Function at 0x450900
Capabilities:
Enumerate process modules

Disassembly:
push ebx
mov ebx, esp
test dword [esp], esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x60946b
mov eax, dword fs:[0]
push eax
push ebx
mov eax, 0x1840
call fcn.005dfa60
mov eax, dword [0x6a704c]
xor eax, ebp
mov dword [ebp - 0x14], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edi, ecx
mov dword [ebp - 0x1844], edi
lea eax, [ebp - 0x1848]
push eax
push 0x1000
lea eax, [ebp - 0x17e8]
push eax
call dword [sym.imp.PSAPI.DLL_EnumProcesses]
test eax, eax
jne 0x450a4e
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
lea ecx, [ebp - 0x1818]
call fcn.0044f200
push 0x15
push str.EnumProcesses_error:
push ecx
lea ecx, [ebp - 0x1818]
mov dword [ebp - 4], 0
call fcn.004474c0
mov ecx, 0x6a7e6c
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x1800], xmm0
movq xmm0, qword [eax + 0x10]
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
lea eax, [ebp - 0x1800]
push eax
movq qword [ebp - 0x17f0], xmm0
call fcn.004470a0
mov edx, dword [ebp - 0x17ec]
cmp edx, 0x10
jb 0x450a11
mov ecx, dword [ebp - 0x1800]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x450a07
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x450d03
push edx
push ecx
call fcn.005df326
add esp, 8
mov edx, dword [ebp - 0x1804]
cmp edx, 0x10
jb 0x450ce3
mov ecx, dword [ebp - 0x1818]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x450cd9
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x450d03
jmp 0x450cd9
mov eax, dword [ebp - 0x1848]
shr eax, 2
mov dword [ebp - 0x183c], eax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
xor esi, esi
mov ecx, eax
mov dword [ebp - 0x1834], ecx
mov dword [ebp - 0x1838], esi
cmp dword [ebp - 0x183c], esi
jbe 0x450bae
nop
mov eax, dword [ebp + esi*4 - 0x17e8]
cmp ecx, eax
je 0x450b9b
push eax
push 0
push 0x100411
call dword [sym.imp.KERNEL32.dll_OpenProcess]
mov dword [ebp - 0x1840], eax
test eax, eax
je 0x450b95
push 0x3e8
lea ecx, [ebp - 0x7e8]
push ecx
push 0
push eax
call dword [sym.imp.PSAPI.DLL_GetModuleBaseNameW]
lea edx, [ebp - 0x7e8]
lea ecx, [ebp - 0x1800]
call fcn.0044e3a0
cmp dword [ebp - 0x17ec], 0x10
lea ecx, [ebp - 0x1800]
mov edx, dword [ebp - 0x1800]
lea edi, [ebp - 0x1800]
mov eax, dword [ebp - 0x17f0]
lea esi, [ebp - 0x1800]
cmovae ecx, edx
cmovae edi, edx
add eax, ecx
cmp dword [ebp - 0x17ec], 0x10
mov dword [ebp - 0x184c], eax
cmovae esi, edx
cmp esi, eax
je 0x450b2c
sub edi, esi
movsx eax, byte [esi]
push eax
call fcn.005e8a1a
mov byte [edi + esi], al
add esp, 4
inc esi
cmp esi, dword [ebp - 0x184c]
jne 0x450b14
mov edi, dword [ebp - 0x1844]
lea ecx, [ebp - 0x1800]
mov esi, dword [ebp - 0x1800]
mov edx, edi
call fcn.0044d9a0
test al, al
jne 0x450bc3
push dword [ebp - 0x1840]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov edx, dword [ebp - 0x17ec]
cmp edx, 0x10
jb 0x450b8f
mov ecx, dword [ebp - 0x1800]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x450b85
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x450d0d
push edx
push ecx
call fcn.005df326
add esp, 8
mov esi, dword [ebp - 0x1838]
mov ecx, dword [ebp - 0x1834]
inc esi
mov dword [ebp - 0x1838], esi
cmp esi, dword [ebp - 0x183c]
jb 0x450a80
mov ecx, dword [edi + 0x10]
mov eax, bind
sub eax, ecx
cmp eax, 8
jb 0x450d08
jmp 0x450c04
mov eax, dword [ebp - 0x17ec]
cmp eax, 0x10
jb 0x450bf9
lea ecx, [eax + 1]
mov eax, esi
cmp ecx, 0x1000
jb 0x450bef
mov esi, dword [esi - 4]
add ecx, 0x23
sub eax, esi
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x450d0d
push ecx
push esi
call fcn.005df326
add esp, 8
mov eax, dword [ebp - 0x1840]
jmp 0x450ce5
cmp dword [edi + 0x14], 0x10
jb 0x450c0c
mov edi, dword [edi]
push ecx
push edi
push 8
push str.Process
push ecx
push dword [ebp - 0x1844]
lea ecx, [ebp - 0x1830]
call fcn.004473d0
push str._not_found
lea ecx, [ebp - 0x1830]
mov dword [ebp - 4], 1
call fcn.00446fe0
mov ecx, 0x6a7e6c
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x1800], xmm0
movq xmm0, qword [eax + 0x10]
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
lea eax, [ebp - 0x1800]
push eax
movq qword [ebp - 0x17f0], xmm0
call fcn.004470a0
mov edx, dword [ebp - 0x17ec]
cmp edx, 0x10
jb 0x450cad
mov ecx, dword [ebp - 0x1800]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x450ca3
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x450d12
push edx
push ecx
call fcn.005df326
add esp, 8
mov edx, dword [ebp - 0x181c]
cmp edx, 0x10
jb 0x450ce3
mov ecx, dword [ebp - 0x1830]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x450cd9
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x450d12
push edx
push ecx
call fcn.005df326
add esp, 8
xor eax, eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.005df097
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret
call fcn.005e4e95
call fcn.00446d70
call fcn.005e4e95
call fcn.005e4e95
int3