Function at 0x14044245b
Capabilities:
Accept command line arguments
Create thread

Disassembly:
push rsi
cmp r15w, 0x72a6
clc
sub rsp, 0x70
mov dword [rsp + 0x3c], 0
jmp 0x140442474
call qword [sym.imp.KERNEL32.dll_GetCommandLineW]
lea rdx, [rsp + 0x3c]
movsx rcx, bx
mov rcx, rax
jmp 0x14044248b
call qword [sym.imp.SHELL32.dll_CommandLineToArgvW]
movsxd r8, dword [rsp + 0x3c]
lea rsi, [rsp + 0x40]
jmp 0x1404424a0
mov rcx, rsi
mov edx, esp
movsx rdx, r11w
mov rdx, rax
jmp 0x1404424b1
call fcn.14044285b
lea rax, [0x1400b8ec8]
cmp rsi, rax
jmp 0x1404424c5
je 0x140442647
mov rcx, qword [0x1400b8ec8]
test rcx, rcx
jmp 0x1404424da
je 0x140442543
mov rdx, qword [0x1400b8ed8]
test r11b, 0x75
sub rdx, rcx
stc
test r14b, spl
cmp rdx, 0x1000
jmp 0x1404424fe
jb 0x14044253e
mov rax, qword [rcx - 8]
test dh, bl
jmp 0x14044250f
add rcx, 0xfffffffffffffff8
test bx, bp
jmp 0x14044251b
sub rcx, rax
cmp cx, 0x4469
cmp rcx, 0x20
jmp 0x14044252c
jae 0x140442850
add rdx, 0x27
mov rcx, rax
jmp 0x14044253e
call fcn.140197518
movaps xmm0, xmmword [rsp + 0x40]
movzx eax, di
movsx rax, bx
movsxd rax, edi
movups xmmword [0x1400b8ec8], xmm0
movzx rax, ax
mov rax, qword [rsp + 0x50]
jmp 0x140442567
mov qword [0x1400b8ed8], rax
jmp 0x140442573
xorps xmm0, xmm0
movaps xmmword [rsp + 0x40], xmm0
bts rcx, rax
mov qword [rsp + 0x50], 0
ror cl, 0x6d
mov cl, r13b
bt ecx, 0xf0
mov rcx, qword [0x1400b8ee0]
test rcx, rcx
jmp 0x1404425a1
je 0x140442608
mov rdx, qword [0x1400b8ef0]
test di, 0x2299
cmc
sub rdx, rcx
cmp rdx, 0x1000
jb 0x140442603
mov rax, qword [rcx - 8]
test dil, r13b
add rcx, 0xfffffffffffffff8
jmp 0x1404425dd
sub rcx, rax
cmp rcx, 0x20
jmp 0x1404425e9
jae 0x140442850
add rdx, 0x27
movsx cx, dl
movzx ecx, r8w
mov rcx, rax
jmp 0x140442603
call fcn.140197518
lea rax, [rsp + 0x58]
movups xmm0, xmmword [rsp + 0x58]
movsx ecx, r11w
mov cx, di
movsx cx, r10b
movups xmmword [0x1400b8ee0], xmm0
movzx cx, r12b
mov cl, 0xf3
mov rcx, qword [rsp + 0x68]
jmp 0x140442636
mov qword [0x1400b8ef0], rcx
jmp 0x140442642
jmp 0x1404426d7
mov rcx, qword [0x1400b8ee0]
clc
cmp r13b, 0x22
stc
test rcx, rcx
jmp 0x14044265c
je 0x1404426ea
mov rdx, qword [0x1400b8ef0]
sub rdx, rcx
cmp r11b, r11b
test ax, r15w
cmp rdx, 0x1000
jmp 0x14044267f
jb 0x1404426c6
mov rax, qword [rcx - 8]
add rcx, 0xfffffffffffffff8
sub rcx, rax
cmc
test r12, 0x5dee6eed
cmp r8, 0x57a355ff
cmp rcx, 0x20
jmp 0x1404426a8
jae 0x140442850
add rdx, 0x27
mov cl, r11b
movzx cx, sil
movzx rcx, si
mov rcx, rax
jmp 0x1404426c6
call fcn.140197518
lea rax, [0x1400b8ee0]
jmp 0x1404426d7
xorps xmm0, xmm0
movups xmmword [rax], xmm0
rcl ch, cl
or rcx, rbx
mov qword [rax + 0x10], 0
mov rcx, qword [rsp + 0x40]
test dil, 0xa8
cmp r13w, bp
test rcx, rcx
jmp 0x1404426ff
je 0x14044276d
mov rdx, qword [rsp + 0x50]
cmp r8b, bl
sub rdx, rcx
cmp edx, 0x15e4210
cmp rdx, 0x1000
jb 0x140442768
mov rax, qword [rcx - 8]
cmp rax, 0x7b212fdd
test r15w, r15w
add rcx, 0xfffffffffffffff8
cmp cl, 0xd0
test r14, 0x539d29d2
clc
sub rcx, rax
cmp r15b, al
cmp rcx, 0x20
jae 0x140442850
add rdx, 0x27
movsxd rcx, ebx
mov cl, r9b
movsx cx, r10b
mov rcx, rax
jmp 0x140442768
call fcn.140197518
call fcn.140056e60
mov ecx, 0x58
call fcn.140446956
mov rsi, rax
mov cl, 0x9c
movsx rcx, r8w
mov rcx, rax
jmp 0x14044278d
call fcn.1403b38d4
mov qword [0x1400b8ec0], rsi
jmp 0x14044279e
mov rcx, rsi
jmp 0x1404427a6
call fcn.1403b3ee1
mov qword [rsp + 0x28], 0
or r8w, 0x4d8
xadd r8b, r8b
mov dword [rsp + 0x20], 0
rcl r8b, 9
rol r8d, cl
lea r8, [0x14005d5f0]
xor ecx, ecx
cmp esi, 0x51bb3e9b
sub edx, edx
jmp 0x1404427ea
sub r9d, r9d
jmp 0x1404427f2
call qword [sym.imp.KERNEL32.dll_CreateThread]
mov rcx, qword [0x1400b8ec0]
jmp 0x140442804
call fcn.1401e6d57
call fcn.140436005
mov eax, dword [0x1400dd058]
not r10b
jmp 0x140442820
mov r10, 0xffffffffffffffff
cmc
test r11b, r11b
test rcx, 0x1f4d6b43
xor edx, edx
jmp 0x140442839
syscall
xor eax, eax
test r12b, 0x89
add rsp, 0x70
movsx rsi, r8w
pop rsi
jmp 0x14044284f
ret
call fcn.1404b4f8e
int3