Function at 0x18001b7a0
Capabilities:
Accept command line arguments
Create thread

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rbp
mov qword [rsp + 0x20], rsi
push rdi
sub rsp, 0x60
mov rax, qword [0x180058240]
xor rax, rsp
mov qword [rsp + 0x50], rax
mov ebx, edx
call qword [sym.imp.KERNEL32.dll_DisableThreadLibraryCalls]
call qword [sym.imp.KERNEL32.dll_GetCommandLineW]
mov rdi, rax
mov r10, 0xffffffffffffffff
nop dword [rax + rax]
inc r10
cmp word [rax + r10*2], 0
jne 0x18001b7e0
cmp r10, 0xb
jb 0x18001bb3d
lea r11, [rax + r10*2]
mov rcx, rdi
xor ebp, ebp
lea rsi, str.Spotify.exe
nop word [rax + rax]
lea rax, [r11 - 0x14]
sub rax, rcx
sar rax, 1
mov rdx, rbp
je 0x18001b83b
cmp word [rcx], 0x53
je 0x18001b838
cmp rax, 1
je 0x18001b83b
dec rax
add rcx, 2
cmp word [rcx], 0x53
jne 0x18001b825
mov rdx, rcx
mov rcx, rdx
test rdx, rdx
je 0x18001bb3d
mov r8d, 0xb
mov rdx, rsi
mov r9, rcx
sub r9, rsi
nop word [rax + rax]
movzx eax, word [rdx + r9]
cmp ax, word [rdx]
jne 0x18001baf7
add rdx, 2
sub r8, 1
jne 0x18001b860
sub rcx, rdi
sar rcx, 1
cmp rcx, 0xffffffffffffffff
je 0x18001bb3d
cmp ebx, 1
jne 0x18001bb3d
add r10, 0xfffffffffffffffa
lea r11, [rdi + r10*2]
mov rax, rdi
lea r10, str.__type
nop dword [rax]
nop word [rax + rax]
mov rcx, r11
sub rcx, rax
sar rcx, 1
mov rdx, rbp
je 0x18001b8da
cmp word [rax], 0x2d
je 0x18001b8d7
cmp rcx, 1
je 0x18001b8da
dec rcx
add rax, 2
cmp word [rax], 0x2d
jne 0x18001b8c4
mov rdx, rax
mov rax, rdx
test rdx, rdx
je 0x18001b919
mov r8d, 7
mov rdx, r10
mov r9, rax
sub r9, r10
movzx ecx, word [rdx + r9]
cmp cx, word [rdx]
jne 0x18001bb00
add rdx, 2
sub r8, 1
jne 0x18001b8f1
sub rax, rdi
sar rax, 1
cmp rax, 0xffffffffffffffff
jne 0x18001bb3d
call fcn.180013810
xorps xmm0, xmm0
movups xmmword [rsp + 0x30], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x40], xmm1
mov r8d, 9
lea rdx, str.Block_Ads
lea rcx, [rsp + 0x30]
call fcn.1800013b0
nop
lea rdx, [rsp + 0x30]
lea rcx, [0x180058c80]
call fcn.18001b150
movzx ebx, byte [rax]
mov rdx, qword [rsp + 0x48]
cmp rdx, 7
jbe 0x18001b99d
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18001b998
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18001baf0
call fcn.180028dfc
test bl, bl
je 0x18001b9cc
mov qword [rsp + 0x28], rbp
mov dword [rsp + 0x20], ebp
xor r9d, r9d
lea r8, [0x1800036e0]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
test rax, rax
je 0x18001b9cc
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_CloseHandle]
xorps xmm0, xmm0
movups xmmword [rsp + 0x30], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x40], xmm1
mov r8d, 0xc
lea rdx, str.Block_Banner
lea rcx, [rsp + 0x30]
call fcn.1800013b0
nop
lea rdx, [rsp + 0x30]
lea rcx, [0x180058c80]
call fcn.18001b150
movzx ebx, byte [rax]
mov rdx, qword [rsp + 0x48]
cmp rdx, 7
jbe 0x18001ba4b
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18001ba46
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18001baf0
call fcn.180028dfc
test bl, bl
je 0x18001ba7a
mov qword [rsp + 0x28], rbp
mov dword [rsp + 0x20], ebp
xor r9d, r9d
lea r8, [0x180003810]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
test rax, rax
je 0x18001ba7a
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_CloseHandle]
xorps xmm0, xmm0
movups xmmword [rsp + 0x30], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x40], xmm1
mov r8d, 0x10
lea rdx, str.Enable_Developer
lea rcx, [rsp + 0x30]
call fcn.1800013b0
nop
lea rdx, [rsp + 0x30]
lea rcx, [0x180058c80]
call fcn.18001b150
movzx ebx, byte [rax]
mov rdx, qword [rsp + 0x48]
cmp rdx, 7
jbe 0x18001bb0e
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18001bb09
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x18001bb09
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
add rcx, 2
jmp 0x18001b810
add rax, 2
jmp 0x18001b8b0
call fcn.180028dfc
test bl, bl
je 0x18001bb3d
mov qword [rsp + 0x28], rbp
mov dword [rsp + 0x20], ebp
xor r9d, r9d
lea r8, [0x1800038d0]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
test rax, rax
je 0x18001bb3d
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, 1
mov rcx, qword [rsp + 0x50]
xor rcx, rsp
call fcn.180029320
lea r11, [rsp + 0x60]
mov rbx, qword [r11 + 0x18]
mov rbp, qword [r11 + 0x20]
mov rsi, qword [r11 + 0x28]
mov rsp, r11
pop rdi
ret