Function at 0x140003ac0
Capabilities:
Create process on windows

Disassembly:
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x1e20]
mov eax, 0x1f20
call fcn.140028080
sub rsp, rax
mov qword [rsp + 0x70], 0xfffffffffffffffe
mov qword [rsp + 0x1f70], rbx
mov rax, qword [0x14016b140]
xor rax, rsp
mov qword [rbp + 0x1e10], rax
mov rbx, rdx
mov r15, rcx
xor r13d, r13d
mov esi, r13d
mov dword [rsp + 0x50], r13d
lea rcx, str.KdsMntSvc::HandleRequest_____s__n
call fcn.1400213c0
mov ecx, 0x32008
call fcn.140027a60
mov qword [rsp + 0x78], rax
mov rcx, rax
call fcn.140017cf0
mov r12, rax
xor r9d, r9d
lea r8, [0x140130518]
mov rdx, rbx
mov rcx, rax
call fcn.140017d80
mov edi, eax
mov edx, eax
lea rcx, str.Arguments____d_n
call fcn.1400213c0
mov ebx, r13d
test edi, edi
jle 0x140003bab
mov edx, ebx
mov rcx, r12
call fcn.140017d40
lea r9, [0x140130540]
lea r8, str.034_
mov rdx, rax
mov rcx, qword [r15 + 8]
call fcn.140020be0
mov edx, ebx
mov rcx, r12
call fcn.140017d40
mov r8, rax
mov edx, ebx
lea rcx, str.___d____s__n
call fcn.1400213c0
inc ebx
cmp ebx, edi
jl 0x140003b66
xor edx, edx
mov r8d, 0x208
lea rcx, [rbp - 0x10]
call fcn.1400c0ac0
test edi, edi
jle 0x1400043fd
xor edx, edx
mov r8d, 0x800
lea rcx, [rbp + 0xe10]
call fcn.1400c0ac0
xor edx, edx
mov r8d, 0x800
lea rcx, [rbp + 0x1610]
call fcn.1400c0ac0
xor edx, edx
mov rcx, r12
call fcn.140017d40
mov r8, rax
mov r14d, 0x104
mov edx, r14d
lea rcx, [rbp - 0x10]
lea rax, [rbp - 0x10]
sub r8, rax
nop dword [rax]
lea rax, [rdx + 0x7ffffefa]
test rax, rax
je 0x140003c35
movzx eax, word [r8 + rcx]
test ax, ax
je 0x140003c35
mov word [rcx], ax
add rcx, 2
sub rdx, 1
jne 0x140003c10
jmp 0x140003c3a
test rdx, rdx
jne 0x140003c3e
sub rcx, 2
mov word [rcx], r13w
mov ebx, 1
cmp edi, ebx
jle 0x140004032
lea esi, [rbx + 0x2c]
mov edx, ebx
mov rcx, r12
call fcn.140017d40
mov r9, rax
mov edx, 0x208
lea rcx, [rbp + 0x200]
lea rax, [rbp + 0x200]
sub r9, rax
nop word [rax + rax]
lea rax, [rdx + 0x7ffffdf6]
test rax, rax
je 0x140003ca7
movzx r8d, word [r9 + rcx]
test r8w, r8w
je 0x140003ca7
mov word [rcx], r8w
add rcx, 2
sub rdx, 1
jne 0x140003c80
jmp 0x140003cac
test rdx, rdx
jne 0x140003cb0
sub rcx, 2
mov word [rcx], r13w
cmp word [rbp + 0x200], 0x2f
jne 0x140003cc5
mov word [rbp + 0x200], si
lea rdx, [0x140130570]
lea rcx, [rbp + 0x200]
call fcn.1400c3768
test eax, eax
jne 0x140003d44
lea eax, [rdi - 1]
cmp ebx, eax
jge 0x140003d44
lea edx, [rbx + 1]
mov rcx, r12
call fcn.140017d40
mov r9, rax
mov rdx, r14
lea rcx, [rbp + 0x610]
lea rax, [rbp + 0x610]
sub r9, rax
nop word [rax + rax]
lea rax, [rdx + 0x7ffffefa]
test rax, rax
je 0x140003d37
movzx r8d, word [r9 + rcx]
test r8w, r8w
je 0x140003d37
mov word [rcx], r8w
add rcx, 2
sub rdx, 1
jne 0x140003d10
jmp 0x140003d3c
test rdx, rdx
jne 0x140003d40
sub rcx, 2
mov word [rcx], r13w
lea rdx, [0x140130578]
lea rcx, [rbp + 0x200]
call fcn.1400c3768
test eax, eax
jne 0x140003db8
lea eax, [rdi - 1]
cmp ebx, eax
jge 0x140003db8
lea edx, [rbx + 1]
mov rcx, r12
call fcn.140017d40
mov r9, rax
mov rdx, r14
lea rcx, [rbp + 0x610]
lea rax, [rbp + 0x610]
sub r9, rax
lea rax, [rdx + 0x7ffffefa]
test rax, rax
je 0x140003dab
movzx r8d, word [r9 + rcx]
test r8w, r8w
je 0x140003dab
mov word [rcx], r8w
add rcx, 2
sub rdx, 1
jne 0x140003d84
jmp 0x140003db0
test rdx, rdx
jne 0x140003db4
sub rcx, 2
mov word [rcx], r13w
lea rdx, [0x140130580]
lea rcx, [rbp + 0x200]
call fcn.1400c3768
test eax, eax
jne 0x140003e34
lea eax, [rdi - 1]
cmp ebx, eax
jge 0x140003e34
lea edx, [rbx + 1]
mov rcx, r12
call fcn.140017d40
mov r9, rax
mov edx, 0x400
lea rcx, [rbp + 0x610]
lea rax, [rbp + 0x610]
sub r9, rax
nop word [rax + rax]
lea rax, [rdx + 0x7ffffbfe]
test rax, rax
je 0x140003e27
movzx r8d, word [r9 + rcx]
test r8w, r8w
je 0x140003e27
mov word [rcx], r8w
add rcx, 2
sub rdx, 1
jne 0x140003e00
jmp 0x140003e2c
test rdx, rdx
jne 0x140003e30
sub rcx, 2
mov word [rcx], r13w
lea rdx, [0x140130588]
lea rcx, [rbp + 0x200]
call fcn.1400c3768
test eax, eax
jne 0x140003ea8
lea eax, [rdi - 1]
cmp ebx, eax
jge 0x140003ea8
lea edx, [rbx + 1]
mov rcx, r12
call fcn.140017d40
mov r9, rax
mov rdx, r14
lea rcx, [rbp + 0x610]
lea rax, [rbp + 0x610]
sub r9, rax
lea rax, [rdx + 0x7ffffefa]
test rax, rax
je 0x140003e9b
movzx r8d, word [r9 + rcx]
test r8w, r8w
je 0x140003e9b
mov word [rcx], r8w
add rcx, 2
sub rdx, 1
jne 0x140003e74
jmp 0x140003ea0
test rdx, rdx
jne 0x140003ea4
sub rcx, 2
mov word [rcx], r13w
lea rdx, [0x140130590]
lea rcx, [rbp + 0x200]
call fcn.1400c3768
test eax, eax
jne 0x140003f24
lea eax, [rdi - 1]
cmp ebx, eax
jge 0x140003f24
lea edx, [rbx + 1]
mov rcx, r12
call fcn.140017d40
mov r9, rax
mov rdx, r14
lea rcx, [rbp + 0x610]
lea rax, [rbp + 0x610]
sub r9, rax
nop dword [rax + rax]
lea rax, [rdx + 0x7ffffefa]
test rax, rax
je 0x140003f17
movzx r8d, word [r9 + rcx]
test r8w, r8w
je 0x140003f17
mov word [rcx], r8w
add rcx, 2
sub rdx, 1
jne 0x140003ef0
jmp 0x140003f1c
test rdx, rdx
jne 0x140003f20
sub rcx, 2
mov word [rcx], r13w
lea rdx, [0x140130598]
lea rcx, [rbp + 0x200]
call fcn.1400c3768
test eax, eax
jne 0x140003fa4
lea eax, [rdi - 1]
cmp ebx, eax
jge 0x140003fa4
lea edx, [rbx + 1]
mov rcx, r12
call fcn.140017d40
mov r9, rax
mov edx, 0x400
lea rcx, [rbp + 0xe10]
lea rax, [rbp + 0xe10]
sub r9, rax
nop word [rax + rax]
lea rax, [rdx + 0x7ffffbfe]
test rax, rax
je 0x140003f97
movzx r8d, word [r9 + rcx]
test r8w, r8w
je 0x140003f97
mov word [rcx], r8w
add rcx, 2
sub rdx, 1
jne 0x140003f70
jmp 0x140003f9c
test rdx, rdx
jne 0x140003fa0
sub rcx, 2
mov word [rcx], r13w
lea rdx, [0x1401305a0]
lea rcx, [rbp + 0x200]
call fcn.1400c3768
test eax, eax
jne 0x140004024
lea eax, [rdi - 1]
cmp ebx, eax
jge 0x140004024
lea edx, [rbx + 1]
mov rcx, r12
call fcn.140017d40
mov r9, rax
mov edx, 0x400
lea rcx, [rbp + 0x1610]
lea rax, [rbp + 0x1610]
sub r9, rax
nop word [rax + rax]
lea rax, [rdx + 0x7ffffbfe]
test rax, rax
je 0x140004017
movzx r8d, word [r9 + rcx]
test r8w, r8w
je 0x140004017
mov word [rcx], r8w
add rcx, 2
sub rdx, 1
jne 0x140003ff0
jmp 0x14000401c
test rdx, rdx
jne 0x140004020
sub rcx, 2
mov word [rcx], r13w
inc ebx
cmp ebx, edi
jl 0x140003c52
mov esi, dword [rsp + 0x50]
lea rdx, str.CHECK
lea rcx, [rbp - 0x10]
call fcn.1400c3768
test eax, eax
jne 0x1400040af
lea rcx, str.COMMAND__CHECK_n
call fcn.1400213c0
cmp word [rbp + 0xe10], 0
je 0x1400040af
mov rax, qword [r15]
lea rdx, [rbp + 0xe10]
mov rcx, r15
call qword [rax + 0x30]
test eax, eax
jle 0x1400040af
lea rbx, [r15 + 0x10]
mov edi, eax
mov r13d, 1
nop dword [rax]
mov rdx, rbx
lea rcx, str.Target_Printer____s__n
call fcn.1400213c0
mov edx, r13d
mov rcx, rbx
call fcn.140017a10
test eax, eax
cmovne esi, r13d
add rbx, 0x208
sub rdi, r13
jne 0x140004080
xor r13d, r13d
lea rdx, str.CHECKUPDATE
lea rcx, [rbp - 0x10]
call fcn.1400c3768
test eax, eax
jne 0x14000410c
cmp word [rbp + 0xe10], ax
je 0x14000410c
mov rax, qword [r15]
lea rdx, [rbp + 0xe10]
mov rcx, r15
call qword [rax + 0x30]
test eax, eax
jle 0x14000410c
lea rbx, [r15 + 0x10]
mov edi, eax
nop word [rax + rax]
mov rdx, rbx
lea rcx, str.Target_Printer____s__n
call fcn.1400213c0
add rbx, 0x208
sub rdi, 1
jne 0x1400040f0
lea rcx, [rbp - 0x10]
cmp byte [0x140176f60], 0
je 0x14000429a
lea rdx, [0x140130628]
call fcn.1400c3768
test eax, eax
jne 0x1400041e3
cmp word [rbp + 0x1610], ax
je 0x1400041e3
xor eax, eax
mov qword [rsp + 0x58], rax
mov qword [rsp + 0x60], rax
mov qword [rsp + 0x68], rax
xor edx, edx
lea r8d, [rax + 0x68]
lea rcx, [rbp - 0x80]
call fcn.1400c0ac0
mov dword [rbp - 0x80], 0x68
mov r14d, 1
mov dword [rbp - 0x44], r14d
mov word [rbp - 0x40], r14w
lea rax, [rsp + 0x58]
mov qword [rsp + 0x48], rax
lea rax, [rbp - 0x80]
mov qword [rsp + 0x40], rax
mov qword [rsp + 0x38], r13
mov qword [rsp + 0x30], r13
mov dword [rsp + 0x28], gethostbyaddr
mov dword [rsp + 0x20], r13d
xor r9d, r9d
xor r8d, r8d
lea rdx, [rbp + 0x1610]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateProcessW]
test eax, eax
je 0x1400041cd
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
lea rcx, str.CreateProcess_success____d_n
call fcn.1400213c0
jmp 0x1400041e9
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
lea rcx, str.CreateProcess_failed____x_n
call fcn.1400213c0
jmp 0x1400041e9
mov r14d, 1
lea rdx, str.PERFORM_ADMIN
lea rcx, [rbp - 0x10]
call fcn.1400c3768
test eax, eax
jne 0x140004265
mov rcx, r15
cmp word [rbp + 0xe10], ax
je 0x140004253
mov rax, qword [r15]
lea rdx, [rbp + 0xe10]
call qword [rax + 0x30]
test eax, eax
jle 0x140004265
lea rbx, [r15 + 0x10]
mov edi, eax
mov rdx, rbx
lea rcx, str.Target_Printer____s__n
call fcn.1400213c0
lea r8, [rbp + 0x1610]
mov rcx, r15
call fcn.140004450
test eax, eax
cmovne esi, r14d
add rbx, 0x208
sub rdi, 1
jne 0x140004220
jmp 0x140004265
lea r8, [rbp + 0x1610]
call fcn.140004450
test eax, eax
cmovne esi, r14d
lea rdx, str.SCAN_EXPRESS
lea rcx, [rbp - 0x10]
call fcn.1400c3768
test eax, eax
jne 0x1400043fd
lea rcx, str.COMMAND__SCAN_EXPRESS_n
call fcn.1400213c0
mov rcx, qword [0x1401773b8]
call fcn.140002e30
jmp 0x1400043fd
lea rdx, str.REFRESH_CONN
call fcn.1400c3768
test eax, eax
jne 0x14000432f
lea rcx, str.COMMAND__REFRESH_CONN_n
call fcn.1400213c0
cmp word [rbp + 0xe10], 0
je 0x14000432f
mov rax, qword [r15]
lea rdx, [rbp + 0xe10]
mov rcx, r15
call qword [rax + 0x30]
test eax, eax
jle 0x14000432f
lea rbx, [r15 + 0x10]
mov edi, eax
mov r13d, 1
nop dword [rax]
nop dword [rax + rax]
mov rdx, rbx
lea rcx, str.Target_Printer____s__n
call fcn.1400213c0
mov r8, rbx
lea rdx, [rbp - 0x10]
call fcn.1400038a0
test eax, eax
je 0x140004320
mov r8d, r13d
mov rdx, rbx
call fcn.140003370
test eax, eax
cmovne esi, r13d
add rbx, 0x208
sub rdi, r13
jne 0x1400042f0
xor r13d, r13d
lea rdx, str.SCAN_EXPRESS
lea rcx, [rbp - 0x10]
call fcn.1400c3768
test eax, eax
jne 0x14000435b
lea rcx, str.COMMAND__SCAN_EXPRESS_n
call fcn.1400213c0
mov rcx, qword [0x1401773b8]
call fcn.140002e30
lea rdx, str.CLEAR_DB
lea rcx, [rbp - 0x10]
call fcn.1400c3768
test eax, eax
jne 0x1400043fd
lea rcx, str.COMMAND__CLEAR_DB_n
call fcn.1400213c0
xor edx, edx
mov r8d, 0x208
lea rcx, [rbp + 0x610]
call fcn.1400c0ac0
lea rcx, [rbp + 0x610]
lea rdx, str.SOFTWAREKyoceraKdsMntSvcConnections
lea rax, [rbp + 0x610]
sub rdx, rax
nop dword [rax + rax]
lea rax, [r14 + 0x7ffffefa]
test rax, rax
je 0x1400043d4
movzx eax, word [rdx + rcx]
test ax, ax
je 0x1400043d4
mov word [rcx], ax
add rcx, 2
sub r14, 1
jne 0x1400043b0
jmp 0x1400043d9
test r14, r14
jne 0x1400043dd
sub rcx, 2
mov word [rcx], r13w
xor r9d, r9d
mov r8d, 0xf003f
lea rdx, [rbp + 0x610]
mov rcx, 0xffffffff80000001
call fcn.140022a80
test r12, r12
je 0x140004417
mov rcx, r12
call fcn.140007ab0
mov edx, 0x32008
mov rcx, r12
call fcn.1400277b4
lea rcx, str.KdsMntSvc::HandleRequest_end._n
call fcn.1400213c0
mov eax, esi
mov rcx, qword [rbp + 0x1e10]
xor rcx, rsp
call fcn.140027790
mov rbx, qword [rsp + 0x1f70]
add rsp, 0x1f20
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret