Function at 0x14017d120
Capabilities:
Create a process with modified i/o handles and window
Create process on windows
Encode data using base64
Encrypt data using speck
Get common file path
Parse credit card information
Query environment variable

Disassembly:
push rbp
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbx
sub rsp, 0x638
lea rbp, [rsp + 0x80]
movdqa xmmword [rbp + 0x5a0], xmm6
mov rsi, rdx
mov qword [rbp + 0x598], rcx
movzx eax, byte [rdx + 0xa0]
mov rdx, qword [rdx + 0x98]
test rdx, rdx
setne cl
or cl, al
mov qword [rbp + 0x548], r8
mov qword [rbp + 0x4d0], rsi
je 0x14017d371
mov qword [rbp + 0x498], 0
mov qword [rbp + 0x4a8], 0
test al, al
jne 0x14017d3a8
mov qword [rbp + 0x590], rdx
call sub.KERNEL32.dll_GetEnvironmentStringsW
test rax, rax
je 0x14018122a
lea rdi, [rbp + 0x4e0]
mov qword [rbp + 0x588], rax
mov r14, rax
nop dword [rax + rax]
cmp word [r14], 0
je 0x14017d38e
mov r13, r14
mov r12, 0xffffffffffffffff
mov rcx, 0xfffffffffffffffe
nop dword [rax]
mov rax, rcx
cmp word [r13 + r12*2 + 2], 0
lea r12, [r12 + 1]
lea rcx, [rcx + 2]
jne 0x14017d1e0
test r12, r12
je 0x1401810ce
lea r14, [r12*2 + 2]
add r14, r13
lea rcx, [r12 + r12]
cmp rcx, 2
je 0x14017d1c0
xor esi, esi
nop word cs:[rax + rax]
cmp word [r13 + rsi*2 + 2], 0x3d
je 0x14017d240
inc rsi
add rax, 0xfffffffffffffffe
jne 0x14017d220
jmp 0x14017d1c0
lea r8, [rsi + 1]
cmp rsi, r12
jae 0x140181146
mov rcx, rdi
mov rdx, r13
call fcn.140157b80
add rsi, 2
mov r8, r12
sub r8, rsi
jb 0x140181160
lea rdx, [rsi*2]
add rdx, r13
lea rcx, [rbp - 0x30]
call fcn.140157b80
mov rbx, qword [rbp + 0x4e0]
mov rsi, qword [rbp + 0x4e8]
movdqu xmm6, xmmword [rbp + 0x4f0]
mov r13, qword [rbp - 0x30]
mov r12, qword [rbp - 0x28]
lea rax, [rbp - 0x10]
movups xmm0, xmmword [rax - 0x10]
movaps xmmword [rbp + 0x550], xmm0
movabs rax, 0x8000000000000000
cmp rbx, rax
je 0x14017d38e
movq rax, xmm6
add rax, rsi
mov qword [rbp + 0x4e0], rsi
mov qword [rbp + 0x4e8], rax
mov word [rbp + 0x4f0], 0
lea r15, [rbp + 0x440]
mov rcx, r15
mov rdx, rdi
call fcn.1401819a0
mov qword [rbp - 0x30], rbx
mov qword [rbp - 0x28], rsi
movdqu xmmword [rbp - 0x20], xmm6
mov rax, qword [rbp + 0x450]
lea rcx, [rbp - 0x10]
mov qword [rcx + 0x10], rax
movups xmm0, xmmword [rbp + 0x440]
movups xmmword [rcx], xmm0
mov qword [rbp + 0x4e0], r13
mov qword [rbp + 0x4e8], r12
movaps xmm0, xmmword [rbp + 0x550]
lea rax, [rbp + 0x4f0]
movups xmmword [rax], xmm0
mov rcx, r15
lea rdx, [rbp + 0x498]
lea r8, [rbp - 0x30]
mov r9, rdi
call fcn.140181ba0
mov rax, qword [rbp + 0x440]
shl rax, 1
test rax, rax
je 0x14017d1c0
mov rcx, qword [rbp + 0x448]
mov edx, 1
call fcn.14003fe40
jmp 0x14017d1c0
mov r15, r8
mov qword [rbp + 0x3f0], 0
lea rax, [rbp + 0x3f8]
xor r14d, r14d
jmp 0x14017ddd4
mov rcx, qword [rbp + 0x588]
call sub.KERNEL32.dll_FreeEnvironmentStringsW
mov rsi, qword [rbp + 0x4d0]
mov rdx, qword [rbp + 0x590]
mov rax, qword [rsi + 0x88]
mov rcx, qword [rsi + 0x90]
mov qword [rbp + 0x588], rcx
xor r12d, r12d
test rax, rax
setne r12b
cmove rdx, rax
mov qword [rbp + 0x590], rdx
mov qword [rbp + 0x570], 0
xor r13d, r13d
jmp 0x14017d3f2
xor eax, eax
mov r10, qword [rbp + 0x590]
test r10, r10
je 0x14017dbdf
test r12b, 1
je 0x14017d460
test r13, r13
jne 0x14017d460
mov r12d, 1
mov r8, qword [rbp + 0x588]
test r8, r8
je 0x14017d472
mov rdx, r8
and rdx, 7
je 0x14017d477
mov rcx, r8
and rcx, 0xfffffffffffffff8
mov r13, rax
nop word cs:[rax + rax]
mov r13, qword [r13 + 0x3d8]
dec rdx
jne 0x14017d440
cmp r8, 8
jae 0x14017d490
jmp 0x14017d4ce
test r12b, 1
mov rdx, qword [rbp + 0x588]
jne 0x14017d4d2
jmp 0x1401810bd
mov r13, rax
jmp 0x14017d4ce
mov r13, rax
mov rcx, r8
cmp r8, 8
jb 0x14017d4ce
nop word cs:[rax + rax]
mov rax, qword [r13 + 0x3d8]
mov rax, qword [rax + 0x3d8]
mov rax, qword [rax + 0x3d8]
mov rax, qword [rax + 0x3d8]
mov rax, qword [rax + 0x3d8]
mov rax, qword [rax + 0x3d8]
mov rax, qword [rax + 0x3d8]
mov r13, qword [rax + 0x3d8]
add rcx, 0xfffffffffffffff8
jne 0x14017d490
xor edx, edx
xor eax, eax
mov qword [rbp + 0x580], r12
movzx ecx, word [r13 + 0x3d2]
cmp rdx, rcx
jae 0x14017d4f0
mov rcx, rdx
mov r12, r13
jmp 0x14017d519
mov r12, qword [r13 + 0x160]
test r12, r12
je 0x140180b0d
inc rax
movzx ecx, word [r13 + 0x3d0]
mov r13, r12
cmp cx, word [r12 + 0x3d2]
jae 0x14017d4f0
lea rdx, [rcx + 1]
test rax, rax
je 0x14017d5c0
lea r8, [r12 + rdx*8]
add r8, 0x3d8
mov r9, rax
and r9, 7
je 0x14017d690
mov rdx, rax
and rdx, 0xfffffffffffffff8
nop word cs:[rax + rax]
mov r13, qword [r8]
lea r8, [r13 + 0x3d8]
dec r9
jne 0x14017d550
cmp rax, 8
jb 0x14017d5b1
nop word cs:[rax + rax]
mov rax, qword [r8]
mov rax, qword [rax + 0x3d8]
mov rax, qword [rax + 0x3d8]
mov rax, qword [rax + 0x3d8]
mov rax, qword [rax + 0x3d8]
mov rax, qword [rax + 0x3d8]
mov rax, qword [rax + 0x3d8]
mov r13, qword [rax + 0x3d8]
lea r8, [r13 + 0x3d8]
add rdx, 0xfffffffffffffff8
jne 0x14017d570
xor edx, edx
jmp 0x14017d5c3
mov r13, r12
dec r10
imul rax, rcx, 0x38
lea r15, [r12 + rax]
add r15, 0x168
shl rcx, 5
movabs rax, 0x8000000000000000
cmp qword [r12 + rcx], rax
mov qword [rbp + 0x590], r10
mov qword [rbp + 0x588], rdx
jne 0x14017d650
mov rdi, qword [rbp + 0x498]
mov eax, 0
test rdi, rdi
mov r12, qword [rbp + 0x580]
je 0x14017d3f2
mov r9, qword [r15 + 0x28]
mov rax, qword [r15 + 0x30]
mov rsi, qword [rbp + 0x4a0]
mov qword [rsp + 0x20], rax
lea rcx, [rbp + 0x550]
mov rdx, rdi
mov r8, rsi
call fcn.140182cd0
cmp dword [rbp + 0x550], 1
jne 0x14017d810
xor eax, eax
jmp 0x14017d3f2
add r12, rcx
mov rsi, qword [r15 + 0x10]
test rsi, rsi
js 0x1401810f2
mov rbx, qword [r15 + 8]
je 0x14017d6a2
movzx eax, byte [0x1402a6198]
xor ecx, ecx
mov rdx, rsi
call fcn.140188040
test rax, rax
jne 0x14017d6a7
jmp 0x1401810e6
mov rdx, rax
cmp rax, 8
jae 0x14017d570
jmp 0x14017d5b1
mov eax, 1
mov qword [rbp + 0x4b8], rax
mov rcx, rax
mov rdx, rbx
mov r8, rsi
call sub.msvcrt.dll_memcpy
mov rdi, qword [r15 + 0x30]
lea r14, [rdi + rdi]
test rdi, rdi
js 0x140181112
movabs rax, 0x8000000000000000
add rax, 0xfffffffffffffffe
cmp r14, rax
ja 0x140181112
movzx eax, byte [r15 + 0x18]
mov byte [rbp + 0x4c8], al
mov rdx, qword [r15 + 0x28]
test r14, r14
je 0x14017d71f
movzx eax, byte [0x1402a6198]
xor ecx, ecx
mov rbx, rdx
mov rdx, r14
call fcn.140188040
mov rdx, rbx
mov rbx, rax
mov r15, rdi
test rax, rax
jne 0x14017d727
jmp 0x140181106
mov ebx, 2
xor r15d, r15d
mov rcx, rbx
mov r8, r14
call sub.msvcrt.dll_memcpy
mov qword [rbp - 0x30], rsi
mov rax, qword [rbp + 0x4b8]
mov qword [rbp - 0x28], rax
mov qword [rbp - 0x20], rsi
movzx eax, byte [rbp + 0x4c8]
mov byte [rbp - 0x18], al
mov qword [rbp - 0x10], r15
mov qword [rbp - 8], rbx
mov qword [rbp], rdi
mov rsi, qword [r12 + 0x10]
test rsi, rsi
js 0x140181132
mov rdi, qword [r12 + 8]
je 0x14017d78e
movzx eax, byte [0x1402a6198]
xor ecx, ecx
mov rdx, rsi
call fcn.140188040
mov rbx, rax
test rax, rax
jne 0x14017d793
jmp 0x140181126
mov ebx, 1
mov rcx, rbx
mov rdx, rdi
mov r8, rsi
call sub.msvcrt.dll_memcpy
movzx eax, byte [r12 + 0x18]
mov qword [rbp + 0x4e0], rsi
mov qword [rbp + 0x4e8], rbx
mov qword [rbp + 0x4f0], rsi
mov byte [rbp + 0x4f8], al
lea rcx, [rbp + 0x440]
lea rdx, [rbp + 0x498]
lea r8, [rbp - 0x30]
lea r9, [rbp + 0x4e0]
call fcn.140181ba0
mov rax, qword [rbp + 0x440]
shl rax, 1
test rax, rax
mov r12, qword [rbp + 0x580]
je 0x14017d3f0
mov rcx, qword [rbp + 0x448]
mov edx, 1
call fcn.14003fe40
jmp 0x14017d3f0
mov rax, qword [rbp + 0x558]
mov rdx, qword [rbp + 0x560]
mov rcx, qword [rbp + 0x568]
mov byte [rbp + 0x3e0], 0
test rdx, rdx
je 0x14017daa9
mov rax, qword [rax + rcx*8 + 0x3d8]
mov rcx, rdx
dec rcx
je 0x14017d90e
mov r8, rcx
and r8, 7
je 0x14017d87e
mov rcx, r8
nop word cs:[rax + rax]
movzx r9d, word [rax + 0x3d2]
mov rax, qword [rax + r9*8 + 0x3d8]
dec rcx
jne 0x14017d860
not r8
add r8, rdx
mov rcx, r8
add rdx, 0xfffffffffffffffe
cmp rdx, 7
jb 0x14017d90e
nop dword [rax]
movzx edx, word [rax + 0x3d2]
mov rax, qword [rax + rdx*8 + 0x3d8]
movzx edx, word [rax + 0x3d2]
mov rax, qword [rax + rdx*8 + 0x3d8]
movzx edx, word [rax + 0x3d2]
mov rax, qword [rax + rdx*8 + 0x3d8]
movzx edx, word [rax + 0x3d2]
mov rax, qword [rax + rdx*8 + 0x3d8]
movzx edx, word [rax + 0x3d2]
mov rax, qword [rax + rdx*8 + 0x3d8]
movzx edx, word [rax + 0x3d2]
mov rax, qword [rax + rdx*8 + 0x3d8]
movzx edx, word [rax + 0x3d2]
mov rax, qword [rax + rdx*8 + 0x3d8]
movzx edx, word [rax + 0x3d2]
mov rax, qword [rax + rdx*8 + 0x3d8]
add rcx, 0xfffffffffffffff8
jne 0x14017d890
movzx ecx, word [rax + 0x3d2]
dec rcx
mov qword [rbp + 0x420], rax
mov qword [rbp + 0x428], 0
mov qword [rbp + 0x430], rcx
lea rcx, [rbp - 0x30]
lea rdx, [rbp + 0x420]
lea r8, [rbp + 0x3e0]
call fcn.140182e30
mov rax, qword [rbp + 0x20]
mov qword [rbp + 0x490], rax
movups xmm0, xmmword [rbp + 0x10]
movaps xmmword [rbp + 0x480], xmm0
movups xmm0, xmmword [rbp - 0x30]
movups xmm1, xmmword [rbp - 0x20]
movups xmm2, xmmword [rbp - 0x10]
movups xmm3, xmmword [rbp]
movaps xmmword [rbp + 0x470], xmm3
movaps xmmword [rbp + 0x460], xmm2
movaps xmmword [rbp + 0x450], xmm1
movaps xmmword [rbp + 0x440], xmm0
mov rax, qword [rbp + 0x28]
mov rcx, qword [rbp + 0x38]
movzx edx, word [rax + 0x3d2]
cmp rcx, rdx
jb 0x14017d9b7
nop
movzx ecx, word [rax + 0x3d0]
mov rax, qword [rax + 0x160]
cmp cx, word [rax + 0x3d2]
jae 0x14017d9a0
imul rdx, rcx, 0x38
shl rcx, 5
mov r8, qword [rax + rdx + 0x198]
mov qword [rbp + 0x510], r8
movups xmm0, xmmword [rax + rdx + 0x168]
movups xmm1, xmmword [rax + rdx + 0x178]
movups xmm2, xmmword [rax + rdx + 0x188]
movaps xmmword [rbp + 0x500], xmm2
movaps xmmword [rbp + 0x4f0], xmm1
movaps xmmword [rbp + 0x4e0], xmm0
mov r8, qword [rbp + 0x470]
mov qword [rax + rdx + 0x198], r8
movaps xmm0, xmmword [rbp + 0x440]
movaps xmm1, xmmword [rbp + 0x450]
movaps xmm2, xmmword [rbp + 0x460]
movups xmmword [rax + rdx + 0x188], xmm2
movups xmmword [rax + rdx + 0x178], xmm1
movups xmmword [rax + rdx + 0x168], xmm0
movups xmm0, xmmword [rax + rcx]
movups xmm1, xmmword [rax + rcx + 0x10]
lea rdx, [rbp + 0x518]
movups xmmword [rdx + 0x10], xmm1
movups xmmword [rdx], xmm0
lea rdx, [rbp + 0x478]
movups xmm0, xmmword [rdx]
movups xmm1, xmmword [rdx + 0x10]
movups xmmword [rax + rcx], xmm0
movups xmmword [rax + rcx + 0x10], xmm1
movaps xmm0, xmmword [rbp + 0x4e0]
movaps xmm1, xmmword [rbp + 0x4f0]
movaps xmm2, xmmword [rbp + 0x500]
movaps xmm3, xmmword [rbp + 0x510]
movaps xmmword [rbp - 0x30], xmm0
movaps xmmword [rbp - 0x20], xmm1
movaps xmmword [rbp - 0x10], xmm2
movaps xmmword [rbp], xmm3
movaps xmm0, xmmword [rbp + 0x520]
movaps xmmword [rbp + 0x10], xmm0
mov rax, qword [rbp + 0x530]
mov qword [rbp + 0x20], rax
jmp 0x14017dad9
mov qword [rbp + 0x4e0], rax
mov qword [rbp + 0x4e8], 0
mov qword [rbp + 0x4f0], rcx
lea rcx, [rbp - 0x30]
lea rdx, [rbp + 0x4e0]
lea r8, [rbp + 0x3e0]
call fcn.140182e30
mov rax, qword [rbp + 0x20]
mov qword [rbp + 0x530], rax
movaps xmm0, xmmword [rbp + 0x10]
movaps xmmword [rbp + 0x520], xmm0
movaps xmm0, xmmword [rbp - 0x30]
movaps xmm1, xmmword [rbp - 0x20]
movaps xmm2, xmmword [rbp - 0x10]
movaps xmm3, xmmword [rbp]
movaps xmmword [rbp + 0x510], xmm3
movaps xmmword [rbp + 0x500], xmm2
dec qword [rbp + 0x4a8]
movaps xmmword [rbp + 0x4f0], xmm1
movaps xmmword [rbp + 0x4e0], xmm0
cmp byte [rbp + 0x3e0], 0
je 0x14017db64
test rsi, rsi
je 0x140181194
mov rax, qword [rdi + 0x3d8]
mov qword [rbp + 0x498], rax
dec rsi
mov qword [rbp + 0x4a0], rsi
mov qword [rax + 0x160], 0
mov edx, 8
mov rcx, rdi
call fcn.14003fe40
mov rax, qword [rbp + 0x4e0]
mov rcx, qword [rbp + 0x4e8]
mov r14, qword [rbp + 0x500]
mov rdi, qword [rbp + 0x508]
mov rbx, qword [rbp + 0x518]
mov rsi, qword [rbp + 0x520]
neg rax
mov eax, 0
jo 0x14017d3f2
jae 0x14017dba8
mov edx, 1
call fcn.14003fe40
test r14, r14
je 0x14017dbba
mov edx, 2
mov rcx, rdi
call fcn.14003fe40
shl rbx, 1
mov eax, 0
test rbx, rbx
je 0x14017d3f2
mov edx, 1
mov rcx, rsi
call fcn.14003fe40
xor eax, eax
jmp 0x14017d3f2
mov rax, qword [rbp + 0x4a8]
mov qword [rbp + 0x408], rax
movups xmm0, xmmword [rbp + 0x498]
movups xmmword [rbp + 0x3f8], xmm0
mov qword [rbp + 0x3f0], 1
movzx eax, byte [0x1402a6198]
mov edx, 4
xor ecx, ecx
call fcn.140188040
test rax, rax
je 0x1401811b1
mov r14, rax
mov dword [rax], 0x48544150
add rax, 4
mov qword [rbp + 0x4e0], r14
mov qword [rbp + 0x4e8], rax
mov word [rbp + 0x4f0], 0
lea rcx, [rbp + 0x440]
lea rdx, [rbp + 0x4e0]
call fcn.1401819a0
mov qword [rbp - 0x30], 4
mov qword [rbp - 0x28], r14
mov qword [rbp - 0x20], 4
mov qword [rbp - 0x18], 0
movups xmm0, xmmword [rbp + 0x440]
movups xmmword [rbp - 0x10], xmm0
mov rax, qword [rbp + 0x450]
mov qword [rbp], rax
mov r12, qword [rbp + 0x3f8]
mov rbx, qword [rbp - 8]
test r12, r12
mov rsi, qword [rbp + 0x4d0]
je 0x14017dd93
mov qword [rbp + 0x580], r14
mov r15d, dword [rbp]
mov r13, qword [rbp + 0x400]
mov qword [rbp + 0x590], 0
lea rcx, [r12 + 0x168]
movzx eax, word [r12 + 0x3d2]
mov qword [rbp + 0x588], rax
imul rsi, rax, 0x38
mov r14, 0xffffffffffffffff
nop word cs:[rax + rax]
test rsi, rsi
je 0x14017dd40
lea rdi, [rcx + 0x38]
mov r8, qword [rcx + 0x28]
mov r9d, dword [rcx + 0x30]
mov dword [rsp + 0x20], 1
mov rcx, rbx
mov edx, r15d
call sub.KERNEL32.dll_CompareStringOrdinal
add rsi, 0xffffffffffffffc8
inc r14
mov rcx, rdi
cmp eax, 3
je 0x14017dcf0
cmp eax, 1
mov rsi, qword [rbp + 0x4d0]
jne 0x14017dd65
jmp 0x14017dd4e
mov r14, qword [rbp + 0x588]
mov rsi, qword [rbp + 0x4d0]
sub r13, 1
jb 0x14017e236
mov r12, qword [r12 + r14*8 + 0x3d8]
jmp 0x14017dcc3
cmp eax, 2
jne 0x140181038
shl r14, 5
mov rax, qword [r12 + r14 + 8]
mov qword [rbp + 0x590], rax
mov rdi, qword [r12 + r14 + 0x10]
mov r15, qword [rbp + 0x548]
mov r14, qword [rbp + 0x580]
jmp 0x14017dda5
mov qword [rbp + 0x590], 0
mov r15, qword [rbp + 0x548]
mov edx, 1
mov rcx, r14
call fcn.14003fe40
cmp qword [rbp - 0x10], 0
je 0x14017ddc6
mov edx, 2
mov rcx, rbx
call fcn.14003fe40
lea rax, [rbp + 0x3f8]
mov r14, qword [rbp + 0x590]
mov r13, qword [rsi + 0x10]
lea rbx, str.program_path_has_no_file_name
test r13, r13
je 0x14017e0f1
mov qword [rbp + 0x4b8], rax
mov r12, qword [rsi + 8]
cmp r13, 4
jae 0x14017de02
lea rax, [0x140183810]
jmp 0x14017de2c
mov eax, dword [r12]
bswap eax
xor ecx, ecx
cmp eax, 0x5c5c3f5c
setb cl
cmp eax, 0x5c5c3f5d
adc ecx, 0xffffffff
lea rcx, [0x140183800]
lea rax, [0x140183810]
cmove rax, rcx
movzx esi, byte [r13 + r12 - 1]
mov ecx, esi
call rax
test al, al
jne 0x14017e0f1
lea rbx, [r12 + r13]
cmp r13, 3
mov qword [rbp + 0x570], rbx
mov qword [rbp + 0x590], r13
jbe 0x14017deb0
movzx eax, byte [rbx - 4]
lea ecx, [rax - 0x41]
cmp cl, 0x1a
setb cl
shl cl, 5
or cl, al
cmp cl, 0x2e
jne 0x14017dedd
movzx eax, byte [rbx - 3]
lea ecx, [rax - 0x41]
cmp cl, 0x1a
setb cl
shl cl, 5
or cl, al
cmp cl, 0x65
jne 0x14017dedd
movzx eax, byte [rbx - 2]
lea ecx, [rax - 0x41]
cmp cl, 0x1a
setb cl
shl cl, 5
or cl, al
cmp cl, 0x78
jne 0x14017dedd
lea eax, [rsi - 0x41]
cmp al, 0x1a
setb al
shl al, 5
or al, sil
cmp al, 0x65
sete al
jmp 0x14017dedf
xor eax, eax
nop word cs:[rax + rax]
cmp r13, rax
je 0x14017e015
movzx ecx, byte [r12 + rax]
cmp ecx, 0x2f
je 0x14017df4c
inc rax
cmp ecx, 0x5c
jne 0x14017dec0
jmp 0x14017df4c
xor eax, eax
xor ecx, ecx
nop word cs:[rax + rax]
cmp r13, rcx
je 0x14017e015
movzx edx, byte [r12 + rcx]
cmp edx, 0x2f
je 0x14017df0b
inc rcx
cmp edx, 0x5c
jne 0x14017def0
test al, al
je 0x14017df4c
lea rcx, [rbp - 0x30]
mov rdx, r12
mov r8, r13
call fcn.1401761a0
mov rcx, qword [rbp - 0x30]
mov rax, qword [rbp - 0x28]
movabs rdx, 0x8000000000000000
cmp rcx, rdx
jne 0x14017e211
mov qword [rbp + 0x428], rax
mov qword [rbp + 0x420], rdx
jmp 0x14017e775
test r13, r13
js 0x14018129a
movzx eax, byte [0x1402a6198]
xor ecx, ecx
mov rdx, r13
call fcn.140188040
test rax, rax
je 0x1401811bd
mov rsi, rax
mov rcx, rax
mov rdx, r12
mov r8, r13
call sub.msvcrt.dll_memcpy
mov qword [rbp - 0x30], r13
mov qword [rbp - 0x28], rsi
mov qword [rbp - 0x20], r13
mov qword [rbp - 0x18], 0
lea rdx, str..exeprogram_not_found
lea rcx, [rbp - 0x30]
mov r8d, 4
call fcn.140178e50
mov rbx, qword [rbp - 0x30]
mov rsi, qword [rbp - 0x28]
mov rdi, qword [rbp - 0x20]
lea rcx, [rbp + 0x4e0]
mov rdx, rsi
mov r8, rdi
call fcn.140183920
movabs rax, 0x8000000000000000
cmp qword [rbp + 0x4e0], rax
jne 0x14017e194
mov rcx, rsi
mov rdx, rdi
call fcn.14017c780
test rax, rax
je 0x14017e70d
cmp rdx, 2
jne 0x14017e1b5
cmp word [rax], 0x2e2e
jne 0x14017e1b5
mov r8d, 2
xor ecx, ecx
jmp 0x14017e6c0
xor r8d, r8d
lea r11, str.nul_byte_found_in_provided_data
mov rax, r12
jmp 0x14017e03c
xor r8d, r8d
test cx, cx
je 0x14017e0ee
mov cx, 1
test r8w, r8w
jne 0x14017e030
cmp rax, rbx
je 0x14017e1ea
movzx edx, byte [rax]
test dl, dl
js 0x14017e05b
inc rax
jmp 0x14017e0ba
mov r8d, edx
and r8d, 0x1f
movzx r10d, byte [rax + 1]
and r10d, 0x3f
cmp dl, 0xdf
jbe 0x14017e0ac
movzx r9d, byte [rax + 2]
shl r10d, 6
and r9d, 0x3f
or r9d, r10d
cmp dl, 0xf0
jb 0x14017e0c4
movzx edx, byte [rax + 3]
add rax, 4
and r8d, 7
shl r8d, 0x12
shl r9d, 6
and edx, 0x3f
or edx, r9d
or edx, r8d
cmp edx, 0xffff
jbe 0x14017e0ba
jmp 0x14017e0da
add rax, 2
shl r8d, 6
or r8d, r10d
mov edx, r8d
xor r8d, r8d
mov ecx, edx
jmp 0x14017e033
add rax, 3
shl r8d, 0xc
or r9d, r8d
mov edx, r9d
cmp edx, 0xffff
jbe 0x14017e0ba
and edx, 0x3ff
or edx, 0xdc00
mov r8d, edx
jmp 0x14017e033
mov rbx, r11
mov rsi, rbx
mov rax, qword [rbp + 0x598]
mov qword [rax], rsi
mov qword [rax + 0x10], 2
cmp qword [rbp + 0x3f0], 0
je 0x14017e16a
mov rcx, qword [rbp + 0x3f8]
test rcx, rcx
je 0x14017e151
mov rdx, qword [rbp + 0x400]
mov rax, qword [rbp + 0x408]
mov qword [rbp - 0x28], 0
mov qword [rbp - 0x20], rcx
mov qword [rbp - 0x18], rdx
mov qword [rbp - 8], 0
mov qword [rbp], rcx
mov qword [rbp + 8], rdx
mov ecx, 1
jmp 0x14017e155
xor ecx, ecx
xor eax, eax
mov qword [rbp - 0x30], rcx
mov qword [rbp - 0x10], rcx
mov qword [rbp + 0x10], rax
lea rcx, [rbp - 0x30]
call fcn.140183ee0
cmp dword [r15], 4
jb 0x14017e179
mov rcx, qword [r15 + 8]
call sub.KERNEL32.dll_CloseHandle
movaps xmm6, xmmword [rbp + 0x5a0]
add rsp, 0x638
pop rbx
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
pop rbp
ret
mov rax, qword [rbp + 0x4f0]
mov qword [rbp + 0x430], rax
movups xmm0, xmmword [rbp + 0x4e0]
movaps xmmword [rbp + 0x420], xmm0
jmp 0x14017e763
mov r8, rdx
nop dword [rax + rax]
test r8, r8
je 0x14017e23b
mov r9, r8
dec r8
cmp byte [rax + r9 - 1], 0x2e
jne 0x14017e1c0
test r8, r8
je 0x14017e6bb
sub rdx, r9
mov rcx, rax
add rcx, r9
jmp 0x14017e6c0
cmp r13, 0xf
ja 0x14017e248
mov qword [rbp + 0x578], 0
xor eax, eax
nop dword [rax]
cmp byte [r12 + rax], 0x2e
je 0x14017e257
inc rax
cmp r13, rax
jne 0x14017e200
jmp 0x14017e263
mov rdx, qword [rbp - 0x20]
mov qword [rbp - 0x30], rcx
mov qword [rbp - 0x28], rax
mov qword [rbp - 0x20], rdx
lea rcx, [rbp + 0x420]
lea rdx, [rbp - 0x30]
call fcn.140183830
jmp 0x14017e775
jmp 0x14017dd83
mov rcx, rax
mov r8, rdx
xor eax, eax
jmp 0x14017e6c0
mov cl, 0x2e
mov rdx, r12
mov r8, r13
call fcn.14006e5f0
jmp 0x14017e25c
mov eax, 1
mov qword [rbp + 0x578], rax
test r14, r14
mov qword [rbp + 0x580], r12
je 0x14017e5e4
add rdi, r14
mov qword [rbp + 0x440], r14
mov qword [rbp + 0x448], rdi
mov word [rbp + 0x450], 0
mov byte [rbp + 0x458], 1
lea rcx, [rbp + 0x4e0]
lea rdx, [rbp + 0x440]
call fcn.1401789b0
mov rax, qword [rbp + 0x4e0]
movabs rcx, 0x8000000000000000
cmp rax, rcx
je 0x14017e5dd
movzx r8d, byte [rbp + 0x458]
movzx edi, word [rbp + 0x450]
mov r13, qword [rbp + 0x440]
mov rbx, qword [rbp + 0x448]
jmp 0x14017e330
movabs rax, 0x8000000000000000
mov qword [rbp + 0x4e0], rax
cmp qword [rbp + 0x550], 0
je 0x14017e30c
mov rcx, qword [rbp + 0x558]
mov edx, 2
call fcn.14003fe40
mov rax, qword [rbp + 0x4e0]
mov r8d, r12d
movabs rcx, 0x8000000000000000
cmp rax, rcx
mov r12, qword [rbp + 0x580]
je 0x14017e5dd
mov rcx, qword [rbp + 0x4e8]
mov rdx, qword [rbp + 0x4f0]
test rdx, rdx
jne 0x14017e52e
mov byte [rbp + 0x588], r8b
test rax, rax
je 0x14017e35d
mov edx, 1
call fcn.14003fe40
mov qword [rbp + 0x550], 0
mov qword [rbp + 0x558], 2
mov eax, 2
xor r14d, r14d
mov esi, edi
xor r15d, r15d
jmp 0x14017e398
mov word [rax + r14*2], r12w
inc r14
mov qword [rbp + 0x560], r14
nop
mov r12d, esi
test si, si
je 0x14017e3b0
xor edi, edi
jmp 0x14017e430
cmp r13, rbx
je 0x14017e4d0
movzx r12d, byte [r13]
test r12b, r12b
js 0x14017e3c8
inc r13
jmp 0x14017e430
mov ecx, r12d
and ecx, 0x1f
movzx r8d, byte [r13 + 1]
and r8d, 0x3f
cmp r12b, 0xdf
jbe 0x14017e419
movzx edx, byte [r13 + 2]
shl r8d, 6
and edx, 0x3f
or edx, r8d
cmp r12b, 0xf0
jb 0x14017e442
movzx r12d, byte [r13 + 3]
add r13, 4
and ecx, 7
shl ecx, 0x12
shl edx, 6
and r12d, 0x3f
or r12d, edx
or r12d, ecx
cmp r12d, 0xffff
jbe 0x14017e430
jmp 0x14017e457
add r13, 2
shl ecx, 6
or ecx, r8d
mov r12d, ecx
nop word cs:[rax + rax]
xor esi, esi
cmp r12w, 0x22
jne 0x14017e490
xor r15b, 1
jmp 0x14017e3a0
add r13, 3
shl ecx, 0xc
or edx, ecx
mov r12d, edx
cmp r12d, 0xffff
jbe 0x14017e430
lea ecx, [r12 + 0xff0000]
shr ecx, 0xa
or ecx, 0xd800
and r12d, 0x3ff
or r12d, 0xdc00
mov edi, r12d
mov esi, r12d
mov r12d, ecx
cmp r12w, 0x22
je 0x14017e439
nop word cs:[rax + rax]
movzx ecx, r12w
cmp ecx, 0x3b
jne 0x14017e4aa
mov r12b, 1
test r15b, 1
je 0x14017e4d3
mov r12w, 0x3b
mov r15b, 1
cmp r14, qword [rbp + 0x550]
jne 0x14017e390
lea rcx, [rbp + 0x550]
call fcn.1401769d0
mov rax, qword [rbp + 0x558]
jmp 0x14017e390
xor r12d, r12d
test r14, r14
setne al
movzx ecx, byte [rbp + 0x588]
or cl, al
test cl, 1
mov r15, qword [rbp + 0x548]
je 0x14017e2e0
mov rdx, qword [rbp + 0x558]
lea rcx, [rbp - 0x30]
mov r8, r14
call fcn.140157b80
movups xmm0, xmmword [rbp - 0x30]
movups xmm1, xmmword [rbp - 0x20]
movaps xmmword [rbp + 0x4f0], xmm1
movaps xmmword [rbp + 0x4e0], xmm0
cmp qword [rbp + 0x550], 0
jne 0x14017e2fb
jmp 0x14017e30c
mov byte [rbp + 0x458], r8b
mov word [rbp + 0x450], di
mov qword [rbp + 0x440], r13
mov r8, qword [rbp + 0x4f8]
mov qword [rbp - 0x30], rax
mov qword [rbp - 0x28], rcx
mov qword [rbp - 0x20], rdx
mov qword [rbp - 0x18], r8
lea rcx, [rbp - 0x30]
mov rdx, r12
mov r8, qword [rbp + 0x590]
call fcn.140179360
cmp qword [rbp + 0x578], 1
je 0x14017e580
lea rcx, [rbp - 0x30]
call fcn.14017c890
mov r14, qword [rbp - 0x28]
mov r8, qword [rbp - 0x20]
lea rcx, [rbp + 0x4e0]
mov rdx, r14
call fcn.140183920
cmp qword [rbp - 0x30], 0
je 0x14017e5ab
mov edx, 1
mov rcx, r14
call fcn.14003fe40
mov rcx, qword [rbp + 0x4e0]
movabs rax, 0x8000000000000000
cmp rcx, rax
jne 0x140180ae2
lea rcx, [rbp + 0x4e0]
lea rdx, [rbp + 0x440]
call fcn.1401789b0
jmp 0x14017e2a7
mov r13, qword [rbp + 0x590]
lea rcx, [rbp + 0x4e0]
call fcn.140178c00
mov rbx, qword [rbp + 0x4e0]
movabs rax, 0x8000000000000000
cmp rbx, rax
jne 0x14017e659
mov rax, qword [rbp + 0x4e8]
mov ecx, eax
and ecx, 3
cmp ecx, 1
jne 0x14017f5c5
lea rsi, [rax - 1]
mov rdi, qword [rax - 1]
mov rbx, qword [rax + 7]
mov rax, qword [rbx]
test rax, rax
je 0x14017e634
mov rcx, rdi
call rax
cmp qword [rbx + 8], 0
je 0x14017e647
mov rdx, qword [rbx + 0x10]
mov rcx, rdi
call fcn.14003fe40
mov edx, 8
mov rcx, rsi
call fcn.14003fe40
jmp 0x14017f5c5
mov rsi, qword [rbp + 0x4e8]
mov rdi, qword [rbp + 0x4f0]
mov r14, qword [rbp + 0x4f8]
mov rcx, rsi
mov rdx, rdi
call case.0x140170e4b.247
test rax, rax
je 0x14017f54e
test rdx, rdx
je 0x14017f54b
cmp rdi, rdx
jbe 0x14017f540
cmp byte [rsi + rdx], 0xbf
jg 0x14017f546
lea rcx, [0x14027ee62]
lea r8, str.std_src_sys_commonwtf8.rsassertion_failed:_is_code_point_boundary_self__new_len_
mov edx, 0x37
call fcn.140069290
jmp 0x140181309
xor ecx, ecx
mov r8, rdx
test rax, rax
cmovne rcx, rax
test rcx, rcx
je 0x14017e70d
test rax, rax
cmove r8, rdx
add rcx, r8
sub rcx, rsi
je 0x14017e70a
cmp rdi, rcx
jbe 0x14017e703
cmp byte [rsi + rcx], 0xbf
jg 0x14017e705
lea rcx, [0x14027ee62]
lea r8, str.std_src_sys_commonwtf8.rsassertion_failed:_is_code_point_boundary_self__new_len_
mov edx, 0x37
call fcn.140069290
jmp 0x140181309
jne 0x14017e6e6
cmp rdi, rcx
jb 0x14017e70d
mov rdi, rcx
lea rcx, [rbp - 0x30]
mov rdx, rsi
mov r8, rdi
call fcn.1401761a0
mov rcx, qword [rbp - 0x30]
mov rax, qword [rbp - 0x28]
movabs rdx, 0x8000000000000000
cmp rcx, rdx
jne 0x14017e743
mov qword [rbp + 0x428], rax
mov qword [rbp + 0x420], rdx
jmp 0x14017e763
mov rdx, qword [rbp - 0x20]
mov qword [rbp - 0x30], rcx
mov qword [rbp - 0x28], rax
mov qword [rbp - 0x20], rdx
lea rcx, [rbp + 0x420]
lea rdx, [rbp - 0x30]
call fcn.140183830
test rbx, rbx
je 0x14017e775
mov edx, 1
mov rcx, rsi
call fcn.14003fe40
mov rcx, qword [rbp + 0x420]
mov rsi, qword [rbp + 0x428]
movabs rax, 0x8000000000000000
mov qword [rbp + 0x4c8], rcx
cmp rcx, rax
je 0x14017e0f4
mov rbx, qword [rbp + 0x430]
cmp rbx, 4
mov qword [rbp + 0x590], rsi
mov qword [rbp + 0x578], rbx
jb 0x14017e7db
movabs rax, 0x5c003f003f005c
lea rcx, [rax + 0x1d0000]
cmp rcx, qword [rsi]
je 0x14017e94c
cmp rax, qword [rsi]
je 0x14017e94c
mov qword [rbp + 0x580], r12
mov qword [rbp + 0x4e0], 0
mov qword [rbp + 0x4e8], 2
mov qword [rbp + 0x4f0], 0
mov r8d, 0x200
mov eax, 2
mov qword [rbp + 0x588], rax
xor r15d, r15d
xor esi, esi
xor edi, edi
cmp r8, 0x201
jb 0x14017e83f
jmp 0x14017e850
jae 0x14017e924
cmp r8, 0x201
jae 0x14017e850
mov r12d, 0x200
lea rbx, [rbp - 0x30]
mov r13, r8
jmp 0x14017e8b6
sub r8, rdi
sub rsi, rdi
cmp rsi, r8
jae 0x14017e88e
mov qword [rsp + 0x20], 2
mov r9d, 2
lea rcx, [rbp + 0x4e0]
mov rdx, rdi
call fcn.140159080
mov r15, qword [rbp + 0x4e0]
mov rax, qword [rbp + 0x4e8]
mov qword [rbp + 0x588], rax
mov eax, 0xffffffff
cmp r15, rax
mov edi, 0xffffffff
cmovb rdi, r15
mov qword [rbp + 0x4f0], rdi
mov rsi, r15
mov r12, rdi
mov rbx, qword [rbp + 0x588]
mov r13, rdi
xor ecx, ecx
call sub.KERNEL32.dll_SetLastError
mov rcx, qword [rbp + 0x590]
mov edx, r13d
mov r8, rbx
xor r9d, r9d
call sub.KERNEL32.dll_GetFullPathNameW
mov r14d, eax
test eax, eax
jne 0x14017e8e6
call sub.KERNEL32.dll_GetLastError
test eax, eax
jne 0x14017eb2b
mov r8d, r14d
cmp r13, r8
jne 0x14017e830
call sub.KERNEL32.dll_GetLastError
cmp eax, 0x7a
jne 0x140181177
add r13, r13
mov eax, 0xffffffff
cmp r13, rax
cmovae r13, rax
mov r8, r13
cmp r8, 0x201
jae 0x14017e850
jmp 0x14017e83f
cmp r12, r8
jb 0x1401812a1
cmp r14d, 4
mov r15, qword [rbp + 0x548]
jae 0x14017eba6
xor esi, esi
mov r12, qword [rbp + 0x580]
jmp case.0x14017ebd4.68
cmp rbx, 4
je case.0x14017e98b.68
mov rax, qword [rbp + 0x590]
cmp word [rax + rbx*2 - 0xa], 0x2e
jne case.0x14017e98b.68
mov rax, qword [rbp + 0x590]
movzx eax, word [rax + rbx*2 - 8]
lea ecx, [rax - 0x42]
cmp ecx, 0x21
ja case.0x14017e98b.68
lea rdx, [0x1401a8418]
movsxd rcx, dword [rdx + rcx*4]
add rcx, rdx
jmp rcx
mov rcx, qword [rbp + 0x590]
movzx ecx, word [rcx + rbx*2 - 6]
or ecx, 0x20
cmp ecx, 0x61
jne 0x14017e9b9
mov rcx, qword [rbp + 0x590]
movzx ecx, word [rcx + rbx*2 - 4]
or ecx, 0x20
cmp ecx, 0x74
je 0x14017ec43
cmp ax, 0x43
jne case.0x14017e98b.68
mov rax, qword [rbp + 0x590]
movzx eax, word [rax + rbx*2 - 6]
or eax, 0x20
cmp eax, 0x6d
jne case.0x14017e98b.68
mov rax, qword [rbp + 0x590]
movzx eax, word [rax + rbx*2 - 4]
add eax, 0xffffffbc
test eax, 0xffdf
je 0x14017ec43
mov rax, qword [rbp + 0x4d0]
mov rsi, qword [rax + 0x28]
mov rdi, qword [rax + 0x30]
movzx ebx, byte [rax + 0xc9]
mov qword [rbp + 0x4e0], 0
mov qword [rbp + 0x4e8], 2
mov qword [rbp + 0x4f0], 0
lea rcx, [rbp + 0x4e0]
call fcn.1401769d0
mov rax, qword [rbp + 0x4e8]
mov word [rax], 0x22
mov qword [rbp + 0x4f0], 1
mov qword [rbp - 0x30], r12
mov rax, qword [rbp + 0x570]
mov qword [rbp - 0x28], rax
mov word [rbp - 0x20], 0
lea rcx, [rbp + 0x4e0]
lea rdx, [rbp - 0x30]
call fcn.140176a90
mov r14, qword [rbp + 0x4f0]
cmp r14, qword [rbp + 0x4e0]
jne 0x14017ea88
lea rcx, [rbp + 0x4e0]
call fcn.1401769d0
mov rax, qword [rbp + 0x4e8]
mov word [rax + r14*2], 0x22
inc r14
mov qword [rbp + 0x4f0], r14
shl rdi, 3
lea r14, [rdi + rdi*4]
lea rdi, [rbp + 0x4e0]
nop
test r14, r14
je 0x14017eb76
mov r15, qword [rbp + 0x4f0]
cmp r15, qword [rbp + 0x4e0]
jne 0x14017ead1
mov rcx, rdi
call fcn.1401769d0
mov rax, qword [rbp + 0x4e8]
mov word [rax + r15*2], 0x20
inc r15
mov qword [rbp + 0x4f0], r15
mov rcx, rdi
mov rdx, rsi
mov r8d, ebx
call fcn.140183a40
mov r13, rax
add rsi, 0x28
add r14, 0xffffffffffffffd8
test rax, rax
mov r15, qword [rbp + 0x548]
je 0x14017eab0
cmp qword [rbp + 0x4e0], 0
je 0x14017eb97
mov rcx, qword [rbp + 0x4e8]
mov edx, 2
call fcn.14003fe40
jmp 0x14017eb97
call sub.KERNEL32.dll_GetLastError
mov esi, eax
shl rsi, 0x20
or rsi, 2
cmp qword [rbp + 0x4e0], 0
je 0x14017eb55
mov rcx, qword [rbp + 0x4e8]
mov edx, 2
call fcn.14003fe40
mov rax, qword [rbp + 0x598]
mov qword [rax], rsi
mov qword [rax + 0x10], 2
mov sil, 1
mov r15, qword [rbp + 0x548]
jmp 0x14017f1cb
mov rax, qword [rbp + 0x4e0]
mov r13, qword [rbp + 0x4e8]
movabs rcx, 0x8000000000000000
cmp rax, rcx
jne 0x14017edda
mov rax, qword [rbp + 0x598]
mov qword [rax], r13
jmp 0x14017f1c0
cmp word [rbx + r8*2 - 8], 0x2e
mov r12, qword [rbp + 0x580]
jne 0x14017ec1d
movzx eax, word [rbx + r8*2 - 6]
xor esi, esi
lea ecx, [rax - 0x42]
cmp ecx, 0x21
ja case.0x14017ebd4.68
lea rdx, [0x1401a8390]
movsxd rcx, dword [rdx + rcx*4]
add rcx, rdx
jmp rcx
movzx ecx, word [rbx + r8*2 - 4]
or ecx, 0x20
cmp ecx, 0x61
jne 0x14017ebf5
movzx ecx, word [rbx + r8*2 - 2]
mov sil, 1
or ecx, 0x20
cmp ecx, 0x74
je case.0x14017ebd4.68
cmp ax, 0x43
jne 0x14017ec1d
movzx eax, word [rbx + r8*2 - 4]
or eax, 0x20
cmp eax, 0x6d
jne 0x14017ec1d
movzx eax, word [rbx + r8*2 - 2]
add eax, 0xffffffbc
test eax, 0xffdf
sete sil
jmp case.0x14017ebd4.68
xor esi, esi
cmp qword [rbp + 0x4e0], 0
je 0x14017ec3a
mov rcx, qword [rbp + 0x4e8]
mov edx, 2
call fcn.14003fe40
test sil, sil
je case.0x14017e98b.68
mov qword [rbp + 0x4e0], 0
lea rax, [rbp + 0x4e8]
mov qword [rbp + 0x570], rax
mov qword [rbp + 0x4e8], 2
mov qword [rbp + 0x4f0], 0
mov esi, 0x200
mov eax, 2
mov qword [rbp + 0x588], rax
mov qword [rbp + 0x580], 0
xor r14d, r14d
xor ebx, ebx
cmp rsi, 0x201
jb 0x14017ecaf
jmp 0x14017ecc0
jae 0x14017ed96
cmp rsi, 0x201
jae 0x14017ecc0
mov r12d, 0x200
lea r15, [rbp - 0x30]
mov r13, rsi
jmp 0x14017ed34
sub rsi, rbx
sub r14, rbx
cmp r14, rsi
jae 0x14017ed08
mov qword [rsp + 0x20], 2
mov r9d, 2
lea rcx, [rbp + 0x4e0]
mov rdx, rbx
mov r8, rsi
call fcn.140159080
mov rax, qword [rbp + 0x4e0]
mov qword [rbp + 0x580], rax
mov rax, qword [rbp + 0x4e8]
mov qword [rbp + 0x588], rax
mov eax, 0xffffffff
mov r14, qword [rbp + 0x580]
cmp r14, rax
mov ebx, 0xffffffff
cmovb rbx, r14
mov qword [rbp + 0x4f0], rbx
mov r12, rbx
mov r15, qword [rbp + 0x588]
mov r13, rbx
xor ecx, ecx
call sub.KERNEL32.dll_SetLastError
mov rcx, r15
mov edx, r13d
call sub.KERNEL32.dll_GetSystemDirectoryW
mov edi, eax
test eax, eax
jne 0x14017ed59
call sub.KERNEL32.dll_GetLastError
test eax, eax
jne 0x14017eec8
mov esi, edi
cmp r13, rsi
jne 0x14017eca0
call sub.KERNEL32.dll_GetLastError
cmp eax, 0x7a
jne 0x1401811d3
add r13, r13
mov eax, 0xffffffff
cmp r13, rax
cmovae r13, rax
mov rsi, r13
cmp rsi, 0x201
jae 0x14017ecc0
jmp 0x14017ecaf
cmp r12, rsi
jb 0x1401812b8
lea r14, [rsi + rsi]
test edi, edi
je 0x14017efa3
movzx eax, byte [0x1402a6198]
xor ecx, ecx
mov rdx, r14
call fcn.140188040
mov rbx, rax
test rax, rax
jne 0x14017efa8
mov ecx, 2
mov rdx, r14
call fcn.14003a3fc
jmp 0x140181309
mov rsi, qword [rbp + 0x4f0]
mov dword [rbp + 0x570], 0
mov rcx, qword [rbp + 0x4c8]
mov qword [rbp + 0x588], rcx
mov rcx, qword [rbp + 0x590]
mov qword [rbp + 0x580], rcx
mov qword [rbp + 0x498], rax
mov qword [rbp + 0x4a0], r13
mov qword [rbp + 0x4a8], rsi
cmp rsi, rax
jne 0x14017ee34
lea rcx, [rbp + 0x498]
call fcn.1401769d0
mov r13, qword [rbp + 0x4a0]
mov word [r13 + rsi*2], 0
inc rsi
mov qword [rbp + 0x4a8], rsi
mov rsi, qword [rbp + 0x4d0]
cmp byte [rsi + 0xc8], 0
mov eax, 0x608
mov ebx, 0x400
cmovne ebx, eax
or ebx, dword [rsi + 0xc4]
test byte [rbp + 0x3f0], 1
je 0x14017eefe
mov rax, qword [rbp + 0x4b8]
mov rdi, qword [rax + 0x10]
mov qword [rbp + 0x430], rdi
movups xmm0, xmmword [rax]
movaps xmmword [rbp + 0x420], xmm0
mov qword [rbp + 0x550], 0
mov qword [rbp + 0x558], 2
mov qword [rbp + 0x560], 0
test rdi, rdi
je 0x14017fc7c
mov r14d, 2
xor r13d, r13d
jmp 0x14017fca9
call sub.KERNEL32.dll_GetLastError
mov esi, eax
shl rsi, 0x20
cmp qword [rbp + 0x4e0], 0
je 0x14017eeee
mov rcx, qword [rbp + 0x4e8]
mov edx, 2
call fcn.14003fe40
or rsi, 2
mov r15, qword [rbp + 0x548]
jmp 0x14017f1b6
mov r14d, 2
mov qword [rbp + 0x4b8], 0
xor r12d, r12d
movabs rax, 0x8000000000000000
cmp qword [rsi + 0x38], rax
jne 0x14017f437
mov eax, 2
mov qword [rbp + 0x4c0], rax
xor r13d, r13d
xor eax, eax
mov qword [rbp + 0x4d0], rax
xorps xmm0, xmm0
movaps xmmword [rbp + 0x420], xmm0
mov qword [rbp + 0x430], 0
mov cl, 1
xor eax, eax
lock cmpxchg byte [0x1402a6100], cl
jne 0x140180afc
mov rax, qword [0x1402a6170]
movabs rcx, 0x8000000000000000
dec rcx
mov qword [rbp + 0x4b0], rcx
test rax, rcx
mov qword [rbp + 0x4d8], r14
mov qword [rbp + 0x578], r12
je 0x1401800d8
call fcn.140159440
xor al, 1
jmp 0x1401800da
mov ebx, 2
mov rcx, rbx
mov rdx, r15
mov r8, r14
call sub.msvcrt.dll_memcpy
cmp qword [rbp + 0x4e0], 0
je 0x14017efd1
mov rcx, qword [rbp + 0x4e8]
mov edx, 2
call fcn.14003fe40
mov qword [rbp + 0x440], rsi
lea rax, [rbp + 0x448]
mov qword [rbp + 0x570], rax
mov qword [rbp + 0x448], rbx
mov qword [rbp + 0x450], rsi
lea r12, [0x14027faca]
xor r13d, r13d
lea rdi, [rbp + 0x440]
xor r14d, r14d
jmp 0x14017f01c
mov r14d, ecx
mov word [rbx + rsi*2], r15w
inc rsi
mov qword [rbp + 0x450], rsi
mov r15, qword [rbp + 0x548]
test r12, r12
je 0x14017f090
test r14w, r14w
je 0x14017f073
xor ecx, ecx
mov r15d, r14d
cmp rsi, qword [rbp + 0x440]
jne 0x14017f00a
lea rax, [0x14027faca]
sub rax, r12
add rax, 0xa
movabs rdx, 0xaaaaaaaaaaaaaaab
mul rdx
mov r8, rdx
shr r8, 1
cmp cx, 1
mov rax, r13
adc rax, 0xffffffffffffffff
sub r8, rax
inc r8
mov r14d, ecx
jmp 0x14017f0bf
lea rax, [0x14027fad2]
cmp r12, rax
je 0x14017f090
movzx r15d, byte [r12]
test r15b, r15b
js 0x14017f0e8
inc r12
xor ecx, ecx
jmp 0x14017f033
mov rax, qword [rbp + 0x440]
cmp r13, 1
je 0x14017f187
mov r13d, 1
xor r15d, r15d
mov r12d, 0
mov r8d, 0
cmp rsi, rax
jne 0x14017f00d
inc r8
mov qword [rsp + 0x20], 2
mov r9d, 2
mov rcx, rdi
mov rdx, rsi
call fcn.140159080
mov rbx, qword [rbp + 0x448]
jmp 0x14017f00d
mov eax, r15d
and eax, 0x1f
movzx edx, byte [r12 + 1]
and edx, 0x3f
cmp r15b, 0xdf
jbe 0x14017f130
movzx ecx, byte [r12 + 2]
shl edx, 6
and ecx, 0x3f
or ecx, edx
cmp r15b, 0xf0
jb 0x14017f143
movzx r15d, byte [r12 + 3]
add r12, 4
and eax, 7
shl eax, 0x12
shl ecx, 6
and r15d, 0x3f
or r15d, ecx
or r15d, eax
jmp 0x14017f14f
add r12, 2
shl eax, 6
or eax, edx
mov r15d, eax
xor ecx, ecx
jmp 0x14017f033
add r12, 3
shl eax, 0xc
or ecx, eax
mov r15d, ecx
cmp r15d, 0xffff
ja 0x14017f15f
xor ecx, ecx
jmp 0x14017f033
lea eax, [r15 + 0xff0000]
shr eax, 0xa
or eax, 0xd800
and r15d, 0x3ff
or r15d, 0xdc00
mov ecx, r15d
mov r15d, eax
jmp 0x14017f033
mov qword [rbp + 0x588], rax
mov rax, qword [rbp + 0x448]
mov qword [rbp + 0x580], rax
movabs rax, 0x8000000000000000
cmp qword [rbp + 0x588], rax
jne 0x14017f1f4
mov rsi, qword [rbp + 0x580]
mov rax, qword [rbp + 0x598]
mov qword [rax], rsi
mov qword [rax + 0x10], 2
mov sil, 1
cmp qword [rbp + 0x4c8], 0
je 0x14017f1e6
mov edx, 2
mov rcx, qword [rbp + 0x590]
call fcn.14003fe40
test sil, sil
jne 0x14017e106
jmp 0x14017e16a
xor ecx, ecx
test cl, cl
jne 0x1401812ff
mov rax, qword [rbp + 0x4d0]
mov rcx, qword [rax + 0x28]
mov qword [rbp + 0x570], rcx
mov rcx, qword [rax + 0x30]
mov qword [rbp + 0x4d8], rcx
movzx eax, byte [rax + 0xc9]
mov byte [rbp + 0x4c0], al
movzx eax, byte [0x1402a6198]
mov edx, 0x14
xor ecx, ecx
call fcn.140188040
test rax, rax
je 0x1401812fa
mov ecx, 0xa
mov word [rax], 0x63
mov qword [rbp - 0x30], rcx
lea rcx, [rbp - 0x28]
mov qword [rbp + 0x4b0], rcx
mov qword [rbp - 0x28], rax
mov qword [rbp - 0x20], 1
lea r13, [0x14027f5a1]
mov esi, 1
xor ebx, ebx
lea r15, [0x14027f5bc]
lea r12, [0x14027f5a0]
lea rdi, [rbp - 0x30]
jmp 0x14017f29e
mov word [rax + rsi*2], bx
inc rsi
mov qword [rbp - 0x20], rsi
mov ebx, r14d
test bx, bx
jne 0x14017f320
cmp r13, r15
je 0x14017f3b9
movzx ebx, byte [r13]
test bl, bl
js 0x14017f2ba
inc r13
jmp 0x14017f320
mov ecx, ebx
and ecx, 0x1f
movzx r8d, byte [r13 + 1]
and r8d, 0x3f
cmp bl, 0xdf
jbe 0x14017f30b
movzx edx, byte [r13 + 2]
shl r8d, 6
and edx, 0x3f
or edx, r8d
cmp bl, 0xf0
jb 0x14017f377
movzx ebx, byte [r13 + 3]
add r13, 4
and ecx, 7
shl ecx, 0x12
shl edx, 6
and ebx, 0x3f
or ebx, edx
or ebx, ecx
cmp ebx, 0xffff
jbe 0x14017f320
jmp 0x14017f38a
add r13, 2
shl ecx, 6
or ecx, r8d
mov ebx, ecx
nop word [rax + rax]
xor r14d, r14d
cmp rsi, qword [rbp - 0x30]
jne 0x14017f290
mov rax, r12
sub rax, r13
add rax, 0x1e
movabs rcx, 0xaaaaaaaaaaaaaaab
mul rcx
shr rdx, 1
cmp r14w, 1
sbb rdx, 0
lea r8, [rdx + 2]
mov qword [rsp + 0x20], 2
mov r9d, 2
mov rcx, rdi
mov rdx, rsi
call fcn.140159080
mov rax, qword [rbp - 0x28]
jmp 0x14017f290
add r13, 3
shl ecx, 0xc
or edx, ecx
mov ebx, edx
cmp ebx, 0xffff
jbe 0x14017f320
lea ecx, [rbx + 0xff0000]
shr ecx, 0xa
or ecx, 0xd800
and ebx, 0x3ff
or ebx, 0xdc00
mov r14d, ebx
mov ebx, ecx
cmp rsi, qword [rbp - 0x30]
jne 0x14017f290
jmp 0x14017f32d
mov rsi, qword [rbp - 0x20]
mov qword [rbp + 0x4f0], rsi
movups xmm0, xmmword [rbp - 0x30]
movaps xmmword [rbp + 0x4e0], xmm0
cmp rsi, qword [rbp + 0x4e0]
mov r15, qword [rbp + 0x548]
jne 0x14017f3eb
lea rcx, [rbp + 0x4e0]
call fcn.1401769d0
mov r14, qword [rbp + 0x4e8]
mov word [r14 + rsi*2], 0x22
inc rsi
mov qword [rbp + 0x4f0], rsi
mov r8, qword [rbp + 0x578]
lea rax, [r8 + r8]
xor ecx, ecx
lea r13, str.Windows_file_names_may_not_contain_____or_end_with___
mov rdx, qword [rbp + 0x590]
cmp rax, rcx
je 0x14017f50b
cmp word [rdx + rcx], 0x22
lea rcx, [rcx + 2]
jne 0x14017f41e
jmp 0x140180974
mov rax, qword [rsi + 0x40]
mov rcx, qword [rsi + 0x48]
add rcx, rax
xor r10d, r10d
mov rdx, rax
jmp 0x14017f457
xor r10d, r10d
test r8w, r8w
je 0x1401800ba
mov r8w, 1
test r10w, r10w
jne 0x14017f44a
cmp rdx, rcx
je 0x1401809c8
movzx r9d, byte [rdx]
test r9b, r9b
js 0x14017f479
inc rdx
jmp 0x14017f4ea
mov r10d, r9d
and r10d, 0x1f
movzx esi, byte [rdx + 1]
and esi, 0x3f
cmp r9b, 0xdf
jbe 0x14017f4c3
movzx r11d, byte [rdx + 2]
shl esi, 6
and r11d, 0x3f
or r11d, esi
cmp r9b, 0xf0
jb 0x14017f4d3
movzx r9d, byte [rdx + 3]
add rdx, 4
and r10d, 7
shl r10d, 0x12
shl r11d, 6
and r9d, 0x3f
or r9d, r11d
or r9d, r10d
jmp 0x14017f4e1
add rdx, 2
shl r10d, 6
or r10d, esi
mov r9d, r10d
jmp 0x14017f4ea
add rdx, 3
shl r10d, 0xc
or r11d, r10d
mov r9d, r11d
cmp r9d, 0xffff
ja 0x14017f4f5
xor r10d, r10d
mov r8d, r9d
jmp 0x14017f44d
and r9d, 0x3ff
or r9d, 0xdc00
mov r10d, r9d
jmp 0x14017f44d
test r8, r8
je 0x140180218
mov rax, qword [rbp + 0x590]
movzx eax, word [rax + r8*2 - 2]
cmp ax, 0x5c
je 0x140180974
xor edi, edi
test ax, ax
mov rax, qword [rbp + 0x590]
cmove rdi, rax
jmp 0x140180221
jne 0x14017e69e
cmp rdi, rdx
jb 0x14017f54e
mov rdi, rdx
mov qword [rbp - 0x30], rbx
mov qword [rbp - 0x28], rsi
mov qword [rbp - 0x20], rdi
mov qword [rbp - 0x18], r14
lea rcx, [rbp - 0x30]
mov rdx, r12
mov r8, r13
call fcn.140179360
cmp qword [rbp + 0x578], 1
je 0x14017f580
lea rcx, [rbp - 0x30]
call fcn.14017c890
mov rsi, qword [rbp - 0x28]
mov r8, qword [rbp - 0x20]
lea rcx, [rbp + 0x440]
mov rdx, rsi
call fcn.140183920
cmp qword [rbp - 0x30], 0
je 0x14017f5ab
mov edx, 1
mov rcx, rsi
call fcn.14003fe40
mov rcx, qword [rbp + 0x440]
movabs rax, 0x8000000000000000
cmp rcx, rax
jne 0x14017fa7e
mov qword [rbp + 0x550], 0
mov qword [rbp + 0x558], 2
mov qword [rbp + 0x560], 0
mov r8d, 0x200
mov eax, 2
mov qword [rbp + 0x588], rax
xor r15d, r15d
xor r12d, r12d
xor ebx, ebx
cmp r8, 0x201
jb 0x14017f61f
jmp 0x14017f630
jae 0x14017f6f8
cmp r8, 0x201
jae 0x14017f630
mov r13d, 0x200
lea r14, [rbp - 0x30]
mov rdi, r8
jmp 0x14017f696
sub r8, rbx
sub r12, rbx
cmp r12, r8
jae 0x14017f66e
mov qword [rsp + 0x20], 2
mov r9d, 2
lea rcx, [rbp + 0x550]
mov rdx, rbx
call fcn.140159080
mov r15, qword [rbp + 0x550]
mov rax, qword [rbp + 0x558]
mov qword [rbp + 0x588], rax
mov eax, 0xffffffff
cmp r15, rax
mov ebx, 0xffffffff
cmovb rbx, r15
mov qword [rbp + 0x560], rbx
mov r12, r15
mov r13, rbx
mov r14, qword [rbp + 0x588]
mov rdi, rbx
xor ecx, ecx
call sub.KERNEL32.dll_SetLastError
mov rcx, r14
mov edx, edi
call sub.KERNEL32.dll_GetSystemDirectoryW
mov esi, eax
test eax, eax
jne 0x14017f6ba
call sub.KERNEL32.dll_GetLastError
test eax, eax
jne 0x14017f7de
mov r8d, esi
cmp rdi, r8
jne 0x14017f610
call sub.KERNEL32.dll_GetLastError
cmp eax, 0x7a
jne 0x1401811f0
add rdi, rdi
mov eax, 0xffffffff
cmp rdi, rax
cmovae rdi, rax
mov r8, rdi
cmp r8, 0x201
jae 0x14017f630
jmp 0x14017f61f
cmp r13, r8
jb 0x1401812cc
lea rcx, [rbp + 0x4e0]
mov rdx, r14
mov r15, qword [rbp + 0x548]
call fcn.140157b80
mov r12, qword [rbp + 0x580]
lea rcx, [rbp + 0x4e0]
mov rdx, r12
mov r8, qword [rbp + 0x590]
call fcn.140179360
cmp qword [rbp + 0x578], 1
je 0x14017f74a
lea rcx, [rbp + 0x4e0]
call fcn.14017c890
mov rsi, qword [rbp + 0x4e8]
mov r8, qword [rbp + 0x4f0]
lea rcx, [rbp + 0x440]
mov rdx, rsi
call fcn.140183920
cmp qword [rbp + 0x4e0], 0
je 0x14017f77e
mov edx, 1
mov rcx, rsi
call fcn.14003fe40
mov rax, qword [rbp + 0x440]
mov qword [rbp + 0x4c8], rax
mov rsi, qword [rbp + 0x448]
mov rbx, qword [rbp + 0x450]
cmp qword [rbp + 0x550], 0
je 0x14017f7b5
mov rcx, qword [rbp + 0x558]
mov edx, 2
call fcn.14003fe40
movabs rcx, 0x8000000000000000
lea rax, [rcx + 2]
mov rdx, qword [rbp + 0x4c8]
cmp rdx, rax
jge 0x14017e7a4
lea rax, [rcx + 1]
cmp rdx, rax
je 0x14017f808
jmp 0x14017f84d
call sub.KERNEL32.dll_GetLastError
mov esi, eax
shl rsi, 0x20
cmp qword [rbp + 0x550], 0
je 0x14017f804
mov rcx, qword [rbp + 0x558]
mov edx, 2
call fcn.14003fe40
or rsi, 2
mov eax, esi
and eax, 3
cmp eax, 1
jne 0x14017f84d
mov rax, rsi
dec rsi
mov rdi, qword [rax - 1]
mov rbx, qword [rax + 7]
mov rax, qword [rbx]
test rax, rax
je 0x14017f82d
mov rcx, rdi
call rax
cmp qword [rbx + 8], 0
je 0x14017f840
mov rdx, qword [rbx + 0x10]
mov rcx, rdi
call fcn.14003fe40
mov edx, 8
mov rcx, rsi
call fcn.14003fe40
mov qword [rbp + 0x550], 0
mov qword [rbp + 0x558], 2
mov qword [rbp + 0x560], 0
mov r8d, 0x200
mov eax, 2
mov qword [rbp + 0x588], rax
xor r15d, r15d
xor r12d, r12d
xor edi, edi
cmp r8, 0x201
jb 0x14017f8b6
jmp 0x14017f8d0
mov r13, qword [rbp + 0x590]
jae 0x14017f999
cmp r8, 0x201
jae 0x14017f8d0
mov ebx, 0x200
lea r14, [rbp - 0x30]
mov r13, r8
jmp 0x14017f936
sub r8, rdi
sub r12, rdi
cmp r12, r8
jae 0x14017f90e
mov qword [rsp + 0x20], 2
mov r9d, 2
lea rcx, [rbp + 0x550]
mov rdx, rdi
call fcn.140159080
mov r15, qword [rbp + 0x550]
mov rax, qword [rbp + 0x558]
mov qword [rbp + 0x588], rax
mov eax, 0xffffffff
cmp r15, rax
mov edi, 0xffffffff
cmovb rdi, r15
mov qword [rbp + 0x560], rdi
mov r12, r15
mov rbx, rdi
mov r14, qword [rbp + 0x588]
mov r13, rdi
xor ecx, ecx
call sub.KERNEL32.dll_SetLastError
mov rcx, r14
mov edx, r13d
call sub.KERNEL32.dll_GetWindowsDirectoryW
mov esi, eax
test eax, eax
jne 0x14017f95b
call sub.KERNEL32.dll_GetLastError
test eax, eax
jne 0x14017fa98
mov r8d, esi
cmp r13, r8
jne 0x14017f8a0
call sub.KERNEL32.dll_GetLastError
cmp eax, 0x7a
jne 0x14018120d
add r13, r13
mov eax, 0xffffffff
cmp r13, rax
cmovae r13, rax
mov r8, r13
cmp r8, 0x201
jae 0x14017f8d0
jmp 0x14017f8b6
cmp rbx, r8
jb 0x1401812e3
lea rcx, [rbp + 0x4e0]
mov rdx, r14
mov r15, qword [rbp + 0x548]
call fcn.140157b80
mov r12, qword [rbp + 0x580]
lea rcx, [rbp + 0x4e0]
mov rdx, r12
mov r8, r13
call fcn.140179360
cmp qword [rbp + 0x578], 1
je 0x14017f9e7
lea rcx, [rbp + 0x4e0]
call fcn.14017c890
mov rsi, qword [rbp + 0x4e8]
mov r8, qword [rbp + 0x4f0]
lea rcx, [rbp + 0x440]
mov rdx, rsi
call fcn.140183920
cmp qword [rbp + 0x4e0], 0
je 0x14017fa1b
mov edx, 1
mov rcx, rsi
call fcn.14003fe40
mov rax, qword [rbp + 0x440]
mov qword [rbp + 0x4c8], rax
mov rsi, qword [rbp + 0x448]
mov rbx, qword [rbp + 0x450]
cmp qword [rbp + 0x550], 0
je 0x14017fa52
mov rcx, qword [rbp + 0x558]
mov edx, 2
call fcn.14003fe40
movabs rcx, 0x8000000000000000
lea rax, [rcx + 2]
mov rdx, qword [rbp + 0x4c8]
cmp rdx, rax
jge 0x14017e7a4
lea rax, [rcx + 1]
cmp rdx, rax
je 0x14017fad0
jmp 0x14017fb15
mov qword [rbp + 0x4c8], rcx
mov rsi, qword [rbp + 0x448]
mov rbx, qword [rbp + 0x450]
jmp 0x14017e7a4
call sub.KERNEL32.dll_GetLastError
mov esi, eax
shl rsi, 0x20
cmp qword [rbp + 0x550], 0
je 0x14017fabe
mov rcx, qword [rbp + 0x558]
mov edx, 2
call fcn.14003fe40
or rsi, 2
mov r12, qword [rbp + 0x580]
mov r13, qword [rbp + 0x590]
mov eax, esi
and eax, 3
cmp eax, 1
jne 0x14017fb15
mov rax, rsi
dec rsi
mov rdi, qword [rax - 1]
mov rbx, qword [rax + 7]
mov rax, qword [rbx]
test rax, rax
je 0x14017faf5
mov rcx, rdi
call rax
cmp qword [rbx + 8], 0
je 0x14017fb08
mov rdx, qword [rbx + 0x10]
mov rcx, rdi
call fcn.14003fe40
mov edx, 8
mov rcx, rsi
call fcn.14003fe40
lea rdx, str.PATHstd_src_sys_commonprocess.rs
lea rcx, [rbp + 0x440]
mov r8d, 4
call fcn.140177610
mov r15, qword [rbp + 0x440]
movabs rax, 0x8000000000000000
cmp r15, rax
je 0x14017fc69
mov rsi, qword [rbp + 0x448]
mov rax, qword [rbp + 0x450]
add rax, rsi
mov qword [rbp + 0x4e0], rsi
mov qword [rbp + 0x4e8], rax
mov word [rbp + 0x4f0], 0
mov byte [rbp + 0x4f8], 1
lea rdi, [rbp - 0x30]
lea rbx, [rbp + 0x4e0]
lea r14, [rbp + 0x550]
mov rcx, rdi
mov rdx, rbx
call fcn.1401789b0
jmp 0x14017fba1
mov rcx, rdi
mov rdx, rbx
call fcn.1401789b0
mov rax, qword [rbp - 0x30]
movabs rcx, 0x8000000000000000
cmp rax, rcx
je 0x14017fc57
mov rcx, qword [rbp - 0x28]
mov rdx, qword [rbp - 0x20]
test rdx, rdx
jne 0x14017fbd6
test rax, rax
je 0x14017fb96
mov edx, 1
call fcn.14003fe40
jmp 0x14017fb96
mov r8, qword [rbp - 0x18]
mov qword [rbp - 0x30], rax
mov qword [rbp - 0x28], rcx
mov qword [rbp - 0x20], rdx
mov qword [rbp - 0x18], r8
mov rcx, rdi
mov rdx, r12
mov r8, r13
call fcn.140179360
cmp qword [rbp + 0x578], 1
je 0x14017fc0a
mov rcx, rdi
call fcn.14017c890
mov r13, qword [rbp - 0x28]
mov r8, qword [rbp - 0x20]
mov rcx, r14
mov rdx, r13
call fcn.140183920
cmp qword [rbp - 0x30], 0
je 0x14017fc31
mov edx, 1
mov rcx, r13
call fcn.14003fe40
mov rcx, qword [rbp + 0x550]
movabs rax, 0x8000000000000000
cmp rcx, rax
jne 0x140180c52
mov r13, qword [rbp + 0x590]
jmp 0x14017fb89
test r15, r15
je 0x14017fc69
mov edx, 1
mov rcx, rsi
call fcn.14003fe40
lea rbx, [0x14027faa8]
mov r15, qword [rbp + 0x548]
jmp 0x14017e0f1
mov sil, 1
lea rcx, [rbp + 0x550]
call fcn.1401769d0
mov r14, qword [rbp + 0x558]
mov word [r14], 0
mov qword [rbp + 0x560], 1
mov r13d, 1
mov rax, qword [rbp + 0x420]
mov rcx, qword [rbp + 0x428]
xor edx, edx
test rax, rax
setne dl
cmove rdi, rax
mov qword [rbp - 0x30], rdx
mov qword [rbp - 0x28], 0
mov qword [rbp - 0x20], rax
mov qword [rbp - 0x18], rcx
mov qword [rbp - 0x10], rdx
mov qword [rbp - 8], 0
mov qword [rbp], rax
mov qword [rbp + 8], rcx
mov qword [rbp + 0x10], rdi
lea rcx, [rbp + 0x4e0]
lea rdx, [rbp - 0x30]
call fcn.14017cdf0
mov rdx, qword [rbp + 0x4e0]
test rdx, rdx
je 0x140180a7e
mov r9, qword [rbp + 0x4f0]
imul r8, r9, 0x38
mov rax, qword [rdx + r8 + 0x168]
movabs rcx, 0x8000000000000000
cmp rax, rcx
je 0x140180a7e
mov qword [rbp + 0x4b8], r14
mov rcx, qword [rdx + r8 + 0x170]
mov r10, qword [rdx + r8 + 0x188]
mov qword [rbp + 0x4d8], r10
mov rsi, qword [rdx + r8 + 0x190]
mov rdi, qword [rdx + r8 + 0x198]
shl r9, 5
mov r10, qword [rdx + r9]
mov qword [rbp + 0x578], r10
mov r10, qword [rdx + r9 + 8]
mov qword [rbp + 0x4c0], r10
mov r14, qword [rdx + r9 + 0x10]
mov rdx, qword [rdx + r8 + 0x178]
add rdx, rcx
xor r11d, r11d
mov r8, rcx
jmp 0x14017fda3
xor r11d, r11d
test r9w, r9w
je 0x140180071
mov r9w, 1
test r11w, r11w
jne 0x14017fd96
cmp r8, rdx
je 0x14017fe61
movzx r10d, byte [r8]
test r10b, r10b
js 0x14017fdc5
inc r8
jmp 0x14017fe40
mov r11d, r10d
and r11d, 0x1f
movzx r12d, byte [r8 + 1]
and r12d, 0x3f
cmp r10b, 0xdf
jbe 0x14017fe12
movzx r15d, byte [r8 + 2]
shl r12d, 6
and r15d, 0x3f
or r15d, r12d
cmp r10b, 0xf0
jb 0x14017fe22
movzx r10d, byte [r8 + 3]
add r8, 4
and r11d, 7
shl r11d, 0x12
shl r15d, 6
and r10d, 0x3f
or r10d, r15d
or r10d, r11d
jmp 0x14017fe30
add r8, 2
shl r11d, 6
or r11d, r12d
mov r10d, r11d
jmp 0x14017fe40
add r8, 3
shl r11d, 0xc
or r15d, r11d
mov r10d, r15d
cmp r10d, 0xffff
mov r15, qword [rbp + 0x548]
ja 0x14017fe4b
xor r11d, r11d
mov r9d, r10d
jmp 0x14017fd99
and r10d, 0x3ff
or r10d, 0xdc00
mov r11d, r10d
jmp 0x14017fd99
test rax, rax
je 0x14017fe70
mov edx, 1
call fcn.14003fe40
mov rax, qword [rbp + 0x550]
sub rax, r13
cmp rax, rdi
jae 0x14017feb0
mov qword [rsp + 0x20], 2
mov r9d, 2
lea rcx, [rbp + 0x550]
mov rdx, r13
mov r8, rdi
call fcn.140159080
mov rax, qword [rbp + 0x558]
mov r13, qword [rbp + 0x560]
jmp 0x14017feb7
mov rax, qword [rbp + 0x4b8]
lea r8, [rdi + rdi]
mov r12, rax
lea rcx, [rax + r13*2]
mov rdx, rsi
call sub.msvcrt.dll_memcpy
add r13, rdi
mov qword [rbp + 0x560], r13
cmp qword [rbp + 0x4d8], 0
je 0x14017feeb
mov edx, 2
mov rcx, rsi
call fcn.14003fe40
cmp r13, qword [rbp + 0x550]
mov rsi, qword [rbp + 0x4c0]
jne 0x14017ff0e
lea rcx, [rbp + 0x550]
call fcn.1401769d0
mov r12, qword [rbp + 0x558]
mov word [r12 + r13*2], 0x3d
inc r13
mov qword [rbp + 0x560], r13
add r14, rsi
xor r8d, r8d
mov rax, rsi
mov rdi, qword [rbp + 0x578]
jmp 0x14017ff3d
xor r8d, r8d
test cx, cx
je 0x1401801c2
mov cx, 1
test r8w, r8w
jne 0x14017ff31
cmp rax, r14
je 0x14017ffe9
movzx edx, byte [rax]
test dl, dl
js 0x14017ff5c
inc rax
jmp 0x14017ffcb
mov r8d, edx
and r8d, 0x1f
movzx r10d, byte [rax + 1]
and r10d, 0x3f
cmp dl, 0xdf
jbe 0x14017ffa5
movzx r9d, byte [rax + 2]
shl r10d, 6
and r9d, 0x3f
or r9d, r10d
cmp dl, 0xf0
jb 0x14017ffb5
movzx edx, byte [rax + 3]
add rax, 4
and r8d, 7
shl r8d, 0x12
shl r9d, 6
and edx, 0x3f
or edx, r9d
or edx, r8d
jmp 0x14017ffc3
add rax, 2
shl r8d, 6
or r8d, r10d
mov edx, r8d
jmp 0x14017ffcb
add rax, 3
shl r8d, 0xc
or r9d, r8d
mov edx, r9d
cmp edx, 0xffff
ja 0x14017ffd5
xor r8d, r8d
mov ecx, edx
jmp 0x14017ff34
and edx, 0x3ff
or edx, 0xdc00
mov r8d, edx
jmp 0x14017ff34
movabs rax, 0x8000000000000000
cmp rdi, rax
je 0x140181030
mov qword [rbp + 0x440], rsi
mov qword [rbp + 0x448], r14
mov word [rbp + 0x450], 0
lea rcx, [rbp + 0x550]
lea rdx, [rbp + 0x440]
call fcn.140176a90
test rdi, rdi
je 0x140180038
mov edx, 1
mov rcx, rsi
call fcn.14003fe40
mov r13, qword [rbp + 0x560]
cmp r13, qword [rbp + 0x550]
jne 0x140180054
lea rcx, [rbp + 0x550]
call fcn.1401769d0
mov r14, qword [rbp + 0x558]
mov word [r14 + r13*2], 0
inc r13
mov qword [rbp + 0x560], r13
jmp 0x14017fcef
test rax, rax
je 0x140180080
mov edx, 1
call fcn.14003fe40
cmp qword [rbp + 0x578], 0
je 0x14018009b
mov edx, 1
mov rcx, qword [rbp + 0x4c0]
call fcn.14003fe40
lea r14, str.nul_byte_found_in_provided_data
cmp qword [rbp + 0x4d8], 0
je 0x1401801db
mov edx, 2
jmp 0x1401801d3
lea r13, str.nul_byte_found_in_provided_data
mov rax, qword [rbp + 0x598]
mov qword [rax], r13
mov qword [rax + 0x10], 2
jmp 0x140180fbe
xor eax, eax
lea rcx, [0x1402a6100]
movzx edx, byte [0x1402a6101]
xor r8d, r8d
test dl, dl
setne r8b
mov qword [rbp + 0x558], rcx
mov byte [rbp + 0x560], al
mov qword [rbp + 0x550], r8
mov qword [rbp + 0x440], 0
mov qword [rbp + 0x450], 0
mov qword [rbp + 0x460], 0
mov dword [rbp + 0x410], 2
lea rax, [rsi + 0x58]
cmp dword [rsi + 0x58], 6
lea rcx, [rbp + 0x410]
cmovne rcx, rax
cmp dword [rsi + 0x68], 6
lea r14, [rsi + 0x68]
cmove r14, r15
lea rdi, [rsi + 0x78]
cmp dword [rsi + 0x78], 6
cmove rdi, r15
lea r8, [rbp + 0x440]
mov edx, 0xfffffff6
call fcn.140183f90
mov r12, rdx
test rax, rax
je 0x14018018b
mov rax, qword [rbp + 0x598]
mov qword [rax], r12
mov qword [rax + 0x10], 2
jmp 0x140180ef0
lea r8, [rbp + 0x450]
mov rcx, r14
mov edx, 0xfffffff5
call fcn.140183f90
mov r14, rdx
test rax, rax
je 0x140180a47
mov rax, qword [rbp + 0x598]
mov qword [rax], r14
mov qword [rax + 0x10], 2
jmp 0x140180ed3
lea r14, str.nul_byte_found_in_provided_data
test rdi, rdi
je 0x1401801db
mov edx, 1
mov rcx, rsi
call fcn.14003fe40
xor esi, esi
lea rcx, [rbp - 0x30]
call fcn.140183ee0
cmp qword [rbp + 0x550], 0
je 0x140180201
mov rcx, qword [rbp + 0x558]
mov edx, 2
call fcn.14003fe40
mov rax, qword [rbp + 0x598]
mov qword [rax], r14
mov qword [rax + 0x10], 2
jmp 0x140180fd0
xor edi, edi
mov rax, qword [rbp + 0x590]
lea rbx, [r8 - 1]
test rdi, rdi
cmove rbx, r8
cmove rdi, rax
mov r15, qword [rbp + 0x4e0]
mov rax, r15
sub rax, rsi
cmp rax, rbx
jae 0x140180278
mov qword [rsp + 0x20], 2
lea rcx, [rbp + 0x4e0]
mov r9d, 2
mov rdx, rsi
mov r8, rbx
call fcn.140159080
mov rsi, qword [rbp + 0x4f0]
mov r15, qword [rbp + 0x4e0]
mov r14, qword [rbp + 0x4e8]
mov r12, qword [rbp + 0x570]
mov r13, qword [rbp + 0x4d8]
lea r8, [rbx + rbx]
lea rcx, [r14 + rsi*2]
mov rdx, rdi
call sub.msvcrt.dll_memcpy
add rsi, rbx
mov qword [rbp + 0x4f0], rsi
cmp rsi, r15
mov r15, qword [rbp + 0x548]
jne 0x1401802cd
lea rcx, [rbp + 0x4e0]
call fcn.1401769d0
mov r14, qword [rbp + 0x4e8]
mov r12, qword [rbp + 0x570]
mov r13, qword [rbp + 0x4d8]
mov word [r14 + rsi*2], 0x22
inc rsi
mov qword [rbp + 0x4f0], rsi
test r13, r13
je 0x140180e54
lea rax, [r13*4]
add rax, r13
lea rax, [r12 + rax*8]
mov qword [rbp + 0x4d8], rax
movdqa xmm6, xmmword [0x1401a8380]
lea rdi, [0x14027f594]
lea r13, str.nul_byte_found_in_provided_data
mov rsi, qword [rbp + 0x4f0]
cmp rsi, qword [rbp + 0x4e0]
jne 0x14018032f
lea rcx, [rbp + 0x4e0]
call fcn.1401769d0
mov rax, qword [rbp + 0x4e8]
mov word [rax + rsi*2], 0x20
lea r12, [rsi + 1]
mov qword [rbp + 0x4f0], r12
mov rdx, qword [rbp + 0x570]
cmp dword [rdx], 1
jne 0x140180390
lea rcx, [rbp + 0x4e0]
movzx r8d, byte [rbp + 0x4c0]
call fcn.140183a40
test rax, rax
jne 0x14018101a
mov rax, qword [rbp + 0x570]
add rax, 0x28
mov qword [rbp + 0x570], rax
cmp rax, qword [rbp + 0x4d8]
jne 0x140180313
jmp 0x140180e4d
mov rbx, qword [rdx + 0x10]
mov rcx, qword [rdx + 0x18]
lea rdx, [rbx + rcx]
mov qword [rbp + 0x578], rdx
xor edx, edx
cmp rcx, rdx
je 0x1401803c7
movzx r8d, byte [rbx + rdx]
cmp r8d, 0xa
je 0x14018096d
inc rdx
cmp r8d, 0xd
jne 0x1401803a5
jmp 0x14018096d
xor r10d, r10d
mov rdx, rbx
jmp 0x1401803dc
xor r10d, r10d
test r8w, r8w
je 0x140180974
mov r8w, 1
test r10w, r10w
jne 0x1401803cf
cmp rdx, qword [rbp + 0x578]
je 0x1401804a2
movzx r9d, byte [rdx]
test r9b, r9b
js 0x140180402
inc rdx
jmp 0x140180481
mov r10d, r9d
and r10d, 0x1f
movzx edi, byte [rdx + 1]
and edi, 0x3f
cmp r9b, 0xdf
jbe 0x14018044c
movzx r11d, byte [rdx + 2]
shl edi, 6
and r11d, 0x3f
or r11d, edi
cmp r9b, 0xf0
jb 0x140180463
movzx r9d, byte [rdx + 3]
add rdx, 4
and r10d, 7
shl r10d, 0x12
shl r11d, 6
and r9d, 0x3f
or r9d, r11d
or r9d, r10d
jmp 0x140180471
add rdx, 2
shl r10d, 6
or r10d, edi
mov r9d, r10d
lea rdi, [0x14027f594]
jmp 0x140180481
add rdx, 3
shl r10d, 0xc
or r11d, r10d
mov r9d, r11d
lea rdi, [0x14027f594]
cmp r9d, 0xffff
ja 0x14018048c
xor r10d, r10d
mov r8d, r9d
jmp 0x1401803d2
and r9d, 0x3ff
or r9d, 0xdc00
mov r10d, r9d
jmp 0x1401803d2
test rcx, rcx
je 0x1401805da
cmp byte [rcx + rbx - 1], 0x5c
sete cl
or cl, byte [rbp + 0x4c0]
mov rdx, rbx
jmp 0x1401804cb
cmp rdx, qword [rbp + 0x578]
je 0x1401805d5
movzx r8d, byte [rdx]
test r8b, r8b
js 0x1401804d9
inc rdx
jmp 0x140180544
mov r9d, r8d
and r9d, 0x1f
movzx r11d, byte [rdx + 1]
and r11d, 0x3f
cmp r8b, 0xdf
jbe 0x140180526
movzx r10d, byte [rdx + 2]
shl r11d, 6
and r10d, 0x3f
or r10d, r11d
cmp r8b, 0xf0
jb 0x140180536
movzx r8d, byte [rdx + 3]
add rdx, 4
and r9d, 7
shl r9d, 0x12
shl r10d, 6
and r8d, 0x3f
or r8d, r10d
or r8d, r9d
jmp 0x140180544
add rdx, 2
shl r9d, 6
or r9d, r11d
mov r8d, r9d
jmp 0x140180544
add rdx, 3
shl r9d, 0xc
or r10d, r9d
mov r8d, r10d
mov r9d, r8d
and r9d, 0x1ff800
cmp r9d, 0xd800
sete r9b
cmp r8d, 0x110000
sete r10b
or r10b, r9b
jne 0x1401804be
cmp r8d, 0x80
jae 0x1401805b0
lea r9d, [r8 - 0x30]
cmp r9d, 0xa
jb 0x1401805b0
mov r9d, r8d
and r9d, 0x5f
add r9d, 0xffffffbf
cmp r9d, 0x19
jbe 0x1401805b0
xor r9d, r9d
movzx r10d, byte [r9 + rdi]
cmp r10b, r8b
je 0x1401805ab
lea r11, [r9 + 1]
cmp r9, 0xb
mov r9, r11
jne 0x140180594
cmp r10b, r8b
jne 0x1401805c4
cmp r8d, 0x20
jb 0x1401805c4
add r8d, 0xffffff81
cmp r8d, 0x21
jae 0x1401804be
mov cl, 1
cmp rdx, qword [rbp + 0x578]
jne 0x1401804cb
jmp 0x1401805da
test cl, 1
je 0x140180615
cmp r12, qword [rbp + 0x4e0]
jne 0x1401805f6
lea rcx, [rbp + 0x4e0]
call fcn.1401769d0
mov rax, qword [rbp + 0x4e8]
mov word [rax + rsi*2 + 2], 0x22
add rsi, 2
mov qword [rbp + 0x4f0], rsi
mov cl, 1
mov dword [rbp + 0x4b0], ecx
mov r12, rsi
jmp 0x14018061f
mov dword [rbp + 0x4b0], 0
xor edi, edi
xor esi, esi
jmp 0x14018063e
mov rax, qword [rbp + 0x4e8]
mov word [rax + r12*2], di
inc r12
mov qword [rbp + 0x4f0], r12
mov edi, r14d
test di, di
je 0x14018064b
xor r14d, r14d
jmp 0x1401806f5
cmp rbx, qword [rbp + 0x578]
je 0x14018087b
movzx edi, byte [rbx]
test dil, dil
js 0x14018066b
inc rbx
xor r14d, r14d
jmp 0x1401806f5
mov ecx, edi
and ecx, 0x1f
movzx r8d, byte [rbx + 1]
and r8d, 0x3f
cmp dil, 0xdf
jbe 0x1401806ad
movzx edx, byte [rbx + 2]
shl r8d, 6
and edx, 0x3f
or edx, r8d
cmp dil, 0xf0
jb 0x1401806be
movzx edi, byte [rbx + 3]
add rbx, 4
and ecx, 7
shl ecx, 0x12
shl edx, 6
and edi, 0x3f
or edi, edx
or edi, ecx
jmp 0x1401806c9
add rbx, 2
shl ecx, 6
or ecx, r8d
mov edi, ecx
xor r14d, r14d
jmp 0x1401806f5
add rbx, 3
shl ecx, 0xc
or edx, ecx
mov edi, edx
cmp edi, 0xffff
jbe 0x140180643
lea ecx, [rdi + 0xff0000]
shr ecx, 0xa
or ecx, 0xd800
and edi, 0x3ff
or edi, 0xdc00
mov r14d, edi
mov edi, ecx
movzx ecx, di
cmp ecx, 0x24
jg 0x140180755
cmp ecx, 0xd
je 0x14018076b
cmp ecx, 0x22
jne 0x14018085b
mov rcx, qword [rbp + 0x4e0]
mov rdx, rcx
sub rdx, r12
cmp rdx, rsi
jae 0x1401807d3
mov qword [rsp + 0x20], 2
mov r9d, 2
lea rcx, [rbp + 0x4e0]
mov rdx, r12
mov r8, rsi
call fcn.140159080
mov rax, qword [rbp + 0x4e8]
mov r12, qword [rbp + 0x4f0]
jmp 0x1401807d8
cmp ecx, 0x25
je 0x14018076b
cmp ecx, 0x5c
jne 0x14018085b
inc rsi
jmp 0x14018085d
mov rcx, qword [rbp + 0x4e0]
sub rcx, r12
cmp rcx, 6
ja 0x1401807ad
mov qword [rsp + 0x20], 2
mov r8d, 7
mov r9d, 2
lea rcx, [rbp + 0x4e0]
mov rdx, r12
call fcn.140159080
mov rax, qword [rbp + 0x4e8]
mov r12, qword [rbp + 0x4f0]
movabs rcx, 0x2c007e003a0064
mov qword [rax + r12*2 + 6], rcx
movabs rcx, 0x64006300250025
mov qword [rax + r12*2], rcx
add r12, 7
jmp 0x140180854
test rsi, rsi
je 0x14018082b
cmp rsi, 0x10
jae 0x1401807e2
xor ecx, ecx
jmp 0x140180812
mov rcx, rsi
and rcx, 0xfffffffffffffff0
lea rdx, [rax + r12*2]
add rdx, 0x10
xor r8d, r8d
movdqu xmmword [rdx + r8*2 - 0x10], xmm6
movdqu xmmword [rdx + r8*2], xmm6
add r8, 0x10
cmp rcx, r8
jne 0x1401807f4
add r12, rcx
cmp rsi, rcx
je 0x140180824
sub rsi, rcx
mov word [rax + r12*2], 0x5c
inc r12
dec rsi
jne 0x140180815
mov rcx, qword [rbp + 0x4e0]
mov qword [rbp + 0x4f0], r12
cmp r12, rcx
jne 0x14018084a
lea rcx, [rbp + 0x4e0]
call fcn.1401769d0
mov rax, qword [rbp + 0x4e8]
mov word [rax + r12*2], 0x22
inc r12
mov qword [rbp + 0x4f0], r12
xor esi, esi
cmp r12, qword [rbp + 0x4e0]
jne 0x14018062c
lea rcx, [rbp + 0x4e0]
call fcn.1401769d0
jmp 0x140180625
cmp byte [rbp + 0x4b0], 0
lea rdi, [0x14027f594]
je 0x140180370
mov rcx, qword [rbp + 0x4e0]
mov rdx, rcx
sub rdx, r12
cmp rdx, rsi
jae 0x1401808d2
mov qword [rsp + 0x20], 2
mov r9d, 2
lea rcx, [rbp + 0x4e0]
mov rdx, r12
mov r8, rsi
call fcn.140159080
mov rax, qword [rbp + 0x4e8]
mov r12, qword [rbp + 0x4f0]
jmp 0x1401808d7
test rsi, rsi
je 0x140180938
cmp rsi, 0x10
jae 0x1401808e1
xor ecx, ecx
jmp 0x140180911
mov rcx, rsi
and rcx, 0xfffffffffffffff0
lea rdx, [rax + r12*2]
add rdx, 0x10
xor r8d, r8d
movdqu xmmword [rdx + r8*2 - 0x10], xmm6
movdqu xmmword [rdx + r8*2], xmm6
add r8, 0x10
cmp rcx, r8
jne 0x1401808f3
add r12, rcx
cmp rsi, rcx
je 0x140180923
sub rsi, rcx
mov word [rax + r12*2], 0x5c
inc r12
dec rsi
jne 0x140180914
mov rcx, qword [rbp + 0x4e0]
mov r15, qword [rbp + 0x548]
lea rdi, [0x14027f594]
mov qword [rbp + 0x4f0], r12
cmp r12, rcx
jne 0x140180957
lea rcx, [rbp + 0x4e0]
call fcn.1401769d0
mov rax, qword [rbp + 0x4e8]
mov word [rax + r12*2], 0x22
inc r12
mov qword [rbp + 0x4f0], r12
jmp 0x140180370
lea r13, str.batch_file_arguments_are_invalid
cmp qword [rbp + 0x4e0], 0
je 0x14018098f
mov rcx, qword [rbp + 0x4e8]
mov edx, 2
call fcn.14003fe40
mov rax, qword [rbp + 0x598]
mov qword [rax], r13
mov qword [rax + 0x10], 2
mov sil, 1
cmp qword [rbp + 0x588], 0
je 0x14017f1cb
mov edx, 2
mov rcx, qword [rbp + 0x580]
call fcn.14003fe40
jmp 0x14017f1cb
mov qword [rbp - 0x30], rax
mov qword [rbp - 0x28], rcx
mov word [rbp - 0x20], 0
lea rcx, [rbp + 0x4e0]
lea rdx, [rbp - 0x30]
call fcn.1401819a0
mov rax, qword [rbp + 0x4e0]
mov rsi, qword [rbp + 0x4f0]
cmp rsi, rax
jne 0x140180a0c
lea rcx, [rbp + 0x4e0]
call fcn.1401769d0
mov rax, qword [rbp + 0x4e0]
mov r13, qword [rbp + 0x4e8]
mov word [r13 + rsi*2], 0
mov qword [rbp + 0x4c0], r13
mov rcx, rax
movabs rax, 0x8000000000000000
cmp rcx, rax
mov rax, rcx
mov rsi, qword [rbp + 0x4d0]
jne 0x14017ef37
jmp 0x1401800c1
lea r8, [rbp + 0x460]
mov rcx, rdi
mov edx, 0xfffffff4
call fcn.140183f90
mov rdi, rdx
test rax, rax
je 0x140180b1e
mov rax, qword [rbp + 0x598]
mov qword [rax], rdi
mov qword [rax + 0x10], 2
jmp 0x140180ecb
xor esi, esi
lea rcx, [rbp - 0x30]
call fcn.140183ee0
cmp r13, qword [rbp + 0x550]
jne 0x140180aa7
xor esi, esi
lea rcx, [rbp + 0x550]
call fcn.1401769d0
mov r14, qword [rbp + 0x558]
mov word [r14 + r13*2], 0
mov r12, qword [rbp + 0x550]
movabs rax, 0x8000000000000000
cmp r12, rax
je 0x140180201
mov qword [rbp + 0x4b8], r14
mov r14, qword [rbp + 0x558]
mov rsi, qword [rbp + 0x4d0]
jmp 0x14017ef12
mov qword [rbp + 0x4c8], rcx
mov rsi, qword [rbp + 0x4e8]
mov rbx, qword [rbp + 0x4f0]
jmp 0x14017e7a4
lea rcx, [0x1402a6100]
call fcn.140159390
jmp 0x14017ef65
lea rcx, str._rustc_90b35a6239c3d8bdabc530a6a0816f7ff89a0aaflibrary_alloc_srccollections_btree_navigate.rs
call fcn.14006c350
jmp 0x140181309
xorps xmm0, xmm0
movups xmmword [rbp + 0x514], xmm0
movups xmmword [rbp + 0x508], xmm0
movups xmmword [rbp + 0x4f8], xmm0
movups xmmword [rbp + 0x4e8], xmm0
movups xmmword [rbp + 0x528], xmm0
movups xmmword [rbp + 0x538], xmm0
test rdi, rdi
jne 0x140180b5f
test r14, r14
jne 0x140180b5f
mov eax, 1
test r12, r12
je 0x140180b83
mov dword [rbp + 0x51c], 0x100
mov qword [rbp + 0x530], r12
mov qword [rbp + 0x538], r14
mov qword [rbp + 0x540], rdi
mov eax, 0x101
cmp byte [rsi + 0xc0], 1
jne 0x140180ba0
movzx ecx, word [rsi + 0xc2]
mov dword [rbp + 0x51c], eax
mov word [rbp + 0x520], cx
mov rdx, rsi
mov rsi, qword [rsi + 0xb8]
test rsi, rsi
je 0x140180c88
add rdx, 0xa8
mov dword [rbp + 0x4e0], 0x70
lea rcx, [rbp + 0x3e0]
call fcn.140184620
mov rdx, qword [rbp + 0x3e0]
mov rcx, qword [rbp + 0x3e8]
test rdx, rdx
je 0x140180eb1
mov qword [rbp + 0x3d0], rcx
or ebx, 0x80000
mov rax, qword [rbp + 0x540]
mov qword [rbp + 0x30], rax
movups xmm0, xmmword [rbp + 0x530]
movaps xmmword [rbp + 0x20], xmm0
movups xmm0, xmmword [rbp + 0x520]
movaps xmmword [rbp + 0x10], xmm0
movups xmm0, xmmword [rbp + 0x4e0]
movups xmm1, xmmword [rbp + 0x4f0]
movups xmm2, xmmword [rbp + 0x500]
movups xmm3, xmmword [rbp + 0x510]
movaps xmmword [rbp], xmm3
movaps xmmword [rbp - 0x10], xmm2
movaps xmmword [rbp - 0x20], xmm1
movaps xmmword [rbp - 0x30], xmm0
mov qword [rbp + 0x3d8], rdx
mov qword [rbp + 0x38], rdx
lea rax, [rbp - 0x30]
jmp 0x140180c99
mov qword [rbp + 0x4c8], rcx
mov rdi, qword [rbp + 0x558]
mov rbx, qword [rbp + 0x560]
test r15, r15
je 0x140180c79
mov edx, 1
mov rcx, rsi
call fcn.14003fe40
mov r15, qword [rbp + 0x548]
mov rsi, rdi
jmp 0x14017e7a4
mov dword [rbp + 0x4e0], 0x68
lea rax, [rbp + 0x4e0]
mov rdx, qword [rbp + 0x4a0]
lea rcx, [rbp + 0x420]
mov qword [rsp + 0x48], rcx
mov qword [rsp + 0x40], rax
mov qword [rsp + 0x38], r13
mov rax, qword [rbp + 0x4b8]
mov qword [rsp + 0x30], rax
mov dword [rsp + 0x28], ebx
mov dword [rsp + 0x20], 1
mov rcx, qword [rbp + 0x580]
xor r8d, r8d
xor r9d, r9d
call sub.KERNEL32.dll_CreateProcessW
test eax, eax
je 0x140180e10
movups xmm0, xmmword [rbp + 0x440]
movups xmm1, xmmword [rbp + 0x450]
movups xmm2, xmmword [rbp + 0x460]
mov rax, qword [rbp + 0x598]
movups xmmword [rax + 0x30], xmm2
movups xmmword [rax + 0x20], xmm1
movups xmmword [rax + 0x10], xmm0
movaps xmm0, xmmword [rbp + 0x420]
movups xmmword [rax], xmm0
test rsi, rsi
je 0x140180d32
mov rcx, qword [rbp + 0x3d8]
mov rdx, qword [rbp + 0x3d0]
call fcn.1401849e0
mov rcx, rdi
call sub.KERNEL32.dll_CloseHandle
mov rcx, r14
call sub.KERNEL32.dll_CloseHandle
mov rcx, r12
call sub.KERNEL32.dll_CloseHandle
cmp dword [rbp + 0x410], 4
jb 0x140180d5f
mov rcx, qword [rbp + 0x418]
call sub.KERNEL32.dll_CloseHandle
lea rcx, [rbp + 0x550]
mov r14, qword [rbp + 0x4d8]
mov r12, qword [rbp + 0x578]
call fcn.140184a20
cmp qword [rbp + 0x4d0], 0
je 0x140180d94
mov edx, 2
mov rcx, qword [rbp + 0x4c0]
call fcn.14003fe40
test r12, r12
je 0x140180da6
mov edx, 2
mov rcx, r14
call fcn.14003fe40
cmp qword [rbp + 0x498], 0
je 0x140180dc1
mov rcx, qword [rbp + 0x4a0]
mov edx, 2
call fcn.14003fe40
cmp qword [rbp + 0x588], 0
je 0x140180ddc
mov edx, 2
mov rcx, qword [rbp + 0x580]
call fcn.14003fe40
cmp qword [rbp + 0x4c8], 0
setne al
test byte [rbp + 0x570], al
je 0x140180ea5
mov edx, 2
mov rcx, qword [rbp + 0x590]
call fcn.14003fe40
mov r15, qword [rbp + 0x548]
jmp 0x14017e16a
call sub.KERNEL32.dll_GetLastError
shl rax, 0x20
or rax, 2
mov rcx, qword [rbp + 0x598]
mov qword [rcx], rax
mov qword [rcx + 0x10], 2
test rsi, rsi
je 0x140180ec3
mov rcx, qword [rbp + 0x3d8]
mov rdx, qword [rbp + 0x3d0]
call fcn.1401849e0
jmp 0x140180ec3
mov rsi, qword [rbp + 0x4f0]
mov rax, qword [rbp + 0x4e0]
cmp rsi, rax
jne 0x140180e73
lea rcx, [rbp + 0x4e0]
call fcn.1401769d0
mov rax, qword [rbp + 0x4e0]
mov r13, qword [rbp + 0x4e8]
mov word [r13 + rsi*2], 0x22
movabs rcx, 0x8000000000000000
cmp rax, rcx
je 0x14018098f
inc rsi
mov cl, 1
mov dword [rbp + 0x570], ecx
jmp 0x14017ee07
mov r15, qword [rbp + 0x548]
jmp 0x14017e16a
mov rax, qword [rbp + 0x598]
mov qword [rax], rcx
mov qword [rax + 0x10], 2
mov rcx, rdi
call sub.KERNEL32.dll_CloseHandle
mov rcx, r14
call sub.KERNEL32.dll_CloseHandle
mov rcx, r12
call sub.KERNEL32.dll_CloseHandle
cmp dword [rbp + 0x410], 4
jb 0x140180ef0
mov rcx, qword [rbp + 0x418]
call sub.KERNEL32.dll_CloseHandle
cmp qword [rbp + 0x440], 0
mov r14, qword [rbp + 0x4d8]
mov r12, qword [rbp + 0x578]
je 0x140180f14
mov rcx, qword [rbp + 0x448]
call sub.KERNEL32.dll_CloseHandle
cmp qword [rbp + 0x450], 0
je 0x140180f2a
mov rcx, qword [rbp + 0x458]
call sub.KERNEL32.dll_CloseHandle
cmp qword [rbp + 0x460], 0
je 0x140180f40
mov rcx, qword [rbp + 0x468]
call sub.KERNEL32.dll_CloseHandle
mov rdi, qword [rbp + 0x558]
movzx eax, byte [rbp + 0x560]
test byte [rbp + 0x550], 1
je 0x140180f72
test al, al
jne 0x140180f93
mov rax, qword [0x1402a6170]
test qword [rbp + 0x4b0], rax
je 0x140180f93
call fcn.140159440
jmp 0x140180f8b
test al, al
jne 0x140180f93
mov rax, qword [0x1402a6170]
test qword [rbp + 0x4b0], rax
je 0x140180f93
call fcn.140159440
test al, al
jne 0x140180f93
mov byte [rdi + 1], 1
xor eax, eax
xchg byte [rdi], al
cmp al, 2
jne 0x140180fa3
mov rcx, rdi
call fcn.14019f318
cmp qword [rbp + 0x4d0], 0
je 0x140180fbe
mov edx, 2
mov rcx, qword [rbp + 0x4c0]
call fcn.14003fe40
test r12, r12
je 0x140180fd0
mov edx, 2
mov rcx, r14
call fcn.14003fe40
cmp qword [rbp + 0x498], 0
je 0x140180feb
mov rcx, qword [rbp + 0x4a0]
mov edx, 2
call fcn.14003fe40
cmp qword [rbp + 0x588], 0
je 0x140181006
mov edx, 2
mov rcx, qword [rbp + 0x580]
call fcn.14003fe40
cmp byte [rbp + 0x570], 0
je 0x14017e16a
xor esi, esi
jmp 0x14017f1cb
mov r13, rax
cmp qword [rbp + 0x4e0], 0
jne 0x14018097e
jmp 0x14018098f
mov r14, rsi
jmp 0x1401801db
call sub.KERNEL32.dll_GetLastError
shl rax, 0x20
or rax, 2
mov qword [rbp + 0x550], rax
lea rax, [rbp + 0x550]
mov qword [rbp + 0x440], rax
lea rax, [fcn.140178180]
mov qword [rbp + 0x448], rax
lea rax, str.comparing_environment_keys_failed:
mov qword [rbp + 0x4e0], rax
mov qword [rbp + 0x4e8], 1
mov qword [rbp + 0x500], 0
lea rax, [rbp + 0x440]
mov qword [rbp + 0x4f0], rax
mov qword [rbp + 0x4f8], 1
lea rdx, str.std_src_syspalwindowsprocess.rs
lea rcx, [rbp + 0x4e0]
call fcn.140068590
jmp 0x140181309
lea rcx, str._rustc_90b35a6239c3d8bdabc530a6a0816f7ff89a0aaflibrary_alloc_srccollections_btree_navigate.rs
call fcn.14006c350
jmp 0x140181309
lea r8, str.std_src_syspalwindowsos.rs
mov ecx, 1
xor edx, edx
call fcn.140068390
jmp 0x140181309
mov eax, 1
mov qword [rbp + 0x570], rax
mov rcx, qword [rbp + 0x570]
mov rdx, rsi
call fcn.14003a3fc
jmp 0x140181309
mov eax, 2
mov qword [rbp + 0x570], rax
mov rcx, qword [rbp + 0x570]
mov rdx, r14
call fcn.14003a3fc
jmp 0x140181309
mov eax, 1
mov qword [rbp + 0x570], rax
mov rcx, qword [rbp + 0x570]
mov rdx, rsi
call fcn.14003a3fc
jmp 0x140181309
lea rax, str.std_src_syspalwindowsos.rs
mov rcx, r8
mov rdx, r12
mov r8, rax
call fcn.140068dd0
jmp 0x140181309
lea r8, str.std_src_syspalwindowsos.rs
mov rcx, rsi
mov rdx, r12
call fcn.140068390
jmp 0x140181309
lea rcx, [0x14028560a]
lea r8, str.std_src_syspalwindowsmod.rsstrings_passed_to_WinAPI_cannot_contain_NULs
mov edx, 0x28
call fcn.140069290
jmp 0x140181309
lea rcx, str.assertion_failed:_self.height___0
lea r8, str._rustc_90b35a6239c3d8bdabc530a6a0816f7ff89a0aaflibrary_alloc_srccollections_btree_node.rsassertion_failed:_edge.height__self.height___1
mov edx, 0x21
call fcn.140069290
jmp 0x140181309
mov eax, 4
mov qword [rbp + 0x590], rax
mov ecx, 1
mov rdx, qword [rbp + 0x590]
call fcn.14003a3fc
jmp 0x140181309
lea rcx, [0x14028560a]
lea r8, str.std_src_syspalwindowsmod.rsstrings_passed_to_WinAPI_cannot_contain_NULs
mov edx, 0x28
call fcn.140069290
jmp 0x140181309
lea rcx, [0x14028560a]
lea r8, str.std_src_syspalwindowsmod.rsstrings_passed_to_WinAPI_cannot_contain_NULs
mov edx, 0x28
call fcn.140069290
jmp 0x140181309
lea rcx, [0x14028560a]
lea r8, str.std_src_syspalwindowsmod.rsstrings_passed_to_WinAPI_cannot_contain_NULs
mov edx, 0x28
call fcn.140069290
jmp 0x140181309
call sub.KERNEL32.dll_GetLastError
shl rax, 0x20
or rax, 2
mov qword [rbp + 0x440], rax
lea rax, [rbp + 0x440]
mov qword [rbp + 0x4e0], rax
lea rax, [fcn.140178180]
mov qword [rbp + 0x4e8], rax
lea rax, str.failure_getting_env_string_from_OS:
mov qword [rbp - 0x30], rax
mov qword [rbp - 0x28], 1
mov qword [rbp - 0x10], 0
lea rax, [rbp + 0x4e0]
mov qword [rbp - 0x20], rax
mov qword [rbp - 0x18], 1
lea rdx, str.std_src_syspalwindowsos.rs
lea rcx, [rbp - 0x30]
call fcn.140068590
jmp 0x140181309
xor ecx, ecx
jmp 0x1401811c2
lea rax, str.std_src_syspalwindowsmod.rsstrings_passed_to_WinAPI_cannot_contain_NULs
mov rcx, r8
mov rdx, r12
mov r8, rax
call fcn.140068dd0
jmp 0x140181309
lea r8, str.std_src_syspalwindowsmod.rsstrings_passed_to_WinAPI_cannot_contain_NULs
mov rcx, rsi
mov rdx, r12
call fcn.140068dd0
jmp 0x140181309
lea rax, str.std_src_syspalwindowsmod.rsstrings_passed_to_WinAPI_cannot_contain_NULs
mov rcx, r8
mov rdx, r13
mov r8, rax
call fcn.140068dd0
jmp 0x140181309
lea rax, str.std_src_syspalwindowsmod.rsstrings_passed_to_WinAPI_cannot_contain_NULs
mov rcx, r8
mov rdx, rbx
mov r8, rax
call fcn.140068dd0
jmp 0x140181309
mov ecx, 2
mov edx, 0x14
call fcn.14003a3fc
ud2