Function at 0x140013bc0
Capabilities:
Execute command

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x210]
sub rsp, 0x310
mov rax, qword [0x140033040]
xor rax, rsp
mov qword [rbp + 0x200], rax
mov rdi, rcx
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rbx, rax
call qword [sym.imp.KERNEL32.dll_GetConsoleWindow]
lea r14, [0x140000000]
xor r15d, r15d
mov rsi, rax
lea r12, str.runas
lea r13, [0x14002a258]
nop word [rax + rax]
lea rcx, [0x140028ce0]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov edx, 0xb
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
call fcn.140005de0
mov edx, 7
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea rdx, str._n_n_n
call fcn.140018dc0
mov edx, 9
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea rdx, str._n
call fcn.140018dc0
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea rdx, str._____Welcome_to_411s_Video_Tool______________n
call fcn.140018dc0
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea rdx, str.____Advanced_Processing_Suite_v1.0____________n
call fcn.140018dc0
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea rdx, [0x14002a110]
call fcn.140018dc0
mov edx, 7
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea rdx, str._n_n
call fcn.140018dc0
mov edx, 9
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea rdx, str.___Processing_Tools_n_n
call fcn.140018dc0
mov edx, 0xb
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea rdx, str.1._Installer__Uninstaller_n
call fcn.140018dc0
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea rdx, str.2._Encode_or_Copy_Source_n
call fcn.140018dc0
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea rdx, str.3._DMFS_Encoding_Settings_n
call fcn.140018dc0
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea rdx, str.4._EDL_Export_n
call fcn.140018dc0
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea rdx, str.5._BluRay__Web_Info_n
call fcn.140018dc0
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea rdx, str.6._Exit_n_n
call fcn.140018dc0
mov edx, 0xd
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea rdx, str.Choose_an_option:
call fcn.140018dc0
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_istream_char__struct_std::char_traits_char___std::cin]
lea rdx, [rbp - 0x14]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_istream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_istream_char__struct_std::char_traits_char__::operator___int____ptr64____ptr64]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_istream_char__struct_std::char_traits_char___std::cin]
mov edx, 1
mov r8d, 0xffffffff
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_istream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_istream_char__struct_std::char_traits_char__::ignore_long_long___int64___int____ptr64]
mov eax, dword [rbp - 0x14]
dec eax
cmp eax, 5
ja case.default.0x140013df2
cdqe
mov ecx, dword [r14 + rax*4 + 0x14030]
add rcx, r14
jmp rcx
lea rax, [rsp + 0x60]
mov dword [rbp - 0x18], r15d
mov qword [rsp + 0x50], rax
lea rcx, [rbp - 0x20]
mov dword [rsp + 0x48], r15d
mov r9d, 0x220
mov dword [rsp + 0x40], r15d
mov r8d, 0x20
mov dword [rsp + 0x38], r15d
mov dl, 2
mov dword [rsp + 0x30], r15d
mov dword [rsp + 0x28], r15d
mov dword [rsp + 0x20], r15d
mov dword [rbp - 0x20], r15d
mov word [rbp - 0x1c], 0x500
call qword [sym.imp.ADVAPI32.dll_AllocateAndInitializeSid]
mov dword [rbp - 0x18], eax
test eax, eax
je 0x140013e69
mov rdx, qword [rsp + 0x60]
lea r8, [rbp - 0x18]
xor ecx, ecx
call qword [sym.imp.ADVAPI32.dll_CheckTokenMembership]
test eax, eax
je 0x140013e69
mov rcx, qword [rsp + 0x60]
call qword [sym.imp.ADVAPI32.dll_FreeSid]
cmp dword [rbp - 0x18], r15d
jne 0x140013f85
xorps xmm0, xmm0
mov dword [rsp + 0x70], 0x70
xor eax, eax
lea rdx, [rbp - 0x10]
movups xmmword [rsp + 0x74], xmm0
mov r8d, 0x104
xor ecx, ecx
movups xmmword [rbp - 0x7c], xmm0
mov qword [rbp - 0x80], r12
movups xmmword [rbp - 0x6c], xmm0
mov qword [rbp - 0x2c], rax
movups xmmword [rbp - 0x5c], xmm0
mov dword [rbp - 0x24], eax
movups xmmword [rbp - 0x4c], xmm0
movups xmmword [rbp - 0x3c], xmm0
call qword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
lea rax, [rbp - 0x10]
mov qword [rbp - 0x70], r13
mov edx, 0xe
mov qword [rbp - 0x78], rax
mov rcx, rbx
mov dword [rbp - 0x60], 1
mov dword [rsp + 0x74], 0x40
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea rdx, str._nRequesting_administrator_privileges..._n
call fcn.140018dc0
lea rcx, [rsp + 0x70]
call qword [sym.imp.SHELL32.dll_ShellExecuteExW]
test eax, eax
je 0x140013f54
mov edx, 6
mov rcx, rsi
call qword [sym.imp.USER32.dll_ShowWindow]
mov rcx, qword [rbp - 0x28]
test rcx, rcx
je 0x140013f2d
mov edx, 0xffffffff
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov rcx, qword [rbp - 0x28]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov ecx, 0x1f4
call qword [sym.imp.KERNEL32.dll_Sleep]
mov edx, 9
mov rcx, rsi
call qword [sym.imp.USER32.dll_ShowWindow]
mov rcx, rsi
call qword [sym.imp.USER32.dll_SetForegroundWindow]
jmp 0x140013c30
mov edx, 0xc
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea rdx, str.Failed_to_get_admin_privileges._Some_features_may_not_work._n
call fcn.140018dc0
mov ecx, 0x7d0
call qword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x140013c30
call fcn.140014050
jmp 0x140013c30
mov rcx, rdi
call fcn.14000c000
jmp 0x140013c30
mov rcx, rdi
call fcn.140006920
jmp 0x140013c30
mov rcx, rdi
call fcn.14000dd50
jmp 0x140013c30
call fcn.14000b500
jmp 0x140013c30
mov edx, 0xc
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea rdx, str.Invalid_option__n
call fcn.140018dc0
mov ecx, 0x3e8
call qword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x140013c30
mov edx, 7
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
mov rcx, qword [rbp + 0x200]
xor rcx, rsp
call fcn.1400247c0
lea r11, [rsp + 0x310]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret