Function at 0x1000ca70
Capabilities:
Enumerate process modules

Disassembly:
push ebp
mov ebp, esp
and esp, 0xffffffc0
sub esp, 0x4b4
mov eax, dword [0x100b3140]
xor eax, esp
mov dword [esp + 0x4b0], eax
push ebx
push esi
push edi
call fcn.10003f50
mov eax, dword [0x100b7d54]
xor ebx, ebx
push ebx
push 0x18
mov dword [esp + 0x50], ebx
movsd xmm0, qword [eax + 0x11c0]
movsd qword [esp + 0x58], xmm0
call dword [sym.imp.KERNEL32.dll_CreateToolhelp32Snapshot]
mov esi, eax
cmp esi, 0xffffffff
je 0x1000cb12
lea eax, [esp + 0x78]
mov dword [esp + 0x78], 0x428
push eax
push esi
call dword [sym.imp.KERNEL32.dll_Module32FirstW]
test eax, eax
je 0x1000cb12
mov edi, dword [sym.imp.KERNEL32.dll_Module32NextW]
nop dword [eax]
lea eax, [esp + 0x98]
push str.osu_.exe
push eax
call fcn.1005d397
add esp, 8
test eax, eax
je 0x1000cb07
lea eax, [esp + 0x78]
push eax
push esi
call edi
test eax, eax
jne 0x1000cae0
jmp 0x1000cb12
mov ebx, dword [esp + 0x8c]
mov dword [esp + 0x48], ebx
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push 0x1c
lea eax, [esp + 0x60]
push eax
push ebx
call dword [sym.imp.KERNEL32.dll_VirtualQuery]
test eax, eax
je 0x1000cbd3
cmp dword [esp + 0x6c], 0x1000
movss xmm1, dword [0x100a6f38]
jne 0x1000d1c4
mov eax, dword [esp + 0x70]
cmp eax, 0x40
je 0x1000cc30
cmp dword [0x100b6a08], 0
jne 0x1000d1c4
cmp eax, 0x20
jne 0x1000d1c4
mov edi, dword [esp + 0x68]
xor esi, esi
shr edi, 3
test edi, edi
je 0x1000d1c4
mov edx, dword [esp + 0x5c]
mov ebx, dword [0x100b6a38]
add edx, 6
cmp byte [edx - 6], 0xb8
jne 0x1000cc1f
cmp byte [edx - 1], 0xe9
jne 0x1000cc1f
mov ecx, dword [edx]
lea eax, [ebx + 5]
add ecx, 4
add ecx, edx
cmp ecx, eax
jne 0x1000cc1f
mov eax, dword [edx - 5]
mov ecx, 0x100b3a60
mov dword [0x100b3b08], eax
mov dword [0x100b6a08], 1
nop
mov eax, dword [ecx + 4]
cmp dword [eax], 0
je 0x1000cc1f
add ecx, 8
cmp ecx, 0x100b3b08
jne 0x1000cbc0
mov eax, dword [0x100b7d54]
sub esp, 8
movsd xmm0, qword [eax + 0x11c0]
subsd xmm0, qword [esp + 0x58]
movsd qword [esp], xmm0
push str.Memory_Scan_Took:__lfs
push 0x100b4290
call fcn.10010c10
mov ecx, dword [esp + 0x4cc]
add esp, 0x10
mov dword [0x100b69ec], 0x3f800000
pop edi
pop esi
pop ebx
xor ecx, esp
call fcn.10054171
mov esp, ebp
pop ebp
ret
inc esi
add edx, 8
cmp esi, edi
jne 0x1000cb86
jmp 0x1000d1c4
mov eax, dword [esp + 0x68]
xor ecx, ecx
mov dword [esp + 0x4c], ecx
test eax, 0xfffffff8
je 0x1000d1c8
mov eax, dword [esp + 0x5c]
lea edi, [eax + ecx*8]
movd xmm0, edi
mov eax, edi
cvtdq2pd xmm0, xmm0
shr eax, 0x1f
cmp dword [0x100b6a8c], 0
mov dword [esp + 0x44], edi
addsd xmm0, qword [eax*8 + 0x100a7520]
cvtpd2ps xmm0, xmm0
mulss xmm0, xmm1
movss dword [0x100b69ec], xmm0
jne 0x1000ccc1
mov ebx, edi
lea eax, [ebx + 0x25]
mov edx, 0x100a4bb0
mov esi, edi
nop dword [eax + eax]
mov cl, byte [edx]
cmp cl, byte [esi]
je 0x1000cca0
cmp byte [edx + 1], 0
je 0x1000d13c
add edx, 2
inc esi
cmp edx, 0x100a4bfa
jne 0x1000cc90
mov eax, edi
mov edi, dword [esp + 0x44]
xor edx, edx
lea ecx, [edi + 0x25]
cmp eax, ecx
cmove eax, edx
mov dword [0x100b6a8c], eax
cmp dword [0x100b6a04], 0
jne 0x1000ccee
push 0x100a4c14
push 0x100a4bfc
lea esi, [edi + 0xc]
push esi
push edi
call fcn.1000e8f0
xor ecx, ecx
add esp, 0x10
cmp eax, esi
cmovne ecx, eax
mov dword [0x100b6a04], ecx
cmp dword [0x100b6a40], 0
jne 0x1000cd1b
push 0x100a4c2a
push 0x100a4c14
lea esi, [edi + 0xb]
push esi
push edi
call fcn.1000e8f0
xor ecx, ecx
add esp, 0x10
cmp eax, esi
cmovne ecx, eax
mov dword [0x100b6a40], ecx
cmp dword [0x100b6a3c], 0
jne 0x1000cd48
push 0x100a4c46
push 0x100a4c2c
lea esi, [edi + 0xd]
push esi
push edi
call fcn.1000e8f0
xor ecx, ecx
add esp, 0x10
cmp eax, esi
cmovne ecx, eax
mov dword [0x100b6a3c], ecx
cmp dword [0x100b69f8], 0
jne 0x1000cd75
push 0x100a4c5e
push 0x100a4c48
lea esi, [edi + 0xb]
push esi
push edi
call fcn.1000e8f0
xor ecx, ecx
add esp, 0x10
cmp eax, esi
cmovne ecx, eax
mov dword [0x100b69f8], ecx
cmp dword [0x100b6960], 0
jne 0x1000cda2
push 0x100a4c7a
push 0x100a4c60
lea esi, [edi + 0xd]
push esi
push edi
call fcn.1000e8f0
xor ecx, ecx
add esp, 0x10
cmp eax, esi
cmovne ecx, eax
mov dword [0x100b6960], ecx
cmp dword [0x100b6afc], 0
jne 0x1000cde9
lea eax, [edi + 0x24]
lea ebx, [eax - 0x24]
mov edx, 0x100a4c80
mov esi, edi
mov cl, byte [edx]
cmp cl, byte [esi]
je 0x1000cdc8
cmp byte [edx + 1], 0
je 0x1000d14a
add edx, 2
inc esi
cmp edx, 0x100a4cc8
jne 0x1000cdb8
mov eax, edi
mov edi, dword [esp + 0x44]
xor edx, edx
lea ecx, [edi + 0x24]
cmp eax, ecx
cmove eax, edx
mov dword [0x100b6afc], eax
cmp dword [0x100b69fc], 0
jne 0x1000ce0d
sub esp, 8
mov eax, esp
mov dword [eax], edi
mov dword [eax + 4], 0x15
call fcn.1000e530
add esp, 8
mov dword [0x100b69fc], eax
cmp dword [0x100b69e8], 0
jne 0x1000ce59
lea ecx, [edi + 0x1a]
lea ebx, [ecx - 0x1a]
nop dword [eax]
mov edx, 0x100a4cf4
mov esi, edi
mov al, byte [edx]
cmp al, byte [esi]
je 0x1000ce37
cmp byte [edx + 1], 0
je 0x1000d158
add edx, 2
inc esi
cmp edx, 0x100a4d28
jne 0x1000ce27
mov ecx, edi
mov edi, dword [esp + 0x44]
xor edx, edx
lea eax, [edi + 0x1a]
cmp ecx, eax
cmove ecx, edx
mov dword [0x100b69e8], ecx
cmp dword [0x100b6a74], 0
jne 0x1000cea8
lea eax, [edi + 0x12]
lea ebx, [eax - 0x12]
nop dword [eax + eax]
mov edx, 0x100a4d28
mov esi, edi
mov cl, byte [edx]
cmp cl, byte [esi]
je 0x1000ce87
cmp byte [edx + 1], 0
je 0x1000d166
add edx, 2
inc esi
cmp edx, 0x100a4d4c
jne 0x1000ce77
mov eax, edi
mov edi, dword [esp + 0x44]
xor edx, edx
lea ecx, [edi + 0x12]
cmp eax, ecx
cmove eax, edx
mov dword [0x100b6a74], eax
cmp dword [0x100b6b08], 0
jne 0x1000ced5
push 0x100a4d6a
push 0x100a4d4c
lea esi, [edi + 0xf]
push esi
push edi
call fcn.1000e8f0
xor ecx, ecx
add esp, 0x10
cmp eax, esi
cmovne ecx, eax
mov dword [0x100b6b08], ecx
cmp dword [0x100b6b38], 0
jne 0x1000cf02
push 0x100a4d84
push 0x100a4d6c
lea esi, [edi + 0xc]
push esi
push edi
call fcn.1000e8f0
xor ecx, ecx
add esp, 0x10
cmp eax, esi
cmovne ecx, eax
mov dword [0x100b6b38], ecx
cmp dword [0x100b6b34], 0
jne 0x1000cf2f
push 0x100a4d9c
push 0x100a4d84
lea esi, [edi + 0xc]
push esi
push edi
call fcn.1000e8f0
xor ecx, ecx
add esp, 0x10
cmp eax, esi
cmovne ecx, eax
mov dword [0x100b6b34], ecx
cmp dword [0x100b6b20], 0
jne 0x1000cf5c
push 0x100a4dba
push 0x100a4d9c
lea esi, [edi + 0xf]
push esi
push edi
call fcn.1000e8f0
xor ecx, ecx
add esp, 0x10
cmp eax, esi
cmovne ecx, eax
mov dword [0x100b6b20], ecx
cmp dword [0x100b6b24], 0
jne 0x1000cfa8
lea eax, [edi + 0x1b]
lea ebx, [eax - 0x1b]
nop dword [eax + eax]
mov edx, 0x100a4dbc
mov esi, edi
mov cl, byte [edx]
cmp cl, byte [esi]
je 0x1000cf87
cmp byte [edx + 1], 0
je 0x1000d174
add edx, 2
inc esi
cmp edx, 0x100a4df2
jne 0x1000cf77
mov eax, edi
mov edi, dword [esp + 0x44]
xor edx, edx
lea ecx, [edi + 0x1b]
cmp eax, ecx
cmove eax, edx
mov dword [0x100b6b24], eax
cmp dword [0x100b69f0], 0
jne 0x1000cff1
lea eax, [edi + 0x14]
lea ebx, [eax - 0x14]
mov edx, 0x100a4df4
mov esi, edi
nop
mov cl, byte [edx]
cmp cl, byte [esi]
je 0x1000cfd0
cmp byte [edx + 1], 0
je 0x1000d182
add edx, 2
inc esi
cmp edx, 0x100a4e1c
jne 0x1000cfc0
mov eax, edi
mov edi, dword [esp + 0x44]
xor edx, edx
lea ecx, [edi + 0x14]
cmp eax, ecx
cmove eax, edx
mov dword [0x100b69f0], eax
cmp dword [0x100b6a20], 0
jne 0x1000d038
lea eax, [edi + 0x22]
lea ebx, [eax - 0x22]
mov edx, 0x100a4e20
mov esi, edi
mov cl, byte [edx]
cmp cl, byte [esi]
je 0x1000d017
cmp byte [edx + 1], 0
je 0x1000d190
add edx, 2
inc esi
cmp edx, 0x100a4e64
jne 0x1000d007
mov eax, edi
mov edi, dword [esp + 0x44]
xor edx, edx
lea ecx, [edi + 0x22]
cmp eax, ecx
cmove eax, edx
mov dword [0x100b6a20], eax
cmp dword [0x100b6ae0], 0
jne 0x1000d081
lea eax, [edi + 0x13]
lea ebx, [eax - 0x13]
mov edx, 0x100a4e64
mov esi, edi
nop
mov cl, byte [edx]
cmp cl, byte [esi]
je 0x1000d060
cmp byte [edx + 1], 0
je 0x1000d19e
add edx, 2
inc esi
cmp edx, 0x100a4e8a
jne 0x1000d050
mov eax, edi
mov edi, dword [esp + 0x44]
xor edx, edx
lea ecx, [edi + 0x13]
cmp eax, ecx
cmove eax, edx
mov dword [0x100b6ae0], eax
cmp dword [0x100b6b14], 0
jne 0x1000d117
mov eax, dword [edi]
lea ecx, [esp + 0x4a4]
mov dword [esp + 0x4a4], 0x56ec8b55
mov word [esp + 0x4a8], 0x358b
mov dword [esp + 0x4ac], 0x575f685
mov dword [esp + 0x4b0], 0x8c25d5e
mov dword [esp + 0x4b4], 0x89d23300
mov byte [esp + 0x4b8], 0x15
cmp eax, dword [ecx]
jne 0x1000d117
movzx eax, word [edi + 4]
cmp ax, word [ecx + 4]
jne 0x1000d117
lea ecx, [edi + 0xa]
mov esi, 9
lea edx, [esp + 0x4ac]
mov eax, dword [ecx]
cmp eax, dword [edx]
jne 0x1000d117
add ecx, 4
add edx, 4
sub esi, 4
jae 0x1000d0f2
mov al, byte [ecx]
cmp al, byte [edx]
jne 0x1000d117
mov dword [0x100b6b14], edi
mov eax, dword [edi + 6]
mov dword [0x100b6b28], eax
mov ecx, 0x100b3a60
nop dword [eax]
mov eax, dword [ecx + 4]
cmp dword [eax], 0
je 0x1000d1ac
add ecx, 8
cmp ecx, 0x100b3b08
jne 0x1000d120
jmp 0x1000cbd3
cmp edi, ebx
je 0x1000ccae
inc edi
jmp 0x1000cc84
cmp edi, ebx
je 0x1000cdd6
inc edi
jmp 0x1000cdb1
cmp edi, ebx
je 0x1000ce45
inc edi
jmp 0x1000ce20
cmp edi, ebx
je 0x1000ce95
inc edi
jmp 0x1000ce70
cmp edi, ebx
je 0x1000cf95
inc edi
jmp 0x1000cf70
cmp edi, ebx
je 0x1000cfde
inc edi
jmp 0x1000cfb7
cmp edi, ebx
je 0x1000d025
inc edi
jmp 0x1000d000
cmp edi, ebx
je 0x1000d06e
inc edi
jmp 0x1000d047
mov ecx, dword [esp + 0x4c]
mov eax, dword [esp + 0x68]
inc ecx
shr eax, 3
mov dword [esp + 0x4c], ecx
cmp ecx, eax
jne 0x1000cc45
mov eax, dword [esp + 0x68]
mov ecx, dword [esp + 0x48]
add ecx, eax
lea eax, [esp + 0x5c]
push 0x1c
push eax
mov dword [esp + 0x50], ecx
push ecx
jmp 0x1000cb21