Function at 0x41dca0
Capabilities:
Enumerate process modules

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x211c
call fcn.00444d80
mov eax, dword [0x46db30]
xor eax, ebp
mov dword [ebp - 0xc], eax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
push eax
push 0
push 0x1fffff
call dword [sym.imp.KERNEL32.dll_OpenProcess]
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 0
jne 0x41dceb
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
push eax
push 0
push 0x438
call dword [sym.imp.KERNEL32.dll_OpenProcess]
mov dword [ebp - 4], eax
lea eax, [ebp - 8]
push eax
push 0x2000
lea ecx, [ebp - 0x2118]
push ecx
mov edx, dword [ebp - 4]
push edx
call sub.PSAPI.DLL_EnumProcessModules
test eax, eax
je 0x41e117
mov dword [ebp - 0x211c], 0
jmp 0x41dd27
mov eax, dword [ebp - 0x211c]
add eax, 1
mov dword [ebp - 0x211c], eax
mov ecx, dword [ebp - 8]
shr ecx, 2
cmp dword [ebp - 0x211c], ecx
jae 0x41e117
push 0x104
lea edx, [ebp - 0x118]
push edx
mov eax, dword [ebp - 0x211c]
mov ecx, dword [ebp + eax*4 - 0x2118]
push ecx
mov edx, dword [ebp - 4]
push edx
call sub.PSAPI.DLL_GetModuleFileNameExA
mov eax, dword [0x473c70]
push eax
push 0x4615a0
push 0x417850
mov ecx, dword [ebp - 0x211c]
mov edx, dword [ebp + ecx*4 - 0x2118]
push edx
call fcn.004199a0
add esp, 0x10
mov eax, dword [0x473c74]
push eax
push 0x4615b0
push 0x417960
mov ecx, dword [ebp - 0x211c]
mov edx, dword [ebp + ecx*4 - 0x2118]
push edx
call fcn.004199a0
add esp, 0x10
mov eax, dword [0x473c7c]
push eax
push 0x4615c0
push 0x417a70
mov ecx, dword [ebp - 0x211c]
mov edx, dword [ebp + ecx*4 - 0x2118]
push edx
call fcn.004199a0
add esp, 0x10
mov eax, dword [0x473c78]
push eax
push 0x4615d0
push 0x417b90
mov ecx, dword [ebp - 0x211c]
mov edx, dword [ebp + ecx*4 - 0x2118]
push edx
call fcn.004199a0
add esp, 0x10
mov eax, dword [0x473c88]
push eax
push 0x4615e0
push 0x417cb0
mov ecx, dword [ebp - 0x211c]
mov edx, dword [ebp + ecx*4 - 0x2118]
push edx
call fcn.004199a0
add esp, 0x10
mov eax, dword [0x473c84]
push eax
push 0x4615f0
push 0x417e10
mov ecx, dword [ebp - 0x211c]
mov edx, dword [ebp + ecx*4 - 0x2118]
push edx
call fcn.004199a0
add esp, 0x10
mov eax, dword [0x473c8c]
push eax
push 0x461600
push 0x417f70
mov ecx, dword [ebp - 0x211c]
mov edx, dword [ebp + ecx*4 - 0x2118]
push edx
call fcn.004199a0
add esp, 0x10
mov eax, dword [0x473c80]
push eax
push 0x461610
push 0x417390
mov ecx, dword [ebp - 0x211c]
mov edx, dword [ebp + ecx*4 - 0x2118]
push edx
call fcn.004199a0
add esp, 0x10
mov eax, dword [0x473c90]
push eax
push 0x461620
push 0x4180b0
mov ecx, dword [ebp - 0x211c]
mov edx, dword [ebp + ecx*4 - 0x2118]
push edx
call fcn.004199a0
add esp, 0x10
mov eax, dword [0x473c94]
push eax
push 0x461630
push fcn.00418180
mov ecx, dword [ebp - 0x211c]
mov edx, dword [ebp + ecx*4 - 0x2118]
push edx
call fcn.004199a0
add esp, 0x10
mov eax, dword [0x473c98]
push eax
push 0x461640
push fcn.004182e0
mov ecx, dword [ebp - 0x211c]
mov edx, dword [ebp + ecx*4 - 0x2118]
push edx
call fcn.004199a0
add esp, 0x10
mov eax, dword [0x473c9c]
push eax
push 0x461650
push 0x4183e0
mov ecx, dword [ebp - 0x211c]
mov edx, dword [ebp + ecx*4 - 0x2118]
push edx
call fcn.004199a0
add esp, 0x10
mov eax, dword [0x473ca0]
push eax
push 0x461660
push 0x4184d0
mov ecx, dword [ebp - 0x211c]
mov edx, dword [ebp + ecx*4 - 0x2118]
push edx
call fcn.004199a0
add esp, 0x10
mov eax, dword [0x473ca4]
push eax
push 0x461670
push 0x4185a0
mov ecx, dword [ebp - 0x211c]
mov edx, dword [ebp + ecx*4 - 0x2118]
push edx
call fcn.004199a0
add esp, 0x10
mov eax, dword [0x473ca8]
push eax
push 0x461680
push 0x418660
mov ecx, dword [ebp - 0x211c]
mov edx, dword [ebp + ecx*4 - 0x2118]
push edx
call fcn.004199a0
add esp, 0x10
mov eax, dword [0x473cac]
push eax
push 0x461690
push 0x418720
mov ecx, dword [ebp - 0x211c]
mov edx, dword [ebp + ecx*4 - 0x2118]
push edx
call fcn.004199a0
add esp, 0x10
mov eax, dword [0x473cb0]
push eax
push 0x4616a0
push 0x4187f0
mov ecx, dword [ebp - 0x211c]
mov edx, dword [ebp + ecx*4 - 0x2118]
push edx
call fcn.004199a0
add esp, 0x10
mov eax, dword [0x473cb4]
push eax
push 0x4616b0
push 0x4188c0
mov ecx, dword [ebp - 0x211c]
mov edx, dword [ebp + ecx*4 - 0x2118]
push edx
call fcn.004199a0
add esp, 0x10
mov eax, dword [0x473cb8]
push eax
push 0x4616c0
push 0x418a40
mov ecx, dword [ebp - 0x211c]
mov edx, dword [ebp + ecx*4 - 0x2118]
push edx
call fcn.004199a0
add esp, 0x10
mov eax, dword [0x473cbc]
push eax
push 0x4616d0
push 0x418f20
mov ecx, dword [ebp - 0x211c]
mov edx, dword [ebp + ecx*4 - 0x2118]
push edx
call fcn.004199a0
add esp, 0x10
mov eax, dword [0x473cc0]
push eax
push 0x4616e0
push 0x4195e0
mov ecx, dword [ebp - 0x211c]
mov edx, dword [ebp + ecx*4 - 0x2118]
push edx
call fcn.004199a0
add esp, 0x10
mov eax, dword [0x473cc4]
push eax
push 0x4616f0
push 0x419090
mov ecx, dword [ebp - 0x211c]
mov edx, dword [ebp + ecx*4 - 0x2118]
push edx
call fcn.004199a0
add esp, 0x10
mov eax, dword [0x473cc8]
push eax
push 0x461700
push 0x4191e0
mov ecx, dword [ebp - 0x211c]
mov edx, dword [ebp + ecx*4 - 0x2118]
push edx
call fcn.004199a0
add esp, 0x10
mov eax, dword [0x473ccc]
push eax
push 0x461710
push 0x419470
mov ecx, dword [ebp - 0x211c]
mov edx, dword [ebp + ecx*4 - 0x2118]
push edx
call fcn.004199a0
add esp, 0x10
mov eax, dword [0x473cd0]
push eax
push 0x461720
push 0x419330
mov ecx, dword [ebp - 0x211c]
mov edx, dword [ebp + ecx*4 - 0x2118]
push edx
call fcn.004199a0
add esp, 0x10
jmp 0x41dd18
mov ecx, dword [ebp - 0xc]
xor ecx, ebp
call fcn.00441cf2
mov esp, ebp
pop ebp
ret