Function at 0x1400bbe3e
Capabilities:
Enumerate processes via ntquerysysteminformation
Get system information on windows

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x408
movdqa xmmword [rsp + 0x3f0], xmm6
mov esi, edx
mov rbx, rcx
mov word [rsp + 0x40], si
mov eax, edx
shr eax, 0x10
mov byte [rsp + 0x42], al
lea rdi, [rsp + 0x170]
mov qword [rdi], 0
mov rax, qword [0x140150050]
mov rcx, rdi
call rax
mov rax, qword [rdi]
movabs rcx, 0x19db1ded53e8000
cmp rax, rcx
jl 0x1400bbeba
movabs rcx, 0xfe624e212ac18000
add rax, rcx
movabs rcx, 0xd6bf94d5e57a42bd
mul rcx
shr rdx, 0x17
jmp 0x1400bbebc
xor edx, edx
mov qword [rsp + 0x48], rbx
mov qword [rsp + 0xd8], rdx
mov edi, 0x80000
mov ecx, 0x80000
call fcn.14008bd36
mov r12, rax
mov r13, rdx
lea r9, [rsp + 0x44]
mov dword [r9], 0
mov ecx, 5
mov rdx, rax
mov r8d, 0x80000
call qword [sym.imp.ntdll.dll_NtQuerySystemInformation]
cmp eax, 0xc0000004
jne 0x1400bbf6f
lea rbx, [rsp + 0x44]
mov r14, qword [sym.imp.ntdll.dll_NtQuerySystemInformation]
mov r15, qword [sym.imp.kernel32.dll_HeapFree]
mov eax, dword [rsp + 0x44]
test eax, eax
je 0x1400bbf2a
add eax, 0x2800
mov rdi, rax
jmp 0x1400bbf2d
add rdi, rdi
test r13, r13
je 0x1400bbf41
mov rcx, qword [0x1401529c8]
xor edx, edx
mov r8, r12
call r15
mov rcx, rdi
call fcn.14008bd36
mov r12, rax
mov r13, rdx
mov dword [rsp + 0x44], 0
mov ecx, 5
mov rdx, rax
mov r8d, edi
mov r9, rbx
call r14
cmp eax, 0xc0000004
je 0x1400bbf18
xor edi, edi
mov ecx, 0x1f4
xor edx, edx
call fcn.1400bb04b
lea rbx, [rsp + 0x78]
mov qword [rbx], rax
mov qword [rbx + 8], rdx
mov qword [rbx + 0x10], 0
xor r14d, r14d
lea r15, [r12 + r14]
cmp rdi, qword [rsp + 0x80]
jne 0x1400bbfba
mov rcx, rbx
mov rdx, rdi
call fcn.1400bb88f
mov rax, qword [rsp + 0x78]
mov rdi, qword [rsp + 0x88]
mov qword [rax + rdi*8], r15
mov rdi, qword [rsp + 0x88]
inc rdi
mov qword [rsp + 0x88], rdi
mov ecx, dword [r15]
add r14, rcx
test rcx, rcx
jne 0x1400bbf94
mov r15, qword [rsp + 0x48]
lea rax, [r15 + 0x40]
mov qword [rsp + 0xa8], rax
mov qword [rsp + 0xe0], rax
test sil, sil
je 0x1400bc011
lea rcx, [r15 + 0x110]
xor edx, edx
call fcn.1400bc7e0
mov rax, qword [r15 + 0x190]
jmp 0x1400bc013
xor eax, eax
lea rcx, [rsp + 0xe8]
mov qword [rcx], rax
mov rsi, qword [rsp + 0x78]
mov rbx, qword [rsp + 0x80]
mov qword [rsp + 0x50], 8
xorps xmm0, xmm0
movups xmmword [rsp + 0x58], xmm0
mov qword [rsp + 0x170], rsi
mov qword [rsp + 0x178], rbx
mov qword [rsp + 0x180], rdi
lea rax, [rsp + 0xe0]
mov qword [rsp + 0x188], rax
lea rax, [rsp + 0x40]
mov qword [rsp + 0x190], rax
mov qword [rsp + 0x198], rcx
lea rax, [rsp + 0xd8]
mov qword [rsp + 0x1a0], rax
cmp rbx, rdi
jb 0x1400bc7c6
lea r14, [rsp + 0x188]
call fcn.14008d284
xor r9d, r9d
cmp rdi, 0xffffffffffffffff
sete r9b
cmp r9, rax
cmovbe r9, rax
mov qword [rsp + 0x38], r14
mov qword [rsp + 0x30], rdi
mov qword [rsp + 0x28], rsi
mov qword [rsp + 0x20], 1
lea rcx, [rsp + 0xf0]
mov rdx, rdi
xor r8d, r8d
call fcn.1400b6bf3
test rbx, rbx
je 0x1400bc0f3
mov rcx, qword [0x1401529c8]
xor edx, edx
mov r8, rsi
call qword [sym.imp.kernel32.dll_HeapFree]
mov rax, qword [rsp + 0x100]
test rax, rax
je 0x1400bc138
mov rcx, qword [rsp + 0xf0]
test rcx, rcx
je 0x1400bc138
xor r8d, r8d
add r8, qword [rcx + 0x10]
dec rax
je 0x1400bc122
mov rcx, qword [rcx + 0x18]
test rcx, rcx
jne 0x1400bc110
mov rax, qword [rsp + 0x58]
mov rdx, qword [rsp + 0x60]
sub rax, rdx
cmp rax, r8
jb 0x1400bc7b7
mov qword [rsp + 0xc8], r13
mov qword [rsp + 0xb8], r12
mov rax, qword [rsp + 0x100]
lea rdx, [rsp + 0x370]
mov qword [rdx + 0x10], rax
movdqu xmm0, xmmword [rsp + 0xf0]
movdqa xmmword [rdx], xmm0
lea rsi, [rsp + 0x2b8]
mov rcx, rsi
call fcn.1400bb77a
cmp qword [rsi], 0
je 0x1400bc248
lea rax, [rsp + 0x50]
mov rsi, qword [rax + 0x10]
lea rbx, [rsp + 0x170]
lea r14, [rsp + 0x2b8]
lea r12, [rsp + 0x370]
movdqu xmm0, xmmword [rsp + 0x2b8]
movdqa xmmword [rsp + 0x170], xmm0
mov r13, qword [rsp + 0x2c8]
mov qword [rsp + 0x180], r13
mov rbp, qword [rsp + 0x170]
mov rax, qword [rsp + 0x58]
sub rax, rsi
cmp rax, r13
jb 0x1400bc231
mov rdi, qword [rsp + 0x50]
imul rcx, rsi, 0x148
add rcx, rdi
imul r8, r13, 0x148
mov rdx, rbp
call sub.VCRUNTIME140.dll_memcpy
add rsi, r13
mov qword [rsp + 0x60], rsi
mov qword [rsp + 0x180], 0
mov rcx, rbx
call fcn.1400b69a6
mov rcx, r14
mov rdx, r12
call fcn.1400bb77a
cmp qword [rsp + 0x2b8], 0
jne 0x1400bc1a4
jmp 0x1400bc252
lea rcx, [rsp + 0x50]
mov rdx, rsi
mov r8, r13
call fcn.140110060
mov rsi, qword [rsp + 0x60]
jmp 0x1400bc1db
mov rdi, qword [rsp + 0x50]
mov rsi, qword [rsp + 0x60]
lea rcx, [rsp + 0x370]
call fcn.1400b877a
mov rax, qword [rsp + 0x58]
mov qword [rsp + 0xc0], rax
imul rax, rsi, 0x148
add rax, rdi
mov qword [rsp + 0x68], rax
mov r13, rdi
test rsi, rsi
mov qword [rsp + 0xb0], rdi
je 0x1400bc5f4
lea rax, [r15 + 0x60]
mov qword [rsp + 0xa0], rax
lea rbx, [rsp + 0x2b8]
lea r14, [rsp + 0xf0]
pcmpeqd xmm6, xmm6
mov r13, rdi
mov rbp, r13
add r13, 0x148
mov rax, qword [rbp]
cmp rax, 2
je 0x1400bc5f4
mov qword [rsp + 0x70], rax
lea rsi, [rbp + 0xc8]
mov r12, qword [rbp + 0xc0]
add rbp, 8
mov r8d, 0xb8
mov rcx, rbx
mov rdx, rbp
call sub.VCRUNTIME140.dll_memcpy
mov ecx, 0x10
mov rdi, r14
mov qword [rsp + 0xd0], rsi
rep movsq qword [rdi], qword [rsi]
mov rcx, qword [r15 + 0x60]
mov rdx, qword [r15 + 0x68]
mov r8, r12
call fcn.1400b9a7e
mov r10, rax
shr r10, 0x39
mov r14, qword [r15 + 0x40]
mov rbx, qword [r15 + 0x48]
mov r15, rbx
and r15, rax
movd xmm0, r10d
punpcklbw xmm0, xmm0
pshuflw xmm0, xmm0, 0
pshufd xmm0, xmm0, 0
lea r11, [r14 - 0x150]
xor ecx, ecx
mov rdx, r15
movdqu xmm1, xmmword [r14 + rdx]
movdqa xmm2, xmm1
pcmpeqb xmm2, xmm0
pmovmskb r8d, xmm2
test r8w, r8w
je 0x1400bc388
lea r9d, [r8 - 1]
and r9d, r8d
bsf r8d, r8d
add r8, rdx
and r8, rbx
neg r8
imul rdi, r8, 0x150
mov r8d, r9d
cmp qword [r11 + rdi], r12
jne 0x1400bc35c
jmp 0x1400bc3aa
pcmpeqb xmm1, xmm6
pmovmskb r8d, xmm1
test r8d, r8d
jne 0x1400bc445
add rdx, rcx
add rdx, 0x10
add rcx, 0x10
and rdx, rbx
jmp 0x1400bc349
lea rsi, [r14 + rdi]
add rsi, 0xfffffffffffffeb8
mov r8d, 0x148
lea rcx, [rsp + 0x170]
mov rdx, rsi
call sub.VCRUNTIME140.dll_memcpy
mov rax, qword [rsp + 0x70]
mov qword [rsi], rax
lea rsi, [r14 + rdi]
add rsi, 0xfffffffffffffec0
mov r8d, 0xb8
mov rcx, rsi
lea rbx, [rsp + 0x2b8]
mov rdx, rbx
call sub.VCRUNTIME140.dll_memcpy
mov qword [rsi + 0xb8], r12
add rdi, r14
add rdi, 0xffffffffffffff80
mov ecx, 0x10
lea r14, [rsp + 0xf0]
mov rsi, r14
rep movsq qword [rdi], qword [rsi]
cmp qword [rsp + 0x170], 2
mov r15, qword [rsp + 0x48]
je 0x1400bc435
lea rcx, [rsp + 0x170]
call fcn.1400b6a03
cmp r13, qword [rsp + 0x68]
jne 0x1400bc2b2
jmp 0x1400bc62c
mov qword [rsp + 0x90], rax
mov qword [rsp + 0x98], r10
mov r8d, 0xb8
lea rcx, [rsp + 0x170]
mov rdx, rbp
call sub.VCRUNTIME140.dll_memcpy
mov ecx, 0x10
lea rdi, [rsp + 0x370]
mov rsi, qword [rsp + 0xd0]
rep movsq qword [rdi], qword [rsi]
movdqu xmm0, xmmword [r14 + r15]
pmovmskb eax, xmm0
test eax, eax
jne 0x1400bc4ae
mov ecx, 0x10
add r15, rcx
and r15, rbx
movdqu xmm0, xmmword [r14 + r15]
pmovmskb eax, xmm0
add rcx, 0x10
test eax, eax
je 0x1400bc496
bsf eax, eax
add rax, r15
and rax, rbx
mov sil, byte [r14 + rax]
test sil, sil
js 0x1400bc4d0
movdqa xmm0, xmmword [r14]
pmovmskb eax, xmm0
bsf eax, eax
mov sil, byte [r14 + rax]
and sil, 1
mov r15, qword [rsp + 0x48]
cmp qword [r15 + 0x50], 0
jne 0x1400bc4e9
test sil, sil
jne 0x1400bc57c
movzx ecx, sil
sub qword [r15 + 0x50], rcx
lea rcx, [rax - 0x10]
and rcx, rbx
mov rdx, qword [rsp + 0x98]
mov byte [r14 + rax], dl
mov byte [rcx + r14 + 0x10], dl
inc qword [r15 + 0x58]
mov rdi, qword [r15 + 0x40]
neg rax
imul rbx, rax, 0x150
lea rsi, [rdi + rbx]
add rsi, 0xfffffffffffffec0
mov qword [rsi - 0x10], r12
mov rax, qword [rsp + 0x70]
mov qword [rsi - 8], rax
mov r8d, 0xb8
mov rcx, rsi
lea rdx, [rsp + 0x170]
call sub.VCRUNTIME140.dll_memcpy
mov qword [rsi + 0xb8], r12
add rdi, rbx
add rdi, 0xffffffffffffff80
mov ecx, 0x10
lea rsi, [rsp + 0x370]
rep movsq qword [rdi], qword [rsi]
lea rbx, [rsp + 0x2b8]
lea r14, [rsp + 0xf0]
jmp 0x1400bc435
mov rcx, qword [rsp + 0xa8]
mov rdx, qword [rsp + 0xa0]
call fcn.1401105f7
mov r14, qword [r15 + 0x40]
mov rbx, qword [r15 + 0x48]
mov rdx, qword [rsp + 0x90]
and rdx, rbx
movdqu xmm0, xmmword [r14 + rdx]
pmovmskb eax, xmm0
test eax, eax
jne 0x1400bc5cf
mov ecx, 0x10
add rdx, rcx
and rdx, rbx
movdqu xmm0, xmmword [r14 + rdx]
pmovmskb eax, xmm0
add rcx, 0x10
test eax, eax
je 0x1400bc5b7
bsf eax, eax
add rax, rdx
and rax, rbx
cmp byte [r14 + rax], 0
js 0x1400bc4e9
movdqa xmm0, xmmword [r14]
pmovmskb eax, xmm0
bsf eax, eax
jmp 0x1400bc4e9
mov r8, qword [rsp + 0x68]
mov rax, r8
sub rax, r13
movabs rcx, 0xc7ce0c7ce0c7ce0d
mul rcx
cmp r8, r13
je 0x1400bc62c
mov rsi, rdx
shr rsi, 8
mov rcx, r13
call fcn.1400b6a03
add r13, 0x148
dec rsi
jne 0x1400bc618
cmp qword [rsp + 0xc0], 0
je 0x1400bc64e
mov rcx, qword [0x1401529c8]
xor edx, edx
mov r8, qword [rsp + 0xb0]
call qword [sym.imp.kernel32.dll_HeapFree]
mov rsi, qword [r15 + 0x58]
test rsi, rsi
je 0x1400bc779
mov rcx, qword [rsp + 0x48]
mov rdi, qword [rcx + 0x40]
mov rbx, qword [rcx + 0x48]
lea r14, [rdi + 0x10]
movdqa xmm0, xmmword [rdi]
pmovmskb eax, xmm0
not eax
mov r15, qword [rcx + 0x50]
pcmpeqd xmm6, xmm6
mov r13, rsi
mov rbp, rdi
test ax, ax
jne 0x1400bc6a5
movdqa xmm0, xmmword [r14]
pmovmskb eax, xmm0
add rbp, 0xffffffffffffeb00
add r14, 0x10
cmp ax, 0xffff
je 0x1400bc689
not eax
bsf ecx, eax
lea r12d, [rax - 1]
and r12d, eax
neg rcx
imul rax, rcx, 0x150
dec r13
cmp byte [rbp + rax - 4], 0
mov byte [rbp + rax - 4], 0
jne 0x1400bc76d
mov rdx, rdi
sub rdx, rbp
sub rdx, rax
sar rdx, 4
movabs rcx, 0xcf3cf3cf3cf3cf3d
imul rdx, rcx
lea r8, [rdx - 0x10]
and r8, rbx
movdqu xmm0, xmmword [rdi + r8]
pcmpeqb xmm0, xmm6
psllw xmm0, 7
pmovmskb ecx, xmm0
test ecx, ecx
je 0x1400bc70e
bsr cx, cx
xor ecx, 0xf
jmp 0x1400bc712
mov cx, 0x10
movdqu xmm0, xmmword [rdi + rdx]
pcmpeqb xmm0, xmm6
pmovmskb r9d, xmm0
or r9d, 0x10000
bsf r9d, r9d
add ecx, r9d
mov r9b, 0x80
cmp cx, 0xf
jbe 0x1400bc73e
mov r10, qword [rsp + 0x48]
jmp 0x1400bc74d
inc r15
mov r10, qword [rsp + 0x48]
mov qword [r10 + 0x50], r15
mov r9b, 0xff
lea rcx, [rax + rbp]
add rcx, 0xfffffffffffffeb8
mov byte [rdi + rdx], r9b
mov byte [r8 + rdi + 0x10], r9b
dec rsi
mov qword [r10 + 0x58], rsi
call fcn.1400b6a03
mov eax, r12d
test r13, r13
jne 0x1400bc684
cmp qword [rsp + 0xc8], 0
je 0x1400bc79b
mov rcx, qword [0x1401529c8]
xor edx, edx
mov r8, qword [rsp + 0xb8]
call qword [sym.imp.kernel32.dll_HeapFree]
movaps xmm6, xmmword [rsp + 0x3f0]
add rsp, 0x408
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
lea rcx, [rsp + 0x50]
call fcn.140110060
jmp 0x1400bc138
lea rcx, str.assertion_failed:_vec.capacity_____start___lenC:Users_runneradmin.cargo_registry_srcindex.crates.io_6f17d22bba15001f_rayon_1.7.0_src_vec.rs
lea r8, [0x14013b150]
mov edx, 0x2f
call fcn.140109930
ud2