Function at 0x14000b4e0
Capabilities:
Allocate or change rwx memory
Check os version
Delete file
Execute shellcode via indirect call
Generate random numbers using a mersenne twister
Query environment variable

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x18], rsi
push rdi
push r12
push r13
push r14
push r15
mov eax, 0x103d0
call fcn.140020c80
sub rsp, rax
movaps xmmword [rsp + 0x103c0], xmm6
movaps xmmword [rsp + 0x103b0], xmm7
movaps xmmword [rsp + 0x103a0], xmm8
movaps xmmword [rsp + 0x10390], xmm9
movaps xmmword [rsp + 0x10380], xmm10
movaps xmmword [rsp + 0x10370], xmm11
movaps xmmword [rsp + 0x10360], xmm12
movaps xmmword [rsp + 0x10350], xmm13
mov rax, qword [0x14002b010]
xor rax, rsp
mov qword [rsp + 0x10340], rax
mov r15, rdx
xor r14d, r14d
xorps xmm0, xmm0
movups xmmword [rsp + 0x10f0], xmm0
lea rdx, [rsp + 0x103f8]
movabs rcx, 0xff00ff00ff00ff00
mov qword [rsp + 0x10f8], rcx
mov qword [rsp + 0x1100], rdx
mov rax, qword [rdx]
xor rax, rcx
mov qword [rsp + 0x10f0], rax
mov qword [rdx], r14
mov dword [rsp + 0x80], 0xfa0
xor eax, eax
movups xmmword [rsp + 0x1150], xmm0
mov qword [rsp + 0x1160], rax
lea rdx, [rsp + 0x103f8]
lea rcx, [rsp + 0x1150]
call fcn.140002960
nop
mov ecx, r14d
mov rax, qword [0x14002d120]
lea rbx, [0x140016070]
lea rsi, [0x140000000]
test rax, rax
je 0x14000b606
mov edx, r14d
nop
cmp rax, rbx
je 0x14000b633
inc ecx
mov edx, ecx
mov rax, qword [rsi + rcx*8 + 0x2d120]
test rax, rax
jne 0x14000b5f0
mov edx, 0x1f4
xor ecx, ecx
lea r9d, [rcx + 0x40]
mov r8d, 0x1000
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov r8, rax
mov r12d, 3
test rax, rax
jne 0x14000b64b
mov r8, r14
jmp 0x14000b6ee
mov r8, qword [rsi + rdx*8 + 0x2e430]
test r8, r8
je 0x14000b606
mov r12d, 3
jmp 0x14000b70f
mov rax, rbx
mov rcx, r8
mov rdx, r12
nop dword [rax]
nop dword [rax + rax]
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rcx + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rcx + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rcx + 0x50], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rcx + 0x60], xmm0
lea rcx, [rcx + 0x80]
movups xmm1, xmmword [rax + 0x70]
movups xmmword [rcx - 0x10], xmm1
lea rax, [rax + 0x80]
sub rdx, 1
jne 0x14000b660
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rcx + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rcx + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rcx + 0x50], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rcx + 0x60], xmm0
mov eax, dword [rax + 0x70]
mov dword [rcx + 0x70], eax
mov rax, qword [0x14002d770]
mov qword [rsi + rax*8 + 0x2d120], rbx
mov qword [rsi + rax*8 + 0x2e430], r8
inc rax
mov qword [0x14002d770], rax
lea rdx, [rsp + 0x80]
mov rcx, qword [sym.imp.KERNEL32.dll_Sleep]
call r8
nop
mov rcx, qword [rsp + 0x1150]
xor rcx, qword [rsp + 0x1158]
mov qword [rsp + 0x1150], rcx
mov rax, qword [rsp + 0x1160]
mov qword [rax], rcx
xor edx, edx
mov r8d, 0x110
lea rcx, [rsp + 0x1764]
call sub.VCRUNTIME140.dll_memset
mov dword [rsp + 0x1760], 0x114
lea rcx, [rsp + 0x1760]
call qword [sym.imp.KERNEL32.dll_GetVersionExW]
call qword [sym.imp.MSVCP140.dll_unsigned_int___cdecl_std::_Random_device_void_]
mov dword [rsp + 0x2c04], 0xffffffff
mov r8d, 0x6c078965
mov edx, eax
lea rcx, [rsp + 0x1880]
call fcn.140015560
mov dword [rsp + 0xd68], 0xffffff9c
mov dword [rsp + 0xd6c], 0x64
movaps xmm0, xmmword [0x140024280]
movups xmmword [rsp + 0xfb8], xmm0
mov dword [rsp + 0x30], r14d
xorps xmm11, xmm11
movsd qword [rsp + 0x38], xmm11
lea rcx, [rsp + 0x12a0]
call fcn.140001aa0
mov qword [rsp + 0x3d8], 0x64
mov rax, qword [rsp + 0x12a0]
mov qword [rsp + 0x3e0], rax
lea r8, [rsp + 0x3d8]
lea rdx, [rsp + 0x3e0]
lea rcx, [rsp + 0x868]
call fcn.140015950
mov rdi, qword [rax]
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rsp + 0xe50], xmm0
mov qword [rsp + 0xe60], rax
lea rcx, [rsp + 0xe50]
call fcn.140014490
nop
lea rcx, [rsp + 0x3e8]
call fcn.140015970
nop
mov rdx, rax
lea rcx, [rsp + 0x190]
call fcn.1400159a0
nop
lea rdx, [rsp + 0x190]
lea rcx, [rsp + 0xe50]
call fcn.140016650
nop
lea rcx, [rsp + 0x190]
call fcn.1400144b0
nop
lea rcx, [rsp + 0x3e8]
call fcn.1400144b0
lea rcx, [rsp + 0x3f0]
call fcn.1400159c0
nop
mov rdx, rax
lea rcx, [rsp + 0x198]
call fcn.1400159a0
nop
lea rdx, [rsp + 0x198]
lea rcx, [rsp + 0xe50]
call fcn.140016650
nop
lea rcx, [rsp + 0x198]
call fcn.1400144b0
nop
lea rcx, [rsp + 0x3f0]
call fcn.1400144b0
lea rcx, [rsp + 0x3f8]
call fcn.1400159f0
nop
mov rdx, rax
lea rcx, [rsp + 0x1a0]
call fcn.1400159a0
nop
lea rdx, [rsp + 0x1a0]
lea rcx, [rsp + 0xe50]
call fcn.140016650
nop
lea rcx, [rsp + 0x1a0]
call fcn.1400144b0
nop
lea rcx, [rsp + 0x3f8]
call fcn.1400144b0
lea rcx, [rsp + 0x400]
call fcn.140015a20
nop
mov rdx, rax
lea rcx, [rsp + 0x1a8]
call fcn.1400159a0
nop
lea rdx, [rsp + 0x1a8]
lea rcx, [rsp + 0xe50]
call fcn.140016650
nop
lea rcx, [rsp + 0x1a8]
call fcn.1400144b0
nop
lea rcx, [rsp + 0x400]
call fcn.1400144b0
lea rcx, [rsp + 0x408]
call fcn.140015a50
nop
mov rdx, rax
lea rcx, [rsp + 0x1b0]
call fcn.1400159a0
nop
lea rdx, [rsp + 0x1b0]
lea rcx, [rsp + 0xe50]
call fcn.140016650
nop
lea rcx, [rsp + 0x1b0]
call fcn.1400144b0
nop
lea rcx, [rsp + 0x408]
call fcn.1400144b0
lea rcx, [rsp + 0x410]
call fcn.140015a80
nop
mov rdx, rax
lea rcx, [rsp + 0x1b8]
call fcn.1400159a0
nop
lea rdx, [rsp + 0x1b8]
lea rcx, [rsp + 0xe50]
call fcn.140016650
nop
lea rcx, [rsp + 0x1b8]
call fcn.1400144b0
nop
lea rcx, [rsp + 0x410]
call fcn.1400144b0
lea rcx, [rsp + 0x418]
call fcn.140001aa0
mov qword [rsp + 0x70], rdi
mov rax, qword [rax]
mov qword [rsp + 0x68], rax
lea rdx, [rsp + 0x70]
lea rcx, [rsp + 0x68]
call fcn.1400028d0
movsd xmm13, qword [0x1400242b0]
movsd xmm10, qword [0x1400241e8]
movsd xmm12, qword [0x1400241f0]
test al, al
jns 0x14000bf0f
mov r13d, 1
nop dword [rax]
mov r14d, 0x186a0
nop word [rax + rax]
mov r9d, dword [rsp + 0xd6c]
mov r8d, dword [rsp + 0xd68]
lea rdx, [rsp + 0x1880]
lea rcx, [rsp + 0xd68]
call fcn.1400175c0
mov r9d, dword [rsp + 0xd6c]
mov r8d, dword [rsp + 0xd68]
lea rdx, [rsp + 0x1880]
lea rcx, [rsp + 0xd68]
call fcn.1400175c0
mov rcx, qword [rsp + 0xe58]
mov rsi, qword [rsp + 0xe50]
sub rcx, rsi
sar rcx, 3
cdqe
xor edx, edx
div rcx
movsxd rax, edx
mov rsi, qword [rsi + rax*8]
mov rax, qword [rsi]
mov rbx, qword [rax + 8]
mov r9d, dword [rsp + 0xd6c]
mov r8d, dword [rsp + 0xd68]
lea rdx, [rsp + 0x1880]
lea rcx, [rsp + 0xd68]
call fcn.1400175c0
mov r8d, eax
mov edx, dword [rsp + 0x30]
mov rcx, rsi
call rbx
mov dword [rsp + 0x30], eax
lea rdx, [rsp + 0x1880]
lea rcx, [rsp + 0xfb8]
call fcn.140015ab0
movaps xmm9, xmm0
lea rdx, [rsp + 0x1880]
lea rcx, [rsp + 0xfb8]
call fcn.140015ab0
movaps xmm6, xmm0
movaps xmm7, xmm0
andps xmm7, xmm13
movaps xmm0, xmm9
call sub.api_ms_win_crt_math_l1_1_0.dll_cos
movaps xmm8, xmm0
movaps xmm0, xmm6
call sub.api_ms_win_crt_math_l1_1_0.dll_sin
mulsd xmm8, xmm0
addsd xmm7, xmm10
movaps xmm0, xmm7
call sub.api_ms_win_crt_math_l1_1_0.dll_log
addsd xmm8, xmm0
movaps xmm0, xmm9
call sub.api_ms_win_crt_math_l1_1_0.dll_exp
subsd xmm8, xmm0
movsd xmm1, qword [rsp + 0x38]
addsd xmm8, xmm1
movsd qword [rsp + 0x38], xmm8
lea rdx, [rsp + 0x1880]
lea rcx, [rsp + 0xfb8]
call fcn.140015ab0
movaps xmm1, xmm12
call sub.api_ms_win_crt_math_l1_1_0.dll_pow
movsd xmm1, qword [rsp + 0x38]
subsd xmm1, xmm0
movsd qword [rsp + 0x38], xmm1
lea rdx, [rsp + 0x1880]
lea rcx, [rsp + 0xfb8]
call fcn.140015ab0
call sub.api_ms_win_crt_math_l1_1_0.dll_tan
mulsd xmm0, qword [rsp + 0x38]
movsd qword [rsp + 0x38], xmm0
lea rdx, str.random
lea rcx, [rsp + 0x14c0]
call fcn.140014c30
nop
lea rdx, [rsp + 0x1880]
lea rcx, [rsp + 0x14c0]
call fcn.140002710
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rsp + 0x1078], xmm0
mov qword [rsp + 0x1088], rax
lea rcx, [rsp + 0x1078]
call fcn.140014490
mov edx, 0x64
lea rcx, [rsp + 0x1078]
call fcn.140016690
nop
lea rdx, [rsp + 0x870]
lea rcx, [rsp + 0x1078]
call fcn.140014620
mov rbx, qword [rax]
lea rdx, [rsp + 0x878]
lea rcx, [rsp + 0x1078]
call fcn.140014630
lea rcx, [rsp + 0xd68]
mov qword [rsp + 0x6f0], rcx
lea rcx, [rsp + 0x1880]
mov qword [rsp + 0x6f8], rcx
lea r8, [rsp + 0x6f0]
mov rdx, rbx
mov rcx, qword [rax]
call fcn.140015b40
lea rdx, [rsp + 0x1880]
lea rcx, [rsp + 0x1078]
call fcn.140002820
lea rdx, [rsp + 0x880]
lea rcx, [rsp + 0x1078]
call fcn.140014620
mov rbx, qword [rax]
lea rdx, [rsp + 0x888]
lea rcx, [rsp + 0x1078]
call fcn.140014630
xor r9d, r9d
xor r8d, r8d
mov rdx, rbx
mov rcx, qword [rax]
call fcn.140015ba0
mov ecx, dword [rsp + 0x30]
add ecx, eax
mov dword [rsp + 0x30], ecx
mov r9d, dword [rsp + 0xd6c]
mov r8d, dword [rsp + 0xd68]
lea rdx, [rsp + 0x1880]
lea rcx, [rsp + 0xd68]
call fcn.1400175c0
mov ebx, eax
mov r9d, dword [rsp + 0xd6c]
mov r8d, dword [rsp + 0xd68]
lea rdx, [rsp + 0x1880]
lea rcx, [rsp + 0xd68]
call fcn.1400175c0
mov r8d, eax
mov ecx, ebx
test ebx, ebx
cmove ecx, r13d
sub eax, ebx
cdq
idiv ecx
imul ebx, r8d
add eax, ebx
mov ecx, dword [rsp + 0x30]
add eax, ecx
mov dword [rsp + 0x30], eax
mov eax, dword [rsp + 0x30]
and eax, 0x80000001
jge 0x14000bd9d
dec eax
or eax, 0xfffffffe
inc eax
mov r9d, dword [rsp + 0xd6c]
mov r8d, dword [rsp + 0xd68]
lea rdx, [rsp + 0x1880]
lea rcx, [rsp + 0xd68]
test eax, eax
jne 0x14000bdd2
call fcn.1400175c0
mov ecx, dword [rsp + 0x30]
add eax, ecx
mov dword [rsp + 0x30], eax
jmp 0x14000bde1
call fcn.1400175c0
mov ecx, dword [rsp + 0x30]
sub ecx, eax
mov dword [rsp + 0x30], ecx
mov esi, 5
xor ebx, ebx
nop dword [rax + rax]
mov r9d, dword [rsp + 0xd6c]
mov r8d, dword [rsp + 0xd68]
lea rdx, [rsp + 0x1880]
lea rcx, [rsp + 0xd68]
call fcn.1400175c0
mov ecx, dword [rsp + 0x30]
add eax, ecx
mov dword [rsp + 0x30], eax
lea rdx, [rsp + 0x1880]
lea rcx, [rsp + 0xfb8]
call fcn.140015ab0
movsd xmm1, qword [rsp + 0x38]
addsd xmm0, xmm1
movsd qword [rsp + 0x38], xmm0
lea rdx, [rsp + 0x1880]
test bl, 1
jne 0x14000be7b
mov r9d, dword [rsp + 0xd6c]
mov r8d, dword [rsp + 0xd68]
lea rcx, [rsp + 0xd68]
call fcn.1400175c0
mov ecx, dword [rsp + 0x30]
imul eax, ecx
mov dword [rsp + 0x30], eax
jmp 0x14000be9d
movsd xmm6, qword [rsp + 0x38]
lea rcx, [rsp + 0xfb8]
call fcn.140015ab0
addsd xmm0, xmm10
divsd xmm6, xmm0
movsd qword [rsp + 0x38], xmm6
inc ebx
cmp ebx, 5
jl 0x14000bdf0
sub rsi, 1
jne 0x14000bde6
lea rcx, [rsp + 0x1078]
call fcn.140014640
nop
lea rcx, [rsp + 0x14c0]
call fcn.140014b90
sub r14, 1
jne 0x14000ba80
lea rcx, [rsp + 0x418]
call fcn.140001aa0
mov qword [rsp + 0x70], rdi
mov rax, qword [rax]
mov qword [rsp + 0x68], rax
lea rdx, [rsp + 0x70]
lea rcx, [rsp + 0x68]
call fcn.1400028d0
test al, al
js 0x14000ba70
lea rsi, [0x140000000]
mov eax, dword [rsp + 0x30]
lea rcx, [rsp + 0xe50]
call fcn.140014520
mov rbx, qword [r15]
movzx edx, byte [rsp + 0x40]
lea rcx, [rsp + 0x1310]
call fcn.140016a80
nop
mov r13, 0xffffffffffffffff
mov r8, r13
inc r8
cmp byte [rbx + r8], 0
jne 0x14000bf40
mov rdx, rbx
lea rcx, [rsp + 0x1310]
call fcn.140016aa0
nop
mov dword [rsp + 0x84], r14d
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rsp + 0x1168], xmm0
mov qword [rsp + 0x1178], rax
lea rdx, [rsp + 0x103f8]
lea rcx, [rsp + 0x1168]
call fcn.140002960
nop
mov ecx, r14d
mov rax, qword [0x14002daa0]
lea rbx, [0x140016070]
test rax, rax
je 0x14000bfd0
mov rdx, r14
cmp rax, rbx
je 0x14000bfbf
inc ecx
mov edx, ecx
mov rax, qword [rsi + rcx*8 + 0x2daa0]
test rax, rax
jne 0x14000bfa7
jmp 0x14000bfd0
mov r8, qword [rsi + rdx*8 + 0x2c7b0]
test r8, r8
jne 0x14000c0af
mov edx, 0x1f4
xor ecx, ecx
lea r9d, [rcx + 0x40]
mov r8d, 0x1000
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov r8, rax
test rax, rax
jne 0x14000bff7
mov r8, r14
jmp 0x14000c08e
mov rax, rbx
mov rcx, r8
mov rdx, r12
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rcx + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rcx + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rcx + 0x50], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rcx + 0x60], xmm0
lea rcx, [rcx + 0x80]
movups xmm1, xmmword [rax + 0x70]
movups xmmword [rcx - 0x10], xmm1
lea rax, [rax + 0x80]
sub rdx, 1
jne 0x14000c000
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rcx + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rcx + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rcx + 0x50], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rcx + 0x60], xmm0
mov eax, dword [rax + 0x70]
mov dword [rcx + 0x70], eax
mov rax, qword [0x14002c470]
mov qword [rsi + rax*8 + 0x2daa0], rbx
mov qword [rsi + rax*8 + 0x2c7b0], r8
inc rax
mov qword [0x14002c470], rax
lea rdx, [rsp + 0x84]
mov rcx, qword [sym.imp.USER32.dll_GetSystemMetrics]
call r8
nop
mov rdx, qword [rsp + 0x1168]
xor rdx, qword [rsp + 0x1170]
mov qword [rsp + 0x1168], rdx
mov rcx, qword [rsp + 0x1178]
mov qword [rcx], rdx
mov r15d, 1
cmp eax, 0x400
jne 0x14000c290
mov dword [rsp + 0x88], r15d
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rsp + 0x1180], xmm0
mov qword [rsp + 0x1190], rax
lea rdx, [rsp + 0x103f8]
lea rcx, [rsp + 0x1180]
call fcn.140002960
nop
mov ecx, r14d
mov rax, qword [0x14002daa0]
test rax, rax
je 0x14000c169
mov rdx, r14
nop dword [rax + rax]
cmp rax, rbx
je 0x14000c158
inc ecx
mov edx, ecx
mov rax, qword [rsi + rcx*8 + 0x2daa0]
test rax, rax
jne 0x14000c140
jmp 0x14000c169
mov r8, qword [rsi + rdx*8 + 0x2c7b0]
test r8, r8
jne 0x14000c24f
mov edx, 0x1f4
xor ecx, ecx
lea r9d, [rcx + 0x40]
mov r8d, 0x1000
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov r8, rax
test rax, rax
jne 0x14000c190
mov r8, r14
jmp 0x14000c22e
mov rax, rbx
mov rcx, r8
mov rdx, r12
nop dword [rax]
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rcx + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rcx + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rcx + 0x50], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rcx + 0x60], xmm0
lea rcx, [rcx + 0x80]
movups xmm1, xmmword [rax + 0x70]
movups xmmword [rcx - 0x10], xmm1
lea rax, [rax + 0x80]
sub rdx, 1
jne 0x14000c1a0
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rcx + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rcx + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rcx + 0x50], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rcx + 0x60], xmm0
mov eax, dword [rax + 0x70]
mov dword [rcx + 0x70], eax
mov rax, qword [0x14002c470]
mov qword [rsi + rax*8 + 0x2daa0], rbx
mov qword [rsi + rax*8 + 0x2c7b0], r8
inc rax
mov qword [0x14002c470], rax
lea rdx, [rsp + 0x88]
mov rcx, qword [sym.imp.USER32.dll_GetSystemMetrics]
call r8
nop
mov rdx, qword [rsp + 0x1180]
xor rdx, qword [rsp + 0x1188]
mov qword [rsp + 0x1180], rdx
mov rcx, qword [rsp + 0x1190]
mov qword [rcx], rdx
cmp eax, 0x300
je 0x14000c8f0
cmp dword [rsp + 0x1764], 6
ja 0x14000c2ae
jne 0x14000c8f0
cmp dword [rsp + 0x1768], 2
jb 0x14000c8f0
mov dword [rsp + 0x8c], r14d
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rsp + 0x1198], xmm0
mov qword [rsp + 0x11a8], rax
lea rdx, [rsp + 0x103f8]
lea rcx, [rsp + 0x1198]
call fcn.140002960
nop
mov ecx, r14d
mov rax, qword [0x14002daa0]
test rax, rax
je 0x14000c31c
mov rdx, r14
cmp rax, rbx
je 0x14000c30b
inc ecx
mov edx, ecx
mov rax, qword [rsi + rcx*8 + 0x2daa0]
test rax, rax
jne 0x14000c2f3
jmp 0x14000c31c
mov r8, qword [rsi + rdx*8 + 0x2c7b0]
test r8, r8
jne 0x14000c3ff
mov edx, 0x1f4
xor ecx, ecx
lea r9d, [rcx + 0x40]
mov r8d, 0x1000
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov r8, rax
test rax, rax
jne 0x14000c343
mov r8, r14
jmp 0x14000c3de
mov rax, rbx
mov rcx, r8
mov rdx, r12
nop dword [rax]
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rcx + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rcx + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rcx + 0x50], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rcx + 0x60], xmm0
lea rcx, [rcx + 0x80]
movups xmm1, xmmword [rax + 0x70]
movups xmmword [rcx - 0x10], xmm1
lea rax, [rax + 0x80]
sub rdx, 1
jne 0x14000c350
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rcx + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rcx + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rcx + 0x50], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rcx + 0x60], xmm0
mov eax, dword [rax + 0x70]
mov dword [rcx + 0x70], eax
mov rax, qword [0x14002c470]
mov qword [rsi + rax*8 + 0x2daa0], rbx
mov qword [rsi + rax*8 + 0x2c7b0], r8
inc rax
mov qword [0x14002c470], rax
lea rdx, [rsp + 0x8c]
mov rcx, qword [sym.imp.USER32.dll_GetSystemMetrics]
call r8
nop
mov rdx, qword [rsp + 0x1198]
xor rdx, qword [rsp + 0x11a0]
mov qword [rsp + 0x1198], rdx
mov rcx, qword [rsp + 0x11a8]
mov qword [rcx], rdx
cmp eax, 0x500
jne 0x14000c5d0
mov dword [rsp + 0x90], r15d
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rsp + 0x11b0], xmm0
mov qword [rsp + 0x11c0], rax
lea rdx, [rsp + 0x103f8]
lea rcx, [rsp + 0x11b0]
call fcn.140002960
nop
mov ecx, r14d
mov rax, qword [0x14002daa0]
test rax, rax
je 0x14000c4ae
mov rdx, r14
cmp rax, rbx
je 0x14000c49d
inc ecx
mov edx, ecx
mov rax, qword [rsi + rcx*8 + 0x2daa0]
test rax, rax
jne 0x14000c485
jmp 0x14000c4ae
mov r8, qword [rsi + rdx*8 + 0x2c7b0]
test r8, r8
jne 0x14000c58f
mov edx, 0x1f4
xor ecx, ecx
lea r9d, [rcx + 0x40]
mov r8d, 0x1000
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov r8, rax
test rax, rax
jne 0x14000c4d5
mov r8, r14
jmp 0x14000c56e
mov rax, rbx
mov rcx, r8
mov rdx, r12
nop
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rcx + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rcx + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rcx + 0x50], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rcx + 0x60], xmm0
lea rcx, [rcx + 0x80]
movups xmm1, xmmword [rax + 0x70]
movups xmmword [rcx - 0x10], xmm1
lea rax, [rax + 0x80]
sub rdx, 1
jne 0x14000c4e0
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rcx + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rcx + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rcx + 0x50], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rcx + 0x60], xmm0
mov eax, dword [rax + 0x70]
mov dword [rcx + 0x70], eax
mov rax, qword [0x14002c470]
mov qword [rsi + rax*8 + 0x2daa0], rbx
mov qword [rsi + rax*8 + 0x2c7b0], r8
inc rax
mov qword [0x14002c470], rax
lea rdx, [rsp + 0x90]
mov rcx, qword [sym.imp.USER32.dll_GetSystemMetrics]
call r8
nop
mov rdx, qword [rsp + 0x11b0]
xor rdx, qword [rsp + 0x11b8]
mov qword [rsp + 0x11b0], rdx
mov rcx, qword [rsp + 0x11c0]
mov qword [rcx], rdx
cmp eax, 0x400
je 0x14000c8f0
mov dword [rsp + 0x94], r14d
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rsp + 0x11c8], xmm0
mov qword [rsp + 0x11d8], rax
lea rdx, [rsp + 0x103f8]
lea rcx, [rsp + 0x11c8]
call fcn.140002960
nop
mov ecx, r14d
mov rax, qword [0x14002daa0]
test rax, rax
je 0x14000c63e
mov rdx, r14
cmp rax, rbx
je 0x14000c62d
inc ecx
mov edx, ecx
mov rax, qword [rsi + rcx*8 + 0x2daa0]
test rax, rax
jne 0x14000c615
jmp 0x14000c63e
mov r8, qword [rsi + rdx*8 + 0x2c7b0]
test r8, r8
jne 0x14000c71f
mov edx, 0x1f4
xor ecx, ecx
lea r9d, [rcx + 0x40]
mov r8d, 0x1000
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov r8, rax
test rax, rax
jne 0x14000c665
mov r8, r14
jmp 0x14000c6fe
mov rax, rbx
mov rcx, r8
mov rdx, r12
nop
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rcx + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rcx + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rcx + 0x50], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rcx + 0x60], xmm0
lea rcx, [rcx + 0x80]
movups xmm1, xmmword [rax + 0x70]
movups xmmword [rcx - 0x10], xmm1
lea rax, [rax + 0x80]
sub rdx, 1
jne 0x14000c670
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rcx + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rcx + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rcx + 0x50], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rcx + 0x60], xmm0
mov eax, dword [rax + 0x70]
mov dword [rcx + 0x70], eax
mov rax, qword [0x14002c470]
mov qword [rsi + rax*8 + 0x2daa0], rbx
mov qword [rsi + rax*8 + 0x2c7b0], r8
inc rax
mov qword [0x14002c470], rax
lea rdx, [rsp + 0x94]
mov rcx, qword [sym.imp.USER32.dll_GetSystemMetrics]
call r8
nop
mov rdx, qword [rsp + 0x11c8]
xor rdx, qword [rsp + 0x11d0]
mov qword [rsp + 0x11c8], rdx
mov rcx, qword [rsp + 0x11d8]
mov qword [rcx], rdx
cmp eax, 0x320
jne 0x14000d096
mov dword [rsp + 0x98], r15d
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rsp + 0x11e0], xmm0
mov qword [rsp + 0x11f0], rax
lea rdx, [rsp + 0x103f8]
lea rcx, [rsp + 0x11e0]
call fcn.140002960
nop
mov ecx, r14d
mov rax, qword [0x14002daa0]
test rax, rax
je 0x14000c7ce
mov rdx, r14
cmp rax, rbx
je 0x14000c7bd
inc ecx
mov edx, ecx
mov rax, qword [rsi + rcx*8 + 0x2daa0]
test rax, rax
jne 0x14000c7a5
jmp 0x14000c7ce
mov r8, qword [rsi + rdx*8 + 0x2c7b0]
test r8, r8
jne 0x14000c8af
mov edx, 0x1f4
xor ecx, ecx
lea r9d, [rcx + 0x40]
mov r8d, 0x1000
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov r8, rax
test rax, rax
jne 0x14000c7f5
mov r8, r14
jmp 0x14000c88e
mov rax, rbx
mov rcx, r8
mov rdx, r12
nop
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rcx + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rcx + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rcx + 0x50], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rcx + 0x60], xmm0
lea rcx, [rcx + 0x80]
movups xmm1, xmmword [rax + 0x70]
movups xmmword [rcx - 0x10], xmm1
lea rax, [rax + 0x80]
sub rdx, 1
jne 0x14000c800
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rcx + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rcx + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rcx + 0x50], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rcx + 0x60], xmm0
mov eax, dword [rax + 0x70]
mov dword [rcx + 0x70], eax
mov rax, qword [0x14002c470]
mov qword [rsi + rax*8 + 0x2daa0], rbx
mov qword [rsi + rax*8 + 0x2c7b0], r8
inc rax
mov qword [0x14002c470], rax
lea rdx, [rsp + 0x98]
mov rcx, qword [sym.imp.USER32.dll_GetSystemMetrics]
call r8
nop
mov rdx, qword [rsp + 0x11e0]
xor rdx, qword [rsp + 0x11e8]
mov qword [rsp + 0x11e0], rdx
mov rcx, qword [rsp + 0x11f0]
mov qword [rcx], rdx
cmp eax, 0x258
jne 0x14000d096
call qword [sym.imp.MSVCP140.dll_unsigned_int___cdecl_std::_Random_device_void_]
mov dword [rsp + 0x3f94], 0xffffffff
mov r8d, 0x6c078965
mov edx, eax
lea rcx, [rsp + 0x2c10]
call fcn.140015560
mov dword [rsp + 0xd70], 0xffffff9c
mov dword [rsp + 0xd74], 0x64
movaps xmm0, xmmword [0x140024280]
movups xmmword [rsp + 0xf58], xmm0
xor r12d, r12d
mov dword [rsp + 0x30], r12d
movsd qword [rsp + 0x38], xmm11
lea rcx, [rsp + 0x12c8]
call fcn.140001aa0
mov qword [rsp + 0x428], 0x64
mov rax, qword [rsp + 0x12c8]
mov qword [rsp + 0x430], rax
lea r8, [rsp + 0x428]
lea rdx, [rsp + 0x430]
lea rcx, [rsp + 0x890]
call fcn.140015950
mov rdi, qword [rax]
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rsp + 0xe38], xmm0
mov qword [rsp + 0xe48], rax
lea rcx, [rsp + 0xe38]
call fcn.140014490
nop
lea rcx, [rsp + 0x438]
call fcn.140015970
nop
mov rdx, rax
lea rcx, [rsp + 0x1c0]
call fcn.1400159a0
nop
lea rdx, [rsp + 0x1c0]
lea rcx, [rsp + 0xe38]
call fcn.140016650
nop
lea rcx, [rsp + 0x1c0]
call fcn.1400144b0
nop
lea rcx, [rsp + 0x438]
call fcn.1400144b0
lea rcx, [rsp + 0x440]
call fcn.1400159c0
nop
mov rdx, rax
lea rcx, [rsp + 0x1c8]
call fcn.1400159a0
nop
lea rdx, [rsp + 0x1c8]
lea rcx, [rsp + 0xe38]
call fcn.140016650
nop
lea rcx, [rsp + 0x1c8]
call fcn.1400144b0
nop
lea rcx, [rsp + 0x440]
call fcn.1400144b0
lea rcx, [rsp + 0x448]
call fcn.1400159f0
nop
mov rdx, rax
lea rcx, [rsp + 0x1d0]
call fcn.1400159a0
nop
lea rdx, [rsp + 0x1d0]
lea rcx, [rsp + 0xe38]
call fcn.140016650
nop
lea rcx, [rsp + 0x1d0]
call fcn.1400144b0
nop
lea rcx, [rsp + 0x448]
call fcn.1400144b0
lea rcx, [rsp + 0x450]
call fcn.140015a20
nop
mov rdx, rax
lea rcx, [rsp + 0x1d8]
call fcn.1400159a0
nop
lea rdx, [rsp + 0x1d8]
lea rcx, [rsp + 0xe38]
call fcn.140016650
nop
lea rcx, [rsp + 0x1d8]
call fcn.1400144b0
nop
lea rcx, [rsp + 0x450]
call fcn.1400144b0
lea rcx, [rsp + 0x458]
call fcn.140015a50
nop
mov rdx, rax
lea rcx, [rsp + 0x1e0]
call fcn.1400159a0
nop
lea rdx, [rsp + 0x1e0]
lea rcx, [rsp + 0xe38]
call fcn.140016650
nop
lea rcx, [rsp + 0x1e0]
call fcn.1400144b0
nop
lea rcx, [rsp + 0x458]
call fcn.1400144b0
lea rcx, [rsp + 0x460]
call fcn.140015a80
nop
mov rdx, rax
lea rcx, [rsp + 0x1e8]
call fcn.1400159a0
nop
lea rdx, [rsp + 0x1e8]
lea rcx, [rsp + 0xe38]
call fcn.140016650
nop
lea rcx, [rsp + 0x1e8]
call fcn.1400144b0
nop
lea rcx, [rsp + 0x460]
call fcn.1400144b0
lea rcx, [rsp + 0x468]
call fcn.140001aa0
mov qword [rsp + 0x78], rdi
mov rax, qword [rax]
mov qword [rsp + 0x60], rax
lea rdx, [rsp + 0x78]
lea rcx, [rsp + 0x60]
call fcn.1400028d0
test al, al
jns 0x14000d078
nop word [rax + rax]
mov r14d, 0x186a0
nop word [rax + rax]
mov r9d, dword [rsp + 0xd74]
mov r8d, dword [rsp + 0xd70]
lea rdx, [rsp + 0x2c10]
lea rcx, [rsp + 0xd70]
call fcn.1400175c0
mov r9d, dword [rsp + 0xd74]
mov r8d, dword [rsp + 0xd70]
lea rdx, [rsp + 0x2c10]
lea rcx, [rsp + 0xd70]
call fcn.1400175c0
mov rcx, qword [rsp + 0xe40]
mov rsi, qword [rsp + 0xe38]
sub rcx, rsi
sar rcx, 3
cdqe
xor edx, edx
div rcx
movsxd rax, edx
mov rsi, qword [rsi + rax*8]
mov rax, qword [rsi]
mov rbx, qword [rax + 8]
mov r9d, dword [rsp + 0xd74]
mov r8d, dword [rsp + 0xd70]
lea rdx, [rsp + 0x2c10]
lea rcx, [rsp + 0xd70]
call fcn.1400175c0
mov r8d, eax
mov edx, dword [rsp + 0x30]
mov rcx, rsi
call rbx
mov dword [rsp + 0x30], eax
lea rdx, [rsp + 0x2c10]
lea rcx, [rsp + 0xf58]
call fcn.140015ab0
movaps xmm9, xmm0
lea rdx, [rsp + 0x2c10]
lea rcx, [rsp + 0xf58]
call fcn.140015ab0
movaps xmm6, xmm0
movaps xmm7, xmm0
andps xmm7, xmm13
movaps xmm0, xmm9
call sub.api_ms_win_crt_math_l1_1_0.dll_cos
movaps xmm8, xmm0
movaps xmm0, xmm6
call sub.api_ms_win_crt_math_l1_1_0.dll_sin
mulsd xmm8, xmm0
addsd xmm7, xmm10
movaps xmm0, xmm7
call sub.api_ms_win_crt_math_l1_1_0.dll_log
addsd xmm8, xmm0
movaps xmm0, xmm9
call sub.api_ms_win_crt_math_l1_1_0.dll_exp
subsd xmm8, xmm0
movsd xmm1, qword [rsp + 0x38]
addsd xmm8, xmm1
movsd qword [rsp + 0x38], xmm8
lea rdx, [rsp + 0x2c10]
lea rcx, [rsp + 0xf58]
call fcn.140015ab0
movaps xmm1, xmm12
call sub.api_ms_win_crt_math_l1_1_0.dll_pow
movsd xmm1, qword [rsp + 0x38]
subsd xmm1, xmm0
movsd qword [rsp + 0x38], xmm1
lea rdx, [rsp + 0x2c10]
lea rcx, [rsp + 0xf58]
call fcn.140015ab0
call sub.api_ms_win_crt_math_l1_1_0.dll_tan
mulsd xmm0, qword [rsp + 0x38]
movsd qword [rsp + 0x38], xmm0
lea rdx, str.random
lea rcx, [rsp + 0x14e0]
call fcn.140014c30
nop
lea rdx, [rsp + 0x2c10]
lea rcx, [rsp + 0x14e0]
call fcn.140002710
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rsp + 0x1060], xmm0
mov qword [rsp + 0x1070], rax
lea rcx, [rsp + 0x1060]
call fcn.140014490
mov edx, 0x64
lea rcx, [rsp + 0x1060]
call fcn.140016690
nop
lea rdx, [rsp + 0x898]
lea rcx, [rsp + 0x1060]
call fcn.140014620
mov rbx, qword [rax]
lea rdx, [rsp + 0x8a0]
lea rcx, [rsp + 0x1060]
call fcn.140014630
lea rcx, [rsp + 0xd70]
mov qword [rsp + 0x700], rcx
lea rcx, [rsp + 0x2c10]
mov qword [rsp + 0x708], rcx
lea r8, [rsp + 0x700]
mov rdx, rbx
mov rcx, qword [rax]
call fcn.140015b40
lea rdx, [rsp + 0x2c10]
lea rcx, [rsp + 0x1060]
call fcn.140002820
lea rdx, [rsp + 0x8a8]
lea rcx, [rsp + 0x1060]
call fcn.140014620
mov rbx, qword [rax]
lea rdx, [rsp + 0x8b0]
lea rcx, [rsp + 0x1060]
call fcn.140014630
xor r9d, r9d
xor r8d, r8d
mov rdx, rbx
mov rcx, qword [rax]
call fcn.140015ba0
mov ecx, dword [rsp + 0x30]
add ecx, eax
mov dword [rsp + 0x30], ecx
mov r9d, dword [rsp + 0xd74]
mov r8d, dword [rsp + 0xd70]
lea rdx, [rsp + 0x2c10]
lea rcx, [rsp + 0xd70]
call fcn.1400175c0
mov ebx, eax
mov r9d, dword [rsp + 0xd74]
mov r8d, dword [rsp + 0xd70]
lea rdx, [rsp + 0x2c10]
lea rcx, [rsp + 0xd70]
call fcn.1400175c0
mov r8d, eax
mov ecx, ebx
test ebx, ebx
cmove ecx, r15d
sub eax, ebx
cdq
idiv ecx
imul ebx, r8d
add eax, ebx
mov ecx, dword [rsp + 0x30]
add eax, ecx
mov dword [rsp + 0x30], eax
mov eax, dword [rsp + 0x30]
and eax, 0x80000001
jge 0x14000cefd
dec eax
or eax, 0xfffffffe
inc eax
mov r9d, dword [rsp + 0xd74]
mov r8d, dword [rsp + 0xd70]
lea rdx, [rsp + 0x2c10]
lea rcx, [rsp + 0xd70]
test eax, eax
jne 0x14000cf32
call fcn.1400175c0
mov ecx, dword [rsp + 0x30]
add eax, ecx
mov dword [rsp + 0x30], eax
jmp 0x14000cf41
call fcn.1400175c0
mov ecx, dword [rsp + 0x30]
sub ecx, eax
mov dword [rsp + 0x30], ecx
mov esi, 5
nop word [rax + rax]
mov ebx, r12d
nop dword [rax]
nop word [rax + rax]
mov r9d, dword [rsp + 0xd74]
mov r8d, dword [rsp + 0xd70]
lea rdx, [rsp + 0x2c10]
lea rcx, [rsp + 0xd70]
call fcn.1400175c0
mov ecx, dword [rsp + 0x30]
add eax, ecx
mov dword [rsp + 0x30], eax
lea rdx, [rsp + 0x2c10]
lea rcx, [rsp + 0xf58]
call fcn.140015ab0
movsd xmm1, qword [rsp + 0x38]
addsd xmm0, xmm1
movsd qword [rsp + 0x38], xmm0
lea rdx, [rsp + 0x2c10]
test bl, 1
jne 0x14000cfeb
mov r9d, dword [rsp + 0xd74]
mov r8d, dword [rsp + 0xd70]
lea rcx, [rsp + 0xd70]
call fcn.1400175c0
mov ecx, dword [rsp + 0x30]
imul eax, ecx
mov dword [rsp + 0x30], eax
jmp 0x14000d00d
movsd xmm6, qword [rsp + 0x38]
lea rcx, [rsp + 0xf58]
call fcn.140015ab0
addsd xmm0, xmm10
divsd xmm6, xmm0
movsd qword [rsp + 0x38], xmm6
inc ebx
cmp ebx, 5
jl 0x14000cf60
sub rsi, 1
jne 0x14000cf50
lea rcx, [rsp + 0x1060]
call fcn.140014640
nop
lea rcx, [rsp + 0x14e0]
call fcn.140014b90
sub r14, 1
jne 0x14000cbe0
lea rcx, [rsp + 0x468]
call fcn.140001aa0
mov qword [rsp + 0x78], rdi
mov rax, qword [rax]
mov qword [rsp + 0x60], rax
lea rdx, [rsp + 0x78]
lea rcx, [rsp + 0x60]
call fcn.1400028d0
test al, al
js 0x14000cbd0
mov eax, dword [rsp + 0x30]
lea rcx, [rsp + 0xe38]
call fcn.140014520
mov qword [0], r12
jmp 0x1400133fe
mov byte [rsp + 0x41], 0
lea rcx, [rsp + 0x41]
call fcn.140013480
mov rdx, rax
lea r8, [0x14002f720]
lea rcx, [rsp + 0xba0]
call fcn.1400160a0
mov rcx, rax
call fcn.1400149d0
mov r8, rax
mov edx, r15d
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateMutexA]
mov qword [rsp + 0x658], rax
lea rcx, [rsp + 0xba0]
call fcn.140014b90
call qword [sym.imp.MSVCP140.dll_unsigned_int___cdecl_std::_Random_device_void_]
mov dword [rsp + 0x5324], 0xffffffff
mov r8d, 0x6c078965
mov edx, eax
lea rcx, [rsp + 0x3fa0]
call fcn.140015560
mov dword [rsp + 0xd78], 0xffffff9c
mov dword [rsp + 0xd7c], 0x64
movaps xmm0, xmmword [0x140024280]
movups xmmword [rsp + 0xf68], xmm0
mov dword [rsp + 0x30], r14d
movsd qword [rsp + 0x38], xmm11
lea rcx, [rsp + 0x12d0]
call fcn.140001aa0
mov qword [rsp + 0x478], 0x64
mov rax, qword [rsp + 0x12d0]
mov qword [rsp + 0x480], rax
lea r8, [rsp + 0x478]
lea rdx, [rsp + 0x480]
lea rcx, [rsp + 0x8b8]
call fcn.140015950
mov rdi, qword [rax]
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rsp + 0xe98], xmm0
mov qword [rsp + 0xea8], rax
lea rcx, [rsp + 0xe98]
call fcn.140014490
nop
lea rcx, [rsp + 0x488]
call fcn.140015970
nop
mov rdx, rax
lea rcx, [rsp + 0x1f0]
call fcn.1400159a0
nop
lea rdx, [rsp + 0x1f0]
lea rcx, [rsp + 0xe98]
call fcn.140016650
nop
lea rcx, [rsp + 0x1f0]
call fcn.1400144b0
nop
lea rcx, [rsp + 0x488]
call fcn.1400144b0
lea rcx, [rsp + 0x490]
call fcn.1400159c0
nop
mov rdx, rax
lea rcx, [rsp + 0x1f8]
call fcn.1400159a0
nop
lea rdx, [rsp + 0x1f8]
lea rcx, [rsp + 0xe98]
call fcn.140016650
nop
lea rcx, [rsp + 0x1f8]
call fcn.1400144b0
nop
lea rcx, [rsp + 0x490]
call fcn.1400144b0
lea rcx, [rsp + 0x498]
call fcn.1400159f0
nop
mov rdx, rax
lea rcx, [rsp + 0x200]
call fcn.1400159a0
nop
lea rdx, [rsp + 0x200]
lea rcx, [rsp + 0xe98]
call fcn.140016650
nop
lea rcx, [rsp + 0x200]
call fcn.1400144b0
nop
lea rcx, [rsp + 0x498]
call fcn.1400144b0
lea rcx, [rsp + 0x4a0]
call fcn.140015a20
nop
mov rdx, rax
lea rcx, [rsp + 0x208]
call fcn.1400159a0
nop
lea rdx, [rsp + 0x208]
lea rcx, [rsp + 0xe98]
call fcn.140016650
nop
lea rcx, [rsp + 0x208]
call fcn.1400144b0
nop
lea rcx, [rsp + 0x4a0]
call fcn.1400144b0
lea rcx, [rsp + 0x4a8]
call fcn.140015a50
nop
mov rdx, rax
lea rcx, [rsp + 0x210]
call fcn.1400159a0
nop
lea rdx, [rsp + 0x210]
lea rcx, [rsp + 0xe98]
call fcn.140016650
nop
lea rcx, [rsp + 0x210]
call fcn.1400144b0
nop
lea rcx, [rsp + 0x4a8]
call fcn.1400144b0
lea rcx, [rsp + 0x4b0]
call fcn.140015a80
nop
mov rdx, rax
lea rcx, [rsp + 0x218]
call fcn.1400159a0
nop
lea rdx, [rsp + 0x218]
lea rcx, [rsp + 0xe98]
call fcn.140016650
nop
lea rcx, [rsp + 0x218]
call fcn.1400144b0
nop
lea rcx, [rsp + 0x4b0]
call fcn.1400144b0
lea rcx, [rsp + 0x4b8]
call fcn.140001aa0
mov qword [rsp + 0xb0], rdi
mov rax, qword [rax]
mov qword [rsp + 0xb8], rax
lea rdx, [rsp + 0xb0]
lea rcx, [rsp + 0xb8]
call fcn.1400028d0
test al, al
jns 0x14000d87b
nop word [rax + rax]
mov r14d, 0x186a0
nop word [rax + rax]
mov r9d, dword [rsp + 0xd7c]
mov r8d, dword [rsp + 0xd78]
lea rdx, [rsp + 0x3fa0]
lea rcx, [rsp + 0xd78]
call fcn.1400175c0
mov r9d, dword [rsp + 0xd7c]
mov r8d, dword [rsp + 0xd78]
lea rdx, [rsp + 0x3fa0]
lea rcx, [rsp + 0xd78]
call fcn.1400175c0
mov rcx, qword [rsp + 0xea0]
mov rsi, qword [rsp + 0xe98]
sub rcx, rsi
sar rcx, 3
cdqe
xor edx, edx
div rcx
movsxd rax, edx
mov rsi, qword [rsi + rax*8]
mov rax, qword [rsi]
mov rbx, qword [rax + 8]
mov r9d, dword [rsp + 0xd7c]
mov r8d, dword [rsp + 0xd78]
lea rdx, [rsp + 0x3fa0]
lea rcx, [rsp + 0xd78]
call fcn.1400175c0
mov r8d, eax
mov edx, dword [rsp + 0x30]
mov rcx, rsi
call rbx
mov dword [rsp + 0x30], eax
lea rdx, [rsp + 0x3fa0]
lea rcx, [rsp + 0xf68]
call fcn.140015ab0
movaps xmm9, xmm0
lea rdx, [rsp + 0x3fa0]
lea rcx, [rsp + 0xf68]
call fcn.140015ab0
movaps xmm6, xmm0
movaps xmm7, xmm0
andps xmm7, xmm13
movaps xmm0, xmm9
call sub.api_ms_win_crt_math_l1_1_0.dll_cos
movaps xmm8, xmm0
movaps xmm0, xmm6
call sub.api_ms_win_crt_math_l1_1_0.dll_sin
mulsd xmm8, xmm0
addsd xmm7, xmm10
movaps xmm0, xmm7
call sub.api_ms_win_crt_math_l1_1_0.dll_log
addsd xmm8, xmm0
movaps xmm0, xmm9
call sub.api_ms_win_crt_math_l1_1_0.dll_exp
subsd xmm8, xmm0
movsd xmm1, qword [rsp + 0x38]
addsd xmm8, xmm1
movsd qword [rsp + 0x38], xmm8
lea rdx, [rsp + 0x3fa0]
lea rcx, [rsp + 0xf68]
call fcn.140015ab0
movaps xmm1, xmm12
call sub.api_ms_win_crt_math_l1_1_0.dll_pow
movsd xmm1, qword [rsp + 0x38]
subsd xmm1, xmm0
movsd qword [rsp + 0x38], xmm1
lea rdx, [rsp + 0x3fa0]
lea rcx, [rsp + 0xf68]
call fcn.140015ab0
call sub.api_ms_win_crt_math_l1_1_0.dll_tan
mulsd xmm0, qword [rsp + 0x38]
movsd qword [rsp + 0x38], xmm0
lea rdx, str.random
lea rcx, [rsp + 0x1500]
call fcn.140014c30
nop
lea rdx, [rsp + 0x3fa0]
lea rcx, [rsp + 0x1500]
call fcn.140002710
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rsp + 0x1048], xmm0
mov qword [rsp + 0x1058], rax
lea rcx, [rsp + 0x1048]
call fcn.140014490
mov edx, 0x64
lea rcx, [rsp + 0x1048]
call fcn.140016690
nop
lea rdx, [rsp + 0x8c0]
lea rcx, [rsp + 0x1048]
call fcn.140014620
mov rbx, qword [rax]
lea rdx, [rsp + 0x8c8]
lea rcx, [rsp + 0x1048]
call fcn.140014630
lea rcx, [rsp + 0xd78]
mov qword [rsp + 0x710], rcx
lea rcx, [rsp + 0x3fa0]
mov qword [rsp + 0x718], rcx
lea r8, [rsp + 0x710]
mov rdx, rbx
mov rcx, qword [rax]
call fcn.140015b40
lea rdx, [rsp + 0x3fa0]
lea rcx, [rsp + 0x1048]
call fcn.140002820
lea rdx, [rsp + 0x8d0]
lea rcx, [rsp + 0x1048]
call fcn.140014620
mov rbx, qword [rax]
lea rdx, [rsp + 0x8d8]
lea rcx, [rsp + 0x1048]
call fcn.140014630
xor r9d, r9d
xor r8d, r8d
mov rdx, rbx
mov rcx, qword [rax]
call fcn.140015ba0
mov ecx, dword [rsp + 0x30]
add ecx, eax
mov dword [rsp + 0x30], ecx
mov r9d, dword [rsp + 0xd7c]
mov r8d, dword [rsp + 0xd78]
lea rdx, [rsp + 0x3fa0]
lea rcx, [rsp + 0xd78]
call fcn.1400175c0
mov ebx, eax
mov r9d, dword [rsp + 0xd7c]
mov r8d, dword [rsp + 0xd78]
lea rdx, [rsp + 0x3fa0]
lea rcx, [rsp + 0xd78]
call fcn.1400175c0
mov r8d, eax
mov ecx, ebx
test ebx, ebx
cmove ecx, r15d
sub eax, ebx
cdq
idiv ecx
imul ebx, r8d
add eax, ebx
mov ecx, dword [rsp + 0x30]
add eax, ecx
mov dword [rsp + 0x30], eax
mov eax, dword [rsp + 0x30]
and eax, 0x80000001
jge 0x14000d6fd
dec eax
or eax, 0xfffffffe
inc eax
mov r9d, dword [rsp + 0xd7c]
mov r8d, dword [rsp + 0xd78]
lea rdx, [rsp + 0x3fa0]
lea rcx, [rsp + 0xd78]
test eax, eax
jne 0x14000d732
call fcn.1400175c0
mov ecx, dword [rsp + 0x30]
add eax, ecx
mov dword [rsp + 0x30], eax
jmp 0x14000d741
call fcn.1400175c0
mov ecx, dword [rsp + 0x30]
sub ecx, eax
mov dword [rsp + 0x30], ecx
mov esi, 5
xor ebx, ebx
nop dword [rax + rax]
mov r9d, dword [rsp + 0xd7c]
mov r8d, dword [rsp + 0xd78]
lea rdx, [rsp + 0x3fa0]
lea rcx, [rsp + 0xd78]
call fcn.1400175c0
mov ecx, dword [rsp + 0x30]
add eax, ecx
mov dword [rsp + 0x30], eax
lea rdx, [rsp + 0x3fa0]
lea rcx, [rsp + 0xf68]
call fcn.140015ab0
movsd xmm1, qword [rsp + 0x38]
addsd xmm0, xmm1
movsd qword [rsp + 0x38], xmm0
lea rdx, [rsp + 0x3fa0]
test bl, 1
jne 0x14000d7db
mov r9d, dword [rsp + 0xd7c]
mov r8d, dword [rsp + 0xd78]
lea rcx, [rsp + 0xd78]
call fcn.1400175c0
mov ecx, dword [rsp + 0x30]
imul eax, ecx
mov dword [rsp + 0x30], eax
jmp 0x14000d7fd
movsd xmm6, qword [rsp + 0x38]
lea rcx, [rsp + 0xf68]
call fcn.140015ab0
addsd xmm0, xmm10
divsd xmm6, xmm0
movsd qword [rsp + 0x38], xmm6
inc ebx
cmp ebx, 5
jl 0x14000d750
sub rsi, 1
jne 0x14000d746
lea rcx, [rsp + 0x1048]
call fcn.140014640
nop
lea rcx, [rsp + 0x1500]
call fcn.140014b90
sub r14, 1
jne 0x14000d3e0
lea rcx, [rsp + 0x4b8]
call fcn.140001aa0
mov qword [rsp + 0xb0], rdi
mov rax, qword [rax]
mov qword [rsp + 0xb8], rax
lea rdx, [rsp + 0xb0]
lea rcx, [rsp + 0xb8]
call fcn.1400028d0
test al, al
js 0x14000d3d0
lea rsi, [0x140000000]
mov eax, dword [rsp + 0x30]
lea rcx, [rsp + 0xe98]
call fcn.140014520
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rsp + 0x11f8], xmm0
mov qword [rsp + 0x1208], rax
lea rdx, [rsp + 0x103f8]
lea rcx, [rsp + 0x11f8]
call fcn.140002960
nop
mov ecx, r14d
mov rax, qword [0x14002ddc0]
lea rbx, [0x140016110]
test rax, rax
je 0x14000d8f9
mov rdx, r14
cmp rax, rbx
je 0x14000d8e8
inc ecx
mov edx, ecx
mov rax, qword [rsi + rcx*8 + 0x2ddc0]
test rax, rax
jne 0x14000d8d0
jmp 0x14000d8f9
mov r8, qword [rsi + rdx*8 + 0x2be20]
test r8, r8
jne 0x14000d9df
mov edx, 0x1f4
xor ecx, ecx
lea r9d, [rcx + 0x40]
mov r8d, 0x1000
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov r8, rax
test rax, rax
jne 0x14000d920
mov r8, r14
jmp 0x14000d9be
mov rax, rbx
mov rcx, r8
mov rdx, r12
nop dword [rax]
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rcx + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rcx + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rcx + 0x50], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rcx + 0x60], xmm0
lea rcx, [rcx + 0x80]
movups xmm1, xmmword [rax + 0x70]
movups xmmword [rcx - 0x10], xmm1
lea rax, [rax + 0x80]
sub rdx, 1
jne 0x14000d930
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rcx + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rcx + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rcx + 0x50], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rcx + 0x60], xmm0
mov eax, dword [rax + 0x70]
mov dword [rcx + 0x70], eax
mov rax, qword [0x14002e0e0]
mov qword [rsi + rax*8 + 0x2ddc0], rbx
mov qword [rsi + rax*8 + 0x2be20], r8
inc rax
mov qword [0x14002e0e0], rax
mov rcx, qword [sym.imp.KERNEL32.dll_GetLastError]
call r8
nop
mov rdx, qword [rsp + 0x11f8]
xor rdx, qword [rsp + 0x1200]
mov qword [rsp + 0x11f8], rdx
mov rcx, qword [rsp + 0x1208]
mov qword [rcx], rdx
cmp eax, 0xb7
jne 0x14000e1d2
call qword [sym.imp.MSVCP140.dll_unsigned_int___cdecl_std::_Random_device_void_]
mov dword [rsp + 0x66b4], 0xffffffff
mov r8d, 0x6c078965
mov edx, eax
lea rcx, [rsp + 0x5330]
call fcn.140015560
mov dword [rsp + 0xd60], 0xffffff9c
mov dword [rsp + 0xd64], 0x64
movaps xmm0, xmmword [0x140024280]
movups xmmword [rsp + 0xf98], xmm0
xor r12d, r12d
mov dword [rsp + 0x30], r12d
movsd qword [rsp + 0x38], xmm11
lea rcx, [rsp + 0x12d8]
call fcn.140001aa0
mov qword [rsp + 0x4c8], 0x64
mov rax, qword [rsp + 0x12d8]
mov qword [rsp + 0x4d0], rax
lea r8, [rsp + 0x4c8]
lea rdx, [rsp + 0x4d0]
lea rcx, [rsp + 0x8e0]
call fcn.140015950
mov rdi, qword [rax]
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rsp + 0xe20], xmm0
mov qword [rsp + 0xe30], rax
lea rcx, [rsp + 0xe20]
call fcn.140014490
nop
lea rcx, [rsp + 0x4d8]
call fcn.140015970
nop
mov rdx, rax
lea rcx, [rsp + 0x220]
call fcn.1400159a0
nop
lea rdx, [rsp + 0x220]
lea rcx, [rsp + 0xe20]
call fcn.140016650
nop
lea rcx, [rsp + 0x220]
call fcn.1400144b0
nop
lea rcx, [rsp + 0x4d8]
call fcn.1400144b0
lea rcx, [rsp + 0x4e0]
call fcn.1400159c0
nop
mov rdx, rax
lea rcx, [rsp + 0x228]
call fcn.1400159a0
nop
lea rdx, [rsp + 0x228]
lea rcx, [rsp + 0xe20]
call fcn.140016650
nop
lea rcx, [rsp + 0x228]
call fcn.1400144b0
nop
lea rcx, [rsp + 0x4e0]
call fcn.1400144b0
lea rcx, [rsp + 0x4e8]
call fcn.1400159f0
nop
mov rdx, rax
lea rcx, [rsp + 0x230]
call fcn.1400159a0
nop
lea rdx, [rsp + 0x230]
lea rcx, [rsp + 0xe20]
call fcn.140016650
nop
lea rcx, [rsp + 0x230]
call fcn.1400144b0
nop
lea rcx, [rsp + 0x4e8]
call fcn.1400144b0
lea rcx, [rsp + 0x4f0]
call fcn.140015a20
nop
mov rdx, rax
lea rcx, [rsp + 0x238]
call fcn.1400159a0
nop
lea rdx, [rsp + 0x238]
lea rcx, [rsp + 0xe20]
call fcn.140016650
nop
lea rcx, [rsp + 0x238]
call fcn.1400144b0
nop
lea rcx, [rsp + 0x4f0]
call fcn.1400144b0
lea rcx, [rsp + 0x4f8]
call fcn.140015a50
nop
mov rdx, rax
lea rcx, [rsp + 0x240]
call fcn.1400159a0
nop
lea rdx, [rsp + 0x240]
lea rcx, [rsp + 0xe20]
call fcn.140016650
nop
lea rcx, [rsp + 0x240]
call fcn.1400144b0
nop
lea rcx, [rsp + 0x4f8]
call fcn.1400144b0
lea rcx, [rsp + 0x500]
call fcn.140015a80
nop
mov rdx, rax
lea rcx, [rsp + 0x248]
call fcn.1400159a0
nop
lea rdx, [rsp + 0x248]
lea rcx, [rsp + 0xe20]
call fcn.140016650
nop
lea rcx, [rsp + 0x248]
call fcn.1400144b0
nop
lea rcx, [rsp + 0x500]
call fcn.1400144b0
lea rcx, [rsp + 0x508]
call fcn.140001aa0
mov qword [rsp + 0xc0], rdi
mov rax, qword [rax]
mov qword [rsp + 0xc8], rax
lea rdx, [rsp + 0xc0]
lea rcx, [rsp + 0xc8]
call fcn.1400028d0
test al, al
jns 0x14000e1b4
nop dword [rax + rax]
mov r14d, 0x186a0
nop word [rax + rax]
mov r9d, dword [rsp + 0xd64]
mov r8d, dword [rsp + 0xd60]
lea rdx, [rsp + 0x5330]
lea rcx, [rsp + 0xd60]
call fcn.1400175c0
mov r9d, dword [rsp + 0xd64]
mov r8d, dword [rsp + 0xd60]
lea rdx, [rsp + 0x5330]
lea rcx, [rsp + 0xd60]
call fcn.1400175c0
mov rcx, qword [rsp + 0xe28]
mov rsi, qword [rsp + 0xe20]
sub rcx, rsi
sar rcx, 3
cdqe
xor edx, edx
div rcx
movsxd rax, edx
mov rsi, qword [rsi + rax*8]
mov rax, qword [rsi]
mov rbx, qword [rax + 8]
mov r9d, dword [rsp + 0xd64]
mov r8d, dword [rsp + 0xd60]
lea rdx, [rsp + 0x5330]
lea rcx, [rsp + 0xd60]
call fcn.1400175c0
mov r8d, eax
mov edx, dword [rsp + 0x30]
mov rcx, rsi
call rbx
mov dword [rsp + 0x30], eax
lea rdx, [rsp + 0x5330]
lea rcx, [rsp + 0xf98]
call fcn.140015ab0
movaps xmm9, xmm0
lea rdx, [rsp + 0x5330]
lea rcx, [rsp + 0xf98]
call fcn.140015ab0
movaps xmm6, xmm0
movaps xmm7, xmm0
andps xmm7, xmm13
movaps xmm0, xmm9
call sub.api_ms_win_crt_math_l1_1_0.dll_cos
movaps xmm8, xmm0
movaps xmm0, xmm6
call sub.api_ms_win_crt_math_l1_1_0.dll_sin
mulsd xmm8, xmm0
addsd xmm7, xmm10
movaps xmm0, xmm7
call sub.api_ms_win_crt_math_l1_1_0.dll_log
addsd xmm8, xmm0
movaps xmm0, xmm9
call sub.api_ms_win_crt_math_l1_1_0.dll_exp
subsd xmm8, xmm0
movsd xmm1, qword [rsp + 0x38]
addsd xmm8, xmm1
movsd qword [rsp + 0x38], xmm8
lea rdx, [rsp + 0x5330]
lea rcx, [rsp + 0xf98]
call fcn.140015ab0
movaps xmm1, xmm12
call sub.api_ms_win_crt_math_l1_1_0.dll_pow
movsd xmm1, qword [rsp + 0x38]
subsd xmm1, xmm0
movsd qword [rsp + 0x38], xmm1
lea rdx, [rsp + 0x5330]
lea rcx, [rsp + 0xf98]
call fcn.140015ab0
call sub.api_ms_win_crt_math_l1_1_0.dll_tan
mulsd xmm0, qword [rsp + 0x38]
movsd qword [rsp + 0x38], xmm0
lea rdx, str.random
lea rcx, [rsp + 0x1520]
call fcn.140014c30
nop
lea rdx, [rsp + 0x5330]
lea rcx, [rsp + 0x1520]
call fcn.140002710
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rsp + 0x1030], xmm0
mov qword [rsp + 0x1040], rax
lea rcx, [rsp + 0x1030]
call fcn.140014490
mov edx, 0x64
lea rcx, [rsp + 0x1030]
call fcn.140016690
nop
lea rdx, [rsp + 0x8e8]
lea rcx, [rsp + 0x1030]
call fcn.140014620
mov rbx, qword [rax]
lea rdx, [rsp + 0x8f0]
lea rcx, [rsp + 0x1030]
call fcn.140014630
lea rcx, [rsp + 0xd60]
mov qword [rsp + 0x720], rcx
lea rcx, [rsp + 0x5330]
mov qword [rsp + 0x728], rcx
lea r8, [rsp + 0x720]
mov rdx, rbx
mov rcx, qword [rax]
call fcn.140015b40
lea rdx, [rsp + 0x5330]
lea rcx, [rsp + 0x1030]
call fcn.140002820
lea rdx, [rsp + 0x8f8]
lea rcx, [rsp + 0x1030]
call fcn.140014620
mov rbx, qword [rax]
lea rdx, [rsp + 0x900]
lea rcx, [rsp + 0x1030]
call fcn.140014630
xor r9d, r9d
xor r8d, r8d
mov rdx, rbx
mov rcx, qword [rax]
call fcn.140015ba0
mov ecx, dword [rsp + 0x30]
add ecx, eax
mov dword [rsp + 0x30], ecx
mov r9d, dword [rsp + 0xd64]
mov r8d, dword [rsp + 0xd60]
lea rdx, [rsp + 0x5330]
lea rcx, [rsp + 0xd60]
call fcn.1400175c0
mov ebx, eax
mov r9d, dword [rsp + 0xd64]
mov r8d, dword [rsp + 0xd60]
lea rdx, [rsp + 0x5330]
lea rcx, [rsp + 0xd60]
call fcn.1400175c0
mov r8d, eax
mov ecx, ebx
test ebx, ebx
cmove ecx, r15d
sub eax, ebx
cdq
idiv ecx
imul ebx, r8d
add eax, ebx
mov ecx, dword [rsp + 0x30]
add eax, ecx
mov dword [rsp + 0x30], eax
mov eax, dword [rsp + 0x30]
and eax, 0x80000001
jge 0x14000e02d
dec eax
or eax, 0xfffffffe
inc eax
mov r9d, dword [rsp + 0xd64]
mov r8d, dword [rsp + 0xd60]
lea rdx, [rsp + 0x5330]
lea rcx, [rsp + 0xd60]
test eax, eax
jne 0x14000e062
call fcn.1400175c0
mov ecx, dword [rsp + 0x30]
add eax, ecx
mov dword [rsp + 0x30], eax
jmp 0x14000e071
call fcn.1400175c0
mov ecx, dword [rsp + 0x30]
sub ecx, eax
mov dword [rsp + 0x30], ecx
mov esi, 5
nop word [rax + rax]
mov ebx, r12d
nop dword [rax]
nop word [rax + rax]
mov r9d, dword [rsp + 0xd64]
mov r8d, dword [rsp + 0xd60]
lea rdx, [rsp + 0x5330]
lea rcx, [rsp + 0xd60]
call fcn.1400175c0
mov ecx, dword [rsp + 0x30]
add eax, ecx
mov dword [rsp + 0x30], eax
lea rdx, [rsp + 0x5330]
lea rcx, [rsp + 0xf98]
call fcn.140015ab0
movsd xmm1, qword [rsp + 0x38]
addsd xmm0, xmm1
movsd qword [rsp + 0x38], xmm0
lea rdx, [rsp + 0x5330]
test bl, 1
jne 0x14000e11b
mov r9d, dword [rsp + 0xd64]
mov r8d, dword [rsp + 0xd60]
lea rcx, [rsp + 0xd60]
call fcn.1400175c0
mov ecx, dword [rsp + 0x30]
imul eax, ecx
mov dword [rsp + 0x30], eax
jmp 0x14000e13d
movsd xmm6, qword [rsp + 0x38]
lea rcx, [rsp + 0xf98]
call fcn.140015ab0
addsd xmm0, xmm10
divsd xmm6, xmm0
movsd qword [rsp + 0x38], xmm6
inc ebx
cmp ebx, 5
jl 0x14000e090
sub rsi, 1
jne 0x14000e080
lea rcx, [rsp + 0x1030]
call fcn.140014640
nop
lea rcx, [rsp + 0x1520]
call fcn.140014b90
sub r14, 1
jne 0x14000dd10
lea rcx, [rsp + 0x508]
call fcn.140001aa0
mov qword [rsp + 0xc0], rdi
mov rax, qword [rax]
mov qword [rsp + 0xc8], rax
lea rdx, [rsp + 0xc0]
lea rcx, [rsp + 0xc8]
call fcn.1400028d0
test al, al
js 0x14000dd00
mov eax, dword [rsp + 0x30]
lea rcx, [rsp + 0xe20]
call fcn.140014520
mov qword [0], r12
jmp 0x1400133fe
mov byte [rsp + 0x42], 0
lea rcx, [rsp + 0x42]
call fcn.140013490
mov qword [rsp + 0x510], rax
xor r8d, r8d
lea rdx, [rsp + 0x510]
lea rcx, [rsp + 0xa18]
call fcn.140017690
nop
lea rcx, [rsp + 0xa18]
call fcn.140003680
movzx ebx, al
lea rcx, [rsp + 0xa18]
call fcn.140002af0
test bl, bl
je 0x14000e3c5
mov byte [rsp + 0x43], 0
lea rcx, [rsp + 0x43]
call fcn.1400134a0
mov qword [rsp + 0x518], rax
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rsp + 0x1210], xmm0
mov qword [rsp + 0x1220], rax
lea rdx, [rsp + 0x103f8]
lea rcx, [rsp + 0x1210]
call fcn.140002960
nop
mov ecx, r14d
mov rax, qword [0x14002f0b0]
lea rbx, [0x140016140]
test rax, rax
je 0x14000e2ab
mov rdx, r14
cmp rax, rbx
je 0x14000e29a
inc ecx
mov edx, ecx
mov rax, qword [rsi + rcx*8 + 0x2f0b0]
test rax, rax
jne 0x14000e282
jmp 0x14000e2ab
mov r8, qword [rsi + rdx*8 + 0x2f3e0]
test r8, r8
jne 0x14000e38f
mov edx, 0x1f4
xor ecx, ecx
lea r9d, [rcx + 0x40]
mov r8d, 0x1000
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov r8, rax
test rax, rax
jne 0x14000e2d2
mov r8, r14
jmp 0x14000e36e
mov rax, rbx
mov rcx, r8
mov rdx, r12
nop dword [rax + rax]
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rcx + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rcx + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rcx + 0x50], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rcx + 0x60], xmm0
lea rcx, [rcx + 0x80]
movups xmm1, xmmword [rax + 0x70]
movups xmmword [rcx - 0x10], xmm1
lea rax, [rax + 0x80]
sub rdx, 1
jne 0x14000e2e0
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rcx + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rcx + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rcx + 0x50], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rcx + 0x60], xmm0
mov eax, dword [rax + 0x70]
mov dword [rcx + 0x70], eax
mov rax, qword [0x14002e410]
mov qword [rsi + rax*8 + 0x2f0b0], rbx
mov qword [rsi + rax*8 + 0x2f3e0], r8
inc rax
mov qword [0x14002e410], rax
lea rdx, [rsp + 0x518]
lea rcx, [0x140007200]
call r8
nop
mov rcx, qword [rsp + 0x1210]
xor rcx, qword [rsp + 0x1218]
mov qword [rsp + 0x1210], rcx
mov rax, qword [rsp + 0x1220]
mov qword [rax], rcx
call qword [sym.imp.MSVCP140.dll_unsigned_int___cdecl_std::_Random_device_void_]
mov dword [rsp + 0x7a44], 0xffffffff
mov r8d, 0x6c078965
mov edx, eax
lea rcx, [rsp + 0x66c0]
call fcn.140015560
mov dword [rsp + 0xd80], 0xffffff9c
mov dword [rsp + 0xd84], 0x64
movaps xmm0, xmmword [0x140024280]
movups xmmword [rsp + 0xfa8], xmm0
xor r12d, r12d
mov dword [rsp + 0x30], r12d
movsd qword [rsp + 0x38], xmm11
lea rcx, [rsp + 0x12e0]
call fcn.140001aa0
mov qword [rsp + 0x528], 0x64
mov rax, qword [rsp + 0x12e0]
mov qword [rsp + 0x530], rax
lea r8, [rsp + 0x528]
lea rdx, [rsp + 0x530]
lea rcx, [rsp + 0x908]
call fcn.140015950
mov rdi, qword [rax]
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rsp + 0xe08], xmm0
mov qword [rsp + 0xe18], rax
lea rcx, [rsp + 0xe08]
call fcn.140014490
nop
lea rcx, [rsp + 0x538]
call fcn.140015970
nop
mov rdx, rax
lea rcx, [rsp + 0x250]
call fcn.1400159a0
nop
lea rdx, [rsp + 0x250]
lea rcx, [rsp + 0xe08]
call fcn.140016650
nop
lea rcx, [rsp + 0x250]
call fcn.1400144b0
nop
lea rcx, [rsp + 0x538]
call fcn.1400144b0
lea rcx, [rsp + 0x540]
call fcn.1400159c0
nop
mov rdx, rax
lea rcx, [rsp + 0x258]
call fcn.1400159a0
nop
lea rdx, [rsp + 0x258]
lea rcx, [rsp + 0xe08]
call fcn.140016650
nop
lea rcx, [rsp + 0x258]
call fcn.1400144b0
nop
lea rcx, [rsp + 0x540]
call fcn.1400144b0
lea rcx, [rsp + 0x548]
call fcn.1400159f0
nop
mov rdx, rax
lea rcx, [rsp + 0x260]
call fcn.1400159a0
nop
lea rdx, [rsp + 0x260]
lea rcx, [rsp + 0xe08]
call fcn.140016650
nop
lea rcx, [rsp + 0x260]
call fcn.1400144b0
nop
lea rcx, [rsp + 0x548]
call fcn.1400144b0
lea rcx, [rsp + 0x550]
call fcn.140015a20
nop
mov rdx, rax
lea rcx, [rsp + 0x268]
call fcn.1400159a0
nop
lea rdx, [rsp + 0x268]
lea rcx, [rsp + 0xe08]
call fcn.140016650
nop
lea rcx, [rsp + 0x268]
call fcn.1400144b0
nop
lea rcx, [rsp + 0x550]
call fcn.1400144b0
lea rcx, [rsp + 0x558]
call fcn.140015a50
nop
mov rdx, rax
lea rcx, [rsp + 0x270]
call fcn.1400159a0
nop
lea rdx, [rsp + 0x270]
lea rcx, [rsp + 0xe08]
call fcn.140016650
nop
lea rcx, [rsp + 0x270]
call fcn.1400144b0
nop
lea rcx, [rsp + 0x558]
call fcn.1400144b0
lea rcx, [rsp + 0x560]
call fcn.140015a80
nop
mov rdx, rax
lea rcx, [rsp + 0x278]
call fcn.1400159a0
nop
lea rdx, [rsp + 0x278]
lea rcx, [rsp + 0xe08]
call fcn.140016650
nop
lea rcx, [rsp + 0x278]
call fcn.1400144b0
nop
lea rcx, [rsp + 0x560]
call fcn.1400144b0
lea rcx, [rsp + 0x568]
call fcn.140001aa0
mov qword [rsp + 0xd0], rdi
mov rax, qword [rax]
mov qword [rsp + 0xd8], rax
lea rdx, [rsp + 0xd0]
lea rcx, [rsp + 0xd8]
call fcn.1400028d0
test al, al
jns 0x14000eb64
nop dword [rax + rax]
mov r14d, 0x186a0
nop word [rax + rax]
mov r9d, dword [rsp + 0xd84]
mov r8d, dword [rsp + 0xd80]
lea rdx, [rsp + 0x66c0]
lea rcx, [rsp + 0xd80]
call fcn.1400175c0
mov r9d, dword [rsp + 0xd84]
mov r8d, dword [rsp + 0xd80]
lea rdx, [rsp + 0x66c0]
lea rcx, [rsp + 0xd80]
call fcn.1400175c0
mov rcx, qword [rsp + 0xe10]
mov rsi, qword [rsp + 0xe08]
sub rcx, rsi
sar rcx, 3
cdqe
xor edx, edx
div rcx
movsxd rax, edx
mov rsi, qword [rsi + rax*8]
mov rax, qword [rsi]
mov rbx, qword [rax + 8]
mov r9d, dword [rsp + 0xd84]
mov r8d, dword [rsp + 0xd80]
lea rdx, [rsp + 0x66c0]
lea rcx, [rsp + 0xd80]
call fcn.1400175c0
mov r8d, eax
mov edx, dword [rsp + 0x30]
mov rcx, rsi
call rbx
mov dword [rsp + 0x30], eax
lea rdx, [rsp + 0x66c0]
lea rcx, [rsp + 0xfa8]
call fcn.140015ab0
movaps xmm9, xmm0
lea rdx, [rsp + 0x66c0]
lea rcx, [rsp + 0xfa8]
call fcn.140015ab0
movaps xmm6, xmm0
movaps xmm7, xmm0
andps xmm7, xmm13
movaps xmm0, xmm9
call sub.api_ms_win_crt_math_l1_1_0.dll_cos
movaps xmm8, xmm0
movaps xmm0, xmm6
call sub.api_ms_win_crt_math_l1_1_0.dll_sin
mulsd xmm8, xmm0
addsd xmm7, xmm10
movaps xmm0, xmm7
call sub.api_ms_win_crt_math_l1_1_0.dll_log
addsd xmm8, xmm0
movaps xmm0, xmm9
call sub.api_ms_win_crt_math_l1_1_0.dll_exp
subsd xmm8, xmm0
movsd xmm1, qword [rsp + 0x38]
addsd xmm8, xmm1
movsd qword [rsp + 0x38], xmm8
lea rdx, [rsp + 0x66c0]
lea rcx, [rsp + 0xfa8]
call fcn.140015ab0
movaps xmm1, xmm12
call sub.api_ms_win_crt_math_l1_1_0.dll_pow
movsd xmm1, qword [rsp + 0x38]
subsd xmm1, xmm0
movsd qword [rsp + 0x38], xmm1
lea rdx, [rsp + 0x66c0]
lea rcx, [rsp + 0xfa8]
call fcn.140015ab0
call sub.api_ms_win_crt_math_l1_1_0.dll_tan
mulsd xmm0, qword [rsp + 0x38]
movsd qword [rsp + 0x38], xmm0
lea rdx, str.random
lea rcx, [rsp + 0x13a0]
call fcn.140014c30
nop
lea rdx, [rsp + 0x66c0]
lea rcx, [rsp + 0x13a0]
call fcn.140002710
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rsp + 0x1000], xmm0
mov qword [rsp + 0x1010], rax
lea rcx, [rsp + 0x1000]
call fcn.140014490
mov edx, 0x64
lea rcx, [rsp + 0x1000]
call fcn.140016690
nop
lea rdx, [rsp + 0x910]
lea rcx, [rsp + 0x1000]
call fcn.140014620
mov rbx, qword [rax]
lea rdx, [rsp + 0x918]
lea rcx, [rsp + 0x1000]
call fcn.140014630
lea rcx, [rsp + 0xd80]
mov qword [rsp + 0x6e0], rcx
lea rcx, [rsp + 0x66c0]
mov qword [rsp + 0x6e8], rcx
lea r8, [rsp + 0x6e0]
mov rdx, rbx
mov rcx, qword [rax]
call fcn.140015b40
lea rdx, [rsp + 0x66c0]
lea rcx, [rsp + 0x1000]
call fcn.140002820
lea rdx, [rsp + 0x920]
lea rcx, [rsp + 0x1000]
call fcn.140014620
mov rbx, qword [rax]
lea rdx, [rsp + 0x7a8]
lea rcx, [rsp + 0x1000]
call fcn.140014630
xor r9d, r9d
xor r8d, r8d
mov rdx, rbx
mov rcx, qword [rax]
call fcn.140015ba0
mov ecx, dword [rsp + 0x30]
add ecx, eax
mov dword [rsp + 0x30], ecx
mov r9d, dword [rsp + 0xd84]
mov r8d, dword [rsp + 0xd80]
lea rdx, [rsp + 0x66c0]
lea rcx, [rsp + 0xd80]
call fcn.1400175c0
mov ebx, eax
mov r9d, dword [rsp + 0xd84]
mov r8d, dword [rsp + 0xd80]
lea rdx, [rsp + 0x66c0]
lea rcx, [rsp + 0xd80]
call fcn.1400175c0
mov r8d, eax
mov ecx, ebx
test ebx, ebx
cmove ecx, r15d
sub eax, ebx
cdq
idiv ecx
imul ebx, r8d
add eax, ebx
mov ecx, dword [rsp + 0x30]
add eax, ecx
mov dword [rsp + 0x30], eax
mov eax, dword [rsp + 0x30]
and eax, 0x80000001
jge 0x14000e9dd
dec eax
or eax, 0xfffffffe
inc eax
mov r9d, dword [rsp + 0xd84]
mov r8d, dword [rsp + 0xd80]
lea rdx, [rsp + 0x66c0]
lea rcx, [rsp + 0xd80]
test eax, eax
jne 0x14000ea12
call fcn.1400175c0
mov ecx, dword [rsp + 0x30]
add eax, ecx
mov dword [rsp + 0x30], eax
jmp 0x14000ea21
call fcn.1400175c0
mov ecx, dword [rsp + 0x30]
sub ecx, eax
mov dword [rsp + 0x30], ecx
mov esi, 5
nop word [rax + rax]
mov ebx, r12d
nop dword [rax]
nop word [rax + rax]
mov r9d, dword [rsp + 0xd84]
mov r8d, dword [rsp + 0xd80]
lea rdx, [rsp + 0x66c0]
lea rcx, [rsp + 0xd80]
call fcn.1400175c0
mov ecx, dword [rsp + 0x30]
add eax, ecx
mov dword [rsp + 0x30], eax
lea rdx, [rsp + 0x66c0]
lea rcx, [rsp + 0xfa8]
call fcn.140015ab0
movsd xmm1, qword [rsp + 0x38]
addsd xmm0, xmm1
movsd qword [rsp + 0x38], xmm0
lea rdx, [rsp + 0x66c0]
test bl, 1
jne 0x14000eacb
mov r9d, dword [rsp + 0xd84]
mov r8d, dword [rsp + 0xd80]
lea rcx, [rsp + 0xd80]
call fcn.1400175c0
mov ecx, dword [rsp + 0x30]
imul eax, ecx
mov dword [rsp + 0x30], eax
jmp 0x14000eaed
movsd xmm6, qword [rsp + 0x38]
lea rcx, [rsp + 0xfa8]
call fcn.140015ab0
addsd xmm0, xmm10
divsd xmm6, xmm0
movsd qword [rsp + 0x38], xmm6
inc ebx
cmp ebx, 5
jl 0x14000ea40
sub rsi, 1
jne 0x14000ea30
lea rcx, [rsp + 0x1000]
call fcn.140014640
nop
lea rcx, [rsp + 0x13a0]
call fcn.140014b90
sub r14, 1
jne 0x14000e6c0
lea rcx, [rsp + 0x568]
call fcn.140001aa0
mov qword [rsp + 0xd0], rdi
mov rax, qword [rax]
mov qword [rsp + 0xd8], rax
lea rdx, [rsp + 0xd0]
lea rcx, [rsp + 0xd8]
call fcn.1400028d0
test al, al
js 0x14000e6b0
mov eax, dword [rsp + 0x30]
lea rcx, [rsp + 0xe08]
call fcn.140014520
mov byte [rsp + 0x44], 0
lea rcx, [rsp + 0x44]
call fcn.1400134c0
mov rdi, rax
mov byte [rsp + 0x45], 0
lea rcx, [rsp + 0x45]
call fcn.1400134c0
mov rbx, rax
mov qword [rsp + 0x730], r12
lea rcx, [rsp + 0x738]
call fcn.140015340
nop
mov rcx, r13
lea rcx, [rcx + 1]
cmp byte [rbx + rcx], 0
jne 0x14000ebb2
lea r8, [rcx + rbx]
mov r9d, r15d
mov rdx, rbx
lea rcx, [rsp + 0x730]
call fcn.1400164d0
nop
lea rax, [rsp + 0x7d8]
mov qword [rsp + 0x38], rax
mov byte [rsp + 0x46], 0
lea rcx, [rsp + 0x46]
call fcn.1400134b0
mov rbx, rax
movzx edx, byte [rsp + 0x40]
lea rcx, [rsp + 0x7d8]
call fcn.140016a80
nop
mov r8, r13
nop dword [rax]
inc r8
cmp byte [rbx + r8], 0
jne 0x14000ec10
mov rdx, rbx
lea rcx, [rsp + 0x7d8]
call fcn.140016aa0
nop
lea rdx, [rsp + 0x7d8]
lea rcx, [rsp + 0xbc0]
call fcn.140003c20
nop
mov dword [rsp + 0x20], r12d
mov r9, rdi
lea r8, [rsp + 0x730]
mov rdx, rax
lea rcx, [rsp + 0x1330]
call fcn.1400161c0
nop
lea rcx, [rsp + 0xbc0]
call fcn.140014b90
nop
lea rcx, [rsp + 0x730]
call fcn.1400152c0
lea rcx, [rsp + 0x748]
call fcn.140002450
call qword [sym.imp.MSVCP140.dll_unsigned_int___cdecl_std::_Random_device_void_]
mov dword [rsp + 0x8dd4], 0xffffffff
mov r8d, 0x6c078965
mov edx, eax
lea rcx, [rsp + 0x7a50]
call fcn.140015560
mov dword [rsp + 0xd88], 0xffffff9c
mov dword [rsp + 0xd8c], 0x64
movaps xmm0, xmmword [0x140024280]
movups xmmword [rsp + 0xf38], xmm0
mov dword [rsp + 0x30], r12d
movsd qword [rsp + 0x38], xmm11
lea rcx, [rsp + 0x1258]
call fcn.140001aa0
mov qword [rsp + 0x578], 0x64
mov rax, qword [rsp + 0x1258]
mov qword [rsp + 0x580], rax
lea r8, [rsp + 0x578]
lea rdx, [rsp + 0x580]
lea rcx, [rsp + 0x928]
call fcn.140015950
mov rdi, qword [rax]
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rsp + 0xec8], xmm0
mov qword [rsp + 0xed8], rax
lea rcx, [rsp + 0xec8]
call fcn.140014490
nop
lea rcx, [rsp + 0x588]
call fcn.140015970
nop
mov rdx, rax
lea rcx, [rsp + 0x280]
call fcn.1400159a0
nop
lea rdx, [rsp + 0x280]
lea rcx, [rsp + 0xec8]
call fcn.140016650
nop
lea rcx, [rsp + 0x280]
call fcn.1400144b0
nop
lea rcx, [rsp + 0x588]
call fcn.1400144b0
lea rcx, [rsp + 0x590]
call fcn.1400159c0
nop
mov rdx, rax
lea rcx, [rsp + 0x288]
call fcn.1400159a0
nop
lea rdx, [rsp + 0x288]
lea rcx, [rsp + 0xec8]
call fcn.140016650
nop
lea rcx, [rsp + 0x288]
call fcn.1400144b0
nop
lea rcx, [rsp + 0x590]
call fcn.1400144b0
lea rcx, [rsp + 0x598]
call fcn.1400159f0
nop
mov rdx, rax
lea rcx, [rsp + 0x290]
call fcn.1400159a0
nop
lea rdx, [rsp + 0x290]
lea rcx, [rsp + 0xec8]
call fcn.140016650
nop
lea rcx, [rsp + 0x290]
call fcn.1400144b0
nop
lea rcx, [rsp + 0x598]
call fcn.1400144b0
lea rcx, [rsp + 0x5a0]
call fcn.140015a20
nop
mov rdx, rax
lea rcx, [rsp + 0x298]
call fcn.1400159a0
nop
lea rdx, [rsp + 0x298]
lea rcx, [rsp + 0xec8]
call fcn.140016650
nop
lea rcx, [rsp + 0x298]
call fcn.1400144b0
nop
lea rcx, [rsp + 0x5a0]
call fcn.1400144b0
lea rcx, [rsp + 0x5a8]
call fcn.140015a50
nop
mov rdx, rax
lea rcx, [rsp + 0x2a0]
call fcn.1400159a0
nop
lea rdx, [rsp + 0x2a0]
lea rcx, [rsp + 0xec8]
call fcn.140016650
nop
lea rcx, [rsp + 0x2a0]
call fcn.1400144b0
nop
lea rcx, [rsp + 0x5a8]
call fcn.1400144b0
lea rcx, [rsp + 0x5b0]
call fcn.140015a80
nop
mov rdx, rax
lea rcx, [rsp + reloc.SHELL32.dll_IsUserAnAdmin]
call fcn.1400159a0
nop
lea rdx, [rsp + reloc.SHELL32.dll_IsUserAnAdmin]
lea rcx, [rsp + 0xec8]
call fcn.140016650
nop
lea rcx, [rsp + reloc.SHELL32.dll_IsUserAnAdmin]
call fcn.1400144b0
nop
lea rcx, [rsp + 0x5b0]
call fcn.1400144b0
lea rcx, [rsp + 0x5b8]
call fcn.140001aa0
mov qword [rsp + 0xe0], rdi
mov rax, qword [rax]
mov qword [rsp + 0xe8], rax
lea rdx, [rsp + 0xe0]
lea rcx, [rsp + 0xe8]
call fcn.1400028d0
test al, al
jns 0x14000f424
nop word [rax + rax]
mov r14d, 0x186a0
nop word [rax + rax]
mov r9d, dword [rsp + 0xd8c]
mov r8d, dword [rsp + 0xd88]
lea rdx, [rsp + 0x7a50]
lea rcx, [rsp + 0xd88]
call fcn.1400175c0
mov r9d, dword [rsp + 0xd8c]
mov r8d, dword [rsp + 0xd88]
lea rdx, [rsp + 0x7a50]
lea rcx, [rsp + 0xd88]
call fcn.1400175c0
mov rcx, qword [rsp + 0xed0]
mov rsi, qword [rsp + 0xec8]
sub rcx, rsi
sar rcx, 3
cdqe
xor edx, edx
div rcx
movsxd rax, edx
mov rsi, qword [rsi + rax*8]
mov rax, qword [rsi]
mov rbx, qword [rax + 8]
mov r9d, dword [rsp + 0xd8c]
mov r8d, dword [rsp + 0xd88]
lea rdx, [rsp + 0x7a50]
lea rcx, [rsp + 0xd88]
call fcn.1400175c0
mov r8d, eax
mov edx, dword [rsp + 0x30]
mov rcx, rsi
call rbx
mov dword [rsp + 0x30], eax
lea rdx, [rsp + 0x7a50]
lea rcx, [rsp + 0xf38]
call fcn.140015ab0
movaps xmm9, xmm0
lea rdx, [rsp + 0x7a50]
lea rcx, [rsp + 0xf38]
call fcn.140015ab0
movaps xmm6, xmm0
movaps xmm7, xmm0
andps xmm7, xmm13
movaps xmm0, xmm9
call sub.api_ms_win_crt_math_l1_1_0.dll_cos
movaps xmm8, xmm0
movaps xmm0, xmm6
call sub.api_ms_win_crt_math_l1_1_0.dll_sin
mulsd xmm8, xmm0
addsd xmm7, xmm10
movaps xmm0, xmm7
call sub.api_ms_win_crt_math_l1_1_0.dll_log
addsd xmm8, xmm0
movaps xmm0, xmm9
call sub.api_ms_win_crt_math_l1_1_0.dll_exp
subsd xmm8, xmm0
movsd xmm1, qword [rsp + 0x38]
addsd xmm8, xmm1
movsd qword [rsp + 0x38], xmm8
lea rdx, [rsp + 0x7a50]
lea rcx, [rsp + 0xf38]
call fcn.140015ab0
movaps xmm1, xmm12
call sub.api_ms_win_crt_math_l1_1_0.dll_pow
movsd xmm1, qword [rsp + 0x38]
subsd xmm1, xmm0
movsd qword [rsp + 0x38], xmm1
lea rdx, [rsp + 0x7a50]
lea rcx, [rsp + 0xf38]
call fcn.140015ab0
call sub.api_ms_win_crt_math_l1_1_0.dll_tan
mulsd xmm0, qword [rsp + 0x38]
movsd qword [rsp + 0x38], xmm0
lea rdx, str.random
lea rcx, [rsp + 0x13c0]
call fcn.140014c30
nop
lea rdx, [rsp + 0x7a50]
lea rcx, [rsp + 0x13c0]
call fcn.140002710
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rsp + 0xfe8], xmm0
mov qword [rsp + 0xff8], rax
lea rcx, [rsp + 0xfe8]
call fcn.140014490
mov edx, 0x64
lea rcx, [rsp + 0xfe8]
call fcn.140016690
nop
lea rdx, [rsp + 0x930]
lea rcx, [rsp + 0xfe8]
call fcn.140014620
mov rbx, qword [rax]
lea rdx, [rsp + 0x938]
lea rcx, [rsp + 0xfe8]
call fcn.140014630
lea rcx, [rsp + 0xd88]
mov qword [rsp + 0x6a0], rcx
lea rcx, [rsp + 0x7a50]
mov qword [rsp + 0x6a8], rcx
lea r8, [rsp + 0x6a0]
mov rdx, rbx
mov rcx, qword [rax]
call fcn.140015b40
lea rdx, [rsp + 0x7a50]
lea rcx, [rsp + 0xfe8]
call fcn.140002820
lea rdx, [rsp + 0x940]
lea rcx, [rsp + 0xfe8]
call fcn.140014620
mov rbx, qword [rax]
lea rdx, [rsp + 0x948]
lea rcx, [rsp + 0xfe8]
call fcn.140014630
xor r9d, r9d
xor r8d, r8d
mov rdx, rbx
mov rcx, qword [rax]
call fcn.140015ba0
mov ecx, dword [rsp + 0x30]
add ecx, eax
mov dword [rsp + 0x30], ecx
mov r9d, dword [rsp + 0xd8c]
mov r8d, dword [rsp + 0xd88]
lea rdx, [rsp + 0x7a50]
lea rcx, [rsp + 0xd88]
call fcn.1400175c0
mov ebx, eax
mov r9d, dword [rsp + 0xd8c]
mov r8d, dword [rsp + 0xd88]
lea rdx, [rsp + 0x7a50]
lea rcx, [rsp + 0xd88]
call fcn.1400175c0
mov r8d, eax
mov ecx, ebx
test ebx, ebx
cmove ecx, r15d
sub eax, ebx
cdq
idiv ecx
imul ebx, r8d
add eax, ebx
mov ecx, dword [rsp + 0x30]
add eax, ecx
mov dword [rsp + 0x30], eax
mov eax, dword [rsp + 0x30]
and eax, 0x80000001
jge 0x14000f29d
dec eax
or eax, 0xfffffffe
inc eax
mov r9d, dword [rsp + 0xd8c]
mov r8d, dword [rsp + 0xd88]
lea rdx, [rsp + 0x7a50]
lea rcx, [rsp + 0xd88]
test eax, eax
jne 0x14000f2d2
call fcn.1400175c0
mov ecx, dword [rsp + 0x30]
add eax, ecx
mov dword [rsp + 0x30], eax
jmp 0x14000f2e1
call fcn.1400175c0
mov ecx, dword [rsp + 0x30]
sub ecx, eax
mov dword [rsp + 0x30], ecx
mov esi, 5
nop word [rax + rax]
mov ebx, r12d
nop dword [rax]
nop word [rax + rax]
mov r9d, dword [rsp + 0xd8c]
mov r8d, dword [rsp + 0xd88]
lea rdx, [rsp + 0x7a50]
lea rcx, [rsp + 0xd88]
call fcn.1400175c0
mov ecx, dword [rsp + 0x30]
add eax, ecx
mov dword [rsp + 0x30], eax
lea rdx, [rsp + 0x7a50]
lea rcx, [rsp + 0xf38]
call fcn.140015ab0
movsd xmm1, qword [rsp + 0x38]
addsd xmm0, xmm1
movsd qword [rsp + 0x38], xmm0
lea rdx, [rsp + 0x7a50]
test bl, 1
jne 0x14000f38b
mov r9d, dword [rsp + 0xd8c]
mov r8d, dword [rsp + 0xd88]
lea rcx, [rsp + 0xd88]
call fcn.1400175c0
mov ecx, dword [rsp + 0x30]
imul eax, ecx
mov dword [rsp + 0x30], eax
jmp 0x14000f3ad
movsd xmm6, qword [rsp + 0x38]
lea rcx, [rsp + 0xf38]
call fcn.140015ab0
addsd xmm0, xmm10
divsd xmm6, xmm0
movsd qword [rsp + 0x38], xmm6
inc ebx
cmp ebx, 5
jl 0x14000f300
sub rsi, 1
jne 0x14000f2f0
lea rcx, [rsp + 0xfe8]
call fcn.140014640
nop
lea rcx, [rsp + 0x13c0]
call fcn.140014b90
sub r14, 1
jne 0x14000ef80
lea rcx, [rsp + 0x5b8]
call fcn.140001aa0
mov qword [rsp + 0xe0], rdi
mov rax, qword [rax]
mov qword [rsp + 0xe8], rax
lea rdx, [rsp + 0xe0]
lea rcx, [rsp + 0xe8]
call fcn.1400028d0
test al, al
js 0x14000ef70
mov eax, dword [rsp + 0x30]
lea rcx, [rsp + 0xec8]
call fcn.140014520
mov byte [rsp + 0x47], 0
lea rcx, [rsp + 0x47]
call fcn.1400134c0
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_environment_l1_1_0.dll_getenv]
mov rbx, rax
movzx edx, byte [rsp + 0x40]
lea rcx, [rsp + 0x1278]
call fcn.140016a80
nop
mov r8, r13
inc r8
cmp byte [rbx + r8], 0
jne 0x14000f466
mov rdx, rbx
lea rcx, [rsp + 0x1278]
call fcn.140016aa0
nop
mov byte [rsp + 0x48], 0
lea rcx, [rsp + 0x48]
call fcn.1400134c0
mov rdi, rax
mov byte [rsp + 0x49], 0
lea rcx, [rsp + 0x49]
call fcn.1400134c0
mov rbx, rax
movzx edx, byte [rsp + 0x40]
lea rcx, [rsp + 0x7b8]
call fcn.140016a80
nop
mov r8, r13
nop dword [rax + rax]
inc r8
cmp byte [rbx + r8], 0
jne 0x14000f4c0
mov rdx, rbx
lea rcx, [rsp + 0x7b8]
call fcn.140016aa0
nop
mov rbx, qword [rsp + 0x7c8]
mov byte [rsp + 0x4a], 0
lea rcx, [rsp + 0x4a]
call fcn.1400134c0
mov rdx, rax
xor r8d, r8d
lea rcx, [rsp + 0x1278]
call fcn.140014950
mov rcx, r13
nop dword [rax + rax]
inc rcx
cmp byte [rdi + rcx], 0
jne 0x14000f510
mov qword [rsp + 0x20], rcx
mov r9, rdi
mov r8, rbx
mov rdx, rax
lea rcx, [rsp + 0x1278]
call fcn.140015390
nop
lea rcx, [rsp + 0x7b8]
call fcn.140014b90
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rsp + 0x1228], xmm0
mov qword [rsp + 0x1238], rax
lea rdx, [rsp + 0x103f8]
lea rcx, [rsp + 0x1228]
call fcn.140002960
nop
mov ecx, r12d
mov rax, qword [0x14002cad0]
lea rsi, [0x140000000]
test rax, rax
je 0x14000f5bb
mov rdx, r12
lea r12, [0x140016110]
nop dword [rax]
cmp rax, r12
je 0x14000f5a8
inc ecx
mov edx, ecx
mov rax, qword [rsi + rcx*8 + 0x2cad0]
test rax, rax
jne 0x14000f590
jmp 0x14000f5c2
mov r8, qword [rsi + rdx*8 + 0x2e750]
test r8, r8
jne 0x14000f69f
jmp 0x14000f5c2
lea r12, [0x140016110]
mov edx, 0x1f4
xor ecx, ecx
lea r9d, [rcx + 0x40]
mov r8d, 0x1000
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov r8, rax
test rax, rax
je 0x14000f67e
mov rax, r12
mov rcx, r8
mov edx, 3
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rcx + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rcx + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rcx + 0x50], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rcx + 0x60], xmm0
lea rcx, [rcx + 0x80]
movups xmm1, xmmword [rax + 0x70]
movups xmmword [rcx - 0x10], xmm1
lea rax, [rax + 0x80]
sub rdx, 1
jne 0x14000f5f0
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rcx + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rcx + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rcx + 0x50], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rcx + 0x60], xmm0
mov eax, dword [rax + 0x70]
mov dword [rcx + 0x70], eax
mov rax, qword [0x14002f3d0]
mov qword [rsi + rax*8 + 0x2cad0], r12
mov qword [rsi + rax*8 + 0x2e750], r8
inc rax
mov qword [0x14002f3d0], rax
mov rcx, qword [sym.imp.SHELL32.dll_IsUserAnAdmin]
call r8
nop
mov rdx, qword [rsp + 0x1228]
xor rdx, qword [rsp + 0x1230]
mov qword [rsp + 0x1228], rdx
mov rcx, qword [rsp + 0x1238]
mov qword [rcx], rdx
test eax, eax
je 0x14000f877
mov byte [rsp + 0x4b], 0
lea rcx, [rsp + 0x4b]
call fcn.140013480
mov qword [rsp + 0x5c0], rax
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rsp + 0x1240], xmm0
mov qword [rsp + 0x1250], rax
lea rdx, [rsp + 0x103f8]
lea rcx, [rsp + 0x1240]
call fcn.140002960
nop
xor ecx, ecx
mov rax, qword [0x14002d780]
lea r15, [0x140016040]
test rax, rax
je 0x14000f759
xor edx, edx
nop
cmp rax, r15
je 0x14000f748
inc ecx
mov edx, ecx
mov rax, qword [rsi + rcx*8 + 0x2d780]
test rax, rax
jne 0x14000f730
jmp 0x14000f759
mov r8, qword [rsi + rdx*8 + 0x2c150]
test r8, r8
jne 0x14000f83f
mov edx, 0x1f4
xor ecx, ecx
lea r9d, [rcx + 0x40]
mov r8d, 0x1000
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov r8, rax
test rax, rax
je 0x14000f81e
mov rax, r15
mov rcx, r8
mov edx, 3
nop word [rax + rax]
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rcx + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rcx + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rcx + 0x50], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rcx + 0x60], xmm0
lea rcx, [rcx + 0x80]
movups xmm1, xmmword [rax + 0x70]
movups xmmword [rcx - 0x10], xmm1
lea rax, [rax + 0x80]
sub rdx, 1
jne 0x14000f790
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rcx + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rcx + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rcx + 0x50], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rcx + 0x60], xmm0
mov eax, dword [rax + 0x70]
mov dword [rcx + 0x70], eax
mov rax, qword [0x14002cdf0]
mov qword [rsi + rax*8 + 0x2d780], r15
mov qword [rsi + rax*8 + 0x2c150], r8
inc rax
mov qword [0x14002cdf0], rax
lea rdx, [rsp + 0x5c0]
lea rcx, [fcn.140001a30]
call r8
nop
mov rcx, qword [rsp + 0x1240]
xor rcx, qword [rsp + 0x1248]
mov qword [rsp + 0x1240], rcx
mov rax, qword [rsp + 0x1250]
mov qword [rax], rcx
jmp 0x14000f87e
lea r15, [0x140016040]
mov rbx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea rcx, [rsp + 0xbe0]
call fcn.1400038e0
nop
lea r8, [rsp + 0x5c]
lea rdx, [rsp + 0xa38]
mov rcx, rax
call fcn.140015c30
nop
lea rdx, [rsp + 0xa38]
mov rcx, rbx
call fcn.1400162d0
lea rdx, [0x1400162f0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
nop
lea rcx, [rsp + 0xa38]
call fcn.140014b90
nop
lea rcx, [rsp + 0xbe0]
call fcn.140002af0
mov rbx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea r8, [0x14002f740]
lea rdx, [rsp + 0x1278]
lea rcx, [rsp + 0xc00]
call fcn.1400157a0
nop
mov rdx, rax
mov rcx, rbx
call fcn.1400162d0
lea rdx, [0x1400162f0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
nop
lea rcx, [rsp + 0xc00]
call fcn.140014b90
lea rdx, [rsp + 0x1310]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400162d0
lea rdx, [0x1400162f0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
call qword [sym.imp.MSVCP140.dll_unsigned_int___cdecl_std::_Random_device_void_]
mov dword [rsp + 0xa164], 0xffffffff
mov r8d, 0x6c078965
mov edx, eax
lea rcx, [rsp + 0x8de0]
call fcn.140015560
mov dword [rsp + 0xd90], 0xffffff9c
mov dword [rsp + 0xd94], 0x64
movaps xmm0, xmmword [0x140024280]
movups xmmword [rsp + 0xfc8], xmm0
mov dword [rsp + 0x30], 0
movsd qword [rsp + 0x38], xmm11
lea rcx, [rsp + 0x1260]
call fcn.140001aa0
mov qword [rsp + 0x5d0], 0x64
mov rax, qword [rsp + 0x1260]
mov qword [rsp + 0x5d8], rax
lea r8, [rsp + 0x5d0]
lea rdx, [rsp + 0x5d8]
lea rcx, [rsp + 0x950]
call fcn.140015950
mov rdi, qword [rax]
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rsp + 0xeb0], xmm0
mov qword [rsp + 0xec0], rax
lea rcx, [rsp + 0xeb0]
call fcn.140014490
nop
lea rcx, [rsp + 0x5e0]
call fcn.140015970
nop
mov rdx, rax
lea rcx, [rsp + 0x2b0]
call fcn.1400159a0
nop
lea rdx, [rsp + 0x2b0]
lea rcx, [rsp + 0xeb0]
call fcn.140016650
nop
lea rcx, [rsp + 0x2b0]
call fcn.1400144b0
nop
lea rcx, [rsp + 0x5e0]
call fcn.1400144b0
lea rcx, [rsp + 0x5e8]
call fcn.1400159c0
nop
mov rdx, rax
lea rcx, [rsp + 0x2b8]
call fcn.1400159a0
nop
lea rdx, [rsp + 0x2b8]
lea rcx, [rsp + 0xeb0]
call fcn.140016650
nop
lea rcx, [rsp + 0x2b8]
call fcn.1400144b0
nop
lea rcx, [rsp + 0x5e8]
call fcn.1400144b0
lea rcx, [rsp + 0x5f0]
call fcn.1400159f0
nop
mov rdx, rax
lea rcx, [rsp + 0x2c0]
call fcn.1400159a0
nop
lea rdx, [rsp + 0x2c0]
lea rcx, [rsp + 0xeb0]
call fcn.140016650
nop
lea rcx, [rsp + 0x2c0]
call fcn.1400144b0
nop
lea rcx, [rsp + 0x5f0]
call fcn.1400144b0
lea rcx, [rsp + 0x5f8]
call fcn.140015a20
nop
mov rdx, rax
lea rcx, [rsp + 0x2c8]
call fcn.1400159a0
nop
lea rdx, [rsp + 0x2c8]
lea rcx, [rsp + 0xeb0]
call fcn.140016650
nop
lea rcx, [rsp + 0x2c8]
call fcn.1400144b0
nop
lea rcx, [rsp + 0x5f8]
call fcn.1400144b0
lea rcx, [rsp + 0x600]
call fcn.140015a50
nop
mov rdx, rax
lea rcx, [rsp + 0x2d0]
call fcn.1400159a0
nop
lea rdx, [rsp + 0x2d0]
lea rcx, [rsp + 0xeb0]
call fcn.140016650
nop
lea rcx, [rsp + 0x2d0]
call fcn.1400144b0
nop
lea rcx, [rsp + 0x600]
call fcn.1400144b0
lea rcx, [rsp + 0x608]
call fcn.140015a80
nop
mov rdx, rax
lea rcx, [rsp + 0x2d8]
call fcn.1400159a0
nop
lea rdx, [rsp + 0x2d8]
lea rcx, [rsp + 0xeb0]
call fcn.140016650
nop
lea rcx, [rsp + 0x2d8]
call fcn.1400144b0
nop
lea rcx, [rsp + 0x608]
call fcn.1400144b0
lea rcx, [rsp + 0x610]
call fcn.140001aa0
mov qword [rsp + 0xf0], rdi
mov rax, qword [rax]
mov qword [rsp + 0xf8], rax
lea rdx, [rsp + 0xf0]
lea rcx, [rsp + 0xf8]
call fcn.1400028d0
test al, al
jns 0x1400100ef
mov r13d, 1
nop
mov r14d, 0x186a0
nop word [rax + rax]
mov r9d, dword [rsp + 0xd94]
mov r8d, dword [rsp + 0xd90]
lea rdx, [rsp + 0x8de0]
lea rcx, [rsp + 0xd90]
call fcn.1400175c0
mov r9d, dword [rsp + 0xd94]
mov r8d, dword [rsp + 0xd90]
lea rdx, [rsp + 0x8de0]
lea rcx, [rsp + 0xd90]
call fcn.1400175c0
mov rcx, qword [rsp + 0xeb8]
mov rsi, qword [rsp + 0xeb0]
sub rcx, rsi
sar rcx, 3
cdqe
xor edx, edx
div rcx
movsxd rax, edx
mov rsi, qword [rsi + rax*8]
mov rax, qword [rsi]
mov rbx, qword [rax + 8]
mov r9d, dword [rsp + 0xd94]
mov r8d, dword [rsp + 0xd90]
lea rdx, [rsp + 0x8de0]
lea rcx, [rsp + 0xd90]
call fcn.1400175c0
mov r8d, eax
mov edx, dword [rsp + 0x30]
mov rcx, rsi
call rbx
mov dword [rsp + 0x30], eax
lea rdx, [rsp + 0x8de0]
lea rcx, [rsp + 0xfc8]
call fcn.140015ab0
movaps xmm9, xmm0
lea rdx, [rsp + 0x8de0]
lea rcx, [rsp + 0xfc8]
call fcn.140015ab0
movaps xmm6, xmm0
movaps xmm7, xmm0
andps xmm7, xmm13
movaps xmm0, xmm9
call sub.api_ms_win_crt_math_l1_1_0.dll_cos
movaps xmm8, xmm0
movaps xmm0, xmm6
call sub.api_ms_win_crt_math_l1_1_0.dll_sin
mulsd xmm8, xmm0
addsd xmm7, xmm10
movaps xmm0, xmm7
call sub.api_ms_win_crt_math_l1_1_0.dll_log
addsd xmm8, xmm0
movaps xmm0, xmm9
call sub.api_ms_win_crt_math_l1_1_0.dll_exp
subsd xmm8, xmm0
movsd xmm1, qword [rsp + 0x38]
addsd xmm8, xmm1
movsd qword [rsp + 0x38], xmm8
lea rdx, [rsp + 0x8de0]
lea rcx, [rsp + 0xfc8]
call fcn.140015ab0
movaps xmm1, xmm12
call sub.api_ms_win_crt_math_l1_1_0.dll_pow
movsd xmm1, qword [rsp + 0x38]
subsd xmm1, xmm0
movsd qword [rsp + 0x38], xmm1
lea rdx, [rsp + 0x8de0]
lea rcx, [rsp + 0xfc8]
call fcn.140015ab0
call sub.api_ms_win_crt_math_l1_1_0.dll_tan
mulsd xmm0, qword [rsp + 0x38]
movsd qword [rsp + 0x38], xmm0
lea rdx, str.random
lea rcx, [rsp + 0x13e0]
call fcn.140014c30
nop
lea rdx, [rsp + 0x8de0]
lea rcx, [rsp + 0x13e0]
call fcn.140002710
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rsp + 0x10a8], xmm0
mov qword [rsp + 0x10b8], rax
lea rcx, [rsp + 0x10a8]
call fcn.140014490
mov edx, 0x64
lea rcx, [rsp + 0x10a8]
call fcn.140016690
nop
lea rdx, [rsp + 0x958]
lea rcx, [rsp + 0x10a8]
call fcn.140014620
mov rbx, qword [rax]
lea rdx, [rsp + 0x960]
lea rcx, [rsp + 0x10a8]
call fcn.140014630
lea rcx, [rsp + 0xd90]
mov qword [rsp + 0x6d0], rcx
lea rcx, [rsp + 0x8de0]
mov qword [rsp + 0x6d8], rcx
lea r8, [rsp + 0x6d0]
mov rdx, rbx
mov rcx, qword [rax]
call fcn.140015b40
lea rdx, [rsp + 0x8de0]
lea rcx, [rsp + 0x10a8]
call fcn.140002820
lea rdx, [rsp + 0x968]
lea rcx, [rsp + 0x10a8]
call fcn.140014620
mov rbx, qword [rax]
lea rdx, [rsp + 0x970]
lea rcx, [rsp + 0x10a8]
call fcn.140014630
xor r9d, r9d
xor r8d, r8d
mov rdx, rbx
mov rcx, qword [rax]
call fcn.140015ba0
mov ecx, dword [rsp + 0x30]
add ecx, eax
mov dword [rsp + 0x30], ecx
mov r9d, dword [rsp + 0xd94]
mov r8d, dword [rsp + 0xd90]
lea rdx, [rsp + 0x8de0]
lea rcx, [rsp + 0xd90]
call fcn.1400175c0
mov ebx, eax
mov r9d, dword [rsp + 0xd94]
mov r8d, dword [rsp + 0xd90]
lea rdx, [rsp + 0x8de0]
lea rcx, [rsp + 0xd90]
call fcn.1400175c0
mov r8d, eax
mov ecx, ebx
test ebx, ebx
cmove ecx, r13d
sub eax, ebx
cdq
idiv ecx
imul ebx, r8d
add eax, ebx
mov ecx, dword [rsp + 0x30]
add eax, ecx
mov dword [rsp + 0x30], eax
mov eax, dword [rsp + 0x30]
and eax, 0x80000001
jge 0x14000ff6d
dec eax
or eax, 0xfffffffe
inc eax
mov r9d, dword [rsp + 0xd94]
mov r8d, dword [rsp + 0xd90]
lea rdx, [rsp + 0x8de0]
lea rcx, [rsp + 0xd90]
test eax, eax
jne 0x14000ffa2
call fcn.1400175c0
mov ecx, dword [rsp + 0x30]
add eax, ecx
mov dword [rsp + 0x30], eax
jmp 0x14000ffb1
call fcn.1400175c0
mov ecx, dword [rsp + 0x30]
sub ecx, eax
mov dword [rsp + 0x30], ecx
mov esi, 5
xor ebx, ebx
nop dword [rax + rax]
mov r9d, dword [rsp + 0xd94]
mov r8d, dword [rsp + 0xd90]
lea rdx, [rsp + 0x8de0]
lea rcx, [rsp + 0xd90]
call fcn.1400175c0
mov ecx, dword [rsp + 0x30]
add eax, ecx
mov dword [rsp + 0x30], eax
lea rdx, [rsp + 0x8de0]
lea rcx, [rsp + 0xfc8]
call fcn.140015ab0
movsd xmm1, qword [rsp + 0x38]
addsd xmm0, xmm1
movsd qword [rsp + 0x38], xmm0
lea rdx, [rsp + 0x8de0]
test bl, 1
jne 0x14001004b
mov r9d, dword [rsp + 0xd94]
mov r8d, dword [rsp + 0xd90]
lea rcx, [rsp + 0xd90]
call fcn.1400175c0
mov ecx, dword [rsp + 0x30]
imul eax, ecx
mov dword [rsp + 0x30], eax
jmp 0x14001006d
movsd xmm6, qword [rsp + 0x38]
lea rcx, [rsp + 0xfc8]
call fcn.140015ab0
addsd xmm0, xmm10
divsd xmm6, xmm0
movsd qword [rsp + 0x38], xmm6
inc ebx
cmp ebx, 5
jl 0x14000ffc0
sub rsi, 1
jne 0x14000ffb6
lea rcx, [rsp + 0x10a8]
call fcn.140014640
nop
lea rcx, [rsp + 0x13e0]
call fcn.140014b90
sub r14, 1
jne 0x14000fc50
lea rcx, [rsp + 0x610]
call fcn.140001aa0
mov qword [rsp + 0xf0], rdi
mov rax, qword [rax]
mov qword [rsp + 0xf8], rax
lea rdx, [rsp + 0xf0]
lea rcx, [rsp + 0xf8]
call fcn.1400028d0
test al, al
js 0x14000fc40
lea r13, [rsi - 1]
lea rsi, [0x140000000]
mov eax, dword [rsp + 0x30]
lea rcx, [rsp + 0xeb0]
call fcn.140014520
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rsp + 0x1120], xmm0
mov qword [rsp + 0x1130], rax
lea rdx, [rsp + 0x103f8]
lea rcx, [rsp + 0x1120]
call fcn.140002960
nop
xor ecx, ecx
mov rax, qword [0x14002cad0]
test rax, rax
je 0x140010169
xor edx, edx
nop dword [rax + rax]
cmp rax, r12
je 0x140010158
inc ecx
mov edx, ecx
mov rax, qword [rsi + rcx*8 + 0x2cad0]
test rax, rax
jne 0x140010140
jmp 0x140010169
mov r8, qword [rsi + rdx*8 + 0x2e750]
test r8, r8
jne 0x14001024f
mov edx, 0x1f4
xor ecx, ecx
lea r9d, [rcx + 0x40]
mov r8d, 0x1000
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov r8, rax
test rax, rax
je 0x14001022e
mov rax, r12
mov rcx, r8
mov edx, 3
nop word [rax + rax]
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rcx + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rcx + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rcx + 0x50], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rcx + 0x60], xmm0
lea rcx, [rcx + 0x80]
movups xmm1, xmmword [rax + 0x70]
movups xmmword [rcx - 0x10], xmm1
lea rax, [rax + 0x80]
sub rdx, 1
jne 0x1400101a0
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rcx + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rcx + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rcx + 0x50], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rcx + 0x60], xmm0
mov eax, dword [rax + 0x70]
mov dword [rcx + 0x70], eax
mov rax, qword [0x14002f3d0]
mov qword [rsi + rax*8 + 0x2cad0], r12
mov qword [rsi + rax*8 + 0x2e750], r8
inc rax
mov qword [0x14002f3d0], rax
mov rcx, qword [sym.imp.SHELL32.dll_IsUserAnAdmin]
call r8
nop
mov r8, qword [rsp + 0x1120]
xor r8, qword [rsp + 0x1128]
mov qword [rsp + 0x1120], r8
mov rcx, qword [rsp + 0x1130]
mov qword [rcx], r8
test eax, eax
je 0x140012d6d
xor r8d, r8d
lea rdx, [0x14002f720]
lea rcx, [rsp + 0x1310]
call fcn.140014990
cmp rax, 0xffffffffffffffff
je 0x140012d6d
lea rdx, [fcn.140001a30]
lea rcx, [rsp + 0x978]
call fcn.140014320
mov rbx, rax
mov byte [rsp + 0x4c], 0
lea rcx, [rsp + 0x4c]
call fcn.140013480
mov qword [rsp + 0x618], rax
mov edx, 0x18
lea rcx, [rsp + 0x1370]
call fcn.140002950
lea rdx, [rsp + 0x103f8]
lea rcx, [rsp + 0x1370]
call fcn.140002960
nop
xor r13d, r13d
mov ecx, r13d
mov rax, qword [0x14002d780]
test rax, rax
je 0x14001033a
mov edx, r13d
cmp rax, r15
je 0x140010329
inc ecx
mov edx, ecx
mov rax, qword [rsi + rcx*8 + 0x2d780]
test rax, rax
jne 0x140010311
jmp 0x14001033a
mov r8, qword [rsi + rdx*8 + 0x2c150]
test r8, r8
jne 0x14001041f
mov edx, 0x1f4
xor ecx, ecx
lea r9d, [rcx + 0x40]
mov r8d, 0x1000
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov r8, rax
test rax, rax
jne 0x140010361
mov r8, r13
jmp 0x1400103fe
mov rax, r15
mov rcx, r8
mov edx, 3
nop dword [rax]
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rcx + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rcx + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rcx + 0x50], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rcx + 0x60], xmm0
lea rcx, [rcx + 0x80]
movups xmm1, xmmword [rax + 0x70]
movups xmmword [rcx - 0x10], xmm1
lea rax, [rax + 0x80]
sub rdx, 1
jne 0x140010370
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rcx + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rcx + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rcx + 0x50], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rcx + 0x60], xmm0
mov eax, dword [rax + 0x70]
mov dword [rcx + 0x70], eax
mov rax, qword [0x14002cdf0]
mov qword [rsi + rax*8 + 0x2d780], r15
mov qword [rsi + rax*8 + 0x2c150], r8
inc rax
mov qword [0x14002cdf0], rax
lea rdx, [rsp + 0x618]
mov rcx, qword [rbx]
call r8
nop
lea rcx, [rsp + 0x1370]
call fcn.140002990
nop
mov byte [rsp + 0x4d], 0
lea rcx, [rsp + 0x4d]
call fcn.1400134c0
mov rdi, rax
mov byte [rsp + 0x4e], 0
lea rcx, [rsp + 0x4e]
call fcn.1400134c0
mov rbx, rax
lea r8, [0x14002f740]
lea rdx, [rsp + 0x1278]
lea rcx, [rsp + 0xc60]
call fcn.1400157a0
nop
mov r8, rbx
mov rdx, rax
lea rcx, [rsp + 0xc40]
call fcn.140015740
nop
lea r8, [0x14002f720]
mov rdx, rax
lea rcx, [rsp + 0xc20]
call fcn.140015810
nop
mov r8, rdi
mov rdx, rax
lea rcx, [rsp + 0x12f0]
call fcn.140015740
nop
lea rcx, [rsp + 0xc20]
call fcn.140014b90
nop
lea rcx, [rsp + 0xc40]
call fcn.140014b90
nop
lea rcx, [rsp + 0xc60]
call fcn.140014b90
lea rcx, [rsp + 0xdc8]
call sub.MSVCP140.dll_unsigned_int___cdecl_std::_Random_device_void_
mov edx, eax
lea rcx, [rsp + 0xc890]
call fcn.1400145d0
mov edx, 0xffffff9c
mov r8d, 0x64
lea rcx, [rsp + 0xdb0]
call fcn.140014710
movsd xmm7, qword [0x1400241f8]
movaps xmm2, xmm7
movsd xmm8, qword [0x140024210]
movaps xmm1, xmm8
lea rcx, [rsp + 0xfd8]
call fcn.1400145c0
mov dword [rsp + 0x30], r13d
movsd qword [rsp + 0x38], xmm11
lea rcx, [rsp + 0x1268]
call fcn.140001aa0
mov dword [rsp + 0x9c], 0x64
lea rdx, [rsp + 0x9c]
lea rcx, [rsp + 0x980]
call fcn.140015940
mov r8, rax
lea rdx, [rsp + 0x1268]
lea rcx, [rsp + 0x1270]
call fcn.140015950
mov edx, 0x18
lea rcx, [rsp + 0xef8]
call fcn.140002950
lea rcx, [rsp + 0xef8]
call fcn.140014490
nop
lea rcx, [rsp + 0x628]
call fcn.140015970
nop
mov rdx, rax
lea rcx, [rsp + 0x130]
call fcn.1400159a0
nop
lea rdx, [rsp + 0x130]
lea rcx, [rsp + 0xef8]
call fcn.1400144f0
nop
lea rcx, [rsp + 0x130]
call fcn.1400144b0
nop
lea rcx, [rsp + 0x628]
call fcn.1400144b0
lea rcx, [rsp + 0x630]
call fcn.1400159c0
nop
mov rdx, rax
lea rcx, [rsp + 0x2e8]
call fcn.1400159a0
nop
lea rdx, [rsp + 0x2e8]
lea rcx, [rsp + 0xef8]
call fcn.1400144f0
nop
lea rcx, [rsp + 0x2e8]
call fcn.1400144b0
nop
lea rcx, [rsp + 0x630]
call fcn.1400144b0
lea rcx, [rsp + 0x638]
call fcn.1400159f0
nop
mov rdx, rax
lea rcx, [rsp + 0x2f0]
call fcn.1400159a0
nop
lea rdx, [rsp + 0x2f0]
lea rcx, [rsp + 0xef8]
call fcn.1400144f0
nop
lea rcx, [rsp + 0x2f0]
call fcn.1400144b0
nop
lea rcx, [rsp + 0x638]
call fcn.1400144b0
lea rcx, [rsp + 0x640]
call fcn.140015a20
nop
mov rdx, rax
lea rcx, [rsp + 0x2f8]
call fcn.1400159a0
nop
lea rdx, [rsp + 0x2f8]
lea rcx, [rsp + 0xef8]
call fcn.1400144f0
nop
lea rcx, [rsp + 0x2f8]
call fcn.1400144b0
nop
lea rcx, [rsp + 0x640]
call fcn.1400144b0
lea rcx, [rsp + 0x648]
call fcn.140015a50
nop
mov rdx, rax
lea rcx, [rsp + 0x300]
call fcn.1400159a0
nop
lea rdx, [rsp + 0x300]
lea rcx, [rsp + 0xef8]
call fcn.1400144f0
nop
lea rcx, [rsp + 0x300]
call fcn.1400144b0
nop
lea rcx, [rsp + 0x648]
call fcn.1400144b0
lea rcx, [rsp + 0x650]
call fcn.140015a80
nop
mov rdx, rax
lea rcx, [rsp + 0x308]
call fcn.1400159a0
nop
lea rdx, [rsp + 0x308]
lea rcx, [rsp + 0xef8]
call fcn.1400144f0
nop
lea rcx, [rsp + 0x308]
call fcn.1400144b0
nop
lea rcx, [rsp + 0x650]
call fcn.1400144b0
lea rcx, [rsp + 0x988]
call fcn.140001aa0
mov rcx, rax
lea rdx, [rsp + 0x1270]
call fcn.1400028f0
xor edx, edx
movzx ecx, al
call fcn.140001a90
test al, al
je 0x140010b74
mov esi, r13d
cmp esi, 0x186a0
jge 0x140010790
lea rdx, [rsp + 0xc890]
lea rcx, [rsp + 0xdb0]
call fcn.140015870
lea rdx, [rsp + 0xc890]
lea rcx, [rsp + 0xdb0]
call fcn.140015870
movsxd rbx, eax
lea rcx, [rsp + 0xef8]
call fcn.1400144e0
mov rcx, rax
mov rax, rbx
xor edx, edx
div rcx
movsxd rdx, edx
lea rcx, [rsp + 0xef8]
call fcn.1400144d0
mov rcx, rax
call fcn.140014380
mov rbx, rax
mov rcx, qword [rax]
mov rdi, qword [rcx + 8]
lea rdx, [rsp + 0xc890]
lea rcx, [rsp + 0xdb0]
call fcn.140015870
mov r8d, eax
mov edx, dword [rsp + 0x30]
mov rcx, rbx
call rdi
mov dword [rsp + 0x30], eax
lea rdx, [rsp + 0xc890]
lea rcx, [rsp + 0xfd8]
call fcn.140015ab0
movaps xmm6, xmm0
lea rdx, [rsp + 0xc890]
lea rcx, [rsp + 0xfd8]
call fcn.140015ab0
movaps xmm1, xmm6
call fcn.1400027a0
addsd xmm0, qword [rsp + 0x38]
movsd qword [rsp + 0x38], xmm0
lea rdx, [rsp + 0xc890]
lea rcx, [rsp + 0xfd8]
call fcn.140015ab0
movsd xmm6, qword [rsp + 0x38]
mov edx, 3
call fcn.140015b30
subsd xmm6, xmm0
movsd qword [rsp + 0x38], xmm6
lea rdx, [rsp + 0xc890]
lea rcx, [rsp + 0xfd8]
call fcn.140015ab0
call sub.api_ms_win_crt_math_l1_1_0.dll_tan
movsd xmm1, qword [rsp + 0x38]
mulsd xmm0, xmm1
movsd qword [rsp + 0x38], xmm0
lea rdx, str.random
lea rcx, [rsp + 0x1400]
call fcn.140014c30
nop
lea rdx, [rsp + 0xc890]
lea rcx, [rsp + 0x1400]
call fcn.140002710
mov edx, 0x18
lea rcx, [rsp + 0x1108]
call fcn.140002950
lea rcx, [rsp + 0x5d]
call fcn.140014700
mov r8, rax
mov edx, 0x64
lea rcx, [rsp + 0x1108]
call fcn.1400146a0
nop
lea r8, [rsp + 0xc890]
lea rdx, [rsp + 0xdb0]
lea rcx, [rsp + 0xb70]
call fcn.140002910
movups xmm6, xmmword [rax]
lea rdx, [rsp + 0x990]
lea rcx, [rsp + 0x1108]
call fcn.140014620
mov rbx, qword [rax]
lea rdx, [rsp + 0x998]
lea rcx, [rsp + 0x1108]
call fcn.140014630
movaps xmmword [rsp + 0x820], xmm6
lea r8, [rsp + 0x820]
mov rdx, rbx
mov rcx, qword [rax]
call fcn.140015b40
lea rdx, [rsp + 0xc890]
lea rcx, [rsp + 0x1108]
call fcn.140002820
lea rdx, [rsp + 0x9a0]
lea rcx, [rsp + 0x1108]
call fcn.140014620
mov rbx, qword [rax]
lea rdx, [rsp + 0x9a8]
lea rcx, [rsp + 0x1108]
call fcn.140014630
xor r8d, r8d
mov rdx, rbx
mov rcx, qword [rax]
call fcn.140015ba0
mov ecx, dword [rsp + 0x30]
add ecx, eax
mov dword [rsp + 0x30], ecx
mov byte [rsp + 0xdaa], 0
lea rdx, [rsp + 0xc890]
lea rcx, [rsp + 0xdb0]
call fcn.140015870
mov ebx, eax
lea rdx, [rsp + 0xc890]
lea rcx, [rsp + 0xdb0]
call fcn.140015870
mov r8d, ebx
mov edx, eax
lea rcx, [rsp + 0xdaa]
call fcn.140002920
mov ecx, dword [rsp + 0x30]
add ecx, eax
mov dword [rsp + 0x30], ecx
mov eax, dword [rsp + 0x30]
and eax, 0x80000001
jge 0x140010a70
dec eax
or eax, 0xfffffffe
inc eax
lea rdx, [rsp + 0xc890]
lea rcx, [rsp + 0xdb0]
test eax, eax
jne 0x140010a91
call fcn.140015870
mov ecx, dword [rsp + 0x30]
add ecx, eax
jmp 0x140010a9c
call fcn.140015870
mov ecx, dword [rsp + 0x30]
sub ecx, eax
mov dword [rsp + 0x30], ecx
mov edi, r13d
cmp edi, 5
jge 0x140010b52
mov ebx, r13d
nop
cmp ebx, 5
jge 0x140010b4b
lea rdx, [rsp + 0xc890]
lea rcx, [rsp + 0xdb0]
call fcn.140015870
mov ecx, dword [rsp + 0x30]
add ecx, eax
mov dword [rsp + 0x30], ecx
lea rdx, [rsp + 0xc890]
lea rcx, [rsp + 0xfd8]
call fcn.140015ab0
addsd xmm0, qword [rsp + 0x38]
movsd qword [rsp + 0x38], xmm0
lea rdx, [rsp + 0xc890]
test bl, 1
jne 0x140010b22
lea rcx, [rsp + 0xdb0]
call fcn.140015870
mov ecx, dword [rsp + 0x30]
imul ecx, eax
mov dword [rsp + 0x30], ecx
inc ebx
jmp 0x140010ab0
lea rcx, [rsp + 0xfd8]
call fcn.140015ab0
movsd xmm1, qword [rsp + 0x38]
addsd xmm0, xmm10
divsd xmm1, xmm0
movsd qword [rsp + 0x38], xmm1
inc ebx
jmp 0x140010ab0
inc edi
jmp 0x140010aa3
lea rcx, [rsp + 0x1108]
call fcn.140014640
nop
lea rcx, [rsp + 0x1400]
call fcn.140014b90
inc esi
jmp 0x1400107c2
mov eax, dword [rsp + 0x30]
lea rcx, [rsp + 0xef8]
call fcn.140014520
mov byte [rsp + 0x50], 0
lea rcx, [rsp + 0x50]
call fcn.1400134c0
mov rdi, rax
mov byte [rsp + 0x51], 0
lea rcx, [rsp + 0x51]
call fcn.1400134c0
mov rbx, rax
mov byte [rsp + 0x52], 0
lea rcx, [rsp + 0x52]
call fcn.1400134c0
mov r8, rax
lea rdx, [0x14002f700]
lea rcx, [rsp + 0xce0]
call fcn.1400156d0
nop
lea r8, [0x14002f720]
mov rdx, rax
lea rcx, [rsp + 0xcc0]
call fcn.140015810
nop
mov r8, rbx
mov rdx, rax
lea rcx, [rsp + 0xca0]
call fcn.140015740
nop
lea r8, [rsp + 0x1330]
mov rdx, rax
lea rcx, [rsp + 0xc80]
call fcn.140015810
nop
mov r8, rdi
mov rdx, rax
lea rcx, [rsp + 0xb50]
call fcn.140015740
nop
lea r8, [0x14002f740]
mov rdx, rax
lea rcx, [rsp + 0x14a0]
call fcn.140015810
nop
lea rcx, [rsp + 0xb50]
call fcn.140014b90
nop
lea rcx, [rsp + 0xc80]
call fcn.140014b90
nop
lea rcx, [rsp + 0xca0]
call fcn.140014b90
nop
lea rcx, [rsp + 0xcc0]
call fcn.140014b90
nop
lea rcx, [rsp + 0xce0]
call fcn.140014b90
lea rcx, [rsp + 0xdc9]
call sub.MSVCP140.dll_unsigned_int___cdecl_std::_Random_device_void_
mov edx, eax
lea rcx, [rsp + 0xdc20]
call fcn.1400145d0
mov edx, 0xffffff9c
mov r8d, 0x64
lea rcx, [rsp + 0xdc0]
call fcn.140014710
movaps xmm2, xmm7
movaps xmm1, xmm8
lea rcx, [rsp + 0xf28]
call fcn.1400145c0
mov dword [rsp + 0x30], r13d
movsd qword [rsp + 0x38], xmm11
lea rcx, [rsp + 0x1298]
call fcn.140001aa0
mov dword [rsp + 0xa0], 0x64
lea rdx, [rsp + 0xa0]
lea rcx, [rsp + 0x9b0]
call fcn.140015940
mov r8, rax
lea rdx, [rsp + 0x1298]
lea rcx, [rsp + 0x12b0]
call fcn.140015950
mov edx, 0x18
lea rcx, [rsp + 0xee0]
call fcn.140002950
lea rcx, [rsp + 0xee0]
call fcn.140014490
nop
lea rcx, [rsp + 0x668]
call fcn.140015970
nop
mov rdx, rax
lea rcx, [rsp + 0x310]
call fcn.1400159a0
nop
lea rdx, [rsp + 0x310]
lea rcx, [rsp + 0xee0]
call fcn.1400144f0
nop
lea rcx, [rsp + 0x310]
call fcn.1400144b0
nop
lea rcx, [rsp + 0x668]
call fcn.1400144b0
lea rcx, [rsp + 0x670]
call fcn.1400159c0
nop
mov rdx, rax
lea rcx, [rsp + 0x318]
call fcn.1400159a0
nop
lea rdx, [rsp + 0x318]
lea rcx, [rsp + 0xee0]
call fcn.1400144f0
nop
lea rcx, [rsp + 0x318]
call fcn.1400144b0
nop
lea rcx, [rsp + 0x670]
call fcn.1400144b0
lea rcx, [rsp + 0x678]
call fcn.1400159f0
nop
mov rdx, rax
lea rcx, [rsp + 0x320]
call fcn.1400159a0
nop
lea rdx, [rsp + 0x320]
lea rcx, [rsp + 0xee0]
call fcn.1400144f0
nop
lea rcx, [rsp + 0x320]
call fcn.1400144b0
nop
lea rcx, [rsp + 0x678]
call fcn.1400144b0
lea rcx, [rsp + 0x680]
call fcn.140015a20
nop
mov rdx, rax
lea rcx, [rsp + 0x328]
call fcn.1400159a0
nop
lea rdx, [rsp + 0x328]
lea rcx, [rsp + 0xee0]
call fcn.1400144f0
nop
lea rcx, [rsp + 0x328]
call fcn.1400144b0
nop
lea rcx, [rsp + 0x680]
call fcn.1400144b0
lea rcx, [rsp + 0x688]
call fcn.140015a50
nop
mov rdx, rax
lea rcx, [rsp + 0x330]
call fcn.1400159a0
nop
lea rdx, [rsp + 0x330]
lea rcx, [rsp + 0xee0]
call fcn.1400144f0
nop
lea rcx, [rsp + 0x330]
call fcn.1400144b0
nop
lea rcx, [rsp + 0x688]
call fcn.1400144b0
lea rcx, [rsp + 0x690]
call fcn.140015a80
nop
mov rdx, rax
lea rcx, [rsp + 0x338]
call fcn.1400159a0
nop
lea rdx, [rsp + 0x338]
lea rcx, [rsp + 0xee0]
call fcn.1400144f0
nop
lea rcx, [rsp + 0x338]
call fcn.1400144b0
nop
lea rcx, [rsp + 0x690]
call fcn.1400144b0
nop
lea rcx, [rsp + 0x9b8]
call fcn.140001aa0
mov rcx, rax
lea rdx, [rsp + 0x12b0]
call fcn.1400028f0
xor edx, edx
movzx ecx, al
call fcn.140001a90
test al, al
je 0x140011304
mov esi, r13d
cmp esi, 0x186a0
jge 0x140010f20
lea rdx, [rsp + 0xdc20]
lea rcx, [rsp + 0xdc0]
call fcn.140015870
lea rdx, [rsp + 0xdc20]
lea rcx, [rsp + 0xdc0]
call fcn.140015870
movsxd rbx, eax
lea rcx, [rsp + 0xee0]
call fcn.1400144e0
mov rcx, rax
mov rax, rbx
xor edx, edx
div rcx
movsxd rdx, edx
lea rcx, [rsp + 0xee0]
call fcn.1400144d0
mov rcx, rax
call fcn.140014380
mov rbx, rax
mov rcx, qword [rax]
mov rdi, qword [rcx + 8]
lea rdx, [rsp + 0xdc20]
lea rcx, [rsp + 0xdc0]
call fcn.140015870
mov r8d, eax
mov edx, dword [rsp + 0x30]
mov rcx, rbx
call rdi
mov dword [rsp + 0x30], eax
lea rdx, [rsp + 0xdc20]
lea rcx, [rsp + 0xf28]
call fcn.140015ab0
movaps xmm6, xmm0
lea rdx, [rsp + 0xdc20]
lea rcx, [rsp + 0xf28]
call fcn.140015ab0
movaps xmm1, xmm6
call fcn.1400027a0
addsd xmm0, qword [rsp + 0x38]
movsd qword [rsp + 0x38], xmm0
lea rdx, [rsp + 0xdc20]
lea rcx, [rsp + 0xf28]
call fcn.140015ab0
movsd xmm6, qword [rsp + 0x38]
mov edx, 3
call fcn.140015b30
subsd xmm6, xmm0
movsd qword [rsp + 0x38], xmm6
lea rdx, [rsp + 0xdc20]
lea rcx, [rsp + 0xf28]
call fcn.140015ab0
call sub.api_ms_win_crt_math_l1_1_0.dll_tan
movsd xmm1, qword [rsp + 0x38]
mulsd xmm0, xmm1
movsd qword [rsp + 0x38], xmm0
lea rdx, str.random
lea rcx, [rsp + 0x1420]
call fcn.140014c30
nop
lea rdx, [rsp + 0xdc20]
lea rcx, [rsp + 0x1420]
call fcn.140002710
mov edx, 0x18
lea rcx, [rsp + 0x10c0]
call fcn.140002950
lea rcx, [rsp + 0x5e]
call fcn.140014700
mov r8, rax
mov edx, 0x64
lea rcx, [rsp + 0x10c0]
call fcn.1400146a0
nop
lea r8, [rsp + 0xdc20]
lea rdx, [rsp + 0xdc0]
lea rcx, [rsp + 0xb80]
call fcn.140002910
movups xmm6, xmmword [rax]
lea rdx, [rsp + 0x9c0]
lea rcx, [rsp + 0x10c0]
call fcn.140014620
mov rbx, qword [rax]
lea rdx, [rsp + 0x9c8]
lea rcx, [rsp + 0x10c0]
call fcn.140014630
movaps xmmword [rsp + 0x810], xmm6
lea r8, [rsp + 0x810]
mov rdx, rbx
mov rcx, qword [rax]
call fcn.140015b40
lea rdx, [rsp + 0xdc20]
lea rcx, [rsp + 0x10c0]
call fcn.140002820
lea rdx, [rsp + 0x9d0]
lea rcx, [rsp + 0x10c0]
call fcn.140014620
mov rbx, qword [rax]
lea rdx, [rsp + 0x9d8]
lea rcx, [rsp + 0x10c0]
call fcn.140014630
xor r8d, r8d
mov rdx, rbx
mov rcx, qword [rax]
call fcn.140015ba0
mov ecx, dword [rsp + 0x30]
add ecx, eax
mov dword [rsp + 0x30], ecx
mov byte [rsp + 0xda9], 0
lea rdx, [rsp + 0xdc20]
lea rcx, [rsp + 0xdc0]
call fcn.140015870
mov ebx, eax
lea rdx, [rsp + 0xdc20]
lea rcx, [rsp + 0xdc0]
call fcn.140015870
mov r8d, ebx
mov edx, eax
lea rcx, [rsp + 0xda9]
call fcn.140002920
mov ecx, dword [rsp + 0x30]
add ecx, eax
mov dword [rsp + 0x30], ecx
mov eax, dword [rsp + 0x30]
and eax, 0x80000001
jge 0x140011200
dec eax
or eax, 0xfffffffe
inc eax
lea rdx, [rsp + 0xdc20]
lea rcx, [rsp + 0xdc0]
test eax, eax
jne 0x140011221
call fcn.140015870
mov ecx, dword [rsp + 0x30]
add ecx, eax
jmp 0x14001122c
call fcn.140015870
mov ecx, dword [rsp + 0x30]
sub ecx, eax
mov dword [rsp + 0x30], ecx
mov edi, r13d
cmp edi, 5
jge 0x1400112e2
mov ebx, r13d
nop
cmp ebx, 5
jge 0x1400112db
lea rdx, [rsp + 0xdc20]
lea rcx, [rsp + 0xdc0]
call fcn.140015870
mov ecx, dword [rsp + 0x30]
add ecx, eax
mov dword [rsp + 0x30], ecx
lea rdx, [rsp + 0xdc20]
lea rcx, [rsp + 0xf28]
call fcn.140015ab0
addsd xmm0, qword [rsp + 0x38]
movsd qword [rsp + 0x38], xmm0
lea rdx, [rsp + 0xdc20]
test bl, 1
jne 0x1400112b2
lea rcx, [rsp + 0xdc0]
call fcn.140015870
mov ecx, dword [rsp + 0x30]
imul ecx, eax
mov dword [rsp + 0x30], ecx
inc ebx
jmp 0x140011240
lea rcx, [rsp + 0xf28]
call fcn.140015ab0
movsd xmm1, qword [rsp + 0x38]
addsd xmm0, xmm10
divsd xmm1, xmm0
movsd qword [rsp + 0x38], xmm1
inc ebx
jmp 0x140011240
inc edi
jmp 0x140011233
lea rcx, [rsp + 0x10c0]
call fcn.140014640
nop
lea rcx, [rsp + 0x1420]
call fcn.140014b90
inc esi
jmp 0x140010f52
mov eax, dword [rsp + 0x30]
lea rcx, [rsp + 0xee0]
call fcn.140014520
xor r8d, r8d
lea rdx, [rsp + 0x12f0]
lea rcx, [rsp + 0x9f8]
call fcn.140016330
nop
lea rcx, [rsp + 0x9f8]
call fcn.140003680
movzx ebx, al
lea rcx, [rsp + 0x9f8]
call fcn.140002af0
test bl, bl
je 0x140011365
lea rcx, [rsp + 0x12f0]
call fcn.1400149d0
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll_remove]
mov rdx, qword [sym.imp.KERNEL32.dll_Sleep]
lea rcx, [rsp + 0x9e0]
call fcn.140014370
mov rbx, rax
mov dword [rsp + 0xa4], 0x12c
mov edx, 0x18
lea rcx, [rsp + 0x1388]
call fcn.140002950
lea rdx, [rsp + 0x103f8]
lea rcx, [rsp + 0x1388]
call fcn.140002960
nop
mov ecx, r13d
mov rax, qword [0x14002d120]
lea rsi, [0x140000000]
lea r15, [0x140016070]
test rax, rax
je 0x1400113f9
mov rdx, r13
nop
cmp rax, r15
je 0x1400113e8
inc ecx
mov edx, ecx
mov rax, qword [rsi + rcx*8 + 0x2d120]
test rax, rax
jne 0x1400113d0
jmp 0x1400113f9
mov r8, qword [rsi + rdx*8 + 0x2e430]
test r8, r8
jne 0x1400114df
mov edx, 0x1f4
xor ecx, ecx
lea r9d, [rcx + 0x40]
mov r8d, 0x1000
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov r8, rax
test rax, rax
jne 0x140011420
mov r8, r13
jmp 0x1400114be
mov rax, r15
mov rcx, r8
mov edx, 3
nop dword [rax + rax]
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rcx + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rcx + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rcx + 0x50], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rcx + 0x60], xmm0
lea rcx, [rcx + 0x80]
movups xmm1, xmmword [rax + 0x70]
movups xmmword [rcx - 0x10], xmm1
lea rax, [rax + 0x80]
sub rdx, 1
jne 0x140011430
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rcx + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rcx + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rcx + 0x50], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rcx + 0x60], xmm0
mov eax, dword [rax + 0x70]
mov dword [rcx + 0x70], eax
mov rax, qword [0x14002d770]
mov qword [rsi + rax*8 + 0x2d120], r15
mov qword [rsi + rax*8 + 0x2e430], r8
inc rax
mov qword [0x14002d770], rax
lea rdx, [rsp + 0xa4]
mov rcx, qword [rbx]
call r8
nop
lea rcx, [rsp + 0x1388]
call fcn.140002990
lea rcx, [rsp + 0xdca]
call sub.MSVCP140.dll_unsigned_int___cdecl_std::_Random_device_void_
mov edx, eax
lea rcx, [rsp + 0xefb0]
call fcn.1400145d0
mov edx, 0xffffff9c
mov r8d, 0x64
lea rcx, [rsp + 0xdb8]
call fcn.140014710
movaps xmm2, xmm7
movaps xmm1, xmm8
lea rcx, [rsp + 0xf88]
call fcn.1400145c0
mov dword [rsp + 0x30], r13d
movsd qword [rsp + 0x38], xmm11
lea rcx, [rsp + 0x12e8]
call fcn.140001aa0
mov dword [rsp + 0xa8], 0x64
lea rdx, [rsp + 0xa8]
lea rcx, [rsp + 0x9e8]
call fcn.140015940
mov r8, rax
lea rdx, [rsp + 0x12e8]
lea rcx, [rsp + 0x12b8]
call fcn.140015950
mov edx, 0x18
lea rcx, [rsp + 0xf10]
call fcn.140002950
lea rcx, [rsp + 0xf10]
call fcn.140014490
nop
lea rcx, [rsp + 0x340]
call fcn.140015970
nop
mov rdx, rax
lea rcx, [rsp + 0x148]
call fcn.1400159a0
nop
lea rdx, [rsp + 0x148]
lea rcx, [rsp + 0xf10]
call fcn.1400144f0
nop
lea rcx, [rsp + 0x148]
call fcn.1400144b0
nop
lea rcx, [rsp + 0x340]
call fcn.1400144b0
lea rcx, [rsp + 0x348]
call fcn.1400159c0
nop
mov rdx, rax
lea rcx, [rsp + 0x150]
call fcn.1400159a0
nop
lea rdx, [rsp + 0x150]
lea rcx, [rsp + 0xf10]
call fcn.1400144f0
nop
lea rcx, [rsp + 0x150]
call fcn.1400144b0
nop
lea rcx, [rsp + 0x348]
call fcn.1400144b0
lea rcx, [rsp + 0x350]
call fcn.1400159f0
nop
mov rdx, rax
lea rcx, [rsp + 0x158]
call fcn.1400159a0
nop
lea rdx, [rsp + 0x158]
lea rcx, [rsp + 0xf10]
call fcn.1400144f0
nop
lea rcx, [rsp + 0x158]
call fcn.1400144b0
nop
lea rcx, [rsp + 0x350]
call fcn.1400144b0
lea rcx, [rsp + 0x358]
call fcn.140015a20
nop
mov rdx, rax
lea rcx, [rsp + 0x160]
call fcn.1400159a0
nop
lea rdx, [rsp + 0x160]
lea rcx, [rsp + 0xf10]
call fcn.1400144f0
nop
lea rcx, [rsp + 0x160]
call fcn.1400144b0
nop
lea rcx, [rsp + 0x358]
call fcn.1400144b0
lea rcx, [rsp + 0x360]
call fcn.140015a50
nop
mov rdx, rax
lea rcx, [rsp + 0x168]
call fcn.1400159a0
nop
lea rdx, [rsp + 0x168]
lea rcx, [rsp + 0xf10]
call fcn.1400144f0
nop
lea rcx, [rsp + 0x168]
call fcn.1400144b0
nop
lea rcx, [rsp + 0x360]
call fcn.1400144b0
lea rcx, [rsp + 0x368]
call fcn.140015a80
nop
mov rdx, rax
lea rcx, [rsp + 0x170]
call fcn.1400159a0
nop
lea rdx, [rsp + 0x170]
lea rcx, [rsp + 0xf10]
call fcn.1400144f0
nop
lea rcx, [rsp + 0x170]
call fcn.1400144b0
nop
lea rcx, [rsp + 0x368]
call fcn.1400144b0
nop dword [rax]
nop dword [rax + rax]
lea rcx, [rsp + 0x9f0]
call fcn.140001aa0
mov rcx, rax
lea rdx, [rsp + 0x12b8]
call fcn.1400028f0
xor edx, edx
movzx ecx, al
call fcn.140001a90
test al, al
je 0x140011b84
mov esi, r13d
cmp esi, 0x186a0
jge 0x1400117a0
lea rdx, [rsp + 0xefb0]
lea rcx, [rsp + 0xdb8]
call fcn.140015870
lea rdx, [rsp + 0xefb0]
lea rcx, [rsp + 0xdb8]
call fcn.140015870
movsxd rbx, eax
lea rcx, [rsp + 0xf10]
call fcn.1400144e0
mov rcx, rax
mov rax, rbx
xor edx, edx
div rcx
movsxd rdx, edx
lea rcx, [rsp + 0xf10]
call fcn.1400144d0
mov rcx, rax
call fcn.140014380
mov rbx, rax
mov rcx, qword [rax]
mov rdi, qword [rcx + 8]
lea rdx, [rsp + 0xefb0]
lea rcx, [rsp + 0xdb8]
call fcn.140015870
mov r8d, eax
mov edx, dword [rsp + 0x30]
mov rcx, rbx
call rdi
mov dword [rsp + 0x30], eax
lea rdx, [rsp + 0xefb0]
lea rcx, [rsp + 0xf88]
call fcn.140015ab0
movaps xmm6, xmm0
lea rdx, [rsp + 0xefb0]
lea rcx, [rsp + 0xf88]
call fcn.140015ab0
movaps xmm1, xmm6
call fcn.1400027a0
addsd xmm0, qword [rsp + 0x38]
movsd qword [rsp + 0x38], xmm0
lea rdx, [rsp + 0xefb0]
lea rcx, [rsp + 0xf88]
call fcn.140015ab0
movsd xmm6, qword [rsp + 0x38]
mov edx, 3
call fcn.140015b30
subsd xmm6, xmm0
movsd qword [rsp + 0x38], xmm6
lea rdx, [rsp + 0xefb0]
lea rcx, [rsp + 0xf88]
call fcn.140015ab0
call sub.api_ms_win_crt_math_l1_1_0.dll_tan
movsd xmm1, qword [rsp + 0x38]
mulsd xmm0, xmm1
movsd qword [rsp + 0x38], xmm0
lea rdx, str.random
lea rcx, [rsp + 0x1440]
call fcn.140014c30
nop
lea rdx, [rsp + 0xefb0]
lea rcx, [rsp + 0x1440]
call fcn.140002710
mov edx, 0x18
lea rcx, [rsp + 0x10d8]
call fcn.140002950
lea rcx, [rsp + 0x5f]
call fcn.140014700
mov r8, rax
mov edx, 0x64
lea rcx, [rsp + 0x10d8]
call fcn.1400146a0
nop
lea r8, [rsp + 0xefb0]
lea rdx, [rsp + 0xdb8]
lea rcx, [rsp + 0xb90]
call fcn.140002910
movups xmm6, xmmword [rax]
lea rdx, [rsp + 0x7a0]
lea rcx, [rsp + 0x10d8]
call fcn.140014620
mov rbx, qword [rax]
lea rdx, [rsp + 0x7b0]
lea rcx, [rsp + 0x10d8]
call fcn.140014630
movaps xmmword [rsp + 0x800], xmm6
lea r8, [rsp + 0x800]
mov rdx, rbx
mov rcx, qword [rax]
call fcn.140015b40
lea rdx, [rsp + 0xefb0]
lea rcx, [rsp + 0x10d8]
call fcn.140002820
lea rdx, [rsp + 0x7f8]
lea rcx, [rsp + 0x10d8]
call fcn.140014620
mov rbx, qword [rax]
lea rdx, [rsp + 0x830]
lea rcx, [rsp + 0x10d8]
call fcn.140014630
xor r8d, r8d
mov rdx, rbx
mov rcx, qword [rax]
call fcn.140015ba0
mov ecx, dword [rsp + 0x30]
add ecx, eax
mov dword [rsp + 0x30], ecx
mov byte [rsp + 0xda8], 0
lea rdx, [rsp + 0xefb0]
lea rcx, [rsp + 0xdb8]
call fcn.140015870
mov ebx, eax
lea rdx, [rsp + 0xefb0]
lea rcx, [rsp + 0xdb8]
call fcn.140015870
mov r8d, ebx
mov edx, eax
lea rcx, [rsp + 0xda8]
call fcn.140002920
mov ecx, dword [rsp + 0x30]
add ecx, eax
mov dword [rsp + 0x30], ecx
mov eax, dword [rsp + 0x30]
and eax, 0x80000001
jge 0x140011a80
dec eax
or eax, 0xfffffffe
inc eax
lea rdx, [rsp + 0xefb0]
lea rcx, [rsp + 0xdb8]
test eax, eax
jne 0x140011aa1
call fcn.140015870
mov ecx, dword [rsp + 0x30]
add ecx, eax
jmp 0x140011aac
call fcn.140015870
mov ecx, dword [rsp + 0x30]
sub ecx, eax
mov dword [rsp + 0x30], ecx
mov edi, r13d
cmp edi, 5
jge 0x140011b62
mov ebx, r13d
nop
cmp ebx, 5
jge 0x140011b5b
lea rdx, [rsp + 0xefb0]
lea rcx, [rsp + 0xdb8]
call fcn.140015870
mov ecx, dword [rsp + 0x30]
add ecx, eax
mov dword [rsp + 0x30], ecx
lea rdx, [rsp + 0xefb0]
lea rcx, [rsp + 0xf88]
call fcn.140015ab0
addsd xmm0, qword [rsp + 0x38]
movsd qword [rsp + 0x38], xmm0
lea rdx, [rsp + 0xefb0]
test bl, 1
jne 0x140011b32
lea rcx, [rsp + 0xdb8]
call fcn.140015870
mov ecx, dword [rsp + 0x30]
imul ecx, eax
mov dword [rsp + 0x30], ecx
inc ebx
jmp 0x140011ac0
lea rcx, [rsp + 0xf88]
call fcn.140015ab0
movsd xmm1, qword [rsp + 0x38]
addsd xmm0, xmm10
divsd xmm1, xmm0
movsd qword [rsp + 0x38], xmm1
inc ebx
jmp 0x140011ac0
inc edi
jmp 0x140011ab3
lea rcx, [rsp + 0x10d8]
call fcn.140014640
nop
lea rcx, [rsp + 0x1440]
call fcn.140014b90
inc esi
jmp 0x1400117d2
mov eax, dword [rsp + 0x30]
lea rcx, [rsp + 0xf10]
call fcn.140014520
mov edx, 0x18
lea rcx, [rsp + 0x1138]
call fcn.140002950
lea rcx, [rsp + 0x1138]
call fcn.140014490
nop
mov byte [rsp + 0x53], 0
lea rcx, [rsp + 0x53]
call fcn.1400134d0
mov rbx, rax
mov byte [rsp + 0x54], 0
lea rcx, [rsp + 0x54]
call fcn.140013480
lea r8, [rsp + 0x1330]
mov rdx, rax
lea rcx, [rsp + 0xd40]
call fcn.1400160a0
nop
mov r8, rbx
mov rdx, rax
lea rcx, [rsp + 0xd00]
call fcn.140015740
mov rdx, rax
lea rcx, [rsp + 0xd20]
call fcn.140003c20
nop
mov rdx, rax
lea rcx, [rsp + 0xab8]
call fcn.140006ff0
mov rdx, rax
lea rcx, [rsp + 0x1138]
call fcn.1400143f0
lea rcx, [rsp + 0xab8]
call fcn.140014390
nop
lea rcx, [rsp + 0xd20]
call fcn.140014b90
nop
lea rcx, [rsp + 0xd40]
call fcn.140014b90
xor edx, edx
mov r8d, 0x108
lea rcx, [rsp + 0x1650]
call sub.VCRUNTIME140.dll_memset
mov r12d, 1
mov dword [rsp + 0x20], r12d
lea r9d, [r12 + 0x3f]
lea r8d, [r12 + 0x1f]
lea rdx, [rsp + 0x12f0]
lea rcx, [rsp + 0x1650]
call fcn.1400142d0
nop
call qword [sym.imp.MSVCP140.dll_unsigned_int___cdecl_std::_Random_device_void_]
mov dword [rsp + 0xb4f4], 0xffffffff
mov r8d, 0x6c078965
mov edx, eax
lea rcx, [rsp + 0xa170]
call fcn.140015560
mov dword [rsp + 0xd98], 0xffffff9c
mov dword [rsp + 0xd9c], 0x64
movaps xmm0, xmmword [0x140024280]
movups xmmword [rsp + 0xf78], xmm0
mov dword [rsp + 0x30], r13d
movsd qword [rsp + 0x38], xmm11
lea rcx, [rsp + 0x12a8]
call fcn.140001aa0
mov qword [rsp + 0x370], 0x64
mov rax, qword [rsp + 0x12a8]
mov qword [rsp + 0x378], rax
lea r8, [rsp + 0x370]
lea rdx, [rsp + 0x378]
lea rcx, [rsp + 0x838]
call fcn.140015950
mov rdi, qword [rax]
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rsp + 0xe80], xmm0
mov qword [rsp + 0xe90], rax
lea rcx, [rsp + 0xe80]
call fcn.140014490
nop
lea rcx, [rsp + 0x380]
call fcn.140015970
nop
mov rdx, rax
lea rcx, [rsp + 0x178]
call fcn.1400159a0
nop
lea rdx, [rsp + 0x178]
lea rcx, [rsp + 0xe80]
call fcn.140016650
nop
lea rcx, [rsp + 0x178]
call fcn.1400144b0
nop
lea rcx, [rsp + 0x380]
call fcn.1400144b0
lea rcx, [rsp + 0x388]
call fcn.1400159c0
nop
mov rdx, rax
lea rcx, [rsp + 0x140]
call fcn.1400159a0
nop
lea rdx, [rsp + 0x140]
lea rcx, [rsp + 0xe80]
call fcn.140016650
nop
lea rcx, [rsp + 0x140]
call fcn.1400144b0
nop
lea rcx, [rsp + 0x388]
call fcn.1400144b0
lea rcx, [rsp + 0x390]
call fcn.1400159f0
nop
mov rdx, rax
lea rcx, [rsp + 0x180]
call fcn.1400159a0
nop
lea rdx, [rsp + 0x180]
lea rcx, [rsp + 0xe80]
call fcn.140016650
nop
lea rcx, [rsp + 0x180]
call fcn.1400144b0
nop
lea rcx, [rsp + 0x390]
call fcn.1400144b0
lea rcx, [rsp + 0x398]
call fcn.140015a20
nop
mov rdx, rax
lea rcx, [rsp + 0x188]
call fcn.1400159a0
nop
lea rdx, [rsp + 0x188]
lea rcx, [rsp + 0xe80]
call fcn.140016650
nop
lea rcx, [rsp + 0x188]
call fcn.1400144b0
nop
lea rcx, [rsp + 0x398]
call fcn.1400144b0
lea rcx, [rsp + 0x3a0]
call fcn.140015a50
nop
mov rdx, rax
lea rcx, [rsp + 0x100]
call fcn.1400159a0
nop
lea rdx, [rsp + 0x100]
lea rcx, [rsp + 0xe80]
call fcn.140016650
nop
lea rcx, [rsp + 0x100]
call fcn.1400144b0
nop
lea rcx, [rsp + 0x3a0]
call fcn.1400144b0
lea rcx, [rsp + 0x3a8]
call fcn.140015a80
nop
mov rdx, rax
lea rcx, [rsp + 0x108]
call fcn.1400159a0
nop
lea rdx, [rsp + 0x108]
lea rcx, [rsp + 0xe80]
call fcn.140016650
nop
lea rcx, [rsp + 0x108]
call fcn.1400144b0
nop
lea rcx, [rsp + 0x3a8]
call fcn.1400144b0
nop
lea rcx, [rsp + 0x860]
call fcn.140001aa0
mov qword [rsp + 0x3b0], rdi
mov rax, qword [rax]
mov qword [rsp + 0x3b8], rax
lea rdx, [rsp + 0x3b0]
lea rcx, [rsp + 0x3b8]
call fcn.1400028d0
test al, al
jns 0x1400123e8
mov r14d, r13d
cmp r14d, 0x186a0
jge 0x140011f40
mov r9d, dword [rsp + 0xd9c]
mov r8d, dword [rsp + 0xd98]
lea rdx, [rsp + 0xa170]
lea rcx, [rsp + 0xd98]
call fcn.1400175c0
mov r9d, dword [rsp + 0xd9c]
mov r8d, dword [rsp + 0xd98]
lea rdx, [rsp + 0xa170]
lea rcx, [rsp + 0xd98]
call fcn.1400175c0
mov rcx, qword [rsp + 0xe88]
mov r8, qword [rsp + 0xe80]
sub rcx, r8
sar rcx, 3
cdqe
xor edx, edx
div rcx
movsxd rax, edx
mov rbx, qword [r8 + rax*8]
mov rax, qword [rbx]
mov rsi, qword [rax + 8]
mov r9d, dword [rsp + 0xd9c]
mov r8d, dword [rsp + 0xd98]
lea rdx, [rsp + 0xa170]
lea rcx, [rsp + 0xd98]
call fcn.1400175c0
mov r8d, eax
mov edx, dword [rsp + 0x30]
mov rcx, rbx
call rsi
mov dword [rsp + 0x30], eax
lea rdx, [rsp + 0xa170]
lea rcx, [rsp + 0xf78]
call fcn.140015ab0
movaps xmm9, xmm0
lea rdx, [rsp + 0xa170]
lea rcx, [rsp + 0xf78]
call fcn.140015ab0
movaps xmm8, xmm0
movaps xmm6, xmm0
andps xmm6, xmm13
movaps xmm0, xmm9
call sub.api_ms_win_crt_math_l1_1_0.dll_cos
movaps xmm7, xmm0
movaps xmm0, xmm8
call sub.api_ms_win_crt_math_l1_1_0.dll_sin
mulsd xmm7, xmm0
addsd xmm6, xmm10
movaps xmm0, xmm6
call sub.api_ms_win_crt_math_l1_1_0.dll_log
addsd xmm7, xmm0
movaps xmm0, xmm9
call sub.api_ms_win_crt_math_l1_1_0.dll_exp
subsd xmm7, xmm0
movsd xmm1, qword [rsp + 0x38]
addsd xmm7, xmm1
movsd qword [rsp + 0x38], xmm7
lea rdx, [rsp + 0xa170]
lea rcx, [rsp + 0xf78]
call fcn.140015ab0
movaps xmm1, xmm12
call sub.api_ms_win_crt_math_l1_1_0.dll_pow
movsd xmm1, qword [rsp + 0x38]
subsd xmm1, xmm0
movsd qword [rsp + 0x38], xmm1
lea rdx, [rsp + 0xa170]
lea rcx, [rsp + 0xf78]
call fcn.140015ab0
call sub.api_ms_win_crt_math_l1_1_0.dll_tan
movsd xmm1, qword [rsp + 0x38]
mulsd xmm0, xmm1
movsd qword [rsp + 0x38], xmm0
lea rdx, str.random
lea rcx, [rsp + 0x1460]
call fcn.140014c30
nop
lea rdx, [rsp + 0xa170]
lea rcx, [rsp + 0x1460]
call fcn.140002710
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rsp + 0x1090], xmm0
mov qword [rsp + 0x10a0], rax
lea rcx, [rsp + 0x1090]
call fcn.140014490
mov edx, 0x64
lea rcx, [rsp + 0x1090]
call fcn.140016690
nop
lea rdx, [rsp + 0x758]
lea rcx, [rsp + 0x1090]
call fcn.140014620
mov rbx, qword [rax]
lea rdx, [rsp + 0x760]
lea rcx, [rsp + 0x1090]
call fcn.140014630
lea rcx, [rsp + 0xd98]
mov qword [rsp + 0x6c0], rcx
lea rcx, [rsp + 0xa170]
mov qword [rsp + 0x6c8], rcx
lea r8, [rsp + 0x6c0]
mov rdx, rbx
mov rcx, qword [rax]
call fcn.140015b40
lea rdx, [rsp + 0xa170]
lea rcx, [rsp + 0x1090]
call fcn.140002820
lea rdx, [rsp + 0x768]
lea rcx, [rsp + 0x1090]
call fcn.140014620
mov rbx, qword [rax]
lea rdx, [rsp + 0x770]
lea rcx, [rsp + 0x1090]
call fcn.140014630
xor r9d, r9d
xor r8d, r8d
mov rdx, rbx
mov rcx, qword [rax]
call fcn.140015ba0
mov ecx, dword [rsp + 0x30]
add ecx, eax
mov dword [rsp + 0x30], ecx
mov r9d, dword [rsp + 0xd9c]
mov r8d, dword [rsp + 0xd98]
lea rdx, [rsp + 0xa170]
lea rcx, [rsp + 0xd98]
call fcn.1400175c0
mov ebx, eax
mov r9d, dword [rsp + 0xd9c]
mov r8d, dword [rsp + 0xd98]
lea rdx, [rsp + 0xa170]
lea rcx, [rsp + 0xd98]
call fcn.1400175c0
mov r8d, eax
mov ecx, ebx
test ebx, ebx
cmove ecx, r12d
sub eax, ebx
cdq
idiv ecx
imul ebx, r8d
add eax, ebx
mov ecx, dword [rsp + 0x30]
add eax, ecx
mov dword [rsp + 0x30], eax
mov eax, dword [rsp + 0x30]
and eax, 0x80000001
jge 0x1400122a6
dec eax
or eax, 0xfffffffe
inc eax
mov r9d, dword [rsp + 0xd9c]
mov r8d, dword [rsp + 0xd98]
lea rdx, [rsp + 0xa170]
lea rcx, [rsp + 0xd98]
test eax, eax
jne 0x1400122d7
call fcn.1400175c0
mov ecx, dword [rsp + 0x30]
add ecx, eax
jmp 0x1400122e2
call fcn.1400175c0
mov ecx, dword [rsp + 0x30]
sub ecx, eax
mov dword [rsp + 0x30], ecx
mov esi, r13d
nop dword [rax]
cmp esi, 5
jge 0x1400123c5
mov ebx, r13d
nop dword [rax]
cmp ebx, 5
jge 0x1400123be
mov r9d, dword [rsp + 0xd9c]
mov r8d, dword [rsp + 0xd98]
lea rdx, [rsp + 0xa170]
lea rcx, [rsp + 0xd98]
call fcn.1400175c0
mov ecx, dword [rsp + 0x30]
add ecx, eax
mov dword [rsp + 0x30], ecx
lea rdx, [rsp + 0xa170]
lea rcx, [rsp + 0xf78]
call fcn.140015ab0
addsd xmm0, qword [rsp + 0x38]
movsd qword [rsp + 0x38], xmm0
lea rdx, [rsp + 0xa170]
test bl, 1
jne 0x140012395
mov r9d, dword [rsp + 0xd9c]
mov r8d, dword [rsp + 0xd98]
lea rcx, [rsp + 0xd98]
call fcn.1400175c0
mov ecx, dword [rsp + 0x30]
imul ecx, eax
mov dword [rsp + 0x30], ecx
inc ebx
jmp 0x140012300
lea rcx, [rsp + 0xf78]
call fcn.140015ab0
movsd xmm1, qword [rsp + 0x38]
addsd xmm0, xmm10
divsd xmm1, xmm0
movsd qword [rsp + 0x38], xmm1
inc ebx
jmp 0x140012300
inc esi
jmp 0x1400122f0
lea rcx, [rsp + 0x1090]
call fcn.140014640
nop
lea rcx, [rsp + 0x1460]
call fcn.140014b90
inc r14d
jmp 0x140011f80
mov eax, dword [rsp + 0x30]
lea rcx, [rsp + 0xe80]
call fcn.140014520
mov rbx, qword [rsp + 0x1140]
sub rbx, qword [rsp + 0x1138]
lea rcx, [rsp + 0x1138]
call fcn.140014380
mov r8, rbx
mov rdx, rax
lea rcx, [rsp + 0x1650]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::write_char_const____ptr64__long_long___int64_____ptr64]
lea rcx, [rsp + 0x1650]
call fcn.1400141d0
call qword [sym.imp.MSVCP140.dll_unsigned_int___cdecl_std::_Random_device_void_]
mov dword [rsp + 0xc884], 0xffffffff
mov r8d, 0x6c078965
mov edx, eax
lea rcx, [rsp + 0xb500]
call fcn.140015560
mov dword [rsp + 0xda0], 0xffffff9c
mov dword [rsp + 0xda4], 0x64
movaps xmm0, xmmword [0x140024280]
movups xmmword [rsp + 0xf48], xmm0
mov dword [rsp + 0x30], r13d
movsd qword [rsp + 0x38], xmm11
lea rcx, [rsp + 0x12c0]
call fcn.140001aa0
mov qword [rsp + 0x3c0], 0x64
mov rax, qword [rsp + 0x12c0]
mov qword [rsp + 0x3c8], rax
lea r8, [rsp + 0x3c0]
lea rdx, [rsp + 0x3c8]
lea rcx, [rsp + 0x778]
call fcn.140015950
mov rdi, qword [rax]
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rsp + 0xe68], xmm0
mov qword [rsp + 0xe78], rax
lea rcx, [rsp + 0xe68]
call fcn.140014490
nop
lea rcx, [rsp + 0x3d0]
call fcn.140015970
nop
mov rdx, rax
lea rcx, [rsp + 0x110]
call fcn.1400159a0
nop
lea rdx, [rsp + 0x110]
lea rcx, [rsp + 0xe68]
call fcn.140016650
nop
lea rcx, [rsp + 0x110]
call fcn.1400144b0
nop
lea rcx, [rsp + 0x3d0]
call fcn.1400144b0
lea rcx, [rsp + 0x420]
call fcn.1400159c0
nop
mov rdx, rax
lea rcx, [rsp + 0x118]
call fcn.1400159a0
nop
lea rdx, [rsp + 0x118]
lea rcx, [rsp + 0xe68]
call fcn.140016650
nop
lea rcx, [rsp + 0x118]
call fcn.1400144b0
nop
lea rcx, [rsp + 0x420]
call fcn.1400144b0
lea rcx, [rsp + 0x470]
call fcn.1400159f0
nop
mov rdx, rax
lea rcx, [rsp + 0x120]
call fcn.1400159a0
nop
lea rdx, [rsp + 0x120]
lea rcx, [rsp + 0xe68]
call fcn.140016650
nop
lea rcx, [rsp + 0x120]
call fcn.1400144b0
nop
lea rcx, [rsp + 0x470]
call fcn.1400144b0
lea rcx, [rsp + 0x4c0]
call fcn.140015a20
nop
mov rdx, rax
lea rcx, [rsp + 0x128]
call fcn.1400159a0
nop
lea rdx, [rsp + 0x128]
lea rcx, [rsp + 0xe68]
call fcn.140016650
nop
lea rcx, [rsp + 0x128]
call fcn.1400144b0
nop
lea rcx, [rsp + 0x4c0]
call fcn.1400144b0
lea rcx, [rsp + 0x520]
call fcn.140015a50
nop
mov rdx, rax
lea rcx, [rsp + 0x138]
call fcn.1400159a0
nop
lea rdx, [rsp + 0x138]
lea rcx, [rsp + 0xe68]
call fcn.140016650
nop
lea rcx, [rsp + 0x138]
call fcn.1400144b0
nop
lea rcx, [rsp + 0x520]
call fcn.1400144b0
lea rcx, [rsp + 0x570]
call fcn.140015a80
nop
mov rdx, rax
lea rcx, [rsp + 0x2e0]
call fcn.1400159a0
nop
lea rdx, [rsp + 0x2e0]
lea rcx, [rsp + 0xe68]
call fcn.140016650
nop
lea rcx, [rsp + 0x2e0]
call fcn.1400144b0
nop
lea rcx, [rsp + 0x570]
call fcn.1400144b0
nop word [rax + rax]
lea rcx, [rsp + 0x780]
call fcn.140001aa0
mov qword [rsp + 0x5c8], rdi
mov rax, qword [rax]
mov qword [rsp + 0x620], rax
lea rdx, [rsp + 0x5c8]
lea rcx, [rsp + 0x620]
call fcn.1400028d0
test al, al
jns 0x140012b88
mov r14d, r13d
cmp r14d, 0x186a0
jge 0x1400126e0
mov r9d, dword [rsp + 0xda4]
mov r8d, dword [rsp + 0xda0]
lea rdx, [rsp + 0xb500]
lea rcx, [rsp + 0xda0]
call fcn.1400175c0
mov r9d, dword [rsp + 0xda4]
mov r8d, dword [rsp + 0xda0]
lea rdx, [rsp + 0xb500]
lea rcx, [rsp + 0xda0]
call fcn.1400175c0
mov rcx, qword [rsp + 0xe70]
mov r8, qword [rsp + 0xe68]
sub rcx, r8
sar rcx, 3
cdqe
xor edx, edx
div rcx
movsxd rax, edx
mov rbx, qword [r8 + rax*8]
mov rax, qword [rbx]
mov rsi, qword [rax + 8]
mov r9d, dword [rsp + 0xda4]
mov r8d, dword [rsp + 0xda0]
lea rdx, [rsp + 0xb500]
lea rcx, [rsp + 0xda0]
call fcn.1400175c0
mov r8d, eax
mov edx, dword [rsp + 0x30]
mov rcx, rbx
call rsi
mov dword [rsp + 0x30], eax
lea rdx, [rsp + 0xb500]
lea rcx, [rsp + 0xf48]
call fcn.140015ab0
movaps xmm9, xmm0
lea rdx, [rsp + 0xb500]
lea rcx, [rsp + 0xf48]
call fcn.140015ab0
movaps xmm8, xmm0
movaps xmm6, xmm0
andps xmm6, xmm13
movaps xmm0, xmm9
call sub.api_ms_win_crt_math_l1_1_0.dll_cos
movaps xmm7, xmm0
movaps xmm0, xmm8
call sub.api_ms_win_crt_math_l1_1_0.dll_sin
mulsd xmm7, xmm0
addsd xmm6, xmm10
movaps xmm0, xmm6
call sub.api_ms_win_crt_math_l1_1_0.dll_log
addsd xmm7, xmm0
movaps xmm0, xmm9
call sub.api_ms_win_crt_math_l1_1_0.dll_exp
subsd xmm7, xmm0
movsd xmm1, qword [rsp + 0x38]
addsd xmm7, xmm1
movsd qword [rsp + 0x38], xmm7
lea rdx, [rsp + 0xb500]
lea rcx, [rsp + 0xf48]
call fcn.140015ab0
movaps xmm1, xmm12
call sub.api_ms_win_crt_math_l1_1_0.dll_pow
movsd xmm1, qword [rsp + 0x38]
subsd xmm1, xmm0
movsd qword [rsp + 0x38], xmm1
lea rdx, [rsp + 0xb500]
lea rcx, [rsp + 0xf48]
call fcn.140015ab0
call sub.api_ms_win_crt_math_l1_1_0.dll_tan
movsd xmm1, qword [rsp + 0x38]
mulsd xmm0, xmm1
movsd qword [rsp + 0x38], xmm0
lea rdx, str.random
lea rcx, [rsp + 0x1480]
call fcn.140014c30
nop
lea rdx, [rsp + 0xb500]
lea rcx, [rsp + 0x1480]
call fcn.140002710
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rsp + 0x1018], xmm0
mov qword [rsp + 0x1028], rax
lea rcx, [rsp + 0x1018]
call fcn.140014490
mov edx, 0x64
lea rcx, [rsp + 0x1018]
call fcn.140016690
nop
lea rdx, [rsp + 0x788]
lea rcx, [rsp + 0x1018]
call fcn.140014620
mov rbx, qword [rax]
lea rdx, [rsp + 0x790]
lea rcx, [rsp + 0x1018]
call fcn.140014630
lea rcx, [rsp + 0xda0]
mov qword [rsp + 0x6b0], rcx
lea rcx, [rsp + 0xb500]
mov qword [rsp + 0x6b8], rcx
lea r8, [rsp + 0x6b0]
mov rdx, rbx
mov rcx, qword [rax]
call fcn.140015b40
lea rdx, [rsp + 0xb500]
lea rcx, [rsp + 0x1018]
call fcn.140002820
lea rdx, [rsp + 0x798]
lea rcx, [rsp + 0x1018]
call fcn.140014620
mov rbx, qword [rax]
lea rdx, [rsp + 0x660]
lea rcx, [rsp + 0x1018]
call fcn.140014630
xor r9d, r9d
xor r8d, r8d
mov rdx, rbx
mov rcx, qword [rax]
call fcn.140015ba0
mov ecx, dword [rsp + 0x30]
add ecx, eax
mov dword [rsp + 0x30], ecx
mov r9d, dword [rsp + 0xda4]
mov r8d, dword [rsp + 0xda0]
lea rdx, [rsp + 0xb500]
lea rcx, [rsp + 0xda0]
call fcn.1400175c0
mov ebx, eax
mov r9d, dword [rsp + 0xda4]
mov r8d, dword [rsp + 0xda0]
lea rdx, [rsp + 0xb500]
lea rcx, [rsp + 0xda0]
call fcn.1400175c0
mov r8d, eax
mov ecx, ebx
test ebx, ebx
cmove ecx, r12d
sub eax, ebx
cdq
idiv ecx
imul ebx, r8d
add eax, ebx
mov ecx, dword [rsp + 0x30]
add eax, ecx
mov dword [rsp + 0x30], eax
mov eax, dword [rsp + 0x30]
and eax, 0x80000001
jge 0x140012a46
dec eax
or eax, 0xfffffffe
inc eax
mov r9d, dword [rsp + 0xda4]
mov r8d, dword [rsp + 0xda0]
lea rdx, [rsp + 0xb500]
lea rcx, [rsp + 0xda0]
test eax, eax
jne 0x140012a77
call fcn.1400175c0
mov ecx, dword [rsp + 0x30]
add ecx, eax
jmp 0x140012a82
call fcn.1400175c0
mov ecx, dword [rsp + 0x30]
sub ecx, eax
mov dword [rsp + 0x30], ecx
mov esi, r13d
nop dword [rax]
cmp esi, 5
jge 0x140012b65
mov ebx, r13d
nop dword [rax]
cmp ebx, 5
jge 0x140012b5e
mov r9d, dword [rsp + 0xda4]
mov r8d, dword [rsp + 0xda0]
lea rdx, [rsp + 0xb500]
lea rcx, [rsp + 0xda0]
call fcn.1400175c0
mov ecx, dword [rsp + 0x30]
add ecx, eax
mov dword [rsp + 0x30], ecx
lea rdx, [rsp + 0xb500]
lea rcx, [rsp + 0xf48]
call fcn.140015ab0
addsd xmm0, qword [rsp + 0x38]
movsd qword [rsp + 0x38], xmm0
lea rdx, [rsp + 0xb500]
test bl, 1
jne 0x140012b35
mov r9d, dword [rsp + 0xda4]
mov r8d, dword [rsp + 0xda0]
lea rcx, [rsp + 0xda0]
call fcn.1400175c0
mov ecx, dword [rsp + 0x30]
imul ecx, eax
mov dword [rsp + 0x30], ecx
inc ebx
jmp 0x140012aa0
lea rcx, [rsp + 0xf48]
call fcn.140015ab0
movsd xmm1, qword [rsp + 0x38]
addsd xmm0, xmm10
divsd xmm1, xmm0
movsd qword [rsp + 0x38], xmm1
inc ebx
jmp 0x140012aa0
inc esi
jmp 0x140012a90
lea rcx, [rsp + 0x1018]
call fcn.140014640
nop
lea rcx, [rsp + 0x1480]
call fcn.140014b90
inc r14d
jmp 0x140012720
mov eax, dword [rsp + 0x30]
lea rcx, [rsp + 0xe68]
call fcn.140014520
mov dword [rsp + 0x58], 0x12c
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rsp + 0xdd0], xmm0
mov qword [rsp + 0xde0], rax
lea rdx, [rsp + 0x103f8]
lea rcx, [rsp + 0xdd0]
call fcn.140002960
nop
mov ecx, r13d
mov rax, qword [0x14002d120]
lea rsi, [0x140000000]
test rax, rax
je 0x140012c0e
mov rdx, r13
cmp rax, r15
je 0x140012bfd
inc ecx
mov edx, ecx
mov rax, qword [rsi + rcx*8 + 0x2d120]
test rax, rax
jne 0x140012be5
jmp 0x140012c0e
mov r10, qword [rsi + rdx*8 + 0x2e430]
test r10, r10
jne 0x140012cef
mov edx, 0x1f4
xor ecx, ecx
lea r9d, [rcx + 0x40]
mov r8d, 0x1000
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov r10, rax
test rax, rax
jne 0x140012c35
mov r10, r13
jmp 0x140012cce
mov rax, r15
mov rcx, r10
mov edx, 3
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rcx + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rcx + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rcx + 0x50], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rcx + 0x60], xmm0
lea rcx, [rcx + 0x80]
movups xmm1, xmmword [rax + 0x70]
movups xmmword [rcx - 0x10], xmm1
lea rax, [rax + 0x80]
sub rdx, 1
jne 0x140012c40
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rcx + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rcx + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rcx + 0x50], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rcx + 0x60], xmm0
mov eax, dword [rax + 0x70]
mov dword [rcx + 0x70], eax
mov rax, qword [0x14002d770]
mov qword [rsi + rax*8 + 0x2d120], r15
mov qword [rsi + rax*8 + 0x2e430], r10
inc rax
mov qword [0x14002d770], rax
lea rdx, [rsp + 0x58]
mov rcx, qword [sym.imp.KERNEL32.dll_Sleep]
call r10
nop
mov rcx, qword [rsp + 0xdd0]
xor rcx, qword [rsp + 0xdd8]
mov rax, qword [rsp + 0xde0]
mov qword [rax], rcx
lea rdx, [rsp + 0x14a0]
lea rcx, [rsp + 0x12f0]
call fcn.140004150
nop
lea rcx, [rsp + 0x1650]
call fcn.1400134e0
nop
lea rcx, [rsp + 0x1138]
call fcn.140014390
nop
lea rcx, [rsp + 0x14a0]
call fcn.140014b90
nop
lea rcx, [rsp + 0x12f0]
call fcn.140014b90
nop
jmp 0x1400133d3
mov byte [rsp + 0x55], 0
lea rcx, [rsp + 0x55]
call fcn.1400134c0
mov rdi, rax
mov byte [rsp + 0x56], 0
lea rcx, [rsp + 0x56]
call fcn.1400134c0
mov rbx, rax
lea r8, [0x14002f740]
lea rdx, [rsp + 0x1278]
lea rcx, [rsp + 0xaf0]
call fcn.1400157a0
nop
mov r8, r13
inc r8
cmp byte [rbx + r8], 0
jne 0x140012db1
mov rdx, rbx
mov rcx, rax
call fcn.140014a70
mov rdx, rax
lea rcx, [rsp + 0xa98]
call fcn.140014c00
nop
lea r8, [0x14002f720]
lea rdx, [rsp + 0xa98]
lea rcx, [rsp + 0xad0]
call fcn.140015810
nop
mov r8, r13
nop word [rax + rax]
inc r8
cmp byte [rdi + r8], 0
jne 0x140012e00
mov rdx, rdi
mov rcx, rax
call fcn.140014a70
mov rdx, rax
lea rcx, [rsp + 0x1350]
call fcn.140014c00
nop
lea rcx, [rsp + 0xad0]
call fcn.140014b90
nop
lea rcx, [rsp + 0xa98]
call fcn.140014b90
nop
lea rcx, [rsp + 0xaf0]
call fcn.140014b90
lea rcx, str.All_Not_Ok__n
call fcn.140001a30
xor r8d, r8d
lea rdx, [rsp + 0x1350]
lea rcx, [rsp + 0xde8]
call fcn.140016330
nop
lea rcx, [rsp + 0xde8]
call fcn.140003680
movzx ebx, al
lea rcx, [rsp + 0xde8]
call fcn.140002af0
test bl, bl
jne 0x140013213
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rsp + 0xdd0], xmm0
mov qword [rsp + 0xde0], rax
lea rcx, [rsp + 0xdd0]
call fcn.140014490
nop
mov byte [rsp + 0x57], bl
lea rcx, [rsp + 0x57]
call fcn.1400134c0
mov rdi, rax
mov byte [rsp + 0x4f], bl
lea rcx, [rsp + 0x4f]
call fcn.140013480
mov rbx, rax
mov byte [rsp + 0x40], 0
lea rcx, [rsp + 0x40]
call fcn.140013480
mov rdx, rax
lea r8, [rsp + 0x1330]
lea rcx, [rsp + 0x840]
call fcn.1400160a0
nop
mov r8, r13
nop dword [rax]
inc r8
cmp byte [rbx + r8], 0
jne 0x140012f10
mov rdx, rbx
mov rcx, rax
call fcn.140014a70
mov rdx, rax
lea rcx, [rsp + 0xa58]
call fcn.140014c00
nop
lea r8, [0x14002f720]
lea rdx, [rsp + 0xa58]
lea rcx, [rsp + 0xb30]
call fcn.140015810
nop
inc r13
cmp byte [rdi + r13], 0
jne 0x140012f53
mov r8, r13
mov rdx, rdi
mov rcx, rax
call fcn.140014a70
mov rdx, rax
lea rcx, [rsp + 0xa78]
call fcn.140014c00
lea rdx, [rsp + 0xa78]
lea rcx, [rsp + 0xb10]
call fcn.140003c20
nop
mov rdx, rax
lea rcx, [rsp + 0xde8]
call fcn.140006ff0
mov rdx, rax
lea rcx, [rsp + 0xdd0]
call fcn.1400143f0
lea rcx, [rsp + 0xde8]
call fcn.140014390
nop
lea rcx, [rsp + 0xb10]
call fcn.140014b90
nop
lea rcx, [rsp + 0xb30]
call fcn.140014b90
nop
lea rcx, [rsp + 0xa58]
call fcn.140014b90
nop
lea rcx, [rsp + 0x840]
call fcn.140014b90
xor edx, edx
mov r8d, 0x108
lea rcx, [rsp + 0x1540]
call sub.VCRUNTIME140.dll_memset
mov dword [rsp + 0x20], 1
mov r9d, 0x40
lea r8d, [r9 - 0x20]
lea rdx, [rsp + 0x1350]
lea rcx, [rsp + 0x1540]
call fcn.1400142d0
nop
mov r8, qword [rsp + 0xdd8]
mov rdx, qword [rsp + 0xdd0]
sub r8, rdx
lea rcx, [rsp + 0x1540]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::write_char_const____ptr64__long_long___int64_____ptr64]
lea rcx, [rsp + 0x1540]
call fcn.1400141d0
mov dword [rsp + 0x58], 0xc8
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rsp + 0xde8], xmm0
mov qword [rsp + 0xdf8], rax
lea rdx, [rsp + 0x103f8]
lea rcx, [rsp + 0xde8]
call fcn.140002960
nop
xor ecx, ecx
mov rax, qword [0x14002d120]
lea r15, [0x140016070]
test rax, rax
je 0x1400130d9
xor edx, edx
nop dword [rax + rax]
cmp rax, r15
je 0x1400130c8
inc ecx
mov edx, ecx
mov rax, qword [rsi + rcx*8 + 0x2d120]
test rax, rax
jne 0x1400130b0
jmp 0x1400130d9
mov r8, qword [rsi + rdx*8 + 0x2e430]
test r8, r8
jne 0x1400131bf
mov edx, 0x1f4
xor ecx, ecx
lea r9d, [rcx + 0x40]
mov r8d, 0x1000
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov r8, rax
test rax, rax
je 0x14001319e
mov rax, r15
mov rcx, r8
mov edx, 3
nop word [rax + rax]
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rcx + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rcx + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rcx + 0x50], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rcx + 0x60], xmm0
lea rcx, [rcx + 0x80]
movups xmm1, xmmword [rax + 0x70]
movups xmmword [rcx - 0x10], xmm1
lea rax, [rax + 0x80]
sub rdx, 1
jne 0x140013110
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rcx + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rcx + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rcx + 0x50], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rcx + 0x60], xmm0
mov eax, dword [rax + 0x70]
mov dword [rcx + 0x70], eax
mov rax, qword [0x14002d770]
mov qword [rsi + rax*8 + 0x2d120], r15
mov qword [rsi + rax*8 + 0x2e430], r8
inc rax
mov qword [0x14002d770], rax
lea rdx, [rsp + 0x58]
mov rcx, qword [sym.imp.KERNEL32.dll_Sleep]
call r8
nop
mov rcx, qword [rsp + 0xde8]
xor rcx, qword [rsp + 0xdf0]
mov rax, qword [rsp + 0xdf8]
mov qword [rax], rcx
lea rcx, [rsp + 0x15e8]
call fcn.140014210
lea rcx, [rsp + 0x15e8]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::destructor_void____ptr64]
nop
lea rcx, [rsp + 0xdd0]
call fcn.140014390
mov byte [rsp + 0x40], 0
lea rcx, [rsp + 0x40]
call fcn.1400134d0
mov rdx, rax
lea r8, [rsp + 0x1350]
lea rcx, [rsp + 0x840]
call fcn.1400160a0
mov rdi, rax
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rsp + 0xde8], xmm0
mov qword [rsp + 0xdf8], rax
lea rdx, [rsp + 0x103f8]
lea rcx, [rsp + 0xde8]
call fcn.140002960
nop
xor edx, edx
mov rcx, qword [0x14002c480]
lea rbx, [0x140016390]
test rcx, rcx
je 0x1400132a9
xor eax, eax
nop
cmp rcx, rbx
je 0x140013298
inc edx
mov eax, edx
mov rcx, qword [rsi + rdx*8 + 0x2c480]
test rcx, rcx
jne 0x140013280
jmp 0x1400132a9
mov r8, qword [rsi + rax*8 + 0x2ea70]
test r8, r8
jne 0x14001338f
mov edx, 0x1f4
xor ecx, ecx
lea r9d, [rcx + 0x40]
mov r8d, 0x1000
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov r8, rax
test rax, rax
je 0x14001336e
mov rax, rbx
mov rcx, r8
mov edx, 3
nop word [rax + rax]
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rcx + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rcx + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rcx + 0x50], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rcx + 0x60], xmm0
lea rcx, [rcx + 0x80]
movups xmm1, xmmword [rax + 0x70]
movups xmmword [rcx - 0x10], xmm1
lea rax, [rax + 0x80]
sub rdx, 1
jne 0x1400132e0
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rcx + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rcx + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rcx + 0x50], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rcx + 0x60], xmm0
mov eax, dword [rax + 0x70]
mov dword [rcx + 0x70], eax
mov rax, qword [0x14002d440]
mov qword [rsi + rax*8 + 0x2c480], rbx
mov qword [rsi + rax*8 + 0x2ea70], r8
inc rax
mov qword [0x14002d440], rax
mov rdx, rdi
lea rcx, [0x140007200]
call r8
nop
mov rcx, qword [rsp + 0xde8]
xor rcx, qword [rsp + 0xdf0]
mov rax, qword [rsp + 0xdf8]
mov qword [rax], rcx
lea rcx, [rsp + 0x840]
call fcn.140014b90
nop
lea rcx, [rsp + 0x1350]
call fcn.140014b90
mov rcx, qword [rsp + 0x658]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
nop
lea rcx, [rsp + 0x1278]
call fcn.140014b90
nop
lea rcx, [rsp + 0x1330]
call fcn.140014b90
nop
lea rcx, [rsp + 0x1310]
call fcn.140014b90
nop
mov rcx, qword [rsp + 0x10f0]
xor rcx, qword [rsp + 0x10f8]
mov rax, qword [rsp + 0x1100]
mov qword [rax], rcx
xor eax, eax
mov rcx, qword [rsp + 0x10340]
xor rcx, rsp
call fcn.14001fe20
lea r11, [rsp + 0x103d0]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x40]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
movaps xmm8, xmmword [r11 - 0x30]
movaps xmm9, xmmword [r11 - 0x40]
movaps xmm10, xmmword [r11 - 0x50]
movaps xmm11, xmmword [r11 - 0x60]
movaps xmm12, xmmword [r11 - 0x70]
movaps xmm13, xmmword [r11 - 0x80]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
ret