Function at 0x10006a70
Capabilities:
Enumerate process modules
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff0
sub esp, 0x4f8
mov eax, dword [0x100b0040]
xor eax, esp
mov dword [esp + 0x4f4], eax
mov eax, dword [0x100b31d4]
push esi
push edi
push 0
movsd xmm0, qword [eax + 0x3f00]
push 0
push 0xc
movsd qword [esp + 0x64], xmm0
call dword [sym.imp.OLEAUT32.dll_SafeArrayCopyData]
mov esi, eax
mov edx, 0x10077cb0
lea eax, [esp + 0xa8]
push esi
push eax
call fcn.100020d0
add esp, 8
movups xmm0, xmmword [eax]
push esi
movaps xmmword [esp + 0x84], xmm0
movaps xmmword [esp + 0x94], xmm0
call dword [sym.imp.OLEAUT32.dll_SafeArrayGetDim]
cmp word [esp + 0x80], 0
je 0x10006af4
mov eax, dword [esp + 0x98]
mov dword [0x100b0940], eax
mov eax, dword [0x100b31d4]
sub esp, 8
movsd xmm0, qword [eax + 0x3f00]
subsd xmm0, qword [esp + 0x60]
movsd qword [esp], xmm0
push str.Preparing_Methods_Took:__lfs_n
push 0x100b0c80
call fcn.1000ae20
mov eax, dword [0x100b31d4]
add esp, 0x10
mov dword [esp + 0x28], 0
movsd xmm0, qword [eax + 0x3f00]
push 0
push 0x18
movsd qword [esp + 0x60], xmm0
call dword [sym.imp.KERNEL32.dll_CreateToolhelp32Snapshot]
mov esi, eax
cmp esi, 0xffffffff
je 0x10006ba6
lea eax, [esp + 0xb8]
mov dword [esp + 0xb8], 0x428
push eax
push esi
call dword [sym.imp.KERNEL32.dll_Module32FirstW]
test eax, eax
je 0x10006ba6
mov edi, dword [sym.imp.KERNEL32.dll_Module32NextW]
lea eax, [esp + 0xd8]
push str.osu_.exe
push eax
call fcn.10059f72
add esp, 8
test eax, eax
je 0x10006b9b
lea eax, [esp + 0xb8]
push eax
push esi
call edi
test eax, eax
jne 0x10006b71
jmp 0x10006ba6
mov eax, dword [esp + 0xcc]
mov dword [esp + 0x28], eax
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push 0x1c
lea eax, [esp + 0x68]
push eax
push dword [esp + 0x30]
call dword [sym.imp.KERNEL32.dll_VirtualQuery]
test eax, eax
je 0x10007325
cmp dword [esp + 0x74], 0x1000
movss xmm1, dword [0x100a5dc0]
jne 0x100072b2
mov eax, dword [esp + 0x78]
cmp eax, 0x40
je 0x10006c5e
cmp dword [0x100b1e98], 0
jne 0x100072b2
cmp eax, 0x20
jne 0x100072b2
mov edi, dword [esp + 0x70]
xor esi, esi
shr edi, 3
test edi, edi
je 0x100072b2
mov edx, dword [esp + 0x64]
add edx, 6
cmp byte [edx - 6], 0xb8
jne 0x10006c51
cmp byte [edx - 1], 0xe9
jne 0x10006c51
mov ecx, dword [edx]
mov eax, dword [0x100b1ec8]
add ecx, 4
add ecx, edx
add eax, 5
cmp ecx, eax
jne 0x10006c51
mov eax, dword [edx - 5]
mov dword [0x100b094c], eax
mov dword [0x100b1e98], 1
call fcn.10006990
test al, al
jne 0x10007325
inc esi
add edx, 8
cmp esi, edi
jne 0x10006c13
jmp 0x100072b2
mov eax, dword [esp + 0x70]
xor edx, edx
mov dword [esp + 0x54], edx
test eax, 0xfffffff8
je 0x100072b6
mov eax, dword [0x100b1e94]
mov dword [esp + 0x2c], eax
mov eax, dword [0x100b1ed0]
mov dword [esp + 0x30], eax
mov eax, dword [0x100b1ecc]
mov dword [esp + 0x34], eax
mov eax, dword [0x100b1ea8]
mov dword [esp + 0x38], eax
mov eax, dword [0x100b1e88]
mov dword [esp + 0x3c], eax
mov eax, dword [0x100b1dec]
mov ecx, dword [0x100b1f1c]
mov dword [esp + 0x40], eax
mov eax, dword [0x100b1f80]
mov dword [esp + 8], eax
mov eax, dword [0x100b1e78]
mov dword [esp + 0xc], eax
mov eax, dword [0x100b1f04]
mov dword [esp + 0x24], eax
mov eax, dword [0x100b1f8c]
mov dword [esp + 0x44], eax
mov eax, dword [0x100b1fbc]
mov dword [esp + 0x48], eax
mov eax, dword [0x100b1fb8]
mov dword [esp + 0x4c], eax
mov eax, dword [0x100b1fa4]
mov dword [esp + 0x50], eax
mov eax, dword [0x100b1fa8]
mov dword [esp + 0x10], eax
mov eax, dword [0x100b1e80]
mov dword [esp + 0x14], eax
mov eax, dword [0x100b1eb0]
mov dword [esp + 0x18], eax
mov eax, dword [0x100b1f5c]
mov dword [esp + 0x20], ecx
mov dword [esp + 0x1c], eax
nop word [eax + eax]
mov eax, dword [esp + 0x64]
lea edi, [eax + edx*8]
movd xmm0, edi
mov eax, edi
cvtdq2pd xmm0, xmm0
shr eax, 0x1f
addsd xmm0, qword [eax*8 + 0x100a60d0]
cvtpd2ps xmm0, xmm0
mulss xmm0, xmm1
movss dword [0x100b1e7c], xmm0
test ecx, ecx
jne 0x10006d97
lea esi, [edi + 0x25]
mov dword [esp + 0x20], edi
mov eax, edi
nop word [eax + eax]
mov ecx, 0x100a2ad0
mov edx, eax
mov al, byte [ecx]
cmp al, byte [edx]
je 0x10006d77
cmp byte [ecx + 1], 0
je 0x10006fa7
add ecx, 2
inc edx
cmp ecx, 0x100a2b1a
jne 0x10006d67
mov ecx, dword [esp + 0x20]
cmp ecx, esi
jne 0x10006d91
xor ecx, ecx
mov dword [esp + 0x20], ecx
mov dword [0x100b1f1c], ecx
cmp dword [esp + 0x2c], 0
jne 0x10006dc6
push 0x100a2b34
push 0x100a2b1c
lea esi, [edi + 0xc]
push esi
push edi
call fcn.10008a40
xor ecx, ecx
add esp, 0x10
cmp eax, esi
cmovne ecx, eax
mov dword [esp + 0x2c], ecx
mov dword [0x100b1e94], ecx
cmp dword [esp + 0x30], 0
jne 0x10006df5
push 0x100a2b4a
push 0x100a2b34
lea esi, [edi + 0xb]
push esi
push edi
call fcn.10008a40
xor ecx, ecx
add esp, 0x10
cmp eax, esi
cmovne ecx, eax
mov dword [esp + 0x30], ecx
mov dword [0x100b1ed0], ecx
cmp dword [esp + 0x34], 0
jne 0x10006e24
push 0x100a2b66
push 0x100a2b4c
lea esi, [edi + 0xd]
push esi
push edi
call fcn.10008a40
xor ecx, ecx
add esp, 0x10
cmp eax, esi
cmovne ecx, eax
mov dword [esp + 0x34], ecx
mov dword [0x100b1ecc], ecx
cmp dword [esp + 0x38], 0
jne 0x10006e53
push 0x100a2b66
push 0x100a2b4c
lea esi, [edi + 0xd]
push esi
push edi
call fcn.10008a40
xor ecx, ecx
add esp, 0x10
cmp eax, esi
cmovne ecx, eax
mov dword [esp + 0x38], ecx
mov dword [0x100b1ea8], ecx
cmp dword [esp + 0x3c], 0
jne 0x10006e82
push 0x100a2b7e
push 0x100a2b68
lea esi, [edi + 0xb]
push esi
push edi
call fcn.10008a40
xor ecx, ecx
add esp, 0x10
cmp eax, esi
cmovne ecx, eax
mov dword [esp + 0x3c], ecx
mov dword [0x100b1e88], ecx
cmp dword [esp + 0x40], 0
jne 0x10006eb1
push 0x100a2b9a
push 0x100a2b80
lea esi, [edi + 0xd]
push esi
push edi
call fcn.10008a40
xor ecx, ecx
add esp, 0x10
cmp eax, esi
cmovne ecx, eax
mov dword [esp + 0x40], ecx
mov dword [0x100b1dec], ecx
cmp dword [esp + 8], 0
jne 0x10006ef7
lea esi, [edi + 0x24]
mov dword [esp + 8], edi
mov eax, edi
mov ecx, 0x100a2ba0
mov edx, eax
mov al, byte [ecx]
cmp al, byte [edx]
je 0x10006ed8
cmp byte [ecx + 1], 0
je 0x10006fbd
add ecx, 2
inc edx
cmp ecx, 0x100a2be8
jne 0x10006ec8
mov eax, dword [esp + 8]
cmp eax, esi
jne 0x10006ef2
xor eax, eax
mov dword [esp + 8], eax
mov dword [0x100b1f80], eax
cmp dword [0x100b1e8c], 0
jne 0x10006f1b
sub esp, 8
mov eax, esp
mov dword [eax], edi
mov dword [eax + 4], 0x15
call fcn.10008680
add esp, 8
mov dword [0x100b1e8c], eax
cmp dword [esp + 0xc], 0
jne 0x10006f66
lea esi, [edi + 0x1a]
mov dword [esp + 0xc], edi
mov eax, edi
nop dword [eax + eax]
mov ecx, 0x100a2c14
mov edx, eax
mov al, byte [ecx]
cmp al, byte [edx]
je 0x10006f47
cmp byte [ecx + 1], 0
je 0x10006fd3
add ecx, 2
inc edx
cmp ecx, 0x100a2c48
jne 0x10006f37
mov eax, dword [esp + 0xc]
cmp eax, esi
jne 0x10006f61
xor eax, eax
mov dword [esp + 0xc], eax
mov dword [0x100b1e78], eax
cmp dword [esp + 0x24], 0
jne 0x10006ffb
mov esi, edi
mov dword [esp + 0x24], edi
mov ecx, 0x100a2c48
mov edx, esi
nop
mov al, byte [ecx]
cmp al, byte [edx]
je 0x10006f8c
cmp byte [ecx + 1], 0
je 0x10006fe5
add ecx, 2
inc edx
cmp ecx, 0x100a2c6c
jne 0x10006f80
lea eax, [edi + 0x12]
cmp esi, eax
je 0x10006ff0
mov dword [0x100b1f04], esi
jmp 0x10006ffb
mov eax, dword [esp + 0x20]
cmp eax, edi
je 0x10006d8b
inc eax
mov dword [esp + 0x20], eax
jmp 0x10006d60
mov eax, dword [esp + 8]
cmp eax, edi
je 0x10006eec
inc eax
mov dword [esp + 8], eax
jmp 0x10006ec1
mov eax, dword [esp + 0xc]
cmp eax, edi
je 0x10006f5b
inc eax
mov dword [esp + 0xc], eax
jmp 0x10006f30
cmp esi, edi
je 0x10006ff0
inc esi
mov dword [esp + 0x24], esi
jmp 0x10006f77
xor eax, eax
mov dword [esp + 0x24], eax
mov dword [0x100b1f04], eax
cmp dword [esp + 0x44], 0
jne 0x1000702a
push 0x100a2c8a
push 0x100a2c6c
lea esi, [edi + 0xf]
push esi
push edi
call fcn.10008a40
xor ecx, ecx
add esp, 0x10
cmp eax, esi
cmovne ecx, eax
mov dword [esp + 0x44], ecx
mov dword [0x100b1f8c], ecx
cmp dword [esp + 0x48], 0
jne 0x10007059
push 0x100a2ca4
push 0x100a2c8c
lea esi, [edi + 0xc]
push esi
push edi
call fcn.10008a40
xor ecx, ecx
add esp, 0x10
cmp eax, esi
cmovne ecx, eax
mov dword [esp + 0x48], ecx
mov dword [0x100b1fbc], ecx
cmp dword [esp + 0x4c], 0
jne 0x10007088
push 0x100a2cbc
push 0x100a2ca4
lea esi, [edi + 0xc]
push esi
push edi
call fcn.10008a40
xor ecx, ecx
add esp, 0x10
cmp eax, esi
cmovne ecx, eax
mov dword [esp + 0x4c], ecx
mov dword [0x100b1fb8], ecx
cmp dword [esp + 0x50], 0
jne 0x100070b7
push 0x100a2cda
push 0x100a2cbc
lea esi, [edi + 0xf]
push esi
push edi
call fcn.10008a40
xor ecx, ecx
add esp, 0x10
cmp eax, esi
cmovne ecx, eax
mov dword [esp + 0x50], ecx
mov dword [0x100b1fa4], ecx
cmp dword [esp + 0x10], 0
jne 0x10007103
mov esi, edi
mov dword [esp + 0x10], edi
mov eax, edi
mov ecx, 0x100a2cdc
mov edx, eax
nop dword [eax]
mov al, byte [ecx]
cmp al, byte [edx]
je 0x100070e0
cmp byte [ecx + 1], 0
je 0x100072cd
add ecx, 2
inc edx
cmp ecx, 0x100a2d12
jne 0x100070d0
mov ecx, dword [esp + 0x10]
lea eax, [edi + 0x1b]
cmp ecx, eax
jne 0x100070fd
xor ecx, ecx
mov dword [esp + 0x10], ecx
mov dword [0x100b1fa8], ecx
cmp dword [esp + 0x14], 0
jne 0x10007153
mov esi, edi
mov dword [esp + 0x14], edi
mov eax, edi
mov ecx, 0x100a2d14
mov edx, eax
nop dword [eax]
mov al, byte [ecx]
cmp al, byte [edx]
je 0x10007130
cmp byte [ecx + 1], 0
je 0x100072e3
add ecx, 2
inc edx
cmp ecx, 0x100a2d3c
jne 0x10007120
mov ecx, dword [esp + 0x14]
lea eax, [edi + 0x14]
cmp ecx, eax
jne 0x1000714d
xor ecx, ecx
mov dword [esp + 0x14], ecx
mov dword [0x100b1e80], ecx
cmp dword [esp + 0x18], 0
jne 0x100071a3
mov esi, edi
mov dword [esp + 0x18], edi
mov eax, edi
mov ecx, 0x100a2d40
mov edx, eax
nop dword [eax]
mov al, byte [ecx]
cmp al, byte [edx]
je 0x10007180
cmp byte [ecx + 1], 0
je 0x100072f9
add ecx, 2
inc edx
cmp ecx, 0x100a2d84
jne 0x10007170
mov ecx, dword [esp + 0x18]
lea eax, [edi + 0x22]
cmp ecx, eax
jne 0x1000719d
xor ecx, ecx
mov dword [esp + 0x18], ecx
mov dword [0x100b1eb0], ecx
cmp dword [esp + 0x1c], 0
jne 0x100071f3
mov esi, edi
mov dword [esp + 0x1c], edi
mov eax, edi
mov ecx, 0x100a2d84
mov edx, eax
nop dword [eax]
mov al, byte [ecx]
cmp al, byte [edx]
je 0x100071d0
cmp byte [ecx + 1], 0
je 0x1000730f
add ecx, 2
inc edx
cmp ecx, 0x100a2daa
jne 0x100071c0
mov ecx, dword [esp + 0x1c]
lea eax, [edi + 0x13]
cmp ecx, eax
jne 0x100071ed
xor ecx, ecx
mov dword [esp + 0x1c], ecx
mov dword [0x100b1f5c], ecx
cmp dword [0x100b1f98], 0
jne 0x10007289
mov eax, dword [edi]
lea ecx, [esp + 0x4e4]
mov dword [esp + 0x4e4], 0x56ec8b55
mov word [esp + 0x4e8], 0x358b
mov dword [esp + 0x4ec], 0x575f685
mov dword [esp + 0x4f0], 0x8c25d5e
mov dword [esp + 0x4f4], 0x89d23300
mov byte [esp + 0x4f8], 0x15
cmp eax, dword [ecx]
jne 0x10007289
movzx eax, word [edi + 4]
cmp ax, word [ecx + 4]
jne 0x10007289
lea ecx, [edi + 0xa]
mov esi, 9
lea edx, [esp + 0x4ec]
mov eax, dword [ecx]
cmp eax, dword [edx]
jne 0x10007289
add ecx, 4
add edx, 4
sub esi, 4
jae 0x10007264
mov al, byte [ecx]
cmp al, byte [edx]
jne 0x10007289
mov eax, dword [edi + 6]
mov dword [0x100b1f98], edi
mov dword [0x100b1fac], eax
call fcn.10006990
test al, al
jne 0x10007325
mov edx, dword [esp + 0x54]
mov eax, dword [esp + 0x70]
inc edx
mov ecx, dword [esp + 0x20]
shr eax, 3
mov dword [esp + 0x54], edx
cmp edx, eax
jne 0x10006d20
mov eax, dword [esp + 0x70]
mov ecx, dword [esp + 0x28]
add ecx, eax
lea eax, [esp + 0x64]
push 0x1c
push eax
mov dword [esp + 0x30], ecx
push ecx
jmp 0x10006bb8
mov eax, dword [esp + 0x10]
cmp eax, esi
je 0x100070f7
inc eax
mov dword [esp + 0x10], eax
jmp 0x100070c6
mov eax, dword [esp + 0x14]
cmp eax, esi
je 0x10007147
inc eax
mov dword [esp + 0x14], eax
jmp 0x10007112
mov eax, dword [esp + 0x18]
cmp eax, esi
je 0x10007197
inc eax
mov dword [esp + 0x18], eax
jmp 0x10007162
mov eax, dword [esp + 0x1c]
cmp eax, esi
je 0x100071e7
inc eax
mov dword [esp + 0x1c], eax
jmp 0x100071b2
mov eax, dword [0x100b31d4]
sub esp, 8
movsd xmm0, qword [eax + 0x3f00]
subsd xmm0, qword [esp + 0x60]
movsd qword [esp], xmm0
push str.Memory_Scan_Took:__lfs_n
push 0x100b0c80
call fcn.1000ae20
mov ecx, dword [esp + 0x50c]
add esp, 0x10
mov dword [0x100b1e7c], 0x3f800000
pop edi
pop esi
xor ecx, esp
call fcn.10050e66
mov esp, ebp
pop ebp
ret