Function at 0x4058f0
Capabilities:
Enumerate processes

Disassembly:
sub esp, 0xe7c
mov eax, dword [0x45d320]
mov dword [esp + 0xe78], eax
push ebx
push ebp
push esi
push edi
mov ecx, dword [0x45b9b0]
mov eax, 0x69527c69
imul ecx
mov ecx, dword [0x45b9bc]
mov esi, dword [0x45b9a8]
sar edx, 0x14
imul esi, esi, 0x78665a
mov eax, edx
shr eax, 0x1f
add eax, edx
sub esi, eax
mov eax, 0x7595e9bf
imul ecx
sar edx, 0x15
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
mov edx, dword [str._r_____r____]
imul edx, edx, 0x45ab1c
sub esi, ecx
mov ecx, dword [0x45b9c8]
add esi, edx
mov eax, 0x9eea7d1d
imul ecx
add edx, ecx
imul ecx, ecx, 0x458786
sar edx, 0x16
mov eax, edx
shr eax, 0x1f
add esi, edx
add eax, esi
mov esi, dword [0x45b9c4]
add eax, ecx
sub eax, esi
push 0
sub eax, 0x346bb5
push 2
mov dword [0x45b9b0], eax
call sub.KERNEL32.DLL_CreateToolhelp32Snapshot
mov ecx, dword [0x45b9ac]
mov edi, dword [0x45b9c0]
mov dword [esp + 0x10], eax
imul edi, edi, 0x427252
mov esi, dword [0x45b9b4]
mov eax, 0x7e3fea57
imul ecx
sar edx, 0x15
mov eax, edx
shr eax, 0x1f
add eax, edx
sub edi, eax
mov eax, 0x7595e9bf
imul esi
sar edx, 0x15
mov eax, edx
shr eax, 0x1f
add eax, edx
sub edi, eax
mov eax, 0x9eea7d1d
imul ecx
add edx, ecx
sar edx, 0x16
add edi, edx
mov ebx, edx
mov eax, 0x9eea7d1d
imul esi
add edx, esi
mov esi, dword [0x45b9c8]
shr ebx, 0x1f
sar edx, 0x16
add ebx, edi
mov ecx, edx
shr ecx, 0x1f
add ebx, edx
add ecx, ebx
mov ebp, dword [0x45b9a8]
mov eax, dword [0x45b9b8]
imul ebp, ebp, 0x427252
imul eax, eax, 0x78665a
mov edx, esi
imul esi, esi, 0x458786
imul edx, edx, 0x8b0f0c
add ebp, eax
add ecx, edx
mov edx, dword [0x45b9bc]
mov edi, dword [0x45b9c4]
mov eax, 0x76294c27
imul edx
sar edx, 0x15
mov eax, edx
shr eax, 0x1f
add eax, edx
sub ebp, eax
mov eax, 0x9eea7d1d
imul edi
mov dword [str._r_____r____], ecx
imul ecx, ecx, 0x671938
add edx, edi
sar edx, 0x16
mov eax, edx
add ebp, edx
shr eax, 0x1f
add eax, ebp
add ecx, dword [0x45b9c0]
add ecx, eax
mov eax, dword [esp + 0x10]
lea edx, [esp + 0xe0]
push edx
lea ecx, [esi + ecx - 0x346bb5]
push eax
mov dword [esp + 0xe8], 0x128
xor ebx, ebx
mov dword [0x45b9b4], ecx
call sub.KERNEL32.DLL_Process32First
test eax, eax
jne 0x405abd
pop edi
pop esi
pop ebp
or eax, 0xffffffff
pop ebx
mov ecx, dword [esp + 0xe78]
call fcn.0042f231
add esp, 0xe7c
ret
mov ecx, dword [0x45b9c4]
mov esi, dword [0x45b9a8]
mov eax, 0x9c46284d
imul ecx
add edx, ecx
sar edx, 0x15
mov ebp, edx
shr ebp, 0x1f
add ebp, edx
mov edi, dword [0x45b9c0]
mov edx, esi
imul edx, edx, 0x346bb5
add ebp, edx
mov eax, 0x8814777b
imul ecx
add edx, ecx
sar edx, 0x16
mov eax, edx
shr eax, 0x1f
add eax, edx
mov ecx, edi
imul ecx, ecx, 0x40e326
sub ebp, eax
sub ebp, ecx
mov ecx, dword [0x45b9b0]
mov eax, 0xc4d8f4f
imul ecx
sar edx, 0x12
add ebp, edx
mov ecx, edx
mov eax, 0x9eea7d1d
imul esi
add edx, esi
sar edx, 0x16
shr ecx, 0x1f
add ecx, ebp
mov eax, edx
add ecx, edx
shr eax, 0x1f
add eax, ecx
mov ecx, dword [0x45b9c8]
mov edx, ecx
imul edx, edx, 0x458786
add eax, edx
mov dword [0x45b9a8], eax
xor esi, esi
mov al, byte [esp + esi + 0x104]
mov byte [esp + esi + 0x208], al
inc esi
test al, al
jne 0x405b50
mov ebp, dword [0x45b9ac]
mov esi, dword [0x45b9b4]
imul ebp, ebp, str.LresultFromObject
mov eax, 0x1ed25ed3
imul ecx
sar edx, 0x13
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, ecx
imul edx, edx, 0x111bd1
sub ebp, eax
add ebp, edx
mov eax, 0x9eea7d1d
imul esi
add edx, esi
sar edx, 0x16
mov eax, edx
shr eax, 0x1f
add eax, edx
sub ebp, eax
mov eax, 0x9eea7d1d
imul edi
add edx, edi
sar edx, 0x16
mov esi, edx
add ebp, edx
mov eax, 0x1d74861
imul ecx
shr esi, 0x1f
sar edx, 0xf
add esi, ebp
mov ecx, edx
add esi, edx
mov edx, dword [esp + 0xe90]
shr ecx, 0x1f
push edx
lea eax, [esp + 0x20c]
add ecx, esi
push eax
mov dword [0x45b9b8], ecx
call fcn.00439cae
mov ecx, dword [0x45b9c8]
mov edi, dword [0x45b9c0]
add esp, 8
test eax, eax
jne 0x405c5f
mov edx, dword [0x45b9ac]
mov eax, 0x76294c27
imul edx
mov esi, edi
imul esi, esi, 0x427252
sar edx, 0x15
add esi, edx
mov ebx, edx
mov eax, 0x9eea7d1d
imul ecx
add edx, ecx
shr ebx, 0x1f
sar edx, 0x16
add ebx, esi
mov esi, dword [str._r_____r____]
add ebx, edx
mov ebp, edx
mov eax, 0x9eea7d1d
imul esi
add edx, esi
shr ebp, 0x1f
sar edx, 0x16
add ebp, ebx
mov eax, edx
shr eax, 0x1f
add ebp, edx
add eax, ebp
sub eax, esi
add eax, 0x26e3e3
mov dword [0x45b9ac], eax
mov ebx, 1
mov esi, dword [0x45b9c4]
imul edi, edi, 0x40e326
imul ecx, ecx, 0x458786
mov eax, 0x9c46284d
imul esi
add edx, esi
sar edx, 0x15
mov ebp, edx
shr ebp, 0x1f
add ebp, edx
mov edx, dword [0x45b9a8]
imul edx, edx, 0x346bb5
add ebp, edx
mov eax, 0x8814777b
imul esi
add edx, esi
mov esi, dword [0x45b9a8]
sar edx, 0x16
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x45b9b0]
sub ebp, eax
mov eax, 0xc4d8f4f
imul edx
sub ebp, edi
sar edx, 0x12
add ebp, edx
mov edi, edx
mov eax, 0x9eea7d1d
imul esi
add edx, esi
sar edx, 0x16
shr edi, 0x1f
add edi, ebp
mov ebp, dword [esp + 0x10]
mov eax, edx
shr eax, 0x1f
add edi, edx
add eax, edi
add eax, ecx
lea ecx, [esp + 0xe0]
push ecx
push ebp
mov dword [0x45b9a8], eax
call sub.KERNEL32.DLL_Process32Next
test eax, eax
je 0x405e6d
mov eax, ebx
shl eax, 6
lea edx, [esp + 0x104]
lea esi, [esp + eax + 0x208]
sub eax, edx
lea edi, [esp + eax + 0x208]
lea ebx, [ebx]
lea eax, [esp + 0x104]
mov cl, byte [eax]
mov byte [edi + eax], cl
inc eax
test cl, cl
jne 0x405d27
mov ecx, dword [0x45b9ac]
mov ebp, dword [0x45b9c0]
mov eax, 0x76294c27
imul ebp, ebp, 0x427252
imul ecx
mov ecx, dword [0x45b9c8]
sar edx, 0x15
add ebp, edx
mov eax, edx
shr eax, 0x1f
add eax, ebp
mov dword [esp + 0x14], eax
mov eax, 0x9eea7d1d
imul ecx
mov eax, dword [esp + 0x14]
add edx, ecx
mov ecx, dword [str._r_____r____]
sar edx, 0x16
add eax, edx
mov ebp, edx
shr ebp, 0x1f
add ebp, eax
mov eax, 0x9eea7d1d
imul ecx
add edx, ecx
sar edx, 0x16
mov eax, edx
shr eax, 0x1f
add ebp, edx
add eax, ebp
sub eax, ecx
mov ecx, dword [esp + 0xe90]
push ecx
add eax, 0x26e3e3
push esi
mov dword [0x45b9ac], eax
call fcn.00439cae
add esp, 8
test eax, eax
jne 0x405e53
mov ecx, dword [0x45b9ac]
mov ebp, dword [0x45b9bc]
mov eax, 0x8814777b
imul ebp, ebp, 0x346bb5
imul ecx
add edx, ecx
mov ecx, dword [0x45b9b0]
sar edx, 0x16
mov eax, edx
shr eax, 0x1f
add eax, edx
sub ebp, eax
mov eax, dword [0x45b9c0]
imul eax, eax, 0x533b61
mov edx, ecx
imul edx, edx, 0x40e326
add ebp, edx
add ebp, eax
mov eax, 0x7595e9bf
imul ecx
mov ecx, dword [0x45b9b8]
sar edx, 0x15
add ebp, edx
mov eax, edx
shr eax, 0x1f
add eax, ebp
mov ebp, eax
mov eax, 0x9eea7d1d
imul ecx
mov eax, dword [esp + 0xe8]
add edx, ecx
sar edx, 0x16
add ebp, edx
mov ecx, edx
mov edx, dword [0x45b9c8]
imul edx, edx, 0x458786
shr ecx, 0x1f
add ecx, ebp
add ecx, edx
mov dword [esp + ebx*4 + 0x18], eax
inc ebx
add esi, 0x40
mov dword [0x45b9bc], ecx
add edi, 0x40
mov ebp, dword [esp + 0x10]
lea ecx, [esp + 0xe0]
push ecx
push ebp
call sub.KERNEL32.DLL_Process32Next
test eax, eax
jne 0x405d20
mov edx, dword [0x45b9ac]
mov ecx, dword [0x45b9bc]
mov eax, 0x96ad8397
imul edx
sar edx, 0x14
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x45b9b8]
mov esi, ecx
imul edx, edx, 0x533b61
mov edi, eax
imul esi, esi, 0x346bb5
mov eax, dword [0x45b9b4]
imul eax, eax, 0x1ea3a3
sub edi, esi
add edi, edx
sub edi, eax
mov eax, 0x9eea7d1d
imul ecx
add edx, ecx
sar edx, 0x16
mov ecx, edx
add edi, edx
mov edx, dword [0x45b9c8]
imul edx, edx, 0x458786
shr ecx, 0x1f
add ecx, edi
add ecx, edx
push ebp
mov dword [0x45b9c0], ecx
call dword [sym.imp.KERNEL32.DLL_CloseHandle]
mov ecx, dword [esp + 0xe88]
pop edi
pop esi
pop ebp
mov eax, ebx
pop ebx
call fcn.0042f231
add esp, 0xe7c
ret