Function at 0x407947
Capabilities:
Enumerate process modules

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x468
mov eax, dword [0x4265d4]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword [ebp + 8]
push ebx
push esi
push edi
push 7
pop ebx
mov dword [ebp - 0x464], eax
mov eax, dword [ebp + 0xc]
push ebx
push 0x42734c
mov dword [ebp - 0x460], eax
mov byte [ebp - 0x459], 1
call fcn.00406d33
push eax
lea esi, [ebp - 0x43c]
call fcn.004012ca
push 5
pop edi
push edi
push 0x42735c
call fcn.00406d33
push eax
lea esi, [ebp - 0x420]
call fcn.004012ca
push 6
push 0x427368
call fcn.00406d33
push eax
lea esi, [ebp - 0x404]
call fcn.004012ca
push 4
push 0x427374
call fcn.00406d33
push eax
lea esi, [ebp - 0x3e8]
call fcn.004012ca
push 8
push str.x_t
call fcn.00406d33
push eax
lea esi, [ebp - 0x3cc]
call fcn.004012ca
push ebx
push 0x42738c
call fcn.00406d33
push eax
lea esi, [ebp - 0x3b0]
call fcn.004012ca
push edi
push 0x42739c
call fcn.00406d33
push eax
lea esi, [ebp - 0x394]
call fcn.004012ca
push 9
push str.9_b
call fcn.00406d33
push eax
lea esi, [ebp - 0x378]
call fcn.004012ca
push ebx
push 0x4273bc
call fcn.00406d33
push eax
lea esi, [ebp - 0x35c]
call fcn.004012ca
push edi
push 0x4273cc
call fcn.00406d33
push eax
lea esi, [ebp - 0x340]
call fcn.004012ca
push 3
push 0x4273d8
call fcn.00406d33
push eax
lea esi, [ebp - 0x324]
call fcn.004012ca
push 8
push 0x4273e0
call fcn.00406d33
push eax
lea esi, [ebp - 0x308]
call fcn.004012ca
push edi
push 0x4273f0
call fcn.00406d33
push eax
lea esi, [ebp - 0x2ec]
call fcn.004012ca
push ebx
push 0x4273fc
call fcn.00406d33
push eax
lea esi, [ebp - 0x2d0]
call fcn.004012ca
push 6
push 0x42740c
call fcn.00406d33
push eax
lea esi, [ebp - 0x2b4]
call fcn.004012ca
push 6
push 0x427418
call fcn.00406d33
push eax
lea esi, [ebp - 0x298]
call fcn.004012ca
push edi
push 0x427424
call fcn.00406d33
push eax
lea esi, [ebp - 0x27c]
call fcn.004012ca
push 6
push 0x427430
call fcn.00406d33
push eax
lea esi, [ebp - 0x260]
call fcn.004012ca
push ebx
push 0x42743c
call fcn.00406d33
push eax
lea esi, [ebp - 0x244]
call fcn.004012ca
push 4
push 0x42744c
call fcn.00406d33
push eax
lea esi, [ebp - 0x228]
call fcn.004012ca
push 0x1f4
mov ecx, edi
lea eax, [ebp - 0x1f8]
push 0
mov esi, str._unknown_
lea edi, [ebp - 0x20c]
push eax
rep movsd dword es:[edi], dword [esi]
call fcn.00415420
add esp, 0xc
push dword [ebp - 0x460]
push 0
push 0x410
call dword [sym.imp.KERNEL32.dll_OpenProcess]
mov ebx, eax
test ebx, ebx
je 0x407c3d
lea eax, [ebp - 0x468]
push eax
push 4
lea eax, [ebp - 0x460]
push eax
push ebx
call dword [sym.imp.PSAPI.DLL_EnumProcessModules]
test eax, eax
je 0x407c36
push 0x104
lea eax, [ebp - 0x20c]
push eax
push dword [ebp - 0x460]
push ebx
call dword [sym.imp.PSAPI.DLL_GetModuleBaseNameW]
lea eax, [ebp - 0x20c]
push eax
lea esi, [ebp - 0x458]
call fcn.004012ca
mov edi, dword [ebp - 0x464]
mov esi, eax
call fcn.00401370
xor edi, edi
push edi
push 1
lea ecx, [ebp - 0x458]
call fcn.00401455
lea esi, [ebp - 0x43c]
cmp dword [esi + 0x14], 8
mov ecx, dword [esi + 0x10]
jb 0x407c0e
mov eax, dword [esi]
jmp 0x407c10
mov eax, esi
push ecx
mov ecx, dword [ebp - 0x464]
push eax
xor eax, eax
call fcn.004013b7
cmp eax, 0xffffffff
jne 0x407c2f
inc edi
add esi, 0x1c
cmp edi, 0x14
jl 0x407c01
jmp 0x407c36
mov byte [ebp - 0x459], 0
push ebx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push 0x13
lea esi, [ebp - 0x20c]
pop edi
push 0
sub esi, 0x1c
push 1
mov ecx, esi
call fcn.00401455
dec edi
jns 0x407c46
mov ecx, dword [ebp - 4]
mov al, byte [ebp - 0x459]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.0040c14c
leave
ret 8