Function at 0x10002c60
Capabilities:
Enumerate process modules

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x100b1f60
mov eax, dword fs:[0]
push eax
sub esp, 0x234
mov eax, dword [0x100d85c0]
xor eax, ebp
mov dword [ebp - 0x10], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edi, ecx
mov dword [ebp - 0x23c], edi
mov dword [ebp - 0x21c], edi
mov dword [ebp - 0x21c], edi
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
movups xmm0, xmmword [str._unknown_]
mov esi, eax
mov eax, dword [0x100d07c4]
push 0x1f4
mov dword [ebp - 0x208], eax
lea eax, [ebp - 0x204]
push 0
push eax
movups xmmword [ebp - 0x218], xmm0
call fcn.10089760
add esp, 0xc
test esi, esi
je 0x10002d10
lea eax, [ebp - 0x21c]
push eax
push 4
lea eax, [ebp - 0x238]
push eax
push esi
call dword [sym.imp.KERNEL32.dll_K32EnumProcessModules]
test eax, eax
je 0x10002d10
push 0x104
lea eax, [ebp - 0x218]
push eax
push dword [ebp - 0x238]
push esi
call dword [sym.imp.KERNEL32.dll_K32GetModuleBaseNameW]
xorps xmm0, xmm0
mov dword [ebp - 0x224], 0
lea esi, [ebp - 0x218]
mov dword [ebp - 0x220], 0
movups xmmword [ebp - 0x234], xmm0
lea ecx, [esi + 2]
mov ax, word [esi]
add esi, 2
test ax, ax
jne 0x10002d37
sub esi, ecx
sar esi, 1
cmp esi, 0x7ffffffe
ja 0x1000301c
cmp esi, 7
ja 0x10002d8f
mov dword [ebp - 0x224], esi
lea eax, [ebp - 0x218]
add esi, esi
mov dword [ebp - 0x220], 7
push esi
push eax
lea eax, [ebp - 0x234]
push eax
call fcn.100891e0
add esp, 0xc
xor eax, eax
mov word [ebp + esi - 0x234], ax
jmp 0x10002e3c
mov edi, esi
or edi, 7
cmp edi, 0x7ffffffe
jbe 0x10002dd8
mov eax, bind
mov edi, bind
add eax, eax
cmp eax, 0x1000
jb 0x10002df6
lea ecx, [eax + 0x23]
cmp ecx, eax
jbe 0x10003026
push ecx
call fcn.10087525
mov ecx, eax
add esp, 4
test ecx, ecx
je 0x1000302b
lea eax, [ecx + 0x23]
and eax, 0xffffffe0
mov dword [eax - 4], ecx
jmp 0x10002dff
mov eax, 0xa
cmp edi, eax
cmovb edi, eax
lea eax, [edi + 1]
cmp eax, 0x7fffffff
ja 0x10003026
add eax, eax
jne 0x10002da8
jmp 0x10002dff
push eax
call fcn.10087525
add esp, 4
mov dword [ebp - 0x224], esi
lea ecx, [ebp - 0x218]
add esi, esi
mov dword [ebp - 0x238], eax
push esi
push ecx
push eax
mov dword [ebp - 0x234], eax
mov dword [ebp - 0x220], edi
call fcn.100891e0
mov eax, dword [ebp - 0x238]
add esp, 0xc
mov edi, dword [ebp - 0x23c]
xor ecx, ecx
mov word [eax + esi], cx
mov dword [ebp - 4], 0
lea ecx, [ebp - 0x234]
mov eax, dword [ebp - 0x220]
lea esi, [ebp - 0x234]
cmp eax, 7
mov dword [ebp - 0x238], eax
mov eax, dword [ebp - 0x234]
xorps xmm0, xmm0
cmova ecx, eax
mov dword [ebp - 0x21c], eax
mov eax, dword [ebp - 0x224]
movups xmmword [edi], xmm0
mov dword [edi + 0x10], 0
mov dword [edi + 0x14], 0
lea edx, [ecx + eax*2]
mov eax, dword [ebp - 0x238]
mov ecx, dword [ebp - 0x21c]
cmp eax, 7
mov dword [edi + 0x10], 0
cmova esi, ecx
mov dword [edi + 0x14], 0xf
cmp esi, edx
jne 0x10002eb6
mov byte [edi], 0
jmp 0x10002fcf
sub edx, esi
sar edx, 1
mov dword [ebp - 0x238], edx
cmp edx, 0x7fffffff
ja 0x10003021
mov edi, 0xf
cmp edx, edi
jbe 0x10002f72
mov edi, edx
or edi, 0xf
cmp edi, 0x7fffffff
jbe 0x10002f20
mov ecx, bind
mov edi, bind
add ecx, 0x23
push ecx
call fcn.10087525
add esp, 4
test eax, eax
je 0x1000302b
mov edx, dword [ebp - 0x238]
lea ecx, [eax + 0x23]
and ecx, 0xffffffe0
mov dword [ecx - 4], eax
mov eax, dword [ebp - 0x23c]
mov dword [eax], ecx
mov dword [eax + 0x14], edi
jmp 0x10002f78
mov eax, 0x16
cmp edi, eax
cmovb edi, eax
lea eax, [edi + 1]
test eax, eax
jne 0x10002f40
mov eax, dword [ebp - 0x23c]
xor ecx, ecx
mov dword [eax], ecx
mov dword [eax + 0x14], edi
jmp 0x10002f78
cmp eax, 0x1000
jb 0x10002f54
lea ecx, [eax + 0x23]
cmp ecx, eax
jbe 0x10003026
jmp 0x10002ef3
push eax
call fcn.10087525
mov edx, dword [ebp - 0x238]
mov ecx, eax
mov eax, dword [ebp - 0x23c]
add esp, 4
mov dword [eax], ecx
mov dword [eax + 0x14], edi
jmp 0x10002f78
mov eax, dword [ebp - 0x23c]
cmp edi, 0xf
mov dword [ebp - 0x238], eax
mov edi, dword [ebp - 0x23c]
jbe 0x10002f91
mov eax, dword [edi]
mov dword [ebp - 0x238], eax
mov ecx, eax
test edx, edx
je 0x10002fb6
mov edi, edx
nop dword [eax]
mov al, byte [esi]
lea ecx, [ecx + 1]
mov byte [ecx - 1], al
lea esi, [esi + 2]
sub edi, 1
jne 0x10002fa0
mov edi, dword [ebp - 0x23c]
mov eax, dword [ebp - 0x238]
mov dword [edi + 0x10], edx
mov byte [eax + edx], 0
mov eax, dword [ebp - 0x220]
mov ecx, dword [ebp - 0x234]
cmp eax, 7
jbe 0x10002fff
lea edx, [eax*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x10002ff5
mov ecx, dword [eax - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1000302b
push edx
push ecx
call fcn.100874f4
add esp, 8
mov eax, edi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.100874e6
mov esp, ebp
pop ebp
ret
call fcn.10001c50
call fcn.10001c50
call fcn.10001b80
call fcn.10091fa9
int3