Function at 0x140001791
Capabilities:
Enumerate processes via ntquerysysteminformation
Get memory capacity
Get system information on windows

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x5d8
movdqa xmmword [rsp + 0x5c0], xmm15
movdqa xmmword [rsp + 0x5b0], xmm14
movdqa xmmword [rsp + 0x5a0], xmm13
movdqa xmmword [rsp + 0x590], xmm12
movdqa xmmword [rsp + 0x580], xmm11
movdqa xmmword [rsp + 0x570], xmm10
movdqa xmmword [rsp + 0x560], xmm9
movdqa xmmword [rsp + 0x550], xmm8
movdqa xmmword [rsp + 0x540], xmm7
movaps xmmword [rsp + 0x530], xmm6
mov ecx, 0xd0
call sym.alloc::alloc::exchange_malloc::h3ef657e0bf52b0de
lea rcx, [0x14008ed00]
mov qword [rax], rcx
mov ecx, 0xd
mov qword [rax + 8], rcx
lea rdx, str.procexp64.exeprocexp.exeProcmon.exeProcmon64.exepestudio.exeKsDumper.exeprl_cc.exeprl_tools.exepe_sieve64.exehollows_hunter32.exeMoneta64.exefakenet.exeWireshark.exeVBoxService.exeVMwareUser.exevmtoolsd.exeVMwareTray.exevmsrvc.exeVGAuthService.exeVBoxTray.exejohn_pclibrarycore_src_fmt_num.rslibrarycore_src_fmtmod.rs
mov qword [rax + 0x10], rdx
mov qword [rax + 0x18], rcx
lea rdx, [0x14008ec75]
mov qword [rax + 0x20], rdx
mov r8d, 0xb
mov qword [rax + 0x28], r8
lea rdx, [0x14008ec80]
mov qword [rax + 0x30], rdx
mov qword [rax + 0x38], r8
lea rdx, [0x14008ec8b]
mov qword [rax + 0x40], rdx
mov qword [rax + 0x48], rcx
lea rdx, [0x14008ec98]
mov qword [rax + 0x50], rdx
mov esi, 0xc
mov qword [rax + 0x58], rsi
lea rdx, [0x14008eca4]
mov qword [rax + 0x60], rdx
mov qword [rax + 0x68], rsi
lea rdx, [0x14008ecb0]
mov qword [rax + 0x70], rdx
mov edi, 0xa
mov qword [rax + 0x78], rdi
lea rdx, [0x14008ecba]
mov qword [rax + 0x80], rdx
mov qword [rax + 0x88], rcx
lea rcx, [0x14008ecc7]
mov qword [rax + 0x90], rcx
mov ebx, 0xe
mov qword [rax + 0x98], rbx
lea rcx, [0x14008ecd5]
mov qword [rax + 0xa0], rcx
mov qword [rax + 0xa8], 0x14
lea rcx, [0x14008ece9]
mov qword [rax + 0xb0], rcx
mov qword [rax + 0xb8], rsi
lea rcx, [0x14008ecf5]
mov qword [rax + 0xc0], rcx
mov qword [rsp + 0x50], rax
mov qword [rax + 0xc8], r8
mov ecx, 0x70
call sym.alloc::alloc::exchange_malloc::h3ef657e0bf52b0de
lea rcx, [0x14008ed5f]
mov qword [rax], rcx
mov qword [rax + 8], rsi
lea rcx, [0x14008ed0d]
mov qword [rax + 0x10], rcx
mov qword [rax + 0x18], 0xf
lea rcx, [0x14008ed1c]
mov qword [rax + 0x20], rcx
mov qword [rax + 0x28], rbx
lea rcx, [0x14008ed2a]
mov qword [rax + 0x30], rcx
mov qword [rax + 0x38], rsi
lea rcx, [0x14008ed36]
mov qword [rax + 0x40], rcx
mov qword [rax + 0x48], rbx
lea rcx, [0x14008ed44]
mov qword [rax + 0x50], rcx
mov qword [rax + 0x58], rdi
lea rcx, [0x14008ed4e]
mov qword [rax + 0x60], rcx
mov qword [rsp + 0x70], rax
mov qword [rax + 0x68], 0x11
lea rsi, [rsp + 0xe0]
mov rcx, rsi
call sym.std::thread::local::LocalKey_T_::try_with::h9aafafb7b874fed0
mov rcx, rsi
call sym.core::result::Result_T_E_::expect::h08f058ad17568eb2
mov r15, rax
mov r12, rdx
lea rdi, [rsp + 0x230]
mov edx, 0x158
mov r8d, 0x1f4
mov rcx, rdi
call sym.hashbrown::raw::RawTableInner::fallible_with_capacity::hd882f83d7fa30d3e
movups xmm0, xmmword [rdi]
movups xmm1, xmmword [rdi + 0x10]
movups xmmword [rsi + 0x48], xmm1
movups xmmword [rsi + 0x38], xmm0
mov ecx, 9
call sym.alloc::raw_vec::RawVec_T_A_::allocate_in::h618e731c4cfbf4c2
movabs rcx, 0x5043206c61746f54
mov qword [rax], rcx
mov byte [rax + 8], 0x55
xorps xmm6, xmm6
movups xmmword [rdi + 0xb0], xmm6
movups xmmword [rdi + 0xc8], xmm6
movups xmmword [rdi + 0x108], xmm6
movups xmmword [rdi + 0x70], xmm6
movups xmmword [rdi + 0x80], xmm6
and qword [rdi], 0
lea rbx, [rsp + 0x238]
lea r8, [rsp + 0xe0]
mov ecx, 0xb
mov rdi, rbx
mov rsi, r8
rep movsq qword [rdi], qword [rsi]
mov qword [rbx + 0x58], r15
mov qword [rbx + 0x60], r12
mov qword [rbx + 0x88], rax
mov qword [rbx + 0x90], rdx
mov qword [rbx + 0x98], 9
mov esi, 1
mov qword [rbx + 0xa0], rsi
mov qword [rbx + 0xb8], rsi
and qword [rbx + 0xd0], 0
and qword [rbx + 0xe8], 0
and dword [rbx + 0xf0], 0
mov qword [rbx + 0xf8], 8
mov byte [rbx + 0x110], 0
movaps xmmword [r8], xmm6
movaps xmmword [r8 + 0x30], xmm6
movaps xmmword [r8 + 0x20], xmm6
movaps xmmword [r8 + 0x10], xmm6
mov dword [r8], 0x40
lea rcx, [rsp + 0xe0]
call sub.KERNEL32.dll_GlobalMemoryStatusEx
test eax, eax
je 0x140001ac5
xor esi, esi
jmp 0x140001aca
call sym.windows_core::error::Error::from_win32::h791f4d3d8e13d07f
lea rdi, [rsp + 0xe0]
movups xmm0, xmmword [rdi + 8]
movups xmmword [rsp + 0x2a0], xmm0
mov rcx, rsi
xor edx, edx
call sym._ZN4core3ptr112drop_in_place_LT_core..result..Result_LT_windows..Win32..Foundation..HANDLE_C_windows_core..error..Error_GT__GT
movaps xmmword [rdi + 0x50], xmm6
movaps xmmword [rdi + 0x40], xmm6
movaps xmmword [rdi + 0x30], xmm6
movaps xmmword [rdi + 0x20], xmm6
movaps xmmword [rdi + 0x10], xmm6
movaps xmmword [rdi], xmm6
and qword [rdi + 0x60], 0
mov rcx, rdi
mov edx, 0x68
call sub.KERNEL32.dll_K32GetPerformanceInfo
test eax, eax
je 0x140001b71
mov r8, qword [rsp + 0x100]
mov rdx, qword [rsp + 0xf0]
xor r9d, r9d
sub rdx, r8
cmovb rdx, r9
mov rcx, qword [rsp + 0x130]
mov rax, rcx
mul rdx
mov r10, 0xffffffffffffffff
cmovo rax, r10
mov rdx, qword [rsp + 0xe8]
sub rdx, r8
cmovb rdx, r9
mov qword [rsp + 0x2b0], rax
mov rax, rcx
mul rdx
cmovo rax, r10
mov qword [rsp + 0x2b8], rax
lea r15, [rsp + 0x2c0]
lea r12, [rsp + 0x308]
cmp qword [r12 - 0xd8], 0
jne 0x140001dbf
lea r8, [rsp + 0x350]
and qword [r8], 0
xor edi, edi
xor ecx, ecx
xor edx, edx
call sub.pdh.dll_PdhOpenQueryA
mov esi, eax
test esi, esi
jne 0x140001bd4
mov r14, qword [rsp + 0x350]
lea rdi, [rsp + 0xe0]
mov rcx, rdi
call sym.std::thread::local::LocalKey_T_::try_with::h9aafafb7b874fed0
mov rcx, rdi
call sym.core::result::Result_T_E_::expect::h08f058ad17568eb2
lea rdi, [0x140097320]
mov qword [rsp + 0x230], rdi
xorps xmm0, xmm0
and qword [rbx + 0x10], 0
movups xmmword [rbx], xmm0
and qword [rsp + 0x268], 0
mov qword [rsp + 0x250], rax
mov qword [rsp + 0x258], rdx
mov qword [rsp + 0x260], r14
test esi, esi
jne 0x140001db6
mov ecx, 0x1e
call sym.alloc::raw_vec::RawVec_T_A_::allocate_in::h618e731c4cfbf4c2
movups xmm0, xmmword [str.Processor__Total___Idle_Timetot_0Processor____Idle_Time]
movups xmmword [rax], xmm0
movups xmm0, xmmword [0x140097616]
movups xmmword [rax + 0xe], xmm0
lea rsi, [rsp + 0x350]
mov qword [rsi], rax
mov qword [rsi + 8], rdx
mov qword [rsi + 0x10], 0x1e
mov ecx, 5
call sym.alloc::raw_vec::RawVec_T_A_::allocate_in::h618e731c4cfbf4c2
mov dword [rax], 0x5f746f74
mov byte [rax + 4], 0x30
lea r9, [rsp + 0xe0]
mov qword [r9], rax
mov qword [r9 + 8], rdx
mov qword [r9 + 0x10], 5
lea rdx, [rsp + 0x230]
mov rcx, rsi
mov r8, r12
call sym.sysinfo::windows::tools::add_english_counter::h8d09d1164d03a8cb
mov rcx, r15
mov dl, 1
call sym.sysinfo::windows::cpu::CpusWrapper::iter_mut::heec8dac58facc41a
mov rbp, rax
mov qword [rsp + 0x48], rdx
xor eax, eax
mov qword [rsp + 0x40], rax
mov r12d, 2
mov edi, 1
cmp rbp, qword [rsp + 0x48]
je 0x140001d9e
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x88], rax
inc rax
mov qword [rsp + 0x40], rax
lea rax, str.v_t_
mov qword [rsp + 0xe0], rax
mov qword [rsp + 0xe8], r12
and qword [rsp + 0x100], 0
lea rsi, [rsp + 0x88]
mov qword [rsp + 0x58], rsi
lea rbx, [sym.core::fmt::num::imp::__impl_core::fmt::Display_for_u64_::fmt::hcc6d072634cb3c73]
mov qword [rsp + 0x60], rbx
lea r15, [rsp + 0x58]
mov qword [rsp + 0xf0], r15
mov qword [rsp + 0xf8], rdi
lea r14, [rsp + 0x4a0]
mov rcx, r14
lea r13, [rsp + 0xe0]
mov rdx, r13
call sym.alloc::fmt::format::h80469b25d54c2778
lea rax, str.combase.dll
mov qword [rsp + 0xe0], rax
mov qword [rsp + 0xe8], r12
and qword [rsp + 0x100], 0
mov qword [rsp + 0x58], rsi
mov qword [rsp + 0x60], rbx
mov qword [rsp + 0xf0], r15
mov qword [rsp + 0xf8], rdi
lea rsi, [rsp + 0x350]
mov rcx, rsi
mov rdx, r13
call sym.alloc::fmt::format::h80469b25d54c2778
lea r8, [rbp + 0x48]
mov rcx, r14
lea rdx, [rsp + 0x230]
mov r9, rsi
call sym.sysinfo::windows::tools::add_english_counter::h8d09d1164d03a8cb
add rbp, 0x70
jmp 0x140001ca8
mov rdi, qword [rsp + 0x230]
lea r15, [rsp + 0x2c0]
lea r12, [rsp + 0x308]
test rdi, rdi
je 0x140001ee4
mov rcx, qword [rsp + 0x260]
call sub.pdh.dll_PdhCollectQueryData
cmp qword [rsp + 0x308], 0
je 0x140001e04
lea rcx, [rsp + 0x230]
mov rdx, r12
call sym.sysinfo::windows::cpu::Query::get::h4f3455361a8d410e
test eax, eax
je 0x140003cb6
movss xmm1, dword [section..rdata]
subss xmm1, xmm0
movss dword [rsp + 0x328], xmm1
mov rcx, r15
mov dl, 1
call sym.sysinfo::windows::cpu::CpusWrapper::iter_mut::heec8dac58facc41a
mov rsi, rax
mov rdi, rdx
add rsi, 0x48
lea rbx, [rsp + 0x230]
movss xmm6, dword [section..rdata]
lea rax, [rsi - 0x48]
cmp rax, rdi
je 0x140001e5c
cmp qword [rsi], 0
je 0x140001e56
mov rcx, rbx
mov rdx, rsi
call sym.sysinfo::windows::cpu::Query::get::h4f3455361a8d410e
test eax, eax
je 0x140003c7a
movaps xmm1, xmm6
subss xmm1, xmm0
movss dword [rsi + 0x20], xmm1
add rsi, 0x70
jmp 0x140001e28
cmp byte [rsp + 0x348], 0
jne 0x140001ee4
mov rsi, qword [rsp + 0x340]
lea rdi, [rsp + 0xe0]
mov rcx, rdi
mov rdx, rsi
call sym.sysinfo::windows::cpu::get_frequencies::h4a8d49da11f57ae0
mov rbx, qword [rsp + 0x330]
mov rcx, qword [rdi]
mov rdx, qword [rdi + 8]
mov rax, qword [rdi + 0x10]
shl rax, 3
imul r8, rsi, 0x70
xor r9d, r9d
mov r10, rbx
test r8, r8
je 0x140001ec2
cmp rax, r9
je 0x140001ec2
mov r11, qword [rcx + r9]
mov qword [r10 + 0x60], r11
add r10, 0x70
add r9, 8
add r8, 0xffffffffffffff90
jmp 0x140001ea2
call sym.__alloc::raw_vec::RawVec_T_A__as_core::ops::drop::Drop_::drop::h9bb8407f273e3b34
test rsi, rsi
je 0x140001ed2
mov rax, qword [rbx + 0x60]
jmp 0x140001ed4
xor eax, eax
mov qword [rsp + 0x320], rax
mov byte [rsp + 0x348], 1
mov byte [rsp + 0x7f], 1
movabs rax, 0x202020202020101
mov qword [rsp + 0x80], rax
mov ebx, 0x80000
mov ecx, 0x80000
call sym.alloc::raw_vec::RawVec_T_A_::allocate_in::h618e731c4cfbf4c2
lea rsi, [rsp + 0xc8]
mov qword [rsi], rax
mov qword [rsi + 8], rdx
and qword [rsi + 0x10], 0
lea r12, [rsp + 0x350]
lea r13, [rsp + 0xe0]
and dword [rsp + 0x350], 0
mov rcx, rsi
mov rdx, rbx
call sym.alloc::vec::Vec_T_A_::reserve::h659a7371d12e0c66
mov rdi, qword [rsp + 0xc8]
mov ecx, 5
mov rdx, rdi
mov r8d, ebx
mov r9, r12
call sub.ntdll.dll_NtQuerySystemInformation
mov rcx, r13
mov edx, eax
call sym.windows::Win32::Foundation::NTSTATUS::ok::h08d23be8d7438f8b
cmp qword [rsp + 0xe0], 0
je 0x140001fb3
cmp dword [rsp + 0xf0], 0xd0000004
mov rcx, qword [rsp + 0xe8]
jne 0x140002063
mov eax, dword [rsp + 0x350]
mov rdx, rbx
add rdx, rbx
lea ebx, [rax + 0x2800]
test eax, eax
cmove rbx, rdx
test rcx, rcx
je 0x140001f2e
mov rax, qword [rcx]
call qword [rax + 0x10]
jmp 0x140001f2e
mov qword [rsp + 0xd8], rbx
mov ecx, 8
mov edx, 0xfa0
call sym._ZN63__LT_alloc..alloc..Global_u20_as_u20_core..alloc..Allocator_GT_8allocate17h85a9a53372bdd702E.1030
test rax, rax
je 0x140003ccb
lea rsi, [rsp + 0x88]
mov qword [rsi], rax
mov qword [rsi + 8], 0x1f4
and qword [rsi + 0x10], 0
xor edx, edx
xor ebx, ebx
mov r14d, dword [rdi + rbx]
cmp rdx, qword [rsp + 0x90]
jne 0x140002015
mov rcx, rsi
call sym.alloc::raw_vec::RawVec_T_A_::reserve_for_push::hc966464098b9889e
mov rax, qword [rsp + 0x88]
mov rdx, qword [rsp + 0x98]
lea rcx, [rdi + rbx]
mov qword [rax + rdx*8], rcx
mov rdx, qword [rsp + 0x98]
inc rdx
mov qword [rsp + 0x98], rdx
add rbx, r14
test r14, r14
jne 0x140001fef
lea rax, [rsp + 0x270]
mov qword [rsp + 0x488], rax
cmp byte [rsp + 0x7f], 0
je 0x14000207e
mov rcx, r15
xor edx, edx
call sym.sysinfo::windows::cpu::CpusWrapper::init_if_needed::hc3989072618d7e38
mov rax, qword [rsp + 0x340]
jmp 0x140002080
test rcx, rcx
je 0x14000206e
mov rax, qword [rcx]
call qword [rax + 0x10]
mov rdx, qword [rsp + 0xd0]
mov rcx, rdi
jmp 0x14000267b
xor eax, eax
mov qword [rsp + 0x490], rax
lea rsi, [rsp + 0xe0]
and qword [rsi], 0
mov rax, qword [sym.std::sys::windows::c::GetSystemTimePreciseAsFileTime::load::h40acc3d17a7dcadb]
mov rcx, rsi
call rax
mov rax, qword [rsi]
movabs rcx, 0x19db1ded53e8000
cmp rax, rcx
jge 0x1400020b6
xor eax, eax
jmp 0x1400020cd
movabs rcx, 0xfe624e212ac18000
add rax, rcx
mov ecx, 0x989680
xor edx, edx
div rcx
lea rcx, [rsp + 0x498]
mov qword [rcx], rax
mov rbx, qword [rsp + 0x98]
mov qword [rsp + 0xf0], rbx
movdqu xmm0, xmmword [rsp + 0x88]
movdqa xmmword [rsp + 0xe0], xmm0
mov qword [rsp + 0x58], 8
pxor xmm0, xmm0
movdqu xmmword [rsp + 0x60], xmm0
lea rax, [rsp + 0x488]
mov qword [rsp + 0xf8], rax
lea rax, [rsp + 0x7f]
mov qword [rsp + 0x100], rax
lea rax, [rsp + 0x490]
mov qword [rsp + 0x108], rax
mov qword [rsp + 0x110], rcx
mov rdi, qword [rsp + 0xe8]
cmp rdi, rbx
jb 0x140003cdc
lea rsi, [rsp + 0xf8]
mov r15, qword [rsi - 0x18]
call sym.rayon_core::current_num_threads::h2884c0756b434a83
xor r9d, r9d
cmp rbx, 0xffffffffffffffff
sete r9b
cmp r9, rax
cmovbe r9, rax
mov qword [rsp + 0x38], rsi
mov qword [rsp + 0x30], rbx
mov qword [rsp + 0x28], r15
mov qword [rsp + 0x20], 1
lea rsi, [rsp + 0x4a0]
mov rcx, rsi
mov rdx, rbx
xor r8d, r8d
call sym.rayon::iter::plumbing::bridge_producer_consumer::helper::hdfcd93af7b8cbad9
test rdi, rdi
je 0x1400021bd
shl rdi, 3
mov edx, 8
mov rcx, r15
mov r8, rdi
call sym.__alloc::alloc::Global_as_core::alloc::Allocator_::deallocate::h88a972f30c63aee8
mov rax, qword [rsp + 0x4b0]
xor edx, edx
sub rax, 1
jb 0x1400021df
mov rsi, qword [rsi]
test rsi, rsi
je 0x1400021df
add rdx, qword [rsi + 0x10]
add rsi, 0x18
jmp 0x1400021c7
lea r13, [rsp + 0x58]
mov rcx, r13
call sym.alloc::vec::Vec_T_A_::reserve::h6911725c2c3aabec
mov rax, qword [rsp + 0x4b0]
lea rdi, [rsp + 0x350]
mov qword [rdi + 0x10], rax
movups xmm0, xmmword [rsp + 0x4a0]
movaps xmmword [rdi], xmm0
lea rsi, [rsp + 0xe8]
lea rbx, [rsp + 0xe0]
mov rcx, rdi
call sym.alloc::collections::linked_list::LinkedList_T_A_::pop_front_node::hd06310d4002c7814
test rax, rax
je 0x1400022ac
mov r15, qword [rax]
movups xmm0, xmmword [rax + 8]
movaps xmmword [rsp + 0xb0], xmm0
mov rcx, rax
call sym.__alloc::boxed::Box_T_A__as_core::ops::drop::Drop_::drop::h2b1fb260d513e105
test r15, r15
je 0x1400022ac
mov qword [rsp + 0xe0], r15
movaps xmm0, xmmword [rsp + 0xb0]
movups xmmword [rsi], xmm0
mov r12, qword [rsp + 0xf0]
mov rcx, r13
mov rdx, r12
call sym.alloc::vec::Vec_T_A_::reserve::h6911725c2c3aabec
mov r14, qword [rsp + 0x68]
imul rcx, r14, 0x150
add rcx, qword [rsp + 0x58]
imul r8, r12, 0x150
mov rdx, r15
call sym.memcpy
add r14, r12
mov qword [rsp + 0x68], r14
and qword [rsp + 0xf0], 0
mov rcx, rbx
call sym.core::ptr::drop_in_place_alloc::vec::Vec_sysinfo::common::Process__::h17e115b9d26360ad
jmp 0x14000221b
lea rcx, [rsp + 0x350]
call sym._ZN98__LT_alloc..collections..linked_list..LinkedList_LT_T_C_A_GT__u20_as_u20_core..ops..drop..Drop_GT_4drop17h24169c533130266
mov r12, qword [rsp + 0x58]
imul rcx, qword [rsp + 0x68], 0x150
mov rax, qword [rsp + 0x60]
mov qword [rsp + 0xa8], rax
lea rax, [r12 + rcx]
mov qword [rsp + 0xa0], rax
lea rbx, [rsp + 0x4a0]
lea r14, [rsp + 0xe0]
mov qword [rsp + 0x48], r12
test rcx, rcx
je 0x14000252e
mov rsi, qword [r12]
cmp rsi, 2
je 0x140002527
mov qword [rsp + 0x40], rcx
lea r15, [r12 + 0xc8]
mov rdi, qword [r12 + 0xc0]
lea rdx, [r12 + 8]
mov r8d, 0xb8
lea rcx, [rsp + 0x350]
call sym.memcpy
mov r8d, 0x88
mov rcx, rbx
mov rdx, r15
call sym.memcpy
mov qword [rsp + 0xb0], rdi
mov rcx, qword [rsp + 0x290]
mov rdx, qword [rsp + 0x298]
mov r8, rdi
call sym.core::hash::BuildHasher::hash_one::ha91f2187a1dcee8c
mov r15, rax
lea rax, [rsp + 0xb0]
mov qword [rsp + 0x58], rax
cmp qword [rsp + 0x280], 0
je 0x14000250d
mov qword [rsp + 0xe0], r13
lea rax, [rsp + 0x270]
mov qword [rsp + 0xe8], rax
mov rcx, qword [rsp + 0x270]
mov rdx, qword [rsp + 0x278]
lea rax, [sym.hashbrown::raw::RawTable_T_A_::find_or_find_insert_slot::__u7b__u7b_closure_u7d__u7d_::h3a66a05fbc751ed7]
mov qword [rsp + 0x20], rax
mov r8, r15
mov r9, r14
call sym.hashbrown::raw::RawTableInner::find_or_find_insert_slot_inner::hf87ce9d961d40a27
test rax, rax
je 0x14000246b
mov rbp, qword [rsp + 0x270]
movzx eax, byte [rbp + rdx]
and eax, 1
sub qword [rsp + 0x280], rax
mov rax, qword [rsp + 0xb0]
shr r15, 0x39
lea rcx, [rdx - 0x10]
and rcx, qword [rsp + 0x278]
mov byte [rbp + rdx], r15b
mov byte [rcx + rbp + 0x10], r15b
inc qword [rsp + 0x288]
neg rdx
imul r13, rdx, 0x158
lea r15, [r13 - 0x148]
add r15, rbp
mov qword [r15 - 0x10], rax
mov qword [r15 - 8], rsi
mov r8d, 0xb8
mov rcx, r15
lea rdx, [rsp + 0x350]
call sym.memcpy
mov qword [r15 + 0xb8], rdi
lea rcx, [r13 - 0x88]
add rcx, rbp
mov r8d, 0x88
mov rdx, rbx
call sym.memcpy
jmp 0x1400024f0
mov r13, qword [rsp + 0x270]
neg rdx
imul rbp, rdx, 0x158
lea r15, [rbp - 0x150]
add r15, r13
mov r8d, 0x150
mov rcx, r14
mov rdx, r15
call sym.memcpy
mov qword [r15], rsi
lea r15, [rbp - 0x148]
add r15, r13
mov r8d, 0xb8
mov rcx, r15
lea rdx, [rsp + 0x350]
call sym.memcpy
mov qword [r15 + 0xb8], rdi
lea rcx, [rbp - 0x88]
add rcx, r13
mov r8d, 0x88
mov rdx, rbx
call sym.memcpy
cmp qword [rsp + 0xe0], 2
je 0x1400024f0
mov rcx, r14
call sym.core::ptr::drop_in_place_sysinfo::windows::process::ProcessInner_::h5d3e05d92b9aeeae
add r12, 0x150
mov rcx, qword [rsp + 0x40]
add rcx, 0xfffffffffffffeb0
lea r13, [rsp + 0x58]
jmp 0x1400022f5
lea rcx, [rsp + 0x270]
lea rdx, [rsp + 0x290]
call sym.hashbrown::raw::RawTable_T_A_::reserve_rehash::hec71201c4e6a3d7f
jmp 0x140002389
add r12, 0x150
mov rax, qword [rsp + 0xa0]
sub rax, r12
mov ecx, 0x150
xor edx, edx
div rcx
mov rcx, r12
mov rdx, rax
call sym.core::ptr::drop_in_place__sysinfo::common::Process__::h743079345fdc7cc4
mov rcx, qword [rsp + 0x48]
mov rdx, qword [rsp + 0xa8]
call sym.__alloc::raw_vec::RawVec_T_A__as_core::ops::drop::Drop_::drop::hfc60ae2141c07221
mov rdi, qword [rsp + 0x270]
mov rbx, qword [rsp + 0x278]
lea rax, [rbx + rdi]
inc rax
movdqa xmm0, xmmword [rdi]
pmovmskb ecx, xmm0
not ecx
lea rdx, [rdi + 0x10]
mov r14, qword [rsp + 0x288]
lea rsi, [rsp + 0xe0]
mov qword [rsi], rdi
mov qword [rsi + 8], rdx
mov qword [rsi + 0x10], rax
mov word [rsi + 0x18], cx
mov qword [rsi + 0x20], r14
mov r15, qword [rsp + 0x280]
mov r12d, 0x158
pcmpeqd xmm6, xmm6
mov rcx, rsi
call sym.__hashbrown::raw::RawIter_T__as_core::iter::traits::iterator::Iterator_::next::hce503848b6e3e53a
test rax, rax
je 0x14000266b
mov rcx, rax
cmp byte [rax - 4], 0
mov byte [rax - 4], 0
jne 0x1400025ba
mov rax, rdi
sub rax, rcx
cqo
idiv r12
lea rdx, [rax - 0x10]
and rdx, rbx
movdqu xmm0, xmmword [rdi + rdx]
pcmpeqb xmm0, xmm6
psllw xmm0, 7
pmovmskb r8d, xmm0
test r8d, r8d
je 0x14000260d
bsr r8w, r8w
xor r8d, 0xf
jmp 0x140002612
mov r8w, 0x10
movdqu xmm0, xmmword [rdi + rax]
pcmpeqb xmm0, xmm6
pmovmskb r9d, xmm0
or r9d, 0x10000
bsf r9d, r9d
add r8d, r9d
mov r9b, pe_nt_image_headers64
cmp r8w, 0xf
ja 0x140002646
inc r15
mov qword [rsp + 0x280], r15
mov r9b, 0xff
mov byte [rdi + rax], r9b
mov byte [rdx + rdi + 0x10], r9b
dec r14
mov qword [rsp + 0x288], r14
add rcx, 0xfffffffffffffeb0
call sym.core::ptr::drop_in_place_sysinfo::windows::process::ProcessInner_::h5d3e05d92b9aeeae
jmp 0x1400025ba
mov rcx, qword [rsp + 0xc8]
mov rdx, qword [rsp + 0xd0]
call sym.__alloc::raw_vec::RawVec_T_A__as_core::ops::drop::Drop_::drop::h77b53a14f7d26e29
mov rax, qword [rsp + 0x230]
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x238]
mov qword [rsp + 0x48], rax
mov rax, qword [rsp + 0x248]
mov qword [rsp + 0xa8], rax
mov rax, qword [rsp + 0x260]
mov qword [rsp + 0x438], rax
mov rax, qword [rsp + 0x268]
mov qword [rsp + 0x430], rax
mov rdi, qword [rsp + 0x270]
mov r14, qword [rsp + 0x278]
mov rbp, qword [rsp + 0x288]
mov rax, qword [rsp + 0x2c0]
mov qword [rsp + 0x470], rax
mov rax, qword [rsp + 0x2c8]
mov qword [rsp + 0x468], rax
mov rax, qword [rsp + 0x2d8]
mov qword [rsp + 0xa0], rax
lea rax, [rdi + r14 + 1]
movdqa xmm0, xmmword [rdi]
pmovmskb r13d, xmm0
not r13d
lea rcx, [rdi + 0x10]
lea r15, [rsp + 0xe0]
mov qword [r15], rdi
mov qword [rsp + 0x410], rcx
mov qword [r15 + 8], rcx
mov qword [rsp + 0x418], rax
mov qword [r15 + 0x10], rax
mov word [r15 + 0x18], r13w
mov qword [r15 + 0x20], rbp
mov rax, qword [rsp + 0x2e0]
mov qword [rsp + 0x448], rax
mov rax, qword [rsp + 0x2f0]
mov qword [rsp + 0x450], rax
mov rax, qword [rsp + 0x2f8]
mov qword [rsp + 0x458], rax
mov rax, qword [rsp + 0x308]
mov qword [rsp + 0x440], rax
mov rax, qword [rsp + 0x310]
mov qword [rsp + 0x428], rax
mov rax, qword [rsp + 0x330]
mov qword [rsp + 0x478], rax
mov rax, qword [rsp + 0x338]
mov qword [rsp + 0x480], rax
mov rax, qword [rsp + 0x340]
mov qword [rsp + 0x460], rax
lea rax, [r14 + 1]
mov qword [rsp + 0x420], rax
mov rcx, r15
call sym.__hashbrown::raw::RawIter_T__as_core::iter::traits::iterator::Iterator_::next::hce503848b6e3e53a
mov r12, rax
test rax, rax
je 0x140002833
mov rbx, qword [r12 - 0xd8]
mov rsi, qword [r12 - 0xc8]
mov r9d, 0xd
mov rcx, rbx
mov rdx, rsi
mov r8, qword [rsp + 0x50]
call sym.__T_as_core::slice::cmp::SliceContains_::slice_contains::h4dd62032a9869527
test al, al
jne 0x140002833
mov r9d, 7
mov rcx, rbx
mov rdx, rsi
mov r8, qword [rsp + 0x70]
call sym.__T_as_core::slice::cmp::SliceContains_::slice_contains::h4dd62032a9869527
test al, al
je 0x1400027df
test r14, r14
je 0x1400028b6
test rbp, rbp
je 0x140002886
lea r15, [rsp + 0xe0]
mov word [r15 + 0x18], r13w
mov qword [r15], rdi
mov rax, qword [rsp + 0x410]
mov qword [r15 + 8], rax
mov rax, qword [rsp + 0x418]
mov qword [r15 + 0x10], rax
mov qword [r15 + 0x20], rbp
mov rcx, r15
call sym.__hashbrown::raw::RawIter_T__as_core::iter::traits::iterator::Iterator_::next::hce503848b6e3e53a
test rax, rax
je 0x140002886
add rax, 0xfffffffffffffeb0
mov rcx, rax
call sym.core::ptr::drop_in_place_sysinfo::windows::process::ProcessInner_::h5d3e05d92b9aeeae
jmp 0x140002869
mov ecx, 0x158
mov rax, qword [rsp + 0x420]
mul rcx
add rax, 0xf
and rax, 0xfffffffffffffff0
lea r8, [r14 + rax]
add r8, 0x11
sub rdi, rax
mov edx, 0x10
mov rcx, rdi
call sym.__alloc::alloc::Global_as_core::alloc::Allocator_::deallocate::h88a972f30c63aee8
mov rcx, qword [rsp + 0x470]
mov rdx, qword [rsp + 0x468]
call sym.__alloc::raw_vec::RawVec_T_A__as_core::ops::drop::Drop_::drop::h77b53a14f7d26e29
mov rcx, qword [rsp + 0x440]
test rcx, rcx
je 0x1400028e5
mov rdx, qword [rsp + 0x428]
call sym.__alloc::raw_vec::RawVec_T_A__as_core::ops::drop::Drop_::drop::h77b53a14f7d26e29
mov rcx, qword [rsp + 0xa0]
mov rdx, qword [rsp + 0x448]
call sym.__alloc::raw_vec::RawVec_T_A__as_core::ops::drop::Drop_::drop::h77b53a14f7d26e29
mov rcx, qword [rsp + 0x450]
mov rdx, qword [rsp + 0x458]
call sym.__alloc::raw_vec::RawVec_T_A__as_core::ops::drop::Drop_::drop::h77b53a14f7d26e29
mov rsi, qword [rsp + 0x478]
mov rcx, rsi
mov rdx, qword [rsp + 0x460]
call sym.__alloc::vec::Vec_T_A__as_core::ops::drop::Drop_::drop::h4e2400e89501b89e
mov rcx, rsi
mov rdx, qword [rsp + 0x480]
call sym.__alloc::raw_vec::RawVec_T_A__as_core::ops::drop::Drop_::drop::he7d5ccf21c84b083
mov r15, qword [rsp + 0x40]
test r15, r15
mov r13, qword [rsp + 0x48]
mov rbp, qword [rsp + 0xa8]
je 0x140002a3d
lea rbx, [r15 + r13]
inc rbx
movdqa xmm0, xmmword [r15]
pmovmskb eax, xmm0
not eax
lea r14, [r15 + 0x10]
lea rdi, [rsp + 0xe0]
mov qword [rdi], r15
mov qword [rdi + 8], r14
mov qword [rdi + 0x10], rbx
mov word [rdi + 0x18], ax
mov qword [rdi + 0x20], rbp
mov rcx, rdi
call sym.__hashbrown::raw::RawIter_T__as_core::iter::traits::iterator::Iterator_::next::hd92c0e4f5e066e46
test rax, rax
je 0x14000299b
mov rcx, qword [rax - 8]
call sub.pdh.dll_PdhRemoveCounter
jmp 0x140002983
mov rdx, qword [rsp + 0x430]
lea rax, [rdx + 1]
cmp rax, 2
jb 0x1400029c9
lea rsi, [rsp + 0xe0]
mov rcx, rsi
call sym.windows::Win32::Foundation::CloseHandle::h0573db1612edaf0e
mov rcx, qword [rsi]
mov rdx, qword [rsi + 8]
call sym._ZN4core3ptr112drop_in_place_LT_core..result..Result_LT_windows..Win32..Foundation..HANDLE_C_windows_core..error..Error_GT__GT
mov rcx, qword [rsp + 0x438]
lea rax, [rcx + 1]
cmp rax, 2
jb 0x1400029e0
call sub.pdh.dll_PdhCloseQuery
test r13, r13
je 0x140002a3d
test rbp, rbp
je 0x140002a2c
movdqa xmm0, xmmword [r15]
pmovmskb eax, xmm0
not eax
lea rdi, [rsp + 0xe0]
mov qword [rdi], r15
mov qword [rdi + 8], r14
mov qword [rdi + 0x10], rbx
mov word [rdi + 0x18], ax
mov qword [rdi + 0x20], rbp
mov rcx, rdi
call sym.__hashbrown::raw::RawIter_T__as_core::iter::traits::iterator::Iterator_::next::hd92c0e4f5e066e46
test rax, rax
je 0x140002a2c
mov rcx, qword [rax - 0x20]
mov rdx, qword [rax - 0x18]
call sym.__alloc::raw_vec::RawVec_T_A__as_core::ops::drop::Drop_::drop::h77b53a14f7d26e29
jmp 0x140002a10
mov r8d, 0x20
mov rcx, r15
mov rdx, r13
call sym.hashbrown::raw::RawTableInner::free_buckets::hf4c7a1bbf30d3b5a
mov edx, 7
mov rcx, qword [rsp + 0x70]
call sym.__alloc::raw_vec::RawVec_T_A__as_core::ops::drop::Drop_::drop::he814a6165b623215
mov edx, 0xd
mov rcx, qword [rsp + 0x50]
call sym.__alloc::raw_vec::RawVec_T_A__as_core::ops::drop::Drop_::drop::he814a6165b623215
mov sil, 1
test r12, r12
jne 0x140003997
lea rdi, [rsp + 0xe0]
mov rcx, rdi
call sym.sysinfo::windows::utils::get_reg_string_value::h55235adc2f98693e
cmp qword [rdi], 0
je 0x140002aa1
mov rax, qword [rsp + 0xf0]
mov qword [rsp + 0x4b0], rax
movdqu xmm0, xmmword [rsp + 0xe0]
movdqa xmmword [rsp + 0x4a0], xmm0
jmp 0x140002aba
mov qword [rsp + 0x4a0], 1
pxor xmm0, xmm0
movdqu xmmword [rsp + 0x4a8], xmm0
lea r12, [rsp + 0x230]
lea rdi, [rsp + 0xe0]
mov rcx, rdi
call sym.sysinfo::windows::utils::get_reg_string_value::h55235adc2f98693e
mov rcx, qword [rdi]
test rcx, rcx
je 0x140002b12
mov r8, qword [rsp + 0xe8]
mov r9, qword [rsp + 0xf0]
test r9, r9
je 0x140002b1a
movzx eax, byte [rcx]
cmp eax, 0x2d
je 0x140002c0f
cmp eax, 0x2b
jne 0x140002c20
dec r9
je 0x140002b1a
lea r10, [rcx + 1]
jmp 0x140002c23
xor r8d, r8d
mov ecx, 1
xor ebx, ebx
xor edi, edi
mov rdx, r8
call sym.__alloc::raw_vec::RawVec_T_A__as_core::ops::drop::Drop_::drop::h77b53a14f7d26e29
test bl, bl
je 0x140002b3b
mov eax, 0xb
cmp edi, 0x55ef
ja 0x140002ced
lea rdx, [0x1400976bf]
lea rdi, [rsp + 0x350]
mov r8d, 0x2c
mov rcx, rdi
call sym.sysinfo::windows::utils::utf16_str::hd324bd1aad8fbd9a
lea rdx, [0x1400976fd]
lea rcx, [rsp + 0x230]
mov r8d, 0x19
call sym.sysinfo::windows::utils::utf16_str::hd324bd1aad8fbd9a
mov rdi, qword [rdi]
mov rcx, rdi
call sym.sysinfo::windows::utils::RegKey::open::he62d97f3037f2965
test rax, rax
je 0x140002be2
mov rbx, rdx
lea rax, [rsp + 0x88]
mov dword [rax], 4
lea r9, [rsp + 0x58]
and dword [r9], 0
mov r14, qword [rsp + 0x230]
mov qword [rsp + 0x20], rax
lea r15, [rsp + 0xe0]
mov rcx, r15
mov r8, r14
call sym.sysinfo::windows::utils::RegKey::get_value::h9cb97b393a6f4baf
cmp qword [r15], 0
je 0x140002ca4
mov rcx, qword [rsp + 0xe8]
test rcx, rcx
je 0x140002bd9
mov rax, qword [rcx]
call qword [rax + 0x10]
xor eax, eax
xor ecx, ecx
jmp 0x140002cae
mov rcx, qword [rsp + 0x230]
mov rdx, qword [rsp + 0x238]
call sym.core::ptr::drop_in_place_alloc::vec::Vec_u16__::hf85d5fe7211cecfc
mov rdx, qword [rsp + 0x358]
mov rcx, rdi
call sym.core::ptr::drop_in_place_alloc::vec::Vec_u16__::hf85d5fe7211cecfc
xor r15d, r15d
jmp 0x140002cdd
xor ebx, ebx
mov r10, rcx
cmp r9, 1
je 0x140002b1c
jmp 0x140002c23
mov r10, rcx
cmp r9, 9
jae 0x140002c5d
xor edi, edi
xor eax, eax
xor r11d, r11d
movzx edx, byte [r10 + rax]
add edx, 0xffffffd0
cmp edx, 0xa
setb bl
jae 0x140002b1e
imul r11d, r11d, 0xa
add edx, r11d
inc rax
mov r11d, edx
cmp r9, rax
jne 0x140002c30
mov edi, edx
jmp 0x140002b1e
xor r11d, r11d
mov ebp, 0xa
xor edi, edi
cmp r9, r11
sete bl
je 0x140002b1e
movzx r14d, byte [r10 + r11]
mov eax, edi
mul ebp
seto dl
add r14d, 0xffffffd0
cmp r14d, 9
ja 0x140002b1c
test dl, dl
jne 0x140002b1c
mov edi, eax
inc r11
add edi, r14d
jae 0x140002c67
jmp 0x140002b1c
mov ecx, dword [rsp + 0x58]
shl rcx, 8
mov al, 1
movzx r15d, al
or r15, rcx
mov rcx, rbx
call sym.__sysinfo::windows::utils::RegKey_as_core::ops::drop::Drop_::drop::h07670ce26e3957d3
mov rdx, qword [rsp + 0x238]
mov rcx, r14
call sym.core::ptr::drop_in_place_alloc::vec::Vec_u16__::hf85d5fe7211cecfc
mov rdx, qword [rsp + 0x358]
mov rcx, rdi
call sym.core::ptr::drop_in_place_alloc::vec::Vec_u16__::hf85d5fe7211cecfc
mov rax, r15
shr rax, 8
xor ecx, ecx
test r15b, 1
cmove eax, ecx
lea rcx, [rsp + 0x58]
mov dword [rcx], eax
mov qword [rsp + 0x230], rcx
lea rax, [sym.core::fmt::num::imp::__impl_core::fmt::Display_for_u32_::fmt::hb5d177372726a64c]
mov qword [rsp + 0x238], rax
lea rbx, [rsp + 0x4a0]
mov qword [rsp + 0x240], rbx
lea rax, str.combase.dll
lea rdx, [rsp + 0xe0]
mov qword [rdx], rax
mov qword [rdx + 8], 3
and qword [rdx + 0x20], 0
lea rax, [sym._ZN60__LT_alloc..string..String_u20_as_u20_core..fmt..Display_GT_3fmt17h9d708f47aaf0abfcE.1066]
mov qword [rsp + 0x248], rax
mov qword [rdx + 0x10], r12
mov qword [rdx + 0x18], 2
lea rdi, [rsp + 0x350]
mov rcx, rdi
call sym.alloc::fmt::format::h80469b25d54c2778
mov rcx, qword [rbx]
mov rdx, qword [rbx + 8]
call sym.__alloc::raw_vec::RawVec_T_A__as_core::ops::drop::Drop_::drop::h77b53a14f7d26e29
lea rbx, [rsp + 0xe0]
mov rcx, rbx
mov rdx, rdi
call sym.core::option::Option_T_::unwrap::h113a1690f032f013
cmp qword [rbx + 0x10], 0
je 0x140002ddf
mov rcx, qword [rsp + 0xe0]
movzx edi, byte [rcx]
test dil, dil
jns 0x140002e08
mov eax, edi
and eax, 0x1f
movzx r8d, byte [rcx + 1]
and r8d, 0x3f
cmp dil, 0xdf
jbe 0x140002df7
movzx edx, byte [rcx + 2]
shl r8d, 6
and edx, 0x3f
or edx, r8d
cmp dil, 0xf0
jb 0x140002e01
movzx edi, byte [rcx + 3]
and eax, 7
shl eax, 0x12
shl edx, 6
and edi, 0x3f
or edi, edx
or edi, eax
cmp edi, 0x110000
jne 0x140002e08
lea rcx, [0x140097373]
lea r8, str.xw_t_
mov edx, 0x2b
jmp 0x140003cef
shl eax, 6
or eax, r8d
mov edi, eax
jmp 0x140002e08
shl eax, 0xc
or edx, eax
mov edi, edx
mov rdx, qword [rsp + 0xe8]
call sym.__alloc::raw_vec::RawVec_T_A__as_core::ops::drop::Drop_::drop::h77b53a14f7d26e29
cmp edi, 0x30
je 0x140003997
lea r14, [rsp + 0x4a0]
and dword [r14], 0
lea rcx, [rsp + 0x230]
xor edx, edx
mov r8, r14
call sym.windows::Win32::System::SystemInformation::GetComputerNameExW::h274fb5e466baa31b
mov ebx, dword [r14]
mov rcx, rbx
mov dl, 1
call sym.alloc::raw_vec::RawVec_T_A_::allocate_in::hc618bf17f6467963
mov rdi, rax
mov rsi, rdx
lea r15, [rsp + 0xe0]
mov rcx, r15
mov rdx, rax
mov r8, r14
call sym.windows::Win32::System::SystemInformation::GetComputerNameExW::h274fb5e466baa31b
mov r14, qword [r15]
mov rdx, qword [r15 + 8]
mov rcx, r14
call sym._ZN4core3ptr112drop_in_place_LT_core..result..Result_LT_windows..Win32..Foundation..HANDLE_C_windows_core..error..Error_GT__GT
test r14, r14
je 0x140002ea7
mov rcx, rdi
mov rdx, rsi
call sym.core::ptr::drop_in_place_alloc::vec::Vec_u16__::hf85d5fe7211cecfc
mov rcx, qword [rsp + 0x230]
mov rdx, qword [rsp + 0x238]
call sym._ZN4core3ptr112drop_in_place_LT_core..result..Result_LT_windows..Win32..Foundation..HANDLE_C_windows_core..error..Error_GT__GT
and qword [rsp + 0x350], 0
jmp 0x140002f2e
lea rcx, [rbx + rbx]
xor eax, eax
test rcx, rcx
je 0x140002ec5
cmp word [rdi + rax*2], 0
je 0x140002ec2
inc rax
add rcx, 0xfffffffffffffffe
jmp 0x140002ead
mov rbx, rax
lea r14, [rsp + 0xe0]
mov rcx, r14
mov rdx, rdi
mov r8, rbx
call sym.alloc::string::String::from_utf16::hf4e942ceace3f5a0
cmp qword [r14], 0
je 0x140002f05
mov rax, qword [rsp + 0xf0]
mov qword [rsp + 0x360], rax
movdqu xmm0, xmmword [rsp + 0xe0]
movdqa xmmword [rsp + 0x350], xmm0
jmp 0x140002f0e
and qword [rsp + 0x350], 0
mov rcx, rdi
mov rdx, rsi
call sym.core::ptr::drop_in_place_alloc::vec::Vec_u16__::hf85d5fe7211cecfc
mov rcx, qword [rsp + 0x230]
mov rdx, qword [rsp + 0x238]
call sym._ZN4core3ptr112drop_in_place_LT_core..result..Result_LT_windows..Win32..Foundation..HANDLE_C_windows_core..error..Error_GT__GT
lea rsi, [rsp + 0x230]
lea rdx, [rsp + 0x350]
mov rcx, rsi
call sym.core::option::Option_T_::unwrap::h113a1690f032f013
mov r15, qword [rsi]
mov r12, qword [rsi + 0x10]
test r12, r12
je 0x14000322d
js 0x140003d09
mov rdi, r12
not rdi
shr rdi, 0x3f
mov al, byte [0x14009e150]
mov rcx, r12
mov rdx, rdi
call sym.__rust_alloc
test rax, rax
je 0x140003d10
mov r14, rax
cmp r12, 0x10
jb 0x140003233
xor edi, edi
movabs rax, 0x8080808080808080
movapd xmm0, xmmword [0x14008d010]
pxor xmm2, xmm2
packuswb xmm2, xmm2
movdqa xmm5, xmmword [0x14008d040]
movdqa xmm6, xmmword [0x14008d050]
movdqa xmm7, xmmword [0x14008d060]
movdqa xmm8, xmmword [0x14008d070]
movdqa xmm9, xmmword [0x14008d080]
movdqa xmm10, xmmword [0x14008d090]
movdqa xmm11, xmmword [0x14008d0a0]
movdqa xmm12, xmmword [0x14008d0b0]
movdqa xmm14, xmmword [0x14008d0d0]
mov rdx, qword [r15 + rdi]
movdqu xmm1, xmmword [r15 + rdi]
pshufd xmm13, xmm1, 0xee
movq rcx, xmm13
mov r8, rcx
or r8, rdx
test r8, rax
jne 0x140003235
mov r9, rdx
mov r11, rdx
mov r8, rdx
shr r8, 0x28
mov r10, rdx
shr r10, 0x20
pshufd xmm13, xmm1, 0x44
movdqa xmm4, xmm1
psrlq xmm4, 0x10
psrlq xmm13, 0x18
movsd xmm13, xmm4
shr edx, 8
movd xmm4, edx
movdqa xmm15, xmm1
punpcklqdq xmm15, xmm4
andpd xmm13, xmm0
pand xmm15, xmm0
packuswb xmm15, xmm13
movd xmm4, r10d
pshufd xmm4, xmm4, 0x50
movdqa xmm13, xmmword [0x14008d020]
pandn xmm13, xmm4
movd xmm4, r8d
psllq xmm4, 0x28
movdqa xmm3, xmmword [0x14008d030]
pandn xmm3, xmm4
mov rdx, rcx
shr rdx, 0x28
mov r8, rcx
shr r8, 0x20
mov r10d, ecx
shr r10d, 0x18
mov esi, ecx
shr esi, 0x10
mov ebx, ecx
shr ebx, 8
shr r9, 0x38
shr r11, 0x30
packuswb xmm15, xmmword [0x14008d110]
packuswb xmm15, xmm2
por xmm3, xmm13
por xmm3, xmm15
pand xmm3, xmm5
movd xmm4, r11d
psllq xmm4, 0x30
movdqa xmm13, xmm5
pandn xmm13, xmm4
por xmm13, xmm3
pand xmm13, xmm6
movd xmm3, r9d
psllq xmm3, 0x38
movdqa xmm4, xmm6
pandn xmm4, xmm3
por xmm4, xmm13
pand xmm4, xmm7
movd xmm3, ecx
pshufd xmm3, xmm3, 0x44
movdqa xmm13, xmm7
pandn xmm13, xmm3
por xmm13, xmm4
pand xmm13, xmm8
movd xmm3, ebx
pslldq xmm3, 9
movdqa xmm4, xmm8
pandn xmm4, xmm3
por xmm4, xmm13
pand xmm4, xmm9
movd xmm3, esi
pslldq xmm3, 0xa
movdqa xmm13, xmm9
pandn xmm13, xmm3
por xmm13, xmm4
pand xmm13, xmm10
movd xmm3, r10d
pslldq xmm3, 0xb
movdqa xmm4, xmm10
pandn xmm4, xmm3
por xmm4, xmm13
pand xmm4, xmm11
movd xmm3, r8d
pshufd xmm3, xmm3, 0
movdqa xmm13, xmm11
pandn xmm13, xmm3
por xmm13, xmm4
movd xmm3, edx
pslldq xmm3, 0xd
movdqa xmm4, xmm12
pandn xmm4, xmm3
shr rcx, 0x30
pand xmm13, xmm12
por xmm4, xmm13
pand xmm4, xmmword [0x14008d0c0]
movd xmm3, ecx
pslldq xmm3, 0xe
por xmm3, xmm4
pand xmm3, xmm14
movdqa xmm4, xmm14
pandn xmm4, xmm1
por xmm4, xmm3
movdqa xmm1, xmm4
paddb xmm1, xmmword [0x14008d0e0]
movdqa xmm3, xmm1
pminub xmm3, xmmword [0x14008d0f0]
pcmpeqb xmm3, xmm1
pand xmm3, xmmword [0x14008d100]
por xmm3, xmm4
movdqu xmmword [r14 + rdi], xmm3
lea rcx, [rdi + 0x10]
add rdi, 0x20
cmp rdi, r12
mov rdi, rcx
jbe 0x140002ff7
mov rdi, rcx
jmp 0x140003235
mov r14d, 1
xor edi, edi
mov rax, r12
mov qword [rsp + 0xe0], r14
mov qword [rsp + 0xe8], r12
mov qword [rsp + 0xf0], rdi
sub rax, rdi
mov qword [rsp + 0x50], rax
jne 0x140003262
mov rbx, r12
jmp 0x140003962
mov qword [rsp + 0x40], r14
lea r14, [r15 + rdi]
add r12, r15
lea rax, str.library_alloc_src_str.rs
mov qword [rsp + 0x48], rax
lea rbp, [0x1400903e0]
xor ebx, ebx
mov r13, r14
mov qword [rsp + 0x70], r12
mov rsi, r13
movzx r15d, byte [r13]
test r15b, r15b
js 0x14000329e
lea r13, [rsi + 1]
jmp 0x140003308
mov eax, r15d
and eax, 0x1f
movzx edx, byte [rsi + 1]
and edx, 0x3f
cmp r15b, 0xdf
jbe 0x1400032ee
movzx ecx, byte [rsi + 2]
shl edx, 6
and ecx, 0x3f
or ecx, edx
cmp r15b, 0xf0
jb 0x1400032fc
movzx r15d, byte [rsi + 3]
and eax, 7
shl eax, 0x12
shl ecx, 6
and r15d, 0x3f
or r15d, ecx
or r15d, eax
cmp r15d, 0x110000
je 0x140003947
lea r13, [rsi + 4]
jmp 0x140003308
lea r13, [rsi + 2]
shl eax, 6
or eax, edx
mov r15d, eax
jmp 0x140003308
lea r13, [rsi + 3]
shl eax, 0xc
or ecx, eax
mov r15d, ecx
cmp r15d, 0x3a3
je 0x140003340
cmp r15d, 0x110000
je 0x140003947
cmp r15d, 0x80
jae 0x140003358
lea eax, [r15 - 0x41]
xor ecx, ecx
cmp al, 0x1a
setb cl
shl ecx, 5
or ecx, r15d
mov r15d, ecx
jmp 0x14000352c
test rbx, rbx
je 0x1400033b4
cmp rbx, qword [rsp + 0x50]
jae 0x1400033ae
cmp byte [r14 + rbx], 0xbf
jg 0x1400033b4
jmp 0x140003c94
mov eax, 0x57f
xor edx, edx
mov ecx, 0x57f
shr rax, 1
add rax, rdx
xor r8d, r8d
cmp dword [rbp + rax*8], r15d
setne r8b
mov r9d, 0xff
cmovb r8d, r9d
cmp r8b, 1
je 0x1400033a1
movzx edx, r8b
cmp edx, 0xff
jne 0x1400034aa
inc rax
mov rdx, rax
mov rax, rcx
jmp 0x1400033a4
mov rcx, rax
sub rax, rdx
ja 0x140003364
jmp 0x140003523
jne 0x140003c94
lea r12, [r14 + rbx]
xor eax, eax
cmp r12, r14
je 0x14000349e
movzx r15d, byte [r12 - 1]
test r15b, r15b
js 0x1400033d3
dec r12
jmp 0x14000342e
movzx ecx, byte [r12 - 2]
cmp cl, 0xc0
jge 0x140003403
movzx edx, byte [r12 - 3]
cmp dl, 0xc0
jge 0x14000340c
movzx r8d, byte [r12 - 4]
add r12, 0xfffffffffffffffc
and r8d, 7
shl r8d, 6
and edx, 0x3f
or edx, r8d
jmp 0x140003413
add r12, 0xfffffffffffffffe
and ecx, 0x1f
jmp 0x14000341b
add r12, 0xfffffffffffffffd
and edx, 0xf
shl edx, 6
and ecx, 0x3f
or ecx, edx
shl ecx, 6
and r15d, 0x3f
or r15d, ecx
cmp r15d, 0x110000
je 0x14000349e
test al, al
jne 0x140003448
mov ecx, r15d
call sym.core::unicode::unicode_data::case_ignorable::lookup::h24fdbac95c6d5bd2
test al, al
je 0x140003448
mov r15d, 0x110000
xor eax, eax
jmp 0x14000344a
mov al, 1
cmp r15d, 0x110000
je 0x1400033ba
mov ecx, r15d
call sym.core::unicode::unicode_data::cased::lookup::ha78952b2b6a865d1
lea r15, str.library_alloc_src_raw_vec.rscapacity_overflow
test al, al
je 0x1400036bb
mov r15, rbx
mov rbp, qword [rsp + 0x50]
add r15, 2
je 0x1400035ed
mov rbp, qword [rsp + 0x50]
sub rbp, r15
jbe 0x1400035e7
cmp byte [r14 + r15], 0xbf
jg 0x1400035ed
jmp 0x140003cf6
lea r15, str.library_alloc_src_raw_vec.rscapacity_overflow
jmp 0x1400036bb
mov r15d, dword [rbp + rax*8 + 4]
mov eax, r15d
xor eax, 0xd800
add eax, 0xffef0000
cmp eax, 0xffef0800
setb al
cmp r15d, 0x110000
sete cl
or cl, al
mov eax, 0x69
cmovne r15d, eax
je 0x140003523
cmp r15d, 0x80
jae 0x1400037d6
cmp rdi, qword [rsp + 0xe8]
jne 0x14000350a
lea rcx, [rsp + 0xe0]
mov rdx, rdi
call sym.alloc::raw_vec::RawVec_T_A_::reserve_for_push::ha0d84f27a256a5b1
mov rdi, qword [rsp + 0xf0]
mov rax, qword [rsp + 0xe0]
mov qword [rsp + 0x40], rax
mov byte [rax + rdi], r15b
inc rdi
jmp 0x1400038e2
cmp r15d, 0x80
jae 0x140003567
cmp rdi, qword [rsp + 0xe8]
jne 0x14000354e
lea rcx, [rsp + 0xe0]
mov rdx, rdi
call sym.alloc::raw_vec::RawVec_T_A_::reserve_for_push::ha0d84f27a256a5b1
mov rdi, qword [rsp + 0xf0]
mov rax, qword [rsp + 0xe0]
mov qword [rsp + 0x40], rax
mov byte [rax + rdi], r15b
inc rdi
jmp 0x140003722
and dword [rsp + 0x350], 0
mov eax, r15d
cmp r15d, 0x800
jae 0x1400035a2
shr eax, 6
or al, 0xc0
mov byte [rsp + 0x350], al
and r15b, 0x3f
or r15b, 0x80
mov byte [rsp + 0x351], r15b
mov r15d, 2
jmp 0x140003782
cmp r15d, 0x10000
jae 0x14000373e
shr eax, 0xc
or al, 0xe0
mov byte [rsp + 0x350], al
mov eax, r15d
shr eax, 6
and al, 0x3f
or al, 0x80
mov byte [rsp + 0x351], al
and r15b, 0x3f
or r15b, 0x80
mov byte [rsp + 0x352], r15b
mov r15d, 3
jmp 0x140003782
jne 0x140003cf6
add r15, r14
add rbp, r15
xor eax, eax
cmp r15, rbp
je 0x1400036b4
movzx r12d, byte [r15]
test r12b, r12b
js 0x14000360c
inc r15
jmp 0x140003678
mov ecx, r12d
and ecx, 0x1f
movzx r8d, byte [r15 + 1]
and r8d, 0x3f
cmp r12b, 0xdf
jbe 0x14000365d
movzx edx, byte [r15 + 2]
shl r8d, 6
and edx, 0x3f
or edx, r8d
cmp r12b, 0xf0
jb 0x14000366c
movzx r12d, byte [r15 + 3]
and ecx, 7
shl ecx, 0x12
shl edx, 6
and r12d, 0x3f
or r12d, edx
or r12d, ecx
cmp r12d, 0x110000
je 0x1400036b4
add r15, 4
jmp 0x140003678
add r15, 2
shl ecx, 6
or ecx, r8d
mov r12d, ecx
jmp 0x140003678
add r15, 3
shl ecx, 0xc
or edx, ecx
mov r12d, edx
test al, al
jne 0x140003692
mov ecx, r12d
call sym.core::unicode::unicode_data::case_ignorable::lookup::h24fdbac95c6d5bd2
test al, al
je 0x140003692
mov r12d, 0x110000
xor eax, eax
jmp 0x140003694
mov al, 1
cmp r12d, 0x110000
je 0x1400035f5
mov ecx, r12d
call sym.core::unicode::unicode_data::cased::lookup::ha78952b2b6a865d1
lea r15, str.library_alloc_src_raw_vec.rscapacity_overflow
test al, al
jne 0x1400036bb
lea r15, [0x14008ebda]
mov rax, qword [rsp + 0xe8]
sub rax, rdi
cmp rax, 1
ja 0x140003700
mov r8d, 2
lea rcx, [rsp + 0xe0]
mov rdx, rdi
call sym.alloc::raw_vec::RawVec_T_A_::reserve::do_reserve_and_handle::hc1e8940d432defd0
mov r12, qword [rsp + 0x70]
lea rbp, [0x1400903e0]
mov rcx, qword [rsp + 0xe0]
mov rdi, qword [rsp + 0xf0]
jmp 0x140003711
mov r12, qword [rsp + 0x70]
lea rbp, [0x1400903e0]
mov rcx, qword [rsp + 0x40]
movzx eax, word [r15]
mov qword [rsp + 0x40], rcx
mov word [rcx + rdi], ax
add rdi, 2
mov qword [rsp + 0xf0], rdi
sub rbx, rsi
add rbx, r13
cmp r13, r12
jne 0x14000328b
jmp 0x140003947
shr eax, 0x12
or al, 0xf0
mov byte [rsp + 0x350], al
mov eax, r15d
shr eax, 0xc
and al, 0x3f
or al, 0x80
mov byte [rsp + 0x351], al
mov eax, r15d
shr eax, 6
and al, 0x3f
or al, 0x80
mov byte [rsp + 0x352], al
and r15b, 0x3f
or r15b, 0x80
mov byte [rsp + 0x353], r15b
mov r15d, 4
mov rax, qword [rsp + 0xe8]
sub rax, rdi
cmp rax, r15
jae 0x1400037ad
lea rcx, [rsp + 0xe0]
mov rdx, rdi
mov r8, r15
call sym.alloc::raw_vec::RawVec_T_A_::reserve::do_reserve_and_handle::hc1e8940d432defd0
mov rdi, qword [rsp + 0xf0]
mov rax, qword [rsp + 0xe0]
mov qword [rsp + 0x40], rax
lea rcx, [rax + rdi]
lea rdx, [rsp + 0x350]
mov r8, r15
call sym.memcpy
add rdi, r15
jmp 0x140003722
and dword [rsp + 0x350], 0
mov eax, r15d
cmp r15d, 0x800
jae 0x140003811
shr eax, 6
or al, 0xc0
mov byte [rsp + 0x350], al
and r15b, 0x3f
or r15b, 0x80
mov byte [rsp + 0x351], r15b
mov r15d, 2
jmp 0x140003893
cmp r15d, 0x10000
jae 0x14000384f
shr eax, 0xc
or al, 0xe0
mov byte [rsp + 0x350], al
mov eax, r15d
shr eax, 6
and al, 0x3f
or al, 0x80
mov byte [rsp + 0x351], al
and r15b, 0x3f
or r15b, 0x80
mov byte [rsp + 0x352], r15b
mov r15d, 3
jmp 0x140003893
shr eax, 0x12
or al, 0xf0
mov byte [rsp + 0x350], al
mov eax, r15d
shr eax, 0xc
and al, 0x3f
or al, 0x80
mov byte [rsp + 0x351], al
mov eax, r15d
shr eax, 6
and al, 0x3f
or al, 0x80
mov byte [rsp + 0x352], al
and r15b, 0x3f
or r15b, 0x80
mov byte [rsp + 0x353], r15b
mov r15d, 4
mov rax, qword [rsp + 0xe8]
sub rax, rdi
cmp rax, r15
jae 0x1400038be
lea rcx, [rsp + 0xe0]
mov rdx, rdi
mov r8, r15
call sym.alloc::raw_vec::RawVec_T_A_::reserve::do_reserve_and_handle::hc1e8940d432defd0
mov rdi, qword [rsp + 0xf0]
mov rax, qword [rsp + 0xe0]
mov qword [rsp + 0x40], rax
lea rcx, [rax + rdi]
lea rdx, [rsp + 0x350]
mov r8, r15
call sym.memcpy
add rdi, r15
mov qword [rsp + 0xf0], rdi
and dword [rsp + 0x350], 0
mov word [rsp + 0x350], 0x87cc
mov rax, qword [rsp + 0xe8]
sub rax, rdi
cmp rax, 1
ja 0x140003935
mov r8d, 2
lea rcx, [rsp + 0xe0]
mov rdx, rdi
call sym.alloc::raw_vec::RawVec_T_A_::reserve::do_reserve_and_handle::hc1e8940d432defd0
mov rcx, qword [rsp + 0xe0]
mov rdi, qword [rsp + 0xf0]
jmp 0x14000393a
mov rcx, qword [rsp + 0x40]
movzx eax, word [rsp + 0x350]
jmp 0x140003715
mov r14, qword [rsp + 0xe0]
mov rbx, qword [rsp + 0xe8]
mov r15, qword [rsp + 0x230]
mov r12, rdi
mov rdx, qword [rsp + 0x238]
mov rcx, r15
call sym.__alloc::raw_vec::RawVec_T_A__as_core::ops::drop::Drop_::drop::h77b53a14f7d26e29
lea r8, [0x14008ed6b]
mov r9d, 7
mov rcx, r14
mov rdx, r12
call sym.___A__as_core::slice::cmp::SlicePartialEq_B__::equal::h5b09d1dada37ae96
mov esi, eax
mov rcx, r14
mov rdx, rbx
call sym.__alloc::raw_vec::RawVec_T_A__as_core::ops::drop::Drop_::drop::h77b53a14f7d26e29
mov byte [rsp + 0x7f], sil
mov eax, 0x305e
mov r15d, 0x3e8
mov r12d, 0xf4240
mov r13d, 0xffffffff
mov ebp, 0x989680
mov esi, 0x491c
cmp eax, 0x1547
je 0x140003ace
cmp eax, 0x4db7
je 0x140003a17
cmp eax, 0x440d
je 0x140003be9
cmp eax, 0x491c
je 0x140003b89
cmp eax, 0x4d06
je 0x140003a02
cmp eax, 0x305e
jne 0x1400039bd
cmp byte [rsp + 0x7f], 0
mov eax, 0x440d
cmovne eax, esi
jmp 0x1400039bd
imul rax, qword [rsp + 0x88], 0x3c
mov qword [rsp + 0x58], rax
mov eax, 0x4db7
jmp 0x1400039bd
mov rcx, qword [rsp + 0x58]
call sym.core::time::Duration::new::h26ed85c2b7bc95a9
mov qword [rsp + 0x230], rax
mov dword [rsp + 0x238], edx
mov eax, dword [rsp + 0x238]
mov rax, qword [rsp + 0x230]
mov qword [rsp + 0x350], rax
mov edx, 0x390c
cmp edx, 0x99
je 0x140003a97
cmp edx, 0xf3e
je 0x140003a81
cmp edx, 0x390c
jne 0x140003a4c
mov rdx, qword [rsp + 0x230]
mov edx, dword [rsp + 0x238]
mov dword [rsp + 0xc8], edx
mov edx, 0xf3e
jmp 0x140003a4c
mov rax, qword [rsp + 0x350]
mov edx, 0x99
mov ecx, dword [rsp + 0xc8]
jmp 0x140003a4c
mov dword [rsp + 0xe8], ecx
mov qword [rsp + 0xe0], rax
mov eax, dword [rsp + 0xe8]
mov rcx, qword [rsp + 0xe0]
mov qword [rsp + 0x4a0], rcx
mov dword [rsp + 0xb0], eax
mov eax, 0x1547
jmp 0x1400039bd
mov rbx, qword [rsp + 0x4a0]
mov edi, dword [rsp + 0xb0]
test rbx, rbx
jne 0x140003aea
test edi, edi
je 0x140003ba7
xor ecx, ecx
xor edx, edx
mov r8d, 2
mov r9d, 0x1f0003
call sub.KERNEL32.dll_CreateWaitableTimerExW
test rax, rax
je 0x140003ba7
mov r14, rax
mov rax, rbx
mul rbp
jo 0x140003b9f
mov rcx, rax
mov eax, edi
xor edx, edx
mov r8d, 0x64
div r8d
add rcx, rax
jb 0x140003b9f
js 0x140003b9f
neg rcx
mov qword [rsp + 0xe0], rcx
and dword [rsp + 0x28], 0
and qword [rsp + 0x20], 0
mov rcx, r14
lea rdx, [rsp + 0xe0]
xor r8d, r8d
xor r9d, r9d
call sub.KERNEL32.dll_SetWaitableTimer
test eax, eax
je 0x140003b9f
mov rcx, r14
mov edx, 0xffffffff
call sub.KERNEL32.dll_WaitForSingleObject
mov dword [rsp + 0x40], eax
mov rcx, r14
call sub.KERNEL32.dll_CloseHandle
mov eax, 0x440d
cmp dword [rsp + 0x40], 0xffffffff
jne 0x1400039bd
jmp 0x140003ba7
mov qword [rsp + 0x88], 0x5f
mov eax, 0x4d06
jmp 0x1400039bd
mov rcx, r14
call sub.KERNEL32.dll_CloseHandle
mov rax, rbx
mul r15
jo 0x140003bd5
mov r8, rax
mov eax, edi
xor edx, edx
div r12d
add r8, rax
jb 0x140003bd5
xor eax, eax
test edx, edx
setne al
lea rcx, [r8 + rax]
cmp rcx, r13
cmovae rcx, r13
add r8, rax
jae 0x140003bda
mov ecx, 0xffffffff
call sub.KERNEL32.dll_Sleep
mov eax, 0x440d
jmp 0x1400039bd
mov ecx, 0xf3e
lea rax, [0x140041ce2]
cmp ecx, 0x99
je 0x140003c0e
cmp ecx, 0xf3e
jne 0x140003bf5
call rax
mov ecx, 0x99
jmp 0x140003bf5
movaps xmm6, xmmword [rsp + 0x530]
movaps xmm7, xmmword [rsp + 0x540]
movaps xmm8, xmmword [rsp + 0x550]
movaps xmm9, xmmword [rsp + 0x560]
movaps xmm10, xmmword [rsp + 0x570]
movaps xmm11, xmmword [rsp + 0x580]
movaps xmm12, xmmword [rsp + 0x590]
movaps xmm13, xmmword [rsp + 0x5a0]
movaps xmm14, xmmword [rsp + 0x5b0]
movaps xmm15, xmmword [rsp + 0x5c0]
add rsp, 0x5d8
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
lea rcx, [0x1400976ab]
lea r8, str.xw_t_
mov edx, 0x14
call sym.core::option::expect_failed::h007bf6aa81bc4f7e
ud2
xor r15d, r15d
mov rax, qword [rsp + 0x48]
mov qword [rsp + 0x20], rax
mov rcx, r14
mov rdx, qword [rsp + 0x50]
mov r8, r15
mov r9, rbx
call sym.core::str::slice_error_fail::h02fbc16b63d966ac
ud2
lea rcx, str.global_key_idle_disappearedkey_used_disappearedSOFTWAREMicrosoftWindows_NTCurrentVersionCurrentBuildNumberCurrentMajorVersionNumber___
lea r8, str.xw_t_
mov edx, 0x1b
jmp 0x140003c8d
mov ecx, 8
mov edx, 0xfa0
call sym.alloc::alloc::handle_alloc_error::h5459b1f9ef419134
ud2
lea rcx, str.assertion_failed:_vec.capacity_____start___lenLazy_instance_has_previously_been_poisoned
lea r8, str.xw_t_
mov edx, 0x2f
call sym.core::panicking::panic::h7eca2dca7d5f1519
ud2
mov rbx, qword [rsp + 0x50]
lea rax, str.library_alloc_src_str.rs
mov qword [rsp + 0x48], rax
jmp 0x140003c97
call sym.alloc::raw_vec::capacity_overflow::hb5c046e1fd753ac0
ud2
mov rcx, rdi
mov rdx, r12
jmp 0x140003cd5