Function at 0x1400c15d0
Capabilities:
Accept command line arguments

Disassembly:
push rbx
push rbp
push rdi
push r12
push r13
push r15
sub rsp, 0x38
xor edi, edi
lea rdx, [rsp + 0x80]
mov r12d, edi
call qword [sym.imp.SHELL32.dll_CommandLineToArgvW]
mov r15d, edi
mov qword [rsp + 0x20], rdi
mov qword [rsp + 0x28], rax
mov rbx, rax
mov qword [rsp + 0x88], rdi
mov r13d, edi
mov dword [rsp + 0x78], edi
mov ebp, edi
test rax, rax
je 0x1400c18e5
cmp dword [rsp + 0x80], edi
jle 0x1400c18e5
mov rcx, qword [rax]
lea rdx, [0x1401667ac]
mov qword [rsp + 0x70], rsi
mov qword [rsp + 0x30], r14
call fcn.14011a80c
mov r14, rax
mov rax, qword [rbx]
test r14, r14
je 0x1400c16be
mov rdx, r14
lea ecx, [rdi + 0x40]
sub rdx, rax
sar rdx, 1
lea rdx, [rdx*2 + 2]
call qword [sym.imp.KERNEL32.dll_LocalAlloc]
mov qword [rsp + 0x20], rax
mov r15, rax
test rax, rax
je 0x1400c16c9
mov rdx, qword [rbx]
mov rsi, 0xffffffffffffffff
nop dword [rax]
inc rsi
cmp word [rdx + rsi*2], di
jne 0x1400c1680
mov rbx, r14
mov rcx, rax
sub rbx, rdx
mov r8, rbx
sar r8, 1
add r8, r8
call fcn.14011b4a0
lea rcx, [rbx + 4]
sar rcx, 1
lea r13, [r14 + 4]
mov ecx, ecx
cmp rcx, rsi
cmovae r13, rdi
mov qword [rsp + 0x88], r13
jmp 0x1400c16c9
mov r13, rax
mov qword [rsp + 0x88], rax
movzx ebx, di
lea rsi, [0x14014ced0]
cmp bx, 2
jae 0x1400c185a
movzx r14d, bx
test r15, r15
je 0x1400c16fe
mov rdx, qword [rsi + r14*8]
mov rcx, r15
mov rdx, qword [rdx]
call fcn.14011ebc8
test eax, eax
je 0x1400c16fe
inc bx
jmp 0x1400c16d3
test r13, r13
je 0x1400c1796
mov r15, qword [rsp + 0x28]
lea r14, [rsi + r14*8]
mov rsi, qword [rsp + 0x88]
nop dword [rax + rax]
mov rdx, qword [r14]
cmp bp, word [rdx + 0x18]
jae 0x1400c177e
mov rdx, qword [rdx + 0x20]
movzx eax, bp
lea rcx, [rax + rax*2]
mov rdx, qword [rdx + rcx*8 + 8]
lea r13, [rcx*8]
mov rcx, rsi
call fcn.14011ebc8
test eax, eax
mov ecx, edi
sete cl
mov dword [rsp + 0x78], ecx
test eax, eax
jne 0x1400c1777
mov rax, qword [r14]
lea rdx, [r15 + 8]
mov ecx, dword [rsp + 0x80]
dec ecx
mov r8, qword [rax + 0x20]
call qword [r8 + r13]
mov ecx, dword [rsp + 0x78]
mov r12d, eax
inc bp
test ecx, ecx
je 0x1400c1720
mov r15, qword [rsp + 0x20]
lea rsi, [0x14014ced0]
mov ebp, dword [rsp + 0x78]
mov r13, qword [rsp + 0x88]
test ebp, ebp
jne 0x1400c18c2
movzx eax, bx
lea rcx, str.ERROR_bypass_doLocal_____s___of___s_____n
mov rdx, r13
mov r9, qword [rsi + rax*8]
mov r8, qword [r9]
call fcn.14000afb0
mov rdx, qword [r9]
lea rcx, str._n_:_t_s
call fcn.14000afb0
mov rdx, qword [r9 + 8]
test rdx, rdx
je 0x1400c17db
lea rcx, str._n_:_t_s
call fcn.14000afb0
mov rdx, qword [r9 + 0x10]
test rdx, rdx
je 0x1400c17f0
lea rcx, str._n_:_t_s
call fcn.14000afb0
lea rcx, reloc.Cabinet.dll_FCICreate
call fcn.14000afb0
cmp di, word [r9 + 0x18]
jae 0x1400c18b6
nop word [rax + rax]
mov rdx, qword [r9 + 0x20]
movzx eax, di
lea rcx, [rax + rax*2]
lea r8, [rcx*8]
mov rdx, qword [r8 + rdx + 8]
lea rcx, str._n_16s
call fcn.14000afb0
mov rax, qword [r9 + 0x20]
mov rdx, qword [r8 + rax + 0x10]
test rdx, rdx
je 0x1400c184e
lea rcx, str.______s
call fcn.14000afb0
inc di
cmp di, word [r9 + 0x18]
jb 0x1400c1810
jmp 0x1400c18b6
mov rdx, r15
lea rcx, str.ERROR_bypass_doLocal_____s_____n
call fcn.14000afb0
mov r8d, 2
nop
mov rax, qword [rsi]
lea rcx, str._n_16s
mov rdx, qword [rax]
call fcn.14000afb0
mov rdx, qword [rax + 8]
test rdx, rdx
je 0x1400c1897
lea rcx, str.______s
call fcn.14000afb0
mov rdx, qword [rax + 0x10]
test rdx, rdx
je 0x1400c18ac
lea rcx, str.____s_
call fcn.14000afb0
add rsi, 8
sub r8, 1
jne 0x1400c1870
lea rcx, reloc.Cabinet.dll_FCICreate
call fcn.14000afb0
mov r14, qword [rsp + 0x30]
mov rsi, qword [rsp + 0x70]
test r15, r15
je 0x1400c18da
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_LocalFree]
mov rcx, qword [rsp + 0x28]
call qword [sym.imp.KERNEL32.dll_LocalFree]
mov eax, r12d
add rsp, 0x38
pop r15
pop r13
pop r12
pop rdi
pop rbp
pop rbx
ret