Function at 0x14001eac0
Capabilities:
Accept command line arguments

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
push rdi
sub rsp, 0x30
xor esi, esi
mov edi, edx
mov rbx, rcx
mov word [rcx], si
cmp r8d, 0x1000
jg 0x14001ec78
je 0x14001ec4f
cmp r8d, 0x2be
jg 0x14001ebb9
je 0x14001eb90
sub r8d, 0x10
je 0x14001eb67
sub r8d, 0x2ac
je 0x14001eb3e
dec r8d
jne 0x14001edb2
call qword [sym.imp.KERNEL32.dll_GetCommandLineW]
lea rdx, str._export_pal
mov rcx, rax
call fcn.1400f9d68
test rax, rax
je 0x14001edb2
lea r8d, [rsi + 0xc]
jmp 0x14001ed9c
call qword [sym.imp.KERNEL32.dll_GetCommandLineW]
lea rdx, str._import_pal
mov rcx, rax
call fcn.1400f9d68
test rax, rax
je 0x14001edb2
mov r8d, InitCommonControls
jmp 0x14001ed9c
call qword [sym.imp.KERNEL32.dll_GetCommandLineW]
lea rdx, str._slideshow
mov rcx, rax
call fcn.1400f9d68
test rax, rax
je 0x14001edb2
mov r8d, 0xb
jmp 0x14001ed9c
call qword [sym.imp.KERNEL32.dll_GetCommandLineW]
lea rdx, str._append
mov rcx, rax
call fcn.1400f9d68
test rax, rax
je 0x14001edb2
mov r8d, 8
jmp 0x14001ed9c
sub r8d, 0x2bf
je 0x14001ec26
dec r8d
jne 0x14001edb2
call qword [sym.imp.KERNEL32.dll_GetCommandLineW]
lea rdx, str._file
mov rcx, rax
call fcn.1400f9d68
test rax, rax
je 0x14001ebf4
mov dword [rsp + 0x20], esi
mov r8d, 6
jmp 0x14001eda4
call qword [sym.imp.KERNEL32.dll_GetCommandLineW]
mov r9d, edi
xor r8d, r8d
mov rdx, rbx
mov rcx, rax
mov dword [rsp + 0x20], esi
call fcn.14001dec0
mov esi, 1
mov eax, esi
mov rbx, qword [rsp + 0x40]
mov rsi, qword [rsp + 0x48]
add rsp, 0x30
pop rdi
ret
call qword [sym.imp.KERNEL32.dll_GetCommandLineW]
lea rdx, str._info
mov rcx, rax
call fcn.1400f9d68
test rax, rax
je 0x14001edb2
mov r8d, 6
jmp 0x14001ed9c
call qword [sym.imp.KERNEL32.dll_GetCommandLineW]
lea rdx, str._filepattern
mov rcx, rax
call fcn.1400f9d68
test rax, rax
je 0x14001edb2
mov r8d, InitCommonControls
jmp 0x14001ed9c
cmp r8d, 0x40000
jg 0x14001ed48
je 0x14001ed26
cmp r8d, 0x2000
je 0x14001ed00
cmp r8d, 0x4000
je 0x14001ecb8
cmp r8d, 0x20000
je 0x14001ecee
mov eax, esi
mov rbx, qword [rsp + 0x40]
mov rsi, qword [rsp + 0x48]
add rsp, 0x30
pop rdi
ret
call qword [sym.imp.KERNEL32.dll_GetCommandLineW]
lea rdx, [0x1401833f8]
mov rcx, rax
call fcn.1400f9d68
test rax, rax
je 0x14001ecee
mov r9d, edi
mov r8d, 7
mov rdx, rbx
mov rcx, rax
mov dword [rsp + 0x20], 1
call fcn.14001dec0
call qword [sym.imp.KERNEL32.dll_GetCommandLineW]
lea rdx, str._convert
jmp 0x14001ed89
call qword [sym.imp.KERNEL32.dll_GetCommandLineW]
lea rdx, str._thumbprotocol
mov rcx, rax
call fcn.1400f9d68
test rax, rax
je 0x14001edb2
mov r8d, InitCommonControls
jmp 0x14001ed9c
call qword [sym.imp.KERNEL32.dll_GetCommandLineW]
lea rdx, str._filelist
mov rcx, rax
call fcn.1400f9d68
test rax, rax
je 0x14001edb2
mov r8d, 0xa
jmp 0x14001ed9c
cmp r8d, 0x100000
je 0x14001ed7c
cmp r8d, 0x2000000
jne 0x14001edb2
call qword [sym.imp.KERNEL32.dll_GetCommandLineW]
lea rdx, str._hotfolder
mov rcx, rax
call fcn.1400f9d68
test rax, rax
je 0x14001edb2
mov r8d, 0xb
jmp 0x14001ed9c
call qword [sym.imp.KERNEL32.dll_GetCommandLineW]
lea rdx, [0x140183470]
mov rcx, rax
call fcn.1400f9d68
test rax, rax
je 0x14001edb2
mov r8d, 9
mov dword [rsp + 0x20], 1
mov r9d, edi
mov rdx, rbx
mov rcx, rax
call fcn.14001dec0
mov rbx, qword [rsp + 0x40]
mov eax, esi
mov rsi, qword [rsp + 0x48]
add rsp, 0x30
pop rdi
ret