Function at 0x14008960d
Capabilities:
Enumerate process modules

Disassembly:
cmp eax, 6
jne 0x1400682b3
popf
pop rax
jmp 0x14006881b
cmp eax, 3
jne 0x1400682c2
popf
pop rax
jmp 0x1400686bf
cmp eax, 0
jne 0x1400682d1
popf
pop rax
jmp 0x14006830d
cmp eax, 1
jne 0x1400682e0
popf
pop rax
jmp 0x1400684ba
cmp eax, 2
jne 0x1400682ef
popf
pop rax
jmp 0x1400685d3
cmp eax, 4
jne 0x1400682fe
popf
pop rax
jmp 0x14006874a
cmp eax, 5
jne 0x14006830d
popf
pop rax
jmp 0x140068797
mov qword [rsp + 0x18], rbx
mov qword [rsp + 0x20], rsi
push rdi
mov eax, 0x84debd10
pushf
not eax
add eax, 0x3274159b
xor eax, 0x2bc32eb
rol eax, 0xdb
popf
pushf
not eax
add eax, 0x76292093
xor eax, 0x195c1a91
rol eax, 0xee
popf
pushf
not eax
add eax, 0x467639a1
xor eax, 0x5aaa9d24
rol eax, 0xd2
popf
call fcn.14008c714
sub rsp, rax
mov rax, qword [0x14003e040]
xor rax, rsp
mov qword [rsp + 0x2070], rax
lea rax, [0x1a5dad8b4]
pushf
sub rax, 0x65d811c4
popf
mov rdi, rdx
mov rsi, rcx
mov qword [rsp + 0x28], rax
lea r9, [rdx + 0x2022]
mov dword [rsp + 0x20], 0x5c
lea r8, [0x18c79aef5]
pushf
sub r8, 0x4c76f191
popf
mov edx, 0x60a7caea
pushf
not edx
add edx, 0x39fea034
xor edx, 0x430cab4a
rol edx, 0x4d
popf
pushf
not edx
add edx, 0x6f1877ba
xor edx, 0x76181411
rol edx, 0x53
popf
pushf
not edx
add edx, 0x2b7c2947
xor edx, 0x3d91b8b2
rol edx, 0xd1
popf
pushf
not edx
add edx, 0x2c82ccfe
xor edx, 0x5c999adb
rol edx, 0x23
popf
lea rcx, [rsp + 0x50]
call fcn.14005e0da
cmp eax, 0x1000
jge 0x140068461
push rax
pushf
mov eax, 0x526ccacd
pushf
not eax
add eax, 0x4cb45a9d
xor eax, 0x4989e44c
rol eax, 0x50
popf
pushf
not eax
add eax, 0x79adcc6d
xor eax, 0x40e3bfb4
rol eax, 0x59
popf
pushf
not eax
add eax, 0x57807f85
xor eax, 0x262ec36
rol eax, 0xe9
popf
jmp 0x1400682a4
push rax
pushf
mov eax, 0x6279b28c
pushf
not eax
add eax, 0x454b9079
xor eax, 0x5335acea
rol eax, 0x9d
popf
pushf
not eax
add eax, 0x7daf58f3
xor eax, 0x38ba4bda
rol eax, 0xee
popf
pushf
not eax
add eax, 0x51c95386
xor eax, 0x24e7f074
rol eax, 0x6c
popf
pushf
not eax
add eax, 0x45e232f0
xor eax, 0x3823cb99
rol eax, 0xf7
popf
jmp 0x1400682a4
lea rax, [0x1bf7fd3fb]
pushf
sub rax, 0x7f7d0cf3
popf
mov edx, 0x6f6e6be7
out 0x6b, eax
outsb dx, byte [rsi]
outsd dx, dword [rsi]
pushf
not edx
add edx, 0x2542217
xor edx, 0x63d59a20
invalid
invalid
rol edx, 0x70
popf
pushf
not edx
add edx, 0x61b56156
xor edx, 0x3da57025
rol edx, 0xd1
popf
mov qword [rsp + 0x28], rax
lea r9, [rdi + 0x2022]
lea r8, [0x1aae086c5]
pushf
sub r8, 0x6addc961
popf
mov dword [rsp + 0x20], 0x5c
lea rcx, [rsp + 0x1060]
call fcn.14005e0da
cmp eax, 0x1000
jge 0x14006857a
push rax
pushf
mov eax, 0x88c2ec44
pushf
not eax
add eax, 0x5a306c7c
xor eax, 0x6c8573b8
rol eax, 0x6a
popf
pushf
not eax
add eax, 0x6acbe0ab
xor eax, 0x2b8b0ab1
rol eax, 0x93
popf
pushf
not eax
add eax, 0x5d271c88
xor eax, 0x50fb2d2
rol eax, 0xb8
popf
jmp 0x1400682a4
push rax
pushf
mov eax, 0x6317803c
pushf
not eax
add eax, 0x4a1538ed
xor eax, 0xd9328c3
rol eax, 0x6e
popf
pushf
not eax
add eax, 0x256f8261
xor eax, 0x245c8a38
mov bl, byte [rsp - 0x3f]
sal cl, 0x66
popfq
mov bl, byte [rsp - 0x3f]
sal cl, 0x66
popfq
pushf
not eax
add eax, 0x29a8b326
xor eax, 0x287c4d55
rol eax, 4
popf
pushf
not eax
add eax, 0x71515c43
pop r12
push rcx
jno 0x1400685fa
rcl byte [rdi], 0x3f
or al, 0xc1
rcr byte [rdx + 0x66], 0x9d
jmp 0x1400682a4
xor r8d, r8d
lea rcx, [rsp + 0x50]
xor edx, edx
call fcn.140080b6c
xor r8d, r8d
mov qword [rsp + 0x30], rax
xor edx, edx
lea rcx, [rsp + 0x1060]
call fcn.140080b6c
xor r8d, r8d
mov qword [rsp + 0x38], rax
xor edx, edx
lea rcx, [rdi + 0x2022]
call fcn.140080b6c
lea r9, [rsp + 0x30]
mov qword [rsp + 0x40], rax
mov r8d, 0x544b4d72
pushf
not r8d
add r8d, 0x548bcc14
xor r8d, 0x3884dbee
rol r8d, 0xbd
popf
pushf
not r8d
add r8d, 0x652a39a1
xor r8d, 0x28898de3
rol r8d, 0xb3
popf
pushf
not r8d
add r8d, 0x79a14f73
xor r8d, 0x30fd9ab1
rol r8d, 0x70
popf
mov rdx, rdi
mov rcx, rsi
call fcn.140004940
mov edi, eax
xor ebx, ebx
push rax
pushf
mov eax, 0x48c4d1b4
pushf
not eax
add eax, 0x433459f3
xor eax, 0x1b78fc6a
rol eax, 0xf7
popf
pushf
not eax
add eax, 0x2ac8671a
xor eax, 0x422c912d
rol eax, 0xd9
popf
pushf
not eax
add eax, 0x2ef0c0ce
xor eax, 0x4a6bd239
rol eax, 0x35
popf
jmp 0x1400682a4
mov rcx, qword [rsp + rbx*8 + 0x30]
call fcn.1400d61fc
inc rbx
cmp rbx, 3
jl 0x140068705
push rax
pushf
mov eax, 0x9be78e73
pushf
not eax
add eax, 0x6ad5849e
xor eax, 0x60dd6fd6
rol eax, 0xc4
popf
pushf
not eax
add eax, 0x3b7a317e
xor eax, 0x5c7091b3
rol eax, 0x48
popf
jmp 0x1400682a4
push rax
pushf
mov eax, 0x2cd5f8c2
pushf
not eax
add eax, 0x2c40bf7c
xor eax, 0x68449436
rol eax, 1
popf
pushf
not eax
add eax, 0x36f588
xor eax, 0x77eb6aa4
rol eax, 0xb8
popf
pushf
not eax
add eax, 0x3327bf3b
xor eax, 0x6681ee00
rol eax, 0xd3
popf
jmp 0x1400682a4
mov eax, edi
jmp 0x14006881b
mov eax, 0xa5095d63
pushf
not eax
add eax, 0x5dbc6346
xor eax, 0x88d4c80
rol eax, 0xbf
popf
pushf
not eax
add eax, 0x3f7d8f8
xor eax, 0x54274bb9
rol eax, 0x8f
popf
push rax
pushf
mov eax, 0xb11c96b
pushf
not eax
add eax, 0x5df40376
xor eax, 0x1d55f8ae
rol eax, 0x47
popf
pushf
not eax
add eax, 0x188f0176
xor eax, 0x45ee5abc
rol eax, 0x63
popf
pushf
not eax
add eax, 0x114e39c2
xor eax, 0x7f034c8a
rol eax, 0x92
popf
pushf
not eax
add eax, 0x45d9c448
xor eax, 0x2848e390
rol eax, 0xe9
shr cl, 0x66
popfq
jmp 0x1400682a4
mov rcx, qword [rsp + 0x2070]
xor rcx, rsp
call fcn.140089a05
lea r11, [rsp + 0x2080]
mov rbx, qword [r11 + 0x20]
mov rsi, qword [r11 + 0x28]
mov rsp, r11
pop rdi
ret
push rax
pushf
mov eax, 0x53604435
pushf
not eax
add eax, 0x216644fd
xor eax, 0x28eaceb8
rol eax, 0x67
popf
pushf
not eax
add eax, 0x1f4fff65
xor eax, 0x7d8ef31b
rol eax, 0x6d
popf
pushf
not eax
add eax, 0x6ebcc878
xor eax, 0x38db1394
rol eax, 0x13
popf
pushf
not eax
add eax, 0x5bd80f26
xor eax, 0x68db1f82
rol eax, 0x96
popf
cmp eax, 0
jne switch.0x140089671
popf
pop rax
jmp switch.0x140089671
jmp qword [sym.imp.KERNEL32.dll_K32EnumProcessModules]