Function at 0x1400f75b3
Capabilities:
Set registry value

Disassembly:
push rax
pushf
mov eax, 0x22e165b7
pushf
not eax
add eax, 0xc36c701c
xor eax, 0xfd334b27
rol eax, 0x2d
popf
pushf
not eax
add eax, 0xa1228fa5
xor eax, 0x98fa23ed
rol eax, 0xf9
popf
cmp eax, 4
jne 0x1400f75f0
popf
pop rax
jmp 0x1400f7b2e
cmp eax, 0
jne 0x1400f75ff
popf
pop rax
jmp 0x1400f76c2
cmp eax, 3
jne 0x1400f760e
popf
pop rax
jmp 0x1400f7a08
cmp eax, 1
jne 0x1400f761d
popf
pop rax
jmp 0x1400f77cc
cmp eax, 0xd
jne 0x1400f762c
popf
pop rax
jmp 0x1400f7f6f
cmp eax, 7
jne 0x1400f763b
popf
pop rax
jmp 0x1400f7c6c
cmp eax, 0xe
jne 0x1400f764a
popf
pop rax
jmp 0x1400f7fa7
cmp eax, 0xb
jne 0x1400f7659
popf
pop rax
jmp 0x1400f7e5a
cmp eax, 0xc
jne 0x1400f7668
popf
pop rax
jmp 0x1400f7f0f
cmp eax, 8
jne 0x1400f7677
popf
pop rax
jmp 0x1400f7cb5
cmp eax, 5
jne 0x1400f7686
popf
pop rax
jmp 0x1400f7b9e
cmp eax, 2
jne 0x1400f7695
popf
pop rax
jmp 0x1400f78ef
cmp eax, 9
jne 0x1400f76a4
popf
pop rax
jmp 0x1400f7d10
cmp eax, 0xa
jne 0x1400f76b3
popf
pop rax
jmp 0x1400f7dba
cmp eax, 6
jne 0x1400f76c2
popf
pop rax
jmp 0x1400f7bd4
mov qword [rsp + 8], rbx
push rdi
sub rsp, 0x60
mov rbx, rdx
mov rdi, rcx
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x50], xmm1
lea rcx, [0x1b1e63b07]
pushf
sub rcx, 0x71e31b0f
popf
call fcn.14006921f
mov r8, rax
lea rdx, [0x18b5fba2b]
pushf
sub rdx, 0x4b5c9a33
popf
lea rcx, [rsp + 0x40]
call fcn.1400ed668
nop
mov rdx, rbx
lea rcx, [rsp + 0x40]
call fcn.14011e7f4
lea rdx, [rsp + 0x40]
cmp qword [rsp + 0x58], 0xf
cmova rdx, qword [rsp + 0x40]
lea r8, [rsp + 0x38]
mov rcx, 0xffffffff80000002
jmp 0x1400f7745
call qword [sym.imp.ADVAPI32.dll_RegCreateKeyA]
test eax, eax
jne 0x1400f7799
push rax
pushf
mov eax, 0xc01d1e6
pushf
not eax
add eax, 0xffe2608f
xor eax, 0xe6e1499f
rol eax, 0x71
popf
pushf
not eax
add eax, 0xce94298a
xor eax, 0xd995e3d7
rol eax, 0x8c
popf
pushf
not eax
add eax, 0xa117b09d
xor eax, 0x9f509701
rol eax, 0x2f
popf
jmp 0x1400f75e1
push rax
pushf
mov eax, 0x1567b82e
pushf
not eax
add eax, 0xf8cfd3d1
xor eax, 0xfdaf5800
rol eax, 0xe
popf
pushf
not eax
add eax, 0xa41398df
xor eax, 0xdb2b112d
rol eax, 0xc8
popf
jmp 0x1400f75e1
mov byte [rsp + 0x80], 1
mov dword [rsp + 0x28], 4
lea rax, [rsp + 0x80]
mov qword [rsp + 0x20], rax
mov r9d, 0x82017dae
pushf
not r9d
add r9d, 0xf92c2267
xor r9d, 0x994ffec6
rol r9d, 0x3c
popf
pushf
not r9d
add r9d, 0x94b892ab
xor r9d, 0xa0dcb871
rol r9d, 0x41
popf
pushf
not r9d
add r9d, 0xed42d55e
xor r9d, 0xe325ca69
rol r9d, 0xde
popf
xor r8d, r8d
lea rdx, [0x18f7669a3]
pushf
sub rdx, 0x4f734987
popf
mov rcx, qword [rsp + 0x38]
jmp 0x1400f7855
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
test eax, eax
jne 0x1400f78bc
push rax
pushf
mov eax, 0x2bb4aed1
pushf
not eax
add eax, 0x9f9a0bf0
xor eax, 0xab7c8a8f
rol eax, 0xdf
popf
pushf
not eax
add eax, 0xdbe601f3
xor eax, 0x981023f7
rol eax, 0x7e
popf
pushf
not eax
add eax, 0xd4d4ebca
xor eax, 0xe7a3f56e
rol eax, 0xc9
popf
pushf
not eax
add eax, 0x8ce9a129
xor eax, 0xea132804
rol eax, 0
popf
jmp 0x1400f75e1
push rax
pushf
mov eax, 0x2ac502d9
pushf
not eax
add eax, 0xc69bee6f
xor eax, 0xb5ea585f
rol eax, 0xee
popf
pushf
not eax
add eax, 0xa431feeb
xor eax, 0xf73f735b
rol eax, 0x64
popf
jmp 0x1400f75e1
mov byte [rsp + 0x88], 3
mov dword [rsp + 0x28], 4
lea rax, [rsp + 0x88]
mov qword [rsp + 0x20], rax
mov r9d, 0x452af163
pushf
not r9d
add r9d, 0xcaecf187
xor r9d, 0xb048d355
rol r9d, 5
popf
pushf
not r9d
add r9d, 0xad919d82
xor r9d, 0xfc370ebb
rol r9d, 0xf5
popf
xor r8d, r8d
lea rdx, [0x1bc05e966]
pushf
sub rdx, 0x7c02c93e
popf
mov rcx, qword [rsp + 0x38]
jmp 0x1400f795f
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
test eax, eax
jne 0x1400f79c2
push rax
pushf
mov eax, 0x750b7bb7
pushf
not eax
add eax, 0xd8b52a83
xor eax, 0xe19f7a91
rol eax, 0x95
popf
pushf
not eax
add eax, 0xc611b9d9
xor eax, 0x90001d02
rol eax, 0xa3
popf
pushf
not eax
add eax, 0xe14d7c10
xor eax, 0x8a01ddf8
rol eax, 0x7c
popf
pushf
not eax
add eax, 0xfabfcbde
xor eax, 0xdaabcac0
rol eax, 0xb8
popf
jmp 0x1400f75e1
push rax
pushf
mov eax, 0x6f625c78
pushf
not eax
add eax, 0xacab0cc5
xor eax, 0xf7440454
rol eax, 0x91
popf
pushf
not eax
add eax, 0x8b9faf6b
xor eax, 0xcb9ddb65
rol eax, 0x10
popf
pushf
not eax
add eax, 0x8d831cee
xor eax, 0xcd4e33ba
rol eax, 0x3d
popf
jmp 0x1400f75e1
mov byte [rsp + 0x30], 3
mov dword [rsp + 0x28], 4
lea rax, [rsp + 0x30]
mov qword [rsp + 0x20], rax
mov r9d, 0x2612108e
pushf
not r9d
add r9d, 0xb4aaf251
xor r9d, 0x98854ca0
rol r9d, 0x10
popf
pushf
not r9d
add r9d, 0x8bddf5de
xor r9d, 0xde7bd7c0
rol r9d, 0xf7
popf
xor r8d, r8d
lea rdx, [0x1b5e42772]
pushf
sub rdx, 0x75e1073a
popf
mov rcx, qword [rsp + 0x38]
jmp 0x1400f7a72
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
test eax, eax
jne 0x1400f7ad5
push rax
pushf
mov eax, 0x86d3577f
pushf
not eax
add eax, 0xb56b3845
xor eax, 0xe3aee808
rol eax, 0x75
popf
pushf
not eax
add eax, 0xc5e8a9a6
xor eax, 0xdedc2558
rol eax, 0x35
popf
pushf
not eax
add eax, 0x8897b450
xor eax, 0xbd6430be
rol eax, 0x6c
popf
pushf
not eax
add eax, 0xba5e21b8
xor eax, 0xec08ceb1
rol eax, 7
popf
jmp 0x1400f75e1
push rax
pushf
mov eax, 0x77cf735e
pushf
not eax
add eax, 0xc13b7133
xor eax, 0xc736cd1a
rol eax, 0xe2
popf
pushf
not eax
add eax, 0xf8ed524b
xor eax, 0xac666d32
rol eax, 0x6c
popf
pushf
not eax
add eax, 0xccd39834
xor eax, 0xb9a3b635
rol eax, 0x9e
popf
pushf
not eax
add eax, 0xb3b99c19
xor eax, 0xd9f5ebcb
rol eax, 0x13
popf
jmp 0x1400f75e1
mov eax, dword [rdi + 0x10]
cmp qword [rdi + 0x18], 0xf
jbe 0x1400f7b6b
push rax
pushf
mov eax, 0x9001798a
pushf
not eax
add eax, 0x82f204e7
xor eax, 0x85561c3f
rol eax, 0x7b
popf
pushf
not eax
add eax, 0xdf021732
xor eax, 0xc344f676
rol eax, 0xd6
popf
jmp 0x1400f75e1
push rax
pushf
mov eax, 0x19abfa3c
pushf
not eax
add eax, 0x9ad5d1ca
xor eax, 0xf4337465
rol eax, 0x56
popf
pushf
not eax
add eax, 0xb21cd2fa
xor eax, 0xb7ff9451
rol eax, 0x56
popf
jmp 0x1400f75e1
mov rdi, qword [rdi]
push rax
pushf
mov eax, 0xecffa3fd
pushf
not eax
add eax, 0xebf5b4f2
xor eax, 0xed77522c
rol eax, 0xd8
popf
pushf
not eax
add eax, 0xccb79534
xor eax, 0xf4a41331
rol eax, 0xfb
popf
jmp 0x1400f75e1
mov dword [rsp + 0x28], eax
mov qword [rsp + 0x20], rdi
mov r9d, 0x27b2ed0f
pushf
not r9d
add r9d, 0xc6c5936d
xor r9d, 0x934ce7b7
rol r9d, 0xf7
popf
pushf
not r9d
add r9d, 0xcdc96a9a
xor r9d, 0x80eb320d
rol r9d, 0xa3
popf
pushf
not r9d
add r9d, 0xd423e02e
xor r9d, 0xd4e6a5c0
rol r9d, 0x7a
popf
pushf
not r9d
add r9d, 0xc21130c2
xor r9d, 0x92791bfc
rol r9d, 0x29
popf
xor r8d, r8d
lea rdx, [0x18d544159]
pushf
sub rdx, 0x4d512119
popf
mov rcx, qword [rsp + 0x38]
jmp 0x1400f7c62
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
test eax, eax
jne 0x1400f7cb5
mov rcx, qword [rsp + 0x38]
jmp 0x1400f7c72
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
test eax, eax
sete bl
jmp 0x1400f7d10
xor bl, bl
push rax
pushf
mov eax, 0x7fce107b
pushf
not eax
add eax, 0xe9aea86c
xor eax, 0xfa4da550
rol eax, 0x43
popf
pushf
not eax
add eax, 0x812d09ee
xor eax, 0x9f4a86cf
rol eax, 0xf3
popf
pushf
not eax
add eax, 0xcc7b21ee
xor eax, 0xb4ebcbb0
rol eax, 0xb0
popf
pushf
not eax
add eax, 0xe0da2f04
xor eax, 0xeaab9f1f
rol eax, 0x5d
popf
jmp 0x1400f75e1
mov rdx, qword [rsp + 0x58]
cmp rdx, 0xf
jbe 0x1400f7d61
push rax
pushf
mov eax, 0x80970845
pushf
not eax
add eax, 0xa8778e08
xor eax, 0xc3d4560c
rol eax, 0xdf
popf
pushf
not eax
add eax, 0xa1b4122b
xor eax, 0xb49f14fd
rol eax, 0xe2
popf
pushf
not eax
add eax, 0xed4d1185
xor eax, 0x81621e8a
rol eax, 0xcd
popf
jmp 0x1400f75e1
push rax
pushf
mov eax, 0xf6809231
pushf
not eax
add eax, 0xc91ebee0
xor eax, 0x8b3779e0
rol eax, 0xcf
popf
pushf
not eax
add eax, 0xc91a8d60
xor eax, 0x9714f096
rol eax, 0xab
popf
pushf
not eax
add eax, 0xfd078823
xor eax, 0xe9420b47
rol eax, 0xd8
popf
pushf
not eax
add eax, 0x8245f0e0
xor eax, 0xf21c144f
rol eax, 0x96
popf
jmp 0x1400f75e1
inc rdx
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400f7e14
push rax
pushf
mov eax, 0xfacdb55
pushf
not eax
add eax, 0xa51a66a4
xor eax, 0x88cbce4a
rol eax, 0x22
popf
pushf
not eax
add eax, 0xb932aaea
xor eax, 0xde0c0f47
rol eax, 0x71
popf
pushf
not eax
add eax, 0xd7bd0bd1
xor eax, 0xa427d2a5
rol eax, 0x8d
popf
jmp 0x1400f75e1
push rax
pushf
mov eax, 0x6b583fdc
pushf
not eax
add eax, 0x9f70df0b
xor eax, 0xd33854e8
rol eax, 0xae
popf
pushf
not eax
add eax, 0xb5065326
xor eax, 0x8d821462
rol eax, 0xcb
popf
pushf
not eax
add eax, 0xab61f4cc
xor eax, 0xf6f17c4f
rol eax, 0xb1
popf
jmp 0x1400f75e1
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400f7eb5
push rax
pushf
mov eax, 0x15fa952e
pushf
not eax
add eax, 0xfbaeafd6
xor eax, 0x81a0ed2d
rol eax, 0x3e
popf
pushf
not eax
add eax, 0xa515a7f0
xor eax, 0xbde4000b
rol eax, 0x97
popf
pushf
not eax
add eax, 0xc26eda42
xor eax, 0xbf15ec0c
rol eax, 0xf8
popf
jmp 0x1400f75e1
push rax
pushf
mov eax, 0xf9bc4013
pushf
not eax
add eax, 0xf8ea9ed5
xor eax, 0xb79c5fb7
rol eax, 0xec
popf
pushf
not eax
add eax, 0xb2ae38dd
xor eax, 0x97c90d2a
rol eax, 0x3b
popf
pushf
not eax
add eax, 0xd6d8e083
xor eax, 0xeada9c12
rol eax, 0x52
popf
pushf
not eax
add eax, 0xdc718909
xor eax, 0xe5dbb72b
rol eax, 0x71
popf
jmp 0x1400f75e1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400ae1e9
push rax
pushf
mov eax, 0x38678302
pushf
not eax
add eax, 0x971738f3
xor eax, 0xe0f65177
rol eax, 0x2f
popf
pushf
not eax
add eax, 0xe555d7f7
xor eax, 0xf311f6ca
rol eax, 0x38
popf
jmp 0x1400f75e1
movzx eax, bl
mov rbx, qword [rsp + 0x70]
add rsp, 0x60
pop rdi
ret