Function at 0x140010840
Capabilities:
Accept command line arguments

Disassembly:
mov dword [rsp + 0x20], r9d
mov qword [rsp + 0x18], r8
mov qword [rsp + 0x10], rdx
mov qword [rsp + 8], rcx
push rdi
sub rsp, 0x620
mov rax, qword [0x1403710d8]
xor rax, rsp
mov qword [rsp + 0x610], rax
lea rcx, [rsp + 0xa8]
call fcn.14002acf0
lea rcx, [rsp + 0xa8]
call fcn.14002ad40
xor eax, eax
mov word [rsp + 0x350], ax
lea rdi, [rsp + 0x352]
xor eax, eax
mov ecx, 0x208
rep stosb byte [rdi], al
mov dword [rsp + 0x340], 0x105
lea rdx, [rsp + 0x340]
lea rcx, [rsp + 0x350]
call fcn.140034300
test eax, eax
je 0x1400108d1
xor eax, eax
mov word [rsp + 0x350], ax
xor eax, eax
mov word [rsp + 0x130], ax
lea rdi, [rsp + 0x132]
xor eax, eax
mov ecx, 0x208
rep stosb byte [rdi], al
mov dword [rsp + 0x118], 0x105
lea rdx, [rsp + 0x118]
lea rcx, [rsp + 0x130]
call fcn.1400334e0
test eax, eax
je 0x14001091a
xor eax, eax
mov word [rsp + 0x130], ax
mov dword [rsp + 0x20], 0
lea r9, [rsp + 0x130]
lea r8, [rsp + 0x350]
lea rdx, [0x140293528]
lea rcx, [0x1403749c0]
call fcn.14002d930
xor eax, eax
test eax, eax
jne 0x140010888
lea rdx, str.main
lea rcx, [rsp + 0xd8]
call fcn.1400124d0
xor r8d, r8d
lea rdx, str..V3Trust.cpp
lea rcx, [0x1403749c0]
call fcn.14002d540
call qword [sym.imp.KERNEL32.dll_GetCommandLineW]
mov r8, rax
lea rdx, str.Param_:___s_
lea rcx, [0x1403749c0]
call fcn.14002d670
call fcn.140011690
cmp dword [0x14037390c], 0
jne 0x140010a0f
cmp dword [0x140373910], 0
jne 0x140010a0f
call fcn.140011d60
test eax, eax
jne 0x140010a0f
xor r8d, r8d
lea rdx, str..V3Trust.cpp
lea rcx, [0x1403749c0]
call fcn.14002d540
lea rdx, str.IONCT_skip
lea rcx, [0x1403749c0]
call fcn.14002d670
mov dword [rsp + 0x5f4], 0
lea rcx, [rsp + 0xd8]
call fcn.140012560
lea rcx, [rsp + 0xa8]
call fcn.14002ad20
mov eax, dword [rsp + 0x5f4]
jmp 0x14001144f
lea rcx, [rsp + 0x80]
call fcn.140028890
mov rdx, qword [str.GlobalV3CR756917A84BDE9B55761C42935030]
lea rcx, [rsp + 0x80]
call fcn.140028910
movzx eax, al
test eax, eax
je 0x140010a9e
xor r8d, r8d
lea rdx, str..V3Trust.cpp
lea rcx, [0x1403749c0]
call fcn.14002d540
lea rdx, str._WARNING__Already_running
lea rcx, [0x1403749c0]
call fcn.14002d670
mov dword [rsp + 0x5f8], 0
lea rcx, [rsp + 0x80]
call fcn.1400288e0
lea rcx, [rsp + 0xd8]
call fcn.140012560
lea rcx, [rsp + 0xa8]
call fcn.14002ad20
mov eax, dword [rsp + 0x5f8]
jmp 0x14001144f
mov rdx, qword [str.GlobalV3CR756917A84BDE9B55761C42935030]
lea rcx, [rsp + 0x80]
call fcn.140028970
mov dword [rsp + 0xa4], eax
cmp dword [rsp + 0xa4], 0
je 0x140010b35
xor r8d, r8d
lea rdx, str..V3Trust.cpp
lea rcx, [0x1403749c0]
call fcn.14002d540
mov r8d, dword [rsp + 0xa4]
lea rdx, str.csi___d
lea rcx, [0x1403749c0]
call fcn.14002d6f0
mov eax, dword [rsp + 0xa4]
mov dword [rsp + 0x5fc], eax
lea rcx, [rsp + 0x80]
call fcn.1400288e0
lea rcx, [rsp + 0xd8]
call fcn.140012560
lea rcx, [rsp + 0xa8]
call fcn.14002ad20
mov eax, dword [rsp + 0x5fc]
jmp 0x14001144f
lea rcx, [rsp + 0xe0]
call fcn.140029f90
mov qword [rsp + 0x28], 0
lea rax, [0x140011640]
mov qword [rsp + 0x20], rax
mov r9d, 0x2bc
mov r8d, 1
lea rdx, [0x140291f28]
lea rcx, [rsp + 0xe0]
call fcn.14002a040
mov dword [rsp + 0xa4], eax
cmp dword [rsp + 0xa4], 0
je 0x140010c07
xor r8d, r8d
lea rdx, str..V3Trust.cpp
lea rcx, [0x1403749c0]
call fcn.14002d540
mov r8d, dword [rsp + 0xa4]
lea rdx, str.vit.i___d
lea rcx, [0x1403749c0]
call fcn.14002d6f0
mov eax, dword [rsp + 0xa4]
mov dword [rsp + 0x600], eax
lea rcx, [rsp + 0xe0]
call fcn.14002a010
lea rcx, [rsp + 0x80]
call fcn.1400288e0
lea rcx, [rsp + 0xd8]
call fcn.140012560
lea rcx, [rsp + 0xa8]
call fcn.14002ad20
mov eax, dword [rsp + 0x600]
jmp 0x14001144f
mov dword [rsp + 0x78], 0
mov dword [rsp + 0xd0], 0
lea rcx, [rsp + 0x48]
call fcn.1400125e0
lea rcx, [rsp + 0x48]
call fcn.140012630
mov dword [rsp + 0xa4], eax
cmp dword [rsp + 0xa4], 0
je 0x140010c70
xor r8d, r8d
lea rdx, str..V3Trust.cpp
lea rcx, [0x1403749c0]
call fcn.14002d540
mov r8d, dword [rsp + 0xa4]
lea rdx, str.LGHP_OP___d
lea rcx, [0x1403749c0]
call fcn.14002d6f0
cmp dword [0x140373910], 0
jne 0x140010ca6
mov qword [rsp + 0x20], 0
mov r9d, 0x7dc9
mov r8d, 1
mov edx, 0x2000
lea rcx, [rsp + 0x48]
call fcn.140012670
mov dword [rsp + 0xa4], eax
jmp 0x140010cd1
mov qword [rsp + 0x20], 0
mov r9d, 0x7dce
mov r8d, 1
mov edx, 0x2000
lea rcx, [rsp + 0x48]
call fcn.140012670
mov dword [rsp + 0xa4], eax
cmp dword [rsp + 0xa4], 0
je 0x140010d0c
xor r8d, r8d
lea rdx, str..V3Trust.cpp
lea rcx, [0x1403749c0]
call fcn.14002d540
mov r8d, dword [rsp + 0xa4]
lea rdx, str.logwrite_failed:__d
lea rcx, [0x1403749c0]
call fcn.14002d6f0
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov edx, 0x4000
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_SetPriorityClass]
test eax, eax
jne 0x140010d62
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rsp + 0xa4], eax
xor r8d, r8d
lea rdx, str..V3Trust.cpp
lea rcx, [0x1403749c0]
call fcn.14002d540
mov r8d, dword [rsp + 0xa4]
lea rdx, str.SPCBNPC:__d
lea rcx, [0x1403749c0]
call fcn.14002d6f0
mov dword [rsp + 0x44], 0
call fcn.14000d440
mov qword [rsp + 0xc8], rax
cmp qword [rsp + 0xc8], 0
je 0x1400110aa
mov rcx, qword [rsp + 0xc8]
call fcn.14000d520
mov dword [rsp + 0x78], eax
cmp dword [rsp + 0x78], 0
jne 0x140011087
lea rcx, [rsp + 0x570]
call fcn.140012740
lea rcx, [rsp + 0x570]
call fcn.140026650
mov dword [rsp + 0x560], eax
cmp dword [rsp + 0x560], 0
jne 0x140010e3a
mov dword [rsp + 0x20], 0
mov r9d, 1
lea r8, str.usecccheck
lea rdx, str.SECTION_UPDATE
lea rcx, [rsp + 0x570]
call fcn.140026cb0
mov dword [rsp + 0x560], eax
cmp dword [rsp + 0x560], 0
je 0x140010e38
xor r8d, r8d
lea rdx, str..V3Trust.cpp
lea rcx, [0x1403749c0]
call fcn.14002d540
mov r8d, dword [rsp + 0x560]
lea rdx, str.CF__u
lea rcx, [0x1403749c0]
call fcn.14002d6f0
jmp 0x140010e6b
xor r8d, r8d
lea rdx, str..V3Trust.cpp
lea rcx, [0x1403749c0]
call fcn.14002d540
mov r8d, dword [rsp + 0x560]
lea rdx, str.CFO__u
lea rcx, [0x1403749c0]
call fcn.14002d6f0
mov qword [rsp + 0x5d8], 0
lea rdx, [rsp + 0x5d8]
mov rcx, qword [rsp + 0xc8]
call fcn.14000d650
mov qword [rsp + 0x5d0], rax
cmp qword [rsp + 0x5d0], 0
je 0x14001104c
cmp qword [rsp + 0x5d8], 0
jbe 0x14001104c
mov ecx, 0x1f4
call qword [sym.imp.KERNEL32.dll_Sleep]
mov qword [rsp + 0x5e0], 0
jmp 0x140010edf
mov rax, qword [rsp + 0x5e0]
add rax, 1
mov qword [rsp + 0x5e0], rax
mov rax, qword [rsp + 0x5d8]
cmp qword [rsp + 0x5e0], rax
jae 0x14001104a
mov eax, dword [0x140373908]
test eax, eax
je 0x140010f97
mov rcx, qword [rsp + 0x5d0]
call fcn.14000d8a0
mov qword [rsp + 0x5d0], 0
mov rcx, qword [rsp + 0xc8]
call fcn.14000d4a0
mov qword [rsp + 0xc8], 0
mov dword [rsp + 0x604], 0
lea rcx, [rsp + 0x570]
call fcn.1400127b0
lea rcx, [rsp + 0x48]
call fcn.140012600
lea rcx, [rsp + 0xe0]
call fcn.14002a010
lea rcx, [rsp + 0x80]
call fcn.1400288e0
lea rcx, [rsp + 0xd8]
call fcn.140012560
lea rcx, [rsp + 0xa8]
call fcn.14002ad20
mov eax, dword [rsp + 0x604]
jmp 0x14001144f
mov rcx, qword [rsp + 0x5d0]
mov rax, qword [rsp + 0x5e0]
mov rax, qword [rcx + rax*8]
mov qword [rsp + 0x5e8], rax
mov rcx, qword [rsp + 0x5e8]
add rcx, 0x10
mov qword [rsp + 0x30], 0
mov rax, qword [rsp + 0x5e8]
mov eax, dword [rax + 0xc]
mov dword [rsp + 0x28], eax
mov qword [rsp + 0x20], rcx
mov r9d, 0x7dcb
mov r8d, 2
mov edx, 0x2000
lea rcx, [rsp + 0x48]
call fcn.140013eb0
mov dword [rsp + 0xa4], eax
cmp dword [rsp + 0xa4], 0
je 0x140011045
xor r8d, r8d
lea rdx, str..V3Trust.cpp
lea rcx, [0x1403749c0]
call fcn.14002d540
mov r9, qword [rsp + 0x5e8]
add r9, 0x10
mov r8d, dword [rsp + 0xa4]
lea rdx, str.logwrite_failed2:__d_:__s
lea rcx, [0x1403749c0]
call fcn.14002d6f0
jmp 0x140010ecb
jmp 0x140011054
mov dword [rsp + 0x44], send
cmp qword [rsp + 0x5d0], 0
je 0x140011078
mov rcx, qword [rsp + 0x5d0]
call fcn.14000d8a0
mov qword [rsp + 0x5d0], 0
lea rcx, [rsp + 0x570]
call fcn.1400127b0
jmp 0x14001108f
mov dword [rsp + 0x44], 0
mov rcx, qword [rsp + 0xc8]
call fcn.14000d4a0
mov qword [rsp + 0xc8], 0
jmp 0x1400110b4
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rsp + 0x44], eax
mov dword [rsp + 0xa0], 1
call fcn.140024f70
movzx eax, al
test eax, eax
je 0x140011110
call fcn.140011a40
test eax, eax
je 0x1400110e7
lea rcx, [rsp + 0x48]
call fcn.140012180
mov dword [rsp + 0xa0], eax
jmp 0x140011110
xor r8d, r8d
lea rdx, str..V3Trust.cpp
lea rcx, [0x1403749c0]
call fcn.14002d540
lea rdx, str.process_is_not_admin._pass_check_SDS
lea rcx, [0x1403749c0]
call fcn.14002d670
mov edx, dword [rsp + 0xa0]
mov ecx, dword [rsp + 0x78]
call fcn.140011470
mov dword [rsp + 0x40], eax
cmp dword [rsp + 0x40], 0
je 0x140011159
xor r8d, r8d
lea rdx, str..V3Trust.cpp
lea rcx, [0x1403749c0]
call fcn.14002d540
mov r8d, dword [rsp + 0x40]
lea rdx, str.Noti_failed__d
lea rcx, [0x1403749c0]
call fcn.14002d6f0
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov edx, 0x20
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_SetPriorityClass]
test eax, eax
jne 0x1400111af
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rsp + 0xa4], eax
xor r8d, r8d
lea rdx, str..V3Trust.cpp
lea rcx, [0x1403749c0]
call fcn.14002d540
mov r8d, dword [rsp + 0xa4]
lea rdx, str.SPCNPC:__d
lea rcx, [0x1403749c0]
call fcn.14002d6f0
mov ecx, 0x1f4
call qword [sym.imp.KERNEL32.dll_Sleep]
cmp dword [rsp + 0x44], 0
je 0x140011271
cmp dword [0x140373910], 0
jne 0x140011203
mov qword [rsp + 0x28], 0
mov eax, dword [rsp + 0x44]
mov dword [rsp + 0x20], eax
mov r9d, 0x7dca
mov r8d, 3
mov edx, 0x2000
lea rcx, [rsp + 0x48]
call fcn.140014270
mov dword [rsp + 0xa4], eax
jmp 0x140011236
mov qword [rsp + 0x28], 0
mov eax, dword [rsp + 0x44]
mov dword [rsp + 0x20], eax
mov r9d, 0x7dcf
mov r8d, 3
mov edx, 0x2000
lea rcx, [rsp + 0x48]
call fcn.140014270
mov dword [rsp + 0xa4], eax
cmp dword [rsp + 0xa4], 0
je 0x140011271
xor r8d, r8d
lea rdx, str..V3Trust.cpp
lea rcx, [0x1403749c0]
call fcn.14002d540
mov r8d, dword [rsp + 0xa4]
lea rdx, str.logwrite_failed3:__d
lea rcx, [0x1403749c0]
call fcn.14002d6f0
cmp dword [0x140373910], 0
jne 0x1400112a7
mov qword [rsp + 0x20], 0
mov r9d, 0x7dcc
mov r8d, 1
mov edx, 0x2000
lea rcx, [rsp + 0x48]
call fcn.140012670
mov dword [rsp + 0xa4], eax
jmp 0x1400112d2
mov qword [rsp + 0x20], 0
mov r9d, 0x7dd0
mov r8d, 1
mov edx, 0x2000
lea rcx, [rsp + 0x48]
call fcn.140012670
mov dword [rsp + 0xa4], eax
cmp dword [rsp + 0xa4], 0
je 0x14001130d
xor r8d, r8d
lea rdx, str..V3Trust.cpp
lea rcx, [0x1403749c0]
call fcn.14002d540
mov r8d, dword [rsp + 0xa4]
lea rdx, str.logwrite_failed4:__d
lea rcx, [0x1403749c0]
call fcn.14002d6f0
cmp dword [rsp + 0x78], 0
jne 0x14001136e
mov ecx, 0x2710
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rcx, [rsp + 0xd0]
call fcn.140011750
mov dword [rsp + 0x5f0], eax
cmp dword [rsp + 0x5f0], 0
je 0x14001136e
xor r8d, r8d
lea rdx, str..V3Trust.cpp
lea rcx, [0x1403749c0]
call fcn.14002d540
mov r8d, dword [rsp + 0x5f0]
lea rdx, str.AutoUpdate__Ret:_u_
lea rcx, [0x1403749c0]
call fcn.14002d6f0
cmp dword [rsp + 0xd0], 0
je 0x1400113de
mov qword [rsp + 0x20], 0
mov r9d, 0x7dcd
mov r8d, 1
mov edx, 0x2000
lea rcx, [rsp + 0x48]
call fcn.140012670
mov dword [rsp + 0xa4], eax
cmp dword [rsp + 0xa4], 0
je 0x1400113de
xor r8d, r8d
lea rdx, str..V3Trust.cpp
lea rcx, [0x1403749c0]
call fcn.14002d540
mov r8d, dword [rsp + 0xa4]
lea rdx, str.logwrite_failed5:__d
lea rcx, [0x1403749c0]
call fcn.14002d6f0
lea rcx, [rsp + 0x48]
call fcn.140012650
cmp dword [0x14037390c], 0
jne 0x1400113ff
cmp dword [0x140373910], 0
jne 0x1400113ff
call fcn.140011a90
mov eax, dword [rsp + 0x44]
mov dword [rsp + 0x608], eax
lea rcx, [rsp + 0x48]
call fcn.140012600
lea rcx, [rsp + 0xe0]
call fcn.14002a010
lea rcx, [rsp + 0x80]
call fcn.1400288e0
lea rcx, [rsp + 0xd8]
call fcn.140012560
lea rcx, [rsp + 0xa8]
call fcn.14002ad20
mov eax, dword [rsp + 0x608]
mov rcx, qword [rsp + 0x610]
xor rcx, rsp
call fcn.14028a900
add rsp, 0x620
pop rdi
ret