Function at 0x10005c00
Capabilities:
Enumerate process modules

Disassembly:
sub esp, 0x42c
mov eax, dword [0x100263b0]
xor eax, esp
mov dword [esp + 0x428], eax
push ebp
mov ebp, ecx
cmp dword [ebp + 0x458], 0
push esi
push edi
jne 0x10005c41
push 0x10
call sub.MSVCR80.dll_void____cdecl_operator_new_unsigned_int_
add esp, 4
test eax, eax
je 0x10005c39
mov ecx, eax
call fcn.10005250
jmp 0x10005c3b
xor eax, eax
mov dword [ebp + 0x458], eax
mov ecx, 0x10026b08
call fcn.1000dc80
test al, al
jns 0x10005c69
mov eax, dword [esp + 0x43c]
push eax
push str.D3D::HookDirect3D_version:_d__begin._n
push 0x10026b08
call fcn.1000d220
add esp, 0xc
mov eax, dword [esp + 0x43c]
sub eax, 0
je 0x10005cb7
sub eax, 8
je 0x10005c9d
sub eax, 1
jne 0x10005e77
push str.d3d9.dll
call dword [sym.imp.KERNEL32.dll_LoadLibraryW]
push 9
push eax
mov ecx, ebp
call fcn.10005a80
jmp 0x10005ede
push str.d3d8.dll
call dword [sym.imp.KERNEL32.dll_LoadLibraryW]
push 8
push eax
mov ecx, ebp
call fcn.10005a80
jmp 0x10005ede
push fcn.10005950
push str.Direct3DCreate8
push 0x1001f4dc
call fcn.1000d540
add esp, 0xc
test eax, eax
je 0x10005ce8
mov ecx, dword [ebp + 0x458]
mov dword [ecx], eax
mov byte [0x10027270], 1
mov byte [0x10027271], 0
push fcn.100059e0
push str.Direct3DCreate9
push 0x1001f4d0
call fcn.1000d540
add esp, 0xc
test eax, eax
je 0x10005d1a
mov edx, dword [ebp + 0x458]
mov dword [edx + 4], eax
mov byte [0x10027248], 1
mov byte [0x10027249], 0
mov eax, dword [ebp + 0x458]
mov ecx, dword [eax]
test ecx, ecx
jne 0x10005e42
cmp dword [eax + 4], ecx
jne 0x10005e3e
mov ecx, 0x10026b08
call fcn.1000dc80
test al, al
jns 0x10005d53
push str.D3D__tTry_GetModuleHandle_for_dynamic_loaded_module._n
push 0x10026b08
call fcn.1000d220
add esp, 8
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
push eax
push 8
call sub.KERNEL32.dll_CreateToolhelp32Snapshot
mov ecx, 0x10026b08
mov esi, eax
call fcn.1000dc80
test al, al
jns 0x10005d83
push str._tModules_list:_n
push 0x10026b08
call fcn.1000d220
add esp, 8
lea eax, [esp + 0xc]
push eax
push esi
call sub.KERNEL32.dll_Module32FirstW
test eax, eax
je 0x10005dc6
mov ecx, 0x10026b08
call fcn.1000dc80
test al, al
jns 0x10005db7
lea ecx, [esp + 0x2c]
push ecx
push str._t_t_s_n
push 0x10026b08
call fcn.1000d220
add esp, 0xc
lea edx, [esp + 0xc]
push edx
push esi
call sub.KERNEL32.dll_Module32NextW
test eax, eax
jne 0x10005d92
mov edi, dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
push str.d3d8.dll
call edi
mov esi, eax
test esi, esi
je 0x10005e05
mov ecx, 0x10026b08
call fcn.1000dc80
test al, al
jns 0x10005df9
push str._tGetModuleHandle__d3d8.dll___successed._n
push 0x10026b08
call fcn.1000d220
add esp, 8
push 8
push esi
mov ecx, ebp
call fcn.10005a80
jmp 0x10005e77
push str.d3d9.dll
call edi
mov esi, eax
test esi, esi
je 0x10005e77
mov ecx, 0x10026b08
call fcn.1000dc80
test al, al
jns 0x10005e32
push str._tGetModuleHandle__d3d9.dll___successed._n
push 0x10026b08
call fcn.1000d220
add esp, 8
push 9
push esi
mov ecx, ebp
call fcn.10005a80
jmp 0x10005e77
test ecx, ecx
je 0x10005e58
push 0xdc
call fcn.10005950
test eax, eax
je 0x10005e58
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [ebp + 0x458]
cmp dword [eax + 4], 0
je 0x10005e77
push 0x1f
call fcn.100059e0
test eax, eax
je 0x10005e77
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [ebp + 0x458]
cmp dword [eax], 0
jne 0x10005eb4
cmp dword [eax + 4], 0
jne 0x10005eb4
mov ecx, 0x10026b08
call fcn.1000dc80
test al, al
jns 0x10005eb0
mov eax, dword [esp + 0x43c]
push eax
push str.D3D::HookDirect3D_version:_d__failed._n
push 0x10026b08
call fcn.1000d220
add esp, 0xc
xor al, al
jmp 0x10005ede
mov ecx, 0x10026b08
call fcn.1000dc80
test al, al
jns 0x10005edc
mov ecx, dword [esp + 0x43c]
push ecx
push str.D3D::HookDirect3D_version:_d__successed._n
push 0x10026b08
call fcn.1000d220
add esp, 0xc
mov al, 1
mov ecx, dword [esp + 0x434]
pop edi
pop esi
pop ebp
xor ecx, esp
call fcn.1001a888
add esp, 0x42c
ret 4