Function at 0x14044691a
Capabilities:
Accept command line arguments
Create thread

Disassembly:
push rsi
sub rsp, 0x70
jmp 0x140446924
mov dword [rsp + 0x3c], 0
jmp 0x140446931
call qword [sym.imp.KERNEL32.dll_GetCommandLineW]
lea rdx, [rsp + 0x3c]
movzx cx, r12b
not ch
mov ch, 0x51
mov rcx, rax
jmp 0x14044694e
call qword [sym.imp.SHELL32.dll_CommandLineToArgvW]
movsxd r8, dword [rsp + 0x3c]
cmovp edx, edx
movsx dx, r14b
setb sil
lea rsi, [rsp + 0x40]
cdq
jmp 0x140446972
mov rcx, rsi
movzx rdx, r9w
mov rdx, rax
jmp 0x140446981
call fcn.140446ce3
lea rax, [0x1400b8ec8]
cmp rdi, 0x2b5b52f1
clc
cmp rsi, rax
jmp 0x14044699d
je 0x140446b07
mov rcx, qword [0x1400b8ec8]
stc
test rcx, rcx
jmp 0x1404469b3
je 0x140446a14
mov rdx, qword [0x1400b8ed8]
test dh, 0xb9
cmc
sub rdx, rcx
cmc
cmp rdx, 0x1000
jmp 0x1404469d4
jb 0x140446a0f
mov rax, qword [rcx - 8]
cmp r12b, r10b
test r13b, 0x1b
add rcx, 0xfffffffffffffff8
cmp edx, r9d
test r10w, 0x4fc5
sub rcx, rax
cmp rcx, 0x20
jmp 0x1404469fe
jae 0x140446cd8
add rdx, 0x27
movsx rcx, r11w
mov rcx, rax
call fcn.1401d61ed
movaps xmm0, xmmword [rsp + 0x40]
setne al
mov ax, r8w
movups xmmword [0x1400b8ec8], xmm0
movsxd rax, r10d
mov eax, 0x3bde60d4
mov rax, qword [rsp + 0x50]
jmp 0x140446a39
mov qword [0x1400b8ed8], rax
jmp 0x140446a45
xorps xmm0, xmm0
movaps xmmword [rsp + 0x40], xmm0
mov qword [rsp + 0x50], 0
neg cx
sub cx, 0x75c9
rcl ch, cl
mov rcx, qword [0x1400b8ee0]
cmp r13w, r11w
stc
test rcx, rcx
jmp 0x140446a74
je 0x140446ad1
mov rdx, qword [0x1400b8ef0]
sub rdx, rcx
cmp r15w, 0x5ac1
cmp rdx, 0x1000
jmp 0x140446a96
jb 0x140446acc
mov rax, qword [rcx - 8]
cmp bl, r10b
test r12w, r14w
add rcx, 0xfffffffffffffff8
sub rcx, rax
cmp rcx, 0x20
jmp 0x140446ab7
jae 0x140446cd8
add rdx, 0x27
mov cx, bp
mov rcx, rax
jmp 0x140446acc
call fcn.1401d61ed
lea rax, [rsp + 0x58]
mov ch, 0x5f
movsx rcx, r14w
movups xmm0, xmmword [rsp + 0x58]
xchg cx, cx
movups xmmword [0x1400b8ee0], xmm0
mov rcx, qword [rsp + 0x68]
jmp 0x140446af6
mov qword [0x1400b8ef0], rcx
jmp 0x140446b02
jmp 0x140446b85
mov rcx, qword [0x1400b8ee0]
test rcx, rcx
jmp 0x140446b16
je 0x140446ba9
mov rdx, qword [0x1400b8ef0]
cmc
test sil, 0x19
sub rdx, rcx
cmp cl, 0xe7
cmp rdx, 0x1000
jb 0x140446b74
mov rax, qword [rcx - 8]
cmc
cmp rdx, r15
add rcx, 0xfffffffffffffff8
jmp 0x140446b4c
sub rcx, rax
stc
jmp 0x140446b56
cmp rcx, 0x20
jmp 0x140446b5f
jae 0x140446cd8
add rdx, 0x27
movsxd rcx, r15d
mov rcx, rax
jmp 0x140446b74
call fcn.1401d61ed
lea rax, [0x1400b8ee0]
jmp 0x140446b85
xorps xmm0, xmm0
movups xmmword [rax], xmm0
test r10, 0x7d4260c6
btr cx, 0xd1
mov qword [rax + 0x10], 0
shl cl, cl
movzx cx, r12b
sar rcx, cl
mov rcx, qword [rsp + 0x40]
cmp esi, edi
stc
clc
test rcx, rcx
jmp 0x140446bba
je 0x140446c19
mov rdx, qword [rsp + 0x50]
cmp r14b, r15b
jmp 0x140446bcd
sub rdx, rcx
cmp r15b, 0xcc
test r10b, spl
cmp rdx, 0x1000
jmp 0x140446be3
jb 0x140446c14
mov rax, qword [rcx - 8]
add rcx, 0xfffffffffffffff8
cmp bx, 0x2bf4
clc
jmp 0x140446bfc
sub rcx, rax
clc
cmp rcx, 0x20
jae 0x140446cd8
add rdx, 0x27
movzx ecx, bx
mov rcx, rax
call fcn.1401d61ed
call fcn.140056e60
mov ecx, 0x58
call fcn.14044ae17
mov rsi, rax
jmp 0x140446c30
mov rcx, rax
jmp 0x140446c38
call fcn.1403b77af
mov qword [0x1400b8ec0], rsi
mov rcx, rsi
jmp 0x140446c4c
call fcn.1403b7dd3
mov qword [rsp + 0x28], 0
xadd r8b, r8b
btc r8, 0x82
add r8b, 5
mov dword [rsp + 0x20], 0
sal r8d, cl
lea r8, [0x14005d5f0]
sub ecx, ecx
xor edx, edx
jmp 0x140446c85
sub r9d, r9d
jmp 0x140446c8d
call qword [sym.imp.KERNEL32.dll_CreateThread]
mov rcx, qword [0x1400b8ec0]
jmp 0x140446c9f
call fcn.1401e2f48
call fcn.14043a4a5
mov eax, dword [0x1400dd058]
shr r10b, 0xa8
rol r10, 4
not r10w
mov r10, 0xffffffffffffffff
xor edx, edx
jmp 0x140446cc9
syscall
xor eax, eax
add rsp, 0x70
pop rsi
jmp 0x140446cd7
ret
call fcn.1404b907c
int3