Function at 0x100001a10
Capabilities:
Accept command line arguments

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rbp
mov qword [rsp + 0x20], rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x40
xor r9d, r9d
mov rbx, r8
mov qword [0x1000036d8], rcx
lea edx, [r9 + 1]
xor r8d, r8d
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_HeapSetInformation]
xor r13d, r13d
lea rdx, [rsp + 0x24]
and qword [rsp + 0x30], r13
xor r15d, r15d
xor r14b, r14b
xor edi, edi
mov rcx, rbx
mov qword [rsp + 0x28], r13
and dword [rsp + 0x24], edi
mov dword [rsp + 0x20], r15d
mov byte [rsp + 0x70], r14b
call qword [sym.imp.SHELL32.dll_CommandLineToArgvW]
mov qword [rsp + 0x38], rax
test rax, rax
je 0x100001c96
xor r12d, r12d
cmp dword [rsp + 0x24], edi
jle 0x100001c96
lea ebx, [rdi + 1]
mov rbp, rax
lea r14, [0x100001348]
test edi, edi
js 0x100001c9d
mov rax, qword [rbp]
mov ecx, 0x2f
cmp cx, word [rax]
je 0x100001ac5
mov ecx, 0x2d
cmp cx, word [rax]
jne 0x100001b4f
lea r15, [rax + 2]
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_lstrlenW]
test eax, eax
jle 0x100001b4f
lea rdx, [0x100001378]
mov rcx, r15
call qword [sym.imp.SHLWAPI.dll_StrCmpICW]
test eax, eax
jne 0x100001af4
mov r14b, 1
mov byte [rsp + 0x70], r14b
jmp 0x100001b54
lea rdx, [0x1000013a0]
mov rcx, r15
call qword [sym.imp.SHLWAPI.dll_StrCmpICW]
test eax, eax
jne 0x100001bdd
cmp ebx, dword [rsp + 0x24]
jge 0x100001b4a
add rbp, 8
lea r8d, [rax + 0xa]
xor edx, edx
mov rcx, qword [rbp]
inc r12d
inc ebx
call qword [sym.imp.msvcrt.dll_wcstoul]
mov esi, eax
mov ecx, eax
mov qword [rsp + 0x30], rsi
call qword [sym.imp.USER32.dll_IsWindow]
mov r14b, byte [rsp + 0x70]
test eax, eax
jne 0x100001b59
mov edi, 0x80070578
jmp 0x100001b59
mov edi, 0x80070057
mov r14b, byte [rsp + 0x70]
mov rsi, qword [rsp + 0x30]
mov r15d, dword [rsp + 0x20]
mov r13, qword [rsp + 0x28]
inc r12d
inc ebx
add rbp, 8
cmp r12d, dword [rsp + 0x24]
jl 0x100001a9a
test edi, edi
js 0x100001c9d
test r14b, r14b
je 0x100001c81
lea rcx, [0x100001320]
xor edi, edi
call qword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov rbx, rax
test rax, rax
je 0x100001c6b
lea rdx, [0x100001338]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rsi, rax
test rax, rax
je 0x100001c4c
call qword [sym.imp.USER32.dll_GetDesktopWindow]
lea r9d, [rdi + 5]
lea r8, [0x100001342]
mov rcx, rax
mov rdx, rbx
call rsi
jmp 0x100001c60
xor r13d, r13d
xor esi, esi
mov rdx, qword [r14]
mov rcx, r15
call qword [sym.imp.SHLWAPI.dll_StrCmpICW]
test eax, eax
je 0x100001c07
inc r13d
inc rsi
add r14, 0x10
cmp r13d, 3
jb 0x100001be2
jmp 0x100001b4f
cmp ebx, dword [rsp + 0x24]
mov r14b, byte [rsp + 0x70]
jge 0x100001c42
add rbp, 8
lea rax, [0x100001348]
inc r12d
mov r13, qword [rbp]
inc ebx
add rsi, rsi
mov r15d, dword [rax + rsi*8 + 8]
mov rsi, qword [rsp + 0x30]
mov qword [rsp + 0x28], r13
mov dword [rsp + 0x20], r15d
jmp 0x100001b63
mov edi, 0x80070057
jmp 0x100001b54
call qword [sym.imp.KERNEL32.dll_GetLastError]
movzx edi, ax
or edi, 0x80070000
test eax, eax
cmovle edi, eax
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
jmp 0x100001c9d
call qword [sym.imp.KERNEL32.dll_GetLastError]
movzx edi, ax
or edi, 0x80070000
test eax, eax
cmovle edi, eax
jmp 0x100001c9d
test r13, r13
je 0x100001c96
mov r8, r13
mov edx, r15d
mov rcx, rsi
call fcn.1000016c0
jmp 0x100001c9b
call fcn.100001458
mov edi, eax
mov rcx, qword [rsp + 0x38]
test rcx, rcx
je 0x100001cad
call qword [sym.imp.KERNEL32.dll_LocalFree]
lea r11, [rsp + 0x40]
mov eax, edi
mov rbx, qword [r11 + 0x38]
mov rbp, qword [r11 + 0x40]
mov rsi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
ret