Function at 0x14004be00
Capabilities:
Create process on windows
Encode data using base64
Get common file path
Query environment variable

Disassembly:
push rbp
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbx
sub rsp, 0x6a8
lea rbp, [rsp + 0x80]
movdqa xmmword [rbp + 0x610], xmm6
mov qword [rbp + 0x608], 0xfffffffffffffffe
mov qword [rbp + 0x448], r8
mov r14, rdx
mov qword [rbp + 0x500], rcx
movzx eax, byte [rdx + 0x68]
mov rbx, qword [rdx + 0x60]
test al, al
mov qword [rbp + 0x590], rdx
jne 0x14004be6a
test rbx, rbx
jne 0x14004be6a
mov qword [rbp + 0x418], 0
xor r12d, r12d
jmp 0x14004caee
mov qword [rbp + 0x4e0], 0
mov qword [rbp + 0x4f0], 0
test al, al
jne 0x14004c0b7
mov qword [rbp + 0x5f8], rbx
call qword [sym.imp.kernel32.dll_GetEnvironmentStringsW]
test rax, rax
je 0x14004f3a1
lea rsi, [rbp + 0x460]
lea rdi, [rbp - 0x10]
lea r14, [rbp + 0x598]
mov qword [rbp + 0x5b8], rax
mov rbx, rax
nop word [rax + rax]
cmp word [rbx], 0
je 0x14004c09c
mov r12, rbx
mov rcx, 0xfffffffffffffffe
xor edx, edx
nop word cs:[rax + rax]
mov r15, rdx
mov rax, rcx
inc rdx
add rcx, 2
cmp word [r12 + r15*2], 0
jne 0x14004bee0
lea rbx, [r12 + rdx*2]
cmp r15, 1
je 0x14004bec0
test r15, r15
je 0x14004f2e6
xor r13d, r13d
nop dword [rax + rax]
cmp word [r12 + r13*2 + 2], 0x3d
je 0x14004bf30
inc r13
add rax, 0xfffffffffffffffe
jne 0x14004bf10
jmp 0x14004bec0
lea r8, [r13 + 1]
cmp r13, r15
jae 0x14004f2fe
mov rcx, rsi
mov rdx, r12
call fcn.140043440
add r13, 2
mov r8, r15
sub r8, r13
jb 0x14004f318
lea rdx, [r12 + r13*2]
mov rcx, rdi
call fcn.140043440
mov r8, qword [rbp + 0x460]
mov r9, qword [rbp + 0x468]
movdqu xmm6, xmmword [rbp + 0x470]
mov rcx, qword [rbp - 0x10]
mov rdx, qword [rbp - 8]
lea rax, [rbp]
movdqu xmm0, xmmword [rax]
movdqa xmmword [rbp + 0x4c0], xmm0
movdqa xmmword [rbp - 0x20], xmm6
cmp byte [rbp - 0x18], 2
je 0x14004c09c
mov qword [rbp + 0x5e8], r9
mov qword [rbp + 0x5e0], rdx
mov qword [rbp + 0x5d0], rcx
movq rax, xmm6
add rax, r8
mov qword [rbp + 0x460], r8
mov qword [rbp + 0x468], rax
mov word [rbp + 0x470], 0
mov r15, r14
mov rcx, r14
mov rdx, rsi
mov qword [rbp + 0x5c0], r8
call fcn.1400508c0
mov rax, qword [rbp + 0x5c0]
mov qword [rbp + 8], rax
mov rax, qword [rbp + 0x5e8]
mov qword [rbp + 0x10], rax
movdqu xmmword [rbp + 0x18], xmm6
movups xmm0, xmmword [rbp + 0x598]
movaps xmmword [rbp - 0x10], xmm0
mov rax, qword [rbp + 0x5a8]
mov qword [rbp], rax
mov rax, qword [rbp + 0x5d0]
mov qword [rbp + 0x460], rax
mov rax, qword [rbp + 0x5e0]
mov qword [rbp + 0x468], rax
movdqa xmm0, xmmword [rbp + 0x4c0]
lea rax, [rbp + 0x470]
movdqu xmmword [rax], xmm0
mov byte [rbp + 0x5cf], 0
mov rcx, r15
lea rdx, [rbp + 0x4e0]
mov r8, rdi
mov r9, rsi
call fcn.140050af0
cmp byte [rbp + 0x5b0], 2
je 0x14004bec0
cmp qword [rbp + 0x5a0], 0
je 0x14004bec0
mov r8, qword [rbp + 0x598]
mov rcx, qword [0x1400d6818]
xor edx, edx
call qword [sym.imp.kernel32.dll_HeapFree]
jmp 0x14004bec0
mov rcx, qword [rbp + 0x5b8]
call qword [sym.imp.kernel32.dll_FreeEnvironmentStringsW]
mov r14, qword [rbp + 0x590]
mov rbx, qword [rbp + 0x5f8]
mov rax, qword [r14 + 0x50]
mov r9, qword [r14 + 0x58]
xor edi, edi
test rax, rax
setne dil
cmove rbx, rax
xor r15d, r15d
jmp 0x14004c0e9
xor eax, eax
mov r9, qword [rbp + 0x5b8]
test rbx, rbx
je 0x14004c910
test rdi, rdi
je 0x14004c140
test r15, r15
jne 0x14004c140
mov edi, 1
test r9, r9
je 0x14004c14a
mov rdx, r9
and rdx, 7
je 0x14004c14f
mov rcx, r9
and rcx, 0xfffffffffffffff8
mov r15, rax
nop dword [rax]
mov r15, qword [r15 + 0x3d8]
dec rdx
jne 0x14004c120
cmp r9, 8
jae 0x14004c160
jmp 0x14004c19e
test rdi, rdi
jne 0x14004c1a3
jmp 0x14004f267
mov r15, rax
jmp 0x14004c19e
mov r15, rax
mov rcx, r9
cmp r9, 8
jb 0x14004c19e
nop dword [rax + rax]
mov rax, qword [r15 + 0x3d8]
mov rax, qword [rax + 0x3d8]
mov rax, qword [rax + 0x3d8]
mov rax, qword [rax + 0x3d8]
mov rax, qword [rax + 0x3d8]
mov rax, qword [rax + 0x3d8]
mov rax, qword [rax + 0x3d8]
mov r15, qword [rax + 0x3d8]
add rcx, 0xfffffffffffffff8
jne 0x14004c160
xor r9d, r9d
xor eax, eax
movzx ecx, word [r15 + 0x3d2]
mov rsi, r15
mov r12, r9
cmp r9, rcx
jb 0x14004c1e8
nop word cs:[rax + rax]
mov rcx, qword [rsi + 0x160]
test rcx, rcx
je 0x14004ee4b
inc rax
movzx r12d, word [rsi + 0x3d0]
mov rsi, rcx
cmp r12w, word [rcx + 0x3d2]
jae 0x14004c1c0
test rax, rax
je 0x14004c280
mov r15, qword [rsi + r12*8 + 0x3e0]
mov rcx, rax
dec rcx
je 0x14004c26e
mov rdx, rcx
and rdx, 7
je 0x14004c225
mov rcx, rdx
nop dword [rax]
mov r15, qword [r15 + 0x3d8]
dec rcx
jne 0x14004c210
not rdx
add rdx, rax
mov rcx, rdx
add rax, 0xfffffffffffffffe
cmp rax, 7
jb 0x14004c26e
nop
mov rax, qword [r15 + 0x3d8]
mov rax, qword [rax + 0x3d8]
mov rax, qword [rax + 0x3d8]
mov rax, qword [rax + 0x3d8]
mov rax, qword [rax + 0x3d8]
mov rax, qword [rax + 0x3d8]
mov rax, qword [rax + 0x3d8]
mov r15, qword [rax + 0x3d8]
add rcx, 0xfffffffffffffff8
jne 0x14004c230
xor r9d, r9d
jmp 0x14004c288
lea r9, [r12 + 1]
mov r15, rsi
dec rbx
imul rax, r12, 0x38
lea r14, [rsi + rax]
add r14, 0x168
shl r12, 5
cmp byte [rsi + r12 + 0x18], 2
jne 0x14004c310
mov r13, qword [rbp + 0x4e0]
mov eax, 0
test r13, r13
je 0x14004c0e9
mov rsi, r9
mov r12, rdi
mov r9, qword [r14]
mov rax, qword [r14 + 0x10]
mov rdi, qword [rbp + 0x4e8]
mov qword [rsp + 0x20], rax
lea rcx, [rbp + 0x598]
mov rdx, r13
mov r8, rdi
call fcn.1400522a0
cmp qword [rbp + 0x598], 0
je 0x14004c4e9
xor eax, eax
mov rdi, r12
mov r9, rsi
jmp 0x14004c0e9
mov qword [rbp + 0x5d0], rdi
mov rdi, qword [r14 + 0x18]
mov r13, qword [r14 + 0x28]
test r13, r13
mov qword [rbp + 0x5b8], r9
mov qword [rbp + 0x5f8], rbx
je 0x14004c351
js 0x14004f284
movzx eax, byte [0x1400d68a0]
mov rcx, r13
call fcn.14000f140
test rax, rax
jne 0x14004c356
jmp 0x14004f2c2
mov eax, 1
mov qword [rbp + 0x5c0], rax
mov rcx, rax
mov rdx, rdi
mov r8, r13
call fcn.14006aa40
movzx ebx, byte [r14 + 0x30]
mov rdx, qword [r14]
mov rcx, qword [r14 + 0x10]
mov r14d, 2
test rcx, rcx
mov qword [rbp + 0x5e0], r13
mov qword [rbp + 0x5e8], rcx
je 0x14004c3d0
mov rax, rcx
shr rax, 0x3e
jne 0x14004f28e
mov r13, rcx
add r13, rcx
je 0x14004c3d0
mov rdi, rdx
movzx eax, byte [0x1400d68a0]
mov rcx, r13
call fcn.14000f140
test rax, rax
je 0x14004f2d4
mov r14, rax
mov rdx, rdi
jmp 0x14004c3d3
xor r13d, r13d
add rsi, r12
mov rcx, r14
mov r8, r13
call fcn.14006aa40
mov rax, qword [rbp + 0x5c0]
mov qword [rbp + 8], rax
mov rax, qword [rbp + 0x5e0]
mov qword [rbp + 0x10], rax
mov qword [rbp + 0x18], rax
mov byte [rbp + 0x20], bl
mov qword [rbp - 0x10], r14
mov rax, qword [rbp + 0x5e8]
mov qword [rbp - 8], rax
mov qword [rbp], rax
mov r13, qword [rsi]
mov rdi, qword [rsi + 0x10]
test rdi, rdi
mov qword [rbp + 0x580], r14
je 0x14004c44d
mov rbx, qword [rbp + 0x5f8]
js 0x14004f2b1
movzx eax, byte [0x1400d68a0]
mov rcx, rdi
call fcn.14000f140
mov r12, rax
test rax, rax
jne 0x14004c45a
jmp 0x14004f298
mov r12d, 1
mov rbx, qword [rbp + 0x5f8]
mov rcx, r12
mov rdx, r13
mov r8, rdi
call fcn.14006aa40
movzx eax, byte [rsi + 0x18]
mov qword [rbp + 0x460], r12
mov qword [rbp + 0x468], rdi
mov qword [rbp + 0x470], rdi
mov byte [rbp + 0x478], al
mov byte [rbp + 0x5df], 0
lea rcx, [rbp + 0x598]
lea rdx, [rbp + 0x4e0]
lea r8, [rbp - 0x10]
lea r9, [rbp + 0x460]
call fcn.140050af0
cmp byte [rbp + 0x5b0], 2
mov rdi, qword [rbp + 0x5d0]
je 0x14004c0e0
cmp qword [rbp + 0x5a0], 0
je 0x14004c0e0
mov r8, qword [rbp + 0x598]
mov rcx, qword [0x1400d6818]
xor edx, edx
call qword [sym.imp.kernel32.dll_HeapFree]
jmp 0x14004c0e0
mov rax, qword [rbp + 0x5a0]
mov rdx, qword [rbp + 0x5a8]
mov rcx, qword [rbp + 0x5b0]
mov byte [rbp + 0x408], 0
test rdx, rdx
je 0x14004c675
mov rax, qword [rax + rcx*8 + 0x3d8]
mov rcx, rdx
dec rcx
je 0x14004c5de
mov r8, rcx
and r8, 7
je 0x14004c54e
mov rcx, r8
nop
movzx r9d, word [rax + 0x3d2]
mov rax, qword [rax + r9*8 + 0x3d8]
dec rcx
jne 0x14004c530
not r8
add r8, rdx
mov rcx, r8
add rdx, 0xfffffffffffffffe
cmp rdx, 7
jb 0x14004c5de
nop dword [rax]
movzx edx, word [rax + 0x3d2]
mov rax, qword [rax + rdx*8 + 0x3d8]
movzx edx, word [rax + 0x3d2]
mov rax, qword [rax + rdx*8 + 0x3d8]
movzx edx, word [rax + 0x3d2]
mov rax, qword [rax + rdx*8 + 0x3d8]
movzx edx, word [rax + 0x3d2]
mov rax, qword [rax + rdx*8 + 0x3d8]
movzx edx, word [rax + 0x3d2]
mov rax, qword [rax + rdx*8 + 0x3d8]
movzx edx, word [rax + 0x3d2]
mov rax, qword [rax + rdx*8 + 0x3d8]
movzx edx, word [rax + 0x3d2]
mov rax, qword [rax + rdx*8 + 0x3d8]
movzx edx, word [rax + 0x3d2]
mov rax, qword [rax + rdx*8 + 0x3d8]
add rcx, 0xfffffffffffffff8
jne 0x14004c560
movzx ecx, word [rax + 0x3d2]
dec rcx
mov qword [rbp + 0x4c0], rax
mov qword [rbp + 0x4c8], 0
mov qword [rbp + 0x4d0], rcx
lea rcx, [rbp - 0x10]
lea rdx, [rbp + 0x4c0]
lea r8, [rbp + 0x408]
call fcn.140052440
mov rax, qword [rbp + 0x40]
mov qword [rbp + 0x4b0], rax
movups xmm0, xmmword [rbp + 0x30]
movaps xmmword [rbp + 0x4a0], xmm0
movdqu xmm0, xmmword [rbp - 0x10]
movups xmm1, xmmword [rbp]
movups xmm2, xmmword [rbp + 0x10]
movups xmm3, xmmword [rbp + 0x20]
movaps xmmword [rbp + 0x490], xmm3
movaps xmmword [rbp + 0x480], xmm2
movaps xmmword [rbp + 0x470], xmm1
movdqa xmmword [rbp + 0x460], xmm0
mov rdx, qword [rbp + 0x48]
mov rax, qword [rbp + 0x58]
movzx ecx, word [rdx + 0x3d2]
cmp rax, rcx
jae 0x14004c6aa
mov rcx, rdx
jmp 0x14004c6d9
mov qword [rbp + 0x460], rax
mov qword [rbp + 0x468], 0
mov qword [rbp + 0x470], rcx
lea rcx, [rbp - 0x10]
lea rdx, [rbp + 0x460]
lea r8, [rbp + 0x408]
call fcn.140052440
jmp 0x14004c7cb
mov r8, qword [rbp + 0x50]
nop
mov rcx, qword [rdx + 0x160]
test rcx, rcx
je 0x14004c6d4
inc r8
movzx eax, word [rdx + 0x3d0]
mov rdx, rcx
cmp ax, word [rcx + 0x3d2]
jae 0x14004c6b0
jmp 0x14004c6d9
mov rax, r8
xor ecx, ecx
imul rdx, rax, 0x38
shl rax, 5
mov r8, qword [rcx + rdx + 0x198]
mov qword [rbp + 0x540], r8
movups xmm0, xmmword [rcx + rdx + 0x168]
movups xmm1, xmmword [rcx + rdx + 0x178]
movups xmm2, xmmword [rcx + rdx + 0x188]
movaps xmmword [rbp + 0x530], xmm2
movaps xmmword [rbp + 0x520], xmm1
movaps xmmword [rbp + 0x510], xmm0
mov r8, qword [rbp + 0x490]
mov qword [rcx + rdx + 0x198], r8
movaps xmm0, xmmword [rbp + 0x460]
movaps xmm1, xmmword [rbp + 0x470]
movaps xmm2, xmmword [rbp + 0x480]
movups xmmword [rcx + rdx + 0x188], xmm2
movups xmmword [rcx + rdx + 0x178], xmm1
movups xmmword [rcx + rdx + 0x168], xmm0
movups xmm0, xmmword [rcx + rax]
movups xmm1, xmmword [rcx + rax + 0x10]
lea rdx, [rbp + 0x548]
movups xmmword [rdx + 0x10], xmm1
movups xmmword [rdx], xmm0
lea rdx, [rbp + 0x498]
movups xmm0, xmmword [rdx]
movups xmm1, xmmword [rdx + 0x10]
movups xmmword [rcx + rax], xmm0
movups xmmword [rcx + rax + 0x10], xmm1
mov rax, qword [rbp + 0x560]
mov qword [rbp + 0x40], rax
movaps xmm0, xmmword [rbp + 0x550]
movaps xmmword [rbp + 0x30], xmm0
movdqa xmm0, xmmword [rbp + 0x510]
movaps xmm1, xmmword [rbp + 0x520]
movaps xmm2, xmmword [rbp + 0x530]
movaps xmm3, xmmword [rbp + 0x540]
movaps xmmword [rbp + 0x20], xmm3
movaps xmmword [rbp + 0x10], xmm2
movaps xmmword [rbp], xmm1
movdqa xmmword [rbp - 0x10], xmm0
mov r14, rbx
mov rax, qword [rbp - 0x10]
mov qword [rbp + 0x5d0], rax
mov rax, qword [rbp - 8]
mov qword [rbp + 0x5e0], rax
mov r8, qword [rbp + 8]
mov rcx, qword [rbp + 0x10]
movzx ebx, byte [rbp + 0x20]
mov rax, qword [rbp + 0x28]
mov qword [rbp + 0x580], rax
dec qword [rbp + 0x4f0]
mov rax, qword [rbp + 0x30]
mov qword [rbp + 0x5c0], rax
movzx eax, byte [rbp + 0x40]
mov byte [rbp + 0x5e8], al
cmp byte [rbp + 0x408], 0
je 0x14004c87a
mov qword [rbp + 0x588], rcx
mov qword [rbp + 0x508], r8
test rdi, rdi
je 0x14004f32f
mov rax, qword [r13 + 0x3d8]
mov qword [rbp + 0x4e0], rax
dec rdi
mov qword [rbp + 0x4e8], rdi
mov qword [rax + 0x160], 0
mov rcx, qword [0x1400d6818]
xor edx, edx
mov r8, r13
call qword [sym.imp.kernel32.dll_HeapFree]
mov r8, qword [rbp + 0x508]
mov rcx, qword [rbp + 0x588]
mov eax, 0
cmp bl, 2
mov rbx, r14
mov rdi, r12
mov r9, rsi
je 0x14004c0e9
test rcx, rcx
je 0x14004c8a8
mov rcx, qword [0x1400d6818]
xor edx, edx
call qword [sym.imp.kernel32.dll_HeapFree]
mov r9, rsi
cmp qword [rbp + 0x5e0], 0
je 0x14004c8cb
mov rcx, qword [0x1400d6818]
xor edx, edx
mov r8, qword [rbp + 0x5d0]
call qword [sym.imp.kernel32.dll_HeapFree]
mov r9, rsi
mov eax, 0
cmp byte [rbp + 0x5e8], 2
je 0x14004c0e9
mov eax, 0
cmp qword [rbp + 0x5c0], 0
je 0x14004c0e9
mov rcx, qword [0x1400d6818]
xor edx, edx
mov r8, qword [rbp + 0x580]
call qword [sym.imp.kernel32.dll_HeapFree]
mov r9, rsi
xor eax, eax
jmp 0x14004c0e9
mov rax, qword [rbp + 0x4f0]
mov qword [rbp + 0x430], rax
movdqu xmm0, xmmword [rbp + 0x4e0]
movdqu xmmword [rbp + 0x420], xmm0
mov qword [rbp + 0x418], 1
movzx eax, byte [0x1400d68a0]
mov ecx, 4
call fcn.14000f140
test rax, rax
je 0x14004f34c
mov dword [rax], 0x48544150
mov rcx, rax
add rcx, 4
mov qword [rbp + 0x510], rax
mov qword [rbp + 0x518], rcx
mov word [rbp + 0x520], 0
lea rcx, [rbp + 0x460]
lea rdx, [rbp + 0x510]
mov qword [rbp + 0x5e0], rax
call fcn.1400508c0
mov r8, qword [rbp + 0x5e0]
mov qword [rbp + 8], r8
mov qword [rbp + 0x10], 4
mov qword [rbp + 0x18], 4
mov byte [rbp + 0x20], 0
movdqu xmm0, xmmword [rbp + 0x460]
movdqa xmmword [rbp - 0x10], xmm0
mov r14, qword [rbp + 0x470]
mov qword [rbp], r14
mov rsi, qword [rbp - 0x10]
mov rbx, qword [rbp + 0x420]
test rbx, rbx
je 0x14004cab0
mov rax, qword [rbp + 0x428]
mov qword [rbp + 0x5f8], rax
mov r13, qword [sym.imp.kernel32.dll_CompareStringOrdinal]
lea rcx, [rbx + 0x168]
movzx eax, word [rbx + 0x3d2]
mov qword [rbp + 0x5e8], rax
imul rdi, rax, 0x38
mov r15, 0xffffffffffffffff
nop word cs:[rax + rax]
test rdi, rdi
je 0x14004ca60
lea r12, [rcx + 0x38]
mov r8, qword [rcx]
mov r9d, dword [rcx + 0x10]
mov dword [rsp + 0x20], 1
mov rcx, rsi
mov edx, r14d
call r13
inc r15
add rdi, 0xffffffffffffffc8
mov rcx, r12
cmp eax, 3
je 0x14004ca20
cmp eax, 1
jne 0x14004ca8c
jmp 0x14004ca67
mov r15, qword [rbp + 0x5e8]
mov rax, qword [rbp + 0x5f8]
sub rax, 1
jb 0x14004cf57
mov qword [rbp + 0x5f8], rax
mov rbx, qword [rbx + r15*8 + 0x3d8]
jmp 0x14004c9f1
cmp eax, 2
jne 0x14004f1e1
test rbx, rbx
mov r14, qword [rbp + 0x590]
je 0x14004cabc
shl r15, 5
mov r12, qword [rbx + r15]
mov rdi, qword [rbx + r15 + 0x10]
jmp 0x14004cabf
xor r12d, r12d
mov r14, qword [rbp + 0x590]
jmp 0x14004cac6
xor r12d, r12d
mov r8, qword [rbp + 0x5e0]
mov rcx, qword [0x1400d6818]
xor edx, edx
call qword [sym.imp.kernel32.dll_HeapFree]
cmp qword [rbp - 8], 0
je 0x14004caee
mov rcx, qword [0x1400d6818]
xor edx, edx
mov r8, rsi
call qword [sym.imp.kernel32.dll_HeapFree]
mov rax, qword [r14 + 0x40]
lea rbx, str.program_path_has_no_file_name
test rax, rax
je 0x14004cb63
mov rdx, qword [r14 + 0x30]
mov qword [rbp + 0x5f8], rax
cmp rax, 4
jae 0x14004cb18
lea rax, [0x140052950]
jmp 0x14004cb40
mov eax, dword [rdx]
bswap eax
xor ecx, ecx
cmp eax, 0x5c5c3f5c
setb cl
cmp eax, 0x5c5c3f5d
adc ecx, 0xffffffff
lea rcx, [0x140052940]
lea rax, [0x140052950]
cmove rax, rcx
mov qword [rbp + 0x5e0], rdx
mov r14, qword [rbp + 0x5f8]
movzx esi, byte [r14 + rdx - 1]
mov byte [rbp + 0x607], 1
mov ecx, esi
call rax
test al, al
je 0x14004cbcb
cmp r14, 3
jbe 0x14004cc38
mov rdx, qword [rbp + 0x5e0]
movzx eax, byte [r14 + rdx - 4]
lea ecx, [rax - 0x41]
cmp cl, 0x1a
setb cl
shl cl, 5
or cl, al
cmp cl, 0x2e
jne 0x14004cc38
movzx eax, byte [rdx + r14 - 3]
lea ecx, [rax - 0x41]
cmp cl, 0x1a
setb cl
shl cl, 5
or cl, al
cmp cl, 0x65
jne 0x14004cc38
movzx eax, byte [rdx + r14 - 2]
lea ecx, [rax - 0x41]
cmp cl, 0x1a
setb cl
shl cl, 5
or cl, al
cmp cl, 0x78
jne 0x14004cc38
lea eax, [rsi - 0x41]
cmp al, 0x1a
setb al
shl al, 5
or al, sil
cmp al, 0x65
sete al
jmp 0x14004cc3a
xor eax, eax
mov rsi, qword [rbp + 0x5e0]
lea r11, [rsi + r14]
xor ecx, ecx
nop word [rax + rax]
cmp r14, rcx
je 0x14004cd16
movzx edx, byte [rsi + rcx]
cmp edx, 0x2f
je 0x14004cc6a
inc rcx
cmp edx, 0x5c
jne 0x14004cc50
test al, al
mov qword [rbp + 0x5c0], r11
je 0x14004cdf3
mov byte [rbp + 0x607], 1
lea rcx, [rbp - 0x10]
mov rdx, rsi
mov r8, r14
call fcn.1400415c0
mov rcx, qword [rbp - 0x10]
mov rax, qword [rbp - 8]
test rcx, rcx
je 0x14004cec2
mov rdx, qword [rbp]
mov qword [rbp - 0x10], rcx
mov qword [rbp - 8], rax
mov qword [rbp], rdx
mov byte [rbp + 0x607], 1
lea rcx, [rbp + 0x4e0]
lea rdx, [rbp - 0x10]
call fcn.140052960
jmp 0x14004ced4
xor r8d, r8d
lea rbx, str.nul_byte_found_in_provided_data
mov rax, rsi
jmp 0x14004cd3c
test r14, r14
js 0x14004f415
movzx eax, byte [0x1400d68a0]
mov rcx, r14
call fcn.14000f140
test rax, rax
je 0x14004f426
mov rdi, rax
mov rcx, rax
mov rdx, rsi
mov r8, r14
call fcn.14006aa40
mov qword [rbp - 0x10], rdi
mov qword [rbp - 8], r14
mov qword [rbp], r14
mov byte [rbp + 8], 0
lea rdx, str..exeprogram_not_found
lea rcx, [rbp - 0x10]
mov r8d, 4
mov qword [rbp + 0x5e8], rdi
call fcn.140046a90
mov r13, qword [rbp + 0x590]
mov rdi, qword [rbp - 0x10]
mov rbx, qword [rbp - 8]
mov rsi, qword [rbp]
mov qword [rbp + 0x3f8], rbx
mov qword [rbp + 0x3f0], rdi
mov byte [rbp + 0x5ce], 1
lea rcx, [rbp + 0x510]
mov rdx, rdi
mov r8, rsi
call fcn.140052a30
cmp qword [rbp + 0x510], 0
je 0x14004cee0
mov rax, qword [rbp + 0x520]
mov qword [rbp + 0x4f0], rax
movdqu xmm0, xmmword [rbp + 0x510]
movdqa xmmword [rbp + 0x4e0], xmm0
test rbx, rbx
jne case.0x140048293.209
jmp 0x14004d92e
mov qword [rbp + 0x4e8], rax
mov qword [rbp + 0x4e0], 0
mov r13, qword [rbp + 0x590]
jmp 0x14004d92e
mov qword [rbp + 0x5e8], rbx
mov qword [rbp + 0x5f8], rdi
mov rcx, rdi
mov rdx, rsi
call fcn.14004b020
test rax, rax
je 0x14004cfb7
cmp rdx, 2
jne 0x14004cf66
movzx ecx, word [rax]
cmp ecx, 0x2e2e
jne 0x14004cf66
mov r8d, 2
xor r9d, r9d
mov r11, qword [rbp + 0x5f8]
jmp 0x14004d899
mov r14, qword [rbp + 0x590]
xor r12d, r12d
jmp 0x14004cabf
mov r8, rdx
mov r11, qword [rbp + 0x5f8]
test r8, r8
je 0x14004cfc3
mov rcx, r8
dec r8
cmp byte [rax + rcx - 1], 0x2e
jne 0x14004cf70
mov r10, rdx
sub r10, rcx
jb 0x14004f470
test r8, r8
je 0x14004d893
mov r9, rax
add r9, rcx
mov rdx, r10
jmp 0x14004d899
mov r11, qword [rbp + 0x5f8]
jmp 0x14004d8b9
mov r9, rax
xor eax, eax
jmp 0x14004d899
xor r9d, r9d
mov r8, rdx
invalid
test rax, rax
cmovne r9, rax
lea rcx, str.called__Option::unwrap____on_a__None__value_rustc_82e1608dfa6e0b5569232559e3d385fea5a93112librarycore_srcio_borrowed_buf.rs_rustc_82e1608dfa6e0b5569232559e3d385fea5a93112library_alloc_srccollections_btree_navigate.rs
lea r8, [0x1400bf178]
mov edx, 0x2b
call fcn.14006bb90
jmp 0x14004f4ce
call qword [sym.imp.kernel32.dll_GetLastError]
shl rax, 0x20
or rax, 2
mov qword [rbp + 0x598], rax
lea rax, [rbp + 0x598]
mov qword [rbp + 0x460], rax
lea rax, [0x140045fa0]
mov qword [rbp + 0x468], rax
lea rax, str.comparing_environment_keys_failed:
mov qword [rbp + 0x510], rax
mov qword [rbp + 0x518], 1
mov qword [rbp + 0x530], 0
lea rax, [rbp + 0x460]
mov qword [rbp + 0x520], rax
mov qword [rbp + 0x528], 1
lea rdx, str.library_std_src_syswindowsprocess.rs
lea rcx, [rbp + 0x510]
call fcn.14006b9d0
jmp 0x14004f4ce
lea rcx, str.called__Option::unwrap____on_a__None__value_rustc_82e1608dfa6e0b5569232559e3d385fea5a93112librarycore_srcio_borrowed_buf.rs_rustc_82e1608dfa6e0b5569232559e3d385fea5a93112library_alloc_srccollections_btree_navigate.rs
lea r8, [0x1400be730]
mov edx, 0x2b
call fcn.14006bb90
jmp 0x14004f4ce
call fcn.14000f1a0
jmp 0x14004f4ce
call fcn.14000f1a0
jmp 0x14004f4ce
mov byte [rbp + 0x5df], 1
mov ecx, 1
mov rdx, rdi
call fcn.14006b610
jmp 0x14004f4ce
mov byte [rbp + 0x5df], 1
call fcn.14000f1a0
jmp 0x14004f4ce
mov ecx, 1
mov rdx, r13
call fcn.14006b610
jmp 0x14004f4ce
mov ecx, 2
mov rdx, r13
call fcn.14006b610
jmp 0x14004f4ce
lea r8, str.library_std_src_syswindowsos.rs
mov ecx, 1
xor edx, edx
call fcn.14006ba10
jmp 0x14004f4ce
lea rax, str.library_std_src_syswindowsos.rs
mov rcx, r8
mov rdx, r15
mov r8, rax
call fcn.14006bb10
jmp 0x14004f4ce
lea r8, str.library_std_src_syswindowsos.rs
mov rcx, r13
mov rdx, r15
call fcn.14006ba10
jmp 0x14004f4ce
lea rcx, str.assertion_failed:_self.height___0
lea r8, [0x1400bee20]
mov edx, 0x21
call fcn.14006bb90
jmp 0x14004f4ce
mov byte [rbp + 0x607], 1
mov ecx, 1
mov edx, 4
call fcn.14006b610
jmp 0x14004f4ce
call qword [sym.imp.kernel32.dll_GetLastError]
shl rax, 0x20
or rax, 2
mov qword [rbp + 0x598], rax
lea rax, [rbp + 0x598]
mov qword [rbp + 0x460], rax
lea rax, [0x140045fa0]
mov qword [rbp + 0x468], rax
lea rax, str.failure_getting_env_string_from_OS:
mov qword [rbp - 0x10], rax
mov qword [rbp - 8], 1
mov qword [rbp + 0x10], 0
lea rax, [rbp + 0x460]
mov qword [rbp], rax
mov qword [rbp + 8], 1
lea rdx, str.library_std_src_syswindowsos.rs
lea rcx, [rbp - 0x10]
call fcn.14006b9d0
jmp 0x14004f4ce
mov byte [rbp + 0x607], 1
call fcn.14000f1a0
jmp 0x14004f4ce
mov byte [rbp + 0x607], 1
mov ecx, 1
mov rdx, r14
call fcn.14006b610
jmp 0x14004f4ce
lea r8, str._rustc_82e1608dfa6e0b5569232559e3d385fea5a93112librarycore_src_sliceiter.rs
call fcn.14006ba10
jmp 0x14004f4ce