Function at 0x140002e40
Capabilities:
Accept command line arguments
Contain obfuscated stackstrings

Disassembly:
mov r11, rsp
push rdi
sub rsp, 0x140
mov qword [rsp + 0xb8], 0xfffffffffffffffe
mov qword [r11 + 8], rbx
mov rax, qword [0x140013040]
xor rax, rsp
mov qword [rsp + 0x130], rax
mov qword [r11 - 0x68], 7
xor ebx, ebx
mov qword [r11 - 0x70], rbx
mov word [r11 - 0x80], bx
call qword [sym.imp.KERNEL32.dll_GetCommandLineW]
mov rdx, rax
mov qword [rsp + 0x40], 7
mov qword [rsp + 0x38], rbx
mov word [rsp + 0x28], bx
xor eax, eax
or rcx, 0xffffffffffffffff
mov rdi, rdx
repne scasw ax, word [rdi]
not rcx
lea r8, [rcx - 1]
lea rcx, [rsp + 0x20]
call fcn.140003c50
lea rdx, [rsp + 0x20]
lea rcx, [rsp + 0x48]
call fcn.140001790
nop
or r9, 0xffffffffffffffff
xor r8d, r8d
mov rdx, rax
lea rcx, [rsp + 0xc0]
call fcn.140003620
nop
cmp qword [rsp + 0x68], 8
jb 0x140002ef3
mov rcx, qword [rsp + 0x50]
call fcn.140004d10
mov eax, ebx
cmp qword [rsp + 0xd8], rax
setne al
test eax, eax
jne 0x140002f23
cmp qword [rsp + 0xe0], 8
jb 0x140002f1c
mov rcx, qword [rsp + 0xc8]
call fcn.140004d10
xor eax, eax
jmp 0x14000338f
mov byte [rsp + 0x100], 0x6d
mov byte [rsp + 0x101], 0x6d
mov byte [rsp + 0x102], 0x76
mov byte [rsp + 0x103], 0x69
mov byte [rsp + 0x104], 0x76
mov byte [rsp + 0x105], 0x78
mov byte [rsp + 0x106], 0x6f
mov byte [rsp + 0x107], 0x2e
mov byte [rsp + 0x108], 0x74
mov byte [rsp + 0x109], 0x70
mov byte [rsp + 0x10a], 0x74
mov byte [rsp + 0x10b], 0
mov byte [rsp + 0xf8], 0x71
mov byte [rsp + 0xf9], 0x45
mov byte [rsp + 0xfa], 0x69
mov byte [rsp + 0xfb], 0x42
mov byte [rsp + 0xfc], 0x63
mov byte [rsp + 0xfd], 0x65
mov byte [rsp + 0xfe], 0x7a
mov byte [rsp + 0xff], 0
lea rax, [rsp + 0x20]
mov qword [rsp + 0x70], rax
mov qword [rsp + 0x40], 0xf
mov qword [rsp + 0x38], rbx
mov byte [rsp + 0x28], 0
xor eax, eax
or rcx, 0xffffffffffffffff
lea rdi, [rsp + 0xf8]
repne scasb al, byte [rdi]
not rcx
lea r8, [rcx - 1]
lea rdx, [rsp + 0xf8]
lea rcx, [rsp + 0x20]
call fcn.140003970
nop
mov qword [rsp + 0xb0], 0xf
mov qword [rsp + 0xa8], rbx
mov byte [rsp + 0x98], 0
xor eax, eax
or rcx, 0xffffffffffffffff
lea rdi, [rsp + 0x100]
repne scasb al, byte [rdi]
not rcx
lea r8, [rcx - 1]
lea rdx, [rsp + 0x100]
lea rcx, [rsp + 0x90]
call fcn.140003970
nop
lea rdx, [rsp + 0x20]
lea rcx, [rsp + 0x90]
call fcn.140001340
mov rdi, rax
test rax, rax
jne 0x14000308c
cmp qword [rsp + 0xe0], 8
jb 0x140003085
mov rcx, qword [rsp + 0xc8]
call fcn.140004d10
xor eax, eax
jmp 0x14000338f
mov qword [rsp + 0x68], 7
mov qword [rsp + 0x60], rbx
mov word [rsp + 0x50], bx
or r9, 0xffffffffffffffff
xor r8d, r8d
lea rdx, [rsp + 0xc0]
lea rcx, [rsp + 0x48]
call fcn.140003620
mov r8, rdi
lea rdx, [rsp + 0x48]
lea rcx, [rsp + 0x70]
call fcn.140002060
lea rdx, [rsp + 0x80]
mov rcx, qword [rax]
mov qword [rdx], rcx
mov rax, qword [rax + 8]
mov qword [rdx + 8], rax
mov byte [rsp + 0x110], 0x4b
mov byte [rsp + 0x111], 0x6c
mov byte [rsp + 0x112], 0x63
mov byte [rsp + 0x113], 0x7a
mov byte [rsp + 0x114], 0x66
mov byte [rsp + 0x115], 0x73
mov byte [rsp + 0x116], 0x33
mov byte [rsp + 0x117], 0x32
mov byte [rsp + 0x118], 0x2e
mov byte [rsp + 0x119], 0x6c
mov byte [rsp + 0x11a], 0x73
mov byte [rsp + 0x11b], 0x6b
mov byte [rsp + 0x11c], 0
mov byte [rsp + 0xf0], 0x4b
mov byte [rsp + 0xf1], 0x49
mov byte [rsp + 0xf2], 0x68
mov byte [rsp + 0xf3], 0x5a
mov byte [rsp + 0xf4], 0x71
mov byte [rsp + 0xf5], 0
lea rax, [rsp + 0x20]
mov qword [rsp + 0x70], rax
mov qword [rsp + 0x40], 0xf
mov qword [rsp + 0x38], rbx
mov byte [rsp + 0x28], 0
xor eax, eax
or rcx, 0xffffffffffffffff
lea rdi, [rsp + 0xf0]
repne scasb al, byte [rdi]
not rcx
lea r8, [rcx - 1]
lea rdx, [rsp + 0xf0]
lea rcx, [rsp + 0x20]
call fcn.140003970
nop
mov qword [rsp + 0x68], 0xf
mov qword [rsp + 0x60], rbx
mov byte [rsp + 0x50], 0
xor eax, eax
or rcx, 0xffffffffffffffff
lea rdi, [rsp + 0x110]
repne scasb al, byte [rdi]
not rcx
lea r8, [rcx - 1]
lea rdx, [rsp + 0x110]
lea rcx, [rsp + 0x48]
call fcn.140003970
nop
lea rdx, [rsp + 0x20]
lea rcx, [rsp + 0x48]
call fcn.140001340
lea rdx, [rsp + 0x80]
mov rcx, rax
call fcn.140002600
test eax, eax
jne 0x14000323e
cmp qword [rsp + 0xe0], 8
jb 0x140003237
mov rcx, qword [rsp + 0xc8]
call fcn.140004d10
xor eax, eax
jmp 0x14000338f
mov byte [rsp + 0x120], 0x43
mov byte [rsp + 0x121], 0x6f
mov byte [rsp + 0x122], 0x67
mov byte [rsp + 0x123], 0x65
mov byte [rsp + 0x124], 0x77
mov byte [rsp + 0x125], 0x76
mov byte [rsp + 0x126], 0x33
mov byte [rsp + 0x127], 0x32
mov byte [rsp + 0x128], 0x2e
mov byte [rsp + 0x129], 0x73
mov byte [rsp + 0x12a], 0x63
mov byte [rsp + 0x12b], 0x64
mov byte [rsp + 0x12c], 0
mov byte [rsp + 0xe8], 0x73
mov byte [rsp + 0xe9], 0x4b
mov byte [rsp + 0xea], 0x50
mov byte [rsp + 0xeb], 0x52
mov byte [rsp + 0xec], 0
lea rax, [rsp + 0x20]
mov qword [rsp + 0x70], rax
mov qword [rsp + 0x40], 0xf
mov qword [rsp + 0x38], rbx
mov byte [rsp + 0x28], 0
xor eax, eax
or rcx, 0xffffffffffffffff
lea rdi, [rsp + 0xe8]
repne scasb al, byte [rdi]
not rcx
lea r8, [rcx - 1]
lea rdx, [rsp + 0xe8]
lea rcx, [rsp + 0x20]
call fcn.140003970
nop
mov qword [rsp + 0x68], 0xf
mov qword [rsp + 0x60], rbx
mov byte [rsp + 0x50], 0
xor eax, eax
or rcx, 0xffffffffffffffff
lea rdi, [rsp + 0x120]
repne scasb al, byte [rdi]
not rcx
lea r8, [rcx - 1]
lea rdx, [rsp + 0x120]
lea rcx, [rsp + 0x48]
call fcn.140003970
nop
lea rdx, [rsp + 0x20]
lea rcx, [rsp + 0x48]
call fcn.140001340
lea rdx, [rsp + 0x80]
mov rcx, rax
call fcn.140002cc0
nop
cmp qword [rsp + 0xe0], 8
jb 0x14000338a
mov rcx, qword [rsp + 0xc8]
call fcn.140004d10
mov eax, 1
mov rcx, qword [rsp + 0x130]
xor rcx, rsp
call fcn.140004b60
mov rbx, qword [rsp + 0x150]
add rsp, 0x140
pop rdi
ret