Function at 0x14002f7b4
Capabilities:
Accept command line arguments
Resolve path using msvcrt
Terminate process

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rbp
push rsi
push rdi
push r14
sub rsp, 0x30
movzx r10d, word [rcx + 0x48]
xor ebp, ebp
mov rbx, rdx
mov r11, rcx
test r10w, r10w
je 0x14002f7f6
cmp r10w, r8w
jne 0x14009126e
mov rbx, qword [rsp + 0x58]
mov rbp, qword [rsp + 0x60]
add rsp, 0x30
pop r14
pop rdi
pop rsi
ret
mov eax, 0xa641
cmp r8w, ax
je 0x140091593
movzx eax, byte [0x1401fcb00]
mov edx, 0x3a64
cmp r8w, dx
mov word [rcx + 0x48], r8w
mov ecx, 1
cmove eax, ecx
cmp byte [0x1401fa4b8], bpl
mov byte [0x1401fcb00], al
jne 0x14002f7e3
mov qword [0x1401f7128], 0x40
jmp 0x14002f7e3
movzx r8d, r8w
mov edx, 0x3a64
cmp r8d, edx
ja 0x14009150a
mov eax, 0x14c
je 0x1400914db
mov ecx, r8d
sub ecx, eax
je 0x1400914d2
sub ecx, 0x74
je 0x1400912ed
sub ecx, 2
je 0x1400912e3
sub ecx, 2
je 0x1400912b1
cmp ecx, 0xcf8
jne 0x14009153c
mov ecx, r8d
call fcn.14000606c
mov ecx, r10d
mov r8, rax
call fcn.14000606c
test r9b, r9b
mov rcx, rbx
mov r9, rax
je 0x1400915a1
mov edx, 0x10b0
call fcn.1400ebbc8
nop
jmp 0x14002f7e3
mov eax, 0x1c4
jmp 0x140091558
mov eax, 0x1c4
cmp r10w, ax
jne 0x1400912b1
cmp dword [0x1401fa544], 6
mov ecx, 1
mov byte [0x1401fac72], cl
jne 0x14002f7e3
cmp byte [0x1401fa4b8], bpl
jne 0x140091327
test byte [r11 + 0x158], 0x40
jne 0x14002f7e3
xor ecx, ecx
mov byte [0x1401fadc8], bpl
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fflush]
mov ecx, 0x30
call qword [sym.imp.tbbmalloc.dll_scalable_malloc]
mov rbx, rax
test rax, rax
je 0x1400914c5
mov rcx, qword [0x1401fa558]
or r14, 0xffffffffffffffff
mov rdi, r14
mov rax, qword [rcx]
inc rdi
cmp word [rax + rdi*2], bp
jne 0x14009135e
add rdi, 3
lea rcx, [rdi + rdi]
call qword [sym.imp.tbbmalloc.dll_scalable_malloc]
mov rsi, rax
test rax, rax
je 0x1400914c5
mov r9, qword [0x1401fa558]
lea r8, [0x1401a1388]
mov rdx, rdi
mov rcx, rax
mov r9, qword [r9]
call fcn.140005090
mov qword [rbx], rsi
call qword [sym.imp.KERNEL32.dll_GetCommandLineW]
mov r8d, 0x20
mov rcx, rax
movzx edx, word [rax]
lea r9d, [r8 + 2]
cmp dx, r9w
jne 0x1400913c7
movzx r8d, r9w
add rcx, 2
movzx edx, word [rcx]
cmp dx, r8w
jne 0x1400913c0
cmp dx, r9w
lea rax, [rcx + 2]
cmovne rax, rcx
add rax, 2
mov qword [rbx + 8], rax
lea rax, str._OPT:LBR
mov qword [rbx + 0x10], rax
mov qword [rbx + 0x18], rbp
cmp byte [0x1401fcad2], bpl
je 0x140091417
call fcn.14000775c
lea rdx, [0x1401cb028]
mov ecx, 0x2347
call fcn.14000761c
mov rcx, rbx
call fcn.1401320c4
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fflush]
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov r8, r14
mov rdx, r14
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_SetProcessWorkingSetSize]
call fcn.140005adc
cmp byte [0x1401fa4b8], bpl
je 0x140091453
mov rcx, qword [0x1401fa4f0]
test rcx, rcx
je 0x140091453
call fcn.1400ba5e4
call fcn.140005c4c
call fcn.140042888
mov rcx, rax
call fcn.140005f1c
lea rcx, [rsp + 0x20]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__get_wpgmptr]
test eax, eax
je 0x14009147c
xor ecx, ecx
call fcn.14005e418
int3
mov rdi, qword [rsp + 0x20]
lea rcx, [rsp + 0x50]
mov rdx, rdi
mov r8, rbx
call fcn.1400052dc
cmp byte [rsp + 0x50], bpl
jne 0x1400914a8
mov r8, rdi
mov edx, 0x486
xor ecx, ecx
call fcn.14005e3e8
int3
mov rcx, rbx
call qword [sym.imp.tbbmalloc.dll_scalable_free]
mov rcx, rsi
call qword [sym.imp.tbbmalloc.dll_scalable_free]
mov ecx, dword [rsp + 0x54]
call qword [sym.imp.KERNEL32.dll_ExitProcess]
mov edx, 0x44e
xor ecx, ecx
call fcn.14005e3e8
int3
cmp r10w, dx
jmp 0x14009155c
cmp r10w, ax
jne 0x1400912b1
mov eax, dword [rcx + 0x278]
bt rax, 9
jb 0x1400912b1
mov word [rcx + 0x48], dx
mov ecx, 1
mov byte [0x1401fcb00], cl
jmp 0x14002f7e3
mov ecx, r8d
mov edi, 0x8664
sub ecx, edi
je 0x140091535
sub ecx, 0x1fdd
je 0x140091567
sub ecx, 0xd
je 0x140091553
cmp ecx, 0x416
jne 0x14009153c
cmp r10w, dx
je 0x14002f7e3
mov eax, 0xa64e
jmp 0x140091558
test r9b, r9b
jne 0x1400912b1
mov edx, 0x459
mov rcx, rbx
call fcn.14005e3e8
int3
mov eax, 0xaa64
cmp r10w, ax
jne 0x1400912b1
jmp 0x14002f7e3
mov eax, 0xaa64
cmp r10w, ax
je 0x140091578
cmp r10w, di
jne 0x140091535
mov eax, dword [r11 + 0x278]
bt rax, 9
jb 0x1400912b1
test r9b, r9b
jne 0x1400912b1
mov edx, 0x570
mov rcx, rbx
call fcn.14005e3e8
int3
mov edx, 0x458
call fcn.14005e3e8
int3