Function at 0x10042d6
Capabilities:
Enumerate process modules
Terminate process

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
sub esp, 0x22c
mov eax, dword [0x1011660]
push ebx
push esi
push edi
xor edi, edi
mov dword [ebp - 4], eax
mov dword [ebp - 0x210], edi
mov esi, 0x400
xor ebx, ebx
push esi
inc ebx
call fcn.0100598c
cmp eax, edi
pop ecx
mov dword [ebp - 0x214], eax
je 0x10043fa
lea ecx, [ebp - 0x210]
push ecx
push esi
push eax
call sub.PSAPI.DLL_EnumProcesses
test eax, eax
je 0x100432b
cmp dword [ebp - 0x210], esi
jne 0x1004357
push dword [ebp - 0x214]
call fcn.0100582a
shl esi, 1
mov eax, esi
shr eax, 2
push eax
push 0x1001c70
mov dword [ebp - 0x214], edi
call fcn.010036a7
add esp, 0xc
cmp ebx, 0x10
jl 0x10042fb
inc ebx
cmp ebx, 0x10
jge 0x100458c
cmp dword [ebp - 0x210], edi
je 0x100458c
cmp dword [ebp - 0x214], edi
je 0x100458c
shr dword [ebp - 0x210], 2
push dword [ebp - 0x210]
push 0x1001c40
call fcn.010036a7
cmp dword [ebp - 0x210], edi
pop ecx
pop ecx
mov dword [ebp - 0x218], edi
jle 0x100457f
mov eax, dword [ebp - 0x214]
mov ecx, dword [ebp - 0x218]
lea esi, [eax + ecx*4]
push dword [esi]
push edi
push 0x100419
call dword [sym.imp.KERNEL32.dll_OpenProcess]
mov ebx, eax
cmp ebx, edi
jne 0x100440f
mov esi, dword [esi]
cmp esi, edi
je 0x1004567
cmp esi, dword [0x101143c]
je 0x1004567
push esi
push 0x1001c10
call fcn.010036a7
pop ecx
pop ecx
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
call fcn.0100378f
jmp 0x1004567
push esi
mov dword [0x1012208], 1
push 0x1001bd4
jmp 0x1004595
lea eax, [ebp - 0x220]
push eax
push 4
lea eax, [ebp - 0x21c]
push eax
push ebx
call sub.PSAPI.DLL_EnumProcessModules
test eax, eax
je 0x100443d
push 0xc
lea eax, [ebp - 0x22c]
push eax
push edi
push ebx
call sub.PSAPI.DLL_GetModuleInformation
test eax, eax
jne 0x1004472
mov esi, dword [esi]
cmp esi, edi
je 0x1004466
cmp esi, dword [0x101143c]
je 0x1004466
push esi
push edi
push 0x1001b58
call fcn.010036a7
add esp, 0xc
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
call fcn.0100378f
push ebx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x1004567
mov edi, dword [ebp - 0x21c]
push 0x104
lea eax, [ebp - 0x20c]
push eax
push 0
push ebx
call sub.PSAPI.DLL_GetModuleFileNameExW
test eax, eax
jne 0x1004497
and word [ebp - 0x20c], ax
push 1
push dword [ebp - 0x228]
lea eax, [ebp - 0x20c]
push eax
push edi
push ebx
call fcn.01003c2d
mov edi, 0xfffffc17
cmp eax, edi
lea eax, [ebp - 0x20c]
push eax
jne 0x10044e6
call fcn.01004109
test eax, eax
je 0x10044ef
lea eax, [ebp - 0x20c]
push eax
push 0x1001ad0
call fcn.010036a7
pop ecx
pop ecx
lea edi, [ebp - 0x20c]
call fcn.01003805
jmp 0x10044ef
call fcn.01004109
cmp eax, edi
jne 0x100455e
push 0xffffffffffffffff
push ebx
call dword [sym.imp.KERNEL32.dll_TerminateProcess]
test eax, eax
lea eax, [ebp - 0x20c]
push eax
jne 0x100451d
push 0x1001a80
call fcn.010036a7
pop ecx
pop ecx
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
call fcn.0100378f
jmp 0x100455e
push dword [esi]
push 0x1001a20
call fcn.010036a7
add esp, 0xc
push 0x7530
push ebx
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
test eax, eax
je 0x1004548
push 0x10019c8
call fcn.010036a7
jmp 0x100450e
mov eax, dword [0x10121f8]
push 3
cdq
pop ecx
idiv ecx
mov dword [edx*4 + 0x10121ec], 1
push ebx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
xor edi, edi
inc dword [ebp - 0x218]
mov eax, dword [ebp - 0x218]
cmp eax, dword [ebp - 0x210]
jl 0x10043a3
push dword [ebp - 0x214]
call fcn.0100582a
jmp 0x100459b
shr esi, 2
push esi
push 0x1001980
call fcn.010036a7
pop ecx
pop ecx
mov ecx, dword [ebp - 4]
pop edi
pop esi
pop ebx
call fcn.0100524b
leave
ret