Function at 0x43acd0
Capabilities:
Enumerate process modules

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x44900c
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ecx
mov eax, 0x12bc
call fcn.00443ff0
mov eax, dword [0x461e50]
mov dword [ebp - 0x14], eax
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
push str.___n
call fcn.0043aa80
add esp, 4
mov dword [ebp - 0xa8], 0x94
lea eax, [ebp - 0xa8]
push eax
call dword [0x44e154]
test eax, eax
je 0x43ad5a
mov ecx, dword [ebp - 0xa0]
push ecx
mov edx, dword [ebp - 0xa4]
push edx
push str.MajorVersion:_d_MinorVersion:_d_n
call fcn.0043aa80
lea eax, [ebp - 0x94]
push eax
call fcn.0043aa80
push 0x454680
call fcn.0043aa80
add esp, 0x14
lea ecx, [ebp - 0x2b4]
call dword [sym.imp.MFC71.DLL_ATL::CStringT::CStringT_2]
mov dword [ebp - 4], 0
lea ecx, [ebp - 0x2b4]
push ecx
push 0x462ed0
call fcn.0043a930
add esp, 8
lea ecx, [ebp - 0x2b4]
call dword [sym.imp.MFC71.DLL_ATL::CSimpleStringT::IsEmpty]
test al, al
jne 0x43ada5
mov edx, dword [ebp - 0x2b4]
push edx
push str.DuomMi_Version:_s_n
call fcn.0043aa80
add esp, 8
call dword [0x44e144]
sub eax, dword [0x462cb8]
mov ecx, eax
mov eax, 0x95217cb1
mul ecx
mov esi, edx
shr esi, 0x15
mov edi, esi
imul edi, edi, 0x36ee80
mov edx, ecx
sub edx, edi
mov eax, 0x45e7b273
mul edx
mov ebx, edx
shr ebx, 0xe
mov eax, ebx
imul eax, eax, 0xea60
sub ecx, eax
sub ecx, edi
mov eax, 0x10624dd3
mul ecx
shr edx, 6
push edx
push ebx
push esi
push str.Run_Time:__d:_d:_d_n
call fcn.0043aa80
mov edi, dword [ebp + 8]
mov esi, dword [edi]
mov ecx, dword [esi]
push ecx
call fcn.0043a610
push eax
mov edx, dword [esi]
push edx
push str.Exception_code:__08X__s_n
call fcn.0043aa80
lea eax, [ebp - 0x2c0]
push eax
lea ecx, [ebp - 0x2bc]
push ecx
push 0x104
lea edx, [ebp - 0x2b0]
push edx
mov eax, dword [esi + 0xc]
push eax
call fcn.0043a880
lea ecx, [ebp - 0x2b0]
push ecx
mov edx, dword [ebp - 0x2c0]
push edx
mov eax, dword [ebp - 0x2bc]
push eax
mov ecx, dword [esi + 0xc]
push ecx
push str.Fault_address:___08X__02X:_08X__s_n
call fcn.0043aa80
add esp, 0x48
mov esi, dword [edi + 4]
push str._nRegisters:_n
call fcn.0043aa80
mov edx, dword [esi + 0x9c]
push edx
mov eax, dword [esi + 0xa0]
push eax
mov ecx, dword [esi + 0xa8]
push ecx
mov edx, dword [esi + 0xac]
push edx
mov eax, dword [esi + 0xa4]
push eax
mov ecx, dword [esi + 0xb0]
push ecx
push str.EAX:_08X_nEBX:_08X_nECX:_08X_nEDX:_08X_nESI:_08X_nEDI:_08X_n
call fcn.0043aa80
mov edx, dword [esi + 0xb8]
push edx
mov eax, dword [esi + 0xbc]
push eax
push str.CS:EIP:_04X:_08X_n
call fcn.0043aa80
mov ecx, dword [esi + 0xb4]
push ecx
mov edx, dword [esi + 0xc4]
push edx
mov eax, dword [esi + 0xc8]
push eax
push str.SS:ESP:_04X:_08X__EBP:_08X_n
call fcn.0043aa80
mov ecx, dword [esi + 0x8c]
push ecx
mov edx, dword [esi + 0x90]
push edx
mov eax, dword [esi + 0x94]
push eax
mov ecx, dword [esi + 0x98]
push ecx
push str.DS:_04X__ES:_04X__FS:_04X__GS:_04X_n
call fcn.0043aa80
add esp, 0x50
mov edx, dword [esi + 0xc0]
push edx
push str.Flags:_08X_n
call fcn.0043aa80
add esp, 8
mov byte [ebp - 4], 1
push esi
call fcn.0043aba0
add esp, 4
xor edi, edi
mov dword [ebp - 4], edi
push str._nModules:_nBase______Size_______Entry__Module_n
call fcn.0043aa80
add esp, 4
call dword [0x44e134]
mov esi, eax
lea eax, [ebp - 0x2b8]
push eax
push 0x1000
lea ecx, [ebp - 0x12cc]
push ecx
push esi
call fcn.004445ca
test eax, eax
je 0x43b005
test dword [ebp - 0x2b8], 0xfffffffc
jbe 0x43b005
jmp 0x43af70
push 0xc
lea edx, [ebp - 0x2cc]
push edx
mov eax, dword [ebp + edi*4 - 0x12cc]
push eax
push esi
call fcn.004445c4
test eax, eax
je 0x43afad
mov ecx, dword [ebp - 0x2c4]
push ecx
mov edx, dword [ebp - 0x2c8]
push edx
mov eax, dword [ebp - 0x2cc]
push eax
push str.__08X__06X__08X_
call fcn.0043aa80
add esp, 0x10
push 0x104
lea ecx, [ebp - 0x1ac]
push ecx
mov edx, dword [ebp + edi*4 - 0x12cc]
push edx
push esi
call fcn.004445be
test eax, eax
je 0x43afdf
lea eax, [ebp - 0x1ac]
push eax
push 0x454528
jmp 0x43afeb
lea ecx, [ebp - 0x1ac]
push ecx
push 0x454680
call fcn.0043aa80
add esp, 8
inc edi
mov edx, dword [ebp - 0x2b8]
shr edx, 2
cmp edi, edx
jb 0x43af70
push 0x454680
call fcn.0043aa80
add esp, 4
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x2b4]
call dword [sym.imp.MFC71.DLL_ATL::CStringT::CStringT]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
mov ecx, dword [ebp - 0x14]
call fcn.00443e74
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret