Function at 0x1400014b0
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call
Generate random numbers using a mersenne twister

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x1580]
mov eax, 0x1680
call fcn.140004990
sub rsp, rax
movaps xmmword [rsp + 0x1670], xmm6
movaps xmmword [rsp + 0x1660], xmm7
movaps xmmword [rsp + 0x1650], xmm8
movaps xmmword [rsp + 0x1640], xmm9
movaps xmmword [rsp + 0x1630], xmm10
movaps xmmword [rsp + 0x1620], xmm11
movaps xmmword [rsp + 0x1610], xmm12
movaps xmmword [rsp + 0x1600], xmm13
mov rax, qword [0x140008040]
xor rax, rsp
mov qword [rbp + 0x14f0], rax
xorps xmm0, xmm0
movups xmmword [rbp - 0x20], xmm0
lea rax, [rbp + 0x15a8]
movabs r14, 0xff00ff00ff00ff00
mov qword [rbp - 0x18], r14
mov qword [rbp - 0x10], rax
mov rax, qword [rax]
xor rax, r14
mov qword [rbp - 0x20], rax
mov qword [rsp + 0x30], 0x114
xor r12d, r12d
mov dword [rsp + 0x20], r12d
lea rax, [rbp + 0x40]
mov qword [rsp + 0x48], rax
movups xmmword [rbp - 0x68], xmm0
lea rsi, [rbp + 0x15a8]
mov qword [rbp - 0x60], r14
mov qword [rbp - 0x58], rsi
mov rbx, r14
mov qword [rbp - 0x68], rbx
mov qword [rsi], r12
mov ecx, r12d
mov r15d, 3
lea rdi, [0x140003840]
lea r13, [0x140000000]
mov rax, qword [0x140008bc0]
test rax, rax
je 0x1400015e1
cmp rax, rdi
je 0x1400015ce
inc ecx
mov rax, qword [r13 + rcx*8 + 0x8bc0]
test rax, rax
jne 0x1400015b8
jmp 0x1400015e1
mov eax, ecx
mov r10, qword [r13 + rax*8 + 0x8ee0]
test r10, r10
jne 0x1400016cf
mov edx, 0x1f4
xor ecx, ecx
mov r9d, 0x40
mov r8d, 0x1000
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov r10, rax
test rax, rax
jne 0x14000160a
mov r10, r12
jmp 0x1400016ae
mov rax, rdi
mov rcx, r10
mov rdx, r15
nop dword [rax]
nop word [rax + rax]
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rcx + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rcx + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rcx + 0x50], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rcx + 0x60], xmm0
lea rcx, [rcx + 0x80]
movups xmm1, xmmword [rax + 0x70]
movups xmmword [rcx - 0x10], xmm1
lea rax, [rax + 0x80]
sub rdx, 1
jne 0x140001620
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rcx + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rcx + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rcx + 0x50], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rcx + 0x60], xmm0
mov eax, dword [rax + 0x70]
mov dword [rcx + 0x70], eax
mov rax, qword [0x140009520]
mov qword [r13 + rax*8 + 0x8bc0], rdi
mov qword [r13 + rax*8 + 0x8ee0], r10
inc rax
mov qword [0x140009520], rax
lea r9, [rsp + 0x30]
lea r8, [rsp + 0x20]
lea rdx, [rsp + 0x48]
mov rcx, qword [sym.imp.VCRUNTIME140.dll_memset]
call r10
nop
xor rbx, r14
mov qword [rbp - 0x68], rbx
mov qword [rsi], rbx
mov dword [rbp + 0x40], 0x114
lea rax, [rbp + 0x40]
mov qword [rsp + 0x30], rax
xorps xmm0, xmm0
movups xmmword [rbp - 0x68], xmm0
lea rsi, [rbp + 0x15a8]
mov qword [rbp - 0x60], r14
mov qword [rbp - 0x58], rsi
mov rbx, qword [rsi]
xor rbx, r14
mov qword [rbp - 0x68], rbx
mov qword [rsi], r12
mov ecx, r12d
lea rdi, [0x140003880]
mov rax, qword [0x140009850]
test rax, rax
je 0x140001769
nop dword [rax]
cmp rax, rdi
je 0x140001756
inc ecx
mov rax, qword [r13 + rcx*8 + 0x9850]
test rax, rax
jne 0x140001740
jmp 0x140001769
mov eax, ecx
mov r8, qword [r13 + rax*8 + 0x88a0]
test r8, r8
jne 0x14000184f
mov edx, 0x1f4
xor ecx, ecx
mov r9d, 0x40
mov r8d, 0x1000
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov r8, rax
test rax, rax
jne 0x140001792
mov r8, r12
jmp 0x14000182e
mov rax, rdi
mov rcx, r8
mov rdx, r15
nop dword [rax + rax]
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rcx + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rcx + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rcx + 0x50], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rcx + 0x60], xmm0
lea rcx, [rcx + 0x80]
movups xmm1, xmmword [rax + 0x70]
movups xmmword [rcx - 0x10], xmm1
lea rax, [rax + 0x80]
sub rdx, 1
jne 0x1400017a0
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rcx + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rcx + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rcx + 0x50], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rcx + 0x60], xmm0
mov eax, dword [rax + 0x70]
mov dword [rcx + 0x70], eax
mov rax, qword [0x140009b70]
mov qword [r13 + rax*8 + 0x9850], rdi
mov qword [r13 + rax*8 + 0x88a0], r8
inc rax
mov qword [0x140009b70], rax
lea rdx, [rsp + 0x30]
mov rcx, qword [sym.imp.KERNEL32.dll_GetVersionExW]
call r8
nop
xor rbx, r14
mov qword [rbp - 0x68], rbx
mov qword [rsi], rbx
call qword [sym.imp.MSVCP140.dll_unsigned_int___cdecl_std::_Random_device_void_]
mov dword [rbp + 0x14e4], 0xffffffff
mov r8d, 0x6c078965
mov edx, eax
lea rcx, [rbp + 0x160]
call fcn.1400035c0
mov dword [rbp - 0x78], 0xffffff9c
mov dword [rbp - 0x74], 0x64
movdqa xmm0, xmmword [0x140006480]
movups xmmword [rbp - 0x38], xmm0
mov dword [rsp + 0x20], r12d
xorps xmm11, xmm11
movsd qword [rsp + 0x40], xmm11
lea rcx, [rbp - 0x70]
call fcn.1400011c0
mov qword [rsp + 0x30], 0x64
mov rax, qword [rbp - 0x70]
mov qword [rsp + 0x48], rax
lea r8, [rsp + 0x30]
lea rdx, [rsp + 0x48]
lea rcx, [rbp - 0x28]
call fcn.1400039a0
mov rdi, qword [rax]
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp - 0x50], xmm0
mov qword [rbp - 0x40], rax
lea rcx, [rbp - 0x50]
call fcn.140003480
nop
lea rcx, [rsp + 0x48]
call fcn.1400036a0
nop
mov rdx, rax
lea rcx, [rsp + 0x30]
call fcn.1400036d0
nop
lea rdx, [rsp + 0x30]
lea rcx, [rbp - 0x50]
call fcn.1400038e0
nop
lea rcx, [rsp + 0x30]
call fcn.1400033c0
nop
lea rcx, [rsp + 0x48]
call fcn.1400033c0
lea rcx, [rsp + 0x48]
call fcn.1400036f0
nop
mov rdx, rax
lea rcx, [rsp + 0x30]
call fcn.1400036d0
nop
lea rdx, [rsp + 0x30]
lea rcx, [rbp - 0x50]
call fcn.1400038e0
nop
lea rcx, [rsp + 0x30]
call fcn.1400033c0
nop
lea rcx, [rsp + 0x48]
call fcn.1400033c0
lea rcx, [rsp + 0x48]
call fcn.140003720
nop
mov rdx, rax
lea rcx, [rsp + 0x30]
call fcn.1400036d0
nop
lea rdx, [rsp + 0x30]
lea rcx, [rbp - 0x50]
call fcn.1400038e0
nop
lea rcx, [rsp + 0x30]
call fcn.1400033c0
nop
lea rcx, [rsp + 0x48]
call fcn.1400033c0
lea rcx, [rsp + 0x48]
call fcn.140003750
nop
mov rdx, rax
lea rcx, [rsp + 0x30]
call fcn.1400036d0
nop
lea rdx, [rsp + 0x30]
lea rcx, [rbp - 0x50]
call fcn.1400038e0
nop
lea rcx, [rsp + 0x30]
call fcn.1400033c0
nop
lea rcx, [rsp + 0x48]
call fcn.1400033c0
lea rcx, [rsp + 0x48]
call fcn.140003780
nop
mov rdx, rax
lea rcx, [rsp + 0x30]
call fcn.1400036d0
nop
lea rdx, [rsp + 0x30]
lea rcx, [rbp - 0x50]
call fcn.1400038e0
nop
lea rcx, [rsp + 0x30]
call fcn.1400033c0
nop
lea rcx, [rsp + 0x48]
call fcn.1400033c0
lea rcx, [rsp + 0x48]
call fcn.1400037b0
nop
mov rdx, rax
lea rcx, [rsp + 0x30]
call fcn.1400036d0
nop
lea rdx, [rsp + 0x30]
lea rcx, [rbp - 0x50]
call fcn.1400038e0
nop
lea rcx, [rsp + 0x30]
call fcn.1400033c0
nop
lea rcx, [rsp + 0x48]
call fcn.1400033c0
lea rcx, [rbp - 0x28]
call fcn.1400011c0
mov qword [rsp + 0x48], rdi
mov rax, qword [rax]
mov qword [rsp + 0x30], rax
lea rdx, [rsp + 0x48]
lea rcx, [rsp + 0x30]
call fcn.140001490
movsd xmm12, qword [0x140006490]
movsd xmm10, qword [0x140006468]
movsd xmm13, qword [0x140006470]
test al, al
jns 0x140001e86
mov r13d, 1
nop dword [rax + rax]
mov r14d, 0x186a0
nop word [rax + rax]
mov r9d, dword [rbp - 0x74]
mov r8d, dword [rbp - 0x78]
lea rdx, [rbp + 0x160]
lea rcx, [rbp - 0x78]
call fcn.140003d10
mov r9d, dword [rbp - 0x74]
mov r8d, dword [rbp - 0x78]
lea rdx, [rbp + 0x160]
lea rcx, [rbp - 0x78]
call fcn.140003d10
mov rcx, qword [rbp - 0x48]
mov r8, qword [rbp - 0x50]
sub rcx, r8
sar rcx, 3
cdqe
xor edx, edx
div rcx
movsxd rax, edx
mov rsi, qword [r8 + rax*8]
mov rax, qword [rsi]
mov rbx, qword [rax + 8]
mov r9d, dword [rbp - 0x74]
mov r8d, dword [rbp - 0x78]
lea rdx, [rbp + 0x160]
lea rcx, [rbp - 0x78]
call fcn.140003d10
mov r8d, eax
mov edx, dword [rsp + 0x20]
mov rcx, rsi
call rbx
mov dword [rsp + 0x20], eax
lea rdx, [rbp + 0x160]
lea rcx, [rbp - 0x38]
call fcn.1400039c0
movaps xmm9, xmm0
lea rdx, [rbp + 0x160]
lea rcx, [rbp - 0x38]
call fcn.1400039c0
movaps xmm7, xmm0
andps xmm0, xmm12
addsd xmm0, xmm10
call sub.api_ms_win_crt_math_l1_1_0.dll_log
movaps xmm8, xmm0
movaps xmm0, xmm9
call sub.api_ms_win_crt_math_l1_1_0.dll_cos
movaps xmm6, xmm0
movaps xmm0, xmm7
call sub.api_ms_win_crt_math_l1_1_0.dll_sin
mulsd xmm6, xmm0
addsd xmm8, xmm6
movaps xmm0, xmm9
call sub.api_ms_win_crt_math_l1_1_0.dll_exp
subsd xmm8, xmm0
addsd xmm8, qword [rsp + 0x40]
movsd qword [rsp + 0x40], xmm8
lea rdx, [rbp + 0x160]
lea rcx, [rbp - 0x38]
call fcn.1400039c0
movaps xmm1, xmm13
call sub.api_ms_win_crt_math_l1_1_0.dll_pow
movsd xmm1, qword [rsp + 0x40]
subsd xmm1, xmm0
movsd qword [rsp + 0x40], xmm1
lea rdx, [rbp + 0x160]
lea rcx, [rbp - 0x38]
call fcn.1400039c0
call sub.api_ms_win_crt_math_l1_1_0.dll_tan
movsd xmm1, qword [rsp + 0x40]
mulsd xmm0, xmm1
movsd qword [rsp + 0x40], xmm0
lea rdx, str.random
lea rcx, [rbp - 8]
call fcn.140003580
nop
lea rdx, [rbp + 0x160]
lea rcx, [rbp - 8]
call fcn.140001350
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp - 0x68], xmm0
mov qword [rbp - 0x58], rax
lea rcx, [rbp - 0x68]
call fcn.140003480
mov edx, 0x64
lea rcx, [rbp - 0x68]
call fcn.140003920
nop
lea rax, [rbp - 0x78]
mov qword [rsp + 0x60], rax
lea rax, [rbp + 0x160]
mov qword [rsp + 0x68], rax
lea rdx, [rsp + 0x70]
lea rcx, [rbp - 0x68]
call fcn.1400034a0
mov rbx, qword [rax]
lea rdx, [rsp + 0x78]
lea rcx, [rbp - 0x68]
call fcn.1400034b0
movaps xmm0, xmmword [rsp + 0x60]
movdqa xmmword [rsp + 0x30], xmm0
lea r8, [rsp + 0x30]
mov rdx, rbx
mov rcx, qword [rax]
call fcn.1400037e0
lea rdx, [rbp + 0x160]
lea rcx, [rbp - 0x68]
call fcn.1400013e0
lea rdx, [rbp - 0x80]
lea rcx, [rbp - 0x68]
call fcn.1400034a0
mov rbx, qword [rax]
lea rdx, [rsp + 0x50]
lea rcx, [rbp - 0x68]
call fcn.1400034b0
xor r9d, r9d
xor r8d, r8d
mov rdx, rbx
mov rcx, qword [rax]
call fcn.140003a40
mov ecx, dword [rsp + 0x20]
add ecx, eax
mov dword [rsp + 0x20], ecx
mov r9d, dword [rbp - 0x74]
mov r8d, dword [rbp - 0x78]
lea rdx, [rbp + 0x160]
lea rcx, [rbp - 0x78]
call fcn.140003d10
mov ebx, eax
mov r9d, dword [rbp - 0x74]
mov r8d, dword [rbp - 0x78]
lea rdx, [rbp + 0x160]
lea rcx, [rbp - 0x78]
call fcn.140003d10
mov r8d, eax
mov ecx, ebx
test ebx, ebx
cmove ecx, r13d
sub eax, ebx
cdq
idiv ecx
imul ebx, r8d
add eax, ebx
mov ecx, dword [rsp + 0x20]
add ecx, eax
mov dword [rsp + 0x20], ecx
mov eax, dword [rsp + 0x20]
mov r9d, dword [rbp - 0x74]
mov r8d, dword [rbp - 0x78]
lea rdx, [rbp + 0x160]
lea rcx, [rbp - 0x78]
test al, 1
jne 0x140001d64
call fcn.140003d10
mov ecx, dword [rsp + 0x20]
add ecx, eax
jmp 0x140001d6f
call fcn.140003d10
mov ecx, dword [rsp + 0x20]
sub ecx, eax
mov dword [rsp + 0x20], ecx
mov esi, 5
nop dword [rax + rax]
mov ebx, r12d
nop dword [rax]
nop word [rax + rax]
mov r9d, dword [rbp - 0x74]
mov r8d, dword [rbp - 0x78]
lea rdx, [rbp + 0x160]
lea rcx, [rbp - 0x78]
call fcn.140003d10
mov ecx, dword [rsp + 0x20]
add ecx, eax
mov dword [rsp + 0x20], ecx
lea rdx, [rbp + 0x160]
lea rcx, [rbp - 0x38]
call fcn.1400039c0
addsd xmm0, qword [rsp + 0x40]
movsd qword [rsp + 0x40], xmm0
lea rdx, [rbp + 0x160]
test bl, 1
jne 0x140001df8
mov r9d, dword [rbp - 0x74]
mov r8d, dword [rbp - 0x78]
lea rcx, [rbp - 0x78]
call fcn.140003d10
mov ecx, dword [rsp + 0x20]
imul ecx, eax
mov dword [rsp + 0x20], ecx
jmp 0x140001e16
lea rcx, [rbp - 0x38]
call fcn.1400039c0
movsd xmm1, qword [rsp + 0x40]
addsd xmm0, xmm10
divsd xmm1, xmm0
movsd qword [rsp + 0x40], xmm1
inc ebx
cmp ebx, 5
jl 0x140001d90
sub rsi, 1
jne 0x140001d80
lea rcx, [rbp - 0x68]
call fcn.1400034c0
nop
lea rcx, [rbp - 8]
call fcn.140003520
sub r14, 1
jne 0x140001ad0
lea rcx, [rbp - 0x28]
call fcn.1400011c0
mov qword [rsp + 0x48], rdi
mov rax, qword [rax]
mov qword [rsp + 0x30], rax
lea rdx, [rsp + 0x48]
lea rcx, [rsp + 0x30]
call fcn.140001490
test al, al
js 0x140001ac0
lea r13, [0x140000000]
movabs r14, 0xff00ff00ff00ff00
mov eax, dword [rsp + 0x20]
lea rcx, [rbp - 0x50]
call fcn.1400033e0
mov dword [rsp + 0x20], r12d
xorps xmm0, xmm0
movups xmmword [rbp - 0x68], xmm0
lea rsi, [rbp + 0x15a8]
mov qword [rbp - 0x60], r14
mov qword [rbp - 0x58], rsi
mov rbx, qword [rsi]
xor rbx, r14
mov qword [rbp - 0x68], rbx
mov qword [rsi], r12
mov ecx, r12d
lea rdi, [0x1400038b0]
mov rax, qword [0x140009200]
test rax, rax
je 0x140001efa
cmp rax, rdi
je 0x140001ee7
inc ecx
mov rax, qword [r13 + rcx*8 + 0x9200]
test rax, rax
jne 0x140001ed1
jmp 0x140001efa
mov eax, ecx
mov r8, qword [r13 + rax*8 + 0x9530]
test r8, r8
jne 0x140001fdf
mov edx, 0x1f4
xor ecx, ecx
mov r9d, 0x40
mov r8d, 0x1000
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov r8, rax
test rax, rax
jne 0x140001f23
mov r8, r12
jmp 0x140001fbe
mov rax, rdi
mov rcx, r8
mov rdx, r15
nop dword [rax]
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rcx + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rcx + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rcx + 0x50], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rcx + 0x60], xmm0
lea rcx, [rcx + 0x80]
movups xmm1, xmmword [rax + 0x70]
movups xmmword [rcx - 0x10], xmm1
lea rax, [rax + 0x80]
sub rdx, 1
jne 0x140001f30
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rcx + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rcx + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rcx + 0x50], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rcx + 0x60], xmm0
mov eax, dword [rax + 0x70]
mov dword [rcx + 0x70], eax
mov rax, qword [0x140009528]
mov qword [r13 + rax*8 + 0x9200], rdi
mov qword [r13 + rax*8 + 0x9530], r8
inc rax
mov qword [0x140009528], rax
lea rdx, [rsp + 0x20]
mov rcx, qword [sym.imp.USER32.dll_GetSystemMetrics]
call r8
nop
xor rbx, r14
mov qword [rbp - 0x68], rbx
mov qword [rsi], rbx
cmp eax, 0x400
jne 0x140002174
mov eax, 1
mov dword [rsp + 0x20], eax
xorps xmm0, xmm0
movups xmmword [rbp - 0x68], xmm0
lea rsi, [rbp + 0x15a8]
mov qword [rbp - 0x60], r14
mov qword [rbp - 0x58], rsi
mov rbx, qword [rsi]
xor rbx, r14
mov qword [rbp - 0x68], rbx
mov qword [rsi], r12
mov ecx, r12d
mov rax, qword [0x140009200]
test rax, rax
je 0x140002069
nop
cmp rax, rdi
je 0x140002056
inc ecx
mov rax, qword [r13 + rcx*8 + 0x9200]
test rax, rax
jne 0x140002040
jmp 0x140002069
mov eax, ecx
mov r8, qword [r13 + rax*8 + 0x9530]
test r8, r8
jne 0x14000214f
mov edx, 0x1f4
xor ecx, ecx
mov r9d, 0x40
mov r8d, 0x1000
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov r8, rax
test rax, rax
jne 0x140002092
mov r8, r12
jmp 0x14000212e
mov rax, rdi
mov rcx, r8
mov rdx, r15
nop dword [rax + rax]
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rcx + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rcx + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rcx + 0x50], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rcx + 0x60], xmm0
lea rcx, [rcx + 0x80]
movups xmm1, xmmword [rax + 0x70]
movups xmmword [rcx - 0x10], xmm1
lea rax, [rax + 0x80]
sub rdx, 1
jne 0x1400020a0
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rcx + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rcx + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rcx + 0x50], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rcx + 0x60], xmm0
mov eax, dword [rax + 0x70]
mov dword [rcx + 0x70], eax
mov rax, qword [0x140009528]
mov qword [r13 + rax*8 + 0x9200], rdi
mov qword [r13 + rax*8 + 0x9530], r8
inc rax
mov qword [0x140009528], rax
lea rdx, [rsp + 0x20]
mov rcx, qword [sym.imp.USER32.dll_GetSystemMetrics]
call r8
nop
xor rbx, r14
mov qword [rbp - 0x68], rbx
mov qword [rsi], rbx
cmp eax, 0x300
je 0x140002744
cmp dword [rbp + 0x44], 6
ja 0x14000218a
jne 0x140002744
cmp dword [rbp + 0x48], 2
jb 0x140002744
mov dword [rsp + 0x20], r12d
xorps xmm0, xmm0
movups xmmword [rbp - 0x68], xmm0
lea rsi, [rbp + 0x15a8]
mov qword [rbp - 0x60], r14
mov qword [rbp - 0x58], rsi
mov rbx, qword [rsi]
xor rbx, r14
mov qword [rbp - 0x68], rbx
mov qword [rsi], r12
mov ecx, r12d
mov rax, qword [0x140009200]
test rax, rax
je 0x1400021ea
cmp rax, rdi
je 0x1400021d7
inc ecx
mov rax, qword [r13 + rcx*8 + 0x9200]
test rax, rax
jne 0x1400021c1
jmp 0x1400021ea
mov eax, ecx
mov r8, qword [r13 + rax*8 + 0x9530]
test r8, r8
jne 0x1400022cf
mov edx, 0x1f4
xor ecx, ecx
mov r9d, 0x40
mov r8d, 0x1000
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov r8, rax
test rax, rax
jne 0x140002213
mov r8, r12
jmp 0x1400022ae
mov rax, rdi
mov rcx, r8
mov rdx, r15
nop dword [rax]
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rcx + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rcx + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rcx + 0x50], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rcx + 0x60], xmm0
lea rcx, [rcx + 0x80]
movups xmm1, xmmword [rax + 0x70]
movups xmmword [rcx - 0x10], xmm1
lea rax, [rax + 0x80]
sub rdx, 1
jne 0x140002220
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rcx + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rcx + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rcx + 0x50], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rcx + 0x60], xmm0
mov eax, dword [rax + 0x70]
mov dword [rcx + 0x70], eax
mov rax, qword [0x140009528]
mov qword [r13 + rax*8 + 0x9200], rdi
mov qword [r13 + rax*8 + 0x9530], r8
inc rax
mov qword [0x140009528], rax
lea rdx, [rsp + 0x20]
mov rcx, qword [sym.imp.USER32.dll_GetSystemMetrics]
call r8
nop
xor rbx, r14
mov qword [rbp - 0x68], rbx
mov qword [rsi], rbx
cmp eax, 0x500
jne 0x140002464
mov eax, 1
mov dword [rsp + 0x20], eax
xorps xmm0, xmm0
movups xmmword [rbp - 0x68], xmm0
lea rsi, [rbp + 0x15a8]
mov qword [rbp - 0x60], r14
mov qword [rbp - 0x58], rsi
mov rbx, qword [rsi]
xor rbx, r14
mov qword [rbp - 0x68], rbx
mov qword [rsi], r12
mov ecx, r12d
mov rax, qword [0x140009200]
test rax, rax
je 0x140002359
nop
cmp rax, rdi
je 0x140002346
inc ecx
mov rax, qword [r13 + rcx*8 + 0x9200]
test rax, rax
jne 0x140002330
jmp 0x140002359
mov eax, ecx
mov r8, qword [r13 + rax*8 + 0x9530]
test r8, r8
jne 0x14000243f
mov edx, 0x1f4
xor ecx, ecx
mov r9d, 0x40
mov r8d, 0x1000
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov r8, rax
test rax, rax
jne 0x140002382
mov r8, r12
jmp 0x14000241e
mov rax, rdi
mov rcx, r8
mov rdx, r15
nop dword [rax + rax]
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rcx + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rcx + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rcx + 0x50], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rcx + 0x60], xmm0
lea rcx, [rcx + 0x80]
movups xmm1, xmmword [rax + 0x70]
movups xmmword [rcx - 0x10], xmm1
lea rax, [rax + 0x80]
sub rdx, 1
jne 0x140002390
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rcx + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rcx + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rcx + 0x50], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rcx + 0x60], xmm0
mov eax, dword [rax + 0x70]
mov dword [rcx + 0x70], eax
mov rax, qword [0x140009528]
mov qword [r13 + rax*8 + 0x9200], rdi
mov qword [r13 + rax*8 + 0x9530], r8
inc rax
mov qword [0x140009528], rax
lea rdx, [rsp + 0x20]
mov rcx, qword [sym.imp.USER32.dll_GetSystemMetrics]
call r8
nop
xor rbx, r14
mov qword [rbp - 0x68], rbx
mov qword [rsi], rbx
cmp eax, 0x400
je 0x140002744
mov dword [rsp + 0x20], r12d
xorps xmm0, xmm0
movups xmmword [rbp - 0x68], xmm0
lea rsi, [rbp + 0x15a8]
mov qword [rbp - 0x60], r14
mov qword [rbp - 0x58], rsi
mov rbx, qword [rsi]
xor rbx, r14
mov qword [rbp - 0x68], rbx
mov qword [rsi], r12
mov ecx, r12d
mov rax, qword [0x140009200]
test rax, rax
je 0x1400024c9
nop dword [rax + rax]
cmp rax, rdi
je 0x1400024b6
inc ecx
mov rax, qword [r13 + rcx*8 + 0x9200]
test rax, rax
jne 0x1400024a0
jmp 0x1400024c9
mov eax, ecx
mov r8, qword [r13 + rax*8 + 0x9530]
test r8, r8
jne 0x1400025af
mov edx, 0x1f4
xor ecx, ecx
mov r9d, 0x40
mov r8d, 0x1000
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov r8, rax
test rax, rax
jne 0x1400024f2
mov r8, r12
jmp 0x14000258e
mov rax, rdi
mov rcx, r8
mov rdx, r15
nop dword [rax + rax]
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rcx + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rcx + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rcx + 0x50], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rcx + 0x60], xmm0
lea rcx, [rcx + 0x80]
movups xmm1, xmmword [rax + 0x70]
movups xmmword [rcx - 0x10], xmm1
lea rax, [rax + 0x80]
sub rdx, 1
jne 0x140002500
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rcx + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rcx + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rcx + 0x50], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rcx + 0x60], xmm0
mov eax, dword [rax + 0x70]
mov dword [rcx + 0x70], eax
mov rax, qword [0x140009528]
mov qword [r13 + rax*8 + 0x9200], rdi
mov qword [r13 + rax*8 + 0x9530], r8
inc rax
mov qword [0x140009528], rax
lea rdx, [rsp + 0x20]
mov rcx, qword [sym.imp.USER32.dll_GetSystemMetrics]
call r8
nop
xor rbx, r14
mov qword [rbp - 0x68], rbx
mov qword [rsi], rbx
cmp eax, 0x320
jne 0x14000334d
mov eax, 1
mov dword [rsp + 0x20], eax
xorps xmm0, xmm0
movups xmmword [rbp - 0x68], xmm0
lea rsi, [rbp + 0x15a8]
mov qword [rbp - 0x60], r14
mov qword [rbp - 0x58], rsi
mov rbx, qword [rsi]
xor rbx, r14
mov qword [rbp - 0x68], rbx
mov qword [rsi], r12
mov ecx, r12d
mov rax, qword [0x140009200]
test rax, rax
je 0x140002639
nop
cmp rax, rdi
je 0x140002626
inc ecx
mov rax, qword [r13 + rcx*8 + 0x9200]
test rax, rax
jne 0x140002610
jmp 0x140002639
mov eax, ecx
mov r10, qword [r13 + rax*8 + 0x9530]
test r10, r10
jne 0x14000271f
mov edx, 0x1f4
xor ecx, ecx
mov r9d, 0x40
mov r8d, 0x1000
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov r10, rax
test rax, rax
jne 0x140002662
mov r10, r12
jmp 0x1400026fe
mov rax, rdi
mov rcx, r10
nop dword [rax + rax]
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rcx + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rcx + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rcx + 0x50], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rcx + 0x60], xmm0
lea rcx, [rcx + 0x80]
movups xmm1, xmmword [rax + 0x70]
movups xmmword [rcx - 0x10], xmm1
lea rax, [rax + 0x80]
sub r15, 1
jne 0x140002670
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rcx + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rcx + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rcx + 0x50], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rcx + 0x60], xmm0
mov eax, dword [rax + 0x70]
mov dword [rcx + 0x70], eax
mov rax, qword [0x140009528]
mov qword [r13 + rax*8 + 0x9200], rdi
mov qword [r13 + rax*8 + 0x9530], r10
inc rax
mov qword [0x140009528], rax
lea rdx, [rsp + 0x20]
mov rcx, qword [sym.imp.USER32.dll_GetSystemMetrics]
call r10
nop
xor rbx, r14
mov qword [rbp - 0x68], rbx
mov qword [rsi], rbx
cmp eax, 0x258
jne 0x14000334d
xorps xmm0, xmm0
movups xmmword [rbp - 8], xmm0
lea rcx, [rbp + 0x15a8]
mov qword [rbp], r14
mov qword [rbp + 8], rcx
mov rax, qword [rcx]
xor rax, r14
mov qword [rbp - 8], rax
mov qword [rcx], r12
call qword [sym.imp.MSVCP140.dll_unsigned_int___cdecl_std::_Random_device_void_]
mov dword [rbp + 0x14e4], 0xffffffff
mov r8d, 0x6c078965
mov edx, eax
lea rcx, [rbp + 0x160]
call fcn.1400035c0
mov dword [rbp - 0x78], 0xffffff9c
mov dword [rbp - 0x74], 0x64
movdqa xmm0, xmmword [0x140006480]
movups xmmword [rbp - 0x38], xmm0
mov dword [rsp + 0x20], r12d
movsd qword [rsp + 0x40], xmm11
lea rcx, [rbp - 0x28]
call fcn.1400011c0
mov qword [rbp - 0x70], 0x64
mov rax, qword [rbp - 0x28]
mov qword [rsp + 0x30], rax
lea r8, [rbp - 0x70]
lea rdx, [rsp + 0x30]
lea rcx, [rsp + 0x50]
call fcn.1400039a0
mov rdi, qword [rax]
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp - 0x50], xmm0
mov qword [rbp - 0x40], rax
lea rcx, [rbp - 0x50]
call fcn.140003480
nop
lea rcx, [rbp - 0x70]
call fcn.1400036a0
nop
mov rdx, rax
lea rcx, [rsp + 0x30]
call fcn.1400036d0
nop
lea rdx, [rsp + 0x30]
lea rcx, [rbp - 0x50]
call fcn.1400038e0
nop
lea rcx, [rsp + 0x30]
call fcn.1400033c0
nop
lea rcx, [rbp - 0x70]
call fcn.1400033c0
lea rcx, [rbp - 0x70]
call fcn.1400036f0
nop
mov rdx, rax
lea rcx, [rsp + 0x30]
call fcn.1400036d0
nop
lea rdx, [rsp + 0x30]
lea rcx, [rbp - 0x50]
call fcn.1400038e0
nop
lea rcx, [rsp + 0x30]
call fcn.1400033c0
nop
lea rcx, [rbp - 0x70]
call fcn.1400033c0
lea rcx, [rbp - 0x70]
call fcn.140003720
nop
mov rdx, rax
lea rcx, [rsp + 0x30]
call fcn.1400036d0
nop
lea rdx, [rsp + 0x30]
lea rcx, [rbp - 0x50]
call fcn.1400038e0
nop
lea rcx, [rsp + 0x30]
call fcn.1400033c0
nop
lea rcx, [rbp - 0x70]
call fcn.1400033c0
lea rcx, [rbp - 0x70]
call fcn.140003750
nop
mov rdx, rax
lea rcx, [rsp + 0x30]
call fcn.1400036d0
nop
lea rdx, [rsp + 0x30]
lea rcx, [rbp - 0x50]
call fcn.1400038e0
nop
lea rcx, [rsp + 0x30]
call fcn.1400033c0
nop
lea rcx, [rbp - 0x70]
call fcn.1400033c0
lea rcx, [rbp - 0x70]
call fcn.140003780
nop
mov rdx, rax
lea rcx, [rsp + 0x30]
call fcn.1400036d0
nop
lea rdx, [rsp + 0x30]
lea rcx, [rbp - 0x50]
call fcn.1400038e0
nop
lea rcx, [rsp + 0x30]
call fcn.1400033c0
nop
lea rcx, [rbp - 0x70]
call fcn.1400033c0
lea rcx, [rbp - 0x70]
call fcn.1400037b0
nop
mov rdx, rax
lea rcx, [rsp + 0x30]
call fcn.1400036d0
nop
lea rdx, [rsp + 0x30]
lea rcx, [rbp - 0x50]
call fcn.1400038e0
nop
lea rcx, [rsp + 0x30]
call fcn.1400033c0
nop
lea rcx, [rbp - 0x70]
call fcn.1400033c0
lea rcx, [rbp - 0x70]
call fcn.1400011c0
mov qword [rsp + 0x30], rdi
mov rax, qword [rax]
mov qword [rsp + 0x48], rax
lea rdx, [rsp + 0x30]
lea rcx, [rsp + 0x48]
call fcn.140001490
mov r15d, 1
test al, al
jns 0x140002d45
nop dword [rax]
mov r14d, 0x186a0
nop word [rax + rax]
mov r9d, dword [rbp - 0x74]
mov r8d, dword [rbp - 0x78]
lea rdx, [rbp + 0x160]
lea rcx, [rbp - 0x78]
call fcn.140003d10
mov r9d, dword [rbp - 0x74]
mov r8d, dword [rbp - 0x78]
lea rdx, [rbp + 0x160]
lea rcx, [rbp - 0x78]
call fcn.140003d10
mov rcx, qword [rbp - 0x48]
mov r8, qword [rbp - 0x50]
sub rcx, r8
sar rcx, 3
cdqe
xor edx, edx
div rcx
movsxd rax, edx
mov rsi, qword [r8 + rax*8]
mov rax, qword [rsi]
mov rbx, qword [rax + 8]
mov r9d, dword [rbp - 0x74]
mov r8d, dword [rbp - 0x78]
lea rdx, [rbp + 0x160]
lea rcx, [rbp - 0x78]
call fcn.140003d10
mov r8d, eax
mov edx, dword [rsp + 0x20]
mov rcx, rsi
call rbx
mov dword [rsp + 0x20], eax
lea rdx, [rbp + 0x160]
lea rcx, [rbp - 0x38]
call fcn.1400039c0
movaps xmm9, xmm0
lea rdx, [rbp + 0x160]
lea rcx, [rbp - 0x38]
call fcn.1400039c0
movaps xmm7, xmm0
andps xmm0, xmm12
addsd xmm0, xmm10
call sub.api_ms_win_crt_math_l1_1_0.dll_log
movaps xmm8, xmm0
movaps xmm0, xmm9
call sub.api_ms_win_crt_math_l1_1_0.dll_cos
movaps xmm6, xmm0
movaps xmm0, xmm7
call sub.api_ms_win_crt_math_l1_1_0.dll_sin
mulsd xmm6, xmm0
addsd xmm8, xmm6
movaps xmm0, xmm9
call sub.api_ms_win_crt_math_l1_1_0.dll_exp
subsd xmm8, xmm0
addsd xmm8, qword [rsp + 0x40]
movsd qword [rsp + 0x40], xmm8
lea rdx, [rbp + 0x160]
lea rcx, [rbp - 0x38]
call fcn.1400039c0
movaps xmm1, xmm13
call sub.api_ms_win_crt_math_l1_1_0.dll_pow
movsd xmm1, qword [rsp + 0x40]
subsd xmm1, xmm0
movsd qword [rsp + 0x40], xmm1
lea rdx, [rbp + 0x160]
lea rcx, [rbp - 0x38]
call fcn.1400039c0
call sub.api_ms_win_crt_math_l1_1_0.dll_tan
movsd xmm1, qword [rsp + 0x40]
mulsd xmm0, xmm1
movsd qword [rsp + 0x40], xmm0
lea rdx, str.random
lea rcx, [rbp + 0x18]
call fcn.140003580
nop
lea rdx, [rbp + 0x160]
lea rcx, [rbp + 0x18]
call fcn.140001350
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp - 0x68], xmm0
mov qword [rbp - 0x58], rax
lea rcx, [rbp - 0x68]
call fcn.140003480
mov edx, 0x64
lea rcx, [rbp - 0x68]
call fcn.140003920
nop
lea rax, [rbp - 0x78]
mov qword [rsp + 0x60], rax
lea rax, [rbp + 0x160]
mov qword [rsp + 0x68], rax
lea rdx, [rsp + 0x50]
lea rcx, [rbp - 0x68]
call fcn.1400034a0
mov rbx, qword [rax]
lea rdx, [rbp - 0x80]
lea rcx, [rbp - 0x68]
call fcn.1400034b0
movaps xmm0, xmmword [rsp + 0x60]
movdqa xmmword [rsp + 0x30], xmm0
lea r8, [rsp + 0x30]
mov rdx, rbx
mov rcx, qword [rax]
call fcn.1400037e0
lea rdx, [rbp + 0x160]
lea rcx, [rbp - 0x68]
call fcn.1400013e0
lea rdx, [rsp + 0x78]
lea rcx, [rbp - 0x68]
call fcn.1400034a0
mov rbx, qword [rax]
lea rdx, [rsp + 0x70]
lea rcx, [rbp - 0x68]
call fcn.1400034b0
xor r9d, r9d
xor r8d, r8d
mov rdx, rbx
mov rcx, qword [rax]
call fcn.140003a40
mov ecx, dword [rsp + 0x20]
add ecx, eax
mov dword [rsp + 0x20], ecx
mov r9d, dword [rbp - 0x74]
mov r8d, dword [rbp - 0x78]
lea rdx, [rbp + 0x160]
lea rcx, [rbp - 0x78]
call fcn.140003d10
mov ebx, eax
mov r9d, dword [rbp - 0x74]
mov r8d, dword [rbp - 0x78]
lea rdx, [rbp + 0x160]
lea rcx, [rbp - 0x78]
call fcn.140003d10
mov r8d, eax
mov ecx, ebx
test ebx, ebx
cmove ecx, r15d
sub eax, ebx
cdq
idiv ecx
imul ebx, r8d
add eax, ebx
mov ecx, dword [rsp + 0x20]
add ecx, eax
mov dword [rsp + 0x20], ecx
mov eax, dword [rsp + 0x20]
mov r9d, dword [rbp - 0x74]
mov r8d, dword [rbp - 0x78]
lea rdx, [rbp + 0x160]
lea rcx, [rbp - 0x78]
test al, 1
jne 0x140002c34
call fcn.140003d10
mov ecx, dword [rsp + 0x20]
add ecx, eax
jmp 0x140002c3f
call fcn.140003d10
mov ecx, dword [rsp + 0x20]
sub ecx, eax
mov dword [rsp + 0x20], ecx
mov esi, 5
nop dword [rax + rax]
mov ebx, r12d
nop dword [rax]
nop word [rax + rax]
mov r9d, dword [rbp - 0x74]
mov r8d, dword [rbp - 0x78]
lea rdx, [rbp + 0x160]
lea rcx, [rbp - 0x78]
call fcn.140003d10
mov ecx, dword [rsp + 0x20]
add ecx, eax
mov dword [rsp + 0x20], ecx
lea rdx, [rbp + 0x160]
lea rcx, [rbp - 0x38]
call fcn.1400039c0
addsd xmm0, qword [rsp + 0x40]
movsd qword [rsp + 0x40], xmm0
lea rdx, [rbp + 0x160]
test bl, 1
jne 0x140002cc8
mov r9d, dword [rbp - 0x74]
mov r8d, dword [rbp - 0x78]
lea rcx, [rbp - 0x78]
call fcn.140003d10
mov ecx, dword [rsp + 0x20]
imul ecx, eax
mov dword [rsp + 0x20], ecx
jmp 0x140002ce6
lea rcx, [rbp - 0x38]
call fcn.1400039c0
movsd xmm1, qword [rsp + 0x40]
addsd xmm0, xmm10
divsd xmm1, xmm0
movsd qword [rsp + 0x40], xmm1
inc ebx
cmp ebx, 5
jl 0x140002c60
sub rsi, 1
jne 0x140002c50
lea rcx, [rbp - 0x68]
call fcn.1400034c0
nop
lea rcx, [rbp + 0x18]
call fcn.140003520
sub r14, 1
jne 0x1400029a0
lea rcx, [rbp - 0x70]
call fcn.1400011c0
mov qword [rsp + 0x30], rdi
mov rax, qword [rax]
mov qword [rsp + 0x48], rax
lea rdx, [rsp + 0x30]
lea rcx, [rsp + 0x48]
call fcn.140001490
test al, al
js 0x140002990
mov eax, dword [rsp + 0x20]
lea rcx, [rbp - 0x50]
call fcn.1400033e0
mov qword [r12], r12
call qword [sym.imp.MSVCP140.dll_unsigned_int___cdecl_std::_Random_device_void_]
mov dword [rbp + 0x14e4], 0xffffffff
mov r8d, 0x6c078965
mov edx, eax
lea rcx, [rbp + 0x160]
call fcn.1400035c0
mov dword [rbp - 0x78], 0xffffff9c
mov dword [rbp - 0x74], 0x64
movdqa xmm0, xmmword [0x140006480]
movups xmmword [rbp - 0x38], xmm0
mov dword [rsp + 0x20], r12d
movsd qword [rsp + 0x40], xmm11
lea rcx, [rbp - 0x28]
call fcn.1400011c0
mov qword [rbp - 0x70], 0x64
mov rax, qword [rbp - 0x28]
mov qword [rsp + 0x30], rax
lea r8, [rbp - 0x70]
lea rdx, [rsp + 0x30]
lea rcx, [rsp + 0x50]
call fcn.1400039a0
mov rdi, qword [rax]
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp - 0x50], xmm0
mov qword [rbp - 0x40], rax
lea rcx, [rbp - 0x50]
call fcn.140003480
nop
lea rcx, [rbp - 0x70]
call fcn.1400036a0
nop
mov rdx, rax
lea rcx, [rsp + 0x30]
call fcn.1400036d0
nop
lea rdx, [rsp + 0x30]
lea rcx, [rbp - 0x50]
call fcn.1400038e0
nop
lea rcx, [rsp + 0x30]
call fcn.1400033c0
nop
lea rcx, [rbp - 0x70]
call fcn.1400033c0
lea rcx, [rbp - 0x70]
call fcn.1400036f0
nop
mov rdx, rax
lea rcx, [rsp + 0x30]
call fcn.1400036d0
nop
lea rdx, [rsp + 0x30]
lea rcx, [rbp - 0x50]
call fcn.1400038e0
nop
lea rcx, [rsp + 0x30]
call fcn.1400033c0
nop
lea rcx, [rbp - 0x70]
call fcn.1400033c0
lea rcx, [rbp - 0x70]
call fcn.140003720
nop
mov rdx, rax
lea rcx, [rsp + 0x30]
call fcn.1400036d0
nop
lea rdx, [rsp + 0x30]
lea rcx, [rbp - 0x50]
call fcn.1400038e0
nop
lea rcx, [rsp + 0x30]
call fcn.1400033c0
nop
lea rcx, [rbp - 0x70]
call fcn.1400033c0
lea rcx, [rbp - 0x70]
call fcn.140003750
nop
mov rdx, rax
lea rcx, [rsp + 0x30]
call fcn.1400036d0
nop
lea rdx, [rsp + 0x30]
lea rcx, [rbp - 0x50]
call fcn.1400038e0
nop
lea rcx, [rsp + 0x30]
call fcn.1400033c0
nop
lea rcx, [rbp - 0x70]
call fcn.1400033c0
lea rcx, [rbp - 0x70]
call fcn.140003780
nop
mov rdx, rax
lea rcx, [rsp + 0x30]
call fcn.1400036d0
nop
lea rdx, [rsp + 0x30]
lea rcx, [rbp - 0x50]
call fcn.1400038e0
nop
lea rcx, [rsp + 0x30]
call fcn.1400033c0
nop
lea rcx, [rbp - 0x70]
call fcn.1400033c0
lea rcx, [rbp - 0x70]
call fcn.1400037b0
nop
mov rdx, rax
lea rcx, [rsp + 0x30]
call fcn.1400036d0
nop
lea rdx, [rsp + 0x30]
lea rcx, [rbp - 0x50]
call fcn.1400038e0
nop
lea rcx, [rsp + 0x30]
call fcn.1400033c0
nop
lea rcx, [rbp - 0x70]
call fcn.1400033c0
lea rcx, [rbp - 0x70]
call fcn.1400011c0
mov qword [rsp + 0x30], rdi
mov rax, qword [rax]
mov qword [rsp + 0x48], rax
lea rdx, [rsp + 0x30]
lea rcx, [rsp + 0x48]
call fcn.140001490
test al, al
jns 0x140003335
nop word [rax + rax]
mov r14d, 0x186a0
nop word [rax + rax]
mov r9d, dword [rbp - 0x74]
mov r8d, dword [rbp - 0x78]
lea rdx, [rbp + 0x160]
lea rcx, [rbp - 0x78]
call fcn.140003d10
mov r9d, dword [rbp - 0x74]
mov r8d, dword [rbp - 0x78]
lea rdx, [rbp + 0x160]
lea rcx, [rbp - 0x78]
call fcn.140003d10
mov rcx, qword [rbp - 0x48]
mov r8, qword [rbp - 0x50]
sub rcx, r8
sar rcx, 3
cdqe
xor edx, edx
div rcx
movsxd rax, edx
mov rsi, qword [r8 + rax*8]
mov rax, qword [rsi]
mov rbx, qword [rax + 8]
mov r9d, dword [rbp - 0x74]
mov r8d, dword [rbp - 0x78]
lea rdx, [rbp + 0x160]
lea rcx, [rbp - 0x78]
call fcn.140003d10
mov r8d, eax
mov edx, dword [rsp + 0x20]
mov rcx, rsi
call rbx
mov dword [rsp + 0x20], eax
lea rdx, [rbp + 0x160]
lea rcx, [rbp - 0x38]
call fcn.1400039c0
movaps xmm9, xmm0
lea rdx, [rbp + 0x160]
lea rcx, [rbp - 0x38]
call fcn.1400039c0
movaps xmm7, xmm0
andps xmm0, xmm12
addsd xmm0, xmm10
call sub.api_ms_win_crt_math_l1_1_0.dll_log
movaps xmm8, xmm0
movaps xmm0, xmm9
call sub.api_ms_win_crt_math_l1_1_0.dll_cos
movaps xmm6, xmm0
movaps xmm0, xmm7
call sub.api_ms_win_crt_math_l1_1_0.dll_sin
mulsd xmm6, xmm0
addsd xmm8, xmm6
movaps xmm0, xmm9
call sub.api_ms_win_crt_math_l1_1_0.dll_exp
subsd xmm8, xmm0
addsd xmm8, qword [rsp + 0x40]
movsd qword [rsp + 0x40], xmm8
lea rdx, [rbp + 0x160]
lea rcx, [rbp - 0x38]
call fcn.1400039c0
movaps xmm1, xmm13
call sub.api_ms_win_crt_math_l1_1_0.dll_pow
movsd xmm1, qword [rsp + 0x40]
subsd xmm1, xmm0
movsd qword [rsp + 0x40], xmm1
lea rdx, [rbp + 0x160]
lea rcx, [rbp - 0x38]
call fcn.1400039c0
call sub.api_ms_win_crt_math_l1_1_0.dll_tan
movsd xmm1, qword [rsp + 0x40]
mulsd xmm0, xmm1
movsd qword [rsp + 0x40], xmm0
lea rdx, str.random
lea rcx, [rbp + 0x18]
call fcn.140003580
nop
lea rdx, [rbp + 0x160]
lea rcx, [rbp + 0x18]
call fcn.140001350
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp - 0x68], xmm0
mov qword [rbp - 0x58], rax
lea rcx, [rbp - 0x68]
call fcn.140003480
mov edx, 0x64
lea rcx, [rbp - 0x68]
call fcn.140003920
nop
lea rax, [rbp - 0x78]
mov qword [rsp + 0x60], rax
lea rax, [rbp + 0x160]
mov qword [rsp + 0x68], rax
lea rdx, [rsp + 0x50]
lea rcx, [rbp - 0x68]
call fcn.1400034a0
mov rbx, qword [rax]
lea rdx, [rbp - 0x80]
lea rcx, [rbp - 0x68]
call fcn.1400034b0
movaps xmm0, xmmword [rsp + 0x60]
movdqa xmmword [rsp + 0x30], xmm0
lea r8, [rsp + 0x30]
mov rdx, rbx
mov rcx, qword [rax]
call fcn.1400037e0
lea rdx, [rbp + 0x160]
lea rcx, [rbp - 0x68]
call fcn.1400013e0
lea rdx, [rsp + 0x78]
lea rcx, [rbp - 0x68]
call fcn.1400034a0
mov rbx, qword [rax]
lea rdx, [rsp + 0x70]
lea rcx, [rbp - 0x68]
call fcn.1400034b0
xor r9d, r9d
xor r8d, r8d
mov rdx, rbx
mov rcx, qword [rax]
call fcn.140003a40
mov ecx, dword [rsp + 0x20]
add ecx, eax
mov dword [rsp + 0x20], ecx
mov r9d, dword [rbp - 0x74]
mov r8d, dword [rbp - 0x78]
lea rdx, [rbp + 0x160]
lea rcx, [rbp - 0x78]
call fcn.140003d10
mov ebx, eax
mov r9d, dword [rbp - 0x74]
mov r8d, dword [rbp - 0x78]
lea rdx, [rbp + 0x160]
lea rcx, [rbp - 0x78]
call fcn.140003d10
mov r8d, eax
mov ecx, ebx
test ebx, ebx
cmove ecx, r15d
sub eax, ebx
cdq
idiv ecx
imul ebx, r8d
add eax, ebx
mov ecx, dword [rsp + 0x20]
add ecx, eax
mov dword [rsp + 0x20], ecx
mov eax, dword [rsp + 0x20]
mov r9d, dword [rbp - 0x74]
mov r8d, dword [rbp - 0x78]
lea rdx, [rbp + 0x160]
lea rcx, [rbp - 0x78]
test al, 1
jne 0x140003224
call fcn.140003d10
mov ecx, dword [rsp + 0x20]
add ecx, eax
jmp 0x14000322f
call fcn.140003d10
mov ecx, dword [rsp + 0x20]
sub ecx, eax
mov dword [rsp + 0x20], ecx
mov esi, 5
nop dword [rax + rax]
mov ebx, r12d
nop dword [rax]
nop word [rax + rax]
mov r9d, dword [rbp - 0x74]
mov r8d, dword [rbp - 0x78]
lea rdx, [rbp + 0x160]
lea rcx, [rbp - 0x78]
call fcn.140003d10
mov ecx, dword [rsp + 0x20]
add ecx, eax
mov dword [rsp + 0x20], ecx
lea rdx, [rbp + 0x160]
lea rcx, [rbp - 0x38]
call fcn.1400039c0
addsd xmm0, qword [rsp + 0x40]
movsd qword [rsp + 0x40], xmm0
lea rdx, [rbp + 0x160]
test bl, 1
jne 0x1400032b8
mov r9d, dword [rbp - 0x74]
mov r8d, dword [rbp - 0x78]
lea rcx, [rbp - 0x78]
call fcn.140003d10
mov ecx, dword [rsp + 0x20]
imul ecx, eax
mov dword [rsp + 0x20], ecx
jmp 0x1400032d6
lea rcx, [rbp - 0x38]
call fcn.1400039c0
movsd xmm1, qword [rsp + 0x40]
addsd xmm0, xmm10
divsd xmm1, xmm0
movsd qword [rsp + 0x40], xmm1
inc ebx
cmp ebx, 5
jl 0x140003250
sub rsi, 1
jne 0x140003240
lea rcx, [rbp - 0x68]
call fcn.1400034c0
nop
lea rcx, [rbp + 0x18]
call fcn.140003520
sub r14, 1
jne 0x140002f90
lea rcx, [rbp - 0x70]
call fcn.1400011c0
mov qword [rsp + 0x30], rdi
mov rax, qword [rax]
mov qword [rsp + 0x48], rax
lea rdx, [rsp + 0x30]
lea rcx, [rsp + 0x48]
call fcn.140001490
test al, al
js 0x140002f80
mov eax, dword [rsp + 0x20]
lea rcx, [rbp - 0x50]
call fcn.1400033e0
nop
movabs r14, 0xff00ff00ff00ff00
mov rax, qword [rbp - 0x20]
xor rax, r14
lea rcx, [rbp + 0x15a8]
mov qword [rcx], rax
xor eax, eax
mov rcx, qword [rbp + 0x14f0]
xor rcx, rsp
call fcn.140004670
lea r11, [rsp + 0x1680]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
movaps xmm8, xmmword [r11 - 0x30]
movaps xmm9, xmmword [r11 - 0x40]
movaps xmm10, xmmword [r11 - 0x50]
movaps xmm11, xmmword [r11 - 0x60]
movaps xmm12, xmmword [r11 - 0x70]
movaps xmm13, xmmword [r11 - 0x80]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret