Function at 0x140011186
Capabilities:
Enumerate process modules

Disassembly:
jmp 0x1400163a0
mov qword [rsp + 0x10], rdx
mov dword [rsp + 8], ecx
push rbp
push rdi
mov eax, 0x27a8
call fcn.140011145
sub rsp, rax
lea rbp, [rsp + 0x20]
lea rdi, [rsp + 0x20]
mov ecx, 0x862
mov eax, 0xcccccccc
rep stosd dword [rdi], eax
mov ecx, dword [rsp + 0x27c8]
mov rax, qword [0x140026040]
xor rax, rbp
mov qword [rbp + 0x2778], rax
mov r8d, dword [rbp + 0x27a0]
xor edx, edx
mov ecx, 0x410
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov qword [rbp + 8], rax
cmp qword [rbp + 8], 0
jne 0x1400164c6
lea rdx, str.Unable_to_open_process_with_pid
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
call fcn.1400110c8
mov qword [rbp + 0x2748], rax
mov edx, dword [rbp + 0x27a0]
mov rcx, qword [rbp + 0x2748]
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___unsigned_long_int____ptr64]
lea rdx, [0x140021cf4]
mov rcx, rax
call fcn.1400110c8
mov qword [rbp + 0x2750], rax
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
lea rcx, [rbp + 0x2698]
call fcn.140011136
mov qword [rbp + 0x2758], rax
mov rax, qword [rbp + 0x2758]
mov qword [rbp + 0x2760], rax
mov rax, qword [rbp + 0x2760]
mov qword [rbp + 0x2768], rax
mov rdx, qword [rbp + 0x2768]
mov rcx, qword [rbp + 0x2750]
call fcn.140011613
mov qword [rbp + 0x2770], rax
lea rdx, [0x140011055]
mov rcx, qword [rbp + 0x2770]
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
nop
lea rcx, [rbp + 0x2698]
call fcn.14001114a
nop
xor al, al
jmp 0x14001666d
lea r9, [rbp + 0x2044]
mov r8d, 0x2000
lea rdx, [rbp + 0x30]
mov rcx, qword [rbp + 8]
call fcn.1400110a5
test eax, eax
jne 0x140016587
lea rdx, str.Unable_to_enumerate_modules_:
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
call fcn.1400110c8
mov qword [rbp + 0x2748], rax
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
lea rcx, [rbp + 0x26d8]
call fcn.140011136
mov qword [rbp + 0x2750], rax
mov rax, qword [rbp + 0x2750]
mov qword [rbp + 0x2758], rax
mov rax, qword [rbp + 0x2758]
mov qword [rbp + 0x2760], rax
mov rdx, qword [rbp + 0x2760]
mov rcx, qword [rbp + 0x2748]
call fcn.140011613
mov qword [rbp + 0x2768], rax
lea rdx, [0x140011055]
mov rcx, qword [rbp + 0x2768]
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
nop
lea rcx, [rbp + 0x26d8]
call fcn.14001114a
nop
mov rcx, qword [rbp + 8]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
nop
xor al, al
jmp 0x14001666d
mov eax, 8
imul rax, rax, 0
mov r9d, 0x18
lea r8, [rbp + 0x2068]
mov rdx, qword [rbp + rax + 0x30]
mov rcx, qword [rbp + 8]
call fcn.1400111fe
test eax, eax
jne 0x14001664f
lea rdx, str.Unable_to_get_module_information_:
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
call fcn.1400110c8
mov qword [rbp + 0x2748], rax
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
lea rcx, [rbp + 0x2718]
call fcn.140011136
mov qword [rbp + 0x2750], rax
mov rax, qword [rbp + 0x2750]
mov qword [rbp + 0x2758], rax
mov rax, qword [rbp + 0x2758]
mov qword [rbp + 0x2760], rax
mov rdx, qword [rbp + 0x2760]
mov rcx, qword [rbp + 0x2748]
call fcn.140011613
mov qword [rbp + 0x2768], rax
lea rdx, [0x140011055]
mov rcx, qword [rbp + 0x2768]
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
nop
lea rcx, [rbp + 0x2718]
call fcn.14001114a
nop
mov rcx, qword [rbp + 8]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
nop
xor al, al
jmp 0x14001666d
mov rax, qword [rbp + 0x27a8]
mov rcx, qword [rbp + 0x2068]
mov qword [rax], rcx
mov rcx, qword [rbp + 8]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
nop
mov al, 1
mov rdi, rax
lea rcx, [rbp - 0x20]
lea rdx, [0x140021b50]
call fcn.1400115a5
mov rax, rdi
mov rcx, qword [rbp + 0x2778]
xor rcx, rbp
call fcn.140011361
lea rsp, [rbp + 0x2788]
pop rdi
pop rbp
ret