Function at 0x539fe0
Capabilities:
Enumerate process modules

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x438
mov eax, dword [0x906648]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push esi
mov esi, 0x1000
push 0x54414351
push esi
call fcn.004f3590
mov ebx, eax
add esp, 8
mov dword [ebp - 0x430], ebx
test ebx, ebx
je 0x53a056
lea eax, [ebp - 0x424]
push eax
push esi
push ebx
call sub.KERNEL32.dll_K32EnumProcesses
test eax, eax
je 0x53a2f7
mov eax, dword [ebp - 0x424]
cmp esi, eax
jne 0x53a0a9
push ebx
call fcn.004f3570
add esi, esi
push 0x54414351
push esi
call fcn.004f3590
mov ebx, eax
mov dword [ebp - 0x430], eax
add esp, 0xc
test ebx, ebx
jne 0x53a014
test byte [0x9538a8], 1
je 0x53a083
push str.Memory_allocation_failure.
push 0x521
push str.E:_workspace_AC_CC_Windows_TACC_MASTER_master_src_solidifier_cap_cap.c
push str.cap_apply_library_updater_rules
push dword [0x7d0140]
push 1
call fcn.004f21c0
add esp, 0x18
mov esi, 0xc
test ebx, ebx
je 0x53a095
push ebx
call fcn.004f3570
add esp, 4
mov ecx, dword [ebp - 4]
mov eax, esi
pop esi
xor ecx, ebp
pop ebx
call fcn.0063c972
mov esp, ebp
pop ebp
ret 4
shr eax, 2
push 0x55414351
push 0x1000
mov dword [ebp - 0x41c], eax
call fcn.004f3590
mov ecx, eax
add esp, 8
mov dword [ebp - 0x428], ecx
test ecx, ecx
jne 0x53a0e5
test byte [0x9538a8], 1
je 0x53a083
push str.Memory_allocation_failure.
push 0x54e
jmp 0x53a069
mov esi, dword [ebp - 0x41c]
test esi, esi
je 0x53a2e7
mov dword [ebp - 0x418], ebx
push edi
nop word [eax + eax]
mov eax, dword [ebx]
test eax, eax
je 0x53a2c2
push eax
push 0
push 0x410
call dword [sym.imp.KERNEL32.dll_OpenProcess]
mov edi, eax
mov dword [ebp - 0x42c], edi
test edi, edi
jne 0x53a163
test byte [0x9538a8], 8
je 0x53a2c2
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push dword [ebx]
push str.Failed_to_open_process_with_pid___p_._err___d
push 0x565
push str.E:_workspace_AC_CC_Windows_TACC_MASTER_master_src_solidifier_cap_cap.c
push str.cap_apply_library_updater_rules
push dword [0x7d0140]
push 8
call fcn.004f21c0
add esp, 0x20
jmp 0x53a2c2
push 0x104
lea eax, [ebp - 0x20c]
push eax
push 0
push edi
call sub.KERNEL32.dll_K32GetModuleFileNameExW
test eax, eax
je 0x53a2b6
lea eax, [ebp - 0x424]
push eax
push 0x1000
push dword [ebp - 0x428]
push edi
call sub.KERNEL32.dll_K32EnumProcessModules
test eax, eax
je 0x53a2b6
mov ebx, dword [ebp - 0x424]
xor esi, esi
shr ebx, 2
test ebx, ebx
je 0x53a2aa
push 0x104
lea eax, [ebp - 0x414]
xorps xmm0, xmm0
push eax
mov eax, dword [ebp - 0x428]
movlpd qword [ebp - 0x438], xmm0
push dword [eax + esi*4]
push edi
call sub.KERNEL32.dll_K32GetModuleFileNameExW
test eax, eax
je 0x53a296
lea eax, [ebp - 0x438]
mov dword [ebp - 0x420], 0
push eax
lea eax, [ebp - 0x420]
push eax
push 0x20
lea eax, [ebp - 0x414]
push eax
lea eax, [ebp - 0x20c]
push eax
push 0xa39960
call fcn.0053b1f0
mov edi, dword [ebp - 0x434]
add esp, 0x18
test eax, eax
jne 0x53a28c
cmp dword [ebp - 0x420], 0
je 0x53a28c
mov eax, dword [ebp - 0x438]
lea ecx, [ebp - 0x420]
push ecx
or eax, 1
mov dword [ebp - 0x420], 0
push edi
push eax
mov eax, dword [ebp - 0x418]
push dword [eax]
call fcn.0058ffc0
add esp, 0x10
test eax, eax
jne 0x53a28c
test byte [0x9538a8], 8
je 0x53a28c
lea eax, [ebp - 0x20c]
push eax
push str.Marking_process__s_as_updater.
push 0x58f
push str.E:_workspace_AC_CC_Windows_TACC_MASTER_master_src_solidifier_cap_cap.c
push str.cap_apply_library_updater_rules
push dword [0x7d0140]
push 8
call fcn.004f21c0
add esp, 0x1c
test edi, edi
jne 0x53a2a1
mov edi, dword [ebp - 0x42c]
inc esi
cmp esi, ebx
jb 0x53a1b2
jmp 0x53a2aa
push edi
call fcn.004f3570
add esp, 4
mov ebx, dword [ebp - 0x418]
mov esi, dword [ebp - 0x41c]
push dword [ebp - 0x42c]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
add ebx, 4
sub esi, 1
mov dword [ebp - 0x418], ebx
mov dword [ebp - 0x41c], esi
jne 0x53a100
mov ebx, dword [ebp - 0x430]
mov ecx, dword [ebp - 0x428]
pop edi
push ecx
call fcn.004f3570
add esp, 4
xor esi, esi
jmp 0x53a088
call dword [sym.imp.KERNEL32.dll_GetLastError]
test byte [0x9538a8], 1
mov esi, eax
je 0x53a088
push esi
push str.EnumProcesses_failed__err__d
push 0x528
push str.E:_workspace_AC_CC_Windows_TACC_MASTER_master_src_solidifier_cap_cap.c
push str.cap_apply_library_updater_rules
push dword [0x7d0140]
push 1
call fcn.004f21c0
add esp, 0x1c
jmp 0x53a088