Function at 0x140084013
Capabilities:
Enumerate process modules

Disassembly:
jmp 0x140184720
mov qword [rsp + 0x10], rdx
mov qword [rsp + 8], rcx
push rbp
push rdi
sub rsp, 0x4c8
lea rbp, [rsp + 0x20]
lea rdi, [rsp + 0x20]
mov ecx, 0xca
mov eax, 0xcccccccc
rep stosd dword [rdi], eax
mov rcx, qword [rsp + 0x4e8]
mov rax, qword [0x1401f07c0]
xor rax, rbp
mov qword [rbp + 0x498], rax
lea rcx, [0x14020868d]
call fcn.140085710
mov rax, qword [rbp + 0x4c0]
mov edx, dword [rax + 0xc]
mov ecx, 8
call fcn.140084216
mov qword [rbp + 8], rax
cmp qword [rbp + 8], 0xffffffffffffffff
jne 0x1401847ed
xor eax, eax
cmp eax, 1
je 0x1401847c2
lea rdx, str.Failed_to_take_a_snapshot_of_modules.
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140083429
mov qword [rbp + 0x478], rax
lea rdx, [0x1400831a4]
mov rcx, qword [rbp + 0x478]
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov rcx, qword [rbp + 8]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [rbp + 0x404], 0
mov rcx, qword [rbp + 0x4c8]
call fcn.14008374e
mov eax, dword [rbp + 0x404]
jmp 0x140184a90
mov dword [rbp + 0x30], 0x238
lea rdx, [rbp + 0x30]
mov rcx, qword [rbp + 8]
call fcn.1400832cb
test eax, eax
je 0x1401848f4
mov rcx, qword [rbp + 0x4c8]
call fcn.14008337a
lea rdx, [rbp + 0x60]
mov rcx, rax
call fcn.140085b07
test eax, eax
jne 0x1401848f4
xor eax, eax
cmp eax, 1
je 0x1401848ca
lea rdx, str.Found_module
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140083429
lea rdx, [rbp + 0x60]
mov rcx, rax
call fcn.140083429
lea rdx, str._with_base_address
mov rcx, rax
call fcn.140083429
mov qword [rbp + 0x478], rax
lea rdx, [0x1400853f5]
mov rcx, qword [rbp + 0x478]
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::ios_base____ptr64____cdecl___class_std::ios_base____ptr64_____ptr64]
mov qword [rbp + 0x480], rax
lea rdx, [0x140084dab]
mov rcx, qword [rbp + 0x480]
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::ios_base____ptr64____cdecl___class_std::ios_base____ptr64_____ptr64]
mov qword [rbp + 0x488], rax
mov edx, dword [rbp + 0x48]
mov rcx, qword [rbp + 0x488]
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___unsigned_long_int____ptr64]
mov qword [rbp + 0x490], rax
lea rdx, [0x1400831a4]
mov rcx, qword [rbp + 0x490]
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov rcx, qword [rbp + 8]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [rbp + 0x48]
mov dword [rbp + 0x424], eax
mov rcx, qword [rbp + 0x4c8]
call fcn.14008374e
mov eax, dword [rbp + 0x424]
jmp 0x140184a90
lea rdx, [rbp + 0x30]
mov rcx, qword [rbp + 8]
call fcn.140083b13
test eax, eax
je 0x1401849f9
mov rcx, qword [rbp + 0x4c8]
call fcn.14008337a
lea rdx, [rbp + 0x60]
mov rcx, rax
call fcn.140085b07
test eax, eax
jne 0x1401849f4
xor eax, eax
cmp eax, 1
je 0x1401849ca
lea rdx, str.Found_module
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140083429
lea rdx, [rbp + 0x60]
mov rcx, rax
call fcn.140083429
lea rdx, str._with_base_address
mov rcx, rax
call fcn.140083429
mov qword [rbp + 0x478], rax
lea rdx, [0x1400853f5]
mov rcx, qword [rbp + 0x478]
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::ios_base____ptr64____cdecl___class_std::ios_base____ptr64_____ptr64]
mov qword [rbp + 0x480], rax
lea rdx, [0x140084dab]
mov rcx, qword [rbp + 0x480]
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::ios_base____ptr64____cdecl___class_std::ios_base____ptr64_____ptr64]
mov qword [rbp + 0x488], rax
mov edx, dword [rbp + 0x48]
mov rcx, qword [rbp + 0x488]
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___unsigned_long_int____ptr64]
mov qword [rbp + 0x490], rax
lea rdx, [0x1400831a4]
mov rcx, qword [rbp + 0x490]
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov rcx, qword [rbp + 8]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [rbp + 0x48]
mov dword [rbp + 0x444], eax
mov rcx, qword [rbp + 0x4c8]
call fcn.14008374e
mov eax, dword [rbp + 0x444]
jmp 0x140184a90
jmp 0x1401848f4
xor eax, eax
cmp eax, 1
je 0x140184a6a
lea rdx, str.Couldnt_find
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140083429
mov qword [rbp + 0x478], rax
mov rcx, qword [rbp + 0x4c8]
call fcn.14008337a
mov qword [rbp + 0x480], rax
mov rdx, qword [rbp + 0x480]
mov rcx, qword [rbp + 0x478]
call fcn.140083429
lea rdx, str._module_in_module_snapshot_of_the_process.
mov rcx, rax
call fcn.140083429
mov qword [rbp + 0x488], rax
lea rdx, [0x1400831a4]
mov rcx, qword [rbp + 0x488]
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov rcx, qword [rbp + 8]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [rbp + 0x464], 0
mov rcx, qword [rbp + 0x4c8]
call fcn.14008374e
mov eax, dword [rbp + 0x464]
mov rdi, rax
lea rcx, [rbp - 0x20]
lea rdx, [0x1401d8250]
call fcn.1400850f8
mov rax, rdi
mov rcx, qword [rbp + 0x498]
xor rcx, rbp
call fcn.140084284
lea rsp, [rbp + 0x4a8]
pop rdi
pop rbp
ret