Function at 0x140006c30
Capabilities:
Accept command line arguments
Parse pe header

Disassembly:
sub rsp, 0x28
call fcn.140006360
add rsp, 0x28
jmp 0x140006c48
mov qword [rsp + 8], rbx
push rdi
sub rsp, 0x1d0
mov rax, qword [0x140024008]
xor rax, rsp
mov qword [rsp + 0x1c0], rax
mov ecx, dword [0x140024660]
call fcn.140008f8c
mov dword [0x140024660], eax
lea rcx, [rsp + 0x30]
call qword [sym.imp.KERNEL32.dll_GetStartupInfoW]
mov dword [rsp + 0xa0], 0x114
lea rcx, [rsp + 0xa0]
call qword [sym.imp.KERNEL32.dll_GetVersionExW]
test eax, eax
je 0x14000bfb5
mov r8d, dword [rsp + 0xac]
and r8d, 0x7fff
mov r9d, dword [rsp + 0xb0]
cmp r9d, 2
jne 0x14000bfbf
mov edx, dword [rsp + 0xa4]
mov ecx, edx
shl ecx, 8
mov eax, dword [rsp + 0xa8]
add ecx, eax
mov dword [0x140026010], r9d
mov dword [0x140026018], ecx
mov dword [0x14002601c], edx
mov dword [0x140026020], eax
mov dword [0x140026014], r8d
mov eax, 0x5a4d
cmp word [0x140000000], ax
jne 0x14000bfea
movsxd rax, dword [0x14000003c]
lea rdi, [0x140000000]
add rax, rdi
cmp dword [rax], 0x4550
jne 0x14000bfc9
mov ecx, 0x20b
cmp word [rax + 0x18], cx
jne 0x14000bfd4
cmp dword [rax + 0x84], 0xe
jbe 0x14000bfdf
xor ebx, ebx
cmp dword [rax + 0xf8], ebx
setne bl
mov dword [rsp + 0x20], ebx
jmp 0x140006d56
mov ecx, 1
call fcn.1400062ec
test eax, eax
je 0x14000bffc
call fcn.140007cd0
test eax, eax
je 0x14000c024
call fcn.140008da0
test eax, eax
js 0x14000c04c
call qword [sym.imp.KERNEL32.dll_GetCommandLineA]
mov qword [0x140026b30], rax
call fcn.1400061e8
mov qword [0x140026008], rax
call fcn.140007ed0
test eax, eax
js 0x14000c05c
call fcn.140007b44
test eax, eax
js 0x14000c06c
mov ecx, 1
call fcn.140007748
test eax, eax
jne 0x14000c07c
call fcn.140006dfc
test byte [rsp + 0x6c], 1
movzx edx, word [rsp + 0x70]
mov r9d, 0xa
cmovne r9d, edx
mov r8, rax
xor edx, edx
mov rcx, rdi
call fcn.140001010
nop
jmp 0x14000c089
mov eax, 0xff
jmp 0x14000c0ba
bts r8d, 0xf
jmp 0x140006cc5
xor ebx, ebx
mov dword [rsp + 0x20], ebx
jmp 0x140006d56
xor ebx, ebx
mov dword [rsp + 0x20], ebx
jmp 0x140006d56
xor ebx, ebx
mov dword [rsp + 0x20], ebx
jmp 0x140006d56
xor ebx, ebx
mov dword [rsp + 0x20], ebx
lea rdi, [0x140000000]
jmp 0x140006d56
cmp dword [0x140027cac], 1
jne 0x14000c00a
call fcn.140012f04
mov ecx, 0x1c
call fcn.140012d08
mov ecx, 0xff
call fcn.140012aa4
nop
jmp 0x140006d68
cmp dword [0x140027cac], 1
jne 0x14000c032
call fcn.140012f04
mov ecx, 0x10
call fcn.140012d08
mov ecx, 0xff
call fcn.140012aa4
nop
jmp 0x14000d170
mov ecx, 0x1b
call fcn.140012a30
nop
jmp 0x140006d82
mov ecx, 8
call fcn.140012a30
nop
jmp 0x140006da8
mov ecx, 9
call fcn.140012a30
nop
jmp 0x140006db5
mov ecx, eax
call fcn.140012a30
nop
jmp 0x140006dc7
mov edi, eax
mov dword [rsp + 0x24], eax
test ebx, ebx
jne 0x14000c09a
mov ecx, eax
call fcn.140012cb8
call fcn.140012cdc
jmp 0x14000c0b8
mov eax, edi
mov rcx, qword [rsp + 0x1c0]
xor rcx, rsp
call fcn.1400012d0
mov rbx, qword [rsp + 0x1e0]
add rsp, 0x1d0
pop rdi
ret
nop
mov rcx, qword [0x140024070]
nop
nop
nop
nop
nop
nop
nop
nop
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x18], rbp
mov qword [rax + 0x20], rsi
push rdi
push r12
push r13
sub rsp, 0x30
mov r12d, edx
xor r13d, r13d
xor edx, edx
mov rdi, r9
mov rbp, r8
mov rsi, rcx
mov rbx, r13
mov dword [rax + 0x10], r13d
call qword [sym.imp.USER32.dll_GetWindowLongPtrW]
lea edx, [r13 + 1]
mov r10d, r12d
sub r10d, edx
je 0x14000d29b
sub r10d, 5
je 0x14000d26c
sub r10d, 9
je 0x14000d248
sub r10d, 5
je 0x14000d243
sub r10d, 0x6d
je 0x14000d22b
cmp r10d, 0x181
jne 0x14000d200
cmp rax, r13
je 0x14000d200
mov rcx, qword [rax]
cmp rcx, r13
je 0x14000d200
xor edx, edx
call qword [sym.imp.USER32.dll_ShowWindow]
mov r9, rdi
mov r8, rbp
mov edx, r12d
mov rcx, rsi
call qword [sym.imp.USER32.dll_DefWindowProcW]
mov rbx, qword [rsp + 0x50]
mov rbp, qword [rsp + 0x60]
mov rsi, qword [rsp + 0x68]
add rsp, 0x30
pop r13
pop r12
pop rdi
ret
cmp rdi, r13
je 0x14000d200
mov r8, qword [rdi]
xor edx, edx
mov rcx, rsi
mov qword [r8], rsi
call qword [sym.imp.USER32.dll_SetWindowLongPtrW]
jmp 0x14000d200
cmp rax, r13
jmp 0x14000d2c4
cmp rax, r13
je 0x14000d200
lea rcx, [rsp + 0x58]
mov r9, rdi
mov r8, rbp
mov qword [rsp + 0x20], rcx
mov rcx, rax
mov edx, 0xf
call fcn.140010cc0
jmp 0x14000d2bc
cmp rax, r13
je 0x14000d2ca
cmp bp, r13w
je 0x14000d285
mov rcx, rsi
mov byte [rax + 0x14], dl
call qword [sym.imp.USER32.dll_SetFocus]
jmp 0x14000d2ca
mov rcx, qword [rax]
mov byte [rax + 0x14], r13b
cmp rcx, r13
je 0x14000d2ca
xor edx, edx
call qword [sym.imp.USER32.dll_ShowWindow]
jmp 0x14000d2ca
cmp rax, r13
je 0x14000d200
lea rcx, [rsp + 0x58]
mov r9, rdi
mov r8, rbp
mov qword [rsp + 0x20], rcx
mov rcx, rax
call fcn.14001073c
cmp dword [rsp + 0x58], r13d
mov rbx, rax
je 0x14000d200
mov rax, rbx
jmp 0x14000d212