Function at 0x44c750
Capabilities:
Create thread
Enumerate process modules

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x452366
mov eax, dword fs:[0]
push eax
sub esp, 0x46c
mov eax, dword [0x468014]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov eax, dword [ebp + 8]
push eax
push 8
mov dword [ebp - 0x474], eax
call dword [sym.imp.KERNEL32.dll_CreateToolhelp32Snapshot]
mov ebx, eax
mov dword [ebp - 0x46c], ebx
mov dword [ebp - 4], 0
cmp ebx, 0xffffffff
je 0x44cbac
push 0x424
lea eax, [ebp - 0x464]
mov dword [ebp - 0x468], 0x428
push 0
push eax
call fcn.0042aec0
add esp, 0xc
lea eax, [ebp - 0x468]
push eax
push ebx
call dword [sym.imp.KERNEL32.dll_Module32FirstW]
test eax, eax
je 0x44caa1
nop
xor eax, eax
mov dword [ebp - 0x30], 0
lea ecx, [ebp - 0x448]
mov dword [ebp - 0x2c], 0
mov dword [ebp - 0x30], 0
lea edx, [ecx + 2]
mov dword [ebp - 0x2c], 7
mov word [ebp - 0x40], ax
nop dword [eax + eax]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x44c810
sub ecx, edx
lea eax, [ebp - 0x448]
sar ecx, 1
push ecx
push eax
lea ecx, [ebp - 0x40]
call fcn.00402680
mov byte [ebp - 4], 1
xor eax, eax
lea ecx, [ebp - 0x248]
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0
lea edx, [ecx + 2]
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 7
mov word [ebp - 0x28], ax
nop
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x44c860
sub ecx, edx
lea eax, [ebp - 0x248]
sar ecx, 1
push ecx
push eax
lea ecx, [ebp - 0x28]
call fcn.00402680
mov byte [ebp - 4], 2
mov ebx, dword [ebp + 0xc]
mov ecx, ebx
mov eax, dword [ebx + 0x14]
mov dword [ebp - 0x470], eax
cmp eax, 8
jb 0x44c898
mov ecx, dword [ebx]
cmp dword [ebp - 0x2c], 8
lea esi, [ebp - 0x40]
mov edi, dword [ebp - 0x40]
mov edx, dword [ebp - 0x30]
cmovae esi, edi
cmp edx, dword [ebx + 0x10]
mov ebx, dword [ebp - 0x28]
jne 0x44c9a8
test edx, edx
je 0x44c8d5
sub esi, ecx
nop word [eax + eax]
mov ax, word [ecx + esi]
cmp ax, word [ecx]
jne 0x44c9a2
add ecx, 2
sub edx, 1
jne 0x44c8c0
mov byte [ebp - 4], 1
mov ecx, dword [ebp - 0x14]
cmp ecx, 8
jb 0x44c910
lea ecx, [ecx*2 + 2]
mov eax, ebx
cmp ecx, 0x1000
jb 0x44c906
mov ebx, dword [ebx - 4]
add ecx, 0x23
sub eax, ebx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44cba7
push ecx
push ebx
call fcn.00429629
add esp, 8
xor eax, eax
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 7
mov word [ebp - 0x28], ax
mov byte [ebp - 4], al
mov eax, dword [ebp - 0x2c]
cmp eax, 8
jb 0x44c95e
lea ecx, [eax*2 + 2]
mov eax, edi
cmp ecx, 0x1000
jb 0x44c954
mov edi, dword [edi - 4]
add ecx, 0x23
sub eax, edi
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44cba7
push ecx
push edi
call fcn.00429629
add esp, 8
push dword [ebp - 0x474]
xor eax, eax
mov dword [ebp - 0x30], 0
push eax
push 0x40a
mov dword [ebp - 0x2c], 7
mov word [ebp - 0x40], ax
call dword [sym.imp.KERNEL32.dll_OpenProcess]
mov edi, eax
mov dword [ebp - 0x470], edi
mov byte [ebp - 4], 3
test edi, edi
jne 0x44caab
push str.Could_not_get_handle_to_process.
jmp 0x44cbb1
mov eax, dword [ebp - 0x470]
mov edx, dword [ebp + 0xc]
mov ecx, edx
cmp eax, 8
jb 0x44c9b4
mov ecx, dword [edx]
cmp dword [ebp - 0x14], 8
lea esi, [ebp - 0x28]
mov eax, dword [ebp + 0xc]
mov edx, dword [ebp - 0x18]
cmovae esi, ebx
cmp edx, dword [eax + 0x10]
jne 0x44c9e9
test edx, edx
je 0x44c8d5
sub esi, ecx
mov ax, word [ecx + esi]
cmp ax, word [ecx]
jne 0x44c9e9
add ecx, 2
sub edx, 1
jne 0x44c9d3
jmp 0x44c8d5
mov byte [ebp - 4], 1
mov ecx, dword [ebp - 0x14]
cmp ecx, 8
jb 0x44ca24
lea ecx, [ecx*2 + 2]
mov eax, ebx
cmp ecx, 0x1000
jb 0x44ca1a
mov ebx, dword [ebx - 4]
add ecx, 0x23
sub eax, ebx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44cba7
push ecx
push ebx
call fcn.00429629
add esp, 8
xor eax, eax
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 7
mov word [ebp - 0x28], ax
mov byte [ebp - 4], al
mov eax, dword [ebp - 0x2c]
cmp eax, 8
jb 0x44ca72
lea ecx, [eax*2 + 2]
mov eax, edi
cmp ecx, 0x1000
jb 0x44ca68
mov edi, dword [edi - 4]
add ecx, 0x23
sub eax, edi
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44cba7
push ecx
push edi
call fcn.00429629
add esp, 8
xor eax, eax
mov dword [ebp - 0x30], 0
mov word [ebp - 0x40], ax
lea eax, [ebp - 0x468]
push eax
push dword [ebp - 0x46c]
mov dword [ebp - 0x2c], 7
call dword [sym.imp.KERNEL32.dll_Module32NextW]
test eax, eax
jne 0x44c7e0
push str.Could_not_find_module_in_remote_process.
jmp 0x44cbb1
push str.Kernel32
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
test eax, eax
jne 0x44cac4
push str.Could_not_get_handle_to_Kernel32.
jmp 0x44cbb1
push 0x4606f4
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
test eax, eax
jne 0x44cade
push str.Could_not_get_pointer_to_FreeLibrary.
jmp 0x44cbb1
push 0
push 0
push dword [ebp - 0x454]
push eax
push 0
push 0
push edi
call dword [sym.imp.KERNEL32.dll_CreateRemoteThread]
mov esi, eax
mov dword [ebp - 0x474], esi
mov byte [ebp - 4], 4
test esi, esi
jne 0x44cb0e
push str.Could_not_create_thread_in_remote_process.
jmp 0x44cbb1
push 0xffffffffffffffff
push esi
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
lea eax, [ebp - 0x478]
push eax
push esi
call dword [sym.imp.KERNEL32.dll_GetExitCodeThread]
test eax, eax
jne 0x44cb33
push str.Could_not_get_thread_exit_code.
jmp 0x44cbb1
cmp dword [ebp - 0x478], 0
jne 0x44cb43
push str.Call_to_FreeLibrary_in_remote_process_failed.
jmp 0x44cbb1
mov byte [ebp - 4], 3
push esi
mov esi, dword [sym.imp.KERNEL32.dll_CloseHandle]
call esi
mov dword [ebp - 0x474], 0
mov byte [ebp - 4], 0
push edi
call esi
mov dword [ebp - 0x470], 0
mov dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0x46c]
test eax, eax
je 0x44cb89
push eax
call esi
mov dword [ebp - 0x46c], 0
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.004295e8
mov esp, ebp
pop ebp
ret 8
call fcn.0042dfb5
push str.Could_not_get_module_snapshot_for_remote_process.
lea ecx, [ebp - 0x1c]
call fcn.00401840
push 0x466af4
lea eax, [ebp - 0x1c]
push eax
call fcn.0042a8d4
int3