Function at 0x140004a60
Capabilities:
Enumerate process modules

Disassembly:
push rbp
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbx
mov eax, 0x22c8
call fcn.14001ebd0
sub rsp, rax
lea rbp, [rsp + 0x80]
mov qword [rbp + 0x2240], 0xfffffffffffffffe
mov qword [rbp + 0x21e0], rcx
mov qword [rbp + 0x2220], 0
mov qword [rbp + 0x2228], 8
mov qword [rbp + 0x2230], 0
lea rdi, [rbp - 0x58]
mov r8d, 0x2000
mov rcx, rdi
xor edx, edx
call sub.VCRUNTIME140.dll_memset
mov dword [rbp + 0x223c], 0
lea r8, [rbp + 0x223c]
mov rcx, rdi
mov edx, 0x2000
call qword [sym.imp.kernel32.dll_K32EnumProcesses]
mov esi, dword [rbp + 0x223c]
shr esi, 2
lea rbx, [rbp + 0x1fa8]
mov r12, qword [sym.imp.kernel32.dll_OpenProcess]
lea r15, [rbp + 0x21c8]
xor r14d, r14d
jmp 0x140004b13
inc r14
cmp r14, rsi
jae 0x140004d17
cmp r14, 0x7ff
ja 0x140004d47
mov edi, dword [rbp + r14*4 - 0x58]
mov r8d, 0x208
mov rcx, rbx
xor edx, edx
call sub.VCRUNTIME140.dll_memset
mov ecx, 0x438
xor edx, edx
mov r8d, edi
call r12
mov rdi, rax
dec rax
cmp rax, 0xfffffffffffffffe
jae 0x140004ce0
mov qword [rbp + 0x2210], rdi
mov qword [rbp + 0x2208], 0
mov rcx, rdi
xor edx, edx
mov r8, rbx
mov r9d, 0x104
call qword [sym.imp.kernel32.dll_K32GetModuleFileNameExW]
test eax, eax
je 0x140004c83
movzx eax, byte [0x140030141]
mov ecx, 0x208
mov edx, 2
call fcn.140002bc0
test rax, rax
je 0x140004d5d
mov r13, rax
mov r8d, 0x208
mov rcx, rax
mov rdx, rbx
call sub.VCRUNTIME140.dll_memcpy
mov rax, r13
add rax, 0x208
mov qword [rbp + 0x2200], r13
mov qword [rbp + 0x21e8], r13
mov qword [rbp + 0x21f0], rax
mov byte [rbp + 0x21f8], 0
mov rcx, r15
lea rdx, [rbp + 0x21e8]
call fcn.1400050f0
mov edx, 0x208
mov r8d, 2
mov rcx, qword [rbp + 0x2200]
call fcn.140002bd0
lea rcx, [rbp + 0x21b0]
mov rdx, r15
call fcn.140005910
mov r13, qword [rbp + 0x2230]
cmp r13, qword [rbp + 0x2220]
jne 0x140004c32
lea rcx, [rbp + 0x2220]
call fcn.1400056f0
mov rax, qword [rbp + 0x2228]
lea rcx, [r13*2]
add rcx, r13
mov rdx, qword [rbp + 0x21c0]
mov qword [rax + rcx*8 + 0x10], rdx
movups xmm0, xmmword [rbp + 0x21b0]
movups xmmword [rax + rcx*8], xmm0
inc r13
mov qword [rbp + 0x2230], r13
mov rdx, qword [rbp + 0x21c8]
test rdx, rdx
je 0x140004c83
mov rcx, qword [rbp + 0x21d0]
mov r8d, 1
call fcn.140002bd0
mov rcx, rdi
call qword [sym.imp.kernel32.dll_CloseHandle]
test eax, eax
jne 0x140004cbe
call fcn.140006070
mov qword [rbp + 0x21f0], rax
mov dword [rbp + 0x21f8], edx
mov qword [rbp + 0x21e8], 1
test rax, rax
je 0x140004cbe
lea rcx, [rbp + 0x21f0]
call fcn.140005c90
cmp qword [rbp + 0x2208], 0
je 0x140004b10
mov rax, qword [rbp + 0x2210]
test rax, rax
jne 0x140004d06
jmp 0x140004b10
call fcn.140006070
mov dword [rbp + 0x2218], edx
mov qword [rbp + 0x2210], rax
mov qword [rbp + 0x2208], 1
test rax, rax
je 0x140004b10
lea rcx, [rbp + 0x2210]
call fcn.140005c90
jmp 0x140004b10
mov rcx, qword [rbp + 0x2230]
mov rax, qword [rbp + 0x21e0]
mov qword [rax + 0x10], rcx
movups xmm0, xmmword [rbp + 0x2220]
movups xmmword [rax], xmm0
add rsp, 0x22c8
pop rbx
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
pop rbp
ret
lea r8, str.C:UsersFrank.cargo_registry_srcindex.crates.io_6f17d22bba15001fmem_rs_0.1.5_srcprocessprocess_name.rs
mov edx, 0x800
mov rcx, r14
call fcn.1400208a0
jmp 0x140004d6c
mov ecx, 2
mov edx, 0x208
call fcn.140020580
ud2