Function at 0x4073aa
Capabilities:
Enumerate process modules

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x468
mov eax, dword [0x4255d4]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword [ebp + 8]
push ebx
push esi
push edi
push 7
pop ebx
mov dword [ebp - 0x464], eax
mov eax, dword [ebp + 0xc]
push ebx
push 0x42634c
mov dword [ebp - 0x460], eax
mov byte [ebp - 0x459], 1
call fcn.00406796
push eax
lea esi, [ebp - 0x43c]
call fcn.004012ca
push 5
pop edi
push edi
push 0x42635c
call fcn.00406796
push eax
lea esi, [ebp - 0x420]
call fcn.004012ca
push 6
push 0x426368
call fcn.00406796
push eax
lea esi, [ebp - 0x404]
call fcn.004012ca
push 4
push 0x426374
call fcn.00406796
push eax
lea esi, [ebp - 0x3e8]
call fcn.004012ca
push 8
push 0x42637c
call fcn.00406796
push eax
lea esi, [ebp - 0x3cc]
call fcn.004012ca
push ebx
push 0x42638c
call fcn.00406796
push eax
lea esi, [ebp - 0x3b0]
call fcn.004012ca
push edi
push 0x42639c
call fcn.00406796
push eax
lea esi, [ebp - 0x394]
call fcn.004012ca
push 9
push 0x4263a8
call fcn.00406796
push eax
lea esi, [ebp - 0x378]
call fcn.004012ca
push ebx
push 0x4263bc
call fcn.00406796
push eax
lea esi, [ebp - 0x35c]
call fcn.004012ca
push edi
push 0x4263cc
call fcn.00406796
push eax
lea esi, [ebp - 0x340]
call fcn.004012ca
push 3
push 0x4263d8
call fcn.00406796
push eax
lea esi, [ebp - 0x324]
call fcn.004012ca
push 8
push 0x4263e0
call fcn.00406796
push eax
lea esi, [ebp - 0x308]
call fcn.004012ca
push edi
push 0x4263f0
call fcn.00406796
push eax
lea esi, [ebp - 0x2ec]
call fcn.004012ca
push ebx
push 0x4263fc
call fcn.00406796
push eax
lea esi, [ebp - 0x2d0]
call fcn.004012ca
push 6
push 0x42640c
call fcn.00406796
push eax
lea esi, [ebp - 0x2b4]
call fcn.004012ca
push 6
push 0x426418
call fcn.00406796
push eax
lea esi, [ebp - 0x298]
call fcn.004012ca
push edi
push 0x426424
call fcn.00406796
push eax
lea esi, [ebp - 0x27c]
call fcn.004012ca
push 6
push 0x426430
call fcn.00406796
push eax
lea esi, [ebp - 0x260]
call fcn.004012ca
push ebx
push 0x42643c
call fcn.00406796
push eax
lea esi, [ebp - 0x244]
call fcn.004012ca
push 4
push 0x42644c
call fcn.00406796
push eax
lea esi, [ebp - 0x228]
call fcn.004012ca
push 0x1f4
mov ecx, edi
lea eax, [ebp - 0x1f8]
push 0
mov esi, str._unknown_
lea edi, [ebp - 0x20c]
push eax
rep movsd dword es:[edi], dword [esi]
call fcn.00414cd0
add esp, 0xc
push dword [ebp - 0x460]
push 0
push 0x410
call dword [sym.imp.KERNEL32.dll_OpenProcess]
mov ebx, eax
test ebx, ebx
je 0x4076a0
lea eax, [ebp - 0x468]
push eax
push 4
lea eax, [ebp - 0x460]
push eax
push ebx
call dword [sym.imp.PSAPI.DLL_EnumProcessModules]
test eax, eax
je 0x407699
push 0x104
lea eax, [ebp - 0x20c]
push eax
push dword [ebp - 0x460]
push ebx
call dword [sym.imp.PSAPI.DLL_GetModuleBaseNameW]
lea eax, [ebp - 0x20c]
push eax
lea esi, [ebp - 0x458]
call fcn.004012ca
mov edi, dword [ebp - 0x464]
mov esi, eax
call fcn.00401370
xor edi, edi
push edi
push 1
lea ecx, [ebp - 0x458]
call fcn.00401455
lea esi, [ebp - 0x43c]
cmp dword [esi + 0x14], 8
mov ecx, dword [esi + 0x10]
jb 0x407671
mov eax, dword [esi]
jmp 0x407673
mov eax, esi
push ecx
mov ecx, dword [ebp - 0x464]
push eax
xor eax, eax
call fcn.004013b7
cmp eax, 0xffffffff
jne 0x407692
inc edi
add esi, 0x1c
cmp edi, 0x14
jl 0x407664
jmp 0x407699
mov byte [ebp - 0x459], 0
push ebx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push 0x13
lea esi, [ebp - 0x20c]
pop edi
push 0
sub esi, 0x1c
push 1
mov ecx, esi
call fcn.00401455
dec edi
jns 0x4076a9
mov ecx, dword [ebp - 4]
mov al, byte [ebp - 0x459]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.0040bbb2
leave
ret 8