Function at 0x100a1400
Capabilities:
Create process on windows
Encode data using base64
Get common file path
Query environment variable

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x6b8
movdqa xmmword [rsp + 0x6a0], xmm6
mov byte [rsp + 0x1a8], r9b
mov r14, rdx
mov qword [rsp + 0xe8], rcx
mov qword [rsp + 0x250], r8
mov rbp, qword [rdx + 0x48]
movzx eax, byte [rdx + 0x50]
test al, al
sete cl
test rbp, rbp
sete dl
and dl, cl
mov qword [rsp + 0xf8], r14
je 0x100a1469
mov qword [rsp + 0x218], 0
xor eax, eax
jmp 0x100a1d96
mov byte [rsp + 0xe0], dl
pxor xmm0, xmm0
movdqu xmmword [rsp + 0x108], xmm0
test al, al
jne 0x100a1633
mov qword [rsp + 0x78], rbp
call sub.kernel32.dll_GetEnvironmentStringsW
test rax, rax
je 0x100a46ff
mov qword [rsp + 0x190], rax
mov qword [rsp + 0x198], rax
lea r13, [rsp + 0x2b0]
lea r14, [rsp + 0x1d0]
lea r15, [rsp + 0x290]
lea rdi, [rsp + 0x190]
lea rbp, [rsp + 0x140]
lea r12, [rsp + 0x100]
lea rsi, [rsp + 0x1b0]
lea rbx, [rsp + 0x80]
nop dword [rax + rax]
mov rcx, r15
mov rdx, rdi
call fcn.1009dce0
cmp byte [rsp + 0x2a8], 2
je 0x100a1619
movups xmm0, xmmword [r13]
movups xmm1, xmmword [r13 + 0x10]
movaps xmmword [rsp + 0x130], xmm1
movaps xmmword [rsp + 0x120], xmm0
movdqu xmm0, xmmword [rsp + 0x290]
movups xmm1, xmmword [rsp + 0x2a0]
movaps xmmword [rsp + 0x90], xmm1
movdqa xmmword [rsp + 0x80], xmm0
mov rax, qword [rsp + 0x80]
mov rcx, qword [rsp + 0x90]
add rcx, rax
mov qword [rsp + 0x140], rax
mov qword [rsp + 0x148], rcx
mov word [rsp + 0x150], 0
lea rcx, [rsp + 0x58]
mov rdx, rbp
call fcn.1006c8e0
movups xmm0, xmmword [rsp + 0x290]
movups xmm1, xmmword [rsp + 0x2a0]
movaps xmmword [rsp + 0x1b0], xmm0
movaps xmmword [rsp + 0x1c0], xmm1
mov rax, qword [rsp + 0x68]
mov qword [r14 + 0x10], rax
movups xmm0, xmmword [rsp + 0x58]
movups xmmword [r14], xmm0
movdqu xmm0, xmmword [r13]
movups xmm1, xmmword [r13 + 0x10]
movaps xmmword [rsp + 0x90], xmm1
movdqa xmmword [rsp + 0x80], xmm0
mov rcx, rbp
mov rdx, r12
mov r8, rsi
mov r9, rbx
call fcn.100617a0
cmp byte [rsp + 0x158], 2
je 0x100a14f0
mov rdx, qword [rsp + 0x148]
test rdx, rdx
je 0x100a14f0
mov rcx, qword [rsp + 0x140]
mov r8, rdx
not r8
shr r8, 0x3f
call fcn.100028e0
jmp 0x100a14f0
mov rcx, qword [rsp + 0x190]
call sub.kernel32.dll_FreeEnvironmentStringsW
mov r14, qword [rsp + 0xf8]
mov rbp, qword [rsp + 0x78]
movabs r12, 0x4000000000000000
mov rax, qword [r14 + 0x38]
mov rcx, qword [r14 + 0x40]
xor edx, edx
test rcx, rcx
sete dl
cmove rbp, rcx
add rdx, rdx
mov qword [rsp + 0x140], rdx
mov qword [rsp + 0x148], rax
mov qword [rsp + 0x150], rcx
mov qword [rsp + 0x160], rdx
mov qword [rsp + 0x168], rax
mov qword [rsp + 0x170], rcx
mov qword [rsp + 0x180], rbp
lea r14, [rsp + 0x140]
dec r12
nop word [rax + rax]
mov rcx, r14
call fcn.10058660
mov rbp, rax
test rax, rax
je 0x100a1d53
mov rbx, rdx
cmp byte [rdx + 0x18], 2
jne 0x100a18f0
mov r13, qword [rsp + 0x108]
test r13, r13
je 0x100a16a0
mov r9, qword [rbp + 0x20]
mov rax, qword [rbp + 0x30]
mov r15, qword [rsp + 0x100]
mov qword [rsp + 0x20], rax
lea rcx, [rsp + 0x120]
mov rdx, r15
mov r8, r13
call fcn.100665f0
cmp qword [rsp + 0x120], 0
jne 0x100a16a0
mov rdx, qword [rsp + 0x128]
mov rax, qword [rsp + 0x130]
mov rcx, qword [rsp + 0x138]
mov byte [rsp + 0x58], 0
test rdx, rdx
je 0x100a1ab7
mov rcx, qword [rax + rcx*8 + 0x3d8]
mov rax, rdx
dec rax
je 0x100a17ee
add rdx, 0xfffffffffffffffe
mov rbp, rax
and rbp, 7
je 0x100a176a
xor ebx, ebx
nop word [rax + rax]
movzx edi, word [rcx + 0x3d2]
mov rcx, qword [rcx + rdi*8 + 0x3d8]
inc rbx
cmp rbp, rbx
jne 0x100a1750
sub rax, rbx
cmp rdx, 7
jb 0x100a17ee
movzx edx, word [rcx + 0x3d2]
mov rcx, qword [rcx + rdx*8 + 0x3d8]
movzx edx, word [rcx + 0x3d2]
mov rcx, qword [rcx + rdx*8 + 0x3d8]
movzx edx, word [rcx + 0x3d2]
mov rcx, qword [rcx + rdx*8 + 0x3d8]
movzx edx, word [rcx + 0x3d2]
mov rcx, qword [rcx + rdx*8 + 0x3d8]
movzx edx, word [rcx + 0x3d2]
mov rcx, qword [rcx + rdx*8 + 0x3d8]
movzx edx, word [rcx + 0x3d2]
mov rcx, qword [rcx + rdx*8 + 0x3d8]
movzx edx, word [rcx + 0x3d2]
mov rcx, qword [rcx + rdx*8 + 0x3d8]
movzx edx, word [rcx + 0x3d2]
mov rcx, qword [rcx + rdx*8 + 0x3d8]
add rax, 0xfffffffffffffff8
jne 0x100a1770
movzx eax, word [rcx + 0x3d2]
dec rax
mov qword [rsp + 0x1b0], 0
mov qword [rsp + 0x1b8], rcx
mov qword [rsp + 0x1c0], rax
lea rcx, [rsp + 0x290]
lea rdx, [rsp + 0x1b0]
lea r8, [rsp + 0x58]
call fcn.10065e50
mov rax, qword [rsp + 0x2e0]
mov qword [rsp + 0xd0], rax
movups xmm0, xmmword [rsp + 0x2d0]
movaps xmmword [rsp + 0xc0], xmm0
movdqu xmm0, xmmword [rsp + 0x290]
movups xmm1, xmmword [rsp + 0x2a0]
movups xmm2, xmmword [rsp + 0x2b0]
movups xmm3, xmmword [rsp + 0x2c0]
movaps xmmword [rsp + 0xb0], xmm3
movaps xmmword [rsp + 0xa0], xmm2
movaps xmmword [rsp + 0x90], xmm1
movdqa xmmword [rsp + 0x80], xmm0
mov rdx, qword [rsp + 0x2f0]
mov rax, qword [rsp + 0x2f8]
movzx ebp, word [rdx + 0x3d2]
mov rcx, rdx
cmp rax, rbp
jb 0x100a1af4
nop word cs:[rax + rax]
mov rcx, qword [rdx]
test rcx, rcx
je 0x100a1af2
movzx eax, word [rdx + 0x3d0]
mov rdx, rcx
cmp ax, word [rcx + 0x3d2]
jae 0x100a18c0
jmp 0x100a1af4
mov r15, qword [rbp]
mov rdi, qword [rbp + 0x10]
test rdi, rdi
je 0x100a191d
js 0x100a4662
mov edx, 1
mov rcx, rdi
call fcn.100028d0
mov rsi, rax
test rax, rax
jne 0x100a1922
jmp 0x100a4650
mov esi, 1
mov rcx, rsi
mov rdx, r15
mov r8, rdi
call sub.msvcrt.dll_memcpy
movzx eax, byte [rbp + 0x18]
mov qword [rsp + 0x1b0], rsi
mov qword [rsp + 0x1b8], rdi
mov qword [rsp + 0x1c0], rdi
mov byte [rsp + 0x1c8], al
mov r15, qword [rbp + 0x20]
mov rbp, qword [rbp + 0x30]
test rbp, rbp
je 0x100a1997
xor esi, esi
cmp rbp, r12
setbe al
ja 0x100a467c
mov r13, rbp
add r13, rbp
mov sil, al
add rsi, rsi
test r13, r13
je 0x100a19a1
mov rcx, r13
mov rdx, rsi
call fcn.100028d0
mov rdi, rax
test rdi, rdi
jne 0x100a19ad
jmp 0x100a466c
mov edi, 2
xor r13d, r13d
jmp 0x100a19ad
mov rdi, rsi
test rdi, rdi
je 0x100a466c
mov rcx, rdi
mov rdx, r15
mov r8, r13
call sub.msvcrt.dll_memcpy
movdqu xmm0, xmmword [rsp + 0x1b0]
movups xmm1, xmmword [rsp + 0x1c0]
movdqa xmmword [rsp + 0x290], xmm0
movaps xmmword [rsp + 0x2a0], xmm1
mov qword [rsp + 0x2b0], rdi
mov qword [rsp + 0x2b8], rbp
mov qword [rsp + 0x2c0], rbp
mov rsi, qword [rbx]
mov rdi, qword [rbx + 0x10]
test rdi, rdi
je 0x100a1a21
js 0x100a4646
mov edx, 1
mov rcx, rdi
call fcn.100028d0
mov rbp, rax
test rax, rax
jne 0x100a1a26
jmp 0x100a4686
mov ebp, 1
mov rcx, rbp
mov rdx, rsi
mov r8, rdi
call sub.msvcrt.dll_memcpy
movzx eax, byte [rbx + 0x18]
mov qword [rsp + 0x1b0], rbp
mov qword [rsp + 0x1b8], rdi
mov qword [rsp + 0x1c0], rdi
mov byte [rsp + 0x1c8], al
lea rcx, [rsp + 0x80]
lea rdx, [rsp + 0x100]
lea r8, [rsp + 0x290]
lea r9, [rsp + 0x1b0]
call fcn.100617a0
cmp byte [rsp + 0x98], 2
je 0x100a16a0
mov rdx, qword [rsp + 0x88]
test rdx, rdx
je 0x100a16a0
mov rcx, qword [rsp + 0x80]
mov r8, rdx
not r8
shr r8, 0x3f
call fcn.100028e0
jmp 0x100a16a0
mov qword [rsp + 0x1b0], 0
mov qword [rsp + 0x1b8], rax
mov qword [rsp + 0x1c0], rcx
lea rcx, [rsp + 0x290]
lea rdx, [rsp + 0x1b0]
lea r8, [rsp + 0x58]
call fcn.10065e50
jmp 0x100a1c04
xor ecx, ecx
imul rdx, rax, 0x38
shl rax, 5
mov rbp, qword [rcx + rdx + 0x38]
mov qword [rsp + 0x1e0], rbp
movups xmm0, xmmword [rcx + rdx + 8]
movups xmm1, xmmword [rcx + rdx + 0x18]
movups xmm2, xmmword [rcx + rdx + 0x28]
movaps xmmword [rsp + 0x1d0], xmm2
movaps xmmword [rsp + 0x1c0], xmm1
movaps xmmword [rsp + 0x1b0], xmm0
mov rbp, qword [rsp + 0xb0]
mov qword [rcx + rdx + 0x38], rbp
movaps xmm0, xmmword [rsp + 0x80]
movaps xmm1, xmmword [rsp + 0x90]
movaps xmm2, xmmword [rsp + 0xa0]
movups xmmword [rcx + rdx + 0x28], xmm2
movups xmmword [rcx + rdx + 0x18], xmm1
movups xmmword [rcx + rdx + 8], xmm0
movups xmm0, xmmword [rcx + rax + 0x270]
movups xmm1, xmmword [rcx + rax + 0x280]
lea rdx, [rsp + 0x1e8]
movups xmmword [rdx + 0x10], xmm1
movups xmmword [rdx], xmm0
lea rdx, [rsp + 0xb8]
movups xmm0, xmmword [rdx]
movups xmm1, xmmword [rdx + 0x10]
movups xmmword [rcx + rax + 0x270], xmm0
movups xmmword [rcx + rax + 0x280], xmm1
mov rax, qword [rsp + 0x200]
mov qword [rsp + 0x2e0], rax
movaps xmm0, xmmword [rsp + 0x1f0]
movaps xmmword [rsp + 0x2d0], xmm0
movdqa xmm0, xmmword [rsp + 0x1b0]
movaps xmm1, xmmword [rsp + 0x1c0]
movaps xmm2, xmmword [rsp + 0x1d0]
movaps xmm3, xmmword [rsp + 0x1e0]
movaps xmmword [rsp + 0x2c0], xmm3
movaps xmmword [rsp + 0x2b0], xmm2
movaps xmmword [rsp + 0x2a0], xmm1
movdqa xmmword [rsp + 0x290], xmm0
mov rax, qword [rsp + 0x2e0]
mov qword [rsp + 0x200], rax
movaps xmm0, xmmword [rsp + 0x2d0]
movaps xmmword [rsp + 0x1f0], xmm0
movdqa xmm0, xmmword [rsp + 0x290]
movaps xmm1, xmmword [rsp + 0x2a0]
movaps xmm2, xmmword [rsp + 0x2b0]
movaps xmm3, xmmword [rsp + 0x2c0]
movaps xmmword [rsp + 0x1e0], xmm3
movaps xmmword [rsp + 0x1d0], xmm2
dec qword [rsp + 0x110]
movaps xmmword [rsp + 0x1c0], xmm1
movdqa xmmword [rsp + 0x1b0], xmm0
cmp byte [rsp + 0x58], 0
je 0x100a1cb2
test r15, r15
je 0x100a4698
mov rax, qword [r13 + 0x3d8]
mov qword [rsp + 0x108], rax
dec r15
mov qword [rsp + 0x100], r15
mov qword [rax], 0
mov edx, 0x438
mov r8d, 8
mov rcx, r13
call fcn.100028e0
cmp byte [rsp + 0x1c8], 2
je 0x100a16a0
mov rdx, qword [rsp + 0x1b8]
mov rsi, qword [rsp + 0x1d0]
mov rbp, qword [rsp + 0x1d8]
mov rdi, qword [rsp + 0x1e8]
mov rbx, qword [rsp + 0x1f0]
movzx r15d, byte [rsp + 0x200]
test rdx, rdx
je 0x100a1d0d
mov rcx, qword [rsp + 0x1b0]
mov r8, rdx
not r8
shr r8, 0x3f
call fcn.100028e0
test rbp, rbp
je 0x100a1d26
add rbp, rbp
mov r8d, 2
mov rcx, rsi
mov rdx, rbp
call fcn.100028e0
cmp r15b, 2
je 0x100a16a0
test rbx, rbx
je 0x100a16a0
mov r8, rbx
not r8
shr r8, 0x3f
mov rcx, rdi
mov rdx, rbx
call fcn.100028e0
jmp 0x100a16a0
movdqu xmm0, xmmword [rsp + 0x100]
movdqu xmmword [rsp + 0x220], xmm0
mov rax, qword [rsp + 0x110]
mov qword [rsp + 0x230], rax
mov qword [rsp + 0x218], 1
mov eax, 1
mov r14, qword [rsp + 0xf8]
movzx edx, byte [rsp + 0xe0]
mov qword [rsp + 0x1f8], 0
pxor xmm0, xmm0
movdqu xmmword [rsp + 0x1e4], xmm0
movdqu xmmword [rsp + 0x1b8], xmm0
movdqu xmmword [rsp + 0x1c8], xmm0
movdqu xmmword [rsp + 0x1d8], xmm0
pcmpeqd xmm0, xmm0
movdqu xmmword [rsp + 0x200], xmm0
mov qword [rsp + 0x210], 0xffffffffffffffff
mov dword [rsp + 0x1b0], 0x68
mov dword [rsp + 0x1ec], 0x100
test dl, dl
mov qword [rsp + 0xe0], rax
je 0x100a1e0c
xor edi, edi
jmp 0x100a1fe7
mov r13d, 4
mov esi, 1
mov ecx, 4
mov edx, 1
call fcn.100028d0
test rax, rax
je 0x100a46b5
mov dword [rax], 0x48544150
mov qword [rsp + 0x80], rax
movdqa xmm0, xmmword [0x1011efc0]
movdqu xmmword [rsp + 0x88], xmm0
mov byte [rsp + 0x98], 0
mov rcx, rax
add rcx, 4
mov qword [rsp + 0x290], rax
mov qword [rsp + 0x298], rcx
mov word [rsp + 0x2a0], 0
lea rcx, [rsp + 0x140]
lea rdx, [rsp + 0x290]
call fcn.1006c8e0
movups xmm0, xmmword [rsp + 0x80]
movups xmm1, xmmword [rsp + 0x90]
movaps xmmword [rsp + 0x290], xmm0
movaps xmmword [rsp + 0x2a0], xmm1
movdqu xmm0, xmmword [rsp + 0x140]
movdqa xmmword [rsp + 0x2b0], xmm0
mov rbx, qword [rsp + 0x150]
mov qword [rsp + 0x2c0], rbx
mov rsi, qword [rsp + 0x2b0]
mov r13, qword [rsp + 0x228]
test r13, r13
je 0x100a21de
mov r12, qword [rsp + 0x220]
lea rcx, [r13 + 8]
movzx eax, word [r13 + 0x3d2]
mov qword [rsp + 0x78], rax
imul r14, rax, 0x38
lea rbp, [r13 + 0x260]
mov rdi, 0xffffffffffffffff
nop word cs:[rax + rax]
test r14, r14
je 0x100a1f70
lea r15, [rcx + 0x38]
mov r8, qword [rcx + 0x20]
mov r9d, dword [rcx + 0x30]
mov dword [rsp + 0x20], 1
mov rcx, rsi
mov edx, ebx
call sub.kernel32.dll_CompareStringOrdinal
add r14, 0xffffffffffffffc8
add rbp, 0x20
inc rdi
mov rcx, r15
cmp eax, 3
je 0x100a1f20
cmp eax, 1
mov r14, qword [rsp + 0xf8]
jne 0x100a1f94
jmp 0x100a1f7d
mov rdi, qword [rsp + 0x78]
mov r14, qword [rsp + 0xf8]
sub r12, 1
jb 0x100a2488
mov r13, qword [r13 + rdi*8 + 0x3d8]
jmp 0x100a1eef
cmp eax, 2
jne 0x100a45b6
mov rdi, qword [rbp - 0x10]
mov r15, qword [rbp]
mov rdx, qword [rsp + 0x298]
test rdx, rdx
je 0x100a1fc9
mov rcx, qword [rsp + 0x290]
mov r8, rdx
not r8
shr r8, 0x3f
call fcn.100028e0
mov rdx, qword [rsp + 0x2b8]
test rdx, rdx
je 0x100a1fe7
add rdx, rdx
mov r8d, 2
mov rcx, rsi
call fcn.100028e0
mov r13, qword [r14 + 0x10]
mov rax, r14
lea r14, [0x101248d8]
test r13, r13
je 0x100a2041
mov rbp, qword [rax]
cmp r13, 4
jae 0x100a200c
lea rdx, [0x1009f080]
jmp 0x100a2035
mov eax, dword [rbp]
bswap eax
xor ecx, ecx
cmp eax, 0x5c5c3f5c
setb cl
cmp eax, 0x5c5c3f5d
adc ecx, 0xffffffff
lea rax, [0x1009f090]
lea rdx, [0x1009f080]
cmove rdx, rax
movzx ecx, byte [r13 + rbp - 1]
call rdx
test al, al
je 0x100a20b9
mov rax, qword [rsp + 0xe8]
mov qword [rax], r14
mov qword [rax + 0x10], 2
mov rax, qword [rsp + 0xe0]
test rax, rax
je 0x100a21ab
mov rcx, qword [rsp + 0x228]
test rcx, rcx
je 0x100a217b
mov rdx, qword [rsp + 0x220]
mov rax, qword [rsp + 0x230]
mov qword [rsp + 0x290], 0
mov qword [rsp + 0x298], rdx
mov qword [rsp + 0x2a0], rcx
mov qword [rsp + 0x2b8], rdx
mov qword [rsp + 0x2c0], rcx
xor ecx, ecx
jmp 0x100a218e
cmp r13, 4
jb 0x100a2126
movzx eax, byte [r13 + rbp - 4]
lea ecx, [rax - 0x41]
cmp cl, 0x1a
setb cl
shl cl, 5
or cl, al
cmp cl, 0x2e
jne 0x100a2126
movzx eax, byte [rbp + r13 - 3]
lea ecx, [rax - 0x41]
cmp cl, 0x1a
setb cl
shl cl, 5
or cl, al
cmp cl, 0x65
jne 0x100a2126
movzx eax, byte [rbp + r13 - 2]
lea ecx, [rax - 0x41]
cmp cl, 0x1a
setb cl
shl cl, 5
or cl, al
cmp cl, 0x78
jne 0x100a2126
movzx eax, byte [rbp + r13 - 1]
lea ecx, [rax - 0x41]
cmp cl, 0x1a
setb cl
shl cl, 5
or cl, al
cmp cl, 0x65
sete al
jmp 0x100a2128
xor eax, eax
mov rcx, rbp
add rcx, r13
mov qword [rsp + 0x78], rcx
xor ecx, ecx
mov qword [rsp + 0x70], rbp
nop word [rax + rax]
cmp r13, rcx
je 0x100a21f6
movzx edx, byte [rbp + rcx]
cmp edx, 0x2f
je 0x100a215b
inc rcx
cmp edx, 0x5c
jne 0x100a2140
test al, al
je 0x100a22cf
lea rcx, [rsp + 0x100]
mov rdx, rbp
mov r8, r13
call fcn.1009f570
jmp 0x100a2f31
mov qword [rsp + 0x290], 2
mov ecx, 2
xor eax, eax
mov qword [rsp + 0x2b0], rcx
mov qword [rsp + 0x2d0], rax
lea rcx, [rsp + 0x290]
call fcn.1005b4f0
cmp dword [rsp + 0x250], 3
jb 0x100a21c2
mov rcx, qword [rsp + 0x258]
call sub.kernel32.dll_CloseHandle
movaps xmm6, xmmword [rsp + 0x6a0]
add rsp, 0x6b8
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
xor edi, edi
mov rdx, qword [rsp + 0x298]
test rdx, rdx
jne 0x100a1fb2
jmp 0x100a1fc9
xor edx, edx
lea r14, str.nul_byte_found_in_provided_data
mov rax, rbp
jmp 0x100a221b
xor edx, edx
test cx, cx
je 0x100a2041
mov cx, 1
test dx, dx
jne 0x100a2210
cmp rax, qword [rsp + 0x78]
je 0x100a2456
movzx edx, byte [rax]
test dl, dl
js 0x100a223d
inc rax
mov ebp, edx
jmp 0x100a228a
mov ebp, edx
and ebp, 0x1f
movzx esi, byte [rax + 1]
and esi, 0x3f
cmp dl, 0xdf
jbe 0x100a2281
movzx ebx, byte [rax + 2]
shl esi, 6
and ebx, 0x3f
or ebx, esi
cmp dl, 0xf0
jb 0x100a229d
movzx edx, byte [rax + 3]
add rax, 4
and ebp, 7
shl ebp, 0x12
shl ebx, 6
and edx, 0x3f
or edx, ebx
or ebp, edx
cmp ebp, 0xffff
jbe 0x100a228a
jmp 0x100a22ae
add rax, 2
shl ebp, 6
or ebp, esi
xor edx, edx
mov ecx, ebp
mov rbp, qword [rsp + 0x70]
test cx, cx
jne 0x100a221b
jmp 0x100a2041
add rax, 3
shl ebp, 0xc
or ebp, ebx
cmp ebp, 0xffff
jbe 0x100a228a
and ebp, 0x3ff
or ebp, 0xdc00
mov edx, ebp
mov rbp, qword [rsp + 0x70]
test cx, cx
jne 0x100a221b
jmp 0x100a2041
test r13, r13
js 0x100a478c
mov rsi, r13
not rsi
shr rsi, 0x3f
mov rcx, r13
mov rdx, rsi
call fcn.100028d0
test rax, rax
je 0x100a46b5
mov rdi, rax
mov rcx, rax
mov rdx, rbp
mov r8, r13
call sub.msvcrt.dll_memcpy
mov qword [rsp + 0x80], rdi
mov qword [rsp + 0x88], r13
mov qword [rsp + 0x90], r13
mov byte [rsp + 0x98], 0
mov rax, qword [rsp + 0x90]
mov qword [rsp + 0x2a0], rax
movzx eax, byte [rsp + 0x98]
mov byte [rsp + 0x2a8], al
mov eax, dword [rsp + 0x99]
mov dword [rsp + 0x2a9], eax
movzx eax, word [rsp + 0x9d]
mov word [rsp + 0x2ad], ax
movzx eax, byte [rsp + 0x9f]
mov byte [rsp + 0x2af], al
mov rax, qword [rsp + 0x80]
mov qword [rsp + 0x290], rax
mov rax, qword [rsp + 0x88]
mov qword [rsp + 0x298], rax
lea rdx, str..exeprogram_not_found
lea rcx, [rsp + 0x290]
mov r8d, 4
call fcn.1009e600
movdqa xmm0, xmmword [rsp + 0x290]
movaps xmm1, xmmword [rsp + 0x2a0]
movaps xmmword [rsp + 0x90], xmm1
movdqa xmmword [rsp + 0x80], xmm0
mov rsi, qword [rsp + 0x80]
mov r14, qword [rsp + 0x90]
lea rcx, [rsp + 0x290]
mov rdx, rsi
mov r8, r14
call fcn.100a4e10
cmp qword [rsp + 0x290], 0
je 0x100a2424
mov rax, qword [rsp + 0x2a0]
mov qword [rsp + 0x110], rax
movdqu xmm0, xmmword [rsp + 0x290]
movdqa xmmword [rsp + 0x100], xmm0
jmp 0x100a2f12
mov rcx, rsi
mov rdx, r14
call fcn.1008d270
test rax, rax
je 0x100a2eff
cmp rdx, 2
jne 0x100a24a0
movzx ecx, word [rax]
cmp ecx, 0x2e2e
jne 0x100a24a0
mov r8d, 2
xor ecx, ecx
jmp 0x100a2ed6
cmp r13, 0xf
ja 0x100a24ef
xor eax, eax
mov qword [rsp + 0x188], rax
xor eax, eax
nop dword [rax]
cmp byte [rbp + rax], 0x2e
je 0x100a2510
inc rax
cmp r13, rax
jne 0x100a2470
jmp 0x100a251d
xor edi, edi
mov rdx, qword [rsp + 0x298]
test rdx, rdx
jne 0x100a1fb2
jmp 0x100a1fc9
xor edi, edi
mov rcx, rax
nop word cs:[rax + rax]
cmp rdx, rdi
je 0x100a2506
mov rbx, rdi
lea rbp, [rcx - 1]
inc rdi
cmp byte [rcx + rdx - 1], 0x2e
mov rcx, rbp
jne 0x100a24b0
mov r8, rdx
sub r8, rdi
lea rcx, [r8 + 1]
cmp rdx, rcx
jb 0x100a47c4
cmp rdx, rdi
jne 0x100a2ec7
xor ecx, ecx
mov r8, rdx
jmp 0x100a2ed1
mov cl, 0x2e
mov rdx, rbp
mov r8, r13
call fcn.100ed860
mov qword [rsp + 0x188], rax
jmp 0x100a251d
mov rcx, rax
xor eax, eax
jmp 0x100a2ed1
mov eax, 1
mov qword [rsp + 0x188], rax
test rdi, rdi
je 0x100a2571
add r15, rdi
mov qword [rsp + 0x80], rdi
mov qword [rsp + 0x88], r15
mov word [rsp + 0x90], 0
mov byte [rsp + 0x98], 1
lea rcx, [rsp + 0x290]
lea rdx, [rsp + 0x80]
call fcn.1009dec0
movzx eax, byte [rsp + 0x2a8]
cmp al, 2
jne 0x100a28ac
mov rbp, qword [rsp + 0x70]
lea rcx, [rsp + 0x140]
call fcn.1009e120
cmp byte [rsp + 0x158], 2
jne 0x100a259a
lea rcx, [rsp + 0x140]
call fcn.1005d5b0
jmp 0x100a26aa
movdqu xmm0, xmmword [rsp + 0x140]
movups xmm1, xmmword [rsp + 0x150]
movdqa xmmword [rsp + 0x80], xmm0
movaps xmmword [rsp + 0x90], xmm1
mov rcx, qword [rsp + 0x80]
mov rsi, qword [rsp + 0x90]
mov rdx, rsi
call fcn.1008d100
test rax, rax
je 0x100a25e6
cmp rsi, rdx
jb 0x100a25e6
mov qword [rsp + 0x90], rdx
movdqa xmm0, xmmword [rsp + 0x80]
mov rax, qword [rsp + 0x90]
mov qword [rsp + 0x2a0], rax
mov rax, qword [rsp + 0x98]
mov qword [rsp + 0x2a8], rax
movdqa xmmword [rsp + 0x290], xmm0
lea rcx, [rsp + 0x290]
mov rdx, rbp
mov r8, r13
call fcn.1008bea0
cmp qword [rsp + 0x188], 1
je 0x100a2650
lea rdx, str.exeNULexit_code:
lea rcx, [rsp + 0x290]
mov r8d, 3
call fcn.1008cc10
mov rsi, qword [rsp + 0x290]
mov r8, qword [rsp + 0x2a0]
lea rcx, [rsp + 0x120]
mov rdx, rsi
call fcn.100a4e10
mov rdx, qword [rsp + 0x298]
test rdx, rdx
je 0x100a268f
mov r8, rdx
not r8
shr r8, 0x3f
mov rcx, rsi
call fcn.100028e0
mov rbx, qword [rsp + 0x120]
test rbx, rbx
je 0x100a26aa
movdqu xmm6, xmmword [rsp + 0x128]
jmp 0x100a2ce3
mov qword [rsp + 0x58], 2
pxor xmm0, xmm0
movdqu xmmword [rsp + 0x60], xmm0
mov r8d, 0x200
mov eax, 2
mov qword [rsp + 0xf0], rax
xor eax, eax
mov qword [rsp + 0xd8], rax
mov ebp, 0xffffffff
xor esi, esi
xor edi, edi
cmp r8, 0x201
jb 0x100a26ff
jmp 0x100a2720
jae 0x100a27e4
cmp r8, 0x201
jae 0x100a2720
mov r14d, 0x200
lea r12, [rsp + 0x290]
mov rbx, r8
jmp 0x100a277c
sub r8, rdi
sub rsi, rdi
cmp rsi, r8
mov rsi, qword [rsp + 0xd8]
jae 0x100a2752
lea rcx, [rsp + 0x58]
mov rdx, rdi
call fcn.100676d0
mov rax, qword [rsp + 0x58]
mov qword [rsp + 0xf0], rax
mov rsi, qword [rsp + 0x60]
cmp rsi, rbp
mov edi, 0xffffffff
cmovb rdi, rsi
mov qword [rsp + 0x68], rdi
mov rax, rsi
mov qword [rsp + 0xd8], rsi
mov r14, rdi
mov r12, qword [rsp + 0xf0]
mov rbx, rdi
xor ecx, ecx
call sub.kernel32.dll_SetLastError
mov rcx, r12
mov edx, ebx
call sub.kernel32.dll_GetSystemDirectoryW
mov r15d, eax
test eax, eax
jne 0x100a27a1
call sub.kernel32.dll_GetLastError
test eax, eax
jne 0x100a29f5
mov r8d, r15d
cmp rbx, r8
jne 0x100a26f0
call sub.kernel32.dll_GetLastError
cmp eax, 0x7a
jne 0x100a46c5
add rbx, rbx
mov eax, 0xffffffff
cmp rbx, rax
mov ebp, 0xffffffff
cmovae rbx, rax
mov r8, rbx
cmp r8, 0x201
jae 0x100a2720
jmp 0x100a26ff
cmp r14, r8
jb 0x100a47ad
lea rcx, [rsp + 0x80]
mov rdx, r12
call fcn.100898c0
lea rcx, [rsp + 0x80]
mov rdx, qword [rsp + 0x70]
mov r8, r13
call fcn.1008bea0
cmp qword [rsp + 0x188], 1
je 0x100a2837
lea rdx, str.exeNULexit_code:
lea rcx, [rsp + 0x80]
mov r8d, 3
call fcn.1008cc10
mov rdi, qword [rsp + 0x80]
mov r8, qword [rsp + 0x90]
lea rcx, [rsp + 0x120]
mov rdx, rdi
call fcn.100a4e10
mov rdx, qword [rsp + 0x88]
test rdx, rdx
je 0x100a2876
mov r8, rdx
not r8
shr r8, 0x3f
mov rcx, rdi
call fcn.100028e0
movdqu xmm0, xmmword [rsp + 0x120]
movdqu xmmword [rsp + 0x148], xmm0
mov rax, qword [rsp + 0x130]
mov qword [rsp + 0x158], rax
mov qword [rsp + 0x140], 0
mov sil, 1
jmp 0x100a2a18
lea r15, [rsp + 0x2a9]
lea rsi, [rsp + 0x290]
lea r12, [rsp + 0x80]
lea r14, [rsp + 0x140]
jmp 0x100a28eb
mov rcx, rsi
mov rdx, r12
call fcn.1009dec0
movzx eax, byte [rsp + 0x2a8]
cmp al, 2
je 0x100a256c
mov rcx, qword [rsp + 0x290]
mov rdx, qword [rsp + 0x298]
mov rbp, qword [rsp + 0x2a0]
test rbp, rbp
jne 0x100a291e
test rdx, rdx
je 0x100a28d0
mov r8, rdx
not r8
shr r8, 0x3f
call fcn.100028e0
jmp 0x100a28d0
mov ebx, dword [r15]
mov edi, dword [r15 + 3]
mov dword [rsp + 0x123], edi
mov dword [rsp + 0x120], ebx
mov ebx, dword [rsp + 0x120]
mov edi, dword [rsp + 0x123]
mov dword [r15 + 3], edi
mov dword [r15], ebx
mov qword [rsp + 0x290], rcx
mov qword [rsp + 0x298], rdx
mov qword [rsp + 0x2a0], rbp
mov byte [rsp + 0x2a8], al
mov rcx, rsi
mov rbp, qword [rsp + 0x70]
mov rdx, rbp
mov r8, r13
call fcn.1008bea0
cmp qword [rsp + 0x188], 1
je 0x100a299a
mov r8d, 3
mov rcx, rsi
lea rdx, str.exeNULexit_code:
call fcn.1008cc10
mov rbx, qword [rsp + 0x290]
mov r8, qword [rsp + 0x2a0]
mov rcx, r14
mov rdx, rbx
call fcn.100a4e10
mov rdx, qword [rsp + 0x298]
test rdx, rdx
je 0x100a29d4
mov r8, rdx
not r8
shr r8, 0x3f
mov rcx, rbx
call fcn.100028e0
mov rbx, qword [rsp + 0x140]
test rbx, rbx
jne 0x100a3f33
mov rcx, rsi
mov rdx, r12
call fcn.1009dec0
jmp 0x100a28db
call sub.kernel32.dll_GetLastError
shl rax, 0x20
or rax, 2
mov qword [rsp + 0x148], rax
mov qword [rsp + 0x140], 1
xor esi, esi
mov rdx, qword [rsp + 0xd8]
test rdx, rdx
je 0x100a2a3b
add rdx, rdx
mov r8d, 2
mov rcx, qword [rsp + 0xf0]
call fcn.100028e0
test sil, sil
je 0x100a2a60
mov rbx, qword [rsp + 0x148]
test rbx, rbx
je 0x100a2a60
movdqu xmm6, xmmword [rsp + 0x150]
mov rbp, qword [rsp + 0x70]
jmp 0x100a2ce3
lea rcx, [rsp + 0x140]
call fcn.1005b2c0
mov qword [rsp + 0x58], 2
pxor xmm0, xmm0
movdqu xmmword [rsp + 0x60], xmm0
mov r8d, 0x200
mov eax, 2
mov qword [rsp + 0xf0], rax
xor eax, eax
mov qword [rsp + 0xd8], rax
mov r15d, 0xffffffff
xor ebp, ebp
xor edi, edi
cmp r8, 0x201
jb 0x100a2acf
jmp 0x100a2af0
jae 0x100a2bb5
cmp r8, 0x201
jae 0x100a2af0
mov r14d, 0x200
lea rsi, [rsp + 0x290]
mov rbx, r8
jmp 0x100a2b4c
sub r8, rdi
sub rbp, rdi
cmp rbp, r8
mov rbp, qword [rsp + 0xd8]
jae 0x100a2b22
lea rcx, [rsp + 0x58]
mov rdx, rdi
call fcn.100676d0
mov rax, qword [rsp + 0x58]
mov qword [rsp + 0xf0], rax
mov rbp, qword [rsp + 0x60]
cmp rbp, r15
mov edi, 0xffffffff
cmovb rdi, rbp
mov qword [rsp + 0x68], rdi
mov rax, rbp
mov qword [rsp + 0xd8], rbp
mov r14, rdi
mov rsi, qword [rsp + 0xf0]
mov rbx, rdi
xor ecx, ecx
call sub.kernel32.dll_SetLastError
mov rcx, rsi
mov edx, ebx
call sub.kernel32.dll_GetWindowsDirectoryW
mov r12d, eax
test eax, eax
jne 0x100a2b71
call sub.kernel32.dll_GetLastError
test eax, eax
jne 0x100a2c7d
mov r8d, r12d
cmp rbx, r8
jne 0x100a2ac0
call sub.kernel32.dll_GetLastError
cmp eax, 0x7a
jne 0x100a46e2
add rbx, rbx
mov eax, 0xffffffff
cmp rbx, rax
mov r15d, 0xffffffff
cmovae rbx, rax
mov r8, rbx
cmp r8, 0x201
jae 0x100a2af0
jmp 0x100a2acf
cmp r14, r8
jb 0x100a47d2
lea rcx, [rsp + 0x80]
mov rdx, rsi
call fcn.100898c0
mov rbp, qword [rsp + 0x70]
lea rcx, [rsp + 0x80]
mov rdx, rbp
mov r8, r13
call fcn.1008bea0
cmp qword [rsp + 0x188], 1
je 0x100a2c0b
lea rdx, str.exeNULexit_code:
lea rcx, [rsp + 0x80]
mov r8d, 3
call fcn.1008cc10
mov rsi, qword [rsp + 0x80]
mov r8, qword [rsp + 0x90]
lea rcx, [rsp + 0x120]
mov rdx, rsi
call fcn.100a4e10
mov rdx, qword [rsp + 0x88]
test rdx, rdx
je 0x100a2c4a
mov r8, rdx
not r8
shr r8, 0x3f
mov rcx, rsi
call fcn.100028e0
movdqu xmm0, xmmword [rsp + 0x120]
movdqu xmmword [rsp + 0x148], xmm0
mov rax, qword [rsp + 0x130]
mov qword [rsp + 0x158], rax
mov qword [rsp + 0x140], 0
mov sil, 1
jmp 0x100a2ca5
call sub.kernel32.dll_GetLastError
shl rax, 0x20
or rax, 2
mov qword [rsp + 0x148], rax
mov qword [rsp + 0x140], 1
xor esi, esi
mov rbp, qword [rsp + 0x70]
mov rdx, qword [rsp + 0xd8]
test rdx, rdx
je 0x100a2cc8
add rdx, rdx
mov r8d, 2
mov rcx, qword [rsp + 0xf0]
call fcn.100028e0
test sil, sil
je 0x100a2cf7
mov rbx, qword [rsp + 0x148]
test rbx, rbx
je 0x100a2cf7
movdqu xmm6, xmmword [rsp + 0x150]
movq r14, xmm6
pshufd xmm0, xmm6, 0xee
movq rcx, xmm0
jmp 0x100a2f52
lea rcx, [rsp + 0x140]
call fcn.1005b2c0
lea rdx, str.PATHlock_count_overflow_in_reentrant_mutexlibrary_std_src_sys_common_remutex.rs
lea rcx, [rsp + 0x120]
mov r8d, 4
call fcn.10079dc0
cmp byte [rsp + 0x138], 2
je 0x100a3a7b
movdqu xmm0, xmmword [rsp + 0x120]
movups xmm1, xmmword [rsp + 0x130]
movdqa xmmword [rsp + 0x140], xmm0
movaps xmmword [rsp + 0x150], xmm1
mov r14, qword [rsp + 0x140]
mov rax, qword [rsp + 0x150]
add rax, r14
mov qword [rsp + 0x80], r14
mov qword [rsp + 0x88], rax
mov word [rsp + 0x90], 0
mov byte [rsp + 0x98], 1
lea r15, [rsp + 0x2a9]
lea rdi, [rsp + 0x290]
lea r12, [rsp + 0x80]
jmp 0x100a2dab
mov rbx, qword [rsp + 0x58]
test rbx, rbx
jne 0x100a40ca
mov rcx, rdi
mov rdx, r12
call fcn.1009dec0
jmp 0x100a2dc3
mov rcx, rdi
mov rdx, r12
call fcn.1009dec0
movzx eax, byte [rsp + 0x2a8]
cmp al, 2
je 0x100a3a5c
mov rcx, qword [rsp + 0x290]
mov rdx, qword [rsp + 0x298]
mov rbp, qword [rsp + 0x2a0]
test rbp, rbp
jne 0x100a2e06
test rdx, rdx
je 0x100a2db8
mov r8, rdx
not r8
shr r8, 0x3f
call fcn.100028e0
jmp 0x100a2db8
mov ebx, dword [r15]
mov esi, dword [r15 + 3]
mov dword [rsp + 0x193], esi
mov dword [rsp + 0x190], ebx
mov ebx, dword [rsp + 0x190]
mov esi, dword [rsp + 0x193]
mov dword [r15 + 3], esi
mov dword [r15], ebx
mov qword [rsp + 0x290], rcx
mov qword [rsp + 0x298], rdx
mov qword [rsp + 0x2a0], rbp
mov byte [rsp + 0x2a8], al
mov rcx, rdi
mov rbp, qword [rsp + 0x70]
mov rdx, rbp
mov r8, r13
call fcn.1008bea0
cmp qword [rsp + 0x188], 1
je 0x100a2e82
mov r8d, 3
mov rcx, rdi
lea rdx, str.exeNULexit_code:
call fcn.1008cc10
mov rbx, qword [rsp + 0x290]
mov r8, qword [rsp + 0x2a0]
lea rcx, [rsp + 0x58]
mov rdx, rbx
call fcn.100a4e10
mov rdx, qword [rsp + 0x298]
test rdx, rdx
je 0x100a2d9d
mov r8, rdx
not r8
shr r8, 0x3f
mov rcx, rbx
call fcn.100028e0
jmp 0x100a2d9d
lea rcx, [rdx + rbp]
inc rcx
mov rdx, rbx
mov rbp, qword [rsp + 0x70]
test rax, rax
cmovne rcx, rax
test rcx, rcx
je 0x100a2eff
test rax, rax
cmove r8, rdx
add rcx, r8
sub rcx, rsi
cmp r14, rcx
jb 0x100a2eff
mov qword [rsp + 0x90], rcx
mov r14, rcx
lea rcx, [rsp + 0x100]
mov rdx, rsi
mov r8, r14
call fcn.1009f570
mov rdx, qword [rsp + 0x88]
test rdx, rdx
je 0x100a2f31
mov r8, rdx
not r8
shr r8, 0x3f
mov rcx, rsi
call fcn.100028e0
mov rbx, qword [rsp + 0x100]
mov r14, qword [rsp + 0x108]
test rbx, rbx
je 0x100a2041
mov rcx, qword [rsp + 0x110]
mov qword [rsp + 0x238], rbx
mov qword [rsp + 0x240], r14
mov qword [rsp + 0x248], rcx
mov rdx, rcx
sub rdx, 5
jae 0x100a327a
mov rax, qword [rsp + 0xf8]
mov rdi, qword [rax + 0x20]
mov rsi, qword [rax + 0x30]
movzx r15d, byte [rax + 0xad]
mov qword [rsp + 0x80], 2
pxor xmm0, xmm0
movdqu xmmword [rsp + 0x88], xmm0
lea rcx, [rsp + 0x80]
xor edx, edx
call fcn.10066de0
mov rax, qword [rsp + 0x80]
mov rcx, qword [rsp + 0x90]
mov word [rax + rcx*2], 0x22
inc rcx
mov qword [rsp + 0x90], rcx
mov qword [rsp + 0x290], rbp
mov rax, qword [rsp + 0x78]
mov qword [rsp + 0x298], rax
mov word [rsp + 0x2a0], 0
lea rcx, [rsp + 0x80]
lea rdx, [rsp + 0x290]
call fcn.1006c780
mov rdx, qword [rsp + 0x90]
cmp rdx, qword [rsp + 0x88]
jne 0x100a3033
lea rcx, [rsp + 0x80]
call fcn.10066de0
mov rdx, qword [rsp + 0x90]
mov rax, qword [rsp + 0x80]
mov word [rax + rdx*2], 0x22
inc rdx
mov qword [rsp + 0x90], rdx
shl rsi, 3
lea rbx, [rsi + rsi*4]
lea rsi, [rsp + 0x80]
nop dword [rax]
test rbx, rbx
je 0x100a30ee
mov rdx, qword [rsp + 0x90]
cmp rdx, qword [rsp + 0x88]
jne 0x100a308b
mov rcx, rsi
call fcn.10066de0
mov rdx, qword [rsp + 0x90]
mov rax, qword [rsp + 0x80]
mov word [rax + rdx*2], 0x20
inc rdx
mov qword [rsp + 0x90], rdx
mov rcx, rsi
mov rdx, rdi
mov r8d, r15d
call fcn.10098860
mov rbp, rax
add rdi, 0x28
add rbx, 0xffffffffffffffd8
test rax, rax
je 0x100a3060
mov rdx, qword [rsp + 0x88]
test rdx, rdx
je 0x100a3233
mov rcx, qword [rsp + 0x80]
add rdx, rdx
mov r8d, 2
call fcn.100028e0
jmp 0x100a3233
mov rdi, qword [rsp + 0x80]
mov rbp, qword [rsp + 0x88]
test rdi, rdi
je 0x100a3233
mov rsi, qword [rsp + 0x90]
mov rax, qword [rsp + 0x248]
mov qword [rsp + 0x110], rax
movups xmm0, xmmword [rsp + 0x238]
movaps xmmword [rsp + 0x100], xmm0
mov rax, qword [rsp + 0x110]
mov qword [rsp + 0x270], rax
movdqa xmm0, xmmword [rsp + 0x100]
movdqa xmmword [rsp + 0x260], xmm0
mov qword [rsp + 0x190], rdi
mov qword [rsp + 0x198], rbp
mov qword [rsp + 0x1a0], rsi
cmp rsi, rbp
mov r14, qword [rsp + 0xf8]
jne 0x100a3196
lea rcx, [rsp + 0x190]
mov rdx, rsi
call fcn.10066de0
mov rdi, qword [rsp + 0x190]
mov rsi, qword [rsp + 0x1a0]
mov word [rdi + rsi*2], 0
inc rsi
mov qword [rsp + 0x1a0], rsi
cmp byte [r14 + 0xac], 0
mov eax, 0x400
mov r15d, 0x608
cmove r15d, eax
or r15d, dword [r14 + 0xa8]
cmp qword [rsp + 0x218], 1
jne 0x100a344f
mov dword [rsp + 0x78], r15d
mov rdi, qword [rsp + 0x220]
mov rbx, qword [rsp + 0x228]
mov rsi, qword [rsp + 0x230]
mov qword [rsp + 0x100], rdi
mov qword [rsp + 0x108], rbx
mov qword [rsp + 0x110], rsi
mov qword [rsp + 0x58], 2
pxor xmm0, xmm0
movdqu xmmword [rsp + 0x60], xmm0
test rsi, rsi
je 0x100a3575
mov r13d, 2
xor r12d, r12d
jmp 0x100a359e
mov rax, qword [rsp + 0xe8]
mov qword [rax], rbp
mov qword [rax + 0x10], 2
test r14, r14
je 0x100a3264
mov rcx, qword [rsp + 0x238]
add r14, r14
mov r8d, 2
mov rdx, r14
call fcn.100028e0
mov rax, qword [rsp + 0x218]
test rax, rax
jne 0x100a2065
jmp 0x100a21ab
xor eax, eax
sub rcx, rdx
lea rdx, [rbx + rdx*2]
cmovae rax, rdx
cmp rcx, 5
sete cl
test rax, rax
je case.0x100a32d8.68
test cl, cl
je case.0x100a32d8.68
cmp word [rax], 0x2e
jne case.0x100a32d8.68
cmp word [rax + 8], 0
jne case.0x100a32d8.68
movzx ecx, word [rax + 2]
lea edx, [rcx - 0x42]
cmp edx, 0x21
ja case.0x100a32d8.68
lea rbp, [0x100a4c40]
movsxd rdx, dword [rbp + rdx*4]
add rdx, rbp
mov rbp, qword [rsp + 0x70]
jmp rdx
movzx edx, word [rax + 4]
or edx, 0x20
cmp edx, 0x61
jne 0x100a32f2
movzx edx, word [rax + 6]
or edx, 0x20
cmp edx, 0x74
je 0x100a331e
cmp cx, 0x43
jne case.0x100a32d8.68
movzx ecx, word [rax + 4]
or ecx, 0x20
cmp ecx, 0x6d
jne case.0x100a32d8.68
movzx eax, word [rax + 6]
add eax, 0xffffffbc
test eax, 0xffdf
jne case.0x100a32d8.68
mov qword [rsp + 0x80], 2
pxor xmm0, xmm0
movdqu xmmword [rsp + 0x88], xmm0
mov r15d, 0x200
mov eax, 2
mov qword [rsp + 0x78], rax
xor eax, eax
mov qword [rsp + 0xe0], rax
xor r12d, r12d
xor ebx, ebx
cmp r15, 0x201
jb 0x100a3370
jmp 0x100a3383
jae 0x100a3f00
cmp r15, 0x201
jae 0x100a3383
mov r13d, 0x200
lea rbp, [rsp + 0x290]
mov rdi, r15
jmp 0x100a33ed
sub r15, rbx
sub r12, rbx
cmp r12, r15
mov r12, qword [rsp + 0xe0]
jae 0x100a33be
lea rcx, [rsp + 0x80]
mov rdx, rbx
mov r8, r15
call fcn.100676d0
mov rax, qword [rsp + 0x80]
mov qword [rsp + 0x78], rax
mov r12, qword [rsp + 0x88]
mov eax, 0xffffffff
cmp r12, rax
mov ebx, 0xffffffff
cmovb rbx, r12
mov qword [rsp + 0x90], rbx
mov rax, r12
mov qword [rsp + 0xe0], r12
mov r13, rbx
mov rbp, qword [rsp + 0x78]
mov rdi, rbx
xor ecx, ecx
call sub.kernel32.dll_SetLastError
mov rcx, rbp
mov edx, edi
call sub.kernel32.dll_GetSystemDirectoryW
mov esi, eax
test eax, eax
jne 0x100a3411
call sub.kernel32.dll_GetLastError
test eax, eax
jne 0x100a3f40
mov r15d, esi
cmp rdi, r15
jne 0x100a3361
call sub.kernel32.dll_GetLastError
cmp eax, 0x7a
jne 0x100a4793
add rdi, rdi
mov eax, 0xffffffff
cmp rdi, rax
cmovae rdi, rax
mov r15, rdi
cmp r15, 0x201
jae 0x100a3383
jmp 0x100a3370
pxor xmm0, xmm0
movdqa xmmword [rsp + 0x280], xmm0
mov r12d, 2
xor r13d, r13d
movdqa xmm0, xmmword [rsp + 0x280]
movdqa xmmword [rsp + 0x690], xmm0
mov qword [rsp + 0x58], r12
movdqu xmmword [rsp + 0x60], xmm0
cmp byte [r14 + 0x70], 2
jne 0x100a34a2
pxor xmm0, xmm0
movdqa xmmword [rsp + 0x140], xmm0
mov eax, 2
xor edi, edi
jmp 0x100a3b0e
mov r8, qword [r14 + 0x58]
mov rcx, qword [r14 + 0x68]
add rcx, r8
xor ebx, ebx
mov rdx, r8
jmp 0x100a34bf
xor ebx, ebx
test bp, bp
je 0x100a3556
mov bp, 1
test bx, bx
jne 0x100a34b4
cmp rdx, rcx
je 0x100a3a87
movzx edi, byte [rdx]
test dil, dil
js 0x100a34e0
inc rdx
mov esi, edi
jmp 0x100a353a
mov esi, edi
and esi, 0x1f
movzx eax, byte [rdx + 1]
and eax, 0x3f
cmp dil, 0xdf
jbe 0x100a351e
movzx ebx, byte [rdx + 2]
shl eax, 6
and ebx, 0x3f
or ebx, eax
cmp dil, 0xf0
jb 0x100a3529
movzx eax, byte [rdx + 3]
add rdx, 4
and esi, 7
shl esi, 0x12
shl ebx, 6
and eax, 0x3f
or eax, ebx
or esi, eax
jmp 0x100a3532
add rdx, 2
shl esi, 6
or esi, eax
jmp 0x100a353a
add rdx, 3
shl esi, 0xc
or esi, ebx
cmp esi, 0xffff
ja 0x100a3543
xor ebx, ebx
mov ebp, esi
jmp 0x100a34b6
and esi, 0x3ff
or esi, 0xdc00
mov ebx, esi
jmp 0x100a34b6
lea rax, str.nul_byte_found_in_provided_data
mov rcx, qword [rsp + 0xe8]
mov qword [rcx], rax
mov qword [rcx + 0x10], 2
jmp 0x100a3e23
mov r14b, 1
lea rcx, [rsp + 0x58]
xor edx, edx
call fcn.10066de0
mov r13, qword [rsp + 0x58]
mov r12, qword [rsp + 0x68]
mov word [r13 + r12*2], 0
inc r12
mov qword [rsp + 0x68], r12
xor eax, eax
test rbx, rbx
sete al
cmove rsi, rbx
add rax, rax
mov qword [rsp + 0x290], rax
mov qword [rsp + 0x298], rdi
mov qword [rsp + 0x2a0], rbx
mov qword [rsp + 0x2b0], rax
mov qword [rsp + 0x2b8], rdi
mov qword [rsp + 0x2c0], rbx
mov qword [rsp + 0x2d0], rsi
lea rcx, [rsp + 0x80]
lea rdx, [rsp + 0x290]
call fcn.10062d70
mov rax, qword [rsp + 0x88]
test rax, rax
je 0x100a3e8d
mov rbp, qword [rsp + 0x90]
imul rbx, rbp, 0x38
cmp byte [rax + rbx + 0x20], 2
je 0x100a3e8d
mov qword [rsp + 0xe0], r13
mov rcx, qword [rax + rbx + 8]
mov rdx, qword [rax + rbx + 0x10]
mov r8, qword [rax + rbx + 0x18]
mov r14, qword [rax + rbx + 0x28]
mov r15, qword [rax + rbx + 0x30]
mov r13, qword [rax + rbx + 0x38]
shl rbp, 5
movdqu xmm0, xmmword [rax + rbp + 0x270]
movups xmm1, xmmword [rax + rbp + 0x280]
movaps xmmword [rsp + 0x150], xmm1
movdqa xmmword [rsp + 0x140], xmm0
add r8, rcx
xor esi, esi
mov rbx, rcx
jmp 0x100a368b
xor esi, esi
test di, di
je 0x100a39a1
mov di, 1
test si, si
jne 0x100a3680
cmp rbx, r8
je 0x100a3725
movzx ebp, byte [rbx]
test bpl, bpl
js 0x100a36ac
inc rbx
mov eax, ebp
jmp 0x100a370b
mov eax, ebp
and eax, 0x1f
movzx esi, byte [rbx + 1]
and esi, 0x3f
cmp bpl, 0xdf
jbe 0x100a36ef
movzx r9d, byte [rbx + 2]
shl esi, 6
and r9d, 0x3f
or r9d, esi
cmp bpl, 0xf0
jb 0x100a36fa
movzx ebp, byte [rbx + 3]
add rbx, 4
and eax, 7
shl eax, 0x12
shl r9d, 6
and ebp, 0x3f
or ebp, r9d
or eax, ebp
jmp 0x100a3704
add rbx, 2
shl eax, 6
or eax, esi
jmp 0x100a370b
add rbx, 3
shl eax, 0xc
or eax, r9d
cmp eax, 0xffff
ja 0x100a3714
xor esi, esi
mov edi, eax
jmp 0x100a3682
and eax, 0x3ff
or eax, 0xdc00
mov esi, eax
jmp 0x100a3682
test rdx, rdx
je 0x100a3739
mov r8, rdx
not r8
shr r8, 0x3f
call fcn.100028e0
lea rax, [r14 + r13*2]
mov qword [rsp + 0x80], r14
mov qword [rsp + 0x88], r15
mov qword [rsp + 0x90], r14
mov qword [rsp + 0x98], rax
mov rax, qword [rsp + 0x60]
sub rax, r12
cmp rax, r13
jae 0x100a3786
lea rcx, [rsp + 0x58]
mov rdx, r12
mov r8, r13
call fcn.100676d0
mov rax, qword [rsp + 0x58]
mov r12, qword [rsp + 0x68]
jmp 0x100a378e
mov rax, qword [rsp + 0xe0]
mov r8, r13
add r8, r13
mov rsi, rax
lea rcx, [rax + r12*2]
mov rdx, r14
call sub.msvcrt.dll_memcpy
add r12, r13
mov qword [rsp + 0x68], r12
test r15, r15
je 0x100a37c4
add r15, r15
mov r8d, 2
mov rcx, r14
mov rdx, r15
call fcn.100028e0
cmp r12, qword [rsp + 0x60]
jne 0x100a37e2
lea rcx, [rsp + 0x58]
mov rdx, r12
call fcn.10066de0
mov rsi, qword [rsp + 0x58]
mov r12, qword [rsp + 0x68]
mov word [rsi + r12*2], 0x3d
inc r12
mov qword [rsp + 0x68], r12
mov r15, qword [rsp + 0x140]
mov r14, qword [rsp + 0x148]
mov r9, qword [rsp + 0x150]
movzx r8d, byte [rsp + 0x158]
lea rax, [r15 + r9]
xor edx, edx
mov rsi, r15
jmp 0x100a3828
xor edx, edx
test bp, bp
je 0x100a39f6
mov bp, 1
test dx, dx
jne 0x100a381d
cmp rsi, rax
je 0x100a38bc
movzx edx, byte [rsi]
test dl, dl
js 0x100a3848
inc rsi
mov ecx, edx
jmp 0x100a38a0
mov ecx, edx
and ecx, 0x1f
movzx ebx, byte [rsi + 1]
and ebx, 0x3f
cmp dl, 0xdf
jbe 0x100a3884
movzx edi, byte [rsi + 2]
shl ebx, 6
and edi, 0x3f
or edi, ebx
cmp dl, 0xf0
jb 0x100a388f
movzx edx, byte [rsi + 3]
add rsi, 4
and ecx, 7
shl ecx, 0x12
shl edi, 6
and edx, 0x3f
or edx, edi
or ecx, edx
jmp 0x100a3898
add rsi, 2
shl ecx, 6
or ecx, ebx
jmp 0x100a38a0
add rsi, 3
shl ecx, 0xc
or ecx, edi
cmp ecx, 0xffff
ja 0x100a38a9
xor edx, edx
mov ebp, ecx
jmp 0x100a381f
and ecx, 0x3ff
or ecx, 0xdc00
mov edx, ecx
jmp 0x100a381f
cmp r8b, 2
je 0x100a45ae
lea rdx, [rsp + 0x159]
mov ecx, dword [rdx]
mov edx, dword [rdx + 3]
lea rbp, [rsp + 0x99]
mov dword [rbp + 3], edx
mov dword [rbp], ecx
mov qword [rsp + 0x80], r15
mov qword [rsp + 0x88], r14
mov qword [rsp + 0x90], r9
mov byte [rsp + 0x98], r8b
mov qword [rsp + 0x120], r15
mov qword [rsp + 0x128], rax
mov word [rsp + 0x130], 0
lea rcx, [rsp + 0x58]
lea rdx, [rsp + 0x120]
call fcn.1006c780
test r14, r14
je 0x100a3947
mov r8, r14
not r8
shr r8, 0x3f
mov rcx, r15
mov rdx, r14
call fcn.100028e0
mov r12, qword [rsp + 0x68]
cmp r12, qword [rsp + 0x60]
jne 0x100a3977
lea rcx, [rsp + 0x58]
mov rdx, r12
call fcn.10066de0
lea rcx, [rsp + 0x80]
lea rdx, [rsp + 0x290]
mov r12, qword [rsp + 0x68]
jmp 0x100a3987
lea rcx, [rsp + 0x80]
lea rdx, [rsp + 0x290]
mov r13, qword [rsp + 0x58]
mov word [r13 + r12*2], 0
inc r12
mov qword [rsp + 0x68], r12
jmp 0x100a35f5
test rdx, rdx
je 0x100a39b5
mov r8, rdx
not r8
shr r8, 0x3f
call fcn.100028e0
mov rdx, qword [rsp + 0x148]
test rdx, rdx
je 0x100a39d9
mov rcx, qword [rsp + 0x140]
mov r8, rdx
not r8
shr r8, 0x3f
call fcn.100028e0
lea r13, str.nul_byte_found_in_provided_data
test r15, r15
je 0x100a3a17
add r15, r15
mov r8d, 2
mov rcx, r14
mov rdx, r15
jmp 0x100a3a12
lea r13, str.nul_byte_found_in_provided_data
test r14, r14
je 0x100a3a17
mov r8, r14
not r8
shr r8, 0x3f
mov rcx, r15
mov rdx, r14
call fcn.100028e0
xor r14d, r14d
lea rcx, [rsp + 0x290]
call fcn.1005b4f0
mov rdx, qword [rsp + 0x60]
test rdx, rdx
je 0x100a3a44
mov rcx, qword [rsp + 0x58]
add rdx, rdx
mov r8d, 2
call fcn.100028e0
mov rax, qword [rsp + 0xe8]
mov qword [rax], r13
mov qword [rax + 0x10], 2
jmp 0x100a3e3e
mov rdx, qword [rsp + 0x148]
test rdx, rdx
je 0x100a3a7b
mov r8, rdx
not r8
shr r8, 0x3f
mov rcx, r14
call fcn.100028e0
lea r14, [0x10124908]
jmp 0x100a2041
mov qword [rsp + 0x290], r8
mov qword [rsp + 0x298], rcx
mov word [rsp + 0x2a0], 0
lea rcx, [rsp + 0x80]
lea rdx, [rsp + 0x290]
call fcn.1006c8e0
mov rdx, qword [rsp + 0x90]
cmp rdx, qword [rsp + 0x88]
jne 0x100a3add
lea rcx, [rsp + 0x80]
call fcn.10066de0
mov rdx, qword [rsp + 0x90]
lea rax, [rsp + 0x88]
mov rdi, qword [rsp + 0x80]
mov word [rdi + rdx*2], 0
inc rdx
mov qword [rsp + 0x90], rdx
movdqu xmm0, xmmword [rax]
movdqa xmmword [rsp + 0x140], xmm0
mov rax, rdi
movdqa xmm0, xmmword [rsp + 0x140]
movdqa xmmword [rsp + 0x100], xmm0
mov qword [rsp + 0xf8], rax
mov qword [rsp + 0x120], rax
movdqu xmmword [rsp + 0x128], xmm0
pxor xmm0, xmm0
movdqa xmmword [rsp + 0x140], xmm0
mov qword [rsp + 0x150], 0
lea rsi, [0x1016d228]
mov rcx, rsi
call sub.kernel32.dll_AcquireSRWLockExclusive
mov rax, qword [0x1016d1e8]
shl rax, 1
test rax, rax
mov qword [rsp + 0xe0], r13
je 0x100a3b85
call fcn.100956e0
mov ebx, eax
xor bl, 1
jmp 0x100a3b87
xor ebx, ebx
movzx r13d, byte [0x1016d230]
test r13b, r13b
mov dword [rsp + 0x78], r15d
mov qword [rsp + 0xd8], rdi
je 0x100a3bb0
mov qword [rsp + 0x88], rsi
mov eax, 1
jmp 0x100a3bba
mov qword [rsp + 0x88], rsi
xor eax, eax
mov byte [rsp + 0x90], bl
mov qword [rsp + 0x80], rax
mov qword [rsp + 0x290], 0
mov qword [rsp + 0x2a0], 0
mov qword [rsp + 0x2b0], 0
mov qword [rsp + 0x100], 1
lea rax, [r14 + 0x78]
mov rdx, qword [r14 + 0x78]
mov rsi, qword [r14 + 0x88]
xor ebp, ebp
cmp rdx, 5
cmove rax, rbp
mov rdi, qword [rsp + 0x250]
cmp byte [rsp + 0x1a8], 0
mov ecx, 1
mov qword [rsp + 0x70], rdi
cmovne rcx, rdi
lea r15, [rsp + 0x258]
lea rdi, [rsp + 0x108]
cmovne rdi, r15
add rax, 8
cmp rdx, 5
cmovne rcx, rdx
cmove rax, rdi
mov rdx, r14
add r14, 0x88
cmp rsi, 5
cmove r14, rbp
mov rdi, qword [rdx + 0x98]
add rdx, 0x98
cmp rdi, 5
cmove rdx, rbp
mov rbp, rdx
mov rdx, qword [rax]
lea r9, [rsp + 0x290]
mov r8d, 0xfffffff6
call fcn.100a4f10
test rax, rax
je 0x100a3cb2
mov rax, qword [rsp + 0xe8]
mov qword [rax], rdx
mov qword [rax + 0x10], 2
jmp 0x100a3d66
mov qword [rsp + 0x1a8], rdx
add r14, 8
cmp rsi, 5
cmove rsi, qword [rsp + 0x70]
lea r9, [rsp + 0x2a0]
cmove r14, r15
mov rdx, qword [r14]
mov rcx, rsi
mov r8d, 0xfffffff5
call fcn.100a4f10
mov rsi, rdx
test rax, rax
je 0x100a3d02
mov rax, qword [rsp + 0xe8]
mov qword [rax], rsi
mov qword [rax + 0x10], 2
jmp 0x100a3d59
add rbp, 8
cmp rdi, 5
cmove rdi, qword [rsp + 0x70]
lea r9, [rsp + 0x2b0]
cmove rbp, r15
mov rdx, qword [rbp]
mov rcx, rdi
mov r8d, 0xfffffff4
call fcn.100a4f10
mov rdi, rdx
test rax, rax
mov ecx, dword [rsp + 0x78]
je 0x100a3f58
mov rax, qword [rsp + 0xe8]
mov qword [rax], rdi
mov qword [rax + 0x10], 2
mov rcx, rsi
call sub.kernel32.dll_CloseHandle
mov rcx, qword [rsp + 0x1a8]
call sub.kernel32.dll_CloseHandle
cmp qword [rsp + 0x290], 0
je 0x100a3d7e
mov rcx, qword [rsp + 0x298]
call sub.kernel32.dll_CloseHandle
cmp qword [rsp + 0x2a0], 0
je 0x100a3d96
mov rcx, qword [rsp + 0x2a8]
call sub.kernel32.dll_CloseHandle
cmp qword [rsp + 0x2b0], 0
je 0x100a3dae
mov rcx, qword [rsp + 0x2b8]
call sub.kernel32.dll_CloseHandle
movabs rax, 0x7fffffffffffffff
test r13b, r13b
je 0x100a3dd4
test bl, bl
jne 0x100a3df4
mov rcx, qword [0x1016d1e8]
test rcx, rax
je 0x100a3df4
call fcn.100956e0
jmp 0x100a3de9
test bl, bl
jne 0x100a3df4
mov rcx, qword [0x1016d1e8]
test rcx, rax
je 0x100a3df4
call fcn.100956e0
test al, al
jne 0x100a3df4
mov byte [0x1016d230], 1
lea rcx, [0x1016d228]
call fcn.1010d28c
mov rdx, qword [rsp + 0x128]
test rdx, rdx
je 0x100a3e23
add rdx, rdx
mov r8d, 2
mov rcx, qword [rsp + 0xf8]
call fcn.100028e0
mov rdx, qword [rsp + 0x60]
test rdx, rdx
je 0x100a3e3e
add rdx, rdx
mov r8d, 2
mov rcx, r12
call fcn.100028e0
mov rdx, qword [rsp + 0x198]
test rdx, rdx
je 0x100a3e61
mov rcx, qword [rsp + 0x190]
add rdx, rdx
mov r8d, 2
call fcn.100028e0
mov rdx, qword [rsp + 0x268]
test rdx, rdx
je 0x100a21ab
mov rcx, qword [rsp + 0x260]
add rdx, rdx
mov r8d, 2
call fcn.100028e0
jmp 0x100a21ab
xor r14d, r14d
lea rcx, [rsp + 0x290]
call fcn.1005b4f0
cmp r12, qword [rsp + 0x60]
jne 0x100a3ebe
xor r14d, r14d
lea rcx, [rsp + 0x58]
mov rdx, r12
call fcn.10066de0
mov r13, qword [rsp + 0x58]
mov r12, qword [rsp + 0x68]
lea rax, [rsp + 0x60]
mov word [r13 + r12*2], 0
inc r12
mov qword [rsp + 0x68], r12
mov r12, qword [rsp + 0x58]
movdqu xmm0, xmmword [rax]
movdqa xmmword [rsp + 0x280], xmm0
test r12, r12
mov r14, qword [rsp + 0xf8]
mov r15d, dword [rsp + 0x78]
jne 0x100a3465
jmp 0x100a3a44
cmp r13, r15
jb 0x100a47e9
test esi, esi
je 0x100a40f8
lea rsi, [r15 + r15]
mov edx, 2
mov rcx, rsi
call fcn.100028d0
test rax, rax
je 0x100a47fd
mov r13, rax
jmp 0x100a4100
movups xmm6, xmmword [rsp + 0x148]
jmp 0x100a2ce3
call sub.kernel32.dll_GetLastError
mov r15d, eax
shl r15, 0x20
or r15, 2
xor r13d, r13d
jmp 0x100a410e
mov rbp, qword [rsp + 0x1a8]
mov qword [rsp + 0x200], rbp
mov qword [rsp + 0x208], rsi
mov qword [rsp + 0x210], rdi
mov r14, qword [rsp + 0x260]
mov r15, qword [rsp + 0x190]
lea rax, [rsp + 0x140]
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x1b0]
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0xd8]
mov qword [rsp + 0x38], rax
mov rax, qword [rsp + 0xe0]
mov qword [rsp + 0x30], rax
mov dword [rsp + 0x28], ecx
mov dword [rsp + 0x20], 1
mov rcx, r14
mov rdx, r15
xor r8d, r8d
xor r9d, r9d
call sub.kernel32.dll_CreateProcessW
test eax, eax
je 0x100a4538
movups xmm0, xmmword [rsp + 0x290]
movups xmm1, xmmword [rsp + 0x2a0]
movups xmm2, xmmword [rsp + 0x2b0]
mov rax, qword [rsp + 0xe8]
movups xmmword [rax + 0x30], xmm2
movups xmmword [rax + 0x20], xmm1
movups xmmword [rax + 0x10], xmm0
movdqa xmm0, xmmword [rsp + 0x140]
movdqu xmmword [rax], xmm0
mov rcx, rdi
call sub.kernel32.dll_CloseHandle
mov rcx, rsi
call sub.kernel32.dll_CloseHandle
mov rcx, rbp
call sub.kernel32.dll_CloseHandle
lea rcx, [rsp + 0x80]
call fcn.1005b960
mov rdx, qword [rsp + 0x128]
test rdx, rdx
je 0x100a4062
add rdx, rdx
mov r8d, 2
mov rcx, qword [rsp + 0xf8]
call fcn.100028e0
mov rdx, qword [rsp + 0x60]
test rdx, rdx
je 0x100a407d
add rdx, rdx
mov r8d, 2
mov rcx, r12
call fcn.100028e0
mov rdx, qword [rsp + 0x198]
test rdx, rdx
je 0x100a409b
add rdx, rdx
mov r8d, 2
mov rcx, r15
call fcn.100028e0
mov rdx, qword [rsp + 0x268]
test rdx, rdx
je 0x100a40b9
add rdx, rdx
mov r8d, 2
mov rcx, r14
call fcn.100028e0
cmp qword [rsp + 0x70], 3
jae 0x100a21b5
jmp 0x100a21c2
movdqu xmm6, xmmword [rsp + 0x60]
mov rdx, qword [rsp + 0x148]
test rdx, rdx
je 0x100a2ce3
mov r8, rdx
not r8
shr r8, 0x3f
mov rcx, r14
call fcn.100028e0
jmp 0x100a2ce3
mov r13d, 2
xor esi, esi
mov rcx, r13
mov rdx, rbp
mov r8, rsi
call sub.msvcrt.dll_memcpy
mov rdx, qword [rsp + 0xe0]
test rdx, rdx
je 0x100a412e
add rdx, rdx
mov r8d, 2
mov rcx, qword [rsp + 0x78]
call fcn.100028e0
test r13, r13
je 0x100a4384
mov qword [rsp + 0x140], r13
mov qword [rsp + 0x148], r15
mov qword [rsp + 0x150], r15
lea rdx, str.cmd.exeR
lea r12, [rsp + 0x290]
mov r8d, 8
mov rcx, r12
call fcn.100f0e70
mov rax, qword [rsp + 0x2a0]
mov qword [rsp + 0x90], rax
movdqu xmm0, xmmword [rsp + 0x290]
movdqa xmmword [rsp + 0x80], xmm0
movdqa xmmword [rsp + 0x290], xmm0
mov qword [rsp + 0x2a0], rax
mov qword [rsp + 0x2a8], 1
mov qword [rsp + 0x2b8], 1
mov word [rsp + 0x2c0], 0
mov r14, qword [rsp + 0x290]
test r14, r14
je 0x100a438c
mov rbx, qword [rsp + 0x298]
lea rsi, [rbx + 3]
xor edi, edi
xor eax, eax
jmp 0x100a41f5
mov word [r13 + r15*2], bp
inc r15
mov qword [rsp + 0x150], r15
test r14, r14
cmovne r14, r12
je 0x100a42bb
movzx ebp, word [rsp + 0x2a0]
test bp, bp
je 0x100a421e
mov word [rsp + 0x2a0], 0
jmp 0x100a42dc
mov rdx, qword [r14]
cmp rdx, rbx
je 0x100a42af
lea rcx, [rdx + 1]
mov qword [r14], rcx
movzx ebp, byte [rdx]
test bpl, bpl
jns 0x100a42dc
mov r10, rsi
mov ecx, ebp
and ecx, 0x1f
lea rsi, [rdx + 2]
mov qword [r14], rsi
movzx esi, byte [rdx + 1]
and esi, 0x3f
cmp bpl, 0xdf
jbe 0x100a4335
mov r9, rbx
lea rbx, [rdx + 3]
mov qword [r14], rbx
movzx r8d, byte [rdx + 2]
shl esi, 6
and r8d, 0x3f
or r8d, esi
cmp bpl, 0xf0
jb 0x100a4341
lea rbp, [rdx + 4]
mov qword [r14], rbp
movzx ebp, byte [rdx + 3]
and ecx, 7
shl ecx, 0x12
shl r8d, 6
and ebp, 0x3f
or ebp, r8d
or ebp, ecx
cmp ebp, 0x110000
mov rbx, r9
mov rsi, r10
jne 0x100a4350
mov qword [rsp + 0x290], 0
cmp rax, 1
je 0x100a43ba
lea rdi, [rax + 1]
mov qword [rsp + 0x2b0], rdi
movzx ebp, word [rsp + rax*2 + 0x2c0]
mov rax, rdi
mov r14, qword [rsp + 0x290]
cmp r15, qword [rsp + 0x148]
jne 0x100a41e4
test r14, r14
je 0x100a4309
mov r8, rsi
sub r8, r14
shr r8, 2
sub r8, rdi
inc r8
jmp 0x100a4312
mov r8d, 1
sub r8, rdi
inc r8
lea rcx, [rsp + 0x140]
mov rdx, r15
call fcn.100676d0
mov r13, qword [rsp + 0x140]
mov rax, rdi
jmp 0x100a41e4
shl ecx, 6
or ecx, esi
mov ebp, ecx
mov rsi, r10
jmp 0x100a42dc
shl ecx, 0xc
or r8d, ecx
mov ebp, r8d
mov rbx, r9
mov rsi, r10
cmp ebp, 0xffff
jbe 0x100a42dc
add ebp, 0xffff0000
mov ecx, ebp
shr ecx, 0xa
or ecx, 0xd800
and ebp, 0x3ff
or ebp, 0xdc00
mov word [rsp + 0x2a0], bp
mov ebp, ecx
jmp 0x100a42dc
mov rbx, r15
jmp 0x100a44e7
cmp r15, r15
jne 0x100a43af
lea rcx, [rsp + 0x140]
mov r8d, 1
mov rdx, r15
call fcn.100676d0
mov r13, qword [rsp + 0x140]
mov word [r13 + r15*2], 0
inc r15
mov rsi, qword [rsp + 0x140]
mov rbx, qword [rsp + 0x148]
test rsi, rsi
je 0x100a44df
mov qword [rsp + 0x58], rsi
mov qword [rsp + 0x60], rbx
mov qword [rsp + 0x68], r15
mov rax, qword [rsp + 0x248]
mov qword [rsp + 0x2a0], rax
movdqu xmm0, xmmword [rsp + 0x238]
movdqa xmmword [rsp + 0x290], xmm0
lea rcx, [rsp + 0x80]
lea rdx, [rsp + 0x290]
call fcn.100993e0
mov r14, qword [rsp + 0x80]
mov r15, qword [rsp + 0x88]
test r14, r14
je 0x100a4508
mov r8, qword [rsp + 0x90]
mov qword [rsp + 0x140], r14
mov qword [rsp + 0x148], r15
mov qword [rsp + 0x150], r8
mov rcx, qword [rsp + 0xf8]
mov r9, qword [rcx + 0x20]
mov rax, qword [rcx + 0x30]
movzx ecx, byte [rcx + 0xad]
mov byte [rsp + 0x28], cl
mov qword [rsp + 0x20], rax
lea rcx, [rsp + 0x120]
mov rdx, r14
call fcn.10098e50
mov rdi, qword [rsp + 0x120]
mov rbp, qword [rsp + 0x128]
test rdi, rdi
je 0x100a4565
mov rsi, qword [rsp + 0x130]
mov rax, qword [rsp + 0x68]
mov qword [rsp + 0x110], rax
movups xmm0, xmmword [rsp + 0x58]
movaps xmmword [rsp + 0x100], xmm0
test r15, r15
je 0x100a312f
add r15, r15
mov r8d, 2
mov rcx, r14
mov rdx, r15
call fcn.100028e0
jmp 0x100a312f
mov r14, qword [rsp + 0x240]
mov rax, qword [rsp + 0xe8]
mov qword [rax], rbx
mov qword [rax + 0x10], 2
test r14, r14
jne 0x100a324b
jmp 0x100a3264
mov rax, qword [rsp + 0xe8]
mov qword [rax], r15
mov qword [rax + 0x10], 2
test rbx, rbx
je 0x100a3264
add rbx, rbx
mov r8d, 2
mov rcx, rsi
mov rdx, rbx
jmp 0x100a325f
call sub.kernel32.dll_GetLastError
shl rax, 0x20
or rax, 2
mov rcx, qword [rsp + 0xe8]
mov qword [rcx], rax
mov qword [rcx + 0x10], 2
mov rcx, rdi
call sub.kernel32.dll_CloseHandle
jmp 0x100a3d51
mov rax, qword [rsp + 0xe8]
mov qword [rax], rbp
mov qword [rax + 0x10], 2
test rbx, rbx
je 0x100a4591
add rbx, rbx
mov r8d, 2
mov rcx, rsi
mov rdx, rbx
call fcn.100028e0
test r15, r15
je 0x100a3264
add r15, r15
mov r8d, 2
mov rcx, r14
mov rdx, r15
jmp 0x100a325f
mov r13, r15
jmp 0x100a3a17
call sub.kernel32.dll_GetLastError
shl rax, 0x20
or rax, 2
mov qword [rsp + 0x120], rax
lea rax, [rsp + 0x120]
mov qword [rsp + 0x140], rax
lea rax, [0x1007e810]
mov qword [rsp + 0x148], rax
lea rax, str.comparing_environment_keys_failed:
mov qword [rsp + 0x80], rax
mov qword [rsp + 0x88], 1
mov qword [rsp + 0x90], 0
lea rax, [rsp + 0x140]
mov qword [rsp + 0xa0], rax
mov qword [rsp + 0xa8], 1
lea rdx, str.library_std_src_syswindowsprocess.rs
lea rcx, [rsp + 0x80]
call fcn.100e75e0
jmp 0x100a480a
call fcn.100db020
jmp 0x100a480a
mov edx, 1
mov rcx, rdi
call fcn.100db070
jmp 0x100a480a
call fcn.100db020
jmp 0x100a480a
mov rcx, r13
mov rdx, rsi
call fcn.100db070
jmp 0x100a480a
call fcn.100db020
jmp 0x100a480a
mov edx, 1
mov rcx, rdi
call fcn.100db070
jmp 0x100a480a
lea rcx, str.assertion_failed:_self.height___0
lea r8, [0x1011fc38]
mov edx, 0x21
call fcn.100e76b0
jmp 0x100a480a
mov rcx, r13
mov rdx, rsi
call fcn.100db070
jmp 0x100a480a
lea rcx, str.internal_error:_entered_unreachable_code
lea r8, str.library_std_src_syswindowsmod.rs
mov edx, 0x28
call fcn.100e76b0
jmp 0x100a480a
lea rcx, str.internal_error:_entered_unreachable_code
lea r8, str.library_std_src_syswindowsmod.rs
mov edx, 0x28
call fcn.100e76b0
jmp 0x100a480a
call sub.kernel32.dll_GetLastError
shl rax, 0x20
or rax, 2
mov qword [rsp + 0x80], rax
lea rax, [rsp + 0x80]
mov qword [rsp + 0x1b0], rax
lea rax, [0x1007e810]
mov qword [rsp + 0x1b8], rax
lea rax, str.failure_getting_env_string_from_OS:
mov qword [rsp + 0x290], rax
mov qword [rsp + 0x298], 1
mov qword [rsp + 0x2a0], 0
lea rax, [rsp + 0x1b0]
mov qword [rsp + 0x2b0], rax
mov qword [rsp + 0x2b8], 1
lea rdx, str.library_std_src_syswindowsos.rs
lea rcx, [rsp + 0x290]
call fcn.100e75e0
jmp 0x100a480a
call fcn.100db020
jmp 0x100a480a
lea rcx, str.internal_error:_entered_unreachable_code
lea r8, str.library_std_src_syswindowsmod.rs
mov edx, 0x28
call fcn.100e76b0
jmp 0x100a480a
lea rax, str.library_std_src_syswindowsmod.rs
mov rcx, r8
mov rdx, r14
mov r8, rax
call fcn.100ee380
jmp 0x100a480a
lea r8, str._rustc_90743e7298aca107ddaa0c202a4d3604e29bfeb6librarycore_src_sliceiter.rs
call fcn.100ee2a0
jmp 0x100a480a
lea rax, str.library_std_src_syswindowsmod.rs
mov rcx, r8
mov rdx, r14
mov r8, rax
call fcn.100ee380
jmp 0x100a480a
lea r8, str.library_std_src_syswindowsmod.rs
mov rcx, r15
mov rdx, r13
call fcn.100ee380
jmp 0x100a480a
mov edx, 2
mov rcx, rsi
call fcn.100db070
ud2