Function at 0x405740
Capabilities:
Enumerate processes

Disassembly:
sub esp, 0x134
mov eax, dword [0x442230]
mov ecx, dword [0x4410bc]
mov dword [esp + 0x130], eax
mov eax, 0x61f4f3e1
imul ecx
mov ecx, dword [0x4410b8]
sar edx, 0x11
mov eax, edx
shr eax, 0x1f
add eax, edx
push esi
mov esi, eax
mov eax, 0xa0c15
cdq
idiv ecx
push edi
mov edi, eax
mov eax, 0x1984ece9
imul ecx
sar edx, 0x10
sub edi, esi
mov eax, edx
shr eax, 0x1f
add edi, edx
add eax, edi
mov dword [str._r_____r____], eax
mov eax, 0x443390
lea esi, [eax + 1]
nop
mov dl, byte [eax]
inc eax
test dl, dl
jne 0x4057a0
sub eax, esi
mov dword [esp + 8], eax
jne 0x405cad
mov edx, dword [0x4410d0]
imul ecx, ecx, 0xff4b
mov esi, dword [0x4410b4]
mov eax, 0x3307af59
imul esi, esi, 0x53a0f
imul edx
sar edx, 0x11
mov eax, edx
shr eax, 0x1f
add esi, edx
add eax, esi
push ebx
sub eax, ecx
push ebp
mov dword [0x4410b4], eax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov ecx, dword [0x4410d0]
mov esi, dword [0x4410c4]
mov ebx, eax
imul esi, esi, 0x3bf27
mov eax, 0xccf850a7
imul ecx
sar edx, 0x11
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
mov edx, dword [str._r_____r____]
imul edx, edx, 0x181cd
sub ecx, esi
push 0
add ecx, edx
push 2
mov dword [esp + 0x1c], 0
mov dword [0x4410bc], ecx
call sub.KERNEL32.dll_CreateToolhelp32Snapshot
mov ecx, dword [0x4410c8]
mov esi, dword [0x4410b8]
mov edi, eax
imul esi, esi, 0xd454
mov eax, 0x61f4f3e1
imul ecx
mov ecx, dword [0x4410c0]
sar edx, 0x11
imul ecx, ecx, 0xa081a
mov eax, edx
shr eax, 0x1f
add eax, edx
sub esi, eax
sub esi, ecx
mov ecx, dword [0x4410b4]
mov eax, 0x88a76c3f
imul ecx
add edx, ecx
mov ecx, dword [0x4410cc]
sar edx, 0x11
mov dword [0x4410b8], esi
mov esi, edx
shr esi, 0x1f
add esi, edx
mov eax, 0x197ad0b7
imul ecx
mov ecx, dword [str._r_____r____]
sar edx, 0x10
mov ebp, edx
add esi, edx
mov eax, 0x3307af59
imul ecx
sar edx, 0x11
mov eax, edx
shr ebp, 0x1f
shr eax, 0x1f
lea ecx, [esp + 0x18]
add eax, edx
add ebp, esi
push ecx
sub ebp, eax
push edi
mov dword [esp + 0x20], 0x128
mov dword [0x4410c0], ebp
call sub.KERNEL32.dll_Process32First
test eax, eax
je 0x405cab
mov ecx, dword [0x4410d0]
mov esi, dword [0x4410bc]
mov eax, 0x61f4f3e1
imul ecx
sar edx, 0x11
mov ebp, edx
shr ebp, 0x1f
add ebp, edx
mov eax, 0x3307af59
imul esi
sar edx, 0x11
add ebp, edx
mov eax, edx
shr eax, 0x1f
add eax, ebp
mov ebp, eax
mov eax, 0x1984ece9
imul ecx
sar edx, 0x10
mov eax, edx
shr eax, 0x1f
add ebp, edx
add eax, ebp
mov dword [0x4410c4], eax
cmp dword [esp + 0x20], ebx
jne 0x405938
mov ecx, dword [esp + 0x30]
mov dword [esp + 0x14], ecx
mov ecx, dword [0x4410b4]
mov eax, 0x88a76c3f
imul ecx
add edx, ecx
mov ecx, dword [0x4410c0]
sar edx, 0x11
mov eax, edx
shr eax, 0x1f
add eax, edx
mov ebp, eax
mov eax, 0x61f4f3e1
imul ecx
sar edx, 0x11
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x4410d4]
sub eax, ebp
mov ebp, eax
mov eax, 0x402d6015
imul edx
sar edx, 0xe
mov eax, edx
add ebp, edx
shr eax, 0x1f
add eax, ebp
mov ebp, dword [esp + 0x14]
test ebp, ebp
mov dword [0x4410c8], eax
jne 0x405a40
lea ecx, [esp + 0x18]
push ecx
push edi
call sub.KERNEL32.dll_Process32Next
test eax, eax
je 0x405a34
mov ecx, dword [str._r_____r____]
mov eax, 0x197ad0b7
imul ecx
mov ecx, dword [0x4410cc]
sar edx, 0x10
mov esi, edx
shr esi, 0x1f
add esi, edx
mov edx, ecx
imul edx, edx, 0xa0887
add esi, edx
mov eax, 0x40499437
imul ecx
sar edx, 0xe
mov eax, edx
shr eax, 0x1f
add esi, edx
add eax, esi
mov dword [0x4410cc], eax
cmp dword [esp + 0x20], ebx
jne 0x405998
mov ecx, dword [0x4410c8]
mov eax, 0x3307af59
imul ecx
imul ecx, ecx, 0xff4b
sar edx, 0x11
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x4410c4]
mov ebp, dword [esp + 0x30]
mov esi, eax
mov eax, 0x1984ece9
imul edx
sar edx, 0x10
mov eax, edx
shr eax, 0x1f
add eax, edx
sub esi, eax
sub esi, ecx
mov dword [0x4410d0], esi
mov esi, dword [0x4410bc]
mov ecx, dword [0x4410c0]
mov ebx, dword [sym.imp.KERNEL32.dll_CloseHandle]
imul ecx, ecx, 0x53a0f
imul esi, esi, 0xa0c15
mov eax, 0x3307af59
imul dword [0x4410b4]
sar edx, 0x11
sub ecx, esi
mov eax, edx
shr eax, 0x1f
add ecx, edx
add eax, ecx
push edi
mov dword [0x4410d4], eax
call ebx
push 0
push 2
call sub.KERNEL32.dll_CreateToolhelp32Snapshot
mov ecx, dword [0x4410bc]
mov edi, eax
mov eax, 0x61f4f3e1
imul ecx
sar edx, 0x11
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
mov esi, ecx
mov ecx, dword [0x4410b8]
mov eax, 0xa0c15
cdq
idiv ecx
mov dword [esp + 0x18], 0x128
sub eax, esi
mov esi, eax
mov eax, 0x1984ece9
imul ecx
sar edx, 0x10
add esi, edx
mov ecx, edx
shr ecx, 0x1f
add ecx, esi
mov esi, dword [0x4410b4]
mov eax, 0x88a76c3f
imul esi
add edx, esi
sar edx, 0x11
mov esi, edx
shr esi, 0x1f
add esi, edx
mov edx, dword [0x4410cc]
mov eax, 0x197ad0b7
imul edx
sar edx, 0x10
mov eax, edx
shr eax, 0x1f
add esi, edx
add eax, esi
mov esi, eax
mov eax, 0x3307af59
imul ecx
sar edx, 0x11
mov eax, edx
mov dword [str._r_____r____], ecx
shr eax, 0x1f
lea ecx, [esp + 0x18]
add eax, edx
push ecx
sub esi, eax
push edi
mov dword [0x4410c0], esi
call sub.KERNEL32.dll_Process32First
test eax, eax
je 0x405cab
mov ecx, dword [0x4410d0]
mov esi, dword [0x4410b4]
mov eax, 0x3307af59
imul esi, esi, 0x53a0f
imul ecx
mov eax, dword [esp + 0x20]
sar edx, 0x11
add esi, edx
mov ecx, edx
mov edx, dword [0x4410b8]
imul edx, edx, 0xff4b
shr ecx, 0x1f
add ecx, esi
sub ecx, edx
cmp eax, ebp
mov dword [0x4410b4], ecx
mov eax, 0x3307af59
jne 0x405bc7
mov ecx, dword [0x4410c8]
imul ecx
imul ecx, ecx, 0xff4b
sar edx, 0x11
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x4410c4]
mov esi, eax
mov eax, 0x1984ece9
imul edx
sar edx, 0x10
mov eax, edx
shr eax, 0x1f
add eax, edx
sub esi, eax
sub esi, ecx
mov dword [0x4410d0], esi
xor eax, eax
lea ecx, [ecx]
mov cl, byte [esp + eax + 0x3c]
mov byte [eax + 0x443390], cl
inc eax
test cl, cl
jne 0x405bb0
push edi
call ebx
jmp 0x405cab
mov esi, dword [0x4410c0]
mov edx, dword [0x4410bc]
imul esi, esi, 0x53a0f
imul edx, edx, 0xa0c15
sub esi, edx
imul ecx
sar edx, 0x11
mov eax, edx
lea ecx, [esp + 0x18]
shr eax, 0x1f
add esi, edx
push ecx
add eax, esi
push edi
mov dword [0x4410d4], eax
call sub.KERNEL32.dll_Process32Next
test eax, eax
je 0x405c57
mov ecx, dword [0x4410c8]
mov esi, dword [0x4410b8]
mov eax, 0x61f4f3e1
imul esi, esi, 0xd454
imul ecx
mov ecx, dword [0x4410c0]
sar edx, 0x11
imul ecx, ecx, 0xa081a
mov eax, edx
shr eax, 0x1f
add eax, edx
sub esi, eax
mov eax, dword [esp + 0x20]
sub esi, ecx
cmp eax, ebp
mov dword [0x4410b8], esi
je 0x405cc7
lea edx, [esp + 0x18]
push edx
push edi
call sub.KERNEL32.dll_Process32Next
test eax, eax
jne 0x405c03
push edi
call ebx
mov ecx, dword [0x4410b4]
mov eax, 0x88a76c3f
imul ecx
add edx, ecx
mov ecx, dword [0x4410cc]
sar edx, 0x11
mov esi, edx
shr esi, 0x1f
add esi, edx
mov eax, 0x197ad0b7
imul ecx
mov ecx, dword [str._r_____r____]
sar edx, 0x10
add esi, edx
mov edi, edx
mov eax, 0x3307af59
imul ecx
sar edx, 0x11
mov eax, edx
shr edi, 0x1f
shr eax, 0x1f
add edi, esi
add eax, edx
sub edi, eax
mov dword [0x4410c0], edi
pop ebp
pop ebx
mov ecx, dword [esp + 0x138]
pop edi
mov eax, 0x443390
pop esi
call fcn.00419f5d
add esp, 0x134
ret
mov ecx, dword [0x4410d0]
mov esi, dword [0x4410c4]
mov eax, 0xccf850a7
imul esi, esi, 0x3bf27
imul ecx
mov ecx, dword [str._r_____r____]
sar edx, 0x11
imul ecx, ecx, 0x181cd
mov eax, edx
shr eax, 0x1f
add eax, edx
sub eax, esi
add eax, ecx
mov dword [0x4410bc], eax
xor eax, eax
mov cl, byte [esp + eax + 0x3c]
mov byte [eax + 0x443390], cl
inc eax
test cl, cl
jne 0x405d01
push edi
call ebx
jmp 0x405cab