Function at 0x10008280
Capabilities:
Enumerate process modules
Get process image filename

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1001190b
mov eax, dword fs:[0]
push eax
mov eax, 0x1638
call fcn.10010990
mov eax, dword [0x1013ba6c]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
lea eax, [ebp - 0x158c]
push eax
mov ebx, ecx
push 0x1000
lea ecx, [ebp - 0x1460]
xor edi, edi
push ecx
mov dword [ebp - 0x158c], edi
call sub.PSAPI.DLL_EnumProcesses
test eax, eax
jne 0x100082df
xor al, al
jmp 0x100084f9
push 1
push 0x40
push 2
push str.outtext.txt
lea ecx, [ebp - 0x1644]
call fcn.10007e70
mov ecx, dword [ebp - 0x158c]
shr ecx, 2
xor esi, esi
mov dword [ebp - 4], edi
mov dword [ebp - 0x1590], esi
mov dword [ebp - 0x1598], ecx
cmp ecx, edi
jle 0x1000845a
jmp 0x10008320
lea eax, [ebp + esi*4 - 0x1460]
mov dword [ebp - 0x159c], eax
mov eax, dword [eax]
cmp eax, edi
je 0x1000844b
push eax
push edi
push 0x410
call dword [sym.imp.KERNEL32.dll_OpenProcess]
mov edi, eax
mov dword [ebp - 0x1594], edi
test edi, edi
je 0x1000843c
push 0x104
lea edx, [ebp - 0x258]
push edx
push edi
call sub.PSAPI.DLL_GetProcessImageFileNameW
test eax, eax
je 0x1000843c
push 0x100139bc
lea eax, [ebp - 0x258]
push eax
lea ecx, [ebp - 0x1644]
push ecx
call fcn.10006250
add esp, 8
push eax
call fcn.100064a0
lea edx, [ebp - 0x258]
push edx
call fcn.1000d320
push eax
lea eax, [ebp - 0x50]
push 0x100135ec
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
push 0x104
lea ecx, [ebp - 0x460]
push ecx
lea edx, [ebp - 0x258]
push edx
call fcn.1000e410
add esp, 0x24
test al, al
je 0x1000843c
mov eax, dword [ebp - 0x159c]
mov ecx, dword [eax]
lea edx, [ebp - 0x460]
push edx
mov dword [ebp - 0x1588], ecx
lea eax, [ebp - 0x1564]
push 0x100139b8
mov ecx, 8
lea esi, [ebp - 0x50]
lea edi, [ebp - 0x1584]
push eax
rep movsd dword es:[edi], dword [esi]
call dword [sym.imp.MSVCR100.dll_sprintf]
mov ecx, dword [ebx + 4]
add esp, 0xc
cmp ecx, dword [ebx + 8]
jne 0x10008415
push 1
mov ecx, ebx
call fcn.10007b90
mov edi, dword [ebx + 4]
test edi, edi
je 0x10008429
mov ecx, 0x4a
lea esi, [ebp - 0x1588]
rep movsd dword es:[edi], dword [esi]
add dword [ebx + 4], 0x128
mov esi, dword [ebp - 0x1590]
mov edi, dword [ebp - 0x1594]
push edi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov ecx, dword [ebp - 0x1598]
xor edi, edi
inc esi
mov dword [ebp - 0x1590], esi
cmp esi, ecx
jl 0x10008320
lea esi, [ebp - 0x1640]
cmp dword [ebp - 0x15ec], edi
je 0x10008489
mov ecx, esi
call fcn.100073a0
test al, al
jne 0x10008475
xor esi, esi
mov edx, dword [ebp - 0x15ec]
push edx
call dword [sym.imp.MSVCR100.dll_fclose]
add esp, 4
test eax, eax
je 0x1000848b
xor esi, esi
lea ecx, [ebp - 0x1640]
mov byte [ebp - 0x15f0], 0
mov byte [ebp - 0x15f6], 0
call dword [sym.imp.MSVCP100.dll_protected:_void___thiscall_std::basic_streambuf_wchar_t__struct_std::char_traits_wchar_t__::_Init_void_]
mov eax, dword [0x1013bb50]
mov dword [ebp - 0x15ec], edi
mov dword [ebp - 0x15f4], eax
mov dword [ebp - 0x15fc], edi
cmp esi, edi
jne 0x100084d9
mov ecx, dword [ebp - 0x1644]
mov ecx, dword [ecx + 4]
push edi
push 2
lea ecx, [ebp + ecx - 0x1644]
call dword [sym.imp.MSVCP100.dll_public:_void___thiscall_std::basic_ios_wchar_t__struct_std::char_traits_wchar_t__::setstate_int__bool_]
lea ecx, [ebp - 0x15e4]
mov dword [ebp - 4], 0xffffffff
call fcn.10007f70
lea ecx, [ebp - 0x15e4]
call dword [sym.imp.MSVCP100.dll_public_virtual:_void___thiscall_std::basic_ios_wchar_t__struct_std::char_traits_wchar_t__::destructor_void_]
mov al, 1
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.1001092b
mov esp, ebp
pop ebp
ret