Function at 0x1800be2c0
Capabilities:
Execute command

Disassembly:
mov qword [rsp + 8], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0xb0]
sub rsp, 0x1b0
mov rax, qword [0x1800e5c38]
xor rax, rsp
mov qword [rbp + 0xa0], rax
mov r13, qword [rbp + 0x120]
lea rbx, [0x180000000]
mov edi, dword [rsp + 0x58]
mov r15, rdx
lea edx, [rcx + 0xe]
mov qword [rbp - 0x48], r9
mov qword [rbp - 0x28], r8
mov r10, r9
mov r9, qword [rbp + 0x118]
mov r11, r8
mov r8, qword [rbp + 0x110]
mov r12d, ecx
mov dword [rbp - 0x80], ecx
mov eax, ecx
mov qword [rsp + 0x68], r8
mov esi, 0xffffffff
mov qword [rbp - 0x78], r9
mov dword [rbp - 0x70], ecx
mov dword [rsp + 0x70], edx
cmp ecx, edx
jae 0x1800be9fa
mov r8d, dword [rsp + 0x58]
mov r14, qword [rbp - 0x38]
mov ebx, dword [rbp - 0x80]
mov r12d, dword [rbp - 0x80]
mov dword [rsp + 0x78], r8d
nop
add eax, 0xffffff65
cmp eax, 0x3c
ja case.0x1800be385.159
lea r8, [0x180000000]
movzx eax, byte [r8 + rax + 0xbee70]
mov ecx, dword [r8 + rax*4 + 0xbee34]
add rcx, r8
jmp rcx
mov rcx, r14
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov edx, dword [rsp + 0x70]
mov r8, qword [rsp + 0x68]
mov eax, dword [rbp - 0x70]
mov r10, qword [rbp - 0x48]
inc eax
mov r11, qword [rbp - 0x28]
mov r9, qword [rbp - 0x78]
mov dword [rbp - 0x70], eax
cmp eax, edx
jae 0x1800bea04
mov esi, 0xffffffff
jmp 0x1800be360
mov rax, qword [r13]
cmp qword [r11], rax
jne 0x1800be3f4
mov ecx, 0x10e
nop word [rax + rax]
mov eax, ecx
sub eax, 0x10d
je case.0x1800bea3f.155
cmp eax, 1
jne 0x1800be3ea
mov dword [rsp + 0x60], 0
add ecx, esi
cmp ecx, 0x10c
ja 0x1800be3d0
test r10, r10
jne case.0x1800be385.159
mov esi, 0xdf
nop
mov eax, esi
sub eax, 0xdf
je 0x1800be418
cmp eax, 0x7e
jne 0x1800be487
lea r10, [rbp]
mov qword [rbp - 0x48], r10
jmp 0x1800be487
mov eax, dword [r15]
lea rdx, [rbp]
mov dword [rsp + 0x50], eax
mov r8d, 0xf4
mov rax, qword [r9]
xor ecx, ecx
mov qword [rsp + 0x58], rax
lea r9, [rsp + 0x50]
lea rax, [rsp + 0x58]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], 0
call fcn.1800c04d0
mov ebx, eax
test eax, eax
je 0x1800be483
mov ecx, 0xcc
nop dword [rax + rax]
mov eax, ecx
sub eax, 0xcc
je 0x1800be474
cmp eax, 0x49
je case.0x1800bea3f.155
jmp 0x1800be478
mov dword [rsp + 0x60], ebx
add ecx, 0x49
cmp ecx, 0x15e
jb 0x1800be460
mov r9, qword [rbp - 0x78]
add esi, 0x7e
cmp esi, 0x1db
jb 0x1800be400
jmp 0x1800be390
mov rax, qword [r9]
mov rcx, qword [rax + 0x20]
cmp word [rcx + 0xfe], 0x40
jae 0x1800be950
mov eax, 0xd5
cmp eax, 0xd5
je 0x1800be935
add eax, 0xa314
cmp eax, 0xa314
jbe 0x1800be4b5
jmp case.0x1800be385.159
mov eax, dword [rbp - 0x40]
test eax, eax
jne 0x1800be526
mov esi, 0xc2
nop dword [rax]
cmp esi, 0xc2
je 0x1800be508
cmp esi, 0x9da
je 0x1800be4fe
cmp esi, 0x12f2
je case.0x1800bea3f.155
jmp 0x1800be511
mov dword [rsp + 0x60], 0
jmp 0x1800be511
mov rcx, r14
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
add esi, 0x918
cmp esi, 0x1b48
jbe 0x1800be4e0
mov eax, dword [rbp - 0x40]
mov r9, qword [rbp - 0x78]
mov dword [rsp + 0x78], eax
lea rdx, [rbp - 0x38]
mov eax, dword [r9]
mov r8d, 0x150
mov dword [rsp + 0x50], eax
lea r9, [rsp + 0x78]
lea rax, [rsp + 0x50]
xor ecx, ecx
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], 0
call fcn.1800c7310
mov r14, qword [rbp - 0x38]
mov dword [rsp + 0x78], eax
jmp 0x1800be390
mov eax, dword [r10]
mov dword [rbp - 0x20], eax
jmp case.0x1800be385.159
test dword [r10 + 0x20], 0x80000
je 0x1800be5e0
mov rax, qword [r13]
lea r8, [rbp - 0x68]
mov qword [rbp - 0x30], rax
xor edx, edx
mov rax, qword [r11]
mov rcx, r10
mov qword [rsp + 0x58], rax
mov eax, dword [r15]
mov dword [rsp + 0x50], eax
mov rax, qword [r9]
xor r9d, r9d
mov qword [rbp - 0x68], rax
lea rax, [rsp + 0x58]
mov dword [rsp + 0x40], 0x5d
mov qword [rsp + 0x38], rax
lea rax, [rbp - 0x30]
mov qword [rsp + 0x30], rax
lea rax, [rsp + 0x50]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], 0
call fcn.180092620
mov ebx, eax
jmp 0x1800be390
mov esi, 0x3b
mov eax, esi
sub eax, 0x3b
je 0x1800be665
sub eax, 1
je 0x1800be644
cmp eax, 1
jne 0x1800be673
mov eax, dword [r11]
lea r8, [rsp + 0x58]
mov dword [rsp + 0x50], eax
lea rdx, [rbp - 0x68]
mov rax, qword [r9]
mov ecx, 0x22
mov qword [rbp - 0x68], rax
mov r9, r10
mov rax, qword [rsp + 0x68]
mov qword [rsp + 0x28], rax
lea rax, [rsp + 0x50]
mov qword [rsp + 0x20], rax
mov dword [rsp + 0x58], r12d
call fcn.1800bb400
mov r10, qword [rbp - 0x48]
mov rbx, rax
mov r11, qword [rbp - 0x28]
mov r9, qword [rbp - 0x78]
jmp 0x1800be673
mov r12, qword [r13]
mov edx, 0xffffffff
mov rcx, qword [r11]
mov rax, r12
sub rax, rcx
cmp rax, rdx
jae 0x1800be660
sub r12d, ecx
jmp 0x1800be673
mov r12d, edx
jmp 0x1800be673
mov eax, 0xffffffff
cmp qword [r11], rax
ja 0x1800be710
inc esi
cmp esi, 0x3e
jb 0x1800be5e5
jmp 0x1800be390
mov rax, qword [r13]
cmp qword [r11], rax
jbe case.0x1800be385.159
mov eax, SHStripMneumonicA
cmp eax, 0xc9
je 0x1800be6a9
cmp eax, 0x2a66
je case.0x1800bea3f.155
jmp 0x1800be6b1
mov dword [rsp + 0x60], 0x16
add eax, 0x299d
cmp eax, 0x533a
jbe 0x1800be695
jmp case.0x1800be385.159
mov dword [rbp - 0x1c], 0
jmp case.0x1800be385.159
mov qword [rbp - 0x50], 0
jmp case.0x1800be385.159
mov eax, dword [r10]
cmp dword [r15], eax
jne 0x1800be790
mov esi, 0xc5
nop dword [rax]
cmp esi, 0xc5
je 0x1800be753
cmp esi, 0x820d
je 0x1800be71d
cmp esi, 0x10355
jne 0x1800be77a
nop dword [rax + rax]
mov dword [rsp + 0x60], 0
jmp case.0x1800bea3f.155
cmp dword [r15], 2
lea rcx, [0x1800d2934]
mov rdx, qword [r13]
lea rax, [0x1800dc3c8]
cmove rcx, rax
nop word [rax + rax]
movzx eax, byte [rcx]
lea rcx, [rcx + 1]
mov byte [rdx], al
lea rdx, [rdx + 1]
test al, al
jne 0x1800be740
jmp 0x1800be77a
lea r9, [rsp + 0x58]
mov dword [rsp + 0x58], 2
xor r8d, r8d
mov rdx, r13
mov ecx, 0xac
call fcn.180098000
mov edi, eax
test eax, eax
jne 0x1800bee00
add esi, 0x8148
cmp esi, 0x183d8
jbe 0x1800be6f0
mov edx, dword [rsp + 0x70]
cmp dword [r15], 0
je 0x1800be7a5
mov r8, qword [rsp + 0x68]
cmp dword [r8], 0
jge 0x1800be399
mov esi, 0xdc
nop word [rax + rax]
cmp esi, 0xdc
je 0x1800be7ef
cmp esi, 0x88a4
je 0x1800be7e2
cmp esi, 0x1106c
je 0x1800be7d6
cmp esi, 0x19834
je 0x1800be710
jmp 0x1800be80e
mov rax, qword [r13]
mov dword [rax], 0x2e2e2e
jmp 0x1800be80e
test edi, edi
je 0x1800be80e
mov dword [rsp + 0x60], edi
jmp case.0x1800bea3f.155
lea r9, [rsp + 0x58]
mov dword [rsp + 0x58], 4
xor r8d, r8d
mov rdx, r13
mov ecx, 0xac
call fcn.180098000
mov edi, eax
add esi, 0x87c8
cmp esi, 0x21f20
jbe 0x1800be7b0
jmp 0x1800be390
cmp byte [r15], 0x21
jne 0x1800be8be
movsxd rcx, dword [r9]
mov rax, qword [0x1800e5d78]
mov rcx, qword [rax + rcx*8]
test byte [rcx + 0x50], 1
je 0x1800be86e
mov eax, 0xd4
cmp eax, 0xd4
je 0x1800be858
cmp eax, 0x188
je case.0x1800bea3f.155
jmp 0x1800be860
mov dword [rsp + 0x60], 0xb6d0a
add eax, 0xb4
cmp eax, 0x23c
jb 0x1800be844
jmp 0x1800be8be
mov esi, 0xbe
mov eax, esi
sub eax, 0xbd
je case.0x1800bea3f.155
cmp eax, 1
jne 0x1800be8ab
inc r15
mov rcx, r15
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
test eax, eax
jns 0x1800be8a3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__errno]
mov ecx, dword [rax]
mov dword [rsp + 0x60], ecx
jmp 0x1800be8ab
mov dword [rsp + 0x60], 0
mov eax, 0xffffffff
add esi, eax
cmp esi, 0xbc
ja 0x1800be873
mov r9, qword [rbp - 0x78]
mov eax, dword [r9]
lea rdx, [rbp - 0x40]
mov r9, r15
mov dword [rsp + 0x58], eax
mov r8d, 0x4c
lea rcx, [rsp + 0x58]
call fcn.1800bf800
mov r14, rax
mov qword [rbp - 0x38], rax
jmp 0x1800be390
test ebx, ebx
jne 0x1800be960
mov eax, dword [r15]
lea r8d, [rbx + 0x56]
mov dword [rsp + 0x58], eax
lea rcx, [rbp - 0x68]
mov rax, qword [r9]
xor edx, edx
lea r9, [rsp + 0x58]
mov qword [rbp - 0x68], rax
mov qword [rsp + 0x20], r10
call fcn.1800a1140
mov dword [rsp + 0x60], eax
jmp 0x1800be390
movzx eax, byte [r15]
cmp al, 0x20
je 0x1800be930
cmp al, 9
jne case.0x1800be385.159
inc r15
jmp case.0x1800be385.185
mov eax, dword [r10]
shl rax, 5
add rax, r15
jmp 0x1800bee09
mov eax, dword [r10]
shl rax, 6
add rax, r15
jmp 0x1800bee09
mov dword [rsp + 0x60], ebx
jmp case.0x1800bea3f.155
movzx eax, byte [rbp - 0x60]
nop dword [rax]
mov ebx, 0x11a
mov ecx, ebx
sub ecx, 0x119
je 0x1800be9ed
cmp ecx, 1
jne 0x1800be9e1
mov rax, qword [r9]
lea rdx, [rbp - 0x68]
lea r9, [rsp + 0x58]
mov qword [rbp - 0x68], rax
xor r8d, r8d
mov dword [rsp + 0x58], 2
xor ecx, ecx
mov dword [rsp + 0x20], 0x87
call fcn.1800643e0
cmp al, 2
jne 0x1800be9dd
mov ecx, 0x41
cmp ecx, 0x41
je 0x1800be9ca
cmp ecx, 0x30c0
je case.0x1800bea3f.155
jmp 0x1800be9cf
mov byte [rsp + 0x60], 1
add ecx, 0x307f
cmp ecx, 0x60fe
jbe 0x1800be9b7
mov r9, qword [rbp - 0x78]
add ebx, esi
cmp ebx, 0x118
ja 0x1800be975
jmp 0x1800be970
test al, al
jne 0x1800be9e1
mov byte [rsp + 0x60], al
jmp case.0x1800bea3f.155
mov edx, dword [rsp + 0x58]
mov dword [rsp + 0x78], edx
jmp 0x1800bea0f
mov r12d, dword [rbp - 0x80]
lea rbx, [0x180000000]
lea esi, [r12 - 0xf]
cmp r12d, esi
jbe case.0x1800bea3f.155
lea eax, [r12 - 0x9b]
lea rdx, [0x1800a5960]
cmp eax, 0x1e
ja case.0x1800bea3f.156
mov ecx, dword [rbx + rax*4 + 0xbeeb0]
add rcx, rbx
jmp rcx
mov rcx, qword [rbp - 0x58]
dec rcx
nop dword [rax + rax]
cmp byte [rcx + 1], 0
lea rcx, [rcx + 1]
jne 0x1800bea50
movzx eax, word [0x1800dc3c8]
mov word [rcx], ax
jmp case.0x1800bea3f.156
xor r9d, r9d
lea rdx, [rbp - 0x50]
xor r8d, r8d
lea ecx, [r9 + 0x4a]
call fcn.180086260
xor r9d, r9d
lea rdx, [rbp - 0x18]
xor r8d, r8d
lea ecx, [r9 + 0x4a]
call fcn.180086260
jmp case.0x1800bea3f.156
mov rax, qword [rbp - 0x18]
test rax, rax
je 0x1800bead7
mov rcx, 0xffffffffffffffff
inc rcx
cmp byte [rax + rcx], 0
jne 0x1800beaa4
mov rdx, qword [rbp - 0x50]
mov rax, 0xffffffffffffffff
nop dword [rax + rax]
inc rax
cmp byte [rdx + rax], 0
jne 0x1800beac0
add ecx, 2
lea r9, [rbp - 0x80]
add eax, ecx
mov dword [rbp - 0x80], eax
jmp 0x1800beaf5
mov rcx, qword [rbp - 0x50]
mov rax, 0xffffffffffffffff
inc rax
cmp byte [rcx + rax], 0
jne 0x1800beae2
add eax, 5
lea r9, [rbp - 0x68]
mov dword [rbp - 0x68], eax
xor r8d, r8d
lea rdx, [rbp - 0x58]
mov ecx, 0xac
call fcn.180098000
mov edi, eax
test edi, edi
jne 0x1800bed26
jmp case.0x1800bea3f.156
xor edi, edi
mov r12d, 0xa0
jmp case.0x1800bea3f.156
mov eax, dword [r15]
lea rcx, [rbp - 0x20]
mov qword [rsp + 0x30], rdx
mov r8, r11
mov dword [rsp + 0x58], eax
lea rdx, [rsp + 0x50]
mov rax, qword [r9]
lea r9, [rsp + 0x58]
mov qword [rbp - 0x30], rax
lea rax, [rbp - 0x30]
mov dword [rsp + 0x28], 0x11c
mov qword [rsp + 0x20], rax
mov dword [rsp + 0x50], 0
call fcn.180087490
mov edi, eax
cmp eax, 0x7f2bb74a
jne 0x1800bec3e
mov r14, qword [rbp - 0x48]
mov ebx, 0xff
nop word [rax + rax]
mov eax, ebx
sub eax, 0xff
je 0x1800bebcd
sub eax, 1
je 0x1800bebc3
sub eax, 1
je 0x1800beba1
cmp eax, 1
je 0x1800be710
jmp 0x1800bec2b
mov rdx, qword [r13]
lea rcx, [rbp + 0x80]
nop dword [rax]
movzx eax, byte [rcx]
lea rcx, [rcx + 1]
mov byte [rdx], al
lea rdx, [rdx + 1]
test al, al
jne 0x1800bebb0
jmp 0x1800bec2b
test edi, edi
jne 0x1800bed26
jmp 0x1800bec2b
mov r9d, dword [r14]
lea rcx, [rbp + 0x80]
mov r8d, dword [r15]
test r9d, r9d
je 0x1800bebed
lea rdx, str.__u____u_
call fcn.1800cfbc0
jmp 0x1800bebf9
lea rdx, str.__u_
call fcn.1800cfbc0
lea rcx, [rbp + 0x80]
mov rax, 0xffffffffffffffff
inc rax
cmp byte [rcx + rax], 0
jne 0x1800bec07
inc eax
lea r9, [rbp - 0x38]
xor r8d, r8d
mov dword [rbp - 0x38], eax
mov rdx, r13
mov ecx, 0xac
call fcn.180098000
mov edi, eax
inc ebx
cmp ebx, 0x103
jb 0x1800beb80
jmp case.0x1800bea3f.156
test eax, eax
je case.0x1800bea3f.156
mov r12d, 0xa0
jmp case.0x1800bea3f.156
mov rax, qword [rbp - 0x50]
cmp byte [rax + 1], 0
je case.0x1800bea3f.156
mov rcx, qword [rbp - 0x58]
dec rcx
cmp byte [rcx + 1], 0
lea rcx, [rcx + 1]
jne 0x1800bec66
mov r8, qword [rbp - 0x50]
xor edx, edx
nop word [rax + rax]
movzx eax, byte [r8 + rdx]
mov byte [rcx + rdx], al
lea rdx, [rdx + 1]
test al, al
jne 0x1800bec80
jmp case.0x1800bea3f.156
mov rax, qword [rbp - 0x58]
mov byte [rax], 0
jmp case.0x1800bea3f.156
mov qword [rbp - 0x18], 0
mov dword [rbp - 0x10], 0
jmp case.0x1800bea3f.156
mov rcx, qword [rbp - 0x58]
dec rcx
cmp qword [rbp - 0x18], 0
je 0x1800bed00
cmp byte [rcx + 1], 0
lea rcx, [rcx + 1]
jne 0x1800becc3
mov r8, qword [rbp - 0x18]
xor edx, edx
nop dword [rax]
nop word [rax + rax]
movzx eax, byte [r8 + rdx]
mov byte [rcx + rdx], al
lea rdx, [rdx + 1]
test al, al
jne 0x1800bece0
mov rax, qword [rbp - 0x58]
mov qword [r13], rax
jmp case.0x1800bea3f.156
cmp byte [rcx + 1], 0
lea rcx, [rcx + 1]
jne 0x1800bed00
mov eax, dword [0x1800dc57c]
mov dword [rcx], eax
mov rax, qword [rbp - 0x58]
mov qword [r13], rax
jmp case.0x1800bea3f.156
mov edi, dword [rbp - 0x10]
test edi, edi
je 0x1800bed31
mov r12d, 0xa0
jmp case.0x1800bea3f.156
mov eax, dword [r8]
lea rdx, [rbp - 0x70]
dec eax
mov r8, r11
mov dword [rsp + 0x58], eax
mov ecx, 0xaa
mov eax, dword [r15]
mov dword [rsp + 0x50], eax
mov eax, dword [rbp - 0x1c]
mov dword [rbp - 0x70], eax
mov rax, qword [r9]
lea r9, [rsp + 0x50]
mov qword [rbp - 0x30], rax
lea rax, [rbp - 0x50]
mov qword [rsp + 0x30], rax
lea rax, [rbp - 0x30]
mov qword [rsp + 0x28], rax
lea rax, [rsp + 0x58]
mov qword [rsp + 0x20], rax
call fcn.1800be2c0
mov rdi, rax
jmp case.0x1800bea3f.156
cmp dword [r10], 0
jne case.0x1800bea3f.156
mov ecx, 0xd1
cmp ecx, 0xd1
je 0x1800beda6
cmp ecx, 0x185
je 0x1800be710
jmp 0x1800bedae
mov rax, qword [rbp - 0x50]
mov qword [r13], rax
add ecx, 0xb4
cmp ecx, 0x239
jb 0x1800bed90
mov eax, 0xffffffff
add r12d, eax
cmp r12d, esi
jbe case.0x1800bea3f.155
mov r10, qword [rbp - 0x48]
lea rbx, [0x180000000]
mov r11, qword [rbp - 0x28]
mov r9, qword [rbp - 0x78]
mov r8, qword [rsp + 0x68]
jmp 0x1800bea1d
mov eax, dword [rsp + 0x78]
nop dword [rax]
nop dword [rax + rax]
mov dword [rsp + 0x60], eax
mov rax, qword [rsp + 0x60]
mov rcx, qword [rbp + 0xa0]
xor rcx, rsp
call fcn.1800d0500
mov rbx, qword [rsp + 0x1f0]
add rsp, 0x1b0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret