Function at 0x1400cb274
Capabilities:
Enumerate processes via ntquerysysteminformation
Get system information on windows

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x448
mov r14d, edx
mov qword [rsp + 0x48], rcx
mov word [rsp + 0x50], r14w
mov eax, edx
shr eax, 0x10
mov byte [rsp + 0x52], al
call fcn.1400c2080
mov r8d, edx
lea rdi, [rsp + 0x1d0]
mov rcx, rdi
mov edx, eax
call fcn.1400c2110
cmp qword [rdi], 0
je 0x1400cb2c2
xor eax, eax
jmp 0x1400cb2ca
mov rax, qword [rsp + 0x1d8]
mov qword [rsp + 0xd8], rax
mov ebp, 0x80000
lea rdi, [rsp + 0x54]
mov rsi, qword [sym.imp.ntdll.dll_NtQuerySystemInformation]
mov rcx, rbp
xor edx, edx
call fcn.140054d98
mov rbx, rax
mov r15, rdx
and dword [rsp + 0x54], 0
mov ecx, 5
mov rdx, rax
mov r8d, ebp
mov r9, rdi
call rsi
cmp eax, 0xc0000004
jne 0x1400cb331
mov eax, dword [rsp + 0x54]
test eax, eax
je 0x1400cb321
add eax, 0x2800
mov rbp, rax
jmp 0x1400cb324
add rbp, rbp
mov rcx, rbx
mov rdx, r15
call fcn.140021595
jmp 0x1400cb2e3
mov ecx, 0xfa0
mov edx, 8
call fcn.1400c8c51
test rax, rax
je 0x1400cba68
lea rdi, [rsp + 0x98]
mov qword [rdi], rax
mov qword [rdi + 8], 0x1f4
and qword [rdi + 0x10], 0
xor edx, edx
xor esi, esi
lea rbp, [rbx + rsi]
cmp rdx, qword [rsp + 0xa0]
jne 0x1400cb38b
mov rcx, rdi
call fcn.14000707e
mov rax, qword [rsp + 0x98]
mov rdx, qword [rsp + 0xa8]
mov qword [rax + rdx*8], rbp
mov rdx, qword [rsp + 0xa8]
inc rdx
mov qword [rsp + 0xa8], rdx
mov ecx, dword [rbp]
add rsi, rcx
test rcx, rcx
jne 0x1400cb365
mov rax, qword [rsp + 0x48]
mov qword [rsp + 0xe0], rax
test r14b, r14b
je 0x1400cb3d8
mov rsi, qword [rsp + 0x48]
lea rcx, [rsi + 0x50]
xor edx, edx
call fcn.1400cbbb6
mov rax, qword [rsi + 0xd0]
jmp 0x1400cb3da
xor eax, eax
lea rcx, [rsp + 0xe8]
mov qword [rcx], rax
mov qword [rsp + 0x78], 8
xorps xmm0, xmm0
movups xmmword [rsp + 0x80], xmm0
mov rsi, qword [rsp + 0xa8]
mov qword [rsp + 0x1e0], rsi
movdqu xmm0, xmmword [rsp + 0x98]
movdqa xmmword [rsp + 0x1d0], xmm0
lea rax, [rsp + 0xe0]
mov qword [rsp + 0x1e8], rax
lea rax, [rsp + 0x50]
mov qword [rsp + 0x1f0], rax
mov qword [rsp + 0x1f8], rcx
movdqa xmmword [rsp + 0xf0], xmm0
and qword [rsp + 0x100], 0
lea rax, [rsp + 0xd8]
mov qword [rsp + 0x200], rax
cmp qword [rsp + 0xf8], rsi
jb 0x1400cba79
lea rdi, [rsp + 0x1e8]
mov rbp, qword [rsp + 0xf0]
mov rcx, rsi
call fcn.1400ca492
mov qword [rsp + 0x38], rdi
mov qword [rsp + 0x30], rsi
mov qword [rsp + 0x28], rbp
mov qword [rsp + 0x20], 1
lea rcx, [rsp + 0x160]
mov rdx, rsi
xor r8d, r8d
mov r9, rax
call fcn.1400c62ac
cmp qword [rsp + 0x100], rsi
jne 0x1400cb4f7
lea rax, [rsp + 0xf0]
and qword [rax + 0x10], 0
lea rcx, [rsp + 0x328]
mov qword [rcx], rsi
and qword [rcx + 8], 0
mov qword [rcx + 0x20], rax
lea rax, str._rustc_8b705839cd656d202e920efa8769cbe43a5ee269librarycore_src_sync_atomic.rsthere_is_no_such_thing_as_an_acquire_release_store
mov qword [rcx + 0x10], rax
mov qword [rcx + 0x18], rax
call fcn.1400d19fb
jmp 0x1400cb505
test rsi, rsi
jne 0x1400cb505
and qword [rsp + 0x100], 0
mov rdx, qword [rsp + 0xf8]
test rdx, rdx
je 0x1400cb529
shl rdx, 3
mov rcx, qword [rsp + 0xf0]
mov r8d, 8
call fcn.140007750
mov rdi, qword [rsp + 0x160]
mov rbp, qword [rsp + 0x168]
mov rsi, qword [rsp + 0x170]
xor edx, edx
mov rax, rdi
mov rcx, rsi
sub rcx, 1
jb 0x1400cb55d
test rax, rax
je 0x1400cb55d
add rdx, qword [rax + 0x20]
mov rax, qword [rax]
jmp 0x1400cb549
mov qword [rsp + 0x60], rbx
mov qword [rsp + 0x68], r15
lea rbx, [rsp + 0x78]
mov rcx, rbx
call fcn.1400ca736
lea r14, [rsp + 0x330]
mov qword [r14 - 8], rdi
mov qword [r14], rbp
lea r15, [rsp + 0x338]
mov qword [r15], rsi
lea r12, [rsp + 0x328]
lea rbp, [rsp + 0x1d0]
mov qword [rsp + 0x1d0], r12
mov qword [rsp + 0x1d8], r14
mov qword [rsp + 0x1e0], r15
mov rcx, rdi
mov rdx, rbp
call fcn.1400c625e
test rdi, rdi
je 0x1400cb665
mov rsi, qword [rdi + 0x10]
movdqu xmm0, xmmword [rdi + 0x18]
movdqa xmmword [rsp + 0xf0], xmm0
mov rcx, rdi
call fcn.140053520
test rsi, rsi
je 0x1400cb665
mov qword [rsp + 0x1d0], rsi
movdqa xmm0, xmmword [rsp + 0xf0]
lea rax, [rsp + 0x1d8]
movdqu xmmword [rax], xmm0
mov rdi, qword [rsp + 0x1e0]
mov rcx, rbx
mov rdx, rdi
call fcn.1400ca736
mov r13, qword [rsp + 0x88]
imul rcx, r13, 0x150
add rcx, qword [rsp + 0x78]
imul r8, rdi, 0x150
mov rdx, rsi
call sub.VCRUNTIME140.dll_memcpy
add r13, rdi
mov qword [rsp + 0x88], r13
and qword [rsp + 0x1e0], 0
mov rcx, rbp
call fcn.1400c5aa4
mov rdi, qword [rsp + 0x328]
jmp 0x1400cb59e
lea rcx, [rsp + 0x328]
call fcn.1400c6206
mov rbp, qword [rsp + 0x78]
mov rax, qword [rsp + 0x80]
mov qword [rsp + 0xb8], rax
imul rcx, qword [rsp + 0x88], 0x150
lea rax, [rcx + rbp]
mov qword [rsp + 0xb0], rax
mov rax, qword [rsp + 0x48]
add rax, 0x10
mov qword [rsp + 0x58], rax
lea r12, [rsp + 0x3a8]
lea r13, [rsp + 0x160]
mov qword [rsp + 0xc0], rbp
mov r14, qword [rsp + 0x68]
mov rbx, qword [rsp + 0x60]
test rcx, rcx
je 0x1400cb985
mov rax, qword [rbp + 0xd8]
cmp rax, 2
je 0x1400cb97e
mov qword [rsp + 0x70], rax
mov qword [rsp + 0xd0], rcx
lea rax, [rbp + 0xe0]
lea rdx, [rbp + 0x58]
mov r15, qword [rbp + 0x50]
mov ecx, 0xa
mov rdi, r12
mov rsi, rbp
rep movsq qword [rdi], qword [rsi]
mov ecx, 0x10
lea rdi, [rsp + 0x328]
mov rsi, rdx
rep movsq qword [rdi], qword [rsi]
mov ecx, 0xe
mov rdi, r13
mov rsi, rax
rep movsq qword [rdi], qword [rsi]
mov qword [rsp + 0x90], r15
mov rax, qword [rsp + 0x48]
mov rcx, qword [rax]
mov rdx, qword [rax + 8]
mov r8, r15
call fcn.1400c8eb8
mov rbx, rax
mov rcx, qword [rsp + 0x58]
mov rdx, rax
lea r8, [rsp + 0x90]
call fcn.1400c8f33
test rax, rax
je 0x1400cb7fa
mov r14, rax
lea rdi, [rax + 8]
mov r8d, 0x150
lea rcx, [rsp + 0x1d0]
mov rdx, rdi
call sub.VCRUNTIME140.dll_memcpy
mov ecx, 0xa
mov rsi, r12
rep movsq qword [rdi], qword [rsi]
mov qword [r14 + 0x58], r15
lea rdi, [r14 + 0x60]
mov ecx, 0x10
lea rsi, [rsp + 0x328]
rep movsq qword [rdi], qword [rsi]
mov rax, qword [rsp + 0x70]
mov qword [r14 + 0xe0], rax
add r14, 0xe8
mov ecx, 0xe
mov rdi, r14
mov rsi, r13
rep movsq qword [rdi], qword [rsi]
cmp dword [rsp + 0x2a8], 2
je 0x1400cb963
lea rcx, [rsp + 0x1d0]
call fcn.1400c5b12
lea r13, [rsp + 0x160]
jmp 0x1400cb963
mov rax, qword [rsp + 0x90]
mov qword [rsp + 0xc8], rax
mov ecx, 0xa
lea rdi, [rsp + 0x3f8]
mov rsi, r12
rep movsq qword [rdi], qword [rsi]
mov ecx, 0x10
lea rdi, [rsp + 0x1d0]
lea rsi, [rsp + 0x328]
rep movsq qword [rdi], qword [rsi]
mov ecx, 0xe
lea rdi, [rsp + 0xf0]
mov rsi, r13
rep movsq qword [rdi], qword [rsi]
mov rsi, qword [rsp + 0x48]
mov r12, qword [rsi + 0x10]
mov rdi, qword [rsi + 0x18]
mov rcx, r12
mov rdx, rdi
mov r8, rbx
call fcn.1400d2bde
movzx r14d, byte [rdi + rax]
mov rsi, qword [rsi + 0x20]
and r14d, 1
test rsi, rsi
jne 0x1400cb8ae
test r14b, r14b
lea r13, [rsp + 0x160]
je 0x1400cb8b6
mov rcx, qword [rsp + 0x58]
mov rsi, qword [rsp + 0x48]
mov rdx, rsi
call fcn.1400e6ffb
mov r12, qword [rsi + 0x10]
mov rdi, qword [rsi + 0x18]
mov rsi, qword [rsi + 0x20]
mov rcx, r12
mov rdx, rdi
mov r8, rbx
call fcn.1400d2bde
lea r13, [rsp + 0x160]
sub rsi, r14
mov rdx, qword [rsp + 0x48]
mov qword [rdx + 0x20], rsi
shr rbx, 0x39
lea rcx, [rax - 0x10]
and rcx, r12
mov byte [rdi + rax], bl
mov byte [rcx + rdi + 0x10], bl
inc qword [rdx + 0x28]
mov rdx, qword [rdx + 0x18]
neg rax
imul rbx, rax, 0x158
lea rax, [rdx + rbx]
add rax, 0xfffffffffffffeb0
mov rcx, qword [rsp + 0xc8]
mov qword [rax - 8], rcx
mov ecx, 0xa
mov rdi, rax
lea rsi, [rsp + 0x3f8]
rep movsq qword [rdi], qword [rsi]
mov qword [rax + 0x50], r15
lea rax, [rdx + rbx - 0xf8]
mov ecx, 0x10
mov rdi, rax
lea rsi, [rsp + 0x1d0]
rep movsq qword [rdi], qword [rsi]
mov rcx, qword [rsp + 0x70]
mov qword [rax + 0x80], rcx
lea rdi, [rdx + rbx - 0x70]
mov ecx, 0xe
lea rsi, [rsp + 0xf0]
rep movsq qword [rdi], qword [rsi]
mov qword [rsp + 0x2a8], 2
lea r12, [rsp + 0x3a8]
add rbp, 0x150
mov rcx, qword [rsp + 0xd0]
add rcx, 0xfffffffffffffeb0
jmp 0x1400cb6c5
add rbp, 0x150
mov rax, qword [rsp + 0xb0]
sub rax, rbp
mov ecx, 0x150
xor edx, edx
div rcx
mov rcx, rbp
mov rdx, rax
call fcn.1400c5ae1
mov rcx, qword [rsp + 0xc0]
mov rdx, qword [rsp + 0xb8]
call fcn.1400c5ac9
mov rbp, qword [rsp + 0x48]
mov rax, qword [rbp + 0x10]
mov rcx, qword [rbp + 0x18]
add rax, rcx
inc rax
movdqa xmm0, xmmword [rcx]
pmovmskb edx, xmm0
not edx
mov rbp, qword [rbp + 0x28]
lea rsi, [rsp + 0x1d0]
mov qword [rsi], rcx
add rcx, 0x10
mov qword [rsi + 8], rcx
mov qword [rsi + 0x10], rax
mov word [rsi + 0x18], dx
mov qword [rsi + 0x20], rbp
mov ebp, 0x158
mov rcx, rsi
call fcn.1400cabc3
test rax, rax
je 0x1400cba48
mov rdi, rax
cmp byte [rax - 4], 0
mov byte [rax - 4], 0
jne 0x1400cb9ff
mov rax, qword [rsp + 0x48]
mov rax, qword [rax + 0x18]
sub rax, rdi
cqo
idiv rbp
mov rcx, qword [rsp + 0x58]
mov rdx, rax
call fcn.1400cb1cf
add rdi, 0xfffffffffffffeb0
mov rcx, rdi
call fcn.1400c5b12
jmp 0x1400cb9ff
mov rcx, rbx
mov rdx, r14
call fcn.140021595
nop
add rsp, 0x448
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
mov ecx, 0xfa0
mov edx, 8
call fcn.1400e3100
ud2
lea rcx, str.assertion_failed:_vec.capacity_____start___lenC:Users_tuxis.cargo_registry_srcgithub.com_1ecc6299db9ec823_rayon_1.7.0_src_vec.rs
lea r8, [0x1401250a8]
mov edx, 0x2f
call fcn.1400e34e0
ud2