Function at 0x140007df1
Capabilities:
Enumerate process modules

Disassembly:
push rbp
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbx
sub rsp, 0x2e8
lea rbp, [rsp + 0x80]
mov qword [rbp + 0x260], 0xfffffffffffffffe
mov qword [rbp + 0x1f0], rdx
mov qword [rbp + 0x1f8], rcx
call qword [sym.imp.kernel32.dll_GetCurrentProcess]
lea rbx, [rbp + 0x1d0]
and dword [rbx], 0
mov rcx, rax
mov qword [rbp + 0x208], rax
xor eax, eax
mov qword [rbp + 0x210], rax
push 8
pop rsi
push 4
pop rax
mov qword [rbp + 0x258], rax
xor r14d, r14d
xor r15d, r15d
xor edi, edi
lea r8d, [r15*8]
mov dword [rsp + 0x20], 3
mov rdx, rsi
mov r9, rbx
call sub.psapi.dll_EnumProcessModulesEx
test eax, eax
je 0x140008680
mov r13d, dword [rbp + 0x1d0]
cmp r13d, edi
jbe 0x140007f5e
mov r12, r13
sub r12, r15
jbe 0x140007ee7
mov rax, r14
sub rax, r15
cmp rax, r12
jae 0x140007eec
mov rdi, r15
add rdi, r12
jb 0x140008773
lea rax, [r14 + r14]
cmp rax, rdi
cmova rdi, rax
xor edx, edx
mov rax, rdi
shr rax, 0x3c
sete al
cmp rdi, 5
push 4
pop rcx
cmovb rdi, rcx
test r14, r14
je 0x140007ef1
shl r14, 3
mov qword [rbp - 0x50], rsi
mov qword [rbp - 0x40], r14
push 8
pop rcx
jmp 0x140007ef3
mov r15, r13
jmp 0x140007f4f
mov rdi, r14
jmp 0x140007f29
xor ecx, ecx
lea r8, [rdi*8]
mov dl, al
shl edx, 3
mov qword [rbp - 0x48], rcx
lea rcx, [rbp + 0x218]
lea r9, [rbp - 0x50]
call fcn.140019ab8
cmp qword [rbp + 0x218], 0
jne 0x140008775
mov rsi, qword [rbp + 0x220]
lea rax, [rsi + r15*8]
push 1
pop rcx
cmp rcx, r12
jae 0x140007f45
and qword [rax], 0
inc rcx
add rax, 8
inc r15
jmp 0x140007f30
and qword [rax], 0
inc r15
mov r14, rdi
mov rcx, qword [rbp + 0x208]
mov edi, r13d
jmp 0x140007e5d
mov edi, r13d
shr edi, 3
cmp r15, rdi
jb 0x140008796
mov r12d, eax
cmp r13d, 8
jae 0x140007fc0
test rdi, rdi
je 0x14000800b
cmp rdi, 5
push 4
pop r15
cmovae r15, rdi
mov r8, r15
shl r8, 4
lea r9, [rbp - 0x50]
and qword [r9 + 8], 0
lea rbx, [rbp + 0x218]
push 8
pop rdx
mov rcx, rbx
call fcn.140019ab8
cmp qword [rbx], 0
jne 0x1400087eb
mov rbx, qword [rbp + 0x220]
jmp 0x140008011
mov r15, rdi
shl r15, 4
mov al, byte [0x14003b1f0]
mov rcx, r15
call fcn.140015e60
test rax, rax
je 0x1400087e0
mov rbx, rax
add rax, 8
xor r13d, r13d
lea rcx, [rbp + 0x208]
mov rdx, qword [rsi + r13*8]
mov qword [rax - 8], rcx
mov qword [rax], rdx
inc r13
add rax, 0x10
cmp rdi, r13
jne 0x140007fef
mov r15, rdi
jmp 0x140008014
push 8
pop rbx
xor r15d, r15d
xor r13d, r13d
mov rcx, r14
mov rdx, rsi
call fcn.140019f85
test r12d, r12d
je 0x14000869c
shl r13, 4
add r13, rbx
mov qword [rbp + 0x1d0], rbx
mov qword [rbp + 0x1d8], rbx
mov qword [rbp + 0x1e0], r15
mov qword [rbp + 0x1e8], r13
lea r14, [rbp - 0x50]
push 2
pop rdi
push 3
pop r15
cmp rbx, r13
je 0x140008652
lea rax, [rbx + 0x10]
mov qword [rbp + 0x1d8], rax
mov r12, qword [rbx]
mov rsi, qword [rbx + 8]
mov r8d, 0x208
mov rcx, r14
xor edx, edx
call sub.VCRUNTIME140.dll_memset
mov rcx, qword [r12]
mov rdx, rsi
mov r8, r14
mov r9d, 0x104
call sub.psapi.dll_GetModuleBaseNameW
test eax, eax
je 0x1400086c2
mov qword [rbp + 0x1c0], r12
mov qword [rbp + 0x210], rsi
mov edx, eax
mov rcx, r14
lea r8, str.C:Users_notev.cargo_registry_srcindex.crates.io_6f17d22bba15001fwinproc_0.6.4_srcprocessmodule.rs
call fcn.14001a01b
mov r8, rdx
lea rcx, [rbp + 0x218]
mov rdx, rax
call fcn.140014490
mov rcx, qword [rbp + 0x220]
mov r13, qword [rbp + 0x228]
test r13, r13
je 0x14000818a
lea rbx, [rcx + r13]
xor esi, esi
mov qword [rbp + 0x258], rcx
push 1
pop r12
lea rax, [rcx + 1]
mov dl, byte [rcx]
test dl, dl
js 0x140008106
mov rdx, r12
jmp 0x140008172
cmp dl, 0xe0
jae 0x14000811b
add rcx, 2
cmp rax, rbx
cmovne rax, rcx
mov rdx, rdi
jmp 0x140008172
cmp dl, 0xed
jne 0x140008144
cmp rax, rbx
je 0x140008181
lea rax, [rcx + 2]
cmp rax, rbx
je 0x140008181
cmp byte [rcx + 1], 0x9f
ja 0x1400083b1
add rcx, 3
mov rdx, r15
mov rax, rcx
jmp 0x140008172
add rcx, 2
cmp rax, rbx
cmove rcx, rax
xor eax, eax
cmp rcx, rbx
setne al
add rax, rcx
cmp dl, 0xf0
jae 0x140008164
mov rdx, r15
jmp 0x140008172
xor ecx, ecx
cmp rax, rbx
setne cl
add rax, rcx
push 4
pop rdx
add rsi, rdx
mov rcx, rax
cmp rax, rbx
jne 0x1400080f7
mov r12, qword [rbp + 0x258]
jmp 0x14000818d
mov r12, rcx
lea rcx, [rbp + 0x240]
mov rdx, r13
call fcn.140019be4
cmp qword [rbp + 0x240], 0
mov rsi, qword [rbp + 0x248]
jne 0x1400086f2
mov rdi, qword [rbp + 0x250]
mov rcx, rdi
mov rdx, r12
mov r8, r13
call sub.VCRUNTIME140.dll_memcpy
mov r12, rdi
mov rcx, qword [rbp + 0x218]
mov rdx, qword [rbp + 0x220]
call fcn.140019c4a
lea rcx, [rbp + 0x218]
mov rdx, r12
mov qword [rbp + 0x200], r13
mov r8, r13
call fcn.140002590
mov rdi, qword [rbp + 0x220]
mov r8, qword [rbp + 0x228]
lea rcx, [rbp + 0x240]
mov rdx, rdi
call fcn.140009d6a
mov rcx, r14
mov rdx, qword [rbp + 0x1f8]
mov r8, qword [rbp + 0x1f0]
call fcn.140009d6a
mov r13, qword [rbp + 0x248]
mov rdx, qword [rbp + 0x250]
mov r15, r14
mov r14, qword [rbp - 0x48]
mov r9, qword [rbp - 0x40]
mov rcx, r13
mov r8, r14
call fcn.1400078af
mov ebx, eax
mov rcx, qword [rbp - 0x50]
mov rdx, r14
call fcn.140019c4a
mov rcx, qword [rbp + 0x240]
mov rdx, r13
call fcn.140019c4a
mov rcx, qword [rbp + 0x218]
mov rdx, rdi
call fcn.140019c4a
mov rcx, rsi
mov qword [rbp + 0x258], r12
mov rdx, r12
call fcn.140019c4a
test bl, bl
jne 0x140008631
mov r8d, 0x208
mov rcx, r15
xor edx, edx
call sub.VCRUNTIME140.dll_memset
mov rax, qword [rbp + 0x1c0]
mov rcx, qword [rax]
mov rdx, qword [rbp + 0x210]
mov r8, r15
mov r9d, 0x104
call sub.psapi.dll_GetModuleFileNameExW
test eax, eax
je 0x14000870d
mov edx, eax
mov rcx, r15
lea r8, str.C:Users_notev.cargo_registry_srcindex.crates.io_6f17d22bba15001fwinproc_0.6.4_srcprocessmodule.rs
call fcn.14001a01b
mov r8, rdx
lea rcx, [rbp + 0x220]
mov rdx, rax
call fcn.140014490
mov rsi, qword [rbp + 0x220]
mov rdi, qword [rbp + 0x228]
mov r8, qword [rbp + 0x230]
mov rcx, r15
mov rdx, rdi
call fcn.140004290
cmp qword [rbp - 0x50], 0
jne 0x140008701
mov rdx, qword [rbp - 0x48]
mov r8, qword [rbp - 0x40]
lea rcx, [rbp + 0x218]
call fcn.140009d6a
mov rcx, r15
mov rdx, qword [rbp + 0x1f8]
mov r8, qword [rbp + 0x1f0]
call fcn.140009d6a
mov rbx, qword [rbp + 0x220]
mov rdx, qword [rbp + 0x228]
mov r14, qword [rbp - 0x48]
mov r9, qword [rbp - 0x40]
mov rcx, rbx
mov r8, r14
call fcn.1400078af
mov r13d, eax
mov rcx, qword [rbp - 0x50]
mov rdx, r14
call fcn.140019c4a
mov rcx, qword [rbp + 0x218]
mov rdx, rbx
call fcn.140019c4a
mov rcx, rsi
mov rdx, rdi
call fcn.140019c4a
test r13b, r13b
jne 0x140008631
mov rbx, qword [rbp + 0x1d8]
mov r13, qword [rbp + 0x1e8]
mov r14, r15
push 2
pop rdi
push 3
pop r15
jmp 0x140008056
test r13, r13
js 0x1400087db
mov al, byte [0x14003b1f0]
mov rcx, r13
call fcn.140015e60
test rax, rax
mov rdx, qword [rbp + 0x258]
je 0x1400087d0
mov qword [rbp + 0x240], r13
mov qword [rbp + 0x248], rax
mov r15, r13
sub r13, rsi
jb 0x1400087bc
mov rcx, rax
mov r8, rsi
mov rdi, rax
call sub.VCRUNTIME140.dll_memcpy
mov rcx, rdi
mov qword [rbp + 0x250], rsi
mov rdi, rsi
cmp r13, 2
lea r14, [rbp - 0x50]
ja 0x140008438
lea rcx, [rbp + 0x240]
mov rdx, rsi
push 3
pop r8
call fcn.14001bd60
mov rcx, qword [rbp + 0x248]
mov rdi, qword [rbp + 0x250]
lea rax, [rcx + rdi]
mov byte [rax + 2], 0xbd
mov word [rax], 0xbfef
add rdi, 3
mov qword [rbp + 0x250], rdi
mov r13, rsi
add r13, 3
cmp r13, r15
ja 0x1400087a8
je 0x1400085b3
mov rax, qword [rbp + 0x258]
lea r8, [rax + r13]
mov rsi, r13
mov qword [rbp + 0x200], r8
lea rax, [r8 + 1]
mov dl, byte [r8]
test dl, dl
js 0x14000848b
mov rdx, r12
jmp 0x1400084cc
cmp dl, 0xe0
jae 0x1400084a0
add r8, 2
cmp rax, rbx
cmovne rax, r8
push 2
pop rdx
jmp 0x1400084cc
cmp dl, 0xed
jne 0x1400084dc
cmp rax, rbx
je 0x1400085b6
lea rax, [r8 + 2]
cmp rax, rbx
je 0x1400085b6
cmp byte [r8 + 1], 0x9f
ja 0x14000850a
add r8, 3
push 3
pop rdx
mov rax, r8
add rsi, rdx
mov r8, rax
cmp rax, rbx
jne 0x14000847b
jmp 0x1400085b6
add r8, 2
cmp rax, rbx
cmove r8, rax
xor eax, eax
cmp r8, rbx
setne al
add rax, r8
cmp dl, 0xf0
jae 0x1400084fb
push 3
jmp 0x14000849d
xor edx, edx
cmp rax, rbx
setne dl
add rax, rdx
push 4
jmp 0x14000849d
mov r8, rsi
sub r8, r13
jb 0x1400087fe
cmp rsi, r15
ja 0x140008812
mov r14, qword [rbp + 0x240]
mov rax, r14
sub rax, rdi
cmp rax, r8
jae 0x14000855b
lea rcx, [rbp + 0x240]
mov rdx, rdi
mov r13, r8
call fcn.14001bd60
mov rdi, qword [rbp + 0x250]
mov r14, qword [rbp + 0x240]
mov rcx, qword [rbp + 0x248]
mov r8, r13
mov qword [rbp + 0x1c8], rcx
add rcx, rdi
mov rdx, qword [rbp + 0x200]
mov r13, r8
call sub.VCRUNTIME140.dll_memcpy
add rdi, r13
mov qword [rbp + 0x250], rdi
sub r14, rdi
cmp r14, 2
jbe 0x140008597
lea r14, [rbp - 0x50]
mov rcx, qword [rbp + 0x1c8]
jmp 0x140008438
lea rcx, [rbp + 0x240]
mov rdx, rdi
push 3
pop r8
call fcn.14001bd60
lea r14, [rbp - 0x50]
jmp 0x14000842a
mov r13, r15
sub r15, r13
mov rax, qword [rbp + 0x240]
sub rax, rdi
cmp rax, r15
jae 0x1400085ed
lea rcx, [rbp + 0x240]
mov rdx, rdi
mov rsi, r15
mov r8, r15
call fcn.14001bd60
mov rcx, qword [rbp + 0x248]
mov rdi, qword [rbp + 0x250]
jmp 0x1400085f0
mov rsi, r15
mov rdx, qword [rbp + 0x258]
add rdx, r13
add rcx, rdi
mov r13, rsi
mov r8, rsi
call sub.VCRUNTIME140.dll_memcpy
add r13, rdi
mov rsi, qword [rbp + 0x240]
mov r12, qword [rbp + 0x248]
movabs rax, 0x8000000000000000
cmp rsi, rax
je 0x14000818d
jmp 0x1400081c9
lea rcx, [rbp + 0x1d0]
call fcn.140007a62
mov rcx, qword [rbp + 0x208]
call fcn.140019fb4
mov rax, qword [rbp + 0x210]
jmp 0x14000866c
lea rcx, [rbp + 0x1d0]
call fcn.140007a62
mov rcx, qword [rbp + 0x208]
call fcn.140019fb4
xor eax, eax
add rsp, 0x2e8
pop rbx
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
pop rbp
ret
call fcn.140019f9d
mov r15, rax
mov rcx, r14
mov rdx, rsi
call fcn.140019f85
xor eax, eax
mov qword [rbp + 0x258], rax
lea r8, [rbp - 0x50]
mov rax, qword [rbp + 0x258]
mov qword [r8], rax
mov qword [r8 + 8], r15
mov qword [r8 + 0x10], rbx
mov qword [r8 + 0x18], r13
lea rax, str.C:Users_notev.cargo_registry_srcindex.crates.io_6f17d22bba15001fdinvoke_0.1.4_srclib.rs
jmp 0x140008758
call fcn.140019f9d
lea r8, [rbp - 0x50]
and qword [r8], 0
mov qword [r8 + 8], rax
mov rax, qword [rbp + 0x258]
mov qword [r8 + 0x10], rax
mov rax, qword [rbp + 0x200]
mov qword [r8 + 0x18], rax
lea rax, str.C:Users_notev.cargo_registry_srcindex.crates.io_6f17d22bba15001fdinvoke_0.1.4_srclib.rs
jmp 0x140008758
mov rdx, qword [rbp + 0x250]
mov rcx, rsi
call fcn.14001ad50
lea rcx, str.C:Users_notev.cargo_registry_srcindex.crates.io_6f17d22bba15001fdinvoke_0.1.4_srclib.rs
call fcn.14001b1a0
call fcn.140019f9d
mov qword [rbp + 0x220], rax
and qword [rbp + 0x218], 0
mov rax, qword [rbp + 0x238]
lea r8, [rbp - 0x50]
mov qword [r8 + 0x20], rax
movups xmm0, xmmword [rbp + 0x228]
movaps xmmword [r8 + 0x10], xmm0
mov rax, qword [rbp + 0x218]
mov qword [r8], rax
mov rax, qword [rbp + 0x220]
mov qword [r8 + 8], rax
lea rax, str.C:Users_notev.cargo_registry_srcindex.crates.io_6f17d22bba15001fdinvoke_0.1.4_srclib.rs
mov qword [rsp + 0x20], rax
lea rcx, str.called__Result::unwrap____on_an__Err__value
lea r9, [0x140033550]
push 0x2b
pop rdx
call fcn.14001b110
jmp 0x14000878a
mov rax, qword [rbp + 0x220]
mov qword [rbp + 0x210], rax
mov rdx, qword [rbp + 0x228]
mov rcx, qword [rbp + 0x210]
call fcn.14001ad50
lea r8, str.C:Users_notev.cargo_registry_srcindex.crates.io_6f17d22bba15001fwinproc_0.6.4_srcprocessmod.rs
mov rcx, rdi
mov rdx, r15
call fcn.14001aef0
lea r8, str.library_std_src_sys_commonwtf8.rs
mov rcx, r13
mov rdx, r15
call fcn.14001ae70
jmp 0x140008824
lea r8, str.library_std_src_sys_commonwtf8.rs
mov rcx, rsi
mov rdx, r15
call fcn.14001aef0
jmp 0x140008824
push 1
pop rcx
mov rdx, r13
call fcn.14001ad50
call fcn.140002070
push 8
pop rcx
mov rdx, r15
call fcn.14001ad50
mov rcx, qword [rbp + 0x220]
mov rdx, qword [rbp + 0x228]
call fcn.14001ad50
lea r8, str.library_std_src_sys_commonwtf8.rs
mov rcx, r13
mov rdx, rsi
call fcn.14001b0a0
jmp 0x140008824
mov rdx, r15
lea r8, str.library_std_src_sys_commonwtf8.rs
mov rcx, rsi
call fcn.14001aef0
ud2