Function at 0x585120
Capabilities:
Create process on windows
Get common file path
Query environment variable

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x618
movdqa xmmword [rsp + 0x600], xmm6
mov r15, rdx
mov qword [rsp + 0x138], rcx
mov rbp, qword [rdx + 0x60]
movzx eax, byte [rdx + 0x68]
test al, al
jne 0x58516b
test rbp, rbp
jne 0x58516b
mov qword [rsp + 0x1d8], 0
xor ebx, ebx
jmp 0x585f31
mov qword [rsp + 0x120], 0
mov qword [rsp + 0x130], 0
test al, al
mov qword [rsp + 0xe8], r15
jne 0x585414
call sub.KERNEL32.dll_GetEnvironmentStringsW
test rax, rax
je 0x5888fa
mov qword [rsp + 0x68], rbp
lea rdi, [rsp + 0x80]
mov qword [rsp + 0x78], rax
mov r12, rax
nop word cs:[rax + rax]
cmp word [r12], 0
je 0x5853fd
mov rsi, r12
mov rcx, 0xfffffffffffffffe
xor ebp, ebp
nop dword [rax + rax]
mov r13, rbp
mov rax, rcx
inc rbp
cmp word [r12], 0
lea r12, [r12 + 2]
lea rcx, [rcx + 2]
jne 0x5851e0
cmp r13, 1
je 0x5851c0
test r13, r13
je 0x58884b
mov rbx, 0xfffffffffffffffc
xor r14d, r14d
nop word cs:[rax + rax]
cmp word [rsi + r14*2 + 2], 0x3d
je 0x585240
inc r14
add rbx, 0xfffffffffffffffe
add rax, 0xfffffffffffffffe
jne 0x585220
jmp 0x5851c0
lea r8, [r14 + 1]
cmp r14, r13
jae 0x588863
mov rcx, rdi
mov rdx, rsi
call fcn.00561110
lea rcx, [r14 + 2]
cmp r13, rcx
jb 0x58887d
sub rbp, r14
add rbp, 0xfffffffffffffffd
sub rsi, rbx
lea rcx, [rsp + 0x200]
mov rdx, rsi
mov r8, rbp
call fcn.00561110
mov rsi, qword [rsp + 0x80]
mov rbp, qword [rsp + 0x88]
mov r14, qword [rsp + 0x90]
movzx r15d, byte [rsp + 0x98]
lea rcx, [rsp + 0x99]
mov eax, dword [rcx]
mov ecx, dword [rcx + 3]
mov dword [rsp + 0x140], eax
mov dword [rsp + 0x143], ecx
mov rcx, qword [rsp + 0x200]
mov r13, qword [rsp + 0x208]
lea rax, [rsp + 0x210]
movups xmm0, xmmword [rax]
movaps xmmword [rsp + 0x100], xmm0
cmp r15b, 2
je 0x5853fd
mov qword [rsp + 0x60], rcx
lea rax, [rsi + r14]
mov qword [rsp + 0x80], rsi
mov qword [rsp + 0x88], rax
mov word [rsp + 0x90], 0
mov rbx, rdi
lea rdi, [rsp + 0x160]
mov rcx, rdi
mov rdx, rbx
call fcn.00588f80
mov qword [rsp + 0x218], rsi
mov qword [rsp + 0x220], rbp
mov qword [rsp + 0x228], r14
mov byte [rsp + 0x230], r15b
mov eax, dword [rsp + 0x140]
mov ecx, dword [rsp + 0x143]
lea rdx, [rsp + 0x210]
mov dword [rdx + 0x24], ecx
mov dword [rdx + 0x21], eax
movups xmm0, xmmword [rsp + 0x160]
movaps xmmword [rsp + 0x200], xmm0
mov rax, qword [rsp + 0x170]
mov qword [rsp + 0x210], rax
mov rax, qword [rsp + 0x60]
mov qword [rsp + 0x80], rax
mov qword [rsp + 0x88], r13
movdqa xmm0, xmmword [rsp + 0x100]
lea rax, [rsp + 0x99]
movdqu xmmword [rax - 9], xmm0
mov rcx, rdi
lea rdx, [rsp + 0x120]
lea r8, [rsp + 0x200]
mov r9, rbx
call fcn.00589920
mov rdi, rbx
cmp byte [rsp + 0x178], 2
je 0x5851c0
cmp qword [rsp + 0x168], 0
je 0x5851c0
mov rcx, qword [rsp + 0x160]
mov edx, 1
call fcn.00417e40
jmp 0x5851c0
mov rcx, qword [rsp + 0x78]
call sub.KERNEL32.dll_FreeEnvironmentStringsW
mov r15, qword [rsp + 0xe8]
mov rbp, qword [rsp + 0x68]
movabs rax, 0x3fffffffffffffff
mov rcx, qword [r15 + 0x50]
mov r8, qword [r15 + 0x58]
xor esi, esi
test rcx, rcx
setne sil
cmove rbp, rcx
xor r15d, r15d
inc rax
mov qword [rsp + 0xf8], rax
jmp 0x585457
xor ecx, ecx
mov r8, qword [rsp + 0x58]
test rbp, rbp
je 0x585d59
test rsi, rsi
je 0x5854b0
test r15, r15
jne 0x5854b0
mov esi, 1
test r8, r8
je 0x5854ba
mov rdx, r8
and rdx, 7
je 0x5854bf
mov rax, r8
and rax, 0xfffffffffffffff8
mov r15, rcx
nop word [rax + rax]
mov r15, qword [r15 + 0x3d8]
dec rdx
jne 0x585490
cmp r8, 8
jae 0x5854d0
jmp 0x58550e
test rsi, rsi
jne 0x585513
jmp 0x5887dc
mov r15, rcx
jmp 0x58550e
mov r15, rcx
mov rax, r8
cmp r8, 8
jb 0x58550e
nop dword [rax + rax]
mov rcx, qword [r15 + 0x3d8]
mov rcx, qword [rcx + 0x3d8]
mov rcx, qword [rcx + 0x3d8]
mov rcx, qword [rcx + 0x3d8]
mov rcx, qword [rcx + 0x3d8]
mov rcx, qword [rcx + 0x3d8]
mov rcx, qword [rcx + 0x3d8]
mov r15, qword [rcx + 0x3d8]
add rax, 0xfffffffffffffff8
jne 0x5854d0
xor r8d, r8d
xor ecx, ecx
movzx eax, word [r15 + 0x3d2]
mov r14, r15
mov r12, r8
cmp r8, rax
jb 0x585558
nop word cs:[rax + rax]
mov rax, qword [r14 + 0x160]
test rax, rax
je 0x588575
movzx r12d, word [r14 + 0x3d0]
inc rcx
mov r14, rax
cmp r12w, word [rax + 0x3d2]
jae 0x585530
test rcx, rcx
je 0x585600
mov r15, qword [r14 + r12*8 + 0x3e0]
mov rax, rcx
dec rax
je 0x5855ee
lea rdx, [rcx - 2]
mov r8, rax
and r8, 7
je 0x5855a5
mov rax, r8
nop word cs:[rax + rax]
mov r15, qword [r15 + 0x3d8]
dec rax
jne 0x585590
not r8
add rcx, r8
mov rax, rcx
cmp rdx, 7
jb 0x5855ee
nop dword [rax + rax]
mov rcx, qword [r15 + 0x3d8]
mov rcx, qword [rcx + 0x3d8]
mov rcx, qword [rcx + 0x3d8]
mov rcx, qword [rcx + 0x3d8]
mov rcx, qword [rcx + 0x3d8]
mov rcx, qword [rcx + 0x3d8]
mov rcx, qword [rcx + 0x3d8]
mov r15, qword [rcx + 0x3d8]
add rax, 0xfffffffffffffff8
jne 0x5855b0
xor r8d, r8d
jmp 0x585608
lea r8, [r12 + 1]
mov r15, r14
dec rbp
imul rax, r12, 0x38
lea rdi, [r14 + rax]
add rdi, 0x168
shl r12, 5
cmp byte [r14 + r12 + 0x18], 2
jne 0x585680
mov r13, qword [rsp + 0x120]
mov ecx, 0
test r13, r13
je 0x585457
mov rbx, r8
mov r9, qword [rdi]
mov rax, qword [rdi + 0x10]
mov rdi, qword [rsp + 0x128]
mov qword [rsp + 0x20], rax
lea rcx, [rsp + 0x100]
mov rdx, r13
mov r8, rdi
call fcn.00589190
cmp qword [rsp + 0x100], 0
je 0x58574d
xor ecx, ecx
mov r8, rbx
jmp 0x585457
mov qword [rsp + 0x68], rsi
mov rsi, qword [rdi + 0x18]
mov r13, qword [rdi + 0x28]
test r13, r13
mov qword [rsp + 0x58], r8
je 0x5856bb
js 0x58882f
movzx eax, byte [0x006be1f0]
mov edx, 1
mov rcx, r13
call fcn.00417db0
test rax, rax
jne 0x5856c0
jmp 0x588839
mov eax, 1
mov qword [rsp + 0x60], rax
mov rcx, rax
mov rdx, rsi
mov r8, r13
call sub.ntdll.dll_memcpy
movzx ecx, byte [rdi + 0x30]
mov rdx, qword [rdi]
mov rdi, qword [rdi + 0x10]
test rdi, rdi
mov byte [rsp + 0x78], cl
je 0x585741
mov qword [rsp + 0xf0], r13
mov r13, rbp
xor ebp, ebp
cmp rdi, qword [rsp + 0xf8]
setb al
jae 0x5887f9
lea rbx, [rdi + rdi]
mov bpl, al
add rbp, rbp
test rbx, rbx
je 0x585918
movzx eax, byte [0x006be1f0]
mov rcx, rbx
mov rsi, rdx
mov rdx, rbp
call fcn.00417db0
mov rdx, rsi
mov rsi, rax
test rsi, rsi
jne 0x585924
jmp 0x588803
mov esi, 2
xor ebx, ebx
jmp 0x58592f
mov rax, qword [rsp + 0x108]
mov rdx, qword [rsp + 0x110]
mov rcx, qword [rsp + 0x118]
mov byte [rsp + 0x77], 0
test rdx, rdx
je 0x585a61
mov rax, qword [rax + rcx*8 + 0x3d8]
mov rcx, rdx
dec rcx
je 0x58584e
lea r8, [rdx - 2]
mov r9, rcx
and r9, 7
je 0x5857be
mov rcx, r9
nop word [rax + rax]
movzx r10d, word [rax + 0x3d2]
mov rax, qword [rax + r10*8 + 0x3d8]
dec rcx
jne 0x5857a0
not r9
add rdx, r9
mov rcx, rdx
cmp r8, 7
jb 0x58584e
nop dword [rax + rax]
movzx edx, word [rax + 0x3d2]
mov rax, qword [rax + rdx*8 + 0x3d8]
movzx edx, word [rax + 0x3d2]
mov rax, qword [rax + rdx*8 + 0x3d8]
movzx edx, word [rax + 0x3d2]
mov rax, qword [rax + rdx*8 + 0x3d8]
movzx edx, word [rax + 0x3d2]
mov rax, qword [rax + rdx*8 + 0x3d8]
movzx edx, word [rax + 0x3d2]
mov rax, qword [rax + rdx*8 + 0x3d8]
movzx edx, word [rax + 0x3d2]
mov rax, qword [rax + rdx*8 + 0x3d8]
movzx edx, word [rax + 0x3d2]
mov rax, qword [rax + rdx*8 + 0x3d8]
movzx edx, word [rax + 0x3d2]
mov rax, qword [rax + rdx*8 + 0x3d8]
add rcx, 0xfffffffffffffff8
jne 0x5857d0
movzx ecx, word [rax + 0x3d2]
dec rcx
mov qword [rsp + 0x140], rax
mov qword [rsp + 0x148], 0
mov qword [rsp + 0x150], rcx
lea rcx, [rsp + 0x200]
lea rdx, [rsp + 0x140]
lea r8, [rsp + 0x77]
call fcn.005892f0
mov rax, qword [rsp + 0x250]
mov qword [rsp + 0x1b0], rax
movups xmm0, xmmword [rsp + 0x240]
movaps xmmword [rsp + 0x1a0], xmm0
movdqu xmm0, xmmword [rsp + 0x200]
movups xmm1, xmmword [rsp + 0x210]
movups xmm2, xmmword [rsp + 0x220]
movups xmm3, xmmword [rsp + 0x230]
movaps xmmword [rsp + 0x190], xmm3
movaps xmmword [rsp + 0x180], xmm2
movaps xmmword [rsp + 0x170], xmm1
movdqa xmmword [rsp + 0x160], xmm0
mov rdx, qword [rsp + 0x258]
mov rax, qword [rsp + 0x268]
movzx ecx, word [rdx + 0x3d2]
cmp rax, rcx
jae 0x585a9c
mov rcx, rdx
jmp 0x585ad9
mov rsi, rbp
test rsi, rsi
je 0x588803
mov rbp, r13
mov r13, qword [rsp + 0xf0]
add r14, r12
mov rcx, rsi
mov r8, rbx
call sub.ntdll.dll_memcpy
mov rax, qword [rsp + 0x60]
mov qword [rsp + 0x218], rax
mov qword [rsp + 0x220], r13
mov qword [rsp + 0x228], r13
movzx eax, byte [rsp + 0x78]
mov byte [rsp + 0x230], al
mov eax, dword [rsp + 0x80]
mov ecx, dword [rsp + 0x83]
lea rdx, [rsp + 0x231]
mov dword [rdx], eax
mov dword [rdx + 3], ecx
mov qword [rsp + 0x200], rsi
mov qword [rsp + 0x208], rdi
mov qword [rsp + 0x210], rdi
mov rsi, qword [r14]
mov rdi, qword [r14 + 0x10]
test rdi, rdi
je 0x5859cc
js 0x588813
movzx eax, byte [0x006be1f0]
mov edx, 1
mov rcx, rdi
call fcn.00417db0
mov rbx, rax
test rax, rax
jne 0x5859d1
jmp 0x58881d
mov ebx, 1
mov rcx, rbx
mov rdx, rsi
mov r8, rdi
call sub.ntdll.dll_memcpy
movzx eax, byte [r14 + 0x18]
mov qword [rsp + 0x80], rbx
mov qword [rsp + 0x88], rdi
mov qword [rsp + 0x90], rdi
mov byte [rsp + 0x98], al
lea rcx, [rsp + 0x160]
lea rdx, [rsp + 0x120]
lea r8, [rsp + 0x200]
lea r9, [rsp + 0x80]
call fcn.00589920
cmp byte [rsp + 0x178], 2
mov rsi, qword [rsp + 0x68]
je 0x585450
cmp qword [rsp + 0x168], 0
je 0x585450
mov rcx, qword [rsp + 0x160]
mov edx, 1
call fcn.00417e40
jmp 0x585450
mov qword [rsp + 0x80], rax
mov qword [rsp + 0x88], 0
mov qword [rsp + 0x90], rcx
lea rcx, [rsp + 0x200]
lea rdx, [rsp + 0x80]
lea r8, [rsp + 0x77]
call fcn.005892f0
jmp 0x585bf3
mov r8, qword [rsp + 0x260]
nop word cs:[rax + rax]
mov rcx, qword [rdx + 0x160]
test rcx, rcx
je 0x585ad4
movzx eax, word [rdx + 0x3d0]
inc r8
mov rdx, rcx
cmp ax, word [rcx + 0x3d2]
jae 0x585ab0
jmp 0x585ad9
mov rax, r8
xor ecx, ecx
imul rdx, rax, 0x38
shl rax, 5
mov r8, qword [rcx + rdx + 0x198]
mov qword [rsp + 0xb0], r8
movups xmm0, xmmword [rcx + rdx + 0x168]
movups xmm1, xmmword [rcx + rdx + 0x178]
movups xmm2, xmmword [rcx + rdx + 0x188]
movaps xmmword [rsp + 0xa0], xmm2
movaps xmmword [rsp + 0x90], xmm1
movaps xmmword [rsp + 0x80], xmm0
mov r8, qword [rsp + 0x190]
mov qword [rcx + rdx + 0x198], r8
movaps xmm0, xmmword [rsp + 0x160]
movaps xmm1, xmmword [rsp + 0x170]
movaps xmm2, xmmword [rsp + 0x180]
movups xmmword [rcx + rdx + 0x188], xmm2
movups xmmword [rcx + rdx + 0x178], xmm1
movups xmmword [rcx + rdx + 0x168], xmm0
movups xmm0, xmmword [rcx + rax]
movups xmm1, xmmword [rcx + rax + 0x10]
lea rdx, [rsp + 0xb8]
movups xmmword [rdx + 0x10], xmm1
movups xmmword [rdx], xmm0
lea rdx, [rsp + 0x198]
movups xmm0, xmmword [rdx]
movups xmm1, xmmword [rdx + 0x10]
movups xmmword [rcx + rax], xmm0
movups xmmword [rcx + rax + 0x10], xmm1
mov rax, qword [rsp + 0xd0]
mov qword [rsp + 0x250], rax
movaps xmm0, xmmword [rsp + 0xc0]
movaps xmmword [rsp + 0x240], xmm0
movdqa xmm0, xmmword [rsp + 0x80]
movaps xmm1, xmmword [rsp + 0x90]
movaps xmm2, xmmword [rsp + 0xa0]
movaps xmm3, xmmword [rsp + 0xb0]
movaps xmmword [rsp + 0x230], xmm3
movaps xmmword [rsp + 0x220], xmm2
movaps xmmword [rsp + 0x210], xmm1
movdqa xmmword [rsp + 0x200], xmm0
mov rax, qword [rsp + 0x250]
mov qword [rsp + 0xd0], rax
movaps xmm0, xmmword [rsp + 0x240]
movaps xmmword [rsp + 0xc0], xmm0
movdqa xmm0, xmmword [rsp + 0x200]
movaps xmm1, xmmword [rsp + 0x210]
movaps xmm2, xmmword [rsp + 0x220]
movaps xmm3, xmmword [rsp + 0x230]
movaps xmmword [rsp + 0xb0], xmm3
movaps xmmword [rsp + 0xa0], xmm2
dec qword [rsp + 0x130]
movaps xmmword [rsp + 0x90], xmm1
movdqa xmmword [rsp + 0x80], xmm0
cmp byte [rsp + 0x77], 0
je 0x585c9f
test rdi, rdi
je 0x588891
mov rax, qword [r13 + 0x3d8]
mov qword [rsp + 0x120], rax
dec rdi
mov qword [rsp + 0x128], rdi
mov qword [rax + 0x160], 0
mov edx, 8
mov rcx, r13
call fcn.00417e40
cmp byte [rsp + 0xb0], 2
mov ecx, 0
mov r8, rbx
je 0x585457
mov r13, rsi
mov r12, rbp
mov rsi, qword [rsp + 0x80]
mov r14, qword [rsp + 0x88]
mov rax, qword [rsp + 0xb8]
mov qword [rsp + 0x60], rax
mov rdi, qword [rsp + 0xc0]
movzx ebp, byte [rsp + 0xd0]
cmp qword [rsp + 0xa0], 0
je 0x585d08
mov rcx, qword [rsp + 0x98]
mov edx, 1
call fcn.00417e40
mov r8, rbx
test r14, r14
je 0x585d1d
mov edx, 2
mov rcx, rsi
call fcn.00417e40
mov r8, rbx
mov ecx, 0
cmp bpl, 2
mov rbp, r12
mov rsi, r13
je 0x585457
mov ecx, 0
test rdi, rdi
je 0x585457
mov edx, 1
mov rcx, qword [rsp + 0x60]
call fcn.00417e40
mov r8, rbx
xor ecx, ecx
jmp 0x585457
mov rax, qword [rsp + 0x130]
mov qword [rsp + 0x1f0], rax
movdqu xmm0, xmmword [rsp + 0x120]
movdqu xmmword [rsp + 0x1e0], xmm0
mov qword [rsp + 0x1d8], 1
movzx eax, byte [0x006be1f0]
mov r12d, 4
mov ecx, 4
mov edx, 1
call fcn.00417db0
test rax, rax
je 0x5888ae
mov rsi, rax
mov dword [rax], 0x48544150
add rax, 4
mov qword [rsp + 0x80], rsi
mov qword [rsp + 0x88], rax
mov word [rsp + 0x90], 0
lea rcx, [rsp + 0x160]
lea rdx, [rsp + 0x80]
call fcn.00588f80
mov qword [rsp + 0x78], rsi
mov qword [rsp + 0x218], rsi
mov qword [rsp + 0x220], 4
mov qword [rsp + 0x228], 4
mov byte [rsp + 0x230], 0
movdqu xmm0, xmmword [rsp + 0x160]
movdqa xmmword [rsp + 0x200], xmm0
mov r15, qword [rsp + 0x170]
mov qword [rsp + 0x210], r15
mov rdi, qword [rsp + 0x200]
mov r12, qword [rsp + 0x1e0]
test r12, r12
je 0x585efc
mov r13, qword [rsp + 0x1e8]
lea rcx, [r12 + 0x168]
movzx eax, word [r12 + 0x3d2]
mov qword [rsp + 0x60], rax
imul rsi, rax, 0x38
lea rbp, [r12 - 0x10]
mov rbx, 0xffffffffffffffff
nop
test rsi, rsi
je 0x585ec0
lea r14, [rcx + 0x38]
mov r8, qword [rcx]
mov r9d, dword [rcx + 0x10]
mov dword [rsp + 0x20], 1
mov rcx, rdi
mov edx, r15d
call sub.KERNEL32.dll_CompareStringOrdinal
add rsi, 0xffffffffffffffc8
add rbp, 0x20
inc rbx
mov rcx, r14
cmp eax, 3
je 0x585e80
cmp eax, 1
jne 0x585edc
jmp 0x585ec5
mov rbx, qword [rsp + 0x60]
sub r13, 1
jb 0x5864b7
mov r12, qword [r12 + rbx*8 + 0x3d8]
jmp 0x585e58
cmp eax, 2
jne 0x58874c
test r12, r12
mov r15, qword [rsp + 0xe8]
je 0x585f08
mov rbx, qword [rbp - 0x10]
mov r13, qword [rbp]
jmp 0x585f0a
xor ebx, ebx
mov r15, qword [rsp + 0xe8]
jmp 0x585f0a
xor ebx, ebx
mov edx, 1
mov rcx, qword [rsp + 0x78]
call fcn.00417e40
cmp qword [rsp + 0x208], 0
je 0x585f31
mov edx, 2
mov rcx, rdi
call fcn.00417e40
mov r12, qword [r15 + 0x40]
lea rdi, str.program_path_has_no_file_name
test r12, r12
je 0x585f83
mov rcx, qword [r15 + 0x30]
cmp r12, 4
jae 0x585f54
lea rdx, [0x0058adf0]
jmp 0x585f6c
cmp dword [rcx], 0x5c3f5c5c
lea rax, [0x0058ade0]
lea rdx, [0x0058adf0]
cmove rdx, rax
mov qword [rsp + 0x60], rcx
movzx esi, byte [r12 + rcx - 1]
mov ecx, esi
call rdx
test al, al
je 0x586005
mov rax, qword [rsp + 0x138]
mov qword [rax], rdi
mov qword [rax + 0x10], 2
cmp qword [rsp + 0x1d8], 0
je 0x5860a1
mov rcx, qword [rsp + 0x1e0]
test rcx, rcx
je 0x586078
mov rdx, qword [rsp + 0x1e8]
mov rax, qword [rsp + 0x1f0]
mov qword [rsp + 0x208], 0
mov qword [rsp + 0x210], rcx
mov qword [rsp + 0x218], rdx
mov qword [rsp + 0x228], 0
mov qword [rsp + 0x230], rcx
mov qword [rsp + 0x238], rdx
mov ecx, 1
jmp 0x58607c
cmp r12, 4
jb 0x5860bd
mov rdx, qword [rsp + 0x60]
movzx eax, byte [r12 + rdx - 4]
lea ecx, [rax - 0x41]
cmp cl, 0x1a
setb cl
shl cl, 5
or cl, al
cmp cl, 0x2e
jne 0x5860c6
movzx eax, byte [rdx + r12 - 3]
lea ecx, [rax - 0x41]
cmp cl, 0x1a
setb cl
shl cl, 5
or cl, al
cmp cl, 0x65
jne 0x5860c6
movzx eax, byte [rdx + r12 - 2]
lea ecx, [rax - 0x41]
cmp cl, 0x1a
setb cl
shl cl, 5
or cl, al
cmp cl, 0x78
jne 0x5860bd
lea eax, [rsi - 0x41]
cmp al, 0x1a
setb al
shl al, 5
or al, sil
cmp al, 0x65
sete al
jmp 0x5860bf
xor ecx, ecx
xor eax, eax
mov qword [rsp + 0x200], rcx
mov qword [rsp + 0x220], rcx
mov qword [rsp + 0x240], rax
lea rcx, [rsp + 0x200]
call fcn.0058b500
movaps xmm6, xmmword [rsp + 0x600]
add rsp, 0x618
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
xor eax, eax
mov rdx, qword [rsp + 0x60]
jmp 0x5860c8
xor eax, eax
lea rcx, [rdx + r12]
mov qword [rsp + 0x78], rcx
xor ecx, ecx
nop word cs:[rax + rax]
cmp r12, rcx
je 0x58616f
mov rdx, qword [rsp + 0x60]
movzx edx, byte [rdx + rcx]
cmp edx, 0x2f
je 0x5860ff
inc rcx
cmp edx, 0x5c
jne 0x5860e0
test al, al
je 0x586240
lea rcx, [rsp + 0x200]
mov rdx, qword [rsp + 0x60]
mov r8, r12
call fcn.0055fc90
mov rcx, qword [rsp + 0x200]
mov rax, qword [rsp + 0x208]
test rcx, rcx
je 0x586396
mov rdx, qword [rsp + 0x210]
mov qword [rsp + 0x200], rcx
mov qword [rsp + 0x208], rax
mov qword [rsp + 0x210], rdx
lea rcx, [rsp + 0x120]
lea rdx, [rsp + 0x200]
call fcn.0058af80
jmp 0x586506
xor r8d, r8d
lea rdi, str.nul_byte_found_in_provided_data
mov rax, qword [rsp + 0x60]
jmp 0x58618c
xor r8d, r8d
test cx, cx
je 0x585f83
mov cx, 1
test r8w, r8w
jne 0x586180
cmp rax, qword [rsp + 0x78]
je 0x58647e
movzx edx, byte [rax]
test dl, dl
js 0x5861ad
inc rax
jmp 0x58620c
mov r8d, edx
and r8d, 0x1f
movzx r10d, byte [rax + 1]
and r10d, 0x3f
cmp dl, 0xdf
jbe 0x5861fe
movzx r9d, byte [rax + 2]
shl r10d, 6
and r9d, 0x3f
or r9d, r10d
cmp dl, 0xf0
jb 0x586216
movzx edx, byte [rax + 3]
add rax, 4
and r8d, 7
shl r8d, 0x12
shl r9d, 6
and edx, 0x3f
or edx, r9d
or edx, r8d
cmp edx, 0xffff
jbe 0x58620c
jmp 0x58622c
add rax, 2
shl r8d, 6
or r8d, r10d
mov edx, r8d
xor r8d, r8d
mov ecx, edx
jmp 0x586183
add rax, 3
shl r8d, 0xc
or r9d, r8d
mov edx, r9d
cmp edx, 0xffff
jbe 0x58620c
and edx, 0x3ff
or edx, 0xdc00
mov r8d, edx
jmp 0x586183
test r12, r12
js 0x58898a
movzx eax, byte [0x006be1f0]
mov edx, 1
mov rcx, r12
call fcn.00417db0
test rax, rax
je 0x5888ae
mov rsi, rax
mov rcx, rax
mov rdx, qword [rsp + 0x60]
mov r8, r12
call sub.ntdll.dll_memcpy
mov qword [rsp + 0x80], rsi
mov qword [rsp + 0x88], r12
mov qword [rsp + 0x90], r12
mov byte [rsp + 0x98], 0
mov rax, qword [rsp + 0x90]
mov qword [rsp + 0x210], rax
movzx eax, byte [rsp + 0x98]
mov byte [rsp + 0x218], al
mov eax, dword [rsp + 0x99]
mov dword [rsp + 0x219], eax
movzx eax, word [rsp + 0x9d]
mov word [rsp + 0x21d], ax
movzx eax, byte [rsp + 0x9f]
mov byte [rsp + 0x21f], al
mov rax, qword [rsp + 0x80]
mov qword [rsp + 0x200], rax
mov rax, qword [rsp + 0x88]
mov qword [rsp + 0x208], rax
lea rdx, str..exeprogram_not_found
lea rcx, [rsp + 0x200]
mov r8d, 4
call fcn.0057f2c0
movdqa xmm0, xmmword [rsp + 0x200]
movaps xmm1, xmmword [rsp + 0x210]
movaps xmmword [rsp + 0x90], xmm1
movdqa xmmword [rsp + 0x80], xmm0
mov rsi, qword [rsp + 0x80]
mov rdi, qword [rsp + 0x90]
lea rcx, [rsp + 0x160]
mov rdx, rsi
mov r8, rdi
call fcn.0058ae00
cmp qword [rsp + 0x160], 0
je 0x5863af
mov rax, qword [rsp + 0x170]
mov qword [rsp + 0x130], rax
movdqu xmm0, xmmword [rsp + 0x160]
movdqa xmmword [rsp + 0x120], xmm0
jmp 0x5864ee
mov qword [rsp + 0x128], rax
mov qword [rsp + 0x120], 0
jmp 0x586506
mov rcx, rsi
mov rdx, rdi
call fcn.00583fb0
test rax, rax
je 0x58641b
cmp rdx, 2
jne 0x5863d7
movzx r8d, word [rax]
mov ecx, 2
cmp r8d, 0x2e2e
je 0x586405
mov r8, rdx
nop word [rax + rax]
test r8, r8
je 0x586402
mov rcx, r8
dec r8
cmp byte [rax + rcx - 1], 0x2e
jne 0x5863e0
cmp rdx, rcx
jb 0x5889c5
test r8, r8
cmovne rdx, r8
mov rcx, rdx
add rax, rcx
sub rax, rsi
cmp rdi, rax
jb 0x58641b
mov qword [rsp + 0x90], rax
mov rdi, rax
lea rcx, [rsp + 0x200]
mov rdx, rsi
mov r8, rdi
call fcn.0055fc90
mov rcx, qword [rsp + 0x200]
mov rax, qword [rsp + 0x208]
test rcx, rcx
je 0x5864da
mov rdx, qword [rsp + 0x210]
mov qword [rsp + 0x200], rcx
mov qword [rsp + 0x208], rax
mov qword [rsp + 0x210], rdx
lea rcx, [rsp + 0x120]
lea rdx, [rsp + 0x200]
call fcn.0058af80
jmp 0x5864ee
cmp r12, 0xf
ja 0x5864c6
xor eax, eax
mov qword [rsp + 0xf0], rax
xor eax, eax
mov rcx, qword [rsp + 0x60]
nop word cs:[rax + rax]
cmp byte [rcx + rax], 0x2e
je 0x586fb1
inc rax
cmp r12, rax
jne 0x5864a0
jmp 0x586fbe
mov r15, qword [rsp + 0xe8]
xor ebx, ebx
jmp 0x585f0a
mov cl, 0x2e
mov rdx, qword [rsp + 0x60]
mov r8, r12
call fcn.0046b1d0
jmp 0x586fb6
mov qword [rsp + 0x128], rax
mov qword [rsp + 0x120], 0
cmp qword [rsp + 0x88], 0
je 0x586506
mov edx, 1
mov rcx, rsi
call fcn.00417e40
mov r13, qword [rsp + 0x120]
mov rdi, qword [rsp + 0x128]
test r13, r13
je 0x585f83
mov r8, qword [rsp + 0x130]
mov qword [rsp + 0x68], rdi
cmp r8, 5
jb case.0x58685f.68
cmp word [r13 + r8*2 - 0xa], 0x2e
jne case.0x58685f.68
cmp word [r13 + r8*2 - 2], 0
je 0x58683f
mov rsi, qword [r15 + 0x90]
mov rbx, qword [r15 + 0xa0]
movzx edi, byte [r15 + 0xad]
mov qword [rsp + 0x80], 2
pxor xmm0, xmm0
movdqu xmmword [rsp + 0x88], xmm0
lea rcx, [rsp + 0x80]
xor edx, edx
call fcn.00560110
mov rax, qword [rsp + 0x80]
mov rcx, qword [rsp + 0x90]
mov word [rax + rcx*2], 0x22
inc rcx
mov qword [rsp + 0x90], rcx
mov rax, qword [rsp + 0x60]
mov qword [rsp + 0x200], rax
mov rax, qword [rsp + 0x78]
mov qword [rsp + 0x208], rax
mov word [rsp + 0x210], 0
lea rcx, [rsp + 0x80]
lea rdx, [rsp + 0x200]
call fcn.0055ff80
mov rdx, qword [rsp + 0x90]
cmp rdx, qword [rsp + 0x88]
jne 0x586607
lea rcx, [rsp + 0x80]
call fcn.00560110
mov rdx, qword [rsp + 0x90]
mov rax, qword [rsp + 0x80]
mov word [rax + rdx*2], 0x22
inc rdx
mov qword [rsp + 0x90], rdx
shl rbx, 3
lea r14, [rbx + rbx*4]
lea rbx, [rsp + 0x80]
test r14, r14
je 0x5866b4
mov rdx, qword [rsp + 0x90]
cmp rdx, qword [rsp + 0x88]
jne 0x586657
mov rcx, rbx
call fcn.00560110
mov rdx, qword [rsp + 0x90]
mov rax, qword [rsp + 0x80]
mov word [rax + rdx*2], 0x20
inc rdx
mov qword [rsp + 0x90], rdx
mov rcx, rbx
mov rdx, rsi
mov r8d, edi
call fcn.0058b090
mov r12, rax
add rsi, 0x28
add r14, 0xffffffffffffffd8
test rax, rax
je 0x586630
cmp qword [rsp + 0x88], 0
je 0x5867c7
mov rcx, qword [rsp + 0x80]
mov edx, 2
call fcn.00417e40
jmp 0x5867c7
mov rax, qword [rsp + 0x80]
mov r12, qword [rsp + 0x88]
test rax, rax
je 0x5867c7
mov rdx, qword [rsp + 0x90]
mov bpl, 1
mov r14, qword [rsp + 0x68]
mov qword [rsp + 0x60], r14
mov qword [rsp + 0xf0], r13
mov qword [rsp + 0x120], rax
mov qword [rsp + 0x128], r12
mov qword [rsp + 0x130], rdx
cmp rdx, r12
jne 0x586724
lea rcx, [rsp + 0x120]
call fcn.00560110
mov rax, qword [rsp + 0x120]
mov rdx, qword [rsp + 0x130]
mov word [rax + rdx*2], 0
inc rdx
mov qword [rsp + 0x130], rdx
cmp byte [r15 + 0xac], 0
mov eax, 0x400
mov rcx, r15
mov r15d, 0x608
cmove r15d, eax
mov qword [rsp + 0xe8], rcx
or r15d, dword [rcx + 0xa8]
cmp qword [rsp + 0x1d8], 0
je 0x586801
mov rdi, qword [rsp + 0x1f0]
mov qword [rsp + 0x150], rdi
movdqu xmm0, xmmword [rsp + 0x1e0]
movdqa xmmword [rsp + 0x140], xmm0
mov qword [rsp + 0x100], 2
pxor xmm0, xmm0
movdqu xmmword [rsp + 0x108], xmm0
test rdi, rdi
mov qword [rsp + 0x58], r13
mov dword [rsp + 0x78], ebp
je 0x5869d6
mov r12d, 2
xor esi, esi
jmp 0x586a09
mov r14, qword [rsp + 0x68]
mov rax, qword [rsp + 0x138]
mov qword [rax], r12
mov qword [rax + 0x10], 2
xor esi, esi
test r14, r14
je 0x5867f3
mov edx, 2
mov rcx, r13
call fcn.00417e40
test sil, sil
je 0x585f96
jmp 0x5860a1
mov ebx, 2
xor eax, eax
mov qword [rsp + 0xf8], rax
xor r12d, r12d
mov rcx, qword [rsp + 0xe8]
cmp byte [rcx + 0x88], 2
jne 0x586eda
xor r14d, r14d
mov eax, 2
mov qword [rsp + 0x1d0], rax
xor ecx, ecx
jmp 0x58799c
movzx eax, word [r13 + r8*2 - 8]
lea ecx, [rax - 0x42]
cmp ecx, 0x21
ja case.0x58685f.68
lea rdx, [0x00588e74]
movsxd rcx, dword [rdx + rcx*4]
add rcx, rdx
jmp rcx
movzx ecx, word [r13 + r8*2 - 6]
or ecx, 0x20
cmp ecx, 0x61
jne 0x58687d
movzx ecx, word [r13 + r8*2 - 4]
or ecx, 0x20
cmp ecx, 0x74
je 0x5868ad
cmp ax, 0x43
jne case.0x58685f.68
movzx eax, word [r13 + r8*2 - 6]
or eax, 0x20
cmp eax, 0x6d
jne case.0x58685f.68
movzx eax, word [r13 + r8*2 - 4]
add eax, 0xffffffbc
test eax, 0xffdf
jne case.0x58685f.68
mov qword [rsp + 0x78], r8
mov qword [rsp + 0x58], r13
mov qword [rsp + 0x80], 2
pxor xmm0, xmm0
movdqu xmmword [rsp + 0x88], xmm0
mov r8d, 0x200
mov eax, 2
mov qword [rsp + 0x60], rax
xor ebx, ebx
mov r14d, 0xffffffff
xor edi, edi
xor r13d, r13d
mov qword [rsp + 0xe8], r15
cmp r8, 0x201
jb 0x586912
jmp 0x586924
mov r8, rax
jae 0x587b37
cmp r8, 0x201
jae 0x586924
mov esi, 0x200
lea rbp, [rsp + 0x200]
mov r15, r8
jmp 0x586977
sub r8, r13
sub rdi, r13
cmp rdi, r8
jae 0x586954
lea rcx, [rsp + 0x80]
mov rdx, r13
call fcn.00560260
mov rax, qword [rsp + 0x80]
mov qword [rsp + 0x60], rax
mov rbx, qword [rsp + 0x88]
cmp rbx, r14
mov r13d, 0xffffffff
cmovb r13, rbx
mov qword [rsp + 0x90], r13
mov rdi, rbx
mov rsi, r13
mov rbp, qword [rsp + 0x60]
mov r15, r13
xor ecx, ecx
call sub.KERNEL32.dll_SetLastError
mov rcx, rbp
mov edx, r15d
call sub.KERNEL32.dll_GetSystemDirectoryW
mov r12d, eax
test eax, eax
jne 0x58699d
call sub.KERNEL32.dll_GetLastError
test eax, eax
jne 0x587beb
mov eax, r12d
cmp r15, rax
jne 0x586900
call sub.KERNEL32.dll_GetLastError
cmp eax, 0x7a
jne 0x588994
add r15, r15
cmp r15, r14
cmovae r15, r14
mov r8, r15
cmp r8, 0x201
jae 0x586924
jmp 0x586912
mov bl, 1
lea rcx, [rsp + 0x100]
xor edx, edx
call fcn.00560110
mov r12, qword [rsp + 0x100]
mov rsi, qword [rsp + 0x110]
mov word [r12 + rsi*2], 0
inc rsi
mov qword [rsp + 0x110], rsi
mov rax, qword [rsp + 0x140]
mov rcx, qword [rsp + 0x148]
xor edx, edx
test rax, rax
setne dl
cmove rdi, rax
mov qword [rsp + 0x200], rdx
mov qword [rsp + 0x208], 0
mov qword [rsp + 0x210], rax
mov qword [rsp + 0x218], rcx
mov qword [rsp + 0x220], rdx
mov qword [rsp + 0x228], 0
mov qword [rsp + 0x230], rax
mov qword [rsp + 0x238], rcx
mov qword [rsp + 0x240], rdi
lea rdi, [rsp + 0x80]
lea rdx, [rsp + 0x200]
mov rcx, rdi
call fcn.00584dd0
mov rdx, qword [rsp + 0x80]
test rdx, rdx
je 0x587b7a
mov r9, qword [rsp + 0x90]
imul r8, r9, 0x38
cmp byte [rdx + r8 + 0x198], 2
je 0x587b7a
mov qword [rsp + 0x1c8], r12
mov rdi, qword [rdx + r8 + 0x168]
mov r13, qword [rdx + r8 + 0x170]
mov rbp, qword [rdx + r8 + 0x178]
mov rcx, qword [rdx + r8 + 0x180]
mov rax, qword [rdx + r8 + 0x188]
shl r9, 5
mov r10, qword [rdx + r9]
mov qword [rsp + 0xe0], r10
mov r10, qword [rdx + r9 + 8]
mov qword [rsp + 0xf8], r10
mov r12, qword [rdx + r9 + 0x10]
movzx r9d, byte [rdx + r9 + 0x18]
mov byte [rsp + 0x1c0], r9b
mov rdx, qword [rdx + r8 + 0x190]
add rdx, rcx
xor r11d, r11d
mov r8, rcx
jmp 0x586b3d
xor r11d, r11d
test r9w, r9w
je 0x586e48
mov r9w, 1
test r11w, r11w
jne 0x586b30
cmp r8, rdx
je 0x586c01
movzx r10d, byte [r8]
test r10b, r10b
js 0x586b62
inc r8
jmp 0x586be0
mov r11d, r10d
and r11d, 0x1f
movzx r14d, byte [r8 + 1]
and r14d, 0x3f
cmp r10b, 0xdf
jbe 0x586bad
movzx ebx, byte [r8 + 2]
shl r14d, 6
and ebx, 0x3f
or ebx, r14d
cmp r10b, 0xf0
jb 0x586bc2
movzx r10d, byte [r8 + 3]
add r8, 4
and r11d, 7
shl r11d, 0x12
shl ebx, 6
and r10d, 0x3f
or r10d, ebx
or r10d, r11d
jmp 0x586bd0
add r8, 2
shl r11d, 6
or r11d, r14d
mov r10d, r11d
mov r14, qword [rsp + 0x68]
jmp 0x586be0
add r8, 3
shl r11d, 0xc
or ebx, r11d
mov r10d, ebx
mov r14, qword [rsp + 0x68]
cmp r10d, 0xffff
ja 0x586beb
nop
xor r11d, r11d
mov r9d, r10d
jmp 0x586b33
and r10d, 0x3ff
or r10d, 0xdc00
mov r11d, r10d
jmp 0x586b33
test rax, rax
je 0x586c10
mov edx, 1
call fcn.00417e40
mov rax, qword [rsp + 0x108]
sub rax, rsi
cmp rax, rbp
jae 0x586c45
lea rcx, [rsp + 0x100]
mov rdx, rsi
mov r8, rbp
call fcn.00560260
mov rax, qword [rsp + 0x100]
mov rsi, qword [rsp + 0x110]
jmp 0x586c4d
mov rax, qword [rsp + 0x1c8]
mov r8, rbp
add r8, rbp
mov rbx, rax
lea rcx, [rax + rsi*2]
mov rdx, rdi
call sub.ntdll.dll_memcpy
add rsi, rbp
mov qword [rsp + 0x110], rsi
test r13, r13
je 0x586c7f
mov edx, 2
mov rcx, rdi
call fcn.00417e40
cmp rsi, qword [rsp + 0x108]
mov r13, qword [rsp + 0x58]
mov ebp, dword [rsp + 0x78]
jne 0x586cbc
lea rcx, [rsp + 0x100]
mov rdx, rsi
call fcn.00560110
lea rdi, [rsp + 0x80]
mov rbx, qword [rsp + 0x100]
mov rsi, qword [rsp + 0x110]
jmp 0x586cc4
lea rdi, [rsp + 0x80]
mov word [rbx + rsi*2], 0x3d
inc rsi
mov qword [rsp + 0x110], rsi
mov rax, qword [rsp + 0xe0]
add r12, rax
xor r8d, r8d
jmp 0x586cf1
xor r8d, r8d
test cx, cx
je 0x5878d4
mov cx, 1
test r8w, r8w
jne 0x586ce5
cmp rax, r12
je 0x586d9d
movzx edx, byte [rax]
test dl, dl
js 0x586d10
inc rax
jmp 0x586d7f
mov r8d, edx
and r8d, 0x1f
movzx r10d, byte [rax + 1]
and r10d, 0x3f
cmp dl, 0xdf
jbe 0x586d59
movzx r9d, byte [rax + 2]
shl r10d, 6
and r9d, 0x3f
or r9d, r10d
cmp dl, 0xf0
jb 0x586d69
movzx edx, byte [rax + 3]
add rax, 4
and r8d, 7
shl r8d, 0x12
shl r9d, 6
and edx, 0x3f
or edx, r9d
or edx, r8d
jmp 0x586d77
add rax, 2
shl r8d, 6
or r8d, r10d
mov edx, r8d
jmp 0x586d7f
add rax, 3
shl r8d, 0xc
or r9d, r8d
mov edx, r9d
cmp edx, 0xffff
ja 0x586d89
xor r8d, r8d
mov ecx, edx
jmp 0x586ce8
and edx, 0x3ff
or edx, 0xdc00
mov r8d, edx
jmp 0x586ce8
cmp byte [rsp + 0x1c0], 2
je 0x58873f
mov rax, qword [rsp + 0xe0]
mov qword [rsp + 0x160], rax
mov qword [rsp + 0x168], r12
mov word [rsp + 0x170], 0
lea rcx, [rsp + 0x100]
lea rdx, [rsp + 0x160]
call fcn.0055ff80
cmp qword [rsp + 0xf8], 0
je 0x586dff
mov edx, 1
mov rcx, qword [rsp + 0xe0]
call fcn.00417e40
mov rsi, qword [rsp + 0x110]
cmp rsi, qword [rsp + 0x108]
jne 0x586e29
lea rcx, [rsp + 0x100]
mov rdx, rsi
call fcn.00560110
mov rsi, qword [rsp + 0x110]
mov r12, qword [rsp + 0x100]
mov word [r12 + rsi*2], 0
inc rsi
mov qword [rsp + 0x110], rsi
jmp 0x586a7d
test rax, rax
je 0x586e57
mov edx, 1
call fcn.00417e40
cmp qword [rsp + 0xf8], 0
mov ebp, dword [rsp + 0x78]
je 0x586e78
mov edx, 1
mov rcx, qword [rsp + 0xe0]
call fcn.00417e40
lea r12, str.nul_byte_found_in_provided_data
test r13, r13
je 0x586e91
mov edx, 2
mov rcx, rdi
call fcn.00417e40
mov r13, qword [rsp + 0x58]
xor ebx, ebx
lea rcx, [rsp + 0x200]
call fcn.0058b500
cmp qword [rsp + 0x108], 0
je 0x586ec2
mov rcx, qword [rsp + 0x100]
mov edx, 2
call fcn.00417e40
mov rax, qword [rsp + 0x138]
mov qword [rax], r12
mov qword [rax + 0x10], 2
jmp 0x587d3a
mov rax, qword [rcx + 0x70]
mov rcx, qword [rcx + 0x80]
add rcx, rax
xor r10d, r10d
mov rdx, rax
jmp 0x586efd
xor r10d, r10d
test r8w, r8w
je 0x5876ab
mov r8w, 1
test r10w, r10w
jne 0x586ef0
cmp rdx, rcx
je 0x587924
movzx r9d, byte [rdx]
test r9b, r9b
js 0x586f1f
inc rdx
jmp 0x586f90
mov r10d, r9d
and r10d, 0x1f
movzx esi, byte [rdx + 1]
and esi, 0x3f
cmp r9b, 0xdf
jbe 0x586f69
movzx r11d, byte [rdx + 2]
shl esi, 6
and r11d, 0x3f
or r11d, esi
cmp r9b, 0xf0
jb 0x586f79
movzx r9d, byte [rdx + 3]
add rdx, 4
and r10d, 7
shl r10d, 0x12
shl r11d, 6
and r9d, 0x3f
or r9d, r11d
or r9d, r10d
jmp 0x586f87
add rdx, 2
shl r10d, 6
or r10d, esi
mov r9d, r10d
jmp 0x586f90
add rdx, 3
shl r10d, 0xc
or r11d, r10d
mov r9d, r11d
cmp r9d, 0xffff
ja 0x586f9b
xor r10d, r10d
mov r8d, r9d
jmp 0x586ef3
and r9d, 0x3ff
or r9d, 0xdc00
mov r10d, r9d
jmp 0x586ef3
mov eax, 1
mov qword [rsp + 0xf0], rax
test rbx, rbx
je 0x58700d
add r13, rbx
mov qword [rsp + 0x160], rbx
mov qword [rsp + 0x168], r13
mov word [rsp + 0x170], 0
mov byte [rsp + 0x178], 1
lea rcx, [rsp + 0x200]
lea rdx, [rsp + 0x160]
call fcn.0057e930
movzx eax, byte [rsp + 0x218]
cmp al, 2
jne 0x587336
lea rcx, [rsp + 0x160]
call fcn.0057f050
cmp byte [rsp + 0x178], 2
jne 0x587036
lea rcx, [rsp + 0x160]
call fcn.00561060
jmp 0x587134
movdqu xmm0, xmmword [rsp + 0x160]
movups xmm1, xmmword [rsp + 0x170]
movdqa xmmword [rsp + 0x80], xmm0
movaps xmmword [rsp + 0x90], xmm1
mov rcx, qword [rsp + 0x80]
mov rsi, qword [rsp + 0x90]
mov rdx, rsi
call fcn.00580d70
test rax, rax
je 0x587082
cmp rsi, rdx
jb 0x587082
mov qword [rsp + 0x90], rdx
movdqa xmm0, xmmword [rsp + 0x80]
mov rax, qword [rsp + 0x90]
mov qword [rsp + 0x210], rax
mov rax, qword [rsp + 0x98]
mov qword [rsp + 0x218], rax
movdqa xmmword [rsp + 0x200], xmm0
lea rcx, [rsp + 0x200]
mov rdx, qword [rsp + 0x60]
mov r8, r12
call fcn.0057f920
cmp qword [rsp + 0xf0], 1
je 0x5870e1
lea rcx, [rsp + 0x200]
call fcn.00584110
mov rsi, qword [rsp + 0x200]
mov r8, qword [rsp + 0x210]
lea rcx, [rsp + 0x100]
mov rdx, rsi
call fcn.0058ae00
cmp qword [rsp + 0x208], 0
je 0x587119
mov edx, 1
mov rcx, rsi
call fcn.00417e40
mov r13, qword [rsp + 0x100]
test r13, r13
je 0x587134
movdqu xmm6, xmmword [rsp + 0x108]
jmp 0x587727
mov qword [rsp + 0xe8], r15
mov qword [rsp + 0x140], 2
pxor xmm0, xmm0
movdqu xmmword [rsp + 0x148], xmm0
mov r8d, 0x200
mov eax, 2
mov qword [rsp + 0x58], rax
xor eax, eax
mov qword [rsp + 0x68], rax
mov r15d, 0xffffffff
xor r14d, r14d
xor ebp, ebp
cmp r8, 0x201
jb 0x58719f
jmp 0x5871c0
jae 0x587282
cmp r8, 0x201
jae 0x5871c0
mov edi, 0x200
lea rsi, [rsp + 0x200]
mov r13, r8
jmp 0x587219
sub r8, rbp
sub r14, rbp
cmp r14, r8
jae 0x5871f5
lea rcx, [rsp + 0x140]
mov rdx, rbp
call fcn.00560260
mov rax, qword [rsp + 0x140]
mov qword [rsp + 0x58], rax
mov rax, qword [rsp + 0x148]
mov qword [rsp + 0x68], rax
mov r14, qword [rsp + 0x68]
cmp r14, r15
mov ebp, 0xffffffff
cmovb rbp, r14
mov qword [rsp + 0x150], rbp
mov rdi, rbp
mov rsi, qword [rsp + 0x58]
mov r13, rbp
xor ecx, ecx
call sub.KERNEL32.dll_SetLastError
mov rcx, rsi
mov edx, r13d
call sub.KERNEL32.dll_GetSystemDirectoryW
mov ebx, eax
test eax, eax
jne 0x58723e
call sub.KERNEL32.dll_GetLastError
test eax, eax
jne 0x58744e
mov r8d, ebx
cmp r13, r8
jne 0x587190
call sub.KERNEL32.dll_GetLastError
cmp eax, 0x7a
jne 0x5888c0
add r13, r13
mov eax, 0xffffffff
cmp r13, rax
mov r15d, 0xffffffff
cmovae r13, rax
mov r8, r13
cmp r8, 0x201
jae 0x5871c0
jmp 0x58719f
cmp rdi, r8
jb 0x5889ae
lea rcx, [rsp + 0x80]
mov rdx, rsi
call fcn.00561110
lea rcx, [rsp + 0x80]
mov rdx, qword [rsp + 0x60]
mov r8, r12
call fcn.0057f920
cmp qword [rsp + 0xf0], 1
je 0x5872c8
lea rcx, [rsp + 0x80]
call fcn.00584110
mov rsi, qword [rsp + 0x80]
mov r8, qword [rsp + 0x90]
lea rcx, [rsp + 0x100]
mov rdx, rsi
call fcn.0058ae00
cmp qword [rsp + 0x88], 0
je 0x587300
mov edx, 1
mov rcx, rsi
call fcn.00417e40
movdqu xmm0, xmmword [rsp + 0x100]
movdqu xmmword [rsp + 0x168], xmm0
mov rax, qword [rsp + 0x110]
mov qword [rsp + 0x178], rax
mov qword [rsp + 0x160], 0
mov sil, 1
jmp 0x587471
lea r14, [rsp + 0x219]
lea rbp, [rsp + 0x99]
lea rsi, [rsp + 0x200]
lea rdi, [rsp + 0x160]
lea r13, [rsp + 0x80]
jmp 0x58737b
mov rcx, rsi
mov rdx, rdi
call fcn.0057e930
movzx eax, byte [rsp + 0x218]
cmp al, 2
je 0x58700d
mov rcx, qword [rsp + 0x200]
mov rdx, qword [rsp + 0x208]
mov r8, qword [rsp + 0x210]
test r8, r8
jne 0x5873a9
test rdx, rdx
je 0x587360
mov edx, 1
call fcn.00417e40
jmp 0x587360
mov r9d, dword [r14]
mov r10d, dword [r14 + 3]
mov dword [rbp + 3], r10d
mov dword [rbp], r9d
mov qword [rsp + 0x80], rcx
mov qword [rsp + 0x88], rdx
mov qword [rsp + 0x90], r8
mov byte [rsp + 0x98], al
mov rcx, r13
mov rdx, qword [rsp + 0x60]
mov r8, r12
call fcn.0057f920
cmp qword [rsp + 0xf0], 1
je 0x5873fa
mov rcx, r13
call fcn.00584110
mov rbx, qword [rsp + 0x80]
mov r8, qword [rsp + 0x90]
mov rcx, rsi
mov rdx, rbx
call fcn.0058ae00
cmp qword [rsp + 0x88], 0
je 0x58742d
mov edx, 1
mov rcx, rbx
call fcn.00417e40
mov rax, qword [rsp + 0x200]
test rax, rax
jne 0x587d82
mov rcx, rsi
mov rdx, rdi
call fcn.0057e930
jmp 0x58736b
call sub.KERNEL32.dll_GetLastError
shl rax, 0x20
or rax, 2
mov qword [rsp + 0x168], rax
mov qword [rsp + 0x160], 1
xor esi, esi
cmp qword [rsp + 0x68], 0
je 0x587488
mov edx, 2
mov rcx, qword [rsp + 0x58]
call fcn.00417e40
test sil, sil
mov r15, qword [rsp + 0xe8]
je 0x5874a6
mov r13, qword [rsp + 0x168]
test r13, r13
jne 0x58771e
lea rcx, [rsp + 0x160]
call fcn.0058aed0
mov qword [rsp + 0x140], 2
pxor xmm0, xmm0
movdqu xmmword [rsp + 0x148], xmm0
mov r8d, 0x200
mov eax, 2
mov qword [rsp + 0x58], rax
xor eax, eax
mov qword [rsp + 0x68], rax
mov r14d, 0xffffffff
xor r15d, r15d
xor ebp, ebp
cmp r8, 0x201
jb 0x58750f
jmp 0x587530
jae 0x5875f2
cmp r8, 0x201
jae 0x587530
mov edi, 0x200
lea rbx, [rsp + 0x200]
mov r13, r8
jmp 0x587589
sub r8, rbp
sub r15, rbp
cmp r15, r8
jae 0x587565
lea rcx, [rsp + 0x140]
mov rdx, rbp
call fcn.00560260
mov rax, qword [rsp + 0x140]
mov qword [rsp + 0x58], rax
mov rax, qword [rsp + 0x148]
mov qword [rsp + 0x68], rax
mov r15, qword [rsp + 0x68]
cmp r15, r14
mov ebp, 0xffffffff
cmovb rbp, r15
mov qword [rsp + 0x150], rbp
mov rdi, rbp
mov rbx, qword [rsp + 0x58]
mov r13, rbp
xor ecx, ecx
call sub.KERNEL32.dll_SetLastError
mov rcx, rbx
mov edx, r13d
call sub.KERNEL32.dll_GetWindowsDirectoryW
mov esi, eax
test eax, eax
jne 0x5875ae
call sub.KERNEL32.dll_GetLastError
test eax, eax
jne 0x5876ca
mov r8d, esi
cmp r13, r8
jne 0x587500
call sub.KERNEL32.dll_GetLastError
cmp eax, 0x7a
jne 0x5888dd
add r13, r13
mov eax, 0xffffffff
cmp r13, rax
mov r14d, 0xffffffff
cmovae r13, rax
mov r8, r13
cmp r8, 0x201
jae 0x587530
jmp 0x58750f
cmp rdi, r8
jb 0x5889d3
lea rcx, [rsp + 0x80]
mov rdx, rbx
call fcn.00561110
mov r15, qword [rsp + 0xe8]
lea rcx, [rsp + 0x80]
mov rdx, qword [rsp + 0x60]
mov r8, r12
call fcn.0057f920
cmp qword [rsp + 0xf0], 1
je 0x587640
lea rcx, [rsp + 0x80]
call fcn.00584110
mov rdi, qword [rsp + 0x80]
mov r8, qword [rsp + 0x90]
lea rcx, [rsp + 0x100]
mov rdx, rdi
call fcn.0058ae00
cmp qword [rsp + 0x88], 0
je 0x587678
mov edx, 1
mov rcx, rdi
call fcn.00417e40
movdqu xmm0, xmmword [rsp + 0x100]
movdqu xmmword [rsp + 0x168], xmm0
mov rax, qword [rsp + 0x110]
mov qword [rsp + 0x178], rax
mov qword [rsp + 0x160], 0
mov sil, 1
jmp 0x5876f5
lea rax, str.nul_byte_found_in_provided_data
mov rcx, qword [rsp + 0x138]
mov qword [rcx], rax
mov qword [rcx + 0x10], 2
jmp 0x587d22
call sub.KERNEL32.dll_GetLastError
shl rax, 0x20
or rax, 2
mov qword [rsp + 0x168], rax
mov qword [rsp + 0x160], 1
xor esi, esi
mov r15, qword [rsp + 0xe8]
cmp qword [rsp + 0x68], 0
je 0x58770c
mov edx, 2
mov rcx, qword [rsp + 0x58]
call fcn.00417e40
test sil, sil
je 0x58773b
mov r13, qword [rsp + 0x168]
test r13, r13
je 0x58773b
movdqu xmm6, xmmword [rsp + 0x170]
movq rdi, xmm6
pshufd xmm0, xmm6, 0xee
movq r8, xmm0
jmp 0x586527
lea rcx, [rsp + 0x160]
call fcn.0058aed0
lea rdx, str.PATHlibrary_std_src_sys_commonprocess.rs
lea rcx, [rsp + 0x100]
mov r8d, 4
call fcn.0057cc10
cmp byte [rsp + 0x118], 2
je 0x587918
mov rcx, qword [rsp + 0x100]
mov rax, qword [rsp + 0x108]
mov qword [rsp + 0x68], rax
mov rax, qword [rsp + 0x110]
add rax, rcx
mov qword [rsp + 0x58], rcx
mov qword [rsp + 0x160], rcx
mov qword [rsp + 0x168], rax
mov word [rsp + 0x170], 0
mov byte [rsp + 0x178], 1
lea r14, [rsp + 0x219]
lea rsi, [rsp + 0x99]
lea r13, [rsp + 0x200]
lea rbp, [rsp + 0x160]
lea rdi, [rsp + 0x80]
jmp 0x5877f2
mov rax, qword [rsp + 0x200]
test rax, rax
jne 0x588549
mov rcx, r13
mov rdx, rbp
call fcn.0057e930
jmp 0x58780a
mov rcx, r13
mov rdx, rbp
call fcn.0057e930
movzx eax, byte [rsp + 0x218]
cmp al, 2
je 0x587901
mov rcx, qword [rsp + 0x200]
mov rdx, qword [rsp + 0x208]
mov r8, qword [rsp + 0x210]
test r8, r8
jne 0x587848
test rdx, rdx
je 0x5877ff
mov edx, 1
call fcn.00417e40
jmp 0x5877ff
mov r9d, dword [r14]
mov r10d, dword [r14 + 3]
mov dword [rsi + 3], r10d
mov dword [rsi], r9d
mov qword [rsp + 0x80], rcx
mov qword [rsp + 0x88], rdx
mov qword [rsp + 0x90], r8
mov byte [rsp + 0x98], al
mov rcx, rdi
mov rdx, qword [rsp + 0x60]
mov r8, r12
call fcn.0057f920
cmp qword [rsp + 0xf0], 1
je 0x587898
mov rcx, rdi
call fcn.00584110
mov rbx, qword [rsp + 0x80]
mov r8, qword [rsp + 0x90]
mov rcx, r13
mov rdx, rbx
call fcn.0058ae00
cmp qword [rsp + 0x88], 0
je 0x5877e1
mov edx, 1
mov rcx, rbx
call fcn.00417e40
jmp 0x5877e1
lea r12, str.nul_byte_found_in_provided_data
cmp qword [rsp + 0xf8], 0
je 0x586e96
mov edx, 1
mov rcx, qword [rsp + 0xe0]
call fcn.00417e40
jmp 0x586e96
cmp qword [rsp + 0x68], 0
je 0x587918
mov edx, 1
mov rcx, qword [rsp + 0x58]
call fcn.00417e40
lea rdi, [0x00676468]
jmp 0x585f83
mov qword [rsp + 0x200], rax
mov qword [rsp + 0x208], rcx
mov word [rsp + 0x210], 0
lea rcx, [rsp + 0x80]
lea rdx, [rsp + 0x200]
call fcn.00588f80
mov rcx, qword [rsp + 0x88]
mov rdx, qword [rsp + 0x90]
cmp rdx, rcx
jne 0x587985
lea rcx, [rsp + 0x80]
call fcn.00560110
mov rcx, qword [rsp + 0x88]
mov rdx, qword [rsp + 0x90]
mov r14, qword [rsp + 0x80]
mov word [r14 + rdx*2], 0
mov qword [rsp + 0x1d0], r14
mov qword [rsp + 0x1c0], rcx
pxor xmm0, xmm0
movdqa xmmword [rsp + 0x100], xmm0
mov qword [rsp + 0x110], 0
lea rsi, [0x006be150]
mov rcx, rsi
call sub.KERNEL32.dll_AcquireSRWLockExclusive
mov rax, qword [0x006be1e8]
shl rax, 1
test rax, rax
mov qword [rsp + 0x58], r13
mov dword [rsp + 0x78], ebp
mov qword [rsp + 0x1c8], r12
mov qword [rsp + 0xe0], rbx
mov qword [rsp + 0x1f8], r14
je 0x587a0a
call fcn.00562a00
mov edi, eax
xor dil, 1
jmp 0x587a0c
xor edi, edi
movzx r12d, byte [0x006be158]
xor eax, eax
test r12b, r12b
setne al
mov qword [rsp + 0x168], rsi
mov byte [rsp + 0x170], dil
mov qword [rsp + 0x160], rax
mov qword [rsp + 0x80], 0
mov qword [rsp + 0x90], 0
mov rcx, qword [rsp + 0xe8]
lea rsi, [rcx + 0x10]
mov r13, qword [rcx + 0x10]
xor eax, eax
cmp r13, 5
cmove rsi, rax
mov qword [rsp + 0xa0], 0
lea rbx, [rcx + 0x20]
mov r14, qword [rcx + 0x20]
cmp r14, 5
cmove rbx, rax
mov rax, qword [rcx]
mov rdx, qword [rcx + 8]
cmp rax, 5
mov ecx, 1
cmovne rcx, rax
lea r9, [rsp + 0x80]
mov r8d, 0xfffffff6
call fcn.0058b5b0
mov rbp, rdx
test rax, rax
je 0x587adb
mov rax, qword [rsp + 0x138]
mov qword [rax], rbp
mov qword [rax + 0x10], 2
mov r14, qword [rsp + 0x68]
mov r13, qword [rsp + 0x58]
mov rbx, qword [rsp + 0xe0]
jmp 0x587c65
lea r9, [rsp + 0x90]
mov ecx, 2
cmp r13, 5
cmovne rcx, r13
je 0x587af6
mov rdx, qword [rsi + 8]
mov r8d, 0xfffffff5
mov r13, qword [rsp + 0x58]
call fcn.0058b5b0
mov rsi, rdx
test rax, rax
je 0x587c06
mov rax, qword [rsp + 0x138]
mov qword [rax], rsi
mov qword [rax + 0x10], 2
mov r14, qword [rsp + 0x68]
mov rbx, qword [rsp + 0xe0]
jmp 0x587c5d
cmp rsi, r8
mov rdi, r8
jb 0x5889ea
test r12d, r12d
mov r14, qword [rsp + 0x68]
je 0x587d92
lea r15, [rdi + rdi]
movzx eax, byte [0x006be1f0]
mov edx, 2
mov rcx, r15
call fcn.00417db0
test rax, rax
je 0x588a12
mov rsi, rax
jmp 0x587d9a
xor ebx, ebx
lea rcx, [rsp + 0x200]
mov r13, qword [rsp + 0x58]
mov ebp, dword [rsp + 0x78]
call fcn.0058b500
cmp rsi, qword [rsp + 0x108]
jne 0x587bbe
xor ebx, ebx
lea rcx, [rsp + 0x100]
mov rdx, rsi
call fcn.00560110
mov r12, qword [rsp + 0x100]
mov rsi, qword [rsp + 0x110]
mov word [r12 + rsi*2], 0
mov rbx, qword [rsp + 0x100]
test rbx, rbx
je 0x586ec2
mov rax, qword [rsp + 0x108]
mov qword [rsp + 0xf8], rax
jmp 0x586813
call sub.KERNEL32.dll_GetLastError
mov edi, eax
shl rdi, 0x20
or rdi, 2
xor esi, esi
mov r14, qword [rsp + 0x68]
jmp 0x587da8
lea r9, [rsp + 0xa0]
mov ecx, 2
cmp r14, 5
cmovne rcx, r14
je 0x587c21
mov rdx, qword [rbx + 8]
mov r8d, 0xfffffff4
mov r14, qword [rsp + 0x68]
mov rbx, qword [rsp + 0xe0]
call fcn.0058b5b0
test rax, rax
je 0x58836d
mov rax, qword [rsp + 0x138]
mov qword [rax], rdx
mov qword [rax + 0x10], 2
mov rcx, rsi
call sub.KERNEL32.dll_CloseHandle
mov rcx, rbp
call sub.KERNEL32.dll_CloseHandle
cmp qword [rsp + 0x80], 0
mov ebp, dword [rsp + 0x78]
je 0x587c81
mov rcx, qword [rsp + 0x88]
call sub.KERNEL32.dll_CloseHandle
cmp qword [rsp + 0x90], 0
je 0x587c99
mov rcx, qword [rsp + 0x98]
call sub.KERNEL32.dll_CloseHandle
cmp qword [rsp + 0xa0], 0
je 0x587cb1
mov rcx, qword [rsp + 0xa8]
call sub.KERNEL32.dll_CloseHandle
movabs rax, 0x7fffffffffffffff
test r12b, r12b
je 0x587cd8
test dil, dil
jne 0x587cf9
mov rcx, qword [0x006be1e8]
test rcx, rax
je 0x587cf9
call fcn.00562a00
jmp 0x587cee
test dil, dil
jne 0x587cf9
mov rcx, qword [0x006be1e8]
test rcx, rax
je 0x587cf9
call fcn.00562a00
test al, al
jne 0x587cf9
mov byte [0x006be158], 1
lea rcx, [0x006be150]
call fcn.005a887c
cmp qword [rsp + 0x1c0], 0
je 0x587d22
mov edx, 2
mov rcx, qword [rsp + 0x1d0]
call fcn.00417e40
cmp qword [rsp + 0xf8], 0
je 0x587d3a
mov edx, 2
mov rcx, rbx
call fcn.00417e40
cmp qword [rsp + 0x128], 0
je 0x587d57
mov rcx, qword [rsp + 0x120]
mov edx, 2
call fcn.00417e40
cmp qword [rsp + 0x60], 0
je 0x587d71
mov edx, 2
mov rcx, qword [rsp + 0xf0]
call fcn.00417e40
mov sil, 1
test bpl, bpl
jne 0x5860a1
jmp 0x5867e1
movups xmm6, xmmword [rsp + 0x208]
mov r13, rax
jmp 0x587727
mov esi, 2
xor r15d, r15d
mov rcx, rsi
mov rdx, rbp
mov r8, r15
call sub.ntdll.dll_memcpy
test rbx, rbx
je 0x587dbc
mov edx, 2
mov rcx, qword [rsp + 0x60]
call fcn.00417e40
test rsi, rsi
je 0x588165
mov qword [rsp + 0x160], rsi
mov qword [rsp + 0x168], rdi
mov r15, rdi
mov qword [rsp + 0x170], rdi
lea r13, [0x006764be]
xor r12d, r12d
lea rdi, [rsp + 0x160]
xor ebp, ebp
jmp 0x587e3d
lea r8, [0x006764be]
sub r8, r13
add r8, 0xb
shr r8, 2
sub r8, rbp
inc r8
inc r8
mov rcx, rdi
mov rdx, r15
call fcn.00560260
mov rsi, qword [rsp + 0x160]
mov rax, r15
mov word [rsi + r15*2], r12w
inc rax
mov r15, rax
mov qword [rsp + 0x170], rax
mov r12d, ebx
test r13, r13
je 0x587eba
test r12w, r12w
je 0x587e59
xor ebx, ebx
cmp r15, qword [rsp + 0x168]
jne 0x587e24
jmp 0x587f18
lea rax, [0x006764c6]
cmp r13, rax
je 0x587eb7
movzx eax, byte [r13]
test al, al
js 0x587e76
inc r13
jmp 0x587f05
mov ecx, eax
and ecx, 0x1f
movzx r8d, byte [r13 + 1]
and r8d, 0x3f
cmp al, 0xdf
jbe 0x587edf
movzx edx, byte [r13 + 2]
shl r8d, 6
and edx, 0x3f
or edx, r8d
cmp al, 0xf0
jb 0x587eed
movzx eax, byte [r13 + 3]
and ecx, 7
shl ecx, 0x12
shl edx, 6
and eax, 0x3f
or eax, edx
or eax, ecx
cmp eax, 0x110000
jne 0x587efa
xor r13d, r13d
cmp rbp, 1
je 0x587f5d
mov ebp, 1
mov ebx, r12d
xor r12d, r12d
cmp r15, qword [rsp + 0x168]
jne 0x587e24
jmp 0x587f18
add r13, 2
shl ecx, 6
or ecx, r8d
mov eax, ecx
jmp 0x587f05
add r13, 3
shl ecx, 0xc
or edx, ecx
mov eax, edx
jmp 0x587efe
add r13, 4
cmp eax, 0xffff
ja 0x587f2f
xor ebx, ebx
mov r12d, eax
cmp r15, qword [rsp + 0x168]
jne 0x587e24
test r13, r13
jne 0x587df6
mov r8d, 1
sub r8, rbp
jmp 0x587e0e
lea r12d, [rax + 0xff0000]
shr r12d, 0xa
or r12d, 0xd800
and eax, 0x3ff
or eax, 0xdc00
mov ebx, eax
cmp r15, qword [rsp + 0x168]
jne 0x587e24
jmp 0x587f18
mov rax, qword [rsp + 0x160]
mov rdi, qword [rsp + 0x168]
test rax, rax
je 0x588165
mov qword [rsp + 0xf0], rax
mov qword [rsp + 0x60], rdi
lea r13, [0x00675f0a]
mov rax, r13
not rax
add rax, r13
add rax, 0x12
shr rax, 2
cmp rax, 4
mov esi, 3
cmovae rsi, rax
movabs rax, 0x3fffffffffffffff
xor edi, edi
cmp rsi, rax
setne al
je 0x5889fe
mov dil, al
add rdi, rdi
mov rax, qword [rsp + 0xe8]
mov rcx, qword [rax + 0x90]
mov qword [rsp + 0xf8], rcx
mov rcx, qword [rax + 0xa0]
mov qword [rsp + 0xe0], rcx
movzx eax, byte [rax + 0xad]
mov byte [rsp + 0x1c8], al
lea r15, [rsi + rsi + 2]
movzx eax, byte [0x006be1f0]
mov rcx, r15
mov rdx, rdi
call fcn.00417db0
test rax, rax
je 0x588a05
mov rcx, rax
inc rsi
mov word [rax], 0x63
mov qword [rsp + 0x200], rax
mov qword [rsp + 0x208], rsi
mov qword [rsp + 0x210], 1
lea r15, [0x00675f0b]
mov edi, 1
xor esi, esi
lea rbp, [0x00675f19]
lea r12, [rsp + 0x200]
jmp 0x588079
mov rcx, qword [rsp + 0x200]
mov word [rcx + rdi*2], si
inc rdi
mov qword [rsp + 0x210], rdi
mov esi, ebx
test si, si
je 0x588085
xor ebx, ebx
jmp 0x588136
cmp r15, rbp
je 0x58817d
movzx esi, byte [r15]
test sil, sil
js 0x5880a1
inc r15
xor ebx, ebx
jmp 0x588136
mov eax, esi
and eax, 0x1f
movzx r8d, byte [r15 + 1]
and r8d, 0x3f
cmp sil, 0xdf
jbe 0x5880f1
movzx edx, byte [r15 + 2]
shl r8d, 6
and edx, 0x3f
or edx, r8d
cmp sil, 0xf0
jb 0x588101
movzx esi, byte [r15 + 3]
and eax, 7
shl eax, 0x12
shl edx, 6
and esi, 0x3f
or esi, edx
or esi, eax
cmp esi, 0x110000
je 0x58817d
add r15, 4
jmp 0x58810c
add r15, 2
shl eax, 6
or eax, r8d
mov esi, eax
xor ebx, ebx
jmp 0x588136
add r15, 3
shl eax, 0xc
or edx, eax
mov esi, edx
cmp esi, 0xffff
jbe 0x58807e
lea eax, [rsi + 0xff0000]
shr eax, 0xa
or eax, 0xd800
and esi, 0x3ff
or esi, 0xdc00
mov ebx, esi
mov esi, eax
cmp rdi, qword [rsp + 0x208]
jne 0x588068
mov r8, r13
sub r8, r15
add r8, 0x12
shr r8, 2
inc r8
mov rcx, r12
mov rdx, rdi
call fcn.00560260
jmp 0x588060
mov rax, qword [rsp + 0x138]
mov qword [rax], rdi
mov qword [rax + 0x10], 2
jmp 0x5886df
mov rdi, qword [rsp + 0x210]
mov qword [rsp + 0x90], rdi
movdqu xmm0, xmmword [rsp + 0x200]
movdqa xmmword [rsp + 0x80], xmm0
cmp rdi, qword [rsp + 0x88]
jne 0x5881d0
lea rcx, [rsp + 0x80]
mov rdx, rdi
call fcn.00560110
mov r8, qword [rsp + 0x78]
mov rbp, qword [rsp + 0xf8]
mov rdi, qword [rsp + 0x90]
jmp 0x5881dd
mov r8, qword [rsp + 0x78]
mov rbp, qword [rsp + 0xf8]
mov rsi, qword [rsp + 0x80]
mov word [rsi + rdi*2], 0x22
inc rdi
mov qword [rsp + 0x90], rdi
lea rax, [r8 + r8]
xor ecx, ecx
lea r13, str.Windows_file_names_may_not_contain_____or_end_with___
mov rdx, qword [rsp + 0x58]
cmp rax, rcx
je 0x58821d
cmp word [rdx + rcx], 0x22
lea rcx, [rcx + 2]
jne 0x588208
jmp 0x588695
mov rax, qword [rsp + 0x58]
movzx eax, word [rax + r8*2 - 2]
cmp ax, 0x5c
je 0x588695
lea r15, [r8 - 1]
xor r12d, r12d
test ax, ax
mov rax, qword [rsp + 0x58]
cmove r12, rax
test r12, r12
cmove r15, r8
cmove r12, rax
mov r13, qword [rsp + 0x88]
mov rax, r13
sub rax, rdi
cmp rax, r15
jae 0x58828e
lea rcx, [rsp + 0x80]
mov rdx, rdi
mov r8, r15
call fcn.00560260
mov rdi, qword [rsp + 0x90]
mov rsi, qword [rsp + 0x80]
mov r13, qword [rsp + 0x88]
lea r8, [r15 + r15]
lea rcx, [rsi + rdi*2]
mov rdx, r12
call sub.ntdll.dll_memcpy
add rdi, r15
mov qword [rsp + 0x90], rdi
cmp rdi, r13
jne 0x5882ce
lea rcx, [rsp + 0x80]
mov rdx, r13
call fcn.00560110
mov rsi, qword [rsp + 0x80]
mov rdi, qword [rsp + 0x90]
lea rax, [rdi + 1]
mov word [rsi + rdi*2], 0x22
mov qword [rsp + 0x90], rax
cmp byte [rsp + 0x1c8], 0
je 0x5885c4
mov rax, qword [rsp + 0xe0]
shl rax, 3
lea rsi, [rax + rax*4]
lea rdi, [rsp + 0x80]
test rsi, rsi
je 0x5886eb
mov rdx, qword [rsp + 0x90]
cmp rdx, qword [rsp + 0x88]
jne 0x588331
mov rcx, rdi
call fcn.00560110
mov rdx, qword [rsp + 0x90]
mov rax, qword [rsp + 0x80]
mov word [rax + rdx*2], 0x20
inc rdx
mov qword [rsp + 0x90], rdx
mov rcx, rdi
mov rdx, rbp
mov r8b, 1
call fcn.0058b090
mov r13, rax
add rbp, 0x28
add rsi, 0xffffffffffffffd8
test rax, rax
je 0x588306
jmp 0x588695
pxor xmm0, xmm0
movdqu xmmword [rsp + 0x234], xmm0
movdqu xmmword [rsp + 0x228], xmm0
movdqu xmmword [rsp + 0x218], xmm0
movdqu xmmword [rsp + 0x208], xmm0
movdqu xmmword [rsp + 0x248], xmm0
movdqu xmmword [rsp + 0x258], xmm0
mov dword [rsp + 0x200], 0x68
test rdx, rdx
jne 0x5883c1
test rsi, rsi
jne 0x5883c1
test rbp, rbp
je 0x5883e4
mov dword [rsp + 0x23c], 0x100
mov qword [rsp + 0x250], rbp
mov qword [rsp + 0x258], rsi
mov qword [rsp + 0x260], rdx
mov qword [rsp + 0xe8], rdx
mov rcx, qword [rsp + 0x120]
lea rax, [rsp + 0x100]
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x200]
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x1f8]
mov qword [rsp + 0x38], rax
mov rax, qword [rsp + 0x1c8]
mov qword [rsp + 0x30], rax
mov dword [rsp + 0x28], r15d
mov r15, rcx
mov dword [rsp + 0x20], 1
mov rcx, qword [rsp + 0xf0]
mov rdx, r15
xor r8d, r8d
xor r9d, r9d
call sub.KERNEL32.dll_CreateProcessW
test eax, eax
je 0x588592
movups xmm0, xmmword [rsp + 0x80]
movups xmm1, xmmword [rsp + 0x90]
movups xmm2, xmmword [rsp + 0xa0]
mov rax, qword [rsp + 0x138]
movups xmmword [rax + 0x30], xmm2
movups xmmword [rax + 0x20], xmm1
movups xmmword [rax + 0x10], xmm0
movdqa xmm0, xmmword [rsp + 0x100]
movdqu xmmword [rax], xmm0
mov rcx, qword [rsp + 0xe8]
call sub.KERNEL32.dll_CloseHandle
mov rcx, rsi
call sub.KERNEL32.dll_CloseHandle
mov rcx, rbp
call sub.KERNEL32.dll_CloseHandle
lea rcx, [rsp + 0x160]
mov ebp, dword [rsp + 0x78]
call fcn.0058bce0
cmp qword [rsp + 0x1c0], 0
je 0x5884da
mov edx, 2
mov rcx, qword [rsp + 0x1d0]
call fcn.00417e40
cmp qword [rsp + 0xf8], 0
je 0x5884f2
mov edx, 2
mov rcx, rbx
call fcn.00417e40
cmp qword [rsp + 0x128], 0
je 0x58850a
mov edx, 2
mov rcx, r15
call fcn.00417e40
cmp qword [rsp + 0x60], 0
je 0x588524
mov edx, 2
mov rcx, qword [rsp + 0xf0]
call fcn.00417e40
test r14, r14
sete al
or bpl, al
cmp bpl, 1
je 0x5860a1
mov edx, 2
mov rcx, r13
call fcn.00417e40
jmp 0x5860a1
mov r13, rax
movdqu xmm6, xmmword [rsp + 0x208]
cmp qword [rsp + 0x68], 0
je 0x587727
mov edx, 1
mov rcx, qword [rsp + 0x58]
call fcn.00417e40
jmp 0x587727
lea rcx, [0x0069f46b]
lea r8, [0x00673ff0]
mov edx, 0x2b
call fcn.00464920
jmp 0x588a1f
call sub.KERNEL32.dll_GetLastError
shl rax, 0x20
or rax, 2
mov rcx, qword [rsp + 0x138]
mov qword [rcx], rax
mov qword [rcx + 0x10], 2
mov rcx, qword [rsp + 0xe8]
call sub.KERNEL32.dll_CloseHandle
jmp 0x587c55
mov rax, qword [rsp + 0xe0]
lea rax, [rax + rax*4]
lea rsi, [rax*8]
add rsi, rbp
lea rdi, [rsp + 0x80]
lea r12, str._t____________
cmp rbp, rsi
je 0x5886eb
mov rdx, qword [rsp + 0x90]
cmp rdx, qword [rsp + 0x88]
jne 0x588615
mov rcx, rdi
call fcn.00560110
mov rdx, qword [rsp + 0x90]
mov rax, qword [rsp + 0x80]
mov word [rax + rdx*2], 0x20
inc rdx
mov qword [rsp + 0x90], rdx
cmp qword [rbp], 0
je 0x58863c
mov r13, rbp
xor ebp, ebp
jmp 0x58866f
mov rbx, qword [rbp + 8]
mov r13, rbp
mov r14, qword [rbp + 0x18]
xor r15d, r15d
cmp r14, r15
setne bpl
je 0x58866f
movzx ecx, byte [rbx + r15]
mov r8d, 0x16
mov rdx, r12
call fcn.0046b1d0
inc r15
cmp rax, 1
jne 0x58864a
mov rcx, rdi
mov rdx, r13
mov r8d, ebp
mov rbp, r13
mov r14, qword [rsp + 0x68]
call fcn.0058b090
mov r13, rax
add rbp, 0x28
test rax, rax
je 0x5885ea
cmp qword [rsp + 0x88], 0
je 0x5886b2
mov rcx, qword [rsp + 0x80]
mov edx, 2
call fcn.00417e40
mov rax, qword [rsp + 0x138]
mov qword [rax], r13
mov qword [rax + 0x10], 2
cmp qword [rsp + 0x60], 0
je 0x5886df
mov edx, 2
mov rcx, qword [rsp + 0xf0]
call fcn.00417e40
xor esi, esi
mov r13, qword [rsp + 0x58]
jmp 0x5867e1
mov rdx, qword [rsp + 0x90]
cmp rdx, qword [rsp + 0x88]
jne 0x588712
lea rcx, [rsp + 0x80]
call fcn.00560110
mov rdx, qword [rsp + 0x90]
mov r15, qword [rsp + 0xe8]
mov r13, qword [rsp + 0x58]
mov rax, qword [rsp + 0x80]
mov word [rax + rdx*2], 0x22
inc rdx
mov r12, qword [rsp + 0x88]
xor ebp, ebp
jmp 0x5866ea
mov r12, qword [rsp + 0xe0]
jmp 0x586e96
call sub.KERNEL32.dll_GetLastError
shl rax, 0x20
or rax, 2
mov qword [rsp + 0x100], rax
lea rax, [rsp + 0x100]
mov qword [rsp + 0x160], rax
lea rax, [fcn.0057d810]
mov qword [rsp + 0x168], rax
lea rax, str.comparing_environment_keys_failed:
mov qword [rsp + 0x80], rax
mov qword [rsp + 0x88], 1
mov qword [rsp + 0xa0], 0
lea rax, [rsp + 0x160]
mov qword [rsp + 0x90], rax
mov qword [rsp + 0x98], 1
lea rdx, str.library_std_src_syswindowsprocess.rs
lea rcx, [rsp + 0x80]
call fcn.00463750
jmp 0x588a1f
lea rcx, [0x0069f46b]
lea r8, [0x00673350]
mov edx, 0x2b
call fcn.00464920
jmp 0x588a1f
call fcn.0043b4d0
jmp 0x588a1f
mov rcx, rbp
mov rdx, rbx
call fcn.0043b510
jmp 0x588a1f
call fcn.0043b4d0
jmp 0x588a1f
mov ecx, 1
mov rdx, rdi
call fcn.0043b510
jmp 0x588a1f
call fcn.0043b4d0
jmp 0x588a1f
mov ecx, 1
mov rdx, r13
call fcn.0043b510
jmp 0x588a1f
lea r8, str.library_std_src_syswindowsos.rs
mov ecx, 1
xor edx, edx
call fcn.004642d0
jmp 0x588a1f
lea rax, str.library_std_src_syswindowsos.rs
mov rcx, r8
mov rdx, r13
mov r8, rax
call fcn.00464560
jmp 0x588a1f
lea r8, str.library_std_src_syswindowsos.rs
mov rdx, r13
call fcn.004642d0
jmp 0x588a1f
lea rcx, str.assertion_failed:_self.height___0
lea r8, [0x00673cb8]
mov edx, 0x21
call fcn.00464920
jmp 0x588a1f
mov ecx, 1
mov rdx, r12
call fcn.0043b510
jmp 0x588a1f
lea rcx, [0x0069ec92]
lea r8, str.library_std_src_syswindowsmod.rs
mov edx, 0x28
call fcn.00464920
jmp 0x588a1f
lea rcx, [0x0069ec92]
lea r8, str.library_std_src_syswindowsmod.rs
mov edx, 0x28
call fcn.00464920
jmp 0x588a1f
call sub.KERNEL32.dll_GetLastError
shl rax, 0x20
or rax, 2
mov qword [rsp + 0x160], rax
lea rax, [rsp + 0x160]
mov qword [rsp + 0x80], rax
lea rax, [fcn.0057d810]
mov qword [rsp + 0x88], rax
lea rax, str.failure_getting_env_string_from_OS:
mov qword [rsp + 0x200], rax
mov qword [rsp + 0x208], 1
mov qword [rsp + 0x220], 0
lea rax, [rsp + 0x80]
mov qword [rsp + 0x210], rax
mov qword [rsp + 0x218], 1
lea rdx, str.library_std_src_syswindowsos.rs
lea rcx, [rsp + 0x200]
call fcn.00463750
jmp 0x588a1f
call fcn.0043b4d0
jmp 0x588a1f
lea rcx, [0x0069ec92]
lea r8, str.library_std_src_syswindowsmod.rs
mov edx, 0x28
call fcn.00464920
jmp 0x588a1f
lea rax, str.library_std_src_syswindowsmod.rs
mov rcx, r8
mov rdx, rdi
mov r8, rax
call fcn.00464560
jmp 0x588a1f
lea r8, str._rustc_d5c2e9c342b358556da91d61ed4133f6f50fc0c3librarycore_src_sliceiter.rs
call fcn.004642d0
jmp 0x588a1f
lea rax, str.library_std_src_syswindowsmod.rs
mov rcx, r8
mov rdx, rdi
mov r8, rax
call fcn.00464560
jmp 0x588a1f
lea r8, str.library_std_src_syswindowsmod.rs
mov rcx, rdi
mov rdx, rsi
call fcn.00464560
jmp 0x588a1f
call fcn.0043b4d0
jmp 0x588a1f
mov rcx, rdi
mov rdx, r15
call fcn.0043b510
jmp 0x588a1f
mov ecx, 2
mov rdx, r15
call fcn.0043b510
ud2