Function at 0x1403fabb3
Capabilities:
Set registry value

Disassembly:
push r15
cwde
cmc
push r14
cmp r12b, 0x9b
push r13
sbb r14b, 0x72
ror r15w, 0xd2
push r12
push rsi
movzx r15w, r8b
push rdi
btc r13w, 0xf5
rol r13b, cl
cwde
push rbp
push rbx
cmp spl, 0x78
xchg r14b, al
sub rsp, 0x2f8
mov r15b, 0xb1
movzx si, cl
lahf
movabs rax, 0xe009ec3224c8fd6e
mov qword [rsp + 0x2e0], rax
movsx r13w, dil
movsx r15, di
mov qword [rsp + 0x40], rax
mov edi, 0xd0a28f8
mov r14b, bpl
movzx r15w, r14b
movabs rax, 0x2204bcb80ebea5a3
setp r12b
mov r13b, 0x92
mov qword [rsp + 0x2d8], rax
mov qword [rsp + 0x48], rax
not r13b
mov sil, spl
movsx rax, r11w
movabs rax, 0xfbc9f38de01f2fa2
mov qword [rsp + 0x2d0], rax
bswap si
xchg r13d, esi
movsx r13, r12w
mov qword [rsp + 0x50], rax
movabs rax, 0x17a75ff95317a686
not bp
cmovp edi, r10d
jmp 0x1403fac7f
mov qword [rsp + 0x2c8], rax
bswap esi
movzx ebp, dx
mov qword [rsp + 0x58], rax
mov r14b, 0x5e
bswap rsi
movabs rax, 0xfd99d5578f55fa6f
movzx ebx, bx
movsxd r12, edx
mov qword [rsp + 0x2c0], rax
mov r13d, eax
movsx ebx, r11w
xchg r14w, r14w
mov qword [rsp + 0x60], rax
movsx rbx, r14w
jmp 0x1403facc8
movabs rax, 0x4b3964fdcd447246
mov qword [rsp + 0x2b8], rax
mov r13b, 0xa4
mov qword [rsp + 0x68], rax
movsx r12d, r8w
jmp 0x1403faceb
movabs rax, 0xee88324679eb2227
movsx esi, cx
mov qword [rsp + 0x2b0], rax
not r12b
movsx rbx, r8w
movzx rdi, dx
mov qword [rsp + 0x70], rax
movabs rax, 0x6d7346ad6d4ffefa
movsx edi, r15w
movzx rbp, r12w
mov r13w, r12w
mov qword [rsp + 0x2a8], rax
mov qword [rsp + 0x78], rax
movabs rax, 0xd093683aef376a76
mov bpl, r8b
jmp 0x1403fad45
mov qword [rsp + 0x2a0], rax
xchg bpl, bl
mov qword [rsp + 0x80], rax
movabs rax, 0xa80f93e9d32b8c6f
not ebx
bswap r13w
movzx si, r14b
mov qword [rsp + 0x298], rax
movsx rsi, dx
mov qword [rsp + 0x88], rax
movzx rdi, r13w
movsx rbp, bp
movabs rax, 0x33e730243394033e
cmovns r15w, sp
setp r14b
mov qword [rsp + 0x290], rax
movsx r13, sp
not r14b
mov qword [rsp + 0x90], rax
movabs rax, 0xe7e3977e114e6703
movsx r12, bx
mov qword [rsp + 0x288], rax
xchg r15w, si
mov qword [rsp + 0x98], rax
movsxd r13, r15d
movsx r15, dx
movabs rax, 0xb0b65ec58a603c8
movzx r15, r14w
mov qword [rsp + 0x280], rax
cmovge ebx, edi
mov qword [rsp + 0xa0], rax
movabs rax, 0x6708be65ca8156d7
mov sil, 0xe3
movzx bx, r10b
mov qword [rsp + 0x278], rax
movsx bp, sil
mov qword [rsp + 0xa8], rax
movabs rax, 0x46a7044da5524090
movzx rsi, cx
movsxd rbp, ebp
mov r12w, 0x7488
mov qword [rsp + 0x270], rax
movsx r13d, r15w
movsx r13, si
movsx si, r15b
mov qword [rsp + 0xb0], rax
lahf
movabs rax, 0x4b8cb541ca050f46
movsx si, r15b
mov qword [rsp + 0x268], rax
movsx r15w, r11b
movzx r12d, di
mov qword [rsp + 0xb8], rax
movzx r15d, sp
movabs rax, 0xe627ab41184af921
xchg r14w, r12w
mov qword [rsp + 0x260], rax
mov qword [rsp + 0xc0], rax
movabs rax, 0x34c77b6e31b9a
mov qword [rsp + 0x258], rax
movzx esi, r10w
mov qword [rsp + 0xc8], rax
movsx rsi, cx
xchg bl, dil
lahf
movabs rax, 0xd8cf4ec0049852bb
mov qword [rsp + 0xd0], rax
movzx r14d, r11w
xchg r15, rbx
lahf
movabs rax, 0xa5eac9844f8ea419
mov qword [rsp + 0xd8], rax
lahf
mov qword [rsp + 0x30], 0
lahf
movzx r12, r15w
cdqe
mov dword [rsp + 0x3c], 0
lahf
movzx r13, si
movabs rbp, 0x2eb490333e21dae3
cdqe
movzx rsi, di
mov qword [rsp + 0xe0], rbp
bswap si
jmp 0x1403faf32
movabs r14, 0x28903e48668cb956
cdqe
cmovns rsi, r13
cwde
mov qword [rsp + 0xe8], r14
cwde
mov r13w, r10w
movabs r15, 0xe05dec612491fd3d
sets r12b
mov qword [rsp + 0x100], r15
bswap rsi
movzx r12, r11w
movzx eax, r13w
movabs r12, 0x2247bce40ef3a5e6
movsx esi, r9w
jmp 0x1403faf84
mov qword [rsp + 0x108], r12
xchg r13, rsi
cwde
movabs rsi, 0xfbacf3ffe06d2fd7
movzx edi, sp
xchg bh, bh
mov qword [rsp + 0x110], rsi
movabs rdi, 0x17c85fba5363a6e8
movsx rax, bp
mov qword [rsp + 0x118], rdi
movabs rax, 0xfdf6d5258f21fa01
mov qword [rsp + 0x120], rax
mov bl, bh
movsx r13d, r13w
mov rbx, rax
cwde
xchg r13d, r13d
bswap r13d
movabs rax, 0x4b4d6498cd17722a
mov qword [rsp + 0x2f0], rax
cmovae r13w, sp
movzx r13, bx
movsx r13w, r10b
mov qword [rsp + 0x128], rax
not r13
movsx ax, cl
mov al, r15b
movabs rax, 0xeefa322379b8227b
movzx r13w, r14b
mov qword [rsp + 0x250], rax
setl r13b
movsx r13, di
mov qword [rsp + 0x130], rax
movabs rax, 0x6d1646ce6d26fe8c
jmp 0x1403fb04a
mov qword [rsp + 0x248], rax
movsx r13, r9w
movsx r13w, r12b
mov qword [rsp + 0x138], rax
bswap r13w
movabs rax, 0xd0fb6869ef6b6a05
movsx r13w, dil
setge r13b
mov qword [rsp + 0x240], rax
movsx r13d, r9w
mov qword [rsp + 0x140], rax
movabs rax, 0xa86b938cd3598c0e
movzx r13, r10w
bswap r13w
mov qword [rsp + 0x238], rax
mov qword [rsp + 0x148], rax
movsx ax, spl
jmp 0x1403fb0bd
movabs rax, 0x3382304733f7037f
movsx r13d, ax
mov qword [rsp + 0x230], rax
movsx r13w, spl
cmovg r13, rsi
mov qword [rsp + 0x150], rax
movsx rax, r15w
mov r13d, r10d
movabs rax, 0xe7b39722113d6770
mov r13b, r12b
mov qword [rsp + 0x228], rax
mov r13b, 0x70
mov qword [rsp + 0x158], rax
mov r13b, bl
lahf
movsx ax, r10b
movabs rax, 0xb66658d58d403a9
movsx r13w, r8b
mov qword [rsp + 0x220], rax
setnp r13b
movzx r13d, ax
movzx r13, r8w
mov qword [rsp + 0x160], rax
mov ax, 0x14c8
jmp 0x1403fb14c
movabs rax, 0x677abe00caf556b2
movsxd r13, r14d
setg r13b
mov qword [rsp + 0x218], rax
mov qword [rsp + 0x168], rax
movzx r13d, r13w
movabs rax, 0x46ce040ba50e40e3
mov r13d, 0x153b07a5
movzx r13, r10w
mov r13w, sp
mov qword [rsp + 0x210], rax
mov qword [rsp + 0x170], rax
movabs rax, 0x4bedb536ca600f34
mov qword [rsp + 0x208], rax
movzx r13w, r12b
mov qword [rsp + 0x178], rax
mov eax, 0x5d2e59f1
movabs rax, 0xe648ab111826f94d
movzx r13w, dl
movsx r13w, r10b
mov r13d, 0x4ca55863
mov qword [rsp + 0x200], rax
mov r13w, r13w
movsxd r13, r14d
mov qword [rsp + 0x180], rax
lahf
cdqe
movabs rax, 0x7a4c14b68a1bf6
mov qword [rsp + 0x1f8], rax
mov qword [rsp + 0x188], rax
cbw
movsx r13d, ax
movabs rax, 0xd8a24eaf04dc52e7
mov r13b, r8b
movzx r13, si
mov r13b, 0xa7
mov qword [rsp + 0x1f0], rax
movsx r13w, dl
mov r13b, r8b
not r13w
mov qword [rsp + 0x190], rax
jmp 0x1403fb24a
movabs rax, 0xa5bac9ea4fe7a478
movzx r13w, al
mov qword [rsp + 0x1e8], rax
mov qword [rsp + 0x198], rax
movabs rax, 0x2edd90553e4eda91
setns r13b
mov qword [rsp + 0x1e0], rax
xchg r13b, r13b
movsxd r13, ebx
movsx r13w, r13b
mov qword [rsp + 0x1a0], rax
movzx r13, si
movzx r13w, r9b
movabs rax, 0x28903e4866e9b93a
movsxd r13, edi
mov qword [rsp + 0x1d8], rax
sete r13b
movzx r13, sp
mov qword [rsp + 0x1a8], rax
movsx ax, r13b
lea r13, [rsp + 0x100]
sete al
lahf
mov rax, r13
jmp 0x1403fb2d9
movaps xmm0, xmmword [rsp + 0x40]
jmp 0x1403fb2e3
xorps xmm0, xmmword [rax]
movaps xmmword [rsp + 0x40], xmm0
jmp 0x1403fb2f0
movaps xmm0, xmmword [rsp + 0x50]
jmp 0x1403fb2fa
xorps xmm0, xmmword [rax + 0x10]
movaps xmmword [rsp + 0x50], xmm0
jmp 0x1403fb308
movaps xmm0, xmmword [rsp + 0x60]
jmp 0x1403fb312
xorps xmm0, xmmword [rax + 0x20]
movaps xmmword [rsp + 0x60], xmm0
movaps xmm0, xmmword [rsp + 0x70]
xorps xmm0, xmmword [rax + 0x30]
movaps xmmword [rsp + 0x70], xmm0
jmp 0x1403fb32e
movaps xmm0, xmmword [rsp + 0x80]
jmp 0x1403fb33b
xorps xmm0, xmmword [rax + 0x40]
movaps xmmword [rsp + 0x80], xmm0
jmp 0x1403fb34c
movaps xmm0, xmmword [rsp + 0x90]
jmp 0x1403fb359
xorps xmm0, xmmword [rax + 0x50]
movaps xmmword [rsp + 0x90], xmm0
jmp 0x1403fb36a
movaps xmm0, xmmword [rsp + 0xa0]
xorps xmm0, xmmword [rax + 0x60]
movaps xmmword [rsp + 0xa0], xmm0
movaps xmm0, xmmword [rsp + 0xb0]
xorps xmm0, xmmword [rax + 0x70]
movaps xmmword [rsp + 0xb0], xmm0
movaps xmm0, xmmword [rsp + 0xc0]
jmp 0x1403fb39f
xorps xmm0, xmmword [rax + 0x80]
movaps xmmword [rsp + 0xc0], xmm0
movaps xmm0, xmmword [rsp + 0xd0]
jmp 0x1403fb3bb
xorps xmm0, xmmword [rax + 0x90]
movaps xmmword [rsp + 0xd0], xmm0
jmp 0x1403fb3cf
movaps xmm0, xmmword [rsp + 0xe0]
jmp 0x1403fb3dc
xorps xmm0, xmmword [rax + 0xa0]
movaps xmmword [rsp + 0xe0], xmm0
movzx r8, ax
lea rdx, [rsp + 0x40]
bswap cx
mov r8d, 0x44105e53
jmp 0x1403fb402
lea r8, [rsp + 0x30]
jmp 0x1403fb410
mov rcx, 0xffffffff80000002
jmp 0x1403fb41c
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyW]
movabs rax, 0xe03fec0024fffd78
jmp 0x1403fb431
mov qword [rsp + 0x1d0], rax
jmp 0x1403fb43e
mov qword [rsp + 0x40], rax
movabs rax, 0x222ebca20e96a58a
jmp 0x1403fb452
mov qword [rsp + 0x1c8], rax
jmp 0x1403fb45f
mov qword [rsp + 0x48], rax
jmp 0x1403fb46a
movabs rax, 0xfbcdf388e0082fa5
jmp 0x1403fb479
mov qword [rsp + 0x2e8], rax
mov qword [rsp + 0x50], rax
jmp 0x1403fb48d
movabs rax, 0x17c85fba530fa684
mov qword [rsp + 0x1c0], rax
jmp 0x1403fb4a4
mov qword [rsp + 0x58], rax
not ax
cmovg ax, r9w
mov eax, 0x343a1406
mov qword [rsp + 0x100], r15
mov eax, 0x1668379c
nop
mov qword [rsp + 0x108], r12
cmovp rax, rdi
mov qword [rsp + 0x110], rsi
mov qword [rsp + 0x118], rdi
cbw
mov rax, r13
jmp 0x1403fb4eb
movaps xmm0, xmmword [rsp + 0x40]
jmp 0x1403fb4f5
xorps xmm0, xmmword [rax]
movaps xmmword [rsp + 0x40], xmm0
jmp 0x1403fb502
movaps xmm0, xmmword [rsp + 0x50]
jmp 0x1403fb50c
xorps xmm0, xmmword [rax + 0x10]
movaps xmmword [rsp + 0x50], xmm0
movsx ax, spl
mov rcx, qword [rsp + 0x30]
lea rax, [rsp + 0x3c]
ror dh, 0x16
shl r9b, 0xb7
mov qword [rsp + 0x20], rax
mov dword [rsp + 0x28], 4
adc dl, 0xe9
lea rdx, [rsp + 0x40]
mov r9b, 0x9e
xor r8d, r8d
movzx r9d, r13w
mov r9d, 4
jmp 0x1403fb555
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
mov rcx, qword [rsp + 0x30]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov rax, qword [rsp + 0x2e0]
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x2d8]
jmp 0x1403fb580
mov qword [rsp + 0x48], rax
mov rax, qword [rsp + 0x2d0]
jmp 0x1403fb592
mov qword [rsp + 0x50], rax
movzx eax, di
movsx eax, r14w
bswap rax
mov rax, qword [rsp + 0x2c8]
jmp 0x1403fb5ae
mov qword [rsp + 0x58], rax
cmovbe ax, si
bswap ax
mov rax, qword [rsp + 0x2c0]
jmp 0x1403fb5c7
mov qword [rsp + 0x60], rax
mov rax, qword [rsp + 0x2b8]
mov qword [rsp + 0x68], rax
cbw
movzx ax, bpl
mov rax, qword [rsp + 0x2b0]
jmp 0x1403fb5ed
mov qword [rsp + 0x70], rax
movsx ax, r8b
setp ah
cbw
mov rax, qword [rsp + 0x2a8]
jmp 0x1403fb609
mov qword [rsp + 0x78], rax
movzx ax, r13b
movsxd rax, edx
mov rax, qword [rsp + 0x2a0]
jmp 0x1403fb623
mov qword [rsp + 0x80], rax
movsx rax, r12w
cmovs ax, r10w
mov rax, qword [rsp + 0x298]
jmp 0x1403fb641
mov qword [rsp + 0x88], rax
movzx rax, r15w
movsxd rax, ecx
mov rax, qword [rsp + 0x290]
mov qword [rsp + 0x90], rax
nop
cbw
mov rax, qword [rsp + 0x288]
mov qword [rsp + 0x98], rax
setno ah
cmovl rax, r14
mov rax, qword [rsp + 0x280]
jmp 0x1403fb688
mov qword [rsp + 0xa0], rax
movzx rax, ax
setnp ah
mov rax, qword [rsp + 0x278]
jmp 0x1403fb6a4
mov qword [rsp + 0xa8], rax
setge ah
mov rax, qword [rsp + 0x270]
mov qword [rsp + 0xb0], rax
mov al, 0x27
mov rax, qword [rsp + 0x268]
mov qword [rsp + 0xb8], rax
mov rax, qword [rsp + 0x260]
jmp 0x1403fb6de
mov qword [rsp + 0xc0], rax
movsx rax, r8w
not al
movzx rax, cx
mov rax, qword [rsp + 0x258]
jmp 0x1403fb6fd
mov qword [rsp + 0xc8], rax
movabs rax, 0xd8c04eda048c52bb
jmp 0x1403fb714
mov qword [rsp + 0xd0], rax
xchg ah, al
movabs rax, 0xa5eac9894f8ea414
jmp 0x1403fb72d
mov qword [rsp + 0xd8], rax
movsx rax, r8w
lahf
setnp ah
mov qword [rsp + 0xe0], rbp
movzx ebp, di
cbw
movsx bp, bpl
mov qword [rsp + 0xe8], r14
mov qword [rsp + 0x100], r15
movzx rax, cx
mov qword [rsp + 0x108], r12
movzx r14w, cl
lahf
mov qword [rsp + 0x110], rsi
mov bp, 0x76ef
mov qword [rsp + 0x118], rdi
mov rbp, rbx
mov qword [rsp + 0x120], rbx
mov r14, qword [rsp + 0x2f0]
mov qword [rsp + 0x128], r14
not ah
bswap eax
mov rax, qword [rsp + 0x250]
jmp 0x1403fb7b1
mov qword [rsp + 0x130], rax
movzx eax, r9w
mov rax, qword [rsp + 0x248]
jmp 0x1403fb7ca
mov qword [rsp + 0x138], rax
movsx rax, bp
movsx ax, spl
mov rax, qword [rsp + 0x240]
jmp 0x1403fb7e8
mov qword [rsp + 0x140], rax
cmovle ax, r12w
mov rax, qword [rsp + 0x238]
jmp 0x1403fb802
mov qword [rsp + 0x148], rax
mov rax, qword [rsp + 0x230]
mov qword [rsp + 0x150], rax
movsxd rax, ebx
mov rax, qword [rsp + 0x228]
jmp 0x1403fb82a
mov qword [rsp + 0x158], rax
cwde
cdqe
cmovno rax, rdi
mov rax, qword [rsp + 0x220]
jmp 0x1403fb846
mov qword [rsp + 0x160], rax
mov rax, qword [rsp + 0x218]
jmp 0x1403fb85b
mov qword [rsp + 0x168], rax
movsxd rax, esi
cdqe
mov rax, qword [rsp + 0x210]
mov qword [rsp + 0x170], rax
mov rax, qword [rsp + 0x208]
jmp 0x1403fb885
mov qword [rsp + 0x178], rax
cdqe
movzx ax, dil
mov rax, qword [rsp + 0x200]
jmp 0x1403fb8a1
mov qword [rsp + 0x180], rax
movzx eax, bp
cmovs ax, bp
mov rax, qword [rsp + 0x1f8]
mov qword [rsp + 0x188], rax
mov eax, r11d
jmp 0x1403fb8c8
mov rax, qword [rsp + 0x1f0]
jmp 0x1403fb8d5
mov qword [rsp + 0x190], rax
mov rax, qword [rsp + 0x1e8]
jmp 0x1403fb8ea
mov qword [rsp + 0x198], rax
mov rax, qword [rsp + 0x1e0]
mov qword [rsp + 0x1a0], rax
cdqe
movsxd rax, r10d
movsx rax, si
mov rax, qword [rsp + 0x1d8]
jmp 0x1403fb918
mov qword [rsp + 0x1a8], rax
cbw
bswap rax
mov rax, r13
jmp 0x1403fb92d
movaps xmm0, xmmword [rsp + 0x40]
jmp 0x1403fb937
movaps xmm1, xmmword [rsp + 0x50]
jmp 0x1403fb941
movaps xmm2, xmmword [rsp + 0x60]
xorps xmm0, xmmword [rax]
movaps xmm3, xmmword [rsp + 0x70]
movaps xmmword [rsp + 0x40], xmm0
jmp 0x1403fb958
xorps xmm1, xmmword [rax + 0x10]
movaps xmmword [rsp + 0x50], xmm1
jmp 0x1403fb966
xorps xmm2, xmmword [rax + 0x20]
movaps xmmword [rsp + 0x60], xmm2
jmp 0x1403fb974
xorps xmm3, xmmword [rax + 0x30]
movaps xmmword [rsp + 0x70], xmm3
jmp 0x1403fb982
movaps xmm0, xmmword [rsp + 0x80]
jmp 0x1403fb98f
xorps xmm0, xmmword [rax + 0x40]
movaps xmmword [rsp + 0x80], xmm0
jmp 0x1403fb9a0
movaps xmm0, xmmword [rsp + 0x90]
jmp 0x1403fb9ad
xorps xmm0, xmmword [rax + 0x50]
movaps xmmword [rsp + 0x90], xmm0
jmp 0x1403fb9be
movaps xmm0, xmmword [rsp + 0xa0]
jmp 0x1403fb9cb
xorps xmm0, xmmword [rax + 0x60]
movaps xmmword [rsp + 0xa0], xmm0
jmp 0x1403fb9dc
movaps xmm0, xmmword [rsp + 0xb0]
jmp 0x1403fb9e9
xorps xmm0, xmmword [rax + 0x70]
movaps xmmword [rsp + 0xb0], xmm0
jmp 0x1403fb9fa
movaps xmm0, xmmword [rsp + 0xc0]
jmp 0x1403fba07
xorps xmm0, xmmword [rax + 0x80]
movaps xmmword [rsp + 0xc0], xmm0
movaps xmm0, xmmword [rsp + 0xd0]
jmp 0x1403fba23
xorps xmm0, xmmword [rax + 0x90]
movaps xmmword [rsp + 0xd0], xmm0
jmp 0x1403fba37
movaps xmm0, xmmword [rsp + 0xe0]
jmp 0x1403fba44
xorps xmm0, xmmword [rax + 0xa0]
movaps xmmword [rsp + 0xe0], xmm0
lea rdx, [rsp + 0x40]
mov rcx, 0xffffffff80000002
cmovns r8w, r13w
lea r8, [rsp + 0x30]
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyW]
mov rax, qword [rsp + 0x1d0]
bswap bx
mov qword [rsp + 0x40], rax
movsx ax, bpl
mov rax, qword [rsp + 0x1c8]
mov qword [rsp + 0x48], rax
cdqe
mov rbx, qword [rsp + 0x2e8]
mov qword [rsp + 0x50], rbx
mov rax, qword [rsp + 0x1c0]
jmp 0x1403fbaad
mov qword [rsp + 0x58], rax
movsx eax, r10w
setns al
mov qword [rsp + 0x100], r15
movsxd rax, edx
jmp 0x1403fbac9
mov qword [rsp + 0x108], r12
mov ah, 0x14
mov qword [rsp + 0x110], rsi
cmovbe ax, r10w
mov qword [rsp + 0x118], rdi
mov rax, r13
jmp 0x1403fbaf1
movaps xmm0, xmmword [rsp + 0x40]
jmp 0x1403fbafb
xorps xmm0, xmmword [rax]
movaps xmmword [rsp + 0x40], xmm0
movaps xmm0, xmmword [rsp + 0x50]
jmp 0x1403fbb0d
xorps xmm0, xmmword [rax + 0x10]
movaps xmmword [rsp + 0x50], xmm0
mov eax, 0x6ed14b23
add r9b, r11b
and r9b, 0xb0
mov rcx, qword [rsp + 0x30]
cqo
btr r9w, 0x4d
lea rax, [rsp + 0x3c]
and dl, 0x3c
mov qword [rsp + 0x20], rax
bt dx, di
mov dword [rsp + 0x28], 4
bsf dx, ax
lea rdx, [rsp + 0x40]
movzx r9, r13w
adc r9b, sil
xor r8d, r8d
movzx r9d, cx
xchg r9d, r9d
mov r9b, 0xf4
mov r9d, 4
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
mov rcx, qword [rsp + 0x30]
jmp 0x1403fbb7b
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov rax, qword [rsp + 0x2e0]
jmp 0x1403fbb8e
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x2d8]
mov qword [rsp + 0x48], rax
movsx eax, bx
cdqe
mov rax, qword [rsp + 0x2d0]
jmp 0x1403fbbb2
mov qword [rsp + 0x50], rax
mov rax, qword [rsp + 0x2c8]
jmp 0x1403fbbc4
mov qword [rsp + 0x58], rax
jmp 0x1403fbbd5
mov rax, qword [rsp + 0x2c0]
jmp 0x1403fbbe2
mov qword [rsp + 0x60], rax
movzx rax, ax
movsx ax, r13b
mov rax, qword [rsp + 0x2b8]
jmp 0x1403fbbfd
mov qword [rsp + 0x68], rax
cwde
movzx ax, r15b
mov rax, qword [rsp + 0x2b0]
jmp 0x1403fbc15
mov qword [rsp + 0x70], rax
mov rax, qword [rsp + 0x2a8]
jmp 0x1403fbc27
mov qword [rsp + 0x78], rax
mov ah, 0x46
cbw
mov rax, qword [rsp + 0x2a0]
mov qword [rsp + 0x80], rax
mov rax, qword [rsp + 0x298]
mov qword [rsp + 0x88], rax
movzx eax, r13w
movsxd rax, r13d
mov rax, qword [rsp + 0x290]
mov qword [rsp + 0x90], rax
mov rax, qword [rsp + 0x288]
jmp 0x1403fbc75
mov qword [rsp + 0x98], rax
not ah
lahf
mov rax, qword [rsp + 0x280]
jmp 0x1403fbc8d
mov qword [rsp + 0xa0], rax
cwde
mov rax, qword [rsp + 0x278]
jmp 0x1403fbca3
mov qword [rsp + 0xa8], rax
nop
movsx ax, r8b
mov rax, qword [rsp + 0x270]
jmp 0x1403fbcbf
mov qword [rsp + 0xb0], rax
mov rax, qword [rsp + 0x268]
jmp 0x1403fbcd4
mov qword [rsp + 0xb8], rax
movsx rax, di
cwde
mov rax, qword [rsp + 0x260]
mov qword [rsp + 0xc0], rax
mov rax, qword [rsp + 0x258]
mov qword [rsp + 0xc8], rax
movzx ax, r15b
movabs rax, 0xd8c34edb048f52bb
mov qword [rsp + 0xd0], rax
cmove ax, bp
movzx rax, ax
mov ah, al
movabs rax, 0xa5c8c98b4f83a416
mov qword [rsp + 0xd8], rax
movabs rax, 0x2eb290273e1edaf5
mov qword [rsp + 0xe0], rax
jmp 0x1403fbd4f
movabs rax, 0x28f53e246680b95c
jmp 0x1403fbd5e
mov qword [rsp + 0xe8], rax
xchg al, ah
cbw
movsx ax, r9b
mov qword [rsp + 0x100], r15
mov qword [rsp + 0x108], r12
mov qword [rsp + 0x110], rsi
mov qword [rsp + 0x118], rdi
movsx eax, sp
mov qword [rsp + 0x120], rbp
mov qword [rsp + 0x128], r14
jmp 0x1403fbdab
mov rax, qword [rsp + 0x250]
jmp 0x1403fbdb8
mov qword [rsp + 0x130], rax
mov rax, qword [rsp + 0x248]
jmp 0x1403fbdcd
mov qword [rsp + 0x138], rax
movsxd rax, esp
nop
movsx eax, sp
mov rax, qword [rsp + 0x240]
jmp 0x1403fbdea
mov qword [rsp + 0x140], rax
mov rax, qword [rsp + 0x238]
jmp 0x1403fbdff
mov qword [rsp + 0x148], rax
jmp 0x1403fbe0c
mov rax, qword [rsp + 0x230]
jmp 0x1403fbe19
mov qword [rsp + 0x150], rax
mov rax, qword [rsp + 0x228]
jmp 0x1403fbe2e
mov qword [rsp + 0x158], rax
movzx rax, cx
cbw
mov rax, qword [rsp + 0x220]
mov qword [rsp + 0x160], rax
setno al
movsx ax, r13b
nop
mov rax, qword [rsp + 0x218]
mov qword [rsp + 0x168], rax
mov rax, 0x45e00ff5
mov rax, qword [rsp + 0x210]
mov qword [rsp + 0x170], rax
cwde
movsx ax, r12b
mov rax, qword [rsp + 0x208]
jmp 0x1403fbe8f
mov qword [rsp + 0x178], rax
movsx eax, di
not ah
cdqe
mov rax, qword [rsp + 0x200]
mov qword [rsp + 0x180], rax
mov ah, 0x8c
mov rax, qword [rsp + 0x1f8]
mov qword [rsp + 0x188], rax
mov ax, bp
movzx ax, bpl
mov rax, qword [rsp + 0x1f0]
jmp 0x1403fbed6
mov qword [rsp + 0x190], rax
movzx eax, r11w
movsx rax, r13w
mov rax, qword [rsp + 0x1e8]
jmp 0x1403fbef3
mov qword [rsp + 0x198], rax
lahf
cmovge ax, r12w
mov rax, qword [rsp + 0x1e0]
jmp 0x1403fbf0e
mov qword [rsp + 0x1a0], rax
mov rax, qword [rsp + 0x1d8]
jmp 0x1403fbf23
mov qword [rsp + 0x1a8], rax
cwde
cbw
lahf
movabs rax, 0xa1410f538a85c08b
jmp 0x1403fbf3e
mov qword [rsp + 0xf0], rax
mov qword [rsp + 0x1b0], rax
movzx ax, r14b
not ax
movsx ax, r13b
movabs rax, 0x6078a8fe5539451c
jmp 0x1403fbf6a
mov qword [rsp + 0xf8], rax
jmp 0x1403fbf77
mov qword [rsp + 0x1b8], rax
xchg ah, al
sete ah
mov rax, r13
jmp 0x1403fbf8c
movaps xmm0, xmmword [rsp + 0x40]
jmp 0x1403fbf96
movaps xmm1, xmmword [rsp + 0x50]
jmp 0x1403fbfa0
movaps xmm2, xmmword [rsp + 0x60]
jmp 0x1403fbfaa
xorps xmm0, xmmword [rax]
movaps xmm3, xmmword [rsp + 0x70]
jmp 0x1403fbfb7