Function at 0x1402da3f0
Capabilities:
Accept command line arguments
Check os version

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rbp
mov qword [rsp + 0x18], rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x180
mov rax, qword [0x1406836b8]
xor rax, rsp
mov qword [rsp + 0x170], rax
mov r12, qword [rsp + 0x1e0]
lea rcx, [rsp + 0x40]
xor edi, edi
mov dword [r12], edi
call fcn.1402d5f10
mov rcx, qword [0x1406baea0]
lea r8, [0x140466f28]
lea rdx, [rsp + 0x40]
call fcn.1402dce40
mov rcx, qword [rsp + 0x40]
xor edx, edx
call qword [sym.imp.USER32.dll_FindWindowW]
mov rbp, rax
test rax, rax
je 0x1402da61e
mov rcx, rax
call qword [sym.imp.USER32.dll_IsIconic]
test eax, eax
je 0x1402da483
lea edx, [rdi + 9]
mov rcx, rbp
call qword [sym.imp.USER32.dll_ShowWindow]
mov rcx, rbp
call qword [sym.imp.USER32.dll_IsWindow]
test eax, eax
je 0x1402da52e
mov rcx, rbp
call qword [sym.imp.USER32.dll_IsIconic]
test eax, eax
je 0x1402da4af
mov edx, 9
mov rcx, rbp
call qword [sym.imp.USER32.dll_ShowWindow]
xor edx, edx
lea rcx, [rsp + 0x54]
mov r8d, 0x110
call sub.VCRUNTIME140.dll_memset
lea rcx, [rsp + 0x50]
mov dword [rsp + 0x50], 0x114
call qword [sym.imp.KERNEL32.dll_GetVersionExW]
test eax, eax
je 0x1402da525
cmp dword [rsp + 0x54], 6
jne 0x1402da525
xor r9d, r9d
mov dword [rsp + 0x30], 3
mov dword [rsp + 0x28], edi
xor r8d, r8d
mov rcx, rbp
mov dword [rsp + 0x20], edi
lea rdx, [r9 - 1]
call qword [sym.imp.USER32.dll_SetWindowPos]
xor r9d, r9d
mov dword [rsp + 0x30], SHCreateStdEnumFmtEtc
mov dword [rsp + 0x28], edi
xor r8d, r8d
mov rcx, rbp
mov dword [rsp + 0x20], edi
lea rdx, [r9 - 2]
call qword [sym.imp.USER32.dll_SetWindowPos]
mov rcx, rbp
call qword [sym.imp.USER32.dll_SetForegroundWindow]
xor r9d, r9d
xor r8d, r8d
mov edx, 0x615
mov rcx, rbp
call qword [sym.imp.USER32.dll_SendMessageW]
test rax, rax
jne 0x1402da55c
mov ecx, 0xfa
call qword [sym.imp.KERNEL32.dll_Sleep]
mov esi, 1
jmp 0x1402da625
call qword [sym.imp.KERNEL32.dll_GetCommandLineW]
mov r14, rax
test rax, rax
je 0x1402da623
cmp di, word [rax]
je 0x1402da623
mov rbx, 0xffffffffffffffff
nop
cmp word [rax + rbx*2 + 2], di
lea rbx, [rbx + 1]
jne 0x1402da580
lea r13d, [rbx + rbx]
mov esi, 1
movsxd rdx, r13d
mov ecx, esi
add rdx, 0xa
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_calloc]
mov r15, rax
test rax, rax
je 0x1402da61a
lea ecx, [r13 + 2]
mov dword [rax], ecx
lea eax, [rbx + 1]
cmp eax, esi
jl 0x1402da5cc
movsxd rdx, eax
lea rcx, [r15 + 8]
lea r9, [rsi - 2]
mov r8, r14
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcsncpy_s]
mov dword [r15 + 4], 0x4e187
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov r8d, eax
mov r9, r15
mov edx, 0x601
mov rcx, rbp
call qword [sym.imp.USER32.dll_SendMessageW]
test rax, rax
je 0x1402da60d
mov eax, dword [r15 + 4]
cmp eax, 0x4e187
je 0x1402da60d
mov rcx, r15
mov dword [r12], eax
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
jmp 0x1402da623
mov rcx, r15
mov edi, esi
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
jmp 0x1402da623
mov edi, esi
jmp 0x1402da623
mov edi, 1
mov esi, edi
lea rcx, [rsp + 0x40]
call fcn.1402d84a0
mov eax, esi
mov rcx, qword [rsp + 0x170]
xor rcx, rsp
call fcn.14039bbb0
lea r11, [rsp + 0x180]
mov rbx, qword [r11 + 0x30]
mov rbp, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
ret