Function at 0x1403fb9d0
Capabilities:
Set registry value

Disassembly:
push r15
jmp 0x1403fb9ec
push r14
or r15w, 0x7103
push r13
push r12
jmp 0x1403fba00
push rsi
test al, sil
push rdi
lahf
cmp r9b, 0x79
push rbp
sub r13b, 0x4d
test r9w, 0x24dd
push rbx
rcl ebp, 0x3d
movsx r13, si
sub rsp, 0x2f8
movsx ax, bpl
movabs rax, 0xe009ec3224c8fd6e
movzx di, dl
not r13w
mov r14w, cx
mov qword [rsp + 0x2e0], rax
setge sil
movsx r13w, sil
mov qword [rsp + 0x40], rax
mov r14b, r9b
seta bh
movsx rbx, bp
movabs rax, 0x2204bcb80ebea5a3
movsxd rbp, eax
movsx ebp, r9w
movzx r15w, bl
mov qword [rsp + 0x2d8], rax
xchg r12b, bl
mov qword [rsp + 0x48], rax
cmovg ebp, esi
movabs rax, 0xfbc9f38de01f2fa2
not sil
mov qword [rsp + 0x2d0], rax
sets bh
movzx r12d, cx
not sil
mov qword [rsp + 0x50], rax
movsx r14w, r13b
movabs rax, 0x17a75ff95317a686
not r15w
setno sil
movsxd r15, r14d
mov qword [rsp + 0x2c8], rax
jmp 0x1403fbadb
mov qword [rsp + 0x58], rax
cwde
movsx ebx, di
mov rsi, rbx
movabs rax, 0xfd99d5578f55fa6f
movsx r12, di
jmp 0x1403fbafa
mov qword [rsp + 0x2c0], rax
movsx rbp, bx
mov qword [rsp + 0x60], rax
movsx r15, cx
movzx di, dl
movzx rdi, bx
movabs rax, 0x4b3964fdcd447246
mov sil, 0xdf
movzx r14d, ax
mov qword [rsp + 0x2b8], rax
movsx r14d, dx
xchg dil, bpl
mov qword [rsp + 0x68], rax
jmp 0x1403fbb41
movabs rax, 0xee88324679eb2227
movzx rbx, cx
mov qword [rsp + 0x2b0], rax
sete r12b
mov sil, r8b
movzx r15d, bp
mov qword [rsp + 0x70], rax
movabs rax, 0x6d7346ad6d4ffefa
not r15b
mov qword [rsp + 0x2a8], rax
movsx si, al
movzx ebx, r10w
bswap r14d
mov qword [rsp + 0x78], rax
cmova ax, r14w
movzx r15w, bl
movabs rax, 0xd093683aef376a76
setne r13b
jmp 0x1403fbba9
mov qword [rsp + 0x2a0], rax
sete r13b
mov qword [rsp + 0x80], rax
cdqe
xchg r13b, bpl
movabs rax, 0xa80f93e9d32b8c6f
mov qword [rsp + 0x298], rax
movsxd r13, edx
bswap r13d
mov qword [rsp + 0x88], rax
mov r12b, 0x5c
movabs rax, 0x33e730243394033e
movsx rdi, r10w
not r15b
bswap di
mov qword [rsp + 0x290], rax
bswap si
movzx r15d, r11w
mov qword [rsp + 0x90], rax
bswap bx
mov al, bl
movzx r13d, di
movabs rax, 0xe7e3977e114e6703
mov qword [rsp + 0x288], rax
setb r14b
movzx r15, r13w
movsx r12w, bl
mov qword [rsp + 0x98], rax
movabs rax, 0xb0b65ec58a603c8
mov r13d, esi
movsx esi, dx
mov rsi, 0x644b0d29
mov qword [rsp + 0x280], rax
movzx r15w, r9b
mov qword [rsp + 0xa0], rax
movsx rbp, bx
movsxd rbp, edi
movsx ebx, sp
movabs rax, 0x6708be65ca8156d7
movsxd rdi, esp
mov qword [rsp + 0x278], rax
mov bp, 0x1c51
mov qword [rsp + 0xa8], rax
movabs rax, 0x46a7044da5524090
not r13b
movsx si, r8b
mov qword [rsp + 0x270], rax
xchg ebx, esi
mov qword [rsp + 0xb0], rax
xchg r14w, bp
jmp 0x1403fbcc8
movabs rax, 0x4b8cb541ca050f46
mov qword [rsp + 0x268], rax
seta sil
not r12b
mov qword [rsp + 0xb8], rax
cbw
movzx esi, r13w
movsx esi, si
movabs rax, 0xe627ab41184af921
mov qword [rsp + 0x260], rax
movzx r14d, r10w
mov qword [rsp + 0xc0], rax
jmp 0x1403fbd1c
movabs rax, 0x34c77b6e31b9a
not sil
movsx r14d, r12w
movsx bp, r8b
mov qword [rsp + 0x258], rax
movsx rsi, di
jmp 0x1403fbd47
mov qword [rsp + 0xc8], rax
xchg r15, rbx
movabs rax, 0xd8cf4ec0049852bb
movzx ebx, di
mov r15w, si
movsx edi, r10w
mov qword [rsp + 0xd0], rax
mov r14w, di
cdqe
cmova bp, bx
movabs rax, 0xa5eac9844f8ea419
movzx r13w, dil
cmovl rbp, r12
mov qword [rsp + 0xd8], rax
jmp 0x1403fbd99
mov qword [rsp + 0x30], 0
cmove r12w, sp
cdqe
cbw
mov dword [rsp + 0x3c], 0
movabs rbp, 0x2eb490333e21dae3
movsx r13d, r13w
mov qword [rsp + 0xe0], rbp
movsx r14, r12w
movzx bx, r8b
movabs r14, 0x28903e48668cb956
lahf
movsxd r15, ebx
movzx r12, dx
mov qword [rsp + 0xe8], r14
jmp 0x1403fbdfb
movabs r15, 0xe05dec612491fd3d
mov eax, 0x4cd44107
mov bx, sp
movzx eax, bx
mov qword [rsp + 0x100], r15
jmp 0x1403fbe20
movabs r12, 0x2247bce40ef3a5e6
movzx rax, r13w
movzx ax, r13b
mov qword [rsp + 0x108], r12
movabs rsi, 0xfbacf3ffe06d2fd7
cdqe
xchg r13b, r13b
movsx ax, r14b
mov qword [rsp + 0x110], rsi
cdqe
movsx rax, bp
movabs rdi, 0x17c85fba5363a6e8
mov al, r10b
movsx rbx, r11w
mov qword [rsp + 0x118], rdi
cmova ax, sp
movsx rbx, r9w
movabs rax, 0xfdf6d5258f21fa01
jmp 0x1403fbe90
mov qword [rsp + 0x120], rax
movzx r13, r9w
mov rbx, rax
jmp 0x1403fbea4
movabs rax, 0x4b4d6498cd17722a
mov qword [rsp + 0x2f0], rax
mov qword [rsp + 0x128], rax
movsxd rax, eax
lahf
cbw
movabs rax, 0xeefa322379b8227b
xchg r13, r13
jmp 0x1403fbed6
mov qword [rsp + 0x250], rax
movsx r13, r8w
mov r13w, r15w
mov qword [rsp + 0x130], rax
cdqe
movabs rax, 0x6d1646ce6d26fe8c
movsx r13w, r12b
jmp 0x1403fbf07
mov qword [rsp + 0x248], rax
mov r13d, 0x51815ac8
movzx r13d, bp
setl r13b
mov qword [rsp + 0x138], rax
cmovne ax, r13w
cdqe
movabs rax, 0xd0fb6869ef6b6a05
mov r13b, 0x34
mov qword [rsp + 0x240], rax
setl r13b
bswap r13
jmp 0x1403fbf4d
mov qword [rsp + 0x140], rax
movsxd r13, edi
movsx rax, ax
movabs rax, 0xa86b938cd3598c0e
mov r13, rbx
jmp 0x1403fbf6e
mov qword [rsp + 0x238], rax
movsx r13, si
bswap r13
sete r13b
mov qword [rsp + 0x148], rax
cbw
movsx rax, bp
movsx r13d, r15w
movabs rax, 0x3382304733f7037f
bswap r13
mov qword [rsp + 0x230], rax
movzx r13, sp
mov qword [rsp + 0x150], rax
bswap r13
movabs rax, 0xe7b39722113d6770
jmp 0x1403fbfca
mov qword [rsp + 0x228], rax
mov qword [rsp + 0x158], rax
movsx r13d, r10w
cwde
movabs rax, 0xb66658d58d403a9
movsxd r13, edi
cmovl r13w, ax
jmp 0x1403fbff6
mov qword [rsp + 0x220], rax
mov qword [rsp + 0x160], rax
movabs rax, 0x677abe00caf556b2
mov r13d, r11d
movsx r13, ax
bswap r13w
mov qword [rsp + 0x218], rax
mov qword [rsp + 0x168], rax
xchg r13, r13
jmp 0x1403fc037
movabs rax, 0x46ce040ba50e40e3
bswap r13w
mov qword [rsp + 0x210], rax
not r13b
mov qword [rsp + 0x170], rax
bswap r13w
movabs rax, 0x4bedb536ca600f34
movzx r13w, spl
mov qword [rsp + 0x208], rax
mov r13b, cl
movsx r13, ax
mov qword [rsp + 0x178], rax
movabs rax, 0xe648ab111826f94d
movsx r13, r9w
mov r13b, 0x5d
mov qword [rsp + 0x200], rax
movsx r13w, r11b
bswap r13w
mov qword [rsp + 0x180], rax
lahf
movabs rax, 0x7a4c14b68a1bf6
setae r13b
mov qword [rsp + 0x1f8], rax
mov r13b, dil
mov qword [rsp + 0x188], rax
movsx ax, r9b
not eax
cbw
movabs rax, 0xd8a24eaf04dc52e7
not r13w
xchg r13b, r13b
mov qword [rsp + 0x1f0], rax
mov r13b, 0xa6
movzx r13w, r11b
mov qword [rsp + 0x190], rax
movabs rax, 0xa5bac9ea4fe7a478
bswap r13w
mov qword [rsp + 0x1e8], rax
mov qword [rsp + 0x198], rax
movsx r13w, r10b
cbw
movabs rax, 0x2edd90553e4eda91
mov r13b, sil
movzx r13, r13w
mov qword [rsp + 0x1e0], rax
mov r13b, bpl
cmovb r13w, r12w
mov qword [rsp + 0x1a0], rax
movsx r13, cx
not al
movabs rax, 0x28903e4866e9b93a
mov qword [rsp + 0x1d8], rax
setle r13b
mov qword [rsp + 0x1a8], rax
mov al, 0x4d
movsxd r13, r8d
setnp al
lea r13, [rsp + 0x100]
movzx rax, r11w
bswap ax
mov rax, r13
jmp 0x1403fc191
movaps xmm0, xmmword [rsp + 0x40]
jmp 0x1403fc19b
xorps xmm0, xmmword [rax]
movaps xmmword [rsp + 0x40], xmm0
movaps xmm0, xmmword [rsp + 0x50]
xorps xmm0, xmmword [rax + 0x10]
movaps xmmword [rsp + 0x50], xmm0
jmp 0x1403fc1b6
movaps xmm0, xmmword [rsp + 0x60]
jmp 0x1403fc1c0
xorps xmm0, xmmword [rax + 0x20]
movaps xmmword [rsp + 0x60], xmm0
movaps xmm0, xmmword [rsp + 0x70]
xorps xmm0, xmmword [rax + 0x30]
movaps xmmword [rsp + 0x70], xmm0
movaps xmm0, xmmword [rsp + 0x80]
jmp 0x1403fc1e4
xorps xmm0, xmmword [rax + 0x40]
movaps xmmword [rsp + 0x80], xmm0
jmp 0x1403fc1f5
movaps xmm0, xmmword [rsp + 0x90]
xorps xmm0, xmmword [rax + 0x50]
movaps xmmword [rsp + 0x90], xmm0
movaps xmm0, xmmword [rsp + 0xa0]
jmp 0x1403fc216
xorps xmm0, xmmword [rax + 0x60]
movaps xmmword [rsp + 0xa0], xmm0
jmp 0x1403fc227
movaps xmm0, xmmword [rsp + 0xb0]
jmp 0x1403fc234
xorps xmm0, xmmword [rax + 0x70]
movaps xmmword [rsp + 0xb0], xmm0
jmp 0x1403fc245
movaps xmm0, xmmword [rsp + 0xc0]
xorps xmm0, xmmword [rax + 0x80]
movaps xmmword [rsp + 0xc0], xmm0
jmp 0x1403fc261
movaps xmm0, xmmword [rsp + 0xd0]
jmp 0x1403fc26e
xorps xmm0, xmmword [rax + 0x90]
movaps xmmword [rsp + 0xd0], xmm0
jmp 0x1403fc282
movaps xmm0, xmmword [rsp + 0xe0]
jmp 0x1403fc28f
xorps xmm0, xmmword [rax + 0xa0]
movaps xmmword [rsp + 0xe0], xmm0
movsx rcx, sp
movzx r8, r11w
cqo
lea rdx, [rsp + 0x40]
xchg r8d, ecx
setns r8b
lea r8, [rsp + 0x30]
bswap cx
movsx cx, sil
mov rcx, 0xffffffff80000002
jmp 0x1403fc2cd
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyW]
movabs rax, 0xe03fec0024fffd78
mov qword [rsp + 0x1d0], rax
jmp 0x1403fc2ea
mov qword [rsp + 0x40], rax
movsx eax, r15w
jmp 0x1403fc2f8
movabs rax, 0x222ebca20e96a58a
jmp 0x1403fc307
mov qword [rsp + 0x1c8], rax
jmp 0x1403fc314
mov qword [rsp + 0x48], rax
cwde
movzx rax, r12w
mov ax, r13w
movabs rax, 0xfbcdf388e0082fa5
jmp 0x1403fc331
mov qword [rsp + 0x2e8], rax
jmp 0x1403fc33e
mov qword [rsp + 0x50], rax
setne al
cmovl ax, r13w
movabs rax, 0x17c85fba530fa684
jmp 0x1403fc35a
mov qword [rsp + 0x1c0], rax
jmp 0x1403fc367
mov qword [rsp + 0x58], rax
movzx rax, dx
mov qword [rsp + 0x100], r15
mov ax, 0x1a57
movzx eax, r11w
lahf
mov qword [rsp + 0x108], r12
mov rax, 0x218b12f7
movsx eax, r11w
mov qword [rsp + 0x110], rsi
cdqe
movsxd rax, r11d
mov qword [rsp + 0x118], rdi
cdqe
mov rax, r13
jmp 0x1403fc3b3
movaps xmm0, xmmword [rsp + 0x40]
jmp 0x1403fc3bd
xorps xmm0, xmmword [rax]
movaps xmmword [rsp + 0x40], xmm0
jmp 0x1403fc3ca
movaps xmm0, xmmword [rsp + 0x50]
jmp 0x1403fc3d4
xorps xmm0, xmmword [rax + 0x10]
movaps xmmword [rsp + 0x50], xmm0
rcr al, 0xce
sar cx, 3
not dh
mov rcx, qword [rsp + 0x30]
stc
lea rax, [rsp + 0x3c]
movsxd rdx, edx
mov qword [rsp + 0x20], rax
mov dword [rsp + 0x28], 4
movzx edx, bx
lea rdx, [rsp + 0x40]
or r9, 0x3a595cbe
bts r9d, r10d
sub r8d, r8d
setp r9b
mov r9d, 4
jmp 0x1403fc426
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
mov rcx, qword [rsp + 0x30]
jmp 0x1403fc436
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov rax, qword [rsp + 0x2e0]
jmp 0x1403fc449
mov qword [rsp + 0x40], rax
sets al
movzx eax, r11w
movsxd rax, r9d
mov rax, qword [rsp + 0x2d8]
jmp 0x1403fc465
mov qword [rsp + 0x48], rax
bswap ax
mov al, 0x39
mov rax, qword [rsp + 0x2d0]
jmp 0x1403fc47c
mov qword [rsp + 0x50], rax
movsx eax, bx
cbw
mov rax, qword [rsp + 0x2c8]
mov qword [rsp + 0x58], rax
setno al
mov rax, rax
mov eax, 0x382d5d0b
mov rax, qword [rsp + 0x2c0]
jmp 0x1403fc4ab
mov qword [rsp + 0x60], rax
mov ah, 0xe5
movsxd rax, r15d
movsx rax, r11w
mov rax, qword [rsp + 0x2b8]
jmp 0x1403fc4c7
mov qword [rsp + 0x68], rax
xchg ah, al
lahf
movsx eax, r15w
mov rax, qword [rsp + 0x2b0]
jmp 0x1403fc4e0
mov qword [rsp + 0x70], rax
movsx ax, bh
movzx rax, r11w
bswap ax
mov rax, qword [rsp + 0x2a8]
jmp 0x1403fc4fd
mov qword [rsp + 0x78], rax
movzx ax, spl
cdqe
mov rax, qword [rsp + 0x2a0]
mov qword [rsp + 0x80], rax
movsx eax, bp
lahf
mov rax, qword [rsp + 0x298]
jmp 0x1403fc52a
mov qword [rsp + 0x88], rax
jmp 0x1403fc53b
mov rax, qword [rsp + 0x290]
jmp 0x1403fc548
mov qword [rsp + 0x90], rax
movsx rax, r14w
mov rax, qword [rsp + 0x288]
jmp 0x1403fc561
mov qword [rsp + 0x98], rax
mov rax, qword [rsp + 0x280]
jmp 0x1403fc576
mov qword [rsp + 0xa0], rax
not ah
mov rax, qword [rsp + 0x278]
jmp 0x1403fc58d
mov qword [rsp + 0xa8], rax
cwde
cmovb ax, sp
mov rax, qword [rsp + 0x270]
jmp 0x1403fc5a7
mov qword [rsp + 0xb0], rax
movsx rax, sp
movsx ax, spl
mov rax, qword [rsp + 0x268]
jmp 0x1403fc5c5
mov qword [rsp + 0xb8], rax
setb al
mov rax, qword [rsp + 0x260]
mov qword [rsp + 0xc0], rax
cbw
cdqe
movzx ax, bh
mov rax, qword [rsp + 0x258]
jmp 0x1403fc5f5
mov qword [rsp + 0xc8], rax
mov al, 0x2a
lahf
bswap ax
movabs rax, 0xd8c04eda048c52bb
jmp 0x1403fc612
mov qword [rsp + 0xd0], rax
nop
setp al
movabs rax, 0xa5eac9894f8ea414
jmp 0x1403fc62e
mov qword [rsp + 0xd8], rax
mov qword [rsp + 0xe0], rbp
cbw
movsx bp, r9b
xchg rbp, rax
mov qword [rsp + 0xe8], r14
movsxd rbp, ecx
mov qword [rsp + 0x100], r15
mov ebp, r12d
cwde
mov qword [rsp + 0x108], r12
xchg ebp, eax
movsx r14, di
cdqe
mov qword [rsp + 0x110], rsi
mov qword [rsp + 0x118], rdi
mov rbp, r13
mov rbp, rbx
xchg al, al
jmp 0x1403fc68a
mov qword [rsp + 0x120], rbx
jmp 0x1403fc69b
mov r14, qword [rsp + 0x2f0]
cwde
cdqe
setl al
mov qword [rsp + 0x128], r14
mov ah, 0xb4
mov rax, qword [rsp + 0x250]
mov qword [rsp + 0x130], rax
not eax
movsx ax, r13b
lahf
mov rax, qword [rsp + 0x248]
jmp 0x1403fc6d9
mov qword [rsp + 0x138], rax
mov rax, qword [rsp + 0x240]
mov qword [rsp + 0x140], rax
movsxd rax, eax
not ah
jmp 0x1403fc6fb
mov rax, qword [rsp + 0x238]
jmp 0x1403fc708
mov qword [rsp + 0x148], rax
movzx eax, bx
nop
mov rax, qword [rsp + 0x230]
jmp 0x1403fc722
mov qword [rsp + 0x150], rax
movsx ax, r14b
mov rax, qword [rsp + 0x228]
jmp 0x1403fc73c
mov qword [rsp + 0x158], rax
mov rax, qword [rsp + 0x220]
jmp 0x1403fc751
mov qword [rsp + 0x160], rax
movzx rax, si
cwde
movsx eax, r14w
mov rax, qword [rsp + 0x218]
mov qword [rsp + 0x168], rax
cbw
bswap rax
movzx rax, r14w
mov rax, qword [rsp + 0x210]
jmp 0x1403fc788
mov qword [rsp + 0x170], rax
movzx eax, bx
movsx ax, r9b
mov rax, qword [rsp + 0x208]
jmp 0x1403fc7a5
mov qword [rsp + 0x178], rax
mov rax, qword [rsp + 0x200]
jmp 0x1403fc7ba
mov qword [rsp + 0x180], rax
mov rax, qword [rsp + 0x1f8]
jmp 0x1403fc7cf
mov qword [rsp + 0x188], rax
mov rax, qword [rsp + 0x1f0]
jmp 0x1403fc7e4
mov qword [rsp + 0x190], rax
mov ax, r11w
lahf
mov rax, qword [rsp + 0x1e8]
jmp 0x1403fc7fe
mov qword [rsp + 0x198], rax
mov rax, qword [rsp + 0x1e0]
jmp 0x1403fc813
mov qword [rsp + 0x1a0], rax
cdqe
movsx ax, r13b
mov rax, qword [rsp + 0x1d8]
jmp 0x1403fc82f
mov qword [rsp + 0x1a8], rax
bswap ax
movsx eax, di
cmovno ax, sp
mov rax, r13
jmp 0x1403fc849
movaps xmm0, xmmword [rsp + 0x40]
jmp 0x1403fc853
movaps xmm1, xmmword [rsp + 0x50]
jmp 0x1403fc85d
movaps xmm2, xmmword [rsp + 0x60]
xorps xmm0, xmmword [rax]
movaps xmm3, xmmword [rsp + 0x70]
jmp 0x1403fc86f
movaps xmmword [rsp + 0x40], xmm0
jmp 0x1403fc879
xorps xmm1, xmmword [rax + 0x10]
movaps xmmword [rsp + 0x50], xmm1
jmp 0x1403fc887
xorps xmm2, xmmword [rax + 0x20]
movaps xmmword [rsp + 0x60], xmm2
jmp 0x1403fc895
xorps xmm3, xmmword [rax + 0x30]
movaps xmmword [rsp + 0x70], xmm3
jmp 0x1403fc8a3
movaps xmm0, xmmword [rsp + 0x80]
jmp 0x1403fc8b0
xorps xmm0, xmmword [rax + 0x40]
movaps xmmword [rsp + 0x80], xmm0
jmp 0x1403fc8c1
movaps xmm0, xmmword [rsp + 0x90]
jmp 0x1403fc8ce
xorps xmm0, xmmword [rax + 0x50]
movaps xmmword [rsp + 0x90], xmm0
jmp 0x1403fc8df
movaps xmm0, xmmword [rsp + 0xa0]
jmp 0x1403fc8ec
xorps xmm0, xmmword [rax + 0x60]
movaps xmmword [rsp + 0xa0], xmm0
jmp 0x1403fc8fd
movaps xmm0, xmmword [rsp + 0xb0]
xorps xmm0, xmmword [rax + 0x70]
movaps xmmword [rsp + 0xb0], xmm0
movaps xmm0, xmmword [rsp + 0xc0]
xorps xmm0, xmmword [rax + 0x80]
movaps xmmword [rsp + 0xc0], xmm0
movaps xmm0, xmmword [rsp + 0xd0]
jmp 0x1403fc935
xorps xmm0, xmmword [rax + 0x90]
movaps xmmword [rsp + 0xd0], xmm0
jmp 0x1403fc949
movaps xmm0, xmmword [rsp + 0xe0]
jmp 0x1403fc956
xorps xmm0, xmmword [rax + 0xa0]
movaps xmmword [rsp + 0xe0], xmm0
movsx edx, si
cmovp r8w, ax
lea rdx, [rsp + 0x40]
movzx ecx, r15w
jmp 0x1403fc97b
mov rcx, 0xffffffff80000002
setge r8b
cmovo r8w, sp
lea r8, [rsp + 0x30]
jmp 0x1403fc995
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyW]
mov rax, qword [rsp + 0x1d0]
mov qword [rsp + 0x40], rax
movzx bx, dl
movsxd rax, r9d
xchg bl, al
mov rax, qword [rsp + 0x1c8]
mov bh, ch
movsxd rbx, ecx
mov qword [rsp + 0x48], rax
xchg ah, al
mov rbx, qword [rsp + 0x2e8]
movzx ax, spl
mov qword [rsp + 0x50], rbx
movsx rax, r15w
mov rax, qword [rsp + 0x1c0]
jmp 0x1403fc9e8
mov qword [rsp + 0x58], rax
setp al
jmp 0x1403fc9f9
mov qword [rsp + 0x100], r15
mov ah, 0x47
mov al, dil
mov qword [rsp + 0x108], r12
mov ah, 0xc5
mov qword [rsp + 0x110], rsi
mov qword [rsp + 0x118], rdi
xchg al, ah
movsx ax, r11b
mov rax, r13
jmp 0x1403fca31
movaps xmm0, xmmword [rsp + 0x40]
jmp 0x1403fca3b
xorps xmm0, xmmword [rax]
movaps xmmword [rsp + 0x40], xmm0
jmp 0x1403fca48
movaps xmm0, xmmword [rsp + 0x50]
xorps xmm0, xmmword [rax + 0x10]
movaps xmmword [rsp + 0x50], xmm0
sbb al, bpl
lahf
shr r9d, cl
mov rcx, qword [rsp + 0x30]
lea rax, [rsp + 0x3c]
mov r9w, bp
mov qword [rsp + 0x20], rax
clc
mov dword [rsp + 0x28], 4
sal dl, 0x9e
lea rdx, [rsp + 0x40]
shl r9, 0x39
bt r9w, 0x94
sub r8d, r8d
movzx r9d, bx
mov r9d, 4
jmp 0x1403fca9d
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
mov rcx, qword [rsp + 0x30]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov rax, qword [rsp + 0x2e0]
jmp 0x1403fcabb
mov qword [rsp + 0x40], rax
jmp 0x1403fcac8
mov rax, qword [rsp + 0x2d8]
jmp 0x1403fcad5
mov qword [rsp + 0x48], rax
movsx eax, dx
mov eax, r9d
mov rax, qword [rsp + 0x2d0]
mov qword [rsp + 0x50], rax
mov rax, qword [rsp + 0x2c8]
mov qword [rsp + 0x58], rax
movsx rax, r8w
mov rax, qword [rsp + 0x2c0]
mov qword [rsp + 0x60], rax
mov rax, qword [rsp + 0x2b8]
mov qword [rsp + 0x68], rax
movzx ax, r11b
mov rax, qword [rsp + 0x2b0]
jmp 0x1403fcb2a
mov qword [rsp + 0x70], rax
mov rax, qword [rsp + 0x2a8]
jmp 0x1403fcb3c
mov qword [rsp + 0x78], rax
cwde
mov rax, qword [rsp + 0x2a0]
jmp 0x1403fcb4f
mov qword [rsp + 0x80], rax
mov rax, qword [rsp + 0x298]
mov qword [rsp + 0x88], rax
mov rax, qword [rsp + 0x290]
jmp 0x1403fcb74
mov qword [rsp + 0x90], rax
mov rax, qword [rsp + 0x288]
jmp 0x1403fcb89
mov qword [rsp + 0x98], rax
cmovo eax, r10d
mov eax, eax
mov eax, 0x2c52256b
mov rax, qword [rsp + 0x280]
mov qword [rsp + 0xa0], rax
not al
mov rax, qword [rsp + 0x278]
jmp 0x1403fcbbb
mov qword [rsp + 0xa8], rax
movsx ax, spl
mov rax, qword [rsp + 0x270]
jmp 0x1403fcbd5
mov qword [rsp + 0xb0], rax
mov rax, 0x24863541
movsx ax, r12b
mov rax, qword [rsp + 0x268]
jmp 0x1403fcbf6
mov qword [rsp + 0xb8], rax
not ah
mov al, 0xc7
movzx rax, r8w
mov rax, qword [rsp + 0x260]
mov qword [rsp + 0xc0], rax
movzx ax, r11b
jmp 0x1403fcc24
mov rax, qword [rsp + 0x258]
jmp 0x1403fcc31
mov qword [rsp + 0xc8], rax
movsx eax, r13w
movabs rax, 0xd8c34edb048f52bb
jmp 0x1403fcc4c
mov qword [rsp + 0xd0], rax
not ah
movabs rax, 0xa5c8c98b4f83a416
mov qword [rsp + 0xd8], rax
movsxd rax, esi
lahf
movabs rax, 0x2eb290273e1edaf5
mov qword [rsp + 0xe0], rax
xchg al, al
cwde
movabs rax, 0x28f53e246680b95c
jmp 0x1403fcc90
mov qword [rsp + 0xe8], rax
mov qword [rsp + 0x100], r15
mov qword [rsp + 0x108], r12
cmovbe eax, esi
cwde
mov qword [rsp + 0x110], rsi
not ax
nop
movsx ax, ah
mov qword [rsp + 0x118], rdi
movzx rax, ax
movsx eax, r12w
mov qword [rsp + 0x120], rbp
nop
movsx eax, r11w
mov qword [rsp + 0x128], r14
movzx eax, bp
mov rax, qword [rsp + 0x250]
jmp 0x1403fccf3
mov qword [rsp + 0x130], rax
cmove ax, r9w
mov rax, 0x7a233fd1
mov rax, qword [rsp + 0x248]
jmp 0x1403fcd14
mov qword [rsp + 0x138], rax
nop
cbw
mov rax, qword [rsp + 0x240]
jmp 0x1403fcd2d
mov qword [rsp + 0x140], rax
xchg ah, al
mov rax, qword [rsp + 0x238]
jmp 0x1403fcd44
mov qword [rsp + 0x148], rax
mov rax, qword [rsp + 0x230]
jmp 0x1403fcd59