Function at 0x41f760
Capabilities:
Enumerate process modules

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x445fa0
mov eax, dword fs:[0]
push eax
mov eax, 0x1160
call fcn.00424db0
mov eax, dword [0x459020]
xor eax, ebp
mov dword [ebp - 0x14], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov esi, dword [ebp + 8]
lea ecx, [ebp - 0x1138]
xor bl, bl
mov edx, 2
mov byte [ebp - 0x1151], bl
call fcn.00411db0
push 0x1000
lea eax, [ebp - 0x111c]
mov dword [ebp - 4], 0
push 0
push eax
call fcn.004259e0
add esp, 0xc
mov dword [ebp - 0x1120], 0
push esi
push 0
push 0x410
call dword [sym.imp.KERNEL32.dll_OpenProcess]
mov edx, dword [ebp - 0x1138]
mov esi, eax
mov dword [ebp - 0x115c], esi
test esi, esi
je 0x41fa42
push 3
lea eax, [ebp - 0x1120]
push eax
push 0x1000
lea eax, [ebp - 0x111c]
push eax
push esi
call dword [sym.imp.KERNEL32.dll_K32EnumProcessModulesEx]
test eax, eax
je 0x41fa35
xor ebx, ebx
test dword [ebp - 0x1120], 0xfffffffc
mov dword [ebp - 0x1158], ebx
jbe 0x41fa35
mov edi, dword [ebp - 0x1128]
nop word [eax + eax]
push 0x104
lea eax, [ebp - 0x11c]
push 0
push eax
call fcn.004259e0
add esp, 0xc
lea eax, [ebp - 0x11c]
push 0x104
push eax
push dword [ebp + ebx*4 - 0x111c]
push esi
call dword [sym.imp.KERNEL32.dll_K32GetModuleFileNameExA]
test eax, eax
je 0x41fa17
lea ecx, [ebp - 0x11c]
mov dword [ebp - 0x1150], 0
mov dword [ebp - 0x1140], 0
lea edx, [ecx + 1]
mov dword [ebp - 0x113c], 0xf
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x41f8a0
sub ecx, edx
lea eax, [ebp - 0x11c]
push ecx
push eax
lea ecx, [ebp - 0x1150]
call fcn.004018a0
cmp dword [ebp - 0x1124], 0x10
lea esi, [ebp - 0x1138]
mov ebx, dword [ebp - 0x1150]
lea edx, [ebp - 0x1150]
cmovae esi, dword [ebp - 0x1138]
cmp dword [ebp - 0x113c], 0x10
mov eax, dword [ebp - 0x1140]
cmovae edx, ebx
mov dword [ebp - 0x1168], esi
mov dword [ebp - 0x116c], edx
cmp edi, eax
ja 0x41f9cf
test edi, edi
je 0x41f9c8
movsx ecx, byte [esi]
sub eax, edi
inc eax
mov dword [ebp - 0x1164], ecx
add eax, edx
mov dword [ebp - 0x1160], eax
sub eax, edx
push eax
push ecx
push edx
call fcn.00425b50
mov edi, eax
add esp, 0xc
test edi, edi
je 0x41f9cf
mov eax, esi
mov edx, edi
mov esi, dword [ebp - 0x1128]
sub esi, 4
jb 0x41f953
mov ecx, dword [edx]
cmp ecx, dword [eax]
jne 0x41f958
add edx, 4
add eax, 4
sub esi, 4
jae 0x41f942
cmp esi, 0xfffffffc
je 0x41f98c
mov cl, byte [edx]
cmp cl, byte [eax]
jne 0x41f985
cmp esi, 0xfffffffd
je 0x41f98c
mov cl, byte [edx + 1]
cmp cl, byte [eax + 1]
jne 0x41f985
cmp esi, 0xfffffffe
je 0x41f98c
mov cl, byte [edx + 2]
cmp cl, byte [eax + 2]
jne 0x41f985
cmp esi, 0xffffffff
je 0x41f98c
mov cl, byte [edx + 3]
cmp cl, byte [eax + 3]
je 0x41f98c
sbb eax, eax
or eax, 1
jmp 0x41f98e
xor eax, eax
test eax, eax
je 0x41f9bd
mov eax, dword [ebp - 0x1160]
inc edi
sub eax, edi
push eax
push dword [ebp - 0x1164]
push edi
call fcn.00425b50
mov esi, dword [ebp - 0x1168]
mov edi, eax
add esp, 0xc
test edi, edi
jne 0x41f933
jmp 0x41f9cf
sub edi, dword [ebp - 0x116c]
cmp edi, 0xffffffff
je 0x41f9cf
mov byte [ebp - 0x1151], 1
mov eax, dword [ebp - 0x113c]
cmp eax, 0x10
jb 0x41fa05
lea ecx, [eax + 1]
mov eax, ebx
cmp ecx, 0x1000
jb 0x41f9fb
mov ebx, dword [ebx - 4]
add ecx, 0x23
sub eax, ebx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41fa94
push ecx
push ebx
call fcn.00423b44
add esp, 8
mov esi, dword [ebp - 0x115c]
mov ebx, dword [ebp - 0x1158]
mov edi, dword [ebp - 0x1128]
mov eax, dword [ebp - 0x1120]
inc ebx
shr eax, 2
mov dword [ebp - 0x1158], ebx
cmp ebx, eax
jb 0x41f840
mov bl, byte [ebp - 0x1151]
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov edx, dword [ebp - 0x1138]
mov eax, dword [ebp - 0x1124]
cmp eax, 0x10
jb 0x41fa74
lea ecx, [eax + 1]
mov eax, edx
cmp ecx, 0x1000
jb 0x41fa6a
mov edx, dword [edx - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41fa94
push ecx
push edx
call fcn.00423b44
add esp, 8
mov al, bl
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.00423b13
mov esp, ebp
pop ebp
ret 4
call fcn.0042823f
int3