Function at 0x493c60
Capabilities:
Enumerate process modules

Disassembly:
sub esp, 0x234
mov eax, dword [esp + 0x238]
push ebp
push 0x62e460
push eax
call fcn.00568e16
mov ebp, eax
add esp, 8
test ebp, ebp
mov dword [esp + 0x10], ebp
je 0x493fcd
push esi
push 0x62e45c
push ebp
call fcn.00569935
push str.___Modules_n
push ebp
call fcn.00569935
push 0x62e45c
push ebp
call fcn.00569935
add esp, 0x18
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
push eax
push 8
call sub.KERNEL32.dll_CreateToolhelp32Snapshot
mov esi, eax
cmp esi, 0xffffffff
mov dword [esp + 0xc], esi
je 0x493fab
lea ecx, [esp + 0x18]
push ecx
push esi
call sub.KERNEL32.dll_Module32First
test eax, eax
je 0x493fab
mov eax, dword [0x645360]
mov esi, dword [0x64535c]
push ebx
cmp eax, eax
push edi
mov dword [esp + 0x10], 0
mov ebx, eax
mov edx, esi
je 0x493d1c
mov esi, eax
mov edi, edx
add eax, 0x224
mov ecx, 0x89
add edx, 0x224
cmp eax, ebx
rep movsd dword es:[edi], dword [esi]
jne 0x493cfc
mov esi, dword [0x64535c]
mov ecx, edx
mov dword [0x645360], ecx
jmp 0x493d32
mov ecx, dword [0x645360]
mov esi, dword [0x64535c]
mov edx, dword [0x645364]
mov eax, 0x77975b9
sub edx, ecx
mov ebx, ecx
imul edx
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
cmp edx, 1
jae 0x493e5b
test esi, esi
je 0x493d76
mov edx, ecx
mov eax, 0x77975b9
sub edx, esi
imul edx
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
cmp edx, 1
mov edi, edx
ja 0x493d7b
mov edi, 1
test esi, esi
jne 0x493d83
xor edx, edx
jmp 0x493d96
sub ecx, esi
mov eax, 0x77975b9
imul ecx
sar edx, 4
mov ecx, edx
shr ecx, 0x1f
add edx, ecx
add edi, edx
test edi, edi
mov eax, edi
jge 0x493da0
xor eax, eax
mov edx, eax
shl edx, 4
add edx, eax
lea eax, [eax + edx*8]
shl eax, 2
push eax
call fcn.00592392
mov ecx, dword [0x64535c]
add esp, 4
mov esi, eax
push esi
push ebx
push ecx
mov ecx, 0x645358
call fcn.004e8cf0
lea edx, [esp + 0x20]
mov ebp, eax
push edx
push 1
push ebp
mov ecx, 0x645358
call fcn.004e8d30
mov eax, dword [0x645360]
add ebp, 0x224
push ebp
push eax
push ebx
mov ecx, 0x645358
call fcn.004e8cf0
mov ecx, dword [0x645360]
mov edx, dword [0x64535c]
push ecx
push edx
mov ecx, 0x645358
call fcn.004e8b90
mov eax, dword [0x64535c]
push eax
call fcn.005923bb
mov ecx, edi
add esp, 4
shl ecx, 4
add ecx, edi
lea edx, [edi + ecx*8]
mov ecx, 0x645358
lea eax, [esi + edx*4]
mov dword [0x645364], eax
call fcn.004e8cc0
inc eax
mov ebp, dword [esp + 0x1c]
mov ecx, eax
mov dword [0x64535c], esi
shl ecx, 4
add ecx, eax
lea edx, [eax + ecx*8]
lea eax, [esi + edx*4]
mov dword [0x645360], eax
jmp 0x493f4e
xor edx, edx
mov eax, 0x77975b9
mov dword [esp + 0x18], edx
imul edx
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
cmp edx, 1
jae 0x493ee1
lea edx, [ecx + 0x224]
push edx
push ecx
push ecx
mov ecx, 0x645358
call fcn.004e8cf0
mov esi, dword [0x645360]
lea eax, [esp + 0x20]
mov ecx, esi
push eax
sub ecx, ebx
mov eax, 0x77975b9
imul ecx
sar edx, 4
mov ecx, edx
mov eax, 1
shr ecx, 0x1f
add edx, ecx
mov ecx, 0x645358
sub eax, edx
push eax
push esi
call fcn.004e8d30
mov edx, dword [0x645360]
mov eax, ebx
cmp ebx, edx
je 0x493f44
mov edi, eax
add eax, 0x224
mov ecx, 0x89
lea esi, [esp + 0x20]
cmp eax, edx
rep movsd dword es:[edi], dword [esi]
jne 0x493ec9
jmp 0x493f44
lea eax, [ecx - 0x224]
push ecx
push ecx
push eax
mov ecx, 0x645358
mov dword [esp + 0x24], eax
call fcn.004e8cf0
mov eax, dword [0x645360]
mov edx, eax
add eax, 0xfffffddc
cmp ebx, eax
je 0x493f22
sub eax, 0x224
sub edx, 0x224
mov ecx, 0x89
mov esi, eax
mov edi, edx
cmp eax, ebx
rep movsd dword es:[edi], dword [esi]
jne 0x493f08
lea edx, [ebx + 0x224]
mov eax, ebx
cmp ebx, edx
je 0x493f44
mov edi, eax
add eax, 0x224
mov ecx, 0x89
lea esi, [esp + 0x20]
cmp eax, edx
rep movsd dword es:[edi], dword [esi]
jne 0x493f2e
add dword [0x645360], 0x224
mov ecx, dword [esp + 0x10]
mov eax, ecx
inc ecx
push eax
push str.Module__d_n
push ebp
mov dword [esp + 0x1c], ecx
call fcn.00569935
lea ecx, [esp + 0x14c]
push ecx
push str.Name:__s_n
push ebp
call fcn.00569935
mov eax, dword [esp + 0x4c]
mov edx, dword [esp + 0x50]
add edx, eax
push edx
push eax
push str.Address:_0x_08x_0x_08x_n
push ebp
call fcn.00569935
mov esi, dword [esp + 0x3c]
add esp, 0x28
lea eax, [esp + 0x20]
push eax
push esi
call sub.KERNEL32.dll_Module32Next
test eax, eax
jne 0x493d26
pop edi
pop ebx
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push 0x62a014
push ebp
call fcn.00569935
push ebp
call fcn.005697cf
push ebp
call fcn.00568c51
add esp, 0x10
pop esi
pop ebp
add esp, 0x234
ret