Function at 0x10030ac4
Capabilities:
Enumerate process modules

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x28
mov dword [ebp - 4], 0
push 0x1008
call fcn.100b8c3f
add esp, 4
mov dword [ebp - 8], eax
mov edi, eax
mov esi, 0x100de9ae
lodsd eax, dword [esi]
stosd dword es:[edi], eax
lodsd eax, dword [esi]
stosd dword es:[edi], eax
xor eax, eax
mov ecx, 0x400
rep stosd dword es:[edi], eax
mov dword [ebp - 0xc], 0
mov dword [ebp - 0x10], 0
mov dword [ebp - 0x14], 0
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x1c], esp
push dword [ebp + 8]
push 0
push 0x410
xor eax, eax
call dword [sym.imp.KERNEL32.dll_OpenProcess]
nop
nop
cmp dword [ebp - 0x1c], esp
je 0x10030b4a
push 0x2b
push 0x404361b
push 6
call fcn.100b8c4b
add esp, 0xc
mov dword [ebp - 4], eax
mov dword [ebp - 0x1c], esp
lea eax, [ebp - 0xc]
push eax
push 0x1000
mov ebx, dword [ebp - 8]
call fcn.100020b9
push ebx
push dword [ebp - 4]
xor eax, eax
call dword [sym.imp.PSAPI.DLL_EnumProcessModules]
nop
nop
cmp dword [ebp - 0x1c], esp
je 0x10030b8b
push 0x98
push 0x404361b
push 6
call fcn.100b8c4b
add esp, 0xc
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 0
je 0x10030cff
fild dword [ebp - 0xc]
fstp qword [ebp - 0x20]
fld qword [ebp - 0x20]
fdiv qword [0x100d5e15]
fstp qword [ebp - 0x28]
fld qword [ebp - 0x28]
call fcn.10001795
mov dword [ebp - 0x10], eax
push dword [ebp - 0x10]
lea eax, [ebp - 0x14]
mov ebx, eax
mov ecx, 1
pop edx
push edx
push ecx
push ebx
mov dword [ebx], ecx
cmp ecx, edx
jg 0x10030cfc
push 0x80000301
push 0
push 0x104
push 1
mov ebx, 0x184
call fcn.100bab30
add esp, 0x10
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
push eax
mov ebx, dword [ebp - 0x18]
test ebx, ebx
je 0x10030c05
push ebx
call fcn.100b8c45
add esp, 4
pop eax
mov dword [ebp - 0x18], eax
mov ebx, dword [ebp - 8]
call fcn.100020b9
push ebx
push ecx
mov eax, dword [ebp - 0x14]
dec eax
jns 0x10030c30
push 0x176
push 0x404361b
push 4
call fcn.100b8c4b
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x10030c4d
push 0x176
push 0x404361b
push 1
call fcn.100b8c4b
add esp, 0xc
shl eax, 2
add ebx, eax
mov dword [ebp - 0x1c], ebx
mov dword [ebp - 0x20], esp
push 0x104
push dword [ebp - 0x18]
mov ebx, dword [ebp - 0x1c]
push dword [ebx]
push dword [ebp - 4]
xor eax, eax
call dword [sym.imp.PSAPI.DLL_GetModuleFileNameExA]
nop
nop
cmp dword [ebp - 0x20], esp
je 0x10030c8e
push 0x176
push 0x404361b
push 6
call fcn.100b8c4b
add esp, 0xc
push reloc.WS2_32.dll_bind
push 0
push 0
push 0
push 0
push 0
push reloc.WS2_32.dll_connect
push 0
mov ebx, dword [ebp + 0xc]
mov eax, dword [ebx]
test eax, eax
jne 0x10030cb5
mov eax, 0x100d520e
push eax
push reloc.WS2_32.dll_connect
push 0
mov eax, dword [ebp - 0x18]
test eax, eax
jne 0x10030cc9
mov eax, 0x100d520e
push eax
push 4
mov ebx, 0x148
call fcn.100b9830
add esp, 0x34
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0xffffffff
je 0x10030cf3
mov eax, 1
jmp 0x10030d3f
pop ebx
pop ecx
pop edx
inc ecx
jmp 0x10030bc3
add esp, 0xc
cmp dword [ebp - 4], 0
je 0x10030d35
mov dword [ebp - 0x1c], esp
push dword [ebp - 4]
xor eax, eax
call dword [0x100e6bc1]
nop
nop
cmp dword [ebp - 0x1c], esp
je 0x10030d35
push 0x279
push 0x404361b
push 6
call fcn.100b8c4b
add esp, 0xc
mov eax, 0
jmp 0x10030d3f
push eax
mov ebx, dword [ebp - 8]
push ebx
call fcn.100b8c45
add esp, 4
mov ebx, dword [ebp - 0x18]
test ebx, ebx
je 0x10030d5c
push ebx
call fcn.100b8c45
add esp, 4
pop eax
mov esp, ebp
pop ebp
ret 8