Function at 0x41c2eb
Capabilities:
Enumerate processes

Disassembly:
push 0x30c
mov eax, 0x524a14
call fcn.005066d0
mov eax, dword [ebp + 8]
mov dword [ebp - 0x270], eax
call fcn.0040dbda
mov al, byte [eax]
xor ebx, ebx
test al, al
jne 0x41c3ae
lea eax, [ebp - 0x318]
push eax
call fcn.0040d9e1
lea eax, [ebp - 0x310]
push str.CSystemCommands::Wait4AllProcesses__start.
push eax
mov dword [ebp - 4], ebx
call fcn.0040c0a0
pop ecx
pop ecx
lea eax, [ebp - 0x30]
push eax
lea ecx, [ebp - 0x318]
call fcn.0040bf31
lea edi, [ebp - 0x30]
mov byte [ebp - 4], 1
call fcn.0040ba4e
push ebx
push 1
mov esi, edi
call fcn.0040dac5
or dword [ebp - 4], 0xffffffff
lea eax, [ebp - 0x318]
call fcn.0040c22b
mov eax, dword [ebp - 0x270]
test eax, eax
je 0x41c8fc
mov ecx, 0x54323c
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x41c4e2
test dx, dx
je 0x41c3a7
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x41c4e2
add eax, 4
add ecx, 4
test dx, dx
jne 0x41c37d
xor eax, eax
jmp 0x41c4e7
lea eax, [ebp - 0x310]
push eax
mov dword [ebp - 4], 2
call fcn.0040b935
mov byte [ebp - 4], 3
call fcn.0040dbda
lea ecx, [ebp - 0x28c]
call fcn.0040b84b
mov byte [ebp - 4], 4
cmp dword [eax + 0x18], 8
jb 0x41c3e4
mov esi, dword [eax + 4]
jmp 0x41c3e7
lea esi, [eax + 4]
lea eax, [ebp - 0x310]
push 0x54331c
push eax
call fcn.0040c0a0
pop ecx
pop ecx
push esi
push eax
call fcn.0040c0a0
pop ecx
pop ecx
push 0x543314
push eax
call fcn.0040c0a0
pop ecx
pop ecx
push str.CSystemCommands::Wait4AllProcesses__start.
push eax
call fcn.0040c0a0
pop ecx
pop ecx
push ebx
push 1
lea esi, [ebp - 0x28c]
mov byte [ebp - 4], 3
call fcn.0040dac5
lea eax, [ebp - 0x26c]
push eax
call sub.log4cplusU.dll_public:_static_class_log4cplus::Logger___cdecl_log4cplus::Logger::getRoot_void_
pop ecx
mov esi, 0x2710
push esi
lea ecx, [ebp - 0x26c]
mov byte [ebp - 4], 5
call sub.log4cplusU.dll_public:_bool___thiscall_log4cplus::Logger::isEnabledFor_int_const
test al, al
je 0x41c490
lea eax, [ebp - 0x28c]
push eax
lea ecx, [ebp - 0x310]
call fcn.0040b831
push 0x322
push str..SystemCommands.cpp
push eax
push esi
lea ecx, [ebp - 0x26c]
mov byte [ebp - 4], 6
call sub.log4cplusU.dll_public:_void___thiscall_log4cplus::Logger::forcedLog_int__class_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t___const___char_const___int_const
push ebx
push 1
lea esi, [ebp - 0x28c]
call fcn.0040dac5
lea ecx, [ebp - 0x26c]
mov byte [ebp - 4], 3
call sub.log4cplusU.dll_public_virtual:_void___thiscall_log4cplus::Logger::destructor_void_
lea eax, [ebp - 0x310]
mov byte [ebp - 4], 2
call fcn.0040b8a0
or dword [ebp - 4], 0xffffffff
jmp 0x41c36a
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
je 0x41c8fc
push 0
call fcn.00500a03
mov edi, eax
mov eax, dword [ebp + 0xc]
mov ebx, edx
cdq
add edi, eax
pop ecx
adc ebx, edx
push 0
push 2
mov byte [ebp - 0x261], 0
call sub.KERNEL32.dll_CreateToolhelp32Snapshot
push 0x228
mov esi, eax
lea eax, [ebp - 0x25c]
push 0
push eax
call fcn.005060b0
add esp, 0xc
lea eax, [ebp - 0x260]
push eax
push esi
mov dword [ebp - 0x260], 0x22c
call sub.KERNEL32.dll_Process32FirstW
push dword [ebp - 0x270]
lea eax, [ebp - 0x23c]
push eax
call fcn.00500f36
pop ecx
pop ecx
test eax, eax
jne 0x41c570
push dword [ebp - 0x258]
push eax
push 0x400
call dword [sym.imp.KERNEL32.dll_OpenProcess]
test eax, eax
jne 0x41c583
lea eax, [ebp - 0x260]
push eax
push esi
call sub.KERNEL32.dll_Process32NextW
test eax, eax
jne 0x41c542
jmp 0x41c591
push eax
mov byte [ebp - 0x261], 1
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push 0
call fcn.00500a03
cmp dword [ebp + 0xc], 0
pop ecx
jl 0x41c5a9
cmp edx, ebx
jg 0x41c5c3
jl 0x41c5a9
cmp eax, edi
jae 0x41c5c3
cmp byte [ebp - 0x261], 0
je 0x41c75e
push 0x64
call dword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x41c503
call fcn.0040dbda
cmp byte [eax], 0
jne 0x41c630
lea eax, [ebp - 0x318]
push eax
call fcn.0040d9e1
lea eax, [ebp - 0x310]
push str.CSystemCommands::Wait4AllProcesses__EXIT_ONTIMEOUT.
push eax
mov dword [ebp - 4], 0x12
call fcn.0040c0a0
pop ecx
pop ecx
lea eax, [ebp - 0x30]
push eax
lea ecx, [ebp - 0x318]
call fcn.0040bf31
lea edi, [ebp - 0x30]
mov byte [ebp - 4], 0x13
call fcn.0040ba4e
push 0
push 1
mov esi, edi
call fcn.0040dac5
or dword [ebp - 4], 0xffffffff
lea eax, [ebp - 0x318]
call fcn.0040c22b
xor eax, eax
inc eax
jmp 0x41c963
lea eax, [ebp - 0x310]
push eax
mov dword [ebp - 4], 0x14
call fcn.0040b935
mov byte [ebp - 4], 0x15
call fcn.0040dbda
lea ecx, [ebp - 0x28c]
call fcn.0040b84b
mov byte [ebp - 4], 0x16
cmp dword [eax + 0x18], 8
jb 0x41c666
mov esi, dword [eax + 4]
jmp 0x41c669
lea esi, [eax + 4]
lea eax, [ebp - 0x310]
push 0x54331c
push eax
call fcn.0040c0a0
pop ecx
pop ecx
push esi
push eax
call fcn.0040c0a0
pop ecx
pop ecx
push 0x543314
push eax
call fcn.0040c0a0
pop ecx
pop ecx
push str.CSystemCommands::Wait4AllProcesses__EXIT_ONTIMEOUT.
push eax
call fcn.0040c0a0
pop ecx
pop ecx
push 0
push 1
lea esi, [ebp - 0x28c]
mov byte [ebp - 4], 0x15
call fcn.0040dac5
lea eax, [ebp - 0x26c]
push eax
call sub.log4cplusU.dll_public:_static_class_log4cplus::Logger___cdecl_log4cplus::Logger::getRoot_void_
pop ecx
mov esi, 0x2710
push esi
lea ecx, [ebp - 0x26c]
mov byte [ebp - 4], 0x17
call sub.log4cplusU.dll_public:_bool___thiscall_log4cplus::Logger::isEnabledFor_int_const
test al, al
je 0x41c714
lea eax, [ebp - 0x28c]
push eax
lea ecx, [ebp - 0x310]
call fcn.0040b831
push 0x348
push str..SystemCommands.cpp
push eax
push esi
lea ecx, [ebp - 0x26c]
mov byte [ebp - 4], 0x18
call sub.log4cplusU.dll_public:_void___thiscall_log4cplus::Logger::forcedLog_int__class_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t___const___char_const___int_const
push 0
push 1
lea esi, [ebp - 0x28c]
call fcn.0040dac5
lea ecx, [ebp - 0x26c]
mov byte [ebp - 4], 0x15
call sub.log4cplusU.dll_public_virtual:_void___thiscall_log4cplus::Logger::destructor_void_
lea eax, [ebp - 0x310]
mov byte [ebp - 4], 0x14
call fcn.0040b8a0
jmp 0x41c628
call fcn.0040dbda
cmp byte [eax], 0
jne 0x41c7cb
lea eax, [ebp - 0x318]
push eax
call fcn.0040d9e1
lea eax, [ebp - 0x310]
push str.CSystemCommands::Wait4AllProcesses__EXIT_ALLPROCCESS_ENDED.
push eax
mov dword [ebp - 4], 0x1b
call fcn.0040c0a0
pop ecx
pop ecx
lea eax, [ebp - 0x30]
push eax
lea ecx, [ebp - 0x318]
call fcn.0040bf31
lea edi, [ebp - 0x30]
mov byte [ebp - 4], 0x1c
call fcn.0040ba4e
push 0
push 1
mov esi, edi
call fcn.0040dac5
or dword [ebp - 4], 0xffffffff
lea eax, [ebp - 0x318]
call fcn.0040c22b
push 2
pop eax
jmp 0x41c963
lea eax, [ebp - 0x310]
push eax
mov dword [ebp - 4], 0x1d
call fcn.0040b935
mov byte [ebp - 4], 0x1e
call fcn.0040dbda
lea ecx, [ebp - 0x28c]
call fcn.0040b84b
mov byte [ebp - 4], 0x1f
cmp dword [eax + 0x18], 8
jb 0x41c801
mov esi, dword [eax + 4]
jmp 0x41c804
lea esi, [eax + 4]
lea eax, [ebp - 0x310]
push 0x54331c
push eax
call fcn.0040c0a0
pop ecx
pop ecx
push esi
push eax
call fcn.0040c0a0
pop ecx
pop ecx
push 0x543314
push eax
call fcn.0040c0a0
pop ecx
pop ecx
push str.CSystemCommands::Wait4AllProcesses__EXIT_ALLPROCCESS_ENDED.
push eax
call fcn.0040c0a0
pop ecx
pop ecx
push 0
push 1
lea esi, [ebp - 0x28c]
mov byte [ebp - 4], 0x1e
call fcn.0040dac5
lea eax, [ebp - 0x26c]
push eax
call sub.log4cplusU.dll_public:_static_class_log4cplus::Logger___cdecl_log4cplus::Logger::getRoot_void_
pop ecx
mov esi, 0x2710
push esi
lea ecx, [ebp - 0x26c]
mov byte [ebp - 4], 0x20
call sub.log4cplusU.dll_public:_bool___thiscall_log4cplus::Logger::isEnabledFor_int_const
test al, al
je 0x41c8af
lea eax, [ebp - 0x28c]
push eax
lea ecx, [ebp - 0x310]
call fcn.0040b831
push 0x34c
push str..SystemCommands.cpp
push eax
push esi
lea ecx, [ebp - 0x26c]
mov byte [ebp - 4], 0x21
call sub.log4cplusU.dll_public:_void___thiscall_log4cplus::Logger::forcedLog_int__class_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t___const___char_const___int_const
push 0
push 1
lea esi, [ebp - 0x28c]
call fcn.0040dac5
lea ecx, [ebp - 0x26c]
mov byte [ebp - 4], 0x1e
call sub.log4cplusU.dll_public_virtual:_void___thiscall_log4cplus::Logger::destructor_void_
lea eax, [ebp - 0x310]
mov byte [ebp - 4], 0x1d
call fcn.0040b8a0
jmp 0x41c7c3
call fcn.0040dbda
cmp byte [eax], 0
jne 0x41c969
lea eax, [ebp - 0x318]
push eax
call fcn.0040d9e1
lea eax, [ebp - 0x310]
push str.CSystemCommands::Wait4AllProcesses__not_valid_process_name.
push eax
mov dword [ebp - 4], 9
call fcn.0040c0a0
pop ecx
pop ecx
lea eax, [ebp - 0x30]
push eax
lea ecx, [ebp - 0x318]
call fcn.0040bf31
lea edi, [ebp - 0x30]
mov byte [ebp - 4], 0xa
call fcn.0040ba4e
push 0
push 1
mov esi, edi
call fcn.0040dac5
or dword [ebp - 4], 0xffffffff
lea eax, [ebp - 0x318]
call fcn.0040c22b
xor eax, eax
call fcn.0050672c
ret
lea eax, [ebp - 0x310]
push eax
mov dword [ebp - 4], 0xb
call fcn.0040b935
mov byte [ebp - 4], 0xc
call fcn.0040dbda
lea ecx, [ebp - 0x28c]
call fcn.0040b84b
mov byte [ebp - 4], 0xd
cmp dword [eax + 0x18], 8
jb 0x41c99f
mov esi, dword [eax + 4]
jmp 0x41c9a2
lea esi, [eax + 4]
lea eax, [ebp - 0x310]
push 0x54331c
push eax
call fcn.0040c0a0
pop ecx
pop ecx
push esi
push eax
call fcn.0040c0a0
pop ecx
pop ecx
push 0x543314
push eax
call fcn.0040c0a0
pop ecx
pop ecx
push str.CSystemCommands::Wait4AllProcesses__not_valid_process_name.
push eax
call fcn.0040c0a0
pop ecx
pop ecx
push 0
push 1
lea esi, [ebp - 0x28c]
mov byte [ebp - 4], 0xc
call fcn.0040dac5
lea eax, [ebp - 0x26c]
push eax
call sub.log4cplusU.dll_public:_static_class_log4cplus::Logger___cdecl_log4cplus::Logger::getRoot_void_
pop ecx
mov esi, 0x2710
push esi
lea ecx, [ebp - 0x26c]
mov byte [ebp - 4], 0xe
call sub.log4cplusU.dll_public:_bool___thiscall_log4cplus::Logger::isEnabledFor_int_const
test al, al
je 0x41ca4d
lea eax, [ebp - 0x28c]
push eax
lea ecx, [ebp - 0x310]
call fcn.0040b831
push 0x324
push str..SystemCommands.cpp
push eax
push esi
lea ecx, [ebp - 0x26c]
mov byte [ebp - 4], 0xf
call sub.log4cplusU.dll_public:_void___thiscall_log4cplus::Logger::forcedLog_int__class_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t___const___char_const___int_const
push 0
push 1
lea esi, [ebp - 0x28c]
call fcn.0040dac5
lea ecx, [ebp - 0x26c]
mov byte [ebp - 4], 0xc
call sub.log4cplusU.dll_public_virtual:_void___thiscall_log4cplus::Logger::destructor_void_
lea eax, [ebp - 0x310]
mov byte [ebp - 4], 0xb
call fcn.0040b8a0
jmp 0x41c961