Function at 0x140005168
Capabilities:
Accept command line arguments

Disassembly:
mov rax, rsp
push r12
push r14
push r15
sub rsp, 0x150
mov qword [rsp + 0x40], 0xfffffffffffffffe
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
mov rax, qword [0x14005e0f0]
xor rax, rsp
mov qword [rsp + 0x140], rax
mov r15, r8
xor r12d, r12d
mov dword [rsp + 0x28], r12d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_core_com_l1_1_0.dll_CoInitializeEx]
nop dword [rax + rax]
nop
mov rcx, qword [rsp + 0x168]
test eax, eax
js 0x140005a92
mov dil, 1
mov byte [rsp + 0x24], dil
xor ecx, ecx
call fcn.1400046c4
nop
mov dword [0x14005e930], 5
xor ecx, ecx
call fcn.1400046c4
nop
mov eax, r12d
cmp qword [0x14005e990], r12
jne 0x14000522f
lea rcx, [0x14005ea98]
call fcn.140008d74
nop
test eax, eax
jns 0x140005213
lea rdx, str.Unable_to_setup_logging_file_location
jmp 0x140005224
call fcn.140009124
nop
test eax, eax
jns 0x14000522f
lea rdx, str.Unable_to_start_logging_to_file
mov ecx, eax
call fcn.140009398
nop
mov eax, r12d
mov ecx, eax
call fcn.1400046c4
nop
mov rcx, qword [0x14005e800]
lea rax, [0x140009c60]
test rcx, rcx
je 0x140005253
cmp rcx, rax
jne 0x140005aa7
mov qword [0x14005e800], rax
call fcn.14000c3e4
nop
mov rcx, qword [0x14005e7f0]
lea rax, [0x140009c90]
test rcx, rcx
je 0x14000527c
cmp rcx, rax
jne 0x140005ac5
mov qword [0x14005e7f0], rax
lea rcx, [0x14005d0a8]
call fcn.1400011e0
nop
mov byte [rsp + 0x39], dil
movdqa xmm0, xmmword [0x14004da30]
movdqu xmmword [rsp + 0xf0], xmm0
mov word [rsp + 0xe0], r12w
lea rdx, str._RUXIMCampaignScheduler__LibWinMain
lea rcx, [rsp + 0xe0]
call fcn.1400082d4
nop
lea r8, [rsp + 0xe0]
cmp qword [rsp + 0xf8], 8
cmovae r8, qword [rsp + 0xe0]
lea rdx, str._s_:_Init
xor ecx, ecx
call fcn.140009b0c
nop
mov qword [rsp + 0x30], r12
lea rcx, [rsp + 0x30]
call qword [sym.imp.api_ms_win_core_sysinfo_l1_1_0.dll_GetSystemTimeAsFileTime]
nop dword [rax + rax]
nop
mov ecx, dword [rsp + 0x30]
call qword [sym.imp.api_ms_win_crt_private_l1_1_0.dll__o_srand]
nop dword [rax + rax]
nop
mov sil, r12b
mov word [rsp + 0x20], r12w
mov r14b, r12b
mov ebx, r12d
movdqa xmm0, xmmword [0x14004da30]
movdqu xmmword [rsp + 0x110], xmm0
mov word [rsp + 0x100], r12w
test r15, r15
je 0x140005391
call qword [sym.imp.api_ms_win_core_processenvironment_l1_1_0.dll_GetCommandLineW]
nop dword [rax + rax]
nop
mov rdx, rax
lea rcx, [rsp + 0x100]
call fcn.1400082d4
nop
lea rdx, [rsp + 0x100]
lea rcx, [rsp + 0x120]
call fcn.140008038
nop
lea rdx, [rsp + 0x20]
mov rcx, rax
call fcn.14000a7bc
nop
mov ebx, eax
mov r14b, byte [rsp + 0x21]
mov sil, byte [rsp + 0x20]
lea r8, [rsp + 0x100]
cmp qword [rsp + 0x118], 8
cmovae r8, qword [rsp + 0x100]
lea rdx, str._RUXIMCampaignScheduler__LibWinMain_:_ParseCommandLine__s
mov ecx, ebx
call fcn.140009b0c
nop
lea rcx, [rsp + 0x100]
cmp qword [rsp + 0x118], 8
cmovae rcx, qword [rsp + 0x100]
call fcn.140007ef4
nop
mov byte [rsp + 0x21], dil
test ebx, ebx
jns 0x140005492
mov rcx, qword [rsp + 0x168]
mov r9d, ebx
lea r8, str.onecoreenduserwindowsupdate_ruximcampaignschedulerlib_ruximcampaignscheduler.cpp
mov edx, 0x36
call fcn.140003b08
nop
call fcn.14000a2a0
nop
lea rcx, [rsp + 0x100]
call fcn.140008164
nop
lea r8, [rsp + 0xe0]
cmp qword [rsp + 0xf8], 8
cmovae r8, qword [rsp + 0xe0]
lea rdx, str._s_:_Exit
xor ecx, ecx
call fcn.140009b0c
nop
lea rcx, [rsp + 0xe0]
call fcn.140008164
nop
call fcn.14000a36c
nop
mov qword [0x14005e800], r12
mov rcx, qword [0x14005d0c8]
mov dword [0x14005d0a8], r12d
mov qword [0x14005d0c8], r12
call qword [sym.imp.api_ms_win_eventing_provider_l1_1_0.dll_EventUnregister]
nop dword [rax + rax]
nop
call qword [sym.imp.api_ms_win_core_com_l1_1_0.dll_CoUninitialize]
nop dword [rax + rax]
nop
mov eax, ebx
jmp 0x140005a62
mov rbx, r12
mov qword [rsp + 0x30], rbx
mov r9d, 0x1f0001
xor r8d, r8d
lea rdx, str.MUTEX_RUXIMICS
xor ecx, ecx
call qword [sym.imp.api_ms_win_core_synch_l1_1_0.dll_CreateMutexExW]
nop dword [rax + rax]
nop
test rax, rax
jne 0x1400054c3
mov dil, r12b
jmp 0x1400054cb
mov rbx, rax
mov qword [rsp + 0x30], rax
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
nop dword [rax + rax]
nop
test dil, dil
je 0x140005995
cmp eax, 0xb7
jne 0x14000558b
test rbx, rbx
je 0x1400054fa
mov rcx, rbx
call fcn.140003bf0
nop
call fcn.14000a2a0
nop
lea rcx, [rsp + 0x100]
call fcn.140008164
nop
lea r8, [rsp + 0xe0]
cmp qword [rsp + 0xf8], 8
cmovae r8, qword [rsp + 0xe0]
lea rdx, str._s_:_Exit
xor ecx, ecx
call fcn.140009b0c
nop
lea rcx, [rsp + 0xe0]
call fcn.140008164
nop
call fcn.14000a36c
nop
mov qword [0x14005e800], r12
mov rcx, qword [0x14005d0c8]
mov dword [0x14005d0a8], r12d
mov qword [0x14005d0c8], r12
call qword [sym.imp.api_ms_win_eventing_provider_l1_1_0.dll_EventUnregister]
nop dword [rax + rax]
nop
call qword [sym.imp.api_ms_win_core_com_l1_1_0.dll_CoUninitialize]
nop dword [rax + rax]
nop
mov eax, 0x8024b952
jmp 0x140005a62
lea rcx, [rsp + 0x28]
call fcn.14000e6a8
nop
test eax, eax
js 0x140005660
mov r8d, dword [rsp + 0x28]
mov r9d, 0x47bb
cmp r8d, r9d
jle 0x140005660
lea rdx, str._RUXIMCampaignScheduler__Exiting_ICS_because_build_number__d_exceeds_maximum_allowed_build__d
mov ecx, 0x80070057
call fcn.140009b0c
nop
test rbx, rbx
je 0x1400055d2
mov rcx, rbx
call fcn.140003bf0
nop
call fcn.14000a2a0
nop
lea rcx, [rsp + 0x100]
call fcn.140008164
nop
lea r8, [rsp + 0xe0]
cmp qword [rsp + 0xf8], 8
cmovae r8, qword [rsp + 0xe0]
lea rdx, str._s_:_Exit
xor ecx, ecx
call fcn.140009b0c
nop
lea rcx, [rsp + 0xe0]
call fcn.140008164
nop
call fcn.14000a36c
nop
mov qword [0x14005e800], r12
mov rcx, qword [0x14005d0c8]
mov dword [0x14005d0a8], r12d
mov qword [0x14005d0c8], r12
call qword [sym.imp.api_ms_win_eventing_provider_l1_1_0.dll_EventUnregister]
nop dword [rax + rax]
nop
call qword [sym.imp.api_ms_win_core_com_l1_1_0.dll_CoUninitialize]
nop dword [rax + rax]
nop
xor eax, eax
jmp 0x140005a62
test r14b, r14b
sete dil
movdqa xmm0, xmmword [0x14004da30]
movdqu xmmword [rsp + 0x130], xmm0
mov word [rsp + 0x120], r12w
lea rdx, str._InteractionCampaignOrganizer__LoadInteractionCampaigns
lea rcx, [rsp + 0x120]
call fcn.1400082d4
nop
lea r8, [rsp + 0x120]
cmp qword [rsp + 0x138], 8
cmovae r8, qword [rsp + 0x120]
lea rdx, str._s_:_Init
xor ecx, ecx
call fcn.140009b0c
nop
test dil, dil
je 0x1400056ca
call fcn.14000f7e0
nop
call fcn.14000f320
nop
mov edi, eax
test eax, eax
jns 0x14000572c
mov rcx, qword [rsp + 0x168]
mov r9d, eax
lea r8, str.onecoreenduserwindowsupdate_ruxim_ruximliblibinteractioncampaignorganizer.cpp
mov edx, 0xe
call fcn.140003b08
nop
lea r8, [rsp + 0x120]
cmp qword [rsp + 0x138], 8
cmovae r8, qword [rsp + 0x120]
lea rdx, str._s_:_Exit
xor ecx, ecx
call fcn.140009b0c
nop
lea rcx, [rsp + 0x120]
call fcn.140008164
nop
jmp 0x140005766
lea r8, [rsp + 0x120]
cmp qword [rsp + 0x138], 8
cmovae r8, qword [rsp + 0x120]
lea rdx, str._s_:_Exit
xor ecx, ecx
call fcn.140009b0c
nop
lea rcx, [rsp + 0x120]
call fcn.140008164
nop
mov edi, r12d
test edi, edi
jns 0x140005827
mov rcx, qword [rsp + 0x168]
mov r9d, edi
lea r8, str.onecoreenduserwindowsupdate_ruximcampaignschedulerlib_ruximcampaignscheduler.cpp
mov edx, 0x4d
call fcn.140003b08
nop
test rbx, rbx
je 0x140005799
mov rcx, rbx
call fcn.140003bf0
nop
call fcn.14000a2a0
nop
lea rcx, [rsp + 0x100]
call fcn.140008164
nop
lea r8, [rsp + 0xe0]
cmp qword [rsp + 0xf8], 8
cmovae r8, qword [rsp + 0xe0]
lea rdx, str._s_:_Exit
xor ecx, ecx
call fcn.140009b0c
nop
lea rcx, [rsp + 0xe0]
call fcn.140008164
nop
call fcn.14000a36c
nop
mov qword [0x14005e800], r12
mov rcx, qword [0x14005d0c8]
mov dword [0x14005d0a8], r12d
mov qword [0x14005d0c8], r12
call qword [sym.imp.api_ms_win_eventing_provider_l1_1_0.dll_EventUnregister]
nop dword [rax + rax]
nop
call qword [sym.imp.api_ms_win_core_com_l1_1_0.dll_CoUninitialize]
nop dword [rax + rax]
nop
mov eax, edi
jmp 0x140005a62
test sil, sil
jne 0x1400058f9
call fcn.1400071b0
nop
mov edi, eax
test eax, eax
jns 0x1400058f9
mov rcx, qword [rsp + 0x168]
mov r9d, eax
lea r8, str.onecoreenduserwindowsupdate_ruximcampaignschedulerlib_ruximcampaignscheduler.cpp
mov edx, 0x50
call fcn.140003b08
nop
test rbx, rbx
je 0x14000586b
mov rcx, rbx
call fcn.140003bf0
nop
call fcn.14000a2a0
nop
lea rcx, [rsp + 0x100]
call fcn.140008164
nop
lea r8, [rsp + 0xe0]
cmp qword [rsp + 0xf8], 8
cmovae r8, qword [rsp + 0xe0]
lea rdx, str._s_:_Exit
xor ecx, ecx
call fcn.140009b0c
nop
lea rcx, [rsp + 0xe0]
call fcn.140008164
nop
call fcn.14000a36c
nop
mov qword [0x14005e800], r12
mov rcx, qword [0x14005d0c8]
mov dword [0x14005d0a8], r12d
mov qword [0x14005d0c8], r12
call qword [sym.imp.api_ms_win_eventing_provider_l1_1_0.dll_EventUnregister]
nop dword [rax + rax]
nop
call qword [sym.imp.api_ms_win_core_com_l1_1_0.dll_CoUninitialize]
nop dword [rax + rax]
nop
mov eax, edi
jmp 0x140005a62
test rbx, rbx
je 0x140005907
mov rcx, rbx
call fcn.140003bf0
nop
call fcn.14000a2a0
nop
lea rcx, [rsp + 0x100]
call fcn.140008164
nop
lea r8, [rsp + 0xe0]
cmp qword [rsp + 0xf8], 8
cmovae r8, qword [rsp + 0xe0]
lea rdx, str._s_:_Exit
xor ecx, ecx
call fcn.140009b0c
nop
lea rcx, [rsp + 0xe0]
call fcn.140008164
nop
call fcn.14000a36c
nop
mov qword [0x14005e800], r12
mov rcx, qword [0x14005d0c8]
mov dword [0x14005d0a8], r12d
mov qword [0x14005d0c8], r12
call qword [sym.imp.api_ms_win_eventing_provider_l1_1_0.dll_EventUnregister]
nop dword [rax + rax]
nop
call qword [sym.imp.api_ms_win_core_com_l1_1_0.dll_CoUninitialize]
nop dword [rax + rax]
nop
xor eax, eax
jmp 0x140005a62
movzx edi, ax
or edi, 0x80070000
test eax, eax
cmovle edi, eax
test edi, edi
jns 0x1400059c4
mov rcx, qword [rsp + 0x168]
mov r9d, edi
lea r8, str.onecoreenduserwindowsupdate_ruximcampaignschedulerlib_ruximcampaignscheduler.cpp
mov edx, 0x41
call fcn.140003b08
nop
test rbx, rbx
je 0x1400059d2
mov rcx, rbx
call fcn.140003bf0
nop
call fcn.14000a2a0
nop
lea rcx, [rsp + 0x100]
call fcn.140008164
nop
lea r8, [rsp + 0xe0]
cmp qword [rsp + 0xf8], 8
cmovae r8, qword [rsp + 0xe0]
lea rdx, str._s_:_Exit
xor ecx, ecx
call fcn.140009b0c
nop
lea rcx, [rsp + 0xe0]
call fcn.140008164
nop
call fcn.14000a36c
nop
mov qword [0x14005e800], r12
mov rcx, qword [0x14005d0c8]
mov dword [0x14005d0a8], r12d
mov qword [0x14005d0c8], r12
call qword [sym.imp.api_ms_win_eventing_provider_l1_1_0.dll_EventUnregister]
nop dword [rax + rax]
nop
call qword [sym.imp.api_ms_win_core_com_l1_1_0.dll_CoUninitialize]
nop dword [rax + rax]
nop
mov eax, edi
jmp 0x140005a62
mov rcx, qword [rsp + 0x140]
xor rcx, rsp
call fcn.140041d90
nop
lea r11, [rsp + 0x150]
mov rbx, qword [r11 + 0x20]
mov rsi, qword [r11 + 0x28]
mov rdi, qword [r11 + 0x30]
mov rsp, r11
pop r15
pop r14
pop r12
ret
mov r9d, eax
lea r8, str.onecoreinternal_sdkincwilopensourcewil_resource.h
mov edx, 0x10e9
call fcn.140009ce0
nop
xor edx, edx
mov r8d, 0x90
lea rcx, [rsp + 0x50]
call sub.api_ms_win_crt_string_l1_1_0.dll_memset
nop
lea rcx, [rsp + 0x50]
call fcn.14000373c
nop
xor edx, edx
mov r8d, 0x90
lea rcx, [rsp + 0x50]
call sub.api_ms_win_crt_string_l1_1_0.dll_memset
nop
lea rcx, [rsp + 0x50]
call fcn.14000373c
nop
int3