Function at 0x140003390
Capabilities:
Enumerate process modules

Disassembly:
mov qword [rsp + 0x18], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0xe0]
sub rsp, 0x1e0
mov rax, qword [0x140044080]
xor rax, rsp
mov qword [rbp + 0xd0], rax
mov r15, rdx
mov qword [rsp + 0x50], rdx
mov r14, rcx
mov qword [rsp + 0x70], rcx
xor r13d, r13d
mov dword [rsp + 0x2c], r13d
lea r9, [rsp + 0x24]
xor r8d, r8d
xor edx, edx
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_K32EnumProcessModules]
test eax, eax
je 0x140003729
mov ebx, dword [rsp + 0x24]
shr ebx, 3
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x30], xmm0
mov r12d, r13d
mov qword [rsp + 0x40], r13
mov edx, ebx
test ebx, ebx
je 0x140003420
lea rcx, [rsp + 0x30]
call fcn.14000b540
mov r12, qword [rsp + 0x40]
lea r8d, [rbx*8]
lea r9, [rsp + 0x24]
mov rdi, qword [rsp + 0x30]
mov rdx, rdi
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_K32EnumProcessModules]
test eax, eax
je 0x140003755
mov eax, dword [rsp + 0x24]
shr eax, 3
cmp ebx, eax
cmovae ebx, eax
mov esi, ebx
mov qword [rsp + 0x48], rsi
mov qword [r14], r13
mov qword [r14 + 8], r13
mov qword [r14 + 0x10], r13
mov dword [rsp + 0x2c], 1
test ebx, ebx
je 0x14000347a
mov edx, esi
mov rcx, r14
call fcn.140007b90
mov ebx, r13d
mov dword [rsp + 0x28], ebx
test esi, esi
je 0x1400036be
mov r13, rdi
nop dword [rax]
mov r9d, 0x104
lea r8, [rbp - 0x40]
mov rdx, qword [r13]
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_K32GetModuleBaseNameA]
test eax, eax
je 0x1400037c5
xorps xmm0, xmm0
movups xmmword [rbp - 0x60], xmm0
xor edi, edi
mov qword [rbp - 0x50], rdi
mov qword [rbp - 0x48], rdi
mov r8d, eax
lea rdx, [rbp - 0x40]
lea rcx, [rbp - 0x60]
call fcn.140009f40
nop
lea r9d, [rdi + 0x18]
lea r8, [rsp + 0x58]
mov rdx, qword [r13]
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_K32GetModuleInformation]
test eax, eax
je 0x140003799
xorps xmm0, xmm0
movups xmmword [rsp + 0x78], xmm0
mov qword [rbp - 0x78], rdi
mov qword [rbp - 0x70], rdi
lea rsi, [rbp - 0x60]
cmp qword [rbp - 0x48], 0x10
setae byte [rsp + 0x20]
mov r15, qword [rbp - 0x60]
cmovae rsi, r15
mov rdi, qword [rbp - 0x50]
movabs rax, 0x7fffffffffffffff
cmp rdi, rax
ja 0x140003793
mov qword [rbp - 0x70], 0xf
cmp rdi, 0x10
jae 0x14000354b
mov qword [rbp - 0x78], rdi
movups xmm0, xmmword [rsi]
movups xmmword [rsp + 0x78], xmm0
jmp 0x1400035e6
mov rbx, rdi
or rbx, 0xf
cmp rbx, rax
jbe 0x14000356a
mov rbx, rax
movabs rax, 0x8000000000000000
add rax, 0x27
jmp 0x140003591
cmp rbx, 0x16
mov eax, 0x16
cmovb rbx, rax
lea rcx, [rbx + 1]
cmp rcx, 0x1000
jb 0x1400035b3
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x140003781
mov rcx, rax
call fcn.14000d048
mov rcx, rax
test rax, rax
je 0x140003787
add rax, 0x27
and rax, 0xffffffffffffffe0
mov qword [rax - 8], rcx
jmp 0x1400035c1
test rcx, rcx
je 0x1400035bf
call fcn.14000d048
jmp 0x1400035c1
xor eax, eax
mov qword [rsp + 0x78], rax
mov qword [rbp - 0x78], rdi
mov qword [rbp - 0x70], rbx
lea r8, [rdi + 1]
mov rdx, rsi
mov rcx, rax
call fcn.14000eed0
movups xmm0, xmmword [rsp + 0x78]
mov ebx, dword [rsp + 0x28]
mov rcx, qword [rsp + 0x58]
mov qword [rbp - 0x68], rcx
mov rdx, qword [r14 + 8]
cmp rdx, qword [r14 + 0x10]
je 0x140003619
movups xmmword [rdx], xmm0
movups xmm0, xmmword [rbp - 0x78]
movups xmmword [rdx + 0x10], xmm0
mov eax, 0xf
mov byte [rsp + 0x78], 0
mov qword [rdx + 0x20], rcx
add qword [r14 + 8], 0x28
jmp 0x14000362a
lea r8, [rsp + 0x78]
mov rcx, r14
call fcn.14000b6b0
mov rax, qword [rbp - 0x70]
cmp rax, 0x10
jb 0x140003664
lea rdx, [rax + 1]
mov rcx, qword [rsp + 0x78]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000365e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140003787
call fcn.14000d040
nop
cmp byte [rsp + 0x20], 0
je 0x14000369f
mov rdx, qword [rbp - 0x48]
inc rdx
mov rax, r15
cmp rdx, 0x1000
jb 0x140003697
add rdx, 0x27
mov r15, qword [r15 - 8]
sub rax, r15
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000378d
mov rcx, r15
call fcn.14000d040
inc ebx
mov dword [rsp + 0x28], ebx
add r13, 8
cmp ebx, dword [rsp + 0x48]
jae 0x1400036b9
mov r15, qword [rsp + 0x50]
jmp 0x140003490
mov rdi, qword [rsp + 0x30]
test rdi, rdi
je 0x1400036f6
sub r12, rdi
and r12, 0xfffffffffffffff8
mov rax, rdi
cmp r12, 0x1000
jb 0x1400036eb
add r12, 0x27
mov rdi, qword [rdi - 8]
sub rax, rdi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140003723
mov rdx, r12
mov rcx, rdi
call fcn.14000d040
mov rax, r14
mov rcx, qword [rbp + 0xd0]
xor rcx, rsp
call fcn.14000d020
mov rbx, qword [rsp + 0x230]
add rsp, 0x1e0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
call fcn.14001895c
int3
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov r8d, eax
lea rdx, str.EnumProcessModules
lea rcx, [rsp + 0x30]
call fcn.140002350
lea rdx, [0x140042650]
lea rcx, [rsp + 0x30]
call fcn.14000edd4
nop
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov r8d, eax
lea rdx, str.EnumProcessModules
lea rcx, [rsp + 0x58]
call fcn.140002350
lea rdx, [0x140042650]
lea rcx, [rsp + 0x58]
call fcn.14000edd4
nop
call fcn.1400013a0
int3
call fcn.14001895c
nop
call fcn.14001895c
nop
call fcn.140001440
int3
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov r8d, eax
lea rdx, str.GetModuleInformation
lea rcx, [rsp + 0x78]
call fcn.140002350
lea rdx, [0x140042650]
lea rcx, [rsp + 0x78]
call fcn.14000edd4
nop
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov r8d, eax
lea rdx, str.GetModuleBaseName
lea rcx, [rsp + 0x78]
call fcn.140002350
lea rdx, [0x140042650]
lea rcx, [rsp + 0x78]
call fcn.14000edd4
int3