Function at 0x47d5f0
Capabilities:
Enumerate process modules
Enumerate threads

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xa30
mov eax, dword [0x4d5630]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword [ebp + 0xc]
push ebx
push esi
push edi
mov edi, dword [ebp + 8]
mov ebx, ecx
push edi
mov dword [ebp - 0x970], eax
mov eax, dword [ebp + 0x10]
push 0
mov dword [ebp - 0x978], eax
mov eax, dword [ebp + 0x14]
push 0x410
mov dword [ebp - 0x95c], ebx
mov dword [ebp - 0x958], edi
mov dword [ebp - 0x950], eax
mov dword [ebp - 0x94c], 0
call dword [sym.imp.KERNEL32.DLL_OpenProcess]
mov esi, eax
mov eax, dword [ebx + 4]
cmp eax, esi
je 0x47d684
test eax, eax
je 0x47d673
cmp eax, 0xffffffff
je 0x47d673
call fcn.00440520
push dword [ebx + 4]
call fcn.0044c950
add esp, 4
mov dword [ebx + 4], 0
test esi, esi
je 0x47d684
cmp esi, 0xffffffff
je 0x47d684
mov dword [ebx + 4], esi
call fcn.00440520
mov eax, dword [ebx + 4]
test eax, eax
je 0x47ddb1
cmp eax, 0xffffffff
je 0x47ddb1
push 0x2c
lea ecx, [ebp - 0x238]
mov dword [ebp - 0x238], 0x2c
xorps xmm0, xmm0
push ecx
push eax
movdqu xmmword [ebp - 0x234], xmm0
movdqu xmmword [ebp - 0x224], xmm0
movq qword [ebp - 0x214], xmm0
call sub.PSAPI.DLL_GetProcessMemoryInfo
test eax, eax
je 0x47d6ed
mov eax, dword [ebp - 0x22c]
mov dword [ebx + 0x24], eax
mov eax, dword [ebp - 0x230]
mov dword [ebx + 0x28], eax
mov eax, dword [ebp - 0x210]
mov dword [ebx + 0x2c], eax
jmp 0x47d74e
call fcn.00438e90
cmp eax, 2
jg 0x47d730
mov eax, 1
mov dword [ebp - 0x94c], eax
call sub.KERNEL32.DLL_GetLastError
push eax
push 2
push 0xb5
push str.c:_buildbot_slaveworkdir_reposlar6desktop_2013_3desktopwindowscrash_reporterprocess_state_impl.cc
lea ecx, [ebp - 0xa30]
call fcn.004384e0
add eax, 0x10
push str.GetProcessMemoryInfo_failed
push eax
call fcn.00404c5e
add esp, 8
mov eax, dword [ebp - 0x94c]
test al, 1
je 0x47d74e
and eax, 0xfffffffe
lea ecx, [ebp - 0xa30]
mov dword [ebp - 0x94c], eax
call fcn.00438780
push 0x104
lea eax, [ebp - 0x20c]
push eax
push dword [ebx + 4]
call fcn.0047d2c0
add esp, 0xc
test al, al
jne 0x47d772
xor eax, eax
mov word [ebp - 0x20c], ax
xor esi, esi
mov ebx, 0xa
mov dword [ebp - 0x954], esi
nop
push edi
push 8
dec ebx
call sub.KERNEL32.DLL_CreateToolhelp32Snapshot
mov edi, eax
cmp esi, edi
je 0x47d7c4
test esi, esi
je 0x47d7ae
cmp esi, 0xffffffff
je 0x47d7ae
call fcn.00440520
push esi
call fcn.0044c950
add esp, 4
xor esi, esi
mov dword [ebp - 0x954], esi
test edi, edi
je 0x47d7c4
cmp edi, 0xffffffff
je 0x47d7c4
mov esi, edi
mov dword [ebp - 0x954], esi
call fcn.00440520
test esi, esi
je 0x47d7cd
cmp esi, 0xffffffff
jne 0x47d7e2
call dword [sym.imp.KERNEL32.DLL_GetLastError]
cmp eax, 0x18
jne 0x47d7e2
mov edi, dword [ebp - 0x958]
test ebx, ebx
jg 0x47d780
mov dword [ebp - 0x974], ebx
mov ebx, dword [ebp - 0x95c]
test esi, esi
je 0x47d8e2
cmp esi, 0xffffffff
je 0x47d8e2
lea eax, [ebp - 0x948]
mov dword [ebp - 0x948], 0x428
push eax
push esi
call sub.KERNEL32.DLL_Module32FirstW
test eax, eax
je 0x47d88b
lea ebx, [ebx]
cmp dword [ebx + 8], 0
jne 0x47d847
lea eax, [ebp - 0x20c]
push eax
lea eax, [ebp - 0x728]
push eax
call fcn.0048d89a
add esp, 8
mov byte [ebp - 0x95c], 1
test eax, eax
je 0x47d84e
mov byte [ebp - 0x95c], 0
push dword [ebp - 0x95c]
lea eax, [ebp - 0x728]
mov ecx, ebx
push dword [ebp - 0x930]
push dword [ebp - 0x934]
push eax
lea eax, [ebp - 0x928]
push eax
call fcn.0047cf90
lea eax, [ebp - 0x948]
push eax
push esi
call sub.KERNEL32.DLL_Module32NextW
test eax, eax
jne 0x47d820
jmp 0x47d955
call fcn.00438e90
cmp eax, 2
jg 0x47d8d2
mov eax, dword [ebp - 0x94c]
or eax, 2
mov dword [ebp - 0x94c], eax
call sub.KERNEL32.DLL_GetLastError
push eax
push 2
push 0xd3
push str.c:_buildbot_slaveworkdir_reposlar6desktop_2013_3desktopwindowscrash_reporterprocess_state_impl.cc
lea ecx, [ebp - 0xa30]
call fcn.004384e0
add eax, 0x10
push str.Module32First_failed
push eax
call fcn.00404c5e
add esp, 8
mov ecx, dword [ebp - 0x94c]
test cl, 2
je 0x47d955
and ecx, 0xfffffffd
jmp 0x47d944
call fcn.00438e90
cmp eax, 2
jg 0x47d936
mov eax, dword [ebp - 0x94c]
or eax, 4
mov dword [ebp - 0x94c], eax
call sub.KERNEL32.DLL_GetLastError
push eax
push 2
push 0xd6
push str.c:_buildbot_slaveworkdir_reposlar6desktop_2013_3desktopwindowscrash_reporterprocess_state_impl.cc
lea ecx, [ebp - 0xa30]
call fcn.004384e0
push dword [ebp - 0x974]
add eax, 0x10
push str.TH32CS_SNAPMODULE_failed__retries_left
push eax
call fcn.00404c5e
add esp, 8
mov ecx, eax
call fcn.00412122
mov ecx, dword [ebp - 0x94c]
test cl, 4
je 0x47d955
and ecx, 0xfffffffb
mov dword [ebp - 0x94c], ecx
lea ecx, [ebp - 0xa30]
call fcn.00438780
lea eax, [ebx + 0xc]
cmp dword [eax + 4], eax
jne 0x47d9d4
mov ecx, dword [ebp - 0x950]
mov eax, dword [ecx]
mov eax, dword [eax + 4]
call eax
test al, al
je 0x47d9d4
mov esi, dword [ebp - 0x950]
mov ecx, esi
call fcn.0047e040
cmp dword [ebx + 8], 0
mov edi, eax
jne 0x47d99e
lea eax, [ebp - 0x20c]
push eax
push edi
call fcn.0048d89a
add esp, 8
mov byte [ebp - 0x950], 1
test eax, eax
je 0x47d9a5
mov byte [ebp - 0x950], 0
push dword [ebp - 0x950]
mov ecx, esi
push dword [esi + 0x38]
push dword [esi + 0x34]
push edi
call fcn.0047e030
push eax
mov ecx, ebx
call fcn.0047cf90
mov eax, dword [esi]
mov ecx, esi
mov eax, dword [eax + 4]
call eax
test al, al
jne 0x47d974
mov esi, dword [ebp - 0x954]
mov edi, dword [sym.imp.KERNEL32.DLL_ReadProcessMemory]
lea eax, [ebp - 0x950]
push eax
push 4
lea eax, [ebp - 0x964]
mov dword [ebp - 0x964], 0
push eax
push dword [ebp - 0x970]
mov dword [ebp - 0x950], 0
push dword [ebx + 4]
call edi
test eax, eax
je 0x47dd9a
cmp dword [ebp - 0x950], 4
jne 0x47dd9a
lea eax, [ebp - 0x950]
mov dword [ebp - 0x96c], 0
push eax
push 8
lea eax, [ebp - 0x96c]
mov dword [ebp - 0x968], 0
push eax
push dword [ebp - 0x964]
mov dword [ebp - 0x950], 0
push dword [ebx + 4]
call edi
test eax, eax
je 0x47dd9a
cmp dword [ebp - 0x950], 8
jne 0x47dd9a
lea eax, [ebx + 0x1c]
mov ecx, ebx
push eax
push dword [ebp - 0x96c]
call fcn.0047cd90
test al, al
je 0x47dd8d
mov ecx, dword [ebp - 0x96c]
lea eax, [ebx + 0x20]
add ecx, 0xc
push eax
push ecx
mov ecx, ebx
call fcn.0047cd90
test al, al
je 0x47dd8d
lea eax, [ebp - 0x504]
mov ecx, ebx
push eax
push dword [ebp - 0x968]
call fcn.0047cdd0
test al, al
je 0x47dd8d
lea eax, [ebp - 0x960]
mov ecx, ebx
push eax
push dword [ebp - 0x978]
call fcn.0047cd90
test al, al
jne 0x47db3f
call fcn.00438e90
cmp eax, 2
jg 0x47db17
mov eax, dword [ebp - 0x94c]
lea ecx, [ebp - 0xa28]
push 2
push 0xfd
or eax, 8
push str.c:_buildbot_slaveworkdir_reposlar6desktop_2013_3desktopwindowscrash_reporterprocess_state_impl.cc
mov dword [ebp - 0x94c], eax
call fcn.00438400
add eax, 8
push str.Could_not_read_ID_of_crashed_thread
push eax
call fcn.00404c5e
add esp, 8
mov eax, dword [ebp - 0x94c]
test al, 8
je 0x47db35
and eax, 0xfffffff7
lea ecx, [ebp - 0xa28]
mov dword [ebp - 0x94c], eax
call fcn.00438510
mov dword [ebp - 0x960], 0
push 0xb4
call fcn.00483600
add esp, 4
test eax, eax
je 0x47dd8d
push 1
push dword [ebp - 0x960]
mov ecx, eax
call fcn.0047ec50
mov esi, eax
test esi, esi
je 0x47dd8d
lea eax, [ebp - 0x504]
mov ecx, esi
push eax
push dword [ebx + 4]
call fcn.0047f290
test al, al
je 0x47dd85
mov edi, dword [ebp - 0x958]
lea ecx, [esi + 4]
lea edx, [ebx + 0x14]
mov dword [ecx + 4], edx
mov eax, dword [edx]
mov dword [ecx], eax
mov eax, dword [edx]
push edi
push 4
mov dword [eax + 4], ecx
mov dword [edx], ecx
call sub.KERNEL32.DLL_CreateToolhelp32Snapshot
push eax
lea ecx, [ebp - 0x954]
call fcn.0047dfd0
mov esi, dword [ebp - 0x954]
test esi, esi
je 0x47dd11
cmp esi, 0xffffffff
je 0x47dd11
lea eax, [ebp - 0x520]
mov dword [ebp - 0x520], 0x1c
push eax
push esi
call sub.KERNEL32.DLL_Thread32First
test eax, eax
je 0x47dca4
cmp dword [ebp - 0x520], 0x10
jb 0x47dca4
cmp dword [ebp - 0x514], edi
jne 0x47dc65
mov eax, dword [ebp - 0x518]
cmp eax, dword [ebp - 0x960]
je 0x47dc65
push 0xb4
call fcn.00483600
add esp, 4
test eax, eax
je 0x47dc65
push 0
push dword [ebp - 0x518]
mov ecx, eax
call fcn.0047ec50
mov edi, eax
test edi, edi
je 0x47dc5f
push dword [ebx + 4]
mov ecx, edi
call fcn.0047f1e0
test al, al
je 0x47dc57
lea ecx, [edi + 4]
lea edi, [ebx + 0x14]
mov dword [ecx + 4], edi
mov eax, dword [edi]
mov dword [ecx], eax
mov eax, dword [edi]
mov dword [eax + 4], ecx
mov dword [edi], ecx
jmp 0x47dc5f
mov eax, dword [edi]
mov ecx, edi
push 1
call dword [eax]
mov edi, dword [ebp - 0x958]
lea eax, [ebp - 0x520]
mov dword [ebp - 0x520], 0x1c
push eax
push esi
call sub.KERNEL32.DLL_Thread32Next
test eax, eax
jne 0x47dbf7
lea ecx, [ebp - 0x954]
call fcn.00476b50
pop edi
pop esi
mov al, 1
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00486d53
mov esp, ebp
pop ebp
ret 0x10
call fcn.00438e90
cmp eax, 2
jg 0x47dd07
or dword [ebp - 0x94c], 0x10
call sub.KERNEL32.DLL_GetLastError
push eax
push 2
push 0x122
push str.c:_buildbot_slaveworkdir_reposlar6desktop_2013_3desktopwindowscrash_reporterprocess_state_impl.cc
lea ecx, [ebp - 0xa30]
call fcn.004384e0
push 0x10
push str.__min_size
push dword [ebp - 0x520]
add eax, 0x10
push str.Thread32First_failed__te.dwSize
push eax
call fcn.00404c5e
add esp, 8
mov ecx, eax
call fcn.004121ba
push eax
call fcn.00404c5e
add esp, 8
mov ecx, eax
call fcn.004121ba
mov eax, dword [ebp - 0x94c]
test al, 0x10
jmp 0x47dd58
call fcn.00438e90
cmp eax, 2
jg 0x47dd50
or dword [ebp - 0x94c], 0x20
call sub.KERNEL32.DLL_GetLastError
push eax
push 2
push 0x126
push str.c:_buildbot_slaveworkdir_reposlar6desktop_2013_3desktopwindowscrash_reporterprocess_state_impl.cc
lea ecx, [ebp - 0xa30]
call fcn.004384e0
add eax, 0x10
push str.TH32CS_SNAPTHREAD_failed
push eax
call fcn.00404c5e
add esp, 8
mov eax, dword [ebp - 0x94c]
test al, 0x20
je 0x47dd65
lea ecx, [ebp - 0xa30]
call fcn.00438780
lea ecx, [ebp - 0x954]
call fcn.00476b50
pop edi
pop esi
mov al, 1
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00486d53
mov esp, ebp
pop ebp
ret 0x10
mov eax, dword [esi]
mov ecx, esi
push 1
call dword [eax]
lea ecx, [ebp - 0x954]
call fcn.00476b50
jmp 0x47ddb1
test esi, esi
je 0x47ddb1
cmp esi, 0xffffffff
je 0x47ddb1
call fcn.00440520
push esi
call fcn.0044c950
add esp, 4
mov ecx, dword [ebp - 4]
xor al, al
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.00486d53
mov esp, ebp
pop ebp
ret 0x10