Function at 0x405930
Capabilities:
Enumerate processes

Disassembly:
sub esp, 0xe7c
mov eax, dword [0x458190]
mov dword [esp + 0xe78], eax
push ebx
push ebp
push esi
push edi
mov ecx, dword [0x45682c]
mov eax, 0x281003eb
imul ecx
mov ecx, dword [str._r_____r____]
imul ecx, ecx, 0x331ebb8
mov esi, dword [0x456818]
imul esi, esi, 0x4b2efd8
sar edx, 0x17
mov eax, edx
shr eax, 0x1f
add eax, edx
sub esi, eax
add esi, ecx
mov ecx, dword [0x456820]
mov eax, 0x62a5c8bd
imul ecx
sar edx, 0x18
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x456830]
sub esi, eax
sub esi, edx
push 0
sub esi, 0x2b747a3
push 2
mov dword [0x456820], esi
call sub.KERNEL32.dll_CreateToolhelp32Snapshot
mov ecx, dword [0x456824]
mov esi, dword [0x456830]
mov ebp, eax
imul esi, esi, 0x340e3f9
mov eax, 0x281003eb
imul ecx
sar edx, 0x17
mov eax, edx
shr eax, 0x1f
add eax, edx
sub esi, eax
mov edi, dword [0x45682c]
mov eax, 0x9b24a0b5
imul ecx
add edx, ecx
sar edx, 0x19
add esi, edx
mov ecx, edx
mov edx, dword [0x456838]
imul edx, edx, 0xdc19cb
mov ebx, dword [0x456828]
shr ecx, 0x1f
imul ebx, ebx, 0x4b2efd8
add ecx, esi
add ecx, edx
mov eax, 0x4eff369
imul edi
sar edx, 0x14
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x456818]
imul edx, edx, 0x340e3f9
sub ecx, eax
add ebx, edx
mov eax, 0x4eff7f81
imul edi
mov dword [str._r_____r____], ecx
imul ecx, ecx, 0x34cd890
sar edx, 0x18
mov eax, edx
shr eax, 0x1f
xor esi, esi
add ebx, ecx
mov dword [esp + 0x14], ebp
mov dword [esp + 0xe0], 0x128
add eax, edx
mov ecx, dword [0x456834]
sub ebx, eax
lea eax, [esp + 0xe0]
push eax
lea edx, [ebx + ecx - 0x2b747a3]
push ebp
mov dword [0x456824], edx
call sub.KERNEL32.dll_Process32First
test eax, eax
jne 0x405a9d
pop edi
pop esi
pop ebp
or eax, 0xffffffff
pop ebx
mov ecx, dword [esp + 0xe78]
call fcn.0042a3c1
add esp, 0xe7c
ret
mov edi, dword [0x456834]
mov eax, 0x6cf5c25f
imul edi
sar edx, 0x19
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
mov ebx, ecx
mov ecx, dword [0x456820]
mov eax, 0x858372bd
imul ecx
add edx, ecx
imul ecx, ecx, 0x2b747a3
sar edx, 0x18
mov eax, edx
shr eax, 0x1f
add eax, edx
sub eax, ebx
mov ebx, eax
mov eax, 0x17908a77
imul edi
sar edx, 0x16
mov eax, edx
shr eax, 0x1f
add ebx, edx
add eax, ebx
add eax, ecx
mov ecx, dword [0x456830]
imul ecx, ecx, 0x33d9a16
sub eax, ecx
mov dword [0x456818], eax
xor eax, eax
jmp 0x405b10
mov cl, byte [esp + eax + 0x104]
mov byte [esp + eax + 0x208], cl
inc eax
test cl, cl
jne 0x405b10
mov ecx, dword [0x456838]
mov edi, dword [0x456824]
mov eax, 0x2757ae75
imul ecx
sar edx, 0x17
mov eax, edx
shr eax, 0x1f
add eax, edx
mov ebx, eax
mov eax, 0x64db5f4b
imul edi
sub edx, edi
sar edx, 0x19
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, ecx
imul edx, edx, 0x2b747a3
mov edi, eax
sub edi, ebx
sub edi, edx
mov eax, 0x4a704a7b
imul ecx
mov ecx, dword [0x45681c]
imul ecx, ecx, 0x33d9718
sar edx, 0x16
mov eax, edx
shr eax, 0x1f
add edi, edx
mov edx, dword [esp + 0xe90]
add eax, edi
add eax, ecx
mov dword [0x456828], eax
push edx
lea eax, [esp + 0x20c]
push eax
call fcn.00434e4e
mov edi, dword [0x456830]
add esp, 8
test eax, eax
jne 0x405c08
mov ecx, dword [0x456838]
mov eax, 0x9b24a0b5
imul ecx
add edx, ecx
imul ecx, ecx, 0xdc19cb
mov esi, edi
imul esi, esi, 0x340e3f9
sar edx, 0x19
mov ebx, edx
add esi, edx
shr ebx, 0x1f
add ebx, esi
sub ebx, ecx
mov ecx, dword [0x45681c]
mov eax, 0x4eff7f81
imul ecx
sar edx, 0x18
mov ecx, edx
shr ecx, 0x1f
add ebx, edx
mov edx, dword [0x456824]
add ecx, ebx
sub ecx, edx
add ecx, 0x298583a
mov dword [0x45681c], ecx
mov esi, 1
mov ecx, dword [0x456820]
imul edi, edi, 0x33d9a16
mov eax, 0x6cf5c25f
imul dword [0x456834]
sar edx, 0x19
mov eax, edx
shr eax, 0x1f
add eax, edx
mov ebx, eax
mov eax, 0x858372bd
imul ecx
add edx, ecx
imul ecx, ecx, 0x2b747a3
sar edx, 0x18
mov eax, edx
shr eax, 0x1f
add eax, edx
sub eax, ebx
mov ebx, eax
mov eax, 0x17908a77
imul dword [0x456834]
sar edx, 0x16
mov eax, edx
shr eax, 0x1f
add ebx, edx
add eax, ebx
add eax, ecx
lea ecx, [esp + 0xe0]
push ecx
sub eax, edi
push ebp
mov dword [0x456818], eax
call sub.KERNEL32.dll_Process32Next
test eax, eax
je 0x405da9
mov eax, esi
shl eax, 6
lea edx, [esp + 0x104]
lea edi, [esp + eax + 0x208]
sub eax, edx
lea ebx, [esp + eax + 0x208]
lea ebx, [ebx]
lea eax, [esp + 0x104]
mov cl, byte [eax]
mov byte [ebx + eax], cl
inc eax
test cl, cl
jne 0x405ca7
mov ecx, dword [0x456838]
mov ebp, dword [0x456830]
mov eax, 0x9b24a0b5
imul ebp, ebp, 0x340e3f9
imul ecx
add edx, ecx
imul ecx, ecx, 0xdc19cb
sar edx, 0x19
mov eax, edx
shr eax, 0x1f
add ebp, edx
add eax, ebp
sub eax, ecx
mov ecx, dword [0x45681c]
mov ebp, eax
mov eax, 0x4eff7f81
imul ecx
mov ecx, dword [esp + 0xe90]
sar edx, 0x18
mov eax, edx
shr eax, 0x1f
add ebp, edx
mov edx, dword [0x456824]
add eax, ebp
sub eax, edx
push ecx
add eax, 0x298583a
push edi
mov dword [0x45681c], eax
call fcn.00434e4e
add esp, 8
test eax, eax
jne 0x405d8f
mov ecx, dword [0x45681c]
mov eax, 0x6cf5c25f
imul ecx
mov ecx, dword [0x456820]
sar edx, 0x19
mov eax, edx
shr eax, 0x1f
add eax, edx
mov ebp, eax
mov eax, 0x281003eb
imul ecx
imul ecx, ecx, 0x33d9a16
sar edx, 0x17
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x456830]
imul edx, edx, 0x1eadb5a
sub eax, ebp
add eax, edx
mov edx, dword [0x456824]
imul edx, edx, 0x2b747a3
add eax, edx
add eax, ecx
mov dword [0x45682c], eax
mov eax, dword [esp + 0xe8]
mov dword [esp + esi*4 + 0x18], eax
inc esi
add edi, 0x40
add ebx, 0x40
mov ebp, dword [esp + 0x14]
lea ecx, [esp + 0xe0]
push ecx
push ebp
call sub.KERNEL32.dll_Process32Next
test eax, eax
jne 0x405ca0
mov ecx, dword [0x45681c]
mov eax, 0x62a5c8bd
imul ecx
mov ecx, dword [0x456824]
imul ecx, ecx, 0x298583a
sar edx, 0x18
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x45682c]
sub ecx, eax
imul edx, edx, 0x2b747a3
mov eax, dword [0x456828]
imul eax, eax, 0x10ec18f
sub ecx, edx
add ecx, eax
push ebp
mov dword [0x456830], ecx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov ecx, dword [esp + 0xe88]
pop edi
mov eax, esi
pop esi
pop ebp
pop ebx
call fcn.0042a3c1
add esp, 0xe7c
ret