Function at 0x140027230
Capabilities:
Enumerate process modules

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rbp
mov qword [rsp + 0x20], rsi
push rdi
mov eax, 0x10a0
call fcn.14002b7d0
sub rsp, rax
mov rax, qword [0x140071058]
xor rax, rsp
mov qword [rsp + 0x1090], rax
mov rdi, rcx
lea rdx, str._cs2__Waiting_for_cs2.exe...
lea rcx, [0x140072cc0]
call fcn.14000bd90
mov rcx, rax
call fcn.14000bff0
mov ecx, 0x38
call fcn.14002b0b8
mov qword [rsp + 0x30], rax
lea rcx, vtable.std::_Ref_count_obj2_class_pProcess_.0
xorps xmm0, xmm0
xor edx, edx
movups xmmword [rax], xmm0
mov qword [rax], rcx
lea rcx, [rax + 0x10]
mov dword [rax + 8], 1
mov dword [rax + 0xc], 1
movups xmmword [rcx], xmm0
movups xmmword [rcx + 0x10], xmm0
mov qword [rcx + 0x20], rdx
mov rbx, qword [rdi + 8]
mov qword [rdi], rcx
mov qword [rdi + 8], rax
test rbx, rbx
je 0x1400272f7
mov esi, 0xffffffff
mov eax, esi
lock xadd dword [rbx + 8], eax
cmp eax, 1
jne 0x1400272f7
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax]
lock xadd dword [rbx + 0xc], esi
cmp esi, 1
jne 0x1400272f7
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + 8]
movabs rbp, 0x7fffffffc46535fe
movabs rsi, 0x7fffffffffffffff
nop dword [rax + rax]
mov rbx, qword [rdi]
call fcn.140026ca0
mov dword [rbx], eax
test eax, eax
je 0x1400273de
mov ecx, eax
call fcn.140026930
mov qword [rbx + 8], rax
lea rcx, [rax + 1]
test rcx, 0xfffffffffffffffe
jne 0x140027447
lea rdx, str._cheat__Handle_Hijack_failed__falling_back_to_OpenProcess_method.
lea rcx, [0x140072cc0]
call fcn.14000bd90
mov rcx, rax
call fcn.14000bff0
call fcn.140026ca0
mov dword [rbx], eax
test eax, eax
je 0x1400273d4
mov r8d, eax
xor edx, edx
mov ecx, 0x1fffff
call qword [sym.imp.KERNEL32.dll_OpenProcess]
lea r9, [rsp + 0x58]
mov dword [rsp + 0x20], 2
mov rcx, rax
mov qword [rbx + 8], rax
mov r8d, 0x7f8
lea rdx, [rsp + 0x90]
call qword [sym.imp.KERNEL32.dll_K32EnumProcessModulesEx]
mov rdx, qword [rsp + 0x90]
lea r8, [rsp + 0x60]
mov rcx, qword [rbx + 8]
mov r9d, 0x18
mov qword [rbx + 0x18], rdx
call qword [sym.imp.KERNEL32.dll_K32GetModuleInformation]
mov eax, dword [rsp + 0x68]
mov edx, dword [rbx]
mov qword [rbx + 0x20], rax
call fcn.140026ed0
mov qword [rbx + 0x10], rax
mov al, 1
jmp 0x1400273d6
xor al, al
test al, al
jne 0x1400274a2
call fcn.14002a2ec
mov rbx, rax
call fcn.14002a2d0
mov rcx, rax
cqo
idiv rbx
imul rax, rdx, 0x3b9aca00
cqo
idiv rbx
mov r8, rax
mov rax, rcx
cqo
idiv rbx
imul rax, rax, 0x3b9aca00
add rax, r8
cmp rax, rbp
jg 0x140027433
add rax, 0x3b9aca00
lea rcx, [rsp + 0x30]
mov qword [rsp + 0x30], rax
call fcn.140026580
jmp 0x140027310
lea rcx, [rsp + 0x30]
mov qword [rsp + 0x30], rsi
call fcn.140026580
jmp 0x140027310
lea r9, [rsp + 0x5c]
mov dword [rsp + 0x20], 2
mov r8d, 0x7f8
lea rdx, [rsp + 0x890]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_K32EnumProcessModulesEx]
mov rdx, qword [rsp + 0x890]
lea r8, [rsp + 0x78]
mov rcx, qword [rbx + 8]
mov r9d, 0x18
mov qword [rbx + 0x18], rdx
call qword [sym.imp.KERNEL32.dll_K32GetModuleInformation]
mov eax, dword [rsp + 0x80]
mov edx, dword [rbx]
mov qword [rbx + 0x20], rax
call fcn.140026ed0
mov qword [rbx + 0x10], rax
lea rdx, str._cs2__Attached_to_cs2.exe_n
lea rcx, [0x140072cc0]
call fcn.14000bd90
mov rcx, rax
call fcn.14000bff0
nop dword [rax]
mov rcx, qword [rdi]
lea r8, str.client.dll
lea rdx, [rsp + 0x38]
call fcn.140026f90
mov rcx, qword [rdi]
lea r8, str.engine2.dll
lea rdx, [rsp + 0x48]
movups xmm0, xmmword [rax]
movups xmmword [rdi + 0x10], xmm0
call fcn.140026f90
cmp qword [rdi + 0x10], 0
movups xmm0, xmmword [rax]
movups xmmword [rdi + 0x20], xmm0
je 0x140027506
mov rax, qword [rdi + 0x20]
test rax, rax
jne 0x14002757c
call fcn.14002a2ec
mov rbx, rax
call fcn.14002a2d0
mov rcx, rax
cqo
idiv rbx
imul rax, rdx, 0x3b9aca00
cqo
idiv rbx
mov r8, rax
mov rax, rcx
cqo
idiv rbx
imul rax, rax, 0x3b9aca00
add rax, r8
cmp rax, rbp
jg 0x14002754e
add rax, 0x3b9aca00
mov qword [rsp + 0x30], rax
jmp 0x140027553
mov qword [rsp + 0x30], rsi
lea rcx, [rsp + 0x30]
call fcn.140026580
lea rdx, str._cs2__Failed_to_find_module_client.dll_engine2.dll__waiting_for_the_game_to_load_it...
lea rcx, [0x140072cc0]
call fcn.14000bd90
mov rcx, rax
call fcn.14000bff0
mov rax, qword [rdi + 0x20]
cmp qword [rdi + 0x10], 0
je 0x1400274c0
test rax, rax
je 0x1400274c0
mov rcx, qword [rdi]
lea rdx, [rdi + 0x30]
mov rcx, qword [rcx + 0x10]
call qword [sym.imp.USER32.dll_GetClientRect]
mov rdx, qword [rdi + 0x20]
add rdx, qword [0x140071cb0]
mov rcx, qword [rdi]
call fcn.140028410
mov qword [rdi + 0x40], rax
mov rcx, qword [rsp + 0x1090]
xor rcx, rsp
call fcn.14002b090
lea r11, [rsp + 0x10a0]
mov rbx, qword [r11 + 0x18]
mov rbp, qword [r11 + 0x20]
mov rsi, qword [r11 + 0x28]
mov rsp, r11
pop rdi
ret