Function at 0x1800014f0
Capabilities:
Accept command line arguments
Terminate process

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x108]
sub rsp, 0x1e0
mov rax, qword [0x1802080f0]
xor rax, rsp
mov qword [rbp + 0xd0], rax
xor ecx, ecx
call fcn.18014a5d8
mov rcx, rax
call fcn.18014a594
lea rcx, [0x18020a2d0]
call fcn.180006b10
lea rcx, [0x18020a2d0]
mov edx, 0x15
call fcn.180002088
mov rcx, rax
call fcn.180006b10
lea rcx, [0x18020a2d0]
mov edx, 5
call fcn.180002088
mov rcx, rax
call fcn.180006b10
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_HeapCreate]
xor r12d, r12d
mov rdi, rax
test rax, rax
jne 0x180001596
mov eax, 1
jmp 0x180001bd2
mov esi, 0x300000
xor edx, edx
mov rcx, rax
mov r8d, esi
call qword [sym.imp.KERNEL32.dll_HeapAlloc]
mov rbx, rax
test rax, rax
jne 0x1800015bc
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_HeapDestroy]
jmp 0x18000158c
mov rdi, r12
mov r13d, 1
call fcn.18014a5ac
and eax, 0x80000001
jge 0x1800015da
sub eax, r13d
or eax, 0xfffffffe
add eax, r13d
mov byte [rdi + rbx], al
add rdi, r13
cmp rdi, rsi
jl 0x1800015c5
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleHandleW]
mov rdi, rax
test rax, rax
je 0x180001bcc
call qword [sym.imp.KERNEL32.dll_GetCommandLineW]
xor r9d, r9d
xor edx, edx
mov r8, rax
mov rcx, rdi
call fcn.18000a380
test eax, eax
jne 0x18000164c
xor ecx, ecx
call fcn.18014a5d8
lea rdx, [rsp + 0x28]
lea rcx, [rsp + 0x30]
mov qword [rsp + 0x28], rax
call fcn.18014a6e4
cmp dword [rsp + 0x38], r12d
jne 0x180001643
cmp dword [rsp + 0x34], r12d
jne 0x180001643
xor eax, eax
jmp 0x180001bd2
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_ExitProcess]
lea rdx, [rsp + 0x61]
lea rcx, [rsp + 0x60]
mov dword [rsp + 0x60], 0x4550
mov dword [rsp + 0x64], 0x4014c
mov qword [rsp + 0x68], 0x4ba1f9bd
mov dword [rsp + 0x70], r12d
mov dword [rsp + 0x74], 0x212200e0
mov dword [rsp + 0x78], 0xa010b
mov dword [rsp + 0x7c], 0x51ea00
mov qword [rbp - 0x80], 0x191a00
mov dword [rbp - 0x78], 0x494a80
mov dword [rbp - 0x74], 0x1000
mov dword [rbp - 0x70], 0x520000
mov dword [rbp - 0x6c], 0x785f0000
mov dword [rbp - 0x68], 0x1000
mov dword [rbp - 0x64], 0x200
mov dword [rbp - 0x60], 0x10005
mov dword [rbp - 0x5c], 0xa
mov qword [rbp - 0x58], 0x10005
mov dword [rbp - 0x50], 0x6b4000
mov dword [rbp - 0x4c], 0x400
mov dword [rbp - 0x48], 0x6b5c12
mov dword [rbp - 0x44], 0x1400003
mov dword [rbp - 0x40], 0x100000
mov dword [rbp - 0x3c], 0x1000
mov dword [rbp - 0x38], 0x100000
mov qword [rbp - 0x34], 0x1000
mov dword [rbp - 0x2c], InitCommonControls
mov dword [rbp - 0x28], 0x50f520
mov dword [rbp - 0x24], 0x10309
mov dword [rbp - 0x20], 0x50b0a4
mov dword [rbp - 0x1c], 0xa0
mov dword [rbp - 0x18], 0x530000
mov qword [rbp - 0x14], 0x140048
mov dword [rbp - 0xc], r12d
mov dword [rbp - 8], 0x6aa200
mov dword [rbp - 4], 0x1750
mov dword [rbp], 0x671000
mov dword [rbp + 4], 0x40584
mov dword [rbp + 8], 0x2210
mov qword [rbp + 0xc], 0x1c
mov qword [rbp + 0x14], r12
mov qword [rbp + 0x1c], r12
mov dword [rbp + 0x24], r12d
mov dword [rbp + 0x28], 0x666f0
mov qword [rbp + 0x2c], 0x40
mov dword [rbp + 0x34], r12d
mov dword [rbp + 0x38], 0x1000
mov dword [rbp + 0x3c], 0xd28
mov dword [rbp + 0x40], 0x509394
mov qword [rbp + 0x44], 0x200
mov dword [rbp + 0x4c], r12d
call fcn.180001044
xor edx, edx
lea r8d, [rdx + 0x7f]
lea rcx, [rbp + 0x51]
mov byte [rbp + 0x50], al
call fcn.18014c620
mov ecx, 0x408
call fcn.180007ff0
or rcx, 0xffffffffffffffff
lea rdi, [rbp + 0x50]
mov r14, rax
xor eax, eax
lea rdx, [rbp + 0x50]
repne scasb al, byte [rdi]
not rcx
sub rcx, r13
mov r8, rcx
mov rcx, r14
call fcn.180001404
mov ebx, r13d
lea rcx, [0x18020a2d0]
mov edx, ebx
call fcn.180002088
mov rcx, rax
call fcn.180006b10
call fcn.18014a5ac
mov esi, InitCommonControls
mov edi, eax
mov eax, 0x66666667
imul edi
sar edx, 2
mov ecx, edx
shr ecx, 0x1f
add edx, ecx
lea ecx, [rdx + rdx*4]
add ecx, ecx
sub edi, ecx
sub esi, edi
call fcn.18014a5ac
and eax, 0x80000001
jge 0x180001847
sub eax, r13d
or eax, 0xfffffffe
add eax, r13d
lea rcx, [0x18020a2d0]
mov r15d, 5
mov edx, ebx
sub r15d, eax
call fcn.180002088
mov edx, esi
mov rcx, rax
call fcn.180002088
mov edx, r15d
mov rcx, rax
call fcn.180002088
mov rcx, rax
call fcn.180006b10
call fcn.18014a5ac
mov edi, eax
mov eax, 0x66666667
imul edi
sar edx, 2
mov ecx, edx
shr ecx, 0x1f
add edx, ecx
lea ecx, [rdx + rdx*4]
add ecx, ecx
sub edi, ecx
lea esi, [rdi + rsi + 8]
call fcn.18014a5ac
mov edi, eax
and edi, 0x80000001
jge 0x1800018b6
sub edi, r13d
or edi, 0xfffffffe
add edi, r13d
lea rcx, [0x18020a2d0]
mov edx, ebx
add edi, r15d
call fcn.180002088
mov edx, esi
mov rcx, rax
call fcn.180002088
mov edx, edi
mov rcx, rax
call fcn.180002088
mov rcx, rax
call fcn.180006b10
add ebx, r13d
cmp ebx, 0x47
jle 0x1800017f6
xor ecx, ecx
call fcn.18014a5d8
mov rcx, rax
call fcn.18014a594
call fcn.18014a5ac
mov edi, eax
mov eax, 0x51eb851f
imul edi
sar edx, 5
mov ecx, edx
shr ecx, 0x1f
add edx, ecx
imul edx, edx, 0x64
sub edi, edx
call fcn.18014a5ac
lea rcx, [0x18020a2d0]
mov r15d, eax
mov eax, 0x66666667
imul r15d
mov eax, edx
sar eax, 3
mov edx, eax
shr edx, 0x1f
add eax, edx
lea edx, [rax + rax*4]
shl edx, 2
sub r15d, edx
lea edx, [rdi + 0x32]
add r15d, 0xa
call fcn.180002088
mov rcx, rax
call fcn.180006b10
mov edx, dword [r14]
mov edi, dword [r14 + 4]
mov dword [rsp + 0x20], edx
mov dword [rsp + 0x24], edi
mov qword [rsp + 0x28], 0x2dc6c0
cmp r15d, 7
jl 0x180001994
lea edi, [r15 - 6]
call fcn.18014a5ac
call fcn.18014a5ac
sub rdi, r13
jne 0x18000197d
mov edx, dword [rsp + 0x20]
mov edi, dword [rsp + 0x24]
add dl, r13b
mov r8d, r12d
mov eax, r12d
movzx edx, dl
mov esi, edx
mov dword [rsp + 0x20], edx
mov ebx, dword [r14 + rdx*4 + 8]
movzx ecx, bl
add dil, bl
test cl, cl
movzx edi, dil
mov r9d, ecx
mov r10d, dword [r14 + rdi*4 + 8]
sete al
mov dword [rsp + 0x24], edi
mov dword [r14 + rdx*4 + 8], r10d
mov dword [r14 + rdi*4 + 8], ebx
movzx edx, byte [r14 + rdx*4 + 8]
add eax, dword [r14 + rdx*4 + 8]
test dl, dl
mov r11d, edx
mov edx, dword [rsp + 0x20]
mov dword [r14 + rsi*4 + 8], eax
mov eax, dword [r14 + rcx*4 + 8]
sete r8b
lea ecx, [r8 + rax]
lea eax, [rdx + rdi]
mov dword [r14 + rdi*4 + 8], ecx
movzx ecx, al
add r10b, cl
add r10b, bl
lea rbx, section..mrdata
movzx ecx, r10b
mov r10, qword [rsp + 0x28]
mov al, byte [r14 + rcx*4 + 8]
xor byte [r10 + rbx], al
mov eax, dword [r14 + rcx*4 + 8]
add r10, r13
xor dword [r14 + r11*4 + 8], eax
mov eax, dword [r14 + rsi*4 + 8]
mov qword [rsp + 0x28], r10
add eax, r8d
xor dword [r14 + r9*4 + 8], eax
cmp r10, 0x4ad800
jl 0x180001973
mov dword [r14 + 4], edi
mov dword [r14], edx
mov edi, r12d
mov eax, 0x51eb851f
imul edi
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
test edx, edx
jle 0x180001a7e
mov ebx, edx
lea rcx, [0x1801ccf34]
call fcn.1800059c4
sub rbx, r13
jne 0x180001a6d
lea rcx, [0x1801ccf38]
call fcn.1800059c4
mov ecx, 0x14
call qword [sym.imp.KERNEL32.dll_Sleep]
add edi, 0x64
cmp edi, 0x2710
jl 0x180001a56
xor ecx, ecx
call fcn.18014a5d8
mov rcx, rax
call fcn.18014a594
xor r8d, r8d
xor edx, edx
xor ecx, ecx
mov dword [rsp + 0x20], r12d
call qword [sym.imp.KERNEL32.dll_HeapCreate]
mov rdi, rax
test rax, rax
jne 0x180001ad2
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_ExitProcess]
mov r14d, 0x300000
xor edx, edx
mov rcx, rax
mov r8d, r14d
call qword [sym.imp.KERNEL32.dll_HeapAlloc]
mov rsi, rax
test rax, rax
jne 0x180001b00
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_HeapDestroy]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_ExitProcess]
mov rbx, r12
call fcn.18014a5ac
and eax, 0x80000001
jge 0x180001b18
sub eax, r13d
or eax, 0xfffffffe
add eax, r13d
mov byte [rbx + rsi], al
add rbx, r13
cmp rbx, r14
jl 0x180001b03
lea rdx, [rsp + 0x20]
lea rcx, [0x18050c6c0]
call fcn.1800079c4
mov rbx, rax
call qword [sym.imp.COMCTL32.dll_InitCommonControls]
mov rdx, qword [rbx]
mov r8, qword [rbx + 8]
mov qword [rsp + 0x28], r13
cmp dword [rdx + 0x8c], r12d
je 0x180001b8a
mov eax, dword [rdx + 0x88]
add rax, r8
cmp dword [rax + 0x18], r12d
je 0x180001b8a
cmp dword [rax + 0x14], r12d
je 0x180001b8a
cmp dword [rax + 0x10], r13d
ja 0x180001b8a
mov ecx, r13d
sub ecx, dword [rax + 0x10]
cmp ecx, dword [rax + 0x14]
ja 0x180001b8a
mov edx, dword [rax + 0x1c]
shl ecx, 2
lea rax, [r8 + rdx]
mov eax, dword [rcx + rax]
add rax, r8
jmp 0x180001b98
mov ecx, 0x7f
call qword [sym.imp.KERNEL32.dll_SetLastError]
mov rax, r12
mov edx, 2
mov ecx, r13d
call rax
xor ecx, ecx
mov edx, eax
call fcn.18014a638
mov r8, rsi
xor edx, edx
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_HeapDestroy]
mov rcx, rbx
call fcn.180007da8
jmp 0x180001bcf
mov r12d, r13d
mov eax, r12d
mov rcx, qword [rbp + 0xd0]
xor rcx, rsp
call fcn.180149e90
lea r11, [rsp + 0x1e0]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret