Function at 0x14028d970
Capabilities:
Create process on windows
Get common file path
Query environment variable

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x638
vmovdqa xmmword [rsp + 0x620], xmm6
mov qword [rsp + 0x1d0], r8
mov r15, rdx
mov qword [rsp + 0x50], rcx
movzx eax, byte [rdx + 0x68]
mov r13, qword [rdx + 0x60]
test al, al
jne 0x14028d9c1
test r13, r13
jne 0x14028d9c1
mov qword [rsp + 0x1e8], 0
xor r14d, r14d
jmp 0x14028e639
mov qword [rsp + 0x130], 0
mov qword [rsp + 0x140], 0
test al, al
mov qword [rsp + 0x80], r15
jne 0x14028dc15
call sub.KERNEL32.dll_GetEnvironmentStringsW
test rax, rax
je 0x140291033
mov qword [rsp + 0x58], r13
lea rdi, [rsp + 0x170]
lea r14, [rsp + 0x220]
lea rsi, [rsp + 0x88]
mov qword [rsp + 0x68], rax
mov r15, rax
nop dword [rax]
cmp word [r15], 0
je 0x14028dbfe
mov r13, r15
mov rcx, 0xfffffffffffffffe
xor edx, edx
nop word [rax + rax]
mov rbx, rdx
mov rax, rcx
inc rdx
add rcx, 2
cmp word [r13 + rbx*2], 0
jne 0x14028da40
lea r15, [rdx*2]
add r15, r13
cmp rbx, 1
je 0x14028da20
test rbx, rbx
je 0x140290f7e
xor ebp, ebp
nop word cs:[rax + rax]
cmp word [r13 + rbp*2 + 2], 0x3d
je 0x14028daa0
inc rbp
add rax, 0xfffffffffffffffe
jne 0x14028da80
jmp 0x14028da20
lea r8, [rbp + 1]
cmp rbp, rbx
jae 0x140290f96
mov rcx, rdi
mov rdx, r13
call fcn.1402680a0
add rbp, 2
mov r8, rbx
sub r8, rbp
jb 0x140290fb0
lea rdx, [rbp*2]
add rdx, r13
mov rcx, r14
call fcn.1402680a0
mov r13, qword [rsp + 0x170]
mov r12, qword [rsp + 0x178]
vmovdqu xmm6, xmmword [rsp + 0x180]
mov rbx, qword [rsp + 0x220]
mov rbp, qword [rsp + 0x228]
lea rax, [rsp + 0x230]
vmovups xmm0, xmmword [rax]
vmovaps xmmword [rsp + 0x150], xmm0
vpextrb eax, xmm6, 8
cmp al, 2
je 0x14028dbfe
vmovq rax, xmm6
add rax, r13
mov qword [rsp + 0x170], r13
mov qword [rsp + 0x178], rax
mov word [rsp + 0x180], 0
mov rcx, rsi
mov rdx, rdi
call fcn.1402918c0
mov qword [rsp + 0x238], r13
mov qword [rsp + 0x240], r12
vmovdqu xmmword [rsp + 0x248], xmm6
vmovups xmm0, xmmword [rsp + 0x88]
vmovaps xmmword [rsp + 0x220], xmm0
mov rax, qword [rsp + 0x98]
mov qword [rsp + 0x230], rax
mov qword [rsp + 0x170], rbx
mov qword [rsp + 0x178], rbp
vmovaps xmm0, xmmword [rsp + 0x150]
lea rax, [rsp + 0x180]
vmovups xmmword [rax], xmm0
mov rcx, rsi
lea rdx, [rsp + 0x130]
mov r8, r14
mov r9, rdi
call fcn.140291ad0
cmp byte [rsp + 0xa0], 2
je 0x14028da20
cmp qword [rsp + 0x90], 0
je 0x14028da20
mov rcx, qword [rsp + 0x88]
mov edx, 1
call fcn.140087800
jmp 0x14028da20
mov rcx, qword [rsp + 0x68]
call sub.KERNEL32.dll_FreeEnvironmentStringsW
mov r15, qword [rsp + 0x80]
mov r13, qword [rsp + 0x58]
movabs rcx, 0x3ffffffffffffffe
mov rax, qword [r15 + 0x50]
mov rbp, qword [r15 + 0x58]
xor esi, esi
test rax, rax
setne sil
cmove r13, rax
xor r15d, r15d
inc rcx
mov qword [rsp + 0xa8], rcx
jmp 0x14028dc52
xor eax, eax
test r13, r13
je 0x14028e455
test rsi, rsi
je 0x14028dcb0
test r15, r15
jne 0x14028dcb0
mov esi, 1
test rbp, rbp
je 0x14028dcba
mov rdx, rbp
and rdx, 7
je 0x14028dcbf
mov rcx, rbp
and rcx, 0xfffffffffffffff8
mov r15, rax
nop word cs:[rax + rax]
mov r15, qword [r15 + 0x3d8]
dec rdx
jne 0x14028dc90
cmp rbp, 8
jae 0x14028dcd0
jmp 0x14028dd0e
test rsi, rsi
jne 0x14028dd12
jmp 0x140290f02
mov r15, rax
jmp 0x14028dd0e
mov r15, rax
mov rcx, rbp
cmp rbp, 8
jb 0x14028dd0e
nop dword [rax + rax]
mov rax, qword [r15 + 0x3d8]
mov rax, qword [rax + 0x3d8]
mov rax, qword [rax + 0x3d8]
mov rax, qword [rax + 0x3d8]
mov rax, qword [rax + 0x3d8]
mov rax, qword [rax + 0x3d8]
mov rax, qword [rax + 0x3d8]
mov r15, qword [rax + 0x3d8]
add rcx, 0xfffffffffffffff8
jne 0x14028dcd0
xor ebp, ebp
xor eax, eax
movzx ecx, word [r15 + 0x3d2]
mov r14, r15
mov r12, rbp
cmp rbp, rcx
jb 0x14028dd58
nop word cs:[rax + rax]
mov rcx, qword [r14 + 0x160]
test rcx, rcx
je 0x1402909d2
inc rax
movzx r12d, word [r14 + 0x3d0]
mov r14, rcx
cmp r12w, word [rcx + 0x3d2]
jae 0x14028dd30
test rax, rax
je 0x14028ddf0
mov r15, qword [r14 + r12*8 + 0x3e0]
mov rcx, rax
dec rcx
je 0x14028ddde
mov rdx, rcx
and rdx, 7
je 0x14028dd95
mov rcx, rdx
nop dword [rax]
mov r15, qword [r15 + 0x3d8]
dec rcx
jne 0x14028dd80
not rdx
add rdx, rax
mov rcx, rdx
add rax, 0xfffffffffffffffe
cmp rax, 7
jb 0x14028ddde
nop
mov rax, qword [r15 + 0x3d8]
mov rax, qword [rax + 0x3d8]
mov rax, qword [rax + 0x3d8]
mov rax, qword [rax + 0x3d8]
mov rax, qword [rax + 0x3d8]
mov rax, qword [rax + 0x3d8]
mov rax, qword [rax + 0x3d8]
mov r15, qword [rax + 0x3d8]
add rcx, 0xfffffffffffffff8
jne 0x14028dda0
xor ebp, ebp
jmp 0x14028ddf8
lea rbp, [r12 + 1]
mov r15, r14
dec r13
imul rax, r12, 0x38
lea rbx, [r14 + rax]
add rbx, 0x168
shl r12, 5
cmp byte [r14 + r12 + 0x18], 2
jne 0x14028de80
mov rdi, qword [rsp + 0x130]
mov eax, 0
test rdi, rdi
je 0x14028dc52
mov r14, rbp
mov r9, qword [rbx]
mov rax, qword [rbx + 0x10]
mov rbp, qword [rsp + 0x138]
mov qword [rsp + 0x20], rax
lea rcx, [rsp + 0x88]
mov rdx, rdi
mov r8, rbp
vzeroupper
call fcn.140292e00
cmp qword [rsp + 0x88], 0
je 0x14028e061
xor eax, eax
mov rbp, r14
jmp 0x14028dc52
mov qword [rsp + 0x68], rsi
mov rsi, qword [rbx + 0x18]
mov rdi, qword [rbx + 0x28]
test rdi, rdi
mov qword [rsp + 0x60], rbp
je 0x14028debe
js 0x140290f22
movzx eax, byte [0x1406ba220]
mov edx, 1
mov rcx, rdi
vzeroupper
call fcn.140087770
test rax, rax
jne 0x14028dec3
jmp 0x140290f5a
mov eax, 1
mov qword [rsp + 0x78], rax
mov rcx, rax
mov rdx, rsi
mov r8, rdi
vzeroupper
call sub.msvcrt.dll_memcpy
movzx esi, byte [rbx + 0x30]
mov rdx, qword [rbx]
mov rbp, qword [rbx + 0x10]
mov ebx, 2
test rbp, rbp
mov qword [rsp + 0x58], r13
je 0x14028df40
cmp rbp, qword [rsp + 0xa8]
ja 0x140290f2f
mov r13, rbp
add r13, rbp
je 0x14028df40
mov qword [rsp + 0x70], rdi
mov rdi, rdx
movzx eax, byte [0x1406ba220]
mov edx, 2
mov rcx, r13
call fcn.140087770
test rax, rax
je 0x140290f6c
mov rbx, rax
mov rdx, rdi
mov rdi, qword [rsp + 0x70]
jmp 0x14028df43
xor r13d, r13d
add r14, r12
mov rcx, rbx
mov r8, r13
call sub.msvcrt.dll_memcpy
mov rax, qword [rsp + 0x78]
mov qword [rsp + 0x238], rax
mov qword [rsp + 0x240], rdi
mov qword [rsp + 0x248], rdi
mov byte [rsp + 0x250], sil
mov qword [rsp + 0x220], rbx
mov qword [rsp + 0x228], rbp
mov qword [rsp + 0x230], rbp
mov r13, qword [r14]
mov rsi, qword [r14 + 0x10]
test rsi, rsi
je 0x14028dfc1
js 0x140290f50
movzx eax, byte [0x1406ba220]
mov edx, 1
mov rcx, rsi
call fcn.140087770
mov r12, rax
test rax, rax
jne 0x14028dfc7
jmp 0x140290f3e
mov r12d, 1
mov rcx, r12
mov rdx, r13
mov r8, rsi
call sub.msvcrt.dll_memcpy
movzx eax, byte [r14 + 0x18]
mov qword [rsp + 0x170], r12
mov qword [rsp + 0x178], rsi
mov qword [rsp + 0x180], rsi
mov byte [rsp + 0x188], al
lea rcx, [rsp + 0x88]
lea rdx, [rsp + 0x130]
lea r8, [rsp + 0x220]
lea r9, [rsp + 0x170]
call fcn.140291ad0
cmp byte [rsp + 0xa0], 2
mov r13, qword [rsp + 0x58]
mov rsi, qword [rsp + 0x68]
mov rbp, qword [rsp + 0x60]
je 0x14028dc50
cmp qword [rsp + 0x90], 0
je 0x14028dc50
mov rcx, qword [rsp + 0x88]
mov edx, 1
call fcn.140087800
jmp 0x14028dc50
mov rax, qword [rsp + 0x90]
mov rdx, qword [rsp + 0x98]
mov rcx, qword [rsp + 0xa0]
mov byte [rsp + 0x208], 0
test rdx, rdx
je 0x14028e1f8
mov rax, qword [rax + rcx*8 + 0x3d8]
mov rcx, rdx
dec rcx
je 0x14028e15e
mov r8, rcx
and r8, 7
je 0x14028e0ce
mov rcx, r8
nop word [rax + rax]
movzx r9d, word [rax + 0x3d2]
mov rax, qword [rax + r9*8 + 0x3d8]
dec rcx
jne 0x14028e0b0
not r8
add r8, rdx
mov rcx, r8
add rdx, 0xfffffffffffffffe
cmp rdx, 7
jb 0x14028e15e
nop dword [rax]
movzx edx, word [rax + 0x3d2]
mov rax, qword [rax + rdx*8 + 0x3d8]
movzx edx, word [rax + 0x3d2]
mov rax, qword [rax + rdx*8 + 0x3d8]
movzx edx, word [rax + 0x3d2]
mov rax, qword [rax + rdx*8 + 0x3d8]
movzx edx, word [rax + 0x3d2]
mov rax, qword [rax + rdx*8 + 0x3d8]
movzx edx, word [rax + 0x3d2]
mov rax, qword [rax + rdx*8 + 0x3d8]
movzx edx, word [rax + 0x3d2]
mov rax, qword [rax + rdx*8 + 0x3d8]
movzx edx, word [rax + 0x3d2]
mov rax, qword [rax + rdx*8 + 0x3d8]
movzx edx, word [rax + 0x3d2]
mov rax, qword [rax + rdx*8 + 0x3d8]
add rcx, 0xfffffffffffffff8
jne 0x14028e0e0
movzx ecx, word [rax + 0x3d2]
dec rcx
mov qword [rsp + 0x150], rax
mov qword [rsp + 0x158], 0
mov qword [rsp + 0x160], rcx
lea rcx, [rsp + 0x220]
lea rdx, [rsp + 0x150]
lea r8, [rsp + 0x208]
call fcn.140292f60
vmovups ymm0, ymmword [rsp + 0x220]
vmovups ymm1, ymmword [rsp + 0x240]
vmovups ymm2, ymmword [rsp + 0x258]
vmovups ymmword [rsp + 0x1a8], ymm2
vmovups ymmword [rsp + 0x190], ymm1
vmovups ymmword [rsp + 0x170], ymm0
mov rdx, qword [rsp + 0x278]
mov rax, qword [rsp + 0x288]
movzx ecx, word [rdx + 0x3d2]
cmp rax, rcx
jae 0x14028e236
mov rcx, rdx
jmp 0x14028e269
mov qword [rsp + 0x170], rax
mov qword [rsp + 0x178], 0
mov qword [rsp + 0x180], rcx
lea rcx, [rsp + 0x220]
lea rdx, [rsp + 0x170]
lea r8, [rsp + 0x208]
call fcn.140292f60
jmp 0x14028e311
mov r8, qword [rsp + 0x280]
nop
mov rcx, qword [rdx + 0x160]
test rcx, rcx
je 0x14028e264
inc r8
movzx eax, word [rdx + 0x3d0]
mov rdx, rcx
cmp ax, word [rcx + 0x3d2]
jae 0x14028e240
jmp 0x14028e269
mov rax, r8
xor ecx, ecx
imul rdx, rax, 0x38
shl rax, 5
vmovups ymm0, ymmword [rcx + rdx + 0x168]
vmovups ymm1, ymmword [rcx + rdx + 0x180]
vmovups ymmword [rsp + 0xd8], ymm1
vmovups ymmword [rsp + 0xc0], ymm0
vmovups ymm0, ymmword [rsp + 0x170]
vmovups ymm1, ymmword [rsp + 0x188]
vmovups ymmword [rcx + rdx + 0x180], ymm1
vmovups ymmword [rcx + rdx + 0x168], ymm0
vmovups ymm0, ymmword [rcx + rax]
lea rdx, [rsp + 0xf8]
vmovups ymmword [rdx], ymm0
lea rdx, [rsp + 0x1a8]
vmovups ymm0, ymmword [rdx]
vmovups ymmword [rcx + rax], ymm0
vmovups ymm0, ymmword [rsp + 0xc0]
vmovups ymm1, ymmword [rsp + 0xe0]
vmovups ymm2, ymmword [rsp + 0xf8]
vmovups ymmword [rsp + 0x258], ymm2
vmovups ymmword [rsp + 0x240], ymm1
vmovups ymmword [rsp + 0x220], ymm0
mov qword [rsp + 0x68], rsi
mov qword [rsp + 0x58], r13
mov rax, qword [rsp + 0x220]
mov qword [rsp + 0xb0], rax
mov rax, qword [rsp + 0x228]
mov qword [rsp + 0x78], rax
mov r12, qword [rsp + 0x238]
mov rdx, qword [rsp + 0x240]
movzx r13d, byte [rsp + 0x250]
mov rax, qword [rsp + 0x258]
mov qword [rsp + 0xb8], rax
dec qword [rsp + 0x140]
mov rax, qword [rsp + 0x260]
mov qword [rsp + 0x70], rax
movzx ebx, byte [rsp + 0x270]
cmp byte [rsp + 0x208], 0
je 0x14028e3cc
mov rsi, rdx
test rbp, rbp
je 0x140290fc7
mov rax, qword [rdi + 0x3d8]
mov qword [rsp + 0x130], rax
dec rbp
mov qword [rsp + 0x138], rbp
mov qword [rax + 0x160], 0
mov edx, 8
mov rcx, rdi
vzeroupper
call fcn.140087800
mov rdx, rsi
mov eax, 0
cmp r13b, 2
mov r13, qword [rsp + 0x58]
mov rsi, qword [rsp + 0x68]
mov rbp, r14
je 0x14028dc52
test rdx, rdx
je 0x14028e3fd
mov edx, 1
mov rcx, r12
vzeroupper
call fcn.140087800
cmp qword [rsp + 0x78], 0
je 0x14028e41a
mov edx, 2
mov rcx, qword [rsp + 0xb0]
vzeroupper
call fcn.140087800
mov eax, 0
cmp bl, 2
je 0x14028dc52
mov eax, 0
cmp qword [rsp + 0x70], 0
je 0x14028dc52
mov edx, 1
mov rcx, qword [rsp + 0xb8]
vzeroupper
call fcn.140087800
xor eax, eax
jmp 0x14028dc52
mov rax, qword [rsp + 0x140]
mov qword [rsp + 0x200], rax
vmovups xmm0, xmmword [rsp + 0x130]
vmovups xmmword [rsp + 0x1f0], xmm0
mov qword [rsp + 0x1e8], 1
movzx eax, byte [0x1406ba220]
mov r12d, 4
mov ecx, 4
mov edx, 1
vzeroupper
call fcn.140087770
test rax, rax
je 0x140290fe7
mov rsi, rax
mov dword [rax], 0x48544150
add rax, 4
mov qword [rsp + 0xc0], rsi
mov qword [rsp + 0xc8], rax
mov word [rsp + 0xd0], 0
lea rcx, [rsp + 0x170]
lea rdx, [rsp + 0xc0]
call fcn.1402918c0
mov qword [rsp + 0x238], rsi
mov qword [rsp + 0x240], 4
mov qword [rsp + 0x248], 4
mov byte [rsp + 0x250], 0
vmovups xmm0, xmmword [rsp + 0x170]
vmovaps xmmword [rsp + 0x220], xmm0
mov r15, qword [rsp + 0x180]
mov qword [rsp + 0x230], r15
mov rdi, qword [rsp + 0x220]
mov r14, qword [rsp + 0x1f0]
test r14, r14
je 0x14028e5ff
mov qword [rsp + 0x58], rsi
mov r12, qword [rsp + 0x1f8]
lea rcx, [r14 + 0x168]
movzx r13d, word [r14 + 0x3d2]
imul rbx, r13, 0x38
mov rbp, 0xffffffffffffffff
nop word cs:[rax + rax]
test rbx, rbx
je 0x14028e5c0
lea rsi, [rcx + 0x38]
mov r8, qword [rcx]
mov r9d, dword [rcx + 0x10]
mov dword [rsp + 0x20], 1
mov rcx, rdi
mov edx, r15d
call sub.KERNEL32.dll_CompareStringOrdinal
inc rbp
add rbx, 0xffffffffffffffc8
mov rcx, rsi
cmp eax, 3
je 0x14028e580
cmp eax, 1
jne 0x14028e5d7
jmp 0x14028e5c3
mov rbp, r13
sub r12, 1
jb 0x14028eac0
mov r14, qword [r14 + rbp*8 + 0x3d8]
jmp 0x14028e557
cmp eax, 2
jne 0x140290e72
test r14, r14
mov r15, qword [rsp + 0x80]
je 0x14028e60c
shl rbp, 5
mov rax, qword [r14 + rbp]
mov rbx, qword [r14 + rbp + 0x10]
mov r14, rax
jmp 0x14028e60f
xor r14d, r14d
mov r15, qword [rsp + 0x80]
jmp 0x14028e614
xor r14d, r14d
mov rsi, qword [rsp + 0x58]
mov edx, 1
mov rcx, rsi
call fcn.140087800
cmp qword [rsp + 0x228], 0
je 0x14028e639
mov edx, 2
mov rcx, rdi
call fcn.140087800
mov r12, qword [r15 + 0x40]
lea rax, str.program_path_has_no_file_name
mov qword [rsp + 0x58], rax
test r12, r12
je 0x14028e6a0
mov rdx, qword [r15 + 0x30]
cmp r12, 4
jae 0x14028e661
lea rax, [0x140293470]
jmp 0x14028e689
mov eax, dword [rdx]
bswap eax
xor ecx, ecx
cmp eax, 0x5c5c3f5c
setb cl
cmp eax, 0x5c5c3f5d
adc ecx, 0xffffffff
lea rcx, [0x140293460]
lea rax, [0x140293470]
cmove rax, rcx
mov qword [rsp + 0x68], rdx
movzx esi, byte [r12 + rdx - 1]
mov ecx, esi
call rax
test al, al
je 0x14028e727
cmp r12, 4
jb 0x14028e792
mov rdx, qword [rsp + 0x68]
movzx eax, byte [r12 + rdx - 4]
lea ecx, [rax - 0x41]
cmp cl, 0x1a
setb cl
shl cl, 5
or cl, al
cmp cl, 0x2e
jne 0x14028e792
movzx eax, byte [rdx + r12 - 3]
lea ecx, [rax - 0x41]
cmp cl, 0x1a
setb cl
shl cl, 5
or cl, al
cmp cl, 0x65
jne 0x14028e792
movzx eax, byte [rdx + r12 - 2]
lea ecx, [rax - 0x41]
cmp cl, 0x1a
setb cl
shl cl, 5
or cl, al
cmp cl, 0x78
jne 0x14028e792
lea eax, [rsi - 0x41]
cmp al, 0x1a
setb al
shl al, 5
or al, sil
cmp al, 0x65
sete al
jmp 0x14028e794
xor eax, eax
mov rdx, qword [rsp + 0x68]
lea rcx, [rdx + r12]
mov qword [rsp + 0x78], rcx
xor ecx, ecx
nop word cs:[rax + rax]
cmp r12, rcx
je 0x14028e894
movzx r8d, byte [rdx + rcx]
cmp r8d, 0x5c
je 0x14028e7cd
inc rcx
cmp r8d, 0x2f
jne 0x14028e7b0
test al, al
je 0x14028e97b
lea rcx, [rsp + 0x220]
mov r8, r12
call fcn.1402664e0
mov rcx, qword [rsp + 0x220]
mov rax, qword [rsp + 0x228]
test rcx, rcx
je 0x14028ea4b
mov rdx, qword [rsp + 0x230]
mov qword [rsp + 0x220], rcx
mov qword [rsp + 0x228], rax
mov qword [rsp + 0x230], rdx
lea rcx, [rsp + 0x130]
lea rdx, [rsp + 0x220]
call fcn.140293480
jmp 0x14028f4d2
xor r8d, r8d
lea rax, str.nul_byte_found_in_provided_data
mov qword [rsp + 0x58], rax
mov rax, rdx
jmp 0x14028e8bc
xor r8d, r8d
test cx, cx
je 0x14028e6a0
mov cx, 1
test r8w, r8w
jne 0x14028e8b0
cmp rax, qword [rsp + 0x78]
je 0x14028ea97
movzx r11d, byte [rax]
test r11b, r11b
js 0x14028e8df
inc rax
jmp 0x14028e943
mov r8d, r11d
and r8d, 0x1f
movzx r10d, byte [rax + 1]
and r10d, 0x3f
cmp r11b, 0xdf
jbe 0x14028e935
movzx r9d, byte [rax + 2]
shl r10d, 6
and r9d, 0x3f
or r9d, r10d
cmp r11b, 0xf0
jb 0x14028e94e
movzx r11d, byte [rax + 3]
add rax, 4
and r8d, 7
shl r8d, 0x12
shl r9d, 6
and r11d, 0x3f
or r11d, r9d
or r11d, r8d
cmp r11d, 0xffff
jbe 0x14028e943
jmp 0x14028e965
add rax, 2
shl r8d, 6
or r8d, r10d
mov r11d, r8d
xor r8d, r8d
mov ecx, r11d
jmp 0x14028e8b3
add rax, 3
shl r8d, 0xc
or r9d, r8d
mov r11d, r9d
cmp r11d, 0xffff
jbe 0x14028e943
and r11d, 0x3ff
or r11d, 0xdc00
mov r8d, r11d
jmp 0x14028e8b3
test r12, r12
js 0x1402910c3
movzx eax, byte [0x1406ba220]
mov edx, 1
mov rcx, r12
call fcn.140087770
test rax, rax
je 0x140290fe7
mov rsi, rax
mov rcx, rax
mov rdx, qword [rsp + 0x68]
mov r8, r12
call sub.msvcrt.dll_memcpy
mov qword [rsp + 0x220], rsi
mov qword [rsp + 0x228], r12
mov qword [rsp + 0x230], r12
mov byte [rsp + 0x238], 0
lea rdx, str..exeprogram_not_found
lea rcx, [rsp + 0x220]
mov r8d, 4
call fcn.140286d60
mov rsi, qword [rsp + 0x220]
mov rbx, qword [rsp + 0x228]
mov rdi, qword [rsp + 0x230]
lea rcx, [rsp + 0xc0]
mov rdx, rsi
mov r8, rdi
call fcn.140293560
cmp qword [rsp + 0xc0], 0
je 0x14028ea64
mov rax, qword [rsp + 0xd0]
mov qword [rsp + 0x140], rax
vmovups xmm0, xmmword [rsp + 0xc0]
vmovaps xmmword [rsp + 0x130], xmm0
jmp 0x14028f4c0
mov qword [rsp + 0x138], rax
mov qword [rsp + 0x130], 0
jmp 0x14028f4d2
mov rcx, rsi
mov rdx, rdi
call fcn.14028cf30
test rax, rax
je 0x14028f44d
cmp rdx, 2
jne 0x14028ead0
movzx ecx, word [rax]
cmp ecx, 0x2e2e
jne 0x14028ead0
mov r8d, 2
xor r9d, r9d
jmp 0x14028f42d
cmp r12, 0xf
ja 0x14028eb15
xor eax, eax
mov qword [rsp + 0x70], rax
xor eax, eax
nop word cs:[rax + rax]
cmp byte [rdx + rax], 0x2e
je 0x14028eb2b
inc rax
cmp r12, rax
jne 0x14028eab0
jmp 0x14028eb35
mov r15, qword [rsp + 0x80]
xor r14d, r14d
jmp 0x14028e60f
mov r8, rdx
nop word cs:[rax + rax]
test r8, r8
je 0x14028eb21
mov rcx, r8
dec r8
cmp byte [rax + rcx - 1], 0x2e
jne 0x14028eae0
mov r10, rdx
sub r10, rcx
jb 0x1402910fe
test r8, r8
je 0x14028f427
mov r9, rax
add r9, rcx
mov rdx, r10
jmp 0x14028f42d
mov cl, 0x2e
mov r8, r12
call fcn.1400bdf10
jmp 0x14028eb30
mov r9, rax
xor eax, eax
jmp 0x14028f42d
mov eax, 1
mov qword [rsp + 0x70], rax
test r14, r14
je 0x14028eb84
add rbx, r14
mov qword [rsp + 0x170], r14
mov qword [rsp + 0x178], rbx
mov word [rsp + 0x180], 0
mov byte [rsp + 0x188], 1
lea rcx, [rsp + 0x220]
lea rdx, [rsp + 0x170]
call fcn.140286630
movzx eax, byte [rsp + 0x238]
cmp al, 2
jne 0x14028ee83
lea rcx, [rsp + 0xc0]
call fcn.140286b60
cmp byte [rsp + 0xd8], 2
jne 0x14028ebad
lea rcx, [rsp + 0xc0]
call fcn.140263f60
jmp 0x14028ec86
mov rsi, qword [rsp + 0xc0]
mov rbx, qword [rsp + 0xc8]
mov rdi, qword [rsp + 0xd0]
mov r14, qword [rsp + 0xd8]
mov rcx, rsi
mov rdx, rdi
call fcn.140289860
cmp rdi, rdx
cmovb rdx, rdi
test rax, rax
cmove rdx, rdi
mov qword [rsp + 0x220], rsi
mov qword [rsp + 0x228], rbx
mov qword [rsp + 0x230], rdx
mov qword [rsp + 0x238], r14
lea rcx, [rsp + 0x220]
mov rdx, qword [rsp + 0x68]
mov r8, r12
call fcn.1402882c0
cmp qword [rsp + 0x70], 1
je 0x14028ec30
lea rcx, [rsp + 0x220]
call fcn.14028d050
mov rsi, qword [rsp + 0x220]
mov r8, qword [rsp + 0x230]
lea rcx, [rsp + 0x170]
mov rdx, rsi
call fcn.140293560
cmp qword [rsp + 0x228], 0
je 0x14028ec68
mov edx, 1
mov rcx, rsi
call fcn.140087800
mov rax, qword [rsp + 0x170]
test rax, rax
je 0x14028ec86
mov r8, rax
vmovdqu xmm6, xmmword [rsp + 0x178]
jmp 0x14028f257
mov qword [rsp + 0x80], r15
mov qword [rsp + 0x150], 2
vxorps xmm0, xmm0, xmm0
vmovups xmmword [rsp + 0x158], xmm0
mov r8d, 0x200
mov eax, 2
mov qword [rsp + 0x60], rax
xor eax, eax
mov qword [rsp + 0x58], rax
mov r15d, 0xffffffff
xor esi, esi
xor r14d, r14d
cmp r8, 0x201
jb 0x14028ecef
jmp 0x14028ed10
jae 0x14028edd2
cmp r8, 0x201
jae 0x14028ed10
mov r13d, 0x200
lea rbp, [rsp + 0x220]
mov rbx, r8
jmp 0x14028ed6a
sub r8, r14
sub rsi, r14
cmp rsi, r8
jae 0x14028ed45
lea rcx, [rsp + 0x150]
mov rdx, r14
call fcn.140266960
mov rax, qword [rsp + 0x150]
mov qword [rsp + 0x60], rax
mov rax, qword [rsp + 0x158]
mov qword [rsp + 0x58], rax
mov rsi, qword [rsp + 0x58]
cmp rsi, r15
mov r14d, 0xffffffff
cmovb r14, rsi
mov qword [rsp + 0x160], r14
mov r13, r14
mov rbp, qword [rsp + 0x60]
mov rbx, r14
xor ecx, ecx
call sub.KERNEL32.dll_SetLastError
mov rcx, rbp
mov edx, ebx
call sub.KERNEL32.dll_GetSystemDirectoryW
mov edi, eax
test eax, eax
jne 0x14028ed8e
call sub.KERNEL32.dll_GetLastError
test eax, eax
jne 0x14028ef9b
mov r8d, edi
cmp rbx, r8
jne 0x14028ece0
call sub.KERNEL32.dll_GetLastError
cmp eax, 0x7a
jne 0x140290ff9
add rbx, rbx
mov eax, 0xffffffff
cmp rbx, rax
mov r15d, 0xffffffff
cmovae rbx, rax
mov r8, rbx
cmp r8, 0x201
jae 0x14028ed10
jmp 0x14028ecef
cmp r13, r8
jb 0x1402910e7
lea rcx, [rsp + 0xc0]
mov rdx, rbp
call fcn.1402680a0
mov rdx, qword [rsp + 0x68]
lea rcx, [rsp + 0xc0]
mov r8, r12
call fcn.1402882c0
cmp qword [rsp + 0x70], 1
je 0x14028ee15
lea rcx, [rsp + 0xc0]
call fcn.14028d050
mov rdi, qword [rsp + 0xc0]
mov r8, qword [rsp + 0xd0]
lea rcx, [rsp + 0x88]
mov rdx, rdi
call fcn.140293560
cmp qword [rsp + 0xc8], 0
je 0x14028ee4d
mov edx, 1
mov rcx, rdi
call fcn.140087800
vmovups xmm0, xmmword [rsp + 0x88]
vmovups xmmword [rsp + 0x178], xmm0
mov rax, qword [rsp + 0x98]
mov qword [rsp + 0x188], rax
mov qword [rsp + 0x170], 0
mov sil, 1
jmp 0x14028efbe
lea r14, [rsp + 0x239]
lea r13, [rsp + 0xd9]
lea rsi, [rsp + 0x220]
lea rdi, [rsp + 0x170]
lea rbp, [rsp + 0xc0]
jmp 0x14028eecb
mov rcx, rsi
mov rdx, rdi
call fcn.140286630
movzx eax, byte [rsp + 0x238]
cmp al, 2
je 0x14028eb84
mov rcx, qword [rsp + 0x220]
mov rdx, qword [rsp + 0x228]
mov r8, qword [rsp + 0x230]
test r8, r8
jne 0x14028eef9
test rdx, rdx
je 0x14028eeb0
mov edx, 1
call fcn.140087800
jmp 0x14028eeb0
mov r9d, dword [r14]
mov r10d, dword [r14 + 3]
mov dword [r13 + 3], r10d
mov dword [r13], r9d
mov qword [rsp + 0xc0], rcx
mov qword [rsp + 0xc8], rdx
mov qword [rsp + 0xd0], r8
mov byte [rsp + 0xd8], al
mov rcx, rbp
mov rdx, qword [rsp + 0x68]
mov r8, r12
call fcn.1402882c0
cmp qword [rsp + 0x70], 1
je 0x14028ef47
mov rcx, rbp
call fcn.14028d050
mov rbx, qword [rsp + 0xc0]
mov r8, qword [rsp + 0xd0]
mov rcx, rsi
mov rdx, rbx
call fcn.140293560
cmp qword [rsp + 0xc8], 0
je 0x14028ef7a
mov edx, 1
mov rcx, rbx
call fcn.140087800
mov r8, qword [rsp + 0x220]
test r8, r8
jne 0x140290286
mov rcx, rsi
mov rdx, rdi
call fcn.140286630
jmp 0x14028eebb
call sub.KERNEL32.dll_GetLastError
shl rax, 0x20
or rax, 2
mov qword [rsp + 0x178], rax
mov qword [rsp + 0x170], 1
xor esi, esi
cmp qword [rsp + 0x58], 0
je 0x14028efd5
mov edx, 2
mov rcx, qword [rsp + 0x60]
call fcn.140087800
test sil, sil
mov r15, qword [rsp + 0x80]
je 0x14028eff5
mov rax, qword [rsp + 0x178]
test rax, rax
jne 0x14028f24b
jmp 0x14028f002
lea rcx, [rsp + 0x178]
call fcn.140263f60
mov qword [rsp + 0x150], 2
vxorps xmm0, xmm0, xmm0
vmovups xmmword [rsp + 0x158], xmm0
mov r8d, 0x200
mov eax, 2
mov qword [rsp + 0x60], rax
xor eax, eax
mov qword [rsp + 0x58], rax
mov esi, 0xffffffff
xor r15d, r15d
xor ebx, ebx
cmp r8, 0x201
jb 0x14028f05f
jmp 0x14028f080
jae 0x14028f141
cmp r8, 0x201
jae 0x14028f080
mov r14d, 0x200
lea rbp, [rsp + 0x220]
mov r13, r8
jmp 0x14028f0d9
sub r8, rbx
sub r15, rbx
cmp r15, r8
jae 0x14028f0b5
lea rcx, [rsp + 0x150]
mov rdx, rbx
call fcn.140266960
mov rax, qword [rsp + 0x150]
mov qword [rsp + 0x60], rax
mov rax, qword [rsp + 0x158]
mov qword [rsp + 0x58], rax
mov r15, qword [rsp + 0x58]
cmp r15, rsi
mov ebx, 0xffffffff
cmovb rbx, r15
mov qword [rsp + 0x160], rbx
mov r14, rbx
mov rbp, qword [rsp + 0x60]
mov r13, rbx
xor ecx, ecx
call sub.KERNEL32.dll_SetLastError
mov rcx, rbp
mov edx, r13d
call sub.KERNEL32.dll_GetWindowsDirectoryW
mov edi, eax
test eax, eax
jne 0x14028f0fe
call sub.KERNEL32.dll_GetLastError
test eax, eax
jne 0x14028f1f7
mov r8d, edi
cmp r13, r8
jne 0x14028f050
call sub.KERNEL32.dll_GetLastError
cmp eax, 0x7a
jne 0x140291016
add r13, r13
mov eax, 0xffffffff
cmp r13, rax
mov esi, 0xffffffff
cmovae r13, rax
mov r8, r13
cmp r8, 0x201
jae 0x14028f080
jmp 0x14028f05f
cmp r14, r8
jb 0x14029110c
lea rcx, [rsp + 0xc0]
mov rdx, rbp
call fcn.1402680a0
mov r15, qword [rsp + 0x80]
lea rcx, [rsp + 0xc0]
mov rdx, qword [rsp + 0x68]
mov r8, r12
call fcn.1402882c0
cmp qword [rsp + 0x70], 1
je 0x14028f18c
lea rcx, [rsp + 0xc0]
call fcn.14028d050
mov rdi, qword [rsp + 0xc0]
mov r8, qword [rsp + 0xd0]
lea rcx, [rsp + 0x88]
mov rdx, rdi
call fcn.140293560
cmp qword [rsp + 0xc8], 0
je 0x14028f1c4
mov edx, 1
mov rcx, rdi
call fcn.140087800
vmovups xmm0, xmmword [rsp + 0x88]
vmovups xmmword [rsp + 0x178], xmm0
mov rax, qword [rsp + 0x98]
mov qword [rsp + 0x188], rax
mov qword [rsp + 0x170], 0
mov dil, 1
jmp 0x14028f222
call sub.KERNEL32.dll_GetLastError
shl rax, 0x20
or rax, 2
mov qword [rsp + 0x178], rax
mov qword [rsp + 0x170], 1
xor edi, edi
mov r15, qword [rsp + 0x80]
cmp qword [rsp + 0x58], 0
je 0x14028f239
mov edx, 2
mov rcx, qword [rsp + 0x60]
call fcn.140087800
test dil, dil
je 0x14028f268
mov rax, qword [rsp + 0x178]
test rax, rax
je 0x14028f275
mov r8, rax
vmovdqu xmm6, xmmword [rsp + 0x180]
vmovq qword [rsp + 0x58], xmm6
vpextrq r9, xmm6, 1
jmp 0x14028f4f8
lea rcx, [rsp + 0x178]
call fcn.140263f60
lea rdx, str.PATHRUST_MIN_STACKfatal_runtime_error:_assertion_failed:_thread_info.stack_guard.get__.is_none____thread_info.thread.get__.is_none___n
lea rcx, [rsp + 0x88]
mov r8d, 4
call fcn.1402850a0
cmp byte [rsp + 0xa0], 2
je 0x14028f416
mov rcx, qword [rsp + 0x88]
mov rax, qword [rsp + 0x90]
mov qword [rsp + 0x58], rax
mov rax, qword [rsp + 0x98]
add rax, rcx
mov qword [rsp + 0x60], rcx
mov qword [rsp + 0x170], rcx
mov qword [rsp + 0x178], rax
mov word [rsp + 0x180], 0
mov byte [rsp + 0x188], 1
lea r13, [rsp + 0x239]
lea r14, [rsp + 0xd9]
lea rdi, [rsp + 0x220]
lea rbp, [rsp + 0x170]
lea rsi, [rsp + 0xc0]
jmp 0x14028f31f
mov rax, qword [rsp + 0x220]
test rax, rax
jne 0x1402909a7
mov rcx, rdi
mov rdx, rbp
call fcn.140286630
jmp 0x14028f337
mov rcx, rdi
mov rdx, rbp
call fcn.140286630
movzx eax, byte [rsp + 0x238]
cmp al, 2
je 0x14028f3ff
mov rcx, qword [rsp + 0x220]
mov rdx, qword [rsp + 0x228]
mov r8, qword [rsp + 0x230]
test r8, r8
jne 0x14028f375
test rdx, rdx
je 0x14028f32c
mov edx, 1
call fcn.140087800
jmp 0x14028f32c
mov r9d, dword [r13]
mov r10d, dword [r13 + 3]
mov dword [r14 + 3], r10d
mov dword [r14], r9d
mov qword [rsp + 0xc0], rcx
mov qword [rsp + 0xc8], rdx
mov qword [rsp + 0xd0], r8
mov byte [rsp + 0xd8], al
mov rcx, rsi
mov rdx, qword [rsp + 0x68]
mov r8, r12
call fcn.1402882c0
cmp qword [rsp + 0x70], 1
je 0x14028f3c3
mov rcx, rsi
call fcn.14028d050
mov rbx, qword [rsp + 0xc0]
mov r8, qword [rsp + 0xd0]
mov rcx, rdi
mov rdx, rbx
call fcn.140293560
cmp qword [rsp + 0xc8], 0
je 0x14028f30e
mov edx, 1
mov rcx, rbx
call fcn.140087800
jmp 0x14028f30e
cmp qword [rsp + 0x58], 0
je 0x14028f416
mov edx, 1
mov rcx, qword [rsp + 0x60]
call fcn.140087800
lea rax, [0x1405bef88]
mov qword [rsp + 0x58], rax
jmp 0x14028e6a0
xor r9d, r9d
mov r8, rdx
test rax, rax
cmovne r9, rax
test r9, r9
je 0x14028f44d
test rax, rax
cmove r8, rdx
add r9, r8
sub r9, rsi
cmp rdi, r9
cmovae rdi, r9
lea rcx, [rsp + 0x220]
mov rdx, rsi
mov r8, rdi
call fcn.1402664e0
mov rcx, qword [rsp + 0x220]
mov rax, qword [rsp + 0x228]
test rcx, rcx
je 0x14028f4ac
mov rdx, qword [rsp + 0x230]
mov qword [rsp + 0x220], rcx
mov qword [rsp + 0x228], rax
mov qword [rsp + 0x230], rdx
lea rcx, [rsp + 0x130]
lea rdx, [rsp + 0x220]
call fcn.140293480
jmp 0x14028f4c0
mov qword [rsp + 0x138], rax
mov qword [rsp + 0x130], 0
test rbx, rbx
je 0x14028f4d2
mov edx, 1
mov rcx, rsi
call fcn.140087800
mov r8, qword [rsp + 0x130]
mov rax, qword [rsp + 0x138]
add byte [rax - 0x77], cl
and al, 0x58
vmovups xmm6, xmmword [rsp + 0x228]
jmp 0x14028f257
mov rsi, rax
vmovdqu xmm6, xmmword [rsp + 0x228]
cmp qword [rsp + 0x58], 0
je 0x1402909ca
mov edx, 1
mov rcx, qword [rsp + 0x60]
call fcn.140087800
mov r8, rsi
jmp 0x14028f257
lea rcx, str.called__Option::unwrap____on_a__None__valueinvalid_type:___expected
lea r8, str._rustc_608e9682f0a6482903de8d3332770104a0ad943clibrary_alloc_srccollections_btree_navigate.rs
mov edx, 0x2b
vzeroupper
call fcn.1400b45f0
jmp 0x14029115c
call sub.KERNEL32.dll_GetLastError
shl rax, 0x20
or rax, 2
mov qword [rsp + 0x88], rax
lea rax, [rsp + 0x88]
mov qword [rsp + 0x170], rax
lea rax, [fcn.140285bb0]
mov qword [rsp + 0x178], rax
lea rax, str.comparing_environment_keys_failed:
mov qword [rsp + 0xc0], rax
mov qword [rsp + 0xc8], 1
mov qword [rsp + 0xe0], 0
lea rax, [rsp + 0x170]
mov qword [rsp + 0xd0], rax
mov qword [rsp + 0xd8], 1
lea rdx, str.library_std_src_syswindowsprocess.rs
lea rcx, [rsp + 0xc0]
call fcn.1400b2c00
jmp 0x14029115c
lea rcx, str.called__Option::unwrap____on_a__None__valueinvalid_type:___expected
lea r8, str._rustc_608e9682f0a6482903de8d3332770104a0ad943clibrary_alloc_srccollections_btree_navigate.rs
mov edx, 0x2b
vzeroupper
call fcn.1400b45f0
jmp 0x14029115c
vzeroupper
call fcn.1400a99d0
jmp 0x14029115c
mov qword [rsp + 0x70], rdi
call fcn.1400a99d0
jmp 0x14029115c
mov ecx, 1
mov rdx, rsi
call fcn.1400a9a20
jmp 0x14029115c
call fcn.1400a99d0
jmp 0x14029115c
mov ecx, 1
mov rdx, rdi
call fcn.1400a9a20
jmp 0x14029115c
mov ecx, 2
mov rdx, r13
call fcn.1400a9a20
jmp 0x14029115c
lea r8, str.library_std_src_syswindowsos.rs
mov ecx, 1
xor edx, edx
call fcn.1400b2eb0
jmp 0x14029115c
lea rax, str.library_std_src_syswindowsos.rs
mov rcx, r8
mov rdx, rbx
mov r8, rax
call fcn.1400b3dd0
jmp 0x14029115c
lea r8, str.library_std_src_syswindowsos.rs
mov rcx, rbp
mov rdx, rbx
call fcn.1400b2eb0
jmp 0x14029115c
lea rcx, str.assertion_failed:_self.height___0
lea r8, [0x1405bc6c8]
mov edx, 0x21
vzeroupper
call fcn.1400b45f0
jmp 0x14029115c
mov ecx, 1
mov rdx, r12
call fcn.1400a9a20
jmp 0x14029115c
lea rcx, str.internal_error:_entered_unreachable_code_root_.cargo_registry_src_index.crates.io_6f17d22bba15001f_rustls_webpki_0.101.7_src_calendar.rs
lea r8, str.library_std_src_syswindowsmod.rs
mov edx, 0x28
call fcn.1400b45f0
jmp 0x14029115c
lea rcx, str.internal_error:_entered_unreachable_code_root_.cargo_registry_src_index.crates.io_6f17d22bba15001f_rustls_webpki_0.101.7_src_calendar.rs
lea r8, str.library_std_src_syswindowsmod.rs
mov edx, 0x28
call fcn.1400b45f0
jmp 0x14029115c
call sub.KERNEL32.dll_GetLastError
shl rax, 0x20
or rax, 2
mov qword [rsp + 0x88], rax
lea rax, [rsp + 0x88]
mov qword [rsp + 0x170], rax
lea rax, [fcn.140285bb0]
mov qword [rsp + 0x178], rax
lea rax, str.failure_getting_env_string_from_OS:
mov qword [rsp + 0x220], rax
mov qword [rsp + 0x228], 1
mov qword [rsp + 0x240], 0
lea rax, [rsp + 0x170]
mov qword [rsp + 0x230], rax
mov qword [rsp + 0x238], 1
lea rdx, str.library_std_src_syswindowsos.rs
lea rcx, [rsp + 0x220]
call fcn.1400b2c00
jmp 0x14029115c
call fcn.1400a99d0
jmp 0x14029115c
lea rax, str.library_std_src_syswindowsmod.rs
mov rcx, r8
mov rdx, r13
mov r8, rax
call fcn.1400b3dd0
jmp 0x14029115c
lea r8, str._rustc_608e9682f0a6482903de8d3332770104a0ad943clibrarycore_src_sliceiter.rs
call fcn.1400b2eb0
jmp 0x14029115c
lea rax, str.library_std_src_syswindowsmod.rs
mov rcx, r8
mov rdx, r14
mov r8, rax
call fcn.1400b3dd0
jmp 0x14029115c