Function at 0x140029760
Capabilities:
Enumerate process modules

Disassembly:
mov qword [rsp + 0x18], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x2220]
mov eax, 0x2320
call fcn.14002e9c0
sub rsp, rax
mov rax, qword [0x14006db18]
xor rax, rsp
mov qword [rbp + 0x2210], rax
mov r15, rcx
mov qword [rsp + 0x68], rcx
xor esi, esi
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x30], xmm0
mov qword [rsp + 0x40], rsi
mov r8d, edx
xor edx, edx
mov ecx, 0x410
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov r12, rax
mov qword [rsp + 0x68], rax
test rax, rax
jne 0x140029898
lea rdx, [0x140038980]
lea rcx, [rsp + 0x50]
call qword [sym.imp.Qt6Core.dll_public:_void___cdecl_QString::constructor_char_const____ptr64____ptr64]
mov dword [rsp + 0x20], 1
lea edx, [rsi + 0x18]
lea r9d, [rsi + 1]
lea r8d, [rsi + 8]
lea rcx, [rsp + 0x48]
call qword [sym.imp.Qt6Core.dll_public:_static_void____ptr64___cdecl_QArrayData::allocate_struct_QArrayData____ptr64____ptr64__long_long___int64___long_long___int64___long_long___int64___enum_QArrayData::AllocationOption_]
mov rcx, rax
mov rax, qword [rsp + 0x48]
mov qword [r15], rax
mov qword [r15 + 8], rcx
mov qword [r15 + 0x10], rsi
lea r8, [rsp + 0x68]
lea rdx, [rsp + 0x50]
mov rcx, r15
call fcn.14000a3c0
mov r9, qword [sym.imp.Qt6Core.dll_public:_void___cdecl_QString::destructor_void____ptr64]
lea edx, [rsi + 0x18]
lea r8d, [rsi + 1]
lea rcx, [rsp + 0x50]
call fcn.14002ea10
nop
mov rax, qword [rsp + 0x30]
test rax, rax
je 0x14002a03d
mov rbx, 0xffffffffffffffff
lock xadd dword [rax], ebx
cmp ebx, 1
jne 0x14002a03d
mov rax, qword [rsp + 0x40]
lea rcx, [rax + rax*2]
mov rbx, qword [rsp + 0x38]
lea rdi, [rbx + rcx*8]
cmp rbx, rdi
je 0x140029888
mov rcx, rbx
call qword [sym.imp.Qt6Core.dll_public:_void___cdecl_QString::destructor_void____ptr64]
add rbx, 0x18
cmp rbx, rdi
jne 0x140029876
mov rcx, qword [rsp + 0x30]
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
jmp 0x14002a03d
lea r9, [rbp - 0x74]
mov r8d, 0x2000
lea rdx, [rbp]
mov rcx, r12
call sub.KERNEL32.dll_K32EnumProcessModules
test eax, eax
je 0x14002a01a
mov r9d, 0x104
lea r8, [rbp + 0x2000]
mov rdx, qword [rbp]
mov rcx, r12
call sub.KERNEL32.dll_K32GetModuleFileNameExW
test eax, eax
je 0x14002a01a
xorps xmm0, xmm0
movups xmmword [rbp - 0x28], xmm0
mov qword [rbp - 0x18], rsi
mov qword [rbp - 0x10], rsi
lea rax, [rbp + 0x2000]
mov rbx, 0xffffffffffffffff
inc rbx
cmp word [rax + rbx*2], 0
jne 0x1400298f4
movabs r14, 0x7ffffffffffffffe
cmp rbx, r14
ja 0x14002a06a
mov qword [rbp - 0x10], 7
cmp rbx, 8
jae 0x140029940
mov qword [rbp - 0x18], rbx
add rbx, rbx
mov r8, rbx
lea rdx, [rbp + 0x2000]
lea rcx, [rbp - 0x28]
call sub.VCRUNTIME140.dll_memcpy
mov word [rbp + rbx - 0x28], si
jmp 0x140029990
mov rax, rbx
or rax, 7
cmp rax, r14
ja 0x14002995b
mov r14, rax
mov ecx, 0xa
cmp rax, rcx
cmovb r14, rcx
lea rdx, [r14 + 1]
lea rcx, [rbp - 0x28]
call fcn.140007ea0
mov rdi, rax
mov qword [rbp - 0x28], rax
mov qword [rbp - 0x18], rbx
mov qword [rbp - 0x10], r14
add rbx, rbx
mov r8, rbx
lea rdx, [rbp + 0x2000]
mov rcx, rax
call sub.VCRUNTIME140.dll_memcpy
mov word [rbx + rdi], si
lea rdx, [rbp - 0x28]
lea rcx, [rsp + 0x70]
call qword [sym.imp.Qt6Core.dll_public:_static_class_QString___cdecl_QString::fromStdWString_class_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t___const____ptr64_]
nop
mov rdx, rax
lea rcx, [rbp - 0x68]
call qword [sym.imp.Qt6Core.dll_public:_void___cdecl_QFile::constructor_class_QString_const____ptr64____ptr64]
nop
lea rcx, [rsp + 0x70]
call qword [sym.imp.Qt6Core.dll_public:_void___cdecl_QString::destructor_void____ptr64]
mov edx, 1
lea rcx, [rbp - 0x68]
call qword [sym.imp.Qt6Core.dll_public_virtual:_bool___cdecl_QFile::open_class_QFlags_enum_QIODeviceBase::OpenModeFlag_____ptr64]
test al, al
je 0x140029fcc
mov edx, 0xe
lea rcx, [rsp + 0x48]
call qword [sym.imp.Qt6Core.dll_public:_void___cdecl_QCryptographicHash::constructor_enum_QCryptographicHash::Algorithm____ptr64]
nop
lea rdx, [rbp - 0x68]
lea rcx, [rsp + 0x48]
call qword [sym.imp.Qt6Core.dll_public:_bool___cdecl_QCryptographicHash::addData_class_QIODevice____ptr64____ptr64]
test al, al
je 0x140029fc0
lea rdx, [rbp - 0x28]
lea rcx, [rsp + 0x70]
call qword [sym.imp.Qt6Core.dll_public:_static_class_QString___cdecl_QString::fromStdWString_class_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t___const____ptr64_]
mov r9, rax
mov r14, qword [rsp + 0x40]
movabs r13, 0x2aaaaaaaaaaaaaab
mov rcx, qword [rsp + 0x30]
test rcx, rcx
je 0x140029aad
mov ecx, dword [rcx]
cmp ecx, 1
jg 0x140029aad
mov r8, qword [rsp + 0x30]
lea rax, [r8 + 0x17]
and rax, 0xfffffffffffffff8
mov r10, qword [rsp + 0x38]
mov rcx, r10
sub rcx, rax
mov rax, r13
imul rcx
sar rdx, 2
mov rax, rdx
shr rax, 0x3f
add rdx, rax
mov rax, qword [r8 + 8]
sub rax, rdx
mov rcx, qword [rsp + 0x40]
cmp rax, rcx
je 0x140029a86
lea rax, [rcx + rcx*2]
lea rcx, [r10 + rax*8]
mov rdx, r9
call qword [sym.imp.Qt6Core.dll_public:_void___cdecl_QString::constructor_class_QString____ptr64____ptr64]
inc qword [rsp + 0x40]
jmp 0x140029c9f
test rcx, rcx
jne 0x140029aad
test rdx, rdx
je 0x140029aad
lea rcx, [r10 - 0x18]
mov rdx, r9
call qword [sym.imp.Qt6Core.dll_public:_void___cdecl_QString::constructor_class_QString____ptr64____ptr64]
sub qword [rsp + 0x38], 0x18
inc qword [rsp + 0x40]
jmp 0x140029c9f
mov rdx, r9
lea rcx, [rsp + 0x50]
call qword [sym.imp.Qt6Core.dll_public:_void___cdecl_QString::constructor_class_QString____ptr64____ptr64]
nop
cmp qword [rsp + 0x40], 0
je 0x140029ace
test r14, r14
jne 0x140029ace
mov dil, 1
jmp 0x140029ad1
xor dil, dil
movzx r10d, dil
mov rax, qword [rsp + 0x30]
test rax, rax
je 0x140029c19
mov eax, dword [rax]
cmp eax, 1
jg 0x140029c19
mov r9, qword [rsp + 0x38]
mov r11, qword [rsp + 0x30]
cmp r10d, 1
jne 0x140029b16
lea rcx, [r11 + 0x17]
and rcx, 0xfffffffffffffff8
mov rax, r9
sub rax, rcx
cmp rax, 0x18
jge 0x140029c32
mov r8, qword [rsp + 0x40]
test dil, dil
jne 0x140029b56
lea rax, [r11 + 0x17]
and rax, 0xfffffffffffffff8
mov rcx, r9
sub rcx, rax
mov rax, r13
imul rcx
sar rdx, 2
mov rax, rdx
shr rax, 0x3f
add rdx, rax
mov rax, qword [r11 + 8]
sub rax, rdx
sub rax, r8
cmp rax, 1
jge 0x140029c37
mov rbx, qword [r11 + 8]
lea rax, [r11 + 0x17]
and rax, 0xfffffffffffffff8
mov rcx, r9
sub rcx, rax
mov rax, r13
imul rcx
mov r11, rdx
sar r11, 2
mov rax, r11
shr rax, 0x3f
add r11, rax
mov r13, rbx
sub r13, r8
mov r12, r13
sub r12, r11
mov rdx, rsi
test dil, dil
jne 0x140029baa
cmp r11, 1
jl 0x140029c19
lea rcx, [rbx + rbx]
lea rax, [r8 + r8*2]
cmp rax, rcx
jl 0x140029bd8
cmp r10d, 1
jne 0x140029c19
cmp r12, 1
jl 0x140029c19
lea rax, [r8 + r8*2]
cmp rax, rbx
jge 0x140029c19
lea rax, [r13 - 1]
cqo
sub rax, rdx
sar rax, 1
mov rdx, rsi
test rax, rax
cmovg rdx, rax
inc rdx
sub rdx, r11
lea rax, [rdx + rdx*2]
lea rbx, [r9 + rax*8]
test r8, r8
je 0x140029c0f
cmp r9, rbx
je 0x140029c0f
test r9, r9
je 0x140029c0f
test rbx, rbx
je 0x140029c0f
lea r8, [r8 + r8*2]
shl r8, 3
mov rdx, r9
mov rcx, rbx
call sub.VCRUNTIME140.dll_memmove
mov r8, qword [rsp + 0x40]
mov r9, rbx
mov qword [rsp + 0x38], rbx
jmp 0x140029c37
xor r9d, r9d
lea r8d, [r9 + 1]
mov edx, r10d
lea rcx, [rsp + 0x30]
call fcn.140006690
mov r9, qword [rsp + 0x38]
mov r8, qword [rsp + 0x40]
test dil, dil
je 0x140029c53
lea rcx, [r9 - 0x18]
lea rdx, [rsp + 0x50]
call qword [sym.imp.Qt6Core.dll_public:_void___cdecl_QString::constructor_class_QString____ptr64____ptr64]
sub qword [rsp + 0x38], 0x18
jmp 0x140029c80
lea rax, [r14 + r14*2]
lea rbx, [r9 + rax*8]
sub r8, r14
lea r8, [r8 + r8*2]
shl r8, 3
lea rcx, [rbx + 0x18]
mov rdx, rbx
call sub.VCRUNTIME140.dll_memmove
lea rdx, [rsp + 0x50]
mov rcx, rbx
call qword [sym.imp.Qt6Core.dll_public:_void___cdecl_QString::constructor_class_QString____ptr64____ptr64]
inc qword [rsp + 0x40]
lea rcx, [rsp + 0x50]
call qword [sym.imp.Qt6Core.dll_public:_void___cdecl_QString::destructor_void____ptr64]
mov r12, qword [rsp + 0x68]
movabs r13, 0x2aaaaaaaaaaaaaab
mov rax, qword [rsp + 0x30]
test rax, rax
je 0x140029cb0
mov eax, dword [rax]
cmp eax, 1
jle 0x140029cc3
xor r9d, r9d
xor r8d, r8d
xor edx, edx
lea rcx, [rsp + 0x30]
call fcn.140006690
nop
lea rcx, [rsp + 0x70]
call qword [sym.imp.Qt6Core.dll_public:_void___cdecl_QString::destructor_void____ptr64]
lea rdx, [rbp - 0x40]
lea rcx, [rsp + 0x48]
call qword [sym.imp.Qt6Core.dll_public:_class_QByteArray___cdecl_QCryptographicHash::result_void____ptr64]
nop
xor r8d, r8d
lea rdx, [rbp - 0x58]
mov rcx, rax
call qword [sym.imp.Qt6Core.dll_public:_class_QByteArray___cdecl_QByteArray::toHex_char____ptr64]
nop
mov rdx, rax
lea rcx, [rsp + 0x50]
call qword [sym.imp.Qt6Core.dll_public:_void___cdecl_QString::constructor_class_QByteArray_const____ptr64____ptr64]
nop
mov r14, qword [rsp + 0x40]
mov rax, qword [rsp + 0x30]
test rax, rax
je 0x140029d9f
mov eax, dword [rax]
cmp eax, 1
jg 0x140029d9f
mov r8, qword [rsp + 0x30]
lea rax, [r8 + 0x17]
and rax, 0xfffffffffffffff8
mov r9, qword [rsp + 0x38]
mov rcx, r9
sub rcx, rax
mov rax, r13
imul rcx
sar rdx, 2
mov rax, rdx
shr rax, 0x3f
add rdx, rax
mov rax, qword [r8 + 8]
sub rax, rdx
mov rcx, qword [rsp + 0x40]
cmp rax, rcx
je 0x140029d76
lea rax, [rcx + rcx*2]
lea rcx, [r9 + rax*8]
lea rdx, [rsp + 0x50]
call qword [sym.imp.Qt6Core.dll_public:_void___cdecl_QString::constructor_class_QString____ptr64____ptr64]
inc qword [rsp + 0x40]
jmp 0x140029f7a
test rcx, rcx
jne 0x140029d9f
test rdx, rdx
je 0x140029d9f
lea rcx, [r9 - 0x18]
lea rdx, [rsp + 0x50]
call qword [sym.imp.Qt6Core.dll_public:_void___cdecl_QString::constructor_class_QString____ptr64____ptr64]
sub qword [rsp + 0x38], 0x18
inc qword [rsp + 0x40]
jmp 0x140029f7a
lea rdx, [rsp + 0x50]
lea rcx, [rsp + 0x70]
call qword [sym.imp.Qt6Core.dll_public:_void___cdecl_QString::constructor_class_QString____ptr64____ptr64]
nop
cmp qword [rsp + 0x40], 0
je 0x140029dc2
test r14, r14
jne 0x140029dc2
mov dil, 1
jmp 0x140029dc5
xor dil, dil
movzx r10d, dil
mov rax, qword [rsp + 0x30]
test rax, rax
je 0x140029f03
mov eax, dword [rax]
cmp eax, 1
jg 0x140029f03
mov r9, qword [rsp + 0x38]
mov r11, qword [rsp + 0x30]
cmp r10d, 1
jne 0x140029e0a
lea rcx, [r11 + 0x17]
and rcx, 0xfffffffffffffff8
mov rax, r9
sub rax, rcx
cmp rax, 0x18
jge 0x140029f1c
mov r8, qword [rsp + 0x40]
test dil, dil
jne 0x140029e4a
lea rax, [r11 + 0x17]
and rax, 0xfffffffffffffff8
mov rcx, r9
sub rcx, rax
mov rax, r13
imul rcx
sar rdx, 2
mov rax, rdx
shr rax, 0x3f
add rdx, rax
mov rcx, qword [r11 + 8]
sub rcx, rdx
sub rcx, r8
cmp rcx, 1
jge 0x140029f21
mov rbx, qword [r11 + 8]
lea rdx, [r11 + 0x17]
and rdx, 0xfffffffffffffff8
mov rcx, r9
sub rcx, rdx
mov rax, r13
imul rcx
mov r11, rdx
sar r11, 2
mov rax, r11
shr rax, 0x3f
add r11, rax
mov r13, rbx
sub r13, r8
mov rdx, r13
sub rdx, r11
test dil, dil
jne 0x140029e97
cmp r11, 1
jl 0x140029f03
lea rcx, [rbx + rbx]
lea rax, [r8 + r8*2]
cmp rax, rcx
jl 0x140029ec2
cmp r10d, 1
jne 0x140029f03
cmp rdx, 1
jl 0x140029f03
lea rax, [r8 + r8*2]
cmp rax, rbx
jge 0x140029f03
lea rax, [r13 - 1]
cqo
sub rax, rdx
sar rax, 1
test rax, rax
cmovg rsi, rax
inc rsi
sub rsi, r11
lea rax, [rsi + rsi*2]
lea rbx, [r9 + rax*8]
test r8, r8
je 0x140029ef9
cmp r9, rbx
je 0x140029ef9
test r9, r9
je 0x140029ef9
test rbx, rbx
je 0x140029ef9
lea r8, [r8 + r8*2]
shl r8, 3
mov rdx, r9
mov rcx, rbx
call sub.VCRUNTIME140.dll_memmove
mov r8, qword [rsp + 0x40]
mov r9, rbx
mov qword [rsp + 0x38], rbx
jmp 0x140029f21
xor r9d, r9d
lea r8d, [r9 + 1]
mov edx, r10d
lea rcx, [rsp + 0x30]
call fcn.140006690
mov r9, qword [rsp + 0x38]
mov r8, qword [rsp + 0x40]
test dil, dil
je 0x140029f3d
lea rcx, [r9 - 0x18]
lea rdx, [rsp + 0x70]
call qword [sym.imp.Qt6Core.dll_public:_void___cdecl_QString::constructor_class_QString____ptr64____ptr64]
sub qword [rsp + 0x38], 0x18
jmp 0x140029f6a
lea rax, [r14 + r14*2]
lea rbx, [r9 + rax*8]
sub r8, r14
lea r8, [r8 + r8*2]
shl r8, 3
lea rcx, [rbx + 0x18]
mov rdx, rbx
call sub.VCRUNTIME140.dll_memmove
lea rdx, [rsp + 0x70]
mov rcx, rbx
call qword [sym.imp.Qt6Core.dll_public:_void___cdecl_QString::constructor_class_QString____ptr64____ptr64]
inc qword [rsp + 0x40]
lea rcx, [rsp + 0x70]
call qword [sym.imp.Qt6Core.dll_public:_void___cdecl_QString::destructor_void____ptr64]
mov rax, qword [rsp + 0x30]
test rax, rax
je 0x140029f8b
mov eax, dword [rax]
cmp eax, 1
jle 0x140029f9e
xor r9d, r9d
xor r8d, r8d
xor edx, edx
lea rcx, [rsp + 0x30]
call fcn.140006690
nop
lea rcx, [rsp + 0x50]
call qword [sym.imp.Qt6Core.dll_public:_void___cdecl_QString::destructor_void____ptr64]
nop
lea rcx, [rbp - 0x58]
call qword [sym.imp.Qt6Core.dll_public:_void___cdecl_QByteArray::destructor_void____ptr64]
nop
lea rcx, [rbp - 0x40]
call qword [sym.imp.Qt6Core.dll_public:_void___cdecl_QByteArray::destructor_void____ptr64]
nop
lea rcx, [rsp + 0x48]
call qword [sym.imp.Qt6Core.dll_public:_void___cdecl_QCryptographicHash::destructor_void____ptr64]
nop
lea rcx, [rbp - 0x68]
call qword [sym.imp.Qt6Core.dll_public_virtual:_void___cdecl_QFile::destructor_void____ptr64]
nop
mov rdx, qword [rbp - 0x10]
cmp rdx, 8
jb 0x14002a01a
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x28]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14002a015
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14002a015
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14002e7fc
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rax, qword [rsp + 0x30]
mov qword [r15], rax
mov rax, qword [rsp + 0x38]
mov qword [r15 + 8], rax
mov rax, qword [rsp + 0x40]
mov qword [r15 + 0x10], rax
mov rax, r15
mov rcx, qword [rbp + 0x2210]
xor rcx, rsp
call fcn.14002e8a0
mov rbx, qword [rsp + 0x2370]
add rsp, 0x2320
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
call fcn.140007e80
nop