Function at 0x466a65
Capabilities:
Enumerate processes

Disassembly:
push 0x30c
mov eax, 0x570e1f
call fcn.0054d478
mov eax, dword [ebp + 8]
mov dword [ebp - 0x270], eax
call fcn.00462c28
mov al, byte [eax]
test al, al
jne 0x466b24
lea eax, [ebp - 0x318]
push eax
call fcn.00409b60
and dword [ebp - 4], 0
lea eax, [ebp - 0x310]
push str.CSystemCommands::Wait4AllProcesses__start.
push eax
call fcn.00407390
pop ecx
pop ecx
lea ecx, [ebp - 0x30]
lea eax, [ebp - 0x318]
call fcn.00407170
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 1
call fcn.00406a80
lea ecx, [ebp - 0x30]
call fcn.00409c40
or dword [ebp - 4], 0xffffffff
lea eax, [ebp - 0x318]
call fcn.00407660
mov eax, dword [ebp - 0x270]
test eax, eax
je 0x467057
mov ecx, 0x59672c
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x466c51
test dx, dx
je 0x466b1d
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x466c51
add eax, 4
add ecx, 4
test dx, dx
jne 0x466af3
xor eax, eax
jmp 0x466c56
lea eax, [ebp - 0x310]
push eax
mov dword [ebp - 4], 2
call fcn.004068d0
mov byte [ebp - 4], 3
call fcn.00462c28
lea esi, [ebp - 0x28c]
call fcn.00406720
mov byte [ebp - 4], 4
cmp dword [eax + 0x18], 8
jb 0x466b5a
mov esi, dword [eax + 4]
jmp 0x466b5d
lea esi, [eax + 4]
lea eax, [ebp - 0x310]
push 0x5950f8
push eax
call fcn.00407390
pop ecx
pop ecx
push esi
push eax
call fcn.00407390
pop ecx
pop ecx
push 0x5950f0
push eax
call fcn.00407390
pop ecx
pop ecx
push str.CSystemCommands::Wait4AllProcesses__start.
push eax
call fcn.00407390
pop ecx
pop ecx
lea ecx, [ebp - 0x28c]
mov byte [ebp - 4], 3
call fcn.00409c40
lea eax, [ebp - 0x26c]
push eax
call sub.log4cplusU.dll_public:_static_class_log4cplus::Logger___cdecl_log4cplus::Logger::getRoot_void_
pop ecx
mov esi, 0x2710
push esi
lea ecx, [ebp - 0x26c]
mov byte [ebp - 4], 5
call sub.log4cplusU.dll_public:_bool___thiscall_log4cplus::Logger::isEnabledFor_int_const
test al, al
je 0x466bff
lea ecx, [ebp - 0x28c]
lea eax, [ebp - 0x310]
call fcn.00406700
push 0x322
push str..SystemCommands.cpp
push eax
push esi
lea ecx, [ebp - 0x26c]
mov byte [ebp - 4], 6
call sub.log4cplusU.dll_public:_void___thiscall_log4cplus::Logger::forcedLog_int__class_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t___const___char_const___int_const
lea ecx, [ebp - 0x28c]
call fcn.00409c40
lea ecx, [ebp - 0x26c]
mov byte [ebp - 4], 3
call sub.log4cplusU.dll_public_virtual:_void___thiscall_log4cplus::Logger::destructor_void_
lea eax, [ebp - 0x310]
mov byte [ebp - 4], 2
call fcn.004067e0
or dword [ebp - 4], 0xffffffff
jmp 0x466ae0
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
je 0x467057
push 0
call fcn.0054678b
mov edi, eax
mov eax, dword [ebp + 0xc]
mov ebx, edx
cdq
add edi, eax
pop ecx
adc ebx, edx
push 0
push 2
mov byte [ebp - 0x261], 0
call sub.KERNEL32.dll_CreateToolhelp32Snapshot
push 0x228
mov esi, eax
lea eax, [ebp - 0x25c]
push 0
push eax
call fcn.0054ff70
add esp, 0xc
lea eax, [ebp - 0x260]
push eax
push esi
mov dword [ebp - 0x260], 0x22c
call sub.KERNEL32.dll_Process32FirstW
push dword [ebp - 0x270]
lea eax, [ebp - 0x23c]
push eax
call fcn.00547c6e
pop ecx
pop ecx
test eax, eax
jne 0x466cdf
push dword [ebp - 0x258]
push eax
push 0x400
call dword [sym.imp.KERNEL32.dll_OpenProcess]
test eax, eax
jne 0x466cf2
lea eax, [ebp - 0x260]
push eax
push esi
call sub.KERNEL32.dll_Process32NextW
test eax, eax
jne 0x466cb1
jmp 0x466d00
push eax
mov byte [ebp - 0x261], 1
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push 0
call fcn.0054678b
cmp dword [ebp + 0xc], 0
pop ecx
jl 0x466d18
cmp edx, ebx
jg 0x466d32
jl 0x466d18
cmp eax, edi
jae 0x466d32
cmp byte [ebp - 0x261], 0
je 0x466ec0
push 0x64
call dword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x466c72
call fcn.00462c28
cmp byte [eax], 0
jne 0x466d9b
lea eax, [ebp - 0x318]
push eax
call fcn.00409b60
lea eax, [ebp - 0x310]
push str.CSystemCommands::Wait4AllProcesses__EXIT_ONTIMEOUT.
push eax
mov dword [ebp - 4], 0x12
call fcn.00407390
pop ecx
pop ecx
lea ecx, [ebp - 0x30]
lea eax, [ebp - 0x318]
call fcn.00407170
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 0x13
call fcn.00406a80
lea ecx, [ebp - 0x30]
call fcn.00409c40
or dword [ebp - 4], 0xffffffff
lea eax, [ebp - 0x318]
call fcn.00407660
xor eax, eax
inc eax
jmp 0x4670ba
lea eax, [ebp - 0x310]
push eax
mov dword [ebp - 4], 0x14
call fcn.004068d0
mov byte [ebp - 4], 0x15
call fcn.00462c28
lea esi, [ebp - 0x28c]
call fcn.00406720
mov byte [ebp - 4], 0x16
cmp dword [eax + 0x18], 8
jb 0x466dd1
mov esi, dword [eax + 4]
jmp 0x466dd4
lea esi, [eax + 4]
lea eax, [ebp - 0x310]
push 0x5950f8
push eax
call fcn.00407390
pop ecx
pop ecx
push esi
push eax
call fcn.00407390
pop ecx
pop ecx
push 0x5950f0
push eax
call fcn.00407390
pop ecx
pop ecx
push str.CSystemCommands::Wait4AllProcesses__EXIT_ONTIMEOUT.
push eax
call fcn.00407390
pop ecx
pop ecx
lea ecx, [ebp - 0x28c]
mov byte [ebp - 4], 0x15
call fcn.00409c40
lea eax, [ebp - 0x26c]
push eax
call sub.log4cplusU.dll_public:_static_class_log4cplus::Logger___cdecl_log4cplus::Logger::getRoot_void_
pop ecx
mov esi, 0x2710
push esi
lea ecx, [ebp - 0x26c]
mov byte [ebp - 4], 0x17
call sub.log4cplusU.dll_public:_bool___thiscall_log4cplus::Logger::isEnabledFor_int_const
test al, al
je 0x466e76
lea ecx, [ebp - 0x28c]
lea eax, [ebp - 0x310]
call fcn.00406700
push 0x348
push str..SystemCommands.cpp
push eax
push esi
lea ecx, [ebp - 0x26c]
mov byte [ebp - 4], 0x18
call sub.log4cplusU.dll_public:_void___thiscall_log4cplus::Logger::forcedLog_int__class_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t___const___char_const___int_const
lea ecx, [ebp - 0x28c]
call fcn.00409c40
lea ecx, [ebp - 0x26c]
mov byte [ebp - 4], 0x15
call sub.log4cplusU.dll_public_virtual:_void___thiscall_log4cplus::Logger::destructor_void_
lea eax, [ebp - 0x310]
mov byte [ebp - 4], 0x14
call fcn.004067e0
jmp 0x466d93
call fcn.00462c28
cmp byte [eax], 0
jne 0x466f29
lea eax, [ebp - 0x318]
push eax
call fcn.00409b60
lea eax, [ebp - 0x310]
push str.CSystemCommands::Wait4AllProcesses__EXIT_ALLPROCCESS_ENDED.
push eax
mov dword [ebp - 4], 0x1b
call fcn.00407390
pop ecx
pop ecx
lea ecx, [ebp - 0x30]
lea eax, [ebp - 0x318]
call fcn.00407170
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 0x1c
call fcn.00406a80
lea ecx, [ebp - 0x30]
call fcn.00409c40
or dword [ebp - 4], 0xffffffff
lea eax, [ebp - 0x318]
call fcn.00407660
push 2
pop eax
jmp 0x4670ba
lea eax, [ebp - 0x310]
push eax
mov dword [ebp - 4], 0x1d
call fcn.004068d0
mov byte [ebp - 4], 0x1e
call fcn.00462c28
lea esi, [ebp - 0x28c]
call fcn.00406720
mov byte [ebp - 4], 0x1f
cmp dword [eax + 0x18], 8
jb 0x466f5f
mov esi, dword [eax + 4]
jmp 0x466f62
lea esi, [eax + 4]
lea eax, [ebp - 0x310]
push 0x5950f8
push eax
call fcn.00407390
pop ecx
pop ecx
push esi
push eax
call fcn.00407390
pop ecx
pop ecx
push 0x5950f0
push eax
call fcn.00407390
pop ecx
pop ecx
push str.CSystemCommands::Wait4AllProcesses__EXIT_ALLPROCCESS_ENDED.
push eax
call fcn.00407390
pop ecx
pop ecx
lea ecx, [ebp - 0x28c]
mov byte [ebp - 4], 0x1e
call fcn.00409c40
lea eax, [ebp - 0x26c]
push eax
call sub.log4cplusU.dll_public:_static_class_log4cplus::Logger___cdecl_log4cplus::Logger::getRoot_void_
pop ecx
mov esi, 0x2710
push esi
lea ecx, [ebp - 0x26c]
mov byte [ebp - 4], 0x20
call sub.log4cplusU.dll_public:_bool___thiscall_log4cplus::Logger::isEnabledFor_int_const
test al, al
je 0x467004
lea ecx, [ebp - 0x28c]
lea eax, [ebp - 0x310]
call fcn.00406700
push 0x34c
push str..SystemCommands.cpp
push eax
push esi
lea ecx, [ebp - 0x26c]
mov byte [ebp - 4], 0x21
call sub.log4cplusU.dll_public:_void___thiscall_log4cplus::Logger::forcedLog_int__class_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t___const___char_const___int_const
lea ecx, [ebp - 0x28c]
call fcn.00409c40
lea ecx, [ebp - 0x26c]
mov byte [ebp - 4], 0x1e
call sub.log4cplusU.dll_public_virtual:_void___thiscall_log4cplus::Logger::destructor_void_
lea eax, [ebp - 0x310]
mov byte [ebp - 4], 0x1d
call fcn.004067e0
jmp 0x466f21
call fcn.00462c28
cmp byte [eax], 0
jne 0x4670c0
lea eax, [ebp - 0x318]
push eax
call fcn.00409b60
lea eax, [ebp - 0x310]
push str.CSystemCommands::Wait4AllProcesses__not_valid_process_name.
push eax
mov dword [ebp - 4], 9
call fcn.00407390
pop ecx
pop ecx
lea ecx, [ebp - 0x30]
lea eax, [ebp - 0x318]
call fcn.00407170
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 0xa
call fcn.00406a80
lea ecx, [ebp - 0x30]
call fcn.00409c40
or dword [ebp - 4], 0xffffffff
lea eax, [ebp - 0x318]
call fcn.00407660
xor eax, eax
call fcn.0054d4d4
ret
lea eax, [ebp - 0x310]
push eax
mov dword [ebp - 4], 0xb
call fcn.004068d0
mov byte [ebp - 4], 0xc
call fcn.00462c28
lea esi, [ebp - 0x28c]
call fcn.00406720
mov byte [ebp - 4], 0xd
cmp dword [eax + 0x18], 8
jb 0x4670f6
mov esi, dword [eax + 4]
jmp 0x4670f9
lea esi, [eax + 4]
lea eax, [ebp - 0x310]
push 0x5950f8
push eax
call fcn.00407390
pop ecx
pop ecx
push esi
push eax
call fcn.00407390
pop ecx
pop ecx
push 0x5950f0
push eax
call fcn.00407390
pop ecx
pop ecx
push str.CSystemCommands::Wait4AllProcesses__not_valid_process_name.
push eax
call fcn.00407390
pop ecx
pop ecx
lea ecx, [ebp - 0x28c]
mov byte [ebp - 4], 0xc
call fcn.00409c40
lea eax, [ebp - 0x26c]
push eax
call sub.log4cplusU.dll_public:_static_class_log4cplus::Logger___cdecl_log4cplus::Logger::getRoot_void_
pop ecx
mov esi, 0x2710
push esi
lea ecx, [ebp - 0x26c]
mov byte [ebp - 4], 0xe
call sub.log4cplusU.dll_public:_bool___thiscall_log4cplus::Logger::isEnabledFor_int_const
test al, al
je 0x46719b
lea ecx, [ebp - 0x28c]
lea eax, [ebp - 0x310]
call fcn.00406700
push 0x324
push str..SystemCommands.cpp
push eax
push esi
lea ecx, [ebp - 0x26c]
mov byte [ebp - 4], 0xf
call sub.log4cplusU.dll_public:_void___thiscall_log4cplus::Logger::forcedLog_int__class_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t___const___char_const___int_const
lea ecx, [ebp - 0x28c]
call fcn.00409c40
lea ecx, [ebp - 0x26c]
mov byte [ebp - 4], 0xc
call sub.log4cplusU.dll_public_virtual:_void___thiscall_log4cplus::Logger::destructor_void_
lea eax, [ebp - 0x310]
mov byte [ebp - 4], 0xb
call fcn.004067e0
jmp 0x4670b8