Function at 0x1400e7554
Capabilities:
Hash data using murmur3
Set registry value

Disassembly:
push rax
pushf
mov eax, 0x84de3921
pushf
not eax
add eax, 0xccfc2528
xor eax, 0x95d0b7b7
rol eax, 0x7c
popf
pushf
not eax
add eax, 0xc35cc918
xor eax, 0xdebb8070
rol eax, 0xa3
popf
pushf
not eax
add eax, 0xba072cd6
xor eax, 0xdbe39372
rol eax, 0xd0
popf
cmp eax, 4
jne 0x1400e75a4
popf
pop rax
jmp 0x1400e80ef
cmp eax, 0
jne 0x1400e75b3
popf
pop rax
jmp 0x1400e7676
cmp eax, 3
jne 0x1400e75c2
popf
pop rax
jmp 0x1400e806f
cmp eax, 1
jne 0x1400e75d1
popf
pop rax
jmp 0x1400e77ca
cmp eax, 0xd
jne 0x1400e75e0
popf
pop rax
jmp 0x1400e86f3
cmp eax, 7
jne 0x1400e75ef
popf
pop rax
jmp 0x1400e8330
cmp eax, 0xe
jne 0x1400e75fe
popf
pop rax
jmp 0x1400e873b
cmp eax, 0xb
jne 0x1400e760d
popf
pop rax
jmp 0x1400e863c
cmp eax, 0xc
jne 0x1400e761c
popf
pop rax
jmp 0x1400e869b
cmp eax, 8
jne 0x1400e762b
popf
pop rax
jmp 0x1400e83b5
cmp eax, 5
jne 0x1400e763a
popf
pop rax
jmp 0x1400e8138
cmp eax, 2
jne 0x1400e7649
popf
pop rax
jmp 0x1400e7800
cmp eax, 9
jne 0x1400e7658
popf
pop rax
jmp 0x1400e84cf
cmp eax, 0xa
jne 0x1400e7667
popf
pop rax
jmp 0x1400e8604
cmp eax, 6
jne 0x1400e7676
popf
pop rax
jmp 0x1400e81e0
mov qword [rsp + 8], rbx
push rbp
push rsi
push rdi
push r14
push r15
lea rbp, [rsp - 0x250]
sub rsp, 0x350
mov rax, qword [0x140092080]
xor rax, rsp
mov qword [rbp + 0x240], rax
mov rdi, r8
mov dword [rbp - 0x78], 1
mov rbx, rdx
lea rcx, [rbp + 0x30]
xor edx, edx
mov r8d, 0x4621b926
pushf
not r8d
add r8d, 0xf428f49f
xor r8d, 0xe85e7d44
rol r8d, 0xaf
popf
pushf
not r8d
add r8d, 0xee8c7343
xor r8d, 0xe2f7ae33
rol r8d, 3
popf
pushf
not r8d
add r8d, 0x8dfc4e1e
xor r8d, 0x8ea6b0de
rol r8d, 0x18
popf
pushf
not r8d
add r8d, 0xfb43daec
xor r8d, 0xcc74cdff
rol r8d, 0x5a
popf
call sub.VCRUNTIME140.dll_memset
cmp qword [rdi + 0x18], 7
jbe 0x1400e7784
push rax
pushf
mov eax, 0x48721f39
pushf
not eax
add eax, 0xb0e63b48
xor eax, 0xa23889ca
rol eax, 0x19
popf
pushf
not eax
add eax, 0xd4b02b31
xor eax, 0xddbb4f8a
rol eax, 0x23
popf
pushf
not eax
add eax, 0xa692212c
xor eax, 0xf5b008a3
rol eax, 0x63
popf
pushf
not eax
add eax, 0xdf84ca89
xor eax, 0xbdaaeaa8
rol eax, 0xf9
popf
jmp 0x1400e7595
push rax
pushf
mov eax, 0x514607d
pushf
not eax
add eax, 0x95c422b5
xor eax, 0x971e8ec9
rol eax, 0xb7
popf
pushf
not eax
add eax, 0xf7f7ef59
xor eax, 0x8257dee2
rol eax, 0x9e
popf
pushf
not eax
add eax, 0xed632888
xor eax, 0xae9a3673
rol eax, 0x2c
popf
jmp 0x1400e7595
mov rdi, qword [rdi]
push rax
pushf
mov eax, 0x82616afe
pushf
not eax
add eax, 0x9464ed5a
xor eax, 0xa999939a
rol eax, 0x10
popf
pushf
not eax
add eax, 0xaa444d80
xor eax, 0x988a91e5
rol eax, 0xe
popf
jmp 0x1400e7595
movabs rax, 0x2b12005a67d287ed
pushf
not rax
add rax, 0x7e651982
xor rax, 0x4b0cab04
rol rax, 0x22
popf
pushf
not rax
add rax, 0x77edcf23
xor rax, 0x65e704fb
rol rax, 0x4a
popf
pushf
not rax
add rax, 0x53848a81
xor rax, 0x7d0f16e6
rol rax, 2
popf
lea r8, [rbp - 0x60]
mov qword [rbp - 0x60], rax
lea rcx, [rbp + 0x30]
movabs rax, 0xbde14e11c942709
pushf
not rax
add rax, 0x7be5bb0b
xor rax, 0x5becba84
rol rax, 0xca
popf
pushf
not rax
add rax, 0x52ef9a90
xor rax, 0x6391d8a5
rol rax, 0x8b
popf
pushf
not rax
add rax, 0x4d7e9ff3
xor rax, 0x5b63b881
rol rax, 0x5f
popf
pushf
not rax
add rax, 0x4a07c820
xor rax, 0x4e270e11
rol rax, 0x98
popf
movabs r14, 0xdf7f135b2dfb7dbf
pushf
not r14
add r14, 0x73f94480
xor r14, 0x6eca636e
rol r14, 0x99
popf
pushf
not r14
add r14, 0x708bc821
xor r14, 0x4b573610
rol r14, 0x27
popf
mov qword [rbp - 0x58], rax
movabs rsi, 0xd63026e360a53b5a
pushf
not rsi
add rsi, 0x5899b257
xor rsi, 0x530ee9a4
rol rsi, 0xb1
popf
pushf
not rsi
add rsi, 0x6ab13edc
xor rsi, 0x5e799cd7
rol rsi, 0x87
popf
movdqa xmm0, xmmword [rbp - 0x60]
mov r9, rdi
mov qword [rbp - 0x70], r14
mov edx, 0x95e1197e
pushf
not edx
add edx, 0x9986ac1e
xor edx, 0xe86d69f5
rol edx, 6
popf
pushf
not edx
add edx, 0xe0f05ed9
xor edx, 0x9caf408d
rol edx, 0x41
popf
pushf
not edx
add edx, 0xb7e6e4ab
xor edx, 0xdf501bc2
rol edx, 0xb8
popf
pushf
not edx
add edx, 0xebcdfe55
xor edx, 0xa5c10d34
rol edx, 0x5d
popf
mov qword [rbp - 0x68], rsi
xorps xmm0, xmmword [rbp - 0x70]
movdqa xmmword [rbp - 0x60], xmm0
call fcn.140111ff2
movabs rax, 0xa5dcf51590bd193e
pushf
not rax
add rax, 0x55c8a098
xor rax, 0x4d50122d
rol rax, 0x43
popf
pushf
not rax
add rax, 0x57f0f900
xor rax, 0x421ddfda
rol rax, 0x48
popf
pushf
not rax
add rax, 0x4603810f
xor rax, 0x5ec540fd
rol rax, 0xb7
popf
mov qword [rbp - 0x20], r14
mov qword [rsp + 0x30], rax
lea r8, [rbp - 0x70]
movabs rax, 0xbb8f953098382528
pushf
not rax
add rax, 0x4896b167
xor rax, 0x60a6732a
rol rax, 0xf
popf
pushf
not rax
add rax, 0x418800bc
xor rax, 0x6d719c50
rol rax, 0x79
popf
mov qword [rbp - 0x18], rsi
mov qword [rsp + 0x38], rax
lea rdx, [rsp + 0x30]
movdqa xmm0, xmmword [rsp + 0x30]
movabs rax, 0xb6b99b3a3ecad1ca
pushf
not rax
add rax, 0x45e8f3f5
xor rax, 0x4c0f2208
rol rax, 0xc2
popf
pushf
not rax
add rax, 0x7ebdb2ff
xor rax, 0x4fd89e35
rol rax, 0xb6
popf
pushf
not rax
add rax, 0x6a772b7e
xor rax, 0x7e5d12d8
rol rax, 0xa4
popf
xorps xmm0, xmmword [rbp - 0x20]
movabs rcx, 0xce65d681c1b7bb20
pushf
not rcx
add rcx, 0x7a8a517f
xor rcx, 0x5cd43f61
rol rcx, 7
popf
pushf
not rcx
add rcx, 0x47e5f733
xor rcx, 0x4f7f8bff
rol rcx, 0x55
popf
mov qword [rsp + 0x40], rax
movabs r15, 0x57e47b84a03cc9b1
pushf
not r15
add r15, 0x5bfff8c7
xor r15, 0x7f0c288c
rol r15, 0x62
popf
pushf
not r15
add r15, 0x7a885d21
xor r15, 0x47fb472c
rol r15, 0x96
popf
pushf
not r15
add r15, 0x77aa77f3
xor r15, 0x50543509
rol r15, 0x16
popf
movdqa xmmword [rsp + 0x30], xmm0
movabs rax, 0x331b9d484807b258
pushf
not rax
add rax, 0x41a67efb
xor rax, 0x79e8ff4f
rol rax, 0xf0
popf
pushf
not rax
add rax, 0x7e954de5
xor rax, 0x5b911657
rol rax, 0x20
popf
pushf
not rax
add rax, 0x4b2b54b5
xor rax, 0x7602a631
rol rax, 0xd1
popf
pushf
not rax
add rax, 0x7079a8fc
xor rax, 0x74242460
rol rax, 0xa2
popf
mov qword [rsp + 0x48], rax
movabs rdi, 0xd94226471fc6a214
pushf
not rdi
add rdi, 0x42c4a215
xor rdi, 0x7c50ee2e
rol rdi, 0x90
popf
pushf
not rdi
add rdi, 0x60b1bf0b
xor rdi, 0x40a1de7b
rol rdi, 0x97
popf
pushf
not rdi
add rdi, 0x75648c37
xor rdi, 0x7300f438
rol rdi, 0xe6
popf
movdqa xmm1, xmmword [rsp + 0x40]
movabs rax, 0xa90380aedf4b28fe
pushf
not rax
add rax, 0x48f0948e
xor rax, 0x50153458
rol rax, 0x5e
popf
pushf
not rax
add rax, 0x56fd86c6
xor rax, 0x461accf4
rol rax, 0xaf
popf
pushf
not rax
add rax, 0x5759f515
xor rax, 0x5e96f91a
rol rax, 0xd1
popf
pushf
not rax
add rax, 0x4a3888fd
xor rax, 0x69b9dee7
rol rax, 0xb8
popf
mov qword [rsp + 0x50], rax
movabs rax, 0x375dc53eaf63919c
pushf
not rax
add rax, 0x7b0ba5a9
xor rax, 0x64e5a28c
rol rax, 0x96
popf
pushf
not rax
add rax, 0x4fe4b1e9
xor rax, 0x4398c8cd
rol rax, 0x82
popf
pushf
not rax
add rax, 0x6a630bba
xor rax, 0x6b60c5d9
rol rax, 0x45
popf
mov qword [rsp + 0x58], rax
movabs rax, 0x9fdfd01c0e2784e7
pushf
not rax
add rax, 0x54e27bff
xor rax, 0x7522159c
rol rax, 0x2d
popf
pushf
not rax
add rax, 0x568748d6
xor rax, 0x59d64ddc
rol rax, 0x71
popf
movdqa xmm0, xmmword [rsp + 0x50]
mov qword [rsp + 0x60], rax
movabs rax, 0x404516887b84c111
pushf
not rax
add rax, 0x646fd37d
xor rax, 0x59a5d237
rol rax, 0xc9
popf
pushf
not rax
add rax, 0x512bd911
xor rax, 0x78442013
rol rax, 0xef
popf
pushf
not rax
add rax, 0x4963e6ce
xor rax, 0x55f672d2
rol rax, 0x53
popf
pushf
not rax
add rax, 0x640118ce
xor rax, 0x4a4eccc2
rol rax, 0x82
popf
mov qword [rsp + 0x68], rax
movabs rax, 0xc1de046e7a80ba6f
pushf
not rax
add rax, 0x636b8d58
xor rax, 0x46087621
rol rax, 0xc9
popf
pushf
not rax
add rax, 0x59ddda0e
xor rax, 0x73ddeee6
rol rax, 0xeb
popf
pushf
not rax
add rax, 0x58362caf
xor rax, 0x42d3b2b9
rol rax, 0x21
popf
pushf
not rax
add rax, 0x4f5b6fcb
xor rax, 0x6a9e31e2
rol rax, 0x23
popf
mov qword [rsp + 0x70], rax
movabs rax, 0xfd684f455fb0d495
pushf
not rax
add rax, 0x55bec148
xor rax, 0x67bdd9e5
rol rax, 0x57
popf
pushf
not rax
add rax, 0x68085490
xor rax, 0x7fa4d903
rol rax, 0x90
popf
pushf
not rax
add rax, 0x79d29bf2
xor rax, 0x51f5cd78
rol rax, 0x6c
popf
pushf
not rax
add rax, 0x50bf7919
xor rax, 0x639d3eaa
rol rax, 0x43
popf
mov qword [rbp], rax
movabs rax, 0x530ff5b14b984269
pushf
not rax
add rax, 0x5ab4c110
xor rax, 0x41e95963
rol rax, 0xce
popf
pushf
not rax
add rax, 0x5b66f4d2
xor rax, 0x41a3ff4e
rol rax, 0x66
popf
mov qword [rbp + 8], rax
movabs rax, 0x373827afe49849d
pushf
not rax
add rax, 0x6ebbcd7d
xor rax, 0x572dce5f
rol rax, 0x41
popf
pushf
not rax
add rax, 0x41947bd0
xor rax, 0x63edbdf0
rol rax, 0xc2
popf
pushf
not rax
add rax, 0x4ca17e1f
xor rax, 0x70e11708
rol rax, 0xc5
popf
pushf
not rax
add rax, 0x4181e457
xor rax, 0x7bccee86
rol rax, 0x6c
popf
xorps xmm0, xmmword [rbp]
mov qword [rbp + 0x10], rax
movabs rax, 0xd96e58225158ec42
pushf
not rax
add rax, 0x63ef31d1
xor rax, 0x5ea3465b
rol rax, 0x2d
popf
pushf
not rax
add rax, 0x6c384454
xor rax, 0x55121d9b
rol rax, 0xee
popf
pushf
not rax
add rax, 0x4c289db2
xor rax, 0x57f566d7
rol rax, 0x60
popf
mov qword [rsp + 0x78], rcx
mov qword [rbp + 0x18], rax
movabs rax, 0x533f90423ecd310a
pushf
not rax
add rax, 0x78ebc0cd
xor rax, 0x7688d15f
rol rax, 0x9f
popf
pushf
not rax
add rax, 0x7c8c0953
xor rax, 0x534b04b5
rol rax, 0x3a
popf
movdqa xmmword [rsp + 0x50], xmm0
movdqa xmm0, xmmword [rsp + 0x70]
mov qword [rbp + 0x28], rcx
mov rcx, 0xffffffff80000002
mov qword [rbp + 0x20], rax
xorps xmm0, xmmword [rbp + 0x20]
mov qword [rbp - 0x10], r15
mov qword [rbp - 8], rdi
xorps xmm1, xmmword [rbp - 0x10]
movdqa xmmword [rsp + 0x40], xmm1
movdqa xmm1, xmmword [rsp + 0x60]
xorps xmm1, xmmword [rbp + 0x10]
movdqa xmmword [rsp + 0x70], xmm0
movdqa xmmword [rsp + 0x60], xmm1
jmp 0x1400e7fd5
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyW]
test eax, eax
jne 0x1400e8029
push rax
pushf
mov eax, 0x4e31fb6d
pushf
not eax
add eax, 0xaaea3228
xor eax, 0xa78b6930
rol eax, 0xc5
popf
pushf
not eax
add eax, 0xc0298a8e
xor eax, 0xd67af91a
rol eax, 0xea
popf
pushf
not eax
add eax, 0xd64910d8
xor eax, 0xb8c83e58
rol eax, 0x1a
popf
jmp 0x1400e7595
push rax
pushf
mov eax, 0xfcaa6b78
pushf
not eax
add eax, 0xf12d83af
xor eax, 0xdfdeced1
rol eax, 0x8e
popf
pushf
not eax
add eax, 0xaecae727
xor eax, 0xd46bb1af
rol eax, 0x97
popf
pushf
not eax
add eax, 0xe89b2c48
xor eax, 0xf82456f1
rol eax, 0xb6
popf
jmp 0x1400e7595
cmp qword [rbx + 0x18], 7
jbe 0x1400e80a9
push rax
pushf
mov eax, 0x254ab980
pushf
not eax
add eax, 0xc3dad292
xor eax, 0xb7ad0441
rol eax, 0xd5
popf
pushf
not eax
add eax, 0x9b7cf385
xor eax, 0xf176cbe1
rol eax, 0xb2
popf
jmp 0x1400e7595
push rax
pushf
mov eax, 0x22b50711
pushf
not eax
add eax, 0xa0b46ff8
xor eax, 0xf2746de2
rol eax, 0x3d
popf
pushf
not eax
add eax, 0xd8cce00b
xor eax, 0xe6e4d2bd
rol eax, 3
popf
pushf
not eax
add eax, 0xebfe2b20
xor eax, 0xaa00bc63
rol eax, 0xc2
popf
jmp 0x1400e7595
mov rbx, qword [rbx]
push rax
pushf
mov eax, 0xa6683eb8
pushf
not eax
add eax, 0xc5b425e5
xor eax, 0x8f32dd8b
rol eax, 0x9b
popf
pushf
not eax
add eax, 0x8aff37d8
xor eax, 0xe962459c
rol eax, 0xcb
popf
pushf
not eax
add eax, 0x9d45be3f
xor eax, 0xd9e8c906
rol eax, 0x67
popf
jmp 0x1400e7595
mov rcx, qword [rbp - 0x70]
lea r8, [rbp - 0x80]
mov rdx, rbx
jmp 0x1400e8144
call qword [sym.imp.ADVAPI32.dll_RegCreateKeyW]
mov ebx, eax
test eax, eax
jne 0x1400e819a
push rax
pushf
mov eax, 0x158c7740
pushf
not eax
add eax, 0xad88f40d
xor eax, 0xb13ede87
rol eax, 0x83
popf
pushf
not eax
add eax, 0x981b90fe
xor eax, 0xf937fdca
rol eax, 0x66
popf
pushf
not eax
add eax, 0xc6e5f69d
xor eax, 0xfa851af5
rol eax, 0x21
popf
jmp 0x1400e7595
push rax
pushf
mov eax, 0x6ab6a80b
pushf
not eax
add eax, 0xdd4b9cae
xor eax, 0xe300ea5d
rol eax, 0x6a
popf
pushf
not eax
add eax, 0xe2580e23
xor eax, 0xbe54af8a
rol eax, 0x8e
popf
pushf
not eax
add eax, 0xdf4e1843
xor eax, 0xb7384c60
rol eax, 0xd4
popf
jmp 0x1400e7595
movabs rax, 0xad5dc4425b32f6c4
pushf
not rax
add rax, 0x772ce9e4
xor rax, 0x4bfc2ef5
rol rax, 0x6c
popf
pushf
not rax
add rax, 0x431ee7ab
xor rax, 0x63a8192e
rol rax, 0x7f
popf
pushf
not rax
add rax, 0x63f2f33c
xor rax, 0x4e175f05
rol rax, 0xae
popf
mov qword [rbp - 0x28], rdi
mov qword [rbp - 0x40], rax
lea rcx, [rbp + 0x30]
movabs rax, 0xceeb9027b6e7872b
pushf
not rax
add rax, 0x5e001501
xor rax, 0x66e53e5c
rol rax, 0x4e
popf
pushf
not rax
add rax, 0x75e855fc
xor rax, 0x68713601
rol rax, 0xa5
popf
pushf
not rax
add rax, 0x57c4c29e
xor rax, 0x648690a2
rol rax, 0xf9
popf
mov qword [rbp - 0x60], r14
mov qword [rbp - 0x38], rax
movabs rax, 0xbc5ab22aa56a2dea
pushf
not rax
add rax, 0x78e21495
xor rax, 0x7e33c61b
rol rax, 0xe1
popf
pushf
not rax
add rax, 0x44092600
xor rax, 0x4385aea3
rol rax, 0xa7
popf
pushf
not rax
add rax, 0x75c9cea3
xor rax, 0x429e02ce
rol rax, 0x46
popf
pushf
not rax
add rax, 0x656bfa1e
xor rax, 0x658350a3
rol rax, 0xcc
popf
movdqa xmm0, xmmword [rbp - 0x40]
mov qword [rbp - 0x30], rax
mov rax, 0xffffffffffffffff
movdqa xmm1, xmmword [rbp - 0x30]
mov qword [rbp - 0x58], rsi
xorps xmm0, xmmword [rbp - 0x60]
mov qword [rbp - 0x50], r15
mov qword [rbp - 0x48], rdi
xorps xmm1, xmmword [rbp - 0x50]
movdqa xmmword [rbp - 0x30], xmm1
movdqa xmmword [rbp - 0x40], xmm0
nop dword [rax + rax]
cmp word [rcx + rax*2 + 2], 0
lea rax, [rax + 1]
jne 0x1400e836f
push rax
pushf
mov eax, 0x6a03e29e
pushf
not eax
add eax, 0xa5c2e124
xor eax, 0xeecd2aea
rol eax, 0x5c
popf
pushf
not eax
add eax, 0xcaec4908
xor eax, 0xc5950bc1
rol eax, 0xc8
popf
jmp 0x1400e7595
push rax
pushf
mov eax, 0xf1defeeb
pushf
not eax
add eax, 0xe706e8b8
xor eax, 0x8e4ecc71
rol eax, 0xc3
popf
pushf
not eax
add eax, 0xe1a0382c
xor eax, 0x90302f72
rol eax, 0x64
popf
pushf
not eax
add eax, 0xecc2810b
xor eax, 0x865015e1
rol eax, 0x55
popf
jmp 0x1400e7595
mov rcx, qword [rbp - 0x80]
lea eax, [rax*2 + 2]
mov dword [rsp + 0x28], eax
lea rdx, [rbp - 0x40]
lea rax, [rbp + 0x30]
mov r9d, 0x7391c859
pushf
not r9d
add r9d, 0x8433372d
xor r9d, 0xbd0243ac
rol r9d, 0x13
popf
pushf
not r9d
add r9d, 0xfd7a64f3
xor r9d, 0x917cf759
rol r9d, 0x99
popf
xor r8d, r8d
mov qword [rsp + 0x20], rax
jmp 0x1400e840d
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
mov rcx, qword [rbp - 0x80]
mov ebx, eax
test eax, eax
jne 0x1400e8476
push rax
pushf
mov eax, 0x6a204add
pushf
not eax
add eax, 0xc841e231
xor eax, 0x98a3f4c8
rol eax, 0xe6
popf
pushf
not eax
add eax, 0x9c501976
xor eax, 0xe8d61c65
rol eax, 0x82
popf
pushf
not eax
add eax, 0xeac7dbdd
xor eax, 0xd41189e8
rol eax, 0xc5
popf
pushf
not eax
add eax, 0xafe14404
xor eax, 0x858c45fa
rol eax, 0x35
popf
jmp 0x1400e7595
push rax
pushf
mov eax, 0xffcf18bb
pushf
not eax
add eax, 0xa1c24508
xor eax, 0xfddb2158
rol eax, 0x48
popf
pushf
not eax
add eax, 0xe9e0dd41
xor eax, 0xac341fb6
rol eax, 0x69
popf
pushf
not eax
add eax, 0xbce1e41f
xor eax, 0xf595d7c5
rol eax, 0xb2
popf
pushf
not eax
add eax, 0x94eb01a1
xor eax, 0xf2d2c705
rol eax, 0x75
popf
jmp 0x1400e7595
mov qword [rbp - 0x58], rsi
lea r9d, [rbx + 4]
movabs rax, 0x672ab9397fcef289
pushf
not rax
add rax, 0x5c9e148f
xor rax, 0x4e647d6a
rol rax, 0xe9
popf
pushf
not rax
add rax, 0x661fa143
xor rax, 0x62f29ece
rol rax, 0xb4
popf
pushf
not rax
add rax, 0x62d13bc1
xor rax, 0x6f970b13
rol rax, 0x5e
popf
mov qword [rbp - 0x40], r14
mov qword [rbp - 0x60], rax
lea rdx, [rbp - 0x60]
movdqa xmm0, xmmword [rbp - 0x60]
lea rax, [rbp - 0x78]
mov qword [rbp - 0x38], rsi
xor r8d, r8d
xorps xmm0, xmmword [rbp - 0x40]
mov dword [rsp + 0x28], 4
movdqa xmmword [rbp - 0x60], xmm0
mov qword [rsp + 0x20], rax
jmp 0x1400e8559
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
mov ebx, eax
test eax, eax
je 0x1400e85ab
push rax
pushf
mov eax, 0xf025178b
pushf
not eax
add eax, 0x832d19db
xor eax, 0xc6f1d196
rol eax, 0xfe
popf
pushf
not eax
add eax, 0x918fecd4
xor eax, 0xa56c9857
rol eax, 0x2f
popf
pushf
not eax
add eax, 0x82d641e8
xor eax, 0x8e10f529
rol eax, 0xa9
popf
jmp 0x1400e7595
push rax
pushf
mov eax, 0xed9d35b4
pushf
not eax
add eax, 0xe965f496
xor eax, 0xb3bd90b1
rol eax, 0x65
popf
pushf
not eax
add eax, 0xa73881ba
xor eax, 0xca68322b
rol eax, 0x54
popf
pushf
not eax
add eax, 0xb6e0213d
xor eax, 0x93a951d4
rol eax, 0x77
popf
pushf
not eax
add eax, 0xa3c51959
xor eax, 0x8335d788
rol eax, 0xcd
popf
jmp 0x1400e7595
mov rcx, qword [rbp - 0x80]
push rax
pushf
mov eax, 0x113c2f8f
pushf
not eax
add eax, 0x9de64c6e
xor eax, 0x9db39322
rol eax, 0xde
popf
pushf
not eax
add eax, 0x96ac7097
xor eax, 0x92d60c97
rol eax, 0xec
popf
jmp 0x1400e7595
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
push rax
pushf
mov eax, 0xc12ff031
pushf
not eax
add eax, 0xde8fe573
xor eax, 0xdcc20d85
rol eax, 0xd
popf
pushf
not eax
add eax, 0xc5f941ae
xor eax, 0xf1079744
rol eax, 0x3c
popf
pushf
not eax
add eax, 0xad9c507e
xor eax, 0x98203c3b
rol eax, 0x76
popf
pushf
not eax
add eax, 0xf7e44f86
xor eax, 0xcf5ac00d
rol eax, 0xac
popf
jmp 0x1400e7595
mov rcx, qword [rbp - 0x70]
jmp 0x1400e86a0
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov eax, ebx
jmp 0x1400e873b
xor eax, eax
push rax
pushf
mov eax, 0x4f0c29d2
pushf
not eax
add eax, 0xb5101eb7
xor eax, 0xcfa176f1
rol eax, 0xeb
popf
pushf
not eax
add eax, 0x854809f2
xor eax, 0x93f95e64
rol eax, 0xc0
popf
pushf
not eax
add eax, 0xc2331b81
xor eax, 0xdf7918c0
rol eax, 0xaf
popf
jmp 0x1400e7595
mov rcx, qword [rbp + 0x240]
xor rcx, rsp
call fcn.140108cb2
mov rbx, qword [rsp + 0x380]
add rsp, 0x350
pop r15
pop r14
pop rdi
pop rsi
pop rbp
ret