Function at 0x14021a070
Capabilities:
Enumerate processes via ntquerysysteminformation
Get system information on windows

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x318
mov ebp, edx
mov rbx, rcx
mov word [rsp + 0x28], bp
mov eax, edx
shr eax, 0x10
mov byte [rsp + 0x2a], al
call sym.std::time::SystemTime::now::h9c37ee1384cc613a
mov dword [rsp + 0x30], eax
mov dword [rsp + 0x34], edx
lea rcx, [rsp + 0x80]
lea rdx, [rsp + 0x30]
mov r8d, 0xd53e8000
mov r9d, 0x19db1de
call sym.std::time::SystemTime::duration_since::h7051b7f59feaa4af
cmp qword [rsp + 0x80], 0
je 0x14021a0d0
xor eax, eax
jmp 0x14021a0d8
mov rax, qword [rsp + 0x88]
mov qword [rsp + 0x68], rax
mov r15d, 0x80000
lea r14, [rsp + 0x2c]
mov r12, qword [0x1403591d8]
jmp 0x14021a126
mov rdx, rdi
mov r15d, 0
test rsi, rsi
je 0x14021a126
lea r15, [rsi + rsi]
mov r8d, 1
mov rcx, rdi
mov rdx, rsi
call sym.__rust_dealloc
mov rdx, rdi
mov rsi, r15
mov edi, 1
test r15, r15
je 0x14021a15d
js 0x14021a3d5
movzx eax, byte [r12]
mov r15d, 1
mov edx, 1
mov rcx, rsi
call sym.__rust_alloc
test rax, rax
je 0x14021a3e0
mov rdi, rax
mov dword [rsp + 0x2c], 0
mov ecx, 5
mov rdx, rdi
mov r8d, esi
mov r9, r14
call sub.ntdll.dll_NtQuerySystemInformation
cmp eax, 0xc0000004
jne 0x14021a1a2
mov r15d, dword [rsp + 0x2c]
test r15d, r15d
je 0x14021a100
add r15d, 0x2800
mov rdx, rdi
test rsi, rsi
jne 0x14021a112
jmp 0x14021a126
movzx eax, byte [r12]
mov ecx, 0xfa0
mov edx, 8
call sym.__rust_alloc
test rax, rax
je 0x14021a3eb
mov qword [rsp + 0x50], 0x1f4
mov qword [rsp + 0x58], rax
mov qword [rsp + 0x60], 0
xor r15d, r15d
lea r14, [rsp + 0x50]
xor r12d, r12d
jmp 0x14021a20f
lea rax, [rdi + r12]
mov rcx, qword [rsp + 0x58]
mov qword [rcx + r15*8], rax
inc r15
mov qword [rsp + 0x60], r15
mov eax, dword [rax]
add r12, rax
test rax, rax
je 0x14021a220
cmp r15, qword [rsp + 0x50]
jne 0x14021a1f0
mov rcx, r14
call sym.alloc::raw_vec::RawVec_T_A_::grow_one::h177a31e9ef7e387e
jmp 0x14021a1f0
lea r14, [rbx + 0xd8]
mov qword [rsp + 0x70], r14
test bpl, bpl
je 0x14021a247
mov rcx, rbx
xor edx, edx
xor r8d, r8d
call sym._ZN7sysinfo7windows3cpu11CpusWrapper14init_if_needed17hbf20b421885db1ceE.llvm.10911428419873877971
mov rax, qword [rbx + 0x80]
jmp 0x14021a249
xor eax, eax
mov qword [rsp + 0x78], rax
mov rax, qword [rsp + 0x60]
mov qword [rsp + 0x90], rax
movups xmm0, xmmword [rsp + 0x50]
movaps xmmword [rsp + 0x80], xmm0
mov qword [rsp + 0x30], 0
mov qword [rsp + 0x38], 8
mov qword [rsp + 0x40], 0
lea rax, [rsp + 0x70]
mov qword [rsp + 0x98], rax
lea rax, [rsp + 0x28]
mov qword [rsp + 0xa0], rax
lea rax, [rsp + 0x78]
mov qword [rsp + 0xa8], rax
lea rax, [rsp + 0x68]
mov qword [rsp + 0xb0], rax
lea rcx, [rsp + 0x30]
lea rdx, [rsp + 0x80]
call fcn.14021c270
mov rax, qword [rsp + 0x30]
mov r13, qword [rsp + 0x38]
mov rcx, qword [rsp + 0x40]
imul rbp, rcx, 0x148
add rbp, r13
mov qword [rsp + 0x30], r13
mov qword [rsp + 0x38], r13
mov qword [rsp + 0x40], rax
mov qword [rsp + 0x48], rbp
test rcx, rcx
je 0x14021a398
add r13, 0x148
lea r15, [rsp + 0x80]
lea r12, [rsp + 0x1d0]
jmp 0x14021a333
add r13, 0x148
add rbx, 0x148
cmp rbx, rbp
je 0x14021a390
mov rax, qword [r13 - 0x148]
cmp rax, 2
je 0x14021a393
lea rbx, [r13 - 0x148]
mov qword [rsp + 0x1d0], rax
lea rdx, [rbx + 8]
mov r8d, 0x140
lea rcx, [rsp + 0x1d8]
call sym.memcpy
mov r8, qword [rsp + 0x290]
mov rcx, r15
mov rdx, r14
mov r9, r12
call sym.hashbrown::map::HashMap_K_V_S_A_::insert::h334413349d90e930
cmp dword [rsp + 0x80], 2
je 0x14021a320
mov rcx, r15
call fcn.140218300
jmp 0x14021a320
mov r13, rbp
mov qword [rsp + 0x38], r13
lea rcx, [rsp + 0x30]
call sym.__alloc::vec::into_iter::IntoIter_T_A__as_core::ops::drop::Drop_::drop::hb54cf76e83edd4f1
mov rcx, r14
call sym.hashbrown::map::HashMap_K_V_S_A_::retain::h0cfbe9255e3587f6
test rsi, rsi
je 0x14021a3c0
mov r8d, 1
mov rcx, rdi
mov rdx, rsi
call sym.__rust_dealloc
nop
add rsp, 0x318
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
xor r15d, r15d
mov rcx, r15
call sym.alloc::raw_vec::handle_error::hd43ffb3afada7951
mov rdx, rsi
mov rcx, r15
call sym.alloc::raw_vec::handle_error::hd43ffb3afada7951
mov ecx, 8
mov edx, 0xfa0
call sym.alloc::raw_vec::handle_error::hd43ffb3afada7951
ud2