Function at 0x49ee30
Capabilities:
Enumerate process modules

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x230
mov eax, dword [0x6c5580]
xor eax, esp
mov dword [esp + 0x22c], eax
push esi
push edi
push ecx
push 8
call dword [sym.imp.KERNEL32.dll_CreateToolhelp32Snapshot]
mov esi, eax
cmp esi, 0xffffffff
je 0x49ee7b
lea eax, [esp + 8]
mov dword [esp + 8], 0x224
push eax
push esi
call dword [sym.imp.KERNEL32.dll_Module32First]
test eax, eax
jne 0x49ee91
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
xor eax, eax
pop edi
pop esi
mov ecx, dword [esp + 0x22c]
xor ecx, esp
call fcn.0058cfb3
mov esp, ebp
pop ebp
ret
mov edi, dword [sym.imp.KERNEL32.dll_Module32Next]
nop word [eax + eax]
mov ecx, str.m2bob.dll
lea eax, [esp + 0x28]
nop dword [eax]
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x49eed0
test dl, dl
je 0x49eecc
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x49eed0
add eax, 2
add ecx, 2
test dl, dl
jne 0x49eeb0
xor eax, eax
jmp 0x49eed5
sbb eax, eax
or eax, 1
test eax, eax
je 0x49f3d9
mov ecx, str.m2bob.exe
lea eax, [esp + 0x28]
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x49ef06
test dl, dl
je 0x49ef02
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x49ef06
add eax, 2
add ecx, 2
test dl, dl
jne 0x49eee6
xor eax, eax
jmp 0x49ef0b
sbb eax, eax
or eax, 1
test eax, eax
je 0x49f3d9
mov ecx, str.M2Bob_Dll.dll
lea eax, [esp + 0x28]
nop dword [eax]
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x49ef40
test dl, dl
je 0x49ef3c
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x49ef40
add eax, 2
add ecx, 2
test dl, dl
jne 0x49ef20
xor eax, eax
jmp 0x49ef45
sbb eax, eax
or eax, 1
test eax, eax
je 0x49f3d9
mov ecx, str.Python_Loader_2.7.dll
lea eax, [esp + 0x28]
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x49ef76
test dl, dl
je 0x49ef72
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x49ef76
add eax, 2
add ecx, 2
test dl, dl
jne 0x49ef56
xor eax, eax
jmp 0x49ef7b
sbb eax, eax
or eax, 1
test eax, eax
je 0x49f3d9
mov ecx, str.Injector.exe
lea eax, [esp + 0x28]
nop dword [eax]
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x49efb0
test dl, dl
je 0x49efac
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x49efb0
add eax, 2
add ecx, 2
test dl, dl
jne 0x49ef90
xor eax, eax
jmp 0x49efb5
sbb eax, eax
or eax, 1
test eax, eax
je 0x49f3d9
mov ecx, str.Extreme_Injector_v3.exe
lea eax, [esp + 0x28]
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x49efe6
test dl, dl
je 0x49efe2
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x49efe6
add eax, 2
add ecx, 2
test dl, dl
jne 0x49efc6
xor eax, eax
jmp 0x49efeb
sbb eax, eax
or eax, 1
test eax, eax
je 0x49f3d9
mov ecx, str.lalaker1.app.injector.exe
lea eax, [esp + 0x28]
nop dword [eax]
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x49f020
test dl, dl
je 0x49f01c
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x49f020
add eax, 2
add ecx, 2
test dl, dl
jne 0x49f000
xor eax, eax
jmp 0x49f025
sbb eax, eax
or eax, 1
test eax, eax
je 0x49f3d9
mov ecx, str.lalaker1.app.dll
lea eax, [esp + 0x28]
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x49f056
test dl, dl
je 0x49f052
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x49f056
add eax, 2
add ecx, 2
test dl, dl
jne 0x49f036
xor eax, eax
jmp 0x49f05b
sbb eax, eax
or eax, 1
test eax, eax
je 0x49f3d9
mov ecx, str.starter.exe
lea eax, [esp + 0x28]
nop dword [eax]
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x49f090
test dl, dl
je 0x49f08c
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x49f090
add eax, 2
add ecx, 2
test dl, dl
jne 0x49f070
xor eax, eax
jmp 0x49f095
sbb eax, eax
or eax, 1
test eax, eax
je 0x49f3d9
mov ecx, str.crash.exe
lea eax, [esp + 0x28]
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x49f0c6
test dl, dl
je 0x49f0c2
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x49f0c6
add eax, 2
add ecx, 2
test dl, dl
jne 0x49f0a6
xor eax, eax
jmp 0x49f0cb
sbb eax, eax
or eax, 1
test eax, eax
je 0x49f3d9
mov ecx, str.allochook_i386.dll
lea eax, [esp + 0x28]
nop dword [eax]
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x49f100
test dl, dl
je 0x49f0fc
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x49f100
add eax, 2
add ecx, 2
test dl, dl
jne 0x49f0e0
xor eax, eax
jmp 0x49f105
sbb eax, eax
or eax, 1
test eax, eax
je 0x49f3d9
mov ecx, str.allochook_x86_64.dll
lea eax, [esp + 0x28]
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x49f136
test dl, dl
je 0x49f132
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x49f136
add eax, 2
add ecx, 2
test dl, dl
jne 0x49f116
xor eax, eax
jmp 0x49f13b
sbb eax, eax
or eax, 1
test eax, eax
je 0x49f3d9
mov ecx, str.ced3d9hook.dll
lea eax, [esp + 0x28]
nop dword [eax]
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x49f170
test dl, dl
je 0x49f16c
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x49f170
add eax, 2
add ecx, 2
test dl, dl
jne 0x49f150
xor eax, eax
jmp 0x49f175
sbb eax, eax
or eax, 1
test eax, eax
je 0x49f3d9
mov ecx, str.ced3d9hook64.dll
lea eax, [esp + 0x28]
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x49f1a6
test dl, dl
je 0x49f1a2
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x49f1a6
add eax, 2
add ecx, 2
test dl, dl
jne 0x49f186
xor eax, eax
jmp 0x49f1ab
sbb eax, eax
or eax, 1
test eax, eax
je 0x49f3d9
mov ecx, str.ced3d10hook.dll
lea eax, [esp + 0x28]
nop dword [eax]
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x49f1e0
test dl, dl
je 0x49f1dc
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x49f1e0
add eax, 2
add ecx, 2
test dl, dl
jne 0x49f1c0
xor eax, eax
jmp 0x49f1e5
sbb eax, eax
or eax, 1
test eax, eax
je 0x49f3d9
mov ecx, str.ced3d10hook64.dll
lea eax, [esp + 0x28]
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x49f216
test dl, dl
je 0x49f212
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x49f216
add eax, 2
add ecx, 2
test dl, dl
jne 0x49f1f6
xor eax, eax
jmp 0x49f21b
sbb eax, eax
or eax, 1
test eax, eax
je 0x49f3d9
mov ecx, str.ced3d11hook.dll
lea eax, [esp + 0x28]
nop dword [eax]
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x49f250
test dl, dl
je 0x49f24c
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x49f250
add eax, 2
add ecx, 2
test dl, dl
jne 0x49f230
xor eax, eax
jmp 0x49f255
sbb eax, eax
or eax, 1
test eax, eax
je 0x49f3d9
mov ecx, str.ced3d11hook64.dll
lea eax, [esp + 0x28]
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x49f286
test dl, dl
je 0x49f282
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x49f286
add eax, 2
add ecx, 2
test dl, dl
jne 0x49f266
xor eax, eax
jmp 0x49f28b
sbb eax, eax
or eax, 1
test eax, eax
je 0x49f3d9
mov ecx, str.Cheat_Engine.exe
lea eax, [esp + 0x28]
nop dword [eax]
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x49f2c0
test dl, dl
je 0x49f2bc
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x49f2c0
add eax, 2
add ecx, 2
test dl, dl
jne 0x49f2a0
xor eax, eax
jmp 0x49f2c5
sbb eax, eax
or eax, 1
test eax, eax
je 0x49f3d9
mov ecx, str.cheatengine_i386.exe
lea eax, [esp + 0x28]
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x49f2f6
test dl, dl
je 0x49f2f2
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x49f2f6
add eax, 2
add ecx, 2
test dl, dl
jne 0x49f2d6
xor eax, eax
jmp 0x49f2fb
sbb eax, eax
or eax, 1
test eax, eax
je 0x49f3d9
mov ecx, str.cheatengine_x86_64.exe
lea eax, [esp + 0x28]
nop dword [eax]
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x49f330
test dl, dl
je 0x49f32c
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x49f330
add eax, 2
add ecx, 2
test dl, dl
jne 0x49f310
xor eax, eax
jmp 0x49f335
sbb eax, eax
or eax, 1
test eax, eax
je 0x49f3d9
mov ecx, str.cheatengine_x86_64_SSE4_AVX2.exe
lea eax, [esp + 0x28]
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x49f366
test dl, dl
je 0x49f362
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x49f366
add eax, 2
add ecx, 2
test dl, dl
jne 0x49f346
xor eax, eax
jmp 0x49f36b
sbb eax, eax
or eax, 1
test eax, eax
je 0x49f3d9
mov ecx, str.speedhack_i386.dll
lea eax, [esp + 0x28]
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x49f398
test dl, dl
je 0x49f394
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x49f398
add eax, 2
add ecx, 2
test dl, dl
jne 0x49f378
xor eax, eax
jmp 0x49f39d
sbb eax, eax
or eax, 1
test eax, eax
je 0x49f3d9
mov ecx, str.speedhack_x86_64.dll
lea eax, [esp + 0x28]
nop word [eax + eax]
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x49f3d0
test dl, dl
je 0x49f3cc
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x49f3d0
add eax, 2
add ecx, 2
test dl, dl
jne 0x49f3b0
xor eax, eax
jmp 0x49f3d5
sbb eax, eax
or eax, 1
test eax, eax
jne 0x49f3ec
lea ecx, [esp + 0x28]
call fcn.0049f980
mov ecx, str.revision2indito.exe
call fcn.0049f980
lea eax, [esp + 8]
push eax
push esi
call edi
test eax, eax
jne 0x49eea0
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov ecx, dword [esp + 0x234]
mov eax, 1
pop edi
pop esi
xor ecx, esp
call fcn.0058cfb3
mov esp, ebp
pop ebp
ret