Function at 0x140005918
Capabilities:
Accept command line arguments

Disassembly:
mov qword [rsp + 0x10], rbx
mov dword [rsp + 0x20], r9d
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x27]
sub rsp, 0xd0
xor r14d, r14d
mov r13, r8
mov dword [rbp + 0x67], r14d
mov r15, rcx
lea rax, [0x140009278]
mov qword [0x14000c918], r14
lea rbx, [0x14000c908]
mov qword [0x14000c900], rax
mov qword [0x14000c018], rbx
lea rdi, [0x14000c900]
mov qword [0x14000c908], r14
mov qword [0x14000c920], 1
mov r8, qword [rdi]
lea rax, [rbx + 8]
mov qword [rsp + 0x38], rax
lea rcx, [0x140005880]
mov qword [rsp + 0x30], r14
lea rax, [rbp - 0x39]
mov qword [rbp - 0x39], r8
lea rdi, [rdi + 8]
mov qword [rbp - 0x31], r14
mov r9d, 1
mov qword [rsp + 0x28], r14
mov rdx, rbx
mov qword [rsp + 0x20], rax
mov qword [rbx + 0x20], r8
call qword [sym.imp.api_ms_win_eventing_classicprovider_l1_1_0.dll_RegisterTraceGuidsW]
nop dword [rax + rax]
mov rbx, qword [rbx]
test rbx, rbx
jne 0x140005982
lea edx, [rbx + 0x7b]
mov rcx, r15
call fcn.14000636c
lea rax, [0x140005650]
mov qword [rbp - 0x29], r14
mov edx, 0x2710
mov qword [rbp - 0x21], rax
mov rcx, r15
mov dword [rbp - 0x19], r14d
mov qword [rbp + 0xf], r14
mov qword [rbp - 0x11], r15
call qword [sym.imp.USER32.dll_LoadIconW]
nop dword [rax + rax]
mov edx, 0x7f00
xor ecx, ecx
mov qword [rbp - 9], rax
call qword [sym.imp.USER32.dll_LoadCursorW]
nop dword [rax + rax]
lea rbx, str.Extensible_Wizard_Host
mov qword [rbp + 7], 6
lea rcx, [rbp - 0x29]
mov qword [rbp - 1], rax
mov qword [rbp + 0x17], rbx
mov dword [rbp - 0x15], 8
call qword [sym.imp.USER32.dll_RegisterClassW]
nop dword [rax + rax]
lea rcx, [rbp - 0x49]
mov qword [rbp - 0x49], r14
call fcn.1400062f8
test eax, eax
je 0x140005e42
cmp qword [0x14000c2b0], 0xfffffffffffffffd
je 0x140005a78
call fcn.1400064e8
mov qword [rsp + 0x58], r14
lea r8, [0x140009274]
mov qword [rsp + 0x50], r15
mov eax, 0x80000000
mov qword [rsp + 0x48], r14
xor r9d, r9d
mov qword [rsp + 0x40], r14
mov rdx, rbx
mov dword [rsp + 0x38], r14d
mov ecx, 0x80
mov dword [rsp + 0x30], r14d
mov dword [rsp + 0x28], eax
mov dword [rsp + 0x20], eax
call qword [sym.imp.USER32.dll_CreateWindowExW]
nop dword [rax + rax]
mov rdx, qword [rbp - 0x49]
mov r12, rax
test rdx, rdx
je 0x140005adb
xor ecx, ecx
call qword [sym.imp.api_ms_win_core_sidebyside_l1_1_0.dll_DeactivateActCtx]
nop dword [rax + rax]
test r12, r12
je 0x140005e42
lea rdx, [rbp + 0x67]
mov rcx, r13
call qword [sym.imp.api_ms_win_shcore_obsolete_l1_1_0.dll_CommandLineToArgvW]
nop dword [rax + rax]
or rdi, 0xffffffffffffffff
mov rsi, rax
test rax, rax
je 0x140005d77
cmp dword [rbp + 0x67], 1
jle 0x140005d36
lea rdi, str.xwizards.dll
xor r8d, r8d
mov rcx, rdi
xor edx, edx
call qword [sym.imp.api_ms_win_core_libraryloader_l1_2_0.dll_LoadLibraryExW]
nop dword [rax + rax]
xor ebx, ebx
mov r14, rax
test rax, rax
je 0x140005ce4
mov rcx, rax
call fcn.14000607c
mov qword [rbp - 0x39], rax
test rax, rax
je 0x140005c6d
mov rcx, qword [rsi]
lea rdx, [rbp - 0x41]
mov qword [rbp - 0x41], rbx
call fcn.140003ac4
test eax, eax
je 0x140005c15
mov rdi, qword [rbp - 0x41]
mov rcx, r14
mov rdx, rdi
call qword [sym.imp.api_ms_win_core_libraryloader_l1_2_0.dll_GetProcAddress]
nop dword [rax + rax]
test rax, rax
je 0x140005bdf
mov rdx, qword [rsi]
or rcx, 0xffffffffffffffff
inc rcx
cmp word [rdx + rcx*2], bx
jne 0x140005b89
lea r8, [r13 + 2]
lea r8, [r8 + rcx*2]
movabs r10, 0xa5903e6c10589970
mov r9d, dword [rbp + 0x7f]
mov rdx, r15
mov rcx, r12
call qword [vtable.H_MA8HI.0]
mov rcx, qword [0x14000c018]
lea rbx, [0x14000c018]
cmp rcx, rbx
je 0x140005c04
test byte [rcx + 0x1c], 0x10
je 0x140005c04
mov rcx, qword [rcx + 0x10]
mov r9, rdi
mov dword [rsp + 0x20], eax
call fcn.140005748
jmp 0x140005c04
mov rcx, qword [0x14000c018]
lea rbx, [0x14000c018]
cmp rcx, rbx
je 0x140005c04
test byte [rcx + 0x1c], 8
je 0x140005c04
mov rcx, qword [rcx + 0x10]
mov r9, rdi
call fcn.1400057cc
mov rcx, rdi
call qword [sym.imp.api_ms_win_core_com_l1_1_0.dll_CoTaskMemFree]
nop dword [rax + rax]
jmp 0x140005c62
mov rax, qword [0x14000c018]
lea rbx, [0x14000c018]
cmp rax, rbx
je 0x140005c62
test byte [rax + 0x1c], 4
je 0x140005c62
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
nop dword [rax + rax]
test eax, eax
jle 0x140005c46
movzx eax, ax
or eax, 0x80070000
mov rcx, qword [0x14000c018]
mov edx, 0xf
mov r9, qword [rsi]
mov dword [rsp + 0x20], eax
mov rcx, qword [rcx + 0x10]
call fcn.1400056c4
lea rcx, [rbp - 0x39]
call fcn.140005f78
jmp 0x140005cba
mov rax, qword [0x14000c018]
lea rbx, [0x14000c018]
cmp rax, rbx
je 0x140005cba
test byte [rax + 0x1c], 4
je 0x140005cba
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
nop dword [rax + rax]
test eax, eax
jle 0x140005c9e
movzx eax, ax
or eax, 0x80070000
mov rcx, qword [0x14000c018]
mov edx, 0x10
mov r9, rdi
mov dword [rsp + 0x20], eax
mov rcx, qword [rcx + 0x10]
call fcn.1400056c4
mov rcx, r14
call qword [sym.imp.api_ms_win_core_libraryloader_l1_2_0.dll_FreeLibrary]
nop dword [rax + rax]
xor r14d, r14d
or rdi, 0xffffffffffffffff
mov rcx, rsi
call qword [sym.imp.api_ms_win_core_heap_l2_1_0.dll_LocalFree]
nop dword [rax + rax]
jmp 0x140005dc7
mov rax, qword [0x14000c018]
lea rbx, [0x14000c018]
cmp rax, rbx
je 0x140005cc9
test byte [rax + 0x1c], 4
je 0x140005cc9
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
nop dword [rax + rax]
xor r14d, r14d
test eax, eax
jle 0x140005d18
movzx eax, ax
or eax, 0x80070000
mov rcx, qword [0x14000c018]
mov edx, 0x11
mov r9, rdi
mov dword [rsp + 0x20], eax
mov rcx, qword [rcx + 0x10]
call fcn.1400056c4
jmp 0x140005ccc
mov rcx, qword [0x14000c018]
lea rbx, [0x14000c018]
cmp rcx, rbx
je 0x140005d6a
test byte [rcx + 0x1c], 8
je 0x140005d6a
mov rcx, qword [rcx + 0x10]
lea r8, [0x140009288]
mov edx, 0x12
mov r9d, 0x80070057
call fcn.140005680
mov rcx, r12
call fcn.140003930
jmp 0x140005cd0
mov rax, qword [0x14000c018]
lea rbx, [0x14000c018]
cmp rax, rbx
je 0x140005dc7
test byte [rax + 0x1c], 4
je 0x140005dc7
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
nop dword [rax + rax]
test eax, eax
jle 0x140005da8
movzx eax, ax
or eax, 0x80070000
mov rcx, qword [0x14000c018]
lea r8, [0x140009288]
mov edx, 0x13
mov r9d, eax
mov rcx, qword [rcx + 0x10]
call fcn.140005680
mov rcx, r12
call qword [sym.imp.USER32.dll_DestroyWindow]
nop dword [rax + rax]
mov rcx, qword [0x14000c2b0]
cmp rcx, rdi
je 0x140005df5
call qword [sym.imp.api_ms_win_core_sidebyside_l1_1_0.dll_ReleaseActCtx]
nop dword [rax + rax]
mov qword [0x14000c2b0], rdi
mov rax, qword [0x14000c980]
test rax, rax
cmovne rax, rdi
mov rdi, qword [0x14000c018]
mov qword [0x14000c980], rax
cmp rdi, rbx
je 0x140005e92
jmp 0x140005e34
mov rcx, qword [rdi + 8]
test rcx, rcx
je 0x140005e31
call qword [sym.imp.api_ms_win_eventing_classicprovider_l1_1_0.dll_UnregisterTraceGuids]
nop dword [rax + rax]
mov qword [rdi + 8], r14
mov rdi, qword [rdi]
test rdi, rdi
jne 0x140005e18
mov qword [0x14000c018], rbx
jmp 0x140005e92
mov rax, qword [0x14000c018]
lea rbx, [0x14000c018]
cmp rax, rbx
je 0x140005e92
test byte [rax + 0x1c], 4
je 0x140005e92
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
nop dword [rax + rax]
test eax, eax
jle 0x140005e73
movzx eax, ax
or eax, 0x80070000
mov rcx, qword [0x14000c018]
lea r8, [0x140009288]
mov edx, 0xc
mov r9d, eax
mov rcx, qword [rcx + 0x10]
call fcn.140005680
mov rbx, qword [rsp + 0x118]
xor eax, eax
add rsp, 0xd0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret