Function at 0xa63800
Capabilities:
Enumerate processes
Enumerate threads

Disassembly:
mov eax, 0x4750
call fcn.00a70270
mov eax, dword [0xbd4ec0]
push ebx
push ebp
push esi
push edi
push 0x1f
lea ecx, [esp + 0x238]
xor ebx, ebx
push 0xbd4eb0
push ecx
mov dword [esp + 0x3c], ebx
mov dword [esp + 0x2368], ebx
mov dword [esp + 0x40], eax
call fcn.00a71620
mov edx, dword [esp + 0x3c]
push 0x1f
shl edx, 5
push 0xbd4eac
mov byte [esp + edx + 0x267], bl
mov eax, dword [esp + 0x44]
shl eax, 5
lea ecx, [esp + eax + 0x1248]
push ecx
call fcn.00a71620
mov edx, dword [esp + 0x48]
add esp, 0x18
shl edx, 5
mov byte [esp + edx + 0x1253], bl
mov eax, dword [esp + 0x30]
inc eax
cmp eax, 0x80
mov dword [esp + 0x30], eax
jge 0xa64830
mov ecx, dword [0xbd4ea4]
push 0x1f
mov dword [esp + eax*4 + 0x38], ecx
mov edx, dword [esp + 0x34]
shl edx, 5
push 0xbd4e98
lea eax, [esp + edx + 0x23c]
push eax
call fcn.00a71620
mov ecx, dword [esp + 0x3c]
push 0x1f
shl ecx, 5
push 0xbd4e8c
mov byte [esp + ecx + 0x267], bl
mov edx, dword [esp + 0x44]
shl edx, 5
lea eax, [esp + edx + 0x1248]
push eax
call fcn.00a71620
mov ecx, dword [esp + 0x48]
add esp, 0x18
shl ecx, 5
mov byte [esp + ecx + 0x1253], bl
mov eax, dword [esp + 0x30]
inc eax
cmp eax, 0x80
mov dword [esp + 0x30], eax
jge 0xa64830
mov edx, dword [0xbd4e84]
push 0x1f
mov dword [esp + eax*4 + 0x38], edx
mov eax, dword [esp + 0x34]
shl eax, 5
push 0xbd4e98
lea ecx, [esp + eax + 0x23c]
push ecx
call fcn.00a71620
mov edx, dword [esp + 0x3c]
push 0x1f
shl edx, 5
push 0xbd4e78
mov byte [esp + edx + 0x267], bl
mov eax, dword [esp + 0x44]
shl eax, 5
lea ecx, [esp + eax + 0x1248]
push ecx
call fcn.00a71620
mov edx, dword [esp + 0x48]
add esp, 0x18
shl edx, 5
mov byte [esp + edx + 0x1253], bl
mov eax, dword [esp + 0x30]
inc eax
cmp eax, 0x80
mov dword [esp + 0x30], eax
jge 0xa64830
mov ecx, dword [0xbd4e70]
push 0x1f
mov dword [esp + eax*4 + 0x38], ecx
mov edx, dword [esp + 0x34]
shl edx, 5
push 0xbd4e60
lea eax, [esp + edx + 0x23c]
push eax
call fcn.00a71620
mov ecx, dword [esp + 0x3c]
push 0x1f
shl ecx, 5
push 0xbd4e54
mov byte [esp + ecx + 0x267], bl
mov edx, dword [esp + 0x44]
shl edx, 5
lea eax, [esp + edx + 0x1248]
push eax
call fcn.00a71620
mov ecx, dword [esp + 0x48]
add esp, 0x18
shl ecx, 5
mov byte [esp + ecx + 0x1253], bl
mov eax, dword [esp + 0x30]
inc eax
cmp eax, 0x80
mov dword [esp + 0x30], eax
jge 0xa64830
mov edx, dword [0xbd4e4c]
push 0x1f
mov dword [esp + eax*4 + 0x38], edx
mov eax, dword [esp + 0x34]
shl eax, 5
push 0xbd4e3c
lea ecx, [esp + eax + 0x23c]
push ecx
call fcn.00a71620
mov edx, dword [esp + 0x3c]
push 0x1f
shl edx, 5
push 0xbd4e34
mov byte [esp + edx + 0x267], bl
mov eax, dword [esp + 0x44]
shl eax, 5
lea ecx, [esp + eax + 0x1248]
push ecx
call fcn.00a71620
mov edx, dword [esp + 0x48]
add esp, 0x18
shl edx, 5
mov byte [esp + edx + 0x1253], bl
mov eax, dword [esp + 0x30]
inc eax
cmp eax, 0x80
mov dword [esp + 0x30], eax
jge 0xa64830
mov ecx, dword [0xbd4e2c]
push 0x1f
mov dword [esp + eax*4 + 0x38], ecx
mov edx, dword [esp + 0x34]
shl edx, 5
push 0xbd4e20
lea eax, [esp + edx + 0x23c]
push eax
call fcn.00a71620
mov ecx, dword [esp + 0x3c]
push 0x1f
shl ecx, 5
push 0xbd4e34
mov byte [esp + ecx + 0x267], bl
mov edx, dword [esp + 0x44]
shl edx, 5
lea eax, [esp + edx + 0x1248]
push eax
call fcn.00a71620
mov ecx, dword [esp + 0x48]
add esp, 0x18
shl ecx, 5
mov byte [esp + ecx + 0x1253], bl
mov eax, dword [esp + 0x30]
inc eax
cmp eax, 0x80
mov dword [esp + 0x30], eax
jge 0xa64830
mov edx, dword [0xbd4e18]
push 0x1f
mov dword [esp + eax*4 + 0x38], edx
mov eax, dword [esp + 0x34]
shl eax, 5
push 0xbd4e0c
lea ecx, [esp + eax + 0x23c]
push ecx
call fcn.00a71620
mov edx, dword [esp + 0x3c]
push 0x1f
shl edx, 5
push 0xbd4e34
mov byte [esp + edx + 0x267], bl
mov eax, dword [esp + 0x44]
shl eax, 5
lea ecx, [esp + eax + 0x1248]
push ecx
call fcn.00a71620
mov edx, dword [esp + 0x48]
add esp, 0x18
shl edx, 5
mov byte [esp + edx + 0x1253], bl
mov eax, dword [esp + 0x30]
inc eax
cmp eax, 0x80
mov dword [esp + 0x30], eax
jge 0xa64830
mov ecx, dword [0xbd4e04]
push 0x1f
mov dword [esp + eax*4 + 0x38], ecx
mov edx, dword [esp + 0x34]
shl edx, 5
push 0xbd4df4
lea eax, [esp + edx + 0x23c]
push eax
call fcn.00a71620
mov ecx, dword [esp + 0x3c]
push 0x1f
shl ecx, 5
push 0xbd4df0
mov byte [esp + ecx + 0x267], bl
mov edx, dword [esp + 0x44]
shl edx, 5
lea eax, [esp + edx + 0x1248]
push eax
call fcn.00a71620
mov ecx, dword [esp + 0x48]
add esp, 0x18
shl ecx, 5
mov byte [esp + ecx + 0x1253], bl
mov eax, dword [esp + 0x30]
inc eax
cmp eax, 0x80
mov dword [esp + 0x30], eax
jge 0xa64830
mov edx, dword [0xbd4e04]
push 0x1f
mov dword [esp + eax*4 + 0x38], edx
mov eax, dword [esp + 0x34]
shl eax, 5
push 0xbd4ddc
lea ecx, [esp + eax + 0x23c]
push ecx
call fcn.00a71620
mov edx, dword [esp + 0x3c]
push 0x1f
shl edx, 5
push 0xbd4df0
mov byte [esp + edx + 0x267], bl
mov eax, dword [esp + 0x44]
shl eax, 5
lea ecx, [esp + eax + 0x1248]
push ecx
call fcn.00a71620
mov edx, dword [esp + 0x48]
add esp, 0x18
shl edx, 5
mov byte [esp + edx + 0x1253], bl
mov eax, dword [esp + 0x30]
inc eax
cmp eax, 0x80
mov dword [esp + 0x30], eax
jge 0xa64830
mov ecx, dword [0xbd4dd4]
push 0x1f
mov dword [esp + eax*4 + 0x38], ecx
mov edx, dword [esp + 0x34]
shl edx, 5
push 0xbd4dc4
lea eax, [esp + edx + 0x23c]
push eax
call fcn.00a71620
mov ecx, dword [esp + 0x3c]
push 0x1f
shl ecx, 5
push 0xbd4dbc
mov byte [esp + ecx + 0x267], bl
mov edx, dword [esp + 0x44]
shl edx, 5
lea eax, [esp + edx + 0x1248]
push eax
call fcn.00a71620
mov ecx, dword [esp + 0x48]
add esp, 0x18
shl ecx, 5
mov byte [esp + ecx + 0x1253], bl
mov eax, dword [esp + 0x30]
inc eax
cmp eax, 0x80
mov dword [esp + 0x30], eax
jge 0xa64830
mov edx, dword [0xbd4db4]
push 0x1f
mov dword [esp + eax*4 + 0x38], edx
mov eax, dword [esp + 0x34]
shl eax, 5
push 0xbd4da4
lea ecx, [esp + eax + 0x23c]
push ecx
call fcn.00a71620
mov edx, dword [esp + 0x3c]
push 0x1f
shl edx, 5
push 0xbd4d98
mov byte [esp + edx + 0x267], bl
mov eax, dword [esp + 0x44]
shl eax, 5
lea ecx, [esp + eax + 0x1248]
push ecx
call fcn.00a71620
mov edx, dword [esp + 0x48]
add esp, 0x18
shl edx, 5
mov byte [esp + edx + 0x1253], bl
mov eax, dword [esp + 0x30]
inc eax
cmp eax, 0x80
mov dword [esp + 0x30], eax
jge 0xa64830
mov ecx, dword [0xbd4d90]
push 0x1f
mov dword [esp + eax*4 + 0x38], ecx
mov edx, dword [esp + 0x34]
shl edx, 5
push 0xbd4d84
lea eax, [esp + edx + 0x23c]
push eax
call fcn.00a71620
mov ecx, dword [esp + 0x3c]
push 0x1f
shl ecx, 5
push 0xbd4d78
mov byte [esp + ecx + 0x267], bl
mov edx, dword [esp + 0x44]
shl edx, 5
lea eax, [esp + edx + 0x1248]
push eax
call fcn.00a71620
mov ecx, dword [esp + 0x48]
add esp, 0x18
shl ecx, 5
mov byte [esp + ecx + 0x1253], bl
mov eax, dword [esp + 0x30]
inc eax
cmp eax, 0x80
mov dword [esp + 0x30], eax
jge 0xa64830
mov edx, dword [0xbd4d70]
push 0x1f
mov dword [esp + eax*4 + 0x38], edx
mov eax, dword [esp + 0x34]
shl eax, 5
push 0xbd4d64
lea ecx, [esp + eax + 0x23c]
push ecx
call fcn.00a71620
mov edx, dword [esp + 0x3c]
push 0x1f
shl edx, 5
push 0xbd4d58
mov byte [esp + edx + 0x267], bl
mov eax, dword [esp + 0x44]
shl eax, 5
lea ecx, [esp + eax + 0x1248]
push ecx
call fcn.00a71620
mov edx, dword [esp + 0x48]
add esp, 0x18
shl edx, 5
mov byte [esp + edx + 0x1253], bl
mov eax, dword [esp + 0x30]
inc eax
cmp eax, 0x80
mov dword [esp + 0x30], eax
jge 0xa64830
mov ecx, dword [0xbd4d50]
push 0x1f
mov dword [esp + eax*4 + 0x38], ecx
mov edx, dword [esp + 0x34]
shl edx, 5
push 0xbd4e98
lea eax, [esp + edx + 0x23c]
push eax
call fcn.00a71620
mov ecx, dword [esp + 0x3c]
push 0x1f
shl ecx, 5
push 0xbd4d44
mov byte [esp + ecx + 0x267], bl
mov edx, dword [esp + 0x44]
shl edx, 5
lea eax, [esp + edx + 0x1248]
push eax
call fcn.00a71620
mov ecx, dword [esp + 0x48]
add esp, 0x18
shl ecx, 5
mov byte [esp + ecx + 0x1253], bl
mov eax, dword [esp + 0x30]
inc eax
cmp eax, 0x80
mov dword [esp + 0x30], eax
jge 0xa64830
mov edx, dword [0xbd4d3c]
push 0x1f
mov dword [esp + eax*4 + 0x38], edx
mov eax, dword [esp + 0x34]
shl eax, 5
push 0xbd4d30
lea ecx, [esp + eax + 0x23c]
push ecx
call fcn.00a71620
mov edx, dword [esp + 0x3c]
push 0x1f
shl edx, 5
push 0xbd4d24
mov byte [esp + edx + 0x267], bl
mov eax, dword [esp + 0x44]
shl eax, 5
lea ecx, [esp + eax + 0x1248]
push ecx
call fcn.00a71620
mov edx, dword [esp + 0x48]
add esp, 0x18
shl edx, 5
mov byte [esp + edx + 0x1253], bl
mov eax, dword [esp + 0x30]
inc eax
cmp eax, 0x80
mov dword [esp + 0x30], eax
jge 0xa64830
mov ecx, dword [0xbd4d1c]
push 0x1f
mov dword [esp + eax*4 + 0x38], ecx
mov edx, dword [esp + 0x34]
shl edx, 5
push 0xbd4e98
lea eax, [esp + edx + 0x23c]
push eax
call fcn.00a71620
mov ecx, dword [esp + 0x3c]
push 0x1f
shl ecx, 5
push 0xbd4d10
mov byte [esp + ecx + 0x267], bl
mov edx, dword [esp + 0x44]
shl edx, 5
lea eax, [esp + edx + 0x1248]
push eax
call fcn.00a71620
mov ecx, dword [esp + 0x48]
add esp, 0x18
shl ecx, 5
mov byte [esp + ecx + 0x1253], bl
mov eax, dword [esp + 0x30]
inc eax
cmp eax, 0x80
mov dword [esp + 0x30], eax
jge 0xa64830
mov edx, dword [0xbd4d08]
push 0x1f
mov dword [esp + eax*4 + 0x38], edx
mov eax, dword [esp + 0x34]
shl eax, 5
push 0xbd4cfc
lea ecx, [esp + eax + 0x23c]
push ecx
call fcn.00a71620
mov edx, dword [esp + 0x3c]
push 0x1f
shl edx, 5
push 0xbd4cf4
mov byte [esp + edx + 0x267], bl
mov eax, dword [esp + 0x44]
shl eax, 5
lea ecx, [esp + eax + 0x1248]
push ecx
call fcn.00a71620
mov edx, dword [esp + 0x48]
add esp, 0x18
shl edx, 5
mov byte [esp + edx + 0x1253], bl
mov eax, dword [esp + 0x30]
inc eax
cmp eax, 0x80
mov dword [esp + 0x30], eax
jge 0xa64830
mov ecx, dword [0xbd4cec]
push 0x1f
mov dword [esp + eax*4 + 0x38], ecx
mov edx, dword [esp + 0x34]
shl edx, 5
push 0xbd4ce0
lea eax, [esp + edx + 0x23c]
push eax
call fcn.00a71620
mov ecx, dword [esp + 0x3c]
push 0x1f
shl ecx, 5
push 0xbd4cf4
mov byte [esp + ecx + 0x267], bl
mov edx, dword [esp + 0x44]
shl edx, 5
lea eax, [esp + edx + 0x1248]
push eax
call fcn.00a71620
mov ecx, dword [esp + 0x48]
add esp, 0x18
shl ecx, 5
mov byte [esp + ecx + 0x1253], bl
mov eax, dword [esp + 0x30]
inc eax
cmp eax, 0x80
mov dword [esp + 0x30], eax
jge 0xa64830
mov edx, dword [0xbd4cd8]
push 0x1f
mov dword [esp + eax*4 + 0x38], edx
mov eax, dword [esp + 0x34]
shl eax, 5
push 0xbd4ccc
lea ecx, [esp + eax + 0x23c]
push ecx
call fcn.00a71620
mov edx, dword [esp + 0x3c]
push 0x1f
shl edx, 5
push 0xbd4cf4
mov byte [esp + edx + 0x267], bl
mov eax, dword [esp + 0x44]
shl eax, 5
lea ecx, [esp + eax + 0x1248]
push ecx
call fcn.00a71620
mov edx, dword [esp + 0x48]
add esp, 0x18
shl edx, 5
mov byte [esp + edx + 0x1253], bl
mov eax, dword [esp + 0x30]
inc eax
cmp eax, 0x80
mov dword [esp + 0x30], eax
jge 0xa64830
mov ecx, dword [0xbd4cc4]
push 0x1f
mov dword [esp + eax*4 + 0x38], ecx
mov edx, dword [esp + 0x34]
shl edx, 5
push 0xbd4cb4
lea eax, [esp + edx + 0x23c]
push eax
call fcn.00a71620
mov ecx, dword [esp + 0x3c]
push 0x1f
shl ecx, 5
push 0xbd4cac
mov byte [esp + ecx + 0x267], bl
mov edx, dword [esp + 0x44]
shl edx, 5
lea eax, [esp + edx + 0x1248]
push eax
call fcn.00a71620
mov ecx, dword [esp + 0x48]
add esp, 0x18
shl ecx, 5
mov byte [esp + ecx + 0x1253], bl
mov eax, dword [esp + 0x30]
inc eax
cmp eax, 0x80
mov dword [esp + 0x30], eax
jge 0xa64830
mov edx, dword [0xbd4ca4]
push 0x1f
mov dword [esp + eax*4 + 0x38], edx
mov eax, dword [esp + 0x34]
shl eax, 5
push 0xbd4c98
lea ecx, [esp + eax + 0x23c]
push ecx
call fcn.00a71620
mov edx, dword [esp + 0x3c]
push 0x1f
shl edx, 5
push 0xbd461c
mov byte [esp + edx + 0x267], bl
mov eax, dword [esp + 0x44]
shl eax, 5
lea ecx, [esp + eax + 0x1248]
push ecx
call fcn.00a71620
mov edx, dword [esp + 0x48]
add esp, 0x18
shl edx, 5
mov byte [esp + edx + 0x1253], bl
mov eax, dword [esp + 0x30]
inc eax
cmp eax, 0x80
mov dword [esp + 0x30], eax
jge 0xa64830
mov ecx, dword [0xbd4c90]
push 0x1f
mov dword [esp + eax*4 + 0x38], ecx
mov edx, dword [esp + 0x34]
shl edx, 5
push 0xbd4c84
lea eax, [esp + edx + 0x23c]
push eax
call fcn.00a71620
mov ecx, dword [esp + 0x3c]
push 0x1f
shl ecx, 5
push 0xbd461c
mov byte [esp + ecx + 0x267], bl
mov edx, dword [esp + 0x44]
shl edx, 5
lea eax, [esp + edx + 0x1248]
push eax
call fcn.00a71620
mov ecx, dword [esp + 0x48]
add esp, 0x18
shl ecx, 5
mov byte [esp + ecx + 0x1253], bl
mov eax, dword [esp + 0x30]
inc eax
cmp eax, 0x80
mov dword [esp + 0x30], eax
jge 0xa64830
mov edx, dword [0xbd4c7c]
push 0x1f
mov dword [esp + eax*4 + 0x38], edx
mov eax, dword [esp + 0x34]
shl eax, 5
push 0xbd4c70
lea ecx, [esp + eax + 0x23c]
push ecx
call fcn.00a71620
mov edx, dword [esp + 0x3c]
push 0x1f
shl edx, 5
push 0xbd461c
mov byte [esp + edx + 0x267], bl
mov eax, dword [esp + 0x44]
shl eax, 5
lea ecx, [esp + eax + 0x1248]
push ecx
call fcn.00a71620
mov edx, dword [esp + 0x48]
add esp, 0x18
shl edx, 5
mov byte [esp + edx + 0x1253], bl
mov eax, dword [esp + 0x30]
inc eax
cmp eax, 0x80
mov dword [esp + 0x30], eax
jge 0xa64830
mov ecx, dword [0xbd4c68]
push 0x1f
mov dword [esp + eax*4 + 0x38], ecx
mov edx, dword [esp + 0x34]
shl edx, 5
push 0xbd4c5c
lea eax, [esp + edx + 0x23c]
push eax
call fcn.00a71620
mov ecx, dword [esp + 0x3c]
push 0x1f
shl ecx, 5
push 0xbd461c
mov byte [esp + ecx + 0x267], bl
mov edx, dword [esp + 0x44]
shl edx, 5
lea eax, [esp + edx + 0x1248]
push eax
call fcn.00a71620
mov ecx, dword [esp + 0x48]
add esp, 0x18
shl ecx, 5
mov byte [esp + ecx + 0x1253], bl
mov eax, dword [esp + 0x30]
inc eax
cmp eax, 0x80
mov dword [esp + 0x30], eax
jge 0xa64830
mov edx, dword [0xbd4c54]
push 0x1f
mov dword [esp + eax*4 + 0x38], edx
mov eax, dword [esp + 0x34]
shl eax, 5
push 0xbd4c48
lea ecx, [esp + eax + 0x23c]
push ecx
call fcn.00a71620
mov edx, dword [esp + 0x3c]
push 0x1f
shl edx, 5
push 0xbd461c
mov byte [esp + edx + 0x267], bl
mov eax, dword [esp + 0x44]
shl eax, 5
lea ecx, [esp + eax + 0x1248]
push ecx
call fcn.00a71620
mov edx, dword [esp + 0x48]
add esp, 0x18
shl edx, 5
mov byte [esp + edx + 0x1253], bl
mov eax, dword [esp + 0x30]
inc eax
cmp eax, 0x80
mov dword [esp + 0x30], eax
jge 0xa64830
mov ecx, dword [0xbd4c40]
push 0x1f
mov dword [esp + eax*4 + 0x38], ecx
mov edx, dword [esp + 0x34]
shl edx, 5
push 0xbd4c30
lea eax, [esp + edx + 0x23c]
push eax
call fcn.00a71620
mov ecx, dword [esp + 0x3c]
push 0x1f
shl ecx, 5
push 0xbd461c
mov byte [esp + ecx + 0x267], bl
mov edx, dword [esp + 0x44]
shl edx, 5
lea eax, [esp + edx + 0x1248]
push eax
call fcn.00a71620
mov ecx, dword [esp + 0x48]
add esp, 0x18
shl ecx, 5
mov byte [esp + ecx + 0x1253], bl
mov eax, dword [esp + 0x30]
inc eax
cmp eax, 0x80
mov dword [esp + 0x30], eax
jge 0xa64830
mov edx, dword [0xbd4c40]
push 0x1f
mov dword [esp + eax*4 + 0x38], edx
mov eax, dword [esp + 0x34]
shl eax, 5
push 0xbd4c20
lea ecx, [esp + eax + 0x23c]
push ecx
call fcn.00a71620
mov edx, dword [esp + 0x3c]
push 0x1f
shl edx, 5
push 0xbd461c
mov byte [esp + edx + 0x267], bl
mov eax, dword [esp + 0x44]
shl eax, 5
lea ecx, [esp + eax + 0x1248]
push ecx
call fcn.00a71620
mov edx, dword [esp + 0x48]
add esp, 0x18
shl edx, 5
mov byte [esp + edx + 0x1253], bl
mov eax, dword [esp + 0x30]
inc eax
cmp eax, 0x80
mov dword [esp + 0x30], eax
jge 0xa64830
mov ecx, dword [0xbd4c40]
push 0x1f
mov dword [esp + eax*4 + 0x38], ecx
mov edx, dword [esp + 0x34]
shl edx, 5
push 0xbd4c14
lea eax, [esp + edx + 0x23c]
push eax
call fcn.00a71620
mov ecx, dword [esp + 0x3c]
push 0x1f
shl ecx, 5
push 0xbd461c
mov byte [esp + ecx + 0x267], bl
mov edx, dword [esp + 0x44]
shl edx, 5
lea eax, [esp + edx + 0x1248]
push eax
call fcn.00a71620
mov ecx, dword [esp + 0x48]
add esp, 0x18
shl ecx, 5
mov byte [esp + ecx + 0x1253], bl
mov eax, dword [esp + 0x30]
inc eax
cmp eax, 0x80
mov dword [esp + 0x30], eax
jge 0xa64830
mov edx, dword [0xbd4c40]
push 0x1f
mov dword [esp + eax*4 + 0x38], edx
mov eax, dword [esp + 0x34]
shl eax, 5
push 0xbd4c08
lea ecx, [esp + eax + 0x23c]
push ecx
call fcn.00a71620
mov edx, dword [esp + 0x3c]
push 0x1f
shl edx, 5
push 0xbd461c
mov byte [esp + edx + 0x267], bl
mov eax, dword [esp + 0x44]
shl eax, 5
lea ecx, [esp + eax + 0x1248]
push ecx
call fcn.00a71620
mov edx, dword [esp + 0x48]
add esp, 0x18
shl edx, 5
mov byte [esp + edx + 0x1253], bl
mov eax, dword [esp + 0x30]
inc eax
cmp eax, 0x80
mov dword [esp + 0x30], eax
jge 0xa64830
mov ecx, dword [0xbd4c00]
push 0x1f
mov dword [esp + eax*4 + 0x38], ecx
mov edx, dword [esp + 0x34]
shl edx, 5
push 0xbd4bf4
lea eax, [esp + edx + 0x23c]
push eax
call fcn.00a71620
mov ecx, dword [esp + 0x3c]
push 0x1f
shl ecx, 5
push 0xbd461c
mov byte [esp + ecx + 0x267], bl
mov edx, dword [esp + 0x44]
shl edx, 5
lea eax, [esp + edx + 0x1248]
push eax
call fcn.00a71620
mov ecx, dword [esp + 0x48]
add esp, 0x18
shl ecx, 5
mov byte [esp + ecx + 0x1253], bl
mov eax, dword [esp + 0x30]
inc eax
cmp eax, 0x80
mov dword [esp + 0x30], eax
jge 0xa64830
mov edx, dword [0xbd4bec]
push 0x1f
mov dword [esp + eax*4 + 0x38], edx
mov eax, dword [esp + 0x34]
shl eax, 5
push 0xbd4be0
lea ecx, [esp + eax + 0x23c]
push ecx
call fcn.00a71620
mov edx, dword [esp + 0x3c]
push 0x1f
shl edx, 5
push 0xbd4bd0
mov byte [esp + edx + 0x267], bl
mov eax, dword [esp + 0x44]
shl eax, 5
lea ecx, [esp + eax + 0x1248]
push ecx
call fcn.00a71620
mov edx, dword [esp + 0x48]
add esp, 0x18
shl edx, 5
mov byte [esp + edx + 0x1253], bl
mov eax, dword [esp + 0x30]
inc eax
cmp eax, 0x80
mov dword [esp + 0x30], eax
jge 0xa64830
mov ecx, dword [0xbd4bec]
push 0x1f
mov dword [esp + eax*4 + 0x38], ecx
mov edx, dword [esp + 0x34]
shl edx, 5
push 0xbd4be0
lea eax, [esp + edx + 0x23c]
push eax
call fcn.00a71620
mov ecx, dword [esp + 0x3c]
push 0x1f
shl ecx, 5
push 0xbdd7e4
mov byte [esp + ecx + 0x267], bl
mov edx, dword [esp + 0x44]
shl edx, 5
lea eax, [esp + edx + 0x1248]
push eax
call fcn.00a71620
mov ecx, dword [esp + 0x48]
add esp, 0x18
shl ecx, 5
mov byte [esp + ecx + 0x1253], bl
mov eax, dword [esp + 0x30]
inc eax
cmp eax, 0x80
mov dword [esp + 0x30], eax
jge 0xa64830
mov edx, dword [0xbd4bc8]
push 0x1f
mov dword [esp + eax*4 + 0x38], edx
mov eax, dword [esp + 0x34]
shl eax, 5
push 0xbd4bbc
lea ecx, [esp + eax + 0x23c]
push ecx
call fcn.00a71620
mov edx, dword [esp + 0x3c]
push 0x1f
shl edx, 5
push 0xbd4bb4
mov byte [esp + edx + 0x267], bl
mov eax, dword [esp + 0x44]
shl eax, 5
lea ecx, [esp + eax + 0x1248]
push ecx
call fcn.00a71620
mov edx, dword [esp + 0x48]
add esp, 0x18
shl edx, 5
mov byte [esp + edx + 0x1253], bl
mov eax, dword [esp + 0x30]
inc eax
cmp eax, 0x80
mov dword [esp + 0x30], eax
jge 0xa64830
mov ecx, dword [0xbd4bac]
push 0x1f
mov dword [esp + eax*4 + 0x38], ecx
mov edx, dword [esp + 0x34]
shl edx, 5
push 0xbd4ba0
lea eax, [esp + edx + 0x23c]
push eax
call fcn.00a71620
mov ecx, dword [esp + 0x3c]
push 0x1f
shl ecx, 5
push 0xbd4b98
mov byte [esp + ecx + 0x267], bl
mov edx, dword [esp + 0x44]
shl edx, 5
lea eax, [esp + edx + 0x1248]
push eax
call fcn.00a71620
mov ecx, dword [esp + 0x48]
add esp, 0x18
shl ecx, 5
mov byte [esp + ecx + 0x1253], bl
mov eax, dword [esp + 0x30]
inc eax
cmp eax, 0x80
mov dword [esp + 0x30], eax
jge 0xa64830
mov edx, dword [0xbd4b90]
push 0x1f
mov dword [esp + eax*4 + 0x38], edx
mov eax, dword [esp + 0x34]
shl eax, 5
push 0xbd4e98
lea ecx, [esp + eax + 0x23c]
push ecx
call fcn.00a71620
mov edx, dword [esp + 0x3c]
push 0x1f
shl edx, 5
push 0xbd4b88
mov byte [esp + edx + 0x267], bl
mov eax, dword [esp + 0x44]
shl eax, 5
lea ecx, [esp + eax + 0x1248]
push ecx
call fcn.00a71620
mov edx, dword [esp + 0x48]
add esp, 0x18
shl edx, 5
mov byte [esp + edx + 0x1253], bl
mov eax, dword [esp + 0x30]
inc eax
cmp eax, 0x80
mov dword [esp + 0x30], eax
jge 0xa64830
mov ecx, dword [0xbd4b80]
push 0x1f
mov dword [esp + eax*4 + 0x38], ecx
mov edx, dword [esp + 0x34]
shl edx, 5
push 0xbd4e98
lea eax, [esp + edx + 0x23c]
push eax
call fcn.00a71620
mov ecx, dword [esp + 0x3c]
push 0x1f
shl ecx, 5
push 0xbd4b78
mov byte [esp + ecx + 0x267], bl
mov edx, dword [esp + 0x44]
shl edx, 5
lea eax, [esp + edx + 0x1248]
push eax
call fcn.00a71620
mov ecx, dword [esp + 0x48]
add esp, 0x18
shl ecx, 5
mov byte [esp + ecx + 0x1253], bl
mov eax, dword [esp + 0x30]
inc eax
mov dword [esp + 0x30], eax
push 0xbd4b70
push 0xbd4e98
push 0xbd4b68
lea ecx, [esp + 0x3c]
call fcn.00a64ff0
push 0xbd4b60
push 0xbd4e98
push 0xbd4b58
lea ecx, [esp + 0x3c]
call fcn.00a64ff0
push 0xbd4b44
push 0xbd4e98
push 0xbd4b3c
lea ecx, [esp + 0x3c]
call fcn.00a64ff0
push 0xbd4b30
push 0xbd4b20
push 0xbd4b18
lea ecx, [esp + 0x3c]
call fcn.00a64ff0
push 0xbd4b10
push 0xbd4b08
push 0xbd4b00
lea ecx, [esp + 0x3c]
call fcn.00a64ff0
push 0xbd4af4
push 0xbd4ae4
push 0xbd4adc
lea ecx, [esp + 0x3c]
call fcn.00a64ff0
push 0xbd4af4
push 0xbd4acc
push 0xbd4ac4
lea ecx, [esp + 0x3c]
call fcn.00a64ff0
push 0xbd4abc
push 0xbd4acc
push 0xbd4ab4
lea ecx, [esp + 0x3c]
call fcn.00a64ff0
push 0xbd4aa8
push 0xbd4a98
push 0xbd4a90
lea ecx, [esp + 0x3c]
call fcn.00a64ff0
push 0xbd4a84
push 0xbd4a74
push 0xbd4a6c
lea ecx, [esp + 0x3c]
call fcn.00a64ff0
push 0xbd4a60
push 0xbd4a50
push 0xbd4a48
lea ecx, [esp + 0x3c]
call fcn.00a64ff0
push 0xbd4a3c
push 0xbd4a2c
push 0xbd4a24
lea ecx, [esp + 0x3c]
call fcn.00a64ff0
push 0xbd4a18
push 0xbd4a2c
push 0xbd4a10
lea ecx, [esp + 0x3c]
call fcn.00a64ff0
push 0xbd4a04
push 0xbd4a2c
push 0xbd49fc
lea ecx, [esp + 0x3c]
call fcn.00a64ff0
push 0xbd49f0
push 0xbd4a2c
push 0xbd49e8
lea ecx, [esp + 0x3c]
call fcn.00a64ff0
push 0xbd49dc
push 0xbd49d4
push 0xbd49cc
lea ecx, [esp + 0x3c]
call fcn.00a64ff0
push 0xbd49c0
push 0xbd49b4
push 0xbd49ac
lea ecx, [esp + 0x3c]
call fcn.00a64ff0
push 0xbd49a0
push 0xbd4990
push 0xbd4988
lea ecx, [esp + 0x3c]
call fcn.00a64ff0
push 0xbd4980
push 0xbd4990
push 0xbd4978
lea ecx, [esp + 0x3c]
call fcn.00a64ff0
push 0xbd496c
push 0xbd4990
push 0xbd4964
lea ecx, [esp + 0x3c]
call fcn.00a64ff0
push 0xbd4948
push 0xbd4990
push 0xbd4940
lea ecx, [esp + 0x3c]
call fcn.00a64ff0
push 0xbd4930
push 0xbd4990
push 0xbd4928
lea ecx, [esp + 0x3c]
call fcn.00a64ff0
push 0xbdd7e4
push 0xbd4914
push 0xbd490c
lea ecx, [esp + 0x3c]
call fcn.00a64ff0
push 0xbd4930
push 0xbd4914
push 0xbd490c
lea ecx, [esp + 0x3c]
call fcn.00a64ff0
push 0xbd4948
push 0xbd4914
push 0xbd490c
lea ecx, [esp + 0x3c]
call fcn.00a64ff0
push 0xbd4904
push 0xbd48f8
push 0xbd490c
lea ecx, [esp + 0x3c]
call fcn.00a64ff0
push 0xbdd7e4
push 0xbd48f8
push 0xbd490c
lea ecx, [esp + 0x3c]
call fcn.00a64ff0
push 0xbd48ec
push 0xbd48dc
push 0xbd490c
lea ecx, [esp + 0x3c]
call fcn.00a64ff0
push 0xbd4930
push 0xbd48dc
push 0xbd490c
lea ecx, [esp + 0x3c]
call fcn.00a64ff0
push 0xbdd7e4
push 0xbd48dc
push 0xbd490c
lea ecx, [esp + 0x3c]
call fcn.00a64ff0
push 0xbd48d0
push 0xbd48c4
push 0xbd490c
lea ecx, [esp + 0x3c]
call fcn.00a64ff0
push 0xbd48c0
push 0xbd48c4
push 0xbd490c
lea ecx, [esp + 0x3c]
call fcn.00a64ff0
push 0xbd4930
push 0xbd48b0
push 0xbd490c
lea ecx, [esp + 0x3c]
call fcn.00a64ff0
push 0xbd48a8
push 0xbd489c
push 0xbd4894
lea ecx, [esp + 0x3c]
call fcn.00a64ff0
push 0xbd488c
push 0xbd4880
push 0xbd4878
lea ecx, [esp + 0x3c]
call fcn.00a64ff0
push 0xbd4870
push 0xbd4864
push 0xbd485c
lea ecx, [esp + 0x3c]
call fcn.00a64ff0
push 0xbd48a8
push 0xbd4850
push 0xbd4894
lea ecx, [esp + 0x3c]
call fcn.00a64ff0
push 0xbd4930
push 0xbd4850
push 0xbd4894
lea ecx, [esp + 0x3c]
call fcn.00a64ff0
push 0xbd4848
push 0xbd4840
push 0xbd4838
lea ecx, [esp + 0x3c]
call fcn.00a64ff0
push 0xbd4848
push 0xbd482c
push 0xbd4824
lea ecx, [esp + 0x3c]
call fcn.00a64ff0
push 0xbd4820
push 0xbd4e98
push 0xbd4818
lea ecx, [esp + 0x3c]
call fcn.00a64ff0
push 0xbd480c
push 0xbd4800
push 0xbd47f8
lea ecx, [esp + 0x3c]
call fcn.00a64ff0
push 0xbd47f0
push 0xbd47e0
push 0xbd47d8
lea ecx, [esp + 0x3c]
call fcn.00a64ff0
push 0xbd47d0
push 0xbd47c4
push 0xbd47bc
lea ecx, [esp + 0x3c]
call fcn.00a64ff0
push 0xbd47b4
push 0xbd47c4
push 0xbd47ac
lea ecx, [esp + 0x3c]
call fcn.00a64ff0
push 0xbd47a4
push 0xbd4790
push 0xbd4788
lea ecx, [esp + 0x3c]
call fcn.00a64ff0
push 0xbd477c
push 0xbd4770
push 0xbd4768
lea ecx, [esp + 0x3c]
call fcn.00a64ff0
push 0xbd4758
push 0xbd4744
push 0xbd473c
lea ecx, [esp + 0x3c]
call fcn.00a64ff0
push 0xbd49dc
push 0xbd472c
push 0xbd4724
lea ecx, [esp + 0x3c]
call fcn.00a64ff0
push 0xbd4870
push 0xbd4714
push 0xbd470c
lea ecx, [esp + 0x3c]
call fcn.00a64ff0
push 0xbd4704
push 0xbd46f8
push 0xbd470c
lea ecx, [esp + 0x3c]
call fcn.00a64ff0
push 0xbd46e4
push 0xbd46d4
push 0xbd470c
lea ecx, [esp + 0x3c]
call fcn.00a64ff0
push 0xbd46c8
push 0xbd46d4
push 0xbd470c
lea ecx, [esp + 0x3c]
call fcn.00a64ff0
push 0xbd4930
push 0xbd4800
push 0xbd470c
lea ecx, [esp + 0x3c]
call fcn.00a64ff0
push 0xbd46b4
push 0xbd46a8
push 0xbd470c
lea ecx, [esp + 0x3c]
call fcn.00a64ff0
push 0xbd46e4
push 0xbd4694
push 0xbd470c
lea ecx, [esp + 0x3c]
call fcn.00a64ff0
push 0xbd4948
push 0xbd4680
push 0xbd470c
lea ecx, [esp + 0x3c]
call fcn.00a64ff0
push 0xbd48c0
push 0xbd4694
push 0xbd470c
lea ecx, [esp + 0x3c]
call fcn.00a64ff0
push 0xbd46e4
push 0xbd4670
push 0xbd470c
lea ecx, [esp + 0x3c]
call fcn.00a64ff0
push 0xbd4650
push 0xbd4648
push 0xbd470c
lea ecx, [esp + 0x3c]
call fcn.00a64ff0
push 0xbd463c
push 0xbd462c
push 0xbd470c
lea ecx, [esp + 0x3c]
call fcn.00a64ff0
push 0xbd4948
push 0xbd462c
push 0xbd470c
lea ecx, [esp + 0x3c]
call fcn.00a64ff0
mov ecx, 0x49
xor eax, eax
lea edi, [esp + 0x2238]
mov dword [esp + 0x2234], ebx
push ebx
push 2
rep stosd dword es:[edi], eax
call sub.kernel32.dll_CreateToolhelp32Snapshot
mov esi, eax
cmp esi, 0xffffffff
je 0xa64fd7
lea edx, [esp + 0x2234]
mov dword [esp + 0x2234], 0x128
push edx
push esi
call sub.kernel32.dll_Process32First
test eax, eax
je 0xa64fd7
lea eax, [esp + 0x2258]
push 0x5c
push eax
call fcn.00a72c71
mov ebp, eax
add esp, 8
cmp ebp, ebx
jne 0xa64e6c
lea ebp, [esp + 0x2258]
jmp 0xa64e6d
inc ebp
push ebp
call fcn.00a7321d
mov eax, dword [esp + 0x34]
add esp, 4
xor edi, edi
cmp eax, ebx
jle 0xa64ec0
lea ecx, [esp + 0x234]
mov dword [esp + 0x10], ecx
lea edx, [esp + 0x1234]
test edx, edx
jne 0xa64eac
mov eax, dword [esp + 0x10]
push ebp
push eax
call fcn.00a72bc2
add esp, 8
test eax, eax
je 0xa64f30
mov ecx, dword [esp + 0x10]
mov eax, dword [esp + 0x30]
inc edi
add ecx, 0x20
cmp edi, eax
mov dword [esp + 0x10], ecx
jl 0xa64e8b
mov eax, dword [esp + 0x235c]
cmp eax, 0x100
jge 0xa64f19
mov ecx, dword [esp + 0x223c]
push 0x1f
mov dword [esp + eax*4 + 0x2364], ecx
mov edx, dword [esp + 0x2360]
shl edx, 5
push ebp
lea eax, [esp + edx + 0x2768]
push eax
call fcn.00a71620
mov ecx, dword [esp + 0x2368]
add esp, 0xc
shl ecx, 5
mov byte [esp + ecx + 0x277f], bl
mov eax, dword [esp + 0x235c]
inc eax
mov dword [esp + 0x235c], eax
lea edx, [esp + 0x2234]
push edx
push esi
call sub.kernel32.dll_Process32Next
test eax, eax
je 0xa64f3f
jmp 0xa64e4b
mov eax, dword [esp + edi*4 + 0x34]
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x4750
ret
mov ebp, dword [sym.imp.kernel32.dll_CloseHandle]
push esi
call ebp
mov ecx, 6
xor eax, eax
lea edi, [esp + 0x18]
mov dword [esp + 0x14], ebx
push ebx
push 4
rep stosd dword es:[edi], eax
call sub.kernel32.dll_CreateToolhelp32Snapshot
mov esi, eax
cmp esi, 0xffffffff
je 0xa64fd7
lea eax, [esp + 0x14]
mov dword [esp + 0x14], 0x1c
push eax
push esi
call sub.kernel32.dll_Thread32First
test eax, eax
je 0xa64fd4
mov edi, dword [sym.imp.user32.dll_EnumThreadWindows]
cmp dword [esp + 0x1c], ebx
je 0xa64fc5
mov ecx, dword [esp + 0x20]
push ecx
lea ecx, [esp + 0x2360]
call fcn.00a65060
cmp eax, ebx
mov dword [0xbe6618], eax
je 0xa64fc5
mov eax, dword [esp + 0x1c]
lea edx, [esp + 0x30]
push edx
push 0xa63710
push eax
mov dword [0xbe661c], ebx
call edi
mov eax, dword [0xbe661c]
cmp eax, ebx
jne 0xa64fd9
lea ecx, [esp + 0x14]
push ecx
push esi
call sub.kernel32.dll_Thread32Next
test eax, eax
jne 0xa64f85
push esi
call ebp
xor eax, eax
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x4750
ret