Function at 0x100019b84
Capabilities:
Accept command line arguments
Resolve function by parsing pe exports

Disassembly:
mov r11, rsp
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x2b0
mov qword [rsp + 0x88], 0xfffffffffffffffe
mov qword [r11 + 0x18], rbx
mov rax, qword [0x100023110]
xor rax, rsp
mov qword [rsp + 0x2a0], rax
mov r12, rdx
mov qword [rsp + 0x70], rdx
xor r15d, r15d
mov qword [rsp + 0x50], r15
mov dword [rsp + 0x5c], r15d
mov dword [rsp + 0x58], r15d
mov rbp, r15
mov dword [rsp + 0x3c], r15d
mov dword [rsp + 0x38], r15d
mov qword [rsp + 0x60], r15
mov dword [rsp + 0x6c], r15d
mov dword [rsp + 0x68], r15d
mov qword [rsp + 0x40], r15
mov dword [rsp + 0x4c], r15d
mov dword [rsp + 0x48], r15d
cmp rcx, r15
je 0x10001a242
cmp rdx, r15
je 0x10001a242
mov word [r11 - 0x258], r15w
lea rdx, [rsp + 0x50]
call fcn.10001923c
mov ebx, eax
lea edi, [r15 + 1]
cmp eax, r15d
jge 0x100019c6d
lea rsi, [0x100023120]
mov rcx, qword [0x100023120]
cmp rcx, rsi
je 0x10001a20e
test byte [rcx + 0x1c], dil
je 0x10001a20e
mov edx, 0xda
mov r9d, eax
lea r8, [0x100001888]
mov rcx, qword [rcx + 0x10]
call fcn.1000048bc
jmp 0x10001a20e
lea rdx, [rsp + 0x3c]
mov rcx, qword [rsp + 0x50]
call qword [sym.imp.SHELL32.dll_CommandLineToArgvW]
mov r8, rax
mov qword [rsp + 0x30], rax
cmp rax, r15
jne 0x100019ce2
call qword [sym.imp.KERNEL32.dll_GetLastError]
movzx ebx, ax
or ebx, 0x80070000
cmp eax, r15d
cmovle ebx, eax
lea rsi, [0x100023120]
mov rcx, qword [0x100023120]
cmp rcx, rsi
je 0x10001a209
test byte [rcx + 0x1c], dil
je 0x10001a202
mov edx, 0xdb
mov r9d, ebx
lea r8, [0x100001888]
mov rcx, qword [rcx + 0x10]
call fcn.1000048bc
mov rbp, qword [rsp + 0x30]
jmp 0x10001a20e
mov edx, dword [rsp + 0x3c]
cmp edx, 2
jge 0x100019d30
mov ebx, 0x80004005
lea rsi, [0x100023120]
mov rcx, qword [0x100023120]
cmp rcx, rsi
je 0x10001a1fd
test byte [rcx + 0x1c], dil
je 0x10001a1f8
mov edx, 0xdc
lea r8, [0x100001888]
mov rcx, qword [rcx + 0x10]
call fcn.100004898
mov rbp, qword [rsp + 0x30]
jmp 0x10001a20e
mov ecx, edi
cmp edx, edi
jle 0x100019d58
add r8, 8
mov rax, qword [r8]
cmp word [rax], 0x2f
je 0x100019d49
cmp word [rax], 0x2d
jne 0x100019d53
add ecx, edi
add r8, 8
cmp ecx, edx
jl 0x100019d3a
mov r8, qword [rsp + 0x30]
cmp ecx, edx
jne 0x100019da1
mov ebx, 0x80004005
lea rsi, [0x100023120]
mov rcx, qword [0x100023120]
cmp rcx, rsi
je 0x10001a1f1
test byte [rcx + 0x1c], dil
je 0x10001a1ea
mov edx, 0xdd
lea r8, [0x100001888]
mov rcx, qword [rcx + 0x10]
call fcn.100004898
mov rbp, qword [rsp + 0x30]
jmp 0x10001a20e
movsxd rax, ecx
mov rbp, qword [r8 + rax*8]
mov edx, 0x2c
mov rcx, rbp
call sub.msvcrt.dll_wcschr
cmp rax, r15
jne 0x100019dff
mov ebx, 0x80004005
lea rsi, [0x100023120]
mov rcx, qword [0x100023120]
cmp rcx, rsi
je 0x10001a1e3
test byte [rcx + 0x1c], dil
je 0x10001a1dc
mov edx, 0xde
lea r8, [0x100001888]
mov rcx, qword [rcx + 0x10]
call fcn.100004898
mov rbp, qword [rsp + 0x30]
jmp 0x10001a20e
mov word [rax], r15w
mov edx, 0x2e
mov rcx, rbp
call sub.msvcrt.dll_wcsrchr
mov r13, rax
mov edx, 0x5c
mov rcx, rbp
call sub.msvcrt.dll_wcschr
lea rsi, [0x100023120]
lea r14, [0x100003600]
cmp rax, r15
jne 0x10001a008
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov rcx, rax
lea rdx, [rsp + 0x38]
call qword [sym.imp.KERNEL32.dll_IsWow64Process]
cmp eax, r15d
jne 0x100019e7f
mov rcx, qword [0x100023120]
cmp rcx, rsi
je 0x100019e7a
test byte [rcx + 0x1c], dil
je 0x100019e7a
mov edx, 0xdf
mov r9d, ebx
lea r8, [0x100001888]
mov rcx, qword [rcx + 0x10]
call fcn.1000048bc
mov dword [rsp + 0x38], r15d
lea rcx, [rsp + 0x60]
call fcn.100016f78
mov ebx, eax
cmp eax, r15d
jge 0x100019ecc
mov rcx, qword [0x100023120]
cmp rcx, rsi
je 0x10001a1d5
test byte [rcx + 0x1c], dil
je 0x10001a1ce
mov edx, 0xe0
mov r9d, eax
lea r8, [0x100001888]
mov rcx, qword [rcx + 0x10]
call fcn.1000048bc
mov rbp, qword [rsp + 0x30]
jmp 0x10001a20e
xor r8d, r8d
mov edx, dword [rsp + 0x38]
lea rcx, [rsp + 0x40]
call fcn.100017010
mov ebx, eax
cmp eax, r15d
jge 0x100019f20
mov rcx, qword [0x100023120]
cmp rcx, rsi
je 0x10001a1c7
test byte [rcx + 0x1c], dil
je 0x10001a1c0
mov edx, 0xe1
mov r9d, eax
lea r8, [0x100001888]
mov rcx, qword [rcx + 0x10]
call fcn.1000048bc
mov rbp, qword [rsp + 0x30]
jmp 0x10001a20e
mov rax, qword [rsp + 0x60]
mov qword [rsp + 0x78], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x80], rax
mov ebx, 0x80070002
mov r12d, r15d
test r13, r13
cmove r15, r14
lea r13, [rsp + 0x78]
mov r14d, 0x104
and qword [rsp + 0x28], 0
lea rax, [rsp + 0x90]
mov qword [rsp + 0x20], rax
mov r9d, r14d
mov r8, r15
mov rdx, rbp
mov rcx, qword [r13]
call qword [sym.imp.KERNEL32.dll_SearchPathW]
cmp eax, r14d
ja 0x100019fca
test eax, eax
jne 0x10001a0a3
add r12d, edi
add r13, 8
cmp r12d, 2
jb 0x100019f51
mov rcx, qword [0x100023120]
cmp rcx, rsi
je 0x10001a1ab
test byte [rcx + 0x1c], dil
je 0x10001a1a4
mov edx, 0xe3
lea r8, [0x100001888]
mov rcx, qword [rcx + 0x10]
call fcn.100004898
mov rbp, qword [rsp + 0x30]
jmp 0x10001a20e
mov ebx, 0x8007007a
mov rcx, qword [0x100023120]
cmp rcx, rsi
je 0x10001a1b9
test byte [rcx + 0x1c], dil
je 0x10001a1b2
mov edx, 0xe2
lea r8, [0x100001888]
mov rcx, qword [rcx + 0x10]
call fcn.100004898
mov rbp, qword [rsp + 0x30]
jmp 0x10001a20e
mov r14d, 0x104
mov rdx, r14
lea rcx, [rsp + 0x90]
mov ebx, r15d
lea rax, [rsp + 0x90]
sub rbp, rax
lea rax, [rdx + 0x7ffffefa]
cmp rax, r15
je 0x10001a049
movzx eax, word [rcx + rbp]
cmp ax, r15w
je 0x10001a049
mov word [rcx], ax
add rcx, 2
sub rdx, rdi
jne 0x10001a027
cmp rdx, r15
jne 0x10001a057
sub rcx, 2
mov ebx, 0x8007007a
mov word [rcx], r15w
cmp ebx, r15d
jge 0x10001a0ab
lea rsi, [0x100023120]
mov rcx, qword [0x100023120]
cmp rcx, rsi
je 0x10001a19d
test byte [rcx + 0x1c], dil
je 0x10001a196
mov edx, 0xe4
mov r9d, ebx
lea r8, [0x100001888]
mov rcx, qword [rcx + 0x10]
call fcn.1000048bc
mov rbp, qword [rsp + 0x30]
jmp 0x10001a20e
mov r12, qword [rsp + 0x70]
xor r15d, r15d
mov edx, 0x2e
lea rcx, [rsp + 0x90]
call sub.msvcrt.dll_wcsrchr
cmp rax, r15
jne 0x10001a11c
lea r8, [0x100003600]
mov rdx, r14
lea rcx, [rsp + 0x90]
call fcn.1000170fc
mov ebx, eax
cmp eax, r15d
jge 0x10001a11c
mov rcx, qword [0x100023120]
cmp rcx, rsi
je 0x10001a18f
test byte [rcx + 0x1c], dil
je 0x10001a188
mov edx, 0xe5
mov r9d, eax
lea r8, [0x100001888]
mov rcx, qword [rcx + 0x10]
call fcn.1000048bc
mov rbp, qword [rsp + 0x30]
jmp 0x10001a20e
lea rdx, [rsp + 0x90]
mov rcx, r12
call fcn.10001627c
mov ebx, eax
cmp eax, r15d
jge 0x10001a167
mov rcx, qword [0x100023120]
cmp rcx, rsi
je 0x10001a17e
test byte [rcx + 0x1c], dil
je 0x10001a174
mov edx, 0xe6
mov r9d, eax
lea r8, [0x100001888]
mov rcx, qword [rcx + 0x10]
call fcn.1000048bc
mov rbp, qword [rsp + 0x30]
jmp 0x10001a20e
mov ebx, r15d
mov rbp, qword [rsp + 0x30]
jmp 0x10001a20e
mov rbp, qword [rsp + 0x30]
jmp 0x10001a20e
mov rbp, qword [rsp + 0x30]
jmp 0x10001a20e
mov rbp, qword [rsp + 0x30]
jmp 0x10001a20e
mov rbp, qword [rsp + 0x30]
jmp 0x10001a20e
mov rbp, qword [rsp + 0x30]
jmp 0x10001a20e
mov rbp, qword [rsp + 0x30]
jmp 0x10001a20e
mov rbp, qword [rsp + 0x30]
jmp 0x10001a20e
mov rbp, qword [rsp + 0x30]
jmp 0x10001a20e
mov rbp, qword [rsp + 0x30]
jmp 0x10001a20e
mov rbp, qword [rsp + 0x30]
jmp 0x10001a20e
mov rbp, qword [rsp + 0x30]
jmp 0x10001a20e
mov rbp, qword [rsp + 0x30]
jmp 0x10001a20e
mov rbp, qword [rsp + 0x30]
jmp 0x10001a20e
mov rbp, qword [rsp + 0x30]
jmp 0x10001a20e
mov rbp, qword [rsp + 0x30]
jmp 0x10001a20e
mov rbp, qword [rsp + 0x30]
jmp 0x10001a20e
mov rbp, qword [rsp + 0x30]
jmp 0x10001a20e
mov rbp, qword [rsp + 0x30]
jmp 0x10001a20e
mov rbp, rax
jmp 0x10001a20e
mov rbp, rax
jmp 0x10001a20e
mov rbp, qword [rsp + 0x30]
jmp 0x10001a20e
mov rbp, qword [rsp + 0x30]
mov rcx, rbp
call qword [sym.imp.KERNEL32.dll_LocalFree]
nop
mov edx, edi
lea rcx, [rsp + 0x40]
call fcn.1000170b4
nop
mov edx, edi
lea rcx, [rsp + 0x60]
call fcn.1000170b4
nop
mov edx, edi
lea rcx, [rsp + 0x50]
call fcn.1000170b4
mov eax, ebx
jmp 0x10001a2a1
lea rsi, [0x100023120]
mov edi, 1
mov rcx, qword [0x100023120]
cmp rcx, rsi
je 0x10001a276
test byte [rcx + 0x1c], dil
je 0x10001a276
mov edx, 0xd9
lea r8, [0x100001888]
mov rcx, qword [rcx + 0x10]
call fcn.100004898
nop
mov edx, edi
lea rcx, [rsp + 0x40]
call fcn.1000170b4
nop
mov edx, edi
lea rcx, [rsp + 0x60]
call fcn.1000170b4
nop
mov edx, edi
lea rcx, [rsp + 0x50]
call fcn.1000170b4
mov eax, 0x80070057
mov rcx, qword [rsp + 0x2a0]
xor rcx, rsp
call fcn.10001e7a0
mov rbx, qword [rsp + 0x300]
add rsp, 0x2b0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret