Function at 0x14000f540
Capabilities:
Accept command line arguments
Check mutex on windows

Disassembly:
mov dword [rsp + 0x10], edx
mov qword [rsp + 8], rcx
sub rsp, 0x2b8
mov qword [rsp + 0x2a8], 0xfffffffffffffffe
call fcn.14000f470
test eax, eax
jne 0x14000f56c
xor eax, eax
jmp 0x14000f891
mov dword [rsp + 0x200], 0
lea rdx, [rsp + 0x200]
mov rcx, qword [rsp + 0x2c0]
call qword [sym.imp.SHELL32.dll_CommandLineToArgvW]
mov qword [rsp + 0x270], rax
cmp dword [rsp + 0x200], 1
je 0x14000f5ad
cmp dword [rsp + 0x200], 2
jne 0x14000f6d1
cmp qword [rsp + 0x270], 0
je 0x14000f6d1
mov dword [rsp + 0x278], 0
lea rdx, str._InstallDriver
mov rcx, qword [rsp + 0x270]
mov rcx, qword [rcx]
call qword [sym.imp.KERNEL32.dll_lstrcmpiW]
test eax, eax
jne 0x14000f5f3
mov dword [rsp + 0x278], 1
jmp 0x14000f69a
lea rdx, [0x140035910]
mov rcx, qword [rsp + 0x270]
mov rcx, qword [rcx]
call qword [sym.imp.KERNEL32.dll_lstrcmpiW]
test eax, eax
jne 0x14000f61c
mov dword [rsp + 0x278], 3
jmp 0x14000f69a
lea rdx, [0x140035930]
mov rcx, qword [rsp + 0x270]
mov rcx, qword [rcx]
call qword [sym.imp.KERNEL32.dll_lstrcmpiW]
test eax, eax
jne 0x14000f645
mov dword [rsp + 0x278], 4
jmp 0x14000f69a
lea rdx, [0x140035948]
mov rcx, qword [rsp + 0x270]
mov rcx, qword [rcx]
call qword [sym.imp.KERNEL32.dll_lstrcmpiW]
test eax, eax
jne 0x14000f66e
mov dword [rsp + 0x278], 5
jmp 0x14000f69a
mov r8d, 1
lea rdx, [0x140035960]
mov rcx, qword [rsp + 0x270]
mov rcx, qword [rcx]
call fcn.14000f3f0
test eax, eax
je 0x14000f69a
mov dword [rsp + 0x278], 6
cmp dword [rsp + 0x278], 0
je 0x14000f6d1
mov ecx, dword [rsp + 0x278]
call fcn.14000f120
mov dword [rsp + 0x27c], eax
mov rcx, qword [rsp + 0x270]
call qword [sym.imp.KERNEL32.dll_LocalFree]
mov eax, dword [rsp + 0x27c]
jmp 0x14000f891
mov rcx, qword [rsp + 0x270]
call qword [sym.imp.KERNEL32.dll_LocalFree]
lea r8, str.AD9D0F9B_AB33_4aa0_8585_336A1D614F2F
mov edx, 1
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateMutexW]
mov qword [rsp + 0x28], rax
cmp qword [rsp + 0x28], 0
je 0x14000f7d1
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0xb7
jne 0x14000f7d1
mov rcx, qword [rsp + 0x28]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
cmp qword [rsp + 0x2c0], 0
jne 0x14000f732
xor eax, eax
jmp 0x14000f891
mov rcx, qword [rsp + 0x2c0]
call fcn.140022cb4
test rax, rax
jne 0x14000f74b
xor eax, eax
jmp 0x14000f891
lea rdx, str.95DADE6F_65E5_4df7_AB3C_307A3DB8ACB8
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowW]
mov qword [rsp + 0x298], rax
cmp qword [rsp + 0x298], 0
jne 0x14000f774
xor eax, eax
jmp 0x14000f891
mov rax, qword [rsp + 0x2c0]
mov qword [rsp + 0x290], rax
mov rcx, qword [rsp + 0x2c0]
call fcn.140022cb4
lea rax, [rax + rax + 2]
mov dword [rsp + 0x288], eax
mov qword [rsp + 0x280], 0
lea r9, [rsp + 0x280]
xor r8d, r8d
mov edx, 0x4a
mov rcx, qword [rsp + 0x298]
call qword [sym.imp.USER32.dll_SendMessageW]
mov eax, 1
jmp 0x14000f891
lea rcx, [rsp + 0x210]
call fcn.14000b690
nop
lea rdx, [rsp + 0x210]
lea rcx, [0x140044590]
call fcn.14000d6d0
lea rcx, [rsp + 0x30]
call fcn.14000fa00
nop
xor r8d, r8d
xor edx, edx
lea rcx, [rsp + 0x30]
call fcn.1400106d0
test rax, rax
jne 0x14000f83e
mov dword [rsp + 0x2a0], 0
lea rcx, [rsp + 0x30]
call fcn.1400104f0
nop
lea rcx, [rsp + 0x210]
call fcn.14000b6e0
mov eax, dword [rsp + 0x2a0]
jmp 0x14000f891
lea rcx, [rsp + 0x38]
xor edx, edx
call fcn.14000da00
lea rcx, [rsp + 0x210]
call fcn.14000d460
mov dword [rsp + 0x20], eax
lea rcx, [0x140044590]
call fcn.14000d7e0
mov eax, dword [rsp + 0x20]
mov dword [rsp + 0x2a4], eax
lea rcx, [rsp + 0x30]
call fcn.1400104f0
nop
lea rcx, [rsp + 0x210]
call fcn.14000b6e0
mov eax, dword [rsp + 0x2a4]
add rsp, 0x2b8
ret