Function at 0x405840
Capabilities:
Enumerate processes

Disassembly:
sub esp, 0xe7c
mov eax, dword [0x45b4b0]
mov ecx, dword [0x459b44]
mov dword [esp + 0xe78], eax
push ebx
push ebp
push esi
mov esi, dword [0x459b58]
mov eax, 0x5e407cd
imul esi, esi, 0x171ed6e
imul ecx
mov ecx, dword [0x459b4c]
push edi
sar edx, 0x14
mov edi, edx
add esi, edx
mov eax, 0x702fe9a3
imul ecx
mov ecx, dword [0x459b48]
sar edx, 0x19
imul ecx, ecx, 0x4905557
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x459b38]
shr edi, 0x1f
imul edx, edx, 0xd0a84b
mov ebp, dword [0x459b54]
add edi, esi
sub edi, eax
add edi, ecx
mov ecx, dword [0x459b40]
add edi, edx
mov eax, 0x4eb6fa85
imul ecx
sar edx, 0x18
mov eax, edx
shr eax, 0x1f
add eax, edx
sub edi, eax
sub edi, ebp
push 0
sub edi, 0x53d33c3
push 2
mov dword [0x459b40], edi
call sub.KERNEL32.dll_CreateToolhelp32Snapshot
mov ebx, dword [0x459b44]
mov ebp, dword [0x459b3c]
mov dword [esp + 0x14], eax
mov edi, dword [0x459b58]
mov eax, 0x5e407cd
imul edi, edi, 0x171ed6e
imul ebx
sar edx, 0x14
mov esi, edx
shr esi, 0x1f
add esi, edx
mov ecx, ebp
imul ecx, ecx, 0x1a0fa8c
mov eax, 0x702fe9a3
imul ebx
sar edx, 0x19
add ecx, esi
mov eax, edx
shr eax, 0x1f
add eax, edx
add ecx, edi
shl ecx, 1
sub ecx, eax
mov eax, 0x565ef47
imul ebp
sar edx, 0x12
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x459b4c]
sub ecx, eax
mov ebp, edx
xor ebx, ebx
imul ebp, ebp, 0x341f518
mov dword [str._r_____r____], ecx
mov dword [esp + 0xe0], 0x128
mov eax, 0x545b9e19
imul ecx, ecx, 0x2b75400
imul edx
sar edx, 0x17
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x459b48]
imul edx, edx, 0xd0a84b
sub ebp, eax
mov eax, dword [0x459b50]
add ecx, esi
add ecx, ebp
add edx, ecx
add edx, edi
lea ecx, [edx + eax - 0x53d33c3]
mov eax, dword [esp + 0x14]
lea edx, [esp + 0xe0]
push edx
push eax
mov dword [0x459b44], ecx
call sub.KERNEL32.dll_Process32First
test eax, eax
jne 0x4059d7
pop edi
pop esi
pop ebp
or eax, 0xffffffff
pop ebx
mov ecx, dword [esp + 0xe78]
call fcn.0042cf11
add esp, 0xe7c
ret
mov ecx, dword [0x459b44]
mov edi, dword [0x459b40]
mov esi, dword [0x459b58]
mov eax, 0x5e407cd
imul ecx
sar edx, 0x14
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
mov eax, 0x540f9495
imul edi
mov ebp, esi
imul ebp, ebp, 0x171ed6e
sar edx, 0x17
add ebp, edx
mov eax, edx
mov edx, dword [0x459b38]
shr eax, 0x1f
imul edx, edx, 0x53d33c3
add eax, ebp
add eax, edx
mov dword [esp + 0x10], eax
mov eax, 0x186e8b3d
imul edi
mov eax, dword [esp + 0x10]
mov edi, dword [0x459b50]
sar edx, 0x17
add eax, edx
mov ebp, edx
mov edx, dword [0x459b54]
shr ebp, 0x1f
add ebp, eax
mov eax, edi
imul eax, eax, 0xbdb188
sub ebp, eax
mov eax, 0x2742b221
imul edx
sar edx, 0x15
mov eax, edx
shr eax, 0x1f
add eax, edx
sub ebp, eax
add ebp, ecx
mov dword [0x459b38], ebp
xor eax, eax
mov cl, byte [esp + eax + 0x104]
mov byte [esp + eax + 0x208], cl
inc eax
test cl, cl
jne 0x405a71
mov eax, 0x9d2b2fed
imul edi, edi, 0x18470b7
imul esi
add edx, esi
sar edx, 0x19
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
mov eax, 0x58945bfd
imul esi
imul esi, esi, 0x3cb4655
sar edx, 0x17
sub edi, ecx
mov ecx, dword [esp + 0xe90]
mov eax, edx
shr eax, 0x1f
add edi, edx
add eax, edi
push ecx
lea edx, [esp + 0x20c]
sub eax, esi
push edx
mov dword [0x459b48], eax
call fcn.0043798e
mov esi, dword [0x459b44]
mov ecx, dword [0x459b50]
add esp, 8
test eax, eax
jne 0x405b31
mov eax, 0x5e407cd
imul esi
mov edi, ecx
imul edi, edi, 0x1a0fa8c
sar edx, 0x14
mov ebx, edx
add edi, edx
mov edx, dword [0x459b3c]
mov eax, 0x545b9e19
imul edx
sar edx, 0x17
mov eax, edx
shr ebx, 0x1f
shr eax, 0x1f
add ebx, edi
add eax, edx
lea edx, [eax + ebx*2 + 0x3409364]
sub edx, dword [str._r_____r____]
mov dword [0x459b3c], edx
mov ebx, 1
mov edi, dword [0x459b58]
imul ecx, ecx, 0xbdb188
imul edi, edi, 0x171ed6e
mov eax, 0x5e407cd
imul esi
mov esi, dword [0x459b40]
sar edx, 0x14
add edi, edx
mov ebp, edx
mov eax, 0x540f9495
imul esi
mov eax, dword [0x459b38]
imul eax, eax, 0x53d33c3
sar edx, 0x17
shr ebp, 0x1f
add ebp, edi
mov edi, edx
add ebp, edx
shr edi, 0x1f
add edi, ebp
add edi, eax
mov eax, 0x186e8b3d
imul esi
sar edx, 0x17
mov esi, edx
mov ebp, dword [esp + 0x14]
add edi, edx
shr esi, 0x1f
add esi, edi
sub esi, ecx
mov ecx, dword [0x459b54]
mov eax, 0x2742b221
imul ecx
sar edx, 0x15
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
lea edx, [esp + 0xe0]
push edx
sub esi, ecx
push ebp
mov dword [0x459b38], esi
call sub.KERNEL32.dll_Process32Next
test eax, eax
je 0x405d40
mov eax, ebx
shl eax, 6
lea ecx, [esp + 0x104]
lea esi, [esp + eax + 0x208]
sub eax, ecx
lea edi, [esp + eax + 0x208]
jmp 0x405bf0
lea eax, [esp + 0x104]
mov cl, byte [eax]
mov byte [edi + eax], cl
inc eax
test cl, cl
jne 0x405bf7
mov eax, dword [0x459b50]
mov ecx, dword [0x459b44]
imul eax, eax, 0x1a0fa8c
mov dword [esp + 0x10], eax
mov eax, 0x5e407cd
imul ecx
mov ecx, dword [esp + 0x10]
sar edx, 0x14
add ecx, edx
mov eax, edx
shr eax, 0x1f
add eax, ecx
mov ecx, dword [0x459b3c]
mov dword [esp + 0x10], eax
mov eax, 0x545b9e19
imul ecx
mov ecx, dword [esp + 0x10]
sar edx, 0x17
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [str._r_____r____]
lea ecx, [eax + ecx*2 + 0x3409364]
sub ecx, edx
mov edx, dword [esp + 0xe90]
push edx
push esi
mov dword [0x459b3c], ecx
call fcn.0043798e
add esp, 8
test eax, eax
jne 0x405d2a
mov eax, dword [0x459b58]
mov ecx, dword [0x459b44]
imul eax, eax, 0x171ed6e
mov dword [esp + 0x10], eax
mov eax, 0x5e407cd
imul ecx
mov ecx, dword [esp + 0x10]
sar edx, 0x14
add ecx, edx
mov eax, edx
shr eax, 0x1f
add eax, ecx
mov ecx, dword [0x459b50]
imul ecx, ecx, 0x185d014
add eax, ecx
mov ecx, dword [0x459b54]
mov dword [esp + 0x10], eax
mov eax, 0x702fe9a3
imul ecx
mov ecx, dword [esp + 0x10]
sar edx, 0x19
add ecx, edx
mov eax, edx
mov edx, dword [0x459b4c]
shr eax, 0x1f
imul edx, edx, 0x53d33c3
add eax, ecx
mov ecx, dword [0x459b40]
imul ecx, ecx, 0xbdb188
add eax, edx
add eax, ecx
mov ecx, dword [0x459b3c]
mov dword [esp + 0x10], eax
mov eax, 0x2742b221
imul ecx
mov ecx, dword [esp + 0x10]
sar edx, 0x15
mov eax, edx
shr eax, 0x1f
add eax, edx
sub ecx, eax
mov dword [0x459b4c], ecx
mov ecx, dword [esp + 0xe8]
mov dword [esp + ebx*4 + 0x18], ecx
inc ebx
add esi, 0x40
add edi, 0x40
lea edx, [esp + 0xe0]
push edx
push ebp
call sub.KERNEL32.dll_Process32Next
test eax, eax
jne 0x405bf0
mov ecx, dword [0x459b44]
mov eax, 0x5e407cd
imul ecx
sar edx, 0x14
mov esi, ecx
mov ecx, dword [0x459b48]
imul esi, esi, 0x171ed6e
mov eax, edx
imul ecx, ecx, 0x185d014
shr eax, 0x1f
add eax, edx
mov edx, dword [0x459b4c]
imul edx, edx, 0x53d33c3
mov edi, eax
sub edi, esi
add edi, ecx
mov ecx, dword [0x459b3c]
sub edi, edx
mov eax, 0x4eb6fa85
imul ecx
mov ecx, dword [0x459b58]
sar edx, 0x18
imul ecx, ecx, 0x4b280d2
mov eax, edx
shr eax, 0x1f
add eax, edx
sub edi, eax
add edi, ecx
push ebp
mov dword [0x459b50], edi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov ecx, dword [esp + 0xe88]
pop edi
pop esi
pop ebp
mov eax, ebx
pop ebx
call fcn.0042cf11
add esp, 0xe7c
ret