Function at 0x140047b80
Capabilities:
Enumerate process modules

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x3c8
mov r14, rdx
mov r15, rcx
mov rax, qword [0x14030c028]
xor rax, rsp
mov qword [rsp + 0x3c0], rax
xorps xmm0, xmm0
lea r12, [rsp + 0x180]
movaps xmmword [r12], xmm0
mov qword [r12 + 0x10], 0
mov ebp, 0x80
lea rdi, [rsp + 0x40]
mov rdx, rbp
add rdx, rbp
mov rcx, r12
call fcn.140047ebc
mov dword [rsp + 0x40], 0xaaaaaaaa
shl ebp, 4
mov rdx, qword [rsp + 0x180]
mov dword [rsp + 0x20], 3
mov rcx, r15
mov r8d, ebp
mov r9, rdi
call sub.KERNEL32.dll_K32EnumProcessModulesEx
mov esi, eax
test eax, eax
je 0x140047dc1
mov ebx, dword [rsp + 0x40]
mov rbp, rbx
shr rbp, 3
mov rax, qword [rsp + 0x188]
sub rax, qword [rsp + 0x180]
sar rax, 3
cmp rax, rbp
jb 0x140047bce
lea r12, [rsp + 0x1b0]
mov r8d, 0x208
mov rcx, r12
mov dl, 0xaa
call fcn.140259320
cmp ebx, 8
jb 0x140047e1d
cmp ebp, 2
mov eax, 1
cmovae eax, ebp
mov qword [rsp + 0x38], rax
xor ebp, ebp
mov qword [rsp + 0x30], r15
mov rax, qword [rsp + 0x180]
mov rcx, qword [rsp + 0x188]
sub rcx, rax
sar rcx, 3
cmp rcx, rbp
jbe 0x140047e62
mov rdx, qword [rax + rbp*8]
mov rcx, r15
mov r8, r12
mov r9d, 0x104
call sub.KERNEL32.dll_K32GetModuleFileNameExW
test eax, eax
je 0x140047cb7
mov ebx, eax
cmp eax, 0xa
ja 0x140047d11
mov byte [rsp + 0x57], al
mov r13, rdi
jmp 0x140047d55
mov ecx, 2
call fcn.1400f6360
test al, al
je 0x140047db1
call sub.KERNEL32.dll_GetLastError
mov dword [rsp + 0x20], eax
mov rcx, rdi
lea rdx, str.....chromechrome_cleanerosprocess.cc
mov r8d, 0x2c
mov r9d, 2
call fcn.1400f7550
mov r8d, 0x1d
lea rcx, [rsp + 0x50]
lea rdx, str.Failed_to_get_module_filename
call fcn.14001eb4a
mov rcx, rdi
call fcn.1400f7640
jmp 0x140047db1
mov r15, rdi
mov rdi, r14
mov r14, rbx
or r14, 7
lea rcx, [r14 + r14]
add rcx, 2
call fcn.140255d40
mov r13, rax
mov qword [rsp + 0x40], rax
movabs rax, 0x8000000000000001
add r14, rax
mov qword [rsp + 0x50], r14
mov r14, rdi
mov rdi, r15
mov r15, qword [rsp + 0x30]
mov qword [rsp + 0x48], rbx
lea rax, [rbx*2]
add rax, r13
cmp rax, r12
setbe al
cmp r13, r12
ja 0x140047d73
test al, al
je 0x140047e8e
lea r8, [rbx + rbx]
mov rcx, r13
mov rdx, r12
call fcn.140258c70
mov word [r13 + rbx*2], 0
mov rcx, r14
lea rdx, [rsp + 0x1a0]
mov r8, rdi
mov r9, rdi
call fcn.1400483ae
cmp byte [rsp + 0x57], 0
jns 0x140047db1
mov rcx, qword [rsp + 0x40]
call fcn.140255d7c
inc rbp
cmp qword [rsp + 0x38], rbp
jne 0x140047c6b
jmp 0x140047e1d
mov ecx, 2
call fcn.1400f6360
test al, al
je 0x140047e1d
call sub.KERNEL32.dll_GetLastError
mov dword [rsp + 0x20], eax
lea rdx, str.....chromechrome_cleanerosprocess.cc
lea rdi, [rsp + 0x1b0]
mov rcx, rdi
mov r8d, 0x1f
mov r9d, 2
call fcn.1400f7550
lea rcx, [rsp + 0x1c0]
lea rdx, str.Failed_to_enumerate_modules
mov r8d, 0x1b
call fcn.14001eb4a
mov rcx, rdi
call fcn.1400f7640
mov rcx, qword [rsp + 0x180]
test rcx, rcx
je 0x140047e37
mov qword [rsp + 0x188], rcx
call fcn.140255d7c
test esi, esi
setne bl
mov rcx, qword [rsp + 0x3c0]
xor rcx, rsp
call fcn.140257200
mov eax, ebx
add rsp, 0x3c8
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
lea rax, str.vector___index_out_of_bounds
mov qword [rsp + 0x20], rax
lea rcx, str._s:_d:_assertion__s_failed:__s
lea rdx, str....._buildtools_third_partylibc_trunkinclude_vector
lea r9, str.__n___size__
mov r8d, 0x5b1
call fcn.14004f520
lea rax, str.char_traits::copy_overlapped_range
mov qword [rsp + 0x20], rax
lea rcx, str._s:_d:_assertion__s_failed:__s
lea rdx, str....._buildtools_third_partylibc_trunkinclude__stringchar_traits.h
lea r9, str.__s2_____s1____s2_____s1__n
mov r8d, 0x154
call fcn.14004f520
int3