Function at 0x14001b110
Capabilities:
Accept command line arguments
Query environment variable
Terminate process

Disassembly:
mov rax, rsp
push rdi
push r12
push r13
sub rsp, 0x2c0
mov qword [rsp + 0x58], 0xfffffffffffffffe
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], rbp
mov qword [rax + 0x20], rsi
mov rax, qword [0x140197b10]
xor rax, rsp
mov qword [rsp + 0x2b0], rax
mov rbx, rcx
call fcn.14001d030
movzx edx, word [0x1401b5004]
mov word [0x14019ab50], dx
lea rax, [rsp + 0xa0]
mov qword [rsp + 0x48], rax
xor esi, esi
mov word [rsp + 0xa0], si
mov dword [rsp + 0x3c], esi
mov r8d, 0x104
lea rdx, [rsp + 0xa0]
lea rcx, str.LC_ALL
call qword [sym.imp.KERNEL32.dll_GetEnvironmentVariableW]
lea rdx, [rsp + 0x3c]
lea rcx, [rsp + 0x48]
call fcn.140066e40
movzx ecx, word [0x1401b5004]
test eax, eax
cmovg cx, word [rsp + 0x3c]
mov word [0x1401b5004], cx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleHandleW]
mov r12, rax
call qword [sym.imp.KERNEL32.dll_GetCommandLineW]
mov r13, rax
mov qword [rsp + 0x50], r12
call fcn.14002e6d0
mov ebp, eax
test eax, eax
jne 0x14001b200
lea r8, str.SCRIPT
lea rdx, [0x140145168]
mov rcx, r12
call fcn.14001aca0
cmp rax, 3
jle 0x14001b200
mov byte [0x14019c104], 1
jmp 0x14001b207
mov byte [0x14019c104], sil
mov edx, 0xa
lea rcx, [rsp + 0x50]
call fcn.14001d134
cmp dword [0x1401a0c8c], 1
jg 0x14001b230
cmp byte [0x14019c104], sil
jne 0x14001b230
test ebp, ebp
je 0x14001b393
mov edi, esi
call qword [sym.imp.KERNEL32.dll_GetCommandLineW]
mov qword [rsp + 0x30], rax
mov dword [rsp + 0x38], esi
mov r8d, 5
lea rdx, [rsp + 0x38]
lea rcx, [rsp + 0x30]
call fcn.140036bcc
mov qword [rsp + 0x30], rax
cmp word [rax], si
je 0x14001b281
cmp word [rax + 2], 0x3a
jne 0x14001b281
movzx ecx, word [rax + 4]
test cx, cx
je 0x14001b27c
cmp cx, 0x5c
jne 0x14001b281
cmp word [rax + 6], si
jne 0x14001b281
mov edi, 1
test ebp, ebp
jne 0x14001b2a7
cmp byte [0x14019c104], sil
jne 0x14001b2a7
or r8d, 0xffffffff
lea rdx, [rsp + 0x30]
lea rcx, str._gui
call fcn.140065780
test al, al
jne 0x14001b2d3
test edi, edi
jne 0x14001b2d3
lea r9d, [rdi + 0xa]
mov r8, r13
xor edx, edx
mov rcx, r12
call fcn.1400217f4
movsxd rcx, eax
cmp byte [0x14019c105], sil
jne 0x14001b393
call qword [sym.imp.KERNEL32.dll_ExitProcess]
or r8d, 0xffffffff
lea rdx, [rsp + 0x30]
lea rcx, str.gformat
call fcn.140065780
test al, al
je 0x14001b2ff
mov rax, qword [rsp + 0x30]
mov qword [0x14019ab60], rax
mov byte [0x14019ab52], 1
or r8d, 0xffffffff
lea rdx, [rsp + 0x30]
lea rcx, str.gformatcfg:
call fcn.140065780
test al, al
je 0x14001b393
mov byte [0x14019ab52], 1
mov rax, qword [rsp + 0x30]
mov qword [rsp + 0x40], rax
mov r8d, 5
lea rdx, [rsp + 0x38]
lea rcx, [rsp + 0x40]
call fcn.140036bcc
mov rdx, qword [rsp + 0x40]
test rdx, rdx
jne 0x14001b34c
mov ecx, esi
jmp 0x14001b35e
xor eax, eax
or rcx, 0xffffffffffffffff
mov rdi, rdx
repne scasw ax, word [rdi]
not rcx
dec rcx
mov r8d, ecx
lea rcx, [0x14019bb18]
call fcn.140002570
mov rdx, qword [0x14019bb18]
mov qword [rsp + 0x40], rdx
cmp word [rdx], si
je 0x14001b393
movsxd rax, dword [rsp + 0x38]
mov word [rdx + rax*2], si
mov rax, qword [rsp + 0x40]
mov qword [0x14019ab68], rax
call fcn.1400f6b48
lea rdx, str.MBROSTool_Applications
mov rcx, rbx
call fcn.1400f6350
mov edx, 4
mov rcx, rbx
call fcn.1400f3c58
mov ecx, 0xc8
call fcn.1400cf938
mov qword [rsp + 0x40], rax
test rax, rax
je 0x14001b3f2
lea rcx, str.CLeftView
mov qword [rsp + 0x20], rcx
lea r9, str.CMainFrame
lea r8, str.CMyExplorerDoc
mov edx, 1
mov rcx, rax
call fcn.1400f5f4c
mov rsi, rax
mov rdx, rsi
mov rcx, rbx
call fcn.1400f55b4
mov rcx, rbx
call fcn.1400f58b0
lea rcx, [rsp + 0x60]
call fcn.1400f4be8
nop
lea rdx, [rsp + 0x60]
mov rcx, rbx
call fcn.1400f53c0
test eax, eax
jne 0x14001b42f
lea rcx, [rsp + 0x60]
call fcn.1400f4cb4
xor eax, eax
jmp 0x14001b46e
mov rcx, qword [rbx + 0x40]
mov qword [rbx + 0x140], rcx
mov edx, 5
call fcn.1400d9408
mov rcx, qword [rbx + 0x40]
mov rcx, qword [rcx + 0x40]
call qword [sym.imp.USER32.dll_UpdateWindow]
mov rcx, qword [rbx + 0x140]
call fcn.1400174f0
nop
lea rcx, [rsp + 0x60]
call fcn.1400f4cb4
mov eax, 1
mov rcx, qword [rsp + 0x2b0]
xor rcx, rsp
call fcn.14010bcc0
lea r11, [rsp + 0x2c0]
mov rbx, qword [r11 + 0x28]
mov rbp, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rsp, r11
pop r13
pop r12
pop rdi
ret