Function at 0x463b70
Capabilities:
Enumerate process modules

Disassembly:
mov eax, 0x1de0
call fcn.004c79b0
push ebx
push ebp
push esi
mov esi, ecx
mov ebx, dword [sym.imp.USER32.dll_SendMessageA]
push edi
mov eax, dword [esi + 0x1ec]
push 0
push 0
push 0x1009
mov ecx, dword [eax + 0x20]
push ecx
call ebx
mov ebp, dword [esp + 0x1df4]
push ebp
push 0
push 0x410
call dword [sym.imp.KERNEL32.dll_OpenProcess]
mov edi, eax
test edi, edi
mov dword [esp + 0x18], edi
je 0x463da1
lea edx, [esp + 0x10]
lea eax, [esp + 0xdf0]
push edx
push 0x1000
push eax
push edi
call sub.PSAPI.DLL_EnumProcessModules
test eax, eax
je 0x463d8a
mov edx, dword [esp + 0xdf0]
lea ecx, [esp + 0xcec]
push 0x104
push ecx
push edx
push edi
call sub.PSAPI.DLL_GetModuleFileNameExA
test eax, eax
je 0x463d9a
mov eax, dword [esp + 0x10]
mov dword [esp + 0x1c], 0
test eax, 0xfffffffc
jbe 0x463d9a
lea eax, [esp + 0xdf0]
mov dword [esp + 0x14], eax
mov edx, dword [esp + 0x14]
lea ecx, [esp + 0x30]
push 0x104
push ecx
mov eax, dword [edx]
push eax
push edi
call sub.PSAPI.DLL_GetModuleFileNameExA
test eax, eax
je 0x463d65
mov eax, dword [esi + 0x1ec]
push 0
push 0
push 0x1004
mov ecx, dword [eax + 0x20]
push ecx
call ebx
lea edx, [esp + 0x30]
mov edi, eax
push edx
call dword [sym.imp.SHLWAPI.dll_PathFindFileNameA]
mov ecx, dword [esi + 0x1ec]
push 0
push 0
push 0
push 0
push eax
push edi
push 1
call sub.MFC42.DLL_CListCtrl::InsertItem
mov ebp, eax
mov ecx, 0xf9
xor eax, eax
lea edi, [esp + 0x51d]
mov byte [esp + 0x51c], 0
mov byte [esp + 0x134], 0
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov ecx, 0xf9
xor eax, eax
lea edi, [esp + 0x135]
mov byte [esp + 0x904], 0
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov ecx, 0xf9
xor eax, eax
lea edi, [esp + 0x905]
push 0x3e8
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
lea eax, [esp + 0x138]
lea ecx, [esp + 0x908]
push eax
push 0x3e8
lea edx, [esp + 0x3c]
push ecx
push edx
call fcn.0041f6c0
lea eax, [esp + 0x530]
push 0x3e8
lea ecx, [esp + 0x48]
push eax
push ecx
call fcn.0041e2c0
mov ecx, dword [esi + 0x1ec]
add esp, 0x20
lea edx, [esp + 0x30]
push edx
push 1
push ebp
call sub.MFC42.DLL_CListCtrl::SetItemText
mov ecx, dword [esi + 0x1ec]
lea eax, [esp + 0x904]
push eax
push 2
push ebp
call sub.MFC42.DLL_CListCtrl::SetItemText
lea ecx, [esp + 0x134]
push ecx
mov ecx, dword [esi + 0x1ec]
push 3
push ebp
call sub.MFC42.DLL_CListCtrl::SetItemText
mov ecx, dword [esi + 0x1ec]
lea edx, [esp + 0x51c]
push edx
push 4
push ebp
call sub.MFC42.DLL_CListCtrl::SetItemText
mov edi, dword [esp + 0x18]
mov ecx, dword [esp + 0x14]
mov eax, dword [esp + 0x1c]
add ecx, 4
inc eax
mov dword [esp + 0x14], ecx
mov ecx, dword [esp + 0x10]
shr ecx, 2
cmp eax, ecx
mov dword [esp + 0x1c], eax
jb 0x463c23
jmp 0x463d9a
mov edx, dword [esi + 0x1ec]
push ebp
push edx
call fcn.00463880
add esp, 8
push edi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [esi + 0x1ec]
test eax, eax
je 0x463e52
mov eax, dword [eax + 0x20]
push 0
push 0
push 0x101d
push eax
call ebx
mov edi, eax
mov eax, dword [esi + 0x1ec]
push 0
push 2
mov ecx, dword [eax + 0x20]
push 0x101d
push ecx
call ebx
mov ebp, eax
mov eax, dword [esi + 0x1ec]
push 0
push 3
mov edx, dword [eax + 0x20]
push 0x101d
push edx
call ebx
mov dword [esp + 0x18], eax
mov eax, dword [esi + 0x1ec]
push 0
push 4
mov eax, dword [eax + 0x20]
push 0x101d
push eax
call ebx
mov edx, dword [esi + 0x1ec]
mov dword [esp + 0x10], eax
lea ecx, [esp + 0x20]
mov eax, dword [edx + 0x20]
push ecx
push eax
call dword [sym.imp.USER32.dll_GetClientRect]
mov ecx, dword [esp + 0x28]
mov edx, dword [esp + 0x20]
sub ecx, edi
mov edi, dword [esp + 0x10]
sub ecx, ebp
mov ebp, dword [esp + 0x18]
sub ecx, ebp
sub ecx, edi
sub ecx, edx
mov edx, dword [esi + 0x1ec]
and ecx, 0xffff
mov eax, dword [edx + 0x20]
push ecx
push 1
push 0x101e
push eax
call ebx
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x1de0
ret 4