Function at 0x180037df6
Capabilities:
Enumerate process modules

Disassembly:
jmp 0x180071000
mov dword [rsp + 0x10], edx
mov qword [rsp + 8], rcx
push rbp
push rsi
push rdi
sub rsp, 0xa50
lea rbp, [rsp + 0x20]
lea rdi, [rsp + 0x20]
mov ecx, 0x1cc
mov eax, 0xcccccccc
rep stosd dword [rdi], eax
mov rcx, qword [rsp + 0xa78]
mov rax, qword [0x1800ea138]
xor rax, rbp
mov qword [rbp + 0xa20], rax
mov dword [rbp + 0x9e4], 0
lea rcx, [0x1800fd3aa]
call fcn.180037c84
lea rax, [rbp + 0x758]
mov qword [rbp + 0x788], rax
lea rax, [rbp + 0x7a8]
mov qword [rbp + 0x7d8], rax
lea rdx, [rbp + 0x828]
lea rcx, [0x1800ebc00]
call fcn.18003779d
mov qword [rbp + 0x9f8], rax
mov rax, qword [rbp + 0x9f8]
mov qword [rbp + 0xa00], rax
mov rdx, qword [rbp + 0x788]
lea rcx, [0x1800ebc00]
call fcn.18003779d
mov qword [rbp + 0xa08], rax
mov rdx, qword [rbp + 0x7d8]
lea rcx, [0x1800ebc00]
call fcn.180037bdf
mov qword [rbp + 0xa10], rax
lea r9, [rbp + 0xa58]
mov r8, qword [rbp + 0xa08]
mov rdx, qword [rbp + 0xa10]
lea rcx, [rbp + 0x7f8]
call fcn.180037a04
mov qword [rbp + 0xa18], rax
mov rdx, qword [rbp + 0xa00]
mov rcx, qword [rbp + 0xa18]
call fcn.180037a22
mov byte [rbp + 0x734], al
lea rcx, [rbp + 0x7f8]
call fcn.180037c07
nop
lea rcx, [rbp + 0x828]
call fcn.180037c07
movzx eax, byte [rbp + 0x734]
test eax, eax
je 0x180071163
lea rdx, [0x1800b5fd4]
mov rcx, qword [rbp + 0xa50]
call fcn.180036d5c
mov eax, dword [rbp + 0x9e4]
or eax, 1
mov dword [rbp + 0x9e4], eax
mov rax, qword [rbp + 0xa50]
jmp 0x1800714c9
lea rax, [rbp + 0x10]
lea rcx, [0x1800b61f0]
mov rdi, rax
mov rsi, rcx
mov ecx, 0xa
rep movsb byte [rdi], byte [rsi]
lea rax, [rbp + 0x1a]
mov rdi, rax
xor eax, eax
mov ecx, 0xfa
rep stosb byte [rdi], al
mov r8d, dword [rbp + 0xa58]
xor edx, edx
mov ecx, 0x410
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov qword [rbp + 0x138], rax
lea rdx, [0x1800b5fd4]
lea rcx, [rbp + 0x158]
call fcn.180036d5c
nop
cmp qword [rbp + 0x138], 0
je 0x180071443
lea r9, [rbp + 0x1b4]
mov r8d, 8
lea rdx, [rbp + 0x198]
mov rcx, qword [rbp + 0x138]
call fcn.180036294
test eax, eax
je 0x180071443
mov r9d, 0x104
lea r8, [rbp + 0x10]
mov rdx, qword [rbp + 0x198]
mov rcx, qword [rbp + 0x138]
call fcn.180037964
lea rcx, [rbp + 0x1d8]
call fcn.1800373b5
nop
lea rdx, [rbp + 0x10]
lea rcx, [rbp + 0x218]
call fcn.180036d5c
nop
lea rax, [rbp + 0x878]
mov qword [rbp + 0x8a8], rax
lea rax, [rbp + 0x8c8]
mov qword [rbp + 0x8f8], rax
lea rcx, [rbp + 0x854]
call fcn.180036fe6
mov qword [rbp + 0x9f8], rax
mov rdx, qword [rbp + 0x8a8]
lea rcx, [rbp + 0x218]
call fcn.18003634d
mov qword [rbp + 0xa00], rax
mov rdx, qword [rbp + 0x8f8]
lea rcx, [rbp + 0x218]
call fcn.180037cf7
mov qword [rbp + 0xa08], rax
mov rax, qword [rbp + 0x9f8]
mov r9, rax
mov r8, qword [rbp + 0xa00]
mov rdx, qword [rbp + 0xa08]
lea rcx, [rbp + 0x258]
call fcn.18003774d
nop
lea rdx, [rbp + 0x1d8]
lea rcx, [rbp + 0x258]
call fcn.180037595
movzx eax, al
test eax, eax
je 0x18007141d
mov edx, 1
lea rcx, [rbp + 0x2a0]
call fcn.1800377b1
nop
lea rax, [rbp + 0x1d8]
mov qword [rbp + 0x3b8], rax
mov rcx, qword [rbp + 0x3b8]
call fcn.180037635
mov qword [rbp + 0x3d8], rax
mov rcx, qword [rbp + 0x3b8]
call fcn.180037784
mov qword [rbp + 0x3f8], rax
jmp 0x18007132a
mov rax, qword [rbp + 0x3d8]
inc rax
mov qword [rbp + 0x3d8], rax
mov rax, qword [rbp + 0x3f8]
cmp qword [rbp + 0x3d8], rax
je 0x1800713d6
mov rax, qword [rbp + 0x3d8]
movzx eax, byte [rax]
mov byte [rbp + 0x414], al
movzx eax, byte [rbp + 0x414]
mov dword [rbp + 0x9f4], eax
mov dl, 0x30
lea rcx, [rbp + 0x914]
call fcn.18003707c
mov qword [rbp + 0x9f8], rax
mov edx, 2
lea rcx, [rbp + 0x938]
call fcn.180036654
mov qword [rbp + 0xa00], rax
lea rcx, [rbp + 0x2b0]
lea rdx, [0x1800379f5]
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::ios_base____ptr64____cdecl___class_std::ios_base____ptr64_____ptr64]
mov rcx, qword [rbp + 0xa00]
mov rdx, rcx
mov rcx, rax
call fcn.180036b31
mov rcx, qword [rbp + 0x9f8]
mov rdx, rcx
mov rcx, rax
call fcn.1800373dd
mov ecx, dword [rbp + 0x9f4]
mov edx, ecx
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___int____ptr64]
jmp 0x180071319
lea rdx, [rbp + 0x968]
lea rcx, [rbp + 0x2a0]
call fcn.180037a7c
mov qword [rbp + 0x9f8], rax
mov rdx, qword [rbp + 0x9f8]
lea rcx, [rbp + 0x158]
call fcn.1800367ad
lea rcx, [rbp + 0x968]
call fcn.180036523
nop
lea rcx, [rbp + 0x2a0]
call fcn.1800364ba
nop
lea rcx, [rbp + 0x258]
call fcn.180037856
nop
lea rcx, [rbp + 0x218]
call fcn.180036523
nop
lea rcx, [rbp + 0x1d8]
call fcn.1800368b6
mov rcx, qword [rbp + 0x138]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea rdx, [rbp + 0xa58]
lea rcx, [0x1800ebc00]
call fcn.180036db1
lea rdx, [rbp + 0x10]
lea rcx, [rbp + 0x9a8]
call fcn.180036d5c
nop
lea rdx, [rbp + 0x9a8]
lea rcx, [0x1800ebc20]
call fcn.180036a23
nop
lea rcx, [rbp + 0x9a8]
call fcn.180036523
lea rdx, [rbp + 0x158]
mov rcx, qword [rbp + 0xa50]
call fcn.180037a90
mov eax, dword [rbp + 0x9e4]
or eax, 1
mov dword [rbp + 0x9e4], eax
lea rcx, [rbp + 0x158]
call fcn.180036523
mov rax, qword [rbp + 0xa50]
mov rdi, rax
lea rcx, [rbp - 0x20]
lea rdx, [0x1800b1360]
call fcn.1800377a7
mov rax, rdi
mov rcx, qword [rbp + 0xa20]
xor rcx, rbp
call fcn.180036e4c
lea rsp, [rbp + 0xa30]
pop rdi
pop rsi
pop rbp
ret