Function at 0x140004d70
Capabilities:
Accept command line arguments
Contain obfuscated stackstrings

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0xe0]
sub rsp, 0x1e0
mov rax, qword [0x14024a908]
xor rax, rsp
mov qword [rbp + 0xd0], rax
mov esi, edx
mov r14, rcx
mov qword [rsp + 0x78], rcx
xor r15d, r15d
mov dword [rbp - 0x44], 0x7977796d
mov word [rbp - 0x39], 0x7471
mov dword [rbp - 0x4d], 0x6d767072
mov word [rbp - 0x55], 0x7278
mov word [rbp - 0x58], 0x6a66
mov dword [rbp - 0x51], 0x6e667162
mov dword [rbp - 0x3e], 0x69637a68
mov byte [rbp - 0x56], 0x63
mov word [rbp - 0x49], 0x7673
mov word [rbp - 0x46], 0x6b62
mov word [rbp - 0x53], 0x7861
mov byte [rbp - 0x37], r15b
mov word [rbp - 0x40], 0x6a74
mov byte [rbp - 0x3a], VarBstrFromDisp
mov byte [rbp - 0x47], VarBstrFromDisp
mov ebx, r15d
mov edi, 0x100
mov r8d, edi
xor edx, edx
lea rcx, [rbp - 0x30]
call fcn.140198640
lea rax, [rbp - 0x58]
mov r9, 0xffffffffffffffff
nop dword [rax]
inc r9
cmp byte [rax + r9], bl
jne 0x140004e30
mov r8d, r15d
mov r10, r15
lea r11, [0x140257850]
nop word [rax + rax]
mov byte [r10 + r11], r8b
xor edx, edx
mov eax, r8d
div r9d
movzx eax, byte [rbp + rdx - 0x58]
mov byte [rbp + r10 - 0x30], al
inc r8d
lea r10, [r10 + 1]
cmp r8d, edi
jl 0x140004e50
mov rdx, r15
nop word [rax + rax]
movzx r8d, byte [rdx + r11]
movsx eax, byte [rbp + rdx - 0x30]
add ebx, eax
add ebx, r8d
and ebx, 0x800000ff
jge 0x140004ea1
dec ebx
or ebx, 0xffffff00
inc ebx
movsxd rcx, ebx
movzx eax, byte [rcx + r11]
mov byte [rdx + r11], al
mov byte [rcx + r11], r8b
inc rdx
sub rdi, 1
jne 0x140004e80
mov edx, esi
mov rcx, r14
call fcn.140004cd0
test al, al
je 0x1400054b4
call qword [sym.imp.KERNEL32.dll_GetCommandLineW]
mov rcx, rax
lea rdx, [rbp - 0x80]
call qword [sym.imp.SHELL32.dll_CommandLineToArgvW]
mov r12, rax
xorps xmm0, xmm0
movups xmmword [rbp - 0x78], xmm0
mov qword [rbp - 0x68], r15
mov r13d, 7
mov qword [rbp - 0x60], r13
mov word [rbp - 0x78], r15w
mov ecx, dword [rbp - 0x80]
test ecx, ecx
jle 0x140005462
mov dword [rsp + 0x30], r15d
lea r14, [0x140217d64]
mov esi, 0x20
lea rdi, [0x140217d58]
mov rdx, qword [r12]
lea rcx, [rsp + 0x58]
call fcn.140005580
mov r10, rax
cmp qword [rax + 0x18], 8
jb 0x140004f3a
mov r10, qword [rax]
mov rcx, qword [rax + 0x10]
cmp rcx, 1
jb 0x140004fa2
lea r9, [r10 + rcx*2]
mov rbx, r10
nop dword [rax + rax]
mov rax, r9
sub rax, rbx
sar rax, 1
je 0x140004fa2
cmp word [rbx], 0x20
je 0x140004f6b
add rbx, 2
sub rax, 1
jmp 0x140004f59
test rbx, rbx
je 0x140004fa2
mov edx, 1
mov rcx, rdi
mov r8, rbx
sub r8, rdi
nop
movzx eax, word [rcx]
cmp word [r8 + rcx], ax
jne 0x140004f9c
add rcx, 2
sub rdx, 1
jne 0x140004f80
sub rbx, r10
sar rbx, 1
jmp 0x140004fa9
add rbx, 2
jmp 0x140004f50
mov rbx, 0xffffffffffffffff
mov rdx, qword [rsp + 0x70]
cmp rdx, 8
jb 0x140004feb
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x58]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140004fe6
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400054f6
call fcn.140003ae0
mov rdx, qword [r12]
cmp rbx, 0xffffffffffffffff
jne 0x14000517e
lea rcx, [rsp + 0x58]
call fcn.140005580
mov rcx, rax
mov rdx, qword [rax + 0x10]
mov r9, qword [rax + 0x18]
mov rax, r9
sub rax, rdx
cmp rax, 1
jb 0x140005039
lea r8, [rdx + 1]
mov qword [rcx + 0x10], r8
mov rax, rcx
cmp r9, 8
jb 0x14000502e
mov rax, qword [rcx]
mov word [rax + rdx*2], si
mov word [rax + r8*2], r15w
jmp 0x140005052
mov qword [rsp + 0x20], 1
mov r9, rdi
mov edx, 1
call fcn.1400056c0
mov rcx, rax
movups xmm0, xmmword [rcx]
movups xmmword [rsp + 0x38], xmm0
movups xmm1, xmmword [rcx + 0x10]
movups xmmword [rsp + 0x48], xmm1
mov qword [rcx + 0x10], r15
mov qword [rcx + 0x18], r13
mov word [rcx], r15w
lea r9, [rsp + 0x38]
movq rdi, xmm0
movdqa xmm0, xmm1
psrldq xmm0, 8
movq r14, xmm0
cmp r14, 8
cmovae r9, rdi
mov r15, qword [rbp - 0x68]
mov rcx, qword [rbp - 0x60]
mov rax, rcx
sub rax, r15
movq rsi, xmm1
cmp rsi, rax
ja 0x1400050da
lea rax, [rsi + r15]
mov qword [rbp - 0x68], rax
lea rbx, [rbp - 0x78]
cmp rcx, 8
cmovae rbx, qword [rbp - 0x78]
lea rcx, [rbx + r15*2]
lea r8, [rsi + rsi]
mov rdx, r9
call fcn.140197f90
lea rax, [rsi + r15]
xor r15d, r15d
mov word [rbx + rax*2], r15w
jmp 0x1400050f8
mov qword [rsp + 0x20], rsi
mov rdx, rsi
lea rcx, [rbp - 0x78]
call fcn.1400056c0
mov r14, qword [rsp + 0x50]
mov rdi, qword [rsp + 0x38]
xor r15d, r15d
cmp r14, 8
jb 0x140005134
lea rdx, [r14*2 + 2]
mov rax, rdi
cmp rdx, 0x1000
jb 0x14000512b
add rdx, 0x27
mov rdi, qword [rdi - 8]
sub rax, rdi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400054fc
mov rcx, rdi
call fcn.140003ae0
nop
mov rdx, qword [rsp + 0x70]
cmp rdx, 8
jb 0x140005442
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x58]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000543d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400054ea
jmp 0x14000543d
lea rcx, [rbp - 0x58]
call fcn.140005580
mov rdi, rax
mov rcx, qword [rax + 0x10]
mov rdx, qword [rax + 0x18]
mov rax, rdx
sub rax, rcx
cmp rax, 1
jb 0x140005225
lea rax, [rcx + 1]
mov qword [rdi + 0x10], rax
mov rsi, rdi
cmp rdx, 8
jb 0x1400051b6
mov rsi, qword [rdi]
lea r8, [rcx + rcx]
lea rax, [0x140217d66]
cmp rax, rsi
jbe 0x1400051e4
lea rax, [r8 + rsi]
cmp r14, rax
ja 0x1400051e4
cmp rsi, r14
ja 0x1400051d9
mov rbx, r15
jmp 0x1400051e9
mov rbx, rsi
sub rbx, r14
sar rbx, 1
jmp 0x1400051e9
mov ebx, 1
lea rcx, [rsi + 2]
add r8, 2
mov rdx, rsi
call fcn.140197f90
add rbx, rbx
mov r8, rbx
mov rdx, r14
mov rcx, rsi
call fcn.140197f90
lea rcx, [rsi + rbx]
mov r8d, 2
sub r8, rbx
lea rdx, [rbx + 2]
add rdx, r14
call fcn.140197f90
jmp 0x14000523e
mov qword [rsp + 0x28], 1
mov edx, 1
mov rcx, rdi
call fcn.140005890
mov rdi, rax
xorps xmm0, xmm0
movups xmmword [rsp + 0x38], xmm0
mov qword [rsp + 0x48], r15
mov qword [rsp + 0x50], r15
movups xmm0, xmmword [rdi]
movups xmmword [rsp + 0x38], xmm0
movups xmm1, xmmword [rdi + 0x10]
movups xmmword [rsp + 0x48], xmm1
mov qword [rdi + 0x10], r15
mov qword [rdi + 0x18], r13
mov word [rdi], r15w
mov rcx, qword [rsp + 0x48]
mov rdx, qword [rsp + 0x50]
mov rax, rdx
sub rax, rcx
cmp rax, 2
jb 0x1400052af
lea rax, [rcx + 2]
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x38]
cmp rdx, 8
cmovae rax, qword [rsp + 0x38]
mov dword [rax + rcx*2], 0x200022
mov word [rax + rcx*2 + 4], r15w
lea rax, [rsp + 0x38]
jmp 0x1400052ce
mov qword [rsp + 0x20], 2
lea r9, [0x140217d5c]
mov edx, 2
lea rcx, [rsp + 0x38]
call fcn.1400056c0
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x58], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x68], xmm1
mov qword [rax + 0x10], r15
mov qword [rax + 0x18], r13
mov word [rax], r15w
lea r9, [rsp + 0x58]
movq rdi, xmm0
movdqa xmm0, xmm1
psrldq xmm0, 8
movq r14, xmm0
cmp r14, 8
cmovae r9, rdi
mov r15, qword [rbp - 0x68]
mov rcx, qword [rbp - 0x60]
mov rax, rcx
sub rax, r15
movq rsi, xmm1
cmp rsi, rax
ja 0x140005356
lea rax, [rsi + r15]
mov qword [rbp - 0x68], rax
lea rbx, [rbp - 0x78]
cmp rcx, 8
cmovae rbx, qword [rbp - 0x78]
lea rcx, [rbx + r15*2]
lea r8, [rsi + rsi]
mov rdx, r9
call fcn.140197f90
lea rax, [rsi + r15]
xor r15d, r15d
mov word [rbx + rax*2], r15w
jmp 0x140005374
mov qword [rsp + 0x20], rsi
mov rdx, rsi
lea rcx, [rbp - 0x78]
call fcn.1400056c0
mov r14, qword [rsp + 0x70]
mov rdi, qword [rsp + 0x58]
xor r15d, r15d
cmp r14, 8
jb 0x1400053b0
lea rdx, [r14*2 + 2]
mov rax, rdi
cmp rdx, 0x1000
jb 0x1400053a7
add rdx, 0x27
mov rdi, qword [rdi - 8]
sub rax, rdi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140005502
mov rcx, rdi
call fcn.140003ae0
nop
mov rdx, qword [rsp + 0x50]
cmp rdx, 8
jb 0x1400053f2
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x38]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400053ed
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140005508
call fcn.140003ae0
mov qword [rsp + 0x48], r15
mov qword [rsp + 0x50], r13
mov word [rsp + 0x38], r15w
mov rdx, qword [rbp - 0x40]
cmp rdx, 8
jb 0x140005442
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x58]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000543d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400054e4
call fcn.140003ae0
mov ebx, dword [rsp + 0x30]
inc ebx
mov dword [rsp + 0x30], ebx
add r12, 8
cmp ebx, dword [rbp - 0x80]
jl 0x140004f0c
mov r13, qword [rbp - 0x60]
mov r14, qword [rsp + 0x78]
lea rdx, [rbp - 0x78]
cmp r13, 8
cmovae rdx, qword [rbp - 0x78]
mov rcx, r14
call fcn.140003af0
nop
mov rdx, qword [rbp - 0x60]
cmp rdx, 8
jb 0x1400054b4
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x78]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400054af
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400054f0
call fcn.140003ae0
mov rcx, qword [rbp + 0xd0]
xor rcx, rsp
call fcn.140195a10
lea r11, [rsp + 0x1e0]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call fcn.14019f714
nop
call fcn.14019f714
nop
call fcn.14019f714
nop
call fcn.14019f714
nop
call fcn.14019f714
nop
call fcn.14019f714
nop
call fcn.14019f714
int3