Function at 0x140001c90
Capabilities:
Execute command

Disassembly:
push r13
push r12
push rbp
push rdi
push rsi
push rbx
sub rsp, 0x88
movabs rax, 0x206e776f656b6174
mov r8, qword [rcx + 8]
mov rdx, qword [rcx]
lea r12, [rsp + 0x20]
mov rbp, rcx
lea rbx, [rsp + 0x30]
mov qword [rsp + 0x30], rax
mov rcx, r12
mov qword [rsp + 0x20], rbx
mov dword [rsp + 0x38], 0x2220662f
mov qword [rsp + 0x28], 0xc
mov byte [rsp + 0x3c], 0
call fcn.14009ecc0
lea rsi, [rsp + 0x50]
lea rdx, [rax + 0x10]
mov qword [rsp + 0x40], rsi
mov rcx, qword [rax]
cmp rcx, rdx
je 0x140001f28
mov qword [rsp + 0x40], rcx
mov rcx, qword [rax + 0x10]
mov qword [rsp + 0x50], rcx
mov rcx, qword [rax + 8]
lea r13, [rsp + 0x40]
mov qword [rsp + 0x48], rcx
mov qword [rax + 8], 0
mov byte [rax + 0x10], 0
mov qword [rax], rdx
movabs rax, 0x3fffffffffffffff
sub rax, qword [rsp + 0x48]
cmp rax, 8
jbe 0x140001f6f
mov r8d, 9
lea rdx, str.___r__d_y
mov rcx, r13
call fcn.14009ecc0
lea rdi, [rsp + 0x70]
lea rdx, [rax + 0x10]
mov qword [rsp + 0x60], rdi
mov rcx, qword [rax]
cmp rcx, rdx
je 0x140001f50
mov qword [rsp + 0x60], rcx
mov rcx, qword [rax + 0x10]
mov qword [rsp + 0x70], rcx
mov rcx, qword [rax + 8]
mov qword [rsp + 0x68], rcx
mov qword [rax], rdx
mov byte [rax + 0x10], 0
mov rcx, qword [rsp + 0x60]
mov qword [rax + 8], 0
call sub.msvcrt.dll_system
mov rcx, qword [rsp + 0x60]
cmp rcx, rdi
je 0x140001dba
mov rax, qword [rsp + 0x70]
lea rdx, [rax + 1]
call fcn.1400b1880
mov rcx, qword [rsp + 0x40]
cmp rcx, rsi
je 0x140001dd2
mov rax, qword [rsp + 0x50]
lea rdx, [rax + 1]
call fcn.1400b1880
mov rcx, qword [rsp + 0x20]
cmp rcx, rbx
je 0x140001dea
mov rax, qword [rsp + 0x30]
lea rdx, [rax + 1]
call fcn.1400b1880
mov r8, qword [rbp + 8]
mov rdx, qword [rbp]
mov rcx, r12
mov qword [rsp + 0x20], rbx
movabs rax, 0x2220736c63616369
mov byte [rsp + 0x38], 0
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x28], 8
call fcn.14009ecc0
mov qword [rsp + 0x40], rsi
mov rcx, qword [rax]
lea rdx, [rax + 0x10]
cmp rcx, rdx
je 0x140001f40
mov qword [rsp + 0x40], rcx
mov rcx, qword [rax + 0x10]
mov qword [rsp + 0x50], rcx
mov rcx, qword [rax + 8]
mov qword [rsp + 0x48], rcx
mov qword [rax + 8], 0
mov byte [rax + 0x10], 0
mov qword [rax], rdx
movabs rax, 0x3fffffffffffffff
sub rax, qword [rsp + 0x48]
cmp rax, 0x1b
jbe 0x140001f7b
mov r8d, 0x1c
lea rdx, str.___grant_Administrators:F__t
mov rcx, r13
call fcn.14009ecc0
mov qword [rsp + 0x60], rdi
mov rcx, qword [rax]
lea rdx, [rax + 0x10]
cmp rcx, rdx
je 0x140001f60
mov qword [rsp + 0x60], rcx
mov rcx, qword [rax + 0x10]
mov qword [rsp + 0x70], rcx
mov rcx, qword [rax + 8]
mov qword [rsp + 0x68], rcx
mov qword [rax], rdx
mov byte [rax + 0x10], 0
mov rcx, qword [rsp + 0x60]
mov qword [rax + 8], 0
call sub.msvcrt.dll_system
mov rcx, qword [rsp + 0x60]
cmp rcx, rdi
je 0x140001ee2
mov rax, qword [rsp + 0x70]
lea rdx, [rax + 1]
call fcn.1400b1880
mov rcx, qword [rsp + 0x40]
cmp rcx, rsi
je 0x140001efa
mov rax, qword [rsp + 0x50]
lea rdx, [rax + 1]
call fcn.1400b1880
mov rcx, qword [rsp + 0x20]
cmp rcx, rbx
je 0x140001f13
mov rax, qword [rsp + 0x30]
lea rdx, [rax + 1]
call fcn.1400b1880
nop
add rsp, 0x88
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
pop r13
ret
movdqu xmm0, xmmword [rax + 0x10]
movaps xmmword [rsp + 0x50], xmm0
jmp 0x140001d0d
movdqu xmm2, xmmword [rax + 0x10]
movaps xmmword [rsp + 0x50], xmm2
jmp 0x140001e3f
movdqu xmm1, xmmword [rax + 0x10]
movaps xmmword [rsp + 0x70], xmm1
jmp 0x140001d80
movdqu xmm3, xmmword [rax + 0x10]
movaps xmmword [rsp + 0x70], xmm3
jmp 0x140001ea8
lea rcx, [0x1400b80f1]
call fcn.1400b2df0
lea rcx, [0x1400b80f1]
call fcn.1400b2df0
mov rbx, rax
jmp 0x140001f99
lea rcx, [rsp + 0x60]
mov rbx, rax
call fcn.14009ca20
mov rcx, r13
mov r13, rbx
call fcn.14009ca20
mov rcx, r12
call fcn.14009ca20
mov rcx, r13
call fcn.14000d110
jmp 0x140001f8c