Function at 0x1404447dc
Capabilities:
Accept command line arguments
Create thread
Execute syscall

Disassembly:
push rsi
sub rsp, 0x70
mov dword [rsp + 0x3c], 0
jmp 0x1404447ee
call qword [sym.imp.KERNEL32.dll_GetCommandLineW]
lea rdx, [rsp + 0x3c]
mov cl, r13b
cmovg cx, di
jmp 0x140444805
mov rcx, rax
call qword [sym.imp.SHELL32.dll_CommandLineToArgvW]
movsxd r8, dword [rsp + 0x3c]
not ch
lea rsi, [rsp + 0x40]
mov rcx, rsi
mov rdx, rax
jmp 0x140444825
call fcn.140444bab
lea rax, [0x1400b8ec8]
clc
cmp rsi, rax
jmp 0x14044483a
je 0x1404449b5
mov rcx, qword [0x1400b8ec8]
jmp 0x14044484d
test rcx, rcx
je 0x1404448b8
mov rdx, qword [0x1400b8ed8]
cmc
test r10b, 0x6d
sub rdx, rcx
test edi, 0x311a4120
jmp 0x140444870
cmp rdx, 0x1000
jmp 0x14044487c
jb 0x1404448b3
mov rax, qword [rcx - 8]
cmc
cmp r11w, 0x2aa1
add rcx, 0xfffffffffffffff8
cmc
sub rcx, rax
cmp rcx, 0x20
jmp 0x14044489e
jae 0x140444ba0
add rdx, 0x27
movzx ecx, ax
mov rcx, rax
jmp 0x1404448b3
call fcn.14027afd4
movaps xmm0, xmmword [rsp + 0x40]
movups xmmword [0x1400b8ec8], xmm0
mov rax, qword [rsp + 0x50]
mov qword [0x1400b8ed8], rax
jmp 0x1404448d5
xorps xmm0, xmm0
movaps xmmword [rsp + 0x40], xmm0
and ch, 0x82
mov qword [rsp + 0x50], 0
btc cx, sp
mov rcx, qword [0x1400b8ee0]
cmc
cmp r12b, 0x64
test rcx, rcx
jmp 0x140444901
je 0x14044496f
mov rdx, qword [0x1400b8ef0]
test r9, rbx
sub rdx, rcx
cmp ebp, 0x1f72d86
cmp rdx, 0x1000
jmp 0x140444926
jb 0x14044496a
mov rax, qword [rcx - 8]
test sil, 0x95
cmp r10b, r10b
add rcx, 0xfffffffffffffff8
jmp 0x140444941
sub rcx, rax
cmp rcx, 0x20
jmp 0x14044494d
jae 0x140444ba0
add rdx, 0x27
movsxd rcx, esp
movzx cx, r12b
xchg cx, cx
mov rcx, rax
jmp 0x14044496a
call fcn.14027afd4
lea rax, [rsp + 0x58]
bswap cx
movsx cx, r13b
movups xmm0, xmmword [rsp + 0x58]
jmp 0x14044498a
movups xmmword [0x1400b8ee0], xmm0
bswap cx
setg cl
movsxd rcx, ebx
mov rcx, qword [rsp + 0x68]
jmp 0x1404449a4
mov qword [0x1400b8ef0], rcx
jmp 0x1404449b0
jmp 0x140444a36
mov rcx, qword [0x1400b8ee0]
test ah, 0xe1
cmp r9, 0x7db146a
test rcx, rcx
jmp 0x1404449ce
je 0x140444a51
mov rdx, qword [0x1400b8ef0]
stc
sub rdx, rcx
cmp r8b, 0xa7
stc
cmp rdx, 0x1000
jmp 0x1404449f0
jb 0x140444a25
mov rax, qword [rcx - 8]
jmp 0x1404449ff
add rcx, 0xfffffffffffffff8
sub rcx, rax
stc
cmc
cmp rcx, 0x20
jmp 0x140444a11
jae 0x140444ba0
add rdx, 0x27
not cx
cmovns rcx, r15
mov rcx, rax
call fcn.14027afd4
lea rax, [0x1400b8ee0]
jmp 0x140444a36
xorps xmm0, xmm0
movups xmmword [rax], xmm0
mov qword [rax + 0x10], 0
jmp 0x140444a51
mov rcx, qword [rsp + 0x40]
cmp edi, r8d
jmp 0x140444a65
test rcx, rcx
jmp 0x140444a6d
je 0x140444ad9
mov rdx, qword [rsp + 0x50]
cmp r9w, r10w
jmp 0x140444a82
sub rdx, rcx
jmp 0x140444a8e
cmp rdx, 0x1000
jb 0x140444ad4
mov rax, qword [rcx - 8]
add rcx, 0xfffffffffffffff8
jmp 0x140444aae
sub rcx, rax
cmp rcx, 0x20
jmp 0x140444aba
jae 0x140444ba0
add rdx, 0x27
mov cx, 0x59fc
bswap ecx
xchg cl, ch
mov rcx, rax
jmp 0x140444ad4
call fcn.14027afd4
call fcn.140056e60
mov ecx, 0x58
jmp 0x140444ae8
call fcn.140448c17
mov rsi, rax
mov rcx, rax
jmp 0x140444af8
call fcn.1403b5e06
mov qword [0x1400b8ec0], rsi
jmp 0x140444b09
mov rcx, rsi
jmp 0x140444b11
call fcn.1403b63fd
mov qword [rsp + 0x28], 0
xchg r8b, r8b
mov dword [rsp + 0x20], 0
lea r8, [0x14005d5f0]
xor ecx, ecx
cmp sil, sil
sub edx, edx
cmp r13b, r15b
sub r9d, r9d
jmp 0x140444b43
call qword [sym.imp.KERNEL32.dll_CreateThread]
mov rcx, qword [0x1400b8ec0]
jmp 0x140444b55
call fcn.14023d7cb
call fcn.1404382d3
mov eax, dword [0x1400dd058]
cmovg r10w, r12w
add r10b, r11b
rcl r10b, 0xe9
mov r10, 0xffffffffffffffff
xor edx, edx
jmp 0x140444b7f
syscall
sub eax, eax
test r11, r12
xchg sil, sil
btr si, 0xfd
add rsp, 0x70
mov si, 0x75e
cmove rsi, rdi
setnp sil
pop rsi
ret
call fcn.1404b6b57
int3