Function at 0x14015e1e0
Capabilities:
Encode data using xor

Disassembly:
push rbp
push rbx
mov eax, 0x1b078
call fcn.1400ad0a0
sub rsp, rax
lea rbp, [rsp + 0x80]
mov qword [rbp + 0x1b010], rcx
mov qword [rbp + 0x1b018], rdx
mov qword [rbp + 0x1b020], r8
mov dword [rbp + 0x1b028], r9d
mov dword [rbp + 0x1afec], 0x184c
mov dword [rbp + 0x1afe8], 0
jmp 0x14003d80f
mov ecx, 0x1d320
call fcn.14015cc00
mov qword [rbp + 0x18c80], rax
mov dword [rbp + 0x1afe4], 0
jmp 0x14003d7df
call sub.msvcrt.dll_rand
mov edx, dword [rbp + 0x1afe4]
movsxd rdx, edx
lea rcx, [rdx*4]
mov rdx, qword [rbp + 0x18c80]
lea r8, [rcx + rdx]
movsxd rdx, eax
imul rdx, rdx, 0xffffffffca908e09
shr rdx, 0x20
add edx, eax
sar edx, 0xd
mov ecx, eax
sar ecx, 0x1f
sub edx, ecx
imul ecx, edx, 0x2871
sub eax, ecx
mov edx, eax
mov dword [r8], edx
call sub.msvcrt.dll_rand
movsxd rdx, eax
imul rdx, rdx, 0x5f31fdd1
shr rdx, 0x20
sar edx, 0xc
mov ecx, eax
sar ecx, 0x1f
sub edx, ecx
imul ecx, edx, 0x2b07
sub eax, ecx
mov edx, eax
add dword [rbp + 0x1afec], edx
add dword [rbp + 0x1afe4], 1
cmp dword [rbp + 0x1afe4], 0xdb
jle 0x14003d763
mov rax, qword [rbp + 0x18c80]
test rax, rax
je 0x14003d808
mov edx, 4
mov rcx, rax
call fcn.14015cbf0
add dword [rbp + 0x1afe8], 1
cmp dword [rbp + 0x1afe8], 0x4af
jle 0x14003d746
lea rax, [rbp + 0xa560]
mov rcx, rax
call fcn.140142400
mov dword [rbp + 0xa588], 0
mov dword [rbp + 0xa58c], 0
lea rdx, [rbp + 0xa588]
lea rax, [rbp + 0xa58c]
mov rcx, rax
call fcn.1401598d0
mov qword [rbp + 0xa580], rax
lea rdx, [rbp + 0xa580]
lea rax, [rbp + 0xa560]
mov rcx, rax
call fcn.1401421e0
mov dword [rbp + 0xa598], 0xfffffffc
mov dword [rbp + 0xa59c], 1
lea rdx, [rbp + 0xa598]
lea rax, [rbp + 0xa59c]
mov rcx, rax
call fcn.1401598d0
mov qword [rbp + 0xa590], rax
lea rdx, [rbp + 0xa590]
lea rax, [rbp + 0xa560]
mov rcx, rax
call fcn.1401421e0
mov dword [rbp + 0xa5a8], 0xfffffffb
mov dword [rbp + 0xa5ac], 0xffffffff
lea rdx, [rbp + 0xa5a8]
lea rax, [rbp + 0xa5ac]
mov rcx, rax
call fcn.1401598d0
mov qword [rbp + 0xa5a0], rax
lea rdx, [rbp + 0xa5a0]
lea rax, [rbp + 0xa560]
mov rcx, rax
call fcn.1401421e0
mov dword [rbp + 0xa5b8], 0xfffffffd
mov dword [rbp + 0xa5bc], 0xfffffffb
lea rdx, [rbp + 0xa5b8]
lea rax, [rbp + 0xa5bc]
mov rcx, rax
call fcn.1401598d0
mov qword [rbp + 0xa5b0], rax
lea rdx, [rbp + 0xa5b0]
lea rax, [rbp + 0xa560]
mov rcx, rax
call fcn.1401421e0
mov dword [rbp + 0xa5c8], 0xffffffff
mov dword [rbp + 0xa5cc], 0xfffffffd
lea rdx, [rbp + 0xa5c8]
lea rax, [rbp + 0xa5cc]
mov rcx, rax
call fcn.1401598d0
mov qword [rbp + 0xa5c0], rax
lea rdx, [rbp + 0xa5c0]
lea rax, [rbp + 0xa560]
mov rcx, rax
call fcn.1401421e0
mov dword [rbp + 0xa5d8], 0xfffffffd
mov dword [rbp + 0xa5dc], 0xffffffff
lea rdx, [rbp + 0xa5d8]
lea rax, [rbp + 0xa5dc]
mov rcx, rax
call fcn.1401598d0
mov qword [rbp + 0xa5d0], rax
lea rdx, [rbp + 0xa5d0]
lea rax, [rbp + 0xa560]
mov rcx, rax
call fcn.1401421e0
mov dword [rbp + 0xa5e8], 0xfffffffe
mov dword [rbp + 0xa5ec], 0xfffffffe
lea rdx, [rbp + 0xa5e8]
lea rax, [rbp + 0xa5ec]
mov rcx, rax
call fcn.1401598d0
mov qword [rbp + 0xa5e0], rax
lea rdx, [rbp + 0xa5e0]
lea rax, [rbp + 0xa560]
mov rcx, rax
call fcn.1401421e0
mov dword [rbp + 0xa5f8], 0xffffffff
mov dword [rbp + 0xa5fc], 0xffffffff
lea rdx, [rbp + 0xa5f8]
lea rax, [rbp + 0xa5fc]
mov rcx, rax
call fcn.1401598d0
mov qword [rbp + 0xa5f0], rax
lea rdx, [rbp + 0xa5f0]
lea rax, [rbp + 0xa560]
mov rcx, rax
call fcn.1401421e0
mov dword [rbp + 0xa608], 0xffffffff
mov dword [rbp + 0xa60c], 0xfffffffe
lea rdx, [rbp + 0xa608]
lea rax, [rbp + 0xa60c]
mov rcx, rax
call fcn.1401598d0
mov qword [rbp + 0xa600], rax
lea rdx, [rbp + 0xa600]
lea rax, [rbp + 0xa560]
mov rcx, rax
call fcn.1401421e0
mov dword [rbp + 0xa618], 1
mov dword [rbp + 0xa61c], 0xffffffff
lea rdx, [rbp + 0xa618]
lea rax, [rbp + 0xa61c]
mov rcx, rax
call fcn.1401598d0
mov qword [rbp + 0xa610], rax
lea rdx, [rbp + 0xa610]
lea rax, [rbp + 0xa560]
mov rcx, rax
call fcn.1401421e0
lea rax, [rbp + 0xa560]
mov rcx, rax
call fcn.1400cbf50
mov dword [rbp + 0x1a674], eax
lea rax, [rbp + 0xa560]
mov rcx, rax
call fcn.140142130
mov rbx, rax
lea rax, [rbp + 0xa560]
mov rcx, rax
call fcn.1401421b0
mov rdx, rbx
mov rcx, rax
call fcn.140158ca0
lea rdx, [rbp + 0xa560]
lea rax, [rbp + 0xa620]
mov rcx, rax
call fcn.1401422f0
lea rax, [rbp + 0xa540]
lea rdx, [rbp + 0xa620]
mov rcx, rax
call fcn.14000467d
lea rax, [rbp + 0xa620]
mov rcx, rax
call fcn.140142420
lea rax, [0x1401d1b88]
mov rdx, rax
mov rax, qword [0x1401d8670]
mov rcx, rax
call fcn.14015a590
lea rax, [rbp + 0xa540]
mov qword [rbp + 0x1a668], rax
mov rax, qword [rbp + 0x1a668]
mov rcx, rax
call fcn.1401421b0
mov qword [rbp + 0x5bb0], rax
mov rax, qword [rbp + 0x1a668]
mov rcx, rax
call fcn.140142130
mov qword [rbp + 0x5ba8], rax
jmp 0x14003dc38
lea rax, [rbp + 0x5bb0]
mov rcx, rax
call fcn.1400c1900
mov rax, qword [rax]
mov qword [rbp + 0x5bb8], rax
mov eax, dword [rbp + 0x5bb8]
mov edx, eax
mov rax, qword [0x1401d8670]
mov rcx, rax
call fcn.140118c40
mov rcx, rax
lea rax, [0x1401d1b96]
mov rdx, rax
call fcn.14015a590
mov rcx, rax
mov eax, dword [rbp + 0x5bbc]
mov edx, eax
call fcn.140118c40
mov rcx, rax
mov rax, qword [0x1401d8680]
mov rdx, rax
call fcn.140118a30
lea rax, [rbp + 0x5bb0]
mov rcx, rax
call fcn.1400beba0
lea rdx, [rbp + 0x5ba8]
lea rax, [rbp + 0x5bb0]
mov rcx, rax
call fcn.1400bff30
test al, al
jne 0x14003dbc5
mov dword [rbp + 0x1afe0], 0x6e94
mov dword [rbp + 0x1afdc], 0
jmp 0x14003dd38
mov ecx, 0x1f744
call fcn.14015cc00
mov qword [rbp + 0x18c88], rax
mov dword [rbp + 0x1afd8], 0
jmp 0x14003dd08
call sub.msvcrt.dll_rand
mov edx, dword [rbp + 0x1afd8]
movsxd rdx, edx
lea rcx, [rdx*4]
mov rdx, qword [rbp + 0x18c88]
lea r8, [rcx + rdx]
movsxd rdx, eax
imul rdx, rdx, 0xffffffff956990f7
shr rdx, 0x20
add edx, eax
sar edx, 0xd
mov ecx, eax
sar ecx, 0x1f
sub edx, ecx
imul ecx, edx, 0x36d4
sub eax, ecx
mov edx, eax
mov dword [r8], edx
call sub.msvcrt.dll_rand
movsxd rdx, eax
imul rdx, rdx, 0x246c8f9
shr rdx, 0x20
sar edx, 7
mov ecx, eax
sar ecx, 0x1f
sub edx, ecx
imul ecx, edx, 0x383a
sub eax, ecx
mov edx, eax
add dword [rbp + 0x1afe0], edx
add dword [rbp + 0x1afd8], 1
cmp dword [rbp + 0x1afd8], 0x92
jle 0x14003dc8c
mov rax, qword [rbp + 0x18c88]
test rax, rax
je 0x14003dd31
mov edx, 4
mov rcx, rax
call fcn.14015cbf0
add dword [rbp + 0x1afdc], 1
cmp dword [rbp + 0x1afdc], 0x5b6
jle 0x14003dc6f
lea rax, [rbp + 0xa520]
mov rcx, rax
call fcn.140142400
mov dword [rbp + 0xa648], 0
mov dword [rbp + 0xa64c], 0
lea rdx, [rbp + 0xa648]
lea rax, [rbp + 0xa64c]
mov rcx, rax
call fcn.1401598d0
mov qword [rbp + 0xa640], rax
lea rdx, [rbp + 0xa640]
lea rax, [rbp + 0xa520]
mov rcx, rax
call fcn.1401421e0
mov dword [rbp + 0xa658], 0xfffffffc
mov dword [rbp + 0xa65c], 1
lea rdx, [rbp + 0xa658]
lea rax, [rbp + 0xa65c]
mov rcx, rax
call fcn.1401598d0
mov qword [rbp + 0xa650], rax
lea rdx, [rbp + 0xa650]
lea rax, [rbp + 0xa520]
mov rcx, rax
call fcn.1401421e0
mov dword [rbp + 0xa668], 0xfffffffb
mov dword [rbp + 0xa66c], 0xffffffff
lea rdx, [rbp + 0xa668]
lea rax, [rbp + 0xa66c]
mov rcx, rax
call fcn.1401598d0
mov qword [rbp + 0xa660], rax
lea rdx, [rbp + 0xa660]
lea rax, [rbp + 0xa520]
mov rcx, rax
call fcn.1401421e0
mov dword [rbp + 0xa678], 0xfffffffd
mov dword [rbp + 0xa67c], 0xfffffffb
lea rdx, [rbp + 0xa678]
lea rax, [rbp + 0xa67c]
mov rcx, rax
call fcn.1401598d0
mov qword [rbp + 0xa670], rax
lea rdx, [rbp + 0xa670]
lea rax, [rbp + 0xa520]
mov rcx, rax
call fcn.1401421e0
mov dword [rbp + 0xa688], 0xffffffff
mov dword [rbp + 0xa68c], 0xfffffffd
lea rdx, [rbp + 0xa688]
lea rax, [rbp + 0xa68c]
mov rcx, rax
call fcn.1401598d0
mov qword [rbp + 0xa680], rax
lea rdx, [rbp + 0xa680]
lea rax, [rbp + 0xa520]
mov rcx, rax
call fcn.1401421e0
mov dword [rbp + 0xa698], 0xfffffffd
mov dword [rbp + 0xa69c], 0xffffffff
lea rdx, [rbp + 0xa698]
lea rax, [rbp + 0xa69c]
mov rcx, rax
call fcn.1401598d0
mov qword [rbp + 0xa690], rax
lea rdx, [rbp + 0xa690]
lea rax, [rbp + 0xa520]
mov rcx, rax
call fcn.1401421e0
mov dword [rbp + 0xa6a8], 0xfffffffe
mov dword [rbp + 0xa6ac], 0xfffffffe
lea rdx, [rbp + 0xa6a8]
lea rax, [rbp + 0xa6ac]
mov rcx, rax
call fcn.1401598d0
mov qword [rbp + 0xa6a0], rax
lea rdx, [rbp + 0xa6a0]
lea rax, [rbp + 0xa520]
mov rcx, rax
call fcn.1401421e0
mov dword [rbp + 0xa6b8], 0xffffffff
mov dword [rbp + 0xa6bc], 0xffffffff
lea rdx, [rbp + 0xa6b8]
lea rax, [rbp + 0xa6bc]
mov rcx, rax
call fcn.1401598d0
mov qword [rbp + 0xa6b0], rax
lea rdx, [rbp + 0xa6b0]
lea rax, [rbp + 0xa520]
mov rcx, rax
call fcn.1401421e0
mov dword [rbp + 0xa6c8], 0xffffffff
mov dword [rbp + 0xa6cc], 0xfffffffe
lea rdx, [rbp + 0xa6c8]
lea rax, [rbp + 0xa6cc]
mov rcx, rax
call fcn.1401598d0
mov qword [rbp + 0xa6c0], rax
lea rdx, [rbp + 0xa6c0]
lea rax, [rbp + 0xa520]
mov rcx, rax
call fcn.1401421e0
mov dword [rbp + 0xa6d8], 1
mov dword [rbp + 0xa6dc], 0xffffffff
lea rdx, [rbp + 0xa6d8]
lea rax, [rbp + 0xa6dc]
mov rcx, rax
call fcn.1401598d0
mov qword [rbp + 0xa6d0], rax
lea rdx, [rbp + 0xa6d0]
lea rax, [rbp + 0xa520]
mov rcx, rax
call fcn.1401421e0
lea rax, [rbp + 0xa520]
mov rcx, rax
call fcn.1400cbf50
mov dword [rbp + 0x1a664], eax
lea rax, [rbp + 0xa520]
mov rcx, rax
call fcn.140142130
mov rbx, rax
lea rax, [rbp + 0xa520]
mov rcx, rax
call fcn.1401421b0
mov rdx, rbx
mov rcx, rax
call fcn.140158ca0
lea rdx, [rbp + 0xa520]
lea rax, [rbp + 0xa6e0]
mov rcx, rax
call fcn.1401422f0
lea rax, [rbp + 0xa500]
lea rdx, [rbp + 0xa6e0]
mov rcx, rax
call fcn.14000467d
lea rax, [rbp + 0xa6e0]
mov rcx, rax
call fcn.140142420
lea rax, [0x1401d1b88]
mov rdx, rax
mov rax, qword [0x1401d8670]
mov rcx, rax
call fcn.14015a590
lea rax, [rbp + 0xa500]
mov qword [rbp + 0x1a658], rax
mov rax, qword [rbp + 0x1a658]
mov rcx, rax
call fcn.1401421b0
mov qword [rbp + 0x5b98], rax
mov rax, qword [rbp + 0x1a658]
mov rcx, rax
call fcn.140142130
mov qword [rbp + 0x5b90], rax
jmp 0x14003e161
lea rax, [rbp + 0x5b98]
mov rcx, rax
call fcn.1400c1900
mov rax, qword [rax]
mov qword [rbp + 0x5ba0], rax
mov eax, dword [rbp + 0x5ba0]
mov edx, eax
mov rax, qword [0x1401d8670]
mov rcx, rax
call fcn.140118c40
mov rcx, rax
lea rax, [0x1401d1b96]
mov rdx, rax
call fcn.14015a590
mov rcx, rax
mov eax, dword [rbp + 0x5ba4]
mov edx, eax
call fcn.140118c40
mov rcx, rax
mov rax, qword [0x1401d8680]
mov rdx, rax
call fcn.140118a30
lea rax, [rbp + 0x5b98]
mov rcx, rax
call fcn.1400beba0
lea rdx, [rbp + 0x5b90]
lea rax, [rbp + 0x5b98]
mov rcx, rax
call fcn.1400bff30
test al, al
jne 0x14003e0ee
mov dword [rbp + 0x1afd4], 0x5844
mov dword [rbp + 0x1afd0], 0
jmp 0x14003e261
mov ecx, 0xbf48
call fcn.14015cc00
mov qword [rbp + 0x18c90], rax
mov dword [rbp + 0x1afcc], 0
jmp 0x14003e231
call sub.msvcrt.dll_rand
mov edx, dword [rbp + 0x1afcc]
movsxd rdx, edx
lea rcx, [rdx*4]
mov rdx, qword [rbp + 0x18c90]
lea r8, [rcx + rdx]
movsxd rdx, eax
imul rdx, rdx, 0x2b1a0333
shr rdx, 0x20
sar edx, 0xa
mov ecx, eax
sar ecx, 0x1f
sub edx, ecx
imul ecx, edx, 0x17c2
sub eax, ecx
mov edx, eax
mov dword [r8], edx
call sub.msvcrt.dll_rand
movsxd rdx, eax
imul rdx, rdx, 0xffffffffa0ccc4c3
shr rdx, 0x20
add edx, eax
sar edx, 0xc
mov ecx, eax
sar ecx, 0x1f
sub edx, ecx
imul ecx, edx, 0x1979
sub eax, ecx
mov edx, eax
add dword [rbp + 0x1afd4], edx
add dword [rbp + 0x1afcc], 1
cmp dword [rbp + 0x1afcc], 0xf7
jle 0x14003e1b5
mov rax, qword [rbp + 0x18c90]
test rax, rax
je 0x14003e25a
mov edx, 4
mov rcx, rax
call fcn.14015cbf0
add dword [rbp + 0x1afd0], 1
cmp dword [rbp + 0x1afd0], 0x428
jle 0x14003e198
lea rax, [rbp + 0xa4e0]
mov rcx, rax
call fcn.140142400
mov dword [rbp + 0xa708], 0
mov dword [rbp + 0xa70c], 0
lea rdx, [rbp + 0xa708]
lea rax, [rbp + 0xa70c]
mov rcx, rax
call fcn.1401598d0
mov qword [rbp + 0xa700], rax
lea rdx, [rbp + 0xa700]
lea rax, [rbp + 0xa4e0]
mov rcx, rax
call fcn.1401421e0
mov dword [rbp + 0xa718], 0xfffffffc
mov dword [rbp + 0xa71c], 1
lea rdx, [rbp + 0xa718]
lea rax, [rbp + 0xa71c]
mov rcx, rax
call fcn.1401598d0
mov qword [rbp + 0xa710], rax
lea rdx, [rbp + 0xa710]
lea rax, [rbp + 0xa4e0]
mov rcx, rax
call fcn.1401421e0
mov dword [rbp + 0xa728], 0xfffffffb
mov dword [rbp + 0xa72c], 0xffffffff
lea rdx, [rbp + 0xa728]
lea rax, [rbp + 0xa72c]
mov rcx, rax
call fcn.1401598d0
mov qword [rbp + 0xa720], rax
lea rdx, [rbp + 0xa720]
lea rax, [rbp + 0xa4e0]
mov rcx, rax
call fcn.1401421e0
mov dword [rbp + 0xa738], 0xfffffffd
mov dword [rbp + 0xa73c], 0xfffffffb
lea rdx, [rbp + 0xa738]
lea rax, [rbp + 0xa73c]
mov rcx, rax
call fcn.1401598d0
mov qword [rbp + 0xa730], rax
lea rdx, [rbp + 0xa730]
lea rax, [rbp + 0xa4e0]
mov rcx, rax
call fcn.1401421e0
mov dword [rbp + 0xa748], 0xffffffff
mov dword [rbp + 0xa74c], 0xfffffffd
lea rdx, [rbp + 0xa748]
lea rax, [rbp + 0xa74c]
mov rcx, rax
call fcn.1401598d0
mov qword [rbp + 0xa740], rax
lea rdx, [rbp + 0xa740]
lea rax, [rbp + 0xa4e0]
mov rcx, rax
call fcn.1401421e0
mov dword [rbp + 0xa758], 0xfffffffd
mov dword [rbp + 0xa75c], 0xffffffff
lea rdx, [rbp + 0xa758]
lea rax, [rbp + 0xa75c]
mov rcx, rax
call fcn.1401598d0
mov qword [rbp + 0xa750], rax
lea rdx, [rbp + 0xa750]
lea rax, [rbp + 0xa4e0]
mov rcx, rax
call fcn.1401421e0
mov dword [rbp + 0xa768], 0xfffffffe
mov dword [rbp + 0xa76c], 0xfffffffe
lea rdx, [rbp + 0xa768]
lea rax, [rbp + 0xa76c]
mov rcx, rax
call fcn.1401598d0
mov qword [rbp + 0xa760], rax
lea rdx, [rbp + 0xa760]
lea rax, [rbp + 0xa4e0]
mov rcx, rax
call fcn.1401421e0
mov dword [rbp + 0xa778], 0xffffffff
mov dword [rbp + 0xa77c], 0xffffffff
lea rdx, [rbp + 0xa778]
lea rax, [rbp + 0xa77c]
mov rcx, rax
call fcn.1401598d0
mov qword [rbp + 0xa770], rax
lea rdx, [rbp + 0xa770]
lea rax, [rbp + 0xa4e0]
mov rcx, rax
call fcn.1401421e0
mov dword [rbp + 0xa788], 0xffffffff
mov dword [rbp + 0xa78c], 0xfffffffe
lea rdx, [rbp + 0xa788]
lea rax, [rbp + 0xa78c]
mov rcx, rax
call fcn.1401598d0
mov qword [rbp + 0xa780], rax
lea rdx, [rbp + 0xa780]
lea rax, [rbp + 0xa4e0]
mov rcx, rax
call fcn.1401421e0
mov dword [rbp + 0xa798], 1
mov dword [rbp + 0xa79c], 0xffffffff
lea rdx, [rbp + 0xa798]
lea rax, [rbp + 0xa79c]
mov rcx, rax
call fcn.1401598d0
mov qword [rbp + 0xa790], rax
lea rdx, [rbp + 0xa790]
lea rax, [rbp + 0xa4e0]
mov rcx, rax
call fcn.1401421e0
lea rax, [rbp + 0xa4e0]
mov rcx, rax
call fcn.1400cbf50
mov dword [rbp + 0x1a654], eax
lea rax, [rbp + 0xa4e0]
mov rcx, rax
call fcn.140142130
mov rbx, rax
lea rax, [rbp + 0xa4e0]
mov rcx, rax
call fcn.1401421b0
mov rdx, rbx
mov rcx, rax
call fcn.140158ca0
lea rdx, [rbp + 0xa4e0]
lea rax, [rbp + 0xa7a0]
mov rcx, rax
call fcn.1401422f0
lea rax, [rbp + 0xa4c0]
lea rdx, [rbp + 0xa7a0]
mov rcx, rax
call fcn.14000467d
lea rax, [rbp + 0xa7a0]
mov rcx, rax
call fcn.140142420
lea rax, [0x1401d1b88]
mov rdx, rax
mov rax, qword [0x1401d8670]
mov rcx, rax
call fcn.14015a590
lea rax, [rbp + 0xa4c0]
mov qword [rbp + 0x1a648], rax
mov rax, qword [rbp + 0x1a648]
mov rcx, rax
call fcn.1401421b0
mov qword [rbp + 0x5b80], rax
mov rax, qword [rbp + 0x1a648]
mov rcx, rax
call fcn.140142130
mov qword [rbp + 0x5b78], rax
jmp 0x14003e68a
lea rax, [rbp + 0x5b80]
mov rcx, rax
call fcn.1400c1900
mov rax, qword [rax]
mov qword [rbp + 0x5b88], rax
mov eax, dword [rbp + 0x5b88]
mov edx, eax
mov rax, qword [0x1401d8670]
mov rcx, rax
call fcn.140118c40
mov rcx, rax
lea rax, [0x1401d1b96]
mov rdx, rax
call fcn.14015a590
mov rcx, rax
mov eax, dword [rbp + 0x5b8c]
mov edx, eax
call fcn.140118c40
mov rcx, rax
mov rax, qword [0x1401d8680]
mov rdx, rax
call fcn.140118a30
lea rax, [rbp + 0x5b80]
mov rcx, rax
call fcn.1400beba0
lea rdx, [rbp + 0x5b78]
lea rax, [rbp + 0x5b80]
mov rcx, rax
call fcn.1400bff30
test al, al
jne 0x14003e617
mov dword [rbp + 0x1afc8], 0x54ea
mov dword [rbp + 0x1afc4], 0
jmp 0x14003e788
mov ecx, 0x10064
call fcn.14015cc00
mov qword [rbp + 0x18c98], rax
mov dword [rbp + 0x1afc0], 0
jmp 0x14003e758
call sub.msvcrt.dll_rand
mov edx, dword [rbp + 0x1afc0]
movsxd rdx, edx
lea rcx, [rdx*4]
mov rdx, qword [rbp + 0x18c98]
lea r8, [rcx + rdx]
movsxd rdx, eax
imul rdx, rdx, 0x39d7c7f7
shr rdx, 0x20
sar edx, 0xb
mov ecx, eax
sar ecx, 0x1f
sub edx, ecx
imul ecx, edx, 0x2368
sub eax, ecx
mov edx, eax
mov dword [r8], edx
call sub.msvcrt.dll_rand
movsxd rdx, eax
imul rdx, rdx, 0x32d528db
shr rdx, 0x20
sar edx, 0xb
mov ecx, eax
sar ecx, 0x1f
sub edx, ecx
imul ecx, edx, 0x284a
sub eax, ecx
mov edx, eax
add dword [rbp + 0x1afc8], edx
add dword [rbp + 0x1afc0], 1
cmp dword [rbp + 0x1afc0], 0x13f
jle 0x14003e6de
mov rax, qword [rbp + 0x18c98]
test rax, rax
je 0x14003e781
mov edx, 4
mov rcx, rax
call fcn.14015cbf0
add dword [rbp + 0x1afc4], 1
cmp dword [rbp + 0x1afc4], 0x601
jle 0x14003e6c1
lea rax, [rbp + 0xa4a0]
mov rcx, rax
call fcn.140142400
mov dword [rbp + 0xa7c8], 0
mov dword [rbp + 0xa7cc], 0
lea rdx, [rbp + 0xa7c8]
lea rax, [rbp + 0xa7cc]
mov rcx, rax
call fcn.1401598d0
mov qword [rbp + 0xa7c0], rax
lea rdx, [rbp + 0xa7c0]
lea rax, [rbp + 0xa4a0]
mov rcx, rax
call fcn.1401421e0
mov dword [rbp + 0xa7d8], 0xfffffffc
mov dword [rbp + 0xa7dc], 1
lea rdx, [rbp + 0xa7d8]
lea rax, [rbp + 0xa7dc]
mov rcx, rax
call fcn.1401598d0
mov qword [rbp + 0xa7d0], rax
lea rdx, [rbp + 0xa7d0]
lea rax, [rbp + 0xa4a0]
mov rcx, rax
call fcn.1401421e0
mov dword [rbp + 0xa7e8], 0xfffffffb
mov dword [rbp + 0xa7ec], 0xffffffff
lea rdx, [rbp + 0xa7e8]
lea rax, [rbp + 0xa7ec]
mov rcx, rax
call fcn.1401598d0
mov qword [rbp + 0xa7e0], rax
lea rdx, [rbp + 0xa7e0]
lea rax, [rbp + 0xa4a0]
mov rcx, rax
call fcn.1401421e0
mov dword [rbp + 0xa7f8], 0xfffffffd
mov dword [rbp + 0xa7fc], 0xfffffffb
lea rdx, [rbp + 0xa7f8]
lea rax, [rbp + 0xa7fc]
mov rcx, rax
call fcn.1401598d0
mov qword [rbp + 0xa7f0], rax
lea rdx, [rbp + 0xa7f0]
lea rax, [rbp + 0xa4a0]
mov rcx, rax
call fcn.1401421e0
mov dword [rbp + 0xa808], 0xffffffff
mov dword [rbp + 0xa80c], 0xfffffffd
lea rdx, [rbp + 0xa808]
lea rax, [rbp + 0xa80c]
mov rcx, rax
call fcn.1401598d0
mov qword [rbp + 0xa800], rax
lea rdx, [rbp + 0xa800]
lea rax, [rbp + 0xa4a0]
mov rcx, rax
call fcn.1401421e0
mov dword [rbp + 0xa818], 0xfffffffd
mov dword [rbp + 0xa81c], 0xffffffff
lea rdx, [rbp + 0xa818]
lea rax, [rbp + 0xa81c]
mov rcx, rax
call fcn.1401598d0
mov qword [rbp + 0xa810], rax
lea rdx, [rbp + 0xa810]
lea rax, [rbp + 0xa4a0]
mov rcx, rax
call fcn.1401421e0
mov dword [rbp + 0xa828], 0xfffffffe
mov dword [rbp + 0xa82c], 0xfffffffe
lea rdx, [rbp + 0xa828]
lea rax, [rbp + 0xa82c]
mov rcx, rax
call fcn.1401598d0
mov qword [rbp + 0xa820], rax
lea rdx, [rbp + 0xa820]
lea rax, [rbp + 0xa4a0]
mov rcx, rax
call fcn.1401421e0
mov dword [rbp + 0xa838], 0xffffffff
mov dword [rbp + 0xa83c], 0xffffffff
lea rdx, [rbp + 0xa838]
lea rax, [rbp + 0xa83c]
mov rcx, rax
call fcn.1401598d0
mov qword [rbp + 0xa830], rax
lea rdx, [rbp + 0xa830]
lea rax, [rbp + 0xa4a0]
mov rcx, rax
call fcn.1401421e0
mov dword [rbp + 0xa848], 0xffffffff
mov dword [rbp + 0xa84c], 0xfffffffe
lea rdx, [rbp + 0xa848]
lea rax, [rbp + 0xa84c]
mov rcx, rax
call fcn.1401598d0
mov qword [rbp + 0xa840], rax
lea rdx, [rbp + 0xa840]
lea rax, [rbp + 0xa4a0]
mov rcx, rax
call fcn.1401421e0
mov dword [rbp + 0xa858], 1
mov dword [rbp + 0xa85c], 0xffffffff
lea rdx, [rbp + 0xa858]
lea rax, [rbp + 0xa85c]
mov rcx, rax
call fcn.1401598d0
mov qword [rbp + 0xa850], rax
lea rdx, [rbp + 0xa850]
lea rax, [rbp + 0xa4a0]
mov rcx, rax
call fcn.1401421e0
lea rax, [rbp + 0xa4a0]
mov rcx, rax
call fcn.1400cbf50
mov dword [rbp + 0x1a644], eax
lea rax, [rbp + 0xa4a0]
mov rcx, rax
call fcn.140142130
mov rbx, rax
lea rax, [rbp + 0xa4a0]
mov rcx, rax
call fcn.1401421b0
mov rdx, rbx
mov rcx, rax
call fcn.140158ca0
lea rdx, [rbp + 0xa4a0]
lea rax, [rbp + 0xa860]
mov rcx, rax
call fcn.1401422f0
lea rax, [rbp + 0xa480]
lea rdx, [rbp + 0xa860]
mov rcx, rax
call fcn.14000467d
lea rax, [rbp + 0xa860]
mov rcx, rax
call fcn.140142420
lea rax, [0x1401d1b88]
mov rdx, rax
mov rax, qword [0x1401d8670]
mov rcx, rax
call fcn.14015a590
lea rax, [rbp + 0xa480]
mov qword [rbp + 0x1a638], rax
mov rax, qword [rbp + 0x1a638]
mov rcx, rax
call fcn.1401421b0
mov qword [rbp + 0x5b68], rax
mov rax, qword [rbp + 0x1a638]
mov rcx, rax
call fcn.140142130
mov qword [rbp + 0x5b60], rax
jmp 0x14003ebb1
lea rax, [rbp + 0x5b68]
mov rcx, rax
call fcn.1400c1900
mov rax, qword [rax]
mov qword [rbp + 0x5b70], rax
mov eax, dword [rbp + 0x5b70]
mov edx, eax
mov rax, qword [0x1401d8670]
mov rcx, rax
call fcn.140118c40
mov rcx, rax
lea rax, [0x1401d1b96]
mov rdx, rax
call fcn.14015a590
mov rcx, rax
mov eax, dword [rbp + 0x5b74]
mov edx, eax
call fcn.140118c40
mov rcx, rax
mov rax, qword [0x1401d8680]
mov rdx, rax
call fcn.140118a30
lea rax, [rbp + 0x5b68]
mov rcx, rax
call fcn.1400beba0
lea rdx, [rbp + 0x5b60]
lea rax, [rbp + 0x5b68]
mov rcx, rax
call fcn.1400bff30
test al, al
jne 0x14003eb3e
mov dword [rbp + 0x1afbc], 0x166b
mov dword [rbp + 0x1afb8], 0
jmp 0x14003ecb1
mov ecx, 0x133f8
call fcn.14015cc00
mov qword [rbp + 0x18ca0], rax
mov dword [rbp + 0x1afb4], 0
jmp 0x14003ec81
call sub.msvcrt.dll_rand
mov edx, dword [rbp + 0x1afb4]
movsxd rdx, edx
lea rcx, [rdx*4]
mov rdx, qword [rbp + 0x18ca0]
lea r8, [rcx + rdx]
movsxd rdx, eax
imul rdx, rdx, 0xffffffff957f6129
shr rdx, 0x20
add edx, eax
sar edx, 0xd
mov ecx, eax
sar ecx, 0x1f
sub edx, ecx
imul ecx, edx, 0x36cc
sub eax, ecx
mov edx, eax
mov dword [r8], edx
call sub.msvcrt.dll_rand
movsxd rdx, eax
imul rdx, rdx, 0x97e6c83
shr rdx, 0x20
sar edx, 8
mov ecx, eax
sar ecx, 0x1f
sub edx, ecx
imul ecx, edx, 0x1af7
sub eax, ecx
mov edx, eax
add dword [rbp + 0x1afbc], edx
add dword [rbp + 0x1afb4], 1
cmp dword [rbp + 0x1afb4], 0xa4
jle 0x14003ec05
mov rax, qword [rbp + 0x18ca0]
test rax, rax
je 0x14003ecaa
mov edx, 4
mov rcx, rax
call fcn.14015cbf0
add dword [rbp + 0x1afb8], 1
cmp dword [rbp + 0x1afb8], 0x67c
jle 0x14003ebe8
lea rax, [rbp + 0xa460]
mov rcx, rax
call fcn.140142400
mov dword [rbp + 0xa888], 0
mov dword [rbp + 0xa88c], 0
lea rdx, [rbp + 0xa888]
lea rax, [rbp + 0xa88c]
mov rcx, rax
call fcn.1401598d0
mov qword [rbp + 0xa880], rax
lea rdx, [rbp + 0xa880]
lea rax, [rbp + 0xa460]
mov rcx, rax
call fcn.1401421e0
mov dword [rbp + 0xa898], 0xfffffffc
mov dword [rbp + 0xa89c], 1
lea rdx, [rbp + 0xa898]
lea rax, [rbp + 0xa89c]
mov rcx, rax
call fcn.1401598d0
mov qword [rbp + 0xa890], rax
lea rdx, [rbp + 0xa890]
lea rax, [rbp + 0xa460]
mov rcx, rax
call fcn.1401421e0
mov dword [rbp + 0xa8a8], 0xfffffffb
mov dword [rbp + 0xa8ac], 0xffffffff
lea rdx, [rbp + 0xa8a8]
lea rax, [rbp + 0xa8ac]
mov rcx, rax
call fcn.1401598d0
mov qword [rbp + 0xa8a0], rax
lea rdx, [rbp + 0xa8a0]
lea rax, [rbp + 0xa460]
mov rcx, rax
call fcn.1401421e0
mov dword [rbp + 0xa8b8], 0xfffffffd
mov dword [rbp + 0xa8bc], 0xfffffffb
lea rdx, [rbp + 0xa8b8]
lea rax, [rbp + 0xa8bc]
mov rcx, rax
call fcn.1401598d0
mov qword [rbp + 0xa8b0], rax
lea rdx, [rbp + 0xa8b0]
lea rax, [rbp + 0xa460]
mov rcx, rax
call fcn.1401421e0
mov dword [rbp + 0xa8c8], 0xffffffff
mov dword [rbp + 0xa8cc], 0xfffffffd
lea rdx, [rbp + 0xa8c8]
lea rax, [rbp + 0xa8cc]
mov rcx, rax
call fcn.1401598d0
mov qword [rbp + 0xa8c0], rax
lea rdx, [rbp + 0xa8c0]
lea rax, [rbp + 0xa460]
mov rcx, rax
call fcn.1401421e0
mov dword [rbp + 0xa8d8], 0xfffffffd
mov dword [rbp + 0xa8dc], 0xffffffff
lea rdx, [rbp + 0xa8d8]
lea rax, [rbp + 0xa8dc]
mov rcx, rax
call fcn.1401598d0
mov qword [rbp + 0xa8d0], rax
lea rdx, [rbp + 0xa8d0]
lea rax, [rbp + 0xa460]
mov rcx, rax
call fcn.1401421e0
mov dword [rbp + 0xa8e8], 0xfffffffe
mov dword [rbp + 0xa8ec], 0xfffffffe
lea rdx, [rbp + 0xa8e8]
lea rax, [rbp + 0xa8ec]
mov rcx, rax
call fcn.1401598d0
mov qword [rbp + 0xa8e0], rax
lea rdx, [rbp + 0xa8e0]
lea rax, [rbp + 0xa460]
mov rcx, rax
call fcn.1401421e0
mov dword [rbp + 0xa8f8], 0xffffffff
mov dword [rbp + 0xa8fc], 0xffffffff
lea rdx, [rbp + 0xa8f8]
lea rax, [rbp + 0xa8fc]
mov rcx, rax
call fcn.1401598d0
mov qword [rbp + 0xa8f0], rax
lea rdx, [rbp + 0xa8f0]
lea rax, [rbp + 0xa460]
mov rcx, rax
call fcn.1401421e0
mov dword [rbp + 0xa908], 0xffffffff
mov dword [rbp + 0xa90c], 0xfffffffe
lea rdx, [rbp + 0xa908]
lea rax, [rbp + 0xa90c]
mov rcx, rax
call fcn.1401598d0
mov qword [rbp + 0xa900], rax
lea rdx, [rbp + 0xa900]
lea rax, [rbp + 0xa460]
mov rcx, rax
call fcn.1401421e0
mov dword [rbp + 0xa918], 1
mov dword [rbp + 0xa91c], 0xffffffff
lea rdx, [rbp + 0xa918]
lea rax, [rbp + 0xa91c]
mov rcx, rax
call fcn.1401598d0
mov qword [rbp + 0xa910], rax
lea rdx, [rbp + 0xa910]
lea rax, [rbp + 0xa460]
mov rcx, rax
call fcn.1401421e0
lea rax, [rbp + 0xa460]
mov rcx, rax
call fcn.1400cbf50
mov dword [rbp + 0x1a634], eax
lea rax, [rbp + 0xa460]
mov rcx, rax
call fcn.140142130
mov rbx, rax
lea rax, [rbp + 0xa460]
mov rcx, rax
call fcn.1401421b0
mov rdx, rbx
mov rcx, rax
call fcn.140158ca0
lea rdx, [rbp + 0xa460]
lea rax, [rbp + 0xa920]
mov rcx, rax
call fcn.1401422f0
lea rax, [rbp + 0xa440]
lea rdx, [rbp + 0xa920]
mov rcx, rax
call fcn.14000467d
lea rax, [rbp + 0xa920]
mov rcx, rax
call fcn.140142420
lea rax, [0x1401d1b88]
mov rdx, rax
mov rax, qword [0x1401d8670]
mov rcx, rax
call fcn.14015a590
lea rax, [rbp + 0xa440]
mov qword [rbp + 0x1a628], rax
mov rax, qword [rbp + 0x1a628]
mov rcx, rax
call fcn.1401421b0
mov qword [rbp + 0x5b50], rax
mov rax, qword [rbp + 0x1a628]
mov rcx, rax
call fcn.140142130
mov qword [rbp + 0x5b48], rax
jmp 0x14003f0da
lea rax, [rbp + 0x5b50]
mov rcx, rax
call fcn.1400c1900
mov rax, qword [rax]
mov qword [rbp + 0x5b58], rax
mov eax, dword [rbp + 0x5b58]
mov edx, eax
mov rax, qword [0x1401d8670]
mov rcx, rax
call fcn.140118c40
mov rcx, rax
lea rax, [0x1401d1b96]
mov rdx, rax
call fcn.14015a590
mov rcx, rax
mov eax, dword [rbp + 0x5b5c]
mov edx, eax
call fcn.140118c40
mov rcx, rax
mov rax, qword [0x1401d8680]
mov rdx, rax
call fcn.140118a30
lea rax, [rbp + 0x5b50]
mov rcx, rax
call fcn.1400beba0
lea rdx, [rbp + 0x5b48]
lea rax, [rbp + 0x5b50]
mov rcx, rax
call fcn.1400bff30
test al, al
jne 0x14003f067
mov dword [rbp + 0x1afb0], 0x47b8
mov dword [rbp + 0x1afac], 0
jmp 0x14003f1d8
mov ecx, 0xcbe8
call fcn.14015cc00
mov qword [rbp + 0x18ca8], rax
mov dword [rbp + 0x1afa8], 0
jmp 0x14003f1a8
call sub.msvcrt.dll_rand
mov edx, dword [rbp + 0x1afa8]
movsxd rdx, edx
lea rcx, [rdx*4]
mov rdx, qword [rbp + 0x18ca8]
lea r8, [rcx + rdx]
movsxd rdx, eax
imul rdx, rdx, 0x1cd2a797
shr rdx, 0x20
sar edx, 0xa
mov ecx, eax
sar ecx, 0x1f
sub edx, ecx
imul ecx, edx, 0x2387
sub eax, ecx
mov edx, eax
mov dword [r8], edx
call sub.msvcrt.dll_rand
movsxd rdx, eax
imul rdx, rdx, 0x4422332b
shr rdx, 0x20
sar edx, 0xb
mov ecx, eax
sar ecx, 0x1f
sub edx, ecx
imul ecx, edx, 0x1e0f
sub eax, ecx
mov edx, eax
add dword [rbp + 0x1afb0], edx
add dword [rbp + 0x1afa8], 1
cmp dword [rbp + 0x1afa8], 0x149
jle 0x14003f12e
mov rax, qword [rbp + 0x18ca8]
test rax, rax
je 0x14003f1d1
mov edx, 4
mov rcx, rax
call fcn.14015cbf0
add dword [rbp + 0x1afac], 1
cmp dword [rbp + 0x1afac], 0x5d9
jle 0x14003f111
lea rax, [rbp + 0xa420]
mov rcx, rax
call fcn.140142400
mov dword [rbp + 0xa948], 0
mov dword [rbp + 0xa94c], 0
lea rdx, [rbp + 0xa948]
lea rax, [rbp + 0xa94c]
mov rcx, rax
call fcn.1401598d0
mov qword [rbp + 0xa940], rax
lea rdx, [rbp + 0xa940]
lea rax, [rbp + 0xa420]
mov rcx, rax
call fcn.1401421e0
mov dword [rbp + 0xa958], 0xfffffffc
mov dword [rbp + 0xa95c], 1
lea rdx, [rbp + 0xa958]
lea rax, [rbp + 0xa95c]
mov rcx, rax
call fcn.1401598d0
mov qword [rbp + 0xa950], rax
lea rdx, [rbp + 0xa950]
lea rax, [rbp + 0xa420]
mov rcx, rax
call fcn.1401421e0
mov dword [rbp + 0xa968], 0xfffffffb
mov dword [rbp + 0xa96c], 0xffffffff
lea rdx, [rbp + 0xa968]
lea rax, [rbp + 0xa96c]
mov rcx, rax
call fcn.1401598d0
mov qword [rbp + 0xa960], rax
lea rdx, [rbp + 0xa960]
lea rax, [rbp + 0xa420]
mov rcx, rax
call fcn.1401421e0
mov dword [rbp + 0xa978], 0xfffffffd
mov dword [rbp + 0xa97c], 0xfffffffb
lea rdx, [rbp + 0xa978]
lea rax, [rbp + 0xa97c]
mov rcx, rax
call fcn.1401598d0
mov qword [rbp + 0xa970], rax
lea rdx, [rbp + 0xa970]
lea rax, [rbp + 0xa420]
mov rcx, rax
call fcn.1401421e0
mov dword [rbp + 0xa988], 0xffffffff
mov dword [rbp + 0xa98c], 0xfffffffd
lea rdx, [rbp + 0xa988]
lea rax, [rbp + 0xa98c]
mov rcx, rax
call fcn.1401598d0
mov qword [rbp + 0xa980], rax
lea rdx, [rbp + 0xa980]
lea rax, [rbp + 0xa420]
mov rcx, rax
call fcn.1401421e0
mov dword [rbp + 0xa998], 0xfffffffd
mov dword [rbp + 0xa99c], 0xffffffff
lea rdx, [rbp + 0xa998]
lea rax, [rbp + 0xa99c]
mov rcx, rax
call fcn.1401598d0
mov qword [rbp + 0xa990], rax
lea rdx, [rbp + 0xa990]
lea rax, [rbp + 0xa420]
mov rcx, rax
call fcn.1401421e0
mov dword [rbp + 0xa9a8], 0xfffffffe
mov dword [rbp + 0xa9ac], 0xfffffffe
lea rdx, [rbp + 0xa9a8]
lea rax, [rbp + 0xa9ac]
mov rcx, rax
call fcn.1401598d0
mov qword [rbp + 0xa9a0], rax
lea rdx, [rbp + 0xa9a0]
lea rax, [rbp + 0xa420]
mov rcx, rax
call fcn.1401421e0
mov dword [rbp + 0xa9b8], 0xffffffff
mov dword [rbp + 0xa9bc], 0xffffffff
lea rdx, [rbp + 0xa9b8]
lea rax, [rbp + 0xa9bc]
mov rcx, rax
call fcn.1401598d0
mov qword [rbp + 0xa9b0], rax
lea rdx, [rbp + 0xa9b0]
lea rax, [rbp + 0xa420]
mov rcx, rax
call fcn.1401421e0
mov dword [rbp + 0xa9c8], 0xffffffff
mov dword [rbp + 0xa9cc], 0xfffffffe
lea rdx, [rbp + 0xa9c8]
lea rax, [rbp + 0xa9cc]
mov rcx, rax
call fcn.1401598d0
mov qword [rbp + 0xa9c0], rax
lea rdx, [rbp + 0xa9c0]
lea rax, [rbp + 0xa420]
mov rcx, rax
call fcn.1401421e0
mov dword [rbp + 0xa9d8], 1
mov dword [rbp + 0xa9dc], 0xffffffff
lea rdx, [rbp + 0xa9d8]
lea rax, [rbp + 0xa9dc]
mov rcx, rax
call fcn.1401598d0
mov qword [rbp + 0xa9d0], rax
lea rdx, [rbp + 0xa9d0]
lea rax, [rbp + 0xa420]
mov rcx, rax
call fcn.1401421e0
lea rax, [rbp + 0xa420]
mov rcx, rax
call fcn.1400cbf50
mov dword [rbp + 0x1a624], eax
lea rax, [rbp + 0xa420]
mov rcx, rax
call fcn.140142130
mov rbx, rax
lea rax, [rbp + 0xa420]
mov rcx, rax
call fcn.1401421b0
mov rdx, rbx
mov rcx, rax
call fcn.140158ca0
lea rdx, [rbp + 0xa420]
lea rax, [rbp + 0xa9e0]
mov rcx, rax
call fcn.1401422f0
lea rax, [rbp + 0xa400]
lea rdx, [rbp + 0xa9e0]
mov rcx, rax
call fcn.14000467d
lea rax, [rbp + 0xa9e0]
mov rcx, rax
call fcn.140142420
lea rax, [0x1401d1b88]
mov rdx, rax
mov rax, qword [0x1401d8670]
mov rcx, rax
call fcn.14015a590
lea rax, [rbp + 0xa400]
mov qword [rbp + 0x1a618], rax
mov rax, qword [rbp + 0x1a618]
mov rcx, rax
call fcn.1401421b0
mov qword [rbp + 0x5b38], rax
mov rax, qword [rbp + 0x1a618]
mov rcx, rax
call fcn.140142130
mov qword [rbp + 0x5b30], rax
jmp 0x14003f601
lea rax, [rbp + 0x5b38]
mov rcx, rax
call fcn.1400c1900
mov rax, qword [rax]
mov qword [rbp + 0x5b40], rax
mov eax, dword [rbp + 0x5b40]
mov edx, eax
mov rax, qword [0x1401d8670]
mov rcx, rax
call fcn.140118c40
mov rcx, rax
lea rax, [0x1401d1b96]
mov rdx, rax
call fcn.14015a590
mov rcx, rax
mov eax, dword [rbp + 0x5b44]
mov edx, eax
call fcn.140118c40
mov rcx, rax
mov rax, qword [0x1401d8680]
mov rdx, rax
call fcn.140118a30
lea rax, [rbp + 0x5b38]
mov rcx, rax
call fcn.1400beba0
lea rdx, [rbp + 0x5b30]
lea rax, [rbp + 0x5b38]
mov rcx, rax
call fcn.1400bff30
test al, al
jne 0x14003f58e
mov dword [rbp + 0x1afa4], 0x6949
mov dword [rbp + 0x1afa0], 0
jmp 0x14003f6ff
mov ecx, 0x15114
call fcn.14015cc00
mov qword [rbp + 0x18cb0], rax
mov dword [rbp + 0x1af9c], 0
jmp 0x14003f6cf
call sub.msvcrt.dll_rand
mov edx, dword [rbp + 0x1af9c]
movsxd rdx, edx
lea rcx, [rdx*4]
mov rdx, qword [rbp + 0x18cb0]
lea r8, [rcx + rdx]
movsxd rdx, eax
imul rdx, rdx, 0x5ce8d169
shr rdx, 0x20
sar edx, 0xb
mov ecx, eax
sar ecx, 0x1f
sub edx, ecx
imul ecx, edx, 0x160b
sub eax, ecx
mov edx, eax
mov dword [r8], edx
call sub.msvcrt.dll_rand
movsxd rdx, eax
imul rdx, rdx, 0x67e43371
shr rdx, 0x20
sar edx, 0xc
mov ecx, eax
sar ecx, 0x1f
sub edx, ecx
imul ecx, edx, 0x276d
sub eax, ecx
mov edx, eax
add dword [rbp + 0x1afa4], edx
add dword [rbp + 0x1af9c], 1
cmp dword [rbp + 0x1af9c], 0x81
jle 0x14003f655
mov rax, qword [rbp + 0x18cb0]
test rax, rax
je 0x14003f6f8
mov edx, 4
mov rcx, rax
call fcn.14015cbf0
add dword [rbp + 0x1afa0], 1
cmp dword [rbp + 0x1afa0], 0x6a8
jle 0x14003f638
lea rax, [rbp + 0xa3e0]
mov rcx, rax
call fcn.140142400
mov dword [rbp + 0xaa08], 0
mov dword [rbp + 0xaa0c], 0
lea rdx, [rbp + 0xaa08]
lea rax, [rbp + 0xaa0c]
mov rcx, rax
call fcn.1401598d0
mov qword [rbp + 0xaa00], rax
lea rdx, [rbp + 0xaa00]
lea rax, [rbp + 0xa3e0]
mov rcx, rax
call fcn.1401421e0
mov dword [rbp + 0xaa18], 0xfffffffc
mov dword [rbp + 0xaa1c], 1
lea rdx, [rbp + 0xaa18]
lea rax, [rbp + 0xaa1c]
mov rcx, rax
call fcn.1401598d0
mov qword [rbp + 0xaa10], rax
lea rdx, [rbp + 0xaa10]
lea rax, [rbp + 0xa3e0]
mov rcx, rax
call fcn.1401421e0
mov dword [rbp + 0xaa28], 0xfffffffb
mov dword [rbp + 0xaa2c], 0xffffffff
lea rdx, [rbp + 0xaa28]
lea rax, [rbp + 0xaa2c]
mov rcx, rax
call fcn.1401598d0
mov qword [rbp + 0xaa20], rax
lea rdx, [rbp + 0xaa20]
lea rax, [rbp + 0xa3e0]
mov rcx, rax
call fcn.1401421e0
mov dword [rbp + 0xaa38], 0xfffffffd
mov dword [rbp + 0xaa3c], 0xfffffffb
lea rdx, [rbp + 0xaa38]
lea rax, [rbp + 0xaa3c]
mov rcx, rax
call fcn.1401598d0
mov qword [rbp + 0xaa30], rax
lea rdx, [rbp + 0xaa30]
lea rax, [rbp + 0xa3e0]
mov rcx, rax
call fcn.1401421e0
mov dword [rbp + 0xaa48], 0xffffffff
mov dword [rbp + 0xaa4c], 0xfffffffd
lea rdx, [rbp + 0xaa48]
lea rax, [rbp + 0xaa4c]
mov rcx, rax
call fcn.1401598d0
mov qword [rbp + 0xaa40], rax
lea rdx, [rbp + 0xaa40]
lea rax, [rbp + 0xa3e0]
mov rcx, rax
call fcn.1401421e0
mov dword [rbp + 0xaa58], 0xfffffffd
mov dword [rbp + 0xaa5c], 0xffffffff
lea rdx, [rbp + 0xaa58]
lea rax, [rbp + 0xaa5c]
mov rcx, rax
call fcn.1401598d0
mov qword [rbp + 0xaa50], rax
lea rdx, [rbp + 0xaa50]
lea rax, [rbp + 0xa3e0]
mov rcx, rax
call fcn.1401421e0
mov dword [rbp + 0xaa68], 0xfffffffe
mov dword [rbp + 0xaa6c], 0xfffffffe
lea rdx, [rbp + 0xaa68]
lea rax, [rbp + 0xaa6c]
mov rcx, rax
call fcn.1401598d0
mov qword [rbp + 0xaa60], rax
lea rdx, [rbp + 0xaa60]
lea rax, [rbp + 0xa3e0]
mov rcx, rax
call fcn.1401421e0
mov dword [rbp + 0xaa78], 0xffffffff
mov dword [rbp + 0xaa7c], 0xffffffff
lea rdx, [rbp + 0xaa78]
lea rax, [rbp + 0xaa7c]
mov rcx, rax
call fcn.1401598d0
mov qword [rbp + 0xaa70], rax
lea rdx, [rbp + 0xaa70]
lea rax, [rbp + 0xa3e0]
mov rcx, rax
call fcn.1401421e0
mov dword [rbp + 0xaa88], 0xffffffff
mov dword [rbp + 0xaa8c], 0xfffffffe
lea rdx, [rbp + 0xaa88]
lea rax, [rbp + 0xaa8c]
mov rcx, rax
call fcn.1401598d0
mov qword [rbp + 0xaa80], rax
lea rdx, [rbp + 0xaa80]
lea rax, [rbp + 0xa3e0]
mov rcx, rax
call fcn.1401421e0
mov dword [rbp + 0xaa98], 1
mov dword [rbp + 0xaa9c], 0xffffffff
lea rdx, [rbp + 0xaa98]
lea rax, [rbp + 0xaa9c]
mov rcx, rax
call fcn.1401598d0
mov qword [rbp + 0xaa90], rax
lea rdx, [rbp + 0xaa90]
lea rax, [rbp + 0xa3e0]
mov rcx, rax
call fcn.1401421e0
lea rax, [rbp + 0xa3e0]
mov rcx, rax
call fcn.1400cbf50
mov dword [rbp + 0x1a614], eax
lea rax, [rbp + 0xa3e0]
mov rcx, rax
call fcn.140142130
mov rbx, rax
lea rax, [rbp + 0xa3e0]
mov rcx, rax
call fcn.1401421b0
mov rdx, rbx
mov rcx, rax
call fcn.140158ca0
lea rdx, [rbp + 0xa3e0]
lea rax, [rbp + 0xaaa0]
mov rcx, rax
call fcn.1401422f0
lea rax, [rbp + 0xa3c0]
lea rdx, [rbp + 0xaaa0]
mov rcx, rax
call fcn.14000467d
lea rax, [rbp + 0xaaa0]
mov rcx, rax
call fcn.140142420
lea rax, [0x1401d1b88]
mov rdx, rax
mov rax, qword [0x1401d8670]
mov rcx, rax
call fcn.14015a590
lea rax, [rbp + 0xa3c0]
mov qword [rbp + 0x1a608], rax
mov rax, qword [rbp + 0x1a608]
mov rcx, rax
call fcn.1401421b0
mov qword [rbp + 0x5b20], rax
mov rax, qword [rbp + 0x1a608]
mov rcx, rax
call fcn.140142130
mov qword [rbp + 0x5b18], rax
jmp 0x14003fb28
lea rax, [rbp + 0x5b20]
mov rcx, rax
call fcn.1400c1900
mov rax, qword [rax]
mov qword [rbp + 0x5b28], rax
mov eax, dword [rbp + 0x5b28]
mov edx, eax
mov rax, qword [0x1401d8670]
mov rcx, rax
call fcn.140118c40
mov rcx, rax
lea rax, [0x1401d1b96]
mov rdx, rax
call fcn.14015a590
mov rcx, rax
mov eax, dword [rbp + 0x5b2c]
mov edx, eax
call fcn.140118c40
mov rcx, rax
mov rax, qword [0x1401d8680]
mov rdx, rax
call fcn.140118a30
lea rax, [rbp + 0x5b20]
mov rcx, rax
call fcn.1400beba0
lea rdx, [rbp + 0x5b18]
lea rax, [rbp + 0x5b20]
mov rcx, rax
call fcn.1400bff30
test al, al
jne 0x14003fab5
movss xmm0, dword [0x1401d21e0]
movss dword [rbp + 0x1af98], xmm0
movss xmm0, dword [0x1401d21e4]
movss dword [rbp + 0x1af98], xmm0
pxor xmm0, xmm0
cvtss2sd xmm0, dword [rbp + 0x1af98]
ucomisd xmm0, qword [0x1401d21e8]
jp 0x14003fca5
ucomisd xmm0, qword [0x1401d21e8]
jne 0x14003fca5
mov dword [rbp + 0x1af94], 0
jmp 0x14003fc75
mov ecx, 0x16af0
call fcn.14015cc00
mov qword [rbp + 0x1a600], rax
mov dword [rbp + 0x1af90], 0
jmp 0x14003fc45
call sub.msvcrt.dll_rand
mov edx, dword [rbp + 0x1af90]
movsxd rdx, edx
lea rcx, [rdx*4]
mov rdx, qword [rbp + 0x1a600]
lea r8, [rcx + rdx]
movsxd rdx, eax
imul rdx, rdx, 0xffffffff9fd1cd5b
shr rdx, 0x20
add edx, eax
sar edx, 0xc
mov ecx, eax
sar ecx, 0x1f
sub edx, ecx
imul ecx, edx, 0x19a1
sub eax, ecx
mov edx, eax
mov dword [r8], edx
call sub.msvcrt.dll_rand
pxor xmm0, xmm0
cvtsi2sd xmm0, eax
movsd xmm2, qword [0x1401d21f0]
movapd xmm1, xmm0
subsd xmm1, xmm2
pxor xmm0, xmm0
cvtss2sd xmm0, dword [rbp + 0x1af98]
addsd xmm0, xmm1
cvtsd2ss xmm0, xmm0
movss dword [rbp + 0x1af98], xmm0
add dword [rbp + 0x1af90], 1
cmp dword [rbp + 0x1af90], 0x1bf
jle 0x14003fbbd
mov rax, qword [rbp + 0x1a600]
test rax, rax
je 0x14003fc6e
mov edx, 4
mov rcx, rax
call fcn.14015cbf0
add dword [rbp + 0x1af94], 1
cmp dword [rbp + 0x1af94], 0x13ba
jle 0x14003fb9d
movss xmm0, dword [0x1401d21f8]
movss dword [rbp + 0x1af98], xmm0
movss xmm0, dword [0x1401d21fc]
movss dword [rbp + 0x1af98], xmm0
pxor xmm0, xmm0
cvtss2sd xmm0, dword [rbp + 0x1af98]
ucomisd xmm0, qword [0x1401d2200]
jp 0x14003fde2
ucomisd xmm0, qword [0x1401d2200]
jne 0x14003fde2
mov dword [rbp + 0x1af8c], 0
jmp 0x14003fdb2
mov ecx, 0xc4a4
call fcn.14015cc00
mov qword [rbp + 0x1a5f8], rax
mov dword [rbp + 0x1af88], 0
jmp 0x14003fd82
call sub.msvcrt.dll_rand
mov edx, dword [rbp + 0x1af88]
movsxd rdx, edx
lea rcx, [rdx*4]
mov rdx, qword [rbp + 0x1a5f8]
lea r8, [rcx + rdx]
movsxd rdx, eax
imul rdx, rdx, 0x5c6f35cd
shr rdx, 0x20
sar edx, 0xb
mov ecx, eax
sar ecx, 0x1f
sub edx, ecx
imul ecx, edx, 0x1628
sub eax, ecx
mov edx, eax
mov dword [r8], edx
call sub.msvcrt.dll_rand
pxor xmm0, xmm0
cvtsi2sd xmm0, eax
movsd xmm2, qword [0x1401d2208]
movapd xmm1, xmm0
subsd xmm1, xmm2
pxor xmm0, xmm0
cvtss2sd xmm0, dword [rbp + 0x1af98]
addsd xmm0, xmm1
cvtsd2ss xmm0, xmm0
movss dword [rbp + 0x1af98], xmm0
add dword [rbp + 0x1af88], 1
cmp dword [rbp + 0x1af88], 0x128
jle 0x14003fcfc
mov rax, qword [rbp + 0x1a5f8]
test rax, rax
je 0x14003fdab
mov edx, 4
mov rcx, rax
call fcn.14015cbf0
add dword [rbp + 0x1af8c], 1
cmp dword [rbp + 0x1af8c], 0x1393
jle 0x14003fcdc
movss xmm0, dword [0x1401d2210]
movss dword [rbp + 0x1af98], xmm0
movss xmm0, dword [str.KGYG::]
movss dword [rbp + 0x1af98], xmm0
mov dword [rbp + 0x1af84], 0x4030
mov dword [rbp + 0x1af80], 0
jmp 0x14003fec4
mov ecx, 0x16120
call fcn.14015cc00
mov qword [rbp + 0x18cb8], rax
mov dword [rbp + 0x1af7c], 0
jmp 0x14003fe94
call sub.msvcrt.dll_rand
mov edx, dword [rbp + 0x1af7c]
movsxd rdx, edx
lea rcx, [rdx*4]
mov rdx, qword [rbp + 0x18cb8]
lea r8, [rcx + rdx]
movsxd rdx, eax
imul rdx, rdx, 0x2f5fbe1f
shr rdx, 0x20
sar edx, 0xb
mov ecx, eax
sar ecx, 0x1f
sub edx, ecx
imul ecx, edx, 0x2b3b
sub eax, ecx
mov edx, eax
mov dword [r8], edx
call sub.msvcrt.dll_rand
movsxd rdx, eax
imul rdx, rdx, 0xffffffff9d596e55
shr rdx, 0x20
add edx, eax
sar edx, 0xc
mov ecx, eax
sar ecx, 0x1f
sub edx, ecx
imul ecx, edx, 0x1a08
sub eax, ecx
mov edx, eax
add dword [rbp + 0x1af84], edx
add dword [rbp + 0x1af7c], 1
cmp dword [rbp + 0x1af7c], 0x1e0
jle 0x14003fe18
mov rax, qword [rbp + 0x18cb8]
test rax, rax
je 0x14003febd
mov edx, 4
mov rcx, rax
call fcn.14015cbf0
add dword [rbp + 0x1af80], 1
cmp dword [rbp + 0x1af80], 0x605
jle 0x14003fdfb
lea rax, [rbp + 0xa3a0]
mov rcx, rax
call fcn.140142400
mov dword [rbp + 0xaac8], 0
mov dword [rbp + 0xaacc], 0
lea rdx, [rbp + 0xaac8]
lea rax, [rbp + 0xaacc]
mov rcx, rax
call fcn.1401598d0
mov qword [rbp + 0xaac0], rax
lea rdx, [rbp + 0xaac0]
lea rax, [rbp + 0xa3a0]
mov rcx, rax
call fcn.1401421e0
mov dword [rbp + 0xaad8], 0xfffffffc
mov dword [rbp + 0xaadc], 1
lea rdx, [rbp + 0xaad8]
lea rax, [rbp + 0xaadc]
mov rcx, rax
call fcn.1401598d0
mov qword [rbp + 0xaad0], rax
lea rdx, [rbp + 0xaad0]
lea rax, [rbp + 0xa3a0]
mov rcx, rax
call fcn.1401421e0
mov dword [rbp + 0xaae8], 0xfffffffb
mov dword [rbp + 0xaaec], 0xffffffff
lea rdx, [rbp + 0xaae8]
lea rax, [rbp + 0xaaec]
mov rcx, rax
call fcn.1401598d0
mov qword [rbp + 0xaae0], rax
lea rdx, [rbp + 0xaae0]
lea rax, [rbp + 0xa3a0]
mov rcx, rax
call fcn.1401421e0
mov dword [rbp + 0xaaf8], 0xfffffffd
mov dword [rbp + 0xaafc], 0xfffffffb
lea rdx, [rbp + 0xaaf8]
lea rax, [rbp + 0xaafc]
mov rcx, rax
call fcn.1401598d0
mov qword [rbp + 0xaaf0], rax
lea rdx, [rbp + 0xaaf0]
lea rax, [rbp + 0xa3a0]
mov rcx, rax
call fcn.1401421e0
mov dword [rbp + 0xab08], 0xffffffff
mov dword [rbp + 0xab0c], 0xfffffffd
lea rdx, [rbp + 0xab08]
lea rax, [rbp + 0xab0c]
mov rcx, rax
call fcn.1401598d0
mov qword [rbp + 0xab00], rax
lea rdx, [rbp + 0xab00]
lea rax, [rbp + 0xa3a0]
mov rcx, rax
call fcn.1401421e0
mov dword [rbp + 0xab18], 0xfffffffd
mov dword [rbp + 0xab1c], 0xffffffff
lea rdx, [rbp + 0xab18]
lea rax, [rbp + 0xab1c]
mov rcx, rax
call fcn.1401598d0
mov qword [rbp + 0xab10], rax
lea rdx, [rbp + 0xab10]
lea rax, [rbp + 0xa3a0]
mov rcx, rax
call fcn.1401421e0
mov dword [rbp + 0xab28], 0xfffffffe
mov dword [rbp + 0xab2c], 0xfffffffe
lea rdx, [rbp + 0xab28]
lea rax, [rbp + 0xab2c]
mov rcx, rax
call fcn.1401598d0
mov qword [rbp + 0xab20], rax
lea rdx, [rbp + 0xab20]
lea rax, [rbp + 0xa3a0]
mov rcx, rax
call fcn.1401421e0
mov dword [rbp + 0xab38], 0xffffffff
mov dword [rbp + 0xab3c], 0xffffffff
lea rdx, [rbp + 0xab38]
lea rax, [rbp + 0xab3c]
mov rcx, rax
call fcn.1401598d0
mov qword [rbp + 0xab30], rax
lea rdx, [rbp + 0xab30]
lea rax, [rbp + 0xa3a0]
mov rcx, rax
call fcn.1401421e0
mov dword [rbp + 0xab48], 0xffffffff
mov dword [rbp + 0xab4c], 0xfffffffe
lea rdx, [rbp + 0xab48]
lea rax, [rbp + 0xab4c]
mov rcx, rax
call fcn.1401598d0
mov qword [rbp + 0xab40], rax
lea rdx, [rbp + 0xab40]
lea rax, [rbp + 0xa3a0]
mov rcx, rax
call fcn.1401421e0
mov dword [rbp + 0xab58], 1
mov dword [rbp + 0xab5c], 0xffffffff
lea rdx, [rbp + 0xab58]
lea rax, [rbp + 0xab5c]
mov rcx, rax
call fcn.1401598d0
mov qword [rbp + 0xab50], rax
lea rdx, [rbp + 0xab50]
lea rax, [rbp + 0xa3a0]
mov rcx, rax
call fcn.1401421e0
lea rax, [rbp + 0xa3a0]
mov rcx, rax
call fcn.1400cbf50
mov dword [rbp + 0x1a5f4], eax
lea rax, [rbp + 0xa3a0]
mov rcx, rax
call fcn.140142130
mov rbx, rax
lea rax, [rbp + 0xa3a0]
mov rcx, rax
call fcn.1401421b0
mov rdx, rbx
mov rcx, rax
call fcn.140158ca0
lea rdx, [rbp + 0xa3a0]
lea rax, [rbp + 0xab60]
mov rcx, rax
call fcn.1401422f0
lea rax, [rbp + 0xa380]
lea rdx, [rbp + 0xab60]
mov rcx, rax
call fcn.14000467d
lea rax, [rbp + 0xab60]
mov rcx, rax
call fcn.140142420
lea rax, [0x1401d1b88]
mov rdx, rax
mov rax, qword [0x1401d8670]
mov rcx, rax
call fcn.14015a590
lea rax, [rbp + 0xa380]
mov qword [rbp + 0x1a5e8], rax
mov rax, qword [rbp + 0x1a5e8]
mov rcx, rax
call fcn.1401421b0
mov qword [rbp + 0x5b08], rax
mov rax, qword [rbp + 0x1a5e8]
mov rcx, rax
call fcn.140142130
mov qword [rbp + 0x5b00], rax
jmp 0x1400402ed
lea rax, [rbp + 0x5b08]
mov rcx, rax
call fcn.1400c1900
mov rax, qword [rax]
mov qword [rbp + 0x5b10], rax
mov eax, dword [rbp + 0x5b10]
mov edx, eax
mov rax, qword [0x1401d8670]
mov rcx, rax
call fcn.140118c40
mov rcx, rax
lea rax, [0x1401d1b96]
mov rdx, rax
call fcn.14015a590
mov rcx, rax
mov eax, dword [rbp + 0x5b14]
mov edx, eax
call fcn.140118c40
mov rcx, rax
mov rax, qword [0x1401d8680]
mov rdx, rax
call fcn.140118a30
lea rax, [rbp + 0x5b08]
mov rcx, rax
call fcn.1400beba0
lea rdx, [rbp + 0x5b00]
lea rax, [rbp + 0x5b08]
mov rcx, rax
call fcn.1400bff30
test al, al
jne 0x14004027a
mov dword [rbp + 0x1af78], 0x3576
mov dword [rbp + 0x1af74], 0
jmp 0x1400403eb
mov ecx, 0x216d0
call fcn.14015cc00
mov qword [rbp + 0x18cc0], rax
mov dword [rbp + 0x1af70], 0
jmp 0x1400403bb
call sub.msvcrt.dll_rand
mov edx, dword [rbp + 0x1af70]
movsxd rdx, edx
lea rcx, [rdx*4]
mov rdx, qword [rbp + 0x18cc0]
lea r8, [rcx + rdx]
movsxd rdx, eax
imul rdx, rdx, 0x6ffdd00b
shr rdx, 0x20
sar edx, 0xc
mov ecx, eax
sar ecx, 0x1f
sub edx, ecx
imul ecx, edx, 0x2493
sub eax, ecx
mov edx, eax
mov dword [r8], edx
call sub.msvcrt.dll_rand
movsxd rdx, eax
imul rdx, rdx, 0x252e501
shr rdx, 0x20
sar edx, 7
mov ecx, eax
sar ecx, 0x1f
sub edx, ecx
imul ecx, edx, 0x3715
sub eax, ecx
mov edx, eax
add dword [rbp + 0x1af78], edx
add dword [rbp + 0x1af70], 1
cmp dword [rbp + 0x1af70], 0x198
jle 0x140040341
mov rax, qword [rbp + 0x18cc0]
test rax, rax
je 0x1400403e4
mov edx, 4
mov rcx, rax
call fcn.14015cbf0
add dword [rbp + 0x1af74], 1
cmp dword [rbp + 0x1af74], 0x591
jle 0x140040324
lea rax, [rbp + 0xa360]
mov rcx, rax
call fcn.140142400
mov dword [rbp + 0xab88], 0
mov dword [rbp + 0xab8c], 0
lea rdx, [rbp + 0xab88]
lea rax, [rbp + 0xab8c]
mov rcx, rax
call fcn.1401598d0
mov qword [rbp + 0xab80], rax
lea rdx, [rbp + 0xab80]
lea rax, [rbp + 0xa360]
mov rcx, rax
call fcn.1401421e0
mov dword [rbp + 0xab98], 0xfffffffc
mov dword [rbp + 0xab9c], 1
lea rdx, [rbp + 0xab98]
lea rax, [rbp + 0xab9c]
mov rcx, rax
call fcn.1401598d0
mov qword [rbp + 0xab90], rax
lea rdx, [rbp + 0xab90]
lea rax, [rbp + 0xa360]
mov rcx, rax
call fcn.1401421e0
mov dword [rbp + 0xaba8], 0xfffffffb
mov dword [rbp + 0xabac], 0xffffffff
lea rdx, [rbp + 0xaba8]
lea rax, [rbp + 0xabac]
mov rcx, rax
call fcn.1401598d0
mov qword [rbp + 0xaba0], rax
lea rdx, [rbp + 0xaba0]
lea rax, [rbp + 0xa360]
mov rcx, rax
call fcn.1401421e0
mov dword [rbp + 0xabb8], 0xfffffffd
mov dword [rbp + 0xabbc], 0xfffffffb
lea rdx, [rbp + 0xabb8]
lea rax, [rbp + 0xabbc]
mov rcx, rax
call fcn.1401598d0
mov qword [rbp + 0xabb0], rax
lea rdx, [rbp + 0xabb0]
lea rax, [rbp + 0xa360]
mov rcx, rax
call fcn.1401421e0
mov dword [rbp + 0xabc8], 0xffffffff
mov dword [rbp + 0xabcc], 0xfffffffd
lea rdx, [rbp + 0xabc8]
lea rax, [rbp + 0xabcc]
mov rcx, rax
call fcn.1401598d0
mov qword [rbp + 0xabc0], rax
lea rdx, [rbp + 0xabc0]
lea rax, [rbp + 0xa360]
mov rcx, rax
call fcn.1401421e0
mov dword [rbp + 0xabd8], 0xfffffffd
mov dword [rbp + 0xabdc], 0xffffffff
lea rdx, [rbp + 0xabd8]
lea rax, [rbp + 0xabdc]
mov rcx, rax
call fcn.1401598d0
mov qword [rbp + 0xabd0], rax
lea rdx, [rbp + 0xabd0]
lea rax, [rbp + 0xa360]
mov rcx, rax
call fcn.1401421e0
mov dword [rbp + 0xabe8], 0xfffffffe
mov dword [rbp + 0xabec], 0xfffffffe
lea rdx, [rbp + 0xabe8]
lea rax, [rbp + 0xabec]
mov rcx, rax
call fcn.1401598d0
mov qword [rbp + 0xabe0], rax
lea rdx, [rbp + 0xabe0]
lea rax, [rbp + 0xa360]
mov rcx, rax
call fcn.1401421e0
mov dword [rbp + 0xabf8], 0xffffffff
mov dword [rbp + 0xabfc], 0xffffffff
lea rdx, [rbp + 0xabf8]
lea rax, [rbp + 0xabfc]
mov rcx, rax
call fcn.1401598d0
mov qword [rbp + 0xabf0], rax
lea rdx, [rbp + 0xabf0]
lea rax, [rbp + 0xa360]
mov rcx, rax
call fcn.1401421e0
mov dword [rbp + 0xac08], 0xffffffff
mov dword [rbp + 0xac0c], 0xfffffffe
lea rdx, [rbp + 0xac08]
lea rax, [rbp + 0xac0c]
mov rcx, rax
call fcn.1401598d0
mov qword [rbp + 0xac00], rax
lea rdx, [rbp + 0xac00]
lea rax, [rbp + 0xa360]
mov rcx, rax
call fcn.1401421e0
mov dword [rbp + 0xac18], 1
mov dword [rbp + 0xac1c], 0xffffffff
lea rdx, [rbp + 0xac18]
lea rax, [rbp + 0xac1c]
mov rcx, rax
call fcn.1401598d0
mov qword [rbp + 0xac10], rax
lea rdx, [rbp + 0xac10]
lea rax, [rbp + 0xa360]
mov rcx, rax
call fcn.1401421e0
lea rax, [rbp + 0xa360]
mov rcx, rax
call fcn.1400cbf50
mov dword [rbp + 0x1a5e4], eax
lea rax, [rbp + 0xa360]
mov rcx, rax
call fcn.140142130
mov rbx, rax
lea rax, [rbp + 0xa360]
mov rcx, rax
call fcn.1401421b0
mov rdx, rbx
mov rcx, rax
call fcn.140158ca0
lea rdx, [rbp + 0xa360]
lea rax, [rbp + 0xac20]
mov rcx, rax
call fcn.1401422f0
lea rax, [rbp + 0xa340]
lea rdx, [rbp + 0xac20]
mov rcx, rax
call fcn.14000467d
lea rax, [rbp + 0xac20]
mov rcx, rax
call fcn.140142420
lea rax, [0x1401d1b88]
mov rdx, rax
mov rax, qword [0x1401d8670]
mov rcx, rax
call fcn.14015a590
lea rax, [rbp + 0xa340]
mov qword [rbp + 0x1a5d8], rax
mov rax, qword [rbp + 0x1a5d8]
mov rcx, rax
call fcn.1401421b0
mov qword [rbp + 0x5af0], rax
mov rax, qword [rbp + 0x1a5d8]
mov rcx, rax
call fcn.140142130
mov qword [rbp + 0x5ae8], rax
jmp 0x140040814
lea rax, [rbp + 0x5af0]
mov rcx, rax
call fcn.1400c1900
mov rax, qword [rax]
mov qword [rbp + 0x5af8], rax
mov eax, dword [rbp + 0x5af8]
mov edx, eax
mov rax, qword [0x1401d8670]
mov rcx, rax
call fcn.140118c40
mov rcx, rax
lea rax, [0x1401d1b96]
mov rdx, rax
call fcn.14015a590
mov rcx, rax
mov eax, dword [rbp + 0x5afc]
mov edx, eax
call fcn.140118c40
mov rcx, rax
mov rax, qword [0x1401d8680]
mov rdx, rax
call fcn.140118a30
lea rax, [rbp + 0x5af0]
mov rcx, rax
call fcn.1400beba0
lea rdx, [rbp + 0x5ae8]
lea rax, [rbp + 0x5af0]
mov rcx, rax
call fcn.1400bff30
test al, al
jne 0x1400407a1
mov dword [rbp + 0x1af6c], 0x6b85
mov dword [rbp + 0x1af68], 0
jmp 0x140040916
mov ecx, 0xdfd8
call fcn.14015cc00
mov qword [rbp + 0x18cc8], rax
mov dword [rbp + 0x1af64], 0
jmp 0x1400408e6
call sub.msvcrt.dll_rand
mov edx, dword [rbp + 0x1af64]
movsxd rdx, edx
lea rcx, [rdx*4]
mov rdx, qword [rbp + 0x18cc8]
lea r8, [rcx + rdx]
movsxd rdx, eax
imul rdx, rdx, 0xffffffffcc8f6e93
shr rdx, 0x20
add edx, eax
sar edx, 0xd
mov ecx, eax
sar ecx, 0x1f
sub edx, ecx
imul ecx, edx, 0x280c
sub eax, ecx
mov edx, eax
mov dword [r8], edx
call sub.msvcrt.dll_rand
movsxd rdx, eax
imul rdx, rdx, 0xffffffff994fd197
shr rdx, 0x20
add edx, eax
sar edx, 0xd
mov ecx, eax
sar ecx, 0x1f
sub edx, ecx
imul ecx, edx, 0x356f
sub eax, ecx
mov edx, eax
add dword [rbp + 0x1af6c], edx
add dword [rbp + 0x1af64], 1
cmp dword [rbp + 0x1af64], 0x117
jle 0x140040868
mov rax, qword [rbp + 0x18cc8]
test rax, rax
je 0x14004090f
mov edx, 4
mov rcx, rax
call fcn.14015cbf0
add dword [rbp + 0x1af68], 1
cmp dword [rbp + 0x1af68], 0x542
jle 0x14004084b
lea rax, [rbp + 0xa320]
mov rcx, rax
call fcn.140142400
mov dword [rbp + 0xac48], 0
mov dword [rbp + 0xac4c], 0
lea rdx, [rbp + 0xac48]
lea rax, [rbp + 0xac4c]
mov rcx, rax
call fcn.1401598d0
mov qword [rbp + 0xac40], rax
lea rdx, [rbp + 0xac40]
lea rax, [rbp + 0xa320]
mov rcx, rax
call fcn.1401421e0
mov dword [rbp + 0xac58], 0xfffffffc
mov dword [rbp + 0xac5c], 1
lea rdx, [rbp + 0xac58]
lea rax, [rbp + 0xac5c]
mov rcx, rax
call fcn.1401598d0
mov qword [rbp + 0xac50], rax
lea rdx, [rbp + 0xac50]
lea rax, [rbp + 0xa320]
mov rcx, rax
call fcn.1401421e0
mov dword [rbp + 0xac68], 0xfffffffb
mov dword [rbp + 0xac6c], 0xffffffff
lea rdx, [rbp + 0xac68]
lea rax, [rbp + 0xac6c]
mov rcx, rax
call fcn.1401598d0
mov qword [rbp + 0xac60], rax
lea rdx, [rbp + 0xac60]
lea rax, [rbp + 0xa320]
mov rcx, rax
call fcn.1401421e0
mov dword [rbp + 0xac78], 0xfffffffd
mov dword [rbp + 0xac7c], 0xfffffffb
lea rdx, [rbp + 0xac78]
lea rax, [rbp + 0xac7c]
mov rcx, rax
call fcn.1401598d0
mov qword [rbp + 0xac70], rax
lea rdx, [rbp + 0xac70]
lea rax, [rbp + 0xa320]
mov rcx, rax
call fcn.1401421e0
mov dword [rbp + 0xac88], 0xffffffff
mov dword [rbp + 0xac8c], 0xfffffffd
lea rdx, [rbp + 0xac88]
lea rax, [rbp + 0xac8c]
mov rcx, rax
call fcn.1401598d0
mov qword [rbp + 0xac80], rax
lea rdx, [rbp + 0xac80]
lea rax, [rbp + 0xa320]
mov rcx, rax
call fcn.1401421e0
mov dword [rbp + 0xac98], 0xfffffffd
mov dword [rbp + 0xac9c], 0xffffffff
lea rdx, [rbp + 0xac98]
lea rax, [rbp + 0xac9c]
mov rcx, rax
call fcn.1401598d0
mov qword [rbp + 0xac90], rax
lea rdx, [rbp + 0xac90]
lea rax, [rbp + 0xa320]
mov rcx, rax
call fcn.1401421e0
mov dword [rbp + 0xaca8], 0xfffffffe
mov dword [rbp + 0xacac], 0xfffffffe
lea rdx, [rbp + 0xaca8]
lea rax, [rbp + 0xacac]
mov rcx, rax
call fcn.1401598d0
mov qword [rbp + 0xaca0], rax
lea rdx, [rbp + 0xaca0]
lea rax, [rbp + 0xa320]
mov rcx, rax
call fcn.1401421e0
mov dword [rbp + 0xacb8], 0xffffffff
mov dword [rbp + 0xacbc], 0xffffffff
lea rdx, [rbp + 0xacb8]
lea rax, [rbp + 0xacbc]
mov rcx, rax
call fcn.1401598d0
mov qword [rbp + 0xacb0], rax
lea rdx, [rbp + 0xacb0]
lea rax, [rbp + 0xa320]
mov rcx, rax
call fcn.1401421e0
mov dword [rbp + 0xacc8], 0xffffffff
mov dword [rbp + 0xaccc], 0xfffffffe
lea rdx, [rbp + 0xacc8]
lea rax, [rbp + 0xaccc]
mov rcx, rax
call fcn.1401598d0
mov qword [rbp + 0xacc0], rax
lea rdx, [rbp + 0xacc0]
lea rax, [rbp + 0xa320]
mov rcx, rax
call fcn.1401421e0
mov dword [rbp + 0xacd8], 1
mov dword [rbp + 0xacdc], 0xffffffff
lea rdx, [rbp + 0xacd8]
lea rax, [rbp + 0xacdc]
mov rcx, rax
call fcn.1401598d0
mov qword [rbp + 0xacd0], rax
lea rdx, [rbp + 0xacd0]
lea rax, [rbp + 0xa320]
mov rcx, rax
call fcn.1401421e0
lea rax, [rbp + 0xa320]
mov rcx, rax
call fcn.1400cbf50
mov dword [rbp + 0x1a5d4], eax
lea rax, [rbp + 0xa320]
mov rcx, rax
call fcn.140142130
mov rbx, rax
lea rax, [rbp + 0xa320]
mov rcx, rax
call fcn.1401421b0
mov rdx, rbx
mov rcx, rax
call fcn.140158ca0
lea rdx, [rbp + 0xa320]
lea rax, [rbp + 0xace0]
mov rcx, rax
call fcn.1401422f0
lea rax, [rbp + 0xa300]
lea rdx, [rbp + 0xace0]
mov rcx, rax
call fcn.14000467d
lea rax, [rbp + 0xace0]
mov rcx, rax
call fcn.140142420
lea rax, [0x1401d1b88]
mov rdx, rax
mov rax, qword [0x1401d8670]
mov rcx, rax
call fcn.14015a590
lea rax, [rbp + 0xa300]
mov qword [rbp + 0x1a5c8], rax
mov rax, qword [rbp + 0x1a5c8]
mov rcx, rax
call fcn.1401421b0
mov qword [rbp + 0x5ad8], rax
mov rax, qword [rbp + 0x1a5c8]
mov rcx, rax
call fcn.140142130
mov qword [rbp + 0x5ad0], rax
jmp 0x140040d3f
lea rax, [rbp + 0x5ad8]
mov rcx, rax
call fcn.1400c1900
mov rax, qword [rax]
mov qword [rbp + 0x5ae0], rax
mov eax, dword [rbp + 0x5ae0]
mov edx, eax
mov rax, qword [0x1401d8670]
mov rcx, rax
call fcn.140118c40
mov rcx, rax
lea rax, [0x1401d1b96]
mov rdx, rax
call fcn.14015a590
mov rcx, rax
mov eax, dword [rbp + 0x5ae4]
mov edx, eax
call fcn.140118c40
mov rcx, rax
mov rax, qword [0x1401d8680]
mov rdx, rax
call fcn.140118a30
lea rax, [rbp + 0x5ad8]
mov rcx, rax
call fcn.1400beba0
lea rdx, [rbp + 0x5ad0]
lea rax, [rbp + 0x5ad8]
mov rcx, rax
call fcn.1400bff30
test al, al
jne 0x140040ccc
mov dword [rbp + 0x1af60], 0x64c1
mov dword [rbp + 0x1af5c], 0
jmp 0x140040e3f
mov ecx, 0xcc24
call fcn.14015cc00
mov qword [rbp + 0x18cd0], rax
mov dword [rbp + 0x1af58], 0
jmp 0x140040e0f
call sub.msvcrt.dll_rand
mov edx, dword [rbp + 0x1af58]
movsxd rdx, edx
lea rcx, [rdx*4]
mov rdx, qword [rbp + 0x18cd0]
lea r8, [rcx + rdx]
movsxd rdx, eax
imul rdx, rdx, 0xffffffffd326a9b5
shr rdx, 0x20
add edx, eax
sar edx, 0xd
mov ecx, eax
sar ecx, 0x1f
sub edx, ecx
imul ecx, edx, 0x26cc
sub eax, ecx
mov edx, eax
mov dword [r8], edx
call sub.msvcrt.dll_rand
movsxd rdx, eax
imul rdx, rdx, 0x114b4a47
shr rdx, 0x20
sar edx, 9
mov ecx, eax
sar ecx, 0x1f
sub edx, ecx
imul ecx, edx, 0x1d9b
sub eax, ecx
mov edx, eax
add dword [rbp + 0x1af60], edx
add dword [rbp + 0x1af58], 1
cmp dword [rbp + 0x1af58], 0xfa
jle 0x140040d93
mov rax, qword [rbp + 0x18cd0]
test rax, rax
je 0x140040e38
mov edx, 4
mov rcx, rax
call fcn.14015cbf0
add dword [rbp + 0x1af5c], 1
cmp dword [rbp + 0x1af5c], 0x40a
jle 0x140040d76
lea rax, [rbp + 0xa2e0]
mov rcx, rax
call fcn.140142400
mov dword [rbp + 0xad08], 0
mov dword [rbp + 0xad0c], 0
lea rdx, [rbp + 0xad08]
lea rax, [rbp + 0xad0c]
mov rcx, rax
call fcn.1401598d0
mov qword [rbp + 0xad00], rax
lea rdx, [rbp + 0xad00]
lea rax, [rbp + 0xa2e0]
mov rcx, rax
call fcn.1401421e0
mov dword [rbp + 0xad18], 0xfffffffc
mov dword [rbp + 0xad1c], 1
lea rdx, [rbp + 0xad18]
lea rax, [rbp + 0xad1c]
mov rcx, rax
call fcn.1401598d0
mov qword [rbp + 0xad10], rax
lea rdx, [rbp + 0xad10]
lea rax, [rbp + 0xa2e0]
mov rcx, rax
call fcn.1401421e0
mov dword [rbp + 0xad28], 0xfffffffb
mov dword [rbp + 0xad2c], 0xffffffff
lea rdx, [rbp + 0xad28]
lea rax, [rbp + 0xad2c]
mov rcx, rax
call fcn.1401598d0
mov qword [rbp + 0xad20], rax
lea rdx, [rbp + 0xad20]
lea rax, [rbp + 0xa2e0]
mov rcx, rax
call fcn.1401421e0
mov dword [rbp + 0xad38], 0xfffffffd
mov dword [rbp + 0xad3c], 0xfffffffb
lea rdx, [rbp + 0xad38]
lea rax, [rbp + 0xad3c]
mov rcx, rax
call fcn.1401598d0
mov qword [rbp + 0xad30], rax
lea rdx, [rbp + 0xad30]
lea rax, [rbp + 0xa2e0]
mov rcx, rax
call fcn.1401421e0
mov dword [rbp + 0xad48], 0xffffffff
mov dword [rbp + 0xad4c], 0xfffffffd
lea rdx, [rbp + 0xad48]
lea rax, [rbp + 0xad4c]
mov rcx, rax
call fcn.1401598d0
mov qword [rbp + 0xad40], rax
lea rdx, [rbp + 0xad40]
lea rax, [rbp + 0xa2e0]
mov rcx, rax
call fcn.1401421e0
mov dword [rbp + 0xad58], 0xfffffffd
mov dword [rbp + 0xad5c], 0xffffffff
lea rdx, [rbp + 0xad58]
lea rax, [rbp + 0xad5c]
mov rcx, rax
call fcn.1401598d0
mov qword [rbp + 0xad50], rax
lea rdx, [rbp + 0xad50]
lea rax, [rbp + 0xa2e0]
mov rcx, rax
call fcn.1401421e0
mov dword [rbp + 0xad68], 0xfffffffe
mov dword [rbp + 0xad6c], 0xfffffffe
lea rdx, [rbp + 0xad68]
lea rax, [rbp + 0xad6c]
mov rcx, rax
call fcn.1401598d0
mov qword [rbp + 0xad60], rax
lea rdx, [rbp + 0xad60]
lea rax, [rbp + 0xa2e0]
mov rcx, rax
call fcn.1401421e0
mov dword [rbp + 0xad78], 0xffffffff
mov dword [rbp + 0xad7c], 0xffffffff
lea rdx, [rbp + 0xad78]
lea rax, [rbp + 0xad7c]
mov rcx, rax
call fcn.1401598d0
mov qword [rbp + 0xad70], rax
lea rdx, [rbp + 0xad70]
lea rax, [rbp + 0xa2e0]
mov rcx, rax
call fcn.1401421e0
mov dword [rbp + 0xad88], 0xffffffff
mov dword [rbp + 0xad8c], 0xfffffffe
lea rdx, [rbp + 0xad88]
lea rax, [rbp + 0xad8c]
mov rcx, rax
call fcn.1401598d0
mov qword [rbp + 0xad80], rax
lea rdx, [rbp + 0xad80]
lea rax, [rbp + 0xa2e0]
mov rcx, rax
call fcn.1401421e0
mov dword [rbp + 0xad98], 1
mov dword [rbp + 0xad9c], 0xffffffff
lea rdx, [rbp + 0xad98]
lea rax, [rbp + 0xad9c]
mov rcx, rax
call fcn.1401598d0
mov qword [rbp + 0xad90], rax
lea rdx, [rbp + 0xad90]
lea rax, [rbp + 0xa2e0]
mov rcx, rax
call fcn.1401421e0
lea rax, [rbp + 0xa2e0]
mov rcx, rax
call fcn.1400cbf50
mov dword [rbp + 0x1a5c4], eax
lea rax, [rbp + 0xa2e0]
mov rcx, rax
call fcn.140142130
mov rbx, rax
lea rax, [rbp + 0xa2e0]
mov rcx, rax
call fcn.1401421b0
mov rdx, rbx
mov rcx, rax
call fcn.140158ca0
lea rdx, [rbp + 0xa2e0]
lea rax, [rbp + 0xada0]
mov rcx, rax
call fcn.1401422f0
lea rax, [rbp + 0xa2c0]
lea rdx, [rbp + 0xada0]
mov rcx, rax
call fcn.14000467d
lea rax, [rbp + 0xada0]
mov rcx, rax
call fcn.140142420
lea rax, [0x1401d1b88]
mov rdx, rax
mov rax, qword [0x1401d8670]
mov rcx, rax
call fcn.14015a590
lea rax, [rbp + 0xa2c0]
mov qword [rbp + 0x1a5b8], rax
mov rax, qword [rbp + 0x1a5b8]
mov rcx, rax
call fcn.1401421b0
mov qword [rbp + 0x5ac0], rax
mov rax, qword [rbp + 0x1a5b8]
mov rcx, rax
call fcn.140142130
mov qword [rbp + 0x5ab8], rax
jmp 0x140041268
lea rax, [rbp + 0x5ac0]
mov rcx, rax
call fcn.1400c1900
mov rax, qword [rax]
mov qword [rbp + 0x5ac8], rax
mov eax, dword [rbp + 0x5ac8]
mov edx, eax
mov rax, qword [0x1401d8670]
mov rcx, rax
call fcn.140118c40
mov rcx, rax
lea rax, [0x1401d1b96]
mov rdx, rax
call fcn.14015a590
mov rcx, rax
mov eax, dword [rbp + 0x5acc]
mov edx, eax
call fcn.140118c40
mov rcx, rax
mov rax, qword [0x1401d8680]
mov rdx, rax
call fcn.140118a30
lea rax, [rbp + 0x5ac0]
mov rcx, rax
call fcn.1400beba0
lea rdx, [rbp + 0x5ab8]
lea rax, [rbp + 0x5ac0]
mov rcx, rax
call fcn.1400bff30
test al, al
jne 0x1400411f5
mov dword [rbp + 0x1af54], 0x13ce
mov dword [rbp + 0x1af50], 0
jmp 0x140041366
mov ecx, 0x22798
call fcn.14015cc00
mov qword [rbp + 0x18cd8], rax
mov dword [rbp + 0x1af4c], 0
jmp 0x140041336
call sub.msvcrt.dll_rand
mov edx, dword [rbp + 0x1af4c]
movsxd rdx, edx
lea rcx, [rdx*4]
mov rdx, qword [rbp + 0x18cd8]
lea r8, [rcx + rdx]
movsxd rdx, eax
imul rdx, rdx, 0x31dc67e9
shr rdx, 0x20
sar edx, 0xb
mov ecx, eax
sar ecx, 0x1f
sub edx, ecx
imul ecx, edx, 0x2913
sub eax, ecx
mov edx, eax
mov dword [r8], edx
call sub.msvcrt.dll_rand
movsxd rdx, eax
imul rdx, rdx, 0x64f5e4e3
shr rdx, 0x20
sar edx, 0xc
mov ecx, eax
sar ecx, 0x1f
sub edx, ecx
imul ecx, edx, 0x2892
sub eax, ecx
mov edx, eax
add dword [rbp + 0x1af54], edx
add dword [rbp + 0x1af4c], 1
cmp dword [rbp + 0x1af4c], 0x82
jle 0x1400412bc
mov rax, qword [rbp + 0x18cd8]
test rax, rax
je 0x14004135f
mov edx, 4
mov rcx, rax
call fcn.14015cbf0
add dword [rbp + 0x1af50], 1
cmp dword [rbp + 0x1af50], 0x515
jle 0x14004129f
lea rax, [rbp + 0xa2a0]
mov rcx, rax
call fcn.140142400
mov dword [rbp + 0xadc8], 0
mov dword [rbp + 0xadcc], 0
lea rdx, [rbp + 0xadc8]
lea rax, [rbp + 0xadcc]
mov rcx, rax
call fcn.1401598d0
mov qword [rbp + 0xadc0], rax
lea rdx, [rbp + 0xadc0]
lea rax, [rbp + 0xa2a0]
mov rcx, rax
call fcn.1401421e0
mov dword [rbp + 0xadd8], 0xfffffffc
mov dword [rbp + 0xaddc], 1
lea rdx, [rbp + 0xadd8]
lea rax, [rbp + 0xaddc]
mov rcx, rax
call fcn.1401598d0
mov qword [rbp + 0xadd0], rax
lea rdx, [rbp + 0xadd0]
lea rax, [rbp + 0xa2a0]
mov rcx, rax
call fcn.1401421e0
mov dword [rbp + 0xade8], 0xfffffffb
mov dword [rbp + 0xadec], 0xffffffff
lea rdx, [rbp + 0xade8]
lea rax, [rbp + 0xadec]
mov rcx, rax
call fcn.1401598d0
mov qword [rbp + 0xade0], rax
lea rdx, [rbp + 0xade0]
lea rax, [rbp + 0xa2a0]
mov rcx, rax
call fcn.1401421e0
mov dword [rbp + 0xadf8], 0xfffffffd
mov dword [rbp + 0xadfc], 0xfffffffb
lea rdx, [rbp + 0xadf8]
lea rax, [rbp + 0xadfc]
mov rcx, rax
call fcn.1401598d0
mov qword [rbp + 0xadf0], rax
lea rdx, [rbp + 0xadf0]
lea rax, [rbp + 0xa2a0]
mov rcx, rax
call fcn.1401421e0
mov dword [rbp + 0xae08], 0xffffffff
mov dword [rbp + 0xae0c], 0xfffffffd
lea rdx, [rbp + 0xae08]
lea rax, [rbp + 0xae0c]
mov rcx, rax
call fcn.1401598d0
mov qword [rbp + 0xae00], rax
lea rdx, [rbp + 0xae00]
lea rax, [rbp + 0xa2a0]
mov rcx, rax
call fcn.1401421e0
mov dword [rbp + 0xae18], 0xfffffffd
mov dword [rbp + 0xae1c], 0xffffffff
lea rdx, [rbp + 0xae18]
lea rax, [rbp + 0xae1c]
mov rcx, rax
call fcn.1401598d0
mov qword [rbp + 0xae10], rax
lea rdx, [rbp + 0xae10]
lea rax, [rbp + 0xa2a0]
mov rcx, rax
call fcn.1401421e0
mov dword [rbp + 0xae28], 0xfffffffe
mov dword [rbp + 0xae2c], 0xfffffffe
lea rdx, [rbp + 0xae28]
lea rax, [rbp + 0xae2c]
mov rcx, rax
call fcn.1401598d0
mov qword [rbp + 0xae20], rax
lea rdx, [rbp + 0xae20]
lea rax, [rbp + 0xa2a0]
mov rcx, rax
call fcn.1401421e0
mov dword [rbp + 0xae38], 0xffffffff
mov dword [rbp + 0xae3c], 0xffffffff
lea rdx, [rbp + 0xae38]
lea rax, [rbp + 0xae3c]
mov rcx, rax
call fcn.1401598d0
mov qword [rbp + 0xae30], rax
lea rdx, [rbp + 0xae30]
lea rax, [rbp + 0xa2a0]
mov rcx, rax
call fcn.1401421e0
mov dword [rbp + 0xae48], 0xffffffff
mov dword [rbp + 0xae4c], 0xfffffffe
lea rdx, [rbp + 0xae48]
lea rax, [rbp + 0xae4c]
mov rcx, rax
call fcn.1401598d0
mov qword [rbp + 0xae40], rax
lea rdx, [rbp + 0xae40]
lea rax, [rbp + 0xa2a0]
mov rcx, rax
call fcn.1401421e0
mov dword [rbp + 0xae58], 1
mov dword [rbp + 0xae5c], 0xffffffff
lea rdx, [rbp + 0xae58]
lea rax, [rbp + 0xae5c]
mov rcx, rax
call fcn.1401598d0
mov qword [rbp + 0xae50], rax
lea rdx, [rbp + 0xae50]
lea rax, [rbp + 0xa2a0]
mov rcx, rax
call fcn.1401421e0
lea rax, [rbp + 0xa2a0]
mov rcx, rax
call fcn.1400cbf50
mov dword [rbp + 0x1a5b4], eax
lea rax, [rbp + 0xa2a0]
mov rcx, rax
call fcn.140142130
mov rbx, rax
lea rax, [rbp + 0xa2a0]
mov rcx, rax
call fcn.1401421b0
mov rdx, rbx
mov rcx, rax
call fcn.140158ca0
lea rdx, [rbp + 0xa2a0]
lea rax, [rbp + 0xae60]
mov rcx, rax
call fcn.1401422f0
lea rax, [rbp + 0xa280]
lea rdx, [rbp + 0xae60]
mov rcx, rax
call fcn.14000467d
lea rax, [rbp + 0xae60]
mov rcx, rax
call fcn.140142420
lea rax, [0x1401d1b88]
mov rdx, rax
mov rax, qword [0x1401d8670]
mov rcx, rax
call fcn.14015a590
lea rax, [rbp + 0xa280]
mov qword [rbp + 0x1a5a8], rax
mov rax, qword [rbp + 0x1a5a8]
mov rcx, rax
call fcn.1401421b0
mov qword [rbp + 0x5aa8], rax
mov rax, qword [rbp + 0x1a5a8]
mov rcx, rax
call fcn.140142130
mov qword [rbp + 0x5aa0], rax
jmp 0x14004178f
lea rax, [rbp + 0x5aa8]
mov rcx, rax
call fcn.1400c1900
mov rax, qword [rax]
mov qword [rbp + 0x5ab0], rax
mov eax, dword [rbp + 0x5ab0]
mov edx, eax
mov rax, qword [0x1401d8670]
mov rcx, rax
call fcn.140118c40
mov rcx, rax
lea rax, [0x1401d1b96]
mov rdx, rax
call fcn.14015a590
mov rcx, rax
mov eax, dword [rbp + 0x5ab4]
mov edx, eax
call fcn.140118c40
mov rcx, rax
mov rax, qword [0x1401d8680]
mov rdx, rax
call fcn.140118a30
lea rax, [rbp + 0x5aa8]
mov rcx, rax
call fcn.1400beba0
lea rdx, [rbp + 0x5aa0]
lea rax, [rbp + 0x5aa8]
mov rcx, rax
call fcn.1400bff30
test al, al
jne 0x14004171c
movss xmm0, dword [0x1401d2218]
movss dword [rbp + 0x1af48], xmm0
movss xmm0, dword [0x1401d221c]
movss dword [rbp + 0x1af48], xmm0
pxor xmm0, xmm0
cvtss2sd xmm0, dword [rbp + 0x1af48]
ucomisd xmm0, qword [0x1401d2220]
jp 0x14004190a
ucomisd xmm0, qword [0x1401d2220]
jne 0x14004190a
pxor xmm0, xmm0
cvtss2sd xmm0, dword [rbp + 0x1af48]
ucomisd xmm0, qword [0x1401d2238]
jp 0x140041a47
push rdi
push rsi
push rbx
sub rsp, 0x90
xor esi, esi
call fcn.1400ac0d0
call fcn.1400b66c0
mov rbx, qword [rax]
test rbx, rbx
jne 0x14015e22b
jmp 0x14015e2a1
test cl, cl
je 0x14015e258
and esi, 1
je 0x14015e240
mov esi, 1
call sub.msvcrt.dll__ismbblead
test eax, eax
je 0x14015e227
cmp byte [rbx + 1], 1
sbb rbx, 0xffffffffffffffff
add rbx, 1
movsx ecx, byte [rbx]
cmp cl, 0x20
jle 0x14015e208
mov eax, esi
xor eax, 1
cmp cl, 0x22
cmove esi, eax
jmp 0x14015e216
test cl, cl
je 0x14015e258
nop dword [rax]
movzx eax, byte [rbx + 1]
add rbx, 1
test al, al
je 0x14015e258
cmp al, 0x20
jle 0x14015e248
lea rdx, [rsp + 0x20]
xor eax, eax
mov ecx, 0xd
mov rdi, rdx
rep stosq qword [rdi], rax
mov rcx, rdx
call qword [sym.imp.KERNEL32.dll_GetStartupInfoA]
mov r9d, 0xa
test byte [rsp + 0x5c], 1
je 0x14015e286
movzx r9d, word [rsp + 0x60]
mov rcx, qword [0x1401d8c20]
mov r8, rbx
xor edx, edx
add rsp, 0x90
pop rbx
pop rsi
pop rdi
jmp 0x14003d6fa
lea rbx, [0x1401d73b0]
jmp 0x14015e258