Function at 0x140027a50
Capabilities:
Enumerate process modules

Disassembly:
jmp 0x1400382a0
mov dword [rsp + 8], ecx
push rbp
push rdi
mov eax, 0x28e8
call fcn.14002737f
sub rsp, rax
lea rbp, [rsp + 0x20]
lea rdi, [rsp + 0x20]
mov ecx, 0x8b2
mov eax, 0xcccccccc
rep stosd dword [rdi], eax
mov ecx, dword [rsp + 0x2908]
mov rax, qword [0x140087040]
xor rax, rbp
mov qword [rbp + 0x28b0], rax
lea rcx, [0x140091120]
call fcn.140028211
nop
mov r8d, dword [rbp + 0x28e0]
xor edx, edx
mov ecx, 0x410
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov qword [rbp + 8], rax
cmp qword [rbp + 8], 0
je 0x14003843f
lea r9, [rbp + 0x2044]
mov r8d, 0x2000
lea rdx, [rbp + 0x30]
mov rcx, qword [rbp + 8]
call fcn.1400271ea
test eax, eax
je 0x140038432
mov ecx, 0xe
call fcn.140027eab
nop
lea rdx, str._MODULOS_INJETADOS_
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.14002793d
mov qword [rbp + 0x28a8], rax
lea rdx, [0x1400278bb]
mov rcx, qword [rbp + 0x28a8]
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64___cdecl_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::operator___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64____cdecl___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64_____ptr64]
nop
mov ecx, 7
call fcn.140027eab
nop
mov dword [rbp + 0x2064], 0
jmp 0x140038392
mov eax, dword [rbp + 0x2064]
inc eax
mov dword [rbp + 0x2064], eax
movsxd rax, dword [rbp + 0x2064]
mov qword [rbp + 0x28a8], rax
mov ecx, dword [rbp + 0x2044]
xor edx, edx
mov eax, ecx
mov ecx, 8
div rcx
mov rcx, qword [rbp + 0x28a8]
cmp rcx, rax
jae 0x140038427
movsxd rax, dword [rbp + 0x2064]
mov r9d, 0x104
lea r8, [rbp + 0x2090]
mov rdx, qword [rbp + rax*8 + 0x30]
mov rcx, qword [rbp + 8]
call fcn.1400277b7
test eax, eax
je 0x140038422
lea rdx, str.Modulo:
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.14002793d
lea rdx, [rbp + 0x2090]
mov rcx, rax
call fcn.14002793d
mov qword [rbp + 0x28a8], rax
lea rdx, [0x1400278bb]
mov rcx, qword [rbp + 0x28a8]
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64___cdecl_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::operator___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64____cdecl___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64_____ptr64]
nop
jmp 0x140038384
mov ecx, 0xf
call fcn.140027eab
nop
mov rcx, qword [rbp + 8]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
nop
jmp 0x140038484
mov ecx, 0xc
call fcn.140027eab
nop
lea rdx, str.Erro_ao_abrir_o_processo.
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
call fcn.14002723f
mov qword [rbp + 0x28a8], rax
lea rdx, [0x1400270c8]
mov rcx, qword [rbp + 0x28a8]
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
nop
mov ecx, 7
call fcn.140027eab
nop
lea rcx, [rbp - 0x20]
lea rdx, [0x14007bb90]
call fcn.140027f0a
mov rcx, qword [rbp + 0x28b0]
xor rcx, rbp
call fcn.1400278ac
lea rsp, [rbp + 0x28c8]
pop rdi
pop rbp
ret