Function at 0x140018c10
Capabilities:
Execute command

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x37]
sub rsp, 0xd0
mov rax, qword [0x140028040]
xor rax, rsp
mov qword [rbp + 0x27], rax
mov ecx, dword [0x1400287cc]
cmp ecx, 1
jle 0x140018f16
xor r12d, r12d
test ecx, ecx
jle 0x140018f16
mov rax, qword [0x1400287e8]
add rax, 0x20
mov edx, ecx
nop dword [rax]
mov rcx, rax
cmp qword [rax + 0x18], 0xf
jbe 0x140018c7d
mov rcx, qword [rax]
cmp qword [rax + 0x10], 6
jne 0x140018c97
cmp dword [rcx], 0xafb5a8d5
jne 0x140018c97
cmp word [rcx + 4], 0xd6b9
jne 0x140018c97
inc r12d
add rax, 0x70
sub rdx, 1
jne 0x140018c70
test r12d, r12d
je 0x140018f16
mov r8d, r12d
mov edx, r12d
lea rcx, [0x140023708]
call fcn.1400010a0
xor r13d, r13d
test r12d, r12d
jle 0x140018f16
nop dword [rax + rax]
cmp dword [0x1400287cc], r12d
jle 0x140018f16
xor r15d, r15d
xorps xmm1, xmm1
movdqu xmmword [rbp + 0xf], xmm1
xor r14d, r14d
mov qword [rbp + 0x1f], r14
lea rcx, [0x140023748]
call fcn.1400010a0
xor esi, esi
mov dword [rbp - 0x79], esi
cmp dword [0x1400287cc], esi
jle 0x140018e1c
xor eax, eax
mov rdi, qword [rbp + 0x17]
nop dword [rax]
nop word [rax + rax]
cdqe
imul rcx, rax, 0x70
mov rax, qword [0x1400287e8]
add rax, rcx
lea rcx, [rax + 0x20]
cmp qword [rax + 0x38], 0xf
jbe 0x140018d3f
mov rcx, qword [rax + 0x20]
cmp qword [rax + 0x30], 6
jne 0x140018d5a
cmp dword [rcx], 0xafb5a8d5
jne 0x140018d5a
cmp word [rcx + 4], 0xd6b9
je 0x140018e09
inc r15d
mov edx, r15d
lea rcx, [0x140021550]
call fcn.1400010a0
lea rax, [rbp - 0x61]
mov qword [rbp - 0x71], rax
movsxd rax, esi
imul rbx, rax, 0x70
add rbx, qword [0x1400287e8]
mov eax, dword [rbx]
mov dword [rbp - 0x61], eax
mov eax, dword [rbx + 4]
mov dword [rbp - 0x5d], eax
mov eax, dword [rbx + 8]
mov dword [rbp - 0x59], eax
mov eax, dword [rbx + 0xc]
mov dword [rbp - 0x55], eax
mov eax, dword [rbx + 0x10]
mov dword [rbp - 0x51], eax
mov eax, dword [rbx + 0x14]
mov dword [rbp - 0x4d], eax
movzx eax, byte [rbx + 0x18]
mov byte [rbp - 0x49], al
lea rdx, [rbx + 0x20]
lea rcx, [rbp - 0x41]
call fcn.140015460
nop
lea rdx, [rbx + 0x40]
lea rcx, [rbp - 0x21]
call fcn.140015460
mov rax, qword [rbx + 0x60]
mov qword [rbp - 1], rax
mov rax, qword [rbx + 0x68]
mov qword [rbp + 7], rax
lea rcx, [rbp - 0x61]
call fcn.140017a30
cmp rdi, r14
je 0x140018df1
mov dword [rdi], esi
add rdi, 4
mov qword [rbp + 0x17], rdi
jmp 0x140018e09
lea r8, [rbp - 0x79]
mov rdx, rdi
lea rcx, [rbp + 0xf]
call fcn.140015770
mov r14, qword [rbp + 0x1f]
mov rdi, qword [rbp + 0x17]
inc esi
mov dword [rbp - 0x79], esi
mov eax, esi
cmp esi, dword [0x1400287cc]
jl 0x140018d20
lea rcx, [0x140021554]
call fcn.1400010a0
call fcn.140017b40
cmp eax, 1
jl 0x140018e37
cmp eax, r15d
jle 0x140018e40
lea rcx, [0x140021558]
jmp 0x140018e23
cdqe
mov rbx, qword [rbp + 0xf]
movsxd rax, dword [rbx + rax*4 - 4]
imul rdi, rax, 0x70
mov rax, qword [0x1400287e8]
mov byte [rdi + rax + 0x18], 0
mov rax, qword [0x1400287e8]
mov dword [rdi + rax + 0x10], 0
mov r8, qword [0x1400287e8]
add r8, rdi
mov rax, qword [0x1400287d8]
cmp rax, qword [0x1400287e0]
je 0x140018e99
mov rdx, r8
mov rcx, rax
call fcn.140001370
add qword [0x1400287d8], 0x70
jmp 0x140018ea8
mov rdx, rax
lea rcx, [0x1400287d0]
call fcn.140015900
mov r8, qword [0x1400287e8]
add r8, rdi
lea rdx, [rbp - 0x69]
lea rcx, [0x1400287e8]
call fcn.140015310
dec dword [0x1400287cc]
inc dword [0x1400287c8]
inc r13d
test rbx, rbx
je 0x140018f0d
sub r14, rbx
and r14, 0xfffffffffffffffc
mov rax, rbx
cmp r14, 0x1000
jb 0x140018f02
add r14, 0x27
mov rbx, qword [rbx - 8]
sub rax, rbx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140018fec
mov rdx, r14
mov rcx, rbx
call fcn.14001efcc
cmp r13d, r12d
jl 0x140018cd0
call fcn.14001b9f0
xor r14d, r14d
movsxd rax, dword [0x1400287c8]
test eax, eax
jle 0x140018f7a
mov r10, qword [0x1400287d0]
mov r9, rax
xor edx, edx
xor r8d, r8d
nop dword [rax + rax]
lea rax, [r10 + r8]
lea rcx, [rax + 0x20]
cmp qword [rax + 0x38], 0xf
jbe 0x140018f53
mov rcx, qword [rax + 0x20]
cmp qword [rax + 0x30], 6
jne 0x140018f6e
cmp dword [rcx], 0xd3d7cdcb
jne 0x140018f6e
cmp word [rcx + 4], 0xd7ba
je 0x140018ff3
inc rdx
add r8, 0x70
cmp rdx, r9
jl 0x140018f40
xor r15b, r15b
xor edi, edi
cmp dword [0x1400287cc], edi
jle 0x140019193
xor esi, esi
nop dword [rax]
mov rax, qword [0x1400287e8]
cmp dword [rsi + rax + 8], 2
je 0x140019181
mov byte [rsi + rax + 0x18], 0
mov rax, qword [0x1400287e8]
mov dword [rsi + rax + 0x10], 0
movsxd rax, edi
imul rbx, rax, 0x70
mov r8, qword [0x1400287e8]
add r8, rbx
mov rax, qword [0x1400287d8]
cmp rax, qword [0x1400287e0]
je 0x140018ff8
mov rdx, r8
mov rcx, rax
call fcn.140001370
add qword [0x1400287d8], 0x70
jmp 0x140019007
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov r15b, 1
jmp 0x140018f7d
mov rdx, rax
lea rcx, [0x1400287d0]
call fcn.140015900
mov r8, qword [0x1400287e8]
add r8, rbx
lea rdx, [rbp - 0x69]
lea rcx, [0x1400287e8]
call fcn.140015310
dec dword [0x1400287cc]
inc dword [0x1400287c8]
inc r14d
call fcn.14001b9f0
cmp r14d, 2
jne 0x140019187
test r15b, r15b
je 0x140019187
inc dword [0x1400287c0]
xor edx, edx
xor r9d, r9d
mov r10d, dword [0x1400287c8]
test r10d, r10d
jle 0x140019122
mov r11, qword [0x1400287d0]
xor r8d, r8d
nop dword [rax]
lea rax, [r11 + r8]
lea rcx, [rax + 0x20]
cmp qword [rax + 0x38], 0xf
jbe 0x140019083
mov rcx, qword [rax + 0x20]
cmp qword [rax + 0x30], 6
jne 0x14001909a
cmp dword [rcx], 0xd3d7cdcb
jne 0x14001909a
cmp word [rcx + 4], 0xd7ba
je 0x1400190aa
inc edx
inc r9
add r8, 0x70
cmp edx, r10d
jl 0x140019070
jmp 0x140019122
imul rax, r9, 0x70
mov dword [rax + r11 + 0x10], 3
movsxd rax, edx
imul rbx, rax, 0x70
mov r8, qword [0x1400287d0]
add r8, rbx
mov rax, qword [0x14002b598]
cmp rax, qword [0x14002b5a0]
je 0x1400190ed
mov rdx, r8
mov rcx, rax
call fcn.140001370
add qword [0x14002b598], 0x70
jmp 0x1400190fc
mov rdx, rax
lea rcx, [0x14002b590]
call fcn.140015900
mov r8, qword [0x1400287d0]
add r8, rbx
lea rdx, [rbp - 0x71]
lea rcx, [0x1400287d0]
call fcn.140015310
dec dword [0x1400287c8]
inc dword [0x140028770]
call fcn.140015f50
lea rcx, [0x140023760]
call fcn.1400010a0
lea rcx, str.pause
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov eax, dword [0x140028754]
cmp dword [0x1400287c0], eax
je 0x14001932c
mov ecx, 1
call fcn.14001a050
mov ecx, 1
call fcn.14001b400
cmp dword [0x140028768], 0
je 0x1400192f3
xor edx, edx
mov ecx, 1
call fcn.14001ac30
jmp 0x140019187
inc edi
add rsi, 0x70
cmp edi, dword [0x1400287cc]
jl 0x140018f90
call fcn.140015f50
mov eax, dword [0x140028754]
dec eax
mov r9, qword [0x1400287e8]
movsxd r10, dword [0x1400287cc]
mov ebx, dword [0x1400287c0]
cmp ebx, eax
jl 0x140019203
test r10d, r10d
jle 0x1400192f3
xor ecx, ecx
xor edx, edx
nop word [rax + rax]
lea rax, [r9 + rdx]
lea r8, [rax + 0x20]
cmp qword [rax + 0x38], 0xf
jbe 0x1400191e3
mov r8, qword [rax + 0x20]
cmp qword [rax + 0x30], 4
jne 0x1400191f7
cmp dword [r8], 0xadb1a5ca
je 0x140019320
inc rcx
add rdx, 0x70
cmp rcx, r10
jl 0x1400191d0
test r10d, r10d
jle 0x1400192f3
xor ecx, ecx
xor edx, edx
lea rax, [r9 + rdx]
lea r8, [rax + 0x20]
cmp qword [rax + 0x38], 0xf
jbe 0x140019223
mov r8, qword [rax + 0x20]
cmp qword [rax + 0x30], 4
jne 0x140019233
cmp dword [r8], 0xf7d6abb9
je 0x140019244
inc rcx
add rdx, 0x70
cmp rcx, r10
jl 0x140019210
jmp 0x1400192f3
inc ebx
mov dword [0x1400287c0], ebx
call fcn.140015f50
lea rcx, [0x1400237b8]
call fcn.1400010a0
lea rcx, str.pause
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov r11d, dword [0x140028754]
lea eax, [r11 - 1]
mov ebx, dword [0x1400287c0]
cmp ebx, eax
jl 0x1400192cf
movsxd rax, dword [0x1400287cc]
test eax, eax
jle 0x1400192cf
mov r10, qword [0x1400287e8]
mov r9, rax
xor ecx, ecx
xor edx, edx
nop dword [rax + rax]
lea rax, [r10 + rdx]
lea r8, [rax + 0x20]
cmp qword [rax + 0x38], 0xf
jbe 0x1400192b3
mov r8, qword [rax + 0x20]
cmp qword [rax + 0x30], 4
jne 0x1400192c3
cmp dword [r8], 0xadb1a5ca
je 0x140019320
inc rcx
add rdx, 0x70
cmp rcx, r9
jl 0x1400192a0
cmp ebx, r11d
je 0x14001932c
mov ecx, 1
call fcn.14001b400
cmp dword [0x140028768], 0
je 0x1400192f3
xor edx, edx
mov ecx, 1
call fcn.14001ac30
mov rcx, qword [rbp + 0x27]
xor rcx, rsp
call fcn.14001ef70
lea r11, [rsp + 0xd0]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
lea rcx, [0x140023798]
call fcn.1400010a0
mov dword [0x140028750], 1
mov dword [0x140028768], 0
jmp 0x1400192f3