Function at 0x140001530
Capabilities:
Enumerate process modules

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
mov qword [rsp + 0x20], r12
push rbp
push r14
push r15
lea rbp, [rsp - 0x1f0]
sub rsp, 0x2f0
mov rax, qword [0x140009010]
xor rax, rsp
mov qword [rbp + 0x1e8], rax
xor esi, esi
mov dword [rbp + 0x194], 0xc8
mov dword [rbp + 0x190], esi
mov dword [rbp + 0x198], esi
lea rdx, str.Enter_Your_Character_name
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140002e10
mov rcx, rax
lea rdx, [0x140002dd0]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_istream_char__struct_std::char_traits_char___std::cin]
call fcn.140002fe0
mov r15, qword [0x140009168]
movabs rcx, 0x7fffffffffffffff
mov rax, rcx
sub rax, r15
cmp rax, 1
jb 0x140001c22
lea r12, [0x140009158]
cmp qword [0x140009170], 0x10
cmovae r12, qword [0x140009158]
xorps xmm0, xmm0
movups xmmword [rsp + 0x30], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x40], xmm1
lea r14, [r15 + 1]
mov ebx, 0xf
lea rdi, [rsp + 0x30]
cmp r14, rbx
jbe 0x14000168a
mov rbx, r14
or rbx, 0xf
cmp rbx, rcx
jbe 0x140001644
mov rbx, rcx
movabs rax, 0x8000000000000000
add rax, 0x27
mov rcx, rax
call fcn.1400035b0
test rax, rax
je 0x14000166c
lea rdi, [rax + 0x27]
and rdi, 0xffffffffffffffe0
mov qword [rdi - 8], rax
jmp 0x140001685
mov eax, 0x16
cmp rbx, rax
cmovb rbx, rax
lea rcx, [rbx + 1]
cmp rcx, 0x1000
jb 0x140001673
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x140001c28
jmp 0x140001629
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
test rcx, rcx
je 0x140001682
call fcn.1400035b0
mov rdi, rax
jmp 0x140001685
mov rdi, rsi
mov qword [rsp + 0x30], rdi
mov qword [rsp + 0x40], r14
mov qword [rsp + 0x48], rbx
mov byte [rdi], 0x5b
lea rcx, [rdi + 1]
mov r8, r15
mov rdx, r12
call sub.VCRUNTIME140.dll_memcpy
mov byte [rdi + r14], sil
mov rcx, qword [rsp + 0x40]
mov rdx, qword [rsp + 0x48]
mov rax, rdx
sub rax, rcx
cmp rax, 0x12
jb 0x1400016fb
lea rax, [rcx + 0x12]
mov qword [rsp + 0x40], rax
lea rbx, [rsp + 0x30]
cmp rdx, 0x10
cmovae rbx, qword [rsp + 0x30]
add rbx, rcx
mov r8d, 0x12
lea rdx, str.___ClassicConquer_
mov rcx, rbx
call sub.VCRUNTIME140.dll_memmove
mov byte [rbx + 0x12], 0
lea rax, [rsp + 0x30]
jmp 0x140001713
mov qword [rsp + 0x20], 0x12
mov edx, 0x12
lea rcx, [rsp + 0x30]
call fcn.140003350
xorps xmm0, xmm0
movups xmmword [rbp + 0x1a0], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x1b0], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x1a0], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x1b0], xmm1
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
mov rdx, qword [rsp + 0x48]
cmp rdx, 0x10
jb 0x14000178c
inc rdx
mov rcx, qword [rsp + 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140001787
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140001787
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14000383c
movdqa xmm0, xmmword [0x140005810]
movdqu xmmword [rsp + 0x40], xmm0
mov byte [rsp + 0x30], 0
lea rdx, [rbp + 0x1a0]
cmp qword [rbp + 0x1b8], 0x10
cmovae rdx, qword [rbp + 0x1a0]
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowA]
mov qword [0x140009a28], rax
lea rdx, [0x140009a14]
mov rcx, rax
call qword [sym.imp.USER32.dll_GetWindowThreadProcessId]
mov r8d, dword [0x140009a14]
xor edx, edx
mov ecx, 0x1fffff
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov qword [0x140009a18], rax
mov ecx, 0x64
call qword [sym.imp.KERNEL32.dll_Sleep]
mov rdx, qword [0x140009a18]
test rdx, rdx
jne 0x14000181c
lea rdx, str.Failed_to_open_process_
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140002e10
jmp 0x140001833
cmp qword [0x140009a28], 0
jne 0x140001850
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___void_const____ptr64____ptr64]
lea rdx, [0x140002dd0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov esi, 1
jmp 0x140001ba5
movsd xmm0, qword [str.imconquer.exe]
movsd qword [rbp + 0x1d8], xmm0
mov eax, dword [0x140005600]
mov dword [rbp + 0x1e0], eax
movzx eax, word [0x140005604]
mov word [rbp + 0x1e4], ax
mov rdi, rsi
mov edx, dword [0x140009a14]
mov ecx, 8
call qword [sym.imp.KERNEL32.dll_CreateToolhelp32Snapshot]
mov rbx, rax
xor edx, edx
mov r8d, 0x234
lea rcx, [rsp + 0x54]
call sub.VCRUNTIME140.dll_memset
mov dword [rsp + 0x50], 0x238
lea rdx, [rsp + 0x50]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_Module32First]
test eax, eax
je 0x1400018e7
lea rdx, [rbp + 0x1d8]
lea rcx, [rbp - 0x80]
call qword [sym.imp.api_ms_win_crt_multibyte_l1_1_0.dll__mbscmp]
test eax, eax
je 0x1400018e2
lea rdx, [rsp + 0x50]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_Module32Next]
jmp 0x1400018b9
mov rdi, qword [rsp + 0x68]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov qword [0x140009a20], rdi
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
test rdi, rdi
jne 0x14000192f
lea rdx, str.Error:_Could_not_find_module__Game.dll_____Wait..._Few_min_will_find_soon
call fcn.140002e10
mov rcx, rax
lea rdx, [0x140002dd0]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov ecx, 0xbb8
call qword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x140001850
lea rdx, str.Software_successful_load
call fcn.140002e10
mov rcx, rax
lea rdx, [0x140002dd0]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, str.Wana_Edit_Game_Zoom_____1Yes___0No
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140002e10
mov rcx, rax
lea rdx, [0x140002dd0]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, [rbp + 0x190]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_istream_char__struct_std::char_traits_char___std::cin]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_istream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_istream_char__struct_std::char_traits_char__::operator___int____ptr64____ptr64]
cmp dword [rbp + 0x190], 1
jne 0x140001a70
nop
mov dword [rbp + 0x194], 0x100
lea rdx, str.Enter_Zoom_Number_from_100_to_400___lowest_Numb__Zoom_out
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140002e10
mov rcx, rax
lea rdx, [0x140002dd0]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, [rbp + 0x194]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_istream_char__struct_std::char_traits_char___std::cin]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_istream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_istream_char__struct_std::char_traits_char__::operator___int____ptr64____ptr64]
mov rdx, qword [0x140009a20]
add rdx, 0x4d52f4
mov qword [rsp + 0x20], rsi
mov r9d, 4
lea r8, [rbp + 0x194]
mov rcx, qword [0x140009a18]
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
lea rdx, str._Wana_Edit_Zoom_Again____1Yes___0No
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140002e10
mov rcx, rax
lea rdx, [0x140002dd0]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, [rbp + 0x198]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_istream_char__struct_std::char_traits_char___std::cin]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_istream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_istream_char__struct_std::char_traits_char__::operator___int____ptr64____ptr64]
cmp dword [rbp + 0x198], 0
je 0x140001a4d
cmp dword [rbp + 0x190], 1
je 0x140001990
jmp 0x140001a70
lea rdx, str.Okay_Dont_Close_The_Window_Have_Fun__
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140002e10
mov rcx, rax
lea rdx, [0x140002dd0]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
xor r9d, r9d
mov edx, 0x100
lea r8d, [r9 + 2]
mov rcx, qword [0x140009a28]
call qword [sym.imp.USER32.dll_SendMessageA]
xor r9d, r9d
mov edx, 0x101
lea r8d, [r9 + 2]
mov rcx, qword [0x140009a28]
call qword [sym.imp.USER32.dll_SendMessageA]
xorps xmm0, xmm0
movups xmmword [rbp + 0x1c0], xmm0
mov ecx, 4
call fcn.1400035b0
mov rbx, rax
mov qword [rbp + 0x1c0], rax
lea rdi, [rax + 4]
mov qword [rbp + 0x1d0], rdi
mov dword [rax], 0x130
mov qword [rbp + 0x1c8], rdi
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x30], xmm0
mov qword [rsp + 0x40], rsi
mov ecx, 4
call fcn.1400035b0
mov rdx, rax
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x38], rax
lea rcx, [rax + 4]
mov qword [rsp + 0x40], rcx
mov eax, dword [rbx]
mov dword [rdx], eax
mov qword [rsp + 0x38], rcx
lea r9, [rsp + 0x30]
call fcn.140001380
mov eax, dword [rbp + 0x190]
cmp eax, 1
jne 0x140001b67
mov rdx, qword [0x140009a20]
add rdx, 0x4d52f4
mov qword [rsp + 0x20], rsi
mov r9d, 4
lea r8, [rbp + 0x194]
mov rcx, qword [0x140009a18]
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov ecx, 0x32
call qword [sym.imp.KERNEL32.dll_Sleep]
mov eax, dword [rbp + 0x190]
cmp eax, 1
je 0x140001b24
test rbx, rbx
je 0x140001ba5
sub rdi, rbx
sar rdi, 2
lea rdx, [rdi*4]
cmp rdx, 0x1000
jb 0x140001b9c
add rdx, 0x27
mov rcx, qword [rbx - 8]
sub rbx, rcx
lea rax, [rbx - 8]
cmp rax, 0x1f
ja 0x140001be4
mov rbx, rcx
mov rcx, rbx
call fcn.14000383c
nop
mov rdx, qword [rbp + 0x1b8]
cmp rdx, 0x10
jb 0x140001bf0
inc rdx
mov rcx, qword [rbp + 0x1a0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140001beb
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140001beb
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call fcn.14000383c
mov eax, esi
mov rcx, qword [rbp + 0x1e8]
xor rcx, rsp
call fcn.140003590
lea r11, [rsp + 0x2f0]
mov rbx, qword [r11 + 0x20]
mov rsi, qword [r11 + 0x28]
mov rdi, qword [r11 + 0x30]
mov r12, qword [r11 + 0x38]
mov rsp, r11
pop r15
pop r14
pop rbp
ret
call fcn.1400012a0
int3
call fcn.140001200
int3