Function at 0x18001ffd0
Capabilities:
Accept command line arguments

Disassembly:
mov qword [rsp + 0x20], r9
mov qword [rsp + 0x18], r8
mov qword [rsp + 0x10], rdx
mov qword [rsp + 8], rcx
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x68]
sub rsp, 0x168
mov eax, dword [rbp + 0xe0]
mov r10, r8
mov rbx, qword [rsp + 0x58]
mov r8, rcx
imul ecx, eax, 0x63b
mov r14d, eax
mov dword [rsp + 0x50], ecx
cmp eax, ecx
ja 0x18002019d
mov r13, qword [rbp + 0xd8]
xor r11d, r11d
mov r15, qword [rsp + 0x58]
mov edi, dword [rbp + 0xe0]
nop word [rax + rax]
cmp r14d, 0x4311
ja 0x180020160
je 0x180020155
cmp r14d, 0x3b
je 0x180020141
cmp r14d, 0x69
je 0x180020131
cmp r14d, 0x11c
je 0x1800200fa
cmp r14d, 0x21a6
je 0x1800200a1
cmp r14d, 0x3be2
jne 0x1800206d1
mov r15, qword [rbp - 0x40]
mov rax, qword [r9]
mov ecx, dword [rsp + 0x50]
add rax, r15
mov qword [rbp - 0x48], rax
jmp 0x1800206d1
mov r14, qword [rbp - 0x28]
mov eax, 1
xchg dword [r14 + 0x120], eax
call qword [sym.imp.KERNEL32.dll_GetCommandLineA]
nop word [rax + rax]
mov esi, 0xf3
mov eax, esi
sub eax, 0xf3
je 0x1800200de
cmp eax, 1
jne 0x1800200ee
lea ecx, [rax + 9]
call qword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x1800200ee
xor eax, eax
xor r11d, r11d
lock cmpxchg dword [r14 + 0x120], r11d
je 0x180020151
inc esi
cmp esi, 0xf5
jb 0x1800200c5
jmp 0x1800200c0
mov rsi, qword [rbp + 0xd0]
xor r9d, r9d
mov rdx, rsi
mov dword [rsp + 0x28], 0xdd
xor r8d, r8d
mov qword [rsp + 0x20], r11
xor ecx, ecx
call fcn.180055400
mov ecx, dword [rsp + 0x50]
xor r11d, r11d
mov qword [rsi + 0x2a8], r11
jmp 0x1800206d1
mov rax, qword [rbp + 0xd0]
mov qword [rbp - 0x40], rax
jmp 0x1800206d1
mov rax, qword [rbp + 0xd0]
mov qword [rbp - 0x28], rax
jmp 0x1800206d1
mov ecx, dword [rsp + 0x50]
mov r14d, 0x4311
jmp 0x1800206d1
cmp r14d, 0x775b
je 0x1800206c4
cmp r14d, 0xb2d4
je 0x1800205d9
cmp r14d, 0xee4d
je 0x1800203bc
cmp r14d, 0x129c6
je 0x1800201c0
cmp r14d, 0x1653f
jne 0x1800206d1
mov rax, rbx
add rsp, 0x168
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret
mov ebx, 0x3c
cmp ebx, 0x3c
je 0x18002030e
cmp ebx, 0x48
je 0x1800202b4
cmp ebx, 0x54
je 0x180020297
cmp ebx, 0x60
jne 0x180020372
cmp dword [r13], 0
je 0x180020223
mov qword [rsp + 0x40], r11
lea rax, [rsp + 0x60]
mov qword [rsp + 0x38], rax
lea r8, [rbp - 0x78]
mov qword [rsp + 0x30], r11
xor r9d, r9d
mov dword [rsp + 0x28], 0x72
xor edx, edx
xor ecx, ecx
mov qword [rsp + 0x20], r11
call fcn.180026830
jmp 0x180020237
mov r8d, 0x6a
lea rdx, [rsp + 0x60]
lea rcx, [rbp - 0x78]
call fcn.180046d80
xor edx, edx
mov byte [r15], al
lea rcx, [rsp + 0x60]
inc r15
lea r8d, [rdx + 0x31]
call fcn.18003be00
cmp eax, 3
jne 0x18002036f
cmp dword [r13], 0
je 0x180020383
xor ecx, ecx
lea rax, [rsp + 0x60]
mov qword [rsp + 0x40], rcx
lea r8, [rbp - 0x68]
mov qword [rsp + 0x38], rax
xor r9d, r9d
mov qword [rsp + 0x30], rcx
xor edx, edx
mov dword [rsp + 0x28], 0x72
mov qword [rsp + 0x20], rcx
call fcn.180026830
jmp 0x18002039d
mov rax, qword [rbp - 0x48]
add rax, 0xfffffffffffffffe
cmp r15, rax
jbe 0x180020372
mov rax, 0xfffffffffffffff3
jmp 0x1800201a0
xor edx, edx
lea rcx, [rsp + 0x60]
lea r8d, [rdx + 0x31]
call fcn.18003be00
cmp eax, 3
jne 0x18002036f
cmp dword [r13], 0
je 0x180020389
xor ecx, ecx
lea rax, [rsp + 0x60]
mov qword [rsp + 0x40], rcx
lea r8, [rbp - 0x78]
mov qword [rsp + 0x38], rax
xor r9d, r9d
mov qword [rsp + 0x30], rcx
xor edx, edx
mov dword [rsp + 0x28], 0x72
mov qword [rsp + 0x20], rcx
call fcn.180026830
jmp 0x18002039d
mov rax, qword [rbp - 0x48]
add rax, 0xfffffffffffffffe
cmp r15, rax
ja 0x1800202a8
cmp dword [r13], 0
je 0x180020355
mov qword [rsp + 0x40], r11
lea rax, [rsp + 0x60]
mov qword [rsp + 0x38], rax
lea r8, [rbp - 0x68]
mov qword [rsp + 0x30], r11
xor r9d, r9d
mov dword [rsp + 0x28], 0x72
xor edx, edx
xor ecx, ecx
mov qword [rsp + 0x20], r11
call fcn.180026830
jmp 0x180020369
mov r8d, 0x6a
lea rdx, [rsp + 0x60]
lea rcx, [rbp - 0x68]
call fcn.180046d80
mov byte [r15], al
inc r15
xor r11d, r11d
add ebx, 0xc
cmp ebx, 0x6c
jb 0x1800201c5
jmp 0x1800201c0
lea rcx, [rbp - 0x68]
jmp 0x18002038d
lea rcx, [rbp - 0x78]
mov r8d, 0x6a
lea rdx, [rsp + 0x60]
call fcn.180046d80
mov byte [r15], al
mov ecx, dword [rsp + 0x50]
inc r15
mov rbx, r15
mov r14d, 0x129c6
sub rbx, qword [rbp - 0x40]
xor r11d, r11d
jmp 0x1800206d1
lea rax, [rsp + 0x60]
mov r8d, 0x99
lea r9, [rbp - 0x78]
mov qword [rsp + 0x20], rax
mov rdx, r10
lea rcx, [rbp + 0x38]
call fcn.18005ca40
xor edx, edx
lea rcx, [rsp + 0x60]
lea r8d, [rdx + 0x31]
call fcn.18003be00
mov r12, qword [rsp + 0x58]
xor r11d, r11d
test eax, eax
mov ecx, r11d
mov eax, r11d
sete cl
cmp r15, r12
setb al
test eax, ecx
je 0x1800205ca
nop dword [rax]
mov esi, 0x39
cmp esi, 0x39
je 0x1800204e8
cmp esi, 0x42
je 0x18002048a
cmp esi, 0x4b
jne 0x18002058e
cmp dword [r13], 0
je 0x18002046d
mov qword [rsp + 0x40], r11
lea rax, [rsp + 0x60]
mov qword [rsp + 0x38], rax
lea r8, [rbp - 0x78]
mov qword [rsp + 0x30], r11
xor r9d, r9d
mov dword [rsp + 0x28], 0x72
xor edx, edx
xor ecx, ecx
mov qword [rsp + 0x20], r11
call fcn.180026830
mov byte [r15 + 3], al
jmp 0x18002058b
mov r8d, 0x6a
lea rdx, [rsp + 0x60]
lea rcx, [rbp - 0x78]
call fcn.180046d80
mov byte [r15 + 3], al
jmp 0x18002058b
cmp dword [r13], 0
je 0x1800204cb
mov qword [rsp + 0x40], r11
lea rax, [rsp + 0x60]
mov qword [rsp + 0x38], rax
lea r8, [rbp - 0x68]
mov qword [rsp + 0x30], r11
xor r9d, r9d
mov dword [rsp + 0x28], 0x72
xor edx, edx
xor ecx, ecx
mov qword [rsp + 0x20], r11
call fcn.180026830
mov byte [r15 + 2], al
jmp 0x18002058b
mov r8d, 0x6a
lea rdx, [rsp + 0x60]
lea rcx, [rbp - 0x68]
call fcn.180046d80
mov byte [r15 + 2], al
jmp 0x18002058b
cmp dword [r13], 0
je 0x180020522
mov qword [rsp + 0x40], r11
lea rax, [rsp + 0x60]
mov qword [rsp + 0x38], rax
lea r8, [rbp - 0x68]
mov qword [rsp + 0x30], r11
xor r9d, r9d
mov dword [rsp + 0x28], 0x72
xor edx, edx
xor ecx, ecx
mov qword [rsp + 0x20], r11
call fcn.180026830
jmp 0x180020536
mov r8d, 0x6a
lea rdx, [rsp + 0x60]
lea rcx, [rbp - 0x68]
call fcn.180046d80
mov byte [r15], al
cmp dword [r13], 0
je 0x180020573
xor ecx, ecx
lea rax, [rsp + 0x60]
mov qword [rsp + 0x40], rcx
lea r8, [rbp - 0x78]
mov qword [rsp + 0x38], rax
xor r9d, r9d
mov qword [rsp + 0x30], rcx
xor edx, edx
mov dword [rsp + 0x28], 0x72
mov qword [rsp + 0x20], rcx
call fcn.180026830
jmp 0x180020587
mov r8d, 0x6a
lea rdx, [rsp + 0x60]
lea rcx, [rbp - 0x78]
call fcn.180046d80
mov byte [r15 + 1], al
xor r11d, r11d
add esi, 9
cmp esi, 0x54
jb 0x180020415
xor edx, edx
lea rcx, [rsp + 0x60]
add r15, 4
lea r8d, [rdx + 0x31]
call fcn.18003be00
xor r11d, r11d
test eax, eax
mov ecx, r11d
mov eax, r11d
sete cl
cmp r15, r12
setb al
test eax, ecx
jne 0x180020410
mov ecx, dword [rsp + 0x50]
mov r14d, 0xee4d
jmp 0x1800206d1
mov rax, qword [rdx]
lea rcx, [rbp + 0x18]
mov qword [rsp + 0x38], r11
xor r9d, r9d
mov qword [rbp - 0x20], rax
xor edx, edx
lea rax, [rsp + 0x60]
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x28], r8
lea r8, [rbp - 0x20]
mov dword [rsp + 0x20], 0xdc
call fcn.18001d770
mov esi, 0xf7
movups xmm0, xmmword [rax + 0x10]
mov r12, qword [rax]
mov rcx, r12
movups xmmword [rbp], xmm0
mov qword [rbp - 0x38], rcx
mov eax, esi
sub eax, 0xf6
je 0x180020693
sub eax, 1
je 0x18002067f
cmp eax, 3
jne 0x180020689
mov dword [rbp - 0x58], 2
lea r8, [rbp - 0x58]
mov dword [rbp - 0x50], 0
lea rcx, [rbp - 0x50]
mov rax, qword [SHChangeNotifyDeregister]
xor r9d, r9d
mov qword [rbp - 0x18], rax
mov edx, 0xe2
lea rax, [rbp - 0x38]
mov qword [rsp + 0x28], rax
lea rax, [rbp - 0x18]
mov qword [rsp + 0x20], rax
call fcn.180053ba0
mov rcx, qword [rbp - 0x38]
jmp 0x180020689
xor edi, edi
cmp rcx, 0xffffffffffffffe7
seta dil
dec esi
cmp esi, 0xf4
ja 0x180020625
test edi, edi
jne 0x180020708
mov rdx, qword [rbp + 0xc0]
lea rax, [rsp + 0x60]
lea r9, [rbp - 0x68]
mov qword [rsp + 0x20], rax
mov r8d, 0x99
lea rcx, [rbp - 0x10]
call fcn.18005ca40
mov ecx, dword [rsp + 0x50]
xor r11d, r11d
jmp 0x1800206d1
mov rax, qword [rbp - 0x48]
add rax, 0xfffffffffffffffd
mov qword [rsp + 0x58], rax
imul eax, dword [rbp + 0xe0], 0x91
add r14d, eax
cmp r14d, ecx
ja 0x18002019d
mov r10, qword [rbp + 0xc0]
mov r9, qword [rbp + 0xc8]
mov rdx, qword [rbp + 0xb8]
mov r8, qword [rbp + 0xb0]
jmp 0x180020040
mov rax, r12
jmp 0x1800201a0