Function at 0x140007dda
Capabilities:
Enumerate process modules

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x2d8
mov qword [rsp + 0x58], rdx
mov qword [rsp + 0x30], rcx
lea r15, [rsp + 0x78]
and dword [r15], 0
xor r14d, r14d
mov esi, 8
lea r13, [rsp + 0xd0]
xor r12d, r12d
xor ebp, ebp
mov edi, ebp
mov rbp, r14
mov r14, rbp
mov rcx, 0xffffffffffffffff
mov rdx, rsi
mov r8d, ebp
mov r9, r15
call sub.psapi.dll_EnumProcessModules
test eax, eax
je 0x140008255
mov ebp, dword [rsp + 0x78]
cmp ebp, edi
jbe 0x140007f31
mov rbx, rbp
mov edi, ebp
sub rbx, r14
jbe 0x140007e1a
mov rax, r12
sub rax, r14
cmp rax, rbx
jae 0x140007f07
mov rdi, r14
add rdi, rbx
jae 0x140007e6e
xor ecx, ecx
jmp 0x140007eff
lea rax, [r12 + r12]
cmp rax, rdi
cmova rdi, rax
cmp rdi, 5
mov eax, 4
cmovb rdi, rax
xor edx, edx
mov rax, rdi
shr rax, 0x3c
sete al
test r12, r12
je 0x140007eb6
lea rcx, [r12*8]
mov qword [rsp + 0xd0], rsi
mov qword [rsp + 0xe0], rcx
mov ecx, 8
jmp 0x140007eb8
xor ecx, ecx
lea r8, [rdi*8]
mov dl, al
shl rdx, 3
mov qword [rsp + 0xd8], rcx
lea rcx, [rsp + 0x38]
mov r9, r13
call fcn.14001a3c9
cmp qword [rsp + 0x38], 0
mov rcx, qword [rsp + 0x40]
je 0x140007eef
mov rdi, qword [rsp + 0x48]
jmp 0x140007eff
mov rsi, rcx
mov r12, rdi
movabs rcx, 0x8000000000000001
mov rdx, rdi
call fcn.14001a3a1
lea rax, [rsi + r14*8]
mov ecx, 1
cmp rcx, rbx
jae 0x140007f25
and qword [rax], 0
inc rcx
add rax, 8
inc r14
jmp 0x140007f10
and qword [rax], 0
inc r14
jmp 0x140007e15
movabs rbx, 0x8000000000000000
cmp r12, rbx
je 0x14000826a
lea rax, [rsi + r14*8]
mov qword [rsp + 0x78], rsi
mov qword [rsp + 0x80], rsi
mov qword [rsp + 0x88], r12
mov qword [rsp + 0x90], rax
shl r14, 3
lea rbp, [rsp + 0xd0]
lea r13, [rsp + 0x38]
lea r12, [rsp + 0xb8]
mov rdi, qword [rsp + 0x58]
mov r15, qword [rsp + 0x30]
test r14, r14
je 0x140008217
lea rax, [rsi + 8]
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x80], rax
mov rsi, qword [rsi]
mov r8d, 0x208
mov rcx, rbp
xor edx, edx
call fcn.14001b040
mov rcx, 0xffffffffffffffff
mov rdx, rsi
mov r8, rbp
mov r9d, 0x104
call sub.psapi.dll_GetModuleBaseNameW
test eax, eax
je 0x14000801c
mov edx, eax
mov rcx, rbp
lea r8, str.C:UsersAdministrator.cargo_registry_srcindex.crates.io_6f17d22bba15001fdinvoke_0.2.0_src_lib.rs
call fcn.1400094a2
mov r8, rdx
mov rcx, r13
mov rdx, rax
call fcn.140013c90
mov rdx, qword [rsp + 0x40]
mov r8, qword [rsp + 0x48]
mov rcx, r12
call fcn.140017480
lea rcx, [rsp + 0xa0]
mov rdx, r12
call fcn.1400078fa
mov rcx, r13
call fcn.1400029e0
jmp 0x140008030
call fcn.140009418
mov dword [rsp + 0xa8], eax
mov qword [rsp + 0xa0], rbx
mov r8d, 0x208
mov rcx, rbp
xor edx, edx
call fcn.14001b040
mov rcx, 0xffffffffffffffff
mov rdx, rsi
mov r8, rbp
mov r9d, 0x104
call sub.psapi.dll_GetModuleFileNameExW
test eax, eax
je 0x1400080a9
mov edx, eax
mov rcx, rbp
lea r8, str.C:UsersAdministrator.cargo_registry_srcindex.crates.io_6f17d22bba15001fdinvoke_0.2.0_src_lib.rs
call fcn.1400094a2
mov r8, rdx
mov rcx, r13
mov rdx, rax
call fcn.140013c90
mov rdx, qword [rsp + 0x40]
mov r8, qword [rsp + 0x48]
mov rcx, r12
call fcn.140017480
lea rcx, [rsp + 0x60]
mov rdx, r12
call fcn.1400078fa
mov rcx, r13
call fcn.1400029e0
mov rax, qword [rsp + 0x60]
jmp 0x1400080ba
call fcn.140009418
mov dword [rsp + 0x68], eax
mov qword [rsp + 0x60], rbx
mov rax, rbx
cmp qword [rsp + 0xa0], rbx
je 0x1400081f2
cmp rax, rbx
je 0x1400081f2
mov qword [rsp + 0x98], rsi
mov rsi, r13
mov r13, r12
mov r12, rbp
mov rcx, rsi
lea rdx, [rsp + 0xa0]
lea r8, str.C:UsersAdministrator.cargo_registry_srcindex.crates.io_6f17d22bba15001fdinvoke_0.2.0_src_lib.rs
call fcn.1400094cb
mov rdx, qword [rsp + 0x40]
mov r8, qword [rsp + 0x48]
mov rcx, r13
call fcn.14000951c
mov rcx, rbp
mov rdx, r15
mov r8, rdi
call fcn.14000951c
mov rcx, qword [rsp + 0xc0]
mov rdx, qword [rsp + 0xc8]
mov r8, qword [rsp + 0xd8]
mov r9, qword [rsp + 0xe0]
call fcn.1400078d5
mov ebx, eax
mov rcx, rbp
call fcn.1400029e0
mov rcx, r13
call fcn.1400029e0
mov rcx, rsi
call fcn.1400029e0
test bl, bl
jne 0x140008225
mov rcx, rsi
lea rdx, [rsp + 0x60]
lea r8, str.C:UsersAdministrator.cargo_registry_srcindex.crates.io_6f17d22bba15001fdinvoke_0.2.0_src_lib.rs
call fcn.1400094cb
mov rdx, qword [rsp + 0x40]
mov r8, qword [rsp + 0x48]
mov rcx, r13
call fcn.14000951c
mov rcx, r12
mov rdx, r15
mov r8, rdi
call fcn.14000951c
mov rcx, qword [rsp + 0xc0]
mov rdx, qword [rsp + 0xc8]
mov r8, qword [rsp + 0xd8]
mov r9, qword [rsp + 0xe0]
call fcn.1400078d5
mov edi, eax
mov rbp, r12
mov rcx, r12
call fcn.1400029e0
mov r12, r13
mov rcx, r13
call fcn.1400029e0
mov r13, rsi
mov rcx, rsi
call fcn.1400029e0
test dil, dil
jne 0x14000822f
mov rdi, qword [rsp + 0x58]
movabs rbx, 0x8000000000000000
jmp 0x140008209
lea rcx, [rsp + 0x60]
call fcn.140009585
lea rcx, [rsp + 0xa0]
call fcn.140009585
add r14, 0xfffffffffffffff8
mov rsi, qword [rsp + 0x30]
jmp 0x140007f88
lea rcx, [rsp + 0x78]
call fcn.140007a79
xor eax, eax
jmp 0x140008241
lea rcx, [rsp + 0x60]
call fcn.140009585
lea rcx, [rsp + 0x78]
call fcn.140007a79
mov rax, qword [rsp + 0x98]
add rsp, 0x2d8
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
call fcn.140009418
mov edi, eax
mov rcx, r12
mov rdx, rsi
call fcn.1400072cd
mov rsi, rdi
lea r8, [rsp + 0xd0]
mov dword [r8], esi
lea rax, str.C:UsersAdministrator.cargo_registry_srcindex.crates.io_6f17d22bba15001fdinvoke_0.2.0_src_lib.rs
mov qword [rsp + 0x20], rax
lea rcx, str.called__Result::unwrap____on_an__Err__value
lea r9, [0x1400300d0]
mov edx, 0x2b
call fcn.1400290c0
int3