Function at 0x1400b456a
Capabilities:
Enumerate processes via ntquerysysteminformation
Get system information on windows

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x388
movdqa xmmword [rsp + 0x370], xmm6
mov esi, edx
mov qword [rsp + 0x48], rcx
mov word [rsp + 0x50], si
mov eax, edx
shr eax, 0x10
mov byte [rsp + 0x52], al
lea rdi, [rsp + 0xe0]
mov qword [rdi], 0
mov rax, qword [0x14014b050]
mov rcx, rdi
call rax
mov rax, qword [rdi]
movabs rcx, 0x19db1ded53e8000
cmp rax, rcx
jl 0x1400b45e8
movabs rcx, 0xfe624e212ac18000
add rax, rcx
movabs rcx, 0xd6bf94d5e57a42bd
mul rcx
shr rdx, 0x17
jmp 0x1400b45ea
xor edx, edx
mov qword [rsp + 0xb0], rdx
mov edi, 0x80000
mov ecx, 0x80000
call fcn.140085c2f
mov r13, rax
mov r14, rdx
lea r9, [rsp + 0x54]
mov dword [r9], 0
mov ecx, 5
mov r8d, 0x80000
call qword [sym.imp.ntdll.dll_NtQuerySystemInformation]
cmp eax, 0xc0000004
jne 0x1400b4691
lea r12, [rsp + 0x54]
mov rbx, qword [sym.imp.ntdll.dll_NtQuerySystemInformation]
mov r15, qword [sym.imp.kernel32.dll_HeapFree]
mov eax, dword [rsp + 0x54]
test eax, eax
je 0x1400b4650
add eax, 0x2800
mov rdi, rax
jmp 0x1400b4653
add rdi, rdi
test r13, r13
je 0x1400b4667
mov rcx, qword [0x14014d1f0]
xor edx, edx
mov r8, r14
call r15
mov rcx, rdi
call fcn.140085c2f
mov r13, rax
mov r14, rdx
mov dword [rsp + 0x54], 0
mov ecx, 5
mov r8d, edi
mov r9, r12
call rbx
cmp eax, 0xc0000004
je 0x1400b463e
xor edi, edi
mov ecx, 0x1f4
xor edx, edx
call fcn.1400b3acc
lea r12, [rsp + 0x78]
mov qword [r12], rax
mov qword [r12 + 8], rdx
mov qword [r12 + 0x10], 0
xor ebx, ebx
cmp rdi, qword [rsp + 0x78]
jne 0x1400b46da
mov rcx, r12
mov rdx, rdi
call fcn.1400b444d
mov rdx, qword [rsp + 0x80]
mov rdi, qword [rsp + 0x88]
lea rax, [r14 + rbx]
mov qword [rdx + rdi*8], rax
mov rdi, qword [rsp + 0x88]
inc rdi
mov qword [rsp + 0x88], rdi
mov eax, dword [rax]
add rbx, rax
test rax, rax
jne 0x1400b46b8
mov rcx, qword [rsp + 0x48]
lea rax, [rcx + 0xd8]
mov qword [rsp + 0x90], rax
mov qword [rsp + 0xb8], rax
test sil, sil
je 0x1400b4733
xor edx, edx
mov rsi, rcx
call fcn.1400b4e3b
mov rax, qword [rsi + 0x80]
jmp 0x1400b4735
xor eax, eax
lea rcx, [rsp + 0xd8]
mov qword [rcx], rax
mov rbx, qword [rsp + 0x78]
mov rsi, qword [rsp + 0x80]
xor eax, eax
mov qword [rsp + 0x58], rax
mov qword [rsp + 0x60], 8
mov qword [rsp + 0x68], rax
mov qword [rsp + 0xe0], rbx
mov qword [rsp + 0xe8], rsi
mov qword [rsp + 0xf0], rdi
lea rax, [rsp + 0xb8]
mov qword [rsp + 0xf8], rax
lea rax, [rsp + 0x50]
mov qword [rsp + 0x100], rax
mov qword [rsp + 0x108], rcx
lea rax, [rsp + 0xb0]
mov qword [rsp + 0x110], rax
cmp rbx, rdi
jb 0x1400b4e22
lea r15, [rsp + 0xf8]
call fcn.14008745f
xor r9d, r9d
cmp rdi, 0xffffffffffffffff
sete r9b
cmp r9, rax
cmovbe r9, rax
mov qword [rsp + 0x38], r15
mov qword [rsp + 0x30], rdi
mov qword [rsp + 0x28], rsi
mov qword [rsp + 0x20], 1
lea rcx, [rsp + 0xc0]
mov rdx, rdi
xor r8d, r8d
call fcn.1400b167d
test rbx, rbx
je 0x1400b4819
mov rcx, qword [0x14014d1f0]
xor edx, edx
mov r8, rsi
call qword [sym.imp.kernel32.dll_HeapFree]
mov rax, qword [rsp + 0xd0]
test rax, rax
je 0x1400b485e
mov rcx, qword [rsp + 0xc0]
test rcx, rcx
je 0x1400b485e
xor r8d, r8d
add r8, qword [rcx + 0x10]
dec rax
je 0x1400b4848
mov rcx, qword [rcx + 0x18]
test rcx, rcx
jne 0x1400b4836
mov rax, qword [rsp + 0x58]
mov rdx, qword [rsp + 0x68]
sub rax, rdx
cmp rax, r8
jb 0x1400b4e13
mov qword [rsp + 0xa8], r13
mov qword [rsp + 0x98], r14
mov rax, qword [rsp + 0xd0]
lea rdx, [rsp + 0x230]
mov qword [rdx + 0x10], rax
movdqu xmm0, xmmword [rsp + 0xc0]
movdqa xmmword [rdx], xmm0
lea rsi, [rsp + 0x2b8]
mov rcx, rsi
call fcn.1400b4276
movabs r14, 0x8000000000000000
cmp qword [rsi], r14
jne 0x1400b4d4c
mov r13, qword [rsp + 0x60]
mov rsi, qword [rsp + 0x68]
lea rcx, [rsp + 0x230]
call fcn.1400b32a1
mov rax, qword [rsp + 0x58]
mov qword [rsp + 0xa0], rax
imul rax, rsi, 0x148
add rax, r13
mov qword [rsp + 0x70], rax
mov rbp, r13
test rsi, rsi
je 0x1400b4b7a
lea rbx, [rsp + 0x230]
pcmpeqd xmm6, xmm6
mov rbp, r13
mov rdx, rbp
add rbp, 0x148
mov r15, qword [rdx]
cmp r15, 2
je 0x1400b4b7a
lea rsi, [rdx + 0xc8]
mov r12, qword [rdx + 0xc0]
add rdx, 8
mov r8d, 0xb8
lea rcx, [rsp + 0x2b8]
call sub.VCRUNTIME140.dll_memcpy
mov ecx, 0x10
mov rdi, rbx
rep movsq qword [rdi], qword [rsi]
mov r14, qword [rsp + 0x48]
mov rdi, qword [r14 + 0xf8]
mov rbx, qword [r14 + 0x100]
mov rcx, rdi
mov rdx, rbx
mov r8, r12
call fcn.1400b1516
mov rsi, rax
mov rax, r14
cmp qword [r14 + 0xe8], 0
je 0x1400b4ac6
mov rdi, qword [rax + 0xd8]
mov rax, qword [rax + 0xe0]
mov rdx, rax
and rdx, rsi
shr rsi, 0x39
movd xmm0, esi
punpcklbw xmm0, xmm0
pshuflw xmm0, xmm0, 0
pshufd xmm0, xmm0, 0
lea r8, [rdi - 0x150]
xor r9d, r9d
xor r10d, r10d
movdqu xmm1, xmmword [rdi + rdx]
movdqa xmm2, xmm1
pcmpeqb xmm2, xmm0
pmovmskb r11d, xmm2
test r11w, r11w
je 0x1400b49f1
bsf ebx, r11d
lea r14d, [r11 - 1]
and r14d, r11d
add rbx, rdx
and rbx, rax
neg rbx
imul rbx, rbx, 0x150
mov r11d, r14d
cmp qword [r8 + rbx], r12
jne 0x1400b49c5
jmp 0x1400b4a38
cmp r10, 1
mov r10d, 1
je 0x1400b4a13
pmovmskb ecx, xmm1
xor r10d, r10d
test ecx, ecx
setne r10b
bsf ecx, ecx
add rcx, rdx
and rcx, rax
pcmpeqb xmm1, xmm6
pmovmskb r11d, xmm1
test r11d, r11d
jne 0x1400b4ae3
add rdx, r9
add rdx, 0x10
add r9, 0x10
and rdx, rax
jmp 0x1400b49b3
lea rsi, [rdi + rbx]
add rsi, 0xfffffffffffffeb8
mov r8d, 0x148
lea rcx, [rsp + 0xe0]
mov rdx, rsi
call sub.VCRUNTIME140.dll_memcpy
mov qword [rsi], r15
lea rsi, [rdi + rbx]
add rsi, 0xfffffffffffffec0
mov r8d, 0xb8
mov rcx, rsi
lea rdx, [rsp + 0x2b8]
call sub.VCRUNTIME140.dll_memcpy
mov qword [rsi + 0xb8], r12
add rdi, rbx
add rdi, 0xffffffffffffff80
mov ecx, 0x10
lea rbx, [rsp + 0x230]
mov rsi, rbx
rep movsq qword [rdi], qword [rsi]
cmp qword [rsp + 0xe0], 2
je 0x1400b4ab6
lea rcx, [rsp + 0xe0]
call fcn.1400af49e
cmp rbp, qword [rsp + 0x70]
jne 0x1400b4900
jmp 0x1400b4bb2
mov rcx, qword [rsp + 0x90]
mov rdx, rdi
mov r8, rbx
call fcn.1401083b0
mov rax, qword [rsp + 0x48]
jmp 0x1400b497c
mov dl, byte [rdi + rcx]
test dl, dl
js 0x1400b4af8
movdqa xmm0, xmmword [rdi]
pmovmskb ecx, xmm0
bsf ecx, ecx
mov dl, byte [rdi + rcx]
and dl, 1
movzx edx, dl
mov r8, qword [rsp + 0x48]
sub qword [r8 + 0xe8], rdx
lea rdx, [rcx - 0x10]
and rdx, rax
mov byte [rdi + rcx], sil
mov byte [rdx + rdi + 0x10], sil
inc qword [r8 + 0xf0]
neg rcx
imul rbx, rcx, 0x150
lea rsi, [rdi + rbx]
add rsi, 0xfffffffffffffec0
mov qword [rsi - 0x10], r12
mov qword [rsi - 8], r15
mov r8d, 0xb8
mov rcx, rsi
lea rdx, [rsp + 0x2b8]
call sub.VCRUNTIME140.dll_memcpy
mov qword [rsi + 0xb8], r12
add rdi, rbx
add rdi, 0xffffffffffffff80
mov ecx, 0x10
lea rbx, [rsp + 0x230]
mov rsi, rbx
rep movsq qword [rdi], qword [rsi]
jmp 0x1400b4ab6
mov r8, qword [rsp + 0x70]
mov rax, r8
sub rax, rbp
movabs rcx, 0xc7ce0c7ce0c7ce0d
mul rcx
cmp r8, rbp
je 0x1400b4bb2
mov rsi, rdx
shr rsi, 8
mov rcx, rbp
call fcn.1400af49e
add rbp, 0x148
dec rsi
jne 0x1400b4b9e
cmp qword [rsp + 0xa0], 0
je 0x1400b4bcf
mov rcx, qword [0x14014d1f0]
xor edx, edx
mov r8, r13
call qword [sym.imp.kernel32.dll_HeapFree]
mov rax, qword [rsp + 0x48]
mov r13, qword [rax + 0xf0]
test r13, r13
je 0x1400b4d0e
mov rax, qword [rsp + 0x48]
mov rdi, qword [rax + 0xd8]
mov r14, qword [rax + 0xe0]
lea r15, [rdi + 0x10]
movdqa xmm0, xmmword [rdi]
pmovmskb ebx, xmm0
not ebx
mov r12, qword [rax + 0xe8]
pcmpeqd xmm6, xmm6
mov rbp, rdi
mov rsi, r13
test bx, bx
jne 0x1400b4c39
movdqa xmm0, xmmword [r15]
pmovmskb ebx, xmm0
add rbp, 0xffffffffffffeb00
add r15, 0x10
cmp ebx, 0xffff
je 0x1400b4c1b
not ebx
bsf eax, ebx
neg rax
imul rcx, rax, 0x150
cmp byte [rbp + rcx - 4], 0
mov byte [rbp + rcx - 4], 0
jne 0x1400b4cfe
add rcx, rbp
mov rax, rdi
sub rax, rcx
sar rax, 4
movabs rdx, 0xcf3cf3cf3cf3cf3d
imul rax, rdx
lea rdx, [rax - 0x10]
and rdx, r14
movdqu xmm0, xmmword [rdi + rdx]
pcmpeqb xmm0, xmm6
psllw xmm0, 7
pmovmskb r8d, xmm0
test r8d, r8d
je 0x1400b4c9b
bsr r8w, r8w
xor r8d, 0xf
jmp 0x1400b4ca0
mov r8w, 0x10
movdqu xmm0, xmmword [rdi + rax]
pcmpeqb xmm0, xmm6
pmovmskb r9d, xmm0
or r9d, 0x10000
bsf r9d, r9d
add r8d, r9d
mov r9b, 0x80
cmp r8w, 0xf
jbe 0x1400b4ccd
mov r8, qword [rsp + 0x48]
jmp 0x1400b4cdf
inc r12
mov r8, qword [rsp + 0x48]
mov qword [r8 + 0xe8], r12
mov r9b, 0xff
mov byte [rdi + rax], r9b
mov byte [rdx + rdi + 0x10], r9b
dec r13
mov qword [r8 + 0xf0], r13
add rcx, 0xfffffffffffffeb8
call fcn.1400af49e
lea eax, [rbx - 1]
and eax, ebx
mov ebx, eax
dec rsi
jne 0x1400b4c16
cmp qword [rsp + 0xa8], 0
je 0x1400b4d30
mov rcx, qword [0x14014d1f0]
xor edx, edx
mov r8, qword [rsp + 0x98]
call qword [sym.imp.kernel32.dll_HeapFree]
movaps xmm6, xmmword [rsp + 0x370]
add rsp, 0x388
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
lea rax, [rsp + 0x58]
mov rsi, qword [rax + 0x10]
lea r12, [rsp + 0xe0]
lea rbp, [rsp + 0x2b8]
lea rdi, [rsp + 0x230]
movdqu xmm0, xmmword [rsp + 0x2b8]
movdqa xmmword [rsp + 0xe0], xmm0
mov rbx, qword [rsp + 0x2c8]
mov qword [rsp + 0xf0], rbx
mov r15, qword [rsp + 0xe8]
mov rax, qword [rsp + 0x58]
sub rax, rsi
cmp rax, rbx
jb 0x1400b4dfc
mov r13, qword [rsp + 0x60]
imul rcx, rsi, 0x148
add rcx, r13
imul r8, rbx, 0x148
mov rdx, r15
call sub.VCRUNTIME140.dll_memcpy
add rsi, rbx
mov qword [rsp + 0x68], rsi
mov qword [rsp + 0xf0], 0
mov rcx, r12
call fcn.1400af441
mov rcx, rbp
mov rdx, rdi
call fcn.1400b4276
cmp qword [rsp + 0x2b8], r14
jne 0x1400b4d6d
jmp 0x1400b48bc
lea rcx, [rsp + 0x58]
mov rdx, rsi
mov r8, rbx
call fcn.1401079a1
mov rsi, qword [rsp + 0x68]
jmp 0x1400b4da4
lea rcx, [rsp + 0x58]
call fcn.1401079a1
jmp 0x1400b485e
lea rcx, str.assertion_failed:_vec.capacity_____start___lenC:Users_runneradmin.cargo_registry_srcindex.crates.io_6f17d22bba15001f_rayon_1.7.0_src_vec.rs
lea r8, [0x140132fa8]
mov edx, 0x2f
call fcn.140101580
int3