Function at 0x4101c0
Capabilities:
Enumerate process modules

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4920fe
mov eax, dword fs:[0]
push eax
mov eax, 0x1078
call fcn.0047a080
push esi
mov eax, dword [0x4bad80]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x1068], 0
mov dword [ebp - 4], 0
lea eax, [ebp + 8]
push eax
lea ecx, [ebp - 0x18]
call fcn.0040152d
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x14]
call fcn.0040140f
mov byte [ebp - 4], 2
mov ecx, dword [ebp + 0x10]
push ecx
cmp dword [ebp + 0xc], 0
setne dl
lea edx, [edx*4 + 0x43]
movsx eax, dl
push eax
push str.__c__ld
lea ecx, [ebp - 0x14]
push ecx
call fcn.00403328
add esp, 0x10
lea edx, [ebp - 0x14]
push edx
lea ecx, [ebp - 0x18]
call fcn.00403510
call fcn.004100a0
lea eax, [ebp - 0x1c]
push eax
push 0x1000
lea ecx, [ebp - 0x101c]
push ecx
call sub.PSAPI.DLL_EnumProcesses
test eax, eax
je 0x410276
mov edx, dword [ebp - 0x1c]
shr edx, 2
mov dword [ebp - 0x10], edx
jmp 0x41027d
mov dword [ebp - 0x10], 0
mov dword [ebp - 0x1020], 0
jmp 0x410298
mov eax, dword [ebp - 0x1020]
add eax, 1
mov dword [ebp - 0x1020], eax
mov ecx, 0x4bc73c
call fcn.0041ad00
cmp dword [ebp - 0x1020], eax
jge 0x41070e
mov ecx, dword [ebp - 0x1020]
push ecx
mov ecx, 0x4bc73c
call fcn.00417600
push eax
lea ecx, [ebp - 0x1024]
call fcn.0040152d
mov byte [ebp - 4], 3
mov dword [ebp - 0x1030], 0
mov dword [ebp - 0x102c], 0
mov dword [ebp - 0x1028], 0
push 0
push 0x49b90c
lea ecx, [ebp - 0x1024]
call fcn.0040559d
mov dword [ebp - 0x102c], eax
cmp dword [ebp - 0x102c], 0xffffffff
jne 0x41031f
lea ecx, [ebp - 0x1024]
call fcn.004012d0
mov dword [ebp - 0x102c], eax
push 0
lea ecx, [ebp - 0x14]
call fcn.00401155
push eax
lea ecx, [ebp - 0x1024]
call fcn.0040559d
mov dword [ebp - 0x1028], eax
cmp dword [ebp - 0x1028], 0xffffffff
je 0x41035c
lea ecx, [ebp - 0x14]
call fcn.004012d0
mov edx, dword [ebp - 0x1028]
lea eax, [edx + eax + 1]
mov dword [ebp - 0x1028], eax
cmp dword [ebp - 0x1028], 0
je 0x4103c7
cmp dword [ebp - 0x102c], 0
je 0x4103c7
mov ecx, dword [ebp - 0x102c]
cmp ecx, dword [ebp - 0x1028]
jle 0x4103c7
mov edx, dword [ebp - 0x102c]
sub edx, dword [ebp - 0x1028]
push edx
mov eax, dword [ebp - 0x1028]
push eax
lea ecx, [ebp - 0x1034]
push ecx
lea ecx, [ebp - 0x1024]
call fcn.00405a8a
lea ecx, [ebp - 0x1034]
call fcn.00401155
push eax
call fcn.00479a3e
add esp, 4
mov dword [ebp - 0x1030], eax
lea ecx, [ebp - 0x1034]
call fcn.0045928a
lea ecx, [ebp - 0x1024]
call fcn.004012d0
mov esi, eax
lea ecx, [ebp - 0x18]
call fcn.004012d0
cmp esi, eax
jl 0x410444
lea ecx, [ebp - 0x18]
call fcn.00401155
push eax
lea ecx, [ebp - 0x18]
call fcn.004012d0
push eax
lea edx, [ebp - 0x104c]
push edx
lea ecx, [ebp - 0x1024]
call fcn.00405b08
mov dword [ebp - 0x106c], eax
mov eax, dword [ebp - 0x106c]
mov dword [ebp - 0x1070], eax
mov byte [ebp - 4], 4
mov ecx, dword [ebp - 0x1068]
or ecx, 1
mov dword [ebp - 0x1068], ecx
mov ecx, dword [ebp - 0x1070]
call fcn.0040124b
test eax, eax
jne 0x410444
mov dword [ebp - 0x1074], 1
jmp 0x41044e
mov dword [ebp - 0x1074], 0
mov dl, byte [ebp - 0x1074]
mov byte [ebp - 0x1045], dl
mov dword [ebp - 4], 3
mov eax, dword [ebp - 0x1068]
and eax, 1
je 0x41047e
and dword [ebp - 0x1068], 0xfffffffe
lea ecx, [ebp - 0x104c]
call fcn.0045928a
movzx ecx, byte [ebp - 0x1045]
test ecx, ecx
je 0x41052f
mov dword [ebp - 0x1038], 0
jmp 0x4104a8
mov edx, dword [ebp - 0x1038]
add edx, 1
mov dword [ebp - 0x1038], edx
mov eax, dword [ebp - 0x1038]
cmp eax, dword [ebp - 0x10]
jae 0x41052a
mov ecx, dword [ebp - 0x1038]
cmp dword [ebp + ecx*4 - 0x101c], 0
je 0x410525
mov edx, dword [ebp - 0x1038]
mov eax, dword [ebp + edx*4 - 0x101c]
cmp eax, dword [ebp - 0x1030]
jne 0x410525
mov ecx, dword [ebp - 0x1020]
mov dword [ebp - 0x1050], ecx
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x1024]
call fcn.0045928a
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x14]
call fcn.0045928a
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x18]
call fcn.0045928a
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 8]
call fcn.0045928a
mov eax, dword [ebp - 0x1050]
jmp 0x410745
jmp 0x410499
jmp 0x4106fa
mov dword [ebp - 0x103c], 0
lea edx, [ebp - 0x103c]
push edx
push 0x49b910
lea eax, [ebp - 0x1040]
push eax
lea ecx, [ebp - 0x1024]
call fcn.00407767
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x1040]
call fcn.004055d6
movzx ecx, al
test ecx, ecx
jne 0x4106eb
lea ecx, [ebp + 8]
call fcn.00401155
push eax
lea ecx, [ebp + 8]
call fcn.004012d0
push eax
lea edx, [ebp - 0x1058]
push edx
lea ecx, [ebp - 0x1040]
call fcn.00405b08
mov dword [ebp - 0x1078], eax
mov eax, dword [ebp - 0x1078]
mov dword [ebp - 0x107c], eax
mov byte [ebp - 4], 6
mov ecx, dword [ebp - 0x107c]
call fcn.0040124b
neg eax
sbb eax, eax
add eax, 1
mov byte [ebp - 0x1051], al
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x1058]
call fcn.0045928a
movzx ecx, byte [ebp - 0x1051]
test ecx, ecx
je 0x410691
mov dword [ebp - 0x1044], 0
jmp 0x4105fc
mov edx, dword [ebp - 0x1044]
add edx, 1
mov dword [ebp - 0x1044], edx
mov eax, dword [ebp - 0x1044]
cmp eax, dword [ebp - 0x10]
jae 0x410691
mov ecx, dword [ebp - 0x1044]
cmp dword [ebp + ecx*4 - 0x101c], 0
je 0x41068c
mov edx, dword [ebp - 0x1044]
mov eax, dword [ebp + edx*4 - 0x101c]
cmp eax, dword [ebp - 0x1030]
jne 0x41068c
mov ecx, dword [ebp - 0x1020]
mov dword [ebp - 0x105c], ecx
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x1040]
call fcn.0045928a
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x1024]
call fcn.0045928a
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x14]
call fcn.0045928a
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x18]
call fcn.0045928a
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 8]
call fcn.0045928a
mov eax, dword [ebp - 0x105c]
jmp 0x410745
jmp 0x4105ed
lea edx, [ebp - 0x103c]
push edx
push 0x49b914
lea eax, [ebp - 0x1060]
push eax
lea ecx, [ebp - 0x1024]
call fcn.00407767
mov dword [ebp - 0x1080], eax
mov ecx, dword [ebp - 0x1080]
mov dword [ebp - 0x1084], ecx
mov byte [ebp - 4], 7
mov edx, dword [ebp - 0x1084]
push edx
lea ecx, [ebp - 0x1040]
call fcn.00401712
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x1060]
call fcn.0045928a
jmp 0x41055b
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x1040]
call fcn.0045928a
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x1024]
call fcn.0045928a
jmp 0x410289
mov dword [ebp - 0x1064], 0xffffffff
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x14]
call fcn.0045928a
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x18]
call fcn.0045928a
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 8]
call fcn.0045928a
mov eax, dword [ebp - 0x1064]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop esi
mov esp, ebp
pop ebp
ret