Function at 0x140003e76
Capabilities:
Encode data using xor
Hide graphical window

Disassembly:
push rbp
sub rsp, 0x7f0
lea rbp, [rsp + 0x80]
call fcn.140015510
movss xmm0, dword [0x14009cb84]
movss dword [rbp + 0x76c], xmm0
movss xmm0, dword [0x14009cb88]
movss dword [rbp + 0x76c], xmm0
pxor xmm0, xmm0
cvtss2sd xmm0, dword [rbp + 0x76c]
ucomisd xmm0, qword [0x14009cb90]
jp 0x140003fea
ucomisd xmm0, qword [0x14009cb90]
jne 0x140003fea
mov dword [rbp + 0x768], 0
jmp 0x140003fba
mov ecx, 0x11ea4
call fcn.140029dd0
mov qword [rbp + 0x2f8], rax
mov dword [rbp + 0x764], 0
jmp 0x140003f8a
call sub.api_ms_win_crt_utility_l1_1_0.dll_rand
mov edx, dword [rbp + 0x764]
movsxd rdx, edx
lea rcx, [rdx*4]
mov rdx, qword [rbp + 0x2f8]
lea r8, [rcx + rdx]
movsxd rdx, eax
imul rdx, rdx, 0xffffffffd722fb11
shr rdx, 0x20
add edx, eax
sar edx, 0xd
mov ecx, eax
sar ecx, 0x1f
sub edx, ecx
imul ecx, edx, 0x2614
sub eax, ecx
mov edx, eax
mov dword [r8], edx
call sub.api_ms_win_crt_utility_l1_1_0.dll_rand
pxor xmm0, xmm0
cvtsi2sd xmm0, eax
movsd xmm2, qword [0x14009cb98]
movapd xmm1, xmm0
subsd xmm1, xmm2
pxor xmm0, xmm0
cvtss2sd xmm0, dword [rbp + 0x76c]
addsd xmm0, xmm1
cvtsd2ss xmm0, xmm0
movss dword [rbp + 0x76c], xmm0
add dword [rbp + 0x764], 1
cmp dword [rbp + 0x764], 0x256
jle 0x140003f02
mov rax, qword [rbp + 0x2f8]
test rax, rax
je 0x140003fb3
mov edx, 4
mov rcx, rax
call fcn.140029dc0
add dword [rbp + 0x768], 1
cmp dword [rbp + 0x768], 0x116e
jle 0x140003ee2
movss xmm0, dword [0x14009cba0]
movss dword [rbp + 0x76c], xmm0
movss xmm0, dword [0x14009cba4]
movss dword [rbp + 0x76c], xmm0
pxor xmm0, xmm0
cvtss2sd xmm0, dword [rbp + 0x76c]
ucomisd xmm0, qword [0x14009cba8]
jp 0x140004127
ucomisd xmm0, qword [0x14009cba8]
jne 0x140004127
mov dword [rbp + 0x760], 0
jmp 0x1400040f7
mov ecx, 0xfd80
call fcn.140029dd0
mov qword [rbp + 0x2f0], rax
mov dword [rbp + 0x75c], 0
jmp 0x1400040c7
call sub.api_ms_win_crt_utility_l1_1_0.dll_rand
mov edx, dword [rbp + 0x75c]
movsxd rdx, edx
lea rcx, [rdx*4]
mov rdx, qword [rbp + 0x2f0]
lea r8, [rcx + rdx]
movsxd rdx, eax
imul rdx, rdx, 0x160e0af1
shr rdx, 0x20
sar edx, 9
mov ecx, eax
sar ecx, 0x1f
sub edx, ecx
imul ecx, edx, 0x1737
sub eax, ecx
mov edx, eax
mov dword [r8], edx
call sub.api_ms_win_crt_utility_l1_1_0.dll_rand
pxor xmm0, xmm0
cvtsi2sd xmm0, eax
movsd xmm2, qword [0x14009cbb0]
movapd xmm1, xmm0
subsd xmm1, xmm2
pxor xmm0, xmm0
cvtss2sd xmm0, dword [rbp + 0x76c]
addsd xmm0, xmm1
cvtsd2ss xmm0, xmm0
movss dword [rbp + 0x76c], xmm0
add dword [rbp + 0x75c], 1
cmp dword [rbp + 0x75c], 0x9c
jle 0x140004041
mov rax, qword [rbp + 0x2f0]
test rax, rax
je 0x1400040f0
mov edx, 4
mov rcx, rax
call fcn.140029dc0
add dword [rbp + 0x760], 1
cmp dword [rbp + 0x760], 0xc79
jle 0x140004021
movss xmm0, dword [0x14009cbb8]
movss dword [rbp + 0x76c], xmm0
movss xmm0, dword [0x14009cbbc]
movss dword [rbp + 0x76c], xmm0
pxor xmm0, xmm0
cvtss2sd xmm0, dword [rbp + 0x76c]
ucomisd xmm0, qword [0x14009cbc0]
jp 0x140004264
ucomisd xmm0, qword [0x14009cbc0]
jne 0x140004264
mov dword [rbp + 0x758], 0
jmp 0x140004234
mov ecx, 0x1d124
call fcn.140029dd0
mov qword [rbp + 0x2e8], rax
mov dword [rbp + 0x754], 0
jmp 0x140004204
call sub.api_ms_win_crt_utility_l1_1_0.dll_rand
mov edx, dword [rbp + 0x754]
movsxd rdx, edx
lea rcx, [rdx*4]
mov rdx, qword [rbp + 0x2e8]
lea r8, [rcx + rdx]
movsxd rdx, eax
imul rdx, rdx, 0xacb8051
shr rdx, 0x20
sar edx, 9
mov ecx, eax
sar ecx, 0x1f
sub edx, ecx
imul ecx, edx, 0x2f6e
sub eax, ecx
mov edx, eax
mov dword [r8], edx
call sub.api_ms_win_crt_utility_l1_1_0.dll_rand
pxor xmm0, xmm0
cvtsi2sd xmm0, eax
movsd xmm2, qword [0x14009cbc8]
movapd xmm1, xmm0
subsd xmm1, xmm2
pxor xmm0, xmm0
cvtss2sd xmm0, dword [rbp + 0x76c]
addsd xmm0, xmm1
cvtsd2ss xmm0, xmm0
movss dword [rbp + 0x76c], xmm0
add dword [rbp + 0x754], 1
cmp dword [rbp + 0x754], 0x11c
jle 0x14000417e
mov rax, qword [rbp + 0x2e8]
test rax, rax
je 0x14000422d
mov edx, 4
mov rcx, rax
call fcn.140029dc0
add dword [rbp + 0x758], 1
cmp dword [rbp + 0x758], 0x171c
jle 0x14000415e
movss xmm0, dword [0x14009cbd0]
movss dword [rbp + 0x76c], xmm0
movss xmm0, dword [0x14009cbd4]
movss dword [rbp + 0x76c], xmm0
pxor xmm0, xmm0
cvtss2sd xmm0, dword [rbp + 0x76c]
ucomisd xmm0, qword [0x14009cbd8]
jp 0x1400043a1
ucomisd xmm0, qword [0x14009cbd8]
jne 0x1400043a1
mov dword [rbp + 0x750], 0
jmp 0x140004371
mov ecx, 0x270a4
call fcn.140029dd0
mov qword [rbp + 0x2e0], rax
mov dword [rbp + 0x74c], 0
jmp 0x140004341
call sub.api_ms_win_crt_utility_l1_1_0.dll_rand
mov edx, dword [rbp + 0x74c]
movsxd rdx, edx
lea rcx, [rdx*4]
mov rdx, qword [rbp + 0x2e0]
lea r8, [rcx + rdx]
movsxd rdx, eax
imul rdx, rdx, 0x267e757
shr rdx, 0x20
sar edx, 7
mov ecx, eax
sar ecx, 0x1f
sub edx, ecx
imul ecx, edx, 0x3534
sub eax, ecx
mov edx, eax
mov dword [r8], edx
call sub.api_ms_win_crt_utility_l1_1_0.dll_rand
pxor xmm0, xmm0
cvtsi2sd xmm0, eax
movsd xmm2, qword [0x14009cbe0]
movapd xmm1, xmm0
subsd xmm1, xmm2
pxor xmm0, xmm0
cvtss2sd xmm0, dword [rbp + 0x76c]
addsd xmm0, xmm1
cvtsd2ss xmm0, xmm0
movss dword [rbp + 0x76c], xmm0
add dword [rbp + 0x74c], 1
cmp dword [rbp + 0x74c], 0x1f8
jle 0x1400042bb
mov rax, qword [rbp + 0x2e0]
test rax, rax
je 0x14000436a
mov edx, 4
mov rcx, rax
call fcn.140029dc0
add dword [rbp + 0x750], 1
cmp dword [rbp + 0x750], 0x1265
jle 0x14000429b
movss xmm0, dword [0x14009cbe8]
movss dword [rbp + 0x76c], xmm0
movss xmm0, dword [0x14009cbec]
movss dword [rbp + 0x76c], xmm0
pxor xmm0, xmm0
cvtss2sd xmm0, dword [rbp + 0x76c]
ucomisd xmm0, qword [0x14009cbf0]
jp 0x1400044de
ucomisd xmm0, qword [0x14009cbf0]
jne 0x1400044de
mov dword [rbp + 0x748], 0
jmp 0x1400044ae
mov ecx, 0x1b9fc
call fcn.140029dd0
mov qword [rbp + 0x2d8], rax
mov dword [rbp + 0x744], 0
jmp 0x14000447e
call sub.api_ms_win_crt_utility_l1_1_0.dll_rand
mov edx, dword [rbp + 0x744]
movsxd rdx, edx
lea rcx, [rdx*4]
mov rdx, qword [rbp + 0x2d8]
lea r8, [rcx + rdx]
movsxd rdx, eax
imul rdx, rdx, 0x74c142e7
shr rdx, 0x20
sar edx, 0xc
mov ecx, eax
sar ecx, 0x1f
sub edx, ecx
imul ecx, edx, 0x2315
sub eax, ecx
mov edx, eax
mov dword [r8], edx
call sub.api_ms_win_crt_utility_l1_1_0.dll_rand
pxor xmm0, xmm0
cvtsi2sd xmm0, eax
movsd xmm2, qword [0x14009cbf8]
movapd xmm1, xmm0
subsd xmm1, xmm2
pxor xmm0, xmm0
cvtss2sd xmm0, dword [rbp + 0x76c]
addsd xmm0, xmm1
cvtsd2ss xmm0, xmm0
movss dword [rbp + 0x76c], xmm0
add dword [rbp + 0x744], 1
cmp dword [rbp + 0x744], 0x11a
jle 0x1400043f8
mov rax, qword [rbp + 0x2d8]
test rax, rax
je 0x1400044a7
mov edx, 4
mov rcx, rax
call fcn.140029dc0
add dword [rbp + 0x748], 1
cmp dword [rbp + 0x748], 0xb85
jle 0x1400043d8
movss xmm0, dword [0x14009cc00]
movss dword [rbp + 0x76c], xmm0
movss xmm0, dword [0x14009cc04]
movss dword [rbp + 0x76c], xmm0
mov dword [rbp + 0x740], 0
jmp 0x1400045fc
mov ecx, 0xcf24
call fcn.140029dd0
mov qword [rbp - 0x50], rax
mov dword [rbp + 0x73c], 1
jmp 0x1400045d2
mov eax, 0x38
movsx eax, al
lea ecx, [rax - 0x30]
mov eax, 0x34
movsx eax, al
lea edx, [rax - 0x30]
mov eax, edx
shl eax, 2
add eax, edx
add eax, eax
lea edx, [rcx + rax]
mov eax, 0x32
movsx eax, al
sub eax, 0x30
imul eax, eax, 0x3c
add edx, eax
mov eax, 0x33
movsx eax, al
sub eax, 0x30
imul eax, eax, 0x258
add edx, eax
mov eax, 0x33
movsx eax, al
sub eax, 0x30
imul eax, eax, 0xe10
add edx, eax
mov eax, 0x32
movsx eax, al
sub eax, 0x30
imul eax, eax, 0x8ca0
lea ecx, [rdx + rax]
mov eax, 0x87cda0
cdq
idiv dword [rbp + 0x73c]
mov eax, edx
add eax, ecx
mov dword [rbp - 0x54], eax
mov eax, dword [rbp + 0x73c]
cdqe
lea rdx, [rax*4]
mov rax, qword [rbp - 0x50]
lea r8, [rdx + rax]
mov eax, dword [rbp - 0x54]
movsxd rdx, eax
imul rdx, rdx, 0xffffffff98acf3ed
shr rdx, 0x20
add edx, eax
sar edx, 0xb
mov ecx, eax
sar ecx, 0x1f
sub edx, ecx
imul ecx, edx, 0xd6a
sub eax, ecx
mov edx, eax
mov dword [r8], edx
add dword [rbp + 0x73c], 1
cmp dword [rbp + 0x73c], 0x3022
jle 0x14000450a
cmp qword [rbp - 0x50], 0
je 0x1400045f5
mov rax, qword [rbp - 0x50]
mov rcx, rax
call fcn.140029da0
add dword [rbp + 0x740], 1
cmp dword [rbp + 0x740], 0xd14e
jle 0x1400044ed
mov dword [rbp + 0x738], 0x127d
mov dword [rbp + 0x734], 0
jmp 0x1400046e5
mov ecx, 0x1130c
call fcn.140029dd0
mov qword [rbp - 0x48], rax
mov dword [rbp + 0x730], 0
jmp 0x1400046b8
call sub.api_ms_win_crt_utility_l1_1_0.dll_rand
mov edx, dword [rbp + 0x730]
movsxd rdx, edx
lea rcx, [rdx*4]
mov rdx, qword [rbp - 0x48]
lea r8, [rcx + rdx]
movsxd rdx, eax
imul rdx, rdx, 0x448faf1f
shr rdx, 0x20
sar edx, 0xb
mov ecx, eax
sar ecx, 0x1f
sub edx, ecx
imul ecx, edx, 0x1ddf
sub eax, ecx
mov edx, eax
mov dword [r8], edx
call sub.api_ms_win_crt_utility_l1_1_0.dll_rand
movsxd rdx, eax
imul rdx, rdx, 0xffffffff82a19115
shr rdx, 0x20
add edx, eax
sar edx, 0xc
mov ecx, eax
sar ecx, 0x1f
sub edx, ecx
imul ecx, edx, 0x1f5b
sub eax, ecx
mov edx, eax
add dword [rbp + 0x738], edx
add dword [rbp + 0x730], 1
cmp dword [rbp + 0x730], 0xa3
jle 0x14000463f
mov rax, qword [rbp - 0x48]
test rax, rax
je 0x1400046de
mov edx, 4
mov rcx, rax
call fcn.140029dc0
add dword [rbp + 0x734], 1
cmp dword [rbp + 0x734], 0x975
jle 0x140004625
mov dword [rbp + 0x72c], 0x3be2
mov dword [rbp + 0x728], 0
jmp 0x1400047cc
mov ecx, 0x213b8
call fcn.140029dd0
mov qword [rbp - 0x40], rax
mov dword [rbp + 0x724], 0
jmp 0x14000479f
call sub.api_ms_win_crt_utility_l1_1_0.dll_rand
mov edx, dword [rbp + 0x724]
movsxd rdx, edx
lea rcx, [rdx*4]
mov rdx, qword [rbp - 0x40]
lea r8, [rcx + rdx]
movsxd rdx, eax
imul rdx, rdx, 0x144dce27
shr rdx, 0x20
sar edx, 0xa
mov ecx, eax
sar ecx, 0x1f
sub edx, ecx
imul ecx, edx, 0x326f
sub eax, ecx
mov edx, eax
mov dword [r8], edx
call sub.api_ms_win_crt_utility_l1_1_0.dll_rand
movsxd rdx, eax
imul rdx, rdx, 0x3a2b9223
shr rdx, 0x20
sar edx, 0xb
mov ecx, eax
sar ecx, 0x1f
sub edx, ecx
imul ecx, edx, 0x2335
sub eax, ecx
mov edx, eax
add dword [rbp + 0x72c], edx
add dword [rbp + 0x724], 1
cmp dword [rbp + 0x724], 0x15f
jle 0x140004728
mov rax, qword [rbp - 0x40]
test rax, rax
je 0x1400047c5
mov edx, 4
mov rcx, rax
call fcn.140029dc0
add dword [rbp + 0x728], 1
cmp dword [rbp + 0x728], 0x7cd
jle 0x14000470e
mov dword [rbp + 0x720], 0x1022
mov dword [rbp + 0x71c], 0
jmp 0x1400048ac
mov ecx, 0x19960
call fcn.140029dd0
mov qword [rbp - 0x38], rax
mov dword [rbp + 0x718], 0
jmp 0x140004886
call sub.api_ms_win_crt_utility_l1_1_0.dll_rand
mov edx, dword [rbp + 0x718]
movsxd rdx, edx
lea rcx, [rdx*4]
mov rdx, qword [rbp - 0x38]
lea r8, [rcx + rdx]
movsxd rdx, eax
imul rdx, rdx, 0x569dc0d1
shr rdx, 0x20
sar edx, 0xc
mov ecx, eax
sar ecx, 0x1f
sub edx, ecx
imul ecx, edx, 0x2f4a
sub eax, ecx
mov edx, eax
mov dword [r8], edx
call sub.api_ms_win_crt_utility_l1_1_0.dll_rand
movsxd rdx, eax
imul rdx, rdx, 0x33266999
shr rdx, 0x20
sar edx, 0xb
mov ecx, eax
sar ecx, 0x1f
sub edx, ecx
imul ecx, edx, 0x280a
sub eax, ecx
mov edx, eax
add dword [rbp + 0x720], edx
add dword [rbp + 0x718], 1
cmp dword [rbp + 0x718], 0x63
jle 0x14000480f
mov rax, qword [rbp - 0x38]
test rax, rax
je 0x1400048a5
mov edx, 4
mov rcx, rax
call fcn.140029dc0
add dword [rbp + 0x71c], 1
cmp dword [rbp + 0x71c], 0x955
jle 0x1400047f5
mov dword [rbp + 0x714], 0x4788
mov dword [rbp + 0x710], 0
jmp 0x140004993
mov ecx, 0xe79c
call fcn.140029dd0
mov qword [rbp - 0x30], rax
mov dword [rbp + 0x70c], 0
jmp 0x140004966
call sub.api_ms_win_crt_utility_l1_1_0.dll_rand
mov edx, dword [rbp + 0x70c]
movsxd rdx, edx
lea rcx, [rdx*4]
mov rdx, qword [rbp - 0x30]
lea r8, [rcx + rdx]
movsxd rdx, eax
imul rdx, rdx, 0x4b914e27
shr rdx, 0x20
sar edx, 0xb
mov ecx, eax
sar ecx, 0x1f
sub edx, ecx
imul ecx, edx, 0x1b1a
sub eax, ecx
mov edx, eax
mov dword [r8], edx
call sub.api_ms_win_crt_utility_l1_1_0.dll_rand
movsxd rdx, eax
imul rdx, rdx, 0x752c23d1
shr rdx, 0x20
sar edx, 0xc
mov ecx, eax
sar ecx, 0x1f
sub edx, ecx
imul ecx, edx, 0x22f5
sub eax, ecx
mov edx, eax
add dword [rbp + 0x714], edx
add dword [rbp + 0x70c], 1
cmp dword [rbp + 0x70c], 0x175
jle 0x1400048ef
mov rax, qword [rbp - 0x30]
test rax, rax
je 0x14000498c
mov edx, 4
mov rcx, rax
call fcn.140029dc0
add dword [rbp + 0x710], 1
cmp dword [rbp + 0x710], 0x6f5
jle 0x1400048d5
mov dword [rbp + 0x708], 0x4bc4
mov dword [rbp + 0x704], 0
jmp 0x140004a7c
mov ecx, 0x1d248
call fcn.140029dd0
mov qword [rbp - 0x28], rax
mov dword [rbp + 0x700], 0
jmp 0x140004a4f
call sub.api_ms_win_crt_utility_l1_1_0.dll_rand
mov edx, dword [rbp + 0x700]
movsxd rdx, edx
lea rcx, [rdx*4]
mov rdx, qword [rbp - 0x28]
lea r8, [rcx + rdx]
movsxd rdx, eax
imul rdx, rdx, 0xffffffffa4402911
shr rdx, 0x20
add edx, eax
sar edx, 0xd
mov ecx, eax
sar ecx, 0x1f
sub edx, ecx
imul ecx, edx, 0x31e0
sub eax, ecx
mov edx, eax
mov dword [r8], edx
call sub.api_ms_win_crt_utility_l1_1_0.dll_rand
movsxd rdx, eax
imul rdx, rdx, 0x5ac32143
shr rdx, 0x20
sar edx, 0xc
mov ecx, eax
sar ecx, 0x1f
sub edx, ecx
imul ecx, edx, 0x2d21
sub eax, ecx
mov edx, eax
add dword [rbp + 0x708], edx
add dword [rbp + 0x700], 1
cmp dword [rbp + 0x700], 0xd3
jle 0x1400049d6
mov rax, qword [rbp - 0x28]
test rax, rax
je 0x140004a75
mov edx, 4
mov rcx, rax
call fcn.140029dc0
add dword [rbp + 0x704], 1
cmp dword [rbp + 0x704], 0x9aa
jle 0x1400049bc
mov dword [rbp + 0x6fc], 0x3716
mov dword [rbp + 0x6f8], 0
jmp 0x140004b65
mov ecx, 0x184a0
call fcn.140029dd0
mov qword [rbp - 0x20], rax
mov dword [rbp + 0x6f4], 0
jmp 0x140004b38
call sub.api_ms_win_crt_utility_l1_1_0.dll_rand
mov edx, dword [rbp + 0x6f4]
movsxd rdx, edx
lea rcx, [rdx*4]
mov rdx, qword [rbp - 0x20]
lea r8, [rcx + rdx]
movsxd rdx, eax
imul rdx, rdx, 0xffffffffb761b0ab
shr rdx, 0x20
add edx, eax
sar edx, 0xc
mov ecx, eax
sar ecx, 0x1f
sub edx, ecx
imul ecx, edx, 0x1656
sub eax, ecx
mov edx, eax
mov dword [r8], edx
call sub.api_ms_win_crt_utility_l1_1_0.dll_rand
movsxd rdx, eax
imul rdx, rdx, 0x5c56347b
shr rdx, 0x20
sar edx, 0xb
mov ecx, eax
sar ecx, 0x1f
sub edx, ecx
imul ecx, edx, 0x162e
sub eax, ecx
mov edx, eax
add dword [rbp + 0x6fc], edx
add dword [rbp + 0x6f4], 1
cmp dword [rbp + 0x6f4], 0x1d4
jle 0x140004abf
mov rax, qword [rbp - 0x20]
test rax, rax
je 0x140004b5e
mov edx, 4
mov rcx, rax
call fcn.140029dc0
add dword [rbp + 0x6f8], 1
cmp dword [rbp + 0x6f8], 0x913
jle 0x140004aa5
mov dword [rbp + 0x6f0], 0x3627
mov dword [rbp + 0x6ec], 0
jmp 0x140004c4c
mov ecx, 0x1b93c
call fcn.140029dd0
mov qword [rbp - 0x18], rax
mov dword [rbp + 0x6e8], 0
jmp 0x140004c1f
call sub.api_ms_win_crt_utility_l1_1_0.dll_rand
mov edx, dword [rbp + 0x6e8]
movsxd rdx, edx
lea rcx, [rdx*4]
mov rdx, qword [rbp - 0x18]
lea r8, [rcx + rdx]
movsxd rdx, eax
imul rdx, rdx, 0x6c921a9d
shr rdx, 0x20
sar edx, 0xc
mov ecx, eax
sar ecx, 0x1f
sub edx, ecx
imul ecx, edx, 0x25ba
sub eax, ecx
mov edx, eax
mov dword [r8], edx
call sub.api_ms_win_crt_utility_l1_1_0.dll_rand
movsxd rdx, eax
imul rdx, rdx, 0x5e1a0d77
shr rdx, 0x20
sar edx, 0xc
mov ecx, eax
sar ecx, 0x1f
sub edx, ecx
imul ecx, edx, 0x2b87
sub eax, ecx
mov edx, eax
add dword [rbp + 0x6f0], edx
add dword [rbp + 0x6e8], 1
cmp dword [rbp + 0x6e8], 0x136
jle 0x140004ba8
mov rax, qword [rbp - 0x18]
test rax, rax
je 0x140004c45
mov edx, 4
mov rcx, rax
call fcn.140029dc0
add dword [rbp + 0x6ec], 1
cmp dword [rbp + 0x6ec], 0x828
jle 0x140004b8e
mov dword [rbp + 0x6e4], 0x4112
mov dword [rbp + 0x6e0], 0
jmp 0x140004d35
mov ecx, 0x18f2c
call fcn.140029dd0
mov qword [rbp - 0x10], rax
mov dword [rbp + 0x6dc], 0
jmp 0x140004d08
call sub.api_ms_win_crt_utility_l1_1_0.dll_rand
mov edx, dword [rbp + 0x6dc]
movsxd rdx, edx
lea rcx, [rdx*4]
mov rdx, qword [rbp - 0x10]
lea r8, [rcx + rdx]
movsxd rdx, eax
imul rdx, rdx, 0x78914b17
shr rdx, 0x20
sar edx, 0xc
mov ecx, eax
sar ecx, 0x1f
sub edx, ecx
imul ecx, edx, 0x21f9
sub eax, ecx
mov edx, eax
mov dword [r8], edx
call sub.api_ms_win_crt_utility_l1_1_0.dll_rand
movsxd rdx, eax
imul rdx, rdx, 0xffffffffaab1c769
shr rdx, 0x20
add edx, eax
sar edx, 0xd
mov ecx, eax
sar ecx, 0x1f
sub edx, ecx
imul ecx, edx, 0x2ffe
sub eax, ecx
mov edx, eax
add dword [rbp + 0x6e4], edx
add dword [rbp + 0x6dc], 1
cmp dword [rbp + 0x6dc], 0x16d
jle 0x140004c8f
mov rax, qword [rbp - 0x10]
test rax, rax
je 0x140004d2e
mov edx, 4
mov rcx, rax
call fcn.140029dc0
add dword [rbp + 0x6e0], 1
cmp dword [rbp + 0x6e0], 0x77e
jle 0x140004c75
mov dword [rbp + 0x6d8], 0x69ee
mov dword [rbp + 0x6d4], 0
jmp 0x140004e1e
mov ecx, 0x18a64
call fcn.140029dd0
mov qword [rbp - 8], rax
mov dword [rbp + 0x6d0], 0
jmp 0x140004df1
call sub.api_ms_win_crt_utility_l1_1_0.dll_rand
mov edx, dword [rbp + 0x6d0]
movsxd rdx, edx
lea rcx, [rdx*4]
mov rdx, qword [rbp - 8]
lea r8, [rcx + rdx]
movsxd rdx, eax
imul rdx, rdx, 0xffffffffc9ffb441
shr rdx, 0x20
add edx, eax
sar edx, 0xc
mov ecx, eax
sar ecx, 0x1f
sub edx, ecx
imul ecx, edx, 0x1447
sub eax, ecx
mov edx, eax
mov dword [r8], edx
call sub.api_ms_win_crt_utility_l1_1_0.dll_rand
movsxd rdx, eax
imul rdx, rdx, 0x5852cda1
shr rdx, 0x20
sar edx, 0xc
mov ecx, eax
sar ecx, 0x1f
sub edx, ecx
imul ecx, edx, 0x2e60
sub eax, ecx
mov edx, eax
add dword [rbp + 0x6d8], edx
add dword [rbp + 0x6d0], 1
cmp dword [rbp + 0x6d0], 0x1de
jle 0x140004d78
mov rax, qword [rbp - 8]
test rax, rax
je 0x140004e17
mov edx, 4
mov rcx, rax
call fcn.140029dc0
add dword [rbp + 0x6d4], 1
cmp dword [rbp + 0x6d4], 0x8c8
jle 0x140004d5e
mov dword [rbp + 0x6cc], 0x4737
mov dword [rbp + 0x6c8], 0
jmp 0x140004f07
mov ecx, 0x19bfc
call fcn.140029dd0
mov qword [rbp], rax
mov dword [rbp + 0x6c4], 0
jmp 0x140004eda
call sub.api_ms_win_crt_utility_l1_1_0.dll_rand
mov edx, dword [rbp + 0x6c4]
movsxd rdx, edx
lea rcx, [rdx*4]
mov rdx, qword [rbp]
lea r8, [rcx + rdx]
movsxd rdx, eax
imul rdx, rdx, 0x3240bae1
shr rdx, 0x20
sar edx, 0xb
mov ecx, eax
sar ecx, 0x1f
sub edx, ecx
imul ecx, edx, 0x28c1
sub eax, ecx
mov edx, eax
mov dword [r8], edx
call sub.api_ms_win_crt_utility_l1_1_0.dll_rand
movsxd rdx, eax
imul rdx, rdx, 0xffffffffb5722823
shr rdx, 0x20
add edx, eax
sar edx, 0xd
mov ecx, eax
sar ecx, 0x1f
sub edx, ecx
imul ecx, edx, 0x2d26
sub eax, ecx
mov edx, eax
add dword [rbp + 0x6cc], edx
add dword [rbp + 0x6c4], 1
cmp dword [rbp + 0x6c4], 0x166
jle 0x140004e61
mov rax, qword [rbp]
test rax, rax
je 0x140004f00
mov edx, 4
mov rcx, rax
call fcn.140029dc0
add dword [rbp + 0x6c8], 1
cmp dword [rbp + 0x6c8], 0x9a9
jle 0x140004e47
mov rax, qword [sym.imp.KERNEL32.dll_GetConsoleWindow]
call rax
mov qword [rbp + 0x2d0], rax
cmp qword [rbp + 0x2d0], 0
je 0x140004f49
mov rax, qword [rbp + 0x2d0]
mov edx, 0
mov rcx, rax
mov rax, qword [sym.imp.USER32.dll_ShowWindow]
call rax
movss xmm0, dword [0x14009cc08]
movss dword [rbp + 0x6c0], xmm0
movss xmm0, dword [0x14009cc0c]
movss dword [rbp + 0x6c0], xmm0
pxor xmm0, xmm0
cvtss2sd xmm0, dword [rbp + 0x6c0]
ucomisd xmm0, qword [0x14009cc10]
jp 0x1400050a6
ucomisd xmm0, qword [0x14009cc10]
jne 0x1400050a6
mov dword [rbp + 0x6bc], 0
jmp 0x140005076
mov ecx, 0xe2dc
call fcn.140029dd0
mov qword [rbp + 0x2c8], rax
mov dword [rbp + 0x6b8], 0
jmp 0x140005046
call sub.api_ms_win_crt_utility_l1_1_0.dll_rand
mov edx, dword [rbp + 0x6b8]
movsxd rdx, edx
lea rcx, [rdx*4]
mov rdx, qword [rbp + 0x2c8]
lea r8, [rcx + rdx]
movsxd rdx, eax
imul rdx, rdx, 0x29cf2b09
shr rdx, 0x20
sar edx, 0xa
mov ecx, eax
sar ecx, 0x1f
sub edx, ecx
imul ecx, edx, 0x187e
sub eax, ecx
mov edx, eax
mov dword [r8], edx
call sub.api_ms_win_crt_utility_l1_1_0.dll_rand
pxor xmm0, xmm0
cvtsi2sd xmm0, eax
movsd xmm2, qword [0x14009cc18]
movapd xmm1, xmm0
subsd xmm1, xmm2
pxor xmm0, xmm0
cvtss2sd xmm0, dword [rbp + 0x6c0]
addsd xmm0, xmm1
cvtsd2ss xmm0, xmm0
movss dword [rbp + 0x6c0], xmm0
add dword [rbp + 0x6b8], 1
cmp dword [rbp + 0x6b8], 0x2ab
jle 0x140004fc0
mov rax, qword [rbp + 0x2c8]
test rax, rax
je 0x14000506f
mov edx, 4
mov rcx, rax
call fcn.140029dc0
add dword [rbp + 0x6bc], 1
cmp dword [rbp + 0x6bc], 0x1573
jle 0x140004fa0
movss xmm0, dword [0x14009cc20]
movss dword [rbp + 0x6c0], xmm0
movss xmm0, dword [0x14009cc24]
movss dword [rbp + 0x6c0], xmm0
pxor xmm0, xmm0
cvtss2sd xmm0, dword [rbp + 0x6c0]
ucomisd xmm0, qword [0x14009cc28]
jp 0x1400051e5
ucomisd xmm0, qword [0x14009cc28]
jne 0x1400051e5
mov dword [rbp + 0x6b4], 0
jmp 0x1400051b5
mov ecx, 0x19c9c
call fcn.140029dd0
mov qword [rbp + 0x2c0], rax
mov dword [rbp + 0x6b0], 0
jmp 0x140005185
call sub.api_ms_win_crt_utility_l1_1_0.dll_rand
mov edx, dword [rbp + 0x6b0]
movsxd rdx, edx
lea rcx, [rdx*4]
mov rdx, qword [rbp + 0x2c0]
lea r8, [rcx + rdx]
movsxd rdx, eax
imul rdx, rdx, 0xffffffffc7022fb7
shr rdx, 0x20
add edx, eax
sar edx, 0xd
mov ecx, eax
sar ecx, 0x1f
sub edx, ecx
imul ecx, edx, 0x292a
sub eax, ecx
mov edx, eax
mov dword [r8], edx
call sub.api_ms_win_crt_utility_l1_1_0.dll_rand
pxor xmm0, xmm0
cvtsi2sd xmm0, eax
movsd xmm2, qword [0x14009cc30]
movapd xmm1, xmm0
subsd xmm1, xmm2
pxor xmm0, xmm0
cvtss2sd xmm0, dword [rbp + 0x6c0]
addsd xmm0, xmm1
cvtsd2ss xmm0, xmm0
movss dword [rbp + 0x6c0], xmm0
add dword [rbp + 0x6b0], 1
cmp dword [rbp + 0x6b0], 0x251
jle 0x1400050fd
mov rax, qword [rbp + 0x2c0]
test rax, rax
je 0x1400051ae
mov edx, 4
mov rcx, rax
call fcn.140029dc0
add dword [rbp + 0x6b4], 1
cmp dword [rbp + 0x6b4], 0x80e
jle 0x1400050dd
movss xmm0, dword [0x14009cc38]
movss dword [rbp + 0x6c0], xmm0
movss xmm0, dword [0x14009cc3c]
movss dword [rbp + 0x6c0], xmm0
pxor xmm0, xmm0
cvtss2sd xmm0, dword [rbp + 0x6c0]
ucomisd xmm0, qword [0x14009cc40]
jp 0x140005322
ucomisd xmm0, qword [0x14009cc40]
jne 0x140005322
mov dword [rbp + 0x6ac], 0
jmp 0x1400052f2
mov ecx, 0x1dc0c
call fcn.140029dd0
mov qword [rbp + 0x2b8], rax
mov dword [rbp + 0x6a8], 0
jmp 0x1400052c2
call sub.api_ms_win_crt_utility_l1_1_0.dll_rand
mov edx, dword [rbp + 0x6a8]
movsxd rdx, edx
lea rcx, [rdx*4]
mov rdx, qword [rbp + 0x2b8]
lea r8, [rcx + rdx]
movsxd rdx, eax
imul rdx, rdx, 0x2bc37baf
shr rdx, 0x20
sar edx, 0xa
mov ecx, eax
sar ecx, 0x1f
sub edx, ecx
imul ecx, edx, 0x1766
sub eax, ecx
mov edx, eax
mov dword [r8], edx
call sub.api_ms_win_crt_utility_l1_1_0.dll_rand
pxor xmm0, xmm0
cvtsi2sd xmm0, eax
movsd xmm2, qword [0x14009cc48]
movapd xmm1, xmm0
subsd xmm1, xmm2
pxor xmm0, xmm0
cvtss2sd xmm0, dword [rbp + 0x6c0]
addsd xmm0, xmm1
cvtsd2ss xmm0, xmm0
movss dword [rbp + 0x6c0], xmm0
add dword [rbp + 0x6a8], 1
cmp dword [rbp + 0x6a8], 0xd5
jle 0x14000523c
mov rax, qword [rbp + 0x2b8]
test rax, rax
je 0x1400052eb
mov edx, 4
mov rcx, rax
call fcn.140029dc0
add dword [rbp + 0x6ac], 1
cmp dword [rbp + 0x6ac], 0xb93
jle 0x14000521c
movss xmm0, dword [0x14009cc50]
movss dword [rbp + 0x6c0], xmm0
movss xmm0, dword [0x14009cc54]
movss dword [rbp + 0x6c0], xmm0
movss xmm0, dword [0x14009cc58]
movss dword [rbp + 0x6a4], xmm0
movss xmm0, dword [0x14009cc5c]
movss dword [rbp + 0x6a4], xmm0
pxor xmm0, xmm0
cvtss2sd xmm0, dword [rbp + 0x6a4]
ucomisd xmm0, qword [0x14009cc60]
jp 0x14000547f
ucomisd xmm0, qword [0x14009cc60]
jne 0x14000547f
mov dword [rbp + 0x6a0], 0
jmp 0x14000544f
mov ecx, 0x20134
call fcn.140029dd0
mov qword [rbp + 0x2b0], rax
mov dword [rbp + 0x69c], 0
jmp 0x14000541f
call sub.api_ms_win_crt_utility_l1_1_0.dll_rand
mov edx, dword [rbp + 0x69c]
movsxd rdx, edx
lea rcx, [rdx*4]
mov rdx, qword [rbp + 0x2b0]
lea r8, [rcx + rdx]
movsxd rdx, eax
imul rdx, rdx, 0x66006601
shr rdx, 0x20
sar edx, 0xb
mov ecx, eax
sar ecx, 0x1f
sub edx, ecx
imul ecx, edx, 0x1414
sub eax, ecx
mov edx, eax
mov dword [r8], edx
call sub.api_ms_win_crt_utility_l1_1_0.dll_rand
pxor xmm0, xmm0
cvtsi2sd xmm0, eax
movsd xmm2, qword [0x14009cc68]
movapd xmm1, xmm0
subsd xmm1, xmm2
pxor xmm0, xmm0
cvtss2sd xmm0, dword [rbp + 0x6a4]
addsd xmm0, xmm1
cvtsd2ss xmm0, xmm0
movss dword [rbp + 0x6a4], xmm0
add dword [rbp + 0x69c], 1
cmp dword [rbp + 0x69c], 0xa0
jle 0x140005399
mov rax, qword [rbp + 0x2b0]
test rax, rax
je 0x140005448
mov edx, 4
mov rcx, rax
call fcn.140029dc0
add dword [rbp + 0x6a0], 1
cmp dword [rbp + 0x6a0], 0x159a
jle 0x140005379
movss xmm0, dword [0x14009cc70]
movss dword [rbp + 0x6a4], xmm0
movss xmm0, dword [0x14009cc74]
movss dword [rbp + 0x6a4], xmm0
mov dword [rbp + 0x698], 0x3a9c
mov dword [rbp + 0x694], 0
jmp 0x140005558
mov ecx, 0x142f8
call fcn.140029dd0
mov qword [rbp + 8], rax
mov dword [rbp + 0x690], 0
jmp 0x14000552b
call sub.api_ms_win_crt_utility_l1_1_0.dll_rand
mov edx, dword [rbp + 0x690]
movsxd rdx, edx
lea rcx, [rdx*4]
mov rdx, qword [rbp + 8]
lea r8, [rcx + rdx]
movsxd rdx, eax
imul rdx, rdx, 0xffffffffa6851a25
shr rdx, 0x20
add edx, eax
sar edx, 0xd
mov ecx, eax
sar ecx, 0x1f
sub edx, ecx
imul ecx, edx, 0x3132
sub eax, ecx
mov edx, eax
mov dword [r8], edx
call sub.api_ms_win_crt_utility_l1_1_0.dll_rand
movsxd rdx, eax
imul rdx, rdx, 0x3b6fb45
shr rdx, 0x20
sar edx, 7
mov ecx, eax
sar ecx, 0x1f
sub edx, ecx
imul ecx, edx, 0x2275
sub eax, ecx
mov edx, eax
add dword [rbp + 0x698], edx
add dword [rbp + 0x690], 1
cmp dword [rbp + 0x690], 0x110
jle 0x1400054b2
mov rax, qword [rbp + 8]
test rax, rax
je 0x140005551
mov edx, 4
mov rcx, rax
call fcn.140029dc0
add dword [rbp + 0x694], 1
cmp dword [rbp + 0x694], 0x745
jle 0x140005498
mov dword [rbp + 0x68c], 0x2c0a
mov dword [rbp + 0x688], 0
jmp 0x14000563f
mov ecx, 0x17008
call fcn.140029dd0
mov qword [rbp + 0x10], rax
mov dword [rbp + 0x684], 0
jmp 0x140005612
call sub.api_ms_win_crt_utility_l1_1_0.dll_rand
mov edx, dword [rbp + 0x684]
movsxd rdx, edx
lea rcx, [rdx*4]
mov rdx, qword [rbp + 0x10]
lea r8, [rcx + rdx]
movsxd rdx, eax
imul rdx, rdx, 0x249ac881
shr rdx, 0x20
sar edx, 0xb
mov ecx, eax
sar ecx, 0x1f
sub edx, ecx
imul ecx, edx, 0x37f3
sub eax, ecx
mov edx, eax
mov dword [r8], edx
call sub.api_ms_win_crt_utility_l1_1_0.dll_rand
movsxd rdx, eax
imul rdx, rdx, 0x5f10d99d
shr rdx, 0x20
sar edx, 0xc
mov ecx, eax
sar ecx, 0x1f
sub edx, ecx
imul ecx, edx, 0x2b16
sub eax, ecx
mov edx, eax
add dword [rbp + 0x68c], edx
add dword [rbp + 0x684], 1
cmp dword [rbp + 0x684], 0xb1
jle 0x14000559b
mov rax, qword [rbp + 0x10]
test rax, rax
je 0x140005638
mov edx, 4
mov rcx, rax
call fcn.140029dc0
add dword [rbp + 0x688], 1
cmp dword [rbp + 0x688], 0x8fd
jle 0x140005581
mov dword [rbp + 0x680], 0x6c05
mov dword [rbp + 0x67c], 0
jmp 0x140005726
mov ecx, 0xcd58
call fcn.140029dd0
mov qword [rbp + 0x18], rax
mov dword [rbp + 0x678], 0
jmp 0x1400056f9
call sub.api_ms_win_crt_utility_l1_1_0.dll_rand
mov edx, dword [rbp + 0x678]
movsxd rdx, edx
lea rcx, [rdx*4]
mov rdx, qword [rbp + 0x18]
lea r8, [rcx + rdx]
movsxd rdx, eax
imul rdx, rdx, 0x318201a5
shr rdx, 0x20
sar edx, 0xa
mov ecx, eax
sar ecx, 0x1f
sub edx, ecx
imul ecx, edx, 0x14af
sub eax, ecx
mov edx, eax
mov dword [r8], edx
call sub.api_ms_win_crt_utility_l1_1_0.dll_rand
movsxd rdx, eax
imul rdx, rdx, 0x8d848d5
shr rdx, 0x20
sar edx, 9
mov ecx, eax
sar ecx, 0x1f
sub edx, ecx
imul ecx, edx, 0x39e3
sub eax, ecx
mov edx, eax
add dword [rbp + 0x680], edx
add dword [rbp + 0x678], 1
cmp dword [rbp + 0x678], 0x1a3
jle 0x140005682
mov rax, qword [rbp + 0x18]
test rax, rax
je 0x14000571f
mov edx, 4
mov rcx, rax
call fcn.140029dc0
add dword [rbp + 0x67c], 1
cmp dword [rbp + 0x67c], 0x99b
jle 0x140005668
mov dword [rbp + 0x674], 0x1955
mov dword [rbp + 0x670], 0
jmp 0x140005806
mov ecx, 0x12d88
call fcn.140029dd0
mov qword [rbp + 0x20], rax
mov dword [rbp + 0x66c], 0
jmp 0x1400057e0
call sub.api_ms_win_crt_utility_l1_1_0.dll_rand
mov edx, dword [rbp + 0x66c]
movsxd rdx, edx
lea rcx, [rdx*4]
mov rdx, qword [rbp + 0x20]
lea r8, [rcx + rdx]
movsxd rdx, eax
imul rdx, rdx, 0x3d209039
shr rdx, 0x20
sar edx, 0xb
mov ecx, eax
sar ecx, 0x1f
sub edx, ecx
imul ecx, edx, 0x2181
sub eax, ecx
mov edx, eax
mov dword [r8], edx
call sub.api_ms_win_crt_utility_l1_1_0.dll_rand
movsxd rdx, eax
imul rdx, rdx, 0x32a5641b
shr rdx, 0x20
sar edx, 0xa
mov ecx, eax
sar ecx, 0x1f
sub edx, ecx
imul ecx, edx, 0x1438
sub eax, ecx
mov edx, eax
add dword [rbp + 0x674], edx
add dword [rbp + 0x66c], 1
cmp dword [rbp + 0x66c], 0x64
jle 0x140005769
mov rax, qword [rbp + 0x20]
test rax, rax
je 0x1400057ff
mov edx, 4
mov rcx, rax
call fcn.140029dc0
add dword [rbp + 0x670], 1
cmp dword [rbp + 0x670], 0x732
jle 0x14000574f
mov dword [rbp + 0x668], 0x16d8
mov dword [rbp + 0x664], 0
jmp 0x1400058ef
mov ecx, 0xd4f8
call fcn.140029dd0
mov qword [rbp + 0x28], rax
mov dword [rbp + 0x660], 0
jmp 0x1400058c2
call sub.api_ms_win_crt_utility_l1_1_0.dll_rand
mov edx, dword [rbp + 0x660]
movsxd rdx, edx
lea rcx, [rdx*4]
mov rdx, qword [rbp + 0x28]
lea r8, [rcx + rdx]
movsxd rdx, eax
imul rdx, rdx, 0x4d8eb189
shr rdx, 0x20
sar edx, 0xc
mov ecx, eax
sar ecx, 0x1f
sub edx, ecx
imul ecx, edx, 0x34d0
sub eax, ecx
mov edx, eax
mov dword [r8], edx
call sub.api_ms_win_crt_utility_l1_1_0.dll_rand
movsxd rdx, eax
imul rdx, rdx, 0xffffffffc4ce07b1
shr rdx, 0x20
add edx, eax
sar edx, 0xc
mov ecx, eax
sar ecx, 0x1f
sub edx, ecx
imul ecx, edx, 0x14d0
sub eax, ecx
mov edx, eax
add dword [rbp + 0x668], edx
add dword [rbp + 0x660], 1
cmp dword [rbp + 0x660], 0xa1
jle 0x140005849
mov rax, qword [rbp + 0x28]
test rax, rax
je 0x1400058e8
mov edx, 4
mov rcx, rax
call fcn.140029dc0
add dword [rbp + 0x664], 1
cmp dword [rbp + 0x664], 0x6d7
jle 0x14000582f
mov dword [rbp + 0x65c], 0
jmp 0x140005a1d
mov ecx, 0xcf24
call fcn.140029dd0
mov qword [rbp + 0x38], rax
mov dword [rbp + 0x658], 1
jmp 0x1400059f3
mov eax, 0x38
movsx eax, al
lea ecx, [rax - 0x30]
mov eax, 0x34
movsx eax, al
lea edx, [rax - 0x30]
mov eax, edx
shl eax, 2
add eax, edx
add eax, eax
lea edx, [rcx + rax]
mov eax, 0x32
movsx eax, al
sub eax, 0x30
imul eax, eax, 0x3c
add edx, eax
mov eax, 0x33
movsx eax, al
sub eax, 0x30
imul eax, eax, 0x258
add edx, eax
mov eax, 0x33
movsx eax, al
sub eax, 0x30
imul eax, eax, 0xe10
add edx, eax
mov eax, 0x32
movsx eax, al
sub eax, 0x30
imul eax, eax, 0x8ca0
lea ecx, [rdx + rax]
mov eax, 0x20e6da0
cdq
idiv dword [rbp + 0x658]
mov eax, edx
add eax, ecx
mov dword [rbp + 0x34], eax
mov eax, dword [rbp + 0x658]
cdqe
lea rdx, [rax*4]
mov rax, qword [rbp + 0x38]
lea r8, [rdx + rax]
mov eax, dword [rbp + 0x34]
movsxd rdx, eax
imul rdx, rdx, 0xffffffff98acf3ed
shr rdx, 0x20
add edx, eax
sar edx, 0xb
mov ecx, eax
sar ecx, 0x1f
sub edx, ecx
imul ecx, edx, 0xd6a
sub eax, ecx
mov edx, eax
mov dword [r8], edx
add dword [rbp + 0x658], 1
cmp dword [rbp + 0x658], 0x3022
jle 0x14000592b
cmp qword [rbp + 0x38], 0
je 0x140005a16
mov rax, qword [rbp + 0x38]
mov rcx, rax
call fcn.140029da0
add dword [rbp + 0x65c], 1
cmp dword [rbp + 0x65c], 0xd14e
jle 0x14000590e
mov dword [rbp + 0x654], 0x49cc
mov dword [rbp + 0x650], 0
jmp 0x140005b06
mov ecx, 0x1dc70
call fcn.140029dd0
mov qword [rbp + 0x40], rax
mov dword [rbp + 0x64c], 0
jmp 0x140005ad9
call sub.api_ms_win_crt_utility_l1_1_0.dll_rand
mov edx, dword [rbp + 0x64c]
movsxd rdx, edx
lea rcx, [rdx*4]
mov rdx, qword [rbp + 0x40]
lea r8, [rcx + rdx]
movsxd rdx, eax
imul rdx, rdx, 0x11aebc77
shr rdx, 0x20
sar edx, 0xa
mov ecx, eax
sar ecx, 0x1f
sub edx, ecx
imul ecx, edx, 0x39e9
sub eax, ecx
mov edx, eax
mov dword [r8], edx
call sub.api_ms_win_crt_utility_l1_1_0.dll_rand
movsxd rdx, eax
imul rdx, rdx, 0xffffffffb5aa7d41
shr rdx, 0x20
add edx, eax
sar edx, 0xd
mov ecx, eax
sar ecx, 0x1f
sub edx, ecx
imul ecx, edx, 0x2d18
sub eax, ecx
mov edx, eax
add dword [rbp + 0x654], edx
add dword [rbp + 0x64c], 1
cmp dword [rbp + 0x64c], 0x10f
jle 0x140005a60
mov rax, qword [rbp + 0x40]
test rax, rax
je 0x140005aff
cmp dword [rbp + 0x650], 0x79c
jle 0x140005a46
mov dword [rbp + 0x648], 0xd24
mov dword [rbp + 0x644], 0
jmp 0x140005bef
mov ecx, 0x1ab54
call fcn.140029dd0
mov qword [rbp + 0x48], rax
mov dword [rbp + 0x640], 0
jmp 0x140005bc2
cmp dword [rbp + 0x644], 0x6dc
jle 0x140005b2f
mov dword [rbp + 0x63c], 0x7407
mov dword [rbp + 0x638], 0
jmp 0x140005cd8