Function at 0x180037de2
Capabilities:
Enumerate process modules

Disassembly:
jmp 0x18006ebc0
mov qword [rsp + 0x10], rdx
mov qword [rsp + 8], rcx
push rbp
push rdi
mov eax, 0x2af8
call fcn.1800364f6
sub rsp, rax
lea rbp, [rsp + 0x20]
lea rdi, [rsp + 0x20]
mov ecx, 0x936
mov eax, 0xcccccccc
rep stosd dword [rdi], eax
mov rcx, qword [rsp + 0x2b18]
mov rax, qword [0x1800ea138]
xor rax, rbp
mov qword [rbp + 0x2ac0], rax
lea rcx, [0x1800fd3aa]
call fcn.180037c84
mov byte [rbp + 4], 0
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [rbp + 0x24], eax
mov r8d, dword [rbp + 0x24]
xor edx, edx
mov ecx, 0x410
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov qword [rbp + 0x48], rax
cmp qword [rbp + 0x48], 0
jne 0x18006ec65
lea rdx, str.Failed_to_open_process.
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
call fcn.180036302
lea rdx, [0x180036127]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
jmp 0x18006f014
lea r9, [rbp + 0x2084]
mov r8d, 0x2000
lea rdx, [rbp + 0x70]
mov rcx, qword [rbp + 0x48]
call fcn.180036294
test eax, eax
je 0x18006efcc
mov dword [rbp + 0x20a4], 0
jmp 0x18006eca1
mov eax, dword [rbp + 0x20a4]
inc eax
mov dword [rbp + 0x20a4], eax
mov eax, dword [rbp + 0x20a4]
mov qword [rbp + 0x2aa8], rax
mov ecx, dword [rbp + 0x2084]
xor edx, edx
mov eax, ecx
mov ecx, 8
div rcx
mov rcx, qword [rbp + 0x2aa8]
cmp rcx, rax
jae 0x18006efcc
mov eax, dword [rbp + 0x20a4]
mov r9d, 0x104
lea r8, [rbp + 0x20d0]
mov rdx, qword [rbp + rax*8 + 0x70]
mov rcx, qword [rbp + 0x48]
call fcn.180037964
test eax, eax
je 0x18006efc7
lea rdx, [rbp + 0x20d0]
lea rcx, [rbp + 0x21f8]
call fcn.180036d5c
nop
lea rax, [rbp + 0x2a18]
mov qword [rbp + 0x2a48], rax
lea rax, [rbp + 0x2a68]
mov qword [rbp + 0x2a98], rax
lea rcx, [rbp + 0x29f4]
call fcn.180036fe6
mov qword [rbp + 0x2aa8], rax
mov rdx, qword [rbp + 0x2a48]
lea rcx, [rbp + 0x21f8]
call fcn.18003634d
mov qword [rbp + 0x2ab0], rax
mov rdx, qword [rbp + 0x2a98]
lea rcx, [rbp + 0x21f8]
call fcn.180037cf7
mov qword [rbp + 0x2ab8], rax
mov rax, qword [rbp + 0x2aa8]
mov r9, rax
mov r8, qword [rbp + 0x2ab0]
mov rdx, qword [rbp + 0x2ab8]
lea rcx, [rbp + 0x2238]
call fcn.18003774d
nop
lea rcx, [rbp + 0x2238]
call fcn.1800369bf
mov rcx, rax
call fcn.180037117
movzx eax, al
test eax, eax
je 0x18006edb2
jmp 0x18006edbe
lea rcx, str.The_signature_is_not_valid._n
call fcn.18003610e
mov r8, 0xffffffffffffffff
lea rdx, [0x1800b67a8]
lea rcx, [rbp + 0x21f8]
call fcn.1800375c7
mov qword [rbp + 0x2278], rax
cmp qword [rbp + 0x2278], 0xffffffffffffffff
je 0x18006efae
mov rax, qword [rbp + 0x2278]
inc rax
mov qword [rbp + 0x2aa8], rax
lea rcx, [rbp + 0x21f8]
call fcn.1800374aa
mov rcx, qword [rbp + 0x2aa8]
cmp rcx, rax
jae 0x18006efae
mov rax, qword [rbp + 0x2278]
inc rax
mov r9, 0xffffffffffffffff
mov r8, rax
lea rdx, [rbp + 0x2298]
lea rcx, [rbp + 0x21f8]
call fcn.180036ef6
nop
mov r8d, 0x11
lea rdx, str.C:WindowsSystem32_
lea rcx, [rbp + 0x20d0]
call qword [sym.imp.ucrtbased.dll__strnicmp]
test eax, eax
je 0x18006efa1
mov byte [rbp + 0x22d4], 0
mov rax, qword [rbp + 0x2af8]
mov qword [rbp + 0x22f8], rax
mov rcx, qword [rbp + 0x22f8]
call fcn.180036a7d
mov qword [rbp + 0x2318], rax
mov rcx, qword [rbp + 0x22f8]
call fcn.180037b30
mov qword [rbp + 0x2338], rax
jmp 0x18006eeb3
mov rax, qword [rbp + 0x2318]
add rax, 0x28
mov qword [rbp + 0x2318], rax
mov rax, qword [rbp + 0x2338]
cmp qword [rbp + 0x2318], rax
je 0x18006ef12
mov rax, qword [rbp + 0x2318]
mov qword [rbp + 0x2358], rax
mov rcx, qword [rbp + 0x2358]
call fcn.180036299
mov qword [rbp + 0x2aa8], rax
lea rcx, [rbp + 0x2298]
call fcn.180036299
mov rcx, qword [rbp + 0x2aa8]
mov rdx, rcx
mov rcx, rax
call qword [sym.imp.ucrtbased.dll__stricmp]
test eax, eax
jne 0x18006ef10
mov byte [rbp + 0x22d4], 1
jmp 0x18006ef12
jmp 0x18006eea1
movzx eax, byte [rbp + 0x22d4]
test eax, eax
jne 0x18006efa1
mov byte [rbp + 4], 1
lea rdx, str.Module_name:
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.180036302
lea rdx, [rbp + 0x20d0]
mov rcx, rax
call fcn.180036302
lea rdx, [0x180036127]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, str.__h1custom___02module:
lea rcx, [rbp + 0x2378]
call fcn.180036d5c
nop
lea rdx, [rbp + 0x20d0]
lea rcx, [rbp + 0x2378]
call fcn.180036c1c
lea rcx, [rbp + 0x2378]
call fcn.180036299
mov rcx, rax
call qword [0x1800ebdf8]
nop
lea rcx, [rbp + 0x2378]
call fcn.180036523
nop
lea rcx, [rbp + 0x2298]
call fcn.180036523
nop
lea rcx, [rbp + 0x2238]
call fcn.180037856
nop
lea rcx, [rbp + 0x21f8]
call fcn.180036523
jmp 0x18006ec93
movzx eax, byte [rbp + 4]
test eax, eax
jne 0x18006f00a
lea rdx, str.__h1custom___02none_found
lea rcx, [rbp + 0x23b8]
call fcn.180036d5c
nop
lea rcx, [rbp + 0x23b8]
call fcn.180036299
mov rcx, rax
call qword [0x1800ebdf8]
nop
lea rcx, [rbp + 0x23b8]
call fcn.180036523
mov rcx, qword [rbp + 0x48]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea rcx, [rbp - 0x20]
lea rdx, [0x1800b3910]
call fcn.1800377a7
mov rcx, qword [rbp + 0x2ac0]
xor rcx, rbp
call fcn.180036e4c
lea rsp, [rbp + 0x2ad8]
pop rdi
pop rbp
ret