Function at 0x14000a738
Capabilities:
Enumerate process modules

Disassembly:
push rbp
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbx
sub rsp, 0x2e8
lea rbp, [rsp + 0x80]
mov qword [rbp + 0x260], 0xfffffffffffffffe
mov qword [rbp + 0x1e8], rdx
mov qword [rbp + 0x1f0], rcx
call qword [sym.imp.kernel32.dll_GetCurrentProcess]
lea rcx, [rbp + 0x1c8]
and dword [rcx], 0
mov r14, rax
mov qword [rbp + 0x1f8], rax
xor eax, eax
mov qword [rbp + 0x238], rax
push 8
pop rdi
push 4
pop rax
mov qword [rbp + 0x230], rax
xor esi, esi
xor r13d, r13d
mov ebx, r13d
mov r13, rsi
mov rsi, r13
lea r8d, [r13*8]
mov dword [rsp + 0x20], 3
mov rcx, r14
mov rdx, rdi
lea r9, [rbp + 0x1c8]
call sub.psapi.dll_EnumProcessModulesEx
test eax, eax
je 0x14000af70
mov r13d, dword [rbp + 0x1c8]
cmp r13d, ebx
jbe 0x14000a8d5
mov r15, r13
mov ebx, r13d
sub r15, rsi
jbe 0x14000a7a7
mov rbx, qword [rbp + 0x238]
mov rax, rbx
sub rax, rsi
cmp rax, r15
jae 0x14000a8a6
mov r12, rsi
add r12, r15
jae 0x14000a814
xor ecx, ecx
jmp 0x14000a89e
lea rax, [rbx + rbx]
cmp rax, r12
cmova r12, rax
cmp r12, 5
push 4
pop rax
cmovb r12, rax
xor edx, edx
mov rax, r12
shr rax, 0x3c
sete al
test rbx, rbx
je 0x14000a850
lea rcx, [rbx*8]
mov qword [rbp - 0x50], rdi
mov qword [rbp - 0x40], rcx
push 8
pop rcx
jmp 0x14000a852
xor ecx, ecx
lea r8, [r12*8]
mov dl, al
shl rdx, 3
mov qword [rbp - 0x48], rcx
lea rcx, [rbp + 0x208]
lea r9, [rbp - 0x50]
call fcn.14001ccb4
cmp qword [rbp + 0x208], 0
mov rcx, qword [rbp + 0x210]
je 0x14000a88e
mov r12, qword [rbp + 0x218]
jmp 0x14000a89e
mov rbx, r12
mov rdi, rcx
movabs rcx, 0x8000000000000001
mov rdx, r12
call fcn.14001cc8c
lea rax, [rdi + rsi*8]
push 1
pop rcx
cmp rcx, r15
jae 0x14000a8c2
and qword [rax], 0
inc rcx
add rax, 8
inc rsi
jmp 0x14000a8ad
mov qword [rbp + 0x238], rbx
and qword [rax], 0
inc rsi
jmp 0x14000a7a1
mov ebx, r13d
shr ebx, 3
cmp rsi, rbx
jb 0x14000b062
mov r12d, eax
cmp r13d, 8
jae 0x14000a8f5
push 8
pop r13
xor esi, esi
jmp 0x14000a93d
mov r14, rbx
shl r14, 4
mov al, byte [0x14002f218]
push 8
pop rdx
mov rcx, r14
call fcn.1400049f0
test rax, rax
je 0x14000b0ac
mov r13, rax
add rax, 8
xor esi, esi
lea rcx, [rbp + 0x1f8]
mov rdx, qword [rdi + rsi*8]
mov qword [rax - 8], rcx
mov qword [rax], rdx
inc rsi
add rax, 0x10
cmp rbx, rsi
jne 0x14000a926
mov rcx, qword [rbp + 0x238]
mov rdx, rdi
call fcn.14001d895
test r12d, r12d
je 0x14000af90
shl rsi, 4
add rsi, r13
mov qword [rbp + 0x1c8], r13
mov qword [rbp + 0x1d0], rbx
mov qword [rbp + 0x1d8], r13
mov qword [rbp + 0x1e0], rsi
lea r14, [rbp - 0x50]
push 1
pop rdi
mov qword [rbp + 0x1c0], rsi
cmp r13, rsi
je 0x14000af42
lea rbx, [r13 + 0x10]
mov qword [rbp + 0x1d8], rbx
mov r12, qword [r13]
mov rsi, qword [r13 + 8]
mov r8d, 0x208
mov rcx, r14
xor edx, edx
call sub.VCRUNTIME140.dll_memset
mov qword [rbp + 0x230], r12
mov rcx, qword [r12]
mov rdx, rsi
mov r8, r14
mov r9d, 0x104
call sub.psapi.dll_GetModuleBaseNameW
test eax, eax
je 0x14000afb6
mov qword [rbp + 0x1b8], rbx
mov qword [rbp + 0x238], rsi
mov edx, eax
mov rcx, r14
lea r8, [0x14002b248]
call fcn.14001d92b
mov r8, rdx
lea rcx, [rbp + 0x208]
mov rdx, rax
call fcn.140017700
mov r13, qword [rbp + 0x210]
mov r12, qword [rbp + 0x218]
test r12, r12
je 0x14000ad23
lea rbx, [r12 + r13]
xor esi, esi
mov rcx, r13
lea rax, [rcx + 1]
mov dl, byte [rcx]
test dl, dl
js 0x14000aa36
mov rdx, rdi
jmp 0x14000aa76
cmp dl, 0xe0
jae 0x14000aa4b
add rcx, 2
cmp rax, rbx
cmovne rax, rcx
push 2
pop rdx
jmp 0x14000aa76
cmp dl, 0xed
jne 0x14000aa86
cmp rax, rbx
je 0x14000ad23
lea rax, [rcx + 2]
cmp rax, rbx
je 0x14000ad23
cmp byte [rcx + 1], 0x9f
ja 0x14000aab4
add rcx, 3
push 3
pop rdx
mov rax, rcx
add rsi, rdx
mov rcx, rax
cmp rax, rbx
jne 0x14000aa27
jmp 0x14000ad23
add rcx, 2
cmp rax, rbx
cmove rcx, rax
xor eax, eax
cmp rcx, rbx
setne al
add rax, rcx
cmp dl, 0xf0
jae 0x14000aaa5
push 3
jmp 0x14000aa48
xor ecx, ecx
cmp rax, rbx
setne cl
add rax, rcx
push 4
jmp 0x14000aa48
test r12, r12
js 0x14000b0a7
mov al, byte [0x14002f218]
mov rcx, r12
mov rdx, rdi
call fcn.1400049f0
test rax, rax
je 0x14000b09c
mov qword [rbp + 0x248], r12
mov qword [rbp + 0x250], rax
mov rdi, r12
sub rdi, rsi
jb 0x14000b088
mov rcx, rax
mov rdx, r13
mov qword [rbp + 0x240], rax
mov r8, rsi
call sub.VCRUNTIME140.dll_memcpy
mov rcx, qword [rbp + 0x240]
mov qword [rbp + 0x258], rsi
mov r9, rsi
cmp rdi, 2
ja 0x14000ab3e
lea rcx, [rbp + 0x248]
mov rdx, rsi
push 3
pop r8
call fcn.14001f890
mov rcx, qword [rbp + 0x250]
mov r9, qword [rbp + 0x258]
lea rax, [rcx + r9]
mov byte [rax + 2], 0xbd
mov word [rax], 0xbfef
add r9, 3
mov qword [rbp + 0x258], r9
mov rdi, rsi
add rdi, 3
cmp rdi, r12
ja 0x14000b074
je 0x14000acb7
lea r15, [rdi + r13]
mov rsi, rdi
mov r8, r15
lea rax, [r8 + 1]
mov dl, byte [r8]
test dl, dl
js 0x14000ab85
push 1
jmp 0x14000ab97
cmp dl, 0xe0
jae 0x14000aba8
add r8, 2
cmp rax, rbx
cmovne rax, r8
push 2
pop rdx
add rsi, rdx
mov r8, rax
cmp rax, rbx
jne 0x14000ab76
jmp 0x14000acba
cmp dl, 0xed
jne 0x14000abd6
cmp rax, rbx
je 0x14000acba
lea rax, [r8 + 2]
cmp rax, rbx
je 0x14000acba
cmp byte [r8 + 1], 0x9f
ja 0x14000ac04
add r8, 3
push 3
pop rdx
mov rax, r8
jmp 0x14000ab98
add r8, 2
cmp rax, rbx
cmove r8, rax
xor eax, eax
cmp r8, rbx
setne al
add rax, r8
cmp dl, 0xf0
jae 0x14000abf5
push 3
jmp 0x14000ab97
xor edx, edx
cmp rax, rbx
setne dl
add rax, rdx
push 4
jmp 0x14000ab97
mov r8, rsi
sub r8, rdi
jb 0x14000b0cb
cmp rsi, r12
ja 0x14000b0b7
mov rdi, qword [rbp + 0x248]
mov rax, rdi
sub rax, r9
cmp rax, r8
jae 0x14000ac5d
lea rcx, [rbp + 0x248]
mov rdx, r9
mov qword [rbp + 0x240], r8
call fcn.14001f890
mov r9, qword [rbp + 0x258]
mov rdi, qword [rbp + 0x248]
mov rcx, qword [rbp + 0x250]
mov r8, qword [rbp + 0x240]
mov qword [rbp + 0x200], r9
mov qword [rbp + 0x240], rcx
add rcx, r9
mov rdx, r15
mov r15, r8
call sub.VCRUNTIME140.dll_memcpy
mov r9, qword [rbp + 0x200]
add r9, r15
mov qword [rbp + 0x258], r9
sub rdi, r9
cmp rdi, 2
jbe 0x14000ac9f
mov rcx, qword [rbp + 0x240]
jmp 0x14000ab3e
lea rcx, [rbp + 0x248]
mov rdx, r9
push 3
pop r8
call fcn.14001f890
jmp 0x14000ab30
mov rdi, r12
sub r12, rdi
mov rax, qword [rbp + 0x248]
sub rax, r9
cmp rax, r12
jae 0x14000acec
lea rcx, [rbp + 0x248]
mov rdx, r9
mov r8, r12
call fcn.14001f890
mov rcx, qword [rbp + 0x250]
mov r9, qword [rbp + 0x258]
add r13, rdi
add rcx, r9
mov rdx, r13
mov r8, r12
mov rsi, r9
call sub.VCRUNTIME140.dll_memcpy
add r12, rsi
mov rdi, qword [rbp + 0x248]
mov r13, qword [rbp + 0x250]
mov r15, r13
movabs rax, 0x8000000000000000
cmp rdi, rax
jne 0x14000ad3f
mov rcx, r12
call fcn.14001cd90
mov rdi, rax
mov r15, rdx
mov rcx, rdx
mov rdx, r13
mov r8, r12
call sub.VCRUNTIME140.dll_memcpy
mov rcx, qword [rbp + 0x208]
mov rdx, qword [rbp + 0x210]
call fcn.14001cdd5
lea rcx, [rbp + 0x208]
mov rdx, r15
mov qword [rbp + 0x240], r12
mov r8, r12
call fcn.1400051d0
mov r13, qword [rbp + 0x210]
mov r8, qword [rbp + 0x218]
lea rcx, [rbp + 0x248]
mov rdx, r13
call fcn.14000b126
mov rcx, r14
mov rdx, qword [rbp + 0x1f0]
mov r8, qword [rbp + 0x1e8]
call fcn.14000b126
mov rsi, qword [rbp + 0x250]
mov rdx, qword [rbp + 0x258]
mov rbx, qword [rbp - 0x48]
mov r9, qword [rbp - 0x40]
mov rcx, rsi
mov r8, rbx
call fcn.14000a3e5
mov r12d, eax
mov rcx, qword [rbp - 0x50]
mov rdx, rbx
call fcn.14001cdd5
mov rcx, qword [rbp + 0x248]
mov rdx, rsi
call fcn.14001cdd5
mov rcx, qword [rbp + 0x208]
mov rdx, r13
call fcn.14001cdd5
mov rcx, rdi
mov qword [rbp + 0x200], r15
mov rdx, r15
call fcn.14001cdd5
test r12b, r12b
jne 0x14000af21
mov r8d, 0x208
mov rcx, r14
xor edx, edx
call sub.VCRUNTIME140.dll_memset
mov rax, qword [rbp + 0x230]
mov rcx, qword [rax]
mov rdx, qword [rbp + 0x238]
mov r8, r14
mov r9d, 0x104
call sub.psapi.dll_GetModuleFileNameExW
test eax, eax
je 0x14000affc
mov edx, eax
mov rcx, r14
lea r8, [0x14002b260]
call fcn.14001d92b
mov r8, rdx
lea rcx, [rbp + 0x210]
mov rdx, rax
call fcn.140017700
mov rdi, qword [rbp + 0x210]
mov r13, qword [rbp + 0x218]
mov r8, qword [rbp + 0x220]
mov rcx, r14
mov rdx, r13
call fcn.140006d40
cmp qword [rbp - 0x50], 0
jne 0x14000afe6
mov rdx, qword [rbp - 0x48]
mov r8, qword [rbp - 0x40]
lea rcx, [rbp + 0x248]
call fcn.14000b126
mov rcx, r14
mov rdx, qword [rbp + 0x1f0]
mov r8, qword [rbp + 0x1e8]
call fcn.14000b126
mov rbx, qword [rbp + 0x250]
mov rdx, qword [rbp + 0x258]
mov rsi, r14
mov r14, qword [rbp - 0x48]
mov r9, qword [rbp - 0x40]
mov rcx, rbx
mov r8, r14
call fcn.14000a3e5
mov r12d, eax
mov rcx, qword [rbp - 0x50]
mov rdx, r14
call fcn.14001cdd5
mov rcx, qword [rbp + 0x248]
mov rdx, rbx
call fcn.14001cdd5
mov rcx, rdi
mov rdx, r13
call fcn.14001cdd5
test r12b, r12b
jne 0x14000af21
mov r13, qword [rbp + 0x1b8]
mov r14, rsi
push 1
pop rdi
mov rsi, qword [rbp + 0x1c0]
jmp 0x14000a986
lea rcx, [rbp + 0x1c8]
call fcn.14000a55f
mov rcx, qword [rbp + 0x1f8]
call fcn.14001d8c4
mov rax, qword [rbp + 0x238]
jmp 0x14000af5c
lea rcx, [rbp + 0x1c8]
call fcn.14000a55f
mov rcx, qword [rbp + 0x1f8]
call fcn.14001d8c4
xor eax, eax
add rsp, 0x2e8
pop rbx
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
pop rbp
ret
call fcn.14001d8ad
mov rbx, rax
mov rcx, qword [rbp + 0x238]
mov rdx, rdi
call fcn.14001d895
xor eax, eax
mov qword [rbp + 0x230], rax
lea r8, [rbp - 0x50]
mov rax, qword [rbp + 0x230]
mov qword [r8], rax
mov qword [r8 + 8], rbx
mov qword [r8 + 0x10], r13
mov qword [r8 + 0x18], rsi
lea rax, [0x140025790]
jmp 0x14000b047
call fcn.14001d8ad
lea r8, [rbp - 0x50]
and qword [r8], 0
mov qword [r8 + 8], rax
mov rax, qword [rbp + 0x200]
mov qword [r8 + 0x10], rax
mov rax, qword [rbp + 0x240]
mov qword [r8 + 0x18], rax
lea rax, [0x1400257a8]
jmp 0x14000b047
lea rcx, str.called__Option::unwrap____on_a__None__value__
lea r8, [0x1400257d8]
push 0x2b
pop rdx
call fcn.14001e7d0
call fcn.14001d8ad
mov qword [rbp + 0x210], rax
and qword [rbp + 0x208], 0
mov rax, qword [rbp + 0x228]
lea r8, [rbp - 0x50]
mov qword [r8 + 0x20], rax
movups xmm0, xmmword [rbp + 0x218]
movaps xmmword [r8 + 0x10], xmm0
mov rax, qword [rbp + 0x208]
mov qword [r8], rax
mov rax, qword [rbp + 0x210]
mov qword [r8 + 8], rax
lea rax, [0x1400257c0]
mov qword [rsp + 0x20], rax
lea rcx, str.called__Result::unwrap____on_an__Err__value
lea r9, [0x140025570]
push 0x2b
pop rdx
call fcn.14001eac0
lea r8, str.C:Users_
mov rcx, rbx
mov rdx, rsi
call fcn.14001e750
lea r8, str.library_std_src_sys_commonwtf8.rs
mov rcx, rdi
mov rdx, r12
call fcn.14001e650
jmp 0x14000b0dd
lea r8, str.library_std_src_sys_commonwtf8.rs
mov rcx, rsi
mov rdx, r12
call fcn.14001e750
jmp 0x14000b0dd
push 1
pop rcx
mov rdx, r12
call fcn.14001e540
call fcn.140004ad0
push 8
pop rcx
mov rdx, r14
call fcn.14001e540
lea r8, str.library_std_src_sys_commonwtf8.rs
mov rcx, rsi
mov rdx, r12
call fcn.14001e750
jmp 0x14000b0dd
lea r8, str.library_std_src_sys_commonwtf8.rs
mov rcx, rdi
mov rdx, rsi
call fcn.14001e9e0
ud2