Function at 0x180049b9c
Capabilities:
Accept command line arguments

Disassembly:
mov qword [rsp + 8], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x30
xor edi, edi
lea rdx, [rsp + 0x78]
mov ebx, edi
mov dword [rsp + 0x80], ebx
call qword [sym.imp.SHELL32.dll_CommandLineToArgvW]
mov esi, edi
mov qword [rsp + 0x88], rdi
mov r15, rax
mov r12d, edi
mov r14d, edi
mov r13d, edi
test rax, rax
je 0x180049eb7
cmp dword [rsp + 0x78], edi
jle 0x180049eb7
mov rcx, qword [rax]
lea rdx, [0x1800b083c]
call fcn.180071350
mov rbx, rax
test rax, rax
je 0x180049c68
mov rdx, rax
lea ecx, [rdi + 0x40]
sub rdx, qword [r15]
sar rdx, 1
lea rdx, [rdx*2 + 2]
call qword [sym.imp.KERNEL32.dll_LocalAlloc]
mov qword [rsp + 0x88], rax
mov rsi, rax
test rax, rax
je 0x180049c6b
mov rdx, qword [r15]
mov r8, rbx
sub r8, rdx
or rcx, 0xffffffffffffffff
inc rcx
cmp word [rdx + rcx*2], di
jne 0x180049c3d
lea rax, [r8 + 4]
sar rax, 1
mov eax, eax
cmp rax, rcx
jae 0x180049c58
lea r12, [rbx + 4]
sar r8, 1
mov rcx, rsi
add r8, r8
call fcn.180071560
jmp 0x180049c6b
mov r12, qword [r15]
mov ebp, 0x15
movzx ebx, di
lea rdi, [0x1800a0780]
xor ecx, ecx
lea eax, [rbp - 0x14]
cmp bx, bp
jae 0x180049d48
test rsi, rsi
je 0x180049cb0
movzx edx, bx
mov rcx, rsi
mov rdx, qword [rdi + rdx*8]
mov rdx, qword [rdx]
call fcn.180075b78
xor ecx, ecx
test eax, eax
lea eax, [rcx + 1]
je 0x180049cb0
mov r14d, ecx
jmp 0x180049d3c
mov r14d, eax
test r12, r12
je 0x180049d3c
movzx ebp, cx
test r13d, r13d
jne 0x180049d37
movzx esi, bx
mov rdx, qword [rdi + rsi*8]
cmp bp, word [rdx + 0x18]
jae 0x180049d2f
mov rdx, qword [rdx + 0x20]
mov rcx, r12
movzx eax, bp
lea rax, [rax + rax*2]
mov rdx, qword [rdx + rax*8 + 8]
mov qword [rsp + 0x20], rax
call fcn.180075b78
xor ecx, ecx
test eax, eax
mov r13d, ecx
sete r13b
test r13d, r13d
je 0x180049d22
mov rax, qword [rdi + rsi*8]
lea rdx, [r15 + 8]
mov ecx, dword [rsp + 0x78]
dec ecx
mov r8, qword [rax + 0x20]
mov rax, qword [rsp + 0x20]
call qword [r8 + rax*8]
mov dword [rsp + 0x80], eax
xor ecx, ecx
mov eax, 1
add bp, ax
test r13d, r13d
je 0x180049cc7
mov rsi, qword [rsp + 0x88]
mov ebp, 0x15
add bx, ax
test r14d, r14d
je 0x180049c7f
test r14d, r14d
jne 0x180049db0
mov rdx, rsi
lea rcx, str.ERROR_mimikatz_doLocal_____s__module_not_found___n
call fcn.1800090bc
lea r13d, [r14 + 1]
mov rdx, qword [rdi]
lea rcx, str._n_16s
mov rdx, qword [rdx]
call fcn.1800090bc
mov rax, qword [rdi]
mov rdx, qword [rax + 8]
test rdx, rdx
je 0x180049d8a
lea rcx, str.______s
call fcn.1800090bc
mov rax, qword [rdi]
mov rdx, qword [rax + 0x10]
test rdx, rdx
je 0x180049da2
lea rcx, str.____s_
call fcn.1800090bc
add rdi, 8
sub rbp, r13
jne 0x180049d60
jmp 0x180049e8d
test r13d, r13d
jne 0x180049e99
mov eax, 0xffff
lea rcx, str.ERROR_mimikatz_doLocal_____s__command_of___s__module_not_found___n
add bx, ax
mov rdx, r12
movzx ebp, bx
mov r8, qword [rdi + rbp*8]
mov r8, qword [r8]
call fcn.1800090bc
mov rdx, qword [rdi + rbp*8]
lea rcx, str._nModule_:_t_s
mov rdx, qword [rdx]
call fcn.1800090bc
mov rax, qword [rdi + rbp*8]
xor r12d, r12d
mov rdx, qword [rax + 8]
test rdx, rdx
je 0x180049e09
lea rcx, str._nFull_name_:_t_s
call fcn.1800090bc
mov rax, qword [rdi + rbp*8]
mov rdx, qword [rax + 0x10]
test rdx, rdx
je 0x180049e22
lea rcx, str._nDescription_:_t_s
call fcn.1800090bc
lea rcx, [0x1800a38e8]
call fcn.1800090bc
mov rcx, qword [rdi + rbp*8]
movzx r14d, r12w
cmp r12w, word [rcx + 0x18]
jae 0x180049e8d
mov r13d, 1
mov rdx, qword [rcx + 0x20]
lea rcx, str._n_16s
movzx eax, r14w
lea rbx, [rax + rax*2]
mov rdx, qword [rdx + rbx*8 + 8]
call fcn.1800090bc
mov rax, qword [rdi + rbp*8]
mov rcx, qword [rax + 0x20]
mov rdx, qword [rcx + rbx*8 + 0x10]
test rdx, rdx
je 0x180049e7e
lea rcx, str.______s
call fcn.1800090bc
mov rcx, qword [rdi + rbp*8]
add r14w, r13w
cmp r14w, word [rcx + 0x18]
jb 0x180049e43
lea rcx, [0x1800a38e8]
call fcn.1800090bc
test rsi, rsi
je 0x180049ea7
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_LocalFree]
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_LocalFree]
mov ebx, dword [rsp + 0x80]
mov eax, ebx
mov rbx, qword [rsp + 0x70]
add rsp, 0x30
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret