Function at 0x539cc0
Capabilities:
Connect to wmi namespace via wbemlocator
Get disk information
Get disk size
Get local ipv4 addresses
Get logon sessions
Get mac address on windows
Get memory capacity
List groups for user account
List user accounts
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff0
sub esp, 0x820
mov esi, edx
mov dword [esp + 0x2a0], ecx
call dbg.__getit
test eax, eax
je 0x53d4bc
movdqu xmm1, xmmword [eax]
movd edx, xmm1
pshufd xmm0, xmm1, 0x55
movdqa xmmword [esp + 0x10], xmm1
add edx, 1
movd ecx, xmm0
adc ecx, 0
mov dword [eax], edx
mov dword [eax + 4], ecx
movzx eax, byte [0x5da16c]
mov eax, dword [0x5da100]
test eax, eax
jne 0x539d29
call sub.kernel32.dll_GetProcessHeap
test eax, eax
je 0x53d48e
mov dword [0x5da100], eax
push 0x3a420
push 0
push eax
call sub.kernel32.dll_HeapAlloc
test eax, eax
je 0x53d48e
mov dword [esp + 0x2c], esi
mov esi, eax
and esi, 0xfffffff0
mov dword [esi + 0xc], eax
add esi, 0x3a010
push 0x410
push 0xff
push esi
call sub.msvcrt.dll_memset
add esp, 0xc
movzx eax, byte [0x5da16c]
mov eax, dword [0x5da100]
test eax, eax
jne 0x539d85
call sub.kernel32.dll_GetProcessHeap
test eax, eax
je 0x53d49a
mov dword [0x5da100], eax
push 9
push 0
push eax
call sub.kernel32.dll_HeapAlloc
test eax, eax
je 0x53d49a
pxor xmm0, xmm0
mov byte [eax + 8], 0x55
mov dword [eax + 4], 0x5043206c
mov dword [eax], 0x61746f54
mov edi, eax
movdqa xmmword [esp + 0x2d0], xmm0
movzx eax, byte [0x5da16c]
mov eax, dword [0x5da100]
test eax, eax
jne 0x539dd9
call sub.kernel32.dll_GetProcessHeap
test eax, eax
je 0x53d4ab
mov dword [0x5da100], eax
push 0xa0
push 0
push eax
call sub.kernel32.dll_HeapAlloc
test eax, eax
je 0x53d4ab
mov dword [esp + 8], eax
mov dword [esp + 4], edi
call dbg.__getit
test eax, eax
je 0x53d4e2
movdqu xmm1, xmmword [eax]
movd edx, xmm1
pshufd xmm0, xmm1, 0x55
movdqa xmmword [esp + 0x70], xmm1
add edx, 1
movd ecx, xmm0
adc ecx, 0
mov dword [eax], edx
mov dword [eax + 4], ecx
mov dword [esp + 0x158], 0
mov dword [esp + 0x15c], 0
mov eax, dword [dbg.load]
lea ecx, [esp + 0x158]
push ecx
call eax
mov ecx, dword [esp + 0x15c]
mov eax, dword [esp + 0x158]
xor ebx, ebx
mov edi, 0
cmp eax, 0xd53e8000
mov edx, ecx
sbb edx, 0x19db1de
jl 0x539eb0
add eax, 0x2ac18000
adc ecx, 0xfe624e21
push 0
push 0x989680
push ecx
push eax
call sym.___udivdi3
add esp, 0x10
mov ebx, eax
mov edi, edx
call sub.kernel32.dll_GetTickCount64
push 0
push 0x3e8
push edx
push eax
call sym.___udivdi3
add esp, 0x10
xor ecx, ecx
sub ebx, eax
sbb edi, edx
cmovb edi, ecx
cmovb ebx, ecx
movaps xmm0, xmmword [esp + 0x10]
mov dword [esp + 0x158], esi
mov dword [esp + 0x15c], 0x3ff
mov dword [esp + 0x160], 0x380
mov dword [esp + 0x164], 0
mov eax, dword [esp + 4]
movq xmm1, qword [esp + 0x2d8]
movzx esi, word [esp + 0x30]
movzx edx, byte [esp + 0x32]
mov ecx, dword [esp + 8]
movups xmmword [esp + 0x168], xmm0
movsd xmm0, qword [esp + 0x2d0]
mov dword [esp + 0x19c], 0
mov dword [esp + 0x198], 0
mov dword [esp + 0x1a4], 0
mov dword [esp + 0x1a0], 0
mov dword [esp + 0x1ac], 0
mov dword [esp + 0x1a8], 0
mov dword [esp + 0x1b4], 0
mov dword [esp + 0x1b0], 0
mov dword [esp + 0x1ec], 0
mov dword [esp + 0x1e8], 0
mov dword [esp + 0x1f0], eax
mov dword [esp + 0x1f4], 9
mov dword [esp + 0x1f8], 9
mov dword [esp + 0x1fc], 1
mov dword [esp + 0x200], 0
mov dword [esp + 0x204], 0
mov dword [esp + 0x208], 1
mov eax, dword [esp + 0xc8]
movq qword [esp + 0x214], xmm1
movsd qword [esp + 0x20c], xmm0
movsd xmm0, qword [esp + 0xc0]
mov dword [esp + 0x224], eax
movsd qword [esp + 0x21c], xmm0
mov dword [esp + 0x228], 8
mov dword [esp + 0x22c], 0
mov dword [esp + 0x230], 0
mov byte [esp + 0x234], 0
mov word [esp + 0x235], si
mov esi, dword [esp + 0x2c]
movdqa xmm0, xmmword [esp + 0x70]
mov byte [esp + 0x237], dl
mov dword [esp + 0x238], 4
mov dword [esp + 0x23c], 0
mov dword [esp + 0x240], 0
mov dword [esp + 0x244], ecx
mov dword [esp + 0x248], 2
mov dword [esp + 0x24c], 0
mov dword [esp + 0x1b8], 0
mov dword [esp + 0x178], 0x5bcff0
mov dword [esp + 0x17c], 0
mov dword [esp + 0x180], 0
mov dword [esp + 0x184], 0
cmp byte [esi + 4], 0
movdqu xmmword [esp + 0x188], xmm0
mov dword [esp + 0x1e4], edi
mov dword [esp + 0x1e0], ebx
mov dword [esp + 0x250], 4
mov dword [esp + 0x254], 0
mov dword [esp + 0x258], 0
je 0x53a1ec
pxor xmm0, xmm0
movdqa xmmword [esp + 0x2d0], xmm0
movdqa xmmword [esp + 0x300], xmm0
movdqa xmmword [esp + 0x2f0], xmm0
movdqa xmmword [esp + 0x2e0], xmm0
mov dword [esp + 0x2d0], 0x40
lea eax, [esp + 0x2d0]
push eax
call sub.kernel32.dll_GlobalMemoryStatusEx
movdqu xmm0, xmmword [esp + 0x2d8]
mov dword [esp + 0xf4], 0
mov dword [esp + 0xf0], 0
movdqu xmmword [esp + 0x198], xmm0
pxor xmm0, xmm0
movdqa xmmword [esp + 0xe0], xmm0
movdqa xmmword [esp + 0xd0], xmm0
movdqa xmmword [esp + 0xc0], xmm0
lea eax, [esp + 0xc0]
push 0x38
push eax
call sub.psapi.dll_GetPerformanceInfo
cmp eax, 1
jne 0x53a1ec
mov ebx, dword [esp + 0xc8]
mov eax, dword [esp + 0xd0]
mov ecx, dword [esp + 0xe8]
mov edi, dword [esp + 0xc4]
xor esi, esi
sub ebx, eax
cmovb ebx, esi
sub edi, eax
mov eax, ecx
cmovb edi, esi
mul ebx
mov ebx, 0xffffffff
mov edx, 0
cmovo eax, ebx
cmovo edx, edx
mov dword [esp + 0x1a8], eax
mov eax, ecx
mov dword [esp + 0x1ac], edx
mul edi
cmovo esi, esi
cmovo eax, ebx
mov dword [esp + 0x1b4], esi
mov esi, dword [esp + 0x2c]
mov dword [esp + 0x1b0], eax
movzx eax, byte [esi + 0xb]
cmp al, 2
je 0x53a6a9
movzx ecx, byte [esi + 0xc]
cmp dword [esp + 0x1b8], 0
lea edi, [esp + 0x1e8]
lea ebx, [esp + 0x1b8]
mov byte [esp + 4], al
mov byte [esp + 0x10], cl
je 0x53a37d
push dword [esp + 0x1d8]
call sub.pdh.dll_PdhCollectQueryData
mov edx, dword [esp + 0x218]
test edx, edx
je 0x53a265
mov ecx, ebx
push dword [esp + 0x220]
call sym.sysinfo::windows::cpu::Query::get::hf4eb2d45e442da33
add esp, 4
test eax, eax
je 0x53d546
movss xmm1, dword [0x560710]
subss xmm1, xmm0
movss dword [esp + 0x214], xmm1
movzx eax, byte [esp + 0x10]
movzx ecx, byte [esp + 4]
and al, 1
and cl, 1
movzx eax, al
movzx edx, cl
mov ecx, edi
push eax
call sym.sysinfo::windows::cpu::CpusWrapper::init_if_needed::h5bb95911e69814aa
add esp, 4
mov esi, dword [esp + 0x230]
test esi, esi
je 0x53a2d6
mov edi, dword [esp + 0x228]
shl esi, 6
add edi, 0x2c
jmp 0x53a2a8
add edi, 0x40
add esi, 0xffffffc0
je 0x53a2d6
mov edx, dword [edi + 4]
test edx, edx
je 0x53a2a0
mov ecx, ebx
push dword [edi + 0xc]
call sym.sysinfo::windows::cpu::Query::get::hf4eb2d45e442da33
add esp, 4
test eax, eax
je 0x53d462
movss xmm1, dword [0x560710]
subss xmm1, xmm0
movss dword [edi], xmm1
jmp 0x53a2a0
test byte [esp + 0x10], 1
mov esi, dword [esp + 0x2c]
je 0x53a6a9
cmp byte [esp + 0x234], 0
jne 0x53a6a9
mov esi, dword [esp + 0x230]
lea ecx, [esp + 0x2d0]
mov edx, esi
call sym.sysinfo::windows::cpu::get_frequencies::h2b18c1d653dc33d9
mov ecx, dword [esp + 0x2d4]
mov edi, dword [esp + 0x228]
mov eax, dword [esp + 0x2d0]
test esi, esi
mov dword [esp + 0x10], ecx
je 0x53a356
mov edx, dword [esp + 0x2d8]
mov ebx, esi
xor ecx, ecx
shl ebx, 6
shl edx, 3
nop word cs:[eax + eax]
cmp edx, ecx
je 0x53a356
movsd xmm0, qword [eax + ecx]
movsd qword [edi + ecx*8], xmm0
add ecx, 8
add ebx, 0xffffffc0
jne 0x53a340
cmp dword [esp + 0x10], 0
je 0x53a36b
push eax
push 0
push dword [0x5da100]
call sub.kernel32.dll_HeapFree
test esi, esi
je 0x53a68b
mov eax, dword [edi]
mov ecx, dword [edi + 4]
jmp 0x53a68f
mov dword [esp + 0x2d0], 0
lea esi, [esp + 0x2d0]
push esi
push 0
push 0
call sub.pdh.dll_PdhOpenQueryA
test eax, eax
je 0x53a3b1
mov esi, dword [esp + 0x2c]
mov dword [esp + 0x1b8], 0
jmp 0x53a6a9
mov edi, dword [esp + 0x2d0]
call dbg.__getit
test eax, eax
je 0x53d592
mov dword [esp + 0x1b8], 0x5bcff0
mov dword [esp + 0x1bc], 0
mov dword [esp + 0x1c0], 0
mov dword [esp + 0x1c4], 0
movdqu xmm0, xmmword [eax]
movd edx, xmm0
pshufd xmm1, xmm0, 0x55
add edx, 1
movd ecx, xmm1
adc ecx, 0
mov dword [eax], edx
mov dword [eax + 4], ecx
movdqu xmmword [esp + 0x1c8], xmm0
mov dword [esp + 0x1d8], edi
mov dword [esp + 0x1dc], 0
movzx eax, byte [0x5da16c]
mov eax, dword [0x5da100]
test eax, eax
jne 0x53a44a
call sub.kernel32.dll_GetProcessHeap
test eax, eax
je 0x53d55f
mov dword [0x5da100], eax
push 0x1e
push 0
push eax
call sub.kernel32.dll_HeapAlloc
test eax, eax
je 0x53d55f
mov word [eax + 0x1c], 0x656d
mov dword [eax + 0x18], 0x69542065
mov dword [eax + 0x14], 0x6c644920
mov dword [eax + 0x10], 0x255c296c
mov dword [eax + 0xc], 0x61746f54
mov dword [eax + 8], 0x5f28726f
mov dword [eax + 4], 0x73736563
mov dword [eax], 0x6f72505c
mov dword [esp + 0xc0], eax
mov dword [esp + 0xc4], 0x1e
mov dword [esp + 0xc8], 0x1e
movzx eax, byte [0x5da16c]
mov eax, dword [0x5da100]
test eax, eax
jne 0x53a4d1
call sub.kernel32.dll_GetProcessHeap
test eax, eax
je 0x53d570
mov dword [0x5da100], eax
push 5
push 0
push eax
call sub.kernel32.dll_HeapAlloc
test eax, eax
je 0x53d570
movzx ebx, byte [esp + 0x10]
mov bh, byte [esp + 4]
lea edi, [esp + 0x218]
mov byte [eax + 4], 0x30
mov dword [eax], 0x5f746f74
mov dword [esp + 0x2d0], eax
mov dword [esp + 0x2d4], 5
mov dword [esp + 0x2d8], 5
and bl, 1
and bh, 1
lea ecx, [esp + 0xc0]
lea edx, [esp + 0x1b8]
push esi
push edi
call sym.sysinfo::windows::tools::add_english_counter::h89ff90be8d7efaef
add esp, 8
movzx eax, bl
movzx edx, bh
lea ecx, [esp + 0x1e8]
push eax
call sym.sysinfo::windows::cpu::CpusWrapper::init_if_needed::h5bb95911e69814aa
add esp, 4
mov edi, dword [esp + 0x230]
test edi, edi
je 0x53a669
mov esi, dword [esp + 0x228]
shl edi, 6
xor ebx, ebx
add esi, 0x30
nop dword [eax]
lea eax, [esp + 0xb4]
mov dword [esp + 0xb4], ebx
inc ebx
mov dword [esp + 0x2d0], 0x5bd474
mov dword [esp + 0x2d4], 2
mov dword [esp + 0x2e0], 0
mov dword [esp + 0xc0], eax
lea eax, [esp + 0xc0]
mov dword [esp + 0xc4], sym.core::fmt::num::imp::__LT_impl_u20_core..fmt..Display_u20_for_u20_u32_GT_::fmt::ha05222cc52361d66
mov dword [esp + 0x2d8], eax
mov dword [esp + 0x2dc], 1
lea ecx, [esp + 0x30]
lea edx, [esp + 0x2d0]
call dbg.format_inner
lea eax, [esp + 0xb4]
mov dword [esp + str.Lazy_instance_has_previously_been_poisoned], 0x5bd488
mov dword [esp + 0x2d4], 2
mov dword [esp + 0x2e0], 0
mov dword [esp + 0xfc], eax
lea eax, [esp + 0xfc]
mov dword [esp + 0x100], sym.core::fmt::num::imp::__LT_impl_u20_core..fmt..Display_u20_for_u20_u32_GT_::fmt::ha05222cc52361d66
mov dword [esp + 0x2d8], eax
mov dword [esp + 0x2dc], 1
lea ecx, [esp + 0xc0]
lea edx, [esp + 0x2d0]
call dbg.format_inner
lea eax, [esp + 0xc0]
lea ecx, [esp + 0x30]
lea edx, [esp + 0x1b8]
push eax
push esi
call sym.sysinfo::windows::tools::add_english_counter::h89ff90be8d7efaef
add esp, 8
add esi, 0x40
add edi, 0xffffffc0
jne 0x53a570
cmp dword [esp + 0x1b8], 0
mov esi, dword [esp + 0x2c]
lea ebx, [esp + 0x1b8]
lea edi, [esp + 0x1e8]
jne 0x53a220
jmp 0x53a6a9
xor eax, eax
xor ecx, ecx
mov esi, dword [esp + 0x2c]
mov dword [esp + 0x1e8], eax
mov dword [esp + 0x1ec], ecx
mov byte [esp + 0x234], 1
cmp byte [esi + 6], 0
je 0x53aa21
push 0
push 0
call sub.ole32.dll_CoInitializeEx
cmp eax, 2
mov esi, eax
setb bl
push 0
push 0
push 0
push 3
push 0
push 0
push 0
push 0xffffffffffffffff
push 0
call sub.ole32.dll_CoInitializeSecurity
test eax, eax
js 0x53a927
mov dword [esp + 0x2d0], 0
lea eax, [esp + 0x2d0]
push eax
push 0x5bcf04
push 1
push 0
push 0x5bcef4
call sub.ole32.dll_CoCreateInstance
test eax, eax
js 0x53a927
mov eax, dword [esp + 0x2d0]
mov dword [esp + 0x2d0], 1
mov dword [esp + 0x2d4], eax
mov dword [esp + 0x2d8], 0
mov dword [esp + 0x2e0], 0
mov byte [esp + 0x2e8], bl
lea ecx, [esp + 0xc0]
lea edx, [esp + 0x2d0]
call sym.sysinfo::windows::component::Connection::connect_server::h925f71b243e7a1cb
mov edi, dword [esp + 0xc0]
cmp edi, 2
je 0x53a931
mov eax, dword [esp + 0xc4]
mov esi, dword [esp + 0xc8]
movzx ecx, byte [esp + 0xd8]
mov ebx, dword [esp + 0xcc]
mov edx, dword [esp + 0xd4]
mov dword [esp + 4], eax
mov eax, dword [esp + 0xd0]
test esi, esi
mov byte [esp + 0x10], cl
mov dword [esp + 8], eax
je 0x53ae06
push 0
push 0
push 3
push 3
push 0
push 0
push 0xa
push ebx
mov dword [esp + 0x90], esi
mov esi, ebx
mov ebx, edx
call sub.ole32.dll_CoSetProxyBlanket
mov edx, ebx
mov ebx, esi
mov esi, dword [esp + 0x70]
test eax, eax
js 0x53ae06
lea eax, [esp + 0xd9]
movzx ecx, word [eax]
movzx eax, byte [eax + 2]
mov byte [esp + 0x2eb], al
mov eax, dword [esp + 4]
mov word [esp + 0x2e9], cx
mov dword [esp + 0x2d0], edi
mov dword [esp + 0x2d4], eax
mov eax, dword [esp + 8]
mov dword [esp + 0x2d8], esi
mov dword [esp + 0x2dc], ebx
mov dword [esp + 0x2e0], eax
mov ah, byte [esp + 0x10]
mov dword [esp + 0x2e4], edx
mov byte [esp + 0x2e8], ah
lea ecx, [esp + 0x30]
lea edx, [esp + 0x2d0]
call sym.sysinfo::windows::component::Connection::exec_query::h1c7619a7d9782cd6
mov eax, dword [esp + 0x30]
cmp eax, 2
je 0x53a931
movq xmm0, qword [esp + 0x44]
movq xmm2, qword [esp + 0x34]
movq xmm1, qword [esp + 0x3c]
movq qword [esp + 0x110], xmm0
movq qword [esp + 0x108], xmm1
movq qword [esp + 0x100], xmm2
mov dword [esp + 0xfc], eax
lea ecx, [esp + 0x2d0]
lea edx, [esp + 0xfc]
push 1
call sym.sysinfo::windows::component::Connection::temperature::h1059f14655ed8676
add esp, 4
mov eax, dword [esp + 0x104]
mov ebx, dword [esp + 0x2d4]
mov ecx, dword [esp + 0xfc]
mov edi, dword [esp + 0x100]
mov edx, dword [esp + 0x108]
mov esi, dword [esp + 0x110]
mov dword [esp + 4], eax
movzx eax, byte [esp + 0x114]
cmp ebx, 2
mov byte [esp + 0x10], al
mov eax, dword [esp + 0x10c]
jne 0x53ae47
test eax, eax
je 0x53a8fb
test esi, esi
je 0x53a8fb
mov eax, dword [esi]
push esi
mov esi, ecx
mov ebx, edx
call dword [eax + 8]
mov edx, ebx
mov ecx, esi
cmp dword [esp + 4], 0
je 0x53a910
test edx, edx
je 0x53a910
mov eax, dword [edx]
push edx
mov esi, ecx
call dword [eax + 8]
mov ecx, esi
test ecx, ecx
je 0x53a91e
test edi, edi
je 0x53a91e
mov eax, dword [edi]
push edi
call dword [eax + 8]
cmp byte [esp + 0x10], 0
je 0x53a931
jmp 0x53a92c
cmp esi, 2
jae 0x53a931
call sub.ole32.dll_CoUninitialize
mov dword [esp + 0x10], 4
xor edi, edi
mov ebx, dword [esp + 0x240]
test ebx, ebx
je 0x53af70
mov esi, dword [esp + 0x238]
add esi, 8
jmp 0x53a96a
add esi, 0x38
dec ebx
je 0x53af70
cmp dword [esi + 0x20], 0
je 0x53a980
push dword [esi + 0x1c]
push 0
push dword [0x5da100]
call sub.kernel32.dll_HeapFree
cmp dword [esi], 2
je 0x53a960
mov eax, dword [esi + 0x14]
cmp dword [esi + 0x10], 0
mov dword [esi + 0x10], 0
je 0x53a99f
test eax, eax
je 0x53a99f
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [esi + 0xc]
cmp dword [esi + 8], 0
mov dword [esi + 8], 0
je 0x53a9b9
test eax, eax
je 0x53a9b9
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [esi + 4]
cmp dword [esi], 0
mov dword [esi], 0
je 0x53a9d1
test eax, eax
je 0x53a9d1
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
cmp byte [esi + 0x18], 0
je 0x53a9dc
call sub.ole32.dll_CoUninitialize
cmp dword [esi], 0
je 0x53a9ee
mov eax, dword [esi + 4]
test eax, eax
je 0x53a9ee
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
cmp dword [esi + 8], 0
je 0x53aa01
mov eax, dword [esi + 0xc]
test eax, eax
je 0x53aa01
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
cmp dword [esi + 0x10], 0
je 0x53a960
mov eax, dword [esi + 0x14]
test eax, eax
je 0x53a960
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
jmp 0x53a960
cmp byte [esi + 5], 0
je 0x53afa7
mov eax, dword [esp + 0x240]
test eax, eax
je 0x53afa7
mov esi, dword [esp + 0x238]
imul edi, eax, 0x38
add esi, 8
jmp 0x53aa5c
add esi, 0x38
add edi, 0xffffffc8
je 0x53afa7
mov ecx, dword [esi]
mov dword [esp + 8], edi
cmp ecx, 2
jne 0x53abc0
push 0
push 0
call sub.ole32.dll_CoInitializeEx
cmp eax, 2
mov edi, eax
setb bl
push 0
push 0
push 0
push 3
push 0
push 0
push 0
push 0xffffffffffffffff
push 0
call sub.ole32.dll_CoInitializeSecurity
test eax, eax
js 0x53ac09
mov byte [esp + 0x10], bl
mov dword [esp + 0x2d0], 0
lea ebx, [esp + 0x2d0]
push ebx
push 0x5bcf04
push 1
push 0
push 0x5bcef4
call sub.ole32.dll_CoCreateInstance
test eax, eax
js 0x53ac15
mov eax, dword [esp + 0x2d0]
mov dword [esp + 0x2d0], 1
mov dword [esp + 0x2d4], eax
mov ah, byte [esp + 0x10]
mov dword [esp + 0x2d8], 0
mov dword [esp + 0x2e0], 0
mov byte [esp + 0x2e8], ah
lea ecx, [esp + 0x30]
mov edx, ebx
call sym.sysinfo::windows::component::Connection::connect_server::h925f71b243e7a1cb
mov eax, dword [esp + 0x30]
mov ebx, 2
cmp eax, 2
je 0x53ac24
mov dword [esp + 0xa0], eax
mov eax, dword [esp + 0x34]
mov edx, dword [esp + 0x44]
mov ecx, dword [esp + 0x38]
mov edi, dword [esp + 0x40]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x3c]
mov dword [esp + 0x80], edx
movzx edx, byte [esp + 0x48]
test ecx, ecx
mov dword [esp + 0x70], ecx
mov dword [esp + 0x10], edx
mov dword [esp + 0x50], eax
je 0x53ad86
push 0
push 0
push 3
push 3
push 0
push 0
push 0xa
push eax
call sub.ole32.dll_CoSetProxyBlanket
test eax, eax
mov eax, dword [esp + 0x50]
js 0x53ad86
lea ecx, [esp + 0x49]
mov ebx, dword [esp + 0xa0]
mov edx, dword [esp + 4]
movzx eax, byte [ecx + 2]
mov byte [esp + 0x2d2], al
movzx eax, word [ecx]
mov word [esp + 0x2d0], ax
mov eax, dword [esp + 0x50]
jmp 0x53adfa
mov eax, dword [esi + 4]
movzx ebx, byte [esi + 0x18]
mov edi, dword [esi + 0x10]
mov edx, dword [esi + 0x14]
mov dword [esp + 4], eax
mov eax, dword [esi + 8]
mov dword [esp + 0x10], ebx
mov ebx, ecx
mov ecx, edx
mov edx, edi
mov dword [esp + 0x70], eax
mov eax, dword [esi + 0xc]
mov dword [esp + 0x50], eax
movzx eax, byte [esi + 0x1b]
mov edi, dword [esp + 0x50]
mov byte [esp + 0x32], al
movzx eax, word [esi + 0x19]
mov word [esp + 0x30], ax
mov dword [esi], 2
jmp 0x53aca0
mov ebx, 2
cmp edi, 1
ja 0x53ac24
jmp 0x53ac1f
cmp edi, 1
mov ebx, 2
ja 0x53ac24
call sub.ole32.dll_CoUninitialize
mov dword [esp + 0x10], ecx
mov dword [esi], ebx
mov dword [esp + 4], edx
mov dword [esi + 4], edx
mov edx, dword [esp + 0x70]
cmp ebx, 2
mov dword [esi + 8], edx
mov edx, dword [esp + 0x10]
mov dword [esi + 0xc], eax
mov dword [esi + 0x10], edi
mov dword [esi + 0x14], ecx
mov byte [esi + 0x18], dl
mov edx, edi
mov edi, eax
movzx eax, word [esp + 0x2d0]
mov word [esi + 0x19], ax
movzx eax, byte [esp + 0x2d2]
mov byte [esi + 0x1b], al
movzx eax, byte [esi + 0x1b]
mov byte [esp + 0x32], al
movzx eax, word [esi + 0x19]
mov word [esp + 0x30], ax
jne 0x53aca0
mov edi, dword [esp + 8]
mov dword [esp + 0x2d0], 2
lea ebx, [esp + 0x2d0]
jmp 0x53ad0c
mov eax, dword [esp + 4]
mov dword [esp + 0xc0], ebx
mov dword [esp + 0xc4], eax
mov eax, dword [esp + 0x70]
mov dword [esp + 0xc8], eax
mov eax, dword [esp + 0x10]
mov dword [esp + 0xcc], edi
mov dword [esp + 0xd0], edx
mov dword [esp + 0xd4], ecx
lea ecx, [esp + 0xd9]
mov byte [esp + 0xd8], al
movzx eax, word [esp + 0x30]
mov word [ecx], ax
mov ah, byte [esp + 0x32]
mov byte [ecx + 2], ah
lea ebx, [esp + 0x2d0]
lea edx, [esp + 0xc0]
mov ecx, ebx
call sym.sysinfo::windows::component::Connection::exec_query::h1c7619a7d9782cd6
mov edi, dword [esp + 8]
mov eax, dword [esp + 0x2e8]
mov dword [esi + 0x18], eax
movsd xmm0, qword [esp + 0x2e0]
movsd qword [esi + 0x10], xmm0
movsd xmm0, qword [esp + 0x2d0]
movq xmm1, qword [esp + 0x2d8]
movsd qword [esi], xmm0
movq qword [esi + 8], xmm1
cmp dword [esi], 2
je 0x53aa50
mov ecx, ebx
mov edx, esi
push 0
call sym.sysinfo::windows::component::Connection::temperature::h1059f14655ed8676
add esp, 4
cmp dword [esp + 0x2d4], 2
je 0x53aa50
movss xmm0, dword [esp + 0x2d0]
movss dword [esi + 0x28], xmm0
ucomiss xmm0, dword [esi + 0x2c]
jbe 0x53aa50
movss dword [esi + 0x2c], xmm0
jmp 0x53aa50
mov ecx, dword [esp + 0x80]
test edi, edi
je 0x53ad9f
test ecx, ecx
je 0x53ad9f
mov eax, dword [ecx]
push ecx
call dword [eax + 8]
mov eax, dword [esp + 0x50]
cmp dword [esp + 0x70], 0
je 0x53adbb
test eax, eax
je 0x53adbb
mov eax, dword [esp + 0x50]
mov eax, dword [eax]
push dword [esp + 0x50]
call dword [eax + 8]
mov eax, dword [esp + 0x50]
cmp dword [esp + 0xa0], 0
mov edx, dword [esp + 4]
je 0x53addb
test edx, edx
je 0x53addb
mov eax, dword [edx]
push edx
call dword [eax + 8]
mov eax, dword [esp + 0x50]
mov edx, dword [esp + 4]
mov ecx, dword [esp + 0x10]
test cl, cl
je 0x53adf2
call sub.ole32.dll_CoUninitialize
mov eax, dword [esp + 0x50]
mov edx, dword [esp + 4]
jmp 0x53adfa
mov dword [esp + 0x10], 0
mov ecx, dword [esp + 0x80]
jmp 0x53ac28
cmp dword [esp + 8], 0
je 0x53ae17
test edx, edx
je 0x53ae17
mov eax, dword [edx]
push edx
call dword [eax + 8]
test esi, esi
je 0x53ae25
test ebx, ebx
je 0x53ae25
mov eax, dword [ebx]
push ebx
call dword [eax + 8]
mov ecx, dword [esp + 4]
test edi, edi
je 0x53ae37
test ecx, ecx
je 0x53ae37
mov eax, dword [ecx]
push ecx
call dword [eax + 8]
cmp byte [esp + 0x10], 0
je 0x53a931
jmp 0x53a92c
mov dword [esp + 0xa0], eax
movzx eax, word [esp + 0x115]
movss xmm0, dword [esp + 0x2d0]
movd xmm1, dword [esp + 0x2d8]
mov dword [esp + 0x50], edx
mov dword [esp + 0x70], ecx
mov dword [esp + 8], edi
mov word [esp + 0xc0], ax
movzx eax, byte [esp + 0x117]
movss dword [esp + 0x80], xmm0
movd dword [esp + 0xc], xmm1
mov byte [esp + 0xc2], al
mov ecx, 8
xor edx, edx
call sym.alloc::raw_vec::RawVec_LT_T_C_A_GT_::allocate_in::hc34d6410cf404631
mov dword [esp + 0x130], edx
mov dword [eax + 4], 0x72657475
mov dword [eax], 0x706d6f43
mov edi, eax
movzx eax, byte [0x5da16c]
mov ecx, 0x38
mov edx, 4
call sym.___rust_alloc
test eax, eax
je 0x53d5b8
movss xmm0, dword [esp + 0xc]
mov ecx, dword [esp + 0x70]
mov dword [eax], ebx
mov edx, dword [esp + 0x130]
movss dword [eax + 4], xmm0
mov dword [eax + 8], ecx
mov ecx, dword [esp + 8]
movd xmm0, dword [esp + 0x80]
mov dword [eax + 0xc], ecx
mov ecx, dword [esp + 4]
mov dword [eax + 0x10], ecx
mov ecx, dword [esp + 0x50]
mov dword [eax + 0x14], ecx
mov ecx, dword [esp + 0xa0]
mov dword [eax + 0x18], ecx
movzx ecx, byte [esp + 0x10]
mov dword [eax + 0x1c], esi
mov byte [eax + 0x20], cl
mov ecx, eax
movzx eax, word [esp + 0xc0]
mov dword [esp + 0x10], ecx
mov word [ecx + 0x21], ax
movzx eax, byte [esp + 0xc2]
mov byte [ecx + 0x23], al
mov dword [ecx + 0x24], edi
mov edi, 1
mov dword [ecx + 0x28], edx
mov dword [ecx + 0x2c], 8
movd dword [ecx + 0x30], xmm0
movd dword [ecx + 0x34], xmm0
mov ebx, dword [esp + 0x240]
test ebx, ebx
jne 0x53a94a
cmp dword [esp + 0x23c], 0
je 0x53af8e
push dword [esp + 0x238]
push 0
push dword [0x5da100]
call sub.kernel32.dll_HeapFree
mov eax, dword [esp + 0x10]
mov dword [esp + 0x238], eax
mov dword [esp + 0x23c], edi
mov dword [esp + 0x240], edi
mov esi, dword [esp + 0x2c]
cmp byte [esi + 1], 0
je 0x53b055
mov dword [esp + 0x94], 0
lea eax, [esp + 0x94]
push eax
call sub.iphlpapi.dll_GetIfTable2
test eax, eax
jne 0x53c457
mov eax, dword [esp + 0x178]
mov ecx, dword [esp + 0x184]
movdqa xmm0, xmmword [eax]
lea edx, [eax + 0x10]
pmovmskb esi, xmm0
not esi
jmp 0x53b016
lea edi, [esi - 1]
and edi, esi
tzcnt esi, esi
mov ebx, eax
shl esi, 7
sub ebx, esi
mov esi, edi
mov byte [ebx - 2], 0
sub ecx, 1
jb 0x53b20b
test si, si
jne 0x53b000
nop word cs:[eax + eax]
nop
movdqa xmm0, xmmword [edx]
add eax, 0xfffff800
add edx, 0x10
pmovmskb esi, xmm0
cmp si, 0xffff
je 0x53b030
mov ebx, 0xfffffffe
sub ebx, esi
not esi
mov edi, esi
and edi, ebx
jmp 0x53b005
cmp byte [esi], 0
je 0x53c457
lea eax, [esp + 0x2d0]
push 0x548
push 0
push eax
call sub.msvcrt.dll_memset
add esp, 0xc
mov edi, dword [esp + 0x178]
mov eax, dword [esp + 0x184]
movdqa xmm0, xmmword [edi]
mov dword [esp + 4], eax
lea esi, [edi + 0x10]
pmovmskb eax, xmm0
not eax
nop word cs:[eax + eax]
nop
cmp dword [esp + 4], 0
je 0x53c453
test ax, ax
je 0x53b0c0
lea ecx, [eax - 1]
and ecx, eax
mov dword [esp + 0x10], ecx
jmp 0x53b0e8
movdqa xmm0, xmmword [esi]
add edi, 0xfffff800
add esi, 0x10
pmovmskb eax, xmm0
cmp ax, 0xffff
je 0x53b0c0
mov ecx, 0xfffffffe
sub ecx, eax
not eax
mov ebx, eax
and ebx, ecx
mov dword [esp + 0x10], ebx
tzcnt eax, eax
mov ebx, edi
dec dword [esp + 4]
shl eax, 7
sub ebx, eax
mov eax, dword [ebx - 0x70]
mov ecx, dword [ebx - 0x6c]
mov dword [esp + 0x2d0], eax
mov dword [esp + 0x2d4], ecx
mov dword [esp + 0x2d8], 0
lea eax, [esp + 0x2d0]
push eax
call sub.iphlpapi.dll_GetIfEntry2
test eax, eax
mov eax, dword [esp + 0x10]
jne 0x53b0a0
mov eax, dword [ebx - 0x68]
mov ecx, dword [ebx - 0x64]
mov edx, 0xffffffff
mov dword [ebx - 0x5c], ecx
mov dword [ebx - 0x60], eax
mov eax, dword [esp + 0x7d4]
mov ecx, dword [esp + 0x7d0]
mov dword [ebx - 0x68], ecx
mov dword [ebx - 0x64], eax
mov eax, dword [ebx - 0x54]
mov ecx, dword [ebx - 0x58]
mov dword [ebx - 0x50], ecx
mov dword [ebx - 0x4c], eax
movsd xmm0, qword [esp + 0x788]
movsd qword [ebx - 0x58], xmm0
movsd xmm0, qword [ebx - 0x48]
movsd qword [ebx - 0x40], xmm0
mov eax, dword [esp + 0x790]
mov ecx, dword [esp + 0x794]
add eax, dword [esp + 0x798]
adc ecx, dword [esp + 0x79c]
cmovb ecx, edx
cmovb eax, edx
mov dword [ebx - 0x44], ecx
mov dword [ebx - 0x48], eax
movsd xmm0, qword [ebx - 0x38]
movsd qword [ebx - 0x30], xmm0
mov ecx, dword [esp + 0x7d8]
mov eax, dword [esp + 0x7dc]
add ecx, dword [esp + 0x7e0]
adc eax, dword [esp + 0x7e4]
cmovb eax, edx
cmovb ecx, edx
mov dword [ebx - 0x34], eax
mov dword [ebx - 0x38], ecx
mov eax, dword [esp + 0x10]
movsd xmm0, qword [ebx - 0x28]
movsd qword [ebx - 0x20], xmm0
movsd xmm0, qword [esp + 0x7a8]
movsd qword [ebx - 0x28], xmm0
movsd xmm0, qword [ebx - 0x18]
movsd qword [ebx - 0x10], xmm0
movq xmm0, qword [esp + 0x7f0]
movq qword [ebx - 0x18], xmm0
jmp 0x53b0a0
call dbg.__getit
test eax, eax
je 0x53d544
mov dword [esp + 0x2d0], 0x5bcff0
mov dword [esp + 0x2d4], 0
mov dword [esp + 0x2d8], 0
mov dword [esp + 0x2dc], 0
movdqu xmm0, xmmword [eax]
movd edx, xmm0
pshufd xmm1, xmm0, 0x55
add edx, 1
movd ecx, xmm1
adc ecx, 0
mov dword [eax], edx
mov dword [eax + 4], ecx
mov dword [esp + 0x30], 4
mov dword [esp + 0x34], 0
movdqu xmmword [esp + 0x2e0], xmm0
mov dword [esp + 0x38], 0
mov edi, dword [esp + 0x94]
mov ebx, dword [edi]
test ebx, ebx
je 0x53bebf
add edi, 8
xor ecx, ecx
mov dword [esp + 0xa0], ebx
mov dword [esp + 0x4c], edi
jmp 0x53b2c9
push dword [esp + 0x50]
push 0
push dword [0x5da100]
call sub.kernel32.dll_HeapFree
mov ecx, dword [esp + 0x80]
nop dword [eax]
inc ecx
cmp ecx, ebx
je 0x53b654
imul esi, ecx, 0x548
mov eax, dword [edi + esi + 0x4a8]
or eax, dword [edi + esi + 0x4ac]
jne 0x53b2ef
mov eax, dword [edi + esi + 0x4b0]
or eax, dword [edi + esi + 0x4b4]
je 0x53b2c0
cmp dword [edi + esi + 0x48c], 2
je 0x53b2c0
cmp dword [edi + esi + 0x420], 0
je 0x53b2c0
mov dword [esp + 0x80], ecx
movzx eax, byte [0x5da16c]
mov eax, dword [0x5da100]
test eax, eax
jne 0x53b32c
call sub.kernel32.dll_GetProcessHeap
test eax, eax
je 0x53d47b
mov dword [0x5da100], eax
push 0x14
push 0
push eax
call sub.kernel32.dll_HeapAlloc
test eax, eax
je 0x53d47b
movq xmm0, qword [edi + esi + 0x14]
mov ecx, dword [edi + esi + 0x10]
pxor xmm1, xmm1
mov dword [esp + 0x50], eax
punpcklbw xmm0, xmm1
mov dword [eax], ecx
movdqu xmmword [eax + 4], xmm0
movzx eax, byte [0x5da16c]
mov eax, dword [0x5da100]
test eax, eax
jne 0x53b37d
call sub.kernel32.dll_GetProcessHeap
test eax, eax
je 0x53d47d
mov dword [0x5da100], eax
push 0x14
push 0
push eax
call sub.kernel32.dll_HeapAlloc
test eax, eax
je 0x53d47d
mov ecx, dword [esp + 0x50]
mov edx, dword [ecx + 0x10]
mov dword [eax + 0x10], edx
movsd xmm0, qword [ecx]
movsd xmm1, qword [ecx + 8]
movsd qword [eax + 8], xmm1
movsd qword [eax], xmm0
mov ecx, dword [esp + 0x2e0]
mov edx, dword [esp + 0x2e4]
push 0xa
mov dword [esp + 8], eax
push eax
push dword [esp + 0x2f4]
push dword [esp + 0x2f4]
call sym.core::hash::BuildHasher::hash_one::h3941b82d0083a1b5
add esp, 0x10
mov esi, eax
shr eax, 0x19
mov ecx, dword [esp + 0x2d0]
mov edx, dword [esp + 0x2d4]
mov dword [esp + 8], 0
movd xmm0, eax
mov dword [esp + 0xc], eax
mov dword [esp + 0x130], esi
punpcklbw xmm0, xmm0
pshuflw xmm0, xmm0, 0
pshufd xmm0, xmm0, 0
lea eax, [ecx - 0x10]
mov dword [esp + 0x70], ecx
mov dword [esp + 0x10], eax
and esi, edx
movdqa xmm2, xmm0
mov ebx, edx
movdqu xmm1, xmmword [ecx + esi]
pcmpeqb xmm2, xmm1
pmovmskb edx, xmm2
nop
test dx, dx
je 0x53b490
mov ecx, edx
lea edx, [ecx - 1]
tzcnt eax, ecx
add eax, esi
and edx, ecx
mov ecx, dword [esp + 0x10]
and eax, ebx
mov edi, eax
shl edi, 4
sub ecx, edi
cmp dword [ecx + 8], 0xa
jne 0x53b430
mov ecx, dword [ecx]
mov edi, dword [esp + 4]
movdqu xmm2, xmmword [ecx]
movdqu xmm3, xmmword [edi]
movd xmm5, dword [ecx + 0x10]
movd xmm4, dword [edi + 0x10]
pcmpeqb xmm3, xmm2
pcmpeqb xmm4, xmm5
pand xmm4, xmm3
pmovmskb ecx, xmm4
cmp ecx, 0xffff
jne 0x53b430
jmp 0x53b4c0
pcmpeqd xmm2, xmm2
pcmpeqb xmm1, xmm2
pmovmskb ecx, xmm1
test ecx, ecx
jne 0x53b54c
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0x70]
mov edx, ebx
lea esi, [esi + eax + 0x10]
add eax, 0x10
mov dword [esp + 8], eax
jmp 0x53b419
mov esi, dword [esp + 0x70]
neg eax
shl eax, 4
add esi, eax
push dword [esp + 4]
push 0
push dword [0x5da100]
call sub.kernel32.dll_HeapFree
mov edi, dword [esp + 0x4c]
mov ebx, dword [esp + 0xa0]
mov eax, dword [esi - 4]
inc eax
cmp eax, 1
mov dword [esi - 4], eax
jg 0x53b2a4
mov edx, dword [esp + 0x38]
cmp edx, dword [esp + 0x34]
jne 0x53b50e
lea ecx, [esp + 0x30]
call sym.alloc::raw_vec::RawVec_LT_T_C_A_GT_::reserve_for_push::h3cac5eaa7bff534a
mov edx, dword [esp + 0x38]
mov eax, dword [esp + 0x30]
mov esi, dword [esp + 0x80]
mov ebx, dword [esp + 0x50]
mov ecx, edx
inc edx
shl ecx, 4
mov dword [eax + ecx], esi
mov dword [eax + ecx + 4], ebx
mov ebx, dword [esp + 0xa0]
mov dword [eax + ecx + 8], 0xa
mov dword [eax + ecx + 0xc], 0xa
mov ecx, esi
mov dword [esp + 0x38], edx
jmp 0x53b2c0
cmp dword [esp + 0x2d8], 0
je 0x53b63c
mov eax, dword [esp + 0x2d4]
mov ecx, dword [esp + 0x130]
mov edx, dword [esp + 0x2d0]
mov edi, dword [esp + 0x4c]
mov ebx, dword [esp + 0xa0]
and ecx, eax
mov dword [esp + 8], eax
mov eax, edx
movdqu xmm0, xmmword [edx + ecx]
pmovmskb edx, xmm0
test edx, edx
jne 0x53b5bc
mov dword [esp + 0x10], eax
mov eax, dword [esp + 8]
mov esi, 0x10
nop dword [eax]
mov edx, dword [esp + 0x10]
add ecx, esi
add esi, 0x10
and ecx, eax
movdqu xmm0, xmmword [edx + ecx]
pmovmskb edx, xmm0
test edx, edx
je 0x53b5a0
mov eax, dword [esp + 0x10]
tzcnt edx, edx
add edx, ecx
and edx, dword [esp + 8]
movzx ecx, byte [eax + edx]
test cl, cl
mov byte [esp + 0x10], cl
js 0x53b5e6
movdqa xmm0, xmmword [eax]
pmovmskb edx, xmm0
tzcnt edx, edx
movzx ecx, byte [eax + edx]
mov byte [esp + 0x10], cl
lea esi, [edx - 0x10]
mov ecx, dword [esp + 0xc]
and esi, dword [esp + 8]
mov byte [eax + edx], cl
shl edx, 4
mov byte [esi + eax + 0x10], cl
movzx ecx, byte [esp + 0x10]
mov esi, eax
sub esi, edx
neg edx
and cl, 1
movzx ecx, cl
sub dword [esp + 0x2d8], ecx
mov ecx, dword [esp + 4]
mov dword [eax + edx - 0x10], ecx
mov dword [esi - 0xc], 0xa
mov dword [esi - 8], 0xa
mov dword [esi - 4], 0
inc dword [esp + 0x2dc]
jmp 0x53b4e7
lea ecx, [esp + 0x2d0]
lea edx, [esp + 0x2e0]
call sym.hashbrown::raw::RawTable_LT_T_C_A_GT_::reserve_rehash::h6d4edd2b89c229e9
jmp 0x53b55a
mov edx, dword [esp + 0x38]
mov ecx, dword [esp + 0x30]
mov eax, dword [esp + 0x34]
mov esi, edx
mov dword [esp + 0x298], eax
mov dword [esp + 0x14c], ecx
shl esi, 4
add esi, ecx
test edx, edx
je 0x53be72
mov eax, dword [esp + 0x14c]
mov dword [esp + 0x2b0], esi
jmp 0x53b6ba
cmp dword [esp + 0x118], 0
je 0x53b6ab
push dword [esp + 0x70]
push 0
push dword [0x5da100]
call sub.kernel32.dll_HeapFree
mov eax, dword [esp + 0xb0]
cmp eax, esi
je 0x53bea1
mov edx, dword [eax + 4]
lea ecx, [eax + 0x10]
mov dword [esp + 0xb0], ecx
test edx, edx
mov dword [esp + 0x70], edx
je 0x53be6b
mov ecx, dword [eax]
mov edx, dword [eax + 8]
cmp dword [esp + 0x2dc], 0
mov dword [esp + 0x68], ecx
mov dword [esp + 0x118], edx
je 0x53b870
mov ecx, dword [esp + 0x2e0]
mov edx, dword [esp + 0x2e4]
mov esi, dword [eax + 0xc]
push esi
push dword [esp + 0x74]
push dword [esp + 0x2f4]
push dword [esp + 0x2f4]
call sym.core::hash::BuildHasher::hash_one::h3941b82d0083a1b5
mov edx, esi
add esp, 0x10
mov esi, eax
mov ecx, dword [esp + 0x2d0]
mov edi, dword [esp + 0x2d4]
lea ebx, [edx + edx]
mov dword [esp + 0xc], 0
mov dword [esp + 0x50], edx
shr esi, 0x19
mov dword [esp + 0x80], ebx
movd xmm0, esi
punpcklbw xmm0, xmm0
pshuflw xmm0, xmm0, 0
lea esi, [ecx - 0x10]
mov dword [esp + 0x130], ecx
mov dword [esp + 4], edi
pshufd xmm0, xmm0, 0
mov dword [esp + 8], esi
movdqa xmmword [esp + 0x260], xmm0
and eax, edi
movdqu xmm1, xmmword [ecx + eax]
mov dword [esp + 0x10], eax
pcmpeqb xmm0, xmm1
movdqa xmmword [esp + 0xa0], xmm1
pmovmskb edi, xmm0
nop word cs:[eax + eax]
nop dword [eax + eax]
mov esi, edi
test di, di
je 0x53b7f0
tzcnt ebx, esi
mov eax, dword [esp + 8]
lea edi, [esi - 1]
add ebx, dword [esp + 0x10]
and edi, esi
and ebx, dword [esp + 4]
mov ecx, ebx
shl ecx, 4
sub eax, ecx
cmp dword [eax + 8], edx
jne 0x53b7a0
push dword [esp + 0x80]
push dword [eax]
push dword [esp + 0x78]
call sub.msvcrt.dll_memcmp
mov edx, dword [esp + 0x5c]
add esp, 0xc
test eax, eax
jne 0x53b7a0
jmp 0x53b840
movdqa xmm1, xmmword [esp + 0xa0]
pcmpeqd xmm0, xmm0
pcmpeqb xmm1, xmm0
pmovmskb eax, xmm1
test eax, eax
jne 0x53b840
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0xc]
mov edi, dword [esp + 4]
movdqa xmm0, xmmword [esp + 0x260]
lea eax, [eax + ecx + 0x10]
add ecx, 0x10
mov dword [esp + 0xc], ecx
mov ecx, dword [esp + 0x130]
jmp 0x53b775
mov ecx, dword [esp + 0x130]
shl ebx, 4
mov eax, 0
mov edi, dword [esp + 0x4c]
sub ecx, ebx
test si, si
cmove ecx, eax
add ecx, 0xfffffff0
test si, si
mov esi, dword [esp + 0x2b0]
cmove ecx, eax
jmp 0x53b872
xor ecx, ecx
lea eax, [ecx + 0xc]
test ecx, ecx
mov edx, 0x5bcaac
cmove eax, edx
cmp dword [eax], 1
jg 0x53b690
imul ebx, dword [esp + 0x68], 0x548
xor eax, eax
lea ecx, [edi + ebx]
lea edx, [edi + ebx + 0x1c]
mov dword [esp + 0x120], ecx
cmp word [edx + eax*2], 0
je 0x53b8c0
inc eax
cmp eax, 0x101
jne 0x53b8a0
mov eax, 0x101
jmp 0x53b8cb
cmp eax, 0x102
jae 0x53d52e
lea ecx, [esp + 0xc0]
push eax
call sym.alloc::string::String::from_utf16::h6b2cf6af31835b56
add esp, 4
mov eax, dword [esp + 0xc0]
test eax, eax
je 0x53b690
mov ecx, dword [esp + 0xc4]
mov esi, dword [esp + 0xc8]
mov edx, dword [esp + 0x18c]
mov dword [esp + 0x150], ebx
mov dword [esp + 0x68], ecx
mov ecx, dword [esp + 0x188]
push esi
mov dword [esp + 0xc], eax
push eax
push dword [esp + 0x19c]
push dword [esp + 0x19c]
call sym.core::hash::BuildHasher::hash_one::h937699b85088a4b7
mov edx, esi
add esp, 0x10
mov ecx, eax
mov esi, dword [esp + 0x178]
mov edi, dword [esp + 0x17c]
mov dword [esp + 0xa0], 0
mov dword [esp + 0x130], eax
shr ecx, 0x19
movd xmm0, ecx
mov dword [esp + 0x29c], ecx
punpcklbw xmm0, xmm0
pshuflw xmm0, xmm0, 0
lea ecx, [esi - 0x80]
mov dword [esp + 0xc], esi
mov dword [esp + 0x50], edi
pshufd xmm0, xmm0, 0
mov dword [esp + 4], ecx
mov ecx, eax
movdqa xmmword [esp + 0x260], xmm0
and ecx, edi
movdqu xmm1, xmmword [esi + ecx]
mov dword [esp + 0x10], ecx
pcmpeqb xmm0, xmm1
movdqa xmmword [esp + 0x80], xmm1
pmovmskb esi, xmm0
nop word cs:[eax + eax]
nop dword [eax]
test si, si
je 0x53ba00
mov eax, esi
tzcnt ebx, eax
lea esi, [eax - 1]
add ebx, dword [esp + 0x10]
and esi, eax
mov eax, dword [esp + 4]
and ebx, edi
mov ecx, ebx
shl ecx, 7
sub eax, ecx
cmp dword [eax + 8], edx
jne 0x53b9b0
push edx
push dword [esp + 0xc]
push dword [eax]
mov edi, edx
call sub.msvcrt.dll_memcmp
mov edx, edi
mov edi, dword [esp + 0x5c]
add esp, 0xc
test eax, eax
jne 0x53b9b0
jmp 0x53ba50
movdqa xmm1, xmmword [esp + 0x80]
pcmpeqd xmm0, xmm0
mov ebx, dword [esp + 0x130]
pcmpeqb xmm1, xmm0
pmovmskb eax, xmm1
test eax, eax
jne 0x53bbaa
mov eax, dword [esp + 0xa0]
mov ecx, dword [esp + 0x10]
mov esi, dword [esp + 0xc]
movdqa xmm0, xmmword [esp + 0x260]
lea ecx, [ecx + eax + 0x10]
add eax, 0x10
mov dword [esp + 0xa0], eax
jmp 0x53b987
mov eax, dword [esp + 0xc]
neg ebx
mov edi, dword [esp + 0x150]
shl ebx, 7
mov edx, dword [eax + ebx - 0x68]
mov ecx, dword [eax + ebx - 0x64]
mov dword [eax + ebx - 0x60], edx
mov edx, dword [esp + 0x4c]
mov dword [eax + ebx - 0x5c], ecx
mov esi, dword [edx + edi + 0x504]
mov ecx, dword [edx + edi + 0x500]
mov dword [eax + ebx - 0x68], ecx
mov dword [eax + ebx - 0x64], esi
mov esi, dword [eax + ebx - 0x54]
mov ecx, dword [eax + ebx - 0x58]
mov dword [eax + ebx - 0x4c], esi
mov dword [eax + ebx - 0x50], ecx
mov esi, 0xffffffff
movsd xmm0, qword [edx + edi + 0x4b8]
movsd qword [eax + ebx - 0x58], xmm0
movsd xmm0, qword [eax + ebx - 0x48]
movsd qword [eax + ebx - 0x40], xmm0
mov ecx, dword [edx + edi + 0x4c0]
add ecx, dword [edx + edi + 0x4c8]
mov dword [esp + 0x10], ecx
mov ecx, dword [edx + edi + 0x4c4]
adc ecx, dword [edx + edi + 0x4cc]
cmovb ecx, esi
mov esi, dword [esp + 0x10]
mov dword [eax + ebx - 0x44], ecx
mov ecx, 0xffffffff
cmovb esi, ecx
mov dword [eax + ebx - 0x48], esi
mov esi, 0xffffffff
movsd xmm0, qword [eax + ebx - 0x38]
movsd qword [eax + ebx - 0x30], xmm0
mov ecx, dword [edx + edi + 0x508]
add ecx, dword [edx + edi + 0x510]
mov dword [esp + 0x10], ecx
mov ecx, dword [edx + edi + 0x50c]
adc ecx, dword [edx + edi + 0x514]
cmovb ecx, esi
mov esi, dword [esp + 0x10]
mov dword [eax + ebx - 0x34], ecx
mov ecx, 0xffffffff
cmovb esi, ecx
cmp dword [esp + 0x68], 0
mov dword [eax + ebx - 0x38], esi
movsd xmm0, qword [eax + ebx - 0x28]
movsd qword [eax + ebx - 0x20], xmm0
movsd xmm0, qword [edx + edi + 0x4d8]
movsd qword [eax + ebx - 0x28], xmm0
movsd xmm0, qword [eax + ebx - 0x18]
movsd qword [eax + ebx - 0x10], xmm0
movq xmm0, qword [edx + edi + 0x520]
movq qword [eax + ebx - 0x18], xmm0
mov byte [eax + ebx - 2], 1
je 0x53bb8c
push dword [esp + 8]
push 0
push dword [0x5da100]
call sub.kernel32.dll_HeapFree
cmp dword [esp + 0x118], 0
mov edi, dword [esp + 0x4c]
mov esi, dword [esp + 0x2b0]
jne 0x53b69a
jmp 0x53b6ab
cmp dword [esp + 0x180], 0
mov esi, dword [esp + 0x4c]
je 0x53be4f
mov ecx, dword [esp + 0x150]
mov eax, dword [esi + ecx + 0x4c0]
mov edi, dword [esi + ecx + 0x4c4]
add eax, dword [esi + ecx + 0x4c8]
adc edi, dword [esi + ecx + 0x4cc]
mov dword [esp + 0x10], eax
mov eax, 0xffffffff
cmovb edi, eax
mov eax, dword [esp + 0x10]
mov dword [esp + 0x80], edi
mov edi, 0xffffffff
cmovb eax, edi
mov edi, dword [esi + ecx + 0x50c]
mov dword [esp + 0x10], eax
mov eax, dword [esi + ecx + 0x508]
add eax, dword [esi + ecx + 0x510]
adc edi, dword [esi + ecx + 0x514]
mov dword [esp + 4], eax
mov eax, 0xffffffff
cmovb edi, eax
mov eax, dword [esp + 4]
mov dword [esp + 0xa0], edi
mov edi, 0xffffffff
cmovb eax, edi
mov dword [esp + 4], eax
mov eax, dword [esp + 0x120]
mov edi, dword [eax]
mov eax, dword [eax + 4]
mov dword [esp + 0x280], eax
mov eax, dword [esi + ecx + 0x504]
mov dword [esp + 0x288], edi
mov dword [esp + 0x284], eax
mov eax, dword [esi + ecx + 0x500]
mov dword [esp + 0x27c], eax
mov eax, dword [esi + ecx + 0x4b8]
mov dword [esp + 0x290], eax
mov eax, dword [esi + ecx + 0x4bc]
mov dword [esp + 0x28c], eax
mov eax, dword [esi + ecx + 0x4dc]
mov dword [esp + 0x120], eax
mov eax, dword [esi + ecx + 0x4d8]
mov dword [esp + 0x294], eax
mov eax, dword [esi + ecx + 0x524]
mov dword [esp + 0xc], eax
mov eax, dword [esi + ecx + 0x520]
mov dword [esp + 0x260], eax
mov eax, dword [esp + 0x17c]
and ebx, eax
mov ecx, ebx
mov ebx, dword [esp + 0x178]
mov edi, ecx
movdqu xmm0, xmmword [ebx + ecx]
pmovmskb ecx, xmm0
test ecx, ecx
jne 0x53bd04
mov esi, 0x10
nop
add edi, esi
add esi, 0x10
and edi, eax
movdqu xmm0, xmmword [ebx + edi]
pmovmskb ecx, xmm0
test ecx, ecx
je 0x53bcf0
tzcnt esi, ecx
mov dword [esp + 0x50], edx
add esi, edi
and esi, eax
movzx ecx, byte [ebx + esi]
test cl, cl
js 0x53bd28
movdqa xmm0, xmmword [ebx]
pmovmskb ecx, xmm0
tzcnt esi, ecx
movzx ecx, byte [ebx + esi]
lea edx, [esi - 0x10]
and cl, 1
movd xmm0, dword [esp + 0x27c]
movd xmm3, dword [esp + 0x284]
movd xmm1, dword [esp + 0x290]
movd xmm4, dword [esp + 0x28c]
movd xmm2, dword [esp + 0x10]
movd xmm5, dword [esp + 0x80]
movd xmm6, dword [esp + 4]
movd xmm7, dword [esp + 0xa0]
and edx, eax
mov eax, dword [esp + 0x29c]
punpckldq xmm0, xmm3
punpckldq xmm1, xmm4
movd xmm3, dword [esp + 0x294]
movd xmm4, dword [esp + 0x260]
punpckldq xmm2, xmm5
punpckldq xmm6, xmm7
mov byte [ebx + esi], al
mov byte [edx + ebx + 0x10], al
mov edx, dword [esp + 8]
movzx eax, cl
shl esi, 7
pshufd xmm0, xmm0, 0x44
pshufd xmm1, xmm1, 0x44
pshufd xmm2, xmm2, 0x44
sub dword [esp + 0x180], eax
mov eax, ebx
sub eax, esi
neg esi
mov dword [ebx + esi - 0x80], edx
mov esi, dword [esp + 0x68]
mov edx, dword [esp + 0x50]
mov dword [eax - 0x7c], esi
mov dword [eax - 0x78], edx
mov esi, dword [esp + 0x280]
mov edx, dword [esp + 0x288]
mov dword [eax - 0x6c], esi
mov dword [eax - 0x70], edx
movdqu xmmword [eax - 0x68], xmm0
movdqu xmmword [eax - 0x58], xmm1
movd xmm0, dword [esp + 0x120]
movd xmm1, dword [esp + 0xc]
movdqu xmmword [eax - 0x48], xmm2
pshufd xmm2, xmm6, 0x44
movdqu xmmword [eax - 0x38], xmm2
punpckldq xmm3, xmm0
punpckldq xmm4, xmm1
pshufd xmm0, xmm3, 0x44
pshufd xmm1, xmm4, 0x44
movdqu xmmword [eax - 0x28], xmm0
movdqu xmmword [eax - 0x18], xmm1
mov dword [eax - 8], 0
mov word [eax - 4], 0
mov byte [eax - 2], 1
inc dword [esp + 0x184]
jmp 0x53bb8c
mov edi, edx
lea ecx, [esp + 0x178]
lea edx, [esp + 0x188]
call sym.hashbrown::raw::RawTable_LT_T_C_A_GT_::reserve_rehash::he759f3bc067c9e3b
mov edx, edi
jmp 0x53bbbc
mov ecx, dword [esp + 0xb0]
sub esi, ecx
je 0x53bea1
shr esi, 4
add ecx, 8
jmp 0x53be86
add ecx, 0x10
dec esi
je 0x53bea1
cmp dword [ecx], 0
je 0x53be80
push dword [ecx - 4]
push 0
push dword [0x5da100]
mov edi, ecx
call sub.kernel32.dll_HeapFree
mov ecx, edi
jmp 0x53be80
cmp dword [esp + 0x298], 0
je 0x53bebf
push dword [esp + 0x14c]
push 0
push dword [0x5da100]
call sub.kernel32.dll_HeapFree
push dword [esp + 0x94]
call sub.iphlpapi.dll_FreeMibTable
mov ecx, dword [esp + 0x2d4]
test ecx, ecx
je 0x53bfb1
mov edx, dword [esp + 0x2dc]
test edx, edx
je 0x53bf8c
mov esi, dword [esp + 0x2d0]
mov dword [esp + 4], ecx
movdqa xmm0, xmmword [esi]
lea edi, [esi + 0x10]
mov dword [esp + 8], esi
pmovmskb eax, xmm0
not eax
jmp 0x53bf16
test edx, edx
mov eax, ebx
je 0x53bf82
test ax, ax
je 0x53bf30
lea ebx, [eax - 1]
and ebx, eax
jmp 0x53bf54
movdqa xmm0, xmmword [edi]
add esi, 0xffffff00
add edi, 0x10
pmovmskb eax, xmm0
cmp ax, 0xffff
je 0x53bf30
mov ecx, 0xfffffffe
sub ecx, eax
not eax
mov ebx, eax
and ebx, ecx
tzcnt ecx, eax
mov eax, esi
dec edx
shl ecx, 4
sub eax, ecx
cmp dword [eax - 0xc], 0
je 0x53bf10
add eax, 0xfffffff0
push dword [eax]
push 0
push dword [0x5da100]
mov dword [esp + 0x1c], edx
call sub.kernel32.dll_HeapFree
mov edx, dword [esp + 0x10]
jmp 0x53bf10
mov ecx, dword [esp + 4]
mov edx, dword [esp + 8]
jmp 0x53bf93
mov edx, dword [esp + 0x2d0]
mov eax, ecx
shl eax, 4
add ecx, eax
cmp ecx, 0xffffffdf
je 0x53bfb1
sub edx, eax
push dword [edx - 0x14]
push 0
push dword [0x5da100]
call sub.kernel32.dll_HeapFree
mov esi, dword [esp + 0x178]
mov edi, dword [esp + 0x184]
pcmpeqd xmm1, xmm1
movdqa xmm0, xmmword [esi]
lea ebx, [esi + 0x10]
pmovmskb ecx, xmm0
not ecx
test edi, edi
je 0x53c0f3
test cx, cx
je 0x53bff0
lea edx, [ecx - 1]
and edx, ecx
jmp 0x53c014
movdqa xmm0, xmmword [ebx]
add esi, 0xfffff800
add ebx, 0x10
pmovmskb ecx, xmm0
cmp cx, 0xffff
je 0x53bff0
mov eax, 0xfffffffe
sub eax, ecx
not ecx
mov edx, ecx
and edx, eax
tzcnt ecx, ecx
mov eax, esi
dec edi
shl ecx, 7
sub eax, ecx
mov ecx, edx
cmp byte [eax - 2], 0
jne 0x53bfd0
mov ecx, dword [esp + 0x178]
mov dword [esp + 4], edx
mov dword [esp + 0x70], edi
mov edx, ecx
mov dword [esp + 0x10], ecx
sub edx, eax
sar edx, 7
lea edi, [edx - 0x10]
and edi, dword [esp + 0x17c]
movdqu xmm0, xmmword [ecx + edi]
mov dword [esp + 0x50], edi
pcmpeqb xmm0, xmm1
psllw xmm0, 7
pmovmskb ecx, xmm0
test ecx, ecx
je 0x53c06f
bsr cx, cx
xor ecx, 0xf
jmp 0x53c073
mov cx, 0x10
mov edi, dword [esp + 0x10]
mov byte [esp + 8], pe_nt_image_headers32
movdqu xmm0, xmmword [edi + edx]
pcmpeqb xmm0, xmm1
pmovmskb edi, xmm0
or edi, 0x10000
tzcnt edi, edi
add ecx, edi
cmp cx, 0xf
ja 0x53c0a7
inc dword [esp + 0x180]
mov byte [esp + 8], 0xff
mov edi, dword [esp + 0x10]
movzx ecx, byte [esp + 8]
mov byte [edi + edx], cl
mov edx, dword [esp + 0x50]
mov byte [edx + edi + 0x10], cl
dec dword [esp + 0x184]
mov edx, dword [esp + 4]
mov edi, dword [esp + 0x70]
cmp dword [eax - 0x7c], 0
mov ecx, edx
je 0x53bfd0
push dword [eax - 0x80]
push 0
push dword [0x5da100]
call sub.kernel32.dll_HeapFree
mov ecx, dword [esp + 4]
pcmpeqd xmm1, xmm1
jmp 0x53bfd0
xor edi, edi
mov ebx, 4
mov dword [esp + 0xb4], 0x3c00
mov dword [esp + 0xfc], 0
dec ebx
je 0x53c3c6
push dword [esp + 0xb4]
push edi
call sub.msvcrt.dll_realloc
add esp, 8
test eax, eax
je 0x53c17c
mov esi, eax
lea eax, [esp + 0xb4]
push eax
push esi
push 0
push 0xe
push 0
call sub.iphlpapi.dll_GetAdaptersAddresses
cmp eax, 0x6f
mov edi, esi
mov dword [esp + 0xfc], eax
je 0x53c110
test eax, eax
jne 0x53c3c4
mov dword [esp + 0xc4], esi
mov dword [esp + 0xc8], esi
xor esi, esi
mov dword [esp + 0xc0], 0
test esi, esi
jne 0x53c43b
jmp 0x53c1f0
movzx eax, byte [0x5da16c]
mov eax, dword [0x5da100]
test eax, eax
jne 0x53c19e
call sub.kernel32.dll_GetProcessHeap
test eax, eax
je 0x53d581
mov dword [0x5da100], eax
push 0x32
push 0
push eax
call sub.kernel32.dll_HeapAlloc
test eax, eax
je 0x53d581
mov esi, eax
push 0x32
push 0x5bd3c4
push eax
call sym._memcpy
add esp, 0xc
push edi
call sub.msvcrt.dll_free
add esp, 4
mov dword [esp + 0xc0], esi
mov dword [esp + 0xc4], 0x32
mov dword [esp + 0xc8], 0x32
test esi, esi
jne 0x53c43b
movq xmm0, qword [esp + 0xc4]
movq qword [esp + 0x30], xmm0
nop
lea ecx, [esp + 0x2d0]
lea edx, [esp + 0x30]
call sym.__ZN112__LT_sysinfo..network_helper_win..InterfaceAddressIterator_u20_as_u20_core..iter..traits..iterator..Iterator_GT_4next17
mov eax, dword [esp + 0x2d0]
test eax, eax
mov dword [esp + 8], eax
je 0x53c3b3
mov eax, dword [esp + 0x2d4]
cmp dword [esp + 0x184], 0
mov dword [esp + 0xc], eax
je 0x53c392
mov esi, dword [esp + 0x2d8]
mov ecx, dword [esp + 0x188]
mov edx, dword [esp + 0x18c]
push esi
push dword [esp + 0xc]
push dword [esp + 0x19c]
push dword [esp + 0x19c]
call sym.core::hash::BuildHasher::hash_one::h937699b85088a4b7
add esp, 0x10
mov edx, eax
mov ecx, dword [esp + 0x178]
shr eax, 0x19
mov edi, dword [esp + 0x17c]
mov dword [esp + 0x80], 0
mov dword [esp + 0x70], esi
movd xmm0, eax
punpcklbw xmm0, xmm0
pshuflw xmm0, xmm0, 0
pshufd xmm0, xmm0, 0
lea eax, [ecx - 0x80]
mov dword [esp + 0xa0], ecx
mov dword [esp + 0x10], edi
mov dword [esp + 4], eax
movdqa xmmword [esp + 0x130], xmm0
and edx, edi
movdqu xmm1, xmmword [ecx + edx]
pcmpeqb xmm0, xmm1
movdqa xmmword [esp + 0x50], xmm1
pmovmskb edi, xmm0
test di, di
je 0x53c320
mov eax, edi
tzcnt ebx, eax
lea edi, [eax - 1]
add ebx, edx
and edi, eax
mov eax, dword [esp + 4]
and ebx, dword [esp + 0x10]
mov ecx, ebx
shl ecx, 7
sub eax, ecx
cmp esi, dword [eax + 8]
jne 0x53c2d0
push esi
push dword [eax]
push dword [esp + 0x10]
mov esi, edx
call sub.msvcrt.dll_memcmp
mov edx, esi
mov esi, dword [esp + 0x7c]
add esp, 0xc
test eax, eax
jne 0x53c2d0
jmp 0x53c370
movdqa xmm1, xmmword [esp + 0x50]
pcmpeqd xmm0, xmm0
pcmpeqb xmm1, xmm0
pmovmskb eax, xmm1
test eax, eax
jne 0x53c392
mov eax, dword [esp + 0x80]
mov ecx, dword [esp + 0xa0]
mov edi, dword [esp + 0x10]
movdqa xmm0, xmmword [esp + 0x130]
lea edx, [edx + eax + 0x10]
add eax, 0x10
mov dword [esp + 0x80], eax
jmp 0x53c2bb
lea ecx, [esp + 0x2dc]
mov edx, dword [esp + 0xa0]
neg ebx
movzx eax, word [ecx + 4]
shl ebx, 7
mov word [edx + ebx - 4], ax
mov eax, dword [ecx]
mov dword [edx + ebx - 8], eax
cmp dword [esp + 0xc], 0
je 0x53c200
push dword [esp + 8]
push 0
push dword [0x5da100]
call sub.kernel32.dll_HeapFree
jmp 0x53c200
push dword [esp + 0x30]
call sub.msvcrt.dll_free
add esp, 4
jmp 0x53c453
mov edi, esi
lea eax, [esp + 0xfc]
lea ebx, [esp + 0x30]
mov dword [esp + 0x2d0], 0x5bd420
mov dword [esp + 0x2d4], 1
mov dword [esp + 0x2e0], 0
mov dword [esp + 0x30], eax
mov dword [esp + 0x2d8], ebx
mov dword [esp + 0x34], sym.core::fmt::num::imp::__LT_impl_u20_core..fmt..Display_u20_for_u20_u32_GT_::fmt::ha05222cc52361d66
mov dword [esp + 0x2dc], 1
lea ecx, [esp + 0xc0]
lea edx, [esp + 0x2d0]
call dbg.format_inner
push edi
call sub.msvcrt.dll_free
add esp, 4
mov esi, dword [esp + 0xc0]
test esi, esi
je 0x53c1f0
cmp dword [esp + 0xc4], 0
je 0x53c453
push esi
push 0
push dword [0x5da100]
call sub.kernel32.dll_HeapFree
mov esi, dword [esp + 0x2c]
movzx edx, word [esi + 8]
cmp dl, 2
je 0x53c475
movzx eax, byte [esi + 0xa]
shl eax, 0x10
or edx, eax
lea ecx, [esp + 0x158]
call sym.__ZN79__LT_sysinfo..windows..system..System_u20_as_u20_sysinfo..traits..SystemExt_GT_27refresh_processes_specifics17h723a4ffa9
cmp byte [esi + 2], 0
je 0x53c4ec
call sub.kernel32.dll_GetLogicalDrives
test eax, eax
mov dword [esp + 0xfc], eax
je 0x53c56a
lea eax, [esp + 0xfc]
mov dword [esp + 0x30], 8
mov dword [esp + 0x34], 0
mov dword [esp + 0x38], 0
mov dword [esp + 0xc0], eax
mov dword [esp + 0xc4], 0
mov dword [esp + 0xc8], 0x20
call sym.std::sys::common::thread_local::os_local::Key_LT_T_GT_::get::h9a8ba225ee42ef50
test eax, eax
je 0x53d508
mov eax, dword [eax]
test eax, eax
je 0x53c578
add eax, 0x8c
jmp 0x53c57d
cmp byte [esi + 3], 0
je 0x53c6fc
mov eax, dword [esp + 0x24c]
test eax, eax
je 0x53c6fc
mov esi, dword [esp + 0x244]
shl eax, 4
lea ebx, [esp + 0x2d0]
lea edi, [eax + eax*4]
add esi, 0x18
jmp 0x53c52c
add esi, 0x50
add edi, 0xffffffb0
je 0x53c6fc
mov eax, dword [esi]
or eax, dword [esi + 4]
je 0x53c520
mov dword [esp + 0x2d4], 0
mov dword [esp + 0x2d0], 0
push ebx
push 0
push 0
push dword [esi + 0x1c]
call sub.kernel32.dll_GetDiskFreeSpaceExW
test eax, eax
je 0x53c520
movq xmm0, qword [esp + 0x2d0]
movq qword [esi + 8], xmm0
jmp 0x53c520
pxor xmm0, xmm0
mov esi, 8
jmp 0x53c6af
call sym.rayon_core::registry::global_registry::h6cd0683bf2c77f19
mov eax, dword [eax]
lea esi, [esp + 0xc0]
lea ecx, [esp + 0x2d0]
mov edx, 0x20
push esi
push 0x20
push 0
push 1
push dword [eax + 0xf8]
push 0
call sym.rayon::iter::plumbing::bridge_producer_consumer::helper::h6d40ec25ed11e280
add esp, 0x18
mov ecx, dword [esp + 0x2d8]
mov ebx, dword [esp + 0x2d0]
test ecx, ecx
mov dword [esp + 0xc0], ebx
je 0x53c5f0
dec ecx
xor eax, eax
mov edx, ebx
test edx, edx
je 0x53c5df
nop dword [eax + eax]
add eax, dword [edx + 8]
sub ecx, 1
jb 0x53c5df
mov edx, dword [edx + 0xc]
test edx, edx
jne 0x53c5d0
test eax, eax
jne 0x53d403
nop word [eax + eax]
test ebx, ebx
je 0x53c6a5
mov eax, dword [ebx + 0xc]
test eax, eax
je 0x53c606
mov dword [eax + 0x10], 0
mov dword [esp + 0x10], eax
mov eax, dword [ebx + 4]
mov edi, dword [ebx]
mov esi, dword [ebx + 8]
mov dword [esp + 4], eax
push ebx
push 0
push dword [0x5da100]
call sub.kernel32.dll_HeapFree
test edi, edi
je 0x53c699
mov eax, dword [esp + 0x34]
mov ebx, dword [esp + 0x38]
sub eax, ebx
cmp eax, esi
jb 0x53c684
lea eax, [ebx + ebx*4]
mov ecx, esi
shl eax, 4
shl ecx, 4
add eax, dword [esp + 0x30]
lea ecx, [ecx + ecx*4]
push ecx
push edi
push eax
call sym._memcpy
add esp, 0xc
add ebx, esi
mov dword [esp + 0x38], ebx
mov ecx, edi
xor edx, edx
call sym.__LT_alloc..vec..Vec_LT_T_C_A_GT__u20_as_u20_core..ops..drop..Drop_GT_::drop::hb9625c0d2aacfb1c
mov esi, dword [esp + 0x10]
cmp dword [esp + 4], 0
mov ebx, esi
je 0x53c5f0
push edi
push 0
push dword [0x5da100]
call sub.kernel32.dll_HeapFree
mov ebx, esi
jmp 0x53c5f0
lea ecx, [esp + 0x30]
mov edx, ebx
push esi
call sym.alloc::raw_vec::RawVec_LT_T_C_A_GT_::reserve::do_reserve_and_handle::h0feb32fed776bbb4
add esp, 4
mov ebx, dword [esp + 0x38]
jmp 0x53c636
mov edi, dword [esp + 0x10]
test edi, edi
jne 0x53cfa8
mov esi, dword [esp + 0x30]
movq xmm0, qword [esp + 0x34]
movdqa xmmword [esp + 0x10], xmm0
mov ecx, dword [esp + 0x244]
mov edx, dword [esp + 0x24c]
call sym.__LT_alloc..vec..Vec_LT_T_C_A_GT__u20_as_u20_core..ops..drop..Drop_GT_::drop::hb9625c0d2aacfb1c
cmp dword [esp + 0x248], 0
je 0x53c6e6
push dword [esp + 0x244]
push 0
push dword [0x5da100]
call sub.kernel32.dll_HeapFree
movdqa xmm0, xmmword [esp + 0x10]
mov dword [esp + 0x244], esi
movq qword [esp + 0x248], xmm0
mov eax, dword [esp + 0x2c]
cmp byte [eax + 7], 0
je 0x53d157
mov dword [esp + 0x94], 4
mov dword [esp + 0x98], 0
mov dword [esp + 0x9c], 0
mov dword [esp + 0x2a4], 0
nop word cs:[eax + eax]
mov dword [esp + 0x11c], 0
mov dword [esp + 0x154], 0
mov dword [esp + 0x2a8], 0
lea eax, [esp + 0x2a4]
push eax
lea eax, [esp + 0x2ac]
push eax
lea eax, [esp + 0x15c]
push eax
push 0xffffffffffffffff
lea eax, [esp + 0x12c]
push eax
push 2
push 0
push 0
call sub.netapi32.dll_NetUserEnum
cmp eax, 0xea
je 0x53c79d
test eax, eax
jne 0x53cfd7
mov dword [esp + 0x4c], eax
mov eax, dword [esp + 0x154]
test eax, eax
je 0x53cf60
mov ecx, dword [esp + 0x11c]
lea eax, [ecx + eax*4]
mov dword [esp + 0x130], eax
mov eax, dword [esp + 0x4c]
jmp 0x53c7e4
mov eax, dword [esp + 0x4c]
add ecx, 4
cmp ecx, dword [esp + 0x130]
je 0x53cf64
cmp dword [ecx], 0
je 0x53c7d4
mov dword [esp + 0x124], 0
lea eax, [esp + 0x124]
push eax
push 0x17
mov dword [esp + 0x88], ecx
push dword [ecx]
push 0
call sub.netapi32.dll_NetUserGetInfo
test eax, eax
jne 0x53ceef
mov eax, dword [esp + 0x124]
mov edx, dword [eax + 0x10]
lea ecx, [esp + 0xb4]
call sym.sysinfo::windows::sid::Sid::from_psid::h9e273a1a3c08dbf9
mov edx, dword [esp + 0xb4]
test edx, edx
je 0x53ceef
lea ecx, [esp + 0xc0]
mov dword [esp + 0x260], edx
call sym.sysinfo::windows::sid::Sid::account_name::ha9fdea5dd4a9ea11
mov eax, dword [esp + 0xc0]
test eax, eax
je 0x53c871
movq xmm0, qword [esp + 0xc4]
mov dword [esp + 0x68], eax
movdqa xmmword [esp + 0x2b0], xmm0
jmp 0x53c8de
mov eax, dword [esp + 0x80]
mov edx, dword [eax]
mov eax, 0xffffffff
nop
cmp word [edx + eax*2 + 2], 0
lea eax, [eax + 1]
jne 0x53c880
lea ecx, [esp + 0x2d0]
push eax
call sym.alloc::string::String::from_utf16::h6b2cf6af31835b56
add esp, 4
mov edx, dword [esp + 0x2d0]
xor eax, eax
movq xmm0, qword [esp + 0x2d4]
mov ecx, 1
test edx, edx
sete al
cmove edx, ecx
movd xmm1, eax
mov dword [esp + 0x68], edx
pshufd xmm1, xmm1, 0x50
pslld xmm1, 0x1f
psrad xmm1, 0x1f
pandn xmm1, xmm0
movdqa xmmword [esp + 0x2b0], xmm1
movq xmm0, qword [esp + 0xb8]
mov eax, dword [esp + 0x80]
movq qword [esp + 0x2c8], xmm0
mov eax, dword [eax]
mov dword [esp + 0x128], 0
mov dword [esp + 0x12c], 0
mov dword [esp + 0x2ac], 0
lea ecx, [esp + 0x2ac]
push ecx
lea ecx, [esp + 0x130]
push ecx
push 0xffffffffffffffff
lea ecx, [esp + 0x134]
push ecx
push 1
push 0
push eax
push 0x5bcb28
call sub.netapi32.dll_NetUserGetLocalGroups
test eax, eax
mov dword [esp + 0x2c], ebx
je 0x53c9ae
mov dword [esp + 0xfc], 4
mov dword [esp + 0x100], 0
mov dword [esp + 0xa0], 0
mov ecx, esi
mov eax, dword [esp + 0x128]
mov esi, ecx
movsd xmm0, qword [esp + 0xfc]
mov ecx, dword [esp + 0xa0]
mov ebx, dword [esp + 0x2c]
test eax, eax
movsd qword [esp + 0x2d0], xmm0
mov dword [esp + 0x2d8], ecx
je 0x53ce2b
push eax
call sub.netapi32.dll_NetApiBufferFree
jmp 0x53ce2b
mov edi, dword [esp + 0x12c]
mov dword [esp + 0xc], esi
test edi, edi
je 0x53ca1b
xor ebx, ebx
cmp edi, 0xaaaaaab
setb al
jae 0x53d45b
lea ecx, [edi*4]
mov bl, al
lea esi, [ecx + ecx*2]
shl ebx, 2
test esi, esi
js 0x53d454
je 0x53ca22
movzx eax, byte [0x5da16c]
mov eax, dword [0x5da100]
test eax, eax
jne 0x53ca09
call sub.kernel32.dll_GetProcessHeap
test eax, eax
je 0x53d449
mov dword [0x5da100], eax
push esi
push 0
push eax
call sub.kernel32.dll_HeapAlloc
test eax, eax
jne 0x53ca2c
jmp 0x53d449
mov eax, 4
jmp 0x53ca2c
mov eax, ebx
test eax, eax
je 0x53d449
mov ebx, dword [esp + 0x128]
mov dword [esp + 0xfc], eax
mov dword [esp + 0x100], edi
mov dword [esp + 0x104], 0
test ebx, ebx
je 0x53ce03
mov esi, dword [esp + 0x12c]
mov dword [esp + 0xb0], eax
mov dword [esp + 0xa0], 0
cmp edi, esi
jb 0x53cf17
mov ecx, dword [esp + 0xc]
test esi, esi
je 0x53c96e
lea eax, [ebx + esi*4]
mov dword [esp + 0x118], eax
jmp 0x53cae9
mov ecx, dword [esp + 0x34]
mov eax, dword [esp + 0x30]
mov dword [esp + 0x2c], ecx
mov ebx, dword [esp + 0xa0]
mov esi, dword [esp + 0xb0]
test eax, eax
mov ecx, eax
mov edx, 1
cmove ecx, edx
lea edx, [ebx + ebx*2]
mov dword [esi + edx*4], ecx
mov ecx, dword [esp + 0x2c]
cmove ecx, eax
cmovne eax, edi
inc ebx
mov dword [esp + 0xa0], ebx
mov ebx, dword [esp + 0x50]
mov dword [esi + edx*4 + 4], ecx
mov ecx, edi
mov dword [esi + edx*4 + 8], eax
cmp ebx, dword [esp + 0x118]
je 0x53c96e
mov eax, dword [ebx]
mov dword [esp + 0x50], ebx
mov ebx, 0xffffffff
mov dword [esp + 0xc], ecx
lea esi, [eax - 2]
mov dword [esp + 0x10], eax
nop
inc ebx
cmp word [esi + 2], 0
mov edi, esi
lea esi, [esi + 2]
jne 0x53cb00
test ebx, ebx
je 0x53cb50
js 0x53d442
movzx eax, byte [0x5da16c]
mov eax, dword [0x5da100]
test eax, eax
jne 0x53cb39
call sub.kernel32.dll_GetProcessHeap
test eax, eax
je 0x53d434
mov dword [0x5da100], eax
push ebx
push 0
push eax
call sub.kernel32.dll_HeapAlloc
test eax, eax
jne 0x53cb55
jmp 0x53d434
mov eax, 1
add dword [esp + 0x50], 4
xor edi, edi
mov dword [esp + 0x30], eax
mov dword [esp + 0x34], ebx
mov dword [esp + 0x70], eax
mov dword [esp + 0x38], 0
mov dword [esp + 8], esi
cmp esi, dword [esp + 0x10]
jne 0x53cbb0
jmp 0x53ca90
lea esi, [edi + edx]
mov eax, dword [esp + 0x30]
add edi, eax
mov dword [esp + 0x70], eax
push edx
lea eax, [esp + 0x70]
push eax
push edi
call sym._memcpy
add esp, 0xc
mov dword [esp + 0x38], esi
mov edi, esi
mov esi, dword [esp + 8]
cmp esi, dword [esp + 0x10]
je 0x53ca90
mov ecx, dword [esp + 0x10]
movzx ebx, word [ecx]
lea eax, [ecx + 2]
mov dword [esp + 4], eax
mov eax, ebx
and eax, 0xf800
cmp eax, 0xd800
jne 0x53cc70
mov eax, dword [esp + 4]
cmp ebx, 0xdbff
ja 0x53cde0
cmp dword [esp + 8], eax
je 0x53cde0
movzx esi, word [eax]
lea eax, [esi + 0x2000]
movzx eax, ax
cmp eax, 0xfc00
jb 0x53cde0
and ebx, 0x3ff
mov eax, esi
shl esi, 8
add dword [esp + 0x10], 4
shl ebx, 0xa
and eax, 0x3c0
lea ecx, [ebx + 0x10000]
or eax, ebx
mov edx, ecx
shr ecx, 4
shr eax, 6
shr edx, 0x12
and ecx, 0x1ff00
movzx eax, al
or ecx, edx
or esi, eax
mov edx, 4
movd xmm0, ecx
pinsrw xmm0, esi, 1
pand xmm0, xmmword [str._a___]
por xmm0, xmmword [0x560730]
movd dword [esp + 0x6c], xmm0
jmp 0x53cd20
cmp bx, 0x7f
ja 0x53cca0
cmp edi, dword [esp + 0x34]
jne 0x53cccc
lea ecx, [esp + 0x30]
mov edx, edi
call sym.alloc::raw_vec::RawVec_LT_T_C_A_GT_::reserve_for_push::hc46199b9c22e9d7e
mov eax, dword [esp + 0x30]
mov edi, dword [esp + 0x38]
jmp 0x53ccd0
mov eax, ebx
cmp ebx, 0x800
mov dword [esp + 0x6c], 0
jae 0x53ccf3
shr eax, 6
and bl, 0x3f
mov edx, 2
or al, 0xc0
or bl, 0x80
mov byte [esp + 0x6c], al
mov byte [esp + 0x6d], bl
jmp 0x53cd18
mov eax, dword [esp + 0x70]
mov ecx, dword [esp + 4]
mov byte [eax + edi], bl
inc edi
mov dword [esp + 0x70], eax
mov dword [esp + 0x38], edi
mov dword [esp + 0x10], ecx
cmp esi, dword [esp + 0x10]
jne 0x53cbb0
jmp 0x53ca90
shr eax, 0xc
mov edx, 3
or al, 0xe0
mov byte [esp + 0x6c], al
mov eax, ebx
and bl, 0x3f
shr eax, 6
or bl, 0x80
and al, 0x3f
or al, 0x80
mov byte [esp + 0x6d], al
mov byte [esp + 0x6e], bl
mov eax, dword [esp + 4]
mov dword [esp + 0x10], eax
mov ebx, dword [esp + 0x34]
mov eax, ebx
sub eax, edi
cmp eax, edx
jae 0x53cb80
mov esi, edi
add esi, edx
jb 0x53d41f
mov ecx, ebx
add ebx, ebx
mov eax, 8
mov dword [esp + 4], edx
cmp ebx, esi
mov dword [esp + 0x70], ecx
cmovbe ebx, esi
cmp ebx, 9
cmovb ebx, eax
mov edx, ebx
not edx
shr edx, 0x1f
test ecx, ecx
je 0x53cd7a
mov eax, dword [esp + 0x30]
mov dword [esp + 0x2d0], eax
mov eax, 1
mov dword [esp + 0x2d8], ecx
jmp 0x53cd7c
xor eax, eax
mov dword [esp + 0x2d4], eax
lea ecx, [esp + 0xc0]
lea eax, [esp + 0x2d0]
push eax
push ebx
call dbg.finish_grow<alloc::alloc::Global>
add esp, 8
cmp dword [esp + 0xc0], 0
mov ecx, dword [esp + 0xc4]
je 0x53cdc1
mov edx, dword [esp + 4]
cmp ecx, 0x80000001
je 0x53cb83
jmp 0x53d417
mov edx, dword [esp + 4]
mov dword [esp + 0x30], ecx
mov dword [esp + 0x34], ebx
jmp 0x53cb83
cmp dword [esp + 0x34], 0
je 0x53cdf8
push dword [esp + 0x30]
push 0
push dword [0x5da100]
call sub.kernel32.dll_HeapFree
mov edi, dword [esp + 0xc]
xor eax, eax
jmp 0x53ca9c
mov eax, dword [esp + 0x104]
movsd xmm0, qword [esp + 0xfc]
mov ebx, dword [esp + 0x2c]
mov esi, dword [esp + 0xc]
mov dword [esp + 0x2d8], eax
movsd qword [esp + 0x2d0], xmm0
mov ecx, dword [esp + 0x2cc]
mov edx, dword [esp + 0x9c]
mov eax, dword [esp + 0x2c8]
movsd xmm0, qword [esp + 0x2d0]
mov dword [esp + 0xc], esi
mov dword [esp + 0x34], ecx
mov ecx, dword [esp + 0x2d8]
cmp edx, dword [esp + 0x98]
mov dword [esp + 0x30], eax
movsd qword [esp + 0xc0], xmm0
mov dword [esp + 0xc8], ecx
jne 0x53ce88
lea ecx, [esp + 0x94]
call sym.alloc::raw_vec::RawVec_LT_T_C_A_GT_::reserve_for_push::h95cb9d7f6c6545c7
mov edx, dword [esp + 0x9c]
mov eax, dword [esp + 0x94]
mov esi, dword [esp + 0x260]
lea ecx, [edx + edx*4]
movaps xmm0, xmmword [esp + 0x2b0]
inc edx
mov dword [eax + ecx*8], esi
mov esi, dword [esp + 0x30]
mov edi, dword [esp + 0x34]
mov dword [eax + ecx*8 + 4], esi
mov esi, dword [esp + 0x68]
mov dword [eax + ecx*8 + 8], edi
mov dword [eax + ecx*8 + 0xc], esi
movlps qword [eax + ecx*8 + 0x10], xmm0
movq xmm0, qword [esp + 0xc0]
movq qword [eax + ecx*8 + 0x18], xmm0
mov esi, dword [esp + 0xc8]
mov dword [eax + ecx*8 + 0x20], esi
mov esi, dword [esp + 0xc]
mov dword [eax + ecx*8 + 0x24], 0
mov dword [esp + 0x9c], edx
mov eax, dword [esp + 0x124]
mov ecx, dword [esp + 0x80]
test eax, eax
je 0x53c7d0
push eax
call sub.netapi32.dll_NetApiBufferFree
mov ecx, dword [esp + 0x80]
jmp 0x53c7d0
lea ecx, [esp + 0xfc]
xor edx, edx
push esi
call sym.alloc::raw_vec::RawVec_LT_T_C_A_GT_::reserve::do_reserve_and_handle::h160e36750cde7c04
add esp, 4
mov eax, dword [esp + 0xfc]
mov ecx, dword [esp + 0x104]
mov dword [esp + 0xb0], eax
mov dword [esp + 0xa0], ecx
mov ecx, dword [esp + 0xc]
test esi, esi
jne 0x53ca81
jmp 0x53c96e
mov eax, dword [esp + 0x4c]
cmp eax, 0xea
jne 0x53cfd7
mov eax, dword [esp + 0x11c]
test eax, eax
je 0x53c740
push eax
call sub.netapi32.dll_NetApiBufferFree
jmp 0x53c740
push edi
push 0
push dword [0x5da100]
call sub.kernel32.dll_HeapFree
test esi, esi
mov edi, esi
je 0x53c6a5
mov esi, dword [edi + 0xc]
test esi, esi
je 0x53cfb6
mov dword [esi + 0x10], 0
mov ecx, dword [edi]
mov edx, dword [edi + 8]
call sym.__LT_alloc..vec..Vec_LT_T_C_A_GT__u20_as_u20_core..ops..drop..Drop_GT_::drop::hb9625c0d2aacfb1c
cmp dword [edi + 4], 0
je 0x53cf90
push dword [edi]
push 0
push dword [0x5da100]
call sub.kernel32.dll_HeapFree
jmp 0x53cf90
mov eax, dword [esp + 0x11c]
test eax, eax
je 0x53cfe8
push eax
call sub.netapi32.dll_NetApiBufferFree
mov dword [esp + 0xb4], 0
mov dword [esp + 0xfc], 0
lea eax, [esp + 0xfc]
push eax
lea eax, [esp + 0xb8]
push eax
call sub.secur32.dll_LsaEnumerateLogonSessions
test eax, eax
je 0x53d17b
mov esi, dword [esp + 0xfc]
mov eax, dword [esp + 0x9c]
movq xmm0, qword [esp + 0x94]
test esi, esi
mov dword [esp + 0x2d8], eax
movq qword [esp + 0x2d0], xmm0
je 0x53d04c
push esi
call sub.secur32.dll_LsaFreeReturnBuffer
mov eax, dword [esp + 0x258]
test eax, eax
mov dword [esp + 8], eax
je 0x53d11b
mov edi, dword [esp + 0x250]
xor ebx, ebx
mov dword [esp + 4], edi
jmp 0x53d07a
cmp ebx, dword [esp + 8]
je 0x53d11b
lea esi, [ebx + ebx*4]
cmp dword [edi + esi*8 + 4], 0
je 0x53d096
lea eax, [edi + esi*8]
push dword [eax]
push 0
push dword [0x5da100]
call sub.kernel32.dll_HeapFree
cmp dword [edi + esi*8 + 0x10], 0
mov dword [esp + 0x10], ebx
je 0x53d0b4
lea eax, [edi + esi*8 + 0xc]
push dword [eax]
push 0
push dword [0x5da100]
call sub.kernel32.dll_HeapFree
mov ebx, dword [edi + esi*8 + 0x20]
test ebx, ebx
je 0x53d0f0
mov eax, dword [esp + 4]
mov edi, dword [eax + esi*8 + 0x18]
add edi, 4
jmp 0x53d0d6
add edi, 0xc
dec ebx
je 0x53d0f0
cmp dword [edi], 0
je 0x53d0d0
push dword [edi - 4]
push 0
push dword [0x5da100]
call sub.kernel32.dll_HeapFree
jmp 0x53d0d0
mov edi, dword [esp + 4]
mov ebx, dword [esp + 0x10]
lea eax, [edi + esi*8 + 0x18]
inc ebx
cmp dword [eax + 4], 0
je 0x53d070
push dword [eax]
push 0
push dword [0x5da100]
call sub.kernel32.dll_HeapFree
jmp 0x53d070
cmp dword [esp + 0x254], 0
je 0x53d139
push dword [esp + 0x250]
push 0
push dword [0x5da100]
call sub.kernel32.dll_HeapFree
mov eax, dword [esp + 0x2d8]
movsd xmm0, qword [esp + 0x2d0]
lea ecx, [esp + 0x250]
mov dword [ecx + 8], eax
movsd qword [ecx], xmm0
push 0x108
lea eax, [esp + 0x15c]
push eax
push dword [esp + 0x2a8]
call sym._memcpy
add esp, 0xc
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret
mov eax, dword [esp + 0xb4]
mov esi, dword [esp + 0xfc]
test eax, eax
je 0x53d022
lea edi, [esi + eax*8]
lea ebx, [esp + 0x2d0]
mov dword [esp + 0xc], edi
jmp 0x53d1b7
mov eax, dword [esp + 0x30]
test eax, eax
je 0x53d1af
push eax
call sub.secur32.dll_LsaFreeReturnBuffer
cmp esi, edi
je 0x53d01b
mov dword [esp + 0x30], 0
lea eax, [esp + 0x30]
push eax
push esi
add esi, 8
call sub.secur32.dll_LsaGetLogonSessionData
test eax, eax
mov eax, dword [esp + 0x30]
jne 0x53d380
test eax, eax
je 0x53d380
cmp dword [eax + 0x24], 3
je 0x53d1a9
movzx ecx, word [eax + 0xc]
mov edx, dword [eax + 0x2c]
mov dword [esp + 0x50], ecx
mov ecx, dword [eax + 0x10]
mov dword [esp + 0x80], ecx
mov ecx, ebx
call sym.sysinfo::windows::sid::Sid::from_psid::h9e273a1a3c08dbf9
mov eax, dword [esp + 0x2d0]
test eax, eax
mov dword [esp + 0x10], eax
je 0x53d1a1
mov eax, dword [esp + 0x2d4]
mov dword [esp + 8], esi
mov ecx, dword [esp + 0x2d8]
mov esi, dword [esp + 0x94]
xor edi, edi
mov dword [esp + 0x70], eax
mov eax, dword [esp + 0x9c]
mov dword [esp + 0xa0], eax
lea eax, [eax*8]
lea eax, [eax + eax*4]
mov dword [esp + 4], eax
jmp 0x53d253
add edi, 0x28
cmp eax, edi
je 0x53d2ad
cmp dword [esi + edi + 8], ecx
jne 0x53d250
push ecx
push dword [esp + 0x14]
push dword [esi + edi]
mov ebx, esi
mov esi, ecx
call sub.msvcrt.dll_memcmp
mov ecx, esi
mov esi, ebx
add esp, 0xc
test eax, eax
mov eax, dword [esp + 4]
jne 0x53d250
cmp dword [esp + 0x70], 0
mov esi, dword [esp + 8]
mov edi, dword [esp + 0xc]
lea ebx, [esp + 0x2d0]
je 0x53d1a1
push dword [esp + 0x10]
push 0
push dword [0x5da100]
call sub.kernel32.dll_HeapFree
jmp 0x53d1a1
mov dword [esp + 4], ecx
mov edx, dword [esp + 0x10]
lea ecx, [esp + 0xc0]
call sym.sysinfo::windows::sid::Sid::account_name::ha9fdea5dd4a9ea11
mov eax, dword [esp + 0xc0]
test eax, eax
je 0x53d38d
movq xmm1, qword [esp + 0xc4]
mov edi, dword [esp + 0xc]
lea ebx, [esp + 0x2d0]
mov dword [esp + 0x50], eax
mov edx, dword [esp + 0xa0]
cmp edx, dword [esp + 0x98]
jne 0x53d324
lea ecx, [esp + 0x94]
movdqa xmmword [esp + 0x80], xmm1
call sym.alloc::raw_vec::RawVec_LT_T_C_A_GT_::reserve_for_push::h95cb9d7f6c6545c7
movdqa xmm1, xmmword [esp + 0x80]
mov esi, dword [esp + 0x94]
mov edx, dword [esp + 0x9c]
mov ecx, dword [esp + 0x10]
lea eax, [edx + edx*4]
inc edx
mov dword [esi + eax*8], ecx
mov ecx, dword [esp + 0x70]
mov dword [esi + eax*8 + 4], ecx
mov ecx, dword [esp + 4]
mov dword [esi + eax*8 + 8], ecx
mov ecx, dword [esp + 0x50]
mov dword [esi + eax*8 + 0xc], ecx
movq qword [esi + eax*8 + 0x10], xmm1
mov dword [esi + eax*8 + 0x18], 4
mov dword [esi + eax*8 + 0x1c], 0
mov dword [esi + eax*8 + 0x20], 0
mov dword [esi + eax*8 + 0x24], 0
mov esi, dword [esp + 8]
mov dword [esp + 0x9c], edx
mov eax, dword [esp + 0x30]
nop dword [eax]
test eax, eax
je 0x53d1af
jmp 0x53d1a9
mov eax, dword [esp + 0x50]
shr eax, 1
mov edx, dword [esp + 0x80]
lea ebx, [esp + 0x2d0]
mov ecx, ebx
push eax
call sym.alloc::string::String::from_utf16::h6b2cf6af31835b56
add esp, 4
mov edx, dword [esp + 0x2d0]
xor eax, eax
movq xmm0, qword [esp + 0x2d4]
mov edi, dword [esp + 0xc]
mov ecx, 1
test edx, edx
sete al
cmove edx, ecx
movd xmm1, eax
mov dword [esp + 0x50], edx
pshufd xmm1, xmm1, 0x50
pslld xmm1, 0x1f
psrad xmm1, 0x1f
pandn xmm1, xmm0
mov edx, dword [esp + 0xa0]
cmp edx, dword [esp + 0x98]
je 0x53d2f8
jmp 0x53d324
lea ecx, [esp + 0x30]
xor edx, edx
push eax
call sym.alloc::raw_vec::RawVec_LT_T_C_A_GT_::reserve::do_reserve_and_handle::h0feb32fed776bbb4
add esp, 4
jmp 0x53c5f0
mov ebx, dword [esp + 0x70]
test ecx, ecx
jne 0x53d426
call sym.alloc::raw_vec::capacity_overflow::h894971bc65aab54c
jmp 0x53d432
mov edx, dword [esp + 0xc8]
call dbg.handle_alloc_error
ud2
mov ecx, 1
mov edx, ebx
call dbg.handle_alloc_error
ud2
call sym.alloc::raw_vec::capacity_overflow::h894971bc65aab54c
ud2
mov ecx, ebx
mov edx, esi
call dbg.handle_alloc_error
ud2
call sym.alloc::raw_vec::capacity_overflow::h894971bc65aab54c
ud2
call sym.alloc::raw_vec::capacity_overflow::h894971bc65aab54c
ud2
mov ecx, 0x5bd4b3
mov edx, 0x14
push 0x5bd530
call dbg.expect_failed
add esp, 4
ud2
jmp 0x53d47d
mov ecx, 2
mov edx, 0x14
call dbg.handle_alloc_error
ud2
mov ecx, 0x3a410
call dbg.alloc_err
ud2
mov ecx, 1
mov edx, 9
call dbg.handle_alloc_error
ud2
mov ecx, 8
mov edx, 0xa0
call dbg.handle_alloc_error
ud2
lea eax, [esp + 0xb4]
mov ecx, 0x5bfdd0
mov edx, 0x46
push 0x5bfe68
push 0x5bd428
push eax
call dbg.unwrap_failed
add esp, 0xc
ud2
lea eax, [esp + 0xb4]
mov ecx, 0x5bfdd0
mov edx, 0x46
push 0x5bfe68
push 0x5bca9c
push eax
call dbg.unwrap_failed
add esp, 0xc
ud2
lea eax, [esp + 0xb4]
mov ecx, 0x5bfdd0
mov edx, 0x46
push 0x5bfe68
push 0x569d14
push eax
call dbg.unwrap_failed
add esp, 0xc
ud2
mov ecx, eax
mov edx, 0x101
push 0x5bcb18
call dbg.slice_end_index_len_fail
add esp, 4
ud2
jmp 0x53d4e2
mov ecx, str.global_key_idle_disappearedkey_used_disappearedC:UsersTEST.cargo_registry_srcindex.crates.io_6f17d22bba15001f_sysinfo_0.29.7_srcwindows_system.rs
mov edx, 0x1b
push 0x5bd540
call dbg.expect_failed
add esp, 4
ud2
mov ecx, 1
mov edx, 0x1e
call dbg.handle_alloc_error
ud2
mov ecx, 1
mov edx, 5
call dbg.handle_alloc_error
ud2
mov ecx, 1
mov edx, 0x32
call dbg.handle_alloc_error
ud2
lea eax, [esp + 0xb4]
mov ecx, 0x5bfdd0
mov edx, 0x46
push 0x5bfe68
push 0x5bcfdc
push eax
call dbg.unwrap_failed
add esp, 0xc
ud2
mov ecx, 4
mov edx, 0x38
call dbg.handle_alloc_error
ud2