Function at 0x57a310
Capabilities:
Enumerate process modules

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5fcf53
mov eax, dword fs:[0]
push eax
mov eax, 0x2f7c
call fcn.0041ead0
mov eax, dword [0x70f200]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov esi, ecx
mov edi, dword [ebp + 0xc]
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
push 0x1f40
mov dword [ebp - 0x2f80], eax
lea eax, [ebp - 0x1f50]
push 0
push eax
mov dword [ebp - 0x1f54], 0x1f40
call fcn.00420090
add esp, 0xc
lea eax, [ebp - 0x1f54]
push eax
push 0x1f40
lea eax, [ebp - 0x1f50]
push eax
call dword [sym.imp.KERNEL32.dll_K32EnumProcesses]
mov eax, dword [ebp - 0x1f54]
shr eax, 2
mov dword [ebp - 0x1f54], eax
test eax, eax
je 0x57a7e2
mov dword [ebp - 0x1fac], 0xffffffff
mov dword [ebp - 4], 0
lea ecx, [ebp - 0x1f6c]
xorps xmm0, xmm0
mov dword [ebp - 0x1f64], 0
movq qword [ebp - 0x1f6c], xmm0
call fcn.005dc5e0
xorps xmm0, xmm0
mov dword [ebp - 0x1f70], 0
lea ecx, [ebp - 0x1f78]
movq qword [ebp - 0x1f78], xmm0
call fcn.005dc5e0
xorps xmm0, xmm0
mov dword [ebp - 0x1f94], 0
lea ecx, [ebp - 0x1f9c]
movq qword [ebp - 0x1f9c], xmm0
call fcn.005dc5e0
xorps xmm0, xmm0
mov dword [ebp - 0x1f58], 0
lea ecx, [ebp - 0x1f60]
movq qword [ebp - 0x1f60], xmm0
call fcn.005dc5e0
xorps xmm0, xmm0
mov dword [ebp - 0x1f88], 0
lea ecx, [ebp - 0x1f90]
movq qword [ebp - 0x1f90], xmm0
call fcn.005dc5e0
push 1
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x1fa8]
xorps xmm0, xmm0
mov dword [ebp - 0x1fa0], 0
push edi
movq qword [ebp - 0x1fa8], xmm0
call fcn.005dc570
push 1
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x1f84]
xorps xmm0, xmm0
mov dword [ebp - 0x1f7c], 0
push str.2db7bff719903060c3801386cf11e5ef_a2ac5113c758f8adb174a6626d589b41_4013f2dc69bdcb5f94ecf110302c4377_b6594d10a52d70b8b4a26b7e6d3d36fd_5cc1415688add8c22473168b9961e2ed_7464fae7a08c44619861f5929685f455_e2cb7f4da319cae82bf96c3cc5465208_0097a6373e08c15d83ea7b218195f0c7_9d79bee137885b1209db7ef75bce3adc_3ef26e31fe4d343ccfdf8127951c5776_7f3dc9533e7b2a18376a5dcf107a9ac8_b74ad71d1a0ac786094e9141cc3b22a3_6f83aeaf98560cf41bcdf3f9ee97b95e_d86a29f16643ac62c7651e722b215f57_31df23668bb51628e56cfa7fbaa172c2_2c015d31dee13f16666a15799992f60d_fe5ff4912bd3ad415916fa6aa8ae59e6_015f46e14625673298ba1a9fc97b6e17_2b326ccffa4c7e4f6b9f33824b605491_bfadd92fe854d21ed884d2b5aad7dee9_71f51d2e97c025359fcca5683cd4202d_4b1518564e9cc860e66ae220fd77ecb9_9be1f8397df623df5fb509f631df03d9_13b24d9d87e8ee723bbc3a2a5d701ea5_da0ff9af9331956d7bdfb163e25aa6ea_6d5702a263966c77fcd29ef99fc581c0_cec1400f0c570cbbdbe0011e793a283e_75a0a20a722a274a74ae510602cd9d52_db168dcc3116720d1e3f6901a2dc244b_ea9d73e4c205011502a463e32bc81445_a511cde06d85571d9f70fcd6f533970b_766282c322f28b12da63cc7f30e51ca4_b530fa2d4f3532aa71e7830a41dfdcac_e3522d1853cf229cb2b94eb48e475545_984190bafd54a60830bec69a45cb8aff_c36e555ff42f1d519d35f4d3c884b160_d4b9112366f96f1b1f17f0c1fdbfa3d3_723177bac65428cfd0203b98981e97b9_d9fd719904bd03603049538a332f325e_d4f040c1b4fc09c83289d5c7f1677447_b0313df7edf428441f7859b190727266_1509e4fa99316f3274dfeb929bdac300_64038f0cbc5a4be0c1443526593db0be_12d19e1161ff13bb40c99ef1b13837a7_81d2a6602f5ef40d59d792316116e90f_634a5c9ebe35c9987c37c2b791b8f4a5_783ba26ae6c1d53184d6803c60267587_abd53780ecf3934f5bc70ebf45794e9f_bad9f9308956595833fe5e4cc0255a79_f71fd1e5657a9b6bba09bc0e4649e6eb_37bf68fe0cd16ad4d442a14eabc3725d_56fb6ba7efea39fcfd7cf52801cf8f92_064c2fb9e51f72e1fc3749bc7ea49681_55cd7a62fb61ef05c089b29c8a426d9d_b0ddcf2bcca0aa4b0c7a83586023e1cb_5419ec93b99cc262051cbc1859913a7e_62febc668a12ad0dcb39f058c4c278ee_d308aef4076be53cb1594da2e7650b68_980c0325da9d466d8b9faa1cc853a1e7_aaffaf2ac79a0eba866ebd78b3f8f3be_21238d94f4f753a872658cead50340ee_a5e80cb19ba926898d66a7fa96c83ae9_0eff43adc3a82d3aee815ce794397dce_f26afc0c6edc5b8817f15cd69a174a62_0ae1b5c0cacb37c1e3e15e88854033a4_d1ebb5d853afb15e7744956dcc11ad66_b7b519fedf020e060b0a7ee27a2490df_61029f37300951af1dc5e7ce2052e92d_5f81ef5627e8538527488e50b76faec4_c992a95f25346d7978bb3be9286cb509_15b03a210874de9ecd20a706e75d9762_ac27f73707ebfefb483ea14af5534ce8_eb0ae97e773d9d634f00f342986689b2_d9b4c632225b5e89d9aeca5aad9370fa_03007b7ddd5dda9b6a3f21d900906051_80db7b5d449d9c5ff60ac2e72a876574_fef3554f08c0494cdab7a90a011d0fa7_82f2a413977902f69d6b247eabd4c7de_29a3e31a66a6710004aa9776f9799efe_b79b4f2e3ce71b482cf05623ba7ea3ed_4441c9ce6adebd3fd2d5683e9525039b_73dfb608116aea145e16de3207b5c4cf_e0f8e1a7e01e837c6da7073d3a2ac96f_170ce267971ec1c37ed5c1a493d171df_412d1594570647152860c4f7c4d74634_ea075f510ada86dc64dac80dd90c60c5_61f3160faf8ad73e5adc074017ca1e78_1fcf25110ba7941b8abc094ff7542b47_c15e8ed7769bbb5e893265ec9edac020_15f174415886beed24f216cf2aaec09b_d1727c930e48ae8180636728d2d3fe3e_412d1594570647152860c4f7c4d74634_65bdd1980ac69849cffe0a3710563015_ea075f510ada86dc64dac80dd90c60c5_9cb46986d355602d6f9a5526d4dca568_0b1ea84b95dea19f5813a67b0fb56ecf_36F971E6E6C21EF315E2E0620E3579A3_71B5A803C5C4F2936DD2B258E274164A_02FFD95AB3F673D943449119836AF176_46E4BE5E5D5512E85F206FC6672F6263_EEAE9066EEA634B32D6114136C8805EF_EBA31FD84B237ABDDA4CD9998EB2DBBD_D95CB632FCD5D332BA74EC3C221765D7_0198D0DAAF854BACE7233835405CE7DC_FE9F4026AD17023A73EDFC8ADC290718_B789D97DA5C6BEE91ED84BBD977115C9
movq qword [ebp - 0x1f84], xmm0
call fcn.005dc570
mov eax, dword [ebp + 8]
and eax, 2
mov byte [ebp - 4], 7
mov dword [ebp - 0x2f88], eax
je 0x57a4c8
push str.2db7bff719903060c3801386cf11e5ef_a2ac5113c758f8adb174a6626d589b41_4013f2dc69bdcb5f94ecf110302c4377_b6594d10a52d70b8b4a26b7e6d3d36fd_5cc1415688add8c22473168b9961e2ed_7464fae7a08c44619861f5929685f455_e2cb7f4da319cae82bf96c3cc5465208_0097a6373e08c15d83ea7b218195f0c7_9d79bee137885b1209db7ef75bce3adc_3ef26e31fe4d343ccfdf8127951c5776_7f3dc9533e7b2a18376a5dcf107a9ac8_b74ad71d1a0ac786094e9141cc3b22a3_6f83aeaf98560cf41bcdf3f9ee97b95e_d86a29f16643ac62c7651e722b215f57_31df23668bb51628e56cfa7fbaa172c2_2c015d31dee13f16666a15799992f60d_fe5ff4912bd3ad415916fa6aa8ae59e6_015f46e14625673298ba1a9fc97b6e17_2b326ccffa4c7e4f6b9f33824b605491_bfadd92fe854d21ed884d2b5aad7dee9_71f51d2e97c025359fcca5683cd4202d_4b1518564e9cc860e66ae220fd77ecb9_9be1f8397df623df5fb509f631df03d9_13b24d9d87e8ee723bbc3a2a5d701ea5_da0ff9af9331956d7bdfb163e25aa6ea_6d5702a263966c77fcd29ef99fc581c0_cec1400f0c570cbbdbe0011e793a283e_75a0a20a722a274a74ae510602cd9d52_db168dcc3116720d1e3f6901a2dc244b_ea9d73e4c205011502a463e32bc81445_a511cde06d85571d9f70fcd6f533970b_766282c322f28b12da63cc7f30e51ca4_b530fa2d4f3532aa71e7830a41dfdcac_e3522d1853cf229cb2b94eb48e475545_984190bafd54a60830bec69a45cb8aff_c36e555ff42f1d519d35f4d3c884b160_d4b9112366f96f1b1f17f0c1fdbfa3d3_723177bac65428cfd0203b98981e97b9_d9fd719904bd03603049538a332f325e_d4f040c1b4fc09c83289d5c7f1677447_b0313df7edf428441f7859b190727266_1509e4fa99316f3274dfeb929bdac300_64038f0cbc5a4be0c1443526593db0be_12d19e1161ff13bb40c99ef1b13837a7_81d2a6602f5ef40d59d792316116e90f_634a5c9ebe35c9987c37c2b791b8f4a5_783ba26ae6c1d53184d6803c60267587_abd53780ecf3934f5bc70ebf45794e9f_bad9f9308956595833fe5e4cc0255a79_f71fd1e5657a9b6bba09bc0e4649e6eb_37bf68fe0cd16ad4d442a14eabc3725d_56fb6ba7efea39fcfd7cf52801cf8f92_064c2fb9e51f72e1fc3749bc7ea49681_55cd7a62fb61ef05c089b29c8a426d9d_b0ddcf2bcca0aa4b0c7a83586023e1cb_5419ec93b99cc262051cbc1859913a7e_62febc668a12ad0dcb39f058c4c278ee_d308aef4076be53cb1594da2e7650b68_980c0325da9d466d8b9faa1cc853a1e7_aaffaf2ac79a0eba866ebd78b3f8f3be_21238d94f4f753a872658cead50340ee_a5e80cb19ba926898d66a7fa96c83ae9_0eff43adc3a82d3aee815ce794397dce_f26afc0c6edc5b8817f15cd69a174a62_0ae1b5c0cacb37c1e3e15e88854033a4_d1ebb5d853afb15e7744956dcc11ad66_b7b519fedf020e060b0a7ee27a2490df_61029f37300951af1dc5e7ce2052e92d_5f81ef5627e8538527488e50b76faec4_c992a95f25346d7978bb3be9286cb509_15b03a210874de9ecd20a706e75d9762_ac27f73707ebfefb483ea14af5534ce8_eb0ae97e773d9d634f00f342986689b2_d9b4c632225b5e89d9aeca5aad9370fa_03007b7ddd5dda9b6a3f21d900906051_80db7b5d449d9c5ff60ac2e72a876574_fef3554f08c0494cdab7a90a011d0fa7_82f2a413977902f69d6b247eabd4c7de_29a3e31a66a6710004aa9776f9799efe_b79b4f2e3ce71b482cf05623ba7ea3ed_4441c9ce6adebd3fd2d5683e9525039b_73dfb608116aea145e16de3207b5c4cf_e0f8e1a7e01e837c6da7073d3a2ac96f_170ce267971ec1c37ed5c1a493d171df_412d1594570647152860c4f7c4d74634_ea075f510ada86dc64dac80dd90c60c5_61f3160faf8ad73e5adc074017ca1e78_1fcf25110ba7941b8abc094ff7542b47_c15e8ed7769bbb5e893265ec9edac020_15f174415886beed24f216cf2aaec09b_d1727c930e48ae8180636728d2d3fe3e_412d1594570647152860c4f7c4d74634_65bdd1980ac69849cffe0a3710563015_ea075f510ada86dc64dac80dd90c60c5_9cb46986d355602d6f9a5526d4dca568_0b1ea84b95dea19f5813a67b0fb56ecf_36F971E6E6C21EF315E2E0620E3579A3_71B5A803C5C4F2936DD2B258E274164A_02FFD95AB3F673D943449119836AF176_46E4BE5E5D5512E85F206FC6672F6263_EEAE9066EEA634B32D6114136C8805EF_EBA31FD84B237ABDDA4CD9998EB2DBBD_D95CB632FCD5D332BA74EC3C221765D7_0198D0DAAF854BACE7233835405CE7DC_FE9F4026AD17023A73EDFC8ADC290718_B789D97DA5C6BEE91ED84BBD977115C9
lea ecx, [ebp - 0x1f84]
call fcn.005dc510
push 0xfc8
lea eax, [ebp - 0x2f78]
push 0
push eax
call fcn.00420090
add esp, 0xc
lea ecx, [ebp - 0x2f78]
call fcn.005e9a70
mov byte [ebp - 4], 8
xor ebx, ebx
mov ecx, dword [ebp - 0x1f54]
xor edi, edi
mov dword [ebp - 0x2f7c], ebx
test ecx, ecx
je 0x57a747
nop word [eax + eax]
mov eax, dword [ebp + edi*4 - 0x1f50]
cmp eax, 5
jb 0x57a735
cmp eax, dword [ebp - 0x2f80]
je 0x57a735
push 0x800
push 0
push 0
push 0x800
lea ecx, [ebp - 0x1f6c]
call fcn.005db9a0
mov ecx, dword [ebp + edi*4 - 0x1f50]
mov edx, eax
call fcn.005ce4c0
test al, al
je 0x57a72f
lea eax, [ebp - 0x1f6c]
mov ecx, esi
push eax
call fcn.0057a190
test al, al
jne 0x57a72f
push 0
push 1
push 0xffffffffffffffff
push 1
push 0x624284
lea ecx, [ebp - 0x1f6c]
call fcn.005daa70
push 0
inc eax
lea ecx, [ebp - 0x1f6c]
push eax
call fcn.005dc190
push eax
lea ecx, [ebp - 0x1f60]
call fcn.005d9d20
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x1f60]
call fcn.005dc190
push eax
push str.Currently_processing:_r_n
lea ecx, [ebp - 0x1f90]
call fcn.005dc200
lea ecx, [ebp - 0x1f90]
call fcn.005dc190
push eax
xor edx, edx
mov eax, ebx
div dword [ebp - 0x1f54]
mov ecx, esi
push eax
call fcn.0057b610
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x624514
lea ecx, [ebp - 0x1f60]
call fcn.005dc190
push eax
push 0x624514
lea ecx, [ebp - 0x1f60]
call fcn.005dc200
push 0
push 1
push 1
push 0
lea ecx, [ebp - 0x1f60]
call fcn.005dc190
push eax
lea ecx, [ebp - 0x1fa8]
call fcn.005daa70
test eax, eax
jne 0x57a72f
push eax
push 1
mov ecx, esi
call fcn.005494d0
test eax, eax
jne 0x57a741
lea eax, [ebp - 0x1f9c]
push eax
lea ecx, [ebp - 0x1f6c]
call fcn.005dc190
lea edx, [ebp - 0x1f78]
mov ecx, eax
call fcn.005e65a0
add esp, 4
mov dword [ebp - 0x2f84], eax
mov ecx, esi
push 0
push 1
call fcn.005494d0
test eax, eax
jne 0x57a741
cmp dword [ebp - 0x2f84], eax
jne 0x57a6fc
mov eax, dword [ebp + 8]
test al, 4
jne 0x57a72f
cmp dword [ebp - 0x2f88], 0
je 0x57a6db
push 0
push 1
push 1
push 0
lea ecx, [ebp - 0x1f9c]
call fcn.005dc190
push eax
lea ecx, [ebp - 0x1f84]
call fcn.005daa70
test eax, eax
jne 0x57a72f
mov eax, dword [ebp + 8]
test al, 1
je 0x57a6fc
push 0
push 1
push 1
push 0
push 0x624a04
lea ecx, [ebp - 0x1f78]
call fcn.005daa70
cmp eax, 1
je 0x57a72f
push 0
push 1
mov ecx, esi
call fcn.005494d0
test eax, eax
jne 0x57a741
mov ecx, dword [ebp + edi*4 - 0x1f50]
call fcn.005cc410
push 0
movzx eax, al
mov ecx, esi
add dword [ebp - 0x2f7c], eax
push 1
call fcn.005494d0
test eax, eax
jne 0x57a741
mov ecx, dword [ebp - 0x1f54]
inc edi
add ebx, 0x64
cmp edi, ecx
jb 0x57a510
mov ebx, dword [ebp - 0x2f7c]
push ebx
lea ecx, [ebp - 0x1f78]
call fcn.005db320
push 0
push str._proccesses_with_the__Kill_all_processes__feature.
lea ecx, [ebp - 0x1f78]
call fcn.005dc190
push eax
push str.Successfully_killed
mov ecx, esi
call fcn.0057b7e0
lea ecx, [ebp - 0x1fbc]
call fcn.005dc430
lea ecx, [ebp - 0x1fc8]
call fcn.005dc430
lea ecx, [ebp - 0x1fd4]
call fcn.005dc430
lea ecx, [ebp - 0x1f84]
call fcn.005dc430
lea ecx, [ebp - 0x1fa8]
call fcn.005dc430
lea ecx, [ebp - 0x1f90]
call fcn.005dc430
lea ecx, [ebp - 0x1f60]
call fcn.005dc430
lea ecx, [ebp - 0x1f9c]
call fcn.005dc430
lea ecx, [ebp - 0x1f78]
call fcn.005dc430
lea ecx, [ebp - 0x1f6c]
call fcn.005dc430
mov eax, ebx
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.0041e1b5
mov esp, ebp
pop ebp
ret 8