Function at 0x1401ef160
Capabilities:
Create a process with modified i/o handles and window
Create process on windows
Encode data using base64
Get common file path
Query environment variable

Disassembly:
push rbp
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbx
sub rsp, 0x6b8
lea rbp, [rsp + 0x80]
movaps xmmword [rbp + 0x620], xmm6
mov qword [rbp + 0x618], 0xfffffffffffffffe
mov byte [rbp + 0x440], r9b
mov qword [rbp + 0x5d0], r8
mov qword [rbp + 0x538], rcx
movzx eax, byte [rdx + 0xa0]
mov qword [rbp + 0x4a8], rdx
mov r8, qword [rdx + 0x98]
test al, al
jne 0x1401ef1e0
test r8, r8
jne 0x1401ef1e0
mov qword [rbp + 0x3e0], 0
lea rdx, [rbp + 0x3e8]
xor eax, eax
mov qword [rbp + 0x5e8], rax
jmp 0x1401efc1d
mov qword [rbp + 0x408], 0
mov qword [rbp + 0x418], 0
test al, al
jne 0x1401ef389
mov qword [rbp + 0x5e0], r8
call qword [sym.imp.kernel32.dll_GetEnvironmentStringsW]
test rax, rax
je 0x1401f2f6e
mov qword [rbp + 0x4b0], rax
lea rsi, [rbp + 0x4b8]
mov qword [rbp + 0x4b8], rax
lea r13, [rbp + 0x570]
lea rdi, [rbp - 0x30]
lea rbx, [rbp + 0x4f0]
lea r14, [rbp + 0x450]
lea r15, [rbp + 0x408]
lea r12, [rbp + 0x550]
mov rcx, rdi
mov rdx, rsi
call fcn.1401edbf0
mov rcx, qword [rbp - 0x30]
movabs rax, 0x8000000000000000
cmp rcx, rax
je 0x1401ef375
mov qword [rbp + 0x5e8], rcx
mov rcx, qword [rbp - 0x28]
movups xmm6, xmmword [rbp - 0x20]
mov rax, qword [rbp - 0x10]
mov qword [rbp + 0x5f8], rax
mov rax, qword [rbp - 8]
mov qword [rbp + 0x608], rax
mov rax, qword [rbp - 0x20]
add rax, rcx
mov qword [rbp + 0x5c0], rcx
mov qword [rbp + 0x450], rcx
mov qword [rbp + 0x458], rax
mov word [rbp + 0x460], 0
mov rcx, rbx
mov rdx, r14
call fcn.1401dfb70
mov rax, qword [rbp + 0x5e8]
mov qword [rbp + 0x550], rax
mov rax, qword [rbp + 0x5c0]
mov qword [rbp + 0x558], rax
movups xmmword [rbp + 0x560], xmm6
mov rax, qword [rbp + 0x500]
mov qword [r13 + 0x10], rax
movups xmm0, xmmword [rbp + 0x4f0]
movups xmmword [r13], xmm0
mov rax, qword [rbp + 0x5f8]
mov qword [rbp + 0x450], rax
mov rax, qword [rbp + 0x608]
mov qword [rbp + 0x458], rax
lea rax, [rbp]
movups xmm0, xmmword [rax]
lea rax, [rbp + 0x460]
movups xmmword [rax], xmm0
mov byte [rbp + 0x5df], 0
mov rcx, rbx
mov rdx, r15
mov r8, r12
mov r9, r14
call fcn.1401dba00
mov rdx, qword [rbp + 0x4f0]
lea rax, [rdx*2]
test rax, rax
je 0x1401ef250
mov rcx, qword [rbp + 0x4f8]
mov r8d, 1
call fcn.140012a40
jmp 0x1401ef250
mov rcx, qword [rbp + 0x4b0]
call qword [sym.imp.kernel32.dll_FreeEnvironmentStringsW]
mov r8, qword [rbp + 0x5e0]
mov rcx, qword [rbp + 0x4a8]
mov rax, qword [rcx + 0x88]
mov rcx, qword [rcx + 0x90]
xor edx, edx
test rax, rax
cmove r8, rax
setne dl
mov qword [rbp + 0x4f0], rdx
mov qword [rbp + 0x4f8], 0
mov qword [rbp + 0x500], rax
mov qword [rbp + 0x508], rcx
mov qword [rbp + 0x510], rdx
mov qword [rbp + 0x518], 0
mov qword [rbp + 0x520], rax
mov qword [rbp + 0x528], rcx
mov qword [rbp + 0x530], r8
lea r14, [rbp + 0x4f0]
nop dword [rax + rax]
mov rcx, r14
call fcn.1401d94d0
mov r15, rax
test rax, rax
je 0x1401efa27
mov rbx, rdx
movabs rax, 0x8000000000000000
cmp qword [rdx], rax
jne 0x1401ef600
mov rbx, qword [rbp + 0x408]
test rbx, rbx
je 0x1401ef400
mov r9, qword [r15 + 0x28]
mov rax, qword [r15 + 0x30]
mov r15, qword [rbp + 0x410]
mov qword [rsp + 0x20], rax
lea rcx, [rbp + 0x4b0]
mov rdx, rbx
mov r8, r15
call fcn.1401dee10
cmp qword [rbp + 0x4b0], 0
jne 0x1401ef400
mov rax, qword [rbp + 0x4b8]
mov rdx, qword [rbp + 0x4c0]
mov rcx, qword [rbp + 0x4c8]
mov byte [rbp + 0x428], 0
test rdx, rdx
je 0x1401ef7b5
mov rcx, qword [rax + rcx*8 + 0x3d8]
mov rax, rdx
dec rax
je 0x1401ef55e
mov r8, rax
and r8, 7
je 0x1401ef4cb
xor r9d, r9d
nop dword [rax + rax]
movzx r10d, word [rcx + 0x3d2]
mov rcx, qword [rcx + r10*8 + 0x3d8]
inc r9
cmp r8, r9
jne 0x1401ef4b0
sub rax, r9
add rdx, 0xfffffffffffffffe
cmp rdx, 7
jb 0x1401ef55e
nop dword [rax]
movzx edx, word [rcx + 0x3d2]
mov rcx, qword [rcx + rdx*8 + 0x3d8]
movzx edx, word [rcx + 0x3d2]
mov rcx, qword [rcx + rdx*8 + 0x3d8]
movzx edx, word [rcx + 0x3d2]
mov rcx, qword [rcx + rdx*8 + 0x3d8]
movzx edx, word [rcx + 0x3d2]
mov rcx, qword [rcx + rdx*8 + 0x3d8]
movzx edx, word [rcx + 0x3d2]
mov rcx, qword [rcx + rdx*8 + 0x3d8]
movzx edx, word [rcx + 0x3d2]
mov rcx, qword [rcx + rdx*8 + 0x3d8]
movzx edx, word [rcx + 0x3d2]
mov rcx, qword [rcx + rdx*8 + 0x3d8]
movzx edx, word [rcx + 0x3d2]
mov rcx, qword [rcx + rdx*8 + 0x3d8]
add rax, 0xfffffffffffffff8
jne 0x1401ef4e0
movzx eax, word [rcx + 0x3d2]
dec rax
mov qword [rbp + 0x4d0], rcx
mov qword [rbp + 0x4d8], 0
mov qword [rbp + 0x4e0], rax
lea rcx, [rbp - 0x30]
lea rdx, [rbp + 0x4d0]
lea r8, [rbp + 0x428]
call fcn.1401de3e0
mov rax, qword [rbp + 0x20]
mov qword [rbp + 0x4a0], rax
movups xmm0, xmmword [rbp + 0x10]
movaps xmmword [rbp + 0x490], xmm0
movups xmm0, xmmword [rbp - 0x30]
movups xmm1, xmmword [rbp - 0x20]
movups xmm2, xmmword [rbp - 0x10]
movups xmm3, xmmword [rbp]
movaps xmmword [rbp + 0x480], xmm3
movaps xmmword [rbp + 0x470], xmm2
movaps xmmword [rbp + 0x460], xmm1
movaps xmmword [rbp + 0x450], xmm0
mov rdx, qword [rbp + 0x28]
mov rax, qword [rbp + 0x38]
movzx ecx, word [rdx + 0x3d2]
cmp rax, rcx
jae 0x1401ef7ea
mov rcx, rdx
jmp 0x1401ef819
mov rsi, qword [r15 + 8]
mov r14, qword [r15 + 0x10]
test r14, r14
je 0x1401ef636
js 0x1401f2e83
movzx eax, byte [0x1403903c1]
mov edi, 1
mov edx, 1
mov rcx, r14
call fcn.140012a30
test rax, rax
jne 0x1401ef63b
jmp 0x1401f2e85
mov eax, 1
mov qword [rbp + 0x608], rax
mov rcx, rax
mov rdx, rsi
mov qword [rbp + 0x5f8], r14
mov r8, r14
call sub.VCRUNTIME140.dll_memcpy
movzx r12d, byte [r15 + 0x18]
mov rsi, qword [r15 + 0x28]
mov r14, qword [r15 + 0x30]
test r14, r14
je 0x1401ef6a5
mov rax, r14
shr rax, 0x3e
lea rdi, [r14 + r14]
test rax, rax
jne 0x1401f2e95
movzx eax, byte [0x1403903c1]
mov r13d, 2
mov edx, 2
mov rcx, rdi
call fcn.140012a30
test rax, rax
je 0x1401f2e98
mov r15, rax
jmp 0x1401ef6ad
mov r15d, 2
xor edi, edi
mov rcx, r15
mov rdx, rsi
mov r8, rdi
call sub.VCRUNTIME140.dll_memcpy
mov rax, qword [rbp + 0x5f8]
mov qword [rbp - 0x30], rax
mov rcx, qword [rbp + 0x608]
mov qword [rbp - 0x28], rcx
mov qword [rbp - 0x20], rax
mov byte [rbp - 0x18], r12b
mov qword [rbp - 0x10], r14
mov qword [rbp - 8], r15
mov qword [rbp], r14
mov rdi, qword [rbx + 8]
mov rsi, qword [rbx + 0x10]
test rsi, rsi
je 0x1401ef727
lea r14, [rbp + 0x4f0]
js 0x1401f2ea8
movzx eax, byte [0x1403903c1]
mov r13d, 1
mov edx, 1
mov rcx, rsi
call fcn.140012a30
test rax, rax
je 0x1401f2eab
mov r15, rax
jmp 0x1401ef734
mov r15d, 1
lea r14, [rbp + 0x4f0]
mov rcx, r15
mov rdx, rdi
mov r8, rsi
call sub.VCRUNTIME140.dll_memcpy
movzx eax, byte [rbx + 0x18]
mov qword [rbp + 0x550], rsi
mov qword [rbp + 0x558], r15
mov qword [rbp + 0x560], rsi
mov byte [rbp + 0x568], al
mov byte [rbp + 0x5de], 0
lea rcx, [rbp + 0x450]
lea rdx, [rbp + 0x408]
lea r8, [rbp - 0x30]
lea r9, [rbp + 0x550]
call fcn.1401dba00
mov rdx, qword [rbp + 0x450]
lea rax, [rdx*2]
test rax, rax
je 0x1401ef400
mov rcx, qword [rbp + 0x458]
mov r8d, 1
call fcn.140012a40
jmp 0x1401ef400
mov qword [rbp + 0x550], rax
mov qword [rbp + 0x558], 0
mov qword [rbp + 0x560], rcx
lea rcx, [rbp - 0x30]
lea rdx, [rbp + 0x550]
lea r8, [rbp + 0x428]
call fcn.1401de3e0
jmp 0x1401ef909
mov r8, qword [rbp + 0x30]
nop
mov rcx, qword [rdx + 0x160]
test rcx, rcx
je 0x1401ef814
inc r8
movzx eax, word [rdx + 0x3d0]
mov rdx, rcx
cmp ax, word [rcx + 0x3d2]
jae 0x1401ef7f0
jmp 0x1401ef819
mov rax, r8
xor ecx, ecx
imul rdx, rax, 0x38
shl rax, 5
mov r8, qword [rcx + rdx + 0x198]
mov qword [rbp + 0x580], r8
movups xmm0, xmmword [rcx + rdx + 0x168]
movups xmm1, xmmword [rcx + rdx + 0x178]
movups xmm2, xmmword [rcx + rdx + 0x188]
movaps xmmword [rbp + 0x570], xmm2
movaps xmmword [rbp + 0x560], xmm1
movaps xmmword [rbp + 0x550], xmm0
mov r8, qword [rbp + 0x480]
mov qword [rcx + rdx + 0x198], r8
movaps xmm0, xmmword [rbp + 0x450]
movaps xmm1, xmmword [rbp + 0x460]
movaps xmm2, xmmword [rbp + 0x470]
movups xmmword [rcx + rdx + 0x188], xmm2
movups xmmword [rcx + rdx + 0x178], xmm1
movups xmmword [rcx + rdx + 0x168], xmm0
movups xmm0, xmmword [rcx + rax]
movups xmm1, xmmword [rcx + rax + 0x10]
lea rdx, [rbp + 0x588]
movups xmmword [rdx + 0x10], xmm1
movups xmmword [rdx], xmm0
lea rdx, [rbp + 0x488]
movups xmm0, xmmword [rdx]
movups xmm1, xmmword [rdx + 0x10]
movups xmmword [rcx + rax], xmm0
movups xmmword [rcx + rax + 0x10], xmm1
movaps xmm0, xmmword [rbp + 0x550]
movaps xmm1, xmmword [rbp + 0x560]
movaps xmm2, xmmword [rbp + 0x570]
movaps xmm3, xmmword [rbp + 0x580]
movaps xmmword [rbp - 0x30], xmm0
movaps xmmword [rbp - 0x20], xmm1
movaps xmmword [rbp - 0x10], xmm2
movaps xmmword [rbp], xmm3
movaps xmm0, xmmword [rbp + 0x590]
movaps xmmword [rbp + 0x10], xmm0
mov rax, qword [rbp + 0x5a0]
mov qword [rbp + 0x20], rax
mov rax, qword [rbp + 0x20]
mov qword [rbp + 0x5a0], rax
movaps xmm0, xmmword [rbp + 0x10]
movaps xmmword [rbp + 0x590], xmm0
movaps xmm0, xmmword [rbp - 0x30]
movaps xmm1, xmmword [rbp - 0x20]
movaps xmm2, xmmword [rbp - 0x10]
movaps xmm3, xmmword [rbp]
movaps xmmword [rbp + 0x580], xmm3
movaps xmmword [rbp + 0x570], xmm2
dec qword [rbp + 0x418]
movaps xmmword [rbp + 0x560], xmm1
movaps xmmword [rbp + 0x550], xmm0
cmp byte [rbp + 0x428], 0
je 0x1401ef99a
test r15, r15
je 0x1401f2edf
mov rax, qword [rbx + 0x3d8]
mov qword [rbp + 0x408], rax
dec r15
mov qword [rbp + 0x410], r15
mov qword [rax + 0x160], 0
mov edx, 0x438
mov r8d, 8
mov rcx, rbx
call fcn.140012a40
mov rdx, qword [rbp + 0x550]
mov rcx, qword [rbp + 0x558]
mov rdi, qword [rbp + 0x570]
mov rsi, qword [rbp + 0x578]
mov rbx, qword [rbp + 0x588]
mov r15, qword [rbp + 0x590]
movabs rax, 0x8000000000000000
cmp rdx, rax
je 0x1401ef400
test rdx, rdx
je 0x1401ef9e7
mov r8d, 1
call fcn.140012a40
test rdi, rdi
je 0x1401efa00
add rdi, rdi
mov r8d, 2
mov rcx, rsi
mov rdx, rdi
call fcn.140012a40
lea rax, [rbx*2]
test rax, rax
je 0x1401ef400
mov r8d, 1
mov rcx, r15
mov rdx, rbx
call fcn.140012a40
jmp 0x1401ef400
movups xmm0, xmmword [rbp + 0x408]
movups xmmword [rbp + 0x3e8], xmm0
mov rax, qword [rbp + 0x418]
mov qword [rbp + 0x3f8], rax
mov qword [rbp + 0x3e0], 1
movzx eax, byte [0x1403903c1]
mov ecx, 4
mov edx, 1
call fcn.140012a30
test rax, rax
je 0x1401f2f19
mov dword [rax], 0x48544150
mov rcx, rax
add rcx, 4
mov qword [rbp + 0x550], rax
mov qword [rbp + 0x558], rcx
mov word [rbp + 0x560], 0
lea rcx, [rbp + 0x450]
lea rdx, [rbp + 0x550]
mov qword [rbp + 0x5c0], rax
call fcn.1401dfb70
mov qword [rbp - 0x30], 4
mov rcx, qword [rbp + 0x5c0]
mov qword [rbp - 0x28], rcx
mov qword [rbp - 0x20], 4
mov qword [rbp - 0x18], 0
movups xmm0, xmmword [rbp + 0x450]
movups xmmword [rbp - 0x10], xmm0
mov rax, qword [rbp + 0x460]
mov qword [rbp], rax
mov rdx, qword [rbp + 0x3e8]
mov rsi, qword [rbp - 8]
test rdx, rdx
je 0x1401efbe3
mov ebx, dword [rbp]
mov rax, qword [rbp + 0x3f0]
mov qword [rbp + 0x5f8], rax
xor eax, eax
mov qword [rbp + 0x5e8], rax
mov r15, qword [sym.imp.kernel32.dll_CompareStringOrdinal]
lea rcx, [rdx + 0x168]
movzx eax, word [rdx + 0x3d2]
mov qword [rbp + 0x5e0], rax
imul r13, rax, 0x38
mov qword [rbp + 0x608], rdx
lea r14, [rdx - 0x10]
mov rdi, 0xffffffffffffffff
nop word cs:[rax + rax]
test r13, r13
je 0x1401efb90
lea r12, [rcx + 0x38]
mov r8, qword [rcx + 0x28]
mov r9d, dword [rcx + 0x30]
mov dword [rsp + 0x20], 1
mov rcx, rsi
mov edx, ebx
call r15
add r13, 0xffffffffffffffc8
add r14, 0x20
inc rdi
mov rcx, r12
cmp eax, 3
je 0x1401efb50
cmp eax, 1
jne 0x1401efbc3
jmp 0x1401efb97
mov rdi, qword [rbp + 0x5e0]
mov rax, qword [rbp + 0x5f8]
sub rax, 1
jb 0x1401f012f
mov qword [rbp + 0x5f8], rax
mov rdx, qword [rbp + 0x608]
mov rdx, qword [rdx + rdi*8 + 0x3d8]
jmp 0x1401efb19
cmp eax, 2
jne 0x1401f2dfd
mov rax, qword [r14 - 8]
mov qword [rbp + 0x5e8], rax
mov rdi, qword [r14]
mov rcx, qword [rbp + 0x5c0]
jmp 0x1401efbec
xor eax, eax
mov qword [rbp + 0x5e8], rax
mov edx, 4
mov r8d, 1
call fcn.140012a40
mov rdx, qword [rbp - 0x10]
test rdx, rdx
je 0x1401efc16
add rdx, rdx
mov r8d, 2
mov rcx, rsi
call fcn.140012a40
lea rdx, [rbp + 0x3e8]
mov rcx, qword [rbp + 0x4a8]
mov r15, qword [rcx + 0x10]
lea rbx, [0x14032c700]
test r15, r15
mov rax, qword [rbp + 0x5d0]
je 0x1401eff9d
mov r8, qword [rcx + 8]
cmp r15, 4
mov qword [rbp + 0x5e0], rdx
jae 0x1401efc59
lea rax, [0x1401f77d0]
jmp 0x1401efc82
mov eax, dword [r8]
bswap eax
xor ecx, ecx
cmp eax, 0x5c5c3f5c
setb cl
cmp eax, 0x5c5c3f5d
adc ecx, 0xffffffff
lea rcx, [0x1401f77f0]
lea rax, [0x1401f77d0]
cmove rax, rcx
mov qword [rbp + 0x5c0], r8
movzx esi, byte [r15 + r8 - 1]
mov byte [rbp + 0x617], 1
mov ecx, esi
call rax
test al, al
mov rax, qword [rbp + 0x5d0]
jne 0x1401eff9d
mov rbx, qword [rbp + 0x5c0]
lea r14, [rbx + r15]
cmp r15, 3
mov qword [rbp + 0x5f8], r15
jbe 0x1401efd1e
movzx eax, byte [r14 - 4]
lea ecx, [rax - 0x41]
cmp cl, 0x1a
setb cl
shl cl, 5
or cl, al
cmp cl, 0x2e
jne 0x1401efd3c
movzx eax, byte [r14 - 3]
lea ecx, [rax - 0x41]
cmp cl, 0x1a
setb cl
shl cl, 5
or cl, al
cmp cl, 0x65
jne 0x1401efd3c
movzx eax, byte [r14 - 2]
lea ecx, [rax - 0x41]
cmp cl, 0x1a
setb cl
shl cl, 5
or cl, al
cmp cl, 0x78
jne 0x1401efd3c
lea eax, [rsi - 0x41]
cmp al, 0x1a
setb al
shl al, 5
or al, sil
cmp al, 0x65
sete al
jmp 0x1401efd3e
xor eax, eax
cmp r15, rax
je 0x1401efeb6
movzx ecx, byte [rbx + rax]
cmp ecx, 0x2f
je 0x1401efda9
inc rax
cmp ecx, 0x5c
jne 0x1401efd20
jmp 0x1401efda9
xor eax, eax
xor ecx, ecx
cmp r15, rcx
je 0x1401efeb6
movzx edx, byte [rbx + rcx]
cmp edx, 0x2f
je 0x1401efd5a
inc rcx
cmp edx, 0x5c
jne case.0x1401e2cb4.438
test al, al
je 0x1401efda9
mov qword [rbp + 0x5c8], r14
mov byte [rbp + 0x617], 1
lea rcx, [rbp - 0x30]
mov rdx, rbx
mov r8, r15
call fcn.1401f60d0
mov rcx, qword [rbp - 0x30]
mov rax, qword [rbp - 0x28]
movabs rdx, 0x8000000000000000
add byte [rax], al
add byte [rax + 0xfd13948], al
test dword [rbp + 3], ebp
add byte [rax], al
mov qword [rbp + 0x4d8], rax
mov qword [rbp + 0x4d0], rdx
jmp 0x1401f022c
test r15, r15
js 0x1401f2fe2
movzx eax, byte [0x1403903c1]
mov esi, 1
mov edx, 1
mov rcx, r15
call fcn.140012a30
test rax, rax
je 0x1401f2fe4
mov rdi, rax
mov rcx, rax
mov rdx, rbx
mov r8, r15
call sub.VCRUNTIME140.dll_memcpy
mov qword [rbp - 0x30], r15
mov qword [rbp - 0x28], rdi
mov qword [rbp - 0x20], r15
mov qword [rbp - 0x18], 0
lea rdx, str..exeprogram_not_found
lea rcx, [rbp - 0x30]
mov r8d, 4
mov qword [rbp + 0x608], rdi
call fcn.1401f7110
mov rbx, qword [rbp - 0x30]
mov r15, qword [rbp - 0x28]
mov rsi, qword [rbp - 0x20]
mov qword [rbp + 0x3d8], r15
mov qword [rbp + 0x3d0], rbx
mov byte [rbp + 0x5dd], 1
lea rcx, [rbp + 0x550]
mov rdx, r15
mov r8, rsi
call fcn.1401f4430
movabs rdi, 0x8000000000000000
cmp qword [rbp + 0x550], rdi
mov qword [rbp + 0x5c8], r14
jne 0x1401f0047
mov qword [rbp + 0x608], rbx
mov qword [rbp + 0x5f8], r15
mov rcx, r15
mov rdx, rsi
call fcn.1401e7870
test rax, rax
je 0x1401f00f7
cmp rdx, 2
jne 0x1401f0071
movzx ecx, word [rax]
cmp ecx, 0x2e2e
jne 0x1401f0071
mov r8d, 2
xor ecx, ecx
mov r11, qword [rbp + 0x5f8]
jmp 0x1401f016e
xor r8d, r8d
lea r11, str.nul_byte_found_in_provided_data
mov rax, rbx
jmp 0x1401efedc
xor r8d, r8d
test cx, cx
je 0x1401eff93
mov cx, 1
test r8w, r8w
jne 0x1401efed0
cmp rax, r14
je 0x1401f00b4
movzx r9d, byte [rax]
movzx edx, r9b
test dl, dl
js 0x1401eff00
inc rax
jmp 0x1401eff62
mov r8d, edx
and r8d, 0x1f
movzx r10d, byte [rax + 1]
and r10d, 0x3f
cmp dl, 0xdf
jbe 0x1401eff54
movzx edx, byte [rax + 2]
shl r10d, 6
and edx, 0x3f
or edx, r10d
cmp r9b, 0xf0
jb 0x1401eff6c
movzx r9d, byte [rax + 3]
add rax, 4
and r8d, 7
shl r8d, 0x12
shl edx, 6
and r9d, 0x3f
or r9d, edx
or r9d, r8d
mov edx, r9d
cmp edx, 0xffff
jbe 0x1401eff62
jmp 0x1401eff7f
add rax, 2
shl r8d, 6
or r8d, r10d
mov edx, r8d
xor r8d, r8d
mov ecx, edx
jmp 0x1401efed3
add rax, 3
shl r8d, 0xc
or edx, r8d
cmp edx, 0xffff
add byte [rsi - 0x1d], dh
and edx, 0x3ff
or edx, 0xdc00
mov r8d, edx
jmp 0x1401efed3
mov rbx, r11
mov rax, qword [rbp + 0x5d0]
mov rsi, rbx
mov rcx, qword [rbp + 0x538]
mov qword [rcx], rsi
mov qword [rcx + 0x10], 2
cmp qword [rbp + 0x3e0], 0
je 0x1401f001d
mov rcx, qword [rbp + 0x3e8]
test rcx, rcx
je 0x1401efffd
mov rdx, qword [rbp + 0x3f0]
mov rax, qword [rbp + 0x3f8]
mov qword [rbp - 0x28], 0
mov qword [rbp - 0x20], rcx
mov qword [rbp - 0x18], rdx
mov qword [rbp - 8], 0
mov qword [rbp], rcx
mov qword [rbp + 8], rdx
mov ecx, 1
jmp 0x1401f0001
xor ecx, ecx
xor eax, eax
mov qword [rbp - 0x30], rcx
mov qword [rbp - 0x10], rcx
mov qword [rbp + 0x10], rax
lea rcx, [rbp - 0x30]
call fcn.1401da500
mov rax, qword [rbp + 0x5d0]
cmp dword [rax], 4
jb 0x1401f002c
mov rcx, qword [rax + 8]
call qword [sym.imp.kernel32.dll_CloseHandle]
movaps xmm6, xmmword [rbp + 0x620]
add rsp, 0x6b8
pop rbx
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
pop rbp
ret
mov rax, qword [rbp + 0x560]
mov qword [rbp + 0x4e0], rax
movups xmm0, xmmword [rbp + 0x550]
movaps xmmword [rbp + 0x4d0], xmm0
test rbx, rbx
jne 0x1401f021b
scasd eax, dword [rdi]
add dword [rax], eax
invalid
jmp 0x1401f022c
xor r10d, r10d
mov r8, rax
mov r11, qword [rbp + 0x5f8]
nop
cmp rdx, r10
je case.0x1401e6887.185
invalid
stosd dword [rdi], eax
add byte [rax], al
invalid
mov r9, r10
lea rcx, [r8 - 1]
inc r10
cmp byte [r8 + rdx - 1], 0x2e
mov r8, rcx
jne 0x1401f0080
mov r8, rdx
sub r8, r10
jne 0x1401f0165
invalid
xor ecx, ecx
mov r8, rdx
jmp 0x1401f016e
add byte [rax], al
invalid
cmp r15, 0xf
mov qword [rbp + 0x5c8], r14
ja 0x1401f013e
xor eax, eax
mov qword [rbp + 0x5b8], rax
test dword [rax + 0x31000005], edi
ror byte [rax - 0x75], 0x8d
mov ecx, dword [rbp + 0x5e8]
nop word cs:[rax + rax]
cmp byte [rbx + rax], 0x2e
je 0x1401f0e76
invalid
inc rax
cmp r15, rax
jne 0x1401f00e0
jmp 0x1401f0e82
mov r11, qword [rbp + 0x5f8]
jmp 0x1401f01bc
add byte [rax], al
mov rdx, qword [rbp - 0x20]
mov qword [rbp - 0x30], rcx
mov dword [rbp - 0x30], ecx
mov qword [rbp - 0x28], rax
mov qword [rbp - 0x20], rdx
push rbp
loopne 0x1401f00da
test dword [rdi], edx
invalid
add byte [rax], al
add dword [rax - 0x73], ecx
invalid
rol byte [rax + rax], 1
add byte [rax - 0x73], cl
push rbp
shr al, 1
push rsi
invalid
invalid
invalid
jmp 0x1401f022c
add byte [rax], al
jmp 0x1401efbda
mov rcx, rax
mov r8, rdx
xor eax, eax
jmp 0x1401f016e
mov byte [rbp + 0x617], 1
mov cl, 0x2e
mov rdx, rbx
mov r8, r15
call fcn.14020a850
add dword [rax], eax
mov qword [rbp + 0x5b8], rax
mov rcx, qword [rbp + 0x5e8]
jmp 0x1401f0e82
add rcx, rdx
inc rcx
inc ecx
mov rdx, r9
test rax, rax
cmovne rcx, rax
test rcx, rcx
je 0x1401f01bc
test rax, rax
cmove r8, rdx
add rcx, r8
sub rcx, r11
je 0x1401f01b9
cmp rsi, rcx
jbe 0x1401f01b2
cmp byte [r11 + rcx], 0xbf
jg case.0x1401e6c5a.153
lea rcx, [0x14032b80e]
lea r8, [0x14032b848]
mov edx, 0x37
add byte [rax], al
invalid
call fcn.14021b7a0
jmp 0x1401f306d
jne 0x1401f0195
cmp rsi, rcx
jb 0x1401f01bc
mov rsi, rcx
lea rcx, [rbp - 0x30]
mov rdx, r11
mov r8, rsi
call fcn.1401f60d0
add byte [rax], al
mov rcx, qword [rbp - 0x30]
mov rax, qword [rbp - 0x28]
mov eax, dword [rbp - 0x28]
cmp rcx, rdi
jne case.0x1401e7645.140
mov qword [rbp + 0x4d8], rax
mov qword [rbp + 0x4d0], rdi
jmp 0x1401f0208
mov rdx, qword [rbp - 0x20]
mov qword [rbp - 0x30], rcx
mov qword [rbp - 0x28], rax
mov qword [rbp - 0x20], rdx
mov dword [rbp - 0x20], edx
lea rcx, [rbp + 0x4d0]
lea rdx, [rbp - 0x30]
call fcn.1401ec580
js case.0x1401e70c7.168
invalid
invalid
mov rbx, qword [rbp + 0x608]
test rbx, rbx
mov r15, qword [rbp + 0x5f8]
je 0x1401f022c
mov r8d, 1
mov rcx, r15
mov rdx, rbx
call fcn.140012a40
sub dl, ah
invalid
mov rcx, qword [rbp + 0x4d0]
mov rsi, qword [rbp + 0x4d8]
movabs rax, 0x8000000000000000
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax - 0x477276b8], al
mov dword [rbp + 0x5b8], ecx
cmp rcx, rax
jne 0x1401f025c
mov rax, qword [rbp + 0x5d0]
jmp 0x1401effa0
mov rdi, qword [rbp + 0x4e0]
cmp rdi, 4
mov qword [rbp + 0x5f8], rsi
mov ch, 0xf8
add eax, 0x89480000
mov ebp, 0x540
invalid
jb 0x1401f029d
movabs rax, 0x5c003f005c005c
cmp qword [rsi], rax
je 0x1401f05cd
test byte [rbx + 3], al
add byte [rax], al
movabs rax, 0x5c003f003f005c
cmp qword [rsi], rax
je 0x1401f05cd
xor byte [rbx], al
add byte [rax], al
mov qword [rbp + 0x550], 0
mov qword [rbp + 0x558], 2
mov qword [rbp + 0x560], 0
test dword [rax + 5], esp
add byte [rax], al
add byte [rax], al
add byte [rax], al
invalid
mov r8d, 0x200
mov eax, 2
mov qword [rbp + 0x608], rax
xor esi, esi
xor r14d, r14d
xor edi, edi
cmp r8, 0x201
clc
add dword [rdx], eax
add byte [rax], al
jb case.0x1401e61c7.257
jmp 0x1401f0310
jae 0x1401f03d9
cmp r8, 0x201
jae 0x1401f0310
mov r15d, 0x200
lea rbx, [rbp - 0x30]
lea ebx, [rbp - 0x30]
mov r12, r8
jmp case.0x1401e6789.231
sub r8, rdi
sub r14, rdi
cmp r8, r14
cmp eax, esi
jbe 0x1401f033f
lea rcx, [rbp + 0x550]
mov rdx, rdi
call fcn.140219840
add al, byte [rax]
mov rsi, qword [rbp + 0x550]
mov rax, qword [rbp + 0x558]
mov qword [rbp + 0x608], rax
test dword [rax], ecx
invalid
add byte [rax], al
mov eax, 0xffffffff
cmp rsi, rax
mov edi, 0xffffffff
invalid
cmovb rdi, rsi
mov qword [rbp + 0x560], rdi
mov r14, rsi
mov r15, rdi
dec dword [rax - 0x75]
popfq
or byte [rsi], al
add byte [rax], al
mov r12, rdi
xor ecx, ecx
call qword [sym.imp.kernel32.dll_SetLastError]
add byte [rax - 0x75], cl
invalid
clc
invalid
add byte [rax], al
mov edx, r12d
mov r8, rbx
xor r9d, r9d
call qword [sym.imp.kernel32.dll_GetFullPathNameW]
mov r13d, eax
test eax, eax
jne 0x1401f039a
call qword [sym.imp.kernel32.dll_GetLastError]
test eax, eax
ror byte [rdi], 0x85
add r8b, byte [rax]
invalid
mov r8d, r13d
cmp r12, r8
jne 0x1401f02f0
invalid
invalid
invalid
invalid
call qword [sym.imp.kernel32.dll_GetLastError]
cmp eax, 0x7a
jne 0x1401f2ec2
add r12, r12
mov eax, 0xffffffff
cmp r12, rax
cmovae r12, rax
mov r8, r12
cmp r8, 0x201
add al, byte [rax]
add byte [rdi], cl
cmp dword [rdi + rdi*8], 0xffffffff
invalid
invalid
jmp case.0x1401e61c7.257
cmp r15, r8
jb 0x1401f2ff8
sub al, 0
invalid
cmp r13d, 4
mov r14, qword [rbp + 0x5c0]
jb 0x1401f045f
cmp word [rbx + r8*2 - 8], 0x2e
jne 0x1401f045f
movzx eax, word [rbx + r8*2 - 6]
xor esi, esi
lea ecx, [rax - 0x42]
mov esi, 0x7721f983
pop rcx
lea rdx, [0x14032df24]
movsxd rcx, dword [rdx + rcx*4]
add rcx, rdx
jmp rcx
movzx ecx, word [rbx + r8*2 - 4]
or ecx, 0x20
cmp ecx, 0x61
jne 0x1401f0437
movzx ecx, word [rbx + r8*2 - 2]
mov sil, 1
or ecx, 0x20
cmp ecx, 0x74
je case.0x1401f0416.68
invalid
cmp ax, 0x43
jne 0x1401f045f
movzx eax, word [rbx + r8*2 - 4]
or eax, 0x20
cmp eax, 0x6d
clc
insd dword [rdi], dx
jne 0x1401f045f
movzx eax, word [rbx + r8*2 - 2]
add eax, 0xffffffbc
sar byte [rcx + rbp*4 + 0xffdf], 0x40
sete dh
invalid
jmp case.0x1401f0416.68
xor esi, esi
mov rdx, qword [rbp + 0x550]
test rdx, rdx
invalid
je 0x1401f0482
mov rcx, qword [rbp + 0x558]
add rdx, rdx
mov r8d, 2
mov eax, 2
call fcn.140012a40
mov dword [rbp + 0x5c0], esi
test sil, sil
je 0x1401f0734
mov qword [rbp + 0x550], 0
mov qword [rbp + 0x558], 2
mov qword [rbp + 0x560], 0
mov esi, 0x200
mov eax, 2
mov qword [rbp + 0x608], rax
test dword [rax], ecx
invalid
add byte [rax], al
xor eax, eax
mov qword [rbp + 0x5e8], rax
xor edi, edi
xor ebx, ebx
cmp rsi, 0x201
add dword [rdx], eax
add byte [rax], al
jb case.0x1401e7f2f.133
jmp 0x1401f0500
jae 0x1401f062e
cmp rsi, 0x201
jae 0x1401f0500
mov r15d, 0x200
lea r14, [rbp - 0x30]
lea esi, [rbp - 0x30]
mov r12, rsi
jmp 0x1401f0565
sub rsi, rbx
sub rdi, rbx
cmp rsi, rdi
jbe 0x1401f0539
lea rcx, [rbp + 0x550]
mov rdx, rbx
mov r8, rsi
call fcn.140219840
mov rax, qword [rbp + 0x550]
mov qword [rbp + 0x5e8], rax
mov rax, qword [rbp + 0x558]
mov qword [rbp + 0x608], rax
mov eax, 0xffffffff
mov rdi, qword [rbp + 0x5e8]
cmp rdi, rax
mov ebx, 0xffffffff
cmovb rbx, rdi
mov qword [rbp + 0x560], rbx
mov r15, rbx
mov r14, qword [rbp + 0x608]
mov r12, rbx
xor ecx, ecx
call qword [sym.imp.kernel32.dll_SetLastError]
mov rcx, r14
mov edx, r12d
call qword [sym.imp.kernel32.dll_GetSystemDirectoryW]
mov r13d, eax
test eax, eax
jne 0x1401f058e
call qword [sym.imp.kernel32.dll_GetLastError]
test eax, eax
jne 0x1401f0669
mov esi, r13d
cmp r12, rsi
jne 0x1401f04e0
invalid
invalid
call qword [sym.imp.kernel32.dll_GetLastError]
cmp eax, 0x7a
jne 0x1401f2efc
add r12, r12
mov eax, 0xffffffff
cmp r12, rax
cmovae r12, rax
mov rsi, r12
cmp rsi, 0x201
jae 0x1401f0500
jmp case.0x1401e7f2f.133
cmp rdi, 4
jne 0x1401f06ad
xor r8d, r8d
mov r14, qword [rbp + 0x5c0]
add eax, 0x3ce90000
add dword [rax], eax
invalid
call qword [sym.imp.kernel32.dll_GetLastError]
mov esi, eax
shl rsi, 0x20
or rsi, 2
mov rdx, qword [rbp + 0x550]
test rdx, rdx
je 0x1401f0617
mov rcx, qword [rbp + 0x558]
add rdx, rdx
mov r8d, 2
call fcn.140012a40
mov rax, qword [rbp + 0x538]
mov qword [rax], rsi
mov qword [rax + 0x10], 2
jmp 0x1401f25b4
cmp r15, rsi
jb 0x1401f300f
test r13d, r13d
je 0x1401f08ad
lea rbx, [rsi + rsi]
movzx eax, byte [0x1403903c1]
mov edx, 2
mov rcx, rbx
call fcn.140012a30
test rax, rax
je 0x1401f3032
mov rdi, rax
jmp 0x1401f08b4
call qword [sym.imp.kernel32.dll_GetLastError]
shl rax, 0x20
mov rdx, qword [rbp + 0x550]
test rdx, rdx
je 0x1401f069a
mov rcx, qword [rbp + 0x558]
add rdx, rdx
mov r8d, 2
mov rsi, rax
call fcn.140012a40
mov rax, rsi
or rax, 2
mov rdx, rax
mov rax, qword [rbp + 0x5d0]
jmp 0x1401f0ace
cmp word [rsi + rdi*2 - 0xa], 0x2e
mov r14, qword [rbp + 0x5c0]
jne 0x1401f071f
movzx eax, word [rsi + rdi*2 - 8]
xor r8d, r8d
lea ecx, [rax - 0x42]
cmp ecx, 0x21
ja case.0x1401f06da.68
lea rdx, [0x14032dfac]
movsxd rcx, dword [rdx + rcx*4]
add rcx, rdx
jmp rcx
movzx ecx, word [rsi + rdi*2 - 6]
or ecx, 0x20
cmp ecx, 0x61
jne 0x1401f06f9
movzx ecx, word [rsi + rdi*2 - 4]
mov r8b, 1
or ecx, 0x20
cmp ecx, 0x74
je case.0x1401f06da.68
cmp ax, 0x43
jne 0x1401f071f
movzx eax, word [rsi + rdi*2 - 6]
or eax, 0x20
cmp eax, 0x6d
jne 0x1401f071f
movzx eax, word [rsi + rdi*2 - 4]
add eax, 0xffffffbc
test eax, 0xffdf
sete r8b
jmp case.0x1401f06da.68
xor r8d, r8d
mov esi, r8d
mov dword [rbp + 0x5c0], esi
test sil, sil
jne 0x1401f0491
mov rax, qword [rbp + 0x4a8]
mov rsi, qword [rax + 0x28]
mov rdi, qword [rax + 0x30]
mov bl, byte [rax + 0xc9]
mov qword [rbp + 0x550], 0
mov qword [rbp + 0x558], 2
mov qword [rbp + 0x560], 0
lea rcx, [rbp + 0x550]
call fcn.1401df510
mov rax, qword [rbp + 0x558]
mov word [rax], 0x22
mov qword [rbp + 0x560], 1
mov qword [rbp - 0x30], r14
mov rax, qword [rbp + 0x5c8]
mov qword [rbp - 0x28], rax
mov word [rbp - 0x20], 0
lea rcx, [rbp + 0x550]
lea rdx, [rbp - 0x30]
call fcn.1401df9e0
mov r14, qword [rbp + 0x560]
cmp r14, qword [rbp + 0x550]
jne 0x1401f07ce
lea rcx, [rbp + 0x550]
call fcn.1401df510
mov rax, qword [rbp + 0x558]
mov word [rax + r14*2], 0x22
inc r14
mov qword [rbp + 0x560], r14
lea rax, [rdi + rdi*4]
lea r14, [rsi + rax*8]
lea rdi, [rbp + 0x550]
nop word cs:[rax + rax]
cmp rsi, r14
je 0x1401f0875
mov r15, qword [rbp + 0x560]
cmp r15, qword [rbp + 0x550]
jne 0x1401f081d
mov rcx, rdi
call fcn.1401df510
mov rax, qword [rbp + 0x558]
mov word [rax + r15*2], 0x20
inc r15
mov qword [rbp + 0x560], r15
mov rcx, rdi
mov rdx, rsi
mov r8d, ebx
call fcn.1401ec0d0
add rsi, 0x28
test rax, rax
je 0x1401f0800
mov rdx, qword [rbp + 0x550]
test rdx, rdx
je 0x1401f0896
mov rcx, qword [rbp + 0x558]
add rdx, rdx
mov r8d, 2
mov rsi, rax
call fcn.140012a40
mov rax, rsi
jmp 0x1401f0896
mov rcx, qword [rbp + 0x550]
mov rax, qword [rbp + 0x558]
movabs rdx, 0x8000000000000000
cmp rcx, rdx
jne 0x1401f0d4a
mov rcx, qword [rbp + 0x538]
mov qword [rcx], rax
mov qword [rcx + 0x10], 2
jmp 0x1401f25b4
mov edi, 2
xor ebx, ebx
mov rcx, rdi
mov rdx, r14
mov r8, rbx
call sub.VCRUNTIME140.dll_memcpy
mov rdx, qword [rbp + 0x550]
test rdx, rdx
je 0x1401f08e3
mov rcx, qword [rbp + 0x558]
add rdx, rdx
mov r8d, 2
call fcn.140012a40
mov qword [rbp + 0x450], rsi
mov qword [rbp + 0x458], rdi
mov qword [rbp + 0x460], rsi
lea r15, [0x14032c752]
xor r12d, r12d
lea rbx, [rbp + 0x450]
xor r14d, r14d
mov rax, qword [rbp + 0x5d0]
jmp 0x1401f0932
mov r14d, ecx
mov word [rdi + rsi*2], r13w
inc rsi
mov qword [rbp + 0x460], rsi
test r15, r15
je 0x1401f09b0
test r14w, r14w
je 0x1401f0990
xor ecx, ecx
mov r13d, r14d
cmp rsi, qword [rbp + 0x450]
jne 0x1401f0920
lea rax, [0x14032c752]
sub rax, r15
add rax, 0xa
movabs rdx, 0xaaaaaaaaaaaaaaab
mul rdx
mov r8, rdx
shr r8, 1
cmp cx, 1
mov rax, r12
adc rax, 0xffffffffffffffff
sub r8, rax
inc r8
mov r14d, ecx
jmp 0x1401f09dc
lea rcx, [0x14032c75a]
cmp r15, rcx
je 0x1401f09b0
movzx ecx, byte [r15]
movzx r13d, cl
test r13b, r13b
js 0x1401f09fd
inc r15
xor ecx, ecx
jmp 0x1401f0942
cmp r12, 1
je 0x1401f0aa3
mov r12d, 1
xor r13d, r13d
mov r15d, 0
mov r8d, 0
cmp rsi, qword [rbp + 0x450]
jne 0x1401f0923
inc r8
mov rcx, rbx
mov rdx, rsi
call fcn.140219840
mov rdi, qword [rbp + 0x458]
mov rax, qword [rbp + 0x5d0]
jmp 0x1401f0923
mov eax, r13d
and eax, 0x1f
movzx edx, byte [r15 + 1]
and edx, 0x3f
cmp r13b, 0xdf
jbe 0x1401f0a45
movzx r13d, byte [r15 + 2]
shl edx, 6
and r13d, 0x3f
or r13d, edx
cmp cl, 0xf0
jb 0x1401f0a53
movzx ecx, byte [r15 + 3]
add r15, 4
and eax, 7
shl eax, 0x12
shl r13d, 6
and ecx, 0x3f
or ecx, r13d
or ecx, eax
mov r13d, ecx
jmp 0x1401f0a5d
add r15, 2
shl eax, 6
or eax, edx
mov r13d, eax
jmp 0x1401f0a95
add r15, 3
shl eax, 0xc
or r13d, eax
cmp r13d, 0xffff
jbe 0x1401f0a95
lea eax, [r13 + 0xff0000]
shr eax, 0xa
or eax, 0xd800
and r13d, 0x3ff
or r13d, 0xdc00
mov ecx, r13d
mov r13d, eax
mov rax, qword [rbp + 0x5d0]
jmp 0x1401f0942
mov rax, qword [rbp + 0x5d0]
xor ecx, ecx
jmp 0x1401f0942
mov rdx, qword [rbp + 0x450]
mov rcx, qword [rbp + 0x458]
mov qword [rbp + 0x608], rcx
movabs rcx, 0x8000000000000000
cmp rdx, rcx
jne 0x1401f0ae7
mov rdx, qword [rbp + 0x608]
mov rcx, qword [rbp + 0x538]
mov qword [rcx], rdx
mov qword [rcx + 0x10], 2
xor esi, esi
jmp 0x1401f25bd
mov qword [rbp + 0x5e8], rdx
xor edi, edi
test dil, dil
jne 0x1401f3023
mov rax, qword [rbp + 0x4a8]
mov rcx, qword [rax + 0x28]
mov qword [rbp + 0x548], rcx
mov rcx, qword [rax + 0x30]
mov qword [rbp + 0x448], rcx
movzx eax, byte [rax + 0xc9]
mov byte [rbp + 0x5c8], al
movzx eax, byte [0x1403903c1]
mov edi, 2
mov ecx, 0x14
mov edx, 2
call fcn.140012a30
test rax, rax
je 0x1401f3023
mov ecx, 0xa
mov word [rax], 0x63
mov qword [rbp - 0x30], rcx
mov qword [rbp - 0x28], rax
mov qword [rbp - 0x20], 1
lea r15, [0x14032c242]
mov edi, 1
xor esi, esi
lea r13, [0x14032c25d]
lea r12, [0x14032c241]
lea rbx, [rbp - 0x30]
jmp 0x1401f0bd4
mov rax, r12
sub rax, r15
add rax, 0x1e
movabs rcx, 0xaaaaaaaaaaaaaaab
mul rcx
shr rdx, 1
cmp r14w, 1
sbb rdx, 0
lea r8, [rdx + 2]
mov rcx, rbx
mov rdx, rdi
call fcn.140219840
mov rax, qword [rbp - 0x28]
mov word [rax + rdi*2], si
inc rdi
mov qword [rbp - 0x20], rdi
mov esi, r14d
test si, si
je 0x1401f0bf0
xor r14d, r14d
cmp rdi, qword [rbp - 0x30]
jne 0x1401f0bc6
jmp 0x1401f0b90
cmp r15, r13
je 0x1401f0cc9
movzx edx, byte [r15]
movzx esi, dl
test sil, sil
js 0x1401f0c16
inc r15
xor r14d, r14d
cmp rdi, qword [rbp - 0x30]
jne 0x1401f0bc6
jmp 0x1401f0b90
mov ecx, esi
and ecx, 0x1f
movzx r8d, byte [r15 + 1]
and r8d, 0x3f
cmp sil, 0xdf
jbe 0x1401f0c67
movzx esi, byte [r15 + 2]
shl r8d, 6
and esi, 0x3f
or esi, r8d
cmp dl, 0xf0
jb 0x1401f0c85
movzx edx, byte [r15 + 3]
add r15, 4
and ecx, 7
shl ecx, 0x12
shl esi, 6
and edx, 0x3f
or edx, esi
or edx, ecx
mov esi, edx
cmp esi, 0xffff
jbe 0x1401f0bd9
jmp 0x1401f0c9a
add r15, 2
shl ecx, 6
or ecx, r8d
mov esi, ecx
xor r14d, r14d
cmp rdi, qword [rbp - 0x30]
jne 0x1401f0bc6
jmp 0x1401f0b90
add r15, 3
shl ecx, 0xc
or esi, ecx
cmp esi, 0xffff
jbe 0x1401f0bd9
lea ecx, [rsi + 0xff0000]
shr ecx, 0xa
or ecx, 0xd800
and esi, 0x3ff
or esi, 0xdc00
mov r14d, esi
mov esi, ecx
cmp rdi, qword [rbp - 0x30]
jne 0x1401f0bc6
jmp 0x1401f0b90
mov rdi, qword [rbp - 0x20]
mov qword [rbp + 0x560], rdi
movups xmm0, xmmword [rbp - 0x30]
movaps xmmword [rbp + 0x550], xmm0
cmp rdi, qword [rbp + 0x550]
jne 0x1401f0cf4
lea rcx, [rbp + 0x550]
call fcn.1401df510
mov rsi, qword [rbp + 0x558]
mov word [rsi + rdi*2], 0x22
inc rdi
mov qword [rbp + 0x560], rdi
mov r9, qword [rbp + 0x540]
lea rcx, [r9 + r9]
xor edx, edx
lea rax, str.Windows_file_names_may_not_contain_____or_end_with___
mov r8, qword [rbp + 0x5f8]
nop word cs:[rax + rax]
cmp rcx, rdx
je 0x1401f0e41
cmp word [r8 + rdx], 0x22
lea rdx, [rdx + 2]
jne 0x1401f0d30
jmp 0x1401f255a
mov rsi, qword [rbp + 0x560]
mov dword [rbp + 0x448], 0
mov rdx, qword [rbp + 0x5b8]
mov qword [rbp + 0x5e8], rdx
mov rdx, qword [rbp + 0x5f8]
mov qword [rbp + 0x608], rdx
mov qword [rbp + 0x4d0], rcx
mov qword [rbp + 0x4d8], rax
mov qword [rbp + 0x4e0], rsi
cmp rsi, rcx
jne 0x1401f0dab
mov byte [rbp + 0x607], 1
lea rcx, [rbp + 0x4d0]
call fcn.1401df510
mov rax, qword [rbp + 0x4d8]
mov word [rax + rsi*2], 0
inc rsi
mov qword [rbp + 0x4e0], rsi
mov rcx, qword [rbp + 0x4a8]
cmp byte [rcx + 0xc8], 0
mov eax, 0x400
mov r13d, 0x608
cmove r13d, eax
or r13d, dword [rcx + 0xc4]
cmp qword [rbp + 0x3e0], 0
je 0x1401f1096
mov rax, qword [rbp + 0x5e0]
mov rsi, qword [rax + 0x10]
mov qword [rbp + 0x4c0], rsi
movups xmm0, xmmword [rax]
movaps xmmword [rbp + 0x4b0], xmm0
mov qword [rbp + 0x4f0], 0
mov qword [rbp + 0x4f8], 2
mov qword [rbp + 0x500], 0
test rsi, rsi
je 0x1401f20c9
mov r14d, 2
xor r15d, r15d
jmp 0x1401f20fa
test r9, r9
je 0x1401f1204
mov rcx, qword [rbp + 0x5f8]
movzx ecx, word [rcx + r9*2 - 2]
cmp cx, 0x5c
je 0x1401f255a
xor ebx, ebx
test cx, cx
mov rax, qword [rbp + 0x5f8]
cmove rbx, rax
jmp 0x1401f120d
mov eax, 1
mov qword [rbp + 0x5b8], rax
test rcx, rcx
je 0x1401f0ed6
add rdi, rcx
mov qword [rbp + 0x550], rcx
mov qword [rbp + 0x558], rdi
mov word [rbp + 0x560], 0
mov byte [rbp + 0x568], 1
mov byte [rbp + 0x617], 1
lea rcx, [rbp - 0x30]
lea rdx, [rbp + 0x550]
call fcn.1401eddb0
mov rdx, qword [rbp - 0x30]
movabs r14, 0x8000000000000000
cmp rdx, r14
jne 0x1401f0fa0
mov byte [rbp + 0x617], 1
lea rcx, [rbp + 0x550]
call fcn.1401ee050
mov rcx, qword [rbp + 0x550]
movabs rax, 0x8000000000000000
mov qword [rbp + 0x608], rcx
cmp rcx, rax
jne 0x1401f0f1e
lea rcx, [rbp + 0x558]
mov byte [rbp + 0x617], 1
call fcn.1401da850
jmp 0x1401f196a
mov rcx, qword [rbp + 0x558]
mov rsi, qword [rbp + 0x560]
mov rdi, qword [rbp + 0x568]
mov byte [rbp + 0x5f7], 0
mov qword [rbp + 0x5e8], rcx
mov rdx, rsi
call fcn.1401e7740
test rax, rax
mov rax, qword [rbp + 0x5c0]
je 0x1401f18d5
test rdx, rdx
je 0x1401f18d2
cmp rsi, rdx
jbe 0x1401f18c7
mov rcx, qword [rbp + 0x5e8]
cmp byte [rcx + rdx], 0xbf
jg 0x1401f18cd
mov byte [rbp + 0x5f7], 0
lea rcx, [0x14032b80e]
lea r8, [0x14032b848]
mov edx, 0x37
call fcn.14021b7a0
jmp 0x1401f306d
lea rsi, [rbp - 0x30]
lea rdi, [rbp + 0x550]
lea rbx, [rbp + 0x450]
lea r12, str.exe.NULcmd.exemaximum_number_of_ProcThreadAttributes_exceeded
jmp 0x1401f0fda
mov byte [rbp + 0x617], 1
mov rcx, rsi
mov rdx, rdi
call fcn.1401eddb0
mov rdx, qword [rbp - 0x30]
cmp rdx, r14
je 0x1401f0ed6
mov rcx, qword [rbp - 0x28]
mov rax, qword [rbp - 0x20]
test rax, rax
je 0x1401f107d
mov r8, qword [rbp - 0x18]
mov qword [rbp - 0x30], rdx
mov qword [rbp - 0x28], rcx
mov qword [rbp - 0x20], rax
mov qword [rbp - 0x18], r8
mov rcx, rsi
mov rdx, qword [rbp + 0x5c0]
mov r8, r15
call fcn.1401e6640
cmp qword [rbp + 0x5b8], 1
je 0x1401f102c
mov r8d, 3
mov rcx, rsi
mov rdx, r12
call fcn.1401e7370
mov r13, qword [rbp - 0x28]
mov r8, qword [rbp - 0x20]
mov rcx, rbx
mov rdx, r13
call fcn.1401f4430
mov rdx, qword [rbp - 0x30]
test rdx, rdx
je 0x1401f1056
mov r8d, 1
mov rcx, r13
call fcn.140012a40
mov rax, qword [rbp + 0x450]
cmp rax, r14
jne 0x1401f1baa
mov byte [rbp + 0x617], 1
mov rcx, rsi
mov rdx, rdi
call fcn.1401eddb0
jmp 0x1401f0fcd
test rdx, rdx
je 0x1401f0fbb
mov r8d, 1
call fcn.140012a40
jmp 0x1401f0fbb
mov r12d, 2
xor r14d, r14d
xor r15d, r15d
movabs rsi, 0x8000000000000000
mov rcx, qword [rbp + 0x4a8]
cmp qword [rcx + 0x38], rsi
jne 0x1401f2764
mov ecx, 2
xor ebx, ebx
xor eax, eax
mov qword [rbp + 0x548], rcx
mov qword [rbp + 0x540], rax
xorps xmm0, xmm0
movaps xmmword [rbp + 0x4b0], xmm0
mov qword [rbp + 0x4c0], 0
mov cl, 1
xor eax, eax
lock cmpxchg byte [0x140390520], cl
jne 0x1401f2920
mov rax, qword [0x1403904e0]
shl rax, 1
test rax, rax
mov qword [rbp + 0x5e0], r15
mov qword [rbp + 0x5c8], r12
jne 0x1401f2931
xor eax, eax
lea rcx, [0x140390520]
movzx edx, byte [0x140390521]
xor r8d, r8d
test dl, dl
setne r8b
mov qword [rbp + 0x4f8], rcx
mov byte [rbp + 0x500], al
mov qword [rbp + 0x4f0], r8
mov qword [rbp + 0x450], 0
mov qword [rbp + 0x460], 0
mov qword [rbp + 0x470], 0
cmp byte [rbp + 0x440], 0
lea rax, [rbp + 0x428]
mov rdx, qword [rbp + 0x5d0]
cmovne rax, rdx
mov r8, qword [rbp + 0x4a8]
lea rcx, [r8 + 0x58]
cmp dword [r8 + 0x58], 6
cmove rcx, rax
mov dword [rbp + 0x428], 2
lea rdi, [r8 + 0x68]
cmp dword [r8 + 0x68], 6
cmove rdi, rdx
cmp dword [r8 + 0x78], 6
lea rsi, [r8 + 0x78]
cmove rsi, rdx
mov dword [rbp + 0x424], 2
lea r8, [rbp + 0x450]
mov edx, 0xfffffff6
call fcn.1401f4500
test rax, rax
je 0x1401f2659
mov rax, qword [rbp + 0x538]
mov qword [rax], rdx
mov qword [rax + 0x10], 2
mov r15, qword [rbp + 0x5e0]
mov r12, qword [rbp + 0x5c8]
jmp 0x1401f2cbd
xor ebx, ebx
mov rax, qword [rbp + 0x5f8]
lea r15, [r9 - 1]
test rbx, rbx
cmove r15, r9
cmove rbx, rax
mov r14, qword [rbp + 0x550]
mov rax, r14
sub rax, rdi
cmp rax, r15
jae 0x1401f1255
lea rcx, [rbp + 0x550]
mov rdx, rdi
mov r8, r15
call fcn.140219840
mov rdi, qword [rbp + 0x560]
mov r14, qword [rbp + 0x550]
mov rsi, qword [rbp + 0x558]
lea r8, [r15 + r15]
lea rcx, [rsi + rdi*2]
mov rdx, rbx
call sub.VCRUNTIME140.dll_memcpy
add rdi, r15
mov qword [rbp + 0x560], rdi
cmp rdi, r14
jne 0x1401f1287
lea rcx, [rbp + 0x550]
call fcn.1401df510
mov rsi, qword [rbp + 0x558]
mov word [rsi + rdi*2], 0x22
inc rdi
mov qword [rbp + 0x560], rdi
mov rax, qword [rbp + 0x448]
lea rax, [rax + rax*4]
mov rcx, qword [rbp + 0x548]
lea rax, [rcx + rax*8]
mov qword [rbp + 0x448], rax
movaps xmm6, xmmword [str._]
cmp rcx, qword [rbp + 0x448]
je 0x1401f26a2
mov rsi, rcx
mov rdi, qword [rbp + 0x560]
cmp rdi, qword [rbp + 0x550]
jne 0x1401f12e7
lea rcx, [rbp + 0x550]
call fcn.1401df510
mov rdx, rsi
lea rax, [rsi + 0x28]
mov qword [rbp + 0x540], rax
mov r13, qword [rbp + 0x558]
mov word [r13 + rdi*2], 0x20
lea r12, [rdi + 1]
mov qword [rbp + 0x560], r12
cmp qword [rsi], 0
je 0x1401f133a
lea rcx, [rbp + 0x550]
movzx r8d, byte [rbp + 0x5c8]
call fcn.1401ec0d0
mov rcx, qword [rbp + 0x540]
test rax, rax
je 0x1401f12bb
jmp 0x1401f255a
mov rbx, qword [rdx + 0x10]
mov rax, qword [rdx + 0x18]
lea rsi, [rbx + rax]
xor ecx, ecx
cmp rax, rcx
je 0x1401f136d
movzx edx, byte [rbx + rcx]
cmp dl, 0xd
sete r8b
cmp dl, 0xa
sete dl
or dl, r8b
inc rcx
test dl, dl
je 0x1401f1348
jmp 0x1401f18bb
xor r9d, r9d
mov rcx, rbx
jmp 0x1401f1381
xor r9d, r9d
test dx, dx
je 0x1401f2553
mov dx, 1
test r9w, r9w
jne 0x1401f1375
cmp rcx, rsi
je 0x1401f143e
movzx r10d, byte [rcx]
movzx r8d, r10b
test r8b, r8b
js 0x1401f13a9
inc rcx
jmp 0x1401f1433
mov r9d, r8d
and r9d, 0x1f
movzx r11d, byte [rcx + 1]
and r11d, 0x3f
cmp r8b, 0xdf
jbe 0x1401f13f9
movzx r8d, byte [rcx + 2]
shl r11d, 6
and r8d, 0x3f
or r8d, r11d
cmp r10b, 0xf0
jb 0x1401f1409
movzx r10d, byte [rcx + 3]
add rcx, 4
and r9d, 7
shl r9d, 0x12
shl r8d, 6
and r10d, 0x3f
or r10d, r8d
or r10d, r9d
mov r8d, r10d
jmp 0x1401f1414
add rcx, 2
shl r9d, 6
or r9d, r11d
mov r8d, r9d
jmp 0x1401f1433
add rcx, 3
shl r9d, 0xc
or r8d, r9d
cmp r8d, 0xffff
jbe 0x1401f1433
and r8d, 0x3ff
or r8d, 0xdc00
mov r9d, r8d
jmp 0x1401f1378
xor r9d, r9d
mov edx, r8d
jmp 0x1401f1378
test rax, rax
je 0x1401f1556
cmp byte [rbp + 0x5c8], 0
setne cl
cmp byte [rax + rbx - 1], 0x5c
sete r14b
or r14b, cl
mov r15, rbx
jmp 0x1401f146e
mov r14b, 1
cmp r15, rsi
je 0x1401f1548
movzx edx, byte [r15]
movzx ecx, dl
test cl, cl
js 0x1401f147e
inc r15
jmp 0x1401f14d9
mov eax, ecx
and eax, 0x1f
movzx r8d, byte [r15 + 1]
and r8d, 0x3f
cmp cl, 0xdf
jbe 0x1401f14c2
movzx ecx, byte [r15 + 2]
shl r8d, 6
and ecx, 0x3f
or ecx, r8d
cmp dl, 0xf0
jb 0x1401f14d0
movzx edx, byte [r15 + 3]
add r15, 4
and eax, 7
shl eax, 0x12
shl ecx, 6
and edx, 0x3f
or edx, ecx
or edx, eax
mov ecx, edx
jmp 0x1401f14d9
add r15, 2
shl eax, 6
or eax, r8d
mov ecx, eax
jmp 0x1401f14d9
add r15, 3
shl eax, 0xc
or ecx, eax
cmp ecx, 0x110000
je 0x1401f1465
mov eax, ecx
and eax, 0x1ff800
cmp eax, 0xd800
je 0x1401f1465
cmp ecx, 0x80
jae 0x1401f1536
lea eax, [rcx - 0x30]
cmp eax, 0xa
jb 0x1401f1536
mov eax, ecx
and eax, 0x5f
add eax, 0xffffffbf
cmp eax, 0x19
jbe 0x1401f1536
xor eax, eax
lea rdx, [0x14032c235]
movzx edx, byte [rax + rdx]
cmp dl, cl
je 0x1401f152e
lea r8, [rax + 1]
cmp rax, 0xb
mov rax, r8
jne 0x1401f1512
cmp dl, cl
jne 0x1401f1462
call fcn.14020e8d0
test al, al
jne 0x1401f1462
jmp 0x1401f1465
mov al, 1
mov dword [rbp + 0x548], eax
test r14b, 1
je 0x1401f1592
cmp r12, qword [rbp + 0x550]
jne 0x1401f1572
lea rcx, [rbp + 0x550]
call fcn.1401df510
mov r13, qword [rbp + 0x558]
mov word [r13 + rdi*2 + 2], 0x22
add rdi, 2
mov qword [rbp + 0x560], rdi
mov dword [rbp + 0x548], 0
mov r12, rdi
xor r14d, r14d
xor edi, edi
jmp 0x1401f15ac
mov word [r13 + r12*2], r14w
inc r12
mov qword [rbp + 0x560], r12
mov r14d, r15d
test r14w, r14w
jne 0x1401f165f
cmp rbx, rsi
je 0x1401f17df
movzx ecx, byte [rbx]
movzx r14d, cl
test r14b, r14b
js 0x1401f15d3
inc rbx
jmp 0x1401f165f
mov eax, r14d
and eax, 0x1f
movzx edx, byte [rbx + 1]
and edx, 0x3f
cmp r14b, 0xdf
jbe 0x1401f1619
movzx r14d, byte [rbx + 2]
shl edx, 6
and r14d, 0x3f
or r14d, edx
cmp cl, 0xf0
jb 0x1401f1627
movzx ecx, byte [rbx + 3]
add rbx, 4
and eax, 7
shl eax, 0x12
shl r14d, 6
and ecx, 0x3f
or ecx, r14d
or ecx, eax
mov r14d, ecx
jmp 0x1401f1631
add rbx, 2
shl eax, 6
or eax, edx
mov r14d, eax
jmp 0x1401f165f
add rbx, 3
shl eax, 0xc
or r14d, eax
cmp r14d, 0xffff
jbe 0x1401f165f
lea eax, [r14 + 0xff0000]
shr eax, 0xa
or eax, 0xd800
and r14d, 0x3ff
or r14d, 0xdc00
mov r15d, r14d
mov r14d, eax
jmp 0x1401f1662
xor r15d, r15d
movzx eax, r14w
cmp eax, 0x24
jg 0x1401f16b1
cmp eax, 0xd
je 0x1401f16c7
cmp eax, 0x22
jne 0x1401f17b8
mov rax, qword [rbp + 0x550]
mov rcx, rax
sub rcx, r12
cmp rcx, rdi
jae 0x1401f1721
lea rcx, [rbp + 0x550]
mov rdx, r12
mov r8, rdi
call fcn.140219840
mov r13, qword [rbp + 0x558]
mov r12, qword [rbp + 0x560]
jmp 0x1401f1726
cmp eax, 0x25
je 0x1401f16c7
cmp eax, 0x5c
jne 0x1401f17b8
inc rdi
jmp 0x1401f17ba
mov rax, qword [rbp + 0x550]
sub rax, r12
cmp rax, 6
ja 0x1401f16fa
mov r8d, 7
lea rcx, [rbp + 0x550]
mov rdx, r12
call fcn.140219840
mov r13, qword [rbp + 0x558]
mov r12, qword [rbp + 0x560]
movabs rax, 0x2c007e003a0064
mov qword [r13 + r12*2 + 6], rax
movabs rax, 0x64006300250025
mov qword [r13 + r12*2], rax
add r12, 7
jmp 0x1401f17b1
test rdi, rdi
je 0x1401f1787
cmp rdi, 0x10
jae 0x1401f1730
xor eax, eax
jmp 0x1401f175e
mov rax, rdi
and rax, 0xfffffffffffffff0
lea rcx, [r12*2 + 0x10]
add rcx, r13
add r12, rax
xor edx, edx
movups xmmword [rcx + rdx*2 - 0x10], xmm6
movups xmmword [rcx + rdx*2], xmm6
add rdx, 0x10
cmp rax, rdx
jne 0x1401f1747
cmp rdi, rax
je 0x1401f1780
sub rdi, rax
nop word cs:[rax + rax]
mov word [r13 + r12*2], 0x5c
inc r12
dec rdi
jne 0x1401f1770
mov rax, qword [rbp + 0x550]
mov qword [rbp + 0x560], r12
cmp r12, rax
jne 0x1401f17a6
lea rcx, [rbp + 0x550]
call fcn.1401df510
mov r13, qword [rbp + 0x558]
mov word [r13 + r12*2], 0x22
inc r12
mov qword [rbp + 0x560], r12
xor edi, edi
cmp r12, qword [rbp + 0x550]
jne 0x1401f1599
lea rcx, [rbp + 0x550]
call fcn.1401df510
mov r13, qword [rbp + 0x558]
jmp 0x1401f1599
mov rcx, qword [rbp + 0x540]
cmp byte [rbp + 0x548], 0
jne 0x1401f12bb
mov rax, qword [rbp + 0x550]
mov rcx, rax
sub rcx, r12
cmp rcx, rdi
jae 0x1401f1827
lea rcx, [rbp + 0x550]
mov rdx, r12
mov r8, rdi
call fcn.140219840
mov r13, qword [rbp + 0x558]
mov r12, qword [rbp + 0x560]
jmp 0x1401f182c
test rdi, rdi
je 0x1401f187e
cmp rdi, 0x10
jae 0x1401f1836
xor eax, eax
jmp 0x1401f1864
mov rax, rdi
and rax, 0xfffffffffffffff0
lea rcx, [r12*2 + 0x10]
add rcx, r13
add r12, rax
xor edx, edx
movups xmmword [rcx + rdx*2 - 0x10], xmm6
movups xmmword [rcx + rdx*2], xmm6
add rdx, 0x10
cmp rax, rdx
jne 0x1401f184d
cmp rdi, rax
je 0x1401f1877
sub rdi, rax
mov word [r13 + r12*2], 0x5c
inc r12
dec rdi
jne 0x1401f1867
mov rax, qword [rbp + 0x550]
mov qword [rbp + 0x560], r12
cmp r12, rax
jne 0x1401f189d
lea rcx, [rbp + 0x550]
call fcn.1401df510
mov r13, qword [rbp + 0x558]
mov word [r13 + r12*2], 0x22
inc r12
mov qword [rbp + 0x560], r12
mov rcx, qword [rbp + 0x540]
jmp 0x1401f12bb
lea rax, [0x14032c280]
jmp 0x1401f255a
jne 0x1401f0f7c
cmp rsi, rdx
jb 0x1401f18d5
mov rsi, rdx
mov rcx, qword [rbp + 0x608]
mov qword [rbp - 0x30], rcx
mov rcx, qword [rbp + 0x5e8]
mov qword [rbp - 0x28], rcx
mov qword [rbp - 0x20], rsi
mov qword [rbp - 0x18], rdi
lea rcx, [rbp - 0x30]
mov rdx, rax
mov r8, r15
call fcn.1401e6640
cmp qword [rbp + 0x5b8], 1
je 0x1401f1922
lea rdx, str.exe.NULcmd.exemaximum_number_of_ProcThreadAttributes_exceeded
lea rcx, [rbp - 0x30]
mov r8d, 3
call fcn.1401e7370
mov rsi, qword [rbp - 0x28]
mov r8, qword [rbp - 0x20]
lea rcx, [rbp + 0x450]
mov rdx, rsi
call fcn.1401f4430
mov rdx, qword [rbp - 0x30]
test rdx, rdx
je 0x1401f1950
mov r8d, 1
mov rcx, rsi
call fcn.140012a40
mov rax, qword [rbp + 0x450]
movabs rcx, 0x8000000000000000
cmp rax, rcx
jne 0x1401f1baa
mov qword [rbp + 0x4f0], 0
mov qword [rbp + 0x4f8], 2
mov qword [rbp + 0x500], 0
mov r8d, 0x200
mov eax, 2
mov qword [rbp + 0x608], rax
xor r14d, r14d
xor esi, esi
xor edi, edi
cmp r8, 0x201
jb 0x1401f19c6
jmp 0x1401f19e0
mov r15, qword [rbp + 0x5f8]
jae 0x1401f1a9f
cmp r8, 0x201
jae 0x1401f19e0
mov ebx, 0x200
lea r12, [rbp - 0x30]
mov r13, r8
jmp 0x1401f1a37
sub r8, rdi
sub rsi, rdi
cmp r8, rsi
jbe 0x1401f1a0f
lea rcx, [rbp + 0x4f0]
mov rdx, rdi
call fcn.140219840
mov r14, qword [rbp + 0x4f0]
mov rax, qword [rbp + 0x4f8]
mov qword [rbp + 0x608], rax
mov eax, 0xffffffff
cmp r14, rax
mov edi, 0xffffffff
cmovb rdi, r14
mov qword [rbp + 0x500], rdi
mov rsi, r14
mov rbx, rdi
mov r12, qword [rbp + 0x608]
mov r13, rdi
xor ecx, ecx
call qword [sym.imp.kernel32.dll_SetLastError]
mov rcx, r12
mov edx, r13d
call qword [sym.imp.kernel32.dll_GetSystemDirectoryW]
mov r15d, eax
test eax, eax
jne 0x1401f1a60
call qword [sym.imp.kernel32.dll_GetLastError]
test eax, eax
jne 0x1401f1bc4
mov r8d, r15d
cmp r13, r8
jne 0x1401f19b0
call qword [sym.imp.kernel32.dll_GetLastError]
cmp eax, 0x7a
jne 0x1401f2f34
add r13, r13
mov eax, 0xffffffff
cmp r13, rax
cmovae r13, rax
mov r8, r13
cmp r8, 0x201
jae 0x1401f19e0
jmp 0x1401f19c6
cmp rbx, r8
jb 0x1401f3041
lea rcx, [rbp + 0x550]
mov rdx, r12
call fcn.1401e5510
lea rcx, [rbp + 0x550]
mov rdx, qword [rbp + 0x5c0]
mov r8, r15
call fcn.1401e6640
cmp qword [rbp + 0x5b8], 1
je 0x1401f1af0
lea rdx, str.exe.NULcmd.exemaximum_number_of_ProcThreadAttributes_exceeded
lea rcx, [rbp + 0x550]
mov r8d, 3
call fcn.1401e7370
mov rdi, qword [rbp + 0x558]
mov r8, qword [rbp + 0x560]
lea rcx, [rbp + 0x450]
mov rdx, rdi
call fcn.1401f4430
mov rdx, qword [rbp + 0x550]
test rdx, rdx
je 0x1401f1b27
mov r8d, 1
mov rcx, rdi
call fcn.140012a40
movups xmm0, xmmword [rbp + 0x450]
movaps xmmword [rbp + 0x4b0], xmm0
mov rax, qword [rbp + 0x460]
mov qword [rbp + 0x4c0], rax
mov rdx, qword [rbp + 0x4f0]
test rdx, rdx
je 0x1401f1b64
mov rcx, qword [rbp + 0x4f8]
add rdx, rdx
mov r8d, 2
call fcn.140012a40
mov rcx, qword [rbp + 0x4b0]
movabs rax, 0x8000000000000001
cmp rcx, rax
jg 0x1401f1e82
movabs rdx, 0x8000000000000000
cmp rcx, rdx
je 0x1401f1c1e
cmp rcx, rax
je 0x1401f1c0b
mov rcx, qword [rbp + 0x4b8]
mov r8d, 2
call fcn.140012a40
jmp 0x1401f1c1e
mov qword [rbp + 0x5b8], rax
mov rsi, qword [rbp + 0x458]
mov rdi, qword [rbp + 0x460]
jmp 0x1401f0263
call qword [sym.imp.kernel32.dll_GetLastError]
shl rax, 0x20
or rax, 2
mov qword [rbp + 0x4b8], rax
movabs rax, 0x8000000000000001
mov qword [rbp + 0x4b0], rax
mov rdx, qword [rbp + 0x4f0]
test rdx, rdx
je 0x1401f1c0b
mov rcx, qword [rbp + 0x4f8]
add rdx, rdx
mov r8d, 2
call fcn.140012a40
lea rcx, [rbp + 0x4b8]
mov byte [rbp + 0x617], 1
call fcn.1401da850
mov qword [rbp + 0x4f0], 0
mov qword [rbp + 0x4f8], 2
mov qword [rbp + 0x500], 0
mov r8d, 0x200
mov eax, 2
mov qword [rbp + 0x608], rax
xor eax, eax
mov qword [rbp + 0x5e8], rax
mov rsi, qword [sym.imp.kernel32.dll_GetWindowsDirectoryW]
mov ebx, 0xffffffff
xor r15d, r15d
xor edi, edi
cmp r8, 0x201
jb 0x1401f1c8f
jmp 0x1401f1ca0
jae 0x1401f1d6a
cmp r8, 0x201
jae 0x1401f1ca0
mov r14d, 0x200
lea r12, [rbp - 0x30]
mov r13, r8
jmp 0x1401f1cfd
sub r8, rdi
sub r15, rdi
cmp r8, r15
jbe 0x1401f1cd6
lea rcx, [rbp + 0x4f0]
mov rdx, rdi
call fcn.140219840
mov rax, qword [rbp + 0x4f0]
mov qword [rbp + 0x5e8], rax
mov rax, qword [rbp + 0x4f8]
mov qword [rbp + 0x608], rax
mov r15, qword [rbp + 0x5e8]
cmp r15, rbx
mov edi, 0xffffffff
cmovb rdi, r15
mov qword [rbp + 0x500], rdi
mov r14, rdi
mov r12, qword [rbp + 0x608]
mov r13, rdi
xor ecx, ecx
call qword [sym.imp.kernel32.dll_SetLastError]
mov rcx, r12
mov edx, r13d
call rsi
test eax, eax
jne 0x1401f1d30
mov rbx, rsi
mov esi, eax
call qword [sym.imp.kernel32.dll_GetLastError]
mov ecx, eax
mov eax, esi
mov rsi, rbx
mov ebx, 0xffffffff
test ecx, ecx
jne 0x1401f1e9c
mov r8d, eax
cmp r13, r8
jne 0x1401f1c80
call qword [sym.imp.kernel32.dll_GetLastError]
cmp eax, 0x7a
jne 0x1401f2f51
add r13, r13
cmp r13, rbx
cmovae r13, rbx
mov r8, r13
cmp r8, 0x201
jae 0x1401f1ca0
jmp 0x1401f1c8f
cmp r14, r8
jb 0x1401f3058
lea rcx, [rbp + 0x550]
mov rdx, r12
call fcn.1401e5510
lea rcx, [rbp + 0x550]
mov rdx, qword [rbp + 0x5c0]
mov r15, qword [rbp + 0x5f8]
mov r8, r15
call fcn.1401e6640
cmp qword [rbp + 0x5b8], 1
je 0x1401f1dc2
lea rdx, str.exe.NULcmd.exemaximum_number_of_ProcThreadAttributes_exceeded
lea rcx, [rbp + 0x550]
mov r8d, 3
call fcn.1401e7370
mov rsi, qword [rbp + 0x558]
mov r8, qword [rbp + 0x560]
lea rcx, [rbp + 0x450]
mov rdx, rsi
call fcn.1401f4430
mov rdx, qword [rbp + 0x550]
test rdx, rdx
je 0x1401f1df9
mov r8d, 1
mov rcx, rsi
call fcn.140012a40
movups xmm0, xmmword [rbp + 0x450]
movaps xmmword [rbp + 0x4b0], xmm0
mov rax, qword [rbp + 0x460]
mov qword [rbp + 0x4c0], rax
mov rdx, qword [rbp + 0x4f0]
test rdx, rdx
je 0x1401f1e36
mov rcx, qword [rbp + 0x4f8]
add rdx, rdx
mov r8d, 2
call fcn.140012a40
mov rcx, qword [rbp + 0x4b0]
movabs rax, 0x8000000000000002
cmp rcx, rax
jge 0x1401f1e82
movabs rax, 0x8000000000000000
cmp rcx, rax
je 0x1401f1efd
movabs rax, 0x8000000000000001
cmp rcx, rax
je 0x1401f1eea
mov rcx, qword [rbp + 0x4b8]
mov r8d, 2
call fcn.140012a40
jmp 0x1401f1efd
mov qword [rbp + 0x5b8], rcx
mov rsi, qword [rbp + 0x4b8]
mov rdi, qword [rbp + 0x4c0]
jmp 0x1401f0263
call qword [sym.imp.kernel32.dll_GetLastError]
shl rax, 0x20
or rax, 2
mov qword [rbp + 0x4b8], rax
movabs rax, 0x8000000000000001
mov qword [rbp + 0x4b0], rax
mov rdx, qword [rbp + 0x4f0]
test rdx, rdx
je 0x1401f1ee3
mov rcx, qword [rbp + 0x4f8]
add rdx, rdx
mov r8d, 2
call fcn.140012a40
mov r15, qword [rbp + 0x5f8]
lea rcx, [rbp + 0x4b8]
mov byte [rbp + 0x617], 1
call fcn.1401da850
mov byte [rbp + 0x617], 1
lea rdx, str.PATHlibrary_std_src_sys_commonwtf8.rsassertion_failed:_is_code_point_boundary_self__new_len_
lea rcx, [rbp + 0x450]
mov r8d, 4
call fcn.1401e1080
mov rcx, qword [rbp + 0x450]
movabs rax, 0x8000000000000000
cmp rcx, rax
je 0x1401f20bd
mov qword [rbp + 0x5f8], rcx
mov rcx, qword [rbp + 0x458]
mov rax, qword [rbp + 0x460]
add rax, rcx
mov qword [rbp + 0x608], rcx
mov qword [rbp + 0x550], rcx
mov qword [rbp + 0x558], rax
mov word [rbp + 0x560], 0
mov byte [rbp + 0x568], 1
lea rsi, [rbp - 0x30]
lea rdi, [rbp + 0x550]
lea rbx, [rbp + 0x4f0]
lea r12, str.exe.NULcmd.exemaximum_number_of_ProcThreadAttributes_exceeded
mov r14, qword [rbp + 0x5c0]
mov rcx, rsi
mov rdx, rdi
call fcn.1401eddb0
jmp 0x1401f1fac
mov rcx, rsi
mov rdx, rdi
call fcn.1401eddb0
mov rdx, qword [rbp - 0x30]
movabs rax, 0x8000000000000000
cmp rdx, rax
je 0x1401f209f
mov rcx, qword [rbp - 0x28]
mov rax, qword [rbp - 0x20]
test rax, rax
jne 0x1401f1fe2
test rdx, rdx
je 0x1401f1fa1
mov r8d, 1
call fcn.140012a40
jmp 0x1401f1fa1
mov r8, qword [rbp - 0x18]
mov qword [rbp - 0x30], rdx
mov qword [rbp - 0x28], rcx
mov qword [rbp - 0x20], rax
mov qword [rbp - 0x18], r8
mov rcx, rsi
mov rdx, r14
mov r8, r15
call fcn.1401e6640
cmp qword [rbp + 0x5b8], 1
je 0x1401f201f
mov r8d, 3
mov rcx, rsi
mov rdx, r12
call fcn.1401e7370
mov r13, qword [rbp - 0x28]
mov r8, qword [rbp - 0x20]
mov rcx, rbx
mov rdx, r13
call fcn.1401f4430
mov rdx, qword [rbp - 0x30]
test rdx, rdx
je 0x1401f2049
mov r8d, 1
mov rcx, r13
call fcn.140012a40
mov rax, qword [rbp + 0x4f0]
movabs rcx, 0x8000000000000000
cmp rax, rcx
je 0x1401f1f94
mov qword [rbp + 0x5b8], rax
mov rsi, qword [rbp + 0x4f8]
mov rdi, qword [rbp + 0x500]
mov rdx, qword [rbp + 0x5f8]
test rdx, rdx
je 0x1401f0263
mov r8d, 1
mov rcx, qword [rbp + 0x608]
call fcn.140012a40
jmp 0x1401f0263
mov rdx, qword [rbp + 0x5f8]
test rdx, rdx
je 0x1401f20bd
mov r8d, 1
mov rcx, qword [rbp + 0x608]
call fcn.140012a40
lea rbx, [0x14032c730]
jmp 0x1401eff96
mov byte [rbp + 0x614], 1
lea rcx, [rbp + 0x4f0]
call fcn.1401df510
mov r14, qword [rbp + 0x4f8]
mov word [r14], 0
mov qword [rbp + 0x500], 1
mov r15d, 1
mov rax, qword [rbp + 0x4b0]
mov rcx, qword [rbp + 0x4b8]
xor edx, edx
test rax, rax
setne dl
cmove rsi, rax
mov qword [rbp - 0x30], rdx
mov qword [rbp - 0x28], 0
mov qword [rbp - 0x20], rax
mov qword [rbp - 0x18], rcx
mov qword [rbp - 0x10], rdx
mov qword [rbp - 8], 0
mov qword [rbp], rax
mov qword [rbp + 8], rcx
mov qword [rbp + 0x10], rsi
lea rcx, [rbp + 0x550]
lea rdx, [rbp - 0x30]
movabs rsi, 0x8000000000000000
call fcn.1401dcd80
mov rax, qword [rbp + 0x550]
test rax, rax
je 0x1401f26f8
mov r9, qword [rbp + 0x560]
imul r8, r9, 0x38
mov rdx, qword [rax + r8 + 0x168]
cmp rdx, rsi
je 0x1401f26f8
mov rcx, qword [rax + r8 + 0x170]
mov r10, qword [rax + r8 + 0x188]
mov qword [rbp + 0x5c8], r10
mov r10, qword [rax + r8 + 0x190]
mov qword [rbp + 0x540], r10
mov r12, qword [rax + r8 + 0x198]
shl r9, 5
mov r10, qword [rax + r9]
mov qword [rbp + 0x5e0], r10
mov r10, qword [rax + r9 + 8]
mov qword [rbp + 0x548], r10
mov rbx, qword [rax + r9 + 0x10]
mov rax, qword [rax + r8 + 0x178]
add rax, rcx
xor r11d, r11d
mov r8, rcx
jmp 0x1401f21f4
xor r11d, r11d
test r9w, r9w
je 0x1401f24f6
mov r9w, 1
test r11w, r11w
jne 0x1401f21e7
cmp r8, rax
je 0x1401f22af
movzx esi, byte [r8]
movzx r10d, sil
test r10b, r10b
js 0x1401f221d
inc r8
jmp 0x1401f22a4
mov r11d, r10d
and r11d, 0x1f
movzx edi, byte [r8 + 1]
and edi, 0x3f
cmp r10b, 0xdf
jbe 0x1401f226a
movzx r10d, byte [r8 + 2]
shl edi, 6
and r10d, 0x3f
or r10d, edi
cmp sil, 0xf0
jb 0x1401f227a
movzx esi, byte [r8 + 3]
add r8, 4
and r11d, 7
shl r11d, 0x12
shl r10d, 6
and esi, 0x3f
or esi, r10d
or esi, r11d
mov r10d, esi
jmp 0x1401f2285
add r8, 2
shl r11d, 6
or r11d, edi
mov r10d, r11d
jmp 0x1401f22a4
add r8, 3
shl r11d, 0xc
or r10d, r11d
cmp r10d, 0xffff
jbe 0x1401f22a4
and r10d, 0x3ff
or r10d, 0xdc00
mov r11d, r10d
jmp 0x1401f21ea
xor r11d, r11d
mov r9d, r10d
jmp 0x1401f21ea
test rdx, rdx
je 0x1401f22bf
mov r8d, 1
call fcn.140012a40
mov rax, qword [rbp + 0x4f0]
sub rax, r15
cmp rax, r12
jae 0x1401f22ee
lea rcx, [rbp + 0x4f0]
mov rdx, r15
mov r8, r12
call fcn.140219840
mov r14, qword [rbp + 0x4f8]
mov r15, qword [rbp + 0x500]
lea r8, [r12 + r12]
lea rcx, [r14 + r15*2]
mov rsi, qword [rbp + 0x540]
mov rdx, rsi
call sub.VCRUNTIME140.dll_memcpy
add r15, r12
mov qword [rbp + 0x500], r15
mov rdx, qword [rbp + 0x5c8]
test rdx, rdx
je 0x1401f232c
add rdx, rdx
mov r8d, 2
mov rcx, rsi
call fcn.140012a40
cmp r15, qword [rbp + 0x4f0]
jne 0x1401f234f
mov byte [rbp + 0x606], 1
lea rcx, [rbp + 0x4f0]
call fcn.1401df510
mov r14, qword [rbp + 0x4f8]
mov word [r14 + r15*2], 0x3d
inc r15
mov qword [rbp + 0x500], r15
mov rax, qword [rbp + 0x548]
add rbx, rax
xor r8d, r8d
mov rdx, qword [rbp + 0x5e0]
jmp 0x1401f2382
xor r8d, r8d
test cx, cx
je 0x1401f25f3
mov cx, 1
test r8w, r8w
jne 0x1401f2376
cmp rax, rbx
je 0x1401f243f
movzx r9d, byte [rax]
movzx r11d, r9b
test r11b, r11b
js 0x1401f23aa
inc rax
jmp 0x1401f2434
mov r8d, r11d
and r8d, 0x1f
movzx r10d, byte [rax + 1]
and r10d, 0x3f
cmp r11b, 0xdf
jbe 0x1401f23fa
movzx r11d, byte [rax + 2]
shl r10d, 6
and r11d, 0x3f
or r11d, r10d
cmp r9b, 0xf0
jb 0x1401f240a
movzx r9d, byte [rax + 3]
add rax, 4
and r8d, 7
shl r8d, 0x12
shl r11d, 6
and r9d, 0x3f
or r9d, r11d
or r9d, r8d
mov r11d, r9d
jmp 0x1401f2415
add rax, 2
shl r8d, 6
or r8d, r10d
mov r11d, r8d
jmp 0x1401f2434
add rax, 3
shl r8d, 0xc
or r11d, r8d
cmp r11d, 0xffff
jbe 0x1401f2434
and r11d, 0x3ff
or r11d, 0xdc00
mov r8d, r11d
jmp 0x1401f2379
xor r8d, r8d
mov ecx, r11d
jmp 0x1401f2379
movabs rax, 0x8000000000000000
cmp rdx, rax
je 0x1401f2df1
mov rax, qword [rbp + 0x548]
mov qword [rbp + 0x450], rax
mov qword [rbp + 0x458], rbx
mov word [rbp + 0x460], 0
lea rcx, [rbp + 0x4f0]
lea rdx, [rbp + 0x450]
call fcn.1401df9e0
mov rdx, qword [rbp + 0x5e0]
test rdx, rdx
je 0x1401f24a1
mov r8d, 1
mov rcx, qword [rbp + 0x548]
call fcn.140012a40
mov r15, qword [rbp + 0x500]
cmp r15, qword [rbp + 0x4f0]
jne 0x1401f24c4
mov byte [rbp + 0x606], 0
lea rcx, [rbp + 0x4f0]
call fcn.1401df510
mov r14, qword [rbp + 0x4f8]
mov word [r14 + r15*2], 0
inc r15
mov qword [rbp + 0x500], r15
movabs rsi, 0x8000000000000000
lea rcx, [rbp + 0x550]
lea rdx, [rbp - 0x30]
jmp 0x1401f2155
test rdx, rdx
je 0x1401f2506
mov r8d, 1
call fcn.140012a40
mov rdx, qword [rbp + 0x5e0]
test rdx, rdx
mov rsi, qword [rbp + 0x540]
je 0x1401f252b
mov r8d, 1
mov rcx, qword [rbp + 0x548]
call fcn.140012a40
lea r14, str.nul_byte_found_in_provided_data
mov rdx, qword [rbp + 0x5c8]
test rdx, rdx
je 0x1401f2611
add rdx, rdx
mov r8d, 2
mov rcx, rsi
jmp 0x1401f260c
lea rax, str.nul_byte_found_in_provided_data
mov rdx, qword [rbp + 0x550]
test rdx, rdx
je 0x1401f2581
mov rcx, qword [rbp + 0x558]
add rdx, rdx
mov r8d, 2
mov rsi, rax
call fcn.140012a40
mov rax, rsi
mov rdx, qword [rbp + 0x5e8]
mov rcx, qword [rbp + 0x538]
mov qword [rcx], rax
mov qword [rcx + 0x10], 2
test rdx, rdx
je 0x1401f25b4
add rdx, rdx
mov r8d, 2
mov rcx, qword [rbp + 0x608]
call fcn.140012a40
xor esi, esi
mov rax, qword [rbp + 0x5d0]
mov rdx, qword [rbp + 0x5b8]
test rdx, rdx
je 0x1401f25e5
add rdx, rdx
mov r8d, 2
mov rcx, qword [rbp + 0x5f8]
call fcn.140012a40
mov rax, qword [rbp + 0x5d0]
test sil, sil
je 0x1401effb2
jmp 0x1401f001d
lea r14, str.nul_byte_found_in_provided_data
test rdx, rdx
je 0x1401f2611
mov r8d, 1
mov rcx, qword [rbp + 0x548]
call fcn.140012a40
mov byte [rbp + 0x614], 0
lea rcx, [rbp - 0x30]
call fcn.1401da500
mov rdx, qword [rbp + 0x4f0]
test rdx, rdx
je 0x1401f2642
mov rcx, qword [rbp + 0x4f8]
add rdx, rdx
mov r8d, 2
call fcn.140012a40
mov rax, qword [rbp + 0x538]
mov qword [rax], r14
mov qword [rax + 0x10], 2
jmp 0x1401f2d77
mov qword [rbp + 0x440], rdx
lea r8, [rbp + 0x460]
mov rcx, rdi
mov edx, 0xfffffff5
call fcn.1401f4500
test rax, rax
je 0x1401f28db
mov rax, qword [rbp + 0x538]
mov qword [rax], rdx
mov qword [rax + 0x10], 2
mov r15, qword [rbp + 0x5e0]
mov r12, qword [rbp + 0x5c8]
jmp 0x1401f2c9a
mov rcx, qword [rbp + 0x550]
mov rsi, qword [rbp + 0x560]
cmp rsi, rcx
jne 0x1401f26c8
lea rcx, [rbp + 0x550]
call fcn.1401df510
mov rcx, qword [rbp + 0x550]
mov rax, qword [rbp + 0x558]
mov word [rax + rsi*2], 0x22
movabs rdx, 0x8000000000000000
cmp rcx, rdx
je 0x1401f2581
inc rsi
mov dl, 1
mov dword [rbp + 0x448], edx
jmp 0x1401f0d77
mov byte [rbp + 0x614], 0
lea rcx, [rbp - 0x30]
call fcn.1401da500
cmp r15, qword [rbp + 0x4f0]
jne 0x1401f272b
mov byte [rbp + 0x614], 0
lea rcx, [rbp + 0x4f0]
call fcn.1401df510
mov r14, qword [rbp + 0x4f8]
mov word [r14 + r15*2], 0
mov r15, qword [rbp + 0x4f0]
cmp r15, rsi
je 0x1401f2642
mov r12, qword [rbp + 0x4f8]
movabs rsi, 0x8000000000000000
mov rcx, qword [rbp + 0x4a8]
cmp qword [rcx + 0x38], rsi
je 0x1401f10bd
mov rax, qword [rcx + 0x40]
mov rcx, qword [rcx + 0x48]
add rcx, rax
xor r10d, r10d
mov rdx, rax
jmp 0x1401f2784
xor r10d, r10d
test r8w, r8w
je 0x1401f283f
mov r8w, 1
test r10w, r10w
jne 0x1401f2777
cmp rdx, rcx
je 0x1401f285d
movzx r11d, byte [rdx]
movzx r9d, r11b
test r9b, r9b
js 0x1401f27ad
inc rdx
jmp 0x1401f2834
mov r10d, r9d
and r10d, 0x1f
movzx edi, byte [rdx + 1]
and edi, 0x3f
cmp r9b, 0xdf
jbe 0x1401f27fa
movzx r9d, byte [rdx + 2]
shl edi, 6
and r9d, 0x3f
or r9d, edi
cmp r11b, 0xf0
jb 0x1401f280a
movzx r11d, byte [rdx + 3]
add rdx, 4
and r10d, 7
shl r10d, 0x12
shl r9d, 6
and r11d, 0x3f
or r11d, r9d
or r11d, r10d
mov r9d, r11d
jmp 0x1401f2815
add rdx, 2
shl r10d, 6
or r10d, edi
mov r9d, r10d
jmp 0x1401f2834
add rdx, 3
shl r10d, 0xc
or r9d, r10d
cmp r9d, 0xffff
jbe 0x1401f2834
and r9d, 0x3ff
or r9d, 0xdc00
mov r10d, r9d
jmp 0x1401f277a
xor r10d, r10d
mov r8d, r9d
jmp 0x1401f277a
lea rbx, str.nul_byte_found_in_provided_data
mov rax, qword [rbp + 0x538]
mov qword [rax], rbx
mov qword [rax + 0x10], 2
jmp 0x1401f2d5e
mov qword [rbp + 0x5c8], r12
mov qword [rbp + 0x5e0], r15
mov qword [rbp - 0x30], rax
mov qword [rbp - 0x28], rcx
mov word [rbp - 0x20], 0
lea rcx, [rbp + 0x550]
lea rdx, [rbp - 0x30]
call fcn.1401dfb70
mov rax, qword [rbp + 0x550]
mov rdi, qword [rbp + 0x560]
cmp rdi, rax
jne 0x1401f28af
lea rcx, [rbp + 0x550]
call fcn.1401df510
mov rax, qword [rbp + 0x550]
mov rbx, qword [rbp + 0x558]
mov word [rbx + rdi*2], 0
mov rcx, rbx
cmp rax, rsi
mov r15, qword [rbp + 0x5e0]
mov r12, qword [rbp + 0x5c8]
jne 0x1401f10c6
jmp 0x1401f2846
mov qword [rbp + 0x438], rdx
lea r8, [rbp + 0x470]
mov rcx, rsi
mov edx, 0xfffffff4
call fcn.1401f4500
test rax, rax
mov r15, qword [rbp + 0x5e0]
mov r12, qword [rbp + 0x5c8]
je 0x1401f293d
mov rax, qword [rbp + 0x538]
mov qword [rax], rdx
mov qword [rax + 0x10], 2
jmp 0x1401f2c8d
lea rcx, [0x140390520]
call fcn.140219ee0
jmp 0x1401f10fb
call fcn.140219e10
xor al, 1
jmp 0x1401f111e
xorps xmm0, xmm0
movups xmmword [rbp + 0x584], xmm0
movups xmmword [rbp + 0x578], xmm0
movups xmmword [rbp + 0x568], xmm0
movups xmmword [rbp + 0x558], xmm0
movups xmmword [rbp + 0x598], xmm0
movups xmmword [rbp + 0x5a8], xmm0
test rdx, rdx
mov rcx, qword [rbp + 0x440]
mov r8, qword [rbp + 0x438]
jne 0x1401f298c
test r8, r8
jne 0x1401f298c
mov eax, 1
test rcx, rcx
je 0x1401f29b0
mov dword [rbp + 0x58c], 0x100
mov qword [rbp + 0x5a0], rcx
mov qword [rbp + 0x5a8], r8
mov qword [rbp + 0x5b0], rdx
mov eax, 0x101
mov qword [rbp + 0x400], rdx
mov rdx, qword [rbp + 0x4a8]
cmp word [rdx + 0xc0], 0
je 0x1401f29dc
movzx ecx, word [rdx + 0xc2]
mov dword [rbp + 0x58c], eax
mov word [rbp + 0x590], cx
mov r15, qword [rdx + 0xb8]
test r15, r15
je 0x1401f2a7e
add rdx, 0xa8
mov dword [rbp + 0x550], 0x70
lea rcx, [rbp + 0x408]
call fcn.1401f4f10
mov rdi, qword [rbp + 0x408]
mov rsi, qword [rbp + 0x410]
test rdi, rdi
je 0x1401f2c60
or r13d, 0x80000
mov rax, qword [rbp + 0x5b0]
mov qword [rbp + 0x30], rax
movups xmm0, xmmword [rbp + 0x5a0]
movaps xmmword [rbp + 0x20], xmm0
movups xmm0, xmmword [rbp + 0x590]
movaps xmmword [rbp + 0x10], xmm0
movups xmm0, xmmword [rbp + 0x550]
movups xmm1, xmmword [rbp + 0x560]
movups xmm2, xmmword [rbp + 0x570]
movups xmm3, xmmword [rbp + 0x580]
movaps xmmword [rbp], xmm3
movaps xmmword [rbp - 0x10], xmm2
movaps xmmword [rbp - 0x20], xmm1
movaps xmmword [rbp - 0x30], xmm0
mov qword [rbp + 0x38], rdi
lea rax, [rbp - 0x30]
jmp 0x1401f2a8f
mov dword [rbp + 0x550], 0x68
lea rax, [rbp + 0x550]
mov rdx, qword [rbp + 0x4d8]
lea rcx, [rbp + 0x4b0]
mov qword [rsp + 0x48], rcx
mov qword [rsp + 0x40], rax
mov qword [rsp + 0x38], rbx
mov qword [rsp + 0x30], r14
mov dword [rsp + 0x28], r13d
mov dword [rsp + 0x20], 1
mov rcx, qword [rbp + 0x608]
xor r8d, r8d
xor r9d, r9d
call qword [sym.imp.kernel32.dll_CreateProcessW]
test eax, eax
je 0x1401f2c2e
movups xmm0, xmmword [rbp + 0x450]
movups xmm1, xmmword [rbp + 0x460]
movups xmm2, xmmword [rbp + 0x470]
mov rax, qword [rbp + 0x538]
movups xmmword [rax + 0x30], xmm2
movups xmmword [rax + 0x20], xmm1
movups xmmword [rax + 0x10], xmm0
movaps xmm0, xmmword [rbp + 0x4b0]
movups xmmword [rax], xmm0
test r15, r15
je 0x1401f2b1b
mov rcx, rdi
mov rdx, rsi
call fcn.1401daf30
mov rsi, qword [sym.imp.kernel32.dll_CloseHandle]
mov rcx, qword [rbp + 0x400]
call rsi
mov rcx, qword [rbp + 0x438]
call rsi
mov rcx, qword [rbp + 0x440]
call rsi
cmp dword [rbp + 0x428], 4
jb 0x1401f2b53
mov rcx, qword [rbp + 0x430]
call qword [sym.imp.kernel32.dll_CloseHandle]
lea rcx, [rbp + 0x4f0]
call fcn.1401da670
cmp qword [rbp + 0x540], 0
je 0x1401f2b85
mov rdx, qword [rbp + 0x540]
add rdx, rdx
mov r8d, 2
mov rcx, qword [rbp + 0x548]
call fcn.140012a40
cmp qword [rbp + 0x5e0], 0
je 0x1401f2bab
mov rdx, qword [rbp + 0x5e0]
add rdx, rdx
mov r8d, 2
mov rcx, qword [rbp + 0x5c8]
call fcn.140012a40
mov rdx, qword [rbp + 0x4d0]
test rdx, rdx
je 0x1401f2bcc
mov rcx, qword [rbp + 0x4d8]
add rdx, rdx
mov r8d, 2
call fcn.140012a40
cmp qword [rbp + 0x5e8], 0
je 0x1401f2bf2
mov rdx, qword [rbp + 0x5e8]
add rdx, rdx
mov r8d, 2
mov rcx, qword [rbp + 0x608]
call fcn.140012a40
cmp qword [rbp + 0x5b8], 0
je 0x1401f0016
cmp byte [rbp + 0x5c0], 0
je 0x1401f0016
mov rdx, qword [rbp + 0x5b8]
add rdx, rdx
mov r8d, 2
mov rcx, qword [rbp + 0x5f8]
call fcn.140012a40
jmp 0x1401f0016
call qword [sym.imp.kernel32.dll_GetLastError]
shl rax, 0x20
or rax, 2
mov rcx, qword [rbp + 0x538]
mov qword [rcx], rax
mov qword [rcx + 0x10], 2
test r15, r15
je 0x1401f2c72
mov rcx, rdi
mov rdx, rsi
call fcn.1401daf30
jmp 0x1401f2c72
mov rax, qword [rbp + 0x538]
mov qword [rax], rsi
mov qword [rax + 0x10], 2
mov rcx, qword [rbp + 0x400]
call qword [sym.imp.kernel32.dll_CloseHandle]
mov r15, qword [rbp + 0x5e0]
mov r12, qword [rbp + 0x5c8]
mov rcx, qword [rbp + 0x438]
call qword [sym.imp.kernel32.dll_CloseHandle]
mov rcx, qword [rbp + 0x440]
call qword [sym.imp.kernel32.dll_CloseHandle]
cmp dword [rbp + 0x428], 4
jb 0x1401f2cbd
mov rcx, qword [rbp + 0x430]
call qword [sym.imp.kernel32.dll_CloseHandle]
cmp qword [rbp + 0x450], 0
je 0x1401f2cd4
mov rcx, qword [rbp + 0x458]
call qword [sym.imp.kernel32.dll_CloseHandle]
cmp qword [rbp + 0x460], 0
je 0x1401f2ceb
mov rcx, qword [rbp + 0x468]
call qword [sym.imp.kernel32.dll_CloseHandle]
cmp qword [rbp + 0x470], 0
je 0x1401f2d02
mov rcx, qword [rbp + 0x478]
call qword [sym.imp.kernel32.dll_CloseHandle]
cmp qword [rbp + 0x4f0], 0
mov rcx, qword [rbp + 0x4f8]
movzx eax, byte [rbp + 0x500]
test al, al
jne 0x1401f2d2f
mov rax, qword [0x1403904e0]
shl rax, 1
test rax, rax
jne 0x1401f2dd5
xor eax, eax
xchg byte [rcx], al
cmp al, 2
jne 0x1401f2d3d
call qword [sym.imp.api_ms_win_core_synch_l1_2_0.dll_WakeByAddressSingle]
mov rdx, qword [rbp + 0x540]
test rdx, rdx
je 0x1401f2d5e
add rdx, rdx
mov r8d, 2
mov rcx, qword [rbp + 0x548]
call fcn.140012a40
test r15, r15
je 0x1401f2d77
add r15, r15
mov r8d, 2
mov rcx, r12
mov rdx, r15
call fcn.140012a40
mov rdx, qword [rbp + 0x4d0]
test rdx, rdx
je 0x1401f2d98
mov rcx, qword [rbp + 0x4d8]
add rdx, rdx
mov r8d, 2
call fcn.140012a40
mov rdx, qword [rbp + 0x5e8]
test rdx, rdx
je 0x1401f2db9
add rdx, rdx
mov r8d, 2
mov rcx, qword [rbp + 0x608]
call fcn.140012a40
mov sil, 1
cmp byte [rbp + 0x5c0], 0
mov rax, qword [rbp + 0x5d0]
jne 0x1401f25bd
jmp 0x1401f001d
mov rsi, rcx
call fcn.140219e10
mov rcx, rsi
test al, al
jne 0x1401f2d2f
mov byte [rcx + 1], 1
jmp 0x1401f2d2f
mov r14, qword [rbp + 0x548]
jmp 0x1401f2611
call qword [sym.imp.kernel32.dll_GetLastError]
shl rax, 0x20
or rax, 2
mov qword [rbp + 0x4f0], rax
lea rax, [rbp + 0x4f0]
mov qword [rbp + 0x450], rax
lea rax, [fcn.1401e2c80]
mov qword [rbp + 0x458], rax
lea rax, str.comparing_environment_keys_failed:
mov qword [rbp + 0x550], rax
mov qword [rbp + 0x558], 1
mov qword [rbp + 0x570], 0
lea rax, [rbp + 0x450]
mov qword [rbp + 0x560], rax
mov qword [rbp + 0x568], 1
lea rdx, str.library_std_src_syspalwindowsprocess.rs
lea rcx, [rbp + 0x550]
call fcn.14021b700
jmp 0x1401f306d
xor edi, edi
mov rcx, rdi
mov rdx, r14
call fcn.14021b3b0
jmp 0x1401f306d
xor r13d, r13d
mov rcx, r13
mov rdx, rdi
call fcn.14021b3b0
jmp 0x1401f306d
xor r13d, r13d
mov byte [rbp + 0x5de], 1
mov rcx, r13
mov rdx, rsi
call fcn.14021b3b0
jmp 0x1401f306d
lea rcx, str.internal_error:_entered_unreachable_code
lea r8, str.library_std_src_syspalwindowsmod.rsstrings_passed_to_WinAPI_cannot_contain_NULs
mov edx, 0x28
call fcn.14021b7a0
jmp 0x1401f306d
lea rcx, str.assertion_failed:_self.height___0
lea r8, str._rustc_eeb90cda1969383f56a2637cbd3037bdf598841clibrary_alloc_srccollections_btree_node.rsassertion_failed:_edge.height__self.height___1
mov edx, 0x21
call fcn.14021b7a0
jmp 0x1401f306d
lea rcx, str.internal_error:_entered_unreachable_code
lea r8, str.library_std_src_syspalwindowsmod.rsstrings_passed_to_WinAPI_cannot_contain_NULs
mov edx, 0x28
call fcn.14021b7a0
jmp 0x1401f306d
mov byte [rbp + 0x617], 1
mov ecx, 1
mov edx, 4
call fcn.14021b3b0
jmp 0x1401f306d
lea rcx, str.internal_error:_entered_unreachable_code
lea r8, str.library_std_src_syspalwindowsmod.rsstrings_passed_to_WinAPI_cannot_contain_NULs
mov edx, 0x28
call fcn.14021b7a0
jmp 0x1401f306d
lea rcx, str.internal_error:_entered_unreachable_code
lea r8, str.library_std_src_syspalwindowsmod.rsstrings_passed_to_WinAPI_cannot_contain_NULs
mov edx, 0x28
call fcn.14021b7a0
jmp 0x1401f306d
call qword [sym.imp.kernel32.dll_GetLastError]
shl rax, 0x20
or rax, 2
mov qword [rbp + 0x450], rax
lea rax, [rbp + 0x450]
mov qword [rbp + 0x550], rax
lea rax, [fcn.1401e2c80]
mov qword [rbp + 0x558], rax
lea rax, str.failure_getting_env_string_from_OS:
mov qword [rbp - 0x30], rax
mov qword [rbp - 0x28], 1
mov qword [rbp - 0x10], 0
lea rax, [rbp + 0x550]
mov qword [rbp - 0x20], rax
mov qword [rbp - 0x18], 1
lea rdx, str.library_std_src_syspalwindowsos.rs
lea rcx, [rbp - 0x30]
call fcn.14021b700
jmp 0x1401f306d
xor esi, esi
mov byte [rbp + 0x617], 1
mov rcx, rsi
mov rdx, r15
call fcn.14021b3b0
jmp 0x1401f306d
lea rax, str.library_std_src_syspalwindowsmod.rsstrings_passed_to_WinAPI_cannot_contain_NULs
mov rcx, r8
mov rdx, r15
mov r8, rax
call fcn.14021bbd0
jmp 0x1401f306d
lea r8, str.library_std_src_syspalwindowsmod.rsstrings_passed_to_WinAPI_cannot_contain_NULs
mov rcx, rsi
mov rdx, r15
call fcn.14021bbd0
jmp 0x1401f306d
mov edx, 0x14
mov rcx, rdi
call fcn.14021b3b0
jmp 0x1401f306d
mov ecx, 2
mov rdx, rbx
call fcn.14021b3b0
jmp 0x1401f306d
lea rax, str.library_std_src_syspalwindowsmod.rsstrings_passed_to_WinAPI_cannot_contain_NULs
mov rcx, r8
mov rdx, rbx
mov r8, rax
call fcn.14021bbd0
jmp 0x1401f306d
lea rax, str.library_std_src_syspalwindowsmod.rsstrings_passed_to_WinAPI_cannot_contain_NULs
mov rcx, r8
mov rdx, r14
mov r8, rax
call fcn.14021bbd0
ud2