Function at 0x411680
Capabilities:
Enumerate process modules

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x444f86
mov eax, dword fs:[0]
push eax
mov eax, 0x115c
call fcn.00418dd0
mov eax, dword [0x4716e0]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov ebx, dword [ebp + 8]
lea eax, [ebp - 0x1148]
push eax
push 0x1000
lea eax, [ebp - 0x1114]
push eax
mov dword [ebp - 0x115c], ebx
call sub.PSAPI.DLL_EnumProcesses
test eax, eax
je 0x41199d
mov ecx, dword [ebp - 0x1148]
shr ecx, 2
xor eax, eax
mov dword [ebp - 0x1164], ecx
mov dword [ebp - 0x1154], 0
mov dword [ebp - 0x1158], eax
test ecx, ecx
je 0x41199d
jmp 0x411710
push dword [ebp + eax*4 - 0x1114]
push 0
push 0x410
call dword [sym.imp.KERNEL32.dll_OpenProcess]
mov esi, eax
test esi, esi
je 0x411984
lea eax, [ebp - 0x114c]
push eax
push 4
lea eax, [ebp - 0x1150]
push eax
push esi
call sub.PSAPI.DLL_EnumProcessModules
test eax, eax
je 0x411984
push 0x104
lea eax, [ebp - 0x114]
push eax
push dword [ebp - 0x1150]
push esi
call sub.PSAPI.DLL_GetModuleBaseNameA
cmp byte [ebp - 0x114], 0
mov dword [ebp - 0x1130], 0xf
mov dword [ebp - 0x1134], 0
mov byte [ebp - 0x1144], 0
jne 0x41178c
xor ecx, ecx
jmp 0x41179e
lea ecx, [ebp - 0x114]
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x411795
sub ecx, edx
push ecx
lea eax, [ebp - 0x114]
push eax
lea ecx, [ebp - 0x1144]
call fcn.004015c0
mov esi, dword [ebp - 0x1130]
mov edx, dword [ebp - 0x1144]
mov eax, dword [ebp - 0x1134]
cmp esi, 0x10
lea ecx, [ebp - 0x1144]
cmovae ecx, edx
lea edi, [ebp - 0x1144]
cmovae edi, edx
add eax, ecx
cmp esi, 0x10
lea ecx, [ebp - 0x1144]
cmovae ecx, edx
mov dword [ebp - 4], 0
cmp ecx, eax
je 0x41180a
push 0x418f8d
push edi
push eax
push ecx
lea eax, [ebp - 0x1168]
push eax
call fcn.00411230
add esp, 0x14
jmp 0x411810
mov dword [ebp - 0x1168], edi
cmp byte [ebx], 0
mov dword [ebp - 0x1118], 0xf
mov dword [ebp - 0x111c], 0
mov byte [ebp - 0x112c], 0
jne 0x411834
xor eax, eax
jmp 0x411849
mov eax, ebx
lea edx, [eax + 1]
lea esp, [esp]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x411840
sub eax, edx
push eax
push ebx
lea ecx, [ebp - 0x112c]
call fcn.004015c0
mov edi, dword [ebp - 0x1118]
mov ebx, dword [ebp - 0x112c]
mov esi, dword [ebp - 0x111c]
cmp edi, 0x10
lea eax, [ebp - 0x112c]
cmovae eax, ebx
lea ecx, [ebp - 0x112c]
cmovae ecx, ebx
add eax, esi
cmp edi, 0x10
lea edx, [ebp - 0x112c]
cmovae edx, ebx
mov byte [ebp - 4], 1
cmp edx, eax
je 0x4118be
push 0x418f8d
push ecx
push eax
push edx
lea eax, [ebp - 0x1160]
push eax
call fcn.00411230
mov edi, dword [ebp - 0x1118]
mov esi, dword [ebp - 0x111c]
mov ebx, dword [ebp - 0x112c]
add esp, 0x14
jmp 0x4118c4
mov dword [ebp - 0x1160], ecx
cmp edi, 0x10
lea edx, [ebp - 0x112c]
cmovae edx, ebx
cmp dword [ebp - 0x1130], 0x10
lea ecx, [ebp - 0x1144]
cmovae ecx, dword [ebp - 0x1144]
cmp dword [ebp - 0x1134], esi
mov eax, esi
cmovb eax, dword [ebp - 0x1134]
push eax
push edx
push ecx
call fcn.00401a00
add esp, 0xc
test eax, eax
jne 0x41191a
mov ecx, dword [ebp - 0x1134]
cmp ecx, esi
jae 0x411911
or eax, 0xffffffff
jmp 0x411918
xor eax, eax
cmp ecx, esi
setne al
test eax, eax
sete al
test al, al
je 0x411937
mov eax, dword [ebp - 0x1154]
inc eax
mov dword [ebp - 0x1154], eax
cmp eax, 1
jg 0x4119bb
cmp edi, 0x10
jb 0x411945
push ebx
call fcn.0041572d
add esp, 4
cmp dword [ebp - 0x1130], 0x10
mov dword [ebp - 0x1118], 0xf
mov dword [ebp - 0x111c], 0
mov byte [ebp - 0x112c], 0
mov dword [ebp - 4], 0xffffffff
jb 0x41197e
push dword [ebp - 0x1144]
call fcn.0041572d
add esp, 4
mov ebx, dword [ebp - 0x115c]
mov eax, dword [ebp - 0x1158]
inc eax
mov dword [ebp - 0x1158], eax
cmp eax, dword [ebp - 0x1164]
jb 0x411710
xor al, al
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.004163f4
mov esp, ebp
pop ebp
ret
cmp edi, 0x10
jb 0x4119c9
push ebx
call fcn.0041572d
add esp, 4
cmp dword [ebp - 0x1130], 0x10
mov dword [ebp - 0x1118], 0xf
mov dword [ebp - 0x111c], 0
mov byte [ebp - 0x112c], 0
jb 0x4119fb
push dword [ebp - 0x1144]
call fcn.0041572d
add esp, 4
mov al, 1
jmp 0x41199f