Function at 0x1403fb3e0
Capabilities:
Set registry value

Disassembly:
push r15
lahf
push r14
setle r14b
ror rax, 0x2d
push r13
bts r14w, ax
push r12
push rsi
push rdi
rcr r13b, 0x52
cmc
rcl si, cl
push rbp
shl ebp, 0x53
bswap eax
ror r14w, 0xe9
push rbx
sub rsp, 0x2f8
movabs rax, 0xe009ec3224c8fd6e
not sil
movsxd rbx, r12d
mov qword [rsp + 0x2e0], rax
jmp 0x1403fb433
mov qword [rsp + 0x40], rax
cwde
movabs rax, 0x2204bcb80ebea5a3
movzx r12d, bx
mov qword [rsp + 0x2d8], rax
mov bx, 0x1fc3
mov qword [rsp + 0x48], rax
not r13w
movabs rax, 0xfbc9f38de01f2fa2
bswap rbp
mov qword [rsp + 0x2d0], rax
movzx rbp, r15w
mov qword [rsp + 0x50], rax
mov ebp, r13d
cdqe
movsx r12d, r12w
movabs rax, 0x17a75ff95317a686
movzx r15w, spl
mov sil, 0xef
mov qword [rsp + 0x2c8], rax
bswap r15d
mov qword [rsp + 0x58], rax
movsxd r14, edx
bswap rdi
lahf
movabs rax, 0xfd99d5578f55fa6f
xchg bpl, r15b
not bp
mov qword [rsp + 0x2c0], rax
mov qword [rsp + 0x60], rax
cwde
movzx r13d, r9w
movabs rax, 0x4b3964fdcd447246
mov qword [rsp + 0x2b8], rax
movzx rdi, r12w
mov qword [rsp + 0x68], rax
movabs rax, 0xee88324679eb2227
mov r12b, spl
mov qword [rsp + 0x2b0], rax
cmovs r15w, r13w
xchg r15b, bl
movsx r15, r11w
mov qword [rsp + 0x70], rax
lahf
movsx r14d, r14w
mov di, bp
movabs rax, 0x6d7346ad6d4ffefa
movzx r15, r9w
movsx rdi, dx
mov qword [rsp + 0x2a8], rax
movzx rbx, r11w
mov qword [rsp + 0x78], rax
bswap bp
movabs rax, 0xd093683aef376a76
not rbx
movsx rsi, bx
movzx r14, bx
mov qword [rsp + 0x2a0], rax
setp sil
movzx r14w, r14b
cmovnp di, r14w
mov qword [rsp + 0x80], rax
movabs rax, 0xa80f93e9d32b8c6f
movsx si, r10b
mov qword [rsp + 0x298], rax
movzx r14, r15w
setb r12b
mov qword [rsp + 0x88], rax
movabs rax, 0x33e730243394033e
mov bp, sp
movzx rsi, r9w
bswap ebx
mov qword [rsp + 0x290], rax
jmp 0x1403fb5ba
mov qword [rsp + 0x90], rax
movsx rdi, r8w
cmovbe ebx, edx
movzx si, sil
movabs rax, 0xe7e3977e114e6703
cmovs ebp, r11d
mov r15, 0x7a080525
mov qword [rsp + 0x288], rax
mov qword [rsp + 0x98], rax
not r14b
mov r14b, r14b
lahf
movabs rax, 0xb0b65ec58a603c8
movzx rbp, r15w
mov qword [rsp + 0x280], rax
mov si, 0x2d1
movzx r12d, si
movzx r14w, r13b
mov qword [rsp + 0xa0], rax
mov r13w, dx
movsx ebx, r9w
movabs rax, 0x6708be65ca8156d7
mov rbp, 0x2b8e16df
mov qword [rsp + 0x278], rax
movsx r15d, si
movsx rbx, bp
movsx bp, r15b
mov qword [rsp + 0xa8], rax
bswap r12w
movsx bx, r13b
movabs rax, 0x46a7044da5524090
bswap r14d
setge dil
jmp 0x1403fb67a
mov qword [rsp + 0x270], rax
mov bpl, 0xa2
mov qword [rsp + 0xb0], rax
cmovle di, di
mov r15, 0x56273ff6
xchg r14b, bl
movabs rax, 0x4b8cb541ca050f46
mov qword [rsp + 0x268], rax
mov qword [rsp + 0xb8], rax
cbw
movsxd r13, r15d
movabs rax, 0xe627ab41184af921
xchg si, bp
cmova r13w, sp
mov qword [rsp + 0x260], rax
jmp 0x1403fb6e1
mov qword [rsp + 0xc0], rax
movsx bx, r14b
bswap bx
xchg ebp, r13d
movabs rax, 0x34c77b6e31b9a
movsx r12w, spl
movsx edi, r10w
mov qword [rsp + 0x258], rax
mov qword [rsp + 0xc8], rax
movabs rax, 0xd8cf4ec0049852bb
mov rbx, rbp
mov qword [rsp + 0xd0], rax
xchg r14d, r14d
cdqe
movabs rax, 0xa5eac9844f8ea419
movsx r14d, dx
movsx r13w, spl
jmp 0x1403fb749
mov qword [rsp + 0xd8], rax
lahf
movsx edi, r9w
movzx r14, r14w
mov qword [rsp + 0x30], 0
setp r13b
mov dword [rsp + 0x3c], 0
movabs rbp, 0x2eb490333e21dae3
cmovne r13w, r9w
mov sil, r11b
movzx esi, r13w
mov qword [rsp + 0xe0], rbp
movsx r15d, sp
movabs r14, 0x28903e48668cb956
mov si, 0x174c
mov qword [rsp + 0xe8], r14
movzx r15w, bpl
movsx rsi, bp
movabs r15, 0xe05dec612491fd3d
cdqe
cwde
not rsi
mov qword [rsp + 0x100], r15
mov r12b, r11b
not bh
movabs r12, 0x2247bce40ef3a5e6
cdqe
xchg rsi, rbx
movzx rsi, si
mov qword [rsp + 0x108], r12
movabs rsi, 0xfbacf3ffe06d2fd7
mov qword [rsp + 0x110], rsi
movsx rax, cx
movzx r13w, r8b
jmp 0x1403fb808
movabs rdi, 0x17c85fba5363a6e8
movzx rax, r12w
mov qword [rsp + 0x118], rdi
movsxd r13, r14d
setnp bl
xchg ah, bh
movabs rax, 0xfdf6d5258f21fa01
jmp 0x1403fb835
mov qword [rsp + 0x120], rax
movsx r13d, sp
mov rbx, rax
bswap rax
movabs rax, 0x4b4d6498cd17722a
xchg r13, r13
movzx r13w, dl
mov qword [rsp + 0x2f0], rax
mov qword [rsp + 0x128], rax
movabs rax, 0xeefa322379b8227b
bswap r13
mov qword [rsp + 0x250], rax
setnp r13b
mov qword [rsp + 0x130], rax
movsxd rax, r11d
movabs rax, 0x6d1646ce6d26fe8c
not r13w
movsx r13d, dx
mov qword [rsp + 0x248], rax
jmp 0x1403fb8b2
mov qword [rsp + 0x138], rax
cbw
cwde
movabs rax, 0xd0fb6869ef6b6a05
movsx r13d, r10w
mov qword [rsp + 0x240], rax
movsx r13w, r14b
mov qword [rsp + 0x140], rax
movabs rax, 0xa86b938cd3598c0e
mov qword [rsp + 0x238], rax
movsx r13d, sp
mov r13b, 0x75
not r13w
mov qword [rsp + 0x148], rax
movzx rax, r11w
cbw
movabs rax, 0x3382304733f7037f
movsx r13d, bx
not r13w
mov qword [rsp + 0x230], rax
mov qword [rsp + 0x150], rax
not r13w
movsx rax, bp
movabs rax, 0xe7b39722113d6770
setbe r13b
xchg r13b, r13b
mov r13w, 0x2e5e
mov qword [rsp + 0x228], rax
jmp 0x1403fb95c
mov qword [rsp + 0x158], rax
movabs rax, 0xb66658d58d403a9
mov r13b, bpl
mov qword [rsp + 0x220], rax
mov qword [rsp + 0x160], rax
bswap ax
mov r13d, 0x145d6b3f
movabs rax, 0x677abe00caf556b2
setp r13b
movsxd r13, r10d
movzx r13w, dil
mov qword [rsp + 0x218], rax
cmovns r13, rbp
bswap r13w
jmp 0x1403fb9b5
mov qword [rsp + 0x168], rax
cwde
movabs rax, 0x46ce040ba50e40e3
not r13b
mov r13w, 0x14b3
movzx r13, cx
mov qword [rsp + 0x210], rax
mov qword [rsp + 0x170], rax
movabs rax, 0x4bedb536ca600f34
movzx r13d, r11w
movzx r13w, spl
movsx r13, di
mov qword [rsp + 0x208], rax
mov qword [rsp + 0x178], rax
movabs rax, 0xe648ab111826f94d
xchg r13b, r13b
mov r13b, r8b
movzx r13, r10w
mov qword [rsp + 0x200], rax
setl r13b
mov qword [rsp + 0x180], rax
cmovg ax, r10w
movsxd r13, ecx
movabs rax, 0x7a4c14b68a1bf6
mov qword [rsp + 0x1f8], rax
cmovl r13w, r13w
movsx r13w, dl
not r13d
mov qword [rsp + 0x188], rax
xchg al, r13b
movabs rax, 0xd8a24eaf04dc52e7
mov qword [rsp + 0x1f0], rax
cmovb r13w, r14w
mov qword [rsp + 0x190], rax
movabs rax, 0xa5bac9ea4fe7a478
not r13b
cmovs r13d, edi
movsxd r13, esp
mov qword [rsp + 0x1e8], rax
mov qword [rsp + 0x198], rax
cmovns r13w, bx
movzx r13w, sil
cwde
movabs rax, 0x2edd90553e4eda91
mov qword [rsp + 0x1e0], rax
movzx r13d, r13w
cmovae r13w, r13w
xchg r13, r13
mov qword [rsp + 0x1a0], rax
bswap r13w
cdqe
movsxd r13, edx
movabs rax, 0x28903e4866e9b93a
mov qword [rsp + 0x1d8], rax
movsx r13d, bx
movzx r13, dx
cmovb r13d, r14d
mov qword [rsp + 0x1a8], rax
setae r13b
movzx r13w, bpl
lea r13, [rsp + 0x100]
movsx ax, al
movzx eax, r12w
movzx rax, r13w
mov rax, r13
movaps xmm0, xmmword [rsp + 0x40]
jmp 0x1403fbb32
xorps xmm0, xmmword [rax]
movaps xmmword [rsp + 0x40], xmm0
movaps xmm0, xmmword [rsp + 0x50]
xorps xmm0, xmmword [rax + 0x10]
movaps xmmword [rsp + 0x50], xmm0
jmp 0x1403fbb4d
movaps xmm0, xmmword [rsp + 0x60]
jmp 0x1403fbb57
xorps xmm0, xmmword [rax + 0x20]
movaps xmmword [rsp + 0x60], xmm0
jmp 0x1403fbb65
movaps xmm0, xmmword [rsp + 0x70]
jmp 0x1403fbb6f
xorps xmm0, xmmword [rax + 0x30]
movaps xmmword [rsp + 0x70], xmm0
jmp 0x1403fbb7d
movaps xmm0, xmmword [rsp + 0x80]
xorps xmm0, xmmword [rax + 0x40]
movaps xmmword [rsp + 0x80], xmm0
jmp 0x1403fbb96
movaps xmm0, xmmword [rsp + 0x90]
jmp 0x1403fbba3
xorps xmm0, xmmword [rax + 0x50]
movaps xmmword [rsp + 0x90], xmm0
movaps xmm0, xmmword [rsp + 0xa0]
xorps xmm0, xmmword [rax + 0x60]
movaps xmmword [rsp + 0xa0], xmm0
movaps xmm0, xmmword [rsp + 0xb0]
xorps xmm0, xmmword [rax + 0x70]
movaps xmmword [rsp + 0xb0], xmm0
jmp 0x1403fbbdc
movaps xmm0, xmmword [rsp + 0xc0]
jmp 0x1403fbbe9
xorps xmm0, xmmword [rax + 0x80]
movaps xmmword [rsp + 0xc0], xmm0
movaps xmm0, xmmword [rsp + 0xd0]
jmp 0x1403fbc05
xorps xmm0, xmmword [rax + 0x90]
movaps xmmword [rsp + 0xd0], xmm0
jmp 0x1403fbc19
movaps xmm0, xmmword [rsp + 0xe0]
xorps xmm0, xmmword [rax + 0xa0]
movaps xmmword [rsp + 0xe0], xmm0
bswap r8w
lea rdx, [rsp + 0x40]
lea r8, [rsp + 0x30]
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyW]
movabs rax, 0xe03fec0024fffd78
jmp 0x1403fbc5a
mov qword [rsp + 0x1d0], rax
mov qword [rsp + 0x40], rax
movzx ax, r14b
cbw
movsxd rax, edx
movabs rax, 0x222ebca20e96a58a
mov qword [rsp + 0x1c8], rax
jmp 0x1403fbc88
mov qword [rsp + 0x48], rax
cdqe
mov rax, 0x77d54227
bswap ax
movabs rax, 0xfbcdf388e0082fa5
mov qword [rsp + 0x2e8], rax
mov qword [rsp + 0x50], rax
setnp al
movabs rax, 0x17c85fba530fa684
mov qword [rsp + 0x1c0], rax
jmp 0x1403fbcca
mov qword [rsp + 0x58], rax
movsxd rax, edx
not ah
mov qword [rsp + 0x100], r15
cwde
mov qword [rsp + 0x108], r12
not ah
movsxd rax, r13d
cbw
mov qword [rsp + 0x110], rsi
movzx ax, dil
mov qword [rsp + 0x118], rdi
movzx eax, r13w
mov rax, r13
jmp 0x1403fbd0d
movaps xmm0, xmmword [rsp + 0x40]
xorps xmm0, xmmword [rax]
movaps xmmword [rsp + 0x40], xmm0
movaps xmm0, xmmword [rsp + 0x50]
jmp 0x1403fbd24
xorps xmm0, xmmword [rax + 0x10]
movaps xmmword [rsp + 0x50], xmm0
sal dx, cl
stc
xor r9, rbx
mov rcx, qword [rsp + 0x30]
xor r9d, r15d
bswap eax
lea rax, [rsp + 0x3c]
mov qword [rsp + 0x20], rax
bswap rdx
rcl dl, cl
add dh, 0x9f
mov dword [rsp + 0x28], 4
lea rdx, [rsp + 0x40]
sbb r9b, 0x7f
bt r9d, 0x97
sub r8d, r8d
movzx r9, dx
mov r9b, r8b
mov r9d, 4
jmp 0x1403fbd7b
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
mov rcx, qword [rsp + 0x30]
jmp 0x1403fbd8b
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov rax, qword [rsp + 0x2e0]
jmp 0x1403fbd9e
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x2d8]
jmp 0x1403fbdb0
mov qword [rsp + 0x48], rax
sets al
mov al, 0xb1
mov rax, qword [rsp + 0x2d0]
mov qword [rsp + 0x50], rax
mov ah, 0x14
mov rax, qword [rsp + 0x2c8]
jmp 0x1403fbdd7
mov qword [rsp + 0x58], rax
bswap ax
cmove ax, r8w
movzx rax, cx
mov rax, qword [rsp + 0x2c0]
jmp 0x1403fbdf5
mov qword [rsp + 0x60], rax
cmovge ax, r11w
movsx eax, r9w
movsxd rax, ebp
mov rax, qword [rsp + 0x2b8]
mov qword [rsp + 0x68], rax
mov rax, qword [rsp + 0x2b0]
jmp 0x1403fbe20
mov qword [rsp + 0x70], rax
movsxd rax, r11d
mov rax, qword [rsp + 0x2a8]
jmp 0x1403fbe35
mov qword [rsp + 0x78], rax
movsxd rax, r13d
mov rax, qword [rsp + 0x2a0]
jmp 0x1403fbe4a
mov qword [rsp + 0x80], rax
movzx eax, bp
movzx rax, r11w
movsx ax, sil
mov rax, qword [rsp + 0x298]
mov qword [rsp + 0x88], rax
mov rax, qword [rsp + 0x290]
jmp 0x1403fbe7b
mov qword [rsp + 0x90], rax
mov al, 0x93
cbw
mov rax, qword [rsp + 0x288]
mov qword [rsp + 0x98], rax
cbw
not ah
movsxd rax, eax
mov rax, qword [rsp + 0x280]
jmp 0x1403fbeab
mov qword [rsp + 0xa0], rax
movzx ax, spl
movsx rax, r11w
mov rax, qword [rsp + 0x278]
jmp 0x1403fbec9
mov qword [rsp + 0xa8], rax
movsx eax, dx
movzx rax, r8w
mov rax, qword [rsp + 0x270]
jmp 0x1403fbee5
mov qword [rsp + 0xb0], rax
xchg ah, ah
mov rax, qword [rsp + 0x268]
jmp 0x1403fbefc
mov qword [rsp + 0xb8], rax
movsx ax, ah
mov rax, qword [rsp + 0x260]
jmp 0x1403fbf15
mov qword [rsp + 0xc0], rax
mov ah, 0x91
cdqe
mov rax, qword [rsp + 0x258]
mov qword [rsp + 0xc8], rax
cmovb rax, r10
jmp 0x1403fbf40
movabs rax, 0xd8c04eda048c52bb
mov qword [rsp + 0xd0], rax
cmovge ax, dx
movzx eax, cx
lahf
movabs rax, 0xa5eac9894f8ea414
mov qword [rsp + 0xd8], rax
jmp 0x1403fbf74
mov qword [rsp + 0xe0], rbp
mov qword [rsp + 0xe8], r14
mov r14b, dl
movsx ebp, r11w
mov qword [rsp + 0x100], r15
jmp 0x1403fbf98
mov qword [rsp + 0x108], r12
setnp bpl
mov qword [rsp + 0x110], rsi
mov qword [rsp + 0x118], rdi
mov rbp, rbx
mov qword [rsp + 0x120], rbx
movzx eax, r12w
mov r14, qword [rsp + 0x2f0]
mov qword [rsp + 0x128], r14
movzx rax, r8w
movzx eax, si
movzx ax, r11b
mov rax, qword [rsp + 0x250]
jmp 0x1403fbfec
mov qword [rsp + 0x130], rax
movzx ax, sil
movsx eax, r13w
cdqe
mov rax, qword [rsp + 0x248]
mov qword [rsp + 0x138], rax
movzx rax, bx
movzx eax, cx
bswap ax
mov rax, qword [rsp + 0x240]
jmp 0x1403fc026
mov qword [rsp + 0x140], rax
movsx rax, r13w
mov rax, qword [rsp + 0x238]
jmp 0x1403fc03f
mov qword [rsp + 0x148], rax
bswap ax
mov rax, qword [rsp + 0x230]
mov qword [rsp + 0x150], rax
cbw
bswap ax
setp al
mov rax, qword [rsp + 0x228]
mov qword [rsp + 0x158], rax
jmp 0x1403fc077
mov rax, qword [rsp + 0x220]
jmp 0x1403fc084
mov qword [rsp + 0x160], rax
mov rax, qword [rsp + 0x218]
jmp 0x1403fc099
mov qword [rsp + 0x168], rax
mov al, spl
movsx ax, r11b
mov rax, qword [rsp + 0x210]
jmp 0x1403fc0b6
mov qword [rsp + 0x170], rax
movsx ax, r12b
nop
mov rax, qword [rsp + 0x208]
mov qword [rsp + 0x178], rax
mov rax, qword [rsp + 0x200]
mov qword [rsp + 0x180], rax
not ah
movsx ax, cl
mov rax, qword [rsp + 0x1f8]
jmp 0x1403fc0f7
mov qword [rsp + 0x188], rax
movzx eax, r10w
mov rax, qword [rsp + 0x1f0]
jmp 0x1403fc110
mov qword [rsp + 0x190], rax
movzx rax, di
mov rax, qword [rsp + 0x1e8]
jmp 0x1403fc129
mov qword [rsp + 0x198], rax
setne ah
xchg ah, ah
mov rax, qword [rsp + 0x1e0]
jmp 0x1403fc143
mov qword [rsp + 0x1a0], rax
mov rax, qword [rsp + 0x1d8]
mov qword [rsp + 0x1a8], rax
cdqe
movzx rax, r11w
lahf
mov rax, r13
jmp 0x1403fc16a
movaps xmm0, xmmword [rsp + 0x40]
jmp 0x1403fc174
movaps xmm1, xmmword [rsp + 0x50]
movaps xmm2, xmmword [rsp + 0x60]
jmp 0x1403fc183
xorps xmm0, xmmword [rax]
movaps xmm3, xmmword [rsp + 0x70]
jmp 0x1403fc190
movaps xmmword [rsp + 0x40], xmm0
xorps xmm1, xmmword [rax + 0x10]
movaps xmmword [rsp + 0x50], xmm1
jmp 0x1403fc1a3
xorps xmm2, xmmword [rax + 0x20]
movaps xmmword [rsp + 0x60], xmm2
jmp 0x1403fc1b1
xorps xmm3, xmmword [rax + 0x30]
movaps xmmword [rsp + 0x70], xmm3
movaps xmm0, xmmword [rsp + 0x80]
jmp 0x1403fc1c7
xorps xmm0, xmmword [rax + 0x40]
movaps xmmword [rsp + 0x80], xmm0
jmp 0x1403fc1d8
movaps xmm0, xmmword [rsp + 0x90]
jmp 0x1403fc1e5
xorps xmm0, xmmword [rax + 0x50]
movaps xmmword [rsp + 0x90], xmm0
movaps xmm0, xmmword [rsp + 0xa0]
xorps xmm0, xmmword [rax + 0x60]
movaps xmmword [rsp + 0xa0], xmm0
jmp 0x1403fc20a
movaps xmm0, xmmword [rsp + 0xb0]
xorps xmm0, xmmword [rax + 0x70]
movaps xmmword [rsp + 0xb0], xmm0
jmp 0x1403fc223
movaps xmm0, xmmword [rsp + 0xc0]
jmp 0x1403fc230
xorps xmm0, xmmword [rax + 0x80]
movaps xmmword [rsp + 0xc0], xmm0
jmp 0x1403fc244
movaps xmm0, xmmword [rsp + 0xd0]
xorps xmm0, xmmword [rax + 0x90]
movaps xmmword [rsp + 0xd0], xmm0
movaps xmm0, xmmword [rsp + 0xe0]
jmp 0x1403fc268
xorps xmm0, xmmword [rax + 0xa0]
movaps xmmword [rsp + 0xe0], xmm0
cqo
xchg ecx, r8d
lea rdx, [rsp + 0x40]
bswap cx
mov rcx, 0xffffffff80000002
movsx r8, r9w
lea r8, [rsp + 0x30]
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyW]
mov rax, qword [rsp + 0x1d0]
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x1c8]
bswap bx
not bl
cmovne rbx, rdi
mov qword [rsp + 0x48], rax
jmp 0x1403fc2c9
mov rbx, qword [rsp + 0x2e8]
mov qword [rsp + 0x50], rbx
movzx rax, r10w
mov rax, qword [rsp + 0x1c0]
jmp 0x1403fc2e7
mov qword [rsp + 0x58], rax
cmovle eax, edi
movsx eax, di
mov qword [rsp + 0x100], r15
lahf
mov eax, 0x7f421458
mov qword [rsp + 0x108], r12
movzx eax, di
lahf
mov qword [rsp + 0x110], rsi
movsx rax, r15w
not al
mov qword [rsp + 0x118], rdi
movzx eax, si
lahf
mov rax, r13
jmp 0x1403fc32e
movaps xmm0, xmmword [rsp + 0x40]
xorps xmm0, xmmword [rax]
movaps xmmword [rsp + 0x40], xmm0
jmp 0x1403fc340
movaps xmm0, xmmword [rsp + 0x50]
jmp 0x1403fc34a
xorps xmm0, xmmword [rax + 0x10]
movaps xmmword [rsp + 0x50], xmm0
cdqe
mov rcx, qword [rsp + 0x30]
rcl dh, 0x25
clc
lea rax, [rsp + 0x3c]
jmp 0x1403fc36f
mov qword [rsp + 0x20], rax
bts r9, rsp
mov dword [rsp + 0x28], 4
test r11, r10
rcl r9w, cl
rol dh, cl
lea rdx, [rsp + 0x40]
mov r9, rsp
sub r8d, r8d
mov r9d, 4
jmp 0x1403fc39f
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
mov rcx, qword [rsp + 0x30]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov rax, qword [rsp + 0x2e0]
mov qword [rsp + 0x40], rax
lahf
not ah
mov rax, qword [rsp + 0x2d8]
jmp 0x1403fc3cd
mov qword [rsp + 0x48], rax
mov rax, qword [rsp + 0x2d0]
jmp 0x1403fc3df
mov qword [rsp + 0x50], rax
nop
mov rax, qword [rsp + 0x2c8]
jmp 0x1403fc3f3
mov qword [rsp + 0x58], rax
movzx eax, bp
mov rax, qword [rsp + 0x2c0]
jmp 0x1403fc408
mov qword [rsp + 0x60], rax
mov rax, qword [rsp + 0x2b8]
jmp 0x1403fc41a
mov qword [rsp + 0x68], rax
cdqe
mov rax, qword [rsp + 0x2b0]
jmp 0x1403fc42e
mov qword [rsp + 0x70], rax
cdqe
movzx ax, r14b
mov rax, qword [rsp + 0x2a8]
jmp 0x1403fc447
mov qword [rsp + 0x78], rax
not ah
cmovl rax, rsi
xchg ah, ah
mov rax, qword [rsp + 0x2a0]
jmp 0x1403fc461
mov qword [rsp + 0x80], rax
movzx ax, r14b
mov rax, qword [rsp + 0x298]
jmp 0x1403fc47b
mov qword [rsp + 0x88], rax
movsx rax, r8w
bswap ax
mov rax, qword [rsp + 0x290]
jmp 0x1403fc497
mov qword [rsp + 0x90], rax
cwde
not rax
movzx ax, bl
mov rax, qword [rsp + 0x288]
jmp 0x1403fc4b4
mov qword [rsp + 0x98], rax
mov rax, qword [rsp + 0x280]
jmp 0x1403fc4c9
mov qword [rsp + 0xa0], rax
jmp 0x1403fc4dc
mov rax, qword [rsp + 0x278]
jmp 0x1403fc4e9
mov qword [rsp + 0xa8], rax
cdqe
movzx ax, cl
movsxd rax, r15d
mov rax, qword [rsp + 0x270]
jmp 0x1403fc507
mov qword [rsp + 0xb0], rax
movsx eax, r15w
mov rax, qword [rsp + 0x268]
jmp 0x1403fc520
mov qword [rsp + 0xb8], rax
cdqe
lahf
mov rax, qword [rsp + 0x260]
jmp 0x1403fc538
mov qword [rsp + 0xc0], rax
movsx eax, r10w
cwde
movsxd rax, ebx
mov rax, qword [rsp + 0x258]
jmp 0x1403fc555
mov qword [rsp + 0xc8], rax
movzx eax, ax
movabs rax, 0xd8c34edb048f52bb
jmp 0x1403fc56f
mov qword [rsp + 0xd0], rax
movzx rax, r15w
movabs rax, 0xa5c8c98b4f83a416
jmp 0x1403fc58a
mov qword [rsp + 0xd8], rax
movzx rax, r15w
cdqe
bswap eax
movabs rax, 0x2eb290273e1edaf5
jmp 0x1403fc5a9
mov qword [rsp + 0xe0], rax
movabs rax, 0x28f53e246680b95c
jmp 0x1403fc5c0
mov qword [rsp + 0xe8], rax
mov ax, 0xd96
lahf
cdqe
mov qword [rsp + 0x100], r15
cdqe
movzx ax, r15b
mov qword [rsp + 0x108], r12
setbe al
cmovs ax, r14w
mov qword [rsp + 0x110], rsi
movzx rax, cx
jmp 0x1403fc5ff
mov qword [rsp + 0x118], rdi
movsx eax, si
mov qword [rsp + 0x120], rbp
bswap eax
mov qword [rsp + 0x128], r14
movzx ax, dil
bswap eax
mov rax, qword [rsp + 0x250]
jmp 0x1403fc630
mov qword [rsp + 0x130], rax
movsx rax, bx
bswap eax
movsx eax, r10w
mov rax, qword [rsp + 0x248]
jmp 0x1403fc64f
mov qword [rsp + 0x138], rax
movsx rax, dx
movzx eax, r15w
mov rax, qword [rsp + 0x240]
jmp 0x1403fc66c
mov qword [rsp + 0x140], rax
lahf
mov rax, qword [rsp + 0x238]
mov qword [rsp + 0x148], rax
mov rax, qword [rsp + 0x230]
mov qword [rsp + 0x150], rax
lahf
movzx ax, dil
movsx eax, r11w
mov rax, qword [rsp + 0x228]
jmp 0x1403fc6ac
mov qword [rsp + 0x158], rax
mov rax, qword [rsp + 0x220]
jmp 0x1403fc6c1
mov qword [rsp + 0x160], rax
cdqe
mov rax, qword [rsp + 0x218]
jmp 0x1403fc6d8
mov qword [rsp + 0x168], rax
movzx eax, r10w
mov rax, qword [rsp + 0x210]
jmp 0x1403fc6f1
mov qword [rsp + 0x170], rax
movzx ax, al
mov al, 0x58
mov ax, dx
mov rax, qword [rsp + 0x208]
mov qword [rsp + 0x178], rax
mov eax, 0x4a8600ab
mov rax, qword [rsp + 0x200]
jmp 0x1403fc724
mov qword [rsp + 0x180], rax
bswap rax
mov rax, qword [rsp + 0x1f8]
jmp 0x1403fc73c
mov qword [rsp + 0x188], rax
movsxd rax, ebx
not rax
movzx ax, dil
mov rax, qword [rsp + 0x1f0]
jmp 0x1403fc75c
mov qword [rsp + 0x190], rax
mov rax, qword [rsp + 0x1e8]
jmp 0x1403fc771
mov qword [rsp + 0x198], rax
lahf
movzx rax, ax
mov rax, qword [rsp + 0x1e0]
jmp 0x1403fc78b
mov qword [rsp + 0x1a0], rax
bswap rax
cwde
mov rax, qword [rsp + 0x1d8]
jmp 0x1403fc7a4
mov qword [rsp + 0x1a8], rax
cmova eax, eax
movabs rax, 0xa1410f538a85c08b
jmp 0x1403fc7be
mov qword [rsp + 0xf0], rax
jmp 0x1403fc7cb
mov qword [rsp + 0x1b0], rax
movabs rax, 0x6078a8fe5539451c
jmp 0x1403fc7e2
mov qword [rsp + 0xf8], rax
jmp 0x1403fc7ef
mov qword [rsp + 0x1b8], rax
jmp 0x1403fc7fe
mov rax, r13
jmp 0x1403fc806
movaps xmm0, xmmword [rsp + 0x40]
jmp 0x1403fc810
movaps xmm1, xmmword [rsp + 0x50]
jmp 0x1403fc81a
movaps xmm2, xmmword [rsp + 0x60]
jmp 0x1403fc824
xorps xmm0, xmmword [rax]
movaps xmm3, xmmword [rsp + 0x70]
jmp 0x1403fc831
movaps xmmword [rsp + 0x40], xmm0
jmp 0x1403fc83b
xorps xmm1, xmmword [rax + 0x10]
movaps xmmword [rsp + 0x50], xmm1
jmp 0x1403fc849
xorps xmm2, xmmword [rax + 0x20]
movaps xmmword [rsp + 0x60], xmm2
jmp 0x1403fc857
xorps xmm3, xmmword [rax + 0x30]
movaps xmmword [rsp + 0x70], xmm3
movaps xmm0, xmmword [rsp + 0x80]
jmp 0x1403fc86d
xorps xmm0, xmmword [rax + 0x40]
movaps xmmword [rsp + 0x80], xmm0
jmp 0x1403fc87e
movaps xmm0, xmmword [rsp + 0x90]
jmp 0x1403fc88b