Function at 0x140440ae0
Capabilities:
Accept command line arguments

Disassembly:
push rsi
sub rsp, 0x70
jmp 0x140440aea
mov dword [rsp + 0x3c], 0
call qword [sym.imp.KERNEL32.dll_GetCommandLineW]
lea rdx, [rsp + 0x3c]
movsx ecx, bp
jmp 0x140440b0c
mov rcx, rax
jmp 0x140440b14
call qword [sym.imp.SHELL32.dll_CommandLineToArgvW]
movsxd r8, dword [rsp + 0x3c]
mov rdx, 0x4cd90880
lea rsi, [rsp + 0x40]
mov cx, 0x7c50
cqo
mov rcx, rsi
cwd
mov dh, 0x48
movzx edx, sp
mov rdx, rax
jmp 0x140440b44
call fcn.140440e89
lea rax, [0x1400b8ec8]
clc
cmp rsi, rax
je 0x140440cd0
mov rcx, qword [0x1400b8ec8]
clc
test rcx, rcx
jmp 0x140440b6a
je 0x140440bdc
mov rdx, qword [0x1400b8ed8]
clc
cmp dl, 0x72
sub rdx, rcx
cmp spl, 0x60
cmp rdx, 0x1000
jmp 0x140440b8e
jb 0x140440bd7
mov rax, qword [rcx - 8]
add rcx, 0xfffffffffffffff8
jmp 0x140440ba5
sub rcx, rax
stc
jmp 0x140440baf
cmp rcx, 0x20
jmp 0x140440bb8
jae 0x140440e7e
add rdx, 0x27
movsx cx, r13b
cmovl cx, si
movzx rcx, r12w
mov rcx, rax
jmp 0x140440bd7
call fcn.140237311
movaps xmm0, xmmword [rsp + 0x40]
lahf
movsx ax, r9b
movups xmmword [0x1400b8ec8], xmm0
jmp 0x140440bf3
mov rax, qword [rsp + 0x50]
jmp 0x140440bfd
mov qword [0x1400b8ed8], rax
jmp 0x140440c09
xorps xmm0, xmm0
movaps xmmword [rsp + 0x40], xmm0
mov qword [rsp + 0x50], 0
xor cx, r13w
cmp r14b, r15b
rol rcx, 0x93
mov rcx, qword [0x1400b8ee0]
cmp bl, bpl
stc
test rcx, rcx
jmp 0x140440c38
je 0x140440ca9
mov rdx, qword [0x1400b8ef0]
clc
sub rdx, rcx
cmp rdx, 0x1000
jmp 0x140440c55
jb 0x140440ca4
mov rax, qword [rcx - 8]
stc
test r14b, dl
add rcx, 0xfffffffffffffff8
jmp 0x140440c74
sub rcx, rax
stc
jmp 0x140440c7d
cmp rcx, 0x20
jmp 0x140440c86
jae 0x140440e7e
add rdx, 0x27
movzx cx, al
jmp 0x140440c9c
mov rcx, rax
jmp 0x140440ca4
call fcn.140237311
lea rax, [rsp + 0x58]
movups xmm0, xmmword [rsp + 0x58]
movups xmmword [0x1400b8ee0], xmm0
mov rcx, qword [rsp + 0x68]
jmp 0x140440cc4
mov qword [0x1400b8ef0], rcx
jmp 0x140440d42
mov rcx, qword [0x1400b8ee0]
test rcx, rcx
je 0x140440d50
mov rdx, qword [0x1400b8ef0]
cmp r8d, r10d
jmp 0x140440cf2
sub rdx, rcx
cmp r8b, 0x4d
cmp r11d, ebp
cmp rdx, 0x1000
jb 0x140440d36
mov rax, qword [rcx - 8]
cmc
add rcx, 0xfffffffffffffff8
stc
sub rcx, rax
stc
cmp rcx, 0x20
jmp 0x140440d20
jae 0x140440e7e
add rdx, 0x27
movsx cx, ch
mov rcx, rax
jmp 0x140440d36
call fcn.140237311
lea rax, [0x1400b8ee0]
xorps xmm0, xmm0
movups xmmword [rax], xmm0
mov qword [rax + 0x10], 0
mov rcx, qword [rsp + 0x40]
test spl, dil
cmc
test rcx, rcx
jmp 0x140440d61
je 0x140440dbc
mov rdx, qword [rsp + 0x50]
test bl, r14b
sub rdx, rcx
clc
cmp rdx, 0x1000
jmp 0x140440d7f
jb 0x140440db7
mov rax, qword [rcx - 8]
add rcx, 0xfffffffffffffff8
test r13b, al
sub rcx, rax
jmp 0x140440d98
cmp rcx, 0x20
jae 0x140440e7e
add rdx, 0x27
movsx ecx, r9w
not cl
movsxd rcx, r14d
mov rcx, rax
jmp 0x140440db7
call fcn.140237311
call fcn.140056e60
mov ecx, 0x58
jmp 0x140440dcb
call fcn.140444d48
mov rsi, rax
not cx
movsx cx, r8b
mov rcx, rax
call fcn.1403b194e
mov qword [0x1400b8ec0], rsi
jmp 0x140440df4
mov rcx, rsi
jmp 0x140440dfc
call fcn.1403b1f73
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
not r8
adc r8b, 0x93
sal r8w, cl
lea r8, [0x14005d5f0]
cmp r9w, ax
sub ecx, ecx
cmc
sub edx, edx
sub r9d, r9d
jmp 0x140440e35
call qword [sym.imp.KERNEL32.dll_CreateThread]
mov rcx, qword [0x1400b8ec0]
jmp 0x140440e47
call fcn.14024b5f8
call fcn.14043456a
mov eax, dword [0x1400dd058]
and r10w, 0x845
sub r10b, 0x4d
mov r10, 0xffffffffffffffff
sub edx, edx
jmp 0x140440e6f
syscall
sub eax, eax
add rsp, 0x70
pop rsi
jmp 0x140440e7d
ret
call fcn.1404b3352
int3