Function at 0x403740
Capabilities:
Enumerate process modules

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x413273
mov eax, dword fs:[0]
push eax
push ebx
sub esp, 0x4a8
mov eax, dword [0x41d040]
xor eax, ebp
mov dword [ebp - 0x14], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edi, ecx
mov esi, dword [ebx + 8]
mov dword [ebp - 0x450], esi
cmp byte [edi + 0x7c], 0
mov dword [ebp - 0x44c], esi
je 0x4037c9
lea eax, [edi + 0x2c]
lea edi, [eax + 0x20]
mov dword [esi], eax
push edi
mov dword [esi + 4], edi
call fcn.00405e0d
add esp, 4
test eax, eax
jne 0x403a9c
cmp dword [edi + 0x2c], 0x7fffffff
lea eax, [edi + 0x2c]
je 0x403a75
jmp 0x403a53
mov eax, dword [edi + 0xc]
mov dword [ebp - 0x450], eax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov ecx, dword [ebp - 0x450]
cmp ecx, eax
je 0x403a0b
push ecx
push 0x18
call dword [sym.imp.KERNEL32.dll_CreateToolhelp32Snapshot]
mov ecx, eax
lea eax, [edi + 0x2c]
mov dword [ebp - 0x44c], ecx
cmp ecx, 0xffffffff
jne 0x403835
mov byte [edi + 0x7c], 1
lea edi, [eax + 0x20]
mov dword [esi], eax
push edi
mov dword [esi + 4], edi
call fcn.00405e0d
add esp, 4
test eax, eax
jne 0x403a82
cmp dword [edi + 0x2c], 0x7fffffff
jne 0x403a53
mov dword [edi + 0x2c], 0x7ffffffe
jmp 0x403a90
push 0x424
lea eax, [ebp - 0x444]
push 0
push eax
call fcn.00407fe0
add esp, 0xc
mov dword [ebp - 0x448], 0x428
lea eax, [ebp - 0x448]
push eax
push dword [ebp - 0x44c]
call dword [sym.imp.KERNEL32.dll_Module32FirstW]
test eax, eax
jne 0x403871
lea eax, [edi + 0x2c]
jmp 0x4037ff
lea ecx, [edi + 0x2c]
lea eax, [ecx + 0x20]
mov dword [ebp - 0x1c], ecx
push eax
mov dword [ebp - 0x18], eax
call fcn.00405e0d
add esp, 4
test eax, eax
jne 0x403a82
cmp dword [edi + 0x78], 0x7fffffff
je 0x403a89
mov dword [ebp - 4], eax
nop
lea eax, [ebp - 0x228]
lea edx, [eax + 2]
nop dword [eax]
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x4038b0
sub eax, edx
mov dword [ebp - 0x45c], 0
sar eax, 1
lea ecx, [ebp - 0x46c]
push eax
lea eax, [ebp - 0x228]
mov dword [ebp - 0x458], 0
xorps xmm0, xmm0
push eax
movups xmmword [ebp - 0x46c], xmm0
call fcn.00402190
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x4a4]
mov eax, dword [ebp - 0x434]
mov dword [ebp - 0x4ac], eax
mov eax, dword [ebp - 0x430]
mov dword [ebp - 0x4a8], eax
lea eax, [ebp - 0x46c]
push eax
call fcn.00403ab0
mov dword [ebp - 0x48c], 0
mov dword [ebp - 0x488], 0
mov dword [ebp - 0x484], 0
mov byte [ebp - 0x480], 0
mov dword [ebp - 0x47c], 0xffffffff
mov dword [ebp - 0x478], 0xffffffff
mov dword [ebp - 0x474], 0
lea eax, [ebp - 0x42c]
mov byte [ebp - 4], 2
push eax
lea eax, [ebp - 0x4b4]
push eax
lea ecx, [edi + 0x2c]
call fcn.00403d40
lea ecx, [ebp - 0x4ac]
push ecx
mov ecx, dword [eax]
add ecx, 0xc
call fcn.00403260
lea ecx, [ebp - 0x4ac]
call fcn.00404530
mov byte [ebp - 4], 0
mov ecx, dword [ebp - 0x458]
cmp ecx, 7
jbe 0x4039db
mov edx, dword [ebp - 0x46c]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x4039d1
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x403a97
push ecx
push edx
call fcn.00406906
add esp, 8
lea eax, [ebp - 0x448]
push eax
push dword [ebp - 0x44c]
call dword [sym.imp.KERNEL32.dll_Module32NextW]
test eax, eax
jne 0x4038a0
lea eax, [edi + 0x4c]
mov dword [ebp - 4], 0xffffffff
push eax
call fcn.00405e1e
add esp, 4
jmp 0x403a32
push 0
call fcn.00404e40
mov esi, eax
test esi, esi
je 0x403a2c
push esi
mov ecx, edi
call fcn.00402f90
push esi
call fcn.00404e40
mov esi, eax
test esi, esi
jne 0x403a18
mov esi, dword [ebp - 0x44c]
mov byte [edi + 0x7c], 1
lea eax, [edi + 0x2c]
lea edi, [eax + 0x20]
mov dword [esi], eax
push edi
mov dword [esi + 4], edi
call fcn.00405e0d
add esp, 4
test eax, eax
jne 0x403a9c
jmp 0x4037b4
mov eax, esi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.004065bd
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret 4
push 6
mov dword [eax], 0x7ffffffe
call fcn.004062ed
push 5
call fcn.004062ed
mov dword [edi + 0x78], 0x7ffffffe
push 6
call fcn.004062ed
call fcn.00409a1f
push 5
call fcn.004062ed
int3