Function at 0x140208f10
Capabilities:
Contain obfuscated stackstrings
Encode data using xor
Execute anti-debugging instructions
Parse credit card information
Set registry value

Disassembly:
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x2ee8]
mov eax, 0x2ff8
call fcn.1403cb200
sub rsp, rax
xor edi, edi
mov dword [rbp + 0x7e2], 0x580053
mov ecx, edi
mov dword [rbp + 0x7e6], 0x570051
mov dword [rbp + 0x7ea], 0x480041
mov dword [rbp + 0x7ee], 0x44005a
mov dword [rbp + 0x7f2], 0x7b007d
mov dword [rbp + 0x7f6], 0x6e0078
mov dword [rbp + 0x7fa], 0x790062
mov dword [rbp + 0x7fe], 0x60004d
mov dword [rbp + 0x802], 0x65007e
mov dword [rbp + 0x806], 0x7c0060
mov dword [rbp + 0x80a], 0x460078
mov dword [rbp + 0x80e], 0x630073
mov dword [rbp + 0x812], 0x4a0044
mov dword [rbp + 0x816], 0x69007f
mov dword [rbp + 0x81a], 0x74006a
mov dword [rbp + 0x81e], 0x7a007d
mov dword [rbp + 0x822], 0x7d0053
mov dword [rbp + 0x826], 0x400076
mov dword [rbp + 0x82a], 0x4c0054
mov dword [rbp + 0x82e], 0x110056
mov dword [rbp + 0x832], 0x790074
mov dword [rbp + 0x836], 0x59004b
mov dword [rbp + 0x83a], 0x40004d
mov dword [rbp + 0x83e], 0x5b004b
mov dword [rbp + 0x842], 0x430055
mov dword [rbp + 0x846], 0x41
nop word [rax + rax]
movsxd rax, ecx
xor word [rbp + rax*2 + 0x7e2], cx
inc ecx
cmp ecx, 0x33
jb 0x140209040
lea rdx, [rbp + 0x7e2]
mov word [rbp + 0x848], di
lea rcx, [rbp + 0x14e0]
call fcn.14013ec98
mov qword [rsp + 0x30], rdi
lea r8, [rbp + 0x14e0]
mov qword [rsp + 0x28], rdi
lea rcx, [rbp - 0x80]
mov r9d, 0x2011f
mov dword [rsp + 0x20], edi
mov rdx, 0xffffffff80000002
mov qword [rbp - 0x80], rdi
call fcn.140183fe0
lea rcx, [rbp + 0x14e0]
call fcn.14013ed68
xor eax, eax
mov dword [rbp + 0x54], 0x690044
mov word [rbp + 0x68], ax
mov ecx, edi
mov dword [rbp + 0x58], 0x730061
mov dword [rbp + 0x5c], 0x330072
mov dword [rbp + 0x60], 0x520042
mov dword [rbp + 0x64], 0x4d0041
nop dword [rax]
nop word [rax + rax]
movsxd rax, ecx
xor word [rbp + rax*2 + 0x54], cx
inc ecx
cmp ecx, 0xa
jb 0x1402090e0
lea rdx, [rbp + 0x54]
mov word [rbp + 0x68], di
lea rcx, [rbp + 0x1500]
call fcn.14013ec98
lea r8, [rbp + 0x1500]
lea rdx, [rbp - 0x58]
lea rcx, [rbp - 0x80]
call fcn.1402004c0
lea rcx, [rbp + 0x1500]
call fcn.14013ed68
mov rax, qword [rbp - 0x50]
cmp rax, qword [rbp - 0x58]
je 0x140209210
lea rcx, [rbp + 0x10b8]
call fcn.140194600
mov rax, qword [rbp - 0x50]
mov rbx, rdi
cmp rax, qword [rbp - 0x58]
je 0x140209182
nop word [rax + rax]
rdtsc
shl rdx, 0x20
lea rcx, [rbp + 0x10b8]
or rax, rdx
lea rdx, [rbp + 0x2f30]
mov byte [rbp + 0x2f30], al
call fcn.14020f220
mov rax, qword [rbp - 0x50]
inc rbx
sub rax, qword [rbp - 0x58]
cmp rbx, rax
jb 0x140209150
xor eax, eax
mov dword [rbp + 0x3e], 0x690044
mov word [rbp + 0x52], ax
mov ecx, edi
mov dword [rbp + 0x42], 0x730061
mov dword [rbp + 0x46], 0x330072
mov dword [rbp + 0x4a], 0x520042
mov dword [rbp + 0x4e], 0x4d0041
nop dword [rax]
movsxd rax, ecx
xor word [rbp + rax*2 + 0x3e], cx
inc ecx
cmp ecx, 0xa
jb 0x1402091b0
lea rdx, [rbp + 0x3e]
mov word [rbp + 0x52], di
lea rcx, [rbp + 0x1520]
call fcn.14013ec98
lea r8, [rbp + 0x10b8]
lea rdx, [rbp + 0x1520]
lea rcx, [rbp - 0x80]
call fcn.140205010
lea rcx, [rbp + 0x1520]
call fcn.14013ed68
mov rax, qword [rbp + 0x10b8]
lea rcx, [rbp + 0x10b8]
mov qword [rbp + 0x10c0], rax
call fcn.140194614
lea rcx, [rbp - 0x80]
call fcn.140183f94
mov ecx, edi
mov dword [rbp + 0x54e], 0x4e0053
mov dword [rbp + 0x552], 0x570044
mov dword [rbp + 0x556], 0x440053
mov dword [rbp + 0x55a], 0x420054
mov dword [rbp + 0x55e], 0x440054
mov dword [rbp + 0x562], 0x680063
mov dword [rbp + 0x566], 0x62007e
mov dword [rbp + 0x56a], 0x60007d
mov dword [rbp + 0x56e], 0x650076
mov dword [rbp + 0x572], 0x50004e
mov dword [rbp + 0x576], 0x6c0066
mov dword [rbp + 0x57a], 0x630066
mov dword [rbp + 0x57e], 0x7e0077
mov dword [rbp + 0x582], 0x7a0068
mov dword [rbp + 0x586], 0x75006c
mov dword [rbp + 0x58a], 0x67
nop dword [rax + rax]
movsxd rax, ecx
xor word [rbp + rax*2 + 0x54e], cx
inc ecx
cmp ecx, 0x1f
jb 0x1402092c0
lea rdx, [rbp + 0x54e]
mov word [rbp + 0x58c], di
lea rcx, [rbp + 0x1540]
call fcn.14013ec98
lea rcx, [rbp + 0x1540]
mov qword [rbp + 0xfc0], rdi
call fcn.14013eeb4
lea rcx, [rbp + 0xfc0]
mov r9d, 0xf003f
mov qword [rsp + 0x20], rcx
xor r8d, r8d
mov rcx, 0xffffffff80000002
mov rdx, rax
call qword [sym.imp.advapi32.dll_RegOpenKeyExW]
test eax, eax
jne 0x14020933c
lea rcx, [rbp - 0x80]
call fcn.140183f94
mov rax, qword [rbp + 0xfc0]
mov qword [rbp - 0x80], rax
lea rcx, [rbp + 0x1540]
call fcn.14013ed68
mov ecx, edi
mov dword [rbp + 0xd8], 0x60004d
mov dword [rbp + 0xdc], 0x6b0061
mov dword [rbp + 0xe0], 0x6b006d
mov dword [rbp + 0xe4], 0x400063
mov dword [rbp + 0xe8], 0x60007d
mov dword [rbp + 0xec], 0x6e
nop word [rax + rax]
movsxd rax, ecx
xor word [rbp + rax*2 + 0xd8], cx
inc ecx
cmp ecx, 0xb
jb 0x140209390
lea rdx, [rbp + 0xd8]
mov word [rbp + 0xee], di
lea rcx, [rbp + 0x1560]
call fcn.14013ec98
lea r8, [rbp + 0x1560]
lea rdx, [rbp + 0x198]
lea rcx, [rbp - 0x80]
call fcn.140184080
lea rcx, [rbp + 0x1560]
call fcn.14013ed68
cmp qword [rbp + 0x1a8], rdi
jbe 0x140209745
lea rcx, [rbp + 0x10e8]
call fcn.140194600
mov ebx, 0xf
nop dword [rax]
rdtsc
shl rdx, 0x20
lea rcx, [rbp + 0x10e8]
or rax, rdx
lea rdx, [rbp + 0x2f38]
mov byte [rbp + 0x2f38], al
call fcn.14020f220
sub rbx, 1
jne 0x140209400
mov rax, qword [rbp + 0x10e8]
mov word [rbp + 0x1ce0], di
movzx ecx, byte [rax + 3]
movzx edx, byte [rax + 0xf]
movzx r9d, byte [rax + 0xe]
movzx r10d, byte [rax + 0xd]
movzx r11d, byte [rax + 0xc]
movzx ebx, byte [rax + 0xb]
movzx edi, byte [rax + 0xa]
movzx esi, byte [rax + 9]
movzx r14d, byte [rax + 8]
movzx r15d, byte [rax + 7]
movzx r12d, byte [rax + 6]
movzx r13d, byte [rax + 5]
movzx r8d, byte [rax + 4]
mov dword [rbp - 0x74], ecx
movzx ecx, byte [rax + 2]
mov dword [rbp - 0x70], ecx
movzx ecx, byte [rax + 1]
movzx eax, byte [rax]
mov dword [rbp - 0x78], ecx
xor ecx, ecx
mov dword [rbp - 0x6c], eax
xor eax, eax
mov word [rbp + 0xbcc], ax
mov dword [rbp + 0xb44], 0x310025
mov dword [rbp + 0xb48], 0x7b0030
mov dword [rbp + 0xb4c], 0x350021
mov dword [rbp + 0xb50], 0x7f0034
mov dword [rbp + 0xb54], 0x39002d
mov dword [rbp + 0xb58], 0x730038
mov dword [rbp + 0xb5c], 0x3d0029
mov dword [rbp + 0xb60], 0x77003c
mov dword [rbp + 0xb64], 0x34003d
mov dword [rbp + 0xb68], 0x210022
mov dword [rbp + 0xb6c], 0x30006c
mov dword [rbp + 0xb70], 0x250026
mov dword [rbp + 0xb74], 0x340060
mov dword [rbp + 0xb78], 0x2b003f
mov dword [rbp + 0xb7c], 0x65002e
mov dword [rbp + 0xb80], 0x2f003b
mov dword [rbp + 0xb84], 0x590012
mov dword [rbp + 0xb88], 0x6000f
mov dword [rbp + 0xb8c], 0x170014
mov dword [rbp + 0xb90], 0x2005e
mov dword [rbp + 0xb94], 0x1b0018
mov dword [rbp + 0xb98], 0x60052
mov dword [rbp + 0xb9c], 0x1d0009
mov dword [rbp + 0xba0], 0x57001c
mov dword [rbp + 0xba4], 0x10015
mov dword [rbp + 0xba8], 0x4b0000
mov dword [rbp + 0xbac], 0x50011
mov dword [rbp + 0xbb0], 0x4f0004
mov dword [rbp + 0xbb4], 0x9001d
mov dword [rbp + 0xbb8], 0x430008
mov dword [rbp + 0xbbc], 0xd0019
mov dword [rbp + 0xbc0], 0x47000c
mov dword [rbp + 0xbc4], 0x710065
mov dword [rbp + 0xbc8], 0x3b0070
nop dword [rax + rax]
movsxd rax, ecx
xor word [rbp + rax*2 + 0xb44], cx
inc ecx
cmp ecx, 0x44
jb 0x1402095f0
mov dword [rsp + 0x88], edx
lea rcx, [rbp + 0x1ce0]
mov dword [rsp + 0x80], r9d
lea rdx, [rbp + 0xb44]
mov r9d, dword [rbp - 0x78]
xor eax, eax
mov dword [rsp + 0x78], r10d
mov dword [rsp + 0x70], r11d
mov dword [rsp + 0x68], ebx
mov dword [rsp + 0x60], edi
mov dword [rsp + 0x58], esi
mov dword [rsp + 0x50], r14d
mov dword [rsp + 0x48], r15d
mov dword [rsp + 0x40], r12d
mov dword [rsp + 0x38], r13d
mov dword [rsp + 0x30], r8d
mov r8d, dword [rbp - 0x6c]
mov word [rbp + 0xbcc], ax
mov eax, dword [rbp - 0x74]
mov dword [rsp + 0x28], eax
mov eax, dword [rbp - 0x70]
mov dword [rsp + 0x20], eax
call fcn.140200420
lea rdx, [rbp + 0x1ce0]
lea rcx, [rbp + 0x15a0]
call fcn.14013ec98
xor edi, edi
mov dword [rbp + 0x108], 0x60004d
mov ecx, edi
mov dword [rbp + 0x10c], 0x6b0061
mov dword [rbp + 0x110], 0x6b006d
mov dword [rbp + 0x114], 0x400063
mov dword [rbp + 0x118], 0x60007d
mov dword [rbp + 0x11c], 0x6e
nop word [rax + rax]
movsxd rax, ecx
xor word [rbp + rax*2 + 0x108], cx
inc ecx
cmp ecx, 0xb
jb 0x1402096d0
lea rdx, [rbp + 0x108]
mov word [rbp + 0x11e], di
lea rcx, [rbp + 0x1580]
call fcn.14013ec98
lea r8, [rbp + 0x15a0]
lea rdx, [rbp + 0x1580]
lea rcx, [rbp - 0x80]
call fcn.140204f50
lea rcx, [rbp + 0x1580]
call fcn.14013ed68
lea rcx, [rbp + 0x15a0]
call fcn.14013ed68
mov rax, qword [rbp + 0x10e8]
lea rcx, [rbp + 0x10e8]
mov qword [rbp + 0x10f0], rax
call fcn.140194614
lea rcx, [rbp - 0x80]
call fcn.140183f94
xor eax, eax
mov dword [rbp + 0x9a2], 0x580053
mov word [rbp + 0xa26], ax
mov ecx, edi
mov dword [rbp + 0x9a6], 0x570051
mov dword [rbp + 0x9aa], 0x480041
mov dword [rbp + 0x9ae], 0x44005a
mov dword [rbp + 0x9b2], 0x7b007d
mov dword [rbp + 0x9b6], 0x6e0078
mov dword [rbp + 0x9ba], 0x790062
mov dword [rbp + 0x9be], 0x60004d
mov dword [rbp + 0x9c2], 0x65007e
mov dword [rbp + 0x9c6], 0x7c0060
mov dword [rbp + 0x9ca], 0x460078
mov dword [rbp + 0x9ce], 0x630073
mov dword [rbp + 0x9d2], 0x5a0044
mov dword [rbp + 0x9d6], 0x750075
mov dword [rbp + 0x9da], 0x6f0068
mov dword [rbp + 0x9de], 0x730071
mov dword [rbp + 0x9e2], 0x68007c
mov dword [rbp + 0x9e6], 0x600066
mov dword [rbp + 0x9ea], 0x4b004b
mov dword [rbp + 0x9ee], 0x4e0040
mov dword [rbp + 0x9f2], 0x6d004f
mov dword [rbp + 0x9f6], 0x770068
mov dword [rbp + 0x9fa], 0x4c0064
mov dword [rbp + 0x9fe], 0x4b005c
mov dword [rbp + 0xa02], 0x500047
mov dword [rbp + 0xa06], 0x560040
mov dword [rbp + 0xa0a], 0x650014
mov dword [rbp + 0xa0e], 0x580044
mov dword [rbp + 0xa12], 0x50005e
mov dword [rbp + 0xa16], 0x5e0056
mov dword [rbp + 0xa1a], 0x61004f
mov dword [rbp + 0xa1e], 0xf000e
mov dword [rbp + 0xa22], 0x700070
nop dword [rax]
nop word [rax + rax]
movsxd rax, ecx
xor word [rbp + rax*2 + 0x9a2], cx
inc ecx
cmp ecx, 0x42
jb 0x1402098b0
lea rdx, [rbp + 0x9a2]
mov word [rbp + 0xa26], di
lea rcx, [rbp + 0x15c0]
call fcn.14013ec98
lea rcx, [rbp + 0x15c0]
mov qword [rbp + 0x1018], rdi
call fcn.14013eeb4
lea rcx, [rbp + 0x1018]
mov r9d, 0xf003f
mov qword [rsp + 0x20], rcx
xor r8d, r8d
mov rcx, 0xffffffff80000002
mov rdx, rax
call qword [sym.imp.advapi32.dll_RegOpenKeyExW]
test eax, eax
jne 0x14020992c
lea rcx, [rbp - 0x80]
call fcn.140183f94
mov rax, qword [rbp + 0x1018]
mov qword [rbp - 0x80], rax
lea rcx, [rbp + 0x15c0]
call fcn.14013ed68
mov ecx, edi
mov dword [rbp + 0x1b8], 0x760048
mov dword [rbp + 0x1bc], 0x710052
mov dword [rbp + 0x1c0], 0x63006b
mov dword [rbp + 0x1c4], 0x6b006f
mov dword [rbp + 0x1c8], 0x4e006d
mov dword [rbp + 0x1cc], 0x62007f
mov dword [rbp + 0x1d0], 0x68
movsxd rax, ecx
xor word [rbp + rax*2 + 0x1b8], cx
inc ecx
cmp ecx, 0xd
jb 0x140209980
lea rdx, [rbp + 0x1b8]
mov word [rbp + 0x1d2], di
lea rcx, [rbp + 0x15e0]
call fcn.14013ec98
lea r8, [rbp + 0x15e0]
lea rdx, [rbp + 0x19c0]
lea rcx, [rbp - 0x80]
call fcn.140184080
mov rdx, rax
lea rcx, [rbp + 0x198]
call fcn.1401947d8
lea rcx, [rbp + 0x19c0]
call fcn.14013ed68
lea rcx, [rbp + 0x15e0]
call fcn.14013ed68
cmp qword [rbp + 0x1a8], 0
jbe 0x140209d65
lea rcx, [rbp + 0x10d0]
call fcn.140194600
mov ebx, 0xf
nop dword [rax]
rdtsc
shl rdx, 0x20
lea rcx, [rbp + 0x10d0]
or rax, rdx
lea rdx, [rbp + 0x2f40]
mov byte [rbp + 0x2f40], al
call fcn.14020f220
sub rbx, 1
jne 0x140209a10
mov rax, qword [rbp + 0x10d0]
mov word [rbp + 0x1ee0], di
movzx ecx, byte [rax + 3]
movzx edx, byte [rax + 0xf]
movzx r10d, byte [rax + 0xe]
movzx r11d, byte [rax + 0xd]
movzx ebx, byte [rax + 0xc]
movzx edi, byte [rax + 0xb]
movzx esi, byte [rax + 0xa]
movzx r14d, byte [rax + 9]
movzx r15d, byte [rax + 8]
movzx r12d, byte [rax + 7]
movzx r13d, byte [rax + 6]
movzx r8d, byte [rax + 5]
movzx r9d, byte [rax + 4]
mov dword [rbp - 0x6c], ecx
movzx ecx, byte [rax + 2]
mov dword [rbp - 0x78], ecx
movzx ecx, byte [rax + 1]
movzx eax, byte [rax]
mov dword [rbp - 0x74], eax
xor eax, eax
mov dword [rbp - 0x70], ecx
mov ecx, eax
mov word [rbp + 0xe82], ax
mov dword [rbp + 0xdf6], 0x24007b
mov dword [rbp + 0xdfa], 0x310032
mov dword [rbp + 0xdfe], 0x20007c
mov dword [rbp + 0xe02], 0x350036
mov dword [rbp + 0xe06], 0x2c0070
mov dword [rbp + 0xe0a], 0x39003a
mov dword [rbp + 0xe0e], 0x280074
mov dword [rbp + 0xe12], 0x3d003e
mov dword [rbp + 0xe16], 0x3c0068
mov dword [rbp + 0xe1a], 0x230037
mov dword [rbp + 0xe1e], 0x6d0026
mov dword [rbp + 0xe22], 0x270033
mov dword [rbp + 0xe26], 0x61002a
mov dword [rbp + 0xe2a], 0x3e0037
mov dword [rbp + 0xe2e], 0x2f002c
mov dword [rbp + 0xe32], 0x3a0066
mov dword [rbp + 0xe36], 0x130010
mov dword [rbp + 0xe3a], 0xe005a
mov dword [rbp + 0xe3e], 0x150001
mov dword [rbp + 0xe42], 0x5f0014
mov dword [rbp + 0xe46], 0x19000d
mov dword [rbp + 0xe4a], 0x530018
mov dword [rbp + 0xe4e], 0x80001
mov dword [rbp + 0xe52], 0x1d001e
mov dword [rbp + 0xe56], 0x140048
mov dword [rbp + 0xe5a], 0x10002
mov dword [rbp + 0xe5e], 0x10004c
mov dword [rbp + 0xe62], 0x50006
mov dword [rbp + 0xe66], 0x1c0040
mov dword [rbp + 0xe6a], 0x9000a
mov dword [rbp + 0xe6e], 0x180044
mov dword [rbp + 0xe72], 0xd000e
mov dword [rbp + 0xe76], 0x640038
mov dword [rbp + 0xe7a], 0x710072
mov dword [rbp + 0xe7e], 0x38003c
nop dword [rax]
nop word [rax + rax]
movsxd rax, ecx
xor word [rbp + rax*2 + 0xdf6], cx
inc ecx
cmp ecx, 0x46
jb 0x140209c10
mov dword [rsp + 0x88], edx
lea rcx, [rbp + 0x1ee0]
mov dword [rsp + 0x80], r10d
lea rdx, [rbp + 0xdf6]
mov dword [rsp + 0x78], r11d
xor eax, eax
mov dword [rsp + 0x70], ebx
mov dword [rsp + 0x68], edi
mov dword [rsp + 0x60], esi
mov dword [rsp + 0x58], r14d
mov dword [rsp + 0x50], r15d
mov dword [rsp + 0x48], r12d
mov dword [rsp + 0x40], r13d
mov dword [rsp + 0x38], r8d
mov r8d, dword [rbp - 0x74]
mov dword [rsp + 0x30], r9d
mov r9d, dword [rbp - 0x70]
mov word [rbp + 0xe82], ax
mov eax, dword [rbp - 0x6c]
mov dword [rsp + 0x28], eax
mov eax, dword [rbp - 0x78]
mov dword [rsp + 0x20], eax
call fcn.140200420
lea rdx, [rbp + 0x1ee0]
lea rcx, [rbp + 0x1620]
call fcn.14013ec98
xor edi, edi
mov dword [rbp + 0x1d4], 0x760048
mov ecx, edi
mov dword [rbp + 0x1d8], 0x710052
mov dword [rbp + 0x1dc], 0x63006b
mov dword [rbp + 0x1e0], 0x6b006f
mov dword [rbp + 0x1e4], 0x4e006d
mov dword [rbp + 0x1e8], 0x62007f
mov dword [rbp + 0x1ec], 0x68
nop
movsxd rax, ecx
xor word [rbp + rax*2 + 0x1d4], cx
inc ecx
cmp ecx, 0xd
jb 0x140209cf0
lea rdx, [rbp + 0x1d4]
mov word [rbp + 0x1ee], di
lea rcx, [rbp + 0x1600]
call fcn.14013ec98
lea r8, [rbp + 0x1620]
lea rdx, [rbp + 0x1600]
lea rcx, [rbp - 0x80]
call fcn.140204f50
lea rcx, [rbp + 0x1600]
call fcn.14013ed68
lea rcx, [rbp + 0x1620]
call fcn.14013ed68
mov rax, qword [rbp + 0x10d0]
lea rcx, [rbp + 0x10d0]
mov qword [rbp + 0x10d8], rax
call fcn.140194614
lea rcx, [rbp - 0x80]
call fcn.140183f94
mov ecx, edi
mov dword [rbp + 0x8bc], 0x4e0053
mov dword [rbp + 0x8c0], 0x570044
mov dword [rbp + 0x8c4], 0x440053
mov dword [rbp + 0x8c8], 0x420054
mov dword [rbp + 0x8cc], 0x440054
mov dword [rbp + 0x8d0], 0x680063
mov dword [rbp + 0x8d4], 0x62007e
mov dword [rbp + 0x8d8], 0x60007d
mov dword [rbp + 0x8dc], 0x650076
mov dword [rbp + 0x8e0], 0x44004e
mov dword [rbp + 0x8e4], 0x7b007d
mov dword [rbp + 0x8e8], 0x780072
mov dword [rbp + 0x8ec], 0x6a006f
mov dword [rbp + 0x8f0], 0x580046
mov dword [rbp + 0x8f4], 0x6f0069
mov dword [rbp + 0x8f8], 0x7a006c
mov dword [rbp + 0x8fc], 0x55004e
mov dword [rbp + 0x900], 0x460074
mov dword [rbp + 0x904], 0x560056
mov dword [rbp + 0x908], 0x48004f
mov dword [rbp + 0x90c], 0x750046
mov dword [rbp + 0x910], 0x42007d
mov dword [rbp + 0x914], 0x490042
mov dword [rbp + 0x918], 0x580041
mov dword [rbp + 0x91c], 0x640043
mov dword [rbp + 0x920], 0x570042
mov dword [rbp + 0x924], 0x410055
mov dword [rbp + 0x928], 0x53
nop dword [rax + rax]
movsxd rax, ecx
xor word [rbp + rax*2 + 0x8bc], cx
inc ecx
cmp ecx, 0x37
jb 0x140209e90
lea rdx, [rbp + 0x8bc]
mov word [rbp + 0x92a], di
lea rcx, [rbp + 0x1640]
call fcn.14013ec98
lea rcx, [rbp + 0x1640]
mov qword [rbp + 0x1010], rdi
call fcn.14013eeb4
lea rcx, [rbp + 0x1010]
mov r9d, 0xf003f
mov qword [rsp + 0x20], rcx
xor r8d, r8d
mov rcx, 0xffffffff80000002
mov rdx, rax
call qword [sym.imp.advapi32.dll_RegOpenKeyExW]
test eax, eax
jne 0x140209f0c
lea rcx, [rbp - 0x80]
call fcn.140183f94
mov rax, qword [rbp + 0x1010]
mov qword [rbp - 0x80], rax
lea rcx, [rbp + 0x1640]
call fcn.14013ed68
mov ecx, edi
mov dword [rbp + 0x120], 0x740053
mov dword [rbp + 0x124], 0x400071
mov dword [rbp + 0x128], 0x6c0068
mov dword [rbp + 0x12c], 0x690063
mov dword [rbp + 0x130], 0x40007c
mov dword [rbp + 0x134], 0x6e
nop word [rax + rax]
movsxd rax, ecx
xor word [rbp + rax*2 + 0x120], cx
inc ecx
cmp ecx, 0xb
jb 0x140209f60
lea rdx, [rbp + 0x120]
mov word [rbp + 0x136], di
lea rcx, [rbp + 0x1660]
call fcn.14013ec98
lea r8, [rbp + 0x1660]
lea rdx, [rbp + 0x19e0]
lea rcx, [rbp - 0x80]
call fcn.140184080
mov rdx, rax
lea rcx, [rbp + 0x198]
call fcn.1401947d8
lea rcx, [rbp + 0x19e0]
call fcn.14013ed68
lea rcx, [rbp + 0x1660]
call fcn.14013ed68
cmp qword [rbp + 0x1a8], 0
jbe 0x14020a335
lea rcx, [rbp + 0x1090]
call fcn.140194600
mov ebx, 0xf
nop dword [rax]
rdtsc
shl rdx, 0x20
lea rcx, [rbp + 0x1090]
or rax, rdx
lea rdx, [rbp + 0x2f48]
mov byte [rbp + 0x2f48], al
call fcn.14020f220
sub rbx, 1
jne 0x140209ff0
mov rax, qword [rbp + 0x1090]
mov word [rbp + 0x20e0], di
movzx ecx, byte [rax + 3]
movzx edx, byte [rax + 0xf]
movzx r10d, byte [rax + 0xe]
movzx r11d, byte [rax + 0xd]
movzx ebx, byte [rax + 0xc]
movzx edi, byte [rax + 0xb]
movzx esi, byte [rax + 0xa]
movzx r14d, byte [rax + 9]
movzx r15d, byte [rax + 8]
movzx r12d, byte [rax + 7]
movzx r13d, byte [rax + 6]
movzx r8d, byte [rax + 5]
movzx r9d, byte [rax + 4]
mov dword [rbp - 0x6c], ecx
movzx ecx, byte [rax + 2]
mov dword [rbp - 0x78], ecx
movzx ecx, byte [rax + 1]
movzx eax, byte [rax]
mov dword [rbp - 0x70], ecx
xor ecx, ecx
mov dword [rbp - 0x74], eax
xor eax, eax
mov word [rbp + 0xc56], ax
mov dword [rbp + 0xbce], 0x310025
mov dword [rbp + 0xbd2], 0x7b0030
mov dword [rbp + 0xbd6], 0x350021
mov dword [rbp + 0xbda], 0x7f0034
mov dword [rbp + 0xbde], 0x39002d
mov dword [rbp + 0xbe2], 0x730038
mov dword [rbp + 0xbe6], 0x3d0029
mov dword [rbp + 0xbea], 0x77003c
mov dword [rbp + 0xbee], 0x34003d
mov dword [rbp + 0xbf2], 0x210022
mov dword [rbp + 0xbf6], 0x30006c
mov dword [rbp + 0xbfa], 0x250026
mov dword [rbp + 0xbfe], 0x340060
mov dword [rbp + 0xc02], 0x2b003f
mov dword [rbp + 0xc06], 0x65002e
mov dword [rbp + 0xc0a], 0x2f003b
mov dword [rbp + 0xc0e], 0x590012
mov dword [rbp + 0xc12], 0x6000f
mov dword [rbp + 0xc16], 0x170014
mov dword [rbp + 0xc1a], 0x2005e
mov dword [rbp + 0xc1e], 0x1b0018
mov dword [rbp + 0xc22], 0x60052
mov dword [rbp + 0xc26], 0x1d0009
mov dword [rbp + 0xc2a], 0x57001c
mov dword [rbp + 0xc2e], 0x10015
mov dword [rbp + 0xc32], 0x4b0000
mov dword [rbp + 0xc36], 0x50011
mov dword [rbp + 0xc3a], 0x4f0004
mov dword [rbp + 0xc3e], 0x9001d
mov dword [rbp + 0xc42], 0x430008
mov dword [rbp + 0xc46], 0xd0019
mov dword [rbp + 0xc4a], 0x47000c
mov dword [rbp + 0xc4e], 0x710065
mov dword [rbp + 0xc52], 0x3b0070
nop dword [rax + rax]
movsxd rax, ecx
xor word [rbp + rax*2 + 0xbce], cx
inc ecx
cmp ecx, 0x44
jb 0x14020a1e0
mov dword [rsp + 0x88], edx
lea rcx, [rbp + 0x20e0]
mov dword [rsp + 0x80], r10d
lea rdx, [rbp + 0xbce]
mov dword [rsp + 0x78], r11d
xor eax, eax
mov dword [rsp + 0x70], ebx
mov dword [rsp + 0x68], edi
mov dword [rsp + 0x60], esi
mov dword [rsp + 0x58], r14d
mov dword [rsp + 0x50], r15d
mov dword [rsp + 0x48], r12d
mov dword [rsp + 0x40], r13d
mov dword [rsp + 0x38], r8d
mov r8d, dword [rbp - 0x74]
mov dword [rsp + 0x30], r9d
mov r9d, dword [rbp - 0x70]
mov word [rbp + 0xc56], ax
mov eax, dword [rbp - 0x6c]
mov dword [rsp + 0x28], eax
mov eax, dword [rbp - 0x78]
mov dword [rsp + 0x20], eax
call fcn.140200420
lea rdx, [rbp + 0x20e0]
lea rcx, [rbp + 0x16a0]
call fcn.14013ec98
xor edi, edi
mov dword [rbp + 0x138], 0x740053
mov ecx, edi
mov dword [rbp + 0x13c], 0x400071
mov dword [rbp + 0x140], 0x6c0068
mov dword [rbp + 0x144], 0x690063
mov dword [rbp + 0x148], 0x40007c
mov dword [rbp + 0x14c], 0x6e
nop word [rax + rax]
movsxd rax, ecx
xor word [rbp + rax*2 + 0x138], cx
inc ecx
cmp ecx, 0xb
jb 0x14020a2c0
lea rdx, [rbp + 0x138]
mov word [rbp + 0x14e], di
lea rcx, [rbp + 0x1680]
call fcn.14013ec98
lea r8, [rbp + 0x16a0]
lea rdx, [rbp + 0x1680]
lea rcx, [rbp - 0x80]
call fcn.140204f50
lea rcx, [rbp + 0x1680]
call fcn.14013ed68
lea rcx, [rbp + 0x16a0]
call fcn.14013ed68
mov rax, qword [rbp + 0x1090]
lea rcx, [rbp + 0x1090]
mov qword [rbp + 0x1098], rax
call fcn.140194614
mov dword [rbp + 0x418], 0x740053
mov ecx, edi
mov dword [rbp + 0x41c], 0x400071
mov dword [rbp + 0x420], 0x6c0068
mov dword [rbp + 0x424], 0x690063
mov dword [rbp + 0x428], 0x40007c
mov dword [rbp + 0x42c], 0x5d006e
mov dword [rbp + 0x430], 0x61006d
mov dword [rbp + 0x434], 0x6b0067
mov dword [rbp + 0x438], 0x650071
mov dword [rbp + 0x43c], 0x7c007b
mov dword [rbp + 0x440], 0x7a
nop word [rax + rax]
movsxd rax, ecx
xor word [rbp + rax*2 + 0x418], cx
inc ecx
cmp ecx, 0x15
jb 0x14020a3b0
lea rdx, [rbp + 0x418]
mov word [rbp + 0x442], di
lea rcx, [rbp + 0x16c0]
call fcn.14013ec98
lea r8, [rbp + 0x16c0]
lea rdx, [rbp + 0x1960]
lea rcx, [rbp - 0x80]
call fcn.1402004c0
lea rcx, [rbp - 0x58]
cmp rcx, rax
je 0x14020a40b
xor r8d, r8d
lea rcx, [rbp - 0x58]
mov rdx, rax
call fcn.1401de370
lea rcx, [rbp + 0x1960]
call fcn.140194614
lea rcx, [rbp + 0x16c0]
call fcn.14013ed68
mov rax, qword [rbp - 0x50]
cmp rax, qword [rbp - 0x58]
je 0x14020a559
lea rcx, [rbp + 0x1078]
call fcn.140194600
mov rax, qword [rbp - 0x50]
mov rbx, rdi
cmp rax, qword [rbp - 0x58]
je 0x14020a47c
nop word [rax + rax]
rdtsc
shl rdx, 0x20
lea rcx, [rbp + 0x1078]
or rax, rdx
lea rdx, [rbp - 0x5d]
mov byte [rbp - 0x5d], al
call fcn.14020f220
mov rax, qword [rbp - 0x50]
inc rbx
sub rax, qword [rbp - 0x58]
cmp rbx, rax
jb 0x14020a450
mov dword [rbp + 0x3ec], 0x740053
mov ecx, edi
mov dword [rbp + 0x3f0], 0x400071
mov dword [rbp + 0x3f4], 0x6c0068
mov dword [rbp + 0x3f8], 0x690063
mov dword [rbp + 0x3fc], 0x40007c
mov dword [rbp + 0x400], 0x5d006e
mov dword [rbp + 0x404], 0x61006d
mov dword [rbp + 0x408], 0x6b0067
mov dword [rbp + 0x40c], 0x650071
mov dword [rbp + 0x410], 0x7c007b
mov dword [rbp + 0x414], 0x7a
nop dword [rax]
movsxd rax, ecx
xor word [rbp + rax*2 + 0x3ec], cx
inc ecx
cmp ecx, 0x15
jb 0x14020a4f0
lea rdx, [rbp + 0x3ec]
mov word [rbp + 0x416], di
lea rcx, [rbp + 0x16e0]
call fcn.14013ec98
lea r8, [rbp + 0x1078]
lea rdx, [rbp + 0x16e0]
lea rcx, [rbp - 0x80]
call fcn.140205010
lea rcx, [rbp + 0x16e0]
call fcn.14013ed68
mov rax, qword [rbp + 0x1078]
lea rcx, [rbp + 0x1078]
mov qword [rbp + 0x1080], rax
call fcn.140194614
lea rcx, [rbp - 0x80]
call fcn.140183f94
xor eax, eax
mov dword [rbp + 0x77c], 0x580053
mov word [rbp + 0x7e0], ax
mov ecx, edi
mov dword [rbp + 0x780], 0x570051
mov dword [rbp + 0x784], 0x480041
mov dword [rbp + 0x788], 0x44005a
mov dword [rbp + 0x78c], 0x7b007d
mov dword [rbp + 0x790], 0x6e0078
mov dword [rbp + 0x794], 0x790062
mov dword [rbp + 0x798], 0x60004d
mov dword [rbp + 0x79c], 0x65007e
mov dword [rbp + 0x7a0], 0x7c0060
mov dword [rbp + 0x7a4], 0x460078
mov dword [rbp + 0x7a8], 0x630073
mov dword [rbp + 0x7ac], 0x5a0044
mov dword [rbp + 0x7b0], 0x750075
mov dword [rbp + 0x7b4], 0x6f0068
mov dword [rbp + 0x7b8], 0x730071
mov dword [rbp + 0x7bc], 0x72007c
mov dword [rbp + 0x7c0], 0x50005b
mov dword [rbp + 0x7c4], 0x400050
mov dword [rbp + 0x7c8], 0x6e004b
mov dword [rbp + 0x7cc], 0x4f0046
mov dword [rbp + 0x7d0], 0x590045
mov dword [rbp + 0x7d4], 0x4c0041
mov dword [rbp + 0x7d8], 0x46005a
mov dword [rbp + 0x7dc], 0x5f005f
nop word [rax + rax]
movsxd rax, ecx
xor word [rbp + rax*2 + 0x77c], cx
inc ecx
cmp ecx, 0x32
jb 0x14020a670
lea rdx, [rbp + 0x77c]
mov word [rbp + 0x7e0], di
lea rcx, [rbp + 0x1700]
call fcn.14013ec98
lea rcx, [rbp + 0x1700]
mov qword [rbp + 0x1008], rdi
call fcn.14013eeb4
lea rcx, [rbp + 0x1008]
mov r9d, 0xf003f
mov qword [rsp + 0x20], rcx
xor r8d, r8d
mov rcx, 0xffffffff80000002
mov rdx, rax
call qword [sym.imp.advapi32.dll_RegOpenKeyExW]
test eax, eax
jne 0x14020a6ec
lea rcx, [rbp - 0x80]
call fcn.140183f94
mov rax, qword [rbp + 0x1008]
mov qword [rbp - 0x80], rax
lea rcx, [rbp + 0x1700]
call fcn.14013ed68
xor eax, eax
mov dword [rbp + 0x2f8], 0x6e0043
mov word [rbp + 0x31c], ax
mov ecx, edi
mov dword [rbp + 0x2fc], 0x73006f
mov dword [rbp + 0x300], 0x710071
mov dword [rbp + 0x304], 0x750063
mov dword [rbp + 0x308], 0x680040
mov dword [rbp + 0x30c], 0x6f0078
mov dword [rbp + 0x310], 0x6c007b
mov dword [rbp + 0x314], 0x6a007c
mov dword [rbp + 0x318], 0x750059
nop dword [rax]
movsxd rax, ecx
xor word [rbp + rax*2 + 0x2f8], cx
inc ecx
cmp ecx, 0x12
jb 0x14020a760
lea rdx, [rbp + 0x2f8]
mov word [rbp + 0x31c], di
lea rcx, [rbp + 0x1720]
call fcn.14013ec98
lea r8, [rbp + 0x1720]
lea rdx, [rbp + 0x1a00]
lea rcx, [rbp - 0x80]
call fcn.140184080
mov rdx, rax
lea rcx, [rbp + 0x198]
call fcn.1401947d8
lea rcx, [rbp + 0x1a00]
call fcn.14013ed68
lea rcx, [rbp + 0x1720]
call fcn.14013ed68
cmp qword [rbp + 0x1a8], 0
jbe 0x14020afe7
lea rcx, [rbp + 0xfc8]
call fcn.140194600
mov ebx, 0xf
nop dword [rax]
rdtsc
shl rdx, 0x20
lea rcx, [rbp + 0xfc8]
or rax, rdx
lea rdx, [rbp - 0x68]
mov byte [rbp - 0x68], al
call fcn.14020f220
sub rbx, 1
jne 0x14020a7f0
mov rax, qword [rbp + 0xfc8]
mov word [rbp + 0x1ae0], di
movzx ecx, byte [rax + 3]
movzx edx, byte [rax + 0xf]
movzx r10d, byte [rax + 0xe]
movzx r11d, byte [rax + 0xd]
movzx ebx, byte [rax + 0xc]
movzx edi, byte [rax + 0xb]
movzx esi, byte [rax + 0xa]
movzx r14d, byte [rax + 9]
movzx r15d, byte [rax + 8]
movzx r12d, byte [rax + 7]
movzx r13d, byte [rax + 6]
movzx r8d, byte [rax + 5]
movzx r9d, byte [rax + 4]
mov dword [rbp - 0x6c], ecx
movzx ecx, byte [rax + 2]
mov dword [rbp - 0x78], ecx
movzx ecx, byte [rax + 1]
movzx eax, byte [rax]
mov dword [rbp - 0x74], eax
xor eax, eax
mov dword [rbp - 0x70], ecx
mov ecx, eax
mov word [rbp + 0xf10], ax
mov dword [rbp + 0xe84], 0x24007b
mov dword [rbp + 0xe88], 0x310032
mov dword [rbp + 0xe8c], 0x20007c
mov dword [rbp + 0xe90], 0x350036
mov dword [rbp + 0xe94], 0x2c0070
mov dword [rbp + 0xe98], 0x39003a
mov dword [rbp + 0xe9c], 0x280074
mov dword [rbp + 0xea0], 0x3d003e
mov dword [rbp + 0xea4], 0x3c0068
mov dword [rbp + 0xea8], 0x230037
mov dword [rbp + 0xeac], 0x6d0026
mov dword [rbp + 0xeb0], 0x270033
mov dword [rbp + 0xeb4], 0x61002a
mov dword [rbp + 0xeb8], 0x3e0037
mov dword [rbp + 0xebc], 0x2f002c
mov dword [rbp + 0xec0], 0x3a0066
mov dword [rbp + 0xec4], 0x130010
mov dword [rbp + 0xec8], 0xe005a
mov dword [rbp + 0xecc], 0x150001
mov dword [rbp + 0xed0], 0x5f0014
mov dword [rbp + 0xed4], 0x19000d
mov dword [rbp + 0xed8], 0x530018
mov dword [rbp + 0xedc], 0x80001
mov dword [rbp + 0xee0], 0x1d001e
mov dword [rbp + 0xee4], 0x140048
mov dword [rbp + 0xee8], 0x10002
mov dword [rbp + 0xeec], 0x10004c
mov dword [rbp + 0xef0], 0x50006
mov dword [rbp + 0xef4], 0x1c0040
mov dword [rbp + 0xef8], 0x9000a
mov dword [rbp + 0xefc], 0x180044
mov dword [rbp + 0xf00], 0xd000e
mov dword [rbp + 0xf04], 0x640038
mov dword [rbp + 0xf08], 0x710072
mov dword [rbp + 0xf0c], 0x38003c
nop dword [rax]
movsxd rax, ecx
xor word [rbp + rax*2 + 0xe84], cx
inc ecx
cmp ecx, 0x46
jb 0x14020a9e0
mov dword [rsp + 0x88], edx
lea rcx, [rbp + 0x1ae0]
mov dword [rsp + 0x80], r10d
lea rdx, [rbp + 0xe84]
mov dword [rsp + 0x78], r11d
xor eax, eax
mov dword [rsp + 0x70], ebx
mov dword [rsp + 0x68], edi
mov dword [rsp + 0x60], esi
mov dword [rsp + 0x58], r14d
mov dword [rsp + 0x50], r15d
mov dword [rsp + 0x48], r12d
mov dword [rsp + 0x40], r13d
mov dword [rsp + 0x38], r8d
mov r8d, dword [rbp - 0x74]
mov dword [rsp + 0x30], r9d
mov r9d, dword [rbp - 0x70]
mov word [rbp + 0xf10], ax
mov eax, dword [rbp - 0x6c]
mov dword [rsp + 0x28], eax
mov eax, dword [rbp - 0x78]
mov dword [rsp + 0x20], eax
call fcn.140200420
lea rdx, [rbp + 0x1ae0]
lea rcx, [rbp + 0x1760]
call fcn.14013ec98
xor eax, eax
mov dword [rbp + 0x31e], 0x6e0043
xor edi, edi
mov dword [rbp + 0x322], 0x73006f
mov ecx, edi
mov dword [rbp + 0x326], 0x710071
mov dword [rbp + 0x32a], 0x750063
mov dword [rbp + 0x32e], 0x680040
mov dword [rbp + 0x332], 0x6f0078
mov dword [rbp + 0x336], 0x6c007b
mov dword [rbp + 0x33a], 0x6a007c
mov dword [rbp + 0x33e], 0x750059
mov word [rbp + 0x342], ax
nop dword [rax]
movsxd rax, ecx
xor word [rbp + rax*2 + 0x31e], cx
inc ecx
cmp ecx, 0x12
jb 0x14020aae0
lea rdx, [rbp + 0x31e]
mov word [rbp + 0x342], di
lea rcx, [rbp + 0x1740]
call fcn.14013ec98
lea r8, [rbp + 0x1760]
lea rdx, [rbp + 0x1740]
lea rcx, [rbp - 0x80]
call fcn.140204f50
lea rcx, [rbp + 0x1740]
call fcn.14013ed68
lea rcx, [rbp + 0x1760]
call fcn.14013ed68
mov rax, qword [rbp + 0xfc8]
mov ecx, edi
mov qword [rbp + 0xfd0], rax
mov dword [rbp + 0x36c], 0x6e0043
mov dword [rbp + 0x370], 0x73006f
mov dword [rbp + 0x374], 0x710071
mov dword [rbp + 0x378], 0x750063
mov dword [rbp + 0x37c], 0x680040
mov dword [rbp + 0x380], 0x6f0078
mov dword [rbp + 0x384], 0x6c007b
mov dword [rbp + 0x388], 0x6a007c
mov dword [rbp + 0x38c], 0x750059
mov dword [rbp + 0x390], 0x61
nop
movsxd rax, ecx
xor word [rbp + rax*2 + 0x36c], cx
inc ecx
cmp ecx, 0x13
jb 0x14020abb0
lea rdx, [rbp + 0x36c]
mov word [rbp + 0x392], di
lea rcx, [rbp + 0x1780]
call fcn.14013ec98
lea r8, [rbp + 0x1780]
lea rdx, [rbp + 0x1030]
lea rcx, [rbp - 0x80]
call fcn.1402050c0
lea rcx, [rbp + 0x1780]
call fcn.14013ed68
mov rax, qword [rbp + 0x1038]
sub rax, qword [rbp + 0x1030]
sar rax, 5
test rax, rax
je 0x14020afcf
xorps xmm0, xmm0
lea rdx, [rbp + 0x1020]
lea rcx, [rbp + 0xfc8]
movdqa xmmword [rbp + 0x1020], xmm0
call fcn.14020f190
mov ebx, 0xf
nop dword [rax]
rdtsc
shl rdx, 0x20
lea rcx, [rbp + 0xfc8]
or rax, rdx
lea rdx, [rbp - 0x67]
mov byte [rbp - 0x67], al
call fcn.14020f220
sub rbx, 1
jne 0x14020ac40
mov rax, qword [rbp + 0xfc8]
mov word [rbp + 0x1ae0], di
movzx ecx, byte [rax + 3]
movzx edx, byte [rax + 0xf]
movzx r10d, byte [rax + 0xe]
movzx r11d, byte [rax + 0xd]
movzx ebx, byte [rax + 0xc]
movzx edi, byte [rax + 0xb]
movzx esi, byte [rax + 0xa]
movzx r14d, byte [rax + 9]
movzx r15d, byte [rax + 8]
movzx r12d, byte [rax + 7]
movzx r13d, byte [rax + 6]
movzx r8d, byte [rax + 5]
movzx r9d, byte [rax + 4]
mov dword [rbp - 0x6c], ecx
movzx ecx, byte [rax + 2]
mov dword [rbp - 0x78], ecx
movzx ecx, byte [rax + 1]
movzx eax, byte [rax]
mov dword [rbp - 0x74], eax
xor eax, eax
mov dword [rbp - 0x70], ecx
mov ecx, eax
mov word [rbp + 0xab4], ax
mov dword [rbp + 0xa28], 0x24007b
mov dword [rbp + 0xa2c], 0x310032
mov dword [rbp + 0xa30], 0x20007c
mov dword [rbp + 0xa34], 0x350036
mov dword [rbp + 0xa38], 0x2c0070
mov dword [rbp + 0xa3c], 0x39003a
mov dword [rbp + 0xa40], 0x280074
mov dword [rbp + 0xa44], 0x3d003e
mov dword [rbp + 0xa48], 0x3c0068
mov dword [rbp + 0xa4c], 0x230037
mov dword [rbp + 0xa50], 0x6d0026
mov dword [rbp + 0xa54], 0x270033
mov dword [rbp + 0xa58], 0x61002a
mov dword [rbp + 0xa5c], 0x3e0037
mov dword [rbp + 0xa60], 0x2f002c
mov dword [rbp + 0xa64], 0x3a0066
mov dword [rbp + 0xa68], 0x130010
mov dword [rbp + 0xa6c], 0xe005a
mov dword [rbp + 0xa70], 0x150001
mov dword [rbp + 0xa74], 0x5f0014
mov dword [rbp + 0xa78], 0x19000d
mov dword [rbp + 0xa7c], 0x530018
mov dword [rbp + 0xa80], 0x80001
mov dword [rbp + 0xa84], 0x1d001e
mov dword [rbp + 0xa88], 0x140048
mov dword [rbp + 0xa8c], 0x10002
mov dword [rbp + 0xa90], 0x10004c
mov dword [rbp + 0xa94], 0x50006
mov dword [rbp + 0xa98], 0x1c0040
mov dword [rbp + 0xa9c], 0x9000a
mov dword [rbp + 0xaa0], 0x180044
mov dword [rbp + 0xaa4], 0xd000e
mov dword [rbp + 0xaa8], 0x640038
mov dword [rbp + 0xaac], 0x710072
mov dword [rbp + 0xab0], 0x38003c
nop dword [rax]
movsxd rax, ecx
xor word [rbp + rax*2 + 0xa28], cx
inc ecx
cmp ecx, 0x46
jb 0x14020ae30
mov dword [rsp + 0x88], edx
lea rcx, [rbp + 0x1ae0]
mov dword [rsp + 0x80], r10d
lea rdx, [rbp + 0xa28]
mov dword [rsp + 0x78], r11d
xor eax, eax
mov dword [rsp + 0x70], ebx
mov dword [rsp + 0x68], edi
mov dword [rsp + 0x60], esi
mov dword [rsp + 0x58], r14d
mov dword [rsp + 0x50], r15d
mov dword [rsp + 0x48], r12d
mov dword [rsp + 0x40], r13d
mov dword [rsp + 0x38], r8d
mov r8d, dword [rbp - 0x74]
mov dword [rsp + 0x30], r9d
mov r9d, dword [rbp - 0x70]
mov word [rbp + 0xab4], ax
mov eax, dword [rbp - 0x6c]
mov dword [rsp + 0x28], eax
mov eax, dword [rbp - 0x78]
mov dword [rsp + 0x20], eax
call fcn.140200420
lea rcx, [rbp + 0x1030]
call fcn.1401945b8
lea rdx, [rbp + 0x1ae0]
lea rcx, [rbp + 0x1160]
call fcn.14013ec98
lea rax, [rbp + 0x1160]
mov qword [rbp + 0x1020], rax
lea rdx, [rbp + 0x1020]
lea rax, [rbp + 0x1180]
lea rcx, [rbp + 0x1030]
mov qword [rbp + 0x1028], rax
call fcn.14020f250
lea rcx, [rbp + 0x1160]
call fcn.14013ec90
xor edi, edi
mov dword [rbp + 0x344], 0x6e0043
mov ecx, edi
mov dword [rbp + 0x348], 0x73006f
mov dword [rbp + 0x34c], 0x710071
mov dword [rbp + 0x350], 0x750063
mov dword [rbp + 0x354], 0x680040
mov dword [rbp + 0x358], 0x6f0078
mov dword [rbp + 0x35c], 0x6c007b
mov dword [rbp + 0x360], 0x6a007c
mov dword [rbp + 0x364], 0x750059
mov dword [rbp + 0x368], 0x61
nop dword [rax]
nop dword [rax + rax]
movsxd rax, ecx
xor word [rbp + rax*2 + 0x344], cx
inc ecx
cmp ecx, 0x13
jb 0x14020af80
lea rdx, [rbp + 0x344]
mov word [rbp + 0x36a], di
lea rcx, [rbp + 0x17a0]
call fcn.14013ec98
lea r8, [rbp + 0x1030]
lea rdx, [rbp + 0x17a0]
lea rcx, [rbp - 0x80]
call fcn.140204fa0
lea rcx, [rbp + 0x17a0]
call fcn.14013ed68
lea rcx, [rbp + 0x1030]
call fcn.140194884
lea rcx, [rbp + 0xfc8]
call fcn.140194614
lea rcx, [rbp - 0x80]
call fcn.140183f94
xor eax, eax
mov dword [rbp + 0x514], 0x4e0053
mov word [rbp + 0x54c], ax
mov ecx, edi
mov dword [rbp + 0x518], 0x570044
mov dword [rbp + 0x51c], 0x440053
mov dword [rbp + 0x520], 0x420054
mov dword [rbp + 0x524], 0x440054
mov dword [rbp + 0x528], 0x680063
mov dword [rbp + 0x52c], 0x62007e
mov dword [rbp + 0x530], 0x60007d
mov dword [rbp + 0x534], 0x650076
mov dword [rbp + 0x538], 0x40004e
mov dword [rbp + 0x53c], 0x580045
mov dword [rbp + 0x540], 0x7b0055
mov dword [rbp + 0x544], 0x7c0071
mov dword [rbp + 0x548], 0x6f0074
nop word [rax + rax]
movsxd rax, ecx
xor word [rbp + rax*2 + 0x514], cx
inc ecx
cmp ecx, 0x1c
jb 0x14020b090
lea rdx, [rbp + 0x514]
mov word [rbp + 0x54c], di
lea rcx, [rbp + 0x17c0]
call fcn.14013ec98
lea rcx, [rbp + 0x17c0]
mov qword [rbp + 0xfe0], rdi
call fcn.14013eeb4
lea rcx, [rbp + 0xfe0]
mov r9d, 0xf003f
mov qword [rsp + 0x20], rcx
xor r8d, r8d
mov rcx, 0xffffffff80000002
mov rdx, rax
call qword [sym.imp.advapi32.dll_RegOpenKeyExW]
test eax, eax
jne 0x14020b10c
lea rcx, [rbp - 0x80]
call fcn.140183f94
mov rax, qword [rbp + 0xfe0]
mov qword [rbp - 0x80], rax
lea rcx, [rbp + 0x17c0]
call fcn.14013ed68
mov ecx, edi
mov dword [rbp], 0x60004d
mov dword [rbp + 4], 0x6b0061
mov dword [rbp + 8], 0x6b006d
mov dword [rbp + 0xc], 0x4e0063
mov dword [rbp + 0x10], 0x6c
nop dword [rax]
movsxd rax, ecx
xor word [rbp + rax*2], cx
inc ecx
cmp ecx, 9
jb 0x14020b140
lea rdx, [rbp]
mov word [rbp + 0x12], di
lea rcx, [rbp + 0x17e0]
call fcn.14013ec98
lea r8, [rbp + 0x17e0]
lea rdx, [rbp + 0x1a20]
lea rcx, [rbp - 0x80]
call fcn.140184080
mov rdx, rax
lea rcx, [rbp + 0x198]
call fcn.1401947d8
lea rcx, [rbp + 0x1a20]
call fcn.14013ed68
lea rcx, [rbp + 0x17e0]
call fcn.14013ed68
cmp qword [rbp + 0x1a8], 0
jbe 0x14020b4dc
lea rcx, [rbp + 0x1060]
call fcn.140194600
mov ebx, 0xf
rdtsc
shl rdx, 0x20
lea rcx, [rbp + 0x1060]
or rax, rdx
lea rdx, [rbp - 0x66]
mov byte [rbp - 0x66], al
call fcn.14020f220
sub rbx, 1
jne 0x14020b1c0
mov rax, qword [rbp + 0x1060]
mov word [rbp + 0x22e0], di
movzx ecx, byte [rax + 3]
movzx edx, byte [rax + 0xf]
movzx r10d, byte [rax + 0xe]
movzx r11d, byte [rax + 0xd]
movzx ebx, byte [rax + 0xc]
movzx edi, byte [rax + 0xb]
movzx esi, byte [rax + 0xa]
movzx r14d, byte [rax + 9]
movzx r15d, byte [rax + 8]
movzx r12d, byte [rax + 7]
movzx r13d, byte [rax + 6]
movzx r8d, byte [rax + 5]
movzx r9d, byte [rax + 4]
mov dword [rbp - 0x6c], ecx
movzx ecx, byte [rax + 2]
mov dword [rbp - 0x78], ecx
movzx ecx, byte [rax + 1]
movzx eax, byte [rax]
mov dword [rbp - 0x70], ecx
xor ecx, ecx
mov dword [rbp - 0x74], eax
xor eax, eax
mov word [rbp + 0xce0], ax
mov dword [rbp + 0xc58], 0x310025
mov dword [rbp + 0xc5c], 0x5b0030
mov dword [rbp + 0xc60], 0x350021
mov dword [rbp + 0xc64], 0x5f0034
mov dword [rbp + 0xc68], 0x39002d
mov dword [rbp + 0xc6c], 0x530038
mov dword [rbp + 0xc70], 0x3d0029
mov dword [rbp + 0xc74], 0x57003c
mov dword [rbp + 0xc78], 0x34003d
mov dword [rbp + 0xc7c], 0x210022
mov dword [rbp + 0xc80], 0x30004c
mov dword [rbp + 0xc84], 0x250026
mov dword [rbp + 0xc88], 0x340040
mov dword [rbp + 0xc8c], 0x2b003f
mov dword [rbp + 0xc90], 0x45002e
mov dword [rbp + 0xc94], 0x2f003b
mov dword [rbp + 0xc98], 0x790012
mov dword [rbp + 0xc9c], 0x6000f
mov dword [rbp + 0xca0], 0x170014
mov dword [rbp + 0xca4], 0x2007e
mov dword [rbp + 0xca8], 0x1b0018
mov dword [rbp + 0xcac], 0x60072
mov dword [rbp + 0xcb0], 0x1d0009
mov dword [rbp + 0xcb4], 0x77001c
mov dword [rbp + 0xcb8], 0x10015
mov dword [rbp + 0xcbc], 0x6b0000
mov dword [rbp + 0xcc0], 0x50011
mov dword [rbp + 0xcc4], 0x6f0004
mov dword [rbp + 0xcc8], 0x9001d
mov dword [rbp + 0xccc], 0x630008
mov dword [rbp + 0xcd0], 0xd0019
mov dword [rbp + 0xcd4], 0x67000c
mov dword [rbp + 0xcd8], 0x710065
mov dword [rbp + 0xcdc], 0x1b0070
nop dword [rax]
nop word [rax + rax]
movsxd rax, ecx
xor word [rbp + rax*2 + 0xc58], cx
inc ecx
cmp ecx, 0x44
jb 0x14020b3b0
mov dword [rsp + 0x88], edx
lea rcx, [rbp + 0x22e0]
mov dword [rsp + 0x80], r10d
lea rdx, [rbp + 0xc58]
mov dword [rsp + 0x78], r11d
xor eax, eax
mov dword [rsp + 0x70], ebx
mov dword [rsp + 0x68], edi
mov dword [rsp + 0x60], esi
mov dword [rsp + 0x58], r14d
mov dword [rsp + 0x50], r15d
mov dword [rsp + 0x48], r12d
mov dword [rsp + 0x40], r13d
mov dword [rsp + 0x38], r8d
mov r8d, dword [rbp - 0x74]
mov dword [rsp + 0x30], r9d
mov r9d, dword [rbp - 0x70]
mov word [rbp + 0xce0], ax
mov eax, dword [rbp - 0x6c]
mov dword [rsp + 0x28], eax
mov eax, dword [rbp - 0x78]
mov dword [rsp + 0x20], eax
call fcn.140200420
lea rdx, [rbp + 0x22e0]
lea rcx, [rbp + 0x1820]
call fcn.14013ec98
xor edi, edi
mov dword [rbp + 0x14], 0x60004d
mov ecx, edi
mov dword [rbp + 0x18], 0x6b0061
mov dword [rbp + 0x1c], 0x6b006d
mov dword [rbp + 0x20], 0x4e0063
mov dword [rbp + 0x24], 0x6c
nop dword [rax]
movsxd rax, ecx
xor word [rbp + rax*2 + 0x14], cx
inc ecx
cmp ecx, 9
jb 0x14020b470
lea rdx, [rbp + 0x14]
mov word [rbp + 0x26], di
lea rcx, [rbp + 0x1800]
call fcn.14013ec98
lea r8, [rbp + 0x1820]
lea rdx, [rbp + 0x1800]
lea rcx, [rbp - 0x80]
call fcn.140204f50
lea rcx, [rbp + 0x1800]
call fcn.14013ed68
lea rcx, [rbp + 0x1820]
call fcn.14013ed68
mov rax, qword [rbp + 0x1060]
lea rcx, [rbp + 0x1060]
mov qword [rbp + 0x1068], rax
call fcn.140194614
mov dword [rbp + 0x4dc], 0x680057
mov ecx, edi
mov dword [rbp + 0x4e0], 0x50006c
mov dword [rbp + 0x4e4], 0x680075
mov dword [rbp + 0x4e8], 0x6e0040
mov dword [rbp + 0x4ec], 0x7a007a
mov dword [rbp + 0x4f0], 0x58007e
mov dword [rbp + 0x4f4], 0x7e0069
mov dword [rbp + 0x4f8], 0x66007d
mov dword [rbp + 0x4fc], 0x7f007f
mov dword [rbp + 0x500], 0x670041
mov dword [rbp + 0x504], 0x670075
mov dword [rbp + 0x508], 0x430062
mov dword [rbp + 0x50c], 0x740071
mov dword [rbp + 0x510], 0x7f
nop word [rax + rax]
movsxd rax, ecx
xor word [rbp + rax*2 + 0x4dc], cx
inc ecx
cmp ecx, 0x1b
jb 0x14020b570
lea rdx, [rbp + 0x4dc]
mov word [rbp + 0x512], di
lea rcx, [rbp + 0x1840]
call fcn.14013ec98
lea rdx, [rbp + 0x1840]
lea rcx, [rbp - 0x80]
call fcn.140205050
lea rcx, [rbp + 0x1840]
mov rbx, rax
call fcn.14013ed68
mov esi, 0xb
test rbx, rbx
je 0x14020b6db
rdtsc
shl rdx, 0x20
mov ecx, edi
or rax, rdx
mov dword [rbp + 0x4a4], 0x680057
mov qword [rbp + 0x10b0], rax
mov dword [rbp + 0x4a8], 0x50006c
mov dword [rbp + 0x4ac], 0x680075
mov dword [rbp + 0x4b0], 0x6e0040
mov dword [rbp + 0x4b4], 0x7a007a
mov dword [rbp + 0x4b8], 0x58007e
mov dword [rbp + 0x4bc], 0x7e0069
mov dword [rbp + 0x4c0], 0x66007d
mov dword [rbp + 0x4c4], 0x7f007f
mov dword [rbp + 0x4c8], 0x670041
mov dword [rbp + 0x4cc], 0x670075
mov dword [rbp + 0x4d0], 0x430062
mov dword [rbp + 0x4d4], 0x740071
mov dword [rbp + 0x4d8], 0x7f
nop word [rax + rax]
movsxd rax, ecx
xor word [rbp + rax*2 + 0x4a4], cx
inc ecx
cmp ecx, 0x1b
jb 0x14020b670
lea rdx, [rbp + 0x4a4]
mov word [rbp + 0x4da], di
lea rcx, [rbp + 0x1860]
call fcn.14013ec98
lea rcx, [rbp + 0x1860]
call fcn.14013eeb4
lea rcx, [rbp + 0x10b0]
mov dword [rsp + 0x28], 8
mov qword [rsp + 0x20], rcx
mov r9d, esi
mov rcx, qword [rbp - 0x80]
xor r8d, r8d
mov rdx, rax
call qword [sym.imp.advapi32.dll_RegSetValueExW]
lea rcx, [rbp + 0x1860]
call fcn.14013ed68
lea rcx, [rbp - 0x80]
call fcn.140183f94
mov ecx, edi
mov dword [rbp + 0x3c0], 0x580053
mov dword [rbp + 0x3c4], 0x570051
mov dword [rbp + 0x3c8], 0x480041
mov dword [rbp + 0x3cc], 0x4f005a
mov dword [rbp + 0x3d0], 0x7b0069
mov dword [rbp + 0x3d4], 0x7c006e
mov dword [rbp + 0x3d8], 0x7f006d
mov dword [rbp + 0x3dc], 0x4c006b
mov dword [rbp + 0x3e0], 0x7f007f
mov dword [rbp + 0x3e4], 0x7a0074
mov dword [rbp + 0x3e8], 0x73
nop dword [rax]
nop dword [rax + rax]
movsxd rax, ecx
xor word [rbp + rax*2 + 0x3c0], cx
inc ecx
cmp ecx, 0x15
jb 0x14020b760
lea rdx, [rbp + 0x3c0]
mov word [rbp + 0x3ea], di
lea rcx, [rbp + 0x1880]
call fcn.14013ec98
lea rcx, [rbp + 0x1880]
mov qword [rbp + 0x1000], rdi
call fcn.14013eeb4
lea rcx, [rbp + 0x1000]
mov r9d, 0xf003f
mov qword [rsp + 0x20], rcx
xor r8d, r8d
mov rcx, 0xffffffff80000002
mov rdx, rax
call qword [sym.imp.advapi32.dll_RegOpenKeyExW]
test eax, eax
jne 0x14020b7dc
lea rcx, [rbp - 0x80]
call fcn.140183f94
mov rax, qword [rbp + 0x1000]
mov qword [rbp - 0x80], rax
lea rcx, [rbp + 0x1880]
call fcn.14013ed68
xor eax, eax
mov dword [rbp + 0x80], 0x60004c
mov word [rbp + 0x94], ax
mov ecx, edi
mov dword [rbp + 0x84], 0x770071
mov dword [rbp + 0x88], 0x6a0047
mov dword [rbp + 0x8c], 0x610068
mov dword [rbp + 0x90], 0x6e0061
nop word [rax + rax]
movsxd rax, ecx
xor word [rbp + rax*2 + 0x80], cx
inc ecx
cmp ecx, 0xa
jb 0x14020b830
lea rdx, [rbp + 0x80]
mov word [rbp + 0x94], di
lea rcx, [rbp + 0x18a0]
call fcn.14013ec98
lea r8, [rbp + 0x18a0]
lea rdx, [rbp + 0x1a40]
lea rcx, [rbp - 0x80]
call fcn.140184080
mov rdx, rax
lea rcx, [rbp + 0x198]
call fcn.1401947d8
lea rcx, [rbp + 0x1a40]
call fcn.14013ed68
lea rcx, [rbp + 0x18a0]
call fcn.14013ed68
cmp qword [rbp + 0x1a8], 0
jbe 0x14020bc05
lea rcx, [rbp + 0x1048]
call fcn.140194600
mov ebx, 0xf
nop dword [rax]
rdtsc
shl rdx, 0x20
lea rcx, [rbp + 0x1048]
or rax, rdx
lea rdx, [rbp - 0x65]
mov byte [rbp - 0x65], al
call fcn.14020f220
sub rbx, 1
jne 0x14020b8c0
mov rax, qword [rbp + 0x1048]
mov word [rbp + 0x24e0], di
movzx ecx, byte [rax + 3]
movzx edx, byte [rax + 0xf]
movzx r10d, byte [rax + 0xe]
movzx r11d, byte [rax + 0xd]
movzx ebx, byte [rax + 0xc]
movzx edi, byte [rax + 0xb]
movzx esi, byte [rax + 0xa]
movzx r14d, byte [rax + 9]
movzx r15d, byte [rax + 8]
movzx r12d, byte [rax + 7]
movzx r13d, byte [rax + 6]
movzx r8d, byte [rax + 5]
movzx r9d, byte [rax + 4]
mov dword [rbp - 0x6c], ecx
movzx ecx, byte [rax + 2]
mov dword [rbp - 0x78], ecx
movzx ecx, byte [rax + 1]
movzx eax, byte [rax]
mov dword [rbp - 0x70], ecx
xor ecx, ecx
mov dword [rbp - 0x74], eax
xor eax, eax
mov word [rbp + 0xd6a], ax
mov dword [rbp + 0xce2], 0x310025
mov dword [rbp + 0xce6], 0x7b0030
mov dword [rbp + 0xcea], 0x350021
mov dword [rbp + 0xcee], 0x7f0034
mov dword [rbp + 0xcf2], 0x39002d
mov dword [rbp + 0xcf6], 0x730038
mov dword [rbp + 0xcfa], 0x3d0029
mov dword [rbp + 0xcfe], 0x77003c
mov dword [rbp + 0xd02], 0x34003d
mov dword [rbp + 0xd06], 0x210022
mov dword [rbp + 0xd0a], 0x30006c
mov dword [rbp + 0xd0e], 0x250026
mov dword [rbp + 0xd12], 0x340060
mov dword [rbp + 0xd16], 0x2b003f
mov dword [rbp + 0xd1a], 0x65002e
mov dword [rbp + 0xd1e], 0x2f003b
mov dword [rbp + 0xd22], 0x590012
mov dword [rbp + 0xd26], 0x6000f
mov dword [rbp + 0xd2a], 0x170014
mov dword [rbp + 0xd2e], 0x2005e
mov dword [rbp + 0xd32], 0x1b0018
mov dword [rbp + 0xd36], 0x60052
mov dword [rbp + 0xd3a], 0x1d0009
mov dword [rbp + 0xd3e], 0x57001c
mov dword [rbp + 0xd42], 0x10015
mov dword [rbp + 0xd46], 0x4b0000
mov dword [rbp + 0xd4a], 0x50011
mov dword [rbp + 0xd4e], 0x4f0004
mov dword [rbp + 0xd52], 0x9001d
mov dword [rbp + 0xd56], 0x430008
mov dword [rbp + 0xd5a], 0xd0019
mov dword [rbp + 0xd5e], 0x47000c
mov dword [rbp + 0xd62], 0x710065
mov dword [rbp + 0xd66], 0x3b0070
nop dword [rax]
nop word [rax + rax]
movsxd rax, ecx
xor word [rbp + rax*2 + 0xce2], cx
inc ecx
cmp ecx, 0x44
jb 0x14020bab0
mov dword [rsp + 0x88], edx
lea rcx, [rbp + 0x24e0]
mov dword [rsp + 0x80], r10d
lea rdx, [rbp + 0xce2]
mov dword [rsp + 0x78], r11d
xor eax, eax
mov dword [rsp + 0x70], ebx
mov dword [rsp + 0x68], edi
mov dword [rsp + 0x60], esi
mov dword [rsp + 0x58], r14d
mov dword [rsp + 0x50], r15d
mov dword [rsp + 0x48], r12d
mov dword [rsp + 0x40], r13d
mov dword [rsp + 0x38], r8d
mov r8d, dword [rbp - 0x74]
mov dword [rsp + 0x30], r9d
mov r9d, dword [rbp - 0x70]
mov word [rbp + 0xd6a], ax
mov eax, dword [rbp - 0x6c]
mov dword [rsp + 0x28], eax
mov eax, dword [rbp - 0x78]
mov dword [rsp + 0x20], eax
call fcn.140200420
lea rdx, [rbp + 0x24e0]
lea rcx, [rbp + 0x18e0]
call fcn.14013ec98
xor eax, eax
mov dword [rbp + 0x96], 0x60004c
xor edi, edi
mov dword [rbp + 0x9a], 0x770071
mov ecx, edi
mov dword [rbp + 0x9e], 0x6a0047
mov dword [rbp + 0xa2], 0x610068
mov dword [rbp + 0xa6], 0x6e0061
mov word [rbp + 0xaa], ax
nop dword [rax]
nop dword [rax + rax]
movsxd rax, ecx
xor word [rbp + rax*2 + 0x96], cx
inc ecx
cmp ecx, 0xa
jb 0x14020bb90
lea rdx, [rbp + 0x96]
mov word [rbp + 0xaa], di
lea rcx, [rbp + 0x18c0]
call fcn.14013ec98
lea r8, [rbp + 0x18e0]
lea rdx, [rbp + 0x18c0]
lea rcx, [rbp - 0x80]
call fcn.140204f50
lea rcx, [rbp + 0x18c0]
call fcn.14013ed68
lea rcx, [rbp + 0x18e0]
call fcn.14013ed68
mov rax, qword [rbp + 0x1048]
lea rcx, [rbp + 0x1048]
mov qword [rbp + 0x1050], rax
call fcn.140194614
lea rcx, [rbp - 0x80]
call fcn.140183f94
mov ecx, edi
mov dword [rbp + 0x394], 0x580053
mov dword [rbp + 0x398], 0x570051
mov dword [rbp + 0x39c], 0x480041
mov dword [rbp + 0x3a0], 0x4f005a
mov dword [rbp + 0x3a4], 0x7b0069
mov dword [rbp + 0x3a8], 0x7c006e
mov dword [rbp + 0x3ac], 0x7f006d
mov dword [rbp + 0x3b0], 0x4c006b
mov dword [rbp + 0x3b4], 0x7f007f
mov dword [rbp + 0x3b8], 0x7a0074
mov dword [rbp + 0x3bc], 0x73
nop
movsxd rax, ecx
xor word [rbp + rax*2 + 0x394], cx
inc ecx
cmp ecx, 0x15
jb 0x14020bc80
lea rdx, [rbp + 0x394]
mov word [rbp + 0x3be], di
lea rcx, [rbp + 0x1900]
call fcn.14013ec98
lea rcx, [rbp + 0x1900]
mov qword [rbp + 0xff8], rdi
call fcn.14013eeb4
lea rcx, [rbp + 0xff8]
mov r9d, 0xf003f
mov qword [rsp + 0x20], rcx
xor r8d, r8d
mov rcx, 0xffffffff80000002
mov rdx, rax
call qword [sym.imp.advapi32.dll_RegOpenKeyExW]
test eax, eax
jne 0x14020bcfc
lea rcx, [rbp - 0x80]
call fcn.140183f94
mov rax, qword [rbp + 0xff8]
mov qword [rbp - 0x80], rax
lea rcx, [rbp + 0x1900]
call fcn.14013ed68
xor eax, eax
mov dword [rbp + 0xac], 0x60004c
mov word [rbp + 0xc0], ax
mov ecx, edi
mov dword [rbp + 0xb0], 0x770071
mov dword [rbp + 0xb4], 0x6a0047
mov dword [rbp + 0xb8], 0x610068
mov dword [rbp + 0xbc], 0x6e0061
nop word [rax + rax]
movsxd rax, ecx
xor word [rbp + rax*2 + 0xac], cx
inc ecx
cmp ecx, 0xa
jb 0x14020bd50
lea rdx, [rbp + 0xac]
mov word [rbp + 0xc0], di
lea rcx, [rbp + 0x1920]
call fcn.14013ec98
lea r8, [rbp + 0x1920]
lea rdx, [rbp + 0x1a60]
lea rcx, [rbp - 0x80]
call fcn.140184080
mov rdx, rax
lea rcx, [rbp + 0x198]
call fcn.1401947d8
lea rcx, [rbp + 0x1a60]
call fcn.14013ed68
lea rcx, [rbp + 0x1920]
call fcn.14013ed68
cmp qword [rbp + 0x1a8], 0
jbe 0x14020c125
lea rcx, [rbp + 0x1118]
call fcn.140194600
mov ebx, 0xf
nop dword [rax]
rdtsc
shl rdx, 0x20
lea rcx, [rbp + 0x1118]
or rax, rdx
lea rdx, [rbp - 0x64]
mov byte [rbp - 0x64], al
call fcn.14020f220
sub rbx, 1
jne 0x14020bde0
mov rax, qword [rbp + 0x1118]
mov word [rbp + 0x26e0], di
movzx ecx, byte [rax + 3]
movzx edx, byte [rax + 0xf]
movzx r10d, byte [rax + 0xe]
movzx r11d, byte [rax + 0xd]
movzx ebx, byte [rax + 0xc]
movzx edi, byte [rax + 0xb]
movzx esi, byte [rax + 0xa]
movzx r14d, byte [rax + 9]
movzx r15d, byte [rax + 8]
movzx r12d, byte [rax + 7]
movzx r13d, byte [rax + 6]
movzx r8d, byte [rax + 5]
movzx r9d, byte [rax + 4]
mov dword [rbp - 0x6c], ecx
movzx ecx, byte [rax + 2]
mov dword [rbp - 0x78], ecx
movzx ecx, byte [rax + 1]
movzx eax, byte [rax]
mov dword [rbp - 0x70], ecx
xor ecx, ecx
mov dword [rbp - 0x74], eax
xor eax, eax
mov word [rbp + 0xdf4], ax
mov dword [rbp + 0xd6c], 0x310025
mov dword [rbp + 0xd70], 0x7b0030
mov dword [rbp + 0xd74], 0x350021
mov dword [rbp + 0xd78], 0x7f0034
mov dword [rbp + 0xd7c], 0x39002d
mov dword [rbp + 0xd80], 0x730038
mov dword [rbp + 0xd84], 0x3d0029
mov dword [rbp + 0xd88], 0x77003c
mov dword [rbp + 0xd8c], 0x34003d
mov dword [rbp + 0xd90], 0x210022
mov dword [rbp + 0xd94], 0x30006c
mov dword [rbp + 0xd98], 0x250026
mov dword [rbp + 0xd9c], 0x340060
mov dword [rbp + 0xda0], 0x2b003f
mov dword [rbp + 0xda4], 0x65002e
mov dword [rbp + 0xda8], 0x2f003b
mov dword [rbp + 0xdac], 0x590012
mov dword [rbp + 0xdb0], 0x6000f
mov dword [rbp + 0xdb4], 0x170014
mov dword [rbp + 0xdb8], 0x2005e
mov dword [rbp + 0xdbc], 0x1b0018
mov dword [rbp + 0xdc0], 0x60052
mov dword [rbp + 0xdc4], 0x1d0009
mov dword [rbp + 0xdc8], 0x57001c
mov dword [rbp + 0xdcc], 0x10015
mov dword [rbp + 0xdd0], 0x4b0000
mov dword [rbp + 0xdd4], 0x50011
mov dword [rbp + 0xdd8], 0x4f0004
mov dword [rbp + 0xddc], 0x9001d
mov dword [rbp + 0xde0], 0x430008
mov dword [rbp + 0xde4], 0xd0019
mov dword [rbp + 0xde8], 0x47000c
mov dword [rbp + 0xdec], 0x710065
mov dword [rbp + 0xdf0], 0x3b0070
nop dword [rax]
nop word [rax + rax]
movsxd rax, ecx
xor word [rbp + rax*2 + 0xd6c], cx
inc ecx
cmp ecx, 0x44
jb 0x14020bfd0
mov dword [rsp + 0x88], edx
lea rcx, [rbp + 0x26e0]
mov dword [rsp + 0x80], r10d
lea rdx, [rbp + 0xd6c]
mov dword [rsp + 0x78], r11d
xor eax, eax
mov dword [rsp + 0x70], ebx
mov dword [rsp + 0x68], edi
mov dword [rsp + 0x60], esi
mov dword [rsp + 0x58], r14d
mov dword [rsp + 0x50], r15d
mov dword [rsp + 0x48], r12d
mov dword [rsp + 0x40], r13d
mov dword [rsp + 0x38], r8d
mov r8d, dword [rbp - 0x74]
mov dword [rsp + 0x30], r9d
mov r9d, dword [rbp - 0x70]
mov word [rbp + 0xdf4], ax
mov eax, dword [rbp - 0x6c]
mov dword [rsp + 0x28], eax
mov eax, dword [rbp - 0x78]
mov dword [rsp + 0x20], eax
call fcn.140200420
lea rdx, [rbp + 0x26e0]
lea rcx, [rbp + 0x1180]
call fcn.14013ec98
xor eax, eax
mov dword [rbp + 0xc2], 0x60004c
xor edi, edi
mov dword [rbp + 0xc6], 0x770071
mov ecx, edi
mov dword [rbp + 0xca], 0x6a0047
mov dword [rbp + 0xce], 0x610068
mov dword [rbp + 0xd2], 0x6e0061
mov word [rbp + 0xd6], ax
nop dword [rax]
nop dword [rax + rax]
movsxd rax, ecx
xor word [rbp + rax*2 + 0xc2], cx
inc ecx
cmp ecx, 0xa
jb 0x14020c0b0
lea rdx, [rbp + 0xc2]
mov word [rbp + 0xd6], di
lea rcx, [rbp + 0x1940]
call fcn.14013ec98
lea r8, [rbp + 0x1180]
lea rdx, [rbp + 0x1940]
lea rcx, [rbp - 0x80]
call fcn.140204f50
lea rcx, [rbp + 0x1940]
call fcn.14013ed68
lea rcx, [rbp + 0x1180]
call fcn.14013ed68
mov rax, qword [rbp + 0x1118]
lea rcx, [rbp + 0x1118]
mov qword [rbp + 0x1120], rax
call fcn.140194614
lea rcx, [rbp - 0x80]
call fcn.140183f94
mov ecx, edi
mov dword [rbp + 0x616], 0x580053
mov dword [rbp + 0x61a], 0x570051
mov dword [rbp + 0x61e], 0x480041
mov dword [rbp + 0x622], 0x44005a
mov dword [rbp + 0x626], 0x670067
mov dword [rbp + 0x62a], 0x79007e
mov dword [rbp + 0x62e], 0x610063
mov dword [rbp + 0x632], 0x6a005d
mov dword [rbp + 0x636], 0x210064
mov dword [rbp + 0x63a], 0x220022
mov dword [rbp + 0x63e], 0x460048
mov dword [rbp + 0x642], 0x650073
mov dword [rbp + 0x646], 0x70006e
mov dword [rbp + 0x64a], 0x7e0079
mov dword [rbp + 0x64e], 0x41006f
mov dword [rbp + 0x652], 0x4f004a
mov dword [rbp + 0x656], 0x7d006d
mov dword [rbp + 0x65a], 0x6e0075
mov dword [rbp + 0x65e], 0x6d
nop
movsxd rax, ecx
xor word [rbp + rax*2 + 0x616], cx
inc ecx
cmp ecx, 0x25
jb 0x14020c1f0
lea rdx, [rbp + 0x616]
mov word [rbp + 0x660], di
lea rcx, [rbp + 0x11a0]
call fcn.14013ec98
lea rcx, [rbp + 0x11a0]
mov qword [rbp + 0xff0], rdi
call fcn.14013eeb4
lea rcx, [rbp + 0xff0]
mov r9d, 0xf003f
mov qword [rsp + 0x20], rcx
xor r8d, r8d
mov rcx, 0xffffffff80000002
mov rdx, rax
call qword [sym.imp.advapi32.dll_RegOpenKeyExW]
test eax, eax
jne 0x14020c26c
lea rcx, [rbp - 0x80]
call fcn.140183f94
mov rax, qword [rbp + 0xff0]
mov qword [rbp - 0x80], rax
lea rcx, [rbp + 0x11a0]
call fcn.14013ed68
xor eax, eax
mov dword [rbp + 0x24a], 0x680057
mov word [rbp + 0x266], ax
mov ecx, edi
mov dword [rbp + 0x24e], 0x67006c
mov dword [rbp + 0x252], 0x72006b
mov dword [rbp + 0x256], 0x460075
mov dword [rbp + 0x25a], 0x420041
mov dword [rbp + 0x25e], 0x6a0042
mov dword [rbp + 0x262], 0x65007f
nop dword [rax]
movsxd rax, ecx
xor word [rbp + rax*2 + 0x24a], cx
inc ecx
cmp ecx, 0xe
jb 0x14020c2d0
lea rdx, [rbp + 0x24a]
mov word [rbp + 0x266], di
lea rcx, [rbp + 0x11c0]
call fcn.14013ec98
lea r8, [rbp + 0x11c0]
lea rdx, [rbp + 0x19a8]
lea rcx, [rbp - 0x80]
call fcn.1402004c0
lea rcx, [rbp - 0x58]
cmp rcx, rax
je 0x14020c32b
xor r8d, r8d
lea rcx, [rbp - 0x58]
mov rdx, rax
call fcn.1401de370
lea rcx, [rbp + 0x19a8]
call fcn.140194614
lea rcx, [rbp + 0x11c0]
call fcn.14013ed68
mov rax, qword [rbp - 0x50]
cmp rax, qword [rbp - 0x58]
je 0x14020c459
lea rcx, [rbp + 0x1100]
call fcn.140194600
mov rax, qword [rbp - 0x50]
mov rbx, rdi
cmp rax, qword [rbp - 0x58]
je 0x14020c39c
nop word [rax + rax]
rdtsc
shl rdx, 0x20
lea rcx, [rbp + 0x1100]
or rax, rdx
lea rdx, [rbp - 0x63]
mov byte [rbp - 0x63], al
call fcn.14020f220
mov rax, qword [rbp - 0x50]
inc rbx
sub rax, qword [rbp - 0x58]
cmp rbx, rax
jb 0x14020c370
xor eax, eax
mov dword [rbp + 0x22c], 0x680057
mov word [rbp + 0x248], ax
mov ecx, edi
mov dword [rbp + 0x230], 0x67006c
mov dword [rbp + 0x234], 0x72006b
mov dword [rbp + 0x238], 0x460075
mov dword [rbp + 0x23c], 0x420041
mov dword [rbp + 0x240], 0x6a0042
mov dword [rbp + 0x244], 0x65007f
nop dword [rax]
movsxd rax, ecx
xor word [rbp + rax*2 + 0x22c], cx
inc ecx
cmp ecx, 0xe
jb 0x14020c3f0
lea rdx, [rbp + 0x22c]
mov word [rbp + 0x248], di
lea rcx, [rbp + 0x11e0]
call fcn.14013ec98
lea r8, [rbp + 0x1100]
lea rdx, [rbp + 0x11e0]
lea rcx, [rbp - 0x80]
call fcn.140205010
lea rcx, [rbp + 0x11e0]
call fcn.14013ed68
mov rax, qword [rbp + 0x1100]
lea rcx, [rbp + 0x1100]
mov qword [rbp + 0x1108], rax
call fcn.140194614
lea rcx, [rbp - 0x80]
call fcn.140183f94
xor eax, eax
mov dword [rbp + 0x6bc], 0x4e0053
mov word [rbp + 0x718], ax
mov ecx, edi
mov dword [rbp + 0x6c0], 0x570044
mov dword [rbp + 0x6c4], 0x440053
mov dword [rbp + 0x6c8], 0x420054
mov dword [rbp + 0x6cc], 0x440054
mov dword [rbp + 0x6d0], 0x680063
mov dword [rbp + 0x6d4], 0x62007e
mov dword [rbp + 0x6d8], 0x60007d
mov dword [rbp + 0x6dc], 0x650076
mov dword [rbp + 0x6e0], 0x5a004e
mov dword [rbp + 0x6e4], 0x61007a
mov dword [rbp + 0x6e8], 0x650073
mov dword [rbp + 0x6ec], 0x7c0076
mov dword [rbp + 0x6f0], 0x3b006e
mov dword [rbp + 0x6f4], 0x650059
mov dword [rbp + 0x6f8], 0x73006e
mov dword [rbp + 0x6fc], 0x53004f
mov dword [rbp + 0x700], 0x510047
mov dword [rbp + 0x704], 0x680078
mov dword [rbp + 0x708], 0x40004f
mov dword [rbp + 0x70c], 0x48005a
mov dword [rbp + 0x710], 0x42005e
mov dword [rbp + 0x714], 0x430043
nop dword [rax]
nop word [rax + rax]
movsxd rax, ecx
xor word [rbp + rax*2 + 0x6bc], cx
inc ecx
cmp ecx, 0x2e
jb 0x14020c560
lea rdx, [rbp + 0x6bc]
mov word [rbp + 0x718], di
lea rcx, [rbp + 0x1200]
call fcn.14013ec98
lea rcx, [rbp + 0x1200]
mov qword [rbp + 0xfe8], rdi
call fcn.14013eeb4
lea rcx, [rbp + 0xfe8]
mov r9d, 0xf003f
mov qword [rsp + 0x20], rcx
xor r8d, r8d
mov rcx, 0xffffffff80000002
mov rdx, rax
call qword [sym.imp.advapi32.dll_RegOpenKeyExW]
test eax, eax
jne 0x14020c5dc
lea rcx, [rbp - 0x80]
call fcn.140183f94
mov rax, qword [rbp + 0xfe8]
mov qword [rbp - 0x80], rax
lea rcx, [rbp + 0x1200]
call fcn.14013ed68
mov ecx, edi
mov dword [rbp + 0x2d4], 0x440049
mov dword [rbp + 0x2d8], 0x4a0022
mov dword [rbp + 0x2dc], 0x76006a
mov dword [rbp + 0x2e0], 0x660072
mov dword [rbp + 0x2e4], 0x650064
mov dword [rbp + 0x2e8], 0x6f006f
mov dword [rbp + 0x2ec], 0x49002c
mov dword [rbp + 0x2f0], 0x7b006f
mov dword [rbp + 0x2f4], 0x75
nop dword [rax]
nop dword [rax + rax]
movsxd rax, ecx
xor word [rbp + rax*2 + 0x2d4], cx
inc ecx
cmp ecx, 0x11
jb 0x14020c650
lea rdx, [rbp + 0x2d4]
mov word [rbp + 0x2f6], di
lea rcx, [rbp + 0x1220]
call fcn.14013ec98
lea r8, [rbp + 0x1220]
lea rdx, [rbp + 0x1990]
lea rcx, [rbp - 0x80]
call fcn.1402004c0
lea rcx, [rbp - 0x58]
cmp rcx, rax
je 0x14020c6ab
xor r8d, r8d
lea rcx, [rbp - 0x58]
mov rdx, rax
call fcn.1401de370
lea rcx, [rbp + 0x1990]
call fcn.140194614
lea rcx, [rbp + 0x1220]
call fcn.14013ec90
lea rcx, [rbp - 0x58]
call fcn.1401c2190
test rax, rax
je 0x14020c7f7
lea rcx, [rbp + 0x1148]
call fcn.140194600
lea rcx, [rbp - 0x58]
mov rbx, rdi
call fcn.1401c2190
test rax, rax
je 0x14020c72d
nop dword [rax]
nop word [rax + rax]
rdtsc
shl rdx, 0x20
lea rcx, [rbp + 0x1148]
or rax, rdx
lea rdx, [rbp - 0x62]
mov byte [rbp - 0x62], al
call fcn.14020f200
lea rcx, [rbp - 0x58]
inc rbx
call fcn.1401c2190
cmp rbx, rax
jb 0x14020c700
mov dword [rbp + 0x268], 0x440049
mov ecx, edi
mov dword [rbp + 0x26c], 0x4a0022
mov dword [rbp + 0x270], 0x76006a
mov dword [rbp + 0x274], 0x660072
mov dword [rbp + 0x278], 0x650064
mov dword [rbp + 0x27c], 0x6f006f
mov dword [rbp + 0x280], 0x49002c
mov dword [rbp + 0x284], 0x7b006f
mov dword [rbp + 0x288], 0x75
nop dword [rax]
movsxd rax, ecx
xor word [rbp + rax*2 + 0x268], cx
inc ecx
cmp ecx, 0x11
jb 0x14020c790
lea rdx, [rbp + 0x268]
mov word [rbp + 0x28a], di
lea rcx, [rbp + 0x1240]
call fcn.14013ec98
lea r8, [rbp + 0x1148]
lea rdx, [rbp + 0x1240]
lea rcx, [rbp - 0x80]
call fcn.140205010
lea rcx, [rbp + 0x1240]
call fcn.14013ec90
lea rcx, [rbp + 0x1148]
call fcn.1401c21a0
lea rcx, [rbp + 0x1148]
call fcn.140194614
lea rcx, [rbp - 0x80]
call fcn.140183f94
xor eax, eax
mov dword [rbp + 0x92c], 0x4e0053
mov word [rbp + 0x9a0], ax
mov r14d, 7
mov dword [rbp + 0x930], 0x570044
mov ecx, edi
mov dword [rbp + 0x934], 0x440053
mov dword [rbp + 0x938], 0x420054
mov dword [rbp + 0x93c], 0x5e0054
mov dword [rbp + 0x940], 0x5c0045
mov dword [rbp + 0x944], 0x39003a
mov dword [rbp + 0x948], 0x3d003d
mov dword [rbp + 0x94c], 0x7e005e
mov dword [rbp + 0x950], 0x760076
mov dword [rbp + 0x954], 0x580048
mov dword [rbp + 0x958], 0x74007f
mov dword [rbp + 0x95c], 0x76006a
mov dword [rbp + 0x960], 0x740069
mov dword [rbp + 0x964], 0x69007a
mov dword [rbp + 0x968], 0x560042
mov dword [rbp + 0x96c], 0x55004e
mov dword [rbp + 0x970], 0x510047
mov dword [rbp + 0x974], 0x40004a
mov dword [rbp + 0x978], 0x70052
mov dword [rbp + 0x97c], 0x51006d
mov dword [rbp + 0x980], 0x47005a
mov dword [rbp + 0x984], 0x5f0043
mov dword [rbp + 0x988], 0x5d004b
mov dword [rbp + 0x98c], 0x7c006c
mov dword [rbp + 0x990], 0x54005b
mov dword [rbp + 0x994], 0x540046
mov dword [rbp + 0x998], 0x5e0042
mov dword [rbp + 0x99c], 0x570057
nop dword [rax]
nop word [rax + rax]
movsxd rax, ecx
xor word [rbp + rax*2 + 0x92c], cx
inc ecx
cmp ecx, 0x3a
jb 0x14020c940
lea rdx, [rbp + 0x92c]
mov word [rbp + 0x9a0], di
lea rcx, [rbp + 0x1260]
call fcn.14013ec98
mov r9d, 0xf003f
lea r8, [rbp + 0x1260]
mov rdx, 0xffffffff80000002
lea rcx, [rbp - 0x80]
call fcn.140204e80
lea rcx, [rbp + 0x1260]
call fcn.14013ec90
mov ecx, edi
mov dword [rbp + 0x28c], 0x440049
mov dword [rbp + 0x290], 0x4a0022
mov dword [rbp + 0x294], 0x76006a
mov dword [rbp + 0x298], 0x660072
mov dword [rbp + 0x29c], 0x650064
mov dword [rbp + 0x2a0], 0x6f006f
mov dword [rbp + 0x2a4], 0x49002c
mov dword [rbp + 0x2a8], 0x7b006f
mov dword [rbp + 0x2ac], 0x75
nop dword [rax]
nop word [rax + rax]
movsxd rax, ecx
xor word [rbp + rax*2 + 0x28c], cx
inc ecx
cmp ecx, 0x11
jb 0x14020ca00
lea rdx, [rbp + 0x28c]
mov word [rbp + 0x2ae], di
lea rcx, [rbp + 0x1280]
call fcn.14013ec98
lea r8, [rbp + 0x1280]
lea rdx, [rbp + 0x1978]
lea rcx, [rbp - 0x80]
call fcn.1402004c0
mov rdx, rax
lea rcx, [rbp - 0x58]
call fcn.1401de2d0
lea rcx, [rbp + 0x1978]
call fcn.140194614
lea rcx, [rbp + 0x1280]
call fcn.14013ec90
lea rcx, [rbp - 0x58]
call fcn.1401c2190
test rax, rax
je 0x14020cb97
lea rcx, [rbp + 0x1130]
call fcn.140194600
lea rcx, [rbp - 0x58]
mov rbx, rdi
call fcn.1401c2190
test rax, rax
je 0x14020cacd
nop word [rax + rax]
rdtsc
shl rdx, 0x20
lea rcx, [rbp + 0x1130]
or rax, rdx
lea rdx, [rbp - 0x61]
mov byte [rbp - 0x61], al
call fcn.14020f200
lea rcx, [rbp - 0x58]
inc rbx
call fcn.1401c2190
cmp rbx, rax
jb 0x14020caa0
mov dword [rbp + 0x2b0], 0x440049
mov ecx, edi
mov dword [rbp + 0x2b4], 0x4a0022
mov dword [rbp + 0x2b8], 0x76006a
mov dword [rbp + 0x2bc], 0x660072
mov dword [rbp + 0x2c0], 0x650064
mov dword [rbp + 0x2c4], 0x6f006f
mov dword [rbp + 0x2c8], 0x49002c
mov dword [rbp + 0x2cc], 0x7b006f
mov dword [rbp + 0x2d0], 0x75
nop dword [rax]
movsxd rax, ecx
xor word [rbp + rax*2 + 0x2b0], cx
inc ecx
cmp ecx, 0x11
jb 0x14020cb30
lea rdx, [rbp + 0x2b0]
mov word [rbp + 0x2d2], di
lea rcx, [rbp + 0x12a0]
call fcn.14013ec98
lea r8, [rbp + 0x1130]
lea rdx, [rbp + 0x12a0]
lea rcx, [rbp - 0x80]
call fcn.140205010
lea rcx, [rbp + 0x12a0]
call fcn.14013ec90
lea rcx, [rbp + 0x1130]
call fcn.1401c21a0
lea rcx, [rbp + 0x1130]
call fcn.140194614
lea rcx, [rbp - 0x80]
call fcn.140183f94
xor eax, eax
mov dword [rbp + 0x662], 0x4e0053
mov word [rbp + 0x6ba], ax
mov ecx, edi
mov dword [rbp + 0x666], 0x570044
mov dword [rbp + 0x66a], 0x440053
mov dword [rbp + 0x66e], 0x420054
mov dword [rbp + 0x672], 0x440054
mov dword [rbp + 0x676], 0x680063
mov dword [rbp + 0x67a], 0x62007e
mov dword [rbp + 0x67e], 0x60007d
mov dword [rbp + 0x682], 0x650076
mov dword [rbp + 0x686], 0x44004e
mov dword [rbp + 0x68a], 0x7b007d
mov dword [rbp + 0x68e], 0x780072
mov dword [rbp + 0x692], 0x6a006f
mov dword [rbp + 0x696], 0x55003a
mov dword [rbp + 0x69a], 0x410048
mov dword [rbp + 0x69e], 0x6a005d
mov dword [rbp + 0x6a2], 0x530052
mov dword [rbp + 0x6a6], 0x4d0047
mov dword [rbp + 0x6aa], 0x730050
mov dword [rbp + 0x6ae], 0x550043
mov dword [rbp + 0x6b2], 0x40005b
mov dword [rbp + 0x6b6], 0x450045
nop word [rax + rax]
movsxd rax, ecx
xor word [rbp + rax*2 + 0x662], cx
inc ecx
cmp ecx, 0x2c
jb 0x14020cc90
lea rdx, [rbp + 0x662]
mov word [rbp + 0x6ba], di
lea rcx, [rbp + 0x12c0]
call fcn.14013ec98
mov r9d, 0xf003f
lea r8, [rbp + 0x12c0]
mov rdx, 0xffffffff80000002
lea rcx, [rbp - 0x80]
call fcn.140204e80
lea rcx, [rbp + 0x12c0]
call fcn.14013ec90
mov ecx, edi
mov dword [rbp + 0xf0], 0x6f0049
mov dword [rbp + 0xf4], 0x770071
mov dword [rbp + 0xf8], 0x690065
mov dword [rbp + 0xfc], 0x53006a
mov dword [rbp + 0x100], 0x640061
mov dword [rbp + 0x104], 0x6f
nop dword [rax]
nop word [rax + rax]
movsxd rax, ecx
xor word [rbp + rax*2 + 0xf0], cx
inc ecx
cmp ecx, 0xb
jb 0x14020cd30
lea rdx, [rbp + 0xf0]
mov word [rbp + 0x106], di
lea rcx, [rbp + 0x12e0]
call fcn.14013ec98
lea rdx, [rbp + 0x12e0]
lea rcx, [rbp - 0x80]
call fcn.140205050
lea rcx, [rbp + 0x12e0]
mov rbx, rax
call fcn.14013ec90
test rbx, rbx
je 0x14020ce2f
rdtsc
shl rdx, 0x20
mov ecx, edi
or rax, rdx
mov dword [rbp + 0x150], 0x6f0049
mov qword [rbp + 0x10a8], rax
mov dword [rbp + 0x154], 0x770071
mov dword [rbp + 0x158], 0x690065
mov dword [rbp + 0x15c], 0x53006a
mov dword [rbp + 0x160], 0x640061
mov dword [rbp + 0x164], 0x6f
nop dword [rax]
nop word [rax + rax]
movsxd rax, ecx
xor word [rbp + rax*2 + 0x150], cx
inc ecx
cmp ecx, 0xb
jb 0x14020cde0
lea rdx, [rbp + 0x150]
mov word [rbp + 0x166], di
lea rcx, [rbp + 0x1300]
call fcn.14013ec98
lea r8, [rbp + 0x10a8]
lea rdx, [rbp + 0x1300]
lea rcx, [rbp - 0x80]
call fcn.140204f10
lea rcx, [rbp + 0x1300]
call fcn.14013ec90
mov dword [rbp + 0x180], 0x6f0049
mov ecx, edi
mov dword [rbp + 0x184], 0x770071
mov dword [rbp + 0x188], 0x690065
mov dword [rbp + 0x18c], 0x43006a
mov dword [rbp + 0x190], 0x7d0069
mov dword [rbp + 0x194], 0x6f
nop dword [rax]
movsxd rax, ecx
xor word [rbp + rax*2 + 0x180], cx
inc ecx
cmp ecx, 0xb
jb 0x14020ce70
lea rdx, [rbp + 0x180]
mov word [rbp + 0x196], di
lea rcx, [rbp + 0x1320]
call fcn.14013ec98
lea rdx, [rbp + 0x1320]
lea rcx, [rbp - 0x80]
call fcn.14019c88c
lea rcx, [rbp + 0x1320]
mov ebx, eax
call fcn.14013ec90
test ebx, ebx
je 0x14020cf54
mov dword [rbp + 0x168], 0x6f0049
mov ecx, edi
mov dword [rbp + 0x16c], 0x770071
mov dword [rbp + 0x170], 0x690065
mov dword [rbp + 0x174], 0x43006a
mov dword [rbp + 0x178], 0x7d0069
mov dword [rbp + 0x17c], 0x6f
movsxd rax, ecx
xor word [rbp + rax*2 + 0x168], cx
inc ecx
cmp ecx, 0xb
jb 0x14020cf00
lea rdx, [rbp + 0x168]
mov word [rbp + 0x17e], di
lea rcx, [rbp + 0x1340]
call fcn.14013ec98
rdtsc
shl rdx, 0x20
lea rcx, [rbp - 0x80]
or rax, rdx
lea rdx, [rbp + 0x1340]
mov r8, rax
call fcn.140200480
lea rcx, [rbp + 0x1340]
call fcn.14013ec90
lea rcx, [rbp - 0x80]
call fcn.140183f94
mov ecx, edi
mov dword [rbp + 0xf12], 0x4e0053
mov dword [rbp + 0xf16], 0x570044
mov dword [rbp + 0xf1a], 0x440053
mov dword [rbp + 0xf1e], 0x420054
mov dword [rbp + 0xf22], 0x440054
mov dword [rbp + 0xf26], 0x680063
mov dword [rbp + 0xf2a], 0x62007e
mov dword [rbp + 0xf2e], 0x60007d
mov dword [rbp + 0xf32], 0x650076
mov dword [rbp + 0xf36], 0x44004e
mov dword [rbp + 0xf3a], 0x7b007d
mov dword [rbp + 0xf3e], 0x780072
mov dword [rbp + 0xf42], 0x6a006f
mov dword [rbp + 0xf46], 0x55003a
mov dword [rbp + 0xf4a], 0x410048
mov dword [rbp + 0xf4e], 0x6a005d
mov dword [rbp + 0xf52], 0x530052
mov dword [rbp + 0xf56], 0x4d0047
mov dword [rbp + 0xf5a], 0x730050
mov dword [rbp + 0xf5e], 0x550043
mov dword [rbp + 0xf62], 0x40005b
mov dword [rbp + 0xf66], 0x450045
mov dword [rbp + 0xf6a], 0x7e0070
mov dword [rbp + 0xf6e], 0x490041
mov dword [rbp + 0xf72], 0x460044
mov dword [rbp + 0xf76], 0x410053
mov dword [rbp + 0xf7a], 0x650051
mov dword [rbp + 0xf7e], 0x580044
mov dword [rbp + 0xf82], 0x5c004c
mov dword [rbp + 0xf86], 0x4f0059
mov dword [rbp + 0xf8a], 0x520055
mov dword [rbp + 0xf8e], 0x6f0050
mov dword [rbp + 0xf92], 0x20002c
mov dword [rbp + 0xf96], 0x250036
mov dword [rbp + 0xf9a], 0x37002b
mov dword [rbp + 0xf9e], 0x2b
nop word [rax + rax]
movsxd rax, ecx
xor word [rbp + rax*2 + 0xf12], cx
inc ecx
cmp ecx, 0x47
jb 0x14020d0d0
lea rdx, [rbp + 0xf12]
mov word [rbp + 0xfa0], di
lea rcx, [rbp + 0x1360]
call fcn.14013ec98
mov r9d, 0xf003f
lea r8, [rbp + 0x1360]
mov rdx, 0xffffffff80000002
lea rcx, [rbp - 0x80]
call fcn.140204e80
lea rcx, [rbp + 0x1360]
call fcn.14013ec90
mov ecx, edi
mov dword [rbp + 0x444], 0x600042
mov dword [rbp + 0x448], 0x680061
mov dword [rbp + 0x44c], 0x750071
mov dword [rbp + 0x450], 0x750056
mov dword [rbp + 0x454], 0x6d0067
mov dword [rbp + 0x458], 0x68007f
mov dword [rbp + 0x45c], 0x460078
mov dword [rbp + 0x460], 0x76006b
mov dword [rbp + 0x464], 0x740054
mov dword [rbp + 0x468], 0x720074
mov dword [rbp + 0x46c], 0x790061
mov dword [rbp + 0x470], 0x62
nop
movsxd rax, ecx
xor word [rbp + rax*2 + 0x444], cx
inc ecx
cmp ecx, 0x17
jb 0x14020d1a0
lea rdx, [rbp + 0x444]
mov word [rbp + 0x472], di
lea rcx, [rbp + 0x1380]
call fcn.14013ec98
lea r8, [rbp + 0x1380]
lea rdx, [rbp + 0x1a80]
lea rcx, [rbp - 0x80]
call fcn.140184080
mov rdx, rax
lea rcx, [rbp + 0x198]
call fcn.1401947d8
lea rcx, [rbp + 0x1a80]
call fcn.14013ec90
lea rcx, [rbp + 0x1380]
call fcn.14013ec90
lea rcx, [rbp + 0x198]
call fcn.1401947d0
test rax, rax
je 0x14020d61d
lea rcx, [rbp - 0x18]
call fcn.140194600
mov esi, 0xe
mov ebx, esi
nop
rdtsc
shl rdx, 0x20
lea rcx, [rbp - 0x18]
or rax, rdx
lea rdx, [rbp - 0x60]
mov byte [rbp - 0x60], al
call fcn.14020f200
sub rbx, 1
jne 0x14020d230
mov rdx, rsi
mov word [rbp + 0x28e0], di
lea rcx, [rbp - 0x18]
call fcn.1401a6480
mov edx, 0xd
lea rcx, [rbp - 0x18]
movzx ebx, byte [rax]
and ebx, 0xf
call fcn.1401a6480
mov edx, 0xc
lea rcx, [rbp - 0x18]
movzx r15d, byte [rax]
call fcn.1401a6480
mov edx, 0xb
lea rcx, [rbp - 0x18]
movzx r12d, byte [rax]
call fcn.1401a6480
mov edx, 0xa
lea rcx, [rbp - 0x18]
movzx edi, byte [rax]
and edi, 0xf
call fcn.1401a6480
mov edx, 9
lea rcx, [rbp - 0x18]
movzx r13d, byte [rax]
call fcn.1401a6480
mov edx, 8
lea rcx, [rbp - 0x18]
movzx eax, byte [rax]
mov dword [rbp - 0x6c], eax
call fcn.1401a6480
mov rdx, r14
lea rcx, [rbp - 0x18]
movzx esi, byte [rax]
and esi, 0xf
call fcn.1401a6480
mov edx, 6
lea rcx, [rbp - 0x18]
movzx eax, byte [rax]
mov dword [rbp - 0x78], eax
call fcn.1401a6480
mov edx, 5
lea rcx, [rbp - 0x18]
movzx eax, byte [rax]
mov dword [rbp - 0x70], eax
call fcn.1401a6480
mov edx, 4
lea rcx, [rbp - 0x18]
movzx r14d, byte [rax]
and r14d, 0xf
call fcn.1401a6480
mov edx, 3
lea rcx, [rbp - 0x18]
movzx eax, byte [rax]
mov dword [rbp - 0x74], eax
call fcn.1401a6480
mov edx, 2
lea rcx, [rbp - 0x18]
movzx eax, byte [rax]
mov dword [rbp - 0x38], eax
call fcn.1401a6480
mov edx, 1
lea rcx, [rbp - 0x18]
movzx eax, byte [rax]
mov dword [rbp - 0x40], eax
call fcn.1401a6480
xor edx, edx
lea rcx, [rbp - 0x18]
movzx eax, byte [rax]
mov dword [rbp - 0x3c], eax
call fcn.1401a6480
movzx r8d, byte [rax]
mov dword [rbp + 0x84a], 0x310025
mov dword [rbp + 0x84e], 0x5b0030
mov dword [rbp + 0x852], 0x350021
mov dword [rbp + 0x856], 0x5f0034
mov dword [rbp + 0x85a], 0x39002d
mov dword [rbp + 0x85e], 0x530038
mov dword [rbp + 0x862], 0x280021
mov dword [rbp + 0x866], 0x3d003e
mov dword [rbp + 0x86a], 0x340048
xor edx, edx
mov dword [rbp + 0x86e], 0x210022
xor eax, eax
mov dword [rbp + 0x872], 0x30004c
mov word [rbp + 0x8ba], ax
mov ecx, edx
mov dword [rbp + 0x876], 0x3a004e
mov dword [rbp + 0x87a], 0x29003d
mov dword [rbp + 0x87e], 0x430028
mov dword [rbp + 0x882], 0x2d0039
mov dword [rbp + 0x886], 0x47002c
mov dword [rbp + 0x88a], 0x790005
mov dword [rbp + 0x88e], 0x6000f
mov dword [rbp + 0x892], 0x170014
mov dword [rbp + 0x896], 0x2007e
mov dword [rbp + 0x89a], 0x1b0018
mov dword [rbp + 0x89e], 0xe0072
mov dword [rbp + 0x8a2], 0x74
mov dword [rbp + 0x8a6], 0x1f000b
mov dword [rbp + 0x8aa], 0x690002
mov dword [rbp + 0x8ae], 0x30017
mov dword [rbp + 0x8b2], 0x6d0006
mov dword [rbp + 0x8b6], 0x6f0013
nop word [rax + rax]
movsxd rax, ecx
xor word [rbp + rax*2 + 0x84a], cx
inc ecx
cmp ecx, 0x38
jb 0x14020d4a0
mov eax, dword [rbp - 0x6c]
lea rcx, [rbp + 0x28e0]
mov r9d, dword [rbp - 0x3c]
mov dword [rsp + 0x80], ebx
mov dword [rsp + 0x78], r15d
mov dword [rsp + 0x70], r12d
mov dword [rsp + 0x68], edi
mov dword [rsp + 0x60], r13d
mov dword [rsp + 0x58], eax
mov eax, dword [rbp - 0x78]
mov dword [rsp + 0x50], esi
mov dword [rsp + 0x48], eax
mov eax, dword [rbp - 0x70]
mov dword [rsp + 0x40], eax
mov eax, dword [rbp - 0x74]
mov dword [rsp + 0x38], r14d
mov dword [rsp + 0x30], eax
mov eax, dword [rbp - 0x38]
mov dword [rsp + 0x28], eax
mov eax, dword [rbp - 0x40]
mov word [rbp + 0x8ba], dx
lea rdx, [rbp + 0x84a]
mov dword [rsp + 0x20], eax
call fcn.140200420
lea rdx, [rbp + 0x28e0]
lea rcx, [rbp + 0x13c0]
call fcn.14013ec98
xor edi, edi
mov dword [rbp + 0x474], 0x600042
mov ecx, edi
mov dword [rbp + 0x478], 0x680061
mov dword [rbp + 0x47c], 0x750071
mov dword [rbp + 0x480], 0x750056
mov dword [rbp + 0x484], 0x6d0067
mov dword [rbp + 0x488], 0x68007f
mov dword [rbp + 0x48c], 0x460078
mov dword [rbp + 0x490], 0x76006b
mov dword [rbp + 0x494], 0x740054
mov dword [rbp + 0x498], 0x720074
mov dword [rbp + 0x49c], 0x790061
mov dword [rbp + 0x4a0], 0x62
nop dword [rax]
movsxd rax, ecx
xor word [rbp + rax*2 + 0x474], cx
inc ecx
cmp ecx, 0x17
jb 0x14020d5b0
lea rdx, [rbp + 0x474]
mov word [rbp + 0x4a2], di
lea rcx, [rbp + 0x13a0]
call fcn.14013ec98
lea r8, [rbp + 0x13c0]
lea rdx, [rbp + 0x13a0]
lea rcx, [rbp - 0x80]
call fcn.140204f50
lea rcx, [rbp + 0x13a0]
call fcn.14013ec90
lea rcx, [rbp + 0x13c0]
call fcn.14013ec90
lea rcx, [rbp - 0x18]
call fcn.1401c21a0
lea rcx, [rbp - 0x18]
call fcn.140194614
lea rcx, [rbp - 0x80]
call fcn.140183f94
xor eax, eax
mov dword [rbp + 0x5d0], 0x4e0053
mov word [rbp + 0x614], ax
mov ecx, edi
mov dword [rbp + 0x5d4], 0x570044
mov dword [rbp + 0x5d8], 0x440053
mov dword [rbp + 0x5dc], 0x420054
mov dword [rbp + 0x5e0], 0x470054
mov dword [rbp + 0x5e4], 0x42005c
mov dword [rbp + 0x5e8], 0x440048
mov dword [rbp + 0x5ec], 0x2f004f
mov dword [rbp + 0x5f0], 0x7e0053
mov dword [rbp + 0x5f4], 0x630060
mov dword [rbp + 0x5f8], 0x67007b
mov dword [rbp + 0x5fc], 0x630077
mov dword [rbp + 0x600], 0x760071
mov dword [rbp + 0x604], 0x470074
mov dword [rbp + 0x608], 0x71005b
mov dword [rbp + 0x60c], 0x7d0071
mov dword [rbp + 0x610], 0x4d0041
nop dword [rax + rax]
movsxd rax, ecx
xor word [rbp + rax*2 + 0x5d0], cx
inc ecx
cmp ecx, 0x22
jb 0x14020d6e0
lea rdx, [rbp + 0x5d0]
mov word [rbp + 0x614], di
lea rcx, [rbp + 0x13e0]
call fcn.14013ec98
mov r9d, 0xf003f
lea r8, [rbp + 0x13e0]
mov rdx, 0xffffffff80000002
lea rcx, [rbp - 0x80]
call fcn.140204e80
lea rcx, [rbp + 0x13e0]
call fcn.14013ec90
xor eax, eax
mov dword [rbp + 0x6a], 0x6d0043
mov word [rbp + 0x7e], ax
mov ecx, edi
mov dword [rbp + 0x6e], 0x66006b
mov dword [rbp + 0x72], 0x71006a
mov dword [rbp + 0x76], 0x520053
mov dword [rbp + 0x7a], 0x4d0041
movsxd rax, ecx
xor word [rbp + rax*2 + 0x6a], cx
inc ecx
cmp ecx, 0xa
jb 0x14020d760
lea rdx, [rbp + 0x6a]
mov word [rbp + 0x7e], di
lea rcx, [rbp + 0x1400]
call fcn.14013ec98
lea r8, [rbp + 0x1400]
lea rdx, [rbp + 0x1aa0]
lea rcx, [rbp - 0x80]
call fcn.140184080
mov rdx, rax
lea rcx, [rbp + 0x198]
call fcn.1401947d8
lea rcx, [rbp + 0x1aa0]
call fcn.14013ec90
lea rcx, [rbp + 0x1400]
call fcn.14013ec90
lea rcx, [rbp + 0x198]
call fcn.1401947d0
test rax, rax
je 0x14020dbe4
lea rcx, [rbp - 0x30]
call fcn.140194600
mov esi, 0xf
mov ebx, esi
nop word [rax + rax]
rdtsc
shl rdx, 0x20
lea rcx, [rbp - 0x30]
or rax, rdx
lea rdx, [rbp - 0x5f]
mov byte [rbp - 0x5f], al
call fcn.14020f200
sub rbx, 1
jne 0x14020d7f0
mov rdx, rsi
mov word [rbp + 0x2ae0], di
lea rcx, [rbp - 0x30]
call fcn.1401a6480
mov edx, 0xe
lea rcx, [rbp - 0x30]
movzx ebx, byte [rax]
call fcn.1401a6480
mov edx, 0xd
lea rcx, [rbp - 0x30]
movzx edi, byte [rax]
call fcn.1401a6480
mov edx, 0xc
lea rcx, [rbp - 0x30]
movzx esi, byte [rax]
call fcn.1401a6480
mov edx, 0xb
lea rcx, [rbp - 0x30]
movzx r14d, byte [rax]
call fcn.1401a6480
mov edx, 0xa
lea rcx, [rbp - 0x30]
movzx r15d, byte [rax]
call fcn.1401a6480
mov edx, 9
lea rcx, [rbp - 0x30]
movzx r12d, byte [rax]
call fcn.1401a6480
mov edx, 8
lea rcx, [rbp - 0x30]
movzx r13d, byte [rax]
call fcn.1401a6480
mov edx, 7
lea rcx, [rbp - 0x30]
movzx eax, byte [rax]
mov dword [rbp - 0x3c], eax
call fcn.1401a6480
mov edx, 6
lea rcx, [rbp - 0x30]
movzx eax, byte [rax]
mov dword [rbp - 0x40], eax
call fcn.1401a6480
mov edx, 5
lea rcx, [rbp - 0x30]
movzx eax, byte [rax]
mov dword [rbp - 0x38], eax
call fcn.1401a6480
mov edx, 4
lea rcx, [rbp - 0x30]
movzx eax, byte [rax]
mov dword [rbp - 0x6c], eax
call fcn.1401a6480
mov edx, 3
lea rcx, [rbp - 0x30]
movzx eax, byte [rax]
mov dword [rbp - 0x78], eax
call fcn.1401a6480
mov edx, 2
lea rcx, [rbp - 0x30]
movzx eax, byte [rax]
mov dword [rbp - 0x70], eax
call fcn.1401a6480
mov edx, 1
lea rcx, [rbp - 0x30]
movzx eax, byte [rax]
mov dword [rbp - 0x74], eax
call fcn.1401a6480
xor edx, edx
lea rcx, [rbp - 0x30]
movzx eax, byte [rax]
mov dword [rbp + 0xfa4], eax
call fcn.1401a6480
movzx r8d, byte [rax]
mov dword [rbp + 0xab6], 0x24007b
mov dword [rbp + 0xaba], 0x310032
mov dword [rbp + 0xabe], 0x20005c
mov dword [rbp + 0xac2], 0x350036
mov dword [rbp + 0xac6], 0x2c0050
mov dword [rbp + 0xaca], 0x39003a
mov dword [rbp + 0xace], 0x280054
mov dword [rbp + 0xad2], 0x3d003e
xor eax, eax
mov dword [rbp + 0xad6], 0x3c0048
xor edx, edx
mov dword [rbp + 0xada], 0x230037
mov ecx, edx
mov dword [rbp + 0xade], 0x4d0026
mov dword [rbp + 0xae2], 0x270033
mov dword [rbp + 0xae6], 0x41002a
mov dword [rbp + 0xaea], 0x3e0037
mov dword [rbp + 0xaee], 0x2f002c
mov dword [rbp + 0xaf2], 0x3a0046
mov dword [rbp + 0xaf6], 0x130010
mov dword [rbp + 0xafa], 0xe007a
mov dword [rbp + 0xafe], 0x150001
mov dword [rbp + 0xb02], 0x7f0014
mov dword [rbp + 0xb06], 0x19000d
mov dword [rbp + 0xb0a], 0x730018
mov dword [rbp + 0xb0e], 0x80001
mov dword [rbp + 0xb12], 0x1d001e
mov dword [rbp + 0xb16], 0x140068
mov dword [rbp + 0xb1a], 0x10002
mov dword [rbp + 0xb1e], 0x10006c
mov dword [rbp + 0xb22], 0x50006
mov dword [rbp + 0xb26], 0x1c0060
mov dword [rbp + 0xb2a], 0x9000a
mov dword [rbp + 0xb2e], 0x180064
mov dword [rbp + 0xb32], 0xd000e
mov dword [rbp + 0xb36], 0x640018
mov dword [rbp + 0xb3a], 0x710072
mov dword [rbp + 0xb3e], 0x38001c
mov word [rbp + 0xb42], ax
nop dword [rax]
movsxd rax, ecx
xor word [rbp + rax*2 + 0xab6], cx
inc ecx
cmp ecx, 0x46
jb 0x14020dab0
mov eax, dword [rbp - 0x3c]
lea rcx, [rbp + 0x2ae0]
mov r9d, dword [rbp + 0xfa4]
mov dword [rsp + 0x88], ebx
mov dword [rsp + 0x80], edi
mov dword [rsp + 0x78], esi
mov dword [rsp + 0x70], r14d
mov dword [rsp + 0x68], r15d
mov dword [rsp + 0x60], r12d
mov dword [rsp + 0x58], r13d
mov dword [rsp + 0x50], eax
mov eax, dword [rbp - 0x40]
mov dword [rsp + 0x48], eax
mov eax, dword [rbp - 0x38]
mov dword [rsp + 0x40], eax
mov eax, dword [rbp - 0x6c]
mov dword [rsp + 0x38], eax
mov eax, dword [rbp - 0x78]
mov dword [rsp + 0x30], eax
mov eax, dword [rbp - 0x70]
mov dword [rsp + 0x28], eax
mov eax, dword [rbp - 0x74]
mov word [rbp + 0xb42], dx
lea rdx, [rbp + 0xab6]
mov dword [rsp + 0x20], eax
call fcn.140200420
lea rdx, [rbp + 0x2ae0]
lea rcx, [rbp + 0x1440]
call fcn.14013ec98
xor eax, eax
mov dword [rbp + 0x28], 0x6d0043
xor edi, edi
mov dword [rbp + 0x2c], 0x66006b
mov ecx, edi
mov dword [rbp + 0x30], 0x71006a
mov dword [rbp + 0x34], 0x520053
mov dword [rbp + 0x38], 0x4d0041
mov word [rbp + 0x3c], ax
nop word [rax + rax]
movsxd rax, ecx
xor word [rbp + rax*2 + 0x28], cx
inc ecx
cmp ecx, 0xa
jb 0x14020db80
lea rdx, [rbp + 0x28]
mov word [rbp + 0x3c], di
lea rcx, [rbp + 0x1420]
call fcn.14013ec98
lea r8, [rbp + 0x1440]
lea rdx, [rbp + 0x1420]
lea rcx, [rbp - 0x80]
call fcn.140204f50
lea rcx, [rbp + 0x1420]
call fcn.14013ec90
lea rcx, [rbp + 0x1440]
call fcn.14013ec90
lea rcx, [rbp - 0x30]
call fcn.1401c21a0
lea rcx, [rbp - 0x30]
call fcn.140194614
lea rcx, [rbp - 0x80]
call fcn.140183f94
xor eax, eax
mov dword [rbp + 0x71a], 0x4e0053
mov word [rbp + 0x77a], ax
mov ecx, edi
mov dword [rbp + 0x71e], 0x570044
mov dword [rbp + 0x722], 0x440053
mov dword [rbp + 0x726], 0x420054
mov dword [rbp + 0x72a], 0x470054
mov dword [rbp + 0x72e], 0x42005c
mov dword [rbp + 0x732], 0x440048
mov dword [rbp + 0x736], 0x2f004f
mov dword [rbp + 0x73a], 0x7e0053
mov dword [rbp + 0x73e], 0x630060
mov dword [rbp + 0x742], 0x67007b
mov dword [rbp + 0x746], 0x630077
mov dword [rbp + 0x74a], 0x760071
mov dword [rbp + 0x74e], 0x470074
mov dword [rbp + 0x752], 0x71005b
mov dword [rbp + 0x756], 0x7d0071
mov dword [rbp + 0x75a], 0x4d0041
mov dword [rbp + 0x75e], 0x60007e
mov dword [rbp + 0x762], 0x75004b
mov dword [rbp + 0x766], 0x480054
mov dword [rbp + 0x76a], 0x64004b
mov dword [rbp + 0x76e], 0x45004b
mov dword [rbp + 0x772], 0x4a004d
mov dword [rbp + 0x776], 0x5d004b
nop dword [rax + rax]
movsxd rax, ecx
xor word [rbp + rax*2 + 0x71a], cx
inc ecx
cmp ecx, 0x30
jb 0x14020dcf0
lea rdx, [rbp + 0x71a]
mov word [rbp + 0x77a], di
lea rcx, [rbp + 0x1460]
call fcn.14013ec98
mov r9d, 0xf003f
lea r8, [rbp + 0x1460]
mov rdx, 0xffffffff80000002
lea rcx, [rbp - 0x80]
call fcn.140204e80
lea rcx, [rbp + 0x1460]
call fcn.14013ec90
xor eax, eax
mov dword [rbp + 0x20e], 0x690043
mov word [rbp + 0x22a], ax
mov ecx, edi
mov dword [rbp + 0x212], 0x73006b
mov dword [rbp + 0x216], 0x600077
mov dword [rbp + 0x21a], 0x4a0072
mov dword [rbp + 0x21e], 0x7d0069
mov dword [rbp + 0x222], 0x630069
mov dword [rbp + 0x226], 0x490045
nop word [rax + rax]
movsxd rax, ecx
xor word [rbp + rax*2 + 0x20e], cx
inc ecx
cmp ecx, 0xe
jb 0x14020dda0
lea rdx, [rbp + 0x20e]
mov word [rbp + 0x22a], di
lea rcx, [rbp + 0x1480]
call fcn.14013ec98
lea r8, [rbp + 0x1480]
lea rdx, [rbp + 0x1ac0]
lea rcx, [rbp - 0x80]
call fcn.140184080
mov rdx, rax
lea rcx, [rbp + 0x198]
call fcn.1401947d8
lea rcx, [rbp + 0x1ac0]
call fcn.14013ec90
lea rcx, [rbp + 0x1480]
call fcn.14013ec90
lea rcx, [rbp + 0x198]
call fcn.1401947d0
test rax, rax
je 0x14020e0d3
lea rcx, [rbp + 0xfa8]
call fcn.140194600
mov ebx, 7
rdtsc
shl rdx, 0x20
lea rcx, [rbp + 0xfa8]
or rax, rdx
lea rdx, [rbp - 0x5e]
mov byte [rbp - 0x5e], al
call fcn.14020f200
sub rbx, 1
jne 0x14020de30
lea edx, [rbx + 7]
mov word [rbp + 0x2ce0], di
lea rcx, [rbp + 0xfa8]
call fcn.1401a6480
mov edx, 6
lea rcx, [rbp + 0xfa8]
movzx ebx, byte [rax]
call fcn.1401a6480
mov edx, 5
lea rcx, [rbp + 0xfa8]
movzx edi, byte [rax]
call fcn.1401a6480
mov edx, 4
lea rcx, [rbp + 0xfa8]
movzx esi, byte [rax]
call fcn.1401a6480
mov edx, 3
lea rcx, [rbp + 0xfa8]
movzx r14d, byte [rax]
call fcn.1401a6480
mov edx, 2
lea rcx, [rbp + 0xfa8]
movzx r15d, byte [rax]
call fcn.1401a6480
mov edx, 1
lea rcx, [rbp + 0xfa8]
movzx r12d, byte [rax]
call fcn.1401a6480
xor edx, edx
lea rcx, [rbp + 0xfa8]
movzx r13d, byte [rax]
call fcn.1401a6480
movzx r8d, byte [rax]
xor eax, eax
xor edx, edx
mov dword [rbp + 0x58e], 0x310025
mov ecx, edx
mov dword [rbp + 0x592], 0x5b0030
mov dword [rbp + 0x596], 0x350021
mov dword [rbp + 0x59a], 0x5f0034
mov dword [rbp + 0x59e], 0x39002d
mov dword [rbp + 0x5a2], 0x530038
mov dword [rbp + 0x5a6], 0x3d0029
mov dword [rbp + 0x5aa], 0x57003c
mov dword [rbp + 0x5ae], 0x210035
mov dword [rbp + 0x5b2], 0x4b0020
mov dword [rbp + 0x5b6], 0x250031
mov dword [rbp + 0x5ba], 0x4f0024
mov dword [rbp + 0x5be], 0x29003d
mov dword [rbp + 0x5c2], 0x430028
mov dword [rbp + 0x5c6], 0x2d0039
mov dword [rbp + 0x5ca], 0x47002c
mov word [rbp + 0x5ce], ax
nop word [rax + rax]
movsxd rax, ecx
xor word [rbp + rax*2 + 0x58e], cx
inc ecx
cmp ecx, 0x20
jb 0x14020dfb0
mov dword [rsp + 0x48], ebx
lea rcx, [rbp + 0x2ce0]
mov dword [rsp + 0x40], edi
mov r9d, r13d
mov dword [rsp + 0x38], esi
mov dword [rsp + 0x30], r14d
mov word [rbp + 0x5ce], dx
lea rdx, [rbp + 0x58e]
mov dword [rsp + 0x28], r15d
mov dword [rsp + 0x20], r12d
call fcn.140200420
lea rdx, [rbp + 0x2ce0]
lea rcx, [rbp + 0x14c0]
call fcn.14013ec98
xor eax, eax
mov dword [rbp + 0x1f0], 0x690043
xor edx, edx
mov dword [rbp + 0x1f4], 0x73006b
mov ecx, edx
mov dword [rbp + 0x1f8], 0x600077
mov dword [rbp + 0x1fc], 0x4a0072
mov dword [rbp + 0x200], 0x7d0069
mov dword [rbp + 0x204], 0x630069
mov dword [rbp + 0x208], 0x490045
mov word [rbp + 0x20c], ax
movsxd rax, ecx
xor word [rbp + rax*2 + 0x1f0], cx
inc ecx
cmp ecx, 0xe
jb 0x14020e060
mov word [rbp + 0x20c], dx
lea rcx, [rbp + 0x14a0]
lea rdx, [rbp + 0x1f0]
call fcn.14013ec98
lea r8, [rbp + 0x14c0]
lea rdx, [rbp + 0x14a0]
lea rcx, [rbp - 0x80]
call fcn.140204f50
lea rcx, [rbp + 0x14a0]
call fcn.14013ec90
lea rcx, [rbp + 0x14c0]
call fcn.14013ec90
lea rcx, [rbp + 0xfa8]
call fcn.1401c21a0
lea rcx, [rbp + 0xfa8]
call fcn.140194614
lea rcx, [rbp - 0x80]
call fcn.140183f94
lea rcx, [rbp + 0x198]
call fcn.14013ec90
lea rcx, [rbp - 0x58]
call fcn.140194614
lea rcx, [rbp - 0x80]
call fcn.140183f94
add rsp, 0x2ff8
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret