Function at 0x1400069ac
Capabilities:
Accept command line arguments

Disassembly:
mov rax, rsp
push rbp
push rdi
push r12
push r13
push r15
lea rbp, [rax - 0x5f]
sub rsp, 0xa0
mov qword [rbp - 0x11], 0xfffffffffffffffe
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], rsi
mov rbx, rcx
xor r9d, r9d
xor r8d, r8d
lea r12d, [r9 + 1]
mov edx, r12d
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_HeapSetInformation]
lea rdi, [0x1401348a8]
mov rcx, rdi
call fcn.140029388
xor r15d, r15d
test rbx, rbx
je 0x140006cf5
cmp qword [0x1401e32a8], r15
jne 0x140006d02
mov qword [0x1401e32a8], rbx
cmp word [0x1401e32b0], r15w
jne 0x140006d0f
mov r8d, 0x104
lea rdx, [0x1401e32b0]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
test eax, eax
je 0x140006d1c
lea edx, [r12 + 0x5b]
lea rcx, [0x1401e32b0]
call qword [sym.imp.VCRUNTIME140.dll_wcsrchr]
test rax, rax
je 0x140006d29
mov word [rax], r15w
mov ecx, r12d
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov rbx, rax
test rax, rax
je 0x140006d36
mov eax, dword [0x1401dc7b8]
lea r13d, [r12 + 1]
cmp eax, r13d
je 0x140006af7
xor eax, eax
lock cmpxchg dword [0x1401dc7b8], r12d
mov ecx, eax
jne 0x140006aa0
mov eax, r12d
mov ecx, r15d
jmp 0x140006aa3
mov eax, r15d
test eax, eax
jne 0x140006abb
cmp ecx, r13d
je 0x140006af7
mov qword [rbp - 0x21], r15
lea rcx, [rbp - 0x21]
call fcn.140019bcc
jmp 0x140006a89
xorps xmm0, xmm0
movdqa xmmword [rbp - 9], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 7], xmm1
mov qword [rbp + 0x17], r15
mov qword [rbp + 0x1f], rdi
mov dword [rbp + 0x27], r15d
mov dword [rbp + 0x2b], r13d
mov dword [rbp + 0x2f], 0xfffffffe
lea rcx, [rbp - 9]
call fcn.140018fe0
mov eax, r12d
lock cmpxchg dword [0x1401dc7b8], r13d
mov qword [rbp - 0x19], rbx
xor edx, edx
lea ecx, [rdx + 0xa]
call fcn.1400066d8
test al, al
je 0x140006bad
lea rcx, str.kernel32.dll
call qword [sym.imp.KERNEL32.dll_GetModuleHandleW]
mov rbx, rax
test rax, rax
je 0x140006ce4
lea rdx, str.GetProcessMitigationPolicy
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rdi, rax
lea rdx, str.SetProcessMitigationPolicy
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rsi, rax
mov dword [rbp + 0x67], r15d
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov r8d, eax
xor edx, edx
mov ecx, 0x410
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov rbx, rax
mov r9d, 4
lea r8, [rbp + 0x67]
lea edx, [r9 + 6]
mov rcx, rax
mov rax, rdi
call qword [case.0x140007d11.0]
or dword [rbp + 0x67], 3
mov r8d, 4
lea rdx, [rbp + 0x67]
lea ecx, [r8 + 6]
mov rax, rsi
call qword [case.0x140007d11.0]
test rbx, rbx
je 0x140006bad
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
nop
mov edx, r13d
mov ebx, 6
mov ecx, ebx
call fcn.1400066d8
test al, al
je 0x140006bcf
mov dword [rbp - 0x35], r12d
lea rdx, [rbp - 0x35]
mov ecx, ebx
call fcn.14000694c
xor edx, edx
lea ecx, [rdx + 0xa]
call fcn.1400066d8
test al, al
je 0x140006bef
mov dword [rbp - 0x31], r12d
lea rdx, [rbp - 0x31]
mov ecx, 9
call fcn.14000694c
mov edx, 3
mov ecx, ebx
call fcn.1400066d8
test al, al
je 0x140006c14
mov dword [rbp - 0x2d], 3
lea rdx, [rbp - 0x2d]
mov ecx, 7
call fcn.14000694c
call fcn.1400067a0
test al, al
je 0x140006c30
mov dword [rbp - 0x29], r12d
lea rdx, [rbp - 0x29]
mov ecx, 8
call fcn.14000694c
nop
cmp byte [0x1401dbed1], r15b
je 0x140006c3e
or ebx, 0xffffffff
jmp 0x140006cb1
xor edx, edx
xor ecx, ecx
call qword [sym.imp.ole32.dll_CoInitializeEx]
mov ebx, eax
test eax, eax
js 0x140006c55
call fcn.1400eec88
mov ebx, eax
mov dword [rbp - 0x39], ebx
test ebx, ebx
jns 0x140006c78
cmp ebx, 0x80010106
jne 0x140006cb1
lea rcx, str.Mscoree.dll
call qword [sym.imp.KERNEL32.dll_GetModuleHandleW]
test rax, rax
jne 0x140006c7f
jmp 0x140006cb1
mov byte [0x1401dc692], r12b
call qword [sym.imp.KERNEL32.dll_GetCommandLineW]
lea r8, [rbp - 0x39]
mov rdx, rax
call fcn.1400ee400
cmp al, r12b
jne 0x140006c9f
call fcn.1400ee644
mov ebx, eax
jmp 0x140006ca2
mov ebx, dword [rbp - 0x39]
cmp byte [0x1401dc692], r15b
je 0x140006cb1
call qword [sym.imp.ole32.dll_CoUninitialize]
lea rcx, [0x1401dc698]
call fcn.1400ed7b0
lea rcx, [rbp - 0x19]
call fcn.140006d3c
mov eax, ebx
lea r11, [rsp + 0xa0]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r13
pop r12
pop rdi
pop rbp
ret
xor edx, edx
mov ecx, 0x136388c
call fcn.140007884
nop
jmp 0x140006cf4
nop
xor edx, edx
mov ecx, 0x7cb447
call fcn.140007884
int3
xor edx, edx
mov ecx, 0x7cb448
call fcn.140007884
int3
xor edx, edx
mov ecx, 0x7cb44b
call fcn.140007884
int3
xor edx, edx
mov ecx, 0x7cb44c
call fcn.140007884
int3
xor edx, edx
mov ecx, 0x7cb44d
call fcn.140007884
int3
call fcn.1400ecb00
int3