Function at 0x10001f990
Capabilities:
Accept command line arguments

Disassembly:
mov rax, rsp
sub rsp, 0x1e8
mov qword [rsp + 0xf8], 0xfffffffffffffffe
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rbp
mov qword [rax + 0x18], rsi
mov qword [rax + 0x20], rdi
mov ebp, 0x80000000
lea rax, [rsp + 0x78]
mov qword [rsp + 0x48], rax
lea rcx, [0x1000a9318]
mov rax, qword [0x1000a9318]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rsp + 0x78], rax
lea rax, [rsp + 0xa0]
mov qword [rsp + 0x48], rax
lea rcx, [0x1000a9318]
mov rax, qword [0x1000a9318]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rsp + 0xa0], rax
lea rax, [rsp + 0xb8]
mov qword [rsp + 0x48], rax
lea rcx, [0x1000a9318]
mov rax, qword [0x1000a9318]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rsp + 0xb8], rax
lea rax, [rsp + 0xd0]
mov qword [rsp + 0x48], rax
lea rcx, [0x1000a9318]
mov rax, qword [0x1000a9318]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rsp + 0xd0], rax
lea rcx, [0x1000a9318]
mov rax, qword [0x1000a9318]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rsp + 0x58], rax
xor ebx, ebx
mov dword [rsp + 0x50], ebx
lea rcx, [0x1000a9318]
mov rax, qword [0x1000a9318]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rsp + 0x68], rax
xor ecx, ecx
call fcn.1000477d0
xor ecx, ecx
call qword [sym.imp.ole32.dll_CoInitialize]
mov dword [rsp + 0x70], ebx
mov rax, qword [rsp + 0x78]
lea rdx, [rax - 0x18]
mov rdi, qword [rdx]
lea rsi, [rbx - 1]
cmp dword [rdx + 8], ebx
je 0x10001ef3b
cmp dword [rdx + 0x10], ebx
jge 0x10001ef13
cmp dword [rax - 0xc], ebx
jge 0x10001ef04
mov ecx, 0x80070057
call fcn.100013860
int3
mov dword [rax - 0x10], ebx
mov rax, qword [rsp + 0x78]
mov word [rax], 0
jmp 0x10001ef3b
mov eax, esi
lock xadd dword [rdx + 0x10], eax
dec eax
test eax, eax
jg 0x10001ef29
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov rax, qword [rdi]
mov rcx, rdi
call qword [rax + 0x18]
add rax, 0x18
mov qword [rsp + 0x78], rax
mov word [rsp + 0x80], 0
mov dword [rsp + 0x84], ebx
mov dword [rsp + 0x88], ebx
mov dword [rsp + 0x8c], ebx
mov dword [rsp + 0x90], ebx
mov dword [rsp + 0x94], ebx
mov dword [rsp + 0x98], ebx
mov dword [rsp + 0xa8], ebx
mov dword [rsp + 0xac], ebx
mov dword [rsp + 0xb0], ebx
mov dword [rsp + 0xc0], ebx
mov rax, qword [rsp + 0xb8]
lea rdx, [rax - 0x18]
mov rdi, qword [rdx]
cmp dword [rdx + 8], 0
je 0x10001eff4
cmp dword [rdx + 0x10], 0
jge 0x10001efc9
cmp dword [rax - 0xc], 0
jge 0x10001efb7
mov ecx, 0x80070057
call fcn.100013860
int3
mov dword [rax - 0x10], ebx
mov rax, qword [rsp + 0xb8]
mov word [rax], 0
jmp 0x10001eff4
mov eax, esi
lock xadd dword [rdx + 0x10], eax
dec eax
test eax, eax
jg 0x10001efdf
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov rax, qword [rdi]
mov rcx, rdi
call qword [rax + 0x18]
add rax, 0x18
mov qword [rsp + 0xb8], rax
mov dword [rsp + 0xc4], 1
mov dword [rsp + 0xc8], ebx
mov dword [rsp + 0xcc], ebx
mov rax, qword [rsp + 0xd0]
lea rdx, [rax - 0x18]
mov rdi, qword [rdx]
cmp dword [rdx + 8], 0
je 0x10001f076
cmp dword [rdx + 0x10], 0
jge 0x10001f04b
cmp dword [rax - 0xc], 0
jge 0x10001f039
mov ecx, 0x80070057
call fcn.100013860
int3
mov dword [rax - 0x10], ebx
mov rax, qword [rsp + 0xd0]
mov word [rax], 0
jmp 0x10001f076
mov eax, esi
lock xadd dword [rdx + 0x10], eax
dec eax
test eax, eax
jg 0x10001f061
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov rax, qword [rdi]
mov rcx, rdi
call qword [rax + 0x18]
add rax, 0x18
mov qword [rsp + 0xd0], rax
mov dword [rsp + 0xd8], ebx
mov dword [rsp + 0xdc], ebx
lea rdx, [0x1000a8968]
mov rcx, qword [0x1000a8958]
call fcn.10004b3c0
test eax, eax
je 0x10001f371
call fcn.100049bb0
mov dword [reloc.OLEAUT32.dll_SysStringLen], eax
call fcn.100019010
call fcn.100019bd0
call qword [sym.imp.KERNEL32.dll_GetCommandLineW]
mov rdi, rax
lea rdx, [rsp + 0x50]
mov rcx, rax
call qword [sym.imp.SHELL32.dll_CommandLineToArgvW]
mov rbx, rax
test rax, rax
jne 0x10001f0f6
lea rdx, [0x100003840]
lea ecx, [rax + 1]
call fcn.1000193f0
lea rdx, [0x100005548]
lea ecx, [rbx + 3]
call fcn.1000193f0
jmp 0x10001f371
mov r8, rdi
lea rdx, [0x100005520]
mov ecx, 1
call fcn.1000193f0
lea r9, [rsp + 0x58]
lea r8, [rsp + 0x70]
mov rdx, rbx
mov ecx, dword [rsp + 0x50]
call fcn.100016e50
mov edi, eax
mov r8, qword [rsp + 0xd0]
cmp dword [r8 - 0x10], 0
je 0x10001f142
lea rdx, [0x100005508]
mov ecx, 1
call fcn.1000193f0
lea rdx, [0x100003840]
mov ecx, 1
call fcn.1000193f0
test edi, edi
jne 0x10001f173
mov rdx, qword [rsp + 0x58]
lea ecx, [rdi + 3]
call fcn.1000193f0
lea rcx, [rsp + 0x58]
call fcn.100018ce0
jmp 0x10001f371
mov eax, dword [rsp + 0x70]
test eax, eax
jne 0x10001f188
mov dword [rsp + 0x70], 1
jmp 0x10001f22e
cmp eax, 4
jne 0x10001f22e
lea rcx, [0x1000a9318]
mov rax, qword [0x1000a9318]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rsp + 0x60], rax
lea rdx, [0x100005504]
test rdx, 0xffffffffffff0000
jne 0x10001f1de
movzx edi, dx
xor edx, edx
mov ecx, edi
call fcn.1000138a0
test rax, rax
je 0x10001f1fb
mov r8d, edi
mov rdx, rax
lea rcx, [rsp + 0x60]
call fcn.1000149f0
jmp 0x10001f1fb
xor eax, eax
mov rcx, rsi
mov rdi, rdx
repne scasw ax, word [rdi]
not rcx
lea r8d, [rcx - 1]
lea rcx, [rsp + 0x60]
call fcn.100014b20
nop
lea rcx, [rsp + 0x60]
call fcn.100018ce0
nop
mov rdx, qword [rsp + 0x60]
add rdx, 0xffffffffffffffe8
mov eax, esi
lock xadd dword [rdx + 0x10], eax
dec eax
test eax, eax
jg 0x10001f371
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
jmp 0x10001f371
cmp dword [rsp + 0xc8], 0
je 0x10001f28b
cmp dword [reloc.OLEAUT32.dll_SysStringLen], 2
jne 0x10001f254
lea rdx, [0x100005450]
mov ecx, 2
call fcn.1000193f0
jmp 0x10001f28b
call fcn.100045fa0
test eax, eax
je 0x10001f27a
mov dword [0x1000a8960], 1
lea rdx, [0x1000053f0]
mov ecx, 1
call fcn.1000193f0
jmp 0x10001f28b
lea rdx, [0x100005380]
mov ecx, 3
call fcn.1000193f0
lea rax, [rsp + 0x48]
mov qword [rsp + 0x40], rax
mov rdx, qword [rbx]
lea rcx, [rsp + 0x48]
call fcn.100018c00
nop
mov edx, dword [rsp + 0xc4]
mov rcx, rax
call fcn.1000153a0
test eax, eax
jne 0x10001f2cd
mov r8, qword [rbx]
lea rdx, [0x100005310]
lea ecx, [rax + 3]
call fcn.1000193f0
jmp 0x10001f371
lea rcx, [rsp + 0x68]
call fcn.10004b2a0
test eax, eax
jne 0x10001f2ef
mov r8, qword [rsp + 0x68]
lea rdx, [0x1000052c0]
lea ecx, [rax + 1]
call fcn.1000193f0
xor edx, edx
lea rcx, [0x10001b1a0]
call qword [fcn.100013158]
mov edx, dword [rsp + 0x70]
cmp edx, 1
je 0x10001f33d
cmp edx, 1
jle 0x10001f367
cmp edx, 3
jg 0x10001f367
lea rax, [rsp + 0x100]
mov qword [rsp + 0x40], rax
lea rdx, [rsp + 0x70]
lea rcx, [rsp + 0x100]
call fcn.100014c90
nop
mov rcx, rax
call fcn.10001e540
mov ebp, eax
jmp 0x10001f367
lea rax, [rsp + 0x170]
mov qword [rsp + 0x40], rax
lea rdx, [rsp + 0x70]
lea rcx, [rsp + 0x170]
call fcn.100014c90
nop
mov rcx, rax
call fcn.10001b3b0
mov ebp, eax
xor edx, edx
xor ecx, ecx
call qword [fcn.100013158]
mov r8d, ebp
lea rdx, [0x100005288]
mov ecx, 1
call fcn.1000193f0
cmp dword [0x1000a8960], 0
je 0x10001f393
call fcn.100046180
test rbx, rbx
je 0x10001f3a1
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GlobalFree]
lea rcx, [rsp + 0xe0]
call qword [sym.imp.KERNEL32.dll_GetLocalTime]
lea rcx, [0x1000a9318]
mov rax, qword [0x1000a9318]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rsp + 0xf0], rax
movzx eax, word [rsp + 0xec]
movzx edx, word [rsp + 0xea]
movzx ecx, word [rsp + 0xe8]
movzx edi, word [rsp + 0xe0]
movzx r9d, word [rsp + 0xe6]
movzx r8d, word [rsp + 0xe2]
mov dword [rsp + 0x38], eax
mov dword [rsp + 0x30], edx
mov dword [rsp + 0x28], ecx
mov dword [rsp + 0x20], edi
lea rdx, [0x100003570]
lea rcx, [rsp + 0xf0]
call fcn.100015d50
mov rdi, qword [rsp + 0xf0]
mov rdx, rdi
mov ecx, 1
call fcn.1000193f0
nop
lea rdx, [rdi - 0x18]
mov eax, esi
lock xadd dword [rdx + 0x10], eax
dec eax
test eax, eax
jg 0x10001f452
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
lea rcx, [0x1000a8970]
call fcn.100045620
call qword [sym.imp.ole32.dll_CoUninitialize]
call fcn.1000477f0
nop
mov rdx, qword [rsp + 0x68]
add rdx, 0xffffffffffffffe8
mov eax, esi
lock xadd dword [rdx + 0x10], eax
dec eax
test eax, eax
jg 0x10001f48a
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x58]
add rdx, 0xffffffffffffffe8
mov eax, esi
lock xadd dword [rdx + 0x10], eax
dec eax
test eax, eax
jg 0x10001f4aa
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
lea rax, [rsp + 0xd0]
mov qword [rsp + 0x40], rax
mov rdx, qword [rsp + 0xd0]
add rdx, 0xffffffffffffffe8
mov eax, esi
lock xadd dword [rdx + 0x10], eax
dec eax
test eax, eax
jg 0x10001f4da
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
lea rax, [rsp + 0xb8]
mov qword [rsp + 0x40], rax
mov rdx, qword [rsp + 0xb8]
add rdx, 0xffffffffffffffe8
mov eax, esi
lock xadd dword [rdx + 0x10], eax
dec eax
test eax, eax
jg 0x10001f50a
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
lea rax, [rsp + 0xa0]
mov qword [rsp + 0x40], rax
mov rdx, qword [rsp + 0xa0]
add rdx, 0xffffffffffffffe8
mov eax, esi
lock xadd dword [rdx + 0x10], eax
dec eax
test eax, eax
jg 0x10001f53a
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
lea rax, [rsp + 0x78]
mov qword [rsp + 0x40], rax
mov rdx, qword [rsp + 0x78]
add rdx, 0xffffffffffffffe8
lock xadd dword [rdx + 0x10], esi
dec esi
test esi, esi
jg 0x10001f561
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov eax, ebp
mov rbx, qword [rsp + 0x1f0]
mov rbp, qword [rsp + 0x1f8]
mov rsi, qword [rsp + 0x200]
mov rdi, qword [rsp + 0x208]
add rsp, 0x1e8
ret
mov qword [0x1000a8958], rcx
jmp 0x10001edc0