Function at 0x140049760
Capabilities:
Create process on windows
Encrypt data using speck
Get common file path
Query environment variable

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x648
movdqa xmmword [rsp + 0x630], xmm6
mov qword [rsp + 0x1c8], r8
mov r15, rdx
mov qword [rsp + 0x58], rcx
movzx eax, byte [rdx + 0xa0]
mov rbp, qword [rdx + 0x98]
test al, al
mov byte [rsp + 0x168], r9b
jne 0x1400497c8
test rbp, rbp
jne 0x1400497c8
mov qword [rsp + 0x1e0], 0
xor eax, eax
mov qword [rsp + 0x88], rax
xor ebp, ebp
jmp 0x14004a4a2
mov qword [rsp + 0x130], 0
mov qword [rsp + 0x140], 0
test al, al
mov qword [rsp + 0xb0], r15
jne 0x140049a16
mov qword [rsp + 0x88], rbp
call sub.kernel32.dll_GetEnvironmentStringsW
test rax, rax
je 0x14004cf3e
lea rdi, [rsp + 0x170]
lea r14, [rsp + 0x220]
mov qword [rsp + 0x60], rax
mov r15, rax
nop
cmp word [r15], 0
je 0x1400499fc
mov r13, r15
mov rcx, 0xfffffffffffffffe
xor edx, edx
nop word [rax + rax]
mov rbx, rdx
mov rax, rcx
inc rdx
add rcx, 2
cmp word [r13 + rbx*2], 0
jne 0x140049840
lea r15, [rdx*2]
add r15, r13
cmp rbx, 1
je 0x140049820
test rbx, rbx
je 0x14004cea9
xor ebp, ebp
nop word cs:[rax + rax]
cmp word [r13 + rbp*2 + 2], 0x3d
je 0x1400498a0
inc rbp
add rax, 0xfffffffffffffffe
jne 0x140049880
jmp 0x140049820
lea r8, [rbp + 1]
cmp rbp, rbx
jae 0x14004cec1
mov rcx, rdi
mov rdx, r13
call fcn.1400296e0
add rbp, 2
mov r8, rbx
sub r8, rbp
jb 0x14004cedb
lea rdx, [rbp*2]
add rdx, r13
mov rcx, r14
call fcn.1400296e0
mov rsi, qword [rsp + 0x170]
mov r13, qword [rsp + 0x178]
movdqu xmm6, xmmword [rsp + 0x180]
mov rbp, qword [rsp + 0x220]
mov rbx, qword [rsp + 0x228]
lea rax, [rsp + 0x240]
movups xmm0, xmmword [rax - 0x10]
movaps xmmword [rsp + 0x150], xmm0
movabs rax, 0x8000000000000000
cmp rsi, rax
je 0x1400499fc
movq rax, xmm6
add rax, r13
mov qword [rsp + 0x170], r13
mov qword [rsp + 0x178], rax
mov word [rsp + 0x180], 0
lea r12, [rsp + 0x90]
mov rcx, r12
mov rdx, rdi
call fcn.14004d7e0
mov qword [rsp + 0x220], rsi
mov qword [rsp + 0x228], r13
movdqu xmmword [rsp + 0x230], xmm6
mov rax, qword [rsp + 0xa0]
lea rcx, [rsp + 0x240]
mov qword [rcx + 0x10], rax
movups xmm0, xmmword [rsp + 0x90]
movups xmmword [rcx], xmm0
mov qword [rsp + 0x170], rbp
mov qword [rsp + 0x178], rbx
movaps xmm0, xmmword [rsp + 0x150]
lea rax, [rsp + 0x180]
movups xmmword [rax], xmm0
mov rcx, r12
lea rdx, [rsp + 0x130]
mov r8, r14
mov r9, rdi
call fcn.14004d9f0
mov rax, qword [rsp + 0x90]
shl rax, 1
test rax, rax
je 0x140049820
mov rcx, qword [rsp + 0x98]
mov edx, 1
call fcn.14000a8d0
jmp 0x140049820
mov rcx, qword [rsp + 0x60]
call sub.kernel32.dll_FreeEnvironmentStringsW
mov r15, qword [rsp + 0xb0]
mov rbp, qword [rsp + 0x88]
movabs rcx, 0x3ffffffffffffffe
mov rax, qword [r15 + 0x88]
mov rsi, qword [r15 + 0x90]
xor r13d, r13d
test rax, rax
setne r13b
cmove rbp, rax
xor r15d, r15d
inc rcx
mov qword [rsp + 0x70], rcx
jmp 0x140049a52
xor eax, eax
test rbp, rbp
je 0x14004a2c4
test r13, r13
je 0x140049ab0
test r15, r15
jne 0x140049ab0
mov r13d, 1
test rsi, rsi
je 0x140049aba
mov rdx, rsi
and rdx, 7
je 0x140049abf
mov rcx, rsi
and rcx, 0xfffffffffffffff8
mov r15, rax
nop word cs:[rax + rax]
mov r15, qword [r15 + 0x3d8]
dec rdx
jne 0x140049a90
cmp rsi, 8
jae 0x140049ad0
jmp 0x140049b0e
test r13, r13
jne 0x140049b12
jmp 0x14004ce44
mov r15, rax
jmp 0x140049b0e
mov r15, rax
mov rcx, rsi
cmp rsi, 8
jb 0x140049b0e
nop dword [rax + rax]
mov rax, qword [r15 + 0x3d8]
mov rax, qword [rax + 0x3d8]
mov rax, qword [rax + 0x3d8]
mov rax, qword [rax + 0x3d8]
mov rax, qword [rax + 0x3d8]
mov rax, qword [rax + 0x3d8]
mov rax, qword [rax + 0x3d8]
mov r15, qword [rax + 0x3d8]
add rcx, 0xfffffffffffffff8
jne 0x140049ad0
xor esi, esi
xor eax, eax
movzx ecx, word [r15 + 0x3d2]
mov r14, r15
mov r12, rsi
cmp rsi, rcx
jb 0x140049b58
nop word cs:[rax + rax]
mov rcx, qword [r14 + 0x160]
test rcx, rcx
je 0x14004c92a
inc rax
movzx r12d, word [r14 + 0x3d0]
mov r14, rcx
cmp r12w, word [rcx + 0x3d2]
jae 0x140049b30
test rax, rax
je 0x140049bf0
mov r15, qword [r14 + r12*8 + 0x3e0]
mov rcx, rax
dec rcx
je 0x140049bde
mov rdx, rcx
and rdx, 7
je 0x140049b95
mov rcx, rdx
nop dword [rax]
mov r15, qword [r15 + 0x3d8]
dec rcx
jne 0x140049b80
not rdx
add rdx, rax
mov rcx, rdx
add rax, 0xfffffffffffffffe
cmp rax, 7
jb 0x140049bde
nop
mov rax, qword [r15 + 0x3d8]
mov rax, qword [rax + 0x3d8]
mov rax, qword [rax + 0x3d8]
mov rax, qword [rax + 0x3d8]
mov rax, qword [rax + 0x3d8]
mov rax, qword [rax + 0x3d8]
mov rax, qword [rax + 0x3d8]
mov r15, qword [rax + 0x3d8]
add rcx, 0xfffffffffffffff8
jne 0x140049ba0
xor esi, esi
jmp 0x140049bf8
lea rsi, [r12 + 1]
mov r15, r14
dec rbp
imul rax, r12, 0x38
lea rbx, [r14 + rax]
add rbx, 0x168
shl r12, 5
movabs rax, 0x8000000000000000
cmp qword [r14 + r12], rax
jne 0x140049c90
mov rdi, qword [rsp + 0x130]
mov eax, 0
test rdi, rdi
je 0x140049a52
mov r12, rsi
mov rsi, r13
mov r13, rbp
mov r9, qword [rbx + 0x28]
mov rax, qword [rbx + 0x30]
mov rbp, qword [rsp + 0x138]
mov qword [rsp + 0x20], rax
lea rcx, [rsp + 0x90]
mov rdx, rdi
mov r8, rbp
call fcn.14004ed80
cmp qword [rsp + 0x90], 0
je 0x140049e5a
xor eax, eax
mov rbp, r13
mov r13, rsi
mov rsi, r12
jmp 0x140049a52
mov qword [rsp + 0x80], rsi
mov rsi, qword [rbx + 8]
mov rdi, qword [rbx + 0x10]
test rdi, rdi
mov qword [rsp + 0x88], rbp
je 0x140049cce
js 0x14004ce9f
movzx eax, byte [0x1402641d8]
xor ecx, ecx
mov rdx, rdi
call fcn.140053b40
test rax, rax
jne 0x140049cd3
jmp 0x14004ce8d
mov eax, 1
mov qword [rsp + 0x60], rax
mov rcx, rax
mov rdx, rsi
mov r8, rdi
call sub.msvcrt.dll_memcpy
movzx eax, byte [rbx + 0x18]
mov byte [rsp + 0x68], al
mov rsi, qword [rbx + 0x28]
mov rbp, qword [rbx + 0x30]
test rbp, rbp
mov qword [rsp + 0x78], r13
je 0x140049d32
cmp rbp, qword [rsp + 0x70]
ja 0x14004ce67
lea r13, [rbp*2]
movzx eax, byte [0x1402641d8]
xor ecx, ecx
mov rdx, r13
call fcn.140053b40
test rax, rax
je 0x14004ce55
mov rbx, rax
jmp 0x140049d3a
mov ebx, 2
xor r13d, r13d
add r14, r12
mov rcx, rbx
mov rdx, rsi
mov r8, r13
call sub.msvcrt.dll_memcpy
mov qword [rsp + 0x220], rdi
mov rax, qword [rsp + 0x60]
mov qword [rsp + 0x228], rax
mov qword [rsp + 0x230], rdi
movzx eax, byte [rsp + 0x68]
mov byte [rsp + 0x238], al
mov qword [rsp + 0x240], rbp
mov qword [rsp + 0x248], rbx
mov qword [rsp + 0x250], rbp
mov r13, qword [r14 + 8]
mov rsi, qword [r14 + 0x10]
test rsi, rsi
je 0x140049dbd
js 0x14004ce83
movzx eax, byte [0x1402641d8]
xor ecx, ecx
mov rdx, rsi
call fcn.140053b40
mov r12, rax
test rax, rax
jne 0x140049dc3
jmp 0x14004ce71
mov r12d, 1
mov rcx, r12
mov rdx, r13
mov r8, rsi
call sub.msvcrt.dll_memcpy
movzx eax, byte [r14 + 0x18]
mov qword [rsp + 0x170], rsi
mov qword [rsp + 0x178], r12
mov qword [rsp + 0x180], rsi
mov byte [rsp + 0x188], al
lea rcx, [rsp + 0x90]
lea rdx, [rsp + 0x130]
lea r8, [rsp + 0x220]
lea r9, [rsp + 0x170]
call fcn.14004d9f0
mov rax, qword [rsp + 0x90]
shl rax, 1
test rax, rax
mov rbp, qword [rsp + 0x88]
mov r13, qword [rsp + 0x78]
mov rsi, qword [rsp + 0x80]
je 0x140049a50
mov rcx, qword [rsp + 0x98]
mov edx, 1
call fcn.14000a8d0
jmp 0x140049a50
mov rax, qword [rsp + 0x98]
mov rdx, qword [rsp + 0xa0]
mov rcx, qword [rsp + 0xa8]
mov byte [rsp + 0x200], 0
test rdx, rdx
je 0x14004a022
mov rax, qword [rax + rcx*8 + 0x3d8]
mov rcx, rdx
dec rcx
je 0x140049f5e
mov r8, rcx
and r8, 7
je 0x140049ece
mov rcx, r8
nop word cs:[rax + rax]
movzx r9d, word [rax + 0x3d2]
mov rax, qword [rax + r9*8 + 0x3d8]
dec rcx
jne 0x140049eb0
not r8
add r8, rdx
mov rcx, r8
add rdx, 0xfffffffffffffffe
cmp rdx, 7
jb 0x140049f5e
nop dword [rax]
movzx edx, word [rax + 0x3d2]
mov rax, qword [rax + rdx*8 + 0x3d8]
movzx edx, word [rax + 0x3d2]
mov rax, qword [rax + rdx*8 + 0x3d8]
movzx edx, word [rax + 0x3d2]
mov rax, qword [rax + rdx*8 + 0x3d8]
movzx edx, word [rax + 0x3d2]
mov rax, qword [rax + rdx*8 + 0x3d8]
movzx edx, word [rax + 0x3d2]
mov rax, qword [rax + rdx*8 + 0x3d8]
movzx edx, word [rax + 0x3d2]
mov rax, qword [rax + rdx*8 + 0x3d8]
movzx edx, word [rax + 0x3d2]
mov rax, qword [rax + rdx*8 + 0x3d8]
movzx edx, word [rax + 0x3d2]
mov rax, qword [rax + rdx*8 + 0x3d8]
add rcx, 0xfffffffffffffff8
jne 0x140049ee0
movzx ecx, word [rax + 0x3d2]
dec rcx
mov qword [rsp + 0x150], rax
mov qword [rsp + 0x158], 0
mov qword [rsp + 0x160], rcx
lea rcx, [rsp + 0x220]
lea rdx, [rsp + 0x150]
lea r8, [rsp + 0x200]
call fcn.14004eed0
mov rax, qword [rsp + 0x270]
mov qword [rsp + 0x1c0], rax
movups xmm0, xmmword [rsp + 0x260]
movaps xmmword [rsp + 0x1b0], xmm0
movups xmm0, xmmword [rsp + 0x220]
movups xmm1, xmmword [rsp + 0x230]
movups xmm2, xmmword [rsp + 0x240]
movups xmm3, xmmword [rsp + 0x250]
movaps xmmword [rsp + 0x1a0], xmm3
movaps xmmword [rsp + 0x190], xmm2
movaps xmmword [rsp + 0x180], xmm1
movaps xmmword [rsp + 0x170], xmm0
mov rdx, qword [rsp + 0x278]
mov rax, qword [rsp + 0x288]
movzx ecx, word [rdx + 0x3d2]
cmp rax, rcx
jae 0x14004a060
mov rcx, rdx
jmp 0x14004a099
mov qword [rsp + 0x170], rax
mov qword [rsp + 0x178], 0
mov qword [rsp + 0x180], rcx
lea rcx, [rsp + 0x220]
lea rdx, [rsp + 0x170]
lea r8, [rsp + 0x200]
call fcn.14004eed0
jmp 0x14004a1b1
mov r8, qword [rsp + 0x280]
nop dword [rax + rax]
mov rcx, qword [rdx + 0x160]
test rcx, rcx
je 0x14004a094
inc r8
movzx eax, word [rdx + 0x3d0]
mov rdx, rcx
cmp ax, word [rcx + 0x3d2]
jae 0x14004a070
jmp 0x14004a099
mov rax, r8
xor ecx, ecx
imul rdx, rax, 0x38
shl rax, 5
mov r8, qword [rcx + rdx + 0x198]
mov qword [rsp + 0xf0], r8
movups xmm0, xmmword [rcx + rdx + 0x168]
movups xmm1, xmmword [rcx + rdx + 0x178]
movups xmm2, xmmword [rcx + rdx + 0x188]
movaps xmmword [rsp + 0xe0], xmm2
movaps xmmword [rsp + 0xd0], xmm1
movaps xmmword [rsp + 0xc0], xmm0
mov r8, qword [rsp + 0x1a0]
mov qword [rcx + rdx + 0x198], r8
movaps xmm0, xmmword [rsp + 0x170]
movaps xmm1, xmmword [rsp + 0x180]
movaps xmm2, xmmword [rsp + 0x190]
movups xmmword [rcx + rdx + 0x188], xmm2
movups xmmword [rcx + rdx + 0x178], xmm1
movups xmmword [rcx + rdx + 0x168], xmm0
movups xmm0, xmmword [rcx + rax]
movups xmm1, xmmword [rcx + rax + 0x10]
lea rdx, [rsp + 0xf8]
movups xmmword [rdx + 0x10], xmm1
movups xmmword [rdx], xmm0
lea rdx, [rsp + 0x1a8]
movups xmm0, xmmword [rdx]
movups xmm1, xmmword [rdx + 0x10]
movups xmmword [rcx + rax], xmm0
movups xmmword [rcx + rax + 0x10], xmm1
mov rax, qword [rsp + 0x110]
mov qword [rsp + 0x270], rax
movaps xmm0, xmmword [rsp + 0x100]
movaps xmmword [rsp + 0x260], xmm0
movaps xmm0, xmmword [rsp + 0xc0]
movaps xmm1, xmmword [rsp + 0xd0]
movaps xmm2, xmmword [rsp + 0xe0]
movaps xmm3, xmmword [rsp + 0xf0]
movaps xmmword [rsp + 0x250], xmm3
movaps xmmword [rsp + 0x240], xmm2
movaps xmmword [rsp + 0x230], xmm1
movaps xmmword [rsp + 0x220], xmm0
mov rbx, qword [rsp + 0x220]
mov r14, qword [rsp + 0x228]
mov rax, qword [rsp + 0x240]
mov qword [rsp + 0x60], rax
mov rax, qword [rsp + 0x248]
mov qword [rsp + 0x80], rax
dec qword [rsp + 0x140]
mov rax, qword [rsp + 0x258]
mov qword [rsp + 0x68], rax
mov rax, qword [rsp + 0x260]
mov qword [rsp + 0xb8], rax
cmp byte [rsp + 0x200], 0
je 0x14004a248
test rbp, rbp
je 0x14004cef2
mov rax, qword [rdi + 0x3d8]
mov qword [rsp + 0x130], rax
dec rbp
mov qword [rsp + 0x138], rbp
mov qword [rax + 0x160], 0
mov edx, 8
mov rcx, rdi
call fcn.14000a8d0
mov eax, 0
movabs rcx, 0x8000000000000000
cmp rbx, rcx
mov rbp, r13
mov r13, rsi
mov rsi, r12
je 0x140049a52
test rbx, rbx
je 0x14004a27b
mov edx, 1
mov rcx, r14
call fcn.14000a8d0
cmp qword [rsp + 0x60], 0
je 0x14004a295
mov edx, 2
mov rcx, qword [rsp + 0x80]
call fcn.14000a8d0
mov rcx, qword [rsp + 0x68]
shl rcx, 1
mov eax, 0
test rcx, rcx
je 0x140049a52
mov edx, 1
mov rcx, qword [rsp + 0xb8]
call fcn.14000a8d0
xor eax, eax
jmp 0x140049a52
mov rax, qword [rsp + 0x140]
mov qword [rsp + 0x1f8], rax
movups xmm0, xmmword [rsp + 0x130]
movups xmmword [rsp + 0x1e8], xmm0
mov qword [rsp + 0x1e0], 1
movzx eax, byte [0x1402641d8]
mov r12d, 4
mov edx, 4
xor ecx, ecx
call fcn.140053b40
test rax, rax
je 0x14004cf0f
mov rsi, rax
mov dword [rax], 0x48544150
add rax, 4
mov qword [rsp + 0xc0], rsi
mov qword [rsp + 0xc8], rax
mov word [rsp + 0xd0], 0
lea rcx, [rsp + 0x170]
lea rdx, [rsp + 0xc0]
call fcn.14004d7e0
mov qword [rsp + 0x220], 4
mov qword [rsp + 0x228], rsi
mov qword [rsp + 0x230], 4
mov byte [rsp + 0x238], 0
movups xmm0, xmmword [rsp + 0x170]
movups xmmword [rsp + 0x240], xmm0
mov r15, qword [rsp + 0x180]
mov qword [rsp + 0x250], r15
mov rdi, qword [rsp + 0x248]
mov r14, qword [rsp + 0x1e8]
test r14, r14
mov qword [rsp + 0x60], rsi
je 0x14004a460
mov r12, qword [rsp + 0x1f0]
lea rcx, [r14 + 0x168]
movzx r13d, word [r14 + 0x3d2]
imul rbx, r13, 0x38
mov rbp, 0xffffffffffffffff
nop word cs:[rax + rax]
test rbx, rbx
je 0x14004a420
lea rsi, [rcx + 0x38]
mov r8, qword [rcx + 0x28]
mov r9d, dword [rcx + 0x30]
mov dword [rsp + 0x20], 1
mov rcx, rdi
mov edx, r15d
call sub.kernel32.dll_CompareStringOrdinal
inc rbp
add rbx, 0xffffffffffffffc8
mov rcx, rsi
cmp eax, 3
je 0x14004a3e0
cmp eax, 1
jne 0x14004a437
jmp 0x14004a423
mov rbp, r13
sub r12, 1
jb 0x14004a86a
mov r14, qword [r14 + rbp*8 + 0x3d8]
jmp 0x14004a3bc
cmp eax, 2
jne 0x14004cdb4
test r14, r14
mov r15, qword [rsp + 0xb0]
je 0x14004a46c
shl rbp, 5
mov rax, qword [r14 + rbp + 8]
mov rbx, qword [r14 + rbp + 0x10]
mov rbp, rax
jmp 0x14004a46e
xor ebp, ebp
mov r15, qword [rsp + 0xb0]
jmp 0x14004a46e
xor ebp, ebp
mov eax, 1
mov qword [rsp + 0x88], rax
mov edx, 1
mov rcx, qword [rsp + 0x60]
call fcn.14000a8d0
cmp qword [rsp + 0x240], 0
je 0x14004a4a2
mov edx, 2
mov rcx, rdi
call fcn.14000a8d0
mov r12, qword [r15 + 0x10]
lea rdi, str.program_path_has_no_file_name
test r12, r12
je 0x14004ae5e
mov rdx, qword [r15 + 8]
cmp r12, 4
jae 0x14004a4c9
lea rax, [0x14004f410]
jmp 0x14004a4f1
mov eax, dword [rdx]
bswap eax
xor ecx, ecx
cmp eax, 0x5c5c3f5c
setb cl
cmp eax, 0x5c5c3f5d
adc ecx, 0xffffffff
lea rcx, [0x14004f400]
lea rax, [0x14004f410]
cmove rax, rcx
mov qword [rsp + 0x68], rdx
movzx esi, byte [r12 + rdx - 1]
mov ecx, esi
call rax
test al, al
jne 0x14004ae5e
cmp r12, 4
jb 0x14004a573
mov r14, qword [rsp + 0x68]
movzx eax, byte [r12 + r14 - 4]
lea ecx, [rax - 0x41]
cmp cl, 0x1a
setb cl
shl cl, 5
or cl, al
cmp cl, 0x2e
jne 0x14004a57c
movzx eax, byte [r14 + r12 - 3]
lea ecx, [rax - 0x41]
cmp cl, 0x1a
setb cl
shl cl, 5
or cl, al
cmp cl, 0x65
jne 0x14004a57c
movzx eax, byte [r14 + r12 - 2]
lea ecx, [rax - 0x41]
cmp cl, 0x1a
setb cl
shl cl, 5
or cl, al
cmp cl, 0x78
jne 0x14004a57c
lea eax, [rsi - 0x41]
cmp al, 0x1a
setb al
shl al, 5
or al, sil
cmp al, 0x65
sete al
jmp 0x14004a57e
xor eax, eax
mov r14, qword [rsp + 0x68]
jmp 0x14004a57e
xor eax, eax
movabs r13, 0x8000000000000000
lea rcx, [r14 + r12]
mov qword [rsp + 0x60], rcx
xor ecx, ecx
nop word cs:[rax + rax]
cmp r12, rcx
je 0x14004a600
movzx edx, byte [r14 + rcx]
cmp edx, 0x5c
je 0x14004a5b7
inc rcx
cmp edx, 0x2f
jne 0x14004a5a0
test al, al
je 0x14004a6d0
lea rcx, [rsp + 0x220]
mov rdx, r14
mov r8, r12
call fcn.140027710
mov rcx, qword [rsp + 0x220]
mov rax, qword [rsp + 0x228]
cmp rcx, r13
jne 0x14004a7ad
mov qword [rsp + 0x138], rax
mov qword [rsp + 0x130], r13
jmp 0x14004ae45
xor r8d, r8d
lea rdi, str.nul_byte_found_in_provided_data
mov rax, r14
jmp 0x14004a61c
xor r8d, r8d
test cx, cx
je 0x14004ae5e
mov cx, 1
test r8w, r8w
jne 0x14004a610
cmp rax, qword [rsp + 0x60]
je 0x14004a80c
movzx edx, byte [rax]
test dl, dl
js 0x14004a63d
inc rax
jmp 0x14004a69c
mov r8d, edx
and r8d, 0x1f
movzx r10d, byte [rax + 1]
and r10d, 0x3f
cmp dl, 0xdf
jbe 0x14004a68e
movzx r9d, byte [rax + 2]
shl r10d, 6
and r9d, 0x3f
or r9d, r10d
cmp dl, 0xf0
jb 0x14004a6a6
movzx edx, byte [rax + 3]
add rax, 4
and r8d, 7
shl r8d, 0x12
shl r9d, 6
and edx, 0x3f
or edx, r9d
or edx, r8d
cmp edx, 0xffff
jbe 0x14004a69c
jmp 0x14004a6bc
add rax, 2
shl r8d, 6
or r8d, r10d
mov edx, r8d
xor r8d, r8d
mov ecx, edx
jmp 0x14004a613
add rax, 3
shl r8d, 0xc
or r9d, r8d
mov edx, r9d
cmp edx, 0xffff
jbe 0x14004a69c
and edx, 0x3ff
or edx, 0xdc00
mov r8d, edx
jmp 0x14004a613
test r12, r12
js 0x14004cfeb
movzx eax, byte [0x1402641d8]
xor ecx, ecx
mov rdx, r12
call fcn.140053b40
test rax, rax
je 0x14004cf0f
mov rsi, rax
mov rcx, rax
mov rdx, r14
mov r8, r12
call sub.msvcrt.dll_memcpy
mov qword [rsp + 0x220], r12
mov qword [rsp + 0x228], rsi
mov qword [rsp + 0x230], r12
mov byte [rsp + 0x238], 0
lea rdx, str..exeprogram_not_found
lea rcx, [rsp + 0x220]
mov r8d, 4
call fcn.140045850
mov rbx, qword [rsp + 0x220]
mov rsi, qword [rsp + 0x228]
mov rdi, qword [rsp + 0x230]
lea rcx, [rsp + 0xc0]
mov rdx, rsi
mov r8, rdi
call fcn.14004f4f0
cmp qword [rsp + 0xc0], r13
jne 0x14004a7e7
mov rcx, rsi
mov rdx, rdi
call fcn.140048af0
test rax, rax
je 0x14004adc4
cmp rdx, 2
jne 0x14004a831
movzx ecx, word [rax]
cmp ecx, 0x2e2e
jne 0x14004a831
mov ecx, 2
xor r8d, r8d
jmp 0x14004ada4
mov rdx, qword [rsp + 0x230]
mov qword [rsp + 0x220], rcx
mov qword [rsp + 0x228], rax
mov qword [rsp + 0x230], rdx
lea rcx, [rsp + 0x130]
lea rdx, [rsp + 0x220]
call fcn.14004f420
jmp 0x14004ae45
mov rax, qword [rsp + 0xd0]
mov qword [rsp + 0x140], rax
movups xmm0, xmmword [rsp + 0xc0]
movaps xmmword [rsp + 0x130], xmm0
jmp 0x14004ae33
cmp r12, 0xf
ja 0x14004a879
xor eax, eax
mov qword [rsp + 0x70], rax
xor eax, eax
nop dword [rax + rax]
cmp byte [r14 + rax], 0x2e
je 0x14004a892
inc rax
cmp r12, rax
jne 0x14004a820
jmp 0x14004a89c
mov rcx, rdx
nop word cs:[rax + rax]
test rcx, rcx
je 0x14004a888
mov r9, rcx
dec rcx
cmp byte [rax + r9 - 1], 0x2e
jne 0x14004a840
test rcx, rcx
je 0x14004ad9e
sub rdx, r9
mov r8, rax
add r8, r9
jmp 0x14004ada4
mov r15, qword [rsp + 0xb0]
xor ebp, ebp
jmp 0x14004a46e
mov cl, 0x2e
mov rdx, r14
mov r8, r12
call fcn.1400112b0
jmp 0x14004a897
mov r8, rax
xor eax, eax
jmp 0x14004ada4
mov eax, 1
mov qword [rsp + 0x70], rax
test rbp, rbp
je 0x14004a8f1
add rbx, rbp
mov qword [rsp + 0xc0], rbp
mov qword [rsp + 0xc8], rbx
mov word [rsp + 0xd0], 0
mov byte [rsp + 0xd8], 1
lea rcx, [rsp + 0x220]
lea rdx, [rsp + 0xc0]
call fcn.140045400
mov rax, qword [rsp + 0x220]
cmp rax, r13
mov r14, qword [rsp + 0x68]
jne 0x14004abe2
lea rcx, [rsp + 0xc0]
call fcn.140045640
mov rbx, qword [rsp + 0xc0]
cmp rbx, r13
jne 0x14004a91d
lea rcx, [rsp + 0xc8]
call fcn.140025090
jmp 0x14004a9e1
mov rsi, qword [rsp + 0xc8]
mov rdi, qword [rsp + 0xd0]
mov r14, qword [rsp + 0xd8]
mov rcx, rsi
mov rdx, rdi
call fcn.140047250
cmp rdi, rdx
cmovb rdx, rdi
test rax, rax
cmove rdx, rdi
mov qword [rsp + 0x220], rbx
mov qword [rsp + 0x228], rsi
mov qword [rsp + 0x230], rdx
mov qword [rsp + 0x238], r14
lea rcx, [rsp + 0x220]
mov rdx, qword [rsp + 0x68]
mov r8, r12
call fcn.140046180
cmp qword [rsp + 0x70], 1
je 0x14004a998
lea rcx, [rsp + 0x220]
call fcn.140048c20
mov rsi, qword [rsp + 0x228]
mov r8, qword [rsp + 0x230]
lea rcx, [rsp + 0x170]
mov rdx, rsi
call fcn.14004f4f0
cmp qword [rsp + 0x220], 0
je 0x14004a9d0
mov edx, 1
mov rcx, rsi
call fcn.14000a8d0
mov r14, qword [rsp + 0x170]
cmp r14, r13
jne 0x14004acef
mov qword [rsp + 0xb0], r15
mov qword [rsp + 0x90], 0
mov qword [rsp + 0x98], 2
mov qword [rsp + 0xa0], 0
mov r8d, 0x200
mov eax, 2
mov qword [rsp + 0x78], rax
xor eax, eax
mov qword [rsp + 0x80], rax
mov r15d, 0xffffffff
xor esi, esi
xor r13d, r13d
cmp r8, 0x201
jb 0x14004aa4f
jmp 0x14004aa70
jae 0x14004ab38
cmp r8, 0x201
jae 0x14004aa70
mov r14d, 0x200
lea rbp, [rsp + 0x220]
mov rbx, r8
jmp 0x14004aad0
sub r8, r13
sub rsi, r13
cmp rsi, r8
jae 0x14004aaa8
lea rcx, [rsp + 0x90]
mov rdx, r13
call fcn.140027c20
mov rax, qword [rsp + 0x90]
mov qword [rsp + 0x80], rax
mov rax, qword [rsp + 0x98]
mov qword [rsp + 0x78], rax
mov rsi, qword [rsp + 0x80]
cmp rsi, r15
mov r13d, 0xffffffff
cmovb r13, rsi
mov qword [rsp + 0xa0], r13
mov r14, r13
mov rbp, qword [rsp + 0x78]
mov rbx, r13
xor ecx, ecx
call sub.kernel32.dll_SetLastError
mov rcx, rbp
mov edx, ebx
call sub.kernel32.dll_GetSystemDirectoryW
mov edi, eax
test eax, eax
jne 0x14004aaf4
call sub.kernel32.dll_GetLastError
test eax, eax
jne 0x14004ad04
mov r8d, edi
cmp rbx, r8
jne 0x14004aa40
call sub.kernel32.dll_GetLastError
cmp eax, 0x7a
jne 0x14004cf21
add rbx, rbx
mov eax, 0xffffffff
cmp rbx, rax
mov r15d, 0xffffffff
cmovae rbx, rax
mov r8, rbx
cmp r8, 0x201
jae 0x14004aa70
jmp 0x14004aa4f
cmp r14, r8
jb 0x14004d00f
lea rcx, [rsp + 0xc0]
mov rdx, rbp
call fcn.1400296e0
movabs r13, 0x8000000000000000
lea rcx, [rsp + 0xc0]
mov rdx, qword [rsp + 0x68]
mov r8, r12
call fcn.140046180
cmp qword [rsp + 0x70], 1
je 0x14004ab85
lea rcx, [rsp + 0xc0]
call fcn.140048c20
mov rdi, qword [rsp + 0xc8]
mov r8, qword [rsp + 0xd0]
lea rcx, [rsp + 0x170]
mov rdx, rdi
call fcn.14004f4f0
cmp qword [rsp + 0xc0], 0
je 0x14004abbd
mov edx, 1
mov rcx, rdi
call fcn.14000a8d0
movups xmm0, xmmword [rsp + 0x170]
movaps xmmword [rsp + 0x150], xmm0
mov rax, qword [rsp + 0x180]
mov qword [rsp + 0x160], rax
jmp 0x14004ad2f
lea rsi, [rsp + 0x220]
lea rdi, [rsp + 0xc0]
lea rbx, [rsp + 0x170]
mov rcx, qword [rsp + 0x228]
mov rdx, qword [rsp + 0x230]
test rdx, rdx
je 0x14004acbf
mov r8, qword [rsp + 0x238]
mov qword [rsp + 0x220], rax
mov qword [rsp + 0x228], rcx
mov qword [rsp + 0x230], rdx
mov qword [rsp + 0x238], r8
mov rcx, rsi
mov rdx, r14
mov r8, r12
call fcn.140046180
cmp qword [rsp + 0x70], 1
je 0x14004ac59
mov rcx, rsi
call fcn.140048c20
mov r14, qword [rsp + 0x228]
mov r8, qword [rsp + 0x230]
mov rcx, rbx
mov rdx, r14
call fcn.14004f4f0
cmp qword [rsp + 0x220], 0
je 0x14004ac8c
mov edx, 1
mov rcx, r14
call fcn.14000a8d0
mov r14, qword [rsp + 0x170]
cmp r14, r13
jne 0x14004acef
mov rcx, rsi
mov rdx, rdi
call fcn.140045400
mov rax, qword [rsp + 0x220]
cmp rax, r13
mov r14, qword [rsp + 0x68]
jne 0x14004abfa
jmp 0x14004a8f1
test rax, rax
je 0x14004acce
mov edx, 1
call fcn.14000a8d0
mov rcx, rsi
mov rdx, rdi
call fcn.140045400
mov rax, qword [rsp + 0x220]
cmp rax, r13
jne 0x14004abfa
jmp 0x14004a8f1
mov rdi, qword [rsp + 0x178]
mov rbx, qword [rsp + 0x180]
jmp 0x14004af3e
call sub.kernel32.dll_GetLastError
shl rax, 0x20
or rax, 2
mov qword [rsp + 0x158], rax
movabs r13, 0x8000000000000000
lea rax, [r13 + 1]
mov qword [rsp + 0x150], rax
cmp qword [rsp + 0x80], 0
je 0x14004ad49
mov edx, 2
mov rcx, qword [rsp + 0x78]
call fcn.14000a8d0
mov r14, qword [rsp + 0x150]
lea rsi, [r13 + 2]
cmp r14, rsi
mov r15, qword [rsp + 0xb0]
jge 0x14004bd31
movabs rax, 0x8000000000000000
cmp r14, rax
je 0x14004baa7
movabs rax, 0x8000000000000001
cmp r14, rax
jne 0x14004ba95
lea rcx, [rsp + 0x158]
call fcn.140025090
jmp 0x14004baa7
xor r8d, r8d
mov rcx, rdx
test rax, rax
cmovne r8, rax
test r8, r8
je 0x14004adc4
test rax, rax
cmove rcx, rdx
add r8, rcx
sub r8, rsi
cmp rdi, r8
cmovae rdi, r8
lea rcx, [rsp + 0x220]
mov rdx, rsi
mov r8, rdi
call fcn.140027710
mov rcx, qword [rsp + 0x220]
mov ecx, dword [rsp + 0x220]
mov rcx, qword [rsp + 0x158]
mov edx, 2
call fcn.14000a8d0
mov qword [rsp + 0xb8], rsi
mov qword [rsp + 0x90], 0
mov qword [rsp + 0x98], 2
mov qword [rsp + 0xa0], 0
mov r8d, 0x200
mov eax, 2
mov qword [rsp + 0x78], rax
xor eax, eax
mov qword [rsp + 0x80], rax
mov esi, 0xffffffff
xor r15d, r15d
xor ebx, ebx
cmp r8, 0x201
jb 0x14004bb11
jmp 0x14004bb24
jae 0x14004bbeb
cmp r8, 0x201
jae 0x14004bb24
mov r13d, 0x200
lea rbp, [rsp + 0x220]
mov r14, r8
jmp 0x14004bb83
sub r8, rbx
sub r15, rbx
cmp r15, r8
jae 0x14004bb5c
lea rcx, [rsp + 0x90]
mov rdx, rbx
call fcn.140027c20
mov rax, qword [rsp + 0x90]
mov qword [rsp + 0x80], rax
mov rax, qword [rsp + 0x98]
mov qword [rsp + 0x78], rax
mov r15, qword [rsp + 0x80]
cmp r15, rsi
mov ebx, 0xffffffff
cmovb rbx, r15
mov qword [rsp + 0xa0], rbx
mov r13, rbx
mov rbp, qword [rsp + 0x78]
mov r14, rbx
xor ecx, ecx
call sub.kernel32.dll_SetLastError
mov rcx, rbp
mov edx, r14d
call sub.kernel32.dll_GetWindowsDirectoryW
mov edi, eax
test eax, eax
jne 0x14004bba8
call sub.kernel32.dll_GetLastError
test eax, eax
jne 0x14004bc9a
mov r8d, edi
cmp r14, r8
jne 0x14004bb02
call sub.kernel32.dll_GetLastError
cmp eax, 0x7a
jne 0x14004cfce
add r14, r14
mov eax, 0xffffffff
cmp r14, rax
mov esi, 0xffffffff
cmovae r14, rax
mov r8, r14
cmp r8, 0x201
jae 0x14004bb24
jmp 0x14004bb11
cmp r13, r8
jb 0x14004d026
lea rcx, [rsp + 0xc0]
mov rdx, rbp
call fcn.1400296e0
mov r15, qword [rsp + 0xb0]
mov rdx, qword [rsp + 0x68]
lea rcx, [rsp + 0xc0]
mov r8, r12
call fcn.140046180
movabs r13, 0x8000000000000000
cmp qword [rsp + 0x70], 1
je 0x14004bc40
lea rcx, [rsp + 0xc0]
call fcn.140048c20
mov rdi, qword [rsp + 0xc8]
mov r8, qword [rsp + 0xd0]
lea rcx, [rsp + 0x170]
mov rdx, rdi
call fcn.14004f4f0
cmp qword [rsp + 0xc0], 0
je 0x14004bc78
mov edx, 1
mov rcx, rdi
call fcn.14000a8d0
movups xmm0, xmmword [rsp + 0x170]
movaps xmmword [rsp + 0x150], xmm0
mov rax, qword [rsp + 0x180]
mov qword [rsp + 0x160], rax
jmp 0x14004bccd
call sub.kernel32.dll_GetLastError
shl rax, 0x20
or rax, 2
mov qword [rsp + 0x158], rax
movabs r13, 0x8000000000000000
lea rax, [r13 + 1]
mov qword [rsp + 0x150], rax
mov r15, qword [rsp + 0xb0]
cmp qword [rsp + 0x80], 0
je 0x14004bce7
mov edx, 2
mov rcx, qword [rsp + 0x78]
call fcn.14000a8d0
mov r14, qword [rsp + 0x150]
cmp r14, qword [rsp + 0xb8]
jge 0x14004bd31
movabs rax, 0x8000000000000000
cmp r14, rax
je 0x14004bf42
movabs rax, 0x8000000000000001
cmp r14, rax
jne 0x14004bf30
lea rcx, [rsp + 0x158]
call fcn.140025090
jmp 0x14004bf42
mov rdi, qword [rsp + 0x158]
mov rbx, qword [rsp + 0x160]
jmp 0x14004af3e
mov rcx, qword [rsp + 0x158]
mov edx, 2
call fcn.14000a8d0
lea rdx, str.PATHlibrary_std_src_sys_commonprocess.rs
lea rcx, [rsp + 0x170]
mov r8d, 4
call fcn.140044000
mov rbp, qword [rsp + 0x170]
cmp rbp, r13
je 0x14004c107
mov rsi, qword [rsp + 0x178]
mov rax, qword [rsp + 0x180]
add rax, rsi
mov qword [rsp + 0xc0], rsi
mov qword [rsp + 0xc8], rax
mov word [rsp + 0xd0], 0
mov byte [rsp + 0xd8], 1
lea rdi, [rsp + 0x220]
lea rbx, [rsp + 0xc0]
lea r13, [rsp + 0x90]
mov rcx, rdi
mov rdx, rbx
call fcn.140045400
mov rax, qword [rsp + 0x220]
movabs rcx, 0x8000000000000000
cmp rax, rcx
mov r14, qword [rsp + 0x68]
je 0x14004c0f5
mov rcx, qword [rsp + 0x228]
mov rdx, qword [rsp + 0x230]
test rdx, rdx
jne 0x14004c030
test rax, rax
je 0x14004c009
mov edx, 1
call fcn.14000a8d0
mov rcx, rdi
mov rdx, rbx
call fcn.140045400
mov rax, qword [rsp + 0x220]
movabs rcx, 0x8000000000000000
cmp rax, rcx
jne 0x14004bfe5
jmp 0x14004c0f5
mov r8, qword [rsp + 0x238]
mov qword [rsp + 0x220], rax
mov qword [rsp + 0x228], rcx
mov qword [rsp + 0x230], rdx
mov qword [rsp + 0x238], r8
mov rcx, rdi
mov rdx, r14
mov r8, r12
call fcn.140046180
cmp qword [rsp + 0x70], 1
je 0x14004c076
mov rcx, rdi
call fcn.140048c20
mov r14, qword [rsp + 0x228]
mov r8, qword [rsp + 0x230]
mov rcx, r13
mov rdx, r14
call fcn.14004f4f0
cmp qword [rsp + 0x220], 0
je 0x14004c0a9
mov edx, 1
mov rcx, r14
call fcn.14000a8d0
mov r14, qword [rsp + 0x90]
movabs rax, 0x8000000000000000
cmp r14, rax
je 0x14004bfba
mov rdi, qword [rsp + 0x98]
mov rbx, qword [rsp + 0xa0]
test rbp, rbp
je 0x14004c0e6
mov edx, 1
mov rcx, rsi
call fcn.14000a8d0
movabs r13, 0x8000000000000000
jmp 0x14004af3e
test rbp, rbp
je 0x14004c107
mov edx, 1
mov rcx, rsi
call fcn.14000a8d0
lea rdi, [0x140257f68]
jmp 0x14004ae5e
lea rcx, str._rustc_7cf61ebde7b22796c69757901dd346d0fe70bd97library_alloc_srccollections_btree_navigate.rs
call fcn.14000f830
jmp 0x14004d076
call sub.kernel32.dll_GetLastError
shl rax, 0x20
or rax, 2
mov qword [rsp + 0x90], rax
lea rax, [rsp + 0x90]
mov qword [rsp + 0x170], rax
lea rax, [0x140044bf0]
mov qword [rsp + 0x178], rax
lea rax, str.comparing_environment_keys_failed:
mov qword [rsp + 0xc0], rax
mov qword [rsp + 0xc8], 1
mov qword [rsp + 0xe0], 0
lea rax, [rsp + 0x170]
mov qword [rsp + 0xd0], rax
mov qword [rsp + 0xd8], 1
lea rdx, str.library_std_src_syspalwindowsprocess.rs
lea rcx, [rsp + 0xc0]
call fcn.14000d7d0
jmp 0x14004d076
lea rcx, str._rustc_7cf61ebde7b22796c69757901dd346d0fe70bd97library_alloc_srccollections_btree_navigate.rs
call fcn.14000f830
jmp 0x14004d076
mov ecx, 2
mov rdx, r13
call fcn.14000bfa0
jmp 0x14004d076
call fcn.14000bf60
jmp 0x14004d076
mov ecx, 1
mov rdx, rsi
call fcn.14000bfa0
jmp 0x14004d076
call fcn.14000bf60
jmp 0x14004d076
mov ecx, 1
mov rdx, rdi
call fcn.14000bfa0
jmp 0x14004d076
call fcn.14000bf60
jmp 0x14004d076
lea r8, str.library_std_src_syspalwindowsos.rs
mov ecx, 1
xor edx, edx
call fcn.14000d810
jmp 0x14004d076
lea rax, str.library_std_src_syspalwindowsos.rs
mov rcx, r8
mov rdx, rbx
mov r8, rax
call fcn.14000e280
jmp 0x14004d076
lea r8, str.library_std_src_syspalwindowsos.rs
mov rcx, rbp
mov rdx, rbx
call fcn.14000d810
jmp 0x14004d076
lea rcx, str.assertion_failed:_self.height___0
lea r8, [0x1402559c0]
mov edx, 0x21
call fcn.14000e620
jmp 0x14004d076
mov ecx, 1
mov rdx, r12
call fcn.14000bfa0
jmp 0x14004d076
lea rcx, str.internal_error:_entered_unreachable_code_home_floppa_.cargo_registry_src_index.crates.io_6f17d22bba15001f_rayon_core_1.12.1_src_job.rs
lea r8, str.library_std_src_syspalwindowsmod.rs
mov edx, 0x28
call fcn.14000e620
jmp 0x14004d076
call sub.kernel32.dll_GetLastError
shl rax, 0x20
or rax, 2
mov qword [rsp + 0x90], rax
lea rax, [rsp + 0x90]
mov qword [rsp + 0x170], rax
lea rax, [0x140044bf0]
mov qword [rsp + 0x178], rax
lea rax, str.failure_getting_env_string_from_OS:
mov qword [rsp + 0x220], rax
mov qword [rsp + 0x228], 1
mov qword [rsp + 0x240], 0
lea rax, [rsp + 0x170]
mov qword [rsp + 0x230], rax
mov qword [rsp + 0x238], 1
lea rdx, str.library_std_src_syspalwindowsos.rs
lea rcx, [rsp + 0x220]
call fcn.14000d7d0
jmp 0x14004d076
lea rcx, str.internal_error:_entered_unreachable_code_home_floppa_.cargo_registry_src_index.crates.io_6f17d22bba15001f_rayon_core_1.12.1_src_job.rs
lea r8, str.library_std_src_syspalwindowsmod.rs
mov edx, 0x28
call fcn.14000e620
jmp 0x14004d076
call fcn.14000bf60
jmp 0x14004d076
lea rax, str.library_std_src_syspalwindowsmod.rs
mov rcx, r8
mov rdx, r14
mov r8, rax
call fcn.14000e280
jmp 0x14004d076
lea rax, str.library_std_src_syspalwindowsmod.rs
mov rcx, r8
mov rdx, r13
mov r8, rax
call fcn.14000e280
jmp 0x14004d076