Function at 0x1404441ea
Capabilities:
Accept command line arguments
Create thread
Execute syscall

Disassembly:
push rsi
test cl, 0x54
sub rsp, 0x70
jmp 0x1404441f7
mov dword [rsp + 0x3c], 0
jmp 0x140444204
call qword [sym.imp.KERNEL32.dll_GetCommandLineW]
lea rdx, [rsp + 0x3c]
movsx cx, r14b
movzx rcx, bp
not cl
mov rcx, rax
jmp 0x140444222
call qword [sym.imp.SHELL32.dll_CommandLineToArgvW]
movsxd r8, dword [rsp + 0x3c]
sets sil
cqo
jmp 0x140444238
lea rsi, [rsp + 0x40]
movsx rcx, r8w
cqo
mov dl, bh
mov rcx, rsi
not dl
cmovg dx, r13w
movzx rdx, ax
mov rdx, rax
call fcn.1404445ad
lea rax, [0x1400b8ec8]
stc
cmp rsi, rax
jmp 0x14044426b
je 0x1404443c5
mov rcx, qword [0x1400b8ec8]
test rcx, rcx
je 0x1404442dd
mov rdx, qword [0x1400b8ed8]
cmp bx, ax
cmc
jmp 0x140444291
sub rdx, rcx
test r14b, 0xd9
clc
cmp rdx, 0x1000
jb 0x1404442d8
mov rax, qword [rcx - 8]
test r10, rdi
cmc
add rcx, 0xfffffffffffffff8
test cx, r12w
sub rcx, rax
cmp rcx, 0x20
jae 0x1404445a2
add rdx, 0x27
movsx cx, r15b
jmp 0x1404442d5
mov rcx, rax
call fcn.140198300
movaps xmm0, xmmword [rsp + 0x40]
cmova rax, rdi
movups xmmword [0x1400b8ec8], xmm0
movsx eax, di
movzx eax, di
movsx rax, r9w
mov rax, qword [rsp + 0x50]
jmp 0x140444301
mov qword [0x1400b8ed8], rax
jmp 0x14044430d
xorps xmm0, xmm0
movaps xmmword [rsp + 0x40], xmm0
mov qword [rsp + 0x50], 0
mov rcx, qword [0x1400b8ee0]
test rcx, rcx
jmp 0x14044432d
je 0x140444391
mov rdx, qword [0x1400b8ef0]
sub rdx, rcx
jmp 0x140444344
cmp rdx, 0x1000
jmp 0x140444350
jb 0x14044438c
mov rax, qword [rcx - 8]
test r12b, r15b
cmp r12b, 0x4c
add rcx, 0xfffffffffffffff8
sub rcx, rax
cmp rcx, 0x20
jmp 0x140444371
jae 0x1404445a2
add rdx, 0x27
movzx rcx, ax
mov cl, 0x8d
movsxd rcx, r11d
mov rcx, rax
jmp 0x14044438c
call fcn.140198300
lea rax, [rsp + 0x58]
movups xmm0, xmmword [rsp + 0x58]
bswap rcx
movups xmmword [0x1400b8ee0], xmm0
movsx cx, r15b
mov rcx, qword [rsp + 0x68]
jmp 0x1404443b4
mov qword [0x1400b8ef0], rcx
jmp 0x1404443c0
jmp 0x140444447
mov rcx, qword [0x1400b8ee0]
jmp 0x1404443d2
test rcx, rcx
jmp 0x1404443da
je 0x14044445d
mov rdx, qword [0x1400b8ef0]
cmp dil, 0xb3
sub rdx, rcx
stc
cmp dh, 0x80
clc
cmp rdx, 0x1000
jb 0x140444436
mov rax, qword [rcx - 8]
add rcx, 0xfffffffffffffff8
test r10w, 0x416c
test spl, cl
sub rcx, rax
cmp rcx, 0x20
jmp 0x14044441d
jae 0x1404445a2
add rdx, 0x27
setg ch
movzx cx, ah
mov rcx, rax
jmp 0x140444436
call fcn.140198300
lea rax, [0x1400b8ee0]
jmp 0x140444447
xorps xmm0, xmm0
movups xmmword [rax], xmm0
btr cx, 0x33
sub cx, bp
mov qword [rax + 0x10], 0
mov rcx, qword [rsp + 0x40]
test rcx, rcx
jmp 0x14044446a
je 0x1404444cc
mov rdx, qword [rsp + 0x50]
sub rdx, rcx
test r9d, 0x7a4677e8
cmp sil, bpl
cmp rdx, 0x1000
jb 0x1404444c7
mov rax, qword [rcx - 8]
cmp edi, esi
clc
add rcx, 0xfffffffffffffff8
cmp spl, 0xb
jmp 0x1404444a4
sub rcx, rax
cmp al, 0xeb
test r8b, r14b
cmp rcx, 0x20
jmp 0x1404444b5
jae 0x1404445a2
add rdx, 0x27
mov rcx, rax
jmp 0x1404444c7
call fcn.140198300
call fcn.140056e60
mov ecx, 0x58
jmp 0x1404444db
call fcn.140448672
mov rsi, rax
movsx ecx, r10w
movsx cx, r15b
mov rcx, rax
jmp 0x1404444f4
call fcn.1403b54a3
mov qword [0x1400b8ec0], rsi
movsx cx, cl
movsx rcx, r11w
mov rcx, rsi
jmp 0x140444510
call fcn.1403b5abe
mov qword [rsp + 0x28], 0
sub r8b, cl
shrd r8w, cx, 0x7e
clc
mov dword [rsp + 0x20], 0
adc r8b, spl
bswap r8w
lea r8, [0x14005d5f0]
sub ecx, ecx
test r13w, r10w
stc
xor edx, edx
clc
xor r9d, r9d
jmp 0x140444550
call qword [sym.imp.KERNEL32.dll_CreateThread]
mov rcx, qword [0x1400b8ec0]
jmp 0x140444562
call fcn.1401a8605
call fcn.140437c97
mov eax, dword [0x1400dd058]
movsxd r10, r15d
rol r10b, 0xa1
mov r10, 0xffffffffffffffff
stc
test dil, r12b
xor edx, edx
jmp 0x14044458b
syscall
xor eax, eax
rcl sil, 0xeb
bsr esi, esi
add rsp, 0x70
not sil
movsxd rsi, r13d
pop rsi
ret
call fcn.1404b6df5
int3