Function at 0x18013219
Capabilities:
Enumerate process modules

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x1240
call fcn.180a6c10
mov eax, dword [0x180f51f0]
xor eax, ebp
mov dword [ebp - 8], eax
push ebx
push esi
push edi
push dword [ebp + 8]
mov esi, ecx
push 0
push 0x410
mov dword [ebp - 0x22c], esi
call dword [sym.imp.KERNEL32.dll_OpenProcess]
mov dword [ebp - 0x218], eax
test eax, eax
jne 0x180132b8
movzx ecx, byte [0x180fb8f9]
neg ecx
sbb ecx, ecx
and ecx, 0x180fbba0
je 0x180132a7
push 4
pop esi
xor ebx, ebx
push esi
inc ebx
push ebx
mov dword [ebp - 0x228], ecx
call fcn.18001d8a
mov dword [ebp - 0x224], eax
mov dword [ebp - 0x220], esi
mov dword [ebp - 0x21c], ebx
call fcn.1800fc86
push eax
lea eax, [ebp - 0x228]
push str._::OpenProcess_failed__0x_x_
push eax
call fcn.18001000
add esp, 0xc
xor al, al
mov ecx, dword [ebp - 8]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.1809ccb5
leave
ret
push 0x5c
mov edx, esi
call fcn.18009baf
cmp eax, 0xffffffff
mov eax, dword [0x180fa268]
pop ecx
mov ecx, 0x180fa268
setne byte [ebp - 0x230]
call dword [eax + 0xc]
add eax, 0x10
cmp byte [ebp - 0x230], 0
mov dword [ebp - 0x234], eax
je 0x1801337c
lea ebx, [ebp - 0x234]
call fcn.18013518
mov edi, eax
test edi, edi
jge 0x18013370
movzx ecx, byte [0x180fb8f9]
neg ecx
sbb ecx, ecx
and ecx, 0x180fbba0
je 0x1801334d
push 4
pop esi
xor ebx, ebx
push esi
inc ebx
push ebx
mov dword [ebp - 0x228], ecx
call fcn.18001d8a
push edi
mov dword [ebp - 0x224], eax
lea eax, [ebp - 0x228]
push str._GetLongPathName_fail__hrx_x_
push eax
mov dword [ebp - 0x220], esi
mov dword [ebp - 0x21c], ebx
call fcn.18001000
add esp, 0xc
xor bl, bl
mov eax, dword [ebp - 0x234]
add eax, 0xfffffff0
call fcn.18004250
push dword [ebp - 0x218]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov al, bl
jmp 0x180132a9
mov eax, dword [ebp - 0x234]
mov dword [ebp - 0x22c], eax
push 0x1000
xor edi, edi
lea eax, [ebp - 0x123c]
push edi
push eax
call fcn.1809d820
add esp, 0xc
lea eax, [ebp - 0x238]
push eax
push 4
pop esi
push esi
lea eax, [ebp - 0x123c]
push eax
push dword [ebp - 0x218]
mov dword [ebp - 0x238], edi
call sub.PSAPI.DLL_EnumProcessModules
test eax, eax
jne 0x18013444
call fcn.1800fc86
movzx ecx, byte [0x180fb8f9]
neg ecx
sbb ecx, ecx
and ecx, 0x180fbba0
mov edi, eax
je 0x1801340f
xor ebx, ebx
push esi
inc ebx
push ebx
mov dword [ebp - 0x228], ecx
call fcn.18001d8a
push edi
mov dword [ebp - 0x224], eax
lea eax, [ebp - 0x228]
push str._EnumProcessModules_failed__0x_x_
push eax
mov dword [ebp - 0x220], esi
mov dword [ebp - 0x21c], ebx
call fcn.18001000
add esp, 0xc
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
push eax
call fcn.180139fe
pop ecx
test al, al
je 0x1801334d
push dword [ebp - 0x230]
mov ecx, dword [ebp - 0x218]
push dword [ebp - 0x22c]
call fcn.18013049
pop ecx
pop ecx
mov bl, al
jmp 0x1801334f
mov esi, dword [ebp - 0x238]
xor ebx, ebx
shr esi, 2
inc ebx
cmp esi, ebx
jle 0x18013456
mov esi, ebx
test esi, esi
jle 0x1801334d
push 0x208
lea eax, [ebp - 0x214]
push 0
push eax
call fcn.1809d820
add esp, 0xc
push 0x104
lea eax, [ebp - 0x214]
push eax
push dword [ebp + edi*4 - 0x123c]
push dword [ebp - 0x218]
call sub.PSAPI.DLL_GetModuleFileNameExW
test eax, eax
jne 0x180134e9
movzx ecx, byte [0x180fb8f9]
neg ecx
sbb ecx, ecx
and ecx, 0x180fbba0
je 0x1801350a
push 0xfffffffffffffffe
push ebx
mov dword [ebp - 0x228], ecx
call fcn.18001d8a
mov dword [ebp - 0x224], eax
mov dword [ebp - 0x220], 0xfffffffe
mov dword [ebp - 0x21c], ebx
call fcn.1800fc86
push eax
lea eax, [ebp - 0x228]
push str._GetModuleFileNameEx_fail_x_x_
push eax
call fcn.18001000
add esp, 0xc
jmp 0x1801350a
push dword [ebp - 0x230]
lea eax, [ebp - 0x214]
push dword [ebp - 0x22c]
call fcn.18012f87
pop ecx
pop ecx
test al, al
jne 0x1801334f
inc edi
cmp edi, esi
jl 0x1801345e
jmp 0x1801334d