Function at 0x140095f70
Capabilities:
Create process on windows
Get common file path
Query environment variable

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x648
movdqa xmmword [rsp + 0x630], xmm6
mov qword [rsp + 0x1d8], r8
mov r15, rdx
mov qword [rsp + 0x58], rcx
movzx eax, byte [rdx + 0x68]
mov r13, qword [rdx + 0x60]
test al, al
jne 0x140095fc1
test r13, r13
jne 0x140095fc1
mov qword [rsp + 0x1f0], 0
xor r14d, r14d
jmp 0x140096ce1
mov qword [rsp + 0x130], 0
mov qword [rsp + 0x140], 0
test al, al
mov qword [rsp + 0x88], r15
jne 0x14009621e
call sub.kernel32.dll_GetEnvironmentStringsW
test rax, rax
je 0x140099747
mov qword [rsp + 0x60], r13
lea rdi, [rsp + 0x170]
lea r14, [rsp + 0x220]
lea rsi, [rsp + 0x90]
mov qword [rsp + 0x70], rax
mov r15, rax
nop dword [rax]
cmp word [r15], 0
je 0x140096207
mov r13, r15
mov rcx, 0xfffffffffffffffe
xor edx, edx
nop word [rax + rax]
mov rbx, rdx
mov rax, rcx
inc rdx
add rcx, 2
cmp word [r13 + rbx*2], 0
jne 0x140096040
lea r15, [rdx*2]
add r15, r13
cmp rbx, 1
je 0x140096020
test rbx, rbx
je 0x140099695
xor ebp, ebp
nop word cs:[rax + rax]
cmp word [r13 + rbp*2 + 2], 0x3d
je 0x1400960a0
inc rbp
add rax, 0xfffffffffffffffe
jne 0x140096080
jmp 0x140096020
lea r8, [rbp + 1]
cmp rbp, rbx
jae 0x1400996ad
mov rcx, rdi
mov rdx, r13
call fcn.1400719d0
add rbp, 2
mov r8, rbx
sub r8, rbp
jb 0x1400996c7
lea rdx, [rbp*2]
add rdx, r13
mov rcx, r14
call fcn.1400719d0
mov r13, qword [rsp + 0x170]
mov r12, qword [rsp + 0x178]
movdqu xmm6, xmmword [rsp + 0x180]
mov rbx, qword [rsp + 0x220]
mov rbp, qword [rsp + 0x228]
lea rax, [rsp + 0x230]
movups xmm0, xmmword [rax]
movaps xmmword [rsp + 0x150], xmm0
movdqa xmmword [rsp + 0x620], xmm6
cmp byte [rsp + 0x628], 2
je 0x140096207
movq rax, xmm6
add rax, r13
mov qword [rsp + 0x170], r13
mov qword [rsp + 0x178], rax
mov word [rsp + 0x180], 0
mov rcx, rsi
mov rdx, rdi
call fcn.14009a010
mov qword [rsp + 0x238], r13
mov qword [rsp + 0x240], r12
movdqu xmmword [rsp + 0x248], xmm6
movups xmm0, xmmword [rsp + 0x90]
movaps xmmword [rsp + 0x220], xmm0
mov rax, qword [rsp + 0xa0]
mov qword [rsp + 0x230], rax
mov qword [rsp + 0x170], rbx
mov qword [rsp + 0x178], rbp
movdqa xmm0, xmmword [rsp + 0x150]
lea rax, [rsp + 0x180]
movdqu xmmword [rax], xmm0
mov rcx, rsi
lea rdx, [rsp + 0x130]
mov r8, r14
mov r9, rdi
call fcn.14009a220
cmp byte [rsp + 0xa8], 2
je 0x140096020
cmp qword [rsp + 0x98], 0
je 0x140096020
mov r8, qword [rsp + 0x90]
mov rcx, qword [0x140123378]
xor edx, edx
call sub.kernel32.dll_HeapFree
jmp 0x140096020
mov rcx, qword [rsp + 0x70]
call sub.kernel32.dll_FreeEnvironmentStringsW
mov r15, qword [rsp + 0x88]
mov r13, qword [rsp + 0x60]
movabs rcx, 0x3ffffffffffffffe
mov rax, qword [r15 + 0x50]
mov rbp, qword [r15 + 0x58]
xor esi, esi
test rax, rax
setne sil
cmove r13, rax
xor r15d, r15d
inc rcx
mov qword [rsp + 0xb0], rcx
jmp 0x140096252
xor eax, eax
test r13, r13
je 0x140096b01
test rsi, rsi
je 0x1400962b0
test r15, r15
jne 0x1400962b0
mov esi, 1
test rbp, rbp
je 0x1400962ba
mov rdx, rbp
and rdx, 7
je 0x1400962bf
mov rcx, rbp
and rcx, 0xfffffffffffffff8
mov r15, rax
nop word cs:[rax + rax]
mov r15, qword [r15 + 0x3d8]
dec rdx
jne 0x140096290
cmp rbp, 8
jae 0x1400962d0
jmp 0x14009630e
test rsi, rsi
jne 0x140096312
jmp 0x14009961f
mov r15, rax
jmp 0x14009630e
mov r15, rax
mov rcx, rbp
cmp rbp, 8
jb 0x14009630e
nop dword [rax + rax]
mov rax, qword [r15 + 0x3d8]
mov rax, qword [rax + 0x3d8]
mov rax, qword [rax + 0x3d8]
mov rax, qword [rax + 0x3d8]
mov rax, qword [rax + 0x3d8]
mov rax, qword [rax + 0x3d8]
mov rax, qword [rax + 0x3d8]
mov r15, qword [rax + 0x3d8]
add rcx, 0xfffffffffffffff8
jne 0x1400962d0
xor ebp, ebp
xor eax, eax
movzx ecx, word [r15 + 0x3d2]
mov r14, r15
mov r12, rbp
cmp rbp, rcx
jb 0x140096358
nop word cs:[rax + rax]
mov rcx, qword [r14 + 0x160]
test rcx, rcx
je 0x1400990e0
inc rax
movzx r12d, word [r14 + 0x3d0]
mov r14, rcx
cmp r12w, word [rcx + 0x3d2]
jae 0x140096330
test rax, rax
je 0x1400963f0
mov r15, qword [r14 + r12*8 + 0x3e0]
mov rcx, rax
dec rcx
je 0x1400963de
mov rdx, rcx
and rdx, 7
je 0x140096395
mov rcx, rdx
nop dword [rax]
mov r15, qword [r15 + 0x3d8]
dec rcx
jne 0x140096380
not rdx
add rdx, rax
mov rcx, rdx
add rax, 0xfffffffffffffffe
cmp rax, 7
jb 0x1400963de
nop
mov rax, qword [r15 + 0x3d8]
mov rax, qword [rax + 0x3d8]
mov rax, qword [rax + 0x3d8]
mov rax, qword [rax + 0x3d8]
mov rax, qword [rax + 0x3d8]
mov rax, qword [rax + 0x3d8]
mov rax, qword [rax + 0x3d8]
mov r15, qword [rax + 0x3d8]
add rcx, 0xfffffffffffffff8
jne 0x1400963a0
xor ebp, ebp
jmp 0x1400963f8
lea rbp, [r12 + 1]
mov r15, r14
dec r13
imul rax, r12, 0x38
lea rbx, [r14 + rax]
add rbx, 0x168
shl r12, 5
cmp byte [r14 + r12 + 0x18], 2
jne 0x140096470
mov rdi, qword [rsp + 0x130]
mov eax, 0
test rdi, rdi
je 0x140096252
mov r14, rbp
mov r9, qword [rbx]
mov rax, qword [rbx + 0x10]
mov rbp, qword [rsp + 0x138]
mov qword [rsp + 0x20], rax
lea rcx, [rsp + 0x90]
mov rdx, rdi
mov r8, rbp
call fcn.14009b690
cmp qword [rsp + 0x90], 0
je 0x140096658
xor eax, eax
mov rbp, r14
jmp 0x140096252
mov qword [rsp + 0x70], rsi
mov rsi, qword [rbx + 0x18]
mov rdi, qword [rbx + 0x28]
test rdi, rdi
mov qword [rsp + 0x68], rbp
je 0x1400964ab
js 0x14009963c
movzx eax, byte [0x140123410]
mov edx, 1
mov rcx, rdi
call fcn.140007180
test rax, rax
jne 0x1400964b0
jmp 0x140099671
mov eax, 1
mov qword [rsp + 0x80], rax
mov rcx, rax
mov rdx, rsi
mov r8, rdi
call sub.msvcrt.dll_memcpy
movzx esi, byte [rbx + 0x30]
mov rdx, qword [rbx]
mov rbp, qword [rbx + 0x10]
mov ebx, 2
test rbp, rbp
mov qword [rsp + 0x60], r13
je 0x140096530
cmp rbp, qword [rsp + 0xb0]
ja 0x140099646
mov r13, rbp
add r13, rbp
je 0x140096530
mov qword [rsp + 0x78], rdi
mov rdi, rdx
movzx eax, byte [0x140123410]
mov edx, 2
mov rcx, r13
call fcn.140007180
test rax, rax
je 0x140099683
mov rbx, rax
mov rdx, rdi
mov rdi, qword [rsp + 0x78]
jmp 0x140096533
xor r13d, r13d
add r14, r12
mov rcx, rbx
mov r8, r13
call sub.msvcrt.dll_memcpy
mov rax, qword [rsp + 0x80]
mov qword [rsp + 0x238], rax
mov qword [rsp + 0x240], rdi
mov qword [rsp + 0x248], rdi
mov byte [rsp + 0x250], sil
mov qword [rsp + 0x220], rbx
mov qword [rsp + 0x228], rbp
mov qword [rsp + 0x230], rbp
mov r13, qword [r14]
mov rsi, qword [r14 + 0x10]
test rsi, rsi
je 0x1400965b4
js 0x140099667
movzx eax, byte [0x140123410]
mov edx, 1
mov rcx, rsi
call fcn.140007180
mov r12, rax
test rax, rax
jne 0x1400965ba
jmp 0x140099655
mov r12d, 1
mov rcx, r12
mov rdx, r13
mov r8, rsi
call sub.msvcrt.dll_memcpy
movzx eax, byte [r14 + 0x18]
mov qword [rsp + 0x170], r12
mov qword [rsp + 0x178], rsi
mov qword [rsp + 0x180], rsi
mov byte [rsp + 0x188], al
lea rcx, [rsp + 0x90]
lea rdx, [rsp + 0x130]
lea r8, [rsp + 0x220]
lea r9, [rsp + 0x170]
call fcn.14009a220
cmp byte [rsp + 0xa8], 2
mov r13, qword [rsp + 0x60]
mov rsi, qword [rsp + 0x70]
mov rbp, qword [rsp + 0x68]
je 0x140096250
cmp qword [rsp + 0x98], 0
je 0x140096250
mov r8, qword [rsp + 0x90]
mov rcx, qword [0x140123378]
xor edx, edx
call sub.kernel32.dll_HeapFree
jmp 0x140096250
mov rax, qword [rsp + 0x98]
mov rdx, qword [rsp + 0xa0]
mov rcx, qword [rsp + 0xa8]
mov byte [rsp + 0x210], 0
test rdx, rdx
je 0x140096824
mov rax, qword [rax + rcx*8 + 0x3d8]
mov rcx, rdx
dec rcx
je 0x14009675e
mov r8, rcx
and r8, 7
je 0x1400966ce
mov rcx, r8
nop word cs:[rax + rax]
movzx r9d, word [rax + 0x3d2]
mov rax, qword [rax + r9*8 + 0x3d8]
dec rcx
jne 0x1400966b0
not r8
add r8, rdx
mov rcx, r8
add rdx, 0xfffffffffffffffe
cmp rdx, 7
jb 0x14009675e
nop dword [rax]
movzx edx, word [rax + 0x3d2]
mov rax, qword [rax + rdx*8 + 0x3d8]
movzx edx, word [rax + 0x3d2]
mov rax, qword [rax + rdx*8 + 0x3d8]
movzx edx, word [rax + 0x3d2]
mov rax, qword [rax + rdx*8 + 0x3d8]
movzx edx, word [rax + 0x3d2]
mov rax, qword [rax + rdx*8 + 0x3d8]
movzx edx, word [rax + 0x3d2]
mov rax, qword [rax + rdx*8 + 0x3d8]
movzx edx, word [rax + 0x3d2]
mov rax, qword [rax + rdx*8 + 0x3d8]
movzx edx, word [rax + 0x3d2]
mov rax, qword [rax + rdx*8 + 0x3d8]
movzx edx, word [rax + 0x3d2]
mov rax, qword [rax + rdx*8 + 0x3d8]
add rcx, 0xfffffffffffffff8
jne 0x1400966e0
movzx ecx, word [rax + 0x3d2]
dec rcx
mov qword [rsp + 0x150], rax
mov qword [rsp + 0x158], 0
mov qword [rsp + 0x160], rcx
lea rcx, [rsp + 0x220]
lea rdx, [rsp + 0x150]
lea r8, [rsp + 0x210]
call fcn.14009b7f0
mov rax, qword [rsp + 0x270]
mov qword [rsp + 0x1c0], rax
movups xmm0, xmmword [rsp + 0x260]
movaps xmmword [rsp + 0x1b0], xmm0
movdqu xmm0, xmmword [rsp + 0x220]
movups xmm1, xmmword [rsp + 0x230]
movups xmm2, xmmword [rsp + 0x240]
movups xmm3, xmmword [rsp + 0x250]
movaps xmmword [rsp + 0x1a0], xmm3
movaps xmmword [rsp + 0x190], xmm2
movaps xmmword [rsp + 0x180], xmm1
movdqa xmmword [rsp + 0x170], xmm0
mov rdx, qword [rsp + 0x278]
mov rax, qword [rsp + 0x288]
movzx ecx, word [rdx + 0x3d2]
cmp rax, rcx
jae 0x140096862
mov rcx, rdx
jmp 0x140096899
mov qword [rsp + 0x170], rax
mov qword [rsp + 0x178], 0
mov qword [rsp + 0x180], rcx
lea rcx, [rsp + 0x220]
lea rdx, [rsp + 0x170]
lea r8, [rsp + 0x210]
call fcn.14009b7f0
jmp 0x1400969b3
mov r8, qword [rsp + 0x280]
nop word [rax + rax]
mov rcx, qword [rdx + 0x160]
test rcx, rcx
je 0x140096894
inc r8
movzx eax, word [rdx + 0x3d0]
mov rdx, rcx
cmp ax, word [rcx + 0x3d2]
jae 0x140096870
jmp 0x140096899
mov rax, r8
xor ecx, ecx
imul rdx, rax, 0x38
shl rax, 5
mov r8, qword [rcx + rdx + 0x198]
mov qword [rsp + 0xf0], r8
movups xmm0, xmmword [rcx + rdx + 0x168]
movups xmm1, xmmword [rcx + rdx + 0x178]
movups xmm2, xmmword [rcx + rdx + 0x188]
movaps xmmword [rsp + 0xe0], xmm2
movaps xmmword [rsp + 0xd0], xmm1
movaps xmmword [rsp + 0xc0], xmm0
mov r8, qword [rsp + 0x1a0]
mov qword [rcx + rdx + 0x198], r8
movaps xmm0, xmmword [rsp + 0x170]
movaps xmm1, xmmword [rsp + 0x180]
movaps xmm2, xmmword [rsp + 0x190]
movups xmmword [rcx + rdx + 0x188], xmm2
movups xmmword [rcx + rdx + 0x178], xmm1
movups xmmword [rcx + rdx + 0x168], xmm0
movups xmm0, xmmword [rcx + rax]
movups xmm1, xmmword [rcx + rax + 0x10]
lea rdx, [rsp + 0xf8]
movups xmmword [rdx + 0x10], xmm1
movups xmmword [rdx], xmm0
lea rdx, [rsp + 0x1a8]
movups xmm0, xmmword [rdx]
movups xmm1, xmmword [rdx + 0x10]
movups xmmword [rcx + rax], xmm0
movups xmmword [rcx + rax + 0x10], xmm1
mov rax, qword [rsp + 0x110]
mov qword [rsp + 0x270], rax
movaps xmm0, xmmword [rsp + 0x100]
movaps xmmword [rsp + 0x260], xmm0
movdqa xmm0, xmmword [rsp + 0xc0]
movaps xmm1, xmmword [rsp + 0xd0]
movaps xmm2, xmmword [rsp + 0xe0]
movaps xmm3, xmmword [rsp + 0xf0]
movaps xmmword [rsp + 0x250], xmm3
movaps xmmword [rsp + 0x240], xmm2
movaps xmmword [rsp + 0x230], xmm1
movdqa xmmword [rsp + 0x220], xmm0
mov qword [rsp + 0x70], rsi
mov qword [rsp + 0x60], r13
mov rax, qword [rsp + 0x220]
mov qword [rsp + 0xb8], rax
mov rax, qword [rsp + 0x228]
mov qword [rsp + 0x80], rax
mov r12, qword [rsp + 0x238]
mov rcx, qword [rsp + 0x240]
movzx r13d, byte [rsp + 0x250]
mov rax, qword [rsp + 0x258]
mov qword [rsp + 0x128], rax
dec qword [rsp + 0x140]
mov rax, qword [rsp + 0x260]
mov qword [rsp + 0x78], rax
movzx ebx, byte [rsp + 0x270]
cmp byte [rsp + 0x210], 0
je 0x140096a72
mov rsi, rcx
test rbp, rbp
je 0x1400996de
mov rax, qword [rdi + 0x3d8]
mov qword [rsp + 0x130], rax
dec rbp
mov qword [rsp + 0x138], rbp
mov qword [rax + 0x160], 0
mov rcx, qword [0x140123378]
xor edx, edx
mov r8, rdi
call sub.kernel32.dll_HeapFree
mov rcx, rsi
mov eax, 0
cmp r13b, 2
mov r13, qword [rsp + 0x60]
mov rsi, qword [rsp + 0x70]
mov rbp, r14
je 0x140096252
test rcx, rcx
je 0x140096aa4
mov rcx, qword [0x140123378]
xor edx, edx
mov r8, r12
call sub.kernel32.dll_HeapFree
cmp qword [rsp + 0x80], 0
je 0x140096ac5
mov rcx, qword [0x140123378]
xor edx, edx
mov r8, qword [rsp + 0xb8]
call sub.kernel32.dll_HeapFree
mov eax, 0
cmp bl, 2
je 0x140096252
mov eax, 0
cmp qword [rsp + 0x78], 0
je 0x140096252
mov rcx, qword [0x140123378]
xor edx, edx
mov r8, qword [rsp + 0x128]
call sub.kernel32.dll_HeapFree
xor eax, eax
jmp 0x140096252
mov rax, qword [rsp + 0x140]
mov qword [rsp + 0x208], rax
movdqu xmm0, xmmword [rsp + 0x130]
movdqu xmmword [rsp + 0x1f8], xmm0
mov qword [rsp + 0x1f0], 1
movzx eax, byte [0x140123410]
mov r12d, 4
mov ecx, 4
mov edx, 1
call fcn.140007180
test rax, rax
je 0x1400996fb
mov rsi, rax
mov dword [rax], 0x48544150
add rax, 4
mov qword [rsp + 0xc0], rsi
mov qword [rsp + 0xc8], rax
mov word [rsp + 0xd0], 0
lea rcx, [rsp + 0x170]
lea rdx, [rsp + 0xc0]
call fcn.14009a010
mov qword [rsp + 0x238], rsi
mov qword [rsp + 0x240], 4
mov qword [rsp + 0x248], 4
mov byte [rsp + 0x250], 0
movdqu xmm0, xmmword [rsp + 0x170]
movdqa xmmword [rsp + 0x220], xmm0
mov r15, qword [rsp + 0x180]
mov qword [rsp + 0x230], r15
mov rdi, qword [rsp + 0x220]
mov r14, qword [rsp + 0x1f8]
test r14, r14
je 0x140096c9f
mov qword [rsp + 0x60], rsi
mov r12, qword [rsp + 0x200]
lea rcx, [r14 + 0x168]
movzx r13d, word [r14 + 0x3d2]
imul rbx, r13, 0x38
mov rbp, 0xffffffffffffffff
nop word [rax + rax]
test rbx, rbx
je 0x140096c60
lea rsi, [rcx + 0x38]
mov r8, qword [rcx]
mov r9d, dword [rcx + 0x10]
mov dword [rsp + 0x20], 1
mov rcx, rdi
mov edx, r15d
call sub.kernel32.dll_CompareStringOrdinal
inc rbp
add rbx, 0xffffffffffffffc8
mov rcx, rsi
cmp eax, 3
je 0x140096c20
cmp eax, 1
jne 0x140096c77
jmp 0x140096c63
mov rbp, r13
sub r12, 1
jb 0x140097160
mov r14, qword [r14 + rbp*8 + 0x3d8]
jmp 0x140096c00
cmp eax, 2
jne 0x14009958f
test r14, r14
mov r15, qword [rsp + 0x88]
je 0x140096cac
shl rbp, 5
mov rax, qword [r14 + rbp]
mov rbx, qword [r14 + rbp + 0x10]
mov r14, rax
jmp 0x140096caf
xor r14d, r14d
mov r15, qword [rsp + 0x88]
jmp 0x140096cb4
xor r14d, r14d
mov rsi, qword [rsp + 0x60]
mov rcx, qword [0x140123378]
xor edx, edx
mov r8, rsi
call sub.kernel32.dll_HeapFree
cmp qword [rsp + 0x228], 0
je 0x140096ce1
mov rcx, qword [0x140123378]
xor edx, edx
mov r8, rdi
call sub.kernel32.dll_HeapFree
mov r12, qword [r15 + 0x40]
lea rax, str.program_path_has_no_file_name
mov qword [rsp + 0x60], rax
test r12, r12
je 0x140096d48
mov rdx, qword [r15 + 0x30]
cmp r12, 4
jae 0x140096d09
lea rax, [0x14009bd40]
jmp 0x140096d31
mov eax, dword [rdx]
bswap eax
xor ecx, ecx
cmp eax, 0x5c5c3f5c
setb cl
cmp eax, 0x5c5c3f5d
adc ecx, 0xffffffff
lea rcx, [0x14009bd30]
lea rax, [0x14009bd40]
cmove rax, rcx
mov qword [rsp + 0x70], rdx
movzx esi, byte [r12 + rdx - 1]
mov ecx, esi
call rax
test al, al
je 0x140096dcf
mov rax, qword [rsp + 0x58]
mov rcx, qword [rsp + 0x60]
mov qword [rax], rcx
mov qword [rax + 0x10], 2
cmp r12, 4
jb 0x140096e3a
mov rdx, qword [rsp + 0x70]
movzx eax, byte [r12 + rdx - 4]
lea ecx, [rax - 0x41]
cmp cl, 0x1a
setb cl
shl cl, 5
or cl, al
cmp cl, 0x2e
jne 0x140096e3a
movzx eax, byte [rdx + r12 - 3]
lea ecx, [rax - 0x41]
cmp cl, 0x1a
setb cl
shl cl, 5
or cl, al
cmp cl, 0x65
jne 0x140096e3a
movzx eax, byte [rdx + r12 - 2]
lea ecx, [rax - 0x41]
cmp cl, 0x1a
setb cl
shl cl, 5
or cl, al
cmp cl, 0x78
jne 0x140096e3a
lea eax, [rsi - 0x41]
cmp al, 0x1a
setb al
shl al, 5
or al, sil
cmp al, 0x65
sete al
jmp 0x140096e3c
xor eax, eax
mov rdx, qword [rsp + 0x70]
lea rcx, [rdx + r12]
mov qword [rsp + 0x80], rcx
xor ecx, ecx
nop
cmp r12, rcx
je 0x140096f33
movzx r8d, byte [rdx + rcx]
cmp r8d, 0x5c
je 0x140096e6d
inc rcx
cmp r8d, 0x2f
jne 0x140096e50
test al, al
je 0x14009701e
lea rcx, [rsp + 0x220]
mov r8, r12
call fcn.14006f8c0
mov rcx, qword [rsp + 0x220]
mov rax, qword [rsp + 0x228]
test rcx, rcx
je 0x1400970ee
mov rdx, qword [rsp + 0x230]
mov qword [rsp + 0x220], rcx
mov qword [rsp + 0x228], rax
mov qword [rsp + 0x230], rdx
lea rcx, [rsp + 0x130]
lea rdx, [rsp + 0x220]
call fcn.14009bd50
jmp 0x140097b82
xor r8d, r8d
lea rax, str.nul_byte_found_in_provided_data
mov qword [rsp + 0x60], rax
mov rax, rdx
jmp 0x140096f5c
xor r8d, r8d
test cx, cx
je 0x140096d48
mov cx, 1
test r8w, r8w
jne 0x140096f50
cmp rax, qword [rsp + 0x80]
je 0x14009713a
movzx r11d, byte [rax]
test r11b, r11b
js 0x140096f82
inc rax
jmp 0x140096fe6
mov r8d, r11d
and r8d, 0x1f
movzx r10d, byte [rax + 1]
and r10d, 0x3f
cmp r11b, 0xdf
jbe 0x140096fd8
movzx r9d, byte [rax + 2]
shl r10d, 6
and r9d, 0x3f
or r9d, r10d
cmp r11b, 0xf0
jb 0x140096ff1
movzx r11d, byte [rax + 3]
add rax, 4
and r8d, 7
shl r8d, 0x12
shl r9d, 6
and r11d, 0x3f
or r11d, r9d
or r11d, r8d
cmp r11d, 0xffff
jbe 0x140096fe6
jmp 0x140097008
add rax, 2
shl r8d, 6
or r8d, r10d
mov r11d, r8d
xor r8d, r8d
mov ecx, r11d
jmp 0x140096f53
add rax, 3
shl r8d, 0xc
or r9d, r8d
mov r11d, r9d
cmp r11d, 0xffff
jbe 0x140096fe6
and r11d, 0x3ff
or r11d, 0xdc00
mov r8d, r11d
jmp 0x140096f53
test r12, r12
js 0x1400997d7
movzx eax, byte [0x140123410]
mov edx, 1
mov rcx, r12
call fcn.140007180
test rax, rax
je 0x1400996fb
mov rsi, rax
mov rcx, rax
mov rdx, qword [rsp + 0x70]
mov r8, r12
call sub.msvcrt.dll_memcpy
mov qword [rsp + 0x220], rsi
mov qword [rsp + 0x228], r12
mov qword [rsp + 0x230], r12
mov byte [rsp + 0x238], 0
lea rdx, str..exeprogram_not_found
lea rcx, [rsp + 0x220]
mov r8d, 4
call fcn.140090120
mov rsi, qword [rsp + 0x220]
mov rbx, qword [rsp + 0x228]
mov rdi, qword [rsp + 0x230]
lea rcx, [rsp + 0xc0]
mov rdx, rsi
mov r8, rdi
call fcn.14009be20
cmp qword [rsp + 0xc0], 0
je 0x140097107
mov rax, qword [rsp + 0xd0]
mov qword [rsp + 0x140], rax
movdqu xmm0, xmmword [rsp + 0xc0]
movdqa xmmword [rsp + 0x130], xmm0
jmp 0x140097b6c
mov qword [rsp + 0x138], rax
mov qword [rsp + 0x130], 0
jmp 0x140097b82
mov rcx, rsi
mov rdx, rdi
call fcn.140095790
test rax, rax
je 0x140097af9
cmp rdx, 2
jne 0x140097170
movzx ecx, word [rax]
cmp ecx, 0x2e2e
jne 0x140097170
mov r8d, 2
xor r9d, r9d
jmp 0x140097ad9
cmp r12, 0xf
ja 0x1400971b5
xor eax, eax
mov qword [rsp + 0x78], rax
xor eax, eax
nop dword [rax]
cmp byte [rdx + rax], 0x2e
je 0x1400971cb
inc rax
cmp r12, rax
jne 0x140097150
jmp 0x1400971d5
mov r15, qword [rsp + 0x88]
xor r14d, r14d
jmp 0x140096caf
mov r8, rdx
nop word cs:[rax + rax]
test r8, r8
je 0x1400971c1
mov rcx, r8
dec r8
cmp byte [rax + rcx - 1], 0x2e
jne 0x140097180
mov r10, rdx
sub r10, rcx
jb 0x140099812
test r8, r8
je 0x140097ad3
mov r9, rax
add r9, rcx
mov rdx, r10
jmp 0x140097ad9
mov cl, 0x2e
mov r8, r12
call fcn.140037230
jmp 0x1400971d0
mov r9, rax
xor eax, eax
jmp 0x140097ad9
mov eax, 1
mov qword [rsp + 0x78], rax
test r14, r14
je 0x140097224
add rbx, r14
mov qword [rsp + 0x170], r14
mov qword [rsp + 0x178], rbx
mov word [rsp + 0x180], 0
mov byte [rsp + 0x188], 1
lea rcx, [rsp + 0x220]
lea rdx, [rsp + 0x170]
call fcn.14008fcd0
movzx eax, byte [rsp + 0x238]
cmp al, 2
jne 0x140097524
lea rcx, [rsp + 0xc0]
call fcn.14008ff30
cmp byte [rsp + 0xd8], 2
jne 0x14009724d
lea rcx, [rsp + 0xc0]
call fcn.14006d1c0
jmp 0x140097327
mov rsi, qword [rsp + 0xc0]
mov rbx, qword [rsp + 0xc8]
mov rdi, qword [rsp + 0xd0]
mov r14, qword [rsp + 0xd8]
mov rcx, rsi
mov rdx, rdi
call fcn.1400922c0
cmp rdi, rdx
cmovb rdx, rdi
test rax, rax
cmove rdx, rdi
mov qword [rsp + 0x220], rsi
mov qword [rsp + 0x228], rbx
mov qword [rsp + 0x230], rdx
mov qword [rsp + 0x238], r14
lea rcx, [rsp + 0x220]
mov rdx, qword [rsp + 0x70]
mov r8, r12
call fcn.140091270
cmp qword [rsp + 0x78], 1
je 0x1400972d0
lea rcx, [rsp + 0x220]
call fcn.1400958c0
mov rsi, qword [rsp + 0x220]
mov r8, qword [rsp + 0x230]
lea rcx, [rsp + 0x170]
mov rdx, rsi
call fcn.14009be20
cmp qword [rsp + 0x228], 0
je 0x140097309
mov r8d, 1
mov rcx, rsi
call fcn.140007210
mov rax, qword [rsp + 0x170]
test rax, rax
je 0x140097327
mov r8, rax
movdqu xmm6, xmmword [rsp + 0x178]
jmp 0x1400978f9
mov qword [rsp + 0x88], r15
mov qword [rsp + 0x150], 2
pxor xmm0, xmm0
movdqu xmmword [rsp + 0x158], xmm0
mov r8d, 0x200
mov eax, 2
mov qword [rsp + 0x68], rax
xor eax, eax
mov qword [rsp + 0x60], rax
mov r15d, 0xffffffff
xor esi, esi
xor r14d, r14d
cmp r8, 0x201
jb 0x14009738f
jmp 0x1400973b0
jae 0x140097472
cmp r8, 0x201
jae 0x1400973b0
mov r13d, 0x200
lea rbp, [rsp + 0x220]
mov rbx, r8
jmp 0x14009740a
sub r8, r14
sub rsi, r14
cmp rsi, r8
jae 0x1400973e5
lea rcx, [rsp + 0x150]
mov rdx, r14
call fcn.14006fdc0
mov rax, qword [rsp + 0x150]
mov qword [rsp + 0x68], rax
mov rax, qword [rsp + 0x158]
mov qword [rsp + 0x60], rax
mov rsi, qword [rsp + 0x60]
cmp rsi, r15
mov r14d, 0xffffffff
cmovb r14, rsi
mov qword [rsp + 0x160], r14
mov r13, r14
mov rbp, qword [rsp + 0x68]
mov rbx, r14
xor ecx, ecx
call sub.kernel32.dll_SetLastError
mov rcx, rbp
mov edx, ebx
call sub.kernel32.dll_GetSystemDirectoryW
mov edi, eax
test eax, eax
jne 0x14009742e
call sub.kernel32.dll_GetLastError
test eax, eax
jne 0x140097640
mov r8d, edi
cmp rbx, r8
jne 0x140097380
call sub.kernel32.dll_GetLastError
cmp eax, 0x7a
jne 0x14009970d
add rbx, rbx
mov eax, 0xffffffff
cmp rbx, rax
mov r15d, 0xffffffff
cmovae rbx, rax
mov r8, rbx
cmp r8, 0x201
jae 0x1400973b0
jmp 0x14009738f
cmp r13, r8
jb 0x1400997fb
lea rcx, [rsp + 0xc0]
mov rdx, rbp
call fcn.1400719d0
mov rdx, qword [rsp + 0x70]
lea rcx, [rsp + 0xc0]
mov r8, r12
call fcn.140091270
cmp qword [rsp + 0x78], 1
je 0x1400974b5
lea rcx, [rsp + 0xc0]
call fcn.1400958c0
mov rdi, qword [rsp + 0xc0]
mov r8, qword [rsp + 0xd0]
lea rcx, [rsp + 0x90]
mov rdx, rdi
call fcn.14009be20
cmp qword [rsp + 0xc8], 0
je 0x1400974ee
mov r8d, 1
mov rcx, rdi
call fcn.140007210
movdqu xmm0, xmmword [rsp + 0x90]
movdqu xmmword [rsp + 0x178], xmm0
mov rax, qword [rsp + 0xa0]
mov qword [rsp + 0x188], rax
mov qword [rsp + 0x170], 0
mov sil, 1
jmp 0x140097663
lea r14, [rsp + 0x239]
lea r13, [rsp + 0xd9]
lea rsi, [rsp + 0x220]
lea rdi, [rsp + 0x170]
lea rbp, [rsp + 0xc0]
jmp 0x14009756b
mov rcx, rsi
mov rdx, rdi
call fcn.14008fcd0
movzx eax, byte [rsp + 0x238]
cmp al, 2
je 0x140097224
mov r8, qword [rsp + 0x220]
mov rcx, qword [rsp + 0x228]
mov rdx, qword [rsp + 0x230]
test rdx, rdx
jne 0x14009759d
test rcx, rcx
je 0x140097550
mov rcx, qword [0x140123378]
xor edx, edx
call sub.kernel32.dll_HeapFree
jmp 0x140097550
mov r9d, dword [r14]
mov r10d, dword [r14 + 3]
mov dword [r13 + 3], r10d
mov dword [r13], r9d
mov qword [rsp + 0xc0], r8
mov qword [rsp + 0xc8], rcx
mov qword [rsp + 0xd0], rdx
mov byte [rsp + 0xd8], al
mov rcx, rbp
mov rdx, qword [rsp + 0x70]
mov r8, r12
call fcn.140091270
cmp qword [rsp + 0x78], 1
je 0x1400975eb
mov rcx, rbp
call fcn.1400958c0
mov rbx, qword [rsp + 0xc0]
mov r8, qword [rsp + 0xd0]
mov rcx, rsi
mov rdx, rbx
call fcn.14009be20
cmp qword [rsp + 0xc8], 0
je 0x14009761f
mov r8d, 1
mov rcx, rbx
call fcn.140007210
mov r8, qword [rsp + 0x220]
test r8, r8
jne 0x14009894e
mov rcx, rsi
mov rdx, rdi
call fcn.14008fcd0
jmp 0x14009755b
call sub.kernel32.dll_GetLastError
shl rax, 0x20
or rax, 2
mov qword [rsp + 0x178], rax
mov qword [rsp + 0x170], 1
xor esi, esi
cmp qword [rsp + 0x60], 0
je 0x14009767b
mov r8d, 2
mov rcx, qword [rsp + 0x68]
call fcn.140007210
test sil, sil
mov r15, qword [rsp + 0x88]
je 0x14009769b
mov rax, qword [rsp + 0x178]
test rax, rax
jne 0x1400978ed
jmp 0x1400976a8
lea rcx, [rsp + 0x178]
call fcn.14006d1c0
mov qword [rsp + 0x150], 2
pxor xmm0, xmm0
movdqu xmmword [rsp + 0x158], xmm0
mov r8d, 0x200
mov eax, 2
mov qword [rsp + 0x68], rax
xor eax, eax
mov qword [rsp + 0x60], rax
mov esi, 0xffffffff
xor r15d, r15d
xor ebx, ebx
cmp r8, 0x201
jb 0x1400976ff
jmp 0x140097720
jae 0x1400977e1
cmp r8, 0x201
jae 0x140097720
mov r14d, 0x200
lea rbp, [rsp + 0x220]
mov r13, r8
jmp 0x140097779
sub r8, rbx
sub r15, rbx
cmp r15, r8
jae 0x140097755
lea rcx, [rsp + 0x150]
mov rdx, rbx
call fcn.14006fdc0
mov rax, qword [rsp + 0x150]
mov qword [rsp + 0x68], rax
mov rax, qword [rsp + 0x158]
mov qword [rsp + 0x60], rax
mov r15, qword [rsp + 0x60]
cmp r15, rsi
mov ebx, 0xffffffff
cmovb rbx, r15
mov qword [rsp + 0x160], rbx
mov r14, rbx
mov rbp, qword [rsp + 0x68]
mov r13, rbx
xor ecx, ecx
call sub.kernel32.dll_SetLastError
mov rcx, rbp
mov edx, r13d
call sub.kernel32.dll_GetWindowsDirectoryW
mov edi, eax
test eax, eax
jne 0x14009779e
call sub.kernel32.dll_GetLastError
test eax, eax
jne 0x140097898
mov r8d, edi
cmp r13, r8
jne 0x1400976f0
call sub.kernel32.dll_GetLastError
cmp eax, 0x7a
jne 0x14009972a
add r13, r13
mov eax, 0xffffffff
cmp r13, rax
mov esi, 0xffffffff
cmovae r13, rax
mov r8, r13
cmp r8, 0x201
jae 0x140097720
jmp 0x1400976ff
cmp r14, r8
jb 0x140099820
lea rcx, [rsp + 0xc0]
mov rdx, rbp
call fcn.1400719d0
mov r15, qword [rsp + 0x88]
lea rcx, [rsp + 0xc0]
mov rdx, qword [rsp + 0x70]
mov r8, r12
call fcn.140091270
cmp qword [rsp + 0x78], 1
je 0x14009782c
lea rcx, [rsp + 0xc0]
call fcn.1400958c0
mov rdi, qword [rsp + 0xc0]
mov r8, qword [rsp + 0xd0]
lea rcx, [rsp + 0x90]
mov rdx, rdi
call fcn.14009be20
cmp qword [rsp + 0xc8], 0
je 0x140097865
mov r8d, 1
mov rcx, rdi
call fcn.140007210
movdqu xmm0, xmmword [rsp + 0x90]
movdqu xmmword [rsp + 0x178], xmm0
mov rax, qword [rsp + 0xa0]
mov qword [rsp + 0x188], rax
mov qword [rsp + 0x170], 0
mov dil, 1
jmp 0x1400978c3
call sub.kernel32.dll_GetLastError
shl rax, 0x20
or rax, 2
mov qword [rsp + 0x178], rax
mov qword [rsp + 0x170], 1
xor edi, edi
mov r15, qword [rsp + 0x88]
cmp qword [rsp + 0x60], 0
je 0x1400978db
mov r8d, 2
mov rcx, qword [rsp + 0x68]
call fcn.140007210
test dil, dil
je 0x14009790e
mov rax, qword [rsp + 0x178]
test rax, rax
je 0x14009791b
mov r8, rax
movdqu xmm6, xmmword [rsp + 0x180]
movq qword [rsp + 0x60], xmm6
pshufd xmm0, xmm6, 0xee
movq r9, xmm0
jmp 0x140097ba8
lea rcx, [rsp + 0x178]
call fcn.14006d1c0
lea rdx, str.PATHRUST_MIN_STACKfatal_runtime_error:_assertion_failed:_thread_info.stack_guard.get__.is_none____thread_info.thread.get__.is_none___n
lea rcx, [rsp + 0x90]
mov r8d, 4
call fcn.14008eab0
cmp byte [rsp + 0xa8], 2
je 0x140097ac2
mov rcx, qword [rsp + 0x90]
mov rax, qword [rsp + 0x98]
mov qword [rsp + 0x60], rax
mov rax, qword [rsp + 0xa0]
add rax, rcx
mov qword [rsp + 0x68], rcx
mov qword [rsp + 0x170], rcx
mov qword [rsp + 0x178], rax
mov word [rsp + 0x180], 0
mov byte [rsp + 0x188], 1
lea r13, [rsp + 0x239]
lea rsi, [rsp + 0xd9]
lea rdi, [rsp + 0x220]
lea rbp, [rsp + 0x170]
lea rbx, [rsp + 0xc0]
jmp 0x1400979c5
mov rax, qword [rsp + 0x220]
test rax, rax
jne 0x1400990b4
mov rcx, rdi
mov rdx, rbp
call fcn.14008fcd0
jmp 0x1400979dd
mov rcx, rdi
mov rdx, rbp
call fcn.14008fcd0
movzx eax, byte [rsp + 0x238]
cmp al, 2
je 0x140097aaa
mov r8, qword [rsp + 0x220]
mov rcx, qword [rsp + 0x228]
mov rdx, qword [rsp + 0x230]
test rdx, rdx
jne 0x140097a1f
test rcx, rcx
je 0x1400979d2
mov rcx, qword [0x140123378]
xor edx, edx
call sub.kernel32.dll_HeapFree
jmp 0x1400979d2
mov r9d, dword [r13]
mov r10d, dword [r13 + 3]
mov dword [rsi + 3], r10d
mov dword [rsi], r9d
mov qword [rsp + 0xc0], r8
mov qword [rsp + 0xc8], rcx
mov qword [rsp + 0xd0], rdx
mov byte [rsp + 0xd8], al
mov rcx, rbx
mov rdx, qword [rsp + 0x70]
mov r8, r12
call fcn.140091270
cmp qword [rsp + 0x78], 1
je 0x140097a6d
mov rcx, rbx
call fcn.1400958c0
mov r14, qword [rsp + 0xc0]
mov r8, qword [rsp + 0xd0]
mov rcx, rdi
mov rdx, r14
call fcn.14009be20
cmp qword [rsp + 0xc8], 0
je 0x1400979b4
mov r8d, 1
mov rcx, r14
call fcn.140007210
jmp 0x1400979b4
cmp qword [rsp + 0x60], 0
je 0x140097ac2
mov r8d, 1
mov rcx, qword [rsp + 0x68]
call fcn.140007210
lea rax, [0x140112718]
mov qword [rsp + 0x60], rax
jmp 0x140096d48
xor r9d, r9d
mov r8, rdx
test rax, rax
cmovne r9, rax
test r9, r9
je 0x140097af9
test rax, rax
cmove r8, rdx
add r9, r8
sub r9, rsi
cmp rdi, r9
cmovae rdi, r9
lea rcx, [rsp + 0x220]
mov rdx, rsi
mov r8, rdi
call fcn.14006f8c0
mov rcx, qword [rsp + 0x220]
mov rax, qword [rsp + 0x228]
test rcx, rcx
je 0x140097b58
mov rdx, qword [rsp + 0x230]
mov qword [rsp + 0x220], rcx
mov qword [rsp + 0x228], rax
mov qword [rsp + 0x230], rdx
lea rcx, [rsp + 0x130]
lea rdx, [rsp + 0x220]
call fcn.14009bd50
jmp 0x140097b6c
mov qword [rsp + 0x138], rax
mov qword [rsp + 0x130], 0
test rbx, rbx
je 0x140097b82
mov rcx, qword [0x140123378]
xor edx, edx
mov r8, rsi
call sub.kernel32.dll_HeapFree
mov r8, qword [rsp + 0x130]
mov rax, qword [rsp + 0x138]
mov qword [rsp + 0x60], rax
test r8, r8
je 0x140096d48
mov r9, qword [rsp + 0x140]
cmp r9, 5
mov qword [rsp + 0x68], r8
mov dword [rsp + 0x68], eax
movups xmm6, xmmword [rsp + 0x228]
jmp 0x1400978f9
mov rsi, rax
movdqu xmm6, xmmword [rsp + 0x228]
cmp qword [rsp + 0x60], 0
je 0x1400990d8
mov r8d, 1
mov rcx, qword [rsp + 0x68]
call fcn.140007210
mov r8, rsi
jmp 0x1400978f9
lea rcx, [0x140113f6f]
lea r8, [0x1401102d8]
mov edx, 0x2b
call fcn.1400323f0
jmp 0x140099870
call sub.kernel32.dll_GetLastError
shl rax, 0x20
or rax, 2
mov qword [rsp + 0x90], rax
lea rax, [rsp + 0x90]
mov qword [rsp + 0x170], rax
lea rax, [0x14008f770]
mov qword [rsp + 0x178], rax
lea rax, str.comparing_environment_keys_failed:
mov qword [rsp + 0xc0], rax
mov qword [rsp + 0xc8], 1
mov qword [rsp + 0xe0], 0
lea rax, [rsp + 0x170]
mov qword [rsp + 0xd0], rax
mov qword [rsp + 0xd8], 1
lea rdx, str.library_std_src_syswindowsprocess.rs
lea rcx, [rsp + 0xc0]
call fcn.1400316b0
jmp 0x140099870
lea rcx, [0x140113f6f]
lea r8, [0x14010f5f0]
mov edx, 0x2b
call fcn.1400323f0
jmp 0x140099870
call fcn.140007720
jmp 0x140099870
mov qword [rsp + 0x78], rdi
call fcn.140007720
jmp 0x140099870
mov ecx, 1
mov rdx, rsi
call fcn.140007760
jmp 0x140099870
call fcn.140007720
jmp 0x140099870
mov ecx, 1
mov rdx, rdi
call fcn.140007760
jmp 0x140099870
mov ecx, 2
mov rdx, r13
call fcn.140007760
jmp 0x140099870
lea r8, str.library_std_src_syswindowsos.rs
mov ecx, 1
xor edx, edx
call fcn.1400316f0
jmp 0x140099870
lea rax, str.library_std_src_syswindowsos.rs
mov rcx, r8
mov rdx, rbx
mov r8, rax
call fcn.140032050
jmp 0x140099870
lea r8, str.library_std_src_syswindowsos.rs
mov rcx, rbp
mov rdx, rbx
call fcn.1400316f0
jmp 0x140099870
lea rcx, str.assertion_failed:_self.height___0
lea r8, [0x14010ffa8]
mov edx, 0x21
call fcn.1400323f0
jmp 0x140099870
mov ecx, 1
mov rdx, r12
call fcn.140007760
jmp 0x140099870
lea rcx, str.internal_error:_entered_unreachable_codeassertion_failed:_injected___worker_thread.is_null__assertion_failed:_mid___self.len__
lea r8, str.library_std_src_syswindowsmod.rs
mov edx, 0x28
call fcn.1400323f0
jmp 0x140099870
lea rcx, str.internal_error:_entered_unreachable_codeassertion_failed:_injected___worker_thread.is_null__assertion_failed:_mid___self.len__
lea r8, str.library_std_src_syswindowsmod.rs
mov edx, 0x28
call fcn.1400323f0
jmp 0x140099870
call sub.kernel32.dll_GetLastError
shl rax, 0x20
or rax, 2
mov qword [rsp + 0x90], rax
lea rax, [rsp + 0x90]
mov qword [rsp + 0x170], rax
lea rax, [0x14008f770]
mov qword [rsp + 0x178], rax
lea rax, str.failure_getting_env_string_from_OS:
mov qword [rsp + 0x220], rax
mov qword [rsp + 0x228], 1
mov qword [rsp + 0x240], 0
lea rax, [rsp + 0x170]
mov qword [rsp + 0x230], rax
mov qword [rsp + 0x238], 1
lea rdx, str.library_std_src_syswindowsos.rs
lea rcx, [rsp + 0x220]
call fcn.1400316b0
jmp 0x140099870
call fcn.140007720
jmp 0x140099870
lea rax, str.library_std_src_syswindowsmod.rs
mov rcx, r8
mov rdx, r13
mov r8, rax
call fcn.140032050
jmp 0x140099870
lea r8, str._rustc_edf0b1db0a7f29d71ee82cfc53bdc170fe74e501librarycore_src_sliceiter.rs
call fcn.1400316f0
jmp 0x140099870
lea rax, str.library_std_src_syswindowsmod.rs
mov rcx, r8
mov rdx, r14
mov r8, rax
call fcn.140032050
jmp 0x140099870