Function at 0x14000b180
Capabilities:
Accept command line arguments

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rbp
mov qword [rsp + 0x20], rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x20
call qword [sym.imp.KERNEL32.dll_GetCommandLineW]
mov rcx, rax
lea rdx, [rsp + 0x50]
call qword [sym.imp.SHELL32.dll_CommandLineToArgvW]
lea rbx, [0x140044e10]
xor r15d, r15d
mov rdx, rbx
mov word [0x140030610], r15w
mov r8d, 0x1000
xor ecx, ecx
mov r14, rax
call qword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
test eax, eax
je 0x14000b49d
mov qword [r14], rbx
lea r12, [0x140030610]
mov ebp, r15d
cmp dword [rsp + 0x50], r15d
jle 0x14000b47d
mov esi, r15d
lea edx, [r15 + 0x20]
nop dword [rax]
cmp rsi, 1
jl 0x14000b23d
cmp word [0x140030610], r15w
mov ecx, 0x8000
mov rax, r12
je 0x14000b237
nop dword [rax + rax]
add rax, 2
dec rcx
cmp word [rax], r15w
jne 0x14000b220
cmp rcx, 1
jb 0x14000b49d
mov dword [rax], 0x20
mov rdi, qword [r14 + rsi*8]
lea rbx, str.__t_n_v_
movzx eax, dx
nop dword [rax + rax]
movzx edx, ax
mov rcx, rdi
call fcn.14000c760
test rax, rax
jne 0x14000b2ca
movzx eax, word [rbx + 2]
add rbx, 2
test ax, ax
jne 0x14000b250
cmp word [0x140030610], r15w
mov ecx, 0x8000
mov r8, qword [r14 + rsi*8]
mov rax, r12
je 0x14000b290
add rax, 2
dec rcx
cmp word [rax], r15w
jne 0x14000b283
movzx edx, word [r8]
test dx, dx
je 0x14000b2c1
nop dword [rax]
cmp rcx, 1
jb 0x14000b49d
add r8, 2
mov word [rax], dx
add rax, 2
dec rcx
movzx edx, word [r8]
test dx, dx
jne 0x14000b2a0
mov word [rax], r15w
jmp 0x14000b469
cmp word [0x140030610], r15w
mov ecx, 0x8000
mov rax, r12
je 0x14000b2f7
nop dword [rax]
add rax, 2
dec rcx
cmp word [rax], r15w
jne 0x14000b2e0
cmp rcx, 1
jb 0x14000b49d
mov dword [rax], 0x22
mov r9, qword [r14 + rsi*8]
movzx eax, word [r9]
mov edx, r15d
cmp ax, 0x5c
jne 0x14000b321
nop
movzx eax, word [r9 + 2]
add r9, 2
inc edx
cmp ax, 0x5c
je 0x14000b310
mov r8d, r15d
test ax, ax
je 0x14000b3f8
cmp ax, 0x22
jne 0x14000b379
add edx, edx
inc edx
test edx, edx
jle 0x14000b3b7
nop dword [rax + rax]
cmp word [0x140030610], r15w
mov ecx, 0x8000
mov rax, r12
je 0x14000b369
add rax, 2
dec rcx
cmp word [rax], r15w
jne 0x14000b352
cmp rcx, 1
jb 0x14000b49d
inc r8d
mov dword [rax], 0x5c
cmp r8d, edx
jl 0x14000b340
jmp 0x14000b3b7
test edx, edx
jle 0x14000b3b7
nop dword [rax]
cmp word [0x140030610], r15w
mov ecx, 0x8000
mov rax, r12
je 0x14000b3a9
add rax, 2
dec rcx
cmp word [rax], r15w
jne 0x14000b392
cmp rcx, 1
jb 0x14000b49d
inc r8d
mov dword [rax], 0x5c
cmp r8d, edx
jl 0x14000b380
cmp word [0x140030610], r15w
mov ecx, 0x8000
movzx edx, word [r9]
mov rax, r12
je 0x14000b3e7
nop dword [rax]
add rax, 2
dec rcx
cmp word [rax], r15w
jne 0x14000b3d0
cmp rcx, 1
jb 0x14000b49d
mov word [rax], dx
add r9, 2
mov word [rax + 2], r15w
jmp 0x14000b301
add edx, edx
test edx, edx
jle 0x14000b433
nop
cmp word [0x140030610], r15w
mov ecx, 0x8000
mov rax, r12
je 0x14000b425
add rax, 2
dec rcx
cmp word [rax], r15w
jne 0x14000b412
cmp rcx, 1
jb 0x14000b49d
inc r8d
mov dword [rax], 0x5c
cmp r8d, edx
jl 0x14000b400
cmp word [0x140030610], r15w
mov eax, 0x8000
mov rcx, r12
je 0x14000b463
nop word [rax + rax]
add rcx, 2
dec rax
cmp word [rcx], r15w
jne 0x14000b450
cmp rax, 1
jb 0x14000b49d
mov dword [rcx], 0x22
inc ebp
inc rsi
mov edx, 0x20
cmp ebp, dword [rsp + 0x50]
jl 0x14000b200
mov rbx, qword [rsp + 0x58]
mov rax, r12
mov rbp, qword [rsp + 0x60]
mov rsi, qword [rsp + 0x68]
add rsp, 0x20
pop r15
pop r14
pop r13
pop r12
pop rdi
ret
call fcn.140010254
int3