Function at 0x14000d1d8
Capabilities:
Enumerate process modules

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x2d8
mov qword [rsp + 0x88], rdx
mov qword [rsp + 0x80], rcx
call qword [sym.imp.kernel32.dll_GetCurrentProcess]
mov r15, rax
mov qword [rsp + 0x60], rax
lea r12, [rsp + 0x90]
and dword [r12], 0
xor eax, eax
mov qword [rsp + 0x30], rax
mov r14d, 8
xor esi, esi
xor edi, edi
mov ebx, edi
mov rdi, rsi
mov rsi, rdi
lea r8d, [rdi*8]
mov dword [rsp + 0x20], 3
mov rcx, r15
mov rdx, r14
mov r9, r12
call sub.psapi.dll_EnumProcessModulesEx
test eax, eax
je 0x14000d714
mov edi, dword [rsp + 0x90]
cmp edi, ebx
jbe 0x14000d35e
mov r13, rdi
mov ebx, edi
sub r13, rsi
jbe 0x14000d22c
mov rbx, qword [rsp + 0x30]
mov rax, rbx
sub rax, rsi
cmp rax, r13
jae 0x14000d32f
mov rbp, rsi
add rbp, r13
jae 0x14000d291
xor ecx, ecx
jmp 0x14000d327
lea rax, [rbx + rbx]
cmp rax, rbp
cmova rbp, rax
cmp rbp, 5
mov eax, 4
cmovb rbp, rax
xor edx, edx
mov rax, rbp
shr rax, 0x3c
sete al
test rbx, rbx
je 0x14000d2d9
lea rcx, [rbx*8]
mov qword [rsp + 0xd0], r14
mov qword [rsp + 0xe0], rcx
mov ecx, 8
jmp 0x14000d2db
xor ecx, ecx
lea r8, [rbp*8]
mov dl, al
shl rdx, 3
mov qword [rsp + 0xd8], rcx
lea rcx, [rsp + 0x38]
lea r9, [rsp + 0xd0]
call fcn.140023614
cmp qword [rsp + 0x38], 0
mov rcx, qword [rsp + 0x40]
je 0x14000d317
mov rbp, qword [rsp + 0x48]
jmp 0x14000d327
mov rbx, rbp
mov r14, rcx
movabs rcx, 0x8000000000000001
mov rdx, rbp
call fcn.1400235ec
lea rax, [r14 + rsi*8]
mov ecx, 1
cmp rcx, r13
jae 0x14000d34d
and qword [rax], 0
inc rcx
add rax, 8
inc rsi
jmp 0x14000d338
mov qword [rsp + 0x30], rbx
and qword [rax], 0
inc rsi
jmp 0x14000d227
mov r15d, edi
shr r15d, 3
cmp rsi, r15
jb 0x14000d7f9
mov ebp, eax
cmp edi, 8
jae 0x14000d37e
mov ebx, 8
xor edi, edi
jmp 0x14000d3c6
mov rsi, r15
shl rsi, 4
mov al, byte [0x140038230]
mov edx, 8
mov rcx, rsi
call fcn.140006980
test rax, rax
je 0x14000d815
mov rbx, rax
add rax, 8
xor edi, edi
lea rcx, [rsp + 0x60]
mov rdx, qword [r14 + rdi*8]
mov qword [rax - 8], rcx
mov qword [rax], rdx
inc rdi
add rax, 0x10
cmp r15, rdi
jne 0x14000d3af
mov rcx, qword [rsp + 0x30]
mov rdx, r14
call fcn.1400240d2
test ebp, ebp
je 0x14000d80b
shl rdi, 4
lea rax, [rbx + rdi]
mov qword [rsp + 0x90], rbx
mov qword [rsp + 0x98], r15
mov qword [rsp + 0xa0], rbx
mov qword [rsp + 0xa8], rax
lea r13, [rsp + 0xd0]
lea rbp, [rsp + 0x38]
test rdi, rdi
je 0x14000d6e7
lea r15, [rbx + 0x10]
mov qword [rsp + 0xa0], r15
mov r14, qword [rbx]
mov rsi, qword [rbx + 8]
mov r8d, 0x208
mov rcx, r13
xor edx, edx
call sub.VCRUNTIME140.dll_memset
mov qword [rsp + 0xc8], r14
mov rcx, qword [r14]
mov rdx, rsi
mov r8, r13
mov r9d, 0x104
call sub.psapi.dll_GetModuleBaseNameW
test eax, eax
je 0x14000d74b
mov qword [rsp + 0xc0], r15
mov qword [rsp + 0x30], rsi
mov edx, eax
mov rcx, r13
lea r8, [0x140032fa0]
call fcn.140024178
mov r8, rdx
mov rcx, rbp
mov rdx, rax
call fcn.14001c970
mov rsi, qword [rsp + 0x40]
mov r8, qword [rsp + 0x48]
lea rcx, [rsp + 0x68]
mov rdx, rsi
call fcn.140020530
mov r12, qword [rsp + 0x68]
mov r14, qword [rsp + 0x70]
mov rbx, qword [rsp + 0x78]
movabs rax, 0x8000000000000000
cmp r12, rax
jne 0x14000d4e5
mov rcx, rbx
call fcn.1400236f5
mov r12, rax
mov r15, rdx
mov rcx, rdx
mov rdx, r14
mov r8, rbx
call sub.VCRUNTIME140.dll_memcpy
mov rsi, qword [rsp + 0x40]
mov r14, r15
mov rcx, qword [rsp + 0x38]
mov rdx, rsi
call fcn.14000ef97
mov rcx, rbp
mov rdx, r14
mov qword [rsp + 0xb8], rbx
mov r8, rbx
call fcn.140006010
mov rsi, qword [rsp + 0x40]
mov r8, qword [rsp + 0x48]
lea rcx, [rsp + 0x68]
mov rdx, rsi
call fcn.14000d823
mov rcx, r13
mov rdx, qword [rsp + 0x80]
mov r8, qword [rsp + 0x88]
call fcn.14000d823
mov r15, qword [rsp + 0x70]
mov rdx, qword [rsp + 0x78]
mov rbx, r13
mov r13, qword [rsp + 0xd8]
mov r9, qword [rsp + 0xe0]
mov rcx, r15
mov r8, r13
call fcn.14000ce85
mov ebp, eax
mov rcx, qword [rsp + 0xd0]
mov rdx, r13
call fcn.14000ef97
mov rcx, qword [rsp + 0x68]
mov rdx, r15
call fcn.14000ef97
mov rcx, qword [rsp + 0x38]
mov rdx, rsi
call fcn.14000ef97
mov rcx, r12
mov qword [rsp + 0xb0], r14
mov rdx, r14
call fcn.14000ef97
test bpl, bpl
jne 0x14000d6c9
mov r8d, 0x208
mov rcx, rbx
xor edx, edx
call sub.VCRUNTIME140.dll_memset
mov rax, qword [rsp + 0xc8]
mov rcx, qword [rax]
mov rdx, qword [rsp + 0x30]
mov r8, rbx
mov r9d, 0x104
call sub.psapi.dll_GetModuleFileNameExW
test eax, eax
je 0x14000d781
mov edx, eax
mov rcx, rbx
lea r8, [0x140032fb8]
call fcn.140024178
mov r8, rdx
lea rcx, [rsp + 0x40]
mov rdx, rax
call fcn.14001c970
mov r12, qword [rsp + 0x40]
mov rsi, qword [rsp + 0x48]
mov r8, qword [rsp + 0x50]
mov rcx, rbx
mov rdx, rsi
call fcn.140007e20
cmp qword [rsp + 0xd0], 0
jne 0x14000d7e1
mov rdx, qword [rsp + 0xd8]
mov r8, qword [rsp + 0xe0]
lea rcx, [rsp + 0x68]
call fcn.14000d823
mov rcx, rbx
mov rdx, qword [rsp + 0x80]
mov r8, qword [rsp + 0x88]
call fcn.14000d823
mov r15, qword [rsp + 0x70]
mov rdx, qword [rsp + 0x78]
mov r14, rbx
mov r13, qword [rsp + 0xd8]
mov r9, qword [rsp + 0xe0]
mov rcx, r15
mov r8, r13
call fcn.14000ce85
mov ebp, eax
mov rcx, qword [rsp + 0xd0]
mov rdx, r13
call fcn.14000ef97
mov rcx, qword [rsp + 0x68]
mov rdx, r15
call fcn.14000ef97
mov rcx, r12
mov rdx, rsi
call fcn.14000ef97
test bpl, bpl
jne 0x14000d6c9
add rdi, 0xfffffffffffffff0
mov rbx, qword [rsp + 0xc0]
mov r13, r14
lea rbp, [rsp + 0x38]
jmp 0x14000d410
lea rcx, [rsp + 0x90]
call fcn.14000cfff
mov rcx, qword [rsp + 0x60]
call fcn.140024111
mov rax, qword [rsp + 0x30]
jmp 0x14000d700
lea rcx, [rsp + 0x90]
call fcn.14000cfff
mov rcx, qword [rsp + 0x60]
call fcn.140024111
xor eax, eax
add rsp, 0x2d8
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
call fcn.1400240fa
mov r15, rax
mov rcx, qword [rsp + 0x30]
mov rdx, r14
call fcn.1400240d2
xor eax, eax
lea r8, [rsp + 0xd0]
mov qword [r8], rax
mov qword [r8 + 8], r15
mov qword [r8 + 0x10], rbx
mov qword [r8 + 0x18], rdi
lea rax, [0x14002cca0]
jmp 0x14000d7c4
call fcn.1400240fa
lea r8, [rsp + 0xd0]
and qword [r8], 0
mov qword [r8 + 8], rax
mov rax, qword [rsp + 0xb0]
mov qword [r8 + 0x10], rax
mov rax, qword [rsp + 0xb8]
mov qword [r8 + 0x18], rax
lea rax, [0x14002ccb8]
jmp 0x14000d7c4
call fcn.1400240fa
mov qword [rsp + 0x40], rax
and qword [rsp + 0x38], 0
mov rax, qword [rsp + 0x58]
lea r8, [rsp + 0xd0]
mov qword [r8 + 0x20], rax
movups xmm0, xmmword [rsp + 0x48]
movaps xmmword [r8 + 0x10], xmm0
mov rax, qword [rsp + 0x38]
mov qword [r8], rax
mov rax, qword [rsp + 0x40]
mov qword [r8 + 8], rax
lea rax, [0x14002ccd0]
mov qword [rsp + 0x20], rax
lea rcx, str.called__Result::unwrap____on_an__Err__value
lea r9, [0x14002ca80]
mov edx, 0x2b
call fcn.140025330
lea rcx, str.called__Option::unwrap____on_a__None__value_rustc_07dca489ac2d933c78d3c5158e3f43beefeb02celibrarycore_srcio_borrowed_buf.rs_rustc_07dca489ac2d933c78d3c5158e3f43beefeb02celibrarycore_src_sliceiter.rs
lea r8, [0x14002cce8]
mov edx, 0x2b
call fcn.140025040
lea r8, str.C:Users_
mov rcx, r15
mov rdx, rsi
call fcn.140024fc0
mov eax, 4
jmp 0x14000d72b
mov ecx, 8
mov rdx, rsi
call fcn.140024db0
int3