Function at 0x1400292d0
Capabilities:
Enumerate process modules

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rbp
mov qword [rsp + 0x20], rsi
push rdi
mov eax, 0x10a0
call fcn.14002e340
sub rsp, rax
mov rax, qword [0x140070080]
xor rax, rsp
mov qword [rsp + 0x1090], rax
mov rbx, rcx
lea rdx, str._cs2__Waiting_for_cs2.exe...
lea rcx, [0x140071cc0]
call fcn.14000d210
mov rcx, rax
call fcn.14000d4d0
mov ecx, 0x38
call fcn.14002dc28
mov qword [rsp + 0x30], rax
lea rcx, vtable.std::_Ref_count_obj2_class_pProcess_.0
xorps xmm0, xmm0
xor edx, edx
movups xmmword [rax], xmm0
mov qword [rax], rcx
lea rcx, [rax + 0x10]
mov dword [rax + 8], 1
mov dword [rax + 0xc], 1
movups xmmword [rcx], xmm0
movups xmmword [rcx + 0x10], xmm0
mov qword [rcx + 0x20], rdx
mov rdi, qword [rbx + 8]
mov qword [rbx], rcx
mov qword [rbx + 8], rax
test rdi, rdi
je 0x140029397
mov esi, 0xffffffff
mov eax, esi
lock xadd dword [rdi + 8], eax
cmp eax, 1
jne 0x140029397
mov rax, qword [rdi]
mov rcx, rdi
call qword [rax]
lock xadd dword [rdi + 0xc], esi
cmp esi, 1
jne 0x140029397
mov rax, qword [rdi]
mov rcx, rdi
call qword [rax + 8]
movabs rbp, 0x7fffffffc46535fe
movabs rsi, 0x7fffffffffffffff
nop dword [rax + rax]
mov rdi, qword [rbx]
call fcn.140028d40
mov dword [rdi], eax
test eax, eax
je 0x14002947e
mov ecx, eax
call fcn.1400289c0
mov qword [rdi + 8], rax
lea rcx, [rax + 1]
test rcx, 0xfffffffffffffffe
jne 0x1400294eb
lea rdx, str._cheat__Handle_Hijack_failed__falling_back_to_OpenProcess_method.
lea rcx, [0x140071cc0]
call fcn.14000d210
mov rcx, rax
call fcn.14000d4d0
call fcn.140028d40
mov dword [rdi], eax
test eax, eax
je 0x140029474
mov r8d, eax
xor edx, edx
mov ecx, 0x1fffff
call qword [sym.imp.KERNEL32.dll_OpenProcess]
lea r9, [rsp + 0x58]
mov dword [rsp + 0x20], 2
mov rcx, rax
mov qword [rdi + 8], rax
mov r8d, 0x7f8
lea rdx, [rsp + 0x90]
call qword [sym.imp.KERNEL32.dll_K32EnumProcessModulesEx]
mov rdx, qword [rsp + 0x90]
lea r8, [rsp + 0x60]
mov rcx, qword [rdi + 8]
mov r9d, 0x18
mov qword [rdi + 0x18], rdx
call qword [sym.imp.KERNEL32.dll_K32GetModuleInformation]
mov eax, dword [rsp + 0x68]
mov edx, dword [rdi]
mov qword [rdi + 0x20], rax
call fcn.140028f70
mov qword [rdi + 0x10], rax
mov al, 1
jmp 0x140029476
xor al, al
test al, al
jne 0x140029546
call fcn.14002d1cc
mov rdi, rax
call fcn.14002d1b0
cmp rdi, 0x989680
jne 0x14002949a
imul rax, rax, 0x64
jmp 0x1400294b8
cqo
idiv rdi
mov rcx, rax
imul rax, rdx, 0x3b9aca00
imul rcx, rcx, 0x3b9aca00
cqo
idiv rdi
add rax, rcx
cmp rax, rbp
jg 0x1400294d7
add rax, 0x3b9aca00
lea rcx, [rsp + 0x30]
mov qword [rsp + 0x30], rax
call fcn.1400284e0
jmp 0x1400293b0
lea rcx, [rsp + 0x30]
mov qword [rsp + 0x30], rsi
call fcn.1400284e0
jmp 0x1400293b0
lea r9, [rsp + 0x5c]
mov dword [rsp + 0x20], 2
mov r8d, 0x7f8
lea rdx, [rsp + 0x890]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_K32EnumProcessModulesEx]
mov rdx, qword [rsp + 0x890]
lea r8, [rsp + 0x78]
mov rcx, qword [rdi + 8]
mov r9d, 0x18
mov qword [rdi + 0x18], rdx
call qword [sym.imp.KERNEL32.dll_K32GetModuleInformation]
mov eax, dword [rsp + 0x80]
mov edx, dword [rdi]
mov qword [rdi + 0x20], rax
call fcn.140028f70
mov qword [rdi + 0x10], rax
lea rdx, str._cs2__Attached_to_cs2.exe_n
lea rcx, [0x140071cc0]
call fcn.14000d210
mov rcx, rax
call fcn.14000d4d0
mov rcx, qword [rbx]
lea r8, str.client.dll
lea rdx, [rsp + 0x38]
call fcn.140029030
mov rcx, qword [rbx]
lea r8, str.engine2.dll
lea rdx, [rsp + 0x48]
movups xmm0, xmmword [rax]
movups xmmword [rbx + 0x10], xmm0
call fcn.140029030
cmp qword [rbx + 0x10], 0
movups xmm0, xmmword [rax]
movups xmmword [rbx + 0x20], xmm0
je 0x1400295a7
mov rax, qword [rbx + 0x20]
test rax, rax
jne 0x140029621
call fcn.14002d1cc
mov rdi, rax
call fcn.14002d1b0
cmp rdi, 0x989680
jne 0x1400295c3
imul rax, rax, 0x64
jmp 0x1400295e1
cqo
idiv rdi
mov rcx, rax
imul rax, rdx, 0x3b9aca00
imul rcx, rcx, 0x3b9aca00
cqo
idiv rdi
add rax, rcx
cmp rax, rbp
jg 0x1400295f3
add rax, 0x3b9aca00
mov qword [rsp + 0x30], rax
jmp 0x1400295f8
mov qword [rsp + 0x30], rsi
lea rcx, [rsp + 0x30]
call fcn.1400284e0
lea rdx, str._cs2__Failed_to_find_module_client.dll_engine2.dll__waiting_for_the_game_to_load_it...
lea rcx, [0x140071cc0]
call fcn.14000d210
mov rcx, rax
call fcn.14000d4d0
mov rax, qword [rbx + 0x20]
cmp qword [rbx + 0x10], 0
je 0x140029561
test rax, rax
je 0x140029561
mov rcx, qword [rbx]
lea rdx, [rbx + 0x30]
mov rcx, qword [rcx + 0x10]
call qword [sym.imp.USER32.dll_GetClientRect]
mov rdx, qword [rbx + 0x20]
add rdx, qword [0x140070cd8]
mov rcx, qword [rbx]
call fcn.14002a9f0
mov qword [rbx + 0x40], rax
mov rcx, qword [rsp + 0x1090]
xor rcx, rsp
call fcn.14002dc00
lea r11, [rsp + 0x10a0]
mov rbx, qword [r11 + 0x18]
mov rbp, qword [r11 + 0x20]
mov rsi, qword [r11 + 0x28]
mov rsp, r11
pop rdi
ret