Function at 0x1403f7eaf
Capabilities:
Set registry value

Disassembly:
push r15
movsx r15, si
cmp cx, 0x2a8b
push r14
push r13
mov r13w, r9w
add r15, 0x293908b0
push r12
bsr r15w, sp
push rsi
push rdi
adc al, sil
movsx r15d, r15w
ror ah, 0x15
push rbp
xchg bp, si
push rbx
sbb r15b, bl
add rbp, r11
sub rsp, 0x2f8
not al
cdqe
movabs rax, 0xe009ec3224c8fd6e
jmp 0x1403f7f05
mov qword [rsp + 0x2e0], rax
jmp 0x1403f7f16
mov qword [rsp + 0x40], rax
jmp 0x1403f7f20
movabs rax, 0x2204bcb80ebea5a3
movzx r15w, dil
bswap ebp
movsx r14, r11w
mov qword [rsp + 0x2d8], rax
setae r13b
mov qword [rsp + 0x48], rax
movsxd r13, ebx
cwde
movabs rax, 0xfbc9f38de01f2fa2
movsx r15, di
mov qword [rsp + 0x2d0], rax
mov qword [rsp + 0x50], rax
cdqe
movzx r15d, bp
movsx r14w, spl
movabs rax, 0x17a75ff95317a686
mov qword [rsp + 0x2c8], rax
mov r15, 0x17980b50
mov qword [rsp + 0x58], rax
mov bx, sp
cmovnp r13w, r11w
movzx r12w, r10b
movabs rax, 0xfd99d5578f55fa6f
bswap r13w
mov qword [rsp + 0x2c0], rax
movsx edi, r9w
xchg rbp, r12
cmovp r14, r10
mov qword [rsp + 0x60], rax
not r15d
movsxd rbp, r12d
cwde
movabs rax, 0x4b3964fdcd447246
cmove rdi, rbp
movzx r12, dx
movsx r12, cx
mov qword [rsp + 0x2b8], rax
jmp 0x1403f7feb
mov qword [rsp + 0x68], rax
movsxd rdi, r14d
movabs rax, 0xee88324679eb2227
mov r13w, bx
not r14w
mov r12w, 0x1aa7
mov qword [rsp + 0x2b0], rax
cmovs r14w, r11w
xchg sil, bpl
mov qword [rsp + 0x70], rax
jmp 0x1403f8027
movabs rax, 0x6d7346ad6d4ffefa
mov qword [rsp + 0x2a8], rax
seto r12b
not dil
mov r12d, r15d
mov qword [rsp + 0x78], rax
cdqe
movabs rax, 0xd093683aef376a76
mov qword [rsp + 0x2a0], rax
mov qword [rsp + 0x80], rax
movabs rax, 0xa80f93e9d32b8c6f
movzx r12d, di
movzx r13w, r10b
movsx r13d, r11w
mov qword [rsp + 0x298], rax
mov si, bp
mov dil, 0x4b
mov qword [rsp + 0x88], rax
movsx r15d, r10w
movabs rax, 0x33e730243394033e
mov qword [rsp + 0x290], rax
bswap edi
mov sil, 0x35
mov qword [rsp + 0x90], rax
cwde
movsx si, spl
movabs rax, 0xe7e3977e114e6703
mov qword [rsp + 0x288], rax
not r14
movsx rsi, r9w
cmovp r15w, r13w
mov qword [rsp + 0x98], rax
movsxd rbp, ecx
movabs rax, 0xb0b65ec58a603c8
seta sil
mov qword [rsp + 0x280], rax
mov qword [rsp + 0xa0], rax
movzx r15d, r14w
movabs rax, 0x6708be65ca8156d7
bswap bx
mov qword [rsp + 0x278], rax
mov bx, 0x127d
cmovg si, r15w
mov qword [rsp + 0xa8], rax
mov di, sp
movsx r13w, r14b
movabs rax, 0x46a7044da5524090
xchg dil, r15b
mov qword [rsp + 0x270], rax
movzx r13, r12w
jmp 0x1403f8151
mov qword [rsp + 0xb0], rax
lahf
cdqe
movabs rax, 0x4b8cb541ca050f46
mov qword [rsp + 0x268], rax
movsx rbp, r13w
mov r14w, 0x20ac
jmp 0x1403f817c
mov qword [rsp + 0xb8], rax
movabs rax, 0xe627ab41184af921
cmovae bx, r12w
mov qword [rsp + 0x260], rax
mov qword [rsp + 0xc0], rax
movzx rbp, r11w
movabs rax, 0x34c77b6e31b9a
mov qword [rsp + 0x258], rax
movzx di, r12b
mov qword [rsp + 0xc8], rax
jmp 0x1403f81cb
movabs rax, 0xd8cf4ec0049852bb
movzx edi, r13w
mov dil, 0x45
mov qword [rsp + 0xd0], rax
movsx eax, r10w
jmp 0x1403f81f1
movabs rax, 0xa5eac9844f8ea419
mov dil, r15b
bswap rbp
movzx r15, bx
mov qword [rsp + 0xd8], rax
movzx r12, r15w
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x3c], 0
movsx esi, r10w
movabs rbp, 0x2eb490333e21dae3
mov rax, 0xb2a326e
movsx bx, bh
lahf
mov qword [rsp + 0xe0], rbp
cmovo si, r11w
movsxd rax, r8d
bswap esi
movabs r14, 0x28903e48668cb956
mov r15b, 0x5f
mov qword [rsp + 0xe8], r14
cbw
movsxd r12, r14d
movabs r15, 0xe05dec612491fd3d
mov qword [rsp + 0x100], r15
jmp 0x1403f827f
movabs r12, 0x2247bce40ef3a5e6
movsx di, r9b
cmovae r13w, r13w
movsxd rax, r12d
mov qword [rsp + 0x108], r12
mov ebx, ebp
movsx bx, r15b
movabs rsi, 0xfbacf3ffe06d2fd7
movsxd rax, r15d
bswap ebx
mov ah, 0xc8
mov qword [rsp + 0x110], rsi
movzx r13, bp
movabs rdi, 0x17c85fba5363a6e8
cbw
mov rax, r15
movsx bx, r13b
mov qword [rsp + 0x118], rdi
movsx ebx, r14w
movsxd rax, r11d
movabs rax, 0xfdf6d5258f21fa01
jmp 0x1403f82f9
mov qword [rsp + 0x120], rax
movzx bx, ah
cmovle r13w, sp
mov rbx, rax
movabs rax, 0x4b4d6498cd17722a
setge r13b
mov r13w, 0x4012
mov r13b, bl
mov qword [rsp + 0x2f0], rax
jmp 0x1403f8338
mov qword [rsp + 0x128], rax
bswap r13w
cmovle rax, r13
movabs rax, 0xeefa322379b8227b
mov qword [rsp + 0x250], rax
mov qword [rsp + 0x130], rax
movabs rax, 0x6d1646ce6d26fe8c
movsx r13, r14w
mov qword [rsp + 0x248], rax
xchg r13b, r13b
mov r13w, r13w
mov qword [rsp + 0x138], rax
cbw
movabs rax, 0xd0fb6869ef6b6a05
movzx r13w, al
mov qword [rsp + 0x240], rax
mov qword [rsp + 0x140], rax
setae ah
movzx r13d, cx
movabs rax, 0xa86b938cd3598c0e
movzx r13d, r12w
setne r13b
mov qword [rsp + 0x238], rax
movsxd r13, esi
movzx r13d, r10w
xchg r13, r13
mov qword [rsp + 0x148], rax
movabs rax, 0x3382304733f7037f
movzx r13w, r8b
movsx r13w, bpl
cmovs r13, rbp
mov qword [rsp + 0x230], rax
mov qword [rsp + 0x150], rax
movabs rax, 0xe7b39722113d6770
mov qword [rsp + 0x228], rax
mov qword [rsp + 0x158], rax
cwde
movzx rax, r15w
cmovo rax, r12
movabs rax, 0xb66658d58d403a9
jmp 0x1403f8435
mov qword [rsp + 0x220], rax
movzx r13d, r11w
movsxd r13, esp
mov qword [rsp + 0x160], rax
movabs rax, 0x677abe00caf556b2
movsx r13d, si
mov qword [rsp + 0x218], rax
xchg r13d, r13d
mov r13b, r12b
mov qword [rsp + 0x168], rax
movsx r13, r14w
mov al, r9b
mov al, 0x58
movabs rax, 0x46ce040ba50e40e3
mov r13w, 0x67e1
movzx r13d, r14w
setb r13b
mov qword [rsp + 0x210], rax
mov qword [rsp + 0x170], rax
movsx r13w, sil
mov ax, ax
mov r13b, 0xed
movabs rax, 0x4bedb536ca600f34
movzx r13, r14w
movsxd r13, r14d
mov qword [rsp + 0x208], rax
movzx r13w, r10b
mov qword [rsp + 0x178], rax
cbw
cmovg ax, r15w
movabs rax, 0xe648ab111826f94d
mov qword [rsp + 0x200], rax
movsx r13d, bx
movzx r13, r13w
mov r13b, al
mov qword [rsp + 0x180], rax
cwde
movabs rax, 0x7a4c14b68a1bf6
setl r13b
mov qword [rsp + 0x1f8], rax
movzx r13w, r10b
bswap r13w
mov qword [rsp + 0x188], rax
movabs rax, 0xd8a24eaf04dc52e7
movzx r13d, r10w
movsx r13d, dx
mov qword [rsp + 0x1f0], rax
mov qword [rsp + 0x190], rax
cbw
movsx r13, di
movzx eax, bp
movabs rax, 0xa5bac9ea4fe7a478
mov r13d, 0x2ad055ae
mov qword [rsp + 0x1e8], rax
movsx r13, dx
cmovl r13d, esp
jmp 0x1403f8575
mov qword [rsp + 0x198], rax
movabs rax, 0x2edd90553e4eda91
cmovb r13d, ecx
movzx r13d, r15w
jmp 0x1403f8594
mov qword [rsp + 0x1e0], rax
cmovne r13w, sp
mov qword [rsp + 0x1a0], rax
mov al, r13b
setae r13b
movzx rax, r15w
movabs rax, 0x28903e4866e9b93a
mov qword [rsp + 0x1d8], rax
mov r13b, r9b
movsxd r13, edx
bswap r13w
mov qword [rsp + 0x1a8], rax
xchg al, al
cwde
cbw
lea r13, [rsp + 0x100]
mov rax, r13
jmp 0x1403f85ed
movaps xmm0, xmmword [rsp + 0x40]
jmp 0x1403f85f7
xorps xmm0, xmmword [rax]
movaps xmmword [rsp + 0x40], xmm0
movaps xmm0, xmmword [rsp + 0x50]
jmp 0x1403f8609
xorps xmm0, xmmword [rax + 0x10]
movaps xmmword [rsp + 0x50], xmm0
jmp 0x1403f8617
movaps xmm0, xmmword [rsp + 0x60]
xorps xmm0, xmmword [rax + 0x20]
movaps xmmword [rsp + 0x60], xmm0
jmp 0x1403f862a
movaps xmm0, xmmword [rsp + 0x70]
jmp 0x1403f8634
xorps xmm0, xmmword [rax + 0x30]
movaps xmmword [rsp + 0x70], xmm0
jmp 0x1403f8642
movaps xmm0, xmmword [rsp + 0x80]
jmp 0x1403f864f
xorps xmm0, xmmword [rax + 0x40]
movaps xmmword [rsp + 0x80], xmm0
jmp 0x1403f8660
movaps xmm0, xmmword [rsp + 0x90]
jmp 0x1403f866d
xorps xmm0, xmmword [rax + 0x50]
movaps xmmword [rsp + 0x90], xmm0
jmp 0x1403f867e
movaps xmm0, xmmword [rsp + 0xa0]
jmp 0x1403f868b
xorps xmm0, xmmword [rax + 0x60]
movaps xmmword [rsp + 0xa0], xmm0
movaps xmm0, xmmword [rsp + 0xb0]
xorps xmm0, xmmword [rax + 0x70]
movaps xmmword [rsp + 0xb0], xmm0
jmp 0x1403f86b0
movaps xmm0, xmmword [rsp + 0xc0]
xorps xmm0, xmmword [rax + 0x80]
movaps xmmword [rsp + 0xc0], xmm0
jmp 0x1403f86cc
movaps xmm0, xmmword [rsp + 0xd0]
jmp 0x1403f86d9
xorps xmm0, xmmword [rax + 0x90]
movaps xmmword [rsp + 0xd0], xmm0
jmp 0x1403f86ed
movaps xmm0, xmmword [rsp + 0xe0]
jmp 0x1403f86fa
xorps xmm0, xmmword [rax + 0xa0]
movaps xmmword [rsp + 0xe0], xmm0
lea rdx, [rsp + 0x40]
lea r8, [rsp + 0x30]
mov ch, 0xce
mov cx, r15w
movzx ecx, ax
mov rcx, 0xffffffff80000002
jmp 0x1403f8729
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyW]
movabs rax, 0xe03fec0024fffd78
mov qword [rsp + 0x1d0], rax
jmp 0x1403f8746
mov qword [rsp + 0x40], rax
movabs rax, 0x222ebca20e96a58a
jmp 0x1403f875a
mov qword [rsp + 0x1c8], rax
jmp 0x1403f8767
mov qword [rsp + 0x48], rax
movabs rax, 0xfbcdf388e0082fa5
mov qword [rsp + 0x2e8], rax
mov qword [rsp + 0x50], rax
movsx eax, bp
cmovp eax, esp
movzx ax, r15b
movabs rax, 0x17c85fba530fa684
jmp 0x1403f879d
mov qword [rsp + 0x1c0], rax
jmp 0x1403f87aa
mov qword [rsp + 0x58], rax
setne ah
mov qword [rsp + 0x100], r15
mov al, r15b
movzx rax, bp
mov qword [rsp + 0x108], r12
cbw
movsxd rax, r8d
movsx eax, sp
mov qword [rsp + 0x110], rsi
lahf
mov eax, 0x6c8b4d29
mov qword [rsp + 0x118], rdi
cmovnp eax, r14d
mov rax, r13
jmp 0x1403f87f3
movaps xmm0, xmmword [rsp + 0x40]
xorps xmm0, xmmword [rax]
movaps xmmword [rsp + 0x40], xmm0
jmp 0x1403f8805
movaps xmm0, xmmword [rsp + 0x50]
jmp 0x1403f880f
xorps xmm0, xmmword [rax + 0x10]
movaps xmmword [rsp + 0x50], xmm0
mov rcx, qword [rsp + 0x30]
lea rax, [rsp + 0x3c]
btr r9w, r13w
xor dh, 0x82
mov qword [rsp + 0x20], rax
xor dl, dh
test si, 0x25b5
mov dword [rsp + 0x28], 4
movzx r9, r10w
bt r9w, r11w
cmovs edx, esp
lea rdx, [rsp + 0x40]
sub r8d, r8d
not r9b
movzx r9w, r8b
mov r9d, 4
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
mov rcx, qword [rsp + 0x30]
jmp 0x1403f8870
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov rax, qword [rsp + 0x2e0]
jmp 0x1403f8883
mov qword [rsp + 0x40], rax
movzx rax, bx
jmp 0x1403f8891
mov rax, qword [rsp + 0x2d8]
mov qword [rsp + 0x48], rax
jmp 0x1403f88aa
mov rax, qword [rsp + 0x2d0]
mov qword [rsp + 0x50], rax
movzx rax, r15w
movzx ax, r12b
jmp 0x1403f88c5
mov rax, qword [rsp + 0x2c8]
jmp 0x1403f88d2
mov qword [rsp + 0x58], rax
cdqe
movsx eax, di
mov rax, qword [rsp + 0x2c0]
jmp 0x1403f88e9
mov qword [rsp + 0x60], rax
cmovs ax, bp
movsxd rax, r9d
mov rax, qword [rsp + 0x2b8]
jmp 0x1403f8902
mov qword [rsp + 0x68], rax
mov rax, qword [rsp + 0x2b0]
jmp 0x1403f8914
mov qword [rsp + 0x70], rax
mov rax, qword [rsp + 0x2a8]
jmp 0x1403f8926
mov qword [rsp + 0x78], rax
mov rax, qword [rsp + 0x2a0]
jmp 0x1403f8938
mov qword [rsp + 0x80], rax
movzx ax, r15b
mov al, 0xd6
jmp 0x1403f894c
mov rax, qword [rsp + 0x298]
jmp 0x1403f8959
mov qword [rsp + 0x88], rax
movzx rax, di
mov rax, qword [rsp + 0x290]
jmp 0x1403f8972
mov qword [rsp + 0x90], rax
movsx rax, bx
mov rax, qword [rsp + 0x288]
mov qword [rsp + 0x98], rax
mov ah, 0xe0
movsx rax, r11w
mov rax, qword [rsp + 0x280]
jmp 0x1403f89a2
mov qword [rsp + 0xa0], rax
cdqe
mov al, dil
mov rax, qword [rsp + 0x278]
jmp 0x1403f89bc
mov qword [rsp + 0xa8], rax
mov al, r15b
cdqe
lahf
mov rax, qword [rsp + 0x270]
jmp 0x1403f89d7
mov qword [rsp + 0xb0], rax
mov rax, qword [rsp + 0x268]
mov qword [rsp + 0xb8], rax
mov al, bpl
movsx rax, si
mov rax, qword [rsp + 0x260]
jmp 0x1403f8a03
mov qword [rsp + 0xc0], rax
mov rax, qword [rsp + 0x258]
mov qword [rsp + 0xc8], rax
cmove rax, r8
movabs rax, 0xd8c04eda048c52bb
jmp 0x1403f8a2e
mov qword [rsp + 0xd0], rax
mov ax, si
bswap eax
movzx rax, r8w
movabs rax, 0xa5eac9894f8ea414
jmp 0x1403f8a4e
mov qword [rsp + 0xd8], rax
mov qword [rsp + 0xe0], rbp
movsxd rax, ebp
mov qword [rsp + 0xe8], r14
bswap rax
mov qword [rsp + 0x100], r15
movsx ebp, r14w
mov qword [rsp + 0x108], r12
movsx bp, sil
not ah
xchg bp, bp
mov qword [rsp + 0x110], rsi
movsx eax, r15w
mov qword [rsp + 0x118], rdi
cwde
mov rbp, rbx
bswap eax
jmp 0x1403f8aae
mov qword [rsp + 0x120], rbx
movsx r14, bp
mov r14, qword [rsp + 0x2f0]
mov qword [rsp + 0x128], r14
movsx ax, r10b
mov rax, qword [rsp + 0x250]
jmp 0x1403f8adc
mov qword [rsp + 0x130], rax
mov rax, qword [rsp + 0x248]
jmp 0x1403f8af1
mov qword [rsp + 0x138], rax
lahf
not al
mov rax, qword [rsp + 0x240]
jmp 0x1403f8b09
mov qword [rsp + 0x140], rax
movsx ax, r15b
mov rax, qword [rsp + 0x238]
jmp 0x1403f8b23
mov qword [rsp + 0x148], rax
cmovge ax, bx
cbw
not rax
mov rax, qword [rsp + 0x230]
jmp 0x1403f8b41
mov qword [rsp + 0x150], rax
movsx eax, r14w
movsx ax, r12b
mov rax, qword [rsp + 0x228]
jmp 0x1403f8b5f
mov qword [rsp + 0x158], rax
mov rax, qword [rsp + 0x220]
mov qword [rsp + 0x160], rax
movzx eax, r14w
not ah
mov ah, 0x4a
mov rax, qword [rsp + 0x218]
jmp 0x1403f8b8d
mov qword [rsp + 0x168], rax
movzx rax, r13w
mov rax, qword [rsp + 0x210]
jmp 0x1403f8ba6
mov qword [rsp + 0x170], rax
mov rax, qword [rsp + 0x208]
jmp 0x1403f8bbb
mov qword [rsp + 0x178], rax
mov rax, qword [rsp + 0x200]
jmp 0x1403f8bd0
mov qword [rsp + 0x180], rax
cdqe
movsxd rax, r8d
mov rax, qword [rsp + 0x1f8]
jmp 0x1403f8bea
mov qword [rsp + 0x188], rax
lahf
movsx eax, dx
mov rax, qword [rsp + 0x1f0]
jmp 0x1403f8c03
mov qword [rsp + 0x190], rax
cbw
mov al, bl
movsxd rax, r14d
mov rax, qword [rsp + 0x1e8]
jmp 0x1403f8c1f
mov qword [rsp + 0x198], rax
cmovp eax, eax
mov rax, qword [rsp + 0x1e0]
jmp 0x1403f8c37
mov qword [rsp + 0x1a0], rax
movzx rax, bp
mov rax, qword [rsp + 0x1d8]
jmp 0x1403f8c50
mov qword [rsp + 0x1a8], rax
mov rax, r13
movaps xmm0, xmmword [rsp + 0x40]
jmp 0x1403f8c65
movaps xmm1, xmmword [rsp + 0x50]
jmp 0x1403f8c6f
movaps xmm2, xmmword [rsp + 0x60]
jmp 0x1403f8c79
xorps xmm0, xmmword [rax]
movaps xmm3, xmmword [rsp + 0x70]
jmp 0x1403f8c86
movaps xmmword [rsp + 0x40], xmm0
xorps xmm1, xmmword [rax + 0x10]
movaps xmmword [rsp + 0x50], xmm1
xorps xmm2, xmmword [rax + 0x20]
movaps xmmword [rsp + 0x60], xmm2
xorps xmm3, xmmword [rax + 0x30]
movaps xmmword [rsp + 0x70], xmm3
movaps xmm0, xmmword [rsp + 0x80]
jmp 0x1403f8cb3
xorps xmm0, xmmword [rax + 0x40]
movaps xmmword [rsp + 0x80], xmm0
jmp 0x1403f8cc4
movaps xmm0, xmmword [rsp + 0x90]
xorps xmm0, xmmword [rax + 0x50]
movaps xmmword [rsp + 0x90], xmm0
jmp 0x1403f8cdd
movaps xmm0, xmmword [rsp + 0xa0]
jmp 0x1403f8cea
xorps xmm0, xmmword [rax + 0x60]
movaps xmmword [rsp + 0xa0], xmm0
jmp 0x1403f8cfb
movaps xmm0, xmmword [rsp + 0xb0]
jmp 0x1403f8d08
xorps xmm0, xmmword [rax + 0x70]
movaps xmmword [rsp + 0xb0], xmm0
jmp 0x1403f8d19
movaps xmm0, xmmword [rsp + 0xc0]
jmp 0x1403f8d26
xorps xmm0, xmmword [rax + 0x80]
movaps xmmword [rsp + 0xc0], xmm0
jmp 0x1403f8d3a
movaps xmm0, xmmword [rsp + 0xd0]
xorps xmm0, xmmword [rax + 0x90]
movaps xmmword [rsp + 0xd0], xmm0
movaps xmm0, xmmword [rsp + 0xe0]
jmp 0x1403f8d5e
xorps xmm0, xmmword [rax + 0xa0]
movaps xmmword [rsp + 0xe0], xmm0
not dh
lea rdx, [rsp + 0x40]
mov rcx, 0xffffffff80000002
lea r8, [rsp + 0x30]
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyW]
mov rax, qword [rsp + 0x1d0]
xchg rbx, rbx
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x1c8]
bswap bx
mov qword [rsp + 0x48], rax
cdqe
movzx eax, di
mov rbx, qword [rsp + 0x2e8]
mov qword [rsp + 0x50], rbx
movzx rax, di
mov rax, qword [rsp + 0x1c0]
mov qword [rsp + 0x58], rax
movsx eax, r12w
mov qword [rsp + 0x100], r15
not al
bswap ax
nop
mov qword [rsp + 0x108], r12
bswap eax
movsx eax, cx
mov qword [rsp + 0x110], rsi
movsx ax, r8b
movzx eax, r11w
mov qword [rsp + 0x118], rdi
movzx ax, r14b
mov ax, ax
bswap rax
mov rax, r13
jmp 0x1403f8e15
movaps xmm0, xmmword [rsp + 0x40]
jmp 0x1403f8e1f
xorps xmm0, xmmword [rax]
movaps xmmword [rsp + 0x40], xmm0
jmp 0x1403f8e2c
movaps xmm0, xmmword [rsp + 0x50]
jmp 0x1403f8e36
xorps xmm0, xmmword [rax + 0x10]
movaps xmmword [rsp + 0x50], xmm0
shr dh, cl
movsx rdx, cx
bt cx, 0x1b
mov rcx, qword [rsp + 0x30]
adc rdx, 0x2e620f1c
btr rdx, rax
adc r9w, bx
lea rax, [rsp + 0x3c]
inc r9w
mov qword [rsp + 0x20], rax
mov edx, r11d
xor r9b, 0xa2
shr r9w, cl
mov dword [rsp + 0x28], 4
bsr edx, r15d
movsx r9, r11w
xor r9d, esi
lea rdx, [rsp + 0x40]
sub r9b, cl
cmovo r9d, esp
xor r8d, r8d
mov r9d, 4
jmp 0x1403f8ea4
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
mov rcx, qword [rsp + 0x30]
jmp 0x1403f8eb4
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov rax, qword [rsp + 0x2e0]
jmp 0x1403f8ec7
mov qword [rsp + 0x40], rax
movsx ax, bpl
mov rax, qword [rsp + 0x2d8]
mov qword [rsp + 0x48], rax
mov rax, qword [rsp + 0x2d0]
mov qword [rsp + 0x50], rax
lahf
mov al, r14b
mov rax, qword [rsp + 0x2c8]
mov qword [rsp + 0x58], rax
cmovs ax, r15w
cbw
mov rax, qword [rsp + 0x2c0]
jmp 0x1403f8f10
mov qword [rsp + 0x60], rax
xchg ah, al
mov rax, qword [rsp + 0x2b8]
mov qword [rsp + 0x68], rax
bswap rax
mov rax, qword [rsp + 0x2b0]
jmp 0x1403f8f34
mov qword [rsp + 0x70], rax
cmovs ax, r14w
lahf
mov rax, qword [rsp + 0x2a8]
jmp 0x1403f8f4c
mov qword [rsp + 0x78], rax
movsx eax, si
cmovbe eax, eax
movzx rax, sp
mov rax, qword [rsp + 0x2a0]
jmp 0x1403f8f68
mov qword [rsp + 0x80], rax
mov rax, 0x2f9c5641
movsxd rax, r8d
bswap ax
mov rax, qword [rsp + 0x298]
jmp 0x1403f8f8a
mov qword [rsp + 0x88], rax
xchg ah, al
movzx eax, dx
movsx eax, r12w
mov rax, qword [rsp + 0x290]
jmp 0x1403f8fa8
mov qword [rsp + 0x90], rax
movsx ax, sil
mov rax, qword [rsp + 0x288]
jmp 0x1403f8fc2
mov qword [rsp + 0x98], rax
lahf
mov rax, qword [rsp + 0x280]
jmp 0x1403f8fd8
mov qword [rsp + 0xa0], rax
movsx eax, di
mov rax, qword [rsp + 0x278]
jmp 0x1403f8ff0
mov qword [rsp + 0xa8], rax
mov rax, qword [rsp + 0x270]
jmp 0x1403f9005
mov qword [rsp + 0xb0], rax
cmovo rax, rsp
not al
setge al
mov rax, qword [rsp + 0x268]
jmp 0x1403f9023
mov qword [rsp + 0xb8], rax
jmp 0x1403f9030
mov rax, qword [rsp + 0x260]
jmp 0x1403f903d
mov qword [rsp + 0xc0], rax
mov rax, qword [rsp + 0x258]
jmp 0x1403f9052
mov qword [rsp + 0xc8], rax
bswap eax
movsx ax, bl
movsxd rax, edx
movabs rax, 0xd8c34edb048f52bb
mov qword [rsp + 0xd0], rax
movsx eax, r15w
movabs rax, 0xa5c8c98b4f83a416
jmp 0x1403f9088
mov qword [rsp + 0xd8], rax
xchg ah, al
mov ah, 0xe2
movabs rax, 0x2eb290273e1edaf5
mov qword [rsp + 0xe0], rax
cmovs ax, r11w
movsx eax, r10w
movabs rax, 0x28f53e246680b95c
mov qword [rsp + 0xe8], rax
cwde
mov qword [rsp + 0x100], r15
cdqe
not ax
mov qword [rsp + 0x108], r12
movsxd rax, r15d
mov qword [rsp + 0x110], rsi
mov qword [rsp + 0x118], rdi
mov ah, al
cmovle ax, bx
movzx ax, r11b
mov qword [rsp + 0x120], rbp
mov qword [rsp + 0x128], r14
lahf
mov rax, qword [rsp + 0x250]
mov qword [rsp + 0x130], rax
cmovg ax, r8w
movzx eax, si
mov rax, qword [rsp + 0x248]
mov qword [rsp + 0x138], rax
not eax
mov rax, qword [rsp + 0x240]
jmp 0x1403f913e
mov qword [rsp + 0x140], rax
lahf
movsx ax, r13b
mov rax, qword [rsp + 0x238]
jmp 0x1403f9159
mov qword [rsp + 0x148], rax
movzx ax, r15b
mov rax, qword [rsp + 0x230]
jmp 0x1403f9173
mov qword [rsp + 0x150], rax
mov rax, qword [rsp + 0x228]
jmp 0x1403f9188
mov qword [rsp + 0x158], rax
bswap ax
mov ah, cl
mov rax, qword [rsp + 0x220]
jmp 0x1403f91a2
mov qword [rsp + 0x160], rax
mov rax, qword [rsp + 0x218]
jmp 0x1403f91b7
mov qword [rsp + 0x168], rax
mov rax, qword [rsp + 0x210]
jmp 0x1403f91cc
mov qword [rsp + 0x170], rax
setae al
mov rax, qword [rsp + 0x208]
jmp 0x1403f91e4
mov qword [rsp + 0x178], rax
mov rax, qword [rsp + 0x200]
jmp 0x1403f91f9
mov qword [rsp + 0x180], rax
movzx eax, r12w
movzx ax, ch
not al
mov rax, qword [rsp + 0x1f8]
jmp 0x1403f9218
mov qword [rsp + 0x188], rax
movsxd rax, r10d
mov rax, qword [rsp + 0x1f0]
mov qword [rsp + 0x190], rax
movsx eax, dx
movzx ax, r15b
bswap ax
mov rax, qword [rsp + 0x1e8]
jmp 0x1403f924b
mov qword [rsp + 0x198], rax
sets ah
xchg al, al
not ax
mov rax, qword [rsp + 0x1e0]
mov qword [rsp + 0x1a0], rax
mov rax, qword [rsp + 0x1d8]
jmp 0x1403f9278
mov qword [rsp + 0x1a8], rax
movabs rax, 0xa1410f538a85c08b
jmp 0x1403f928f
mov qword [rsp + 0xf0], rax
mov qword [rsp + 0x1b0], rax
movsx rax, r10w
jmp 0x1403f92ab
movabs rax, 0x6078a8fe5539451c
jmp 0x1403f92ba
mov qword [rsp + 0xf8], rax
jmp 0x1403f92c7