Function at 0x100436430
Capabilities:
Execute command
Set console window title

Disassembly:
mov qword [rsp + 8], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x740
mov rax, qword [0x100499010]
xor rax, rsp
mov qword [rsp + 0x730], rax
mov r12, qword [rsp + 0x7a0]
mov rbx, rdx
mov r14d, ecx
xor edx, edx
lea rcx, [rsp + 0x120]
mov r8d, 0x400
mov r15, r9
mov edi, 1
call sub.VCRUNTIME140.dll_memset
xor edx, edx
lea rcx, [rsp + 0x20]
mov r8d, 0x100
call sub.VCRUNTIME140.dll_memset
xor edx, edx
lea rcx, [rsp + 0x520]
mov r8d, 0x208
call sub.VCRUNTIME140.dll_memset
xor r13d, r13d
mov esi, edi
mov ebp, r13d
cmp r14d, edi
jle 0x100436824
add rbx, 8
test edi, edi
je 0x1004367f2
mov rcx, qword [rbx]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsupr]
mov edx, 0x80
lea rcx, [rsp + 0x20]
mov r9, rax
lea rax, [rsp + 0x20]
mov r8, r9
sub r8, rax
nop dword [rax]
lea rax, [rdx + 0x7fffff7e]
test rax, rax
je 0x100436513
movzx eax, word [r8 + rcx]
test ax, ax
je 0x100436513
mov word [rcx], ax
add rcx, 2
sub rdx, 1
jne 0x1004364f0
test rdx, rdx
lea rax, [rcx - 2]
mov r8d, 0xfffd
cmovne rax, rcx
mov word [rax], r13w
movzx eax, word [r9]
sub ax, 0x2d
test r8w, ax
jne case.0x1004365a1.50
mov rax, r13
lea rdx, [0x1004795c8]
nop dword [rax]
nop dword [rax + rax]
movzx ecx, word [r9 + rax*2 + 2]
inc rax
cmp cx, word [rdx + rax*2 - 2]
jne 0x100436575
cmp rax, 4
jne 0x100436550
mov dword [0x1004a9184], 1
jmp 0x1004367df
movzx eax, word [r9 + 2]
add eax, 0xffffffcf
cmp eax, 0x27
ja case.0x1004365a1.50
lea rdx, [0x100400000]
cdqe
movzx eax, byte [rdx + rax + 0x368c4]
mov ecx, dword [rdx + rax*4 + 0x36898]
add rcx, rdx
jmp rcx
or ebp, 1
jmp 0x1004367df
or ebp, 2
jmp 0x1004367df
or ebp, 0x10
jmp 0x1004367df
or ebp, 0x20
jmp 0x1004367df
or ebp, 0x40
inc esi
add rbx, 8
cmp esi, r14d
jge 0x1004367df
lfence
mov rax, qword [rbx]
movzx ecx, word [rax]
sub cx, 0x2d
test r8w, cx
je case.0x1004365a1.50
lfence
mov rdx, qword [rbx]
mov ecx, 0x84
mov r8, r15
nop word [rax + rax]
lea rax, [rcx + 0x7fffff7a]
test rax, rax
je 0x100436626
movzx eax, word [rdx]
test ax, ax
je 0x100436626
mov word [r8], ax
add rdx, 2
add r8, 2
sub rcx, 1
jne 0x100436600
test rcx, rcx
lea rax, [r8 - 2]
cmovne rax, r8
mov word [rax], r13w
jmp 0x1004367df
bts ebp, 7
inc esi
add rbx, 8
cmp esi, r14d
jge 0x1004367df
lfence
mov rax, qword [rbx]
movzx ecx, word [rax]
sub cx, 0x2d
test r8w, cx
je case.0x1004365a1.50
lfence
mov rdx, qword [rbx]
mov ecx, 0x84
mov r8, r12
lea rax, [rcx + 0x7fffff7a]
test rax, rax
je 0x100436626
movzx eax, word [rdx]
test ax, ax
je 0x100436626
mov word [r8], ax
add rdx, 2
add r8, 2
sub rcx, 1
jne 0x100436672
test rcx, rcx
lea rax, [r8 - 2]
cmovne rax, r8
mov word [rax], r13w
jmp 0x1004367df
lea rcx, [0x1004795d0]
or ebp, 8
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wsystem]
lea rcx, str.doskey__reinstall
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wsystem]
mov r8d, 0x104
lea rdx, [rsp + 0x520]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
lea rcx, [rsp + 0x520]
call qword [sym.imp.KERNEL32.dll_SetConsoleTitleW]
mov rcx, qword [0x1004a90d8]
lea r8, [rsp + 0x120]
mov r9d, 0x200
mov edx, 0x12
call qword [sym.imp.USER32.dll_LoadStringW]
lea r8, [0x1004793e8]
lea rdx, str.SQLServerAgent
lea rcx, [rsp + 0x120]
call fcn.10043bdc0
jmp 0x1004367df
inc esi
add rbx, 8
cmp esi, r14d
jge 0x1004367df
lfence
mov rcx, qword [rbx]
movzx eax, word [rcx]
sub ax, 0x2d
test r8w, ax
je case.0x1004365a1.50
mov rax, 0xffffffffffffffff
nop word [rax + rax]
inc rax
cmp word [rcx + rax*2], r13w
jne 0x100436760
cmp rax, 0x80
ja case.0x1004365a1.50
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsupr]
lea r9, str.MSSQLSERVER
mov edx, 0x84
mov r8, rax
mov rcx, r9
sub r8, r9
nop dword [rax]
lea rax, [rdx + 0x7fffff7a]
test rax, rax
je 0x1004367b3
movzx eax, word [r8 + rcx]
test ax, ax
je 0x1004367b3
mov word [rcx], ax
add rcx, 2
sub rdx, 1
jne 0x100436790
test rdx, rdx
lea rax, [rcx - 2]
cmovne rax, rcx
bts ebp, 0xa
mov word [rax], r13w
jmp 0x1004367df
mov dword [0x1004a9244], 1
jmp 0x1004367df
call qword [sym.imp.KERNEL32.dll_DebugBreak]
jmp 0x1004367df
mov edi, r13d
inc esi
add rbx, 8
cmp esi, r14d
jl 0x1004364c0
test edi, edi
jne 0x100436824
mov rcx, qword [0x1004a90d8]
lea r8, [rsp + 0x120]
mov r9d, 0x200
mov edx, 0x11
call qword [sym.imp.USER32.dll_LoadStringW]
lea rdx, [rsp + 0x20]
lea rcx, [rsp + 0x120]
call fcn.10043bdc0
mov eax, ebp
and al, 3
cmp al, 2
jne 0x100436865
mov rcx, qword [0x1004a90d8]
lea r8, [rsp + 0x120]
mov r9d, 0x200
mov edx, 0x11
call qword [sym.imp.USER32.dll_LoadStringW]
lea rdx, [rsp + 0x120]
lea rcx, [0x1004725a8]
call fcn.10043bdc0
mov eax, r13d
jmp 0x100436867
mov eax, edi
mov dword [0x1004a916c], ebp
mov rcx, qword [rsp + 0x730]
xor rcx, rsp
call fcn.100469360
mov rbx, qword [rsp + 0x780]
add rsp, 0x740
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret