Function at 0x1400072ea
Capabilities:
Enumerate process modules

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x2d8
mov qword [rsp + 0x58], rdx
mov qword [rsp + 0x50], rcx
lea r12, [rsp + 0xa8]
and dword [r12], 0
xor r14d, r14d
mov r15d, 8
xor esi, esi
xor ebp, ebp
xor ebx, ebx
mov r13d, ebx
mov rbx, rsi
mov rsi, rbx
mov rcx, 0xffffffffffffffff
mov rdx, r15
mov r8d, esi
mov r9, r12
call sub.psapi.dll_EnumProcessModules
test eax, eax
je 0x140007793
mov ebx, dword [rsp + 0xa8]
cmp ebx, r13d
jbe 0x14000742f
mov rdi, rbx
mov r13d, ebx
sub rdi, rsi
jbe 0x140007329
mov rax, rbp
sub rax, rsi
cmp rax, rdi
jae 0x1400073c3
mov r13, rsi
add r13, rdi
jb 0x1400077d7
lea rax, [rbp*2]
cmp rax, r13
cmova r13, rax
xor edx, edx
mov rax, r13
shr rax, 0x3c
sete al
cmp r13, 5
mov ecx, 4
cmovb r13, rcx
test rbp, rbp
je 0x1400073c8
shl rbp, 3
mov qword [rsp + 0xd0], r15
mov qword [rsp + 0xe0], rbp
mov ecx, 8
jmp 0x1400073ca
mov r13, rbp
jmp 0x140007402
xor ecx, ecx
lea r8, [r13*8]
mov dl, al
shl edx, 3
mov qword [rsp + 0xd8], rcx
lea rcx, [rsp + 0x30]
lea r9, [rsp + 0xd0]
call fcn.14001817d
cmp qword [rsp + 0x30], 0
jne 0x1400077d9
mov r15, qword [rsp + 0x38]
lea rax, [r15 + rsi*8]
mov ecx, 1
cmp rcx, rdi
jae 0x140007420
and qword [rax], 0
inc rcx
add rax, 8
inc rsi
jmp 0x14000740b
and qword [rax], 0
inc rsi
mov rbp, r13
jmp 0x140007323
movabs r13, 0x8000000000000000
cmp rbp, r13
je 0x1400077a8
lea rax, [r15 + rsi*8]
mov qword [rsp + 0xa8], r15
mov qword [rsp + 0xb0], r15
mov qword [rsp + 0xb8], rbp
mov qword [rsp + 0xc0], rax
shl rsi, 3
lea r14, [rsp + 0xd0]
lea rdi, [rsp + 0x60]
lea rbx, [rsp + 0x78]
mov r12, qword [rsp + 0x58]
mov rbp, qword [rsp + 0x50]
test rsi, rsi
je 0x140007752
lea rax, [r15 + 8]
mov qword [rsp + 0xc8], rax
mov qword [rsp + 0xb0], rax
mov r15, qword [r15]
mov r8d, 0x208
mov rcx, r14
xor edx, edx
call fcn.1400266c0
mov rcx, 0xffffffffffffffff
mov qword [rsp + 0x50], r15
mov rdx, r15
mov r8, r14
mov r9d, 0x104
call sub.psapi.dll_GetModuleBaseNameW
test eax, eax
je 0x140007527
mov edx, eax
mov rcx, r14
lea r8, str.C:Users_notev.cargo_registry_srcindex.crates.io_6f17d22bba15001fdinvoke_0.1.5_srclib.rs
call fcn.140008c50
mov r8, rdx
lea r15, [rsp + 0x30]
mov rcx, r15
mov rdx, rax
call fcn.140012750
mov rdx, qword [rsp + 0x38]
mov r8, qword [rsp + 0x40]
mov rcx, rbx
call fcn.140014120
lea rcx, [rsp + 0x90]
mov rdx, rbx
call fcn.140006dad
mov rcx, r15
call fcn.14000100c
jmp 0x140007540
call fcn.140008bc6
mov dword [rsp + 0x98], eax
mov qword [rsp + 0x90], r13
lea r15, [rsp + 0x30]
mov r8d, 0x208
mov rcx, r14
xor edx, edx
call fcn.1400266c0
mov rcx, 0xffffffffffffffff
mov rdx, qword [rsp + 0x50]
mov r8, r14
mov r9d, 0x104
call sub.psapi.dll_GetModuleFileNameExW
test eax, eax
je 0x1400075b9
mov edx, eax
mov rcx, r14
lea r8, str.C:Users_notev.cargo_registry_srcindex.crates.io_6f17d22bba15001fdinvoke_0.1.5_srclib.rs
call fcn.140008c50
mov r8, rdx
mov rcx, r15
mov rdx, rax
call fcn.140012750
mov rdx, qword [rsp + 0x38]
mov r8, qword [rsp + 0x40]
mov rcx, rbx
call fcn.140014120
mov rcx, rdi
mov rdx, rbx
call fcn.140006dad
mov rcx, r15
call fcn.14000100c
mov rbx, qword [rsp + 0x60]
jmp 0x1400075ca
call fcn.140008bc6
mov dword [rsp + 0x68], eax
mov qword [rsp + 0x60], r13
mov rbx, r13
mov rax, qword [rsp + 0x90]
cmp rax, r13
je 0x140007727
cmp rbx, r13
je 0x140007727
mov ecx, dword [rsp + 0x98]
lea r8, [rsp + 0x9c]
mov edx, dword [r8 + 8]
lea r15, [rsp + 0x3c]
mov dword [r15 + 8], edx
mov rdx, qword [r8]
mov qword [r15], rdx
mov qword [rsp + 0x30], rax
mov dword [rsp + 0x38], ecx
mov rdx, qword [rsp + 0x38]
mov r8, qword [rsp + 0x40]
lea rdi, [rsp + 0x78]
mov rcx, rdi
call fcn.140008c79
mov rcx, r14
mov rdx, rbp
mov r8, r12
call fcn.140008c79
mov rcx, qword [rsp + 0x80]
mov rdx, qword [rsp + 0x88]
mov r8, qword [rsp + 0xd8]
mov r9, qword [rsp + 0xe0]
call fcn.140006d88
mov r13d, eax
mov rcx, r14
call fcn.14000100c
mov rcx, rdi
call fcn.14000100c
lea rcx, [rsp + 0x30]
mov rdi, rcx
call fcn.14000100c
test r13b, r13b
jne 0x140007763
mov eax, dword [rsp + 0x68]
mov qword [rsp + 0x30], rbx
mov dword [rsp + 0x38], eax
lea rcx, [rsp + 0x6c]
mov eax, dword [rcx + 8]
mov dword [r15 + 8], eax
mov rax, qword [rcx]
mov qword [r15], rax
mov rdx, qword [rsp + 0x38]
mov r8, qword [rsp + 0x40]
lea r15, [rsp + 0x78]
mov rcx, r15
call fcn.140008c79
mov rcx, r14
mov rdx, rbp
mov r8, r12
call fcn.140008c79
mov rcx, qword [rsp + 0x80]
mov rdx, qword [rsp + 0x88]
mov r8, qword [rsp + 0xd8]
mov r9, qword [rsp + 0xe0]
call fcn.140006d88
mov r12d, eax
mov rbx, r14
mov rcx, r14
call fcn.14000100c
mov rcx, r15
call fcn.14000100c
mov rcx, rdi
call fcn.14000100c
test r12b, r12b
jne 0x14000776d
mov r12, qword [rsp + 0x58]
movabs r13, 0x8000000000000000
lea rdi, [rsp + 0x60]
mov r14, rbx
jmp 0x14000773c
mov rcx, rdi
call fcn.140008cd4
lea rcx, [rsp + 0x90]
call fcn.140008cd4
add rsi, 0xfffffffffffffff8
mov r15, qword [rsp + 0xc8]
lea rbx, [rsp + 0x78]
jmp 0x140007486
lea rcx, [rsp + 0xa8]
call fcn.140006f65
xor eax, eax
jmp 0x14000777f
lea rcx, [rsp + 0x60]
call fcn.140008cd4
lea rcx, [rsp + 0xa8]
call fcn.140006f65
mov rax, qword [rsp + 0x50]
add rsp, 0x2d8
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
call fcn.140008bc6
mov esi, eax
mov rcx, rbp
mov rdx, r15
call fcn.14000660c
mov r15, rsi
lea r8, [rsp + 0xd0]
mov dword [r8], r15d
lea rax, str.C:Users_notev.cargo_registry_srcindex.crates.io_6f17d22bba15001fdinvoke_0.1.5_srclib.rs
mov qword [rsp + 0x20], rax
lea rcx, str.called__Result::unwrap____on_an__Err__value
lea r9, method._pH__8p.virtual_0
mov edx, 0x2b
call fcn.140026df0
jmp 0x1400077e3
mov r14, qword [rsp + 0x38]
mov rdx, qword [rsp + 0x40]
mov rcx, r14
call fcn.140026a50
int3