Function at 0x18006ec40
Capabilities:
Reference sql statements
Terminate process

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x20], r9
mov qword [rsp + 8], rcx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
mov rbp, rsp
sub rsp, 0x80
mov eax, dword [rbp + 0x60]
mov r14, rdx
imul edx, eax, 0x3c2
mov r10, r9
mov rdi, r8
mov esi, eax
mov dword [rbp - 0x40], edx
cmp eax, edx
ja 0x18006ecde
mov r15d, dword [rbp + 0x60]
mov r12, qword [rbp - 0x10]
mov r13, qword [rbp - 0x10]
xor eax, eax
cmp esi, 0x2bf2
ja 0x18006ee60
je 0x18006ee2d
cmp esi, 0x96
ja 0x18006edf8
je 0x18006ed41
cmp esi, 0x5c
je 0x18006ed70
cmp esi, 0x69
je 0x18006eccd
cmp esi, 0x6d
je 0x18006ee54
jmp 0x18006f040
mov ebx, 0x16
mov eax, ebx
sub eax, 0x16
je 0x18006ecfd
cmp eax, 1
jne 0x18006ed37
mov rax, qword [rbp - 8]
mov rbx, qword [rsp + 0xc8]
add rsp, 0x80
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
mov eax, dword [rcx]
lea r9, [rbp - 0x48]
mov dword [rbp - 0x48], eax
lea rdx, [rbp - 0x30]
mov eax, dword [r14]
lea rcx, [rbp - 0x18]
mov qword [rbp - 0x30], rax
mov r8, r10
mov rax, qword [rdi]
mov qword [rbp - 0x18], rax
mov dword [rsp + 0x20], 0x105
call fcn.1800a7e30
mov r10, qword [rbp + 0x58]
mov rcx, qword [rbp + 0x40]
mov dword [rbp - 8], eax
inc ebx
cmp ebx, 0x18
jb 0x18006ecd2
mov edx, dword [rbp - 0x40]
mov rax, qword [rdi]
mov r12d, dword [r14 + 0x68]
test rax, rax
je 0x18006f040
mov rax, qword [rax + 0x20]
test byte [rax + 0x60], 0x80
je 0x18006f040
movzx eax, word [r14 + 0x76]
shl rax, 0x20
or r12, rax
jmp 0x18006f040
movsx ecx, byte [r10]
mov rdx, rdi
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fputc]
movsx ebx, byte [r14]
test ebx, ebx
je 0x18006edf0
inc r14
mov rdx, rdi
cmp ebx, 9
jne 0x18006ed9f
lea rcx, [0x1800e4ae8]
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fputs]
jmp 0x18006ede8
cmp ebx, 0xd
jne 0x18006edb3
lea rcx, [0x1800e4aec]
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fputs]
jmp 0x18006ede8
cmp ebx, 0xa
jne 0x18006edc7
lea rcx, [0x1800e4af0]
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fputs]
jmp 0x18006ede8
mov rax, qword [rbp + 0x58]
movsx eax, byte [rax]
cmp ebx, eax
jne 0x18006ede0
mov ecx, 0x5c
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fputc]
mov rdx, rdi
mov ecx, ebx
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fputc]
movsx ebx, byte [r14]
test ebx, ebx
jne 0x18006ed85
inc r14
jmp 0x18006f03d
cmp esi, 0x1af4
je 0x18006ee1b
cmp esi, 0x1fef
jne 0x18006f040
mov dword [rbp - 0x20], eax
mov dword [rbp - 0x24], 1
jmp 0x18006f040
movsx ecx, byte [r10]
mov rdx, rdi
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fputc]
jmp 0x18006f03d
mov ecx, 0x11a
mov eax, ecx
sub eax, 0x11a
je 0x18006ee46
cmp eax, 1
je 0x18006ecde
jmp 0x18006ee4a
mov qword [rbp - 8], r12
inc ecx
cmp ecx, 0x11c
jb 0x18006ee32
mov dword [rbp - 0x1c], 0x80
jmp 0x18006f040
cmp esi, 0x9df7
ja 0x18006ef65
je 0x18006eefd
cmp esi, 0x3f71
je 0x18006eef5
cmp esi, 0x5ef3
je 0x18006eee5
cmp esi, 0x7e75
jne 0x18006f040
cmp dword [rbp - 0x50], 0
je 0x18006f040
mov ebx, 0x56
nop dword [rax]
mov eax, ebx
sub eax, 0x56
je 0x18006eeb5
cmp eax, 1
jne 0x18006eed9
mov ecx, eax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov eax, dword [rbp - 0x50]
lea r9, [rbp - 0x48]
mov r8d, 0xd8
mov dword [rbp - 0x48], eax
lea rdx, [rbp - 0x38]
mov dword [rbp - 0x38], r15d
lea rcx, str.h_Ph_Ph_Ph_Pv_
call fcn.18003ece0
inc ebx
cmp ebx, 0x58
jb 0x18006eea0
jmp 0x18006f03d
mov qword [rbp - 0x10], rax
mov dword [rbp - 0x28], 0x20000
jmp 0x18006f040
mov r13, rax
jmp 0x18006f040
lea rax, [rbp - 0x38]
mov dword [rbp - 0x48], 1
lea r9, [rbp - 0x48]
mov qword [rsp + 0x20], rax
mov r8d, 0xbc
mov dword [rbp - 0x38], r15d
lea rdx, [rbp - 0x50]
lea rcx, [0x1800d7da0]
call fcn.18006c670
cmp dword [rbp - 0x50], 0
je 0x18006f03d
mov eax, dword [rbp - 0x50]
lea r9, [rbp + 0x60]
mov r8d, 0xd8
mov dword [rbp + 0x60], eax
lea rdx, [rbp - 0x30]
mov dword [rbp - 0x30], r15d
lea rcx, str.CIMStatusCodeDescription
call fcn.18003ece0
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
cmp esi, 0xbd79
je 0x18006efe3
cmp esi, 0xdcfb
jne 0x18006f040
test r13, r13
je 0x18006f0b7
mov edi, 0xcd
nop word [rax + rax]
mov eax, edi
sub eax, 0xcd
je 0x18006f08f
cmp eax, 1
jne 0x18006f0a7
cmp dword [rbp - 0x50], 0
je 0x18006f0a7
mov ebx, 0x92
nop word [rax + rax]
cmp ebx, 0x92
je 0x18006f05b
cmp ebx, 0x13d
jne 0x18006f07b
inc dword [0x1800fb2e8]
jmp 0x18006f07b
lea r8, [0x1800f655c]
lea rdx, str.addWeighted
lea rcx, str.SELECT_IntValue_FROM_info_WHERE_PropName_
call fcn.1800d0700
mov eax, dword [rbp - 0x28]
lea r9, [rbp - 0x48]
mov dword [rbp - 0x18], eax
lea rdx, [rbp - 0x18]
mov eax, dword [rbp - 0x24]
lea rcx, [rbp - 0x30]
mov dword [rbp - 0x38], eax
mov r8d, 0x11b
mov eax, dword [rbp - 0x20]
mov dword [rbp - 0x48], eax
mov eax, dword [rbp - 0x1c]
mov dword [rbp - 0x30], eax
mov rax, qword [r14]
mov qword [rsp + 0x28], rax
lea rax, [rbp - 0x38]
mov qword [rsp + 0x20], rax
call fcn.18007a170
mov edx, dword [rbp - 0x40]
imul eax, dword [rbp + 0x60], 0x4a
add esi, eax
cmp esi, edx
ja 0x18006ecde
mov r10, qword [rbp + 0x58]
mov rcx, qword [rbp + 0x40]
jmp 0x18006ec8b
mov eax, dword [rbp - 0x50]
lea r9, [rbp + 0x60]
mov r8d, 0xd8
mov dword [rbp + 0x60], eax
lea rdx, [rbp - 0x30]
mov dword [rbp - 0x30], r15d
mov rcx, r13
call fcn.18003ece0
add ebx, 0xab
cmp ebx, 0x1e8
jb 0x18006efc0
jmp 0x18006f0a7
mov r8, r13
mov dword [rbp + 0x60], r15d
mov edx, 0xd4
lea rcx, [rbp + 0x60]
call fcn.180029f60
mov dword [rbp - 0x50], eax
inc edi
cmp edi, 0xcf
jb 0x18006ef90
jmp 0x18006f0f2
mov rdx, qword [rbp - 0x10]
mov dword [rbp + 0x60], r15d
test rdx, rdx
je 0x18006f0e1
xor r9d, r9d
mov qword [rsp + 0x20], rax
lea r8, [rbp + 0x60]
lea ecx, [r9 + 0x2e]
call fcn.1800a9b70
mov dword [0x1800fb2e8], eax
jmp 0x18006f0f2
xor r8d, r8d
lea rdx, [rbp + 0x60]
mov ecx, 0xf9
call fcn.18007ff20
mov ecx, dword [0x1800fb2e8]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3