Function at 0x140008b61
Capabilities:
Enumerate process modules

Disassembly:
push rbp
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbx
sub rsp, 0x2e8
lea rbp, [rsp + 0x80]
mov qword [rbp + 0x260], 0xfffffffffffffffe
mov qword [rbp + 0x1f0], rdx
mov qword [rbp + 0x1f8], rcx
call qword [sym.imp.kernel32.dll_GetCurrentProcess]
lea rbx, [rbp + 0x1d0]
and dword [rbx], 0
mov rcx, rax
mov qword [rbp + 0x208], rax
xor eax, eax
mov qword [rbp + 0x210], rax
push 8
pop rsi
push 4
pop rax
mov qword [rbp + 0x258], rax
xor r14d, r14d
xor r15d, r15d
xor edi, edi
lea r8d, [r15*8]
mov dword [rsp + 0x20], 3
mov rdx, rsi
mov r9, rbx
call sub.psapi.dll_EnumProcessModulesEx
test eax, eax
je 0x1400093f0
mov r13d, dword [rbp + 0x1d0]
cmp r13d, edi
jbe 0x140008cce
mov r12, r13
sub r12, r15
jbe 0x140008c57
mov rax, r14
sub rax, r15
cmp rax, r12
jae 0x140008c5c
mov rdi, r15
add rdi, r12
jb 0x1400094e3
lea rax, [r14 + r14]
cmp rax, rdi
cmova rdi, rax
xor edx, edx
mov rax, rdi
shr rax, 0x3c
sete al
cmp rdi, 5
push 4
pop rcx
cmovb rdi, rcx
test r14, r14
je 0x140008c61
shl r14, 3
mov qword [rbp - 0x50], rsi
mov qword [rbp - 0x40], r14
push 8
pop rcx
jmp 0x140008c63
mov r15, r13
jmp 0x140008cbf
mov rdi, r14
jmp 0x140008c99
xor ecx, ecx
lea r8, [rdi*8]
mov dl, al
shl edx, 3
mov qword [rbp - 0x48], rcx
lea rcx, [rbp + 0x218]
lea r9, [rbp - 0x50]
call fcn.14001af18
cmp qword [rbp + 0x218], 0
jne 0x1400094e5
mov rsi, qword [rbp + 0x220]
lea rax, [rsi + r15*8]
push 1
pop rcx
cmp rcx, r12
jae 0x140008cb5
and qword [rax], 0
inc rcx
add rax, 8
inc r15
jmp 0x140008ca0
and qword [rax], 0
inc r15
mov r14, rdi
mov rcx, qword [rbp + 0x208]
mov edi, r13d
jmp 0x140008bcd
mov edi, r13d
shr edi, 3
cmp r15, rdi
jb 0x140009506
mov r12d, eax
cmp r13d, 8
jae 0x140008d30
test rdi, rdi
je 0x140008d7b
cmp rdi, 5
push 4
pop r15
cmovae r15, rdi
mov r8, r15
shl r8, 4
lea r9, [rbp - 0x50]
and qword [r9 + 8], 0
lea rbx, [rbp + 0x218]
push 8
pop rdx
mov rcx, rbx
call fcn.14001af18
cmp qword [rbx], 0
jne 0x14000955b
mov rbx, qword [rbp + 0x220]
jmp 0x140008d81
mov r15, rdi
shl r15, 4
mov al, byte [0x140052c00]
mov rcx, r15
call fcn.1400172c0
test rax, rax
je 0x140009550
mov rbx, rax
add rax, 8
xor r13d, r13d
lea rcx, [rbp + 0x208]
mov rdx, qword [rsi + r13*8]
mov qword [rax - 8], rcx
mov qword [rax], rdx
inc r13
add rax, 0x10
cmp rdi, r13
jne 0x140008d5f
mov r15, rdi
jmp 0x140008d84
push 8
pop rbx
xor r15d, r15d
xor r13d, r13d
mov rcx, r14
mov rdx, rsi
call fcn.14001b3ab
test r12d, r12d
je 0x14000940c
shl r13, 4
add r13, rbx
mov qword [rbp + 0x1d0], rbx
mov qword [rbp + 0x1d8], rbx
mov qword [rbp + 0x1e0], r15
mov qword [rbp + 0x1e8], r13
lea r14, [rbp - 0x50]
push 2
pop rdi
push 3
pop r15
cmp rbx, r13
je 0x1400093c2
lea rax, [rbx + 0x10]
mov qword [rbp + 0x1d8], rax
mov r12, qword [rbx]
mov rsi, qword [rbx + 8]
mov r8d, 0x208
mov rcx, r14
xor edx, edx
call fcn.140029820
mov rcx, qword [r12]
mov rdx, rsi
mov r8, r14
mov r9d, 0x104
call sub.psapi.dll_GetModuleBaseNameW
test eax, eax
je 0x140009432
mov qword [rbp + 0x1c0], r12
mov qword [rbp + 0x210], rsi
mov edx, eax
mov rcx, r14
lea r8, str.C:Users_notev.cargo_registry_srcindex.crates.io_6f17d22bba15001fwinproc_0.6.4_srcprocessmodule.rs
call fcn.14001b441
mov r8, rdx
lea rcx, [rbp + 0x218]
mov rdx, rax
call fcn.140015200
mov rcx, qword [rbp + 0x220]
mov r13, qword [rbp + 0x228]
test r13, r13
je 0x140008efa
lea rbx, [rcx + r13]
xor esi, esi
mov qword [rbp + 0x258], rcx
push 1
pop r12
lea rax, [rcx + 1]
mov dl, byte [rcx]
test dl, dl
js 0x140008e76
mov rdx, r12
jmp 0x140008ee2
cmp dl, 0xe0
jae 0x140008e8b
add rcx, 2
cmp rax, rbx
cmovne rax, rcx
mov rdx, rdi
jmp 0x140008ee2
cmp dl, 0xed
jne 0x140008eb4
cmp rax, rbx
je 0x140008ef1
lea rax, [rcx + 2]
cmp rax, rbx
je 0x140008ef1
cmp byte [rcx + 1], 0x9f
ja 0x140009121
add rcx, 3
mov rdx, r15
mov rax, rcx
jmp 0x140008ee2
add rcx, 2
cmp rax, rbx
cmove rcx, rax
xor eax, eax
cmp rcx, rbx
setne al
add rax, rcx
cmp dl, 0xf0
jae 0x140008ed4
mov rdx, r15
jmp 0x140008ee2
xor ecx, ecx
cmp rax, rbx
setne cl
add rax, rcx
push 4
pop rdx
add rsi, rdx
mov rcx, rax
cmp rax, rbx
jne 0x140008e67
mov r12, qword [rbp + 0x258]
jmp 0x140008efd
mov r12, rcx
lea rcx, [rbp + 0x240]
mov rdx, r13
call fcn.14001b044
cmp qword [rbp + 0x240], 0
mov rsi, qword [rbp + 0x248]
jne 0x140009462
mov rdi, qword [rbp + 0x250]
mov rcx, rdi
mov rdx, r12
mov r8, r13
call fcn.1400290a0
mov r12, rdi
mov rcx, qword [rbp + 0x218]
mov rdx, qword [rbp + 0x220]
call fcn.14001b0aa
lea rcx, [rbp + 0x218]
mov rdx, r12
mov qword [rbp + 0x200], r13
mov r8, r13
call fcn.140003240
mov rdi, qword [rbp + 0x220]
mov r8, qword [rbp + 0x228]
lea rcx, [rbp + 0x240]
mov rdx, rdi
call fcn.14000aada
mov rcx, r14
mov rdx, qword [rbp + 0x1f8]
mov r8, qword [rbp + 0x1f0]
call fcn.14000aada
mov r13, qword [rbp + 0x248]
mov rdx, qword [rbp + 0x250]
mov r15, r14
mov r14, qword [rbp - 0x48]
mov r9, qword [rbp - 0x40]
mov rcx, r13
mov r8, r14
call fcn.14000861f
mov ebx, eax
mov rcx, qword [rbp - 0x50]
mov rdx, r14
call fcn.14001b0aa
mov rcx, qword [rbp + 0x240]
mov rdx, r13
call fcn.14001b0aa
mov rcx, qword [rbp + 0x218]
mov rdx, rdi
call fcn.14001b0aa
mov rcx, rsi
mov qword [rbp + 0x258], r12
mov rdx, r12
call fcn.14001b0aa
test bl, bl
jne 0x1400093a1
mov r8d, 0x208
mov rcx, r15
xor edx, edx
call fcn.140029820
mov rax, qword [rbp + 0x1c0]
mov rcx, qword [rax]
mov rdx, qword [rbp + 0x210]
mov r8, r15
mov r9d, 0x104
call sub.psapi.dll_GetModuleFileNameExW
test eax, eax
je 0x14000947d
mov edx, eax
mov rcx, r15
lea r8, str.C:Users_notev.cargo_registry_srcindex.crates.io_6f17d22bba15001fwinproc_0.6.4_srcprocessmodule.rs
call fcn.14001b441
mov r8, rdx
lea rcx, [rbp + 0x220]
mov rdx, rax
call fcn.140015200
mov rsi, qword [rbp + 0x220]
mov rdi, qword [rbp + 0x228]
mov r8, qword [rbp + 0x230]
mov rcx, r15
mov rdx, rdi
call fcn.140005000
cmp qword [rbp - 0x50], 0
jne 0x140009471
mov rdx, qword [rbp - 0x48]
mov r8, qword [rbp - 0x40]
lea rcx, [rbp + 0x218]
call fcn.14000aada
mov rcx, r15
mov rdx, qword [rbp + 0x1f8]
mov r8, qword [rbp + 0x1f0]
call fcn.14000aada
mov rbx, qword [rbp + 0x220]
mov rdx, qword [rbp + 0x228]
mov r14, qword [rbp - 0x48]
mov r9, qword [rbp - 0x40]
mov rcx, rbx
mov r8, r14
call fcn.14000861f
mov r13d, eax
mov rcx, qword [rbp - 0x50]
mov rdx, r14
call fcn.14001b0aa
mov rcx, qword [rbp + 0x218]
mov rdx, rbx
call fcn.14001b0aa
mov rcx, rsi
mov rdx, rdi
call fcn.14001b0aa
test r13b, r13b
jne 0x1400093a1
mov rbx, qword [rbp + 0x1d8]
mov r13, qword [rbp + 0x1e8]
mov r14, r15
push 2
pop rdi
push 3
pop r15
jmp 0x140008dc6
test r13, r13
js 0x14000954b
mov al, byte [0x140052c00]
mov rcx, r13
call fcn.1400172c0
test rax, rax
mov rdx, qword [rbp + 0x258]
je 0x140009540
mov qword [rbp + 0x240], r13
mov qword [rbp + 0x248], rax
mov r15, r13
sub r13, rsi
jb 0x14000952c
mov rcx, rax
mov r8, rsi
mov rdi, rax
call fcn.1400290a0
mov rcx, rdi
mov qword [rbp + 0x250], rsi
mov rdi, rsi
cmp r13, 2
lea r14, [rbp - 0x50]
ja 0x1400091a8
lea rcx, [rbp + 0x240]
mov rdx, rsi
push 3
pop r8
call fcn.14002abc0
mov rcx, qword [rbp + 0x248]
mov rdi, qword [rbp + 0x250]
lea rax, [rcx + rdi]
mov byte [rax + 2], 0xbd
mov word [rax], 0xbfef
add rdi, 3
mov qword [rbp + 0x250], rdi
mov r13, rsi
add r13, 3
cmp r13, r15
ja 0x140009518
je 0x140009323
mov rax, qword [rbp + 0x258]
lea r8, [rax + r13]
mov rsi, r13
mov qword [rbp + 0x200], r8
lea rax, [r8 + 1]
mov dl, byte [r8]
test dl, dl
js 0x1400091fb
mov rdx, r12
jmp 0x14000923c
cmp dl, 0xe0
jae 0x140009210
add r8, 2
cmp rax, rbx
cmovne rax, r8
push 2
pop rdx
jmp 0x14000923c
cmp dl, 0xed
jne 0x14000924c
cmp rax, rbx
je 0x140009326
lea rax, [r8 + 2]
cmp rax, rbx
je 0x140009326
cmp byte [r8 + 1], 0x9f
ja 0x14000927a
add r8, 3
push 3
pop rdx
mov rax, r8
add rsi, rdx
mov r8, rax
cmp rax, rbx
jne 0x1400091eb
jmp 0x140009326
add r8, 2
cmp rax, rbx
cmove r8, rax
xor eax, eax
cmp r8, rbx
setne al
add rax, r8
cmp dl, 0xf0
jae 0x14000926b
push 3
jmp 0x14000920d
xor edx, edx
cmp rax, rbx
setne dl
add rax, rdx
push 4
jmp 0x14000920d
mov r8, rsi
sub r8, r13
jb 0x14000956e
cmp rsi, r15
ja 0x140009582
mov r14, qword [rbp + 0x240]
mov rax, r14
sub rax, rdi
cmp rax, r8
jae 0x1400092cb
lea rcx, [rbp + 0x240]
mov rdx, rdi
mov r13, r8
call fcn.14002abc0
mov rdi, qword [rbp + 0x250]
mov r14, qword [rbp + 0x240]
mov rcx, qword [rbp + 0x248]
mov r8, r13
mov qword [rbp + 0x1c8], rcx
add rcx, rdi
mov rdx, qword [rbp + 0x200]
mov r13, r8
call fcn.1400290a0
add rdi, r13
mov qword [rbp + 0x250], rdi
sub r14, rdi
cmp r14, 2
jbe 0x140009307
lea r14, [rbp - 0x50]
mov rcx, qword [rbp + 0x1c8]
jmp 0x1400091a8
lea rcx, [rbp + 0x240]
mov rdx, rdi
push 3
pop r8
call fcn.14002abc0
lea r14, [rbp - 0x50]
jmp 0x14000919a
mov r13, r15
sub r15, r13
mov rax, qword [rbp + 0x240]
sub rax, rdi
cmp rax, r15
jae 0x14000935d
lea rcx, [rbp + 0x240]
mov rdx, rdi
mov rsi, r15
mov r8, r15
call fcn.14002abc0
mov rcx, qword [rbp + 0x248]
mov rdi, qword [rbp + 0x250]
jmp 0x140009360
mov rsi, r15
mov rdx, qword [rbp + 0x258]
add rdx, r13
add rcx, rdi
mov r13, rsi
mov r8, rsi
call fcn.1400290a0
add r13, rdi
mov rsi, qword [rbp + 0x240]
mov r12, qword [rbp + 0x248]
movabs rax, 0x8000000000000000
cmp rsi, rax
je 0x140008efd
jmp 0x140008f39
lea rcx, [rbp + 0x1d0]
call fcn.1400087d2
mov rcx, qword [rbp + 0x208]
call fcn.14001b3da
mov rax, qword [rbp + 0x210]
jmp 0x1400093dc
lea rcx, [rbp + 0x1d0]
call fcn.1400087d2
mov rcx, qword [rbp + 0x208]
call fcn.14001b3da
xor eax, eax
add rsp, 0x2e8
pop rbx
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
pop rbp
ret
call fcn.14001b3c3
mov r15, rax
mov rcx, r14
mov rdx, rsi
call fcn.14001b3ab
xor eax, eax
mov qword [rbp + 0x258], rax
lea r8, [rbp - 0x50]
mov rax, qword [rbp + 0x258]
mov qword [r8], rax
mov qword [r8 + 8], r15
mov qword [r8 + 0x10], rbx
mov qword [r8 + 0x18], r13
lea rax, str.C:Users_notev.cargo_registry_srcindex.crates.io_6f17d22bba15001fdinvoke_0.1.4_srclib.rs
jmp 0x1400094c8
call fcn.14001b3c3
lea r8, [rbp - 0x50]
and qword [r8], 0
mov qword [r8 + 8], rax
mov rax, qword [rbp + 0x258]
mov qword [r8 + 0x10], rax
mov rax, qword [rbp + 0x200]
mov qword [r8 + 0x18], rax
lea rax, str.C:Users_notev.cargo_registry_srcindex.crates.io_6f17d22bba15001fdinvoke_0.1.4_srclib.rs
jmp 0x1400094c8
mov rdx, qword [rbp + 0x250]
mov rcx, rsi
call fcn.140029bb0
lea rcx, str.C:Users_notev.cargo_registry_srcindex.crates.io_6f17d22bba15001fdinvoke_0.1.4_srclib.rs
call fcn.14002a000
call fcn.14001b3c3
mov qword [rbp + 0x220], rax
and qword [rbp + 0x218], 0
mov rax, qword [rbp + 0x238]
lea r8, [rbp - 0x50]
mov qword [r8 + 0x20], rax
movups xmm0, xmmword [rbp + 0x228]
movaps xmmword [r8 + 0x10], xmm0
mov rax, qword [rbp + 0x218]
mov qword [r8], rax
mov rax, qword [rbp + 0x220]
mov qword [r8 + 8], rax
lea rax, str.C:Users_notev.cargo_registry_srcindex.crates.io_6f17d22bba15001fdinvoke_0.1.4_srclib.rs
mov qword [rsp + 0x20], rax
lea rcx, str.called__Result::unwrap____on_an__Err__value
lea r9, [0x1400425e0]
push 0x2b
pop rdx
call fcn.140029f70
jmp 0x1400094fa
mov rax, qword [rbp + 0x220]
mov qword [rbp + 0x210], rax
mov rdx, qword [rbp + 0x228]
mov rcx, qword [rbp + 0x210]
call fcn.140029bb0
lea r8, str.C:Users_notev.cargo_registry_srcindex.crates.io_6f17d22bba15001fwinproc_0.6.4_srcprocessmod.rs
mov rcx, rdi
mov rdx, r15
call fcn.140029d50
lea r8, str.library_std_src_sys_commonwtf8.rs
mov rcx, r13
mov rdx, r15
call fcn.140029cd0
jmp 0x140009594
lea r8, str.library_std_src_sys_commonwtf8.rs
mov rcx, rsi
mov rdx, r15
call fcn.140029d50
jmp 0x140009594
push 1
pop rcx
mov rdx, r13
call fcn.140029bb0
call fcn.140002d20
push 8
pop rcx
mov rdx, r15
call fcn.140029bb0
mov rcx, qword [rbp + 0x220]
mov rdx, qword [rbp + 0x228]
call fcn.140029bb0
lea r8, str.library_std_src_sys_commonwtf8.rs
mov rcx, r13
mov rdx, rsi
call fcn.140029f00
jmp 0x140009594
mov rdx, r15
lea r8, str.library_std_src_sys_commonwtf8.rs
mov rcx, rsi
call fcn.140029d50
ud2