Function at 0x4265a0
Capabilities:
Enumerate process modules

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5b7721
mov eax, dword fs:[0]
push eax
push ecx
mov eax, 0x40d8
call fcn.0058e010
mov eax, dword [0x62dc50]
xor eax, ebp
mov dword [ebp - 0x14], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
mov eax, dword [ebp + 0x24]
mov esi, ecx
mov dword [ebp - 0x40cc], esi
mov dword [ebp - 0x40e4], eax
xor ebx, ebx
push 0x3ffc
lea ecx, [ebp - 0x4014]
push ebx
mov dword [ebp - 4], ebx
push ecx
mov dword [ebp - 0x40d8], ebx
mov dword [ebp - 0x4018], ebx
call fcn.0058c670
add esp, 0xc
push ebx
push 0x5ee295
lea ecx, [ebp - 0x4034]
mov dword [ebp - 0x40d0], ebx
mov dword [ebp - 0x4020], 0xf
mov dword [ebp - 0x4024], ebx
mov byte [ebp - 0x4034], bl
call fcn.004049e0
lea edx, [ebp - 0x40d0]
push edx
push 0x4000
lea eax, [ebp - 0x4018]
push eax
mov byte [ebp - 4], 2
call dword [sym.imp.PSAPI.DLL_EnumProcesses]
test eax, eax
jne 0x4267a0
cmp dword [esi + 0x6c], ebx
je 0x426799
push 0xa
call dword [sym.imp.KERNEL32.dll_GetLastError]
push ebx
push eax
lea ecx, [ebp - 0x4088]
push ecx
call fcn.00427860
add esp, 0x10
mov esi, eax
mov byte [ebp - 4], 3
push 0x18
mov edi, 0xf
push str.EnumProcesses_:_error_:
lea ecx, [ebp - 0x406c]
mov dword [ebp - 0x4058], edi
mov dword [ebp - 0x405c], ebx
mov byte [ebp - 0x406c], bl
call fcn.004049e0
mov eax, esi
lea ecx, [ebp - 0x406c]
lea ebx, [ebp - 0x4050]
mov byte [ebp - 4], 4
call fcn.0040a820
mov edx, dword [ebp - 0x40cc]
mov byte [ebp - 4], 5
mov ecx, dword [edx + 0x6c]
mov edx, dword [ecx]
push 6
push eax
mov eax, dword [edx + 0xe8]
call eax
mov esi, 0x10
cmp dword [ebp - 0x403c], esi
jb 0x4266fd
mov ecx, dword [ebp - 0x4050]
push ecx
call fcn.0047f7fb
add esp, 4
xor ebx, ebx
mov dword [ebp - 0x403c], edi
mov dword [ebp - 0x4040], ebx
mov byte [ebp - 0x4050], bl
cmp dword [ebp - 0x4058], esi
jb 0x426728
mov edx, dword [ebp - 0x406c]
push edx
call fcn.0047f7fb
add esp, 4
mov dword [ebp - 0x4058], edi
mov dword [ebp - 0x405c], ebx
mov byte [ebp - 0x406c], bl
cmp dword [ebp - 0x4074], esi
jb 0x426751
mov eax, dword [ebp - 0x4088]
push eax
call fcn.0047f7fb
add esp, 4
xor ebx, ebx
cmp dword [ebp - 0x4020], esi
jb 0x42676a
mov ecx, dword [ebp - 0x4034]
push ecx
call fcn.0047f7fb
add esp, 4
mov dword [ebp - 0x4020], 0xf
mov dword [ebp - 0x4024], ebx
mov byte [ebp - 0x4034], 0
cmp dword [ebp + 0x1c], esi
jb 0x426792
mov edx, dword [ebp + 8]
push edx
call fcn.0047f7fb
add esp, 4
xor eax, eax
jmp 0x426b1f
mov esi, 0x10
jmp 0x426753
mov edi, dword [ebp - 0x40d0]
shr edi, 2
mov dword [ebp - 0x40e0], edi
mov dword [ebp - 0x40dc], ebx
cmp ebx, edi
jae 0x426ad1
lea eax, [ebp + ebx*4 - 0x4018]
mov dword [ebp - 0x40e8], eax
mov eax, dword [eax]
push eax
push 0
push 0x1fffff
call dword [sym.imp.KERNEL32.dll_OpenProcess]
mov esi, eax
mov dword [ebp - 0x40d4], esi
test esi, esi
je 0x4269a5
push 0
push 0x5ee295
lea ecx, [ebp - 0x4034]
call fcn.004049e0
mov ecx, dword [ebp - 0x40cc]
push ecx
lea ecx, [ebp - 0x4034]
mov edx, esi
call fcn.00426b40
lea edx, [ebp + 8]
push edx
lea eax, [ebp - 0x4088]
push eax
call fcn.00427ed0
add esp, 8
mov esi, eax
lea ecx, [ebp - 0x4034]
push ecx
lea edx, [ebp - 0x4050]
push edx
mov byte [ebp - 4], 6
call fcn.00427ed0
add esp, 8
mov ebx, dword [esi + 0x10]
mov edx, 0x10
cmp dword [esi + 0x14], edx
jb 0x426850
mov edi, dword [esi]
jmp 0x426852
mov edi, esi
mov esi, dword [eax + 0x10]
mov ecx, esi
cmp ecx, esi
jae 0x42685b
mov ecx, esi
cmp esi, ebx
jb 0x426863
mov ecx, ebx
cmp dword [eax + 0x14], edx
jb 0x42686c
mov edx, dword [eax]
jmp 0x42686e
mov edx, eax
mov eax, ecx
mov ecx, edi
call fcn.00401440
test eax, eax
jne 0x42688d
cmp esi, ebx
jae 0x426884
or eax, 0xffffffff
jmp 0x42688b
xor eax, eax
cmp esi, ebx
setne al
test eax, eax
mov edi, 0x10
sete bl
cmp dword [ebp - 0x403c], edi
jb 0x4268ac
mov eax, dword [ebp - 0x4050]
push eax
call fcn.0047f7fb
add esp, 4
mov byte [ebp - 4], 2
mov dword [ebp - 0x403c], 0xf
mov dword [ebp - 0x4040], 0
mov byte [ebp - 0x4050], 0
cmp dword [ebp - 0x4074], edi
jb 0x4268e2
mov ecx, dword [ebp - 0x4088]
push ecx
call fcn.0047f7fb
add esp, 4
test bl, bl
je 0x42690f
mov eax, dword [ebp - 0x40e4]
mov edx, dword [ebp - 0x40d4]
mov dword [ebp - 0x40d8], edx
test eax, eax
je 0x426ad6
mov ecx, dword [ebp - 0x40e8]
mov edx, dword [ecx]
mov dword [eax], edx
jmp 0x426ad6
mov esi, dword [ebp - 0x4020]
mov edx, dword [ebp - 0x4034]
cmp esi, edi
jae 0x426925
lea edx, [ebp - 0x4034]
xor eax, eax
mov ecx, 0x5ee295
call fcn.00401440
test eax, eax
jne 0x42698c
cmp dword [ebp - 0x4024], eax
setne al
test eax, eax
jne 0x42698c
cmp esi, edi
jb 0x426955
mov eax, dword [ebp - 0x4034]
push eax
call fcn.0047f7fb
add esp, 4
mov dword [ebp - 0x4020], 0xf
mov dword [ebp - 0x4024], 0
mov byte [ebp - 0x4034], 0
cmp dword [ebp + 0x1c], edi
jb 0x426792
mov ecx, dword [ebp + 8]
push ecx
call fcn.0047f7fb
add esp, 4
xor eax, eax
jmp 0x426b1f
mov edx, dword [ebp - 0x40d4]
push edx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov ebx, dword [ebp - 0x40dc]
mov edi, dword [ebp - 0x40e0]
inc ebx
jmp 0x4267af
mov edi, 0x10
cmp dword [ebp - 0x4020], edi
jb 0x426aed
mov eax, dword [ebp - 0x4034]
push eax
call fcn.0047f7fb
add esp, 4
mov dword [ebp - 0x4020], 0xf
mov dword [ebp - 0x4024], 0
mov byte [ebp - 0x4034], 0
cmp dword [ebp + 0x1c], edi
jb 0x426b19
mov ecx, dword [ebp + 8]
push ecx
call fcn.0047f7fb
add esp, 4
mov eax, dword [ebp - 0x40d8]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.00587964
mov esp, ebp
pop ebp
ret 0x20