Function at 0x1400113f0
Capabilities:
Enumerate process modules

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
mov eax, 0x4068
call fcn.140056c30
sub rsp, rax
movaps xmmword [rsp + 0x4050], xmm6
mov rdi, rdx
mov rsi, rcx
lea r12, [rsp + 0x58]
mov qword [rsp + 0x2058], 0
mov qword [rsp + 0x50], 0
xor eax, eax
lea rbx, [rsp + 0x30]
mov r13, qword [sym.imp.KERNEL32.dll_GetLastError]
lea r14, [rsp + 0x2060]
jmp 0x140011455
mov rax, qword [rsp + 0x50]
test rax, rax
je 0x140011470
mov rdx, qword [rsp + 0x58]
jmp 0x140011488
mov rcx, qword [rsp + 0x2058]
mov rdx, r12
cmp rcx, 0x401
jae 0x140011781
mov dword [rsp + 0x20], 3
mov rcx, rdi
mov r8d, 0x2000
mov r9, rbx
call sub.PSAPI.DLL_EnumProcessModulesEx
test eax, eax
jne 0x140011567
call r13
cmp eax, 0x12b
jne 0x140011523
call sub.KERNEL32.dll_GetCurrentProcess
cmp rax, rdi
je 0x140011450
mov r15, rax
mov rcx, rdi
call sub.KERNEL32.dll_GetProcessId
mov ebp, eax
test eax, eax
jne 0x1400114d1
call r13
mov rcx, r15
call sub.KERNEL32.dll_GetProcessId
mov r15d, eax
test eax, eax
je 0x1400114f0
cmp ebp, r15d
je 0x140011450
jmp 0x1400114fc
call r13
cmp ebp, r15d
je 0x140011450
mov rcx, rdi
mov rdx, r14
call sub.KERNEL32.dll_GetExitCodeProcess
mov ecx, eax
mov eax, 0x12b
test ecx, ecx
je 0x140011523
cmp dword [rsp + 0x2060], 0x103
je 0x140011450
shl rax, 0x20
or rax, 2
mov qword [rsi + 8], rax
mov qword [rsi], 2
cmp qword [rsp + 0x50], 0
je 0x140011620
cmp qword [rsp + 0x60], 0
je 0x140011765
mov r8, qword [rsp + 0x58]
mov rcx, qword [0x1400851f8]
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
jmp 0x140011765
mov r13d, dword [rsp + 0x30]
cmp r13, 0x2000
jbe 0x140011648
mov qword [rsp + 0x38], 8
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
mov r14d, 0x2000
mov ebx, 8
xor ecx, ecx
mov ebp, 0xffffffff
lea r15, [rsp + 0x38]
lea r12, [rsp + 0x34]
mov eax, r13d
nop dword [rax]
test r14d, r14d
lea edx, [r14 + r14]
cmovs edx, ebp
cmp eax, edx
mov r14d, edx
cmova r14d, eax
mov r8d, r14d
shr r8d, 3
sub r8, rcx
jbe 0x1400115dc
mov rdx, qword [rsp + 0x48]
sub rcx, rdx
cmp rcx, r8
jb 0x140011611
mov dword [rsp + 0x20], 3
mov rcx, rdi
mov rdx, rbx
mov r8d, r14d
mov r9, r12
call sub.PSAPI.DLL_EnumProcessModulesEx
test eax, eax
je 0x14001169f
mov eax, dword [rsp + 0x34]
cmp eax, r14d
jbe 0x1400116db
mov rcx, qword [rsp + 0x40]
jmp 0x1400115b0
mov rcx, r15
call fcn.140057e60
mov rbx, qword [rsp + 0x38]
jmp 0x1400115dc
mov rcx, qword [rsp + 0x2058]
cmp rcx, 0x401
jb 0x140011765
lea r8, str.C:Userslakti.cargo_registry_srcindex.crates.io_6f17d22bba15001fdll_syringe_0.15.2_srcutils_array_buf.rs
mov edx, 0x400
call fcn.140057820
ud2
shr r13d, 3
cmp qword [rsp + 0x50], 0
je 0x14001170c
mov qword [rsp + 0x68], r13
mov rdi, qword [rsp + 0x58]
mov rbx, qword [rsp + 0x60]
lea rdx, [rsp + 0x70]
lea rcx, [rsp + 0x2060]
mov r8d, 0x1ff0
call sub.VCRUNTIME140.dll_memcpy
lea rax, [rdi + r13*8]
mov qword [rsi + 8], rdi
mov qword [rsi + 0x10], rbx
mov qword [rsi + 0x18], rdi
mov qword [rsi + 0x20], rax
mov qword [rsi], 1
jmp 0x140011765
call qword [sym.imp.KERNEL32.dll_GetLastError]
shl rax, 0x20
or rax, 2
mov qword [rsi + 8], rax
mov qword [rsi], 2
cmp qword [rsp + 0x40], 0
je 0x140011536
mov rcx, qword [0x1400851f8]
xor edx, edx
mov r8, rbx
call qword [sym.imp.KERNEL32.dll_HeapFree]
jmp 0x140011536
mov rcx, qword [rsp + 0x40]
mov qword [rsi + 8], rbx
mov qword [rsi + 0x10], rcx
and eax, 0xfffffff8
add rax, rbx
mov qword [rsi + 0x18], rbx
mov qword [rsi + 0x20], rax
mov qword [rsi], 1
cmp r13d, 0x2000
ja 0x140011536
jmp 0x140011765
mov qword [rsp + 0x2058], r13
mov rbx, qword [rsp + 0x68]
movups xmm6, xmmword [rsp + 0x58]
lea rdx, [rsp + 0x70]
lea rdi, [rsp + 0x2060]
mov r8d, 0x1ff0
mov rcx, rdi
call sub.VCRUNTIME140.dll_memcpy
movups xmmword [rsi + 8], xmm6
mov qword [rsi + 0x18], rbx
lea rcx, [rsi + 0x20]
mov r8d, 0x1ff0
mov rdx, rdi
call sub.VCRUNTIME140.dll_memcpy
mov qword [rsi + 0x2010], 0
mov qword [rsi], 0
movaps xmm6, xmmword [rsp + 0x4050]
add rsp, 0x4068
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
lea r8, str.C:Userslakti.cargo_registry_srcindex.crates.io_6f17d22bba15001fdll_syringe_0.15.2_srcutils_array_buf.rs
mov edx, 0x400
call fcn.140057820
ud2