Function at 0x140010e28
Capabilities:
Enumerate process modules

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x18], rsi
mov qword [rax + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x1288]
mov eax, 0x1360
call fcn.14002f540
sub rsp, rax
mov rax, qword [0x14007d040]
xor rax, rsp
mov qword [rbp + 0x1250], rax
mov rdi, rdx
mov qword [rsp + 0x48], rdx
xor esi, esi
lea r8, [rbp - 8]
mov edx, 0x1000
lea rcx, [rbp + 0x40]
call qword [sym.imp.KERNEL32.dll_K32EnumProcesses]
xorps xmm0, xmm0
test eax, eax
jne 0x140010eac
movups xmmword [rdi], xmm0
mov qword [rdi + 0x10], rsi
mov qword [rdi + 0x18], rsi
lea r8d, [rsi + 3]
lea rdx, [0x14006e508]
mov rcx, rdi
call fcn.14000510c
jmp 0x140011380
movups xmmword [rbp + 0x20], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x30], xmm1
mov r8d, 0xe
lea rdx, str.Process_List:_n
lea rcx, [rbp + 0x20]
call fcn.14000510c
nop
mov r12d, dword [rbp - 8]
shr r12d, 2
mov ebx, esi
mov dword [rsp + 0x20], ebx
or r15, 0xffffffffffffffff
lea r14d, [r15 + 0x10]
test r12d, r12d
je 0x14001131a
lea r13, [rbp + 0x40]
mov r8d, dword [r13]
xor edx, edx
mov ecx, 0x410
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov qword [rsp + 0x48], rax
test rax, rax
je 0x140011307
mov r9d, 0x104
lea r8, [rbp + 0x1040]
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_K32GetModuleBaseNameW]
test eax, eax
je 0x1400112fc
xorps xmm0, xmm0
movups xmmword [rbp], xmm0
mov qword [rbp + 0x10], rsi
mov qword [rbp + 0x18], rsi
lea rax, [rbp + 0x1040]
mov r8, r15
inc r8
cmp word [rax + r8*2], si
jne 0x140010f4a
lea rdx, [rbp + 0x1040]
lea rcx, [rbp]
call fcn.14001af90
nop
lea rcx, [rbp]
cmp qword [rbp + 0x18], 7
seta dl
cmova rcx, qword [rbp]
mov rax, qword [rbp + 0x10]
lea rsi, [rcx + rax*2]
lea r14, [rbp]
test dl, dl
cmovne r14, qword [rbp]
xorps xmm0, xmm0
movups xmmword [rsp + 0x28], xmm0
cmp r14, rsi
jne 0x140010fb0
xor esi, esi
mov qword [rsp + 0x38], rsi
lea r14d, [rsi + 0xf]
mov qword [rsp + 0x40], r14
mov byte [rsp + 0x28], sil
jmp 0x140011075
sub rsi, r14
sar rsi, 1
and qword [rsp + 0x38], 0
mov ebx, 0xf
mov qword [rsp + 0x40], rbx
movabs rax, 0x7fffffffffffffff
cmp rsi, rax
ja 0x1400113b3
cmp rsi, rbx
jbe 0x140011033
mov rbx, rsi
or rbx, 0xf
cmp rbx, rax
jbe 0x140010ff9
mov rbx, rax
movabs rcx, 0x8000000000000000
jmp 0x140011012
mov eax, 0x16
cmp rbx, rax
cmovb rbx, rax
lea rcx, [rbx + 1]
cmp rcx, 0x1000
jb 0x140011019
call fcn.140006470
jmp 0x140011027
test rcx, rcx
je 0x140011025
call fcn.14002ed58
jmp 0x140011027
xor eax, eax
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x40], rbx
jmp 0x140011038
mov rax, qword [rsp + 0x28]
lea rcx, [rsp + 0x28]
cmp rbx, 0xf
cmova rcx, rax
mov rdx, rcx
mov r8, rsi
test rsi, rsi
je 0x140011062
mov al, byte [r14]
mov byte [rdx], al
inc rdx
lea r14, [r14 + 2]
sub r8, 1
jne 0x140011050
mov qword [rsp + 0x38], rsi
mov byte [rcx + rsi], 0
mov ebx, dword [rsp + 0x20]
xor esi, esi
lea r14d, [rsi + 0xf]
mov edx, dword [r13]
lea rcx, [rbp - 0x68]
call fcn.14000f36c
nop
mov r9d, 1
lea r8, str.____________::_..
mov rcx, rax
call fcn.14001b3d4
xorps xmm0, xmm0
movups xmmword [rsp + 0x50], xmm0
mov qword [rsp + 0x60], rsi
mov qword [rsp + 0x68], rsi
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x50], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x60], xmm1
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], r14
mov byte [rax], sil
mov r8d, 2
lea rdx, [0x14006e524]
lea rcx, [rsp + 0x50]
call fcn.1400042b0
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x28], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x18], xmm1
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], r14
mov byte [rax], sil
lea r8, [rsp + 0x28]
lea rdx, [rbp - 0x28]
lea rcx, [rsp + 0x78]
call fcn.14001aadc
nop
mov r8d, 1
lea rdx, [0x14006e520]
mov rcx, rax
call fcn.1400042b0
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x48], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x38], xmm1
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], r14
mov byte [rax], sil
lea rdx, [rbp - 0x48]
movq rcx, xmm0
movdqa xmm0, xmm1
psrldq xmm0, 8
movq rax, xmm0
cmp rax, r14
cmova rdx, rcx
movq r8, xmm1
lea rcx, [rbp + 0x20]
call fcn.1400042b0
nop
mov rdx, qword [rbp - 0x30]
cmp rdx, r14
jbe 0x1400111a2
inc rdx
mov rcx, qword [rbp - 0x48]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001119c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400113bf
call fcn.14002ed50
nop
mov rdx, qword [rbp - 0x70]
cmp rdx, r14
jbe 0x1400111dd
inc rdx
mov rcx, qword [rsp + 0x78]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400111d8
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400113c5
call fcn.14002ed50
mov qword [rbp - 0x78], rsi
mov qword [rbp - 0x70], r14
mov byte [rsp + 0x78], sil
mov rdx, qword [rbp - 0x10]
cmp rdx, r14
jbe 0x140011225
inc rdx
mov rcx, qword [rbp - 0x28]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001121f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400113cb
call fcn.14002ed50
nop
mov rdx, qword [rsp + 0x68]
cmp rdx, r14
jbe 0x140011261
inc rdx
mov rcx, qword [rsp + 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001125c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400113d1
call fcn.14002ed50
mov qword [rsp + 0x60], rsi
mov qword [rsp + 0x68], r14
mov byte [rsp + 0x50], sil
mov rdx, qword [rbp - 0x50]
cmp rdx, r14
jbe 0x1400112aa
inc rdx
mov rcx, qword [rbp - 0x68]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400112a5
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400113d7
call fcn.14002ed50
mov qword [rbp - 0x58], rsi
mov qword [rbp - 0x50], r14
mov byte [rbp - 0x68], sil
mov rdx, qword [rsp + 0x40]
cmp rdx, r14
jbe 0x1400112f3
inc rdx
mov rcx, qword [rsp + 0x28]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400112ed
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400113dd
call fcn.14002ed50
nop
lea rcx, [rbp]
call fcn.140008950
mov rcx, qword [rsp + 0x48]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
inc ebx
mov dword [rsp + 0x20], ebx
add r13, 4
cmp ebx, r12d
jb 0x140010ef2
lea rdx, [rbp + 0x20]
cmp qword [rbp + 0x38], r14
cmova rdx, qword [rbp + 0x20]
xorps xmm0, xmm0
movups xmmword [rdi], xmm0
mov qword [rdi + 0x10], rsi
mov qword [rdi + 0x18], rsi
inc r15
cmp byte [rdx + r15], sil
jne 0x140011335
mov r8, r15
mov rcx, rdi
call fcn.14000510c
nop
mov rdx, qword [rbp + 0x38]
cmp rdx, r14
jbe 0x140011380
inc rdx
mov rcx, qword [rbp + 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001137b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400113b9
call fcn.14002ed50
mov rax, rdi
mov rcx, qword [rbp + 0x1250]
xor rcx, rsp
call fcn.14002ed30
lea r11, [rsp + 0x1360]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call fcn.140001400
nop
call fcn.14003a92c
nop
call fcn.14003a92c
nop
call fcn.14003a92c
nop
call fcn.14003a92c
nop
call fcn.14003a92c
nop
call fcn.14003a92c
nop
call fcn.14003a92c
int3