Function at 0x1400b0ec0
Capabilities:
Create process on windows
Encrypt data using speck
Get common file path
Query environment variable

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x658
movdqa xmmword [rsp + 0x640], xmm6
mov qword [rsp + 0x1d0], r8
mov r15, rdx
mov qword [rsp + 0x50], rcx
movzx eax, byte [rdx + 0xa0]
mov rbp, qword [rdx + 0x98]
test al, al
jne 0x1400b0f20
test rbp, rbp
jne 0x1400b0f20
mov qword [rsp + 0x1f0], 0
xor eax, eax
mov qword [rsp + 0x80], rax
xor ebp, ebp
jmp 0x1400b1c02
mov qword [rsp + 0x130], 0
mov qword [rsp + 0x140], 0
test al, al
mov qword [rsp + 0xa8], r15
jne 0x1400b1176
mov qword [rsp + 0x80], rbp
call sub.kernel32.dll_GetEnvironmentStringsW
test rax, rax
je 0x1400b4693
lea rdi, [rsp + 0x170]
lea r14, [rsp + 0x230]
mov qword [rsp + 0x58], rax
mov r15, rax
nop word cs:[rax + rax]
cmp word [r15], 0
je 0x1400b115c
mov r13, r15
mov rcx, 0xfffffffffffffffe
xor edx, edx
nop word [rax + rax]
mov rbx, rdx
mov rax, rcx
inc rdx
add rcx, 2
cmp word [r13 + rbx*2], 0
jne 0x1400b0fa0
lea r15, [rdx*2]
add r15, r13
cmp rbx, 1
je 0x1400b0f80
test rbx, rbx
je 0x1400b45fe
xor ebp, ebp
nop word cs:[rax + rax]
cmp word [r13 + rbp*2 + 2], 0x3d
je 0x1400b1000
inc rbp
add rax, 0xfffffffffffffffe
jne 0x1400b0fe0
jmp 0x1400b0f80
lea r8, [rbp + 1]
cmp rbp, rbx
jae 0x1400b4616
mov rcx, rdi
mov rdx, r13
call fcn.1400913d0
add rbp, 2
mov r8, rbx
sub r8, rbp
jb 0x1400b4630
lea rdx, [rbp*2]
add rdx, r13
mov rcx, r14
call fcn.1400913d0
mov rsi, qword [rsp + 0x170]
mov r13, qword [rsp + 0x178]
movdqu xmm6, xmmword [rsp + 0x180]
mov rbp, qword [rsp + 0x230]
mov rbx, qword [rsp + 0x238]
lea rax, [rsp + 0x250]
movups xmm0, xmmword [rax - 0x10]
movaps xmmword [rsp + 0x150], xmm0
movabs rax, 0x8000000000000000
cmp rsi, rax
je 0x1400b115c
movq rax, xmm6
add rax, r13
mov qword [rsp + 0x170], r13
mov qword [rsp + 0x178], rax
mov word [rsp + 0x180], 0
lea r12, [rsp + 0x88]
mov rcx, r12
mov rdx, rdi
call fcn.1400b4f30
mov qword [rsp + 0x230], rsi
mov qword [rsp + 0x238], r13
movdqu xmmword [rsp + 0x240], xmm6
mov rax, qword [rsp + 0x98]
lea rcx, [rsp + 0x250]
mov qword [rcx + 0x10], rax
movups xmm0, xmmword [rsp + 0x88]
movups xmmword [rcx], xmm0
mov qword [rsp + 0x170], rbp
mov qword [rsp + 0x178], rbx
movaps xmm0, xmmword [rsp + 0x150]
lea rax, [rsp + 0x180]
movups xmmword [rax], xmm0
mov rcx, r12
lea rdx, [rsp + 0x130]
mov r8, r14
mov r9, rdi
call fcn.1400b5140
mov rax, qword [rsp + 0x88]
shl rax, 1
test rax, rax
je 0x1400b0f80
mov rcx, qword [rsp + 0x90]
mov edx, 1
call fcn.140007440
jmp 0x1400b0f80
mov rcx, qword [rsp + 0x58]
call sub.kernel32.dll_FreeEnvironmentStringsW
mov r15, qword [rsp + 0xa8]
mov rbp, qword [rsp + 0x80]
movabs rcx, 0x3ffffffffffffffe
mov rax, qword [r15 + 0x88]
mov rsi, qword [r15 + 0x90]
xor r13d, r13d
test rax, rax
setne r13b
cmove rbp, rax
xor r15d, r15d
inc rcx
mov qword [rsp + 0x68], rcx
jmp 0x1400b11b2
xor eax, eax
test rbp, rbp
je 0x1400b1a1e
test r13, r13
je 0x1400b1210
test r15, r15
jne 0x1400b1210
mov r13d, 1
test rsi, rsi
je 0x1400b121a
mov rdx, rsi
and rdx, 7
je 0x1400b121f
mov rcx, rsi
and rcx, 0xfffffffffffffff8
mov r15, rax
nop word cs:[rax + rax]
mov r15, qword [r15 + 0x3d8]
dec rdx
jne 0x1400b11f0
cmp rsi, 8
jae 0x1400b1230
jmp 0x1400b126e
test r13, r13
jne 0x1400b1272
jmp 0x1400b458d
mov r15, rax
jmp 0x1400b126e
mov r15, rax
mov rcx, rsi
cmp rsi, 8
jb 0x1400b126e
nop dword [rax + rax]
mov rax, qword [r15 + 0x3d8]
mov rax, qword [rax + 0x3d8]
mov rax, qword [rax + 0x3d8]
mov rax, qword [rax + 0x3d8]
mov rax, qword [rax + 0x3d8]
mov rax, qword [rax + 0x3d8]
mov rax, qword [rax + 0x3d8]
mov r15, qword [rax + 0x3d8]
add rcx, 0xfffffffffffffff8
jne 0x1400b1230
xor esi, esi
xor eax, eax
movzx ecx, word [r15 + 0x3d2]
mov r14, r15
mov r12, rsi
cmp rsi, rcx
jb 0x1400b12b8
nop word cs:[rax + rax]
mov rcx, qword [r14 + 0x160]
test rcx, rcx
je 0x1400b406a
inc rax
movzx r12d, word [r14 + 0x3d0]
mov r14, rcx
cmp r12w, word [rcx + 0x3d2]
jae 0x1400b1290
test rax, rax
je 0x1400b1350
mov r15, qword [r14 + r12*8 + 0x3e0]
mov rcx, rax
dec rcx
je 0x1400b133e
mov rdx, rcx
and rdx, 7
je 0x1400b12f5
mov rcx, rdx
nop dword [rax]
mov r15, qword [r15 + 0x3d8]
dec rcx
jne 0x1400b12e0
not rdx
add rdx, rax
mov rcx, rdx
add rax, 0xfffffffffffffffe
cmp rax, 7
jb 0x1400b133e
nop
mov rax, qword [r15 + 0x3d8]
mov rax, qword [rax + 0x3d8]
mov rax, qword [rax + 0x3d8]
mov rax, qword [rax + 0x3d8]
mov rax, qword [rax + 0x3d8]
mov rax, qword [rax + 0x3d8]
mov rax, qword [rax + 0x3d8]
mov r15, qword [rax + 0x3d8]
add rcx, 0xfffffffffffffff8
jne 0x1400b1300
xor esi, esi
jmp 0x1400b1358
lea rsi, [r12 + 1]
mov r15, r14
dec rbp
imul rax, r12, 0x38
lea rbx, [r14 + rax]
add rbx, 0x168
shl r12, 5
movabs rax, 0x8000000000000000
cmp qword [r14 + r12], rax
jne 0x1400b13f0
mov rdi, qword [rsp + 0x130]
mov eax, 0
test rdi, rdi
je 0x1400b11b2
mov r12, rsi
mov rsi, r13
mov r13, rbp
mov r9, qword [rbx + 0x28]
mov rax, qword [rbx + 0x30]
mov rbp, qword [rsp + 0x138]
mov qword [rsp + 0x20], rax
lea rcx, [rsp + 0x88]
mov rdx, rdi
mov r8, rbp
call fcn.1400b64f0
cmp qword [rsp + 0x88], 0
je 0x1400b15bd
xor eax, eax
mov rbp, r13
mov r13, rsi
mov rsi, r12
jmp 0x1400b11b2
mov qword [rsp + 0x78], rsi
mov rsi, qword [rbx + 8]
mov rdi, qword [rbx + 0x10]
test rdi, rdi
mov qword [rsp + 0x80], rbp
je 0x1400b142e
js 0x1400b45f4
movzx eax, byte [0x14016a150]
mov edx, 1
mov rcx, rdi
call fcn.1400073b0
test rax, rax
jne 0x1400b1433
jmp 0x1400b45e2
mov eax, 1
mov qword [rsp + 0x58], rax
mov rcx, rax
mov rdx, rsi
mov r8, rdi
call sub.msvcrt.dll_memcpy
movzx eax, byte [rbx + 0x18]
mov byte [rsp + 0x60], al
mov rsi, qword [rbx + 0x28]
mov rbp, qword [rbx + 0x30]
test rbp, rbp
mov qword [rsp + 0x70], r13
je 0x1400b1495
cmp rbp, qword [rsp + 0x68]
ja 0x1400b45bc
lea r13, [rbp*2]
movzx eax, byte [0x14016a150]
mov edx, 2
mov rcx, r13
call fcn.1400073b0
test rax, rax
je 0x1400b45aa
mov rbx, rax
jmp 0x1400b149d
mov ebx, 2
xor r13d, r13d
add r14, r12
mov rcx, rbx
mov rdx, rsi
mov r8, r13
call sub.msvcrt.dll_memcpy
mov qword [rsp + 0x230], rdi
mov rax, qword [rsp + 0x58]
mov qword [rsp + 0x238], rax
mov qword [rsp + 0x240], rdi
movzx eax, byte [rsp + 0x60]
mov byte [rsp + 0x248], al
mov qword [rsp + 0x250], rbp
mov qword [rsp + 0x258], rbx
mov qword [rsp + 0x260], rbp
mov r13, qword [r14 + 8]
mov rsi, qword [r14 + 0x10]
test rsi, rsi
je 0x1400b1523
js 0x1400b45d8
movzx eax, byte [0x14016a150]
mov edx, 1
mov rcx, rsi
call fcn.1400073b0
mov r12, rax
test rax, rax
jne 0x1400b1529
jmp 0x1400b45c6
mov r12d, 1
mov rcx, r12
mov rdx, r13
mov r8, rsi
call sub.msvcrt.dll_memcpy
movzx eax, byte [r14 + 0x18]
mov qword [rsp + 0x170], rsi
mov qword [rsp + 0x178], r12
mov qword [rsp + 0x180], rsi
mov byte [rsp + 0x188], al
lea rcx, [rsp + 0x88]
lea rdx, [rsp + 0x130]
lea r8, [rsp + 0x230]
lea r9, [rsp + 0x170]
call fcn.1400b5140
mov rax, qword [rsp + 0x88]
shl rax, 1
test rax, rax
mov rbp, qword [rsp + 0x80]
mov r13, qword [rsp + 0x70]
mov rsi, qword [rsp + 0x78]
je 0x1400b11b0
mov rcx, qword [rsp + 0x90]
mov edx, 1
call fcn.140007440
jmp 0x1400b11b0
mov rax, qword [rsp + 0x90]
mov rdx, qword [rsp + 0x98]
mov rcx, qword [rsp + 0xa0]
mov byte [rsp + 0x210], 0
test rdx, rdx
je 0x1400b1782
mov rax, qword [rax + rcx*8 + 0x3d8]
mov rcx, rdx
dec rcx
je 0x1400b16be
mov r8, rcx
and r8, 7
je 0x1400b162e
mov rcx, r8
nop word cs:[rax + rax]
movzx r9d, word [rax + 0x3d2]
mov rax, qword [rax + r9*8 + 0x3d8]
dec rcx
jne 0x1400b1610
not r8
add r8, rdx
mov rcx, r8
add rdx, 0xfffffffffffffffe
cmp rdx, 7
jb 0x1400b16be
nop dword [rax]
movzx edx, word [rax + 0x3d2]
mov rax, qword [rax + rdx*8 + 0x3d8]
movzx edx, word [rax + 0x3d2]
mov rax, qword [rax + rdx*8 + 0x3d8]
movzx edx, word [rax + 0x3d2]
mov rax, qword [rax + rdx*8 + 0x3d8]
movzx edx, word [rax + 0x3d2]
mov rax, qword [rax + rdx*8 + 0x3d8]
movzx edx, word [rax + 0x3d2]
mov rax, qword [rax + rdx*8 + 0x3d8]
movzx edx, word [rax + 0x3d2]
mov rax, qword [rax + rdx*8 + 0x3d8]
movzx edx, word [rax + 0x3d2]
mov rax, qword [rax + rdx*8 + 0x3d8]
movzx edx, word [rax + 0x3d2]
mov rax, qword [rax + rdx*8 + 0x3d8]
add rcx, 0xfffffffffffffff8
jne 0x1400b1640
movzx ecx, word [rax + 0x3d2]
dec rcx
mov qword [rsp + 0x150], rax
mov qword [rsp + 0x158], 0
mov qword [rsp + 0x160], rcx
lea rcx, [rsp + 0x230]
lea rdx, [rsp + 0x150]
lea r8, [rsp + 0x210]
call fcn.1400b6640
mov rax, qword [rsp + 0x280]
mov qword [rsp + 0x1c0], rax
movups xmm0, xmmword [rsp + 0x270]
movaps xmmword [rsp + 0x1b0], xmm0
movups xmm0, xmmword [rsp + 0x230]
movups xmm1, xmmword [rsp + 0x240]
movups xmm2, xmmword [rsp + 0x250]
movups xmm3, xmmword [rsp + 0x260]
movaps xmmword [rsp + 0x1a0], xmm3
movaps xmmword [rsp + 0x190], xmm2
movaps xmmword [rsp + 0x180], xmm1
movaps xmmword [rsp + 0x170], xmm0
mov rdx, qword [rsp + 0x288]
mov rax, qword [rsp + 0x298]
movzx ecx, word [rdx + 0x3d2]
cmp rax, rcx
jae 0x1400b17c0
mov rcx, rdx
jmp 0x1400b17f9
mov qword [rsp + 0x170], rax
mov qword [rsp + 0x178], 0
mov qword [rsp + 0x180], rcx
lea rcx, [rsp + 0x230]
lea rdx, [rsp + 0x170]
lea r8, [rsp + 0x210]
call fcn.1400b6640
jmp 0x1400b1911
mov r8, qword [rsp + 0x290]
nop dword [rax + rax]
mov rcx, qword [rdx + 0x160]
test rcx, rcx
je 0x1400b17f4
inc r8
movzx eax, word [rdx + 0x3d0]
mov rdx, rcx
cmp ax, word [rcx + 0x3d2]
jae 0x1400b17d0
jmp 0x1400b17f9
mov rax, r8
xor ecx, ecx
imul rdx, rax, 0x38
shl rax, 5
mov r8, qword [rcx + rdx + 0x198]
mov qword [rsp + 0xf0], r8
movups xmm0, xmmword [rcx + rdx + 0x168]
movups xmm1, xmmword [rcx + rdx + 0x178]
movups xmm2, xmmword [rcx + rdx + 0x188]
movaps xmmword [rsp + 0xe0], xmm2
movaps xmmword [rsp + 0xd0], xmm1
movaps xmmword [rsp + 0xc0], xmm0
mov r8, qword [rsp + 0x1a0]
mov qword [rcx + rdx + 0x198], r8
movaps xmm0, xmmword [rsp + 0x170]
movaps xmm1, xmmword [rsp + 0x180]
movaps xmm2, xmmword [rsp + 0x190]
movups xmmword [rcx + rdx + 0x188], xmm2
movups xmmword [rcx + rdx + 0x178], xmm1
movups xmmword [rcx + rdx + 0x168], xmm0
movups xmm0, xmmword [rcx + rax]
movups xmm1, xmmword [rcx + rax + 0x10]
lea rdx, [rsp + 0xf8]
movups xmmword [rdx + 0x10], xmm1
movups xmmword [rdx], xmm0
lea rdx, [rsp + 0x1a8]
movups xmm0, xmmword [rdx]
movups xmm1, xmmword [rdx + 0x10]
movups xmmword [rcx + rax], xmm0
movups xmmword [rcx + rax + 0x10], xmm1
mov rax, qword [rsp + 0x110]
mov qword [rsp + 0x280], rax
movaps xmm0, xmmword [rsp + 0x100]
movaps xmmword [rsp + 0x270], xmm0
movaps xmm0, xmmword [rsp + 0xc0]
movaps xmm1, xmmword [rsp + 0xd0]
movaps xmm2, xmmword [rsp + 0xe0]
movaps xmm3, xmmword [rsp + 0xf0]
movaps xmmword [rsp + 0x260], xmm3
movaps xmmword [rsp + 0x250], xmm2
movaps xmmword [rsp + 0x240], xmm1
movaps xmmword [rsp + 0x230], xmm0
mov rbx, qword [rsp + 0x230]
mov r14, qword [rsp + 0x238]
mov rax, qword [rsp + 0x250]
mov qword [rsp + 0x58], rax
mov rax, qword [rsp + 0x258]
mov qword [rsp + 0x78], rax
dec qword [rsp + 0x140]
mov rax, qword [rsp + 0x268]
mov qword [rsp + 0x60], rax
mov rax, qword [rsp + 0x270]
mov qword [rsp + 0xb0], rax
cmp byte [rsp + 0x210], 0
je 0x1400b19a5
test rbp, rbp
je 0x1400b4647
mov rax, qword [rdi + 0x3d8]
mov qword [rsp + 0x130], rax
dec rbp
mov qword [rsp + 0x138], rbp
mov qword [rax + 0x160], 0
mov edx, 8
mov rcx, rdi
call fcn.140007440
mov eax, 0
movabs rcx, 0x8000000000000000
cmp rbx, rcx
mov rbp, r13
mov r13, rsi
mov rsi, r12
je 0x1400b11b2
test rbx, rbx
je 0x1400b19d8
mov edx, 1
mov rcx, r14
call fcn.140007440
cmp qword [rsp + 0x58], 0
je 0x1400b19ef
mov edx, 2
mov rcx, qword [rsp + 0x78]
call fcn.140007440
mov rcx, qword [rsp + 0x60]
shl rcx, 1
mov eax, 0
test rcx, rcx
je 0x1400b11b2
mov edx, 1
mov rcx, qword [rsp + 0xb0]
call fcn.140007440
xor eax, eax
jmp 0x1400b11b2
mov rax, qword [rsp + 0x140]
mov qword [rsp + 0x208], rax
movups xmm0, xmmword [rsp + 0x130]
movups xmmword [rsp + 0x1f8], xmm0
mov qword [rsp + 0x1f0], 1
movzx eax, byte [0x14016a150]
mov r12d, 4
mov ecx, 4
mov edx, 1
call fcn.1400073b0
test rax, rax
je 0x1400b4664
mov rsi, rax
mov dword [rax], 0x48544150
add rax, 4
mov qword [rsp + 0xc0], rsi
mov qword [rsp + 0xc8], rax
mov word [rsp + 0xd0], 0
lea rcx, [rsp + 0x170]
lea rdx, [rsp + 0xc0]
call fcn.1400b4f30
mov qword [rsp + 0x230], 4
mov qword [rsp + 0x238], rsi
mov qword [rsp + 0x240], 4
mov byte [rsp + 0x248], 0
movups xmm0, xmmword [rsp + 0x170]
movups xmmword [rsp + 0x250], xmm0
mov r15, qword [rsp + 0x180]
mov qword [rsp + 0x260], r15
mov rdi, qword [rsp + 0x258]
mov r14, qword [rsp + 0x1f8]
test r14, r14
mov qword [rsp + 0x58], rsi
je 0x1400b1bc0
mov r12, qword [rsp + 0x200]
lea rcx, [r14 + 0x168]
movzx r13d, word [r14 + 0x3d2]
imul rbx, r13, 0x38
mov rbp, 0xffffffffffffffff
nop word cs:[rax + rax]
test rbx, rbx
je 0x1400b1b80
lea rsi, [rcx + 0x38]
mov r8, qword [rcx + 0x28]
mov r9d, dword [rcx + 0x30]
mov dword [rsp + 0x20], 1
mov rcx, rdi
mov edx, r15d
call sub.kernel32.dll_CompareStringOrdinal
inc rbp
add rbx, 0xffffffffffffffc8
mov rcx, rsi
cmp eax, 3
je 0x1400b1b40
cmp eax, 1
jne 0x1400b1b97
jmp 0x1400b1b83
mov rbp, r13
sub r12, 1
jb 0x1400b1fd5
mov r14, qword [r14 + rbp*8 + 0x3d8]
jmp 0x1400b1b19
cmp eax, 2
jne 0x1400b44fd
test r14, r14
mov r15, qword [rsp + 0xa8]
je 0x1400b1bcc
shl rbp, 5
mov rax, qword [r14 + rbp + 8]
mov rbx, qword [r14 + rbp + 0x10]
mov rbp, rax
jmp 0x1400b1bce
xor ebp, ebp
mov r15, qword [rsp + 0xa8]
jmp 0x1400b1bce
xor ebp, ebp
mov eax, 1
mov qword [rsp + 0x80], rax
mov edx, 1
mov rcx, qword [rsp + 0x58]
call fcn.140007440
cmp qword [rsp + 0x250], 0
je 0x1400b1c02
mov edx, 2
mov rcx, rdi
call fcn.140007440
mov r12, qword [r15 + 0x10]
lea rdi, str.program_path_has_no_file_name
test r12, r12
je 0x1400b25c5
mov rdx, qword [r15 + 8]
cmp r12, 4
jae 0x1400b1c29
lea rax, [0x1400b6b80]
jmp 0x1400b1c51
mov eax, dword [rdx]
bswap eax
xor ecx, ecx
cmp eax, 0x5c5c3f5c
setb cl
cmp eax, 0x5c5c3f5d
adc ecx, 0xffffffff
lea rcx, [0x1400b6b70]
lea rax, [0x1400b6b80]
cmove rax, rcx
mov qword [rsp + 0x60], rdx
movzx esi, byte [r12 + rdx - 1]
mov ecx, esi
call rax
test al, al
jne 0x1400b25c5
cmp r12, 4
jb 0x1400b1cd3
mov r14, qword [rsp + 0x60]
movzx eax, byte [r12 + r14 - 4]
lea ecx, [rax - 0x41]
cmp cl, 0x1a
setb cl
shl cl, 5
or cl, al
cmp cl, 0x2e
jne 0x1400b1cdc
movzx eax, byte [r14 + r12 - 3]
lea ecx, [rax - 0x41]
cmp cl, 0x1a
setb cl
shl cl, 5
or cl, al
cmp cl, 0x65
jne 0x1400b1cdc
movzx eax, byte [r14 + r12 - 2]
lea ecx, [rax - 0x41]
cmp cl, 0x1a
setb cl
shl cl, 5
or cl, al
cmp cl, 0x78
jne 0x1400b1cdc
lea eax, [rsi - 0x41]
cmp al, 0x1a
setb al
shl al, 5
or al, sil
cmp al, 0x65
sete al
jmp 0x1400b1cde
xor eax, eax
mov r14, qword [rsp + 0x60]
jmp 0x1400b1cde
xor eax, eax
movabs r13, 0x8000000000000000
lea rcx, [r14 + r12]
mov qword [rsp + 0x58], rcx
xor ecx, ecx
nop word cs:[rax + rax]
cmp r12, rcx
je 0x1400b1d60
movzx edx, byte [r14 + rcx]
cmp edx, 0x5c
je 0x1400b1d17
inc rcx
cmp edx, 0x2f
jne 0x1400b1d00
test al, al
je 0x1400b1e30
lea rcx, [rsp + 0x230]
mov rdx, r14
mov r8, r12
call fcn.14008efa0
mov rcx, qword [rsp + 0x230]
mov rax, qword [rsp + 0x238]
cmp rcx, r13
jne 0x1400b1f11
mov qword [rsp + 0x138], rax
mov qword [rsp + 0x130], r13
jmp 0x1400b25ac
xor r8d, r8d
lea rdi, str.nul_byte_found_in_provided_data
mov rax, r14
jmp 0x1400b1d7c
xor r8d, r8d
test cx, cx
je 0x1400b25c5
mov cx, 1
test r8w, r8w
jne 0x1400b1d70
cmp rax, qword [rsp + 0x58]
je 0x1400b1f70
movzx edx, byte [rax]
test dl, dl
js 0x1400b1d9d
inc rax
jmp 0x1400b1dfc
mov r8d, edx
and r8d, 0x1f
movzx r10d, byte [rax + 1]
and r10d, 0x3f
cmp dl, 0xdf
jbe 0x1400b1dee
movzx r9d, byte [rax + 2]
shl r10d, 6
and r9d, 0x3f
or r9d, r10d
cmp dl, 0xf0
jb 0x1400b1e06
movzx edx, byte [rax + 3]
add rax, 4
and r8d, 7
shl r8d, 0x12
shl r9d, 6
and edx, 0x3f
or edx, r9d
or edx, r8d
cmp edx, 0xffff
jbe 0x1400b1dfc
jmp 0x1400b1e1c
add rax, 2
shl r8d, 6
or r8d, r10d
mov edx, r8d
xor r8d, r8d
mov ecx, edx
jmp 0x1400b1d73
add rax, 3
shl r8d, 0xc
or r9d, r8d
mov edx, r9d
cmp edx, 0xffff
jbe 0x1400b1dfc
and edx, 0x3ff
or edx, 0xdc00
mov r8d, edx
jmp 0x1400b1d73
test r12, r12
js 0x1400b4740
movzx eax, byte [0x14016a150]
mov edx, 1
mov rcx, r12
call fcn.1400073b0
test rax, rax
je 0x1400b4664
mov rsi, rax
mov rcx, rax
mov rdx, r14
mov r8, r12
call sub.msvcrt.dll_memcpy
mov qword [rsp + 0x230], r12
mov qword [rsp + 0x238], rsi
mov qword [rsp + 0x240], r12
mov byte [rsp + 0x248], 0
lea rdx, str..exeprogram_not_found
lea rcx, [rsp + 0x230]
mov r8d, 4
call fcn.1400ad4b0
mov rbx, qword [rsp + 0x230]
mov rsi, qword [rsp + 0x238]
mov rdi, qword [rsp + 0x240]
lea rcx, [rsp + 0xc0]
mov rdx, rsi
mov r8, rdi
call fcn.1400b6c60
cmp qword [rsp + 0xc0], r13
jne 0x1400b1f4b
mov rcx, rsi
mov rdx, rdi
call fcn.1400b0510
test rax, rax
je 0x1400b252b
cmp rdx, 2
jne 0x1400b1f91
movzx ecx, word [rax]
cmp ecx, 0x2e2e
jne 0x1400b1f91
mov r8d, 2
xor r9d, r9d
jmp 0x1400b250b
mov rdx, qword [rsp + 0x240]
mov qword [rsp + 0x230], rcx
mov qword [rsp + 0x238], rax
mov qword [rsp + 0x240], rdx
lea rcx, [rsp + 0x130]
lea rdx, [rsp + 0x230]
call fcn.1400b6b90
jmp 0x1400b25ac
mov rax, qword [rsp + 0xd0]
mov qword [rsp + 0x140], rax
movups xmm0, xmmword [rsp + 0xc0]
movaps xmmword [rsp + 0x130], xmm0
jmp 0x1400b259a
cmp r12, 0xf
ja 0x1400b1fe4
xor eax, eax
mov qword [rsp + 0x68], rax
xor eax, eax
nop
cmp byte [r14 + rax], 0x2e
je 0x1400b1ffd
inc rax
cmp r12, rax
jne 0x1400b1f80
jmp 0x1400b2007
mov r8, rdx
nop word cs:[rax + rax]
test r8, r8
je 0x1400b1ff3
mov rcx, r8
dec r8
cmp byte [rax + rcx - 1], 0x2e
jne 0x1400b1fa0
mov r10, rdx
sub r10, rcx
jb 0x1400b4764
test r8, r8
je 0x1400b2505
mov r9, rax
add r9, rcx
mov rdx, r10
jmp 0x1400b250b
mov r15, qword [rsp + 0xa8]
xor ebp, ebp
jmp 0x1400b1bce
mov cl, 0x2e
mov rdx, r14
mov r8, r12
call fcn.140010370
jmp 0x1400b2002
mov r9, rax
xor eax, eax
jmp 0x1400b250b
mov eax, 1
mov qword [rsp + 0x68], rax
test rbp, rbp
je 0x1400b205c
add rbx, rbp
mov qword [rsp + 0xc0], rbp
mov qword [rsp + 0xc8], rbx
mov word [rsp + 0xd0], 0
mov byte [rsp + 0xd8], 1
lea rcx, [rsp + 0x230]
lea rdx, [rsp + 0xc0]
call fcn.1400ad060
mov rax, qword [rsp + 0x230]
cmp rax, r13
mov r14, qword [rsp + 0x60]
jne 0x1400b234c
lea rcx, [rsp + 0xc0]
call fcn.1400ad2a0
mov rbx, qword [rsp + 0xc0]
cmp rbx, r13
jne 0x1400b2088
lea rcx, [rsp + 0xc8]
call fcn.14008c8d0
jmp 0x1400b214c
mov rsi, qword [rsp + 0xc8]
mov rdi, qword [rsp + 0xd0]
mov r14, qword [rsp + 0xd8]
mov rcx, rsi
mov rdx, rdi
call fcn.1400aee10
cmp rdi, rdx
cmovb rdx, rdi
test rax, rax
cmove rdx, rdi
mov qword [rsp + 0x230], rbx
mov qword [rsp + 0x238], rsi
mov qword [rsp + 0x240], rdx
mov qword [rsp + 0x248], r14
lea rcx, [rsp + 0x230]
mov rdx, qword [rsp + 0x60]
mov r8, r12
call fcn.1400ade00
cmp qword [rsp + 0x68], 1
je 0x1400b2103
lea rcx, [rsp + 0x230]
call fcn.1400b0640
mov rsi, qword [rsp + 0x238]
mov r8, qword [rsp + 0x240]
lea rcx, [rsp + 0x170]
mov rdx, rsi
call fcn.1400b6c60
cmp qword [rsp + 0x230], 0
je 0x1400b213b
mov edx, 1
mov rcx, rsi
call fcn.140007440
mov r14, qword [rsp + 0x170]
cmp r14, r13
jne 0x1400b2459
mov qword [rsp + 0xa8], r15
mov qword [rsp + 0x88], 0
mov qword [rsp + 0x90], 2
mov qword [rsp + 0x98], 0
mov r8d, 0x200
mov eax, 2
mov qword [rsp + 0x70], rax
xor eax, eax
mov qword [rsp + 0x78], rax
mov r15d, 0xffffffff
xor esi, esi
xor r13d, r13d
cmp r8, 0x201
jb 0x1400b21bf
jmp 0x1400b21e0
jae 0x1400b22a2
cmp r8, 0x201
jae 0x1400b21e0
mov r14d, 0x200
lea rbp, [rsp + 0x230]
mov rbx, r8
jmp 0x1400b223a
sub r8, r13
sub rsi, r13
cmp rsi, r8
jae 0x1400b2215
lea rcx, [rsp + 0x88]
mov rdx, r13
call fcn.14008f4b0
mov rax, qword [rsp + 0x88]
mov qword [rsp + 0x78], rax
mov rax, qword [rsp + 0x90]
mov qword [rsp + 0x70], rax
mov rsi, qword [rsp + 0x78]
cmp rsi, r15
mov r13d, 0xffffffff
cmovb r13, rsi
mov qword [rsp + 0x98], r13
mov r14, r13
mov rbp, qword [rsp + 0x70]
mov rbx, r13
xor ecx, ecx
call sub.kernel32.dll_SetLastError
mov rcx, rbp
mov edx, ebx
call sub.kernel32.dll_GetSystemDirectoryW
mov edi, eax
test eax, eax
jne 0x1400b225e
call sub.kernel32.dll_GetLastError
test eax, eax
jne 0x1400b246e
mov r8d, edi
cmp rbx, r8
jne 0x1400b21b0
call sub.kernel32.dll_GetLastError
cmp eax, 0x7a
jne 0x1400b4676
add rbx, rbx
mov eax, 0xffffffff
cmp rbx, rax
mov r15d, 0xffffffff
cmovae rbx, rax
mov r8, rbx
cmp r8, 0x201
jae 0x1400b21e0
jmp 0x1400b21bf
cmp r14, r8
jb 0x1400b4772
lea rcx, [rsp + 0xc0]
mov rdx, rbp
call fcn.1400913d0
movabs r13, 0x8000000000000000
lea rcx, [rsp + 0xc0]
mov rdx, qword [rsp + 0x60]
mov r8, r12
call fcn.1400ade00
cmp qword [rsp + 0x68], 1
je 0x1400b22ef
lea rcx, [rsp + 0xc0]
call fcn.1400b0640
mov rdi, qword [rsp + 0xc8]
mov r8, qword [rsp + 0xd0]
lea rcx, [rsp + 0x170]
mov rdx, rdi
call fcn.1400b6c60
cmp qword [rsp + 0xc0], 0
je 0x1400b2327
mov edx, 1
mov rcx, rdi
call fcn.140007440
movups xmm0, xmmword [rsp + 0x170]
movaps xmmword [rsp + 0x150], xmm0
mov rax, qword [rsp + 0x180]
mov qword [rsp + 0x160], rax
jmp 0x1400b2499
lea rsi, [rsp + 0x230]
lea rdi, [rsp + 0xc0]
lea rbx, [rsp + 0x170]
mov rcx, qword [rsp + 0x238]
mov rdx, qword [rsp + 0x240]
test rdx, rdx
je 0x1400b2429
mov r8, qword [rsp + 0x248]
mov qword [rsp + 0x230], rax
mov qword [rsp + 0x238], rcx
mov qword [rsp + 0x240], rdx
mov qword [rsp + 0x248], r8
mov rcx, rsi
mov rdx, r14
mov r8, r12
call fcn.1400ade00
cmp qword [rsp + 0x68], 1
je 0x1400b23c3
mov rcx, rsi
call fcn.1400b0640
mov r14, qword [rsp + 0x238]
mov r8, qword [rsp + 0x240]
mov rcx, rbx
mov rdx, r14
call fcn.1400b6c60
cmp qword [rsp + 0x230], 0
je 0x1400b23f6
mov edx, 1
mov rcx, r14
call fcn.140007440
mov r14, qword [rsp + 0x170]
cmp r14, r13
jne 0x1400b2459
mov rcx, rsi
mov rdx, rdi
call fcn.1400ad060
mov rax, qword [rsp + 0x230]
cmp rax, r13
mov r14, qword [rsp + 0x60]
jne 0x1400b2364
jmp 0x1400b205c
test rax, rax
je 0x1400b2438
mov edx, 1
call fcn.140007440
mov rcx, rsi
mov rdx, rdi
call fcn.1400ad060
mov rax, qword [rsp + 0x230]
cmp rax, r13
jne 0x1400b2364
jmp 0x1400b205c
mov rdi, qword [rsp + 0x178]
mov rbx, qword [rsp + 0x180]
jmp 0x1400b26a5
call sub.kernel32.dll_GetLastError
shl rax, 0x20
or rax, 2
mov qword [rsp + 0x158], rax
movabs r13, 0x8000000000000000
lea rax, [r13 + 1]
mov qword [rsp + 0x150], rax
cmp qword [rsp + 0x78], 0
je 0x1400b24b0
mov edx, 2
mov rcx, qword [rsp + 0x70]
call fcn.140007440
mov r14, qword [rsp + 0x150]
lea rsi, [r13 + 2]
cmp r14, rsi
mov r15, qword [rsp + 0xa8]
jge 0x1400b3485
movabs rax, 0x8000000000000000
cmp r14, rax
je 0x1400b3207
movabs rax, 0x8000000000000001
cmp r14, rax
jne 0x1400b31f5
lea rcx, [rsp + 0x158]
call fcn.14008c8d0
jmp 0x1400b3207
xor r9d, r9d
mov r8, rdx
test rax, rax
cmovne r9, rax
test r9, r9
je 0x1400b252b
test rax, rax
cmove r8, rdx
add r9, r8
sub r9, rsi
cmp rdi, r9
cmovae rdi, r9
lea rcx, [rsp + 0x230]
mov rdx, rsi
mov r8, rdi
call fcn.14008efa0
mov rcx, qword [rsp + 0x230]
mov rax, qword [rsp + 0x238]
cmp rcx, r13
jne 0x1400b2565
mov qword [rsp + 0x138], rax
mov qword [rsp + 0x130], r13
jmp 0x1400b259a
mov rdx, qword [rsp + 0x240]
mov qword [rsp + 0x230], rcx
mov qword [rsp + 0x238], rax
mov qword [rsp + 0x240], rdx
lea rcx, [rsp + 0x130]
lea rdx, [rsp + 0x230]
call fcn.1400b6b90
test rbx, rbx
je 0x1400b25ac
mov edx, 1
mov rcx, rsi
call fcn.140007440
mov r14, qword [rsp + 0x130]
mov rdi, qword [rsp + 0x138]
cmp r14, r13
jne 0x1400b269d
mov rax, qword [rsp + 0x50]
mov qword [rax], rdi
mov qword [rax + 0x10], 2
mov rax, qword [rsp + 0x80]
test rax, rax
je 0x1400b266b
mov rcx, qword [rsp + 0x1f8]
test rcx, rcx
je 0x1400b2642
mov rdx, qword [rsp + 0x200]
mov rax, qword [rsp + 0x208]
mov qword [rsp + 0x238], 0
mov qword [rsp + 0x240], rcx
mov qword [rsp + 0x248], rdx
mov qword [rsp + 0x258], 0
mov qword [rsp + 0x260], rcx
mov qword [rsp + 0x268], rdx
mov ecx, 1
jmp 0x1400b2646
xor ecx, ecx
xor eax, eax
mov qword [rsp + 0x230], rcx
mov qword [rsp + 0x250], rcx
mov qword [rsp + 0x270], rax
lea rcx, [rsp + 0x230]
call fcn.1400b4e70
mov rax, qword [rsp + 0x1d0]
cmp dword [rax], 4
jb 0x1400b2681
mov rcx, qword [rax + 8]
call sub.kernel32.dll_CloseHandle
movaps xmm6, xmmword [rsp + 0x640]
add rsp, 0x658
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
mov rbx, qword [rsp + 0x140]
cmp rbx, 5
mov qword [rsp + 0x80], rdi
mov qword [rsp + 0x78], r14
jb case.0x1400b29d3.68
cmp word [rdi + rbx*2 - 0xa], 0x2e
jne case.0x1400b29d3.68
cmp word [rdi + rbx*2 - 2], 0
je 0x1400b29b4
mov rsi, qword [r15 + 0x28]
mov rdi, qword [r15 + 0x30]
movzx ebp, byte [r15 + 0xc5]
mov qword [rsp + 0xc0], 0
mov qword [rsp + 0xc8], 2
mov qword [rsp + 0xd0], 0
lea rcx, [rsp + 0xc0]
xor edx, edx
call fcn.14008f360
mov rax, qword [rsp + 0xc8]
mov rcx, qword [rsp + 0xd0]
mov word [rax + rcx*2], 0x22
inc rcx
mov qword [rsp + 0xd0], rcx
mov rax, qword [rsp + 0x60]
mov qword [rsp + 0x230], rax
mov rax, qword [rsp + 0x58]
mov qword [rsp + 0x238], rax
mov word [rsp + 0x240], 0
lea rcx, [rsp + 0xc0]
lea rdx, [rsp + 0x230]
call fcn.14008f1d0
mov rdx, qword [rsp + 0xd0]
cmp rdx, qword [rsp + 0xc0]
jne 0x1400b2790
lea rcx, [rsp + 0xc0]
call fcn.14008f360
mov rdx, qword [rsp + 0xd0]
mov rax, qword [rsp + 0xc8]
mov word [rax + rdx*2], 0x22
inc rdx
mov qword [rsp + 0xd0], rdx
shl rdi, 3
lea r14, [rdi + rdi*4]
lea rbx, [rsp + 0xc0]
nop dword [rax]
test r14, r14
je 0x1400b283d
mov rdx, qword [rsp + 0xd0]
cmp rdx, qword [rsp + 0xc0]
jne 0x1400b27e7
mov rcx, rbx
call fcn.14008f360
mov rdx, qword [rsp + 0xd0]
mov rax, qword [rsp + 0xc8]
mov word [rax + rdx*2], 0x20
inc rdx
mov qword [rsp + 0xd0], rdx
mov rcx, rbx
mov rdx, rsi
mov r8d, ebp
call fcn.1400b6d30
mov rdi, rax
add rsi, 0x28
add r14, 0xffffffffffffffd8
test rax, rax
je 0x1400b27c0
cmp qword [rsp + 0xc0], 0
je 0x1400b2852
mov rcx, qword [rsp + 0xc8]
mov edx, 2
call fcn.140007440
jmp 0x1400b2852
mov rax, qword [rsp + 0xc0]
mov rdi, qword [rsp + 0xc8]
cmp rax, r13
jne 0x1400b28a0
mov r14, qword [rsp + 0x80]
mov rax, qword [rsp + 0x50]
mov qword [rax], rdi
mov qword [rax + 0x10], 2
xor esi, esi
cmp qword [rsp + 0x78], 0
je 0x1400b2881
mov edx, 2
mov rcx, r14
call fcn.140007440
test sil, sil
jne 0x1400b266b
mov rax, qword [rsp + 0x1f0]
test rax, rax
jne 0x1400b25e6
jmp 0x1400b266b
mov rdx, qword [rsp + 0xd0]
mov cl, 1
mov dword [rsp + 0x60], ecx
mov rcx, qword [rsp + 0x78]
mov qword [rsp + 0x58], rcx
mov r14, qword [rsp + 0x80]
mov qword [rsp + 0x70], r14
mov qword [rsp + 0x130], rax
mov qword [rsp + 0x138], rdi
mov qword [rsp + 0x140], rdx
cmp rdx, rax
jne 0x1400b2902
lea rcx, [rsp + 0x130]
mov rdx, rax
call fcn.14008f360
mov rdi, qword [rsp + 0x138]
mov rdx, qword [rsp + 0x140]
mov word [rdi + rdx*2], 0
inc rdx
mov qword [rsp + 0x140], rdx
cmp byte [r15 + 0xc4], 0
mov eax, 0x400
mov rcx, r15
mov r15d, 0x608
cmove r15d, eax
mov qword [rsp + 0xa8], rcx
or r15d, dword [rcx + 0xc0]
cmp qword [rsp + 0x1f0], 0
je 0x1400b2b70
mov rbx, qword [rsp + 0x1f8]
mov r14, qword [rsp + 0x200]
mov r12, qword [rsp + 0x208]
mov qword [rsp + 0x150], rbx
mov qword [rsp + 0x158], r14
mov qword [rsp + 0x160], r12
mov qword [rsp + 0x88], 0
mov qword [rsp + 0x90], 2
mov qword [rsp + 0x98], 0
test r12, r12
je 0x1400b2c06
mov edi, 2
xor ebp, ebp
jmp 0x1400b2c39
movzx eax, word [rdi + rbx*2 - 8]
lea ecx, [rax - 0x42]
cmp ecx, 0x21
ja case.0x1400b29d3.68
lea rdx, [0x1400d681c]
movsxd rcx, dword [rdx + rcx*4]
invalid
or al, 0x8a
add rcx, rdx
jmp rcx
movzx ecx, word [rdi + rbx*2 - 6]
or ecx, 0x20
cmp ecx, 0x61
jne 0x1400b29ef
movzx ecx, word [rdi + rbx*2 - 4]
or ecx, 0x20
and byte [rbx + 0x2e7474f9], al
cmp ax, 0x43
jne case.0x1400b29d3.68
movzx eax, word [rdi + rbx*2 - 6]
or eax, 0x20
cmp eax, 0x6d
jne case.0x1400b29d3.68
movzx eax, word [rdi + rbx*2 - 4]
add eax, 0xffffffbc
test eax, 0xffdf
jne case.0x1400b29d3.68
mov qword [rsp + 0xb0], rbx
mov qword [rsp + 0xa8], r15
mov qword [rsp + 0xc0], 0
lea rax, [rsp + 0xc8]
mov qword [rsp + 0x68], rax
mov qword [rsp + 0xc8], 2
mov qword [rsp + 0xd0], 0
mov esi, 0x200
mov eax, 2
mov qword [rsp + 0x60], rax
xor eax, eax
mov qword [rsp + 0x58], rax
mov r14d, 0xffffffff
xor edi, edi
xor ebx, ebx
cmp rsi, 0x201
jb 0x1400b2a98
jmp 0x1400b2aab
jae 0x1400b35a4
cmp rsi, 0x201
jae 0x1400b2aab
mov r13d, 0x200
lea r12, [rsp + 0x230]
mov rbp, rsi
jmp 0x1400b2b07
sub rsi, rbx
sub rdi, rbx
cmp rdi, rsi
jae 0x1400b2ae3
lea rcx, [rsp + 0xc0]
mov rdx, rbx
mov r8, rsi
call fcn.14008f4b0
mov rax, qword [rsp + 0xc0]
mov qword [rsp + 0x58], rax
mov rax, qword [rsp + 0xc8]
mov qword [rsp + 0x60], rax
mov rdi, qword [rsp + 0x58]
cmp rdi, r14
mov ebx, 0xffffffff
cmovb rbx, rdi
mov qword [rsp + 0xd0], rbx
mov r13, rbx
mov r12, qword [rsp + 0x60]
mov rbp, rbx
xor ecx, ecx
call sub.kernel32.dll_SetLastError
mov rcx, r12
mov edx, ebp
call sub.kernel32.dll_GetSystemDirectoryW
mov r15d, eax
test eax, eax
jne 0x1400b2b2c
call sub.kernel32.dll_GetLastError
test eax, eax
jne 0x1400b384d
mov esi, r15d
cmp rbp, rsi
jne 0x1400b2a89
call sub.kernel32.dll_GetLastError
cmp eax, 0x7a
jne 0x1400b474a
add rbp, rbp
mov eax, 0xffffffff
cmp rbp, rax
mov r14d, 0xffffffff
cmovae rbp, rax
mov rsi, rbp
cmp rsi, 0x201
jae 0x1400b2aab
jmp 0x1400b2a98
mov eax, 2
mov qword [rsp + 0xb0], rax
xor edi, edi
xor eax, eax
mov qword [rsp + 0x68], rax
mov rcx, qword [rsp + 0xa8]
cmp qword [rcx + 0x38], r13
jne 0x1400b30a0
mov eax, 2
xor r12d, r12d
xor ecx, ecx
mov qword [rsp + 0x1e8], rcx
mov qword [rsp + 0x1e0], rax
mov qword [rsp + 0x228], rdi
xorps xmm0, xmm0
movaps xmmword [rsp + 0x150], xmm0
mov qword [rsp + 0x160], 0
lea rdi, [0x14016a108]
mov rcx, rdi
call sub.kernel32.dll_AcquireSRWLockExclusive
mov rax, qword [0x14016a148]
dec r13
test rax, r13
je 0x1400b349a
call fcn.1400926d0
mov ebp, eax
mov rsi, r13
xor bpl, 1
jmp 0x1400b349f
mov sil, 1
lea rcx, [rsp + 0x88]
xor edx, edx
call fcn.14008f360
mov rdi, qword [rsp + 0x90]
mov rbp, qword [rsp + 0x98]
mov word [rdi + rbp*2], 0
inc rbp
mov qword [rsp + 0x98], rbp
xor eax, eax
test rbx, rbx
setne al
cmove r12, rbx
mov qword [rsp + 0x230], rax
mov qword [rsp + 0x238], 0
mov qword [rsp + 0x240], rbx
mov qword [rsp + 0x248], r14
mov qword [rsp + 0x250], rax
mov qword [rsp + 0x258], 0
mov qword [rsp + 0x260], rbx
mov qword [rsp + 0x268], r14
mov qword [rsp + 0x270], r12
lea rcx, [rsp + 0xc0]
lea rdx, [rsp + 0x230]
call fcn.1400b0b80
mov rdx, qword [rsp + 0xc0]
test rdx, rdx
je 0x1400b3871
mov r9, qword [rsp + 0xd0]
imul r8, r9, 0x38
mov rax, qword [rdx + r8 + 0x168]
cmp rax, r13
je 0x1400b3871
mov rcx, qword [rdx + r8 + 0x170]
mov rbx, qword [rdx + r8 + 0x188]
mov r10, qword [rdx + r8 + 0x190]
mov qword [rsp + 0xb8], r10
mov r12, qword [rdx + r8 + 0x198]
shl r9, 5
mov r10, qword [rdx + r9]
mov qword [rsp + 0x68], r10
mov r10, qword [rdx + r9 + 8]
mov qword [rsp + 0xb0], r10
mov r13, qword [rdx + r9 + 0x10]
mov rdx, qword [rdx + r8 + 0x178]
add rdx, rcx
xor r11d, r11d
mov r8, rcx
jmp 0x1400b2d4d
xor r11d, r11d
test r9w, r9w
je 0x1400b3055
mov r9w, 1
test r11w, r11w
jne 0x1400b2d40
cmp r8, rdx
je 0x1400b2e05
movzx r10d, byte [r8]
test r10b, r10b
js 0x1400b2d72
inc r8
jmp 0x1400b2dfa
mov r11d, r10d
and r11d, 0x1f
movzx esi, byte [r8 + 1]
and esi, 0x3f
cmp r10b, 0xdf
jbe 0x1400b2dbd
movzx r14d, byte [r8 + 2]
shl esi, 6
and r14d, 0x3f
or r14d, esi
cmp r10b, 0xf0
jb 0x1400b2dcd
movzx r10d, byte [r8 + 3]
add r8, 4
and r11d, 7
shl r11d, 0x12
shl r14d, 6
and r10d, 0x3f
or r10d, r14d
or r10d, r11d
jmp 0x1400b2ddb
add r8, 2
shl r11d, 6
or r11d, esi
mov r10d, r11d
jmp 0x1400b2dfa
add r8, 3
shl r11d, 0xc
or r14d, r11d
mov r10d, r14d
cmp r10d, 0xffff
jbe 0x1400b2dfa
and r10d, 0x3ff
or r10d, 0xdc00
mov r11d, r10d
jmp 0x1400b2d43
xor r11d, r11d
mov r9d, r10d
jmp 0x1400b2d43
test rax, rax
je 0x1400b2e14
mov edx, 1
call fcn.140007440
mov rax, qword [rsp + 0x88]
sub rax, rbp
cmp rax, r12
jae 0x1400b2e47
lea rcx, [rsp + 0x88]
mov rdx, rbp
mov r8, r12
call fcn.14008f4b0
mov rdi, qword [rsp + 0x90]
mov rbp, qword [rsp + 0x98]
lea r8, [r12 + r12]
mov rsi, rdi
lea rcx, [rdi + rbp*2]
mov rdi, qword [rsp + 0xb8]
mov rdx, rdi
call sub.msvcrt.dll_memcpy
add rbp, r12
mov qword [rsp + 0x98], rbp
test rbx, rbx
je 0x1400b2e7f
mov edx, 2
mov rcx, rdi
call fcn.140007440
cmp rbp, qword [rsp + 0x88]
mov rbx, qword [rsp + 0xb0]
jne 0x1400b2eb1
lea rcx, [rsp + 0x88]
mov rdx, rbp
call fcn.14008f360
mov rsi, qword [rsp + 0x90]
mov rbp, qword [rsp + 0x98]
mov word [rsi + rbp*2], 0x3d
inc rbp
mov qword [rsp + 0x98], rbp
add r13, rbx
xor r8d, r8d
mov rax, rbx
mov rsi, qword [rsp + 0x68]
jmp 0x1400b2ede
xor r8d, r8d
test cx, cx
je 0x1400b3193
mov cx, 1
test r8w, r8w
jne 0x1400b2ed2
cmp rax, r13
je 0x1400b2f8d
movzx edx, byte [rax]
test dl, dl
js 0x1400b2f00
inc rax
jmp 0x1400b2f83
mov r8d, edx
and r8d, 0x1f
movzx r10d, byte [rax + 1]
and r10d, 0x3f
cmp dl, 0xdf
jbe 0x1400b2f49
movzx r9d, byte [rax + 2]
shl r10d, 6
and r9d, 0x3f
or r9d, r10d
cmp dl, 0xf0
jb 0x1400b2f59
movzx edx, byte [rax + 3]
add rax, 4
and r8d, 7
shl r8d, 0x12
shl r9d, 6
and edx, 0x3f
or edx, r9d
or edx, r8d
jmp 0x1400b2f67
add rax, 2
shl r8d, 6
or r8d, r10d
mov edx, r8d
jmp 0x1400b2f83
add rax, 3
shl r8d, 0xc
or r9d, r8d
mov edx, r9d
cmp edx, 0xffff
jbe 0x1400b2f83
and edx, 0x3ff
or edx, 0xdc00
mov r8d, edx
jmp 0x1400b2ed5
xor r8d, r8d
mov ecx, edx
jmp 0x1400b2ed5
movabs rax, 0x8000000000000000
cmp rsi, rax
je 0x1400b44f5
mov qword [rsp + 0x170], rbx
mov qword [rsp + 0x178], r13
mov word [rsp + 0x180], 0
lea rcx, [rsp + 0x88]
lea rdx, [rsp + 0x170]
call fcn.14008f1d0
test rsi, rsi
movabs r13, 0x8000000000000000
je 0x1400b2feb
mov edx, 1
mov rcx, rbx
call fcn.140007440
mov rbp, qword [rsp + 0x98]
cmp rbp, qword [rsp + 0x88]
jne 0x1400b3027
lea rcx, [rsp + 0x88]
mov rdx, rbp
call fcn.14008f360
lea rcx, [rsp + 0xc0]
lea rdx, [rsp + 0x230]
mov rbp, qword [rsp + 0x98]
jmp 0x1400b3037
lea rcx, [rsp + 0xc0]
lea rdx, [rsp + 0x230]
mov rdi, qword [rsp + 0x90]
mov word [rdi + rbp*2], 0
inc rbp
mov qword [rsp + 0x98], rbp
jmp 0x1400b2ca5
test rax, rax
je 0x1400b3064
mov edx, 1
call fcn.140007440
cmp qword [rsp + 0x68], 0
je 0x1400b307e
mov edx, 1
mov rcx, qword [rsp + 0xb0]
call fcn.140007440
lea rdi, str.nul_byte_found_in_provided_data
test rbx, rbx
je 0x1400b31ac
mov edx, 2
mov rcx, qword [rsp + 0xb8]
jmp 0x1400b31a7
mov rax, qword [rcx + 0x40]
mov rcx, qword [rcx + 0x48]
add rcx, rax
xor r10d, r10d
mov rdx, rax
jmp 0x1400b30c0
xor r10d, r10d
test r8w, r8w
je 0x1400b3177
mov r8w, 1
test r10w, r10w
jne 0x1400b30b3
cmp rdx, rcx
je 0x1400b35e9
movzx r9d, byte [rdx]
test r9b, r9b
js 0x1400b30e5
inc rdx
jmp 0x1400b316c
mov r10d, r9d
and r10d, 0x1f
movzx esi, byte [rdx + 1]
and esi, 0x3f
cmp r9b, 0xdf
jbe 0x1400b312f
movzx r11d, byte [rdx + 2]
shl esi, 6
and r11d, 0x3f
or r11d, esi
cmp r9b, 0xf0
jb 0x1400b313f
movzx r9d, byte [rdx + 3]
add rdx, 4
and r10d, 7
shl r10d, 0x12
shl r11d, 6
and r9d, 0x3f
or r9d, r11d
or r9d, r10d
jmp 0x1400b314d
add rdx, 2
shl r10d, 6
or r10d, esi
mov r9d, r10d
jmp 0x1400b316c
add rdx, 3
shl r10d, 0xc
or r11d, r10d
mov r9d, r11d
cmp r9d, 0xffff
jbe 0x1400b316c
and r9d, 0x3ff
or r9d, 0xdc00
mov r10d, r9d
jmp 0x1400b30b6
xor r10d, r10d
mov r8d, r9d
jmp 0x1400b30b6
lea r12, str.nul_byte_found_in_provided_data
mov rax, qword [rsp + 0x50]
mov qword [rax], r12
mov qword [rax + 0x10], 2
jmp 0x1400b4315
lea rdi, str.nul_byte_found_in_provided_data
test rsi, rsi
je 0x1400b31ac
mov edx, 1
mov rcx, rbx
call fcn.140007440
xor esi, esi
lea rcx, [rsp + 0x230]
call fcn.1400b4e70
cmp qword [rsp + 0x88], 0
je 0x1400b31d8
mov rcx, qword [rsp + 0x90]
mov edx, 2
call fcn.140007440
mov r14, qword [rsp + 0x80]
mov rax, qword [rsp + 0x50]
mov qword [rax], rdi
mov qword [rax + 0x10], 2
jmp 0x1400b432f
mov rcx, qword [rsp + 0x158]
mov edx, 2
call fcn.140007440
mov qword [rsp + 0xb0], rsi
mov qword [rsp + 0x88], 0
mov qword [rsp + 0x90], 2
mov qword [rsp + 0x98], 0
mov r8d, 0x200
mov eax, 2
mov qword [rsp + 0x70], rax
xor eax, eax
mov qword [rsp + 0x78], rax
mov esi, 0xffffffff
xor r15d, r15d
xor ebx, ebx
cmp r8, 0x201
jb 0x1400b326e
jmp 0x1400b3281
jae 0x1400b3342
cmp r8, 0x201
jae 0x1400b3281
mov r13d, 0x200
lea rbp, [rsp + 0x230]
mov r14, r8
jmp 0x1400b32da
sub r8, rbx
sub r15, rbx
cmp r15, r8
jae 0x1400b32b6
lea rcx, [rsp + 0x88]
mov rdx, rbx
call fcn.14008f4b0
mov rax, qword [rsp + 0x88]
mov qword [rsp + 0x78], rax
mov rax, qword [rsp + 0x90]
mov qword [rsp + 0x70], rax
mov r15, qword [rsp + 0x78]
cmp r15, rsi
mov ebx, 0xffffffff
cmovb rbx, r15
mov qword [rsp + 0x98], rbx
mov r13, rbx
mov rbp, qword [rsp + 0x70]
mov r14, rbx
xor ecx, ecx
call sub.kernel32.dll_SetLastError
mov rcx, rbp
mov edx, r14d
call sub.kernel32.dll_GetWindowsDirectoryW
mov edi, eax
test eax, eax
jne 0x1400b32ff
call sub.kernel32.dll_GetLastError
test eax, eax
jne 0x1400b33f1
mov r8d, edi
cmp r14, r8
jne 0x1400b325f
call sub.kernel32.dll_GetLastError
cmp eax, 0x7a
jne 0x1400b4723
add r14, r14
mov eax, 0xffffffff
cmp r14, rax
mov esi, 0xffffffff
cmovae r14, rax
mov r8, r14
cmp r8, 0x201
jae 0x1400b3281
jmp 0x1400b326e
cmp r13, r8
jb 0x1400b4789
lea rcx, [rsp + 0xc0]
mov rdx, rbp
call fcn.1400913d0
mov r15, qword [rsp + 0xa8]
mov rdx, qword [rsp + 0x60]
lea rcx, [rsp + 0xc0]
mov r8, r12
call fcn.1400ade00
movabs r13, 0x8000000000000000
cmp qword [rsp + 0x68], 1
je 0x1400b3397
lea rcx, [rsp + 0xc0]
call fcn.1400b0640
mov rdi, qword [rsp + 0xc8]
mov r8, qword [rsp + 0xd0]
lea rcx, [rsp + 0x170]
mov rdx, rdi
call fcn.1400b6c60
cmp qword [rsp + 0xc0], 0
je 0x1400b33cf
mov edx, 1
mov rcx, rdi
call fcn.140007440
movups xmm0, xmmword [rsp + 0x170]
movaps xmmword [rsp + 0x150], xmm0
mov rax, qword [rsp + 0x180]
mov qword [rsp + 0x160], rax
jmp 0x1400b3424
call sub.kernel32.dll_GetLastError
shl rax, 0x20
or rax, 2
mov qword [rsp + 0x158], rax
movabs r13, 0x8000000000000000
lea rax, [r13 + 1]
mov qword [rsp + 0x150], rax
mov r15, qword [rsp + 0xa8]
cmp qword [rsp + 0x78], 0
je 0x1400b343b
mov edx, 2
mov rcx, qword [rsp + 0x70]
call fcn.140007440
mov r14, qword [rsp + 0x150]
cmp r14, qword [rsp + 0xb0]
jge 0x1400b3485
movabs rax, 0x8000000000000000
cmp r14, rax
je 0x1400b367c
movabs rax, 0x8000000000000001
cmp r14, rax
jne 0x1400b366a
lea rcx, [rsp + 0x158]
call fcn.14008c8d0
jmp 0x1400b367c
mov rdi, qword [rsp + 0x158]
mov rbx, qword [rsp + 0x160]
jmp 0x1400b26a5
mov rsi, r13
xor ebp, ebp
movzx r13d, byte [0x14016a110]
xor eax, eax
test r13b, r13b
setne al
mov qword [rsp + 0x90], rdi
mov byte [rsp + 0x98], bpl
mov qword [rsp + 0x88], rax
mov qword [rsp + 0x170], 0
mov qword [rsp + 0x180], 0
mov qword [rsp + 0x190], 0
mov dword [rsp + 0x630], 2
mov rdx, qword [rsp + 0xa8]
lea rax, [rdx + 0x58]
cmp dword [rdx + 0x58], 6
lea rcx, [rsp + 0x630]
cmovne rcx, rax
cmp dword [rdx + 0x68], 6
lea rdi, [rdx + 0x68]
mov rax, qword [rsp + 0x1d0]
cmove rdi, rax
lea rbx, [rdx + 0x78]
cmp dword [rdx + 0x78], 6
cmove rbx, rax
lea r8, [rsp + 0x170]
mov edx, 0xfffffff6
call fcn.1400b7210
mov qword [rsp + 0xb8], rdx
test rax, rax
je 0x1400b356e
mov rax, qword [rsp + 0x50]
mov rcx, qword [rsp + 0xb8]
mov qword [rax], rcx
mov qword [rax + 0x10], 2
jmp 0x1400b4266
lea r8, [rsp + 0x180]
mov rcx, rdi
mov edx, 0xfffffff5
call fcn.1400b7210
mov rdi, rdx
test rax, rax
je 0x1400b38e8
mov rax, qword [rsp + 0x50]
mov qword [rax], rdi
mov qword [rax + 0x10], 2
jmp 0x1400b4259
cmp r13, rsi
jb 0x1400b47a0
test r15d, r15d
je 0x1400b391e
lea rbx, [rsi + rsi]
movzx eax, byte [0x14016a150]
mov edx, 2
mov rcx, rbx
call fcn.1400073b0
test rax, rax
movabs rdi, 0x8000000000000000
je 0x1400b47b4
mov rcx, rax
jmp 0x1400b392f
mov qword [rsp + 0x230], rax
mov qword [rsp + 0x238], rcx
mov word [rsp + 0x240], 0
lea rcx, [rsp + 0xc0]
lea rdx, [rsp + 0x230]
call fcn.1400b4f30
mov rcx, qword [rsp + 0xc0]
mov rdx, qword [rsp + 0xd0]
cmp rdx, rcx
jne 0x1400b364a
lea rcx, [rsp + 0xc0]
call fcn.14008f360
mov rcx, qword [rsp + 0xc0]
mov rdx, qword [rsp + 0xd0]
mov r12, qword [rsp + 0xc8]
mov word [r12 + rdx*2], 0
mov rax, r12
cmp rcx, r13
jne 0x1400b2ba2
jmp 0x1400b317e
mov rcx, qword [rsp + 0x158]
mov edx, 2
call fcn.140007440
lea rdx, str.PATHlibrary_std_src_sys_commonprocess.rs
lea rcx, [rsp + 0x170]
mov r8d, 4
call fcn.1400abb10
mov rbp, qword [rsp + 0x170]
cmp rbp, r13
je 0x1400b3841
mov rsi, qword [rsp + 0x178]
mov rax, qword [rsp + 0x180]
add rax, rsi
mov qword [rsp + 0xc0], rsi
mov qword [rsp + 0xc8], rax
mov word [rsp + 0xd0], 0
mov byte [rsp + 0xd8], 1
lea rdi, [rsp + 0x230]
lea rbx, [rsp + 0xc0]
lea r13, [rsp + 0x88]
mov rcx, rdi
mov rdx, rbx
call fcn.1400ad060
mov rax, qword [rsp + 0x230]
movabs rcx, 0x8000000000000000
cmp rax, rcx
mov r14, qword [rsp + 0x60]
je 0x1400b382f
mov rcx, qword [rsp + 0x238]
mov rdx, qword [rsp + 0x240]
test rdx, rdx
jne 0x1400b376a
test rax, rax
je 0x1400b3743
mov edx, 1
call fcn.140007440
mov rcx, rdi
mov rdx, rbx
call fcn.1400ad060
mov rax, qword [rsp + 0x230]
movabs rcx, 0x8000000000000000
cmp rax, rcx
jne 0x1400b371f
jmp 0x1400b382f
mov r8, qword [rsp + 0x248]
mov qword [rsp + 0x230], rax
mov qword [rsp + 0x238], rcx
mov qword [rsp + 0x240], rdx
mov qword [rsp + 0x248], r8
mov rcx, rdi
mov rdx, r14
mov r8, r12
call fcn.1400ade00
cmp qword [rsp + 0x68], 1
je 0x1400b37b0
mov rcx, rdi
call fcn.1400b0640
mov r14, qword [rsp + 0x238]
mov r8, qword [rsp + 0x240]
mov rcx, r13
mov rdx, r14
call fcn.1400b6c60
cmp qword [rsp + 0x230], 0
je 0x1400b37e3
mov edx, 1
mov rcx, r14
call fcn.140007440
mov r14, qword [rsp + 0x88]
movabs rax, 0x8000000000000000
cmp r14, rax
je 0x1400b36f4
mov rdi, qword [rsp + 0x90]
mov rbx, qword [rsp + 0x98]
test rbp, rbp
je 0x1400b3820
mov edx, 1
mov rcx, rsi
call fcn.140007440
movabs r13, 0x8000000000000000
jmp 0x1400b26a5
test rbp, rbp
je 0x1400b3841
mov edx, 1
mov rcx, rsi
call fcn.140007440
lea rdi, [0x14012fd78]
jmp 0x1400b25c5
call sub.kernel32.dll_GetLastError
shl rax, 0x20
or rax, 2
mov qword [rsp + 0x70], rax
movabs rdi, 0x8000000000000000
mov rsi, rdi
jmp 0x1400b393f
xor esi, esi
lea rcx, [rsp + 0x230]
call fcn.1400b4e70
cmp rbp, qword [rsp + 0x88]
jne 0x1400b38ac
xor esi, esi
lea rcx, [rsp + 0x88]
mov rdx, rbp
call fcn.14008f360
mov rdi, qword [rsp + 0x90]
mov rbp, qword [rsp + 0x98]
mov word [rdi + rbp*2], 0
mov rcx, qword [rsp + 0x88]
mov rax, rcx
mov qword [rsp + 0x68], rcx
cmp rcx, r13
mov r14, qword [rsp + 0x80]
je 0x1400b31e0
mov rax, qword [rsp + 0x90]
mov qword [rsp + 0xb0], rax
jmp 0x1400b2b86
lea r8, [rsp + 0x190]
mov rcx, rbx
mov edx, 0xfffffff4
call fcn.1400b7210
mov rcx, rdx
test rax, rax
je 0x1400b3f06
mov rax, qword [rsp + 0x50]
mov qword [rax], rcx
mov qword [rax + 0x10], 2
jmp 0x1400b4251
mov ecx, 2
xor ebx, ebx
movabs rdi, 0x8000000000000000
mov qword [rsp + 0x70], rcx
mov rdx, r12
mov r8, rbx
call sub.msvcrt.dll_memcpy
cmp qword [rsp + 0x58], 0
je 0x1400b3956
mov edx, 2
mov rcx, qword [rsp + 0x60]
call fcn.140007440
cmp rsi, rdi
mov r14, qword [rsp + 0x80]
je 0x1400b3b50
mov qword [rsp + 0x170], rsi
lea rax, [rsp + 0x178]
mov qword [rsp + 0x68], rax
mov rax, qword [rsp + 0x70]
mov qword [rsp + 0x178], rax
mov qword [rsp + 0x180], rsi
lea r15, [0x14012fdd2]
xor r12d, r12d
lea rdi, [rsp + 0x170]
xor ebx, ebx
mov rbp, r15
jmp 0x1400b39bc
mov ebx, ecx
mov word [rax + rsi*2], r13w
inc rsi
mov qword [rsp + 0x180], rsi
test rbp, rbp
je 0x1400b3a7f
test bx, bx
je 0x1400b3a0e
xor ecx, ecx
mov r13d, ebx
cmp rsi, qword [rsp + 0x170]
jne 0x1400b39aa
mov rax, r15
sub rax, rbp
add rax, 0xa
movabs rdx, 0xaaaaaaaaaaaaaaab
mul rdx
mov r8, rdx
shr r8, 1
cmp cx, 1
mov rax, r12
adc rax, 0xffffffffffffffff
sub r8, rax
inc r8
mov ebx, ecx
jmp 0x1400b3aae
lea rcx, [0x14012fdda]
cmp rbp, rcx
je 0x1400b3a7f
movzx r13d, byte [rbp]
test r13b, r13b
js 0x1400b3a2b
inc rbp
xor ecx, ecx
jmp 0x1400b39cf
mov r8, rax
mov eax, r13d
and eax, 0x1f
movzx edx, byte [rbp + 1]
and edx, 0x3f
cmp r13b, 0xdf
jbe 0x1400b3ac9
movzx ecx, byte [rbp + 2]
shl edx, 6
and ecx, 0x3f
or ecx, edx
cmp r13b, 0xf0
jb 0x1400b3adf
movzx r13d, byte [rbp + 3]
and eax, 7
shl eax, 0x12
shl ecx, 6
and r13d, 0x3f
or r13d, ecx
or r13d, eax
cmp r13d, 0x110000
mov rax, r8
jne 0x1400b3af0
mov rcx, qword [rsp + 0x170]
cmp r12, 1
je 0x1400b3b2f
mov r12d, 1
xor r13d, r13d
mov ebp, 0
mov r8d, 0
cmp rsi, rcx
jne 0x1400b39ac
inc r8
mov rcx, rdi
mov rdx, rsi
call fcn.14008f4b0
mov rax, qword [rsp + 0x178]
jmp 0x1400b39ac
add rbp, 2
shl eax, 6
or eax, edx
mov r13d, eax
mov rax, r8
xor ecx, ecx
jmp 0x1400b39cf
add rbp, 3
shl eax, 0xc
or ecx, eax
mov r13d, ecx
mov rax, r8
jmp 0x1400b3af4
add rbp, 4
cmp r13d, 0xffff
jbe 0x1400b3b28
lea eax, [r13 + 0xff0000]
shr eax, 0xa
or eax, 0xd800
and r13d, 0x3ff
or r13d, 0xdc00
mov ecx, r13d
mov r13d, eax
mov rax, r8
jmp 0x1400b39cf
xor ecx, ecx
jmp 0x1400b39cf
mov rax, qword [rsp + 0x178]
mov qword [rsp + 0x70], rax
movabs rax, 0x8000000000000000
mov qword [rsp + 0x58], rcx
cmp rcx, rax
jne 0x1400b3b62
mov rax, qword [rsp + 0x50]
mov rcx, qword [rsp + 0x70]
mov qword [rax], rcx
jmp 0x1400b2862
mov al, 1
test al, al
je 0x1400b47c3
mov rax, qword [rsp + 0xa8]
mov rsi, qword [rax + 0x28]
mov rcx, qword [rax + 0x30]
mov qword [rsp + 0x60], rcx
movzx eax, byte [rax + 0xc5]
mov byte [rsp + 0x68], al
movzx eax, byte [0x14016a150]
mov ecx, 0xc
mov edx, 2
call fcn.1400073b0
test rax, rax
je 0x1400b47ca
mov ecx, 6
mov word [rax], 0x63
mov qword [rsp + 0x230], rcx
lea rcx, [rsp + 0x238]
mov qword [rsp + 0xb8], rcx
mov qword [rsp + 0x238], rax
mov qword [rsp + 0x240], 1
lea r13, [0x14012f82b]
mov edi, 1
xor ebx, ebx
lea r15, [0x14012f839]
lea rbp, [0x14012f82a]
lea r12, [rsp + 0x230]
jmp 0x1400b3c19
mov word [rax + rdi*2], bx
inc rdi
mov qword [rsp + 0x240], rdi
mov ebx, r14d
test bx, bx
jne 0x1400b3ccd
cmp r13, r15
je 0x1400b3d1d
movzx ebx, byte [r13]
test bl, bl
js 0x1400b3c3c
inc r13
jmp 0x1400b3ccd
mov ecx, ebx
and ecx, 0x1f
movzx r8d, byte [r13 + 1]
and r8d, 0x3f
cmp bl, 0xdf
jbe 0x1400b3c8a
movzx edx, byte [r13 + 2]
shl r8d, 6
and edx, 0x3f
or edx, r8d
cmp bl, 0xf0
jb 0x1400b3c98
movzx ebx, byte [r13 + 3]
and ecx, 7
shl ecx, 0x12
shl edx, 6
and ebx, 0x3f
or ebx, edx
or ebx, ecx
cmp ebx, 0x110000
je 0x1400b3d1d
add r13, 4
jmp 0x1400b3ca3
add r13, 2
shl ecx, 6
or ecx, r8d
mov ebx, ecx
jmp 0x1400b3ccd
add r13, 3
shl ecx, 0xc
or edx, ecx
mov ebx, edx
cmp ebx, 0xffff
jbe 0x1400b3ccd
lea ecx, [rbx + 0xff0000]
shr ecx, 0xa
or ecx, 0xd800
and ebx, 0x3ff
or ebx, 0xdc00
mov r14d, ebx
mov ebx, ecx
jmp 0x1400b3cd0
xor r14d, r14d
cmp rdi, qword [rsp + 0x230]
jne 0x1400b3c07
mov rax, rbp
sub rax, r13
add rax, 0x11
movabs rcx, 0xaaaaaaaaaaaaaaab
mul rcx
shr rdx, 1
cmp r14w, 1
sbb rdx, 0
lea r8, [rdx + 2]
mov rcx, r12
mov rdx, rdi
call fcn.14008f4b0
mov rax, qword [rsp + 0x238]
jmp 0x1400b3c07
mov rbx, qword [rsp + 0x240]
mov qword [rsp + 0xd0], rbx
movups xmm0, xmmword [rsp + 0x230]
movaps xmmword [rsp + 0xc0], xmm0
cmp rbx, qword [rsp + 0xc0]
jne 0x1400b3d69
lea rcx, [rsp + 0xc0]
mov rdx, rbx
call fcn.14008f360
mov r8, qword [rsp + 0xb0]
mov rbx, qword [rsp + 0xd0]
jmp 0x1400b3d71
mov r8, qword [rsp + 0xb0]
mov r14, qword [rsp + 0xc8]
mov word [r14 + rbx*2], 0x22
inc rbx
mov qword [rsp + 0xd0], rbx
lea rax, [r8 + r8]
xor ecx, ecx
lea rdi, str.Windows_file_names_may_not_contain_____or_end_with___
mov rdx, qword [rsp + 0x80]
cmp rax, rcx
je 0x1400b3db5
cmp word [rdx + rcx], 0x22
lea rcx, [rcx + 2]
jne 0x1400b3da0
jmp 0x1400b442d
mov rax, qword [rsp + 0x80]
movzx eax, word [rax + r8*2 - 2]
cmp ax, 0x5c
je 0x1400b442d
lea rdi, [r8 - 1]
xor r12d, r12d
test ax, ax
mov rax, qword [rsp + 0x80]
cmove r12, rax
test r12, r12
cmove rdi, r8
cmove r12, rax
mov rbp, qword [rsp + 0xc0]
mov rax, rbp
sub rax, rbx
cmp rax, rdi
jae 0x1400b3e2c
lea rcx, [rsp + 0xc0]
mov rdx, rbx
mov r8, rdi
call fcn.14008f4b0
mov rbx, qword [rsp + 0xd0]
mov rbp, qword [rsp + 0xc0]
mov r14, qword [rsp + 0xc8]
lea r8, [rdi + rdi]
lea rcx, [r14 + rbx*2]
mov rdx, r12
call sub.msvcrt.dll_memcpy
add rbx, rdi
mov qword [rsp + 0xd0], rbx
cmp rbx, rbp
jne 0x1400b3e6c
lea rcx, [rsp + 0xc0]
mov rdx, rbp
call fcn.14008f360
mov r14, qword [rsp + 0xc8]
mov rbx, qword [rsp + 0xd0]
lea rax, [rbx + 1]
mov word [r14 + rbx*2], 0x22
mov qword [rsp + 0xd0], rax
cmp byte [rsp + 0x68], 0
je 0x1400b4376
mov rax, qword [rsp + 0x60]
shl rax, 3
lea r14, [rax + rax*4]
lea rbx, [rsp + 0xc0]
test r14, r14
je 0x1400b4482
mov rdx, qword [rsp + 0xd0]
cmp rdx, qword [rsp + 0xc0]
jne 0x1400b3eca
mov rcx, rbx
call fcn.14008f360
mov rdx, qword [rsp + 0xd0]
mov rax, qword [rsp + 0xc8]
mov word [rax + rdx*2], 0x20
inc rdx
mov qword [rsp + 0xd0], rdx
mov rcx, rbx
mov rdx, rsi
mov r8b, 1
call fcn.1400b6d30
mov rdi, rax
add rsi, 0x28
add r14, 0xffffffffffffffd8
test rax, rax
je 0x1400b3e9f
jmp 0x1400b442d
xorps xmm0, xmm0
movups xmmword [rsp + 0xf4], xmm0
movups xmmword [rsp + 0xe8], xmm0
movups xmmword [rsp + 0xd8], xmm0
movups xmmword [rsp + 0xc8], xmm0
movups xmmword [rsp + 0x108], xmm0
movups xmmword [rsp + 0x118], xmm0
test rcx, rcx
jne 0x1400b3f4e
test rdi, rdi
jne 0x1400b3f4e
cmp qword [rsp + 0xb8], 0
je 0x1400b3f79
mov dword [rsp + 0xfc], 0x100
mov rax, qword [rsp + 0xb8]
mov qword [rsp + 0x110], rax
mov qword [rsp + 0x118], rdi
mov qword [rsp + 0x120], rcx
mov rdx, qword [rsp + 0xa8]
mov rbx, qword [rdx + 0xb8]
test rbx, rbx
mov qword [rsp + 0x1d8], rcx
je 0x1400b4087
add rdx, 0xa8
mov dword [rsp + 0xc0], 0x70
lea rcx, [rsp + 0x210]
call fcn.1400b78a0
mov rdx, qword [rsp + 0x210]
mov rcx, qword [rsp + 0x218]
test rdx, rdx
je 0x1400b4234
mov qword [rsp + 0xa8], rcx
or r15d, 0x80000
mov rax, qword [rsp + 0x120]
mov qword [rsp + 0x290], rax
movups xmm0, xmmword [rsp + 0x110]
movaps xmmword [rsp + 0x280], xmm0
movups xmm0, xmmword [rsp + 0x100]
movaps xmmword [rsp + 0x270], xmm0
movups xmm0, xmmword [rsp + 0xc0]
movups xmm1, xmmword [rsp + 0xd0]
movups xmm2, xmmword [rsp + 0xe0]
movups xmm3, xmmword [rsp + 0xf0]
movaps xmmword [rsp + 0x260], xmm3
movaps xmmword [rsp + 0x250], xmm2
movaps xmmword [rsp + 0x240], xmm1
movaps xmmword [rsp + 0x230], xmm0
mov qword [rsp + 0x220], rdx
mov qword [rsp + 0x298], rdx
lea rax, [rsp + 0x230]
jmp 0x1400b409a
lea rcx, str.called__Option::unwrap____on_a__None__value
lea r8, [0x14012daa0]
mov edx, 0x2b
call fcn.14000b310
jmp 0x1400b47d9
mov dword [rsp + 0xc0], 0x68
lea rax, [rsp + 0xc0]
mov rdx, qword [rsp + 0x138]
lea rcx, [rsp + 0x150]
mov qword [rsp + 0x48], rcx
mov qword [rsp + 0x40], rax
mov qword [rsp + 0x38], r12
mov rax, qword [rsp + 0x228]
mov qword [rsp + 0x30], rax
mov dword [rsp + 0x28], r15d
mov r15, rdx
mov dword [rsp + 0x20], 1
mov rcx, qword [rsp + 0x70]
xor r8d, r8d
xor r9d, r9d
call sub.kernel32.dll_CreateProcessW
test eax, eax
je 0x1400b41fb
movups xmm0, xmmword [rsp + 0x170]
movups xmm1, xmmword [rsp + 0x180]
movups xmm2, xmmword [rsp + 0x190]
mov rax, qword [rsp + 0x50]
movups xmmword [rax + 0x30], xmm2
movups xmmword [rax + 0x20], xmm1
movups xmmword [rax + 0x10], xmm0
movaps xmm0, xmmword [rsp + 0x150]
movups xmmword [rax], xmm0
test rbx, rbx
je 0x1400b413c
mov rcx, qword [rsp + 0x220]
mov rdx, qword [rsp + 0xa8]
call fcn.1400b7c60
mov rcx, qword [rsp + 0x1d8]
call sub.kernel32.dll_CloseHandle
mov rcx, rdi
call sub.kernel32.dll_CloseHandle
mov rcx, qword [rsp + 0xb8]
call sub.kernel32.dll_CloseHandle
lea rcx, [rsp + 0x88]
call fcn.1400b7ca0
cmp qword [rsp + 0x1e8], 0
je 0x1400b4188
mov edx, 2
mov rcx, qword [rsp + 0x1e0]
call fcn.140007440
cmp qword [rsp + 0x68], 0
je 0x1400b41a2
mov edx, 2
mov rcx, qword [rsp + 0xb0]
call fcn.140007440
cmp qword [rsp + 0x130], 0
je 0x1400b41ba
mov edx, 2
mov rcx, r15
call fcn.140007440
cmp qword [rsp + 0x58], 0
je 0x1400b41d1
mov edx, 2
mov rcx, qword [rsp + 0x70]
call fcn.140007440
cmp qword [rsp + 0x78], 0
setne al
mov ecx, dword [rsp + 0x60]
xor cl, 1
test al, cl
je 0x1400b266b
mov edx, 2
mov rcx, r14
call fcn.140007440
jmp 0x1400b266b
call sub.kernel32.dll_GetLastError
shl rax, 0x20
or rax, 2
mov rcx, qword [rsp + 0x50]
mov qword [rcx], rax
mov qword [rcx + 0x10], 2
test rbx, rbx
je 0x1400b4244
mov rcx, qword [rsp + 0x220]
mov rdx, qword [rsp + 0xa8]
call fcn.1400b7c60
jmp 0x1400b4244
mov rax, qword [rsp + 0x50]
mov qword [rax], rcx
mov qword [rax + 0x10], 2
mov rcx, qword [rsp + 0x1d8]
call sub.kernel32.dll_CloseHandle
mov rcx, rdi
call sub.kernel32.dll_CloseHandle
mov rcx, qword [rsp + 0xb8]
call sub.kernel32.dll_CloseHandle
cmp qword [rsp + 0x170], 0
je 0x1400b427e
mov rcx, qword [rsp + 0x178]
call sub.kernel32.dll_CloseHandle
cmp qword [rsp + 0x180], 0
je 0x1400b4296
mov rcx, qword [rsp + 0x188]
call sub.kernel32.dll_CloseHandle
cmp qword [rsp + 0x190], 0
je 0x1400b42ae
mov rcx, qword [rsp + 0x198]
call sub.kernel32.dll_CloseHandle
test r13b, r13b
je 0x1400b42cb
test bpl, bpl
jne 0x1400b42ec
mov rax, qword [0x14016a148]
test rax, rsi
je 0x1400b42ec
call fcn.1400926d0
jmp 0x1400b42e1
test bpl, bpl
jne 0x1400b42ec
mov rax, qword [0x14016a148]
test rax, rsi
je 0x1400b42ec
call fcn.1400926d0
test al, al
jne 0x1400b42ec
mov byte [0x14016a110], 1
lea rcx, [0x14016a108]
call fcn.1400cf99c
cmp qword [rsp + 0x1e8], 0
je 0x1400b4315
mov edx, 2
mov rcx, qword [rsp + 0x1e0]
call fcn.140007440
cmp qword [rsp + 0x68], 0
je 0x1400b432f
mov edx, 2
mov rcx, qword [rsp + 0xb0]
call fcn.140007440
cmp qword [rsp + 0x130], 0
je 0x1400b434c
mov rcx, qword [rsp + 0x138]
mov edx, 2
call fcn.140007440
cmp qword [rsp + 0x58], 0
je 0x1400b4363
mov edx, 2
mov rcx, qword [rsp + 0x70]
call fcn.140007440
mov sil, 1
cmp byte [rsp + 0x60], 0
jne 0x1400b266b
jmp 0x1400b286c
mov rax, qword [rsp + 0x60]
lea rax, [rax + rax*4]
lea r14, [rsi + rax*8]
lea rbx, [rsp + 0xc0]
lea r12, str._t____________
cmp rsi, r14
je 0x1400b4482
mov rdx, qword [rsp + 0xd0]
cmp rdx, qword [rsp + 0xc0]
jne 0x1400b43bd
mov rcx, rbx
call fcn.14008f360
mov rdx, qword [rsp + 0xd0]
mov rax, qword [rsp + 0xc8]
mov word [rax + rdx*2], 0x20
inc rdx
mov qword [rsp + 0xd0], rdx
cmp qword [rsi], 0
je 0x1400b43e0
xor edi, edi
jmp 0x1400b440f
mov r15, qword [rsi + 0x10]
mov r13, qword [rsi + 0x18]
xor ebp, ebp
cmp r13, rbp
setne dil
je 0x1400b440f
movzx ecx, byte [r15 + rbp]
mov r8d, 0x16
mov rdx, r12
call fcn.140010370
inc rbp
cmp rax, 1
jne 0x1400b43ea
mov rcx, rbx
mov rdx, rsi
mov r8d, edi
call fcn.1400b6d30
mov rdi, rax
add rsi, 0x28
test rax, rax
je 0x1400b4392
cmp qword [rsp + 0xc0], 0
je 0x1400b444a
mov rcx, qword [rsp + 0xc8]
mov edx, 2
call fcn.140007440
mov r14, qword [rsp + 0x80]
mov rax, qword [rsp + 0x50]
mov qword [rax], rdi
mov qword [rax + 0x10], 2
cmp qword [rsp + 0x58], 0
je 0x1400b286a
mov edx, 2
mov rcx, qword [rsp + 0x70]
call fcn.140007440
jmp 0x1400b286a
mov rax, qword [rsp + 0xc0]
mov rdx, qword [rsp + 0xd0]
cmp rdx, rax
jne 0x1400b44b4
lea rcx, [rsp + 0xc0]
call fcn.14008f360
mov rax, qword [rsp + 0xc0]
mov rdx, qword [rsp + 0xd0]
mov rdi, qword [rsp + 0xc8]
mov word [rdi + rdx*2], 0x22
movabs r13, 0x8000000000000000
cmp rax, r13
je 0x1400b444a
inc rdx
mov dword [rsp + 0x60], 0
mov r15, qword [rsp + 0xa8]
mov r14, qword [rsp + 0x80]
jmp 0x1400b28c5
mov rdi, rbx
jmp 0x1400b31ac
call sub.kernel32.dll_GetLastError
shl rax, 0x20
or rax, 2
mov qword [rsp + 0x88], rax
lea rax, [rsp + 0x88]
mov qword [rsp + 0x170], rax
lea rax, [fcn.1400ac610]
mov qword [rsp + 0x178], rax
lea rax, str.comparing_environment_keys_failed:
mov qword [rsp + 0xc0], rax
mov qword [rsp + 0xc8], 1
mov qword [rsp + 0xe0], 0
lea rax, [rsp + 0x170]
mov qword [rsp + 0xd0], rax
mov qword [rsp + 0xd8], 1
lea rdx, str.library_std_src_syswindowsprocess.rs
lea rcx, [rsp + 0xc0]
call fcn.14000a5d0
jmp 0x1400b47d9
lea rcx, str.called__Option::unwrap____on_a__None__value
lea r8, [0x14012cfa0]
mov edx, 0x2b
call fcn.14000b310
jmp 0x1400b47d9
mov ecx, 2
mov rdx, r13
call fcn.1400078e0
jmp 0x1400b47d9
call fcn.1400078a0
jmp 0x1400b47d9
mov ecx, 1
mov rdx, rsi
call fcn.1400078e0
jmp 0x1400b47d9
call fcn.1400078a0
jmp 0x1400b47d9
mov ecx, 1
mov rdx, rdi
call fcn.1400078e0
jmp 0x1400b47d9
call fcn.1400078a0
jmp 0x1400b47d9
lea r8, str.library_std_src_syswindowsos.rs
mov ecx, 1
xor edx, edx
call fcn.14000a610
jmp 0x1400b47d9
lea rax, str.library_std_src_syswindowsos.rs
mov rcx, r8
mov rdx, rbx
mov r8, rax
call fcn.14000af70
jmp 0x1400b47d9
lea r8, str.library_std_src_syswindowsos.rs
mov rcx, rbp
mov rdx, rbx
call fcn.14000a610
jmp 0x1400b47d9
lea rcx, str.assertion_failed:_self.height___0
lea r8, [0x14012d770]
mov edx, 0x21
call fcn.14000b310
jmp 0x1400b47d9
mov ecx, 1
mov rdx, r12
call fcn.1400078e0
jmp 0x1400b47d9
lea rcx, str.internal_error:_entered_unreachable_code
lea r8, str.library_std_src_syswindowsmod.rs
mov edx, 0x28
call fcn.14000b310
jmp 0x1400b47d9
call sub.kernel32.dll_GetLastError
shl rax, 0x20
or rax, 2
mov qword [rsp + 0x88], rax
lea rax, [rsp + 0x88]
mov qword [rsp + 0x170], rax
lea rax, [fcn.1400ac610]
mov qword [rsp + 0x178], rax
lea rax, str.failure_getting_env_string_from_OS:
mov qword [rsp + 0x230], rax
mov qword [rsp + 0x238], 1
mov qword [rsp + 0x250], 0
lea rax, [rsp + 0x170]
mov qword [rsp + 0x240], rax
mov qword [rsp + 0x248], 1
lea rdx, str.library_std_src_syswindowsos.rs
lea rcx, [rsp + 0x230]
call fcn.14000a5d0
jmp 0x1400b47d9
lea rcx, str.internal_error:_entered_unreachable_code
lea r8, str.library_std_src_syswindowsmod.rs
mov edx, 0x28
call fcn.14000b310
jmp 0x1400b47d9
call fcn.1400078a0
jmp 0x1400b47d9
lea rcx, str.internal_error:_entered_unreachable_code
lea r8, str.library_std_src_syswindowsmod.rs
mov edx, 0x28
call fcn.14000b310
jmp 0x1400b47d9
lea r8, str._rustc_07dca489ac2d933c78d3c5158e3f43beefeb02celibrarycore_src_sliceiter.rs
call fcn.14000a610
jmp 0x1400b47d9
lea rax, str.library_std_src_syswindowsmod.rs
mov rcx, r8
mov rdx, r14
mov r8, rax
call fcn.14000af70
jmp 0x1400b47d9
lea rax, str.library_std_src_syswindowsmod.rs
mov rcx, r8
mov rdx, r13
mov r8, rax
call fcn.14000af70
jmp 0x1400b47d9
lea r8, str.library_std_src_syswindowsmod.rs
mov rcx, rsi
mov rdx, r13
call fcn.14000af70
jmp 0x1400b47d9
mov ecx, 2
mov rdx, rbx
call fcn.1400078e0
jmp 0x1400b47d9
call fcn.1400078a0
jmp 0x1400b47d9
mov ecx, 2
mov edx, 0xc
call fcn.1400078e0
ud2