Function at 0x140441098
Capabilities:
Accept command line arguments
Create thread

Disassembly:
push rsi
cmp rsi, r10
sub rsp, 0x70
mov dword [rsp + 0x3c], 0
call qword [sym.imp.KERNEL32.dll_GetCommandLineW]
lea rdx, [rsp + 0x3c]
movzx cx, r13b
mov ch, 0x65
mov rcx, rax
call qword [sym.imp.SHELL32.dll_CommandLineToArgvW]
movsxd r8, dword [rsp + 0x3c]
lea rsi, [rsp + 0x40]
sets dl
bswap rdx
mov rcx, rsi
setle dl
xchg dx, dx
mov rdx, rax
jmp 0x1404410e5
call fcn.140441448
lea rax, [0x1400b8ec8]
test cl, r10b
jmp 0x140441100
cmp rsi, rax
jmp 0x140441108
je 0x140441267
mov rcx, qword [0x1400b8ec8]
cmp r9b, 0x53
clc
stc
test rcx, rcx
jmp 0x140441123
je 0x140441170
mov rdx, qword [0x1400b8ed8]
stc
sub rdx, rcx
cmp ch, 0xd1
cmp rdx, 0x1000
jmp 0x140441143
jb 0x14044116b
mov rax, qword [rcx - 8]
add rcx, 0xfffffffffffffff8
test r14b, dil
sub rcx, rax
cmp rcx, 0x20
jae 0x14044143d
add rdx, 0x27
movsx ecx, cx
mov rcx, rax
call fcn.14013be3f
movaps xmm0, xmmword [rsp + 0x40]
movzx ax, ch
movzx rax, r15w
movups xmmword [0x1400b8ec8], xmm0
mov eax, edx
mov rax, qword [rsp + 0x50]
mov qword [0x1400b8ed8], rax
xorps xmm0, xmm0
movaps xmmword [rsp + 0x40], xmm0
add ecx, 0x103615c4
mov qword [rsp + 0x50], 0
sub cl, r9b
rcl cl, 0x22
ror cl, cl
mov rcx, qword [0x1400b8ee0]
test rcx, rcx
jmp 0x1404411c0
je 0x140441236
mov rdx, qword [0x1400b8ef0]
cmp r9w, 0x737c
jmp 0x1404411d8
sub rdx, rcx
test r11b, 0xea
test r13w, cx
cmp rdx, 0x1000
jmp 0x1404411ef
jb 0x140441231
mov rax, qword [rcx - 8]
test r8b, 0x3c
jmp 0x140441202
add rcx, 0xfffffffffffffff8
sub rcx, rax
stc
test bpl, 0x70
jmp 0x140441213
cmp rcx, 0x20
jmp 0x14044121c
jae 0x14044143d
add rdx, 0x27
movsxd rcx, r9d
mov rcx, rax
jmp 0x140441231
call fcn.14013be3f
lea rax, [rsp + 0x58]
xchg cl, cl
movups xmm0, xmmword [rsp + 0x58]
setge ch
movsx cx, r10b
movups xmmword [0x1400b8ee0], xmm0
mov rcx, qword [rsp + 0x68]
jmp 0x14044125b
mov qword [0x1400b8ef0], rcx
jmp 0x1404412ee
mov rcx, qword [0x1400b8ee0]
test r11, 0x22e512f7
test rcx, rcx
je 0x140441305
mov rdx, qword [0x1400b8ef0]
cmc
cmp r12d, r10d
sub rdx, rcx
test r13b, 0x39
jmp 0x140441296
cmp rdx, 0x1000
jb 0x1404412dd
mov rax, qword [rcx - 8]
clc
add rcx, 0xfffffffffffffff8
test dh, al
stc
sub rcx, rax
cmc
stc
test sp, 0xe90
cmp rcx, 0x20
jmp 0x1404412c2
jae 0x14044143d
add rdx, 0x27
cmovb cx, bx
setae cl
xchg cl, cl
mov rcx, rax
jmp 0x1404412dd
call fcn.14013be3f
lea rax, [0x1400b8ee0]
jmp 0x1404412ee
xorps xmm0, xmm0
movups xmmword [rax], xmm0
mov qword [rax + 0x10], 0
mov ch, 0x9f
btc rcx, rdi
xor ecx, ebp
mov rcx, qword [rsp + 0x40]
jmp 0x14044130f
test rcx, rcx
jmp 0x140441317
je 0x14044137d
mov rdx, qword [rsp + 0x50]
sub rdx, rcx
cmp rdx, 0x1000
jmp 0x140441331
jb 0x140441378
mov rax, qword [rcx - 8]
cmc
add rcx, 0xfffffffffffffff8
cmp cx, 0x1b01
test dil, 0xe8
jmp 0x14044134e
sub rcx, rax
cmp rcx, 0x20
jmp 0x14044135a
jae 0x14044143d
add rdx, 0x27
xchg cl, ch
jmp 0x140441370
mov rcx, rax
jmp 0x140441378
call fcn.14013be3f
call fcn.140056e60
mov ecx, 0x58
jmp 0x14044138c
call fcn.14044550c
mov rsi, rax
xchg cx, cx
movsx cx, ch
movzx rcx, r14w
mov rcx, rax
jmp 0x1404413a7
call fcn.1403b20de
mov qword [0x1400b8ec0], rsi
bswap cx
mov rcx, rsi
jmp 0x1404413be
call fcn.1403b26eb
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
bswap r8
rol r8, cl
lea r8, [0x14005d5f0]
stc
test bh, 0x19
xor ecx, ecx
xor edx, edx
cmp r9b, 0xc5
clc
jmp 0x1404413f3
sub r9d, r9d
call qword [sym.imp.KERNEL32.dll_CreateThread]
mov rcx, qword [0x1400b8ec0]
jmp 0x140441408
call fcn.140234e62
call fcn.140434ba1
mov eax, dword [0x1400dd058]
mov r10, 0xffffffffffffffff
clc
xor edx, edx
jmp 0x140441427
syscall
xor eax, eax
rcr esi, 0x34
add rsp, 0x70
movsx esi, r11w
pop rsi
jmp 0x14044143c
ret
call fcn.1404b3a18
int3