Function at 0x1403fac50
Capabilities:
Set registry value

Disassembly:
push r15
shr rax, 0x10
rcl al, 0x1a
or al, r8b
push r14
push r13
bts r15, r9
cwde
push r12
shr r14b, cl
movzx r14d, r14w
push rsi
rcr r14d, cl
push rdi
push rbp
or r15b, 0x94
shrd r14d, esi, 0x34
bswap rsi
push rbx
lahf
shld bx, r10w, 0xf2
movzx rbx, r11w
sub rsp, 0x2f8
movabs rax, 0xe009ec3224c8fd6e
mov qword [rsp + 0x2e0], rax
mov qword [rsp + 0x40], rax
movabs rax, 0x2204bcb80ebea5a3
mov qword [rsp + 0x2d8], rax
mov qword [rsp + 0x48], rax
bswap r15
not ah
setae dil
movabs rax, 0xfbc9f38de01f2fa2
movsx r14w, bl
mov qword [rsp + 0x2d0], rax
cmovo rsi, r15
mov qword [rsp + 0x50], rax
movabs rax, 0x17a75ff95317a686
not esi
mov bx, 0x61c4
mov qword [rsp + 0x2c8], rax
movsxd r13, eax
mov qword [rsp + 0x58], rax
movzx r13d, cx
jmp 0x1403fad17
movabs rax, 0xfd99d5578f55fa6f
cmovns rdi, r8
movzx si, r13b
mov qword [rsp + 0x2c0], rax
mov qword [rsp + 0x60], rax
movabs rax, 0x4b3964fdcd447246
cmovp r14, rbp
movzx r12, di
mov qword [rsp + 0x2b8], rax
mov qword [rsp + 0x68], rax
movsx rbx, r13w
mov dil, 0x80
movabs rax, 0xee88324679eb2227
mov rsi, 0x6dc05995
movsx r12, bp
movsx edi, r10w
mov qword [rsp + 0x2b0], rax
mov qword [rsp + 0x70], rax
movsx r13d, di
setbe ah
cmovb r14d, r11d
movabs rax, 0x6d7346ad6d4ffefa
mov qword [rsp + 0x2a8], rax
xchg r15w, r15w
mov rbp, r13
mov qword [rsp + 0x78], rax
movabs rax, 0xd093683aef376a76
movsx r15w, r13b
movzx rdi, r12w
mov qword [rsp + 0x2a0], rax
xchg si, bp
mov qword [rsp + 0x80], rax
movsx ebp, r8w
setp bh
movabs rax, 0xa80f93e9d32b8c6f
jmp 0x1403fadf0
mov qword [rsp + 0x298], rax
cmovg di, di
seto r13b
mov qword [rsp + 0x88], rax
movsx bp, r12b
movabs rax, 0x33e730243394033e
bswap r13
mov qword [rsp + 0x290], rax
bswap si
mov r12b, r15b
movzx r15w, bl
mov qword [rsp + 0x90], rax
cmovp r14d, esp
movzx r12, r9w
movabs rax, 0xe7e3977e114e6703
mov qword [rsp + 0x288], rax
movsx edi, sp
bswap rsi
xchg r13w, r14w
mov qword [rsp + 0x98], rax
lahf
movabs rax, 0xb0b65ec58a603c8
mov rsi, 0x2ff15bc3
bswap r12d
mov qword [rsp + 0x280], rax
mov qword [rsp + 0xa0], rax
movabs rax, 0x6708be65ca8156d7
cmovnp r14d, ebx
movsx r13d, cx
mov qword [rsp + 0x278], rax
movzx r13, sp
jmp 0x1403faea9
mov qword [rsp + 0xa8], rax
mov bx, 0x5731
not bx
movabs rax, 0x46a7044da5524090
mov qword [rsp + 0x270], rax
bswap r15d
movzx r15, r11w
movzx r14d, r8w
mov qword [rsp + 0xb0], rax
movabs rax, 0x4b8cb541ca050f46
movsx r12w, bpl
mov qword [rsp + 0x268], rax
movsx esi, cx
movsx si, r14b
cmovge r13d, r8d
mov qword [rsp + 0xb8], rax
cbw
cmovb rbx, rbx
jmp 0x1403faf13
movabs rax, 0xe627ab41184af921
mov sil, 0xf4
movsx rbp, r8w
mov qword [rsp + 0x260], rax
movsx ebx, ax
movzx ebp, r9w
mov qword [rsp + 0xc0], rax
lahf
movabs rax, 0x34c77b6e31b9a
xchg r13b, r12b
movzx r15d, r11w
movsx edi, r8w
mov qword [rsp + 0x258], rax
mov qword [rsp + 0xc8], rax
movsx r12, r11w
cwde
mov al, bpl
movabs rax, 0xd8cf4ec0049852bb
movsx r15, bx
cmove bp, r8w
jmp 0x1403faf81
mov qword [rsp + 0xd0], rax
movabs rax, 0xa5eac9844f8ea419
movsx rbx, r13w
mov qword [rsp + 0xd8], rax
jmp 0x1403fafac
mov qword [rsp + 0x30], 0
movzx r13, dx
mov dword [rsp + 0x3c], 0
movabs rbp, 0x2eb490333e21dae3
jmp 0x1403fafd5
mov qword [rsp + 0xe0], rbp
bswap r12w
movabs r14, 0x28903e48668cb956
xchg r12w, ax
movzx r15, r13w
mov qword [rsp + 0xe8], r14
movabs r15, 0xe05dec612491fd3d
movzx r12, r15w
movzx di, dil
mov qword [rsp + 0x100], r15
movzx eax, bx
setge r12b
movabs r12, 0x2247bce40ef3a5e6
cbw
jmp 0x1403fb02d
mov qword [rsp + 0x108], r12
cwde
movabs rsi, 0xfbacf3ffe06d2fd7
mov qword [rsp + 0x110], rsi
movsx edi, di
movzx eax, r14w
movabs rdi, 0x17c85fba5363a6e8
movsx eax, ax
mov qword [rsp + 0x118], rdi
movsx bx, r9b
cbw
mov r13b, 0xe9
movabs rax, 0xfdf6d5258f21fa01
movzx bx, r8b
mov qword [rsp + 0x120], rax
cmovae r13w, si
jmp 0x1403fb08f
mov rbx, rax
lahf
movsxd r13, esp
xchg al, ah
movabs rax, 0x4b4d6498cd17722a
jmp 0x1403fb0aa
mov qword [rsp + 0x2f0], rax
mov r13b, r11b
mov qword [rsp + 0x128], rax
bswap ax
movsxd r13, ebx
cbw
movabs rax, 0xeefa322379b8227b
mov qword [rsp + 0x250], rax
bswap r13d
mov qword [rsp + 0x130], rax
cwde
movabs rax, 0x6d1646ce6d26fe8c
movsx r13d, bx
movzx r13, dx
mov qword [rsp + 0x248], rax
bswap r13w
movzx r13d, r15w
mov qword [rsp + 0x138], rax
movabs rax, 0xd0fb6869ef6b6a05
movsxd r13, r14d
mov qword [rsp + 0x240], rax
movsxd r13, r11d
mov qword [rsp + 0x140], rax
xchg r13b, al
movsx eax, r12w
movabs rax, 0xa86b938cd3598c0e
xchg r13w, r13w
movzx r13, r13w
mov qword [rsp + 0x238], rax
mov qword [rsp + 0x148], rax
seta al
movsx ax, r9b
movabs rax, 0x3382304733f7037f
mov qword [rsp + 0x230], rax
bswap r13w
movzx r13w, sil
mov qword [rsp + 0x150], rax
lahf
cwde
movabs rax, 0xe7b39722113d6770
mov r13b, 0xfa
mov qword [rsp + 0x228], rax
movzx r13w, al
setne r13b
mov qword [rsp + 0x158], rax
jmp 0x1403fb1ae
movabs rax, 0xb66658d58d403a9
movsx r13, bx
cmove r13w, bx
bswap r13
mov qword [rsp + 0x220], rax
movsx r13w, r11b
mov r13b, r14b
mov qword [rsp + 0x160], rax
mov eax, r15d
movabs rax, 0x677abe00caf556b2
mov qword [rsp + 0x218], rax
mov qword [rsp + 0x168], rax
cdqe
cmova r13w, ax
movsx rax, dx
movabs rax, 0x46ce040ba50e40e3
movsx r13d, r8w
setne r13b
not r13
mov qword [rsp + 0x210], rax
movsx r13w, bpl
mov qword [rsp + 0x170], rax
movsx ax, dil
mov eax, 0x58fc7a1a
movzx eax, r9w
movabs rax, 0x4bedb536ca600f34
setb r13b
mov r13, 0x7f651b2e
mov qword [rsp + 0x208], rax
movsx r13w, r9b
mov qword [rsp + 0x178], rax
movsxd r13, r11d
movabs rax, 0xe648ab111826f94d
movzx r13d, di
jmp 0x1403fb27f
mov qword [rsp + 0x200], rax
movzx r13d, r13w
mov qword [rsp + 0x180], rax
movabs rax, 0x7a4c14b68a1bf6
mov qword [rsp + 0x1f8], rax
mov qword [rsp + 0x188], rax
cwde
movzx r13, r14w
movabs rax, 0xd8a24eaf04dc52e7
movsx r13d, r14w
mov r13w, r12w
jmp 0x1403fb2c9
mov qword [rsp + 0x1f0], rax
movzx r13d, di
mov r13w, 0x370e
mov qword [rsp + 0x190], rax
cbw
movabs rax, 0xa5bac9ea4fe7a478
bswap r13w
mov qword [rsp + 0x1e8], rax
movsx r13d, r11w
mov qword [rsp + 0x198], rax
movabs rax, 0x2edd90553e4eda91
cmovg r13w, r11w
movzx r13d, r11w
xchg r13, r13
mov qword [rsp + 0x1e0], rax
movzx r13w, dl
mov qword [rsp + 0x1a0], rax
movzx eax, bx
movabs rax, 0x28903e4866e9b93a
movsx r13d, r14w
cmovnp r13w, r10w
mov r13b, r14b
mov qword [rsp + 0x1d8], rax
mov qword [rsp + 0x1a8], rax
movsx r13d, r11w
not ax
lea r13, [rsp + 0x100]
cdqe
lahf
setbe ah
mov rax, r13
jmp 0x1403fb377
movaps xmm0, xmmword [rsp + 0x40]
jmp 0x1403fb381
xorps xmm0, xmmword [rax]
movaps xmmword [rsp + 0x40], xmm0
movaps xmm0, xmmword [rsp + 0x50]
jmp 0x1403fb393
xorps xmm0, xmmword [rax + 0x10]
movaps xmmword [rsp + 0x50], xmm0
jmp 0x1403fb3a1
movaps xmm0, xmmword [rsp + 0x60]
jmp 0x1403fb3ab
xorps xmm0, xmmword [rax + 0x20]
movaps xmmword [rsp + 0x60], xmm0
movaps xmm0, xmmword [rsp + 0x70]
jmp 0x1403fb3be
xorps xmm0, xmmword [rax + 0x30]
movaps xmmword [rsp + 0x70], xmm0
jmp 0x1403fb3cc
movaps xmm0, xmmword [rsp + 0x80]
jmp 0x1403fb3d9
xorps xmm0, xmmword [rax + 0x40]
movaps xmmword [rsp + 0x80], xmm0
jmp 0x1403fb3ea
movaps xmm0, xmmword [rsp + 0x90]
jmp 0x1403fb3f7
xorps xmm0, xmmword [rax + 0x50]
movaps xmmword [rsp + 0x90], xmm0
jmp 0x1403fb408
movaps xmm0, xmmword [rsp + 0xa0]
jmp 0x1403fb415
xorps xmm0, xmmword [rax + 0x60]
movaps xmmword [rsp + 0xa0], xmm0
jmp 0x1403fb426
movaps xmm0, xmmword [rsp + 0xb0]
jmp 0x1403fb433
xorps xmm0, xmmword [rax + 0x70]
movaps xmmword [rsp + 0xb0], xmm0
jmp 0x1403fb444
movaps xmm0, xmmword [rsp + 0xc0]
jmp 0x1403fb451
xorps xmm0, xmmword [rax + 0x80]
movaps xmmword [rsp + 0xc0], xmm0
jmp 0x1403fb465
movaps xmm0, xmmword [rsp + 0xd0]
jmp 0x1403fb472
xorps xmm0, xmmword [rax + 0x90]
movaps xmmword [rsp + 0xd0], xmm0
movaps xmm0, xmmword [rsp + 0xe0]
jmp 0x1403fb48e
xorps xmm0, xmmword [rax + 0xa0]
movaps xmmword [rsp + 0xe0], xmm0
movsxd rcx, ebp
not cx
lea rdx, [rsp + 0x40]
movzx ecx, r13w
not r8d
mov cl, al
lea r8, [rsp + 0x30]
movzx ecx, r9w
xchg ecx, ecx
mov rcx, 0xffffffff80000002
jmp 0x1403fb4c8
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyW]
movabs rax, 0xe03fec0024fffd78
jmp 0x1403fb4dd
mov qword [rsp + 0x1d0], rax
jmp 0x1403fb4ea
mov qword [rsp + 0x40], rax
cdqe
movabs rax, 0x222ebca20e96a58a
mov qword [rsp + 0x1c8], rax
mov qword [rsp + 0x48], rax
movabs rax, 0xfbcdf388e0082fa5
mov qword [rsp + 0x2e8], rax
jmp 0x1403fb51f
mov qword [rsp + 0x50], rax
movsxd rax, ebx
movsx rax, ax
movabs rax, 0x17c85fba530fa684
mov qword [rsp + 0x1c0], rax
jmp 0x1403fb542
mov qword [rsp + 0x58], rax
cdqe
mov qword [rsp + 0x100], r15
not ax
seta ah
movzx eax, r12w
mov qword [rsp + 0x108], r12
setne al
movzx eax, r9w
mov qword [rsp + 0x110], rsi
sets al
nop
mov qword [rsp + 0x118], rdi
mov rax, r11
not ah
mov rax, 0x638e2111
mov rax, r13
jmp 0x1403fb593
movaps xmm0, xmmword [rsp + 0x40]
xorps xmm0, xmmword [rax]
movaps xmmword [rsp + 0x40], xmm0
jmp 0x1403fb5a5
movaps xmm0, xmmword [rsp + 0x50]
jmp 0x1403fb5af
xorps xmm0, xmmword [rax + 0x10]
movaps xmmword [rsp + 0x50], xmm0
mov rcx, qword [rsp + 0x30]
bts ax, di
lea rax, [rsp + 0x3c]
mov qword [rsp + 0x20], rax
bt rdx, 0x70
mov dword [rsp + 0x28], 4
movsxd rdx, r15d
rcl r9b, cl
lea rdx, [rsp + 0x40]
mov r9w, 0x7beb
xor r8d, r8d
movsx r9w, r10b
bswap r9w
mov r9d, 4
jmp 0x1403fb5ff
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
mov rcx, qword [rsp + 0x30]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov rax, qword [rsp + 0x2e0]
mov qword [rsp + 0x40], rax
cwde
mov rax, qword [rsp + 0x2d8]
mov qword [rsp + 0x48], rax
mov rax, qword [rsp + 0x2d0]
mov qword [rsp + 0x50], rax
cbw
mov rax, qword [rsp + 0x2c8]
mov qword [rsp + 0x58], rax
mov rax, qword [rsp + 0x2c0]
jmp 0x1403fb654
mov qword [rsp + 0x60], rax
cmova ax, r14w
cbw
mov rax, qword [rsp + 0x2b8]
jmp 0x1403fb66d
mov qword [rsp + 0x68], rax
cmovnp rax, rbp
movzx eax, bp
movzx rax, r11w
mov rax, qword [rsp + 0x2b0]
mov qword [rsp + 0x70], rax
movsx rax, r15w
movzx eax, r13w
mov rax, qword [rsp + 0x2a8]
jmp 0x1403fb69f
mov qword [rsp + 0x78], rax
cbw
mov rax, qword [rsp + 0x2a0]
jmp 0x1403fb6b3
mov qword [rsp + 0x80], rax
mov al, r11b
mov rax, qword [rsp + 0x298]
jmp 0x1403fb6cb
mov qword [rsp + 0x88], rax
movzx ax, spl
mov rax, qword [rsp + 0x290]
jmp 0x1403fb6e5
mov qword [rsp + 0x90], rax
movsxd rax, r15d
mov rax, qword [rsp + 0x288]
jmp 0x1403fb6fd
mov qword [rsp + 0x98], rax
cmovs eax, esp
mov rax, qword [rsp + 0x280]
mov qword [rsp + 0xa0], rax
jmp 0x1403fb722
mov rax, qword [rsp + 0x278]
mov qword [rsp + 0xa8], rax
setno al
movsxd rax, edx
movsx rax, r12w
mov rax, qword [rsp + 0x270]
mov qword [rsp + 0xb0], rax
movsx rax, r13w
mov rax, qword [rsp + 0x268]
mov qword [rsp + 0xb8], rax
movzx rax, bx
movsx ax, ah
movsx rax, cx
mov rax, qword [rsp + 0x260]
jmp 0x1403fb779
mov qword [rsp + 0xc0], rax
mov rax, qword [rsp + 0x258]
jmp 0x1403fb78e
mov qword [rsp + 0xc8], rax
movabs rax, 0xd8c04eda048c52bb
jmp 0x1403fb7a5
mov qword [rsp + 0xd0], rax
cdqe
cwde
movsx eax, cx
movabs rax, 0xa5eac9894f8ea414
jmp 0x1403fb7c2
mov qword [rsp + 0xd8], rax
bswap ax
movsx eax, r9w
cwde
mov qword [rsp + 0xe0], rbp
xchg bp, ax
mov qword [rsp + 0xe8], r14
movsx rbp, bp
movzx rbp, r10w
mov qword [rsp + 0x100], r15
cmovne ax, sp
lahf
mov qword [rsp + 0x108], r12
mov ah, 0xaa
mov qword [rsp + 0x110], rsi
bswap rax
mov bp, r10w
movsx r14w, r8b
mov qword [rsp + 0x118], rdi
movsx ax, ah
mov rbp, rbx
mov qword [rsp + 0x120], rbx
bswap r14w
mov r14, qword [rsp + 0x2f0]
cwde
movsx ax, r10b
movsx eax, r15w
mov qword [rsp + 0x128], r14
movsx eax, r15w
mov rax, qword [rsp + 0x250]
jmp 0x1403fb85e
mov qword [rsp + 0x130], rax
movzx rax, di
mov rax, qword [rsp + 0x248]
jmp 0x1403fb877
mov qword [rsp + 0x138], rax
mov rax, qword [rsp + 0x240]
mov qword [rsp + 0x140], rax
bswap eax
cbw
movsx ax, dil
mov rax, qword [rsp + 0x238]
jmp 0x1403fb8a5
mov qword [rsp + 0x148], rax
movsx ax, r13b
cmovge rax, r14
setb al
mov rax, qword [rsp + 0x230]
mov qword [rsp + 0x150], rax
mov rax, qword [rsp + 0x228]
mov qword [rsp + 0x158], rax
movzx eax, si
mov rax, qword [rsp + 0x220]
jmp 0x1403fb8e9
mov qword [rsp + 0x160], rax
mov rax, qword [rsp + 0x218]
jmp 0x1403fb8fe
mov qword [rsp + 0x168], rax
mov rax, qword [rsp + 0x210]
jmp 0x1403fb913
mov qword [rsp + 0x170], rax
mov rax, qword [rsp + 0x208]
jmp 0x1403fb928
mov qword [rsp + 0x178], rax
movzx ax, r8b
mov rax, qword [rsp + 0x200]
mov qword [rsp + 0x180], rax
nop
cbw
cwde
mov rax, qword [rsp + 0x1f8]
mov qword [rsp + 0x188], rax
movsx ax, spl
nop
not eax
mov rax, qword [rsp + 0x1f0]
jmp 0x1403fb96f
mov qword [rsp + 0x190], rax
movsx rax, r12w
setno al
nop
mov rax, qword [rsp + 0x1e8]
jmp 0x1403fb98d
mov qword [rsp + 0x198], rax
cwde
movsxd rax, edx
lahf
mov rax, qword [rsp + 0x1e0]
jmp 0x1403fb9a7
mov qword [rsp + 0x1a0], rax
jmp 0x1403fb9b8
mov rax, qword [rsp + 0x1d8]
mov qword [rsp + 0x1a8], rax
mov rax, r13
jmp 0x1403fb9d0
movaps xmm0, xmmword [rsp + 0x40]
jmp 0x1403fb9da
movaps xmm1, xmmword [rsp + 0x50]
jmp 0x1403fb9e4
movaps xmm2, xmmword [rsp + 0x60]
xorps xmm0, xmmword [rax]
movaps xmm3, xmmword [rsp + 0x70]
jmp 0x1403fb9f6
movaps xmmword [rsp + 0x40], xmm0
xorps xmm1, xmmword [rax + 0x10]
movaps xmmword [rsp + 0x50], xmm1
jmp 0x1403fba09
xorps xmm2, xmmword [rax + 0x20]
movaps xmmword [rsp + 0x60], xmm2
jmp 0x1403fba17
xorps xmm3, xmmword [rax + 0x30]
movaps xmmword [rsp + 0x70], xmm3
movaps xmm0, xmmword [rsp + 0x80]
jmp 0x1403fba2d
xorps xmm0, xmmword [rax + 0x40]
movaps xmmword [rsp + 0x80], xmm0
movaps xmm0, xmmword [rsp + 0x90]
jmp 0x1403fba46
xorps xmm0, xmmword [rax + 0x50]
movaps xmmword [rsp + 0x90], xmm0
movaps xmm0, xmmword [rsp + 0xa0]
jmp 0x1403fba5f
xorps xmm0, xmmword [rax + 0x60]
movaps xmmword [rsp + 0xa0], xmm0
jmp 0x1403fba70
movaps xmm0, xmmword [rsp + 0xb0]
jmp 0x1403fba7d
xorps xmm0, xmmword [rax + 0x70]
movaps xmmword [rsp + 0xb0], xmm0
jmp 0x1403fba8e
movaps xmm0, xmmword [rsp + 0xc0]
jmp 0x1403fba9b
xorps xmm0, xmmword [rax + 0x80]
movaps xmmword [rsp + 0xc0], xmm0
jmp 0x1403fbaaf
movaps xmm0, xmmword [rsp + 0xd0]
jmp 0x1403fbabc
xorps xmm0, xmmword [rax + 0x90]
movaps xmmword [rsp + 0xd0], xmm0
jmp 0x1403fbad0
movaps xmm0, xmmword [rsp + 0xe0]
jmp 0x1403fbadd
xorps xmm0, xmmword [rax + 0xa0]
movaps xmmword [rsp + 0xe0], xmm0
lea rdx, [rsp + 0x40]
xchg ecx, r8d
movzx rcx, r9w
mov rcx, 0xffffffff80000002
jmp 0x1403fbb07
lea r8, [rsp + 0x30]
jmp 0x1403fbb11
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyW]
mov rax, qword [rsp + 0x1d0]
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x1c8]
mov qword [rsp + 0x48], rax
movsxd rbx, ebp
mov rbx, qword [rsp + 0x2e8]
mov qword [rsp + 0x50], rbx
jmp 0x1403fbb46
mov rax, qword [rsp + 0x1c0]
jmp 0x1403fbb53
mov qword [rsp + 0x58], rax
jmp 0x1403fbb60
mov qword [rsp + 0x100], r15
movsx ax, spl
mov qword [rsp + 0x108], r12
movsx ax, ah
cmovno ax, ax
mov qword [rsp + 0x110], rsi
movzx rax, r13w
xchg al, ah
mov qword [rsp + 0x118], rdi
xchg ah, al
jmp 0x1403fbb9f
mov rax, r13
jmp 0x1403fbba7
movaps xmm0, xmmword [rsp + 0x40]
xorps xmm0, xmmword [rax]
movaps xmmword [rsp + 0x40], xmm0
jmp 0x1403fbbb9
movaps xmm0, xmmword [rsp + 0x50]
jmp 0x1403fbbc3
xorps xmm0, xmmword [rax + 0x10]
movaps xmmword [rsp + 0x50], xmm0
inc r9b
cwde
mov rcx, qword [rsp + 0x30]
bts dx, r9w
lea rax, [rsp + 0x3c]
shr dh, cl
btr dx, r13w
adc dx, bx
mov qword [rsp + 0x20], rax
or r9w, r15w
sub dl, sil
mov dword [rsp + 0x28], 4
btc rdx, r11
sal r9b, 0xc2
bsf r9d, r11d
lea rdx, [rsp + 0x40]
sub r8d, r8d
mov r9d, 4
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
mov rcx, qword [rsp + 0x30]
jmp 0x1403fbc27
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov rax, qword [rsp + 0x2e0]
jmp 0x1403fbc3a
mov qword [rsp + 0x40], rax
setp al
movzx eax, r10w
mov rax, qword [rsp + 0x2d8]
mov qword [rsp + 0x48], rax
mov eax, r8d
bswap ax
mov rax, qword [rsp + 0x2d0]
jmp 0x1403fbc66
mov qword [rsp + 0x50], rax
movsxd rax, edi
bswap eax
mov rax, qword [rsp + 0x2c8]
mov qword [rsp + 0x58], rax
movzx eax, r8w
nop
mov rax, qword [rsp + 0x2c0]
jmp 0x1403fbc90
mov qword [rsp + 0x60], rax
mov rax, qword [rsp + 0x2b8]
jmp 0x1403fbca2
mov qword [rsp + 0x68], rax
movzx ax, dil
mov rax, qword [rsp + 0x2b0]
jmp 0x1403fbcb9
mov qword [rsp + 0x70], rax
mov eax, r12d
movzx eax, r8w
mov rax, qword [rsp + 0x2a8]
jmp 0x1403fbcd2
mov qword [rsp + 0x78], rax
mov rax, qword [rsp + 0x2a0]
mov qword [rsp + 0x80], rax
cmovo ax, r11w
movzx ax, r8b
mov rax, qword [rsp + 0x298]
jmp 0x1403fbcfe
mov qword [rsp + 0x88], rax
cdqe
jmp 0x1403fbd10
mov rax, qword [rsp + 0x290]
jmp 0x1403fbd1d
mov qword [rsp + 0x90], rax
mov al, bpl
mov rax, qword [rsp + 0x288]
mov qword [rsp + 0x98], rax
movzx ax, r12b
lahf
mov rax, qword [rsp + 0x280]
mov qword [rsp + 0xa0], rax
cbw
mov rax, qword [rsp + 0x278]
jmp 0x1403fbd5d
mov qword [rsp + 0xa8], rax
mov al, r10b
mov rax, qword [rsp + 0x270]
jmp 0x1403fbd75
mov qword [rsp + 0xb0], rax
nop
movsx eax, r11w
cdqe
mov rax, qword [rsp + 0x268]
jmp 0x1403fbd92
mov qword [rsp + 0xb8], rax
cdqe
lahf
mov rax, qword [rsp + 0x260]
jmp 0x1403fbdaa
mov qword [rsp + 0xc0], rax
cwde
movsx eax, si
xchg al, ah
mov rax, qword [rsp + 0x258]
jmp 0x1403fbdc5
mov qword [rsp + 0xc8], rax
setno ah
cdqe
movzx rax, ax
movabs rax, 0xd8c34edb048f52bb
jmp 0x1403fbde5
mov qword [rsp + 0xd0], rax
lahf
setg al
mov ax, r8w
movabs rax, 0xa5c8c98b4f83a416
jmp 0x1403fbe04
mov qword [rsp + 0xd8], rax
jmp 0x1403fbe13
movabs rax, 0x2eb290273e1edaf5
mov qword [rsp + 0xe0], rax
movabs rax, 0x28f53e246680b95c
jmp 0x1403fbe34
mov qword [rsp + 0xe8], rax
xchg al, ah
mov qword [rsp + 0x100], r15
mov qword [rsp + 0x108], r12
movzx ax, dh
movsx eax, sp
movsx rax, r11w
mov qword [rsp + 0x110], rsi
movsxd rax, eax
cmovs rax, rsp
mov qword [rsp + 0x118], rdi
movzx eax, r8w
mov ax, r15w
mov qword [rsp + 0x120], rbp
movsx rax, r11w
movzx eax, r15w
cbw
mov qword [rsp + 0x128], r14
mov eax, edx
nop
mov rax, qword [rsp + 0x250]
jmp 0x1403fbea3
mov qword [rsp + 0x130], rax
movsx rax, cx
movsxd rax, esi
movsx ax, cl
mov rax, qword [rsp + 0x248]
mov qword [rsp + 0x138], rax
bswap rax
movsx eax, bp
mov rax, qword [rsp + 0x240]
jmp 0x1403fbed9
mov qword [rsp + 0x140], rax
mov al, ah
mov rax, qword [rsp + 0x238]
mov qword [rsp + 0x148], rax
mov rax, qword [rsp + 0x230]
mov qword [rsp + 0x150], rax
movzx ax, ah
movzx rax, r13w
mov rax, qword [rsp + 0x228]
mov qword [rsp + 0x158], rax
movzx rax, r10w
movzx ax, bh
movzx eax, si
mov rax, qword [rsp + 0x220]
jmp 0x1403fbf33
mov qword [rsp + 0x160], rax
movzx rax, r8w
mov rax, qword [rsp + 0x218]
jmp 0x1403fbf4c
mov qword [rsp + 0x168], rax
movsx ax, r12b
mov rax, qword [rsp + 0x210]
jmp 0x1403fbf66
mov qword [rsp + 0x170], rax
mov al, r11b
cbw
jmp 0x1403fbf78
mov rax, qword [rsp + 0x208]
jmp 0x1403fbf85
mov qword [rsp + 0x178], rax
mov rax, qword [rsp + 0x200]
jmp 0x1403fbf9a
mov qword [rsp + 0x180], rax
cdqe
mov rax, qword [rsp + 0x1f8]
jmp 0x1403fbfb1
mov qword [rsp + 0x188], rax
lahf
cbw
nop
mov rax, qword [rsp + 0x1f0]
jmp 0x1403fbfcb
mov qword [rsp + 0x190], rax
cdqe
mov ah, 0x6b
jmp 0x1403fbfdd
mov rax, qword [rsp + 0x1e8]
jmp 0x1403fbfea
mov qword [rsp + 0x198], rax
cmovnp rax, r14
bswap ax
mov rax, qword [rsp + 0x1e0]
jmp 0x1403fc006
mov qword [rsp + 0x1a0], rax
mov ax, 0x7c24
nop
mov rax, qword [rsp + 0x1d8]
jmp 0x1403fc020
mov qword [rsp + 0x1a8], rax
nop
movabs rax, 0xa1410f538a85c08b
jmp 0x1403fc039
mov qword [rsp + 0xf0], rax
jmp 0x1403fc046
mov qword [rsp + 0x1b0], rax
movzx rax, r12w
cmove ax, bx
movabs rax, 0x6078a8fe5539451c
jmp 0x1403fc065
mov qword [rsp + 0xf8], rax
jmp 0x1403fc072
mov qword [rsp + 0x1b8], rax
not rax
movsx ax, r11b
mov rax, r13
jmp 0x1403fc08a
movaps xmm0, xmmword [rsp + 0x40]
jmp 0x1403fc094