Function at 0x1400013b0
Capabilities:
Accept command line arguments
Extract resource via kernel32 functions

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x1030]
mov eax, 0x1130
call fcn.1400a3420
sub rsp, rax
mov rax, qword [0x140148020]
xor rax, rsp
mov qword [rbp + 0x1020], rax
mov r13, rcx
mov byte [rcx + 8], 0
xor r15d, r15d
mov qword [rcx + 0x10], r15
mov qword [rcx + 0x18], r15
mov qword [rcx + 0x20], r15
lea rax, vtable.InstallController.0
mov qword [rcx], rax
mov qword [rcx + 0x28], r15
mov qword [rcx + 0x30], r15
mov qword [rcx + 0x38], r15
mov qword [rcx + 0x40], r15
mov qword [rcx + 0x48], r15
mov qword [rcx + 0x50], r15
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleHandleW]
mov rsi, rax
lea r8, [0x14010c3d8]
mov edx, 0x85
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_FindResourceW]
mov rdi, rax
mov bl, 1
test rax, rax
je 0x14000147f
mov rdx, rax
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_LoadResource]
test rax, rax
je 0x140001476
mov rdx, rdi
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_SizeofResource]
movzx ebx, bl
test eax, eax
cmovne ebx, r15d
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_FreeResource]
mov byte [0x140151608], bl
xor edx, edx
mov r8d, 0x800
lea rcx, [rbp + 0x20]
call fcn.1400a5270
mov rdi, r15
lea rsi, [0x14010c3e8]
mov rbx, rsi
mov eax, dword [0x14010c3e8]
nop dword [rax]
movzx ecx, ax
call fcn.1400b4a1c
mov r12d, 8
test eax, eax
je 0x1400016ad
cmp word [rbx], 0x3d
je 0x1400016ad
inc rdi
lea rbx, [rsi + rdi*2]
movzx ecx, word [rbx]
movzx eax, cx
test cx, cx
jne 0x1400014b0
movzx eax, byte [0x140151678]
test al, al
jne 0x140001525
movzx eax, byte [0x140151678]
test al, al
jne 0x140001525
call qword [sym.imp.KERNEL32.dll_GetCommandLineW]
mov rcx, rax
lea rdx, [0x140151840]
call qword [sym.imp.SHELL32.dll_CommandLineToArgvW]
mov qword [0x140151848], rax
test rax, rax
je 0x1400016ad
mov byte [0x140151678], 1
mov r14d, 1
cmp dword [0x140151840], r14d
jle 0x1400016ad
mov r15, r12
nop dword [rax + rax]
mov rax, qword [0x140151848]
mov rsi, qword [r15 + rax]
xor edi, edi
cmp word [rsi], di
je 0x140001578
movzx ebx, word [rsi + rdi*2]
test bx, bx
je 0x140001578
movzx ecx, bx
call fcn.1400b4a10
test eax, eax
jne 0x140001573
movzx ecx, bx
call fcn.1400b4a28
test eax, eax
je 0x140001578
inc rdi
jmp 0x140001552
movzx ecx, word [rsi + rdi*2]
cmp cx, 0x2f
jne 0x14000164e
lea rbx, [rdi + 1]
lea rbx, [rsi + rbx*2]
movzx eax, word [rbx]
test ax, ax
jne 0x1400015b2
cmp cx, 0x2d
jne 0x140001697
cmp ax, cx
je 0x140001697
test ax, ax
je 0x140001697
test rbx, rbx
je 0x140001697
movzx ecx, word [rbx]
call fcn.1400b4a1c
test eax, eax
je 0x140001697
cmp word [rbx], 0x3d
je 0x140001697
mov edx, 0x3d
mov rcx, rbx
call fcn.1400a4858
mov rdi, rax
test rax, rax
je 0x140001680
cmp word [rax], 0
je 0x140001680
sub rax, rbx
and rax, 0xfffffffffffffffe
cmp rax, 2
jne 0x140001697
lea r8d, [rax - 1]
lea rdx, [0x14010c3e8]
mov rcx, rbx
call fcn.1400b4a80
test eax, eax
jne 0x140001697
add rdi, 2
je 0x140001885
mov r9d, 0x3ff
mov r8, rdi
lea edx, [r9 + 1]
lea rcx, [rbp + 0x20]
call fcn.1400b4c1c
xor eax, eax
mov word [rbp + 0x81e], ax
jmp 0x14000188b
cmp cx, 0x2d
jne 0x140001697
lea rbx, [rdi + 1]
lea rbx, [rsi + rbx*2]
movzx eax, word [rbx]
cmp ax, cx
jne 0x140001596
lea rdx, [rsi + rdi*2]
cmp word [rdx + 4], 0
je 0x140001596
lea rbx, [rdx + 4]
jmp 0x1400015b2
lea rdx, [0x14010c3e8]
mov rcx, rbx
call fcn.1400a9534
test eax, eax
je 0x140001885
inc r14d
add r15, r12
cmp r14d, dword [0x140151840]
jl 0x140001540
xor r15d, r15d
mov rdi, r15
lea rsi, str.slient
mov rbx, rsi
movzx eax, word [str.slient]
movzx ecx, ax
call fcn.1400b4a1c
test eax, eax
je 0x140001892
cmp word [rbx], 0x3d
je 0x140001892
inc rdi
lea rbx, [rsi + rdi*2]
movzx eax, word [rbx]
test ax, ax
jne 0x1400016c1
movzx eax, byte [0x140151678]
test al, al
jne 0x14000172d
movzx eax, byte [0x140151678]
test al, al
jne 0x14000172d
call qword [sym.imp.KERNEL32.dll_GetCommandLineW]
mov rcx, rax
lea rdx, [0x140151840]
call qword [sym.imp.SHELL32.dll_CommandLineToArgvW]
mov qword [0x140151848], rax
test rax, rax
je 0x140001892
mov byte [0x140151678], 1
mov r14d, 1
cmp dword [0x140151840], r14d
jle 0x140001892
mov r15, r12
nop dword [rax]
nop word [rax + rax]
mov rax, qword [0x140151848]
mov rsi, qword [r15 + rax]
xor eax, eax
mov edi, eax
cmp word [rsi], ax
je 0x14000178a
movzx ebx, word [rsi + rdi*2]
test bx, bx
je 0x14000178a
movzx ecx, bx
call fcn.1400b4a10
test eax, eax
jne 0x140001785
movzx ecx, bx
call fcn.1400b4a28
test eax, eax
je 0x14000178a
inc rdi
jmp 0x140001764
movzx ecx, word [rsi + rdi*2]
cmp cx, 0x2f
jne 0x14000182c
lea rbx, [rdi + 1]
lea rbx, [rsi + rbx*2]
movzx eax, word [rbx]
test ax, ax
jne 0x1400017c4
cmp cx, 0x2d
jne 0x140001871
cmp ax, cx
je 0x140001871
test ax, ax
je 0x140001871
test rbx, rbx
je 0x140001871
movzx ecx, word [rbx]
call fcn.1400b4a1c
test eax, eax
je 0x140001871
cmp word [rbx], 0x3d
je 0x140001871
mov edx, 0x3d
mov rcx, rbx
call fcn.1400a4858
mov rdi, rax
test rax, rax
je 0x14000185e
cmp word [rax], 0
je 0x14000185e
sub rax, rbx
and rax, 0xfffffffffffffffe
cmp rax, 0xc
jne 0x140001871
lea r8d, [rax - 6]
lea rdx, str.slient
mov rcx, rbx
call fcn.1400b4a80
test eax, eax
je 0x140001620
jmp 0x140001871
cmp cx, 0x2d
jne 0x140001871
lea rbx, [rdi + 1]
lea rbx, [rsi + rbx*2]
movzx eax, word [rbx]
cmp ax, cx
jne 0x1400017a8
lea rdx, [rsi + rdi*2]
cmp word [rdx + 4], 0
je 0x1400017a8
lea rbx, [rdx + 4]
jmp 0x1400017c4
lea rdx, str.slient
mov rcx, rbx
call fcn.1400a9534
test eax, eax
je 0x140001885
inc r14d
add r15, r12
cmp r14d, dword [0x140151840]
jge 0x140001892
jmp 0x140001750
xor eax, eax
mov word [rbp + 0x20], ax
mov byte [0x140148e20], 1
lea rdx, [0x140151948]
cmp qword [0x140151960], r12
cmovae rdx, qword [0x140151948]
mov r8, qword [0x140151958]
lea rbx, [0x140148ef0]
mov rcx, rbx
call fcn.1400040b0
cmp qword [0x140148f00], 0
jne 0x1400018f2
lea rdx, [0x140151a78]
cmp rbx, rdx
je 0x1400018f2
cmp qword [0x140151a90], r12
cmovae rdx, qword [0x140151a78]
mov r8, qword [0x140151a88]
mov rcx, rbx
call fcn.1400040b0
lea rsi, str.true
lea rbx, str.false
mov rdi, rbx
cmp byte [0x140151608], 0
cmovne rdi, rsi
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
xorps xmm1, xmm1
movdqa xmmword [rsp + 0x50], xmm1
mov r8d, 6
lea rdx, str.Online
lea rcx, [rsp + 0x40]
call fcn.140004fe0
nop
xorps xmm0, xmm0
movups xmmword [rsp + 0x60], xmm0
xorps xmm1, xmm1
movdqa xmmword [rsp + 0x70], xmm1
mov r15, 0xffffffffffffffff
mov r8, r15
inc r8
cmp word [rdi + r8*2], 0
jne 0x140001952
mov rdx, rdi
lea rcx, [rsp + 0x60]
call fcn.140004fe0
nop
cmp byte [0x140148e20], 0
cmovne rbx, rsi
xorps xmm0, xmm0
movups xmmword [rbp - 0x80], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp - 0x70], xmm1
mov r8d, 6
lea rdx, str.Silent
lea rcx, [rbp - 0x80]
call fcn.140004fe0
nop
xorps xmm0, xmm0
movups xmmword [rbp - 0x60], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp - 0x50], xmm1
mov r8, r15
nop
inc r8
cmp word [rbx + r8*2], 0
jne 0x1400019b0
mov rdx, rbx
lea rcx, [rbp - 0x60]
call fcn.140004fe0
nop
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x20], xmm0
mov ecx, 0x60
call fcn.1400a2614
mov rdi, rax
mov qword [rax], rax
mov qword [rax + 8], rax
mov qword [rax + 0x10], rax
mov word [rax + 0x18], 0x101
mov qword [rsp + 0x20], rax
lea rbx, [rsp + 0x40]
nop dword [rax]
mov r8, rbx
mov rdx, rdi
lea rcx, [rsp + 0x20]
call fcn.1400042c0
add rbx, 0x40
lea rax, [rbp - 0x40]
cmp rbx, rax
jne 0x140001a00
mov rsi, qword [0x140151600]
mov rdi, qword [rsp + 0x20]
mov rbx, qword [rdi]
mov r14, qword [rsi + 0xd8]
cmp rbx, rdi
je 0x140001aa9
nop dword [rax + rax]
lea r8, [rbx + 0x20]
mov rdx, r14
lea rcx, [rsi + 0xd8]
call fcn.1400042c0
mov rax, qword [rbx + 0x10]
cmp byte [rax + 0x19], 0
je 0x140001a7f
mov rax, qword [rbx + 8]
cmp byte [rax + 0x19], 0
jne 0x140001a7a
cmp rbx, qword [rax + 0x10]
jne 0x140001a7a
mov rbx, rax
mov rax, qword [rax + 8]
cmp byte [rax + 0x19], 0
je 0x140001a67
mov rbx, rax
jmp 0x140001a9f
mov rbx, rax
mov rcx, qword [rax]
cmp byte [rcx + 0x19], 0
jne 0x140001a9f
nop dword [rax + rax]
mov rbx, rcx
mov rax, qword [rcx]
mov rcx, rax
cmp byte [rax + 0x19], 0
je 0x140001a90
cmp rbx, rdi
jne 0x140001a40
mov rdi, qword [rsp + 0x20]
mov r8, qword [rdi + 8]
lea rdx, [rsp + 0x20]
lea rcx, [rsp + 0x20]
call fcn.1400050e0
mov edx, 0x60
mov rcx, qword [rsp + 0x20]
call fcn.1400a2510
nop
lea r9, [0x140005470]
mov edx, 0x40
lea r8d, [rdx - 0x3e]
lea rcx, [rsp + 0x40]
call fcn.1400a2518
xor edx, edx
mov r8d, 0x800
lea rcx, [rbp + 0x820]
call fcn.1400a5270
xor eax, eax
mov edi, eax
lea rsi, str.InstallMethod
mov rbx, rsi
movzx eax, word [str.InstallMethod]
nop
movzx ecx, ax
call fcn.1400b4a1c
test eax, eax
je 0x140001e7f
cmp word [rbx], 0x3d
je 0x140001e7f
inc rdi
lea rbx, [rsi + rdi*2]
movzx eax, word [rbx]
test ax, ax
jne 0x140001b10
movzx eax, byte [0x140151678]
test al, al
jne 0x140001b7c
movzx eax, byte [0x140151678]
test al, al
jne 0x140001b7c
call qword [sym.imp.KERNEL32.dll_GetCommandLineW]
mov rcx, rax
lea rdx, [0x140151840]
call qword [sym.imp.SHELL32.dll_CommandLineToArgvW]
mov qword [0x140151848], rax
test rax, rax
je 0x140001e7f
mov byte [0x140151678], 1
mov r14d, 1
cmp dword [0x140151840], r14d
jle 0x140001e7f
nop
mov rax, qword [0x140151848]
mov rsi, qword [r12 + rax]
xor eax, eax
mov edi, eax
cmp word [rsi], ax
je 0x140001bca
movzx ebx, word [rsi + rdi*2]
test bx, bx
je 0x140001bca
movzx ecx, bx
call fcn.1400b4a10
test eax, eax
jne 0x140001bc5
movzx ecx, bx
call fcn.1400b4a28
test eax, eax
je 0x140001bca
inc rdi
jmp 0x140001ba4
movzx ecx, word [rsi + rdi*2]
cmp cx, 0x2f
jne 0x140001ca3
lea rbx, [rdi + 1]
lea rbx, [rsi + rbx*2]
movzx eax, word [rbx]
test ax, ax
jne 0x140001c04
cmp cx, 0x2d
jne 0x140001ce8
cmp ax, cx
je 0x140001ce8
test ax, ax
je 0x140001ce8
test rbx, rbx
je 0x140001ce8
movzx ecx, word [rbx]
call fcn.1400b4a1c
test eax, eax
je 0x140001ce8
cmp word [rbx], 0x3d
je 0x140001ce8
mov edx, 0x3d
mov rcx, rbx
call fcn.1400a4858
mov rdi, rax
test rax, rax
je 0x140001cd5
cmp word [rax], 0
je 0x140001cd5
mov rdx, rax
sub rdx, rbx
and rdx, 0xfffffffffffffffe
cmp rdx, 0x1a
jne 0x140001ce8
lea r8d, [rdx - 0xd]
lea rdx, str.InstallMethod
mov rcx, rbx
call fcn.1400b4a80
test eax, eax
jne 0x140001ce8
add rdi, 2
je 0x140001d01
mov r9d, 0x3ff
mov r8, rdi
lea edx, [r9 + 1]
lea rcx, [rbp + 0x820]
call fcn.1400b4c1c
xor eax, eax
mov word [rbp + 0x101e], ax
jmp 0x140001d0a
cmp cx, 0x2d
jne 0x140001ce8
lea rbx, [rdi + 1]
lea rbx, [rsi + rbx*2]
movzx eax, word [rbx]
cmp ax, cx
jne 0x140001be8
lea rdx, [rsi + rdi*2]
cmp word [rdx + 4], 0
je 0x140001be8
lea rbx, [rdx + 4]
jmp 0x140001c04
lea rdx, str.InstallMethod
mov rcx, rbx
call fcn.1400a9534
test eax, eax
je 0x140001d01
inc r14d
add r12, 8
cmp r14d, dword [0x140151840]
jge 0x140001e7f
jmp 0x140001b90
xor eax, eax
mov word [rbp + 0x820], ax
xorps xmm0, xmm0
movups xmmword [rbp], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x10], xmm1
lea rax, [rbp + 0x820]
inc r15
cmp word [rax + r15*2], 0
jne 0x140001d20
mov r8, r15
lea rdx, [rbp + 0x820]
lea rcx, [rbp]
call fcn.140004fe0
nop
xorps xmm0, xmm0
movups xmmword [rbp - 0x40], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp - 0x30], xmm1
mov r8d, InitCommonControls
lea rdx, str.InstallMethod
lea rcx, [rbp - 0x40]
call fcn.140004fe0
nop
lea rdx, [rbp]
lea rcx, [rbp - 0x20]
call fcn.1400041e0
nop
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x30], xmm0
mov ecx, 0x60
call fcn.1400a2614
mov qword [rax], rax
mov qword [rax + 8], rax
mov qword [rax + 0x10], rax
mov word [rax + 0x18], 0x101
mov qword [rsp + 0x30], rax
lea r8, [rbp - 0x40]
mov rdx, rax
lea rcx, [rsp + 0x30]
call fcn.1400042c0
nop
mov rsi, qword [0x140151600]
mov rdi, qword [rsp + 0x30]
mov rbx, qword [rdi]
mov r14, qword [rsi + 0xd8]
cmp rbx, rdi
je 0x140001e39
nop dword [rax]
lea r8, [rbx + 0x20]
mov rdx, r14
lea rcx, [rsi + 0xd8]
call fcn.1400042c0
mov rax, qword [rbx + 0x10]
cmp byte [rax + 0x19], 0
je 0x140001e0f
mov rax, qword [rbx + 8]
cmp byte [rax + 0x19], 0
jne 0x140001e0a
cmp rbx, qword [rax + 0x10]
jne 0x140001e0a
mov rbx, rax
mov rax, qword [rax + 8]
cmp byte [rax + 0x19], 0
je 0x140001df7
mov rbx, rax
jmp 0x140001e2f
mov rbx, rax
mov rcx, qword [rax]
cmp byte [rcx + 0x19], 0
jne 0x140001e2f
nop dword [rax + rax]
mov rbx, rcx
mov rax, qword [rcx]
mov rcx, rax
cmp byte [rax + 0x19], 0
je 0x140001e20
cmp rbx, rdi
jne 0x140001dd0
mov rdi, qword [rsp + 0x30]
mov r8, qword [rdi + 8]
lea rdx, [rsp + 0x30]
lea rcx, [rsp + 0x30]
call fcn.1400050e0
mov edx, 0x60
mov rcx, qword [rsp + 0x30]
call fcn.1400a2510
nop
lea r9, [0x140005470]
mov edx, 0x40
lea r8d, [rdx - 0x3f]
lea rcx, [rbp - 0x40]
call fcn.1400a2518
nop
lea rcx, [rbp]
call fcn.1400053f0
mov rax, r13
mov rcx, qword [rbp + 0x1020]
xor rcx, rsp
call fcn.1400a24f0
lea r11, [rsp + 0x1130]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret