Function at 0x442390
Capabilities:
Enumerate process modules

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x250
mov eax, dword [0x45e008]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword [0x45e450]
push eax
push 8
call dword [sym.imp.KERNEL32.dll_CreateToolhelp32Snapshot]
mov dword [ebp - 0x240], eax
mov dword [ebp - 0x228], 0x224
lea ecx, [ebp - 0x228]
push ecx
mov edx, dword [ebp - 0x240]
push edx
call dword [sym.imp.KERNEL32.dll_Module32First]
lea eax, [ebp - 0x208]
mov dword [ebp - 0x234], eax
mov dword [ebp - 0x230], str.client.dll
mov ecx, dword [ebp - 0x230]
mov dl, byte [ecx]
mov byte [ebp - 0x229], dl
mov eax, dword [ebp - 0x234]
cmp dl, byte [eax]
jne 0x442449
cmp byte [ebp - 0x229], 0
je 0x44243d
mov ecx, dword [ebp - 0x230]
mov dl, byte [ecx + 1]
mov byte [ebp - 0x22a], dl
mov eax, dword [ebp - 0x234]
cmp dl, byte [eax + 1]
jne 0x442449
add dword [ebp - 0x230], 2
add dword [ebp - 0x234], 2
cmp byte [ebp - 0x22a], 0
jne 0x4423eb
mov dword [ebp - 0x244], 0
jmp 0x442454
sbb ecx, ecx
or ecx, 1
mov dword [ebp - 0x244], ecx
mov edx, dword [ebp - 0x244]
mov dword [ebp - 0x24c], edx
cmp dword [ebp - 0x24c], 0
jne 0x442480
mov eax, dword [ebp - 0x210]
mov dword [0x45e4ec], eax
mov ecx, dword [ebp - 0x214]
mov dword [0x45e4f0], ecx
lea edx, [ebp - 0x208]
mov dword [ebp - 0x23c], edx
mov dword [ebp - 0x238], str.engine.dll
mov eax, dword [ebp - 0x238]
mov cl, byte [eax]
mov byte [ebp - 0x22b], cl
mov edx, dword [ebp - 0x23c]
cmp cl, byte [edx]
jne 0x4424f4
cmp byte [ebp - 0x22b], 0
je 0x4424e8
mov eax, dword [ebp - 0x238]
mov cl, byte [eax + 1]
mov byte [ebp - 0x22c], cl
mov edx, dword [ebp - 0x23c]
cmp cl, byte [edx + 1]
jne 0x4424f4
add dword [ebp - 0x238], 2
add dword [ebp - 0x23c], 2
cmp byte [ebp - 0x22c], 0
jne 0x442496
mov dword [ebp - 0x248], 0
jmp 0x4424ff
sbb eax, eax
or eax, 1
mov dword [ebp - 0x248], eax
mov ecx, dword [ebp - 0x248]
mov dword [ebp - 0x250], ecx
cmp dword [ebp - 0x250], 0
jne 0x44252b
mov edx, dword [ebp - 0x210]
mov dword [0x45e4f4], edx
mov eax, dword [ebp - 0x214]
mov dword [0x45e4f8], eax
lea ecx, [ebp - 0x228]
push ecx
mov edx, dword [ebp - 0x240]
push edx
call dword [sym.imp.KERNEL32.dll_Module32Next]
test eax, eax
jne 0x4423d5
mov eax, dword [ebp - 0x240]
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push 4
push 3
push str.xxx____xx____xxxxxxxxx
push 0x45a8f8
mov ecx, dword [0x45e4f0]
push ecx
mov edx, dword [0x45e4ec]
push edx
call fcn.004421b0
add esp, 0x18
mov dword [0x45e510], eax
push 0xb0
push 3
push str.xxx____xx____x
push 0x45a920
mov eax, dword [0x45e4f0]
push eax
mov ecx, dword [0x45e4ec]
push ecx
call fcn.004421b0
add esp, 0x18
mov dword [0x45e4e8], eax
push 0
push 1
push str.x____xxxxx____xx
push 0x45a944
mov edx, dword [0x45e4f0]
push edx
mov eax, dword [0x45e4ec]
push eax
call fcn.004421b0
add esp, 0x18
mov dword [0x45e500], eax
push 0
push 1
push str.x____xxxxxxxxxx
push 0x45a968
mov ecx, dword [0x45e4f8]
push ecx
mov edx, dword [0x45e4f4]
push edx
call fcn.004421b0
add esp, 0x18
mov dword [0x45e504], eax
push 0
push 2
push str.xx_____xxxx
push 0x45a984
mov eax, dword [0x45e4f8]
push eax
mov ecx, dword [0x45e4f4]
push ecx
call fcn.004421b0
add esp, 0x18
mov dword [0x45e4fc], eax
push 8
push 2
push str.xx____xxx
push 0x45a99c
mov edx, dword [0x45e4f0]
push edx
mov eax, dword [0x45e4ec]
push eax
call fcn.004421b0
add esp, 0x18
mov dword [0x45e50c], eax
push 0
push 4
push str.xxxx____xxxxx_xxxx
push 0x45a9bc
mov ecx, dword [0x45e4f8]
push ecx
mov edx, dword [0x45e4f4]
push edx
call fcn.004421b0
add esp, 0x18
mov dword [0x45e508], eax
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00442680
mov esp, ebp
pop ebp
ret