Function at 0x434420
Capabilities:
Enumerate process modules

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x45db53
mov eax, dword fs:[0]
push eax
sub esp, 0x244
mov eax, dword [0x492984]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
xor ebx, ebx
mov dword [ebp - method.CArray_class_CIInfoGrid___class_CIInfoGrid__.virtual_0], vtable.CArray_struct_HINSTANCE_____struct_HINSTANCE____.0
mov dword [ebp - 0x240], ebx
mov dword [ebp - 0x234], ebx
mov dword [ebp - 0x238], ebx
mov dword [ebp - 0x23c], ebx
mov dword [ebp - 4], ebx
mov dword [ebp - 0x224], ebx
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
push eax
push ebx
push 0x410
call dword [sym.imp.KERNEL32.dll_OpenProcess]
mov esi, eax
mov dword [ebp - 0x220], esi
test esi, esi
je 0x434744
push 0xffffffffffffffff
push 0x400
lea ecx, [ebp - 0x244]
call fcn.0044f780
mov ebx, dword [ebp - 0x240]
lea eax, [ebp - 0x224]
push eax
push 0x1000
push ebx
push esi
call sub.PSAPI.DLL_EnumProcessModules
test eax, eax
jne 0x434517
mov edi, 0x1000
mov esi, dword [ebp - 0x224]
cmp esi, edi
jbe 0x434744
shr esi, 2
lea ecx, [ebp - 0x244]
push 0xffffffffffffffff
inc esi
push esi
call fcn.0044f780
mov ebx, dword [ebp - 0x240]
lea eax, [ebp - 0x224]
push eax
lea edi, [esi*4]
push edi
push ebx
push dword [ebp - 0x220]
call sub.PSAPI.DLL_EnumProcessModules
test eax, eax
je 0x4344d2
mov eax, dword [ebp - 0x224]
shr eax, 2
mov dword [ebp - 0x230], eax
lea eax, [ebp - 0x22c]
push 0x4643fb
push eax
call dword [sym.imp.byondcore.dll_struct_DMString___cdecl_GetBinFile_char_const__]
add esp, 8
mov esi, dword [sym.imp.byondcore.dll_public:_void___thiscall_DMString::constructor_void_]
lea ecx, [ebp - 0x21c]
mov byte [ebp - 4], 1
call esi
lea ecx, [ebp - 0x228]
mov byte [ebp - 4], 2
call esi
mov esi, dword [sym.imp.byondcore.dll_public:_void___thiscall_DMString::destructor_void_]
xor edi, edi
mov byte [ebp - 4], 3
cmp dword [ebp - 0x230], edi
jbe 0x434705
test edi, edi
js 0x43473f
cmp edi, dword [ebp - 0x23c]
jge 0x43473f
push 0x104
lea eax, [ebp - 0x218]
push eax
push dword [ebx + edi*4]
push dword [ebp - 0x220]
call sub.PSAPI.DLL_GetModuleFileNameExW
test eax, eax
je 0x4346f8
lea eax, [ebp - 0x218]
push eax
lea eax, [ebp - 0x250]
push eax
call dword [sym.imp.byondcore.dll_struct_DMString___cdecl_Wide2Utf8_wchar_t_const__]
add esp, 8
push eax
lea ecx, [ebp - 0x21c]
mov byte [ebp - 4], 4
call dword [sym.imp.byondcore.dll_public:_struct_DMString____thiscall_DMString::operator_struct_DMString_const__]
lea ecx, [ebp - 0x250]
mov byte [ebp - 4], 3
call esi
push 0
push dword [ebp - 0x22c]
lea ecx, [ebp - 0x21c]
call dword [sym.imp.byondcore.dll_public:_int___thiscall_DMString::Find_char_const___int_const]
test eax, eax
jne 0x4346f8
lea ecx, [ebp - 0x22c]
call dword [sym.imp.byondcore.dll_public:_int___thiscall_DMString::GetLength_void_const]
push eax
lea eax, [ebp - 0x24c]
push eax
lea ecx, [ebp - 0x21c]
call dword [sym.imp.byondcore.dll_public:_struct_DMString___thiscall_DMString::Mid_int_]
push eax
lea ecx, [ebp - 0x21c]
mov byte [ebp - 4], 5
call dword [sym.imp.byondcore.dll_public:_struct_DMString____thiscall_DMString::operator_struct_DMString_const__]
lea ecx, [ebp - 0x24c]
mov byte [ebp - 4], 3
call esi
push 4
lea eax, [ebp - 0x248]
push eax
lea ecx, [ebp - 0x21c]
call dword [sym.imp.byondcore.dll_public:_struct_DMString___thiscall_DMString::Right_int_]
push str..exe
mov ecx, eax
mov byte [ebp - 4], 6
call dword [sym.imp.byondcore.dll_public:_int___thiscall_DMString::CompareNoCase_char_const__const]
test eax, eax
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x248]
sete bl
call esi
test bl, bl
jne 0x4346f2
cmp dword [str.byondcore], 0
mov esi, 0x491748
je 0x4346e7
mov ebx, dword [sym.imp.byondcore.dll_public:_int___thiscall_DMString::CompareNoCase_char_const__const]
jmp 0x434690
push dword [esi]
lea ecx, [ebp - 0x228]
call dword [sym.imp.byondcore.dll_public:_struct_DMString____thiscall_DMString::operator_char_const__]
push str..dll
lea ecx, [ebp - 0x228]
call dword [0x46193c]
push dword [ebp - 0x228]
lea ecx, [ebp - 0x21c]
call ebx
test eax, eax
je 0x4346e7
add esi, 4
cmp dword [esi], 0
jne 0x434690
push dword [ebp - 0x220]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov ecx, dword [0x4966ec]
call sub.mfc120u.dll_Ordinal_3927
mov esi, 1
jmp 0x434713
cmp dword [esi], 0
je 0x4346c9
mov esi, dword [sym.imp.byondcore.dll_public:_void___thiscall_DMString::destructor_void_]
mov ebx, dword [ebp - 0x240]
inc edi
cmp edi, dword [ebp - 0x230]
jb 0x434571
push dword [ebp - 0x220]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
xor esi, esi
mov edi, dword [sym.imp.byondcore.dll_public:_void___thiscall_DMString::destructor_void_]
lea ecx, [ebp - 0x228]
mov byte [ebp - 4], 2
call edi
lea ecx, [ebp - 0x21c]
mov byte [ebp - 4], 1
call edi
lea ecx, [ebp - 0x22c]
mov byte [ebp - 4], 0
call edi
jmp 0x434746
call sub.mfc120u.dll_Ordinal_2341
xor esi, esi
mov ecx, dword [ebp - 0x240]
test ecx, ecx
je 0x434759
push ecx
call sub.MSVCR120.dll_void___cdecl_operator_delete___void__
add esp, 4
mov eax, esi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.004580b8
mov esp, ebp
pop ebp
ret