Function at 0x4cebad
Capabilities:
Enumerate processes

Disassembly:
push 0x23c
mov eax, 0x6e4aa5
call fcn.00682c92
xor ebx, ebx
push ebx
push 2
call sub.KERNEL32.dll_CreateToolhelp32Snapshot
mov esi, eax
cmp esi, 0xffffffff
jne 0x4cec0c
mov esi, dword [sym.imp.KERNEL32.dll_GetLastError]
call esi
push eax
mov edi, str._Util::NetBar::IsNetBarEnv__CreateToolhelp32Snapshot_failed__last_error:_d_n
push edi
push 0x6fe078
push 2
push str.Util::NetBar::IsNetBarEnv
push 0x1b5
push str.E:FixReplayAttackscoding_baseutilfunNetBar.cpp
call fcn.004ce9b9
add esp, 0x1c
call esi
push eax
push edi
call fcn.0047380a
pop ecx
pop ecx
xor eax, eax
jmp 0x4ced9e
lea eax, [ebp - 0x23c]
mov dword [ebp - 0x23c], 0x22c
push eax
push esi
call sub.KERNEL32.dll_Process32FirstW
test eax, eax
jne 0x4cec50
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov esi, dword [sym.imp.KERNEL32.dll_GetLastError]
call esi
push eax
mov edi, str._Util::NetBar::IsNetBarEnv__Process32First_failed__last_error:_d_n
push edi
push 0x6fe078
push 2
push str.Util::NetBar::IsNetBarEnv
push 0x1c2
jmp 0x4cebed
lea ecx, [ebp - 0x240]
call sym.txupd.exe_public:_void___thiscall_CTXStringW::constructor_void_
mov dword [ebp - 4], ebx
mov edi, ebx
mov dword [ebp - 0x248], ebx
push dword [ebp - 0x234]
or dword [ebp - 0x244], 0xffffffff
lea eax, [ebp - 0x218]
push eax
lea eax, [ebp - 0x248]
push eax
lea eax, [ebp - 0x244]
push eax
call fcn.004ceda4
add esp, 0x10
test eax, eax
jne 0x4cecd5
cmp dword [ebp - 0x244], 0xffffffff
je 0x4cecc2
lea eax, [ebp - 0x218]
add edi, 0xa
push eax
lea ecx, [ebp - 0x240]
call sym.txupd.exe_public:_class_CTXStringW____thiscall_CTXStringW::operator_wchar_t_const__
push 0x6ff7f4
lea ecx, [ebp - 0x240]
call sym.txupd.exe_public:_class_CTXStringW____thiscall_CTXStringW::operator_wchar_t_const__
lea eax, [ebp - 0x23c]
push eax
push esi
call sub.KERNEL32.dll_Process32NextW
test eax, eax
jne 0x4cec66
jmp 0x4cecfa
lea eax, [ebp - 0x218]
add edi, 0x14
push eax
lea ecx, [ebp - 0x240]
call sym.txupd.exe_public:_class_CTXStringW____thiscall_CTXStringW::operator_wchar_t_const__
push 0x6ff7f4
lea ecx, [ebp - 0x240]
call sym.txupd.exe_public:_class_CTXStringW____thiscall_CTXStringW::operator_wchar_t_const__
cmp edi, 0x14
jb 0x4ced8a
lea ecx, [ebp - 0x244]
call sym.txupd.exe_public:_void___thiscall_CTXStringW::constructor_void_
push edi
xor ebx, ebx
lea eax, [ebp - 0x244]
push 0x6ff7f8
inc ebx
push eax
mov byte [ebp - 4], bl
call sym.txupd.exe_public:_void___cdecl_CTXStringW::Format_wchar_t_const__
add esp, 0xc
lea eax, [ebp - 0x244]
lea ecx, [ebp - 0x240]
push eax
call sym.txupd.exe_public:_class_CTXStringW____thiscall_CTXStringW::operator_class_CTXStringW_const__
lea ecx, [ebp - 0x240]
call sym.txupd.exe_public:_wchar_t_const____thiscall_CTXStringW::operator_wchar_t_const__void_const
push eax
mov edi, 0x6ff800
push edi
push 0x6fe078
push 2
push str.Util::NetBar::IsNetBarEnv
push 0x1e1
push str.E:FixReplayAttackscoding_baseutilfunNetBar.cpp
call fcn.004ce3cb
add esp, 0x1c
lea ecx, [ebp - 0x240]
call sym.txupd.exe_public:_wchar_t_const____thiscall_CTXStringW::operator_wchar_t_const__void_const
push eax
push edi
call fcn.0047380a
pop ecx
pop ecx
lea ecx, [ebp - 0x244]
call sym.txupd.exe_public:_void___thiscall_CTXStringW::destructor_void_
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
lea ecx, [ebp - 0x240]
call sym.txupd.exe_public:_void___thiscall_CTXStringW::destructor_void_
mov eax, ebx
call fcn.00682c3c
ret