Function at 0x4100b0
Capabilities:
Enumerate threads

Disassembly:
sub esp, 0x34
mov eax, dword [0x45ecd4]
push ebx
push ebp
push esi
cdq
push edi
mov esi, eax
mov eax, dword [0x45eccc]
push 0xf
mov ebx, edx
cdq
push 0x3c2325f6
mov ebp, eax
push edx
push ebp
mov dword [esp + 0x34], edx
call fcn.00432020
push 0x13
push 0x2c2da253
push ebx
push esi
mov dword [esp + 0x24], eax
call fcn.00432020
mov edi, eax
mov eax, dword [esp + 0x14]
push 0x14
sub edi, eax
mov eax, dword [esp + 0x28]
push 0x76aab896
push eax
push ebp
call fcn.00432020
push 0x14
push 0x76aab896
push ebx
push esi
add edi, eax
call fcn.00432020
mov ecx, dword [0x45ecdc]
mov edx, dword [0x45ece8]
imul ecx, ecx, 0x3dbf610d
sub edi, eax
imul edx, edx, 0x471ee414
mov eax, dword [0x45eccc]
imul eax, eax, 0x392bae29
add edi, ecx
add edi, edx
add edi, eax
mov eax, dword [esp + 0x48]
test eax, eax
mov dword [str._r_____r____], edi
jne 0x410202
mov eax, dword [0x45ecd0]
cdq
mov ebx, eax
mov eax, dword [0x45ece4]
push 0xd
mov ebp, edx
cdq
push 0x3dbf610d
push edx
push eax
call fcn.00432020
push 0x13
push 0x392bae29
push ebp
push ebx
mov dword [esp + 0x24], eax
call fcn.00432020
push 8
push 0x42a7b17d
mov esi, eax
mov eax, dword [esp + 0x1c]
push ebp
push ebx
sub esi, eax
call fcn.00432020
push 3
push 0xce4a7dc6
push ebp
push ebx
add esi, eax
call fcn.00432020
mov ecx, dword [0x45ece0]
mov edx, dword [0x45ecc8]
imul ecx, ecx, 0xafbbe1e
imul edx, edx, 0x31b5823a
add esi, eax
mov eax, dword [esp + 0x4c]
add esi, ecx
sub esi, edx
test eax, eax
mov dword [0x45ecc8], esi
je 0x410208
mov ecx, eax
lea ebx, [ecx + 1]
jmp 0x4101e0
mov dl, byte [ecx]
inc ecx
test dl, dl
jne 0x4101e0
sub ecx, ebx
mov dword [esp + 0x18], ecx
je 0x410208
push eax
call fcn.0040f600
mov edi, dword [str._r_____r____]
add esp, 4
mov dword [esp + 0x48], eax
mov esi, dword [0x45ecc8]
mov eax, dword [0x45ecd4]
mov ebx, dword [0x45ece8]
cdq
imul ebx, ebx, 0x471ee414
mov ebp, eax
mov eax, dword [0x45eccc]
push 8
mov dword [esp + 0x28], edx
cdq
push 0x974b287b
push edx
push eax
mov dword [esp + 0x30], ebp
call fcn.00432020
mov ecx, dword [esp + 0x24]
push 0x13
push 0x2c2da253
push ecx
push ebp
mov dword [esp + 0x24], eax
call fcn.00432020
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x24]
push 0xd
push 0x3dbf610d
add ecx, eax
push edx
mov eax, ebp
push eax
mov dword [esp + 0x24], ecx
call fcn.00432020
mov ecx, dword [esp + 0x14]
mov edx, dword [0x45ece4]
add ecx, eax
imul edx, edx, 0x31b5823a
mov eax, dword [0x45ece0]
imul eax, eax, 0x392bae29
sub ecx, edx
add ecx, eax
mov eax, dword [esp + 0x48]
sub ecx, ebx
sub ecx, edi
sub ecx, 0x1bcdabbc
test eax, eax
mov dword [0x45eccc], ecx
jne 0x4102af
pop edi
pop esi
pop ebp
xor eax, eax
pop ebx
add esp, 0x34
ret
mov eax, dword [0x45ecdc]
push 0x14
cdq
push 0x76aab896
push edx
push eax
call fcn.00432020
mov edi, dword [0x45ecd8]
mov ebp, eax
push 3
mov eax, edi
cdq
push 0xce4a7dc6
push edx
push eax
call fcn.00432020
sub eax, ebp
mov ebp, eax
mov eax, dword [0x45ecd0]
push 0x10
cdq
push 0xe4325444
push edx
push eax
call fcn.00432020
imul esi, esi, 0x3dbf610d
imul edi, edi, 0x76aab896
mov ecx, dword [esp + 0x48]
sub ebp, eax
mov eax, dword [0x45ece4]
add ebp, esi
add ebp, edi
sub ebp, eax
lea eax, [ebx + ebp + 0x31b5823a]
push ecx
mov dword [0x45ecd0], eax
call dword [sym.imp.KERNEL32.dll_GetProcessId]
push eax
push 4
mov dword [esp + 0x1c], eax
call sub.KERNEL32.dll_CreateToolhelp32Snapshot
mov edi, dword [0x45ecdc]
mov ebx, dword [str._r_____r____]
mov dword [esp + 0x48], eax
mov eax, edi
cdq
push 0x13
mov esi, eax
mov eax, dword [0x45ecd8]
push 0x2c2da253
push edx
lea ebp, [eax + ebx]
push esi
imul ebp, ebp, 0x3dbf610d
mov dword [esp + 0x34], edx
call fcn.00432020
mov ecx, dword [esp + 0x24]
push 8
push 0x974b287b
push ecx
push esi
add ebp, eax
call fcn.00432020
imul ebx, ebx, 0x2c2da253
mov esi, dword [0x45ece0]
mov edx, edi
imul edx, edx, 0x392bae29
sub ebp, eax
add edx, esi
add edx, ebp
xor eax, eax
mov dword [esp + 0x28], eax
mov dword [esp + 0x2c], eax
mov dword [esp + 0x30], eax
mov dword [esp + 0x34], eax
mov dword [esp + 0x38], eax
lea ebp, [ebx + edx + 0x31b5823a]
mov dword [esp + 0x3c], eax
mov dword [0x45ecd4], ebp
mov dword [esp + 0x40], eax
mov ebx, dword [0x45ece8]
mov eax, ebx
cdq
mov dword [esp + 0x20], eax
push 8
mov dword [esp + 0x28], edx
mov eax, esi
cdq
push 0x974b287b
push edx
push eax
call fcn.00432020
mov dword [esp + 0x10], eax
push 0x13
mov eax, ebp
cdq
push 0x2c2da253
push edx
push eax
call fcn.00432020
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x24]
push 0x14
push 0x471ee414
sub ecx, eax
mov eax, dword [esp + 0x28]
push edx
push eax
mov dword [esp + 0x20], ecx
call fcn.00432020
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x24]
push 0x13
push 0x392bae29
add ecx, eax
mov eax, dword [esp + 0x28]
push edx
push eax
mov dword [esp + 0x20], ecx
call fcn.00432020
imul ebx, ebx, 0x31b5823a
mov ecx, dword [esp + 0x10]
mov ebp, dword [0x45eccc]
sub ecx, eax
mov eax, dword [0x45ecc8]
mov edx, esi
imul eax, eax, 0x2c2da253
imul edx, edx, 0x68b4d785
sub ecx, edx
add ecx, ebx
add ecx, eax
mov eax, dword [0x45ece4]
cdq
mov ebx, eax
push 0xd
mov dword [esp + 0x20], edx
mov eax, ebp
cdq
push 0x3dbf610d
push edx
push eax
mov dword [0x45ecd8], ecx
mov dword [esp + 0x38], 0x1c
mov dword [esp + 0x20], 0
call fcn.00432020
mov ecx, dword [0x45ecd0]
mov edx, dword [esp + 0x1c]
add ebp, ecx
imul ebp, ebp, 0x3c2325f6
push 0x13
push 0x2c2da253
push edx
push ebx
sub ebp, eax
call fcn.00432020
push 0x14
add ebp, eax
mov eax, dword [esp + 0x20]
push 0x76aab896
push eax
push ebx
call fcn.00432020
imul esi, esi, 0x42a7b17d
imul edi, edi, 0x31b5823a
mov edx, dword [esp + 0x48]
add ebp, eax
lea ecx, [esp + 0x28]
add ebp, esi
push ecx
sub ebp, edi
push edx
mov dword [0x45ecdc], ebp
call sub.KERNEL32.dll_Thread32First
test eax, eax
je 0x410732
mov eax, dword [0x45eccc]
mov esi, dword [0x45ecd0]
mov ebx, dword [0x45ece8]
push 0xffffffffffffffef
cdq
push 0x1bcdabbc
push edx
lea ebp, [esi + ebx]
push eax
imul ebp, ebp, 0x1bcdabbc
call fcn.00432020
mov edi, eax
push 0xf
mov eax, ebx
cdq
push 0x3c2325f6
push edx
push eax
sub edi, ebp
call fcn.00432020
mov ebp, dword [0x45ecd8]
mov ecx, dword [0x45ecdc]
mov edx, dword [0x45ecd4]
imul ecx, ecx, 0x31b5823a
add edi, eax
imul edx, edx, 0x471ee414
mov eax, ebp
imul eax, eax, 0x42a7b17d
add edi, eax
mov eax, dword [esp + 0x14]
add edi, ecx
mov ecx, dword [esp + 0x34]
sub edi, edx
cmp ecx, eax
mov dword [0x45ece0], edi
jne 0x410618
mov eax, ebp
cdq
mov dword [esp + 0x18], eax
mov eax, dword [0x45ece4]
push 0xffffffffffffffeb
mov dword [esp + 0x20], edx
cdq
push 0x8955476a
push edx
push eax
call fcn.00432020
mov ecx, dword [0x45ecd4]
mov esi, dword [0x45ecc8]
lea edx, [esi + ecx]
imul edx, edx, 0x68b4d785
mov ebp, eax
mov eax, dword [str._r_____r____]
push 0x10
sub ebp, edx
cdq
push 0xe4325444
push edx
push eax
call fcn.00432020
mov ecx, dword [esp + 0x18]
push 0x13
add ebp, eax
mov eax, dword [esp + 0x20]
push 0x2c2da253
push eax
push ecx
call fcn.00432020
mov edx, dword [esp + 0x1c]
push 0xf
push 0x3c2325f6
sub ebp, eax
mov eax, dword [esp + 0x20]
push edx
push eax
call fcn.00432020
mov ecx, dword [esp + 0x30]
sub ebp, eax
mov eax, dword [str._r_____r____]
imul eax, eax, 0x2c2da253
add ebp, eax
mov dword [0x45ece4], ebp
mov dword [esp + 0x10], ecx
jmp 0x410744
mov eax, dword [0x45ecc8]
cdq
mov edi, eax
mov eax, dword [str._r_____r____]
push 8
mov ebx, edx
cdq
push 0x42a7b17d
push edx
push eax
call fcn.00432020
add ebp, esi
imul ebp, ebp, 0x392bae29
push 8
push 0x974b287b
push ebx
push edi
sub ebp, eax
call fcn.00432020
push 0x13
push 0x2c2da253
push ebx
push edi
add ebp, eax
call fcn.00432020
imul esi, esi, 0x2c2da253
mov edx, dword [0x45ece4]
imul edx, edx, 0x31b5823a
add ebp, eax
add ebp, edx
sub ebp, esi
lea eax, [esp + 0x28]
mov dword [0x45ece8], ebp
mov ebp, dword [esp + 0x48]
push eax
push ebp
call sub.KERNEL32.dll_Thread32Next
test eax, eax
je 0x410732
mov eax, dword [0x45ecd0]
cdq
mov edi, eax
mov eax, dword [0x45ece4]
push 0xd
mov ebx, edx
cdq
push 0x3dbf610d
push edx
push eax
call fcn.00432020
push 0x13
push 0x392bae29
push ebx
push edi
mov dword [esp + 0x28], eax
call fcn.00432020
push 8
push 0x42a7b17d
mov esi, eax
mov eax, dword [esp + 0x20]
push ebx
push edi
sub esi, eax
call fcn.00432020
push 3
push 0xce4a7dc6
push ebx
push edi
add esi, eax
call fcn.00432020
mov edi, dword [0x45ece0]
mov edx, dword [0x45ecc8]
mov ecx, edi
imul edx, edx, 0x31b5823a
imul ecx, ecx, 0xafbbe1e
add esi, eax
mov eax, dword [esp + 0x14]
add esi, ecx
mov ecx, dword [esp + 0x34]
sub esi, edx
cmp ecx, eax
mov dword [0x45ecc8], esi
je 0x4107dd
lea ecx, [esp + 0x28]
push ecx
push ebp
call sub.KERNEL32.dll_Thread32Next
test eax, eax
jne 0x410693
mov ebx, dword [0x45ece8]
mov esi, dword [0x45ecc8]
mov edi, dword [0x45ece0]
mov eax, ebx
cdq
mov dword [esp + 0x20], eax
push 8
mov dword [esp + 0x28], edx
mov eax, edi
cdq
push 0x974b287b
push edx
push eax
call fcn.00432020
mov ebp, eax
mov eax, dword [0x45ecd4]
push 0x13
cdq
push 0x2c2da253
push edx
push eax
call fcn.00432020
mov edx, dword [esp + 0x24]
push 0x14
push 0x471ee414
sub ebp, eax
mov eax, dword [esp + 0x28]
push edx
push eax
call fcn.00432020
mov ecx, dword [esp + 0x24]
mov edx, dword [esp + 0x20]
push 0x13
push 0x392bae29
push ecx
push edx
add ebp, eax
call fcn.00432020
imul edi, edi, 0x68b4d785
imul ebx, ebx, 0x31b5823a
imul esi, esi, 0x2c2da253
sub ebp, eax
mov eax, dword [esp + 0x48]
sub ebp, edi
add ebp, ebx
add ebp, esi
push eax
mov dword [0x45ecd8], ebp
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [esp + 0x10]
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x34
ret
mov eax, dword [0x45ecdc]
push 0x14
cdq
push 0x76aab896
push edx
push eax
call fcn.00432020
mov ebx, dword [0x45ecd8]
mov ebp, eax
push 3
mov eax, ebx
cdq
push 0xce4a7dc6
push edx
push eax
call fcn.00432020
sub eax, ebp
mov ebp, eax
mov eax, dword [0x45ecd0]
push 0x10
cdq
push 0xe4325444
push edx
push eax
call fcn.00432020
imul ebx, ebx, 0x76aab896
mov ecx, dword [0x45ece4]
mov edx, esi
imul edx, edx, 0x3dbf610d
sub ebp, eax
add ebp, edx
add ebp, ebx
mov ebx, dword [0x45ece8]
mov eax, ebx
imul eax, eax, 0x471ee414
add ebp, eax
sub ebp, ecx
mov ecx, dword [esp + 0x30]
add ebp, 0x31b5823a
mov dword [0x45ecd0], ebp
mov dword [esp + 0x10], ecx
jmp 0x410744