Function at 0x10006980
Capabilities:
Enumerate process modules
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff0
sub esp, 0x4f8
mov eax, dword [0x100ab018]
xor eax, esp
mov dword [esp + 0x4f4], eax
mov eax, dword [0x100ae168]
push esi
push edi
push 0
movsd xmm0, qword [eax + 0x11c0]
push 0
push 0xc
movsd qword [esp + 0x64], xmm0
call dword [sym.imp.OLEAUT32.dll_SafeArrayCopyData]
mov esi, eax
mov edx, 0x10073cc0
lea eax, [esp + 0xa8]
push esi
push eax
call fcn.10002090
add esp, 8
movups xmm0, xmmword [eax]
push esi
movaps xmmword [esp + 0x84], xmm0
movaps xmmword [esp + 0x94], xmm0
call dword [sym.imp.OLEAUT32.dll_SafeArrayGetDim]
cmp word [esp + 0x80], 0
je 0x10006a04
mov eax, dword [esp + 0x98]
mov dword [0x100ab8d0], eax
mov eax, dword [0x100ae168]
sub esp, 8
movsd xmm0, qword [eax + 0x11c0]
subsd xmm0, qword [esp + 0x60]
movsd qword [esp], xmm0
push str.Preparing_Methods_Took:__lfs_n
push 0x100abc10
call fcn.1000ace0
mov eax, dword [0x100ae168]
add esp, 0x10
mov dword [esp + 0x2c], 0
movsd xmm0, qword [eax + 0x11c0]
push 0
push 0x18
movsd qword [esp + 0x60], xmm0
call dword [sym.imp.KERNEL32.dll_CreateToolhelp32Snapshot]
mov esi, eax
cmp esi, 0xffffffff
je 0x10006ab6
lea eax, [esp + 0xb8]
mov dword [esp + 0xb8], 0x428
push eax
push esi
call dword [sym.imp.KERNEL32.dll_Module32FirstW]
test eax, eax
je 0x10006ab6
mov edi, dword [sym.imp.KERNEL32.dll_Module32NextW]
lea eax, [esp + 0xd8]
push str.osu_.exe
push eax
call fcn.10056352
add esp, 8
test eax, eax
je 0x10006aab
lea eax, [esp + 0xb8]
push eax
push esi
call edi
test eax, eax
jne 0x10006a81
jmp 0x10006ab6
mov eax, dword [esp + 0xcc]
mov dword [esp + 0x2c], eax
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push 0x1c
lea eax, [esp + 0x68]
push eax
push dword [esp + 0x34]
call dword [sym.imp.KERNEL32.dll_VirtualQuery]
test eax, eax
je 0x100071f0
cmp dword [esp + 0x74], 0x1000
movss xmm1, dword [0x100a0df8]
jne 0x10007125
mov eax, dword [esp + 0x78]
cmp eax, 0x40
je 0x10006b6e
cmp dword [0x100ace28], 0
jne 0x10007125
cmp eax, 0x20
jne 0x10007125
mov edi, dword [esp + 0x70]
xor esi, esi
shr edi, 3
test edi, edi
je 0x10007125
mov edx, dword [esp + 0x64]
add edx, 6
cmp byte [edx - 6], 0xb8
jne 0x10006b61
cmp byte [edx - 1], 0xe9
jne 0x10006b61
mov ecx, dword [edx]
mov eax, dword [0x100ace58]
add ecx, 4
add ecx, edx
add eax, 5
cmp ecx, eax
jne 0x10006b61
mov eax, dword [edx - 5]
mov dword [0x100ab8dc], eax
mov dword [0x100ace28], 1
call fcn.100068a0
test al, al
jne 0x100071f0
inc esi
add edx, 8
cmp esi, edi
jne 0x10006b23
jmp 0x10007125
mov eax, dword [esp + 0x70]
xor edx, edx
mov dword [esp + 0x54], edx
test eax, 0xfffffff8
je 0x10007129
mov eax, dword [0x100ace24]
mov dword [esp + 0x30], eax
mov eax, dword [0x100ace60]
mov dword [esp + 0x34], eax
mov eax, dword [0x100ace5c]
mov dword [esp + 0x38], eax
mov eax, dword [0x100ace18]
mov dword [esp + 0x3c], eax
mov eax, dword [0x100acd80]
mov ecx, dword [0x100aceac]
mov dword [esp + 0x40], eax
mov eax, dword [0x100acf10]
mov dword [esp + 0xc], eax
mov eax, dword [0x100ace08]
mov dword [esp + 0x10], eax
mov eax, dword [0x100ace94]
mov dword [esp + 0x14], eax
mov eax, dword [0x100acf1c]
mov dword [esp + 0x44], eax
mov eax, dword [0x100acf4c]
mov dword [esp + 0x48], eax
mov eax, dword [0x100acf48]
mov dword [esp + 0x4c], eax
mov eax, dword [0x100acf34]
mov dword [esp + 0x50], eax
mov eax, dword [0x100acf38]
mov dword [esp + 0x18], eax
mov eax, dword [0x100ace10]
mov dword [esp + 0x1c], eax
mov eax, dword [0x100ace40]
mov dword [esp + 0x20], eax
mov eax, dword [0x100aceec]
mov dword [esp + 0x28], ecx
mov dword [esp + 0x24], eax
nop dword [eax]
mov eax, dword [esp + 0x64]
lea edi, [eax + edx*8]
movd xmm0, edi
mov eax, edi
cvtdq2pd xmm0, xmm0
shr eax, 0x1f
addsd xmm0, qword [eax*8 + 0x100a1100]
cvtpd2ps xmm0, xmm0
mulss xmm0, xmm1
movss dword [0x100ace0c], xmm0
test ecx, ecx
jne 0x10006c97
lea esi, [edi + 0x25]
mov dword [esp + 0x28], edi
mov eax, edi
nop word [eax + eax]
mov ecx, 0x1009e850
mov edx, eax
mov al, byte [ecx]
cmp al, byte [edx]
je 0x10006c77
cmp byte [ecx + 1], 0
je 0x10007140
add ecx, 2
inc edx
cmp ecx, 0x1009e89a
jne 0x10006c67
mov ecx, dword [esp + 0x28]
cmp ecx, esi
jne 0x10006c91
xor ecx, ecx
mov dword [esp + 0x28], ecx
mov dword [0x100aceac], ecx
cmp dword [esp + 0x30], 0
jne 0x10006cc6
push 0x1009e8b4
push 0x1009e89c
lea esi, [edi + 0xc]
push esi
push edi
call fcn.100088f0
xor ecx, ecx
add esp, 0x10
cmp eax, esi
cmovne ecx, eax
mov dword [esp + 0x30], ecx
mov dword [0x100ace24], ecx
cmp dword [esp + 0x34], 0
jne 0x10006cf5
push 0x1009e8ca
push 0x1009e8b4
lea esi, [edi + 0xb]
push esi
push edi
call fcn.100088f0
xor ecx, ecx
add esp, 0x10
cmp eax, esi
cmovne ecx, eax
mov dword [esp + 0x34], ecx
mov dword [0x100ace60], ecx
cmp dword [esp + 0x38], 0
jne 0x10006d24
push 0x1009e8e6
push 0x1009e8cc
lea esi, [edi + 0xd]
push esi
push edi
call fcn.100088f0
xor ecx, ecx
add esp, 0x10
cmp eax, esi
cmovne ecx, eax
mov dword [esp + 0x38], ecx
mov dword [0x100ace5c], ecx
cmp dword [esp + 0x3c], 0
jne 0x10006d53
push 0x1009e8fe
push 0x1009e8e8
lea esi, [edi + 0xb]
push esi
push edi
call fcn.100088f0
xor ecx, ecx
add esp, 0x10
cmp eax, esi
cmovne ecx, eax
mov dword [esp + 0x3c], ecx
mov dword [0x100ace18], ecx
cmp dword [esp + 0x40], 0
jne 0x10006d82
push 0x1009e91a
push 0x1009e900
lea esi, [edi + 0xd]
push esi
push edi
call fcn.100088f0
xor ecx, ecx
add esp, 0x10
cmp eax, esi
cmovne ecx, eax
mov dword [esp + 0x40], ecx
mov dword [0x100acd80], ecx
cmp dword [esp + 0xc], 0
jne 0x10006dcf
lea esi, [edi + 0x24]
mov dword [esp + 0xc], edi
mov eax, edi
mov ecx, 0x1009e920
mov edx, eax
nop dword [eax]
mov al, byte [ecx]
cmp al, byte [edx]
je 0x10006db0
cmp byte [ecx + 1], 0
je 0x10007156
add ecx, 2
inc edx
cmp ecx, 0x1009e968
jne 0x10006da0
mov eax, dword [esp + 0xc]
cmp eax, esi
jne 0x10006dca
xor eax, eax
mov dword [esp + 0xc], eax
mov dword [0x100acf10], eax
cmp dword [0x100ace1c], 0
jne 0x10006df3
sub esp, 8
mov eax, esp
mov dword [eax], edi
mov dword [eax + 4], 0x15
call fcn.10008530
add esp, 8
mov dword [0x100ace1c], eax
cmp dword [esp + 0x10], 0
jne 0x10006e3f
lea esi, [edi + 0x1a]
mov dword [esp + 0x10], edi
mov eax, edi
mov ecx, 0x1009e994
mov edx, eax
nop word [eax + eax]
mov al, byte [ecx]
cmp al, byte [edx]
je 0x10006e20
cmp byte [ecx + 1], 0
je 0x1000716c
add ecx, 2
inc edx
cmp ecx, 0x1009e9c8
jne 0x10006e10
mov eax, dword [esp + 0x10]
cmp eax, esi
jne 0x10006e3a
xor eax, eax
mov dword [esp + 0x10], eax
mov dword [0x100ace08], eax
cmp dword [esp + 0x14], 0
jne 0x10006e86
lea esi, [edi + 0x12]
mov dword [esp + 0x14], edi
mov eax, edi
nop
mov ecx, 0x1009e9c8
mov edx, eax
mov al, byte [ecx]
cmp al, byte [edx]
je 0x10006e67
cmp byte [ecx + 1], 0
je 0x10007182
add ecx, 2
inc edx
cmp ecx, 0x1009e9ec
jne 0x10006e57
mov eax, dword [esp + 0x14]
cmp eax, esi
jne 0x10006e81
xor eax, eax
mov dword [esp + 0x14], eax
mov dword [0x100ace94], eax
cmp dword [esp + 0x44], 0
jne 0x10006eb5
push 0x1009ea0a
push 0x1009e9ec
lea esi, [edi + 0xf]
push esi
push edi
call fcn.100088f0
xor ecx, ecx
add esp, 0x10
cmp eax, esi
cmovne ecx, eax
mov dword [esp + 0x44], ecx
mov dword [0x100acf1c], ecx
cmp dword [esp + 0x48], 0
jne 0x10006ee4
push 0x1009ea24
push 0x1009ea0c
lea esi, [edi + 0xc]
push esi
push edi
call fcn.100088f0
xor ecx, ecx
add esp, 0x10
cmp eax, esi
cmovne ecx, eax
mov dword [esp + 0x48], ecx
mov dword [0x100acf4c], ecx
cmp dword [esp + 0x4c], 0
jne 0x10006f13
push 0x1009ea3c
push 0x1009ea24
lea esi, [edi + 0xc]
push esi
push edi
call fcn.100088f0
xor ecx, ecx
add esp, 0x10
cmp eax, esi
cmovne ecx, eax
mov dword [esp + 0x4c], ecx
mov dword [0x100acf48], ecx
cmp dword [esp + 0x50], 0
jne 0x10006f42
push 0x1009ea5a
push 0x1009ea3c
lea esi, [edi + 0xf]
push esi
push edi
call fcn.100088f0
xor ecx, ecx
add esp, 0x10
cmp eax, esi
cmovne ecx, eax
mov dword [esp + 0x50], ecx
mov dword [0x100acf34], ecx
cmp dword [esp + 0x18], 0
jne 0x10006f8f
lea esi, [edi + 0x1b]
mov dword [esp + 0x18], edi
mov eax, edi
mov ecx, 0x1009ea5c
mov edx, eax
nop dword [eax]
mov al, byte [ecx]
cmp al, byte [edx]
je 0x10006f70
cmp byte [ecx + 1], 0
je 0x10007198
add ecx, 2
inc edx
cmp ecx, 0x1009ea92
jne 0x10006f60
mov eax, dword [esp + 0x18]
cmp eax, esi
jne 0x10006f8a
xor eax, eax
mov dword [esp + 0x18], eax
mov dword [0x100acf38], eax
cmp dword [esp + 0x1c], 0
jne 0x10006fd6
lea esi, [edi + 0x14]
mov dword [esp + 0x1c], edi
mov eax, edi
nop
mov ecx, 0x1009ea94
mov edx, eax
mov al, byte [ecx]
cmp al, byte [edx]
je 0x10006fb7
cmp byte [ecx + 1], 0
je 0x100071ae
add ecx, 2
inc edx
cmp ecx, 0x1009eabc
jne 0x10006fa7
mov eax, dword [esp + 0x1c]
cmp eax, esi
jne 0x10006fd1
xor eax, eax
mov dword [esp + 0x1c], eax
mov dword [0x100ace10], eax
cmp dword [esp + 0x20], 0
jne 0x1000701f
lea esi, [edi + 0x22]
mov dword [esp + 0x20], edi
mov eax, edi
mov ecx, 0x1009eac0
mov edx, eax
nop dword [eax]
mov al, byte [ecx]
cmp al, byte [edx]
je 0x10007000
cmp byte [ecx + 1], 0
je 0x100071c4
add ecx, 2
inc edx
cmp ecx, 0x1009eb04
jne 0x10006ff0
mov eax, dword [esp + 0x20]
cmp eax, esi
jne 0x1000701a
xor eax, eax
mov dword [esp + 0x20], eax
mov dword [0x100ace40], eax
cmp dword [esp + 0x24], 0
jne 0x10007066
lea esi, [edi + 0x13]
mov dword [esp + 0x24], edi
mov eax, edi
nop
mov ecx, 0x1009eb04
mov edx, eax
mov al, byte [ecx]
cmp al, byte [edx]
je 0x10007047
cmp byte [ecx + 1], 0
je 0x100071da
add ecx, 2
inc edx
cmp ecx, 0x1009eb2a
jne 0x10007037
mov eax, dword [esp + 0x24]
cmp eax, esi
jne 0x10007061
xor eax, eax
mov dword [esp + 0x24], eax
mov dword [0x100aceec], eax
cmp dword [0x100acf28], 0
jne 0x100070fc
mov eax, dword [edi]
lea ecx, [esp + 0x4e4]
mov dword [esp + 0x4e4], 0x56ec8b55
mov word [esp + 0x4e8], 0x358b
mov dword [esp + 0x4ec], 0x575f685
mov dword [esp + 0x4f0], 0x8c25d5e
mov dword [esp + 0x4f4], 0x89d23300
mov byte [esp + 0x4f8], 0x15
cmp eax, dword [ecx]
jne 0x100070fc
movzx eax, word [edi + 4]
cmp ax, word [ecx + 4]
jne 0x100070fc
lea ecx, [edi + 0xa]
mov esi, 9
lea edx, [esp + 0x4ec]
mov eax, dword [ecx]
cmp eax, dword [edx]
jne 0x100070fc
add ecx, 4
add edx, 4
sub esi, 4
jae 0x100070d7
mov al, byte [ecx]
cmp al, byte [edx]
jne 0x100070fc
mov eax, dword [edi + 6]
mov dword [0x100acf28], edi
mov dword [0x100acf3c], eax
call fcn.100068a0
test al, al
jne 0x100071f0
mov edx, dword [esp + 0x54]
mov eax, dword [esp + 0x70]
inc edx
mov ecx, dword [esp + 0x28]
shr eax, 3
mov dword [esp + 0x54], edx
cmp edx, eax
jne 0x10006c20
mov eax, dword [esp + 0x70]
mov ecx, dword [esp + 0x2c]
add ecx, eax
lea eax, [esp + 0x64]
push 0x1c
push eax
mov dword [esp + 0x34], ecx
push ecx
jmp 0x10006ac8
mov eax, dword [esp + 0x28]
cmp eax, edi
je 0x10006c8b
inc eax
mov dword [esp + 0x28], eax
jmp 0x10006c60
mov eax, dword [esp + 0xc]
cmp eax, edi
je 0x10006dc4
inc eax
mov dword [esp + 0xc], eax
jmp 0x10006d92
mov eax, dword [esp + 0x10]
cmp eax, edi
je 0x10006e34
inc eax
mov dword [esp + 0x10], eax
jmp 0x10006e03
mov eax, dword [esp + 0x14]
cmp eax, edi
je 0x10006e7b
inc eax
mov dword [esp + 0x14], eax
jmp 0x10006e50
mov eax, dword [esp + 0x18]
cmp eax, edi
je 0x10006f84
inc eax
mov dword [esp + 0x18], eax
jmp 0x10006f52
mov eax, dword [esp + 0x1c]
cmp eax, edi
je 0x10006fcb
inc eax
mov dword [esp + 0x1c], eax
jmp 0x10006fa0
mov eax, dword [esp + 0x20]
cmp eax, edi
je 0x10007014
inc eax
mov dword [esp + 0x20], eax
jmp 0x10006fe6
mov eax, dword [esp + 0x24]
cmp eax, edi
je 0x1000705b
inc eax
mov dword [esp + 0x24], eax
jmp 0x10007030
mov eax, dword [0x100ae168]
sub esp, 8
movsd xmm0, qword [eax + 0x11c0]
subsd xmm0, qword [esp + 0x60]
movsd qword [esp], xmm0
push str.Memory_Scan_Took:__lfs_n
push 0x100abc10
call fcn.1000ace0
mov ecx, dword [esp + 0x50c]
add esp, 0x10
mov dword [0x100ace0c], 0x3f800000
pop edi
pop esi
xor ecx, esp
call fcn.1004d2bc
mov esp, ebp
pop ebp
ret