Function at 0x40af80
Capabilities:
Enumerate processes

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x442917
mov eax, dword fs:[0]
push eax
sub esp, 0x3c8
mov eax, dword [0x473064]
xor eax, ebp
mov dword [ebp - 0x10], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edi, edx
mov esi, ecx
push 0x104
lea eax, [ebp - 0x114]
push eax
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
mov byte [ebp - 0x36c], 0
lea edx, [ebp - 0x114]
push dword [ebp - 0x36c]
lea ecx, [ebp - 0x38c]
call fcn.00417860
add esp, 4
lea eax, [ebp - 0x138]
mov dword [ebp - 4], 0
push eax
lea ecx, [ebp - 0x38c]
call fcn.00405300
mov byte [ebp - 4], 2
mov ecx, dword [ebp - 0x378]
cmp ecx, 8
jb 0x40b043
mov edx, dword [ebp - 0x38c]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x40b039
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40b4c8
push ecx
push edx
call fcn.00424b8e
add esp, 8
xor eax, eax
mov dword [ebp - 0x37c], 0
mov byte [ebp - 0x36c], al
lea ecx, [ebp - 0x3a4]
push dword [ebp - 0x36c]
mov dword [ebp - 0x378], 7
mov word [ebp - 0x38c], ax
call fcn.00418530
add esp, 4
lea eax, [ebp - 0x3a4]
mov byte [ebp - 4], 3
push eax
lea ecx, [ebp - 0x138]
call fcn.00405030
mov byte [ebp - 4], 2
mov ecx, dword [ebp - 0x390]
cmp ecx, 8
jb 0x40b0d4
mov edx, dword [ebp - 0x3a4]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x40b0ca
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40b4cd
push ecx
push edx
call fcn.00424b8e
add esp, 8
mov edx, str._loading_the_wsc_proxy
mov ecx, 0x4748f0
call fcn.004129a0
push eax
call fcn.00413910
lea eax, [ebp - 0x3bc]
mov dword [ebp - 0x118], 0
xorps xmm0, xmm0
lea ecx, [ebp - 0x138]
push eax
movq qword [ebp - 0x120], xmm0
call fcn.004127b0
push edi
push 0x28
push str.____runassvc__rpcserver__wsc_name:__
lea edx, [ebp - 0x3bc]
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x3a4]
call fcn.00414070
add esp, 0xc
mov ecx, esi
push eax
sub esp, 8
mov eax, esp
sub esp, 8
mov dword [eax], str.wsc_proxy
mov dword [eax + 4], 9
mov eax, esp
mov dword [eax], str.wsc_proxy
mov dword [eax + 4], 9
lea eax, [ebp - 0x120]
push eax
call fcn.00405600
mov byte [ebp - 4], 5
mov ecx, dword [ebp - 0x390]
cmp ecx, 0x10
jb 0x40b1a1
mov edx, dword [ebp - 0x3a4]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x40b197
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40b4d2
push ecx
push edx
call fcn.00424b8e
add esp, 8
mov dword [ebp - 0x394], 0
mov dword [ebp - 0x390], 0xf
mov byte [ebp - 0x3a4], 0
mov byte [ebp - 4], 6
mov ecx, dword [ebp - 0x3a8]
cmp ecx, 0x10
jb 0x40b1fa
mov edx, dword [ebp - 0x3bc]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x40b1f0
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40b4d2
push ecx
push edx
call fcn.00424b8e
add esp, 8
cmp byte [ebp - 0x118], 0
mov dword [ebp - 0x3ac], 0
mov dword [ebp - 0x3a8], 0xf
mov byte [ebp - 0x3bc], 0
je 0x40b4d7
mov edx, str._waiting_for_wsc_proxy__this_can_take_some_time_
mov ecx, 0x4748f0
call fcn.004129a0
push eax
call fcn.00413910
add esp, 4
nop word [eax + eax]
lea eax, [ebp - 0x3d4]
push eax
lea ecx, [ebp - 0x138]
call fcn.004053d0
lea ecx, [ebp - 0x38c]
mov byte [ebp - 4], 7
push ecx
mov ecx, eax
call fcn.00405240
mov edi, eax
cmp dword [edi + 0x14], 8
jb 0x40b26e
mov edi, dword [edi]
push 0x208
lea eax, [ebp - 0x340]
mov dword [ebp - 0x364], 0x22c
push 0
push eax
mov dword [ebp - 0x360], 0
mov dword [ebp - 0x35c], 0
mov dword [ebp - 0x358], 0
mov dword [ebp - 0x354], 0
mov dword [ebp - 0x350], 0
mov dword [ebp - 0x34c], 0
mov dword [ebp - 0x348], 0
mov dword [ebp - 0x344], 0
call fcn.00426440
add esp, 0xc
push 0
push 2
call dword [sym.imp.KERNEL32.dll_CreateToolhelp32Snapshot]
mov esi, eax
lea eax, [ebp - 0x364]
push eax
push esi
call dword [sym.imp.KERNEL32.dll_Process32FirstW]
test eax, eax
je 0x40b367
nop dword [eax]
lea eax, [ebp - 0x364]
push eax
push esi
call dword [sym.imp.KERNEL32.dll_Process32NextW]
test eax, eax
je 0x40b367
mov eax, edi
lea ecx, [ebp - 0x340]
nop word [eax + eax]
mov dx, word [ecx]
cmp dx, word [eax]
jne 0x40b346
test dx, dx
je 0x40b342
mov dx, word [ecx + 2]
cmp dx, word [eax + 2]
jne 0x40b346
add ecx, 4
add eax, 4
test dx, dx
jne 0x40b320
xor eax, eax
jmp 0x40b34b
sbb eax, eax
or eax, 1
test eax, eax
jne 0x40b300
mov byte [ebp - 4], 8
test esi, esi
je 0x40b35e
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov byte [ebp - 0x365], 1
jmp 0x40b37d
mov byte [ebp - 4], 9
test esi, esi
je 0x40b376
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov byte [ebp - 0x365], 0
mov byte [ebp - 4], 7
mov ecx, dword [ebp - 0x378]
cmp ecx, 8
jb 0x40b3c1
mov edx, dword [ebp - 0x38c]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x40b3b7
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40b4c8
push ecx
push edx
call fcn.00424b8e
add esp, 8
xor eax, eax
mov byte [ebp - 4], 6
mov ecx, dword [ebp - 0x3c0]
mov dword [ebp - 0x37c], 0
mov dword [ebp - 0x378], 7
mov word [ebp - 0x38c], ax
cmp ecx, 8
jb 0x40b422
mov edx, dword [ebp - 0x3d4]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x40b418
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40b4c8
push ecx
push edx
call fcn.00424b8e
add esp, 8
cmp byte [ebp - 0x365], 0
je 0x40b44f
lea ecx, [ebp - 0x370]
mov dword [ebp - 0x370], 1
mov dword [ebp - 0x36c], 0
call fcn.00414100
jmp 0x40b240
mov byte [ebp - 4], 2
cmp byte [ebp - 0x118], 0
je 0x40b471
mov byte [ebp - 4], 0xa
mov eax, dword [ebp - 0x11c]
test eax, eax
je 0x40b471
push eax
call dword [ebp - 0x120]
mov ecx, dword [ebp - 0x124]
cmp ecx, 8
jb 0x40b4ad
mov edx, dword [ebp - 0x138]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x40b4a3
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40b4f8
push ecx
push edx
call fcn.00424b8e
add esp, 8
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.00424972
mov esp, ebp
pop ebp
ret
call fcn.0042cf69
call fcn.0042cf69
call fcn.0042cf69
push str.unable_to_load_wsc_proxy__please_try_again
lea ecx, [ebp - 0x374]
call fcn.00403a70
push 0x471d18
lea eax, [ebp - 0x374]
push eax
call fcn.00425e40
call fcn.0042cf69
int3