Function at 0x405350
Capabilities:
Enumerate processes
Terminate process
Terminate process by name

Disassembly:
sub esp, 0x238
mov eax, dword [0x459190]
push ebx
push ebp
push esi
push edi
mov dword [esp + 0x244], eax
xor eax, eax
mov byte [esp + 0x140], 0
mov ecx, 0x40
lea edi, [esp + 0x141]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov eax, dword [esp + 0x24c]
push eax
push 0x447fbc
lea ecx, [esp + 0x148]
push 0x104
push ecx
call fcn.0042b43c
mov ebp, dword [0x457824]
mov eax, 0x77c150d
imul ebp
sar edx, 8
mov eax, edx
shr eax, 0x1f
add eax, edx
mov ecx, eax
mov eax, 0x9ad70599
imul ebp
add edx, ebp
mov ebp, dword [0x45781c]
sar edx, 0xc
mov eax, edx
shr eax, 0x1f
add eax, edx
sub ecx, eax
mov eax, 0xb7fe3405
imul ebp
add edx, ebp
mov ebp, dword [0x457834]
sar edx, 0xc
mov eax, edx
shr eax, 0x1f
add eax, edx
sub ecx, eax
mov ebx, dword [0x457830]
mov eax, 0xf00f00f1
imul ebp
add edx, ebp
sar edx, 0xd
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x457818]
mov esi, dword [0x457838]
imul edx, edx, 0x2220
mov edi, ebx
imul ebx, ebx, 0x1643
imul esi, esi, 0x1685
add eax, edx
imul edi, edi, 0x10e6
mov edx, dword [0x457820]
sub eax, ebx
mov dword [esp + 0x24], eax
mov eax, 0x8f2b7b75
imul edx
add edx, dword [0x457820]
mov eax, dword [esp + 0x24]
sar edx, 0xb
mov ebx, edx
add eax, edx
shr ebx, 0x1f
add ecx, edi
add ebx, eax
add ecx, esi
mov eax, 0xb6adc247
add esp, 0x10
imul ebp
mov dword [str._r_____r____], ecx
add edx, ebp
sar edx, 0xa
mov eax, edx
shr eax, 0x1f
add eax, edx
sub ebx, eax
mov eax, 0x77c150d
imul dword [0x457838]
sar edx, 8
mov dword [0x457818], ebx
mov ebx, edx
shr ebx, 0x1f
add ebx, edx
mov eax, 0x17eb125
imul dword [0x45781c]
sar edx, 5
mov eax, edx
shr eax, 0x1f
add ebx, edx
add eax, ebx
sub eax, esi
sub eax, ecx
push 0
lea ecx, [eax + edi + 0x1123]
push 2
mov dword [esp + 0x1c], 0
mov dword [0x45781c], ecx
call sub.KERNEL32.dll_CreateToolhelp32Snapshot
mov esi, dword [0x457828]
mov ebx, eax
mov edi, dword [0x457834]
mov eax, 0x77c150d
imul esi
sar edx, 8
mov eax, edx
shr eax, 0x1f
add eax, edx
mov ecx, esi
imul ecx, ecx, 0x2234
sub ecx, eax
mov eax, 0x9ad70599
imul edi
add edx, edi
sar edx, 0xc
mov eax, edx
shr eax, 0x1f
add eax, edx
sub ecx, eax
mov eax, 0xb7fe3405
imul esi
add edx, esi
mov esi, dword [0x457818]
sar edx, 0xc
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, esi
imul edx, edx, 0x1568
sub ecx, eax
add ecx, edx
cmp ebx, 0xffffffff
mov dword [0x457834], ecx
jne 0x4055ad
mov eax, 0xf00f00f1
imul esi, esi, 0x2220
imul ecx
mov eax, dword [0x457830]
add edx, ecx
imul eax, eax, 0x1643
sar edx, 0xd
mov edi, edx
shr edi, 0x1f
add edi, edx
add edi, esi
mov esi, dword [0x457820]
sub edi, eax
mov eax, 0x8f2b7b75
imul esi
add edx, esi
sar edx, 0xb
mov esi, edx
add edi, edx
mov eax, 0xb6adc247
imul ecx
add edx, ecx
sar edx, 0xa
mov ecx, edx
shr esi, 0x1f
shr ecx, 0x1f
add ecx, edx
add esi, edi
sub esi, ecx
push str.CreateToolhelp32Snapshot__of_processes_
mov dword [0x457818], esi
call fcn.0042b3d6
add esp, 4
jmp 0x405bf1
mov edi, dword [0x45782c]
imul esi, esi, 0x59b
mov eax, 0x9ad70599
imul edi
add edx, edi
mov edi, dword [str._r_____r____]
imul edi, edi, 0x1a74
sar edx, 0xc
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x457820]
sub edi, eax
mov eax, 0x77826bf5
imul edx
sar edx, 0xb
mov eax, edx
shr eax, 0x1f
add eax, edx
sub edi, eax
add edi, esi
sub edi, ecx
lea ecx, [esp + 0x18]
push ecx
sub edi, 0x2220
push ebx
mov dword [0x457820], edi
mov dword [esp + 0x20], 0x128
call sub.KERNEL32.dll_Process32First
test eax, eax
jne 0x405679
mov ecx, dword [0x45782c]
mov esi, dword [str._r_____r____]
mov ebp, dword [0x457830]
imul esi, esi, 0x2234
mov eax, 0x17eb125
imul ecx
mov ecx, dword [0x457818]
sar edx, 5
imul ecx, ecx, 0x10e6
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x457828]
imul edx, edx, 0x59b
sub esi, eax
add ecx, ebp
add ecx, esi
lea eax, [edx + ecx - 0x2220]
push ebx
mov dword [0x457824], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x405bf1
mov edx, dword [0x457824]
mov ecx, dword [0x457838]
mov eax, 0xf883eaf3
imul edx
sar edx, 8
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edi, eax
mov esi, ecx
imul esi, esi, 0x2220
mov eax, 0x2d78bd59
imul ecx
sar edx, 0xa
sub edi, esi
mov esi, dword [0x45781c]
add edi, edx
mov ebp, edx
mov edx, esi
imul edx, edx, 0x1568
shr ebp, 0x1f
add ebp, edi
add ebp, edx
mov eax, 0x7931d3bd
imul ecx
sar edx, 0xb
mov eax, edx
shr eax, 0x1f
add eax, edx
sub ebp, eax
mov dword [0x457828], ebp
mov ebp, dword [sym.imp.KERNEL32.dll_CloseHandle]
mov ecx, dword [0x457820]
mov edi, dword [0x45782c]
mov eax, 0x9ad70599
imul edi, edi, 0x2220
imul ecx
add edx, ecx
imul ecx, ecx, 0x1643
sar edx, 0xc
mov eax, edx
shr eax, 0x1f
add edi, edx
add eax, edi
add eax, ecx
mov ecx, dword [0x457830]
imul ecx, ecx, 0xe4e
add eax, ecx
mov edi, eax
mov eax, 0xb6adc247
imul esi
add edx, esi
sar edx, 0xa
mov eax, edx
shr eax, 0x1f
add eax, edx
lea ecx, [esp + 0x140]
push ecx
lea edx, [esp + 0x40]
sub edi, eax
push edx
mov dword [0x45782c], edi
call fcn.0043515e
add esp, 8
test eax, eax
je 0x405935
mov ecx, dword [0x45781c]
mov esi, dword [0x45782c]
mov eax, 0x887d940b
imul esi, esi, 0x2220
imul ecx
mov ecx, dword [0x457828]
sar edx, 0xb
imul ecx, ecx, 0xe4e
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x457824]
imul edx, edx, 0x562
sub eax, esi
add eax, ecx
sub eax, edx
mov dword [0x457830], eax
mov eax, dword [esp + 0x20]
push eax
push 0
push 0x1f0fff
call dword [sym.imp.KERNEL32.dll_OpenProcess]
mov ecx, dword [0x457824]
mov esi, eax
mov eax, 0x77c150d
imul ecx
sar edx, 8
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edi, eax
mov eax, 0x9ad70599
imul ecx
add edx, ecx
sar edx, 0xc
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
mov edx, dword [0x457838]
imul edx, edx, 0x1685
sub edi, ecx
mov ecx, dword [0x45781c]
add edi, edx
mov eax, 0xb7fe3405
imul ecx
add edx, ecx
mov ecx, dword [0x457830]
sar edx, 0xc
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, ecx
imul edx, edx, 0x10e6
sub edi, eax
add edi, edx
test esi, esi
mov dword [str._r_____r____], edi
jne 0x405838
push 0x447f88
call fcn.0042b3d6
add esp, 4
jmp 0x40591b
mov edi, dword [0x457834]
imul ecx, ecx, 0x1643
mov eax, 0xf00f00f1
imul edi
mov eax, dword [0x457818]
imul eax, eax, 0x2220
add edx, edi
sar edx, 0xd
mov ebp, edx
shr ebp, 0x1f
add ebp, edx
add ebp, eax
sub ebp, ecx
mov ecx, dword [0x457820]
mov eax, 0x8f2b7b75
imul ecx
add edx, ecx
sar edx, 0xb
mov ecx, edx
add ebp, edx
mov eax, 0xb6adc247
imul edi
add edx, edi
sar edx, 0xa
mov eax, edx
shr ecx, 0x1f
shr eax, 0x1f
add ecx, ebp
add eax, edx
sub ecx, eax
push esi
mov dword [0x457818], ecx
call dword [sym.imp.KERNEL32.dll_GetPriorityClass]
test eax, eax
jne 0x4058b4
push 0x447f74
call fcn.0042b3d6
add esp, 4
mov ecx, dword [0x457820]
mov edi, dword [0x45782c]
mov eax, 0x9ad70599
imul edi, edi, 0x2220
imul ecx
add edx, ecx
imul ecx, ecx, 0x1643
sar edx, 0xc
mov ebp, edx
shr ebp, 0x1f
add edi, edx
add ebp, edi
add ebp, ecx
mov ecx, dword [0x457830]
imul ecx, ecx, 0xe4e
add ebp, ecx
mov ecx, dword [0x45781c]
mov eax, 0xb6adc247
imul ecx
add edx, ecx
sar edx, 0xa
mov eax, edx
shr eax, 0x1f
add eax, edx
sub ebp, eax
mov dword [0x45782c], ebp
mov ebp, dword [sym.imp.KERNEL32.dll_CloseHandle]
push esi
call ebp
lea ecx, [esp + 0x18]
push ecx
push ebx
call sub.KERNEL32.dll_Process32Next
test eax, eax
je 0x4059a8
mov esi, dword [0x45781c]
jmp 0x4056e4
mov esi, dword [0x457824]
mov edi, dword [0x457838]
mov eax, 0xf883eaf3
imul esi
sar edx, 8
mov ecx, edi
imul ecx, ecx, 0x2220
mov eax, edx
shr eax, 0x1f
add eax, edx
sub eax, ecx
mov dword [esp + 0x10], eax
mov eax, 0x2d78bd59
imul edi
mov eax, dword [esp + 0x10]
sar edx, 0xa
add eax, edx
mov ecx, edx
mov edx, dword [0x45781c]
imul edx, edx, 0x1568
shr ecx, 0x1f
add ecx, eax
add ecx, edx
mov eax, 0x7931d3bd
imul edi
sar edx, 0xb
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [esp + 0x20]
sub ecx, eax
mov dword [0x457828], ecx
mov dword [esp + 0x14], edx
jmp 0x4059b4
mov esi, dword [0x457824]
mov ecx, dword [0x457828]
mov edi, dword [0x45782c]
imul ecx, ecx, 0xe4e
imul esi, esi, 0x562
mov eax, 0x887d940b
imul edi, edi, 0x2220
imul dword [0x45781c]
sar edx, 0xb
mov eax, edx
shr eax, 0x1f
add eax, edx
sub eax, edi
add eax, ecx
sub eax, esi
push ebx
mov dword [0x457830], eax
call ebp
mov ecx, dword [0x457838]
mov eax, 0x77c150d
imul ecx
imul ecx, ecx, 0x1685
sar edx, 8
mov eax, edx
shr eax, 0x1f
add eax, edx
mov esi, eax
sub esi, ecx
mov ecx, dword [0x45781c]
mov eax, 0x17eb125
imul ecx
mov eax, dword [esp + 0x14]
sar edx, 5
add esi, edx
mov ecx, edx
mov edx, dword [0x457830]
imul edx, edx, 0x10e6
shr ecx, 0x1f
add ecx, esi
mov esi, dword [str._r_____r____]
add ecx, edx
sub ecx, esi
add ecx, 0x1123
test eax, eax
mov dword [0x45781c], ecx
je 0x405b8c
mov eax, dword [esp + 0x20]
push eax
push 0
push 0x1f0fff
call dword [sym.imp.KERNEL32.dll_OpenProcess]
mov ebx, dword [0x45782c]
mov esi, dword [str._r_____r____]
mov edi, eax
mov eax, 0x9ad70599
imul ebx
add edx, ebx
sar edx, 0xc
mov eax, esi
imul eax, eax, 0x1a74
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
sub eax, ecx
mov ecx, dword [0x457820]
mov dword [esp + 0x10], eax
mov eax, 0x77826bf5
imul ecx
mov ecx, dword [esp + 0x10]
sar edx, 0xb
mov eax, edx
shr eax, 0x1f
add eax, edx
sub ecx, eax
mov eax, ecx
mov ecx, dword [0x457818]
mov edx, ecx
imul edx, edx, 0x59b
add eax, edx
sub eax, dword [0x457834]
sub eax, 0x2220
test edi, edi
mov dword [0x457820], eax
je 0x405bf1
mov eax, 0x17eb125
imul esi, esi, 0x2234
imul ecx, ecx, 0x10e6
imul ebx
sar edx, 5
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x457828]
imul edx, edx, 0x59b
sub esi, eax
add ecx, dword [0x457830]
add ecx, esi
push 0
lea eax, [edx + ecx - 0x2220]
push edi
mov dword [0x457824], eax
call dword [sym.imp.KERNEL32.dll_TerminateProcess]
mov ecx, dword [0x45781c]
mov esi, dword [0x45782c]
mov eax, 0x887d940b
imul esi, esi, 0x2220
imul ecx
mov eax, dword [0x457824]
sar edx, 0xb
imul eax, eax, 0x562
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
mov edx, dword [0x457828]
imul edx, edx, 0xe4e
sub ecx, esi
add ecx, edx
sub ecx, eax
push edi
mov dword [0x457830], ecx
call ebp
pop edi
pop esi
pop ebp
mov eax, 1
pop ebx
mov ecx, dword [esp + 0x234]
call fcn.0042a6e1
add esp, 0x238
ret
mov ecx, dword [0x457828]
mov esi, dword [0x457834]
mov eax, 0x77c150d
imul ecx
sar edx, 8
mov edi, ecx
mov eax, edx
imul edi, edi, 0x2234
shr eax, 0x1f
add eax, edx
sub edi, eax
mov eax, 0x9ad70599
imul esi
add edx, esi
sar edx, 0xc
mov eax, edx
shr eax, 0x1f
add eax, edx
sub edi, eax
mov eax, 0xb7fe3405
imul ecx
add edx, ecx
sar edx, 0xc
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
mov edx, dword [0x457818]
imul edx, edx, 0x1568
sub edi, ecx
add edi, edx
mov dword [0x457834], edi
mov ecx, dword [esp + 0x244]
pop edi
pop esi
pop ebp
xor eax, eax
pop ebx
call fcn.0042a6e1
add esp, 0x238
ret