Function at 0x1400de040
Capabilities:
Accept command line arguments

Disassembly:
mov qword [rsp + 0x18], r8
mov word [rsp + 0x10], dx
mov word [rsp + 8], cx
sub rsp, 0x188
mov byte [rsp + 0x30], 0xa2
mov dword [rsp + 0x38], 0x6f4504
mov eax, dword [rsp + 0x38]
mov dword [rsp + 0x4c], eax
cmp dword [rsp + 0x4c], 0x6f4504
je 0x1400de07a
jmp 0x1400de0fd
mov dword [rsp + 0xe0], 0x9c
call qword [sym.imp.KERNEL32.dll_GetCommandLineA]
mov qword [rsp + 0x68], rax
mov eax, dword [rsp + 0x38]
mov dword [rsp + 0x40], eax
cmp dword [rsp + 0x40], 0x6f4504
je 0x1400de0ae
cmp dword [rsp + 0x40], 0xb6a1128
je 0x1400de0e2
jmp 0x1400de0f8
movzx eax, byte [rsp + 0x30]
add eax, 0x74
mov byte [rsp + 0x30], al
mov ecx, ILClone
call qword [sym.imp.KERNEL32.dll_IsProcessorFeaturePresent]
mov dword [rsp + 0x58], eax
call qword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov dword [rsp + 0x5c], eax
movzx eax, word [rsp + 0x198]
mov word [rsp + 0x34], ax
jmp 0x1400de0f8
movzx edx, word [rsp + 0x190]
mov rcx, qword [rsp + 0x1a0]
call fcn.1400dda10
nop
jmp 0x1400de1e2
movsx eax, word [rsp + 0x198]
sub eax, 0x6e5b
mov word [rsp + 0x34], ax
movzx eax, byte [rsp + 0x30]
cmp eax, 0x60
jl 0x1400de19f
lea r9, [rsp + 0x30]
lea r8, [rsp + 0x80]
lea rdx, [rsp + 0x48]
lea rcx, [rsp + 0x90]
call sub.ole32.dll_CoGetInterceptor
mov dword [rsp + 0x48], eax
mov edx, 0x76
mov ecx, 4
call fcn.1400dddf0
movzx eax, byte [rsp + 0x30]
and eax, 0x69
mov byte [rsp + 0x30], al
lea rdx, [rsp + 0xa0]
lea rcx, str.cure_Episcopacy_Paradise_diagnosis_Lumbago
call qword [sym.imp.ole32.dll_CLSIDFromString]
mov dword [rsp + 0x50], eax
movzx eax, byte [rsp + 0x30]
or eax, 0x16
mov byte [rsp + 0x30], al
mov edx, reloc.SHELL32.dll_SHGetNewLinkInfoA
mov ecx, 0xf7
call fcn.1400dddf0
movsx eax, word [rsp + 0x198]
shl eax, 3
mov word [rsp + 0x34], ax
mov r8, qword [rsp + 0x1a0]
movzx edx, word [rsp + 0x34]
movzx ecx, word [rsp + 0x190]
call fcn.1400de040
lea r8, [rsp + 0x3c]
mov edx, reloc.SHELL32.dll_ILIsEqual
lea rcx, [rsp + 0xb0]
call qword [sym.imp.ole32.dll_OleRegGetUserType]
mov dword [rsp + 0x3c], eax
mov eax, 0x41e
mov word [rsp + 0x190], ax
cmp dword [rsp + 0x38], 0x15c18b69
jne 0x1400de23c
mov eax, dword [rsp + 0x38]
mov dword [rsp + 0x20], eax
mov r9d, dword [rsp + 0x38]
mov r8d, dword [rsp + 0x38]
mov edx, dword [rsp + 0x38]
mov ecx, dword [rsp + 0x38]
call fcn.1400de340
movzx eax, word [rsp + 0x34]
mov word [rsp + 0x198], ax
lea rdx, [rsp + 0x38]
lea rcx, [rsp + 0x34]
call qword [sym.imp.ole32.dll_CoQueryAuthenticationServices]
mov dword [rsp + 0x50], eax
movzx eax, byte [rsp + 0x30]
sar eax, 1
mov byte [rsp + 0x30], al
jmp 0x1400de2c0
mov eax, dword [rsp + 0x38]
xor eax, 0x5e2694e4
cmp eax, 0x652799e6
jle 0x1400de2c0
mov rcx, qword [rsp + 0x70]
call qword [sym.imp.ole32.dll_CoRevokeInitializeSpy]
mov dword [rsp + 0x60], eax
mov eax, dword [rsp + 0x38]
sub eax, 0x3ca027f1
mov dword [rsp + 0x38], eax
mov eax, dword [rsp + 0x38]
add eax, 0x2624ab81
cmp eax, 0xf3b4083
jle 0x1400de2c0
movsx eax, word [rsp + 0x34]
mov dword [rsp + 0x44], eax
cmp dword [rsp + 0x44], 0xc3c
je 0x1400de297
cmp dword [rsp + 0x44], 0x23f6
je 0x1400de29f
jmp 0x1400de2c0
call fcn.1400dd710
nop
jmp 0x1400de2c0
lea r9, [rsp + 0x38]
lea r8, [rsp + 0xc0]
lea rdx, [rsp + 0x48]
lea rcx, [rsp + 0x3c]
call qword [sym.imp.ole32.dll_CoGetObject]
mov dword [rsp + 0x3c], eax
mov byte [rsp + 0x31], reloc.SHELL32.dll_ILSaveToStream
movsx eax, word [rsp + 0x198]
mov dword [rsp + 0x54], eax
cmp dword [rsp + 0x54], 0x2c67
je 0x1400de2dd
jmp 0x1400de2ec
lea rcx, [rsp + 0x34]
call qword [sym.imp.ole32.dll_CoDisableCallCancellation]
mov dword [rsp + 0x64], eax
movsx eax, byte [rsp + 0x31]
and eax, 0x5f
mov byte [rsp + 0x31], al
movsx eax, byte [rsp + 0x31]
add eax, 0x22
mov byte [rsp + 0x31], al
xor r8d, r8d
lea rdx, [rsp + 0x31]
lea rcx, [rsp + 0xd0]
call qword [sym.imp.ole32.dll_OleGetIconOfClass]
mov qword [rsp + 0x78], rax
movsx eax, byte [rsp + 0x31]
sub eax, 0x4a
mov byte [rsp + 0x31], al
mov eax, reloc.SHELL32.dll_SHGetNewLinkInfoA
add rsp, 0x188
ret