Function at 0x14002f7e0
Capabilities:
Enumerate process modules

Disassembly:
push rbp
mov eax, 0x8230
call fcn.140127430
sub rsp, rax
lea rbp, [rsp + 0x80]
mov qword [rbp + 0x81a8], 0xfffffffffffffffe
mov qword [rbp + 0x70], rdx
mov qword [rbp + 0x78], rcx
mov qword [rbp + 0x80], rcx
mov qword [rbp + 0x8158], rdx
mov byte [rbp + 0x8155], 0
mov byte [rbp + 0x8156], 0
mov byte [rbp + 0x8157], 0
mov byte [rbp + 0x8155], 1
lea rcx, [rbp + 0x98]
mov qword [rbp + 0x88], rcx
call fcn.140030870
mov rcx, qword [rbp + 0x88]
call fcn.140030970
mov qword [rbp + 0x90], rax
jmp 0x14002f85b
mov rax, qword [rbp + 0x90]
mov ecx, 8
mul ecx
mov dword [rbp + 0x6c], eax
seto al
jo 0x14002f888
mov eax, dword [rbp + 0x6c]
mov dword [rbp + 0x20a8], eax
mov eax, dword [rbp + 0x8194]
mov dword [rbp + 0x20ac], eax
jmp 0x14002f898
lea rcx, [0x14013fb48]
call fcn.140138670
jmp 0x14002f896
ud2
mov rcx, qword [rbp + 0x70]
call fcn.14002f030
mov qword [rbp + 0x60], rax
jmp 0x14002f8a7
lea rcx, [rbp + 0x98]
call fcn.140030b40
mov qword [rbp + 0x50], rdx
mov qword [rbp + 0x58], rax
jmp 0x14002f8bd
mov rdx, qword [rbp + 0x58]
mov rcx, qword [rbp + 0x60]
mov rax, qword [rbp + 0x50]
mov qword [rbp + 0x8198], rdx
mov qword [rbp + 0x81a0], rax
mov r8d, dword [rbp + 0x20a8]
lea r9, [rbp + 0x20ac]
mov qword [rbp + 0x8178], r9
mov rax, rsp
mov dword [rax + 0x20], 3
call sub.PSAPI.DLL_EnumProcessModulesEx
mov dword [rbp + 0x4c], eax
jmp 0x14002f900
mov eax, dword [rbp + 0x4c]
mov dword [rbp + 0x8160], eax
cmp eax, 0
jne 0x14002f919
call fcn.14001cea0
mov qword [rbp + 0x40], rax
jmp 0x14002f948
mov eax, dword [rbp + 0x20ac]
mov dword [rbp + 0x8188], eax
mov dword [rbp + 0x818c], eax
mov dword [rbp + 0x20c4], eax
mov eax, dword [rbp + 0x20c4]
cmp eax, dword [rbp + 0x20a8]
jbe 0x14002fa00
jmp 0x14002f9f2
mov rax, qword [rbp + 0x40]
mov qword [rbp + 0x20b0], rax
lea rcx, [rbp + 0x20b0]
call fcn.14001ce00
mov dword [rbp + 0x38], edx
mov dword [rbp + 0x3c], eax
jmp 0x14002f967
mov eax, dword [rbp + 0x38]
mov ecx, dword [rbp + 0x3c]
mov dword [rbp + 0x20bc], ecx
mov dword [rbp + 0x20c0], eax
lea rdx, [0x14013fb60]
lea rcx, [rbp + 0x20bc]
call fcn.14001f2e0
mov byte [rbp + 0x37], al
jmp 0x14002f991
mov al, byte [rbp + 0x37]
test al, 1
jne 0x14002f9b2
jmp 0x14002f99a
mov rax, qword [rbp + 0x78]
mov rcx, qword [rbp + 0x20b0]
mov qword [rax + 8], rcx
mov qword [rax], 2
jmp 0x14002f9da
mov rcx, qword [rbp + 0x70]
call fcn.14002e7a0
mov byte [rbp + 0x36], al
jmp 0x14002f9c0
mov al, byte [rbp + 0x36]
test al, 1
jne 0x14002f9c9
jmp 0x14002f99a
lea rcx, [rbp + 0x20b0]
call fcn.140034fc0
jmp 0x14002f898
lea rcx, [rbp + 0x98]
call fcn.14001da20
mov byte [rbp + 0x8155], 0
jmp 0x14002fbca
lea rcx, [rbp + 0x40d8]
call fcn.140031020
jmp 0x14002fa23
mov eax, dword [rbp + 0x20c4]
shr eax, 3
mov edx, eax
mov qword [rbp + 0x8168], rdx
lea rcx, [rbp + 0x98]
call fcn.1400309c0
jmp 0x14002fc5b
mov byte [rbp + 0x8157], 1
mov eax, dword [rbp + 0x20c4]
mov dword [rbp + 0x2c], eax
mov ecx, dword [rbp + 0x20a8]
mov edx, 2
call fcn.14002b7b0
mov dword [rbp + 0x30], eax
jmp 0x14002fa48
mov edx, dword [rbp + 0x30]
mov ecx, dword [rbp + 0x2c]
call fcn.140023db0
mov dword [rbp + 0x28], eax
jmp 0x14002fa58
mov eax, dword [rbp + 0x28]
mov dword [rbp + 0x20a8], eax
mov eax, dword [rbp + 0x20a8]
shr eax, 3
mov qword [rbp + 0x40f0], rax
mov rax, qword [rbp + 0x40f0]
mov qword [rbp + 0x18], rax
lea rcx, [rbp + 0x40d8]
call fcn.1400317a0
mov qword [rbp + 0x20], rax
jmp 0x14002fa8e
mov rax, qword [rbp + 0x18]
mov rcx, qword [rbp + 0x20]
cmp rax, rcx
ja 0x14002fab6
mov rcx, qword [rbp + 0x70]
mov eax, dword [rbp + 0x8190]
mov dword [rbp + 0x40fc], eax
call fcn.14002f030
mov qword [rbp + 0x10], rax
jmp 0x14002fb0f
mov rax, qword [rbp + 0x40f0]
mov qword [rbp], rax
lea rcx, [rbp + 0x40d8]
call fcn.1400317a0
mov qword [rbp + 8], rax
jmp 0x14002fad3
mov rax, qword [rbp]
mov rcx, qword [rbp + 8]
mov rdx, rax
sub rdx, rcx
mov qword [rbp - 8], rdx
cmp rax, rcx
jb 0x14002fafc
mov rdx, qword [rbp - 8]
lea rcx, [rbp + 0x40d8]
call fcn.1400315e0
jmp 0x14002fb0d
lea rcx, [0x14013fb68]
call fcn.140138630
jmp 0x14002f896
jmp 0x14002fa9b
lea rcx, [rbp + 0x40d8]
call fcn.140031060
mov qword [rbp - 0x10], rax
jmp 0x14002fb21
mov rdx, qword [rbp - 0x10]
mov rcx, qword [rbp + 0x10]
mov r8d, dword [rbp + 0x20a8]
lea r9, [rbp + 0x40fc]
mov qword [rbp + 0x8170], r9
mov rax, rsp
mov dword [rax + 0x20], 3
call sub.PSAPI.DLL_EnumProcessModulesEx
mov dword [rbp - 0x14], eax
jmp 0x14002fb52
mov eax, dword [rbp - 0x14]
mov dword [rbp + 0x8164], eax
cmp eax, 0
jne 0x14002fb6b
call fcn.14001cea0
mov qword [rbp - 0x20], rax
jmp 0x14002fb96
mov eax, dword [rbp + 0x40fc]
mov dword [rbp + 0x8180], eax
mov dword [rbp + 0x8184], eax
mov dword [rbp + 0x20c4], eax
mov eax, dword [rbp + 0x20c4]
cmp eax, dword [rbp + 0x20a8]
jbe 0x14002fbda
jmp 0x14002fa2a
mov rax, qword [rbp + 0x78]
mov rcx, qword [rbp - 0x20]
mov qword [rax + 8], rcx
mov qword [rax], 2
lea rcx, [rbp + 0x40d8]
call fcn.14001e500
jmp 0x14002fbb7
mov byte [rbp + 0x8157], 0
mov byte [rbp + 0x8156], 0
jmp 0x14002f9da
mov rax, qword [rbp + 0x80]
add rsp, 0x8230
pop rbp
ret
mov eax, dword [rbp + 0x20c4]
shr eax, 3
mov qword [rbp + 0x40f0], rax
mov rdx, qword [rbp + 0x40f0]
lea rcx, [rbp + 0x40d8]
call fcn.1400316c0
jmp 0x14002fbff
mov byte [rbp + 0x8157], 0
mov rax, qword [rbp + 0x40e8]
mov qword [rbp + 0x4110], rax
movups xmm0, xmmword [rbp + 0x40d8]
movaps xmmword [rbp + 0x4100], xmm0
lea rcx, [rbp + 0x20c8]
lea rdx, [rbp + 0x4100]
call fcn.140030940
jmp 0x14002fc37
mov byte [rbp + 0x8156], 1
mov byte [rbp + 0x8157], 0
lea rcx, [rbp + 0x20c8]
call fcn.140030b20
mov qword [rbp - 0x30], rdx
mov qword [rbp - 0x28], rax
jmp 0x14002fc84
mov byte [rbp + 0x8155], 0
mov byte [rbp + 0x8156], 1
lea rcx, [rbp + 0x20c8]
lea rdx, [rbp + 0x98]
mov r8d, 0x2010
call fcn.140136190
jmp 0x14002fc45
mov rdx, qword [rbp - 0x30]
mov rcx, qword [rbp - 0x28]
call fcn.140024940
mov qword [rbp - 0x40], rdx
mov qword [rbp - 0x38], rax
jmp 0x14002fc9b
mov rax, qword [rbp - 0x40]
mov rcx, qword [rbp - 0x38]
mov qword [rbp + 0x4118], rcx
mov qword [rbp + 0x4120], rax
lea rcx, [rbp + 0x4118]
call fcn.140025ea0
mov byte [rbp - 0x41], al
jmp 0x14002fcc2
mov al, byte [rbp - 0x41]
test al, 1
jne 0x14002fce8
jmp 0x14002fccb
lea rcx, str.assertion_failed:_modules.iter__.all_module__module.is_null___
lea r8, [0x14013fbc0]
mov edx, 0x40
call fcn.140137f50
jmp 0x14002f896
mov byte [rbp + 0x8156], 0
lea rcx, [rbp + 0x6140]
mov qword [rbp - 0x50], rcx
lea rdx, [rbp + 0x20c8]
mov r8d, 0x2010
call fcn.140136190
mov rdx, qword [rbp - 0x50]
lea rcx, [rbp + 0x4128]
call fcn.140030b60
jmp 0x14002fd1e
mov rcx, qword [rbp + 0x78]
lea rdx, [rbp + 0x4128]
mov r8d, 0x2018
call fcn.140136190
mov byte [rbp + 0x8156], 0
test byte [rbp + 0x8155], 1
jne 0x14002fd50
mov byte [rbp + 0x8155], 0
jmp 0x14002fbca
lea rcx, [rbp + 0x98]
call fcn.14001da20
jmp 0x14002fd44