Function at 0x140001a70
Capabilities:
Enumerate process modules

Disassembly:
push r15
mov eax, 0x21d8
push r14
push r13
push r12
push rbp
push rdi
push rsi
push rbx
call fcn.14000d330
sub rsp, rax
mov ecx, 0x1f4
call sym.customSleep_int_
lea rax, [rsp + 0x5c]
mov qword [rsp + 0x40], rax
lea rax, [rsp + 0x1d0]
mov qword [rsp + 0x28], rax
lea rax, [rsp + 0xd0]
lea rsi, [rsp + 0xc0]
mov qword [rsp + 0x48], rax
lea r12, [rsp + 0x80]
nop word [rax + rax]
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
xor edx, edx
mov ecx, 0x410
mov r8d, eax
call qword [sym.imp.KERNEL32.dll_OpenProcess]
test rax, rax
mov rbp, rax
je 0x140001ad0
mov r9, qword [rsp + 0x40]
mov r8d, 0x2000
mov rcx, rax
mov rdx, qword [rsp + 0x28]
call sym.K32EnumProcessModules
test eax, eax
je 0x140001e27
mov r13d, dword [rsp + 0x5c]
lea r8, [0x1400290bb]
mov rcx, rsi
mov rax, qword [rsp + 0x48]
lea rdx, [r8 - 9]
shr r13d, 3
mov qword [rsp + 0xc0], rax
call fcn.140001450
lea r8, [0x1400290c8]
lea rax, [rsp + 0xf0]
lea rcx, [rsp + 0xe0]
mov qword [rsp + 0xe0], rax
lea rdx, [r8 - 0xc]
call fcn.140001450
lea r8, [0x1400290d7]
lea rax, [rsp + 0x110]
lea rcx, [rsp + 0x100]
mov qword [rsp + 0x100], rax
lea rdx, [r8 - 0xe]
call fcn.140001450
lea r8, [0x1400290e3]
lea rax, [rsp + 0x130]
lea rcx, [rsp + 0x120]
mov qword [rsp + 0x120], rax
lea rdx, [r8 - 0xb]
call fcn.140001450
lea r8, [0x1400290f0]
lea rax, [rsp + 0x150]
lea rcx, [rsp + 0x140]
mov qword [rsp + 0x140], rax
lea rdx, [r8 - 0xc]
call fcn.140001450
mov ecx, 0xa0
pxor xmm0, xmm0
mov qword [rsp + 0x70], 0
movaps xmmword [rsp + 0x60], xmm0
call sym.operator_new_unsigned_long_long_
mov r15, rax
mov qword [rsp + 0x60], rax
mov rbx, rax
mov rdi, rsi
lea r14, [rax + 0xa0]
mov qword [rsp + 0x70], r14
nop dword [rax]
mov rdx, qword [rdi]
lea rax, [rbx + 0x10]
mov rcx, rbx
mov r8, qword [rdi + 8]
mov qword [rbx], rax
add r8, rdx
call method.void_std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char___._M_construct_char__char__char__std::forward_iterator_tag___clone_.isra.0_
add rbx, 0x20
add rdi, 0x20
cmp r14, rbx
jne 0x140001c10
mov qword [rsp + 0x68], rbx
lea rdi, [rsp + 0x160]
nop dword [rax + rax]
mov rcx, qword [rdi - 0x20]
sub rdi, 0x20
lea rax, [rdi + 0x10]
cmp rcx, rax
je 0x140001c66
mov rax, qword [rdi + 0x10]
lea rdx, [rax + 1]
call sym.operator_delete_void__unsigned_long_long_
cmp rdi, rsi
jne 0x140001c48
mov r8d, 0x104
mov rdx, rsi
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
lea rdi, [rsp + 0xa0]
mov rcx, rsi
lea r14, [rsp + 0xb0]
mov qword [rsp + 0x30], rdi
mov qword [rsp + 0x38], r14
mov qword [rsp + 0xa0], r14
call sym.strlen
mov rdx, rsi
mov rcx, rdi
lea r8, [rsi + rax]
call fcn.140001450
lea rcx, [rsp + 0x60]
mov r8, rdi
mov rdx, rbx
call sym._ZNSt6vectorINSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEEESaIS5_EE17_M_realloc_insertIJS5_EEEvN9__gnu_cxx17__normal_ite
mov rcx, qword [rsp + 0xa0]
mov rdi, qword [rsp + 0x68]
cmp rcx, r14
je 0x140001ce8
mov rax, qword [rsp + 0xb0]
lea rdx, [rax + 1]
call sym.operator_delete_void__unsigned_long_long_
test r13d, r13d
mov r14, qword [rsp + 0x60]
je 0x140001de0
lea eax, [r13 - 1]
mov rbx, qword [rsp + 0x28]
lea r13, [rsp + rax*8 + 0x1d8]
lea rax, [rsp + 0x90]
mov qword [rsp + 0x20], rax
jmp 0x140001d2d
add rbx, 8
cmp rbx, r13
je 0x140001de0
mov rdx, qword [rbx]
mov r9d, 0x104
mov r8, rsi
mov rcx, rbp
call sym.K32GetModuleFileNameExA
test eax, eax
je 0x140001d20
mov rax, qword [rsp + 0x20]
mov rcx, rsi
mov qword [rsp + 0x80], rax
call sym.strlen
mov rdx, rsi
mov rcx, r12
lea r8, [rsi + rax]
call fcn.140001450
cmp r14, rdi
mov r15, r14
jne 0x140001d8d
jmp 0x140001e50
add r15, 0x20
cmp rdi, r15
je 0x140001e50
mov rdx, qword [r15]
xor r8d, r8d
mov rcx, r12
mov r9, qword [r15 + 8]
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char___.find_char_const__unsigned_long_long__unsigned_long_long__const
cmp rax, 0xffffffffffffffff
je 0x140001d80
mov rcx, qword [rsp + 0x80]
mov rax, qword [rsp + 0x20]
cmp rcx, rax
je 0x140001d20
mov rax, qword [rsp + 0x90]
add rbx, 8
lea rdx, [rax + 1]
call sym.operator_delete_void__unsigned_long_long_
cmp rbx, r13
jne 0x140001d2d
nop dword [rax]
cmp r14, rdi
mov rbx, r14
je 0x140001e12
nop dword [rax + rax]
mov rcx, qword [rbx]
lea rax, [rbx + 0x10]
cmp rcx, rax
je 0x140001e09
mov rax, qword [rbx + 0x10]
lea rdx, [rax + 1]
call sym.operator_delete_void__unsigned_long_long_
add rbx, 0x20
cmp rdi, rbx
jne 0x140001df0
test r14, r14
je 0x140001e27
mov rdx, qword [rsp + 0x70]
mov rcx, r14
sub rdx, r14
call sym.operator_delete_void__unsigned_long_long_
mov rcx, rbp
call qword [sym.imp.KERNEL32.dll_CloseHandle]
call method.std::chrono::_V2::system_clock.now__
lea rbx, [rax + 0xee6b280]
nop dword [rax]
call method.std::chrono::_V2::system_clock.now__
cmp rbx, rax
jg 0x140001e40
jmp 0x140001ad0
mov rdx, qword [rsp + 0x80]
mov r8, qword [rsp + 0x88]
mov rax, qword [rsp + 0x38]
mov rcx, qword [rsp + 0x30]
add r8, rdx
mov qword [rsp + 0xa0], rax
call method.void_std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char___._M_construct_char__char__char__std::forward_iterator_tag___clone_.isra.0_
mov rcx, qword [rsp + 0x30]
call sym.UnloadDllByName_std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____
mov rcx, qword [rsp + 0xa0]
mov rax, qword [rsp + 0x38]
cmp rcx, rax
je 0x140001da5
mov rax, qword [rsp + 0xb0]
lea rdx, [rax + 1]
call sym.operator_delete_void__unsigned_long_long_
jmp 0x140001da5