Function at 0x140007681
Capabilities:
Enumerate process modules

Disassembly:
push rbp
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbx
sub rsp, 0x2e8
lea rbp, [rsp + 0x80]
mov qword [rbp + 0x260], 0xfffffffffffffffe
mov qword [rbp + 0x1f0], rdx
mov qword [rbp + 0x1f8], rcx
call qword [sym.imp.kernel32.dll_GetCurrentProcess]
lea rbx, [rbp + 0x1d0]
and dword [rbx], 0
mov rcx, rax
mov qword [rbp + 0x208], rax
xor eax, eax
mov qword [rbp + 0x210], rax
push 8
pop rsi
push 4
pop rax
mov qword [rbp + 0x258], rax
xor r14d, r14d
xor r15d, r15d
xor edi, edi
lea r8d, [r15*8]
mov dword [rsp + 0x20], 3
mov rdx, rsi
mov r9, rbx
call sub.psapi.dll_EnumProcessModulesEx
test eax, eax
je 0x140007f10
mov r13d, dword [rbp + 0x1d0]
cmp r13d, edi
jbe 0x1400077ee
mov r12, r13
sub r12, r15
jbe 0x140007777
mov rax, r14
sub rax, r15
cmp rax, r12
jae 0x14000777c
mov rdi, r15
add rdi, r12
jb 0x140008003
lea rax, [r14 + r14]
cmp rax, rdi
cmova rdi, rax
xor edx, edx
mov rax, rdi
shr rax, 0x3c
sete al
cmp rdi, 5
push 4
pop rcx
cmovb rdi, rcx
test r14, r14
je 0x140007781
shl r14, 3
mov qword [rbp - 0x50], rsi
mov qword [rbp - 0x40], r14
push 8
pop rcx
jmp 0x140007783
mov r15, r13
jmp 0x1400077df
mov rdi, r14
jmp 0x1400077b9
xor ecx, ecx
lea r8, [rdi*8]
mov dl, al
shl edx, 3
mov qword [rbp - 0x48], rcx
lea rcx, [rbp + 0x218]
lea r9, [rbp - 0x50]
call fcn.140019348
cmp qword [rbp + 0x218], 0
jne 0x140008005
mov rsi, qword [rbp + 0x220]
lea rax, [rsi + r15*8]
push 1
pop rcx
cmp rcx, r12
jae 0x1400077d5
and qword [rax], 0
inc rcx
add rax, 8
inc r15
jmp 0x1400077c0
and qword [rax], 0
inc r15
mov r14, rdi
mov rcx, qword [rbp + 0x208]
mov edi, r13d
jmp 0x1400076ed
mov edi, r13d
shr edi, 3
cmp r15, rdi
jb 0x140008026
mov r12d, eax
cmp r13d, 8
jae 0x140007850
test rdi, rdi
je 0x14000789b
cmp rdi, 5
push 4
pop r15
cmovae r15, rdi
mov r8, r15
shl r8, 4
lea r9, [rbp - 0x50]
and qword [r9 + 8], 0
lea rbx, [rbp + 0x218]
push 8
pop rdx
mov rcx, rbx
call fcn.140019348
cmp qword [rbx], 0
jne 0x14000807b
mov rbx, qword [rbp + 0x220]
jmp 0x1400078a1
mov r15, rdi
shl r15, 4
mov al, byte [0x140050c00]
mov rcx, r15
call fcn.1400156f0
test rax, rax
je 0x140008070
mov rbx, rax
add rax, 8
xor r13d, r13d
lea rcx, [rbp + 0x208]
mov rdx, qword [rsi + r13*8]
mov qword [rax - 8], rcx
mov qword [rax], rdx
inc r13
add rax, 0x10
cmp rdi, r13
jne 0x14000787f
mov r15, rdi
jmp 0x1400078a4
push 8
pop rbx
xor r15d, r15d
xor r13d, r13d
mov rcx, r14
mov rdx, rsi
call fcn.140019805
test r12d, r12d
je 0x140007f2c
shl r13, 4
add r13, rbx
mov qword [rbp + 0x1d0], rbx
mov qword [rbp + 0x1d8], rbx
mov qword [rbp + 0x1e0], r15
mov qword [rbp + 0x1e8], r13
lea r14, [rbp - 0x50]
push 2
pop rdi
push 3
pop r15
cmp rbx, r13
je 0x140007ee2
lea rax, [rbx + 0x10]
mov qword [rbp + 0x1d8], rax
mov r12, qword [rbx]
mov rsi, qword [rbx + 8]
mov r8d, 0x208
mov rcx, r14
xor edx, edx
call fcn.140027c90
mov rcx, qword [r12]
mov rdx, rsi
mov r8, r14
mov r9d, 0x104
call sub.psapi.dll_GetModuleBaseNameW
test eax, eax
je 0x140007f52
mov qword [rbp + 0x1c0], r12
mov qword [rbp + 0x210], rsi
mov edx, eax
mov rcx, r14
lea r8, str.C:Users_notev.cargo_registry_srcindex.crates.io_6f17d22bba15001fwinproc_0.6.4_srcprocessmodule.rs
call fcn.1400198ab
mov r8, rdx
lea rcx, [rbp + 0x218]
mov rdx, rax
call fcn.140013d20
mov rcx, qword [rbp + 0x220]
mov r13, qword [rbp + 0x228]
test r13, r13
je 0x140007a1a
lea rbx, [rcx + r13]
xor esi, esi
mov qword [rbp + 0x258], rcx
push 1
pop r12
lea rax, [rcx + 1]
mov dl, byte [rcx]
test dl, dl
js 0x140007996
mov rdx, r12
jmp 0x140007a02
cmp dl, 0xe0
jae 0x1400079ab
add rcx, 2
cmp rax, rbx
cmovne rax, rcx
mov rdx, rdi
jmp 0x140007a02
cmp dl, 0xed
jne 0x1400079d4
cmp rax, rbx
je 0x140007a11
lea rax, [rcx + 2]
cmp rax, rbx
je 0x140007a11
cmp byte [rcx + 1], 0x9f
ja 0x140007c41
add rcx, 3
mov rdx, r15
mov rax, rcx
jmp 0x140007a02
add rcx, 2
cmp rax, rbx
cmove rcx, rax
xor eax, eax
cmp rcx, rbx
setne al
add rax, rcx
cmp dl, 0xf0
jae 0x1400079f4
mov rdx, r15
jmp 0x140007a02
xor ecx, ecx
cmp rax, rbx
setne cl
add rax, rcx
push 4
pop rdx
add rsi, rdx
mov rcx, rax
cmp rax, rbx
jne 0x140007987
mov r12, qword [rbp + 0x258]
jmp 0x140007a1d
mov r12, rcx
lea rcx, [rbp + 0x240]
mov rdx, r13
call fcn.140019474
cmp qword [rbp + 0x240], 0
mov rsi, qword [rbp + 0x248]
jne 0x140007f82
mov rdi, qword [rbp + 0x250]
mov rcx, rdi
mov rdx, r12
mov r8, r13
call fcn.140027510
mov r12, rdi
mov rcx, qword [rbp + 0x218]
mov rdx, qword [rbp + 0x220]
call fcn.1400194da
lea rcx, [rbp + 0x218]
mov rdx, r12
mov qword [rbp + 0x200], r13
mov r8, r13
call fcn.140001e20
mov rdi, qword [rbp + 0x220]
mov r8, qword [rbp + 0x228]
lea rcx, [rbp + 0x240]
mov rdx, rdi
call fcn.1400095fa
mov rcx, r14
mov rdx, qword [rbp + 0x1f8]
mov r8, qword [rbp + 0x1f0]
call fcn.1400095fa
mov r13, qword [rbp + 0x248]
mov rdx, qword [rbp + 0x250]
mov r15, r14
mov r14, qword [rbp - 0x48]
mov r9, qword [rbp - 0x40]
mov rcx, r13
mov r8, r14
call fcn.14000713f
mov ebx, eax
mov rcx, qword [rbp - 0x50]
mov rdx, r14
call fcn.1400194da
mov rcx, qword [rbp + 0x240]
mov rdx, r13
call fcn.1400194da
mov rcx, qword [rbp + 0x218]
mov rdx, rdi
call fcn.1400194da
mov rcx, rsi
mov qword [rbp + 0x258], r12
mov rdx, r12
call fcn.1400194da
test bl, bl
jne 0x140007ec1
mov r8d, 0x208
mov rcx, r15
xor edx, edx
call fcn.140027c90
mov rax, qword [rbp + 0x1c0]
mov rcx, qword [rax]
mov rdx, qword [rbp + 0x210]
mov r8, r15
mov r9d, 0x104
call sub.psapi.dll_GetModuleFileNameExW
test eax, eax
je 0x140007f9d
mov edx, eax
mov rcx, r15
lea r8, str.C:Users_notev.cargo_registry_srcindex.crates.io_6f17d22bba15001fwinproc_0.6.4_srcprocessmodule.rs
call fcn.1400198ab
mov r8, rdx
lea rcx, [rbp + 0x220]
mov rdx, rax
call fcn.140013d20
mov rsi, qword [rbp + 0x220]
mov rdi, qword [rbp + 0x228]
mov r8, qword [rbp + 0x230]
mov rcx, r15
mov rdx, rdi
call fcn.140003b20
cmp qword [rbp - 0x50], 0
jne 0x140007f91
mov rdx, qword [rbp - 0x48]
mov r8, qword [rbp - 0x40]
lea rcx, [rbp + 0x218]
call fcn.1400095fa
mov rcx, r15
mov rdx, qword [rbp + 0x1f8]
mov r8, qword [rbp + 0x1f0]
call fcn.1400095fa
mov rbx, qword [rbp + 0x220]
mov rdx, qword [rbp + 0x228]
mov r14, qword [rbp - 0x48]
mov r9, qword [rbp - 0x40]
mov rcx, rbx
mov r8, r14
call fcn.14000713f
mov r13d, eax
mov rcx, qword [rbp - 0x50]
mov rdx, r14
call fcn.1400194da
mov rcx, qword [rbp + 0x218]
mov rdx, rbx
call fcn.1400194da
mov rcx, rsi
mov rdx, rdi
call fcn.1400194da
test r13b, r13b
jne 0x140007ec1
mov rbx, qword [rbp + 0x1d8]
mov r13, qword [rbp + 0x1e8]
mov r14, r15
push 2
pop rdi
push 3
pop r15
jmp 0x1400078e6
test r13, r13
js 0x14000806b
mov al, byte [0x140050c00]
mov rcx, r13
call fcn.1400156f0
test rax, rax
mov rdx, qword [rbp + 0x258]
je 0x140008060
mov qword [rbp + 0x240], r13
mov qword [rbp + 0x248], rax
mov r15, r13
sub r13, rsi
jb 0x14000804c
mov rcx, rax
mov r8, rsi
mov rdi, rax
call fcn.140027510
mov rcx, rdi
mov qword [rbp + 0x250], rsi
mov rdi, rsi
cmp r13, 2
lea r14, [rbp - 0x50]
ja 0x140007cc8
lea rcx, [rbp + 0x240]
mov rdx, rsi
push 3
pop r8
call fcn.140029030
mov rcx, qword [rbp + 0x248]
mov rdi, qword [rbp + 0x250]
lea rax, [rcx + rdi]
mov byte [rax + 2], 0xbd
mov word [rax], 0xbfef
add rdi, 3
mov qword [rbp + 0x250], rdi
mov r13, rsi
add r13, 3
cmp r13, r15
ja 0x140008038
je 0x140007e43
mov rax, qword [rbp + 0x258]
lea r8, [rax + r13]
mov rsi, r13
mov qword [rbp + 0x200], r8
lea rax, [r8 + 1]
mov dl, byte [r8]
test dl, dl
js 0x140007d1b
mov rdx, r12
jmp 0x140007d5c
cmp dl, 0xe0
jae 0x140007d30
add r8, 2
cmp rax, rbx
cmovne rax, r8
push 2
pop rdx
jmp 0x140007d5c
cmp dl, 0xed
jne 0x140007d6c
cmp rax, rbx
je 0x140007e46
lea rax, [r8 + 2]
cmp rax, rbx
je 0x140007e46
cmp byte [r8 + 1], 0x9f
ja 0x140007d9a
add r8, 3
push 3
pop rdx
mov rax, r8
add rsi, rdx
mov r8, rax
cmp rax, rbx
jne 0x140007d0b
jmp 0x140007e46
add r8, 2
cmp rax, rbx
cmove r8, rax
xor eax, eax
cmp r8, rbx
setne al
add rax, r8
cmp dl, 0xf0
jae 0x140007d8b
push 3
jmp 0x140007d2d
xor edx, edx
cmp rax, rbx
setne dl
add rax, rdx
push 4
jmp 0x140007d2d
mov r8, rsi
sub r8, r13
jb 0x14000808e
cmp rsi, r15
ja 0x1400080a2
mov r14, qword [rbp + 0x240]
mov rax, r14
sub rax, rdi
cmp rax, r8
jae 0x140007deb
lea rcx, [rbp + 0x240]
mov rdx, rdi
mov r13, r8
call fcn.140029030
mov rdi, qword [rbp + 0x250]
mov r14, qword [rbp + 0x240]
mov rcx, qword [rbp + 0x248]
mov r8, r13
mov qword [rbp + 0x1c8], rcx
add rcx, rdi
mov rdx, qword [rbp + 0x200]
mov r13, r8
call fcn.140027510
add rdi, r13
mov qword [rbp + 0x250], rdi
sub r14, rdi
cmp r14, 2
jbe 0x140007e27
lea r14, [rbp - 0x50]
mov rcx, qword [rbp + 0x1c8]
jmp 0x140007cc8
lea rcx, [rbp + 0x240]
mov rdx, rdi
push 3
pop r8
call fcn.140029030
lea r14, [rbp - 0x50]
jmp 0x140007cba
mov r13, r15
sub r15, r13
mov rax, qword [rbp + 0x240]
sub rax, rdi
cmp rax, r15
jae 0x140007e7d
lea rcx, [rbp + 0x240]
mov rdx, rdi
mov rsi, r15
mov r8, r15
call fcn.140029030
mov rcx, qword [rbp + 0x248]
mov rdi, qword [rbp + 0x250]
jmp 0x140007e80
mov rsi, r15
mov rdx, qword [rbp + 0x258]
add rdx, r13
add rcx, rdi
mov r13, rsi
mov r8, rsi
call fcn.140027510
add r13, rdi
mov rsi, qword [rbp + 0x240]
mov r12, qword [rbp + 0x248]
movabs rax, 0x8000000000000000
cmp rsi, rax
je 0x140007a1d
jmp 0x140007a59
lea rcx, [rbp + 0x1d0]
call fcn.1400072f2
mov rcx, qword [rbp + 0x208]
call fcn.140019844
mov rax, qword [rbp + 0x210]
jmp 0x140007efc
lea rcx, [rbp + 0x1d0]
call fcn.1400072f2
mov rcx, qword [rbp + 0x208]
call fcn.140019844
xor eax, eax
add rsp, 0x2e8
pop rbx
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
pop rbp
ret
call fcn.14001982d
mov r15, rax
mov rcx, r14
mov rdx, rsi
call fcn.140019805
xor eax, eax
mov qword [rbp + 0x258], rax
lea r8, [rbp - 0x50]
mov rax, qword [rbp + 0x258]
mov qword [r8], rax
mov qword [r8 + 8], r15
mov qword [r8 + 0x10], rbx
mov qword [r8 + 0x18], r13
lea rax, str.C:Users_notev.cargo_registry_srcindex.crates.io_6f17d22bba15001fdinvoke_0.1.4_srclib.rs
jmp 0x140007fe8
call fcn.14001982d
lea r8, [rbp - 0x50]
and qword [r8], 0
mov qword [r8 + 8], rax
mov rax, qword [rbp + 0x258]
mov qword [r8 + 0x10], rax
mov rax, qword [rbp + 0x200]
mov qword [r8 + 0x18], rax
lea rax, str.C:Users_notev.cargo_registry_srcindex.crates.io_6f17d22bba15001fdinvoke_0.1.4_srclib.rs
jmp 0x140007fe8
mov rdx, qword [rbp + 0x250]
mov rcx, rsi
call fcn.140028020
lea rcx, str.C:Users_notev.cargo_registry_srcindex.crates.io_6f17d22bba15001fdinvoke_0.1.4_srclib.rs
call fcn.140028470
call fcn.14001982d
mov qword [rbp + 0x220], rax
and qword [rbp + 0x218], 0
mov rax, qword [rbp + 0x238]
lea r8, [rbp - 0x50]
mov qword [r8 + 0x20], rax
movups xmm0, xmmword [rbp + 0x228]
movaps xmmword [r8 + 0x10], xmm0
mov rax, qword [rbp + 0x218]
mov qword [r8], rax
mov rax, qword [rbp + 0x220]
mov qword [r8 + 8], rax
lea rax, str.C:Users_notev.cargo_registry_srcindex.crates.io_6f17d22bba15001fdinvoke_0.1.4_srclib.rs
mov qword [rsp + 0x20], rax
lea rcx, str.called__Result::unwrap____on_an__Err__value
lea r9, [0x1400405f0]
push 0x2b
pop rdx
call fcn.1400283e0
jmp 0x14000801a
mov rax, qword [rbp + 0x220]
mov qword [rbp + 0x210], rax
mov rdx, qword [rbp + 0x228]
mov rcx, qword [rbp + 0x210]
call fcn.140028020
lea r8, str.C:Users_notev.cargo_registry_srcindex.crates.io_6f17d22bba15001fwinproc_0.6.4_srcprocessmod.rs
mov rcx, rdi
mov rdx, r15
call fcn.1400281c0
lea r8, str.library_std_src_sys_commonwtf8.rs
mov rcx, r13
mov rdx, r15
call fcn.140028140
jmp 0x1400080b4
lea r8, str.library_std_src_sys_commonwtf8.rs
mov rcx, rsi
mov rdx, r15
call fcn.1400281c0
jmp 0x1400080b4
push 1
pop rcx
mov rdx, r13
call fcn.140028020
call fcn.140001900
push 8
pop rcx
mov rdx, r15
call fcn.140028020
mov rcx, qword [rbp + 0x220]
mov rdx, qword [rbp + 0x228]
call fcn.140028020
lea r8, str.library_std_src_sys_commonwtf8.rs
mov rcx, r13
mov rdx, rsi
call fcn.140028370
jmp 0x1400080b4
mov rdx, r15
lea r8, str.library_std_src_sys_commonwtf8.rs
mov rcx, rsi
call fcn.1400281c0
ud2