Function at 0x42b0e0
Capabilities:
Enumerate process modules

Disassembly:
mov eax, 0x232c
call fcn.004b7ac0
mov eax, dword [0x52e144]
xor eax, esp
mov dword [esp + 0x2328], eax
push ebx
push ebp
push esi
push edi
push 0x2000
xor ebx, ebx
lea eax, [esp + 0x14]
push ebx
push eax
call fcn.004b6dc0
mov edi, dword [esp + 0x234c]
add esp, 0xc
push edi
push 8
call sub.KERNEL32.dll_CreateToolhelp32Snapshot
mov esi, eax
cmp esi, 0xffffffff
je 0x42b4fe
push 0x224
lea ecx, [esp + 0x2014]
push ebx
push ecx
call fcn.004b6dc0
add esp, 0xc
lea edx, [esp + 0x2010]
push edx
push esi
mov dword [esp + 0x2018], 0x224
call sub.KERNEL32.dll_Module32First
test eax, eax
je 0x42b1a4
mov edi, edi
cmp ebx, 0x7ff
jge 0x42b1a4
lea eax, [esp + 0x2130]
push eax
call fcn.004117b0
add esp, 4
test eax, eax
je 0x42b186
lea ecx, [esp + 0x2010]
push ecx
jmp 0x42b19a
mov edx, dword [esp + 0x202c]
lea eax, [esp + 0x2010]
mov dword [esp + ebx*4 + 0x10], edx
inc ebx
push eax
push esi
call sub.KERNEL32.dll_Module32Next
test eax, eax
jne 0x42b160
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push 0x103
lea ecx, [esp + 0x2239]
push 0
push ecx
mov byte [esp + 0x2240], 0
call fcn.004b6dc0
push edi
call fcn.0043d1a0
mov ebp, eax
add esp, 0x10
test ebp, ebp
je 0x42b4fe
sub ebx, 1
je 0x42b4f7
mov edi, dword [esp + 0x2344]
lea ebx, [ebx]
mov esi, dword [esp + ebx*4 + 0x10]
cmp esi, 0x10000000
je 0x42b4f7
lea edx, [esp + 0x2234]
push edx
push esi
push ebp
mov ecx, 0x53b678
call fcn.00408d80
lea eax, [esp + 0x2234]
push eax
call fcn.004b8cce
push 0x516384
call fcn.00404690
push eax
lea ecx, [esp + 0x2240]
push ecx
call fcn.004b9929
add esp, 0x10
test eax, eax
jne 0x42b4ee
push 0x516374
call fcn.00404690
push eax
lea edx, [esp + 0x223c]
push edx
call fcn.004b9929
add esp, 0xc
test eax, eax
jne 0x42b4ee
push 0x516364
call fcn.00404690
push eax
lea eax, [esp + 0x223c]
push eax
call fcn.004b9929
add esp, 0xc
test eax, eax
jne 0x42b4ee
push 0x516354
call fcn.00404690
push eax
lea ecx, [esp + 0x223c]
push ecx
call fcn.004b9929
add esp, 0xc
test eax, eax
jne 0x42b4ee
push 0x516344
call fcn.00404690
push eax
lea edx, [esp + 0x223c]
push edx
call fcn.004b9929
add esp, 0xc
test eax, eax
jne 0x42b4ee
push 0x516330
call fcn.00404690
push eax
lea eax, [esp + 0x223c]
push eax
call fcn.004b9929
add esp, 0xc
test eax, eax
jne 0x42b4ee
push 0x51631c
call fcn.00404690
push eax
lea ecx, [esp + 0x223c]
push ecx
call fcn.004b9929
add esp, 0xc
test eax, eax
jne 0x42b4ee
push 0x51630c
call fcn.00404690
push eax
lea edx, [esp + 0x223c]
push edx
call fcn.004b9929
add esp, 0xc
test eax, eax
jne 0x42b4ee
push 0x5162f4
call fcn.00404690
push eax
lea eax, [esp + 0x223c]
push eax
call fcn.004b9929
add esp, 0xc
test eax, eax
jne 0x42b4ee
push 0x5162e0
call fcn.00404690
push eax
lea ecx, [esp + 0x223c]
push ecx
call fcn.004b9929
add esp, 0xc
test eax, eax
jne 0x42b4ee
push 0x5162cc
call fcn.00404690
push eax
lea edx, [esp + 0x223c]
push edx
call fcn.004b9929
add esp, 0xc
test eax, eax
jne 0x42b4ee
push 0x5162b8
call fcn.00404690
push eax
lea eax, [esp + 0x223c]
push eax
call fcn.004b9929
add esp, 0xc
test eax, eax
jne 0x42b4ee
push 0x5162a8
call fcn.00404690
push eax
lea ecx, [esp + 0x223c]
push ecx
call fcn.004b9929
add esp, 0xc
test eax, eax
jne 0x42b4ee
push 0x516298
call fcn.00404690
push eax
lea edx, [esp + 0x223c]
push edx
call fcn.004b9929
add esp, 0xc
test eax, eax
jne 0x42b4ee
push 0x516280
call fcn.00404690
push eax
lea eax, [esp + 0x223c]
push eax
call fcn.004b9929
add esp, 0xc
test eax, eax
jne 0x42b4ee
push 0x516260
call fcn.00404690
push eax
lea ecx, [esp + 0x223c]
push ecx
call fcn.004b9929
add esp, 0xc
test eax, eax
jne 0x42b4ee
push 0x516250
call fcn.00404690
push eax
lea edx, [esp + 0x223c]
push edx
call fcn.004b9929
add esp, 0xc
test eax, eax
jne 0x42b4ee
push esi
push ebp
call fcn.00425ea0
add esp, 8
test al, al
jne 0x42b4ee
lea eax, [esp + 0x2234]
push eax
push esi
push 0x516234
call fcn.00404690
add esp, 4
push eax
push 0x527e20
call fcn.00401350
mov ecx, dword [0x53b548]
add esp, 0x10
push 0
push 0
push ecx
push 0x5132b4
call fcn.00404690
add esp, 4
push eax
lea edx, [esp + 0x2244]
push edx
push 0x515838
push 0
push 0x11173
push 0x20
push 2
call fcn.0043c0b0
add esp, 0x28
cmp edi, 0x14
jne 0x42b4ee
cmp dword [0x537d78], 0
jne 0x42b4ee
call fcn.00418810
sub ebx, 1
jne 0x42b1f0
push ebp
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov ecx, dword [esp + 0x2338]
pop edi
pop esi
pop ebp
pop ebx
xor ecx, esp
xor eax, eax
call fcn.004b6da3
add esp, 0x232c
ret