Function at 0x14001a820
Capabilities:
Accept command line arguments

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x37]
sub rsp, 0xc0
mov rax, qword [0x140069798]
xor rax, rsp
mov qword [rbp + 0x2f], rax
mov qword [rbp - 0x69], rdx
call qword [sym.imp.KERNEL32.dll_GetCommandLineW]
xor r12d, r12d
mov qword [rbp - 0x51], r12
mov qword [rbp - 0x41], r12
mov ebx, 7
mov qword [rbp - 0x59], rbx
mov qword [rbp - 0x39], rbx
mov word [rbp - 0x51], r12w
mov r8, 0xffffffffffffffff
inc r8
cmp word [rax + r8*2], r12w
jne 0x14001a880
mov rdx, rax
lea rcx, [rbp - 0x51]
call fcn.1400022a0
nop
mov qword [rbp - 0x11], r12
mov r14, r12
mov qword [rbp - 1], r12
mov qword [rbp + 7], rbx
mov word [rbp - 0x11], r12w
mov qword [rbp + 0xf], r12
mov r15, r12
mov qword [rbp + 0x1f], r12
mov qword [rbp + 0x27], rbx
mov word [rbp + 0xf], r12w
lea rbx, [rbp - 0x51]
mov r13, qword [rbp - 0x51]
mov rsi, qword [rbp - 0x39]
cmp rsi, 8
cmovae rbx, r13
lea r8, str..exe
mov qword [rbp - 0x61], r8
mov rdi, qword [rbp - 0x41]
cmp rdi, 4
jb 0x14001aa93
lea r11, [rdi - 3]
lea r11, [rbx + r11*2]
mov rax, rbx
nop word [rax + rax]
mov rcx, r11
sub rcx, rax
sar rcx, 1
mov rdx, r12
je 0x14001a92a
cmp word [rax], 0x2e
je 0x14001a927
cmp rcx, 1
je 0x14001a92a
dec rcx
add rax, 2
cmp word [rax], 0x2e
jne 0x14001a914
mov rdx, rax
mov rax, rdx
test rdx, rdx
je 0x14001aa93
mov r9d, 4
mov rcx, r8
movzx edx, word [rdx]
mov r8d, 0x2e
cmp dx, r8w
jb 0x14001a977
mov r10, rax
sub r10, qword [rbp - 0x61]
cmp dx, r8w
ja 0x14001a977
cmp r9, 1
je 0x14001a987
dec r9
add rcx, 2
movzx edx, word [r10 + rcx]
movzx r8d, word [rcx]
cmp dx, r8w
jae 0x14001a959
add rax, 2
lea r8, str..exe
jmp 0x14001a900
sub rax, rbx
sar rax, 1
cmp rax, 0xffffffffffffffff
je 0x14001aa8c
lea r11, [rbp - 0x51]
cmp rsi, 8
cmovae r11, r13
lea rbx, [rdi - 3]
lea rbx, [r11 + rbx*2]
mov r8, r11
lea r14, str..exe
nop word [rax + rax]
mov rax, rbx
sub rax, r8
sar rax, 1
mov rcx, r12
je 0x14001a9ec
cmp word [r8], 0x2e
je 0x14001a9e9
cmp rax, 1
je 0x14001a9ec
dec rax
add r8, 2
cmp word [r8], 0x2e
jne 0x14001a9d5
mov rcx, r8
mov r8, rcx
test rcx, rcx
je 0x14001aa3d
mov r9d, 4
mov rax, r14
movzx ecx, word [rcx]
mov edx, 0x2e
cmp cx, dx
jb 0x14001aa2f
mov r10, r8
sub r10, r14
cmp cx, dx
ja 0x14001aa2f
cmp r9, 1
je 0x14001aa35
dec r9
add rax, 2
movzx ecx, word [r10 + rax]
movzx edx, word [rax]
cmp cx, dx
jae 0x14001aa13
add r8, 2
jmp 0x14001a9c0
sub r8, r11
sar r8, 1
jmp 0x14001aa44
mov r8, 0xffffffffffffffff
mov qword [rbp - 0x31], r12
mov qword [rbp - 0x21], r12
mov qword [rbp - 0x19], 7
add r8, 4
cmp rdi, r8
cmovb r8, rdi
lea rdx, [rbp - 0x51]
cmp rsi, 8
cmovae rdx, r13
lea rcx, [rbp - 0x31]
call fcn.1400022a0
movups xmm0, xmmword [rbp - 0x31]
movups xmmword [rbp - 0x11], xmm0
movups xmm1, xmmword [rbp - 0x21]
movups xmmword [rbp - 1], xmm1
mov r13, qword [rbp - 0x51]
mov r14, qword [rbp - 1]
lea r8, str..exe
mov rbx, qword [rbp - 0x69]
mov rdi, qword [rbx + 0x10]
mov r11, rbx
mov rsi, qword [rbx + 0x18]
cmp rsi, 8
jb 0x14001aaab
mov r11, qword [rbx]
cmp rdi, 4
jb 0x14001ac61
lea rbx, [rdi - 3]
lea rbx, [r11 + rbx*2]
mov rax, r11
mov rcx, rbx
sub rcx, rax
sar rcx, 1
mov rdx, r12
je 0x14001aaea
cmp word [rax], 0x2e
je 0x14001aae7
cmp rcx, 1
je 0x14001aaea
dec rcx
add rax, 2
cmp word [rax], 0x2e
jne 0x14001aad4
mov rdx, rax
mov rax, rdx
test rdx, rdx
je 0x14001ac5d
mov r9d, 4
mov rcx, r8
movzx edx, word [rdx]
mov r8d, 0x2e
cmp dx, r8w
jb 0x14001ab37
mov r10, rax
sub r10, qword [rbp - 0x61]
cmp dx, r8w
ja 0x14001ab37
cmp r9, 1
je 0x14001ab47
dec r9
add rcx, 2
movzx edx, word [rcx + r10]
movzx r8d, word [rcx]
cmp dx, r8w
jae 0x14001ab19
add rax, 2
lea r8, str..exe
jmp 0x14001aac0
sub rax, r11
sar rax, 1
mov rbx, qword [rbp - 0x69]
cmp rax, 0xffffffffffffffff
je 0x14001ac61
mov r11, rbx
cmp rsi, 8
jb 0x14001ab67
mov r11, qword [rbx]
lea rbx, [rdi - 3]
lea rbx, [r11 + rbx*2]
mov rax, r11
lea r15, str..exe
nop dword [rax]
mov rcx, rbx
sub rcx, rax
sar rcx, 1
mov rdx, r12
je 0x14001abaa
cmp word [rax], 0x2e
je 0x14001aba7
cmp rcx, 1
je 0x14001abaa
dec rcx
add rax, 2
cmp word [rax], 0x2e
jne 0x14001ab94
mov rdx, rax
mov rax, rdx
test rdx, rdx
je 0x14001ac00
mov r9d, 4
mov rcx, r15
movzx edx, word [rdx]
mov r8d, 0x2e
cmp dx, r8w
jb 0x14001abf2
mov r10, rax
sub r10, r15
cmp dx, r8w
ja 0x14001abf2
cmp r9, 1
je 0x14001abf8
dec r9
add rcx, 2
movzx edx, word [rcx + r10]
movzx r8d, word [rcx]
cmp dx, r8w
jae 0x14001abd4
add rax, 2
jmp 0x14001ab80
sub rax, r11
sar rax, 1
jmp 0x14001ac07
mov rax, 0xffffffffffffffff
mov qword [rbp - 0x31], r12
mov qword [rbp - 0x21], r12
mov qword [rbp - 0x19], 7
lea r8, [rax + 4]
cmp rdi, r8
cmovb r8, rdi
mov rbx, qword [rbp - 0x69]
mov rdx, rbx
cmp rsi, 8
jb 0x14001ac32
mov rdx, qword [rbx]
lea rcx, [rbp - 0x31]
call fcn.1400022a0
movups xmm0, xmmword [rbp - 0x31]
movups xmmword [rbp + 0xf], xmm0
movups xmm1, xmmword [rbp - 0x21]
movups xmmword [rbp + 0x1f], xmm1
mov r13, qword [rbp - 0x51]
mov rcx, qword [rbp + 0x27]
mov qword [rbp - 0x59], rcx
mov r15, qword [rbp + 0x1f]
jmp 0x14001ac66
mov rbx, qword [rbp - 0x69]
mov ecx, 7
mov rdi, qword [rbp - 0x11]
mov rsi, qword [rbp + 0xf]
test r14, r14
je 0x14001acc3
lea rax, [rbp + 0xf]
cmp rcx, 8
cmovae rax, rsi
lea r8, [rbp - 0x11]
cmp qword [rbp + 7], 8
cmovae r8, rdi
cmp r14, r15
jne 0x14001acc3
movzx ecx, word [r8]
movzx edx, word [rax]
cmp cx, dx
jb 0x14001acc3
sub r8, rax
cmp cx, dx
ja 0x14001acc3
cmp r14, 1
je 0x14001ad71
dec r14
add rax, 2
movzx ecx, word [r8 + rax]
movzx edx, word [rax]
cmp cx, dx
jae 0x14001aca3
mov rbx, qword [rbp - 0x69]
mov rax, qword [rbx + 0x10]
cmp qword [rbx + 0x18], 8
jb 0x14001acd5
mov rbx, qword [rbx]
cmp rax, 0x14
jb 0x14001ae40
add rax, 0xffffffffffffffed
lea r11, [rbx + rax*2]
mov rax, rbx
lea r14, str.DingtalkLauncher.exe
mov rcx, r11
sub rcx, rax
sar rcx, 1
mov rdx, r12
je 0x14001ad1b
cmp word [rax], 0x44
je 0x14001ad18
cmp rcx, 1
je 0x14001ad1b
dec rcx
add rax, 2
cmp word [rax], 0x44
jne 0x14001ad05
mov rdx, rax
mov rax, rdx
test rdx, rdx
je 0x14001ae40
mov r9d, 0x14
mov rcx, r14
movzx edx, word [rdx]
mov r8d, 0x44
cmp dx, r8w
jb 0x14001ad6b
mov r10, rax
sub r10, r14
cmp dx, r8w
ja 0x14001ad6b
cmp r9, 1
je 0x14001ae34
dec r9
add rcx, 2
movzx edx, word [r10 + rcx]
movzx r8d, word [rcx]
cmp dx, r8w
jae 0x14001ad49
add rax, 2
jmp 0x14001acf1
mov rax, qword [rbx + 0x10]
mov r11, rbx
cmp qword [rbx + 0x18], 8
jb 0x14001ad82
mov r11, qword [rbx]
cmp rax, 6
jb 0x14001acc3
add rax, 0xfffffffffffffffb
lea rbx, [r11 + rax*2]
mov rax, r11
lea r14, str.__type
nop
mov rcx, rbx
sub rcx, rax
sar rcx, 1
mov rdx, r12
je 0x14001adca
cmp word [rax], 0x2d
je 0x14001adc7
cmp rcx, 1
je 0x14001adca
dec rcx
add rax, 2
cmp word [rax], 0x2d
jne 0x14001adb4
mov rdx, rax
mov rax, rdx
test rdx, rdx
je 0x14001acc3
mov r9d, 6
mov rcx, r14
movzx edx, word [rdx]
mov r8d, 0x2d
cmp dx, r8w
jb 0x14001ae16
mov r10, rax
sub r10, r14
cmp dx, r8w
ja 0x14001ae16
cmp r9, 1
je 0x14001ae1c
dec r9
add rcx, 2
movzx edx, word [r10 + rcx]
movzx r8d, word [rcx]
cmp dx, r8w
jae 0x14001adf8
add rax, 2
jmp 0x14001ada0
sub rax, r11
sar rax, 1
cmp rax, 0xffffffffffffffff
je 0x14001acc3
mov r12d, 1
jmp 0x14001ae46
sub rax, rbx
sar rax, 1
cmp rax, 0xffffffffffffffff
jne 0x14001ae46
mov r12d, 2
mov rax, qword [rbp - 0x59]
cmp rax, 8
jb 0x14001ae89
lea rdx, [rax*2 + 2]
mov rax, rsi
cmp rdx, 0x1000
jb 0x14001ae7d
add rdx, 0x27
mov rsi, qword [rsi - 8]
sub rax, rsi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14001af3d
mov rcx, rsi
call fcn.140024eac
mov r13, qword [rbp - 0x51]
mov rax, qword [rbp + 7]
cmp rax, 8
jb 0x14001aecc
lea rdx, [rax*2 + 2]
mov rax, rdi
cmp rdx, 0x1000
jb 0x14001aec0
add rdx, 0x27
mov rdi, qword [rdi - 8]
sub rax, rdi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14001af43
mov rcx, rdi
call fcn.140024eac
mov r13, qword [rbp - 0x51]
mov rdx, qword [rbp - 0x39]
cmp rdx, 8
jb 0x14001af07
lea rdx, [rdx*2 + 2]
mov rax, r13
cmp rdx, 0x1000
jb 0x14001aeff
add rdx, 0x27
mov r13, qword [r13 - 8]
sub rax, r13
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14001af37
mov rcx, r13
call fcn.140024eac
mov eax, r12d
mov rcx, qword [rbp + 0x2f]
xor rcx, rsp
call fcn.140024fc0
lea r11, [rsp + 0xc0]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call fcn.14002b74c
nop
call fcn.14002b74c
nop
call fcn.14002b74c
int3