Function at 0x14000f66d
Capabilities:
Enumerate process modules

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x2d8
mov qword [rsp + 0x88], rdx
lea rsi, [rsp + 0xd0]
and qword [rsi], 0
mov qword [rsi + 8], 8
and qword [rsi + 0x10], 0
lea rdi, [rsp + 0x20]
and dword [rdi], 0
mov qword [rsp + 0x80], rcx
xor r14d, r14d
mov ebx, 8
xor ebp, ebp
mov rcx, 0xffffffffffffffff
mov rdx, rbx
mov r8d, r14d
mov r9, rdi
call sub.psapi.dll_EnumProcessModules
test eax, eax
je 0x14000fb52
mov r12d, dword [rsp + 0x20]
cmp r12d, ebp
jbe 0x14000f749
mov r15, r12
mov rax, r12
sub r15, r14
jbe 0x14000f736
mov r9d, 8
mov rcx, rsi
mov rdx, r14
mov r8, r15
call fcn.14000f0ad
mov rbx, qword [rsp + 0xd8]
mov rax, qword [rsp + 0xe0]
lea rcx, [rbx + rax*8]
mov edx, 1
cmp rdx, r15
jae 0x14000f72f
and qword [rcx], 0
inc rdx
add rcx, 8
inc rax
jmp 0x14000f71a
and qword [rcx], 0
inc rax
mov qword [rsp + 0xe0], rax
mov r14, rax
mov ebp, r12d
jmp 0x14000f6bb
mov rax, qword [rsp + 0xd0]
mov rcx, rax
neg rcx
jo 0x14000fb6c
movabs rdi, 0x8000000000000000
movabs r12, 0xffffffff00000000
lea rcx, [rbx + r14*8]
mov qword [rsp + 0x98], rbx
mov qword [rsp + 0xa0], rbx
mov qword [rsp + 0xa8], rax
mov qword [rsp + 0xb0], rcx
shl r14, 3
lea rsi, [rsp + 0xd0]
lea r13, [rsp + 0x20]
test r14, r14
je 0x14000fa9f
mov r15, qword [rbx]
mov r8d, 0x208
mov rcx, rsi
xor edx, edx
call sub.VCRUNTIME140.dll_memset
mov rcx, 0xffffffffffffffff
mov qword [rsp + 0x60], r15
mov rdx, r15
mov r8, rsi
mov r9d, 0x104
call sub.psapi.dll_GetModuleBaseNameW
test eax, eax
je 0x14000f859
cmp eax, 0x105
jae 0x14000fb6c
mov r8d, eax
mov rcx, r13
mov rdx, rsi
call fcn.14007ce1a
mov rsi, qword [rsp + 0x28]
mov r8, qword [rsp + 0x30]
lea r13, [rsp + 0xb8]
mov rcx, r13
mov rdx, rsi
call fcn.1400818e2
lea rcx, [rsp + 0x68]
mov rdx, r13
call fcn.1400099ec
mov r15, qword [rsp + 0x68]
mov rax, qword [rsp + 0x70]
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x78]
mov qword [rsp + 0x90], rax
mov rcx, qword [rsp + 0x20]
mov rdx, rsi
lea rsi, [rsp + 0xd0]
call fcn.14007b1a9
jmp 0x14000f873
call fcn.140010a6c
mov eax, eax
mov rcx, qword [rsp + 0x40]
and rcx, r12
or rcx, rax
mov qword [rsp + 0x40], rcx
mov r15, rdi
add rbx, 8
mov r8d, 0x208
mov rcx, rsi
xor edx, edx
call sub.VCRUNTIME140.dll_memset
mov rcx, 0xffffffffffffffff
mov rdx, qword [rsp + 0x60]
mov r8, rsi
mov r9d, 0x104
call sub.psapi.dll_GetModuleFileNameExW
test eax, eax
je 0x14000f922
cmp eax, 0x105
jae 0x14000fb6c
mov r8d, eax
lea rcx, [rsp + 0x20]
mov rdx, rsi
call fcn.14007ce1a
mov rsi, qword [rsp + 0x28]
mov r8, qword [rsp + 0x30]
lea rbp, [rsp + 0xb8]
mov rcx, rbp
mov rdx, rsi
call fcn.1400818e2
lea rcx, [rsp + 0x68]
mov rdx, rbp
call fcn.1400099ec
mov r13, qword [rsp + 0x68]
mov rax, qword [rsp + 0x70]
mov qword [rsp + 0x50], rax
mov rbp, qword [rsp + 0x78]
mov rcx, qword [rsp + 0x20]
mov rdx, rsi
call fcn.14007b1a9
cmp r15, rdi
sete al
cmp r13, rdi
sete cl
or cl, al
je 0x14000f955
mov rsi, qword [rsp + 0x50]
jmp 0x14000f935
call fcn.140010a6c
mov eax, eax
and rbp, r12
or rbp, rax
mov rsi, rbp
mov r13, rdi
mov rcx, r13
mov rdx, rsi
call fcn.1400744d4
mov rcx, r15
mov rdx, qword [rsp + 0x40]
call fcn.1400744d4
mov rbp, rsi
jmp 0x14000fa89
mov qword [rsp + 0x48], r13
mov qword [rsp + 0x58], r15
lea rcx, [rsp + 0x20]
mov r13, qword [rsp + 0x40]
mov rdx, r13
mov r8, qword [rsp + 0x90]
call fcn.140010b05
lea rcx, [rsp + 0xd0]
mov rdi, qword [rsp + 0x80]
mov rdx, rdi
mov r12, qword [rsp + 0x88]
mov r8, r12
call fcn.140010b05
mov rsi, qword [rsp + 0x28]
mov rdx, qword [rsp + 0x30]
mov r15, qword [rsp + 0xd8]
mov r9, qword [rsp + 0xe0]
mov rcx, rsi
mov r8, r15
call fcn.14000f2ab
test al, al
jne 0x14000fab7
mov rcx, qword [rsp + 0xd0]
mov rdx, r15
call fcn.14007b1a9
mov rcx, qword [rsp + 0x20]
mov rdx, rsi
call fcn.14007b1a9
mov rcx, qword [rsp + 0x58]
mov rdx, r13
call fcn.14007b1a9
lea rcx, [rsp + 0x20]
mov r13, qword [rsp + 0x50]
mov rdx, r13
mov r8, rbp
call fcn.140010b05
lea rcx, [rsp + 0xd0]
mov rdx, rdi
mov r8, r12
call fcn.140010b05
mov rsi, qword [rsp + 0x28]
mov rdx, qword [rsp + 0x30]
mov r15, qword [rsp + 0xd8]
mov r9, qword [rsp + 0xe0]
mov rcx, rsi
mov r8, r15
call fcn.14000f2ab
test al, al
jne 0x14000fafa
mov rcx, qword [rsp + 0xd0]
mov rdx, r15
call fcn.14007b1a9
mov rcx, qword [rsp + 0x20]
mov rdx, rsi
call fcn.14007b1a9
mov rcx, qword [rsp + 0x48]
mov rdx, r13
call fcn.14007b1a9
movabs rdi, 0x8000000000000000
movabs r12, 0xffffffff00000000
mov rbp, r13
add r14, 0xfffffffffffffff8
lea rsi, [rsp + 0xd0]
lea r13, [rsp + 0x20]
jmp 0x14000f7a6
lea rcx, [rsp + 0x98]
mov qword [rcx + 8], rbx
call fcn.14000f3cb
xor eax, eax
jmp 0x14000fb3e
mov qword [rsp + 0xa0], rbx
mov rcx, qword [rsp + 0xd0]
mov rdx, r15
call fcn.14007b1a9
mov rcx, qword [rsp + 0x20]
mov rdx, rsi
call fcn.14007b1a9
mov rcx, qword [rsp + 0x58]
mov rdx, r13
call fcn.14007b1a9
mov rcx, qword [rsp + 0x48]
mov rdx, qword [rsp + 0x50]
call fcn.1400744d4
jmp 0x14000fb2c
mov qword [rsp + 0xa0], rbx
mov rcx, qword [rsp + 0xd0]
mov rdx, r15
call fcn.14007b1a9
mov rcx, qword [rsp + 0x20]
mov rdx, rsi
call fcn.14007b1a9
mov rcx, qword [rsp + 0x48]
mov rdx, r13
call fcn.14007b1a9
lea rcx, [rsp + 0x98]
call fcn.14000f3cb
mov rax, qword [rsp + 0x60]
add rsp, 0x2d8
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
call fcn.140010a6c
mov rcx, qword [rsp + 0xd0]
mov rdx, qword [rsp + 0xd8]
call fcn.14000f0d3
ud2