Function at 0x404d80
Capabilities:
Enumerate processes

Disassembly:
sub esp, 0xe7c
mov eax, dword [0x458190]
mov dword [esp + 0xe78], eax
push ebx
push ebp
push esi
push edi
mov ecx, dword [0x45682c]
mov eax, 0x2760f26d
imul ecx
mov ecx, dword [0x456818]
imul ecx, ecx, 0x13350
mov esi, dword [str._r_____r____]
imul esi, esi, 0xd008
sar edx, 0xd
mov eax, edx
shr eax, 0x1f
add eax, edx
sub esi, eax
mov ebx, dword [0x456834]
add esi, ecx
mov ecx, dword [0x456820]
mov eax, 0xc0e2caa9
imul ecx
add edx, ecx
sar edx, 0xf
mov eax, edx
shr eax, 0x1f
add eax, edx
sub esi, eax
sub esi, ebx
push 0
sub esi, 0xb323
push 2
mov dword [0x456820], esi
call sub.KERNEL32.dll_CreateToolhelp32Snapshot
mov esi, dword [0x456824]
mov ebp, eax
mov eax, 0x4b226983
imul esi
sar edx, 0xe
mov ecx, edx
mov edi, dword [0x456830]
shr ecx, 0x1f
add ecx, edx
mov edx, dword [0x45681c]
mov eax, 0x4c8d67b3
imul edx
sar edx, 0xe
mov eax, edx
shr eax, 0x1f
add eax, edx
sub ecx, eax
mov edx, edi
imul edx, edx, 0xd429
add ecx, edx
mov eax, 0x2760f26d
imul esi
sar edx, 0xd
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x456838]
imul edx, edx, 0x38bb
sub ecx, eax
mov eax, dword [0x456818]
add ecx, edx
imul eax, eax, 0xd429
mov edx, dword [0x45682c]
mov dword [str._r_____r____], ecx
imul ecx, ecx, 0xda10
add ecx, eax
mov eax, 0x4da3463f
imul edx
sar edx, 0xe
mov eax, edx
shr eax, 0x1f
add eax, edx
xor esi, esi
mov dword [esp + 0x14], ebp
mov dword [esp + 0xe0], 0x128
sub ecx, eax
mov edx, dword [0x456828]
imul edx, edx, 0x13350
add ecx, edi
lea eax, [edx + ecx - 0xb323]
lea ecx, [esp + 0xe0]
push ecx
push ebp
mov dword [0x456824], eax
call sub.KERNEL32.dll_Process32First
test eax, eax
jne 0x404eed
pop edi
pop esi
pop ebp
or eax, 0xffffffff
pop ebx
mov ecx, dword [esp + 0xe78]
call fcn.0042a0b1
add esp, 0xe7c
ret
mov ecx, dword [0x456834]
mov edi, dword [0x456830]
mov eax, 0x955f5465
imul edi, edi, 0xd606
imul ecx
sar edx, 0xf
mov eax, edx
shr eax, 0x1f
add eax, edx
mov ebx, eax
mov eax, 0x2dbafdc3
imul ecx
mov ecx, dword [0x456818]
sub ebx, edi
imul ecx, ecx, 0xb323
sar edx, 0xd
mov edi, edx
shr edi, 0x1f
add ebx, edx
add edi, ebx
add edi, ecx
mov ecx, dword [0x456820]
mov eax, 0x7fe60547
imul ecx
sar edx, 0xe
mov eax, edx
shr eax, 0x1f
add edi, edx
add eax, edi
mov dword [0x456818], eax
xor eax, eax
jmp 0x404f60
mov cl, byte [esp + eax + 0x104]
mov byte [esp + eax + 0x208], cl
inc eax
test cl, cl
jne 0x404f60
mov ecx, dword [0x456824]
mov eax, 0x4b226983
imul ecx
sar edx, 0xe
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
mov edi, ecx
mov ecx, dword [0x456838]
mov eax, 0x658cf6d9
imul ecx
sub edx, ecx
sar edx, 0xf
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x45681c]
imul edx, edx, 0xd308
mov ebx, eax
sub ebx, edi
add ebx, edx
mov eax, 0x2419bc59
imul ecx
imul ecx, ecx, 0xb323
sar edx, 0xb
mov eax, edx
shr eax, 0x1f
add ebx, edx
add eax, ebx
sub eax, ecx
mov ecx, dword [esp + 0xe90]
push ecx
lea edx, [esp + 0x20c]
push edx
mov dword [0x456828], eax
call fcn.00434b2e
mov ecx, dword [0x456830]
add esp, 8
test eax, eax
jne 0x405050
mov esi, dword [0x456838]
mov eax, 0x4b226983
imul esi
imul esi, esi, 0x38bb
sar edx, 0xe
mov eax, ecx
imul eax, eax, 0xd429
mov edi, edx
shr edi, 0x1f
add edi, edx
mov edx, dword [0x45681c]
add edi, eax
mov eax, 0x4da3463f
imul edx
sar edx, 0xe
mov eax, edx
shr eax, 0x1f
add edi, edx
add eax, edi
sub eax, esi
sub eax, dword [str._r_____r____]
add eax, 0xa9e2
mov dword [0x45681c], eax
mov esi, 1
mov edi, dword [0x456834]
imul ecx, ecx, 0xd606
mov eax, 0x955f5465
imul edi
sar edx, 0xf
mov eax, edx
shr eax, 0x1f
add eax, edx
mov ebx, eax
mov eax, 0x2dbafdc3
imul edi
sub ebx, ecx
mov ecx, dword [0x456818]
imul ecx, ecx, 0xb323
sar edx, 0xd
mov edi, edx
add ebx, edx
shr edi, 0x1f
add edi, ebx
add edi, ecx
mov ecx, dword [0x456820]
mov eax, 0x7fe60547
imul ecx
sar edx, 0xe
mov eax, edx
lea ecx, [esp + 0xe0]
shr eax, 0x1f
add edi, edx
push ecx
add eax, edi
push ebp
mov dword [0x456818], eax
call sub.KERNEL32.dll_Process32Next
test eax, eax
je 0x4051f0
mov eax, esi
shl eax, 6
lea edx, [esp + 0x104]
lea edi, [esp + eax + 0x208]
sub eax, edx
lea ebx, [esp + eax + 0x208]
lea eax, [esp + 0x104]
lea esp, [esp]
mov cl, byte [eax]
mov byte [ebx + eax], cl
inc eax
test cl, cl
jne 0x4050f0
mov ecx, dword [0x456838]
mov eax, 0x4b226983
imul ecx
imul ecx, ecx, 0x38bb
mov eax, dword [0x456830]
imul eax, eax, 0xd429
sar edx, 0xe
mov ebp, edx
shr ebp, 0x1f
add ebp, edx
mov edx, dword [0x45681c]
add ebp, eax
mov eax, 0x4da3463f
imul edx
sar edx, 0xe
mov eax, edx
shr eax, 0x1f
add ebp, edx
mov edx, dword [str._r_____r____]
add eax, ebp
sub eax, ecx
mov ecx, dword [esp + 0xe90]
sub eax, edx
push ecx
add eax, 0xa9e2
push edi
mov dword [0x45681c], eax
call fcn.00434b2e
add esp, 8
test eax, eax
jne 0x4051d6
mov ecx, dword [0x456820]
mov eax, 0x2760f26d
imul ecx
mov ebp, ecx
mov ecx, dword [0x45681c]
imul ebp, ebp, 0xd606
sar edx, 0xd
add ebp, edx
mov eax, edx
shr eax, 0x1f
add eax, ebp
mov ebp, eax
mov eax, 0x6aa0ab9b
imul ecx
mov ecx, dword [0x45682c]
sar edx, 0xf
imul ecx, ecx, 0xb323
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x456830]
imul edx, edx, 0x801a
sub ebp, eax
mov eax, dword [esp + 0xe8]
add ebp, ecx
add ebp, edx
mov dword [esp + esi*4 + 0x18], eax
inc esi
add edi, 0x40
mov dword [0x45682c], ebp
add ebx, 0x40
mov ebp, dword [esp + 0x14]
lea ecx, [esp + 0xe0]
push ecx
push ebp
call sub.KERNEL32.dll_Process32Next
test eax, eax
jne 0x4050e2
mov edi, dword [0x456824]
mov edx, dword [0x45682c]
imul edi, edi, 0x7127
mov ecx, dword [0x45681c]
imul edx, edx, 0xb323
sub edi, edx
mov eax, 0xc0e2caa9
imul ecx
add edx, ecx
mov ecx, dword [0x456828]
sar edx, 0xf
imul ecx, ecx, 0x801a
mov eax, edx
shr eax, 0x1f
add eax, edx
sub edi, eax
add edi, ecx
push ebp
mov dword [0x456830], edi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov ecx, dword [esp + 0xe88]
pop edi
mov eax, esi
pop esi
pop ebp
pop ebx
call fcn.0042a0b1
add esp, 0xe7c
ret