Function at 0x140093660
Capabilities:
Accept command line arguments

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rbp
mov qword [rsp + 0x20], rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x110
mov rax, qword [0x1400d2478]
xor rax, rsp
mov qword [rsp + 0x108], rax
mov rdi, rcx
call qword [sym.imp.KERNEL32.dll_GetCommandLineW]
xor esi, esi
lea rdx, [0x1400ab100]
lea rcx, [rsp + 0xe0]
xor r8d, r8d
mov rbx, rax
mov qword [rsp + 0x100], 7
mov qword [rsp + 0xf8], rsi
mov word [rsp + 0xe8], si
call fcn.140001870
lea rcx, [rsp + 0x50]
mov rdx, rdi
call fcn.140007910
lea rcx, [0x1400d3718]
or r9, 0xffffffffffffffff
mov rdx, rax
xor r8d, r8d
call fcn.140001500
cmp qword [rsp + 0x70], 8
jb 0x140093707
mov rcx, qword [rsp + 0x58]
call fcn.140065920
lea rdx, str._Log
lea rcx, [rsp + 0x90]
mov r8d, 4
mov qword [rsp + 0xb0], 7
mov qword [rsp + 0xa8], rsi
mov word [rsp + 0x98], si
call fcn.140001870
or rcx, 0xffffffffffffffff
xor eax, eax
mov rdi, rbx
mov rdx, rbx
mov qword [rsp + 0x70], 7
repne scasw ax, word [rdi]
mov qword [rsp + 0x68], rsi
mov word [rsp + 0x58], si
not rcx
lea r8, [rcx - 1]
lea rcx, [rsp + 0x50]
call fcn.140001870
lea r8, [rsp + 0xe0]
lea rdx, [rsp + 0x90]
lea rcx, [rsp + 0x50]
call fcn.1400904e0
cmp qword [rsp + 0x100], 8
lea rdx, [rsp + 0xe8]
cmovae rdx, qword [rsp + 0xe8]
lea rcx, [0x1400d50a8]
xor r8d, r8d
call fcn.1400907c0
lea rdx, str.wWinMain
lea rcx, [rsp + 0xb8]
mov r8d, 8
mov qword [rsp + 0xd8], 7
mov qword [rsp + 0xd0], rsi
mov word [rsp + 0xc0], si
call fcn.140001870
cmp qword [rsp + 0xd8], 8
mov rcx, qword [0x1400d50a8]
mov edx, 0x32
lea rax, [0x1400ab130]
lea r9, [rsp + 0xc0]
lea r8d, [rdx - 0x31]
mov qword [rsp + 0x20], rax
cmovae r9, qword [rsp + 0xc0]
call fcn.1400144a0
mov r12d, esi
mov ebp, esi
mov r15, rsi
mov r13, rsi
mov r14, rsi
call qword [sym.imp.KERNEL32.dll_GetCommandLineW]
lea rdx, [rsp + 0x40]
mov rcx, rax
call qword [sym.imp.SHELL32.dll_CommandLineToArgvW]
mov ecx, dword [rsp + 0x40]
cmp ecx, 2
mov qword [rsp + 0x48], rax
jge 0x1400938b1
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_LocalFree]
cmp qword [rsp + 0xd8], 8
jb 0x140093875
mov rcx, qword [rsp + 0xc0]
call fcn.140065920
cmp qword [rsp + 0x100], 8
mov qword [rsp + 0xd8], 7
mov qword [rsp + 0xd0], rsi
mov word [rsp + 0xc0], si
jb 0x1400938a9
mov rcx, qword [rsp + 0xe8]
call fcn.140065920
or eax, 0xffffffff
jmp 0x140093bed
mov ebx, 1
cmp ecx, ebx
jle 0x140093971
lea esi, [rbx + 2]
lea rdi, [rax + 8]
lea rcx, str.Linea_de_Commando__d:__s
nop dword [rax]
mov rax, qword [rdi]
xor r9d, r9d
mov qword [rsp + 0x30], rax
mov dword [rsp + 0x28], ebx
mov qword [rsp + 0x20], rcx
mov rcx, qword [0x1400d50a8]
lea edx, [r9 + 0x1e]
lea r8d, [r9 + 1]
call fcn.1400144a0
mov rcx, qword [rdi]
lea rdx, str._removeLsp
call fcn.1400668a8
test eax, eax
jne 0x140093926
mov eax, dword [rsp + 0x40]
inc ebx
inc esi
add rdi, 8
cmp ebx, eax
jg 0x140093958
mov r15, qword [rdi]
mov r12d, 1
jmp 0x140093958
mov rcx, qword [rdi]
lea rdx, str._removeFirewall
call fcn.1400668a8
test eax, eax
mov eax, dword [rsp + 0x40]
jne 0x140093958
cmp esi, eax
jge 0x140093958
mov r13, qword [rdi + 8]
mov r14, qword [rdi + 0x10]
add ebx, 2
add esi, 2
add rdi, 0x10
mov ebp, 1
inc ebx
inc esi
add rdi, 8
cmp ebx, eax
lea rcx, str.Linea_de_Commando__d:__s
jl 0x1400938d0
xor esi, esi
mov edi, 1
test r12d, r12d
je 0x140093af5
mov rcx, qword [0x1400d50a8]
call fcn.1400901e0
mov rcx, qword [0x1400d50a8]
call fcn.14008fec0
mov rcx, qword [0x1400d50a8]
lea rdx, str.Antes_de_llamar_UnInstallPAVLAYERED
mov qword [rsp + 0x20], rdx
lea edx, [rdi + 0x1d]
xor r9d, r9d
mov r8d, edi
call fcn.1400144a0
call fcn.140091a90
mov rcx, qword [0x1400d50a8]
xor r9d, r9d
mov dword [rsp + 0x28], eax
mov edi, eax
lea rax, str.Despues_de_llamar_UnInstallPAVLAYERED___d
lea edx, [r9 + 0x1e]
lea r8d, [r9 + 1]
mov qword [rsp + 0x20], rax
call fcn.1400144a0
mov rcx, qword [0x1400d3700]
lea r11, [rsp + 0x80]
lea rdx, [rsp + 0x80]
mov qword [r11], rcx
mov rcx, qword [0x1400d3708]
mov qword [r11 + 8], rcx
mov ecx, 2
call fcn.140092fe0
cmp edi, 1
je 0x140093a73
mov rcx, qword [0x1400d50a8]
xor r9d, r9d
lea rax, str.RemoveCorruptedLayeredEntriesWithThisDllName
lea edx, [r9 + 0x1e]
lea r8d, [r9 + 1]
mov qword [rsp + 0x20], rax
call fcn.1400144a0
mov rdx, r15
mov ecx, 2
call fcn.140091960
mov rcx, qword [0x1400d50a8]
xor r9d, r9d
mov dword [rsp + 0x28], eax
mov edi, eax
lea rax, str.Despues_de_llamar_RemoveCorruptedLayeredEntriesWithThisDllName___d
lea edx, [r9 + 0x1e]
lea r8d, [r9 + 1]
mov qword [rsp + 0x20], rax
call fcn.1400144a0
xor r9d, r9d
cmp edi, 0xffffffff
je 0x140093ad0
test edi, edi
je 0x140093ac2
mov rcx, qword [0x1400d50a8]
lea r8d, [r9 + 1]
cmp edi, r8d
je 0x140093aa7
lea rax, str.Error_Inesperado_RemoveLSPByDllName
xor edx, edx
mov qword [rsp + 0x20], rax
call fcn.1400144a0
jmp 0x140093b4d
lea rax, str.DLL_eliminada_de_la_pila_de_LSPs
mov edx, 0x1e
mov qword [rsp + 0x20], rax
call fcn.1400144a0
jmp 0x140093b4d
lea rax, str.DLL_no_encontrada_en_la_pila_de_LSPs
mov edx, reloc.Cabinet.dll_FDICreate
jmp 0x140093adc
lea rax, str.Error_eliminando_DLL_de_la_pila_de_LSPs
mov edx, 0xa
mov rcx, qword [0x1400d50a8]
mov r8d, 1
mov qword [rsp + 0x20], rax
call fcn.1400144a0
jmp 0x140093b4d
test ebp, ebp
je 0x140093b4d
mov rcx, qword [0x1400d50a8]
call fcn.1400901e0
mov rcx, qword [0x1400d50a8]
call fcn.14008fec0
mov rcx, qword [0x1400d50a8]
mov r8, r14
mov rdx, r13
call fcn.14001e5f0
test eax, eax
je 0x140093b4b
mov rcx, qword [0x1400d50a8]
xor r9d, r9d
lea rax, str.Firewall_Desinstalado
lea edx, [r9 + 0x1e]
mov r8d, edi
mov qword [rsp + 0x20], rax
call fcn.1400144a0
jmp 0x140093b4d
mov edi, esi
mov rcx, qword [rsp + 0x48]
call qword [sym.imp.KERNEL32.dll_LocalFree]
cmp qword [rsp + 0xd8], 8
mov rcx, qword [0x1400d50a8]
mov edx, 0x32
lea rax, [0x1400ab4e8]
lea r9, [rsp + 0xc0]
cmovae r9, qword [rsp + 0xc0]
lea r8d, [rdx - 0x31]
mov qword [rsp + 0x20], rax
call fcn.1400144a0
lea rcx, [0x1400d50a8]
call fcn.140090390
cmp qword [rsp + 0xd8], 8
jb 0x140093bb7
mov rcx, qword [rsp + 0xc0]
call fcn.140065920
cmp qword [rsp + 0x100], 8
mov qword [rsp + 0xd8], 7
mov qword [rsp + 0xd0], rsi
mov word [rsp + 0xc0], si
jb 0x140093beb
mov rcx, qword [rsp + 0xe8]
call fcn.140065920
mov eax, edi
mov rcx, qword [rsp + 0x108]
xor rcx, rsp
call fcn.140064b70
lea r11, [rsp + 0x110]
mov rbx, qword [r11 + 0x38]
mov rbp, qword [r11 + 0x40]
mov rsi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
ret