Function at 0x1400a8620
Capabilities:
Create process on windows
Encode data using base64
Get common file path
Query environment variable

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x688
movdqa xmmword [rsp + 0x670], xmm6
mov byte [rsp + 0x1c0], r9b
mov qword [rsp + 0x1c8], r8
mov r12, rdx
mov qword [rsp + 0x160], rcx
mov r9, qword [rdx + 0x60]
movzx eax, byte [rdx + 0x68]
test al, al
jne 0x1400a867b
test r9, r9
jne 0x1400a867b
mov qword [rsp + 0x240], 0
xor ebx, ebx
jmp 0x1400a91ca
mov qword [rsp + 0x178], 0
mov qword [rsp + 0x188], 0
test al, al
mov qword [rsp + 0x78], r12
jne 0x1400a884e
mov qword [rsp + 0x70], r9
call sub.KERNEL32.dll_GetEnvironmentStringsW
test rax, rax
je 0x1400ac04f
mov qword [rsp + 0x220], rax
mov qword [rsp + 0x228], rax
lea rbp, [rsp + 0x290]
lea r13, [rsp + 0x98]
lea rsi, [rsp + 0x270]
lea rdi, [rsp + 0x220]
lea rbx, [rsp + 0x1d0]
lea r14, [rsp + 0xe0]
lea r15, [rsp + 0x178]
lea r12, [rsp + 0x80]
nop word cs:[rax + rax]
mov rcx, rsi
mov rdx, rdi
call fcn.1400a3c60
cmp byte [rsp + 0x288], 2
je 0x1400a8837
movups xmm0, xmmword [rsp + 0x270]
movups xmm1, xmmword [rsp + 0x280]
movaps xmmword [rsp + 0x150], xmm1
movaps xmmword [rsp + 0x140], xmm0
movdqu xmm0, xmmword [rbp]
movups xmm1, xmmword [rbp + 0x10]
movaps xmmword [rsp + 0x1a0], xmm1
movdqa xmmword [rsp + 0x190], xmm0
mov rax, qword [rsp + 0x140]
mov rcx, qword [rsp + 0x150]
add rcx, rax
mov qword [rsp + 0xe0], rax
mov qword [rsp + 0xe8], rcx
mov word [rsp + 0xf0], 0
mov rcx, rbx
mov rdx, r14
call fcn.140073730
movups xmm0, xmmword [rsp + 0x270]
movups xmm1, xmmword [rsp + 0x280]
movups xmmword [r13 + 0x10], xmm1
movups xmmword [r13], xmm0
movups xmm0, xmmword [rsp + 0x1d0]
movaps xmmword [rsp + 0x80], xmm0
mov rax, qword [rsp + 0x1e0]
mov qword [rsp + 0x90], rax
movdqu xmm0, xmmword [rbp]
movups xmm1, xmmword [rbp + 0x10]
movaps xmmword [rsp + 0xf0], xmm1
movdqa xmmword [rsp + 0xe0], xmm0
mov rcx, rbx
mov rdx, r15
mov r8, r12
mov r9, r14
call fcn.1400683e0
cmp byte [rsp + 0x1e8], 2
je 0x1400a8710
mov rdx, qword [rsp + 0x1d8]
test rdx, rdx
je 0x1400a8710
mov rcx, qword [rsp + 0x1d0]
mov r8d, 1
call fcn.140002860
jmp 0x1400a8710
mov rcx, qword [rsp + 0x220]
call fcn.140119f88
mov r12, qword [rsp + 0x78]
mov r9, qword [rsp + 0x70]
movabs r8, 0x3fffffffffffffff
mov rax, qword [r12 + 0x50]
mov rcx, qword [r12 + 0x58]
xor edx, edx
test rax, rax
setne dl
cmove r9, rax
mov qword [rsp + 0x1d0], rdx
mov qword [rsp + 0x1d8], 0
mov qword [rsp + 0x1e0], rax
mov qword [rsp + 0x1e8], rcx
mov qword [rsp + 0x1f0], rdx
mov qword [rsp + 0x1f8], 0
mov qword [rsp + 0x200], rax
mov qword [rsp + 0x208], rcx
mov qword [rsp + 0x210], r9
lea r12, [rsp + 0x288]
lea r14, [rsp + 0x1d0]
mov r13, qword [0x14014afc8]
inc r8
mov qword [rsp + 0x70], r8
nop dword [rax]
mov rcx, r14
call fcn.14005f7f0
mov rbp, rax
test rax, rax
je 0x1400a8fbd
mov rsi, rdx
cmp byte [rdx + 0x18], 2
jne 0x1400a8b10
mov rsi, qword [rsp + 0x178]
test rsi, rsi
je 0x1400a88e0
mov r9, qword [rbp]
mov rax, qword [rbp + 0x10]
mov rbp, qword [rsp + 0x180]
mov qword [rsp + 0x20], rax
lea rcx, [rsp + 0x190]
mov rdx, rsi
mov r8, rbp
call fcn.14006c670
cmp qword [rsp + 0x190], 0
jne 0x1400a88e0
mov rax, qword [rsp + 0x198]
mov rdx, qword [rsp + 0x1a0]
mov rcx, qword [rsp + 0x1a8]
mov byte [rsp + 0x67], 0
test rdx, rdx
je 0x1400a8cec
mov rcx, qword [rax + rcx*8 + 0x3d8]
mov rax, rdx
dec rax
je 0x1400a8a3e
add rdx, 0xfffffffffffffffe
mov r8, rax
and r8, 7
je 0x1400a89ab
xor r9d, r9d
nop dword [rax + rax]
movzx r10d, word [rcx + 0x3d2]
mov rcx, qword [rcx + r10*8 + 0x3d8]
inc r9
cmp r8, r9
jne 0x1400a8990
sub rax, r9
cmp rdx, 7
jb 0x1400a8a3e
nop word cs:[rax + rax]
movzx edx, word [rcx + 0x3d2]
mov rcx, qword [rcx + rdx*8 + 0x3d8]
movzx edx, word [rcx + 0x3d2]
mov rcx, qword [rcx + rdx*8 + 0x3d8]
movzx edx, word [rcx + 0x3d2]
mov rcx, qword [rcx + rdx*8 + 0x3d8]
movzx edx, word [rcx + 0x3d2]
mov rcx, qword [rcx + rdx*8 + 0x3d8]
movzx edx, word [rcx + 0x3d2]
mov rcx, qword [rcx + rdx*8 + 0x3d8]
movzx edx, word [rcx + 0x3d2]
mov rcx, qword [rcx + rdx*8 + 0x3d8]
movzx edx, word [rcx + 0x3d2]
mov rcx, qword [rcx + rdx*8 + 0x3d8]
movzx edx, word [rcx + 0x3d2]
mov rcx, qword [rcx + rdx*8 + 0x3d8]
add rax, 0xfffffffffffffff8
jne 0x1400a89c0
movzx eax, word [rcx + 0x3d2]
dec rax
mov qword [rsp + 0x220], rcx
mov qword [rsp + 0x228], 0
mov qword [rsp + 0x230], rax
lea rcx, [rsp + 0x270]
lea rdx, [rsp + 0x220]
lea r8, [rsp + 0x67]
call fcn.14006bab0
mov rax, qword [rsp + 0x2c0]
mov qword [rsp + 0x130], rax
movups xmm0, xmmword [rsp + 0x2b0]
movaps xmmword [rsp + 0x120], xmm0
movdqu xmm0, xmmword [rsp + 0x270]
movups xmm1, xmmword [rsp + 0x280]
movups xmm2, xmmword [rsp + 0x290]
movups xmm3, xmmword [rsp + 0x2a0]
movaps xmmword [rsp + 0x110], xmm3
movaps xmmword [rsp + 0x100], xmm2
movaps xmmword [rsp + 0xf0], xmm1
movdqa xmmword [rsp + 0xe0], xmm0
mov rdx, qword [rsp + 0x2c8]
mov rax, qword [rsp + 0x2d8]
movzx ecx, word [rdx + 0x3d2]
cmp rax, rcx
jae 0x1400a8d27
mov rcx, rdx
jmp 0x1400a8d59
mov rdi, qword [rbp + 0x18]
mov r15, qword [rbp + 0x28]
test r15, r15
je 0x1400a8b42
js 0x1400abfa8
movzx eax, byte [r13]
mov edx, 1
mov rcx, r15
call fcn.140002850
mov rbx, rax
test rax, rax
jne 0x1400a8b47
jmp 0x1400abfb2
mov ebx, 1
mov rcx, rbx
mov rdx, rdi
mov r8, r15
call sub.msvcrt.dll_memcpy
movzx eax, byte [rbp + 0x30]
mov qword [rsp + 0x80], rbx
mov qword [rsp + 0x88], r15
mov qword [rsp + 0x90], r15
mov byte [rsp + 0x98], al
mov r15, qword [rbp]
mov r14, qword [rbp + 0x10]
test r14, r14
je 0x1400a8bc1
xor edi, edi
cmp r14, qword [rsp + 0x70]
setb al
jae 0x1400abfc4
lea rbp, [r14 + r14]
mov dil, al
add rdi, rdi
test rbp, rbp
je 0x1400a8bca
movzx eax, byte [r13]
mov rcx, rbp
mov rdx, rdi
call fcn.140002850
mov rbx, rax
test rbx, rbx
jne 0x1400a8bd6
jmp 0x1400abfce
mov ebx, 2
xor ebp, ebp
jmp 0x1400a8bd6
mov rbx, rdi
test rbx, rbx
je 0x1400abfce
mov rcx, rbx
mov rdx, r15
mov r8, rbp
call sub.msvcrt.dll_memcpy
movdqu xmm0, xmmword [rsp + 0x80]
movups xmm1, xmmword [rsp + 0x90]
movdqu xmmword [r12], xmm0
movups xmmword [r12 + 0x10], xmm1
mov qword [rsp + 0x270], rbx
mov qword [rsp + 0x278], r14
mov qword [rsp + 0x280], r14
mov rdi, qword [rsi]
mov r15, qword [rsi + 0x10]
test r15, r15
je 0x1400a8c52
lea r14, [rsp + 0x1d0]
js 0x1400abfde
movzx eax, byte [r13]
mov edx, 1
mov rcx, r15
call fcn.140002850
mov rbx, rax
test rax, rax
jne 0x1400a8c5f
jmp 0x1400abf96
mov ebx, 1
lea r14, [rsp + 0x1d0]
mov rcx, rbx
mov rdx, rdi
mov r8, r15
call sub.msvcrt.dll_memcpy
movzx eax, byte [rsi + 0x18]
mov qword [rsp + 0x80], rbx
mov qword [rsp + 0x88], r15
mov qword [rsp + 0x90], r15
mov byte [rsp + 0x98], al
lea rcx, [rsp + 0xe0]
lea rdx, [rsp + 0x178]
lea r8, [rsp + 0x270]
lea r9, [rsp + 0x80]
call fcn.1400683e0
cmp byte [rsp + 0xf8], 2
je 0x1400a88e0
mov rdx, qword [rsp + 0xe8]
test rdx, rdx
je 0x1400a88e0
mov rcx, qword [rsp + 0xe0]
mov r8d, 1
call fcn.140002860
jmp 0x1400a88e0
mov qword [rsp + 0x80], rax
mov qword [rsp + 0x88], 0
mov qword [rsp + 0x90], rcx
lea rcx, [rsp + 0x270]
lea rdx, [rsp + 0x80]
lea r8, [rsp + 0x67]
call fcn.14006bab0
jmp 0x1400a8e73
mov r8, qword [rsp + 0x2d0]
nop
mov rcx, qword [rdx + 0x160]
test rcx, rcx
je 0x1400a8d54
movzx eax, word [rdx + 0x3d0]
inc r8
mov rdx, rcx
cmp ax, word [rcx + 0x3d2]
jae 0x1400a8d30
jmp 0x1400a8d59
mov rax, r8
xor ecx, ecx
imul rdx, rax, 0x38
shl rax, 5
mov r8, qword [rcx + rdx + 0x198]
mov qword [rsp + 0xb0], r8
movups xmm0, xmmword [rcx + rdx + 0x168]
movups xmm1, xmmword [rcx + rdx + 0x178]
movups xmm2, xmmword [rcx + rdx + 0x188]
movaps xmmword [rsp + 0xa0], xmm2
movaps xmmword [rsp + 0x90], xmm1
movaps xmmword [rsp + 0x80], xmm0
mov r8, qword [rsp + 0x110]
mov qword [rcx + rdx + 0x198], r8
movaps xmm0, xmmword [rsp + 0xe0]
movaps xmm1, xmmword [rsp + 0xf0]
movaps xmm2, xmmword [rsp + 0x100]
movups xmmword [rcx + rdx + 0x188], xmm2
movups xmmword [rcx + rdx + 0x178], xmm1
movups xmmword [rcx + rdx + 0x168], xmm0
movups xmm0, xmmword [rcx + rax]
movups xmm1, xmmword [rcx + rax + 0x10]
lea rdx, [rsp + 0xb8]
movups xmmword [rdx + 0x10], xmm1
movups xmmword [rdx], xmm0
lea rdx, [rsp + 0x118]
movups xmm0, xmmword [rdx]
movups xmm1, xmmword [rdx + 0x10]
movups xmmword [rcx + rax], xmm0
movups xmmword [rcx + rax + 0x10], xmm1
mov rax, qword [rsp + 0xd0]
mov qword [rsp + 0x2c0], rax
movaps xmm0, xmmword [rsp + 0xc0]
movaps xmmword [rsp + 0x2b0], xmm0
movdqa xmm0, xmmword [rsp + 0x80]
movaps xmm1, xmmword [rsp + 0x90]
movaps xmm2, xmmword [rsp + 0xa0]
movaps xmm3, xmmword [rsp + 0xb0]
movaps xmmword [rsp + 0x2a0], xmm3
movaps xmmword [rsp + 0x290], xmm2
movaps xmmword [rsp + 0x280], xmm1
movdqa xmmword [rsp + 0x270], xmm0
mov rax, qword [rsp + 0x2c0]
mov qword [rsp + 0xd0], rax
movaps xmm0, xmmword [rsp + 0x2b0]
movaps xmmword [rsp + 0xc0], xmm0
movdqa xmm0, xmmword [rsp + 0x270]
movaps xmm1, xmmword [rsp + 0x280]
movaps xmm2, xmmword [rsp + 0x290]
movaps xmm3, xmmword [rsp + 0x2a0]
movaps xmmword [rsp + 0xb0], xmm3
movaps xmmword [rsp + 0xa0], xmm2
dec qword [rsp + 0x188]
movaps xmmword [rsp + 0x90], xmm1
movdqa xmmword [rsp + 0x80], xmm0
cmp byte [rsp + 0x67], 0
je 0x1400a8f25
test rbp, rbp
je 0x1400abfe8
mov rax, qword [rsi + 0x3d8]
mov qword [rsp + 0x178], rax
dec rbp
mov qword [rsp + 0x180], rbp
mov qword [rax + 0x160], 0
mov edx, 0x438
mov r8d, 8
mov rcx, rsi
call fcn.140002860
cmp byte [rsp + 0xb0], 2
je 0x1400a88e0
mov rdi, qword [rsp + 0x80]
mov rbx, qword [rsp + 0x88]
mov rdx, qword [rsp + 0xa0]
mov rsi, qword [rsp + 0xb8]
mov r15, qword [rsp + 0xc0]
movzx ebp, byte [rsp + 0xd0]
test rdx, rdx
je 0x1400a8f7b
mov rcx, qword [rsp + 0x98]
mov r8d, 1
call fcn.140002860
test rbx, rbx
je 0x1400a8f94
add rbx, rbx
mov r8d, 2
mov rcx, rdi
mov rdx, rbx
call fcn.140002860
cmp bpl, 2
je 0x1400a88e0
test r15, r15
je 0x1400a88e0
mov r8d, 1
mov rcx, rsi
mov rdx, r15
call fcn.140002860
jmp 0x1400a88e0
movdqu xmm0, xmmword [rsp + 0x178]
movdqu xmmword [rsp + 0x248], xmm0
mov rax, qword [rsp + 0x188]
mov qword [rsp + 0x258], rax
mov qword [rsp + 0x240], 1
movzx eax, byte [r13]
mov r13d, 4
mov esi, 1
mov ecx, 4
mov edx, 1
call fcn.140002850
test rax, rax
je 0x1400ac005
mov dword [rax], 0x48544150
mov qword [rsp + 0x80], rax
mov qword [rsp + 0x88], 4
mov qword [rsp + 0x90], 4
mov byte [rsp + 0x98], 0
mov rcx, rax
add rcx, 4
mov qword [rsp + 0x270], rax
mov qword [rsp + 0x278], rcx
mov word [rsp + 0x280], 0
lea rcx, [rsp + 0xe0]
lea rdx, [rsp + 0x270]
call fcn.140073730
movups xmm0, xmmword [rsp + 0x80]
movups xmm1, xmmword [rsp + 0x90]
movups xmmword [rsp + 0x288], xmm0
movups xmmword [rsp + 0x298], xmm1
movdqu xmm0, xmmword [rsp + 0xe0]
movdqa xmmword [rsp + 0x270], xmm0
mov rbx, qword [rsp + 0xf0]
mov qword [rsp + 0x280], rbx
mov rsi, qword [rsp + 0x270]
mov r12, qword [rsp + 0x248]
test r12, r12
je 0x1400a9185
mov r13, qword [rsp + 0x250]
lea rcx, [r12 + 0x168]
movzx eax, word [r12 + 0x3d2]
mov qword [rsp + 0x70], rax
imul rdi, rax, 0x38
lea r14, [r12 - 0x10]
mov rbp, 0xffffffffffffffff
test rdi, rdi
je 0x1400a9140
lea r15, [rcx + 0x38]
mov r8, qword [rcx]
mov r9d, dword [rcx + 0x10]
mov dword [rsp + 0x20], 1
mov rcx, rsi
mov edx, ebx
call sub.KERNEL32.dll_CompareStringOrdinal
add rdi, 0xffffffffffffffc8
add r14, 0x20
inc rbp
mov rcx, r15
cmp eax, 3
je 0x1400a9100
cmp eax, 1
jne 0x1400a915c
jmp 0x1400a9145
mov rbp, qword [rsp + 0x70]
sub r13, 1
jb 0x1400a9768
mov r12, qword [r12 + rbp*8 + 0x3d8]
jmp 0x1400a90da
cmp eax, 2
jne 0x1400abf06
test r12, r12
je 0x1400a9185
mov rbx, qword [r14 - 0x10]
mov rdi, qword [r14]
mov r12, qword [rsp + 0x78]
mov rdx, qword [rsp + 0x290]
test rdx, rdx
jne 0x1400a9199
jmp 0x1400a91ac
xor ebx, ebx
mov r12, qword [rsp + 0x78]
mov rdx, qword [rsp + 0x290]
test rdx, rdx
je 0x1400a91ac
mov rcx, qword [rsp + 0x288]
mov r8d, 1
call fcn.140002860
mov rdx, qword [rsp + 0x278]
test rdx, rdx
je 0x1400a91ca
add rdx, rdx
mov r8d, 2
mov rcx, rsi
call fcn.140002860
mov r13, qword [r12 + 0x40]
lea rbp, [0x140127568]
test r13, r13
je 0x1400a921e
mov rcx, qword [r12 + 0x30]
cmp r13, 4
jae 0x1400a91ef
lea rdx, [0x1400a4fc0]
jmp 0x1400a9207
cmp dword [rcx], 0x5c3f5c5c
lea rax, [0x1400a4fd0]
lea rdx, [0x1400a4fc0]
cmove rdx, rax
mov qword [rsp + 0x68], rcx
movzx esi, byte [r13 + rcx - 1]
mov ecx, esi
call rdx
test al, al
je 0x1400a92a0
mov rax, qword [rsp + 0x160]
mov qword [rax], rbp
mov qword [rax + 0x10], 2
cmp qword [rsp + 0x240], 0
je 0x1400a9343
mov rcx, qword [rsp + 0x248]
test rcx, rcx
je 0x1400a931a
mov rdx, qword [rsp + 0x250]
mov rax, qword [rsp + 0x258]
mov qword [rsp + 0x278], 0
mov qword [rsp + 0x280], rcx
mov qword [rsp + 0x288], rdx
mov qword [rsp + 0x298], 0
mov qword [rsp + 0x2a0], rcx
mov qword [rsp + 0x2a8], rdx
mov ecx, 1
jmp 0x1400a931e
mov r14, rbx
cmp r13, 4
jb 0x1400a9377
mov rbx, qword [rsp + 0x68]
movzx eax, byte [r13 + rbx - 4]
lea ecx, [rax - 0x41]
cmp cl, 0x1a
setb cl
shl cl, 5
or cl, al
cmp cl, 0x2e
jne 0x1400a9380
movzx eax, byte [rbx + r13 - 3]
lea ecx, [rax - 0x41]
cmp cl, 0x1a
setb cl
shl cl, 5
or cl, al
cmp cl, 0x65
jne 0x1400a9380
movzx eax, byte [rbx + r13 - 2]
lea ecx, [rax - 0x41]
cmp cl, 0x1a
setb cl
shl cl, 5
or cl, al
cmp cl, 0x78
jne 0x1400a9380
lea eax, [rsi - 0x41]
cmp al, 0x1a
setb al
shl al, 5
or al, sil
cmp al, 0x65
sete al
jmp 0x1400a9382
xor ecx, ecx
xor eax, eax
mov qword [rsp + 0x270], rcx
mov qword [rsp + 0x290], rcx
mov qword [rsp + 0x2b0], rax
lea rcx, [rsp + 0x270]
call fcn.140062350
cmp qword [rsp + 0x1c8], 3
jb 0x1400a935b
mov rcx, qword [rsp + 0x268]
call sub.KERNEL32.dll_CloseHandle
movaps xmm6, xmmword [rsp + 0x670]
add rsp, 0x688
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
xor eax, eax
mov rbx, qword [rsp + 0x68]
jmp 0x1400a9382
xor eax, eax
lea rcx, [rbx + r13]
mov qword [rsp + 0x70], rcx
xor ecx, ecx
nop dword [rax]
cmp r13, rcx
je 0x1400a9414
movzx edx, byte [rbx + rcx]
cmp edx, 0x2f
je 0x1400a93a6
inc rcx
cmp edx, 0x5c
jne 0x1400a9390
test al, al
je 0x1400a94de
lea rcx, [rsp + 0x270]
mov rdx, rbx
mov r8, r13
call fcn.1400aef10
mov rcx, qword [rsp + 0x270]
mov rax, qword [rsp + 0x278]
test rcx, rcx
je 0x1400a963d
mov rdx, qword [rsp + 0x280]
mov qword [rsp + 0x270], rcx
mov qword [rsp + 0x278], rax
mov qword [rsp + 0x280], rdx
lea rcx, [rsp + 0x140]
lea rdx, [rsp + 0x270]
call fcn.14009d6d0
jmp 0x1400a9aa4
xor r8d, r8d
lea rbp, str.nul_byte_found_in_provided_data
jmp 0x1400a942c
xor r8d, r8d
test cx, cx
je 0x1400a921e
mov cx, 1
test r8w, r8w
jne 0x1400a9420
cmp rbx, qword [rsp + 0x70]
je 0x1400a9731
movzx r8d, byte [rbx]
test r8b, r8b
js 0x1400a9452
inc rbx
mov edx, r8d
jmp 0x1400a94ae
mov edx, r8d
and edx, 0x1f
movzx r10d, byte [rbx + 1]
and r10d, 0x3f
cmp r8b, 0xdf
jbe 0x1400a94a4
movzx r9d, byte [rbx + 2]
shl r10d, 6
and r9d, 0x3f
or r9d, r10d
cmp r8b, 0xf0
jb 0x1400a94b8
movzx r8d, byte [rbx + 3]
add rbx, 4
and edx, 7
shl edx, 0x12
shl r9d, 6
and r8d, 0x3f
or r8d, r9d
or edx, r8d
cmp edx, 0xffff
jbe 0x1400a94ae
jmp 0x1400a94ca
add rbx, 2
shl edx, 6
or edx, r10d
xor r8d, r8d
mov ecx, edx
jmp 0x1400a9423
add rbx, 3
shl edx, 0xc
or edx, r9d
cmp edx, 0xffff
jbe 0x1400a94ae
and edx, 0x3ff
or edx, 0xdc00
mov r8d, edx
jmp 0x1400a9423
test r13, r13
js 0x1400ac0df
mov rsi, r13
not rsi
shr rsi, 0x3f
mov rax, qword [0x14014afc8]
movzx eax, byte [rax]
mov rcx, r13
mov rdx, rsi
call fcn.140002850
test rax, rax
je 0x1400ac005
mov rdi, rax
mov rcx, rax
mov rdx, rbx
mov r8, r13
call sub.msvcrt.dll_memcpy
mov qword [rsp + 0x80], rdi
mov qword [rsp + 0x88], r13
mov qword [rsp + 0x90], r13
mov byte [rsp + 0x98], 0
mov rax, qword [rsp + 0x90]
mov qword [rsp + 0x280], rax
movzx eax, byte [rsp + 0x98]
mov byte [rsp + 0x288], al
mov eax, dword [rsp + 0x99]
mov dword [rsp + 0x289], eax
movzx eax, word [rsp + 0x9d]
mov word [rsp + 0x28d], ax
movzx eax, byte [rsp + 0x9f]
mov byte [rsp + 0x28f], al
mov rax, qword [rsp + 0x80]
mov qword [rsp + 0x270], rax
mov rax, qword [rsp + 0x88]
mov qword [rsp + 0x278], rax
lea rdx, str..exeprogram_not_found
lea rcx, [rsp + 0x270]
mov r8d, 4
call fcn.1400a4560
movdqa xmm0, xmmword [rsp + 0x270]
movaps xmm1, xmmword [rsp + 0x280]
movaps xmmword [rsp + 0x90], xmm1
movdqa xmmword [rsp + 0x80], xmm0
mov rsi, qword [rsp + 0x80]
mov rdi, qword [rsp + 0x90]
lea rcx, [rsp + 0xe0]
mov rdx, rsi
mov r8, rdi
call fcn.1400ac860
cmp qword [rsp + 0xe0], 0
je 0x1400a9656
mov rax, qword [rsp + 0xf0]
mov qword [rsp + 0x150], rax
movdqu xmm0, xmmword [rsp + 0xe0]
movdqa xmmword [rsp + 0x140], xmm0
jmp 0x1400a9a89
mov qword [rsp + 0x148], rax
mov qword [rsp + 0x140], 0
jmp 0x1400a9aa4
mov rcx, rsi
mov rdx, rdi
call fcn.1400923c0
test rax, rax
je 0x1400a96cb
cmp rdx, 2
jne 0x1400a967e
movzx r8d, word [rax]
mov ecx, 2
cmp r8d, 0x2e2e
je 0x1400a96b5
mov r8, rdx
nop word cs:[rax + rax]
test r8, r8
je 0x1400a96b2
mov rcx, r8
dec r8
cmp byte [rax + rcx - 1], 0x2e
jne 0x1400a9690
cmp rdx, rcx
jb 0x1400ac11a
test r8, r8
cmovne rdx, r8
mov rcx, rdx
add rax, rcx
sub rax, rsi
cmp rdi, rax
jb 0x1400a96cb
mov qword [rsp + 0x90], rax
mov rdi, rax
lea rcx, [rsp + 0x270]
mov rdx, rsi
mov r8, rdi
call fcn.1400aef10
mov rcx, qword [rsp + 0x270]
mov rax, qword [rsp + 0x278]
test rcx, rcx
je 0x1400a9a75
mov rdx, qword [rsp + 0x280]
mov qword [rsp + 0x270], rcx
mov qword [rsp + 0x278], rax
mov qword [rsp + 0x280], rdx
lea rcx, [rsp + 0x140]
lea rdx, [rsp + 0x270]
call fcn.14009d6d0
jmp 0x1400a9a89
cmp r13, 0xf
ja 0x1400a9785
lea rax, [r13 - 1]
xor ecx, ecx
mov r8, qword [rsp + 0x68]
nop word cs:[rax + rax]
cmp byte [r8 + rcx], 0x2e
sete bl
je 0x1400a979b
lea rdx, [rcx + 1]
cmp rax, rcx
mov rcx, rdx
jne 0x1400a9750
jmp 0x1400a979b
mov r12, qword [rsp + 0x78]
xor ebx, ebx
mov rdx, qword [rsp + 0x290]
test rdx, rdx
jne 0x1400a9199
jmp 0x1400a91ac
mov cl, 0x2e
mov rdx, qword [rsp + 0x68]
mov r8, r13
call fcn.1400fcb30
cmp rax, 1
sete bl
test r14, r14
mov byte [rsp + 0xd8], bl
je 0x1400a97f9
add rdi, r14
mov qword [rsp + 0xe0], r14
mov qword [rsp + 0xe8], rdi
mov word [rsp + 0xf0], 0
mov byte [rsp + 0xf8], 1
lea rcx, [rsp + 0x270]
lea rdx, [rsp + 0xe0]
call fcn.1400a3e30
movzx eax, byte [rsp + 0x288]
cmp al, 2
jne 0x1400a9d64
movzx ebx, byte [rsp + 0xd8]
lea rcx, [rsp + 0xe0]
call fcn.1400a4070
cmp byte [rsp + 0xf8], 2
jne 0x1400a9822
lea rcx, [rsp + 0xe0]
call fcn.140063090
jmp 0x1400a992f
movdqu xmm0, xmmword [rsp + 0xe0]
movups xmm1, xmmword [rsp + 0xf0]
movdqa xmmword [rsp + 0x80], xmm0
movaps xmmword [rsp + 0x90], xmm1
mov rcx, qword [rsp + 0x80]
mov rsi, qword [rsp + 0x90]
mov rdx, rsi
call fcn.140092260
test rax, rax
mov r8, qword [rsp + 0x68]
je 0x1400a9873
cmp rsi, rdx
jb 0x1400a9873
mov qword [rsp + 0x90], rdx
movdqa xmm0, xmmword [rsp + 0x80]
mov rax, qword [rsp + 0x90]
mov qword [rsp + 0x280], rax
mov rax, qword [rsp + 0x98]
mov qword [rsp + 0x288], rax
movdqa xmmword [rsp + 0x270], xmm0
lea rcx, [rsp + 0x270]
mov rdx, r8
mov r8, r13
call fcn.140091050
test bl, bl
jne 0x1400a98d6
lea rdx, str.exeNULexit_code:
lea rcx, [rsp + 0x270]
mov r8d, 3
call fcn.140091db0
mov rsi, qword [rsp + 0x270]
mov r8, qword [rsp + 0x280]
lea rcx, [rsp + 0x1d0]
mov rdx, rsi
call fcn.1400ac860
mov rdx, qword [rsp + 0x278]
test rdx, rdx
je 0x1400a9911
mov r8d, 1
mov rcx, rsi
call fcn.140002860
mov rcx, qword [rsp + 0x1d0]
test rcx, rcx
je 0x1400a992f
mov rax, rcx
movdqu xmm6, xmmword [rsp + 0x1d8]
jmp 0x1400aa167
mov qword [rsp + 0x78], r12
mov qword [rsp + 0x190], 2
pxor xmm0, xmm0
movdqu xmmword [rsp + 0x198], xmm0
mov r8d, 0x200
mov eax, 2
mov qword [rsp + 0x58], rax
xor eax, eax
mov qword [rsp + 0x50], rax
mov r12d, 0xffffffff
xor ebx, ebx
xor ebp, ebp
cmp r8, 0x201
jb 0x1400a998f
jmp 0x1400a99b0
jae 0x1400a9c9f
cmp r8, 0x201
jae 0x1400a99b0
lea r15, [rsp + 0x270]
mov edi, 0x200
mov r14, r8
jmp 0x1400a9a0c
sub r8, rbp
sub rbx, rbp
cmp rbx, r8
mov rbx, qword [rsp + 0x50]
jae 0x1400a99e5
lea rcx, [rsp + 0x190]
mov rdx, rbp
call fcn.14006d7a0
mov rax, qword [rsp + 0x190]
mov qword [rsp + 0x58], rax
mov rbx, qword [rsp + 0x198]
cmp rbx, r12
mov ebp, 0xffffffff
cmovb rbp, rbx
mov qword [rsp + 0x1a0], rbp
mov rax, rbx
mov qword [rsp + 0x50], rbx
mov r15, qword [rsp + 0x58]
mov rdi, rbp
mov r14, rbp
xor ecx, ecx
call sub.KERNEL32.dll_SetLastError
mov rcx, r15
mov edx, r14d
call sub.KERNEL32.dll_GetSystemDirectoryW
mov esi, eax
test eax, eax
jne 0x1400a9a31
call sub.KERNEL32.dll_GetLastError
test eax, eax
jne 0x1400a9e8e
mov r8d, esi
cmp r14, r8
jne 0x1400a9980
call sub.KERNEL32.dll_GetLastError
cmp eax, 0x7a
jne 0x1400ac015
add r14, r14
mov eax, 0xffffffff
cmp r14, rax
mov r12d, 0xffffffff
cmovae r14, rax
mov r8, r14
cmp r8, 0x201
jae 0x1400a99b0
jmp 0x1400a998f
mov qword [rsp + 0x148], rax
mov qword [rsp + 0x140], 0
mov rdx, qword [rsp + 0x88]
test rdx, rdx
je 0x1400a9aa4
mov r8d, 1
mov rcx, rsi
call fcn.140002860
mov r13, qword [rsp + 0x140]
mov rbp, qword [rsp + 0x148]
test r13, r13
je 0x1400a921e
mov r8, qword [rsp + 0x150]
cmp r8, 5
jb case.0x1400a9b09.68
cmp word [r13 + r8*2 - 0xa], 0x2e
jne case.0x1400a9b09.68
cmp word [r13 + r8*2 - 2], 0
jne case.0x1400a9b09.68
movzx eax, word [r13 + r8*2 - 8]
lea ecx, [rax - 0x42]
cmp ecx, 0x21
ja case.0x1400a9b09.68
lea rdx, [0x1400ac69c]
movsxd rcx, dword [rdx + rcx*4]
add rcx, rdx
jmp rcx
movzx ecx, word [r13 + r8*2 - 6]
or ecx, 0x20
cmp ecx, 0x61
jne 0x1400a9b27
movzx ecx, word [r13 + r8*2 - 4]
or ecx, 0x20
cmp ecx, 0x74
je 0x1400a9b57
cmp ax, 0x43
jne case.0x1400a9b09.68
movzx eax, word [r13 + r8*2 - 6]
or eax, 0x20
cmp eax, 0x6d
jne case.0x1400a9b09.68
movzx eax, word [r13 + r8*2 - 4]
add eax, 0xffffffbc
test eax, 0xffdf
jne case.0x1400a9b09.68
mov qword [rsp + 0x170], r8
mov qword [rsp + 0x50], r13
mov qword [rsp + 0x58], rbp
mov qword [rsp + 0x80], 2
pxor xmm0, xmm0
movdqu xmmword [rsp + 0x88], xmm0
mov eax, 0x200
mov ecx, 2
mov qword [rsp + 0x68], rcx
xor ecx, ecx
mov qword [rsp + 0x70], rcx
mov r14d, 0xffffffff
xor r13d, r13d
xor edi, edi
cmp rax, 0x201
jb 0x1400a9bbe
jmp 0x1400a9bd3
mov r12, r15
jae 0x1400aaca1
cmp rax, 0x201
jae 0x1400a9bd3
mov r15, r12
lea rbp, [rsp + 0x270]
mov esi, 0x200
mov r12, rax
jmp 0x1400a9c35
sub rax, rdi
sub r13, rdi
cmp r13, rax
mov r13, qword [rsp + 0x70]
jae 0x1400a9c0b
lea rcx, [rsp + 0x80]
mov rdx, rdi
mov r8, rax
call fcn.14006d7a0
mov rax, qword [rsp + 0x80]
mov qword [rsp + 0x68], rax
mov r13, qword [rsp + 0x88]
mov r15, r12
cmp r13, r14
mov edi, 0xffffffff
cmovb rdi, r13
mov qword [rsp + 0x90], rdi
mov rax, r13
mov qword [rsp + 0x70], r13
mov rbp, qword [rsp + 0x68]
mov rsi, rdi
mov r12, rdi
xor ecx, ecx
call sub.KERNEL32.dll_SetLastError
mov rcx, rbp
mov edx, r12d
call sub.KERNEL32.dll_GetSystemDirectoryW
mov ebx, eax
test eax, eax
jne 0x1400a9c5a
call sub.KERNEL32.dll_GetLastError
test eax, eax
jne 0x1400ab0cd
mov eax, ebx
cmp r12, rax
jne 0x1400a9bad
call sub.KERNEL32.dll_GetLastError
cmp eax, 0x7a
jne 0x1400ac0e9
add r12, r12
mov eax, 0xffffffff
cmp r12, rax
mov r14d, 0xffffffff
cmovae r12, rax
mov rax, r12
mov r12, r15
cmp rax, 0x201
jae 0x1400a9bd3
jmp 0x1400a9bbe
cmp rdi, r8
movzx ebx, byte [rsp + 0xd8]
jb 0x1400ac103
lea rcx, [rsp + 0x80]
mov rdx, r15
call fcn.14008e810
mov rdx, qword [rsp + 0x68]
lea rcx, [rsp + 0x80]
mov r8, r13
call fcn.140091050
test bl, bl
jne 0x1400a9cf3
lea rdx, str.exeNULexit_code:
lea rcx, [rsp + 0x80]
mov r8d, 3
call fcn.140091db0
mov rdi, qword [rsp + 0x80]
mov r8, qword [rsp + 0x90]
lea rcx, [rsp + 0x1d0]
mov rdx, rdi
call fcn.1400ac860
mov rdx, qword [rsp + 0x88]
test rdx, rdx
je 0x1400a9d2e
mov r8d, 1
mov rcx, rdi
call fcn.140002860
movdqu xmm0, xmmword [rsp + 0x1d0]
movdqu xmmword [rsp + 0xe8], xmm0
mov rax, qword [rsp + 0x1e0]
mov qword [rsp + 0xf8], rax
mov qword [rsp + 0xe0], 0
mov sil, 1
jmp 0x1400a9eb1
lea rbp, [rsp + 0x289]
lea r14, [rsp + 0x99]
lea rsi, [rsp + 0x270]
lea rdi, [rsp + 0xe0]
lea rbx, [rsp + 0x80]
jmp 0x1400a9dab
mov rcx, rsi
mov rdx, rdi
call fcn.1400a3e30
movzx eax, byte [rsp + 0x288]
cmp al, 2
je 0x1400a97f1
mov rcx, qword [rsp + 0x270]
mov rdx, qword [rsp + 0x278]
mov r8, qword [rsp + 0x280]
test r8, r8
jne 0x1400a9dda
test rdx, rdx
je 0x1400a9d90
mov r8d, 1
call fcn.140002860
jmp 0x1400a9d90
mov r9d, dword [rbp]
mov r10d, dword [rbp + 3]
mov dword [r14 + 3], r10d
mov dword [r14], r9d
mov qword [rsp + 0x80], rcx
mov qword [rsp + 0x88], rdx
mov qword [rsp + 0x90], r8
mov byte [rsp + 0x98], al
mov rcx, rbx
mov rdx, qword [rsp + 0x68]
mov r8, r13
call fcn.140091050
cmp byte [rsp + 0xd8], 0
jne 0x1400a9e37
mov r8d, 3
mov rcx, rbx
lea rdx, str.exeNULexit_code:
call fcn.140091db0
mov r15, qword [rsp + 0x80]
mov r8, qword [rsp + 0x90]
mov rcx, rsi
mov rdx, r15
call fcn.1400ac860
mov rdx, qword [rsp + 0x88]
test rdx, rdx
je 0x1400a9e6d
mov r8d, 1
mov rcx, r15
call fcn.140002860
mov rax, qword [rsp + 0x270]
test rax, rax
jne 0x1400ab294
mov rcx, rsi
mov rdx, rdi
call fcn.1400a3e30
jmp 0x1400a9d9b
call sub.KERNEL32.dll_GetLastError
shl rax, 0x20
or rax, 2
mov qword [rsp + 0xe8], rax
mov qword [rsp + 0xe0], 1
xor esi, esi
mov rdx, qword [rsp + 0x50]
test rdx, rdx
je 0x1400a9ece
add rdx, rdx
mov r8d, 2
mov rcx, qword [rsp + 0x58]
call fcn.140002860
test sil, sil
je 0x1400a9eeb
mov rcx, qword [rsp + 0xe8]
test rcx, rcx
mov r12, qword [rsp + 0x78]
jne 0x1400aa15b
jmp 0x1400a9ef8
lea rcx, [rsp + 0xe8]
call fcn.140063090
mov qword [rsp + 0x190], 2
pxor xmm0, xmm0
movdqu xmmword [rsp + 0x198], xmm0
mov r8d, 0x200
mov eax, 2
mov qword [rsp + 0x58], rax
xor eax, eax
mov qword [rsp + 0x50], rax
mov ebx, 0xffffffff
xor r12d, r12d
xor ebp, ebp
cmp r8, 0x201
jb 0x1400a9f4f
jmp 0x1400a9f70
jae 0x1400aa034
cmp r8, 0x201
jae 0x1400a9f70
lea r15, [rsp + 0x270]
mov edi, 0x200
mov r14, r8
jmp 0x1400a9fcc
sub r8, rbp
sub r12, rbp
cmp r12, r8
mov r12, qword [rsp + 0x50]
jae 0x1400a9fa5
lea rcx, [rsp + 0x190]
mov rdx, rbp
call fcn.14006d7a0
mov rax, qword [rsp + 0x190]
mov qword [rsp + 0x58], rax
mov r12, qword [rsp + 0x198]
cmp r12, rbx
mov ebp, 0xffffffff
cmovb rbp, r12
mov qword [rsp + 0x1a0], rbp
mov rax, r12
mov qword [rsp + 0x50], r12
mov r15, qword [rsp + 0x58]
mov rdi, rbp
mov r14, rbp
xor ecx, ecx
call sub.KERNEL32.dll_SetLastError
mov rcx, r15
mov edx, r14d
call sub.KERNEL32.dll_GetWindowsDirectoryW
mov esi, eax
test eax, eax
jne 0x1400a9ff1
call sub.KERNEL32.dll_GetLastError
test eax, eax
jne 0x1400aa0fc
mov r8d, esi
cmp r14, r8
jne 0x1400a9f40
call sub.KERNEL32.dll_GetLastError
cmp eax, 0x7a
jne 0x1400ac032
add r14, r14
mov eax, 0xffffffff
cmp r14, rax
mov ebx, 0xffffffff
cmovae r14, rax
mov r8, r14
cmp r8, 0x201
jae 0x1400a9f70
jmp 0x1400a9f4f
cmp rdi, r8
movzx esi, byte [rsp + 0xd8]
jb 0x1400ac128
lea rcx, [rsp + 0x80]
mov rdx, r15
call fcn.14008e810
mov r12, qword [rsp + 0x78]
mov rdx, qword [rsp + 0x68]
lea rcx, [rsp + 0x80]
mov r8, r13
call fcn.140091050
test sil, sil
jne 0x1400aa08e
lea rdx, str.exeNULexit_code:
lea rcx, [rsp + 0x80]
mov r8d, 3
call fcn.140091db0
mov rdi, qword [rsp + 0x80]
mov r8, qword [rsp + 0x90]
lea rcx, [rsp + 0x1d0]
mov rdx, rdi
call fcn.1400ac860
mov rdx, qword [rsp + 0x88]
test rdx, rdx
je 0x1400aa0c9
mov r8d, 1
mov rcx, rdi
call fcn.140002860
movdqu xmm0, xmmword [rsp + 0x1d0]
movdqu xmmword [rsp + 0xe8], xmm0
mov rax, qword [rsp + 0x1e0]
mov qword [rsp + 0xf8], rax
mov qword [rsp + 0xe0], 0
mov sil, 1
jmp 0x1400aa124
call sub.KERNEL32.dll_GetLastError
shl rax, 0x20
or rax, 2
mov qword [rsp + 0xe8], rax
mov qword [rsp + 0xe0], 1
xor esi, esi
mov r12, qword [rsp + 0x78]
mov rdx, qword [rsp + 0x50]
test rdx, rdx
je 0x1400aa141
add rdx, rdx
mov r8d, 2
mov rcx, qword [rsp + 0x58]
call fcn.140002860
test sil, sil
je 0x1400aaa98
mov rcx, qword [rsp + 0xe8]
test rcx, rcx
je 0x1400aaaa5
mov rax, rcx
movdqu xmm6, xmmword [rsp + 0xf0]
mov r13, rcx
movq rbp, xmm6
pshufd xmm0, xmm6, 0xee
movq r8, xmm0
cmp r8, 5
jae 0x1400a9acf
mov rdi, qword [r12 + 0x90]
mov rsi, qword [r12 + 0xa0]
movzx ebx, byte [r12 + 0xad]
mov qword [rsp + 0x80], 2
pxor xmm0, xmm0
movdqu xmmword [rsp + 0x88], xmm0
lea rcx, [rsp + 0x80]
xor edx, edx
call fcn.14006cbe0
mov rax, qword [rsp + 0x80]
mov rcx, qword [rsp + 0x90]
mov word [rax + rcx*2], 0x22
inc rcx
mov qword [rsp + 0x90], rcx
mov rax, qword [rsp + 0x68]
mov qword [rsp + 0x270], rax
mov rax, qword [rsp + 0x70]
mov qword [rsp + 0x278], rax
mov word [rsp + 0x280], 0
lea rcx, [rsp + 0x80]
lea rdx, [rsp + 0x270]
call fcn.1400735b0
mov rdx, qword [rsp + 0x90]
cmp rdx, qword [rsp + 0x88]
jne 0x1400aa245
lea rcx, [rsp + 0x80]
call fcn.14006cbe0
mov rdx, qword [rsp + 0x90]
mov rax, qword [rsp + 0x80]
mov word [rax + rdx*2], 0x22
inc rdx
mov qword [rsp + 0x90], rdx
shl rsi, 3
lea r14, [rsi + rsi*4]
lea r15, [rsp + 0x80]
nop
test r14, r14
je 0x1400aa2fe
mov rdx, qword [rsp + 0x90]
cmp rdx, qword [rsp + 0x88]
jne 0x1400aa29b
mov rcx, r15
call fcn.14006cbe0
mov rdx, qword [rsp + 0x90]
mov rax, qword [rsp + 0x80]
mov word [rax + rdx*2], 0x20
inc rdx
mov qword [rsp + 0x90], rdx
mov rcx, r15
mov rdx, rdi
mov r8d, ebx
call fcn.14009d210
mov rsi, rax
add rdi, 0x28
add r14, 0xffffffffffffffd8
test rax, rax
je 0x1400aa270
mov rdx, qword [rsp + 0x88]
test rdx, rdx
je 0x1400aa40d
mov rcx, qword [rsp + 0x80]
add rdx, rdx
mov r8d, 2
call fcn.140002860
jmp 0x1400aa40d
mov rax, qword [rsp + 0x80]
mov rsi, qword [rsp + 0x88]
test rax, rax
je 0x1400aa40d
mov rdx, qword [rsp + 0x90]
mov cl, 1
mov dword [rsp + 0x68], ecx
mov qword [rsp + 0x70], rbp
mov qword [rsp + 0xd8], r13
mov qword [rsp + 0x178], rax
mov qword [rsp + 0x180], rsi
mov qword [rsp + 0x188], rdx
cmp rdx, rsi
jne 0x1400aa36c
lea rcx, [rsp + 0x178]
call fcn.14006cbe0
mov rax, qword [rsp + 0x178]
mov rdx, qword [rsp + 0x188]
mov word [rax + rdx*2], 0
inc rdx
mov qword [rsp + 0x188], rdx
cmp byte [r12 + 0xac], 0
mov eax, 0x400
mov rcx, r12
mov r12d, 0x608
cmove r12d, eax
mov qword [rsp + 0x78], rcx
or r12d, dword [rcx + 0xa8]
cmp qword [rsp + 0x240], 0
je 0x1400aa449
mov qword [rsp + 0x58], rbp
mov rbx, qword [rsp + 0x258]
mov qword [rsp + 0x230], rbx
movdqu xmm0, xmmword [rsp + 0x248]
movdqa xmmword [rsp + 0x220], xmm0
mov qword [rsp + 0x140], 2
pxor xmm0, xmm0
movdqu xmmword [rsp + 0x148], xmm0
test rbx, rbx
mov qword [rsp + 0x50], r13
je 0x1400aa48c
mov edi, 2
xor ebp, ebp
jmp 0x1400aa4bf
mov rax, qword [rsp + 0x160]
mov qword [rax], rsi
mov qword [rax + 0x10], 2
xor esi, esi
test rbp, rbp
je 0x1400aa43b
add rbp, rbp
mov r8d, 2
mov rcx, r13
mov rdx, rbp
call fcn.140002860
test sil, sil
je 0x1400a9231
jmp 0x1400a9343
mov r14d, 2
xor r15d, r15d
xor edi, edi
mov rcx, qword [rsp + 0x78]
cmp byte [rcx + 0x88], 2
jne 0x1400aad5c
xor eax, eax
mov qword [rsp + 0x170], rax
mov eax, 2
mov qword [rsp + 0x218], rax
xor eax, eax
mov qword [rsp + 0x260], rax
jmp 0x1400aaee4
mov sil, 1
lea rcx, [rsp + 0x140]
xor edx, edx
call fcn.14006cbe0
mov rdi, qword [rsp + 0x140]
mov rbp, qword [rsp + 0x150]
mov word [rdi + rbp*2], 0
inc rbp
mov qword [rsp + 0x150], rbp
mov rax, qword [rsp + 0x220]
mov rcx, qword [rsp + 0x228]
xor edx, edx
test rax, rax
setne dl
cmove rbx, rax
mov qword [rsp + 0x270], rdx
mov qword [rsp + 0x278], 0
mov qword [rsp + 0x280], rax
mov qword [rsp + 0x288], rcx
mov qword [rsp + 0x290], rdx
mov qword [rsp + 0x298], 0
mov qword [rsp + 0x2a0], rax
mov qword [rsp + 0x2a8], rcx
mov qword [rsp + 0x2b0], rbx
lea rcx, [rsp + 0x1d0]
lea rdx, [rsp + 0x270]
call fcn.1400698e0
mov r8, qword [rsp + 0x1d0]
test r8, r8
je 0x1400aace6
mov r9, qword [rsp + 0x1e0]
imul r10, r9, 0x38
mov rbx, qword [r8 + r10 + 0x168]
mov r13, qword [r8 + r10 + 0x170]
mov rsi, qword [r8 + r10 + 0x178]
mov rcx, qword [r8 + r10 + 0x180]
mov rdx, qword [r8 + r10 + 0x188]
mov rax, qword [r8 + r10 + 0x190]
movzx r11d, byte [r8 + r10 + 0x198]
mov r14d, dword [r8 + r10 + 0x19c]
mov dword [rsp + 0x83], r14d
mov r10d, dword [r8 + r10 + 0x199]
mov dword [rsp + 0x80], r10d
shl r9, 5
movups xmm0, xmmword [r8 + r9]
movups xmm1, xmmword [r8 + r9 + 0x10]
lea r8, [rsp + 0x87]
movups xmmword [r8 + 0x10], xmm1
movups xmmword [r8], xmm0
mov r8, qword [rsp + 0x9f]
mov qword [rsp + 0xff], r8
mov r8d, dword [rsp + 0x80]
movzx r9d, word [rsp + 0x84]
movzx r10d, byte [rsp + 0x86]
mov r14, qword [rsp + 0x87]
movzx r15d, byte [rsp + 0x8f]
movdqu xmm0, xmmword [rsp + 0x90]
movdqa xmmword [rsp + 0xf0], xmm0
mov dword [rsp + 0xe0], r8d
mov word [rsp + 0xe4], r9w
mov byte [rsp + 0xe6], r10b
mov qword [rsp + 0xe7], r14
mov byte [rsp + 0xef], r15b
cmp r11b, 2
je 0x1400aace6
lea r8, [rsp + 0xe7]
movdqu xmm0, xmmword [r8]
movups xmm1, xmmword [r8 + 0x10]
movaps xmmword [rsp + 0x1e0], xmm1
movdqa xmmword [rsp + 0x1d0], xmm0
add rax, rcx
xor r11d, r11d
mov r8, rcx
jmp 0x1400aa69d
xor r11d, r11d
test r9w, r9w
je 0x1400aa9f4
mov r9w, 1
test r11w, r11w
jne 0x1400aa690
cmp r8, rax
je 0x1400aa758
movzx r11d, byte [r8]
test r11b, r11b
js 0x1400aa6c2
inc r8
mov r10d, r11d
jmp 0x1400aa723
mov r10d, r11d
and r10d, 0x1f
movzx r15d, byte [r8 + 1]
and r15d, 0x3f
cmp r11b, 0xdf
jbe 0x1400aa718
movzx r14d, byte [r8 + 2]
shl r15d, 6
and r14d, 0x3f
or r14d, r15d
cmp r11b, 0xf0
jb 0x1400aa72e
movzx r11d, byte [r8 + 3]
add r8, 4
and r10d, 7
shl r10d, 0x12
shl r14d, 6
and r11d, 0x3f
or r11d, r14d
or r10d, r11d
cmp r10d, 0xffff
jbe 0x1400aa723
jmp 0x1400aa742
add r8, 2
shl r10d, 6
or r10d, r15d
xor r11d, r11d
mov r9d, r10d
jmp 0x1400aa693
add r8, 3
shl r10d, 0xc
or r10d, r14d
cmp r10d, 0xffff
jbe 0x1400aa723
and r10d, 0x3ff
or r10d, 0xdc00
mov r11d, r10d
jmp 0x1400aa693
test rdx, rdx
je 0x1400aa768
mov r8d, 1
call fcn.140002860
mov rax, qword [rsp + 0x148]
sub rax, rbp
cmp rax, rsi
jae 0x1400aa79b
lea rcx, [rsp + 0x140]
mov rdx, rbp
mov r8, rsi
call fcn.14006d7a0
mov rdi, qword [rsp + 0x140]
mov rbp, qword [rsp + 0x150]
lea r8, [rsi + rsi]
lea rcx, [rdi + rbp*2]
mov rdx, rbx
call sub.msvcrt.dll_memcpy
add rbp, rsi
mov qword [rsp + 0x150], rbp
test r13, r13
je 0x1400aa7cf
add r13, r13
mov r8d, 2
mov rcx, rbx
mov rdx, r13
call fcn.140002860
cmp rbp, qword [rsp + 0x148]
jne 0x1400aa800
lea rcx, [rsp + 0x140]
mov rdx, rbp
mov r13, qword [rsp + 0x50]
call fcn.14006cbe0
mov rdi, qword [rsp + 0x140]
mov rbp, qword [rsp + 0x150]
jmp 0x1400aa805
mov r13, qword [rsp + 0x50]
mov word [rdi + rbp*2], 0x3d
inc rbp
mov qword [rsp + 0x150], rbp
mov rsi, qword [rsp + 0x1d0]
mov rbx, qword [rsp + 0x1d8]
mov rcx, qword [rsp + 0x1e0]
movzx edx, byte [rsp + 0x1e8]
lea rax, [rsi + rcx]
xor r11d, r11d
mov r8, rsi
jmp 0x1400aa84f
xor r11d, r11d
test r9w, r9w
je 0x1400aac54
mov r9w, 1
test r11w, r11w
jne 0x1400aa842
cmp r8, rax
je 0x1400aa8fe
movzx r11d, byte [r8]
test r11b, r11b
js 0x1400aa874
inc r8
mov r10d, r11d
jmp 0x1400aa8dd
mov r10d, r11d
and r10d, 0x1f
movzx ebp, byte [r8 + 1]
and ebp, 0x3f
cmp r11b, 0xdf
jbe 0x1400aa8bc
movzx edi, byte [r8 + 2]
shl ebp, 6
and edi, 0x3f
or edi, ebp
cmp r11b, 0xf0
jb 0x1400aa8c9
movzx r11d, byte [r8 + 3]
add r8, 4
and r10d, 7
shl r10d, 0x12
shl edi, 6
and r11d, 0x3f
or r11d, edi
or r10d, r11d
jmp 0x1400aa8d4
add r8, 2
shl r10d, 6
or r10d, ebp
jmp 0x1400aa8dd
add r8, 3
shl r10d, 0xc
or r10d, edi
cmp r10d, 0xffff
ja 0x1400aa8e8
xor r11d, r11d
mov r9d, r10d
jmp 0x1400aa845
and r10d, 0x3ff
or r10d, 0xdc00
mov r11d, r10d
jmp 0x1400aa845
cmp dl, 2
je 0x1400abea7
lea r9, [rsp + 0x1e9]
mov r8d, dword [r9]
mov r9d, dword [r9 + 3]
lea r10, [rsp + 0x87]
mov dword [r10 + 0x15], r9d
mov dword [r10 + 0x12], r8d
mov qword [rsp + 0x80], rsi
mov qword [rsp + 0x88], rbx
mov qword [rsp + 0x90], rcx
mov byte [rsp + 0x98], dl
mov qword [rsp + 0x190], rsi
mov qword [rsp + 0x198], rax
mov word [rsp + 0x1a0], 0
lea rcx, [rsp + 0x140]
lea rdx, [rsp + 0x190]
call fcn.1400735b0
test rbx, rbx
je 0x1400aa98a
mov r8d, 1
mov rcx, rsi
mov rdx, rbx
call fcn.140002860
mov rbp, qword [rsp + 0x150]
cmp rbp, qword [rsp + 0x148]
jne 0x1400aa9c6
lea rcx, [rsp + 0x140]
mov rdx, rbp
call fcn.14006cbe0
lea rcx, [rsp + 0x1d0]
lea rdx, [rsp + 0x270]
mov rbp, qword [rsp + 0x150]
jmp 0x1400aa9d6
lea rcx, [rsp + 0x1d0]
lea rdx, [rsp + 0x270]
mov rdi, qword [rsp + 0x140]
mov word [rdi + rbp*2], 0
inc rbp
mov qword [rsp + 0x150], rbp
jmp 0x1400aa53b
test rdx, rdx
je 0x1400aaa04
mov r8d, 1
call fcn.140002860
mov rdx, qword [rsp + 0x1d8]
test rdx, rdx
je 0x1400aaa24
mov rcx, qword [rsp + 0x1d0]
mov r8d, 1
call fcn.140002860
lea rdi, str.nul_byte_found_in_provided_data
test r13, r13
je 0x1400aaa44
add r13, r13
mov r8d, 2
mov rcx, rbx
mov rdx, r13
call fcn.140002860
mov r13, qword [rsp + 0x50]
xor esi, esi
lea rcx, [rsp + 0x270]
call fcn.140062350
mov rdx, qword [rsp + 0x148]
test rdx, rdx
je 0x1400aaa7b
mov rcx, qword [rsp + 0x140]
add rdx, rdx
mov r8d, 2
call fcn.140002860
mov rbp, qword [rsp + 0x58]
mov rax, qword [rsp + 0x160]
mov qword [rax], rdi
mov qword [rax + 0x10], 2
jmp 0x1400ab23e
lea rcx, [rsp + 0xe8]
call fcn.140063090
lea rdx, str.PATHlibrary_std_src_sys_commonprocess.rs
lea rcx, [rsp + 0x190]
mov r8d, 4
call fcn.1400807a0
cmp byte [rsp + 0x1a8], 2
je 0x1400aac95
movdqu xmm0, xmmword [rsp + 0x190]
movups xmm1, xmmword [rsp + 0x1a0]
movdqa xmmword [rsp + 0x1d0], xmm0
movaps xmmword [rsp + 0x1e0], xmm1
mov rsi, qword [rsp + 0x1d0]
mov rax, qword [rsp + 0x1e0]
add rax, rsi
mov qword [rsp + 0xe0], rsi
mov qword [rsp + 0xe8], rax
mov word [rsp + 0xf0], 0
mov byte [rsp + 0xf8], 1
lea rbp, [rsp + 0x289]
lea r14, [rsp + 0x99]
lea rdi, [rsp + 0x270]
lea rbx, [rsp + 0xe0]
jmp 0x1400aab57
mov rax, qword [rsp + 0x270]
test rax, rax
jne 0x1400aba8c
mov rcx, rdi
mov rdx, rbx
call fcn.1400a3e30
jmp 0x1400aab6f
mov rcx, rdi
mov rdx, rbx
call fcn.1400a3e30
movzx eax, byte [rsp + 0x288]
cmp al, 2
je 0x1400aac7a
mov rcx, qword [rsp + 0x270]
mov rdx, qword [rsp + 0x278]
mov r8, qword [rsp + 0x280]
test r8, r8
jne 0x1400aabae
test rdx, rdx
je 0x1400aab64
mov r8d, 1
call fcn.140002860
jmp 0x1400aab64
mov r9d, dword [rbp]
mov r10d, dword [rbp + 3]
mov dword [r14 + 3], r10d
mov dword [r14], r9d
mov qword [rsp + 0x80], rcx
mov qword [rsp + 0x88], rdx
mov qword [rsp + 0x90], r8
mov byte [rsp + 0x98], al
lea rcx, [rsp + 0x80]
mov rdx, qword [rsp + 0x68]
mov r8, r13
call fcn.140091050
cmp byte [rsp + 0xd8], 0
jne 0x1400aac15
mov r8d, 3
lea rcx, [rsp + 0x80]
lea rdx, str.exeNULexit_code:
call fcn.140091db0
mov r15, qword [rsp + 0x80]
mov r8, qword [rsp + 0x90]
mov rcx, rdi
mov rdx, r15
call fcn.1400ac860
mov rdx, qword [rsp + 0x88]
test rdx, rdx
je 0x1400aab46
mov r8d, 1
mov rcx, r15
call fcn.140002860
jmp 0x1400aab46
lea rdi, str.nul_byte_found_in_provided_data
test rbx, rbx
je 0x1400aaa49
mov r8d, 1
mov rcx, rsi
mov rdx, rbx
call fcn.140002860
jmp 0x1400aaa49
mov rdx, qword [rsp + 0x1d8]
test rdx, rdx
je 0x1400aac95
mov r8d, 1
mov rcx, rsi
call fcn.140002860
lea rbp, [0x140127598]
jmp 0x1400a921e
cmp rsi, rax
jb 0x1400ac13f
test ebx, ebx
mov r13, qword [rsp + 0x50]
je 0x1400ab2a4
mov rbx, rax
lea rdi, [rax + rax]
mov rax, qword [0x14014afc8]
movzx eax, byte [rax]
mov edx, 2
mov rcx, rdi
call fcn.140002850
test rax, rax
je 0x1400ac153
mov rsi, rax
jmp 0x1400ab2ae
xor esi, esi
lea rcx, [rsp + 0x270]
mov r13, qword [rsp + 0x50]
call fcn.140062350
cmp rbp, qword [rsp + 0x148]
jne 0x1400aad26
xor esi, esi
lea rcx, [rsp + 0x140]
mov rdx, rbp
call fcn.14006cbe0
mov rdi, qword [rsp + 0x140]
mov rbp, qword [rsp + 0x150]
mov word [rdi + rbp*2], 0
mov r14, qword [rsp + 0x140]
test r14, r14
je 0x1400aaa7b
mov r15, qword [rsp + 0x148]
mov rbp, qword [rsp + 0x58]
mov rcx, qword [rsp + 0x78]
cmp byte [rcx + 0x88], 2
je 0x1400aa466
mov rax, qword [rcx + 0x70]
mov rcx, qword [rcx + 0x80]
add rcx, rax
xor r10d, r10d
mov rdx, rax
jmp 0x1400aad7f
xor r10d, r10d
test r8w, r8w
je 0x1400aae30
mov r8w, 1
test r10w, r10w
jne 0x1400aad72
cmp rdx, rcx
je 0x1400aae4f
movzx r10d, byte [rdx]
test r10b, r10b
js 0x1400aada4
inc rdx
mov r9d, r10d
jmp 0x1400aae0f
mov r9d, r10d
and r9d, 0x1f
movzx esi, byte [rdx + 1]
and esi, 0x3f
cmp r10b, 0xdf
jbe 0x1400aadee
movzx r11d, byte [rdx + 2]
shl esi, 6
and r11d, 0x3f
or r11d, esi
cmp r10b, 0xf0
jb 0x1400aadfb
movzx r10d, byte [rdx + 3]
add rdx, 4
and r9d, 7
shl r9d, 0x12
shl r11d, 6
and r10d, 0x3f
or r10d, r11d
or r9d, r10d
jmp 0x1400aae06
add rdx, 2
shl r9d, 6
or r9d, esi
jmp 0x1400aae0f
add rdx, 3
shl r9d, 0xc
or r9d, r11d
cmp r9d, 0xffff
ja 0x1400aae1a
xor r10d, r10d
mov r8d, r9d
jmp 0x1400aad75
and r9d, 0x3ff
or r9d, 0xdc00
mov r10d, r9d
jmp 0x1400aad75
lea rax, str.nul_byte_found_in_provided_data
mov rcx, qword [rsp + 0x160]
mov qword [rcx], rax
mov qword [rcx + 0x10], 2
jmp 0x1400ab225
mov qword [rsp + 0x270], rax
mov qword [rsp + 0x278], rcx
mov word [rsp + 0x280], 0
lea rcx, [rsp + 0x80]
lea rdx, [rsp + 0x270]
call fcn.140073730
mov rcx, qword [rsp + 0x88]
mov rdx, qword [rsp + 0x90]
mov rax, rcx
mov qword [rsp + 0x170], rcx
cmp rdx, rcx
jne 0x1400aaec3
lea rcx, [rsp + 0x80]
call fcn.14006cbe0
mov rax, qword [rsp + 0x88]
mov qword [rsp + 0x170], rax
mov rdx, qword [rsp + 0x90]
mov rcx, qword [rsp + 0x80]
mov word [rcx + rdx*2], 0
mov rax, rcx
mov qword [rsp + 0x260], rcx
mov qword [rsp + 0x218], rcx
pxor xmm0, xmm0
movdqa xmmword [rsp + 0x1d0], xmm0
mov qword [rsp + 0x1e0], 0
lea rbx, [0x140169190]
mov rcx, rbx
call sub.KERNEL32.dll_AcquireSRWLockExclusive
mov rax, qword [0x140169150]
shl rax, 1
test rax, rax
mov qword [rsp + 0x58], rbp
mov qword [rsp + 0x50], r13
mov qword [rsp + 0x168], r14
mov qword [rsp + 0x1b8], r15
je 0x1400aaf43
call fcn.14009a180
mov esi, eax
xor sil, 1
jmp 0x1400aaf45
xor esi, esi
movzx eax, byte [0x140169198]
mov byte [rsp + 0x66], al
test al, al
je 0x1400aaf63
mov qword [rsp + 0xe8], rbx
mov eax, 1
jmp 0x1400aaf6d
mov qword [rsp + 0xe8], rbx
xor eax, eax
mov byte [rsp + 0xf0], sil
mov qword [rsp + 0xe0], rax
mov qword [rsp + 0x80], 0
mov qword [rsp + 0x90], 0
mov qword [rsp + 0xa0], 0
mov rbp, qword [rsp + 0x78]
mov rax, qword [rbp]
mov r13, qword [rbp + 0x10]
xor edx, edx
cmp rax, 5
mov r8, rbp
cmove r8, rdx
cmp byte [rsp + 0x1c0], 0
mov ecx, 1
cmovne rcx, qword [rsp + 0x1c8]
lea r14, [rsp + 0x268]
lea r9, [rsp + 0x190]
cmovne r9, r14
add r8, 8
cmp rax, 5
cmovne rcx, rax
cmove r8, r9
lea r15, [rbp + 0x10]
cmp r13, 5
cmove r15, rdx
mov rbx, qword [rbp + 0x20]
add rbp, 0x20
cmp rbx, 5
cmove rbp, rdx
mov rdx, qword [r8]
lea r9, [rsp + 0x80]
mov r8d, 0xfffffff6
call fcn.1400ac940
test rax, rax
je 0x1400ab063
mov rax, qword [rsp + 0x160]
mov qword [rax], rdx
mov qword [rax + 0x10], 2
mov rbp, qword [rsp + 0x58]
mov r13, qword [rsp + 0x50]
mov r14, qword [rsp + 0x168]
mov r15, qword [rsp + 0x1b8]
movzx ebx, byte [rsp + 0x66]
jmp 0x1400ab167
mov qword [rsp + 0x78], rdx
add r15, 8
cmp r13, 5
cmove r13, qword [rsp + 0x1c8]
lea r9, [rsp + 0x90]
cmove r15, r14
mov rdx, qword [r15]
mov rcx, r13
mov r8d, 0xfffffff5
call fcn.1400ac940
test rax, rax
mov r13, qword [rsp + 0x50]
mov r15, qword [rsp + 0x1b8]
je 0x1400ab0eb
mov rax, qword [rsp + 0x160]
mov qword [rax], rdx
mov qword [rax + 0x10], 2
mov rbp, qword [rsp + 0x58]
mov r14, qword [rsp + 0x168]
jmp 0x1400ab158
call sub.KERNEL32.dll_GetLastError
mov edi, eax
shl rdi, 0x20
or rdi, 2
xor esi, esi
mov r12, r15
mov r13, qword [rsp + 0x50]
jmp 0x1400ab2bf
mov qword [rsp + 0x1c0], rdx
add rbp, 8
cmp rbx, 5
cmove rbx, qword [rsp + 0x1c8]
lea r9, [rsp + 0xa0]
cmove rbp, r14
mov rdx, qword [rbp]
mov rcx, rbx
mov r8d, 0xfffffff4
call fcn.1400ac940
test rax, rax
mov rbp, qword [rsp + 0x58]
mov r14, qword [rsp + 0x168]
je 0x1400ab899
mov rax, qword [rsp + 0x160]
mov qword [rax], rdx
mov qword [rax + 0x10], 2
mov rcx, qword [rsp + 0x1c0]
call sub.KERNEL32.dll_CloseHandle
movzx ebx, byte [rsp + 0x66]
mov rcx, qword [rsp + 0x78]
call sub.KERNEL32.dll_CloseHandle
cmp qword [rsp + 0x80], 0
je 0x1400ab17f
mov rcx, qword [rsp + 0x88]
call sub.KERNEL32.dll_CloseHandle
cmp qword [rsp + 0x90], 0
je 0x1400ab197
mov rcx, qword [rsp + 0x98]
call sub.KERNEL32.dll_CloseHandle
cmp qword [rsp + 0xa0], 0
je 0x1400ab1af
mov rcx, qword [rsp + 0xa8]
call sub.KERNEL32.dll_CloseHandle
movabs rax, 0x7fffffffffffffff
test bl, bl
je 0x1400ab1d5
test sil, sil
jne 0x1400ab1f6
mov rcx, qword [0x140169150]
test rcx, rax
je 0x1400ab1f6
call fcn.14009a180
jmp 0x1400ab1eb
test sil, sil
jne 0x1400ab1f6
mov rcx, qword [0x140169150]
test rcx, rax
je 0x1400ab1f6
call fcn.14009a180
test al, al
jne 0x1400ab1f6
mov byte [0x140169198], 1
lea rcx, [0x140169190]
call sub.KERNEL32.dll_ReleaseSRWLockExclusive
mov rdx, qword [rsp + 0x170]
test rdx, rdx
je 0x1400ab225
add rdx, rdx
mov r8d, 2
mov rcx, qword [rsp + 0x218]
call fcn.140002860
test r15, r15
je 0x1400ab23e
add r15, r15
mov r8d, 2
mov rcx, r14
mov rdx, r15
call fcn.140002860
mov rdx, qword [rsp + 0x180]
test rdx, rdx
je 0x1400ab261
mov rcx, qword [rsp + 0x178]
add rdx, rdx
mov r8d, 2
call fcn.140002860
mov rdx, qword [rsp + 0x70]
test rdx, rdx
je 0x1400ab281
add rdx, rdx
mov r8d, 2
mov rcx, qword [rsp + 0xd8]
call fcn.140002860
mov sil, 1
cmp byte [rsp + 0x68], 0
jne 0x1400a9343
jmp 0x1400aa422
movups xmm6, xmmword [rsp + 0x278]
mov r13, rax
jmp 0x1400aa16a
mov rbx, rax
mov esi, 2
xor edi, edi
mov rcx, rsi
mov rdx, rbp
mov r8, rdi
call sub.msvcrt.dll_memcpy
mov rdi, rbx
mov rdx, qword [rsp + 0x70]
test rdx, rdx
mov rbp, qword [rsp + 0x58]
je 0x1400ab2e1
add rdx, rdx
mov r8d, 2
mov rcx, qword [rsp + 0x68]
call fcn.140002860
test rsi, rsi
je 0x1400ab866
mov qword [rsp + 0xe0], rsi
mov qword [rsp + 0xe8], rdi
mov r14, rdi
mov qword [rsp + 0xf0], rdi
lea rdx, str.cmd.exefallback_RNG_broken:
lea rcx, [rsp + 0x270]
mov r8d, 8
call fcn.1400ffd90
mov rax, qword [rsp + 0x280]
mov qword [rsp + 0x96], rax
movups xmm0, xmmword [rsp + 0x270]
movups xmmword [rsp + 0x86], xmm0
mov qword [rsp + 0x270], 1
mov qword [rsp + 0x280], 1
mov word [rsp + 0x288], 0
mov rax, qword [rsp + 0x8e]
mov qword [rsp + 0x298], rax
mov rax, qword [rsp + 0x96]
mov qword [rsp + 0x2a0], rax
movdqu xmm0, xmmword [rsp + 0x80]
movdqu xmmword [rsp + 0x28a], xmm0
mov r15, qword [rsp + 0x290]
test r15, r15
mov qword [rsp + 0x78], r12
je 0x1400ab5a9
lea rbx, [rsp + 0x290]
mov r12, qword [rsp + 0x298]
movzx edi, word [rsp + 0x2a0]
lea rax, [r12 + 3]
mov qword [rsp + 0x70], rax
xor ebp, ebp
mov rdx, r14
jmp 0x1400ab3e4
mov word [rsi + rdx*2], di
inc rdx
mov qword [rsp + 0xf0], rdx
mov edi, r14d
test r15, r15
cmovne r15, rbx
je 0x1400ab48a
test di, di
jne 0x1400ab4c8
mov r10, rdx
mov rdx, qword [r15]
cmp rdx, r12
je 0x1400ab47b
lea rax, [rdx + 1]
mov qword [r15], rax
movzx eax, byte [rdx]
test al, al
jns 0x1400ab4f4
mov ecx, eax
and ecx, 0x1f
lea r8, [rdx + 2]
mov qword [r15], r8
movzx r9d, byte [rdx + 1]
and r9d, 0x3f
cmp al, 0xdf
jbe 0x1400ab4ec
lea r8, [rdx + 3]
mov qword [r15], r8
movzx r8d, byte [rdx + 2]
shl r9d, 6
and r8d, 0x3f
or r8d, r9d
cmp al, 0xf0
jb 0x1400ab557
lea rax, [rdx + 4]
mov qword [r15], rax
movzx eax, byte [rdx + 3]
and ecx, 7
shl ecx, 0x12
shl r8d, 6
and eax, 0x3f
or eax, r8d
or eax, ecx
cmp eax, 0x110000
jne 0x1400ab560
mov qword [rsp + 0x290], 0
mov rdx, r10
cmp rbp, 1
je 0x1400ab5d5
lea rax, [rbp + 1]
mov qword [rsp + 0x278], rax
mov r14d, edi
movzx ecx, word [rsp + rbp*2 + 0x288]
mov rbp, rax
mov edi, ecx
mov r15, qword [rsp + 0x290]
cmp rdx, qword [rsp + 0xe8]
jne 0x1400ab3d2
jmp 0x1400ab512
mov word [rsp + 0x2a0], 0
xor r14d, r14d
mov r15, qword [rsp + 0x290]
cmp rdx, qword [rsp + 0xe8]
je 0x1400ab512
jmp 0x1400ab3d2
shl ecx, 6
or ecx, r9d
mov eax, ecx
mov rdx, r10
xor r14d, r14d
mov edi, eax
mov r15, qword [rsp + 0x290]
cmp rdx, qword [rsp + 0xe8]
jne 0x1400ab3d2
test r15, r15
je 0x1400ab52b
mov r8, qword [rsp + 0x70]
sub r8, r15
shr r8, 2
sub r8, rbp
inc r8
jmp 0x1400ab534
mov r8d, 1
sub r8, rbp
inc r8
lea rcx, [rsp + 0xe0]
mov r13, rdx
call fcn.14006d7a0
mov rsi, qword [rsp + 0xe0]
mov rdx, r13
jmp 0x1400ab3d2
shl ecx, 0xc
or r8d, ecx
mov eax, r8d
cmp eax, 0xffff
mov rdx, r10
jbe 0x1400ab4f7
lea edi, [rax + 0xff0000]
shr edi, 0xa
or edi, 0xd800
and eax, 0x3ff
or eax, 0xdc00
mov word [rsp + 0x2a0], ax
mov r14d, eax
mov r15, qword [rsp + 0x290]
cmp rdx, qword [rsp + 0xe8]
jne 0x1400ab3d2
jmp 0x1400ab512
mov rdx, r14
cmp r14, r14
jne 0x1400ab5cf
lea rcx, [rsp + 0xe0]
mov r8d, 1
call fcn.14006d7a0
mov rsi, qword [rsp + 0xe0]
mov rdx, r14
mov word [rsi + rdx*2], 0
mov rax, qword [rsp + 0xe0]
mov rdi, qword [rsp + 0xe8]
test rax, rax
je 0x1400ab85c
mov qword [rsp + 0xd8], rax
mov qword [rsp + 0x70], rdi
mov rax, qword [rsp + 0x78]
mov r15, qword [rax + 0x90]
mov rcx, qword [rax + 0xa0]
mov qword [rsp + 0x168], rcx
movzx eax, byte [rax + 0xad]
mov byte [rsp + 0x1b8], al
lea rdx, [0x140126e32]
lea rcx, [rsp + 0x80]
mov r8d, 0xf
mov rbp, qword [rsp + 0x58]
call fcn.1400ffd90
mov rbx, qword [rsp + 0x80]
mov r12, qword [rsp + 0x88]
movzx eax, word [rsp + 0x90]
test ax, ax
je 0x1400ab876
mov qword [rsp + 0x68], rax
xor r13d, r13d
lea rbp, [r12 + 3]
mov rax, rbp
sub rax, rbx
shr rax, 2
cmp rax, 4
mov r14d, 3
cmovae r14, rax
movabs rax, 0x3fffffffffffffff
xor esi, esi
cmp r14, rax
setne al
je 0x1400ac162
mov sil, al
add rsi, rsi
lea rdi, [r14 + r14]
add rdi, 2
mov rax, qword [0x14014afc8]
movzx eax, byte [rax]
mov rcx, rdi
mov rdx, rsi
call fcn.140002850
test rax, rax
je 0x1400ac169
mov rcx, rax
inc r14
mov rax, qword [rsp + 0x68]
mov word [rcx], ax
mov qword [rsp + 0x270], rcx
mov qword [rsp + 0x278], r14
mov qword [rsp + 0x280], 1
mov esi, 1
lea rdi, [rsp + 0x270]
jmp 0x1400ab721
mov rcx, qword [rsp + 0x270]
mov word [rcx + rsi*2], r13w
inc rsi
mov qword [rsp + 0x280], rsi
mov r13d, r14d
test r13w, r13w
je 0x1400ab72f
xor r14d, r14d
jmp 0x1400ab7ea
cmp rbx, r12
je 0x1400ab815
movzx r13d, byte [rbx]
test r13b, r13b
js 0x1400ab74c
inc rbx
xor r14d, r14d
jmp 0x1400ab7ea
mov eax, r13d
and eax, 0x1f
movzx r8d, byte [rbx + 1]
and r8d, 0x3f
cmp r13b, 0xdf
jbe 0x1400ab79c
movzx edx, byte [rbx + 2]
shl r8d, 6
and edx, 0x3f
or edx, r8d
cmp r13b, 0xf0
jb 0x1400ab7ae
movzx r13d, byte [rbx + 3]
and eax, 7
shl eax, 0x12
shl edx, 6
and r13d, 0x3f
or r13d, edx
or r13d, eax
cmp r13d, 0x110000
je 0x1400ab815
add rbx, 4
jmp 0x1400ab7ba
add rbx, 2
shl eax, 6
or eax, r8d
mov r13d, eax
xor r14d, r14d
jmp 0x1400ab7ea
add rbx, 3
shl eax, 0xc
or edx, eax
mov r13d, edx
cmp r13d, 0xffff
jbe 0x1400ab727
lea eax, [r13 + 0xff0000]
shr eax, 0xa
or eax, 0xd800
and r13d, 0x3ff
or r13d, 0xdc00
mov r14d, r13d
mov r13d, eax
cmp rsi, qword [rsp + 0x278]
jne 0x1400ab70e
mov r8, rbp
sub r8, rbx
shr r8, 2
inc r8
mov rcx, rdi
mov rdx, rsi
call fcn.14006d7a0
jmp 0x1400ab706
mov rdi, qword [rsp + 0x280]
mov qword [rsp + 0xf0], rdi
movdqu xmm0, xmmword [rsp + 0x270]
movdqa xmmword [rsp + 0xe0], xmm0
cmp rdi, qword [rsp + 0xe8]
mov rbp, qword [rsp + 0x58]
mov r13, qword [rsp + 0x50]
mov rbx, qword [rsp + 0x170]
je 0x1400abb6e
jmp 0x1400abb86
mov rbp, qword [rsp + 0x58]
mov r13, qword [rsp + 0x50]
mov rax, qword [rsp + 0x160]
mov qword [rax], rdi
jmp 0x1400aa418
cmp rbx, r12
je 0x1400abb46
movzx r9d, byte [rbx]
test r9b, r9b
js 0x1400abae9
mov qword [rsp + 0x68], r9
inc rbx
jmp 0x1400ab669
pxor xmm0, xmm0
movdqu xmmword [rsp + 0x2a4], xmm0
movdqu xmmword [rsp + 0x298], xmm0
movdqu xmmword [rsp + 0x288], xmm0
movdqu xmmword [rsp + 0x278], xmm0
movdqu xmmword [rsp + 0x2b8], xmm0
movdqu xmmword [rsp + 0x2c8], xmm0
mov dword [rsp + 0x270], 0x68
test rdx, rdx
mov rax, qword [rsp + 0x78]
mov rcx, qword [rsp + 0x1c0]
jne 0x1400ab8fa
test rcx, rcx
jne 0x1400ab8fa
test rax, rax
je 0x1400ab91d
mov dword [rsp + 0x2ac], 0x100
mov qword [rsp + 0x2c0], rax
mov qword [rsp + 0x2c8], rcx
mov qword [rsp + 0x2d0], rdx
mov rbx, rdx
mov rcx, qword [rsp + 0x178]
lea rax, [rsp + 0x1d0]
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x270]
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x260]
mov qword [rsp + 0x38], rax
mov qword [rsp + 0x30], rdi
mov rdi, rcx
mov dword [rsp + 0x28], r12d
mov dword [rsp + 0x20], 1
mov rcx, qword [rsp + 0xd8]
mov rdx, rdi
xor r8d, r8d
xor r9d, r9d
call sub.KERNEL32.dll_CreateProcessW
test eax, eax
je 0x1400ababc
movups xmm0, xmmword [rsp + 0x80]
movups xmm1, xmmword [rsp + 0x90]
movups xmm2, xmmword [rsp + 0xa0]
mov rax, qword [rsp + 0x160]
movups xmmword [rax + 0x30], xmm2
movups xmmword [rax + 0x20], xmm1
movups xmmword [rax + 0x10], xmm0
movdqa xmm0, xmmword [rsp + 0x1d0]
movdqu xmmword [rax], xmm0
mov rcx, rbx
call sub.KERNEL32.dll_CloseHandle
mov rcx, qword [rsp + 0x1c0]
call sub.KERNEL32.dll_CloseHandle
mov rcx, qword [rsp + 0x78]
call sub.KERNEL32.dll_CloseHandle
lea rcx, [rsp + 0xe0]
call fcn.140062a10
mov rdx, qword [rsp + 0x170]
test rdx, rdx
je 0x1400aba0a
add rdx, rdx
mov r8d, 2
mov rcx, qword [rsp + 0x218]
call fcn.140002860
test r15, r15
je 0x1400aba23
add r15, r15
mov r8d, 2
mov rcx, r14
mov rdx, r15
call fcn.140002860
mov rdx, qword [rsp + 0x180]
test rdx, rdx
je 0x1400aba41
add rdx, rdx
mov r8d, 2
mov rcx, rdi
call fcn.140002860
mov rdx, qword [rsp + 0x70]
test rdx, rdx
je 0x1400aba61
add rdx, rdx
mov r8d, 2
mov rcx, qword [rsp + 0xd8]
call fcn.140002860
test rbp, rbp
sete al
mov ecx, dword [rsp + 0x68]
or cl, al
jne 0x1400a9343
add rbp, rbp
mov r8d, 2
mov rcx, r13
mov rdx, rbp
call fcn.140002860
jmp 0x1400a9343
mov r13, rax
movdqu xmm6, xmmword [rsp + 0x278]
mov rdx, qword [rsp + 0x1d8]
test rdx, rdx
je 0x1400aa16a
mov r8d, 1
mov rcx, rsi
call fcn.140002860
jmp 0x1400aa16a
call sub.KERNEL32.dll_GetLastError
shl rax, 0x20
or rax, 2
mov rcx, qword [rsp + 0x160]
mov qword [rcx], rax
mov qword [rcx + 0x10], 2
mov rcx, rbx
call sub.KERNEL32.dll_CloseHandle
jmp 0x1400ab14b
mov eax, r9d
and eax, 0x1f
movzx edx, byte [rbx + 1]
and edx, 0x3f
cmp r9b, 0xdf
jbe 0x1400abe99
mov r8, r15
movzx ecx, byte [rbx + 2]
shl edx, 6
and ecx, 0x3f
or ecx, edx
cmp r9b, 0xf0
jb 0x1400abeaf
movzx edx, byte [rbx + 3]
and eax, 7
shl eax, 0x12
shl ecx, 6
and edx, 0x3f
or edx, ecx
or edx, eax
mov qword [rsp + 0x68], rdx
cmp edx, 0x110000
mov rbp, qword [rsp + 0x58]
mov r15, r8
jne 0x1400abec1
mov qword [rsp + 0xe0], 2
pxor xmm0, xmm0
movdqu xmmword [rsp + 0xe8], xmm0
xor edi, edi
mov r13, qword [rsp + 0x50]
mov rbx, qword [rsp + 0x170]
lea rcx, [rsp + 0xe0]
mov rdx, rdi
call fcn.14006cbe0
mov rdi, qword [rsp + 0xf0]
mov r14, qword [rsp + 0xe0]
mov word [r14 + rdi*2], 0x22
inc rdi
mov qword [rsp + 0xf0], rdi
lea rax, [rbx + rbx]
xor ecx, ecx
lea rsi, [0x140126e78]
cmp rax, rcx
je 0x1400abbc4
cmp word [r13 + rcx], 0x22
lea rcx, [rcx + 2]
jne 0x1400abbad
jmp 0x1400abdd7
movzx eax, word [r13 + rbx*2 - 2]
cmp ax, 0x5c
je 0x1400abdd7
lea rsi, [rbx - 1]
mov rcx, rbx
xor ebx, ebx
test ax, ax
cmove rbx, r13
test rbx, rbx
cmove rsi, rcx
cmove rbx, r13
mov r12, qword [rsp + 0xe8]
mov rax, r12
sub rax, rdi
cmp rax, rsi
jae 0x1400abc2d
lea rcx, [rsp + 0xe0]
mov rdx, rdi
mov r8, rsi
call fcn.14006d7a0
mov rdi, qword [rsp + 0xf0]
mov r14, qword [rsp + 0xe0]
mov r12, qword [rsp + 0xe8]
lea r8, [rsi + rsi]
lea rcx, [r14 + rdi*2]
mov rdx, rbx
call sub.msvcrt.dll_memcpy
add rdi, rsi
mov qword [rsp + 0xf0], rdi
cmp rdi, r12
jne 0x1400abc6d
lea rcx, [rsp + 0xe0]
mov rdx, r12
call fcn.14006cbe0
mov r14, qword [rsp + 0xe0]
mov rdi, qword [rsp + 0xf0]
lea rax, [rdi + 1]
mov word [r14 + rdi*2], 0x22
mov qword [rsp + 0xf0], rax
cmp byte [rsp + 0x1b8], 0
je 0x1400abd09
mov rax, qword [rsp + 0x168]
shl rax, 3
lea rbx, [rax + rax*4]
lea rdi, [rsp + 0xe0]
test rbx, rbx
je 0x1400abe36
mov rdx, qword [rsp + 0xf0]
cmp rdx, qword [rsp + 0xe8]
jne 0x1400abccd
mov rcx, rdi
call fcn.14006cbe0
mov rdx, qword [rsp + 0xf0]
mov rax, qword [rsp + 0xe0]
mov word [rax + rdx*2], 0x20
inc rdx
mov qword [rsp + 0xf0], rdx
mov rcx, rdi
mov rdx, r15
mov r8b, 1
call fcn.14009d210
mov rsi, rax
add r15, 0x28
add rbx, 0xffffffffffffffd8
test rax, rax
je 0x1400abca2
jmp 0x1400abdd7
mov rax, qword [rsp + 0x168]
lea rax, [rax + rax*4]
mov rcx, r15
lea r15, [r15 + rax*8]
lea rbx, str._t____________
cmp rcx, r15
je 0x1400abe36
mov rdi, rcx
mov rdx, qword [rsp + 0xf0]
cmp rdx, qword [rsp + 0xe8]
jne 0x1400abd56
lea rcx, [rsp + 0xe0]
call fcn.14006cbe0
mov rdx, qword [rsp + 0xf0]
mov rax, qword [rsp + 0xe0]
mov word [rax + rdx*2], 0x20
inc rdx
mov qword [rsp + 0xf0], rdx
cmp qword [rdi], 0
je 0x1400abd79
xor esi, esi
jmp 0x1400abdac
mov rax, rdi
mov r14, qword [rdi + 8]
mov r12, qword [rdi + 0x18]
xor r13d, r13d
cmp r12, r13
setne sil
je 0x1400abdac
movzx ecx, byte [r14 + r13]
mov r8d, 0x16
mov rdx, rbx
call fcn.1400fcb30
inc r13
cmp rax, 1
jne 0x1400abd87
lea rcx, [rsp + 0xe0]
mov rdx, rdi
mov r8d, esi
mov r13, qword [rsp + 0x50]
call fcn.14009d210
mov rsi, rax
mov rcx, rdi
add rcx, 0x28
test rax, rax
je 0x1400abd23
mov rdx, qword [rsp + 0xe8]
test rdx, rdx
je 0x1400abdfa
mov rcx, qword [rsp + 0xe0]
add rdx, rdx
mov r8d, 2
call fcn.140002860
mov rax, qword [rsp + 0x160]
mov qword [rax], rsi
mov qword [rax + 0x10], 2
mov rdx, qword [rsp + 0x70]
test rdx, rdx
je 0x1400aa420
add rdx, rdx
mov r8d, 2
mov rcx, qword [rsp + 0xd8]
call fcn.140002860
jmp 0x1400aa420
mov rdx, qword [rsp + 0xf0]
cmp rdx, qword [rsp + 0xe8]
jne 0x1400abe5d
lea rcx, [rsp + 0xe0]
call fcn.14006cbe0
mov rdx, qword [rsp + 0xf0]
mov r12, qword [rsp + 0x78]
mov rax, qword [rsp + 0xe0]
mov word [rax + rdx*2], 0x22
mov rax, qword [rsp + 0xe0]
mov rsi, qword [rsp + 0xe8]
test rax, rax
je 0x1400abdfa
inc rdx
mov dword [rsp + 0x68], 0
jmp 0x1400aa332
add rbx, 2
shl eax, 6
or eax, edx
jmp 0x1400ab664
mov rdi, rsi
jmp 0x1400aaa49
add rbx, 3
shl eax, 0xc
or ecx, eax
mov eax, ecx
mov qword [rsp + 0x68], rax
jmp 0x1400abec5
add rbx, 4
cmp dword [rsp + 0x68], 0xffff
ja 0x1400abed7
mov r15, r8
jmp 0x1400ab669
mov r13, qword [rsp + 0x68]
lea eax, [r13 + 0xff0000]
shr eax, 0xa
or eax, 0xd800
and r13d, 0x3ff
or r13d, 0xdc00
mov qword [rsp + 0x68], rax
mov r15, r8
jmp 0x1400ab66c
call sub.KERNEL32.dll_GetLastError
shl rax, 0x20
or rax, 2
mov qword [rsp + 0x1d0], rax
lea rax, [rsp + 0x1d0]
mov qword [rsp + 0xe0], rax
lea rax, [fcn.140085400]
mov qword [rsp + 0xe8], rax
lea rax, str.comparing_environment_keys_failed:
mov qword [rsp + 0x80], rax
mov qword [rsp + 0x88], 1
mov qword [rsp + 0xa0], 0
lea rax, [rsp + 0xe0]
mov qword [rsp + 0x90], rax
mov qword [rsp + 0x98], 1
lea rdx, str.library_std_src_syswindowsprocess.rs
lea rcx, [rsp + 0x80]
call fcn.1400f6880
jmp 0x1400ac174
mov ecx, 1
mov rdx, r15
call fcn.1400e7c30
jmp 0x1400ac174
call fcn.1400e7bf0
jmp 0x1400ac174
mov ecx, 1
mov rdx, r15
call fcn.1400e7c30
jmp 0x1400ac174
call fcn.1400e7bf0
jmp 0x1400ac174
mov rcx, rdi
mov rdx, rbp
call fcn.1400e7c30
jmp 0x1400ac174
call fcn.1400e7bf0
jmp 0x1400ac174
lea rcx, str.assertion_failed:_self.height___0
lea r8, [0x140122c20]
mov edx, 0x21
call fcn.1400f6900
jmp 0x1400ac174
mov rcx, rsi
mov rdx, r13
call fcn.1400e7c30
jmp 0x1400ac174
lea rcx, [0x140122d88]
lea r8, str.library_std_src_syswindowsmod.rs
mov edx, 0x28
call fcn.1400f6900
jmp 0x1400ac174
lea rcx, [0x140122d88]
lea r8, str.library_std_src_syswindowsmod.rs
mov edx, 0x28
call fcn.1400f6900
jmp 0x1400ac174
call sub.KERNEL32.dll_GetLastError
shl rax, 0x20
or rax, 2
mov qword [rsp + 0xe0], rax
lea rax, [rsp + 0xe0]
mov qword [rsp + 0x80], rax
lea rax, [fcn.140085400]
mov qword [rsp + 0x88], rax
lea rax, str.failure_getting_env_string_from_OS:
mov qword [rsp + 0x270], rax
mov qword [rsp + 0x278], 1
mov qword [rsp + 0x290], 0
lea rax, [rsp + 0x80]
mov qword [rsp + 0x280], rax
mov qword [rsp + 0x288], 1
lea rdx, str.library_std_src_syswindowsos.rs
lea rcx, [rsp + 0x270]
call fcn.1400f6880
jmp 0x1400ac174
call fcn.1400e7bf0
jmp 0x1400ac174
lea rcx, [0x140122d88]
lea r8, str.library_std_src_syswindowsmod.rs
mov edx, 0x28
call fcn.1400f6900
jmp 0x1400ac174
lea rax, str.library_std_src_syswindowsmod.rs
mov rcx, r8
mov rdx, rdi
mov r8, rax
call fcn.1400fd620
jmp 0x1400ac174
lea r8, str._rustc_eb26296b556cef10fb713a38f3d16b9886080f26librarycore_src_sliceiter.rs
call fcn.1400fd5a0
jmp 0x1400ac174
lea rax, str.library_std_src_syswindowsmod.rs
mov rcx, r8
mov rdx, rdi
mov r8, rax
call fcn.1400fd620
jmp 0x1400ac174
lea r8, str.library_std_src_syswindowsmod.rs
mov rcx, rax
mov rdx, rsi
call fcn.1400fd620
jmp 0x1400ac174
mov ecx, 2
mov rdx, rdi
call fcn.1400e7c30
jmp 0x1400ac174
call fcn.1400e7bf0
jmp 0x1400ac174
mov rcx, rsi
mov rdx, rdi
call fcn.1400e7c30
ud2