Function at 0x40efa0
Capabilities:
Enumerate threads

Disassembly:
mov ecx, dword [0x45ccd4]
mov eax, 0x4f576647
imul ecx
sar edx, 8
mov eax, edx
shr eax, 0x1f
add eax, edx
sub esp, 0x24
push ebx
mov ebx, dword [0x45cccc]
push ebp
push esi
mov esi, eax
mov eax, 0x4f576647
imul ebx
sar edx, 8
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x45ccdc]
imul edx, edx, 0x242
push edi
mov edi, eax
sub edi, esi
add edi, edx
mov eax, 0x38e38e39
imul ecx
mov eax, dword [0x45cce8]
imul eax, eax, 0x21e
sar edx, 7
mov esi, edx
shr esi, 0x1f
add edi, edx
add esi, edi
add esi, eax
mov eax, 0x93459be7
imul ebx
mov ecx, ebx
imul ecx, ecx, 0x203
add edx, ebx
sar edx, 8
mov eax, edx
shr eax, 0x1f
add eax, edx
add esi, ecx
sub esi, eax
mov eax, dword [esp + 0x38]
test eax, eax
mov dword [str._r_____r____], esi
jne 0x40f0ef
mov eax, 0x71625345
imul dword [0x45cce4]
sar edx, 8
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
mov edi, ecx
mov ecx, dword [0x45ccd0]
mov eax, 0xd8a5df
imul ecx
sar edx, 1
mov eax, edx
shr eax, 0x1f
add eax, edx
mov ebp, eax
mov eax, 0x7f411e53
imul ecx
sar edx, 8
sub ebp, edi
add ebp, edx
mov edi, edx
mov eax, 0x91a2b3c5
imul ecx
add edx, ecx
shr edi, 0x1f
sar edx, 7
add edi, ebp
mov ebp, dword [0x45cce0]
add edi, edx
mov ecx, edx
mov edx, dword [0x45ccc8]
imul edx, edx, 0xe1
mov eax, ebp
imul eax, eax, 0x61
shr ecx, 0x1f
add ecx, edi
add ecx, edx
add ecx, eax
mov eax, dword [esp + 0x3c]
test eax, eax
mov dword [0x45ccc8], ecx
je 0x40f0fb
mov edi, eax
lea edx, [edi + 1]
mov dword [esp + 0x10], edx
mov dl, byte [edi]
inc edi
test dl, dl
jne 0x40f0c5
sub edi, dword [esp + 0x10]
mov dword [esp + 0x14], edi
je 0x40f0fb
push eax
call fcn.0040e5e0
mov esi, dword [str._r_____r____]
mov ebx, dword [0x45cccc]
add esp, 4
mov dword [esp + 0x38], eax
mov ecx, dword [0x45ccc8]
mov ebp, dword [0x45cce0]
imul ebp, ebp, 0x203
mov eax, 0x71625345
imul dword [0x45ccd4]
sar edx, 8
add ebp, edx
mov eax, edx
shr eax, 0x1f
add eax, ebp
mov dword [esp + 0x10], eax
mov eax, 0x38e38e39
imul dword [0x45ccd4]
mov eax, dword [esp + 0x10]
sar edx, 7
add eax, edx
mov edi, dword [0x45cce8]
mov ebp, edx
imul edi, edi, 0x21e
shr ebp, 0x1f
add ebp, eax
mov eax, dword [0x45cce4]
imul eax, eax, 0xe1
add ebp, eax
mov eax, 0xd20d20d3
imul ebx
add edx, ebx
mov ebx, dword [esp + 0x38]
sar edx, 7
mov eax, edx
shr eax, 0x1f
add ebp, edx
add eax, ebp
sub eax, edi
sub eax, esi
add eax, 0x16f
test ebx, ebx
mov dword [0x45cccc], eax
jne 0x40f185
pop edi
pop esi
pop ebp
xor eax, eax
pop ebx
add esp, 0x24
ret
mov esi, dword [0x45ccd8]
imul ecx, ecx, 0x242
mov eax, 0x4f576647
imul dword [0x45ccdc]
sar edx, 8
mov ebp, esi
imul ebp, ebp, 0x33a
mov eax, edx
shr eax, 0x1f
add eax, edx
sub ebp, eax
mov eax, 0x59493e15
imul dword [0x45ccd0]
add ebp, ecx
sar edx, 7
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
mov eax, 0x91a2b3c5
imul esi
add edx, esi
mov esi, dword [0x45cce4]
sar edx, 7
sub ebp, ecx
mov eax, edx
shr eax, 0x1f
add ebp, edx
add eax, ebp
sub eax, esi
lea ecx, [eax + edi - 0xe1]
push ebx
mov dword [0x45ccd0], ecx
call dword [sym.imp.KERNEL32.dll_GetProcessId]
mov ebx, eax
push ebx
push 4
call sub.KERNEL32.dll_CreateToolhelp32Snapshot
mov esi, dword [str._r_____r____]
mov ecx, dword [0x45ccdc]
mov edx, dword [0x45ccd8]
mov dword [esp + 0x38], eax
lea edi, [edx + esi]
mov eax, 0x38e38e39
imul edi, edi, 0x242
imul ecx
sar edx, 7
mov ebp, edx
mov eax, ecx
imul eax, eax, 0x203
add edi, edx
shr ebp, 0x1f
add ebp, edi
add ebp, eax
lea edx, [esi + esi*8]
shl edx, 6
add ebp, edx
mov eax, 0xd20d20d3
imul ecx
mov esi, dword [0x45cce0]
add edx, ecx
sar edx, 7
mov eax, edx
shr eax, 0x1f
add eax, edx
sub ebp, eax
xor eax, eax
mov dword [esp + 0x18], eax
mov dword [esp + 0x1c], eax
mov dword [esp + 0x20], eax
mov dword [esp + 0x24], eax
mov dword [esp + 0x28], eax
mov dword [esp + 0x2c], eax
mov dword [esp + 0x30], eax
mov eax, dword [0x45ccc8]
lea eax, [eax + eax*8]
shl eax, 6
lea edx, [esi + ebp - 0xe1]
mov ebp, eax
mov eax, 0x38e38e39
mov dword [0x45ccd4], edx
imul edx
mov edi, dword [0x45cce8]
imul ecx, ecx, 0xe1
sar edx, 7
mov eax, edx
shr eax, 0x1f
add eax, edx
sub ebp, eax
mov eax, 0xf1d48bd
imul edi
sar edx, 5
add ebp, edx
mov eax, edx
shr eax, 0x1f
add eax, ebp
mov ebp, eax
mov eax, 0x7f411e53
imul edi
imul edi, edi, 0xe1
sar edx, 8
mov eax, edx
shr eax, 0x1f
add eax, edx
sub ebp, eax
mov eax, 0xd20d20d3
imul esi
add edx, esi
sar edx, 7
mov eax, edx
sub ebp, edi
mov edi, dword [0x45cccc]
add ebp, edx
shr eax, 0x1f
add eax, ebp
mov edx, esi
imul esi, esi, 0x25d
imul edx, edx, 0x9c
add eax, edx
mov dword [0x45ccd8], eax
mov eax, dword [0x45ccd0]
lea ebp, [eax + edi]
mov eax, 0x4f576647
imul ebp, ebp, 0x1bd
imul dword [0x45cce4]
sar edx, 8
mov eax, edx
shr eax, 0x1f
add ebp, edx
add eax, ebp
add eax, esi
mov ebp, eax
mov eax, 0x38e38e39
imul dword [0x45cce4]
sar edx, 7
mov esi, edx
add ebp, edx
mov eax, 0x71625345
imul edi
sar edx, 8
mov eax, edx
shr esi, 0x1f
shr eax, 0x1f
add eax, edx
mov edx, dword [esp + 0x38]
add esi, ebp
sub esi, eax
add esi, ecx
lea ecx, [esp + 0x18]
push ecx
push edx
mov dword [esp + 0x20], 0x1c
mov dword [esp + 0x18], 0
mov dword [0x45ccdc], esi
call sub.KERNEL32.dll_Thread32First
test eax, eax
je 0x40f5cb
mov ebp, dword [0x45cce8]
mov ecx, dword [0x45ccd0]
mov edi, dword [0x45ccd8]
lea eax, [ecx + ebp]
imul eax, eax, 0x16f
mov edx, edi
imul edx, edx, 0x25d
add eax, edx
mov edx, dword [0x45ccd4]
imul edx, edx, 0x21e
sub eax, edx
mov dword [esp + 0x14], eax
mov eax, 0x93459be7
imul ebp
mov eax, dword [esp + 0x14]
add edx, ebp
sar edx, 8
add eax, edx
mov esi, edx
mov edx, dword [0x45cccc]
shr esi, 0x1f
add esi, eax
mov eax, 0x59493e15
imul edx
sar edx, 7
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x45ccdc]
imul edx, edx, 0xe1
sub esi, eax
mov eax, dword [esp + 0x24]
sub esi, edx
cmp eax, ebx
mov dword [0x45cce0], esi
jne 0x40f4ad
mov eax, dword [0x45ccd4]
mov ecx, dword [0x45ccc8]
mov edx, dword [0x45cce4]
lea ebx, [ecx + eax]
mov eax, 0x4f576647
imul ebx, ebx, 0x9c
imul edx
sar edx, 8
mov eax, edx
shr eax, 0x1f
add eax, edx
sub ebx, eax
mov eax, 0x38e38e39
imul edi
sar edx, 7
mov eax, edx
shr eax, 0x1f
add eax, edx
sub ebx, eax
mov eax, 0x93459be7
imul edi
add edx, edi
sar edx, 8
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [str._r_____r____]
sub ebx, eax
lea eax, [edx + edx*8]
shl eax, 6
add ebx, eax
mov eax, 0x59493e15
imul edx
sar edx, 7
mov eax, edx
add ebx, edx
mov edx, dword [esp + 0x20]
shr eax, 0x1f
add eax, ebx
mov dword [0x45cce4], eax
mov dword [esp + 0x10], edx
jmp 0x40f5dd
add edi, ecx
imul edi, edi, 0x203
lea eax, [ecx + ecx*8]
mov ecx, dword [0x45ccc8]
shl eax, 6
sub edi, eax
mov eax, 0x38e38e39
imul ecx
sar edx, 7
mov esi, edx
add edi, edx
mov edx, dword [str._r_____r____]
mov eax, 0xd8a5df
imul edx
sar edx, 1
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x45cce4]
imul edx, edx, 0xe1
shr esi, 0x1f
add esi, edi
sub esi, eax
sub esi, edx
mov eax, 0xd20d20d3
imul ecx
add edx, ecx
sar edx, 7
mov eax, edx
add esi, edx
mov edx, dword [esp + 0x38]
lea ecx, [esp + 0x18]
shr eax, 0x1f
push ecx
add eax, esi
push edx
mov dword [0x45cce8], eax
call sub.KERNEL32.dll_Thread32Next
test eax, eax
je 0x40f5cb
lea ecx, [ecx]
mov edi, dword [0x45ccd0]
mov eax, 0x71625345
imul dword [0x45cce4]
sar edx, 8
mov eax, edx
shr eax, 0x1f
add eax, edx
mov ecx, eax
mov eax, 0xd8a5df
imul edi
sar edx, 1
mov eax, edx
shr eax, 0x1f
add eax, edx
mov esi, eax
mov eax, 0x7f411e53
imul edi
sub esi, ecx
sar edx, 8
add esi, edx
mov ebp, edx
mov eax, 0x91a2b3c5
imul edi
add edx, edi
shr ebp, 0x1f
sar edx, 7
add ebp, esi
mov esi, dword [0x45cce0]
add ebp, edx
mov ecx, edx
mov edx, dword [0x45ccc8]
imul edx, edx, 0xe1
mov eax, esi
imul eax, eax, 0x61
shr ecx, 0x1f
add ecx, ebp
add ecx, edx
add ecx, eax
cmp dword [esp + 0x24], ebx
mov dword [0x45ccc8], ecx
je 0x40f663
mov edx, dword [esp + 0x38]
lea ecx, [esp + 0x18]
push ecx
push edx
call sub.KERNEL32.dll_Thread32Next
test eax, eax
jne 0x40f530
mov ebp, dword [0x45cce8]
mov ecx, dword [0x45ccc8]
mov esi, dword [0x45cce0]
lea eax, [ecx + ecx*8]
shl eax, 6
mov ecx, eax
mov eax, 0x38e38e39
imul dword [0x45ccd4]
sar edx, 7
mov eax, edx
shr eax, 0x1f
add eax, edx
sub ecx, eax
mov eax, 0xf1d48bd
imul ebp
sar edx, 5
add ecx, edx
mov edi, edx
mov eax, 0x7f411e53
imul ebp
imul ebp, ebp, 0xe1
shr edi, 0x1f
add edi, ecx
sar edx, 8
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
mov eax, 0xd20d20d3
imul esi
add edx, esi
imul esi, esi, 0x9c
sub edi, ecx
mov ecx, dword [esp + 0x38]
sar edx, 7
sub edi, ebp
mov eax, edx
shr eax, 0x1f
add edi, edx
add eax, edi
add eax, esi
push ecx
mov dword [0x45ccd8], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [esp + 0x10]
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x24
ret
mov ebx, dword [0x45ccd8]
mov edx, dword [0x45ccdc]
mov eax, ebx
imul eax, eax, 0x33a
mov dword [esp + 0x14], eax
mov eax, 0x4f576647
imul edx
sar edx, 8
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [esp + 0x14]
sub edx, eax
mov ebp, dword [0x45cce8]
mov eax, ecx
imul eax, eax, 0x242
add edx, eax
mov eax, ebp
imul eax, eax, 0x21e
add edx, eax
mov dword [esp + 0x14], edx
mov eax, 0x59493e15
imul edi
sar edx, 7
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [esp + 0x14]
sub edx, eax
mov edi, edx
mov eax, 0x91a2b3c5
imul ebx
add edx, ebx
sar edx, 7
mov eax, edx
add edi, edx
mov edx, dword [esp + 0x20]
shr eax, 0x1f
add eax, edi
sub eax, dword [0x45cce4]
sub eax, 0xe1
mov dword [0x45ccd0], eax
mov dword [esp + 0x10], edx
jmp 0x40f5dd