Function at 0x140076b16
Capabilities:
Set registry value

Disassembly:
push rax
pushf
mov eax, 0xae9bb6e9
pushf
not eax
add eax, 0x7bd9185b
xor eax, 0x489bdae2
rol eax, 0x53
popf
pushf
not eax
add eax, 0xf363afa
xor eax, 0x1b3ca155
rol eax, 0x8e
popf
pushf
not eax
add eax, 0x1d0e7fbf
xor eax, 0x71ea3555
rol eax, 0x4d
popf
cmp eax, 8
jne 0x140076b66
popf
pop rax
jmp 0x140077314
cmp eax, 0
jne 0x140076b75
popf
pop rax
jmp 0x140076cfb
cmp eax, 0x13
jne 0x140076b84
popf
pop rax
jmp 0x140077ac7
cmp eax, 3
jne 0x140076b93
popf
pop rax
jmp 0x140076f31
cmp eax, 6
jne 0x140076ba2
popf
pop rax
jmp 0x14007715d
cmp eax, 0x11
jne 0x140076bb1
popf
pop rax
jmp 0x1400779b8
cmp eax, 4
jne 0x140076bc0
popf
pop rax
jmp 0x140076fba
cmp eax, 0xd
jne 0x140076bcf
popf
pop rax
jmp 0x1400776b2
cmp eax, 5
jne 0x140076bde
popf
pop rax
jmp 0x140077034
cmp eax, 0x17
jne 0x140076bed
popf
pop rax
jmp 0x140077d13
cmp eax, 0x19
jne 0x140076bfc
popf
pop rax
jmp 0x140077dd2
cmp eax, 0xa
jne 0x140076c0b
popf
pop rax
jmp 0x140077449
cmp eax, 0x1b
jne 0x140076c1a
popf
pop rax
jmp 0x140077ec3
cmp eax, 0x12
jne 0x140076c29
popf
pop rax
jmp 0x140077a67
cmp eax, 0x18
jne 0x140076c38
popf
pop rax
jmp 0x140077d6a
cmp eax, 0x1a
jne 0x140076c47
popf
pop rax
jmp 0x140077e2c
cmp eax, 0x16
jne 0x140076c56
popf
pop rax
jmp 0x140077c95
cmp eax, 0x15
jne 0x140076c65
popf
pop rax
jmp 0x140077bea
cmp eax, 0xe
jne 0x140076c74
popf
pop rax
jmp 0x14007775a
cmp eax, 0xb
jne 0x140076c83
popf
pop rax
jmp 0x14007750f
cmp eax, 0xc
jne 0x140076c92
popf
pop rax
jmp 0x140077576
cmp eax, 1
jne 0x140076ca1
popf
pop rax
jmp 0x140076dd1
cmp eax, 2
jne 0x140076cb0
popf
pop rax
jmp 0x140076e8d
cmp eax, 0x10
jne 0x140076cbf
popf
pop rax
jmp 0x14007791b
cmp eax, 0xf
jne 0x140076cce
popf
pop rax
jmp 0x1400777e7
cmp eax, 7
jne 0x140076cdd
popf
pop rax
jmp 0x14007724b
cmp eax, 9
jne 0x140076cec
popf
pop rax
jmp 0x1400773a9
cmp eax, 0x14
jne 0x140076cfb
popf
pop rax
jmp 0x140077b52
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
push rbp
push rdi
push r12
push r13
push r14
lea rbp, [rsp - 0x170]
sub rsp, 0x270
xor r12d, r12d
mov rbx, r9
mov qword [rsp + 0x50], r12
mov rdi, r8
mov qword [rbp + 0x1b0], r12
mov r14, rdx
mov qword [rsp + 0x58], r12
mov rsi, rcx
test r8, r8
je 0x140076d8b
push rax
pushf
mov eax, 0x6f5742f9
pushf
not eax
add eax, 0x8f91f66
xor eax, 0x14ec0e85
rol eax, 0x39
popf
pushf
not eax
add eax, 0x1cba242d
xor eax, 0x59a9d441
rol eax, 0xb1
popf
pushf
not eax
add eax, 0x20bf6c50
xor eax, 0x67334be2
rol eax, 0xe0
popf
jmp 0x140076b57
push rax
pushf
mov eax, 0xfd643957
pushf
not eax
add eax, 0x74bd77a3
xor eax, 0x7d304a20
rol eax, 4
popf
pushf
not eax
add eax, 0x1ecb28a9
xor eax, 0x26a0baf4
rol eax, 0xc1
popf
pushf
not eax
add eax, 0x7736837
xor eax, 0x490cb21e
rol eax, 0x2b
popf
jmp 0x140076b57
cmp dword [r8 + 8], r12d
je 0x140076e34
push rax
pushf
mov eax, 0xa10be170
pushf
not eax
add eax, 0x22839f8c
xor eax, 0x25983ed4
rol eax, 0xe6
popf
pushf
not eax
add eax, 0x6c6b0f75
xor eax, 0x3b4fc9e5
rol eax, 0x41
popf
pushf
not eax
add eax, 0x5a0ea25a
xor eax, 0x7a7e9bf
rol eax, 0x1a
popf
pushf
not eax
add eax, 0x699cbf56
xor eax, 0x60883182
rol eax, 0xda
popf
jmp 0x140076b57
push rax
pushf
mov eax, 0xef2647d
pushf
not eax
add eax, 0x5b2f8271
xor eax, 0x52922f0a
rol eax, 0xcf
popf
pushf
not eax
add eax, 0x477aa390
xor eax, 0x3b6ae7fa
rol eax, 0x13
popf
pushf
not eax
add eax, 0x165df0ce
xor eax, 0x46342706
rol eax, 0xa3
popf
pushf
not eax
add eax, 0xeef801a
xor eax, 0x1b06a6b8
rol eax, 0x5c
popf
jmp 0x140076b57
test rbx, rbx
jne 0x140076eeb
push rax
pushf
mov eax, 0x3ce47ea0
pushf
not eax
add eax, 0x77be2a78
xor eax, 0x73b36d27
rol eax, 0x23
popf
pushf
not eax
add eax, 0x46259c6f
xor eax, 0x2b9ff0fe
rol eax, 0xd7
popf
pushf
not eax
add eax, 0x7324f74
xor eax, 0x3d007f05
rol eax, 0xef
popf
pushf
not eax
add eax, 0x46d6c7e
xor eax, 0x18570019
rol eax, 0xf6
popf
jmp 0x140076b57
push rax
pushf
mov eax, 0xbe5056e0
pushf
not eax
add eax, 0x86bba3a
xor eax, 0x23f9c045
rol eax, 0x56
popf
pushf
not eax
add eax, 0x4188488e
xor eax, 0x25f5c7fc
rol eax, 0xc7
popf
pushf
not eax
add eax, 0x3d29b8fd
xor eax, 0x7127ac4d
rol eax, 0x11
popf
jmp 0x140076b57
mov eax, 0x2084fef4
pushf
not eax
add eax, 0x3b94f148
xor eax, 0x20be0654
rol eax, 0x23
popf
pushf
not eax
add eax, 0x191bf32f
xor eax, 0x638c52eb
rol eax, 0xc3
popf
jmp 0x140077ec3
lea rdx, [rsp + 0x50]
xor ecx, ecx
call fcn.140074589
test eax, eax
js 0x140077001
push rax
pushf
mov eax, 0x8b60986
pushf
not eax
add eax, 0x58be76fa
xor eax, 0x22fe1cda
rol eax, 0xea
popf
pushf
not eax
add eax, 0x51fa0976
xor eax, 0x7833612a
rol eax, 0xb9
popf
jmp 0x140076b57
push rax
pushf
mov eax, 0xa66f5342
pushf
not eax
add eax, 0x2f63e641
xor eax, 0x400c7b9c
rol eax, 0xd1
popf
pushf
not eax
add eax, 0x303acafb
xor eax, 0x5d73f909
rol eax, 0xb2
popf
jmp 0x140076b57
mov r13d, 0x10cf7531
pushf
not r13d
add r13d, 0x88d4183
xor r13d, 0x447f09e5
rol r13d, 0xbf
popf
pushf
not r13d
add r13d, 0x7436ae35
xor r13d, 0x5b5f938a
rol r13d, 0xa
popf
pushf
not r13d
add r13d, 0x27ab3be5
xor r13d, 0x66dc3c9d
rol r13d, 0xaa
popf
pushf
not r13d
add r13d, 0x71e082fe
xor r13d, 0x6c68c93
rol r13d, 0xe7
popf
cmp dword [rbp + 0x1c0], r12d
je 0x140077104
push rax
pushf
mov eax, 0x539f48d3
pushf
not eax
add eax, 0x3fb73b5a
xor eax, 0x556509c3
rol eax, 0xef
popf
pushf
not eax
add eax, 0x78b1e49f
xor eax, 0x406254dd
rol eax, 0x56
popf
pushf
not eax
add eax, 0x3f7c2dd2
xor eax, 0x6a09d488
rol eax, 0x2f
popf
pushf
not eax
add eax, 0x5b64dbec
xor eax, 0x17ea4e4f
rol eax, 0xe0
popf
jmp 0x140076b57
push rax
pushf
mov eax, 0x6e7349ef
pushf
not eax
add eax, 0x655d55ed
xor eax, 0x5d1aeb98
rol eax, 0xe1
popf
pushf
not eax
add eax, 0x31e8de1d
xor eax, 0x52308a4f
rol eax, 0x92
popf
pushf
not eax
add eax, 0x70ec5b5a
xor eax, 0x7821293d
rol eax, 0xfd
popf
pushf
not eax
add eax, 0xd7483b
xor eax, 0x334ce9d2
rol eax, 0xb8
popf
jmp 0x140076b57
mov rcx, qword [rsp + 0x50]
lea rax, [rbp + 0x1b0]
mov qword [rsp + 0x40], r12
xor r9d, r9d
mov qword [rsp + 0x38], rax
xor r8d, r8d
mov qword [rsp + 0x30], r12
mov rdx, rsi
mov dword [rsp + 0x28], r13d
mov dword [rsp + 0x20], r12d
jmp 0x14007718c
call qword [sym.imp.ADVAPI32.dll_RegCreateKeyExW]
test eax, eax
jne 0x1400771f2
push rax
pushf
mov eax, 0x55c45cd5
pushf
not eax
add eax, 0x7971dbab
xor eax, 0x11b642a8
rol eax, 0x70
popf
pushf
not eax
add eax, 0x3bbde28c
xor eax, 0x7ccff206
rol eax, 0xef
popf
pushf
not eax
add eax, 0x371b1d20
xor eax, 0x616fdf36
rol eax, 1
popf
pushf
not eax
add eax, 0x16c6b9d1
xor eax, 0x5d66b0f3
rol eax, 0x24
popf
jmp 0x140076b57
push rax
pushf
mov eax, 0xda9f3594
pushf
not eax
add eax, 0xf08d916
xor eax, 0x13b7d980
rol eax, 0xb
popf
pushf
not eax
add eax, 0x3ce25082
xor eax, 0x1ccfa9ca
rol eax, 0x5d
popf
pushf
not eax
add eax, 0x12863e0c
xor eax, 0xbbd24f5
rol eax, 0xfc
popf
pushf
not eax
add eax, 0x4ee44c99
xor eax, 0x561cd24c
rol eax, 0xa9
popf
jmp 0x140076b57
mov rcx, qword [rbp + 0x1b0]
lea r9d, [r13 - 1]
mov dword [rsp + 0x28], r12d
lea rdx, [0x1b358742c]
pushf
sub rdx, 0x7355fb1c
popf
xor r8d, r8d
mov qword [rsp + 0x20], r12
jmp 0x140077276
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
mov rcx, qword [rbp + 0x1c8]
test rcx, rcx
je 0x1400772bb
push rax
pushf
mov eax, 0xe966b627
pushf
not eax
add eax, 0x7679e2ab
xor eax, 0x7176e295
rol eax, 0xf5
popf
pushf
not eax
add eax, 0x271738f2
xor eax, 0x64378c38
rol eax, 0x16
popf
jmp 0x140076b57
push rax
pushf
mov eax, 0xbae60a2
pushf
not eax
add eax, 0x1d6bb67b
xor eax, 0x6945972b
rol eax, 0x4b
popf
pushf
not eax
add eax, 0x10893852
xor eax, 0x6f7fa833
rol eax, 0x3f
popf
pushf
not eax
add eax, 0x2320fe9d
xor eax, 0x51fe90b8
rol eax, 0x64
popf
pushf
not eax
add eax, 0x1cf8d446
xor eax, 0xd8184b9
rol eax, 0x68
popf
jmp 0x140076b57
mov rax, rcx
cmp word [rcx], r12w
je 0x140077376
push rax
pushf
mov eax, 0x54c03c97
pushf
not eax
add eax, 0x7314b16
xor eax, 0x269719c2
rol eax, 0xd4
popf
pushf
not eax
add eax, 0x366f521b
xor eax, 0x6d956136
rol eax, 0xdf
popf
pushf
not eax
add eax, 0x42f52ff5
xor eax, 0x3e1d3529
rol eax, 0xe6
popf
pushf
not eax
add eax, 0x5d8df552
xor eax, 0xbe91437
rol eax, 0xaf
popf
jmp 0x140076b57
push rax
pushf
mov eax, 0x7980416c
pushf
not eax
add eax, 0x390aeeb7
xor eax, 0x713d6d3b
rol eax, 0x53
popf
pushf
not eax
add eax, 0x7459fd58
xor eax, 0x70cb2799
rol eax, 0x14
popf
jmp 0x140076b57
push r13
not r13
sub rax, r13
pop r13
sub rax, 1
cmp word [rax], r12w
jne 0x1400773f0
push rax
pushf
mov eax, 0x61e6e6a4
pushf
not eax
add eax, 0x1ae0ea20
xor eax, 0xde6fcbc
rol eax, 0x9a
popf
pushf
not eax
add eax, 0x2dea7885
xor eax, 0xf020485
rol eax, 0xef
popf
jmp 0x140076b57
push rax
pushf
mov eax, 0x36a953a1
pushf
not eax
add eax, 0x61408412
xor eax, 0x56d0596e
rol eax, 0x94
popf
pushf
not eax
add eax, 0x48503079
xor eax, 0x6df85445
rol eax, 7
popf
pushf
not eax
add eax, 0x6927aaa
xor eax, 0x5d12e5a6
rol eax, 0x56
popf
pushf
not eax
add eax, 0x103768c5
xor eax, 0x498c8f98
rol eax, 0x6f
popf
jmp 0x140076b57
push rcx
not rcx
add rax, rcx
pop rcx
add rax, 1
lea rdx, [0x1a0ad557b]
pushf
sub rdx, 0x60aade03
popf
sar rax, 1
mov r9d, 0x1fa31194
pushf
not r9d
add r9d, 0x3fccee59
xor r9d, 0x658d2c83
rol r9d, 0x4a
popf
pushf
not r9d
add r9d, 0x7b17f6be
xor r9d, 0x4412a8ff
rol r9d, 0x1d
popf
pushf
not r9d
add r9d, 0x62a43944
xor r9d, 0x4e3b2b18
rol r9d, 0x11
popf
xor r8d, r8d
lea eax, [rax*2 + 2]
mov dword [rsp + 0x28], eax
mov qword [rsp + 0x20], rcx
mov rcx, qword [rbp + 0x1b0]
jmp 0x1400774d6
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
push rax
pushf
mov eax, 0x430221cf
pushf
not eax
add eax, 0x46e8ff7b
xor eax, 0x6c05f4e1
rol eax, 0x4f
popf
pushf
not eax
add eax, 0xdab063e
xor eax, 0x7929ce4c
rol eax, 0x2e
popf
jmp 0x140076b57
mov rcx, qword [rbp + 0x1b0]
jmp 0x140077517
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
push rax
pushf
mov eax, 0x4dc4db6e
pushf
not eax
add eax, 0x31873497
xor eax, 0x3fc6be84
rol eax, 0x22
popf
pushf
not eax
add eax, 0x475f41e5
xor eax, 0x454281e1
rol eax, 0xc4
popf
pushf
not eax
add eax, 0x695e24e6
xor eax, 0x5cf331fd
rol eax, 0x4e
popf
pushf
not eax
add eax, 0x3de30801
xor eax, 0xc5af2f2
rol eax, 0xf6
popf
jmp 0x140076b57
mov rdx, r14
lea rcx, [rsp + 0x60]
call fcn.140041acc
lea rdx, [0x1b1d8a432]
pushf
sub rdx, 0x71d62b02
popf
lea rcx, [rsp + 0x60]
call fcn.1400415c6
lea rdx, [0x1ac460ae5]
pushf
sub rdx, 0x6c439525
popf
lea rcx, [rsp + 0x60]
call fcn.1400415c6
lea rdx, [0x188f7c36b]
pushf
sub rdx, 0x48f54a23
popf
lea rcx, [rsp + 0x60]
call fcn.1400415c6
mov rcx, qword [rsp + 0x50]
lea rax, [rsp + 0x58]
mov qword [rsp + 0x40], r12
lea rdx, [rsp + 0x60]
mov qword [rsp + 0x38], rax
xor r9d, r9d
mov qword [rsp + 0x30], r12
xor r8d, r8d
mov dword [rsp + 0x28], 0x2000000
mov dword [rsp + 0x20], r12d
jmp 0x140077609
call qword [sym.imp.ADVAPI32.dll_RegCreateKeyExW]
test eax, eax
jne 0x14007766c
push rax
pushf
mov eax, 0xfe843dcf
pushf
not eax
add eax, 0x7d057efe
xor eax, 0x53ca42f1
rol eax, 0xe8
popf
pushf
not eax
add eax, 0x507141d4
xor eax, 0x462c0623
rol eax, 0xd3
popf
pushf
not eax
add eax, 0x32ae324a
xor eax, 0x1f35623b
rol eax, 0x45
popf
pushf
not eax
add eax, 0x58bc6de3
xor eax, 0x628d2d43
rol eax, 0x22
popf
jmp 0x140076b57
push rax
pushf
mov eax, 0x6b5ddee2
pushf
not eax
add eax, 0x38b74481
xor eax, 0x562ec775
rol eax, 0x82
popf
pushf
not eax
add eax, 0x3696904d
xor eax, 0x634ac1f8
rol eax, 0x18
popf
pushf
not eax
add eax, 0x6786fc01
xor eax, 0x20db093b
rol eax, 7
popf
jmp 0x140076b57
mov rax, rbx
cmp word [rbx], r12w
je 0x140077714
push rax
pushf
mov eax, 0x61ac84cd
pushf
not eax
add eax, 0x6d86ee49
xor eax, 0xe474578
rol eax, 0xcd
popf
pushf
not eax
add eax, 0x2fcad497
xor eax, 0x2f75eac7
rol eax, 0xec
popf
pushf
not eax
add eax, 0x1ab0c9eb
xor eax, 0x2cbc2e30
rol eax, 0x94
popf
pushf
not eax
add eax, 0x67d6f758
xor eax, 0x4d659d32
rol eax, 0x32
popf
jmp 0x140076b57
push rax
pushf
mov eax, 0xfb39766a
pushf
not eax
add eax, 0x1e6ffad9
xor eax, 0xc392aab
rol eax, 0xa6
popf
pushf
not eax
add eax, 0x46e436a6
xor eax, 0x1a26763b
rol eax, 0x71
popf
pushf
not eax
add eax, 0x116020d8
xor eax, 0x2a9f2f1a
rol eax, 0xd2
popf
jmp 0x140076b57
push r13
not r13
sub rax, r13
pop r13
sub rax, 1
cmp word [rax], r12w
jne 0x1400777a1
push rax
pushf
mov eax, 0xac30614b
pushf
not eax
add eax, 0x5509982d
xor eax, 0x46c8b705
rol eax, 0xce
popf
pushf
not eax
add eax, 0x63d69efe
xor eax, 0x35d60b9
rol eax, 0xfa
popf
jmp 0x140076b57
push rax
pushf
mov eax, 0xdd062971
pushf
not eax
add eax, 0x17ba7c71
xor eax, 0x7de9d30b
rol eax, 0x27
popf
pushf
not eax
add eax, 0x63365f2a
xor eax, 0x2be2df6
rol eax, 0x6c
popf
pushf
not eax
add eax, 0x25e147e5
xor eax, 0x49523c78
rol eax, 0x46
popf
jmp 0x140076b57
mov rcx, qword [rsp + 0x58]
lea rdx, [0x19fd93f31]
pushf
sub rdx, 0x5fd6c7b9
popf
push rbx
not rbx
add rax, rbx
pop rbx
add rax, 1
mov r9d, 0xffd7e6c7
pushf
not r9d
add r9d, 0x251d2f46
xor r9d, 0x76b5ba1
rol r9d, 0xdf
popf
pushf
not r9d
add r9d, 0xed81608
xor r9d, 0x6be4a353
rol r9d, 0x4f
popf
pushf
not r9d
add r9d, 0xf7f5fa8
xor r9d, 0x76fa40a7
rol r9d, 0xda
popf
pushf
not r9d
add r9d, 0x11b801c8
xor r9d, 0x58b37377
rol r9d, 4
popf
sar rax, 1
xor r8d, r8d
lea eax, [rax*2 + 2]
mov dword [rsp + 0x28], eax
mov qword [rsp + 0x20], rbx
jmp 0x14007788b
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
mov rcx, qword [rsp + 0x58]
mov ebx, eax
jmp 0x140077899
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov ecx, r12d
push rbx
not ebx
add ecx, ebx
pop rbx
add ecx, 1
neg ecx
sbb ebx, ebx
not ebx
xor ebx, 0xc000014d
and ebx, 0xc000014d
jmp 0x1400779b8
mov ebx, 0x77ff689
pushf
not ebx
add ebx, 0x5b2f8b75
xor ebx, 0x1dfd94fe
rol ebx, 0x6d
popf
pushf
not ebx
add ebx, 0x1b52d6f4
xor ebx, 0x7276543e
rol ebx, 0x39
popf
pushf
not ebx
add ebx, 0x68e0123d
xor ebx, 0x578dc540
rol ebx, 0xe5
popf
push rax
pushf
mov eax, 0x70a80356
pushf
not eax
add eax, 0x57af1bf1
xor eax, 0x4002c772
rol eax, 0xa3
popf
pushf
not eax
add eax, 0x607b68e8
xor eax, 0x51348ef9
rol eax, 0x2a
popf
pushf
not eax
add eax, 0x5d361948
xor eax, 0x40f11c3f
rol eax, 0x27
popf
pushf
not eax
add eax, 0x500d8f0
xor eax, 0x14252a53
rol eax, 0xe6
popf
jmp 0x140076b57
mov rcx, qword [rsp + 0x50]
jmp 0x1400779be
call qword [sym.imp.ntdll.dll_NtClose]
test ebx, ebx
jns 0x140077a21
push rax
pushf
mov eax, 0xfc19360
pushf
not eax
add eax, 0x15fe498e
xor eax, 0x1b780b51
rol eax, 0x7c
popf
pushf
not eax
add eax, 0x3c1b261e
xor eax, 0x1203e703
rol eax, 0xb9
popf
pushf
not eax
add eax, 0x1ee8e147
xor eax, 0x2dc10a30
rol eax, 0x71
popf
pushf
not eax
add eax, 0x273bfbeb
xor eax, 0x6c628838
rol eax, 0xec
popf
jmp 0x140076b57
push rax
pushf
mov eax, 0x27dbb5a4
pushf
not eax
add eax, 0x166a97b0
xor eax, 0x219fbf1e
rol eax, 0x82
popf
pushf
not eax
add eax, 0x1344137
xor eax, 0x7df0a1c8
rol eax, 0x36
popf
pushf
not eax
add eax, 0x5cbc23b6
xor eax, 0x17fddc1a
rol eax, 0xcc
popf
jmp 0x140076b57
mov eax, ebx
jmp 0x140077ec3
mov rax, qword [0x14002fa90]
mov edx, dword [rax + 8]
cmp edx, 0x4a62
ja 0x140077b1f
push rax
pushf
mov eax, 0xaac4cc8d
pushf
not eax
add eax, 0x1e206eb9
xor eax, 0x1e959a8b
rol eax, 0xe3
popf
pushf
not eax
add eax, 0x6c818808
xor eax, 0x548ee5ff
rol eax, 0xba
popf
pushf
not eax
add eax, 0x341ee051
xor eax, 0x45765bb5
rol eax, 0xf3
popf
jmp 0x140076b57
push rax
pushf
mov eax, 0xee01b1fe
pushf
not eax
add eax, 0x76dd80c6
xor eax, 0x3b97f383
rol eax, 0x80
popf
pushf
not eax
add eax, 0x1d627c4
xor eax, 0x4e89ea4f
rol eax, 0xdf
popf
jmp 0x140076b57
not edx
add edx, 0x4563
not edx
je 0x140077bb7
push rax
pushf
mov eax, 0x7f8bfce6
pushf
not eax
add eax, 0x2fa1720e
xor eax, 0x39a1ac39
rol eax, 0x26
popf
pushf
not eax
add eax, 0x35489285
xor eax, 0x7d8a8c53
rol eax, 0x3f
popf
pushf
not eax
add eax, 0x60c5efc8
xor eax, 0x673654b7
rol eax, 0x9b
popf
pushf
not eax
add eax, 0x2e40e400
xor eax, 0x6daa6539
rol eax, 0xe9
popf
jmp 0x140076b57
push rax
pushf
mov eax, 0xb32c62cc
pushf
not eax
add eax, 0x1078ab00
xor eax, 0x51313d8
rol eax, 0x41
popf
pushf
not eax
add eax, 0x2c3e94c
xor eax, 0x54053175
rol eax, 0x4a
popf
jmp 0x140076b57
not edx
add edx, 0x257
not edx
je 0x140077c3c
push rax
pushf
mov eax, 0xaab9c62
pushf
not eax
add eax, 0x61dfd49f
xor eax, 0x2483347c
rol eax, 0xaa
popf
pushf
not eax
add eax, 0x65a03982
xor eax, 0x1978fa22
rol eax, 0x68
popf
pushf
not eax
add eax, 0x31e099b3
xor eax, 0x1a4b0822
rol eax, 0x4e
popf
jmp 0x140076b57
push rax
pushf
mov eax, 0xaa6dc927
pushf
not eax
add eax, 0x1be2e311
xor eax, 0x62625952
rol eax, 0xd0
popf
pushf
not eax
add eax, 0x3423eeea
xor eax, 0x2942eb2d
rol eax, 0x46
popf
pushf
not eax
add eax, 0x657d81b9
xor eax, 0x1960d0e1
rol eax, 0xc3
popf
pushf
not eax
add eax, 0x2886e4ee
xor eax, 0xbfa5bcc
rol eax, 0x43
popf
jmp 0x140076b57
cmp edx, 1
je 0x140077ce0
push rax
pushf
mov eax, 0x65e1603e
pushf
not eax
add eax, 0x6f1dc54a
xor eax, 0x5096b34
rol eax, 0xfc
popf
pushf
not eax
add eax, 0x5f0bd1c5
xor eax, 0x6fabe524
rol eax, 0xf7
popf
pushf
not eax
add eax, 0x3cc19cc5
xor eax, 0x5af8ab12
rol eax, 0x4d
popf
jmp 0x140076b57
push rax
pushf
mov eax, 0x1a5c10fa
pushf
not eax
add eax, 0x26c12012
xor eax, 0x191f8f26
rol eax, 0xfe
popf
pushf
not eax
add eax, 0x663f49b0
xor eax, 0x20e0afa3
rol eax, 0x5a
popf
jmp 0x140076b57
mov r8, r14
mov rdx, rsi
mov ecx, r13d
jmp 0x140077d1d
call qword [rdi]
jmp 0x140077dd2
mov r9d, r13d
mov r8, r14
mov rdx, rsi
mov ecx, r13d
jmp 0x140077d77
call qword [rdi]
push rax
pushf
mov eax, 0x9ca7b265
pushf
not eax
add eax, 0x7ac84017
xor eax, 0x15c2aeb8
rol eax, 0x13
popf
pushf
not eax
add eax, 0xb1c5c97
xor eax, 0x138ee20d
rol eax, 0x9d
popf
pushf
not eax
add eax, 0x72134ec0
xor eax, 0x3ba3117d
rol eax, 0x2f
popf
pushf
not eax
add eax, 0x3b79f3b5
xor eax, 0x3dacbc90
rol eax, 0x51
popf
jmp 0x140076b57
sar eax, 0x1f
not eax
xor eax, 0xc0000001
and eax, 0xc0000001
jmp 0x140077ec3
mov eax, 0x4a40a111
pushf
not eax
add eax, 0x14aafb9b
xor eax, 0x2a9d8f9a
rol eax, 0x7f
popf
pushf
not eax
add eax, 0x705d1508
xor eax, 0x6927fb4e
rol eax, 0x8e
popf
pushf
not eax
add eax, 0x5aba5b4e
xor eax, 0x7219001f
rol eax, 0x47
popf
pushf
not eax
add eax, 0x4a7b4a06
xor eax, 0xeceb01b
rol eax, 0x53
popf
push rax
pushf
mov eax, 0x77ab937b
pushf
not eax
add eax, 0x35c83a82
xor eax, 0x5ae18a3f
rol eax, 0x42
popf
pushf
not eax
add eax, 0x7bc3b46e
xor eax, 0x523eece6
rol eax, 0xa4
popf
pushf
not eax
add eax, 0x640b30e5
xor eax, 0x509fb69
rol eax, 0x9c
popf
jmp 0x140076b57
lea r11, [rsp + 0x270]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rsp, r11
pop r14
pop r13
pop r12
pop rdi
pop rbp
ret