Function at 0x14001eba0
Capabilities:
Accept command line arguments

Disassembly:
mov qword [rsp + 0x20], rsi
push rbp
lea rbp, [rsp - 0x90]
sub rsp, 0x190
mov rax, qword [0x14006c030]
xor rax, rsp
mov qword [rbp + 0x80], rax
xor esi, esi
mov qword [rbp + 0x78], 7
mov rax, r8
mov qword [rbp + 0x60], rsi
mov qword [rbp + 0x70], rsi
mov r8, 0xffffffffffffffff
inc r8
cmp word [rax + r8*2], si
jne 0x14001ebe2
mov rdx, rax
lea rcx, [rbp + 0x60]
call fcn.14001a8c0
mov edx, 0x4b
lea rcx, [rsp + 0x20]
call fcn.1400140d0
cmp qword [rsp + 0x38], 0x10
lea rdx, [rsp + 0x20]
mov r8, qword [rsp + 0x30]
lea rcx, [rbp + 0x40]
cmovae rdx, qword [rsp + 0x20]
add r8, rdx
lea rdx, [rsp + 0x20]
cmp qword [rsp + 0x38], 0x10
cmovae rdx, qword [rsp + 0x20]
call fcn.1400146d0
mov rdx, qword [rsp + 0x38]
cmp rdx, 0x10
jb 0x14001ec77
mov rcx, qword [rsp + 0x20]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001ec72
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14001f21a
call fcn.1400285fc
mov qword [rsp + 0x1a0], rbx
lea rdx, [rbp + 0x40]
lea rcx, [rbp + 0x60]
mov qword [rsp + 0x1a8], rdi
call fcn.14001f390
cmp rax, 0xffffffffffffffff
je 0x14001ed1f
xorps xmm0, xmm0
lea rcx, [rsp + 0x48]
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x48], xmm0
movdqu xmmword [rsp + 0x58], xmm1
movdqu xmmword [rsp + 0x68], xmm0
call fcn.140024ae0
mov rcx, qword [rsp + 0x60]
test rcx, rcx
je 0x14001ed0e
mov rdx, qword [rsp + 0x70]
mov rax, rcx
sub rdx, rcx
and rdx, 0xfffffffffffffffc
cmp rdx, 0x1000
jb 0x14001ecfb
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14001f220
call fcn.1400285fc
xorps xmm0, xmm0
mov qword [rsp + 0x70], rsi
movdqu xmmword [rsp + 0x60], xmm0
lea rcx, [rsp + 0x48]
call fcn.14001f320
mov ebx, esi
jmp 0x14001f098
mov dword [rsp + 0x40], esi
call qword [sym.imp.KERNEL32.dll_GetCommandLineW]
mov rcx, rax
lea rdx, [rsp + 0x40]
call qword [sym.imp.SHELL32.dll_CommandLineToArgvW]
mov edx, 0x4c
lea rcx, [rsp + 0x20]
mov rdi, rax
call fcn.1400140d0
cmp qword [rsp + 0x38], 0x10
lea r8, [rsp + 0x20]
lea rdx, [rsp + 0x20]
cmovae r8, qword [rsp + 0x20]
lea rcx, [rsp + 0x78]
add r8, qword [rsp + 0x30]
cmp qword [rsp + 0x38], 0x10
cmovae rdx, qword [rsp + 0x20]
call fcn.1400146d0
mov rdx, qword [rsp + 0x38]
cmp rdx, 0x10
jb 0x14001edb7
mov rcx, qword [rsp + 0x20]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001edb2
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14001f226
call fcn.1400285fc
mov ebx, esi
cmp dword [rsp + 0x40], esi
jle 0x14001ee6e
nop dword [rax]
nop word [rax + rax]
mov rdx, qword [rdi]
mov r8, 0xffffffffffffffff
mov qword [rsp + 0x20], rsi
mov qword [rsp + 0x30], rsi
mov qword [rsp + 0x38], 7
nop dword [rax]
inc r8
cmp word [rdx + r8*2], si
jne 0x14001edf0
lea rcx, [rsp + 0x20]
call fcn.14001a8c0
lea rdx, [rsp + 0x78]
lea rcx, [rsp + 0x20]
call fcn.14001f390
test rax, rax
je 0x14001f15a
mov rdx, qword [rsp + 0x38]
cmp rdx, 8
jb 0x14001ee5e
mov rcx, qword [rsp + 0x20]
lea rdx, [rdx*2 + 2]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001ee59
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14001f232
call fcn.1400285fc
inc ebx
add rdi, 8
cmp ebx, dword [rsp + 0x40]
jl 0x14001edd0
xor eax, eax
lea rcx, [rsp + 0x20]
mov dword [rbp - 0x4c], eax
mov dword [rbp - 0x24], eax
mov word [rbp - 0x12], ax
mov dword [rbp - 7], eax
mov word [rbp - 3], ax
mov byte [rbp - 1], al
mov word [rbp + 0x35], ax
mov byte [rbp + 0x37], al
mov dword [rbp + 0x3c], eax
call fcn.14001e5c0
cmp qword [rsp + 0x38], 0x10
lea r8, [rsp + 0x20]
lea rdx, [rsp + 0x20]
cmovae r8, qword [rsp + 0x20]
lea rcx, [rsp + 0x48]
add r8, qword [rsp + 0x30]
cmp qword [rsp + 0x38], 0x10
cmovae rdx, qword [rsp + 0x20]
call fcn.1400146d0
mov rdx, qword [rsp + 0x38]
cmp rdx, 0x10
jb 0x14001ef06
mov rcx, qword [rsp + 0x20]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001ef01
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14001f22c
call fcn.1400285fc
cmp qword [rsp + 0x60], 8
lea rax, [rsp + 0x48]
xorps xmm0, xmm0
mov qword [rsp + 0x30], rsi
cmovae rax, qword [rsp + 0x48]
xor ecx, ecx
mov qword [rbp - 0x30], rcx
test rax, rax
mov qword [rbp - 0x2c], rcx
lea rcx, [0x140063524]
cmove rax, rcx
mov qword [rsp + 0x38], 0xf
movups xmmword [rbp - 0x40], xmm0
xor r9d, r9d
mov qword [rbp - 0x58], rax
lea rax, vtable.ServiceManager.0
mov byte [rsp + 0x20], sil
xor r8d, r8d
mov dword [rbp - 0x50], esi
xor ecx, ecx
mov qword [rbp - 0x48], rsi
lea edx, [r9 + 1]
mov qword [rbp - 0x20], rsi
mov dword [rbp - 0x40], 0x110
mov dword [rbp - 0x3c], 2
mov qword [rbp - 0x38], 0x185
mov dword [rbp - 0x30], esi
mov dword [rbp - 0x28], esi
mov dword [rbp - 0x18], esi
mov word [rbp - 0x14], si
mov qword [rbp - 0x60], rax
call qword [sym.imp.KERNEL32.dll_CreateEventW]
xorps xmm0, xmm0
mov byte [rbp - 8], sil
xorps xmm1, xmm1
movdqa xmmword [rbp], xmm0
movdqa xmmword [rbp + 0x10], xmm1
movdqa xmmword [rbp + 0x20], xmm0
mov qword [rbp - 0x10], rax
mov dword [rbp + 0x30], esi
mov byte [rbp + 0x34], sil
mov dword [rbp + 0x38], esi
call fcn.140021bd0
mov rdx, qword [rsp + 0x60]
cmp rdx, 8
jb 0x14001f006
mov rcx, qword [rsp + 0x48]
lea rdx, [rdx*2 + 2]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001f001
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14001f23e
call fcn.1400285fc
lea rax, [rbp - 0x60]
mov qword [rsp + 0x58], rsi
mov qword [0x14006f8d0], rax
lea rcx, [rsp + 0x48]
mov rax, qword [rbp - 0x58]
mov qword [rsp + 0x48], rax
lea rax, [0x140021820]
mov qword [rsp + 0x50], rax
mov qword [rsp + 0x60], rsi
call qword [sym.imp.ADVAPI32.dll_StartServiceCtrlDispatcherW]
lea rcx, [rbp - 8]
mov ebx, esi
call fcn.14001f250
mov rdx, qword [rbp - 0x70]
cmp rdx, 8
jb 0x14001f087
mov rcx, qword [rsp + 0x78]
lea rdx, [rdx*2 + 2]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001f082
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14001f214
call fcn.1400285fc
mov qword [rbp - 0x78], rsi
mov qword [rbp - 0x70], 7
mov word [rsp + 0x78], si
mov rdx, qword [rbp + 0x58]
cmp rdx, 8
jb 0x14001f0d8
mov rcx, qword [rbp + 0x40]
lea rdx, [rdx*2 + 2]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001f0d3
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14001f214
call fcn.1400285fc
mov rdx, qword [rbp + 0x78]
mov qword [rbp + 0x50], rsi
mov qword [rbp + 0x58], 7
mov word [rbp + 0x40], si
cmp rdx, 8
jb 0x14001f128
mov rcx, qword [rbp + 0x60]
lea rdx, [rdx*2 + 2]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001f123
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14001f214
call fcn.1400285fc
mov rdi, qword [rsp + 0x1a8]
mov eax, ebx
mov rbx, qword [rsp + 0x1a0]
mov rcx, qword [rbp + 0x80]
xor rcx, rsp
call fcn.1400285b0
mov rsi, qword [rsp + 0x1b8]
add rsp, 0x190
pop rbp
ret
mov r8, qword [rsp + 0x30]
lea rcx, [rsp + 0x20]
mov rax, qword [rbp - 0x78]
cmp r8, rax
cmovb rax, r8
cmp qword [rsp + 0x38], 8
cmovae rcx, qword [rsp + 0x20]
sub r8, rax
mov qword [rsp + 0x30], r8
lea r8, [r8*2 + 2]
lea rdx, [rcx + rax*2]
call fcn.14002a820
cmp qword [rsp + 0x38], 8
lea rcx, [rsp + 0x20]
lea r8, [rsp + 0x44]
cmovae rcx, qword [rsp + 0x20]
lea rdx, [0x1400634fc]
call fcn.14001f590
cmp eax, 1
jne 0x14001f1c8
mov ecx, dword [rsp + 0x44]
call fcn.14001e960
mov ebx, eax
jmp 0x14001f1cd
mov ebx, 3
mov rdx, qword [rsp + 0x38]
cmp rdx, 8
jb 0x14001f046
mov rcx, qword [rsp + 0x20]
lea rdx, [rdx*2 + 2]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001f20a
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14001f238
call fcn.1400285fc
jmp 0x14001f046
call fcn.14002ef48
int3
call fcn.14002ef48
int3
call fcn.14002ef48
int3
call fcn.14002ef48
int3
call fcn.14002ef48
int3
call fcn.14002ef48
int3
call fcn.14002ef48
int3
call fcn.14002ef48
int3