Function at 0x1003c6d0
Capabilities:
Create process on windows
Encrypt data using speck
Get common file path
Query environment variable

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x628
movdqa xmmword [rsp + 0x610], xmm6
mov r15, r8
mov r14, rdx
mov qword [rsp + 0x50], rcx
movzx eax, byte [rdx + 0xa0]
mov rbp, qword [rdx + 0x98]
test al, al
jne 0x1003c72c
test rbp, rbp
jne 0x1003c72c
mov qword [rsp + 0x1d8], 0
xor eax, eax
mov qword [rsp + 0x90], rax
xor r13d, r13d
jmp 0x1003d416
mov qword [rsp + 0x58], r15
mov qword [rsp + 0x130], 0
mov qword [rsp + 0x140], 0
test al, al
mov qword [rsp + 0xb8], r14
jne 0x1003c986
mov qword [rsp + 0x60], rbp
call sub.KERNEL32.dll_GetEnvironmentStringsW
test rax, rax
je 0x10040512
lea rdi, [rsp + 0x170]
lea r14, [rsp + 0x210]
mov qword [rsp + 0x90], rax
mov r15, rax
nop word [rax + rax]
cmp word [r15], 0
je 0x1003c96c
mov r13, r15
mov rcx, 0xfffffffffffffffe
xor edx, edx
nop word [rax + rax]
mov rbx, rdx
mov rax, rcx
inc rdx
add rcx, 2
cmp word [r13 + rbx*2], 0
jne 0x1003c7b0
lea r15, [rdx*2]
add r15, r13
cmp rbx, 1
je 0x1003c790
test rbx, rbx
je 0x1004048f
xor ebp, ebp
nop word cs:[rax + rax]
cmp word [r13 + rbp*2 + 2], 0x3d
je 0x1003c810
inc rbp
add rax, 0xfffffffffffffffe
jne 0x1003c7f0
jmp 0x1003c790
lea r8, [rbp + 1]
cmp rbp, rbx
jae 0x100404a7
mov rcx, rdi
mov rdx, r13
call fcn.1001e350
add rbp, 2
mov r8, rbx
sub r8, rbp
jb 0x100404c1
lea rdx, [rbp*2]
add rdx, r13
mov rcx, r14
call fcn.1001e350
mov rsi, qword [rsp + 0x170]
mov r13, qword [rsp + 0x178]
movdqu xmm6, xmmword [rsp + 0x180]
mov rbp, qword [rsp + 0x210]
mov rbx, qword [rsp + 0x218]
lea rax, [rsp + 0x230]
movups xmm0, xmmword [rax - 0x10]
movaps xmmword [rsp + 0x150], xmm0
movabs rax, 0x8000000000000000
cmp rsi, rax
je 0x1003c96c
movq rax, xmm6
add rax, r13
mov qword [rsp + 0x170], r13
mov qword [rsp + 0x178], rax
mov word [rsp + 0x180], 0
lea r12, [rsp + 0x98]
mov rcx, r12
mov rdx, rdi
call fcn.10040df0
mov qword [rsp + 0x210], rsi
mov qword [rsp + 0x218], r13
movdqu xmmword [rsp + 0x220], xmm6
mov rax, qword [rsp + 0xa8]
lea rcx, [rsp + 0x230]
mov qword [rcx + 0x10], rax
movups xmm0, xmmword [rsp + 0x98]
movups xmmword [rcx], xmm0
mov qword [rsp + 0x170], rbp
mov qword [rsp + 0x178], rbx
movaps xmm0, xmmword [rsp + 0x150]
lea rax, [rsp + 0x180]
movups xmmword [rax], xmm0
mov rcx, r12
lea rdx, [rsp + 0x130]
mov r8, r14
mov r9, rdi
call fcn.10041000
mov rax, qword [rsp + 0x98]
shl rax, 1
test rax, rax
je 0x1003c790
mov rcx, qword [rsp + 0xa0]
mov edx, 1
call fcn.10004c20
jmp 0x1003c790
mov rcx, qword [rsp + 0x90]
call sub.KERNEL32.dll_FreeEnvironmentStringsW
mov r14, qword [rsp + 0xb8]
mov rbp, qword [rsp + 0x60]
movabs rcx, 0x3ffffffffffffffe
mov rax, qword [r14 + 0x88]
mov rsi, qword [r14 + 0x90]
xor r13d, r13d
test rax, rax
setne r13b
cmove rbp, rax
xor r15d, r15d
inc rcx
mov qword [rsp + 0x70], rcx
jmp 0x1003c9c2
xor eax, eax
test rbp, rbp
je 0x1003d23a
test r13, r13
je 0x1003ca20
test r15, r15
jne 0x1003ca20
mov r13d, 1
test rsi, rsi
je 0x1003ca2a
mov rdx, rsi
and rdx, 7
je 0x1003ca2f
mov rcx, rsi
and rcx, 0xfffffffffffffff8
mov r15, rax
nop word cs:[rax + rax]
mov r15, qword [r15 + 0x3d8]
dec rdx
jne 0x1003ca00
cmp rsi, 8
jae 0x1003ca40
jmp 0x1003ca7e
test r13, r13
jne 0x1003ca82
jmp 0x1004042a
mov r15, rax
jmp 0x1003ca7e
mov r15, rax
mov rcx, rsi
cmp rsi, 8
jb 0x1003ca7e
nop dword [rax + rax]
mov rax, qword [r15 + 0x3d8]
mov rax, qword [rax + 0x3d8]
mov rax, qword [rax + 0x3d8]
mov rax, qword [rax + 0x3d8]
mov rax, qword [rax + 0x3d8]
mov rax, qword [rax + 0x3d8]
mov rax, qword [rax + 0x3d8]
mov r15, qword [rax + 0x3d8]
add rcx, 0xfffffffffffffff8
jne 0x1003ca40
xor esi, esi
xor eax, eax
movzx ecx, word [r15 + 0x3d2]
mov r14, r15
mov r12, rsi
cmp rsi, rcx
jb 0x1003cac8
nop word cs:[rax + rax]
mov rcx, qword [r14 + 0x160]
test rcx, rcx
je 0x1003f8a5
inc rax
movzx r12d, word [r14 + 0x3d0]
mov r14, rcx
cmp r12w, word [rcx + 0x3d2]
jae 0x1003caa0
test rax, rax
je 0x1003cb60
mov r15, qword [r14 + r12*8 + 0x3e0]
mov rcx, rax
dec rcx
je 0x1003cb4e
mov rdx, rcx
and rdx, 7
je 0x1003cb05
mov rcx, rdx
nop dword [rax]
mov r15, qword [r15 + 0x3d8]
dec rcx
jne 0x1003caf0
not rdx
add rdx, rax
mov rcx, rdx
add rax, 0xfffffffffffffffe
cmp rax, 7
jb 0x1003cb4e
nop
mov rax, qword [r15 + 0x3d8]
mov rax, qword [rax + 0x3d8]
mov rax, qword [rax + 0x3d8]
mov rax, qword [rax + 0x3d8]
mov rax, qword [rax + 0x3d8]
mov rax, qword [rax + 0x3d8]
mov rax, qword [rax + 0x3d8]
mov r15, qword [rax + 0x3d8]
add rcx, 0xfffffffffffffff8
jne 0x1003cb10
xor esi, esi
jmp 0x1003cb68
lea rsi, [r12 + 1]
mov r15, r14
dec rbp
imul rax, r12, 0x38
lea rbx, [r14 + rax]
add rbx, 0x168
shl r12, 5
movabs rax, 0x8000000000000000
cmp qword [r14 + r12], rax
jne 0x1003cc00
mov rdi, qword [rsp + 0x130]
mov eax, 0
test rdi, rdi
je 0x1003c9c2
mov r12, rsi
mov rsi, r13
mov r13, rbp
mov r9, qword [rbx + 0x28]
mov rax, qword [rbx + 0x30]
mov rbp, qword [rsp + 0x138]
mov qword [rsp + 0x20], rax
lea rcx, [rsp + 0x98]
mov rdx, rdi
mov r8, rbp
call fcn.10042390
cmp qword [rsp + 0x98], 0
je 0x1003cdca
xor eax, eax
mov rbp, r13
mov r13, rsi
mov rsi, r12
jmp 0x1003c9c2
mov qword [rsp + 0x68], rsi
mov rsi, qword [rbx + 8]
mov rdi, qword [rbx + 0x10]
test rdi, rdi
mov qword [rsp + 0x60], rbp
je 0x1003cc38
js 0x10040485
movzx eax, byte [0x101aa020]
xor ecx, ecx
mov rdx, rdi
call fcn.100468b0
test rax, rax
jne 0x1003cc3d
jmp 0x10040473
mov eax, 1
mov qword [rsp + 0x90], rax
mov rcx, rax
mov rdx, rsi
mov r8, rdi
call sub.ntdll.dll_memcpy
movzx eax, byte [rbx + 0x18]
mov byte [rsp + 0x80], al
mov rsi, qword [rbx + 0x28]
mov rbp, qword [rbx + 0x30]
test rbp, rbp
mov qword [rsp + 0x78], r13
je 0x1003cca2
cmp rbp, qword [rsp + 0x70]
ja 0x1004044d
lea r13, [rbp*2]
movzx eax, byte [0x101aa020]
xor ecx, ecx
mov rdx, r13
call fcn.100468b0
test rax, rax
je 0x1004043b
mov rbx, rax
jmp 0x1003ccaa
mov ebx, 2
xor r13d, r13d
add r14, r12
mov rcx, rbx
mov rdx, rsi
mov r8, r13
call sub.ntdll.dll_memcpy
mov qword [rsp + 0x210], rdi
mov rax, qword [rsp + 0x90]
mov qword [rsp + 0x218], rax
mov qword [rsp + 0x220], rdi
movzx eax, byte [rsp + 0x80]
mov byte [rsp + 0x228], al
mov qword [rsp + 0x230], rbp
mov qword [rsp + 0x238], rbx
mov qword [rsp + 0x240], rbp
mov r13, qword [r14 + 8]
mov rsi, qword [r14 + 0x10]
test rsi, rsi
je 0x1003cd33
js 0x10040469
movzx eax, byte [0x101aa020]
xor ecx, ecx
mov rdx, rsi
call fcn.100468b0
mov r12, rax
test rax, rax
jne 0x1003cd39
jmp 0x10040457
mov r12d, 1
mov rcx, r12
mov rdx, r13
mov r8, rsi
call sub.ntdll.dll_memcpy
movzx eax, byte [r14 + 0x18]
mov qword [rsp + 0x170], rsi
mov qword [rsp + 0x178], r12
mov qword [rsp + 0x180], rsi
mov byte [rsp + 0x188], al
lea rcx, [rsp + 0x98]
lea rdx, [rsp + 0x130]
lea r8, [rsp + 0x210]
lea r9, [rsp + 0x170]
call fcn.10041000
mov rax, qword [rsp + 0x98]
shl rax, 1
test rax, rax
mov rbp, qword [rsp + 0x60]
mov r13, qword [rsp + 0x78]
mov rsi, qword [rsp + 0x68]
je 0x1003c9c0
mov rcx, qword [rsp + 0xa0]
mov edx, 1
call fcn.10004c20
jmp 0x1003c9c0
mov rax, qword [rsp + 0xa0]
mov rdx, qword [rsp + 0xa8]
mov rcx, qword [rsp + 0xb0]
mov byte [rsp + 0x1f8], 0
test rdx, rdx
je 0x1003cf92
mov rax, qword [rax + rcx*8 + 0x3d8]
mov rcx, rdx
dec rcx
je 0x1003cece
mov r8, rcx
and r8, 7
je 0x1003ce3e
mov rcx, r8
nop word cs:[rax + rax]
movzx r9d, word [rax + 0x3d2]
mov rax, qword [rax + r9*8 + 0x3d8]
dec rcx
jne 0x1003ce20
not r8
add r8, rdx
mov rcx, r8
add rdx, 0xfffffffffffffffe
cmp rdx, 7
jb 0x1003cece
nop dword [rax]
movzx edx, word [rax + 0x3d2]
mov rax, qword [rax + rdx*8 + 0x3d8]
movzx edx, word [rax + 0x3d2]
mov rax, qword [rax + rdx*8 + 0x3d8]
movzx edx, word [rax + 0x3d2]
mov rax, qword [rax + rdx*8 + 0x3d8]
movzx edx, word [rax + 0x3d2]
mov rax, qword [rax + rdx*8 + 0x3d8]
movzx edx, word [rax + 0x3d2]
mov rax, qword [rax + rdx*8 + 0x3d8]
movzx edx, word [rax + 0x3d2]
mov rax, qword [rax + rdx*8 + 0x3d8]
movzx edx, word [rax + 0x3d2]
mov rax, qword [rax + rdx*8 + 0x3d8]
movzx edx, word [rax + 0x3d2]
mov rax, qword [rax + rdx*8 + 0x3d8]
add rcx, 0xfffffffffffffff8
jne 0x1003ce50
movzx ecx, word [rax + 0x3d2]
dec rcx
mov qword [rsp + 0x150], rax
mov qword [rsp + 0x158], 0
mov qword [rsp + 0x160], rcx
lea rcx, [rsp + 0x210]
lea rdx, [rsp + 0x150]
lea r8, [rsp + 0x1f8]
call fcn.100424e0
mov rax, qword [rsp + 0x260]
mov qword [rsp + 0x1c0], rax
movups xmm0, xmmword [rsp + 0x250]
movaps xmmword [rsp + 0x1b0], xmm0
movups xmm0, xmmword [rsp + 0x210]
movups xmm1, xmmword [rsp + 0x220]
movups xmm2, xmmword [rsp + 0x230]
movups xmm3, xmmword [rsp + 0x240]
movaps xmmword [rsp + 0x1a0], xmm3
movaps xmmword [rsp + 0x190], xmm2
movaps xmmword [rsp + 0x180], xmm1
movaps xmmword [rsp + 0x170], xmm0
mov rdx, qword [rsp + 0x268]
mov rax, qword [rsp + 0x278]
movzx ecx, word [rdx + 0x3d2]
cmp rax, rcx
jae 0x1003cfd0
mov rcx, rdx
jmp 0x1003d009
mov qword [rsp + 0x170], rax
mov qword [rsp + 0x178], 0
mov qword [rsp + 0x180], rcx
lea rcx, [rsp + 0x210]
lea rdx, [rsp + 0x170]
lea r8, [rsp + 0x1f8]
call fcn.100424e0
jmp 0x1003d121
mov r8, qword [rsp + 0x270]
nop dword [rax + rax]
mov rcx, qword [rdx + 0x160]
test rcx, rcx
je 0x1003d004
inc r8
movzx eax, word [rdx + 0x3d0]
mov rdx, rcx
cmp ax, word [rcx + 0x3d2]
jae 0x1003cfe0
jmp 0x1003d009
mov rax, r8
xor ecx, ecx
imul rdx, rax, 0x38
shl rax, 5
mov r8, qword [rcx + rdx + 0x198]
mov qword [rsp + 0xf0], r8
movups xmm0, xmmword [rcx + rdx + 0x168]
movups xmm1, xmmword [rcx + rdx + 0x178]
movups xmm2, xmmword [rcx + rdx + 0x188]
movaps xmmword [rsp + 0xe0], xmm2
movaps xmmword [rsp + 0xd0], xmm1
movaps xmmword [rsp + 0xc0], xmm0
mov r8, qword [rsp + 0x1a0]
mov qword [rcx + rdx + 0x198], r8
movaps xmm0, xmmword [rsp + 0x170]
movaps xmm1, xmmword [rsp + 0x180]
movaps xmm2, xmmword [rsp + 0x190]
movups xmmword [rcx + rdx + 0x188], xmm2
movups xmmword [rcx + rdx + 0x178], xmm1
movups xmmword [rcx + rdx + 0x168], xmm0
movups xmm0, xmmword [rcx + rax]
movups xmm1, xmmword [rcx + rax + 0x10]
lea rdx, [rsp + 0xf8]
movups xmmword [rdx + 0x10], xmm1
movups xmmword [rdx], xmm0
lea rdx, [rsp + 0x1a8]
movups xmm0, xmmword [rdx]
movups xmm1, xmmword [rdx + 0x10]
movups xmmword [rcx + rax], xmm0
movups xmmword [rcx + rax + 0x10], xmm1
mov rax, qword [rsp + 0x110]
mov qword [rsp + 0x260], rax
movaps xmm0, xmmword [rsp + 0x100]
movaps xmmword [rsp + 0x250], xmm0
movaps xmm0, xmmword [rsp + 0xc0]
movaps xmm1, xmmword [rsp + 0xd0]
movaps xmm2, xmmword [rsp + 0xe0]
movaps xmm3, xmmword [rsp + 0xf0]
movaps xmmword [rsp + 0x240], xmm3
movaps xmmword [rsp + 0x230], xmm2
movaps xmmword [rsp + 0x220], xmm1
movaps xmmword [rsp + 0x210], xmm0
mov rbx, qword [rsp + 0x210]
mov r14, qword [rsp + 0x218]
mov rax, qword [rsp + 0x230]
mov qword [rsp + 0x90], rax
mov rax, qword [rsp + 0x238]
mov qword [rsp + 0x68], rax
dec qword [rsp + 0x140]
mov rax, qword [rsp + 0x248]
mov qword [rsp + 0x80], rax
mov rax, qword [rsp + 0x250]
mov qword [rsp + 0x88], rax
cmp byte [rsp + 0x1f8], 0
je 0x1003d1bb
test rbp, rbp
je 0x100404d8
mov rax, qword [rdi + 0x3d8]
mov qword [rsp + 0x130], rax
dec rbp
mov qword [rsp + 0x138], rbp
mov qword [rax + 0x160], 0
mov edx, 8
mov rcx, rdi
call fcn.10004c20
mov eax, 0
movabs rcx, 0x8000000000000000
cmp rbx, rcx
mov rbp, r13
mov r13, rsi
mov rsi, r12
je 0x1003c9c2
test rbx, rbx
je 0x1003d1ee
mov edx, 1
mov rcx, r14
call fcn.10004c20
cmp qword [rsp + 0x90], 0
je 0x1003d208
mov edx, 2
mov rcx, qword [rsp + 0x68]
call fcn.10004c20
mov rcx, qword [rsp + 0x80]
shl rcx, 1
mov eax, 0
test rcx, rcx
je 0x1003c9c2
mov edx, 1
mov rcx, qword [rsp + 0x88]
call fcn.10004c20
xor eax, eax
jmp 0x1003c9c2
mov rax, qword [rsp + 0x140]
mov qword [rsp + 0x1f0], rax
movups xmm0, xmmword [rsp + 0x130]
movups xmmword [rsp + 0x1e0], xmm0
mov qword [rsp + 0x1d8], 1
movzx eax, byte [0x101aa020]
mov r12d, 4
mov edx, 4
xor ecx, ecx
call fcn.100468b0
test rax, rax
je 0x100405ce
mov rsi, rax
mov dword [rax], 0x48544150
add rax, 4
mov qword [rsp + 0xc0], rsi
mov qword [rsp + 0xc8], rax
mov word [rsp + 0xd0], 0
lea rcx, [rsp + 0x170]
lea rdx, [rsp + 0xc0]
call fcn.10040df0
mov qword [rsp + 0x210], 4
mov qword [rsp + 0x218], rsi
mov qword [rsp + 0x220], 4
mov byte [rsp + 0x228], 0
movups xmm0, xmmword [rsp + 0x170]
movups xmmword [rsp + 0x230], xmm0
mov r15, qword [rsp + 0x180]
mov qword [rsp + 0x240], r15
mov rdi, qword [rsp + 0x238]
mov r14, qword [rsp + 0x1e0]
test r14, r14
je 0x1003d3ca
mov qword [rsp + 0x60], rsi
mov r12, qword [rsp + 0x1e8]
lea rcx, [r14 + 0x168]
movzx r13d, word [r14 + 0x3d2]
imul rbx, r13, 0x38
mov rbp, 0xffffffffffffffff
nop dword [rax]
test rbx, rbx
je 0x1003d390
lea rsi, [rcx + 0x38]
mov r8, qword [rcx + 0x28]
mov r9d, dword [rcx + 0x30]
mov dword [rsp + 0x20], 1
mov rcx, rdi
mov edx, r15d
call sub.KERNEL32.dll_CompareStringOrdinal
inc rbp
add rbx, 0xffffffffffffffc8
mov rcx, rsi
cmp eax, 3
je 0x1003d350
cmp eax, 1
jne 0x1003d3a7
jmp 0x1003d393
mov rbp, r13
sub r12, 1
jb 0x1003d8ea
mov r14, qword [r14 + rbp*8 + 0x3d8]
jmp 0x1003d332
cmp eax, 2
jne 0x1004030d
test r14, r14
mov r15, qword [rsp + 0x58]
je 0x1003d3d4
shl rbp, 5
mov r13, qword [r14 + rbp + 8]
mov rbx, qword [r14 + rbp + 0x10]
jmp 0x1003d3d7
xor r13d, r13d
mov r15, qword [rsp + 0x58]
jmp 0x1003d3dc
xor r13d, r13d
mov rsi, qword [rsp + 0x60]
mov eax, 1
mov qword [rsp + 0x90], rax
mov edx, 1
mov rcx, rsi
call fcn.10004c20
cmp qword [rsp + 0x230], 0
mov r14, qword [rsp + 0xb8]
je 0x1003d416
mov edx, 2
mov rcx, rdi
call fcn.10004c20
mov r12, qword [r14 + 0x10]
lea rdi, str.program_path_has_no_file_name
test r12, r12
je 0x1003d753
mov rcx, qword [r14 + 8]
cmp r12, 4
mov qword [rsp + 0x60], rcx
jae 0x1003d442
lea rax, [0x10042a20]
jmp 0x1003d46f
mov eax, dword [rcx]
bswap eax
xor ecx, ecx
cmp eax, 0x5c5c3f5c
setb cl
cmp eax, 0x5c5c3f5d
adc ecx, 0xffffffff
lea rcx, [0x10042a10]
lea rax, [0x10042a20]
cmove rax, rcx
mov rcx, qword [rsp + 0x60]
movzx esi, byte [r12 + rcx - 1]
mov ecx, esi
call rax
test al, al
jne 0x1003d753
cmp r12, 4
jb 0x1003d4ec
mov rdx, qword [rsp + 0x60]
movzx eax, byte [r12 + rdx - 4]
lea ecx, [rax - 0x41]
cmp cl, 0x1a
setb cl
shl cl, 5
or cl, al
cmp cl, 0x2e
jne 0x1003d4f5
movzx eax, byte [rdx + r12 - 3]
lea ecx, [rax - 0x41]
cmp cl, 0x1a
setb cl
shl cl, 5
or cl, al
cmp cl, 0x65
jne 0x1003d4f5
movzx eax, byte [rdx + r12 - 2]
lea ecx, [rax - 0x41]
cmp cl, 0x1a
setb cl
shl cl, 5
or cl, al
cmp cl, 0x78
jne 0x1003d4ec
lea eax, [rsi - 0x41]
cmp al, 0x1a
setb al
shl al, 5
or al, sil
cmp al, 0x65
sete al
jmp 0x1003d4ee
xor eax, eax
mov rdx, qword [rsp + 0x60]
jmp 0x1003d4f7
xor eax, eax
lea rcx, [rdx + r12]
mov qword [rsp + 0x80], rcx
xor ecx, ecx
nop word cs:[rax + rax]
cmp r12, rcx
je 0x1003d580
mov rdx, qword [rsp + 0x60]
movzx edx, byte [rdx + rcx]
cmp edx, 0x5c
je 0x1003d52b
inc rcx
cmp edx, 0x2f
jne 0x1003d510
test al, al
je 0x1003d663
lea rcx, [rsp + 0x210]
mov rdx, qword [rsp + 0x60]
mov r8, r12
call fcn.1001c3e0
mov rcx, qword [rsp + 0x210]
mov rax, qword [rsp + 0x218]
movabs rdx, 0x8000000000000000
cmp rcx, rdx
jne 0x1003d827
mov qword [rsp + 0x138], rax
mov qword [rsp + 0x130], rdx
jmp 0x1003df08
xor r8d, r8d
lea r11, str.nul_byte_found_in_provided_data
mov rax, qword [rsp + 0x60]
jmp 0x1003d5ac
xor r8d, r8d
test cx, cx
je 0x1003d750
mov cx, 1
test r8w, r8w
jne 0x1003d5a0
cmp rax, qword [rsp + 0x80]
je 0x1003d886
movzx edx, byte [rax]
test dl, dl
js 0x1003d5d0
inc rax
jmp 0x1003d62f
mov r8d, edx
and r8d, 0x1f
movzx r10d, byte [rax + 1]
and r10d, 0x3f
cmp dl, 0xdf
jbe 0x1003d621
movzx r9d, byte [rax + 2]
shl r10d, 6
and r9d, 0x3f
or r9d, r10d
cmp dl, 0xf0
jb 0x1003d639
movzx edx, byte [rax + 3]
add rax, 4
and r8d, 7
shl r8d, 0x12
shl r9d, 6
and edx, 0x3f
or edx, r9d
or edx, r8d
cmp edx, 0xffff
jbe 0x1003d62f
jmp 0x1003d64f
add rax, 2
shl r8d, 6
or r8d, r10d
mov edx, r8d
xor r8d, r8d
mov ecx, edx
jmp 0x1003d5a3
add rax, 3
shl r8d, 0xc
or r9d, r8d
mov edx, r9d
cmp edx, 0xffff
jbe 0x1003d62f
and edx, 0x3ff
or edx, 0xdc00
mov r8d, edx
jmp 0x1003d5a3
test r12, r12
js 0x100405bf
movzx eax, byte [0x101aa020]
xor ecx, ecx
mov rdx, r12
call fcn.100468b0
test rax, rax
je 0x100405c9
mov rsi, rax
mov rcx, rax
mov rdx, qword [rsp + 0x60]
mov r8, r12
call sub.ntdll.dll_memcpy
mov qword [rsp + 0x210], r12
mov qword [rsp + 0x218], rsi
mov qword [rsp + 0x220], r12
mov byte [rsp + 0x228], 0
lea rdx, str..exeprogram_not_found
lea rcx, [rsp + 0x210]
mov r8d, 4
call fcn.1003a4c0
mov rbx, qword [rsp + 0x210]
mov rsi, qword [rsp + 0x218]
mov rdi, qword [rsp + 0x220]
lea rcx, [rsp + 0xc0]
mov rdx, rsi
mov r8, rdi
call fcn.10042b00
movabs rax, 0x8000000000000000
cmp qword [rsp + 0xc0], rax
jne 0x1003d861
mov rcx, rsi
mov rdx, rdi
call fcn.1003bfe0
test rax, rax
je 0x1003de7d
cmp rdx, 2
jne 0x1003d8b0
movzx ecx, word [rax]
cmp ecx, 0x2e2e
jne 0x1003d8b0
mov ecx, 2
xor r8d, r8d
jmp 0x1003de5d
mov rdi, r11
mov r8, rdi
mov rax, qword [rsp + 0x50]
mov qword [rax], r8
mov qword [rax + 0x10], 2
mov rax, qword [rsp + 0x90]
test rax, rax
je 0x1003d7fc
mov rcx, qword [rsp + 0x1e0]
test rcx, rcx
je 0x1003d7d3
mov rdx, qword [rsp + 0x1e8]
mov rax, qword [rsp + 0x1f0]
mov qword [rsp + 0x218], 0
mov qword [rsp + 0x220], rcx
mov qword [rsp + 0x228], rdx
mov qword [rsp + 0x238], 0
mov qword [rsp + 0x240], rcx
mov qword [rsp + 0x248], rdx
mov ecx, 1
jmp 0x1003d7d7
xor ecx, ecx
xor eax, eax
mov qword [rsp + 0x210], rcx
mov qword [rsp + 0x230], rcx
mov qword [rsp + 0x250], rax
lea rcx, [rsp + 0x210]
call fcn.10040d30
cmp dword [r15], 4
jb 0x1003d80b
mov rcx, qword [r15 + 8]
call sub.KERNEL32.dll_CloseHandle
movaps xmm6, xmmword [rsp + 0x610]
add rsp, 0x628
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
mov rdx, qword [rsp + 0x220]
mov qword [rsp + 0x210], rcx
mov qword [rsp + 0x218], rax
mov qword [rsp + 0x220], rdx
lea rcx, [rsp + 0x130]
lea rdx, [rsp + 0x210]
call fcn.10042a30
jmp 0x1003df08
mov rax, qword [rsp + 0xd0]
mov qword [rsp + 0x140], rax
movups xmm0, xmmword [rsp + 0xc0]
movaps xmmword [rsp + 0x130], xmm0
jmp 0x1003def6
cmp r12, 0xf
ja 0x1003d8f7
xor eax, eax
mov qword [rsp + 0x70], rax
xor eax, eax
mov rcx, qword [rsp + 0x60]
nop word [rax + rax]
cmp byte [rcx + rax], 0x2e
je 0x1003d912
inc rax
cmp r12, rax
jne 0x1003d8a0
jmp 0x1003d91c
mov rcx, rdx
nop word cs:[rax + rax]
test rcx, rcx
je 0x1003d908
mov r9, rcx
dec rcx
cmp byte [rax + r9 - 1], 0x2e
jne 0x1003d8c0
test rcx, rcx
je 0x1003de57
sub rdx, r9
mov r8, rax
add r8, r9
jmp 0x1003de5d
mov r15, qword [rsp + 0x58]
xor r13d, r13d
jmp 0x1003d3d7
mov cl, 0x2e
mov rdx, qword [rsp + 0x60]
mov r8, r12
call fcn.10009590
jmp 0x1003d917
mov r8, rax
xor eax, eax
jmp 0x1003de5d
mov eax, 1
mov qword [rsp + 0x70], rax
test r13, r13
je 0x1003d976
add rbx, r13
mov qword [rsp + 0xc0], r13
mov qword [rsp + 0xc8], rbx
mov word [rsp + 0xd0], 0
mov byte [rsp + 0xd8], 1
lea rcx, [rsp + 0x210]
lea rdx, [rsp + 0xc0]
call fcn.10039f10
mov rax, qword [rsp + 0x210]
movabs rcx, 0x8000000000000000
cmp rax, rcx
jne 0x1003dc8a
lea rcx, [rsp + 0xc0]
call fcn.1003a150
mov rbx, qword [rsp + 0xc0]
movabs rax, 0x8000000000000000
cmp rbx, rax
jne 0x1003d9ac
lea rcx, [rsp + 0xc8]
call fcn.10019eb0
jmp 0x1003da85
mov r13, r14
mov rsi, qword [rsp + 0xc8]
mov rdi, qword [rsp + 0xd0]
mov r14, qword [rsp + 0xd8]
mov rcx, rsi
mov rdx, rdi
call fcn.1003b700
cmp rdi, rdx
cmovb rdx, rdi
test rax, rax
cmove rdx, rdi
mov qword [rsp + 0x210], rbx
mov qword [rsp + 0x218], rsi
mov qword [rsp + 0x220], rdx
mov qword [rsp + 0x228], r14
lea rcx, [rsp + 0x210]
mov rdx, qword [rsp + 0x60]
mov r8, r12
call fcn.1003a6f0
cmp qword [rsp + 0x70], 1
je 0x1003da2a
lea rcx, [rsp + 0x210]
call fcn.1003c110
mov rsi, qword [rsp + 0x218]
mov r8, qword [rsp + 0x220]
lea rcx, [rsp + 0x170]
mov rdx, rsi
call fcn.10042b00
cmp qword [rsp + 0x210], 0
mov r14, r13
je 0x1003da65
mov edx, 1
mov rcx, rsi
call fcn.10004c20
mov rcx, qword [rsp + 0x170]
movabs rax, 0x8000000000000000
mov qword [rsp + 0x68], rcx
cmp rcx, rax
jne 0x1003de42
mov qword [rsp + 0xb8], r14
mov qword [rsp + 0x58], r15
mov qword [rsp + 0x98], 0
mov qword [rsp + 0xa0], 2
mov qword [rsp + 0xa8], 0
mov r8d, 0x200
mov eax, 2
mov qword [rsp + 0x78], rax
xor eax, eax
mov qword [rsp + 0x68], rax
mov r15d, 0xffffffff
xor esi, esi
xor r13d, r13d
cmp r8, 0x201
jb 0x1003daff
jmp 0x1003db20
jae 0x1003dbe2
cmp r8, 0x201
jae 0x1003db20
mov r14d, 0x200
lea rbp, [rsp + 0x210]
mov rbx, r8
jmp 0x1003db7a
sub r8, r13
sub rsi, r13
cmp rsi, r8
jae 0x1003db55
lea rcx, [rsp + 0x98]
mov rdx, r13
call fcn.1001c8f0
mov rax, qword [rsp + 0x98]
mov qword [rsp + 0x68], rax
mov rax, qword [rsp + 0xa0]
mov qword [rsp + 0x78], rax
mov rsi, qword [rsp + 0x68]
cmp rsi, r15
mov r13d, 0xffffffff
cmovb r13, rsi
mov qword [rsp + 0xa8], r13
mov r14, r13
mov rbp, qword [rsp + 0x78]
mov rbx, r13
xor ecx, ecx
call sub.KERNEL32.dll_SetLastError
mov rcx, rbp
mov edx, ebx
call sub.KERNEL32.dll_GetSystemDirectoryW
mov edi, eax
test eax, eax
jne 0x1003db9e
call sub.KERNEL32.dll_GetLastError
test eax, eax
jne 0x1003dda7
mov r8d, edi
cmp rbx, r8
jne 0x1003daf0
call sub.KERNEL32.dll_GetLastError
cmp eax, 0x7a
jne 0x100404f5
add rbx, rbx
mov eax, 0xffffffff
cmp rbx, rax
mov r15d, 0xffffffff
cmovae rbx, rax
mov r8, rbx
cmp r8, 0x201
jae 0x1003db20
jmp 0x1003daff
cmp r14, r8
jb 0x100405ff
lea rcx, [rsp + 0xc0]
mov rdx, rbp
call fcn.1001e350
lea rcx, [rsp + 0xc0]
mov rdx, qword [rsp + 0x60]
mov r8, r12
call fcn.1003a6f0
mov r14, qword [rsp + 0xb8]
cmp qword [rsp + 0x70], 1
je 0x1003dc2d
lea rcx, [rsp + 0xc0]
call fcn.1003c110
mov rdi, qword [rsp + 0xc8]
mov r8, qword [rsp + 0xd0]
lea rcx, [rsp + 0x170]
mov rdx, rdi
call fcn.10042b00
cmp qword [rsp + 0xc0], 0
je 0x1003dc65
mov edx, 1
mov rcx, rdi
call fcn.10004c20
movups xmm0, xmmword [rsp + 0x170]
movaps xmmword [rsp + 0x150], xmm0
mov rax, qword [rsp + 0x180]
mov qword [rsp + 0x160], rax
jmp 0x1003ddd9
lea rsi, [rsp + 0x210]
lea rdi, [rsp + 0xc0]
lea rbx, [rsp + 0x170]
jmp 0x1003dcca
mov rcx, rsi
mov rdx, rdi
call fcn.10039f10
mov rax, qword [rsp + 0x210]
movabs rcx, 0x8000000000000000
cmp rax, rcx
je 0x1003d976
mov rcx, qword [rsp + 0x218]
mov rdx, qword [rsp + 0x220]
test rdx, rdx
je 0x1003dd8f
mov r13, r14
mov r8, qword [rsp + 0x228]
mov qword [rsp + 0x210], rax
mov qword [rsp + 0x218], rcx
mov qword [rsp + 0x220], rdx
mov qword [rsp + 0x228], r8
mov rcx, rsi
mov rdx, qword [rsp + 0x60]
mov r8, r12
call fcn.1003a6f0
cmp qword [rsp + 0x70], 1
je 0x1003dd2e
mov rcx, rsi
call fcn.1003c110
mov r14, qword [rsp + 0x218]
mov r8, qword [rsp + 0x220]
mov rcx, rbx
mov rdx, r14
call fcn.10042b00
cmp qword [rsp + 0x210], 0
je 0x1003dd61
mov edx, 1
mov rcx, r14
call fcn.10004c20
mov rcx, qword [rsp + 0x170]
movabs rax, 0x8000000000000000
cmp rcx, rax
jne 0x1003eac7
mov rcx, rsi
mov rdx, rdi
call fcn.10039f10
mov r14, r13
jmp 0x1003dcaf
test rax, rax
je 0x1003dca4
mov edx, 1
call fcn.10004c20
jmp 0x1003dca4
call sub.KERNEL32.dll_GetLastError
shl rax, 0x20
or rax, 2
mov qword [rsp + 0x158], rax
movabs rax, 0x8000000000000000
inc rax
mov qword [rsp + 0x150], rax
mov r14, qword [rsp + 0xb8]
cmp qword [rsp + 0x68], 0
je 0x1003ddf0
mov edx, 2
mov rcx, qword [rsp + 0x78]
call fcn.10004c20
mov rcx, qword [rsp + 0x150]
movabs rax, 0x8000000000000000
lea rsi, [rax + 2]
cmp rcx, rsi
mov r15, qword [rsp + 0x58]
jge 0x1003ed73
cmp rcx, rax
je 0x1003eaf6
movabs rax, 0x8000000000000001
cmp rcx, rax
jne 0x1003eae4
lea rcx, [rsp + 0x158]
call fcn.10019eb0
jmp 0x1003eaf6
mov r8, qword [rsp + 0x178]
mov rbx, qword [rsp + 0x180]
jmp 0x1003df38
xor r8d, r8d
mov rcx, rdx
test rax, rax
cmovne r8, rax
test r8, r8
je 0x1003de7d
test rax, rax
cmove rcx, rdx
add r8, rcx
sub r8, rsi
cmp rdi, r8
cmovae rdi, r8
lea rcx, [rsp + 0x210]
mov rdx, rsi
mov r8, rdi
call fcn.1001c3e0
mov rcx, qword [rsp + 0x210]
mov rax, qword [rsp + 0x218]
movabs rdx, 0x8000000000000000
cmp rcx, rdx
jne 0x1003dec1
mov qword [rsp + 0x138], rax
mov qword [rsp + 0x130], rdx
jmp 0x1003def6
mov rdx, qword [rsp + 0x220]
mov qword [rsp + 0x210], rcx
mov qword [rsp + 0x218], rax
mov qword [rsp + 0x220], rdx
lea rcx, [rsp + 0x130]
lea rdx, [rsp + 0x210]
call fcn.10042a30
test rbx, rbx
je 0x1003df08
mov edx, 1
mov rcx, rsi
call fcn.10004c20
mov rcx, qword [rsp + 0x130]
mov r8, qword [rsp + 0x138]
movabs rax, 0x8000000000000000
mov qword [rsp + 0x68], rcx
cmp rcx, rax
je 0x1003d756
mov rbx, qword [rsp + 0x140]
cmp rbx, 5
mov qword [rsp + 0x90], r8
mov qword [rsp + 0xb8], r14
jb case.0x1003e280.68
cmp word [r8 + rbx*2 - 0xa], 0x2e
jne case.0x1003e280.68
cmp word [r8 + rbx*2 - 2], 0
je 0x1003e260
mov rsi, qword [r14 + 0x28]
mov rbx, qword [r14 + 0x30]
movzx edi, byte [r14 + 0xc5]
mov qword [rsp + 0xc0], 0
mov qword [rsp + 0xc8], 2
mov qword [rsp + 0xd0], 0
lea rcx, [rsp + 0xc0]
xor edx, edx
call fcn.1001c7a0
mov rax, qword [rsp + 0xc8]
mov rcx, qword [rsp + 0xd0]
mov word [rax + rcx*2], 0x22
inc rcx
mov qword [rsp + 0xd0], rcx
mov rax, qword [rsp + 0x60]
mov qword [rsp + 0x210], rax
mov rax, qword [rsp + 0x80]
mov qword [rsp + 0x218], rax
mov word [rsp + 0x220], 0
lea rcx, [rsp + 0xc0]
lea rdx, [rsp + 0x210]
call fcn.1001c610
mov rdx, qword [rsp + 0xd0]
cmp rdx, qword [rsp + 0xc0]
jne 0x1003e02b
lea rcx, [rsp + 0xc0]
call fcn.1001c7a0
mov rdx, qword [rsp + 0xd0]
mov rax, qword [rsp + 0xc8]
mov word [rax + rdx*2], 0x22
inc rdx
mov qword [rsp + 0xd0], rdx
shl rbx, 3
lea r14, [rbx + rbx*4]
lea rbx, [rsp + 0xc0]
nop word cs:[rax + rax]
test r14, r14
je 0x1003e0dd
mov rdx, qword [rsp + 0xd0]
cmp rdx, qword [rsp + 0xc0]
jne 0x1003e087
mov rcx, rbx
call fcn.1001c7a0
mov rdx, qword [rsp + 0xd0]
mov rax, qword [rsp + 0xc8]
mov word [rax + rdx*2], 0x20
inc rdx
mov qword [rsp + 0xd0], rdx
mov rcx, rbx
mov rdx, rsi
mov r8d, edi
call fcn.10042bd0
mov r13, rax
add rsi, 0x28
add r14, 0xffffffffffffffd8
test rax, rax
je 0x1003e060
cmp qword [rsp + 0xc0], 0
je 0x1003e0fc
mov rcx, qword [rsp + 0xc8]
mov edx, 2
call fcn.10004c20
jmp 0x1003e0fc
mov rdx, qword [rsp + 0xc0]
mov r13, qword [rsp + 0xc8]
movabs rax, 0x8000000000000000
cmp rdx, rax
jne 0x1003e147
mov rax, qword [rsp + 0x50]
mov qword [rax], r13
mov qword [rax + 0x10], 2
xor esi, esi
cmp qword [rsp + 0x68], 0
je 0x1003e128
mov edx, 2
mov rcx, qword [rsp + 0x90]
call fcn.10004c20
test sil, sil
jne 0x1003d7fc
mov rax, qword [rsp + 0x1d8]
test rax, rax
jne 0x1003d777
jmp 0x1003d7fc
mov rsi, qword [rsp + 0xd0]
mov al, 1
mov dword [rsp + 0x80], eax
mov rax, qword [rsp + 0x68]
mov qword [rsp + 0x60], rax
mov rax, qword [rsp + 0x90]
mov qword [rsp + 0x78], rax
mov qword [rsp + 0x130], rdx
mov qword [rsp + 0x138], r13
mov qword [rsp + 0x140], rsi
cmp rsi, rdx
mov r14, qword [rsp + 0xb8]
jne 0x1003e1b1
lea rcx, [rsp + 0x130]
call fcn.1001c7a0
mov r13, qword [rsp + 0x138]
mov rsi, qword [rsp + 0x140]
mov word [r13 + rsi*2], 0
inc rsi
mov qword [rsp + 0x140], rsi
cmp byte [r14 + 0xc4], 0
mov eax, 0x400
mov r13d, 0x608
cmove r13d, eax
or r13d, dword [r14 + 0xc0]
cmp qword [rsp + 0x1d8], 0
je 0x1003e424
mov qword [rsp + 0x58], r15
mov rbx, qword [rsp + 0x1e0]
mov r14, qword [rsp + 0x1e8]
mov r15, qword [rsp + 0x1f0]
mov qword [rsp + 0x150], rbx
mov qword [rsp + 0x158], r14
mov qword [rsp + 0x160], r15
mov qword [rsp + 0x98], 0
mov qword [rsp + 0xa0], 2
mov qword [rsp + 0xa8], 0
test r15, r15
je 0x1003e4cf
mov r12d, 2
xor ebp, ebp
jmp 0x1003e503
movzx eax, word [r8 + rbx*2 - 8]
lea ecx, [rax - 0x42]
cmp ecx, 0x21
ja case.0x1003e280.68
lea rdx, [0x100501c0]
movsxd rcx, dword [rdx + rcx*4]
add rcx, rdx
jmp rcx
movzx ecx, word [r8 + rbx*2 - 6]
or ecx, 0x20
cmp ecx, 0x61
jne 0x1003e29e
movzx ecx, word [r8 + rbx*2 - 4]
or ecx, 0x20
cmp ecx, 0x74
je 0x1003e2ce
cmp ax, 0x43
jne case.0x1003e280.68
movzx eax, word [r8 + rbx*2 - 6]
or eax, 0x20
cmp eax, 0x6d
jne case.0x1003e280.68
movzx eax, word [r8 + rbx*2 - 4]
add eax, 0xffffffbc
test eax, 0xffdf
jne case.0x1003e280.68
mov qword [rsp + 0x70], rbx
mov qword [rsp + 0x58], r15
mov qword [rsp + 0xc0], 0
lea rax, [rsp + 0xc8]
mov qword [rsp + 0x78], rax
mov qword [rsp + 0xc8], 2
mov qword [rsp + 0xd0], 0
mov esi, 0x200
mov eax, 2
mov qword [rsp + 0x80], rax
xor eax, eax
mov qword [rsp + 0x60], rax
mov r14d, 0xffffffff
xor edi, edi
xor ebx, ebx
cmp rsi, 0x201
jb 0x1003e346
jmp 0x1003e359
jae 0x1003ee85
cmp rsi, 0x201
jae 0x1003e359
mov r13d, 0x200
lea r12, [rsp + 0x210]
mov rbp, rsi
jmp 0x1003e3bb
sub rsi, rbx
sub rdi, rbx
cmp rdi, rsi
jae 0x1003e394
lea rcx, [rsp + 0xc0]
mov rdx, rbx
mov r8, rsi
call fcn.1001c8f0
mov rax, qword [rsp + 0xc0]
mov qword [rsp + 0x60], rax
mov rax, qword [rsp + 0xc8]
mov qword [rsp + 0x80], rax
mov rdi, qword [rsp + 0x60]
cmp rdi, r14
mov ebx, 0xffffffff
cmovb rbx, rdi
mov qword [rsp + 0xd0], rbx
mov r13, rbx
mov r12, qword [rsp + 0x80]
mov rbp, rbx
xor ecx, ecx
call sub.KERNEL32.dll_SetLastError
mov rcx, r12
mov edx, ebp
call sub.KERNEL32.dll_GetSystemDirectoryW
mov r15d, eax
test eax, eax
jne 0x1003e3e0
call sub.KERNEL32.dll_GetLastError
test eax, eax
jne 0x1003f107
mov esi, r15d
cmp rbp, rsi
jne 0x1003e337
call sub.KERNEL32.dll_GetLastError
cmp eax, 0x7a
jne 0x100405e5
add rbp, rbp
mov eax, 0xffffffff
cmp rbp, rax
mov r14d, 0xffffffff
cmovae rbp, rax
mov rsi, rbp
cmp rsi, 0x201
jae 0x1003e359
jmp 0x1003e346
mov eax, 2
mov qword [rsp + 0x88], rax
xor r12d, r12d
xor eax, eax
mov qword [rsp + 0x70], rax
movabs rax, 0x8000000000000000
cmp qword [r14 + 0x38], rax
jne 0x1003e975
mov rsi, r12
mov ecx, 2
xor r12d, r12d
xor eax, eax
mov qword [rsp + 0x168], rax
mov qword [rsp + 0x1d0], rcx
xorps xmm0, xmm0
movaps xmmword [rsp + 0x150], xmm0
mov qword [rsp + 0x160], 0
lea rdi, [0x101aa0e0]
mov rcx, rdi
call sub.KERNEL32.dll_AcquireSRWLockExclusive
mov rax, qword [0x101aa0c0]
movabs rcx, 0x8000000000000000
dec rcx
mov qword [rsp + 0x208], rcx
test rax, rcx
mov qword [rsp + 0x58], r15
je 0x1003ed8d
call fcn.1001fa20
mov ebp, eax
mov rdx, r15
xor bpl, 1
jmp 0x1003ed92
mov dil, 1
lea rcx, [rsp + 0x98]
xor edx, edx
call fcn.1001c7a0
mov r12, qword [rsp + 0xa0]
mov rbp, qword [rsp + 0xa8]
mov word [r12 + rbp*2], 0
inc rbp
mov qword [rsp + 0xa8], rbp
xor eax, eax
test rbx, rbx
setne al
cmove r15, rbx
mov qword [rsp + 0x210], rax
mov qword [rsp + 0x218], 0
mov qword [rsp + 0x220], rbx
mov qword [rsp + 0x228], r14
mov qword [rsp + 0x230], rax
mov qword [rsp + 0x238], 0
mov qword [rsp + 0x240], rbx
mov qword [rsp + 0x248], r14
mov qword [rsp + 0x250], r15
lea rcx, [rsp + 0xc0]
lea rdx, [rsp + 0x210]
movabs rsi, 0x8000000000000000
call fcn.1003c3a0
mov rdx, qword [rsp + 0xc0]
test rdx, rdx
je 0x1003f12a
mov r9, qword [rsp + 0xd0]
imul r8, r9, 0x38
mov rax, qword [rdx + r8 + 0x168]
cmp rax, rsi
je 0x1003f12a
mov qword [rsp + 0x168], r12
mov rcx, qword [rdx + r8 + 0x170]
mov rbx, qword [rdx + r8 + 0x188]
mov rdi, qword [rdx + r8 + 0x190]
mov r12, qword [rdx + r8 + 0x198]
shl r9, 5
mov r10, qword [rdx + r9]
mov qword [rsp + 0x70], r10
mov r10, qword [rdx + r9 + 8]
mov qword [rsp + 0x88], r10
mov r15, qword [rdx + r9 + 0x10]
mov rdx, qword [rdx + r8 + 0x178]
add rdx, rcx
xor r11d, r11d
mov r8, rcx
jmp 0x1003e61d
xor r11d, r11d
test r9w, r9w
je 0x1003e932
mov r9w, 1
test r11w, r11w
jne 0x1003e610
cmp r8, rdx
je 0x1003e6d5
movzx r10d, byte [r8]
test r10b, r10b
js 0x1003e642
inc r8
jmp 0x1003e6ca
mov r11d, r10d
and r11d, 0x1f
movzx esi, byte [r8 + 1]
and esi, 0x3f
cmp r10b, 0xdf
jbe 0x1003e68d
movzx r14d, byte [r8 + 2]
shl esi, 6
and r14d, 0x3f
or r14d, esi
cmp r10b, 0xf0
jb 0x1003e69d
movzx r10d, byte [r8 + 3]
add r8, 4
and r11d, 7
shl r11d, 0x12
shl r14d, 6
and r10d, 0x3f
or r10d, r14d
or r10d, r11d
jmp 0x1003e6ab
add r8, 2
shl r11d, 6
or r11d, esi
mov r10d, r11d
jmp 0x1003e6ca
add r8, 3
shl r11d, 0xc
or r14d, r11d
mov r10d, r14d
cmp r10d, 0xffff
jbe 0x1003e6ca
and r10d, 0x3ff
or r10d, 0xdc00
mov r11d, r10d
jmp 0x1003e613
xor r11d, r11d
mov r9d, r10d
jmp 0x1003e613
test rax, rax
je 0x1003e6e4
mov edx, 1
call fcn.10004c20
mov rax, qword [rsp + 0x98]
sub rax, rbp
cmp rax, r12
jae 0x1003e719
lea rcx, [rsp + 0x98]
mov rdx, rbp
mov r8, r12
call fcn.1001c8f0
mov rax, qword [rsp + 0xa0]
mov rbp, qword [rsp + 0xa8]
jmp 0x1003e721
mov rax, qword [rsp + 0x168]
lea r8, [r12 + r12]
mov rsi, rax
lea rcx, [rax + rbp*2]
mov rdx, rdi
call sub.ntdll.dll_memcpy
add rbp, r12
mov qword [rsp + 0xa8], rbp
test rbx, rbx
je 0x1003e751
mov edx, 2
mov rcx, rdi
call fcn.10004c20
cmp rbp, qword [rsp + 0x98]
jne 0x1003e785
lea rcx, [rsp + 0x98]
mov rdx, rbp
mov rdi, qword [rsp + 0x88]
call fcn.1001c7a0
mov rsi, qword [rsp + 0xa0]
mov rbp, qword [rsp + 0xa8]
jmp 0x1003e78d
mov rdi, qword [rsp + 0x88]
mov word [rsi + rbp*2], 0x3d
inc rbp
mov qword [rsp + 0xa8], rbp
add r15, rdi
xor r8d, r8d
mov rax, rdi
mov rsi, qword [rsp + 0x70]
jmp 0x1003e7ba
xor r8d, r8d
test cx, cx
je 0x1003ea68
mov cx, 1
test r8w, r8w
jne 0x1003e7ae
cmp rax, r15
je 0x1003e869
movzx edx, byte [rax]
test dl, dl
js 0x1003e7dc
inc rax
jmp 0x1003e85f
mov r8d, edx
and r8d, 0x1f
movzx r10d, byte [rax + 1]
and r10d, 0x3f
cmp dl, 0xdf
jbe 0x1003e825
movzx r9d, byte [rax + 2]
shl r10d, 6
and r9d, 0x3f
or r9d, r10d
cmp dl, 0xf0
jb 0x1003e835
movzx edx, byte [rax + 3]
add rax, 4
and r8d, 7
shl r8d, 0x12
shl r9d, 6
and edx, 0x3f
or edx, r9d
or edx, r8d
jmp 0x1003e843
add rax, 2
shl r8d, 6
or r8d, r10d
mov edx, r8d
jmp 0x1003e85f
add rax, 3
shl r8d, 0xc
or r9d, r8d
mov edx, r9d
cmp edx, 0xffff
jbe 0x1003e85f
and edx, 0x3ff
or edx, 0xdc00
mov r8d, edx
jmp 0x1003e7b1
xor r8d, r8d
mov ecx, edx
jmp 0x1003e7b1
movabs rax, 0x8000000000000000
cmp rsi, rax
je 0x100402ec
mov qword [rsp + 0x170], rdi
mov qword [rsp + 0x178], r15
mov word [rsp + 0x180], 0
lea rcx, [rsp + 0x98]
lea rdx, [rsp + 0x170]
call fcn.1001c610
test rsi, rsi
movabs rsi, 0x8000000000000000
je 0x1003e8c7
mov edx, 1
mov rcx, rdi
call fcn.10004c20
mov rbp, qword [rsp + 0xa8]
cmp rbp, qword [rsp + 0x98]
jne 0x1003e903
lea rcx, [rsp + 0x98]
mov rdx, rbp
call fcn.1001c7a0
lea rcx, [rsp + 0xc0]
lea rdx, [rsp + 0x210]
mov rbp, qword [rsp + 0xa8]
jmp 0x1003e913
lea rcx, [rsp + 0xc0]
lea rdx, [rsp + 0x210]
mov r12, qword [rsp + 0xa0]
mov word [r12 + rbp*2], 0
inc rbp
mov qword [rsp + 0xa8], rbp
jmp 0x1003e579
test rax, rax
je 0x1003e941
mov edx, 1
call fcn.10004c20
cmp qword [rsp + 0x70], 0
je 0x1003e95b
mov edx, 1
mov rcx, qword [rsp + 0x88]
call fcn.10004c20
lea r12, str.nul_byte_found_in_provided_data
test rbx, rbx
je 0x1003ea81
mov edx, 2
jmp 0x1003ea79
mov rax, qword [r14 + 0x40]
mov rcx, qword [r14 + 0x48]
add rcx, rax
xor r10d, r10d
mov rdx, rax
jmp 0x1003e995
xor r10d, r10d
test r8w, r8w
je 0x1003ea4c
mov r8w, 1
test r10w, r10w
jne 0x1003e988
cmp rdx, rcx
je 0x1003eec2
movzx r9d, byte [rdx]
test r9b, r9b
js 0x1003e9ba
inc rdx
jmp 0x1003ea41
mov r10d, r9d
and r10d, 0x1f
movzx esi, byte [rdx + 1]
and esi, 0x3f
cmp r9b, 0xdf
jbe 0x1003ea04
movzx r11d, byte [rdx + 2]
shl esi, 6
and r11d, 0x3f
or r11d, esi
cmp r9b, 0xf0
jb 0x1003ea14
movzx r9d, byte [rdx + 3]
add rdx, 4
and r10d, 7
shl r10d, 0x12
shl r11d, 6
and r9d, 0x3f
or r9d, r11d
or r9d, r10d
jmp 0x1003ea22
add rdx, 2
shl r10d, 6
or r10d, esi
mov r9d, r10d
jmp 0x1003ea41
add rdx, 3
shl r10d, 0xc
or r11d, r10d
mov r9d, r11d
cmp r9d, 0xffff
jbe 0x1003ea41
and r9d, 0x3ff
or r9d, 0xdc00
mov r10d, r9d
jmp 0x1003e98b
xor r10d, r10d
mov r8d, r9d
jmp 0x1003e98b
lea r12, str.nul_byte_found_in_provided_data
mov rax, qword [rsp + 0x50]
mov qword [rax], r12
mov qword [rax + 0x10], 2
jmp 0x10040288
lea r12, str.nul_byte_found_in_provided_data
test rsi, rsi
je 0x1003ea81
mov edx, 1
mov rcx, rdi
call fcn.10004c20
xor edi, edi
lea rcx, [rsp + 0x210]
call fcn.10040d30
cmp qword [rsp + 0x98], 0
je 0x1003eaad
mov rcx, qword [rsp + 0xa0]
mov edx, 2
call fcn.10004c20
mov r15, qword [rsp + 0x58]
mov rax, qword [rsp + 0x50]
mov qword [rax], r12
mov qword [rax + 0x10], 2
jmp 0x100402a2
mov qword [rsp + 0x68], rcx
mov r8, qword [rsp + 0x178]
mov rbx, qword [rsp + 0x180]
mov r14, r13
jmp 0x1003df38
mov rcx, qword [rsp + 0x158]
mov edx, 2
call fcn.10004c20
mov qword [rsp + 0x88], rsi
mov qword [rsp + 0x98], 0
mov qword [rsp + 0xa0], 2
mov qword [rsp + 0xa8], 0
mov r8d, 0x200
mov eax, 2
mov qword [rsp + 0x78], rax
xor eax, eax
mov qword [rsp + 0x68], rax
mov esi, 0xffffffff
xor r15d, r15d
xor ebx, ebx
cmp r8, 0x201
jb 0x1003eb65
jmp 0x1003eb78
mov r14, qword [rsp + 0xb8]
jae 0x1003ec39
cmp r8, 0x201
jae 0x1003eb78
mov r13d, 0x200
lea rbp, [rsp + 0x210]
mov r14, r8
jmp 0x1003ebd1
sub r8, rbx
sub r15, rbx
cmp r15, r8
jae 0x1003ebad
lea rcx, [rsp + 0x98]
mov rdx, rbx
call fcn.1001c8f0
mov rax, qword [rsp + 0x98]
mov qword [rsp + 0x68], rax
mov rax, qword [rsp + 0xa0]
mov qword [rsp + 0x78], rax
mov r15, qword [rsp + 0x68]
cmp r15, rsi
mov ebx, 0xffffffff
cmovb rbx, r15
mov qword [rsp + 0xa8], rbx
mov r13, rbx
mov rbp, qword [rsp + 0x78]
mov r14, rbx
xor ecx, ecx
call sub.KERNEL32.dll_SetLastError
mov rcx, rbp
mov edx, r14d
call sub.KERNEL32.dll_GetWindowsDirectoryW
mov edi, eax
test eax, eax
jne 0x1003ebf6
call sub.KERNEL32.dll_GetLastError
test eax, eax
jne 0x1003ecdb
mov r8d, edi
cmp r14, r8
jne 0x1003eb4e
call sub.KERNEL32.dll_GetLastError
cmp eax, 0x7a
jne 0x100405a2
add r14, r14
mov eax, 0xffffffff
cmp r14, rax
mov esi, 0xffffffff
cmovae r14, rax
mov r8, r14
cmp r8, 0x201
jae 0x1003eb78
jmp 0x1003eb65
cmp r13, r8
jb 0x10040616
lea rcx, [rsp + 0xc0]
mov rdx, rbp
mov r15, qword [rsp + 0x58]
call fcn.1001e350
lea rcx, [rsp + 0xc0]
mov rdx, qword [rsp + 0x60]
mov r8, r12
call fcn.1003a6f0
cmp qword [rsp + 0x70], 1
je 0x1003ec81
lea rcx, [rsp + 0xc0]
call fcn.1003c110
mov rdi, qword [rsp + 0xc8]
mov r8, qword [rsp + 0xd0]
lea rcx, [rsp + 0x170]
mov rdx, rdi
call fcn.10042b00
cmp qword [rsp + 0xc0], 0
je 0x1003ecb9
mov edx, 1
mov rcx, rdi
call fcn.10004c20
movups xmm0, xmmword [rsp + 0x170]
movaps xmmword [rsp + 0x150], xmm0
mov rax, qword [rsp + 0x180]
mov qword [rsp + 0x160], rax
jmp 0x1003ed12
call sub.KERNEL32.dll_GetLastError
shl rax, 0x20
or rax, 2
mov qword [rsp + 0x158], rax
movabs rax, 0x8000000000000000
inc rax
mov qword [rsp + 0x150], rax
mov r15, qword [rsp + 0x58]
mov r14, qword [rsp + 0xb8]
cmp qword [rsp + 0x68], 0
je 0x1003ed29
mov edx, 2
mov rcx, qword [rsp + 0x78]
call fcn.10004c20
mov rcx, qword [rsp + 0x150]
cmp rcx, qword [rsp + 0x88]
jge 0x1003ed73
movabs rax, 0x8000000000000000
cmp rcx, rax
je 0x1003ef41
movabs rax, 0x8000000000000001
cmp rcx, rax
jne 0x1003ef2f
lea rcx, [rsp + 0x158]
call fcn.10019eb0
jmp 0x1003ef41
mov qword [rsp + 0x68], rcx
mov r8, qword [rsp + 0x158]
mov rbx, qword [rsp + 0x160]
jmp 0x1003df38
mov rdx, r15
xor ebp, ebp
movzx r15d, byte [0x101aa0e8]
test r15b, r15b
je 0x1003edae
mov qword [rsp + 0xa0], rdi
mov eax, 1
jmp 0x1003edb8
mov qword [rsp + 0xa0], rdi
xor eax, eax
mov byte [rsp + 0xa8], bpl
mov qword [rsp + 0x98], rax
mov qword [rsp + 0x170], 0
mov qword [rsp + 0x180], 0
mov qword [rsp + 0x190], 0
lea rcx, [r14 + 0x58]
cmp dword [r14 + 0x58], 6
cmove rcx, rdx
cmp dword [r14 + 0x68], 6
lea rdi, [r14 + 0x68]
cmove rdi, rdx
lea rbx, [r14 + 0x78]
cmp dword [r14 + 0x78], 6
cmove rbx, rdx
lea r8, [rsp + 0x170]
mov edx, 0xfffffff6
call fcn.100430b0
mov qword [rsp + 0x128], rdx
test rax, rax
je 0x1003ee4f
mov rax, qword [rsp + 0x50]
mov rcx, qword [rsp + 0x128]
mov qword [rax], rcx
mov qword [rax + 0x10], 2
jmp 0x100401c5
lea r8, [rsp + 0x180]
mov rcx, rdi
mov edx, 0xfffffff5
call fcn.100430b0
mov rdi, rdx
test rax, rax
je 0x1003f1b1
mov rax, qword [rsp + 0x50]
mov qword [rax], rdi
mov qword [rax + 0x10], 2
jmp 0x100401b8
cmp r13, rsi
jb 0x1004062d
test r15d, r15d
je 0x1003f222
lea rbx, [rsi + rsi]
movzx eax, byte [0x101aa020]
xor ecx, ecx
mov rdx, rbx
call fcn.100468b0
test rax, rax
mov r15, qword [rsp + 0x58]
je 0x10040641
mov rcx, rax
jmp 0x1003f22e
mov qword [rsp + 0x210], rax
mov qword [rsp + 0x218], rcx
mov word [rsp + 0x220], 0
lea rcx, [rsp + 0xc0]
lea rdx, [rsp + 0x210]
call fcn.10040df0
mov rax, qword [rsp + 0xc0]
mov rdx, qword [rsp + 0xd0]
cmp rdx, rax
jne 0x1003f1e7
lea rcx, [rsp + 0xc0]
call fcn.1001c7a0
mov rsi, r12
mov r8, qword [rsp + 0xc0]
mov rdx, qword [rsp + 0xd0]
jmp 0x1003f1ed
mov rcx, qword [rsp + 0x158]
mov edx, 2
call fcn.10004c20
lea rdx, str.PATHRUST_MIN_STACKfatal_runtime_error:_assertion_failed:_thread_info.stack_guard.get__.is_none____thread_info.thread.get__.is_none___n
lea rcx, [rsp + 0x170]
mov r8d, 4
call fcn.100389d0
mov rbp, qword [rsp + 0x170]
movabs rax, 0x8000000000000000
cmp rbp, rax
je 0x1003f0fb
mov rsi, qword [rsp + 0x178]
mov rax, qword [rsp + 0x180]
add rax, rsi
mov qword [rsp + 0xc0], rsi
mov qword [rsp + 0xc8], rax
mov word [rsp + 0xd0], 0
mov byte [rsp + 0xd8], 1
lea rdi, [rsp + 0x210]
lea rbx, [rsp + 0xc0]
lea r13, [rsp + 0x98]
mov rcx, rdi
mov rdx, rbx
call fcn.10039f10
jmp 0x1003efdb
mov rcx, rdi
mov rdx, rbx
call fcn.10039f10
mov rax, qword [rsp + 0x210]
movabs rcx, 0x8000000000000000
cmp rax, rcx
je 0x1003f0e9
mov rcx, qword [rsp + 0x218]
mov rdx, qword [rsp + 0x220]
test rdx, rdx
jne 0x1003f01c
test rax, rax
je 0x1003efd0
mov edx, 1
call fcn.10004c20
jmp 0x1003efd0
mov r8, qword [rsp + 0x228]
mov qword [rsp + 0x210], rax
mov qword [rsp + 0x218], rcx
mov qword [rsp + 0x220], rdx
mov qword [rsp + 0x228], r8
mov rcx, rdi
mov rdx, qword [rsp + 0x60]
mov r8, r12
call fcn.1003a6f0
cmp qword [rsp + 0x70], 1
je 0x1003f064
mov rcx, rdi
call fcn.1003c110
mov r14, qword [rsp + 0x218]
mov r8, qword [rsp + 0x220]
mov rcx, r13
mov rdx, r14
call fcn.10042b00
cmp qword [rsp + 0x210], 0
je 0x1003f097
mov edx, 1
mov rcx, r14
call fcn.10004c20
mov rcx, qword [rsp + 0x98]
movabs rax, 0x8000000000000000
cmp rcx, rax
je 0x1003efc3
mov qword [rsp + 0x68], rcx
mov rdi, qword [rsp + 0xa0]
mov rbx, qword [rsp + 0xa8]
test rbp, rbp
je 0x1003f0d9
mov edx, 1
mov rcx, rsi
call fcn.10004c20
mov r14, qword [rsp + 0xb8]
mov r8, rdi
jmp 0x1003df38
test rbp, rbp
je 0x1003f0fb
mov edx, 1
mov rcx, rsi
call fcn.10004c20
lea rdi, [0x101a2848]
jmp 0x1003d753
call sub.KERNEL32.dll_GetLastError
mov edi, eax
shl rdi, 0x20
or rdi, 2
movabs rsi, 0x8000000000000000
mov r15, qword [rsp + 0x58]
jmp 0x1003f23c
xor edi, edi
lea rcx, [rsp + 0x210]
call fcn.10040d30
cmp rbp, qword [rsp + 0x98]
jne 0x1003f165
xor edi, edi
lea rcx, [rsp + 0x98]
mov rdx, rbp
call fcn.1001c7a0
mov r12, qword [rsp + 0xa0]
mov rbp, qword [rsp + 0xa8]
mov word [r12 + rbp*2], 0
mov rdx, qword [rsp + 0x98]
movabs rax, 0x8000000000000000
mov rcx, rdx
mov qword [rsp + 0x70], rdx
cmp rdx, rax
mov r15, qword [rsp + 0x58]
mov r14, qword [rsp + 0xb8]
je 0x1003eab2
mov rax, qword [rsp + 0xa0]
mov qword [rsp + 0x88], rax
jmp 0x1003e43b
lea r8, [rsp + 0x190]
mov rcx, rbx
mov edx, 0xfffffff4
call fcn.100430b0
mov rcx, rdx
test rax, rax
je 0x1003f74b
mov rax, qword [rsp + 0x50]
mov qword [rax], rcx
mov qword [rax + 0x10], 2
jmp 0x100401b0
mov r8, rax
mov rsi, r12
mov r12, qword [rsp + 0xc8]
mov word [r12 + rdx*2], 0
mov rcx, r12
movabs rax, 0x8000000000000000
mov rdx, r8
mov qword [rsp + 0x168], r8
cmp r8, rax
jne 0x1003e464
jmp 0x1003ea53
mov ecx, 2
xor ebx, ebx
mov r15, qword [rsp + 0x58]
mov rdi, rcx
mov rdx, r12
mov r8, rbx
call sub.ntdll.dll_memcpy
cmp qword [rsp + 0x60], 0
je 0x1003f256
mov edx, 2
mov rcx, qword [rsp + 0x80]
call fcn.10004c20
movabs rax, 0x8000000000000000
cmp rsi, rax
je 0x1003f447
mov qword [rsp + 0x170], rsi
lea rax, [rsp + 0x178]
mov qword [rsp + 0x78], rax
mov qword [rsp + 0x178], rdi
mov qword [rsp + 0x180], rsi
lea rbp, [0x101a28a2]
xor r12d, r12d
lea r14, [rsp + 0x170]
movabs rbx, 0xaaaaaaaaaaaaaaab
xor r15d, r15d
jmp 0x1003f2c8
mov r15d, ecx
mov rax, rdi
mov rdi, rax
mov word [rax + rsi*2], r13w
inc rsi
mov qword [rsp + 0x180], rsi
test rbp, rbp
je 0x1003f381
test r15w, r15w
je 0x1003f316
xor ecx, ecx
mov r13d, r15d
cmp rsi, qword [rsp + 0x170]
jne 0x1003f2af
lea rax, [0x101a28a2]
sub rax, rbp
add rax, 0xa
mul rbx
mov r8, rdx
shr r8, 1
cmp cx, 1
mov rax, r12
adc rax, 0xffffffffffffffff
sub r8, rax
inc r8
mov r15d, ecx
jmp 0x1003f3b3
lea rax, [0x101a28aa]
cmp rbp, rax
je 0x1003f381
movzx r13d, byte [rbp]
test r13b, r13b
js 0x1003f333
inc rbp
xor ecx, ecx
jmp 0x1003f2dc
mov eax, r13d
and eax, 0x1f
movzx edx, byte [rbp + 1]
and edx, 0x3f
cmp r13b, 0xdf
jbe 0x1003f3ce
movzx ecx, byte [rbp + 2]
shl edx, 6
and ecx, 0x3f
or ecx, edx
cmp r13b, 0xf0
jb 0x1003f3e1
movzx r13d, byte [rbp + 3]
and eax, 7
shl eax, 0x12
shl ecx, 6
and r13d, 0x3f
or r13d, ecx
or r13d, eax
cmp r13d, 0x110000
jne 0x1003f3ef
mov rcx, qword [rsp + 0x170]
cmp r12, 1
je 0x1003f42b
mov r12d, 1
xor r13d, r13d
mov ebp, 0
mov r8d, 0
cmp rsi, rcx
mov rax, rdi
jne 0x1003f2b5
inc r8
mov rcx, r14
mov rdx, rsi
call fcn.1001c8f0
mov rax, qword [rsp + 0x178]
jmp 0x1003f2b5
add rbp, 2
shl eax, 6
or eax, edx
mov r13d, eax
xor ecx, ecx
jmp 0x1003f2dc
add rbp, 3
shl eax, 0xc
or ecx, eax
mov r13d, ecx
jmp 0x1003f3f3
add rbp, 4
cmp r13d, 0xffff
jbe 0x1003f424
lea eax, [r13 + 0xff0000]
shr eax, 0xa
or eax, 0xd800
and r13d, 0x3ff
or r13d, 0xdc00
mov ecx, r13d
mov r13d, eax
jmp 0x1003f2dc
xor ecx, ecx
jmp 0x1003f2dc
mov rdi, qword [rsp + 0x178]
movabs rax, 0x8000000000000000
cmp rcx, rax
jne 0x1003f454
mov r15, qword [rsp + 0x58]
mov rax, qword [rsp + 0x50]
mov qword [rax], rdi
jmp 0x1003e104
mov al, 1
test al, al
mov qword [rsp + 0x78], rdi
mov qword [rsp + 0x60], rcx
je 0x10040650
mov rcx, qword [rsp + 0xb8]
mov rax, qword [rcx + 0x28]
mov qword [rsp + 0x80], rax
mov rax, qword [rcx + 0x30]
mov qword [rsp + 0x88], rax
movzx eax, byte [rcx + 0xc5]
mov byte [rsp + 0x168], al
movzx eax, byte [0x101aa020]
mov edx, 0x14
xor ecx, ecx
call fcn.100468b0
test rax, rax
je 0x10040657
mov ecx, 0xa
mov word [rax], 0x63
mov qword [rsp + 0x210], rcx
lea rcx, [rsp + 0x218]
mov qword [rsp + 0x128], rcx
mov qword [rsp + 0x218], rax
mov qword [rsp + 0x220], 1
lea r13, [0x101a22af]
mov esi, 1
xor r12d, r12d
lea rbp, [0x101a22ca]
lea r15, [0x101a22ae]
lea rdi, [rsp + 0x210]
jmp 0x1003f522
mov word [rax + rsi*2], r12w
inc rsi
mov qword [rsp + 0x220], rsi
mov r12d, r14d
test r12w, r12w
jne 0x1003f5e7
cmp r13, rbp
je 0x1003f62d
movzx r12d, byte [r13]
test r12b, r12b
js 0x1003f547
inc r13
jmp 0x1003f5e7
mov ecx, r12d
and ecx, 0x1f
movzx r8d, byte [r13 + 1]
and r8d, 0x3f
cmp r12b, 0xdf
jbe 0x1003f59c
movzx edx, byte [r13 + 2]
shl r8d, 6
and edx, 0x3f
or edx, r8d
cmp r12b, 0xf0
jb 0x1003f5ab
movzx r12d, byte [r13 + 3]
and ecx, 7
shl ecx, 0x12
shl edx, 6
and r12d, 0x3f
or r12d, edx
or r12d, ecx
cmp r12d, 0x110000
je 0x1003f62d
add r13, 4
jmp 0x1003f5b7
add r13, 2
shl ecx, 6
or ecx, r8d
mov r12d, ecx
jmp 0x1003f5e7
add r13, 3
shl ecx, 0xc
or edx, ecx
mov r12d, edx
cmp r12d, 0xffff
jbe 0x1003f5e7
lea ecx, [r12 + 0xff0000]
shr ecx, 0xa
or ecx, 0xd800
and r12d, 0x3ff
or r12d, 0xdc00
mov r14d, r12d
mov r12d, ecx
jmp 0x1003f5ea
xor r14d, r14d
cmp rsi, qword [rsp + 0x210]
jne 0x1003f50f
mov rax, r15
sub rax, r13
add rax, 0x1e
mul rbx
shr rdx, 1
cmp r14w, 1
sbb rdx, 0
lea r8, [rdx + 2]
mov rcx, rdi
mov rdx, rsi
call fcn.1001c8f0
mov rax, qword [rsp + 0x218]
jmp 0x1003f50f
mov rsi, qword [rsp + 0x220]
mov qword [rsp + 0xd0], rsi
movups xmm0, xmmword [rsp + 0x210]
movaps xmmword [rsp + 0xc0], xmm0
cmp rsi, qword [rsp + 0xc0]
jne 0x1003f68b
lea rcx, [rsp + 0xc0]
mov rdx, rsi
mov r15, qword [rsp + 0x58]
call fcn.1001c7a0
mov r12, qword [rsp + 0x80]
mov r8, qword [rsp + 0x70]
mov rbp, qword [rsp + 0x88]
mov rsi, qword [rsp + 0xd0]
jmp 0x1003f6a5
mov r15, qword [rsp + 0x58]
mov r12, qword [rsp + 0x80]
mov r8, qword [rsp + 0x70]
mov rbp, qword [rsp + 0x88]
mov r14, qword [rsp + 0xc8]
mov word [r14 + rsi*2], 0x22
inc rsi
mov qword [rsp + 0xd0], rsi
lea rax, [r8 + r8]
xor ecx, ecx
lea r13, str.Windows_file_names_may_not_contain_____or_end_with___
mov rdx, qword [rsp + 0x90]
cmp rax, rcx
je 0x1003f6e6
cmp word [rdx + rcx], 0x22
lea rcx, [rcx + 2]
jne 0x1003f6d4
jmp 0x1003f6fe
mov rax, qword [rsp + 0x90]
movzx eax, word [rax + r8*2 - 2]
cmp ax, 0x5c
jne 0x1003f8b6
cmp qword [rsp + 0xc0], 0
je 0x1003f71b
mov rcx, qword [rsp + 0xc8]
mov edx, 2
call fcn.10004c20
mov rax, qword [rsp + 0x50]
mov qword [rax], r13
mov qword [rax + 0x10], 2
cmp qword [rsp + 0x60], 0
je 0x1003e10c
mov edx, 2
mov rcx, qword [rsp + 0x78]
call fcn.10004c20
jmp 0x1003e10c
xorps xmm0, xmm0
movups xmmword [rsp + 0xf4], xmm0
movups xmmword [rsp + 0xe8], xmm0
movups xmmword [rsp + 0xd8], xmm0
movups xmmword [rsp + 0xc8], xmm0
movups xmmword [rsp + 0x108], xmm0
movups xmmword [rsp + 0x118], xmm0
test rcx, rcx
jne 0x1003f793
test rdi, rdi
jne 0x1003f793
cmp qword [rsp + 0x128], 0
je 0x1003f7be
mov dword [rsp + 0xfc], 0x100
mov rax, qword [rsp + 0x128]
mov qword [rsp + 0x110], rax
mov qword [rsp + 0x118], rdi
mov qword [rsp + 0x120], rcx
mov rdx, r14
mov r14, qword [r14 + 0xb8]
test r14, r14
mov qword [rsp + 0x1c8], rcx
je 0x1003ffd0
add rdx, 0xa8
mov dword [rsp + 0xc0], 0x70
lea rcx, [rsp + 0x1f8]
call fcn.10043730
mov rbx, qword [rsp + 0x1f8]
mov rcx, qword [rsp + 0x200]
test rbx, rbx
je 0x10040193
mov qword [rsp + 0xb8], rcx
or r13d, 0x80000
mov rax, qword [rsp + 0x120]
mov qword [rsp + 0x270], rax
movups xmm0, xmmword [rsp + 0x110]
movaps xmmword [rsp + 0x260], xmm0
movups xmm0, xmmword [rsp + 0x100]
movaps xmmword [rsp + 0x250], xmm0
movups xmm0, xmmword [rsp + 0xc0]
movups xmm1, xmmword [rsp + 0xd0]
movups xmm2, xmmword [rsp + 0xe0]
movups xmm3, xmmword [rsp + 0xf0]
movaps xmmword [rsp + 0x240], xmm3
movaps xmmword [rsp + 0x230], xmm2
movaps xmmword [rsp + 0x220], xmm1
movaps xmmword [rsp + 0x210], xmm0
mov qword [rsp + 0x278], rbx
lea rax, [rsp + 0x210]
jmp 0x1003ffe3
lea rcx, str._JJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccc
call fcn.10007d00
jmp 0x10040666
lea rdi, [r8 - 1]
xor ebx, ebx
test ax, ax
mov rax, qword [rsp + 0x90]
cmove rbx, rax
test rbx, rbx
cmove rdi, r8
cmove rbx, rax
mov r13, qword [rsp + 0xc0]
mov rax, r13
sub rax, rsi
cmp rax, rdi
jae 0x1003f914
lea rcx, [rsp + 0xc0]
mov rdx, rsi
mov r8, rdi
call fcn.1001c8f0
mov rsi, qword [rsp + 0xd0]
mov r13, qword [rsp + 0xc0]
mov r14, qword [rsp + 0xc8]
lea r8, [rdi + rdi]
lea rcx, [r14 + rsi*2]
mov rdx, rbx
call sub.ntdll.dll_memcpy
add rsi, rdi
mov qword [rsp + 0xd0], rsi
cmp rsi, r13
jne 0x1003f954
lea rcx, [rsp + 0xc0]
mov rdx, r13
call fcn.1001c7a0
mov r14, qword [rsp + 0xc8]
mov rsi, qword [rsp + 0xd0]
mov word [r14 + rsi*2], 0x22
inc rsi
mov qword [rsp + 0xd0], rsi
test rbp, rbp
je 0x100403a5
lea rax, [rbp*4]
add rax, rbp
lea rax, [r12 + rax*8]
mov qword [rsp + 0x88], rax
movdqa xmm6, xmmword [0x100501b0]
lea r14, [0x101a22a2]
lea r13, str.nul_byte_found_in_provided_data
mov rbp, qword [rsp + 0xd0]
cmp rbp, qword [rsp + 0xc0]
jne 0x1003f9c6
lea rcx, [rsp + 0xc0]
mov rdx, rbp
call fcn.1001c7a0
mov rbp, qword [rsp + 0xd0]
mov rdi, qword [rsp + 0xc8]
mov word [rdi + rbp*2], 0x20
inc rbp
mov qword [rsp + 0xd0], rbp
cmp qword [r12], 0
je 0x1003fa1b
lea rcx, [rsp + 0xc0]
mov rdx, r12
movzx r8d, byte [rsp + 0x168]
call fcn.10042bd0
test rax, rax
jne 0x10040413
add r12, 0x28
cmp r12, qword [rsp + 0x88]
jne 0x1003f99c
jmp 0x1004039d
mov rbx, qword [r12 + 0x10]
mov rax, qword [r12 + 0x18]
lea rcx, [rbx + rax]
mov qword [rsp + 0x70], rcx
xor ecx, ecx
cmp rax, rcx
je 0x1003fa4f
movzx edx, byte [rbx + rcx]
cmp edx, 0xa
je 0x10040178
inc rcx
cmp edx, 0xd
jne 0x1003fa30
jmp 0x10040178
mov qword [rsp + 0x80], r12
xor r9d, r9d
mov rcx, rbx
jmp 0x1003fa6b
xor r9d, r9d
test dx, dx
je 0x100402f4
mov dx, 1
test r9w, r9w
jne 0x1003fa5f
cmp rcx, qword [rsp + 0x70]
je 0x1003fb26
movzx r8d, byte [rcx]
test r8b, r8b
js 0x1003fa91
inc rcx
jmp 0x1003fb1b
mov r9d, r8d
and r9d, 0x1f
movzx r11d, byte [rcx + 1]
and r11d, 0x3f
cmp r8b, 0xdf
jbe 0x1003fade
movzx r10d, byte [rcx + 2]
shl r11d, 6
and r10d, 0x3f
or r10d, r11d
cmp r8b, 0xf0
jb 0x1003faee
movzx r8d, byte [rcx + 3]
add rcx, 4
and r9d, 7
shl r9d, 0x12
shl r10d, 6
and r8d, 0x3f
or r8d, r10d
or r8d, r9d
jmp 0x1003fafc
add rcx, 2
shl r9d, 6
or r9d, r11d
mov r8d, r9d
jmp 0x1003fb1b
add rcx, 3
shl r9d, 0xc
or r10d, r9d
mov r8d, r10d
cmp r8d, 0xffff
jbe 0x1003fb1b
and r8d, 0x3ff
or r8d, 0xdc00
mov r9d, r8d
jmp 0x1003fa62
xor r9d, r9d
mov edx, r8d
jmp 0x1003fa62
test rax, rax
je 0x1003fc3c
cmp byte [rsp + 0x168], 0
setne cl
cmp byte [rax + rbx - 1], 0x5c
sete sil
or sil, cl
mov r15, rbx
jmp 0x1003fb59
mov sil, 1
cmp r15, qword [rsp + 0x70]
je 0x1003fc2d
movzx ecx, byte [r15]
test cl, cl
js 0x1003fb66
inc r15
jmp 0x1003fbc1
mov eax, ecx
and eax, 0x1f
movzx r8d, byte [r15 + 1]
and r8d, 0x3f
cmp cl, 0xdf
jbe 0x1003fba8
movzx edx, byte [r15 + 2]
shl r8d, 6
and edx, 0x3f
or edx, r8d
cmp cl, 0xf0
jb 0x1003fbb6
movzx ecx, byte [r15 + 3]
add r15, 4
and eax, 7
shl eax, 0x12
shl edx, 6
and ecx, 0x3f
or ecx, edx
or ecx, eax
jmp 0x1003fbc1
add r15, 2
shl eax, 6
or eax, r8d
mov ecx, eax
jmp 0x1003fbc1
add r15, 3
shl eax, 0xc
or edx, eax
mov ecx, edx
cmp ecx, 0x110000
je 0x1003fb4e
mov eax, ecx
and eax, 0x1ff800
cmp eax, 0xd800
je 0x1003fb4e
cmp ecx, 0x80
jae 0x1003fc1b
lea eax, [rcx - 0x30]
cmp eax, 0xa
jb 0x1003fc1b
mov eax, ecx
and eax, 0xffffffdf
add eax, 0xffffffbf
cmp eax, 0x1a
jb 0x1003fc1b
xor eax, eax
mov r9, r14
movzx edx, byte [rax + r9]
cmp dl, cl
je 0x1003fc13
lea r8, [rax + 1]
cmp rax, 0xb
mov rax, r8
jne 0x1003fbfd
cmp dl, cl
jne 0x1003fb4b
call fcn.1000a3b0
test al, al
jne 0x1003fb4b
jmp 0x1003fb4e
mov al, 1
mov dword [rsp + 0x128], eax
test sil, 1
je 0x1003fc82
cmp rbp, qword [rsp + 0xc0]
jne 0x1003fc66
lea rcx, [rsp + 0xc0]
mov rdx, rbp
call fcn.1001c7a0
mov rdi, qword [rsp + 0xc8]
mov rbp, qword [rsp + 0xd0]
mov word [rdi + rbp*2], 0x22
inc rbp
mov qword [rsp + 0xd0], rbp
mov dword [rsp + 0x128], 0
xor r15d, r15d
xor esi, esi
jmp 0x1003fc9c
mov word [rdi + rbp*2], r15w
inc rbp
mov qword [rsp + 0xd0], rbp
mov r15d, r12d
test r15w, r15w
jne 0x1003fd4d
cmp rbx, qword [rsp + 0x70]
je 0x1003fedb
movzx r15d, byte [rbx]
test r15b, r15b
js 0x1003fcc2
inc rbx
jmp 0x1003fd4d
mov eax, r15d
and eax, 0x1f
movzx edx, byte [rbx + 1]
and edx, 0x3f
cmp r15b, 0xdf
jbe 0x1003fd05
movzx ecx, byte [rbx + 2]
shl edx, 6
and ecx, 0x3f
or ecx, edx
cmp r15b, 0xf0
jb 0x1003fd13
movzx r15d, byte [rbx + 3]
add rbx, 4
and eax, 7
shl eax, 0x12
shl ecx, 6
and r15d, 0x3f
or r15d, ecx
or r15d, eax
jmp 0x1003fd1f
add rbx, 2
shl eax, 6
or eax, edx
mov r15d, eax
jmp 0x1003fd4d
add rbx, 3
shl eax, 0xc
or ecx, eax
mov r15d, ecx
cmp r15d, 0xffff
jbe 0x1003fd4d
lea eax, [r15 + 0xff0000]
shr eax, 0xa
or eax, 0xd800
and r15d, 0x3ff
or r15d, 0xdc00
mov r12d, r15d
mov r15d, eax
jmp 0x1003fd50
xor r12d, r12d
movzx eax, r15w
cmp eax, 0x24
jg 0x1003fda3
cmp eax, 0xd
je 0x1003fdb9
cmp eax, 0x22
jne 0x1003fea6
mov rdx, qword [rsp + 0xc0]
mov rax, rdx
sub rax, rbp
cmp rax, rsi
jae 0x1003fe16
lea rcx, [rsp + 0xc0]
mov rdx, rbp
mov r8, rsi
call fcn.1001c8f0
mov rdi, qword [rsp + 0xc8]
mov rbp, qword [rsp + 0xd0]
jmp 0x1003fe1b
cmp eax, 0x25
je 0x1003fdb9
cmp eax, 0x5c
jne 0x1003fea6
inc rsi
jmp 0x1003fea8
mov rax, qword [rsp + 0xc0]
sub rax, rbp
cmp rax, 6
ja 0x1003fdf0
mov r8d, 7
lea rcx, [rsp + 0xc0]
mov rdx, rbp
call fcn.1001c8f0
mov rdi, qword [rsp + 0xc8]
mov rbp, qword [rsp + 0xd0]
movabs rax, 0x2c007e003a0064
mov qword [rdi + rbp*2 + 6], rax
movabs rax, 0x64006300250025
mov qword [rdi + rbp*2], rax
add rbp, 7
jmp 0x1003fe9e
test rsi, rsi
je 0x1003fe6b
cmp rsi, 0x10
jae 0x1003fe25
xor eax, eax
jmp 0x1003fe52
mov rax, rsi
and rax, 0xfffffffffffffff0
lea rcx, [rdi + rbp*2]
add rcx, 0x10
xor edx, edx
movdqu xmmword [rcx + rdx*2 - 0x10], xmm6
movdqu xmmword [rcx + rdx*2], xmm6
add rdx, 0x10
cmp rax, rdx
jne 0x1003fe36
add rbp, rax
cmp rsi, rax
je 0x1003fe63
sub rsi, rax
mov word [rdi + rbp*2], 0x5c
inc rbp
dec rsi
jne 0x1003fe55
mov rdx, qword [rsp + 0xc0]
mov qword [rsp + 0xd0], rbp
cmp rbp, rdx
jne 0x1003fe95
lea rcx, [rsp + 0xc0]
call fcn.1001c7a0
mov rdi, qword [rsp + 0xc8]
mov rbp, qword [rsp + 0xd0]
mov word [rdi + rbp*2], 0x22
inc rbp
mov qword [rsp + 0xd0], rbp
xor esi, esi
cmp rbp, qword [rsp + 0xc0]
jne 0x1003fc89
lea rcx, [rsp + 0xc0]
mov rdx, rbp
call fcn.1001c7a0
mov rdi, qword [rsp + 0xc8]
mov rbp, qword [rsp + 0xd0]
jmp 0x1003fc89
cmp byte [rsp + 0x128], 0
mov r15, qword [rsp + 0x58]
mov r12, qword [rsp + 0x80]
jne 0x1003fa08
mov rdx, qword [rsp + 0xc0]
mov rax, rdx
sub rax, rbp
cmp rax, rsi
jae 0x1003ff2e
lea rcx, [rsp + 0xc0]
mov rdx, rbp
mov r8, rsi
call fcn.1001c8f0
mov rdi, qword [rsp + 0xc8]
mov rbp, qword [rsp + 0xd0]
jmp 0x1003ff33
test rsi, rsi
je 0x1003ff83
cmp rsi, 0x10
jae 0x1003ff3d
xor eax, eax
jmp 0x1003ff6a
mov rax, rsi
and rax, 0xfffffffffffffff0
lea rcx, [rdi + rbp*2]
add rcx, 0x10
xor edx, edx
movdqu xmmword [rcx + rdx*2 - 0x10], xmm6
movdqu xmmword [rcx + rdx*2], xmm6
add rdx, 0x10
cmp rax, rdx
jne 0x1003ff4e
add rbp, rax
cmp rsi, rax
je 0x1003ff7b
sub rsi, rax
mov word [rdi + rbp*2], 0x5c
inc rbp
dec rsi
jne 0x1003ff6d
mov rdx, qword [rsp + 0xc0]
mov qword [rsp + 0xd0], rbp
cmp rbp, rdx
jne 0x1003ffad
lea rcx, [rsp + 0xc0]
call fcn.1001c7a0
mov rdi, qword [rsp + 0xc8]
mov rbp, qword [rsp + 0xd0]
mov word [rdi + rbp*2], 0x22
inc rbp
mov qword [rsp + 0xd0], rbp
mov r15, qword [rsp + 0x58]
mov r12, qword [rsp + 0x80]
jmp 0x1003fa08
mov dword [rsp + 0xc0], 0x68
lea rax, [rsp + 0xc0]
mov rdx, qword [rsp + 0x138]
lea rcx, [rsp + 0x150]
mov qword [rsp + 0x48], rcx
mov qword [rsp + 0x40], rax
mov qword [rsp + 0x38], r12
mov qword [rsp + 0x30], rsi
mov rsi, rdx
mov dword [rsp + 0x28], r13d
mov dword [rsp + 0x20], 1
mov rcx, qword [rsp + 0x78]
xor r8d, r8d
xor r9d, r9d
call sub.KERNEL32.dll_CreateProcessW
test eax, eax
je 0x10040144
movups xmm0, xmmword [rsp + 0x170]
movups xmm1, xmmword [rsp + 0x180]
movups xmm2, xmmword [rsp + 0x190]
mov rax, qword [rsp + 0x50]
movups xmmword [rax + 0x30], xmm2
movups xmmword [rax + 0x20], xmm1
movups xmmword [rax + 0x10], xmm0
movaps xmm0, xmmword [rsp + 0x150]
movups xmmword [rax], xmm0
test r14, r14
je 0x10040078
mov rcx, rbx
mov rdx, qword [rsp + 0xb8]
call fcn.10043ad0
mov rcx, qword [rsp + 0x1c8]
call sub.KERNEL32.dll_CloseHandle
mov rcx, rdi
call sub.KERNEL32.dll_CloseHandle
mov rcx, qword [rsp + 0x128]
call sub.KERNEL32.dll_CloseHandle
lea rcx, [rsp + 0x98]
mov r15, qword [rsp + 0x58]
call fcn.10043b10
cmp qword [rsp + 0x168], 0
je 0x100400c9
mov edx, 2
mov rcx, qword [rsp + 0x1d0]
call fcn.10004c20
cmp qword [rsp + 0x70], 0
je 0x100400e3
mov edx, 2
mov rcx, qword [rsp + 0x88]
call fcn.10004c20
cmp qword [rsp + 0x130], 0
je 0x100400fb
mov edx, 2
mov rcx, rsi
call fcn.10004c20
cmp qword [rsp + 0x60], 0
je 0x10040112
mov edx, 2
mov rcx, qword [rsp + 0x78]
call fcn.10004c20
cmp qword [rsp + 0x68], 0
setne al
mov ecx, dword [rsp + 0x80]
xor cl, 1
test al, cl
je 0x1003d7fc
mov edx, 2
mov rcx, qword [rsp + 0x90]
call fcn.10004c20
jmp 0x1003d7fc
call sub.KERNEL32.dll_GetLastError
shl rax, 0x20
or rax, 2
mov rcx, qword [rsp + 0x50]
mov qword [rcx], rax
mov qword [rcx + 0x10], 2
test r14, r14
je 0x100401a3
mov rcx, rbx
mov rdx, qword [rsp + 0xb8]
call fcn.10043ad0
jmp 0x100401a3
lea r13, str.batch_file_arguments_are_invalid
cmp qword [rsp + 0xc0], 0
jne 0x1003f709
jmp 0x1003f71b
mov rax, qword [rsp + 0x50]
mov qword [rax], rcx
mov qword [rax + 0x10], 2
mov rcx, qword [rsp + 0x1c8]
call sub.KERNEL32.dll_CloseHandle
mov rcx, rdi
call sub.KERNEL32.dll_CloseHandle
mov rcx, qword [rsp + 0x128]
call sub.KERNEL32.dll_CloseHandle
cmp qword [rsp + 0x170], 0
je 0x100401dd
mov rcx, qword [rsp + 0x178]
call sub.KERNEL32.dll_CloseHandle
cmp qword [rsp + 0x180], 0
je 0x100401f5
mov rcx, qword [rsp + 0x188]
call sub.KERNEL32.dll_CloseHandle
cmp qword [rsp + 0x190], 0
je 0x1004020d
mov rcx, qword [rsp + 0x198]
call sub.KERNEL32.dll_CloseHandle
test r15b, r15b
je 0x10040234
test bpl, bpl
mov r15, qword [rsp + 0x58]
jne 0x1004025f
mov rax, qword [0x101aa0c0]
test qword [rsp + 0x208], rax
je 0x1004025f
call fcn.1001fa20
jmp 0x10040254
test bpl, bpl
mov r15, qword [rsp + 0x58]
jne 0x1004025f
mov rax, qword [0x101aa0c0]
test qword [rsp + 0x208], rax
je 0x1004025f
call fcn.1001fa20
test al, al
jne 0x1004025f
mov byte [0x101aa0e8], 1
lea rcx, [0x101aa0e0]
call sub.KERNEL32.dll_ReleaseSRWLockExclusive
cmp qword [rsp + 0x168], 0
je 0x10040288
mov edx, 2
mov rcx, qword [rsp + 0x1d0]
call fcn.10004c20
cmp qword [rsp + 0x70], 0
je 0x100402a2
mov edx, 2
mov rcx, qword [rsp + 0x88]
call fcn.10004c20
cmp qword [rsp + 0x130], 0
je 0x100402bf
mov rcx, qword [rsp + 0x138]
mov edx, 2
call fcn.10004c20
cmp qword [rsp + 0x60], 0
je 0x100402d6
mov edx, 2
mov rcx, qword [rsp + 0x78]
call fcn.10004c20
mov sil, 1
cmp byte [rsp + 0x80], 0
jne 0x1003d7fc
jmp 0x1003e10e
mov r12, rdi
jmp 0x1003ea81
mov r15, qword [rsp + 0x58]
cmp qword [rsp + 0xc0], 0
jne 0x1003f709
jmp 0x1003f71b
call sub.KERNEL32.dll_GetLastError
shl rax, 0x20
or rax, 2
mov qword [rsp + 0x98], rax
lea rax, [rsp + 0x98]
mov qword [rsp + 0x170], rax
lea rax, [0x100395c0]
mov qword [rsp + 0x178], rax
lea rax, str.comparing_environment_keys_failed:
mov qword [rsp + 0xc0], rax
mov qword [rsp + 0xc8], 1
mov qword [rsp + 0xe0], 0
lea rax, [rsp + 0x170]
mov qword [rsp + 0xd0], rax
mov qword [rsp + 0xd8], 1
lea rdx, str.cccccccccccccccccccccccccccccccccccccBBhhI
lea rcx, [rsp + 0xc0]
call fcn.10005c80
jmp 0x10040666
mov rsi, qword [rsp + 0xd0]
mov rdx, qword [rsp + 0xc0]
cmp rsi, rdx
jne 0x100403d2
lea rcx, [rsp + 0xc0]
mov rdx, rsi
call fcn.1001c7a0
mov rdx, qword [rsp + 0xc0]
mov rsi, qword [rsp + 0xd0]
mov r13, qword [rsp + 0xc8]
mov word [r13 + rsi*2], 0x22
movabs rax, 0x8000000000000000
cmp rdx, rax
jne 0x100403fb
mov r15, qword [rsp + 0x58]
jmp 0x1003f71b
inc rsi
mov dword [rsp + 0x80], 0
mov r15, qword [rsp + 0x58]
jmp 0x1003e16f
mov r13, rax
cmp qword [rsp + 0xc0], 0
jne 0x1003f709
jmp 0x1003f71b
lea rcx, str._JJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccc
call fcn.10007d00
jmp 0x10040666
mov ecx, 2
mov rdx, r13
call fcn.10005130
jmp 0x10040666
call fcn.100050f0
jmp 0x10040666
mov ecx, 1
mov rdx, rsi
call fcn.10005130
jmp 0x10040666
call fcn.100050f0
jmp 0x10040666
mov ecx, 1
mov rdx, rdi
call fcn.10005130
jmp 0x10040666
call fcn.100050f0
jmp 0x10040666
lea r8, str.wwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwww
mov ecx, 1
xor edx, edx
call fcn.10005cc0
jmp 0x10040666
lea rax, str.wwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwww
mov rcx, r8
mov rdx, rbx
mov r8, rax
call fcn.10006730
jmp 0x10040666
lea r8, str.wwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwww
mov rcx, rbp
mov rdx, rbx
call fcn.10005cc0
jmp 0x10040666
lea rcx, str.assertion_failed:_self.height___0
lea r8, [0x101a03e0]
mov edx, 0x21
call fcn.10006ad0
jmp 0x10040666
lea rcx, str.internal_error:_entered_unreachable_code
lea r8, str.OOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOO
mov edx, 0x28
call fcn.10006ad0
jmp 0x10040666
call sub.KERNEL32.dll_GetLastError
shl rax, 0x20
or rax, 2
mov qword [rsp + 0x98], rax
lea rax, [rsp + 0x98]
mov qword [rsp + 0x170], rax
lea rax, [0x100395c0]
mov qword [rsp + 0x178], rax
lea rax, str.failure_getting_env_string_from_OS:
mov qword [rsp + 0x210], rax
mov qword [rsp + 0x218], 1
mov qword [rsp + 0x230], 0
lea rax, [rsp + 0x170]
mov qword [rsp + 0x220], rax
mov qword [rsp + 0x228], 1
lea rdx, str.wwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwww
lea rcx, [rsp + 0x210]
call fcn.10005c80
jmp 0x10040666
lea rcx, str.internal_error:_entered_unreachable_code
lea r8, str.OOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOO
mov edx, 0x28
call fcn.10006ad0
jmp 0x10040666
call fcn.100050f0
jmp 0x10040666
mov qword [rsp + 0x58], r15
mov ecx, 1
mov rdx, r12
mov r15, qword [rsp + 0x58]
call fcn.10005130
jmp 0x10040666
lea rcx, str.internal_error:_entered_unreachable_code
lea r8, str.OOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOO
mov edx, 0x28
call fcn.10006ad0
jmp 0x10040666
lea rax, str.OOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOO
mov rcx, r8
mov rdx, r14
mov r8, rax
call fcn.10006730
jmp 0x10040666
lea rax, str.OOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOO
mov rcx, r8
mov rdx, r13
mov r8, rax
call fcn.10006730
jmp 0x10040666
lea r8, str.OOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOO
mov rcx, rsi
mov rdx, r13
call fcn.10006730
jmp 0x10040666
mov ecx, 2
mov rdx, rbx
call fcn.10005130
jmp 0x10040666
call fcn.100050f0
jmp 0x10040666
mov ecx, 2
mov edx, 0x14
call fcn.10005130
ud2