Function at 0x6cdf6ad0
Capabilities:
Enumerate process modules

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x6ce1a41e
mov eax, dword fs:[0]
push eax
mov eax, 0x1074
call fcn.6ce16010
mov eax, dword [0x6ce5c008]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edi, dword [ebp + 8]
mov dword [ebp - 0x1044], 0
mov eax, dword [0x6ce606dc]
mov dword [ebp - 0x104c], edi
test al, 1
jne 0x6cdf6b26
or eax, 1
mov dword [0x6ce606dc], eax
test al, 2
jne 0x6cdf6b32
or eax, 2
mov dword [0x6ce606dc], eax
xorps xmm0, xmm0
movq qword [edi], xmm0
mov dword [edi + 8], 0
mov dword [edi], 0
mov dword [edi + 4], 0
mov dword [edi + 8], 0
xor ebx, ebx
movq qword [ebp - 0x1028], xmm0
xor eax, eax
mov dword [ebp - 0x1020], 0
mov dword [ebp - 0x1044], 1
mov dword [ebp - 0x101c], 0
mov dword [ebp - 0x1028], ebx
mov dword [ebp - 0x1024], ebx
mov dword [ebp - 0x1018], eax
mov dword [ebp - 0x1020], eax
lea eax, [ebp - 0x101c]
mov dword [ebp - 4], 1
push eax
push 0x1000
lea eax, [ebp - 0x1010]
push eax
call dword [sym.imp.PSAPI.DLL_EnumProcesses]
test eax, eax
je 0x6cdf6d8c
xor esi, esi
test dword [ebp - 0x101c], 0xfffffffc
jbe 0x6cdf6ce2
xor eax, eax
mov dword [ebp - 0x1018], 0
mov dword [ebp - 0x102c], 7
mov dword [ebp - 0x1030], 0
mov word [ebp - 0x1040], ax
lea eax, [ebp - 0x1040]
mov byte [ebp - 4], 2
push eax
lea eax, [ebp - 0x1018]
push eax
push dword [ebp + esi*4 - 0x1010]
call fcn.6cdf6db0
test al, al
je 0x6cdf6ca2
lea edx, [ebp - 0x1040]
lea ecx, [ebp - 0x1080]
call fcn.6cdf6630
lea ecx, [ebp - 0x1018]
mov edx, eax
push ecx
lea ecx, [ebp - 0x1068]
call fcn.6cdf7640
add esp, 4
push eax
lea ecx, [ebp - 0x1028]
mov byte [ebp - 4], 4
call fcn.6cdf6f70
mov eax, dword [ebp - 0x1054]
cmp eax, 8
jb 0x6cdf6c6d
inc eax
push eax
push dword [ebp - 0x1068]
call fcn.6cdbf220
xor eax, eax
mov dword [ebp - 0x1054], 7
mov word [ebp - 0x1068], ax
mov eax, dword [ebp - 0x106c]
mov dword [ebp - 0x1058], 0
cmp eax, 8
jb 0x6cdf6ca2
inc eax
push eax
push dword [ebp - 0x1080]
call fcn.6cdbf220
mov byte [ebp - 4], 1
mov eax, dword [ebp - 0x102c]
cmp eax, 8
jb 0x6cdf6cbe
inc eax
push eax
push dword [ebp - 0x1040]
call fcn.6cdbf220
mov eax, dword [ebp - 0x101c]
inc esi
shr eax, 2
cmp esi, eax
jb 0x6cdf6bd0
mov eax, dword [ebp - 0x1020]
mov ebx, dword [ebp - 0x1028]
mov dword [ebp - 0x1018], eax
mov al, byte [0x6ce606e0]
mov ecx, dword [ebp - 0x1024]
mov byte [ebp - 0x1014], al
sub ecx, ebx
mov eax, 0x92492493
imul ecx
add edx, ecx
lea ecx, [ebp - 0x1014]
sar edx, 4
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [ebp - 0x1024]
push ecx
push eax
mov ecx, ebx
mov dword [ebp - 0x1048], eax
call fcn.6cdf7710
xor esi, esi
add esp, 8
cmp dword [ebp + 0xc], esi
jbe 0x6cdf6d4f
nop dword [eax]
cmp esi, dword [ebp - 0x1048]
jae 0x6cdf6d49
push ebx
mov ecx, edi
call fcn.6cdf7030
inc esi
add ebx, 0x1c
cmp esi, dword [ebp + 0xc]
jb 0x6cdf6d30
mov ebx, dword [ebp - 0x1028]
test ebx, ebx
je 0x6cdf6d8c
push dword [ebp - 0x104c]
mov edx, dword [ebp - 0x1024]
push ecx
mov ecx, ebx
call fcn.6cdf7670
mov ecx, dword [ebp - 0x1018]
mov eax, 0x92492493
sub ecx, ebx
add esp, 8
imul ecx
add edx, ecx
sar edx, 4
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
push ecx
push ebx
call fcn.6cdf75d0
mov eax, edi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.6ce11901
mov esp, ebp
pop ebp
ret