Function at 0x100010f1c
Capabilities:
Accept command line arguments

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rbp
mov qword [rsp + 0x18], rsi
push rdi
push r12
push r13
sub rsp, 0x60
or r12d, 0xffffffff
mov ebp, r9d
lea ecx, [r12 + 2]
call sub.msvcrt.dll_void____ptr64___cdecl_operator_new_unsigned_long_long_unsigned___int64__
xor ebx, ebx
lea r13, [0x100026430]
mov rsi, rax
cmp rax, rbx
je 0x100010fd1
mov byte [rax], bl
cmp dword [0x1000271e4], ebx
je 0x100010f8c
mov rcx, qword [0x100026430]
cmp rcx, r13
je 0x100010f85
test byte [rcx + 0x1c], 4
je 0x100010f85
mov rcx, qword [rcx + 0x10]
lea edx, [rbx + 0xa]
lea r8, [0x100001af0]
call fcn.10000e6d0
mov edi, 0x80004005
jmp 0x100010fc8
call fcn.10001df24
cmp eax, ebx
mov edi, eax
jge 0x100010fc0
mov rcx, qword [0x100026430]
cmp rcx, r13
je 0x100010fc8
test byte [rcx + 0x1c], 4
je 0x100010fc8
mov rcx, qword [rcx + 0x10]
lea r8, [0x100001af0]
mov edx, SafeArrayDestroy
call fcn.10000e6d0
jmp 0x100010fc8
inc dword [0x1000271e4]
mov edi, ebx
cmp edi, ebx
sete al
mov byte [rsi], al
jmp 0x100010fd4
mov rsi, rbx
mov qword [0x100027200], rsi
lea rax, [0x100001a98]
lea rdi, [0x100026d48]
mov qword [0x100026d58], rbx
mov qword [0x100026d48], rbx
mov qword [0x100026d68], rax
mov byte [0x100026d60], 1
mov byte [0x100026d61], bl
mov qword [0x100026430], rdi
mov word [0x100026d62], bx
mov dword [0x100026d64], ebx
lea rsi, [0x100026d68]
mov r8, qword [rsi]
lea rax, [rdi + 8]
lea rcx, [0x100010ddc]
mov qword [rsp + 0x38], rax
lea rax, [rsp + 0x48]
mov qword [rsp + 0x30], rbx
mov r9d, 1
mov rdx, rdi
mov qword [rsp + 0x28], rbx
add rsi, 8
mov qword [rsp + 0x48], r8
mov qword [rsp + 0x50], rbx
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegisterTraceGuidsW]
mov rdi, qword [rdi]
cmp rdi, rbx
jne 0x100011026
call qword [sym.imp.KERNEL32.dll_CreateTimerQueue]
mov qword [0x1000271e8], rax
cmp rax, rbx
jne 0x1000110d0
call qword [sym.imp.KERNEL32.dll_GetLastError]
movzx edi, ax
or edi, 0x80070000
cmp eax, ebx
cmovle edi, eax
cmp edi, ebx
jge 0x1000110d0
mov rcx, qword [0x100026430]
cmp rcx, r13
je 0x1000110d9
test byte [rcx + 0x1c], 4
je 0x1000110d9
mov rcx, qword [rcx + 0x10]
lea r9, [0x1000022a0]
lea r8, [0x100001f00]
mov edx, 0xa
mov dword [rsp + 0x20], edi
call fcn.1000071e8
jmp 0x1000110d2
mov edi, ebx
mov rcx, qword [0x100026430]
cmp edi, ebx
mov esi, SafeArrayDestroy
jge 0x100011118
cmp rcx, r13
je 0x10001124c
test byte [rcx + 0x1c], 4
je 0x10001124c
mov rcx, qword [rcx + 0x10]
lea edx, [rsi - 3]
lea r9, [0x100003560]
lea r8, [0x100001eb0]
mov dword [rsp + 0x20], edi
call fcn.1000071e8
jmp 0x10001124c
mov ecx, 8
call sub.msvcrt.dll_void____ptr64___cdecl_operator_new_unsigned_long_long_unsigned___int64__
cmp rax, rbx
je 0x100011133
lea rcx, [0x100003640]
mov qword [rax], rcx
jmp 0x100011136
mov rax, rbx
mov qword [0x1000271f8], rax
cmp rax, rbx
jne 0x100011176
mov rcx, qword [0x100026430]
cmp rcx, r13
je 0x100011262
test byte [rcx + 0x1c], 4
je 0x100011262
mov edx, SafeArrayDestroy
mov rcx, qword [rcx + 0x10]
lea r8, [0x100001eb0]
call fcn.10000e6d0
jmp 0x10001124c
call fcn.100006fe4
mov rdi, rax
cmp rax, rbx
jne 0x1000111a4
mov rcx, qword [0x100026430]
cmp rcx, r13
je 0x10001124c
test byte [rcx + 0x1c], 4
je 0x10001124c
mov edx, SafeArrayDestroy
jmp 0x100011161
mov qword [rsp + 0x38], rbx
mov qword [rsp + 0x30], rbx
lea r9, [0x100003648]
lea r8, [0x100026438]
xor edx, edx
mov rcx, rax
mov dword [rsp + 0x28], 0x200
mov dword [rsp + 0x20], 0xcf0000
call fcn.100011388
cmp qword [rdi + 8], rbx
jne 0x1000111f5
mov rcx, qword [0x100026430]
cmp rcx, r13
je 0x10001124c
test byte [rcx + 0x1c], 4
je 0x10001124c
mov edx, esi
jmp 0x100011161
cmp byte [0x1000272b8], bl
je 0x100011203
or r12d, 0xffffffff
jmp 0x10001123d
mov dword [rsp + 0x40], ebx
call qword [sym.imp.KERNEL32.dll_GetCommandLineW]
lea r8, [rsp + 0x40]
lea rcx, [0x100027250]
mov rdx, rax
call fcn.100011518
cmp al, 1
jne 0x100011238
lea rcx, [0x100027250]
mov edx, ebp
call fcn.100011778
mov r12d, eax
jmp 0x10001123d
mov r12d, dword [rsp + 0x40]
mov rcx, qword [rdi + 8]
cmp rcx, rbx
je 0x10001124c
call qword [sym.imp.USER32.dll_DestroyWindow]
mov rcx, qword [0x1000271f8]
cmp rcx, rbx
je 0x100011262
mov rax, qword [rcx]
mov edx, 1
call qword [rax]
mov rcx, qword [0x1000271e8]
or rdx, 0xffffffffffffffff
call qword [sym.imp.KERNEL32.dll_DeleteTimerQueueEx]
cmp eax, ebx
jne 0x1000112c3
call qword [sym.imp.KERNEL32.dll_GetLastError]
movzx ecx, ax
or ecx, 0x80070000
cmp eax, ebx
cmovle ecx, eax
cmp ecx, ebx
jge 0x1000112c3
mov rdi, qword [0x100026430]
cmp rdi, r13
je 0x1000112fa
test byte [rdi + 0x1c], 4
je 0x1000112d1
mov dword [rsp + 0x20], ecx
mov rcx, qword [rdi + 0x10]
lea r9, [0x1000022a0]
lea r8, [0x100001f00]
mov edx, SafeArrayDestroy
call fcn.1000071e8
jmp 0x1000112ca
mov qword [0x1000271e8], rbx
mov rdi, qword [0x100026430]
cmp rdi, r13
je 0x1000112fa
jmp 0x1000112ee
mov rcx, qword [rdi + 8]
cmp rcx, rbx
je 0x1000112eb
call qword [sym.imp.ADVAPI32.dll_UnregisterTraceGuids]
mov qword [rdi + 8], rbx
mov rdi, qword [rdi]
cmp rdi, rbx
jne 0x1000112d8
mov qword [0x100026430], r13
mov rdi, qword [0x100027200]
cmp rdi, rbx
je 0x100011345
cmp byte [rdi], bl
je 0x10001133d
call fcn.10001e038
cmp eax, ebx
jge 0x100011337
mov rcx, qword [0x100026430]
cmp rcx, r13
je 0x100011337
test byte [rcx + 0x1c], 4
je 0x100011337
mov rcx, qword [rcx + 0x10]
lea r8, [0x100001af0]
mov edx, esi
call fcn.10000e6d0
dec dword [0x1000271e4]
mov rcx, rdi
call sub.msvcrt.dll_void___cdecl_operator_delete_void____ptr64_
lea r11, [rsp + 0x60]
mov eax, r12d
mov rbx, qword [r11 + 0x20]
mov rbp, qword [r11 + 0x28]
mov rsi, qword [r11 + 0x30]
mov rsp, r11
pop r13
pop r12
pop rdi
ret