Function at 0x4454a7
Capabilities:
Enumerate process modules

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x502e4b
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x27c
mov dword [ebp - 0x270], ecx
mov eax, dword [ebp + 8]
push eax
push 8
call sub.KERNEL32.dll_CreateToolhelp32Snapshot
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 0xffffffff
jne 0x4454e6
xor eax, eax
jmp 0x445747
mov dword [ebp - 0x250], 0x224
lea ecx, [ebp - 0x14]
call fcn.00401590
mov dword [ebp - 4], 0
lea ecx, [ebp - 0x28]
call fcn.00449380
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x25c]
call fcn.00401590
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x254]
call fcn.00401590
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x1c]
call fcn.00401590
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x20]
call fcn.00401590
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x2c]
call fcn.00401590
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x18]
call fcn.00401590
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x258]
call fcn.00401590
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x250]
push ecx
mov edx, dword [ebp - 0x10]
push edx
call sub.KERNEL32.dll_Module32First
test eax, eax
je 0x4456b5
lea eax, [ebp - 0x130]
push eax
lea ecx, [ebp - 0x14]
call fcn.004dcc87
lea ecx, [ebp - 0x14]
call fcn.004dd07a
lea ecx, [ebp - 0x14]
call fcn.00458a80
push eax
lea ecx, [ebp - 0x28]
call fcn.004493e8
test eax, eax
je 0x4455f9
lea ecx, [ebp - 0x260]
push ecx
lea ecx, [ebp - 0x28]
call fcn.004459c0
mov dword [ebp - 0x274], eax
mov edx, dword [ebp - 0x274]
mov dword [ebp - 0x278], edx
mov byte [ebp - 4], 9
mov eax, dword [ebp - 0x278]
push eax
lea ecx, [ebp - 0x1c]
call fcn.004dcc37
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x260]
call fcn.004dcafe
lea ecx, [ebp - 0x28]
call fcn.004493b4
jmp 0x445606
push 0x553ef8
lea ecx, [ebp - 0x1c]
call fcn.004dcc87
lea ecx, [ebp - 0x1c]
push ecx
push 0x545d88
lea edx, [ebp - 0x14]
push edx
lea eax, [ebp - 0x264]
push eax
call fcn.004dcd93
mov dword [ebp - 0x27c], eax
mov ecx, dword [ebp - 0x27c]
mov dword [ebp - 0x280], ecx
mov byte [ebp - 4], 0xa
mov edx, dword [ebp - 0x280]
push edx
lea eax, [ebp - 0x268]
push eax
call fcn.004dcd2d
mov dword [ebp - 0x284], eax
mov ecx, dword [ebp - 0x284]
mov dword [ebp - 0x288], ecx
mov byte [ebp - 4], 0xb
mov edx, dword [ebp - 0x288]
push edx
lea ecx, [ebp - 0x258]
call fcn.004dcc37
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x268]
call fcn.004dcafe
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x264]
call fcn.004dcafe
lea eax, [ebp - 0x258]
push eax
mov ecx, dword [ebp + 0xc]
call fcn.00404e00
lea ecx, [ebp - 0x250]
push ecx
mov edx, dword [ebp - 0x10]
push edx
call sub.KERNEL32.dll_Module32Next
test eax, eax
jne 0x445580
mov eax, dword [ebp - 0x10]
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [ebp - 0x26c], 1
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x258]
call fcn.004dcafe
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x18]
call fcn.004dcafe
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x2c]
call fcn.004dcafe
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x20]
call fcn.004dcafe
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x1c]
call fcn.004dcafe
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x254]
call fcn.004dcafe
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x25c]
call fcn.004dcafe
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x28]
call fcn.004493a1
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x14]
call fcn.004dcafe
mov eax, dword [ebp - 0x26c]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
mov esp, ebp
pop ebp
ret 8