Function at 0x140061a68
Capabilities:
Accept command line arguments
Enumerate gui resources
Get common file path

Disassembly:
mov rax, rsp
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], rsi
mov qword [rax + 0x20], rdi
push rbp
push r14
push r15
lea rbp, [rax - 0xc48]
sub rsp, 0xd30
mov rax, qword [0x1401f5698]
xor rax, rsp
mov qword [rbp + 0xc20], rax
mov rdi, rcx
mov r14b, 1
mov ebx, 0x238
mov dword [rbp + 0x1e0], ebx
lea esi, [rbx - 4]
mov r8d, esi
xor edx, edx
lea rcx, [rbp + 0x1e4]
call fcn.14012d4b0
xorps xmm0, xmm0
movups xmmword [rsp + 0x60], xmm0
xor r15d, r15d
cmp dword [rdi + 8], r15d
jne 0x140061ad8
xor eax, eax
jmp 0x140061e45
mov rcx, qword [rdi + 0x230]
test rcx, rcx
je 0x140061b39
call qword [sym.imp.USER32.dll_IsWindow]
test eax, eax
je 0x140061b04
cmp dword [rdi + 8], 3
jne 0x140061dde
mov qword [rdi + 0x240], r15
jmp 0x140061dde
cmp dword [rdi + 8], 3
jne 0x140061b28
mov qword [rsp + 0x20], r15
xor r9d, r9d
xor r8d, r8d
xor edx, edx
lea rcx, str.Specified_window_not_found
call fcn.140113304
jmp 0x140061dd4
mov qword [rdi + 0x240], r15
xor edx, edx
mov rcx, rdi
call fcn.140062768
cmp dword [rdi + 0x22c], r15d
je 0x140061b78
mov ebx, dword [rdi + 0x22c]
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
cmp ebx, eax
je 0x140061b6c
lea rdx, [rbp + 0x1e0]
mov ecx, ebx
call fcn.14011c65c
test al, al
je 0x140061b6c
mov ebx, dword [rdi + 0x22c]
jmp 0x140061bad
lea rcx, str.Invalid_parent_process_specified
jmp 0x140061dbe
mov dword [rbp - 0x60], ebx
mov r8, rsi
xor edx, edx
lea rcx, [rbp - 0x5c]
call fcn.14012d4b0
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov ecx, eax
lea rdx, [rbp - 0x60]
call fcn.14011c65c
test al, al
je 0x140061db7
mov ebx, dword [rbp - 0x40]
test ebx, ebx
je 0x140061db7
mov dword [rsp + 0x60], ebx
lea rdx, [rsp + 0x60]
lea rcx, [0x1400616bc]
call qword [sym.imp.USER32.dll_EnumWindows]
mov rdx, qword [rsp + 0x68]
test rdx, rdx
jne 0x140061c0b
mov byte [rsp + 0x20], r14b
lea rcx, str.Cant_find_appropriate_parent_window__n_nContinue_in_normal_mode_
or rbx, 0xffffffffffffffff
mov edx, 0x114
xor r8d, r8d
mov r9, rbx
call fcn.1400297d8
mov rcx, rdi
cmp eax, 6
je 0x140061c02
mov rdx, rbx
call fcn.140062768
jmp 0x140061e3e
mov dword [rdi + 8], r15d
jmp 0x140061dd7
mov qword [rdi + 0x238], rdx
mov dword [rdi + 0x22c], ebx
mov rcx, rdi
call fcn.1400619b8
mov rsi, rax
test rax, rax
je 0x140061d3a
mov rcx, qword [0x14022ab58]
mov dword [rcx + 0x11b38], r15d
call qword [sym.imp.KERNEL32.dll_GetCommandLineW]
mov rbx, rax
lea rcx, [rsp + 0x70]
call fcn.1401170c0
nop
jmp 0x140061cd7
mov qword [rsp + 0x50], r15
mov qword [rsp + 0x48], r15
mov qword [rsp + 0x40], r15
mov qword [rsp + 0x38], r15
mov qword [rsp + 0x30], r15
mov qword [rsp + 0x28], r15
mov qword [rsp + 0x20], r15
xor r9d, r9d
lea r8, [0x140184a70]
lea rdx, [0x140184a88]
lea rcx, [rsp + 0x70]
call fcn.140118d90
test al, al
jne 0x140061d00
mov qword [rsp + 0x50], r15
mov qword [rsp + 0x48], r15
mov qword [rsp + 0x40], r15
mov qword [rsp + 0x38], r15
mov qword [rsp + 0x30], r15
mov qword [rsp + 0x28], r15
mov qword [rsp + 0x20], r15
xor r9d, r9d
lea r8, [0x140180288]
lea rdx, [0x140180298]
lea rcx, [rsp + 0x70]
call fcn.140118d90
test al, al
jne 0x140061cf5
xor r8d, r8d
lea rdx, [rsp + 0x70]
mov rcx, rbx
call fcn.1401188b8
test rax, rax
mov rbx, rax
jne 0x140061c53
jmp 0x140061d00
test rbx, rbx
je 0x140061d00
cmp word [rbx], r15w
jne 0x140061d03
mov rbx, r15
mov r8, rbx
mov rdx, rsi
mov rcx, qword [0x14022a9e0]
call fcn.1400208c4
or rdx, 0xffffffffffffffff
mov rcx, rdi
call fcn.140062768
mov rbx, qword [rdi + 0x230]
lea rcx, [rsp + 0x70]
call fcn.1401170e4
mov rax, rbx
jmp 0x140061e45
mov rdx, qword [rsp + 0x68]
mov rcx, rdi
call fcn.140061e74
mov rax, qword [rdi + 0x230]
dec rax
cmp rax, 0xfffffffffffffffd
ja 0x140061d66
cmp qword [rdi + 0x240], r15
jne 0x140061dde
cmp dword [rdi + 8], 2
jne 0x140061dde
xor edx, edx
mov r8d, 0x100
lea rcx, [rbp - 0x60]
call fcn.14012d4b0
test r14b, r14b
je 0x140061d8f
mov r14b, r15b
lea rdx, [rbp - 0x60]
mov rcx, rdi
call fcn.140062848
test al, al
jne 0x140061d47
lea r8, [rbp - 0x60]
lea rdx, str._sCant_find_appropriate_shell_window__nUnrecognized_layout_of_the_Explorer._n_nContinue_in_normal_mode_
lea rcx, [rbp + 0x420]
call fcn.140004760
mov byte [rsp + 0x20], 1
lea rcx, [rbp + 0x420]
jmp 0x140061bd9
lea rcx, str.GetProcessInfo_GetCurrentProcessId____failed
mov qword [rsp + 0x20], r15
xor r9d, r9d
xor r8d, r8d
xor edx, edx
call fcn.140113304
mov dword [rdi + 8], r15d
mov rcx, rdi
xor edx, edx
call fcn.140062768
mov rcx, qword [rdi + 0x230]
lea rax, [rcx - 1]
cmp rax, 0xfffffffffffffffd
ja 0x140061e3a
lea rdx, [rdi + 0x22c]
call qword [sym.imp.USER32.dll_GetWindowThreadProcessId]
lea rbx, [rdi + 0x282]
mov rdx, rbx
mov ecx, 0x105
call qword [sym.imp.KERNEL32.dll_GetCurrentDirectoryW]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_lstrlenW]
cmp eax, 3
jle 0x140061e3e
dec eax
movsxd rcx, eax
cmp word [rdi + rcx*2 + 0x282], 0x5c
jne 0x140061e3e
mov word [rdi + rcx*2 + 0x282], r15w
jmp 0x140061e3e
mov dword [rdi + 8], r15d
mov rax, qword [rdi + 0x230]
mov rcx, qword [rbp + 0xc20]
xor rcx, rsp
call fcn.14012bda0
lea r11, [rsp + 0xd30]
mov rbx, qword [r11 + 0x28]
mov rsi, qword [r11 + 0x30]
mov rdi, qword [r11 + 0x38]
mov rsp, r11
pop r15
pop r14
pop rbp
ret