Function at 0x14008ee50
Capabilities:
Create process on windows
Get common file path
Query environment variable

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x658
movdqa xmmword [rsp + 0x640], xmm6
mov qword [rsp + 0x138], rcx
mov r13, qword [rdx + 0x60]
mov qword [rsp + 0x100], rdx
movzx eax, byte [rdx + 0x68]
test al, al
mov qword [rsp + 0xf8], r8
jne 0x14008eeac
test r13, r13
jne 0x14008eeac
mov r14, r8
mov qword [rsp + 0x1f8], 0
xor r15d, r15d
jmp 0x14008fb3b
mov qword [rsp + 0x70], 0
mov qword [rsp + 0x80], 0
test al, al
jne 0x14008f009
mov rsi, r13
call sub.KERNEL32.dll_GetEnvironmentStringsW
test rax, rax
je 0x1400929a3
mov qword [rsp + 0x140], rax
lea rdi, [rsp + 0x148]
mov qword [rsp + 0x148], rax
lea rbp, [rsp + 0xa8]
lea rbx, [rsp + 0x240]
lea r14, [rsp + 0x110]
lea r15, [rsp + 0x160]
lea r12, [rsp + 0x70]
lea r13, [rsp + 0x90]
nop
mov rcx, rbx
mov rdx, rdi
call fcn.14008cc90
cmp byte [rsp + 0x258], 2
je 0x14008eff9
mov rax, qword [rsp + 0x240]
mov rcx, qword [rsp + 0x250]
add rcx, rax
mov qword [rsp + 0x160], rax
mov qword [rsp + 0x168], rcx
mov word [rsp + 0x170], 0
mov rcx, r14
mov rdx, r15
call fcn.140079120
movups xmm0, xmmword [rsp + 0x240]
movups xmm1, xmmword [rsp + 0x250]
movups xmmword [rbp + 0x10], xmm1
movups xmmword [rbp], xmm0
movdqu xmm0, xmmword [rsp + 0x110]
movdqa xmmword [rsp + 0x90], xmm0
mov rax, qword [rsp + 0x120]
mov qword [rsp + 0xa0], rax
mov rcx, r15
mov rdx, r12
mov r8, r13
lea r9, [rsp + 0x260]
call fcn.14006ae20
cmp byte [rsp + 0x178], 2
je 0x14008ef20
cmp qword [rsp + 0x168], 0
je 0x14008ef20
mov r8, qword [rsp + 0x160]
mov rcx, qword [0x1401a4140]
xor edx, edx
call sub.KERNEL32.dll_HeapFree
jmp 0x14008ef20
mov rcx, qword [rsp + 0x140]
call sub.KERNEL32.dll_FreeEnvironmentStringsW
mov r13, rsi
movabs rdx, 0x3ffffffffffffffe
mov rcx, qword [rsp + 0x100]
mov rax, qword [rcx + 0x50]
mov rdi, qword [rcx + 0x58]
xor ecx, ecx
test rax, rax
setne cl
mov qword [rsp + 0x68], rcx
cmove r13, rax
xor r12d, r12d
inc rdx
mov qword [rsp + 0x58], rdx
jmp 0x14008f052
xor eax, eax
test r13, r13
je 0x14008f8fd
test r12, r12
jne 0x14008f0b0
cmp qword [rsp + 0x68], 0
je 0x14008f0b0
mov ecx, 1
mov qword [rsp + 0x68], rcx
test rdi, rdi
je 0x14008f0bd
mov rcx, rdi
mov r12, rax
and rcx, 7
je 0x14008f0c2
nop word cs:[rax + rax]
mov r12, qword [r12 + 0x3d8]
dec rcx
jne 0x14008f090
mov rax, rdi
and rax, 0xfffffffffffffff8
cmp rdi, 8
jae 0x14008f0d0
jmp 0x14008f10f
cmp qword [rsp + 0x68], 0
jne 0x14008f113
jmp 0x1400928ac
mov r12, rax
jmp 0x14008f10f
mov rax, rdi
cmp rdi, 8
jb 0x14008f10f
nop dword [rax + rax]
mov rcx, qword [r12 + 0x3d8]
mov rcx, qword [rcx + 0x3d8]
mov rcx, qword [rcx + 0x3d8]
mov rcx, qword [rcx + 0x3d8]
mov rcx, qword [rcx + 0x3d8]
mov rcx, qword [rcx + 0x3d8]
mov rcx, qword [rcx + 0x3d8]
mov r12, qword [rcx + 0x3d8]
add rax, 0xfffffffffffffff8
jne 0x14008f0d0
xor edi, edi
xor eax, eax
movzx ecx, word [r12 + 0x3d2]
mov r14, r12
mov r15, rdi
cmp rdi, rcx
jb 0x14008f158
nop word [rax + rax]
mov rcx, qword [r14 + 0x160]
test rcx, rcx
je 0x140092336
movzx r15d, word [r14 + 0x3d0]
inc rax
mov r14, rcx
cmp r15w, word [rcx + 0x3d2]
jae 0x14008f130
test rax, rax
je 0x14008f1f0
mov r12, qword [r14 + r15*8 + 0x3e0]
mov rcx, rax
dec rcx
je 0x14008f1df
mov rdx, rcx
and rdx, 7
je 0x14008f191
nop word [rax + rax]
mov r12, qword [r12 + 0x3d8]
dec rdx
jne 0x14008f180
and rcx, 0xfffffffffffffff8
add rax, 0xfffffffffffffffe
cmp rax, 7
jb 0x14008f1df
nop dword [rax + rax]
mov rax, qword [r12 + 0x3d8]
mov rax, qword [rax + 0x3d8]
mov rax, qword [rax + 0x3d8]
mov rax, qword [rax + 0x3d8]
mov rax, qword [rax + 0x3d8]
mov rax, qword [rax + 0x3d8]
mov rax, qword [rax + 0x3d8]
mov r12, qword [rax + 0x3d8]
add rcx, 0xfffffffffffffff8
jne 0x14008f1a0
xor edi, edi
jmp 0x14008f1f7
lea rdi, [r15 + 1]
mov r12, r14
dec r13
imul rax, r15, 0x38
lea rsi, [r14 + rax]
add rsi, 0x168
shl r15, 5
cmp byte [r14 + r15 + 0x18], 2
jne 0x14008f270
mov rbp, qword [rsp + 0x70]
mov eax, 0
test rbp, rbp
je 0x14008f052
mov r9, qword [rsi]
mov rax, qword [rsi + 0x10]
mov rbx, qword [rsp + 0x78]
mov qword [rsp + 0x20], rax
lea rcx, [rsp + 0x110]
mov rdx, rbp
mov r8, rbx
call fcn.14006dee0
cmp qword [rsp + 0x110], 0
je 0x14008f44c
xor eax, eax
jmp 0x14008f052
mov qword [rsp + 0x88], r13
mov r13, qword [rsi + 0x18]
mov rbx, qword [rsi + 0x28]
test rbx, rbx
je 0x14008f2af
js 0x1400928c9
mov rax, qword [0x14015c1f8]
movzx eax, byte [rax]
mov edx, 1
mov rcx, rbx
call fcn.1400893a0
mov rbp, rax
test rax, rax
jne 0x14008f2b4
jmp 0x1400928f9
mov ebp, 1
mov rcx, rbp
mov rdx, r13
mov r8, rbx
call sub.msvcrt.dll_memcpy
movzx eax, byte [rsi + 0x30]
mov qword [rsp + 0x90], rbp
mov qword [rsp + 0x98], rbx
mov qword [rsp + 0xa0], rbx
mov byte [rsp + 0xa8], al
mov rbx, qword [rsi]
mov rsi, qword [rsi + 0x10]
mov ebp, 2
test rsi, rsi
je 0x14008f330
cmp rsi, qword [rsp + 0x58]
ja 0x1400928d3
mov r13, rsi
add r13, rsi
je 0x14008f330
mov rax, qword [0x14015c1f8]
movzx eax, byte [rax]
mov edx, 2
mov rcx, r13
call fcn.1400893a0
test rax, rax
je 0x14009290b
mov rbp, rax
jmp 0x14008f333
xor r13d, r13d
add r14, r15
mov rcx, rbp
mov rdx, rbx
mov r8, r13
call sub.msvcrt.dll_memcpy
movdqu xmm0, xmmword [rsp + 0x90]
movups xmm1, xmmword [rsp + 0xa0]
lea rax, [rsp + 0x258]
movdqu xmmword [rax], xmm0
movups xmmword [rax + 0x10], xmm1
mov qword [rsp + 0x240], rbp
mov qword [rsp + 0x248], rsi
mov qword [rsp + 0x250], rsi
mov r13, qword [r14]
mov rbx, qword [r14 + 0x10]
test rbx, rbx
je 0x14008f3b3
js 0x1400928ef
mov rax, qword [0x14015c1f8]
movzx eax, byte [rax]
mov edx, 1
mov rcx, rbx
call fcn.1400893a0
mov rbp, rax
test rax, rax
jne 0x14008f3b8
jmp 0x1400928dd
mov ebp, 1
mov rcx, rbp
mov rdx, r13
mov r8, rbx
call sub.msvcrt.dll_memcpy
movzx eax, byte [r14 + 0x18]
mov qword [rsp + 0x90], rbp
mov qword [rsp + 0x98], rbx
mov qword [rsp + 0xa0], rbx
mov byte [rsp + 0xa8], al
lea rcx, [rsp + 0x160]
lea rdx, [rsp + 0x70]
lea r8, [rsp + 0x240]
lea r9, [rsp + 0x90]
call fcn.14006ae20
cmp byte [rsp + 0x178], 2
mov r13, qword [rsp + 0x88]
je 0x14008f050
cmp qword [rsp + 0x168], 0
je 0x14008f050
mov r8, qword [rsp + 0x160]
mov rcx, qword [0x1401a4140]
xor edx, edx
call sub.KERNEL32.dll_HeapFree
jmp 0x14008f050
mov rax, qword [rsp + 0x118]
mov rdx, qword [rsp + 0x120]
mov rcx, qword [rsp + 0x128]
mov byte [rsp + 0x218], 0
test rdx, rdx
je 0x14008f614
mov rcx, qword [rax + rcx*8 + 0x3d8]
mov rax, rdx
dec rax
je 0x14008f54e
mov r8, rax
and r8, 7
je 0x14008f4b9
nop word cs:[rax + rax]
movzx r9d, word [rcx + 0x3d2]
mov rcx, qword [rcx + r9*8 + 0x3d8]
dec r8
jne 0x14008f4a0
and rax, 0xfffffffffffffff8
add rdx, 0xfffffffffffffffe
cmp rdx, 7
jb 0x14008f54e
nop word [rax + rax]
movzx edx, word [rcx + 0x3d2]
mov rcx, qword [rcx + rdx*8 + 0x3d8]
movzx edx, word [rcx + 0x3d2]
mov rcx, qword [rcx + rdx*8 + 0x3d8]
movzx edx, word [rcx + 0x3d2]
mov rcx, qword [rcx + rdx*8 + 0x3d8]
movzx edx, word [rcx + 0x3d2]
mov rcx, qword [rcx + rdx*8 + 0x3d8]
movzx edx, word [rcx + 0x3d2]
mov rcx, qword [rcx + rdx*8 + 0x3d8]
movzx edx, word [rcx + 0x3d2]
mov rcx, qword [rcx + rdx*8 + 0x3d8]
movzx edx, word [rcx + 0x3d2]
mov rcx, qword [rcx + rdx*8 + 0x3d8]
movzx edx, word [rcx + 0x3d2]
mov rcx, qword [rcx + rdx*8 + 0x3d8]
add rax, 0xfffffffffffffff8
jne 0x14008f4d0
movzx eax, word [rcx + 0x3d2]
dec rax
mov qword [rsp + 0x140], rcx
mov qword [rsp + 0x148], 0
mov qword [rsp + 0x150], rax
lea rcx, [rsp + 0x240]
lea rdx, [rsp + 0x140]
lea r8, [rsp + 0x218]
call fcn.14006d9f0
mov rax, qword [rsp + 0x290]
mov qword [rsp + 0x1b0], rax
movups xmm0, xmmword [rsp + 0x280]
movaps xmmword [rsp + 0x1a0], xmm0
movdqu xmm0, xmmword [rsp + 0x240]
movups xmm1, xmmword [rsp + 0x250]
movups xmm2, xmmword [rsp + 0x260]
movups xmm3, xmmword [rsp + 0x270]
movaps xmmword [rsp + 0x190], xmm3
movaps xmmword [rsp + 0x180], xmm2
movaps xmmword [rsp + 0x170], xmm1
movdqa xmmword [rsp + 0x160], xmm0
mov rdx, qword [rsp + 0x298]
mov rax, qword [rsp + 0x2a8]
movzx ecx, word [rdx + 0x3d2]
cmp rax, rcx
jae 0x14008f652
mov rcx, rdx
jmp 0x14008f689
mov qword [rsp + 0x90], rax
mov qword [rsp + 0x98], 0
mov qword [rsp + 0xa0], rcx
lea rcx, [rsp + 0x240]
lea rdx, [rsp + 0x90]
lea r8, [rsp + 0x218]
call fcn.14006d9f0
jmp 0x14008f7a3
mov r8, qword [rsp + 0x2a0]
nop word [rax + rax]
mov rcx, qword [rdx + 0x160]
test rcx, rcx
je 0x14008f684
movzx eax, word [rdx + 0x3d0]
inc r8
mov rdx, rcx
cmp ax, word [rcx + 0x3d2]
jae 0x14008f660
jmp 0x14008f689
mov rax, r8
xor ecx, ecx
imul rdx, rax, 0x38
shl rax, 5
mov r8, qword [rcx + rdx + 0x198]
mov qword [rsp + 0xc0], r8
movups xmm0, xmmword [rcx + rdx + 0x168]
movups xmm1, xmmword [rcx + rdx + 0x178]
movups xmm2, xmmword [rcx + rdx + 0x188]
movaps xmmword [rsp + 0xb0], xmm2
movaps xmmword [rsp + 0xa0], xmm1
movaps xmmword [rsp + 0x90], xmm0
mov r8, qword [rsp + 0x190]
mov qword [rcx + rdx + 0x198], r8
movaps xmm0, xmmword [rsp + 0x160]
movaps xmm1, xmmword [rsp + 0x170]
movaps xmm2, xmmword [rsp + 0x180]
movups xmmword [rcx + rdx + 0x188], xmm2
movups xmmword [rcx + rdx + 0x178], xmm1
movups xmmword [rcx + rdx + 0x168], xmm0
movups xmm0, xmmword [rcx + rax]
movups xmm1, xmmword [rcx + rax + 0x10]
lea rdx, [rsp + 0xc8]
movups xmmword [rdx + 0x10], xmm1
movups xmmword [rdx], xmm0
lea rdx, [rsp + 0x198]
movups xmm0, xmmword [rdx]
movups xmm1, xmmword [rdx + 0x10]
movups xmmword [rcx + rax], xmm0
movups xmmword [rcx + rax + 0x10], xmm1
mov rax, qword [rsp + 0xe0]
mov qword [rsp + 0x290], rax
movaps xmm0, xmmword [rsp + 0xd0]
movaps xmmword [rsp + 0x280], xmm0
movdqa xmm0, xmmword [rsp + 0x90]
movaps xmm1, xmmword [rsp + 0xa0]
movaps xmm2, xmmword [rsp + 0xb0]
movaps xmm3, xmmword [rsp + 0xc0]
movaps xmmword [rsp + 0x270], xmm3
movaps xmmword [rsp + 0x260], xmm2
movaps xmmword [rsp + 0x250], xmm1
movdqa xmmword [rsp + 0x240], xmm0
mov rax, qword [rsp + 0x290]
mov qword [rsp + 0xe0], rax
movaps xmm0, xmmword [rsp + 0x280]
movaps xmmword [rsp + 0xd0], xmm0
movdqa xmm0, xmmword [rsp + 0x240]
movaps xmm1, xmmword [rsp + 0x250]
movaps xmm2, xmmword [rsp + 0x260]
movaps xmm3, xmmword [rsp + 0x270]
movaps xmmword [rsp + 0xc0], xmm3
movaps xmmword [rsp + 0xb0], xmm2
dec qword [rsp + 0x80]
movaps xmmword [rsp + 0xa0], xmm1
movdqa xmmword [rsp + 0x90], xmm0
cmp byte [rsp + 0x218], 0
je 0x14008f850
test rbx, rbx
je 0x14009291d
mov rax, qword [rbp + 0x3d8]
mov qword [rsp + 0x70], rax
dec rbx
mov qword [rsp + 0x78], rbx
mov qword [rax + 0x160], 0
mov rcx, qword [0x1401a4140]
xor edx, edx
mov r8, rbp
call sub.KERNEL32.dll_HeapFree
cmp byte [rsp + 0xc0], 2
mov eax, 0
je 0x14008f052
mov r15, r13
mov r13, qword [rsp + 0x90]
mov r14, qword [rsp + 0x98]
mov rbx, qword [rsp + 0xc8]
mov rsi, qword [rsp + 0xd0]
movzx ebp, byte [rsp + 0xe0]
cmp qword [rsp + 0xb0], 0
je 0x14008f8af
mov r8, qword [rsp + 0xa8]
mov rcx, qword [0x1401a4140]
xor edx, edx
call sub.KERNEL32.dll_HeapFree
test r14, r14
je 0x14008f8c5
mov rcx, qword [0x1401a4140]
xor edx, edx
mov r8, r13
call sub.KERNEL32.dll_HeapFree
mov eax, 0
cmp bpl, 2
mov r13, r15
je 0x14008f052
mov eax, 0
test rsi, rsi
je 0x14008f052
mov rcx, qword [0x1401a4140]
xor edx, edx
mov r8, rbx
call sub.KERNEL32.dll_HeapFree
xor eax, eax
jmp 0x14008f052
mov rax, qword [rsp + 0x80]
mov qword [rsp + 0x210], rax
movdqu xmm0, xmmword [rsp + 0x70]
movdqu xmmword [rsp + 0x200], xmm0
mov qword [rsp + 0x1f8], 1
mov rax, qword [0x14015c1f8]
movzx eax, byte [rax]
mov r13d, 4
mov ecx, 4
mov edx, 1
call fcn.1400893a0
test rax, rax
je 0x14009293a
mov dword [rax], 0x48544150
mov qword [rsp + 0x90], rax
mov qword [rsp + 0x98], 4
mov qword [rsp + 0xa0], 4
mov byte [rsp + 0xa8], 0
mov rcx, rax
add rcx, 4
mov qword [rsp + 0x160], rax
mov qword [rsp + 0x168], rcx
mov word [rsp + 0x170], 0
lea rcx, [rsp + 0x110]
lea rdx, [rsp + 0x160]
call fcn.140079120
movups xmm0, xmmword [rsp + 0x90]
movups xmm1, xmmword [rsp + 0xa0]
movups xmmword [rsp + 0x268], xmm1
movups xmmword [rsp + 0x258], xmm0
movdqu xmm0, xmmword [rsp + 0x110]
movdqa xmmword [rsp + 0x240], xmm0
mov r14, qword [rsp + 0x120]
mov qword [rsp + 0x250], r14
mov rsi, qword [rsp + 0x240]
mov r12, qword [rsp + 0x200]
test r12, r12
mov rax, qword [rsp + 0x100]
je 0x14008faeb
mov r13, qword [rsp + 0x208]
lea rcx, [r12 + 0x168]
movzx eax, word [r12 + 0x3d2]
mov qword [rsp + 0x68], rax
imul rbx, rax, 0x38
lea rbp, [r12 - 0x10]
mov r15, 0xffffffffffffffff
nop word cs:[rax + rax]
test rbx, rbx
je 0x14008fa90
lea rdi, [rcx + 0x38]
mov r8, qword [rcx]
mov r9d, dword [rcx + 0x10]
mov dword [rsp + 0x20], 1
mov rcx, rsi
mov edx, r14d
call sub.KERNEL32.dll_CompareStringOrdinal
add rbx, 0xffffffffffffffc8
add rbp, 0x20
inc r15
mov rcx, rdi
cmp eax, 3
je 0x14008fa50
cmp eax, 1
jne 0x14008fab4
jmp 0x14008fa95
mov r15, qword [rsp + 0x68]
sub r13, 1
mov rax, qword [rsp + 0x100]
jb 0x140090047
mov r12, qword [r12 + r15*8 + 0x3d8]
jmp 0x14008fa1f
cmp eax, 2
jne 0x14009281c
test r12, r12
mov r14, qword [rsp + 0xf8]
mov rax, qword [rsp + 0x100]
je 0x14008fd89
mov r15, qword [rbp - 0x10]
mov rdi, qword [rbp]
cmp qword [rsp + 0x260], 0
jne 0x14008fb01
jmp 0x14008fb1f
xor r15d, r15d
mov r14, qword [rsp + 0xf8]
cmp qword [rsp + 0x260], 0
je 0x14008fb1f
mov r8, qword [rsp + 0x258]
mov rcx, qword [0x1401a4140]
xor edx, edx
call sub.KERNEL32.dll_HeapFree
mov rax, qword [rsp + 0x100]
cmp qword [rsp + 0x248], 0
je 0x14008fb43
mov rcx, qword [0x1401a4140]
xor edx, edx
mov r8, rsi
call sub.KERNEL32.dll_HeapFree
mov rax, qword [rsp + 0x100]
mov r13, qword [rax + 0x40]
lea rbx, str.program_path_has_no_file_name
test r13, r13
je 0x14008fba5
mov rdx, qword [rax + 0x30]
cmp r13, 4
jae 0x14008fb66
lea rax, [0x14008d280]
jmp 0x14008fb8e
mov eax, dword [rdx]
bswap eax
xor ecx, ecx
cmp eax, 0x5c5c3f5c
setb cl
cmp eax, 0x5c5c3f5d
adc ecx, 0xffffffff
lea rcx, [0x14008d290]
lea rax, [0x14008d280]
cmove rax, rcx
mov qword [rsp + 0x68], rdx
movzx esi, byte [r13 + rdx - 1]
mov ecx, esi
call rax
test al, al
je 0x14008fc2a
mov rax, qword [rsp + 0x138]
mov qword [rax], rbx
mov qword [rax + 0x10], 2
cmp qword [rsp + 0x1f8], 0
je 0x14008fd5e
mov rcx, qword [rsp + 0x200]
test rcx, rcx
je 0x14008fd35
mov rdx, qword [rsp + 0x208]
mov rax, qword [rsp + 0x210]
mov qword [rsp + 0x248], 0
mov qword [rsp + 0x250], rcx
mov qword [rsp + 0x258], rdx
mov qword [rsp + 0x268], 0
mov qword [rsp + 0x270], rcx
mov qword [rsp + 0x278], rdx
mov ecx, 1
jmp 0x14008fd39
cmp r13, 4
jb 0x14008fc95
mov rdx, qword [rsp + 0x68]
movzx eax, byte [r13 + rdx - 4]
lea ecx, [rax - 0x41]
cmp cl, 0x1a
setb cl
shl cl, 5
or cl, al
cmp cl, 0x2e
jne 0x14008fc95
movzx eax, byte [rdx + r13 - 3]
lea ecx, [rax - 0x41]
cmp cl, 0x1a
setb cl
shl cl, 5
or cl, al
cmp cl, 0x65
jne 0x14008fc95
movzx eax, byte [rdx + r13 - 2]
lea ecx, [rax - 0x41]
cmp cl, 0x1a
setb cl
shl cl, 5
or cl, al
cmp cl, 0x78
jne 0x14008fc95
lea eax, [rsi - 0x41]
cmp al, 0x1a
setb al
shl al, 5
or al, sil
cmp al, 0x65
sete al
jmp 0x14008fc97
xor eax, eax
mov rdx, qword [rsp + 0x68]
lea rcx, [rdx + r13]
mov qword [rsp + 0x88], rcx
xor ecx, ecx
nop word [rax + rax]
cmp r13, rcx
je 0x14008fda0
movzx r8d, byte [rdx + rcx]
cmp r8d, 0x5c
je 0x14008fccd
inc rcx
cmp r8d, 0x2f
jne 0x14008fcb0
test al, al
je 0x14008fe7e
lea rcx, [rsp + 0x240]
mov r8, r13
call fcn.140094d90
mov rcx, qword [rsp + 0x240]
mov rax, qword [rsp + 0x248]
test rcx, rcx
je 0x14008ffd4
mov rdx, qword [rsp + 0x250]
mov qword [rsp + 0x240], rcx
mov qword [rsp + 0x248], rax
mov qword [rsp + 0x250], rdx
lea rcx, [rsp + 0x70]
lea rdx, [rsp + 0x240]
call fcn.14008ba60
jmp 0x140090c66
xor ecx, ecx
xor eax, eax
mov qword [rsp + 0x240], rcx
mov qword [rsp + 0x260], rcx
mov qword [rsp + 0x280], rax
lea rcx, [rsp + 0x240]
call fcn.140066a80
cmp dword [r14], 4
jb 0x14008fd6d
mov rcx, qword [r14 + 8]
call fcn.1400e686c
movaps xmm6, xmmword [rsp + 0x640]
add rsp, 0x658
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
xor r15d, r15d
cmp qword [rsp + 0x260], 0
jne 0x14008fb01
jmp 0x14008fb1f
xor r8d, r8d
lea rbx, str.nul_byte_found_in_provided_data
mov rax, rdx
jmp 0x14008fdbc
xor r8d, r8d
test cx, cx
je 0x14008fba5
mov cx, 1
test r8w, r8w
jne 0x14008fdb0
cmp rax, qword [rsp + 0x88]
je 0x14009001a
movzx r11d, byte [rax]
test r11b, r11b
js 0x14008fde2
inc rax
jmp 0x14008fe46
mov r8d, r11d
and r8d, 0x1f
movzx r10d, byte [rax + 1]
and r10d, 0x3f
cmp r11b, 0xdf
jbe 0x14008fe38
movzx r9d, byte [rax + 2]
shl r10d, 6
and r9d, 0x3f
or r9d, r10d
cmp r11b, 0xf0
jb 0x14008fe51
movzx r11d, byte [rax + 3]
add rax, 4
and r8d, 7
shl r8d, 0x12
shl r9d, 6
and r11d, 0x3f
or r11d, r9d
or r11d, r8d
cmp r11d, 0xffff
jbe 0x14008fe46
jmp 0x14008fe68
add rax, 2
shl r8d, 6
or r8d, r10d
mov r11d, r8d
xor r8d, r8d
mov ecx, r11d
jmp 0x14008fdb3
add rax, 3
shl r8d, 0xc
or r9d, r8d
mov r11d, r9d
cmp r11d, 0xffff
jbe 0x14008fe46
and r11d, 0x3ff
or r11d, 0xdc00
mov r8d, r11d
jmp 0x14008fdb3
test r13, r13
js 0x140092a33
mov rax, qword [0x14015c1f8]
movzx eax, byte [rax]
mov edx, 1
mov rcx, r13
call fcn.1400893a0
test rax, rax
je 0x14009293a
mov rsi, rax
mov rcx, rax
mov rdx, qword [rsp + 0x68]
mov r8, r13
call sub.msvcrt.dll_memcpy
mov qword [rsp + 0x90], rsi
mov qword [rsp + 0x98], r13
mov qword [rsp + 0xa0], r13
mov byte [rsp + 0xa8], 0
mov rax, qword [rsp + 0xa0]
mov qword [rsp + 0x250], rax
movzx eax, byte [rsp + 0xa8]
mov byte [rsp + 0x258], al
mov eax, dword [rsp + 0xa9]
mov dword [rsp + 0x259], eax
movzx eax, word [rsp + 0xad]
mov word [rsp + 0x25d], ax
movzx eax, byte [rsp + 0xaf]
mov byte [rsp + 0x25f], al
mov rax, qword [rsp + 0x90]
mov qword [rsp + 0x240], rax
mov rax, qword [rsp + 0x98]
mov qword [rsp + 0x248], rax
lea rdx, str..exeprogram_not_found
lea rcx, [rsp + 0x240]
mov r8d, 4
call fcn.14008d050
movdqa xmm0, xmmword [rsp + 0x240]
movaps xmm1, xmmword [rsp + 0x250]
movaps xmmword [rsp + 0xa0], xmm1
movdqa xmmword [rsp + 0x90], xmm0
mov rsi, qword [rsp + 0x90]
mov rdi, qword [rsp + 0xa0]
lea rcx, [rsp + 0x160]
mov rdx, rsi
mov r8, rdi
call fcn.140092f80
cmp qword [rsp + 0x160], 0
je 0x14008ffe7
mov rax, qword [rsp + 0x170]
mov qword [rsp + 0x80], rax
movdqu xmm0, xmmword [rsp + 0x160]
movdqa xmmword [rsp + 0x70], xmm0
jmp 0x140090c4a
mov qword [rsp + 0x78], rax
mov qword [rsp + 0x70], 0
jmp 0x140090c66
mov rcx, rsi
mov rdx, rdi
call fcn.140086390
test rax, rax
je 0x140090be0
cmp rdx, 2
jne 0x140090066
movzx ecx, word [rax]
cmp ecx, 0x2e2e
jne 0x140090066
mov r8d, 2
mov rcx, rax
jmp 0x1400900ac
cmp r13, 0xf
ja 0x1400900b3
xor eax, eax
mov qword [rsp + 0x60], rax
xor eax, eax
nop dword [rax]
cmp byte [rdx + rax], 0x2e
je 0x1400900c4
inc rax
cmp r13, rax
jne 0x140090030
jmp 0x1400900ce
mov r14, qword [rsp + 0xf8]
xor r15d, r15d
cmp qword [rsp + 0x260], 0
jne 0x14008fb01
jmp 0x14008fb1f
xor ecx, ecx
xor r11d, r11d
mov r8, rax
nop
cmp rdx, r11
je 0x1400900bf
mov r9, r11
lea r10, [r8 - 1]
inc r11
cmp byte [r8 + rdx - 1], 0x2e
mov r8, r10
jne 0x140090070
mov r8, rdx
sub r8, r11
lea rcx, [r8 + 1]
cmp rcx, rdx
ja 0x140092a88
mov rcx, rax
cmp rdx, r11
jne 0x140090bad
mov r8, rdx
xor eax, eax
jmp 0x140090bb7
mov cl, 0x2e
mov r8, r13
call fcn.14000b860
jmp 0x1400900c9
jmp 0x140090bb7
mov eax, 1
mov qword [rsp + 0x60], rax
test r15, r15
je 0x14009011d
add rdi, r15
mov qword [rsp + 0x160], r15
mov qword [rsp + 0x168], rdi
mov word [rsp + 0x170], 0
mov byte [rsp + 0x178], 1
lea rcx, [rsp + 0x240]
lea rdx, [rsp + 0x160]
call fcn.14008ce20
movzx eax, byte [rsp + 0x258]
cmp al, 2
jne 0x1400905e4
mov qword [rsp + 0x108], r13
mov qword [rsp + 0x110], 2
pxor xmm0, xmm0
movdqu xmmword [rsp + 0x118], xmm0
mov r8d, 0x200
mov eax, 2
mov qword [rsp + 0x58], rax
xor r14d, r14d
mov r13d, 0xffffffff
xor edi, edi
xor ebp, ebp
cmp r8, 0x201
jb 0x14009017f
jmp 0x1400901a0
jae 0x14009025e
cmp r8, 0x201
jae 0x1400901a0
mov ebx, 0x200
lea rsi, [rsp + 0x240]
mov r15, r8
jmp 0x1400901f2
sub r8, rbp
sub rdi, rbp
cmp rdi, r8
jae 0x1400901d0
lea rcx, [rsp + 0x110]
mov rdx, rbp
call fcn.14006ef30
mov rax, qword [rsp + 0x110]
mov qword [rsp + 0x58], rax
mov r14, qword [rsp + 0x118]
cmp r14, r13
mov ebp, 0xffffffff
cmovb rbp, r14
mov qword [rsp + 0x120], rbp
mov rdi, r14
mov rbx, rbp
mov rsi, qword [rsp + 0x58]
mov r15, rbp
xor ecx, ecx
call sub.KERNEL32.dll_SetLastError
xor ecx, ecx
mov rdx, rsi
mov r8d, r15d
call sub.KERNEL32.dll_GetModuleFileNameW
mov r12d, eax
test eax, eax
jne 0x14009021a
call sub.KERNEL32.dll_GetLastError
test eax, eax
jne 0x1400902a3
mov r8d, r12d
cmp r15, r8
jne 0x140090170
call sub.KERNEL32.dll_GetLastError
cmp eax, 0x7a
jne 0x14009294c
add r15, r15
mov eax, 0xffffffff
cmp r15, rax
mov r13d, 0xffffffff
cmovae r15, rax
mov r8, r15
cmp r8, 0x201
jae 0x1400901a0
jmp 0x14009017f
cmp rbx, r8
jb 0x140092a5a
lea rcx, [rsp + 0x90]
mov rdx, rsi
call fcn.140084160
mov r15, qword [rsp + 0x108]
movdqu xmm0, xmmword [rsp + 0x90]
movups xmm1, xmmword [rsp + 0xa0]
movaps xmmword [rsp + 0x170], xmm1
movdqa xmmword [rsp + 0x160], xmm0
jmp 0x1400902c8
call sub.KERNEL32.dll_GetLastError
shl rax, 0x20
or rax, 2
mov qword [rsp + 0x160], rax
mov byte [rsp + 0x178], 2
mov r15, qword [rsp + 0x108]
test r14, r14
je 0x1400902e0
mov rcx, qword [0x1401a4140]
xor edx, edx
mov r8, qword [rsp + 0x58]
call sub.KERNEL32.dll_HeapFree
cmp byte [rsp + 0x178], 2
jne 0x1400902fc
lea rcx, [rsp + 0x160]
call fcn.140068500
jmp 0x1400903e3
mov rsi, qword [rsp + 0x160]
mov rbx, qword [rsp + 0x168]
mov rdi, qword [rsp + 0x170]
mov r14, qword [rsp + 0x178]
mov rcx, rsi
mov rdx, rdi
call fcn.140086250
cmp rdi, rdx
cmovb rdx, rdi
test rax, rax
cmove rdx, rdi
mov qword [rsp + 0x240], rsi
mov qword [rsp + 0x248], rbx
mov qword [rsp + 0x250], rdx
mov qword [rsp + 0x258], r14
lea rcx, [rsp + 0x240]
mov rdx, qword [rsp + 0x68]
mov r8, r15
call fcn.1400853d0
cmp qword [rsp + 0x60], 1
je 0x14009038c
lea rdx, str.exeNULcmd.exemaximum_number_of_ProcThreadAttributes_exceeded
lea rcx, [rsp + 0x240]
mov r8d, 3
call fcn.140085ef0
mov rsi, qword [rsp + 0x240]
mov r8, qword [rsp + 0x250]
lea rcx, [rsp + 0x90]
mov rdx, rsi
call fcn.140092f80
cmp qword [rsp + 0x248], 0
je 0x1400903c5
mov r8d, 1
mov rcx, rsi
call fcn.140089430
mov rcx, qword [rsp + 0x90]
test rcx, rcx
je 0x1400903e3
mov r13, rcx
movdqu xmm6, xmmword [rsp + 0x98]
jmp 0x1400909f2
mov qword [rsp + 0x140], 2
pxor xmm0, xmm0
movdqu xmmword [rsp + 0x148], xmm0
mov r8d, 0x200
mov eax, 2
mov qword [rsp + 0x58], rax
xor esi, esi
mov r13d, 0xffffffff
xor edi, edi
xor r14d, r14d
cmp r8, 0x201
jb 0x14009043f
jmp 0x140090460
jae 0x14009051d
cmp r8, 0x201
jae 0x140090460
mov ebx, 0x200
lea rbp, [rsp + 0x240]
mov r15, r8
jmp 0x1400904b3
sub r8, r14
sub rdi, r14
cmp rdi, r8
jae 0x140090490
lea rcx, [rsp + 0x140]
mov rdx, r14
call fcn.14006ef30
mov rax, qword [rsp + 0x140]
mov qword [rsp + 0x58], rax
mov rsi, qword [rsp + 0x148]
cmp rsi, r13
mov r14d, 0xffffffff
cmovb r14, rsi
mov qword [rsp + 0x150], r14
mov rdi, rsi
mov rbx, r14
mov rbp, qword [rsp + 0x58]
mov r15, r14
xor ecx, ecx
call sub.KERNEL32.dll_SetLastError
mov rcx, rbp
mov edx, r15d
call sub.KERNEL32.dll_GetSystemDirectoryW
mov r12d, eax
test eax, eax
jne 0x1400904d9
call sub.KERNEL32.dll_GetLastError
test eax, eax
jne 0x14009071a
mov r8d, r12d
cmp r15, r8
jne 0x140090430
call sub.KERNEL32.dll_GetLastError
cmp eax, 0x7a
jne 0x140092969
add r15, r15
mov eax, 0xffffffff
cmp r15, rax
mov r13d, 0xffffffff
cmovae r15, rax
mov r8, r15
cmp r8, 0x201
jae 0x140090460
jmp 0x14009043f
cmp rbx, r8
jb 0x140092a71
lea rcx, [rsp + 0x90]
mov rdx, rbp
call fcn.140084160
mov r14, qword [rsp + 0x108]
lea rcx, [rsp + 0x90]
mov rdx, qword [rsp + 0x68]
mov r8, r14
call fcn.1400853d0
cmp qword [rsp + 0x60], 1
je 0x140090575
lea rdx, str.exeNULcmd.exemaximum_number_of_ProcThreadAttributes_exceeded
lea rcx, [rsp + 0x90]
mov r8d, 3
call fcn.140085ef0
mov rbx, qword [rsp + 0x90]
mov r8, qword [rsp + 0xa0]
lea rcx, [rsp + 0x110]
mov rdx, rbx
call fcn.140092f80
cmp qword [rsp + 0x98], 0
je 0x1400905ae
mov r8d, 1
mov rcx, rbx
call fcn.140089430
movdqu xmm0, xmmword [rsp + 0x110]
movdqu xmmword [rsp + 0x168], xmm0
mov rax, qword [rsp + 0x120]
mov qword [rsp + 0x178], rax
mov qword [rsp + 0x160], 0
mov dil, 1
jmp 0x14009073d
lea r15, [rsp + 0x259]
lea r12, [rsp + 0xa9]
lea rsi, [rsp + 0x240]
lea rdi, [rsp + 0x160]
lea rbx, [rsp + 0x90]
lea rbp, str.exeNULcmd.exemaximum_number_of_ProcThreadAttributes_exceeded
jmp 0x14009063b
mov rcx, rsi
mov rdx, rdi
call fcn.14008ce20
movzx eax, byte [rsp + 0x258]
cmp al, 2
je 0x14009011d
mov r8, qword [rsp + 0x240]
mov rcx, qword [rsp + 0x248]
mov rdx, qword [rsp + 0x250]
test rdx, rdx
jne 0x14009066d
test rcx, rcx
je 0x140090620
mov rcx, qword [0x1401a4140]
xor edx, edx
call sub.KERNEL32.dll_HeapFree
jmp 0x140090620
mov r9d, dword [r15]
mov r10d, dword [r15 + 3]
mov dword [r12 + 3], r10d
mov dword [r12], r9d
mov qword [rsp + 0x90], r8
mov qword [rsp + 0x98], rcx
mov qword [rsp + 0xa0], rdx
mov byte [rsp + 0xa8], al
mov rcx, rbx
mov rdx, qword [rsp + 0x68]
mov r8, r13
call fcn.1400853d0
cmp qword [rsp + 0x60], 1
je 0x1400906c5
mov r8d, 3
mov rcx, rbx
mov rdx, rbp
call fcn.140085ef0
mov r14, qword [rsp + 0x90]
mov r8, qword [rsp + 0xa0]
mov rcx, rsi
mov rdx, r14
call fcn.140092f80
cmp qword [rsp + 0x98], 0
je 0x1400906f9
mov r8d, 1
mov rcx, r14
call fcn.140089430
mov rax, qword [rsp + 0x240]
test rax, rax
jne 0x140091b9c
mov rcx, rsi
mov rdx, rdi
call fcn.14008ce20
jmp 0x14009062b
call sub.KERNEL32.dll_GetLastError
shl rax, 0x20
or rax, 2
mov qword [rsp + 0x168], rax
mov qword [rsp + 0x160], 1
xor edi, edi
test rsi, rsi
je 0x140090752
mov r8d, 2
mov rcx, qword [rsp + 0x58]
call fcn.140089430
test dil, dil
je 0x140090775
mov rcx, qword [rsp + 0x168]
test rcx, rcx
je 0x140090775
mov r13, rcx
movdqu xmm6, xmmword [rsp + 0x170]
jmp 0x1400909f2
lea rcx, [rsp + 0x160]
call fcn.140066810
mov qword [rsp + 0x140], 2
pxor xmm0, xmm0
movdqu xmmword [rsp + 0x148], xmm0
mov r8d, 0x200
mov eax, 2
mov qword [rsp + 0x58], rax
xor esi, esi
mov r13d, 0xffffffff
xor edi, edi
xor r14d, r14d
cmp r8, 0x201
jb 0x1400907df
jmp 0x140090800
jae 0x1400908bd
cmp r8, 0x201
jae 0x140090800
mov ebx, 0x200
lea rbp, [rsp + 0x240]
mov r15, r8
jmp 0x140090853
sub r8, r14
sub rdi, r14
cmp rdi, r8
jae 0x140090830
lea rcx, [rsp + 0x140]
mov rdx, r14
call fcn.14006ef30
mov rax, qword [rsp + 0x140]
mov qword [rsp + 0x58], rax
mov rsi, qword [rsp + 0x148]
cmp rsi, r13
mov r14d, 0xffffffff
cmovb r14, rsi
mov qword [rsp + 0x150], r14
mov rdi, rsi
mov rbx, r14
mov rbp, qword [rsp + 0x58]
mov r15, r14
xor ecx, ecx
call sub.KERNEL32.dll_SetLastError
mov rcx, rbp
mov edx, r15d
call sub.KERNEL32.dll_GetWindowsDirectoryW
mov r12d, eax
test eax, eax
jne 0x140090879
call sub.KERNEL32.dll_GetLastError
test eax, eax
jne 0x140090989
mov r8d, r12d
cmp r15, r8
jne 0x1400907d0
call sub.KERNEL32.dll_GetLastError
cmp eax, 0x7a
jne 0x140092986
add r15, r15
mov eax, 0xffffffff
cmp r15, rax
mov r13d, 0xffffffff
cmovae r15, rax
mov r8, r15
cmp r8, 0x201
jae 0x140090800
jmp 0x1400907df
cmp rbx, r8
jb 0x140092a96
lea rcx, [rsp + 0x90]
mov rdx, rbp
mov r14, qword [rsp + 0xf8]
call fcn.140084160
mov r13, qword [rsp + 0x108]
lea rcx, [rsp + 0x90]
mov rdx, qword [rsp + 0x68]
mov r8, r13
call fcn.1400853d0
cmp qword [rsp + 0x60], 1
je 0x14009091d
lea rdx, str.exeNULcmd.exemaximum_number_of_ProcThreadAttributes_exceeded
lea rcx, [rsp + 0x90]
mov r8d, 3
call fcn.140085ef0
mov rbx, qword [rsp + 0x90]
mov r8, qword [rsp + 0xa0]
lea rcx, [rsp + 0x110]
mov rdx, rbx
call fcn.140092f80
cmp qword [rsp + 0x98], 0
je 0x140090956
mov r8d, 1
mov rcx, rbx
call fcn.140089430
movdqu xmm0, xmmword [rsp + 0x110]
movdqu xmmword [rsp + 0x168], xmm0
mov rax, qword [rsp + 0x120]
mov qword [rsp + 0x178], rax
mov qword [rsp + 0x160], 0
mov dil, 1
jmp 0x1400909bc
call sub.KERNEL32.dll_GetLastError
shl rax, 0x20
or rax, 2
mov qword [rsp + 0x168], rax
mov qword [rsp + 0x160], 1
xor edi, edi
mov r14, qword [rsp + 0xf8]
mov r13, qword [rsp + 0x108]
test rsi, rsi
je 0x1400909d1
mov r8d, 2
mov rcx, qword [rsp + 0x58]
call fcn.140089430
test dil, dil
je 0x140090a06
mov rcx, qword [rsp + 0x168]
test rcx, rcx
je 0x140090a06
mov rax, rcx
movdqu xmm6, xmmword [rsp + 0x170]
mov r13, rcx
movq rbx, xmm6
pshufd xmm0, xmm6, 0xee
movq r8, xmm0
jmp 0x140090c81
lea rcx, [rsp + 0x160]
call fcn.140066810
lea rdx, str.PATHlibrary_std_src_sys_commonprocess.rs
lea rcx, [rsp + 0x110]
mov r8d, 4
call fcn.140081280
cmp byte [rsp + 0x128], 2
je 0x1400918ae
mov rsi, qword [rsp + 0x110]
mov rax, qword [rsp + 0x118]
mov qword [rsp + 0x58], rax
mov rax, qword [rsp + 0x120]
add rax, rsi
mov qword [rsp + 0x160], rsi
mov qword [rsp + 0x168], rax
mov word [rsp + 0x170], 0
mov byte [rsp + 0x178], 1
lea r12, [rsp + 0x259]
lea r15, [rsp + 0xa9]
lea rdi, [rsp + 0x240]
lea rbx, [rsp + 0x160]
lea rbp, [rsp + 0x90]
mov rcx, rdi
mov rdx, rbx
call fcn.14008ce20
jmp 0x140090abd
mov rcx, rdi
mov rdx, rbx
call fcn.14008ce20
movzx eax, byte [rsp + 0x258]
cmp al, 2
je 0x140091898
mov r8, qword [rsp + 0x240]
mov rcx, qword [rsp + 0x248]
mov rdx, qword [rsp + 0x250]
test rdx, rdx
jne 0x140090aff
test rcx, rcx
je 0x140090ab2
mov rcx, qword [0x1401a4140]
xor edx, edx
call sub.KERNEL32.dll_HeapFree
jmp 0x140090ab2
mov r9d, dword [r12]
mov r10d, dword [r12 + 3]
mov dword [r15 + 3], r10d
mov dword [r15], r9d
mov qword [rsp + 0x90], r8
mov qword [rsp + 0x98], rcx
mov qword [rsp + 0xa0], rdx
mov byte [rsp + 0xa8], al
mov rcx, rbp
mov rdx, qword [rsp + 0x68]
mov r8, r13
call fcn.1400853d0
cmp qword [rsp + 0x60], 1
je 0x140090b5b
mov r8d, 3
mov rcx, rbp
lea rdx, str.exeNULcmd.exemaximum_number_of_ProcThreadAttributes_exceeded
call fcn.140085ef0
mov r14, qword [rsp + 0x90]
mov r8, qword [rsp + 0xa0]
mov rcx, rdi
mov rdx, r14
call fcn.140092f80
cmp qword [rsp + 0x98], 0
je 0x140090b8f
mov r8d, 1
mov rcx, r14
call fcn.140089430
mov rax, qword [rsp + 0x240]
test rax, rax
jne 0x14009230b
mov r14, qword [rsp + 0xf8]
jmp 0x140090aa5
lea rax, [r10 + rdx]
inc rax
mov rdx, r9
test rcx, rcx
cmovne rax, rcx
test rax, rax
je 0x140090be0
test rcx, rcx
cmove r8, rdx
add rax, r8
sub rax, rsi
cmp rdi, rax
jb 0x140090be0
mov qword [rsp + 0xa0], rax
mov rdi, rax
lea rcx, [rsp + 0x240]
mov rdx, rsi
mov r8, rdi
call fcn.140094d90
mov rcx, qword [rsp + 0x240]
mov rax, qword [rsp + 0x248]
test rcx, rcx
je 0x140090c3c
mov rdx, qword [rsp + 0x250]
mov qword [rsp + 0x240], rcx
mov qword [rsp + 0x248], rax
mov qword [rsp + 0x250], rdx
lea rcx, [rsp + 0x70]
lea rdx, [rsp + 0x240]
call fcn.14008ba60
jmp 0x140090c4a
mov qword [rsp + 0x78], rax
mov qword [rsp + 0x70], 0
cmp qword [rsp + 0x98], 0
je 0x140090c66
mov rcx, qword [0x1401a4140]
xor edx, edx
mov r8, rsi
call sub.KERNEL32.dll_HeapFree
mov r13, qword [rsp + 0x70]
mov rbx, qword [rsp + 0x78]
test r13, r13
je 0x14008fba5
mov r8, qword [rsp + 0x80]
mov qword [rsp + 0x58], rbx
cmp r8, 5
jb case.0x140090fff.68
cmp word [r13 + r8*2 - 0xa], 0x2e
jne case.0x140090fff.68
cmp word [r13 + r8*2 - 2], 0
je 0x140090fdf
mov rax, qword [rsp + 0x100]
mov rsi, qword [rax + 0x90]
mov rdi, qword [rax + 0xa0]
movzx ebx, byte [rax + 0xc5]
mov qword [rsp + 0x90], 2
pxor xmm0, xmm0
movdqu xmmword [rsp + 0x98], xmm0
lea rcx, [rsp + 0x90]
xor edx, edx
call fcn.14006eb40
mov rax, qword [rsp + 0x90]
mov rcx, qword [rsp + 0xa0]
mov word [rax + rcx*2], 0x22
inc rcx
mov qword [rsp + 0xa0], rcx
mov rax, qword [rsp + 0x68]
mov qword [rsp + 0x240], rax
mov rax, qword [rsp + 0x88]
mov qword [rsp + 0x248], rax
mov word [rsp + 0x250], 0
lea rcx, [rsp + 0x90]
lea rdx, [rsp + 0x240]
call fcn.140078f90
mov rdx, qword [rsp + 0xa0]
cmp rdx, qword [rsp + 0x98]
jne 0x140090d6b
lea rcx, [rsp + 0x90]
call fcn.14006eb40
mov rdx, qword [rsp + 0xa0]
mov rax, qword [rsp + 0x90]
mov word [rax + rdx*2], 0x22
inc rdx
mov qword [rsp + 0xa0], rdx
shl rdi, 3
lea r14, [rdi + rdi*4]
lea r15, [rsp + 0x90]
nop word cs:[rax + rax]
test r14, r14
je 0x140090e2c
mov rdx, qword [rsp + 0xa0]
cmp rdx, qword [rsp + 0x98]
jne 0x140090dcb
mov rcx, r15
call fcn.14006eb40
mov rdx, qword [rsp + 0xa0]
mov rax, qword [rsp + 0x90]
mov word [rax + rdx*2], 0x20
inc rdx
mov qword [rsp + 0xa0], rdx
mov rcx, r15
mov rdx, rsi
mov r8d, ebx
call fcn.14008b5f0
mov rdi, rax
add rsi, 0x28
add r14, 0xffffffffffffffd8
test rax, rax
je 0x140090da0
cmp qword [rsp + 0x98], 0
je 0x140090f4a
mov r8, qword [rsp + 0x90]
mov rcx, qword [0x1401a4140]
xor edx, edx
call sub.KERNEL32.dll_HeapFree
jmp 0x140090f4a
mov rax, qword [rsp + 0x90]
mov rdi, qword [rsp + 0x98]
test rax, rax
je 0x140090f4a
mov rdx, qword [rsp + 0xa0]
mov cl, 1
mov dword [rsp + 0x88], ecx
mov qword [rsp + 0x108], r13
mov r15, qword [rsp + 0x58]
mov qword [rsp + 0x68], r15
mov r14, qword [rsp + 0xf8]
mov qword [rsp + 0x1e0], rax
mov qword [rsp + 0x1e8], rdi
mov qword [rsp + 0x1f0], rdx
cmp rdx, rdi
jne 0x140090eaa
lea rcx, [rsp + 0x1e0]
call fcn.14006eb40
mov rax, qword [rsp + 0x1e0]
mov rdx, qword [rsp + 0x1f0]
mov word [rax + rdx*2], 0
inc rdx
mov qword [rsp + 0x1f0], rdx
mov rcx, qword [rsp + 0x100]
cmp byte [rcx + 0xc4], 0
mov eax, 0x400
mov edi, 0x608
cmove edi, eax
or edi, dword [rcx + 0xc0]
cmp qword [rsp + 0x1f8], 0
je 0x140090f90
mov rsi, qword [rsp + 0x200]
mov rbx, qword [rsp + 0x208]
mov r14, qword [rsp + 0x210]
mov qword [rsp + 0x218], rsi
mov qword [rsp + 0x220], rbx
mov qword [rsp + 0x228], r14
mov qword [rsp + 0x70], 2
pxor xmm0, xmm0
movdqu xmmword [rsp + 0x78], xmm0
test r14, r14
mov qword [rsp + 0x60], r13
je 0x1400911a0
mov r12d, 2
xor ebp, ebp
jmp 0x1400911d0
mov r14, qword [rsp + 0xf8]
mov r15, qword [rsp + 0x58]
mov rax, qword [rsp + 0x138]
mov qword [rax], rdi
mov qword [rax + 0x10], 2
xor esi, esi
test r15, r15
je 0x140090f82
mov rcx, qword [0x1401a4140]
xor edx, edx
mov r8, r13
call sub.KERNEL32.dll_HeapFree
test sil, sil
je 0x14008fbb8
jmp 0x14008fd5e
mov rax, rcx
mov edx, 2
xor ecx, ecx
mov qword [rsp + 0x1c8], rcx
xor ecx, ecx
mov qword [rsp + 0x1d0], rcx
cmp byte [rax + 0x88], 2
mov qword [rsp + 0x1c0], rdx
jne 0x140091732
xor ebx, ebx
mov eax, 2
mov qword [rsp + 0x1d8], rax
xor eax, eax
mov qword [rsp + 0x1b8], rax
jmp 0x140091944
movzx eax, word [r13 + r8*2 - 8]
lea ecx, [rax - 0x42]
cmp ecx, 0x21
ja case.0x140090fff.68
lea rdx, [0x14011ad1c]
movsxd rcx, dword [rdx + rcx*4]
add rcx, rdx
jmp rcx
movzx ecx, word [r13 + r8*2 - 6]
or ecx, 0x20
cmp ecx, 0x61
jne 0x14009101d
movzx ecx, word [r13 + r8*2 - 4]
or ecx, 0x20
cmp ecx, 0x74
je 0x14009104d
cmp ax, 0x43
jne case.0x140090fff.68
movzx eax, word [r13 + r8*2 - 6]
or eax, 0x20
cmp eax, 0x6d
jne case.0x140090fff.68
movzx eax, word [r13 + r8*2 - 4]
add eax, 0xffffffbc
test eax, 0xffdf
jne case.0x140090fff.68
mov qword [rsp + 0x1c8], r8
mov qword [rsp + 0x60], r13
mov qword [rsp + 0x90], 2
pxor xmm0, xmm0
movdqu xmmword [rsp + 0x98], xmm0
mov r8d, 0x200
mov eax, 2
mov qword [rsp + 0x88], rax
xor eax, eax
mov qword [rsp + 0x68], rax
mov r14d, 0xffffffff
lea rax, [rsp + 0x90]
mov qword [rsp + 0x1c0], rax
xor ebx, ebx
xor esi, esi
cmp r8, 0x201
jb 0x1400910c7
jmp 0x1400910d9
mov r15, rax
mov r8, rax
jae 0x140091a88
cmp r8, 0x201
jae 0x1400910d9
mov ebp, 0x200
mov r12, r8
lea r13, [rsp + 0x240]
jmp 0x140091138
sub r8, rsi
sub rbx, rsi
cmp rbx, r8
jae 0x140091111
lea rcx, [rsp + 0x90]
mov rdx, rsi
call fcn.14006ef30
mov rax, qword [rsp + 0x90]
mov qword [rsp + 0x88], rax
mov rax, qword [rsp + 0x98]
mov qword [rsp + 0x68], rax
mov rbx, qword [rsp + 0x68]
cmp rbx, r14
mov esi, 0xffffffff
cmovb rsi, rbx
mov qword [rsp + 0xa0], rsi
mov rbp, rsi
mov r13, qword [rsp + 0x88]
mov r12, rsi
xor ecx, ecx
call sub.KERNEL32.dll_SetLastError
mov rcx, r13
mov edx, r12d
call sub.KERNEL32.dll_GetSystemDirectoryW
mov edi, eax
test eax, eax
jne 0x14009115d
call sub.KERNEL32.dll_GetLastError
test eax, eax
jne 0x140091b4a
mov eax, edi
cmp r12, rax
jne 0x1400910b2
call sub.KERNEL32.dll_GetLastError
cmp eax, 0x7a
jne 0x140092a3d
add r12, r12
mov eax, 0xffffffff
cmp r12, rax
mov r14d, 0xffffffff
cmovae r12, rax
mov r8, r12
cmp r8, 0x201
jae 0x1400910d9
jmp 0x1400910c7
mov r15b, 1
lea rcx, [rsp + 0x70]
xor edx, edx
call fcn.14006eb40
mov rax, qword [rsp + 0x70]
mov rbp, qword [rsp + 0x80]
mov r12, rax
mov word [rax + rbp*2], 0
inc rbp
mov qword [rsp + 0x80], rbp
xor eax, eax
test rsi, rsi
setne al
cmove r14, rsi
mov qword [rsp + 0x240], rax
mov qword [rsp + 0x248], 0
mov qword [rsp + 0x250], rsi
mov qword [rsp + 0x258], rbx
mov qword [rsp + 0x260], rax
mov qword [rsp + 0x268], 0
mov qword [rsp + 0x270], rsi
mov qword [rsp + 0x278], rbx
mov qword [rsp + 0x280], r14
lea rcx, [rsp + 0x110]
lea rdx, [rsp + 0x240]
call fcn.14006c580
mov r8, qword [rsp + 0x110]
test r8, r8
je 0x140091aca
mov r9, qword [rsp + 0x120]
imul r10, r9, 0x38
mov r13, qword [r8 + r10 + 0x168]
mov rbx, qword [r8 + r10 + 0x170]
mov rsi, qword [r8 + r10 + 0x178]
mov rcx, qword [r8 + r10 + 0x180]
mov rax, qword [r8 + r10 + 0x188]
mov rdx, qword [r8 + r10 + 0x190]
movzx r11d, byte [r8 + r10 + 0x198]
mov r14d, dword [r8 + r10 + 0x19c]
mov dword [rsp + 0x93], r14d
mov r10d, dword [r8 + r10 + 0x199]
mov dword [rsp + 0x90], r10d
shl r9, 5
movups xmm0, xmmword [r8 + r9]
movups xmm1, xmmword [r8 + r9 + 0x10]
lea r8, [rsp + 0x97]
movups xmmword [r8 + 0x10], xmm1
movups xmmword [r8], xmm0
mov r8, qword [rsp + 0xaf]
mov qword [rsp + 0x17f], r8
mov r8d, dword [rsp + 0x90]
movzx r9d, word [rsp + 0x94]
movzx r10d, byte [rsp + 0x96]
mov r14, qword [rsp + 0x97]
movzx r15d, byte [rsp + 0x9f]
movdqu xmm0, xmmword [rsp + 0xa0]
movdqa xmmword [rsp + 0x170], xmm0
mov dword [rsp + 0x160], r8d
mov word [rsp + 0x164], r9w
mov byte [rsp + 0x166], r10b
mov qword [rsp + 0x167], r14
mov byte [rsp + 0x16f], r15b
cmp r11b, 2
je 0x140091aca
lea r8, [rsp + 0x167]
movdqu xmm0, xmmword [r8]
movups xmm1, xmmword [r8 + 0x10]
movaps xmmword [rsp + 0x120], xmm1
movdqa xmmword [rsp + 0x110], xmm0
add rdx, rcx
xor r11d, r11d
mov r8, rcx
jmp 0x14009139d
xor r11d, r11d
test r9w, r9w
je 0x1400916e0
mov r9w, 1
test r11w, r11w
jne 0x140091390
cmp r8, rdx
je 0x14009145b
movzx r10d, byte [r8]
test r10b, r10b
js 0x1400913bf
inc r8
jmp 0x140091423
mov r11d, r10d
and r11d, 0x1f
movzx r15d, byte [r8 + 1]
and r15d, 0x3f
cmp r10b, 0xdf
jbe 0x140091415
movzx r14d, byte [r8 + 2]
shl r15d, 6
and r14d, 0x3f
or r14d, r15d
cmp r10b, 0xf0
jb 0x14009142e
movzx r10d, byte [r8 + 3]
add r8, 4
and r11d, 7
shl r11d, 0x12
shl r14d, 6
and r10d, 0x3f
or r10d, r14d
or r10d, r11d
cmp r10d, 0xffff
jbe 0x140091423
jmp 0x140091445
add r8, 2
shl r11d, 6
or r11d, r15d
mov r10d, r11d
xor r11d, r11d
mov r9d, r10d
jmp 0x140091393
add r8, 3
shl r11d, 0xc
or r14d, r11d
mov r10d, r14d
cmp r10d, 0xffff
jbe 0x140091423
and r10d, 0x3ff
or r10d, 0xdc00
mov r11d, r10d
jmp 0x140091393
test rax, rax
je 0x14009146b
mov r8d, 1
call fcn.140089430
mov rax, qword [rsp + 0x78]
sub rax, rbp
cmp rax, rsi
jae 0x140091495
lea rcx, [rsp + 0x70]
mov rdx, rbp
mov r8, rsi
call fcn.14006ef30
mov r12, qword [rsp + 0x70]
mov rbp, qword [rsp + 0x80]
lea r8, [rsi + rsi]
mov r14, r12
lea rcx, [r12 + rbp*2]
mov rdx, r13
call sub.msvcrt.dll_memcpy
add rbp, rsi
mov qword [rsp + 0x80], rbp
test rbx, rbx
je 0x1400914c6
mov r8d, 2
mov rcx, r13
call fcn.140089430
cmp rbp, qword [rsp + 0x78]
jne 0x1400914ee
lea rcx, [rsp + 0x70]
mov rdx, rbp
mov r13, qword [rsp + 0x60]
call fcn.14006eb40
mov r14, qword [rsp + 0x70]
mov rbp, qword [rsp + 0x80]
jmp 0x1400914f3
mov r13, qword [rsp + 0x60]
mov word [r14 + rbp*2], 0x3d
inc rbp
mov qword [rsp + 0x80], rbp
mov rsi, qword [rsp + 0x110]
mov rbx, qword [rsp + 0x118]
mov rcx, qword [rsp + 0x120]
movzx edx, byte [rsp + 0x128]
lea rax, [rsi + rcx]
xor r11d, r11d
mov r8, rsi
jmp 0x14009153e
xor r11d, r11d
test r9w, r9w
je 0x14009182e
mov r9w, 1
test r11w, r11w
jne 0x140091531
cmp r8, rax
je 0x1400915f6
movzx r10d, byte [r8]
test r10b, r10b
js 0x140091563
inc r8
jmp 0x1400915eb
mov r11d, r10d
and r11d, 0x1f
movzx r14d, byte [r8 + 1]
and r14d, 0x3f
cmp r10b, 0xdf
jbe 0x1400915ae
movzx ebp, byte [r8 + 2]
shl r14d, 6
and ebp, 0x3f
or ebp, r14d
cmp r10b, 0xf0
jb 0x1400915be
movzx r10d, byte [r8 + 3]
add r8, 4
and r11d, 7
shl r11d, 0x12
shl ebp, 6
and r10d, 0x3f
or r10d, ebp
or r10d, r11d
jmp 0x1400915cc
add r8, 2
shl r11d, 6
or r11d, r14d
mov r10d, r11d
jmp 0x1400915eb
add r8, 3
shl r11d, 0xc
or ebp, r11d
mov r10d, ebp
cmp r10d, 0xffff
jbe 0x1400915eb
and r10d, 0x3ff
or r10d, 0xdc00
mov r11d, r10d
jmp 0x140091534
xor r11d, r11d
mov r9d, r10d
jmp 0x140091534
cmp dl, 2
je 0x140092814
lea r9, [rsp + 0x129]
mov r8d, dword [r9]
mov r9d, dword [r9 + 3]
lea r10, [rsp + 0x97]
mov dword [r10 + 0x15], r9d
mov dword [r10 + 0x12], r8d
mov qword [rsp + 0x90], rsi
mov qword [rsp + 0x98], rbx
mov qword [rsp + 0xa0], rcx
mov byte [rsp + 0xa8], dl
mov qword [rsp + 0x140], rsi
mov qword [rsp + 0x148], rax
mov word [rsp + 0x150], 0
lea rcx, [rsp + 0x70]
lea rdx, [rsp + 0x140]
call fcn.140078f90
test rbx, rbx
je 0x14009167c
mov r8d, 1
mov rcx, rsi
call fcn.140089430
mov rbp, qword [rsp + 0x80]
cmp rbp, qword [rsp + 0x78]
jne 0x1400916b2
lea rcx, [rsp + 0x70]
mov rdx, rbp
call fcn.14006eb40
lea rcx, [rsp + 0x110]
lea rdx, [rsp + 0x240]
mov rbp, qword [rsp + 0x80]
jmp 0x1400916c2
lea rcx, [rsp + 0x110]
lea rdx, [rsp + 0x240]
mov rax, qword [rsp + 0x70]
mov r12, rax
mov word [rax + rbp*2], 0
inc rbp
mov qword [rsp + 0x80], rbp
jmp 0x14009123c
test rax, rax
je 0x1400916f0
mov r8d, 1
call fcn.140089430
cmp qword [rsp + 0x118], 0
je 0x14009170e
mov rcx, qword [rsp + 0x110]
mov r8d, 1
call fcn.140089430
lea rsi, str.nul_byte_found_in_provided_data
test rbx, rbx
je 0x140091728
mov r8d, 2
mov rcx, r13
call fcn.140089430
mov r13, qword [rsp + 0x60]
jmp 0x14009184b
mov rcx, rax
mov rax, qword [rax + 0x70]
mov rcx, qword [rcx + 0x80]
add rcx, rax
xor r10d, r10d
mov rdx, rax
jmp 0x140091758
xor r10d, r10d
test r8w, r8w
je 0x14009180f
mov r8w, 1
test r10w, r10w
jne 0x14009174b
cmp rdx, rcx
je 0x1400918ba
movzx r9d, byte [rdx]
test r9b, r9b
js 0x14009177d
inc rdx
jmp 0x140091804
mov r10d, r9d
and r10d, 0x1f
movzx esi, byte [rdx + 1]
and esi, 0x3f
cmp r9b, 0xdf
jbe 0x1400917c7
movzx r11d, byte [rdx + 2]
shl esi, 6
and r11d, 0x3f
or r11d, esi
cmp r9b, 0xf0
jb 0x1400917d7
movzx r9d, byte [rdx + 3]
add rdx, 4
and r10d, 7
shl r10d, 0x12
shl r11d, 6
and r9d, 0x3f
or r9d, r11d
or r9d, r10d
jmp 0x1400917e5
add rdx, 2
shl r10d, 6
or r10d, esi
mov r9d, r10d
jmp 0x140091804
add rdx, 3
shl r10d, 0xc
or r11d, r10d
mov r9d, r11d
cmp r9d, 0xffff
jbe 0x140091804
and r9d, 0x3ff
or r9d, 0xdc00
mov r10d, r9d
jmp 0x14009174e
xor r10d, r10d
mov r8d, r9d
jmp 0x14009174e
lea rax, str.nul_byte_found_in_provided_data
mov rcx, qword [rsp + 0x138]
mov qword [rcx], rax
mov qword [rcx + 0x10], 2
jmp 0x1400927a1
lea rdi, str.nul_byte_found_in_provided_data
test rbx, rbx
je 0x140091848
mov r8d, 1
mov rcx, rsi
call fcn.140089430
mov rsi, rdi
xor r15d, r15d
lea rcx, [rsp + 0x240]
call fcn.140066a80
cmp qword [rsp + 0x78], 0
je 0x140091873
mov rcx, qword [rsp + 0x70]
mov r8d, 2
call fcn.140089430
mov r14, qword [rsp + 0xf8]
mov r15, qword [rsp + 0x58]
mov rax, qword [rsp + 0x138]
mov qword [rax], rsi
mov qword [rax + 0x10], 2
jmp 0x1400927bf
cmp qword [rsp + 0x58], 0
je 0x1400918ae
mov r8d, 1
mov rcx, rsi
call fcn.140089430
lea rbx, [0x14011e7f0]
jmp 0x14008fba5
mov qword [rsp + 0x240], rax
mov qword [rsp + 0x248], rcx
mov word [rsp + 0x250], 0
lea rcx, [rsp + 0x90]
lea rdx, [rsp + 0x240]
call fcn.140079120
mov rcx, qword [rsp + 0x98]
mov rdx, qword [rsp + 0xa0]
mov rax, rcx
mov qword [rsp + 0x1b8], rcx
cmp rdx, rcx
jne 0x14009192e
lea rcx, [rsp + 0x90]
call fcn.14006eb40
mov rax, qword [rsp + 0x98]
mov qword [rsp + 0x1b8], rax
mov rdx, qword [rsp + 0xa0]
mov rbx, qword [rsp + 0x90]
mov word [rbx + rdx*2], 0
mov qword [rsp + 0x1d8], rbx
pxor xmm0, xmm0
movdqa xmmword [rsp + 0x140], xmm0
mov qword [rsp + 0x150], 0
lea rsi, [0x1401a4160]
mov rcx, rsi
call sub.KERNEL32.dll_AcquireSRWLockExclusive
mov rax, qword [0x1401a4120]
shl rax, 1
test rax, rax
mov qword [rsp + 0x60], r13
mov qword [rsp + 0x238], rbx
je 0x140091995
call fcn.140089df0
mov ebp, eax
xor bpl, 1
jmp 0x140091997
xor ebp, ebp
movzx r13d, byte [0x1401a4168]
xor eax, eax
test r13b, r13b
setne al
mov qword [rsp + 0x118], rsi
mov byte [rsp + 0x120], bpl
mov qword [rsp + 0x110], rax
mov qword [rsp + 0x160], 0
mov qword [rsp + 0x170], 0
mov qword [rsp + 0x180], 0
mov dword [rsp + 0x218], 2
mov rax, qword [rsp + 0x100]
cmp dword [rax], 6
lea rcx, [rsp + 0x218]
cmovne rcx, rax
cmp dword [rax + 0x10], 6
lea rbx, [rax + 0x10]
cmove rbx, r14
lea r12, [rax + 0x20]
cmp dword [rax + 0x20], 6
cmove r12, r14
lea r8, [rsp + 0x160]
mov edx, 0xfffffff6
call fcn.140093060
mov rsi, rdx
test rax, rax
je 0x140091a4f
mov rax, qword [rsp + 0x138]
mov qword [rax], rsi
mov qword [rax + 0x10], 2
jmp 0x1400926dd
lea r8, [rsp + 0x170]
mov rcx, rbx
mov edx, 0xfffffff5
call fcn.140093060
mov rbx, rdx
test rax, rax
je 0x140091b63
mov rax, qword [rsp + 0x138]
mov qword [rax], rbx
mov qword [rax + 0x10], 2
jmp 0x1400926d5
cmp rbp, r8
jb 0x140092aad
test edi, edi
mov rbx, qword [rsp + 0x58]
je 0x140091bac
lea r12, [r15 + r15]
mov rax, qword [0x14015c1f8]
movzx eax, byte [rax]
mov edx, 2
mov rcx, r12
call fcn.1400893a0
test rax, rax
je 0x140092ad9
mov rsi, rax
jmp 0x140091bb4
xor r15d, r15d
lea rcx, [rsp + 0x240]
mov r13, qword [rsp + 0x60]
call fcn.140066a80
cmp rbp, qword [rsp + 0x78]
jne 0x140091b03
xor r15d, r15d
lea rcx, [rsp + 0x70]
mov rdx, rbp
call fcn.14006eb40
mov r12, qword [rsp + 0x70]
mov rbp, qword [rsp + 0x80]
mov rax, r12
mov qword [rsp + 0x1d0], r12
mov word [r12 + rbp*2], 0
mov rdx, qword [rsp + 0x70]
test rdx, rdx
mov r14, qword [rsp + 0xf8]
mov rax, qword [rsp + 0x100]
mov r15, qword [rsp + 0x58]
je 0x1400921b1
mov rcx, qword [rsp + 0x78]
mov qword [rsp + 0x1c8], rcx
jmp 0x140090fac
call sub.KERNEL32.dll_GetLastError
mov r15d, eax
shl r15, 0x20
or r15, 2
xor esi, esi
mov rbx, qword [rsp + 0x58]
jmp 0x140091bc2
lea r8, [rsp + 0x180]
mov rcx, r12
mov edx, 0xfffffff4
call fcn.140093060
mov r12, rdx
test rax, rax
je 0x1400921be
mov rax, qword [rsp + 0x138]
mov qword [rax], r12
mov qword [rax + 0x10], 2
jmp 0x1400926cd
movups xmm6, xmmword [rsp + 0x248]
mov r13, rax
jmp 0x1400909f2
mov esi, 2
xor r12d, r12d
mov rcx, rsi
mov rdx, r13
mov r8, r12
call sub.msvcrt.dll_memcpy
cmp qword [rsp + 0x68], 0
je 0x140091bdd
mov r8d, 2
mov rcx, qword [rsp + 0x88]
call fcn.140089430
test rsi, rsi
mov r14, qword [rsp + 0xf8]
je 0x140091fef
mov qword [rsp + 0x160], rsi
mov qword [rsp + 0x168], r15
mov r13, r15
mov qword [rsp + 0x170], r15
lea rax, [0x14011e846]
xor r8d, r8d
lea rdi, [rsp + 0x160]
xor ecx, ecx
mov rbp, rax
mov r15, rbx
mov rbx, rax
jmp 0x140091c57
mov r12d, ecx
mov r14, r8
mov rax, r13
mov word [rsi + r13*2], r12w
inc rax
mov r13, rax
mov qword [rsp + 0x170], rax
mov r8, r14
mov ecx, r15d
mov r14, qword [rsp + 0xf8]
mov r15, qword [rsp + 0x58]
test rbp, rbp
je 0x140091cc8
test cx, cx
je 0x140091c69
xor r15d, r15d
jmp 0x140091d45
lea rax, [0x14011e84e]
cmp rbp, rax
je 0x140091cc8
movzx eax, byte [rbp]
test al, al
js 0x140091c85
inc rbp
jmp 0x140091d40
mov edx, eax
and edx, 0x1f
movzx r10d, byte [rbp + 1]
and r10d, 0x3f
cmp al, 0xdf
jbe 0x140091cfa
movzx r9d, byte [rbp + 2]
shl r10d, 6
and r9d, 0x3f
or r9d, r10d
cmp al, 0xf0
jb 0x140091d08
movzx eax, byte [rbp + 3]
and edx, 7
shl edx, 0x12
shl r9d, 6
and eax, 0x3f
or eax, r9d
or eax, edx
cmp eax, 0x110000
jne 0x140091d17
cmp r8, 1
je 0x140091da0
mov r14d, 1
xor ebp, ebp
xor r12d, r12d
cmp r13, qword [rsp + 0x168]
jne 0x140091cf2
neg r8
mov r15d, ecx
jmp 0x140091d85
mov r15d, ecx
jmp 0x140091c2e
add rbp, 2
shl edx, 6
or edx, r10d
mov eax, edx
jmp 0x140091d40
add rbp, 3
shl edx, 0xc
or r9d, edx
mov eax, r9d
jmp 0x140091d1b
add rbp, 4
cmp eax, 0xffff
jbe 0x140091d40
lea ecx, [rax + 0xff0000]
shr ecx, 0xa
or ecx, 0xd800
and eax, 0x3ff
or eax, 0xdc00
mov r15d, eax
jmp 0x140091d45
xor r15d, r15d
mov ecx, eax
cmp r13, qword [rsp + 0x168]
jne 0x140091c28
mov rax, rbx
sub rax, rbp
add rax, 0xa
movabs rdx, 0xaaaaaaaaaaaaaaab
mul rdx
mov r14, r8
shr rdx, 1
cmp r15w, 1
adc r8, 0xffffffffffffffff
sub rdx, r8
inc rdx
mov r12d, ecx
mov r8, rdx
inc r8
mov rcx, rdi
mov rdx, r13
call fcn.14006ef30
mov rsi, qword [rsp + 0x160]
jmp 0x140091c2e
mov rdx, qword [rsp + 0x160]
mov rcx, qword [rsp + 0x168]
test rdx, rdx
je 0x140091fe9
mov al, 1
test al, al
mov qword [rsp + 0x68], rcx
mov qword [rsp + 0x108], rdx
je 0x140092ac1
mov rax, qword [rsp + 0x100]
mov rcx, qword [rax + 0x90]
mov qword [rsp + 0x88], rcx
mov rcx, qword [rax + 0xa0]
mov qword [rsp + 0x1b8], rcx
movzx eax, byte [rax + 0xc5]
mov byte [rsp + 0x1d0], al
mov rax, qword [0x14015c1f8]
movzx eax, byte [rax]
mov ecx, 0xc
mov edx, 2
call fcn.1400893a0
test rax, rax
je 0x140092ac8
mov ecx, 6
mov word [rax], 0x63
mov qword [rsp + 0x240], rax
mov qword [rsp + 0x248], rcx
mov qword [rsp + 0x250], 1
lea r13, [0x14011e243]
mov edi, 1
xor esi, esi
lea rbp, [0x14011e251]
lea r12, [0x14011e242]
lea rbx, [rsp + 0x240]
jmp 0x140091e94
mov rax, qword [rsp + 0x240]
mov word [rax + rdi*2], si
inc rdi
mov qword [rsp + 0x250], rdi
mov esi, r14d
mov r14, qword [rsp + 0xf8]
test si, si
jne 0x140091f4b
cmp r13, rbp
je 0x140091f93
movzx esi, byte [r13]
test sil, sil
js 0x140091eb8
inc r13
jmp 0x140091f4b
mov ecx, esi
and ecx, 0x1f
movzx r8d, byte [r13 + 1]
and r8d, 0x3f
cmp sil, 0xdf
jbe 0x140091f08
movzx edx, byte [r13 + 2]
shl r8d, 6
and edx, 0x3f
or edx, r8d
cmp sil, 0xf0
jb 0x140091f16
movzx esi, byte [r13 + 3]
and ecx, 7
shl ecx, 0x12
shl edx, 6
and esi, 0x3f
or esi, edx
or esi, ecx
cmp esi, 0x110000
je 0x140091f93
add r13, 4
jmp 0x140091f21
add r13, 2
shl ecx, 6
or ecx, r8d
mov esi, ecx
jmp 0x140091f4b
add r13, 3
shl ecx, 0xc
or edx, ecx
mov esi, edx
cmp esi, 0xffff
jbe 0x140091f4b
lea ecx, [rsi + 0xff0000]
shr ecx, 0xa
or ecx, 0xd800
and esi, 0x3ff
or esi, 0xdc00
mov r14d, esi
mov esi, ecx
jmp 0x140091f4e
xor r14d, r14d
cmp rdi, qword [rsp + 0x248]
jne 0x140091e7a
mov rax, r12
sub rax, r13
add rax, 0x11
movabs rcx, 0xaaaaaaaaaaaaaaab
mul rcx
shr rdx, 1
cmp r14w, 1
sbb rdx, 0
lea r8, [rdx + 2]
mov rcx, rbx
mov rdx, rdi
call fcn.14006ef30
jmp 0x140091e72
mov rdi, qword [rsp + 0x250]
mov qword [rsp + 0xa0], rdi
movdqu xmm0, xmmword [rsp + 0x240]
movdqa xmmword [rsp + 0x90], xmm0
cmp rdi, qword [rsp + 0x98]
jne 0x140092011
lea rcx, [rsp + 0x90]
mov rdx, rdi
call fcn.14006eb40
mov r8, qword [rsp + 0x1c8]
mov rbp, qword [rsp + 0x88]
mov rdi, qword [rsp + 0xa0]
jmp 0x140092021
mov rbx, r15
mov r15, rcx
mov r13, qword [rsp + 0x60]
mov rax, qword [rsp + 0x138]
mov qword [rax], r15
mov qword [rax + 0x10], 2
xor esi, esi
mov r15, rbx
jmp 0x140090f6c
mov r8, qword [rsp + 0x1c8]
mov rbp, qword [rsp + 0x88]
mov rsi, qword [rsp + 0x90]
mov word [rsi + rdi*2], 0x22
inc rdi
mov qword [rsp + 0xa0], rdi
lea rax, [r8 + r8]
xor ecx, ecx
lea r13, str.Windows_file_names_may_not_contain_____or_end_with___
mov rdx, qword [rsp + 0x60]
cmp rax, rcx
je 0x140092061
cmp word [rdx + rcx], 0x22
lea rcx, [rcx + 2]
jne 0x14009204c
jmp 0x1400925fd
mov rax, qword [rsp + 0x60]
movzx eax, word [rax + r8*2 - 2]
cmp ax, 0x5c
je 0x1400925fd
lea rbx, [r8 - 1]
xor r12d, r12d
test ax, ax
mov rax, qword [rsp + 0x60]
cmove r12, rax
test r12, r12
cmove rbx, r8
cmove r12, rax
mov r13, qword [rsp + 0x98]
mov rax, r13
sub rax, rdi
cmp rax, rbx
jae 0x1400920d2
lea rcx, [rsp + 0x90]
mov rdx, rdi
mov r8, rbx
call fcn.14006ef30
mov rdi, qword [rsp + 0xa0]
mov rsi, qword [rsp + 0x90]
mov r13, qword [rsp + 0x98]
lea r8, [rbx + rbx]
lea rcx, [rsi + rdi*2]
mov rdx, r12
call sub.msvcrt.dll_memcpy
add rdi, rbx
mov qword [rsp + 0xa0], rdi
cmp rdi, r13
jne 0x140092112
lea rcx, [rsp + 0x90]
mov rdx, r13
call fcn.14006eb40
mov rsi, qword [rsp + 0x90]
mov rdi, qword [rsp + 0xa0]
lea rax, [rdi + 1]
mov word [rsi + rdi*2], 0x22
mov qword [rsp + 0xa0], rax
cmp byte [rsp + 0x1d0], 0
je 0x140092524
mov rax, qword [rsp + 0x1b8]
shl rax, 3
lea rsi, [rax + rax*4]
lea rdi, [rsp + 0x90]
test rsi, rsi
je 0x140092655
mov rdx, qword [rsp + 0xa0]
cmp rdx, qword [rsp + 0x98]
jne 0x140092175
mov rcx, rdi
call fcn.14006eb40
mov rdx, qword [rsp + 0xa0]
mov rax, qword [rsp + 0x90]
mov word [rax + rdx*2], 0x20
inc rdx
mov qword [rsp + 0xa0], rdx
mov rcx, rdi
mov rdx, rbp
mov r8b, 1
call fcn.14008b5f0
mov r13, rax
add rbp, 0x28
add rsi, 0xffffffffffffffd8
test rax, rax
je 0x14009214a
jmp 0x1400925fd
mov rsi, qword [rsp + 0x1d0]
jmp 0x140091880
pxor xmm0, xmm0
movdqu xmmword [rsp + 0xc4], xmm0
movdqu xmmword [rsp + 0xb8], xmm0
movdqu xmmword [rsp + 0xa8], xmm0
movdqu xmmword [rsp + 0x98], xmm0
movdqu xmmword [rsp + 0xd8], xmm0
movdqu xmmword [rsp + 0xe8], xmm0
test r12, r12
jne 0x140092207
test rbx, rbx
jne 0x140092207
test rsi, rsi
je 0x14009222a
mov dword [rsp + 0xcc], 0x100
mov qword [rsp + 0xe0], rsi
mov qword [rsp + 0xe8], rbx
mov qword [rsp + 0xf0], r12
mov rdx, qword [rsp + 0x100]
mov r15, qword [rdx + 0xb8]
test r15, r15
je 0x140092353
add rdx, 0xa8
mov dword [rsp + 0x90], 0x70
lea rcx, [rsp + 0x70]
call fcn.140093880
mov rdx, qword [rsp + 0x70]
mov rcx, qword [rsp + 0x78]
test rdx, rdx
je 0x1400926ad
mov qword [rsp + 0x100], rcx
or edi, 0x80000
mov rax, qword [rsp + 0xf0]
mov qword [rsp + 0x2a0], rax
movups xmm0, xmmword [rsp + 0xe0]
movaps xmmword [rsp + 0x290], xmm0
movups xmm0, xmmword [rsp + 0xd0]
movaps xmmword [rsp + 0x280], xmm0
movdqu xmm0, xmmword [rsp + 0x90]
movups xmm1, xmmword [rsp + 0xa0]
movups xmm2, xmmword [rsp + 0xb0]
movups xmm3, xmmword [rsp + 0xc0]
movaps xmmword [rsp + 0x270], xmm3
movaps xmmword [rsp + 0x260], xmm2
movaps xmmword [rsp + 0x250], xmm1
movdqa xmmword [rsp + 0x240], xmm0
mov qword [rsp + 0x230], rdx
mov qword [rsp + 0x2a8], rdx
lea rax, [rsp + 0x240]
jmp 0x140092366
mov r13, rax
movdqu xmm6, xmmword [rsp + 0x248]
cmp qword [rsp + 0x58], 0
je 0x1400909f2
mov r8d, 1
mov rcx, rsi
call fcn.140089430
jmp 0x1400909f2
lea rcx, str.called__Option::unwrap____on_a__None__value_rustc_79e9716c980570bfd1f666e3b16ac583f0168962library_alloc_srccollections_btree_navigate.rs
lea r8, [0x14011c038]
mov edx, 0x2b
call fcn.140008d60
jmp 0x140092ae6
mov dword [rsp + 0x90], 0x68
lea rax, [rsp + 0x90]
mov rdx, qword [rsp + 0x1e0]
lea rcx, [rsp + 0x140]
mov qword [rsp + 0x48], rcx
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x238]
mov qword [rsp + 0x38], rax
mov rax, qword [rsp + 0x1d0]
mov qword [rsp + 0x30], rax
mov dword [rsp + 0x28], edi
mov rdi, rdx
mov dword [rsp + 0x20], 1
mov rcx, qword [rsp + 0x108]
xor r8d, r8d
xor r9d, r9d
call sub.KERNEL32.dll_CreateProcessW
test eax, eax
je 0x1400924e1
movups xmm0, xmmword [rsp + 0x160]
movups xmm1, xmmword [rsp + 0x170]
movups xmm2, xmmword [rsp + 0x180]
mov rax, qword [rsp + 0x138]
movups xmmword [rax + 0x30], xmm2
movups xmmword [rax + 0x20], xmm1
movups xmmword [rax + 0x10], xmm0
movdqa xmm0, xmmword [rsp + 0x140]
movdqu xmmword [rax], xmm0
test r15, r15
je 0x140092417
mov rcx, qword [rsp + 0x230]
mov rdx, qword [rsp + 0x100]
call fcn.1400680a0
mov rcx, r12
call fcn.1400e686c
mov rcx, rbx
call fcn.1400e686c
mov rcx, rsi
call fcn.1400e686c
lea rcx, [rsp + 0x110]
mov rsi, qword [rsp + 0x58]
mov r13, qword [rsp + 0x60]
call fcn.140067110
cmp qword [rsp + 0x1b8], 0
je 0x140092464
mov r8d, 2
mov rcx, qword [rsp + 0x1d8]
call fcn.140089430
cmp qword [rsp + 0x1c8], 0
je 0x140092482
mov r8d, 2
mov rcx, qword [rsp + 0x1c0]
call fcn.140089430
cmp qword [rsp + 0x1e8], 0
je 0x14009249b
mov r8d, 2
mov rcx, rdi
call fcn.140089430
cmp qword [rsp + 0x68], 0
je 0x1400924b6
mov r8d, 2
mov rcx, qword [rsp + 0x108]
call fcn.140089430
test rsi, rsi
sete al
mov ecx, dword [rsp + 0x88]
or cl, al
cmp cl, 1
je 0x14008fd5e
mov r8d, 2
mov rcx, r13
call fcn.140089430
jmp 0x14008fd5e
call sub.KERNEL32.dll_GetLastError
shl rax, 0x20
or rax, 2
mov rcx, qword [rsp + 0x138]
mov qword [rcx], rax
mov qword [rcx + 0x10], 2
test r15, r15
je 0x1400926c0
mov rcx, qword [rsp + 0x230]
mov rdx, qword [rsp + 0x100]
call fcn.1400680a0
jmp 0x1400926c0
mov rax, qword [rsp + 0x1b8]
lea rax, [rax + rax*4]
lea rsi, [rax*8]
add rsi, rbp
lea rdi, [rsp + 0x90]
lea rbx, str._t____________
cmp rbp, rsi
je 0x140092655
mov rdx, qword [rsp + 0xa0]
cmp rdx, qword [rsp + 0x98]
jne 0x140092575
mov rcx, rdi
call fcn.14006eb40
mov rdx, qword [rsp + 0xa0]
mov rax, qword [rsp + 0x90]
mov word [rax + rdx*2], 0x20
inc rdx
mov qword [rsp + 0xa0], rdx
cmp qword [rbp], 0
je 0x14009259c
mov r13, rbp
xor ebp, ebp
jmp 0x1400925cf
mov r14, qword [rbp + 8]
mov r13, rbp
mov r15, qword [rbp + 0x18]
xor r12d, r12d
cmp r15, r12
setne bpl
je 0x1400925cf
movzx ecx, byte [r14 + r12]
mov r8d, 0x16
mov rdx, rbx
call fcn.14000b860
inc r12
cmp rax, 1
jne 0x1400925aa
mov rcx, rdi
mov rdx, r13
mov r8d, ebp
mov rbp, r13
mov r14, qword [rsp + 0xf8]
mov r15, qword [rsp + 0x58]
call fcn.14008b5f0
mov r13, rax
add rbp, 0x28
test rax, rax
je 0x14009254a
cmp qword [rsp + 0x98], 0
je 0x14009261b
mov rcx, qword [rsp + 0x90]
mov r8d, 2
call fcn.140089430
mov rax, qword [rsp + 0x138]
mov qword [rax], r13
mov qword [rax + 0x10], 2
cmp qword [rsp + 0x68], 0
je 0x140092649
mov r8d, 2
mov rcx, qword [rsp + 0x108]
call fcn.140089430
xor esi, esi
mov r13, qword [rsp + 0x60]
jmp 0x140090f6c
mov rdi, qword [rsp + 0x98]
mov rdx, qword [rsp + 0xa0]
cmp rdx, rdi
jne 0x140092687
lea rcx, [rsp + 0x90]
call fcn.14006eb40
mov rdi, qword [rsp + 0x98]
mov rdx, qword [rsp + 0xa0]
mov r13, qword [rsp + 0x60]
mov rax, qword [rsp + 0x90]
mov word [rax + rdx*2], 0x22
inc rdx
mov dword [rsp + 0x88], 0
jmp 0x140090e70
mov rax, qword [rsp + 0x138]
mov qword [rax], rcx
mov qword [rax + 0x10], 2
mov rcx, r12
call fcn.1400e686c
mov r15, qword [rsp + 0x58]
mov rcx, rbx
call fcn.1400e686c
mov rcx, rsi
call fcn.1400e686c
cmp qword [rsp + 0x160], 0
je 0x1400926f5
mov rcx, qword [rsp + 0x168]
call fcn.1400e686c
cmp qword [rsp + 0x170], 0
je 0x14009270d
mov rcx, qword [rsp + 0x178]
call fcn.1400e686c
cmp qword [rsp + 0x180], 0
je 0x140092725
mov rcx, qword [rsp + 0x188]
call fcn.1400e686c
movabs rax, 0x7fffffffffffffff
test r13b, r13b
je 0x140092751
test bpl, bpl
mov r13, qword [rsp + 0x60]
jne 0x140092777
mov rcx, qword [0x1401a4120]
test rcx, rax
je 0x140092777
call fcn.140089df0
jmp 0x14009276c
test bpl, bpl
mov r13, qword [rsp + 0x60]
jne 0x140092777
mov rcx, qword [0x1401a4120]
test rcx, rax
je 0x140092777
call fcn.140089df0
test al, al
jne 0x140092777
mov byte [0x1401a4168], 1
lea rcx, [0x1401a4160]
call fcn.1400e66b4
cmp qword [rsp + 0x1b8], 0
je 0x1400927a1
mov r8d, 2
mov rcx, qword [rsp + 0x1d8]
call fcn.140089430
cmp qword [rsp + 0x1c8], 0
je 0x1400927bf
mov r8d, 2
mov rcx, qword [rsp + 0x1c0]
call fcn.140089430
cmp qword [rsp + 0x1e8], 0
je 0x1400927e0
mov r8, qword [rsp + 0x1e0]
mov rcx, qword [0x1401a4140]
xor edx, edx
call sub.KERNEL32.dll_HeapFree
cmp qword [rsp + 0x68], 0
je 0x1400927fe
mov rcx, qword [0x1401a4140]
xor edx, edx
mov r8, qword [rsp + 0x108]
call sub.KERNEL32.dll_HeapFree
mov sil, 1
cmp byte [rsp + 0x88], 0
jne 0x14008fd5e
jmp 0x140090f6c
mov rdi, rsi
jmp 0x140091848
call sub.KERNEL32.dll_GetLastError
shl rax, 0x20
or rax, 2
mov qword [rsp + 0x110], rax
lea rax, [rsp + 0x110]
mov qword [rsp + 0x160], rax
lea rax, [fcn.140081ba0]
mov qword [rsp + 0x168], rax
lea rax, str.comparing_environment_keys_failed:
mov qword [rsp + 0x90], rax
mov qword [rsp + 0x98], 1
mov qword [rsp + 0xb0], 0
lea rax, [rsp + 0x160]
mov qword [rsp + 0xa0], rax
mov qword [rsp + 0xa8], 1
lea rdx, str.library_std_src_syswindowsprocess.rs
lea rcx, [rsp + 0x90]
call fcn.140008cd0
jmp 0x140092ae6
lea rcx, str.called__Option::unwrap____on_a__None__value_rustc_79e9716c980570bfd1f666e3b16ac583f0168962library_alloc_srccollections_btree_navigate.rs
lea r8, [0x14011b408]
mov edx, 0x2b
call fcn.140008d60
jmp 0x140092ae6
call fcn.140004170
jmp 0x140092ae6
call fcn.140004170
jmp 0x140092ae6
mov ecx, 1
mov rdx, rbx
call fcn.1400041b0
jmp 0x140092ae6
call fcn.140004170
jmp 0x140092ae6
mov ecx, 1
mov rdx, rbx
call fcn.1400041b0
jmp 0x140092ae6
mov ecx, 2
mov rdx, r13
call fcn.1400041b0
jmp 0x140092ae6
lea rcx, str.assertion_failed:_self.height___0
lea r8, [0x14011bcd8]
mov edx, 0x21
call fcn.140008d60
jmp 0x140092ae6
mov ecx, 1
mov rdx, r13
call fcn.1400041b0
jmp 0x140092ae6
lea rcx, str.internal_error:_entered_unreachable_code
lea r8, str.library_std_src_syswindowsmod.rs
mov edx, 0x28
call fcn.140008d60
jmp 0x140092ae6
lea rcx, str.internal_error:_entered_unreachable_code
lea r8, str.library_std_src_syswindowsmod.rs
mov edx, 0x28
call fcn.140008d60
jmp 0x140092ae6
lea rcx, str.internal_error:_entered_unreachable_code
lea r8, str.library_std_src_syswindowsmod.rs
mov edx, 0x28
call fcn.140008d60
jmp 0x140092ae6
call sub.KERNEL32.dll_GetLastError
shl rax, 0x20
or rax, 2
mov qword [rsp + 0x160], rax
lea rax, [rsp + 0x160]
mov qword [rsp + 0x90], rax
lea rax, [fcn.140081ba0]
mov qword [rsp + 0x98], rax
lea rax, str.failure_getting_env_string_from_OS:
mov qword [rsp + 0x240], rax
mov qword [rsp + 0x248], 1
mov qword [rsp + 0x260], 0
lea rax, [rsp + 0x90]
mov qword [rsp + 0x250], rax
mov qword [rsp + 0x258], 1
lea rdx, str.library_std_src_syswindowsos.rs
lea rcx, [rsp + 0x240]
call fcn.140008cd0
jmp 0x140092ae6
call fcn.140004170
jmp 0x140092ae6
lea rcx, str.internal_error:_entered_unreachable_code
lea r8, str.library_std_src_syswindowsmod.rs
mov edx, 0x28
call fcn.140008d60
jmp 0x140092ae6
lea rax, str.library_std_src_syswindowsmod.rs
mov rcx, r8
mov rdx, rbx
mov r8, rax
call fcn.14000be50
jmp 0x140092ae6
lea rax, str.library_std_src_syswindowsmod.rs
mov rcx, r8
mov rdx, rbx
mov r8, rax
call fcn.14000be50
jmp 0x140092ae6
lea r8, str._rustc_79e9716c980570bfd1f666e3b16ac583f0168962librarycore_src_sliceiter.rs
call fcn.14000bdd0
jmp 0x140092ae6
lea rax, str.library_std_src_syswindowsmod.rs
mov rcx, r8
mov rdx, rbx
mov r8, rax
call fcn.14000be50
jmp 0x140092ae6
lea r8, str.library_std_src_syswindowsmod.rs
mov rcx, r15
mov rdx, rbp
call fcn.14000be50
jmp 0x140092ae6
call fcn.140004170
jmp 0x140092ae6
mov ecx, 2
mov edx, 0xc
call fcn.1400041b0
jmp 0x140092ae6
mov ecx, 2
mov rdx, r12
call fcn.1400041b0
ud2