Function at 0x140018ee0
Capabilities:
Create process on windows
Encode data using base64
Query environment variable

Disassembly:
push rbp
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbx
sub rsp, 0x2e8
lea rbp, [rsp + 0x80]
mov qword [rbp + 0x260], 0xfffffffffffffffe
mov byte [rbp + 0xb8], r9b
mov qword [rbp + 0x1a0], rcx
mov qword [rbp + 0x10], r8
mov al, byte [rdx + 0x48]
test al, al
sete cl
mov qword [rbp + 0x220], rdx
mov rdi, qword [rdx + 0x40]
test rdi, rdi
sete bl
and bl, cl
mov byte [rbp + 0x98], bl
je 0x140018f50
mov qword [rbp - 0x10], 0
test bl, bl
je 0x14001985d
jmp 0x140019db5
xorps xmm0, xmm0
movups xmmword [rbp + 0x188], xmm0
test al, al
jne 0x1400190f4
mov qword [rbp + 0x250], rdi
call qword [sym.imp.KERNEL32.dll_GetEnvironmentStringsW]
test rax, rax
je 0x14001b045
mov qword [rbp + 0xa0], rax
mov qword [rbp + 0xa8], rax
lea rsi, [rbp + 0x1e8]
lea r12, [rbp + 0xd8]
lea r13, [rbp + 0xc0]
lea r14, [rbp + 0xa0]
lea rbx, [rbp + 0x20]
lea rdi, [rbp + 0x130]
lea r15, [rbp + 0x180]
nop word cs:[rax + rax]
nop
mov rcx, r13
mov rdx, r14
call fcn.140018520
cmp qword [rbp + 0xc0], 0
je 0x1400190e0
movups xmm0, xmmword [rbp + 0xc0]
movups xmm1, xmmword [rbp + 0xd0]
movups xmm2, xmmword [rbp + 0xe0]
movaps xmmword [rbp + 0x1f0], xmm2
movaps xmmword [rbp + 0x1e0], xmm1
movaps xmmword [rbp + 0x1d0], xmm0
mov rax, qword [rsi + 0x10]
mov qword [rbp + 0x240], rax
movdqu xmm1, xmmword [rsi]
movdqa xmmword [rbp + 0x230], xmm1
mov rax, qword [rbp + 0x1e0]
mov qword [rbp + 0x1c0], rax
movaps xmmword [rbp + 0x1b0], xmm0
mov rcx, qword [rbp + 0x1b0]
add rax, rcx
mov qword [rbp + 0x130], rcx
mov qword [rbp + 0x138], rax
mov word [rbp + 0x140], 0
mov rcx, rbx
mov rdx, rdi
call fcn.140009160
movaps xmm0, xmmword [rbp + 0x1d0]
movaps xmmword [rbp + 0xc0], xmm0
mov rax, qword [rbp + 0x1e0]
mov qword [rbp + 0xd0], rax
mov rax, qword [rbp + 0x30]
mov qword [r12 + 0x10], rax
movups xmm0, xmmword [rbp + 0x20]
movups xmmword [r12], xmm0
mov rax, qword [rsi + 0x10]
mov qword [rbp + 0x140], rax
movups xmm0, xmmword [rsi]
movaps xmmword [rbp + 0x130], xmm0
mov byte [rbp + 0x25b], 0
mov rcx, rbx
mov rdx, r15
mov r8, r13
mov r9, rdi
call fcn.140009a50
mov rcx, qword [rbp + 0x20]
test rcx, rcx
je 0x140018fc0
mov rdx, qword [rbp + 0x28]
test rdx, rdx
je 0x140018fc0
mov r8d, 1
call fcn.140007460
jmp 0x140018fc0
mov rcx, qword [rbp + 0xa0]
call qword [sym.imp.KERNEL32.dll_FreeEnvironmentStringsW]
mov rdi, qword [rbp + 0x250]
mov rcx, qword [rbp + 0x220]
mov rax, qword [rcx + 0x30]
mov rcx, qword [rcx + 0x38]
xor edx, edx
test rcx, rcx
sete dl
cmove rdi, rcx
add rdx, rdx
mov qword [rbp + 0x20], rdx
mov qword [rbp + 0x28], rax
mov qword [rbp + 0x30], rcx
mov qword [rbp + 0x40], rdx
mov qword [rbp + 0x48], rax
mov qword [rbp + 0x50], rcx
mov qword [rbp + 0x60], rdi
nop
lea rcx, [rbp + 0x20]
call fcn.140007490
mov r14, rax
test rax, rax
je 0x140019831
mov r12, rdx
cmp qword [rdx], 0
je 0x140019180
mov rdi, qword [r14]
mov rsi, qword [r14 + 0x10]
test rsi, rsi
je 0x140019230
mov edx, 1
mov rcx, rsi
call fcn.140007450
mov rbx, rax
test rax, rax
jne 0x140019235
jmp 0x14001af38
mov rax, qword [rbp + 0x188]
mov qword [rbp + 0x228], rax
test rax, rax
je 0x140019130
mov rbx, qword [r14 + 0x18]
mov rdi, qword [r14 + 0x28]
mov rax, qword [rbp + 0x180]
mov r12, qword [rbp + 0x228]
mov qword [rbp + 0x1a8], rax
mov qword [rbp + 0x250], rax
lea rcx, [r12 + 8]
movzx r15d, word [r12 + 0x322]
xor r14d, r14d
nop dword [rax + rax]
cmp r14, r15
je 0x14001920f
mov r13, r14
add r14, 1
lea rsi, [rcx + 0x30]
mov r8, qword [rcx + 0x18]
mov r9d, dword [rcx + 0x28]
mov dword [rsp + 0x20], 1
mov rcx, rbx
mov edx, edi
call qword [sym.imp.KERNEL32.dll_CompareStringOrdinal]
mov rcx, rsi
cmp eax, 3
je 0x1400191d0
cmp eax, 1
jne 0x1400193a0
mov r15, r13
mov rax, qword [rbp + 0x250]
test rax, rax
je 0x140019130
mov r12, qword [r12 + r15*8 + 0x328]
add rax, 0xffffffffffffffff
jmp 0x1400191b0
mov ebx, 1
mov rcx, rbx
mov rdx, rdi
mov r8, rsi
call sub.VCRUNTIME140.dll_memcpy
mov qword [rbp + 0x1d0], rbx
mov qword [rbp + 0x1d8], rsi
mov qword [rbp + 0x1e0], rsi
mov r13, qword [r14 + 0x28]
xor esi, esi
mov rax, r13
add rax, r13
setae al
mov rdi, r13
add rdi, r13
jb 0x14001af47
mov r14, qword [r14 + 0x18]
mov sil, al
add rsi, rsi
test rdi, rdi
je 0x1400192a0
mov rcx, rdi
mov rdx, rsi
call fcn.140007450
mov rbx, rax
test rbx, rbx
jne 0x1400192ac
jmp 0x14001af51
mov rbx, rsi
test rbx, rbx
je 0x14001af51
mov rsi, rdi
shr rsi, 1
mov rcx, rbx
mov rdx, r14
mov r8, rdi
call sub.VCRUNTIME140.dll_memcpy
movups xmm0, xmmword [rbp + 0x1d0]
movaps xmmword [rbp + 0xc0], xmm0
mov rax, qword [rbp + 0x1e0]
mov qword [rbp + 0xd0], rax
mov qword [rbp + 0xd8], rbx
mov qword [rbp + 0xe0], rsi
mov qword [rbp + 0xe8], r13
mov rdi, qword [r12]
mov rsi, qword [r12 + 0x10]
test rsi, rsi
je 0x140019320
mov edx, 1
mov rcx, rsi
call fcn.140007450
mov rbx, rax
test rax, rax
jne 0x140019325
jmp 0x14001af38
mov ebx, 1
mov rcx, rbx
mov rdx, rdi
mov r8, rsi
call sub.VCRUNTIME140.dll_memcpy
mov qword [rbp + 0x1d0], rbx
mov qword [rbp + 0x1d8], rsi
mov qword [rbp + 0x1e0], rsi
lea rcx, [rbp + 0x130]
lea rdx, [rbp + 0x180]
lea r8, [rbp + 0xc0]
lea r9, [rbp + 0x1d0]
call fcn.140009a50
mov rcx, qword [rbp + 0x130]
test rcx, rcx
je 0x140019130
mov rdx, qword [rbp + 0x138]
test rdx, rdx
je 0x140019130
mov r8d, 1
call fcn.140007460
jmp 0x140019130
cmp eax, 2
mov rdi, qword [rbp + 0x250]
jne 0x14001aeab
mov byte [rbp + 0x1b0], 0
test rdi, rdi
je 0x140019561
mov rcx, qword [r12 + r13*8 + 0x328]
mov rax, rdi
add rax, 0xffffffffffffffff
je 0x14001948e
add rdi, 0xfffffffffffffffe
mov rdx, rax
and rdx, 7
je 0x140019409
nop word cs:[rax + rax]
nop dword [rax]
movzx ebx, word [rcx + 0x322]
mov rcx, qword [rcx + rbx*8 + 0x328]
add rax, 0xffffffffffffffff
add rdx, 0xffffffffffffffff
jne 0x1400193f0
cmp rdi, 7
jb 0x14001948e
nop
movzx edx, word [rcx + 0x322]
mov rcx, qword [rcx + rdx*8 + 0x328]
movzx edx, word [rcx + 0x322]
mov rcx, qword [rcx + rdx*8 + 0x328]
movzx edx, word [rcx + 0x322]
mov rcx, qword [rcx + rdx*8 + 0x328]
movzx edx, word [rcx + 0x322]
mov rcx, qword [rcx + rdx*8 + 0x328]
movzx edx, word [rcx + 0x322]
mov rcx, qword [rcx + rdx*8 + 0x328]
movzx edx, word [rcx + 0x322]
mov rcx, qword [rcx + rdx*8 + 0x328]
movzx edx, word [rcx + 0x322]
mov rcx, qword [rcx + rdx*8 + 0x328]
movzx edx, word [rcx + 0x322]
mov rcx, qword [rcx + rdx*8 + 0x328]
add rax, 0xfffffffffffffff8
jne 0x140019410
movzx eax, word [rcx + 0x322]
add rax, 0xffffffffffffffff
mov qword [rbp + 0x1d0], 0
mov qword [rbp + 0x1d8], rcx
mov qword [rbp + 0x1e0], rax
lea rcx, [rbp + 0xc0]
lea rdx, [rbp + 0x1d0]
lea r8, [rbp + 0x1b0]
call fcn.14000c4c0
mov rax, qword [rbp + 0x100]
mov qword [rbp + 0x170], rax
movups xmm0, xmmword [rbp + 0xc0]
movdqu xmm1, xmmword [rbp + 0xd0]
movups xmm2, xmmword [rbp + 0xe0]
movups xmm3, xmmword [rbp + 0xf0]
movaps xmmword [rbp + 0x160], xmm3
movaps xmmword [rbp + 0x150], xmm2
movdqa xmmword [rbp + 0x140], xmm1
movaps xmmword [rbp + 0x130], xmm0
mov rbx, qword [rbp + 0x108]
mov rdx, qword [rbp + 0x110]
mov rcx, qword [rbp + 0x118]
movzx eax, word [rdx + 0x322]
cmp rcx, rax
jb 0x14001959b
nop word cs:[rax + rax]
nop
mov rax, qword [rdx]
test rax, rax
je 0x140019599
movzx ecx, word [rdx + 0x320]
add rbx, 1
mov rdx, rax
cmp cx, word [rax + 0x322]
jae 0x140019540
jmp 0x14001959b
mov qword [rbp + 0x1d0], 0
mov qword [rbp + 0x1d8], r12
mov qword [rbp + 0x1e0], r13
lea rcx, [rbp + 0xc0]
lea rdx, [rbp + 0x1d0]
lea r8, [rbp + 0x1b0]
call fcn.14000c4c0
jmp 0x140019706
xor edx, edx
lea rdi, [rcx + rcx*2]
mov rax, rdi
shl rax, 4
movups xmm0, xmmword [rdx + rax + 8]
movups xmm1, xmmword [rdx + rax + 0x18]
movups xmm2, xmmword [rdx + rax + 0x28]
movaps xmmword [rbp + 0x1f0], xmm2
movaps xmmword [rbp + 0x1e0], xmm1
movaps xmmword [rbp + 0x1d0], xmm0
movaps xmm0, xmmword [rbp + 0x130]
movdqa xmm1, xmmword [rbp + 0x140]
movaps xmm2, xmmword [rbp + 0x150]
movups xmmword [rdx + rax + 0x28], xmm2
movdqu xmmword [rdx + rax + 0x18], xmm1
movups xmmword [rdx + rax + 8], xmm0
mov rax, qword [rdx + rdi*8 + 0x228]
lea rsi, [rbp + 0x200]
mov qword [rsi + 0x10], rax
movups xmm0, xmmword [rdx + rdi*8 + 0x218]
movups xmmword [rsi], xmm0
lea rax, [rbp + 0x160]
movups xmm0, xmmword [rax]
movups xmmword [rdx + rdi*8 + 0x218], xmm0
mov rax, qword [rax + 0x10]
mov qword [rdx + rdi*8 + 0x228], rax
test rbx, rbx
je 0x1400196be
mov rax, rbx
add rax, 0xffffffffffffffff
je 0x1400196be
mov rcx, qword [rdx + rcx*8 + 0x330]
add rbx, 0xfffffffffffffffe
mov rdx, rax
and rdx, 7
je 0x140019671
nop word [rax + rax]
mov rcx, qword [rcx + 0x328]
add rax, 0xffffffffffffffff
add rdx, 0xffffffffffffffff
jne 0x140019660
cmp rbx, 7
jb 0x1400196be
nop word [rax + rax]
mov rcx, qword [rcx + 0x328]
mov rcx, qword [rcx + 0x328]
mov rcx, qword [rcx + 0x328]
mov rcx, qword [rcx + 0x328]
mov rcx, qword [rcx + 0x328]
mov rcx, qword [rcx + 0x328]
mov rcx, qword [rcx + 0x328]
mov rcx, qword [rcx + 0x328]
add rax, 0xfffffffffffffff8
jne 0x140019680
mov rax, qword [rbp + 0x210]
mov qword [rbp + 0x100], rax
movaps xmm0, xmmword [rbp + 0x1d0]
movdqa xmm1, xmmword [rbp + 0x1e0]
movaps xmm2, xmmword [rbp + 0x1f0]
movaps xmm3, xmmword [rbp + 0x200]
movaps xmmword [rbp + 0xf0], xmm3
movaps xmmword [rbp + 0xe0], xmm2
movdqa xmmword [rbp + 0xd0], xmm1
movaps xmmword [rbp + 0xc0], xmm0
mov rax, qword [rbp + 0x100]
mov qword [rbp + 0x210], rax
movaps xmm0, xmmword [rbp + 0xc0]
movdqa xmm1, xmmword [rbp + 0xd0]
movaps xmm2, xmmword [rbp + 0xe0]
movaps xmm3, xmmword [rbp + 0xf0]
movaps xmmword [rbp + 0x200], xmm3
movaps xmmword [rbp + 0x1f0], xmm2
add qword [rbp + 0x190], 0xffffffffffffffff
movdqa xmmword [rbp + 0x1e0], xmm1
movaps xmmword [rbp + 0x1d0], xmm0
cmp byte [rbp + 0x1b0], 0
mov rdx, qword [rbp + 0x1a8]
je 0x1400197a6
test rdx, rdx
je 0x14001b017
mov rcx, qword [rbp + 0x228]
mov rax, qword [rcx + 0x328]
mov qword [rbp + 0x188], rax
add rdx, 0xffffffffffffffff
mov qword [rbp + 0x180], rdx
mov qword [rax], 0
mov edx, 0x388
mov r8d, 8
call fcn.140007460
mov rcx, qword [rbp + 0x1d0]
test rcx, rcx
je 0x140019130
mov rdx, qword [rbp + 0x1d8]
mov rsi, qword [rbp + 0x1e8]
mov rbx, qword [rbp + 0x1f0]
mov rdi, qword [rbp + 0x200]
mov r14, qword [rbp + 0x208]
test rdx, rdx
je 0x1400197e9
mov r8d, 1
call fcn.140007460
test rbx, rbx
je 0x140019809
test rsi, rsi
je 0x140019809
add rbx, rbx
je 0x140019809
mov r8d, 2
mov rcx, rsi
mov rdx, rbx
call fcn.140007460
test rdi, rdi
je 0x140019130
test r14, r14
je 0x140019130
mov r8d, 1
mov rcx, rdi
mov rdx, r14
call fcn.140007460
jmp 0x140019130
movups xmm0, xmmword [rbp + 0x180]
movups xmmword [rbp - 8], xmm0
mov rax, qword [rbp + 0x190]
mov qword [rbp + 8], rax
mov qword [rbp - 0x10], 1
mov bl, byte [rbp + 0x98]
test bl, bl
jne 0x140019db5
mov ecx, 4
mov edx, 1
call fcn.140007450
test rax, rax
je 0x14001b034
mov qword [rbp + 0xc0], rax
movaps xmm0, xmmword [0x14002e920]
movups xmmword [rbp + 0xc8], xmm0
lea rdx, str.PATHlibrary_std_src_sys_common_thread_info.rs
lea rcx, [rbp + 0xc0]
mov r8d, 4
call fcn.1400153b0
mov rax, qword [rbp + 0xd0]
mov qword [rbp + 0x30], rax
movups xmm0, xmmword [rbp + 0xc0]
movaps xmmword [rbp + 0x20], xmm0
mov rcx, qword [rbp + 0x20]
add rax, rcx
mov qword [rbp + 0xc0], rcx
mov qword [rbp + 0xc8], rax
mov word [rbp + 0xd0], 0
lea rcx, [rbp + 0x130]
lea rdx, [rbp + 0xc0]
call fcn.140009160
movaps xmm0, xmmword [rbp + 0x20]
movaps xmmword [rbp + 0x1d0], xmm0
mov rax, qword [rbp + 0x30]
mov qword [rbp + 0x1e0], rax
movups xmm0, xmmword [rbp + 0x130]
movups xmmword [rbp + 0x1e8], xmm0
mov r13, qword [rbp + 0x140]
mov qword [rbp + 0x1f8], r13
mov rax, qword [rbp + 0x1e8]
mov qword [rbp + 0x250], rax
mov rsi, qword [rbp]
test rsi, rsi
je 0x140019d65
mov r15, qword [rbp - 8]
mov r12, qword [sym.imp.KERNEL32.dll_CompareStringOrdinal]
movzx r14d, word [rsi + 0x322]
mov qword [rbp + 0x228], r14
neg r14
mov ebx, 0x210
mov rdi, 0xffffffffffffffff
lea rax, [r14 + rdi]
cmp rax, 0xffffffffffffffff
je 0x1400199b0
mov r8, qword [rsi + rbx*2 - 0x400]
mov r9d, dword [rsi + rbx*2 - 0x3f0]
mov dword [rsp + 0x20], 1
mov rcx, qword [rbp + 0x250]
mov edx, r13d
call r12
add rbx, 0x18
add rdi, 1
cmp eax, 3
je 0x140019960
cmp eax, 1
jne 0x1400199ce
jmp 0x1400199b7
mov rdi, qword [rbp + 0x228]
sub r15, 1
jb 0x140019d65
mov rsi, qword [rsi + rdi*8 + 0x328]
jmp 0x140019942
cmp eax, 2
jne 0x14001af5e
mov rax, qword [rsi + rbx - 0x10]
mov rcx, qword [rsi + rbx]
add rcx, rax
mov qword [rbp + 0x20], rax
mov qword [rbp + 0x28], rcx
mov word [rbp + 0x30], 0
mov byte [rbp + 0x38], 1
lea rdi, [rbp + 0x130]
nop dword [rax]
lea rcx, [rbp + 0xc0]
lea rdx, [rbp + 0x20]
call fcn.1400186f0
cmp qword [rbp + 0xc0], 0
je 0x140019d65
mov r14, qword [rbp + 0xd0]
mov qword [rbp + 0xb0], r14
movups xmm0, xmmword [rbp + 0xc0]
movaps xmmword [rbp + 0xa0], xmm0
mov qword [rbp + 0x190], r14
movaps xmmword [rbp + 0x180], xmm0
mov r13, qword [rbp + 0x180]
mov rax, qword [rbp + 0x220]
mov r12, qword [rax]
mov r15, qword [rax + 0x10]
test r15, r15
je 0x140019ae0
lea rax, [r12 + r15]
mov rcx, r12
jmp 0x140019a78
mov rcx, rdx
cmp rcx, rax
je 0x140019ae0
lea rdx, [rcx + 1]
movzx ebx, byte [rcx]
test bl, bl
jns 0x140019a70
add rcx, 2
cmp bl, 0xe0
jae 0x140019a95
cmp rdx, rax
cmove rcx, rdx
jmp 0x140019a73
cmp bl, 0xed
jne 0x140019ab9
cmp rdx, rax
cmove rcx, rdx
cmp rcx, rax
je 0x140019ae0
add rcx, 1
cmp rdx, rax
je 0x140019a73
cmp byte [rdx], 0xa0
jb 0x140019a73
jmp 0x14001afeb
cmp rdx, rax
mov rsi, rcx
cmove rsi, rdx
xor ecx, ecx
cmp rsi, rax
setne cl
add rcx, rsi
cmp bl, 0xf0
jb 0x140019a73
xor edx, edx
cmp rcx, rax
setne dl
add rcx, rdx
jmp 0x140019a73
test r14, r14
je 0x140019b00
mov edx, 1
mov rcx, r14
call fcn.140007450
test rax, rax
jne 0x140019b05
jmp 0x14001b008
mov eax, 1
mov qword [rbp + 0xc0], rax
mov qword [rbp + 0xc8], r14
mov qword [rbp + 0xd0], 0
lea rcx, [rbp + 0xc0]
mov rdx, r13
mov r8, r14
call fcn.1400153b0
mov rax, qword [rbp + 0xd0]
mov qword [rbp + 0x140], rax
movups xmm0, xmmword [rbp + 0xc0]
movaps xmmword [rbp + 0x130], xmm0
mov rcx, rdi
mov rdx, r12
mov r8, r15
call fcn.140011420
mov rbx, qword [rbp + 0x130]
mov rsi, qword [rbp + 0x140]
test rsi, rsi
je 0x140019b90
mov edx, 1
mov rcx, rsi
call fcn.140007450
test rax, rax
jne 0x140019b95
jmp 0x14001af38
mov eax, 1
mov qword [rbp + 0xc0], rax
mov qword [rbp + 0xc8], rsi
mov qword [rbp + 0xd0], 0
lea rcx, [rbp + 0xc0]
mov rdx, rbx
mov r8, rsi
call fcn.1400153b0
mov rax, qword [rbp + 0xd0]
mov qword [rbp + 0x240], rax
movups xmm0, xmmword [rbp + 0xc0]
movaps xmmword [rbp + 0x230], xmm0
mov r8d, 3
lea rcx, [rbp + 0x230]
lea rdx, str.exeNULcouldnt_generate_random_bytes:
call fcn.140011e80
mov rdx, qword [rbp + 0x138]
test rdx, rdx
je 0x140019c0f
mov r8d, 1
mov rcx, rbx
call fcn.140007460
mov rbx, qword [rbp + 0x230]
mov r8, qword [rbp + 0x240]
mov dword [rbp + 0x144], 0
lea rax, [rbp + 0x150]
mov word [rax + 4], 0
mov dword [rax], 0
mov qword [rbp + 0x148], 7
mov qword [rbp + 0x130], 0
mov dword [rbp + 0x140], 0
movabs rax, 0x102000000
mov qword [rbp + 0x138], rax
lea rcx, [rbp + 0x1b0]
mov rdx, rbx
mov r9, rdi
call fcn.140017df0
cmp dword [rbp + 0x1b0], 1
jne 0x140019ca0
mov al, byte [rbp + 0x1b8]
mov rdx, qword [rbp + 0x1c0]
cmp al, 3
je 0x140019ce5
jmp 0x140019d28
mov rdx, qword [rbp + 0x1b8]
lea rcx, [rbp + 0xc0]
mov qword [rbp + 0x228], rdx
call fcn.140017fd0
mov rcx, qword [rbp + 0x228]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
cmp dword [rbp + 0xc0], 1
jne 0x14001a243
mov al, byte [rbp + 0xc8]
mov rdx, qword [rbp + 0xd0]
cmp al, 3
jne 0x140019d28
mov rcx, qword [rdx]
mov rax, qword [rdx + 8]
mov qword [rbp + 0x228], rdx
call qword [rax]
mov rsi, qword [rbp + 0x228]
mov rax, qword [rsi + 8]
mov rdx, qword [rax + 8]
test rdx, rdx
je 0x140019d15
mov rcx, qword [rsi]
mov r8, qword [rax + 0x10]
call fcn.140007460
mov edx, 0x18
mov r8d, 8
mov rcx, rsi
call fcn.140007460
mov rdx, qword [rbp + 0x238]
test rdx, rdx
je 0x140019d42
mov r8d, 1
mov rcx, rbx
call fcn.140007460
mov rdx, qword [rbp + 0x188]
test rdx, rdx
je 0x140019a00
mov r8d, 1
mov rcx, r13
call fcn.140007460
jmp 0x140019a00
mov rdx, qword [rbp + 0x1d8]
test rdx, rdx
je 0x140019d88
mov rcx, qword [rbp + 0x1d0]
test rcx, rcx
je 0x140019d88
mov r8d, 1
call fcn.140007460
mov rdx, qword [rbp + 0x1f0]
test rdx, rdx
je 0x140019db5
cmp qword [rbp + 0x250], 0
je 0x140019db5
add rdx, rdx
je 0x140019db5
mov r8d, 2
mov rcx, qword [rbp + 0x250]
call fcn.140007460
mov qword [rbp + 0x70], 0
xor eax, eax
mov qword [rbp + 0x108], 0
xorps xmm0, xmm0
movups xmmword [rbp + 0xf4], xmm0
movups xmmword [rbp + 0xc8], xmm0
movups xmmword [rbp + 0xd8], xmm0
movups xmmword [rbp + 0xe8], xmm0
pcmpeqd xmm1, xmm1
movdqu xmmword [rbp + 0x110], xmm1
mov qword [rbp + 0x120], 0xffffffffffffffff
mov dword [rbp + 0xc0], 0x68
mov dword [rbp + 0xfc], 0x100
test rax, rax
lea rax, [rbp + 0x70]
mov rdi, qword [rbp + 0x220]
cmove rax, rdi
lea rcx, [rdi + 0x10]
lea rbx, [rbp + 0x80]
cmove rbx, rcx
mov rdx, qword [rax]
mov r8, qword [rbx]
mov rsi, qword [rdi + 0x18]
mov r14, qword [rdi + 0x28]
mov r15b, byte [rdi + 0x9d]
mov rax, qword [0x14002f3b0]
mov qword [rbp + 0x1d0], rax
movups xmmword [rbp + 0x1d8], xmm0
lea rcx, [rbp + 0x1d0]
xor r9d, r9d
call fcn.14001c630
mov rdi, rax
mov rbx, rdx
cmp dil, 4
jne 0x140019f10
shl r14, 5
add r14, rsi
xor r15b, 1
lea r13, [rbp + 0x1d0]
movzx r15d, r15b
mov r12d, 2
nop word [rax + rax]
cmp rsi, r14
je 0x140019fb7
mov rdx, qword [rbp + 0x1e0]
cmp rdx, qword [rbp + 0x1d8]
jne 0x140019ece
mov r8d, 1
mov rcx, r13
call fcn.14002c570
mov rdx, qword [rbp + 0x1e0]
mov rax, qword [rbp + 0x1d0]
mov word [rax + rdx*2], 0x20
add rdx, 1
mov qword [rbp + 0x1e0], rdx
cmp dword [rsi], 1
mov r9d, r15d
cmove r9d, r12d
mov rdx, qword [rsi + 8]
mov r8, qword [rsi + 0x18]
mov rcx, r13
call fcn.14001c630
mov rdi, rax
add rsi, 0x20
cmp dil, 4
je 0x140019ea0
mov rbx, rdx
mov rdx, qword [rbp + 0x1d8]
test rdx, rdx
je 0x140019f38
mov rcx, qword [rbp + 0x1d0]
test rcx, rcx
je 0x140019f38
add rdx, rdx
je 0x140019f38
mov r8d, 2
call fcn.140007460
mov rax, qword [rbp + 0x1a0]
mov qword [rax + 8], rdi
mov qword [rax + 0x10], rbx
mov qword [rax], 1
xor esi, esi
mov rcx, qword [rbp + 0x70]
test rcx, rcx
je 0x140019f6d
mov rdx, qword [rbp + 0x78]
test rdx, rdx
je 0x140019f6d
mov r8d, 1
call fcn.140007460
cmp qword [rbp - 0x10], 0
sete al
or sil, al
cmp sil, 1
je 0x14001a044
mov rcx, qword [rbp]
test rcx, rcx
je 0x14001a01c
mov rdx, qword [rbp - 8]
mov rax, qword [rbp + 8]
mov qword [rbp + 0xc8], rdx
mov qword [rbp + 0xd0], rcx
mov qword [rbp + 0xe8], rdx
mov qword [rbp + 0xf0], rcx
xor ecx, ecx
jmp 0x14001a023
mov rax, qword [rbp + 0x1d0]
mov rcx, qword [rbp + 0x1d8]
mov rdx, qword [rbp + 0x1e0]
mov qword [rbp + 0xa8], rcx
mov qword [rbp + 0xa0], rax
mov qword [rbp + 0xb0], rdx
cmp rdx, rcx
mov bl, byte [rbp + 0x98]
jne 0x14001a069
mov byte [rbp + 0x25e], 1
lea rcx, [rbp + 0xa0]
mov r8d, 1
call fcn.14002c570
mov r15, qword [0x14002f3b0]
mov rax, qword [rbp + 0xa0]
mov rdx, qword [rbp + 0xb0]
jmp 0x14001a070
mov ecx, 2
xor eax, eax
mov qword [rbp + 0xc0], rcx
mov qword [rbp + 0xe0], rcx
mov qword [rbp + 0x100], rax
lea rcx, [rbp + 0xc0]
call fcn.140007e40
cmp dword [rbp + 0x10], 3
jne 0x14001a054
mov rcx, qword [rbp + 0x18]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
nop
add rsp, 0x2e8
pop rbx
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
pop rbp
ret
mov r15, qword [0x14002f3b0]
mov word [rax + rdx*2], 0
add rdx, 1
mov rcx, qword [rbp + 0x220]
cmp byte [rcx + 0x9c], 0
mov eax, 0x400
mov r12d, 0x608
cmove r12d, eax
mov qword [rbp + 0xb0], rdx
or r12d, dword [rcx + 0x98]
test bl, bl
je 0x14001a1f9
xorps xmm0, xmm0
movaps xmmword [rbp - 0x20], xmm0
xor r14d, r14d
mov rcx, r15
movaps xmm0, xmmword [rbp - 0x20]
movaps xmmword [rbp - 0x30], xmm0
mov qword [rbp + 0x230], rcx
movups xmmword [rbp + 0x238], xmm0
mov rdx, qword [rbp + 0x220]
lea rax, [rdx + 0x50]
mov rdx, qword [rdx + 0x50]
test rdx, rdx
cmove rax, rdx
je 0x14001a300
mov r8, qword [rax]
mov r9, qword [rax + 0x10]
add r9, r8
xor eax, eax
mov rdx, r8
jmp 0x14001a10b
xor eax, eax
test bx, bx
je 0x14001a2cf
mov bx, 1
test ax, ax
jne 0x14001a100
cmp rdx, r9
je 0x14001a8c6
lea rax, [rdx + 1]
movzx r10d, byte [rdx]
movzx edi, r10b
test dil, dil
js 0x14001a136
mov rdx, rax
jmp 0x14001a1f0
cmp rax, r9
je 0x14001a17c
movzx esi, byte [rdx + 1]
add rdx, 2
and esi, 0x3f
mov eax, edi
and eax, 0x1f
cmp dil, 0xdf
jbe 0x14001a18c
cmp rdx, r9
je 0x14001a19d
movzx edi, byte [rdx]
add rdx, 1
and edi, 0x3f
shl esi, 6
or esi, edi
cmp r10b, 0xf0
jb 0x14001a1ad
cmp rdx, r9
je 0x14001a1cf
movzx edi, byte [rdx]
add rdx, 1
and edi, 0x3f
jmp 0x14001a1d4
xor esi, esi
mov rdx, r9
mov eax, edi
and eax, 0x1f
cmp dil, 0xdf
ja 0x14001a151
shl eax, 6
or esi, eax
mov edi, esi
cmp esi, 0xffff
ja 0x14001a1bc
jmp 0x14001a1f0
xor edi, edi
mov rdx, r9
shl esi, 6
or esi, edi
cmp r10b, 0xf0
jae 0x14001a16b
shl eax, 0xc
or esi, eax
mov edi, esi
cmp esi, 0xffff
jbe 0x14001a1f0
and edi, 0x3ff
or edi, 0xdc00
mov eax, edi
jmp 0x14001a102
xor edi, edi
mov rdx, r9
and eax, 7
shl eax, 0x12
shl esi, 6
or esi, eax
or esi, edi
mov edi, esi
cmp esi, 0xffff
ja 0x14001a1bc
nop dword [rax + rax]
xor eax, eax
mov ebx, edi
jmp 0x14001a102
mov rsi, qword [rbp - 8]
mov rdi, qword [rbp]
mov rbx, qword [rbp + 8]
mov qword [rbp + 0x180], rsi
mov qword [rbp + 0x188], rdi
mov qword [rbp + 0x190], rbx
mov qword [rbp + 0x230], r15
xorps xmm0, xmm0
movups xmmword [rbp + 0x238], xmm0
test rbx, rbx
je 0x14001a32a
xor r14d, r14d
mov qword [rbp + 0x1a8], r15
jmp 0x14001a36c
movaps xmm0, xmmword [rbp + 0x230]
movaps xmmword [rbp + 0x70], xmm0
mov rax, qword [rbp + 0x240]
mov qword [rbp + 0x80], rax
mov rdx, qword [rbp + 0x188]
test rdx, rdx
je 0x14001a276
mov r8d, 1
mov rcx, r13
call fcn.140007460
mov rdx, qword [rbp + 0x1d8]
test rdx, rdx
je 0x14001a299
mov rcx, qword [rbp + 0x1d0]
test rcx, rcx
je 0x14001a299
mov r8d, 1
call fcn.140007460
mov rdx, qword [rbp + 0x1f0]
test rdx, rdx
je 0x14001a2c6
cmp qword [rbp + 0x250], 0
je 0x14001a2c6
add rdx, rdx
je 0x14001a2c6
mov r8d, 2
mov rcx, qword [rbp + 0x250]
call fcn.140007460
mov rax, qword [rbp + 0x70]
jmp 0x140019dbf
lea rax, str.nul_byte_found_in_provided_data
mov rdx, qword [rbp + 0x1a0]
mov qword [rdx + 0x10], rax
movaps xmm0, xmmword [0x14002e930]
movups xmmword [rdx], xmm0
mov rdx, qword [rbp + 0x238]
test rdx, rdx
jne 0x14001ae5f
jmp 0x14001ae6f
mov qword [rbp + 0x1a8], r14
mov qword [rbp + 0x228], rcx
mov dword [rbp + 0x94], r12d
xorps xmm0, xmm0
movaps xmmword [rbp + 0x20], xmm0
xor eax, eax
mov qword [rbp + 0x98], rax
jmp 0x14001a95f
mov byte [rbp + 0x25f], 1
lea rcx, [rbp + 0x230]
mov r8d, 1
xor edx, edx
call fcn.14002c570
mov rax, qword [rbp + 0x230]
mov r14, qword [rbp + 0x240]
mov qword [rbp + 0x1a8], rax
mov word [rax + r14*2], 0
add r14, 1
mov qword [rbp + 0x240], r14
xor eax, eax
test rdi, rdi
cmove rbx, rdi
sete al
add rax, rax
mov qword [rbp + 0x1d0], rax
mov qword [rbp + 0x1d8], rsi
mov qword [rbp + 0x1e0], rdi
mov qword [rbp + 0x1f0], rax
mov qword [rbp + 0x1f8], rsi
mov qword [rbp + 0x200], rdi
mov qword [rbp + 0x210], rbx
lea rcx, [rbp + 0x130]
lea rdx, [rbp + 0x1d0]
call fcn.14000af90
mov rax, qword [rbp + 0x138]
test rax, rax
je 0x14001ad19
mov rcx, qword [rbp + 0x140]
lea rdi, [rcx + rcx*2]
mov rbx, rdi
shl rbx, 4
mov rcx, qword [rax + rbx + 8]
test rcx, rcx
je 0x14001ad19
mov rdx, qword [rax + rbx + 0x10]
mov r8, qword [rax + rbx + 0x18]
mov rsi, qword [rax + rbx + 0x20]
mov qword [rbp + 0x250], rsi
mov r15, qword [rax + rbx + 0x28]
mov rbx, qword [rax + rbx + 0x30]
mov qword [rbp + 0x228], rbx
mov rbx, qword [rax + rdi*8 + 0x228]
mov qword [rbp + 0x1c0], rbx
movups xmm0, xmmword [rax + rdi*8 + 0x218]
movaps xmmword [rbp + 0x1b0], xmm0
add r8, rcx
xor ebx, ebx
mov r11, rcx
jmp 0x14001a44b
xor ebx, ebx
test di, di
je 0x14001a7fd
mov di, 1
test bx, bx
jne 0x14001a440
cmp r11, r8
je 0x14001a549
lea rax, [r11 + 1]
movzx r10d, byte [r11]
movzx esi, r10b
test sil, sil
js 0x14001a476
mov r11, rax
jmp 0x14001a540
cmp rax, r8
je 0x14001a4c1
movzx ebx, byte [r11 + 1]
add r11, 2
and ebx, 0x3f
mov r9d, esi
and r9d, 0x1f
cmp sil, 0xdf
jbe 0x14001a4d3
cmp r11, r8
je 0x14001a4e6
movzx esi, byte [r11]
add r11, 1
and esi, 0x3f
shl ebx, 6
or ebx, esi
cmp r10b, 0xf0
jb 0x14001a4f6
cmp r11, r8
je 0x14001a51a
movzx esi, byte [r11]
add r11, 1
and esi, 0x3f
jmp 0x14001a51f
xor ebx, ebx
mov r11, r8
mov r9d, esi
and r9d, 0x1f
cmp sil, 0xdf
ja 0x14001a494
shl r9d, 6
or ebx, r9d
mov esi, ebx
cmp ebx, 0xffff
ja 0x14001a507
jmp 0x14001a540
xor esi, esi
mov r11, r8
shl ebx, 6
or ebx, esi
cmp r10b, 0xf0
jae 0x14001a4af
shl r9d, 0xc
or ebx, r9d
mov esi, ebx
cmp ebx, 0xffff
jbe 0x14001a540
and esi, 0x3ff
or esi, 0xdc00
mov ebx, esi
jmp 0x14001a442
xor esi, esi
mov r11, r8
and r9d, 7
shl r9d, 0x12
shl ebx, 6
or ebx, r9d
or ebx, esi
mov esi, ebx
cmp ebx, 0xffff
ja 0x14001a507
nop dword [rax]
xor ebx, ebx
mov edi, esi
jmp 0x14001a442
test rdx, rdx
mov rbx, qword [rbp + 0x228]
je 0x14001a560
mov r8d, 1
call fcn.140007460
mov rdi, qword [rbp + 0x250]
lea rax, [rdi + rbx*2]
mov qword [rbp + 0x130], rdi
mov qword [rbp + 0x138], r15
mov qword [rbp + 0x140], rdi
mov qword [rbp + 0x148], rax
mov rax, qword [rbp + 0x238]
sub rax, r14
cmp rax, rbx
jae 0x14001a5b8
lea rcx, [rbp + 0x230]
mov rdx, r14
mov r8, rbx
call fcn.14002c570
mov rax, qword [rbp + 0x230]
mov r14, qword [rbp + 0x240]
jmp 0x14001a5bf
mov rax, qword [rbp + 0x1a8]
lea r8, [rbx + rbx]
mov rsi, rax
lea rcx, [rax + r14*2]
mov rdx, rdi
call sub.VCRUNTIME140.dll_memcpy
add r14, rbx
mov qword [rbp + 0x240], r14
test r15, r15
je 0x14001a5f7
add r15, r15
je 0x14001a5f7
mov r8d, 2
mov rcx, rdi
mov rdx, r15
call fcn.140007460
cmp r14, qword [rbp + 0x238]
jne 0x14001a62a
mov byte [rbp + 0x25c], 1
mov r8d, 1
lea rcx, [rbp + 0x230]
mov rdx, r14
call fcn.14002c570
mov rsi, qword [rbp + 0x230]
mov r14, qword [rbp + 0x240]
mov word [rsi + r14*2], 0x3d
add r14, 1
mov qword [rbp + 0x240], r14
mov r15, qword [rbp + 0x1b0]
mov r14, qword [rbp + 0x1b8]
mov r8, qword [rbp + 0x1c0]
lea r9, [r15 + r8]
xor eax, eax
mov rdi, r15
jmp 0x14001a66b
xor eax, eax
test cx, cx
je 0x14001a854
mov cx, 1
test ax, ax
jne 0x14001a660
cmp rdi, r9
je 0x14001a759
lea rdx, [rdi + 1]
movzx eax, byte [rdi]
movzx ebx, al
test bl, bl
js 0x14001a693
mov rdi, rdx
jmp 0x14001a750
cmp rdx, r9
je 0x14001a6d6
movzx esi, byte [rdi + 1]
add rdi, 2
and esi, 0x3f
mov edx, ebx
and edx, 0x1f
cmp bl, 0xdf
jbe 0x14001a6e5
cmp rdi, r9
je 0x14001a6f6
movzx ebx, byte [rdi]
add rdi, 1
and ebx, 0x3f
shl esi, 6
or esi, ebx
cmp al, 0xf0
jb 0x14001a704
cmp rdi, r9
je 0x14001a726
movzx eax, byte [rdi]
add rdi, 1
and eax, 0x3f
jmp 0x14001a72b
xor esi, esi
mov rdi, r9
mov edx, ebx
and edx, 0x1f
cmp bl, 0xdf
ja 0x14001a6ad
shl edx, 6
or esi, edx
mov ebx, esi
cmp esi, 0xffff
ja 0x14001a713
jmp 0x14001a750
xor ebx, ebx
mov rdi, r9
shl esi, 6
or esi, ebx
cmp al, 0xf0
jae 0x14001a6c5
shl edx, 0xc
or esi, edx
mov ebx, esi
cmp esi, 0xffff
jbe 0x14001a750
and ebx, 0x3ff
or ebx, 0xdc00
mov eax, ebx
jmp 0x14001a662
xor eax, eax
mov rdi, r9
and edx, 7
shl edx, 0x12
shl esi, 6
or esi, edx
or esi, eax
mov ebx, esi
cmp esi, 0xffff
ja 0x14001a713
nop word cs:[rax + rax]
nop dword [rax]
xor eax, eax
mov ecx, ebx
jmp 0x14001a662
mov qword [rbp + 0x28], r14
mov qword [rbp + 0x20], r15
mov qword [rbp + 0x30], r8
mov qword [rbp + 0x130], r15
mov qword [rbp + 0x138], r9
mov word [rbp + 0x140], 0
lea rcx, [rbp + 0x230]
lea rdx, [rbp + 0x130]
call fcn.14000cce0
test r14, r14
je 0x14001a7a5
mov r8d, 1
mov rcx, r15
mov rdx, r14
call fcn.140007460
mov r14, qword [rbp + 0x240]
cmp r14, qword [rbp + 0x238]
jne 0x14001a7d8
mov byte [rbp + 0x25c], 0
mov r8d, 1
lea rcx, [rbp + 0x230]
mov rdx, r14
call fcn.14002c570
mov r14, qword [rbp + 0x240]
mov rax, qword [rbp + 0x230]
mov qword [rbp + 0x1a8], rax
mov word [rax + r14*2], 0
add r14, 1
mov qword [rbp + 0x240], r14
jmp 0x14001a3ac
test rdx, rdx
je 0x14001a80d
mov r8d, 1
call fcn.140007460
mov rdx, qword [rbp + 0x1b8]
test rdx, rdx
mov rsi, qword [rbp + 0x250]
je 0x14001a837
mov rcx, qword [rbp + 0x1b0]
test rcx, rcx
je 0x14001a837
mov r8d, 1
call fcn.140007460
test r15, r15
je 0x14001a86a
test rsi, rsi
je 0x14001a86a
add r15, r15
je 0x14001a86a
mov r8d, 2
mov rcx, rsi
mov rdx, r15
jmp 0x14001a865
test r14, r14
je 0x14001a86a
mov r8d, 1
mov rcx, r15
mov rdx, r14
call fcn.140007460
mov byte [rbp + 0x25f], 0
lea rcx, [rbp + 0x1d0]
call fcn.140007e40
mov rdx, qword [rbp + 0x238]
test rdx, rdx
je 0x14001a8a5
mov rcx, qword [rbp + 0x230]
test rcx, rcx
je 0x14001a8a5
add rdx, rdx
je 0x14001a8a5
mov r8d, 2
call fcn.140007460
lea rax, str.nul_byte_found_in_provided_data
mov rcx, qword [rbp + 0x1a0]
mov qword [rcx + 0x10], rax
movaps xmm0, xmmword [0x14002e930]
movups xmmword [rcx], xmm0
jmp 0x14001ae6f
mov qword [rbp + 0x228], rcx
mov qword [rbp + 0x1d0], r8
mov qword [rbp + 0x1d8], r9
mov word [rbp + 0x1e0], 0
lea rcx, [rbp + 0x130]
lea rdx, [rbp + 0x1d0]
call fcn.140009160
mov rdx, qword [rbp + 0x140]
cmp rdx, qword [rbp + 0x138]
mov dword [rbp + 0x94], r12d
jne 0x14001a927
lea rcx, [rbp + 0x130]
mov r8d, 1
call fcn.14002c570
mov rdx, qword [rbp + 0x140]
mov qword [rbp + 0x1a8], r14
lea rax, [rbp + 0x138]
mov r15, qword [rbp + 0x130]
mov word [r15 + rdx*2], 0
add rdx, 1
mov qword [rbp + 0x140], rdx
movups xmm0, xmmword [rax]
movaps xmmword [rbp + 0x20], xmm0
mov rax, r15
mov qword [rbp + 0x98], r15
movaps xmm0, xmmword [rbp + 0x20]
movaps xmmword [rbp + 0x180], xmm0
mov qword [rbp + 0x250], r15
mov qword [rbp + 0x1b0], r15
movups xmmword [rbp + 0x1b8], xmm0
xorps xmm0, xmm0
movaps xmmword [rbp + 0x20], xmm0
mov qword [rbp + 0x30], 0
lea rbx, [0x14003a1e0]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_AcquireSRWLockExclusive]
mov qword [rbp - 0x20], rbx
mov qword [rbp + 0x1d0], 0
mov qword [rbp + 0x1e0], 0
mov qword [rbp + 0x1f0], 0
mov rbx, qword [rbp + 0x220]
lea rax, [rbx + 0x68]
mov rcx, qword [rbx + 0x68]
mov r14, qword [rbx + 0x78]
lea rdi, [rbx + 0x78]
xor r8d, r8d
cmp r14, 4
cmove rdi, r8
mov r12, qword [rbx + 0x88]
add rbx, 0x88
cmp r12, 4
cmove rbx, r8
mov qword [rbp + 0x220], rbx
cmp byte [rbp + 0xb8], 0
lea r15, [rbp + 0x10]
lea rbx, [rbp + 0x180]
cmovne rbx, r15
lea rdx, [rbp + 0x18]
lea rsi, [rbp + 0x188]
cmovne rsi, rdx
mov qword [rbp + 0x180], 1
cmp rcx, 4
cmove rax, r8
cmovne rbx, rax
add rax, 8
cmp ecx, 4
mov rdx, qword [rbx]
cmove rax, rsi
mov r8, qword [rax]
mov qword [rsp + 0x20], r13
lea rcx, [rbp + 0x130]
mov r9d, 0xfffffff6
call fcn.14001bac0
cmp dword [rbp + 0x130], 1
jne 0x14001aa94
movups xmm0, xmmword [rbp + 0x138]
mov rax, qword [rbp + 0x1a0]
movups xmmword [rax + 8], xmm0
mov qword [rax], 1
mov rsi, qword [rbp + 0x250]
jmp 0x14001addb
cmp r14, 4
mov rax, rdi
cmove rax, r15
lea rcx, [rbp + 0x1e0]
add rdi, 8
cmp r14d, 4
mov rdx, qword [rbp + 0x138]
mov qword [rbp + 0xb8], rdx
mov rdx, qword [rax]
lea rsi, [rbp + 0x18]
cmove rdi, rsi
mov r8, qword [rdi]
mov qword [rsp + 0x20], rcx
lea rcx, [rbp + 0x130]
mov r9d, 0xfffffff5
call fcn.14001bac0
cmp dword [rbp + 0x130], 1
jne 0x14001ab16
movups xmm0, xmmword [rbp + 0x138]
mov rax, qword [rbp + 0x1a0]
movups xmmword [rax + 8], xmm0
mov qword [rax], 1
mov rsi, qword [rbp + 0x250]
mov rdi, qword [rbp + 0xb8]
jmp 0x14001add2
cmp r12, 4
mov rcx, qword [rbp + 0x220]
cmovne r15, rcx
lea rax, [rbp + 0x1f0]
add rcx, 8
cmp r12d, 4
mov rdx, qword [rbp + 0x138]
mov qword [rbp + 0x220], rdx
mov rdx, qword [r15]
cmove rcx, rsi
mov r8, qword [rcx]
mov qword [rsp + 0x20], rax
lea rcx, [rbp + 0x130]
mov r9d, 0xfffffff4
call fcn.14001bac0
cmp dword [rbp + 0x130], 1
mov rsi, qword [rbp + 0x250]
mov ecx, dword [rbp + 0x94]
jne 0x14001aba5
movups xmm0, xmmword [rbp + 0x138]
mov rax, qword [rbp + 0x1a0]
movups xmmword [rax + 8], xmm0
mov qword [rax], 1
mov rdi, qword [rbp + 0xb8]
mov rbx, qword [rbp + 0x220]
jmp 0x14001adc9
mov r12, qword [rbp + 0x138]
mov rdi, qword [rbp + 0xb8]
mov qword [rbp + 0x110], rdi
mov rbx, qword [rbp + 0x220]
mov qword [rbp + 0x118], rbx
mov qword [rbp + 0x120], r12
mov r14, qword [rbp + 0xa0]
lea rax, [rbp + 0x20]
mov qword [rsp + 0x48], rax
lea rax, [rbp + 0xc0]
mov qword [rsp + 0x40], rax
mov rax, qword [rbp + 0x98]
mov qword [rsp + 0x38], rax
mov rax, qword [rbp + 0x1a8]
mov qword [rsp + 0x30], rax
mov dword [rsp + 0x28], ecx
mov dword [rsp + 0x20], 1
xor ecx, ecx
mov rdx, r14
xor r8d, r8d
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_CreateProcessW]
test eax, eax
je 0x14001ad9c
mov rcx, qword [rbp + 0x28]
mov r15, qword [sym.imp.KERNEL32.dll_CloseHandle]
call r15
mov rax, qword [rbp + 0x20]
movups xmm0, xmmword [rbp + 0x1d0]
movdqu xmm1, xmmword [rbp + 0x1e0]
movups xmm2, xmmword [rbp + 0x1f0]
mov rcx, qword [rbp + 0x1a0]
movups xmmword [rcx + 0x10], xmm0
movdqu xmmword [rcx + 0x20], xmm1
movups xmmword [rcx + 0x30], xmm2
mov qword [rcx + 8], rax
mov qword [rcx], 0
mov rcx, r12
call r15
mov rcx, rbx
call r15
mov rcx, rdi
call r15
lea rcx, [0x14003a1e0]
call qword [sym.imp.KERNEL32.dll_ReleaseSRWLockExclusive]
mov rdx, qword [rbp + 0x1b8]
test rdx, rdx
je 0x14001acad
add rdx, rdx
je 0x14001acad
mov r8d, 2
mov rcx, rsi
call fcn.140007460
mov rdx, qword [rbp + 0x238]
test rdx, rdx
je 0x14001acd0
add rdx, rdx
je 0x14001acd0
mov r8d, 2
mov rcx, qword [rbp + 0x228]
call fcn.140007460
mov rdx, qword [rbp + 0xa8]
test rdx, rdx
je 0x14001acef
add rdx, rdx
je 0x14001acef
mov r8d, 2
mov rcx, r14
call fcn.140007460
mov rcx, qword [rbp + 0x70]
test rcx, rcx
je 0x14001a044
mov rdx, qword [rbp + 0x78]
test rdx, rdx
je 0x14001a044
mov r8d, 1
call fcn.140007460
jmp 0x14001a044
mov byte [rbp + 0x25f], 0
lea rcx, [rbp + 0x1d0]
call fcn.140007e40
mov r15, qword [0x14002f3b0]
cmp r14, qword [rbp + 0x238]
mov rax, qword [rbp + 0x1a8]
jne 0x14001ad6d
mov byte [rbp + 0x25f], 0
lea rcx, [rbp + 0x230]
mov r8d, 1
mov rdx, r14
call fcn.14002c570
mov rax, qword [rbp + 0x230]
mov r14, qword [rbp + 0x240]
mov word [rax + r14*2], 0
add r14, 1
mov qword [rbp + 0x240], r14
mov rcx, qword [rbp + 0x230]
lea rax, [rbp + 0x238]
movups xmm0, xmmword [rax]
movaps xmmword [rbp - 0x20], xmm0
mov r14, rcx
jmp 0x14001a0ba
call qword [sym.imp.KERNEL32.dll_GetLastError]
shl rax, 0x20
mov rcx, qword [rbp + 0x1a0]
mov qword [rcx + 8], rax
mov qword [rcx + 0x10], 0
mov qword [rcx], 1
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
cmp qword [rbp + 0x1d0], 0
je 0x14001adf2
mov rcx, qword [rbp + 0x1d8]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
cmp qword [rbp + 0x1e0], 0
je 0x14001ae09
mov rcx, qword [rbp + 0x1e8]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
cmp qword [rbp + 0x1f0], 0
je 0x14001ae20
mov rcx, qword [rbp + 0x1f8]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea rcx, [0x14003a1e0]
call qword [sym.imp.KERNEL32.dll_ReleaseSRWLockExclusive]
mov rdx, qword [rbp + 0x1b8]
test rdx, rdx
je 0x14001ae4c
add rdx, rdx
je 0x14001ae4c
mov r8d, 2
mov rcx, rsi
call fcn.140007460
mov rcx, qword [rbp + 0x228]
mov rdx, qword [rbp + 0x238]
test rdx, rdx
je 0x14001ae6f
add rdx, rdx
je 0x14001ae6f
mov r8d, 2
call fcn.140007460
mov rdx, qword [rbp + 0xa8]
mov sil, 1
test rdx, rdx
je 0x140019f50
mov rcx, qword [rbp + 0xa0]
test rcx, rcx
je 0x140019f50
add rdx, rdx
je 0x140019f50
mov r8d, 2
call fcn.140007460
jmp 0x140019f50
call qword [sym.imp.KERNEL32.dll_GetLastError]
shl rax, 0x20
mov qword [rbp + 0x1d0], rax
mov qword [rbp + 0x1d8], 0
lea rax, [rbp + 0x1d0]
mov qword [rbp + 0x1b0], rax
lea rax, [0x14000e210]
mov qword [rbp + 0x1b8], rax
lea rax, str.comparing_environment_keys_failed:
mov qword [rbp + 0xc0], rax
mov qword [rbp + 0xc8], 1
mov qword [rbp + 0xd0], 0
lea rax, [rbp + 0x1b0]
mov qword [rbp + 0xe0], rax
mov qword [rbp + 0xe8], 1
lea rdx, str.library_std_src_syswindowsprocess.rs
lea rcx, [rbp + 0xc0]
call fcn.14002cbb0
jmp 0x14001b0cd
mov edx, 1
mov rcx, rsi
call fcn.14002cc20
ud2
call fcn.1400268d0
jmp 0x14001b0cd
mov rcx, rdi
mov rdx, rsi
call fcn.14002cc20
ud2
call qword [sym.imp.KERNEL32.dll_GetLastError]
shl rax, 0x20
mov qword [rbp + 0x130], rax
mov qword [rbp + 0x138], 0
lea rax, [rbp + 0x130]
mov qword [rbp + 0x1b0], rax
lea rax, [0x14000e210]
mov qword [rbp + 0x1b8], rax
lea rax, str.comparing_environment_keys_failed:
mov qword [rbp + 0xc0], rax
mov qword [rbp + 0xc8], 1
mov qword [rbp + 0xd0], 0
lea rax, [rbp + 0x1b0]
mov qword [rbp + 0xe0], rax
mov qword [rbp + 0xe8], 1
lea rdx, str.library_std_src_syswindowsprocess.rs
lea rcx, [rbp + 0xc0]
call fcn.14002cbb0
jmp 0x14001b0cd
lea rcx, [0x14002ecb8]
lea r8, str.library_std_src_syswindowsprocess.rs
mov edx, 0x2b
call fcn.14002ccf0
jmp 0x14001b0cd
mov edx, 1
mov rcx, r14
call fcn.14002cc20
ud2
lea rcx, str.assertion_failed:_self.height___0
lea r8, [0x14002efd8]
mov edx, 0x21
call fcn.14002ccf0
jmp 0x14001b0cd
mov ecx, 4
mov edx, 1
call fcn.14002cc20
ud2
call qword [sym.imp.KERNEL32.dll_GetLastError]
shl rax, 0x20
mov qword [rbp + 0x1d0], rax
mov qword [rbp + 0x1d8], 0
lea rax, [rbp + 0x1d0]
mov qword [rbp + 0x1b0], rax
lea rax, [0x14000e210]
mov qword [rbp + 0x1b8], rax
lea rax, str.failure_getting_env_string_from_OS:
mov qword [rbp + 0xc0], rax
mov qword [rbp + 0xc8], 1
mov qword [rbp + 0xd0], 0
lea rax, [rbp + 0x1b0]
mov qword [rbp + 0xe0], rax
mov qword [rbp + 0xe8], 1
lea rdx, str.library_std_src_syswindowsos.rs
lea rcx, [rbp + 0xc0]
call fcn.14002cbb0
ud2