Function at 0x140001154
Capabilities:
Terminate process

Disassembly:
push rbp
mov rbp, rsp
sub rsp, 0xe0
mov qword [rbp - 8], 0
mov dword [rbp - 0xc], 0
lea rax, [rbp - 0xc0]
mov r8d, 0x68
mov edx, 0
mov rcx, rax
call sub.ucrtbase.dll_memset
mov rax, qword [0x140018280]
mov eax, dword [rax]
test eax, eax
je 0x1400011a8
lea rax, [rbp - 0xc0]
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_GetStartupInfoW]
call rax
mov qword [rbp - 0x18], 0
mov dword [rbp - 0x24], 0x30
mov eax, dword [rbp - 0x24]
mov rax, qword gs:[rax]
mov qword [rbp - 0x30], rax
mov rax, qword [rbp - 0x30]
mov rax, qword [rax + 8]
mov qword [rbp - 0x20], rax
mov dword [rbp - 0x10], 0
jmp 0x1400011f8
mov rax, qword [rbp - 0x18]
cmp rax, qword [rbp - 0x20]
jne 0x1400011ea
mov dword [rbp - 0x10], 1
jmp 0x14000122f
mov ecx, 0x3e8
mov rax, qword [sym.imp.KERNEL32.dll_Sleep]
call rax
mov rax, qword [0x140018310]
mov qword [rbp - 0x38], rax
mov rax, qword [rbp - 0x20]
mov qword [rbp - 0x40], rax
mov qword [rbp - 0x48], 0
mov rcx, qword [rbp - 0x40]
mov rax, qword [rbp - 0x48]
mov rdx, qword [rbp - 0x38]
lock cmpxchg qword [rdx], rcx
mov qword [rbp - 0x18], rax
cmp qword [rbp - 0x18], 0
jne 0x1400011d7
mov rax, qword [0x140018320]
mov eax, dword [rax]
cmp eax, 1
jne 0x140001249
mov ecx, 0x1f
call fcn.14000fde0
jmp 0x140001288
mov rax, qword [0x140018320]
mov eax, dword [rax]
test eax, eax
jne 0x14000127e
mov rax, qword [0x140018320]
mov dword [rax], 1
mov rax, qword [0x140018360]
mov rdx, rax
mov rax, qword [0x140018350]
mov rcx, rax
call sub.ucrtbase.dll__initterm
jmp 0x140001288
mov dword [0x14001d024], 1
mov rax, qword [0x140018320]
mov eax, dword [rax]
cmp eax, 1
jne 0x1400012bc
mov rax, qword [0x140018340]
mov rdx, rax
mov rax, qword [0x140018330]
mov rcx, rax
call sub.ucrtbase.dll__initterm
mov rax, qword [0x140018320]
mov dword [rax], 2
cmp dword [rbp - 0x10], 0
jne 0x1400012e0
mov rax, qword [0x140018310]
mov qword [rbp - 0x50], rax
mov qword [rbp - 0x58], 0
mov rdx, qword [rbp - 0x58]
mov rax, qword [rbp - 0x50]
xchg qword [rax], rdx
mov rax, qword [0x140018230]
mov rax, qword [rax]
test rax, rax
je 0x14000130b
mov rax, qword [0x140018230]
mov rax, qword [rax]
mov r8d, 0
mov edx, 2
mov ecx, 0
call rax
call fcn.14000e278
mov rax, qword [0x1400183a0]
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_SetUnhandledExceptionFilter]
call rax
mov rdx, qword [0x1400182d0]
mov qword [rdx], rax
lea rax, section..text
mov rcx, rax
call sub.ucrtbase.dll__set_invalid_parameter_handler
call fcn.14000da70
lea rax, [0x14001e4c8]
mov rdx, qword [0x140018250]
mov qword [rax], rdx
call sub.ucrtbase.dll___p__wcmdln
mov rax, qword [rax]
mov qword [rbp - 8], rax
cmp qword [rbp - 8], 0
je 0x1400013d3
jmp 0x140001386
mov rax, qword [rbp - 8]
movzx eax, word [rax]
cmp ax, 0x22
jne 0x140001381
cmp dword [rbp - 0xc], 0
sete al
movzx eax, al
mov dword [rbp - 0xc], eax
add qword [rbp - 8], 2
mov rax, qword [rbp - 8]
movzx eax, word [rax]
cmp ax, 0x20
ja 0x140001367
mov rax, qword [rbp - 8]
movzx eax, word [rax]
test ax, ax
je 0x1400013ac
cmp dword [rbp - 0xc], 0
jne 0x140001367
jmp 0x1400013ac
add qword [rbp - 8], 2
mov rax, qword [rbp - 8]
movzx eax, word [rax]
test ax, ax
je 0x1400013c5
mov rax, qword [rbp - 8]
movzx eax, word [rax]
cmp ax, 0x20
jbe 0x1400013a7
lea rax, [0x14001e4c0]
mov rdx, qword [rbp - 8]
mov qword [rax], rdx
mov rax, qword [0x140018280]
mov eax, dword [rax]
test eax, eax
je 0x140001401
mov eax, dword [rbp - 0x84]
and eax, 1
test eax, eax
je 0x1400013f6
movzx eax, word [rbp - 0x80]
movzx eax, ax
jmp 0x1400013fb
mov eax, 0xa
mov dword [section..data], eax
mov eax, dword [0x14001d004]
lea rdx, [0x14001d008]
mov ecx, eax
call fcn.1400015c4
call fcn.14000d7b7
mov rax, qword [0x140018260]
mov rax, qword [rax]
mov rdx, qword [0x14001d010]
mov qword [rax], rdx
mov rcx, qword [0x14001d010]
mov rdx, qword [0x14001d008]
mov eax, dword [0x14001d004]
mov r8, rcx
mov ecx, eax
call fcn.14000d7e0
mov dword [0x14001d01c], eax
mov eax, dword [0x14001d020]
test eax, eax
jne 0x140001469
mov eax, dword [0x14001d01c]
mov ecx, eax
call sub.ucrtbase.dll_exit
mov eax, dword [0x14001d024]
test eax, eax
jne 0x140001478
call sub.ucrtbase.dll__cexit
mov eax, dword [0x14001d01c]
add rsp, 0xe0
pop rbp
ret