Function at 0x40b470
Capabilities:
Enumerate processes

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x50b680
mov eax, dword fs:[0]
push eax
sub esp, 0x3ac
mov eax, dword [0x55c640]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov esi, ecx
mov dword [ebp - 0x394], esi
mov dword [ebp - 0x39c], 0
xorps xmm0, xmm0
xor ebx, ebx
movq qword [ebp - 0x1c], xmm0
xor edi, edi
mov dword [ebp - 0x14], 0
mov dword [ebp - 0x3a0], esi
mov dword [ebp - 0x1c], ebx
mov dword [ebp - 0x18], edi
mov dword [ebp - 0x14], ebx
mov dword [ebp - 4], 1
movq qword [esi], xmm0
mov dword [esi + 8], edi
mov dword [esi], edi
mov dword [esi + 4], edi
mov dword [esi + 8], edi
lea ecx, [ebp - 0xd8]
mov dword [ebp - 0x39c], 1
call fcn.0040b780
lea ecx, [ebp - 0x160]
mov byte [ebp - 4], 2
call fcn.0040b780
push edi
push 2
mov byte [ebp - 4], 3
call dword [sym.imp.KERNEL32.dll_CreateToolhelp32Snapshot]
mov dword [ebp - 0x398], eax
cmp eax, 0xffffffff
je 0x40b714
mov ebx, dword [ebp - 0x398]
lea eax, [ebp - 0x390]
push eax
push ebx
mov dword [ebp - 0x390], 0x22c
call dword [sym.imp.KERNEL32.dll_Process32FirstW]
mov edi, dword [sym.imp.KERNEL32.dll_Process32NextW]
lea esp, [esp]
mov eax, dword [ebp - 0x388]
test eax, eax
je 0x40b6f5
cmp eax, 4
je 0x40b6f5
cmp dword [ebp - 0x378], 0xf4240
ja 0x40b6f5
mov eax, dword [ebp - 0x390]
dec eax
cmp eax, 0x3b9ac9ff
ja 0x40b6f5
lea eax, [ebp - 0x36c]
push eax
lea ecx, [ebp - 0x34]
call fcn.0044c580
lea eax, [ebp - 0x34]
mov byte [ebp - 4], 4
push 0x5465b0
push eax
call fcn.004568d0
add esp, 8
test al, al
jne 0x40b6e9
lea eax, [ebp - 0x34]
push 0x540148
push eax
call fcn.004568d0
add esp, 8
test al, al
jne 0x40b6e9
mov edx, dword [ebp - 0x388]
lea ecx, [ebp - 0x4c]
call fcn.0040b2a0
mov byte [ebp - 4], 5
lea ecx, [ebp - 0xc8]
mov eax, dword [ebp - 0x374]
mov dword [ebp - 0x58], eax
mov eax, dword [ebp - 0x37c]
mov dword [ebp - 0xd0], eax
mov eax, dword [ebp - 0x378]
mov dword [ebp - 0xd4], eax
mov eax, dword [ebp - 0x388]
mov dword [ebp - 0xd8], eax
lea eax, [ebp - 0x36c]
push eax
call fcn.0044c6b0
lea edx, [ebp - 0x4c]
lea ecx, [ebp - 0x3b8]
call fcn.00468870
push eax
lea ecx, [ebp - 0x134]
call fcn.0044c650
lea ecx, [ebp - 0x3b8]
call fcn.0040a970
cmp dword [ebp - 0x38], 0x10
lea ecx, [ebp - 0x4c]
cmovae ecx, dword [ebp - 0x4c]
call fcn.0040b210
mov dword [ebp - 0x138], eax
lea ecx, [ebp - 0x1c]
lea eax, [ebp - 0x160]
push eax
call fcn.00450500
lea eax, [ebp - 0x1c]
push eax
lea ecx, [ebp - 0x94]
call fcn.00450330
lea eax, [ebp - 0xd8]
mov ecx, esi
push eax
call fcn.00450500
lea eax, [ebp - 0x34]
push 0x5465b0
push eax
call fcn.004568d0
add esp, 8
test al, al
jne 0x40b6e1
lea eax, [ebp - 0x34]
push 0x540148
push eax
call fcn.004568d0
add esp, 8
test al, al
jne 0x40b6e1
lea eax, [ebp - 0x36c]
push eax
lea ecx, [ebp - 0x34]
call fcn.0044c6b0
mov eax, dword [ebp - 0x388]
test eax, eax
je 0x40b6e1
cmp eax, 4
je 0x40b6e1
cmp dword [ebp - 0x378], 0xf4240
ja 0x40b6e1
mov eax, dword [ebp - 0x390]
dec eax
lea ecx, [ebp - 0x4c]
call sym.Dayz_updater.exe_public:_void___thiscall_pbo::signature::destructor_void_
lea ecx, [ebp - 0x34]
mov byte [ebp - 4], 3
call fcn.0040a970
lea eax, [ebp - 0x390]
push eax
push ebx
call edi
test eax, eax
jne 0x40b550
push ebx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov edi, dword [ebp - 0x18]
mov ebx, dword [ebp - 0x1c]
lea ecx, [ebp - 0x160]
call fcn.0040b880
lea ecx, [ebp - 0xd8]
call fcn.0040b880
test ebx, ebx
je 0x40b756
mov esi, ebx
cmp ebx, edi
je 0x40b745
mov ecx, esi
call fcn.0040b880
add esi, 0x84
cmp esi, edi
jne 0x40b734
push ebx
call fcn.00485250
mov eax, dword [ebp - 0x394]
add esp, 4
jmp 0x40b758
mov eax, esi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.00484516
mov esp, ebp
pop ebp
ret