Function at 0x140005ae0
Capabilities:
Create process on windows
Enumerate process modules
Identify system language via api

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x948
movabs r14, 0x8000000000000000
lea rdx, [0x14031fa7e]
lea rsi, [rsp + 0x3b0]
mov r8d, 0xa
mov rcx, rsi
call sym.clap_builder::builder::command::Command::new::hf04bbe7d0a5da9de
lea rax, [0x14031fa88]
mov qword [rsp + 0x610], rax
mov qword [rsp + 0x618], 3
lea rcx, [rsp + 0x680]
mov r8d, 0x2c8
mov rdx, rsi
call sym.memcpy
xorps xmm0, xmm0
movups xmmword [rsp + 0x428], xmm0
movups xmmword [rsp + 0x440], xmm0
movups xmmword [rsp + 0x458], xmm0
movups xmmword [rsp + 0x470], xmm0
movups xmmword [rsp + 0x488], xmm0
movups xmmword [rsp + 0x4a0], xmm0
movups xmmword [rsp + 0x4b8], xmm0
movups xmmword [rsp + 0x4d0], xmm0
movups xmmword [rsp + 0x4e8], xmm0
movups xmmword [rsp + 0x500], xmm0
movups xmmword [rsp + 0x530], xmm0
movups xmmword [rsp + 0x548], xmm0
mov qword [rsp + 0x3b0], 0
mov qword [rsp + 0x3c0], 0
mov qword [rsp + 0x3d8], 0
mov qword [rsp + 0x3e8], 0
movups xmm1, xmmword [rsp + 0x70]
movups xmmword [rsp + 0x3f0], xmm1
mov qword [rsp + 0x400], 5
movups xmm1, xmmword [rsp + 0x90]
movups xmmword [rsp + 0x408], xmm1
mov qword [rsp + 0x418], 0
mov qword [rsp + 0x420], 8
mov qword [rsp + 0x438], 8
mov qword [rsp + 0x450], 8
mov qword [rsp + 0x468], 8
mov qword [rsp + 0x480], 8
mov qword [rsp + 0x498], 8
mov qword [rsp + 0x4b0], 8
mov qword [rsp + 0x4c8], 8
mov qword [rsp + 0x4e0], 8
mov qword [rsp + 0x4f8], 4
mov qword [rsp + 0x510], 8
movups xmmword [rsp + 0x518], xmm0
mov qword [rsp + 0x528], 8
mov qword [rsp + 0x540], 8
mov qword [rsp + 0x558], 8
mov qword [rsp + 0x560], 0
mov qword [rsp + 0x568], r14
movups xmm0, xmmword [rsp + 0xd0]
movups xmmword [rsp + 0x570], xmm0
mov qword [rsp + 0x580], r14
movups xmm0, xmmword [rsp + 0xc0]
movups xmmword [rsp + 0x588], xmm0
lea rax, [0x14031fa8b]
mov qword [rsp + 0x598], rax
mov qword [rsp + 0x5a0], 3
mov qword [rsp + 0x5a8], rax
mov qword [rsp + 0x5b0], 3
mov qword [rsp + 0x5b8], 0
movabs rax, 0x1100000000006b
mov qword [rsp + 0x5c8], rax
mov dword [rsp + 0x5d0], 0
mov word [rsp + 0x5d4], 0xd09
lea rax, [0x14031fa8e]
mov qword [rsp + 0x40], rax
mov qword [rsp + 0x48], 3
mov qword [rsp + 0x50], 0
mov qword [rsp + 0x58], 1
lea rcx, [rsp + 0xe0]
lea rdx, [rsp + 0x40]
call sym._ZN98__LT_alloc..vec..Vec_LT_T_GT__u20_as_u20_alloc..vec..spec_from_iter..SpecFromIter_LT_T_C_I_GT__GT_9from_iter17hcc4845a13e
lea rdi, [rsp + 0x508]
mov rdx, qword [rsp + 0x508]
test rdx, rdx
je 0x140005dc3
shl rdx, 4
mov ecx, 8
mov r8d, 8
call sym.__rust_dealloc
mov rax, qword [rsp + 0xf0]
mov qword [rdi + 0x10], rax
movups xmm0, xmmword [rsp + 0xe0]
movups xmmword [rdi], xmm0
lea rcx, [rsp + 0xe0]
lea rdx, [rsp + 0x3b0]
mov r8d, 0x228
call sym.memcpy
lea rdx, [0x14031fa91]
lea rcx, [rsp + 0x3b0]
mov r8d, 0xa
call sym._ZN99__LT_clap_builder..builder..styled_str..StyledStr_u20_as_u20_core..convert..From_LT__RF_str_GT__GT_4from17hbf5c2ba1ec4092
mov rsi, qword [rsp + 0x3b0]
cmp rsi, r14
je 0x140005e29
movups xmm0, xmmword [rsp + 0x3b8]
movaps xmmword [rsp + 0x40], xmm0
mov rdx, qword [rsp + 0x298]
cmp rdx, r14
je 0x140005e4e
test rdx, rdx
je 0x140005e4e
mov rcx, qword [rsp + 0x2a0]
mov r8d, 1
call sym.__rust_dealloc
mov qword [rsp + 0x298], rsi
movaps xmm0, xmmword [rsp + 0x40]
movups xmmword [rsp + 0x2a0], xmm0
lea rsi, [rsp + 0x3b0]
lea rdx, [rsp + 0xe0]
mov r8d, 0x220
mov rcx, rsi
call sym.memcpy
mov eax, dword [rsp + 0x300]
mov ecx, dword [rsp + 0x304]
and eax, 0xfffffffe
mov dword [rsp + 0x5d0], eax
mov dword [rsp + 0x5d4], ecx
lea rcx, [rsp + 0x680]
mov rdx, rsi
call sym.clap_builder::builder::command::Command::arg_internal::h7d836e20a7d7bcb7
lea rcx, [rsp + 0xe0]
lea rdx, [rsp + 0x680]
mov r8d, 0x2c8
call sym.memcpy
xorps xmm0, xmm0
movups xmmword [rsp + 0x6f8], xmm0
movups xmmword [rsp + 0x710], xmm0
movups xmmword [rsp + 0x728], xmm0
movups xmmword [rsp + 0x740], xmm0
movups xmmword [rsp + 0x758], xmm0
movups xmmword [rsp + 0x770], xmm0
movups xmmword [rsp + 0x788], xmm0
movups xmmword [rsp + 0x7a0], xmm0
movups xmmword [rsp + 0x7b8], xmm0
movups xmmword [rsp + 0x7d0], xmm0
movups xmmword [rsp + 0x7e8], xmm0
movups xmmword [rsp + 0x800], xmm0
movups xmmword [rsp + 0x818], xmm0
mov qword [rsp + 0x680], 0
mov qword [rsp + 0x690], 0
mov qword [rsp + 0x6a8], 0
mov qword [rsp + 0x6b8], 0
mov qword [rsp + 0x6d0], 5
mov qword [rsp + 0x6e8], 0
mov qword [rsp + 0x6f0], 8
mov qword [rsp + 0x708], 8
mov qword [rsp + 0x720], 8
mov qword [rsp + 0x738], 8
mov qword [rsp + 0x750], 8
mov qword [rsp + 0x768], 8
mov qword [rsp + 0x780], 8
mov qword [rsp + 0x798], 8
mov qword [rsp + 0x7b0], 8
mov qword [rsp + 0x7c8], 4
mov qword [rsp + 0x7e0], 8
mov qword [rsp + 0x7f8], 8
mov qword [rsp + 0x810], 8
mov qword [rsp + 0x828], 8
mov qword [rsp + 0x830], 0
mov qword [rsp + 0x838], r14
mov qword [rsp + 0x850], r14
lea rax, [0x14031fa9b]
mov qword [rsp + 0x868], rax
mov qword [rsp + 0x870], 4
mov qword [rsp + 0x878], 0
mov qword [rsp + 0x888], 0
movabs rax, 0x11000000000066
mov qword [rsp + 0x898], rax
mov dword [rsp + 0x8a0], 0
mov word [rsp + 0x8a4], 0xd09
lea rdx, [0x14031fa9f]
lea rcx, [rsp + 0x3b0]
mov r8d, 0x20
call sym._ZN99__LT_clap_builder..builder..styled_str..StyledStr_u20_as_u20_core..convert..From_LT__RF_str_GT__GT_4from17hbf5c2ba1ec4092
mov rsi, qword [rsp + 0x3b0]
cmp rsi, r14
je 0x1400060d0
movups xmm0, xmmword [rsp + 0x3b8]
movaps xmmword [rsp + 0x40], xmm0
lea rbx, [rsp + 0x840]
mov rdx, qword [rsp + 0x838]
cmp rdx, r14
je 0x1400060fd
test rdx, rdx
je 0x1400060fd
mov rcx, qword [rsp + 0x840]
mov r8d, 1
call sym.__rust_dealloc
mov qword [rsp + 0x838], rsi
movaps xmm0, xmmword [rsp + 0x40]
movups xmmword [rbx], xmm0
lea rcx, [rsp + 0x3b0]
lea rdx, [rsp + 0x680]
mov r8d, 0x168
call sym.memcpy
mov r14, qword [rsp + 0x7e8]
lea rdx, [rsp + 0x7f0]
lea rsi, [rsp + 0x520]
mov r8d, 0xb0
mov rcx, rsi
call sym.memcpy
mov ebx, dword [rsp + 0x8a0]
mov ebp, dword [rsp + 0x8a4]
mov qword [rsp + 0x518], r14
mov dword [rsp + 0x5d0], ebx
mov dword [rsp + 0x5d4], ebp
lea rax, [0x14031fabf]
mov qword [rsp + 0x40], rax
mov qword [rsp + 0x48], 4
mov qword [rsp + 0x50], 0
mov qword [rsp + 0x58], 1
lea rcx, [rsp + 0x680]
lea rdx, [rsp + 0x40]
call sym._ZN98__LT_alloc..vec..Vec_LT_T_GT__u20_as_u20_alloc..vec..spec_from_iter..SpecFromIter_LT_T_C_I_GT__GT_9from_iter17hcc4845a13e
mov rdx, qword [rsp + 0x508]
test rdx, rdx
je 0x1400061cf
mov rcx, qword [rsp + 0x510]
shl rdx, 4
mov r8d, 8
call sym.__rust_dealloc
mov rax, qword [rsp + 0x690]
mov qword [rdi + 0x10], rax
movups xmm0, xmmword [rsp + 0x680]
movups xmmword [rdi], xmm0
lea rdi, [rsp + 0x680]
lea rdx, [rsp + 0x3b0]
mov r8d, 0x168
mov rcx, rdi
call sym.memcpy
mov r14, qword [rsp + 0x518]
lea rcx, [rsp + 0x7f0]
mov r8d, 0xb0
mov rdx, rsi
call sym.memcpy
and ebx, 0xfffffffe
mov qword [rsp + 0x7e8], r14
mov dword [rsp + 0x8a0], ebx
mov dword [rsp + 0x8a4], ebp
lea rcx, [rsp + 0xe0]
mov rdx, rdi
call sym.clap_builder::builder::command::Command::arg_internal::h7d836e20a7d7bcb7
lea rcx, [rsp + 0x3b0]
lea rdx, [rsp + 0xe0]
mov r8d, 0x2c8
call sym.memcpy
lea rcx, [rsp + 0xe0]
call sym.std::env::args_os::hd62aa744f44c4fe2
lea rcx, [rsp + 0x680]
lea rdx, [rsp + 0x3b0]
lea r8, [rsp + 0xe0]
call sym.clap_builder::builder::command::Command::get_matches_from::h02eed4ecc9a679af
mov rsi, qword [str.1_F_]
movzx eax, byte [rsi]
mov ecx, 0xe0
mov edx, 8
call sym.__rust_alloc
test rax, rax
je 0x140007107
mov rbx, rax
lea rdx, [0x14031fb70]
mov r8d, 0xe0
mov rcx, rax
call sym.memcpy
movzx eax, byte [rsi]
mov ecx, 0x1000
mov edx, 4
call sym.__rust_alloc
test rax, rax
je 0x14000711b
mov qword [rsp + 0x90], 0x400
mov qword [rsp + 0x98], rax
mov qword [rsp + 0xa0], 0
xor esi, esi
lea r15, [rsp + 0x90]
jmp 0x140006343
mov rax, qword [rsp + 0x98]
mov dword [rax + rsi*4], 0
inc rsi
mov qword [rsp + 0xa0], rsi
cmp rsi, 0x400
je 0x140006357
cmp rsi, qword [rsp + 0x90]
jne 0x140006320
mov rcx, r15
call sym.alloc::raw_vec::RawVec_T_A_::grow_one::h549c26694a0a77df
jmp 0x140006320
mov dword [rsp + 0xc0], 0
mov rcx, qword [rsp + 0x98]
lea r8, [rsp + 0xc0]
mov edx, 0x1000
call sub.psapi.dll_EnumProcesses
test eax, eax
je 0x140006ba4
mov edi, dword [rsp + 0xc0]
mov qword [rsp + 0x70], 0
mov qword [rsp + 0x78], 8
mov qword [rsp + 0x80], 0
cmp rdi, 3
jbe 0x140006b45
mov qword [rsp + 0x38], rbx
shr edi, 2
lea r14, [rsp + 0xd0]
lea r15, [rsp + 0xe0]
xor r12d, r12d
jmp 0x1400063e3
xor ecx, ecx
call fcn.1402fb524
inc r12
cmp r12, rdi
je 0x140006951
mov rdx, qword [rsp + 0xa0]
cmp rdx, r12
jbe 0x140007091
mov rax, qword [rsp + 0x98]
mov r8d, dword [rax + r12*4]
test r8d, r8d
je 0x1400063d7
mov ecx, 0x410
xor edx, edx
call sub.kernel32.dll_OpenProcess
test rax, rax
je 0x1400063d0
mov rbp, rax
mov qword [rsp + 0x40], 0
mov dword [rsp + 0xd0], 0
mov rcx, rax
lea rdx, [rsp + 0x40]
mov r8d, 8
mov r9, r14
call sub.psapi.dll_EnumProcessModules
test eax, eax
je 0x1400063d7
mov qword [rsp + 0xe0], 0
mov qword [rsp + 0xe8], 2
mov qword [rsp + 0xf0], 0
mov rcx, r15
call sym.alloc::raw_vec::RawVec_T_A_::grow_one::h9531e92f772ca656
mov rax, qword [rsp + 0xe8]
mov word [rax], 0
mov qword [rsp + 0xf0], 1
cmp qword [rsp + 0xe0], 1
jne 0x14000649f
mov rcx, r15
call sym.alloc::raw_vec::RawVec_T_A_::grow_one::h9531e92f772ca656
mov rax, qword [rsp + 0xe8]
mov word [rax + 2], 0
mov qword [rsp + 0xf0], 2
cmp qword [rsp + 0xe0], 2
jne 0x1400064cc
mov rcx, r15
call sym.alloc::raw_vec::RawVec_T_A_::grow_one::h9531e92f772ca656
mov rax, qword [rsp + 0xe8]
mov word [rax + 4], 0
mov qword [rsp + 0xf0], 3
cmp qword [rsp + 0xe0], 3
jne 0x1400064f9
mov rcx, r15
call sym.alloc::raw_vec::RawVec_T_A_::grow_one::h9531e92f772ca656
mov rax, qword [rsp + 0xe8]
mov word [rax + 6], 0
mov qword [rsp + 0xf0], 4
mov rax, qword [rsp + 0xe0]
cmp rax, 4
jne 0x140006531
mov rcx, r15
call sym.alloc::raw_vec::RawVec_T_A_::grow_one::h9531e92f772ca656
mov rax, qword [rsp + 0xe0]
mov rcx, qword [rsp + 0xe8]
mov word [rcx + 8], 0
mov qword [rsp + 0xf0], 5
cmp rax, 5
jne 0x140006561
mov rcx, r15
call sym.alloc::raw_vec::RawVec_T_A_::grow_one::h9531e92f772ca656
mov rax, qword [rsp + 0xe0]
mov rcx, qword [rsp + 0xe8]
mov word [rcx + 0xa], 0
mov qword [rsp + 0xf0], 6
cmp rax, 6
jne 0x140006591
mov rcx, r15
call sym.alloc::raw_vec::RawVec_T_A_::grow_one::h9531e92f772ca656
mov rax, qword [rsp + 0xe0]
mov rcx, qword [rsp + 0xe8]
mov word [rcx + 0xc], 0
mov qword [rsp + 0xf0], 7
cmp rax, 7
jne 0x1400065c1
mov rcx, r15
call sym.alloc::raw_vec::RawVec_T_A_::grow_one::h9531e92f772ca656
mov rax, qword [rsp + 0xe0]
mov rcx, qword [rsp + 0xe8]
mov word [rcx + 0xe], 0
mov qword [rsp + 0xf0], 8
cmp rax, 8
jne 0x1400065f1
mov rcx, r15
call sym.alloc::raw_vec::RawVec_T_A_::grow_one::h9531e92f772ca656
mov rax, qword [rsp + 0xe0]
mov r8, qword [rsp + 0xe8]
mov word [r8 + 0x10], 0
mov qword [rsp + 0xf0], 9
cmp rax, 9
jne 0x14000662a
mov rcx, r15
call sym.alloc::raw_vec::RawVec_T_A_::grow_one::h9531e92f772ca656
mov rax, qword [rsp + 0xe0]
mov r8, qword [rsp + 0xe8]
mov word [r8 + 0x12], 0
mov qword [rsp + 0xf0], 0xa
cmp rax, 0xa
jne 0x14000665b
mov rcx, r15
call sym.alloc::raw_vec::RawVec_T_A_::grow_one::h9531e92f772ca656
mov rax, qword [rsp + 0xe0]
mov r8, qword [rsp + 0xe8]
mov word [r8 + 0x14], 0
mov qword [rsp + 0xf0], 0xb
cmp rax, 0xb
jne 0x14000668c
mov rcx, r15
call sym.alloc::raw_vec::RawVec_T_A_::grow_one::h9531e92f772ca656
mov rax, qword [rsp + 0xe0]
mov r8, qword [rsp + 0xe8]
mov word [r8 + 0x16], 0
mov qword [rsp + 0xf0], 0xc
cmp rax, 0xc
jne 0x1400066bd
mov rcx, r15
call sym.alloc::raw_vec::RawVec_T_A_::grow_one::h9531e92f772ca656
mov rax, qword [rsp + 0xe0]
mov r8, qword [rsp + 0xe8]
mov word [r8 + 0x18], 0
mov qword [rsp + 0xf0], 0xd
cmp rax, 0xd
jne 0x1400066ee
mov rcx, r15
call sym.alloc::raw_vec::RawVec_T_A_::grow_one::h9531e92f772ca656
mov rax, qword [rsp + 0xe0]
mov r8, qword [rsp + 0xe8]
mov word [r8 + 0x1a], 0
mov qword [rsp + 0xf0], 0xe
cmp rax, 0xe
jne 0x14000671f
mov rcx, r15
call sym.alloc::raw_vec::RawVec_T_A_::grow_one::h9531e92f772ca656
mov rax, qword [rsp + 0xe0]
mov r8, qword [rsp + 0xe8]
mov word [r8 + 0x1c], 0
mov qword [rsp + 0xf0], 0xf
cmp rax, 0xf
jne 0x140006750
mov rcx, r15
call sym.alloc::raw_vec::RawVec_T_A_::grow_one::h9531e92f772ca656
mov rax, qword [rsp + 0xe0]
mov r8, qword [rsp + 0xe8]
mov word [r8 + 0x1e], 0
mov qword [rsp + 0xf0], 0x10
cmp rax, 0x10
jne 0x140006781
mov rcx, r15
call sym.alloc::raw_vec::RawVec_T_A_::grow_one::h9531e92f772ca656
mov rax, qword [rsp + 0xe0]
mov r8, qword [rsp + 0xe8]
mov word [r8 + 0x20], 0
mov qword [rsp + 0xf0], 0x11
cmp rax, 0x11
jne 0x1400067b2
mov rcx, r15
call sym.alloc::raw_vec::RawVec_T_A_::grow_one::h9531e92f772ca656
mov rax, qword [rsp + 0xe0]
mov r8, qword [rsp + 0xe8]
mov word [r8 + 0x22], 0
mov qword [rsp + 0xf0], 0x12
cmp rax, 0x12
jne 0x1400067e3
mov rcx, r15
call sym.alloc::raw_vec::RawVec_T_A_::grow_one::h9531e92f772ca656
mov rax, qword [rsp + 0xe0]
mov r8, qword [rsp + 0xe8]
mov word [r8 + 0x24], 0
mov qword [rsp + 0xf0], 0x13
cmp rax, 0x13
jne 0x14000680c
mov rcx, r15
call sym.alloc::raw_vec::RawVec_T_A_::grow_one::h9531e92f772ca656
mov r8, qword [rsp + 0xe8]
mov word [r8 + 0x26], 0
mov qword [rsp + 0xf0], 0x14
mov rdx, qword [rsp + 0x40]
mov rcx, rbp
mov r9d, 0x14
call sub.psapi.dll_GetModuleBaseNameW
mov rdx, qword [rsp + 0xf0]
test rdx, rdx
je 0x1400070ed
mov ecx, 1
mov rax, qword [rsp + 0xe8]
xor r8d, r8d
nop word cs:[rax + rax]
cmp word [rax + r8*2], 0
je 0x140006880
movsxd r8, ecx
lea ecx, [r8 + 1]
cmp rdx, r8
ja 0x140006860
jmp 0x1400070f0
lea rcx, [rsp + 0x3b0]
mov rdx, rax
call sym.alloc::string::String::from_utf16::h92bc63552228ad98
mov r13, qword [rsp + 0x3b0]
movabs rax, 0x8000000000000000
cmp r13, rax
je 0x1400070bc
mov rbx, qword [rsp + 0x3b8]
mov rsi, qword [rsp + 0x3c0]
mov rdx, qword [rsp + 0xe0]
test rdx, rdx
je 0x1400068de
mov rcx, qword [rsp + 0xe8]
add rdx, rdx
mov r8d, 2
call sym.__rust_dealloc
mov rcx, rbp
call fcn.1402fb524
test rsi, rsi
je 0x140006932
mov rbp, qword [rsp + 0x80]
cmp rbp, qword [rsp + 0x70]
jne 0x140006904
lea rcx, [rsp + 0x70]
call sym.alloc::raw_vec::RawVec_T_A_::grow_one::hbe4b019416bd2787
mov rax, qword [rsp + 0x78]
lea rcx, [rbp*2]
add rcx, rbp
mov qword [rax + rcx*8], r13
mov qword [rax + rcx*8 + 8], rbx
mov qword [rax + rcx*8 + 0x10], rsi
inc rbp
mov qword [rsp + 0x80], rbp
jmp 0x1400063d7
test r13, r13
je 0x1400063d7
mov r8d, 1
mov rcx, rbx
mov rdx, r13
call sym.__rust_dealloc
jmp 0x1400063d7
mov rcx, qword [rsp + 0x78]
mov rax, qword [rsp + 0x80]
mov qword [rsp + 0x40], 0
mov qword [rsp + 0x48], 8
mov qword [rsp + 0x50], 0
test rax, rax
mov rbx, qword [rsp + 0x38]
lea r15, [rsp + 0x90]
je 0x140006b45
lea rax, [rax + rax*2]
lea rax, [rcx + rax*8]
mov qword [rsp + 0xb0], rax
lea rbx, [rsp + 0xe0]
lea r14, [rsp + 0x3b0]
jmp 0x1400069d6
mov rcx, qword [rsp + 0xb8]
cmp rcx, qword [rsp + 0xb0]
je 0x140006b0e
mov r15, rcx
lea rax, [rcx + 0x18]
mov qword [rsp + 0xb8], rax
mov esi, 8
jmp 0x140006a1d
mov rax, qword [rsp + 0x48]
mov rcx, rdi
shl rcx, 4
mov qword [rax + rcx], r12
mov qword [rax + rcx + 8], r13
inc rdi
mov qword [rsp + 0x50], rdi
nop dword [rax]
add rsi, 0x10
cmp rsi, 0xe8
je 0x1400069c0
mov rdx, qword [r15 + 8]
mov r8, qword [r15 + 0x10]
mov rcx, rbx
call sym.alloc::str::__impl_str_::to_lowercase::h8e88b6ab758a5bb5
mov rax, qword [rsp + 0x38]
mov r12, qword [rax + rsi - 8]
mov r13, qword [rax + rsi]
mov rcx, r14
mov rdx, r12
mov r8, r13
call sym.alloc::str::__impl_str_::to_lowercase::h8e88b6ab758a5bb5
mov rbp, qword [rsp + 0xe8]
mov r8, qword [rsp + 0xf0]
mov rdi, qword [rsp + 0x3b8]
cmp r8, qword [rsp + 0x3c0]
jne 0x140006a7a
mov rcx, rbp
mov rdx, rdi
call sub.msvcrt.dll_memcmp
test eax, eax
je 0x140006ab9
mov rdx, qword [rsp + 0x3b0]
test rdx, rdx
je 0x140006a95
mov r8d, 1
mov rcx, rdi
call sym.__rust_dealloc
mov rdx, qword [rsp + 0xe0]
test rdx, rdx
je 0x140006a10
mov r8d, 1
mov rcx, rbp
call sym.__rust_dealloc
jmp 0x140006a10
mov rdx, qword [rsp + 0x3b0]
test rdx, rdx
je 0x140006ad4
mov r8d, 1
mov rcx, rdi
call sym.__rust_dealloc
mov rdx, qword [rsp + 0xe0]
test rdx, rdx
je 0x140006aef
mov r8d, 1
mov rcx, rbp
call sym.__rust_dealloc
mov rdi, qword [rsp + 0x50]
cmp rdi, qword [rsp + 0x40]
jne 0x1400069ec
lea rcx, [rsp + 0x40]
call sym.alloc::raw_vec::RawVec_T_A_::grow_one::h5071d3b830629e52
jmp 0x1400069ec
cmp qword [rsp + 0x50], 0
mov rdx, qword [rsp + 0x40]
jne 0x140007228
test rdx, rdx
mov rbx, qword [rsp + 0x38]
lea r15, [rsp + 0x90]
je 0x140006b45
mov rcx, qword [rsp + 0x48]
shl rdx, 4
mov r8d, 8
call sym.__rust_dealloc
mov rsi, qword [rsp + 0x80]
test rsi, rsi
je 0x140006b82
mov rdi, qword [rsp + 0x78]
add rdi, 8
jmp 0x140006b69
add rdi, 0x18
dec rsi
je 0x140006b82
mov rdx, qword [rdi - 8]
test rdx, rdx
je 0x140006b60
mov rcx, qword [rdi]
mov r8d, 1
call sym.__rust_dealloc
jmp 0x140006b60
mov rax, qword [rsp + 0x70]
test rax, rax
je 0x140006ba4
mov rcx, qword [rsp + 0x78]
shl rax, 3
lea rdx, [rax + rax*2]
mov r8d, 8
call sym.__rust_dealloc
mov rdx, qword [rsp + 0x90]
test rdx, rdx
je 0x140006bc8
mov rcx, qword [rsp + 0x98]
shl rdx, 2
mov r8d, 4
call sym.__rust_dealloc
call sub.kernel32.dll_IsDebuggerPresent
test eax, eax
jne 0x140007299
mov edx, 0xe0
mov r8d, 8
mov rcx, rbx
call sym.__rust_dealloc
call sub.kernel32.dll_GetSystemDefaultUILanguage
movzx eax, ax
lea ecx, [rax - 0x419]
cmp ecx, 0x2a
ja 0x140006c0f
movabs rdx, 0x6c0400c8601
bt rdx, rcx
jb 0x1400072ac
add eax, 0xfffff7e7
cmp eax, 0x2a
ja 0x140006c2d
movabs rcx, 0x40000080001
bt rcx, rax
jb 0x1400072ac
lea rdx, str.encryption_date.txtrunassrc_main.rs
lea rsi, [rsp + 0xe0]
mov r8d, 0x13
mov rcx, rsi
call sym.p4yx0rl0s3::get_file::h54d817401ed78fad
mov rbx, qword [rsp + 0xe8]
mov r8, qword [rsp + 0xf0]
lea rcx, [rsp + 0x3b0]
mov rdx, rbx
call sym.std::sys::pal::windows::fs::stat::h47195b176f32a1d7
mov r14, qword [rsp + 0x3b0]
mov rdi, qword [rsp + 0x3b8]
mov rdx, qword [rsp + 0xe0]
test rdx, rdx
je 0x140006c95
mov r8d, 1
mov rcx, rbx
call sym.__rust_dealloc
cmp r14d, 2
jne 0x140006dc9
mov rcx, rdi
call sym.core::ptr::drop_in_place_std::io::error::Error_::h07e2fafa96c9fec8
call sym.p4yx0rl0s3::add_to_registry::h6ad4dd5dba7faef0
mov qword [rsp + 0x70], 0
mov qword [rsp + 0x78], 1
mov qword [rsp + 0x80], 0
lea rcx, [rsp + 0x70]
mov r8d, 0xc8
xor edx, edx
call sym.alloc::raw_vec::RawVec_T_A_::reserve::do_reserve_and_handle::h034eac4c98e02ec2
mov rbx, qword [rsp + 0x78]
mov rax, qword [rsp + 0x80]
lea rdi, [rax + 0xc8]
xorps xmm0, xmm0
movups xmmword [rbx + rax + 0xb0], xmm0
movups xmmword [rbx + rax + 0xa0], xmm0
movups xmmword [rbx + rax + 0x90], xmm0
movups xmmword [rbx + rax + 0x80], xmm0
movups xmmword [rbx + rax + 0x70], xmm0
movups xmmword [rbx + rax + 0x60], xmm0
movups xmmword [rbx + rax + 0x50], xmm0
movups xmmword [rbx + rax + 0x40], xmm0
movups xmmword [rbx + rax + 0x30], xmm0
movups xmmword [rbx + rax + 0x20], xmm0
movups xmmword [rbx + rax + 0x10], xmm0
movups xmmword [rbx + rax], xmm0
mov qword [rbx + rax + 0xc0], 0
mov qword [rsp + 0x80], rdi
xor ecx, ecx
mov rdx, rbx
mov r8d, 0xc8
call sub.kernel32.dll_GetModuleFileNameA
mov qword [rsp + 0x40], 0
mov qword [rsp + 0x48], 1
mov qword [rsp + 0x50], 0
test eax, eax
je 0x140006e2a
mov r15d, eax
xor r12d, r12d
lea r14, [rsp + 0x40]
jmp 0x140006daa
mov rax, qword [rsp + 0x48]
mov byte [rax + r12], bpl
inc r12
mov qword [rsp + 0x50], r12
cmp r15, r12
je 0x140006e2a
cmp rdi, r12
je 0x1400070a5
movzx ebp, byte [rbx + r12]
cmp r12, qword [rsp + 0x40]
jne 0x140006d90
mov rcx, r14
call sym.alloc::raw_vec::RawVec_T_A_::grow_one::h176841c59fd30198
jmp 0x140006d90
call sym.p4yx0rl0s3::timer::h246e44a1f94c8c75
lea rdi, [0x14031fa8b]
lea rcx, [rsp + 0x40]
lea rdx, [rsp + 0x680]
mov r9d, 3
mov r8, rdi
call sym.clap_builder::parser::matches::arg_matches::ArgMatches::try_get_one::hb36432b253e9dab9
mov qword [rsp + 0x90], rdi
mov qword [rsp + 0x98], 3
cmp dword [rsp + 0x40], 2
jne 0x14000712f
mov rax, qword [rsp + 0x48]
test rax, rax
je 0x140006fd4
mov rcx, qword [rax + 8]
mov rdx, qword [rax + 0x10]
jmp 0x140006fdb
mov qword [rsp + 0x3b0], 0
mov dword [rsp + 0x90], 0
mov dword [rsp + 0xe0], 0
call sub.kernel32.dll_GetCurrentProcess
lea r8, [rsp + 0x3b0]
mov rcx, rax
mov edx, 8
call sub.advapi32.dll_OpenProcessToken
mov rcx, qword [rsp + 0x3b0]
mov qword [rsp + 0x20], rsi
lea r8, [rsp + 0x90]
mov edx, 0x14
mov r9d, 4
call sub.advapi32.dll_GetTokenInformation
mov ebp, dword [rsp + 0x90]
cmp ebp, 1
jne 0x140006eb5
mov rdx, qword [rsp + 0x40]
test rdx, rdx
je 0x140006f77
mov rcx, qword [rsp + 0x48]
mov r8d, 1
jmp 0x140006f72
lea rdx, [0x14031fc63]
lea rcx, [rsp + 0xe0]
mov r8d, 5
call sym.__str_as_alloc::ffi::c_str::CString::new::SpecNewImpl_::spec_new_impl::h35ff5c462c0ae14b
movabs rax, 0x8000000000000000
cmp qword [rsp + 0xe0], rax
jne 0x1400071d7
mov rbx, qword [rsp + 0xe8]
mov rsi, qword [rsp + 0xf0]
mov rax, qword [rsp + 0x50]
mov qword [rsp + 0x3c0], rax
movups xmm0, xmmword [rsp + 0x40]
movaps xmmword [rsp + 0x3b0], xmm0
lea rcx, [rsp + 0x3b0]
call sym.alloc::ffi::c_str::CString::from_vec_unchecked::h66afadfa2fc559eb
mov rdi, rax
mov r14, rdx
mov dword [rsp + 0x28], 0
mov qword [rsp + 0x20], 0
xor ecx, ecx
mov rdx, rbx
mov r8, rax
xor r9d, r9d
call sub.shell32.dll_ShellExecuteA
mov byte [rdi], 0
test r14, r14
je 0x140006f5e
mov r8d, 1
mov rcx, rdi
mov rdx, r14
call sym.__rust_dealloc
mov byte [rbx], 0
test rsi, rsi
je 0x140006f77
mov r8d, 1
mov rcx, rbx
mov rdx, rsi
call sym.__rust_dealloc
mov rdx, qword [rsp + 0x70]
test rdx, rdx
je 0x140006f91
mov rcx, qword [rsp + 0x78]
mov r8d, 1
call sym.__rust_dealloc
cmp ebp, 1
jne 0x1400072ac
lea rcx, [rsp + 0xe0]
call sym.p4yx0rl0s3::create_token::hafe4ab72805155c4
mov rsi, qword [rsp + 0xe8]
mov rdi, qword [rsp + 0xf0]
mov rcx, rsi
mov rdx, rdi
call sym.p4yx0rl0s3::run::h318edf9a91704c1f
test rax, rax
je 0x140006ffb
mov rcx, rax
call sym.core::ptr::drop_in_place_std::io::error::Error_::h07e2fafa96c9fec8
jmp 0x140007054
mov ecx, 1
xor edx, edx
call sym.p4yx0rl0s3::decrypt::ha6cfe4d4280d908d
mov rsi, rax
test rax, rax
je 0x14000706f
mov ecx, 1
call sym.std::process::exit::h039bc52df5d9aa46
mov rcx, rsi
mov rdx, rdi
call sym.p4yx0rl0s3::note::write_note::h3facebc5f4ba9073
lea rcx, [rsp + 0x3b0]
call sym._ZN10p4yx0rl0s34note8get_file17h9a128f77592ab425E.llvm.2894738389148875258
lea rcx, [rsp + 0x3b0]
call sym.open::that::hdb101c18b840274c
mov qword [rsp + 0x40], rax
test rax, rax
je 0x140007034
lea rcx, [rsp + 0x40]
call sym._ZN4core3ptr42drop_in_place_LT_std..io..error..Error_GT_17h07e2fafa96c9fec8E.llvm.2894738389148875258
mov rdx, qword [rsp + 0x3b0]
test rdx, rdx
je 0x140007054
mov rcx, qword [rsp + 0x3b8]
mov r8d, 1
call sym.__rust_dealloc
mov rdx, qword [rsp + 0xe0]
test rdx, rdx
je 0x14000706f
mov r8d, 1
mov rcx, rsi
call sym.__rust_dealloc
lea rcx, [rsp + 0x680]
call sym.core::ptr::drop_in_place_clap_builder::parser::matches::arg_matches::ArgMatches_::hd22e6db4ff58e264
nop
add rsp, 0x948
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
lea r8, [0x14031fca8]
mov rcx, r12
call sym.core::panicking::panic_bounds_check::hf065bc95f1c7a8f7
jmp 0x1400072b3
lea r8, [0x14031fc90]
mov rcx, rdi
mov rdx, rdi
call sym.core::panicking::panic_bounds_check::hf065bc95f1c7a8f7
jmp 0x1400072b3
lea rax, [0x14031fcd8]
mov qword [rsp + 0x20], rax
lea rcx, [0x14031f9b8]
lea r9, [0x14031f998]
lea r8, [rsp + 0xaf]
mov edx, 0x2b
call sym.core::result::unwrap_failed::h8f275d6668207d54
jmp 0x1400072b3
xor r8d, r8d
lea rax, [0x14031fcc0]
mov rcx, r8
mov r8, rax
call sym.core::panicking::panic_bounds_check::hf065bc95f1c7a8f7
jmp 0x1400072b3
mov ecx, 8
mov edx, 0xe0
call sym.alloc::raw_vec::handle_error::hd43ffb3afada7951
jmp 0x1400072b3
mov ecx, 4
mov edx, 0x1000
call sym.alloc::raw_vec::handle_error::hd43ffb3afada7951
jmp 0x1400072b3
mov rax, qword [rsp + 0x60]
mov qword [rsp + 0x100], rax
movups xmm0, xmmword [rsp + 0x40]
movups xmm1, xmmword [rsp + 0x50]
movaps xmmword [rsp + 0xf0], xmm1
movaps xmmword [rsp + 0xe0], xmm0
mov qword [rsp + 0x70], r15
lea rax, [sym.__T_as_core::fmt::Display_::fmt::h7842089628e2b91c]
mov qword [rsp + 0x78], rax
mov qword [rsp + 0x80], rsi
lea rax, [sym.__clap_builder::parser::error::MatchesError_as_core::fmt::Display_::fmt::hcdf88c63c8e748cd]
mov qword [rsp + 0x88], rax
lea rax, str.Mismatch_between_definition_and_access_of___.
mov qword [rsp + 0x3b0], rax
mov qword [rsp + 0x3b8], 2
mov qword [rsp + 0x3d0], 0
lea rax, [rsp + 0x70]
mov qword [rsp + 0x3c0], rax
mov qword [rsp + 0x3c8], 2
lea rdx, [0x140320400]
lea rcx, [rsp + 0x3b0]
call sym.core::panicking::panic_fmt::h50bba86df16ca19f
jmp 0x1400072b3
movups xmm0, xmmword [rsp + 0xe0]
movups xmm1, xmmword [rsp + 0xf0]
movaps xmmword [rsp + 0x3c0], xmm1
movaps xmmword [rsp + 0x3b0], xmm0
lea rax, [0x14031fc78]
mov qword [rsp + 0x20], rax
lea rcx, [0x14031f9b8]
lea r9, sym.core::ptr::drop_in_place_alloc::ffi::c_str::NulError_::h12ebd1bde57f5422
lea r8, [rsp + 0x3b0]
mov edx, 0x2b
call sym.core::result::unwrap_failed::h8f275d6668207d54
jmp 0x1400072b3
test rdx, rdx
je 0x140007241
mov rcx, qword [rsp + 0x48]
shl rdx, 4
mov r8d, 8
call sym.__rust_dealloc
mov rsi, qword [rsp + 0x80]
test rsi, rsi
jne 0x1400072b5
mov rax, qword [rsp + 0x70]
test rax, rax
je 0x140007270
mov rcx, qword [rsp + 0x78]
shl rax, 3
lea rdx, [rax + rax*2]
mov r8d, 8
call sym.__rust_dealloc
mov rdx, qword [rsp + 0x90]
test rdx, rdx
je 0x140007294
mov rcx, qword [rsp + 0x98]
shl rdx, 2
mov r8d, 4
call sym.__rust_dealloc
mov rbx, qword [rsp + 0x38]
mov edx, 0xe0
mov r8d, 8
mov rcx, rbx
call sym.__rust_dealloc
xor ecx, ecx
call sym.std::process::exit::h039bc52df5d9aa46
ud2
mov rdi, qword [rsp + 0x78]
add rdi, 8
jmp 0x1400072c9
add rdi, 0x18
dec rsi
je 0x14000724e
mov rdx, qword [rdi - 8]
test rdx, rdx
je 0x1400072c0
mov rcx, qword [rdi]
mov r8d, 1
call sym.__rust_dealloc
jmp 0x1400072c0