Function at 0x433fc0
Capabilities:
Enumerate process modules

Disassembly:
push ebp
mov ebp, esp
lea esp, [esp - 0x284]
push ebx
push esi
push edi
mov dword [ebp - 0x25c], eax
mov dword [ebp - 4], 0
mov dword [ebp - 0x218], 0
mov dword [ebp - 0x21c], 0
mov dword [ebp - 0x220], 0
mov dword [ebp - 0x234], 0
mov dword [ebp - 0x254], 0
mov dword [ebp - 0x250], 0
mov dword [ebp - 0x24c], 0
mov dword [ebp - 0x248], 0
mov dword [ebp - 0x244], 0
mov dword [ebp - 0x240], 0
mov dword [ebp - 0x238], 0
xor eax, eax
push fcn.00433f20
push ebp
push 0x414a60
push dword fs:[eax]
mov dword fs:[eax], esp
mov dword [ebp - 0x260], 0
xor eax, eax
mov dword [ebp - 8], 0
mov dword [ebp - 0xc], 0
mov dword [ebp - 0x258], 0
mov dword [ebp - 0x264], 0
mov ecx, dword [0x5f5000]
mov edx, 1
mov eax, 0x620cb8
call fcn.00429c20
mov dword [ebp - 0x268], eax
mov ebx, 0x620d38
lea eax, [ebp - 0x238]
mov edx, 0x620d38
call fcn.0040cf40
mov dword [ebp - 0x23c], 4
lea eax, [ebp - 0x23c]
push eax
mov edx, 0x620d38
mov ecx, 1
lea eax, [ebp - 0x238]
call fcn.0040d060
lea eax, [ebp - 0x240]
push eax
mov eax, dword [0x5f2970]
call fcn.0040cf30
mov ecx, eax
mov edx, dword [0x5f2970]
mov eax, 0x617d90
call fcn.00423b60
mov edx, dword [ebp - 0x240]
mov eax, dword [ebp - 0x238]
call fcn.00408bc0
lea eax, [ebp - 0x240]
push eax
mov eax, dword [0x5f2980]
call fcn.0040cf30
mov ecx, eax
mov edx, dword [0x5f2980]
mov eax, 0x617d90
call fcn.00423b60
mov edx, dword [ebp - 0x240]
mov eax, dword [ebp - 0x238]
add eax, 4
call fcn.00408bc0
lea eax, [ebp - 0x240]
push eax
mov eax, dword [0x5f2990]
call fcn.0040cf30
mov ecx, eax
mov edx, dword [0x5f2990]
mov eax, 0x617d90
call fcn.00423b60
mov edx, dword [ebp - 0x240]
mov eax, dword [ebp - 0x238]
add eax, 8
call fcn.00408bc0
lea eax, [ebp - 0x240]
push eax
mov eax, dword [0x5f29a0]
call fcn.0040cf30
mov ecx, eax
mov edx, dword [0x5f29a0]
mov eax, 0x617d90
call fcn.00423b60
mov edx, dword [ebp - 0x240]
mov eax, dword [ebp - 0x238]
add eax, 0xc
call fcn.00408bc0
mov edx, dword [ebp - 0x238]
mov ecx, dword [ebp - 0x268]
lea eax, [ecx + 8]
mov ecx, ebx
call fcn.0040d040
mov ecx, dword [0x5f50c0]
mov edx, 1
mov eax, 0x620cb8
call fcn.00429c20
mov dword [ebp - 0x26c], eax
mov ebx, 0x620d38
lea eax, [ebp - 0x238]
mov edx, 0x620d38
call fcn.0040cf40
mov dword [ebp - 0x23c], 3
lea eax, [ebp - 0x23c]
push eax
mov edx, 0x620d38
mov ecx, 1
lea eax, [ebp - 0x238]
call fcn.0040d060
lea eax, [ebp - 0x240]
push eax
mov eax, dword [0x5f29b0]
call fcn.0040cf30
mov ecx, eax
mov edx, dword [0x5f29b0]
mov eax, 0x617d90
call fcn.00423b60
mov edx, dword [ebp - 0x240]
mov eax, dword [ebp - 0x238]
call fcn.00408bc0
lea eax, [ebp - 0x240]
push eax
mov eax, dword [0x5f29c0]
call fcn.0040cf30
mov ecx, eax
mov edx, dword [0x5f29c0]
mov eax, 0x617d90
call fcn.00423b60
mov edx, dword [ebp - 0x240]
mov eax, dword [ebp - 0x238]
add eax, 4
call fcn.00408bc0
lea eax, [ebp - 0x240]
push eax
mov eax, dword [0x5f29d0]
call fcn.0040cf30
mov ecx, eax
mov edx, dword [0x5f29d0]
mov eax, 0x617d90
call fcn.00423b60
mov edx, dword [ebp - 0x240]
mov eax, dword [ebp - 0x238]
add eax, 8
call fcn.00408bc0
mov edx, dword [ebp - 0x238]
mov ecx, dword [ebp - 0x26c]
lea eax, [ecx + 8]
mov ecx, ebx
call fcn.0040d040
mov ecx, dword [0x5f50e0]
mov edx, 1
mov eax, 0x620cb8
call fcn.00429c20
mov edi, eax
mov ebx, 0x620d38
lea eax, [ebp - 0x238]
mov edx, 0x620d38
call fcn.0040cf40
mov dword [ebp - 0x23c], 2
lea eax, [ebp - 0x23c]
push eax
mov edx, 0x620d38
mov ecx, 1
lea eax, [ebp - 0x238]
call fcn.0040d060
lea eax, [ebp - 0x240]
push eax
mov eax, dword [0x5f29e0]
call fcn.0040cf30
mov ecx, eax
mov edx, dword [0x5f29e0]
mov eax, 0x617d90
call fcn.00423b60
mov edx, dword [ebp - 0x240]
mov eax, dword [ebp - 0x238]
call fcn.00408bc0
lea eax, [ebp - 0x240]
push eax
mov eax, dword [0x5f29f0]
call fcn.0040cf30
mov ecx, eax
mov edx, dword [0x5f29f0]
mov eax, 0x617d90
call fcn.00423b60
mov edx, dword [ebp - 0x240]
mov eax, dword [ebp - 0x238]
add eax, 4
call fcn.00408bc0
mov edx, dword [ebp - 0x238]
lea eax, [edi + 8]
mov ecx, ebx
call fcn.0040d040
mov ecx, dword [0x5f50f0]
mov edx, 1
mov eax, 0x620cb8
call fcn.00429c20
mov esi, eax
mov ebx, 0x620d38
lea eax, [ebp - 0x238]
mov edx, 0x620d38
call fcn.0040cf40
mov dword [ebp - 0x23c], 4
lea eax, [ebp - 0x23c]
push eax
mov edx, 0x620d38
mov ecx, 1
lea eax, [ebp - 0x238]
call fcn.0040d060
lea eax, [ebp - 0x240]
push eax
mov eax, dword [0x5f2a00]
call fcn.0040cf30
mov ecx, eax
mov edx, dword [0x5f2a00]
mov eax, 0x617d90
call fcn.00423b60
mov edx, dword [ebp - 0x240]
mov eax, dword [ebp - 0x238]
call fcn.00408bc0
lea eax, [ebp - 0x240]
push eax
mov eax, dword [0x5f2a30]
call fcn.0040cf30
mov ecx, eax
mov edx, dword [0x5f2a30]
mov eax, 0x617d90
call fcn.00423b60
mov edx, dword [ebp - 0x240]
mov eax, dword [ebp - 0x238]
add eax, 4
call fcn.00408bc0
lea eax, [ebp - 0x240]
push eax
mov eax, dword [0x5f2a10]
call fcn.0040cf30
mov ecx, eax
mov edx, dword [0x5f2a10]
mov eax, 0x617d90
call fcn.00423b60
mov edx, dword [ebp - 0x240]
mov eax, dword [ebp - 0x238]
add eax, 8
call fcn.00408bc0
lea eax, [ebp - 0x240]
push eax
mov eax, dword [0x5f2a20]
call fcn.0040cf30
mov ecx, eax
mov edx, dword [0x5f2a20]
mov eax, 0x617d90
call fcn.00423b60
mov edx, dword [ebp - 0x240]
mov eax, dword [ebp - 0x238]
add eax, 0xc
call fcn.00408bc0
mov edx, dword [ebp - 0x238]
lea eax, [esi + 8]
mov ecx, ebx
call fcn.0040d040
mov ebx, 0x622190
lea eax, [ebp - 0x244]
mov edx, 0x622190
call fcn.0040cf40
mov dword [ebp - 0x23c], 4
lea eax, [ebp - 0x23c]
push eax
mov edx, 0x622190
mov ecx, 1
lea eax, [ebp - 0x244]
call fcn.0040d060
mov eax, dword [ebp - 0x244]
mov edx, dword [ebp - 0x268]
mov dword [eax], edx
mov eax, dword [ebp - 0x244]
mov edx, dword [ebp - 0x26c]
mov dword [eax + 4], edx
mov eax, dword [ebp - 0x244]
mov dword [eax + 8], edi
mov eax, dword [ebp - 0x244]
mov dword [eax + 0xc], esi
mov edx, dword [ebp - 0x244]
lea eax, [ebp - 4]
mov ecx, ebx
call fcn.0040d040
call sub.kernel32.dll_GetCurrentProcess
mov dword [ebp - 0x260], eax
lea eax, [ebp - 8]
push eax
push 0xf00ff
push dword [ebp - 0x260]
call sub.advapi32.dll_OpenProcessToken
or eax, eax
setne al
mov byte [ebp - 0x284], al
test al, al
je 0x434870
lea eax, [ebp - 0x21c]
push eax
mov eax, dword [0x5f1ab0]
call fcn.0040cf30
mov ecx, eax
mov edx, dword [0x5f1ab0]
mov eax, 0x617d90
call fcn.00423b60
push 1
mov eax, dword [ebp - 0x21c]
test eax, eax
jne 0x4345c4
mov eax, 0x6722f0
mov ecx, eax
mov edx, dword [ebp - 8]
mov eax, dword [ebp - 0x25c]
call fcn.0043b2e0
mov byte [ebp - 0x270], al
lea eax, [ebp - 0xc]
push eax
push 0
push 0
push dword [ebp - 0x260]
call fcn.00554b20
or eax, eax
setne al
mov byte [ebp - 0x284], al
test al, al
je 0x434838
mov eax, dword [ebp - 0xc]
shr eax, 2
mov ebx, eax
mov dword [ebp - 0x23c], ebx
lea eax, [ebp - 0x23c]
push eax
mov edx, 0x6221b8
lea eax, [ebp - 0x220]
mov ecx, 1
call fcn.0040d060
lea eax, [ebp - 0xc]
push eax
mov eax, ebx
shl eax, 2
push eax
push dword [ebp - 0x220]
push dword [ebp - 0x260]
call fcn.00554b20
or eax, eax
setne al
mov byte [ebp - 0x284], al
test al, al
je 0x434838
lea eax, [ebx - 1]
mov dword [ebp - 0x274], eax
mov dword [ebp - 0x278], 0xffffffff
lea esi, [esi]
nop
add dword [ebp - 0x278], 1
push 0x104
lea eax, [ebp - 0x214]
push eax
mov eax, dword [ebp - 0x220]
mov edx, dword [ebp - 0x278]
push dword [eax + edx*4]
call sub.kernel32.dll_GetModuleFileNameW
mov dword [ebp - 0x264], eax
test eax, eax
jbe 0x434824
lea eax, [ebp - 0x24c]
push eax
lea eax, [ebp - 0x214]
mov cl, 1
mov edx, 0x103
call fcn.0040b930
mov eax, dword [ebp - 0x24c]
lea edx, [ebp - 0x248]
call fcn.00458770
mov eax, dword [ebp - 0x248]
lea edx, [ebp - 0x234]
call fcn.0040b370
lea ecx, [ebp - 0x218]
mov eax, dword [ebp - 0x234]
xor dx, dx
call fcn.0040a540
mov eax, dword [ebp - 4]
test eax, eax
je 0x434701
mov eax, dword [eax - 4]
add eax, 1
sub eax, 1
mov edi, eax
mov dword [ebp - 0x27c], 0xffffffff
add dword [ebp - 0x27c], 1
mov eax, dword [ebp - 4]
mov edx, dword [ebp - 0x27c]
mov eax, dword [eax + edx*4]
mov eax, dword [eax + 8]
test eax, eax
je 0x434730
mov eax, dword [eax - 4]
add eax, 1
sub eax, 1
mov esi, eax
mov dword [ebp - 0x280], 0xffffffff
nop
add dword [ebp - 0x280], 1
lea eax, [ebp - 0x240]
call fcn.00403d00
push 0
mov eax, dword [ebp - 0x218]
lea edx, [ebp - 0x250]
call fcn.004598a0
mov ebx, dword [ebp - 0x250]
lea eax, [ebp - 0x254]
push eax
mov eax, dword [0x5f16a0]
call fcn.0040cf30
mov ecx, eax
mov edx, dword [0x5f16a0]
mov eax, 0x617d90
call fcn.00423b60
mov edx, dword [ebp - 0x254]
lea eax, [ebp - 0x240]
mov ecx, ebx
call fcn.00408cc0
mov edx, dword [ebp - 0x240]
lea ecx, [ebp - 0x230]
mov eax, 0x620a30
call fcn.004282c0
lea edx, [ebp - 0x230]
lea ecx, [ebp - 0x254]
mov eax, 0x620a30
call fcn.00428240
mov edx, dword [ebp - 0x254]
mov eax, dword [ebp - 4]
mov ecx, dword [ebp - 0x27c]
mov eax, dword [eax + ecx*4]
mov eax, dword [eax + 8]
mov ecx, dword [ebp - 0x280]
mov eax, dword [eax + ecx*4]
call fcn.00409780
test eax, eax
jne 0x43480c
mov eax, dword [ebp - 4]
mov edx, dword [ebp - 0x27c]
mov eax, dword [eax + edx*4]
mov edx, dword [eax + 4]
or dword [ebp - 0x258], edx
lea esi, [esi]
cmp esi, dword [ebp - 0x280]
ja 0x434740
cmp edi, dword [ebp - 0x27c]
ja 0x434710
mov eax, dword [ebp - 0x274]
cmp eax, dword [ebp - 0x278]
ja 0x434670
mov esi, esi
mov al, byte [ebp - 0x270]
test al, al
je 0x434864
push 0
mov ecx, dword [ebp - 0x21c]
test ecx, ecx
jne 0x434853
mov ecx, 0x6722f0
mov edx, dword [ebp - 8]
mov eax, dword [ebp - 0x25c]
call fcn.0043b2e0
lea esi, [esi]
push dword [ebp - 0x260]
call sub.kernel32.dll_CloseHandle
nop
lea eax, [ebp - 0x214]
xor cl, cl
mov edx, 0x208
call fcn.004037f0
mov ebx, dword [ebp - 0x258]
xor eax, eax
pop edx
add esp, 0xc
mov dword fs:[eax], edx
mov eax, ebp
call fcn.00433f20
mov eax, ebx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret