Function at 0x140034bd0
Capabilities:
Allocate or change rwx memory
Check for debugger via api
Check for outputdebugstring error
Check for software breakpoints
Check for time delay via gettickcount
Encode data using xor
Enumerate threads
Execute shellcode via indirect call
Get token privileges
Hide thread from debugger
Print debug messages
Terminate process

Disassembly:
mov rax, rsp
mov qword [rax + 0x18], rbx
push rbp
lea rbp, [rax - 0x478]
sub rsp, 0x570
movaps xmmword [rax - 0x18], xmm6
movaps xmmword [rax - 0x28], xmm7
mov rax, qword [0x14007c040]
xor rax, rsp
mov qword [rbp + 0x440], rax
call qword [sym.imp.KERNEL32.dll_IsDebuggerPresent]
test eax, eax
je 0x140034e91
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea rdx, [rsp + 0x40]
call fcn.1400368f0
mov r9, rax
cmp byte [rax + 0x14], 0
je 0x140034e6d
xor ebx, ebx
cmp dword [0x14007c090], 2
jl 0x140034e2e
movdqa xmm5, xmmword [0x140072c80]
movdqa xmm2, xmmword [0x140072710]
movdqa xmm3, xmmword [0x140072720]
movdqa xmm1, xmm2
movdqa xmm6, xmmword [str.6666]
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
movdqa xmm4, xmmword [0x140072780]
movdqa xmm7, xmmword [str.0000000000000000]
punpckldq xmm1, xmm2
pmuldq xmm0, xmm5
pmuldq xmm1, xmm5
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
movdqa xmm1, xmm3
pmulld xmm0, xmm6
psubd xmm2, xmm0
punpckldq xmm1, xmm3
movd xmm0, dword [rax]
andps xmm2, xmm4
pmuldq xmm1, xmm5
packuswb xmm2, xmm2
packuswb xmm2, xmm2
paddb xmm2, xmm7
xorps xmm2, xmm0
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm5
movd dword [rax], xmm2
movdqa xmm2, xmmword [0x140072730]
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
movdqa xmm1, xmm2
pmulld xmm0, xmm6
psubd xmm3, xmm0
punpckldq xmm1, xmm2
movd xmm0, dword [rax + 4]
andps xmm3, xmm4
pmuldq xmm1, xmm5
packuswb xmm3, xmm3
packuswb xmm3, xmm3
paddb xmm3, xmm7
xorps xmm3, xmm0
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm5
movd dword [rax + 4], xmm3
movdqa xmm3, xmmword [0x140072740]
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
movdqa xmm1, xmm3
pmulld xmm0, xmm6
psubd xmm2, xmm0
punpckldq xmm1, xmm3
movd xmm0, dword [rax + 8]
andps xmm2, xmm4
packuswb xmm2, xmm2
packuswb xmm2, xmm2
pmuldq xmm1, xmm5
paddb xmm2, xmm7
xorps xmm2, xmm0
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm5
movd dword [rax + 8], xmm2
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm3, xmm0
movdqa xmm2, xmmword [0x140072750]
andps xmm3, xmm4
movd xmm0, dword [rax + 0xc]
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
mov ebx, 0x14
packuswb xmm3, xmm3
packuswb xmm3, xmm3
pmuldq xmm1, xmm5
paddb xmm3, xmm7
xorps xmm3, xmm0
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm5
movd dword [rax + 0xc], xmm3
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
movd xmm0, dword [rax + 0x10]
andps xmm2, xmm4
packuswb xmm2, xmm2
packuswb xmm2, xmm2
paddb xmm2, xmm7
xorps xmm2, xmm0
movd dword [rax + 0x10], xmm2
mov r8d, ebx
add r8, r9
nop dword [rax]
nop dword [rax + rax]
mov eax, 0x4bda12f7
lea r8, [r8 + 1]
imul ebx
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul edx, eax, 0x36
movzx eax, bl
inc ebx
sub al, dl
add al, 0x30
xor byte [r8 - 1], al
cmp ebx, 0x15
jl 0x140034e40
mov rdx, r9
call fcn.1400489a0
lea rdx, [0x140048960]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
xor ebx, ebx
mov dword [rsp + 0x30], ebx
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov rcx, rax
lea rdx, [rsp + 0x30]
call qword [sym.imp.KERNEL32.dll_CheckRemoteDebuggerPresent]
cmp dword [rsp + 0x30], ebx
je 0x140035151
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea rdx, [rsp + 0x40]
call fcn.140036920
mov r9, rax
cmp byte [rax + 0x14], bl
je 0x14003512d
cmp dword [0x14007c090], 2
jl 0x1400350ef
movdqa xmm5, xmmword [0x140072c80]
movdqa xmm3, xmmword [0x140072710]
movdqa xmm2, xmmword [0x140072720]
movdqa xmm1, xmm3
movdqa xmm6, xmmword [str.6666]
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
movdqa xmm4, xmmword [0x140072780]
mov eax, dword [str.0000000000000000]
punpckldq xmm1, xmm3
pmuldq xmm0, xmm5
pmuldq xmm1, xmm5
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
movdqa xmm1, xmm2
pmulld xmm0, xmm6
psubd xmm3, xmm0
punpckldq xmm1, xmm2
pmuldq xmm1, xmm5
andps xmm3, xmm4
packuswb xmm3, xmm3
packuswb xmm3, xmm3
movd xmm0, eax
paddb xmm3, xmm0
movd xmm0, dword [r9]
xorps xmm3, xmm0
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm5
movd dword [r9], xmm3
movdqa xmm3, xmmword [0x140072730]
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
movdqa xmm1, xmm3
pmulld xmm0, xmm6
psubd xmm2, xmm0
punpckldq xmm1, xmm3
pmuldq xmm1, xmm5
andps xmm2, xmm4
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, eax
paddb xmm2, xmm0
movd xmm0, dword [r9 + 4]
xorps xmm2, xmm0
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm5
movd dword [r9 + 4], xmm2
movdqa xmm2, xmmword [0x140072740]
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
movdqa xmm1, xmm2
pmulld xmm0, xmm6
psubd xmm3, xmm0
punpckldq xmm1, xmm2
andps xmm3, xmm4
movd xmm0, eax
packuswb xmm3, xmm3
packuswb xmm3, xmm3
paddb xmm3, xmm0
pmuldq xmm1, xmm5
movd xmm0, dword [r9 + 8]
xorps xmm3, xmm0
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm5
movd dword [r9 + 8], xmm3
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
movdqa xmm3, xmmword [0x140072750]
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
andps xmm2, xmm4
packuswb xmm2, xmm2
mov ebx, 0x14
packuswb xmm2, xmm2
movd xmm0, eax
paddb xmm2, xmm0
pmuldq xmm1, xmm5
movd xmm0, dword [r9 + 0xc]
xorps xmm2, xmm0
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm5
movd dword [r9 + 0xc], xmm2
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm3, xmm0
movd xmm0, eax
andps xmm3, xmm4
packuswb xmm3, xmm3
packuswb xmm3, xmm3
paddb xmm3, xmm0
movd xmm0, dword [r9 + 0x10]
xorps xmm3, xmm0
movd dword [r9 + 0x10], xmm3
mov r8d, ebx
add r8, r9
nop word [rax + rax]
mov eax, 0x4bda12f7
lea r8, [r8 + 1]
imul ebx
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul edx, eax, 0x36
movzx eax, bl
inc ebx
sub al, dl
add al, 0x30
xor byte [r8 - 1], al
cmp ebx, 0x15
jl 0x140035100
mov rdx, r9
call fcn.1400489a0
lea rdx, [0x140048960]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
lea rcx, [0x140071238]
mov qword [rsp + 0x588], rdi
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov rcx, rax
lea rdx, str.NtQueryInformationProcess
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rdi, rax
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov r9d, 0x30
mov qword [rsp + 0x20], rbx
mov rcx, rax
lea r8, [rsp + 0x40]
xor edx, edx
call rdi
test eax, eax
jne 0x140035441
mov rax, qword [rsp + 0x48]
cmp byte [rax + 2], 1
jne 0x140035441
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea rdx, [rsp + 0x40]
call fcn.140036950
mov r9, rax
cmp byte [rax + 0x14], bl
je 0x14003541d
cmp dword [0x14007c090], 2
jl 0x1400353e7
movdqa xmm5, xmmword [0x140072c80]
movdqa xmm3, xmmword [0x140072710]
movdqa xmm2, xmmword [0x140072720]
movdqa xmm1, xmm3
movdqa xmm6, xmmword [str.6666]
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
movdqa xmm4, xmmword [0x140072780]
mov eax, dword [str.0000000000000000]
punpckldq xmm1, xmm3
pmuldq xmm0, xmm5
pmuldq xmm1, xmm5
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
movdqa xmm1, xmm2
pmulld xmm0, xmm6
psubd xmm3, xmm0
punpckldq xmm1, xmm2
pmuldq xmm1, xmm5
andps xmm3, xmm4
packuswb xmm3, xmm3
packuswb xmm3, xmm3
movd xmm0, eax
paddb xmm3, xmm0
movd xmm0, dword [r9]
xorps xmm3, xmm0
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm5
movd dword [r9], xmm3
movdqa xmm3, xmmword [0x140072730]
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
movdqa xmm1, xmm3
pmulld xmm0, xmm6
psubd xmm2, xmm0
punpckldq xmm1, xmm3
pmuldq xmm1, xmm5
andps xmm2, xmm4
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, eax
paddb xmm2, xmm0
movd xmm0, dword [r9 + 4]
xorps xmm2, xmm0
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm5
movd dword [r9 + 4], xmm2
movdqa xmm2, xmmword [0x140072740]
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
movdqa xmm1, xmm2
pmulld xmm0, xmm6
psubd xmm3, xmm0
punpckldq xmm1, xmm2
andps xmm3, xmm4
movd xmm0, eax
packuswb xmm3, xmm3
packuswb xmm3, xmm3
paddb xmm3, xmm0
pmuldq xmm1, xmm5
movd xmm0, dword [r9 + 8]
xorps xmm3, xmm0
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm5
movd dword [r9 + 8], xmm3
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
movdqa xmm3, xmmword [0x140072750]
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
andps xmm2, xmm4
packuswb xmm2, xmm2
mov ebx, 0x14
packuswb xmm2, xmm2
movd xmm0, eax
paddb xmm2, xmm0
pmuldq xmm1, xmm5
movd xmm0, dword [r9 + 0xc]
xorps xmm2, xmm0
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm5
movd dword [r9 + 0xc], xmm2
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm3, xmm0
movd xmm0, eax
andps xmm3, xmm4
packuswb xmm3, xmm3
packuswb xmm3, xmm3
paddb xmm3, xmm0
movd xmm0, dword [r9 + 0x10]
xorps xmm3, xmm0
movd dword [r9 + 0x10], xmm3
mov r8d, ebx
add r8, r9
nop dword [rax]
mov eax, 0x4bda12f7
lea r8, [r8 + 1]
imul ebx
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul edx, eax, 0x36
movzx eax, bl
inc ebx
sub al, dl
add al, 0x30
xor byte [r8 - 1], al
cmp ebx, 0x15
jl 0x1400353f0
mov rdx, r9
call fcn.1400489a0
lea rdx, [0x140048960]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
xor edx, edx
lea rcx, [rsp + 0x70]
mov r8d, 0x4d0
call sub.VCRUNTIME140.dll_memset
mov dword [rbp - 0x60], 0x100010
call qword [sym.imp.KERNEL32.dll_GetCurrentThread]
mov rcx, rax
lea rdx, [rsp + 0x70]
call qword [sym.imp.KERNEL32.dll_GetThreadContext]
test eax, eax
je 0x140035644
cmp qword [rbp - 0x48], rbx
jne 0x140035492
cmp qword [rbp - 0x40], rbx
jne 0x140035492
cmp qword [rbp - 0x38], rbx
jne 0x140035492
cmp qword [rbp - 0x30], rbx
je 0x140035644
mov r10, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea rdx, [rsp + 0x40]
call fcn.140036980
mov r9, rax
cmp byte [rax + 0x20], bl
je 0x14003561d
cmp dword [0x14007c090], 2
jl 0x1400355e4
movdqa xmm0, xmmword [str.0000000000000000]
mov rcx, rax
movdqa xmm5, xmmword [0x140072710]
movdqa xmm4, xmmword [0x140072c80]
movdqa xmm6, xmmword [str.6666]
movdqa xmm7, xmmword [0x140072780]
movdqa xmmword [rsp + 0x30], xmm0
mov edx, dword [rsp + 0x30]
nop dword [rax]
nop word [rax + rax]
movd xmm2, ebx
lea eax, [rbx + 4]
pshufd xmm2, xmm2, 0
lea rcx, [rcx + 8]
paddd xmm2, xmm5
movd xmm3, eax
movdqa xmm1, xmm2
pshufd xmm3, xmm3, 0
punpckldq xmm1, xmm2
paddd xmm3, xmm5
movdqa xmm0, xmm2
pmuldq xmm1, xmm4
punpckhdq xmm0, xmm2
add ebx, 8
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
pmulld xmm0, xmm6
psubd xmm2, xmm0
movd xmm0, edx
andps xmm2, xmm7
packuswb xmm2, xmm2
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [rcx - 8]
xorps xmm2, xmm0
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
movd dword [rcx - 8], xmm2
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm3, xmm0
movd xmm0, edx
andps xmm3, xmm7
packuswb xmm3, xmm3
packuswb xmm3, xmm3
paddb xmm3, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm3, xmm0
movd dword [rcx - 4], xmm3
cmp ebx, 0x20
jl 0x140035500
cmp ebx, 0x21
jge 0x14003561d
movsxd r8, ebx
add r8, r9
nop word [rax + rax]
mov eax, 0x4bda12f7
lea r8, [r8 + 1]
imul ebx
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul edx, eax, 0x36
movzx eax, bl
inc ebx
sub al, dl
add al, 0x30
xor byte [r8 - 1], al
cmp ebx, 0x21
jl 0x1400355f0
mov rdx, r9
mov rcx, r10
call fcn.1400489a0
lea rdx, [0x140048960]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
call fcn.140034300
test al, al
je 0x1400357f4
mov r10, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea rdx, [rsp + 0x40]
call fcn.1400369b0
mov r9, rax
cmp byte [rax + 0x1c], bl
je 0x1400357cd
cmp dword [0x14007c090], 2
jl 0x140035794
movdqa xmm0, xmmword [str.0000000000000000]
mov rcx, rax
movdqa xmm5, xmmword [0x140072710]
movdqa xmm4, xmmword [0x140072c80]
movdqa xmm6, xmmword [str.6666]
movdqa xmm7, xmmword [0x140072780]
movdqa xmmword [rsp + 0x30], xmm0
mov edx, dword [rsp + 0x30]
movd xmm2, ebx
lea eax, [rbx + 4]
pshufd xmm2, xmm2, 0
lea rcx, [rcx + 8]
paddd xmm2, xmm5
movd xmm3, eax
movdqa xmm1, xmm2
pshufd xmm3, xmm3, 0
punpckldq xmm1, xmm2
paddd xmm3, xmm5
movdqa xmm0, xmm2
pmuldq xmm1, xmm4
punpckhdq xmm0, xmm2
add ebx, 8
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
pmulld xmm0, xmm6
psubd xmm2, xmm0
movd xmm0, edx
andps xmm2, xmm7
packuswb xmm2, xmm2
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [rcx - 8]
xorps xmm2, xmm0
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
movd dword [rcx - 8], xmm2
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm3, xmm0
movd xmm0, edx
andps xmm3, xmm7
packuswb xmm3, xmm3
packuswb xmm3, xmm3
paddb xmm3, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm3, xmm0
movd dword [rcx - 4], xmm3
cmp ebx, 0x18
jl 0x1400356b0
cmp ebx, 0x1d
jge 0x1400357cd
movsxd r8, ebx
add r8, r9
nop word [rax + rax]
mov eax, 0x4bda12f7
lea r8, [r8 + 1]
imul ebx
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul edx, eax, 0x36
movzx eax, bl
inc ebx
sub al, dl
add al, 0x30
xor byte [r8 - 1], al
cmp ebx, 0x1d
jl 0x1400357a0
mov rdx, r9
mov rcx, r10
call fcn.1400489a0
lea rdx, [0x140048960]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
lea r8, [rsp + 0x30]
mov edx, 8
mov rcx, rax
call qword [sym.imp.ADVAPI32.dll_OpenProcessToken]
test eax, eax
je 0x140035864
mov rcx, qword [rsp + 0x30]
lea r8, [rsp + 0x40]
mov r9d, 0x10
mov qword [rsp + 0x20], rbx
mov edx, 3
call qword [sym.imp.ADVAPI32.dll_GetTokenInformation]
test eax, eax
je 0x140035859
mov r8, qword [rsp + 0x40]
mov edx, ebx
test r8d, r8d
je 0x140035859
mov eax, edx
lea rcx, [rax + rax*2]
test byte [rsp + rcx*4 + 0x4c], 2
jne 0x140035a14
inc edx
cmp edx, r8d
jb 0x140035841
mov rcx, qword [rsp + 0x30]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
call fcn.140034660
test al, al
je 0x140035bc4
mov r10, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea rdx, [rsp + 0x40]
call fcn.140036a10
mov r9, rax
cmp byte [rax + 0x1c], bl
je 0x1400359ed
cmp dword [0x14007c090], 2
jl 0x1400359b4
movdqa xmm0, xmmword [str.0000000000000000]
mov rcx, rax
movdqa xmm5, xmmword [0x140072710]
movdqa xmm4, xmmword [0x140072c80]
movdqa xmm6, xmmword [str.6666]
movdqa xmm7, xmmword [0x140072780]
movdqa xmmword [rsp + 0x30], xmm0
mov edx, dword [rsp + 0x30]
movd xmm2, ebx
lea eax, [rbx + 4]
pshufd xmm2, xmm2, 0
lea rcx, [rcx + 8]
paddd xmm2, xmm5
movd xmm3, eax
movdqa xmm1, xmm2
pshufd xmm3, xmm3, 0
punpckldq xmm1, xmm2
paddd xmm3, xmm5
movdqa xmm0, xmm2
pmuldq xmm1, xmm4
punpckhdq xmm0, xmm2
add ebx, 8
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
pmulld xmm0, xmm6
psubd xmm2, xmm0
movd xmm0, edx
andps xmm2, xmm7
packuswb xmm2, xmm2
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [rcx - 8]
xorps xmm2, xmm0
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
movd dword [rcx - 8], xmm2
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm3, xmm0
movd xmm0, edx
andps xmm3, xmm7
packuswb xmm3, xmm3
packuswb xmm3, xmm3
paddb xmm3, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm3, xmm0
movd dword [rcx - 4], xmm3
cmp ebx, 0x18
jl 0x1400358d0
cmp ebx, 0x1d
jge 0x1400359ed
movsxd r8, ebx
add r8, r9
nop word [rax + rax]
mov eax, 0x4bda12f7
lea r8, [r8 + 1]
imul ebx
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul edx, eax, 0x36
movzx eax, bl
inc ebx
sub al, dl
add al, 0x30
xor byte [r8 - 1], al
cmp ebx, 0x1d
jl 0x1400359c0
mov rdx, r9
mov rcx, r10
call fcn.1400489a0
lea rdx, [0x140048960]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov rcx, qword [rsp + 0x30]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov r10, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea rdx, [rsp + 0x40]
call fcn.1400369e0
mov r9, rax
cmp byte [rax + 0x1c], bl
je 0x140035b9d
cmp dword [0x14007c090], 2
jl 0x140035b64
movdqa xmm0, xmmword [str.0000000000000000]
mov rcx, rax
movdqa xmm5, xmmword [0x140072710]
movdqa xmm4, xmmword [0x140072c80]
movdqa xmm6, xmmword [str.6666]
movdqa xmm7, xmmword [0x140072780]
movdqa xmmword [rsp + 0x30], xmm0
mov edx, dword [rsp + 0x30]
nop
movd xmm2, ebx
lea eax, [rbx + 4]
pshufd xmm2, xmm2, 0
lea rcx, [rcx + 8]
paddd xmm2, xmm5
movd xmm3, eax
movdqa xmm1, xmm2
pshufd xmm3, xmm3, 0
punpckldq xmm1, xmm2
paddd xmm3, xmm5
movdqa xmm0, xmm2
pmuldq xmm1, xmm4
punpckhdq xmm0, xmm2
add ebx, 8
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
pmulld xmm0, xmm6
psubd xmm2, xmm0
movd xmm0, edx
andps xmm2, xmm7
packuswb xmm2, xmm2
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [rcx - 8]
xorps xmm2, xmm0
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
movd dword [rcx - 8], xmm2
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm3, xmm0
movd xmm0, edx
andps xmm3, xmm7
packuswb xmm3, xmm3
packuswb xmm3, xmm3
paddb xmm3, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm3, xmm0
movd dword [rcx - 4], xmm3
cmp ebx, 0x18
jl 0x140035a80
cmp ebx, 0x1d
jge 0x140035b9d
movsxd r8, ebx
add r8, r9
nop word [rax + rax]
mov eax, 0x4bda12f7
lea r8, [r8 + 1]
imul ebx
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul edx, eax, 0x36
movzx eax, bl
inc ebx
sub al, dl
add al, 0x30
xor byte [r8 - 1], al
cmp ebx, 0x1d
jl 0x140035b70
mov rdx, r9
mov rcx, r10
call fcn.1400489a0
lea rdx, [0x140048960]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov edx, 0x1000
xor ecx, ecx
mov r8d, edx
mov r9d, 0x40
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov rdi, rax
test rax, rax
je 0x140035c27
mov edx, 0xcc
mov r8d, 0x1000
mov rcx, rax
call sub.VCRUNTIME140.dll_memset
mov rcx, rbx
nop dword [rax + rax]
cmp byte [rdi + rcx], 0xcc
jne 0x140035df4
inc rcx
cmp rcx, 0x1000
jl 0x140035c00
xor edx, edx
mov r8d, 0x8000
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_VirtualFree]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetLastError]
lea rcx, [0x14004eb3e]
call qword [sym.imp.KERNEL32.dll_OutputDebugStringA]
call qword [sym.imp.KERNEL32.dll_GetLastError]
test eax, eax
je 0x140035fb4
mov r10, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea rdx, [rsp + 0x40]
call fcn.140036a70
mov r9, rax
cmp byte [rax + 0x23], bl
je 0x140035dcd
cmp dword [0x14007c090], 2
jl 0x140035d94
movdqa xmm0, xmmword [str.0000000000000000]
mov rcx, rax
movdqa xmm5, xmmword [0x140072710]
movdqa xmm4, xmmword [0x140072c80]
movdqa xmm6, xmmword [str.6666]
movdqa xmm7, xmmword [0x140072780]
movdqa xmmword [rsp + 0x30], xmm0
mov edx, dword [rsp + 0x30]
nop dword [rax]
movd xmm2, ebx
lea eax, [rbx + 4]
pshufd xmm2, xmm2, 0
lea rcx, [rcx + 8]
paddd xmm2, xmm5
movd xmm3, eax
movdqa xmm1, xmm2
pshufd xmm3, xmm3, 0
punpckldq xmm1, xmm2
paddd xmm3, xmm5
movdqa xmm0, xmm2
pmuldq xmm1, xmm4
punpckhdq xmm0, xmm2
add ebx, 8
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
pmulld xmm0, xmm6
psubd xmm2, xmm0
movd xmm0, edx
andps xmm2, xmm7
packuswb xmm2, xmm2
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [rcx - 8]
xorps xmm2, xmm0
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
movd dword [rcx - 8], xmm2
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm3, xmm0
movd xmm0, edx
andps xmm3, xmm7
packuswb xmm3, xmm3
packuswb xmm3, xmm3
paddb xmm3, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm3, xmm0
movd dword [rcx - 4], xmm3
cmp ebx, 0x20
jl 0x140035cb0
cmp ebx, 0x24
jge 0x140035dcd
movsxd r8, ebx
add r8, r9
nop word [rax + rax]
mov eax, 0x4bda12f7
lea r8, [r8 + 1]
imul ebx
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul edx, eax, 0x36
movzx eax, bl
inc ebx
sub al, dl
add al, 0x30
xor byte [r8 - 1], al
cmp ebx, 0x24
jl 0x140035da0
mov rdx, r9
mov rcx, r10
call fcn.1400489a0
lea rdx, [0x140048960]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
xor edx, edx
mov r8d, 0x8000
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_VirtualFree]
mov r10, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea rdx, [rsp + 0x40]
call fcn.140036a40
mov r9, rax
cmp byte [rax + 0x20], bl
je 0x140035f8d
cmp dword [0x14007c090], 2
jl 0x140035f54
movdqa xmm0, xmmword [str.0000000000000000]
mov rcx, rax
movdqa xmm5, xmmword [0x140072710]
movdqa xmm4, xmmword [0x140072c80]
movdqa xmm6, xmmword [str.6666]
movdqa xmm7, xmmword [0x140072780]
movdqa xmmword [rsp + 0x30], xmm0
mov edx, dword [rsp + 0x30]
nop dword [rax]
nop dword [rax + rax]
movd xmm2, ebx
lea eax, [rbx + 4]
pshufd xmm2, xmm2, 0
lea rcx, [rcx + 8]
paddd xmm2, xmm5
movd xmm3, eax
movdqa xmm1, xmm2
pshufd xmm3, xmm3, 0
punpckldq xmm1, xmm2
paddd xmm3, xmm5
movdqa xmm0, xmm2
pmuldq xmm1, xmm4
punpckhdq xmm0, xmm2
add ebx, 8
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
pmulld xmm0, xmm6
psubd xmm2, xmm0
movd xmm0, edx
andps xmm2, xmm7
packuswb xmm2, xmm2
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [rcx - 8]
xorps xmm2, xmm0
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
movd dword [rcx - 8], xmm2
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm3, xmm0
movd xmm0, edx
andps xmm3, xmm7
packuswb xmm3, xmm3
packuswb xmm3, xmm3
paddb xmm3, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm3, xmm0
movd dword [rcx - 4], xmm3
cmp ebx, 0x20
jl 0x140035e70
cmp ebx, 0x21
jge 0x140035f8d
movsxd r8, ebx
add r8, r9
nop word [rax + rax]
mov eax, 0x4bda12f7
lea r8, [r8 + 1]
imul ebx
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul edx, eax, 0x36
movzx eax, bl
inc ebx
sub al, dl
add al, 0x30
xor byte [r8 - 1], al
cmp ebx, 0x21
jl 0x140035f60
mov rdx, r9
mov rcx, r10
call fcn.1400489a0
lea rdx, [0x140048960]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
xor edx, edx
mov qword [rsp + 0x580], rsi
mov ecx, 4
call qword [sym.imp.KERNEL32.dll_CreateToolhelp32Snapshot]
mov rsi, rax
cmp rax, 0xffffffffffffffff
je 0x140036077
lea rdx, [rsp + 0x40]
mov dword [rsp + 0x40], 0x1c
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_Thread32First]
test eax, eax
je 0x14003606e
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
cmp dword [rsp + 0x4c], eax
jne 0x14003605c
call qword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov r8d, dword [rsp + 0x48]
cmp r8d, eax
je 0x14003605c
xor edx, edx
mov ecx, 0x20
call qword [sym.imp.KERNEL32.dll_OpenThread]
mov rdi, rax
test rax, rax
je 0x14003605c
lea rcx, [0x140071238]
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov rcx, rax
lea rdx, str.NtSetInformationThread
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
test rax, rax
je 0x140036053
xor r9d, r9d
xor r8d, r8d
mov edx, 0x11
mov rcx, rdi
call rax
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea rdx, [rsp + 0x40]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_Thread32Next]
test eax, eax
jne 0x140035ff0
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov rsi, qword [rsp + 0x580]
mov edi, eax
mov dword [rsp + 0x30], ebx
mov ecx, dword [rsp + 0x30]
nop
mov ecx, dword [rsp + 0x30]
inc ecx
mov dword [rsp + 0x30], ecx
mov ecx, dword [rsp + 0x30]
cmp ecx, 0x186a0
jl 0x140036090
call qword [sym.imp.KERNEL32.dll_GetTickCount]
sub eax, edi
cmp eax, 0x32
jbe 0x140036265
mov r10, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea rdx, [rsp + 0x40]
call fcn.140036aa0
mov r9, rax
cmp byte [rax + 0x1f], bl
je 0x14003623e
cmp dword [0x14007c090], 2
jl 0x140036201
movdqa xmm0, xmmword [str.0000000000000000]
mov rcx, rax
movdqa xmm5, xmmword [0x140072710]
movdqa xmm4, xmmword [0x140072c80]
movdqa xmm6, xmmword [str.6666]
movdqa xmm7, xmmword [0x140072780]
movdqa xmmword [rsp + 0x30], xmm0
mov edx, dword [rsp + 0x30]
nop word [rax + rax]
movd xmm2, ebx
lea eax, [rbx + 4]
pshufd xmm2, xmm2, 0
lea rcx, [rcx + 8]
paddd xmm2, xmm5
movd xmm3, eax
movdqa xmm1, xmm2
pshufd xmm3, xmm3, 0
punpckldq xmm1, xmm2
paddd xmm3, xmm5
movdqa xmm0, xmm2
pmuldq xmm1, xmm4
punpckhdq xmm0, xmm2
add ebx, 8
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
pmulld xmm0, xmm6
psubd xmm2, xmm0
movd xmm0, edx
andps xmm2, xmm7
packuswb xmm2, xmm2
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [rcx - 8]
xorps xmm2, xmm0
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
movd dword [rcx - 8], xmm2
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm3, xmm0
movd xmm0, edx
andps xmm3, xmm7
packuswb xmm3, xmm3
packuswb xmm3, xmm3
paddb xmm3, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm3, xmm0
movd dword [rcx - 4], xmm3
cmp ebx, 0x20
jl 0x140036120
jmp 0x14003623e
mov r8, r9
nop dword [rax]
nop dword [rax + rax]
mov eax, 0x2f684bdb
lea r8, [r8 + 1]
mul ebx
mov eax, ebx
sub eax, edx
shr eax, 1
add eax, edx
shr eax, 5
movsx eax, al
imul edx, eax, 0x36
movzx eax, bl
inc ebx
sub al, dl
add al, 0x30
xor byte [r8 - 1], al
cmp ebx, 0x20
jl 0x140036210
mov rdx, r9
mov rcx, r10
call fcn.1400489a0
lea rdx, [0x140048960]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov rax, qword gs:[0x58]
mov edx, 8
mov rcx, qword [rax]
cmp dword [rdx + rcx], ebx
je 0x140036511
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea rdx, [rsp + 0x40]
call fcn.140036ac0
mov r9, rax
cmp byte [rax + 0x16], bl
je 0x1400364ed
cmp dword [0x14007c090], 2
jl 0x1400364b9
movdqa xmm5, xmmword [0x140072c80]
movdqa xmm3, xmmword [0x140072710]
movdqa xmm2, xmmword [0x140072720]
movdqa xmm1, xmm3
movdqa xmm6, xmmword [str.6666]
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
movdqa xmm4, xmmword [0x140072780]
mov eax, dword [str.0000000000000000]
punpckldq xmm1, xmm3
pmuldq xmm0, xmm5
pmuldq xmm1, xmm5
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
movdqa xmm1, xmm2
pmulld xmm0, xmm6
psubd xmm3, xmm0
punpckldq xmm1, xmm2
pmuldq xmm1, xmm5
andps xmm3, xmm4
packuswb xmm3, xmm3
packuswb xmm3, xmm3
movd xmm0, eax
paddb xmm3, xmm0
movd xmm0, dword [r9]
xorps xmm3, xmm0
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm5
movd dword [r9], xmm3
movdqa xmm3, xmmword [0x140072730]
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
movdqa xmm1, xmm3
pmulld xmm0, xmm6
psubd xmm2, xmm0
punpckldq xmm1, xmm3
pmuldq xmm1, xmm5
andps xmm2, xmm4
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, eax
paddb xmm2, xmm0
movd xmm0, dword [r9 + 4]
xorps xmm2, xmm0
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm5
movd dword [r9 + 4], xmm2
movdqa xmm2, xmmword [0x140072740]
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
movdqa xmm1, xmm2
pmulld xmm0, xmm6
psubd xmm3, xmm0
punpckldq xmm1, xmm2
andps xmm3, xmm4
movd xmm0, eax
packuswb xmm3, xmm3
packuswb xmm3, xmm3
paddb xmm3, xmm0
pmuldq xmm1, xmm5
movd xmm0, dword [r9 + 8]
xorps xmm3, xmm0
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm5
movd dword [r9 + 8], xmm3
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
movdqa xmm3, xmmword [0x140072750]
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
andps xmm2, xmm4
packuswb xmm2, xmm2
mov ebx, 0x14
packuswb xmm2, xmm2
movd xmm0, eax
paddb xmm2, xmm0
pmuldq xmm1, xmm5
movd xmm0, dword [r9 + 0xc]
xorps xmm2, xmm0
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm5
movd dword [r9 + 0xc], xmm2
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm3, xmm0
movd xmm0, eax
andps xmm3, xmm4
packuswb xmm3, xmm3
packuswb xmm3, xmm3
paddb xmm3, xmm0
movd xmm0, dword [r9 + 0x10]
xorps xmm3, xmm0
movd dword [r9 + 0x10], xmm3
mov r8d, ebx
add r8, r9
nop
mov eax, 0x4bda12f7
lea r8, [r8 + 1]
imul ebx
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul edx, eax, 0x36
movzx eax, bl
inc ebx
sub al, dl
add al, 0x30
xor byte [r8 - 1], al
cmp ebx, 0x17
jl 0x1400364c0
mov rdx, r9
call fcn.1400489a0
lea rdx, [0x140048960]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
xor r9d, r9d
xor r8d, r8d
mov rcx, rax
mov edx, 1
call qword [sym.imp.KERNEL32.dll_HeapSetInformation]
test eax, eax
jne 0x1400366e4
mov r10, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea rdx, [rsp + 0x40]
call fcn.140036af0
mov r9, rax
cmp byte [rax + 0x1e], bl
je 0x1400366bd
cmp dword [0x14007c090], 2
jl 0x140036684
movdqa xmm0, xmmword [str.0000000000000000]
mov rcx, rax
movdqa xmm5, xmmword [0x140072710]
movdqa xmm4, xmmword [0x140072c80]
movdqa xmm6, xmmword [str.6666]
movdqa xmm7, xmmword [0x140072780]
movdqa xmmword [rsp + 0x30], xmm0
mov edx, dword [rsp + 0x30]
nop dword [rax]
nop word [rax + rax]
movd xmm2, ebx
lea eax, [rbx + 4]
pshufd xmm2, xmm2, 0
lea rcx, [rcx + 8]
paddd xmm2, xmm5
movd xmm3, eax
movdqa xmm1, xmm2
pshufd xmm3, xmm3, 0
punpckldq xmm1, xmm2
paddd xmm3, xmm5
movdqa xmm0, xmm2
pmuldq xmm1, xmm4
punpckhdq xmm0, xmm2
add ebx, 8
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
pmulld xmm0, xmm6
psubd xmm2, xmm0
movd xmm0, edx
andps xmm2, xmm7
packuswb xmm2, xmm2
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [rcx - 8]
xorps xmm2, xmm0
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
movd dword [rcx - 8], xmm2
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm3, xmm0
movd xmm0, edx
andps xmm3, xmm7
packuswb xmm3, xmm3
packuswb xmm3, xmm3
paddb xmm3, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm3, xmm0
movd dword [rcx - 4], xmm3
cmp ebx, 0x18
jl 0x1400365a0
cmp ebx, 0x1f
jge 0x1400366bd
movsxd r8, ebx
add r8, r9
nop word [rax + rax]
mov eax, 0x4bda12f7
lea r8, [r8 + 1]
imul ebx
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul edx, eax, 0x36
movzx eax, bl
inc ebx
sub al, dl
add al, 0x30
xor byte [r8 - 1], al
cmp ebx, 0x1f
jl 0x140036690
mov rdx, r9
mov rcx, r10
call fcn.1400489a0
lea rdx, [0x140048960]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov edx, 0x1000
xor ecx, ecx
mov r9d, 1
mov r8d, 0x3000
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
test rax, rax
jne 0x1400368b5
mov r10, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea rdx, [rsp + 0x40]
call fcn.140036b30
mov r9, rax
cmp byte [rax + 0x1f], bl
je 0x14003688e
cmp dword [0x14007c090], 2
jl 0x140036851
movdqa xmm0, xmmword [str.0000000000000000]
mov rcx, rax
movdqa xmm5, xmmword [0x140072710]
movdqa xmm4, xmmword [0x140072c80]
movdqa xmm6, xmmword [str.6666]
movdqa xmm7, xmmword [0x140072780]
movdqa xmmword [rsp + 0x30], xmm0
mov edx, dword [rsp + 0x30]
nop word [rax + rax]
movd xmm2, ebx
lea eax, [rbx + 4]
pshufd xmm2, xmm2, 0
lea rcx, [rcx + 8]
paddd xmm2, xmm5
movd xmm3, eax
movdqa xmm1, xmm2
pshufd xmm3, xmm3, 0
punpckldq xmm1, xmm2
paddd xmm3, xmm5
movdqa xmm0, xmm2
pmuldq xmm1, xmm4
punpckhdq xmm0, xmm2
add ebx, 8
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
pmulld xmm0, xmm6
psubd xmm2, xmm0
movd xmm0, edx
andps xmm2, xmm7
packuswb xmm2, xmm2
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [rcx - 8]
xorps xmm2, xmm0
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
movd dword [rcx - 8], xmm2
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm3, xmm0
movd xmm0, edx
andps xmm3, xmm7
packuswb xmm3, xmm3
packuswb xmm3, xmm3
paddb xmm3, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm3, xmm0
movd dword [rcx - 4], xmm3
cmp ebx, 0x20
jl 0x140036770
jmp 0x14003688e
mov r8, r9
nop dword [rax]
nop dword [rax + rax]
mov eax, 0x2f684bdb
lea r8, [r8 + 1]
mul ebx
mov eax, ebx
sub eax, edx
shr eax, 1
add eax, edx
shr eax, 5
movsx eax, al
imul edx, eax, 0x36
movzx eax, bl
inc ebx
sub al, dl
add al, 0x30
xor byte [r8 - 1], al
cmp ebx, 0x20
jl 0x140036860
mov rdx, r9
mov rcx, r10
call fcn.1400489a0
lea rdx, [0x140048960]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov rdi, qword [rsp + 0x588]
mov rcx, qword [rbp + 0x440]
xor rcx, rsp
call fcn.14004a930
lea r11, [rsp + 0x570]
mov rbx, qword [r11 + 0x20]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
mov rsp, r11
pop rbp
ret