Function at 0x140003940
Capabilities:
Create thread
Download url
Enumerate processes
Execute command
Get disk information
Inject dll
Inject thread
Receive data
Set console window title

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
mov qword [rsp + 0x20], r12
push r13
push r14
push r15
sub rsp, 0x6b0
mov rax, qword [0x140010040]
xor rax, rsp
mov qword [rsp + 0x6a0], rax
xor ebx, ebx
mov r13d, ebx
mov dword [rsp + 0x48], ebx
lea rcx, str.SuperiorityLoader_Made_With_Love_By:_ae9412
call qword [sym.imp.KERNEL32.dll_SetConsoleTitleW]
lea rdx, str.
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.140006c90
lea rdx, [0x140006e70]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64___cdecl_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::operator___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64____cdecl___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64_____ptr64]
lea rdx, str._The_only_official_source_to_download
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.140006c90
lea rdx, [0x140006e70]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64___cdecl_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::operator___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64____cdecl___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64_____ptr64]
lea rdx, str._this_loader_is:
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.140006c90
lea rdx, [0x140006e70]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64___cdecl_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::operator___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64____cdecl___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64_____ptr64]
lea rdx, str._https:__vacban.wtf_threads_101100_
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.140006c90
lea rdx, [0x140006e70]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64___cdecl_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::operator___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64____cdecl___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64_____ptr64]
lea rdx, str._https:__github.com_DeepDevil51_superiorityloader_
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.140006c90
lea rdx, [0x140006e70]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64___cdecl_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::operator___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64____cdecl___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64_____ptr64]
lea rdx, str._If_you_downloaded_it_from_anywhere_else
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.140006c90
lea rdx, [0x140006e70]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64___cdecl_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::operator___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64____cdecl___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64_____ptr64]
lea rdx, str._Your_pc_most_likely_might_be_infected
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.140006c90
lea rdx, [0x140006e70]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64___cdecl_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::operator___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64____cdecl___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64_____ptr64]
lea rdx, str._with_malware_
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.140006c90
lea rdx, [0x140006e70]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64___cdecl_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::operator___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64____cdecl___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64_____ptr64]
lea rdx, str.
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.140006c90
lea rdx, [0x140006e70]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64___cdecl_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::operator___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64____cdecl___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64_____ptr64]
call fcn.1400020c0
lea rdx, str.Cleaning_up...
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.140006c90
lea rdx, [0x140006e70]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64___cdecl_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::operator___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64____cdecl___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64_____ptr64]
xorps xmm0, xmm0
movups xmmword [rsp + 0x140], xmm0
mov qword [rsp + 0x150], rbx
mov qword [rsp + 0x158], rbx
mov r8d, 0xe
lea rdx, str.RustClient.exe
lea rcx, [rsp + 0x140]
call fcn.140001430
lea rcx, [rsp + 0x140]
call fcn.140003810
mov rdx, qword [rsp + 0x158]
cmp rdx, 7
jbe 0x140003b79
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x140]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140003b74
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140003b74
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400089e4
xorps xmm0, xmm0
movups xmmword [rsp + 0x140], xmm0
mov qword [rsp + 0x150], rbx
mov qword [rsp + 0x158], rbx
mov r8d, 8
lea rdx, str.Rust.exe
lea rcx, [rsp + 0x140]
call fcn.140001430
lea rcx, [rsp + 0x140]
call fcn.140003810
mov rdx, qword [rsp + 0x158]
cmp rdx, 7
jbe 0x140003c06
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x140]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140003c01
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140003c01
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400089e4
xorps xmm0, xmm0
movups xmmword [rsp + 0x140], xmm0
mov qword [rsp + 0x150], rbx
mov qword [rsp + 0x158], rbx
mov r8d, 0x11
lea rdx, str.EasyAntiCheat.exe
lea rcx, [rsp + 0x140]
call fcn.140001430
lea rcx, [rsp + 0x140]
call fcn.140003810
mov rdx, qword [rsp + 0x158]
cmp rdx, 7
jbe 0x140003c93
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x140]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140003c8e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140003c8e
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400089e4
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x1a8], xmm1
mov qword [rsp + 0x1b8], rbx
movdqu xmmword [rsp + 0x190], xmm1
mov qword [rsp + 0x1a0], rbx
mov r15d, 0x41
mov r14d, 1
lea r12, [fcn.140002860]
nop dword [rax + rax]
xorps xmm0, xmm0
movups xmmword [rsp + 0x1c0], xmm0
mov qword [rsp + 0x1d8], 7
mov word [rsp + 0x1c0], r15w
mov word [rsp + 0x1c2], bx
mov qword [rsp + 0x1d0], 3
lea rcx, [rsp + 0x1c0]
mov eax, dword [0x14000b4cc]
mov dword [rcx + 2], eax
mov word [rcx + 6], bx
lea rax, [rsp + 0x1c0]
movups xmmword [rsp + 0x140], xmm0
mov qword [rsp + 0x150], rbx
mov qword [rsp + 0x158], rbx
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x140], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x150], xmm1
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], 7
mov word [rax], bx
or r13d, 1
mov rdx, qword [rsp + 0x1d8]
cmp rdx, 7
jbe 0x140003dae
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x1c0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140003da9
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140003da9
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400089e4
mov qword [rsp + 0x1d0], rbx
mov qword [rsp + 0x1d8], 7
mov word [rsp + 0x1c0], bx
lea rcx, [rsp + 0x140]
cmp qword [rsp + 0x158], 7
cmova rcx, qword [rsp + 0x140]
call qword [sym.imp.KERNEL32.dll_GetDriveTypeW]
cmp eax, 3
jne 0x140003ec4
lea rax, [rsp + 0x1a8]
mov qword [rsp + 0x50], rax
mov rsi, qword [rsp + 0x198]
cmp rsi, qword [rsp + 0x1a0]
je 0x140003ea2
mov ecx, 0x30
call fcn.140008760
mov rdi, rax
mov qword [rsp + 0x160], rax
lea rax, [rsp + 0x1a8]
mov qword [rdi], rax
lea rcx, [rdi + 8]
lea rdx, [rsp + 0x140]
call fcn.140006690
mov qword [rdi + 0x28], r12
mov qword [rsp + 0x240], rdi
or r13d, 2
lea r12, [rsi + 8]
mov qword [rsp + 0x28], r12
mov dword [rsp + 0x20], ebx
mov r9, rdi
lea r8, [0x140008630]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rsi], rax
test rax, rax
je 0x140003e92
add qword [rsp + 0x198], 0x10
lea r12, [fcn.140002860]
jmp 0x140003ec4
mov dword [r12], ebx
mov ecx, 6
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
lea rax, [rsp + 0x50]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x140]
mov rdx, rsi
lea rcx, [rsp + 0x190]
call fcn.140007e80
inc r15w
mov rdx, qword [rsp + 0x158]
cmp rdx, 7
jbe 0x140003f13
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x140]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140003f0e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140003f0e
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400089e4
cmp r15w, 0x5a
jbe 0x140003cd0
mov rdi, qword [rsp + 0x190]
mov rsi, qword [rsp + 0x198]
cmp rdi, rsi
je 0x140003f7e
cmp dword [rdi + 8], 0
je 0x140004019
call qword [sym.imp.MSVCP140.dll__Thrd_id]
cmp dword [rdi + 8], eax
je 0x14000400d
movups xmm0, xmmword [rdi]
movaps xmmword [rsp + 0x220], xmm0
xor edx, edx
lea rcx, [rsp + 0x220]
call qword [sym.imp.MSVCP140.dll__Thrd_join]
test eax, eax
jne 0x140004001
xorps xmm0, xmm0
movups xmmword [rdi], xmm0
add rdi, 0x10
cmp rdi, rsi
jne 0x140003f33
lea rdx, [rsp + 0x1a8]
lea rcx, [rsp + 0x1c0]
call fcn.140003280
nop
mov rdi, qword [rsp + 0x1d0]
test rdi, rdi
je 0x1400057f4
xorps xmm0, xmm0
movups xmmword [rsp + 0x1e0], xmm0
mov qword [rsp + 0x1f0], rbx
mov qword [rsp + 0x1f8], rbx
lea rax, [rsp + 0x1c0]
mov r12, qword [rsp + 0x1c0]
mov qword [rsp + 0x50], r12
cmp qword [rsp + 0x1d8], 7
cmova rax, r12
mov qword [rsp + 0x40], rax
movabs rsi, 0x7ffffffffffffffe
mov qword [rsp + 0x48], rsi
cmp rdi, rsi
ja 0x1400059cc
jmp 0x140004023
mov ecx, 2
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3
mov ecx, 5
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3
mov ecx, r14d
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
movabs r13, 0x7fffffffffffffff
cmp rdi, 7
ja 0x140004062
mov qword [rsp + 0x1f0], rdi
mov esi, 7
mov qword [rsp + 0x48], rsi
mov qword [rsp + 0x1f8], rsi
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x1e0], xmm0
movq r15, xmm0
jmp 0x14000410f
mov rcx, rdi
or rcx, 7
cmp rcx, rsi
jbe 0x1400040a7
lea rcx, [r13*2]
cmp rcx, 0x1000
jb 0x1400040d9
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x1400059d2
mov rcx, rax
call fcn.140008760
test rax, rax
je 0x1400040d2
lea r15, [rax + 0x27]
and r15, 0xffffffffffffffe0
mov qword [r15 - 8], rax
jmp 0x1400040e1
mov rsi, rcx
mov eax, 0xa
cmp rcx, rax
cmovb rsi, rax
mov qword [rsp + 0x48], rsi
lea rcx, [rsi + 1]
cmp rcx, r13
ja 0x1400059d2
add rcx, rcx
jne 0x140004076
mov r15, rbx
jmp 0x1400040e1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140008760
mov r15, rax
mov qword [rsp + 0x1e0], r15
mov qword [rsp + 0x1f0], rdi
mov qword [rsp + 0x1f8], rsi
lea r8, [rdi*2 + 2]
mov rdx, qword [rsp + 0x40]
mov rcx, r15
call sub.VCRUNTIME140.dll_memcpy
nop
xorps xmm0, xmm0
movups xmmword [rsp + 0x170], xmm0
mov qword [rsp + 0x180], rbx
mov qword [rsp + 0x188], 7
mov word [rsp + 0x170], bx
nop word [rax + rax]
lea rdx, str.Select_DLL_to_inject:
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.140006c90
lea rdx, [0x140006e70]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64___cdecl_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::operator___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64____cdecl___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64_____ptr64]
lea rdx, str.1._Superiority
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.140006c90
lea rdx, [0x140006e70]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64___cdecl_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::operator___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64____cdecl___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64_____ptr64]
lea rdx, str.2._Custom_DLL
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.140006c90
lea rdx, [0x140006e70]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64___cdecl_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::operator___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64____cdecl___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64_____ptr64]
lea rdx, str.Enter_your_choice:
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.140006c90
xorps xmm0, xmm0
movups xmmword [rsp + 0x200], xmm0
mov qword [rsp + 0x210], rbx
mov qword [rsp + 0x218], 7
mov word [rsp + 0x200], bx
mov rdi, qword [sym.imp.MSVCP140.dll_class_std::basic_istream_wchar_t__struct_std::char_traits_wchar_t___std::wcin]
mov rax, qword [rdi]
movsxd rcx, dword [rax + 4]
add rcx, rdi
mov dl, 0xa
call qword [sym.imp.MSVCP140.dll_public:_wchar_t___cdecl_std::basic_ios_wchar_t__struct_std::char_traits_wchar_t__::widen_char_const___ptr64]
movzx r8d, ax
lea rdx, [rsp + 0x200]
mov rcx, rdi
call fcn.1400079c0
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__errno]
mov rsi, rax
lea rdi, [rsp + 0x200]
cmp qword [rsp + 0x218], 7
cmova rdi, qword [rsp + 0x200]
mov dword [rax], ebx
mov r8d, 0xa
lea rdx, [rsp + 0x98]
mov rcx, rdi
call qword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll_wcstol]
cmp rdi, qword [rsp + 0x98]
jne 0x140004264
lea rcx, str.invalid_stoi_argument
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Xinvalid_argument_char_const____ptr64_]
cmp dword [rsi], 0x22
jne 0x140004276
lea rcx, str.stoi_argument_out_of_range
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Xout_of_range_char_const____ptr64_]
cmp eax, 1
jne 0x140004754
xorps xmm0, xmm0
movups xmmword [rsp + 0x140], xmm0
mov qword [rsp + 0x150], rbx
mov qword [rsp + 0x158], rbx
mov r8d, 0x4e
lea rdx, str.https:__github.com_DeepDevil51_superiorityloader_raw_main_superiority_RUST.dll
lea rcx, [rsp + 0x140]
call fcn.140001430
nop
lea r8, str._superiority_RUST.dll
lea rdx, [rsp + 0x1e0]
lea rcx, [rsp + 0x78]
call fcn.140006eb0
mov rdi, rax
lea rax, [rsp + 0x170]
cmp rax, rdi
je 0x14000436c
mov rdx, qword [rsp + 0x188]
cmp rdx, 7
jbe 0x14000432a
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x170]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140004325
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400043a8
call fcn.1400089e4
mov qword [rsp + 0x180], rbx
mov qword [rsp + 0x188], 7
mov word [rsp + 0x170], bx
movups xmm0, xmmword [rdi]
movups xmmword [rsp + 0x170], xmm0
movups xmm1, xmmword [rdi + 0x10]
movups xmmword [rsp + 0x180], xmm1
mov qword [rdi + 0x10], rbx
mov qword [rdi + 0x18], 7
mov word [rdi], bx
mov rdx, qword [rsp + 0x90]
cmp rdx, 7
jbe 0x1400043b4
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x78]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400043af
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400043af
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400089e4
lea r8, [rsp + 0x170]
cmp qword [rsp + 0x188], 7
cmova r8, qword [rsp + 0x170]
lea rdx, [rsp + 0x140]
cmp qword [rsp + 0x158], 7
cmova rdx, qword [rsp + 0x140]
mov qword [rsp + 0x20], rbx
xor r9d, r9d
xor ecx, ecx
call qword [sym.imp.urlmon.dll_URLDownloadToFileW]
test eax, eax
jns 0x140004734
lea rdx, str.Failed_to_get_Superiority
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.140006c90
lea rdx, [0x140006e70]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64___cdecl_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::operator___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64____cdecl___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64_____ptr64]
lea rcx, [rsp + 0x240]
call fcn.140001330
mov rax, qword [rsp + 0x240]
mov qword [rsp + 0x48], rax
movabs rdx, 0x7fffffff88ca6bff
cmp rax, rdx
je 0x140004468
mov ecx, r14d
mov esi, 0xff
cmovl ecx, esi
test cl, cl
jns 0x140004468
add rax, 0x77359400
mov qword [rsp + 0x48], rax
jmp 0x14000446d
mov qword [rsp + 0x48], r13
lea rcx, [rsp + 0x48]
call fcn.140007d40
nop
mov rdx, qword [rsp + 0x158]
cmp rdx, 7
jbe 0x1400044c3
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x140]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400044be
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400044be
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400089e4
mov qword [rsp + 0x150], rbx
mov qword [rsp + 0x158], 7
mov word [rsp + 0x140], bx
mov rdx, qword [rsp + 0x218]
cmp rdx, 7
jbe 0x14000452a
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x200]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140004525
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140004525
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400089e4
mov qword [rsp + 0x210], rbx
mov qword [rsp + 0x218], 7
mov word [rsp + 0x200], bx
lea rcx, [rsp + 0x170]
call fcn.140006620
nop
mov rdx, qword [rsp + 0x1f8]
cmp rdx, 7
jbe 0x14000459f
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x1e0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000459a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000459a
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400089e4
mov qword [rsp + 0x1f0], rbx
mov qword [rsp + 0x1f8], 7
mov word [rsp + 0x1e0], bx
mov rax, qword [rsp + 0x1d8]
cmp rax, 7
jbe 0x140004602
lea rdx, [rax*2 + 2]
mov rax, r12
cmp rdx, 0x1000
jb 0x1400045fa
add rdx, 0x27
mov r12, qword [r12 - 8]
sub rax, r12
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400045fa
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, r12
call fcn.1400089e4
mov qword [rsp + 0x1d0], rbx
mov qword [rsp + 0x1d8], 7
mov word [rsp + 0x1c0], bx
mov rcx, qword [rsp + 0x190]
test rcx, rcx
je 0x1400046a6
mov rax, rcx
mov rdx, qword [rsp + 0x198]
cmp rcx, rdx
je 0x14000464f
nop dword [rax + rax]
cmp dword [rax + 8], 0
jne 0x140004686
add rax, 0x10
cmp rax, rdx
jne 0x140004640
mov rdx, qword [rsp + 0x1a0]
sub rdx, rcx
and rdx, 0xfffffffffffffff0
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000468d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000468d
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_terminate]
int3
call fcn.1400089e4
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x190], xmm0
mov qword [rsp + 0x1a0], rbx
mov rdi, qword [rsp + 0x1a8]
test rdi, rdi
je 0x14000472c
mov rsi, qword [rsp + 0x1b0]
cmp rdi, rsi
je 0x1400046d9
mov rcx, rdi
call fcn.1400031c0
add rdi, 0x40
cmp rdi, rsi
jne 0x1400046c0
mov rdi, qword [rsp + 0x1a8]
mov rdx, qword [rsp + 0x1b8]
sub rdx, rdi
and rdx, 0xffffffffffffffc0
mov rax, rdi
cmp rdx, 0x1000
jb 0x140004710
add rdx, 0x27
mov rdi, qword [rdi - 8]
sub rax, rdi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140004710
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, rdi
call fcn.1400089e4
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x1a8], xmm0
mov qword [rsp + 0x1b8], rbx
mov eax, r14d
jmp 0x14000599a
lea rcx, [rsp + 0x140]
call fcn.140006620
nop
lea rcx, [rsp + 0x200]
call fcn.140006620
jmp 0x140004c38
cmp eax, 2
jne 0x140005746
xor edx, edx
mov r8d, 0x208
lea rcx, [rsp + 0x490]
call sub.VCRUNTIME140.dll_memset
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rsp + 0xa0], xmm0
movups xmmword [rsp + 0xb0], xmm0
movups xmmword [rsp + 0xc0], xmm0
movups xmmword [rsp + 0xd0], xmm0
movups xmmword [rsp + 0xe0], xmm0
movups xmmword [rsp + 0xf0], xmm0
movups xmmword [rsp + 0x100], xmm0
movups xmmword [rsp + 0x110], xmm0
movups xmmword [rsp + 0x120], xmm0
mov qword [rsp + 0x130], rax
mov dword [rsp + 0xa0], 0x98
mov qword [rsp + 0xa8], rbx
lea rax, str.DLL_Files
mov qword [rsp + 0xb8], rax
lea rax, [rsp + 0x490]
mov qword [rsp + 0xd0], rax
mov dword [rsp + 0xd8], 0x104
mov dword [rsp + 0x100], 0x1800
lea rax, [0x14000b1a8]
mov qword [rsp + 0x108], rax
lea rcx, [rsp + 0xa0]
call qword [sym.imp.COMDLG32.dll_GetOpenFileNameW]
xorps xmm0, xmm0
mov qword [rsp + 0x150], rbx
mov qword [rsp + 0x158], rbx
movups xmmword [rsp + 0x140], xmm0
test eax, eax
je 0x140004882
lea rax, [rsp + 0x490]
mov r8, 0xffffffffffffffff
nop word [rax + rax]
inc r8
cmp word [rax + r8*2], 0
jne 0x140004860
lea rdx, [rsp + 0x490]
lea rcx, [rsp + 0x140]
call fcn.140001430
jmp 0x140004899
xor r8d, r8d
lea rdx, [0x14000a944]
lea rcx, [rsp + 0x140]
call fcn.140001430
mov rdx, qword [rsp + 0x188]
cmp rdx, 7
jbe 0x1400048e4
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x170]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400048df
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400048df
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400089e4
movups xmm0, xmmword [rsp + 0x140]
movups xmmword [rsp + 0x170], xmm0
movups xmm1, xmmword [rsp + 0x150]
movups xmmword [rsp + 0x180], xmm1
movq rax, xmm1
test rax, rax
jne 0x140004c2b
lea rdx, str.No_DLL_was_selected__exiting
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.140006c90
lea rdx, [0x140006e70]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64___cdecl_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::operator___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64____cdecl___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64_____ptr64]
lea rcx, [rsp + 0x160]
call fcn.140001330
mov rax, qword [rsp + 0x160]
mov qword [rsp + 0x40], rax
movabs rdx, 0x7fffffff88ca6bff
cmp rax, rdx
je 0x14000497a
mov ecx, r14d
mov esi, 0xff
cmovl ecx, esi
test cl, cl
jns 0x14000497a
add rax, 0x77359400
mov qword [rsp + 0x40], rax
jmp 0x14000497f
mov qword [rsp + 0x40], r13
lea rcx, [rsp + 0x40]
call fcn.140007d40
nop
mov rdx, qword [rsp + 0x218]
cmp rdx, 7
jbe 0x1400049d5
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x200]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400049d0
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400049d0
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400089e4
mov qword [rsp + 0x210], rbx
mov qword [rsp + 0x218], 7
mov word [rsp + 0x200], bx
mov rdx, qword [rsp + 0x188]
cmp rdx, 7
jbe 0x140004a3c
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x170]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140004a37
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140004a37
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400089e4
mov qword [rsp + 0x180], rbx
mov qword [rsp + 0x188], 7
mov word [rsp + 0x170], bx
mov rdx, qword [rsp + 0x48]
cmp rdx, 7
jbe 0x140004a9b
lea rdx, [rdx*2 + 2]
mov rax, r15
cmp rdx, 0x1000
jb 0x140004a93
add rdx, 0x27
mov r15, qword [r15 - 8]
sub rax, r15
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140004a93
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, r15
call fcn.1400089e4
mov qword [rsp + 0x1f0], rbx
mov qword [rsp + 0x1f8], 7
mov word [rsp + 0x1e0], bx
mov rax, qword [rsp + 0x1d8]
cmp rax, 7
jbe 0x140004afe
lea rdx, [rax*2 + 2]
mov rax, r12
cmp rdx, 0x1000
jb 0x140004af6
add rdx, 0x27
mov r12, qword [r12 - 8]
sub rax, r12
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140004af6
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, r12
call fcn.1400089e4
mov qword [rsp + 0x1d0], rbx
mov qword [rsp + 0x1d8], 7
mov word [rsp + 0x1c0], bx
mov rcx, qword [rsp + 0x190]
test rcx, rcx
je 0x140004b9d
mov rax, rcx
mov rdx, qword [rsp + 0x198]
cmp rcx, rdx
je 0x140004b46
cmp dword [rax + 8], 0
jne 0x140004b7d
add rax, 0x10
cmp rax, rdx
jne 0x140004b37
mov rdx, qword [rsp + 0x1a0]
sub rdx, rcx
and rdx, 0xfffffffffffffff0
mov rax, rcx
cmp rdx, 0x1000
jb 0x140004b84
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140004b84
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_terminate]
int3
call fcn.1400089e4
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x190], xmm0
mov qword [rsp + 0x1a0], rbx
mov rdi, qword [rsp + 0x1a8]
test rdi, rdi
je 0x140004c23
mov rsi, qword [rsp + 0x1b0]
cmp rdi, rsi
je 0x140004bd0
mov rcx, rdi
call fcn.1400031c0
add rdi, 0x40
cmp rdi, rsi
jne 0x140004bb7
mov rdi, qword [rsp + 0x1a8]
mov rdx, qword [rsp + 0x1b8]
sub rdx, rdi
and rdx, 0xffffffffffffffc0
mov rax, rdi
cmp rdx, 0x1000
jb 0x140004c07
add rdx, 0x27
mov rdi, qword [rdi - 8]
sub rax, rdi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140004c07
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, rdi
call fcn.1400089e4
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x1a8], xmm0
mov qword [rsp + 0x1b8], rbx
mov eax, r14d
jmp 0x14000599a
lea rcx, [rsp + 0x200]
call fcn.140006620
lea r8, [rsp + 0x1e0]
lea rcx, [rsp + 0x78]
call fcn.1400070c0
mov rdi, rax
mov rcx, qword [rax + 0x10]
mov rdx, qword [rax + 0x18]
mov rax, rdx
sub rax, rcx
cmp rax, 0x18
jb 0x140004c92
lea r15, [rcx + 0x18]
mov qword [rdi + 0x10], r15
mov rsi, rdi
cmp rdx, 7
jbe 0x140004c75
mov rsi, qword [rdi]
lea rcx, [rsi + rcx*2]
mov r8d, 0x30
lea rdx, str.___start_____Rust.exe_
call sub.VCRUNTIME140.dll_memmove
mov word [rsi + r15*2], bx
jmp 0x140004cb2
mov qword [rsp + 0x20], 0x18
lea r9, str.___start_____Rust.exe_
mov edx, 0x18
mov rcx, rdi
call fcn.1400077d0
mov rdi, rax
xorps xmm0, xmm0
movups xmmword [rsp + 0x140], xmm0
mov qword [rsp + 0x150], rbx
mov qword [rsp + 0x158], rbx
movups xmm0, xmmword [rdi]
movups xmmword [rsp + 0x140], xmm0
movups xmm1, xmmword [rdi + 0x10]
movups xmmword [rsp + 0x150], xmm1
mov qword [rdi + 0x10], rbx
mov qword [rdi + 0x18], 7
mov word [rdi], bx
lea rcx, [rsp + 0x140]
cmp qword [rsp + 0x158], 7
cmova rcx, qword [rsp + 0x140]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wsystem]
mov rdx, qword [rsp + 0x158]
cmp rdx, 7
jbe 0x140004d5e
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x140]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140004d59
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140004d59
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400089e4
mov qword [rsp + 0x150], rbx
mov qword [rsp + 0x158], 7
mov word [rsp + 0x140], bx
mov rdx, qword [rsp + 0x90]
cmp rdx, 7
jbe 0x140004dd3
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x78]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140004dbd
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140004dbd
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400089e4
lea rcx, [rsp + 0x40]
call fcn.140001330
mov rax, qword [rsp + 0x40]
jmp 0x140004de7
lea rcx, [rsp + 0x40]
call fcn.140001330
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x40], rax
movabs rdx, 0x7ffffffed5fa0dff
mov esi, 0xff
cmp rax, rdx
je 0x140004e19
mov ecx, r14d
cmovl ecx, esi
test cl, cl
jns 0x140004e19
movabs rcx, 0x12a05f200
add rcx, rax
mov qword [rsp + 0x40], rcx
jmp 0x140004e1e
mov qword [rsp + 0x40], r13
lea rcx, [rsp + 0x40]
call fcn.140007d40
lea r8, [rsp + 0x1e0]
lea rcx, [rsp + 0x78]
call fcn.1400070c0
mov rdi, rax
mov rcx, qword [rax + 0x10]
mov rdx, qword [rax + 0x18]
mov rax, rdx
sub rax, rcx
cmp rax, 0x1e
jb 0x140004e82
lea r12, [rcx + 0x1e]
mov qword [rdi + 0x10], r12
mov r15, rdi
cmp rdx, 7
jbe 0x140004e65
mov r15, qword [rdi]
lea rcx, [r15 + rcx*2]
mov r8d, 0x3c
lea rdx, str.___start_____RustClient.exe_
call sub.VCRUNTIME140.dll_memmove
mov word [r15 + r12*2], bx
jmp 0x140004ea2
mov qword [rsp + 0x20], 0x1e
lea r9, str.___start_____RustClient.exe_
mov edx, 0x1e
mov rcx, rdi
call fcn.1400077d0
mov rdi, rax
xorps xmm0, xmm0
movups xmmword [rsp + 0x140], xmm0
mov qword [rsp + 0x150], rbx
mov qword [rsp + 0x158], rbx
movups xmm0, xmmword [rdi]
movups xmmword [rsp + 0x140], xmm0
movups xmm1, xmmword [rdi + 0x10]
movups xmmword [rsp + 0x150], xmm1
mov qword [rdi + 0x10], rbx
mov qword [rdi + 0x18], 7
mov word [rdi], bx
lea rcx, [rsp + 0x140]
cmp qword [rsp + 0x158], 7
cmova rcx, qword [rsp + 0x140]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wsystem]
mov rdx, qword [rsp + 0x158]
cmp rdx, 7
jbe 0x140004f4e
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x140]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140004f49
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140004f49
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400089e4
mov qword [rsp + 0x150], rbx
mov qword [rsp + 0x158], 7
mov word [rsp + 0x140], bx
mov rdx, qword [rsp + 0x90]
cmp rdx, 7
jbe 0x140004fb2
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x78]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140004fad
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140004fad
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400089e4
mov ecx, 0x28
call fcn.140008760
mov rdi, rax
mov qword [rsp + 0x160], rax
lea rdx, [rsp + 0x1e0]
mov rcx, rax
call fcn.140006690
lea rax, [0x140003750]
mov qword [rdi + 0x20], rax
mov qword [rsp + 0x160], rdi
lea rax, [rsp + 0x228]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], ebx
mov r9, rdi
lea r8, [0x140008460]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rsp + 0x220], rax
test rax, rax
je 0x140005733
cmp dword [rsp + 0x228], 0
je 0x140005729
movaps xmm0, xmmword [rsp + 0x220]
movdqa xmmword [rsp + 0x160], xmm0
lea rcx, [rsp + 0x160]
call qword [sym.imp.MSVCP140.dll__Thrd_detach]
test eax, eax
jne 0x140005729
xorps xmm0, xmm0
movdqa xmmword [rsp + 0x220], xmm0
lea rcx, [rsp + 0x160]
call fcn.140001330
mov rax, qword [rsp + 0x160]
mov qword [rsp + 0x40], rax
movabs rdx, 0x7ffffffc81ee29ff
cmp rax, rdx
je 0x1400050a8
mov ecx, r14d
cmovl ecx, esi
test cl, cl
jns 0x1400050a8
movabs rcx, 0x37e11d600
add rcx, rax
mov qword [rsp + 0x40], rcx
jmp 0x1400050ad
mov qword [rsp + 0x40], r13
lea rcx, [rsp + 0x40]
call fcn.140007d40
lea rdx, str.Injecting...
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.140006c90
lea rdx, [0x140006e70]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64___cdecl_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::operator___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64____cdecl___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64_____ptr64]
mov ecx, 8
call fcn.140008760
lea rcx, [0x140003700]
mov qword [rax], rcx
mov qword [rsp + 0x160], rax
lea rcx, [rsp + 0x238]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], ebx
mov r9, rax
lea r8, [0x1400084e0]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rsp + 0x230], rax
test rax, rax
je 0x140005716
cmp dword [rsp + 0x238], 0
je 0x14000570c
movaps xmm0, xmmword [rsp + 0x230]
movdqa xmmword [rsp + 0x160], xmm0
lea rcx, [rsp + 0x160]
call qword [sym.imp.MSVCP140.dll__Thrd_detach]
test eax, eax
jne 0x14000570c
xorps xmm0, xmm0
movdqa xmmword [rsp + 0x230], xmm0
lea rcx, [rsp + 0x160]
call fcn.140001330
mov rax, qword [rsp + 0x160]
mov qword [rsp + 0x40], rax
movabs rdx, 0x7fffffffc46535ff
cmp rax, rdx
je 0x1400051ad
mov ecx, r14d
cmovl ecx, esi
test cl, cl
jns 0x1400051ad
add rax, 0x3b9aca00
mov qword [rsp + 0x40], rax
jmp 0x1400051b2
mov qword [rsp + 0x40], r13
lea rcx, [rsp + 0x40]
call fcn.140007d40
xorps xmm0, xmm0
movups xmmword [rsp + 0x58], xmm0
mov qword [rsp + 0x68], rbx
mov qword [rsp + 0x70], rbx
mov r8d, 0xe
lea rdx, str.RustClient.exe
lea rcx, [rsp + 0x58]
call fcn.140001430
xor edx, edx
mov ecx, 2
call qword [sym.imp.KERNEL32.dll_CreateToolhelp32Snapshot]
mov r13, rax
cmp rax, 0xffffffffffffffff
jne 0x14000520d
mov r15d, ebx
mov r12, qword [rsp + 0x70]
mov rdi, qword [rsp + 0x58]
jmp 0x1400052d5
mov dword [rsp + 0x250], 0x238
lea rdx, [rsp + 0x250]
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_Process32FirstW]
test eax, eax
jne 0x140005248
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov r15d, ebx
mov r12, qword [rsp + 0x70]
mov rdi, qword [rsp + 0x58]
jmp 0x1400052d5
mov r15d, ebx
mov r12, qword [rsp + 0x70]
mov rdi, qword [rsp + 0x58]
mov rcx, qword [rsp + 0x68]
lea rdx, [rsp + 0x27c]
mov rax, 0xffffffffffffffff
nop dword [rax]
inc rax
cmp word [rdx + rax*2], 0
jne 0x140005270
lea r8, [rsp + 0x58]
cmp r12, 7
cmova r8, rdi
cmp rcx, rax
jne 0x14000530b
mov rdx, rcx
lea rcx, [rsp + 0x27c]
test rdx, rdx
je 0x1400052c4
lea rax, [rsp + 0x27c]
sub r8, rax
nop word [rax + rax]
movzx eax, word [rcx + r8]
cmp ax, word [rcx]
jne 0x14000530b
add rcx, 2
sub rdx, 1
jne 0x1400052b0
mov r15d, dword [rsp + 0x258]
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_CloseHandle]
cmp r12, 7
jbe 0x14000532d
lea rdx, [r12*2 + 2]
mov rax, rdi
cmp rdx, 0x1000
jb 0x140005325
add rdx, 0x27
mov rdi, qword [rdi - 8]
sub rax, rdi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140005325
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
lea rdx, [rsp + 0x250]
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_Process32NextW]
test eax, eax
je 0x1400052cc
jmp 0x140005255
mov rcx, rdi
call fcn.1400089e4
test r15d, r15d
je 0x1400054ea
mov r8d, r15d
xor edx, edx
mov ecx, 0x1fffff
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov rdi, rax
test rax, rax
je 0x14000549f
lea rcx, str.kernel32.dll
call qword [sym.imp.KERNEL32.dll_GetModuleHandleW]
mov rcx, rax
lea rdx, str.LoadLibraryW
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov r12, rax
test rax, rax
je 0x140005496
mov r8, qword [rsp + 0x180]
lea r8, [r8*2 + 2]
mov dword [rsp + 0x20], 4
xor edx, edx
mov r9d, 0x1000
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_VirtualAllocEx]
mov r15, rax
test rax, rax
je 0x140005496
mov rcx, qword [rsp + 0x180]
lea r9, [rcx*2 + 2]
lea r8, [rsp + 0x170]
cmp qword [rsp + 0x188], 7
cmova r8, qword [rsp + 0x170]
mov qword [rsp + 0x20], rbx
mov rdx, rax
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
test eax, eax
je 0x140005481
mov qword [rsp + 0x30], rbx
mov dword [rsp + 0x28], ebx
mov qword [rsp + 0x20], r15
mov r9, r12
xor r8d, r8d
xor edx, edx
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_CreateRemoteThread]
mov r12, rax
test rax, rax
je 0x140005481
mov edx, 0xffffffff
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov r9d, 0x8000
xor r8d, r8d
mov rdx, r15
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_VirtualFreeEx]
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea rdx, str.Injection_was_successful
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.140006c90
lea rdx, [0x140006e70]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64___cdecl_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::operator___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64____cdecl___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64_____ptr64]
movabs rdi, 0x7fffffffffffffff
jmp 0x140005570
mov r9d, 0x8000
xor r8d, r8d
mov rdx, r15
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_VirtualFreeEx]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea rdx, str.Failed_to_inject_DLL
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.140006c90
lea rdx, [0x140006e70]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64___cdecl_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::operator___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64____cdecl___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64_____ptr64]
mov qword [rsp + 0x160], 2
lea rcx, [rsp + 0x160]
call fcn.140007030
movabs rdi, 0x7fffffffffffffff
jmp 0x140005570
lea rdx, str.RustClient.exe_process_not_found
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.140006c90
lea rdx, [0x140006e70]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64___cdecl_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::operator___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64____cdecl___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64_____ptr64]
lea rcx, [rsp + 0x160]
call fcn.140001330
mov rax, qword [rsp + 0x160]
mov qword [rsp + 0x40], rax
movabs rdx, 0x7fffffff88ca6bff
cmp rax, rdx
je 0x140005557
mov ecx, r14d
cmovl ecx, esi
test cl, cl
jns 0x140005557
add rax, 0x77359400
mov qword [rsp + 0x40], rax
movabs rdi, 0x7fffffffffffffff
jmp 0x140005566
movabs rdi, 0x7fffffffffffffff
mov qword [rsp + 0x40], rdi
lea rcx, [rsp + 0x40]
call fcn.140007d40
lea rdx, str.The_Loader_will_close_after_1_minute.
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.140006c90
lea rdx, [0x140006e70]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64___cdecl_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::operator___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64____cdecl___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64_____ptr64]
lea rcx, [rsp + 0x160]
call fcn.140001330
mov rax, qword [rsp + 0x160]
mov qword [rsp + 0x40], rax
movabs rcx, 0x7ffffff207b8a7ff
cmp rax, rcx
je 0x1400055d9
cmovl r14d, esi
test r14b, r14b
jns 0x1400055d9
movabs rcx, 0xdf8475800
add rcx, rax
mov qword [rsp + 0x40], rcx
jmp 0x1400055de
mov qword [rsp + 0x40], rdi
lea rcx, [rsp + 0x40]
call fcn.140007d40
nop
cmp dword [rsp + 0x238], 0
je 0x1400055fa
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_terminate]
nop
cmp dword [rsp + 0x228], 0
je 0x14000560b
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_terminate]
nop
mov rdx, qword [rsp + 0x188]
cmp rdx, 7
jbe 0x140005656
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x170]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140005651
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140005651
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400089e4
mov qword [rsp + 0x180], rbx
mov qword [rsp + 0x188], 7
mov word [rsp + 0x170], bx
mov rdx, qword [rsp + 0x1f8]
cmp rdx, 7
jbe 0x1400056bd
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x1e0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400056b8
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400056b8
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400089e4
mov rcx, qword [rsp + 0x50]
mov rdx, qword [rsp + 0x1d8]
cmp rdx, 7
jbe 0x14000589c
lea rdx, [rdx*2 + 2]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140005896
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140005896
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
mov ecx, r14d
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
mov dword [rsp + 0x238], ebx
mov ecx, 6
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
mov ecx, r14d
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
mov dword [rsp + 0x228], ebx
mov ecx, 6
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
lea rdx, str.Invalid_selection
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.140006c90
lea rdx, [0x140006e70]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64___cdecl_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::operator___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64____cdecl___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64_____ptr64]
nop
jmp 0x1400057a0
mov rdx, qword [rsp + 0x218]
cmp rdx, 7
jbe 0x140004140
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x200]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400057ea
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400057ea
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400089e4
jmp 0x140004140
lea rdx, str.Rust_path_is_not_provided._Exiting.
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.140006c90
lea rdx, [0x140006e70]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64___cdecl_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::operator___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64____cdecl___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64_____ptr64]
lea rcx, [rsp + 0x160]
call fcn.140001330
mov rax, qword [rsp + 0x160]
mov qword [rsp + 0x40], rax
movabs rdx, 0x7fffffff88ca6bff
cmp rax, rdx
je 0x140005870
mov esi, 0xff
cmovl r14d, esi
test r14b, r14b
jns 0x140005870
add rax, 0x77359400
mov qword [rsp + 0x40], rax
lea rcx, [rsp + 0x40]
call fcn.140007d40
mov rcx, qword [rsp + 0x1c0]
jmp 0x1400056c2
movabs rdi, 0x7fffffffffffffff
mov qword [rsp + 0x40], rdi
lea rcx, [rsp + 0x40]
call fcn.140007d40
mov rcx, qword [rsp + 0x1c0]
jmp 0x1400056c2
call fcn.1400089e4
nop
mov rcx, qword [rsp + 0x190]
test rcx, rcx
je 0x140005926
mov rax, rcx
mov rdx, qword [rsp + 0x198]
cmp rcx, rdx
je 0x1400058cf
nop dword [rax]
cmp dword [rax + 8], 0
jne 0x140005906
add rax, 0x10
cmp rax, rdx
jne 0x1400058c0
mov rdx, qword [rsp + 0x1a0]
sub rdx, rcx
and rdx, 0xfffffffffffffff0
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000590d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000590d
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_terminate]
int3
call fcn.1400089e4
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x190], xmm0
mov qword [rsp + 0x1a0], rbx
mov rbx, qword [rsp + 0x1a8]
test rbx, rbx
je 0x140005998
mov rdi, qword [rsp + 0x1b0]
cmp rbx, rdi
je 0x140005959
mov rcx, rbx
call fcn.1400031c0
add rbx, 0x40
cmp rbx, rdi
jne 0x140005940
mov rbx, qword [rsp + 0x1a8]
mov rdx, qword [rsp + 0x1b8]
sub rdx, rbx
and rdx, 0xffffffffffffffc0
mov rax, rbx
cmp rdx, 0x1000
jb 0x140005990
add rdx, 0x27
mov rbx, qword [rbx - 8]
sub rax, rbx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140005990
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, rbx
call fcn.1400089e4
xor eax, eax
mov rcx, qword [rsp + 0x6a0]
xor rcx, rsp
call fcn.140008740
lea r11, [rsp + 0x6b0]
mov rbx, qword [r11 + 0x20]
mov rsi, qword [r11 + 0x28]
mov rdi, qword [r11 + 0x30]
mov r12, qword [r11 + 0x38]
mov rsp, r11
pop r15
pop r14
pop r13
ret
call fcn.140001250
nop
call fcn.1400011b0
int3