Function at 0x18001d230
Capabilities:
Execute command
Terminate process

Disassembly:
push rbp
push rbx
push rsi
push rdi
push r12
push r14
mov rbp, rsp
sub rsp, 0x48
imul r8d, edx, 0x51
mov rdi, rcx
mov ecx, edx
cmp edx, r8d
ja 0x18001d323
mov r14d, dword [rbp + 0x40]
xor r12d, r12d
mov esi, dword [rbp + 0x40]
nop dword [rax]
mov eax, ecx
sub eax, 0xd1
je 0x18001d7b2
sub eax, 0x36
je 0x18001d30c
cmp eax, 0x1bbd
jne 0x18001d315
mov qword [rsp + 0x80], r13
lea rcx, [0x1800535e8]
mov qword [rsp + 0x40], r15
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movzx edi, byte [rbp + 0x40]
mov r13d, 3
nop word [rax + rax]
mov r15d, 0xfe
nop word [rax + rax]
mov eax, r15d
sub eax, 0xfc
je 0x18001d684
sub eax, 1
je 0x18001d371
cmp eax, 1
jne 0x18001d788
test esi, esi
jne 0x18001d788
mov ebx, 0xcb
nop dword [rax]
mov eax, ebx
sub eax, 0xcb
je 0x18001d334
cmp eax, 1
jne 0x18001d362
lea rcx, str.VmodlVimOvfManagerFileItem
call fcn.18003c270
jmp 0x18001d362
mov r14d, 1
mov esi, r12d
imul eax, edx, 0x1b
add ecx, eax
cmp ecx, r8d
jbe 0x18001d260
movzx eax, byte [rbp + 0x40]
add rsp, 0x48
pop r14
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret
lea rcx, [0x1800535e8]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov r8d, 0xd6
mov dword [rbp + 0x48], 6
lea rdx, [rbp + 0x40]
mov dword [rbp + 0x40], 0x1c
lea rcx, [rbp + 0x48]
call fcn.180010c20
inc ebx
cmp ebx, 0xcd
jb 0x18001d2f0
jmp 0x18001d788
cmp r14d, esi
je 0x18001d66d
cmp r14d, 1
jne 0x18001d47a
mov ebx, 0x49
nop dword [rax]
cmp ebx, 0x49
je 0x18001d430
cmp ebx, 0xe1
je 0x18001d401
cmp ebx, 0x179
je 0x18001d3fa
cmp ebx, 0x211
je 0x18001d3ec
cmp ebx, 0x2a9
jne 0x18001d463
mov r8d, 0xd6
mov dword [rbp + 0x48], 0xa
lea rdx, [rbp + 0x40]
mov dword [rbp + 0x40], 0x20
lea rcx, [rbp + 0x48]
call fcn.180010c20
lea rcx, str.3.EXIT
call fcn.18003c270
jmp 0x18001d463
lea rcx, str.vrecpes_f32
call fcn.18003c270
jmp 0x18001d463
mov edx, 0xf
jmp 0x18001d456
lea rcx, str.ChartThemeQt
call fcn.18003c270
mov r8d, 0xd6
mov dword [rbp + 0x48], 9
lea rdx, [rbp + 0x40]
mov dword [rbp + 0x40], 0x20
lea rcx, [rbp + 0x48]
call fcn.180010c20
jmp 0x18001d463
mov r8d, 0xd6
mov dword [rbp + 0x48], 8
lea rdx, [rbp + 0x40]
mov dword [rbp + 0x40], 0x20
lea rcx, [rbp + 0x48]
call fcn.180010c20
mov edx, 0xf0
mov rcx, qword [0x18006f8a8]
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
add ebx, 0x98
cmp ebx, 0x341
jb 0x18001d390
jmp 0x18001d66a
cmp r14d, 2
jne 0x18001d57b
mov ebx, 0xb9
nop dword [rax]
cmp ebx, 0x18e
ja 0x18001d539
je 0x18001d524
mov eax, ebx
sub eax, 0xb9
je 0x18001d501
sub eax, 0x47
je 0x18001d4e1
cmp eax, 0x47
jne 0x18001d567
mov r8d, 0xd6
mov dword [rbp + 0x48], 9
lea rdx, [rbp + 0x40]
mov dword [rbp + 0x40], 0x20
lea rcx, [rbp + 0x48]
call fcn.180010c20
mov edx, 0xf0
jmp 0x18001d55a
mov rcx, qword [0x18006f8a8]
mov edx, 0xf
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea rcx, str.shutterValue
call fcn.18003c270
jmp 0x18001d567
mov dword [rbp + 0x48], 8
mov r8d, 0xd6
mov dword [rbp + 0x40], 0x20
lea rdx, [rbp + 0x40]
lea rcx, [rbp + 0x48]
call fcn.180010c20
jmp 0x18001d567
lea rcx, str.olecli1.cpp
call fcn.18003c270
mov dword [rbp + 0x48], 0xa
jmp 0x18001d508
mov eax, ebx
sub eax, 0x1d5
je 0x18001d555
cmp eax, 0x47
jne 0x18001d567
lea rcx, str.3.EXIT
call fcn.18003c270
jmp 0x18001d567
mov edx, 0xf
mov rcx, qword [0x18006f8a8]
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
add ebx, 0x47
cmp ebx, 0x263
jb 0x18001d490
jmp 0x18001d66a
cmp r14d, r13d
jne 0x18001d66a
mov ebx, 0x53
nop dword [rax]
mov eax, ebx
sub eax, 0x4f
je 0x18001d653
sub eax, 1
je 0x18001d61e
sub eax, 1
je 0x18001d5f4
sub eax, 1
je 0x18001d5d9
cmp eax, 1
jne 0x18001d65f
mov r8d, 0xd6
mov dword [rbp + 0x48], 8
lea rdx, [rbp + 0x40]
mov dword [rbp + 0x40], 0x20
lea rcx, [rbp + 0x48]
call fcn.180010c20
jmp 0x18001d65f
mov rcx, qword [0x18006f8a8]
mov edx, 0xf
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea rcx, str.supportsVVTD
jmp 0x18001d65a
mov r8d, 0xd6
mov dword [rbp + 0x48], 9
lea rdx, [rbp + 0x40]
mov dword [rbp + 0x40], 0x20
lea rcx, [rbp + 0x48]
call fcn.180010c20
lea rcx, str.rs1_release
jmp 0x18001d65a
mov r8d, 0xd6
mov dword [rbp + 0x48], 0xa
lea rdx, [rbp + 0x40]
mov dword [rbp + 0x40], 0x20
lea rcx, [rbp + 0x48]
call fcn.180010c20
mov rcx, qword [0x18006f8a8]
mov edx, 0xf0
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
jmp 0x18001d65f
lea rcx, str.3.EXIT
call fcn.18003c270
dec ebx
cmp ebx, 0x4e
ja 0x18001d590
mov esi, r14d
mov rcx, qword [0x18006f8a8]
mov edx, 0xf
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
jmp 0x18001d788
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll__kbhit]
test eax, eax
je 0x18001d788
mov ebx, 0x3f
nop word [rax + rax]
mov eax, ebx
sub eax, 0x3f
je 0x18001d775
cmp eax, 1
jne 0x18001d77d
lea eax, [rdi - 0x48]
cmp al, 0x2f
ja 0x18001d6db
movabs rcx, 0x800000008001
bt rcx, rax
jae 0x18001d6db
sub r14d, 1
mov esi, r12d
cmove r14d, r13d
jmp 0x18001d77d
lea eax, [rdi - 0x50]
cmp al, 0x23
ja 0x18001d70b
movabs rcx, 0x800000009
bt rcx, rax
jae 0x18001d70b
mov eax, r14d
lea ecx, [r14 + 1]
cmp eax, r13d
mov r14d, 1
mov esi, r12d
cmovne r14d, ecx
jmp 0x18001d77d
cmp dil, 0xd
je 0x18001d717
cmp dil, 0xa
jne 0x18001d770
cmp r14d, 1
jne 0x18001d743
mov qword [rsp + 0x30], r12
xor r9d, r9d
mov qword [rsp + 0x28], r12
xor r8d, r8d
mov edx, 0xf3
mov qword [rsp + 0x20], r12
xor ecx, ecx
call fcn.18000a590
mov esi, r12d
jmp 0x18001d77d
cmp r14d, 2
jne 0x18001d765
mov r9d, 0xfd
mov qword [rsp + 0x20], r12
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call fcn.180031910
mov esi, r12d
jmp 0x18001d77d
cmp r14d, r13d
je 0x18001d79d
nop word [rax + rax]
mov esi, r12d
jmp 0x18001d77d
call qword [sym.imp.api_ms_win_crt_conio_l1_1_0.dll__getch]
mov edi, eax
inc ebx
cmp ebx, 0x41
jb 0x18001d6a0
dec r15d
cmp r15d, 0xfb
ja 0x18001d2c0
jmp 0x18001d2b0
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
mov r15, qword [rsp + 0x40]
mov r13, qword [rsp + 0x80]
movzx ebx, byte [rbp + 0x40]
nop word [rax + rax]
mov esi, 0xc0
nop word [rax + rax]
mov eax, esi
sub eax, 0xc0
je 0x18001d8ab
sub eax, 1
je 0x18001d85e
sub eax, 1
je 0x18001d80b
cmp eax, 1
jne 0x18001d8ba
mov rcx, qword [rdi + 0x38]
lea rdx, [rdi + 0x58]
call qword [rdi + 0x30]
mov ecx, 0x7530
call qword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x18001d8ba
mov rcx, qword [0x18006f7f8]
mov edx, 2
call fcn.180024770
test al, al
jne 0x18001d8ba
mov eax, 0x82
nop dword [rax]
cmp eax, 0x82
je 0x18001d84e
cmp eax, 0x32c8
jne 0x18001d850
movzx eax, bl
add rsp, 0x48
pop r14
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret
xor bl, bl
add eax, 0x3246
cmp eax, 0x648c
jbe 0x18001d830
jmp 0x18001d8ba
cmp qword [rdi + 0x70], 0x10
lea r8, [rdi + 0x58]
jb 0x18001d86c
mov r8, qword [r8]
movzx eax, word [rdi + 0x78]
lea rdx, [rbp + 0x40]
mov r9, qword [0x18006f7f8]
mov ecx, 0x82
mov word [rbp + 0x40], ax
call fcn.18001dc50
test al, al
je 0x18001d8ba
mov ecx, 0x72
mov eax, ecx
sub eax, 0x72
je 0x18001d8a0
cmp eax, 1
je 0x18001d83e
jmp 0x18001d8a2
mov bl, 1
inc ecx
cmp ecx, 0x74
jb 0x18001d892
jmp 0x18001d8ba
mov rcx, qword [rdi + 0x18]
lea rdx, [rdi + 0x58]
call qword [rdi + 0x10]
test al, al
je 0x18001d8d0
inc esi
cmp esi, 0xc4
jb 0x18001d7d0
jmp 0x18001d7c0
xor al, al
add rsp, 0x48
pop r14
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret