Function at 0x10000ed44
Capabilities:
Accept command line arguments

Disassembly:
mov qword [rsp + 8], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x110
mov rbp, rdx
mov r12, rcx
mov r15d, 1
lea rdx, [0x100006df8]
lea rcx, [rsp + 0x30]
mov r8d, 0xa65
mov r9d, r15d
call fcn.10001ed8c
xor r14d, r14d
lea rsi, [0x100005e20]
xor eax, eax
mov rbx, r14
mov dword [rsp + 0x88], r14d
mov qword [rsp + 0xc0], rsi
mov qword [rsp + 0xb0], rsi
mov qword [rsp + 0xa0], rsi
mov qword [rsp + 0x90], rax
mov qword [rsp + 0x98], rax
mov qword [rsp + 0xc8], r14
mov qword [rsp + 0xb8], r14
mov qword [rsp + 0xa8], r14
mov r13, r14
mov dword [rsp + 0x160], r14d
mov dword [rsp + 0x70], r14d
mov dword [rsp + 0x80], r14d
mov dword [rsp + 0x168], r14d
mov qword [rsp + 0x78], r14
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
lea r8, [rsp + 0x78]
mov edx, 0x2000e
mov rcx, rax
call qword [sym.imp.ADVAPI32.dll_OpenProcessToken]
cmp eax, r14d
jne 0x10000ee33
call fcn.100020b84
mov dword [rsp + 0x30], eax
mov eax, 0xa76
mov word [rsp + 0x36], ax
jmp 0x10000eebc
mov rcx, qword [rsp + 0x78]
mov eax, 0xa76
lea r8, [rsp + 0x168]
mov edx, 0x1a
mov dword [rsp + 0x30], r14d
mov word [rsp + 0x34], ax
call fcn.100024e34
mov dword [rsp + 0x30], eax
cmp eax, r14d
mov eax, 0xa77
jl 0x10000ee29
mov word [rsp + 0x34], ax
cmp dword [rsp + 0x168], r14d
jne 0x10000efb0
mov rdx, qword [0x10002ecc8]
mov r9d, 0xd2
xor ecx, ecx
lea r8d, [r9 - 1]
mov dword [rsp + 0x20], 0xd3
call fcn.100026c88
cmp eax, r14d
mov dword [rsp + 0x30], eax
jge 0x10000eead
mov eax, 0xa7a
jmp 0x10000ee29
mov dword [rsp + 0x30], r14d
mov eax, 0xa7b
mov word [rsp + 0x34], ax
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_LocalFree]
mov r8d, dword [rsp + 0x30]
cmp r8d, r14d
jge 0x10000eedb
mov edx, 0x89
xor ecx, ecx
call fcn.100010dc4
lea rdx, [0x1000068f8]
lea rcx, [rsp + 0xd8]
mov r9d, r15d
mov r8d, 0x2b9
call fcn.10001ed8c
mov rcx, qword [rsp + 0x90]
mov eax, 0x2bb
mov dword [rsp + 0xd8], r14d
mov word [rsp + 0xdc], ax
call qword [sym.imp.ole32.dll_CoTaskMemFree]
mov rcx, qword [rsp + 0x98]
call qword [sym.imp.ole32.dll_CoTaskMemFree]
lea rcx, [rsp + 0xd8]
call fcn.10001eea4
mov rcx, qword [rsp + 0x78]
mov edi, dword [rsp + 0x30]
cmp rcx, r14
je 0x10000ef55
cmp rcx, 0xffffffffffffffff
je 0x10000ef55
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov qword [rsp + 0x78], r14
lea rcx, [rsp + 0xa0]
call fcn.100027da0
lea rcx, [rsp + 0xb0]
call fcn.100027da0
lea rcx, [rsp + 0xc0]
call fcn.100027da0
cmp rbx, r14
je 0x10000ef89
mov rcx, rbx
call fcn.10001018c
lea rcx, [rsp + 0x30]
call fcn.10001eea4
mov rbx, qword [rsp + 0x150]
mov eax, edi
add rsp, 0x110
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
lea rcx, [0x100006ad0]
call qword [sym.imp.USER32.dll_RegisterWindowMessageW]
mov dword [0x10002ee00], eax
cmp eax, r14d
jne 0x10000efdb
call fcn.100020b84
mov dword [rsp + 0x30], eax
mov eax, 0xa80
jmp 0x10000ee29
mov eax, 0xa80
mov dword [rsp + 0x30], r14d
mov word [rsp + 0x34], ax
call fcn.1000267a4
mov dword [rsp + 0x30], eax
cmp eax, r14d
mov eax, 0xa86
jl 0x10000ee29
xor ecx, ecx
mov word [rsp + 0x34], ax
call qword [sym.imp.USER32.dll_GetDC]
mov edx, 0x58
mov rcx, rax
mov rdi, rax
call qword [sym.imp.GDI32.dll_GetDeviceCaps]
mov edx, 0x5a
mov rcx, rdi
movd xmm0, eax
cvtdq2pd xmm0, xmm0
divsd xmm0, qword [0x100008bb0]
movsd qword [0x10002ee08], xmm0
call qword [sym.imp.GDI32.dll_GetDeviceCaps]
mov rdx, rdi
xor ecx, ecx
movd xmm0, eax
cvtdq2pd xmm0, xmm0
divsd xmm0, qword [0x100008bb0]
movsd qword [0x10002ee10], xmm0
call qword [sym.imp.USER32.dll_ReleaseDC]
call qword [sym.imp.KERNEL32.dll_GetCommandLineW]
lea rdx, [rsp + 0x160]
mov rcx, rax
call qword [sym.imp.SHELL32.dll_CommandLineToArgvW]
mov ecx, 0xa90
mov r13, rax
cmp rax, r14
jne 0x10000f09e
mov dword [rsp + 0x30], 0x80070057
mov word [rsp + 0x36], cx
jmp 0x10000eebc
mov dword [rsp + 0x30], r14d
mov word [rsp + 0x34], cx
mov edi, r15d
cmp dword [rsp + 0x160], r15d
jbe 0x10000f106
lea rsi, [rax + 8]
mov r8, qword [rsi]
lea r9, [0x100006e04]
lea rdx, [0x100006e9c]
lea rcx, [rsp + 0xc0]
call fcn.100028a5c
mov dword [rsp + 0x30], eax
cmp eax, r14d
mov eax, 0xa93
jl 0x10000ee29
add edi, r15d
add rsi, 8
mov word [rsp + 0x34], ax
cmp edi, dword [rsp + 0x160]
jb 0x10000f0b9
mov rsi, qword [rsp + 0xc0]
xor edx, edx
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_RegisterApplicationRestart]
mov dword [rsp + 0x30], eax
cmp eax, r14d
mov eax, 0xa95
jl 0x10000ee29
mov ecx, 0x1d0
mov word [rsp + 0x34], ax
mov edi, r14d
mov qword [rsp + 0x68], rbx
call sub.msvcrt.dll_void____ptr64___cdecl_operator_new_unsigned_long_long_unsigned___int64__
cmp rax, r14
je 0x10000f149
mov rcx, rax
call fcn.100009ee0
jmp 0x10000f14c
mov rax, r14
cmp rax, r14
jne 0x10000f158
mov edi, 0x8007000e
jmp 0x10000f160
mov rbx, rax
mov qword [rsp + 0x68], rax
cmp edi, r14d
mov dword [rsp + 0x30], edi
mov eax, 0xa97
jl 0x10000ee29
mov rdx, r12
mov rcx, rbx
mov word [rsp + 0x34], ax
call fcn.10000a194
mov dword [rsp + 0x30], eax
cmp eax, r14d
mov eax, 0xa98
jl 0x10000ee29
mov ecx, 0x43
mov word [rsp + 0x34], ax
call qword [sym.imp.USER32.dll_GetSystemMetrics]
mov ecx, r14d
cmp eax, r14d
setne cl
mov dword [rbx + 0x11c], ecx
lea rcx, [rsp + 0x88]
call fcn.10000eac0
mov dword [rsp + 0x30], eax
cmp eax, r14d
mov eax, 0xa9b
jl 0x10000ee29
lea rdx, [rsp + 0x80]
lea rcx, [rsp + 0x70]
mov word [rsp + 0x34], ax
call fcn.100009a0c
mov dword [rsp + 0x30], eax
cmp eax, r14d
mov eax, 0xa9d
jl 0x10000ee29
mov word [rsp + 0x34], ax
cmp dword [rsp + 0x70], r14d
je 0x10000f294
mov rdx, qword [rbx + 8]
lea rcx, [rsp + 0xb0]
mov r8d, 0x418
call fcn.100028c74
mov dword [rsp + 0x30], eax
cmp eax, r14d
mov eax, 0xaa0
jl 0x10000ee29
mov word [rsp + 0x34], ax
mov rdx, qword [rbx + 8]
lea rcx, [rsp + 0xa0]
mov r8d, 0x88
call fcn.100028c74
mov dword [rsp + 0x30], eax
cmp eax, r14d
mov eax, 0xaa1
jl 0x10000ee29
mov r8, qword [rsp + 0xa0]
mov rdx, qword [rsp + 0xb0]
mov r9d, 0x10
xor ecx, ecx
mov word [rsp + 0x34], ax
call qword [sym.imp.USER32.dll_MessageBoxW]
mov dword [rsp + 0x30], r14d
mov eax, 0xaa5
jmp 0x10000eeb7
mov rcx, qword [rsp + 0x98]
cmp rcx, r14
je 0x10000f2c2
lea rdx, [rbx + 0x40]
call qword [sym.imp.ole32.dll_CLSIDFromString]
mov dword [rsp + 0x30], eax
cmp eax, r14d
mov eax, 0xaae
jl 0x10000ee29
mov word [rsp + 0x34], ax
call fcn.100020b24
mov ecx, dword [rsp + 0x88]
mov r12d, 2
cmp eax, r14d
cmovne ecx, r12d
mov dword [rsp + 0x88], ecx
cmp ecx, r12d
jne 0x10000f381
call fcn.100020b24
cmp eax, r14d
jne 0x10000f392
mov rdx, qword [rbx + 8]
lea rcx, [rsp + 0xb0]
mov r8d, 0x41a
call fcn.100028c74
mov dword [rsp + 0x30], eax
cmp eax, r14d
mov eax, 0xabb
jl 0x10000ee29
mov word [rsp + 0x34], ax
mov rdx, qword [rbx + 8]
lea rcx, [rsp + 0xa0]
mov r8d, 0x88
call fcn.100028c74
mov dword [rsp + 0x30], eax
cmp eax, r14d
mov eax, 0xabc
jl 0x10000ee29
mov r8, qword [rsp + 0xa0]
mov rdx, qword [rsp + 0xb0]
lea r9d, [r12 + 0xe]
xor ecx, ecx
mov word [rsp + 0x34], ax
call qword [sym.imp.USER32.dll_MessageBoxW]
mov dword [rsp + 0x30], r14d
mov eax, 0xac0
jmp 0x10000eeb7
mov ecx, dword [rsp + 0x88]
cmp ecx, r15d
je 0x10000f392
cmp ecx, 4
jne 0x10000f3d0
lea rcx, [rsp + 0x88]
mov rdx, rbx
call fcn.10000e284
mov r11d, eax
mov dword [rsp + 0x30], eax
cmp eax, r14d
mov eax, 0xac7
jl 0x10000ee29
mov word [rsp + 0x34], ax
cmp r11d, r15d
jne 0x10000f3d0
mov dword [rsp + 0x30], r14d
mov eax, 0xaca
jmp 0x10000eeb7
mov eax, dword [rbp + 0x10]
lea rsi, [rbx + 0xc0]
mov dword [rbx + 0xcc], eax
mov eax, dword [rbp + 0x14]
mov dword [rbx + 0xd0], eax
mov eax, dword [rbp + 0x18]
mov dword [rbx + 0xc8], eax
mov rdi, qword [rsi]
cmp rdi, r14
je 0x10000f41f
mov qword [rsi], r14
or eax, 0xffffffff
lock xadd dword [rdi + 0x10], eax
add eax, 0xffffffff
jne 0x10000f41a
mov rcx, rdi
call fcn.100024268
mov rcx, rdi
call sub.msvcrt.dll_void___cdecl_operator_delete_void____ptr64_
mov rbx, qword [rsp + 0x68]
mov rdi, qword [rsi]
cmp rdi, r14
je 0x10000f44c
mov qword [rsi], r14
or eax, 0xffffffff
lock xadd dword [rdi + 0x10], eax
add eax, 0xffffffff
jne 0x10000f447
mov rcx, rdi
call fcn.100024268
mov rcx, rdi
call sub.msvcrt.dll_void___cdecl_operator_delete_void____ptr64_
mov rbx, qword [rsp + 0x68]
mov rcx, rsi
call fcn.1000235c4
mov dword [rsp + 0x30], eax
cmp eax, r14d
mov eax, 0xad9
jl 0x10000ee29
mov word [rsp + 0x34], ax
mov eax, dword [rsp + 0x88]
sub eax, r12d
je 0x10000f4f1
sub eax, r15d
je 0x10000f4d5
mov rcx, rbx
cmp eax, r15d
je 0x10000f497
call fcn.10000d688
mov dword [rsp + 0x30], eax
cmp eax, r14d
mov eax, 0xaed
jmp 0x10000f4e6
call fcn.10000dd94
mov r11d, eax
mov dword [rsp + 0x30], eax
cmp eax, r14d
mov eax, 0xae1
jl 0x10000ee29
mov word [rsp + 0x34], ax
cmp r11d, r15d
jne 0x10000eebc
mov rcx, rbx
call fcn.10000d688
mov dword [rsp + 0x30], eax
cmp eax, r14d
mov eax, 0xae4
jmp 0x10000f4e6
call fcn.10000dd30
mov dword [rsp + 0x30], eax
cmp eax, r14d
mov eax, 0xade
jge 0x10000eeb7
jmp 0x10000ee29
mov rcx, rbx
mov dword [rbx + 0x28], r15d
call fcn.10000d688
mov dword [rsp + 0x30], eax
cmp eax, r14d
mov eax, 0xae9
jmp 0x10000f4e6