Function at 0x140447e18
Capabilities:
Accept command line arguments
Create thread
Execute syscall

Disassembly:
push rsi
jmp 0x140447e21
sub rsp, 0x70
jmp 0x140447e2a
mov dword [rsp + 0x3c], 0
jmp 0x140447e37
call qword [sym.imp.KERNEL32.dll_GetCommandLineW]
lea rdx, [rsp + 0x3c]
jmp 0x140447e47
mov rcx, rax
jmp 0x140447e4f
call qword [sym.imp.SHELL32.dll_CommandLineToArgvW]
movsxd r8, dword [rsp + 0x3c]
movzx dx, r13b
mov cx, r12w
movzx esi, di
lea rsi, [rsp + 0x40]
movzx rcx, r13w
movzx cx, ah
mov cx, bx
mov rcx, rsi
cmovg edx, r12d
mov rdx, rax
call fcn.1404481a2
lea rax, [0x1400b8ec8]
cmc
cmp ebx, r14d
cmp rsi, rax
jmp 0x140447e98
je 0x140447fd4
mov rcx, qword [0x1400b8ec8]
test edi, 0x7eb47a0f
cmp r11w, 0x2a17
test rcx, rcx
jmp 0x140447eb9
je 0x140447f07
mov rdx, qword [0x1400b8ed8]
sub rdx, rcx
cmp rdx, 0x1000
jmp 0x140447ed5
jb 0x140447f02
mov rax, qword [rcx - 8]
add rcx, 0xfffffffffffffff8
stc
sub rcx, rax
cmp r8d, r12d
cmp rcx, 0x20
jae 0x140448197
add rdx, 0x27
xchg cl, ch
mov rcx, rax
jmp 0x140447f02
call fcn.14028ce60
movaps xmm0, xmmword [rsp + 0x40]
movzx ax, r15b
movups xmmword [0x1400b8ec8], xmm0
mov rax, qword [rsp + 0x50]
mov qword [0x1400b8ed8], rax
xorps xmm0, xmm0
movaps xmmword [rsp + 0x40], xmm0
shr rcx, cl
mov qword [rsp + 0x50], 0
and cx, 0x5cbe
bt cx, bp
stc
mov rcx, qword [0x1400b8ee0]
jmp 0x140447f4f
test rcx, rcx
je 0x140447fa7
mov rdx, qword [0x1400b8ef0]
sub rdx, rcx
cmp rdx, 0x1000
jb 0x140447fa2
mov rax, qword [rcx - 8]
stc
cmp ebp, ebp
add rcx, 0xfffffffffffffff8
test r15b, 0x14
cmp r13b, 0x86
cmc
sub rcx, rax
cmc
cmp rcx, 0x20
jmp 0x140447f90
jae 0x140448197
add rdx, 0x27
mov rcx, rax
jmp 0x140447fa2
call fcn.14028ce60
lea rax, [rsp + 0x58]
movups xmm0, xmmword [rsp + 0x58]
movsx rcx, r8w
movsx ecx, cx
movzx cx, al
movups xmmword [0x1400b8ee0], xmm0
mov rcx, qword [rsp + 0x68]
mov qword [0x1400b8ef0], rcx
jmp 0x14044804b
mov rcx, qword [0x1400b8ee0]
jmp 0x140447fe0
test rcx, rcx
jmp 0x140447fe8
je 0x14044806e
mov rdx, qword [0x1400b8ef0]
test r15b, 0xa3
cmp r9b, 0x67
cmc
sub rdx, rcx
cmc
cmp rdx, 0x1000
jb 0x14044803f
mov rax, qword [rcx - 8]
cmp bp, 0x7f9f
add rcx, 0xfffffffffffffff8
cmc
jmp 0x140448025
sub rcx, rax
stc
cmp rcx, 0x20
jae 0x140448197
add rdx, 0x27
mov rcx, rax
jmp 0x14044803f
call fcn.14028ce60
lea rax, [0x1400b8ee0]
xorps xmm0, xmm0
movups xmmword [rax], xmm0
rcr ecx, 0x96
movzx rcx, bx
clc
mov qword [rax + 0x10], 0
shr cl, 0xb6
shr rcx, cl
xor rcx, 0x38094709
mov rcx, qword [rsp + 0x40]
test rcx, rcx
jmp 0x14044807b
je 0x1404480e4
mov rdx, qword [rsp + 0x50]
jmp 0x14044808e
sub rdx, rcx
cmc
stc
cmp r10b, r11b
cmp rdx, 0x1000
jb 0x1404480df
mov rax, qword [rcx - 8]
jmp 0x1404480b0
add rcx, 0xfffffffffffffff8
test ecx, r10d
cmc
sub rcx, rax
test r13w, 0x2a61
cmp rcx, 0x20
jmp 0x1404480ca
jae 0x140448197
add rdx, 0x27
bswap cx
mov rcx, rax
jmp 0x1404480df
call fcn.14028ce60
call fcn.140056e60
mov ecx, 0x58
jmp 0x1404480f3
call fcn.14044c171
mov rsi, rax
bswap cx
movzx cx, r10b
mov rcx, rax
jmp 0x14044810b
call fcn.1403b9343
mov qword [0x1400b8ec0], rsi
movsx ecx, ax
mov rcx, rsi
jmp 0x140448122
call fcn.1403b991c
mov qword [rsp + 0x28], 0
rcr r8d, cl
movsx r8w, sil
mov dword [rsp + 0x20], 0
lea r8, [0x14005d5f0]
sub ecx, ecx
cmc
test rdi, rbx
sub edx, edx
sub r9d, r9d
jmp 0x140448157
call qword [sym.imp.KERNEL32.dll_CreateThread]
mov rcx, qword [0x1400b8ec0]
jmp 0x140448169
call fcn.14013c0a0
call fcn.14043b90e
mov eax, dword [0x1400dd058]
mov r10, 0xffffffffffffffff
cmc
jmp 0x140448186
xor edx, edx
jmp 0x14044818d
syscall
sub eax, eax
add rsp, 0x70
pop rsi
ret
call fcn.1404ba5a5
int3