Function at 0x140442dab
Capabilities:
Accept command line arguments
Create thread

Disassembly:
push rsi
sub rsp, 0x70
jmp 0x140442db5
mov dword [rsp + 0x3c], 0
jmp 0x140442dc2
call qword [sym.imp.KERNEL32.dll_GetCommandLineW]
lea rdx, [rsp + 0x3c]
movzx ecx, bp
mov cx, r14w
mov rcx, rax
jmp 0x140442ddc
call qword [sym.imp.SHELL32.dll_CommandLineToArgvW]
movsxd r8, dword [rsp + 0x3c]
lea rsi, [rsp + 0x40]
movsx dx, bl
mov rcx, rsi
setb dl
movsx dx, spl
xchg dx, dx
mov rdx, rax
jmp 0x140442e06
call fcn.140443161
lea rax, [0x1400b8ec8]
cmp r10b, 0x8b
cmp rsi, rax
je 0x140442f92
mov rcx, qword [0x1400b8ec8]
test r13w, 0x56f9
stc
test rcx, rcx
jmp 0x140442e35
je 0x140442e87
mov rdx, qword [0x1400b8ed8]
clc
cmp spl, 0x99
sub rdx, rcx
cmp rdx, 0x1000
jmp 0x140442e56
jb 0x140442e82
mov rax, qword [rcx - 8]
cmc
add rcx, 0xfffffffffffffff8
stc
sub rcx, rax
cmp rcx, 0x20
jmp 0x140442e72
jae 0x140443156
add rdx, 0x27
movzx ecx, bp
mov rcx, rax
call fcn.140232287
movaps xmm0, xmmword [rsp + 0x40]
movzx eax, si
bswap ax
movups xmmword [0x1400b8ec8], xmm0
movzx ax, dh
mov rax, qword [rsp + 0x50]
mov qword [0x1400b8ed8], rax
jmp 0x140442eae
xorps xmm0, xmm0
movaps xmmword [rsp + 0x40], xmm0
xchg cl, ch
not ch
rcl cl, cl
mov qword [rsp + 0x50], 0
rcr ecx, cl
ror cl, cl
bt cx, r9w
mov rcx, qword [0x1400b8ee0]
cmp ch, 0x7d
test rcx, rcx
jmp 0x140442ee0
je 0x140442f52
mov rdx, qword [0x1400b8ef0]
sub rdx, rcx
test r13b, r8b
test r13d, 0x65563f1a
cmp rdx, 0x1000
jmp 0x140442f06
jb 0x140442f4d
mov rax, qword [rcx - 8]
test sp, ax
test r11, 0x30e42c13
add rcx, 0xfffffffffffffff8
test cx, r11w
sub rcx, rax
test al, r10b
jmp 0x140442f2d
cmp rcx, 0x20
jmp 0x140442f36
jae 0x140443156
add rdx, 0x27
jmp 0x140442f45
mov rcx, rax
jmp 0x140442f4d
call fcn.140232287
lea rax, [rsp + 0x58]
bswap ecx
movsx cx, r14b
cmovnp rcx, rbx
movups xmm0, xmmword [rsp + 0x58]
cmovo rcx, r10
movups xmmword [0x1400b8ee0], xmm0
mov cx, r8w
movsx rcx, si
xchg cl, ch
mov rcx, qword [rsp + 0x68]
jmp 0x140442f86
mov qword [0x1400b8ef0], rcx
jmp 0x140443011
mov rcx, qword [0x1400b8ee0]
stc
test rcx, rcx
jmp 0x140442fa2
je 0x140443025
mov rdx, qword [0x1400b8ef0]
test r13b, cl
jmp 0x140442fb7
sub rdx, rcx
test r12w, r13w
cmp si, r10w
cmp rdx, 0x1000
jb 0x140443000
mov rax, qword [rcx - 8]
cmc
stc
add rcx, 0xfffffffffffffff8
jmp 0x140442fdf
sub rcx, rax
cmp rcx, 0x20
jmp 0x140442feb
jae 0x140443156
add rdx, 0x27
setne ch
movsxd rcx, ebp
not ch
mov rcx, rax
call fcn.140232287
lea rax, [0x1400b8ee0]
jmp 0x140443011
xorps xmm0, xmm0
movups xmmword [rax], xmm0
mov qword [rax + 0x10], 0
sar cx, cl
add ch, 0x39
mov rcx, qword [rsp + 0x40]
cmp r8w, r10w
test rcx, rcx
jmp 0x140443036
je 0x14044309b
mov rdx, qword [rsp + 0x50]
stc
jmp 0x140443047
sub rdx, rcx
cmp rdx, 0x1000
jmp 0x140443056
jb 0x140443096
mov rax, qword [rcx - 8]
cmp r10b, 0xbc
cmc
add rcx, 0xfffffffffffffff8
clc
jmp 0x140443075
sub rcx, rax
cmp rcx, 0x20
jmp 0x140443081
jae 0x140443156
add rdx, 0x27
not rcx
mov rcx, rax
jmp 0x140443096
call fcn.140232287
call fcn.140056e60
mov ecx, 0x58
jmp 0x1404430aa
call fcn.14044721b
mov rsi, rax
mov rcx, rax
jmp 0x1404430ba
call fcn.1403b48ab
mov qword [0x1400b8ec0], rsi
mov rcx, rsi
jmp 0x1404430ce
call fcn.1403b4edc
mov qword [rsp + 0x28], 0
inc r8b
mov dword [rsp + 0x20], 0
shrd r8w, r9w, 0xe0
lea r8, [0x14005d5f0]
cmp r11w, 0x49af
clc
sub ecx, ecx
xor edx, edx
stc
sub r9d, r9d
jmp 0x140443108
call qword [sym.imp.KERNEL32.dll_CreateThread]
mov rcx, qword [0x1400b8ec0]
jmp 0x14044311a
call fcn.14019e1a2
call fcn.1404368ce
mov eax, dword [0x1400dd058]
mov r10, 0xffffffffffffffff
xor edx, edx
jmp 0x140443138
syscall
xor eax, eax
rol si, cl
xadd sil, sil
ror rsi, 0xd2
add rsp, 0x70
setbe sil
pop rsi
jmp 0x140443155
ret
call fcn.1404b549a
int3