Function at 0x1400b10a0
Capabilities:
Create process on windows
Encode data using base64
Get common file path
Query environment variable

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x668
movaps xmmword [rsp + 0x650], xmm6
mov qword [rsp + 0x68], r8
movzx eax, byte [rdx + 0xa0]
test al, al
sete r8b
mov qword [rsp + 0xb0], rdx
mov rdi, qword [rdx + 0x98]
test rdi, rdi
sete dl
and dl, r8b
mov byte [rsp + 0x57], dl
mov qword [rsp + 0xb8], rcx
je 0x1400b10fb
xor r15d, r15d
jmp 0x1400b1e35
mov qword [rsp + 0x1b8], 0
mov qword [rsp + 0x1c8], 0
test al, al
je 0x1400b1134
mov rax, qword [rsp + 0xb0]
mov rax, qword [rax + 0x88]
test rax, rax
jne 0x1400b1345
jmp 0x1400b1c88
call qword [sym.imp.kernel32.dll_GetEnvironmentStringsW]
test rax, rax
je 0x1400b4791
mov rsi, rax
mov qword [rsp + 0x70], rdi
lea r15, [rsp + 0x270]
lea r12, [rsp + 0x160]
lea rbp, [rsp + 0x250]
mov r13, rax
nop word cs:[rax + rax]
cmp word [r13], 0
je 0x1400b131f
mov rdi, r13
mov rbx, 0xffffffffffffffff
mov rcx, 0xfffffffffffffffe
nop dword [rax]
mov rax, rcx
cmp word [rdi + rbx*2 + 2], 0
lea rbx, [rbx + 1]
lea rcx, [rcx + 2]
jne 0x1400b1190
lea r13, [rdi + rbx*2]
add r13, 2
cmp rbx, 1
je 0x1400b1170
test rbx, rbx
je 0x1400b4718
xor r14d, r14d
nop dword [rax]
cmp word [rdi + r14*2 + 2], 0x3d
je 0x1400b11e0
inc r14
add rax, 0xfffffffffffffffe
jne 0x1400b11c0
jmp 0x1400b1170
lea r8, [r14 + 1]
cmp r14, rbx
jae 0x1400b4743
mov rcx, r12
mov rdx, rdi
call fcn.1400a8cb0
add r14, 2
mov r8, rbx
sub r8, r14
jb 0x1400b4758
lea rdx, [rdi + r14*2]
mov rcx, r15
call fcn.1400a8cb0
movups xmm0, xmmword [rsp + 0x160]
movups xmm1, xmmword [rsp + 0x170]
movaps xmmword [rsp + 0x250], xmm0
movaps xmmword [rsp + 0xd0], xmm0
movaps xmmword [rsp + 0xe0], xmm1
movaps xmm0, xmmword [rsp + 0x270]
movaps xmm1, xmmword [rsp + 0x280]
movaps xmmword [rsp + 0xf0], xmm0
movaps xmmword [rsp + 0x100], xmm1
mov rdi, qword [rsp + 0xd0]
movabs rax, 0x8000000000000000
cmp rdi, rax
je 0x1400b131f
mov rbx, qword [rsp + 0xd8]
mov qword [rsp + 0x160], rbx
mov word [rsp + 0x170], 0
movaps xmm6, xmmword [rsp + 0xe0]
mov rax, qword [rsp + 0xe0]
add rax, rbx
mov qword [rsp + 0x168], rax
lea rcx, [rsp + 0x270]
mov rdx, r12
call fcn.1400b4840
mov qword [rsp + 0x250], rdi
mov qword [rsp + 0x258], rbx
movups xmmword [rsp + 0x260], xmm6
mov rcx, r12
lea rdx, [rsp + 0x1b8]
mov r8, rbp
lea r9, [rsp + 0xf0]
call fcn.1400b4a20
mov rax, qword [rsp + 0x160]
shl rax, 1
test rax, rax
je 0x1400b1170
mov r8, qword [rsp + 0x168]
mov rcx, qword [0x1401521d8]
xor edx, edx
call qword [sym.imp.kernel32.dll_HeapFree]
jmp 0x1400b1170
mov rcx, rsi
call qword [sym.imp.kernel32.dll_FreeEnvironmentStringsW]
mov rdi, qword [rsp + 0x70]
mov rax, qword [rsp + 0xb0]
mov rax, qword [rax + 0x88]
test rax, rax
je 0x1400b1c88
test rdi, rdi
je 0x1400b1c88
mov rcx, qword [rsp + 0xb0]
mov rsi, qword [rcx + 0x90]
xor r12d, r12d
jmp 0x1400b138c
mov rcx, qword [0x1401521d8]
xor edx, edx
mov r8, rbx
call qword [sym.imp.kernel32.dll_HeapFree]
mov eax, 0
mov rdi, qword [rsp + 0x70]
dec rdi
mov rsi, qword [rsp + 0x60]
je 0x1400b1c88
test r12, r12
je 0x1400b13b0
movzx ecx, word [r12 + 0x3d2]
cmp rsi, rcx
jae 0x1400b1460
mov r14, r12
jmp 0x1400b148a
test rsi, rsi
je 0x1400b13ee
mov rcx, rsi
mov r12, rax
and rcx, 7
je 0x1400b13f3
xor edx, edx
nop word cs:[rax + rax]
mov r12, qword [r12 + 0x3d8]
inc rdx
cmp rcx, rdx
jne 0x1400b13d0
mov rax, rsi
sub rax, rdx
cmp rsi, 8
jae 0x1400b1400
jmp 0x1400b143f
mov r12, rax
jmp 0x1400b143f
mov rax, rsi
cmp rsi, 8
jb 0x1400b143f
nop dword [rax]
mov rcx, qword [r12 + 0x3d8]
mov rcx, qword [rcx + 0x3d8]
mov rcx, qword [rcx + 0x3d8]
mov rcx, qword [rcx + 0x3d8]
mov rcx, qword [rcx + 0x3d8]
mov rcx, qword [rcx + 0x3d8]
mov rcx, qword [rcx + 0x3d8]
mov r12, qword [rcx + 0x3d8]
add rax, 0xfffffffffffffff8
jne 0x1400b1400
xor esi, esi
xor eax, eax
movzx ecx, word [r12 + 0x3d2]
cmp rsi, rcx
jb 0x1400b13a3
nop word cs:[rax + rax]
mov r14, qword [r12 + 0x160]
test r14, r14
je 0x1400b4541
inc rax
movzx esi, word [r12 + 0x3d0]
mov r12, r14
cmp si, word [r14 + 0x3d2]
jae 0x1400b1460
test rax, rax
mov qword [rsp + 0x70], rdi
je 0x1400b1530
mov r12, qword [r14 + rsi*8 + 0x3e0]
mov rcx, rax
dec rcx
je 0x1400b151f
mov rdx, rcx
and rdx, 7
je 0x1400b14d3
xor r8d, r8d
nop word cs:[rax + rax]
mov r12, qword [r12 + 0x3d8]
inc r8
cmp rdx, r8
jne 0x1400b14c0
sub rcx, r8
add rax, 0xfffffffffffffffe
cmp rax, 7
jb 0x1400b151f
nop dword [rax]
mov rax, qword [r12 + 0x3d8]
mov rax, qword [rax + 0x3d8]
mov rax, qword [rax + 0x3d8]
mov rax, qword [rax + 0x3d8]
mov rax, qword [rax + 0x3d8]
mov rax, qword [rax + 0x3d8]
mov rax, qword [rax + 0x3d8]
mov r12, qword [rax + 0x3d8]
add rcx, 0xfffffffffffffff8
jne 0x1400b14e0
xor ebp, ebp
jmp 0x1400b1537
lea rbp, [rsi + 1]
mov r12, r14
imul rax, rsi, 0x38
lea r13, [r14 + rax]
add r13, 0x168
shl rsi, 5
movabs rax, 0x8000000000000000
cmp qword [r14 + rsi], rax
mov qword [rsp + 0x60], rbp
jne 0x1400b1670
mov rax, qword [rsp + 0x1b8]
mov qword [rsp + 0x58], rax
test rax, rax
je 0x1400b1374
mov rbp, qword [r13 + 0x28]
mov rbx, qword [r13 + 0x30]
mov rax, qword [rsp + 0x1c0]
lea ecx, [rax + 7]
mov dword [rsp + 0x138], ecx
xor ecx, ecx
mov qword [rsp + 0x1b0], rcx
mov qword [rsp + 0x78], rax
mov qword [rsp + 0xc8], rax
mov rdi, qword [rsp + 0x58]
lea rcx, [rdi + 0x168]
movzx esi, word [rdi + 0x3d2]
imul r13, rsi, 0x38
mov r15, 0xffffffffffffffff
nop dword [rax + rax]
test r13, r13
je 0x1400b1620
lea r14, [rcx + 0x38]
mov r8, qword [rcx + 0x28]
mov r9d, dword [rcx + 0x30]
mov dword [rsp + 0x20], 1
mov rcx, rbp
mov edx, ebx
call qword [sym.imp.kernel32.dll_CompareStringOrdinal]
inc r15
add r13, 0xffffffffffffffc8
mov rcx, r14
cmp eax, 3
je 0x1400b15d0
cmp eax, 1
jne 0x1400b16b0
mov rax, qword [rsp + 0xc8]
test rax, rax
jne 0x1400b1634
jmp 0x1400b1374
mov r15, rsi
mov rax, qword [rsp + 0xc8]
test rax, rax
je 0x1400b1374
mov rdi, qword [rdi + r15*8 + 0x3d8]
dec rax
mov qword [rsp + 0xc8], rax
inc qword [rsp + 0x1b0]
mov eax, dword [rsp + 0x138]
add al, 7
mov dword [rsp + 0x138], eax
jmp 0x1400b15af
mov r15, qword [r13 + 8]
mov rdi, qword [r13 + 0x10]
test rdi, rdi
je 0x1400b17d3
js 0x1400b46f9
movzx eax, byte [0x140152279]
xor ecx, ecx
mov rdx, rdi
call fcn.1400baaa0
mov rbx, rax
test rax, rax
jne 0x1400b17d8
jmp 0x1400b46fe
cmp eax, 2
mov r9, qword [rsp + 0xc8]
jne 0x1400b4676
mov byte [rsp + 0x1f0], 0
test r9, r9
je 0x1400b1956
mov rax, qword [rdi + r15*8 + 0x3d8]
mov rcx, r9
dec rcx
je 0x1400b1999
test cl, 7
mov r15, qword [rsp + 0x78]
je 0x1400b1736
movzx ecx, byte [rsp + 0x138]
and ecx, 7
neg rcx
mov edx, 1
nop word cs:[rax + rax]
movzx r8d, word [rax + 0x3d2]
mov rax, qword [rax + r8*8 + 0x3d8]
lea r8, [rcx + rdx]
inc r8
inc rdx
cmp r8, 1
jne 0x1400b1710
sub r9, rdx
mov rcx, r9
mov rdx, r15
sub rdx, qword [rsp + 0x1b0]
add rdx, 0xfffffffffffffffe
cmp rdx, 7
jb 0x1400b199e
nop
movzx edx, word [rax + 0x3d2]
mov rax, qword [rax + rdx*8 + 0x3d8]
movzx edx, word [rax + 0x3d2]
mov rax, qword [rax + rdx*8 + 0x3d8]
movzx edx, word [rax + 0x3d2]
mov rax, qword [rax + rdx*8 + 0x3d8]
movzx edx, word [rax + 0x3d2]
mov rax, qword [rax + rdx*8 + 0x3d8]
movzx edx, word [rax + 0x3d2]
mov rax, qword [rax + rdx*8 + 0x3d8]
movzx edx, word [rax + 0x3d2]
mov rax, qword [rax + rdx*8 + 0x3d8]
movzx edx, word [rax + 0x3d2]
mov rax, qword [rax + rdx*8 + 0x3d8]
movzx edx, word [rax + 0x3d2]
mov rax, qword [rax + rdx*8 + 0x3d8]
add rcx, 0xfffffffffffffff8
jne 0x1400b1750
jmp 0x1400b199e
mov ebx, 1
mov rcx, rbx
mov rdx, r15
mov r8, rdi
call sub.VCRUNTIME140.dll_memcpy
movzx eax, byte [r13 + 0x18]
mov rdx, qword [r13 + 0x28]
mov r13, qword [r13 + 0x30]
test r13, r13
mov byte [rsp + 0xc8], al
je 0x1400b1849
mov qword [rsp + 0x138], rdi
mov rax, r13
shr rax, 0x3e
jne 0x1400b46f9
mov rdi, rdx
lea rbp, [r13*2]
movzx eax, byte [0x140152279]
xor ecx, ecx
mov rdx, rbp
call fcn.1400baaa0
test rax, rax
je 0x1400b470b
mov r15, rax
mov rdx, rdi
mov rdi, qword [rsp + 0x138]
jmp 0x1400b1851
mov r15d, 2
xor ebp, ebp
add r14, rsi
mov rcx, r15
mov r8, rbp
call sub.VCRUNTIME140.dll_memcpy
mov qword [rsp + 0x250], rdi
mov qword [rsp + 0x258], rbx
mov qword [rsp + 0x260], rdi
movzx eax, byte [rsp + 0xc8]
mov byte [rsp + 0x268], al
mov qword [rsp + 0x270], r13
mov qword [rsp + 0x278], r15
mov qword [rsp + 0x280], r13
mov rbx, qword [r14 + 8]
mov rdi, qword [r14 + 0x10]
test rdi, rdi
je 0x1400b18cf
js 0x1400b46f9
movzx eax, byte [0x140152279]
xor ecx, ecx
mov rdx, rdi
call fcn.1400baaa0
mov r15, rax
test rax, rax
jne 0x1400b18d5
jmp 0x1400b46fe
mov r15d, 1
mov rcx, r15
mov rdx, rbx
mov r8, rdi
call sub.VCRUNTIME140.dll_memcpy
movzx eax, byte [r14 + 0x18]
mov qword [rsp + 0xd0], rdi
mov qword [rsp + 0xd8], r15
mov qword [rsp + 0xe0], rdi
mov byte [rsp + 0xe8], al
lea rcx, [rsp + 0x160]
lea rdx, [rsp + 0x1b8]
lea r8, [rsp + 0x250]
lea r9, [rsp + 0xd0]
call fcn.1400b4a20
mov rax, qword [rsp + 0x160]
shl rax, 1
test rax, rax
je 0x1400b1374
mov r8, qword [rsp + 0x168]
mov rcx, qword [0x1401521d8]
xor edx, edx
jmp 0x1400b136e
mov qword [rsp + 0xd0], rdi
mov qword [rsp + 0xd8], 0
mov qword [rsp + 0xe0], r15
lea rcx, [rsp + 0x250]
lea rdx, [rsp + 0xd0]
lea r8, [rsp + 0x1f0]
call fcn.1400b5a80
mov r15, qword [rsp + 0x78]
jmp 0x1400b1bb2
mov r15, qword [rsp + 0x78]
movzx ecx, word [rax + 0x3d2]
dec rcx
mov qword [rsp + 0x198], rax
mov qword [rsp + 0x1a0], 0
mov qword [rsp + 0x1a8], rcx
lea rcx, [rsp + 0x250]
lea rdx, [rsp + 0x198]
lea r8, [rsp + 0x1f0]
call fcn.1400b5a80
mov rax, qword [rsp + 0x280]
mov qword [rsp + 0x190], rax
movups xmm0, xmmword [rsp + 0x250]
movups xmm1, xmmword [rsp + 0x260]
movups xmm2, xmmword [rsp + 0x270]
movaps xmmword [rsp + 0x180], xmm2
movaps xmmword [rsp + 0x170], xmm1
movaps xmmword [rsp + 0x160], xmm0
lea rax, [rsp + 0x288]
movups xmm0, xmmword [rax]
movups xmm1, xmmword [rax + 0x10]
movaps xmmword [rsp + 0x90], xmm0
movaps xmmword [rsp + 0xa0], xmm1
mov rdx, qword [rsp + 0x2a8]
mov rcx, qword [rsp + 0x2b8]
movzx eax, word [rdx + 0x3d2]
cmp rcx, rax
jae 0x1400b1a61
mov rax, rdx
jmp 0x1400b1a99
mov r8, qword [rsp + 0x2b0]
nop dword [rax]
mov rax, qword [rdx + 0x160]
test rax, rax
je 0x1400b1a94
inc r8
movzx ecx, word [rdx + 0x3d0]
mov rdx, rax
cmp cx, word [rax + 0x3d2]
jae 0x1400b1a70
jmp 0x1400b1a99
xor eax, eax
mov rcx, r8
imul rdx, rcx, 0x38
shl rcx, 5
mov r8, qword [rax + rdx + 0x198]
mov qword [rsp + 0x100], r8
movups xmm0, xmmword [rax + rdx + 0x168]
movups xmm1, xmmword [rax + rdx + 0x178]
movups xmm2, xmmword [rax + rdx + 0x188]
movaps xmmword [rsp + 0xf0], xmm2
movaps xmmword [rsp + 0xe0], xmm1
movaps xmmword [rsp + 0xd0], xmm0
mov r8, qword [rsp + 0x190]
mov qword [rax + rdx + 0x198], r8
movaps xmm0, xmmword [rsp + 0x160]
movaps xmm1, xmmword [rsp + 0x170]
movaps xmm2, xmmword [rsp + 0x180]
movups xmmword [rax + rdx + 0x188], xmm2
movups xmmword [rax + rdx + 0x178], xmm1
movups xmmword [rax + rdx + 0x168], xmm0
movups xmm0, xmmword [rax + rcx]
movups xmm1, xmmword [rax + rcx + 0x10]
lea rdx, [rsp + 0x108]
movups xmmword [rdx + 0x10], xmm1
movups xmmword [rdx], xmm0
movaps xmm0, xmmword [rsp + 0x90]
movaps xmm1, xmmword [rsp + 0xa0]
movups xmmword [rax + rcx + 0x10], xmm1
movups xmmword [rax + rcx], xmm0
movaps xmm0, xmmword [rsp + 0xd0]
movaps xmm1, xmmword [rsp + 0xe0]
movaps xmm2, xmmword [rsp + 0xf0]
movaps xmm3, xmmword [rsp + 0x100]
movaps xmmword [rsp + 0x250], xmm0
movaps xmmword [rsp + 0x260], xmm1
movaps xmmword [rsp + 0x270], xmm2
movaps xmmword [rsp + 0x280], xmm3
movaps xmm0, xmmword [rsp + 0x110]
movaps xmmword [rsp + 0x290], xmm0
mov rax, qword [rsp + 0x120]
mov qword [rsp + 0x2a0], rax
mov r14, qword [rsp + 0x250]
mov r13, qword [rsp + 0x258]
mov rdi, qword [rsp + 0x270]
mov rbp, qword [rsp + 0x278]
dec qword [rsp + 0x1c8]
mov rsi, qword [rsp + 0x288]
mov rbx, qword [rsp + 0x290]
cmp byte [rsp + 0x1f0], 0
je 0x1400b1c36
test r15, r15
je 0x1400b472b
mov r8, qword [rsp + 0x58]
mov rax, qword [r8 + 0x3d8]
mov qword [rsp + 0x1b8], rax
dec r15
mov qword [rsp + 0x1c0], r15
mov qword [rax + 0x160], 0
mov rcx, qword [0x1401521d8]
xor edx, edx
call qword [sym.imp.kernel32.dll_HeapFree]
movabs rax, 0x8000000000000000
cmp r14, rax
je 0x1400b1374
test r14, r14
je 0x1400b1c60
mov rcx, qword [0x1401521d8]
xor edx, edx
mov r8, r13
call qword [sym.imp.kernel32.dll_HeapFree]
test rdi, rdi
je 0x1400b1c77
mov rcx, qword [0x1401521d8]
xor edx, edx
mov r8, rbp
call qword [sym.imp.kernel32.dll_HeapFree]
shl rsi, 1
test rsi, rsi
je 0x1400b1374
jmp 0x1400b1362
mov r12, qword [rsp + 0x1b8]
mov rax, qword [rsp + 0x1c0]
mov qword [rsp + 0xc8], rax
mov rsi, qword [rsp + 0x1c8]
movzx eax, byte [0x140152279]
mov edx, 4
xor ecx, ecx
call fcn.1400baaa0
test rax, rax
je 0x1400b4782
mov r14, rax
mov qword [rsp + 0x1b0], rsi
mov dword [rax], 0x48544150
add rax, 4
mov qword [rsp + 0x250], r14
mov qword [rsp + 0x258], rax
mov word [rsp + 0x260], 0
lea rcx, [rsp + 0xd0]
lea rdx, [rsp + 0x250]
call fcn.1400b4840
mov rsi, qword [rsp + 0xd0]
mov rdi, qword [rsp + 0xd8]
test r12, r12
mov qword [rsp + 0x138], r12
je 0x1400b1e09
mov qword [rsp + 0x78], rsi
mov qword [rsp + 0x58], r14
mov rbx, qword [rsp + 0xe0]
xor r15d, r15d
mov rbp, qword [sym.imp.kernel32.dll_CompareStringOrdinal]
mov r14, qword [rsp + 0xc8]
lea rcx, [r12 + 0x168]
mov qword [rsp + 0x70], r12
movzx eax, word [r12 + 0x3d2]
mov qword [rsp + 0x60], rax
imul rsi, rax, 0x38
mov r12, 0xffffffffffffffff
nop word cs:[rax + rax]
test rsi, rsi
je 0x1400b1dc0
lea r13, [rcx + 0x38]
mov r8, qword [rcx + 0x28]
mov r9d, dword [rcx + 0x30]
mov dword [rsp + 0x20], 1
mov rcx, rdi
mov edx, ebx
call rbp
inc r12
add rsi, 0xffffffffffffffc8
mov rcx, r13
cmp eax, 3
je 0x1400b1d80
cmp eax, 1
jne 0x1400b1de1
jmp 0x1400b1dc5
mov r12, qword [rsp + 0x60]
sub r14, 1
jb 0x1400b23d9
mov rax, qword [rsp + 0x70]
mov r12, qword [rax + r12*8 + 0x3d8]
jmp 0x1400b1d4d
cmp eax, 2
jne 0x1400b4676
shl r12, 5
mov rax, qword [rsp + 0x70]
mov r15, qword [rax + r12 + 8]
mov rbx, qword [rax + r12 + 0x10]
mov r14, qword [rsp + 0x58]
mov rsi, qword [rsp + 0x78]
jmp 0x1400b1e0c
xor r15d, r15d
mov rcx, qword [0x1401521d8]
xor edx, edx
mov r8, r14
call qword [sym.imp.kernel32.dll_HeapFree]
test rsi, rsi
je 0x1400b1e35
mov rcx, qword [0x1401521d8]
xor edx, edx
mov r8, rdi
call qword [sym.imp.kernel32.dll_HeapFree]
mov rax, qword [rsp + 0xb0]
mov r12, qword [rax + 0x10]
lea rdi, str.program_path_has_no_file_name
test r12, r12
je 0x1400b1e9c
mov r13, qword [rax + 8]
cmp r12, 4
jae 0x1400b1e60
lea rax, [0x1400b63b0]
jmp 0x1400b1e8a
mov eax, dword [r13]
bswap eax
xor ecx, ecx
cmp eax, 0x5c5c3f5c
setb cl
cmp eax, 0x5c5c3f5d
adc ecx, 0xffffffff
lea rcx, [0x1400b63a0]
lea rax, [0x1400b63b0]
cmove rax, rcx
movzx esi, byte [r12 + r13 - 1]
mov ecx, esi
call rax
test al, al
je 0x1400b1f22
movabs r14, 0x8000000000000000
lea r11, [r12 + r13]
cmp r12, 3
mov qword [rsp + 0x70], r13
jbe 0x1400b2097
movzx eax, byte [r11 - 4]
lea ecx, [rax - 0x41]
cmp cl, 0x1a
setb cl
shl cl, 5
or cl, al
cmp cl, 0x2e
jne 0x1400b20c2
movzx eax, byte [r11 - 3]
lea ecx, [rax - 0x41]
cmp cl, 0x1a
setb cl
shl cl, 5
or cl, al
cmp cl, 0x65
jne 0x1400b20c2
movzx eax, byte [r11 - 2]
lea ecx, [rax - 0x41]
cmp cl, 0x1a
setb cl
shl cl, 5
or cl, al
cmp cl, 0x78
jne 0x1400b20c2
lea eax, [rsi - 0x41]
cmp al, 0x1a
setb al
shl al, 5
or al, sil
cmp al, 0x65
sete al
jmp 0x1400b20c4
xor eax, eax
nop dword [rax]
cmp r12, rax
je 0x1400b2227
movzx ecx, byte [r13 + rax]
cmp ecx, 0x2f
je 0x1400b2139
inc rax
cmp ecx, 0x5c
jne 0x1400b20a0
jmp 0x1400b2139
xor eax, eax
xor ecx, ecx
nop word cs:[rax + rax]
cmp r12, rcx
je 0x1400b2227
movzx edx, byte [r13 + rcx]
cmp edx, 0x5c
je 0x1400b20ec
inc rcx
cmp edx, 0x2f
jne 0x1400b20d0
test al, al
je 0x1400b2139
mov qword [rsp + 0x88], r11
lea rcx, [rsp + 0xd0]
mov rdx, r13
mov r8, r12
call fcn.1400a6730
mov rax, qword [rsp + 0xd0]
cmp rax, r14
jne 0x1400b23a2
mov rax, qword [rsp + 0xd8]
mov qword [rsp + 0x1d8], rax
mov qword [rsp + 0x1d0], r14
jmp 0x1400b23cf
mov qword [rsp + 0x88], r11
test r12, r12
js 0x1400b46f9
movzx eax, byte [0x140152279]
xor ecx, ecx
mov rdx, r12
call fcn.1400baaa0
test rax, rax
je 0x1400b4814
mov rsi, rax
mov rcx, rax
mov rdx, r13
mov r8, r12
call sub.VCRUNTIME140.dll_memcpy
mov qword [rsp + 0x250], r12
mov qword [rsp + 0x258], rsi
mov qword [rsp + 0x260], r12
mov byte [rsp + 0x268], 0
lea rdx, str..exeprogram_not_found
lea rcx, [rsp + 0x250]
mov r8d, 4
call fcn.1400acf50
mov rbx, qword [rsp + 0x250]
mov rsi, qword [rsp + 0x258]
mov rdi, qword [rsp + 0x260]
lea rcx, [rsp + 0x238]
mov rdx, rsi
mov r8, rdi
call fcn.1400b63c0
cmp qword [rsp + 0x238], r14
jne 0x1400b22fe
mov rcx, rsi
mov rdx, rdi
call fcn.1400b0d80
test rax, rax
mov r12, qword [rsp + 0x68]
je 0x1400b2e32
cmp rdx, 2
jne 0x1400b2331
movzx ecx, word [rax]
cmp ecx, 0x2e2e
jne 0x1400b2331
mov ecx, 2
xor r8d, r8d
jmp 0x1400b2e12
xor r8d, r8d
lea rdi, str.nul_byte_found_in_provided_data
mov rax, r13
jmp 0x1400b224c
xor r8d, r8d
test cx, cx
je 0x1400b1e9c
mov cx, 1
test r8w, r8w
jne 0x1400b2240
cmp rax, r11
je 0x1400b236e
movzx edx, byte [rax]
test dl, dl
js 0x1400b226b
inc rax
jmp 0x1400b22ca
mov r8d, edx
and r8d, 0x1f
movzx r10d, byte [rax + 1]
and r10d, 0x3f
cmp dl, 0xdf
jbe 0x1400b22bc
movzx r9d, byte [rax + 2]
shl r10d, 6
and r9d, 0x3f
or r9d, r10d
cmp dl, 0xf0
jb 0x1400b22d4
movzx edx, byte [rax + 3]
add rax, 4
and r8d, 7
shl r8d, 0x12
shl r9d, 6
and edx, 0x3f
or edx, r9d
or edx, r8d
cmp edx, 0xffff
jbe 0x1400b22ca
jmp 0x1400b22ea
add rax, 2
shl r8d, 6
or r8d, r10d
mov edx, r8d
xor r8d, r8d
mov ecx, edx
jmp 0x1400b2243
add rax, 3
shl r8d, 0xc
or r9d, r8d
mov edx, r9d
cmp edx, 0xffff
jbe 0x1400b22ca
and edx, 0x3ff
or edx, 0xdc00
mov r8d, edx
jmp 0x1400b2243
mov rax, qword [rsp + 0x248]
mov qword [rsp + 0x1e0], rax
movups xmm0, xmmword [rsp + 0x238]
movaps xmmword [rsp + 0x1d0], xmm0
test rbx, rbx
mov r12, qword [rsp + 0x68]
jne 0x1400b2e9e
jmp 0x1400b2eb0
mov rcx, rdx
nop word cs:[rax + rax]
test rcx, rcx
je 0x1400b23de
mov r9, rcx
dec rcx
cmp byte [rax + r9 - 1], 0x2e
jne 0x1400b2340
test rcx, rcx
je 0x1400b2e0c
sub rdx, r9
mov r8, rax
add r8, r9
jmp 0x1400b2e12
cmp r12, 0xf
mov qword [rsp + 0x88], r11
ja 0x1400b23e8
xor eax, eax
mov qword [rsp + 0x80], rax
xor eax, eax
nop dword [rax + rax]
cmp byte [r13 + rax], 0x2e
je 0x1400b23f7
inc rax
cmp r12, rax
jne 0x1400b2390
jmp 0x1400b2404
movups xmm0, xmmword [rsp + 0xd8]
mov qword [rsp + 0x250], rax
movups xmmword [rsp + 0x258], xmm0
lea rcx, [rsp + 0x1d0]
lea rdx, [rsp + 0x250]
call fcn.1400b64d0
mov r12, qword [rsp + 0x68]
jmp 0x1400b2eb0
jmp 0x1400b1dfd
mov r8, rax
xor eax, eax
jmp 0x1400b2e12
mov cl, 0x2e
mov rdx, r13
mov r8, r12
call fcn.14003e580
jmp 0x1400b23fc
mov eax, 1
mov qword [rsp + 0x80], rax
test r15, r15
je 0x1400b2769
add rbx, r15
mov dil, 1
xor ebp, ebp
jmp 0x1400b2433
mov rcx, qword [rsp + 0x1f0]
mov edi, esi
cmp rcx, r14
jne 0x1400b2cd7
mov qword [rsp + 0xd0], 0
mov qword [rsp + 0xd8], 2
mov qword [rsp + 0xe0], 0
mov eax, 2
xor r8d, r8d
mov r14d, ebp
xor r13d, r13d
mov esi, r14d
test r14w, r14w
je 0x1400b248b
nop
xor ebp, ebp
xor r14d, r14d
cmp si, 0x22
jne 0x1400b24a9
not r13b
and r13b, 1
mov esi, r14d
test r14w, r14w
jne 0x1400b2470
cmp r15, rbx
je 0x1400b25d0
movzx esi, byte [r15]
test sil, sil
js 0x1400b2510
inc r15
xor r14d, r14d
cmp si, 0x22
je 0x1400b247b
movzx ecx, si
cmp ecx, 0x3b
jne 0x1400b24bb
test r13b, 1
je 0x1400b274e
cmp r8, qword [rsp + 0xd0]
jne 0x1400b24e5
lea rcx, [rsp + 0xd0]
mov rdx, r8
call fcn.1400a6ad0
mov rax, qword [rsp + 0xd8]
mov r8, qword [rsp + 0xe0]
mov word [rax + r8*2], si
inc r8
mov qword [rsp + 0xe0], r8
mov esi, r14d
test r14w, r14w
jne 0x1400b2470
jmp 0x1400b248b
mov ecx, esi
and ecx, 0x1f
movzx r9d, byte [r15 + 1]
and r9d, 0x3f
cmp sil, 0xdf
jbe 0x1400b2560
movzx edx, byte [r15 + 2]
shl r9d, 6
and edx, 0x3f
or edx, r9d
cmp sil, 0xf0
jb 0x1400b257e
movzx esi, byte [r15 + 3]
add r15, 4
and ecx, 7
shl ecx, 0x12
shl edx, 6
and esi, 0x3f
or esi, edx
or esi, ecx
cmp esi, 0xffff
jbe 0x1400b2472
jmp 0x1400b2595
add r15, 2
shl ecx, 6
or ecx, r9d
mov esi, ecx
xor r14d, r14d
cmp si, 0x22
je 0x1400b247b
jmp 0x1400b24a9
add r15, 3
shl ecx, 0xc
or edx, ecx
mov esi, edx
cmp esi, 0xffff
jbe 0x1400b2472
lea ecx, [rsi + 0xff0000]
shr ecx, 0xa
or ecx, 0xd800
and esi, 0x3ff
or esi, 0xdc00
mov ebp, esi
mov r14d, esi
mov esi, ecx
cmp si, 0x22
je 0x1400b247b
jmp 0x1400b24a9
xor esi, esi
test dil, dil
mov r13, qword [rsp + 0x70]
mov rdi, qword [rsp + 0x60]
jne 0x1400b25f0
movabs r14, 0x8000000000000000
test r8, r8
je 0x1400b262f
mov rdx, qword [rsp + 0xd8]
lea rcx, [rsp + 0x250]
call fcn.1400a8cb0
mov r14, qword [rsp + 0x250]
mov rax, qword [rsp + 0x258]
mov qword [rsp + 0x58], rax
mov rdi, qword [rsp + 0x260]
mov rax, qword [rsp + 0x268]
mov qword [rsp + 0x78], rax
cmp qword [rsp + 0xd0], 0
je 0x1400b2651
mov r8, qword [rsp + 0xd8]
mov rcx, qword [0x1401521d8]
xor edx, edx
call qword [sym.imp.kernel32.dll_HeapFree]
movabs rax, 0x8000000000000000
cmp r14, rax
je 0x1400b2769
test rdi, rdi
je 0x1400b2717
mov qword [rsp + 0x250], r14
mov rax, qword [rsp + 0x58]
mov qword [rsp + 0x258], rax
mov qword [rsp + 0x60], rdi
mov qword [rsp + 0x260], rdi
mov rax, qword [rsp + 0x78]
mov qword [rsp + 0x268], rax
lea rcx, [rsp + 0x250]
mov rdx, r13
mov r8, r12
call case.0x1400a8f73.210
cmp qword [rsp + 0x80], 1
je 0x1400b26c7
lea rcx, [rsp + 0x250]
call fcn.1400b0eb0
mov rdi, qword [rsp + 0x258]
mov r8, qword [rsp + 0x260]
lea rcx, [rsp + 0x1f0]
mov rdx, rdi
call fcn.1400b63c0
cmp qword [rsp + 0x250], 0
movabs r14, 0x8000000000000000
je 0x1400b2420
mov rcx, qword [0x1401521d8]
xor edx, edx
mov r8, rdi
call qword [sym.imp.kernel32.dll_HeapFree]
jmp 0x1400b2420
mov edi, esi
mov eax, 0
mov qword [rsp + 0x60], rax
test r14, r14
je 0x1400b2433
mov rcx, qword [0x1401521d8]
xor edx, edx
mov r8, qword [rsp + 0x58]
call qword [sym.imp.kernel32.dll_HeapFree]
mov edi, esi
xor eax, eax
mov qword [rsp + 0x60], rax
jmp 0x1400b2433
mov sil, 1
test dil, dil
mov r13, qword [rsp + 0x70]
mov rdi, qword [rsp + 0x60]
je 0x1400b25e1
jmp 0x1400b25f0
lea rcx, [rsp + 0xd0]
call fcn.1400acd60
mov rbx, qword [rsp + 0xd0]
mov rsi, qword [rsp + 0xd8]
movabs r15, 0x8000000000000000
cmp rbx, r15
jne 0x1400b27fd
mov eax, esi
and eax, 3
lea rcx, [rax - 2]
cmp rcx, 2
jb 0x1400b28c2
test rax, rax
je 0x1400b28c2
lea rdi, [rsi - 1]
mov rbx, qword [rsi - 1]
mov rsi, qword [rsi + 7]
mov rcx, rbx
call qword [rsi]
cmp qword [rsi + 8], 0
je 0x1400b27e6
cmp qword [rsi + 0x10], 0x11
jb 0x1400b27d4
mov rbx, qword [rbx - 8]
mov rcx, qword [0x1401521d8]
xor edx, edx
mov r8, rbx
call qword [sym.imp.kernel32.dll_HeapFree]
mov rcx, qword [0x1401521d8]
xor edx, edx
mov r8, rdi
call qword [sym.imp.kernel32.dll_HeapFree]
jmp 0x1400b28c2
mov rdi, qword [rsp + 0xe0]
mov r14, qword [rsp + 0xe8]
mov rcx, rsi
mov rdx, rdi
call fcn.1400af300
cmp rdi, rdx
cmovb rdx, rdi
test rax, rax
cmove rdx, rdi
mov qword [rsp + 0x250], rbx
mov qword [rsp + 0x258], rsi
mov qword [rsp + 0x260], rdx
mov qword [rsp + 0x268], r14
lea rcx, [rsp + 0x250]
mov rdx, r13
mov r8, r12
call case.0x1400a8f73.210
cmp qword [rsp + 0x80], 1
je 0x1400b2871
lea rcx, [rsp + 0x250]
call fcn.1400b0eb0
mov rsi, qword [rsp + 0x258]
mov r8, qword [rsp + 0x260]
lea rcx, [rsp + 0x1b8]
mov rdx, rsi
call fcn.1400b63c0
cmp qword [rsp + 0x250], 0
mov r14, r15
je 0x1400b28b1
mov rcx, qword [0x1401521d8]
xor edx, edx
mov r8, rsi
call qword [sym.imp.kernel32.dll_HeapFree]
mov rcx, qword [rsp + 0x1b8]
cmp rcx, r14
jne 0x1400b3953
mov qword [rsp + 0x58], r12
mov qword [rsp + 0x90], 0
mov qword [rsp + 0x98], 2
mov qword [rsp + 0xa0], 0
mov r8d, 0x200
mov eax, 2
mov qword [rsp + 0x60], rax
xor esi, esi
mov r12d, 0xffffffff
xor r14d, r14d
xor edi, edi
cmp r8, 0x201
jb 0x1400b2934
jmp 0x1400b2950
mov r13, qword [rsp + 0x1f8]
mov r13, qword [rsp + 0x1c0]
mov rsi, qword [rsp + 0x1c8]
lea rcx, str.C:Users_runneradmin.rustup_toolchains_nightly_x86_64_pc_windows_msvclib_rustlib_src_rustlibrary_alloc_srccollections_btree_navigate.rs
call fcn.1400efed0
call fcn.1400ac4b0
mov qword [rsp + 0x160], rax
lea rax, [rsp + 0x160]
mov qword [rsp + 0xd0], rax
lea rax, [0x1400ac4d0]
mov qword [rsp + 0xd8], rax
lea rax, str.comparing_environment_keys_failed:
mov qword [rsp + 0x250], rax
mov qword [rsp + 0x258], 1
mov qword [rsp + 0x270], 0
lea rax, [rsp + 0xd0]
mov qword [rsp + 0x260], rax
mov qword [rsp + 0x268], 1
lea rdx, str.C:Users_runneradmin.rustup_toolchains_nightly_x86_64_pc_windows_msvclib_rustlib_src_rustlibrary_std_src_syspalwindowsprocess.rs
lea rcx, [rsp + 0x250]
call fcn.1400efae0
call fcn.140036c60
mov ecx, 1
mov rdx, rdi
call fcn.1400ef8e0
mov ecx, 2
mov rdx, rbp
call fcn.1400ef8e0
lea r8, str.C:Users_runneradmin.rustup_toolchains_nightly_x86_64_pc_windows_msvclib_rustlib_src_rustlibrary_std_src_syspalwindowsos.rs
mov ecx, 1
xor edx, edx
call fcn.1400efb20
lea rcx, str.assertion_failed:_self.height___0
lea r8, str.C:Users_runneradmin.rustup_toolchains_nightly_x86_64_pc_windows_msvclib_rustlib_src_rustlibrary_alloc_srccollections_btree_node.rsassertion_failed:_edge.height__self.height___1
mov edx, 0x21
call fcn.1400efbc0
lea rax, str.C:Users_runneradmin.rustup_toolchains_nightly_x86_64_pc_windows_msvclib_rustlib_src_rustlibrary_std_src_syspalwindowsos.rs
mov rcx, r8
mov rdx, rbx
mov r8, rax
call fcn.1400efbb0
lea r8, str.C:Users_runneradmin.rustup_toolchains_nightly_x86_64_pc_windows_msvclib_rustlib_src_rustlibrary_std_src_syspalwindowsos.rs
mov rcx, r14
mov rdx, rbx
call fcn.1400efb20