Function at 0x1800291d0
Capabilities:
Enumerate threads

Disassembly:
mov dword [rsp + 8], ecx
sub rsp, 0x108
mov rax, qword [0x180076dc0]
xor rax, rsp
mov qword [rsp + 0xf0], rax
xor edx, edx
mov ecx, 4
call sub.KERNEL32.dll_CreateToolhelp32Snapshot
mov qword [rsp + 0x30], rax
movzx eax, byte [0x180076cda]
movsx eax, al
mov dword [rsp + 0xb0], eax
call fcn.180029ea0
movsx eax, al
mov ecx, dword [rsp + 0xb0]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x3c], eax
call fcn.180029e70
movsx eax, al
shl eax, 3
mov dword [rsp + 0x38], eax
call fcn.180029e60
movsx eax, al
mov ecx, dword [rsp + 0x38]
imul ecx, eax
mov eax, ecx
mov ecx, dword [rsp + 0x3c]
add ecx, eax
mov eax, ecx
movzx ecx, byte [reloc.OLEAUT32.dll_VariantClear]
movsx ecx, cl
xor edx, edx
div ecx
movzx ecx, byte [0x180076cd6]
movsx ecx, cl
sub eax, ecx
test eax, eax
je 0x1800293d6
cmp qword [rsp + 0x30], 0xffffffffffffffff
jne 0x180029286
mov qword [rsp + 0xb8], 1
jmp 0x180029292
mov qword [rsp + 0xb8], 0
cvtsi2sd xmm0, qword [rsp + 0xb8]
call fcn.18002b530
mov dword [rsp + 0x4c], eax
movzx ecx, byte [0x180076cda]
movsx ecx, cl
mov dword [rsp + 0x40], ecx
call fcn.180029ea0
movsx eax, al
mov ecx, dword [rsp + 0x40]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x48], eax
call fcn.180029e70
movsx eax, al
imul eax, eax, 3
mov dword [rsp + 0x44], eax
call fcn.180029e60
movsx eax, al
mov ecx, dword [rsp + 0x44]
imul ecx, eax
mov eax, ecx
mov ecx, dword [rsp + 0x48]
add ecx, eax
mov eax, ecx
movzx ecx, byte [reloc.OLEAUT32.dll_VariantClear]
movsx ecx, cl
xor edx, edx
div ecx
movzx ecx, byte [0x180076cd6]
movsx ecx, cl
sub eax, ecx
mov ecx, dword [rsp + 0x4c]
imul ecx, eax
mov eax, ecx
test eax, eax
je 0x1800293d6
xor eax, eax
cmp eax, 8
je 0x1800293d6
mov dword [rsp + 0x20], 0
jmp 0x180029339
mov eax, dword [rsp + 0x20]
inc eax
mov dword [rsp + 0x20], eax
movzx eax, byte [0x180076cda]
movsx eax, al
mov dword [rsp + 0x50], eax
call fcn.180029ea0
movsx eax, al
mov ecx, dword [rsp + 0x50]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x58], eax
call fcn.180029e70
movsx eax, al
shl eax, 2
mov dword [rsp + 0x54], eax
call fcn.180029e60
movsx eax, al
mov ecx, dword [rsp + 0x54]
imul ecx, eax
mov eax, ecx
mov ecx, dword [rsp + 0x58]
add ecx, eax
mov eax, ecx
movzx ecx, byte [reloc.OLEAUT32.dll_VariantClear]
movsx ecx, cl
xor edx, edx
div ecx
movzx ecx, byte [0x180076cd6]
movsx ecx, cl
sub eax, ecx
mov eax, eax
cvtsi2sd xmm0, rax
call fcn.18002b530
cmp dword [rsp + 0x20], eax
jge 0x1800293d6
mov dword [rsp + 0x24], 0
jmp 0x1800293c3
cmp dword [rsp + 0x24], 0x31
jae 0x1800293d1
jmp 0x1800297f6
jmp 0x18002932f
mov dword [rsp + 0xd0], 0x1c
movzx eax, byte [0x180076cda]
movsx eax, al
mov dword [rsp + 0x5c], eax
call fcn.180029ea0
movsx eax, al
mov ecx, dword [rsp + 0x5c]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x64], eax
call fcn.180029e70
movsx eax, al
imul eax, eax, 9
mov dword [rsp + 0x60], eax
call fcn.180029e60
movsx eax, al
mov ecx, dword [rsp + 0x60]
imul ecx, eax
mov eax, ecx
mov ecx, dword [rsp + 0x64]
add ecx, eax
mov eax, ecx
movzx ecx, byte [reloc.OLEAUT32.dll_VariantClear]
movsx ecx, cl
xor edx, edx
div ecx
movzx ecx, byte [0x180076cd6]
movsx ecx, cl
sub eax, ecx
test eax, eax
je 0x1800295d0
lea rdx, [rsp + 0xd0]
mov rcx, qword [rsp + 0x30]
call sub.KERNEL32.dll_Thread32First
test eax, eax
jne 0x180029471
mov qword [rsp + 0xc0], 1
jmp 0x18002947d
mov qword [rsp + 0xc0], 0
cvtsi2sd xmm0, qword [rsp + 0xc0]
call fcn.18002b530
mov dword [rsp + 0x74], eax
movzx ecx, byte [0x180076cda]
movsx ecx, cl
mov dword [rsp + 0x68], ecx
call fcn.180029ea0
movsx eax, al
mov ecx, dword [rsp + 0x68]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x70], eax
call fcn.180029e70
movsx eax, al
imul eax, eax, 0xa
mov dword [rsp + 0x6c], eax
call fcn.180029e60
movsx eax, al
mov ecx, dword [rsp + 0x6c]
imul ecx, eax
mov eax, ecx
mov ecx, dword [rsp + 0x70]
add ecx, eax
mov eax, ecx
movzx ecx, byte [reloc.OLEAUT32.dll_VariantClear]
movsx ecx, cl
xor edx, edx
div ecx
movzx ecx, byte [0x180076cd6]
movsx ecx, cl
sub eax, ecx
mov ecx, dword [rsp + 0x74]
imul ecx, eax
mov eax, ecx
test eax, eax
je 0x1800295d0
xor eax, eax
cmp eax, 5
je 0x1800295d0
mov rcx, qword [rsp + 0x30]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
nop
mov dword [rsp + 0x28], 0
jmp 0x180029530
mov eax, dword [rsp + 0x28]
inc eax
mov dword [rsp + 0x28], eax
movzx eax, byte [0x180076cda]
movsx eax, al
mov dword [rsp + 0x78], eax
call fcn.180029ea0
movsx eax, al
mov ecx, dword [rsp + 0x78]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x80], eax
call fcn.180029e70
movsx eax, al
mov dword [rsp + 0x7c], eax
call fcn.180029e60
movsx eax, al
mov ecx, dword [rsp + 0x7c]
imul ecx, eax
mov eax, ecx
mov ecx, dword [rsp + 0x80]
add ecx, eax
mov eax, ecx
movzx ecx, byte [reloc.OLEAUT32.dll_VariantClear]
movsx ecx, cl
xor edx, edx
div ecx
movzx ecx, byte [0x180076cd6]
movsx ecx, cl
sub eax, ecx
mov eax, eax
cvtsi2sd xmm0, rax
call fcn.18002b530
cmp dword [rsp + 0x28], eax
jge 0x1800295d0
mov dword [rsp + 0x2c], 0
jmp 0x1800295bd
cmp dword [rsp + 0x2c], 0x42
jae 0x1800295cb
jmp 0x1800297f6
jmp 0x180029526
movzx eax, byte [0x180076cda]
movsx eax, al
mov dword [rsp + 0x84], eax
call fcn.180029ea0
movsx eax, al
mov ecx, dword [rsp + 0x84]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x8c], eax
call fcn.180029e70
movsx eax, al
imul eax, eax, 6
mov dword [rsp + 0x88], eax
call fcn.180029e60
movsx eax, al
mov ecx, dword [rsp + 0x88]
imul ecx, eax
mov eax, ecx
mov ecx, dword [rsp + 0x8c]
add ecx, eax
mov eax, ecx
movzx ecx, byte [reloc.OLEAUT32.dll_VariantClear]
movsx ecx, cl
xor edx, edx
div ecx
movzx ecx, byte [0x180076cd6]
movsx ecx, cl
sub eax, ecx
test eax, eax
je 0x180029734
mov eax, dword [rsp + 0x110]
cmp dword [rsp + 0xdc], eax
jne 0x18002966c
mov qword [rsp + 0xc8], 1
jmp 0x180029678
mov qword [rsp + 0xc8], 0
cvtsi2sd xmm0, qword [rsp + 0xc8]
call fcn.18002b530
mov dword [rsp + 0x9c], eax
movzx ecx, byte [0x180076cda]
movsx ecx, cl
mov dword [rsp + 0x90], ecx
call fcn.180029ea0
movsx eax, al
mov ecx, dword [rsp + 0x90]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x98], eax
call fcn.180029e70
movsx eax, al
imul eax, eax, 7
mov dword [rsp + 0x94], eax
call fcn.180029e60
movsx eax, al
mov ecx, dword [rsp + 0x94]
imul ecx, eax
mov eax, ecx
mov ecx, dword [rsp + 0x98]
add ecx, eax
mov eax, ecx
movzx ecx, byte [reloc.OLEAUT32.dll_VariantClear]
movsx ecx, cl
xor edx, edx
div ecx
movzx ecx, byte [0x180076cd6]
movsx ecx, cl
sub eax, ecx
mov ecx, dword [rsp + 0x9c]
imul ecx, eax
mov eax, ecx
test eax, eax
je 0x180029734
xor eax, eax
cmp eax, 2
je 0x180029734
xor r9d, r9d
xor r8d, r8d
mov edx, 0x12
mov ecx, dword [rsp + 0xd8]
call qword [sym.imp.USER32.dll_PostThreadMessageA]
nop
lea rdx, [rsp + 0xd0]
mov rcx, qword [rsp + 0x30]
call sub.KERNEL32.dll_Thread32Next
cdqe
cvtsi2sd xmm0, rax
call fcn.18002b530
mov dword [rsp + 0xac], eax
movzx ecx, byte [0x180076cda]
movsx ecx, cl
mov dword [rsp + 0xa0], ecx
call fcn.180029ea0
movsx eax, al
mov ecx, dword [rsp + 0xa0]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0xa8], eax
call fcn.180029e70
movsx eax, al
imul eax, eax, 3
mov dword [rsp + 0xa4], eax
call fcn.180029e60
movsx eax, al
mov ecx, dword [rsp + 0xa4]
imul ecx, eax
mov eax, ecx
mov ecx, dword [rsp + 0xa8]
add ecx, eax
mov eax, ecx
movzx ecx, byte [reloc.OLEAUT32.dll_VariantClear]
movsx ecx, cl
xor edx, edx
div ecx
movzx ecx, byte [0x180076cd6]
movsx ecx, cl
sub eax, ecx
mov ecx, dword [rsp + 0xac]
imul ecx, eax
mov eax, ecx
test eax, eax
je 0x1800297ea
xor eax, eax
cmp eax, 8
jne 0x1800295d0
mov rcx, qword [rsp + 0x30]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
nop
mov rcx, qword [rsp + 0xf0]
xor rcx, rsp
call fcn.18003c9d0
add rsp, 0x108
ret