Function at 0x4549c0
Capabilities:
Contain obfuscated stackstrings
Enumerate processes

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x524849
mov eax, dword fs:[0]
push eax
sub esp, 0x6e0
mov eax, dword [0x595be0]
xor eax, ebp
mov dword [ebp - 0x10], eax
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x450], ecx
mov eax, dword [ebp + 8]
push eax
lea ecx, [ebp - 0x4e8]
call fcn.00428940
mov dword [ebp - 4], 0
push str.Started_for:
lea ecx, [ebp - 0x4e0]
call fcn.004289c0
mov byte [ebp - 4], 1
push 0x566c84
lea ecx, [ebp - 0x4d4]
call fcn.00428940
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x508]
call fcn.0042a230
mov dword [ebp - 0x598], eax
mov ecx, dword [ebp - 0x598]
mov dword [ebp - 0x6e4], ecx
mov byte [ebp - 4], 3
lea edx, [ebp - 0x4e0]
push edx
mov eax, dword [ebp - 0x6e4]
push eax
lea ecx, [ebp - 0x5f8]
push ecx
call fcn.0042a940
add esp, 0xc
mov dword [ebp - 0x6ec], eax
mov edx, dword [ebp - 0x6ec]
mov dword [ebp - 0x5f0], edx
mov byte [ebp - 4], 4
lea eax, [ebp - 0x4e8]
push eax
mov ecx, dword [ebp - 0x5f0]
push ecx
lea edx, [ebp - 0x500]
push edx
call fcn.0042a940
add esp, 0xc
mov dword [ebp - 0x4f8], eax
mov eax, dword [ebp - 0x4f8]
mov dword [ebp - 0x670], eax
mov byte [ebp - 4], 5
push 0
mov ecx, dword [ebp - 0x670]
push ecx
lea edx, [ebp - 0x4d4]
push edx
mov ecx, dword [ebp - 0x450]
call fcn.00453320
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x500]
call fcn.00428a40
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x5f8]
call fcn.00428a40
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x508]
call fcn.00428a40
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x4d4]
call fcn.00428a40
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x4e0]
call fcn.00428a40
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x4e8]
call fcn.00428a40
push 0x22c
push 0
lea eax, [ebp - 0x444]
push eax
call fcn.00503b40
add esp, 0xc
mov dword [ebp - 0x444], 0x22c
push 0
push 2
call dword [sym.imp.KERNEL32.dll_CreateToolhelp32Snapshot]
mov dword [ebp - 0x45c], eax
cmp dword [ebp - 0x45c], 0xffffffff
jne 0x454d37
push str.THFindProcess_CreateToolhelp32Snapshot_
lea ecx, [ebp - 0x4ac]
call fcn.00428940
mov dword [ebp - 4], 6
lea ecx, [ebp - 0x6d0]
call fcn.0042a230
mov dword [ebp - 0x6b0], eax
mov ecx, dword [ebp - 0x6b0]
mov dword [ebp - 0x510], ecx
mov byte [ebp - 4], 7
lea edx, [ebp - 0x4ac]
push edx
mov eax, dword [ebp - 0x510]
push eax
lea ecx, [ebp - 0x528]
push ecx
call fcn.0042a940
add esp, 0xc
mov dword [ebp - 0x600], eax
mov edx, dword [ebp - 0x600]
mov dword [ebp - 0x518], edx
mov byte [ebp - 4], 8
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
mov eax, dword [ebp - 0x518]
push eax
lea ecx, [ebp - 0x608]
push ecx
call fcn.0042a8b0
add esp, 0xc
mov dword [ebp - 0x678], eax
mov edx, dword [ebp - 0x678]
mov dword [ebp - 0x520], edx
mov byte [ebp - 4], 9
mov eax, dword [ebp - 0x520]
push eax
mov ecx, dword [ebp + 0x14]
call fcn.0042d650
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x608]
call fcn.00428a40
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x528]
call fcn.00428a40
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x6d0]
call fcn.00428a40
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x4ac]
call fcn.00428a40
push str.CreateToolhelp32Snapshot_failed
lea ecx, [ebp - 0x4cc]
call fcn.004289c0
mov dword [ebp - 4], 0xa
push 0x566d2c
lea ecx, [ebp - 0x474]
call fcn.00428940
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x618]
call fcn.0042a230
mov dword [ebp - 0x530], eax
mov ecx, dword [ebp - 0x530]
mov dword [ebp - 0x610], ecx
mov byte [ebp - 4], 0xc
lea edx, [ebp - 0x4cc]
push edx
mov eax, dword [ebp - 0x610]
push eax
lea ecx, [ebp - 0x540]
push ecx
call fcn.0042a940
add esp, 0xc
mov dword [ebp - 0x538], eax
mov edx, dword [ebp - 0x538]
mov dword [ebp - 0x680], edx
mov byte [ebp - 4], 0xd
push 2
mov eax, dword [ebp - 0x680]
push eax
lea ecx, [ebp - 0x474]
push ecx
mov ecx, dword [ebp - 0x450]
call fcn.00453320
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x540]
call fcn.00428a40
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x618]
call fcn.00428a40
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x474]
call fcn.00428a40
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x4cc]
call fcn.00428a40
xor eax, eax
jmp 0x455c68
mov dword [ebp - 0x460], 0
mov dword [ebp - 0x44c], 0
mov byte [ebp - 0x445], 1
movzx edx, byte [ebp - 0x445]
test edx, edx
je 0x454d79
lea eax, [ebp - 0x444]
push eax
mov ecx, dword [ebp - 0x45c]
push ecx
call dword [sym.imp.KERNEL32.dll_Process32FirstW]
mov dword [ebp - 0x47c], eax
jmp 0x454d93
lea edx, [ebp - 0x444]
push edx
mov eax, dword [ebp - 0x45c]
push eax
call dword [sym.imp.KERNEL32.dll_Process32NextW]
mov dword [ebp - 0x47c], eax
cmp dword [ebp - 0x47c], 0
je 0x455b66
mov byte [ebp - 0x445], 0
push 0x5c
lea ecx, [ebp - 0x420]
push ecx
call fcn.0043a6f0
add esp, 8
mov dword [ebp - 0x44c], eax
cmp dword [ebp - 0x44c], 0
jne 0x454dd5
lea edx, [ebp - 0x420]
mov dword [ebp - 0x44c], edx
jmp 0x454de4
mov eax, dword [ebp - 0x44c]
add eax, 2
mov dword [ebp - 0x44c], eax
lea ecx, [ebp - 0x458]
call fcn.0042a230
mov dword [ebp - 4], 0xe
mov ecx, dword [ebp + 8]
push ecx
lea ecx, [ebp - 0x454]
call fcn.00428940
mov byte [ebp - 4], 0xf
push 0x566d28
push 0x566d24
lea ecx, [ebp - 0x454]
call fcn.0042af90
movzx edx, byte [ebp + 0x10]
test edx, edx
je 0x454fa4
push 0
mov eax, dword [ebp - 0x44c]
push eax
lea ecx, [ebp - 0x454]
call fcn.00439430
cmp eax, 0xffffffff
je 0x454f8e
mov dword [ebp - 0x464], 0
push str.process_found
lea ecx, [ebp - 0x484]
call fcn.004289c0
mov byte [ebp - 4], 0x10
push 0x566d98
lea ecx, [ebp - 0x4b4]
call fcn.00428940
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0x688]
call fcn.0042a230
mov dword [ebp - 0x548], eax
mov ecx, dword [ebp - 0x548]
mov dword [ebp - 0x6b8], ecx
mov byte [ebp - 4], 0x12
lea edx, [ebp - 0x484]
push edx
mov eax, dword [ebp - 0x6b8]
push eax
lea ecx, [ebp - 0x558]
push ecx
call fcn.0042a940
add esp, 0xc
mov dword [ebp - 0x550], eax
mov edx, dword [ebp - 0x550]
mov dword [ebp - 0x620], edx
mov byte [ebp - 4], 0x13
push 0
mov eax, dword [ebp - 0x620]
push eax
lea ecx, [ebp - 0x4b4]
push ecx
mov ecx, dword [ebp - 0x450]
call fcn.00453320
mov byte [ebp - 4], 0x12
lea ecx, [ebp - 0x558]
call fcn.00428a40
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0x688]
call fcn.00428a40
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0x4b4]
call fcn.00428a40
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0x484]
call fcn.00428a40
mov edx, dword [ebp - 0x43c]
push edx
push 0
push 0x410
call dword [sym.imp.KERNEL32.dll_OpenProcess]
mov dword [ebp - 0x464], eax
cmp dword [ebp - 0x464], 0
je 0x454f8e
push 0x104
lea eax, [ebp - 0x218]
push eax
push 0
mov ecx, dword [ebp - 0x464]
push ecx
call dword [sym.imp.PSAPI.DLL_GetModuleFileNameExW]
test eax, eax
je 0x454f81
lea edx, [ebp - 0x218]
push edx
push 0x566d90
lea eax, [ebp - 0x458]
push eax
call fcn.0042a490
add esp, 0xc
mov ecx, dword [ebp - 0x464]
push ecx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
lea ecx, [ebp - 0x458]
call fcn.004394b0
lea ecx, [ebp - 0x454]
call fcn.004394b0
movzx edx, byte [ebp + 0x10]
test edx, edx
jne 0x454fc3
mov eax, dword [ebp + 8]
push eax
mov ecx, dword [ebp - 0x44c]
push ecx
call fcn.00500f23
add esp, 8
test eax, eax
je 0x454fee
movzx edx, byte [ebp + 0x10]
test edx, edx
je 0x455b40
lea ecx, [ebp - 0x454]
call fcn.00402a70
push eax
lea ecx, [ebp - 0x458]
call fcn.00439990
test eax, eax
jne 0x455b40
mov eax, dword [ebp - 0x44c]
push eax
lea ecx, [ebp - 0x4bc]
call fcn.00428940
mov byte [ebp - 4], 0x14
push str.Found_the_process_we_were_looking_for:
lea ecx, [ebp - 0x48c]
call fcn.004289c0
mov byte [ebp - 4], 0x15
push 0x566e20
lea ecx, [ebp - 0x4dc]
call fcn.00428940
mov byte [ebp - 4], 0x16
lea ecx, [ebp - 0x580]
call fcn.0042a230
mov dword [ebp - 0x560], eax
mov ecx, dword [ebp - 0x560]
mov dword [ebp - 0x628], ecx
mov byte [ebp - 4], 0x17
lea edx, [ebp - 0x48c]
push edx
mov eax, dword [ebp - 0x628]
push eax
lea ecx, [ebp - 0x690]
push ecx
call fcn.0042a940
add esp, 0xc
mov dword [ebp - 0x568], eax
mov edx, dword [ebp - 0x568]
mov dword [ebp - 0x6e0], edx
mov byte [ebp - 4], 0x18
lea eax, [ebp - 0x4bc]
push eax
mov ecx, dword [ebp - 0x6e0]
push ecx
lea edx, [ebp - 0x578]
push edx
call fcn.0042a940
add esp, 0xc
mov dword [ebp - 0x570], eax
mov eax, dword [ebp - 0x570]
mov dword [ebp - 0x630], eax
mov byte [ebp - 4], 0x19
push 0
mov ecx, dword [ebp - 0x630]
push ecx
lea edx, [ebp - 0x4dc]
push edx
mov ecx, dword [ebp - 0x450]
call fcn.00453320
mov byte [ebp - 4], 0x18
lea ecx, [ebp - 0x578]
call fcn.00428a40
mov byte [ebp - 4], 0x17
lea ecx, [ebp - 0x690]
call fcn.00428a40
mov byte [ebp - 4], 0x16
lea ecx, [ebp - 0x580]
call fcn.00428a40
mov byte [ebp - 4], 0x15
lea ecx, [ebp - 0x4dc]
call fcn.00428a40
mov byte [ebp - 4], 0x14
lea ecx, [ebp - 0x48c]
call fcn.00428a40
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0x4bc]
call fcn.00428a40
push str._strProcessPath
lea ecx, [ebp - 0x4e4]
call fcn.00428940
mov byte [ebp - 4], 0x1a
push str._strExePath
lea ecx, [ebp - 0x4a4]
call fcn.00428940
mov byte [ebp - 4], 0x1b
push str._isPathCheck
lea ecx, [ebp - 0x4c4]
call fcn.00428940
mov byte [ebp - 4], 0x1c
mov eax, dword [ebp + 8]
push eax
lea ecx, [ebp - 0x49c]
call fcn.00428940
mov byte [ebp - 4], 0x1d
push str.pstrProcessName
lea ecx, [ebp - 0x468]
call fcn.004289c0
mov byte [ebp - 4], 0x1e
push 0x566e74
lea ecx, [ebp - 0x494]
call fcn.00428940
mov byte [ebp - 4], 0x1f
lea ecx, [ebp - 0x6e8]
call fcn.0042a230
mov dword [ebp - 0x638], eax
mov ecx, dword [ebp - 0x638]
mov dword [ebp - 0x588], ecx
mov byte [ebp - 4], 0x20
lea edx, [ebp - 0x468]
push edx
mov eax, dword [ebp - 0x588]
push eax
lea ecx, [ebp - 0x5e8]
push ecx
call fcn.0042a940
add esp, 0xc
mov dword [ebp - 0x6c0], eax
mov edx, dword [ebp - 0x6c0]
mov dword [ebp - 0x590], edx
mov byte [ebp - 4], 0x21
lea eax, [ebp - 0x49c]
push eax
mov ecx, dword [ebp - 0x590]
push ecx
lea edx, [ebp - 0x668]
push edx
call fcn.0042a940
add esp, 0xc
mov dword [ebp - 0x640], eax
mov eax, dword [ebp - 0x640]
mov dword [ebp - 0x4ec], eax
mov byte [ebp - 4], 0x22
lea ecx, [ebp - 0x4c4]
push ecx
mov edx, dword [ebp - 0x4ec]
push edx
lea eax, [ebp - 0x5e0]
push eax
call fcn.0042a940
add esp, 0xc
mov dword [ebp - 0x698], eax
mov ecx, dword [ebp - 0x698]
mov dword [ebp - 0x5a0], ecx
mov byte [ebp - 4], 0x23
movzx edx, byte [ebp + 0x10]
push edx
mov eax, dword [ebp - 0x5a0]
push eax
lea ecx, [ebp - 0x6a8]
push ecx
call fcn.0042a8b0
add esp, 0xc
mov dword [ebp - 0x648], eax
mov edx, dword [ebp - 0x648]
mov dword [ebp - 0x5a8], edx
mov byte [ebp - 4], 0x24
lea eax, [ebp - 0x4a4]
push eax
mov ecx, dword [ebp - 0x5a8]
push ecx
lea edx, [ebp - 0x5d8]
push edx
call fcn.0042a940
add esp, 0xc
mov dword [ebp - 0x6d8], eax
mov eax, dword [ebp - 0x6d8]
mov dword [ebp - 0x5b0], eax
mov byte [ebp - 4], 0x25
lea ecx, [ebp - 0x458]
push ecx
mov edx, dword [ebp - 0x5b0]
push edx
lea eax, [ebp - 0x660]
push eax
call fcn.0042a940
add esp, 0xc
mov dword [ebp - 0x650], eax
mov ecx, dword [ebp - 0x650]
mov dword [ebp - 0x5b8], ecx
mov byte [ebp - 4], 0x26
lea edx, [ebp - 0x4e4]
push edx
mov eax, dword [ebp - 0x5b8]
push eax
lea ecx, [ebp - 0x5d0]
push ecx
call fcn.0042a940
add esp, 0xc
mov dword [ebp - 0x6a0], eax
mov edx, dword [ebp - 0x6a0]
mov dword [ebp - 0x5c0], edx
mov byte [ebp - 4], 0x27
lea eax, [ebp - 0x454]
push eax
mov ecx, dword [ebp - 0x5c0]
push ecx
lea edx, [ebp - 0x6c8]
push edx
call fcn.0042a940
add esp, 0xc
mov dword [ebp - 0x658], eax
mov eax, dword [ebp - 0x658]
mov dword [ebp - 0x5c8], eax
mov byte [ebp - 4], 0x28
push 0
mov ecx, dword [ebp - 0x5c8]
push ecx
lea edx, [ebp - 0x494]
push edx
mov ecx, dword [ebp - 0x450]
call fcn.00453320
mov byte [ebp - 4], 0x27
lea ecx, [ebp - 0x6c8]
call fcn.00428a40
mov byte [ebp - 4], 0x26
lea ecx, [ebp - 0x5d0]
call fcn.00428a40
mov byte [ebp - 4], 0x25
lea ecx, [ebp - 0x660]
call fcn.00428a40
mov byte [ebp - 4], 0x24
lea ecx, [ebp - 0x5d8]
call fcn.00428a40
mov byte [ebp - 4], 0x23
lea ecx, [ebp - 0x6a8]
call fcn.00428a40
mov byte [ebp - 4], 0x22
lea ecx, [ebp - 0x5e0]
call fcn.00428a40
mov byte [ebp - 4], 0x21
lea ecx, [ebp - 0x668]
call fcn.00428a40
mov byte [ebp - 4], 0x20
lea ecx, [ebp - 0x5e8]
call fcn.00428a40
mov byte [ebp - 4], 0x1f
lea ecx, [ebp - 0x6e8]
call fcn.00428a40
mov byte [ebp - 4], 0x1e
lea ecx, [ebp - 0x494]
call fcn.00428a40
mov byte [ebp - 4], 0x1d
lea ecx, [ebp - 0x468]
call fcn.00428a40
mov byte [ebp - 4], 0x1c
lea ecx, [ebp - 0x49c]
call fcn.00428a40
mov byte [ebp - 4], 0x1b
lea ecx, [ebp - 0x4c4]
call fcn.00428a40
mov byte [ebp - 4], 0x1a
lea ecx, [ebp - 0x4a4]
call fcn.00428a40
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0x4e4]
call fcn.00428a40
push str.Attempting_to_open_PID:
lea ecx, [ebp - 0x470]
call fcn.004289c0
mov byte [ebp - 4], 0x29
push 0x566e3c
lea ecx, [ebp - 0x46c]
call fcn.00428940
mov byte [ebp - 4], 0x2a
lea ecx, [ebp - 0x52c]
call fcn.0042a230
mov dword [ebp - 0x4f0], eax
mov eax, dword [ebp - 0x4f0]
mov dword [ebp - 0x4f4], eax
mov byte [ebp - 4], 0x2b
lea ecx, [ebp - 0x470]
push ecx
mov edx, dword [ebp - 0x4f4]
push edx
lea eax, [ebp - 0x524]
push eax
call fcn.0042a940
add esp, 0xc
mov dword [ebp - 0x4fc], eax
mov ecx, dword [ebp - 0x4fc]
mov dword [ebp - 0x504], ecx
mov byte [ebp - 4], 0x2c
mov edx, dword [ebp - 0x43c]
push edx
mov eax, dword [ebp - 0x504]
push eax
lea ecx, [ebp - 0x51c]
push ecx
call fcn.0042a8b0
add esp, 0xc
mov dword [ebp - 0x50c], eax
mov edx, dword [ebp - 0x50c]
mov dword [ebp - 0x514], edx
mov byte [ebp - 4], 0x2d
push 0
mov eax, dword [ebp - 0x514]
push eax
lea ecx, [ebp - 0x46c]
push ecx
mov ecx, dword [ebp - 0x450]
call fcn.00453320
mov byte [ebp - 4], 0x2c
lea ecx, [ebp - 0x51c]
call fcn.00428a40
mov byte [ebp - 4], 0x2b
lea ecx, [ebp - 0x524]
call fcn.00428a40
mov byte [ebp - 4], 0x2a
lea ecx, [ebp - 0x52c]
call fcn.00428a40
mov byte [ebp - 4], 0x29
lea ecx, [ebp - 0x46c]
call fcn.00428a40
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0x470]
call fcn.00428a40
mov edx, dword [ebp - 0x43c]
push edx
push 1
push 0x100001
call dword [sym.imp.KERNEL32.dll_OpenProcess]
mov dword [ebp - 0x460], eax
cmp dword [ebp - 0x460], 0
jne 0x4559d8
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x478], eax
mov eax, dword [ebp - 0x478]
push eax
call fcn.00411ae0
add esp, 4
mov dword [ebp - 0x490], eax
push 0x566f04
lea ecx, [ebp - 0x488]
call fcn.00428940
mov byte [ebp - 4], 0x2e
push str.THFindProcess_OpenProcess_
lea ecx, [ebp - 0x480]
call fcn.00428940
mov byte [ebp - 4], 0x2f
mov ecx, dword [ebp - 0x490]
push ecx
lea edx, [ebp - 0x5bc]
push edx
call fcn.0042a9d0
add esp, 8
mov dword [ebp - 0x534], eax
mov eax, dword [ebp - 0x534]
mov dword [ebp - 0x574], eax
mov byte [ebp - 4], 0x30
lea ecx, [ebp - 0x5b4]
call fcn.0042a230
mov dword [ebp - 0x53c], eax
mov ecx, dword [ebp - 0x53c]
mov dword [ebp - 0x544], ecx
mov byte [ebp - 4], 0x31
lea edx, [ebp - 0x480]
push edx
mov eax, dword [ebp - 0x544]
push eax
lea ecx, [ebp - 0x5ac]
push ecx
call fcn.0042a940
add esp, 0xc
mov dword [ebp - 0x54c], eax
mov edx, dword [ebp - 0x54c]
mov dword [ebp - 0x554], edx
mov byte [ebp - 4], 0x32
mov eax, dword [ebp - 0x478]
push eax
mov ecx, dword [ebp - 0x554]
push ecx
lea edx, [ebp - 0x5a4]
push edx
call fcn.0042a8b0
add esp, 0xc
mov dword [ebp - 0x55c], eax
mov eax, dword [ebp - 0x55c]
mov dword [ebp - 0x564], eax
mov byte [ebp - 4], 0x33
lea ecx, [ebp - 0x488]
push ecx
mov edx, dword [ebp - 0x564]
push edx
lea eax, [ebp - 0x59c]
push eax
call fcn.0042a940
add esp, 0xc
mov dword [ebp - 0x56c], eax
mov ecx, dword [ebp - 0x56c]
mov dword [ebp - 0x57c], ecx
mov byte [ebp - 4], 0x34
mov edx, dword [ebp - 0x574]
push edx
mov eax, dword [ebp - 0x57c]
push eax
lea ecx, [ebp - 0x594]
push ecx
call fcn.0042a940
add esp, 0xc
mov dword [ebp - 0x584], eax
mov edx, dword [ebp - 0x584]
mov dword [ebp - 0x58c], edx
mov byte [ebp - 4], 0x35
mov eax, dword [ebp - 0x58c]
push eax
mov ecx, dword [ebp + 0x14]
call fcn.0042d650
mov byte [ebp - 4], 0x34
lea ecx, [ebp - 0x594]
call fcn.00428a40
mov byte [ebp - 4], 0x33
lea ecx, [ebp - 0x59c]
call fcn.00428a40
mov byte [ebp - 4], 0x32
lea ecx, [ebp - 0x5a4]
call fcn.00428a40
mov byte [ebp - 4], 0x31
lea ecx, [ebp - 0x5ac]
call fcn.00428a40
mov byte [ebp - 4], 0x30
lea ecx, [ebp - 0x5b4]
call fcn.00428a40
mov byte [ebp - 4], 0x2f
lea ecx, [ebp - 0x5bc]
call fcn.00428a40
mov byte [ebp - 4], 0x2e
lea ecx, [ebp - 0x480]
call fcn.00428a40
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0x488]
call fcn.00428a40
push str.Error:
lea ecx, [ebp - 0x4b0]
call fcn.004289c0
mov byte [ebp - 4], 0x36
mov ecx, dword [ebp - 0x44c]
push ecx
lea ecx, [ebp - 0x4a8]
call fcn.00428940
mov byte [ebp - 4], 0x37
push str.Failed_to_open_the_process:
lea ecx, [ebp - 0x4a0]
call fcn.004289c0
mov byte [ebp - 4], 0x38
push 0x566f64
lea ecx, [ebp - 0x498]
call fcn.00428940
mov byte [ebp - 4], 0x39
mov edx, dword [ebp - 0x490]
push edx
lea eax, [ebp - 0x664]
push eax
call fcn.0042a9d0
add esp, 8
mov dword [ebp - 0x5c4], eax
mov ecx, dword [ebp - 0x5c4]
mov dword [ebp - 0x614], ecx
mov byte [ebp - 4], 0x3a
lea ecx, [ebp - 0x65c]
call fcn.0042a230
mov dword [ebp - 0x5cc], eax
mov edx, dword [ebp - 0x5cc]
mov dword [ebp - 0x5d4], edx
mov byte [ebp - 4], 0x3b
lea eax, [ebp - 0x4a0]
push eax
mov ecx, dword [ebp - 0x5d4]
push ecx
lea edx, [ebp - 0x654]
push edx
call fcn.0042a940
add esp, 0xc
mov dword [ebp - 0x5dc], eax
mov eax, dword [ebp - 0x5dc]
mov dword [ebp - 0x5e4], eax
mov byte [ebp - 4], 0x3c
lea ecx, [ebp - 0x4a8]
push ecx
mov edx, dword [ebp - 0x5e4]
push edx
lea eax, [ebp - 0x64c]
push eax
call fcn.0042a940
add esp, 0xc
mov dword [ebp - 0x5ec], eax
mov ecx, dword [ebp - 0x5ec]
mov dword [ebp - 0x5f4], ecx
mov byte [ebp - 4], 0x3d
push 0x59d27c
mov edx, dword [ebp - 0x5f4]
push edx
lea eax, [ebp - 0x644]
push eax
call fcn.0042a940
add esp, 0xc
mov dword [ebp - 0x5fc], eax
mov ecx, dword [ebp - 0x5fc]
mov dword [ebp - 0x604], ecx
mov byte [ebp - 4], 0x3e
lea edx, [ebp - 0x4b0]
push edx
mov eax, dword [ebp - 0x604]
push eax
lea ecx, [ebp - 0x63c]
push ecx
call fcn.0042a940
add esp, 0xc
mov dword [ebp - 0x60c], eax
mov edx, dword [ebp - 0x60c]
mov dword [ebp - 0x61c], edx
mov byte [ebp - 4], 0x3f
mov eax, dword [ebp - 0x614]
push eax
mov ecx, dword [ebp - 0x61c]
push ecx
lea edx, [ebp - 0x634]
push edx
call fcn.0042a940
add esp, 0xc
mov dword [ebp - 0x624], eax
mov eax, dword [ebp - 0x624]
mov dword [ebp - 0x62c], eax
mov byte [ebp - 4], 0x40
push 2
mov ecx, dword [ebp - 0x62c]
push ecx
lea edx, [ebp - 0x498]
push edx
mov ecx, dword [ebp - 0x450]
call fcn.00453320
mov byte [ebp - 4], 0x3f
lea ecx, [ebp - 0x634]
call fcn.00428a40
mov byte [ebp - 4], 0x3e
lea ecx, [ebp - 0x63c]
call fcn.00428a40
mov byte [ebp - 4], 0x3d
lea ecx, [ebp - 0x644]
call fcn.00428a40
mov byte [ebp - 4], 0x3c
lea ecx, [ebp - 0x64c]
call fcn.00428a40
mov byte [ebp - 4], 0x3b
lea ecx, [ebp - 0x654]
call fcn.00428a40
mov byte [ebp - 4], 0x3a
lea ecx, [ebp - 0x65c]
call fcn.00428a40
mov byte [ebp - 4], 0x39
lea ecx, [ebp - 0x664]
call fcn.00428a40
mov byte [ebp - 4], 0x38
lea ecx, [ebp - 0x498]
call fcn.00428a40
mov byte [ebp - 4], 0x37
lea ecx, [ebp - 0x4a0]
call fcn.00428a40
mov byte [ebp - 4], 0x36
lea ecx, [ebp - 0x4a8]
call fcn.00428a40
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0x4b0]
call fcn.00428a40
jmp 0x455b12
mov eax, dword [ebp - 0x44c]
push eax
lea ecx, [ebp - 0x4c8]
call fcn.00428940
mov byte [ebp - 4], 0x41
push str.Successfully_opened_the_process:
lea ecx, [ebp - 0x4c0]
call fcn.004289c0
mov byte [ebp - 4], 0x42
push 0x566f24
lea ecx, [ebp - 0x4b8]
call fcn.00428940
mov byte [ebp - 4], 0x43
lea ecx, [ebp - 0x6ac]
call fcn.0042a230
mov dword [ebp - 0x66c], eax
mov ecx, dword [ebp - 0x66c]
mov dword [ebp - 0x674], ecx
mov byte [ebp - 4], 0x44
lea edx, [ebp - 0x4c0]
push edx
mov eax, dword [ebp - 0x674]
push eax
lea ecx, [ebp - 0x6a4]
push ecx
call fcn.0042a940
add esp, 0xc
mov dword [ebp - 0x67c], eax
mov edx, dword [ebp - 0x67c]
mov dword [ebp - 0x684], edx
mov byte [ebp - 4], 0x45
lea eax, [ebp - 0x4c8]
push eax
mov ecx, dword [ebp - 0x684]
push ecx
lea edx, [ebp - 0x69c]
push edx
call fcn.0042a940
add esp, 0xc
mov dword [ebp - 0x68c], eax
mov eax, dword [ebp - 0x68c]
mov dword [ebp - 0x694], eax
mov byte [ebp - 4], 0x46
push 0
mov ecx, dword [ebp - 0x694]
push ecx
lea edx, [ebp - 0x4b8]
push edx
mov ecx, dword [ebp - 0x450]
call fcn.00453320
mov byte [ebp - 4], 0x45
lea ecx, [ebp - 0x69c]
call fcn.00428a40
mov byte [ebp - 4], 0x44
lea ecx, [ebp - 0x6a4]
call fcn.00428a40
mov byte [ebp - 4], 0x43
lea ecx, [ebp - 0x6ac]
call fcn.00428a40
mov byte [ebp - 4], 0x42
lea ecx, [ebp - 0x4b8]
call fcn.00428a40
mov byte [ebp - 4], 0x41
lea ecx, [ebp - 0x4c0]
call fcn.00428a40
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0x4c8]
call fcn.00428a40
mov eax, dword [ebp + 0xc]
mov ecx, dword [ebp - 0x43c]
mov dword [eax], ecx
mov byte [ebp - 4], 0xe
lea ecx, [ebp - 0x454]
call fcn.00428a40
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x458]
call fcn.00428a40
jmp 0x455b66
mov byte [ebp - 4], 0xe
lea ecx, [ebp - 0x454]
call fcn.00428a40
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x458]
call fcn.00428a40
jmp 0x454d52
cmp dword [ebp - 0x45c], 0
je 0x455b7c
mov edx, dword [ebp - 0x45c]
push edx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
cmp dword [ebp - 0x460], 0
jne 0x455c62
push str.Did_not_find_the_process
lea ecx, [ebp - 0x4d8]
call fcn.004289c0
mov dword [ebp - 4], 0x47
push str.THFindProcess
lea ecx, [ebp - 0x4d0]
call fcn.00428940
mov byte [ebp - 4], 0x48
lea ecx, [ebp - 0x6dc]
call fcn.0042a230
mov dword [ebp - 0x6b4], eax
mov eax, dword [ebp - 0x6b4]
mov dword [ebp - 0x6bc], eax
mov byte [ebp - 4], 0x49
lea ecx, [ebp - 0x4d8]
push ecx
mov edx, dword [ebp - 0x6bc]
push edx
lea eax, [ebp - 0x6d4]
push eax
call fcn.0042a940
add esp, 0xc
mov dword [ebp - 0x6c4], eax
mov ecx, dword [ebp - 0x6c4]
mov dword [ebp - 0x6cc], ecx
mov byte [ebp - 4], 0x4a
push 0
mov edx, dword [ebp - 0x6cc]
push edx
lea eax, [ebp - 0x4d0]
push eax
mov ecx, dword [ebp - 0x450]
call fcn.00453320
mov byte [ebp - 4], 0x49
lea ecx, [ebp - 0x6d4]
call fcn.00428a40
mov byte [ebp - 4], 0x48
lea ecx, [ebp - 0x6dc]
call fcn.00428a40
mov byte [ebp - 4], 0x47
lea ecx, [ebp - 0x4d0]
call fcn.00428a40
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x4d8]
call fcn.00428a40
mov eax, dword [ebp - 0x460]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.004fdc6a
mov esp, ebp
pop ebp
ret 0x10