Function at 0x100a27a0
Capabilities:
Enumerate process modules
Get process image filename

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x100c1cbb
mov eax, dword fs:[0]
push eax
mov eax, 0x1634
call fcn.100c1160
mov eax, dword [0x100d9018]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
lea eax, [ebp - 0x158c]
push eax
push 0x1000
lea ecx, [ebp - 0x1460]
xor ebx, ebx
push ecx
mov dword [ebp - 0x158c], ebx
call dword [sym.imp.PSAPI.DLL_EnumProcesses]
test eax, eax
jne 0x100a27fe
xor al, al
jmp 0x100a29cb
lea edx, [ebp - 0x1640]
push edx
call fcn.100a30b0
mov dword [ebp - 4], ebx
mov esi, dword [ebp - 0x158c]
shr esi, 2
xor ecx, ecx
mov dword [ebp - 0x1594], ecx
mov dword [ebp - 0x1590], esi
cmp esi, ebx
jle 0x100a292b
lea esp, [esp]
mov eax, dword [ebp + ecx*4 - 0x1460]
lea edi, [ebp + ecx*4 - 0x1460]
cmp eax, ebx
je 0x100a291c
push eax
push ebx
push 0x410
call dword [sym.imp.KERNEL32.dll_OpenProcess]
mov ebx, eax
test ebx, ebx
je 0x100a290d
push 0x104
lea eax, [ebp - 0x258]
push eax
push ebx
call dword [sym.imp.PSAPI.DLL_GetProcessImageFileNameW]
test eax, eax
je 0x100a290d
lea ecx, [ebp - 0x258]
push ecx
lea edx, [ebp - 0x1640]
push edx
call fcn.100a4d20
push eax
call fcn.100a4f80
add esp, 0xc
lea esi, [ebp - 0x258]
call fcn.100b6a60
push eax
lea eax, [ebp - 0x50]
push 0x100ca7ac
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
lea ecx, [ebp - 0x460]
add esp, 0xc
push ecx
mov ecx, esi
call fcn.100b67c0
add esp, 4
test al, al
je 0x100a2907
mov edx, dword [edi]
lea eax, [ebp - 0x460]
push eax
mov dword [ebp - 0x1588], edx
mov ecx, 8
lea esi, [ebp - 0x50]
lea edi, [ebp - 0x1584]
rep movsd dword es:[edi], dword [esi]
lea ecx, [ebp - 0x1564]
push 0x100d0a38
push ecx
call dword [sym.imp.MSVCR100.dll_sprintf]
add esp, 0xc
lea edx, [ebp - 0x1588]
push edx
call fcn.100a5230
mov esi, dword [ebp - 0x1590]
push ebx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov ecx, dword [ebp - 0x1594]
xor ebx, ebx
inc ecx
mov dword [ebp - 0x1594], ecx
cmp ecx, esi
jl 0x100a2830
lea esi, [ebp - 0x163c]
cmp dword [ebp - 0x15e8], ebx
je 0x100a295a
mov edi, esi
call fcn.100a4890
test al, al
jne 0x100a2946
xor esi, esi
mov eax, dword [ebp - 0x15e8]
push eax
call dword [sym.imp.MSVCR100.dll_fclose]
add esp, 4
test eax, eax
je 0x100a295c
xor esi, esi
lea ecx, [ebp - 0x163c]
mov byte [ebp - 0x15ec], 0
mov byte [ebp - 0x15f2], 0
call dword [sym.imp.MSVCP100.dll_protected:_void___thiscall_std::basic_streambuf_wchar_t__struct_std::char_traits_wchar_t__::_Init_void_]
mov ecx, dword [0x103e4d9c]
mov dword [ebp - 0x15e8], ebx
mov dword [ebp - 0x15f0], ecx
mov dword [ebp - 0x15f8], ebx
cmp esi, ebx
jne 0x100a29ab
mov edx, dword [ebp - 0x1640]
mov ecx, dword [edx + 4]
push ebx
push 2
lea ecx, [ebp + ecx - 0x1640]
call dword [sym.imp.MSVCP100.dll_public:_void___thiscall_std::basic_ios_wchar_t__struct_std::char_traits_wchar_t__::setstate_int__bool_]
lea ecx, [ebp - 0x15e0]
mov dword [ebp - 4], 0xffffffff
call fcn.100a3190
lea ecx, [ebp - 0x15e0]
call dword [sym.imp.MSVCP100.dll_public_virtual:_void___thiscall_std::basic_ios_wchar_t__struct_std::char_traits_wchar_t__::destructor_void_]
mov al, 1
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.100c06a6
mov esp, ebp
pop ebp
ret