Function at 0x14043fb7a
Capabilities:
Accept command line arguments
Create thread

Disassembly:
push rsi
cmp r15w, 0x3f51
sub rsp, 0x70
jmp 0x14043fb8a
mov dword [rsp + 0x3c], 0
jmp 0x14043fb97
call qword [sym.imp.KERNEL32.dll_GetCommandLineW]
lea rdx, [rsp + 0x3c]
not ecx
mov cl, r14b
mov rcx, rax
jmp 0x14043fbaf
call qword [sym.imp.SHELL32.dll_CommandLineToArgvW]
movsxd r8, dword [rsp + 0x3c]
lea rsi, [rsp + 0x40]
jmp 0x14043fbc7
mov rcx, rsi
cqo
xchg dx, dx
mov rdx, rax
jmp 0x14043fbd7
call fcn.14043ff32
lea rax, [0x1400b8ec8]
cmp bpl, bpl
cmp rsi, rax
jmp 0x14043fbee
je 0x14043fd5a
mov rcx, qword [0x1400b8ec8]
test rcx, rcx
jmp 0x14043fc03
je 0x14043fc5f
mov rdx, qword [0x1400b8ed8]
clc
cmc
sub rdx, rcx
cmp rdx, 0x1000
jmp 0x14043fc21
jb 0x14043fc5a
mov rax, qword [rcx - 8]
test cl, 0x93
cmp ax, sp
add rcx, 0xfffffffffffffff8
clc
test bl, 0x5e
sub rcx, rax
cmp rcx, 0x20
jae 0x14043ff27
add rdx, 0x27
xchg cx, cx
movsx cx, r9b
mov rcx, rax
jmp 0x14043fc5a
call fcn.140271af4
movaps xmm0, xmmword [rsp + 0x40]
movsx rax, r14w
setle al
movzx eax, r15w
movups xmmword [0x1400b8ec8], xmm0
movsx rax, ax
mov rax, 0x5fc33072
movzx eax, dx
mov rax, qword [rsp + 0x50]
jmp 0x14043fc8e
mov qword [0x1400b8ed8], rax
jmp 0x14043fc9a
xorps xmm0, xmm0
movaps xmmword [rsp + 0x40], xmm0
rcr cx, cl
mov qword [rsp + 0x50], 0
mov rcx, qword [0x1400b8ee0]
jmp 0x14043fcbd
test rcx, rcx
jmp 0x14043fcc5
je 0x14043fd25
mov rdx, qword [0x1400b8ef0]
sub rdx, rcx
cmc
cmp cx, r11w
cmp rdx, 0x1000
jmp 0x14043fce6
jb 0x14043fd20
mov rax, qword [rcx - 8]
cmp r14b, r10b
test r14w, 0x7ca1
add rcx, 0xfffffffffffffff8
sub rcx, rax
clc
test r13b, 0xb3
cmp rcx, 0x20
jmp 0x14043fd0e
jae 0x14043ff27
add rdx, 0x27
mov rcx, rax
jmp 0x14043fd20
call fcn.140271af4
lea rax, [rsp + 0x58]
movups xmm0, xmmword [rsp + 0x58]
mov ch, 0x9d
setae ch
movzx ecx, cx
movups xmmword [0x1400b8ee0], xmm0
mov rcx, qword [rsp + 0x68]
jmp 0x14043fd49
mov qword [0x1400b8ef0], rcx
jmp 0x14043fd55
jmp 0x14043fdd6
mov rcx, qword [0x1400b8ee0]
test rcx, rcx
je 0x14043fdee
mov rdx, qword [0x1400b8ef0]
sub rdx, rcx
cmc
jmp 0x14043fd7d
cmp rdx, 0x1000
jmp 0x14043fd89
jb 0x14043fdc5
mov rax, qword [rcx - 8]
cmp r10, 0x7c9000f5
clc
add rcx, 0xfffffffffffffff8
cmp spl, 0xc3
sub rcx, rax
clc
test bpl, r15b
cmp rcx, 0x20
jmp 0x14043fdb3
jae 0x14043ff27
add rdx, 0x27
mov rcx, rax
jmp 0x14043fdc5
call fcn.140271af4
lea rax, [0x1400b8ee0]
jmp 0x14043fdd6
xorps xmm0, xmm0
movups xmmword [rax], xmm0
adc cx, sp
movzx ecx, si
btr rcx, rsp
mov qword [rax + 0x10], 0
mov rcx, qword [rsp + 0x40]
stc
test r14b, 0xcd
test rcx, rcx
jmp 0x14043fe00
je 0x14043fe68
mov rdx, qword [rsp + 0x50]
test r15, r11
sub rdx, rcx
test r14, 0x7c1817e2
cmp eax, 0x370f72eb
jmp 0x14043fe22
cmp rdx, 0x1000
jmp 0x14043fe2e
jb 0x14043fe63
mov rax, qword [rcx - 8]
add rcx, 0xfffffffffffffff8
cmp ah, 9
sub rcx, rax
clc
cmp rcx, 0x20
jmp 0x14043fe4c
jae 0x14043ff27
add rdx, 0x27
jmp 0x14043fe5b
mov rcx, rax
jmp 0x14043fe63
call fcn.140271af4
call fcn.140056e60
mov ecx, 0x58
jmp 0x14043fe77
call fcn.140443fc3
mov rsi, rax
mov cl, 0xe7
movsxd rcx, r9d
cmovs cx, r10w
mov rcx, rax
jmp 0x14043fe91
call fcn.1403b0ed6
mov qword [0x1400b8ec0], rsi
setg ch
movzx ecx, sp
mov rcx, rsi
jmp 0x14043feab
call fcn.1403b14e0
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
xor r8b, 0x87
movsx r8w, r13b
movsxd r8, r10d
lea r8, [0x14005d5f0]
sub ecx, ecx
sub edx, edx
sub r9d, r9d
jmp 0x14043fee0
call qword [sym.imp.KERNEL32.dll_CreateThread]
mov rcx, qword [0x1400b8ec0]
call fcn.14023d160
call fcn.1404336d9
mov eax, dword [0x1400dd058]
mov r10, 0xffffffffffffffff
xor edx, edx
syscall
sub eax, eax
movsx rsi, cx
shr sil, cl
btc si, 0xe4
add rsp, 0x70
mov sil, r11b
not si
pop rsi
jmp 0x14043ff26
ret
call fcn.1404b245b
int3