Function at 0x46721a
Capabilities:
Enumerate process modules

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
mov eax, 0x80a0
call fcn.0053e710
mov esi, ecx
mov ebx, dword [ebp + 8]
lea edi, [ebp - 0x18]
mov dword [edi - 4], esp
mov dword [edi + 8], 0xffffffff
mov dword [edi + 4], 0x467fc0
mov eax, dword fs:[0]
mov dword [edi], eax
mov dword fs:[0], edi
xor eax, eax
mov dword [ebx + 4], eax
push 0x28
call fcn.0053e4fc
add esp, 4
mov dword [eax], eax
mov dword [eax + 4], eax
mov dword [eax + 8], eax
mov word [eax + 0xc], 0x101
mov dword [ebx], eax
add esi, 0x124
xor eax, eax
mov dword [edi + 8], eax
lea eax, [ebp - 0x54]
push esi
push eax
call fcn.00447cca
add esp, 8
mov eax, dword [ebp - 0x44]
cmp dword [ebp - 0x40], 8
lea edx, [ebp - 0x54]
jb 0x467298
mov edx, dword [ebp - 0x54]
test eax, eax
je 0x4672b4
add eax, eax
xor ecx, ecx
cmp word [edx + ecx], 0x2f
jne 0x4672ad
mov word [edx + ecx], 0x5c
add ecx, 2
cmp eax, ecx
jne 0x4672a0
lea eax, [ebp - 0x5c]
mov dword [eax], 0
mov dword [ebp - 0x10], 1
lea ecx, [ebp - 0x80ac]
push eax
push 0x8000
push ecx
call sub.PSAPI.DLL_EnumProcesses
mov eax, dword [ebp - 0x5c]
shr eax, 2
mov dword [ebp - 0x58], eax
xor eax, eax
lea esi, [ebp - 0xa4]
cmp eax, dword [ebp - 0x58]
jae 0x46747d
mov dword [ebp - 0x24], eax
mov eax, dword [ebp + eax*4 - 0x80ac]
mov dword [ebp - 0x10], 1
mov ecx, esi
push eax
call fcn.00467572
mov eax, dword [ebp + 0xc]
cmp dword [eax + 0x14], 8
jb 0x467314
mov eax, dword [eax]
cmp dword [ebp - 0x88], 8
lea ecx, [ebp - 0x9c]
jb 0x467329
mov ecx, dword [ebp - 0x9c]
mov dword [ebp - 0x20], ecx
mov ecx, dword [ebp + 0xc]
mov ecx, dword [ecx + 0x10]
mov esi, dword [ebp - 0x8c]
mov edi, esi
sub edi, ecx
jb 0x467467
test ecx, ecx
je 0x467361
mov edx, dword [ebp - 0x20]
lea edi, [edx + edi*2]
xor ebx, ebx
movzx edx, word [edi + ebx*2]
cmp dx, word [eax + ebx*2]
jne 0x467467
inc ebx
cmp ecx, ebx
jne 0x46734e
xorps xmm0, xmm0
movsd qword [ebp - 0x2c], xmm0
xorps xmm0, xmm0
movups xmmword [ebp - 0x3c], xmm0
mov dword [ebp - 0x10], 2
lea ecx, [ebp - 0x3c]
push esi
push dword [ebp - 0x20]
call fcn.004051ae
mov eax, dword [ebp - 0x28]
lea ecx, [ebp - 0x3c]
cmp eax, 8
jb 0x467391
mov ecx, dword [ebp - 0x3c]
mov esi, dword [ebp - 0x2c]
test esi, esi
je 0x4673b1
lea edx, [esi + esi]
xor edi, edi
cmp word [ecx + edi], 0x2f
jne 0x4673aa
mov word [ecx + edi], 0x5c
add edi, 2
cmp edx, edi
jne 0x46739d
mov ecx, dword [ebp - 0x44]
cmp dword [ebp - 0x40], 8
lea edx, [ebp - 0x54]
jb 0x4673c0
mov edx, dword [ebp - 0x54]
cmp esi, ecx
jae 0x46742b
mov ecx, dword [ebp + 0x10]
test ecx, ecx
je 0x4673de
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp + eax*4 - 0x80ac]
mov dword [ecx], eax
mov dword [ebp - 0x10], 3
mov dword [ebp - 0x10], 3
lea ecx, [ebp - 0x3c]
lea eax, [ebp - 0x74]
push eax
call fcn.004035c4
mov dword [ebp - 0x10], 4
mov ecx, dword [ebp + 8]
lea eax, [ebp - 0x74]
push eax
lea eax, [ebp - 0xac]
push eax
call fcn.00467a30
mov eax, dword [ebp - 0x60]
cmp eax, 8
jb 0x467426
lea eax, [eax*2 + 2]
push eax
push dword [ebp - 0x74]
call fcn.00404bbf
add esp, 8
mov eax, dword [ebp - 0x28]
jmp 0x46744f
test ecx, ecx
je 0x46744f
lea esi, [ebp - 0x3c]
cmp eax, 8
jb 0x46743a
mov esi, dword [ebp - 0x3c]
xor edi, edi
movzx ebx, word [esi + edi*2]
cmp bx, word [edx + edi*2]
jne 0x4673c4
inc edi
cmp ecx, edi
jne 0x46743c
cmp eax, 8
jb 0x467467
lea eax, [eax*2 + 2]
push eax
push dword [ebp - 0x3c]
call fcn.00404bbf
add esp, 8
lea esi, [ebp - 0xa4]
mov ecx, esi
call fcn.004676da
mov eax, dword [ebp - 0x24]
inc eax
jmp 0x4672e7
mov eax, dword [ebp - 0x40]
cmp eax, 8
jb 0x467498
lea eax, [eax*2 + 2]
push eax
push dword [ebp - 0x54]
call fcn.00404bbf
add esp, 8
mov eax, dword [ebp - 0x18]
mov dword fs:[0], eax
mov eax, dword [ebp + 8]
add esp, 0x80a0
pop esi
pop edi
pop ebx
pop ebp
ret 0xc