Function at 0x416a40
Capabilities:
Enumerate process modules

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x1500
call fcn.00417d80
mov eax, dword [0x423100]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push edi
push 0x1000
lea eax, [ebp - 0x1488]
push 0
push eax
call fcn.00409441
add esp, 0xc
mov dword [ebp - 0x488], 0xdadd94ba
mov dword [ebp - 0x484], 0xf1611132
xor ebx, ebx
mov dword [ebp - 0x480], 0x5919817c
mov dword [ebp - 0x47c], 0x7e77cca
mov dword [ebp - 0x478], 0xb2c54e84
mov dword [ebp - 0x474], 0x9cc75afd
mov dword [ebp - 0x470], 0xbdeaa34
mov dword [ebp - 0x46c], 0x653487de
mov dword [ebp - 0x468], 0x6d0f9c51
mov dword [ebp - 0x464], 0x3c03b77a
mov dword [ebp - 0x460], 0x3205cbe0
mov dword [ebp - 0x45c], 0x7c9a26cf
mov dword [ebp - 0x458], 0xa22ab298
mov dword [ebp - 0x454], 0xc41dcd9f
mov dword [ebp - 0x450], 0x5beffaaa
mov dword [ebp - 0x44c], 0xbb8f9d6b
mov dword [ebp - 0x448], 0xc0a363e2
mov dword [ebp - 0x444], 0x7dd403c2
mov dword [ebp - 0x440], 0xacd79436
mov dword [ebp - 0x43c], 0x7f0a64ea
mov dword [ebp - 0x438], 0xc60e86ad
mov dword [ebp - 0x434], 0x512645e0
mov dword [ebp - 0x430], 0x97d23a2c
mov dword [ebp - 0x42c], 0x28d43033
mov dword [ebp - 0x428], 0xc43ea42b
mov dword [ebp - 0x424], 0xb062718f
mov dword [ebp - 0x420], 0xb8b33235
mov dword [ebp - 0x41c], 0xa213aef7
mov dword [ebp - 0x418], 0x133d69a4
mov dword [ebp - 0x414], 0xaaa44085
mov dword [ebp - 0x410], 0x17837f4b
mov dword [ebp - 0x40c], 0x30fef197
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov edi, eax
mov dword [ebp - 0x1500], edi
test edi, edi
jne 0x416bd6
pop edi
lea eax, [ebx + 1]
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.004094be
mov esp, ebp
pop ebp
ret
lea eax, [ebp - 0x148c]
push eax
push 0x1000
lea eax, [ebp - 0x1488]
push eax
push edi
call sub.KERNEL32.dll_K32EnumProcessModules
test eax, eax
je 0x416dd7
push esi
xor esi, esi
test dword [ebp - 0x148c], 0xfffffffc
mov dword [ebp - 0x14fc], esi
jbe 0x416dd6
push 0x104
lea eax, [ebp - 0x408]
push 0
push eax
call fcn.00409441
push 0x100
lea eax, [ebp - 0x304]
push 0
push eax
call fcn.00409441
push 0x100
lea eax, [ebp - 0x204]
push 0
push eax
call fcn.00409441
push 0x100
lea eax, [ebp - 0x104]
push 0
push eax
call fcn.00409441
add esp, 0x30
lea eax, [ebp - 0x408]
push 0x104
push eax
push dword [ebp + esi*4 - 0x1488]
push edi
call sub.KERNEL32.dll_K32GetModuleFileNameExA
test eax, eax
je 0x416dbe
push 0x100
lea eax, [ebp - 0x204]
push eax
push 0x100
lea eax, [ebp - 0x304]
push eax
push 0
push 0
push 0
lea eax, [ebp - 0x408]
push 0
push eax
call fcn.00419635
lea eax, [ebp - 0x204]
push eax
lea eax, [ebp - 0x304]
push eax
push str._s_s
push 0xffffffffffffffff
lea eax, [ebp - 0x104]
push 0x100
push eax
call fcn.004172d0
lea eax, [ebp - 0x104]
push 0x100
push eax
call fcn.00419861
lea ecx, [ebp - 0x104]
add esp, 0x44
lea edx, [ecx + 1]
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x416cf0
sub ecx, edx
cmp ecx, 0x20
jae 0x416d19
mov eax, 0x20
sub eax, ecx
push eax
lea eax, [ebp - 0x104]
add eax, ecx
push 0x5f
push eax
call fcn.00409441
add esp, 0xc
lea eax, [ebp - 0x14f4]
mov byte [ebp - 0xe4], 0
push eax
call fcn.00417440
lea ecx, [ebp - 0x104]
add esp, 4
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x416d38
sub ecx, edx
lea eax, [ebp - 0x104]
push ecx
push eax
lea eax, [ebp - 0x14f4]
push eax
call fcn.00417580
lea eax, [ebp - 0x14f4]
push eax
call fcn.00417310
add esp, 0x10
mov dword [ebp - 0x14f8], 8
lea edi, [ebp - 0x488]
nop dword [eax]
nop dword [eax + eax]
lea edx, [ebp - 0x149c]
mov eax, edi
mov esi, 0xc
nop dword [eax]
mov ecx, dword [edx]
cmp ecx, dword [eax]
jne 0x416da6
add edx, 4
add eax, 4
sub esi, 4
jae 0x416d90
mov ebx, 1
add edi, 0x10
sub dword [ebp - 0x14f8], 1
jne 0x416d80
mov esi, dword [ebp - 0x14fc]
mov edi, dword [ebp - 0x1500]
mov ecx, dword [ebp - 0x148c]
inc esi
shr ecx, 2
mov dword [ebp - 0x14fc], esi
cmp esi, ecx
jb 0x416c10
pop esi
push edi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov ecx, dword [ebp - 4]
mov eax, ebx
pop edi
xor ecx, ebp
pop ebx
call fcn.004094be
mov esp, ebp
pop ebp
ret