Function at 0x4037f0
Capabilities:
Enumerate processes

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x47d1b3
mov eax, dword fs:[0]
push eax
sub esp, 0x3ec
mov eax, dword [0x49f00c]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov ebx, ecx
call fcn.004013f0
add eax, 0x68
lea ecx, [ebp - 0x104]
push eax
call fcn.004036f0
push 0
mov dword [ebp - 4], 0
push 2
mov byte [ebp - 0x331], 0
call dword [sym.imp.KERNEL32.dll_CreateToolhelp32Snapshot]
mov esi, eax
cmp esi, 0xffffffff
je 0x403876
lea eax, [ebp - 0x330]
mov dword [ebp - 0x330], 0x22c
push eax
push esi
call dword [sym.imp.KERNEL32.dll_Process32FirstW]
test eax, eax
jne 0x4038a4
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov ecx, ebx
call fcn.004031a0
lea ecx, [ebp - 0x104]
call fcn.004016a0
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.00462ae1
mov esp, ebp
pop ebp
ret
mov edi, dword [sym.imp.KERNEL32.dll_Process32NextW]
nop word [eax + eax]
mov ecx, dword [ebp - 0x328]
lea eax, [ebp - 0x331]
push eax
lea edx, [ebp - 0xa4]
call fcn.0040b190
add esp, 4
lea eax, [ebp - 0x330]
push eax
push esi
call edi
test eax, eax
jne 0x4038b0
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
cmp byte [ebp - 0x331], 0
je 0x403876
xor eax, eax
mov dword [ebp - 0x338], ebx
push eax
push 0x489870
lea ecx, [ebp - 0x3cc]
mov dword [ebp - 0x3d8], 0x4030a0
mov dword [ebp - 0x3d4], 0
mov dword [ebp - 0x3bc], 0
mov dword [ebp - 0x3b8], 7
mov word [ebp - 0x3cc], ax
call fcn.00404890
xor eax, eax
mov byte [ebp - 4], 1
push eax
push 0x489870
lea ecx, [ebp - 0x3b4]
mov dword [ebp - 0x3a4], 0
mov dword [ebp - 0x3a0], 7
mov word [ebp - 0x3b4], ax
call fcn.00404890
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x39c]
push 2
xor eax, eax
mov dword [ebp - 0x38c], 0
push 0x4897a4
mov dword [ebp - 0x388], 7
mov word [ebp - 0x39c], ax
call fcn.00404890
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x384]
push 2
xor eax, eax
mov dword [ebp - 0x374], 0
push 0x4897ac
mov dword [ebp - 0x370], 7
mov word [ebp - 0x384], ax
call fcn.00404890
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x36c]
push 0x35
xor eax, eax
mov dword [ebp - 0x35c], 0
push 0x4897b8
mov dword [ebp - 0x358], 7
mov word [ebp - 0x36c], ax
call fcn.00404890
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x354]
push 2
xor eax, eax
mov dword [ebp - 0x344], 0
push 0x4896ec
mov dword [ebp - 0x340], 7
mov word [ebp - 0x354], ax
call fcn.00404890
sub esp, 0x28
mov byte [ebp - 4], 6
movq xmm0, qword [ebp - 0x3d8]
lea edx, [ebp - 0x338]
mov esi, esp
lea ecx, [ebp - 0x3f8]
sub esp, 0x10
mov dword [ebp - 0x33c], esi
mov eax, esp
movq qword [eax], xmm0
mov dword [eax + 8], 0
call fcn.00403c90
add esp, 0x10
mov dword [esi + 0x24], 0
lea ecx, [ebp - 0x3f8]
mov byte [ebp - 4], 8
call fcn.004043b0
mov dword [esi + 0x24], eax
mov byte [ebp - 4], 9
mov ecx, dword [ebp - 0x3f4]
test ecx, ecx
je 0x403aa0
or eax, 0xffffffff
lock xadd dword [ecx + 8], eax
jne 0x403aa0
mov eax, dword [ecx]
call dword [eax + 4]
lea eax, [ebp - 0x3cc]
mov byte [ebp - 4], 6
push eax
lea eax, [ebp - 0x3b4]
push eax
lea eax, [ebp - 0x39c]
push eax
lea eax, [ebp - 0x384]
push eax
push 3
lea edx, [ebp - 0x36c]
lea ecx, [ebp - 0x354]
call fcn.00409c80
mov edx, dword [ebp - 0x340]
add esp, 0x3c
cmp edx, 8
jb 0x403b16
mov ecx, dword [ebp - 0x354]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x403b0c
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x403c57
push edx
push ecx
call fcn.00463043
add esp, 8
mov edx, dword [ebp - 0x358]
cmp edx, 8
jb 0x403b56
mov ecx, dword [ebp - 0x36c]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x403b4c
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x403c5c
push edx
push ecx
call fcn.00463043
add esp, 8
mov edx, dword [ebp - 0x370]
cmp edx, 8
jb 0x403b96
mov ecx, dword [ebp - 0x384]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x403b8c
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x403c61
push edx
push ecx
call fcn.00463043
add esp, 8
mov edx, dword [ebp - 0x388]
cmp edx, 8
jb 0x403bd6
mov ecx, dword [ebp - 0x39c]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x403bcc
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x403c66
push edx
push ecx
call fcn.00463043
add esp, 8
mov edx, dword [ebp - 0x3a0]
cmp edx, 8
jb 0x403c12
mov ecx, dword [ebp - 0x3b4]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x403c08
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x403c6b
push edx
push ecx
call fcn.00463043
add esp, 8
mov edx, dword [ebp - 0x3b8]
cmp edx, 8
jb 0x40387d
mov ecx, dword [ebp - 0x3cc]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x403c48
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x403c70
push edx
push ecx
call fcn.00463043
add esp, 8
jmp 0x40387d
call fcn.00466e0f
call fcn.00466e0f
call fcn.00466e0f
call fcn.00466e0f
call fcn.00466e0f
call fcn.00466e0f
int3