Function at 0x1400452e0
Capabilities:
Create a process with modified i/o handles and window
Create process on windows
Encode data using base64
Encrypt data using speck
Get common file path
Parse credit card information
Query environment variable

Disassembly:
push rbp
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbx
sub rsp, 0x628
lea rbp, [rsp + 0x80]
movdqa xmmword [rbp + 0x590], xmm6
mov byte [rbp + 0x418], r9b
mov qword [rbp + 0x410], r8
mov rsi, rdx
mov qword [rbp + 0x4c0], rcx
movzx eax, byte [rdx + 0xa0]
mov rdi, qword [rdx + 0x98]
test rdi, rdi
setne cl
or cl, al
mov qword [rbp + 0x548], rdx
je 0x140045543
mov qword [rbp + 0x438], 0
mov qword [rbp + 0x448], 0
test al, al
jne 0x140045577
call sub.KERNEL32.dll_GetEnvironmentStringsW
test rax, rax
je 0x1400491c1
mov qword [rbp + 0x588], rdi
lea rdi, [rbp + 0x4e0]
mov qword [rbp + 0x580], rax
mov r15, rax
nop word cs:[rax + rax]
cmp word [r15], 0
je 0x14004555d
mov r13, r15
mov r12, 0xffffffffffffffff
mov rcx, 0xfffffffffffffffe
nop dword [rax]
mov rax, rcx
cmp word [r13 + r12*2 + 2], 0
lea r12, [r12 + 1]
lea rcx, [rcx + 2]
jne 0x1400453b0
test r12, r12
je 0x1400478fe
lea r15, [r12*2 + 2]
add r15, r13
lea rcx, [r12 + r12]
cmp rcx, 2
je 0x140045390
xor esi, esi
nop word cs:[rax + rax]
cmp word [r13 + rsi*2 + 2], 0x3d
je 0x140045410
inc rsi
add rax, 0xfffffffffffffffe
jne 0x1400453f0
jmp 0x140045390
lea r8, [rsi + 1]
cmp rsi, r12
jae 0x14004861e
mov rcx, rdi
mov rdx, r13
call fcn.14001dd40
add rsi, 2
mov r8, r12
sub r8, rsi
jb 0x140048638
lea rdx, [rsi*2]
add rdx, r13
lea rcx, [rbp - 0x30]
call fcn.14001dd40
mov rbx, qword [rbp + 0x4e0]
mov rsi, qword [rbp + 0x4e8]
movdqu xmm6, xmmword [rbp + 0x4f0]
mov r13, qword [rbp - 0x30]
mov r12, qword [rbp - 0x28]
lea rax, [rbp - 0x10]
movups xmm0, xmmword [rax - 0x10]
movaps xmmword [rbp + 0x550], xmm0
movabs rax, 0x8000000000000000
cmp rbx, rax
je 0x14004555d
movq rax, xmm6
add rax, rsi
mov qword [rbp + 0x4e0], rsi
mov qword [rbp + 0x4e8], rax
mov word [rbp + 0x4f0], 0
lea r14, [rbp + 0x450]
mov rcx, r14
mov rdx, rdi
call fcn.140049f10
mov qword [rbp - 0x30], rbx
mov qword [rbp - 0x28], rsi
movdqu xmmword [rbp - 0x20], xmm6
mov rax, qword [rbp + 0x460]
lea rcx, [rbp - 0x10]
mov qword [rcx + 0x10], rax
movups xmm0, xmmword [rbp + 0x450]
movups xmmword [rcx], xmm0
mov qword [rbp + 0x4e0], r13
mov qword [rbp + 0x4e8], r12
movdqa xmm0, xmmword [rbp + 0x550]
lea rax, [rbp + 0x4f0]
movdqu xmmword [rax], xmm0
mov rcx, r14
lea rdx, [rbp + 0x438]
lea r8, [rbp - 0x30]
mov r9, rdi
call fcn.14004a120
mov rax, qword [rbp + 0x450]
shl rax, 1
test rax, rax
je 0x140045390
mov rcx, qword [rbp + 0x458]
mov edx, 1
call fcn.140008f20
jmp 0x140045390
mov qword [rbp + 0x3e0], 0
lea rax, [rbp + 0x3e8]
xor r14d, r14d
jmp 0x140045fa7
mov rcx, qword [rbp + 0x580]
call sub.KERNEL32.dll_FreeEnvironmentStringsW
mov rsi, qword [rbp + 0x548]
mov rdi, qword [rbp + 0x588]
mov rax, qword [rsi + 0x88]
mov rcx, qword [rsi + 0x90]
mov qword [rbp + 0x580], rcx
xor r13d, r13d
test rax, rax
setne r13b
cmove rdi, rax
mov qword [rbp + 0x588], rdi
mov qword [rbp + 0x578], 0
xor r14d, r14d
jmp 0x1400455c2
xor eax, eax
mov r10, qword [rbp + 0x588]
test r10, r10
je 0x140045dee
test r13b, 1
je 0x140045690
test r14, r14
jne 0x140045690
mov r13d, 1
mov r8, qword [rbp + 0x580]
test r8, r8
je 0x1400456a2
mov rdx, r8
and rdx, 7
je 0x140045c9b
mov rcx, r8
and rcx, 0xfffffffffffffff8
mov r14, rax
nop word cs:[rax + rax]
mov r14, qword [r14 + 0x3d8]
dec rdx
jne 0x140045620
cmp r8, 8
jb 0x14004567e
nop word cs:[rax + rax]
mov rax, qword [r14 + 0x3d8]
mov rax, qword [rax + 0x3d8]
mov rax, qword [rax + 0x3d8]
mov rax, qword [rax + 0x3d8]
mov rax, qword [rax + 0x3d8]
mov rax, qword [rax + 0x3d8]
mov rax, qword [rax + 0x3d8]
mov r14, qword [rax + 0x3d8]
add rcx, 0xfffffffffffffff8
jne 0x140045640
xor edx, edx
jmp 0x1400456a7
test r13b, 1
mov rdx, qword [rbp + 0x580]
jne 0x1400456a9
jmp 0x14004968e
xor edx, edx
mov r14, rax
xor eax, eax
mov qword [rbp + 0x4d8], r13
movzx ecx, word [r14 + 0x3d2]
cmp rdx, rcx
jae 0x1400456d0
mov rcx, rdx
mov r13, r14
jmp 0x1400456f8
mov r13, qword [r14 + 0x160]
test r13, r13
je 0x14004906a
inc rax
movzx ecx, word [r14 + 0x3d0]
mov r14, r13
cmp cx, word [r13 + 0x3d2]
jae 0x1400456d0
lea rdx, [rcx + 1]
test rax, rax
je 0x1400457a0
lea r8, [rdx*8 + 0x3d8]
add r8, r13
mov r9, rax
and r9, 7
je 0x140045870
mov rdx, rax
and rdx, 0xfffffffffffffff8
nop word cs:[rax + rax]
mov r14, qword [r8]
lea r8, [r14 + 0x3d8]
dec r9
jne 0x140045730
cmp rax, 8
jb 0x140045791
nop word cs:[rax + rax]
mov rax, qword [r8]
mov rax, qword [rax + 0x3d8]
mov rax, qword [rax + 0x3d8]
mov rax, qword [rax + 0x3d8]
mov rax, qword [rax + 0x3d8]
mov rax, qword [rax + 0x3d8]
mov rax, qword [rax + 0x3d8]
mov r14, qword [rax + 0x3d8]
lea r8, [r14 + 0x3d8]
add rdx, 0xfffffffffffffff8
jne 0x140045750
xor edx, edx
jmp 0x1400457a3
mov r14, r13
dec r10
imul rax, rcx, 0x38
lea r12, [rax + r13]
add r12, 0x168
shl rcx, 5
movabs rax, 0x8000000000000000
cmp qword [r13 + rcx], rax
mov qword [rbp + 0x588], r10
mov qword [rbp + 0x580], rdx
jne 0x140045830
mov rdi, qword [rbp + 0x438]
mov eax, 0
test rdi, rdi
mov r13, qword [rbp + 0x4d8]
je 0x1400455c2
mov r9, qword [r12 + 0x28]
mov rax, qword [r12 + 0x30]
mov rsi, qword [rbp + 0x440]
mov qword [rsp + 0x20], rax
lea rcx, [rbp + 0x550]
mov rdx, rdi
mov r8, rsi
call fcn.14004b1f0
cmp dword [rbp + 0x550], 1
jne 0x1400459ec
xor eax, eax
jmp 0x1400455c2
add r13, rcx
mov rsi, qword [r12 + 0x10]
test rsi, rsi
js 0x1400496df
mov rbx, qword [r12 + 8]
je 0x140045882
movzx eax, byte [0x14007c158]
mov rcx, rsi
call fcn.140050b40
test rax, rax
jne 0x140045887
jmp 0x1400496d3
mov rdx, rax
cmp rax, 8
jae 0x140045750
jmp 0x140045791
mov eax, 1
mov qword [rbp + 0x570], rax
mov rcx, rax
mov rdx, rbx
mov r8, rsi
call sub.msvcrt.dll_memcpy
mov rdi, qword [r12 + 0x30]
lea r15, [rdi + rdi]
test rdi, rdi
js 0x140049706
movabs rax, 0x8000000000000000
add rax, 0xfffffffffffffffe
cmp r15, rax
ja 0x140049706
movzx eax, byte [r12 + 0x18]
mov byte [rbp + 0x4b0], al
mov rdx, qword [r12 + 0x28]
test r15, r15
je 0x140045900
movzx eax, byte [0x14007c158]
mov rcx, r15
mov rbx, rdx
call fcn.140050b40
mov rdx, rbx
mov rbx, rax
mov r12, rdi
test rax, rax
jne 0x140045908
jmp 0x1400496fa
mov ebx, 2
xor r12d, r12d
mov rcx, rbx
mov r8, r15
call sub.msvcrt.dll_memcpy
mov qword [rbp - 0x30], rsi
mov rax, qword [rbp + 0x570]
mov qword [rbp - 0x28], rax
mov qword [rbp - 0x20], rsi
movzx eax, byte [rbp + 0x4b0]
mov byte [rbp - 0x18], al
mov qword [rbp - 0x10], r12
mov qword [rbp - 8], rbx
mov qword [rbp], rdi
mov rsi, qword [r13 + 0x10]
test rsi, rsi
js 0x14004972d
mov rdi, qword [r13 + 8]
je 0x14004596b
movzx eax, byte [0x14007c158]
mov rcx, rsi
call fcn.140050b40
mov rbx, rax
test rax, rax
jne 0x140045970
jmp 0x140049721
mov ebx, 1
mov rcx, rbx
mov rdx, rdi
mov r8, rsi
call sub.msvcrt.dll_memcpy
movzx eax, byte [r13 + 0x18]
mov qword [rbp + 0x4e0], rsi
mov qword [rbp + 0x4e8], rbx
mov qword [rbp + 0x4f0], rsi
mov byte [rbp + 0x4f8], al
lea rcx, [rbp + 0x450]
lea rdx, [rbp + 0x438]
lea r8, [rbp - 0x30]
lea r9, [rbp + 0x4e0]
call fcn.14004a120
mov rax, qword [rbp + 0x450]
shl rax, 1
test rax, rax
mov r13, qword [rbp + 0x4d8]
je 0x1400455c0
mov rcx, qword [rbp + 0x458]
mov edx, 1
call fcn.140008f20
jmp 0x1400455c0
mov rax, qword [rbp + 0x558]
mov rdx, qword [rbp + 0x560]
mov rcx, qword [rbp + 0x568]
mov byte [rbp + 0x3d0], 0
test rdx, rdx
je 0x140045cb0
mov rax, qword [rax + rcx*8 + 0x3d8]
mov rcx, rdx
dec rcx
je 0x140045aee
mov r8, rcx
and r8, 7
je 0x140045a5e
mov rcx, r8
nop word cs:[rax + rax]
movzx r9d, word [rax + 0x3d2]
mov rax, qword [rax + r9*8 + 0x3d8]
dec rcx
jne 0x140045a40
not r8
add r8, rdx
mov rcx, r8
add rdx, 0xfffffffffffffffe
cmp rdx, 7
jb 0x140045aee
nop dword [rax]
movzx edx, word [rax + 0x3d2]
mov rax, qword [rax + rdx*8 + 0x3d8]
movzx edx, word [rax + 0x3d2]
mov rax, qword [rax + rdx*8 + 0x3d8]
movzx edx, word [rax + 0x3d2]
mov rax, qword [rax + rdx*8 + 0x3d8]
movzx edx, word [rax + 0x3d2]
mov rax, qword [rax + rdx*8 + 0x3d8]
movzx edx, word [rax + 0x3d2]
mov rax, qword [rax + rdx*8 + 0x3d8]
movzx edx, word [rax + 0x3d2]
mov rax, qword [rax + rdx*8 + 0x3d8]
movzx edx, word [rax + 0x3d2]
mov rax, qword [rax + rdx*8 + 0x3d8]
movzx edx, word [rax + 0x3d2]
mov rax, qword [rax + rdx*8 + 0x3d8]
add rcx, 0xfffffffffffffff8
jne 0x140045a70
movzx ecx, word [rax + 0x3d2]
dec rcx
mov qword [rbp + 0x420], rax
mov qword [rbp + 0x428], 0
mov qword [rbp + 0x430], rcx
lea rcx, [rbp - 0x30]
lea rdx, [rbp + 0x420]
lea r8, [rbp + 0x3d0]
call fcn.14004b350
mov rax, qword [rbp + 0x20]
mov qword [rbp + 0x4a0], rax
movups xmm0, xmmword [rbp + 0x10]
movaps xmmword [rbp + 0x490], xmm0
movdqu xmm0, xmmword [rbp - 0x30]
movdqu xmm1, xmmword [rbp - 0x20]
movdqu xmm2, xmmword [rbp - 0x10]
movdqu xmm3, xmmword [rbp]
movdqa xmmword [rbp + 0x480], xmm3
movdqa xmmword [rbp + 0x470], xmm2
movdqa xmmword [rbp + 0x460], xmm1
movdqa xmmword [rbp + 0x450], xmm0
mov rax, qword [rbp + 0x28]
mov rcx, qword [rbp + 0x38]
movzx edx, word [rax + 0x3d2]
cmp rcx, rdx
jb 0x140045ba7
nop word cs:[rax + rax]
movzx ecx, word [rax + 0x3d0]
mov rax, qword [rax + 0x160]
cmp cx, word [rax + 0x3d2]
jae 0x140045b90
imul rdx, rcx, 0x38
shl rcx, 5
mov r8, qword [rax + rdx + 0x198]
mov qword [rbp + 0x510], r8
movups xmm0, xmmword [rax + rdx + 0x168]
movups xmm1, xmmword [rax + rdx + 0x178]
movups xmm2, xmmword [rax + rdx + 0x188]
movaps xmmword [rbp + 0x500], xmm2
movaps xmmword [rbp + 0x4f0], xmm1
movaps xmmword [rbp + 0x4e0], xmm0
mov r8, qword [rbp + 0x480]
mov qword [rax + rdx + 0x198], r8
movaps xmm0, xmmword [rbp + 0x450]
movaps xmm1, xmmword [rbp + 0x460]
movaps xmm2, xmmword [rbp + 0x470]
movups xmmword [rax + rdx + 0x188], xmm2
movups xmmword [rax + rdx + 0x178], xmm1
movups xmmword [rax + rdx + 0x168], xmm0
movups xmm0, xmmword [rax + rcx]
movups xmm1, xmmword [rax + rcx + 0x10]
lea rdx, [rbp + 0x518]
movups xmmword [rdx + 0x10], xmm1
movups xmmword [rdx], xmm0
lea rdx, [rbp + 0x488]
movups xmm0, xmmword [rdx]
movups xmm1, xmmword [rdx + 0x10]
movups xmmword [rax + rcx], xmm0
movups xmmword [rax + rcx + 0x10], xmm1
movaps xmm0, xmmword [rbp + 0x4e0]
movaps xmm1, xmmword [rbp + 0x4f0]
movaps xmm2, xmmword [rbp + 0x500]
movaps xmm3, xmmword [rbp + 0x510]
movaps xmmword [rbp - 0x30], xmm0
movaps xmmword [rbp - 0x20], xmm1
movaps xmmword [rbp - 0x10], xmm2
movaps xmmword [rbp], xmm3
movdqa xmm0, xmmword [rbp + 0x520]
movdqa xmmword [rbp + 0x10], xmm0
mov rax, qword [rbp + 0x530]
mov qword [rbp + 0x20], rax
jmp 0x140045ce0
mov r14, rax
mov rcx, r8
cmp r8, 8
jae 0x140045640
jmp 0x14004567e
mov qword [rbp + 0x4e0], rax
mov qword [rbp + 0x4e8], 0
mov qword [rbp + 0x4f0], rcx
lea rcx, [rbp - 0x30]
lea rdx, [rbp + 0x4e0]
lea r8, [rbp + 0x3d0]
call fcn.14004b350
mov rax, qword [rbp + 0x20]
mov qword [rbp + 0x530], rax
movaps xmm0, xmmword [rbp + 0x10]
movaps xmmword [rbp + 0x520], xmm0
movdqa xmm0, xmmword [rbp - 0x30]
movdqa xmm1, xmmword [rbp - 0x20]
movdqa xmm2, xmmword [rbp - 0x10]
movdqa xmm3, xmmword [rbp]
movdqa xmmword [rbp + 0x510], xmm3
movdqa xmmword [rbp + 0x500], xmm2
dec qword [rbp + 0x448]
movdqa xmmword [rbp + 0x4f0], xmm1
movdqa xmmword [rbp + 0x4e0], xmm0
cmp byte [rbp + 0x3d0], 0
je 0x140045d73
test rsi, rsi
je 0x140048dd1
mov rax, qword [rdi + 0x3d8]
mov qword [rbp + 0x438], rax
dec rsi
mov qword [rbp + 0x440], rsi
mov qword [rax + 0x160], 0
mov edx, 8
mov rcx, rdi
call fcn.140008f20
mov rax, qword [rbp + 0x4e0]
mov rcx, qword [rbp + 0x4e8]
mov r15, qword [rbp + 0x500]
mov rdi, qword [rbp + 0x508]
mov rbx, qword [rbp + 0x518]
mov rsi, qword [rbp + 0x520]
neg rax
mov eax, 0
jo 0x1400455c2
jae 0x140045db7
mov edx, 1
call fcn.140008f20
test r15, r15
je 0x140045dc9
mov edx, 2
mov rcx, rdi
call fcn.140008f20
shl rbx, 1
mov eax, 0
test rbx, rbx
je 0x1400455c2
mov edx, 1
mov rcx, rsi
call fcn.140008f20
xor eax, eax
jmp 0x1400455c2
mov rax, qword [rbp + 0x448]
mov qword [rbp + 0x3f8], rax
movdqu xmm0, xmmword [rbp + 0x438]
movdqu xmmword [rbp + 0x3e8], xmm0
mov qword [rbp + 0x3e0], 1
movzx eax, byte [0x14007c158]
mov ecx, 4
call fcn.140050b40
test rax, rax
je 0x1400497e4
mov r13, rax
mov dword [rax], 0x48544150
add rax, 4
mov qword [rbp + 0x4e0], r13
mov qword [rbp + 0x4e8], rax
mov word [rbp + 0x4f0], 0
lea rcx, [rbp + 0x450]
lea rdx, [rbp + 0x4e0]
call fcn.140049f10
mov qword [rbp - 0x30], 4
mov qword [rbp - 0x28], r13
mov qword [rbp - 0x20], 4
mov qword [rbp - 0x18], 0
movdqu xmm0, xmmword [rbp + 0x450]
movdqu xmmword [rbp - 0x10], xmm0
mov rax, qword [rbp + 0x460]
mov qword [rbp], rax
mov r12, qword [rbp + 0x3e8]
mov rbx, qword [rbp - 8]
test r12, r12
mov rsi, qword [rbp + 0x548]
je 0x140045f7c
mov qword [rbp + 0x580], r13
mov r14d, dword [rbp]
mov r13, qword [rbp + 0x3f0]
lea rcx, [r12 + 0x168]
movzx eax, word [r12 + 0x3d2]
mov qword [rbp + 0x588], rax
imul rsi, rax, 0x38
mov r15, 0xffffffffffffffff
nop dword [rax]
test rsi, rsi
je 0x140045f30
lea rdi, [rcx + 0x38]
mov r8, qword [rcx + 0x28]
mov r9d, dword [rcx + 0x30]
mov dword [rsp + 0x20], 1
mov rcx, rbx
mov edx, r14d
call sub.KERNEL32.dll_CompareStringOrdinal
add rsi, 0xffffffffffffffc8
inc r15
mov rcx, rdi
cmp eax, 3
je 0x140045ef0
cmp eax, 1
jne 0x140045f55
jmp 0x140045f37
mov r15, qword [rbp + 0x588]
mov rsi, qword [rbp + 0x548]
sub r13, 1
jb 0x140046b25
mov r12, qword [r12 + r15*8 + 0x3d8]
jmp 0x140045ec9
cmp eax, 2
mov rsi, qword [rbp + 0x548]
jne 0x1400495d8
shl r15, 5
mov r14, qword [r12 + r15 + 8]
mov rdi, qword [r12 + r15 + 0x10]
mov r13, qword [rbp + 0x580]
jmp 0x140045f7f
xor r14d, r14d
mov edx, 1
mov rcx, r13
call fcn.140008f20
cmp qword [rbp - 0x10], 0
je 0x140045fa0
mov edx, 2
mov rcx, rbx
call fcn.140008f20
lea rax, [rbp + 0x3e8]
mov rdx, qword [rsi + 0x10]
lea rbx, str.program_path_has_no_file_name
test rdx, rdx
je 0x14004645c
mov qword [rbp + 0x4b0], rax
mov r13, qword [rsi + 8]
cmp rdx, 4
jae 0x140045fd5
lea rax, [0x14004bd10]
jmp 0x140045fff
mov eax, dword [r13]
bswap eax
xor ecx, ecx
cmp eax, 0x5c5c3f5c
setb cl
cmp eax, 0x5c5c3f5d
adc ecx, 0xffffffff
lea rcx, [0x14004bd00]
lea rax, [0x14004bd10]
cmove rax, rcx
mov qword [rbp + 0x580], rdx
movzx esi, byte [rdx + r13 - 1]
mov ecx, esi
call rax
test al, al
jne 0x14004645c
movabs r12, 0x8000000000000000
mov rax, qword [rbp + 0x580]
lea rdx, [rax + r13]
cmp rax, 3
mov qword [rbp + 0x4d8], r13
mov qword [rbp + 0x570], rdx
jbe 0x14004609b
movzx eax, byte [rdx - 4]
lea ecx, [rax - 0x41]
cmp cl, 0x1a
setb cl
shl cl, 5
or cl, al
cmp cl, 0x2e
jne 0x1400460ce
movzx eax, byte [rdx - 3]
lea ecx, [rax - 0x41]
cmp cl, 0x1a
setb cl
shl cl, 5
or cl, al
cmp cl, 0x65
jne 0x1400460ce
movzx eax, byte [rdx - 2]
lea ecx, [rax - 0x41]
cmp cl, 0x1a
setb cl
shl cl, 5
or cl, al
cmp cl, 0x78
jne 0x1400460ce
lea eax, [rsi - 0x41]
cmp al, 0x1a
setb al
shl al, 5
or al, sil
cmp al, 0x65
sete al
jmp 0x1400460d0
xor eax, eax
mov rdx, qword [rbp + 0x580]
nop word cs:[rax + rax]
cmp rdx, rax
je 0x140046287
movzx ecx, byte [r13 + rax]
cmp ecx, 0x2f
je 0x140046141
inc rax
cmp ecx, 0x5c
jne 0x1400460b0
jmp 0x140046141
xor eax, eax
xor ecx, ecx
nop word cs:[rax + rax]
mov rdx, qword [rbp + 0x580]
cmp rdx, rcx
je 0x140046287
movzx edx, byte [r13 + rcx]
cmp edx, 0x2f
je 0x140046103
inc rcx
cmp edx, 0x5c
jne 0x1400460e0
test al, al
mov rdx, qword [rbp + 0x580]
je 0x140046141
lea rcx, [rbp - 0x30]
mov r8, rdx
mov rdx, r13
call fcn.14003a9c0
mov rcx, qword [rbp - 0x30]
mov rax, qword [rbp - 0x28]
cmp rcx, r12
jne 0x140046409
mov qword [rbp + 0x428], rax
mov qword [rbp + 0x420], r12
jmp 0x140046429
test rdx, rdx
js 0x14004987f
movzx eax, byte [0x14007c158]
mov rcx, rdx
mov rdi, rdx
call fcn.140050b40
test rax, rax
je 0x1400497f0
mov rsi, rax
mov rcx, rax
mov rdx, r13
mov r8, rdi
call sub.msvcrt.dll_memcpy
mov qword [rbp + 0x4e0], rdi
mov qword [rbp + 0x4e8], rsi
mov qword [rbp + 0x4f0], rdi
mov byte [rbp + 0x4f8], 0
mov rax, qword [rbp + 0x4f0]
mov qword [rbp - 0x20], rax
movzx eax, byte [rbp + 0x4f8]
mov byte [rbp - 0x18], al
mov eax, dword [rbp + 0x4f9]
mov dword [rbp - 0x17], eax
movzx eax, word [rbp + 0x4fd]
mov word [rbp - 0x13], ax
movzx eax, byte [rbp + 0x4ff]
mov byte [rbp - 0x11], al
mov rax, qword [rbp + 0x4e0]
mov qword [rbp - 0x30], rax
mov rax, qword [rbp + 0x4e8]
mov qword [rbp - 0x28], rax
lea rdx, str..exeprogram_not_found
lea rcx, [rbp - 0x30]
mov r8d, 4
call fcn.1400423f0
movdqa xmm0, xmmword [rbp - 0x30]
movdqa xmm1, xmmword [rbp - 0x20]
movdqa xmmword [rbp + 0x4f0], xmm1
movdqa xmmword [rbp + 0x4e0], xmm0
mov rsi, qword [rbp + 0x4e8]
mov r8, qword [rbp + 0x4f0]
lea rcx, [rbp + 0x450]
mov rdx, rsi
call fcn.14004be20
cmp qword [rbp + 0x450], r12
jne 0x140046374
lea rcx, [rbp + 0x4e0]
mov edx, 1
xor r8d, r8d
call case.0x140043a37.65
mov rsi, qword [rbp + 0x4e8]
mov r8, qword [rbp + 0x4f0]
lea rcx, [rbp - 0x30]
mov rdx, rsi
call fcn.14003a9c0
mov rcx, qword [rbp - 0x30]
mov rax, qword [rbp - 0x28]
cmp rcx, r12
jne 0x140046394
mov qword [rbp + 0x428], rax
mov qword [rbp + 0x420], r12
jmp 0x1400463b4
xor r8d, r8d
lea r11, str.nul_byte_found_in_provided_data
mov rax, r13
jmp 0x1400462ac
xor r8d, r8d
test cx, cx
je 0x14004636c
mov cx, 1
test r8w, r8w
jne 0x1400462a0
cmp rax, qword [rbp + 0x570]
je 0x1400463cd
movzx edx, byte [rax]
test dl, dl
js 0x1400462cf
inc rax
jmp 0x14004632e
mov r8d, edx
and r8d, 0x1f
movzx r10d, byte [rax + 1]
and r10d, 0x3f
cmp dl, 0xdf
jbe 0x140046320
movzx r9d, byte [rax + 2]
shl r10d, 6
and r9d, 0x3f
or r9d, r10d
cmp dl, 0xf0
jb 0x140046345
movzx edx, byte [rax + 3]
add rax, 4
and r8d, 7
shl r8d, 0x12
shl r9d, 6
and edx, 0x3f
or edx, r9d
or edx, r8d
cmp edx, 0xffff
jbe 0x14004632e
jmp 0x14004635b
add rax, 2
shl r8d, 6
or r8d, r10d
mov edx, r8d
xor r8d, r8d
mov ecx, edx
mov rdx, qword [rbp + 0x580]
test cx, cx
jne 0x1400462ac
jmp 0x14004636c
add rax, 3
shl r8d, 0xc
or r9d, r8d
mov edx, r9d
cmp edx, 0xffff
jbe 0x14004632e
and edx, 0x3ff
or edx, 0xdc00
mov r8d, edx
jmp 0x140046333
mov rbx, r11
jmp 0x14004645c
mov rax, qword [rbp + 0x460]
mov qword [rbp + 0x430], rax
movdqu xmm0, xmmword [rbp + 0x450]
movdqa xmmword [rbp + 0x420], xmm0
jmp 0x1400463b4
mov rdx, qword [rbp - 0x20]
mov qword [rbp - 0x30], rcx
mov qword [rbp - 0x28], rax
mov qword [rbp - 0x20], rdx
lea rcx, [rbp + 0x420]
lea rdx, [rbp - 0x30]
call fcn.14004bd30
cmp qword [rbp + 0x4e0], 0
je 0x140046429
mov edx, 1
mov rcx, rsi
call fcn.140008f20
jmp 0x140046429
cmp rdx, 0xf
ja 0x140046b6f
mov qword [rbp + 0x578], 0
xor eax, eax
nop word cs:[rax + rax]
cmp byte [r13 + rax], 0x2e
je 0x140046cac
inc rax
cmp rdx, rax
jne 0x1400463f0
jmp 0x140046cb8
mov rdx, qword [rbp - 0x20]
mov qword [rbp - 0x30], rcx
mov qword [rbp - 0x28], rax
mov qword [rbp - 0x20], rdx
lea rcx, [rbp + 0x420]
lea rdx, [rbp - 0x30]
call fcn.14004bd30
mov rcx, qword [rbp + 0x420]
mov rax, qword [rbp + 0x428]
mov qword [rbp + 0x588], rax
mov qword [rbp + 0x578], rcx
cmp rcx, r12
mov rsi, qword [rbp + 0x548]
jne 0x140046502
mov rbx, qword [rbp + 0x588]
mov rax, qword [rbp + 0x4c0]
mov qword [rax], rbx
mov qword [rax + 0x10], 2
cmp qword [rbp + 0x3e0], 0
je 0x1400464d2
mov rcx, qword [rbp + 0x3e8]
test rcx, rcx
je 0x1400464b9
mov rdx, qword [rbp + 0x3f0]
mov rax, qword [rbp + 0x3f8]
mov qword [rbp - 0x28], 0
mov qword [rbp - 0x20], rcx
mov qword [rbp - 0x18], rdx
mov qword [rbp - 8], 0
mov qword [rbp], rcx
mov qword [rbp + 8], rdx
mov ecx, 1
jmp 0x1400464bd
xor ecx, ecx
xor eax, eax
mov qword [rbp - 0x30], rcx
mov qword [rbp - 0x10], rcx
mov qword [rbp + 0x10], rax
lea rcx, [rbp - 0x30]
call fcn.14004c3f0
mov rax, qword [rbp + 0x410]
cmp dword [rax], 4
jb 0x1400464e7
mov rcx, qword [rax + 8]
call fcn.14005d768
movaps xmm6, xmmword [rbp + 0x590]
add rsp, 0x628
pop rbx
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
pop rbp
ret
mov rdi, qword [rbp + 0x430]
cmp rdi, 4
mov qword [rbp + 0x4b8], rdi
jb 0x140046547
movabs rax, 0x5c003f003f005c
lea rcx, [rax + 0x1d0000]
mov rdx, qword [rbp + 0x588]
cmp rcx, qword [rdx]
je 0x1400468af
mov rcx, qword [rbp + 0x588]
cmp rax, qword [rcx]
je 0x1400468af
mov qword [rbp + 0x4e0], 0
mov qword [rbp + 0x4e8], 2
mov qword [rbp + 0x4f0], 0
mov r8d, 0x200
mov eax, 2
mov qword [rbp + 0x580], rax
xor r12d, r12d
xor r15d, r15d
xor edi, edi
cmp r8, 0x201
jb 0x1400465a6
jmp 0x1400465c0
mov r13, qword [rbp + 0x4d8]
jae 0x14004669c
cmp r8, 0x201
jae 0x1400465c0
mov r14d, 0x200
lea rbx, [rbp - 0x30]
mov r13, r8
jmp 0x1400465f7
sub r8, rdi
sub r15, rdi
cmp r15, r8
jb 0x140046664
mov eax, 0xffffffff
cmp r12, rax
mov edi, 0xffffffff
cmovb rdi, r12
mov qword [rbp + 0x4f0], rdi
mov r15, r12
mov r14, rdi
mov rbx, qword [rbp + 0x580]
mov r13, rdi
xor ecx, ecx
call sub.KERNEL32.dll_SetLastError
mov rcx, qword [rbp + 0x588]
mov edx, r13d
mov r8, rbx
xor r9d, r9d
call sub.KERNEL32.dll_GetFullPathNameW
mov esi, eax
test eax, eax
jne 0x140046626
call sub.KERNEL32.dll_GetLastError
test eax, eax
jne 0x140046ab1
mov r8d, esi
cmp r13, r8
jne 0x140046590
call sub.KERNEL32.dll_GetLastError
cmp eax, 0x7a
jne 0x140049768
add r13, r13
mov eax, 0xffffffff
cmp r13, rax
cmovae r13, rax
mov r8, r13
cmp r8, 0x201
jae 0x1400465c0
jmp 0x1400465a6
mov qword [rsp + 0x20], 2
mov r9d, 2
lea rcx, [rbp + 0x4e0]
mov rdx, rdi
call fcn.14001c5b0
mov r12, qword [rbp + 0x4e0]
mov rax, qword [rbp + 0x4e8]
mov qword [rbp + 0x580], rax
jmp 0x1400465cf
cmp r14, r8
jb 0x1400495b6
cmp esi, 4
movabs r12, 0x8000000000000000
jb 0x140046724
cmp word [rbx + r8*2 - 8], 0x2e
jne 0x140046724
movzx eax, word [rbx + r8*2 - 6]
xor esi, esi
lea ecx, [rax - 0x42]
cmp ecx, 0x21
ja case.0x1400466db.68
lea rdx, [0x140065140]
movsxd rcx, dword [rdx + rcx*4]
add rcx, rdx
jmp rcx
movzx ecx, word [rbx + r8*2 - 4]
or ecx, 0x20
cmp ecx, 0x61
jne 0x1400466fc
movzx ecx, word [rbx + r8*2 - 2]
mov sil, 1
or ecx, 0x20
cmp ecx, 0x74
je case.0x1400466db.68
cmp ax, 0x43
jne 0x140046724
movzx eax, word [rbx + r8*2 - 4]
or eax, 0x20
cmp eax, 0x6d
jne 0x140046724
movzx eax, word [rbx + r8*2 - 2]
add eax, 0xffffffbc
test eax, 0xffdf
sete sil
jmp case.0x1400466db.68
xor esi, esi
cmp qword [rbp + 0x4e0], 0
je 0x140046741
mov rcx, qword [rbp + 0x4e8]
mov edx, 2
call fcn.140008f20
test sil, sil
mov rsi, qword [rbp + 0x548]
je case.0x1400468ee.68
mov qword [rbp + 0x4e0], 0
lea rax, [rbp + 0x4e8]
mov qword [rbp + 0x570], rax
mov qword [rbp + 0x4e8], 2
mov qword [rbp + 0x4f0], 0
mov esi, 0x200
mov eax, 2
mov qword [rbp + 0x580], rax
mov qword [rbp + 0x4d8], 0
xor r15d, r15d
xor ebx, ebx
cmp rsi, 0x201
jb 0x1400467bf
jmp 0x1400467d0
jae 0x140046b2d
cmp rsi, 0x201
jae 0x1400467d0
mov r12d, 0x200
lea r14, [rbp - 0x30]
mov r13, rsi
jmp 0x14004680b
sub rsi, rbx
sub r15, rbx
cmp r15, rsi
jb 0x14004686d
mov eax, 0xffffffff
mov r15, qword [rbp + 0x4d8]
cmp r15, rax
mov ebx, 0xffffffff
cmovb rbx, r15
mov qword [rbp + 0x4f0], rbx
mov r12, rbx
mov r14, qword [rbp + 0x580]
mov r13, rbx
xor ecx, ecx
call sub.KERNEL32.dll_SetLastError
mov rcx, r14
mov edx, r13d
call sub.KERNEL32.dll_GetSystemDirectoryW
mov edi, eax
test eax, eax
jne 0x140046830
call sub.KERNEL32.dll_GetLastError
test eax, eax
jne 0x140046c76
mov esi, edi
cmp r13, rsi
jne 0x1400467b0
call sub.KERNEL32.dll_GetLastError
cmp eax, 0x7a
jne 0x14004980d
add r13, r13
mov eax, 0xffffffff
cmp r13, rax
cmovae r13, rax
mov rsi, r13
cmp rsi, 0x201
jae 0x1400467d0
jmp 0x1400467bf
mov qword [rsp + 0x20], 2
mov r9d, 2
lea rcx, [rbp + 0x4e0]
mov rdx, rbx
mov r8, rsi
call fcn.14001c5b0
mov rax, qword [rbp + 0x4e0]
mov qword [rbp + 0x4d8], rax
mov rax, qword [rbp + 0x4e8]
mov qword [rbp + 0x580], rax
jmp 0x1400467df
cmp rdi, 4
je case.0x1400468ee.68
mov rax, qword [rbp + 0x588]
cmp word [rax + rdi*2 - 0xa], 0x2e
jne case.0x1400468ee.68
mov rax, qword [rbp + 0x588]
movzx eax, word [rax + rdi*2 - 8]
lea ecx, [rax - 0x42]
cmp ecx, 0x21
ja case.0x1400468ee.68
lea rdx, [0x1400651c8]
movsxd rcx, dword [rdx + rcx*4]
add rcx, rdx
jmp rcx
mov rcx, qword [rbp + 0x588]
movzx ecx, word [rcx + rdi*2 - 6]
or ecx, 0x20
cmp ecx, 0x61
jne 0x14004691c
mov rcx, qword [rbp + 0x588]
movzx ecx, word [rcx + rdi*2 - 4]
or ecx, 0x20
cmp ecx, 0x74
je 0x140046751
cmp ax, 0x43
jne case.0x1400468ee.68
mov rax, qword [rbp + 0x588]
movzx eax, word [rax + rdi*2 - 6]
or eax, 0x20
cmp eax, 0x6d
jne case.0x1400468ee.68
mov rax, qword [rbp + 0x588]
movzx eax, word [rax + rdi*2 - 4]
add eax, 0xffffffbc
test eax, 0xffdf
je 0x140046751
mov rax, rsi
mov rsi, qword [rsi + 0x28]
mov rdi, qword [rax + 0x30]
movzx ebx, byte [rax + 0xc9]
mov qword [rbp + 0x4e0], 0
mov qword [rbp + 0x4e8], 2
mov qword [rbp + 0x4f0], 0
lea rdx, str.library_std_src_syspalwindowsprocess.rs
lea rcx, [rbp + 0x4e0]
call fcn.14003b240
mov rax, qword [rbp + 0x4e8]
mov word [rax], 0x22
mov qword [rbp + 0x4f0], 1
mov qword [rbp - 0x30], r13
mov rax, qword [rbp + 0x570]
mov qword [rbp - 0x28], rax
mov word [rbp - 0x20], 0
lea rcx, [rbp + 0x4e0]
lea rdx, [rbp - 0x30]
call fcn.14003b300
mov r14, qword [rbp + 0x4f0]
cmp r14, qword [rbp + 0x4e0]
jne 0x1400469f5
lea rdx, str.library_std_src_syspalwindowsprocess.rs
lea rcx, [rbp + 0x4e0]
call fcn.14003b240
mov rax, qword [rbp + 0x4e8]
mov word [rax + r14*2], 0x22
inc r14
mov qword [rbp + 0x4f0], r14
shl rdi, 3
lea r15, [rdi + rdi*4]
lea rdi, str.library_std_src_syspalwindowsprocess.rs
lea r14, [rbp + 0x4e0]
nop word cs:[rax + rax]
test r15, r15
je 0x140046afc
mov r12, qword [rbp + 0x4f0]
cmp r12, qword [rbp + 0x4e0]
jne 0x140046a54
mov rcx, r14
mov rdx, rdi
call fcn.14003b240
mov rax, qword [rbp + 0x4e8]
mov word [rax + r12*2], 0x20
inc r12
mov qword [rbp + 0x4f0], r12
mov rcx, r14
mov rdx, rsi
mov r8d, ebx
call fcn.14004bf40
mov r13, rax
add rsi, 0x28
add r15, 0xffffffffffffffd8
test rax, rax
movabs r12, 0x8000000000000000
je 0x140046a30
cmp qword [rbp + 0x4e0], 0
je 0x140046b0f
mov rcx, qword [rbp + 0x4e8]
mov edx, 2
call fcn.140008f20
jmp 0x140046b0f
call sub.KERNEL32.dll_GetLastError
mov esi, eax
shl rsi, 0x20
or rsi, 2
cmp qword [rbp + 0x4e0], 0
je 0x140046adb
mov rcx, qword [rbp + 0x4e8]
mov edx, 2
call fcn.140008f20
mov rax, qword [rbp + 0x4c0]
mov qword [rax], rsi
mov qword [rax + 0x10], 2
mov sil, 1
mov r12, qword [rbp + 0x588]
jmp 0x140047616
mov rax, qword [rbp + 0x4e0]
mov r13, qword [rbp + 0x4e8]
cmp rax, r12
jne 0x140046b81
mov r12, qword [rbp + 0x588]
mov rax, qword [rbp + 0x4c0]
mov qword [rax], r13
jmp 0x14004760b
xor r14d, r14d
jmp 0x140045f73
cmp r12, rsi
jb 0x140049677
lea r12, [rsi + rsi]
test edi, edi
je 0x140047407
movzx eax, byte [0x14007c158]
mov rcx, r12
call fcn.140050b40
mov rbx, rax
test rax, rax
jne 0x14004740c
mov ecx, 2
mov rdx, r12
call fcn.1400086f9
jmp 0x14004989c
mov cl, 0x2e
mov r8, rdx
mov rdx, r13
call fcn.14000d9b0
jmp 0x140046cb1
mov rsi, qword [rbp + 0x4f0]
xor edi, edi
mov rcx, qword [rbp + 0x578]
mov qword [rbp + 0x4d8], rcx
mov rcx, qword [rbp + 0x588]
mov qword [rbp + 0x580], rcx
mov qword [rbp + 0x438], rax
mov qword [rbp + 0x440], r13
mov qword [rbp + 0x448], rsi
cmp rsi, rax
jne 0x140046bda
lea rdx, str.library_std_src_syspalwindowsprocess.rs
lea rcx, [rbp + 0x438]
call fcn.14003b240
mov r13, qword [rbp + 0x440]
mov word [r13 + rsi*2], 0
inc rsi
mov qword [rbp + 0x448], rsi
mov rsi, qword [rbp + 0x548]
cmp byte [rsi + 0xc8], 0
mov eax, 0x608
mov ebx, 0x400
cmovne ebx, eax
or ebx, dword [rsi + 0xc4]
test byte [rbp + 0x3e0], 1
je 0x1400472b1
mov dword [rbp + 0x570], edi
mov rax, qword [rbp + 0x4b0]
mov rdi, qword [rax + 0x10]
mov qword [rbp + 0x430], rdi
movdqu xmm0, xmmword [rax]
movdqa xmmword [rbp + 0x420], xmm0
mov qword [rbp + 0x550], 0
mov qword [rbp + 0x558], 2
mov qword [rbp + 0x560], 0
test rdi, rdi
je 0x140047916
mov r15d, 2
xor r13d, r13d
jmp 0x14004794a
call sub.KERNEL32.dll_GetLastError
mov esi, eax
shl rsi, 0x20
cmp qword [rbp + 0x4e0], 0
je 0x140046c9c
mov rcx, qword [rbp + 0x4e8]
mov edx, 2
call fcn.140008f20
or rsi, 2
mov r12, qword [rbp + 0x588]
jmp 0x140047601
mov eax, 1
mov qword [rbp + 0x578], rax
test r14, r14
je 0x14004702e
add rdi, r14
mov qword [rbp + 0x450], r14
mov qword [rbp + 0x458], rdi
mov word [rbp + 0x460], 0
mov byte [rbp + 0x468], 1
lea rcx, [rbp + 0x4e0]
lea rdx, [rbp + 0x450]
call fcn.1400421b0
mov rax, qword [rbp + 0x4e0]
cmp rax, r12
je 0x14004702e
movzx r8d, byte [rbp + 0x468]
movzx ebx, word [rbp + 0x460]
mov r14, qword [rbp + 0x450]
mov rsi, qword [rbp + 0x458]
jmp 0x140046d60
mov qword [rbp + 0x4e0], r12
cmp qword [rbp + 0x550], 0
je 0x140046d46
mov rcx, qword [rbp + 0x558]
mov edx, 2
call fcn.140008f20
mov rax, qword [rbp + 0x4e0]
mov r8d, r13d
cmp rax, r12
mov r13, qword [rbp + 0x4d8]
je 0x14004702e
mov rcx, qword [rbp + 0x4e8]
mov rdx, qword [rbp + 0x4f0]
test rdx, rdx
jne 0x140046f75
mov byte [rbp + 0x588], r8b
test rax, rax
je 0x140046d8d
mov edx, 1
call fcn.140008f20
mov qword [rbp + 0x550], 0
mov qword [rbp + 0x558], 2
mov eax, 2
xor r15d, r15d
mov edi, ebx
xor r12d, r12d
jmp 0x140046dc8
mov word [rax + r15*2], r13w
inc r15
mov qword [rbp + 0x560], r15
nop
mov r13d, edi
test di, di
je 0x140046de0
xor ebx, ebx
jmp 0x140046e60
cmp r14, rsi
je 0x140046f10
movzx r13d, byte [r14]
test r13b, r13b
js 0x140046df7
inc r14
jmp 0x140046e60
mov ecx, r13d
and ecx, 0x1f
movzx r8d, byte [r14 + 1]
and r8d, 0x3f
cmp r13b, 0xdf
jbe 0x140046e48
movzx edx, byte [r14 + 2]
shl r8d, 6
and edx, 0x3f
or edx, r8d
cmp r13b, 0xf0
jb 0x140046e72
movzx r13d, byte [r14 + 3]
add r14, 4
and ecx, 7
shl ecx, 0x12
shl edx, 6
and r13d, 0x3f
or r13d, edx
or r13d, ecx
cmp r13d, 0xffff
jbe 0x140046e60
jmp 0x140046e87
add r14, 2
shl ecx, 6
or ecx, r8d
mov r13d, ecx
nop word cs:[rax + rax]
xor edi, edi
cmp r13w, 0x22
jne 0x140046ec0
xor r12b, 1
jmp 0x140046dd0
add r14, 3
shl ecx, 0xc
or edx, ecx
mov r13d, edx
cmp r13d, 0xffff
jbe 0x140046e60
lea ecx, [r13 + 0xff0000]
shr ecx, 0xa
or ecx, 0xd800
and r13d, 0x3ff
or r13d, 0xdc00
mov ebx, r13d
mov edi, r13d
mov r13d, ecx
cmp r13w, 0x22
je 0x140046e69
nop word cs:[rax + rax]
movzx ecx, r13w
cmp ecx, 0x3b
jne 0x140046eda
mov r13b, 1
test r12b, 1
je 0x140046f13
mov r13w, 0x3b
mov r12b, 1
cmp r15, qword [rbp + 0x550]
jne 0x140046dc0
lea rcx, [rbp + 0x550]
lea rdx, str.library_std_src_syspalwindowsos.rs
call fcn.14003b240
mov rax, qword [rbp + 0x558]
jmp 0x140046dc0
xor r13d, r13d
test r15, r15
setne al
movzx ecx, byte [rbp + 0x588]
or cl, al
test cl, 1
movabs r12, 0x8000000000000000
je 0x140046d24
mov rdx, qword [rbp + 0x558]
lea rcx, [rbp - 0x30]
mov r8, r15
call fcn.14001dd40
movdqu xmm0, xmmword [rbp - 0x30]
movdqu xmm1, xmmword [rbp - 0x20]
movdqa xmmword [rbp + 0x4f0], xmm1
movdqa xmmword [rbp + 0x4e0], xmm0
cmp qword [rbp + 0x550], 0
jne 0x140046d35
jmp 0x140046d46
mov byte [rbp + 0x468], r8b
mov word [rbp + 0x460], bx
mov qword [rbp + 0x450], r14
mov r8, qword [rbp + 0x4f8]
mov qword [rbp - 0x30], rax
mov qword [rbp - 0x28], rcx
mov qword [rbp - 0x20], rdx
mov qword [rbp - 0x18], r8
lea rcx, [rbp - 0x30]
mov rdx, r13
mov r8, qword [rbp + 0x580]
call fcn.140042920
mov rsi, qword [rbp + 0x548]
cmp qword [rbp + 0x578], 1
je 0x140046fdb
mov r8d, 3
lea rcx, [rbp - 0x30]
lea rdx, str.exe.NUL
call case.0x140043a37.65
mov r15, qword [rbp - 0x28]
mov r8, qword [rbp - 0x20]
lea rcx, [rbp + 0x4e0]
mov rdx, r15
call fcn.14004be20
cmp qword [rbp - 0x30], 0
je 0x140047006
mov edx, 1
mov rcx, r15
call fcn.140008f20
mov rax, qword [rbp + 0x4e0]
cmp rax, r12
jne 0x140049038
lea rcx, [rbp + 0x4e0]
lea rdx, [rbp + 0x450]
call fcn.1400421b0
jmp 0x140046cf5
mov qword [rbp + 0x450], 0
mov qword [rbp + 0x458], 2
mov qword [rbp + 0x460], 0
mov r8d, 0x200
mov eax, 2
mov qword [rbp + 0x588], rax
xor r13d, r13d
xor r12d, r12d
xor edi, edi
cmp r8, 0x201
jb 0x14004708f
jmp 0x1400470a0
jae 0x140047174
cmp r8, 0x201
jae 0x1400470a0
mov ebx, 0x200
lea r14, [rbp - 0x30]
mov r15, r8
jmp 0x1400470d7
sub r8, rdi
sub r12, rdi
cmp r12, r8
jb 0x14004713c
mov eax, 0xffffffff
cmp r13, rax
mov edi, 0xffffffff
cmovb rdi, r13
mov qword [rbp + 0x460], rdi
mov r12, r13
mov rbx, rdi
mov r14, qword [rbp + 0x588]
mov r15, rdi
xor ecx, ecx
call sub.KERNEL32.dll_SetLastError
xor ecx, ecx
mov rdx, r14
mov r8d, r15d
call sub.KERNEL32.dll_GetModuleFileNameW
mov esi, eax
test eax, eax
jne 0x1400470fe
call sub.KERNEL32.dll_GetLastError
test eax, eax
jne 0x14004723b
mov r8d, esi
cmp r15, r8
jne 0x140047080
call sub.KERNEL32.dll_GetLastError
cmp eax, 0x7a
jne 0x1400497c7
add r15, r15
mov eax, 0xffffffff
cmp r15, rax
cmovae r15, rax
mov r8, r15
cmp r8, 0x201
jb 0x14004708f
jmp 0x1400470a0
mov qword [rsp + 0x20], 2
mov r9d, 2
lea rcx, [rbp + 0x450]
mov rdx, rdi
call fcn.14001c5b0
mov r13, qword [rbp + 0x450]
mov rax, qword [rbp + 0x458]
mov qword [rbp + 0x588], rax
jmp 0x1400470af
cmp rbx, r8
jb 0x14004965d
lea rcx, [rbp + 0x4e0]
mov rdx, r14
call fcn.14001dd40
movabs r12, 0x8000000000000000
mov r13, qword [rbp + 0x4d8]
mov r14, qword [rbp + 0x4e0]
mov rsi, qword [rbp + 0x4e8]
mov rdi, qword [rbp + 0x4f0]
mov r15, qword [rbp + 0x4f8]
cmp qword [rbp + 0x450], 0
je 0x1400471d4
mov rcx, qword [rbp + 0x458]
mov edx, 2
call fcn.140008f20
cmp r14, r12
je 0x140047265
mov rcx, rsi
mov rdx, rdi
call case.0x140042fb9.21
test rax, rax
je 0x140047dc0
mov rbx, rdx
mov rcx, rsi
mov rdx, rdi
mov r8, rbx
call fcn.1400435b0
test rbx, rbx
je 0x140047d79
cmp rdi, rbx
jbe 0x140047db3
cmp byte [rsi + rbx], 0xbf
jg 0x140047db9
lea rcx, str.assertion_failed:_is_code_point_boundary_self__new_len_
lea r8, [0x140070b70]
mov edx, 0x37
call fcn.14000a420
jmp 0x14004989c
call sub.KERNEL32.dll_GetLastError
mov esi, eax
shl rsi, 0x20
cmp qword [rbp + 0x450], 0
je 0x140047261
mov rcx, qword [rbp + 0x458]
mov edx, 2
call fcn.140008f20
or rsi, 2
mov eax, esi
and eax, 3
cmp eax, 1
jne 0x140047e3e
lea rdi, [rsi - 1]
mov rbx, qword [rsi - 1]
mov rsi, qword [rsi + 7]
mov rax, qword [rsi]
test rax, rax
je 0x14004728c
mov rcx, rbx
call rax
cmp qword [rsi + 8], 0
je 0x14004729f
mov rdx, qword [rsi + 0x10]
mov rcx, rbx
call fcn.140008f20
mov edx, 8
mov rcx, rdi
call fcn.140008f20
jmp 0x140047e3e
mov r13d, 2
xor r15d, r15d
mov qword [rbp + 0x4b8], 0
mov r14, qword [rbp + 0x580]
cmp qword [rsi + 0x38], r12
jne 0x140048ec3
mov qword [rbp + 0x4b0], r15
mov eax, 2
mov qword [rbp + 0x4a8], rax
xor r15d, r15d
xor eax, eax
mov qword [rbp + 0x4c8], rax
pxor xmm0, xmm0
movdqa xmmword [rbp + 0x420], xmm0
mov qword [rbp + 0x430], 0
mov cl, 1
xor eax, eax
lock cmpxchg byte [0x14007c108], cl
jne 0x140049059
mov rax, qword [0x14007c0f0]
dec r12
test rax, r12
mov dword [rbp + 0x570], edi
mov qword [rbp + 0x4d0], r13
jne 0x140049748
xor eax, eax
lea rcx, [0x14007c108]
movzx edx, byte [0x14007c109]
xor r8d, r8d
test dl, dl
setne r8b
mov qword [rbp + 0x558], rcx
mov byte [rbp + 0x560], al
mov qword [rbp + 0x550], r8
mov qword [rbp + 0x450], 0
mov qword [rbp + 0x460], 0
mov qword [rbp + 0x470], 0
cmp byte [rbp + 0x418], 0
lea rax, [rbp + 0x400]
mov rdx, qword [rbp + 0x410]
cmovne rax, rdx
mov dword [rbp + 0x400], 2
lea rcx, [rsi + 0x58]
cmp dword [rsi + 0x58], 6
cmove rcx, rax
cmp dword [rsi + 0x68], 6
lea r14, [rsi + 0x68]
cmove r14, rdx
lea rdi, [rsi + 0x78]
cmp dword [rsi + 0x78], 6
cmove rdi, rdx
lea r8, [rbp + 0x450]
mov edx, 0xfffffff6
call fcn.14004c4a0
mov r13, rdx
test rax, rax
je 0x14004857d
mov rax, qword [rbp + 0x4c0]
mov qword [rax], r13
mov qword [rax + 0x10], 2
jmp 0x14004942e
mov ebx, 2
mov rcx, rbx
mov rdx, r14
mov r8, r12
call sub.msvcrt.dll_memcpy
cmp qword [rbp + 0x4e0], 0
je 0x140047435
mov rcx, qword [rbp + 0x4e8]
mov edx, 2
call fcn.140008f20
mov qword [rbp + 0x450], rsi
lea rax, [rbp + 0x458]
mov qword [rbp + 0x570], rax
mov qword [rbp + 0x458], rbx
mov qword [rbp + 0x460], rsi
lea r15, str.cmd.exe
xor r13d, r13d
lea rdi, [rbp + 0x450]
xor r14d, r14d
jmp 0x140047480
mov r14d, ecx
mov word [rbx + rsi*2], r12w
inc rsi
mov qword [rbp + 0x460], rsi
movabs rax, 0x8000000000000000
mov r12, qword [rbp + 0x588]
test r15, r15
je 0x140047500
test r14w, r14w
je 0x1400474e1
xor ecx, ecx
mov r12d, r14d
cmp rsi, qword [rbp + 0x450]
jne 0x14004746e
lea rax, str.cmd.exe
sub rax, r15
add rax, 0xa
movabs rdx, 0xaaaaaaaaaaaaaaab
mul rdx
mov r8, rdx
shr r8, 1
cmp cx, 1
mov rax, r13
adc rax, 0xffffffffffffffff
sub r8, rax
inc r8
mov r14d, ecx
jmp 0x14004752f
lea rcx, str.library_std_src_syspalwindowsprocess.rs
cmp r15, rcx
je 0x140047500
movzx r12d, byte [r15]
test r12b, r12b
js 0x140047558
inc r15
xor ecx, ecx
jmp 0x1400474a1
mov rcx, qword [rbp + 0x450]
cmp r13, 1
je 0x1400475f5
mov r13d, 1
xor r12d, r12d
mov r15d, 0
mov r8d, 0
cmp rsi, rcx
jne 0x140047471
inc r8
mov qword [rsp + 0x20], 2
mov r9d, 2
mov rcx, rdi
mov rdx, rsi
call fcn.14001c5b0
mov rbx, qword [rbp + 0x458]
jmp 0x140047471
mov eax, r12d
and eax, 0x1f
movzx edx, byte [r15 + 1]
and edx, 0x3f
cmp r12b, 0xdf
jbe 0x14004759d
movzx ecx, byte [r15 + 2]
shl edx, 6
and ecx, 0x3f
or ecx, edx
cmp r12b, 0xf0
jb 0x1400475b0
movzx r12d, byte [r15 + 3]
add r15, 4
and eax, 7
shl eax, 0x12
shl ecx, 6
and r12d, 0x3f
or r12d, ecx
or r12d, eax
jmp 0x1400475bc
add r15, 2
shl eax, 6
or eax, edx
mov r12d, eax
xor ecx, ecx
jmp 0x1400474a1
add r15, 3
shl eax, 0xc
or ecx, eax
mov r12d, ecx
cmp r12d, 0xffff
ja 0x1400475cc
xor ecx, ecx
jmp 0x1400474a1
lea eax, [r12 + 0xff0000]
shr eax, 0xa
or eax, 0xd800
and r12d, 0x3ff
or r12d, 0xdc00
mov ecx, r12d
mov r12d, eax
jmp 0x1400474a1
mov rsi, qword [rbp + 0x458]
cmp rcx, rax
jne 0x14004763b
mov rax, qword [rbp + 0x4c0]
mov qword [rax], rsi
mov qword [rax + 0x10], 2
mov sil, 1
cmp qword [rbp + 0x578], 0
je 0x14004762d
mov edx, 2
mov rcx, r12
call fcn.140008f20
test sil, sil
jne 0x14004646e
jmp 0x1400464d2
mov qword [rbp + 0x4d8], rcx
xor ecx, ecx
test cl, cl
mov qword [rbp + 0x580], rsi
jne 0x14004988b
mov rax, qword [rbp + 0x548]
mov rcx, qword [rax + 0x28]
mov qword [rbp + 0x570], rcx
mov rcx, qword [rax + 0x30]
mov qword [rbp + 0x4c8], rcx
movzx eax, byte [rax + 0xc9]
mov byte [rbp + 0x4d0], al
movzx eax, byte [0x14007c158]
mov ecx, 0x14
call fcn.140050b40
test rax, rax
je 0x140049886
mov ecx, 0xa
mov word [rax], 0x63
mov qword [rbp - 0x30], rcx
lea rcx, [rbp - 0x28]
mov qword [rbp + 0x4a8], rcx
mov qword [rbp - 0x28], rax
mov qword [rbp - 0x20], 1
lea r13, [0x140071415]
mov esi, 1
xor ebx, ebx
lea r12, [0x140071430]
lea r15, [0x140071414]
lea rdi, [rbp - 0x30]
jmp 0x140047733
mov rax, r15
sub rax, r13
add rax, 0x1e
movabs rcx, 0xaaaaaaaaaaaaaaab
mul rcx
shr rdx, 1
cmp r14w, 1
sbb rdx, 0
lea r8, [rdx + 2]
mov qword [rsp + 0x20], 2
mov r9d, 2
mov rcx, rdi
mov rdx, rsi
call fcn.14001c5b0
mov rax, qword [rbp - 0x28]
mov word [rax + rsi*2], bx
inc rsi
mov qword [rbp - 0x20], rsi
mov ebx, r14d
test bx, bx
jne 0x1400477b0
cmp r13, r12
je 0x140047804
movzx ebx, byte [r13]
test bl, bl
js 0x14004774f
inc r13
jmp 0x1400477b0
mov ecx, ebx
and ecx, 0x1f
movzx r8d, byte [r13 + 1]
and r8d, 0x3f
cmp bl, 0xdf
jbe 0x140047799
movzx edx, byte [r13 + 2]
shl r8d, 6
and edx, 0x3f
or edx, r8d
cmp bl, 0xf0
jb 0x1400477c2
movzx ebx, byte [r13 + 3]
add r13, 4
and ecx, 7
shl ecx, 0x12
shl edx, 6
and ebx, 0x3f
or ebx, edx
or ebx, ecx
cmp ebx, 0xffff
jbe 0x1400477b0
jmp 0x1400477d5
add r13, 2
shl ecx, 6
or ecx, r8d
mov ebx, ecx
nop word cs:[rax + rax]
xor r14d, r14d
cmp rsi, qword [rbp - 0x30]
jne 0x140047725
jmp 0x1400476e0
add r13, 3
shl ecx, 0xc
or edx, ecx
mov ebx, edx
cmp ebx, 0xffff
jbe 0x1400477b0
lea ecx, [rbx + 0xff0000]
shr ecx, 0xa
or ecx, 0xd800
and ebx, 0x3ff
or ebx, 0xdc00
mov r14d, ebx
mov ebx, ecx
cmp rsi, qword [rbp - 0x30]
jne 0x140047725
jmp 0x1400476e0
mov rsi, qword [rbp - 0x20]
mov qword [rbp + 0x4f0], rsi
movdqu xmm0, xmmword [rbp - 0x30]
movdqa xmmword [rbp + 0x4e0], xmm0
cmp rsi, qword [rbp + 0x4e0]
movabs r12, 0x8000000000000000
jne 0x140047842
lea rdx, [0x140071430]
lea rcx, [rbp + 0x4e0]
call fcn.14003b240
mov r14, qword [rbp + 0x4e8]
mov word [r14 + rsi*2], 0x22
inc rsi
mov qword [rbp + 0x4f0], rsi
mov r10, qword [rbp + 0x4b8]
mov rdx, r10
and rdx, 0xffffffffffffffe0
mov rax, qword [rbp + 0x588]
lea rax, [rax + rdx*2]
mov ecx, r10d
and ecx, 0x1f
xor r8d, r8d
movdqa xmm0, xmmword [str._________]
lea r13, str.Windows_file_names_may_not_contain_____or_end_with___
cmp rdx, r8
je 0x1400478e1
mov r9, qword [rbp + 0x588]
movdqu xmm1, xmmword [r9 + r8*2]
movdqu xmm2, xmmword [r9 + r8*2 + 0x10]
movdqu xmm3, xmmword [r9 + r8*2 + 0x20]
movdqu xmm4, xmmword [r9 + r8*2 + 0x30]
pcmpeqw xmm3, xmm0
pcmpeqw xmm1, xmm0
por xmm1, xmm3
pcmpeqw xmm4, xmm0
pcmpeqw xmm2, xmm0
por xmm2, xmm4
packsswb xmm1, xmm2
pmovmskb r9d, xmm1
add r8, 0x20
test r9d, r9d
je 0x14004788b
jmp 0x140048df5
add ecx, ecx
xor edx, edx
cmp rcx, rdx
je 0x140047d7e
cmp word [rax + rdx], 0x22
lea rdx, [rdx + 2]
jne 0x1400478e5
jmp 0x140048df5
lea r8, str.library_std_src_syspalwindowsos.rs
mov ecx, 1
xor edx, edx
call fcn.1400092f0
jmp 0x14004989c
mov sil, 1
lea rdx, str.library_std_src_syspalwindowsprocess.rs
lea rcx, [rbp + 0x550]
call fcn.14003b240
mov r15, qword [rbp + 0x558]
mov word [r15], 0
mov qword [rbp + 0x560], 1
mov r13d, 1
mov rax, qword [rbp + 0x420]
mov rcx, qword [rbp + 0x428]
xor edx, edx
test rax, rax
cmove rdi, rax
setne dl
mov qword [rbp - 0x30], rdx
mov qword [rbp - 0x28], 0
mov qword [rbp - 0x20], rax
mov qword [rbp - 0x18], rcx
mov qword [rbp - 0x10], rdx
mov qword [rbp - 8], 0
mov qword [rbp], rax
mov qword [rbp + 8], rcx
mov qword [rbp + 0x10], rdi
lea rcx, [rbp + 0x4e0]
lea rdx, [rbp - 0x30]
call fcn.140044fb0
mov rdx, qword [rbp + 0x4e0]
test rdx, rdx
je 0x140048e50
mov r9, qword [rbp + 0x4f0]
imul r8, r9, 0x38
mov rax, qword [rdx + r8 + 0x168]
cmp rax, r12
je 0x140048e50
mov qword [rbp + 0x4b0], r15
mov rcx, qword [rdx + r8 + 0x170]
mov r10, qword [rdx + r8 + 0x188]
mov qword [rbp + 0x4b8], r10
mov rsi, qword [rdx + r8 + 0x190]
mov r14, qword [rdx + r8 + 0x198]
shl r9, 5
mov r10, qword [rdx + r9]
mov qword [rbp + 0x4c8], r10
mov r10, qword [rdx + r9 + 8]
mov qword [rbp + 0x4d0], r10
mov r15, qword [rdx + r9 + 0x10]
mov rdx, qword [rdx + r8 + 0x178]
add rdx, rcx
xor r11d, r11d
mov r8, rcx
jmp 0x140047a3a
xor r11d, r11d
test r9w, r9w
je 0x140047d30
mov r9w, 1
test r11w, r11w
jne 0x140047a2d
cmp r8, rdx
je 0x140047af9
movzx r10d, byte [r8]
test r10b, r10b
js 0x140047a5c
inc r8
jmp 0x140047ad8
mov r11d, r10d
and r11d, 0x1f
movzx edi, byte [r8 + 1]
and edi, 0x3f
cmp r10b, 0xdf
jbe 0x140047aa7
movzx r12d, byte [r8 + 2]
shl edi, 6
and r12d, 0x3f
or r12d, edi
cmp r10b, 0xf0
jb 0x140047ab7
movzx r10d, byte [r8 + 3]
add r8, 4
and r11d, 7
shl r11d, 0x12
shl r12d, 6
and r10d, 0x3f
or r10d, r12d
or r10d, r11d
jmp 0x140047ac5
add r8, 2
shl r11d, 6
or r11d, edi
mov r10d, r11d
jmp 0x140047ad8
add r8, 3
shl r11d, 0xc
or r12d, r11d
mov r10d, r12d
cmp r10d, 0xffff
movabs r12, 0x8000000000000000
ja 0x140047ae3
xor r11d, r11d
mov r9d, r10d
jmp 0x140047a30
and r10d, 0x3ff
or r10d, 0xdc00
mov r11d, r10d
jmp 0x140047a30
test rax, rax
je 0x140047b08
mov edx, 1
call fcn.140008f20
mov rax, qword [rbp + 0x550]
sub rax, r13
cmp rax, r14
jb 0x140047ceb
lea r8, [r14 + r14]
mov rax, qword [rbp + 0x4b0]
lea rcx, [rax + r13*2]
mov rdx, rsi
call sub.msvcrt.dll_memcpy
add r13, r14
mov qword [rbp + 0x560], r13
cmp qword [rbp + 0x4b8], 0
je 0x140047b53
mov edx, 2
mov rcx, rsi
call fcn.140008f20
cmp r13, qword [rbp + 0x550]
mov rsi, qword [rbp + 0x4d0]
jne 0x140047b84
lea rcx, [rbp + 0x550]
lea rdx, str.library_std_src_syspalwindowsprocess.rs
call fcn.14003b240
mov rax, qword [rbp + 0x558]
mov qword [rbp + 0x4b0], rax
mov rax, qword [rbp + 0x4b0]
mov word [rax + r13*2], 0x3d
inc r13
mov qword [rbp + 0x560], r13
add r15, rsi
xor r8d, r8d
mov rax, rsi
mov rdi, qword [rbp + 0x4c8]
jmp 0x140047bba
xor r8d, r8d
test cx, cx
je 0x1400485b4
mov cx, 1
test r8w, r8w
jne 0x140047bae
cmp rax, r15
je 0x140047c66
movzx edx, byte [rax]
test dl, dl
js 0x140047bd9
inc rax
jmp 0x140047c48
mov r8d, edx
and r8d, 0x1f
movzx r10d, byte [rax + 1]
and r10d, 0x3f
cmp dl, 0xdf
jbe 0x140047c22
movzx r9d, byte [rax + 2]
shl r10d, 6
and r9d, 0x3f
or r9d, r10d
cmp dl, 0xf0
jb 0x140047c32
movzx edx, byte [rax + 3]
add rax, 4
and r8d, 7
shl r8d, 0x12
shl r9d, 6
and edx, 0x3f
or edx, r9d
or edx, r8d
jmp 0x140047c40
add rax, 2
shl r8d, 6
or r8d, r10d
mov edx, r8d
jmp 0x140047c48
add rax, 3
shl r8d, 0xc
or r9d, r8d
mov edx, r9d
cmp edx, 0xffff
ja 0x140047c52
xor r8d, r8d
mov ecx, edx
jmp 0x140047bb1
and edx, 0x3ff
or edx, 0xdc00
mov r8d, edx
jmp 0x140047bb1
cmp rdi, r12
je 0x1400495d0
mov qword [rbp + 0x450], rsi
mov qword [rbp + 0x458], r15
mov word [rbp + 0x460], 0
lea rcx, [rbp + 0x550]
lea rdx, [rbp + 0x450]
call fcn.14003b300
test rdi, rdi
je 0x140047cab
mov edx, 1
mov rcx, rsi
call fcn.140008f20
mov r13, qword [rbp + 0x560]
cmp r13, qword [rbp + 0x550]
jne 0x140047cce
lea rcx, [rbp + 0x550]
lea rdx, str.library_std_src_syspalwindowsprocess.rs
call fcn.14003b240
mov r15, qword [rbp + 0x558]
mov word [r15 + r13*2], 0
inc r13
mov qword [rbp + 0x560], r13
jmp 0x140047990
mov qword [rsp + 0x20], 2
mov r9d, 2
lea rcx, [rbp + 0x550]
mov rdx, r13
mov r8, r14
call fcn.14001c5b0
mov rax, qword [rbp + 0x558]
mov qword [rbp + 0x4b0], rax
mov r13, qword [rbp + 0x560]
movabs r12, 0x8000000000000000
jmp 0x140047b1b
test rax, rax
je 0x140047d3f
mov edx, 1
call fcn.140008f20
cmp qword [rbp + 0x4c8], 0
je 0x140047d5a
mov edx, 1
mov rcx, qword [rbp + 0x4d0]
call fcn.140008f20
lea r15, str.nul_byte_found_in_provided_data
cmp qword [rbp + 0x4b8], 0
je 0x1400485cd
mov edx, 2
jmp 0x1400485c5
mov rdi, rbx
jmp 0x140047dc0
test r10, r10
je 0x14004864f
mov rax, qword [rbp + 0x588]
movzx eax, word [rax + r10*2 - 2]
cmp ax, 0x5c
je 0x140048df5
xor edi, edi
test ax, ax
mov rax, qword [rbp + 0x588]
cmove rdi, rax
jmp 0x140048658
jne 0x14004721e
cmp rdi, rbx
cmovae rdi, rbx
mov qword [rbp - 0x30], r14
mov qword [rbp - 0x28], rsi
mov qword [rbp - 0x20], rdi
mov qword [rbp - 0x18], r15
lea rcx, [rbp - 0x30]
mov rdx, r13
mov r8, qword [rbp + 0x580]
call fcn.140042920
cmp qword [rbp + 0x578], 1
je 0x140047e03
lea rdx, str.exe.NUL
lea rcx, [rbp - 0x30]
mov r8d, 3
call case.0x140043a37.65
mov rsi, qword [rbp - 0x28]
mov r8, qword [rbp - 0x20]
lea rcx, [rbp + 0x4e0]
mov rdx, rsi
call fcn.14004be20
cmp qword [rbp - 0x30], 0
je 0x140047e2e
mov edx, 1
mov rcx, rsi
call fcn.140008f20
mov rax, qword [rbp + 0x4e0]
cmp rax, r12
jne 0x140048555
mov qword [rbp + 0x550], 0
mov qword [rbp + 0x558], 2
mov qword [rbp + 0x560], 0
mov r8d, 0x200
mov eax, 2
mov qword [rbp + 0x588], rax
xor r13d, r13d
xor r12d, r12d
xor edi, edi
cmp r8, 0x201
jb 0x140047e9f
jmp 0x140047eb0
jae 0x140047f82
cmp r8, 0x201
jae 0x140047eb0
mov ebx, 0x200
lea r14, [rbp - 0x30]
mov r15, r8
jmp 0x140047ee7
sub r8, rdi
sub r12, rdi
cmp r12, r8
jb 0x140047f4a
mov eax, 0xffffffff
cmp r13, rax
mov edi, 0xffffffff
cmovb rdi, r13
mov qword [rbp + 0x560], rdi
mov r12, r13
mov rbx, rdi
mov r14, qword [rbp + 0x588]
mov r15, rdi
xor ecx, ecx
call sub.KERNEL32.dll_SetLastError
mov rcx, r14
mov edx, r15d
call sub.KERNEL32.dll_GetSystemDirectoryW
mov esi, eax
test eax, eax
jne 0x140047f0c
call sub.KERNEL32.dll_GetLastError
test eax, eax
jne 0x14004807a
mov r8d, esi
cmp r15, r8
jne 0x140047e90
call sub.KERNEL32.dll_GetLastError
cmp eax, 0x7a
jne 0x140049827
add r15, r15
mov eax, 0xffffffff
cmp r15, rax
cmovae r15, rax
mov r8, r15
cmp r8, 0x201
jae 0x140047eb0
jmp 0x140047e9f
mov qword [rsp + 0x20], 2
mov r9d, 2
lea rcx, [rbp + 0x550]
mov rdx, rdi
call fcn.14001c5b0
mov r13, qword [rbp + 0x550]
mov rax, qword [rbp + 0x558]
mov qword [rbp + 0x588], rax
jmp 0x140047ebf
cmp rbx, r8
jb 0x14004969f
lea rcx, [rbp + 0x4e0]
mov rdx, r14
call fcn.14001dd40
movabs r12, 0x8000000000000000
mov r13, qword [rbp + 0x4d8]
lea rcx, [rbp + 0x4e0]
mov rdx, r13
mov r8, qword [rbp + 0x580]
call fcn.140042920
cmp qword [rbp + 0x578], 1
je 0x140047fe4
lea rdx, str.exe.NUL
lea rcx, [rbp + 0x4e0]
mov r8d, 3
call case.0x140043a37.65
mov rsi, qword [rbp + 0x4e8]
mov r8, qword [rbp + 0x4f0]
lea rcx, [rbp + 0x450]
mov rdx, rsi
call fcn.14004be20
cmp qword [rbp + 0x4e0], 0
je 0x140048018
mov edx, 1
mov rcx, rsi
call fcn.140008f20
mov rsi, qword [rbp + 0x450]
mov rax, qword [rbp + 0x458]
mov qword [rbp + 0x588], rax
mov rdi, qword [rbp + 0x460]
cmp qword [rbp + 0x550], 0
je 0x14004804f
mov rcx, qword [rbp + 0x558]
mov edx, 2
call fcn.140008f20
lea rax, [r12 + 2]
cmp rsi, rax
mov rcx, rsi
mov rsi, qword [rbp + 0x548]
jge 0x140048518
lea rax, [r12 + 1]
cmp rcx, rax
mov rbx, qword [rbp + 0x588]
je 0x1400480a4
jmp 0x1400480e7
call sub.KERNEL32.dll_GetLastError
mov ebx, eax
shl rbx, 0x20
cmp qword [rbp + 0x550], 0
je 0x1400480a0
mov rcx, qword [rbp + 0x558]
mov edx, 2
call fcn.140008f20
or rbx, 2
mov eax, ebx
and eax, 3
cmp eax, 1
jne 0x1400480e7
lea rsi, [rbx - 1]
mov rdi, qword [rbx - 1]
mov rbx, qword [rbx + 7]
mov rax, qword [rbx]
test rax, rax
je 0x1400480c7
mov rcx, rdi
call rax
cmp qword [rbx + 8], 0
je 0x1400480da
mov rdx, qword [rbx + 0x10]
mov rcx, rdi
call fcn.140008f20
mov edx, 8
mov rcx, rsi
call fcn.140008f20
mov qword [rbp + 0x550], 0
mov qword [rbp + 0x558], 2
mov qword [rbp + 0x560], 0
mov r8d, 0x200
mov eax, 2
mov qword [rbp + 0x588], rax
xor r13d, r13d
xor r12d, r12d
xor edi, edi
cmp r8, 0x201
jb 0x14004813f
jmp 0x140048150
jae 0x140048222
cmp r8, 0x201
jae 0x140048150
mov ebx, 0x200
lea r14, [rbp - 0x30]
mov r15, r8
jmp 0x140048187
sub r8, rdi
sub r12, rdi
cmp r12, r8
jb 0x1400481ea
mov eax, 0xffffffff
cmp r13, rax
mov edi, 0xffffffff
cmovb rdi, r13
mov qword [rbp + 0x560], rdi
mov r12, r13
mov rbx, rdi
mov r14, qword [rbp + 0x588]
mov r15, rdi
xor ecx, ecx
call sub.KERNEL32.dll_SetLastError
mov rcx, r14
mov edx, r15d
call sub.KERNEL32.dll_GetWindowsDirectoryW
mov esi, eax
test eax, eax
jne 0x1400481ac
call sub.KERNEL32.dll_GetLastError
test eax, eax
jne 0x140048313
mov r8d, esi
cmp r15, r8
jne 0x140048130
call sub.KERNEL32.dll_GetLastError
cmp eax, 0x7a
jne 0x140049865
add r15, r15
mov eax, 0xffffffff
cmp r15, rax
cmovae r15, rax
mov r8, r15
cmp r8, 0x201
jae 0x140048150
jmp 0x14004813f
mov qword [rsp + 0x20], 2
mov r9d, 2
lea rcx, [rbp + 0x550]
mov rdx, rdi
call fcn.14001c5b0
mov r13, qword [rbp + 0x550]
mov rax, qword [rbp + 0x558]
mov qword [rbp + 0x588], rax
jmp 0x14004815f
cmp rbx, r8
jb 0x1400496b9
lea rcx, [rbp + 0x4e0]
mov rdx, r14
call fcn.14001dd40
movabs r12, 0x8000000000000000
mov r13, qword [rbp + 0x4d8]
lea rcx, [rbp + 0x4e0]
mov rdx, r13
mov r8, qword [rbp + 0x580]
call fcn.140042920
cmp qword [rbp + 0x578], 1
je 0x140048284
lea rdx, str.exe.NUL
lea rcx, [rbp + 0x4e0]
mov r8d, 3
call case.0x140043a37.65
mov rsi, qword [rbp + 0x4e8]
mov r8, qword [rbp + 0x4f0]
lea rcx, [rbp + 0x450]
mov rdx, rsi
call fcn.14004be20
cmp qword [rbp + 0x4e0], 0
je 0x1400482b8
mov edx, 1
mov rcx, rsi
call fcn.140008f20
mov rsi, qword [rbp + 0x450]
mov rax, qword [rbp + 0x458]
mov qword [rbp + 0x588], rax
mov rdi, qword [rbp + 0x460]
cmp qword [rbp + 0x550], 0
je 0x1400482ef
mov rcx, qword [rbp + 0x558]
mov edx, 2
call fcn.140008f20
lea rax, [r12 + 2]
cmp rsi, rax
jge 0x140048542
lea rax, [r12 + 1]
cmp rsi, rax
mov rcx, qword [rbp + 0x588]
je 0x140048351
jmp 0x140048394
call sub.KERNEL32.dll_GetLastError
mov esi, eax
shl rsi, 0x20
cmp qword [rbp + 0x550], 0
je 0x140048339
mov rcx, qword [rbp + 0x558]
mov edx, 2
call fcn.140008f20
or rsi, 2
mov rcx, rsi
movabs r12, 0x8000000000000000
mov r13, qword [rbp + 0x4d8]
mov eax, ecx
and eax, 3
cmp eax, 1
jne 0x140048394
lea rsi, [rcx - 1]
mov rdi, qword [rcx - 1]
mov rbx, qword [rcx + 7]
mov rax, qword [rbx]
test rax, rax
je 0x140048374
mov rcx, rdi
call rax
cmp qword [rbx + 8], 0
je 0x140048387
mov rdx, qword [rbx + 0x10]
mov rcx, rdi
call fcn.140008f20
mov edx, 8
mov rcx, rsi
call fcn.140008f20
lea rdx, str.PATHlibrary_std_src_sys_commonprocess.rs
lea rcx, [rbp + 0x450]
mov r8d, 4
call fcn.14003dc40
mov rax, r12
mov r12, qword [rbp + 0x450]
cmp r12, rax
je 0x140048536
mov rsi, qword [rbp + 0x458]
mov rax, qword [rbp + 0x460]
add rax, rsi
mov qword [rbp + 0x4e0], rsi
mov qword [rbp + 0x4e8], rax
mov word [rbp + 0x4f0], 0
mov byte [rbp + 0x4f8], 1
lea rdi, [rbp - 0x30]
lea rbx, [rbp + 0x4e0]
lea r14, [rbp + 0x550]
mov rcx, rdi
mov rdx, rbx
call fcn.1400421b0
jmp 0x140048419
mov rcx, rdi
mov rdx, rbx
call fcn.1400421b0
mov rax, qword [rbp - 0x30]
movabs rcx, 0x8000000000000000
cmp rax, rcx
je 0x140048524
mov rcx, qword [rbp - 0x28]
mov rdx, qword [rbp - 0x20]
test rdx, rdx
jne 0x14004844e
test rax, rax
je 0x14004840e
mov edx, 1
call fcn.140008f20
jmp 0x14004840e
mov r8, qword [rbp - 0x18]
mov qword [rbp - 0x30], rax
mov qword [rbp - 0x28], rcx
mov qword [rbp - 0x20], rdx
mov qword [rbp - 0x18], r8
mov rcx, rdi
mov rdx, r13
mov r8, qword [rbp + 0x580]
call fcn.140042920
cmp qword [rbp + 0x578], 1
je 0x140048493
mov r8d, 3
mov rcx, rdi
lea rdx, str.exe.NUL
call case.0x140043a37.65
mov r15, qword [rbp - 0x28]
mov r8, qword [rbp - 0x20]
mov rcx, r14
mov rdx, r15
call fcn.14004be20
cmp qword [rbp - 0x30], 0
je 0x1400484ba
mov edx, 1
mov rcx, r15
call fcn.140008f20
mov rcx, qword [rbp + 0x550]
movabs rax, 0x8000000000000000
cmp rcx, rax
je 0x140048401
mov qword [rbp + 0x578], rcx
mov rax, qword [rbp + 0x558]
mov qword [rbp + 0x588], rax
mov rdi, qword [rbp + 0x560]
test r12, r12
je 0x140048502
mov edx, 1
mov rcx, rsi
call fcn.140008f20
mov rsi, qword [rbp + 0x548]
movabs r12, 0x8000000000000000
jmp 0x140046509
mov qword [rbp + 0x578], rcx
jmp 0x140046509
test r12, r12
je 0x140048536
mov edx, 1
mov rcx, rsi
call fcn.140008f20
lea rbx, [0x1400719b8]
jmp 0x14004645c
mov qword [rbp + 0x578], rsi
mov rsi, qword [rbp + 0x548]
jmp 0x140046509
mov qword [rbp + 0x578], rax
mov rax, qword [rbp + 0x4e8]
mov qword [rbp + 0x588], rax
mov rdi, qword [rbp + 0x4f0]
mov rsi, qword [rbp + 0x548]
jmp 0x140046509
lea r8, [rbp + 0x460]
mov rcx, r14
mov edx, 0xfffffff5
call fcn.14004c4a0
mov r14, rdx
test rax, rax
je 0x140048d9d
mov rax, qword [rbp + 0x4c0]
mov qword [rax], r14
mov qword [rax + 0x10], 2
jmp 0x140049411
lea r15, str.nul_byte_found_in_provided_data
test rdi, rdi
je 0x1400485cd
mov edx, 1
mov rcx, rsi
call fcn.140008f20
xor esi, esi
lea rcx, [rbp - 0x30]
call fcn.14004c3f0
cmp qword [rbp + 0x550], 0
je 0x1400485f3
mov rcx, qword [rbp + 0x558]
mov edx, 2
call fcn.140008f20
mov r12, qword [rbp + 0x588]
mov r14, qword [rbp + 0x580]
mov edi, dword [rbp + 0x570]
mov rax, qword [rbp + 0x4c0]
mov qword [rax], r15
mov qword [rax + 0x10], 2
jmp 0x14004950e
lea rax, str.library_std_src_syspalwindowsos.rs
mov rcx, r8
mov rdx, r12
mov r8, rax
call fcn.140009f50
jmp 0x14004989c
lea r8, str.library_std_src_syspalwindowsos.rs
mov rcx, rsi
mov rdx, r12
call fcn.1400092f0
jmp 0x14004989c
xor edi, edi
mov rax, qword [rbp + 0x588]
lea rbx, [r10 - 1]
test rdi, rdi
cmove rbx, r10
cmove rdi, rax
mov r15, qword [rbp + 0x4e0]
mov rax, r15
sub rax, rsi
cmp rax, rbx
mov r13, qword [rbp + 0x4c8]
jb 0x140049785
lea r8, [rbx + rbx]
lea rcx, [r14 + rsi*2]
mov rdx, rdi
call sub.msvcrt.dll_memcpy
add rsi, rbx
mov qword [rbp + 0x4f0], rsi
cmp rsi, r15
jne 0x1400486c4
lea rdx, [0x140071450]
lea rcx, [rbp + 0x4e0]
call fcn.14003b240
mov r14, qword [rbp + 0x4e8]
mov r13, qword [rbp + 0x4c8]
mov word [r14 + rsi*2], 0x22
inc rsi
mov qword [rbp + 0x4f0], rsi
test r13, r13
je 0x140049557
lea rax, [r13*4]
add rax, r13
mov rcx, qword [rbp + 0x570]
lea r15, [rcx + rax*8]
movdqa xmm6, xmmword [0x140065130]
lea r13, str.nul_byte_found_in_provided_data
mov rsi, qword [rbp + 0x4f0]
cmp rsi, qword [rbp + 0x4e0]
jne 0x140048726
lea rcx, [rbp + 0x4e0]
lea rdx, [0x140071480]
call fcn.14003b240
mov rax, qword [rbp + 0x4e8]
mov word [rax + rsi*2], 0x20
lea rdi, [rsi + 1]
mov qword [rbp + 0x4f0], rdi
mov rdx, qword [rbp + 0x570]
cmp dword [rdx], 1
jne 0x140048783
lea rcx, [rbp + 0x4e0]
movzx r8d, byte [rbp + 0x4d0]
call fcn.14004bf40
test rax, rax
jne 0x1400495a0
mov rax, qword [rbp + 0x570]
add rax, 0x28
mov qword [rbp + 0x570], rax
cmp rax, r15
jne 0x140048703
jmp 0x140049550
mov rbx, qword [rdx + 0x10]
mov rcx, qword [rdx + 0x18]
lea r12, [rbx + rcx]
xor edx, edx
cmp rcx, rdx
je 0x1400487b3
movzx r8d, byte [rbx + rdx]
cmp r8d, 0xa
je 0x140048dee
inc rdx
cmp r8d, 0xd
jne 0x140048791
jmp 0x140048dee
xor r10d, r10d
mov rdx, rbx
jmp 0x1400487c8
xor r10d, r10d
test r8w, r8w
je 0x140048df5
mov r8w, 1
test r10w, r10w
jne 0x1400487bb
cmp rdx, r12
je 0x14004887f
movzx r9d, byte [rdx]
test r9b, r9b
js 0x1400487ea
inc rdx
jmp 0x14004885e
mov r10d, r9d
and r10d, 0x1f
movzx r14d, byte [rdx + 1]
and r14d, 0x3f
cmp r9b, 0xdf
jbe 0x140048837
movzx r11d, byte [rdx + 2]
shl r14d, 6
and r11d, 0x3f
or r11d, r14d
cmp r9b, 0xf0
jb 0x140048847
movzx r9d, byte [rdx + 3]
add rdx, 4
and r10d, 7
shl r10d, 0x12
shl r11d, 6
and r9d, 0x3f
or r9d, r11d
or r9d, r10d
jmp 0x140048855
add rdx, 2
shl r10d, 6
or r10d, r14d
mov r9d, r10d
jmp 0x14004885e
add rdx, 3
shl r10d, 0xc
or r11d, r10d
mov r9d, r11d
cmp r9d, 0xffff
ja 0x140048869
xor r10d, r10d
mov r8d, r9d
jmp 0x1400487be
and r9d, 0x3ff
or r9d, 0xdc00
mov r10d, r9d
jmp 0x1400487be
mov qword [rbp + 0x4c8], r15
test rcx, rcx
lea r14, str.__._:___cmd.exe__e:ON__v:OFF__d__c__
mov qword [rbp + 0x4b8], r12
je 0x1400489c4
cmp byte [rcx + rbx - 1], 0x5c
sete cl
or cl, byte [rbp + 0x4d0]
mov rdx, rbx
jmp 0x1400488b9
cmp rdx, r12
je 0x1400489bf
movzx r8d, byte [rdx]
test r8b, r8b
js 0x1400488c7
inc rdx
jmp 0x140048932
mov r9d, r8d
and r9d, 0x1f
movzx r11d, byte [rdx + 1]
and r11d, 0x3f
cmp r8b, 0xdf
jbe 0x140048914
movzx r10d, byte [rdx + 2]
shl r11d, 6
and r10d, 0x3f
or r10d, r11d
cmp r8b, 0xf0
jb 0x140048924
movzx r8d, byte [rdx + 3]
add rdx, 4
and r9d, 7
shl r9d, 0x12
shl r10d, 6
and r8d, 0x3f
or r8d, r10d
or r8d, r9d
jmp 0x140048932
add rdx, 2
shl r9d, 6
or r9d, r11d
mov r8d, r9d
jmp 0x140048932
add rdx, 3
shl r9d, 0xc
or r10d, r9d
mov r8d, r10d
mov r9d, r8d
and r9d, 0x1ff800
cmp r9d, 0xd800
sete r9b
cmp r8d, 0x110000
sete r10b
or r10b, r9b
jne 0x1400488b0
cmp r8d, 0x80
jae 0x14004899e
lea r9d, [r8 - 0x30]
cmp r9d, 0xa
jb 0x14004899e
mov r9d, r8d
and r9d, 0x5f
add r9d, 0xffffffbf
cmp r9d, 0x19
jbe 0x14004899e
xor r9d, r9d
movzx r10d, byte [r9 + r14]
cmp r10b, r8b
je 0x140048999
lea r11, [r9 + 1]
cmp r9, 0xb
mov r9, r11
jne 0x140048982
cmp r10b, r8b
jne 0x1400489b2
cmp r8d, 0x20
jb 0x1400489b2
add r8d, 0xffffff81
cmp r8d, 0x21
jae 0x1400488b0
mov cl, 1
cmp rdx, r12
jne 0x1400488b9
jmp 0x1400489c4
test cl, 1
je 0x140048a06
cmp rdi, qword [rbp + 0x4e0]
jne 0x1400489e7
lea rcx, [rbp + 0x4e0]
lea rdx, [0x140071398]
call fcn.14003b240
mov rax, qword [rbp + 0x4e8]
mov word [rax + rsi*2 + 2], 0x22
add rsi, 2
mov qword [rbp + 0x4f0], rsi
mov cl, 1
mov dword [rbp + 0x4a8], ecx
mov rdi, rsi
jmp 0x140048a10
mov dword [rbp + 0x4a8], 0
xor r15d, r15d
xor esi, esi
lea r12, [rbp + 0x4e0]
jmp 0x140048a30
mov word [rax + rdi*2], r15w
inc rdi
mov qword [rbp + 0x4f0], rdi
mov r15d, r14d
test r15w, r15w
je 0x140048a3e
xor r14d, r14d
jmp 0x140048af5
cmp rbx, qword [rbp + 0x4b8]
je 0x140048c91
movzx r15d, byte [rbx]
test r15b, r15b
js 0x140048a5f
inc rbx
xor r14d, r14d
jmp 0x140048af5
mov ecx, r15d
and ecx, 0x1f
movzx r8d, byte [rbx + 1]
and r8d, 0x3f
cmp r15b, 0xdf
jbe 0x140048aa6
movzx edx, byte [rbx + 2]
shl r8d, 6
and edx, 0x3f
or edx, r8d
cmp r15b, 0xf0
jb 0x140048ab8
movzx r15d, byte [rbx + 3]
add rbx, 4
and ecx, 7
shl ecx, 0x12
shl edx, 6
and r15d, 0x3f
or r15d, edx
or r15d, ecx
jmp 0x140048ac4
add rbx, 2
shl ecx, 6
or ecx, r8d
mov r15d, ecx
xor r14d, r14d
jmp 0x140048af5
add rbx, 3
shl ecx, 0xc
or edx, ecx
mov r15d, edx
cmp r15d, 0xffff
jbe 0x140048a36
lea ecx, [r15 + 0xff0000]
shr ecx, 0xa
or ecx, 0xd800
and r15d, 0x3ff
or r15d, 0xdc00
mov r14d, r15d
mov r15d, ecx
movzx ecx, r15w
cmp ecx, 0x24
jg 0x140048b3c
cmp ecx, 0xd
je 0x140048b52
cmp ecx, 0x22
jne 0x140048c67
mov rcx, qword [rbp + 0x4e0]
mov rdx, rcx
sub rdx, rdi
cmp rdx, rsi
jb 0x140048bb8
test rsi, rsi
je 0x140048c35
cmp rsi, 0x10
jae 0x140048bed
xor ecx, ecx
jmp 0x140048c1d
cmp ecx, 0x25
je 0x140048b52
cmp ecx, 0x5c
jne 0x140048c67
inc rsi
jmp 0x140048c69
mov rcx, qword [rbp + 0x4e0]
sub rcx, rdi
cmp rcx, 6
jbe 0x140048b88
movabs rcx, 0x2c007e003a0064
mov qword [rax + rdi*2 + 6], rcx
movabs rcx, 0x64006300250025
mov qword [rax + rdi*2], rcx
add rdi, 7
jmp 0x140048c60
mov qword [rsp + 0x20], 2
mov r8d, 7
mov r9d, 2
mov rcx, r12
mov rdx, rdi
call fcn.14001c5b0
mov rax, qword [rbp + 0x4e8]
mov rdi, qword [rbp + 0x4f0]
jmp 0x140048b62
mov qword [rsp + 0x20], 2
mov r9d, 2
mov rcx, r12
mov rdx, rdi
mov r8, rsi
call fcn.14001c5b0
mov rax, qword [rbp + 0x4e8]
mov rdi, qword [rbp + 0x4f0]
cmp rsi, 0x10
jb 0x140048b35
mov rcx, rsi
and rcx, 0xfffffffffffffff0
lea rdx, [rax + rdi*2]
add rdx, 0x10
xor r8d, r8d
movdqu xmmword [rdx + r8*2 - 0x10], xmm6
movdqu xmmword [rdx + r8*2], xmm6
add r8, 0x10
cmp rcx, r8
jne 0x140048bff
add rdi, rcx
cmp rsi, rcx
je 0x140048c2e
sub rsi, rcx
mov word [rax + rdi*2], 0x5c
inc rdi
dec rsi
jne 0x140048c20
mov rcx, qword [rbp + 0x4e0]
mov qword [rbp + 0x4f0], rdi
cmp rdi, rcx
jne 0x140048c57
mov rcx, r12
lea rdx, [0x1400713c8]
call fcn.14003b240
mov rax, qword [rbp + 0x4e8]
mov word [rax + rdi*2], 0x22
inc rdi
mov qword [rbp + 0x4f0], rdi
xor esi, esi
cmp rdi, qword [rbp + 0x4e0]
jne 0x140048a1e
mov rcx, r12
lea rdx, [0x1400713f0]
call fcn.14003b240
mov rax, qword [rbp + 0x4e8]
jmp 0x140048a1e
cmp byte [rbp + 0x4a8], 0
movabs r12, 0x8000000000000000
mov r15, qword [rbp + 0x4c8]
je 0x140048767
mov rcx, qword [rbp + 0x4e0]
mov rdx, rcx
sub rdx, rdi
cmp rdx, rsi
jb 0x140048cd4
test rsi, rsi
je 0x140048d51
cmp rsi, 0x10
jae 0x140048d09
xor ecx, ecx
jmp 0x140048d39
mov qword [rsp + 0x20], 2
mov r9d, 2
lea rcx, [rbp + 0x4e0]
mov rdx, rdi
mov r8, rsi
call fcn.14001c5b0
mov rax, qword [rbp + 0x4e8]
mov rdi, qword [rbp + 0x4f0]
cmp rsi, 0x10
jb 0x140048cd0
mov rcx, rsi
and rcx, 0xfffffffffffffff0
lea rdx, [rax + rdi*2]
add rdx, 0x10
xor r8d, r8d
movdqu xmmword [rdx + r8*2 - 0x10], xmm6
movdqu xmmword [rdx + r8*2], xmm6
add r8, 0x10
cmp rcx, r8
jne 0x140048d1b
add rdi, rcx
cmp rsi, rcx
je 0x140048d4a
sub rsi, rcx
mov word [rax + rdi*2], 0x5c
inc rdi
dec rsi
jne 0x140048d3c
mov rcx, qword [rbp + 0x4e0]
mov qword [rbp + 0x4f0], rdi
cmp rdi, rcx
jne 0x140048d77
lea rcx, [rbp + 0x4e0]
lea rdx, [0x1400713b0]
call fcn.14003b240
mov rax, qword [rbp + 0x4e8]
mov word [rax + rdi*2], 0x22
inc rdi
mov qword [rbp + 0x4f0], rdi
movabs r12, 0x8000000000000000
mov r15, qword [rbp + 0x4c8]
jmp 0x140048767
lea r8, [rbp + 0x470]
mov rcx, rdi
mov edx, 0xfffffff4
call fcn.14004c4a0
test rax, rax
je 0x14004907b
mov rax, qword [rbp + 0x4c0]
mov qword [rax], rdx
mov qword [rax + 0x10], 2
jmp 0x140049409
lea rcx, str.assertion_failed:_self.height___0
lea r8, str._rustc_d4025ee454169fbd22f5773f54348310ab6a47bblibrary_alloc_srccollections_btree_node.rs
mov edx, 0x21
call fcn.14000a420
jmp 0x14004989c
lea r13, str.batch_file_arguments_are_invalid
cmp qword [rbp + 0x4e0], 0
je 0x140048e10
mov rcx, qword [rbp + 0x4e8]
mov edx, 2
call fcn.140008f20
mov r12, qword [rbp + 0x588]
mov rax, qword [rbp + 0x4c0]
mov qword [rax], r13
mov qword [rax + 0x10], 2
mov sil, 1
cmp qword [rbp + 0x4d8], 0
je 0x140047616
mov edx, 2
mov rcx, qword [rbp + 0x580]
call fcn.140008f20
jmp 0x140047616
xor esi, esi
lea rcx, [rbp - 0x30]
call fcn.14004c3f0
cmp r13, qword [rbp + 0x550]
jne 0x140048e80
xor esi, esi
lea rdx, str.library_std_src_syspalwindowsprocess.rs
lea rcx, [rbp + 0x550]
call fcn.14003b240
mov r15, qword [rbp + 0x558]
mov word [r15 + r13*2], 0
mov rax, qword [rbp + 0x550]
cmp rax, r12
je 0x1400485f3
mov qword [rbp + 0x4b8], rax
mov r13, qword [rbp + 0x558]
mov rsi, qword [rbp + 0x548]
mov r14, qword [rbp + 0x580]
mov edi, dword [rbp + 0x570]
cmp qword [rsi + 0x38], r12
je 0x1400472d6
mov rax, qword [rsi + 0x40]
mov rcx, qword [rsi + 0x48]
add rcx, rax
xor r10d, r10d
mov rdx, rax
jmp 0x140048ee3
xor r10d, r10d
test r8w, r8w
je 0x140048f97
mov r8w, 1
test r10w, r10w
jne 0x140048ed6
cmp rdx, rcx
je 0x140048fbc
movzx r9d, byte [rdx]
test r9b, r9b
js 0x140048f05
inc rdx
jmp 0x140048f76
mov r10d, r9d
and r10d, 0x1f
movzx esi, byte [rdx + 1]
and esi, 0x3f
cmp r9b, 0xdf
jbe 0x140048f4f
movzx r11d, byte [rdx + 2]
shl esi, 6
and r11d, 0x3f
or r11d, esi
cmp r9b, 0xf0
jb 0x140048f5f
movzx r9d, byte [rdx + 3]
add rdx, 4
and r10d, 7
shl r10d, 0x12
shl r11d, 6
and r9d, 0x3f
or r9d, r11d
or r9d, r10d
jmp 0x140048f6d
add rdx, 2
shl r10d, 6
or r10d, esi
mov r9d, r10d
jmp 0x140048f76
add rdx, 3
shl r10d, 0xc
or r11d, r10d
mov r9d, r11d
cmp r9d, 0xffff
ja 0x140048f81
xor r10d, r10d
mov r8d, r9d
jmp 0x140048ed9
and r9d, 0x3ff
or r9d, 0xdc00
mov r10d, r9d
jmp 0x140048ed9
lea r15, str.nul_byte_found_in_provided_data
mov rax, qword [rbp + 0x4c0]
mov qword [rax], r15
mov qword [rax + 0x10], 2
mov r12, qword [rbp + 0x588]
jmp 0x1400494f7
mov qword [rbp - 0x30], rax
mov qword [rbp - 0x28], rcx
mov word [rbp - 0x20], 0
lea rcx, [rbp + 0x4e0]
lea rdx, [rbp - 0x30]
call fcn.140049f10
mov rax, qword [rbp + 0x4e0]
mov rsi, qword [rbp + 0x4f0]
cmp rsi, rax
jne 0x140049007
lea rdx, str.library_std_src_syspalwindowsprocess.rs
lea rcx, [rbp + 0x4e0]
call fcn.14003b240
mov rax, qword [rbp + 0x4e0]
mov qword [rbp + 0x4b0], r15
mov r15, qword [rbp + 0x4e8]
mov word [r15 + rsi*2], 0
mov qword [rbp + 0x4a8], r15
cmp rax, r12
mov rsi, qword [rbp + 0x548]
jne 0x1400472ee
jmp 0x140048f9e
mov qword [rbp + 0x578], rax
mov rax, qword [rbp + 0x4e8]
mov qword [rbp + 0x588], rax
mov rdi, qword [rbp + 0x4f0]
jmp 0x140046509
lea rcx, [0x14007c108]
call fcn.14001c3a0
jmp 0x14004731e
lea rcx, str._rustc_d4025ee454169fbd22f5773f54348310ab6a47bblibrary_alloc_srccollections_btree_navigate.rs
call fcn.14000c1e0
jmp 0x14004989c
pxor xmm0, xmm0
movdqu xmmword [rbp + 0x514], xmm0
movdqu xmmword [rbp + 0x508], xmm0
movdqu xmmword [rbp + 0x4f8], xmm0
movdqu xmmword [rbp + 0x4e8], xmm0
movdqu xmmword [rbp + 0x528], xmm0
movdqu xmmword [rbp + 0x538], xmm0
test rdx, rdx
jne 0x1400490c3
test r14, r14
jne 0x1400490c3
mov eax, 1
test r13, r13
je 0x1400490e7
mov dword [rbp + 0x51c], 0x100
mov qword [rbp + 0x530], r13
mov qword [rbp + 0x538], r14
mov qword [rbp + 0x540], rdx
mov eax, 0x101
cmp byte [rsi + 0xc0], 1
jne 0x140049104
movzx ecx, word [rsi + 0xc2]
mov dword [rbp + 0x51c], eax
mov word [rbp + 0x520], cx
mov qword [rbp + 0x548], rdx
mov rdx, rsi
mov rsi, qword [rsi + 0xb8]
test rsi, rsi
je 0x140049234
add rdx, 0xa8
mov dword [rbp + 0x4e0], 0x70
lea rcx, [rbp + 0x3d0]
call fcn.14004cf40
mov rdi, qword [rbp + 0x3d0]
mov rcx, qword [rbp + 0x3d8]
test rdi, rdi
je 0x1400493eb
mov qword [rbp + 0x418], rcx
or ebx, 0x80000
mov rax, qword [rbp + 0x540]
mov qword [rbp + 0x30], rax
movups xmm0, xmmword [rbp + 0x530]
movaps xmmword [rbp + 0x20], xmm0
movups xmm0, xmmword [rbp + 0x520]
movaps xmmword [rbp + 0x10], xmm0
movdqu xmm0, xmmword [rbp + 0x4e0]
movdqu xmm1, xmmword [rbp + 0x4f0]
movdqu xmm2, xmmword [rbp + 0x500]
movdqu xmm3, xmmword [rbp + 0x510]
movdqa xmmword [rbp], xmm3
movdqa xmmword [rbp - 0x10], xmm2
movdqa xmmword [rbp - 0x20], xmm1
movdqa xmmword [rbp - 0x30], xmm0
mov qword [rbp + 0x38], rdi
lea rax, [rbp - 0x30]
jmp 0x140049245
call sub.KERNEL32.dll_GetLastError
shl rax, 0x20
or rax, 2
mov qword [rbp + 0x450], rax
lea rax, [rbp + 0x450]
mov qword [rbp + 0x4e0], rax
lea rax, case.0x14003f061.391
mov qword [rbp + 0x4e8], rax
lea rax, str.failure_getting_env_string_from_OS:
mov qword [rbp - 0x30], rax
mov qword [rbp - 0x28], 1
mov qword [rbp - 0x10], 0
lea rax, [rbp + 0x4e0]
mov qword [rbp - 0x20], rax
mov qword [rbp - 0x18], 1
lea rdx, str.library_std_src_syspalwindowsos.rs
lea rcx, [rbp - 0x30]
call fcn.140009490
jmp 0x14004989c
mov dword [rbp + 0x4e0], 0x68
lea rax, [rbp + 0x4e0]
mov rdx, qword [rbp + 0x440]
lea rcx, [rbp + 0x420]
mov qword [rsp + 0x48], rcx
mov qword [rsp + 0x40], rax
mov qword [rsp + 0x38], r15
mov rax, qword [rbp + 0x4b0]
mov qword [rsp + 0x30], rax
mov dword [rsp + 0x28], ebx
mov dword [rsp + 0x20], 1
mov rcx, qword [rbp + 0x580]
xor r8d, r8d
xor r9d, r9d
call sub.KERNEL32.dll_CreateProcessW
test eax, eax
je 0x1400493b6
movups xmm0, xmmword [rbp + 0x450]
movdqu xmm1, xmmword [rbp + 0x460]
movdqu xmm2, xmmword [rbp + 0x470]
mov rax, qword [rbp + 0x4c0]
movdqu xmmword [rax + 0x30], xmm2
movdqu xmmword [rax + 0x20], xmm1
movups xmmword [rax + 0x10], xmm0
movdqa xmm0, xmmword [rbp + 0x420]
movdqu xmmword [rax], xmm0
test rsi, rsi
je 0x1400492e0
mov rcx, rdi
mov rdx, qword [rbp + 0x418]
call fcn.14004d300
mov rcx, qword [rbp + 0x548]
call fcn.14005d768
mov rcx, r14
call fcn.14005d768
mov rcx, r13
call fcn.14005d768
cmp dword [rbp + 0x400], 4
jb 0x140049311
mov rcx, qword [rbp + 0x408]
call fcn.14005d768
lea rcx, [rbp + 0x550]
call fcn.14004d340
cmp qword [rbp + 0x4c8], 0
je 0x140049338
mov edx, 2
mov rcx, qword [rbp + 0x4a8]
call fcn.140008f20
cmp qword [rbp + 0x4b8], 0
je 0x140049353
mov edx, 2
mov rcx, qword [rbp + 0x4d0]
call fcn.140008f20
cmp qword [rbp + 0x438], 0
je 0x14004936e
mov rcx, qword [rbp + 0x440]
mov edx, 2
call fcn.140008f20
cmp qword [rbp + 0x4d8], 0
je 0x140049389
mov edx, 2
mov rcx, qword [rbp + 0x580]
call fcn.140008f20
cmp qword [rbp + 0x578], 0
setne al
test byte [rbp + 0x570], al
je 0x1400464d2
mov edx, 2
mov rcx, qword [rbp + 0x588]
call fcn.140008f20
jmp 0x1400464d2
call sub.KERNEL32.dll_GetLastError
shl rax, 0x20
or rax, 2
mov rcx, qword [rbp + 0x4c0]
mov qword [rcx], rax
mov qword [rcx + 0x10], 2
test rsi, rsi
je 0x1400493fd
mov rcx, rdi
mov rdx, qword [rbp + 0x418]
call fcn.14004d300
jmp 0x1400493fd
mov rax, qword [rbp + 0x4c0]
mov qword [rax], rcx
mov qword [rax + 0x10], 2
mov rcx, qword [rbp + 0x548]
call fcn.14005d768
mov rcx, r14
call fcn.14005d768
mov rcx, r13
call fcn.14005d768
cmp dword [rbp + 0x400], 4
jb 0x14004942e
mov rcx, qword [rbp + 0x408]
call fcn.14005d768
cmp qword [rbp + 0x450], 0
mov r14, qword [rbp + 0x580]
mov r13, qword [rbp + 0x4d0]
je 0x140049452
mov rcx, qword [rbp + 0x458]
call fcn.14005d768
cmp qword [rbp + 0x460], 0
je 0x140049468
mov rcx, qword [rbp + 0x468]
call fcn.14005d768
cmp qword [rbp + 0x470], 0
je 0x14004947e
mov rcx, qword [rbp + 0x478]
call fcn.14005d768
mov rdi, qword [rbp + 0x558]
movzx eax, byte [rbp + 0x560]
test byte [rbp + 0x550], 1
je 0x1400494af
test al, al
jne 0x1400494c3
mov rax, qword [0x14007c0f0]
test rax, r12
je 0x1400494c3
call fcn.14001c450
jmp 0x140049846
test al, al
jne 0x1400494c3
mov rax, qword [0x14007c0f0]
test rax, r12
jne 0x140049841
xor eax, eax
xchg byte [rdi], al
cmp al, 2
je 0x14004975b
cmp qword [rbp + 0x4c8], 0
mov r12, qword [rbp + 0x588]
mov edi, dword [rbp + 0x570]
je 0x1400494f7
mov edx, 2
mov rcx, qword [rbp + 0x4a8]
call fcn.140008f20
cmp qword [rbp + 0x4b8], 0
je 0x14004950e
mov edx, 2
mov rcx, r13
call fcn.140008f20
cmp qword [rbp + 0x438], 0
je 0x140049529
mov rcx, qword [rbp + 0x440]
mov edx, 2
call fcn.140008f20
cmp qword [rbp + 0x4d8], 0
je 0x140049540
mov edx, 2
mov rcx, r14
call fcn.140008f20
test dil, dil
je 0x1400464d2
xor esi, esi
jmp 0x140047616
mov rsi, qword [rbp + 0x4f0]
mov rax, qword [rbp + 0x4e0]
cmp rsi, rax
jne 0x14004957d
lea rdx, [0x140071468]
lea rcx, [rbp + 0x4e0]
call fcn.14003b240
mov rax, qword [rbp + 0x4e0]
mov r13, qword [rbp + 0x4e8]
mov word [r13 + rsi*2], 0x22
cmp rax, r12
je 0x140048e10
inc rsi
mov dil, 1
jmp 0x140046ba6
mov r13, rax
cmp qword [rbp + 0x4e0], 0
jne 0x140048dff
jmp 0x140048e10
lea rax, str.library_std_src_syspalwindowsmod.rs2
mov rcx, r8
mov rdx, r14
mov r8, rax
call fcn.140009f50
jmp 0x14004989c
mov r15, rsi
jmp 0x1400485cd
call sub.KERNEL32.dll_GetLastError
shl rax, 0x20
or rax, 2
mov qword [rbp + 0x550], rax
lea rax, [rbp + 0x550]
mov qword [rbp + 0x450], rax
lea rax, case.0x14003f061.391
mov qword [rbp + 0x458], rax
lea rax, str.comparing_environment_keys_failed:
mov qword [rbp + 0x4e0], rax
mov qword [rbp + 0x4e8], 1
mov qword [rbp + 0x500], 0
lea rax, [rbp + 0x450]
mov qword [rbp + 0x4f0], rax
mov qword [rbp + 0x4f8], 1
lea rdx, str.library_std_src_syspalwindowsprocess.rs
lea rcx, [rbp + 0x4e0]
call fcn.140009490
jmp 0x14004989c
lea rax, str.library_std_src_syspalwindowsmod.rs2
mov rcx, r8
mov rdx, rbx
mov r8, rax
call fcn.140009f50
jmp 0x14004989c
lea r8, str.library_std_src_syspalwindowsmod.rs2
mov rcx, rsi
mov rdx, r12
call fcn.140009f50
jmp 0x14004989c
lea rcx, str._rustc_d4025ee454169fbd22f5773f54348310ab6a47bblibrary_alloc_srccollections_btree_navigate.rs
call fcn.14000c1e0
jmp 0x14004989c
lea rax, str.library_std_src_syspalwindowsmod.rs2
mov rcx, r8
mov rdx, rbx
mov r8, rax
call fcn.140009f50
jmp 0x14004989c
lea rax, str.library_std_src_syspalwindowsmod.rs2
mov rcx, r8
mov rdx, rbx
mov r8, rax
call fcn.140009f50
jmp 0x14004989c
mov eax, 1
mov qword [rbp + 0x578], rax
lea r8, str._rustc_d4025ee454169fbd22f5773f54348310ab6a47bblibrary_alloc_src_slice.rs
mov rcx, qword [rbp + 0x578]
mov rdx, rsi
call fcn.1400086a0
jmp 0x14004989c
mov eax, 2
mov qword [rbp + 0x578], rax
lea r8, str._rustc_d4025ee454169fbd22f5773f54348310ab6a47bblibrary_alloc_src_slice.rs
mov rcx, qword [rbp + 0x578]
mov rdx, r15
call fcn.1400086a0
jmp 0x14004989c
mov eax, 1
mov qword [rbp + 0x578], rax
lea r8, str._rustc_d4025ee454169fbd22f5773f54348310ab6a47bblibrary_alloc_src_slice.rs
mov rcx, qword [rbp + 0x578]
mov rdx, rsi
call fcn.1400086a0
jmp 0x14004989c
call fcn.14001c450
xor al, 1
mov rsi, qword [rbp + 0x548]
jmp 0x140047340
mov rcx, rdi
call fcn.14005d540
jmp 0x1400494cf
lea rcx, str.internal_error:_entered_unreachable_codeH
lea r8, str.library_std_src_syspalwindowsmod.rs2
mov edx, 0x28
call fcn.14000a420
jmp 0x14004989c
mov qword [rsp + 0x20], 2
lea rcx, [rbp + 0x4e0]
mov r9d, 2
mov rdx, rsi
mov r8, rbx
call fcn.14001c5b0
mov rsi, qword [rbp + 0x4f0]
mov r15, qword [rbp + 0x4e0]
mov r14, qword [rbp + 0x4e8]
mov r13, qword [rbp + 0x4c8]
jmp 0x140048684
lea rcx, str.internal_error:_entered_unreachable_codeH
lea r8, str.library_std_src_syspalwindowsmod.rs2
mov edx, 0x28
call fcn.14000a420
jmp 0x14004989c
mov eax, 4
mov qword [rbp + 0x580], rax
mov ecx, 1
lea r8, str._rustc_d4025ee454169fbd22f5773f54348310ab6a47bblibrary_alloc_src_slice.rs
mov rdx, qword [rbp + 0x580]
call fcn.1400086a0
jmp 0x14004989c
lea rcx, str.internal_error:_entered_unreachable_codeH
lea r8, str.library_std_src_syspalwindowsmod.rs2
mov edx, 0x28
call fcn.14000a420
jmp 0x14004989c
lea rcx, str.internal_error:_entered_unreachable_codeH
lea r8, str.library_std_src_syspalwindowsmod.rs2
mov edx, 0x28
call fcn.14000a420
jmp 0x14004989c
call fcn.14001c450
test al, al
mov r14, qword [rbp + 0x580]
mov r13, qword [rbp + 0x4d0]
jne 0x1400494c3
mov byte [rdi + 1], 1
jmp 0x1400494c3
lea rcx, str.internal_error:_entered_unreachable_codeH
lea r8, str.library_std_src_syspalwindowsmod.rs2
mov edx, 0x28
call fcn.14000a420
jmp 0x14004989c
xor ecx, ecx
jmp 0x1400497f5
mov ecx, 2
lea r8, str._rustc_d4025ee454169fbd22f5773f54348310ab6a47bblibrarycore_srciter_traitsiterator.rsp
mov edx, 0x14
call fcn.1400086a0
ud2