Function at 0x140001b80
Capabilities:
Accept command line arguments

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rbp
mov qword [rsp + 0x20], rsi
push rdi
push r12
push r13
sub rsp, 0x270
mov rax, qword [0x140006110]
xor rax, rsp
mov qword [rsp + 0x260], rax
xor r9d, r9d
mov r12, rcx
xor r8d, r8d
lea ebp, [r9 + 1]
xor ecx, ecx
mov edx, ebp
call qword [sym.imp.API_MS_Win_Core_Heap_L1_1_0.dll_HeapSetInformation]
xor ebx, ebx
lea rax, [0x1400014b0]
lea rdi, [0x140006740]
mov qword [0x140006750], rbx
mov qword [0x140006740], rbx
mov byte [0x140006758], bpl
mov byte [0x140006759], bl
mov qword [0x140006760], rax
mov qword [0x140006120], rdi
mov word [0x14000675a], bx
mov dword [0x14000675c], ebx
lea rsi, [0x140006760]
mov r8, qword [rsi]
lea rax, [rdi + 8]
lea rcx, [0x140001ad4]
mov qword [rsp + 0x38], rax
lea rax, [rsp + 0x48]
mov qword [rsp + 0x30], rbx
mov r9d, ebp
mov rdx, rdi
mov qword [rsp + 0x28], rbx
add rsi, 8
mov qword [rsp + 0x48], r8
mov qword [rsp + 0x50], rbx
mov qword [rsp + 0x20], rax
call sub.ntdll.dll_EtwRegisterTraceGuidsW
mov rdi, qword [rdi]
cmp rdi, rbx
jne 0x140001c11
lea rcx, [0x140001798]
xor edx, edx
call qword [sym.imp.KERNEL32.dll_RegisterApplicationRestart]
lea r13, [0x140006120]
cmp eax, ebx
mov ebp, eax
jge 0x140001c9f
mov rcx, qword [0x140006120]
cmp rcx, r13
je 0x140001c9f
test byte [rcx + 0x1c], 4
je 0x140001c9f
mov rcx, qword [rcx + 0x10]
lea r8, [0x140001780]
mov edx, 0xa
mov r9d, eax
call fcn.140001a18
lea r8, [rsp + 0x60]
mov r9d, 0x100
mov edx, 0x3e8
mov rcx, r12
mov qword [0x140006738], r12
call qword [sym.imp.USER32.dll_LoadStringW]
call qword [sym.imp.COMCTL32.dll_InitCommonControls]
lea rdx, [rsp + 0x60]
lea rcx, [0x140001490]
call qword [sym.imp.USER32.dll_FindWindowW]
mov rdi, rax
cmp rax, rbx
jne 0x140001d75
or ecx, 0xffffffff
call sub.IMM32.dll_ImmDisableTextFrameService
mov edx, 2
xor ecx, ecx
call qword [sym.imp.ole32.dll_CoInitializeEx]
cmp eax, ebx
jl 0x140001dc0
call qword [sym.imp.API_MS_Win_Core_ProcessEnvironment_L1_1_0.dll_GetCommandLineW]
lea rdx, [rsp + 0x40]
mov rcx, rax
call qword [sym.imp.SHELL32.dll_CommandLineToArgvW]
mov rdi, rax
cmp rax, rbx
je 0x140001d6d
cmp dword [rsp + 0x40], 2
jne 0x140001d6d
mov rsi, qword [rax + 8]
lea rdx, [0x140001480]
mov rcx, rsi
call qword [sym.imp.API_MS_Win_Core_Misc_L1_1_0.dll_lstrcmpW]
cmp eax, ebx
jne 0x140001d44
lea rcx, [0x140001480]
jmp 0x140001d5f
lea rdx, [0x140001470]
mov rcx, rsi
call qword [sym.imp.API_MS_Win_Core_Misc_L1_1_0.dll_lstrcmpW]
cmp eax, ebx
jne 0x140001d64
lea rcx, [0x140001470]
call fcn.140001e2c
mov rcx, rdi
call qword [sym.imp.API_MS_Win_Core_Misc_L1_1_0.dll_LocalFree]
call qword [sym.imp.ole32.dll_CoUninitialize]
jmp 0x140001dc0
mov rcx, qword [0x140006120]
cmp rcx, r13
je 0x140001d9c
test byte [rcx + 0x1c], 4
je 0x140001d9c
mov rcx, qword [rcx + 0x10]
lea r8, [0x140001780]
mov edx, 0xb
call fcn.1400019e8
mov rcx, rdi
call qword [sym.imp.USER32.dll_IsIconic]
cmp eax, ebx
je 0x140001db7
mov edx, 9
mov rcx, rdi
call qword [sym.imp.USER32.dll_ShowWindow]
mov rcx, rdi
call qword [sym.imp.USER32.dll_SetForegroundWindow]
mov rdi, qword [0x140006120]
cmp rdi, r13
je 0x140001def
jmp 0x140001de3
mov rcx, qword [rdi + 8]
cmp rcx, rbx
je 0x140001de0
call sub.ntdll.dll_EtwUnregisterTraceGuids
mov qword [rdi + 8], rbx
mov rdi, qword [rdi]
cmp rdi, rbx
jne 0x140001dce
mov qword [0x140006120], r13
cmp ebp, ebx
setge bl
mov eax, ebx
mov rcx, qword [rsp + 0x260]
xor rcx, rsp
call fcn.140004090
lea r11, [rsp + 0x270]
mov rbx, qword [r11 + 0x28]
mov rbp, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rsp, r11
pop r13
pop r12
pop rdi
ret