Function at 0x14002ff3d
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x348
movdqa xmmword [rsp + 0x330], xmm15
movdqa xmmword [rsp + 0x320], xmm14
movdqa xmmword [rsp + 0x310], xmm13
movdqa xmmword [rsp + 0x300], xmm12
movdqa xmmword [rsp + 0x2f0], xmm11
movdqa xmmword [rsp + 0x2e0], xmm10
movdqa xmmword [rsp + 0x2d0], xmm9
movdqa xmmword [rsp + 0x2c0], xmm8
movdqa xmmword [rsp + 0x2b0], xmm7
movdqa xmmword [rsp + 0x2a0], xmm6
mov r14, r9
mov rbx, r8
mov r15, rdx
mov rdi, rcx
movzx ebp, word [rcx + 0x60]
lea rsi, [rsp + 0x38]
mov rcx, rsi
mov edx, ebp
call fcn.140032910
cmp byte [rsi], 0
jne 0x14002fff9
cmp byte [rsp + 0x39], 0
jne 0x14003245e
lea rsi, [rsp + 0x38]
mov rcx, rsi
mov edx, ebp
call fcn.14003297a
cmp byte [rsi], 0
je 0x140030079
mov rsi, qword [rsp + 0x40]
mov rcx, qword [r14]
mov rdx, qword [r14 + 8]
call fcn.1400c50a3
mov rax, rsi
movaps xmm6, xmmword [rsp + 0x2a0]
movaps xmm7, xmmword [rsp + 0x2b0]
movaps xmm8, xmmword [rsp + 0x2c0]
movaps xmm9, xmmword [rsp + 0x2d0]
movaps xmm10, xmmword [rsp + 0x2e0]
movaps xmm11, xmmword [rsp + 0x2f0]
movaps xmm12, xmmword [rsp + 0x300]
movaps xmm13, xmmword [rsp + 0x310]
movaps xmm14, xmmword [rsp + 0x320]
movaps xmm15, xmmword [rsp + 0x330]
add rsp, 0x348
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
mov word [rsp + 0x36], bp
mov qword [rsp + 0x278], r15
mov qword [rsp + 0x280], rbx
movzx r13d, word [rdi + 0x62]
cmp r13, 0x61
jae 0x1400324a2
movabs rax, 0x8000000000000001
test r13, r13
mov qword [rsp + 0x1d8], rdi
mov qword [rsp + 0xd8], r14
je 0x140030203
mov r14, qword [rdi + 8]
mov rbx, qword [rdi + 0x10]
mov rbp, qword [rdi + 0x78]
lea rsi, [rax - 1]
mov qword [rsp + 0xf0], r14
xor edi, edi
cmp rbx, rdi
je 0x140032273
mov r15d, dword [r14 + 0x28]
xor ecx, ecx
mov rdx, r15
mov r8d, 0x103000
mov r9d, 0x40
call sub.kernel32.dll_VirtualAlloc
mov r12, rax
cmp qword [r14 + 8], rsi
jne 0x14003015e
mov word [rsp + 0x130], 0
mov qword [rsp + 0xb8], 0
lea rax, [rsp + 0x130]
mov qword [rsp + 0x20], rax
mov r8d, 8
lea rcx, [rsp + 0x38]
mov rdx, r14
lea r9, [rsp + 0xb8]
call fcn.14004f64a
mov rax, qword [rsp + 0x38]
mov rcx, qword [rsp + 0x40]
mov rdx, qword [rsp + 0x48]
cmp rax, 5
je 0x140030166
jmp 0x140031bca
mov rcx, qword [r14 + 0x10]
mov rdx, qword [r14 + 0x18]
mov r9d, 4
lea r8, str.text
call fcn.1400329e4
test al, al
je 0x140030182
mov dword [0x1401d2038], edi
mov rax, qword [0x1401d2048]
cmp rax, qword [0x1401d2040]
jne 0x14003019e
call fcn.1400d2758
mov rax, qword [0x1401d2048]
mov rcx, qword [0x140125030]
mov qword [rcx + rax*8], r12
inc rax
mov qword [0x1401d2048], rax
mov edx, dword [r14 + 0x2c]
test rdx, rdx
je 0x1400301cc
add rdx, rbp
mov rcx, r12
mov r8, r15
call sub.msvcrt.dll_memcpy
jmp 0x1400301d9
mov rcx, r12
xor edx, edx
mov r8, r15
call sub.msvcrt.dll_memset
inc rdi
add r14, 0x40
cmp r13, rdi
jne 0x1400300da
mov rdi, qword [rsp + 0x1d8]
mov r14, qword [rsp + 0xd8]
mov rdx, qword [rsp + 0xf0]
jmp 0x14003020b
mov rdx, qword [rdi + 8]
mov rbx, qword [rdi + 0x10]
test rbx, rbx
movzx eax, word [rsp + 0x36]
je 0x140031833
movzx eax, ax
mov dword [rsp + 0x204], eax
shl rbx, 6
add rbx, rdx
mov rax, qword [rdi + 0x78]
mov qword [rsp + 0x290], rax
mov rax, qword [rdi + 0x80]
mov qword [rsp + 0x298], rax
mov rbp, qword [rdi + 0x50]
mov rax, qword [rdi + 0x58]
mov qword [rsp + 0x1e0], rax
mov rax, qword [rdi + 0x20]
mov qword [rsp + 0x220], rax
mov rax, qword [rdi + 0x28]
mov qword [rsp + 0x228], rax
xor eax, eax
mov qword [rsp + 0x218], rax
lea r15, [rsp + 0x38]
movdqa xmm9, xmmword [0x140130e90]
movdqa xmm15, xmmword [0x140130e40]
movdqa xmm13, xmmword [0x140130e50]
movdqa xmm7, xmmword [0x140130e00]
movdqa xmm10, xmmword [0x140130e10]
movdqa xmm11, xmmword [0x140130e20]
xor eax, eax
mov qword [rsp + 0x118], rax
movdqa xmm14, xmmword [str.BeaconFormatToStBeaconFormatAppend]
movdqa xmm12, xmmword [str.TemporaryProcessBeaconSpawnTempoBeaconInjectTempconInjectProcessBeaconInjectProcring]
movdqa xmm6, xmmword [0x140130de0]
movdqa xmm8, xmmword [0x140130df0]
mov qword [rsp + 0x230], rbp
mov qword [rsp + 0x288], rbx
movzx eax, word [rdx + 0x38]
test rax, rax
je 0x14003181e
mov esi, dword [rdx + 0x30]
add eax, eax
lea r12, [rax + rax*4]
mov rax, qword [rsp + 0x298]
sub rax, rsi
jbe 0x140032058
cmp rax, r12
jb 0x14003205f
mov qword [rsp + 0xf0], rdx
add rsi, qword [rsp + 0x290]
mov eax, 4
sub rax, r12
mov qword [rsp + 0x1e8], rax
xor r13d, r13d
mov rdi, r12
sub rdi, r13
add r13, 0xa
lea rax, [r13 - 0xa]
cmp rax, r12
jae 0x14003180e
mov eax, 4
cmp rdi, 4
jb 0x140032403
mov rcx, qword [rsp + 0x1e8]
lea rdx, [rcx + r13]
mov ecx, 1
cmp rdx, 0xa
je 0x14003240e
lea rdx, [rdi - 4]
cmp rdx, 4
jb 0x1400323f5
cmp rdi, 9
jb 0x1400323fc
mov rax, rdi
and rax, 0xfffffffffffffffe
cmp rax, 8
je 0x140032407
mov eax, dword [rsi + r13 - 0xa]
mov ecx, dword [rsi + r13 - 6]
movzx edx, word [rsi + r13 - 2]
mov r8, rcx
shl r8, 0x20
or r8, rax
mov qword [rsp + 0x120], r8
mov word [rsp + 0x128], dx
add rcx, rcx
lea r9, [rcx + rcx*8]
mov rcx, r15
mov rdx, rbp
mov r8, qword [rsp + 0x1e0]
call fcn.14004f34d
cmp qword [rsp + 0x38], 0
jne 0x140030434
mov rax, qword [rsp + 0x50]
mov ebx, dword [rsp + 0x58]
movzx r8d, word [rsp + 0x5c]
lea rdx, [rsp + 0x40]
movzx ecx, word [rdx + 0x22]
mov word [rsp + 0xfc], cx
mov ecx, dword [rdx + 0x1e]
mov dword [rsp + 0xf8], ecx
test r8w, r8w
jns 0x140030443
add r13, 0xa
add rdi, 0xfffffffffffffff6
jmp 0x14003034b
lea rcx, [rsp + 0x40]
call fcn.14004f130
jmp 0x140030341
test r8, r8
je 0x140030470
lea rcx, [r8 - 1]
mov rdx, qword [0x1401d2048]
cmp rdx, rcx
jbe 0x1400323cf
mov rax, qword [0x140125030]
mov r14, qword [rax + r8*8 - 8]
xor r15d, r15d
jmp 0x140031678
mov qword [rsp + 0x238], rax
mov dword [rsp + 0x240], ebx
mov word [rsp + 0x244], 0
movzx ecx, word [rsp + 0xfc]
lea rdx, [rsp + 0x246]
mov word [rdx + 4], cx
mov ecx, dword [rsp + 0xf8]
mov dword [rdx], ecx
test al, al
lea rbp, [rsp + 0x130]
je 0x140030509
mov word [rsp + 0x130], 0
mov qword [rsp + 0xb8], 0
mov qword [rsp + 0x20], rbp
mov r8d, 8
mov rcx, r15
lea rdx, [rsp + 0x238]
lea r9, [rsp + 0xb8]
call fcn.14004f64a
mov rax, qword [rsp + 0x38]
mov rdx, qword [rsp + 0x40]
mov rdi, qword [rsp + 0x48]
cmp rax, 5
je 0x1400305b5
jmp 0x140032229
shr rax, 0x20
add eax, 0xfffffffc
mov dword [rsp + 0x1b0], eax
cmp qword [rsp + 0x228], 0
je 0x140032189
mov rdx, qword [rsp + 0x228]
mov r8, rdx
xor ecx, ecx
mov r11, qword [rsp + 0x220]
shr r8, 1
add r8, rcx
lea r10, [r8 + r8*2]
mov r9, qword [r11 + r10*8]
cmp r9, rax
je 0x14003059b
lea r10, [r8 + 1]
cmp r9, rax
cmova rdx, r8
cmovb rcx, r10
mov r8, rdx
sub r8, rcx
ja 0x14003053b
test rcx, rcx
je 0x140032189
lea rcx, [rcx + rcx*2]
mov r8, qword [rsp + 0x220]
mov rdx, qword [r8 + rcx*8 - 0x10]
mov rdi, qword [r8 + rcx*8 - 8]
sub rax, qword [r8 + rcx*8 - 0x18]
je 0x1400305af
cmp rdi, rax
jbe 0x1400305a9
cmp byte [rdx + rax], 0xc0
jge 0x1400305af
jmp 0x140032189
lea rax, [r11 + r10*8]
mov rdx, qword [rax + 8]
mov rdi, qword [rax + 0x10]
jmp 0x1400305b5
jne 0x140032189
sub rdi, rax
add rdx, rax
mov eax, dword [rsp + 0x204]
cmp eax, 0x8664
je 0x1400305e6
cmp eax, 0x14c
jne 0x140032390
mov qword [rsp + 0x20], 7
mov rcx, r15
mov r8, rdi
lea r9, str.__imp____imp_Unsupported_architecture
jmp 0x1400305fc
mov qword [rsp + 0x20], 6
mov rcx, r15
mov r8, rdi
lea r9, [0x14013745f]
call fcn.140041ce0
mov qword [rsp + 0xa0], 0
mov qword [rsp + 0xa8], rdi
mov word [rsp + 0xb0], 1
xor eax, eax
mov qword [rsp + 0x28], rax
mov r14, qword [rsp + 0x80]
mov rcx, rbp
mov rdx, r15
call fcn.14002b4e2
cmp qword [rsp + 0x130], 0
je 0x14003067e
mov rdi, qword [rsp + 0x138]
mov rax, qword [rsp + 0x140]
mov rcx, qword [rsp + 0xa0]
sub rdi, rcx
add r14, rcx
mov qword [rsp + 0xa0], rax
cmp byte [rsp + 0xb1], 0
mov rax, r14
mov qword [rsp + 0x28], r14
je 0x140030626
jmp 0x1400306d4
cmp byte [rsp + 0xb1], 0
je 0x140030695
cmp qword [rsp + 0x28], 0
jne 0x1400306d9
jmp 0x1400325e7
cmp byte [rsp + 0xb0], 0
je 0x1400306b1
mov r14, qword [rsp + 0xa0]
mov rax, qword [rsp + 0xa8]
jmp 0x1400306c6
mov r14, qword [rsp + 0xa0]
mov rax, qword [rsp + 0xa8]
cmp rax, r14
je 0x140030688
sub rax, r14
add r14, qword [rsp + 0x80]
mov rdi, rax
mov qword [rsp + 0x28], r14
cmp rdi, 2
jb 0x140030703
cmp rdi, 0xf
ja 0x1400307a5
xor eax, eax
mov rcx, qword [rsp + 0x28]
cmp byte [rcx + rax], 0x24
je 0x14003071b
inc rax
cmp rdi, rax
jne 0x1400306eb
jmp 0x1400307be
cmp rdi, 1
jne 0x1400307be
mov rax, qword [rsp + 0x28]
cmp byte [rax], 0x24
jne 0x1400307be
mov qword [rsp + 0x20], 1
mov rcx, rbp
mov rdx, qword [rsp + 0x28]
mov r8, rdi
lea r9, str._.dll
call fcn.140041ce0
mov qword [rsp + 0x198], 0
mov qword [rsp + 0x1a0], rdi
mov word [rsp + 0x1a8], 1
mov rcx, r15
mov r15, qword [rsp + 0x178]
mov rdx, rbp
call fcn.14002b4e2
cmp qword [rsp + 0x38], 0
je 0x140030866
mov r8, qword [rsp + 0x40]
mov rax, qword [rsp + 0x48]
mov rcx, qword [rsp + 0x198]
sub r8, rcx
add r15, rcx
mov qword [rsp + 0x198], rax
mov bpl, byte [rsp + 0x1a9]
jmp 0x1400308bf
mov cl, 0x24
mov rdx, qword [rsp + 0x28]
mov r8, rdi
call fcn.1400419f0
cmp rax, 1
je 0x14003071b
mov r14d, 8
lea r15, str.BeaconDataParseBeaconDataPtrBeaconDataIntBeaconDataShortBeaconDataLengthBeaconDataExtractBeaconFormatAllocBeaconFormatResetBeaconFormatAppendBeaconFormatPrintfBeaconFormatToStringBeaconFormatFreeBeaconFormatIntBeaconOutputBeaconPrintfBeaconUseTokenBeaconRevertTokenBeaconIsAdminBeaconGetSpawnToBeaconInjectProcessBeaconInjectTemporaryProcessBeaconSpawnTemporaryProcessBeaconCleanupProcesstoWideCharLoadLibraryAGetProcAddressFreeLibraryGetModuleHandleA__C_specific_handler
cmp r14, 0x1d8
je 0x1400307f6
cmp qword [r14 + r15], rdi
jne 0x1400307f0
mov rcx, qword [r14 + r15 - 8]
mov rdx, qword [rsp + 0x28]
mov r8, rdi
call sub.msvcrt.dll_memcmp
test eax, eax
je 0x1400307fe
add r14, 0x10
jmp 0x1400307cb
xor r15d, r15d
jmp 0x140031557
mov rax, qword [rsp + 0x28]
mov qword [rsp + 0xb8], rax
mov qword [rsp + 0xc0], rdi
lea rax, [rdi - 0xa]
cmp rax, 0x12
ja case.0x14003082f.21
lea rcx, [0x140130f10]
movsxd rax, dword [rcx + rax*4]
add rax, rcx
jmp rax
mov rdx, qword [rsp + 0x28]
mov rax, qword [rdx]
movabs rcx, 0x6843656469576f74
xor rax, rcx
movzx ecx, word [rdx + 8]
xor rcx, 0x7261
or rcx, rax
lea r15, [0x14002ecd9]
je 0x140031562
jmp case.0x14003082f.21
cmp byte [rsp + 0x1a9], 0
jne 0x140032768
mov byte [rsp + 0x1a9], 1
cmp byte [rsp + 0x1a8], 0
je 0x140030898
mov r15, qword [rsp + 0x198]
mov r8, qword [rsp + 0x1a0]
jmp 0x1400308b1
mov r15, qword [rsp + 0x198]
mov r8, qword [rsp + 0x1a0]
cmp r8, r15
je 0x140032768
sub r8, r15
add r15, qword [rsp + 0x178]
mov bpl, 1
lea r14, [rsp + 0xb8]
mov rcx, r14
mov rdx, r15
call fcn.140028f70
mov qword [rsp + 0x1f0], r14
lea rax, [0x140008e5b]
mov qword [rsp + 0x1f8], rax
lea rax, [0x1401374e0]
mov qword [rsp + 0x38], rax
mov qword [rsp + 0x40], 2
mov qword [rsp + 0x58], 0
lea rax, [rsp + 0x1f0]
mov qword [rsp + 0x48], rax
mov qword [rsp + 0x50], 1
lea rcx, [rsp + 0x100]
lea r14, [rsp + 0x38]
mov rdx, r14
call fcn.140028bd0
cmp qword [rsp + 0xb8], 0
je 0x140030953
mov r8, qword [rsp + 0xc0]
mov rcx, qword [0x1401d2118]
xor edx, edx
call fcn.1401220e0
movdqu xmm0, xmmword [rsp + 0x100]
movdqa xmmword [rsp + 0x1b0], xmm0
mov rax, qword [rsp + 0x110]
mov qword [rsp + 0x1c0], rax
test bpl, bpl
je 0x140030982
xor r15d, r15d
jmp 0x140031536
mov rbp, qword [rsp + 0x178]
mov rcx, r14
lea rdx, [rsp + 0x130]
call fcn.14002b4e2
cmp qword [rsp + 0x38], 0
je 0x140030a48
mov r15, qword [rsp + 0x40]
mov rax, qword [rsp + 0x48]
mov rcx, qword [rsp + 0x198]
sub r15, rcx
add rbp, rcx
mov qword [rsp + 0x198], rax
mov qword [rsp + 0x20], 1
lea r14, [rsp + 0x38]
mov rcx, r14
mov rdx, rbp
mov r8, r15
lea r9, [0x1401912be]
call fcn.140041ce0
mov qword [rsp + 0xa0], 0
mov qword [rsp + 0xa8], r15
mov r15, r14
mov word [rsp + 0xb0], 1
mov r14, qword [rsp + 0x80]
lea rcx, [rsp + 0xb8]
mov rdx, r15
call fcn.14002b4e2
cmp qword [rsp + 0xb8], 0
je 0x140030a81
mov rax, qword [rsp + 0xc0]
mov rcx, qword [rsp + 0xa0]
sub rax, rcx
add r14, rcx
jmp 0x14003101c
cmp byte [rsp + 0x1a9], 0
jne 0x14003097a
mov byte [rsp + 0x1a9], 1
cmp byte [rsp + 0x1a8], 0
je 0x14003112d
mov rbp, qword [rsp + 0x198]
mov r15, qword [rsp + 0x1a0]
jmp 0x140031146
cmp byte [rsp + 0xb1], 0
jne 0x140032879
cmp byte [rsp + 0xb0], 0
je 0x140030ff8
mov r14, qword [rsp + 0xa0]
mov rax, qword [rsp + 0xa8]
jmp 0x140031011
mov rax, qword [rsp + 0x28]
movdqu xmm0, xmmword [rax]
pcmpeqb xmm0, xmm6
movdqu xmm1, xmmword [rax + 0xb]
pcmpeqb xmm1, xmm12
pand xmm1, xmm0
pmovmskb eax, xmm1
lea r15, [0x14002ec9e]
jmp 0x140030e88
mov rax, qword [rsp + 0x28]
movdqu xmm0, xmmword [rax]
pcmpeqb xmm0, xmm10
movdqu xmm1, xmmword [rax + 3]
pcmpeqb xmm1, xmm7
pand xmm1, xmm0
pmovmskb eax, xmm1
lea r15, [0x14002eb6b]
jmp 0x140030e88
mov rax, qword [rsp + 0x28]
movdqu xmm0, xmmword [rax]
pcmpeqb xmm0, xmm8
movdqu xmm1, xmmword [rax + 0xc]
pcmpeqb xmm1, xmm12
pand xmm1, xmm0
pmovmskb eax, xmm1
lea r15, [0x14002ec81]
jmp 0x140030e88
mov rax, qword [rsp + 0x28]
movdqu xmm0, xmmword [rax]
pcmpeqb xmm0, xmm14
movd xmm1, dword [rax + 0x10]
pcmpeqb xmm1, xmm11
pand xmm1, xmm0
pmovmskb eax, xmm1
lea r15, [0x14002e81c]
cmp eax, 0xffff
je 0x140031562
mov rcx, qword [rsp + 0x28]
lea rdx, [0x140136f50]
mov r8, rdi
call sub.msvcrt.dll_memcmp
lea r15, [0x14002ecbb]
test eax, eax
je 0x140031562
mov rcx, qword [rsp + 0x28]
lea rdx, [0x140136fa3]
mov r8, rdi
call sub.msvcrt.dll_memcmp
test eax, eax
jne case.0x14003082f.21
xor r15d, r15d
jmp 0x140031562
mov rax, qword [rsp + 0x28]
movdqu xmm0, xmmword [rax]
pcmpeqb xmm0, xmm15
movzx eax, word [rax + 0x10]
movd xmm1, eax
pcmpeqb xmm1, xmm13
pand xmm1, xmm0
pmovmskb eax, xmm1
lea r15, [0x14002e6ea]
cmp eax, 0xffff
je 0x140031562
mov rax, qword [rsp + 0x28]
movdqu xmm0, xmmword [rax]
pcmpeqb xmm0, xmmword [str.BeaconFormatPrintf]
movzx eax, word [rax + 0x10]
movd xmm1, eax
pcmpeqb xmm1, xmmword [0x140130e70]
pand xmm1, xmm0
pmovmskb eax, xmm1
lea r15, [0x14002e736]
jmp 0x140030e88
mov rdx, qword [rsp + 0x28]
mov rax, qword [rdx]
movabs rcx, 0x73556e6f63616542
xor rax, rcx
mov rcx, qword [rdx + 6]
movabs rdx, 0x6e656b6f54657355
xor rcx, rdx
or rcx, rax
lea r15, [0x14002ead1]
je 0x140031562
mov rdx, qword [rsp + 0x28]
mov rax, qword [rdx]
movabs rcx, 0x41636f7250746547
xor rax, rcx
mov rcx, qword [rdx + 6]
movabs rdx, 0x7373657264644163
xor rcx, rdx
or rcx, rax
lea r15, [sub.kernel32.dll_GetProcAddress]
je 0x140031562
jmp case.0x14003082f.21
mov rdx, qword [rsp + 0x28]
mov rax, qword [rdx]
movabs rcx, 0x61446e6f63616542
xor rax, rcx
mov rcx, qword [rdx + 7]
movabs rdx, 0x6573726150617461
xor rcx, rdx
or rcx, rax
lea r15, [0x14002e532]
je 0x140031562
mov rdx, qword [rsp + 0x28]
mov rax, qword [rdx]
movabs rcx, 0x61446e6f63616542
xor rax, rcx
mov rcx, qword [rdx + 7]
movabs rdx, 0x74726f6853617461
xor rcx, rdx
or rcx, rax
lea r15, [0x14002e591]
je 0x140031562
mov rdx, qword [rsp + 0x28]
mov rax, qword [rdx]
movabs rcx, 0x6f466e6f63616542
xor rax, rcx
mov rcx, qword [rdx + 7]
movabs rdx, 0x746e4974616d726f
xor rcx, rdx
or rcx, rax
lea r15, [0x14002e8ca]
je 0x140031562
jmp case.0x14003082f.21
mov rdx, qword [rsp + 0x28]
mov rax, qword [rdx]
movabs rcx, 0x754f6e6f63616542
xor rax, rcx
mov ecx, dword [rdx + 8]
xor rcx, 0x74757074
or rcx, rax
lea r15, [0x14002e8fe]
je 0x140031562
mov rdx, qword [rsp + 0x28]
mov rax, qword [rdx]
movabs rcx, 0x72506e6f63616542
xor rax, rcx
mov ecx, dword [rdx + 8]
xor rcx, 0x66746e69
or rcx, rax
lea r15, [0x14002e96c]
je 0x140031562
mov rcx, qword [rsp + 0x28]
lea rdx, [0x140136f6e]
mov r8, rdi
call sub.msvcrt.dll_memcmp
lea r15, [sub.kernel32.dll_LoadLibraryA]
jmp 0x140030feb
mov rax, qword [rsp + 0x28]
movdqu xmm0, xmmword [rax]
pcmpeqb xmm0, xmmword [str.BeaconDataExtract]
movzx eax, byte [rax + 0x10]
movd xmm1, eax
pcmpeqb xmm1, xmm9
pand xmm1, xmm0
pmovmskb eax, xmm1
lea r15, [0x14002e5c4]
cmp eax, 0xffff
je 0x140031562
mov rax, qword [rsp + 0x28]
movdqu xmm0, xmmword [rax]
pcmpeqb xmm0, xmmword [str.BeaconFormatAlloc]
movzx eax, byte [rax + 0x10]
movd xmm1, eax
pcmpeqb xmm1, xmmword [0x140130eb0]
pand xmm1, xmm0
pmovmskb eax, xmm1
lea r15, [fcn.14002e612]
cmp eax, 0xffff
je 0x140031562
mov rax, qword [rsp + 0x28]
movdqu xmm0, xmmword [rax]
pcmpeqb xmm0, xmmword [str.BeaconFormatReseBeaconRevertToken]
movzx eax, byte [rax + 0x10]
movd xmm1, eax
pcmpeqb xmm1, xmm9
pand xmm1, xmm0
pmovmskb eax, xmm1
lea r15, [0x14002e69d]
cmp eax, 0xffff
je 0x140031562
mov rax, qword [rsp + 0x28]
movdqu xmm0, xmmword [rax]
pcmpeqb xmm0, xmmword [0x140130ed0]
movzx eax, byte [rax + 0x10]
movd xmm1, eax
pcmpeqb xmm1, xmmword [0x140130ee0]
pand xmm1, xmm0
pmovmskb eax, xmm1
lea r15, [0x14002eadb]
cmp eax, 0xffff
je 0x140031562
jmp case.0x14003082f.21
mov rdx, qword [rsp + 0x28]
mov rax, qword [rdx]
movabs rcx, 0x61446e6f63616542
xor rax, rcx
mov rcx, qword [rdx + 5]
movabs rdx, 0x727450617461446e
xor rcx, rdx
or rcx, rax
lea r15, [0x14002e54f]
je 0x140031562
mov rdx, qword [rsp + 0x28]
mov rax, qword [rdx]
movabs rcx, 0x61446e6f63616542
xor rax, rcx
mov rcx, qword [rdx + 5]
movabs rdx, 0x746e49617461446e
xor rcx, rdx
or rcx, rax
lea r15, [0x14002e56c]
je 0x140031562
mov rcx, qword [rsp + 0x28]
lea rdx, [0x140136ee9]
mov r8, rdi
call sub.msvcrt.dll_memcmp
lea r15, [0x14002eae0]
jmp 0x140030feb
mov rdx, qword [rsp + 0x28]
mov rax, qword [rdx]
movabs rcx, 0x7262694c65657246
xor rax, rcx
mov rcx, qword [rdx + 3]
movabs rdx, 0x7972617262694c65
xor rcx, rdx
or rcx, rax
lea r15, [sub.kernel32.dll_FreeLibrary]
je 0x140031562
jmp case.0x14003082f.21
mov rax, qword [rsp + 0x28]
movdqu xmm0, xmmword [rax]
pcmpeqb xmm0, xmmword [str.BeaconDataLengthBeaconFormatFree_]
pmovmskb eax, xmm0
lea r15, [0x14002e5b8]
cmp eax, 0xffff
je 0x140031562
mov rax, qword [rsp + 0x28]
movdqu xmm0, xmmword [rax]
pcmpeqb xmm0, xmmword [0x140130f00]
pmovmskb eax, xmm0
lea r15, [fcn.14002e834]
cmp eax, 0xffff
je 0x140031562
mov rcx, qword [rsp + 0x28]
lea rdx, [0x140136ef6]
mov r8, rdi
call sub.msvcrt.dll_memcmp
lea r15, [0x14002eb4e]
test eax, eax
je 0x140031562
mov rcx, qword [rsp + 0x28]
lea rdx, [0x140136f93]
mov r8, rdi
call sub.msvcrt.dll_memcmp
lea r15, [sub.kernel32.dll_GetModuleHandleA]
test eax, eax
je 0x140031562
jmp case.0x14003082f.21
mov r14, qword [rsp + 0xa0]
mov rax, qword [rsp + 0xa8]
cmp rax, r14
je 0x140032879
sub rax, r14
add r14, qword [rsp + 0x80]
mov qword [rsp + 0x1f0], r14
mov qword [rsp + 0x1f8], rax
lea rax, [rsp + 0x1b0]
mov qword [rsp + 0xb8], rax
lea rax, [0x140008e5b]
mov qword [rsp + 0xc0], rax
lea rax, [0x140137530]
mov qword [rsp + 0x38], rax
mov qword [rsp + 0x40], 2
mov qword [rsp + 0x58], 0
lea rax, [rsp + 0xb8]
mov qword [rsp + 0x48], rax
mov qword [rsp + 0x50], 1
lea rcx, [rsp + 0x250]
mov rdx, r15
call fcn.140028bd0
mov rax, qword [rsp + 0x260]
test rax, rax
je 0x140031109
mov r9, qword [rsp + 0x258]
movzx r10d, byte [r9]
test r10b, r10b
js 0x1400310be
mov qword [rsp + 0xe8], r10
lea r10, [r9 + 1]
jmp 0x1400311a6
mov ecx, r10d
and ecx, 0x1f
movzx r8d, byte [r9 + 1]
and r8d, 0x3f
cmp r10b, 0xdf
jbe 0x140031119
movzx edx, byte [r9 + 2]
shl r8d, 6
and edx, 0x3f
or edx, r8d
cmp r10b, 0xf0
jb 0x140031156
movzx r14d, byte [r9 + 3]
and ecx, 7
shl ecx, 0x12
shl edx, 6
and r14d, 0x3f
or r14d, edx
or r14d, ecx
cmp r14d, 0x110000
jne 0x140031164
mov ebp, 2
xor r15d, r15d
xor r14d, r14d
jmp 0x1400313d7
lea r10, [r9 + 2]
shl ecx, 6
or ecx, r8d
mov qword [rsp + 0xe8], rcx
jmp 0x1400311a6
mov rbp, qword [rsp + 0x198]
mov r15, qword [rsp + 0x1a0]
cmp r15, rbp
je 0x14003097a
sub r15, rbp
add rbp, qword [rsp + 0x178]
jmp 0x1400309c6
lea r10, [r9 + 3]
shl ecx, 0xc
or edx, ecx
mov r14d, edx
jmp 0x140031168
lea r10, [r9 + 4]
cmp r14d, 0xffff
jbe 0x14003119e
lea edx, [r14 + 0xff0000]
shr edx, 0xa
or edx, 0xd800
and r14d, 0x3ff
or r14d, 0xdc00
mov ecx, 1
mov qword [rsp + 0xe8], rdx
jmp 0x1400311ab
mov qword [rsp + 0xe8], r14
xor r14d, r14d
xor ecx, ecx
add r9, rax
mov qword [rsp + 0x210], r9
lea rax, [r9 + 2]
mov qword [rsp + 0x270], rax
mov qword [rsp + 0xe0], r10
sub rax, r10
movabs rdx, 0xaaaaaaaaaaaaaaab
mul rdx
shr rdx, 1
add rdx, rcx
cmp rdx, 4
mov ebp, 3
cmovae rbp, rdx
movabs rax, 0x3fffffffffffffff
cmp rdx, rax
jae 0x140032874
inc rbp
lea r15, [rbp*2]
mov al, byte [0x1401d2160]
xor ecx, ecx
mov rdx, r15
call fcn.140101e80
test rax, rax
je 0x140032867
mov rcx, qword [rsp + 0xe8]
mov word [rax], cx
mov qword [rsp + 0x38], rbp
mov qword [rsp + 0x40], rax
mov qword [rsp + 0x48], 1
mov r15d, 1
mov r11d, 2
mov r9, qword [rsp + 0x210]
mov r10, qword [rsp + 0xe0]
test r14w, r14w
jne 0x140031321
cmp r10, r9
je 0x1400313a6
movzx r14d, byte [r10]
test r14b, r14b
js 0x140031282
inc r10
jmp 0x140031321
mov ecx, r14d
and ecx, 0x1f
movzx r8d, byte [r10 + 1]
and r8d, 0x3f
cmp r14b, 0xdf
jbe 0x1400312d7
movzx edx, byte [r10 + 2]
shl r8d, 6
and edx, 0x3f
or edx, r8d
cmp r14b, 0xf0
jb 0x1400312e6
movzx r14d, byte [r10 + 3]
and ecx, 7
shl ecx, 0x12
shl edx, 6
and r14d, 0x3f
or r14d, edx
or r14d, ecx
cmp r14d, 0x110000
je 0x1400313a6
add r10, 4
jmp 0x1400312f2
add r10, 2
shl ecx, 6
or ecx, r8d
mov r14d, ecx
jmp 0x140031321
add r10, 3
shl ecx, 0xc
or edx, ecx
mov r14d, edx
cmp r14d, 0xffff
jbe 0x140031321
lea ecx, [r14 + 0xff0000]
shr ecx, 0xa
or ecx, 0xd800
and r14d, 0x3ff
or r14d, 0xdc00
mov ebp, r14d
mov r14d, ecx
jmp 0x140031323
xor ebp, ebp
cmp r15, qword [rsp + 0x38]
je 0x140031343
mov word [rax + r15*2], r14w
inc r15
mov qword [rsp + 0x48], r15
add r11, 2
mov r14d, ebp
jmp 0x14003125e
mov rax, qword [rsp + 0x270]
sub rax, r10
movabs rcx, 0xaaaaaaaaaaaaaaab
mul rcx
shr rdx, 1
cmp bp, 1
sbb rdx, 0
lea r8, [rdx + 2]
lea rcx, [rsp + 0x38]
mov rdx, r15
mov qword [rsp + 0xe0], r10
mov qword [rsp + 0xe8], r11
call fcn.140120b5e
mov r11, qword [rsp + 0xe8]
mov r10, qword [rsp + 0xe0]
mov r9, qword [rsp + 0x210]
mov rax, qword [rsp + 0x40]
jmp 0x14003132a
mov r14, qword [rsp + 0x38]
mov rbp, qword [rsp + 0x40]
test r15, r15
je 0x1400313d7
xor eax, eax
cmp word [rbp + rax*2], 0
je 0x1400313ca
inc rax
add r11, 0xfffffffffffffffe
jne 0x1400313b7
jmp 0x1400313d7
lea rcx, [r15 - 1]
cmp rax, rcx
jne 0x140031806
mov qword [rsp + 0x38], r14
mov qword [rsp + 0x40], rbp
mov qword [rsp + 0x48], r15
lea rcx, [rsp + 0x38]
call fcn.140120a86
mov rbp, rax
mov r15, rdx
movabs r14, 0x8000000000000001
mov rcx, qword [rsp + 0x208]
cmp qword [rsp + 0x250], 0
je 0x14003143f
mov qword [rsp + 0xe0], rbp
mov rbp, rcx
mov r8, qword [rsp + 0x258]
mov rcx, qword [0x1401d2118]
xor edx, edx
call fcn.1401220e0
mov rcx, rbp
mov rbp, qword [rsp + 0xe0]
movabs rax, 0x8000000000000001
cmp r14, rax
jne 0x1400322b2
mov qword [rsp + 0x208], rcx
mov rcx, rbp
call sub.kernel32.dll_LoadLibraryW
test rax, rax
je 0x14003231b
mov qword [rsp + 0xe0], rax
mov word [rbp], 0
test r15, r15
je 0x14003148f
mov rcx, qword [0x1401d2118]
xor edx, edx
mov r8, rbp
call fcn.1401220e0
lea rax, [rsp + 0x1f0]
mov qword [rsp + 0x100], rax
lea rax, [0x140073d62]
mov qword [rsp + 0x108], rax
lea rax, [0x140137530]
mov qword [rsp + 0x38], rax
mov qword [rsp + 0x40], 2
mov qword [rsp + 0x58], 0
lea rax, [rsp + 0x100]
mov qword [rsp + 0x48], rax
mov qword [rsp + 0x50], 1
lea rcx, [rsp + 0xb8]
lea rdx, [rsp + 0x38]
call fcn.140028bd0
mov rbp, qword [rsp + 0xc0]
mov r14, qword [rsp + 0xb8]
mov rcx, qword [rsp + 0xe0]
mov rdx, rbp
call sub.kernel32.dll_GetProcAddress
mov r15, rax
test r14, r14
je 0x14003152d
mov rcx, qword [0x1401d2118]
xor edx, edx
mov r8, rbp
call fcn.1401220e0
test r15, r15
je 0x1400327f7
cmp qword [rsp + 0x1b0], 0
je 0x140031557
mov r8, qword [rsp + 0x1b8]
mov rcx, qword [0x1401d2118]
xor edx, edx
call fcn.1401220e0
test rdi, rdi
je 0x140031580
js 0x1400324ec
mov al, byte [0x1401d2160]
xor ecx, ecx
mov rdx, rdi
call fcn.140101e80
test rax, rax
je 0x1400324d7
mov r14, rdi
jmp 0x140031588
mov eax, 1
xor r14d, r14d
mov qword [rsp + 0x1d0], rax
mov rcx, rax
mov rdx, qword [rsp + 0x28]
mov r8, rdi
call sub.msvcrt.dll_memcpy
mov rbp, qword [0x1401d2030]
test rbp, rbp
jne 0x1400315e7
mov edx, 0x1008
xor ecx, ecx
mov r8d, 0x103000
mov r9d, 0x40
call sub.kernel32.dll_VirtualAlloc
test rax, rax
je 0x1400325b0
mov rbp, rax
mov r8d, 0x1008
mov rcx, rax
xor edx, edx
call sub.msvcrt.dll_memset
mov qword [0x1401d2030], rbp
mov qword [rsp + 0x28], r12
mov rcx, qword [rbp + 0x1000]
cmp rcx, 0x80
jae 0x1400323db
mov r12, r15
shl rcx, 5
lea r15, [rcx + rbp]
cmp qword [rbp + rcx], 0
mov rax, rbp
je 0x14003162f
mov r8, qword [r15 + 8]
mov rcx, qword [0x1401d2118]
xor edx, edx
call fcn.1401220e0
mov rax, qword [0x1401d2030]
mov qword [r15], r14
mov rcx, qword [rsp + 0x1d0]
mov qword [r15 + 8], rcx
mov qword [r15 + 0x10], rdi
mov qword [r15 + 0x18], r12
inc qword [rbp + 0x1000]
mov rcx, qword [rax + 0x1000]
dec rcx
cmp rcx, 0x80
jae 0x1400323e4
shl rcx, 5
lea r15, [rax + rcx]
add r15, 0x18
xor r14d, r14d
mov r12, qword [rsp + 0x28]
mov rdx, qword [0x1401d2048]
mov rcx, qword [rsp + 0x118]
cmp rdx, rcx
jbe 0x140032384
mov rax, qword [0x140125030]
mov edi, dword [rsp + 0x120]
add rdi, qword [rax + rcx*8]
mov rax, qword [rsp + 0xf0]
mov ebp, dword [rax + 0x24]
lea rcx, [rsp + 0x38]
movzx edx, word [rsp + 0x36]
call fcn.14003297a
cmp byte [rsp + 0x38], 0
jne 0x140031c3a
sub rdi, rbp
cmp byte [rsp + 0x39], 0
je 0x140031714
movzx eax, word [rsp + 0x128]
dec eax
cmp eax, 3
mov rbp, qword [rsp + 0x230]
ja case.default.0x1400316fa
lea rcx, [0x140130f5c]
movsxd rax, dword [rcx + rax*4]
add rax, rcx
jmp rax
test r15, r15
jne 0x14003170c
mov eax, dword [rdi]
add r14, rbx
add r14, rax
mov r15, r14
mov qword [rdi], r15
jmp 0x1400317f4
lea rcx, [rsp + 0x38]
movzx edx, word [rsp + 0x36]
call fcn.140032910
cmp byte [rsp + 0x38], 0
mov rbp, qword [rsp + 0x230]
jne 0x140031c3a
cmp byte [rsp + 0x39], 0
je 0x1400317f4
movzx eax, word [rsp + 0x128]
cmp eax, 6
je case.0x1400316fa.2
cmp eax, 0x14
jne 0x14003261c
test r15, r15
je 0x1400317d9
lea rax, [rdi + 4]
sub r15, rax
jno 0x1400317f1
jmp 0x140032774
test r15, r15
jne 0x1400317f1
mov eax, dword [rdi]
add r14, rbx
add r14, rax
mov r15, r14
jmp 0x1400317f1
test r15, r15
je 0x1400317a9
lea rax, [rdi + 4]
sub r15, rax
mov r14, r15
jno 0x1400317bb
jmp 0x1400326bc
test r15, r15
je 0x1400317c0
lea rax, [rdi + 4]
sub r15, rax
jno 0x1400317f1
jmp 0x1400326b0
mov eax, dword [rdi]
add r14, rax
lea rax, [rdi + 4]
sub r14, rax
jo 0x14003278c
mov dword [rdi], r14d
jmp 0x1400317f4
mov eax, dword [rdi]
add r14, rbx
add r14, rax
lea rax, [rdi + 4]
sub r14, rax
mov r15, r14
jno 0x1400317f1
jmp 0x140032780
mov eax, dword [rdi]
add r14, rbx
add r14, rax
lea rax, [rdi + 4]
sub r14, rax
mov r15, r14
jo 0x1400327eb
mov dword [rdi], r15d
mov r14, qword [rsp + 0xd8]
lea r15, [rsp + 0x38]
jmp 0x140030341
mov rcx, rax
jmp 0x140031408
mov rbx, qword [rsp + 0x288]
mov rdx, qword [rsp + 0xf0]
add rdx, 0x40
inc qword [rsp + 0x118]
cmp rdx, rbx
jne 0x1400302ee
lea rax, str.BeaconDataParseBeaconDataPtrBeaconDataIntBeaconDataShortBeaconDataLengthBeaconDataExtractBeaconFormatAllocBeaconFormatResetBeaconFormatAppendBeaconFormatPrintfBeaconFormatToStringBeaconFormatFreeBeaconFormatIntBeaconOutputBeaconPrintfBeaconUseTokenBeaconRevertTokenBeaconIsAdminBeaconGetSpawnToBeaconInjectProcessBeaconInjectTemporaryProcessBeaconSpawnTemporaryProcessBeaconCleanupProcesstoWideCharLoadLibraryAGetProcAddressFreeLibraryGetModuleHandleA__C_specific_handler
mov qword [rsp + 0x130], rax
mov eax, 0xf
mov qword [rsp + 0x138], rax
lea rcx, [0x140136def]
mov qword [rsp + 0x140], rcx
mov ecx, 0xd
mov qword [rsp + 0x148], rcx
lea rdx, [0x140136dfc]
mov qword [rsp + 0x150], rdx
mov qword [rsp + 0x158], rcx
lea rcx, [0x140136e09]
mov qword [rsp + 0x160], rcx
mov qword [rsp + 0x168], rax
lea rax, [0x140136e18]
mov qword [rsp + 0x170], rax
mov qword [rsp + 0x178], 0x10
lea rax, [0x140136e28]
mov qword [rsp + 0x180], rax
mov qword [rsp + 0x188], 0x11
mov r12, qword [0x1401d2030]
test r12, r12
je 0x140032501
mov al, byte [0x1401d2160]
mov edx, 0x800
xor ecx, ecx
call fcn.140101e80
test rax, rax
je 0x14003250d
mov rdi, rax
xor r13d, r13d
lea r14, [rsp + 0x38]
lea rsi, [rsp + 0xb8]
mov rax, r13
shl rax, 5
mov rdx, qword [r12 + rax + 8]
mov r15, qword [r12 + rax + 0x10]
mov qword [rsp + 0x20], 1
mov rcx, r14
mov r8, r15
lea r9, str._.dll
call fcn.140041ce0
mov qword [rsp + 0xa0], 0
mov qword [rsp + 0xa8], r15
mov word [rsp + 0xb0], 1
xor ebp, ebp
mov rbx, qword [rsp + 0x80]
mov rcx, rsi
mov rdx, r14
call fcn.14002b4e2
cmp qword [rsp + 0xb8], 0
je 0x1400319ac
mov r15, qword [rsp + 0xc0]
mov rax, qword [rsp + 0xc8]
mov rcx, qword [rsp + 0xa0]
sub r15, rcx
add rbx, rcx
mov qword [rsp + 0xa0], rax
cmp byte [rsp + 0xb1], 0
mov rbp, rbx
je 0x140031959
jmp 0x1400319fa
cmp byte [rsp + 0xb1], 0
je 0x1400319bb
mov rbx, rbp
jmp 0x1400319fa
cmp byte [rsp + 0xb0], 0
je 0x1400319d7
mov rbx, qword [rsp + 0xa0]
mov rax, qword [rsp + 0xa8]
jmp 0x1400319ec
mov rbx, qword [rsp + 0xa0]
mov rax, qword [rsp + 0xa8]
cmp rax, rbx
je 0x1400319b6
sub rax, rbx
add rbx, qword [rsp + 0x80]
mov r15, rax
test rbx, rbx
mov rax, rbx
lea rcx, [0x1401bef68]
cmove rax, rcx
cmove r15, rbx
mov rcx, r13
shl rcx, 4
mov qword [rdi + rcx], rax
mov qword [rdi + rcx + 8], r15
inc r13
cmp r13, 0x80
jne 0x14003190d
xor r15d, r15d
mov rbx, qword [rdi + r15]
mov r14, qword [rdi + r15 + 8]
add r15, 0x10
mov r12d, 8
cmp r12, 0x68
je 0x140031a72
cmp qword [rsp + r12 + 0x130], r14
jne 0x140031a6c
mov rcx, qword [rsp + r12 + 0x128]
mov rdx, rbx
mov r8, r14
call sub.msvcrt.dll_memcmp
test eax, eax
je 0x140031a7b
add r12, 0x10
jmp 0x140031a45
cmp r15, 0x800
jne 0x140031a32
mov rax, qword [rsp + 0x1d8]
mov r14, qword [rax + 0x50]
mov r15, qword [rax + 0x58]
mov rax, qword [rsp + 0xd8]
mov rcx, qword [rax]
mov qword [rsp + 0x1e8], rcx
mov rcx, qword [rax + 8]
mov qword [rsp + 0xf0], rcx
movabs rcx, 0x8000000000000001
dec rcx
mov qword [rsp + 0x1e0], rcx
mov rax, qword [rax + 0x10]
mov qword [rsp + 0x118], rax
xor ebp, ebp
lea rbx, [rsp + 0x38]
lea rax, [rbp*2]
lea r9, [rax + rax*8]
cmp r9, r15
jae 0x140031ca5
mov rcx, rbx
mov rdx, r14
mov r8, r15
call fcn.14004f34d
cmp qword [rsp + 0x38], 0
jne 0x140031c2e
mov r12, qword [rsp + 0x40]
movzx eax, byte [rsp + 0x61]
add rbp, rax
inc rbp
test r12, r12
je 0x140031ad2
mov r13, qword [rsp + 0x48]
mov eax, dword [rsp + 0x58]
mov qword [rsp + 0x28], rax
mov rax, qword [rsp + 0x1e0]
cmp qword [rsp + 0x1e8], rax
jne 0x140031b70
mov al, byte [0x1401d2160]
mov edx, 2
xor ecx, ecx
call fcn.140101e80
test rax, rax
je 0x140032493
mov rbx, rax
mov word [rax], 0x6f67
mov r9d, 2
mov qword [rsp + 0x38], r9
mov qword [rsp + 0x40], rax
mov qword [rsp + 0x48], r9
jmp 0x140031b92
mov rcx, rbx
mov rdx, qword [rsp + 0xf0]
mov r8, qword [rsp + 0x118]
call fcn.1400297d0
mov rbx, qword [rsp + 0x40]
mov r9, qword [rsp + 0x48]
mov rcx, r12
mov rdx, r13
mov r8, rbx
call fcn.1400329e4
test al, al
jne 0x140031c4c
cmp qword [rsp + 0x38], 0
je 0x140031acd
mov rcx, qword [0x1401d2118]
xor edx, edx
mov r8, rbx
call fcn.1401220e0
jmp 0x140031acd
lea rsi, [rsp + 0x38]
mov r8, qword [rsi + 0x18]
lea rdi, [rsp + 0x130]
mov qword [rdi], rax
mov qword [rdi + 8], rcx
mov qword [rdi + 0x10], rdx
mov qword [rdi + 0x18], r8
lea rdx, fcn.14002e071
lea r8, str.C:UsersAdmin.cargo_registry_srcindex.crates.io_6f17d22bba15001fcoffee_ldr_0.1.2_srcloadermod.rsFailed_to_allocate_function
mov rcx, rdi
call fcn.14004d015
movups xmm0, xmmword [rdi]
movups xmm1, xmmword [rdi + 0x10]
movups xmmword [rsi + 0x28], xmm1
movups xmmword [rsi + 0x18], xmm0
lea rcx, [0x140136a78]
mov qword [rsi], rcx
mov qword [rsi + 8], rax
mov qword [rsi + 0x10], rdx
mov rcx, rsi
call fcn.14002def7
mov rsi, rax
jmp 0x140031c3f
lea rcx, [rsp + 0x40]
call fcn.14004f130
jmp 0x140031ca5
mov rsi, qword [rsp + 0x40]
mov r14, qword [rsp + 0xd8]
jmp 0x14002fffe
movsxd rcx, dword [0x1401d2038]
mov rdx, qword [0x1401d2048]
cmp rdx, rcx
mov r8, qword [rsp + 0x280]
mov r9, qword [rsp + 0x278]
jbe 0x140032452
mov rax, qword [0x140125030]
mov r10, qword [rsp + 0x28]
add r10, qword [rax + rcx*8]
mov rcx, r9
mov rdx, r8
call r10
cmp qword [rsp + 0x38], 0
je 0x140031ca5
mov rcx, qword [0x1401d2118]
xor edx, edx
mov r8, rbx
call fcn.1401220e0
mov rcx, qword [0x1401d2118]
xor edx, edx
mov r8, rdi
call fcn.1401220e0
mov rax, qword [rsp + 0xd8]
mov rcx, qword [rax]
mov rdx, qword [rax + 8]
call fcn.1400c50a3
lea rdi, [rsp + 0x250]
mov rcx, rdi
call fcn.14002e4bb
mov rax, qword [0x140125028]
mov qword [rdi + 0x18], rax
mov r15, qword [rdi + 0x10]
test r15, r15
je 0x140031fd1
xor r12d, r12d
lea rdi, [rsp + 0x38]
mov qword [rdi], r12
mov qword [rdi + 8], 1
mov qword [rdi + 0x10], r12
mov r13, qword [rsp + 0x258]
lea rbx, [rsp + 0x132]
lea r14, [rsp + 0x130]
mov bpl, byte [r13 + r12]
test bpl, bpl
je 0x140031d51
js 0x140031d7d
mov rax, qword [rsp + 0x48]
cmp rax, qword [rsp + 0x38]
jne 0x140031d46
mov rcx, rdi
call fcn.140120a28
mov rax, qword [rsp + 0x48]
mov rcx, qword [rsp + 0x40]
mov byte [rcx + rax], bpl
jmp 0x140031d73
mov rax, qword [rsp + 0x48]
cmp rax, qword [rsp + 0x38]
jne 0x140031d6a
mov rcx, rdi
call fcn.140120a28
mov rax, qword [rsp + 0x48]
mov rcx, qword [rsp + 0x40]
mov byte [rcx + rax], 0xa
inc rax
mov qword [rsp + 0x48], rax
jmp 0x140031db0
mov dword [rsp + 0x130], 0
mov eax, ebp
shr al, 6
or al, 0xc0
mov byte [rsp + 0x130], al
and bpl, 0xbf
mov byte [rsp + 0x131], bpl
mov rcx, rdi
mov rdx, r14
mov r8, rbx
call fcn.1401071af
inc r12
cmp r15, r12
jne 0x140031d21
mov rax, qword [rsp + 0x48]
lea rcx, [rsp + 0x100]
mov qword [rcx + 0x10], rax
movdqu xmm0, xmmword [rsp + 0x38]
movdqa xmmword [rcx], xmm0
lea rax, [rsp + 0x238]
mov qword [rax], rcx
lea rcx, [0x140008e5b]
mov qword [rax + 8], rcx
lea rcx, [0x1401373e0]
mov qword [rsp + 0x130], rcx
mov qword [rsp + 0x138], 2
mov qword [rsp + 0x150], 0
mov qword [rsp + 0x140], rax
mov qword [rsp + 0x148], 1
lea rax, str.stdoutlibrary_std_srciomod.rs
mov qword [rsp + 0x1b0], rax
mov qword [rsp + 0x1b8], 6
mov al, byte [0x1401d2098]
test al, al
je 0x140031ead
call fcn.1400f5e00
test rax, rax
je 0x140031ead
mov rbx, rax
mov rdi, qword [rax]
mov qword [rax], 0
test rdi, rdi
je 0x140031ead
lea rsi, [rdi + 0x10]
mov cl, 1
xor eax, eax
lock cmpxchg byte [rdi + 0x10], cl
jne 0x1400322a5
mov rax, qword [0x1401d2158]
movabs rcx, 0x8000000000000001
add rcx, 0xfffffffffffffffe
mov r15, rcx
test rax, rcx
je 0x1400320c8
call fcn.1400d96e0
mov ebp, eax
xor bpl, 1
jmp 0x1400320ca
mov rax, qword [0x1401d20a0]
cmp rax, 3
jne 0x140032269
call fcn.1400d4f30
test rax, rax
je 0x1400326c8
mov rdi, rax
mov rax, qword [0x1401d20a8]
cmp rax, rdi
jne 0x140031efd
mov eax, dword [0x1401d20b0]
inc eax
jne 0x140031f1b
lea rcx, str.lock_count_overflow_in_reentrant_mutexlibrary_std_src_sync_reentrant_lock.rs
lea r8, [0x140193848]
mov edx, 0x26
call fcn.14003fba0
mov cl, 1
xor eax, eax
lock cmpxchg byte [0x1401d20b4], cl
jne 0x140032285
mov qword [0x1401d20a8], rdi
mov eax, 1
mov dword [0x1401d20b0], eax
lea rax, [0x1401d20a8]
mov qword [rsp + 0xb8], rax
lea rdi, [rsp + 0x40]
mov qword [rdi - 8], rsi
mov qword [rdi], 0
lea rdx, [0x1401929f8]
lea rcx, [rsp + 0x38]
lea r8, [rsp + 0x130]
call fcn.1400398f0
mov rcx, qword [rsp + 0x40]
test al, al
je 0x140031f72
test rcx, rcx
lea rdi, str.formatter_error
cmovne rdi, rcx
jmp 0x140031f81
test rcx, rcx
je 0x140031f7f
mov rcx, rdi
call fcn.1400d37e0
xor edi, edi
mov rcx, qword [rsp + 0xb8]
dec dword [rcx + 8]
jne 0x140031fa7
mov qword [rcx], 0
xor eax, eax
xchg byte [rcx + 0xc], al
cmp al, 2
jne 0x140031fa7
add rcx, 0xc
call fcn.1401222a0
test rdi, rdi
jne 0x1400326f1
cmp qword [rsp + 0x100], 0
je 0x140031fd1
mov r8, qword [rsp + 0x108]
mov rcx, qword [0x1401d2118]
xor edx, edx
call fcn.1401220e0
mov qword [0x1401d2030], 0
mov rax, qword [rsp + 0x1d8]
mov rdi, qword [rax + 0x10]
test rdi, rdi
je 0x140032030
mov rdx, qword [0x1401d2048]
shl rdi, 6
xor esi, esi
cmp rdx, rsi
jbe 0x140032296
mov rax, qword [0x140125030]
mov rcx, qword [rax + rsi*8]
test rcx, rcx
je 0x140032027
xor edx, edx
mov r8d, 0x8000
call sub.kernel32.dll_VirtualFree
mov rdx, qword [0x1401d2048]
inc rsi
add rdi, 0xffffffffffffffc0
jne 0x140031ffa
cmp qword [rsp + 0x250], 0
je 0x140032051
mov r8, qword [rsp + 0x258]
mov rcx, qword [0x1401d2118]
xor edx, edx
call fcn.1401220e0
xor esi, esi
jmp 0x14003000a
mov ecx, 1
jmp 0x140032064
mov rsi, r12
xor ecx, ecx
lea rdi, [rsp + 0x130]
mov qword [rdi + 8], rsi
mov qword [rdi + 0x10], rax
mov qword [rdi + 0x18], r12
mov qword [rdi], rcx
lea rdx, fcn.14002e071
lea r8, str.C:UsersAdmin.cargo_registry_srcindex.crates.io_6f17d22bba15001fcoffee_ldr_0.1.2_srcloadermod.rsFailed_to_allocate_function
mov rcx, rdi
call fcn.14004d015
movdqu xmm0, xmmword [rdi]
movdqu xmm1, xmmword [rdi + 0x10]
lea rcx, [rsp + 0x38]
movdqu xmmword [rcx + 0x28], xmm1
movdqu xmmword [rcx + 0x18], xmm0
lea r8, [0x140136a78]
mov qword [rcx], r8
mov qword [rcx + 8], rax
mov qword [rcx + 0x10], rdx
call fcn.14002def7
mov rsi, rax
jmp 0x14002fffe
xor ebp, ebp
mov al, byte [rdi + 0x11]
lea rax, [rdi + 0x18]
lea r14, [rsp + 0x40]
mov qword [r14 - 8], rax
mov qword [r14], 0
lea rdx, [0x140192a58]
lea rcx, [rsp + 0x38]
lea r8, [rsp + 0x130]
call fcn.1400398f0
mov rcx, qword [rsp + 0x40]
test al, al
je 0x140032120
test rcx, rcx
lea rax, str.formatter_error
cmovne rax, rcx
lea rcx, [rsp + 0x38]
mov qword [rcx], rax
call fcn.1400d37e0
jmp 0x140032136
test rcx, rcx
je 0x14003212d
mov rcx, r14
call fcn.1400d37e0
mov qword [rsp + 0x38], 0
test bpl, bpl
je 0x14003216e
xor eax, eax
xchg byte [rsi], al
cmp al, 2
jne 0x14003214b
mov rcx, rsi
call fcn.1401222a0
mov rcx, qword [rbx]
mov qword [rbx], rdi
test rcx, rcx
je 0x140031fb0
lock dec qword [rcx]
jne 0x140031fb0
call fcn.1400f5f60
jmp 0x140031fb0
mov rax, qword [0x1401d2158]
test rax, r15
je 0x14003213b
call fcn.1400d96e0
test al, al
jne 0x14003213b
mov byte [rdi + 0x11], 1
jmp 0x14003213b
lea rax, [rsp + 0x1b0]
mov qword [rsp + 0x100], rax
lea rax, [0x140042d30]
mov qword [rsp + 0x108], rax
mov eax, 2
mov qword [rsp + 0x38], rax
mov qword [rsp + 0x48], rax
mov qword [rsp + 0x58], 0
movabs rax, 0x400000020
mov qword [rsp + 0x60], rax
mov byte [rsp + 0x68], 3
lea rax, str.Invalid_Symbol_name_offset
lea rdx, [rsp + 0x130]
mov qword [rdx], rax
mov eax, 1
mov qword [rdx + 8], rax
mov qword [rdx + 0x20], r15
mov qword [rdx + 0x28], rax
lea rcx, [rsp + 0x100]
mov qword [rdx + 0x10], rcx
mov qword [rdx + 0x18], rax
lea rsi, [rsp + 0xb8]
mov rcx, rsi
call fcn.140028bd0
mov rdx, qword [rsi]
mov rdi, qword [rsi + 8]
mov rcx, qword [rsi + 0x10]
mov eax, 5
jmp 0x14003222e
mov rcx, qword [rsp + 0x50]
lea rsi, [rsp + 0x130]
mov qword [rsi], rax
mov qword [rsi + 8], rdx
mov qword [rsi + 0x10], rdi
mov qword [rsi + 0x18], rcx
lea rdx, fcn.14002e071
lea r8, str.C:UsersAdmin.cargo_registry_srcindex.crates.io_6f17d22bba15001fcoffee_ldr_0.1.2_srcloadermod.rsFailed_to_allocate_function
mov rcx, rsi
call fcn.14004d015
movdqu xmm0, xmmword [rsi]
movdqu xmm1, xmmword [rsi + 0x10]
jmp 0x14003209a
call fcn.1400f57c0
jmp 0x140031ebe
lea r8, str.C:UsersAdmin.cargo_registry_srcindex.crates.io_6f17d22bba15001fcoffee_ldr_0.1.2_srcloadermod.rsFailed_to_allocate_function
mov rcx, rbx
mov rdx, rbx
call fcn.140038810
lea rcx, [0x1401d20b4]
call fcn.1400d9630
jmp 0x140031f0f
lea r8, str.C:UsersAdmin.cargo_registry_srcindex.crates.io_6f17d22bba15001fcoffee_ldr_0.1.2_srcloadermod.rsFailed_to_allocate_function
mov rcx, rsi
call fcn.140038810
mov rcx, rsi
call fcn.1400d9630
jmp 0x140031e7c
lea rsi, [rsp + 0xb8]
mov qword [rsi], r14
mov qword [rsi + 8], rbp
mov qword [rsi + 0x10], r15
mov qword [rsi + 0x18], rcx
lea rdx, fcn.14002df73
lea r8, str.C:UsersAdmin.cargo_registry_srcindex.crates.io_6f17d22bba15001fcoffee_ldr_0.1.2_srcloadermod.rsFailed_to_allocate_function
mov rcx, rsi
call fcn.14004d015
movdqu xmm0, xmmword [rsi]
movdqu xmm1, xmmword [rsi + 0x10]
lea rcx, [rsp + 0x38]
movdqu xmmword [rcx + 0x28], xmm1
movdqu xmmword [rcx + 0x18], xmm0
lea r8, [0x140136a40]
mov qword [rcx], r8
mov qword [rcx + 8], rax
mov qword [rcx + 0x10], rdx
call fcn.14002def7
mov rsi, rax
mov r14, qword [rsp + 0xd8]
jmp 0x14003235a
call sub.kernel32.dll_GetLastError
movzx ecx, ax
or ecx, 0x80070000
test eax, eax
cmove ecx, eax
call fcn.14002e437
mov rsi, rax
mov word [rbp], 0
test r15, r15
mov r14, qword [rsp + 0xd8]
je 0x14003235a
mov rcx, qword [0x1401d2118]
xor edx, edx
mov r8, rbp
call fcn.1401220e0
cmp qword [rsp + 0x1b0], 0
je 0x14002fffe
mov r8, qword [rsp + 0x1b8]
mov rcx, qword [0x1401d2118]
xor edx, edx
call fcn.1401220e0
jmp 0x14002fffe
lea r8, str.C:UsersAdmin.cargo_registry_srcindex.crates.io_6f17d22bba15001fcoffee_ldr_0.1.2_srcloadermod.rsFailed_to_allocate_function
call fcn.140038810
lea rax, [0x140137480]
lea rcx, [rsp + 0x130]
mov qword [rcx], rax
mov qword [rcx + 8], 1
lea rax, [0x1401bef68]
mov qword [rcx + 0x10], rax
pxor xmm0, xmm0
movdqu xmmword [rcx + 0x18], xmm0
lea rdx, str.C:UsersAdmin.cargo_registry_srcindex.crates.io_6f17d22bba15001fcoffee_ldr_0.1.2_srcloadermod.rsFailed_to_allocate_function
call fcn.14004d275
jmp 0x1400320c0
lea r8, str.C:UsersAdmin.cargo_registry_srcindex.crates.io_6f17d22bba15001fcoffee_ldr_0.1.2_srcloadermod.rsFailed_to_allocate_function
call fcn.140038810
lea r8, str.C:UsersAdmin.cargo_registry_srcindex.crates.io_6f17d22bba15001fcoffee_ldr_0.1.2_srcloadermod.rsFailed_to_allocate_function
jmp 0x1400323eb
lea r8, str.C:UsersAdmin.cargo_registry_srcindex.crates.io_6f17d22bba15001fcoffee_ldr_0.1.2_srcloadermod.rsFailed_to_allocate_function
mov edx, pe_nt_image_headers64
call fcn.140038810
xor ecx, ecx
mov rdi, rdx
jmp 0x140032413
mov eax, 8
jmp 0x14003240e
xor ecx, ecx
jmp 0x140032413
mov eax, 2
xor ecx, ecx
mov edi, 1
movzx edx, di
lea r8, [rsp + 0x38]
mov qword [r8], rcx
mov qword [r8 + 8], rax
mov qword [r8 + 0x10], rdx
mov qword [r8 + 0x18], 0xa
lea rax, [0x140162158]
mov qword [rsp + 0x20], rax
lea rcx, str.called__Result::unwrap____on_an__Err__value
lea r9, fcn.14004f31c
mov edx, 0x2b
call fcn.14003ead0
lea r8, str.C:UsersAdmin.cargo_registry_srcindex.crates.io_6f17d22bba15001fcoffee_ldr_0.1.2_srcloadermod.rsFailed_to_allocate_function
call fcn.140038810
lea rax, str.Cannot_run_x86_COFF_on_x86_64_architecture
lea rcx, [rsp + 0x38]
mov qword [rcx], rax
mov qword [rcx + 8], 1
lea rax, [0x1401bef68]
mov qword [rcx + 0x10], rax
xorps xmm0, xmm0
movups xmmword [rcx + 0x18], xmm0
lea rdx, str.C:UsersAdmin.cargo_registry_srcindex.crates.io_6f17d22bba15001fcoffee_ldr_0.1.2_srcloadermod.rsFailed_to_allocate_function
call fcn.140038470
mov ecx, 1
mov edx, 2
call fcn.1400285b0
lea rax, str.Number_of_sections_is_greater_than_96_
lea rcx, [rsp + 0x38]
mov qword [rcx], rax
mov qword [rcx + 8], 1
lea rax, [0x1401bef68]
mov qword [rcx + 0x10], rax
xorps xmm0, xmm0
movups xmmword [rcx + 0x18], xmm0
lea rdx, str.C:UsersAdmin.cargo_registry_srcindex.crates.io_6f17d22bba15001fcoffee_ldr_0.1.2_srcloadermod.rsFailed_to_allocate_function
call fcn.140038470
mov eax, 1
mov qword [rsp + 0x218], rax
mov qword [rsp + 0x1d0], rdi
mov rcx, qword [rsp + 0x218]
mov rdx, qword [rsp + 0x1d0]
call fcn.1400285b0
lea rcx, str.C:UsersAdmin.cargo_registry_srcindex.crates.io_6f17d22bba15001fcoffee_ldr_0.1.2_srcloadermod.rsFailed_to_allocate_function
call fcn.14003fb80
mov ecx, 8
mov edx, 0x800
call fcn.1400285b0
lea rax, [rsp + 0x128]
mov qword [rsp + 0xb8], rax
lea rax, [0x140032e02]
mov qword [rsp + 0xc0], rax
mov eax, 2
mov qword [rsp + 0x38], rax
mov edx, 1
mov qword [rsp + 0x40], rdx
mov qword [rsp + 0x48], rax
mov qword [rsp + 0x58], 0
movabs rax, 0x400000020
mov qword [rsp + 0x60], rax
mov byte [rsp + 0x68], 3
lea rax, str.Unsupported_relocation_type:
lea rcx, [rsp + 0x130]
mov qword [rcx], rax
mov qword [rcx + 8], rdx
lea rax, [rsp + 0x38]
mov qword [rcx + 0x20], rax
mov qword [rcx + 0x28], rdx
lea rax, [rsp + 0xb8]
mov qword [rcx + 0x10], rax
mov qword [rcx + 0x18], rdx
lea rdx, str.C:UsersAdmin.cargo_registry_srcindex.crates.io_6f17d22bba15001fcoffee_ldr_0.1.2_srcloadermod.rsFailed_to_allocate_function
call fcn.140038470
lea rax, [0x140137388]
lea rcx, [rsp + 0x38]
mov qword [rcx], rax
mov qword [rcx + 8], 1
lea rax, [0x1401bef68]
mov qword [rcx + 0x10], rax
pxor xmm0, xmm0
movdqu xmmword [rcx + 0x18], xmm0
lea rdx, str.C:UsersAdmin.cargo_registry_srcindex.crates.io_6f17d22bba15001fcoffee_ldr_0.1.2_srcloadermod.rsFailed_to_allocate_function
call fcn.140038470
lea rax, str.Failed_to_get_polished_import_name
lea rcx, [rsp + 0x38]
mov qword [rcx], rax
mov qword [rcx + 8], 1
lea rax, [0x1401bef68]
mov qword [rcx + 0x10], rax
xorps xmm0, xmm0
movups xmmword [rcx + 0x18], xmm0
lea rdx, str.C:UsersAdmin.cargo_registry_srcindex.crates.io_6f17d22bba15001fcoffee_ldr_0.1.2_srcloadermod.rsFailed_to_allocate_function
call fcn.140038470
lea rax, [rsp + 0x128]
mov qword [rsp + 0xb8], rax
lea rax, [0x140032e02]
mov qword [rsp + 0xc0], rax
mov eax, 2
mov qword [rsp + 0x38], rax
mov edx, 1
mov qword [rsp + 0x40], rdx
mov qword [rsp + 0x48], rax
mov qword [rsp + 0x58], 0
movabs rax, 0x400000020
mov qword [rsp + 0x60], rax
mov byte [rsp + 0x68], 3
lea rax, str.Unsupported_relocation_type:
lea rcx, [rsp + 0x130]
mov qword [rcx], rax
mov qword [rcx + 8], rdx
lea rax, [rsp + 0x38]
mov qword [rcx + 0x20], rax
mov qword [rcx + 0x28], rdx
lea rax, [rsp + 0xb8]
mov qword [rcx + 0x10], rax
mov qword [rcx + 0x18], rdx
lea rdx, str.C:UsersAdmin.cargo_registry_srcindex.crates.io_6f17d22bba15001fcoffee_ldr_0.1.2_srcloadermod.rsFailed_to_allocate_function
call fcn.140038470
lea rcx, str.C:UsersAdmin.cargo_registry_srcindex.crates.io_6f17d22bba15001fcoffee_ldr_0.1.2_srcloadermod.rsFailed_to_allocate_function
call fcn.14003fb80
lea rcx, str.C:UsersAdmin.cargo_registry_srcindex.crates.io_6f17d22bba15001fcoffee_ldr_0.1.2_srcloadermod.rsFailed_to_allocate_function
call fcn.14003fb80
lea rax, str.library_std_src_threadlocal.rs
mov qword [rsp + 0x20], rax
lea rcx, [0x140198432]
lea r9, [0x1401920d8]
lea r8, [rsp + 0x38]
mov edx, 0x46
call fcn.14003ead0
lea rax, [rsp + 0x1f0]
mov qword [rax], rdi
lea rcx, [rsp + 0x1b0]
mov qword [rsp + 0xb8], rcx
lea rcx, [0x1400d5e20]
mov qword [rsp + 0xc0], rcx
mov qword [rsp + 0xc8], rax
lea rax, [0x1400f3080]
mov qword [rsp + 0xd0], rax
lea rax, str.failed_printing_to_:
lea rcx, [rsp + 0x38]
mov qword [rcx], rax
mov eax, 2
mov qword [rcx + 8], rax
mov qword [rcx + 0x20], 0
mov qword [rcx + 0x10], rsi
mov qword [rcx + 0x18], rax
lea rdx, str.library_std_srcio_stdio.rs
call fcn.140038470
ud2
lea rcx, str.C:UsersAdmin.cargo_registry_srcindex.crates.io_6f17d22bba15001fcoffee_ldr_0.1.2_srcloadermod.rsFailed_to_allocate_function
call fcn.14003fb80
lea rcx, str.C:UsersAdmin.cargo_registry_srcindex.crates.io_6f17d22bba15001fcoffee_ldr_0.1.2_srcloadermod.rsFailed_to_allocate_function
call fcn.14003fb80
lea rcx, str.C:UsersAdmin.cargo_registry_srcindex.crates.io_6f17d22bba15001fcoffee_ldr_0.1.2_srcloadermod.rsFailed_to_allocate_function
call fcn.14003fb80
lea rcx, str.C:UsersAdmin.cargo_registry_srcindex.crates.io_6f17d22bba15001fcoffee_ldr_0.1.2_srcloadermod.rsFailed_to_allocate_function
call fcn.14003fb80
lea rax, [rsp + 0xb8]
mov qword [rsp + 0x130], rax
lea rax, [0x140073d62]
mov qword [rsp + 0x138], rax
lea rax, str.Unknown_internal_function:
lea rcx, [rsp + 0x38]
mov qword [rcx], rax
mov eax, 1
mov qword [rcx + 8], rax
mov qword [rcx + 0x20], 0
mov qword [rcx + 0x10], rbp
mov qword [rcx + 0x18], rax
lea rdx, str.C:UsersAdmin.cargo_registry_srcindex.crates.io_6f17d22bba15001fcoffee_ldr_0.1.2_srcloader_beacon_api.rs
call fcn.140038470
lea rcx, str.C:UsersAdmin.cargo_registry_srcindex.crates.io_6f17d22bba15001fcoffee_ldr_0.1.2_srcloadermod.rsFailed_to_allocate_function
call fcn.14003fb80
mov rax, qword [rsp + 0x28]
mov qword [rsp + 0xb8], rax
mov qword [rsp + 0xc0], rdi
lea rax, [rsp + 0xb8]
mov qword [rsp + 0x100], rax
lea rax, [0x140073d62]
mov qword [rsp + 0x108], rax
lea rax, str.Failed_to_get_procedure_address:
lea rcx, [rsp + 0x38]
mov qword [rcx], rax
mov eax, 1
mov qword [rcx + 8], rax
mov qword [rcx + 0x20], 0
lea rdx, [rsp + 0x100]
mov qword [rcx + 0x10], rdx
mov qword [rcx + 0x18], rax
lea rdx, str.C:UsersAdmin.cargo_registry_srcindex.crates.io_6f17d22bba15001fcoffee_ldr_0.1.2_srcloadermod.rsFailed_to_allocate_function
call fcn.140038470
mov ecx, 2
mov rdx, r15
call fcn.1400285b0
call fcn.1400285d0
lea rcx, str.C:UsersAdmin.cargo_registry_srcindex.crates.io_6f17d22bba15001fcoffee_ldr_0.1.2_srcloadermod.rsFailed_to_allocate_function
call fcn.14003fb80
mov rbx, rax
jmp 0x1400328a7
mov rcx, rsi
mov edx, ebp
call fcn.1400d9730
lock dec qword [rdi]
jne 0x140032902
mov rcx, rdi
call fcn.1400f5f60
jmp 0x140032902
mov rcx, rbx
call fcn.1401226b0
call fcn.140040050
int3