Function at 0x1400025e4
Capabilities:
Accept command line arguments

Disassembly:
push rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
sub rsp, 0xf0
mov qword [rsp + 0xe8], 0xfffffffffffffffe
mov r13, rcx
call qword [sym.imp.KERNEL32.dll_GetCommandLineW]
mov rdx, rax
lea rcx, [rsp + 0x138]
call fcn.1400017b0
nop
mov rdx, qword [rsp + 0x138]
lea rcx, str.Command_Line:_r_n_s_r_n_r_n
call fcn.140016598
lea rcx, [rsp + 0x140]
call fcn.1400021f8
nop
lea r8, [rsp + 0x140]
lea rdx, [0x14002f028]
lea rcx, [rsp + 0xd0]
call fcn.140003a28
nop
lea r8, [0x14002f028]
mov rdx, rax
lea rcx, [rsp + 0x28]
call fcn.140003960
nop
mov rdx, qword [rsp + 0xd0]
add rdx, 0xffffffffffffffe8
or eax, 0xffffffff
lock xadd dword [rdx + 0x10], eax
dec eax
test eax, eax
jg 0x140002693
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov rdx, qword [rsp + 0x28]
test rdx, rdx
je 0x1400026ea
mov rcx, qword [rsp + 0x138]
cmp dword [rcx - 0x10], 0
jl 0x1400026f2
call fcn.1400168b4
test rax, rax
je 0x1400026ea
mov rcx, qword [rsp + 0x138]
sub rax, rcx
sar rax, 1
test eax, eax
jne 0x1400026f2
lea r8, [0x14002f290]
mov rdx, qword [rsp + 0x28]
lea rcx, [rsp + 0x138]
call fcn.1400033a0
mov rcx, qword [rsp + 0x138]
jmp 0x1400026f2
mov rcx, qword [rsp + 0x138]
mov rdx, qword [rsp + 0x140]
test rdx, rdx
je 0x14000273a
cmp dword [rcx - 0x10], 0
jl 0x14000273a
call fcn.1400168b4
test rax, rax
je 0x14000273a
sub rax, qword [rsp + 0x138]
sar rax, 1
test eax, eax
jne 0x14000273a
lea r8, [0x14002f290]
mov rdx, qword [rsp + 0x140]
lea rcx, [rsp + 0x138]
call fcn.1400033a0
call fcn.140004730
mov r11, rax
xor ecx, ecx
test rax, rax
setne cl
test ecx, ecx
jne 0x140002759
mov ecx, 0x80004005
call fcn.1400016c4
int3
mov rax, qword [rax]
mov rcx, r11
call qword [rax + 0x18]
add rax, 0x18
mov qword [rsp + 0x30], rax
call fcn.140004730
mov r11, rax
xor ecx, ecx
test rax, rax
setne cl
test ecx, ecx
jne 0x14000278a
mov ecx, 0x80004005
call fcn.1400016c4
int3
mov rax, qword [rax]
mov rcx, r11
call qword [rax + 0x18]
add rax, 0x18
mov qword [rsp + 0x148], rax
call fcn.140004730
mov r11, rax
xor ecx, ecx
test rax, rax
setne cl
test ecx, ecx
jne 0x1400027be
mov ecx, 0x80004005
call fcn.1400016c4
int3
mov rax, qword [rax]
mov rcx, r11
call qword [rax + 0x18]
add rax, 0x18
mov qword [rsp + 0x38], rax
lea rax, [rsp + 0xd8]
mov qword [rsp + 0x20], rax
lea rdx, str.updatesystemdrivers
lea rcx, [rsp + 0xd8]
call fcn.1400017b0
mov rbx, rax
mov rcx, qword [rsp + 0x138]
add rcx, 0xffffffffffffffe8
call fcn.140003dcc
add rax, 0x18
mov qword [rsp + 0x50], rax
lea r9, [rsp + 0x30]
mov r8, rbx
lea rdx, [rsp + 0x50]
mov rcx, r13
call fcn.14000231c
lea r11, [rsp + 0xa0]
mov qword [rsp + 0x20], r11
lea rdx, str.restore
lea rcx, [rsp + 0xa0]
call fcn.1400017b0
mov rbx, rax
mov rcx, qword [rsp + 0x138]
add rcx, 0xffffffffffffffe8
call fcn.140003dcc
add rax, 0x18
mov qword [rsp + 0x60], rax
lea r9, [rsp + 0x148]
mov r8, rbx
lea rdx, [rsp + 0x60]
mov rcx, r13
call fcn.14000231c
lea r11, [rsp + 0xe0]
mov qword [rsp + 0x20], r11
lea rdx, str.difxpreinstall
lea rcx, [rsp + 0xe0]
call fcn.1400017b0
mov rbx, rax
mov rcx, qword [rsp + 0x138]
add rcx, 0xffffffffffffffe8
call fcn.140003dcc
add rax, 0x18
mov qword [rsp + 0x70], rax
lea r9, [rsp + 0x38]
mov r8, rbx
lea rdx, [rsp + 0x70]
mov rcx, r13
call fcn.14000231c
mov rsi, qword [rsp + 0x30]
mov rcx, rsi
call fcn.140016654
mov rbx, qword [rsp + 0x38]
mov rdi, qword [rsp + 0x148]
mov r12d, 1
cmp eax, r12d
jne 0x1400028f7
mov dword [r13 + 0x40], r12d
jmp 0x140002928
mov rcx, rdi
call fcn.140016654
cmp eax, r12d
jne 0x14000290e
mov dword [r13 + 0x40], 2
jmp 0x140002928
mov rcx, rbx
call fcn.140016654
mov ecx, r12d
mov edx, 3
cmp eax, r12d
cmove ecx, edx
mov dword [r13 + 0x40], ecx
lea rax, [rsp + 0xb0]
mov qword [rsp + 0x20], rax
lea rdx, str.hwdid
lea rcx, [rsp + 0xb0]
call fcn.1400017b0
mov rbp, rax
mov rcx, qword [rsp + 0x138]
add rcx, 0xffffffffffffffe8
call fcn.140003dcc
add rax, 0x18
mov qword [rsp + 0x80], rax
mov r9, r13
mov r8, rbp
lea rdx, [rsp + 0x80]
mov rcx, r13
call fcn.14000231c
lea r11, [rsp + 0x40]
mov qword [rsp + 0x20], r11
lea rdx, [0x14002f200]
lea rcx, [rsp + 0x40]
call fcn.1400017b0
mov rbp, rax
mov rcx, qword [rsp + 0x138]
add rcx, 0xffffffffffffffe8
call fcn.140003dcc
add rax, 0x18
mov qword [rsp + 0x90], rax
lea r9, [r13 + 8]
mov r8, rbp
lea rdx, [rsp + 0x90]
mov rcx, r13
call fcn.14000231c
lea r11, [rsp + 0xc0]
mov qword [rsp + 0x20], r11
lea rdx, str.hkey
lea rcx, [rsp + 0xc0]
call fcn.1400017b0
mov rbp, rax
mov rcx, qword [rsp + 0x138]
add rcx, 0xffffffffffffffe8
call fcn.140003dcc
add rax, 0x18
mov qword [rsp + 0x48], rax
lea r9, [r13 + 0x10]
mov r8, rbp
lea rdx, [rsp + 0x48]
mov rcx, r13
call fcn.14000231c
lea r11, [rsp + 0x58]
mov qword [rsp + 0x20], r11
lea rdx, str.regpath
lea rcx, [rsp + 0x58]
call fcn.1400017b0
mov rbp, rax
mov rcx, qword [rsp + 0x138]
add rcx, 0xffffffffffffffe8
call fcn.140003dcc
add rax, 0x18
mov qword [rsp + 0x68], rax
lea r9, [r13 + 0x18]
mov r8, rbp
lea rdx, [rsp + 0x68]
mov rcx, r13
call fcn.14000231c
lea r11, [rsp + 0x78]
mov qword [rsp + 0x20], r11
lea rdx, str.regval
lea rcx, [rsp + 0x78]
call fcn.1400017b0
mov rbp, rax
mov rcx, qword [rsp + 0x138]
add rcx, 0xffffffffffffffe8
call fcn.140003dcc
add rax, 0x18
mov qword [rsp + 0x88], rax
lea r9, [r13 + 0x20]
mov r8, rbp
lea rdx, [rsp + 0x88]
mov rcx, r13
call fcn.14000231c
lea r11, [rsp + 0x98]
mov qword [rsp + 0x20], r11
lea rdx, str.regvalupnp
lea rcx, [rsp + 0x98]
call fcn.1400017b0
mov rbp, rax
mov rcx, qword [rsp + 0x138]
add rcx, 0xffffffffffffffe8
call fcn.140003dcc
add rax, 0x18
mov qword [rsp + 0xa8], rax
lea r9, [r13 + 0x28]
mov r8, rbp
lea rdx, [rsp + 0xa8]
mov rcx, r13
call fcn.14000231c
lea r11, [rsp + 0xb8]
mov qword [rsp + 0x20], r11
lea rdx, str.regvaldifx
lea rcx, [rsp + 0xb8]
call fcn.1400017b0
mov rbp, rax
mov rcx, qword [rsp + 0x138]
add rcx, 0xffffffffffffffe8
call fcn.140003dcc
add rax, 0x18
mov qword [rsp + 0xc8], rax
lea r9, [r13 + 0x30]
mov r8, rbp
lea rdx, [rsp + 0xc8]
mov rcx, r13
call fcn.14000231c
cmp dword [rsi - 0x10], 0
jg 0x140002b9a
cmp dword [rdi - 0x10], 0
jg 0x140002b9a
cmp dword [rbx - 0x10], 0
jle 0x140002b97
mov rax, qword [r13]
cmp dword [rax - 0x10], 0
jle 0x140002b97
mov rax, qword [r13 + 8]
cmp dword [rax - 0x10], 0
jg 0x140002b9a
xor r12b, r12b
lea rdx, [rbx - 0x18]
or ebx, 0xffffffff
mov eax, ebx
lock xadd dword [rdx + 0x10], eax
add eax, ebx
test eax, eax
jg 0x140002bb8
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x148]
add rdx, 0xffffffffffffffe8
mov eax, ebx
lock xadd dword [rdx + 0x10], eax
add eax, ebx
test eax, eax
jg 0x140002bdb
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x30]
add rdx, 0xffffffffffffffe8
mov eax, ebx
lock xadd dword [rdx + 0x10], eax
add eax, ebx
test eax, eax
jg 0x140002bfb
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x28]
add rdx, 0xffffffffffffffe8
mov eax, ebx
lock xadd dword [rdx + 0x10], eax
add eax, ebx
test eax, eax
jg 0x140002c1b
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x140]
add rdx, 0xffffffffffffffe8
mov eax, ebx
lock xadd dword [rdx + 0x10], eax
add eax, ebx
test eax, eax
jg 0x140002c3e
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x138]
add rdx, 0xffffffffffffffe8
mov ecx, ebx
lock xadd dword [rdx + 0x10], ecx
add ecx, ebx
test ecx, ecx
jg 0x140002c61
mov rcx, qword [rdx]
mov r8, qword [rcx]
call qword [rreloc.OLEAUT32.dll_VariantClear + 8]
mov al, r12b
add rsp, 0xf0
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
pop rbx
ret