Function at 0x10001530
Capabilities:
Enumerate process modules

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x1218
call fcn.10009f30
mov eax, dword [0x1002f080]
xor eax, ebp
mov dword [ebp - 4], eax
lea eax, [ebp - 0x1178]
push eax
push 0x1000
lea ecx, [ebp - 0x1108]
push ecx
call sub.KERNEL32.dll_K32EnumProcesses
test eax, eax
jne 0x10001596
push 0x10003250
push str.Failed_to_enumerate_processes.
push 0x10030168
call fcn.10002220
add esp, 8
mov ecx, eax
call fcn.10004af0
push 0x10025201
mov ecx, dword [ebp + 8]
call fcn.10003ad0
mov eax, dword [ebp + 8]
jmp 0x10001863
mov edx, dword [ebp - 0x1178]
shr edx, 2
mov dword [ebp - 0x117c], edx
mov dword [ebp - 0x116c], 0
jmp 0x100015c0
mov eax, dword [ebp - 0x116c]
add eax, 1
mov dword [ebp - 0x116c], eax
mov ecx, dword [ebp - 0x116c]
cmp ecx, dword [ebp - 0x117c]
jae 0x10001853
mov edx, dword [ebp - 0x116c]
mov eax, dword [ebp + edx*4 - 0x1108]
mov dword [ebp - 0x1174], eax
cmp dword [ebp - 0x1174], 0
je 0x1000184e
mov ecx, dword [ebp - 0x1174]
push ecx
push 0
push 0x410
call dword [sym.imp.KERNEL32.dll_OpenProcess]
mov dword [ebp - 0x1170], eax
cmp dword [ebp - 0x1170], 0
je 0x1000184e
push 0x104
lea edx, [ebp - 0x108]
push edx
push 0
mov eax, dword [ebp - 0x1170]
push eax
call sub.KERNEL32.dll_K32GetModuleFileNameExA
test eax, eax
je 0x10001840
lea ecx, [ebp - 0x108]
push ecx
lea ecx, [ebp - 0x1138]
call fcn.10003ad0
lea edx, [ebp - 0x1138]
push edx
lea eax, [ebp - 0x1120]
push eax
call fcn.10001140
add esp, 8
push 0x10025384
lea ecx, [ebp - 0x1120]
push ecx
call fcn.10002510
add esp, 8
movzx edx, al
test edx, edx
jne 0x1000170d
push str.ptm.exe
lea eax, [ebp - 0x1120]
push eax
call fcn.10002510
add esp, 8
movzx ecx, al
test ecx, ecx
jne 0x1000170d
push str.injector.dll
lea edx, [ebp - 0x1120]
push edx
call fcn.10002510
add esp, 8
movzx eax, al
test eax, eax
jne 0x1000170d
push str.cheattool.exe
lea ecx, [ebp - 0x1120]
push ecx
call fcn.10002510
add esp, 8
movzx edx, al
test edx, edx
jne 0x1000170d
push str.aim.exe
lea eax, [ebp - 0x1120]
push eax
call fcn.10002510
add esp, 8
movzx ecx, al
test ecx, ecx
jne 0x1000170d
push str.aimbot.exe
lea edx, [ebp - 0x1120]
push edx
call fcn.10002510
add esp, 8
movzx eax, al
test eax, eax
je 0x100017c6
push 0x10003250
lea ecx, [ebp - 0x1138]
push ecx
push 0x100253cc
push 0x10030168
call fcn.10002220
add esp, 8
push eax
call fcn.100021f0
add esp, 8
mov ecx, eax
call fcn.10004af0
push 1
lea ecx, [ebp - 0x1218]
call fcn.10003840
lea edx, [ebp - 0x1138]
push edx
push str.Cheat_detected:
lea eax, [ebp - 0x1218]
push eax
call fcn.10002220
add esp, 8
push eax
call fcn.100021f0
add esp, 8
lea ecx, [ebp - 0x1150]
push ecx
lea ecx, [ebp - 0x1218]
call fcn.10008660
push eax
call fcn.100012f0
add esp, 4
lea ecx, [ebp - 0x1150]
call fcn.10004760
nop
lea edx, [ebp - 0x1168]
push edx
lea ecx, [ebp - 0x1218]
call fcn.10008660
push eax
call fcn.10001220
add esp, 4
lea ecx, [ebp - 0x1168]
call fcn.10004760
nop
lea ecx, [ebp - 0x1218]
call fcn.10004e00
nop
push str.gta_sa.exe
lea eax, [ebp - 0x108]
push eax
call fcn.100086f0
add esp, 8
test eax, eax
je 0x10001829
push 0xffffffffffffffff
push 0x10025400
lea ecx, [ebp - 0x1138]
call fcn.10006f40
mov dword [ebp - 0x1180], eax
mov ecx, dword [ebp - 0x1180]
push ecx
push 0
mov edx, dword [ebp + 8]
push edx
lea ecx, [ebp - 0x1138]
call fcn.10008710
lea ecx, [ebp - 0x1120]
call fcn.10004760
lea ecx, [ebp - 0x1138]
call fcn.10004760
mov eax, dword [ebp + 8]
jmp 0x10001863
lea ecx, [ebp - 0x1120]
call fcn.10004760
lea ecx, [ebp - 0x1138]
call fcn.10004760
nop
mov eax, dword [ebp - 0x1170]
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
nop
jmp 0x100015b1
push 0x10025202
mov ecx, dword [ebp + 8]
call fcn.10003ad0
mov eax, dword [ebp + 8]
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.10009f17
mov esp, ebp
pop ebp
ret