Function at 0x43dec0
Capabilities:
Enumerate process modules

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4458c7
mov eax, dword fs:[0]
push eax
mov eax, 0x2138
call fcn.00440570
mov eax, dword [0x45500c]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edi, ecx
mov dword [ebp - 0x2138], edi
mov dword [ebp - 0x212c], edi
mov dword [ebp - 0x2144], edi
xorps xmm0, xmm0
mov dword [ebp - 0x2130], 1
movq qword [edi], xmm0
mov dword [edi + 8], 0
mov dword [edi], 0
mov dword [edi + 4], 0
mov dword [edi + 8], 0
lea eax, [ebp - 0x2118]
mov dword [ebp - 4], 0
push eax
push 0x1000
lea eax, [ebp - 0x1114]
mov dword [ebp - 0x2130], 1
push eax
call dword [sym.imp.KERNEL32.dll_K32EnumProcesses]
test eax, eax
jne 0x43df82
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
mov edx, str.Failed_to_enumerate_processes.
call fcn.00401fc0
push 0x40b340
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
jmp 0x43e13f
mov eax, dword [ebp - 0x2118]
xor esi, esi
shr eax, 2
mov dword [ebp - 0x212c], eax
mov dword [ebp - 0x2124], esi
test eax, eax
je 0x43e13f
mov eax, dword [ebp + esi*4 - 0x1114]
push eax
push 0
push 0x410
mov dword [ebp - 0x213c], eax
mov dword [ebp - 0x2140], eax
call dword [sym.imp.KERNEL32.dll_OpenProcess]
mov dword [ebp - 0x2128], eax
test eax, eax
je 0x43e12c
lea ecx, [ebp - 0x211c]
mov byte [ebp - 0x211d], 0
push ecx
push 0x1000
lea ecx, [ebp - 0x2114]
mov byte [ebp - 0x211e], 0
push ecx
push eax
xor bl, bl
call dword [sym.imp.KERNEL32.dll_K32EnumProcessModules]
test eax, eax
je 0x43e120
mov eax, dword [ebp - 0x211c]
xor esi, esi
shr eax, 2
test eax, eax
je 0x43e11a
mov edi, eax
nop word [eax + eax]
push 0x104
lea eax, [ebp - 0x114]
push eax
push dword [ebp + esi*4 - 0x2114]
push dword [ebp - 0x2128]
call dword [sym.imp.KERNEL32.dll_K32GetModuleBaseNameA]
test eax, eax
je 0x43e0ce
lea eax, [ebp - 0x114]
push str..exe
push eax
call dword [sym.imp.VCRUNTIME140.dll_strstr]
add esp, 8
test eax, eax
jne 0x43e0ce
lea eax, [ebp - 0x114]
push str.java.dll
push eax
call dword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__stricmp]
add esp, 8
test eax, eax
jne 0x43e083
mov al, 1
mov byte [ebp - 0x211d], al
jmp 0x43e0d4
lea eax, [ebp - 0x114]
push str.opengl32.dll
push eax
call dword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__stricmp]
add esp, 8
test eax, eax
jne 0x43e0ac
mov al, byte [ebp - 0x211d]
mov cl, 1
mov byte [ebp - 0x211e], cl
jmp 0x43e0da
lea eax, [ebp - 0x114]
push str.OpenAL.dll
push eax
call dword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__stricmp]
add esp, 8
movzx ebx, bl
test eax, eax
mov eax, 1
cmove ebx, eax
mov al, byte [ebp - 0x211d]
mov cl, byte [ebp - 0x211e]
inc esi
cmp esi, edi
jl 0x43e020
mov edi, dword [ebp - 0x2138]
test al, al
je 0x43e11a
test cl, cl
je 0x43e11a
test bl, bl
je 0x43e11a
mov eax, dword [edi + 4]
cmp eax, dword [edi + 8]
je 0x43e10b
mov ecx, dword [ebp - 0x213c]
mov dword [eax], ecx
add dword [edi + 4], 4
jmp 0x43e11a
lea ecx, [ebp - 0x2140]
push ecx
push eax
mov ecx, edi
call fcn.00414c10
mov esi, dword [ebp - 0x2124]
push dword [ebp - 0x2128]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
inc esi
mov dword [ebp - 0x2124], esi
cmp esi, dword [ebp - 0x212c]
jl 0x43dfa1
mov eax, edi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.0043f497
mov esp, ebp
pop ebp
ret