Function at 0x10002970
Capabilities:
Enumerate process modules

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x10094e10
mov eax, dword fs:[0]
push eax
sub esp, 0x234
mov eax, dword [0x100b6540]
xor eax, ebp
mov dword [ebp - 0x10], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edi, ecx
mov dword [ebp - 0x23c], edi
mov dword [ebp - 0x21c], edi
mov dword [ebp - 0x21c], edi
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
movups xmm0, xmmword [str._unknown_]
mov esi, eax
mov eax, dword [0x100b17fc]
push 0x1f4
mov dword [ebp - 0x208], eax
lea eax, [ebp - 0x204]
push 0
push eax
movups xmmword [ebp - 0x218], xmm0
call fcn.1006ddf0
add esp, 0xc
test esi, esi
je 0x10002a20
lea eax, [ebp - 0x21c]
push eax
push 4
lea eax, [ebp - 0x238]
push eax
push esi
call dword [sym.imp.KERNEL32.dll_K32EnumProcessModules]
test eax, eax
je 0x10002a20
push 0x104
lea eax, [ebp - 0x218]
push eax
push dword [ebp - 0x238]
push esi
call dword [sym.imp.KERNEL32.dll_K32GetModuleBaseNameW]
xorps xmm0, xmm0
mov dword [ebp - 0x224], 0
lea esi, [ebp - 0x218]
mov dword [ebp - 0x220], 0
movups xmmword [ebp - 0x234], xmm0
lea ecx, [esi + 2]
mov ax, word [esi]
add esi, 2
test ax, ax
jne 0x10002a47
sub esi, ecx
sar esi, 1
cmp esi, 0x7ffffffe
ja 0x10002d2c
cmp esi, 7
ja 0x10002a9f
mov dword [ebp - 0x224], esi
lea eax, [ebp - 0x218]
add esi, esi
mov dword [ebp - 0x220], 7
push esi
push eax
lea eax, [ebp - 0x234]
push eax
call fcn.1006d7c0
add esp, 0xc
xor eax, eax
mov word [ebp + esi - 0x234], ax
jmp 0x10002b4c
mov edi, esi
or edi, 7
cmp edi, 0x7ffffffe
jbe 0x10002ae8
mov eax, bind
mov edi, bind
add eax, eax
cmp eax, 0x1000
jb 0x10002b06
lea ecx, [eax + 0x23]
cmp ecx, eax
jbe 0x10002d36
push ecx
call fcn.1006bb73
mov ecx, eax
add esp, 4
test ecx, ecx
je 0x10002d3b
lea eax, [ecx + 0x23]
and eax, 0xffffffe0
mov dword [eax - 4], ecx
jmp 0x10002b0f
mov eax, 0xa
cmp edi, eax
cmovb edi, eax
lea eax, [edi + 1]
cmp eax, 0x7fffffff
ja 0x10002d36
add eax, eax
jne 0x10002ab8
jmp 0x10002b0f
push eax
call fcn.1006bb73
add esp, 4
mov dword [ebp - 0x224], esi
lea ecx, [ebp - 0x218]
add esi, esi
mov dword [ebp - 0x238], eax
push esi
push ecx
push eax
mov dword [ebp - 0x234], eax
mov dword [ebp - 0x220], edi
call fcn.1006d7c0
mov eax, dword [ebp - 0x238]
add esp, 0xc
mov edi, dword [ebp - 0x23c]
xor ecx, ecx
mov word [eax + esi], cx
mov dword [ebp - 4], 0
lea ecx, [ebp - 0x234]
mov eax, dword [ebp - 0x220]
lea esi, [ebp - 0x234]
cmp eax, 7
mov dword [ebp - 0x238], eax
mov eax, dword [ebp - 0x234]
xorps xmm0, xmm0
cmova ecx, eax
mov dword [ebp - 0x21c], eax
mov eax, dword [ebp - 0x224]
movups xmmword [edi], xmm0
mov dword [edi + 0x10], 0
mov dword [edi + 0x14], 0
lea edx, [ecx + eax*2]
mov eax, dword [ebp - 0x238]
mov ecx, dword [ebp - 0x21c]
cmp eax, 7
mov dword [edi + 0x10], 0
cmova esi, ecx
mov dword [edi + 0x14], 0xf
cmp esi, edx
jne 0x10002bc6
mov byte [edi], 0
jmp 0x10002cdf
sub edx, esi
sar edx, 1
mov dword [ebp - 0x238], edx
cmp edx, 0x7fffffff
ja 0x10002d31
mov edi, 0xf
cmp edx, edi
jbe 0x10002c82
mov edi, edx
or edi, 0xf
cmp edi, 0x7fffffff
jbe 0x10002c30
mov ecx, bind
mov edi, bind
add ecx, 0x23
push ecx
call fcn.1006bb73
add esp, 4
test eax, eax
je 0x10002d3b
mov edx, dword [ebp - 0x238]
lea ecx, [eax + 0x23]
and ecx, 0xffffffe0
mov dword [ecx - 4], eax
mov eax, dword [ebp - 0x23c]
mov dword [eax], ecx
mov dword [eax + 0x14], edi
jmp 0x10002c88
mov eax, 0x16
cmp edi, eax
cmovb edi, eax
lea eax, [edi + 1]
test eax, eax
jne 0x10002c50
mov eax, dword [ebp - 0x23c]
xor ecx, ecx
mov dword [eax], ecx
mov dword [eax + 0x14], edi
jmp 0x10002c88
cmp eax, 0x1000
jb 0x10002c64
lea ecx, [eax + 0x23]
cmp ecx, eax
jbe 0x10002d36
jmp 0x10002c03
push eax
call fcn.1006bb73
mov edx, dword [ebp - 0x238]
mov ecx, eax
mov eax, dword [ebp - 0x23c]
add esp, 4
mov dword [eax], ecx
mov dword [eax + 0x14], edi
jmp 0x10002c88
mov eax, dword [ebp - 0x23c]
cmp edi, 0xf
mov dword [ebp - 0x238], eax
mov edi, dword [ebp - 0x23c]
jbe 0x10002ca1
mov eax, dword [edi]
mov dword [ebp - 0x238], eax
mov ecx, eax
test edx, edx
je 0x10002cc6
mov edi, edx
nop dword [eax]
mov al, byte [esi]
lea ecx, [ecx + 1]
mov byte [ecx - 1], al
lea esi, [esi + 2]
sub edi, 1
jne 0x10002cb0
mov edi, dword [ebp - 0x23c]
mov eax, dword [ebp - 0x238]
mov dword [edi + 0x10], edx
mov byte [eax + edx], 0
mov eax, dword [ebp - 0x220]
mov ecx, dword [ebp - 0x234]
cmp eax, 7
jbe 0x10002d0f
lea edx, [eax*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x10002d05
mov ecx, dword [eax - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10002d3b
push edx
push ecx
call fcn.1006bb42
add esp, 8
mov eax, edi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.1006bb34
mov esp, ebp
pop ebp
ret
call fcn.10001ac0
call fcn.10001ac0
call fcn.10001a20
call fcn.10076589
int3