Function at 0x140002d10
Capabilities:
Terminate process

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rbp
mov qword [rsp + 0x18], rsi
push rdi
sub rsp, 0x30
mov rdi, rdx
lea r9, [0x14000d340]
mov ebx, ecx
xor esi, esi
xor r8d, r8d
mov qword [rsp + 0x20], rsi
xor edx, edx
mov rcx, qword [rdi]
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll__splitpath]
mov rax, qword [0x14000d330]
lea rbp, [0x140000000]
mov r8d, dword [section..data]
nop word [rax + rax]
cmp r8d, ebx
jge 0x140002eac
test rax, rax
je 0x140002d77
cmp dword [0x14000d33c], 0x3a
jne 0x140002d96
movsxd rax, r8d
mov rax, qword [rdi + rax*8]
mov qword [0x14000d330], rax
movzx ecx, byte [rax]
cmp cl, 0x2d
je 0x140002da1
cmp cl, 0x2f
jne 0x140002eac
movzx ecx, byte [rax]
sub cl, 0x2d
test cl, 0xfd
jne 0x140002dab
inc rax
mov qword [0x14000d330], rax
movsx edx, byte [rax]
lea rcx, str.hdn:
call sub.VCRUNTIME140.dll_strchr
mov rdx, rax
mov rax, qword [0x14000d330]
cmp byte [rax], sil
je 0x140002de4
inc rax
mov qword [0x14000d330], rax
mov rcx, rax
cmp byte [rax], sil
je 0x140002de4
mov r8d, dword [section..data]
jmp 0x140002e02
mov r8d, dword [section..data]
mov rax, rsi
inc r8d
mov qword [0x14000d330], rax
mov dword [section..data], r8d
mov rcx, rsi
test rdx, rdx
jne 0x140002e0b
mov ecx, esi
jmp 0x140002e52
cmp byte [rdx + 1], 0x3a
jne 0x140002e37
test rcx, rcx
jne 0x140002e2d
cmp r8d, ebx
jge 0x140002eac
movsxd rax, r8d
mov rax, qword [rdi + rax*8]
mov qword [0x14000d330], rax
inc r8d
mov dword [section..data], r8d
movsx ecx, byte [rdx + 1]
mov dword [0x14000d33c], ecx
movsx ecx, byte [rdx]
cmp ecx, 0xffffffff
je 0x140002eac
cmp ecx, 0x76
ja case.0x140002e67.6
movsxd rcx, ecx
movzx ecx, byte [rcx + rbp + 0x30c4]
mov edx, dword [rbp + rcx*4 + 0x30a8]
add rdx, rbp
jmp rdx
inc dword [0x14000d398]
jmp case.0x140002e67.6
inc dword [0x14000d390]
jmp case.0x140002e67.6
inc dword [0x14000d3a0]
jmp case.0x140002e67.6
inc dword [0x14000d394]
jmp case.0x140002e67.6
mov qword [0x14000d008], rax
jmp case.0x140002e67.6
inc dword [0x14000d39c]
jmp case.0x140002e67.6
cmp dword [0x14000d390], esi
je 0x140002ec2
cmp dword [0x14000d394], esi
je 0x140002ec2
inc dword [0x14000d398]
cmp r8d, ebx
jge 0x140002ecd
inc dword [0x14000d398]
cmp dword [0x14000d398], esi
je 0x140002ffe
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rcx, rax
lea rdx, str.Usage:_n
call fcn.140002800
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rcx, rax
lea r8, [0x14000d340]
lea rdx, str._____s___hd____n_name__n
call fcn.140002800
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rcx, rax
lea rdx, [0x1400098f8]
call fcn.140002800
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rcx, rax
lea rdx, str._________h________Print_this_help_message_n
call fcn.140002800
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rcx, rax
lea rdx, str._________d________Run_as_a_daemon_in_the_background_n
call fcn.140002800
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rcx, rax
lea rdx, str._________n_name___Set_the_UNIX_socket_name_to_name_n
call fcn.140002800
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rcx, rax
lea rdx, [0x1400098f8]
call fcn.140002800
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rcx, rax
lea rdx, str.Defaults:_n
call fcn.140002800
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rcx, rax
lea r9, [0x14000d340]
lea r8, [0x14000d340]
lea rdx, str._____s__n__s_n
call fcn.140002800
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rcx, rax
lea rdx, [0x1400098f8]
call fcn.140002800
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
cmp dword [0x14000d394], esi
mov ebx, 0xffffffff
cmovne ebx, esi
cmp dword [0x14000d390], esi
je 0x14000301d
call fcn.140003980
test eax, eax
js 0x140003083
cmp dword [0x14000d394], esi
je 0x140003035
mov ecx, ebx
call fcn.140002ac0
mov ecx, eax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov rcx, qword [0x14000d008]
call fcn.140004360
mov ebx, eax
test eax, eax
js 0x140003083
mov ecx, ebx
call fcn.140002ac0
test eax, eax
jns 0x140003068
xor r9d, r9d
lea r8, [0x14000d340]
lea edx, [r9 + 4]
lea ecx, [rdx - 5]
call fcn.140003a70
movsxd rcx, ebx
call qword [sym.imp.WS2_32.dll_closesocket]
mov rcx, qword [0x14000d008]
call fcn.140004360
mov ebx, eax
test eax, eax
jns 0x140003047
xor r9d, r9d
lea r8, [0x14000d340]
lea edx, [r9 + 4]
lea ecx, [rdx - 5]
call fcn.140003a70
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3