Function at 0x180004cc0
Capabilities:
Accept command line arguments

Disassembly:
mov rax, rsp
push rbp
push r12
push r13
lea rbp, [rax - 0xb8]
sub rsp, 0x1a0
mov qword [rbp - 0x80], 0xfffffffffffffffe
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
mov rax, qword [0x1800d7110]
xor rax, rsp
mov qword [rbp + 0x90], rax
mov edx, 0x5c
lea rcx, [0x1800ee6d0]
call fcn.180029eb0
mov rdi, rax
test rax, rax
je 0x1800053b3
inc rdi
call fcn.18001c810
test eax, eax
jne 0x180004d34
cmp dword [0x1800ee6c8], 0x80000000
ja 0x1800053b3
mov rcx, rdi
call fcn.1800047a0
test eax, eax
jne 0x180004d70
lea rcx, [0x1800ee8f0]
call fcn.180004830
test eax, eax
jne 0x180004d70
lea rcx, [0x1800eea00]
call fcn.1800048c0
test eax, eax
jne 0x180004d70
lea rcx, [0x1800ee7e0]
call fcn.180004950
test eax, eax
je 0x180004db2
cmp dword [0x1800edd88], 0
je 0x180004da2
mov rcx, rdi
call fcn.1800049f0
mov dword [rsp + 0x20], eax
lea r9, str.IsCanHook_filter_static_successful___d_
lea r8, [0x1800a7500]
or edx, 0xffffffff
lea rcx, [0x1800edc98]
call fcn.1800082a0
mov rcx, rdi
call fcn.1800049f0
test eax, eax
je 0x180005469
lea rcx, [rsp + 0x40]
call fcn.180006cf0
nop
lea rdx, str.hookapi_disins
lea rcx, [rsp + 0x30]
call fcn.1800141f0
mov r9d, 1
xor r8d, r8d
mov rdx, rax
lea rcx, [rsp + 0x40]
call fcn.180007380
lea rcx, [rsp + 0x40]
call fcn.180006fd0
cmp eax, 1
jne 0x180004e1f
cmp dword [0x1800edd88], 0
je 0x180004e1a
lea r9, str.IsCanHook_dis_successful
lea r8, [0x1800a7500]
or edx, 0xffffffff
lea rcx, [0x1800edc98]
call fcn.1800082a0
nop
jmp 0x18000545f
lea rdx, str.hookapi_filterproc_external_crypt
lea rcx, [rsp + 0x30]
call fcn.1800141f0
mov r9d, 1
xor r8d, r8d
mov rdx, rax
lea rcx, [rsp + 0x40]
call fcn.180007380
mov rdx, rdi
lea rcx, [rsp + 0x30]
call fcn.180014170
mov rdx, rax
lea rcx, [rsp + 0x40]
call fcn.180006f50
mov r13d, eax
mov ebx, dword [rsp + 0x78]
lea rdx, str.hookapi_filterproc_external
lea rcx, [rsp + 0x30]
call fcn.1800141f0
mov r9d, 1
xor r8d, r8d
mov rdx, rax
lea rcx, [rsp + 0x40]
call fcn.180007380
mov rdx, rdi
lea rcx, [rsp + 0x30]
call fcn.180014170
mov rdx, rax
lea rcx, [rsp + 0x40]
call fcn.180006f50
mov r12d, eax
mov esi, dword [rsp + 0x78]
test r13d, r13d
jne 0x180005438
test eax, eax
jne 0x180005438
test ebx, ebx
je 0x180004ecc
cmp ebx, 0xf0000001
jne 0x180004ed8
test esi, esi
je 0x180004f06
cmp esi, 0xf0000001
je 0x180004f06
cmp dword [0x1800edd88], 0
je 0x180004f06
mov dword [rsp + 0x28], esi
mov dword [rsp + 0x20], ebx
lea r9, str.IsCanHook_filter_sync_external_failed__err___08x__err2___08x
lea r8, [0x1800a7500]
or edx, 0xffffffff
lea rcx, [0x1800edc98]
call fcn.1800082a0
lea rdx, str.hookapi_filterproc_internal_crypt
lea rcx, [rsp + 0x30]
call fcn.1800141f0
mov r9d, 1
xor r8d, r8d
mov rdx, rax
lea rcx, [rsp + 0x40]
call fcn.180007380
xor eax, eax
or rcx, 0xffffffffffffffff
lea rdi, [0x1800ee8f0]
repne scasb al, byte [rdi]
not rcx
dec rcx
je 0x180004f69
lea rdx, [0x1800ee8f0]
lea rcx, [rsp + 0x30]
call fcn.180014170
mov rdx, rax
lea rcx, [rsp + 0x40]
call fcn.180006f50
mov r13d, eax
mov ebx, dword [rsp + 0x78]
lea rdx, str.hookapi_filterproc_internal
lea rcx, [rsp + 0x30]
call fcn.1800141f0
mov r9d, 1
xor r8d, r8d
mov rdx, rax
lea rcx, [rsp + 0x40]
call fcn.180007380
xor eax, eax
or rcx, 0xffffffffffffffff
lea rdi, [0x1800ee8f0]
repne scasb al, byte [rdi]
not rcx
dec rcx
je 0x180004fcc
lea rdx, [0x1800ee8f0]
lea rcx, [rsp + 0x30]
call fcn.180014170
mov rdx, rax
lea rcx, [rsp + 0x40]
call fcn.180006f50
mov r12d, eax
mov esi, dword [rsp + 0x78]
test r13d, r13d
jne 0x18000540f
test r12d, r12d
jne 0x18000540f
test ebx, ebx
je 0x180004fea
cmp ebx, 0xf0000001
jne 0x180004ff6
test esi, esi
je 0x180005024
cmp esi, 0xf0000001
je 0x180005024
cmp dword [0x1800edd88], 0
je 0x180005024
mov dword [rsp + 0x28], esi
mov dword [rsp + 0x20], ebx
lea r9, str.IsCanHook_filter_sync_internal_failed__err___08x__err2___08x
lea r8, [0x1800a7500]
or edx, 0xffffffff
lea rcx, [0x1800edc98]
call fcn.1800082a0
lea rdx, str.hookapi_filterproc_product_crypt
lea rcx, [rsp + 0x30]
call fcn.1800141f0
mov r9d, 1
xor r8d, r8d
mov rdx, rax
lea rcx, [rsp + 0x40]
call fcn.180007380
xor eax, eax
or rcx, 0xffffffffffffffff
lea rdi, [0x1800eea00]
repne scasb al, byte [rdi]
not rcx
dec rcx
je 0x180005087
lea rdx, [0x1800eea00]
lea rcx, [rsp + 0x30]
call fcn.180014170
mov rdx, rax
lea rcx, [rsp + 0x40]
call fcn.180006f50
mov r13d, eax
mov ebx, dword [rsp + 0x78]
lea rdx, str.hookapi_filterproc_product
lea rcx, [rsp + 0x30]
call fcn.1800141f0
mov r9d, 1
xor r8d, r8d
mov rdx, rax
lea rcx, [rsp + 0x40]
call fcn.180007380
xor eax, eax
or rcx, 0xffffffffffffffff
lea rdi, [0x1800eea00]
repne scasb al, byte [rdi]
not rcx
dec rcx
je 0x1800050ea
lea rdx, [0x1800eea00]
lea rcx, [rsp + 0x30]
call fcn.180014170
mov rdx, rax
lea rcx, [rsp + 0x40]
call fcn.180006f50
mov r12d, eax
mov esi, dword [rsp + 0x78]
test r13d, r13d
jne 0x1800053e6
test r12d, r12d
jne 0x1800053e6
test ebx, ebx
je 0x180005108
cmp ebx, 0xf0000001
jne 0x180005114
test esi, esi
je 0x180005142
cmp esi, 0xf0000001
je 0x180005142
cmp dword [0x1800edd88], 0
je 0x180005142
mov dword [rsp + 0x28], esi
mov dword [rsp + 0x20], ebx
lea r9, str.IsCanHook_filter_sync_product_failed__err___08x__err2___08x
lea r8, [0x1800a7500]
or edx, 0xffffffff
lea rcx, [0x1800edc98]
call fcn.1800082a0
lea rdx, str.hookapi_filterproc_company_crypt
lea rcx, [rsp + 0x30]
call fcn.1800141f0
mov r9d, 1
xor r8d, r8d
mov rdx, rax
lea rcx, [rsp + 0x40]
call fcn.180007380
xor eax, eax
or rcx, 0xffffffffffffffff
lea rdi, [0x1800ee7e0]
repne scasb al, byte [rdi]
not rcx
dec rcx
je 0x1800051a5
lea rdx, [0x1800ee7e0]
lea rcx, [rsp + 0x30]
call fcn.180014170
mov rdx, rax
lea rcx, [rsp + 0x40]
call fcn.180006f50
mov r13d, eax
mov ebx, dword [rsp + 0x78]
lea rdx, str.hookapi_filterproc_company
lea rcx, [rsp + 0x30]
call fcn.1800141f0
mov r9d, 1
xor r8d, r8d
mov rdx, rax
lea rcx, [rsp + 0x40]
call fcn.180007380
xor eax, eax
or rcx, 0xffffffffffffffff
lea rdi, [0x1800ee7e0]
repne scasb al, byte [rdi]
not rcx
dec rcx
je 0x180005208
lea rdx, [0x1800ee7e0]
lea rcx, [rsp + 0x30]
call fcn.180014170
mov rdx, rax
lea rcx, [rsp + 0x40]
call fcn.180006f50
mov r12d, eax
mov esi, dword [rsp + 0x78]
test r13d, r13d
jne 0x1800053bd
test r12d, r12d
jne 0x1800053bd
test ebx, ebx
je 0x180005254
cmp ebx, 0xf0000001
je 0x180005254
cmp dword [0x1800edd88], r12d
je 0x180005254
mov dword [rsp + 0x28], esi
mov dword [rsp + 0x20], ebx
lea r9, str.IsCanHook_filter_sync_company_failed__err___08x__err2___08x
lea r8, [0x1800a7500]
or edx, 0xffffffff
lea rcx, [0x1800edc98]
call fcn.1800082a0
call fcn.1800049e0
test eax, eax
je 0x180005262
jmp 0x18000545f
call qword [sym.imp.KERNEL32.dll_GetCommandLineA]
mov rdi, rax
test rax, rax
je 0x1800053a9
mov byte [rbp - 0x70], 0
xor edx, edx
mov r8d, 0xff
lea rcx, [rbp - 0x6f]
call fcn.180029630
mov r8d, 0xff
mov rdx, rdi
lea rcx, [rbp - 0x70]
call fcn.180029fd0
lea rcx, [rbp - 0x70]
call fcn.18009cfac
lea rdx, str.RUNAGENT32
lea rcx, [rbp - 0x70]
call fcn.180029ed8
test rax, rax
jne 0x180005326
lea rdx, str.RUNAGENTU32
lea rcx, [rbp - 0x70]
call fcn.180029ed8
test rax, rax
jne 0x180005326
lea rdx, str.RUNAGENTU64
lea rcx, [rbp - 0x70]
call fcn.180029ed8
test rax, rax
jne 0x180005326
lea rdx, str.RUNSDCENTER32
lea rcx, [rbp - 0x70]
call fcn.180029ed8
test rax, rax
jne 0x180005326
lea rdx, str.RUNSDAGENT32
lea rcx, [rbp - 0x70]
call fcn.180029ed8
test rax, rax
jne 0x180005326
lea rdx, str.RUNMONITOR32
lea rcx, [rbp - 0x70]
call fcn.180029ed8
test rax, rax
je 0x1800053a9
lea rdx, str.WINOAV3.DLL
lea rcx, [rbp - 0x70]
call fcn.180029ed8
test rax, rax
jne 0x1800053a4
lea rdx, str.WINOAUV3.DLL
lea rcx, [rbp - 0x70]
call fcn.180029ed8
test rax, rax
jne 0x1800053a4
lea rdx, str.WINOAUV364.DLL
lea rcx, [rbp - 0x70]
call fcn.180029ed8
test rax, rax
jne 0x1800053a4
lea rdx, str.SDCENTER.DLL
lea rcx, [rbp - 0x70]
call fcn.180029ed8
test rax, rax
jne 0x1800053a4
lea rdx, str.SDAGENT.DLL
lea rcx, [rbp - 0x70]
call fcn.180029ed8
test rax, rax
jne 0x1800053a4
lea rdx, str.WINWDGV3.DLL
lea rcx, [rbp - 0x70]
call fcn.180029ed8
test rax, rax
je 0x1800053a9
jmp 0x18000545f
lea rcx, [rsp + 0x40]
call fcn.180006d60
mov eax, 1
jmp 0x18000546b
cmp dword [0x1800edd88], 0
je 0x1800053e4
lea r9, str.IsCanHook_filter_sync_company_successful
lea r8, [0x1800a7500]
or edx, 0xffffffff
lea rcx, [0x1800edc98]
call fcn.1800082a0
nop
jmp 0x18000545f
cmp dword [0x1800edd88], 0
je 0x18000540d
lea r9, str.IsCanHook_filter_sync_product_successful
lea r8, [0x1800a7500]
or edx, 0xffffffff
lea rcx, [0x1800edc98]
call fcn.1800082a0
nop
jmp 0x18000545f
cmp dword [0x1800edd88], 0
je 0x180005436
lea r9, str.IsCanHook_filter_sync_internal_successful
lea r8, [0x1800a7500]
or edx, 0xffffffff
lea rcx, [0x1800edc98]
call fcn.1800082a0
nop
jmp 0x18000545f
cmp dword [0x1800edd88], 0
je 0x18000545f
lea r9, str.IsCanHook_filter_sync_external_successful
lea r8, [0x1800a7500]
or edx, 0xffffffff
lea rcx, [0x1800edc98]
call fcn.1800082a0
nop
lea rcx, [rsp + 0x40]
call fcn.180006d60
xor eax, eax
mov rcx, qword [rbp + 0x90]
xor rcx, rsp
call fcn.180029600
lea r11, [rsp + 0x1a0]
mov rbx, qword [r11 + 0x20]
mov rsi, qword [r11 + 0x28]
mov rdi, qword [r11 + 0x30]
mov rsp, r11
pop r13
pop r12
pop rbp
ret