Function at 0x401ef0
Capabilities:
Enumerate processes

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x134
mov eax, dword [0x46f400]
xor eax, esp
mov dword [esp + 0x130], eax
push ebx
push esi
push edi
push 0
push 2
mov dword [esp + 0x18], 0x128
call dword [sym.imp.KERNEL32.dll_CreateToolhelp32Snapshot]
mov ebx, dword [sym.imp.KERNEL32.dll_CloseHandle]
mov esi, eax
test esi, esi
jne 0x401f53
push 0x4025a0
push ecx
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov edx, str.Failed_to_get_list_of_processes.
call fcn.00402380
add esp, 4
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
xor eax, eax
jmp 0x40202f
lea eax, [esp + 0x10]
push eax
push esi
call dword [sym.imp.KERNEL32.dll_Process32First]
test eax, eax
jne 0x401f8e
push 0x4025a0
push ecx
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov edx, str.Failed_to_get_first_element_in_process_list.
call fcn.00402380
add esp, 4
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
push esi
call ebx
xor eax, eax
jmp 0x40202f
mov edi, dword [sym.imp.KERNEL32.dll_Process32Next]
mov eax, str.steam.exe
lea ecx, [esp + 0x34]
nop dword [eax]
mov dl, byte [ecx]
cmp dl, byte [eax]
jne 0x401fc0
test dl, dl
je 0x401fbc
mov dl, byte [ecx + 1]
cmp dl, byte [eax + 1]
jne 0x401fc0
add ecx, 2
add eax, 2
test dl, dl
jne 0x401fa0
xor eax, eax
jmp 0x401fc5
sbb eax, eax
or eax, 1
test eax, eax
je 0x402007
lea eax, [esp + 0x10]
push eax
push esi
call edi
cmp eax, 1
je 0x401f94
push esi
call ebx
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov edx, str.No_process_with_the_name_
push 0x4025a0
call fcn.00402380
mov edx, str.steam.exe
mov ecx, eax
call fcn.00402380
push ecx
mov edx, str._could_be_found.
mov ecx, eax
jmp 0x401f3c
push 0x4025a0
push ecx
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov edx, str.Comparsion_Successfull_
call fcn.00402380
add esp, 4
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
push esi
call ebx
mov eax, dword [esp + 0x18]
push eax
push 0
push 0x410
call dword [sym.imp.KERNEL32.dll_OpenProcess]
mov esi, eax
test esi, esi
jne 0x402088
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
mov edx, str.Failed_to_open_process
push 0x4025a0
call fcn.00402380
push ecx
mov edx, str.processName
mov ecx, eax
call fcn.00402380
add esp, 4
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
lea eax, [esi + 1]
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x130]
xor ecx, esp
call fcn.0045a958
mov esp, ebp
pop ebp
ret
mov ecx, esi
call fcn.00401a00
push esi
call ebx
call dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_getchar]
mov ecx, dword [esp + 0x13c]
xor eax, eax
pop edi
pop esi
pop ebx
xor ecx, esp
call fcn.0045a958
mov esp, ebp
pop ebp
ret