Function at 0x6cdf66c0
Capabilities:
Enumerate process modules

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x6ce1a39e
mov eax, dword fs:[0]
push eax
mov eax, 0x1074
call fcn.6ce16010
mov eax, dword [0x6ce5c008]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edi, dword [ebp + 8]
mov dword [ebp - 0x1044], 0
mov eax, dword [0x6ce606d4]
mov dword [ebp - 0x104c], edi
test al, 1
jne 0x6cdf6716
or eax, 1
mov dword [0x6ce606d4], eax
test al, 2
jne 0x6cdf6722
or eax, 2
mov dword [0x6ce606d4], eax
xorps xmm0, xmm0
movq qword [edi], xmm0
mov dword [edi + 8], 0
mov dword [edi], 0
mov dword [edi + 4], 0
mov dword [edi + 8], 0
xor ebx, ebx
movq qword [ebp - 0x1024], xmm0
xor eax, eax
mov dword [ebp - 0x101c], 0
mov dword [ebp - 0x1044], 1
mov dword [ebp - 0x1018], 0
mov dword [ebp - 0x1024], ebx
mov dword [ebp - 0x1020], ebx
mov dword [ebp - 0x1040], eax
mov dword [ebp - 0x101c], eax
lea eax, [ebp - 0x1018]
mov dword [ebp - 4], 1
push eax
push 0x1000
lea eax, [ebp - 0x1010]
push eax
call dword [sym.imp.PSAPI.DLL_EnumProcesses]
test eax, eax
je 0x6cdf697c
xor esi, esi
test dword [ebp - 0x1018], 0xfffffffc
jbe 0x6cdf68d2
xor eax, eax
mov dword [ebp - 0x1040], 0
mov dword [ebp - 0x1028], 7
mov dword [ebp - 0x102c], 0
mov word [ebp - 0x103c], ax
lea eax, [ebp - 0x103c]
mov byte [ebp - 4], 2
push eax
lea eax, [ebp - 0x1040]
push eax
push dword [ebp + esi*4 - 0x1010]
call fcn.6cdf69a0
test al, al
je 0x6cdf6892
lea edx, [ebp - 0x103c]
lea ecx, [ebp - 0x1080]
call fcn.6cdf6630
lea ecx, [ebp - 0x1040]
mov edx, eax
push ecx
lea ecx, [ebp - 0x1068]
call fcn.6cdf7640
add esp, 4
push eax
lea ecx, [ebp - 0x1024]
mov byte [ebp - 4], 4
call fcn.6cdf6f70
mov eax, dword [ebp - 0x1054]
cmp eax, 8
jb 0x6cdf685d
inc eax
push eax
push dword [ebp - 0x1068]
call fcn.6cdbf220
xor eax, eax
mov dword [ebp - 0x1054], 7
mov word [ebp - 0x1068], ax
mov eax, dword [ebp - 0x106c]
mov dword [ebp - 0x1058], 0
cmp eax, 8
jb 0x6cdf6892
inc eax
push eax
push dword [ebp - 0x1080]
call fcn.6cdbf220
mov byte [ebp - 4], 1
mov eax, dword [ebp - 0x1028]
cmp eax, 8
jb 0x6cdf68ae
inc eax
push eax
push dword [ebp - 0x103c]
call fcn.6cdbf220
mov eax, dword [ebp - 0x1018]
inc esi
shr eax, 2
cmp esi, eax
jb 0x6cdf67c0
mov eax, dword [ebp - 0x101c]
mov ebx, dword [ebp - 0x1024]
mov dword [ebp - 0x1040], eax
mov al, byte [0x6ce606d8]
mov ecx, dword [ebp - 0x1020]
mov byte [ebp - 0x1014], al
sub ecx, ebx
mov eax, 0x92492493
imul ecx
add edx, ecx
lea ecx, [ebp - 0x1014]
sar edx, 4
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [ebp - 0x1020]
push ecx
push eax
mov ecx, ebx
mov dword [ebp - 0x1048], eax
call fcn.6cdf7710
xor esi, esi
add esp, 8
cmp dword [ebp + 0xc], esi
jbe 0x6cdf693f
nop dword [eax]
cmp esi, dword [ebp - 0x1048]
jae 0x6cdf6939
push ebx
mov ecx, edi
call fcn.6cdf7030
inc esi
add ebx, 0x1c
cmp esi, dword [ebp + 0xc]
jb 0x6cdf6920
mov ebx, dword [ebp - 0x1024]
test ebx, ebx
je 0x6cdf697c
push dword [ebp - 0x104c]
mov edx, dword [ebp - 0x1020]
push ecx
mov ecx, ebx
call fcn.6cdf7670
mov ecx, dword [ebp - 0x1040]
mov eax, 0x92492493
sub ecx, ebx
add esp, 8
imul ecx
add edx, ecx
sar edx, 4
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
push ecx
push ebx
call fcn.6cdf75d0
mov eax, edi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.6ce11901
mov esp, ebp
pop ebp
ret