Function at 0x140030b70
Capabilities:
Accept command line arguments

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x188
movaps xmmword [rsp + 0x170], xmm7
movaps xmmword [rsp + 0x160], xmm6
mov rax, qword [0x140287028]
xor rax, rsp
mov qword [rsp + 0x158], rax
mov rbp, qword [0x140299b00]
test rbp, rbp
jne 0x1400314aa
mov ecx, 0x50
call fcn.140172a4c
mov r13, rax
xorps xmm6, xmm6
movups xmmword [rax], xmm6
mov byte [rax + 0x10], 0
mov ecx, 0x18
call fcn.140172a4c
mov qword [r13 + 0x18], rax
lea rcx, [rax + 0x18]
mov qword [r13 + 0x28], rcx
test rax, rax
je 0x14003160f
movups xmmword [rax], xmm6
mov qword [rax + 0x10], 0
mov qword [r13 + 0x20], rcx
lea rbx, [r13 + 0x38]
movups xmmword [r13 + 0x38], xmm6
mov qword [r13 + 0x30], rbx
mov qword [r13 + 0x48], 1
mov qword [0x140299b00], r13
call qword [sym.imp.KERNEL32.dll_GetCommandLineW]
test rax, rax
je 0x140031612
mov rdi, rax
mov rcx, rax
call fcn.140173694
lea rdx, [rsp + 0x70]
mov qword [rdx], rdi
mov qword [rdx + 8], rax
lea rdi, [rsp + 0x140]
mov rcx, rdi
mov r8d, 3
call fcn.140031660
mov rax, qword [rdi + 8]
test rax, rax
je 0x1400314aa
mov rdi, qword [rsp + 0x140]
mov qword [r13], rdi
mov qword [r13 + 8], rax
mov dword [rsp + 0x6c], 0
lea rcx, str.api_ms_win_downlevel_shell32_l1_1_0.dll
xor edx, edx
mov r8d, 0x800
call qword [sym.imp.KERNEL32.dll_LoadLibraryExW]
mov r14, rax
test rax, rax
je 0x140031615
lea rdx, [0x140264ff2]
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
test rax, rax
je 0x140031628
lea rdx, [rsp + 0x6c]
mov rcx, rdi
call qword [case.0x1401d7990.0]
mov qword [rsp + 0x38], rax
movsxd rsi, dword [rsp + 0x6c]
test rsi, rsi
je 0x14003162f
shl rsi, 3
movabs rax, 0x5555555555555551
cmp rsi, rax
jae 0x14003163a
lea rcx, [rsi + rsi*2]
call fcn.140172a4c
mov r12, rax
xor edi, edi
mov r15, rax
test r15, r15
je 0x14003158a
mov rax, qword [rsp + 0x38]
mov rdx, qword [rax + rdi]
mov rcx, r15
call fcn.1401b1c40
add r15, 0x18
add rdi, 8
cmp rsi, rdi
jne 0x140030cfa
mov qword [rsp + 0x40], r12
mov qword [rsp + 0x50], r14
mov ecx, 0x18
call fcn.140172a4c
test rax, rax
je 0x14003163f
mov rdi, rax
lea rax, [r13 + 0x18]
mov r12, r13
add r12, 0x30
mov rsi, rdi
add rsi, 0x18
xorps xmm6, xmm6
movups xmmword [rdi], xmm6
mov qword [rdi + 0x10], 0
mov qword [rsp + 0x48], rax
mov r14, qword [rax]
test r14, r14
mov qword [rsp + 0x30], r13
je 0x140030db4
mov rax, qword [r13 + 0x20]
mov rcx, r14
cmp rax, r14
je 0x140030dab
lea r13, [rax - 0x18]
cmp byte [rax - 1], 0
js 0x140030d93
mov rax, r13
cmp r13, r14
jne 0x140030d7f
jmp 0x140030d9e
mov rcx, qword [rax - 0x18]
call fcn.140172a44
jmp 0x140030d89
mov rax, qword [rsp + 0x48]
mov rcx, qword [rax]
mov r13, qword [rsp + 0x30]
mov qword [r13 + 0x20], r14
call fcn.140172a44
mov qword [r13 + 0x18], rdi
mov qword [r13 + 0x20], rsi
mov qword [r13 + 0x28], rsi
mov rdx, qword [r13 + 0x38]
mov rcx, r12
call fcn.140037740
mov qword [r13 + 0x30], rbx
movups xmmword [r13 + 0x38], xmm6
mov qword [r13 + 0x48], 1
mov rsi, qword [rsp + 0x40]
cmp rsi, r15
mov qword [rsp + 0x58], rbp
je 0x140031642
movzx eax, byte [rsi + 0x17]
mov ecx, eax
and ecx, 0x7f
test al, al
mov rax, qword [rsi]
cmovns rax, rsi
lea rdx, [rsp + 0x80]
mov qword [rdx], rax
cmovs rcx, qword [rsi + 8]
mov qword [rdx + 8], rcx
lea rcx, [rsp + 0x140]
call fcn.140133380
lea rdi, [rsp + 0x140]
mov rcx, r13
mov rdx, rdi
call fcn.140032550
cmp byte [rdi + 0x17], 0
jns 0x140030e49
mov rcx, qword [rsp + 0x140]
call fcn.140172a44
mov rax, r15
sub rax, rsi
sar rax, 3
movabs r14, 0xaaaaaaaaaaaaaaab
imul r14, rax
cmp r14, 2
lea rsi, [rsp + 0x140]
jb 0x14003144b
mov rax, qword [r13 + 8]
mov qword [rsp + 0x60], rax
lea rax, [0x140265006]
cmp rsi, rax
seta cl
lea rdx, [rsp + 0x144]
cmp rdx, rax
setbe al
or al, cl
mov byte [rsp + 0x2f], al
lea rax, [0x14026500c]
cmp rsi, rax
seta cl
lea rdx, [rsp + 0x142]
cmp rdx, rax
setbe al
or al, cl
mov byte [rsp + 0x2e], al
lea rax, [0x140265010]
cmp rsi, rax
seta cl
cmp rdx, rax
setbe al
or al, cl
mov byte [rsp + 0x2d], al
dec r14
mov rax, qword [rsp + 0x40]
lea rdi, [rax + 0x18]
mov bl, 1
movaps xmm6, xmmword [0x140261350]
lea rbp, [rsp + 0x110]
lea r12, [rsp + 0xe0]
xorps xmm7, xmm7
movabs rax, 0xaaaaaaaaaaaaaaaa
mov qword [rsp + 0x120], rax
movaps xmmword [rsp + 0x110], xmm6
cmp byte [rdi + 0x17], 0
jns 0x140031590
mov rdx, qword [rdi]
mov r8, qword [rdi + 8]
mov rcx, rbp
call fcn.140007690
movzx eax, byte [rsp + 0x127]
mov ecx, eax
and ecx, 0x7f
test al, al
mov rax, qword [rsp + 0x110]
cmovns rax, rbp
mov qword [rsp + 0x100], rax
cmovs rcx, qword [rsp + 0x118]
mov qword [rsp + 0x108], rcx
mov rcx, r12
lea rdx, [rsp + 0x100]
mov r8d, 3
call fcn.140031660
mov rdx, qword [rsp + 0xe0]
mov r8, qword [rsp + 0xe8]
mov rcx, rsi
call fcn.140032240
cmp byte [rsp + 0x127], 0
jns 0x140030fab
mov rcx, qword [rsp + 0x110]
call fcn.140172a44
mov rax, qword [rsp + 0x150]
mov qword [rsp + 0x120], rax
movups xmm0, xmmword [rsp + 0x140]
movaps xmmword [rsp + 0x110], xmm0
xor eax, eax
mov qword [rsp + 0xf0], rax
movaps xmmword [rsp + 0xe0], xmm7
mov qword [rsp + 0xd0], rax
movaps xmmword [rsp + 0xc0], xmm7
movzx eax, byte [rsp + 0x127]
mov r8d, eax
and r8d, 0x7f
test al, al
mov rdx, qword [rsp + 0x110]
mov rcx, qword [rsp + 0x118]
mov r10, r8
cmovs r10, rcx
mov r9, rbp
cmovs r9, rdx
test r10, r10
je 0x14003102a
test r9, r9
je 0x1400315d6
cmp r10, 2
je 0x1400315ac
test bl, 1
je 0x1400315cc
mov rcx, rbp
mov rdx, r12
lea r8, [rsp + 0xc0]
call fcn.140150880
test al, al
je 0x1400314e6
cmp qword [rsp + 0x60], 0
je 0x14003115e
movzx eax, byte [rsp + 0xf7]
mov r13d, eax
and r13d, 0x7f
test al, al
mov rcx, qword [rsp + 0xe0]
mov rbx, r12
cmovs rbx, rcx
cmovs r13, qword [rsp + 0xe8]
movabs rdx, 0xaaaaaaaaaaaaaaaa
mov qword [rsp + 0x150], rdx
movaps xmmword [rsp + 0x140], xmm6
mov byte [rsp + 0x157], 2
cmp byte [rsp + 0x2f], 0
je 0x14003158d
mov dword [rsp + 0x140], 0x2d002d
mov word [rsp + 0x144], 0
cmp r13, 2
jb 0x1400312a7
cmp word [rbx], 0x2d
jne 0x1400312a7
test al, al
cmovns rcx, r12
cmp word [rcx + 2], 0x2d
jne 0x1400312a7
mov esi, 2
cmp r13, rsi
je 0x14003115e
lea rax, [0x140264f9e]
mov qword [rsp + 0x140], rax
mov qword [rsp + 0x148], 1
mov qword [rsp + 0x130], rbx
mov qword [rsp + 0x138], r13
lea rcx, [rsp + 0x130]
lea rdx, [rsp + 0x140]
xor r8d, r8d
call fcn.140156200
sub r13, rsi
jb 0x1400315d3
sub rax, rsi
cmp r13, rax
cmovb rax, r13
cmp rax, 0xf
je 0x14003133e
movzx eax, byte [rsp + 0xd7]
mov ecx, eax
and ecx, 0x7f
test al, al
mov rax, qword [rsp + 0xc0]
lea rdx, [rsp + 0xc0]
cmovns rax, rdx
mov qword [rsp + 0xb0], rax
cmovs rcx, qword [rsp + 0xc8]
mov qword [rsp + 0xb8], rcx
movzx eax, byte [rsp + 0xf7]
mov ecx, eax
and ecx, 0x7f
test al, al
mov rax, qword [rsp + 0xe0]
cmovns rax, r12
mov qword [rsp + 0x90], rax
cmovs rcx, qword [rsp + 0xe8]
mov qword [rsp + 0x98], rcx
lea rsi, [rsp + 0x140]
mov rcx, rsi
lea rdx, [rsp + 0x90]
call fcn.14013c980
movzx eax, byte [rsp + 0x157]
mov ecx, eax
and ecx, 0x7f
test al, al
mov rax, qword [rsp + 0x140]
cmovns rax, rsi
mov qword [rsp + 0xa0], rax
cmovs rcx, qword [rsp + 0x148]
mov qword [rsp + 0xa8], rcx
mov r13, qword [rsp + 0x30]
mov rcx, r13
lea rdx, [rsp + 0xa0]
lea r8, [rsp + 0xb0]
call fcn.1400317c0
cmp byte [rsp + 0x157], 0
jns 0x14003124e
mov rcx, qword [rsp + 0x140]
call fcn.140172a44
mov bl, 1
cmp byte [rsp + 0xd7], 0
jns 0x140031267
mov rcx, qword [rsp + 0xc0]
call fcn.140172a44
cmp byte [rsp + 0xf7], 0
jns 0x14003127e
mov rcx, qword [rsp + 0xe0]
call fcn.140172a44
cmp byte [rsp + 0x127], 0
jns 0x140031295
mov rcx, qword [rsp + 0x110]
call fcn.140172a44
add rdi, 0x18
dec r14
jne 0x140030eff
jmp 0x14003144b
movabs rax, 0xaaaaaaaaaaaaaaaa
mov qword [rsp + 0x150], rax
movaps xmmword [rsp + 0x140], xmm6
mov byte [rsp + 0x157], 1
cmp byte [rsp + 0x2e], 0
je 0x1400315d9
mov dword [rsp + 0x140], 0x2d
test r13, r13
je 0x1400315dc
cmp word [rbx], 0x2d
mov esi, 1
je 0x1400310f9
movabs rax, 0xaaaaaaaaaaaaaaaa
mov qword [rsp + 0x150], rax
movaps xmmword [rsp + 0x140], xmm6
mov byte [rsp + 0x157], 1
cmp byte [rsp + 0x2d], 0
je 0x140031609
mov dword [rsp + 0x140], 0x2f
cmp word [rbx], 0x2f
je 0x1400310f9
jmp 0x14003115e
cmp word [rbx + rsi*2], 0x73
jne 0x14003115e
cmp word [rbx + rsi*2 + 2], 0x69
jne 0x14003115e
cmp word [rbx + rsi*2 + 4], 0x6e
jne 0x14003115e
cmp word [rbx + rsi*2 + 6], 0x67
jne 0x14003115e
cmp word [rbx + rsi*2 + 8], 0x6c
jne 0x14003115e
cmp word [rbx + rsi*2 + 0xa], 0x65
jne 0x14003115e
cmp word [rbx + rsi*2 + 0xc], 0x2d
jne 0x14003115e
cmp word [rbx + rsi*2 + 0xe], 0x61
jne 0x14003115e
cmp word [rbx + rsi*2 + 0x10], 0x72
jne 0x14003115e
cmp word [rbx + rsi*2 + 0x12], 0x67
jne 0x14003115e
cmp word [rbx + rsi*2 + 0x14], 0x75
jne 0x14003115e
cmp word [rbx + rsi*2 + 0x16], 0x6d
jne 0x14003115e
cmp word [rbx + rsi*2 + 0x18], 0x65
jne 0x14003115e
cmp word [rbx + rsi*2 + 0x1a], 0x6e
jne 0x14003115e
cmp word [rbx + rsi*2 + 0x1c], 0x74
jne 0x14003115e
lea rdx, [rsp + 0xe0]
mov r13, qword [rsp + 0x30]
mov rcx, r13
call fcn.1401b1d00
cmp byte [rsp + 0xd7], 0
jns 0x14003141d
mov rcx, qword [rsp + 0xc0]
call fcn.140172a44
cmp byte [rsp + 0xf7], 0
jns 0x140031434
mov rcx, qword [rsp + 0xe0]
call fcn.140172a44
cmp byte [rsp + 0x127], 0
jns 0x14003144b
mov rcx, qword [rsp + 0x110]
call fcn.140172a44
xorps xmm0, xmm0
movups xmmword [r13], xmm0
mov rcx, qword [rsp + 0x38]
call qword [sym.imp.KERNEL32.dll_LocalFree]
mov rcx, qword [rsp + 0x50]
test rcx, rcx
je 0x14003146e
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
mov rdi, qword [rsp + 0x40]
test rdi, rdi
mov rbp, qword [rsp + 0x58]
je 0x1400314aa
cmp rdi, r15
jne 0x14003148f
jmp 0x1400314a2
mov rcx, qword [r15 - 0x18]
call fcn.140172a44
jmp 0x14003149a
lea rsi, [r15 - 0x18]
cmp byte [r15 - 1], 0
js 0x140031484
mov r15, rsi
cmp rsi, rdi
jne 0x14003148f
mov rcx, rdi
call fcn.140172a44
test rbp, rbp
sete bl
mov rcx, qword [rsp + 0x158]
xor rcx, rsp
call fcn.1401756e0
mov eax, ebx
movaps xmm6, xmmword [rsp + 0x160]
movaps xmm7, xmmword [rsp + 0x170]
add rsp, 0x188
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
movzx eax, byte [rsp + 0x127]
mov rdx, qword [rsp + 0x110]
mov rcx, qword [rsp + 0x118]
mov r8d, eax
and r8d, 0x7f
mov bl, 1
test al, al
cmovns rdx, rbp
cmovs r8, rcx
lea rsi, [rsp + 0x140]
mov rcx, rsi
call fcn.140032240
mov r13, qword [rsp + 0x30]
mov rax, qword [r13 + 0x20]
cmp rax, qword [r13 + 0x28]
jb 0x14003155d
mov rcx, qword [rsp + 0x48]
mov rdx, rsi
call fcn.14002a5d0
cmp byte [rsp + 0x157], 0
jns 0x140031250
mov rcx, qword [rsp + 0x140]
call fcn.140172a44
jmp 0x140031250
test rax, rax
je 0x14003160c
mov rcx, qword [rsp + 0x150]
mov qword [rax + 0x10], rcx
movups xmm0, xmmword [rsp + 0x140]
movups xmmword [rax], xmm0
add rax, 0x18
mov qword [r13 + 0x20], rax
jmp 0x140031250
int3
int3
mov rax, qword [rdi + 0x10]
mov qword [rsp + 0x120], rax
movups xmm0, xmmword [rdi]
movaps xmmword [rsp + 0x110], xmm0
jmp 0x140030f32
cmp word [r9], 0x2d
jne 0x140031034
test al, al
mov r9, rbp
cmovs r9, rdx
cmp word [r9 + 2], 0x2d
jne 0x140031034
xor ebx, ebx
jmp 0x140031507
int3
int3
int3
movabs rax, 0xaaaaaaaaaaaaaaaa
mov qword [rsp + 0x150], rax
movaps xmmword [rsp + 0x140], xmm6
mov byte [rsp + 0x157], 1
cmp byte [rsp + 0x2d], 0
jne 0x14003115e
int3
int3
int3
int3
lea rdx, [rsp + 0x6c]
mov rcx, rdi
call qword [sym.imp.SHELL32.dll_CommandLineToArgvW]
jmp 0x140030cbf
xor eax, eax
jmp 0x140030cbf
xor r12d, r12d
xor r15d, r15d
jmp 0x140030d21
call fcn.14018c460
int3
lea rcx, [rsp + 0x140]
call fcn.1401710d0
jmp 0x140030e23