Function at 0x1400089a1
Capabilities:
Enumerate process modules

Disassembly:
push rbp
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbx
sub rsp, 0x2e8
lea rbp, [rsp + 0x80]
mov qword [rbp + 0x260], 0xfffffffffffffffe
mov qword [rbp + 0x1f0], rdx
mov qword [rbp + 0x1f8], rcx
call qword [sym.imp.kernel32.dll_GetCurrentProcess]
lea rbx, [rbp + 0x1d0]
and dword [rbx], 0
mov rcx, rax
mov qword [rbp + 0x208], rax
xor eax, eax
mov qword [rbp + 0x210], rax
push 8
pop rsi
push 4
pop rax
mov qword [rbp + 0x258], rax
xor r14d, r14d
xor r15d, r15d
xor edi, edi
lea r8d, [r15*8]
mov dword [rsp + 0x20], 3
mov rdx, rsi
mov r9, rbx
call sub.psapi.dll_EnumProcessModulesEx
test eax, eax
je 0x140009230
mov r13d, dword [rbp + 0x1d0]
cmp r13d, edi
jbe 0x140008b0e
mov r12, r13
sub r12, r15
jbe 0x140008a97
mov rax, r14
sub rax, r15
cmp rax, r12
jae 0x140008a9c
mov rdi, r15
add rdi, r12
jb 0x140009323
lea rax, [r14 + r14]
cmp rax, rdi
cmova rdi, rax
xor edx, edx
mov rax, rdi
shr rax, 0x3c
sete al
cmp rdi, 5
push 4
pop rcx
cmovb rdi, rcx
test r14, r14
je 0x140008aa1
shl r14, 3
mov qword [rbp - 0x50], rsi
mov qword [rbp - 0x40], r14
push 8
pop rcx
jmp 0x140008aa3
mov r15, r13
jmp 0x140008aff
mov rdi, r14
jmp 0x140008ad9
xor ecx, ecx
lea r8, [rdi*8]
mov dl, al
shl edx, 3
mov qword [rbp - 0x48], rcx
lea rcx, [rbp + 0x218]
lea r9, [rbp - 0x50]
call fcn.14001ad58
cmp qword [rbp + 0x218], 0
jne 0x140009325
mov rsi, qword [rbp + 0x220]
lea rax, [rsi + r15*8]
push 1
pop rcx
cmp rcx, r12
jae 0x140008af5
and qword [rax], 0
inc rcx
add rax, 8
inc r15
jmp 0x140008ae0
and qword [rax], 0
inc r15
mov r14, rdi
mov rcx, qword [rbp + 0x208]
mov edi, r13d
jmp 0x140008a0d
mov edi, r13d
shr edi, 3
cmp r15, rdi
jb 0x140009346
mov r12d, eax
cmp r13d, 8
jae 0x140008b70
test rdi, rdi
je 0x140008bbb
cmp rdi, 5
push 4
pop r15
cmovae r15, rdi
mov r8, r15
shl r8, 4
lea r9, [rbp - 0x50]
and qword [r9 + 8], 0
lea rbx, [rbp + 0x218]
push 8
pop rdx
mov rcx, rbx
call fcn.14001ad58
cmp qword [rbx], 0
jne 0x14000939b
mov rbx, qword [rbp + 0x220]
jmp 0x140008bc1
mov r15, rdi
shl r15, 4
mov al, byte [0x140052c00]
mov rcx, r15
call fcn.140017100
test rax, rax
je 0x140009390
mov rbx, rax
add rax, 8
xor r13d, r13d
lea rcx, [rbp + 0x208]
mov rdx, qword [rsi + r13*8]
mov qword [rax - 8], rcx
mov qword [rax], rdx
inc r13
add rax, 0x10
cmp rdi, r13
jne 0x140008b9f
mov r15, rdi
jmp 0x140008bc4
push 8
pop rbx
xor r15d, r15d
xor r13d, r13d
mov rcx, r14
mov rdx, rsi
call fcn.14001b1eb
test r12d, r12d
je 0x14000924c
shl r13, 4
add r13, rbx
mov qword [rbp + 0x1d0], rbx
mov qword [rbp + 0x1d8], rbx
mov qword [rbp + 0x1e0], r15
mov qword [rbp + 0x1e8], r13
lea r14, [rbp - 0x50]
push 2
pop rdi
push 3
pop r15
cmp rbx, r13
je 0x140009202
lea rax, [rbx + 0x10]
mov qword [rbp + 0x1d8], rax
mov r12, qword [rbx]
mov rsi, qword [rbx + 8]
mov r8d, 0x208
mov rcx, r14
xor edx, edx
call fcn.140029660
mov rcx, qword [r12]
mov rdx, rsi
mov r8, r14
mov r9d, 0x104
call sub.psapi.dll_GetModuleBaseNameW
test eax, eax
je 0x140009272
mov qword [rbp + 0x1c0], r12
mov qword [rbp + 0x210], rsi
mov edx, eax
mov rcx, r14
lea r8, str.C:Users_notev.cargo_registry_srcindex.crates.io_6f17d22bba15001fwinproc_0.6.4_srcprocessmodule.rs
call fcn.14001b281
mov r8, rdx
lea rcx, [rbp + 0x218]
mov rdx, rax
call fcn.140015040
mov rcx, qword [rbp + 0x220]
mov r13, qword [rbp + 0x228]
test r13, r13
je 0x140008d3a
lea rbx, [rcx + r13]
xor esi, esi
mov qword [rbp + 0x258], rcx
push 1
pop r12
lea rax, [rcx + 1]
mov dl, byte [rcx]
test dl, dl
js 0x140008cb6
mov rdx, r12
jmp 0x140008d22
cmp dl, 0xe0
jae 0x140008ccb
add rcx, 2
cmp rax, rbx
cmovne rax, rcx
mov rdx, rdi
jmp 0x140008d22
cmp dl, 0xed
jne 0x140008cf4
cmp rax, rbx
je 0x140008d31
lea rax, [rcx + 2]
cmp rax, rbx
je 0x140008d31
cmp byte [rcx + 1], 0x9f
ja 0x140008f61
add rcx, 3
mov rdx, r15
mov rax, rcx
jmp 0x140008d22
add rcx, 2
cmp rax, rbx
cmove rcx, rax
xor eax, eax
cmp rcx, rbx
setne al
add rax, rcx
cmp dl, 0xf0
jae 0x140008d14
mov rdx, r15
jmp 0x140008d22
xor ecx, ecx
cmp rax, rbx
setne cl
add rax, rcx
push 4
pop rdx
add rsi, rdx
mov rcx, rax
cmp rax, rbx
jne 0x140008ca7
mov r12, qword [rbp + 0x258]
jmp 0x140008d3d
mov r12, rcx
lea rcx, [rbp + 0x240]
mov rdx, r13
call fcn.14001ae84
cmp qword [rbp + 0x240], 0
mov rsi, qword [rbp + 0x248]
jne 0x1400092a2
mov rdi, qword [rbp + 0x250]
mov rcx, rdi
mov rdx, r12
mov r8, r13
call fcn.140028ee0
mov r12, rdi
mov rcx, qword [rbp + 0x218]
mov rdx, qword [rbp + 0x220]
call fcn.14001aeea
lea rcx, [rbp + 0x218]
mov rdx, r12
mov qword [rbp + 0x200], r13
mov r8, r13
call fcn.140003080
mov rdi, qword [rbp + 0x220]
mov r8, qword [rbp + 0x228]
lea rcx, [rbp + 0x240]
mov rdx, rdi
call fcn.14000a91a
mov rcx, r14
mov rdx, qword [rbp + 0x1f8]
mov r8, qword [rbp + 0x1f0]
call fcn.14000a91a
mov r13, qword [rbp + 0x248]
mov rdx, qword [rbp + 0x250]
mov r15, r14
mov r14, qword [rbp - 0x48]
mov r9, qword [rbp - 0x40]
mov rcx, r13
mov r8, r14
call fcn.14000845f
mov ebx, eax
mov rcx, qword [rbp - 0x50]
mov rdx, r14
call fcn.14001aeea
mov rcx, qword [rbp + 0x240]
mov rdx, r13
call fcn.14001aeea
mov rcx, qword [rbp + 0x218]
mov rdx, rdi
call fcn.14001aeea
mov rcx, rsi
mov qword [rbp + 0x258], r12
mov rdx, r12
call fcn.14001aeea
test bl, bl
jne 0x1400091e1
mov r8d, 0x208
mov rcx, r15
xor edx, edx
call fcn.140029660
mov rax, qword [rbp + 0x1c0]
mov rcx, qword [rax]
mov rdx, qword [rbp + 0x210]
mov r8, r15
mov r9d, 0x104
call sub.psapi.dll_GetModuleFileNameExW
test eax, eax
je 0x1400092bd
mov edx, eax
mov rcx, r15
lea r8, str.C:Users_notev.cargo_registry_srcindex.crates.io_6f17d22bba15001fwinproc_0.6.4_srcprocessmodule.rs
call fcn.14001b281
mov r8, rdx
lea rcx, [rbp + 0x220]
mov rdx, rax
call fcn.140015040
mov rsi, qword [rbp + 0x220]
mov rdi, qword [rbp + 0x228]
mov r8, qword [rbp + 0x230]
mov rcx, r15
mov rdx, rdi
call fcn.140004e40
cmp qword [rbp - 0x50], 0
jne 0x1400092b1
mov rdx, qword [rbp - 0x48]
mov r8, qword [rbp - 0x40]
lea rcx, [rbp + 0x218]
call fcn.14000a91a
mov rcx, r15
mov rdx, qword [rbp + 0x1f8]
mov r8, qword [rbp + 0x1f0]
call fcn.14000a91a
mov rbx, qword [rbp + 0x220]
mov rdx, qword [rbp + 0x228]
mov r14, qword [rbp - 0x48]
mov r9, qword [rbp - 0x40]
mov rcx, rbx
mov r8, r14
call fcn.14000845f
mov r13d, eax
mov rcx, qword [rbp - 0x50]
mov rdx, r14
call fcn.14001aeea
mov rcx, qword [rbp + 0x218]
mov rdx, rbx
call fcn.14001aeea
mov rcx, rsi
mov rdx, rdi
call fcn.14001aeea
test r13b, r13b
jne 0x1400091e1
mov rbx, qword [rbp + 0x1d8]
mov r13, qword [rbp + 0x1e8]
mov r14, r15
push 2
pop rdi
push 3
pop r15
jmp 0x140008c06
test r13, r13
js 0x14000938b
mov al, byte [0x140052c00]
mov rcx, r13
call fcn.140017100
test rax, rax
mov rdx, qword [rbp + 0x258]
je 0x140009380
mov qword [rbp + 0x240], r13
mov qword [rbp + 0x248], rax
mov r15, r13
sub r13, rsi
jb 0x14000936c
mov rcx, rax
mov r8, rsi
mov rdi, rax
call fcn.140028ee0
mov rcx, rdi
mov qword [rbp + 0x250], rsi
mov rdi, rsi
cmp r13, 2
lea r14, [rbp - 0x50]
ja 0x140008fe8
lea rcx, [rbp + 0x240]
mov rdx, rsi
push 3
pop r8
call fcn.14002aa00
mov rcx, qword [rbp + 0x248]
mov rdi, qword [rbp + 0x250]
lea rax, [rcx + rdi]
mov byte [rax + 2], 0xbd
mov word [rax], 0xbfef
add rdi, 3
mov qword [rbp + 0x250], rdi
mov r13, rsi
add r13, 3
cmp r13, r15
ja 0x140009358
je 0x140009163
mov rax, qword [rbp + 0x258]
lea r8, [rax + r13]
mov rsi, r13
mov qword [rbp + 0x200], r8
lea rax, [r8 + 1]
mov dl, byte [r8]
test dl, dl
js 0x14000903b
mov rdx, r12
jmp 0x14000907c
cmp dl, 0xe0
jae 0x140009050
add r8, 2
cmp rax, rbx
cmovne rax, r8
push 2
pop rdx
jmp 0x14000907c
cmp dl, 0xed
jne 0x14000908c
cmp rax, rbx
je 0x140009166
lea rax, [r8 + 2]
cmp rax, rbx
je 0x140009166
cmp byte [r8 + 1], 0x9f
ja 0x1400090ba
add r8, 3
push 3
pop rdx
mov rax, r8
add rsi, rdx
mov r8, rax
cmp rax, rbx
jne 0x14000902b
jmp 0x140009166
add r8, 2
cmp rax, rbx
cmove r8, rax
xor eax, eax
cmp r8, rbx
setne al
add rax, r8
cmp dl, 0xf0
jae 0x1400090ab
push 3
jmp 0x14000904d
xor edx, edx
cmp rax, rbx
setne dl
add rax, rdx
push 4
jmp 0x14000904d
mov r8, rsi
sub r8, r13
jb 0x1400093ae
cmp rsi, r15
ja 0x1400093c2
mov r14, qword [rbp + 0x240]
mov rax, r14
sub rax, rdi
cmp rax, r8
jae 0x14000910b
lea rcx, [rbp + 0x240]
mov rdx, rdi
mov r13, r8
call fcn.14002aa00
mov rdi, qword [rbp + 0x250]
mov r14, qword [rbp + 0x240]
mov rcx, qword [rbp + 0x248]
mov r8, r13
mov qword [rbp + 0x1c8], rcx
add rcx, rdi
mov rdx, qword [rbp + 0x200]
mov r13, r8
call fcn.140028ee0
add rdi, r13
mov qword [rbp + 0x250], rdi
sub r14, rdi
cmp r14, 2
jbe 0x140009147
lea r14, [rbp - 0x50]
mov rcx, qword [rbp + 0x1c8]
jmp 0x140008fe8
lea rcx, [rbp + 0x240]
mov rdx, rdi
push 3
pop r8
call fcn.14002aa00
lea r14, [rbp - 0x50]
jmp 0x140008fda
mov r13, r15
sub r15, r13
mov rax, qword [rbp + 0x240]
sub rax, rdi
cmp rax, r15
jae 0x14000919d
lea rcx, [rbp + 0x240]
mov rdx, rdi
mov rsi, r15
mov r8, r15
call fcn.14002aa00
mov rcx, qword [rbp + 0x248]
mov rdi, qword [rbp + 0x250]
jmp 0x1400091a0
mov rsi, r15
mov rdx, qword [rbp + 0x258]
add rdx, r13
add rcx, rdi
mov r13, rsi
mov r8, rsi
call fcn.140028ee0
add r13, rdi
mov rsi, qword [rbp + 0x240]
mov r12, qword [rbp + 0x248]
movabs rax, 0x8000000000000000
cmp rsi, rax
je 0x140008d3d
jmp 0x140008d79
lea rcx, [rbp + 0x1d0]
call fcn.140008612
mov rcx, qword [rbp + 0x208]
call fcn.14001b21a
mov rax, qword [rbp + 0x210]
jmp 0x14000921c
lea rcx, [rbp + 0x1d0]
call fcn.140008612
mov rcx, qword [rbp + 0x208]
call fcn.14001b21a
xor eax, eax
add rsp, 0x2e8
pop rbx
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
pop rbp
ret
call fcn.14001b203
mov r15, rax
mov rcx, r14
mov rdx, rsi
call fcn.14001b1eb
xor eax, eax
mov qword [rbp + 0x258], rax
lea r8, [rbp - 0x50]
mov rax, qword [rbp + 0x258]
mov qword [r8], rax
mov qword [r8 + 8], r15
mov qword [r8 + 0x10], rbx
mov qword [r8 + 0x18], r13
lea rax, str.C:Users_notev.cargo_registry_srcindex.crates.io_6f17d22bba15001fdinvoke_0.1.4_srclib.rs
jmp 0x140009308
call fcn.14001b203
lea r8, [rbp - 0x50]
and qword [r8], 0
mov qword [r8 + 8], rax
mov rax, qword [rbp + 0x258]
mov qword [r8 + 0x10], rax
mov rax, qword [rbp + 0x200]
mov qword [r8 + 0x18], rax
lea rax, str.C:Users_notev.cargo_registry_srcindex.crates.io_6f17d22bba15001fdinvoke_0.1.4_srclib.rs
jmp 0x140009308
mov rdx, qword [rbp + 0x250]
mov rcx, rsi
call fcn.1400299f0
lea rcx, str.C:Users_notev.cargo_registry_srcindex.crates.io_6f17d22bba15001fdinvoke_0.1.4_srclib.rs
call fcn.140029e40
call fcn.14001b203
mov qword [rbp + 0x220], rax
and qword [rbp + 0x218], 0
mov rax, qword [rbp + 0x238]
lea r8, [rbp - 0x50]
mov qword [r8 + 0x20], rax
movups xmm0, xmmword [rbp + 0x228]
movaps xmmword [r8 + 0x10], xmm0
mov rax, qword [rbp + 0x218]
mov qword [r8], rax
mov rax, qword [rbp + 0x220]
mov qword [r8 + 8], rax
lea rax, str.C:Users_notev.cargo_registry_srcindex.crates.io_6f17d22bba15001fdinvoke_0.1.4_srclib.rs
mov qword [rsp + 0x20], rax
lea rcx, str.called__Result::unwrap____on_an__Err__value
lea r9, [0x1400425a0]
push 0x2b
pop rdx
call fcn.140029db0
jmp 0x14000933a
mov rax, qword [rbp + 0x220]
mov qword [rbp + 0x210], rax
mov rdx, qword [rbp + 0x228]
mov rcx, qword [rbp + 0x210]
call fcn.1400299f0
lea r8, str.C:Users_notev.cargo_registry_srcindex.crates.io_6f17d22bba15001fwinproc_0.6.4_srcprocessmod.rs
mov rcx, rdi
mov rdx, r15
call fcn.140029b90
lea r8, str.library_std_src_sys_commonwtf8.rs
mov rcx, r13
mov rdx, r15
call fcn.140029b10
jmp 0x1400093d4
lea r8, str.library_std_src_sys_commonwtf8.rs
mov rcx, rsi
mov rdx, r15
call fcn.140029b90
jmp 0x1400093d4
push 1
pop rcx
mov rdx, r13
call fcn.1400299f0
call fcn.140002b60
push 8
pop rcx
mov rdx, r15
call fcn.1400299f0
mov rcx, qword [rbp + 0x220]
mov rdx, qword [rbp + 0x228]
call fcn.1400299f0
lea r8, str.library_std_src_sys_commonwtf8.rs
mov rcx, r13
mov rdx, rsi
call fcn.140029d40
jmp 0x1400093d4
mov rdx, r15
lea r8, str.library_std_src_sys_commonwtf8.rs
mov rcx, rsi
call fcn.140029b90
ud2