Function at 0x14000d068
Capabilities:
Enumerate process modules

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x2d8
mov qword [rsp + 0x88], rdx
mov qword [rsp + 0x80], rcx
call qword [sym.imp.kernel32.dll_GetCurrentProcess]
mov r15, rax
mov qword [rsp + 0x60], rax
lea r12, [rsp + 0x90]
and dword [r12], 0
xor eax, eax
mov qword [rsp + 0x30], rax
mov r14d, 8
xor esi, esi
xor edi, edi
mov ebx, edi
mov rdi, rsi
mov rsi, rdi
lea r8d, [rdi*8]
mov dword [rsp + 0x20], 3
mov rcx, r15
mov rdx, r14
mov r9, r12
call sub.psapi.dll_EnumProcessModulesEx
test eax, eax
je 0x14000d5a4
mov edi, dword [rsp + 0x90]
cmp edi, ebx
jbe 0x14000d1ee
mov r13, rdi
mov ebx, edi
sub r13, rsi
jbe 0x14000d0bc
mov rbx, qword [rsp + 0x30]
mov rax, rbx
sub rax, rsi
cmp rax, r13
jae 0x14000d1bf
mov rbp, rsi
add rbp, r13
jae 0x14000d121
xor ecx, ecx
jmp 0x14000d1b7
lea rax, [rbx + rbx]
cmp rax, rbp
cmova rbp, rax
cmp rbp, 5
mov eax, 4
cmovb rbp, rax
xor edx, edx
mov rax, rbp
shr rax, 0x3c
sete al
test rbx, rbx
je 0x14000d169
lea rcx, [rbx*8]
mov qword [rsp + 0xd0], r14
mov qword [rsp + 0xe0], rcx
mov ecx, 8
jmp 0x14000d16b
xor ecx, ecx
lea r8, [rbp*8]
mov dl, al
shl rdx, 3
mov qword [rsp + 0xd8], rcx
lea rcx, [rsp + 0x38]
lea r9, [rsp + 0xd0]
call fcn.140023254
cmp qword [rsp + 0x38], 0
mov rcx, qword [rsp + 0x40]
je 0x14000d1a7
mov rbp, qword [rsp + 0x48]
jmp 0x14000d1b7
mov rbx, rbp
mov r14, rcx
movabs rcx, 0x8000000000000001
mov rdx, rbp
call fcn.14002322c
lea rax, [r14 + rsi*8]
mov ecx, 1
cmp rcx, r13
jae 0x14000d1dd
and qword [rax], 0
inc rcx
add rax, 8
inc rsi
jmp 0x14000d1c8
mov qword [rsp + 0x30], rbx
and qword [rax], 0
inc rsi
jmp 0x14000d0b7
mov r15d, edi
shr r15d, 3
cmp rsi, r15
jb 0x14000d689
mov ebp, eax
cmp edi, 8
jae 0x14000d20e
mov ebx, 8
xor edi, edi
jmp 0x14000d256
mov rsi, r15
shl rsi, 4
mov al, byte [0x14009c230]
mov edx, 8
mov rcx, rsi
call fcn.140006810
test rax, rax
je 0x14000d6a5
mov rbx, rax
add rax, 8
xor edi, edi
lea rcx, [rsp + 0x60]
mov rdx, qword [r14 + rdi*8]
mov qword [rax - 8], rcx
mov qword [rax], rdx
inc rdi
add rax, 0x10
cmp r15, rdi
jne 0x14000d23f
mov rcx, qword [rsp + 0x30]
mov rdx, r14
call fcn.140023d12
test ebp, ebp
je 0x14000d69b
shl rdi, 4
lea rax, [rbx + rdi]
mov qword [rsp + 0x90], rbx
mov qword [rsp + 0x98], r15
mov qword [rsp + 0xa0], rbx
mov qword [rsp + 0xa8], rax
lea r13, [rsp + 0xd0]
lea rbp, [rsp + 0x38]
test rdi, rdi
je 0x14000d577
lea r15, [rbx + 0x10]
mov qword [rsp + 0xa0], r15
mov r14, qword [rbx]
mov rsi, qword [rbx + 8]
mov r8d, 0x208
mov rcx, r13
xor edx, edx
call sub.VCRUNTIME140.dll_memset
mov qword [rsp + 0xc8], r14
mov rcx, qword [r14]
mov rdx, rsi
mov r8, r13
mov r9d, 0x104
call sub.psapi.dll_GetModuleBaseNameW
test eax, eax
je 0x14000d5db
mov qword [rsp + 0xc0], r15
mov qword [rsp + 0x30], rsi
mov edx, eax
mov rcx, r13
lea r8, [0x140096d20]
call fcn.140023db8
mov r8, rdx
mov rcx, rbp
mov rdx, rax
call fcn.14001c800
mov rsi, qword [rsp + 0x40]
mov r8, qword [rsp + 0x48]
lea rcx, [rsp + 0x68]
mov rdx, rsi
call fcn.140020170
mov r12, qword [rsp + 0x68]
mov r14, qword [rsp + 0x70]
mov rbx, qword [rsp + 0x78]
movabs rax, 0x8000000000000000
cmp r12, rax
jne 0x14000d375
mov rcx, rbx
call fcn.140023335
mov r12, rax
mov r15, rdx
mov rcx, rdx
mov rdx, r14
mov r8, rbx
call sub.VCRUNTIME140.dll_memcpy
mov rsi, qword [rsp + 0x40]
mov r14, r15
mov rcx, qword [rsp + 0x38]
mov rdx, rsi
call fcn.14000ee27
mov rcx, rbp
mov rdx, r14
mov qword [rsp + 0xb8], rbx
mov r8, rbx
call fcn.140005ea0
mov rsi, qword [rsp + 0x40]
mov r8, qword [rsp + 0x48]
lea rcx, [rsp + 0x68]
mov rdx, rsi
call fcn.14000d6b3
mov rcx, r13
mov rdx, qword [rsp + 0x80]
mov r8, qword [rsp + 0x88]
call fcn.14000d6b3
mov r15, qword [rsp + 0x70]
mov rdx, qword [rsp + 0x78]
mov rbx, r13
mov r13, qword [rsp + 0xd8]
mov r9, qword [rsp + 0xe0]
mov rcx, r15
mov r8, r13
call fcn.14000cd15
mov ebp, eax
mov rcx, qword [rsp + 0xd0]
mov rdx, r13
call fcn.14000ee27
mov rcx, qword [rsp + 0x68]
mov rdx, r15
call fcn.14000ee27
mov rcx, qword [rsp + 0x38]
mov rdx, rsi
call fcn.14000ee27
mov rcx, r12
mov qword [rsp + 0xb0], r14
mov rdx, r14
call fcn.14000ee27
test bpl, bpl
jne 0x14000d559
mov r8d, 0x208
mov rcx, rbx
xor edx, edx
call sub.VCRUNTIME140.dll_memset
mov rax, qword [rsp + 0xc8]
mov rcx, qword [rax]
mov rdx, qword [rsp + 0x30]
mov r8, rbx
mov r9d, 0x104
call sub.psapi.dll_GetModuleFileNameExW
test eax, eax
je 0x14000d611
mov edx, eax
mov rcx, rbx
lea r8, [0x140096d38]
call fcn.140023db8
mov r8, rdx
lea rcx, [rsp + 0x40]
mov rdx, rax
call fcn.14001c800
mov r12, qword [rsp + 0x40]
mov rsi, qword [rsp + 0x48]
mov r8, qword [rsp + 0x50]
mov rcx, rbx
mov rdx, rsi
call fcn.140007cb0
cmp qword [rsp + 0xd0], 0
jne 0x14000d671
mov rdx, qword [rsp + 0xd8]
mov r8, qword [rsp + 0xe0]
lea rcx, [rsp + 0x68]
call fcn.14000d6b3
mov rcx, rbx
mov rdx, qword [rsp + 0x80]
mov r8, qword [rsp + 0x88]
call fcn.14000d6b3
mov r15, qword [rsp + 0x70]
mov rdx, qword [rsp + 0x78]
mov r14, rbx
mov r13, qword [rsp + 0xd8]
mov r9, qword [rsp + 0xe0]
mov rcx, r15
mov r8, r13
call fcn.14000cd15
mov ebp, eax
mov rcx, qword [rsp + 0xd0]
mov rdx, r13
call fcn.14000ee27
mov rcx, qword [rsp + 0x68]
mov rdx, r15
call fcn.14000ee27
mov rcx, r12
mov rdx, rsi
call fcn.14000ee27
test bpl, bpl
jne 0x14000d559
add rdi, 0xfffffffffffffff0
mov rbx, qword [rsp + 0xc0]
mov r13, r14
lea rbp, [rsp + 0x38]
jmp 0x14000d2a0
lea rcx, [rsp + 0x90]
call fcn.14000ce8f
mov rcx, qword [rsp + 0x60]
call fcn.140023d51
mov rax, qword [rsp + 0x30]
jmp 0x14000d590
lea rcx, [rsp + 0x90]
call fcn.14000ce8f
mov rcx, qword [rsp + 0x60]
call fcn.140023d51
xor eax, eax
add rsp, 0x2d8
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
call fcn.140023d3a
mov r15, rax
mov rcx, qword [rsp + 0x30]
mov rdx, r14
call fcn.140023d12
xor eax, eax
lea r8, [rsp + 0xd0]
mov qword [r8], rax
mov qword [r8 + 8], r15
mov qword [r8 + 0x10], rbx
mov qword [r8 + 0x18], rdi
lea rax, [0x140090a20]
jmp 0x14000d654
call fcn.140023d3a
lea r8, [rsp + 0xd0]
and qword [r8], 0
mov qword [r8 + 8], rax
mov rax, qword [rsp + 0xb0]
mov qword [r8 + 0x10], rax
mov rax, qword [rsp + 0xb8]
mov qword [r8 + 0x18], rax
lea rax, [0x140090a38]
jmp 0x14000d654
call fcn.140023d3a
mov qword [rsp + 0x40], rax
and qword [rsp + 0x38], 0
mov rax, qword [rsp + 0x58]
lea r8, [rsp + 0xd0]
mov qword [r8 + 0x20], rax
movups xmm0, xmmword [rsp + 0x48]
movaps xmmword [r8 + 0x10], xmm0
mov rax, qword [rsp + 0x38]
mov qword [r8], rax
mov rax, qword [rsp + 0x40]
mov qword [r8 + 8], rax
lea rax, [0x140090a50]
mov qword [rsp + 0x20], rax
lea rcx, str.called__Result::unwrap____on_an__Err__value
lea r9, [0x140090800]
mov edx, 0x2b
call fcn.140024f70
lea rcx, str.called__Option::unwrap____on_a__None__value_rustc_07dca489ac2d933c78d3c5158e3f43beefeb02celibrarycore_srcio_borrowed_buf.rs_rustc_07dca489ac2d933c78d3c5158e3f43beefeb02celibrarycore_src_sliceiter.rs
lea r8, [0x140090a68]
mov edx, 0x2b
call fcn.140024c80
lea r8, str.Pm_t_
mov rcx, r15
mov rdx, rsi
call fcn.140024c00
mov eax, 4
jmp 0x14000d5bb
mov ecx, 8
mov rdx, rsi
call fcn.1400249f0
int3