Function at 0x14000cd20
Capabilities:
Accept command line arguments
Create thread

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0xa0]
sub rsp, 0x1a0
mov rax, qword [0x14005a060]
xor rax, rsp
mov qword [rbp + 0x98], rax
lea rcx, [rbp + 0x70]
call fcn.14000cbc0
cmp qword [0x14005acc8], 8
lea r15, [0x14005acb0]
mov r9, r15
cmovae r9, qword [0x14005acb0]
xor r8d, r8d
xor ecx, ecx
lea edx, [r8 + 1]
call qword [sym.imp.KERNEL32.dll_CreateEventW]
xor r12d, r12d
mov qword [0x14005d770], rax
mov dword [rsp + 0x30], r12d
call qword [sym.imp.KERNEL32.dll_GetCommandLineW]
mov rcx, rax
lea rdx, [rsp + 0x30]
call qword [sym.imp.SHELL32.dll_CommandLineToArgvW]
movsxd rcx, dword [rsp + 0x30]
lea rbx, [r12 - 1]
mov qword [rsp + 0x40], r12
mov r14d, 7
mov qword [rsp + 0x50], r12
mov r13, rax
mov qword [rsp + 0x58], r14
mov edi, r12d
mov esi, r12d
cmp rcx, 2
jb 0x14000ce05
mov rdx, qword [rax + 8]
mov r8, rbx
inc r8
cmp word [rdx + r8*2], si
jne 0x14000cde2
lea rcx, [rsp + 0x40]
call fcn.140004be0
mov r14, qword [rsp + 0x58]
mov rsi, qword [rsp + 0x50]
mov rdi, qword [rsp + 0x40]
call qword [sym.imp.KERNEL32.dll_GetLastError]
lea rcx, str._start
mov r8d, 0x2f
cmp eax, 0xb7
jne 0x14000ce90
cmp r14, 8
lea r11, [rsp + 0x40]
cmovae r11, rdi
cmp rsi, 6
jne 0x14000ce6b
movzx edx, word [r11]
mov r10, rsi
mov rax, rcx
mov r9d, r8d
cmp dx, r8w
jb 0x14000ce6b
sub r11, rcx
cmp dx, r9w
ja 0x14000ce6b
cmp r10, 1
je 0x14000ce70
movzx edx, word [r11 + rax + 2]
add rax, 2
dec r10
movzx r9d, word [rax]
cmp dx, r9w
jae 0x14000ce4c
test rsi, rsi
jne 0x14000ce90
lea rdx, str.Already_an_instance_
lea rcx, [0x14005bbe0]
call fcn.14000d4c0
mov rcx, rax
call fcn.14000d770
jmp 0x14000cfce
mov r11, qword [0x14005d770]
test r11, r11
jne 0x14000cf00
lea rdx, str.CreateEvent_
lea rcx, [0x14005bbe0]
call fcn.14000d4c0
cmp qword [0x14005acc8], 8
mov rcx, rax
mov r8, qword [0x14005acc0]
cmovae r15, qword [0x14005acb0]
mov rdx, r15
call fcn.14000d920
lea rdx, str.__has_failed._Error:
mov rcx, rax
call fcn.14000d4c0
mov rbx, rax
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
mov rcx, rbx
call fcn.14000d2e0
mov rcx, rax
call fcn.14000d770
jmp 0x14000cfce
test rsi, rsi
je 0x14000d095
cmp r14, 8
lea r10, [rsp + 0x40]
cmovae r10, rdi
cmp rsi, 6
jne 0x14000cf56
movzx eax, word [r10]
mov rdx, rsi
mov r9d, r8d
cmp ax, r8w
jb 0x14000cf56
sub r10, rcx
cmp ax, r9w
ja 0x14000cf56
cmp rdx, 1
je 0x14000d095
movzx eax, word [rcx + r10 + 2]
add rcx, 2
dec rdx
movzx r9d, word [rcx]
cmp ax, r9w
jae 0x14000cf33
cmp r14, 8
lea r9, [rsp + 0x40]
cmovae r9, rdi
cmp rsi, 5
jne 0x14000cfb9
movzx edx, word [r9]
lea rax, str._stop
mov rcx, rsi
cmp dx, r8w
jb 0x14000cfb9
sub r9, rax
cmp dx, r8w
ja 0x14000cfb9
cmp rcx, 1
je 0x14000cfa5
movzx edx, word [r9 + rax + 2]
add rax, 2
dec rcx
movzx r8d, word [rax]
cmp dx, r8w
jae 0x14000cf84
jmp 0x14000cfb9
mov rcx, r11
call qword [sym.imp.KERNEL32.dll_SetEvent]
test eax, eax
je 0x14000cfce
mov r11, qword [0x14005d770]
test r11, r11
je 0x14000cfce
mov rcx, r11
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov qword [0x14005d770], r12
cmp r14, 8
jb 0x14000d009
lea rdx, [r14*2 + 2]
mov rax, rdi
cmp rdx, 0x1000
jb 0x14000d001
mov rdi, qword [rdi - 8]
add rdx, 0x27
sub rax, rdi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000d2be
mov rcx, rdi
call fcn.14001907c
test r13, r13
je 0x14000d017
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_LocalFree]
cmp byte [rbp + 0x90], r12b
je 0x14000d063
mov rdx, qword [rbp + 0x88]
cmp rdx, 8
jb 0x14000d063
mov rcx, qword [rbp + 0x70]
lea rdx, [rdx*2 + 2]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000d05e
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000d2be
call fcn.14001907c
xor eax, eax
mov rcx, qword [rbp + 0x98]
xor rcx, rsp
call fcn.140019030
lea r11, [rsp + 0x1a0]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
xor eax, eax
mov qword [rsp + 0x40], r12
cmp qword [0x14005ace8], 0x10
lea rdx, [0x14005acd0]
xorps xmm0, xmm0
mov qword [rbp - 0x78], rax
cmovae rdx, qword [0x14005acd0]
mov qword [rbp - 0x58], rax
mov qword [rbp - 0x38], rax
mov qword [rbp - 0x18], rax
mov qword [rbp + 8], rax
movups xmmword [rbp + 0x48], xmm0
mov qword [rbp + 0x68], rax
movups xmmword [rbp + 0x58], xmm0
mov qword [rsp + 0x50], r12
mov qword [rsp + 0x58], 0xf
inc rbx
cmp byte [rdx + rbx], al
jne 0x14000d0e4
mov r8, rbx
lea rcx, [rsp + 0x40]
call fcn.140004ff0
xorps xmm0, xmm0
mov qword [rbp - 0x80], r12
lea rdx, [rsp + 0x40]
mov qword [rbp - 0x70], r12
lea rcx, [rbp + 0x48]
mov qword [rbp - 0x68], 7
movups xmmword [rsp + 0x70], xmm0
mov qword [rbp - 0x60], r12
mov qword [rbp - 0x50], r12
mov qword [rbp - 0x48], 7
mov qword [rbp - 0x40], r12
mov qword [rbp - 0x30], r12
mov qword [rbp - 0x28], 7
mov qword [rbp - 0x20], r12
mov qword [rbp - 0x10], r12
mov qword [rbp - 8], 7
mov qword [rbp], r12
mov qword [rbp + 0x10], r12
mov qword [rbp + 0x18], 7
mov qword [rbp + 0x20], r12
mov qword [rbp + 0x28], r12
mov qword [rbp + 0x30], r12
mov qword [rbp + 0x38], r12
mov qword [rbp + 0x40], r12
call fcn.140003bf0
mov rdx, qword [rsp + 0x58]
mov qword [rbp + 0x68], r12
cmp rdx, 0x10
jb 0x14000d1b4
mov rcx, qword [rsp + 0x40]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000d1af
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000d2a2
call fcn.14001907c
mov ecx, 8
call fcn.140019084
lea rcx, [rsp + 0x70]
mov r9, rax
lea r8, [0x14000dbb0]
xor edx, edx
mov qword [rax], rcx
lea rcx, [rsp + 0x68]
mov qword [rsp + 0x28], rcx
xor ecx, ecx
mov dword [rsp + 0x20], r12d
call fcn.14002192c
mov qword [rsp + 0x60], rax
test rax, rax
je 0x14000d2ae
mov rcx, qword [0x14005d770]
mov edx, 0xffffffff
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
cmp dword [rsp + 0x68], r12d
je 0x14000d246
call sub.KERNEL32.dll_GetCurrentThreadId
cmp dword [rsp + 0x68], eax
je 0x14000d2c4
movaps xmm0, xmmword [rsp + 0x60]
lea rcx, [rsp + 0x40]
xor edx, edx
movdqa xmmword [rsp + 0x40], xmm0
call fcn.140016ed0
test eax, eax
jne 0x14000d2cf
xorps xmm0, xmm0
movdqa xmmword [rsp + 0x60], xmm0
mov rdx, qword [rbp + 0x60]
cmp rdx, 0x10
jb 0x14000d27d
mov rcx, qword [rbp + 0x48]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000d278
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000d2a2
call fcn.14001907c
lea rcx, [rbp - 0x80]
mov qword [rbp + 0x58], r12
mov qword [rbp + 0x60], 0xf
mov byte [rbp + 0x48], r12b
call fcn.140011a00
cmp dword [rsp + 0x78], r12d
jne 0x14000d2a8
jmp 0x14000cfb2
call fcn.14001f75c
int3
call fcn.140021630
int3
mov ecx, 6
mov dword [rsp + 0x68], r12d
call fcn.140016e80
int3
call fcn.14001f75c
int3
mov ecx, 5
call fcn.140016e80
int3
mov ecx, 2
call fcn.140016e80
int3