Function at 0x14000bd4c
Capabilities:
Accept command line arguments

Disassembly:
mov qword [rsp + 8], rbx
push rbp
push rsi
push rdi
push r14
push r15
mov rbp, rsp
sub rsp, 0x40
mov r14, rcx
call qword [sym.imp.api_ms_win_core_processenvironment_l1_1_0.dll_GetCommandLineW]
nop dword [rax + rax]
mov rcx, rax
lea rdx, [rbp + 0x38]
call qword [sym.imp.api_ms_win_shcore_obsolete_l1_1_0.dll_CommandLineToArgvW]
nop dword [rax + rax]
xor ebx, ebx
mov qword [rbp + 0x40], rax
test rax, rax
jne 0x14000bda4
mov ebx, 0x80070057
lea rdx, str.Command_line_could_not_be_parsed
mov ecx, ebx
call fcn.140007db4
jmp 0x14000c05a
mov edi, 1
cmp dword [rbp + 0x38], edi
jle 0x14000c04b
movsxd r15, edi
lea rdx, [0x140014af8]
mov rsi, qword [rax + r15*8]
mov rcx, rsi
call qword [sym.imp.api_ms_win_crt_private_l1_1_0.dll__o__wcsicmp]
nop dword [rax + rax]
test eax, eax
jne 0x14000be2e
mov rdx, qword [rbp + 0x40]
lea r8, [0x140014af8]
mov ecx, dword [rbp + 0x38]
mov r9d, edi
call fcn.14000bcf8
test rax, rax
je 0x14000be2e
mov qword [rsp + 0x38], rbx
lea rcx, [r14 + 0x18]
mov qword [rsp + 0x30], rbx
or r9d, 0xffffffff
mov dword [rsp + 0x28], 0x81
mov r8, rax
mov qword [rsp + 0x20], rcx
mov edx, 0x80
mov ecx, 0xfde9
call qword [sym.imp.api_ms_win_core_string_l1_1_0.dll_WideCharToMultiByte]
nop dword [rax + rax]
test eax, eax
jne 0x14000c01a
lea rdx, str._ClientID
mov rcx, rsi
call qword [sym.imp.api_ms_win_crt_private_l1_1_0.dll__o__wcsicmp]
nop dword [rax + rax]
test eax, eax
jne 0x14000be7d
mov rdx, qword [rbp + 0x40]
lea r8, str._ClientID
mov ecx, dword [rbp + 0x38]
mov r9d, edi
call fcn.14000bcf8
test rax, rax
je 0x14000be7d
mov rdx, r14
mov rcx, rax
call qword [sym.imp.RPCRT4.dll_UuidFromStringW]
nop dword [rax + rax]
test eax, eax
jns 0x14000c01a
lea rdx, str._CampaignID
mov rcx, rsi
call qword [sym.imp.api_ms_win_crt_private_l1_1_0.dll__o__wcsicmp]
nop dword [rax + rax]
test eax, eax
jne 0x14000bece
mov rdx, qword [rbp + 0x40]
lea r8, str._CampaignID
mov ecx, dword [rbp + 0x38]
mov r9d, edi
call fcn.14000bcf8
test rax, rax
je 0x14000bece
mov rcx, rax
call qword [sym.imp.OLEAUT32.dll_SysReAllocString]
nop dword [rax + rax]
mov qword [r14 + 0x10], rax
test rax, rax
jne 0x14000c01a
lea rdx, str._MinCoordinatorFileVersion
mov rcx, rsi
call qword [sym.imp.api_ms_win_crt_private_l1_1_0.dll__o__wcsicmp]
nop dword [rax + rax]
test eax, eax
jne 0x14000bf1e
mov rdx, qword [rbp + 0x40]
lea r8, str._CoordinatorVersion
mov ecx, dword [rbp + 0x38]
mov r9d, edi
call fcn.14000bcf8
test rax, rax
je 0x14000bf1e
mov rcx, rax
call qword [sym.imp.OLEAUT32.dll_SysReAllocString]
nop dword [rax + rax]
mov qword [r14 + 0xb0], rax
jmp 0x14000c01a
lea rdx, str._D360URL
mov rcx, rsi
call qword [sym.imp.api_ms_win_crt_private_l1_1_0.dll__o__wcsicmp]
nop dword [rax + rax]
test eax, eax
jne 0x14000bf6e
mov rdx, qword [rbp + 0x40]
lea r8, str._D360URL
mov ecx, dword [rbp + 0x38]
mov r9d, edi
call fcn.14000bcf8
test rax, rax
je 0x14000bf6e
mov rcx, rax
call qword [sym.imp.OLEAUT32.dll_SysReAllocString]
nop dword [rax + rax]
mov qword [r14 + 0xa8], rax
jmp 0x14000c01a
lea rdx, str._RetryCount
mov rcx, rsi
call qword [sym.imp.api_ms_win_crt_private_l1_1_0.dll__o__wcsicmp]
nop dword [rax + rax]
test eax, eax
jne 0x14000bfc1
mov rdx, qword [rbp + 0x40]
lea r8, str._RetryCount
mov ecx, dword [rbp + 0x38]
mov r9d, edi
call fcn.14000bcf8
test rax, rax
je 0x14000bfc1
xor edx, edx
mov rcx, rax
lea r8d, [rdx + 0xa]
call qword [sym.imp.api_ms_win_crt_private_l1_1_0.dll__o_wcstoul]
nop dword [rax + rax]
mov dword [r14 + 0x9c], eax
jmp 0x14000c01a
lea rdx, str._IgnoreMeteredNetwork
mov rcx, rsi
call qword [sym.imp.api_ms_win_crt_private_l1_1_0.dll__o__wcsicmp]
nop dword [rax + rax]
test eax, eax
jne 0x14000c02c
mov rdx, qword [rbp + 0x40]
lea r8, str._IgnoreMeteredNetwork
mov ecx, dword [rbp + 0x38]
mov r9d, edi
call fcn.14000bcf8
test rax, rax
je 0x14000c02c
lea rdx, str.true
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_private_l1_1_0.dll__o__wcsicmp]
nop dword [rax + rax]
mov ecx, ebx
test eax, eax
sete cl
mov dword [r14 + 0xa0], ecx
mov rax, qword [rbp + 0x40]
add edi, 2
cmp edi, dword [rbp + 0x38]
jl 0x14000bdb2
jmp 0x14000c04b
mov r8, qword [rbp + 0x40]
lea rdx, str.Invalid_command_line_option__s
mov ebx, 0x80070057
mov ecx, ebx
mov r8, qword [r8 + r15*8]
call fcn.140007db4
mov rax, qword [rbp + 0x40]
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_obsolete_l1_1_0.dll_LocalFree]
nop dword [rax + rax]
mov eax, ebx
mov rbx, qword [rsp + 0x70]
add rsp, 0x40
pop r15
pop r14
pop rdi
pop rsi
pop rbp
ret