Function at 0x140001784
Capabilities:
Enumerate process modules

Disassembly:
push rbp
push r13
push r12
push rdi
push rsi
push rbx
mov eax, 0x22d8
call fcn.14000db70
sub rsp, rax
lea rbp, [rsp + 0x80]
mov ecx, 0x1f4
call sym.customSleep_int_
mov rax, qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
call rax
mov dword [rbp + 0x2244], eax
mov eax, dword [rbp + 0x2244]
mov r8d, eax
mov edx, 0
mov ecx, 0x410
mov rax, qword [sym.imp.KERNEL32.dll_OpenProcess]
call rax
mov qword [rbp + 0x2238], rax
cmp qword [rbp + 0x2238], 0
je 0x140001b2c
lea rdx, [rbp + 0x210c]
lea rax, [rbp + 0xe0]
mov rcx, qword [rbp + 0x2238]
mov r9, rdx
mov r8d, 0x2000
mov rdx, rax
call sym.K32EnumProcessModules
test eax, eax
setne al
test al, al
je 0x140001b0a
mov eax, dword [rbp + 0x210c]
shr eax, 3
mov dword [rbp + 0x2234], eax
lea rdi, [rbp + 0x2110]
mov ebx, 4
lea rax, str.ntdll.dll
mov rdx, rax
mov rcx, rdi
call sym.skCryptToStdString_abi:cxx11__char_const_
lea rsi, [rdi + 0x20]
sub rbx, 1
lea rax, str.KERNEL32.DLL
mov rdx, rax
mov rcx, rsi
call sym.skCryptToStdString_abi:cxx11__char_const_
add rsi, 0x20
sub rbx, 1
lea rax, str.KERNELBASE.dll
mov rdx, rax
mov rcx, rsi
call sym.skCryptToStdString_abi:cxx11__char_const_
add rsi, 0x20
sub rbx, 1
lea rax, str.apphelp.dll
mov rdx, rax
mov rcx, rsi
call sym.skCryptToStdString_abi:cxx11__char_const_
lea rax, [rsi + 0x20]
sub rbx, 1
lea rdx, str.ucrtbase.dll
mov rcx, rax
call sym.skCryptToStdString_abi:cxx11__char_const_
mov ebx, 4
lea rax, [rbp + 0x2110]
mov r12, rax
mov r13d, 5
lea rax, [rbp + 0x21bf]
mov qword [rbp + 0x2218], rax
nop
nop
mov qword [rbp - 0x60], r12
mov qword [rbp - 0x58], r13
lea rcx, [rbp + 0x21bf]
lea rdx, [rbp - 0x60]
lea rax, [rbp + 0x20f0]
mov r8, rcx
mov rcx, rax
call method.std::vector_std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_____std::allocator_std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_______.vector_std::initializer_list_std::__cxx11::basic_string_
lea rax, [rbp + 0x21bf]
mov rcx, rax
call method.std::__new_allocator_std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_____.__new_allocator__
nop
lea rbx, [rbp + 0x2110]
add rbx, 0xa0
lea rax, [rbp + 0x2110]
cmp rbx, rax
je 0x140001932
sub rbx, 0x20
mov rcx, rbx
call sym.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char___::basic_string__
jmp 0x140001918
lea rax, [rbp + 0x21c0]
mov rcx, rax
call sym.GetExecutableFileName_abi:cxx11___
lea rdx, [rbp + 0x21c0]
lea rax, [rbp + 0x20f0]
mov rcx, rax
call method.std::vector_std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_____std::allocator_std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_______.push_back_std::__cxx11::basic_string_char__std::char_tra
lea rax, [rbp + 0x21c0]
mov rcx, rax
call sym.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char___::basic_string__
mov dword [rbp + 0x224c], 0
jmp 0x140001ae9
mov eax, dword [rbp + 0x224c]
cdqe
mov rdx, qword [rbp + rax*8 + 0xe0]
lea rcx, [rbp - 0x30]
mov rax, qword [rbp + 0x2238]
mov r9d, 0x104
mov r8, rcx
mov rcx, rax
call sym.K32GetModuleFileNameExA
test eax, eax
setne al
test al, al
je 0x140001ae2
lea rax, [rbp + 0x21ef]
mov qword [rbp + 0x2210], rax
nop
nop
lea rcx, [rbp + 0x21ef]
lea rdx, [rbp - 0x30]
lea rax, [rbp - 0x50]
mov r8, rcx
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char___::basic_string_std.allocator_char____char_const__std::allocator_char__const_
lea rax, [rbp + 0x21ef]
mov rcx, rax
call method.std::__new_allocator_char_.__new_allocator__
nop
mov byte [rbp + 0x224b], 0
lea rax, [rbp + 0x20f0]
mov qword [rbp + 0x2228], rax
mov rax, qword [rbp + 0x2228]
mov rcx, rax
call method.std::vector_std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_____std::allocator_std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_______.begin__
mov qword [rbp + 0x20e8], rax
mov rax, qword [rbp + 0x2228]
mov rcx, rax
call method.std::vector_std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_____std::allocator_std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_______.end__
mov qword [rbp + 0x20e0], rax
jmp 0x140001a7d
lea rax, [rbp + 0x20e8]
mov rcx, rax
call sym.__gnu_cxx::__normal_iterator_std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_____std::vector_std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_____std::allocator_std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_________::operator___const
mov qword [rbp + 0x2220], rax
mov rdx, qword [rbp + 0x2220]
lea rax, [rbp - 0x50]
mov r8d, 0
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char___.find_std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____const__unsigned_long_long__const
cmp rax, 0xffffffffffffffff
setne al
test al, al
je 0x140001a6e
mov byte [rbp + 0x224b], 1
jmp 0x140001a97
lea rax, [rbp + 0x20e8]
mov rcx, rax
call sym.__gnu_cxx::__normal_iterator_std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_____std::vector_std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_____std::allocator_std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_________::operator__
lea rdx, [rbp + 0x20e0]
lea rax, [rbp + 0x20e8]
mov rcx, rax
call sym._ZN9__gnu_cxxneIPNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEEESt6vectorIS6_SaIS6_EEEEbRKNS_17__normal_iteratorIT_T0_EES
test al, al
jne 0x140001a2b
movzx eax, byte [rbp + 0x224b]
xor eax, 1
test al, al
je 0x140001ad6
lea rdx, [rbp - 0x50]
lea rax, [rbp + 0x21f0]
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char___.basic_string_std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____const_
lea rax, [rbp + 0x21f0]
mov rcx, rax
call sym.UnloadDllByName_std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____
lea rax, [rbp + 0x21f0]
mov rcx, rax
call sym.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char___::basic_string__
lea rax, [rbp - 0x50]
mov rcx, rax
call sym.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char___::basic_string__
add dword [rbp + 0x224c], 1
mov eax, dword [rbp + 0x224c]
cmp eax, dword [rbp + 0x2234]
jl 0x140001975
lea rax, [rbp + 0x20f0]
mov rcx, rax
call method.std::vector_std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_____std::allocator_std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_______.vector__
mov rax, qword [rbp + 0x2238]
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_CloseHandle]
call rax
mov ecx, 0xfa
call sym.customSleep_int_
jmp 0x1400017ab
nop
jmp 0x1400017ab