Function at 0x1400c9949
Capabilities:
Enumerate processes via ntquerysysteminformation
Get disk information
Get disk size
Get local ipv4 addresses
Get logon sessions
Get memory capacity
Get system information on windows
List groups for user account
List user accounts

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x908
movdqa xmmword [rsp + 0x8f0], xmm8
movdqa xmmword [rsp + 0x8e0], xmm7
movaps xmmword [rsp + 0x8d0], xmm6
mov rbx, rdx
mov rdi, rcx
cmp byte [rdx + 4], 0
je 0x1400c9a55
xorps xmm6, xmm6
lea rsi, [rsp + 0x230]
movaps xmmword [rsi], xmm6
movaps xmmword [rsi + 0x30], xmm6
movaps xmmword [rsi + 0x20], xmm6
movaps xmmword [rsi + 0x10], xmm6
mov dword [rsi], 0x40
mov rcx, rsi
call sub.KERNEL32.dll_GlobalMemoryStatusEx
mov rax, qword [rsi + 8]
mov qword [rdi + 0xa0], rax
mov rax, qword [rsi + 0x10]
mov qword [rdi + 0xa8], rax
lea rcx, [rsp + 0x380]
movaps xmmword [rcx + 0x50], xmm6
movaps xmmword [rcx + 0x40], xmm6
movaps xmmword [rcx + 0x30], xmm6
movaps xmmword [rcx + 0x20], xmm6
movaps xmmword [rcx + 0x10], xmm6
movaps xmmword [rcx], xmm6
and qword [rcx + 0x60], 0
mov edx, 0x68
call sub.PSAPI.DLL_GetPerformanceInfo
cmp eax, 1
jne 0x1400c9a55
mov rdx, qword [rsp + 0x390]
mov r9, qword [rsp + 0x3a0]
xor r10d, r10d
sub rdx, r9
cmovb rdx, r10
mov rcx, qword [rsp + 0x3d0]
mov rax, rcx
mul rdx
mov r8, rax
mov r11, 0xffffffffffffffff
cmovo r8, r11
mov rdx, qword [rsp + 0x388]
sub rdx, r9
cmovb rdx, r10
mov rax, rcx
mul rdx
cmovo rax, r11
mov qword [rdi + 0xb0], r8
mov qword [rdi + 0xb8], rax
cmp byte [rbx + 0xb], 2
mov qword [rsp + 0x40], rdi
mov qword [rsp + 0x58], rbx
je 0x1400c9e3f
mov bpl, byte [rbx + 0xc]
cmp qword [rdi], 0
jne 0x1400c9d05
lea r8, [rsp + 0x230]
and qword [r8], 0
xor r12d, r12d
xor ecx, ecx
xor edx, edx
call sub.pdh.dll_PdhOpenQueryA
mov edi, eax
test eax, eax
je 0x1400c9a97
jmp 0x1400c9ad0
mov rsi, qword [rsp + 0x230]
lea r14, [rsp + 0x380]
mov rcx, r14
call fcn.1400d076e
mov rcx, r14
call fcn.1400c983e
mov r15, rax
mov rbx, rdx
xorps xmm0, xmm0
movaps xmmword [r14], xmm0
and qword [r14 + 0x10], 0
lea r12, [0x14011ee00]
mov r13, qword [rsp + 0x40]
mov rcx, r13
call fcn.1400c990a
mov qword [r13], r12
and qword [r13 + 0x38], 0
mov rax, qword [rsp + 0x390]
movaps xmm0, xmmword [rsp + 0x380]
movups xmmword [r13 + 8], xmm0
mov qword [r13 + 0x18], rax
mov qword [r13 + 0x20], r15
mov qword [r13 + 0x28], rbx
mov qword [r13 + 0x30], rsi
test edi, edi
jne 0x1400c9cf2
mov ecx, 0x1e
xor edx, edx
call fcn.14003b781
mov rdi, rax
mov rbx, rdx
movups xmm0, xmmword [str.Processor__Total___Idle_Timetot_0Processor____Idle_Time]
movups xmmword [rax], xmm0
movups xmm0, xmmword [0x14011eabe]
movups xmmword [rax + 0xe], xmm0
mov qword [rsp + 0x230], rax
mov qword [rsp + 0x238], rdx
mov qword [rsp + 0x240], 0x1e
mov ecx, 5
xor edx, edx
call fcn.14003b781
mov byte [rsp + 0x68], bpl
mov ebx, ebp
and bl, 1
mov r9, qword [rsp + 0x40]
lea r14, [r9 + 0x110]
lea r8, [r9 + 0x158]
mov byte [rax + 4], 0x30
mov dword [rax], 0x5f746f74
lea rsi, [rsp + 0x380]
mov qword [rsi], rax
mov qword [rsi + 8], rdx
mov qword [rsi + 0x10], 5
lea rcx, [rsp + 0x230]
mov rdx, r9
mov r9, rsi
call fcn.1400cdbda
mov rcx, r14
mov edx, ebx
call fcn.1400cdfb5
mov rbx, rax
mov qword [rsp + 0x48], rdx
xor r13d, r13d
lea rdi, [rsp + 0x70]
mov r15d, 1
cmp rbx, qword [rsp + 0x48]
je 0x1400c9ce5
mov qword [rsp + 0x100], r13
lea rax, [0x14011eaf0]
mov qword [rsp + 0x380], rax
mov eax, 2
mov qword [rsp + 0x388], rax
and qword [rsp + 0x3a0], 0
lea r14, [rsp + 0x100]
mov qword [rsp + 0x230], r14
lea r12, [fcn.14000a0e0]
mov qword [rsp + 0x238], r12
lea rbp, [rsp + 0x230]
mov qword [rsp + 0x390], rbp
mov qword [rsp + 0x398], r15
mov rcx, rdi
mov rdx, rsi
call fcn.1400c40c3
lea rax, [0x14011eb18]
mov qword [rsp + 0x380], rax
mov eax, 2
mov qword [rsp + 0x388], rax
and qword [rsp + 0x3a0], 0
mov qword [rsp + 0xb0], r14
mov qword [rsp + 0xb8], r12
lea rax, [rsp + 0xb0]
mov qword [rsp + 0x390], rax
mov qword [rsp + 0x398], r15
mov rcx, rbp
mov rdx, rsi
call fcn.1400c40c3
inc r13
movups xmm0, xmmword [rsp + 0x230]
movaps xmmword [rsp + 0x380], xmm0
mov rax, qword [rsp + 0x240]
mov qword [rsp + 0x390], rax
lea r8, [rbx + 0x48]
mov rcx, rdi
mov rdx, qword [rsp + 0x40]
mov r9, rsi
call fcn.1400cdbda
add rbx, 0x70
jmp 0x1400c9bd3
mov rax, qword [rsp + 0x40]
mov r12, qword [rax]
mov bpl, byte [rsp + 0x68]
test r12, r12
mov rdi, qword [rsp + 0x40]
mov rbx, qword [rsp + 0x58]
je 0x1400c9e3f
mov rcx, qword [rdi + 0x30]
call sub.pdh.dll_PdhCollectQueryData
cmp qword [rdi + 0x158], 0
je 0x1400c9d43
lea rdx, [rdi + 0x158]
mov rcx, rdi
call fcn.1400cdfd7
test eax, eax
je 0x1400cc2cd
movss xmm1, dword [0x1400e7320]
subss xmm1, xmm0
movss dword [rdi + 0x178], xmm1
lea rcx, [rdi + 0x110]
mov edx, ebp
and dl, 1
call fcn.1400cdfb5
mov rsi, rax
mov rdi, rdx
add rsi, 0x48
movss xmm6, dword [0x1400e7320]
lea rax, [rsi - 0x48]
cmp rax, rdi
je 0x1400c9d9c
cmp qword [rsi], 0
je 0x1400c9d96
mov rcx, qword [rsp + 0x40]
mov rdx, rsi
call fcn.1400cdfd7
test eax, eax
je 0x1400cc2b3
movaps xmm1, xmm6
subss xmm1, xmm0
movss dword [rsi + 0x20], xmm1
add rsi, 0x70
jmp 0x1400c9d66
test bpl, 1
mov rdi, qword [rsp + 0x40]
je 0x1400c9e3f
cmp byte [rdi + 0x198], 0
jne 0x1400c9e3f
mov rsi, qword [rdi + 0x190]
mov rbx, rdi
lea rdi, [rsp + 0x380]
mov rcx, rdi
mov rdx, rsi
call fcn.1400cd20e
mov rbx, qword [rbx + 0x180]
mov rcx, qword [rdi]
mov rdx, qword [rdi + 8]
mov rax, qword [rdi + 0x10]
shl rax, 3
imul r8, rsi, 0x70
xor r9d, r9d
mov r10, rbx
test r8, r8
je 0x1400c9e15
cmp rax, r9
je 0x1400c9e15
mov r11, qword [rcx + r9]
mov qword [r10 + 0x60], r11
add r10, 0x70
add r9, 8
add r8, 0xffffffffffffff90
jmp 0x1400c9df5
call fcn.1400ceedb
test rsi, rsi
je 0x1400c9e25
mov rax, qword [rbx + 0x60]
jmp 0x1400c9e27
xor eax, eax
mov rdi, qword [rsp + 0x40]
mov rbx, qword [rsp + 0x58]
mov qword [rdi + 0x170], rax
mov byte [rdi + 0x198], 1
cmp byte [rbx + 6], 0
je 0x1400ca146
lea rsi, [rsp + 0x230]
mov rcx, rsi
call fcn.1400cd5c1
cmp dword [rsi], 2
je 0x1400ca090
mov rax, qword [rsp + 0x260]
lea rdx, [rsp + 0x380]
mov qword [rdx + 0x30], rax
movups xmm0, xmmword [rsp + 0x230]
movups xmm1, xmmword [rsp + 0x240]
movups xmm2, xmmword [rsp + 0x250]
movaps xmmword [rdx + 0x20], xmm2
movaps xmmword [rdx + 0x10], xmm1
movaps xmmword [rdx], xmm0
lea rsi, [rsp + 0x70]
mov rcx, rsi
call fcn.1400cd5ed
cmp qword [rsi], 2
je 0x1400ca090
mov rax, qword [rsp + 0xa0]
lea rdx, [rsp + 0x380]
mov qword [rdx + 0x30], rax
movups xmm0, xmmword [rsp + 0x70]
movups xmm1, xmmword [rsp + 0x80]
movups xmm2, xmmword [rsp + 0x90]
movaps xmmword [rdx + 0x20], xmm2
movaps xmmword [rdx + 0x10], xmm1
movaps xmmword [rdx], xmm0
lea rsi, [rsp + 0xb0]
mov rcx, rsi
call fcn.1400cd683
cmp qword [rsi], 2
je 0x1400ca090
mov rax, qword [rsp + 0xe0]
lea rdx, [rsp + 0x380]
mov qword [rdx + 0x30], rax
movups xmm0, xmmword [rsp + 0xb0]
movups xmm1, xmmword [rsp + 0xc0]
movups xmm2, xmmword [rsp + 0xd0]
movaps xmmword [rdx + 0x20], xmm2
movaps xmmword [rdx + 0x10], xmm1
movaps xmmword [rdx], xmm0
lea rsi, [rsp + 0x100]
mov rcx, rsi
call fcn.1400cd745
cmp qword [rsi], 2
je 0x1400ca090
mov rax, qword [rsp + 0x130]
lea rdx, [rsp + 0x380]
mov qword [rdx + 0x30], rax
movups xmm0, xmmword [rsp + 0x100]
movups xmm1, xmmword [rsp + 0x110]
movups xmm2, xmmword [rsp + 0x120]
movaps xmmword [rdx + 0x20], xmm2
movaps xmmword [rdx + 0x10], xmm1
movaps xmmword [rdx], xmm0
lea rsi, [rsp + 0x168]
mov rcx, rsi
call fcn.1400cd83f
cmp qword [rsi], 2
je 0x1400ca090
mov rax, qword [rsp + 0x198]
lea rdx, [rsp + 0x380]
mov qword [rdx + 0x30], rax
movups xmm0, xmmword [rsp + 0x168]
movups xmm1, xmmword [rsp + 0x178]
movups xmm2, xmmword [rsp + 0x188]
movaps xmmword [rdx + 0x20], xmm2
movaps xmmword [rdx + 0x10], xmm1
movaps xmmword [rdx], xmm0
lea rsi, [rsp + 0x1a0]
mov rcx, rsi
call fcn.1400cd8d8
mov rax, qword [rsi]
cmp rax, 2
je 0x1400ca090
movups xmm0, xmmword [rsp + 0x1a8]
movups xmm1, xmmword [rsp + 0x1b8]
movups xmm2, xmmword [rsp + 0x1c8]
lea rdx, [rsp + 0x1d8]
movups xmmword [rdx + 0x28], xmm2
movups xmmword [rdx + 0x18], xmm1
movups xmmword [rdx + 8], xmm0
mov qword [rdx], rax
lea rcx, [rsp + 0xb0]
mov r8b, 1
call fcn.1400cd9e7
mov rax, qword [rsp + 0x208]
mov qword [rsp + 0x260], rax
movups xmm0, xmmword [rsp + 0x1d8]
movups xmm1, xmmword [rsp + 0x1e8]
movups xmm2, xmmword [rsp + 0x1f8]
movaps xmmword [rsp + 0x250], xmm2
movaps xmmword [rsp + 0x240], xmm1
movaps xmmword [rsp + 0x230], xmm0
mov esi, dword [rsp + 0xb4]
cmp esi, 2
jne 0x1400cc14e
lea rcx, [rsp + 0x230]
call fcn.1400c8109
mov ebx, 8
xor esi, esi
lea rcx, [rdi + 0xc8]
call fcn.1400c98c5
mov qword [rdi + 0xc8], rbx
mov qword [rdi + 0xd0], rsi
mov qword [rdi + 0xd8], rsi
mov rsi, qword [rsp + 0x58]
cmp byte [rsi + 1], 0
je 0x1400ca41a
lea rcx, [rsp + 0x100]
and qword [rcx], 0
call sub.IPHLPAPI.DLL_GetIfTable2
test eax, eax
mov rdi, qword [rsp + 0x40]
jne 0x1400cb011
lea rax, [rdi + 0x70]
mov qword [rsp + 0x140], rax
mov rax, qword [rdi + 0x70]
mov rcx, qword [rdi + 0x78]
add rcx, rax
inc rcx
movdqa xmm0, xmmword [rax]
pmovmskb edx, xmm0
not edx
mov r8, qword [rdi + 0x88]
lea rsi, [rsp + 0x380]
mov qword [rsi], rax
add rax, 0x10
mov qword [rsi + 8], rax
mov qword [rsi + 0x10], rcx
mov word [rsi + 0x18], dx
mov qword [rsi + 0x20], r8
mov rcx, rsi
call fcn.1400c87b3
test rax, rax
je 0x1400ca54d
mov byte [rdx + 0x6e], 0
jmp 0x1400ca12f
cmp byte [rbx + 5], 0
je 0x1400ca0b8
mov rax, qword [rsp + 0x40]
mov rsi, qword [rax + 0xc8]
lea r14, [rsp + 0x238]
imul rbp, qword [rax + 0xd8], 0x60
lea rbx, [rsp + 0x70]
lea rdi, [rsp + 0xb0]
lea r15, [rsp + 0x380]
lea r12, [rsp + 0x100]
lea r13, [rsp + 0x230]
test rbp, rbp
je 0x1400ca0b8
mov rax, qword [rsi]
cmp rax, 2
jne 0x1400ca31f
mov rcx, rbx
call fcn.1400cd5c1
cmp dword [rsp + 0x70], 2
je 0x1400ca2be
mov rax, qword [rsp + 0xa0]
mov qword [rsp + 0x3b0], rax
movups xmm0, xmmword [rsp + 0x70]
movups xmm1, xmmword [rsp + 0x80]
movups xmm2, xmmword [rsp + 0x90]
movaps xmmword [rsp + 0x3a0], xmm2
movaps xmmword [rsp + 0x390], xmm1
movaps xmmword [rsp + 0x380], xmm0
mov rcx, rdi
mov rdx, r15
call fcn.1400cd5ed
cmp qword [rsp + 0xb0], 2
je 0x1400ca2be
mov rax, qword [rsp + 0xe0]
mov qword [rsp + 0x3b0], rax
movups xmm0, xmmword [rsp + 0xb0]
movups xmm1, xmmword [rsp + 0xc0]
movups xmm2, xmmword [rsp + 0xd0]
movaps xmmword [rsp + 0x3a0], xmm2
movaps xmmword [rsp + 0x390], xmm1
movaps xmmword [rsp + 0x380], xmm0
mov rcx, r12
mov rdx, r15
call fcn.1400cd683
cmp qword [rsp + 0x100], 2
je 0x1400ca2be
mov rax, qword [rsp + 0x130]
mov qword [rsp + 0x3b0], rax
movups xmm0, xmmword [rsp + 0x100]
movups xmm1, xmmword [rsp + 0x110]
movups xmm2, xmmword [rsp + 0x120]
movaps xmmword [rsp + 0x3a0], xmm2
movaps xmmword [rsp + 0x390], xmm1
movaps xmmword [rsp + 0x380], xmm0
mov rcx, rbx
mov rdx, r15
call fcn.1400cd745
cmp qword [rsp + 0x70], 2
jne 0x1400ca3cd
mov qword [rsp + 0xb0], 2
mov rcx, rsi
call fcn.1400c80ff
mov rax, qword [rsp + 0xe0]
mov qword [rsi + 0x30], rax
movups xmm0, xmmword [rsp + 0xb0]
movups xmm1, xmmword [rsp + 0xc0]
movups xmm2, xmmword [rsp + 0xd0]
movups xmmword [rsi + 0x20], xmm2
movups xmmword [rsi + 0x10], xmm1
movups xmmword [rsi], xmm0
mov rax, qword [rsi]
mov qword [rsi], 2
cmp rax, 2
jne 0x1400ca326
mov qword [rsp + 0x380], 2
jmp 0x1400ca353
mov qword [rsi], 2
mov qword [rsp + 0x230], rax
movups xmm0, xmmword [rsi + 8]
movups xmm1, xmmword [rsi + 0x18]
movups xmm2, xmmword [rsi + 0x28]
movups xmmword [r14 + 0x20], xmm2
movups xmmword [r14 + 0x10], xmm1
movups xmmword [r14], xmm0
mov rcx, r15
mov rdx, r13
call fcn.1400cd8d8
mov rcx, rsi
call fcn.1400c80ff
mov rax, qword [rsp + 0x3b0]
mov qword [rsi + 0x30], rax
movups xmm0, xmmword [rsp + 0x380]
movups xmm1, xmmword [rsp + 0x390]
movups xmm2, xmmword [rsp + 0x3a0]
movups xmmword [rsi + 0x20], xmm2
movups xmmword [rsi + 0x10], xmm1
movups xmmword [rsi], xmm0
cmp dword [rsi], 2
je 0x1400ca3c0
mov rcx, r15
mov rdx, rsi
xor r8d, r8d
call fcn.1400cd9e7
cmp dword [rsp + 0x384], 2
je 0x1400ca3c0
movss xmm0, dword [rsp + 0x380]
movss dword [rsi + 0x58], xmm0
ucomiss xmm0, dword [rsi + 0x5c]
jbe 0x1400ca3c0
movss dword [rsi + 0x5c], xmm0
add rsi, 0x60
add rbp, 0xffffffffffffffa0
jmp 0x1400ca191
mov rax, qword [rsp + 0xa0]
mov qword [rsp + 0x3b0], rax
movups xmm0, xmmword [rsp + 0x70]
movups xmm1, xmmword [rsp + 0x80]
movups xmm2, xmmword [rsp + 0x90]
movaps xmmword [rsp + 0x3a0], xmm2
movaps xmmword [rsp + 0x390], xmm1
movaps xmmword [rsp + 0x380], xmm0
mov rcx, rdi
mov rdx, r15
call fcn.1400cd83f
jmp 0x1400ca2ca
cmp byte [rsi], 0
mov rdi, qword [rsp + 0x40]
je 0x1400cb011
lea rsi, [rsp + 0x380]
mov r8d, 0x548
mov rcx, rsi
xor edx, edx
call sub.msvcrt.dll_memset
mov rax, qword [rdi + 0x70]
mov rcx, qword [rdi + 0x78]
add rcx, rax
inc rcx
movdqa xmm0, xmmword [rax]
pmovmskb edx, xmm0
not edx
mov r8, qword [rdi + 0x88]
lea rdi, [rsp + 0x230]
mov qword [rdi], rax
add rax, 0x10
mov qword [rdi + 8], rax
mov qword [rdi + 0x10], rcx
mov word [rdi + 0x18], dx
mov qword [rdi + 0x20], r8
mov r14, 0xffffffffffffffff
mov rcx, rdi
call fcn.1400c87b3
test rax, rax
je 0x1400cb007
mov rbx, rdx
mov rax, qword [rdx]
mov qword [rsp + 0x380], rax
and dword [rsp + 0x388], 0
mov rcx, rsi
call sub.IPHLPAPI.DLL_GetIfEntry2
test eax, eax
jne 0x1400ca485
mov rax, qword [rbx + 8]
mov rcx, qword [rbx + 0x18]
mov qword [rbx + 0x10], rax
mov rax, qword [rsp + 0x880]
mov qword [rbx + 8], rax
mov qword [rbx + 0x20], rcx
mov rax, qword [rsp + 0x838]
mov qword [rbx + 0x18], rax
mov rax, qword [rbx + 0x28]
mov qword [rbx + 0x30], rax
mov rax, qword [rsp + 0x840]
add rax, qword [rsp + 0x848]
cmovb rax, r14
mov qword [rbx + 0x28], rax
mov rax, qword [rbx + 0x38]
mov qword [rbx + 0x40], rax
mov rax, qword [rsp + 0x888]
add rax, qword [rsp + 0x890]
cmovb rax, r14
mov qword [rbx + 0x38], rax
mov rax, qword [rbx + 0x48]
mov qword [rbx + 0x50], rax
mov rax, qword [rsp + 0x858]
mov qword [rbx + 0x48], rax
mov rax, qword [rbx + 0x58]
mov qword [rbx + 0x60], rax
mov rax, qword [rsp + 0x8a0]
mov qword [rbx + 0x58], rax
jmp 0x1400ca485
lea rsi, [rsp + 0x380]
mov rcx, rsi
call fcn.1400d076e
mov rcx, rsi
call fcn.1400c983e
lea rcx, [0x14011ee00]
mov qword [rsi], rcx
lea rcx, [rsp + 0x3a0]
pxor xmm0, xmm0
movdqu xmmword [rcx - 0x18], xmm0
and qword [rcx - 8], 0
mov qword [rcx], rax
mov qword [rcx + 8], rdx
lea rax, [rsp + 0xb0]
mov qword [rax], 8
movdqu xmmword [rax + 8], xmm0
mov r15, qword [rsp + 0x100]
mov r14d, dword [r15]
add r15, 8
lea rbx, [rsp + 0x230]
pcmpeqd xmm6, xmm6
xor r12d, r12d
mov qword [rsp + 0xe8], r15
mov qword [rsp + 0xf8], r14
cmp r12, r14
je 0x1400ca8b4
mov rsi, r12
inc r12
imul rdi, rsi, 0x548
cmp qword [r15 + rdi + 0x4a8], 0
jne 0x1400ca5fa
cmp qword [r15 + rdi + 0x4b0], 0
je 0x1400ca5ce
cmp dword [r15 + rdi + 0x48c], 2
je 0x1400ca5ce
cmp dword [r15 + rdi + 0x420], 0
je 0x1400ca5ce
mov ecx, 0x14
mov edx, 2
call fcn.1400c431b
mov r13, rax
mov qword [rsp + 0x68], r12
mov eax, dword [r15 + rdi + 0x10]
movzx ecx, byte [r15 + rdi + 0x14]
movzx edx, byte [r15 + rdi + 0x15]
movzx r8d, byte [r15 + rdi + 0x16]
movzx r9d, byte [r15 + rdi + 0x17]
movzx r10d, byte [r15 + rdi + 0x18]
movzx r11d, byte [r15 + rdi + 0x19]
movzx ebp, byte [r15 + rdi + 0x1a]
movzx edi, byte [r15 + rdi + 0x1b]
mov dword [r13], eax
mov word [r13 + 4], cx
mov word [r13 + 6], dx
mov word [r13 + 8], r8w
mov word [r13 + 0xa], r9w
mov word [r13 + 0xc], r10w
mov word [r13 + 0xe], r11w
mov word [r13 + 0x10], bp
mov word [r13 + 0x12], di
mov ecx, 0xa
xor edx, edx
call fcn.1400c3fc2
mov rbp, rax
mov qword [rsp + 0x60], rdx
mov eax, dword [r13 + 0x10]
mov dword [rbp + 0x10], eax
movups xmm0, xmmword [r13]
movups xmmword [rbp], xmm0
mov rcx, qword [rsp + 0x3a0]
mov rdx, qword [rsp + 0x3a8]
mov r9d, 0xa
mov r8, rbp
call fcn.1400c7b1e
mov r14, qword [rsp + 0x380]
mov r12, qword [rsp + 0x388]
mov rdi, r12
and rdi, rax
mov qword [rsp + 0x138], rax
shr rax, 0x39
movd xmm0, eax
punpcklbw xmm0, xmm0
pshuflw xmm0, xmm0, 0
pshufd xmm7, xmm0, 0
xor eax, eax
mov qword [rsp + 0x48], rax
movdqu xmm8, xmmword [r14 + rdi]
movdqa xmm0, xmm8
pcmpeqb xmm0, xmm7
pmovmskb eax, xmm0
mov word [rsp + 0x230], ax
mov rcx, rbx
call fcn.1400c4e4e
test rax, rax
je 0x1400ca759
add rdx, rdi
and rdx, r12
shl rdx, 5
mov r15, r14
sub r15, rdx
mov rcx, qword [r15 - 0x20]
mov rdx, qword [r15 - 0x10]
mov r9d, 0xa
mov r8, rbp
call fcn.1400c7c4a
test al, al
je 0x1400ca720
jmp 0x1400ca785
pcmpeqb xmm8, xmm6
pmovmskb eax, xmm8
test eax, eax
jne 0x1400ca826
mov rax, qword [rsp + 0x48]
add rdi, rax
add rdi, 0x10
add rax, 0x10
mov qword [rsp + 0x48], rax
and rdi, r12
jmp 0x1400ca705
mov rcx, rbp
mov rdx, qword [rsp + 0x60]
call fcn.1400e0ba2
mov eax, dword [r15 - 8]
inc eax
mov dword [r15 - 8], eax
cmp eax, 1
mov r15, qword [rsp + 0xe8]
mov r14, qword [rsp + 0xf8]
mov r12, qword [rsp + 0x68]
jle 0x1400ca7c8
mov edx, 0xa
mov rcx, r13
call fcn.1400e0ba2
jmp 0x1400ca5ce
mov rdx, qword [rsp + 0xc0]
cmp rdx, qword [rsp + 0xb8]
jne 0x1400ca7ef
lea rcx, [rsp + 0xb0]
call fcn.1400c7e34
mov rdx, qword [rsp + 0xc0]
mov rax, qword [rsp + 0xb0]
mov rcx, rdx
shl rcx, 5
mov dword [rax + rcx], esi
mov qword [rax + rcx + 8], r13
mov r8d, 0xa
mov qword [rax + rcx + 0x10], r8
mov qword [rax + rcx + 0x18], r8
inc rdx
mov qword [rsp + 0xc0], rdx
jmp 0x1400ca5ce
cmp qword [rsp + 0x390], 0
jne 0x1400ca856
lea rcx, [rsp + 0x380]
lea rdx, [rsp + 0x3a0]
call fcn.1400c8820
mov r14, qword [rsp + 0x380]
mov r12, qword [rsp + 0x388]
mov rcx, r14
mov rdx, r12
mov r8, qword [rsp + 0x138]
call fcn.1400c87d3
mov rcx, qword [rsp + 0x380]
shl rax, 5
mov r15, rcx
and dl, 1
movzx edx, dl
sub qword [rsp + 0x390], rdx
sub r15, rax
neg rax
mov qword [rcx + rax - 0x20], rbp
mov rax, qword [rsp + 0x60]
mov qword [r15 - 0x18], rax
mov qword [r15 - 0x10], 0xa
and dword [r15 - 8], 0
inc qword [rsp + 0x398]
jmp 0x1400ca792
mov r14, qword [rsp + 0xb0]
mov rax, qword [rsp + 0xb8]
mov rcx, qword [rsp + 0xc0]
shl rcx, 5
add rcx, r14
mov qword [rsp + 0x230], r14
mov qword [rsp + 0x238], rax
mov qword [rsp + 0x240], r14
mov qword [rsp + 0xf8], rcx
mov qword [rsp + 0x248], rcx
mov rdi, qword [rsp + 0x40]
lea rax, [rdi + 0x90]
mov qword [rsp + 0x220], rax
pcmpeqd xmm6, xmm6
cmp r14, qword [rsp + 0xf8]
je 0x1400cae24
mov rax, r14
add r14, 0x20
mov qword [rsp + 0x240], r14
mov r13, qword [rax + 8]
test r13, r13
je 0x1400cae24
mov r12, qword [rax + 0x10]
mov edx, dword [rax]
cmp qword [rsp + 0x398], 0
mov qword [rsp + 0x68], r14
mov qword [rsp + 0x48], r12
je 0x1400caa5e
mov qword [rsp + 0x60], rdx
mov rsi, qword [rax + 0x18]
mov rcx, qword [rsp + 0x3a0]
mov rdx, qword [rsp + 0x3a8]
mov r8, r13
mov r9, rsi
call fcn.1400c7b1e
mov rbp, qword [rsp + 0x380]
mov rdi, qword [rsp + 0x388]
mov r12, rdi
and r12, rax
shr rax, 0x39
movd xmm0, eax
punpcklbw xmm0, xmm0
pshuflw xmm0, xmm0, 0
pshufd xmm7, xmm0, 0
xor r15d, r15d
movdqu xmm8, xmmword [rbp + r12]
movdqa xmm0, xmm8
pcmpeqb xmm0, xmm7
pmovmskb eax, xmm0
mov word [rsp + 0x70], ax
lea rcx, [rsp + 0x70]
call fcn.1400c4e4e
mov rbx, rax
test rax, rax
je 0x1400caa09
mov r14, rdx
add r14, r12
and r14, rdi
mov rax, r14
shl rax, 5
mov rcx, rbp
sub rcx, rax
mov r8, qword [rcx - 0x20]
mov r9, qword [rcx - 0x10]
mov rcx, r13
mov rdx, rsi
call fcn.1400c7c4a
test al, al
je 0x1400ca9c8
jmp 0x1400caa27
pcmpeqb xmm8, xmm6
pmovmskb eax, xmm8
test eax, eax
jne 0x1400caa27
add r12, r15
add r12, 0x10
add r15, 0x10
and r12, rdi
jmp 0x1400ca9af
shl r14, 5
sub rbp, r14
test rbx, rbx
cmove rbp, rbx
add rbp, 0xffffffffffffffe0
test rbx, rbx
cmove rbp, rbx
mov rdi, qword [rsp + 0x40]
mov r15, qword [rsp + 0xe8]
mov r14, qword [rsp + 0x68]
mov r12, qword [rsp + 0x48]
mov rdx, qword [rsp + 0x60]
jmp 0x1400caa60
xor ebp, ebp
lea rax, [rbp + 0x18]
test rbp, rbp
lea rcx, [0x14011e7f8]
cmove rax, rcx
cmp dword [rax], 1
jg 0x1400cac9e
imul rsi, rdx, 0x548
lea rbp, [r15 + rsi]
lea rcx, [r15 + rsi]
add rcx, 0x1c
xor r8d, r8d
cmp r8, 0x101
je 0x1400caaa7
cmp word [rcx + r8*2], 0
je 0x1400caaad
inc r8
jmp 0x1400caa91
mov r8d, 0x101
mov edx, 0x101
lea r9, str._home_affix_.cargo_registry_src_index.crates.io_6f17d22bba15001f_sysinfo_0.29.11_src_windows_network.rs
call fcn.1400c3d8b
mov r8, rdx
lea rcx, [rsp + 0x70]
mov rdx, rax
call fcn.140007620
mov rbx, qword [rsp + 0x70]
test rbx, rbx
je 0x1400cac96
mov qword [rsp + 0x150], rbp
mov rax, qword [rsp + 0x78]
mov qword [rsp + 0x138], rax
mov rbp, qword [rsp + 0x80]
mov rcx, qword [rdi + 0x90]
mov rdx, qword [rdi + 0x98]
mov r8, rbx
mov r9, rbp
call fcn.1400c7bb4
mov r14, qword [rdi + 0x70]
mov r12, qword [rdi + 0x78]
mov rdi, r12
and rdi, rax
mov qword [rsp + 0x228], rax
shr rax, 0x39
movd xmm0, eax
punpcklbw xmm0, xmm0
pshuflw xmm0, xmm0, 0
pshufd xmm7, xmm0, 0
xor eax, eax
mov qword [rsp + 0x60], rax
movdqu xmm8, xmmword [r14 + rdi]
movdqa xmm0, xmm8
pcmpeqb xmm0, xmm7
pmovmskb eax, xmm0
mov word [rsp + 0x70], ax
lea rcx, [rsp + 0x70]
call fcn.1400c4e4e
test rax, rax
je 0x1400cab9a
add rdx, rdi
and rdx, r12
neg rdx
imul r15, rdx, 0x88
mov rcx, qword [r14 + r15 - 0x88]
mov rdx, qword [r14 + r15 - 0x78]
mov r8, rbx
mov r9, rbp
call fcn.140009800
test al, al
je 0x1400cab5d
jmp 0x1400cabc9
pcmpeqb xmm8, xmm6
pmovmskb eax, xmm8
test eax, eax
jne 0x1400cacae
mov rax, qword [rsp + 0x60]
add rdi, rax
add rdi, 0x10
add rax, 0x10
mov qword [rsp + 0x60], rax
and rdi, r12
jmp 0x1400cab45
add r14, r15
mov rax, qword [r14 - 0x68]
mov rcx, qword [r14 - 0x58]
mov qword [r14 - 0x60], rax
mov r15, qword [rsp + 0xe8]
mov rax, qword [r15 + rsi + 0x500]
mov qword [r14 - 0x68], rax
mov qword [r14 - 0x50], rcx
mov rax, qword [r15 + rsi + 0x4b8]
mov qword [r14 - 0x58], rax
mov rax, qword [r14 - 0x48]
mov qword [r14 - 0x40], rax
mov rax, qword [r15 + rsi + 0x4c0]
add rax, qword [r15 + rsi + 0x4c8]
mov rcx, 0xffffffffffffffff
cmovb rax, rcx
mov qword [r14 - 0x48], rax
mov rax, qword [r14 - 0x38]
mov qword [r14 - 0x30], rax
mov rax, qword [r15 + rsi + 0x508]
add rax, qword [r15 + rsi + 0x510]
cmovb rax, rcx
mov qword [r14 - 0x38], rax
mov rax, qword [r14 - 0x28]
mov qword [r14 - 0x20], rax
mov rax, qword [r15 + rsi + 0x4d8]
mov qword [r14 - 0x28], rax
mov rax, qword [r14 - 0x18]
mov qword [r14 - 0x10], rax
mov rax, qword [r15 + rsi + 0x520]
mov qword [r14 - 0x18], rax
mov byte [r14 - 2], 1
test rbx, rbx
mov rdi, qword [rsp + 0x40]
mov r14, qword [rsp + 0x68]
mov r12, qword [rsp + 0x48]
je 0x1400cac9e
mov rcx, rbx
mov rdx, qword [rsp + 0x138]
call fcn.1400d71d3
jmp 0x1400cac9e
mov r15, qword [rsp + 0xe8]
mov rcx, r13
mov rdx, r12
call fcn.1400e0ba2
jmp 0x1400ca913
mov rax, qword [rsp + 0x40]
cmp qword [rax + 0x80], 0
jne 0x1400cacd2
mov rcx, qword [rsp + 0x140]
mov rdx, qword [rsp + 0x220]
call fcn.1400c8caf
mov r15, qword [rsp + 0xe8]
mov rdi, qword [r15 + rsi + 0x4c0]
add rdi, qword [r15 + rsi + 0x4c8]
mov rax, 0xffffffffffffffff
cmovb rdi, rax
mov rcx, qword [r15 + rsi + 0x4b8]
mov qword [rsp + 0x60], rcx
mov r14, qword [r15 + rsi + 0x508]
add r14, qword [r15 + rsi + 0x510]
cmovb r14, rax
mov rax, qword [rsp + 0x150]
mov rax, qword [rax]
mov qword [rsp + 0x210], rax
mov r12, qword [r15 + rsi + 0x500]
mov rax, qword [r15 + rsi + 0x4d8]
mov qword [rsp + 0x218], rax
mov rax, qword [r15 + rsi + 0x520]
mov qword [rsp + 0x150], rax
mov rsi, qword [rsp + 0x140]
mov rcx, qword [rsi]
mov rdx, qword [rsi + 8]
mov r8, qword [rsp + 0x228]
call fcn.1400c87d3
mov rcx, qword [rsi]
neg rax
and dl, 1
movzx edx, dl
sub qword [rsi + 0x10], rdx
imul rax, rax, 0x88
mov qword [rcx + rax - 0x88], rbx
mov rdx, qword [rsp + 0x138]
mov qword [rcx + rax - 0x80], rdx
mov qword [rcx + rax - 0x78], rbp
mov rdx, qword [rsp + 0x210]
mov qword [rcx + rax - 0x70], rdx
mov qword [rcx + rax - 0x68], r12
mov qword [rcx + rax - 0x60], r12
mov rdx, qword [rsp + 0x60]
mov qword [rcx + rax - 0x58], rdx
mov qword [rcx + rax - 0x50], rdx
mov qword [rcx + rax - 0x48], rdi
mov qword [rcx + rax - 0x40], rdi
mov qword [rcx + rax - 0x38], r14
mov qword [rcx + rax - 0x30], r14
mov rdx, qword [rsp + 0x218]
mov qword [rcx + rax - 0x28], rdx
mov qword [rcx + rax - 0x20], rdx
mov rdx, qword [rsp + 0x150]
mov qword [rcx + rax - 0x18], rdx
mov qword [rcx + rax - 0x10], rdx
and dword [rcx + rax - 8], 0
and word [rcx + rax - 4], 0
mov byte [rcx + rax - 2], 1
inc qword [rsi + 0x18]
mov rdi, qword [rsp + 0x40]
mov r14, qword [rsp + 0x68]
mov r12, qword [rsp + 0x48]
jmp 0x1400cac9e
lea rcx, [rsp + 0x230]
call fcn.1400c8737
mov rcx, qword [rsp + 0x100]
call sub.IPHLPAPI.DLL_FreeMibTable
lea rsi, [rsp + 0x380]
mov rcx, rsi
call fcn.1400c8525
mov rax, qword [rdi + 0x70]
mov rcx, qword [rdi + 0x78]
add rcx, rax
inc rcx
movdqa xmm0, xmmword [rax]
pmovmskb edx, xmm0
not edx
mov r8, qword [rdi + 0x88]
mov qword [rsi], rax
add rax, 0x10
mov qword [rsi + 8], rax
mov qword [rsi + 0x10], rcx
mov word [rsi + 0x18], dx
mov qword [rsi + 0x20], r8
mov edi, 0x88
mov rcx, rsi
call fcn.1400c7a20
test rax, rax
je 0x1400caecc
mov rbx, rax
cmp byte [rax - 2], 0
jne 0x1400cae89
mov rcx, qword [rsp + 0x140]
mov rax, qword [rcx]
sub rax, rbx
cqo
idiv rdi
mov rdx, rax
call fcn.1400c97ca
mov rcx, qword [rbx - 0x88]
mov rdx, qword [rbx - 0x80]
call fcn.1400d71d3
jmp 0x1400cae89
and dword [rsp + 0xb0], 0
lea rbx, [rsp + 0x168]
mov dword [rbx], 0x3c00
mov ebp, 4
xor esi, esi
dec ebp
je 0x1400caf80
mov edx, dword [rsp + 0x168]
mov rcx, rsi
call sub.msvcrt.dll_realloc
test rax, rax
je 0x1400caf3c
mov rdi, rax
mov qword [rsp + 0x20], rbx
xor ecx, ecx
mov edx, 0xe
xor r8d, r8d
mov r9, rax
call sub.IPHLPAPI.DLL_GetAdaptersAddresses
mov dword [rsp + 0xb0], eax
mov rsi, rdi
cmp eax, 0x6f
je 0x1400caee9
test eax, eax
jne 0x1400caf7d
xor ebx, ebx
mov r14, rdi
jmp 0x1400caff3
mov edi, 0x32
mov ecx, 0x32
xor edx, edx
call fcn.14003b781
mov rbx, rax
mov r14, rdx
movups xmm0, xmmword [0x14011ec6a]
movups xmmword [rax + 0x20], xmm0
movups xmm0, xmmword [0x14011ec5a]
movups xmmword [rax + 0x10], xmm0
movdqu xmm0, xmmword [str.failed_to_allocate_memory_for_IP_ADAPTER_ADDRESSESGetAdaptersAddresses___failed_with_code]
movdqu xmmword [rax], xmm0
mov word [rax + 0x30], 0x5345
jmp 0x1400cafeb
mov rsi, rdi
lea rax, [rsp + 0xb0]
mov qword [rsp + 0x70], rax
lea rax, [0x14011eca8]
lea rdx, [rsp + 0x380]
mov qword [rdx], rax
mov eax, 1
mov qword [rdx + 8], rax
and qword [rdx + 0x20], 0
lea rcx, [0x14000d8e0]
mov qword [rsp + 0x78], rcx
lea rcx, [rsp + 0x70]
mov qword [rdx + 0x10], rcx
mov qword [rdx + 0x18], rax
lea rcx, [rsp + 0x230]
call fcn.1400c40c3
mov rbx, qword [rsp + 0x230]
mov r14, qword [rsp + 0x238]
mov rdi, qword [rsp + 0x240]
mov rcx, rsi
call sub.msvcrt.dll_free
test rbx, rbx
je 0x1400cbff5
mov rcx, rbx
mov rdx, r14
call fcn.1400d71d3
mov rdi, qword [rsp + 0x40]
mov rsi, qword [rsp + 0x58]
movzx ebp, word [rsi + 8]
cmp bpl, 2
je 0x1400cb697
movzx eax, byte [rsi + 0xa]
shl eax, 0x10
mov ecx, ebp
or ecx, eax
mov word [rsp + 0x54], cx
shr ecx, 0x10
mov byte [rsp + 0x56], cl
mov edi, 0x80000
mov ecx, 0x80000
xor edx, edx
call fcn.14003b781
lea rbx, [rsp + 0x1a0]
mov qword [rbx], rax
mov qword [rbx + 8], rdx
and qword [rbx + 0x10], 0
lea r14, [rsp + 0x380]
and dword [rsp + 0x380], 0
mov rcx, rbx
mov rdx, rdi
call fcn.1400e0c3e
mov rsi, qword [rsp + 0x1a0]
mov ecx, 5
mov rdx, rsi
mov r8d, edi
mov r9, r14
call sub.ntdll.dll_NtQuerySystemInformation
cmp eax, 0xc0000004
jne 0x1400cb0b0
mov eax, dword [rsp + 0x380]
add rdi, rdi
lea ecx, [rax + 0x2800]
test eax, eax
cmovne rdi, rcx
jmp 0x1400cb063
test eax, eax
jne 0x1400cb168
mov qword [rsp + 0x1b0], rdi
mov ecx, 8
mov edx, 0xfa0
call fcn.1400c23bf
test rax, rax
je 0x1400cc2e2
lea rdi, [rsp + 0x168]
mov qword [rdi], rax
mov qword [rdi + 8], 0x1f4
and qword [rdi + 0x10], 0
xor edx, edx
xor ebx, ebx
cmp rdx, qword [rsp + 0x170]
jne 0x1400cb116
mov rcx, rdi
call fcn.14003744b
mov rax, qword [rsp + 0x168]
mov rdx, qword [rsp + 0x178]
lea rcx, [rsi + rbx]
mov qword [rax + rdx*8], rcx
mov rdx, qword [rsp + 0x178]
inc rdx
mov qword [rsp + 0x178], rdx
mov ecx, dword [rcx]
add rbx, rcx
test rcx, rcx
jne 0x1400cb0f4
mov rdi, qword [rsp + 0x40]
lea rsi, [rdi + 0x40]
mov qword [rsp + 0x158], rsi
test bpl, bpl
je 0x1400cb178
lea rcx, [rdi + 0x110]
xor edx, edx
call fcn.1400cc9a0
mov rax, qword [rdi + 0x190]
jmp 0x1400cb17a
mov rdx, qword [rsp + 0x1a8]
mov rcx, rsi
jmp 0x1400cb688
xor eax, eax
mov qword [rsp + 0xf0], rax
call fcn.1400bcb40
shl rdx, 0x20
mov eax, eax
or rax, rdx
movabs rcx, 0x19db1ded53e8000
cmp rax, rcx
jge 0x1400cb1a3
xor eax, eax
jmp 0x1400cb1ba
movabs rcx, 0xfe624e212ac18000
add rax, rcx
mov ecx, 0x989680
xor edx, edx
div rcx
lea rcx, [rsp + 0x1d8]
mov qword [rcx], rax
mov rbx, qword [rsp + 0x178]
mov qword [rsp + 0x390], rbx
movups xmm0, xmmword [rsp + 0x168]
movaps xmmword [rsp + 0x380], xmm0
mov qword [rsp + 0x100], 8
xorps xmm1, xmm1
movups xmmword [rsp + 0x108], xmm1
lea rax, [rsp + 0x158]
mov qword [rsp + 0x398], rax
lea rax, [rsp + 0x54]
mov qword [rsp + 0x3a0], rax
lea rax, [rsp + 0xf0]
mov qword [rsp + 0x3a8], rax
mov qword [rsp + 0x3b0], rcx
lea rax, [rsp + 0x70]
mov qword [rsp + 0x230], rax
and qword [rsp + 0x238], 0
movaps xmmword [rax], xmm0
and qword [rax + 0x10], 0
mov qword [rsp + 0x240], rbx
mov qword [rsp + 0x248], rbx
cmp qword [rax + 8], rbx
jb 0x1400cc2f3
mov rdi, qword [rsp + 0x70]
mov rcx, rbx
call fcn.1400c7aec
lea rcx, [rsp + 0x398]
mov qword [rsp + 0x38], rcx
mov qword [rsp + 0x30], rbx
mov qword [rsp + 0x28], rdi
mov qword [rsp + 0x20], 1
lea rdi, [rsp + 0xb0]
mov rcx, rdi
mov rdx, rbx
xor r8d, r8d
mov r9, rax
call fcn.1400c5020
lea rcx, [rsp + 0x230]
call fcn.1400c7f9e
mov rcx, qword [rsp + 0x70]
mov rdx, qword [rsp + 0x78]
call fcn.1400ceedb
xor edx, edx
mov rax, qword [rsp + 0xc0]
sub rax, 1
jb 0x1400cb2ed
mov rdi, qword [rdi]
test rdi, rdi
je 0x1400cb2ed
add rdx, qword [rdi + 0x10]
add rdi, 0x18
jmp 0x1400cb2d5
lea rcx, [rsp + 0x100]
call fcn.1400c7ca0
mov rax, qword [rsp + 0xc0]
lea rbx, [rsp + 0x70]
mov qword [rbx + 0x10], rax
movups xmm0, xmmword [rsp + 0xb0]
movaps xmmword [rbx], xmm0
lea rdi, [rsp + 0x100]
lea r14, [rsp + 0x380]
mov rcx, rbx
call fcn.1400c2447
test rax, rax
je 0x1400cb3db
mov rcx, qword [rax + 0x10]
mov qword [rsp + 0x240], rcx
movups xmm0, xmmword [rax]
movaps xmmword [rsp + 0x230], xmm0
mov rcx, rax
call fcn.14002b2da
cmp qword [rsp + 0x230], 0
je 0x1400cb3db
movaps xmm0, xmmword [rsp + 0x230]
movaps xmmword [rsp + 0x380], xmm0
mov r15, qword [rsp + 0x240]
mov qword [rsp + 0x390], r15
mov r12, qword [rsp + 0x380]
mov rcx, rdi
mov rdx, r15
call fcn.1400c7ca0
mov r13, qword [rsp + 0x110]
imul rcx, r13, 0x150
add rcx, qword [rsp + 0x100]
imul r8, r15, 0x150
mov rdx, r12
call sub.msvcrt.dll_memcpy
add r13, r15
mov qword [rsp + 0x110], r13
and qword [rsp + 0x390], 0
mov rcx, r14
call fcn.1400c2045
jmp 0x1400cb326
lea rcx, [rsp + 0x70]
call fcn.1400c24dc
mov rdx, qword [rsp + 0x100]
mov rax, qword [rsp + 0x108]
imul rbx, qword [rsp + 0x110], 0x150
lea rcx, [rdx + rbx]
mov qword [rsp + 0x70], rdx
mov qword [rsp + 0x78], rax
mov qword [rsp + 0x80], rdx
mov qword [rsp + 0x88], rcx
mov rax, qword [rsp + 0x40]
add rax, 0x60
mov qword [rsp + 0x48], rax
lea r13, [rsp + 0x230]
test rbx, rbx
je 0x1400cb5e7
lea r15, [rdx + 0x150]
mov qword [rsp + 0x80], r15
mov rbp, qword [rdx]
cmp rbp, 2
je 0x1400cb5e7
lea r14, [rdx + 0xc8]
mov r12, qword [rdx + 0xc0]
add rdx, 8
mov r8d, 0xb8
lea rcx, [rsp + 0x388]
call sub.msvcrt.dll_memcpy
mov r8d, 0x88
lea rcx, [rsp + 0x448]
mov rdx, r14
call sub.msvcrt.dll_memcpy
mov qword [rsp + 0x380], rbp
mov qword [rsp + 0x440], r12
mov qword [rsp + 0x100], r12
mov rbp, qword [rsp + 0x40]
mov rcx, qword [rbp + 0x60]
mov rdx, qword [rbp + 0x68]
mov r8, r12
call fcn.1400c4dd3
mov r14, rax
mov qword [rsp + 0xb0], rdi
cmp qword [rbp + 0x50], 0
jne 0x1400cb4e1
mov rcx, rsi
mov rdx, qword [rsp + 0x48]
call fcn.1400c948c
lea rax, [rsp + 0xb0]
mov qword [rsp + 0x230], rax
mov qword [rsp + 0x238], rsi
mov rax, qword [rsp + 0x40]
mov rcx, qword [rax + 0x40]
mov rdx, qword [rax + 0x48]
lea rax, [0x1400c9466]
mov qword [rsp + 0x20], rax
mov r8, r14
mov r9, r13
call fcn.1400459b2
test rax, rax
je 0x1400cb586
mov rax, qword [rsp + 0x100]
mov r9, qword [rsp + 0x40]
mov rcx, qword [r9 + 0x40]
movzx r8d, byte [rcx + rdx]
and r8d, 1
sub qword [r9 + 0x50], r8
shr r14, 0x39
lea r8, [rdx - 0x10]
and r8, qword [r9 + 0x48]
mov byte [rcx + rdx], r14b
mov byte [r8 + rcx + 0x10], r14b
inc qword [r9 + 0x58]
neg rdx
imul rdx, rdx, 0x158
add rcx, rdx
add rcx, 0xfffffffffffffeb0
mov qword [rcx - 8], rax
mov r8d, 0x150
lea rdx, [rsp + 0x380]
call sub.msvcrt.dll_memcpy
jmp 0x1400cb5d8
mov rax, qword [rsi]
neg rdx
imul rcx, rdx, 0x158
lea r14, [rax + rcx]
add r14, 0xfffffffffffffeb0
mov r8d, 0x150
mov rcx, r13
mov rdx, r14
call sub.msvcrt.dll_memcpy
mov r8d, 0x150
mov rcx, r14
lea rdx, [rsp + 0x380]
call sub.msvcrt.dll_memcpy
cmp qword [rsp + 0x230], 2
je 0x1400cb5d8
mov rcx, r13
call fcn.1400c1fc2
add rbx, 0xfffffffffffffeb0
mov rdx, r15
jmp 0x1400cb435
lea rcx, [rsp + 0x70]
call fcn.1400c8764
mov r8, qword [rsp + 0x40]
mov rax, qword [r8 + 0x40]
mov rcx, qword [r8 + 0x48]
add rcx, rax
inc rcx
movdqa xmm0, xmmword [rax]
pmovmskb edx, xmm0
not edx
mov r8, qword [r8 + 0x58]
lea rdi, [rsp + 0x380]
mov qword [rdi], rax
add rax, 0x10
mov qword [rdi + 8], rax
mov qword [rdi + 0x10], rcx
mov word [rdi + 0x18], dx
mov qword [rdi + 0x20], r8
mov r14d, 0x158
mov rcx, rdi
call fcn.1400c8416
test rax, rax
je 0x1400cb678
mov rbx, rax
cmp byte [rax - 4], 0
mov byte [rax - 4], 0
jne 0x1400cb637
mov rax, qword [rsi]
sub rax, rbx
cqo
idiv r14
mov rcx, rsi
mov rdx, rax
call fcn.1400c97ca
add rbx, 0xfffffffffffffeb0
mov rcx, rbx
call fcn.1400c1fc2
jmp 0x1400cb637
mov rcx, qword [rsp + 0x1a0]
mov rdx, qword [rsp + 0x1a8]
call fcn.1400d71d3
mov rsi, qword [rsp + 0x58]
mov rdi, qword [rsp + 0x40]
cmp byte [rsi + 2], 0
je 0x1400cb877
call sub.KERNEL32.dll_GetLogicalDrives
mov dword [rsp + 0x168], eax
test eax, eax
je 0x1400cb8f1
mov qword [rsp + 0x100], 8
xorps xmm0, xmm0
movups xmmword [rsp + 0x108], xmm0
lea rax, [rsp + 0x168]
mov qword [rsp + 0x380], rax
movabs rax, 0x2000000000
mov qword [rsp + 0x388], rax
mov ecx, 0x20
call fcn.1400c7aec
lea rcx, [rsp + 0x380]
and dword [rsp + 0x28], 0
mov qword [rsp + 0x38], rcx
mov dword [rsp + 0x30], 0x20
mov qword [rsp + 0x20], 1
lea rsi, [rsp + 0xb0]
mov edx, 0x20
mov rcx, rsi
xor r8d, r8d
mov r9, rax
call fcn.1400c2627
lea r12, [rsp + 0x108]
mov rax, qword [rsp + 0xc0]
xor edx, edx
sub rax, 1
jb 0x1400cb760
mov rsi, qword [rsi]
test rsi, rsi
je 0x1400cb760
add rdx, qword [rsi + 0x10]
add rsi, 0x18
jmp 0x1400cb748
lea rcx, [rsp + 0x100]
call fcn.1400c7c72
mov rax, qword [rsp + 0xc0]
lea rsi, [rsp + 0x70]
mov qword [rsi + 0x10], rax
movups xmm0, xmmword [rsp + 0xb0]
movaps xmmword [rsi], xmm0
lea rdi, [rsp + 0x100]
lea rbx, [rsp + 0x380]
mov rcx, rsi
call fcn.1400c2447
test rax, rax
je 0x1400cb84e
mov rcx, qword [rax + 0x10]
mov qword [rsp + 0x240], rcx
movups xmm0, xmmword [rax]
movaps xmmword [rsp + 0x230], xmm0
mov rcx, rax
call fcn.14002b2da
cmp qword [rsp + 0x230], 0
je 0x1400cb84e
movaps xmm0, xmmword [rsp + 0x230]
movaps xmmword [rsp + 0x380], xmm0
mov r14, qword [rsp + 0x240]
mov qword [rsp + 0x390], r14
mov r15, qword [rsp + 0x380]
mov rcx, rdi
mov rdx, r14
call fcn.1400c7c72
mov r13, qword [rsp + 0x110]
imul rcx, r13, 0x90
add rcx, qword [rsp + 0x100]
imul r8, r14, 0x90
mov rdx, r15
call sub.msvcrt.dll_memcpy
add r13, r14
mov qword [rsp + 0x110], r13
and qword [rsp + 0x390], 0
mov rcx, rbx
call fcn.140001a31
jmp 0x1400cb799
lea rcx, [rsp + 0x70]
call fcn.1400c2403
mov rdi, qword [rsp + 0x40]
mov rsi, qword [rsp + 0x100]
movups xmm0, xmmword [r12]
movaps xmmword [rsp + 0x380], xmm0
jmp 0x1400cb901
cmp byte [rsi + 3], 0
je 0x1400cb923
mov rax, qword [rsp + 0x40]
imul rdi, qword [rax + 0xf0], 0x90
mov rbx, qword [rax + 0xe0]
xor r14d, r14d
lea rsi, [rsp + 0x380]
mov r15, rbx
cmp rdi, r14
je 0x1400cb923
cmp qword [r15 + 0x78], 0
je 0x1400cb8e1
and qword [rsp + 0x380], 0
mov rcx, qword [rbx + r14 + 0x48]
xor edx, edx
xor r8d, r8d
mov r9, rsi
call sub.KERNEL32.dll_GetDiskFreeSpaceExW
test eax, eax
je 0x1400cb8e1
mov rax, qword [rsp + 0x380]
mov qword [rbx + r14 + 0x80], rax
add r15, 0x90
add r14, 0x90
jmp 0x1400cb8a6
xorps xmm0, xmm0
movaps xmmword [rsp + 0x380], xmm0
mov esi, 8
lea rcx, [rdi + 0xe0]
call fcn.140001a31
mov qword [rdi + 0xe0], rsi
movaps xmm0, xmmword [rsp + 0x380]
movups xmmword [rdi + 0xe8], xmm0
mov rax, qword [rsp + 0x58]
cmp byte [rax + 7], 0
je 0x1400cbfc8
lea rsi, [rsp + 0x168]
mov qword [rsi], 8
xorps xmm6, xmm6
movups xmmword [rsi + 8], xmm6
lea rax, [rsp + 0x160]
and dword [rax], 0
lea rbp, [rsp + 0x78]
lea r13, [rsp + 0x1d8]
lea rbx, [rsp + 0x380]
and qword [rsp + 0xf0], 0
and dword [rsp + 0x14c], 0
and dword [rsp + 0x164], 0
lea rax, [rsp + 0x160]
mov qword [rsp + 0x38], rax
lea rax, [rsp + 0x164]
mov qword [rsp + 0x30], rax
lea rax, [rsp + 0x14c]
mov qword [rsp + 0x28], rax
or dword [rsp + 0x20], 0xffffffff
xor ecx, ecx
xor edx, edx
mov r8d, 2
lea r9, [rsp + 0xf0]
call sub.NETAPI32.dll_NetUserEnum
test eax, eax
je 0x1400cb9d3
cmp eax, 0xea
jne 0x1400cbd40
mov dword [rsp + 0x140], eax
mov r14, qword [rsp + 0xf0]
mov eax, dword [rsp + 0x14c]
lea r15, [r14 + rax*8]
cmp r14, r15
je 0x1400cbd21
mov rdi, r14
add r14, 8
cmp qword [rdi], 0
je 0x1400cb9ed
and qword [rsp + 0x1d8], 0
mov rdx, qword [rdi]
xor ecx, ecx
mov r8d, 0x17
mov r9, r13
call sub.NETAPI32.dll_NetUserGetInfo
test eax, eax
jne 0x1400cbd0f
mov rax, qword [rsp + 0x1d8]
mov rdx, qword [rax + 0x20]
lea rcx, [rsp + 0x100]
call fcn.1400c437e
mov r12, qword [rsp + 0x100]
test r12, r12
je 0x1400cbd0f
mov rax, qword [rsp + 0x108]
mov qword [rsp + 0x48], rax
mov rax, qword [rsp + 0x110]
mov qword [rsp + 0x60], rax
mov rcx, rbx
mov rdx, r12
call fcn.1400cc83d
cmp qword [rsp + 0x380], 0
je 0x1400cbaa3
mov rax, qword [rsp + 0x390]
mov qword [rsp + 0xc0], rax
movups xmm0, xmmword [rsp + 0x380]
movaps xmmword [rsp + 0xb0], xmm0
jmp 0x1400cbab3
mov rdx, qword [rdi]
lea rcx, [rsp + 0xb0]
call fcn.1400c1f4f
mov rax, qword [rsp + 0xb0]
mov qword [rsp + 0xe8], rax
mov rdx, qword [rdi]
and qword [rsp + 0x1a0], 0
mov rdi, qword [rsp + 0xb8]
and dword [rsp + 0x54], 0
mov rbx, qword [rsp + 0xc0]
and dword [rsp + 0x158], 0
lea rax, [rsp + 0x158]
mov qword [rsp + 0x38], rax
lea rax, [rsp + 0x54]
mov qword [rsp + 0x30], rax
lea rax, [rsp + 0x1a0]
mov qword [rsp + 0x20], rax
or dword [rsp + 0x28], 0xffffffff
lea rcx, [0x14011ec48]
xor r8d, r8d
mov r9d, 1
call sub.NETAPI32.dll_NetUserGetLocalGroups
mov qword [rsp + 0x58], rbx
test eax, eax
mov qword [rsp + 0x68], r12
je 0x1400cbb4a
movups xmmword [rbp], xmm6
mov qword [rsp + 0x70], 8
jmp 0x1400cbc52
mov ebx, dword [rsp + 0x54]
test rbx, rbx
je 0x1400cbb6e
imul r13, rbx, 0x18
mov ecx, 8
mov rdx, r13
call fcn.1400c23bf
test rax, rax
jne 0x1400cbb73
jmp 0x1400cc2a4
mov eax, 8
mov qword [rsp + 0x70], rax
mov qword [rsp + 0x78], rbx
and qword [rsp + 0x80], 0
mov r12, qword [rsp + 0x1a0]
test r12, r12
lea r13, [rsp + 0x1d8]
je 0x1400cbc52
mov r13d, dword [rsp + 0x54]
cmp ebx, r13d
mov qword [rsp + 0xf8], rdi
jae 0x1400cbbd7
lea rcx, [rsp + 0x70]
xor edx, edx
mov r8, r13
call fcn.1400c4c0c
mov rcx, rax
call fcn.140008fa0
mov rax, qword [rsp + 0x70]
mov rbp, qword [rsp + 0x80]
jmp 0x1400cbbe6
mov ebp, 0
mov ecx, 0
test r13, r13
je 0x1400cbc2d
imul rsi, rbp, 0x18
add rsi, rax
xor edi, edi
lea rbx, [rdi + rbp]
mov rdx, qword [r12 + rdi*8]
lea rcx, [rsp + 0x230]
call fcn.1400c1f4f
mov rax, qword [rsp + 0x240]
mov qword [rsi + 0x10], rax
movups xmm0, xmmword [rsp + 0x230]
movups xmmword [rsi], xmm0
inc rdi
add rsi, 0x18
cmp r13, rdi
jne 0x1400cbbef
add rbp, rdi
mov rcx, rbp
mov qword [rsp + 0x80], rcx
lea rsi, [rsp + 0x168]
lea rbp, [rsp + 0x78]
lea r13, [rsp + 0x1d8]
mov rdi, qword [rsp + 0xf8]
mov rax, qword [rsp + 0x80]
mov qword [rsp + 0x240], rax
mov rax, qword [rsp + 0x70]
mov qword [rsp + 0x230], rax
mov rax, qword [rsp + 0x78]
mov qword [rsp + 0x238], rax
mov rcx, qword [rsp + 0x1a0]
call fcn.1400cc991
mov rax, qword [rsp + 0x68]
mov qword [rsp + 0x380], rax
mov rax, qword [rsp + 0x48]
mov qword [rsp + 0x388], rax
mov rax, qword [rsp + 0x60]
mov qword [rsp + 0x390], rax
and dword [rsp + 0x3c8], 0
mov rax, qword [rsp + 0xe8]
mov qword [rsp + 0x398], rax
mov qword [rsp + 0x3a0], rdi
mov rax, qword [rsp + 0x58]
mov qword [rsp + 0x3a8], rax
mov rax, qword [rsp + 0x240]
lea rcx, [rsp + 0x3b0]
mov qword [rcx + 0x10], rax
movaps xmm0, xmmword [rsp + 0x230]
movups xmmword [rcx], xmm0
mov rcx, rsi
lea rbx, [rsp + 0x380]
mov rdx, rbx
call fcn.1400cc936
mov rcx, qword [rsp + 0x1d8]
call fcn.1400cc991
jmp 0x1400cb9ed
mov rcx, qword [rsp + 0xf0]
cmp dword [rsp + 0x140], 0xea
jne 0x1400cbd48
call fcn.1400cc991
jmp 0x1400cb968
mov rcx, qword [rsp + 0xf0]
call fcn.1400cc991
mov rdi, qword [rsp + 0x40]
lea rcx, [rsp + 0x1a0]
and dword [rcx], 0
lea rdx, [rsp + 0x100]
and qword [rdx], 0
call sub.Secur32.dll_LsaEnumerateLogonSessions
mov rsi, qword [rsp + 0x100]
test eax, eax
jne 0x1400cbf7a
mov eax, dword [rsp + 0x1a0]
lea rbx, [rsi + rax*8]
lea r13, [rsp + 0xb0]
lea rbp, [rsp + 0x380]
xorps xmm6, xmm6
cmp rsi, rbx
je 0x1400cbf72
and qword [rsp + 0xb0], 0
mov rcx, rsi
mov rdx, r13
call sub.Secur32.dll_LsaGetLogonSessionData
add rsi, 8
mov rcx, qword [rsp + 0xb0]
test eax, eax
je 0x1400cbdd0
call fcn.1400cc833
jmp 0x1400cbd9c
test rcx, rcx
je 0x1400cbe85
cmp dword [rcx + 0x40], 3
je 0x1400cbe7b
movzx r14d, word [rcx + 0x10]
mov r15, qword [rcx + 0x18]
mov rdx, qword [rcx + 0x48]
mov rcx, rbp
call fcn.1400c437e
mov r12, qword [rsp + 0x380]
test r12, r12
je 0x1400cbe73
mov rax, qword [rsp + 0x388]
mov qword [rsp + 0x48], rax
mov rbp, qword [rsp + 0x390]
mov rdx, qword [rsp + 0x168]
imul r13, qword [rsp + 0x178], 0x50
test r13, r13
je 0x1400cbe8c
lea rdi, [rdx + 0x50]
mov rcx, qword [rdx]
mov rdx, qword [rdx + 0x10]
mov r8, r12
mov r9, rbp
call fcn.14000904e
add r13, 0xffffffffffffffb0
mov rdx, rdi
test al, al
je 0x1400cbe2b
mov rcx, r12
mov rdx, qword [rsp + 0x48]
call fcn.1400d71d3
mov rdi, qword [rsp + 0x40]
lea r13, [rsp + 0xb0]
lea rbp, [rsp + 0x380]
mov rcx, qword [rsp + 0xb0]
call fcn.1400cc833
jmp 0x1400cbd9c
xor ecx, ecx
jmp 0x1400cbdc9
lea rcx, [rsp + 0x230]
mov rdx, r12
mov r13, qword [rsp + 0x48]
call fcn.1400cc83d
mov rdi, qword [rsp + 0x40]
mov rax, qword [rsp + 0x230]
test rax, rax
je 0x1400cbebd
lea rcx, [rsp + 0x238]
jmp 0x1400cbeec
shr r14d, 1
lea rcx, [rsp + 0x380]
mov rdx, r15
mov r8, r14
call fcn.140007620
mov rax, qword [rsp + 0x380]
test rax, rax
je 0x1400cbf66
lea rcx, [rsp + 0x388]
movups xmm0, xmmword [rcx]
movaps xmmword [rsp + 0x70], xmm0
mov qword [rsp + 0x380], r12
mov qword [rsp + 0x388], r13
mov qword [rsp + 0x390], rbp
movaps xmm0, xmmword [rsp + 0x70]
lea rcx, [rsp + 0x388]
movups xmmword [rcx + 0x18], xmm0
and dword [rcx + 0x40], 0
movups xmmword [rcx + 0x30], xmm6
mov qword [rsp + 0x398], rax
mov qword [rsp + 0x3b0], 8
lea rcx, [rsp + 0x168]
lea rbp, [rsp + 0x380]
mov rdx, rbp
call fcn.1400cc936
mov rcx, qword [rsp + 0xb0]
lea r13, [rsp + 0xb0]
jmp 0x1400cbdc9
movaps xmmword [rsp + 0x70], xmm6
mov eax, 1
jmp 0x1400cbef4
mov rsi, qword [rsp + 0x100]
mov rax, qword [rsp + 0x178]
mov qword [rsp + 0x390], rax
movups xmm0, xmmword [rsp + 0x168]
movaps xmmword [rsp + 0x380], xmm0
mov rcx, rsi
call fcn.1400cc833
add rdi, 0xf8
mov rcx, rdi
call fcn.140001997
mov rax, qword [rsp + 0x390]
mov qword [rdi + 0x10], rax
movaps xmm0, xmmword [rsp + 0x380]
movups xmmword [rdi], xmm0
movaps xmm6, xmmword [rsp + 0x8d0]
movaps xmm7, xmmword [rsp + 0x8e0]
movaps xmm8, xmmword [rsp + 0x8f0]
add rsp, 0x908
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
lea rax, [rsp + 0x230]
mov qword [rax], r14
mov qword [rax + 8], rdi
lea rbx, [rsp + 0x70]
pcmpeqd xmm6, xmm6
lea rcx, [rsp + 0x380]
lea rdx, [rsp + 0x230]
call fcn.1400cd441
mov r14, qword [rsp + 0x380]
test r14, r14
mov rdi, qword [rsp + 0x40]
je 0x1400cc13c
mov rax, qword [rsp + 0x388]
mov qword [rsp + 0x48], rax
cmp qword [rdi + 0x88], 0
je 0x1400cc12a
mov r12, qword [rsp + 0x390]
mov rsi, qword [rsp + 0x40]
mov rcx, qword [rsi + 0x90]
mov rdx, qword [rsi + 0x98]
mov r8, r14
mov r9, r12
call fcn.1400c7bb4
mov rbp, qword [rsi + 0x70]
mov rsi, qword [rsi + 0x78]
mov rdi, rsi
and rdi, rax
shr rax, 0x39
movd xmm0, eax
punpcklbw xmm0, xmm0
pshuflw xmm0, xmm0, 0
pshufd xmm7, xmm0, 0
xor r13d, r13d
movdqu xmm8, xmmword [rbp + rdi]
movdqa xmm0, xmm8
pcmpeqb xmm0, xmm7
pmovmskb eax, xmm0
mov word [rsp + 0x70], ax
mov rcx, rbx
call fcn.1400c4e4e
test rax, rax
je 0x1400cc0f4
add rdx, rdi
and rdx, rsi
neg rdx
imul r15, rdx, 0x88
mov r8, qword [rbp + r15 - 0x88]
mov r9, qword [rbp + r15 - 0x78]
mov rcx, r14
mov rdx, r12
call fcn.140009800
test al, al
je 0x1400cc0b9
jmp 0x1400cc112
pcmpeqb xmm8, xmm6
pmovmskb eax, xmm8
test eax, eax
jne 0x1400cc12a
add rdi, r13
add rdi, 0x10
add r13, 0x10
and rdi, rsi
jmp 0x1400cc0a0
add rbp, r15
lea rcx, [rsp + 0x398]
movzx eax, word [rcx + 4]
mov word [rbp - 4], ax
mov eax, dword [rcx]
mov dword [rbp - 8], eax
mov rcx, r14
mov rdx, qword [rsp + 0x48]
call fcn.1400d71d3
jmp 0x1400cc00d
mov rcx, qword [rsp + 0x230]
call sub.msvcrt.dll_free
jmp 0x1400cb00c
movss xmm6, dword [rsp + 0xb0]
movd xmm7, dword [rsp + 0xb8]
mov rax, qword [rsp + 0x208]
mov qword [rsp + 0x3b0], rax
movups xmm0, xmmword [rsp + 0x1d8]
movups xmm1, xmmword [rsp + 0x1e8]
movups xmm2, xmmword [rsp + 0x1f8]
movaps xmmword [rsp + 0x3a0], xmm2
movaps xmmword [rsp + 0x390], xmm1
movaps xmmword [rsp + 0x380], xmm0
mov ebx, 8
mov ecx, 8
xor edx, edx
call fcn.14003b781
movabs rcx, 0x72657475706d6f43
mov qword [rax], rcx
mov rcx, qword [rsp + 0x380]
movups xmm0, xmmword [rsp + 0x388]
movaps xmmword [rsp + 0x70], xmm0
movups xmm0, xmmword [rsp + 0x398]
movaps xmmword [rsp + 0x80], xmm0
movups xmm0, xmmword [rsp + 0x3a8]
movaps xmmword [rsp + 0x90], xmm0
cmp rcx, 3
je 0x1400ca095
mov qword [rsp + 0x380], rcx
movaps xmm0, xmmword [rsp + 0x70]
movaps xmm1, xmmword [rsp + 0x80]
movaps xmm2, xmmword [rsp + 0x90]
movups xmmword [rsp + 0x388], xmm0
movups xmmword [rsp + 0x398], xmm1
movups xmmword [rsp + 0x3a8], xmm2
mov dword [rsp + 0x3b8], esi
movd dword [rsp + 0x3bc], xmm7
mov qword [rsp + 0x3c0], rax
mov qword [rsp + 0x3c8], rdx
mov qword [rsp + 0x3d0], 8
movss dword [rsp + 0x3d8], xmm6
movss dword [rsp + 0x3dc], xmm6
mov ecx, 0x60
mov edx, 8
call fcn.1400c431b
mov rbx, rax
lea rsi, [rsp + 0x380]
mov ecx, 0xc
mov rdi, rax
rep movsq qword [rdi], qword [rsi]
mov esi, 1
mov rdi, qword [rsp + 0x40]
jmp 0x1400ca097
mov ecx, 8
mov rdx, r13
call fcn.140006b60
jmp 0x1400cc30b
lea rcx, str.key_used_disappeared
lea r8, [0x14011ebf0]
mov edx, 0x14
call fcn.14000da00
ud2
lea rcx, str.global_key_idle_disappeared_home_affix_.cargo_registry_src_index.crates.io_6f17d22bba15001f_sysinfo_0.29.11_src_windows_system.rs
lea r8, [0x14011ebc0]
mov edx, 0x1b
jmp 0x1400cc2c6
mov ecx, 8
mov edx, 0xfa0
call fcn.140006b60
jmp 0x1400cc30b
lea rcx, str.assertion_failed:_vec.capacity_____start___len_home_affix_.cargo_registry_src_index.crates.io_6f17d22bba15001f_rayon_1.10.0_src_vec.rs
lea r8, [0x14011e460]
mov edx, 0x2f
call fcn.14000ae60
ud2