Function at 0x10048760
Capabilities:
Enumerate process modules

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x3064
call fcn.100c15d0
push ebx
xor ebx, ebx
lea eax, [ebp - 0x3064]
push 0x2008
push ebx
push eax
mov dword [ebp - 0x20], ebx
call fcn.100c3490
add esp, 0xc
cmp byte [0x1042246c], bl
je 0x10048877
push esi
push edi
jmp 0x100487a0
imul eax, ebx, 0x1004
lea esi, [ebp - 0x3064]
add esi, eax
lea eax, [ebx + 1]
mov dword [ebp - 8], esi
and eax, 0x80000001
jns 0x100487c0
dec eax
or eax, 0xfffffffe
inc eax
imul eax, eax, 0x1004
lea ecx, [ebp - 0x3064]
add eax, ecx
mov dword [ebp - 4], eax
lea eax, [ebp - 0x28]
push eax
call dword [sym.imp.KERNEL32.dll_GetSystemTimeAsFileTime]
mov ecx, dword [ebp - 0x24]
xor eax, eax
add eax, dword [ebp - 0x28]
mov dword [ebp - 0x1c], eax
lea eax, [ebp - 0xc]
push eax
push 0x1000
adc ecx, 0
push esi
mov dword [ebp - 0x18], ecx
call sub.KERNEL32.dll_K32EnumProcesses
test eax, eax
je 0x10048819
mov eax, dword [ebp - 0xc]
push 0x10048bd0
push 4
shr eax, 2
push eax
push esi
call fcn.100ccd70
mov eax, dword [ebp - 0xc]
add esp, 0x10
mov ecx, dword [ebp - 4]
shr eax, 2
mov dword [esi + 0x1000], eax
mov edx, dword [ecx + 0x1000]
test edx, edx
je 0x10048846
xor edi, edi
xor ebx, ebx
cmp edi, dword [esi + 0x1000]
jl 0x10048880
cmp ebx, edx
jl 0x1004894c
mov ebx, dword [ebp - 0x20]
inc ebx
and ebx, 0x80000001
jns 0x10048854
dec ebx
or ebx, 0xfffffffe
inc ebx
push 0x3e8
push dword [0x10422484]
mov dword [ebp - 0x20], ebx
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
cmp byte [0x1042246c], 0
jne 0x100487a0
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
lea eax, [edi*4]
cmp ebx, dword [ecx + 0x1000]
je 0x1004889e
mov edx, dword [ebp - 4]
mov ecx, dword [eax + esi]
cmp ecx, dword [edx + ebx*4]
jae 0x10048949
mov eax, dword [eax + esi]
xor ecx, ecx
inc edi
mov dword [ebp - 0x14], eax
mov word [ebp - 0x105c], cx
cmp dword [0x1042247c], ecx
jne 0x100488be
cmp dword [0x10422478], ecx
je 0x1004891c
push eax
push 0
push 0x400
call dword [sym.imp.KERNEL32.dll_OpenProcess]
mov esi, eax
test esi, esi
je 0x10048916
mov eax, dword [0x1042247c]
mov dword [ebp - 0x10], 0x400
test eax, eax
je 0x100488f4
lea ecx, [ebp - 0x10]
push ecx
lea ecx, [ebp - 0x105c]
push ecx
push 1
push esi
call eax
jmp 0x1004890f
mov eax, dword [0x10422478]
test eax, eax
je 0x1004890f
push 0x400
lea ecx, [ebp - 0x105c]
push ecx
push esi
call eax
mov dword [ebp - 0x10], eax
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [ebp - 0x14]
mov esi, dword [ebp - 8]
lea ecx, [ebp - 0x28]
push ecx
push 0
push 0
push eax
lea eax, [ebp - 0x105c]
push eax
push dword [ebp - 0x18]
push dword [ebp - 0x1c]
call fcn.10048600
mov ecx, dword [ebp - 4]
add esp, 0x1c
cmp edi, dword [esi + 0x1000]
jl 0x10048880
mov ecx, dword [ebp - 4]
mov edx, dword [ecx + 0x1000]
cmp ebx, edx
jge 0x10048a07
lea ebx, [ebx]
lea ecx, [ebx*4]
cmp edi, dword [esi + 0x1000]
je 0x10048981
mov eax, dword [esi + edi*4]
mov esi, dword [ebp - 4]
cmp eax, dword [ecx + esi]
mov esi, dword [ebp - 8]
jbe 0x10048a04
mov eax, dword [ebp - 4]
inc ebx
mov dword [ebp - 0x58], 0
mov dword [ebp - 0x54], 0
mov dword [ebp - 0x48], 0
mov eax, dword [ecx + eax]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x5c], eax
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x50], eax
lea eax, [ebp - 0x5c]
push eax
push dword [ebp - 0x18]
mov dword [ebp - 0x44], 0
push dword [ebp - 0x1c]
mov dword [ebp - 0x40], 0
mov dword [ebp - 0x3c], 0
mov dword [ebp - 0x38], 0
mov dword [ebp - 0x34], 0
mov dword [ebp - 0x30], 0
mov byte [ebp - 0x2c], 0
mov dword [ebp - 0x4c], ecx
call fcn.100486e0
mov ecx, dword [ebp - 4]
add esp, 0xc
mov edx, dword [ecx + 0x1000]
cmp ebx, edx
jl 0x10048960
inc edi
inc ebx
jmp 0x10048833
mov ecx, dword [ebp - 4]
inc edi
inc ebx
jmp 0x10048833