Function at 0x14000b6e4
Capabilities:
Accept command line arguments

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rbp
mov qword [rsp + 0x20], rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x40
mov rdi, rcx
mov qword [0x14001f1d8], rcx
xor ecx, ecx
mov rbx, r8
call qword [sym.imp.ole32.dll_OleInitialize]
nop dword [rax + rax]
xor ebp, ebp
test eax, eax
js 0x14000b9ce
cmp word [rbx], bp
jne 0x14000b737
mov rcx, rdi
call fcn.14000b2c8
jmp 0x14000b9c2
lea rdx, [rsp + 0x70]
mov dword [rsp + 0x70], ebp
mov rcx, rbx
call qword [sym.imp.SHELL32.dll_CommandLineToArgvW]
nop dword [rax + rax]
xor ecx, ecx
mov r15, rax
test rax, rax
je 0x14000b9c2
mov ebx, dword [rsp + 0x70]
cmp ebx, 1
jl 0x14000b9b3
mov qword [rsp + 0x20], rcx
mov r12d, ecx
mov qword [rsp + 0x28], rcx
mov r13d, ecx
test ebx, ebx
jle 0x14000b9b3
lea rsi, [rax + 8]
mov r14d, ecx
lea eax, [rcx + 0x2d]
mov rdi, qword [r15 + r14*8]
cmp word [rdi], 0x2f
jne 0x14000b7a3
cmp word [rdi + 2], 0x3f
jne 0x14000b7a3
cmp word [rdi + 4], cx
je 0x14000b7b5
cmp word [rdi], ax
jne 0x14000b81b
cmp word [rdi + 2], 0x3f
jne 0x14000b81b
cmp word [rdi + 4], cx
jne 0x14000b81b
call fcn.14000b1dc
mov ebx, dword [rsp + 0x70]
xor ecx, ecx
mov eax, 0x2d
inc ebp
inc r14
add rsi, 8
cmp ebp, ebx
jl 0x14000b78c
test r12, r12
je 0x14000b9b3
xor ebp, ebp
mov edi, ecx
test r13, r13
je 0x14000b8ce
mov ebx, ecx
lea rsi, [0x1400102b8]
mov rdx, qword [rsi]
mov rcx, r13
call qword [sym.imp.SHLWAPI.dll_StrCmpICW]
nop dword [rax + rax]
test eax, eax
je 0x14000b8be
inc ebx
add rsi, 0x10
cmp ebx, 5
jb 0x14000b7f1
jmp 0x14000b8ce
lea rdx, [0x14001aab8]
mov rcx, rdi
call sub.msvcrt.dll_wcscmp
xor ecx, ecx
test eax, eax
jne 0x14000b848
lea eax, [rbp + 1]
cmp ebx, eax
jle 0x14000b7c0
mov r13, qword [rsi]
inc r14
add rsi, 8
mov ebp, eax
jmp 0x14000b7c0
lea rdx, [0x14001aac0]
mov rcx, rdi
call sub.msvcrt.dll_wcscmp
xor ecx, ecx
test eax, eax
jne 0x14000b87e
lea eax, [rbp + 1]
cmp ebx, eax
jle 0x14000b7c0
mov rcx, qword [rsi]
mov qword [rsp + 0x20], rcx
inc r14
mov ebp, eax
add rsi, 8
jmp 0x14000b7be
lea rdx, [0x14001aac8]
mov rcx, rdi
call sub.msvcrt.dll_wcscmp
xor ecx, ecx
test eax, eax
jne 0x14000b8a8
lea eax, [rbp + 1]
cmp ebx, eax
jle 0x14000b7c0
mov rcx, qword [rsi]
mov qword [rsp + 0x28], rcx
jmp 0x14000b870
mov eax, 0x2d
cmp ax, word [rdi]
je 0x14000b7b5
mov r12, rdi
jmp 0x14000b7c5
movsxd rax, ebx
lea rcx, [0x1400102b0]
add rax, rax
mov edi, dword [rcx + rax*8]
lea r9, [rsp + 0x30]
xor edx, edx
lea r8, [0x14001ae38]
mov rcx, r12
call qword [sym.imp.SHELL32.dll_SHCreateItemFromParsingName]
nop dword [rax + rax]
test eax, eax
js 0x14000b9b3
mov rax, qword [rsp + 0x20]
lea r8, [0x14001aad0]
mov rdx, qword [rsp + 0x28]
lea r9, [rsp + 0x20]
test rax, rax
mov rcx, r12
cmovne r8, rax
call fcn.14000b570
test eax, eax
js 0x14000b9a1
mov rcx, qword [rsp + 0x20]
lea rdx, [0x14001e880]
mov rbx, qword [rsp + 0x30]
call qword [sym.imp.SHLWAPI.dll_SHStrDupW]
nop dword [rax + rax]
test eax, eax
js 0x14000b990
lea r8, [0x14001e888]
mov dword [0x14001e840], edi
mov rdx, rbx
lea rcx, [0x140010d90]
call qword [sym.imp.ole32.dll_CoMarshalInterThreadInterfaceInStream]
nop dword [rax + rax]
test eax, eax
js 0x14000b976
lea rcx, [0x14001e840]
call fcn.140004d68
jmp 0x14000b990
mov rcx, qword [0x14001e880]
call qword [sym.imp.ole32.dll_CoTaskMemFree]
nop dword [rax + rax]
mov qword [0x14001e880], rbp
mov rcx, qword [rsp + 0x20]
call qword [sym.imp.ole32.dll_CoTaskMemFree]
nop dword [rax + rax]
mov rcx, qword [rsp + 0x30]
mov rax, qword [rcx]
mov rax, qword [rax + 0x10]
call qword [0x140010b20]
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_LocalFree]
nop dword [rax + rax]
call qword [sym.imp.ole32.dll_OleUninitialize]
nop dword [rax + rax]
lea r11, [rsp + 0x40]
xor eax, eax
mov rbx, qword [r11 + 0x38]
mov rbp, qword [r11 + 0x40]
mov rsi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
ret