Function at 0x1800fcbd0
Capabilities:
Terminate process

Disassembly:
mov qword [rsp + 8], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x60]
sub rsp, 0x160
mov rax, qword [0x1801094f8]
xor rax, rsp
mov qword [rbp + 0x58], rax
mov rsi, r8
mov r15, rdx
mov edx, ecx
mov dword [rsp + 0x38], ecx
xor r9d, r9d
mov dword [rsp + 0x40], r9d
mov qword [rbp - 0x28], r9
mov qword [rbp - 0x20], 0xf
mov byte [rbp - 0x38], r9b
mov dword [rsp + 0x44], ecx
lea r8d, [rcx + rcx*8]
shl r8d, 4
mov dword [rsp + 0x34], r8d
cmp ecx, r8d
ja 0x1800fd18f
lea eax, [r9 + 0x6f]
lea edi, [rax - 4]
mov r12, qword [rsp + 0x60]
mov r14, qword [rsp + 0x60]
mov r13d, dword [rsp + 0x48]
mov ebx, dword [rsp + 0x3c]
mov r11d, 0x79
lea r10d, [r11 - 0x26]
cmp ecx, 0x90e
ja 0x1800fd008
je 0x1800fcfff
cmp ecx, 0x18f
ja 0x1800fcfbb
je 0x1800fcf87
mov eax, ecx
sub eax, 0x15
je 0x1800fcf65
sub eax, 0x4f
je 0x1800fcf4c
sub eax, 0x16
je 0x1800fcf2f
cmp eax, 0x58
jne 0x1800fd174
mov r14, r9
mov qword [rsp + 0x68], r9
lea r8, [rsp + 0x58]
lea rdx, [rsp + 0x68]
lea rcx, [rsp + 0x70]
call qword [sym.imp.ADVAPI32.dll_GetSecurityDescriptorOwner]
mov dword [rsp + 0x3c], eax
cmp qword [rsi + 0x10], r12
jb 0x1800fd166
xor ecx, ecx
mov qword [rbp - 8], rcx
mov edi, 0xf
mov qword [rbp], rdi
mov byte [rbp - 0x18], cl
mov ebx, 0x39
nop dword [rax + rax]
mov eax, ebx
sub eax, 0x39
je 0x1800fce34
sub eax, 0x46
je 0x1800fcd69
cmp eax, 0x46
jne 0x1800fceca
mov dword [rsp + 0x50], r13d
lea r8, [rsp + 0x50]
lea edx, [rax - 9]
lea rcx, [rbp - 0x18]
call fcn.1800f6770
mov rdx, qword [r15 + 8]
cmp rdx, qword [r15 + 0x10]
je 0x1800fcd54
movups xmm0, xmmword [rbp - 0x18]
movups xmmword [rdx], xmm0
movups xmm1, xmmword [rbp - 8]
movups xmmword [rdx + 0x10], xmm1
xor ecx, ecx
mov qword [rbp - 8], rcx
mov edi, 0xf
mov qword [rbp], rdi
mov byte [rbp - 0x18], cl
add qword [r15 + 8], 0x20
jmp 0x1800fceca
lea r8, [rbp - 0x18]
mov rcx, r15
call fcn.1800e4ad0
mov rdi, qword [rbp]
jmp 0x1800fcec8
add r14, r12
lea rcx, [rbp - 0x38]
cmp qword [rbp - 0x20], 0x10
cmovae rcx, qword [rbp - 0x38]
xor edx, edx
lea r8d, [rdx + 0x10]
call qword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll_strtoul]
mov r13d, eax
test eax, eax
jne 0x1800fcec8
mov byte [rsp + 0x34], al
cmp rdi, 0x10
jb 0x1800fcdce
lea rdx, [rdi + 1]
mov rcx, qword [rbp - 0x18]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800fcdc8
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800fd1dc
call fcn.1800fe31c
nop
mov rdx, qword [rbp - 0x20]
cmp rdx, 0x10
jb 0x1800fce09
inc rdx
mov rcx, qword [rbp - 0x38]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800fce04
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800fd1ce
call fcn.1800fe31c
mov eax, dword [rsp + 0x34]
mov rcx, qword [rbp + 0x58]
xor rcx, rsp
call fcn.1800fe830
mov rbx, qword [rsp + 0x1a0]
add rsp, 0x160
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
mov qword [rbp + 0x18], rcx
mov qword [rbp + 0x20], 0xf
mov byte [rbp + 8], 0
mov rax, qword [rsi + 0x10]
cmp rax, r14
jb 0x1800fd48a
sub rax, r14
mov r8, r12
cmp rax, r12
cmovb r8, rax
mov rax, rsi
cmp qword [rsi + 0x18], 0x10
jb 0x1800fce6b
mov rax, qword [rsi]
lea rdx, [rax + r14]
lea rcx, [rbp + 8]
call fcn.1800fbcc0
or dword [rsp + 0x40], 1
mov rdx, qword [rbp - 0x20]
cmp rdx, 0x10
jb 0x1800fceb8
inc rdx
mov rcx, qword [rbp - 0x38]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800fceb3
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800fd1d5
call fcn.1800fe31c
movups xmm0, xmmword [rbp + 8]
movups xmmword [rbp - 0x38], xmm0
movups xmm1, xmmword [rbp + 0x18]
movups xmmword [rbp - 0x28], xmm1
xor ecx, ecx
add ebx, 0x46
cmp ebx, 0x10b
jb 0x1800fccf0
cmp rdi, 0x10
jb 0x1800fcf11
lea rdx, [rdi + 1]
mov rcx, qword [rbp - 0x18]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800fcf0c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800fd1dc
call fcn.1800fe31c
mov rax, qword [rsi + 0x10]
sub rax, r14
cmp rax, r12
jae 0x1800fccd1
mov ebx, dword [rsp + 0x3c]
mov edi, 0x6b
jmp 0x1800fd168
mov dword [rbp + 0x28], 0x746547
mov word [rbp + 0x2b], r10w
mov word [rbp + 0x2c], r11w
mov dword [rbp + 0x2d], 0x657473
jmp 0x1800fd174
movzx eax, byte [rsi]
mov byte [rsp + 0x28], al
mov byte [rsp + 0x20], 0
mov dword [rsp + 0x48], 1
jmp 0x1800fd174
mov byte [rsp + 0x30], 1
mov r12d, 8
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rsp + 0x70], xmm0
movups xmmword [rbp - 0x80], xmm0
mov qword [rbp - 0x70], rax
jmp 0x1800fd174
mov ecx, r9d
movzx eax, byte [rsp + 0x30]
test ebx, ebx
cmovne ecx, eax
mov byte [rsp + 0x30], cl
cmp cl, 0
je 0x1800fd174
mov r8d, dword [rsp + 0x58]
mov rdx, qword [rsp + 0x68]
lea rcx, [rsp + 0x70]
call qword [sym.imp.ADVAPI32.dll_SetSecurityDescriptorOwner]
jmp 0x1800fd168
cmp ecx, 0x24c
je 0x1800fd46a
cmp ecx, 0x3e8
je 0x1800fd1e3
cmp ecx, 0x4c4
jne 0x1800fd179
mov ecx, 0x6d
mov word [rbp + 0x30], cx
mov ecx, 0x49
mov word [rbp + 0x31], cx
mov ecx, 0x666e
mov word [rbp + 0x32], cx
jmp 0x1800fd179
mov word [rbp + 0x34], ax
jmp 0x1800fd179
cmp ecx, 0x1a36
ja 0x1800fd0bc
je 0x1800fd093
cmp ecx, 0xd58
je 0x1800fd087
cmp ecx, 0x11a2
je 0x1800fd06a
cmp ecx, 0x15ec
jne 0x1800fd179
mov word [rbp + 0x46], r9w
mov r8d, 2
lea rdx, [0x180104c84]
lea rcx, [rbp + 0x38]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcsncat]
mov r8d, 1
lea rdx, [0x180104c96]
lea rcx, [rbp + 0x4a]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcsncpy]
jmp 0x1800fd168
movsd xmm0, qword [0x180104cca]
movsd qword [rbp + 0x3c], xmm0
movzx eax, word [0x180104cd2]
mov word [rbp + 0x44], ax
jmp 0x1800fd174
mov dword [rbp + 0x38], 0x65006b
jmp 0x1800fd179
mov word [rbp + 0x4c], r9w
mov r8d, 1
lea rdx, [0x180104b1c]
lea rcx, [rbp + 0x4c]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcsncpy]
xor r9d, r9d
mov word [rbp + 0x4e], r9w
jmp 0x1800fd16b
cmp ecx, 0x1e80
je 0x1800fd117
cmp ecx, 0x22ca
je 0x1800fd107
cmp ecx, 0x2714
jne 0x1800fd179
mov ecx, dword [rsi + 0x28]
add rcx, rcx
mov eax, 0x30
mul rcx
mov rcx, 0xffffffffffffffff
cmovo rax, rcx
mov rcx, rax
call fcn.1800fe324
mov qword [rsi + 0x10], rax
mov byte [rsp + 0x34], 1
jmp 0x1800fcdce
lea rcx, [rbp - 0x68]
call qword [rsp + 0x60]
mov eax, dword [rbp - 0x48]
mov dword [rsi + 0x28], eax
jmp 0x1800fd168
mov r8d, 1
lea rdx, [0x180104c2c]
lea rcx, [rbp + 0x38]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcsncat]
lea r8, [rbp + 0x38]
lea rdx, [rbp + 0x28]
mov ecx, 0x7a
call fcn.1800fafd0
mov qword [rsp + 0x60], rax
cmp qword [rsi + 0x20], 0
jne 0x1800fd0fd
mov rdx, rsi
mov ecx, 0x111
call fcn.1800f6d40
test al, al
jne 0x1800fd168
mov byte [rsp + 0x34], al
jmp 0x1800fcdce
mov ebx, eax
xor r9d, r9d
mov edx, dword [rsp + 0x38]
mov r8d, dword [rsp + 0x34]
mov eax, 0x6f
mov ecx, edx
add ecx, dword [rsp + 0x44]
lea ecx, [rcx + rdx*8]
mov dword [rsp + 0x44], ecx
cmp ecx, r8d
jbe 0x1800fcc52
mov rax, qword [rbp - 0x20]
cmp rax, 0x10
jb 0x1800fce09
lea rdx, [rax + 1]
mov rcx, qword [rbp - 0x38]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800fce04
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1800fce04
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
cmp dword [rsi], 2
jge 0x1800fd274
lea rdx, str.CALC
lea rcx, [0x180104b3c]
call fcn.1800fe1f0
mov byte [rsp + 0x20], 1
lea r9, [0x180109620]
lea r8, [rsp + 0x20]
mov edx, 0xd9
lea rcx, [0x180109c60]
call fcn.1800fbf70
lea rcx, [0x180102388]
call fcn.1800fe1f0
nop
mov rax, qword [rbp - 0x20]
cmp rax, 0x10
jb 0x1800fd26a
lea rdx, [rax + 1]
mov rcx, qword [rbp - 0x38]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800fd265
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800fd1ce
call fcn.1800fe31c
mov eax, 1
jmp 0x1800fce0d
mov r14b, 1
movzx r13d, byte [rsp + 0x28]
cmp r13b, r14b
jbe 0x1800fd22e
movzx edi, byte [rsp + 0x28]
movzx r12d, byte [rsp + 0x20]
lea r8, [0x180104b48]
lea rdx, str.__help
movzx eax, r14b
lea rsi, [r15 + rax*8]
mov rbx, qword [rsi]
mov rcx, r9
nop dword [rax]
movzx eax, byte [rbx + rcx]
inc rcx
cmp al, byte [rdx + rcx - 1]
jne 0x1800fd2c5
cmp rcx, 7
jne 0x1800fd2b0
jmp 0x1800fd2e4
mov rcx, r9
nop dword [rax + rax]
movzx eax, byte [rbx + rcx]
inc rcx
cmp al, byte [r8 + rcx - 1]
jne 0x1800fd2f9
cmp rcx, 4
jne 0x1800fd2d0
lea rdx, str.HELP__n
lea rcx, [0x180104b3c]
call fcn.1800fe1f0
jmp 0x1800fd343
lea rdx, str.__version
mov rcx, rbx
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
test eax, eax
je 0x1800fd333
xor ecx, ecx
lea rdx, [0x180104b64]
nop word [rax + rax]
movzx eax, byte [rbx + rcx]
inc rcx
cmp al, byte [rdx + rcx - 1]
jne 0x1800fd35c
cmp rcx, 4
jne 0x1800fd320
mov edx, dword [rsp + 0x48]
lea rcx, str.V_CMP_NEQ_F32_sdwa_vi
call fcn.1800fe1f0
add r13b, 0xff
inc r14b
cmp r13b, 1
jbe 0x1800fd22e
xor r9d, r9d
jmp 0x1800fd28d
xor ecx, ecx
lea rdx, str.__test
nop word [rax + rax]
movzx eax, byte [rbx + rcx]
inc rcx
cmp al, byte [rdx + rcx - 1]
jne 0x1800fd385
cmp rcx, 7
jne 0x1800fd370
jmp 0x1800fd3a3
xor ecx, ecx
lea rdx, [0x180104b88]
nop
movzx eax, byte [rbx + rcx]
inc rcx
cmp al, byte [rdx + rcx - 1]
jne 0x1800fd3d0
cmp rcx, 4
jne 0x1800fd390
xor edx, edx
xor ecx, ecx
mov r8d, 0xb6
call fcn.1800fd6b0
lea rcx, str.Test_Ok__n
test al, al
lea rax, str.update_time
cmove rcx, rax
call fcn.1800fe1f0
jmp 0x1800fd343
movzx eax, dil
movzx ecx, byte [rax + rbx]
test cl, cl
je 0x1800fd408
nop dword [rax]
movsx ecx, cl
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_isalpha]
test eax, eax
setne byte [rsp + 0x20]
inc dil
mov rbx, qword [rsi]
movzx eax, dil
movzx ecx, byte [rax + rbx]
test cl, cl
jne 0x1800fd3e0
movzx r12d, byte [rsp + 0x20]
xor dil, dil
test r12b, r12b
jne 0x1800fd43f
mov byte [rsp + 0x28], dil
lea r9, [0x180109620]
lea r8, [rsp + 0x28]
mov edx, 0xd9
mov rcx, rbx
call fcn.1800fbf70
lea rcx, [0x180102388]
call fcn.1800fe1f0
jmp 0x1800fd343
lea rdx, str.function_runScript_script__scriptArgs__inspectHost__inspectPort__childPrint__
lea rcx, [0x180104b3c]
call fcn.1800fe1f0
lea rcx, [0x180102388]
call fcn.1800fe1f0
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
cmp r14, qword [rsi + 0x10]
sete byte [rsp + 0x34]
mov rax, qword [rbp - 0x20]
cmp rax, 0x10
jb 0x1800fce09
lea rdx, [rax + 1]
jmp 0x1800fcddb
call fcn.1800fb820
int3