Function at 0x1800021f0
Capabilities:
Accept command line arguments
Get file size
Read file on windows
Terminate process

Disassembly:
push rbx
push rbp
push r15
sub rsp, 0x260
mov rax, qword [0x180016070]
xor rax, rsp
mov qword [rsp + 0x250], rax
xor r15d, r15d
mov rbx, rcx
mov dword [rsp + 0x40], r15d
mov ebp, r15d
call qword [sym.imp.KERNEL32.dll_GetCommandLineW]
lea rdx, [rsp + 0x40]
mov rcx, rax
call qword [sym.imp.SHELL32.dll_CommandLineToArgvW]
mov edx, dword [rsp + 0x40]
cmp edx, 1
jle 0x180002248
lea r8d, [r15 + 1]
mov rcx, rax
call fcn.180001f40
mov rbp, rax
mov rcx, qword [section..data]
mov r9d, 1
movabs rax, 0x3f18d5a7df2c9e0c
xor rcx, rax
lea r8d, [r9 + 0x67]
lea rdx, [0x180016008]
mov qword [section..data], rcx
call section..text
lea rcx, [rsp + 0x151]
xor edx, edx
mov r8d, 0xfe
mov dword [rsp + 0x48], r15d
mov byte [rsp + 0x150], r15b
call fcn.180002ca0
lea rdx, [rsp + 0x150]
mov r8d, 0xff
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
lea rdx, [0x180016050]
lea rcx, [rsp + 0x150]
call fcn.18000309c
test rax, rax
jne 0x1800022d4
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_ExitProcess]
lea rcx, [rsp + 0x51]
xor edx, edx
mov r8d, 0xfe
mov byte [rsp + 0x50], r15b
call fcn.180002ca0
lea rdx, [rsp + 0x50]
mov r8d, 0xff
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
lea rdx, [0x180016010]
lea rcx, [rsp + 0x50]
call fcn.18000309c
test rax, rax
jne 0x18000231d
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_ExitProcess]
lea rcx, [rsp + 0x50]
or rax, 0xffffffffffffffff
inc rax
cmp byte [rcx + rax], r15b
jne 0x180002326
movsxd rcx, eax
test eax, eax
js 0x180002352
nop word [rax + rax]
cmp byte [rsp + rcx + 0x50], 0x5c
je 0x1800023ef
dec eax
dec rcx
jns 0x180002340
lea rcx, [rsp + 0x50]
dec rcx
nop word [rax + rax]
cmp byte [rcx + 1], r15b
lea rcx, [rcx + 1]
jne 0x180002360
movzx eax, word [0x18000e3b0]
mov word [rcx], ax
lea rcx, [rsp + 0x50]
dec rcx
nop dword [rax]
cmp byte [rcx + 1], r15b
lea rcx, [rcx + 1]
jne 0x180002380
lea r8, [0x180016030]
xor edx, edx
nop dword [rax]
nop word [rax + rax]
movzx eax, byte [r8 + rdx]
lea rdx, [rdx + 1]
mov byte [rcx + rdx - 1], al
test al, al
jne 0x1800023a0
xor r9d, r9d
mov qword [rsp + 0x30], r15
lea rcx, [rsp + 0x50]
lea r8d, [r9 + 1]
mov edx, 0x80000000
mov dword [rsp + 0x28], 0x80
mov dword [rsp + 0x20], 3
call qword [sym.imp.KERNEL32.dll_CreateFileA]
mov rbx, rax
cmp rax, 0xffffffffffffffff
jne 0x18000240b
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_ExitProcess]
movsxd rcx, eax
cmp rcx, 0xff
jae 0x180002405
mov byte [rsp + rcx + 0x50], r15b
jmp 0x180002352
call fcn.180002fec
int3
mov qword [rsp + 0x288], rsi
lea rdx, [rsp + 0x48]
mov rcx, rax
mov qword [rsp + 0x290], rdi
mov qword [rsp + 0x298], r14
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov ecx, eax
mov edi, eax
mov dword [rsp + 0x44], r15d
call fcn.1800025a8
mov r8d, edi
xor edx, edx
mov rcx, rax
mov r14, rax
call fcn.180002ca0
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
lea r9, [rsp + 0x44]
mov r8d, edi
mov rdx, r14
mov rcx, rbx
mov qword [rsp + 0x20], r15
call qword [sym.imp.KERNEL32.dll_ReadFile]
mov rcx, rbx
test eax, eax
jne 0x18000248f
call qword [sym.imp.KERNEL32.dll_CloseHandle]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_ExitProcess]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
cmp edi, dword [rsp + 0x44]
je 0x1800024a4
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_ExitProcess]
mov rcx, rdi
call fcn.1800025a8
mov rbx, rax
test rax, rax
je 0x1800024ff
mov r8, rdi
xor edx, edx
mov rcx, rax
call fcn.180002ca0
mov rcx, qword [r14]
lea r8, [rdi - 8]
xor rcx, qword [0x180016008]
lea rdx, [r14 + 8]
mov qword [rbx], rcx
lea rcx, [rbx + 8]
call fcn.180002720
mov rcx, qword [0x180016008]
mov r9d, 1
mov r8d, edi
mov rdx, rbx
call section..text
mov rcx, r14
call fcn.180002650
movsxd rax, dword [rbx + 0x3c]
mov ecx, 0x2000
test word [rax + rbx + 0x16], cx
jne 0x18000251d
mov r8d, edi
mov rdx, rbp
mov rcx, rbx
call fcn.1800016b0
mov rcx, rbp
call fcn.180002650
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_ExitProcess]