Function at 0x1400052f8
Capabilities:
Accept command line arguments

Disassembly:
mov rax, rsp
push r15
sub rsp, 0x140
mov qword [rsp + 0x38], 0xfffffffffffffffe
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
mov qword [rax + 0x20], r14
mov rax, qword [0x14006c0f0]
xor rax, rsp
mov qword [rsp + 0x130], rax
mov rdi, r8
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_core_com_l1_1_0.dll_CoInitializeEx]
nop dword [rax + rax]
nop
mov rcx, qword [rsp + 0x148]
xor r15d, r15d
test eax, eax
js 0x140005b4c
mov byte [rsp + 0x24], 1
xor ecx, ecx
call fcn.140004854
nop
mov dword [0x14006c934], 5
xor ecx, ecx
call fcn.140004854
nop
mov eax, r15d
cmp qword [0x14006c990], r15
jne 0x1400053b7
lea rcx, [0x14006ca98]
call fcn.140008c80
nop
test eax, eax
jns 0x14000539b
lea rdx, str.Unable_to_setup_logging_file_location
jmp 0x1400053ac
call fcn.140008fc0
nop
test eax, eax
jns 0x1400053b7
lea rdx, str.Unable_to_start_logging_to_file
mov ecx, eax
call fcn.14000926c
nop
mov eax, r15d
mov ecx, eax
call fcn.140004854
nop
mov rcx, qword [0x14006c818]
lea rax, [0x140009bd0]
test rcx, rcx
je 0x1400053db
cmp rcx, rax
jne 0x140005b61
mov qword [0x14006c818], rax
call fcn.14000c394
nop
mov rcx, qword [0x14006c808]
lea rax, [0x140009c00]
test rcx, rcx
je 0x140005404
cmp rcx, rax
jne 0x140005b7f
mov qword [0x14006c808], rax
lea rcx, [0x14006b070]
call fcn.1400011e0
nop
mov byte [rsp + 0x31], 1
movdqa xmm0, xmmword [0x14005a0b0]
movdqu xmmword [rsp + 0xe0], xmm0
mov word [rsp + 0xd0], r15w
lea rdx, str._RUXIMCampaignScheduler__LibWinMain
lea rcx, [rsp + 0xd0]
call fcn.140008078
nop
lea r8, [rsp + 0xd0]
cmp qword [rsp + 0xe8], 8
cmovae r8, qword [rsp + 0xd0]
lea rdx, str._s_:_Init
xor ecx, ecx
call fcn.140009a7c
nop
mov qword [rsp + 0x28], r15
lea rcx, [rsp + 0x28]
call qword [sym.imp.api_ms_win_core_sysinfo_l1_1_0.dll_GetSystemTimeAsFileTime]
nop dword [rax + rax]
nop
mov ecx, dword [rsp + 0x28]
call qword [sym.imp.api_ms_win_crt_private_l1_1_0.dll__o_srand]
nop dword [rax + rax]
nop
mov sil, r15b
mov word [rsp + 0x20], r15w
mov r14b, r15b
mov ebx, r15d
movdqa xmm0, xmmword [0x14005a0b0]
movdqu xmmword [rsp + 0x100], xmm0
mov word [rsp + 0xf0], r15w
test rdi, rdi
je 0x140005519
call qword [sym.imp.api_ms_win_core_processenvironment_l1_1_0.dll_GetCommandLineW]
nop dword [rax + rax]
nop
mov rdx, rax
lea rcx, [rsp + 0xf0]
call fcn.140008078
nop
lea rdx, [rsp + 0xf0]
lea rcx, [rsp + 0x110]
call fcn.140007da0
nop
lea rdx, [rsp + 0x20]
mov rcx, rax
call fcn.14000a72c
nop
mov ebx, eax
mov r14b, byte [rsp + 0x21]
mov sil, byte [rsp + 0x20]
lea r8, [rsp + 0xf0]
cmp qword [rsp + 0x108], 8
cmovae r8, qword [rsp + 0xf0]
lea rdx, str._RUXIMCampaignScheduler__LibWinMain_:_ParseCommandLine__s
mov ecx, ebx
call fcn.140009a7c
nop
lea rcx, [rsp + 0xf0]
cmp qword [rsp + 0x108], 8
cmovae rcx, qword [rsp + 0xf0]
call fcn.140007c5c
nop
mov byte [rsp + 0x21], 1
test ebx, ebx
jns 0x14000561a
mov rcx, qword [rsp + 0x148]
mov r9d, ebx
lea r8, str.onecoreenduserwindowsupdate_ruxim_ruximcampaignschedulerlib_ruximcampaignscheduler.cpp
mov edx, 0x3a
call fcn.140003c18
nop
call fcn.14000a210
nop
lea rcx, [rsp + 0xf0]
call fcn.140007e78
nop
lea r8, [rsp + 0xd0]
cmp qword [rsp + 0xe8], 8
cmovae r8, qword [rsp + 0xd0]
lea rdx, str._s_:_Exit
xor ecx, ecx
call fcn.140009a7c
nop
lea rcx, [rsp + 0xd0]
call fcn.140007e78
nop
call fcn.14000a2dc
nop
mov qword [0x14006c818], r15
mov rcx, qword [0x14006b090]
mov dword [0x14006b070], r15d
mov qword [0x14006b090], r15
call qword [sym.imp.api_ms_win_eventing_provider_l1_1_0.dll_EventUnregister]
nop dword [rax + rax]
nop
call qword [sym.imp.api_ms_win_core_com_l1_1_0.dll_CoUninitialize]
nop dword [rax + rax]
nop
mov eax, ebx
jmp 0x140005b1c
mov rbx, r15
mov qword [rsp + 0x28], rbx
mov r9d, 0x1f0001
xor r8d, r8d
lea rdx, str.MUTEX_RUXIMICS
xor ecx, ecx
call qword [sym.imp.api_ms_win_core_synch_l1_1_0.dll_CreateMutexExW]
nop dword [rax + rax]
nop
test rax, rax
jne 0x14000564b
mov dil, r15b
jmp 0x140005656
mov rbx, rax
mov qword [rsp + 0x28], rax
mov dil, 1
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
nop dword [rax + rax]
nop
test dil, dil
je 0x140005a4f
cmp eax, 0xb7
jne 0x140005716
test rbx, rbx
je 0x140005685
mov rcx, rbx
call fcn.140003d00
nop
call fcn.14000a210
nop
lea rcx, [rsp + 0xf0]
call fcn.140007e78
nop
lea r8, [rsp + 0xd0]
cmp qword [rsp + 0xe8], 8
cmovae r8, qword [rsp + 0xd0]
lea rdx, str._s_:_Exit
xor ecx, ecx
call fcn.140009a7c
nop
lea rcx, [rsp + 0xd0]
call fcn.140007e78
nop
call fcn.14000a2dc
nop
mov qword [0x14006c818], r15
mov rcx, qword [0x14006b090]
mov dword [0x14006b070], r15d
mov qword [0x14006b090], r15
call qword [sym.imp.api_ms_win_eventing_provider_l1_1_0.dll_EventUnregister]
nop dword [rax + rax]
nop
call qword [sym.imp.api_ms_win_core_com_l1_1_0.dll_CoUninitialize]
nop dword [rax + rax]
nop
mov eax, 0x81331201
jmp 0x140005b1c
test r14b, r14b
sete dil
movdqa xmm0, xmmword [0x14005a0b0]
movdqu xmmword [rsp + 0x120], xmm0
mov word [rsp + 0x110], r15w
lea rdx, str._InteractionCampaignOrganizer__LoadInteractionCampaigns
lea rcx, [rsp + 0x110]
call fcn.140008078
nop
lea r8, [rsp + 0x110]
cmp qword [rsp + 0x128], 8
cmovae r8, qword [rsp + 0x110]
lea rdx, str._s_:_Init
xor ecx, ecx
call fcn.140009a7c
nop
test dil, dil
je 0x140005782
mov dl, 1
call fcn.14000f0c8
nop
mov dl, 1
call fcn.14000e7f0
nop
mov edi, eax
test eax, eax
jns 0x1400057e6
mov rcx, qword [rsp + 0x148]
mov r9d, eax
lea r8, str.onecoreenduserwindowsupdate_ruximplugliblibinteractioncampaignorganizer.cpp
mov edx, 0x11
call fcn.140003c18
nop
lea r8, [rsp + 0x110]
cmp qword [rsp + 0x128], 8
cmovae r8, qword [rsp + 0x110]
lea rdx, str._s_:_Exit
xor ecx, ecx
call fcn.140009a7c
nop
lea rcx, [rsp + 0x110]
call fcn.140007e78
nop
jmp 0x140005820
lea r8, [rsp + 0x110]
cmp qword [rsp + 0x128], 8
cmovae r8, qword [rsp + 0x110]
lea rdx, str._s_:_Exit
xor ecx, ecx
call fcn.140009a7c
nop
lea rcx, [rsp + 0x110]
call fcn.140007e78
nop
mov edi, r15d
test edi, edi
jns 0x1400058e1
mov rcx, qword [rsp + 0x148]
mov r9d, edi
lea r8, str.onecoreenduserwindowsupdate_ruxim_ruximcampaignschedulerlib_ruximcampaignscheduler.cpp
mov edx, 0x48
call fcn.140003c18
nop
test rbx, rbx
je 0x140005853
mov rcx, rbx
call fcn.140003d00
nop
call fcn.14000a210
nop
lea rcx, [rsp + 0xf0]
call fcn.140007e78
nop
lea r8, [rsp + 0xd0]
cmp qword [rsp + 0xe8], 8
cmovae r8, qword [rsp + 0xd0]
lea rdx, str._s_:_Exit
xor ecx, ecx
call fcn.140009a7c
nop
lea rcx, [rsp + 0xd0]
call fcn.140007e78
nop
call fcn.14000a2dc
nop
mov qword [0x14006c818], r15
mov rcx, qword [0x14006b090]
mov dword [0x14006b070], r15d
mov qword [0x14006b090], r15
call qword [sym.imp.api_ms_win_eventing_provider_l1_1_0.dll_EventUnregister]
nop dword [rax + rax]
nop
call qword [sym.imp.api_ms_win_core_com_l1_1_0.dll_CoUninitialize]
nop dword [rax + rax]
nop
mov eax, edi
jmp 0x140005b1c
test sil, sil
jne 0x1400059b3
call fcn.140007144
nop
mov edi, eax
test eax, eax
jns 0x1400059b3
mov rcx, qword [rsp + 0x148]
mov r9d, eax
lea r8, str.onecoreenduserwindowsupdate_ruxim_ruximcampaignschedulerlib_ruximcampaignscheduler.cpp
mov edx, 0x4b
call fcn.140003c18
nop
test rbx, rbx
je 0x140005925
mov rcx, rbx
call fcn.140003d00
nop
call fcn.14000a210
nop
lea rcx, [rsp + 0xf0]
call fcn.140007e78
nop
lea r8, [rsp + 0xd0]
cmp qword [rsp + 0xe8], 8
cmovae r8, qword [rsp + 0xd0]
lea rdx, str._s_:_Exit
xor ecx, ecx
call fcn.140009a7c
nop
lea rcx, [rsp + 0xd0]
call fcn.140007e78
nop
call fcn.14000a2dc
nop
mov qword [0x14006c818], r15
mov rcx, qword [0x14006b090]
mov dword [0x14006b070], r15d
mov qword [0x14006b090], r15
call qword [sym.imp.api_ms_win_eventing_provider_l1_1_0.dll_EventUnregister]
nop dword [rax + rax]
nop
call qword [sym.imp.api_ms_win_core_com_l1_1_0.dll_CoUninitialize]
nop dword [rax + rax]
nop
mov eax, edi
jmp 0x140005b1c
test rbx, rbx
je 0x1400059c1
mov rcx, rbx
call fcn.140003d00
nop
call fcn.14000a210
nop
lea rcx, [rsp + 0xf0]
call fcn.140007e78
nop
lea r8, [rsp + 0xd0]
cmp qword [rsp + 0xe8], 8
cmovae r8, qword [rsp + 0xd0]
lea rdx, str._s_:_Exit
xor ecx, ecx
call fcn.140009a7c
nop
lea rcx, [rsp + 0xd0]
call fcn.140007e78
nop
call fcn.14000a2dc
nop
mov qword [0x14006c818], r15
mov rcx, qword [0x14006b090]
mov dword [0x14006b070], r15d
mov qword [0x14006b090], r15
call qword [sym.imp.api_ms_win_eventing_provider_l1_1_0.dll_EventUnregister]
nop dword [rax + rax]
nop
call qword [sym.imp.api_ms_win_core_com_l1_1_0.dll_CoUninitialize]
nop dword [rax + rax]
nop
xor eax, eax
jmp 0x140005b1c
movzx edi, ax
or edi, 0x80070000
test eax, eax
cmovle edi, eax
test edi, edi
jns 0x140005a7e
mov rcx, qword [rsp + 0x148]
mov r9d, edi
lea r8, str.onecoreenduserwindowsupdate_ruxim_ruximcampaignschedulerlib_ruximcampaignscheduler.cpp
mov edx, 0x45
call fcn.140003c18
nop
test rbx, rbx
je 0x140005a8c
mov rcx, rbx
call fcn.140003d00
nop
call fcn.14000a210
nop
lea rcx, [rsp + 0xf0]
call fcn.140007e78
nop
lea r8, [rsp + 0xd0]
cmp qword [rsp + 0xe8], 8
cmovae r8, qword [rsp + 0xd0]
lea rdx, str._s_:_Exit
xor ecx, ecx
call fcn.140009a7c
nop
lea rcx, [rsp + 0xd0]
call fcn.140007e78
nop
call fcn.14000a2dc
nop
mov qword [0x14006c818], r15
mov rcx, qword [0x14006b090]
mov dword [0x14006b070], r15d
mov qword [0x14006b090], r15
call qword [sym.imp.api_ms_win_eventing_provider_l1_1_0.dll_EventUnregister]
nop dword [rax + rax]
nop
call qword [sym.imp.api_ms_win_core_com_l1_1_0.dll_CoUninitialize]
nop dword [rax + rax]
nop
mov eax, edi
jmp 0x140005b1c
mov rcx, qword [rsp + 0x130]
xor rcx, rsp
call fcn.14004b4d0
nop
lea r11, [rsp + 0x140]
mov rbx, qword [r11 + 0x10]
mov rsi, qword [r11 + 0x18]
mov rdi, qword [r11 + 0x20]
mov r14, qword [r11 + 0x28]
mov rsp, r11
pop r15
ret
mov r9d, eax
lea r8, str.onecoreinternal_sdkincwilopensourcewil_resource.h
mov edx, 0x10ec
call fcn.140009c50
nop
xor edx, edx
mov r8d, 0x90
lea rcx, [rsp + 0x40]
call sub.api_ms_win_crt_string_l1_1_0.dll_memset
nop
lea rcx, [rsp + 0x40]
call fcn.14000384c
nop
xor edx, edx
mov r8d, 0x90
lea rcx, [rsp + 0x40]
call sub.api_ms_win_crt_string_l1_1_0.dll_memset
nop
lea rcx, [rsp + 0x40]
call fcn.14000384c
nop
int3