUSOFTWAREMicrosoftGameBar___v__GamePanelStartupTipIndex___t_REG_DWORD__d__3___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_add__HKCUSOFTWAREMicrosoftGameBar___v__AllowAutoGameMode___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_add__HKCUSOFTWAREMicrosoftGameBar___v__AutoGameModeEnabled___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_add__HKCUSOFTWAREMicrosoftGameBar___v__UseNexusForGameBarEnabled___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_add__HKCUSystemGameConfigStore___v__GameDVR_Enabled___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_add__HKCUSystemGameConfigStore___v__GameDVR_FSEBehaviorMode___t_REG_DWORD__d__2___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_add__HKCUSystemGameConfigStore___v__GameDVR_FSEBehavior___t_REG_DWORD__d__2___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_add__HKCUSystemGameConfigStore___v__GameDVR_HonorUserFSEBehaviorMode___t_REG_DWORD__d__1___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_add__HKCUSystemGameConfigStore___v__GameDVR_DXGIHonorFSEWindowsCompatible___t_REG_DWORD__d__1___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_add__HKCUSystemGameConfigStore___v__GameDVR_EFSEFeatureFlags___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_add__HKCUSystemGameConfigStore___v__GameDVR_DSEBehavior___t_REG_DWORD__d__2___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_add__HKLMSOFTWAREMicrosoftPolicyManagerdefaultApplicationManagementAllowGameDVR___v__value___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_add__HKLMSOFTWAREPoliciesMicrosoftWindowsGameDVR___v__AllowGameDVR___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_add__HKCUSOFTWAREMicrosoftWindowsCurrentVersionGameDVR___v__AppCaptureEnabled___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_add__HKU.DEFAULTSOFTWAREMicrosoftGameBar___v__AutoGameModeEnabled___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_delete__HKCUSystemGameConfigStoreChildren___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_delete__HKCUSystemGameConfigStoreParents___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_add__HKLMSystemCurrentControlSetControlPowerPowerThrottling___v__PowerThrottlingOff___t_REG_DWORD__d__1___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_add__HKLMSOFTWAREPoliciesMicrosoftSQMClientWindows___v__CEIPEnable___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_add__HKLMSOFTWAREPoliciesMicrosoftSQMClient___v__CorporateSQMURL___t_REG_SZ__d__0.0.0.0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_add__HKLMSOFTWAREPoliciesMicrosoftBiometrics___v__Enabled___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_add__HKLMSYSTEMCurrentControlSetControlWMIAutologgerAppModel___v__Start___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_add__HKLMSYSTEMCurrentControlSetControlWMIAutologgerCellcore___v__Start___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_add__HKLMSYSTEMCurrentControlSetControlWMIAutologgerCircular_Kernel_Context_Logger___v__Start___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_add__HKLMSYSTEMCurrentControlSetControlWMIAutologgerCloudExperienceHostOobe___v__Start___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_add__HKLMSYSTEMCurrentControlSetControlWMIAutologgerDataMarket___v__Start___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_add__HKLMSYSTEMCurrentControlSetControlWMIAutologgerDefenderApiLogger___v__Start___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_add__HKLMSYSTEMCurrentControlSetControlWMIAutologgerDefenderAuditLogger___v__Start___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_add__HKLMSYSTEMCurrentControlSetControlWMIAutologgerDiagLog___v__Start___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_add__HKLMSYSTEMCurrentControlSetControlWMIAutologgerHolographicDevice___v__Start___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_add__HKLMSYSTEMCurrentControlSetControlWMIAutologgericlsClient___v__Start___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_add__HKLMSYSTEMCurrentControlSetControlWMIAutologgericlsProxy___v__Start___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_add__HKLMSYSTEMCurrentControlSetControlWMIAutologgerLwtNetLog___v__Start___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_add__HKLMSYSTEMCurrentControlSetControlWMIAutologgerMellanox_Kernel___v__Start___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_add__HKLMSYSTEMCurrentControlSetControlWMIAutologgerMicrosoft_Windows_AssignedAccess_Trace___v__Start___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_add__HKLMSYSTEMCurrentControlSetControlWMIAutologgerMicrosoft_Windows_Setup___v__Start___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_add__HKLMSYSTEMCurrentControlSetControlWMIAutologgerNBSMBLOGGER___v__Start___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_add__HKLMSYSTEMCurrentControlSetControlWMIAutologgerPEAuthLog___v__Start___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_add__HKLMSYSTEMCurrentControlSetControlWMIAutologgerRdrLog___v__Start___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_add__HKLMSYSTEMCurrentControlSetControlWMIAutologgerReadyBoot___v__Start___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_add__HKLMSYSTEMCurrentControlSetControlWMIAutologgerSetupPlatform___v__Start___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_add__HKLMSYSTEMCurrentControlSetControlWMIAutologgerSetupPlatformTel___v__Start___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_add__HKLMSYSTEMCurrentControlSetControlWMIAutologgerSocketHeciServer___v__Start___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_add__HKLMSYSTEMCurrentControlSetControlWMIAutologgerSpoolerLogger___v__Start___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_add__HKLMSYSTEMCurrentControlSetControlWMIAutologgerSQMLogger___v__Start___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_add__HKLMSYSTEMCurrentControlSetControlWMIAutologgerTCPIPLOGGER___v__Start___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_add__HKLMSYSTEMCurrentControlSetControlWMIAutologgerTileStore___v__Start___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_add__HKLMSYSTEMCurrentControlSetControlWMIAutologgerTpm___v__Start___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetControlSession_ManagerMemory_Management___v__DisablePageCombining___t_REG_DWORD__d__1___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMControlSet001ServicesintelppmParameters___v__DmaRemappingCompatible___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMControlSet001ServicespciParameters___v__DmaRemappingCompatible___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMControlSet001ServiceskbdclassParameters___v__DmaRemappingCompatible___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMControlSet001ServiceskbdhidParameters___v__DmaRemappingCompatible___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMControlSet001ServicesNdisWanParameters___v__DmaRemappingCompatible___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMControlSet001ServicesEhStorClassParameters___v__DmaRemappingCompatible___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMControlSet001ServicesHDAudBusParameters___v__DmaRemappingCompatible___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMControlSet001ServicespartmgrParameters___v__DmaRemappingCompatible___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMControlSet001ServicesACPIParameters___v__DmaRemappingCompatible___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMControlSet001Services_acpipagrParameters___v__DmaRemappingCompatible___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMControlSet001ServicesBasicDisplayParameters___v__DmaRemappingCompatible___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMControlSet001ServicesBasicRenderParameters___v__DmaRemappingCompatible___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMControlSet001Servicesdc1_controllerParameters___v__DmaRemappingCompatible___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMControlSet001ServicesintelpepParameters___v__DmaRemappingCompatible___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMControlSet001ServicesMEIx64Parameters___v__DmaRemappingCompatible___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMControlSet001ServicesmonitorParameters___v__DmaRemappingCompatible___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMControlSet001ServicesmouhidParameters___v__DmaRemappingCompatible___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMControlSet001ServicesmsisadrvParameters___v__DmaRemappingCompatible___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMControlSet001ServicesNdisVirtualBusParameters___v__DmaRemappingCompatible___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMControlSet001ServicesNvModuleTrackerParameters___v__DmaRemappingCompatible___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMControlSet001Services_storahciParameters___v__DmaRemappingCompatible___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMControlSet001ServicesumbusParameters___v__DmaRemappingCompatible___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMControlSet001ServicesUSBHUB3Parameters___v__DmaRemappingCompatible___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMControlSet001ServicesUSBXHCIParameters___v__DmaRemappingCompatible___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMControlSet001Services_vdrvrootParameters___v__DmaRemappingCompatible___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMControlSet001Services_vwifibusParameters___v__DmaRemappingCompatible___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMControlSet001ServicesWpdUpFltrParameters___v__DmaRemappingCompatible___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMControlSet001ServicesWUDFWpdFsParameters___v__DmaRemappingCompatible___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMControlSet001ServicesxinputhidParameters___v__DmaRemappingCompatible___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUSoftwareMicrosoftGameBar___v__ShowStartupPanel___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUSoftwareMicrosoftGameBar___v__GamePanelStartupTipIndex___t_REG_DWORD__d__3___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUSoftwareMicrosoftGameBar___v__AllowAutoGameMode___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUSoftwareMicrosoftGameBar___v__AutoGameModeEnabled___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUSoftwareMicrosoftGameBar___v__UseNexusForGameBarEnabled___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUSystemGameConfigStore___v__GameDVR_Enabled___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUSystemGameConfigStore___v__GameDVR_FSEBehaviorMode___t_REG_DWORD__d__2___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUSystemGameConfigStore___v__GameDVR_FSEBehavior___t_REG_DWORD__d__2___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUSystemGameConfigStore___v__GameDVR_HonorUserFSEBehaviorMode___t_REG_DWORD__d__1___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUSystemGameConfigStore___v__GameDVR_DXGIHonorFSEWindowsCompatible___t_REG_DWORD__d__1___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUSystemGameConfigStore___v__GameDVR_EFSEFeatureFlags___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUSystemGameConfigStore___v__GameDVR_DSEBehavior___t_REG_DWORD__d__2___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREPoliciesMicrosoftWindowsGameDVR___v__AllowGameDVR___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUSOFTWAREMicrosoftWindowsCurrentVersionGameDVR___v__AppCaptureEnabled___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetControlPower___v__LowLatencyScalingPercentage___t_REG_DWORD__d__100___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetControlSession_Manager___v__DisablePagingExecutive___t_REG_DWORD__d__1___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetControlSession_ManagerMemory_Management___v__DisablePagingExecutive___t_REG_DWORD__d__1___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREMicrosoftWindows_NTCurrentVersionMultimediaSystemProfile___v__NoLazyMode___t_REG_DWORD__d__1___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREMicrosoftWindows_NTCurrentVersionMultimediaSystemProfile___v__AlwaysOn___t_REG_DWORD__d__1___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetControlPower___v__HighPerformance___t_REG_DWORD__d__1___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetServices_nvlddmkm___v__DisablePreemption___t_REG_DWORD__d__1___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetServices_nvlddmkm___v__DisableCudaContextPreemption___t_REG_DWORD__d__1___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetControlGraphicsDriversScheduler___v__EnablePreemption___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREMicrosoftWindows_NTCurrentVersionMultimediaSystemProfile___v__NetworkThrottlingIndex___t_REG_DWORD__d__10___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREMicrosoftWindows_NTCurrentVersionMultimediaSystemProfile___v__SystemResponsiveness___t_REG_DWORD__d__20___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUControl_PanelDesktopWindowMetrics___v__MinAnimate___t_REG_SZ__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUSOFTWAREMicrosoftWindowsCurrentVersionExplorerAdvanced___v__ExtendedUIHoverTime___t_REG_DWORD__d__196608___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUSOFTWAREMicrosoftWindowsCurrentVersionExplorerAdvanced___v__DontPrettyPath___t_REG_DWORD__d__1___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUSOFTWAREMicrosoftWindowsCurrentVersionExplorerAdvanced___v__ListviewShadow___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUSOFTWAREMicrosoftWindowsCurrentVersionExplorerAdvanced___v__TaskbarAnimations___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUSoftwareMicrosoftWindowsDWM___v__EnableAeroPeek___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREPoliciesMicrosoftWindowsDWM___v__DWMWA_TRANSITIONS_FORCEDISABLED___t_REG_DWORD__d__1___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREPoliciesMicrosoftWindowsDWM___v__DisallowAnimations___t_REG_DWORD__d__1___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetControlPowerEnergyEstimationTaggedEnergy___v__DisableTaggedEnergyLogging___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetControlPowerEnergyEstimationTaggedEnergy___v__TelemetryMaxApplication___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetControlPowerEnergyEstimationTaggedEnergy___v__TelemetryMaxTagPerApplication___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetControlPowerEnergyEstimationTaggedEnergy___v__EnergyEstimationEnabled___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUControl_PanelDesktop___v__FontSmoothing___t_REG_SZ__d__2___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUControl_PanelDesktop___v__FontSmoothingType___t_REG_DWORD__d__2___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUSOFTWAREMicrosoftWindowsCurrentVersionExplorerMultitaskingViewAllUpView___v__AllUpView___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUSOFTWAREMicrosoftWindowsCurrentVersionExplorerMultitaskingViewAllUpView___v__Remove_TaskView___t_REG_DWORD__d__1___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUSoftwareMicrosoftWindowsCurrentVersionExplorer___v__AltTabSettings___t_REG_DWORD__d__1___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_delete__HKCUSystemGameConfigStoreChildren___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_delete__HKCUSystemGameConfigStoreParents___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUSystemGameConfigStore___v__GameDVR_Enabled___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUSystemGameConfigStore___v__GameDVR_FSEBehaviorMode___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUSystemGameConfigStore___v__GameDVR_HonorUserFSEBehaviorMode___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUSystemGameConfigStore___v__GameDVR_DXGIHonorFSEWindowsCompatible___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUSystemGameConfigStore___v__GameDVR_EFSEFeatureFlags___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREPoliciesMicrosoftWindowsGameDVR___v__AllowGameDVR___t_REG_SZ__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUSoftwareMicrosoftGameBar___v__AllowAutoGameMode___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUSoftwareMicrosoftGameBar___v__AutoGameModeEnabled___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUSoftwareMicrosoftGameBar___v__UseNexusForGameBarEnabled___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUSoftwareMicrosoftWindowsCurrentVersionGameDVR___v__AppCaptureEnabled___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREPoliciesMicrosoftSQMClientWindows___v__CEIPEnable___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREPoliciesMicrosoftWindowsAppCompat___v__AITEnable___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREPoliciesMicrosoftWindowsAppCompat___v__DisableInventory___t_REG_DWORD__d__1___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREPoliciesMicrosoftWindowsAppCompat___v__DisableUAR___t_REG_DWORD__d__1___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREPoliciesMicrosoftWindowsAppCompat___v__MouseWheelRouting___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUControl_PanelCursors___v__ContactVisualization___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUControl_PanelCursors___v__GestureVisualization___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREMicrosoftInputSettingsControllerProcessorCursorSpeed___v__CursorSensitivity___t_REG_DWORD__d__10000___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREMicrosoftInputSettingsControllerProcessorCursorSpeed___v__CursorUpdateInterval___t_REG_DWORD__d__1___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREMicrosoftInputSettingsControllerProcessorCursorSpeed___v__IRRemoteNavigationDelta___t_REG_DWORD__d__1___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREMicrosoftInputSettingsControllerProcessorCursorMagnetism___v__AttractionRectInsetInDIPS___t_REG_DWORD__d__5___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREMicrosoftInputSettingsControllerProcessorCursorMagnetism___v__DistanceThresholdInDIPS___t_REG_DWORD__d__40___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREMicrosoftInputSettingsControllerProcessorCursorMagnetism___v__MagnetismDelayInMilliseconds___t_REG_DWORD__d__50___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREMicrosoftInputSettingsControllerProcessorCursorMagnetism___v__MagnetismUpdateIntervalInMilliseconds___t_REG_DWORD__d__16___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREMicrosoftInputSettingsControllerProcessorCursorMagnetism___v__VelocityInDIPSPerSecond___t_REG_DWORD__d__360___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREMicrosoftWindowsCurrentVersionDriverSearching___v__SearchOrderConfig___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUSOFTWAREMicrosoftWindowsCurrentVersionExplorerAdvancedPeople___v__PeopleBand___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUSOFTWAREMicrosoftInputPersonalizationTrainedDataStore___v__HarvestContacts___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUSOFTWAREMicrosoftWindowsCurrentVersionDiagnosticsDiagTrack___v__ShowedToastAtLevel___t_REG_DWORD__d__1___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUSOFTWAREMicrosoftWindowsCurrentVersionDiagnosticsDiagTrack___v__DiagTrackAuthorization___t_REG_DWORD__d__775___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUSOFTWAREMicrosoftWindowsCurrentVersionDiagnosticsDiagTrack___v__DiagTrackStatus___t_REG_DWORD__d__2___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUSOFTWAREMicrosoftWindowsCurrentVersionDiagnosticsDiagTrack___v__UploadPermissionReceived___t_REG_DWORD__d__1___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSoftwareMicrosoftWindowsCurrentVersionDiagnosticsDiagTrack___v__DiagTrackStatus___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSoftwareMicrosoftWindowsCurrentVersionDiagnosticsDiagTrack___v__TriggerLatency___t_REG_SZ__d__0.072253___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSoftwareMicrosoftWindowsCurrentVersionDiagnosticsDiagTrack___v__HttpRequestLatency___t_REG_SZ__d__1.502418___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSoftwareMicrosoftWindowsCurrentVersionDiagnosticsDiagTrackHeartBeatsDefault___v__EventDroppedDecoding___t_REG_DWORD__d__8___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSoftwareMicrosoftWindowsCurrentVersionDiagnosticsDiagTrackHeartBeatsDefault___v__VortexHttpAttempts___t_REG_DWORD__d__2___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSoftwareMicrosoftWindowsCurrentVersionDiagnosticsDiagTrackHeartBeatsDefault___v__EventsUploaded___t_REG_DWORD__d__10___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSoftwareMicrosoftWindowsCurrentVersionDiagnosticsDiagTrackHeartBeatsDefault___v__EventsPersistedCounter___t_REG_DWORD__d__87___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSoftwarePoliciesMicrosoftWindowsCloudContent___v__DisableWindowsConsumerFeatures___t_REG_DWORD__d__1___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSoftwarePoliciesMicrosoftWindowsLocationAndSensors___v__DisableWindowsLocationProvider___t_REG_DWORD__d__1___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSoftwarePoliciesMicrosoftWindowsLocationAndSensors___v__DisableSensors___t_REG_DWORD__d__1___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSoftwarePoliciesMicrosoftWindowsLocationAndSensors___v__DisableLocationScripting___t_REG_DWORD__d__1___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSoftwarePoliciesMicrosoftWindowsLocationAndSensors___v__DisableLocation___t_REG_DWORD__d__1___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSystemControlSet001ServicesSharedAccessEpoch___v__Epoch___t_REG_DWORD__d__3694___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSoftwareTrendMicroUniClient1700UBM___v__UBMEnable___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSoftwareWOW6432NodeMicrosoftPolicyManagerdefaultWiFiAllowAutoConnectToWiFiSenseHotspots___v__value___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSoftwareWOW6432NodeMicrosoftPolicyManagerdefaultWiFiAllowWiFiHotSpotReporting___v__value___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSoftwareMicrosoftWindowsCurrentVersionDiagnosticsDiagTrackSevilleEventlogManager___v__EventsUploaded___t_REG_DWORD__d__10___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSoftwareMicrosoftWindowsCurrentVersionDiagnosticsDiagTrackSevilleEventlogManager___v__EventsDropped___t_REG_DWORD__d__8___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUSOFTWAREMicrosoftSiufRules___v__NumberOfSIUFInPeriod___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREPoliciesMicrosoftWindowsWindowsUpdateAU___v__NoAutoUpdate___t_REG_DWORD__d__1___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREPoliciesMicrosoftWindowsStore___v__AutoDownload___t_REG_DWORD__d__2___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREMicrosoftWindowsCurrentVersionPoliciesSystem___v__EnableVirtualization___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREMicrosoftWindowsCurrentVersionPoliciesSystem___v__EnableInstallerDetection___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREMicrosoftWindowsCurrentVersionPoliciesSystem___v__PromptOnSecureDesktop___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREMicrosoftWindowsCurrentVersionPoliciesSystem___v__EnableLUA___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREMicrosoftWindowsCurrentVersionPoliciesSystem___v__EnableSecureUIAPaths___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREMicrosoftWindowsCurrentVersionPoliciesSystem___v__ConsentPromptBehaviorAdmin___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREMicrosoftWindowsCurrentVersionPoliciesSystem___v__ValidateAdminCodeSignatures___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREMicrosoftWindowsCurrentVersionPoliciesSystem___v__EnableUIADesktopToggle___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREMicrosoftWindowsCurrentVersionPoliciesSystem___v__ConsentPromptBehaviorUser___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREMicrosoftWindowsCurrentVersionPoliciesSystem___v__FilterAdministratorToken___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUSOFTWAREMicrosoftWindowsCurrentVersionNotificationsSettings___v__NOC_GLOBAL_SETTING_ALLOW_TOASTS_ABOVE_LOCK___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUSOFTWAREMicrosoftWindowsCurrentVersionNotificationsSettings___v__NOC_GLOBAL_SETTING_ALLOW_CRITICAL_TOASTS_ABOVE_LOCK___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUSOFTWAREMicrosoftWindowsCurrentVersionNotificationsSettings___v__NOC_GLOBAL_SETTING_TOASTS_ENABLED___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREMicrosoftWindowsCurrentVersionCapabilityAccessManagerConsentStoreuserNotificationListener___v__Value___t_REG_SZ__d__Deny___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREMicrosoftWindowsCurrentVersionCapabilityAccessManagerConsentStoreuserAccountInformation___v__Value___t_REG_SZ__d__Deny___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREMicrosoftWindowsCurrentVersionCapabilityAccessManagerConsentStorecontacts___v__Value___t_REG_SZ__d__Deny___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREMicrosoftWindowsCurrentVersionCapabilityAccessManagerConsentStorephoneCall___v__Value___t_REG_SZ__d__Deny___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREMicrosoftWindowsCurrentVersionCapabilityAccessManagerConsentStore_appointments___v__Value___t_REG_SZ__d__Deny___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREMicrosoftWindowsCurrentVersionCapabilityAccessManagerConsentStorephoneCallHistory___v__Value___t_REG_SZ__d__Deny___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREMicrosoftWindowsCurrentVersionCapabilityAccessManagerConsentStoreemail___v__Value___t_REG_SZ__d__Deny___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREMicrosoftWindowsCurrentVersionCapabilityAccessManagerConsentStoreuserDataTasks___v__Value___t_REG_SZ__d__Deny___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREPoliciesMicrosoftWindowsExplorer___v__DisableNotificationCenter___t_REG_DWORD__d__1___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREMicrosoftWindowsCurrentVersionCapabilityAccessManagerConsentStorechat___v__Value___t_REG_SZ__d__Deny___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUSOFTWAREPoliciesMicrosoftWindowsExplorer___v__DisableNotificationCenter___t_REG_DWORD__d__1___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREMicrosoftWindowsCurrentVersionCapabilityAccessManagerConsentStore_radios___v__Value___t_REG_SZ__d__Deny___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREMicrosoftWindowsCurrentVersionCapabilityAccessManagerConsentStore_appDiagnostics___v__Value___t_REG_SZ__d__Deny___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREMicrosoftWindowsCurrentVersionCapabilityAccessManagerConsentStoredocumentsLibrary___v__Value___t_REG_SZ__d__Deny___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetControlRemote_Assistance___v__fAllowToGetHelp___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREMicrosoftWindowsCurrentVersionCapabilityAccessManagerConsentStorepicturesLibrary___v__Value___t_REG_SZ__d__Deny___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetServicesTcpip6Parameters___v__DisabledComponents___t_REG_DWORD__d__32___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREMicrosoftWindowsCurrentVersionCapabilityAccessManagerConsentStore_videosLibrary___v__Value___t_REG_SZ__d__Deny___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREMicrosoftWindowsCurrentVersionCapabilityAccessManagerConsentStore_broadFileSystemAccess___v__Value___t_REG_SZ__d__Deny___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUControl_PanelInternationalUser_Profile___v__HttpAcceptLanguageOptOut___t_REG_DWORD__d__1___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUSOFTWAREMicrosoftSpeech_OneCoreSettingsOnlineSpeechPrivacy___v__HasAccepted___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREPoliciesMicrosoftWindowsWindows_Search___v__AllowCortana___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREPoliciesMicrosoftWindowsWindows_Search___v__BingSearchEnabled___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREPoliciesMicrosoftWindowsWindows_Search___v__CortanaConsent___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREPoliciesMicrosoftWindowsWindows_Search___v__BackgroundAppGlobalToggle___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUSoftwareMicrosoftWindowsCurrentVersionAdvertisingInfo___v__Enabled___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREPoliciesMicrosoftWindowsSystem___v__EnableActivityFeed___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREPoliciesMicrosoftWindowsSystem___v__EnableSmartScreen___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUSoftwareMicrosoftWindowsCurrentVersionContentDeliveryManager___v__SilentInstalledAppsEnabled___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUSOFTWAREMicrosoftWindowsCurrentVersionContentDeliveryManager___v__SystemPaneSuggestionsEnabled___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUSOFTWAREMicrosoftWindowsCurrentVersionExplorerAdvanced___v__ShowSyncProviderNotifications___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUSOFTWAREMicrosoftWindowsCurrentVersionContentDeliveryManager___v__SoftLandingEnabled___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUSOFTWAREMicrosoftWindowsCurrentVersionContentDeliveryManager___v__RotatingLockScreenEnabled___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUSOFTWAREMicrosoftWindowsCurrentVersionContentDeliveryManager___v__RotatingLockScreenOverlayEnabled___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREMicrosoftWindowsCurrentVersionPoliciesDataCollection___v__AllowTelemetry___t_REG_DWORD__d__1___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREMicrosoftWindowsCurrentVersionPoliciesDataCollection___v__MaxTelemetryAllowed___t_REG_DWORD__d__1___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUControl_PanelAccessibilityMouseKeys___v__Flags___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUControl_PanelAccessibilityStickyKeys___v__Flags___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUControl_PanelAccessibilityKeyboard_Response___v__Flags___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUControl_PanelAccessibilityToggleKeys___v__Flags___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetControlPowerPowerSettings54533251_82be_4824_96c1_47b60b740d00943c8cb6_6f93_4227_ad87_e9a3feec08d1___v__Attributes___t_REG_SZ__d__2___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCRAllFilesystemObjects_shellexContextMenuHandlersCopy_To___ve__t_REG_SZ__d__C2FBB630_2971_11D1_A18C_00C04FD75D13___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCRAllFilesystemObjects_shellexContextMenuHandlersMove_To___ve__t_REG_SZ__d__C2FBB631_2971_11D1_A18C_00C04FD75D13___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUSoftwareMicrosoftWindowsCurrentVersionPoliciesExplorer___v__NoLowDiskSpaceChecks___t_REG_DWORD__d__1___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUSoftwareMicrosoftWindowsCurrentVersionPoliciesExplorer___v__LinkResolveIgnoreLinkInfo___t_REG_DWORD__d__1___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUSoftwareMicrosoftWindowsCurrentVersionPoliciesExplorer___v__NoResolveSearch___t_REG_DWORD__d__1___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUSoftwareMicrosoftWindowsCurrentVersionPoliciesExplorer___v__NoResolveTrack___t_REG_DWORD__d__1___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUSoftwareMicrosoftWindowsCurrentVersionPoliciesExplorer___v__NoInternetOpenWith___t_REG_DWORD__d__1___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUSOFTWAREMicrosoftWindowsCurrentVersionExplorer___v__EnableAutoTray___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREMicrosoftWindowsCurrentVersionDeliveryOptimizationSettings___v__DownloadMode___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREPoliciesMicrosoftWindowsOneDrive___v__DisableFileSyncNGSC___t_REG_DWORD__d__1___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUSoftwareMicrosoftWindowsCurrentVersionExplorerAdvanced___v__DisallowShaking___t_REG_DWORD__d__1___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUSoftwareMicrosoftWindowsCurrentVersionExplorerAdvanced___v__EnableBalloonTips___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUSOFTWAREMicrosoftWindowsCurrentVersionExplorerSerialize___v__StartupDelayInMSec___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetServicesTcpipServiceProvider___v__LocalPriority___t_REG_DWORD__d__4___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetServicesTcpipServiceProvider___v__HostsPriority___t_REG_DWORD__d__5___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetServicesTcpipServiceProvider___v__DnsPriority___t_REG_DWORD__d__6___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetServicesTcpipServiceProvider___v__NetbtPriority___t_REG_DWORD__d__7___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREPoliciesMicrosoftWindowsPsched___v__NonBestEffortLimit___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetServicesPsched___v__NonBestEffortLimit___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUSOFTWAREPoliciesMicrosoftWindowsCurrentVersionPushNotifications___v__NoTileApplicationNotification___t_REG_DWORD__d__1___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUSOFTWAREPoliciesMicrosoftWindowsCurrentVersionPushNotifications___v__LockScreenToastEnabled___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUSOFTWAREPoliciesMicrosoftWindowsCurrentVersionPushNotifications___v__ToastEnabled___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUControl_PanelDesktop___v__MenuShowDelay___t_REG_SZ__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUControl_PanelDesktop___v__AutoEndTasks___t_REG_SZ__d__1___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUControl_PanelDesktop___v__HungAppTimeout___t_REG_SZ__d__1000___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUControl_PanelDesktop___v__WaitToKillAppTimeout___t_REG_SZ__d__2000___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUControl_PanelDesktop___v__LowLevelHooksTimeout___t_REG_SZ__d__1000___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetControlSession_ManagerMemory_ManagementPrefetchParameters___v__EnablePrefetcher___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetControlSession_ManagerMemory_ManagementPrefetchParameters___v__EnableSuperfetch___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetControlSession_ManagerMemory_ManagementPrefetchParameters___v__SfTracingState___t_REG_DWORD__d__1___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREMicrosoftWindowsCurrentVersionWINEVTChannelsMicrosoft_Windows_SuperfetchMain___v__Enabled___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREMicrosoftWindowsCurrentVersionWINEVTChannelsMicrosoft_Windows_SuperfetchPfApLog___v__Enabled___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREMicrosoftWindowsCurrentVersionWINEVTChannelsMicrosoft_Windows_SuperfetchStoreLog___v__Enabled___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSoftwarePoliciesMicrosoftWindowsPsched___v__NonBestEffortLimit___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetServicesPsched___v__NonBestEffortLimit___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREMicrosoftWindowsCurrentVersionExplorerVolumeCachesTemporary_Files___v__LastAccess___t_REG_DWORD__d__7___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetControl___v__WaitToKillServiceTimeout___t_REG_SZ__d__2000___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREMicrosoftMSMQParametersSecurity___v__SecureDSCommunication___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_delete__HKLMSOFTWAREPoliciesMicrosoftWindowsWindowsUpdate___v__DeferUpgrade___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREPoliciesMicrosoftWindowsWindowsUpdate___v__DoNotConnectToWindowsUpdateInternetLocations___t_REG_DWORD__d__1___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUSOFTWAREMicrosoftWindowsCurrentVersionExplorerAdvanced___v__Start_TrackProgs___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUSOFTWAREMicrosoftWindowsCurrentVersionSettingSyncGroupsLanguage___v__SettingsVersion___t_REG_DWORD__d__3___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUSOFTWAREMicrosoftWindowsCurrentVersionSettingSyncGroupsLanguage___v__Enabled___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUSOFTWAREMicrosoftWindowsCurrentVersionBackgroundAccessApplications___v__GlobalUserDisabled___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUSOFTWAREMicrosoftWindowsCurrentVersionThemesPersonalize___v__EnableTransparency___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUSOFTWAREMicrosoftWindowsCurrentVersionCDP___v__RomeSdkChannelUserAuthzPolicy___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUSOFTWAREMicrosoftWindowsCurrentVersionCDP___v__CdpSessionUserAuthzPolicy___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUSOFTWAREMicrosoftWindowsCurrentVersionExplorerAdvanced___v__HideFileExt___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREPoliciesMicrosoftInputPersonalization___v__RestrictImplicitInkCollection___t_REG_DWORD__d__1___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREPoliciesMicrosoftInputPersonalization___v__RestrictImplicitTextCollection___t_REG_DWORD__d__1___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREPoliciesMicrosoftInputPersonalization___v__AllowInputPersonalization___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUSOFTWAREPoliciesMicrosoftInputPersonalization___v__RestrictImplicitInkCollection___t_REG_DWORD__d__1___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUSOFTWAREPoliciesMicrosoftInputPersonalization___v__RestrictImplicitTextCollection___t_REG_DWORD__d__1___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUSOFTWAREMicrosoftInputPersonalization___v__RestrictImplicitInkCollection___t_REG_DWORD__d__1___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUSOFTWAREMicrosoftInputPersonalization___v__RestrictImplicitTextCollection___t_REG_DWORD__d__1___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetControlSession_ManagerMemory_Management___v__FeatureSettingsOverride___t_REG_DWORD__d__3___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetControlSession_ManagerMemory_Management___v__FeatureSettingsOverrideMask___t_REG_DWORD__d__3___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetControlSession_ManagerMemory_Management___v__LargeSystemCache___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMControlSet001ControlFileSystem___v__LongPathsEnabled___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMControlSet001ControlFileSystem___v__NtfsAllowExtendedCharacter8dot3Rename___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMControlSet001ControlFileSystem___v__NtfsDisable8dot3NameCreation___t_REG_DWORD__d__1___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMControlSet001ControlFileSystem___v__NtfsDisableCompression___t_REG_DWORD__d__1___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMControlSet001ControlFileSystem___v__NtfsDisableEncryption___t_REG_DWORD__d__1___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMControlSet001ControlFileSystem___v__NtfsDisableLastAccessUpdate___t_REG_DWORD__d__2147483649___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMControlSet001ControlFileSystem___v__NtfsEncryptPagingFile___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMControlSet001ControlFileSystem___v__NtfsMemoryUsage___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMControlSet001ControlFileSystem___v__RefsDisableLastAccessUpdate___t_REG_DWORD__d__1___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetControlPowerEnergyEstimationStorageNVMEIdleState1___v__IdleExitEnergyMicroJoules___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetControlPowerEnergyEstimationStorageNVMEIdleState1___v__IdleExitLatencyMs___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetControlPowerEnergyEstimationStorageNVMEIdleState1___v__IdlePowerMw___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetControlPowerEnergyEstimationStorageNVMEIdleState1___v__IdleTimeLengthMs___t_REG_DWORD__d__4294967295___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetControlPowerEnergyEstimationStorageSDIdleState1___v__IdleExitEnergyMicroJoules___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetControlPowerEnergyEstimationStorageSDIdleState1___v__IdleExitLatencyMs___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetControlPowerEnergyEstimationStorageSDIdleState1___v__IdlePowerMw___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetControlPowerEnergyEstimationStorageSDIdleState1___v__IdleTimeLengthMs___t_REG_DWORD__d__4294967295___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetControlPowerEnergyEstimationStorageSSDIdleState1___v__IdleExitEnergyMicroJoules___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetControlPowerEnergyEstimationStorageSSDIdleState1___v__IdleExitLatencyMs___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetControlPowerEnergyEstimationStorageSSDIdleState1___v__IdlePowerMw___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetControlPowerEnergyEstimationStorageSSDIdleState1___v__IdleTimeLengthMs___t_REG_DWORD__d__4294967295___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetControlPowerEnergyEstimationStorageSSDIdleState2___v__IdleExitEnergyMicroJoules___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetControlPowerEnergyEstimationStorageSSDIdleState2___v__IdleExitLatencyMs___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetControlPowerEnergyEstimationStorageSSDIdleState2___v__IdlePowerMw___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetControlPowerEnergyEstimationStorageSSDIdleState2___v__IdleTimeLengthMs___t_REG_DWORD__d__4294967295___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetControlPowerEnergyEstimationStorageSSDIdleState3___v__IdleExitEnergyMicroJoules___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetControlPowerEnergyEstimationStorageSSDIdleState3___v__IdleExitLatencyMs___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetControlPowerEnergyEstimationStorageSSDIdleState3___v__IdlePowerMw___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetControlPowerEnergyEstimationStorageSSDIdleState3___v__IdleTimeLengthMs___t_REG_DWORD__d__4294967295___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetControlDeviceGuardScenariosHypervisorEnforcedCodeIntegrity___v__Enabled___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetControlDeviceGuardScenariosHypervisorEnforcedCodeIntegrity___v__HVCIMATRequired___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetControlDeviceGuardScenariosHypervisorEnforcedCodeIntegrity___v__Locked___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREPoliciesMicrosoftWindowsSystem___v__AllowClipboardHistory___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREPoliciesMicrosoftWindowsSystem___v__EnableActivityFeed___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREPoliciesMicrosoftWindowsSystem___v__PublishUserActivities___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREPoliciesMicrosoftWindowsSystem___v__UploadUserActivities___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREPoliciesMicrosoftWindowsSystem___v__DisableAcrylicBackgroundOnLogon___t_REG_DWORD__d__1___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREPoliciesMicrosoftWindowsSystem___v__EnableSmartScreen___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREPoliciesMicrosoftWindowsSystem___v__Start___t_REG_SZ__d__Warn___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREPoliciesMicrosoftWindowsSystem___v__DisableHHDEP___t_REG_DWORD__d__1___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREPoliciesMicrosoftWindowsSystem___v__EnableCdp___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREPoliciesMicrosoftWindowsSystem___v__EnableMmx___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetControlTerminal_ServerWinStationsRDP_Tcp___v__fDisableEncryption___t_REG_DWORD__d__1___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetControlTerminal_ServerWinStationsRDP_Tcp___v__MaxIdleTime___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetControlTerminal_ServerWinStationsRDP_Tcp___v__MinEncryptionLevel___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUControl_PanelKeyboard___v__InitialKeyboardIndicators___t_REG_SZ__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUControl_PanelKeyboard___v__KeyboardDelay___t_REG_SZ__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREPoliciesMicrosoftInternet_ExplorerMain___v__DEPOff___t_REG_DWORD__d__1___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetControlTerminal_ServerWinStationsRDP_Tcp___v__fDisableEncryption___t_REG_DWORD__d__1___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetControlTerminal_ServerWinStationsRDP_Tcp___v__fInheritColorDepth___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetControlTerminal_ServerWinStationsRDP_Tcp___v__fInheritSecurity___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetControlTerminal_ServerWinStationsRDP_Tcp___v__fInheritShadow___t_REG_DWORD__d__1___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetControlTerminal_ServerWinStationsRDP_Tcp___v__MaxIdleTime___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetControlTerminal_ServerWinStationsRDP_Tcp___v__MinEncryptionLevel___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREPoliciesMicrosoftWindowsSystem___v__AllowClipboardHistory___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREPoliciesMicrosoftWindowsSystem___v__EnableActivityFeed___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREPoliciesMicrosoftWindowsSystem___v__PublishUserActivities___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREPoliciesMicrosoftWindowsSystem___v__UploadUserActivities___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREPoliciesMicrosoftWindowsSystem___v__DisableAcrylicBackgroundOnLogon___t_REG_DWORD__d__1___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREPoliciesMicrosoftWindowsSystem___v__EnableSmartScreen___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREPoliciesMicrosoftWindowsSystem___v__DisableHHDEP___t_REG_DWORD__d__1___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREPoliciesMicrosoftWindowsSystem___v__EnableCdp___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREPoliciesMicrosoftWindowsSystem___v__EnableMmx___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetControlSession_Manager___v__AutoChkTimeout___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetControlSession_Manager___v__ProtectionMode___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetControlSession_Manager___v__AutoChkSkipSystemPartition___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetControlSession_Manager___v__AlpcWakePolicy___t_REG_DWORD__d__1___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetControlSession_Manager___v__CoalescingTimerInterval___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUSOFTWAREMicrosoftWindowsCurrentVersionPoliciesExplorer___v__NoRecentDocsHistory___t_REG_DWORD__d__1___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUSOFTWAREMicrosoftWindowsCurrentVersionPoliciesExplorer___v__ConfirmFileDelete___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUSOFTWAREMicrosoftWindowsCurrentVersionPoliciesExplorer___v__NoNetConnectDisconnect___t_REG_DWORD__d__1___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUSOFTWAREMicrosoftWindowsCurrentVersionPoliciesExplorer___v__NoDriveTypeAutoRun___t_REG_DWORD__d__255___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUSOFTWAREMicrosoftWindowsCurrentVersionPoliciesExplorer___v__LinkResolveIgnoreLinkInfo___t_REG_DWORD__d__1___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUSOFTWAREMicrosoftWindowsCurrentVersionPoliciesExplorer___v__NoCDBurning___t_REG_DWORD__d__1___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUSOFTWAREMicrosoftWindowsCurrentVersionPoliciesExplorer___v__NoInternetOpenWith___t_REG_DWORD__d__1___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUSOFTWAREMicrosoftWindowsCurrentVersionPoliciesExplorer___v__NoLowDiskSpaceChecks___t_REG_DWORD__d__1___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUSOFTWAREMicrosoftWindowsCurrentVersionPoliciesExplorer___v__NoResolveSearch___t_REG_DWORD__d__1___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUSOFTWAREMicrosoftWindowsCurrentVersionPoliciesExplorer___v__NoResolveTrack___t_REG_DWORD__d__1___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetServicesTcpip6Parameters___v__DisabledComponents___t_REG_DWORD__d__32___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUControl_PanelDesktop___v__WindowArrangementActive___t_REG_SZ__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUControl_PanelDesktop___v__DragFullWindows___t_REG_SZ__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUControl_PanelDesktop___v__FontSmoothing___t_REG_SZ__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUControl_PanelDesktop___v__FontSmoothingGamma___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUControl_PanelDesktop___v__FontSmoothingOrientation___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUControl_PanelDesktop___v__FontSmoothingType___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUControl_PanelDesktop___v__MenuShowDelay___t_REG_SZ__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUControl_PanelDesktop___v__MouseWheelRouting___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUControl_PanelDesktop___v__Pattern___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUControl_PanelDesktop___v__WindowArrangementActive___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUControl_PanelDesktop___v__ScreenSaverIsSecure___t_REG_SZ__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUControl_PanelDesktop___v__ActiveWndTrackTimeout___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUControl_PanelDesktop___v__BlockSendInputResets___t_REG_SZ__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUControl_PanelDesktop___v__EnablePerProcessSystemDPI___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUControl_PanelDesktop___v__Beep___t_REG_SZ__d__No___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUControl_PanelDesktop___v__ExtendedSounds___t_REG_SZ__d__No___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUControl_PanelDesktop___v__KeyboardDelay___t_REG_SZ__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUControl_PanelDesktop___v__MouseSensitivity___t_REG_SZ__d__10___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUControl_PanelDesktop___v__MouseSpeed___t_REG_SZ__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUControl_PanelDesktop___v__MouseThreshold1___t_REG_SZ__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUControl_PanelDesktop___v__MouseThreshold2___t_REG_SZ__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUControl_PanelDesktop___v__Win8DpiScaling___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUControl_PanelDesktop___v__DpiScalingVer___t_REG_DWORD__d__4096___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUControl_PanelDesktop___v__ScreenSaverIsSecure___t_REG_SZ__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUControl_PanelDesktop___v__PaintDesktopVersion___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUControl_PanelDesktop___v__WallpaperOriginX___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUControl_PanelDesktop___v__WallpaperOriginY___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUControl_PanelDesktop___v__ForegroundLockTimeout___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUControl_PanelDesktop___v__LastUpdated___t_REG_DWORD__d__4294967295___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUControl_PanelMouse___v__ActiveWindowTracking___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUControl_PanelMouse___v__Beep___t_REG_SZ__d__No___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUControl_PanelMouse___v__ExtendedSounds___t_REG_SZ__d__No___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUControl_PanelMouse___v__MouseSensitivity___t_REG_SZ__d__10___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUControl_PanelMouse___v__MouseSpeed___t_REG_SZ__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUControl_PanelMouse___v__MouseThreshold1___t_REG_SZ__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUControl_PanelMouse___v__MouseThreshold2___t_REG_SZ__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUControl_PanelMouse___v__MouseTrails___t_REG_SZ__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUControl_PanelMouse___v__SnapToDefaultButton___t_REG_SZ__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUControl_PanelMouse___v__SwapMouseButtons___t_REG_SZ__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetControlDeviceGuardScenariosHypervisorEnforcedCodeIntegrity___v__Enabled___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetControlDeviceGuardScenariosHypervisorEnforcedCodeIntegrity___v__HVCIMATRequired___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetControlDeviceGuardScenariosHypervisorEnforcedCodeIntegrity___v__Locked___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMControlSet001ControlPower___v__Class1InitialUnparkCount___t_REG_DWORD__d__64___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMControlSet001ControlPower___v__CustomizeDuringSetup___t_REG_DWORD__d__1___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMControlSet001ControlPower___v__HiberFileSizePercent___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMControlSet001ControlPower___v__HibernateEnabledDefault___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMControlSet001ControlPower___v__EventProcessorEnabled___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMControlSet001ControlPower___v__HibernateEnabled___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMControlSet001ControlPower___v__CoalescingTimerInterval___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMControlSet001ControlPower___v__CsEnabled___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMControlSet001ControlPower___v__EnergyEstimationEnabled___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMControlSet001ControlPower___v__TimerRebaseThresholdOnDripsExit___t_REG_DWORD__d__60___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUSoftwareMicrosoftWindowsCurrentVersionExplorerVisualEffectsAnimateMinMax___v__DefaultApplied___t_REG_DWORD__d__1___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUSoftwareMicrosoftWindowsCurrentVersionExplorerVisualEffectsComboBoxAnimation___v__DefaultApplied___t_REG_DWORD__d__1___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUSoftwareMicrosoftWindowsCurrentVersionExplorerVisualEffectsControlAnimations___v__DefaultApplied___t_REG_DWORD__d__1___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUSoftwareMicrosoftWindowsCurrentVersionExplorerVisualEffectsCursorShadow___v__DefaultApplied___t_REG_DWORD__d__1___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUSoftwareMicrosoftWindowsCurrentVersionExplorerVisualEffectsDragFullWindows___v__DefaultApplied___t_REG_DWORD__d__1___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUSoftwareMicrosoftWindowsCurrentVersionExplorerVisualEffectsDropShadow___v__DefaultApplied___t_REG_DWORD__d__1___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUSoftwareMicrosoftWindowsCurrentVersionExplorerVisualEffectsDWMAeroPeekEnabled___v__DefaultApplied___t_REG_DWORD__d__1___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUSoftwareMicrosoftWindowsCurrentVersionExplorerVisualEffectsDWMEnabled___v__DefaultApplied___t_REG_DWORD__d__1___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUSoftwareMicrosoftWindowsCurrentVersionExplorerVisualEffectsDWMSaveThumbnailEnabled___v__DefaultApplied___t_REG_DWORD__d__1___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUSoftwareMicrosoftWindowsCurrentVersionExplorerVisualEffectsFontSmoothing___v__DefaultApplied___t_REG_DWORD__d__1___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUSoftwareMicrosoftWindowsCurrentVersionExplorerVisualEffectsListBoxSmoothScrolling___v__DefaultApplied___t_REG_DWORD__d__1___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUSoftwareMicrosoftWindowsCurrentVersionExplorerVisualEffectsListviewAlphaSelect___v__DefaultApplied___t_REG_DWORD__d__1___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUSoftwareMicrosoftWindowsCurrentVersionExplorerVisualEffectsListviewShadow___v__DefaultApplied___t_REG_DWORD__d__1___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUSoftwareMicrosoftWindowsCurrentVersionExplorerVisualEffectsMenuAnimation___v__DefaultApplied___t_REG_DWORD__d__1___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUSoftwareMicrosoftWindowsCurrentVersionExplorerVisualEffectsSelectionFade___v__DefaultApplied___t_REG_DWORD__d__1___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUSoftwareMicrosoftWindowsCurrentVersionExplorerVisualEffectsTaskbarAnimations___v__DefaultApplied___t_REG_DWORD__d__1___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUSoftwareMicrosoftWindowsCurrentVersionExplorerVisualEffectsThemes___v__DefaultApplied___t_REG_DWORD__d__1___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUSoftwareMicrosoftWindowsCurrentVersionExplorerVisualEffectsThumbnailsOrIcon___v__DefaultApplied___t_REG_DWORD__d__1___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUSoftwareMicrosoftWindowsCurrentVersionExplorerVisualEffectsTooltipAnimation___v__DefaultApplied___t_REG_DWORD__d__1___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetServicesUSB___v__DisableSelectiveSuspend___t_REG_DWORD__d__1___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREMicrosoftWindows_NTCurrentVersionImage_File_Execution_OptionsStartMenuExperienceHost.exePerfOptions___v__CpuPriorityClass___t_REG_DWORD__d__1___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREMicrosoftWindows_NTCurrentVersionImage_File_Execution_OptionsStartMenuExperienceHost.exePerfOptions___v__IoPriority___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREMicrosoftWindows_NTCurrentVersionImage_File_Execution_OptionsStartMenuExperienceHost.exePerfOptions___v__PagePriority___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREMicrosoftWindows_NTCurrentVersionImage_File_Execution_OptionsStartMenu.exePerfOptions___v__CpuPriorityClass___t_REG_DWORD__d__1___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREMicrosoftWindows_NTCurrentVersionImage_File_Execution_OptionsStartMenu.exePerfOptions___v__IoPriority___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREMicrosoftWindows_NTCurrentVersionImage_File_Execution_OptionsStartMenu.exePerfOptions___v__PagePriority___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREMicrosoftWindows_NTCurrentVersionImage_File_Execution_Optionslsass.exePerfOptions___v__CpuPriorityClass___t_REG_DWORD__d__1___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREMicrosoftWindows_NTCurrentVersionImage_File_Execution_Optionslsass.exePerfOptions___v__IoPriority___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREMicrosoftWindows_NTCurrentVersionImage_File_Execution_Optionslsass.exePerfOptions___v__PagePriority___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREMicrosoftWindows_NTCurrentVersionImage_File_Execution_Optionsdwm.exePerfOptions___v__CpuPriorityClass___t_REG_DWORD__d__1___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREMicrosoftWindows_NTCurrentVersionImage_File_Execution_Optionsdwm.exePerfOptions___v__IoPriority___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREMicrosoftWindows_NTCurrentVersionImage_File_Execution_Optionsdwm.exePerfOptions___v__PagePriority___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREMicrosoftWindows_NTCurrentVersionImage_File_Execution_Options_sppsvc.exePerfOptions___v__CpuPriorityClass___t_REG_DWORD__d__1___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREMicrosoftWindows_NTCurrentVersionImage_File_Execution_Options_sppsvc.exePerfOptions___v__IoPriority___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREMicrosoftWindows_NTCurrentVersionImage_File_Execution_Options_sppsvc.exePerfOptions___v__PagePriority___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREMicrosoftWindows_NTCurrentVersionImage_File_Execution_Optionscsrss.exePerfOptions___v__CpuPriorityClass___t_REG_DWORD__d__4___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREMicrosoftWindows_NTCurrentVersionImage_File_Execution_Optionscsrss.exePerfOptions___v__IoPriority___t_REG_DWORD__d__2___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREMicrosoftWindows_NTCurrentVersionImage_File_Execution_Optionscsrss.exePerfOptions___v__PagePriority___t_REG_DWORD__d__5___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREMicrosoftWindows_NTCurrentVersionImage_File_Execution_Options_sppsvc.exePerfOptions___v__CpuPriorityClass___t_REG_DWORD__d__1___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREMicrosoftWindows_NTCurrentVersionImage_File_Execution_Options_sppsvc.exePerfOptions___v__IoPriority___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREMicrosoftWindows_NTCurrentVersionImage_File_Execution_Options_sppsvc.exePerfOptions___v__PagePriority___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREMicrosoftWindows_NTCurrentVersionMultimediaSystemProfileTasksGames___v__GPU_Priority___t_REG_DWORD__d__8___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREMicrosoftWindows_NTCurrentVersionMultimediaSystemProfileTasksGames___v__Priority___t_REG_DWORD__d__6___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREMicrosoftWindows_NTCurrentVersionMultimediaSystemProfileTasksGames___v__Scheduling_Category___t_REG_SZ__d__High___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREMicrosoftWindows_NTCurrentVersionMultimediaSystemProfileTasksGames___v__SFIO_Priority___t_REG_SZ__d__High___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_add__HKLMSYSTEMCurrentControlSetControlWMIAutologgerTPMProvisioningService___v__Start___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_add__HKLMSYSTEMCurrentControlSetControlWMIAutologgerUBPM___v__Start___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_add__HKLMSYSTEMCurrentControlSetControlWMIAutologgerWdiContextLog___v__Start___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_add__HKLMSYSTEMCurrentControlSetControlWMIAutologgerWFP_IPsec_Trace___v__Start___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_add__HKLMSYSTEMCurrentControlSetControlWMIAutologgerWiFiDriverIHVSession___v__Start___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_add__HKLMSYSTEMCurrentControlSetControlWMIAutologgerWiFiDriverIHVSessionRepro___v__Start___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_add__HKLMSYSTEMCurrentControlSetControlWMIAutologgerWiFiSession___v__Start___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_add__HKLMSYSTEMCurrentControlSetControlWMIAutologgerWinPhoneCritical___v__Start___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_add__HKLMSOFTWAREMicrosoftWindows_NTCurrentVersionWUDF___v__LogEnable___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_add__HKLMSOFTWAREMicrosoftWindows_NTCurrentVersionWUDF___v__LogLevel___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_add__HKLMSYSTEMCurrentControlSetControlLsaCredssp___v__DebugLogLevel___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetControlPower___v__ExitLatencyCheckEnabled___t_REG_DWORD__d__1___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetControlPower___v__Latency___t_REG_DWORD__d__1___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetControlPower___v__LatencyToleranceDefault___t_REG_DWORD__d__1___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetControlPower___v__LatencyToleranceFSVP___t_REG_DWORD__d__1___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetControlPower___v__LatencyTolerancePerfOverride___t_REG_DWORD__d__1___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetControlPower___v__LatencyToleranceScreenOffIR___t_REG_DWORD__d__1___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetControlPower___v__RtlCapabilityCheckLatency___t_REG_DWORD__d__1___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetControlGraphicsDriversPower___v__DefaultD3TransitionLatencyActivelyUsed___t_REG_DWORD__d__1___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetControlGraphicsDriversPower___v__DefaultD3TransitionLatencyIdleLongTime___t_REG_DWORD__d__1___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetControlGraphicsDriversPower___v__DefaultD3TransitionLatencyIdleMonitorOff___t_REG_DWORD__d__1___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetControlGraphicsDriversPower___v__DefaultD3TransitionLatencyIdleNoContext___t_REG_DWORD__d__1___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetControlGraphicsDriversPower___v__DefaultD3TransitionLatencyIdleShortTime___t_REG_DWORD__d__1___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetControlGraphicsDriversPower___v__DefaultD3TransitionLatencyIdleVeryLongTime___t_REG_DWORD__d__1___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetControlGraphicsDriversPower___v__DefaultLatencyToleranceIdle0___t_REG_DWORD__d__1___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetControlGraphicsDriversPower___v__DefaultLatencyToleranceIdle0MonitorOff___t_REG_DWORD__d__1___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetControlGraphicsDriversPower___v__DefaultLatencyToleranceIdle1___t_REG_DWORD__d__1___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetControlGraphicsDriversPower___v__DefaultLatencyToleranceIdle1MonitorOff___t_REG_DWORD__d__1___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetControlGraphicsDriversPower___v__DefaultLatencyToleranceMemory___t_REG_DWORD__d__1___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetControlGraphicsDriversPower___v__DefaultLatencyToleranceNoContext___t_REG_DWORD__d__1___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetControlGraphicsDriversPower___v__DefaultLatencyToleranceNoContextMonitorOff___t_REG_DWORD__d__1___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetControlGraphicsDriversPower___v__DefaultLatencyToleranceOther___t_REG_DWORD__d__1___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetControlGraphicsDriversPower___v__DefaultLatencyToleranceTimerPeriod___t_REG_DWORD__d__1___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetControlGraphicsDriversPower___v__DefaultMemoryRefreshLatencyToleranceActivelyUsed___t_REG_DWORD__d__1___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetControlGraphicsDriversPower___v__DefaultMemoryRefreshLatencyToleranceMonitorOff___t_REG_DWORD__d__1___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetControlGraphicsDriversPower___v__DefaultMemoryRefreshLatencyToleranceNoContext___t_REG_DWORD__d__1___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetControlGraphicsDriversPower___v__Latency___t_REG_DWORD__d__1___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetControlGraphicsDriversPower___v__MaxIAverageGraphicsLatencyInOneBucket___t_REG_DWORD__d__1___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetControlGraphicsDriversPower___v__MiracastPerfTrackGraphicsLatency___t_REG_DWORD__d__1___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetControlGraphicsDriversPower___v__MonitorLatencyTolerance___t_REG_DWORD__d__1___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetControlGraphicsDriversPower___v__MonitorRefreshLatencyTolerance___t_REG_DWORD__d__1___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetControlGraphicsDriversPower___v__TransitionLatency___t_REG_DWORD__d__1___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREPoliciesMicrosoftWindowsQoS___v__Tcp_Autotuning_Level___t_REG_SZ__d__Off___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREPoliciesMicrosoftWindowsQoS___v__Application_DSCP_Marking_Request___t_REG_SZ__d__Ignored___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSet_servicesTcpipQoS___v__Do_not_use_NLA___t_REG_SZ__d__1___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetServicesTcpipParameters___v__DisableUserTOSSetting___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSet_servicesNlaSvcParametersInternet___v__CorpLocationProbeTimeout___t_REG_DWORD__d__30___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSet_servicesNlaSvcParametersInternet___v__LdapTimeoutMs___t_REG_DWORD__d__5000___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSet_servicesNlaSvcParametersInternet___v__ShowDomainEndpointInterfaces___t_REG_DWORD__d__1___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSet_servicesNlaSvcParametersInternet___v__EnableNoGatewayLocationDetection___t_REG_DWORD__d__1___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSet_servicesNlaSvcParametersInternet___v__MinimumInternetHopCount___t_REG_DWORD__d__2___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSet_servicesLanmanServerParameters___v__autodisconnect___t_REG_DWORD__d__4294967295___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSet_servicesLanmanServerParameters___v__Size___t_REG_DWORD__d__3___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSet_servicesLanmanServerParameters___v__EnableOplocks___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSet_servicesLanmanServerParameters___v__IRPStackSize___t_REG_DWORD__d__32___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSet_servicesLanmanServerParameters___v__SharingViolationDelay___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSet_servicesLanmanServerParameters___v__SharingViolationRetries___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetServicesTcpipParameters___v__DelayedAckFrequency___t_REG_DWORD__d__1___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetServicesTcpipParameters___v__DelayedAckTicks___t_REG_DWORD__d__1___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetServicesTcpipParameters___v__CongestionAlgorithm___t_REG_DWORD__d__1___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetServicesTcpipParameters___v__MultihopSets___t_REG_DWORD__d__15___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetServicesTcpipParameters___v__FastCopyReceiveThreshold___t_REG_DWORD__d__16384___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetServicesTcpipParameters___v__FastSendDatagramThreshold___t_REG_DWORD__d__16384___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetServicesAFDParameters___v__DefaultReceiveWindow___t_REG_DWORD__d__16384___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetServicesAFDParameters___v__DefaultSendWindow___t_REG_DWORD__d__16384___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetServicesAFDParameters___v__FastCopyReceiveThreshold___t_REG_DWORD__d__16384___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetServicesAFDParameters___v__FastSendDatagramThreshold___t_REG_DWORD__d__16384___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetServicesAFDParameters___v__DynamicSendBufferDisable___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetServicesAFDParameters___v__IgnorePushBitOnReceives___t_REG_DWORD__d__1___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetServicesAFDParameters___v__NonBlockingSendSpecialBuffering___t_REG_DWORD__d__1___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetServicesAFDParameters___v__DisableRawSecurity___t_REG_DWORD__d__1___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREMicrosoftWindows_NTCurrentVersionMultimediaSystemProfile___v__NetworkThrottlingIndex___t_REG_DWORD__d__4294967295___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREMicrosoftWindows_NTCurrentVersionMultimediaSystemProfile___v__SystemResponsiveness___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetServicesTcpipParameters___v__DefaultTTL___t_REG_DWORD__d__64___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetServicesTcpipParameters___v__DisableTaskOffload___t_REG_DWORD__d__1___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetServicesTcpipParameters___v__EnableConnectionRateLimiting___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetServicesTcpipParameters___v__EnableDCA___t_REG_DWORD__d__1___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetServicesTcpipParameters___v__EnablePMTUBHDetect___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetServicesTcpipParameters___v__EnablePMTUDiscovery___t_REG_DWORD__d__1___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetServicesTcpipParameters___v__EnableRSS___t_REG_DWORD__d__1___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetServicesTcpipParameters___v__TcpTimedWaitDelay___t_REG_DWORD__d__30___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetServicesTcpipParameters___v__EnableWsd___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetServicesTcpipParameters___v__GlobalMaxTcpWindowSize___t_REG_DWORD__d__65535___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetServicesTcpipParameters___v__MaxConnectionsPer1_0Server___t_REG_DWORD__d__10___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetServicesTcpipParameters___v__MaxConnectionsPerServer___t_REG_DWORD__d__10___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetServicesTcpipParameters___v__MaxFreeTcbs___t_REG_DWORD__d__65536___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetServicesTcpipParameters___v__EnableTCPA___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetServicesTcpipParameters___v__Tcp1323Opts___t_REG_DWORD__d__1___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetServicesTcpipParameters___v__TcpCreateAndConnectTcbRateLimitDepth___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetServicesTcpipParameters___v__TcpMaxDataRetransmissions___t_REG_DWORD__d__3___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetServicesTcpipParameters___v__TcpMaxDupAcks___t_REG_DWORD__d__2___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetServicesTcpipParameters___v__TcpMaxSendFree___t_REG_DWORD__d__65535___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetServicesTcpipParameters___v__TcpNumConnections___t_REG_DWORD__d__16777214___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetServicesTcpipParameters___v__MaxHashTableSize___t_REG_DWORD__d__65536___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetServicesTcpipParameters___v__MaxUserPort___t_REG_DWORD__d__65534___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetServicesTcpipParameters___v__SackOpts___t_REG_DWORD__d__1___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetServicesTcpipParameters___v__SynAttackProtect___t_REG_DWORD__d__1___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREMicrosoftMSMQParameters___v__TCPNoDelay___t_REG_DWORD__d__1___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREPoliciesMicrosoftWindowsPsched___v__NonBestEffortLimit___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetServicesPsched___v__NonBestEffortLimit___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetServicesLanmanWorkstationParameters___v__MaxCmds___t_REG_DWORD__d__30___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetServicesLanmanWorkstationParameters___v__MaxThreads___t_REG_DWORD__d__30___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetServicesLanmanWorkstationParameters___v__MaxCollectionCount___t_REG_DWORD__d__32___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetServicesLanmanServerParameters___v__IRPStackSize___t_REG_DWORD__d__50___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetServicesLanmanServerParameters___v__SizReqBuf___t_REG_DWORD__d__17424___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetServicesLanmanServerParameters___v__Size___t_REG_DWORD__d__3___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetServicesLanmanServerParameters___v__MaxWorkItems___t_REG_DWORD__d__8192___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetServicesLanmanServerParameters___v__MaxMpxCt___t_REG_DWORD__d__2048___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetServicesLanmanServerParameters___v__MaxCmds___t_REG_DWORD__d__2048___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetServicesLanmanServerParameters___v__DisableStrictNameChecking___t_REG_DWORD__d__1___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSet_servicesLanmanServerParameters___v__autodisconnect___t_REG_DWORD__d__4294967295___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSet_servicesLanmanServerParameters___v__Size___t_REG_DWORD__d__3___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSet_servicesLanmanServerParameters___v__EnableOplocks___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSet_servicesLanmanServerParameters___v__IRPStackSize___t_REG_DWORD__d__32___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSet_servicesLanmanServerParameters___v__SharingViolationDelay___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSet_servicesLanmanServerParameters___v__SharingViolationRetries___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetServicesTcpipParameters___v__DataBasePath___t_REG_EXPAND_SZ__d____SystemRoot__System32driversetc___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetServicesTcpipParameters___v__Domain___t_REG_SZ__d_____f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetServicesTcpipParameters___v__ForwardBroadcasts___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetServicesTcpipParameters___v__ICSDomain___t_REG_SZ__d__mshome.net___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetServicesTcpipParameters___v__IPEnableRouter___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetServicesTcpipParameters___v__NameServer___t_REG_SZ__d_____f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetServicesTcpipParameters___v__SyncDomainWithMembership___t_REG_DWORD__d__1___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetServicesTcpipParameters___v__NV_Hostname___t_REG_SZ__d__Internet___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetServicesTcpipParameters___v__Hostname___t_REG_SZ__d__Internet___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetServicesTcpipParameters___v__DisableTaskOffload___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetServicesTcpipParameters___v__TcpNumConnections___t_REG_DWORD__d__1280___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetServicesTcpipParameters___v__EnableConnectionRateLimiting___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetServicesTcpipParameters___v__EnableWsd___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetServicesTcpipParameters___v__DefaultTTL___t_REG_DWORD__d__64___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetServicesTcpipParameters___v__MaxUserPort___t_REG_DWORD__d__65534___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetServicesTcpipParameters___v__TcpTimedWaitDelay___t_REG_DWORD__d__32___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetServicesTcpipParameters___v__EnableDCA___t_REG_DWORD__d__1___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetServicesTcpipParameters___v__DisableLargeMtu___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetServicesTcpipParameters___v__Tcp1323Opts___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetServicesTcpipParameters___v__EnableTCPA___t_REG_DWORD__d__1___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetServicesTcpipParameters___v__EnableRSS___t_REG_DWORD__d__1___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetServicesTcpipParameters___v__TCPMaxDataRetransmissions___t_REG_DWORD__d__5___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetServicesTcpipParameters___v__SynAttackProtect___t_REG_DWORD__d__1___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetServicesTcpipParameters___v__MaxFreeTcbs___t_REG_DWORD__d__65535___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetServicesTcpipParameters___v__MaxHashTableSize___t_REG_DWORD__d__4096___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetServicesTcpipParameters___v__TcpAckFrequency___t_REG_DWORD__d__1___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetServicesTcpipParameters___v__TCPDelAckTicks___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetServicesTcpipParameters___v__GlobalMaxTcpWindowSize___t_REG_DWORD__d__8760___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetServicesTcpipParameters___v__SackOpts___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetServicesTcpipParameters___v__TcpWindowSize___t_REG_DWORD__d__8760___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetServicesTcpipParameters___v__EnablePMTUBHDetect___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetServicesTcpipParameters___v__EnablePMTUDiscovery___t_REG_DWORD__d__1___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetServicesTcpipParameters___v__TcpCreateAndConnectTcbRateLimitDepth___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetServicesTcpipParameters___v__TCPNoDelay___t_REG_DWORD__d__1___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetServicesTcpipParameters___v__MaxConnectionsPerServer___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetServicesTcpipParameters___v__MaxConnectionsPer1_0Server___t_REG_DWORD__d__16___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetServicesTcpipParameters___v__TcpMaxDupAcks___t_REG_DWORD__d__2___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetServicesTcpipParameters___v__New_Value_1___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetServicesTcpipParameters___v__SearchList___t_REG_SZ__d_____f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetServicesTcpipParametersAdapters18d65aae_48f4_4b26_927f_67eafbd2d41f___v__LLInterface___t_REG_SZ__d_____f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetServicesTcpipParametersAdapters18d65aae_48f4_4b26_927f_67eafbd2d41f___v__IpConfig___t_REG_MULTI_SZ__d__TcpipParametersInterfaces18D65AAE_48F4_4B26_927F_67EAFBD2D41F___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetServicesTcpipParametersAdapters2a63c914_2233_4a20_ac69_7c32042ad916___v__LLInterface___t_REG_SZ__d_____f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetServicesTcpipParametersAdapters2a63c914_2233_4a20_ac69_7c32042ad916___v__IpConfig___t_REG_MULTI_SZ__d__TcpipParametersInterfaces2A63C914_2233_4A20_AC69_7C32042AD916___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetServicesTcpipParametersAdapters366372ba_bb53_4caa_bedd_2568b03937fd___v__LLInterface___t_REG_SZ__d_____f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetServicesTcpipParametersAdapters366372ba_bb53_4caa_bedd_2568b03937fd___v__IpConfig___t_REG_MULTI_SZ__d__TcpipParametersInterfaces366372BA_BB53_4CAA_BEDD_2568B03937FD___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetServicesTcpipParametersAdapters40ccfff1_af30_4724_95e7_82dbf4fe9bae___v__LLInterface___t_REG_SZ__d_____f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetServicesTcpipParametersAdapters40ccfff1_af30_4724_95e7_82dbf4fe9bae___v__IpConfig___t_REG_MULTI_SZ__d__TcpipParametersInterfaces40CCFFF1_AF30_4724_95E7_82DBF4FE9BAE___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetServicesTcpipParametersAdapters58d25b8b_00b5_4587_84ae_6b78c4d4282e___v__LLInterface___t_REG_SZ__d_____f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetServicesTcpipParametersAdapters58d25b8b_00b5_4587_84ae_6b78c4d4282e___v__IpConfig___t_REG_MULTI_SZ__d__TcpipParametersInterfaces58D25B8B_00B5_4587_84AE_6B78C4D4282E___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetServicesTcpipParametersAdapters7834821a_16fd_45e6_afb3_eea2c3e1698b___v__LLInterface___t_REG_SZ__d_____f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetServicesTcpipParametersAdapters7834821a_16fd_45e6_afb3_eea2c3e1698b___v__IpConfig___t_REG_MULTI_SZ__d__TcpipParametersInterfaces7834821A_16FD_45E6_AFB3_EEA2C3E1698B___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetServicesTcpipParametersAdapters7aa39c3d_5190_422a_ab7b_6b7fe6510454___v__LLInterface___t_REG_SZ__d_____f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetServicesTcpipParametersAdapters7aa39c3d_5190_422a_ab7b_6b7fe6510454___v__IpConfig___t_REG_MULTI_SZ__d__TcpipParametersInterfaces7AA39C3D_5190_422A_AB7B_6B7FE6510454___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetServicesTcpipParametersAdaptersb72e35d8_de3b_4461_a9ca_d1bbc33af399___v__LLInterface___t_REG_SZ__d_____f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetServicesTcpipParametersAdaptersb72e35d8_de3b_4461_a9ca_d1bbc33af399___v__IpConfig___t_REG_MULTI_SZ__d__TcpipParametersInterfacesB72E35D8_DE3B_4461_A9CA_D1BBC33AF399___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetServicesTcpipParametersAdaptersd6859c63_a716_4df1_b1dc_4024fe819025___v__LLInterface___t_REG_SZ__d_____f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetServicesTcpipParametersAdaptersd6859c63_a716_4df1_b1dc_4024fe819025___v__IpConfig___t_REG_MULTI_SZ__d__TcpipParametersInterfacesD6859C63_A716_4DF1_B1DC_4024FE819025___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetServicesTcpipParametersAdaptersf2661e82_e030_4002_9ecb_d5f8f7362d7d___v__LLInterface___t_REG_SZ__d_____f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetServicesTcpipParametersAdaptersf2661e82_e030_4002_9ecb_d5f8f7362d7d___v__IpConfig___t_REG_MULTI_SZ__d__TcpipParametersInterfacesF2661E82_E030_4002_9ECB_D5F8F7362D7D___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetServicesTcpipParametersDNSRegisteredAdapters___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetServicesTcpipParametersInterfaces___v__TcpAckFrequency___t_REG_DWORD__d__1___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetServicesTcpipParametersInterfaces___v__TCPNoDelay___t_REG_DWORD__d__1___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetServicesTcpipParametersInterfaces___v__TcpDelAckTicks___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetServicesTcpipParametersInterfaces___v__MTU___t_REG_DWORD__d__5234___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetServicesTcpipParametersInterfaces___v__TcpDelAckTricks___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetServicesTcpipParametersInterfaces___v__TcpWindowSize___t_REG_DWORD__d__1907___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetServicesTcpipParametersInterfaces___v__MSS___t_REG_DWORD__d__5216___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetServicesTcpipParametersInterfaces___v__SackOpts___t_REG_DWORD__d__1___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetServicesTcpipParametersInterfaces___v__WorldMaxTcpWindowsSize___t_REG_DWORD__d__3311760___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetServicesTcpipParametersInterfaces___v__TCPInitialRtt___t_REG_DWORD__d__32767___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetServicesTcpipParametersInterfaces___v__IRPStackSize___t_REG_DWORD__d__50___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetServicesTcpipParametersInterfaces___v__EnablePMTUBHDetect___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetServicesTcpipParametersInterfaces___v__EnablePMTUDiscovery___t_REG_DWORD__d__1___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetServicesTcpipParametersInterfaces___v__GlobalMaxTcpWindowSize___t_REG_DWORD__d__1907___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetServicesTcpipParametersInterfaces___v__Tcp1323Opts___t_REG_DWORD__d__3___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetServicesTcpipParametersInterfaces___v__TcpMaxDataRetransmissions___t_REG_DWORD__d__3___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetServicesTcpipParametersInterfaces___v__MaxMTU___t_REG_DWORD__d__5234___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetServicesTcpipParametersInterfaces___v__MaxMSS___t_REG_DWORD__d__5216___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetServicesTcpipParametersInterfaces___v__TCPAllowedPorts___t_REG_DWORD__d__1___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetServicesTcpipParametersInterfaces___v__NTEContextList___t_REG_DWORD__d__1___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetServicesTcpipParametersInterfaces___v__EnableDynamicBacklog___t_REG_DWORD__d__1___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetServicesTcpipParametersInterfaces___v__KeepAliveInterval___t_REG_DWORD__d__1___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetServicesTcpipParametersInterfaces_GUID____v__TcpACKFrequency___t_REG_DWORD__d__4___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetServicesTcpipParametersInterfaces_GUID____v__TcpDelAckTicks___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetServicesTcpipParametersInterfaces_GUID____v__TCPNoDelay___t_REG_DWORD__d__1___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetServicesTcpipParametersInterfaces_GUID____v__PerformRouterDiscovery___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetServicesTcpipParametersInterfaces_GUID____v__InterfaceMetric___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetServicesTcpipParametersInterfaces58d25b8b_00b5_4587_84ae_6b78c4d4282e___v__EnableDHCP___t_REG_DWORD__d__1___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetServicesTcpipParametersInterfaces58d25b8b_00b5_4587_84ae_6b78c4d4282e___v__Domain___t_REG_SZ__d_____f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetServicesTcpipParametersInterfaces58d25b8b_00b5_4587_84ae_6b78c4d4282e___v__NameServer___t_REG_SZ__d_____f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetServicesTcpipParametersInterfaces58d25b8b_00b5_4587_84ae_6b78c4d4282e___v__TcpAckFrequency___t_REG_DWORD__d__1___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetServicesTcpipParametersInterfaces5ac321d9_9fc0_4da8_bcd1_399fabf040e5___v__VPNInterface___t_REG_DWORD__d__1___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetServicesTcpipParametersInterfaces5ac321d9_9fc0_4da8_bcd1_399fabf040e5___v__TcpAckFrequency___t_REG_DWORD__d__1___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetServicesTcpipParametersInterfaces5ac321d9_9fc0_4da8_bcd1_399fabf040e5___v__TCPNoDelay___t_REG_DWORD__d__1___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetServicesTcpipParametersInterfaces5ac321d9_9fc0_4da8_bcd1_399fabf040e5___v__TcpDelAckTicks___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetServicesTcpipParametersInterfaces5ac321d9_9fc0_4da8_bcd1_399fabf040e5___v__UseZeroBroadcast___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetServicesTcpipParametersInterfaces5ac321d9_9fc0_4da8_bcd1_399fabf040e5___v__EnableDeadGWDetect___t_REG_DWORD__d__1___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetServicesTcpipParametersInterfaces5ac321d9_9fc0_4da8_bcd1_399fabf040e5___v__NameServer___t_REG_SZ__d_____f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetServicesTcpipParametersInterfaces5ac321d9_9fc0_4da8_bcd1_399fabf040e5___v__Domain___t_REG_SZ__d_____f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetServicesTcpipParametersInterfaces5ac321d9_9fc0_4da8_bcd1_399fabf040e5___v__RegistrationEnabled___t_REG_DWORD__d__1___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetServicesTcpipParametersInterfaces5ac321d9_9fc0_4da8_bcd1_399fabf040e5___v__RegisterAdapterName___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetServicesTcpipParametersInterfaces5ac321d9_9fc0_4da8_bcd1_399fabf040e5___v__Lease___t_REG_DWORD__d__130___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetServicesTcpipParametersInterfaces5ac321d9_9fc0_4da8_bcd1_399fabf040e5___v__LeaseObtainedTime___t_REG_DWORD__d__1465339910___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetServicesTcpipParametersInterfaces5ac321d9_9fc0_4da8_bcd1_399fabf040e5___v__T1___t_REG_DWORD__d__1465339975___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetServicesTcpipParametersInterfaces5ac321d9_9fc0_4da8_bcd1_399fabf040e5___v__T2___t_REG_DWORD__d__1465340023___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetServicesTcpipParametersInterfaces5ac321d9_9fc0_4da8_bcd1_399fabf040e5___v__LeaseTerminatesTime___t_REG_DWORD__d__1465340040___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetServicesTcpipParametersInterfaces5ac321d9_9fc0_4da8_bcd1_399fabf040e5___v__AddressType___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetServicesTcpipParametersInterfaces5ac321d9_9fc0_4da8_bcd1_399fabf040e5___v__IsServerNapAware___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetServicesTcpipParametersInterfaces5ac321d9_9fc0_4da8_bcd1_399fabf040e5___v__MTU___t_REG_DWORD__d__5376___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetServicesTcpipParametersInterfaces5ac321d9_9fc0_4da8_bcd1_399fabf040e5___v__MSS___t_REG_DWORD__d__5216___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetServicesTcpipParametersInterfaces5ac321d9_9fc0_4da8_bcd1_399fabf040e5___v__TcpWindowSize___t_REG_DWORD__d__65535___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetServicesTcpipParametersInterfaces5ac321d9_9fc0_4da8_bcd1_399fabf040e5___v__Tcp1323Opts___t_REG_DWORD__d__1___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetServicesTcpipParametersInterfaces5ac321d9_9fc0_4da8_bcd1_399fabf040e5___v__TCPTimedWaitDelay___t_REG_DWORD__d__30___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetServicesTcpipParametersInterfaces5ac321d9_9fc0_4da8_bcd1_399fabf040e5___v__SackOpts___t_REG_DWORD__d__1___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUControl_PanelMouse___v__ActiveWindowTracking___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUControl_PanelMouse___v__Beep___t_REG_SZ__d__No___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUControl_PanelMouse___v__DoubleClickHeight___t_REG_SZ__d__4___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUControl_PanelMouse___v__DoubleClickSpeed___t_REG_SZ__d__620___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUControl_PanelMouse___v__DoubleClickWidth___t_REG_SZ__d__4___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUControl_PanelMouse___v__ExtendedSounds___t_REG_SZ__d__No___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUControl_PanelMouse___v__MouseHoverHeight___t_REG_SZ__d__4___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUControl_PanelMouse___v__MouseHoverTime___t_REG_SZ__d__100___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUControl_PanelMouse___v__MouseHoverWidth___t_REG_SZ__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUControl_PanelMouse___v__MouseSensitivity___t_REG_SZ__d__10___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUControl_PanelMouse___v__MouseSpeed___t_REG_SZ__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUControl_PanelMouse___v__MouseThreshold1___t_REG_SZ__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUControl_PanelMouse___v__MouseThreshold2___t_REG_SZ__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUControl_PanelMouse___v__MouseTrails___t_REG_SZ__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUControl_PanelMouse___v__SmoothMouseXCurve___t_REG_BINARY__d__0000000000000000c0cc0c0000000000809919000000000040662600000000000033330000000000___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUControl_PanelMouse___v__SmoothMouseYCurve___t_REG_BINARY__d__0000000000000000000038000000000000007000000000000000a800000000000000e00000000000___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUControl_PanelMouse___v__SnapToDefaultButton___t_REG_SZ__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUControl_PanelMouse___v__SwapMouseButtons___t_REG_SZ__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetServicesAFDParameters___v__DefaultSendWindow___t_REG_DWORD__d__1048576___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetServicesAFDParameters___v__DefaultReceiveWindow___t_REG_DWORD__d__1048576___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetServicesAFDParameters___v__FastSendDatagramThreshold___t_REG_DWORD__d__1500___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetServicesAFDParameters___v__FastCopyReceiveThreshold___t_REG_DWORD__d__1500___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUSoftwareMicrosoftWindowsCurrentVersionInternet_Settings___v__CertificateRevocation___t_REG_DWORD__d__1___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUSoftwareMicrosoftWindowsCurrentVersionInternet_Settings___v__DisableCachingOfSSLPages___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUSoftwareMicrosoftWindowsCurrentVersionInternet_Settings___v__IE5_UA_Backup_Flag___t_REG_SZ__d__5.0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUSoftwareMicrosoftWindowsCurrentVersionInternet_Settings___v__PrivacyAdvanced___t_REG_DWORD__d__1___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUSoftwareMicrosoftWindowsCurrentVersionInternet_Settings___v__SecureProtocols___t_REG_DWORD__d__10240___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUSoftwareMicrosoftWindowsCurrentVersionInternet_Settings___v__User_Agent___t_REG_SZ__d__Mozilla_4.0__compatible__MSIE_8.0__Win32____f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUSoftwareMicrosoftWindowsCurrentVersionInternet_Settings___v__DisablePasswordCaching___t_REG_DWORD__d__1___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUSoftwareMicrosoftWindowsCurrentVersionInternet_Settings___v__ZonesSecurityUpgrade___t_REG_BINARY__d__8d3020d11bebd801___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUSoftwareMicrosoftWindowsCurrentVersionInternet_Settings___v__WarnonZoneCrossing___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUSoftwareMicrosoftWindowsCurrentVersionInternet_Settings___v__EnableNegotiate___t_REG_DWORD__d__1___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUSoftwareMicrosoftWindowsCurrentVersionInternet_Settings___v__ProxyEnable___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUSoftwareMicrosoftWindowsCurrentVersionInternet_Settings___v__MigrateProxy___t_REG_DWORD__d__1___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUSoftwareMicrosoftWindowsCurrentVersionInternet_Settings___v__MaxConnectionsPerServer___t_REG_DWORD__d__22___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUSoftwareMicrosoftWindowsCurrentVersionInternet_Settings___v__MaxConnectionsPer1_0Server___t_REG_DWORD__d__22___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUSoftwareMicrosoftWindowsCurrentVersionInternet_Settings5.0Cache___v__ContentLimit___t_REG_DWORD__d__330___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUSoftwareMicrosoftWindowsCurrentVersionInternet_Settings5.0Cache___v__TotalContentLimit___t_REG_DWORD__d__495___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUSoftwareMicrosoftWindowsCurrentVersionInternet_Settings5.0Cache___v__AppContainerTotalContentLimit___t_REG_DWORD__d__1000___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUSoftwareMicrosoftWindowsCurrentVersionInternet_Settings5.0Cache___v__AppContainerContentLimit___t_REG_DWORD__d__50___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUSoftwareMicrosoftWindowsCurrentVersionInternet_Settings5.0Cache___v__Version___t_REG_DWORD__d__4___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUSoftwareMicrosoftWindowsCurrentVersionInternet_Settings5.0CacheContent___v__CachePrefix___t_REG_SZ__d_____f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUSoftwareMicrosoftWindowsCurrentVersionInternet_Settings5.0CacheContent___v__CacheVersion___t_REG_DWORD__d__1___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUSoftwareMicrosoftWindowsCurrentVersionInternet_Settings5.0CacheContent___v__CacheLimit___t_REG_DWORD__d__337920___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUSoftwareMicrosoftWindowsCurrentVersionInternet_Settings5.0CacheCookies___v__CachePrefix___t_REG_SZ__d__Cookie:___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUSoftwareMicrosoftWindowsCurrentVersionInternet_Settings5.0CacheCookies___v__CacheVersion___t_REG_DWORD__d__1___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUSoftwareMicrosoftWindowsCurrentVersionInternet_Settings5.0CacheCookies___v__CacheLimit___t_REG_DWORD__d__1___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUSoftwareMicrosoftWindowsCurrentVersionInternet_Settings5.0CacheExtensible_Cache_feedplat___v__CachePrefix___t_REG_SZ__d__feedplat:___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUSoftwareMicrosoftWindowsCurrentVersionInternet_Settings5.0CacheExtensible_Cache_feedplat___v__CachePath___t_REG_SZ__d__C:UserswinchesterAppDataLocalMicrosoftFeeds_Cache___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUSoftwareMicrosoftWindowsCurrentVersionInternet_Settings5.0CacheExtensible_Cache_feedplat___v__CacheRelativePath___t_REG_SZ__d__MicrosoftFeeds_Cache___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUSoftwareMicrosoftWindowsCurrentVersionInternet_Settings5.0CacheExtensible_Cache_feedplat___v__CacheOptions___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUSoftwareMicrosoftWindowsCurrentVersionInternet_Settings5.0CacheExtensible_Cache_feedplat___v__CacheRepair___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUSoftwareMicrosoftWindowsCurrentVersionInternet_Settings5.0CacheExtensible_Cache_feedplat___v__CacheLimit___t_REG_DWORD__d__1___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.bcdedit__deletevalue_useplatformclock
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.bcdedit__set_disabledynamictick_yes
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.bcdedit__set_useplatformtick_yes
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.bcdedit__timeout_0
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.bcdedit__set_nx_optout
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.bcdedit__set_bootux_disabled
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.bcdedit__set_bootmenupolicy_standard
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.bcdedit__set_hypervisorlaunchtype_off
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.bcdedit__set_tpmbootentropy_ForceDisable
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.bcdedit__set_quietboot_yes
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.bcdedit__set_globalsettings_custom:16000067_true
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.bcdedit__set_globalsettings_custom:16000069_true
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.bcdedit__set_globalsettings_custom:16000068_true
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.bcdedit__set_linearaddress57_OptOut
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.bcdedit__set_increaseuserva_268435328
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.bcdedit__set_firstmegabytepolicy_UseAll
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.bcdedit__set_avoidlowmemory_0x8000000
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.bcdedit__set_nolowmem_Yes
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.bcdedit__set_allowedinmemorysettings_0x0
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.bcdedit__set_isolatedcontext_No
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.bcdedit__set_vsmlaunchtype_Off
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.bcdedit__set_vm_No
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.bcdedit__set_configaccesspolicy_Default
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.bcdedit__set_MSI_Default
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.bcdedit__set_usephysicaldestination_No
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.bcdedit__set_usefirmwarepcisettings_No
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREMicrosoftWindows_NTCurrentVersionMultimediaSystemProfile___v__SystemResponsiveness___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetServicesDXGKrnl___v__MonitorLatencyTolerance___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetServicesDXGKrnl___v__MonitorRefreshLatencyTolerance___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.bcdedit__deletevalue_useplatformclock
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.bcdedit__set_disabledynamictick_yes
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.bcdedit__set_useplatformtick_yes
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.bcdedit__timeout_0
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.bcdedit__set_nx_optout
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.bcdedit__set_bootux_disabled
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.bcdedit__set_bootmenupolicy_standard
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.bcdedit__set_hypervisorlaunchtype_off
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.bcdedit__set_tpmbootentropy_ForceDisable
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.bcdedit__set_quietboot_yes
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.bcdedit__set_globalsettings_custom:16000067_true
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.bcdedit__set_globalsettings_custom:16000069_true
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.bcdedit__set_globalsettings_custom:16000068_true
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.bcdedit__set_linearaddress57_OptOut
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.bcdedit__set_increaseuserva_268435328
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.bcdedit__set_firstmegabytepolicy_UseAll
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.bcdedit__set_avoidlowmemory_0x8000000
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.bcdedit__set_useplatformtick_yes
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.bcdedit__set_disabledynamictick_yes
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.bcdedit__deletevalue_useplatformclock
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.bcdedit__set_nolowmem_Yes
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.bcdedit__set_allowedinmemorysettings_0x0
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.bcdedit__set_isolatedcontext_No
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.bcdedit__set_vsmlaunchtype_Off
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.bcdedit__set_vm_No
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.bcdedit__set_configaccesspolicy_Default
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.bcdedit__set_MSI_Default
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.bcdedit__set_usephysicaldestination_No
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.bcdedit__set_usefirmwarepcisettings_No
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_config_GraphicsPerfSvc_start_Disabled
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.net_stop_GraphicsPerfSvc
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.pause
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
add rsp, 0x28
jmp fcn.140002620