Function at 0x408550
Capabilities:
Enumerate process modules

Disassembly:
mov eax, 0x4014
call fcn.0040c730
mov eax, dword [0x43a040]
xor eax, esp
mov dword [esp + 0x4010], eax
push ebx
push esi
mov esi, dword [esp + 0x4020]
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov ebx, eax
lea eax, [esp + 0xc]
push eax
push 0
push 0
push ebx
mov dword [esp + 0x24], ebx
call sub.KERNEL32.dll_K32EnumProcessModules
test eax, eax
je 0x408792
mov eax, dword [esp + 0xc]
test eax, eax
je 0x408792
push 1
push eax
call fcn.004141f0
add esp, 8
mov dword [esp + 8], eax
test eax, eax
je 0x408792
push ebp
push edi
lea ecx, [esp + 0x14]
push ecx
push dword [esp + 0x18]
push eax
push ebx
call sub.KERNEL32.dll_K32EnumProcessModules
test eax, eax
je 0x408758
push 0x1000
lea eax, [esp + 0x2024]
push eax
lea eax, [esi + 0x2012]
push eax
call fcn.00409510
add esp, 0xc
test eax, eax
je 0x408758
lea esi, [esp + 0x2020]
lea ecx, [esi + 2]
nop
mov ax, word [esi]
add esi, 2
test ax, ax
jne 0x408610
mov ebp, dword [esp + 0x14]
sub esi, ecx
shr ebp, 2
xor ebx, ebx
push ebp
push str.LOADER:_found__d_loaded_DLLs..._n
sar esi, 1
call fcn.004025b0
add esp, 8
xor edi, edi
test ebp, ebp
je 0x408670
mov ecx, dword [esp + 0x10]
push 0x1000
lea eax, [esp + 0x24]
push eax
push dword [ecx + edi*4]
push dword [esp + 0x28]
call sub.KERNEL32.dll_K32GetModuleFileNameExW
test eax, eax
jne 0x4086b8
push str.LOADER:_could_not_resolve_DLLs_name___skipping__n
call fcn.004025b0
add esp, 4
mov ecx, dword [esp + 0x10]
inc edi
cmp edi, ebp
jl 0x408640
push ebx
push str.LOADER:_found__d_DLL_s__loaded_from_applications_temporary_directory__n
call fcn.004025b0
add esp, 8
test ebx, ebx
jle 0x408758
mov edi, dword [esp + 0x10]
mov ebp, dword [esp + 0x1c]
nop
push 0x1000
lea eax, [esp + 0x24]
push eax
push dword [edi]
push ebp
call sub.KERNEL32.dll_K32GetModuleFileNameExW
test eax, eax
jne 0x4086f1
push str.LOADER:_could_not_resolve_DLLs_name__was_it_unloaded_____skipping__n
call fcn.004025b0
add esp, 4
jmp 0x40874c
lea eax, [esp + 0x20]
push eax
push str.LOADER:_loaded_DLL:__ls_n
call fcn.004025b0
push esi
lea eax, [esp + 0x2c]
push eax
lea eax, [esp + 0x2030]
push eax
call fcn.00416886
add esp, 0x14
test eax, eax
jne 0x408667
mov ecx, dword [esp + 0x10]
mov eax, dword [ecx + edi*4]
mov dword [ecx + ebx*4], eax
inc ebx
jmp 0x40866b
mov esi, 1
lea eax, [esp + 0x20]
push esi
push eax
push str.LOADER:_forcing_unload_of__ls__attempt__d__n
call fcn.004025b0
add esp, 0xc
push dword [edi]
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
test eax, eax
je 0x40873a
cmp esi, 0x20
jge 0x408782
inc esi
lea eax, [esp + 0x20]
push esi
push eax
push str.LOADER:_forcing_unload_of__ls__attempt__d__n
call fcn.004025b0
add esp, 0xc
push dword [edi]
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
test eax, eax
jne 0x408715
push esi
push str.LOADER:_DLL_unloaded_after__d_attempt_s___n
call fcn.004025b0
add esp, 8
inc dword [esp + 0x18]
add edi, 4
sub ebx, 1
jne 0x408690
mov ebp, dword [esp + 0x10]
push ebp
call fcn.00414200
mov eax, dword [esp + 0x1c]
add esp, 4
pop edi
pop ebp
pop esi
pop ebx
mov ecx, dword [esp + 0x4010]
xor ecx, esp
call fcn.0040c3f3
add esp, 0x4014
ret
push esi
push str.LOADER:_giving_up_after__d_attempts__n
call fcn.004025b0
add esp, 8
jmp 0x40874c
mov ecx, dword [esp + 0x4018]
xor eax, eax
pop esi
pop ebx
xor ecx, esp
call fcn.0040c3f3
add esp, 0x4014
ret