Function at 0x14013d2f0
Capabilities:
Read file on windows

Disassembly:
movzx ecx, byte [rax + 0x10]
jmp 0x14013a0ef
mov rcx, rax
shr rcx, 0x20
mov rsi, rax
call fcn.140144280
mov ecx, eax
mov rax, rsi
jmp 0x14013a0ef
mov rcx, rax
shr rcx, 0x20
cmp ecx, 0x28
ja case.default.0x14013a0e5
lea rdx, [0x14044e368]
movsxd rcx, dword [rdx + rcx*4]
add rcx, rdx
jmp rcx
xor ecx, ecx
jmp 0x14013a0ef
movzx ecx, byte [rax + 0xf]
cmp cl, 0xb
jne case.0x14013a091.40
lea rcx, [rbp - 8]
clc
call fcn.1400ff320
cld
push qword [rcx]
ror byte [rax - 0x7d], 0xc4
add rsp, 0x40
pop rdi
xor eax, eax
add rsp, 0x40
pop rdi
pop rsi
pop rbp
ret
mov cl, 0x25
jmp 0x14013a0ef
mov cl, 0x23
jmp 0x14013a0ef
mov cl, 0x24
jmp 0x14013a0ef
mov cl, 0x1b
jmp 0x14013a0ef
mov cl, 0x22
jmp 0x14013a0ef
mov cl, 0x10
jmp 0x14013a0ef
mov cl, 0xe
jmp 0x14013a0ef
mov cl, 0x21
jmp 0x14013a0ef
mov cl, 0xb
jmp 0x14013a0ef
mov cl, 4
jmp 0x14013a0ef
mov cl, 0x28
jmp 0x14013a0ef
mov cl, 0xc
jmp 0x14013a0ef
mov cl, 9
jmp 0x14013a0ef
mov cl, 0x19
jmp 0x14013a0ef
mov cl, 0x18
jmp 0x14013a0ef
mov cl, 2
jmp 0x14013a0ef
mov cl, 0xf
jmp 0x14013a0ef
mov cl, 3
jmp 0x14013a0ef
mov cl, 7
jmp 0x14013a0ef
mov cl, 1
jmp 0x14013a0ef
mov cl, 0x1f
jmp 0x14013a0ef
mov cl, 0x11
jmp 0x14013a0ef
mov cl, 0x29
jmp 0x14013a0ef
mov cl, 0x14
jmp 0x14013a0ef
invalid
mov byte [rcx - 0x4e7b14fb], dh
adc eax, 0xdb180eb
jmp 0x14013a0ef
mov cl, 0xd
mov cl, 5
jmp 0x14013a0ef
mov cl, 0x15
jmp 0x14013a0ef
mov cl, 0xd
jmp 0x14013a0ef
invalid
mov cl, 6
jmp 0x14013a0ef
invalid
invalid
invalid
mov cl, 0x12
jmp 0x14013a0ef
invalid
invalid
invalid
mov cl, 0xa
jmp 0x14013a0ef
invalid
invalid
invalid
mov cl, 8
jmp 0x14013a0ef
invalid
invalid
invalid
mov cl, 0x1e
jmp 0x14013a0ef
invalid
invalid
invalid
mov cl, 0x20
jmp 0x14013a0ef
invalid
invalid
invalid
mov cl, 0x16
jmp 0x14013a0ef
invalid
invalid
invalid
mov cl, 0x27
jmp 0x14013a0ef
invalid
invalid
invalid
mov cl, 0x13
jmp 0x14013a0ef
invalid
invalid
invalid
mov cl, 0x17
jmp 0x14013a0ef
invalid
invalid
invalid
mov cl, 0x1c
jmp 0x14013a0ef
invalid
invalid
invalid
mov cl, 0x1d
jmp 0x14013a0ef
mov cl, 0x26
jmp 0x14013a0ef
mov cl, 0x1a
jmp 0x14013a0ef
or r15, 2
jmp 0x14013b100
mov word [rbp + 0x1b2], cx
mov dword [rbp + 0x1b4], eax
movups xmmword [rbp + 0x1b8], xmm0
adc dword [rbp + 0x1b8], eax
adc dword [rbp + 0x1b8], eax
mov dword [rbp + 0x1c8], edx
lea rdx, [rbp + 0x1b0]
add dword [rax], eax
add byte [rax - 0x77], cl
stc
add dword [rax], eax
add byte [rax - 0x77], cl
stc
call sub.ws2_32.dll_connect
cmp eax, 0xffffffff
je 0x14013af2a
xor r15d, r15d
jmp 0x14013af3a
invalid
adc al, ch
push rbp
pop rbx
add eax, 0xc7894100
call sub.ws2_32.dll_WSAGetLastError
mov r15d, eax
shl r15, 0x20
or r15, 2
mov qword [rbp + 0x3c0], r15
mov dword [rbp + 0x1b0], 0
lea r8, [rbp + 0x1b0]
mov rcx, rdi
mov edx, 0x8004667e
call sub.ws2_32.dll_ioctlsocket
cmp eax, 0xffffffff
je 0x14013af86
test r15, r15
je 0x14013afa3
mov eax, r15d
and eax, 3
lea rcx, [0x14044e40c]
movsxd rax, dword [rcx + rax*4]
add rax, rcx
jmp rax
movzx eax, byte [r15 + 0x10]
jmp 0x14013afe2
call sub.ws2_32.dll_WSAGetLastError
mov esi, eax
shl rsi, 0x20
or rsi, 2
test r15, r15
jne 0x14013b0f1
jmp 0x14013b0fd
xor r15d, r15d
jmp 0x14013b100
mov rcx, r15
shr rcx, 0x20
call fcn.140144280
jmp 0x14013afe2
mov rax, r15
shr rax, 0x20
cmp eax, 0x28
ja case.default.0x14013afd7
lea rcx, [0x14044e41c]
movsxd rax, dword [rcx + rax*4]
add rax, rcx
jmp rax
xor eax, eax
jmp 0x14013afe2
movzx eax, byte [r15 + 0xf]
cmp al, 0xd
jne 0x14013b100
test r14, r14
jne 0x14013afff
test ebx, ebx
jne 0x14013afff
lea rsi, str.X5E_
jmp 0x14013b0f1
cmp r14, 0x7fffffff
mov eax, 0x7fffffff
cmovb rax, r14
cmovb eax, esi
mov ecx, ebx
imul rcx, rcx, 0x10624dd3
shr rcx, 0x26
mov dword [rbp + 0x3b8], eax
test rax, rax
mov eax, 1
cmovne eax, ecx
cmp ebx, 0x3e8
cmovae eax, ecx
mov dword [rbp + 0x3bc], eax
lea rcx, [rbp + 0x1c0]
mov r8d, 0x1f8
xor edx, edx
call sub.msvcrt.dll_memset
add byte [rax - 0x39], cl
test al, 1
add byte [rax], al
add byte [rax], al
add byte [rax - 0x39], cl
test al, 1
add byte [rax], al
add byte [rax], al
mov qword [rbp - 0x50], rdi
add byte [rax], al
mov qword [rbp - 0x50], rdi
lea rcx, [rbp - 0x48]
lea ecx, [rbp - 0x48]
mov r8d, 0x1f8
add byte [rax], al
xor edx, edx
call sub.msvcrt.dll_memset
add eax, 0x85c74800
mov al, 1
add byte [rax], al
add dword [rax], eax
add byte [rax], al
add eax, 0x85c74800
mov al, 1
add byte [rax], al
add dword [rax], eax
add byte [rax], al
mov qword [rbp + 0x1b8], rdi
mov dword [rbp + 0x1b8], edi
lea rax, [rbp + 0x3b8]
lea eax, [rbp + 0x3b8]
mov qword [rsp + 0x20], rax
mov dword [rsp + 0x20], eax
lea r8, [rbp - 0x58]
lea r9, [rbp + 0x1b0]
invalid
test al, 0x4c
lea ecx, [rbp + 0x1b0]
invalid
add byte [rcx + 1], bh
mov ecx, 1
xor edx, edx
call sub.ws2_32.dll_select
test eax, eax
invalid
je 0x14013b0bc
shr al, cl
jb 0x14013b0fa
add eax, 0x74c08500
invalid
sal byte [rsi + rdx - 0x7d], 0xf8
push qword [rbp + 0x1a]
invalid
cmp eax, 0xffffffff
jne 0x14013b0c5
invalid
sbb ch, al
invalid
call sub.ws2_32.dll_WSAGetLastError
mov esi, eax
invalid
shl rsi, 0x20
or rsi, 2
invalid
add ch, bl
invalid
invalid
invalid
lea r15, str.connection_timed_out
in eax, 0x84
xor dword [rax], eax
jmp 0x14013b0ce
cmp dword [rbp - 0x58], 1
jne 0x14013b0dc
jge 0x14013b070
add dword [rbp + 0x11], esi
xor r15d, r15d
dec dword [rax - 0x73]
invalid
lea rcx, [rbp + 0x3c0]
call fcn.1400ff320
jmp 0x14013b100
invalid
add al, ch
cld
invalid
and al, 0x48
mov ecx, esi
mov rcx, rsi
call fcn.14013bae0
add byte [rax], al
mov rsi, rdx
test rax, rax
jne 0x14013b0f1
test rsi, rsi
je 0x14013b0cb
invalid
fimul dword [rax - 0x73]
invalid
lea rcx, [rbp + 0x3c0]
call fcn.1400ff320
add al, ch
and eax, dword [rdx - 4]
cld
dec dword [rcx - 0x77]
test dword [rcx + rcx*4 - 8], 0x48c48148
add rsp, 0x448
pop rbx
pop rdi
mov r15, rsi
mov edi, esi
mov rax, r15
add rsp, 0x448
invalid
pop rbx
pop rdi
pop rsi
pop r14
pop r15
pop rbp
ret
mov al, 0x25
jmp 0x14013afe2
invalid
invalid
invalid
mov al, 0x23
jmp 0x14013afe2
invalid
invalid
invalid
mov al, 0x24
jmp 0x14013afe2
invalid
invalid
invalid
mov al, 0x1b
jmp 0x14013afe2
invalid
invalid
invalid
mov al, 0x22
jmp 0x14013afe2
invalid
invalid
invalid
mov al, 0x10
jmp 0x14013afe2
invalid
invalid
invalid
mov al, 0xe
jmp 0x14013afe2
invalid
invalid
invalid
mov al, 0x21
jmp 0x14013afe2
invalid
invalid
invalid
mov al, 0xb
jmp 0x14013afe2
invalid
invalid
invalid
mov al, 4
jmp 0x14013afe2
invalid
invalid
invalid
mov al, 0x28
jmp 0x14013afe2
invalid
invalid
invalid
mov al, 0xc
jmp 0x14013afe2
invalid
invalid
invalid
mov al, 9
jmp 0x14013afe2
invalid
invalid
invalid
mov al, 0x19
jmp 0x14013afe2
invalid
invalid
invalid
mov al, 0x18
jmp 0x14013afe2
invalid
invalid
invalid
mov al, 2
jmp 0x14013afe2
invalid
invalid
invalid
mov al, 0xf
jmp 0x14013afe2
invalid
invalid
invalid
mov al, 3
jmp 0x14013afe2
invalid
invalid
invalid
mov al, 7
jmp 0x14013afe2
invalid
invalid
invalid
mov al, 1
jmp 0x14013afe2
mov al, 0x1f
jmp 0x14013afe2
invalid
invalid
invalid
mov al, 0x11
jmp 0x14013afe2
invalid
invalid
invalid
mov al, 0x29
jmp 0x14013afe2
invalid
invalid
invalid
mov al, 0x14
jmp 0x14013afe2
invalid
invalid
invalid
mov al, 5
jmp 0x14013afe2
invalid
invalid
invalid
mov al, 0x15
jmp 0x14013afe2
invalid
invalid
invalid
mov al, 0xd
jmp 0x14013afe2
invalid
invalid
invalid
mov al, 6
jmp 0x14013afe2
invalid
invalid
invalid
mov al, 0x12
jmp 0x14013afe2
invalid
invalid
invalid
mov al, 0xa
jmp 0x14013afe2
invalid
invalid
invalid
mov al, 8
jmp 0x14013afe2
invalid
invalid
invalid
mov al, 0x1e
jmp 0x14013afe2
invalid
invalid
invalid
mov al, 0x20
jmp 0x14013afe2
invalid
invalid
invalid
mov al, 0x16
jmp 0x14013afe2
invalid
invalid
invalid
mov al, 0x27
jmp 0x14013afe2
invalid
invalid
invalid
mov al, 0x13
jmp 0x14013afe2
invalid
invalid
invalid
mov al, 0x17
jmp 0x14013afe2
invalid
invalid
invalid
mov al, 0x1c
jmp 0x14013afe2
invalid
invalid
invalid
mov al, 0x1d
jmp 0x14013afe2
mov al, 0x26
jmp 0x14013afe2
mov al, 0x1a
jmp 0x14013afe2
mov rsi, qword [rbp + 0x70]
call fcn.14016da70
or al, byte [rbx]
invalid
or al, byte [rbx]
add byte [rdi], cl
or ecx, dword [rcx - 0x77]
mov byte [rcx - 0x49], 1
test r12, r12
je 0x14013d09f
ud2
mov rdx, r12
add rdx, r12
add edx, esp
add edx, esp
mov r8d, 2
mov rcx, rsi
jmp 0x14013d09a
test dil, 1
jne 0x14013d0c7
mov r15b, 1
jmp 0x14013d09f
mov bh, 1
test r12, r12
je 0x14013d09f
add r12, r12
mov r8d, 2
mov rcx, rsi
mov rdx, r12
mov edx, esp
mov edx, esp
call fcn.14000d900
or ch, ch
dec dword [rax - 0x75]
mov esi, dword [rbp + 0x70]
mov rsi, qword [rbp + 0x70]
mov esi, dword [rbp + 0x70]
mov rdx, qword [rbp + 0x68]
mov edx, dword [rbp + 0x68]
test rdx, rdx
test edx, edx
je 0x14013d0ba
mov r8d, 1
add byte [rax], al
mov rcx, rsi
int1
call fcn.14000d900
in eax, dx
inc dword [rbp - 0x7c]
test r15b, r15b
jne 0x14013d0c7
push qword [rbp + 8]
mov rcx, rbx
mov ecx, ebx
call sub.kernel32.dll_CloseHandle
cmp al, byte [0x1319d1cca]
mov rcx, r14
mov ecx, esi
call fcn.140191300
int3
add eax, 0x5655cc00
push rbp
push rsi
push rdi
sub rsp, 0x60
sub esp, 0x60
sub esp, 0x60
lea rbp, [rsp + 0x60]
lea ebp, [rsp + 0x60]
mov eax, 0xffffffff
cmp r8, rax
dec dword [rcx + 0x39]
ror byte [rdi + rcx + 0x43], 0xc0
cmovae r8, rax
cmovae r8, rax
mov dword [rbp - 0xc], 0
xorps xmm0, xmm0
movaps xmmword [rbp - 0x30], xmm0
ror byte [r8 - 0x39], 1
loopne 0x14013d0fb
add byte [rax], al
invalid
add byte [rax], al
add byte [rdi], cl
push rdi
ror byte [rdi], 0x29
ror byte [r8 - 0x39], 1
loopne 0x14013d0fb
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax - 0x73], cl
invalid
lea rax, [rbp - 0xc]
lea eax, [rbp - 0xc]
hlt
mov qword [rbp - 0x18], rax
lea rax, [0x14013d7c0]
mov qword [rsp + 0x20], rax
lea r9, [rbp - 0x30]
invalid
invalid
lea ecx, [rbp - 0x30]
shr r8b, 1
leave
cmp al, 5
add byte [rbp - 0x6fa48b40], al
test eax, eax
je 0x14013d17a
nop
call sub.kernel32.dll_ReadFileEx
test eax, eax
je 0x14013d17a
nop
mov ecx, 0xffffffff
mov edx, 1
invalid
invalid
invalid
add dword [rax], eax
add byte [rax], al
invalid
add al, ch
xor eax, 0x8300053d
call sub.kernel32.dll_SleepEx
cmp dword [rbp - 0xc], 0
jge 0x14013d126
invalid
je 0x14013d120
jge 0x14013d126
add byte [rbx + rbp*8 - 0x75], dh
clc
clc
mov eax, dword [rbp - 8]
clc
mov edx, dword [rbp - 4]
mov rcx, rax
ror dword [rax - 0x3f], 0xe1
and byte [rax - 0x7d], cl
leave
shl rcx, 0x20
or rcx, 2
add al, byte [rbp + 0x31]
rol byte [rbp - 0x6af0be40], 0xc0
setne al
add al, byte [rbp + 0x31]
rol byte [rbp - 0x6af0be40], 0xc0
setne al
setne al
cmovne rdx, rcx
cmovne edx, ecx
mov qword [rbp - 0x30], r8
mov dword [rbp - 0x30], eax
mov qword [rbp - 0x28], rdx
mov dword [rbp - 0x28], edx
fmul dword [rdi]
je 0x14013d203
test byte [rdx + 0x48000000], ah
lea esi, [rbp - 0x28]
invalid
add byte [rax - 0x73], cl
jne 0x14013d13d
invalid
lea rsi, [rbp - 0x28]
fmul dword [rcx + 0x3e083d0]
mov eax, edx
and eax, 3
loopne 0x14013d16d
loopne 0x14013d16d
lea rcx, [0x14044e4c0]
or eax, 0x31134f
adc r14, qword [r9]
add byte [rax + 0x63], cl
add al, 0x81
invalid
movsxd rax, dword [rcx + rax*4]
or dword [rax + 1], 0xe8e0ffc8
insd dword [rdi], dx
add rax, rcx
jmp rax
call sub.kernel32.dll_GetLastError
mov edx, eax
ret 0xc148
loop 0x14013d1a5
invalid
cmp eax, dword [0x188d65a82]
shl edx, 0x20
invalid
ret 0xc148
and byte [rax - 0x7d], cl
retf 0x4802
invalid
invalid
or rdx, 2
mov qword [rbp - 0x30], 1
rol byte [rcx], 1
add byte [rax], al
add byte [rax - 0x73], cl
jne 0x14013d16d
invalid
add cl, byte [rax - 0x39]
rol byte [r9], 1
rol byte [rcx], 1
rol byte [rcx], 1
add byte [rax], al
add byte [rax - 0x73], cl
jne 0x14013d16d
invalid
fmul dword [rax - 0x77]
push rbp
mov qword [rbp - 0x28], rdx
mov eax, edx
and eax, 3
loopne 0x14013d1a1
fmul dword [rcx + 0x3e083d0]
loopne 0x14013d1a1
lea rcx, [0x14044e4c0]
or eax, 0x31131b
sbb edx, dword [rbx]
xor dword [rax], eax
movsxd rax, dword [rcx + rax*4]
add rax, rcx
or dword [rax + 1], 0xfe0ffc8
mov dh, 0x42
adc bl, ch
jmp rax
movzx eax, byte [rdx + 0x10]
jmp 0x14013d1f0
invalid
cmp al, 0x48
mov ecx, edx
mov rcx, rdx
shr rcx, 0x20
mov rdi, rdx
and byte [rax - 0x77], cl
xlatb
call fcn.140144280
add byte [rax], al
mov rdx, rdi
jmp 0x14013d1f0
mov rax, rdx
shr rax, 0x20
shr eax, 0x20
shr eax, 0x20
cmp eax, 0x28
ja case.default.0x14013d1e6
add byte [rax], al
add byte [rax], al
lea rcx, [0x14044e4d0]
xor dword [rax], eax
movsxd rax, dword [rcx + rax*4]
add rax, rcx
add eax, ecx
add eax, ecx
jmp rax
xor eax, eax
jmp 0x14013d1f0
add al, 0xf
mov dh, 0x42
ud1
add dword [rax], eax
add byte [rax], al
invalid
movzx eax, byte [rdx + 0xf]
mov ecx, 1
add byte [rax], al
add byte [rbx + rcx], bh
cmp al, 0xb
jne 0x14013d205
mov rcx, rsi
call fcn.1400ff320
push qword [rcx]
invalid
push qword [rcx]
sal byte [rcx], cl
xor ecx, ecx
leave
mov rax, rcx
enter 0xffffffffffff8348, 0xffffffffffffffc4
invalid
add rsp, 0x60
pop rdi
pop rsi
pop rbp
ret
mov al, 0x25
jmp 0x14013d1f0
mov al, 0x23
jmp 0x14013d1f0
and ebp, ebx
fdiv dword [rax - 0x4f2b14dc]
mov al, 0x24
jmp 0x14013d1f0
mov al, 0x1b
jmp 0x14013d1f0
mov al, 0x22
jmp 0x14013d1f0
mov al, 0x10
jmp 0x14013d1f0
mov al, 0xe
jmp 0x14013d1f0
mov al, 0x24
jmp 0x14013d1f0
mov al, 0x1b
jmp 0x14013d1f0
mov al, 0x22
jmp 0x14013d1f0
mov al, 0x10
jmp 0x14013d1f0
mov al, 0xe
jmp 0x14013d1f0
mov al, 0x21
jmp 0x14013d1f0
invalid
sal byte [rax - 0x4f4314f5], 4
mov al, 0xb
jmp 0x14013d1f0
invalid
mov esp, 0xb8eb04b0
mov al, 4
jmp 0x14013d1f0
mov eax, 0xb4eb28b0
mov al, 0x28
jmp 0x14013d1f0
invalid
mov ah, 0xb0
or al, 0xeb
mov al, 0xc
jmp 0x14013d1f0
invalid
mov al, 0xb0
or ebx, ebp
mov al, 9
jmp 0x14013d1f0
lodsb al, byte [rsi]
lodsb al, byte [rsi]
mov al, 0x19
jmp 0x14013d1f0
invalid
test al, 0xb0
sbb bl, ch
mov al, 0x18
jmp 0x14013d1f0
movsb byte [rdi], byte [rsi]
movsb byte [rdi], byte [rsi]
mov al, 2
jmp 0x14013d1f0
invalid
movabs al, byte [0x98eb03b09ceb0fb0]
mov al, 0xf
jmp 0x14013d1f0
pushfq
pushfq
mov al, 3
jmp 0x14013d1f0
cwde
cwde
mov al, 7
jmp 0x14013d1f0
xchg esp, eax
xchg esp, eax
mov al, 1
jmp 0x14013d1f0
nop
nop
mov al, 0x1f
jmp 0x14013d1f0
invalid
invalid
mov al, 0x11
jmp 0x14013d1f0
invalid
mov byte [rax - 0x4f7b14d7], dh
adc al, 0xeb
invalid
mov al, 0x29
jmp 0x14013d1f0
invalid
test byte [rax - 0x4f7f14ec], dh
add eax, 0xffff79e9
jns 0x14013d274
invalid
mov al, 0x14
jmp 0x14013d1f0
xor byte [rax - 0x8616fb], 0xff
mov al, 5
jmp 0x14013d1f0
jns 0x14013d274
invalid
invalid
jns 0x14013d274
invalid
invalid
push qword [rax - 0x8d16eb]
mov al, 0x15
jmp 0x14013d1f0
invalid
invalid
invalid
invalid
invalid
mov al, 0xd
or eax, 0xffff6be9
push qword [rax - 0x9b16fa]
jmp 0x14013d1f0
invalid
mov al, 6
jmp 0x14013d1f0
invalid
invalid
invalid
push qword [rax - 0xa216ee]
mov al, 0x12
jmp 0x14013d1f0
pop rbp
invalid
invalid
invalid
pop rbp
invalid
invalid
mov al, 0xa
jmp 0x14013d1f0
invalid
invalid
invalid
invalid
invalid
mov al, 8
jmp 0x14013d1f0
invalid
invalid
invalid
invalid
invalid
mov al, 0x1e
jmp 0x14013d1f0
invalid
invalid
invalid
invalid
invalid
mov al, 0x20
jmp 0x14013d1f0
invalid
invalid
invalid
and cl, ch
invalid
invalid
invalid
mov al, 0x16
jmp 0x14013d1f0
invalid
invalid
invalid
invalid
invalid
mov al, 0x27
jmp 0x14013d1f0
invalid
invalid
invalid
invalid
invalid
mov al, 0x13
jmp 0x14013d1f0
invalid
invalid
invalid
invalid
invalid
mov al, 0x17
jmp 0x14013d1f0
invalid
invalid
invalid
invalid
invalid
mov al, 0x1c
jmp 0x14013d1f0
invalid
invalid
invalid
invalid
invalid
mov al, 0x1d
jmp 0x14013d1f0
invalid
invalid
invalid
invalid
push qword [rax - 0xef16da]
invalid
mov al, 0x26
jmp 0x14013d1f0
invalid
invalid
invalid
invalid
mov al, 0x1a
jmp 0x14013d1f0
or edi, edi
invalid
invalid
or edi, edi
invalid
invalid
nop word [rax + rax]
push rbp
push rsi
add byte [rax], al
add byte [rax], al
add byte [rbp + 0x56], dl
push rdi
sub rsp, 0x60
lea rbp, [rsp + 0x60]
insb byte [rdi], dx
and al, 0x60
invalid
invalid
mov rsi, rdx
mov r8, qword [rdx + 8]
or byte [rax - 0x75], cl
jp case.0x14013d1ac.119
mov rdi, qword [rdx + 0x10]
sub r8, rdi
mov eax, 0xffffffff
invalid
invalid
invalid
invalid
cmp r8, rax
cmovae r8, rax
cmovae eax, eax
cmovae eax, eax
mov rdx, qword [rdx]
mov edx, dword [rdx]
add rdx, rdi
cli
mov dword [rbp - 0xc], 0
add byte [rax], al
add byte [rax], al
xorps xmm0, xmm0
movaps xmmword [rbp - 0x30], xmm0
sub dword [rbp - 0x30], eax
sub dword [rbp - 0x30], eax
mov qword [rbp - 0x20], 0
mov dword [rbp - 0x20], 0
add byte [rax], al
add byte [rax - 0x73], cl
invalid
lea rax, [rbp - 0xc]
lea eax, [rbp - 0xc]
hlt
mov qword [rbp - 0x18], rax
mov dword [rbp - 0x18], eax
lea rax, [0x14013d7c0]
add byte [rax], al
mov qword [rsp + 0x20], rax
and al, 0x20
and al, 0x20
lea r9, [rbp - 0x30]
lea ecx, [rbp - 0x30]
call sub.kernel32.dll_ReadFileEx
test eax, eax
je 0x14013d3b6
invalid
xchg ebp, eax
cmp al, byte [0x1b4d45852]
invalid
nop word cs:[rax + rax]
invalid
add byte [rax], al
add byte [rcx - 1], bh
mov ecx, 0xffffffff
mov ecx, 0xffffffff
invalid
mov edx, 1
add byte [rax], al
add al, ch
cmc
cmp al, byte [0x134915672]
add byte [rbx + 0x7400f47d], al
jmp 0x14013d301
mov edx, dword [rbp - 8]
add byte [rax], al
call sub.kernel32.dll_SleepEx
cmp dword [rbp - 0xc], 0
je case.0x14013d1ac.104
add byte [rbx + 0x7400f47d], al
jmp 0x14013d301
invalid
mov edx, dword [rbp - 8]
mov ecx, dword [rbp - 4]
cld
mov rax, rdx
mov eax, edx
shl rax, 0x20
or rax, 2
or eax, 2
or eax, 2
xor r8d, r8d
test edx, edx
rol byte [rcx + 0xf], cl
xchg ebp, eax
invalid
rol byte [rbp - 0x6af0be2e], 0xc0
rol byte [rcx + 0xf], cl
xchg ebp, eax
ror byte [rax + 0xf], 0x44
ror dword [rcx + rcx*4 + 0x45], 0xd0
setne al
cmove rax, rcx
mov qword [rbp - 0x30], r8
ror dword [rcx + rcx*4 + 0x45], 0xd0
mov qword [rbp - 0x28], rax
mov dword [rbp - 0x28], eax
je 0x14013d3ee
push rcx
lea rsi, [rbp - 0x28]
jne 0x14013d379
mov ecx, eax
and ecx, 3
lea rdx, [0x14044e574]
lea edx, [0x14044e574]
xor dword [rax], eax
movsxd rcx, dword [rdx + rcx*4]
or al, 0x8a
add rcx, rdx
jmp rcx
sar edi, 1
loope case.0x14013d1ac.123
call sub.kernel32.dll_GetLastError
xor dword [rcx], edi
add eax, 0xe0c14800
shl rax, 0x20
or rax, 2
mov qword [rbp - 0x30], 1
lea rsi, [rbp - 0x28]
shl rax, 0x20
or rax, 2
mov qword [rbp - 0x30], 1
add dword [rax], eax
add byte [rax], al
lea rsi, [rbp - 0x28]
mov qword [rbp - 0x28], rax
mov ecx, eax
and ecx, 3
add ecx, dword [rax - 0x73]
adc eax, 0x311195
xchg ebp, eax
adc dword [rcx], esi
invalid
add ecx, dword [rax - 0x73]
adc eax, 0x311195
xchg ebp, eax
adc dword [rcx], esi
invalid
xchg ebp, eax
adc dword [rcx], esi
add byte [rax + 0x63], cl
movsxd rcx, dword [rdx + rcx*4]
movsxd rcx, dword [rdx + rcx*4]
invalid
add rcx, rdx
jmp rcx
invalid
loope 0x14013d3f8
movzx ecx, byte [rax + 0x10]
jmp 0x14013d444
mov dh, 0x48
adc bl, ch
push rsi
add rdi, rcx
add edi, ecx
mov qword [rsi + 0x10], rdi
jle 0x14013d405
mov rax, qword [rsi + 0x18]
cmp rax, rdi
clc
sbb byte [rax + 0x39], r9b
sbb byte [rax + 0x39], cl
clc
cmova rdi, rax
clc
mov qword [rsi + 0x18], rdi
jmp 0x14013d451
sbb bl, ch
mov rcx, rax
mov rcx, rax
mov ecx, eax
shr rcx, 0x20
jmp 0x1079d1c30
mov rdi, rax
call fcn.140144280
invalid
invalid
imul ebp, dword [rsi], 0
add byte [rcx - 0x776b73f], cl
mov ecx, eax
mov rax, rdi
ror dword [rax - 0x77], 0xf8
jmp 0x14013d444
sub byte [rax - 0x77], cl
mov rcx, rax
mov ecx, eax
ror dword [rax - 0x3f], 0xe9
shr rcx, 0x20
cmp ecx, 0x28
stc
sub byte [rdi], cl
invalid
xchg dword [rax], eax
add byte [rax], al
invalid
jmp 0x1690d5746
and byte [rbx - 0x78f0d707], al
xchg dword [rax], eax
add byte [rax], al
invalid
stc
sub byte [rdi], cl
xchg dword [rdi + 0x48000000], eax
add byte [rax - 0x73], cl
adc eax, 0x311151
adc dword [rcx], esi
invalid
add byte [rax], al
add byte [rax - 0x73], cl
adc eax, 0x311151
adc dword [rcx], esi
invalid
lea rdx, [0x14044e584]
adc dword [rcx], esi
add byte [rax + 0x63], cl
or al, 0x8a
movsxd rcx, dword [rdx + rcx*4]
add rcx, rdx
jmp rcx
sar edi, 1
loope 0x14013d46e
xor ecx, ecx
leave
jmp 0x14013d444
movzx ecx, byte [rax + 0xf]
cmp cl, 0xb
stc
or esi, dword [rbp + 0xa]
jne case.0x14013d3e6.40
jne case.0x14013d3e6.40
mov rcx, rsi
int1
call fcn.1400ff320
invalid
cld
push qword [rcx]
ror byte [rax - 0x7d], 0xc4
add rsp, 0x60
xor eax, eax
add rsp, 0x60
invalid
pop rdi
pop rsi
pop rbp
ret
mov cl, 0x25
jmp 0x14013d444
and eax, 0x23b1e5eb
mov cl, 0x23
jmp 0x14013d444
mov cl, 0x24
jmp 0x14013d444
mov cl, 0x1b
jmp 0x14013d444
invalid
fnstenv [rcx - 0x4e2a14de]
adc bl, ch
jmp 0x14013d444
mov cl, 0xe
jmp 0x14013d444
mov cl, 0x21
jmp 0x14013d444
mov cl, 0x22
jmp 0x14013d444
invalid
mov cl, 0x10
jmp 0x14013d444
mov cl, 0xe
jmp 0x14013d444
mov cl, 0x21
jmp 0x14013d444
mov cl, 0xb
jmp 0x14013d444
mov cl, 4
jmp 0x14013d444
mov cl, 0x28
jmp 0x14013d444
mov cl, 0xc
jmp 0x14013d444
mov cl, 9
jmp 0x14013d444
mov cl, 0x19
jmp 0x14013d444
mov cl, 0x18
jmp 0x14013d444
sbb bl, ch
lodsd eax, dword [rsi]
mov cl, 2
jmp 0x14013d444
mov cl, 0xf
jmp 0x14013d444
mov cl, 3
jmp 0x14013d444
mov cl, 7
jmp 0x14013d444
mov cl, 1
jmp 0x14013d444
mov cl, 0x1f
jmp 0x14013d444
mov cl, 0x11
jmp 0x14013d444
mov cl, 0x29
jmp 0x14013d444
mov cl, 0x14
jmp 0x14013d444
invalid
mov dword [rcx - 0x4e7a14fb], esi
adc eax, 0xdb181eb
jmp 0x14013d444
mov cl, 0xd
mov cl, 5
jmp 0x14013d444
mov cl, 0x15
jmp 0x14013d444
mov cl, 0xd
jmp 0x14013d444
invalid
mov cl, 6
jmp 0x14013d444
invalid
invalid
invalid
mov cl, 0x12
jmp 0x14013d444
invalid
invalid
adc ch, cl
insb byte [rdi], dx
invalid
invalid
mov cl, 0xa
jmp 0x14013d444
invalid
invalid
invalid
mov cl, 8
jmp 0x14013d444
invalid
invalid
invalid
mov cl, 0x1e
jmp 0x14013d444
invalid
invalid
invalid
mov cl, 0x20
jmp 0x14013d444
invalid
invalid
invalid
mov cl, 0x16
jmp 0x14013d444
invalid
invalid
invalid
mov cl, 0x27
jmp 0x14013d444
invalid
invalid
invalid
mov cl, 0x13
jmp 0x14013d444
invalid
invalid
invalid
mov cl, 0x17
jmp 0x14013d444
invalid
invalid
invalid
mov cl, 0x1c
jmp 0x14013d444
invalid
invalid
invalid
mov cl, 0x1d
jmp 0x14013d444
mov cl, 0x26
jmp 0x14013d444
mov cl, 0x1a
jmp 0x14013d444
mov rdi, rcx
mov r15, qword [rdx]
mov rbx, qword [rdx + 0x10]
mov rax, r15
sub rax, rbx
mov r14, r15
mov r13, rbx
cmp rax, 0x20
jae 0x14013d59a
mov rcx, rdi
mov rdx, rsi
call fcn.140127150
test rax, rax
je 0x14013d58a
mov eax, 1
add rsp, 0x78
pop rbx
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
pop rbp
ret
test rdx, rdx
je 0x14013d773
mov r14, qword [rsi]
mov r13, qword [rsi + 0x10]
outsb dx, byte [rsi]
adc byte [rax - 0x77], cl
pop rbp
add byte [rcx - 0x44], al
add byte [rax], ah
add byte [rax], al
mov qword [rbp], rbx
mov r12d, 0x2000
xor r8d, r8d
lea rbx, [0x14044e628]
lea ebx, [0x14044e628]
lea ebx, [0x14044e628]
mov qword [rbp - 0x30], r15
cmp r14, r15
jne 0x14013d5eb
cmp r13, r14
jne 0x14013d5eb
mov rdx, rsi
mov rsi, r8
mov rcx, rdi
mov r14, rdx
call fcn.140127150
test rax, rax
jne 0x14013d574
test rdx, rdx
je 0x14013d79e
mov rax, r14
mov r14, qword [r14]
mov r13, qword [rax + 0x10]
mov r8, rsi
mov rsi, rax
cmp r13, r14
jne 0x14013d630
mov r15, r14
add r15, 0x20
jb 0x14013d78a
invalid
add byte [rbx - 0x73], cl
add al, 0x36
lea rax, [r14 + r14]
cmp rax, r15
cmova r15, rax
test r14, r14
mov qword [rbp - 0x28], r8
mov dword [rbp - 0x28], eax
je 0x14013d640
mov rax, qword [rsi + 8]
mov qword [rbp - 0x20], rax
mov qword [rbp - 0x10], r14
mov eax, 1
jmp 0x14013d642
mov rax, qword [rsi + 8]
jmp 0x14013d67d
test byte [rax], al
add byte [rax], al
add byte [rax], al
xor eax, eax
mov rdx, r15
not rdx
shr rdx, 0x3f
invalid
mov qword [rbp - 0x18], rax
lea rcx, [rbp - 0x48]
mov r8, r15
lea r9, [rbp - 0x20]
call fcn.140108be0
cmp qword [rbp - 0x48], 0
jne 0x14013d7ad
xor byte [rbp - 0x7cb70004], 0x7d
mov eax, 0x42850f00
add dword [rax], eax
add byte [rax - 0x75], cl
ror byte [r8 - 0x77], 0x46
or byte [rcx + rcx*4 + 0x3e], cl
mov rax, qword [rbp - 0x40]
mov qword [rsi + 8], rax
mov qword [rsi], r15
mov r14, r15
mov r8, qword [rbp - 0x28]
add rax, r13
mov r15, r14
sub r15, r13
cmp r15, r12
cmovae r15, r12
mov qword [rbp - 0x20], rax
mov qword [rbp - 0x18], r15
mov qword [rbp - 0x10], 0
mov qword [rbp - 8], r8
jmp 0x14013d6c7
mov rcx, rdi
lea rdx, [rbp - 0x20]
call fcn.14013a040
mov rdx, rax
test rax, rax
je 0x14013d720
mov ecx, edx
and ecx, 3
mov eax, 1
movsxd rcx, dword [rbx + rcx*4]
add rcx, rbx
jmp rcx
mov rax, qword [rbp - 0x10]
test rax, rax
je 0x14013d77c
mov rcx, qword [rbp - 8]
mov r8, rcx
sub r8, rax
add r13, rax
cmp rcx, r15
mov rdx, 0xffffffffffffffff
cmovne r12, rdx
lea rcx, [r12 + r12]
test r12, r12
cmovs rcx, rdx
cmp r15, r12
cmovb rcx, r12
mov qword [rsi + 0x10], r13
cmp rax, r15
cmove r12, rcx
mov r15, qword [rbp - 0x30]
cmp r14, r15
je 0x14013d5b7
jmp 0x14013d5eb
xor edx, edx
xor eax, eax
jmp 0x14013d579
sub r13, qword [rbp]
xor eax, eax
mov rdx, r13
jmp 0x14013d579
mov eax, 1
movabs rdx, 0x2600000003
jmp 0x14013d579
mov rdx, qword [r14 + 0x10]
sub rdx, qword [rbp]
xor eax, eax
jmp 0x14013d579
movabs rdx, 0x2600000003
jmp 0x14013d574
lea rcx, [rbp + 0x540]
call fcn.14013c650
mov rsi, qword [rbp + 0x540]
movabs rax, 0x8000000000000000
cmp rsi, rax
mov qword [rbp + 0x5e0], r14
jne 0x14013f8b0
lea rcx, [rbp + 0x548]
call fcn.1400ff320
jmp 0x14013f96f
mov rdi, qword [rbp + 0x548]
mov rbx, qword [rbp + 0x550]
mov r14, qword [rbp + 0x558]
mov rcx, rdi
mov rdx, rbx
call case.0x14012c6b6.21
cmp rbx, rdx
cmovb rdx, rbx
test rax, rax
cmove rdx, rbx
mov qword [rbp - 0x30], rsi
mov qword [rbp - 0x28], rdi
mov qword [rbp - 0x20], rdx
mov qword [rbp - 0x18], r14
lea rcx, [rbp - 0x30]
mov rdx, r13
mov r8, qword [rbp + 0x5d0]
call fcn.14012bcd0
cmp byte [rbp + 0x5d8], 0
jne 0x14013f920
lea rdx, str.exe.NULexit_code:
lea rcx, [rbp - 0x30]
mov r8d, 3
call fcn.14012c9a0
mov rsi, qword [rbp - 0x28]
mov r8, qword [rbp - 0x20]
lea rcx, [rbp + 0x440]
mov rdx, rsi
call fcn.140141cd0
mov rdx, qword [rbp - 0x30]
test rdx, rdx
mov r14, qword [rbp + 0x5e0]
je 0x14013f955
mov r8d, 1
mov rcx, rsi
call fcn.14000d900
mov r12, qword [rbp + 0x440]
movabs rax, 0x8000000000000000
cmp r12, rax
jne 0x14013fcb4
mov qword [rbp + 0x5c0], r13
mov qword [rbp + 0x4f0], 0
mov qword [rbp + 0x4f8], 2
mov qword [rbp + 0x500], 0
mov r8d, 0x200
mov eax, 2
mov qword [rbp + 0x5c8], rax
xor r14d, r14d
xor r13d, r13d
xor edi, edi
cmp r8, 0x201
jb 0x14013f9cf
jmp 0x14013f9e0
jae 0x14013fa9a
cmp r8, 0x201
jae 0x14013f9e0
mov ebx, 0x200
lea r15, [rbp - 0x30]
mov r12, r8
jmp 0x14013fa37
sub r8, rdi
sub r13, rdi
cmp r13, r8
jae 0x14013fa0f
lea rcx, [rbp + 0x4f0]
mov rdx, rdi
call fcn.140108e80
mov r14, qword [rbp + 0x4f0]
mov rax, qword [rbp + 0x4f8]
mov qword [rbp + 0x5c8], rax
mov eax, 0xffffffff
cmp r14, rax
mov edi, 0xffffffff
cmovb rdi, r14
mov qword [rbp + 0x500], rdi
mov r13, r14
mov rbx, rdi
mov r15, qword [rbp + 0x5c8]
mov r12, rdi
xor ecx, ecx
call sub.kernel32.dll_SetLastError
mov rcx, r15
mov edx, r12d
call sub.kernel32.dll_GetSystemDirectoryW
mov esi, eax
test eax, eax
jne 0x14013fa5c
call sub.kernel32.dll_GetLastError
test eax, eax
jne 0x140140185
mov r8d, esi
cmp r12, r8
jne 0x14013f9c0
call sub.kernel32.dll_GetLastError
cmp eax, 0x7a
jne 0x140141504
add r12, r12
mov eax, 0xffffffff
cmp r12, rax
cmovae r12, rax
mov r8, r12
cmp r8, 0x201
jae 0x14013f9e0
jmp 0x14013f9cf
cmp rbx, r8
jb 0x1401415d4
lea rcx, [rbp + 0x540]
mov rdx, r15
mov r14, qword [rbp + 0x5e0]
call fcn.140129d40
mov r13, qword [rbp + 0x5c0]
mov r8, qword [rbp + 0x5d0]
lea rcx, [rbp + 0x540]
mov rdx, r13
call fcn.14012bcd0
cmp byte [rbp + 0x5d8], 0
jne 0x14013faf8
lea rdx, str.exe.NULexit_code:
lea rcx, [rbp + 0x540]
mov r8d, 3
call fcn.14012c9a0
mov rsi, qword [rbp + 0x548]
mov r8, qword [rbp + 0x550]
lea rcx, [rbp + 0x440]
mov rdx, rsi
call fcn.140141cd0
mov rdx, qword [rbp + 0x540]
test rdx, rdx
je 0x14013fb2f
mov r8d, 1
mov rcx, rsi
call fcn.14000d900
movups xmm0, xmmword [rbp + 0x440]
movaps xmmword [rbp + 0x4b0], xmm0
mov rax, qword [rbp + 0x450]
mov qword [rbp + 0x4c0], rax
mov rdx, qword [rbp + 0x4f0]
test rdx, rdx
je 0x14013fb6c
mov rcx, qword [rbp + 0x4f8]
add rdx, rdx
mov r8d, 2
call fcn.14000d900
mov r12, qword [rbp + 0x4b0]
movabs rcx, 0x8000000000000000
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax + 0x2418d48], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax + 0x2418d48], al
cmp r12, rax
jge 0x140140429
cmp r12, rcx
je 0x1401401e1
movabs rax, 0x8000000000000001
cmp r12, rax
je 0x1401401d5
mov rcx, qword [rbp + 0x4b8]
mov r8d, 2
call fcn.14000d900
jmp 0x1401401e1
cmp rdx, r12
je 0x14013f876
mov rcx, qword [rbp - 0x28]
mov rax, qword [rbp - 0x20]
test rax, rax
je 0x14013fc90
mov r8, qword [rbp - 0x18]
mov qword [rbp - 0x30], rdx
mov qword [rbp - 0x28], rcx
mov qword [rbp - 0x20], rax
mov qword [rbp - 0x18], r8
mov rcx, rsi
mov rdx, r13
mov r8, qword [rbp + 0x5d0]
call fcn.14012bcd0
cmp byte [rbp + 0x5d8], 0
jne 0x14013fc32
mov r8d, 3
mov rcx, rsi
int1
int1
mov rdx, r15
call fcn.14012c9a0
mov r12, qword [rbp - 0x28]
mov r8, qword [rbp - 0x20]
mov rcx, rbx
mov rdx, r12
call fcn.140141cd0
mov rdx, qword [rbp - 0x30]
test rdx, rdx
je 0x14013fc5c
mov r8d, 1
mov rcx, r12
call fcn.14000d900
mov r12, qword [rbp + 0x440]
movabs rax, 0x8000000000000000
cmp r12, rax
jne 0x14013fcb4
mov rcx, rsi
mov rdx, rdi
call fcn.14013c3f0
mov rdx, qword [rbp - 0x30]
movabs r12, 0x8000000000000000
jmp 0x14013fbd8
test rdx, rdx
je 0x14013fca0
mov r8d, 1
call fcn.14000d900
mov rcx, rsi
mov rdx, rdi
call fcn.14013c3f0
mov rdx, qword [rbp - 0x30]
jmp 0x14013fbd8
mov r15, qword [rbp + 0x448]
mov rdi, qword [rbp + 0x450]
jmp 0x14013fe2a
mov rax, rcx
test rax, rax
cmovne r8, rax
test r8, r8
je 0x14013fd00
test rax, rax
test eax, eax
cmove rdx, r9
add r8, rdx
sub r8, rbx
cmp rdi, r8
cmovae rdi, r8
lea rcx, [rbp - 0x30]
mov rdx, rbx
mov r8, rdi
call fcn.140144440
mov rcx, qword [rbp - 0x30]
mov rax, qword [rbp - 0x28]
cmp rcx, r15
jne 0x14013fd2c
mov qword [rbp + 0x4d8], rax
mov qword [rbp + 0x4d0], r15
jmp 0x14013fd4c
mov rdx, qword [rbp - 0x20]
mov qword [rbp - 0x30], rcx
mov qword [rbp - 0x28], rax
mov qword [rbp - 0x20], rdx
lea rcx, [rbp + 0x4d0]
lea rdx, [rbp - 0x30]
call fcn.140136930
test rsi, rsi
je 0x14013fd62
mov r8d, 1
mov rcx, rbx
mov rdx, rsi
call fcn.14000d900
mov r12, qword [rbp + 0x4d0]
mov r15, qword [rbp + 0x4d8]
movabs rax, 0x8000000000000000
cmp r12, rax
jne 0x14013fe23
mov rax, qword [rbp + 0x5b0]
mov qword [rax], r15
mov qword [rax + 0x10], 2
add al, byte [rax]
add byte [rax], al
add al, byte [rax]
add byte [rax], al
cmp qword [rbp + 0x3d8], 0
je 0x14013fdf9
mov rcx, qword [rbp + 0x3e0]
test rcx, rcx
je 0x14013fde0
invalid
mov rdx, qword [rbp + 0x3e8]
mov rax, qword [rbp + 0x3f0]
mov qword [rbp - 0x28], 0
mov qword [rbp - 0x20], rcx
mov qword [rbp - 0x18], rdx
mov qword [rbp - 8], 0
mov qword [rbp], rcx
mov qword [rbp + 8], rdx
mov ecx, 1
jmp 0x14013fde4
xor ecx, ecx
xor eax, eax
mov qword [rbp - 0x30], rcx
mov qword [rbp - 0x10], rcx
mov qword [rbp + 0x10], rax
lea rcx, [rbp - 0x30]
call fcn.1400fe380
cmp dword [r14], 4
jb 0x14013fe08
mov rcx, qword [r14 + 8]
call sub.kernel32.dll_CloseHandle
movaps xmm6, xmmword [rbp + 0x5f0]
add rsp, 0x688
pop rbx
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
pop rbp
ret
mov rdi, qword [rbp + 0x4e0]
cmp rdi, 5
mov qword [rbp + 0x5e0], r14
jb case.0x1401408c2.68
lea rax, [r15 + rdi*2]
mov rcx, rax
add rcx, 0xfffffffffffffff6
je case.0x1401408c2.68
cmp word [rcx], 0x2e
jne case.0x1401408c2.68
cmp word [rax - 2], 0
je 0x1401408a4
mov rax, qword [rbp + 0x5e8]
mov rsi, qword [rax + 0x28]
mov rdi, qword [rax + 0x30]
movzx ebx, byte [rax + 0xc5]
mov qword [rbp + 0x540], 0
mov qword [rbp + 0x548], 2
mov qword [rbp + 0x550], 0
lea rcx, [rbp + 0x540]
call fcn.140109640
mov rax, qword [rbp + 0x548]
mov word [rax], 0x22
mov qword [rbp + 0x550], 1
mov qword [rbp - 0x30], r13
mov rax, qword [rbp + 0x5b8]
mov qword [rbp - 0x28], rax
mov word [rbp - 0x20], 0
lea rcx, [rbp + 0x540]
lea rdx, [rbp - 0x30]
call fcn.140112750
mov r14, qword [rbp + 0x550]
cmp r14, qword [rbp + 0x540]
jne 0x14013fef0
lea rcx, [rbp + 0x540]
call fcn.140109640
mov rax, qword [rbp + 0x548]
mov word [rax + r14*2], 0x22
inc r14
mov qword [rbp + 0x550], r14
shl rdi, 3
lea r14, [rdi + rdi*4]
lea rdi, [rbp + 0x540]
nop word [rax + rax]
test r14, r14
je 0x14013ff99
mov r13, qword [rbp + 0x550]
cmp r13, qword [rbp + 0x540]
jne 0x14013ff3d
mov rcx, rdi
call fcn.140109640
mov rax, qword [rbp + 0x548]
mov word [rax + r13*2], 0x20
inc r13
mov qword [rbp + 0x550], r13
mov rcx, rdi
mov rdx, rsi
mov r8d, ebx
call fcn.140135a60
add rsi, 0x28
add r14, 0xffffffffffffffd8
test rax, rax
je 0x14013ff20
mov rdx, qword [rbp + 0x540]
test rdx, rdx
je 0x14013ffb6
mov rcx, qword [rbp + 0x548]
add rdx, rdx
mov r8d, 2
mov rsi, rax
call fcn.14000d900
mov rax, rsi
jmp 0x14013ffb6
mov rcx, qword [rbp + 0x540]
mov rax, qword [rbp + 0x548]
movabs rdx, 0x8000000000000000
cmp rcx, rdx
jne 0x14013fff8
mov r14, qword [rbp + 0x5e0]
mov rcx, qword [rbp + 0x5b0]
mov qword [rcx], rax
mov qword [rcx + 0x10], 2
xor esi, esi
test r12, r12
je 0x14013ffea
add r12, r12
mov r8d, 2
mov rcx, r15
mov rdx, r12
call fcn.14000d900
test sil, sil
je 0x14013fd95
jmp 0x14013fdf9
mov rsi, qword [rbp + 0x550]
mov dl, 1
mov dword [rbp + 0x4a4], edx
mov dword [rbp + 0x5c8], 0
mov qword [rbp + 0x5d8], r12
mov qword [rbp + 0x5b8], r15
mov qword [rbp + 0x4d0], rcx
mov qword [rbp + 0x4d8], rax
mov qword [rbp + 0x4e0], rsi
cmp rsi, rcx
jne 0x14014004c
lea rcx, [rbp + 0x4d0]
call fcn.140109640
mov rax, qword [rbp + 0x4d8]
mov word [rax + rsi*2], 0
inc rsi
mov qword [rbp + 0x4e0], rsi
mov rcx, qword [rbp + 0x5e8]
cmp byte [rcx + 0xc4], 0
mov eax, 0x400
mov edi, 0x608
cmove edi, eax
or edi, dword [rcx + 0xc0]
cmp qword [rbp + 0x3d8], 0
je 0x1401400e0
mov dword [rbp + 0x438], edi
mov r14, qword [rbp + 0x3f0]
mov qword [rbp + 0x4c0], r14
movups xmm0, xmmword [rbp + 0x3e0]
movaps xmmword [rbp + 0x4b0], xmm0
mov qword [rbp + 0x4f0], 0
mov qword [rbp + 0x4f8], 2
mov qword [rbp + 0x500], 0
test r14, r14
je 0x14014043c
mov r13d, 2
xor edi, edi
jmp 0x140140468
mov eax, 2
mov qword [rbp + 0x5d0], rax
xor r13d, r13d
xor r14d, r14d
mov rcx, qword [rbp + 0x5e8]
movabs rax, 0x8000000000000000
cmp qword [rcx + 0x38], rax
jne 0x140140d92
mov qword [rbp + 0x3f8], r13
mov eax, 2
mov qword [rbp + 0x538], rax
xor r13d, r13d
xor eax, eax
mov qword [rbp + 0x5c0], rax
xorps xmm0, xmm0
movaps xmmword [rbp + 0x4b0], xmm0
mov qword [rbp + 0x4c0], 0
mov cl, 1
xor eax, eax
lock cmpxchg byte [0x14048e150], cl
jne 0x140140f52
mov rax, qword [0x14048e120]
movabs rcx, 0x8000000000000000
dec rcx
mov qword [rbp + 0x430], rcx
test rax, rcx
je 0x140140b79
call fcn.140134140
mov esi, edi
xor al, 1
jmp 0x140140b7d
call sub.kernel32.dll_GetLastError
shl rax, 0x20
or rax, 2
mov qword [rbp + 0x4b8], rax
movabs rax, 0x8000000000000000
inc rax
mov qword [rbp + 0x4b0], rax
mov rdx, qword [rbp + 0x4f0]
test rdx, rdx
je 0x1401401ce
mov rcx, qword [rbp + 0x4f8]
add rdx, rdx
mov r8d, 2
call fcn.14000d900
mov r14, qword [rbp + 0x5e0]
lea rcx, [rbp + 0x4b8]
call fcn.1400ff320
mov qword [rbp + 0x4f0], 0
mov qword [rbp + 0x4f8], 2
mov qword [rbp + 0x500], 0
mov r8d, 0x200
mov eax, 2
mov qword [rbp + 0x5c8], rax
xor r13d, r13d
xor r14d, r14d
xor edi, edi
cmp r8, 0x201
jb 0x14014023f
jmp 0x140140250
jae 0x14014030a
cmp r8, 0x201
jae 0x140140250
mov ebx, 0x200
lea r15, [rbp - 0x30]
mov r12, r8
jmp 0x1401402a7
sub r8, rdi
sub r14, rdi
cmp r14, r8
jae 0x14014027f
lea rcx, [rbp + 0x4f0]
mov rdx, rdi
call fcn.140108e80
mov r13, qword [rbp + 0x4f0]
mov rax, qword [rbp + 0x4f8]
mov qword [rbp + 0x5c8], rax
mov eax, 0xffffffff
cmp r13, rax
mov edi, 0xffffffff
cmovb rdi, r13
mov qword [rbp + 0x500], rdi
mov r14, r13
mov rbx, rdi
mov r15, qword [rbp + 0x5c8]
mov r12, rdi
xor ecx, ecx
call sub.kernel32.dll_SetLastError
mov rcx, r15
mov edx, r12d
call sub.kernel32.dll_GetWindowsDirectoryW
mov esi, eax
test eax, eax
jne 0x1401402cc
call sub.kernel32.dll_GetLastError
test eax, eax
jne 0x140140948
mov r8d, esi
cmp r12, r8
jne 0x140140230
call sub.kernel32.dll_GetLastError
cmp eax, 0x7a
jne 0x140141521
add r12, r12
mov eax, 0xffffffff
cmp r12, rax
cmovae r12, rax
mov r8, r12
cmp r8, 0x201
jae 0x140140250
jmp 0x14014023f
cmp rbx, r8
jb 0x1401415eb
lea rcx, [rbp + 0x540]
mov rdx, r15
mov r14, qword [rbp + 0x5e0]
call fcn.140129d40
mov r13, qword [rbp + 0x5c0]
mov r8, qword [rbp + 0x5d0]
lea rcx, [rbp + 0x540]
mov rdx, r13
call fcn.14012bcd0
cmp byte [rbp + 0x5d8], 0
jne 0x140140368
lea rdx, str.exe.NULexit_code:
lea rcx, [rbp + 0x540]
mov r8d, 3
call fcn.14012c9a0
mov rsi, qword [rbp + 0x548]
mov r8, qword [rbp + 0x550]
lea rcx, [rbp + 0x440]
mov rdx, rsi
call fcn.140141cd0
mov rdx, qword [rbp + 0x540]
test rdx, rdx
je 0x14014039f
mov r8d, 1
mov rcx, rsi
call fcn.14000d900
movups xmm0, xmmword [rbp + 0x440]
movaps xmmword [rbp + 0x4b0], xmm0
mov rax, qword [rbp + 0x450]
mov qword [rbp + 0x4c0], rax
mov rdx, qword [rbp + 0x4f0]
test rdx, rdx
je 0x1401403dc
mov rcx, qword [rbp + 0x4f8]
add rdx, rdx
mov r8d, 2
call fcn.14000d900
mov r12, qword [rbp + 0x4b0]
movabs rcx, 0x8000000000000000
lea rax, [rcx + 2]
cmp r12, rax
jge 0x140140429
cmp r12, rcx
je 0x1401409ab
movabs rax, 0x8000000000000001
cmp r12, rax
je 0x14014099f
mov rcx, qword [rbp + 0x4b8]
mov r8d, 2
call fcn.14000d900
jmp 0x1401409ab
mov r15, qword [rbp + 0x4b8]
mov rdi, qword [rbp + 0x4c0]
jmp 0x14013fe2a
mov bl, 1
lea rcx, [rbp + 0x4f0]
call fcn.140109640
mov r13, qword [rbp + 0x4f8]
mov word [r13], 0
mov qword [rbp + 0x500], 1
mov edi, 1
mov rax, qword [rbp + 0x4b0]
mov rcx, qword [rbp + 0x4b8]
xor edx, edx
test rax, rax
setne dl
cmove r14, rax
mov qword [rbp - 0x30], rdx
mov qword [rbp - 0x28], 0
mov qword [rbp - 0x20], rax
mov qword [rbp - 0x18], rcx
mov qword [rbp - 0x10], rdx
mov qword [rbp - 8], 0
mov qword [rbp], rax
mov qword [rbp + 8], rcx
mov qword [rbp + 0x10], r14
lea r14, [rbp + 0x540]
lea rdx, [rbp - 0x30]
mov rcx, r14
call fcn.1401054c0
mov rax, qword [rbp + 0x540]
test rax, rax
je 0x140140d18
mov r9, qword [rbp + 0x550]
imul r8, r9, 0x38
mov rdx, qword [rax + r8 + 0x168]
movabs rcx, 0x8000000000000000
cmp rdx, rcx
je 0x140140d18
mov qword [rbp + 0x3f8], r13
mov rcx, qword [rax + r8 + 0x170]
mov r14, qword [rax + r8 + 0x188]
mov r10, qword [rax + r8 + 0x190]
mov qword [rbp + 0x5c0], r10
mov r10, qword [rax + r8 + 0x198]
mov qword [rbp + 0x430], r10
shl r9, 5
mov r10, qword [rax + r9]
mov qword [rbp + 0x5d0], r10
mov r10, qword [rax + r9 + 8]
mov qword [rbp + 0x538], r10
mov r13, qword [rax + r9 + 0x10]
mov rax, qword [rax + r8 + 0x178]
add rax, rcx
xor r11d, r11d
mov r8, rcx
jmp 0x14014056d
xor r11d, r11d
test r9w, r9w
je 0x14014084b
mov r9w, 1
test r11w, r11w
jne 0x140140560
cmp r8, rax
je 0x14014061c
movzx r11d, byte [r8]
test r11b, r11b
js 0x140140592
inc r8
mov r10d, r11d
jmp 0x140140611
mov r10d, r11d
and r10d, 0x1f
movzx ebx, byte [r8 + 1]
and ebx, 0x3f
cmp r11b, 0xdf
jbe 0x1401405da
movzx esi, byte [r8 + 2]
shl ebx, 6
and esi, 0x3f
or esi, ebx
cmp r11b, 0xf0
jb 0x1401405e7
movzx r11d, byte [r8 + 3]
add r8, 4
and r10d, 7
shl r10d, 0x12
shl esi, 6
and r11d, 0x3f
or r11d, esi
or r10d, r11d
jmp 0x1401405f2
add r8, 2
shl r10d, 6
or r10d, ebx
invalid
jmp 0x140140611
invalid
add r8, 3
shl r10d, 0xc
or r10d, esi
cmp r10d, 0xffff
jbe 0x140140611
and r10d, 0x3ff
or r10d, 0xdc00
fadd qword [rax]
add byte [rbp - 0x77], al
shr ecx, cl
push rdx
invalid
invalid
invalid
fadd qword [rax]
add byte [rbp - 0x77], al
shr ecx, cl
push rdx
invalid
xor r11d, r11d
mov r9d, r10d
jmp 0x140140563
test rdx, rdx
je 0x14014062c
mov r8d, 1
call fcn.14000d900
mov rax, qword [rbp + 0x4f0]
sub rax, rdi
mov r8, qword [rbp + 0x430]
cmp rax, r8
mov qword [rbp + 0x400], r13
jae 0x14014066f
lea rcx, [rbp + 0x4f0]
mov rdx, rdi
call fcn.140108e80
mov rax, qword [rbp + 0x4f8]
mov rdi, qword [rbp + 0x500]
mov r8, qword [rbp + 0x430]
jmp 0x140140676
mov rax, qword [rbp + 0x3f8]
mov r13, r8
add r8, r8
mov rsi, rax
lea rcx, [rax + rdi*2]
mov rbx, qword [rbp + 0x5c0]
mov rdx, rbx
call sub.msvcrt.dll_memcpy
add rdi, r13
mov qword [rbp + 0x500], rdi
add byte [0xc561069e], al
invalid
je 0x1401406b5
add byte [0xc561069e], al
div byte [rsp + rdx + 0x4d]
add esi, esi
add r14, r14
mov r8d, 2
mov rcx, rbx
mov rdx, r14
call fcn.14000d900
cmp rdi, qword [rbp + 0x4f0]
add byte [rax], al
mov rbx, qword [rbp + 0x538]
lea r14, [rbp + 0x540]
mov r13, qword [rbp + 0x400]
jne 0x1401406e6
lea rcx, [rbp + 0x4f0]
call fcn.140109640
mov rsi, qword [rbp + 0x4f8]
mov word [rsi + rdi*2], 0x3d
inc rdi
mov qword [rbp + 0x500], rdi
add r13, rbx
xor r8d, r8d
mov rax, rbx
mov rsi, qword [rbp + 0x5d0]
jmp 0x140140714
xor r8d, r8d
test cx, cx
je 0x140140b19
mov cx, 1
test r8w, r8w
jne 0x140140708
cmp rax, r13
je 0x1401407be
movzx r8d, byte [rax]
test r8b, r8b
js 0x140140738
inc rax
mov edx, r8d
jmp 0x1401407b4
mov edx, r8d
and edx, 0x1f
movzx r10d, byte [rax + 1]
and r10d, 0x3f
cmp r8b, 0xdf
jbe 0x140140782
xor eax, 0x48b60f44
add al, byte [rcx - 0x3f]
loop case.0x14013d1e6.90
movzx r9d, byte [rax + 2]
shl r10d, 6
and r9d, 0x3f
or r9d, r10d
rol dword [rcx - 0x80], 1
clc
invalid
jb 0x14014078e
rol dword [rcx - 0x80], 1
clc
invalid
movzx r8d, byte [rax + 3]
add rax, 4
and edx, 7
shl edx, 0x12
shl r9d, 6
and r8d, 0x3f
or r8d, r9d
or edx, r8d
or edx, eax
invalid
or edx, eax
jmp 0x140140798
add rax, 2
shl edx, 6
or edx, r10d
jmp 0x1401407b4
add rax, 3
shl edx, 0xc
or edx, r9d
cmp edx, 0xffff
jbe 0x1401407b4
and edx, 0x3ff
or edx, 0xdc00
mov r8d, edx
jmp 0x14014070b
xor r8d, r8d
mov ecx, edx
jmp 0x14014070b
movabs rax, 0x8000000000000000
cmp rsi, rax
je 0x140141421
mov qword [rbp + 0x440], rbx
mov qword [rbp + 0x448], r13
mov word [rbp + 0x450], 0
lea rcx, [rbp + 0x4f0]
lea rdx, [rbp + 0x440]
call fcn.140112750
test rsi, rsi
je 0x140140811
mov r8d, 1
mov rcx, rbx
mov rdx, rsi
call fcn.14000d900
dec dword [rax - 0x75]
mov ebp, 0x500
mov rdi, qword [rbp + 0x500]
cmp rdi, qword [rbp + 0x4f0]
jne 0x14014082d
lea rcx, [rbp + 0x4f0]
lea ecx, [rbp + 0x4f0]
call fcn.140109640
mov r13, qword [rbp + 0x4f8]
add byte [rax], al
mov word [r13 + rdi*2], 0
inc rdi
mov qword [rbp + 0x500], rdi
jmp 0x1401404b5
test rdx, rdx
je 0x14014085b
mov r8d, 1
call fcn.14000d900
mov rdx, qword [rbp + 0x5d0]
test rdx, rdx
mov rsi, qword [rbp + 0x5c0]
je 0x140140880
mov r8d, 1
mov rcx, qword [rbp + 0x538]
call fcn.14000d900
lea r13, str.nul_byte_found_in_provided_data
test r14, r14
je 0x140140b36
add r14, r14
mov r8d, 2
mov rcx, rsi
mov rdx, r14
jmp 0x140140b31
movzx ecx, word [rax - 8]
lea edx, [rcx - 0x42]
cmp edx, 0x21
ja case.0x1401408c2.68
lea r8, [0x14044e638]
movsxd rdx, dword [r8 + rdx*4]
add rdx, r8
jmp rdx
movzx edx, word [rax - 6]
or edx, 0x20
cmp edx, 0x61
jne 0x1401408dc
movzx edx, word [rax - 4]
or edx, 0x20
cmp edx, 0x74
je 0x140140906
cmp cx, 0x43
jne case.0x1401408c2.68
movzx ecx, word [rax - 6]
or ecx, 0x20
cmp ecx, 0x6d
jne case.0x1401408c2.68
movzx eax, word [rax - 4]
or eax, 0x20
cmp eax, 0x64
jne case.0x1401408c2.68
lea rcx, [rbp - 0x30]
call fcn.1401425d0
mov rcx, qword [rbp - 0x30]
mov rdx, qword [rbp - 0x28]
movabs rax, 0x8000000000000000
mov qword [rbp + 0x5d8], rcx
cmp rcx, rax
jne 0x140140c8c
mov rax, qword [rbp + 0x5b0]
mov qword [rax], rdx
mov qword [rax + 0x10], 2
jmp 0x14013ffcf
call sub.kernel32.dll_GetLastError
shl rax, 0x20
or rax, 2
mov qword [rbp + 0x4b8], rax
movabs rax, 0x8000000000000000
inc rax
mov qword [rbp + 0x4b0], rax
mov rdx, qword [rbp + 0x4f0]
test rdx, rdx
je 0x140140991
mov rcx, qword [rbp + 0x4f8]
add rdx, rdx
mov r8d, 2
call fcn.14000d900
mov r14, qword [rbp + 0x5e0]
mov r13, qword [rbp + 0x5c0]
lea rcx, [rbp + 0x4b8]
call fcn.1400ff320
lea rdx, str.PATHlibrary_std_src_sys_commonprocess.rs
lea rcx, [rbp + 0x440]
mov r8d, 4
call fcn.14011ced0
mov rsi, qword [rbp + 0x440]
movabs r12, 0x8000000000000000
cmp rsi, r12
je 0x140140b0d
mov rbx, qword [rbp + 0x448]
mov rax, qword [rbp + 0x450]
add rax, rbx
mov qword [rbp + 0x540], rbx
mov qword [rbp + 0x548], rax
mov word [rbp + 0x550], 0
mov byte [rbp + 0x558], 1
lea rdi, [rbp - 0x30]
lea r15, [rbp + 0x540]
mov rcx, rdi
mov rdx, r15
call fcn.14013c3f0
jmp 0x140140a30
mov rcx, rdi
mov rdx, r15
call fcn.14013c3f0
mov rdx, qword [rbp - 0x30]
cmp rdx, r12
je 0x140140af7
mov rcx, qword [rbp - 0x28]
mov rax, qword [rbp - 0x20]
test rax, rax
jne 0x140140a5c
test rdx, rdx
je 0x140140a25
mov r8d, 1
call fcn.14000d900
jmp 0x140140a25
mov r8, qword [rbp - 0x18]
mov qword [rbp - 0x30], rdx
mov qword [rbp - 0x28], rcx
mov qword [rbp - 0x20], rax
mov qword [rbp - 0x18], r8
mov rcx, rdi
mov rdx, r13
mov r8, qword [rbp + 0x5d0]
call fcn.14012bcd0
cmp byte [rbp + 0x5d8], 0
jne 0x140140aa0
mov r8d, 3
mov rcx, rdi
lea rdx, str.exe.NULexit_code:
call fcn.14012c9a0
mov r12, qword [rbp - 0x28]
mov r8, qword [rbp - 0x20]
lea rcx, [rbp + 0x4f0]
mov rdx, r12
call fcn.140141cd0
mov rdx, qword [rbp - 0x30]
test rdx, rdx
je 0x140140ace
mov r8d, 1
mov rcx, r12
call fcn.14000d900
mov r12, qword [rbp + 0x4f0]
movabs rax, 0x8000000000000000
cmp r12, rax
jne 0x140141089
movabs r12, 0x8000000000000000
jmp 0x140140a18
test rsi, rsi
je 0x140140b0d
mov r8d, 1
mov rcx, rbx
mov rdx, rsi
call fcn.14000d900
lea r15, [0x1404539a0]
jmp 0x14013fd83
lea r13, str.nul_byte_found_in_provided_data
test rsi, rsi
je 0x140140b36
mov r8d, 1
mov rcx, rbx
mov rdx, rsi
call fcn.14000d900
xor ebx, ebx
lea rcx, [rbp - 0x30]
call fcn.1400fe380
mov rdx, qword [rbp + 0x4f0]
test rdx, rdx
je 0x140140b62
mov rcx, qword [rbp + 0x4f8]
add rdx, rdx
mov r8d, 2
call fcn.14000d900
mov rax, qword [rbp + 0x5b0]
mov qword [rax], r13
mov qword [rax + 0x10], 2
jmp 0x1401413c3
mov esi, edi
xor eax, eax
lea rcx, [0x14048e150]
movzx edx, byte [0x14048e151]
xor r8d, r8d
test dl, dl
setne r8b
mov qword [rbp + 0x4f8], rcx
mov byte [rbp + 0x500], al
mov qword [rbp + 0x4f0], r8
mov qword [rbp + 0x440], 0
mov qword [rbp + 0x450], 0
mov qword [rbp + 0x460], 0
cmp byte [rbp + 0x4a8], 0
lea rax, [rbp + 0x420]
mov rdx, qword [rbp + 0x5e0]
cmovne rax, rdx
mov dword [rbp + 0x420], 2
mov r8, qword [rbp + 0x5e8]
lea rcx, [r8 + 0x58]
cmp dword [r8 + 0x58], 6
cmove rcx, rax
cmp dword [r8 + 0x68], 6
lea rbx, [r8 + 0x68]
cmove rbx, rdx
lea rdi, [r8 + 0x78]
cmp dword [r8 + 0x78], 6
cmove rdi, rdx
lea r8, [rbp + 0x440]
mov edx, 0xfffffff6
call fcn.140141da0
mov qword [rbp + 0x4a8], rdx
test rax, rax
je 0x140140c55
mov rax, qword [rbp + 0x5b0]
mov rcx, qword [rbp + 0x4a8]
mov qword [rax], rcx
mov qword [rax + 0x10], 2
jmp 0x1401412df
lea r8, [rbp + 0x450]
mov rcx, rbx
mov edx, 0xfffffff5
call fcn.140141da0
mov rbx, rdx
test rax, rax
je 0x140140f07
mov rax, qword [rbp + 0x5b0]
mov qword [rax], rbx
mov qword [rax + 0x10], 2
jmp 0x1401412be
mov qword [rbp + 0x5b8], rdx
mov rcx, qword [rbp + 0x5e8]
mov r9, qword [rcx + 0x28]
mov rax, qword [rcx + 0x30]
movzx ecx, byte [rcx + 0xc5]
mov byte [rsp + 0x28], cl
mov qword [rsp + 0x20], rax
lea rcx, [rbp - 0x30]
mov rdx, r15
mov r8, rdi
call fcn.140135f00
mov rcx, qword [rbp - 0x30]
mov rax, qword [rbp - 0x28]
movabs rdx, 0x8000000000000000
cmp rcx, rdx
jne 0x140140f37
mov rcx, qword [rbp + 0x5b0]
mov qword [rcx], rax
mov qword [rcx + 0x10], 2
mov rdx, qword [rbp + 0x5d8]
test rdx, rdx
je 0x14013ffcf
add rdx, rdx
mov r8d, 2
mov rcx, qword [rbp + 0x5b8]
call fcn.14000d900
jmp 0x14013ffcf
xor ebx, ebx
lea rcx, [rbp - 0x30]
call fcn.1400fe380
cmp rdi, qword [rbp + 0x4f0]
jne 0x140140d41
xor ebx, ebx
lea rcx, [rbp + 0x4f0]
call fcn.140109640
mov r13, qword [rbp + 0x4f8]
mov word [r13 + rdi*2], 0
mov r14, qword [rbp + 0x4f0]
movabs rax, 0x8000000000000000
cmp r14, rax
je 0x140140b62
mov rax, qword [rbp + 0x4f8]
mov qword [rbp + 0x5d0], rax
mov edi, dword [rbp + 0x438]
mov rcx, qword [rbp + 0x5e8]
movabs rax, 0x8000000000000000
cmp qword [rcx + 0x38], rax
je 0x14014010d
mov rax, qword [rcx + 0x40]
mov rcx, qword [rcx + 0x48]
add rcx, rax
xor r10d, r10d
mov rdx, rax
jmp 0x140140db2
xor r10d, r10d
test r8w, r8w
je 0x140140e66
mov r8w, 1
test r10w, r10w
jne 0x140140da5
cmp rdx, rcx
je 0x140140e84
movzx r10d, byte [rdx]
test r10b, r10b
js 0x140140dda
inc rdx
mov r9d, r10d
jmp 0x140140e5b
mov r9d, r10d
and r9d, 0x1f
movzx esi, byte [rdx + 1]
and esi, 0x3f
cmp r10b, 0xdf
jbe 0x140140e24
movzx r11d, byte [rdx + 2]
shl esi, 6
and r11d, 0x3f
or r11d, esi
cmp r10b, 0xf0
jb 0x140140e31
movzx r10d, byte [rdx + 3]
add rdx, 4
and r9d, 7
shl r9d, 0x12
shl r11d, 6
and r10d, 0x3f
or r10d, r11d
or r9d, r10d
jmp 0x140140e3c
add rdx, 2
shl r9d, 6
or r9d, esi
jmp 0x140140e5b
add rdx, 3
shl r9d, 0xc
or r9d, r11d
cmp r9d, 0xffff
jbe 0x140140e5b
and r9d, 0x3ff
or r9d, 0xdc00
mov r10d, r9d
jmp 0x140140da8
xor r10d, r10d
mov r8d, r9d
jmp 0x140140da8
lea r13, str.nul_byte_found_in_provided_data
mov rax, qword [rbp + 0x5b0]
mov qword [rax], r13
mov qword [rax + 0x10], 2
jmp 0x1401413a6
mov qword [rbp - 0x30], rax
mov qword [rbp - 0x28], rcx
mov word [rbp - 0x20], 0
lea rcx, [rbp + 0x540]
lea rdx, [rbp - 0x30]
call fcn.140112ba0
mov rcx, qword [rbp + 0x540]
mov rsi, qword [rbp + 0x550]
cmp rsi, rcx
jne 0x140140ec8
lea rcx, [rbp + 0x540]
call fcn.140109640
mov rcx, qword [rbp + 0x540]
mov qword [rbp + 0x3f8], r13
mov r13, qword [rbp + 0x548]
mov word [r13 + rsi*2], 0
mov qword [rbp + 0x538], r13
movabs rax, 0x8000000000000000
mov rdx, rcx
mov qword [rbp + 0x5c0], rcx
cmp rcx, rax
jne 0x14014012c
jmp 0x140140e6d
lea r8, [rbp + 0x460]
mov rcx, rdi
mov edx, 0xfffffff4
call fcn.140141da0
test rax, rax
je 0x140140f63
mov rax, qword [rbp + 0x5b0]
mov qword [rax], rdx
mov qword [rax + 0x10], 2
jmp 0x1401412b6
mov rsi, qword [rbp - 0x20]
mov dl, 1
mov dword [rbp + 0x5c8], edx
mov dword [rbp + 0x4a4], 0
jmp 0x14014001f
lea rcx, [0x14048e150]
call fcn.1401474b0
jmp 0x140140153
xorps xmm0, xmm0
movups xmmword [rbp + 0x574], xmm0
movups xmmword [rbp + 0x568], xmm0
movups xmmword [rbp + 0x558], xmm0
movups xmmword [rbp + 0x548], xmm0
movups xmmword [rbp + 0x588], xmm0
movups xmmword [rbp + 0x598], xmm0
test rdx, rdx
jne 0x140140fa4
test rbx, rbx
jne 0x140140fa4
cmp qword [rbp + 0x4a8], 0
je 0x140140fca
mov dword [rbp + 0x57c], 0x100
mov rax, qword [rbp + 0x4a8]
mov qword [rbp + 0x590], rax
mov qword [rbp + 0x598], rbx
mov qword [rbp + 0x5a0], rdx
mov rax, qword [rbp + 0x5e8]
mov rdi, qword [rax + 0xb8]
test rdi, rdi
mov qword [rbp + 0x438], rdx
je 0x1401410b6
add rax, 0xa8
mov dword [rbp + 0x540], 0x70
lea rcx, [rbp + 0x408]
mov rdx, rax
call fcn.140142a80
mov rcx, qword [rbp + 0x408]
test rcx, rcx
je 0x140141291
or esi, 0x80000
mov rax, qword [rbp + 0x410]
mov qword [rbp + 0x400], rax
movups xmm0, xmmword [rbp + 0x540]
movups xmm1, xmmword [rbp + 0x550]
movups xmm2, xmmword [rbp + 0x560]
movups xmm3, xmmword [rbp + 0x570]
movaps xmmword [rbp - 0x30], xmm0
movaps xmmword [rbp - 0x20], xmm1
movaps xmmword [rbp - 0x10], xmm2
movaps xmmword [rbp], xmm3
movups xmm0, xmmword [rbp + 0x580]
movaps xmmword [rbp + 0x10], xmm0
movups xmm0, xmmword [rbp + 0x590]
movaps xmmword [rbp + 0x20], xmm0
mov rax, qword [rbp + 0x5a0]
mov qword [rbp + 0x30], rax
mov qword [rbp + 0x5e8], rcx
mov qword [rbp + 0x38], rcx
lea rax, [rbp - 0x30]
jmp 0x1401410c7
mov r15, qword [rbp + 0x4f8]
mov rdi, qword [rbp + 0x500]
test rsi, rsi
je 0x14013fe2a
mov r8d, 1
mov rcx, rbx
mov rdx, rsi
call fcn.14000d900
jmp 0x14013fe2a
mov dword [rbp + 0x540], 0x68
lea rax, [rbp + 0x540]
mov rdx, qword [rbp + 0x4d8]
lea rcx, [rbp + 0x4b0]
mov qword [rsp + 0x48], rcx
mov qword [rsp + 0x40], rax
mov qword [rsp + 0x38], r13
mov rax, qword [rbp + 0x3f8]
mov qword [rsp + 0x30], rax
mov dword [rsp + 0x28], esi
mov dword [rsp + 0x20], 1
mov rcx, qword [rbp + 0x5b8]
xor r8d, r8d
xor r9d, r9d
call sub.kernel32.dll_CreateProcessW
test eax, eax
je 0x140141258
movups xmm0, xmmword [rbp + 0x440]
movups xmm1, xmmword [rbp + 0x450]
movups xmm2, xmmword [rbp + 0x460]
mov rax, qword [rbp + 0x5b0]
movups xmmword [rax + 0x30], xmm2
movups xmmword [rax + 0x20], xmm1
movups xmmword [rax + 0x10], xmm0
movaps xmm0, xmmword [rbp + 0x4b0]
movups xmmword [rax], xmm0
test rdi, rdi
je 0x140141160
mov rcx, qword [rbp + 0x5e8]
mov rdx, qword [rbp + 0x400]
call fcn.1401001e0
mov rcx, qword [rbp + 0x438]
call sub.kernel32.dll_CloseHandle
mov rcx, rbx
call sub.kernel32.dll_CloseHandle
mov rcx, qword [rbp + 0x4a8]
call sub.kernel32.dll_CloseHandle
cmp dword [rbp + 0x420], 4
jb 0x140141195
mov rcx, qword [rbp + 0x428]
call sub.kernel32.dll_CloseHandle
lea rcx, [rbp + 0x4f0]
call fcn.1400feb60
mov rdx, qword [rbp + 0x5c0]
test rdx, rdx
je 0x1401411c2
add rdx, rdx
mov r8d, 2
mov rcx, qword [rbp + 0x538]
call fcn.14000d900
test r14, r14
je 0x1401411df
add r14, r14
mov r8d, 2
mov rcx, qword [rbp + 0x5d0]
mov rdx, r14
call fcn.14000d900
mov rdx, qword [rbp + 0x4d0]
test rdx, rdx
je 0x140141200
mov rcx, qword [rbp + 0x4d8]
add rdx, rdx
mov r8d, 2
call fcn.14000d900
mov rdx, qword [rbp + 0x5d8]
test rdx, rdx
mov r14, qword [rbp + 0x5e0]
je 0x140141228
add rdx, rdx
mov r8d, 2
mov rcx, qword [rbp + 0x5b8]
call fcn.14000d900
test r12, r12
setne al
mov ecx, dword [rbp + 0x4a4]
xor cl, 1
test al, cl
je 0x14013fdf9
add r12, r12
mov r8d, 2
mov rcx, r15
mov rdx, r12
call fcn.14000d900
jmp 0x14013fdf9
call sub.kernel32.dll_GetLastError
shl rax, 0x20
or rax, 2
mov rcx, qword [rbp + 0x5b0]
mov qword [rcx], rax
mov qword [rcx + 0x10], 2
test rdi, rdi
je 0x1401412aa
mov rcx, qword [rbp + 0x5e8]
mov rdx, qword [rbp + 0x400]
call fcn.1401001e0
jmp 0x1401412aa
mov rax, qword [rbp + 0x410]
mov rcx, qword [rbp + 0x5b0]
mov qword [rcx], rax
mov qword [rcx + 0x10], 2
mov rcx, qword [rbp + 0x438]
call sub.kernel32.dll_CloseHandle
mov rcx, rbx
call sub.kernel32.dll_CloseHandle
mov rcx, qword [rbp + 0x4a8]
call sub.kernel32.dll_CloseHandle
cmp dword [rbp + 0x420], 4
jb 0x1401412df
mov rcx, qword [rbp + 0x428]
call sub.kernel32.dll_CloseHandle
cmp qword [rbp + 0x440], 0
je 0x1401412f5
mov rcx, qword [rbp + 0x448]
call sub.kernel32.dll_CloseHandle
cmp qword [rbp + 0x450], 0
je 0x14014130b
mov rcx, qword [rbp + 0x458]
call sub.kernel32.dll_CloseHandle
cmp qword [rbp + 0x460], 0
je 0x140141321
mov rcx, qword [rbp + 0x468]
call sub.kernel32.dll_CloseHandle
cmp qword [rbp + 0x4f0], 0
mov rsi, qword [rbp + 0x4f8]
movzx eax, byte [rbp + 0x500]
je 0x140141354
test al, al
jne 0x140141375
mov rax, qword [0x14048e120]
test qword [rbp + 0x430], rax
je 0x140141375
call fcn.140134140
jmp 0x14014136d
test al, al
jne 0x140141375
mov rax, qword [0x14048e120]
test qword [rbp + 0x430], rax
je 0x140141375
call fcn.140134140
test al, al
jne 0x140141375
mov byte [rsi + 1], 1
xor eax, eax
xchg byte [rsi], al
cmp al, 2
jne 0x140141385
mov rcx, rsi
call fcn.14014f778
mov rdx, qword [rbp + 0x5c0]
test rdx, rdx
je 0x1401413a6
add rdx, rdx
mov r8d, 2
mov rcx, qword [rbp + 0x538]
call fcn.14000d900
test r14, r14
je 0x1401413c3
add r14, r14
mov r8d, 2
mov rcx, qword [rbp + 0x5d0]
mov rdx, r14
call fcn.14000d900
mov rdx, qword [rbp + 0x4d0]
test rdx, rdx
je 0x1401413e4
mov rcx, qword [rbp + 0x4d8]
add rdx, rdx
mov r8d, 2
call fcn.14000d900
mov rdx, qword [rbp + 0x5d8]
test rdx, rdx
mov r14, qword [rbp + 0x5e0]
je 0x14014140c
add rdx, rdx
mov r8d, 2
mov rcx, qword [rbp + 0x5b8]
call fcn.14000d900
mov sil, 1
cmp byte [rbp + 0x5c8], 0
je 0x14013fdf9
jmp 0x14013ffd1
mov r13, rbx
jmp 0x140140b36
lea rcx, str.internal_error:_entered_unreachable_code
lea r8, str.library_std_src_syspalwindowsmod.rsstrings_passed_to_WinAPI_cannot_contain_NULs
mov edx, 0x28
call fcn.14017afe0
jmp 0x140141600
lea rcx, str.internal_error:_entered_unreachable_code
lea r8, str.library_std_src_syspalwindowsmod.rsstrings_passed_to_WinAPI_cannot_contain_NULs
mov edx, 0x28
call fcn.14017afe0
jmp 0x140141600
lea rax, str.library_std_src_syspalwindowsmod.rsstrings_passed_to_WinAPI_cannot_contain_NULs
mov rcx, r8
mov rdx, rbx
mov r8, rax
call fcn.140181240
jmp 0x140141600
lea rax, str.library_std_src_syspalwindowsmod.rsstrings_passed_to_WinAPI_cannot_contain_NULs
mov rcx, r8
mov rdx, rbx
mov r8, rax
call fcn.140181240
ud2