Function at 0x140008931
Capabilities:
Enumerate process modules

Disassembly:
push rbp
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbx
sub rsp, 0x2e8
lea rbp, [rsp + 0x80]
mov qword [rbp + 0x260], 0xfffffffffffffffe
mov qword [rbp + 0x1f0], rdx
mov qword [rbp + 0x1f8], rcx
call qword [sym.imp.kernel32.dll_GetCurrentProcess]
lea rbx, [rbp + 0x1d0]
and dword [rbx], 0
mov rcx, rax
mov qword [rbp + 0x208], rax
xor eax, eax
mov qword [rbp + 0x210], rax
push 8
pop rsi
push 4
pop rax
mov qword [rbp + 0x258], rax
xor r14d, r14d
xor r15d, r15d
xor edi, edi
lea r8d, [r15*8]
mov dword [rsp + 0x20], 3
mov rdx, rsi
mov r9, rbx
call sub.psapi.dll_EnumProcessModulesEx
test eax, eax
je 0x1400091c0
mov r13d, dword [rbp + 0x1d0]
cmp r13d, edi
jbe 0x140008a9e
mov r12, r13
sub r12, r15
jbe 0x140008a27
mov rax, r14
sub rax, r15
cmp rax, r12
jae 0x140008a2c
mov rdi, r15
add rdi, r12
jb 0x1400092b3
lea rax, [r14 + r14]
cmp rax, rdi
cmova rdi, rax
xor edx, edx
mov rax, rdi
shr rax, 0x3c
sete al
cmp rdi, 5
push 4
pop rcx
cmovb rdi, rcx
test r14, r14
je 0x140008a31
shl r14, 3
mov qword [rbp - 0x50], rsi
mov qword [rbp - 0x40], r14
push 8
pop rcx
jmp 0x140008a33
mov r15, r13
jmp 0x140008a8f
mov rdi, r14
jmp 0x140008a69
xor ecx, ecx
lea r8, [rdi*8]
mov dl, al
shl edx, 3
mov qword [rbp - 0x48], rcx
lea rcx, [rbp + 0x218]
lea r9, [rbp - 0x50]
call fcn.14001ace8
cmp qword [rbp + 0x218], 0
jne 0x1400092b5
mov rsi, qword [rbp + 0x220]
lea rax, [rsi + r15*8]
push 1
pop rcx
cmp rcx, r12
jae 0x140008a85
and qword [rax], 0
inc rcx
add rax, 8
inc r15
jmp 0x140008a70
and qword [rax], 0
inc r15
mov r14, rdi
mov rcx, qword [rbp + 0x208]
mov edi, r13d
jmp 0x14000899d
mov edi, r13d
shr edi, 3
cmp r15, rdi
jb 0x1400092d6
mov r12d, eax
cmp r13d, 8
jae 0x140008b00
test rdi, rdi
je 0x140008b4b
cmp rdi, 5
push 4
pop r15
cmovae r15, rdi
mov r8, r15
shl r8, 4
lea r9, [rbp - 0x50]
and qword [r9 + 8], 0
lea rbx, [rbp + 0x218]
push 8
pop rdx
mov rcx, rbx
call fcn.14001ace8
cmp qword [rbx], 0
jne 0x14000932b
mov rbx, qword [rbp + 0x220]
jmp 0x140008b51
mov r15, rdi
shl r15, 4
mov al, byte [0x14004fc00]
mov rcx, r15
call fcn.140017090
test rax, rax
je 0x140009320
mov rbx, rax
add rax, 8
xor r13d, r13d
lea rcx, [rbp + 0x208]
mov rdx, qword [rsi + r13*8]
mov qword [rax - 8], rcx
mov qword [rax], rdx
inc r13
add rax, 0x10
cmp rdi, r13
jne 0x140008b2f
mov r15, rdi
jmp 0x140008b54
push 8
pop rbx
xor r15d, r15d
xor r13d, r13d
mov rcx, r14
mov rdx, rsi
call fcn.14001b17b
test r12d, r12d
je 0x1400091dc
shl r13, 4
add r13, rbx
mov qword [rbp + 0x1d0], rbx
mov qword [rbp + 0x1d8], rbx
mov qword [rbp + 0x1e0], r15
mov qword [rbp + 0x1e8], r13
lea r14, [rbp - 0x50]
push 2
pop rdi
push 3
pop r15
cmp rbx, r13
je 0x140009192
lea rax, [rbx + 0x10]
mov qword [rbp + 0x1d8], rax
mov r12, qword [rbx]
mov rsi, qword [rbx + 8]
mov r8d, 0x208
mov rcx, r14
xor edx, edx
call fcn.1400295f0
mov rcx, qword [r12]
mov rdx, rsi
mov r8, r14
mov r9d, 0x104
call sub.psapi.dll_GetModuleBaseNameW
test eax, eax
je 0x140009202
mov qword [rbp + 0x1c0], r12
mov qword [rbp + 0x210], rsi
mov edx, eax
mov rcx, r14
lea r8, str.C:Users_notev.cargo_registry_srcindex.crates.io_6f17d22bba15001fwinproc_0.6.4_srcprocessmodule.rs
call fcn.14001b211
mov r8, rdx
lea rcx, [rbp + 0x218]
mov rdx, rax
call fcn.140014fd0
mov rcx, qword [rbp + 0x220]
mov r13, qword [rbp + 0x228]
test r13, r13
je 0x140008cca
lea rbx, [rcx + r13]
xor esi, esi
mov qword [rbp + 0x258], rcx
push 1
pop r12
lea rax, [rcx + 1]
mov dl, byte [rcx]
test dl, dl
js 0x140008c46
mov rdx, r12
jmp 0x140008cb2
cmp dl, 0xe0
jae 0x140008c5b
add rcx, 2
cmp rax, rbx
cmovne rax, rcx
mov rdx, rdi
jmp 0x140008cb2
cmp dl, 0xed
jne 0x140008c84
cmp rax, rbx
je 0x140008cc1
lea rax, [rcx + 2]
cmp rax, rbx
je 0x140008cc1
cmp byte [rcx + 1], 0x9f
ja 0x140008ef1
add rcx, 3
mov rdx, r15
mov rax, rcx
jmp 0x140008cb2
add rcx, 2
cmp rax, rbx
cmove rcx, rax
xor eax, eax
cmp rcx, rbx
setne al
add rax, rcx
cmp dl, 0xf0
jae 0x140008ca4
mov rdx, r15
jmp 0x140008cb2
xor ecx, ecx
cmp rax, rbx
setne cl
add rax, rcx
push 4
pop rdx
add rsi, rdx
mov rcx, rax
cmp rax, rbx
jne 0x140008c37
mov r12, qword [rbp + 0x258]
jmp 0x140008ccd
mov r12, rcx
lea rcx, [rbp + 0x240]
mov rdx, r13
call fcn.14001ae14
cmp qword [rbp + 0x240], 0
mov rsi, qword [rbp + 0x248]
jne 0x140009232
mov rdi, qword [rbp + 0x250]
mov rcx, rdi
mov rdx, r12
mov r8, r13
call fcn.140028e70
mov r12, rdi
mov rcx, qword [rbp + 0x218]
mov rdx, qword [rbp + 0x220]
call fcn.14001ae7a
lea rcx, [rbp + 0x218]
mov rdx, r12
mov qword [rbp + 0x200], r13
mov r8, r13
call fcn.140003010
mov rdi, qword [rbp + 0x220]
mov r8, qword [rbp + 0x228]
lea rcx, [rbp + 0x240]
mov rdx, rdi
call fcn.14000a8aa
mov rcx, r14
mov rdx, qword [rbp + 0x1f8]
mov r8, qword [rbp + 0x1f0]
call fcn.14000a8aa
mov r13, qword [rbp + 0x248]
mov rdx, qword [rbp + 0x250]
mov r15, r14
mov r14, qword [rbp - 0x48]
mov r9, qword [rbp - 0x40]
mov rcx, r13
mov r8, r14
call fcn.1400083ef
mov ebx, eax
mov rcx, qword [rbp - 0x50]
mov rdx, r14
call fcn.14001ae7a
mov rcx, qword [rbp + 0x240]
mov rdx, r13
call fcn.14001ae7a
mov rcx, qword [rbp + 0x218]
mov rdx, rdi
call fcn.14001ae7a
mov rcx, rsi
mov qword [rbp + 0x258], r12
mov rdx, r12
call fcn.14001ae7a
test bl, bl
jne 0x140009171
mov r8d, 0x208
mov rcx, r15
xor edx, edx
call fcn.1400295f0
mov rax, qword [rbp + 0x1c0]
mov rcx, qword [rax]
mov rdx, qword [rbp + 0x210]
mov r8, r15
mov r9d, 0x104
call sub.psapi.dll_GetModuleFileNameExW
test eax, eax
je 0x14000924d
mov edx, eax
mov rcx, r15
lea r8, str.C:Users_notev.cargo_registry_srcindex.crates.io_6f17d22bba15001fwinproc_0.6.4_srcprocessmodule.rs
call fcn.14001b211
mov r8, rdx
lea rcx, [rbp + 0x220]
mov rdx, rax
call fcn.140014fd0
mov rsi, qword [rbp + 0x220]
mov rdi, qword [rbp + 0x228]
mov r8, qword [rbp + 0x230]
mov rcx, r15
mov rdx, rdi
call fcn.140004dd0
cmp qword [rbp - 0x50], 0
jne 0x140009241
mov rdx, qword [rbp - 0x48]
mov r8, qword [rbp - 0x40]
lea rcx, [rbp + 0x218]
call fcn.14000a8aa
mov rcx, r15
mov rdx, qword [rbp + 0x1f8]
mov r8, qword [rbp + 0x1f0]
call fcn.14000a8aa
mov rbx, qword [rbp + 0x220]
mov rdx, qword [rbp + 0x228]
mov r14, qword [rbp - 0x48]
mov r9, qword [rbp - 0x40]
mov rcx, rbx
mov r8, r14
call fcn.1400083ef
mov r13d, eax
mov rcx, qword [rbp - 0x50]
mov rdx, r14
call fcn.14001ae7a
mov rcx, qword [rbp + 0x218]
mov rdx, rbx
call fcn.14001ae7a
mov rcx, rsi
mov rdx, rdi
call fcn.14001ae7a
test r13b, r13b
jne 0x140009171
mov rbx, qword [rbp + 0x1d8]
mov r13, qword [rbp + 0x1e8]
mov r14, r15
push 2
pop rdi
push 3
pop r15
jmp 0x140008b96
test r13, r13
js 0x14000931b
mov al, byte [0x14004fc00]
mov rcx, r13
call fcn.140017090
test rax, rax
mov rdx, qword [rbp + 0x258]
je 0x140009310
mov qword [rbp + 0x240], r13
mov qword [rbp + 0x248], rax
mov r15, r13
sub r13, rsi
jb 0x1400092fc
mov rcx, rax
mov r8, rsi
mov rdi, rax
call fcn.140028e70
mov rcx, rdi
mov qword [rbp + 0x250], rsi
mov rdi, rsi
cmp r13, 2
lea r14, [rbp - 0x50]
ja 0x140008f78
lea rcx, [rbp + 0x240]
mov rdx, rsi
push 3
pop r8
call fcn.14002a990
mov rcx, qword [rbp + 0x248]
mov rdi, qword [rbp + 0x250]
lea rax, [rcx + rdi]
mov byte [rax + 2], 0xbd
mov word [rax], 0xbfef
add rdi, 3
mov qword [rbp + 0x250], rdi
mov r13, rsi
add r13, 3
cmp r13, r15
ja 0x1400092e8
je 0x1400090f3
mov rax, qword [rbp + 0x258]
lea r8, [rax + r13]
mov rsi, r13
mov qword [rbp + 0x200], r8
lea rax, [r8 + 1]
mov dl, byte [r8]
test dl, dl
js 0x140008fcb
mov rdx, r12
jmp 0x14000900c
cmp dl, 0xe0
jae 0x140008fe0
add r8, 2
cmp rax, rbx
cmovne rax, r8
push 2
pop rdx
jmp 0x14000900c
cmp dl, 0xed
jne 0x14000901c
cmp rax, rbx
je 0x1400090f6
lea rax, [r8 + 2]
cmp rax, rbx
je 0x1400090f6
cmp byte [r8 + 1], 0x9f
ja 0x14000904a
add r8, 3
push 3
pop rdx
mov rax, r8
add rsi, rdx
mov r8, rax
cmp rax, rbx
jne 0x140008fbb
jmp 0x1400090f6
add r8, 2
cmp rax, rbx
cmove r8, rax
xor eax, eax
cmp r8, rbx
setne al
add rax, r8
cmp dl, 0xf0
jae 0x14000903b
push 3
jmp 0x140008fdd
xor edx, edx
cmp rax, rbx
setne dl
add rax, rdx
push 4
jmp 0x140008fdd
mov r8, rsi
sub r8, r13
jb 0x14000933e
cmp rsi, r15
ja 0x140009352
mov r14, qword [rbp + 0x240]
mov rax, r14
sub rax, rdi
cmp rax, r8
jae 0x14000909b
lea rcx, [rbp + 0x240]
mov rdx, rdi
mov r13, r8
call fcn.14002a990
mov rdi, qword [rbp + 0x250]
mov r14, qword [rbp + 0x240]
mov rcx, qword [rbp + 0x248]
mov r8, r13
mov qword [rbp + 0x1c8], rcx
add rcx, rdi
mov rdx, qword [rbp + 0x200]
mov r13, r8
call fcn.140028e70
add rdi, r13
mov qword [rbp + 0x250], rdi
sub r14, rdi
cmp r14, 2
jbe 0x1400090d7
lea r14, [rbp - 0x50]
mov rcx, qword [rbp + 0x1c8]
jmp 0x140008f78
lea rcx, [rbp + 0x240]
mov rdx, rdi
push 3
pop r8
call fcn.14002a990
lea r14, [rbp - 0x50]
jmp 0x140008f6a
mov r13, r15
sub r15, r13
mov rax, qword [rbp + 0x240]
sub rax, rdi
cmp rax, r15
jae 0x14000912d
lea rcx, [rbp + 0x240]
mov rdx, rdi
mov rsi, r15
mov r8, r15
call fcn.14002a990
mov rcx, qword [rbp + 0x248]
mov rdi, qword [rbp + 0x250]
jmp 0x140009130
mov rsi, r15
mov rdx, qword [rbp + 0x258]
add rdx, r13
add rcx, rdi
mov r13, rsi
mov r8, rsi
call fcn.140028e70
add r13, rdi
mov rsi, qword [rbp + 0x240]
mov r12, qword [rbp + 0x248]
movabs rax, 0x8000000000000000
cmp rsi, rax
je 0x140008ccd
jmp 0x140008d09
lea rcx, [rbp + 0x1d0]
call fcn.1400085a2
mov rcx, qword [rbp + 0x208]
call fcn.14001b1aa
mov rax, qword [rbp + 0x210]
jmp 0x1400091ac
lea rcx, [rbp + 0x1d0]
call fcn.1400085a2
mov rcx, qword [rbp + 0x208]
call fcn.14001b1aa
xor eax, eax
add rsp, 0x2e8
pop rbx
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
pop rbp
ret
call fcn.14001b193
mov r15, rax
mov rcx, r14
mov rdx, rsi
call fcn.14001b17b
xor eax, eax
mov qword [rbp + 0x258], rax
lea r8, [rbp - 0x50]
mov rax, qword [rbp + 0x258]
mov qword [r8], rax
mov qword [r8 + 8], r15
mov qword [r8 + 0x10], rbx
mov qword [r8 + 0x18], r13
lea rax, str.C:Users_notev.cargo_registry_srcindex.crates.io_6f17d22bba15001fdinvoke_0.1.4_srclib.rs
jmp 0x140009298
call fcn.14001b193
lea r8, [rbp - 0x50]
and qword [r8], 0
mov qword [r8 + 8], rax
mov rax, qword [rbp + 0x258]
mov qword [r8 + 0x10], rax
mov rax, qword [rbp + 0x200]
mov qword [r8 + 0x18], rax
lea rax, str.C:Users_notev.cargo_registry_srcindex.crates.io_6f17d22bba15001fdinvoke_0.1.4_srclib.rs
jmp 0x140009298
mov rdx, qword [rbp + 0x250]
mov rcx, rsi
call fcn.140029980
lea rcx, str.C:Users_notev.cargo_registry_srcindex.crates.io_6f17d22bba15001fdinvoke_0.1.4_srclib.rs
call fcn.140029dd0
call fcn.14001b193
mov qword [rbp + 0x220], rax
and qword [rbp + 0x218], 0
mov rax, qword [rbp + 0x238]
lea r8, [rbp - 0x50]
mov qword [r8 + 0x20], rax
movups xmm0, xmmword [rbp + 0x228]
movaps xmmword [r8 + 0x10], xmm0
mov rax, qword [rbp + 0x218]
mov qword [r8], rax
mov rax, qword [rbp + 0x220]
mov qword [r8 + 8], rax
lea rax, str.C:Users_notev.cargo_registry_srcindex.crates.io_6f17d22bba15001fdinvoke_0.1.4_srclib.rs
mov qword [rsp + 0x20], rax
lea rcx, str.called__Result::unwrap____on_an__Err__value
lea r9, [0x14003f3a0]
push 0x2b
pop rdx
call fcn.140029d40
jmp 0x1400092ca
mov rax, qword [rbp + 0x220]
mov qword [rbp + 0x210], rax
mov rdx, qword [rbp + 0x228]
mov rcx, qword [rbp + 0x210]
call fcn.140029980
lea r8, str.C:Users_notev.cargo_registry_srcindex.crates.io_6f17d22bba15001fwinproc_0.6.4_srcprocessmod.rs
mov rcx, rdi
mov rdx, r15
call fcn.140029b20
lea r8, str.library_std_src_sys_commonwtf8.rs
mov rcx, r13
mov rdx, r15
call fcn.140029aa0
jmp 0x140009364
lea r8, str.library_std_src_sys_commonwtf8.rs
mov rcx, rsi
mov rdx, r15
call fcn.140029b20
jmp 0x140009364
push 1
pop rcx
mov rdx, r13
call fcn.140029980
call fcn.140002af0
push 8
pop rcx
mov rdx, r15
call fcn.140029980
mov rcx, qword [rbp + 0x220]
mov rdx, qword [rbp + 0x228]
call fcn.140029980
lea r8, str.library_std_src_sys_commonwtf8.rs
mov rcx, r13
mov rdx, rsi
call fcn.140029cd0
jmp 0x140009364
mov rdx, r15
lea r8, str.library_std_src_sys_commonwtf8.rs
mov rcx, rsi
call fcn.140029b20
ud2