Function at 0x1021dc10
Capabilities:
Enumerate process modules

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x238
mov eax, dword [0x11ad127c]
xor eax, ebp
mov dword [ebp - 8], eax
cmp dword [ebp + 8], 0
push ebx
push esi
push edi
mov ebx, edx
je 0x1021dcca
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
push eax
push 8
call dword [sym.imp.KERNEL32.dll_CreateToolhelp32Snapshot]
mov esi, eax
cmp esi, 0xffffffff
je 0x1021dc99
lea eax, [ebp - 0x234]
mov dword [ebp - 0x234], 0x224
push eax
push esi
call dword [sym.imp.KERNEL32.dll_Module32First]
test eax, eax
je 0x1021dc92
mov edi, dword [sym.imp.KERNEL32.dll_Module32Next]
nop word [eax + eax]
lea eax, [ebp - 0x214]
push ebx
push eax
call fcn.1043ab70
add esp, 8
test eax, eax
je 0x1021dcae
lea eax, [ebp - 0x234]
push eax
push esi
call edi
test eax, eax
jne 0x1021dc70
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
xor al, al
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 8]
xor ecx, ebp
call fcn.1045066c
mov esp, ebp
pop ebp
ret 4
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov al, 1
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 8]
xor ecx, ebp
call fcn.1045066c
mov esp, ebp
pop ebp
ret 4
push 0x105
mov byte [ebp - 0x235], 0
call fcn.10450898
mov edi, eax
add esp, 4
test edi, edi
je 0x1021dddd
push 0x104
push edi
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
push eax
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
xor eax, eax
cmp byte [edi], al
je 0x1021dd0a
inc eax
cmp byte [eax + edi], 0
jne 0x1021dd03
lea esi, [edi - 1]
add esi, eax
cmp esi, edi
jb 0x1021dd1d
cmp byte [esi], 0x5c
je 0x1021dd1f
dec esi
cmp esi, edi
jae 0x1021dd13
xor esi, esi
push 3
push 0x1046c210
push ebx
mov byte [esi], 0
call fcn.1043a494
add esp, 0xc
test eax, eax
jne 0x1021dd63
mov dl, 0x5c
mov ecx, edi
add ebx, 3
call fcn.10097920
mov esi, eax
test esi, esi
je 0x1021ddf6
push 3
push 0x1046c210
push ebx
mov byte [esi], 0
call fcn.1043a494
add esp, 0xc
test eax, eax
je 0x1021dd36
mov byte [esi], 0x5c
inc esi
mov al, byte [ebx]
test al, al
je 0x1021dd7a
sub ebx, esi
nop
mov byte [esi], al
inc esi
mov al, byte [ebx + esi]
test al, al
jne 0x1021dd70
mov byte [esi], 0
mov dl, 0x2f
mov ecx, edi
call fcn.100978f0
test eax, eax
je 0x1021dda0
nop word [eax + eax]
mov dl, 0x2f
mov byte [eax], 0x5c
mov ecx, edi
call fcn.100978f0
test eax, eax
jne 0x1021dd90
lea eax, [ebp - 0x154]
mov byte [ebp - 0x235], 0
push eax
push edi
call dword [sym.imp.KERNEL32.dll_FindFirstFileA]
cmp eax, 0xffffffff
je 0x1021ddd4
mov esi, dword [ebp - 0x154]
push eax
call dword [sym.imp.KERNEL32.dll_FindClose]
test esi, 0x10
sete byte [ebp - 0x235]
push edi
call fcn.10450877
add esp, 4
mov ecx, dword [ebp - 8]
mov al, byte [ebp - 0x235]
xor ecx, ebp
pop edi
pop esi
pop ebx
call fcn.1045066c
mov esp, ebp
pop ebp
ret 4
xor eax, eax
cmp byte [edi], al
je 0x1021de07
nop dword [eax]
inc eax
cmp byte [eax + edi], 0
jne 0x1021de00
add eax, edi
mov edx, 0x10468d10
mov cl, 0x5c
sub edx, eax
mov byte [eax], cl
lea eax, [eax + 1]
mov cl, byte [edx + eax]
test cl, cl
jne 0x1021de12
mov byte [eax], cl
xor eax, eax
cmp byte [edi], al
je 0x1021de2d
inc eax
cmp byte [eax + edi], 0
jne 0x1021de26
mov cl, byte [ebx]
add eax, edi
test cl, cl
je 0x1021de41
sub ebx, eax
mov byte [eax], cl
inc eax
mov cl, byte [ebx + eax]
test cl, cl
jne 0x1021de37
mov byte [eax], 0
jmp 0x1021dd7d