Function at 0x140004fe0
Capabilities:
Accept command line arguments

Disassembly:
mov rax, rsp
push rbp
push r14
push r15
lea rbp, [rax - 0x6c8]
sub rsp, 0x7b0
mov qword [rbp - 0x50], 0xfffffffffffffffe
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], rsi
mov qword [rax + 0x20], rdi
mov rax, qword [0x140033018]
xor rax, rsp
mov qword [rbp + 0x6a0], rax
xor r15d, r15d
mov dword [rsp + 0x30], r15d
lea rdx, [rsp + 0x30]
call qword [sym.imp.shell32.dll_CommandLineToArgvW]
mov rbx, rax
xor edx, edx
mov r8d, 0x208
lea rcx, [rbp + 0x490]
call fcn.14000fcc0
xor edx, edx
mov r8d, 0x208
lea rcx, [rbp + 0x280]
call fcn.14000fcc0
call qword [0x1400234f8]
mov rdx, qword [rax]
mov rcx, rax
call qword [rdx + 8]
mov r10, qword [rax]
mov dword [rsp + 0x28], 0x104
lea rcx, [rbp + 0x490]
mov qword [rsp + 0x20], rcx
lea r9, str.arpha_winlocaldumpexe
mov r8d, dword [rsp + 0x30]
mov rdx, rbx
mov rcx, rax
call qword [r10]
call qword [0x1400234f8]
mov rdx, qword [rax]
mov rcx, rax
call qword [rdx + 8]
mov r10, qword [rax]
mov dword [rsp + 0x28], 0x104
lea rcx, [rbp + 0x280]
mov qword [rsp + 0x20], rcx
lea r9, str.arpha_winlocaldumpdir
mov r8d, dword [rsp + 0x30]
mov rdx, rbx
mov rcx, rax
call qword [r10]
cmp word [rbp + 0x490], r15w
je 0x1400050fe
cmp word [rbp + 0x280], r15w
je 0x1400050fe
lea rdx, [rbp + 0x280]
lea rcx, [rbp + 0x490]
call qword [0x1400234e8]
xor eax, eax
jmp 0x1400055d9
call qword [0x1400234f0]
mov r9, qword [rax]
mov r8d, dword [rsp + 0x30]
mov rdx, rbx
mov rcx, rax
call qword [r9]
test al, al
je 0x1400050f7
mov rcx, rbx
call qword [sym.imp.kernel32.dll_LocalFree]
call qword [0x1400234f0]
mov rdx, qword [rax]
mov rcx, rax
call qword [rdx + 0x10]
mov esi, eax
cmp eax, 1
jle 0x1400050f7
xor edx, edx
mov r8d, 0x208
lea rcx, [rbp + 0x70]
call fcn.14000fcc0
cmp esi, 2
je 0x140005165
cmp esi, 3
jne 0x140005198
call qword [0x1400234f0]
mov rdx, qword [rax]
mov rcx, rax
call qword [rdx + 0x90]
call qword [0x1400234f0]
mov r9, qword [rax]
mov r8d, 0x104
lea rdx, [rbp + 0x70]
mov rcx, rax
call qword [r9 + 0xa8]
call qword [0x1400234f0]
mov rdx, qword [rax]
mov rcx, rax
call qword [rdx + 8]
xor eax, eax
jmp 0x1400055d9
cmp esi, 4
jne 0x1400051e8
call qword [0x1400234f0]
mov rdx, qword [rax]
mov rcx, rax
call qword [rdx + 0x90]
call qword [0x1400234f0]
mov r9, qword [rax]
mov r8d, 0x104
lea rdx, [rbp + 0x70]
mov rcx, rax
call qword [r9 + 0xa8]
call qword [0x1400234f0]
mov r9, qword [rax]
xor r8d, r8d
lea rdx, [rbp + 0x70]
mov rcx, rax
call qword [r9 + 0xc0]
jmp 0x140005182
lea rax, vtable.WTL::CMessageLoop.0
mov qword [rsp + 0x50], rax
mov qword [rsp + 0x58], r15
mov qword [rsp + 0x60], r15
mov qword [rsp + 0x68], r15
mov qword [rsp + 0x70], r15
mov rdi, qword [0x140034038]
lea rcx, [rdi + 0x18]
call qword [sym.imp.kernel32.dll_EnterCriticalSection]
call qword [sym.imp.kernel32.dll_GetCurrentThreadId]
mov r14d, eax
mov rbx, qword [0x1400341d8]
mov ecx, dword [rbx + 0x10]
inc ecx
movsxd rdx, ecx
mov r8d, 4
mov rcx, qword [rbx]
call fcn.140012578
test rax, rax
je 0x140005292
mov qword [rbx], rax
mov eax, dword [rbx + 0x10]
inc eax
movsxd rdx, eax
mov r8d, 8
mov rcx, qword [rbx + 8]
call fcn.140012578
test rax, rax
je 0x140005292
mov qword [rbx + 8], rax
movsxd rdx, dword [rbx + 0x10]
mov rcx, qword [rbx]
lea r8, [rcx + rdx*4]
test r8, r8
je 0x14000527e
mov dword [r8], r14d
mov rax, qword [rbx + 8]
lea rcx, [rax + rdx*8]
test rcx, rcx
je 0x14000528f
lea rax, [rsp + 0x50]
mov qword [rcx], rax
inc dword [rbx + 0x10]
lea rcx, [rdi + 0x18]
call qword [sym.imp.kernel32.dll_LeaveCriticalSection]
call qword [0x1400234f0]
mov rdx, qword [rax]
mov rcx, rax
call qword [rdx + 0x18]
mov rbx, rax
call fcn.140001430
mov rcx, rax
test rax, rax
je 0x140005605
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rsp + 0x38], rax
mov rdi, 0xffffffffffffffff
test rbx, rbx
je 0x140005301
cmp rbx, 0x10000
jae 0x1400052f2
movzx edx, bx
lea rcx, [rsp + 0x38]
call fcn.140002f40
jmp 0x140005315
mov rax, rdi
inc rax
cmp word [rbx + rax*2], 0
jne 0x1400052f5
jmp 0x140005304
mov eax, r15d
mov r8d, eax
mov rdx, rbx
lea rcx, [rsp + 0x38]
call fcn.140005610
nop
call fcn.140006f50
mov rcx, rax
lea rdx, [rsp + 0x38]
call fcn.140006ff0
nop
mov rdx, qword [rsp + 0x38]
add rdx, 0xffffffffffffffe8
lock xadd dword [rdx + 0x10], edi
sub edi, 1
jg 0x140005344
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
lea rcx, [rbp - 0x30]
call fcn.14000a4e0
nop
mov rax, qword [rbp - 8]
test rax, rax
jne 0x140005370
call fcn.14000d894
mov qword [rbp - 8], rax
test rax, rax
jne 0x140005370
lea ecx, [rax + 0xe]
call qword [sym.imp.kernel32.dll_SetLastError]
jmp 0x1400053e4
xor r8d, r8d
xor edx, edx
mov rcx, rax
call fcn.14000d9c4
lea rax, [rbp - 0x30]
mov qword [rbp - 0x20], rax
call qword [sym.imp.kernel32.dll_GetCurrentThreadId]
mov dword [rbp - 0x18], eax
lea rcx, [0x1400340a8]
call qword [sym.imp.kernel32.dll_EnterCriticalSection]
mov rax, qword [0x1400340d0]
mov qword [rbp - 0x10], rax
lea rax, [rbp - 0x20]
mov qword [0x1400340d0], rax
lea rcx, [0x1400340a8]
call qword [sym.imp.kernel32.dll_LeaveCriticalSection]
mov qword [rsp + 0x20], r15
lea r9, [0x140005830]
xor r8d, r8d
mov edx, 0x81
mov rcx, qword [0x140034280]
call qword [sym.imp.user32.dll_CreateDialogParamW]
test rax, rax
jne 0x140005444
call qword [0x1400234f0]
mov rdx, qword [rax]
mov rcx, rax
call qword [rdx + 0x90]
call qword [0x1400234f0]
mov r9, qword [rax]
mov r8d, 0x104
lea rdx, [rbp + 0x70]
mov rcx, rax
call qword [r9 + 0xa8]
call qword [0x1400234f0]
mov r9, qword [rax]
xor r8d, r8d
lea rdx, [rbp + 0x70]
mov rcx, rax
call qword [r9 + 0xc0]
call qword [0x1400234f0]
mov rdx, qword [rax]
mov rcx, rax
call qword [rdx + 8]
mov edi, r15d
jmp 0x1400055a5
cmp esi, 5
sete dl
lea rcx, [rbp - 0x30]
call fcn.14000ae50
test al, al
jne 0x14000545f
mov edi, r15d
jmp 0x1400055a5
mov edi, 1
mov ebx, r15d
test edi, edi
je 0x1400054a4
nop dword [rax + rax]
mov dword [rsp + 0x20], r15d
xor r9d, r9d
xor r8d, r8d
xor edx, edx
lea rcx, [rsp + 0x78]
call qword [sym.imp.user32.dll_PeekMessageW]
test eax, eax
jne 0x1400054a4
mov edx, ebx
lea rcx, [rsp + 0x50]
mov rax, qword [rsp + 0x50]
call qword [rax + 8]
inc ebx
test eax, eax
jne 0x140005470
mov edi, r15d
xor r9d, r9d
xor r8d, r8d
xor edx, edx
lea rcx, [rsp + 0x78]
call qword [sym.imp.user32.dll_GetMessageW]
cmp eax, 0xffffffff
je 0x140005467
test eax, eax
je 0x14000552e
lea rdx, [rsp + 0x78]
lea rcx, [rsp + 0x50]
mov rax, qword [rsp + 0x50]
call qword [rax]
test eax, eax
jne 0x1400054eb
lea rcx, [rsp + 0x78]
call qword [sym.imp.user32.dll_TranslateMessage]
lea rcx, [rsp + 0x78]
call qword [sym.imp.user32.dll_DispatchMessageW]
mov eax, dword [rbp - 0x80]
sub eax, 0xf
je 0x14000551c
sub eax, 0x91
je 0x14000551c
sub eax, 0x78
je 0x14000551c
cmp eax, 0xe8
je 0x14000551c
mov ecx, 1
mov edi, ecx
mov eax, r15d
test ecx, ecx
cmove eax, ebx
mov ebx, eax
jmp 0x140005467
mov ecx, r15d
mov eax, r15d
test ecx, ecx
cmove eax, ebx
mov ebx, eax
jmp 0x140005467
mov edi, dword [rbp - 0x78]
lea rcx, [rbp - 0x30]
call fcn.14000ac60
mov dword [rsp + 0x40], r15d
call qword [0x1400234f0]
mov r8, qword [rax]
lea rdx, [rsp + 0x40]
mov rcx, rax
call qword [r8 + 0x58]
mov rbx, qword [0x140034038]
add rbx, 0x18
mov qword [rbp - 0x48], rbx
mov rcx, rbx
call qword [sym.imp.kernel32.dll_EnterCriticalSection]
mov byte [rbp - 0x40], 1
call qword [sym.imp.kernel32.dll_GetCurrentThreadId]
mov dword [rsp + 0x44], eax
lea rdx, [rsp + 0x44]
mov rcx, qword [0x1400341d8]
call fcn.140004eb0
mov rcx, rbx
call qword [sym.imp.kernel32.dll_LeaveCriticalSection]
nop
call qword [0x1400234f0]
mov rdx, qword [rax]
mov rcx, rax
call qword [rdx + 8]
nop
lea rcx, [rbp - 0x30]
call fcn.140001920
nop
mov rcx, qword [rsp + 0x68]
test rcx, rcx
je 0x1400055c3
call fcn.140012484
mov qword [rsp + 0x68], r15
mov qword [rsp + 0x70], r15
mov rcx, qword [rsp + 0x58]
test rcx, rcx
je 0x1400055d7
call fcn.140012484
mov eax, edi
mov rcx, qword [rbp + 0x6a0]
xor rcx, rsp
call fcn.14000e3e0
lea r11, [rsp + 0x7b0]
mov rbx, qword [r11 + 0x28]
mov rsi, qword [r11 + 0x30]
mov rdi, qword [r11 + 0x38]
mov rsp, r11
pop r15
pop r14
pop rbp
ret
mov ecx, 0x80004005
call fcn.140002750
int3