Function at 0x140029900
Capabilities:
Enumerate process modules

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rbp
mov qword [rsp + 0x20], rsi
push rdi
mov eax, 0x10a0
call fcn.14002e9d0
sub rsp, rax
mov rax, qword [0x140076060]
xor rax, rsp
mov qword [rsp + 0x1090], rax
mov rbx, rcx
lea rdx, str._cs2__Waiting_for_cs2.exe...
lea rcx, [0x140077cb0]
call fcn.14000cf90
mov rcx, rax
call fcn.14000d250
mov ecx, 0x38
call fcn.14002e2b8
mov qword [rsp + 0x30], rax
lea rcx, vtable.std::_Ref_count_obj2_class_pProcess_.0
xorps xmm0, xmm0
xor edx, edx
movups xmmword [rax], xmm0
mov qword [rax], rcx
lea rcx, [rax + 0x10]
mov dword [rax + 8], 1
mov dword [rax + 0xc], 1
movups xmmword [rcx], xmm0
movups xmmword [rcx + 0x10], xmm0
mov qword [rcx + 0x20], rdx
mov rdi, qword [rbx + 8]
mov qword [rbx], rcx
mov qword [rbx + 8], rax
test rdi, rdi
je 0x1400299c7
mov esi, 0xffffffff
mov eax, esi
lock xadd dword [rdi + 8], eax
cmp eax, 1
jne 0x1400299c7
mov rax, qword [rdi]
mov rcx, rdi
call qword [rax]
lock xadd dword [rdi + 0xc], esi
cmp esi, 1
jne 0x1400299c7
mov rax, qword [rdi]
mov rcx, rdi
call qword [rax + 8]
movabs rbp, 0x7fffffffc46535fe
movabs rsi, 0x7fffffffffffffff
nop dword [rax + rax]
mov rdi, qword [rbx]
call fcn.140029370
mov dword [rdi], eax
test eax, eax
je 0x140029aae
mov ecx, eax
call fcn.140029000
mov qword [rdi + 8], rax
lea rcx, [rax + 1]
test rcx, 0xfffffffffffffffe
jne 0x140029b1b
lea rdx, str._cheat__Handle_Hijack_failed__falling_back_to_OpenProcess_method.
lea rcx, [0x140077cb0]
call fcn.14000cf90
mov rcx, rax
call fcn.14000d250
call fcn.140029370
mov dword [rdi], eax
test eax, eax
je 0x140029aa4
mov r8d, eax
xor edx, edx
mov ecx, 0x1fffff
call qword [sym.imp.KERNEL32.dll_OpenProcess]
lea r9, [rsp + 0x58]
mov dword [rsp + 0x20], 2
mov rcx, rax
mov qword [rdi + 8], rax
mov r8d, 0x7f8
lea rdx, [rsp + 0x90]
call qword [sym.imp.KERNEL32.dll_K32EnumProcessModulesEx]
mov rdx, qword [rsp + 0x90]
lea r8, [rsp + 0x60]
mov rcx, qword [rdi + 8]
mov r9d, 0x18
mov qword [rdi + 0x18], rdx
call qword [sym.imp.KERNEL32.dll_K32GetModuleInformation]
mov eax, dword [rsp + 0x68]
mov edx, dword [rdi]
mov qword [rdi + 0x20], rax
call fcn.1400295a0
mov qword [rdi + 0x10], rax
mov al, 1
jmp 0x140029aa6
xor al, al
test al, al
jne 0x140029b76
call fcn.14002d834
mov rdi, rax
call fcn.14002d818
cmp rdi, 0x989680
jne 0x140029aca
imul rax, rax, 0x64
jmp 0x140029ae8
cqo
idiv rdi
mov rcx, rax
imul rax, rdx, 0x3b9aca00
imul rcx, rcx, 0x3b9aca00
cqo
idiv rdi
add rax, rcx
cmp rax, rbp
jg 0x140029b07
add rax, 0x3b9aca00
lea rcx, [rsp + 0x30]
mov qword [rsp + 0x30], rax
call fcn.140028b20
jmp 0x1400299e0
lea rcx, [rsp + 0x30]
mov qword [rsp + 0x30], rsi
call fcn.140028b20
jmp 0x1400299e0
lea r9, [rsp + 0x5c]
mov dword [rsp + 0x20], 2
mov r8d, 0x7f8
lea rdx, [rsp + 0x890]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_K32EnumProcessModulesEx]
mov rdx, qword [rsp + 0x890]
lea r8, [rsp + 0x78]
mov rcx, qword [rdi + 8]
mov r9d, 0x18
mov qword [rdi + 0x18], rdx
call qword [sym.imp.KERNEL32.dll_K32GetModuleInformation]
mov eax, dword [rsp + 0x80]
mov edx, dword [rdi]
mov qword [rdi + 0x20], rax
call fcn.1400295a0
mov qword [rdi + 0x10], rax
lea rdx, str._cs2__Attached_to_cs2.exe_n
lea rcx, [0x140077cb0]
call fcn.14000cf90
mov rcx, rax
call fcn.14000d250
mov rcx, qword [rbx]
lea r8, str.client.dll
lea rdx, [rsp + 0x38]
call fcn.140029660
mov rcx, qword [rbx]
lea r8, str.engine2.dll
lea rdx, [rsp + 0x48]
movups xmm0, xmmword [rax]
movups xmmword [rbx + 0x10], xmm0
call fcn.140029660
cmp qword [rbx + 0x10], 0
movups xmm0, xmmword [rax]
movups xmmword [rbx + 0x20], xmm0
je 0x140029bd7
mov rax, qword [rbx + 0x20]
test rax, rax
jne 0x140029c51
call fcn.14002d834
mov rdi, rax
call fcn.14002d818
cmp rdi, 0x989680
jne 0x140029bf3
imul rax, rax, 0x64
jmp 0x140029c11
cqo
idiv rdi
mov rcx, rax
imul rax, rdx, 0x3b9aca00
imul rcx, rcx, 0x3b9aca00
cqo
idiv rdi
add rax, rcx
cmp rax, rbp
jg 0x140029c23
add rax, 0x3b9aca00
mov qword [rsp + 0x30], rax
jmp 0x140029c28
mov qword [rsp + 0x30], rsi
lea rcx, [rsp + 0x30]
call fcn.140028b20
lea rdx, str._cs2__Failed_to_find_module_client.dll_engine2.dll__waiting_for_the_game_to_load_it...
lea rcx, [0x140077cb0]
call fcn.14000cf90
mov rcx, rax
call fcn.14000d250
mov rax, qword [rbx + 0x20]
cmp qword [rbx + 0x10], 0
je 0x140029b91
test rax, rax
je 0x140029b91
mov rcx, qword [rbx]
lea rdx, [rbx + 0x30]
mov rcx, qword [rcx + 0x10]
call qword [sym.imp.USER32.dll_GetClientRect]
mov rdx, qword [rbx + 0x20]
add rdx, qword [0x140076cc8]
mov rcx, qword [rbx]
call fcn.14002b020
mov qword [rbx + 0x40], rax
mov rcx, qword [rsp + 0x1090]
xor rcx, rsp
call fcn.14002e290
lea r11, [rsp + 0x10a0]
mov rbx, qword [r11 + 0x18]
mov rbp, qword [r11 + 0x20]
mov rsi, qword [r11 + 0x28]
mov rsp, r11
pop rdi
ret