Function at 0x41b926
Capabilities:
Enumerate processes

Disassembly:
push 0x310
mov eax, 0x50a223
call fcn.004ec79c
mov eax, dword [ebp + 8]
or dword [ebp - 0x294], 0xffffffff
mov dword [ebp - 0x274], eax
call fcn.00411dd9
mov al, byte [eax]
xor ebx, ebx
test al, al
jne 0x41b9f0
lea eax, [ebp - 0x31c]
push eax
call fcn.004071c6
lea eax, [ebp - 0x314]
push str.CSystemCommands::Wait4AllProcesses__start.
push eax
mov dword [ebp - 4], ebx
call fcn.004058d5
pop ecx
pop ecx
lea eax, [ebp - 0x34]
push eax
lea ecx, [ebp - 0x31c]
call fcn.0040574e
lea edi, [ebp - 0x34]
mov byte [ebp - 4], 1
call fcn.00405549
push ebx
push 1
mov esi, edi
call fcn.0040754f
or dword [ebp - 4], 0xffffffff
lea eax, [ebp - 0x31c]
call fcn.00405a60
mov eax, dword [ebp - 0x274]
test eax, eax
je 0x41bf3f
mov ecx, 0x525140
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x41bb24
test dx, dx
je 0x41b9e9
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x41bb24
add eax, 4
add ecx, 4
test dx, dx
jne 0x41b9bf
xor eax, eax
jmp 0x41bb29
lea eax, [ebp - 0x314]
push eax
mov dword [ebp - 4], 2
call fcn.00405430
mov byte [ebp - 4], 3
call fcn.00411dd9
lea ecx, [ebp - 0x290]
call fcn.00405346
mov byte [ebp - 4], 4
cmp dword [eax + 0x18], 8
jb 0x41ba26
mov esi, dword [eax + 4]
jmp 0x41ba29
lea esi, [eax + 4]
lea eax, [ebp - 0x314]
push 0x5251c8
push eax
call fcn.004058d5
pop ecx
pop ecx
push esi
push eax
call fcn.004058d5
pop ecx
pop ecx
push 0x5251c0
push eax
call fcn.004058d5
pop ecx
pop ecx
push str.CSystemCommands::Wait4AllProcesses__start.
push eax
call fcn.004058d5
pop ecx
pop ecx
push ebx
push 1
lea esi, [ebp - 0x290]
mov byte [ebp - 4], 3
call fcn.0040754f
lea eax, [ebp - 0x270]
push eax
call sub.log4cplusU.dll_public:_static_class_log4cplus::Logger___cdecl_log4cplus::Logger::getRoot_void_
pop ecx
mov esi, 0x2710
push esi
lea ecx, [ebp - 0x270]
mov byte [ebp - 4], 5
call sub.log4cplusU.dll_public:_bool___thiscall_log4cplus::Logger::isEnabledFor_int_const
test al, al
je 0x41bad2
lea eax, [ebp - 0x290]
push eax
lea ecx, [ebp - 0x314]
call fcn.0040532c
push 0x322
push str..SystemCommands.cpp
push eax
push esi
lea ecx, [ebp - 0x270]
mov byte [ebp - 4], 6
call sub.log4cplusU.dll_public:_void___thiscall_log4cplus::Logger::forcedLog_int__class_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t___const___char_const___int_const
push ebx
push 1
lea esi, [ebp - 0x290]
call fcn.0040754f
lea ecx, [ebp - 0x270]
mov byte [ebp - 4], 3
call sub.log4cplusU.dll_public_virtual:_void___thiscall_log4cplus::Logger::destructor_void_
lea eax, [ebp - 0x314]
mov byte [ebp - 4], 2
call fcn.0040539b
or dword [ebp - 4], 0xffffffff
jmp 0x41b9ac
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
je 0x41bf3f
push 0
call fcn.004e7d0c
mov edi, eax
mov ebx, edx
sub edi, 1
pop ecx
sbb ebx, 0
push 0
push 2
mov byte [ebp - 0x265], 0
call sub.KERNEL32.dll_CreateToolhelp32Snapshot
push 0x228
mov esi, eax
lea eax, [ebp - 0x260]
push 0
push eax
call fcn.004ef370
add esp, 0xc
lea eax, [ebp - 0x264]
push eax
push esi
mov dword [ebp - 0x264], 0x22c
call sub.KERNEL32.dll_Process32FirstW
push dword [ebp - 0x274]
lea eax, [ebp - 0x240]
push eax
call fcn.004e856c
pop ecx
pop ecx
test eax, eax
jne 0x41bbb0
push dword [ebp - 0x25c]
push eax
push 0x400
call dword [sym.imp.KERNEL32.dll_OpenProcess]
test eax, eax
jne 0x41bbc3
lea eax, [ebp - 0x264]
push eax
push esi
call sub.KERNEL32.dll_Process32NextW
test eax, eax
jne 0x41bb82
jmp 0x41bbd1
push eax
mov byte [ebp - 0x265], 1
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push 0
call fcn.004e7d0c
cmp dword [ebp - 0x294], 0
pop ecx
jl 0x41bbec
cmp edx, ebx
jg 0x41bc06
jl 0x41bbec
cmp eax, edi
jae 0x41bc06
cmp byte [ebp - 0x265], 0
je 0x41bda1
push 0x64
call dword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x41bb43
call fcn.00411dd9
cmp byte [eax], 0
jne 0x41bc73
lea eax, [ebp - 0x31c]
push eax
call fcn.004071c6
lea eax, [ebp - 0x314]
push str.CSystemCommands::Wait4AllProcesses__EXIT_ONTIMEOUT.
push eax
mov dword [ebp - 4], 0x12
call fcn.004058d5
pop ecx
pop ecx
lea eax, [ebp - 0x34]
push eax
lea ecx, [ebp - 0x31c]
call fcn.0040574e
lea edi, [ebp - 0x34]
mov byte [ebp - 4], 0x13
call fcn.00405549
push 0
push 1
mov esi, edi
call fcn.0040754f
or dword [ebp - 4], 0xffffffff
lea eax, [ebp - 0x31c]
call fcn.00405a60
xor eax, eax
inc eax
jmp 0x41bfa6
lea eax, [ebp - 0x314]
push eax
mov dword [ebp - 4], 0x14
call fcn.00405430
mov byte [ebp - 4], 0x15
call fcn.00411dd9
lea ecx, [ebp - 0x290]
call fcn.00405346
mov byte [ebp - 4], 0x16
cmp dword [eax + 0x18], 8
jb 0x41bca9
mov esi, dword [eax + 4]
jmp 0x41bcac
lea esi, [eax + 4]
lea eax, [ebp - 0x314]
push 0x5251c8
push eax
call fcn.004058d5
pop ecx
pop ecx
push esi
push eax
call fcn.004058d5
pop ecx
pop ecx
push 0x5251c0
push eax
call fcn.004058d5
pop ecx
pop ecx
push str.CSystemCommands::Wait4AllProcesses__EXIT_ONTIMEOUT.
push eax
call fcn.004058d5
pop ecx
pop ecx
push 0
push 1
lea esi, [ebp - 0x290]
mov byte [ebp - 4], 0x15
call fcn.0040754f
lea eax, [ebp - 0x270]
push eax
call sub.log4cplusU.dll_public:_static_class_log4cplus::Logger___cdecl_log4cplus::Logger::getRoot_void_
pop ecx
mov esi, 0x2710
push esi
lea ecx, [ebp - 0x270]
mov byte [ebp - 4], 0x17
call sub.log4cplusU.dll_public:_bool___thiscall_log4cplus::Logger::isEnabledFor_int_const
test al, al
je 0x41bd57
lea eax, [ebp - 0x290]
push eax
lea ecx, [ebp - 0x314]
call fcn.0040532c
push 0x348
push str..SystemCommands.cpp
push eax
push esi
lea ecx, [ebp - 0x270]
mov byte [ebp - 4], 0x18
call sub.log4cplusU.dll_public:_void___thiscall_log4cplus::Logger::forcedLog_int__class_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t___const___char_const___int_const
push 0
push 1
lea esi, [ebp - 0x290]
call fcn.0040754f
lea ecx, [ebp - 0x270]
mov byte [ebp - 4], 0x15
call sub.log4cplusU.dll_public_virtual:_void___thiscall_log4cplus::Logger::destructor_void_
lea eax, [ebp - 0x314]
mov byte [ebp - 4], 0x14
call fcn.0040539b
jmp 0x41bc6b
call fcn.00411dd9
cmp byte [eax], 0
jne 0x41be0e
lea eax, [ebp - 0x31c]
push eax
call fcn.004071c6
lea eax, [ebp - 0x314]
push str.CSystemCommands::Wait4AllProcesses__EXIT_ALLPROCCESS_ENDED.
push eax
mov dword [ebp - 4], 0x1b
call fcn.004058d5
pop ecx
pop ecx
lea eax, [ebp - 0x34]
push eax
lea ecx, [ebp - 0x31c]
call fcn.0040574e
lea edi, [ebp - 0x34]
mov byte [ebp - 4], 0x1c
call fcn.00405549
push 0
push 1
mov esi, edi
call fcn.0040754f
or dword [ebp - 4], 0xffffffff
lea eax, [ebp - 0x31c]
call fcn.00405a60
push 2
pop eax
jmp 0x41bfa6
lea eax, [ebp - 0x314]
push eax
mov dword [ebp - 4], 0x1d
call fcn.00405430
mov byte [ebp - 4], 0x1e
call fcn.00411dd9
lea ecx, [ebp - 0x290]
call fcn.00405346
mov byte [ebp - 4], 0x1f
cmp dword [eax + 0x18], 8
jb 0x41be44
mov esi, dword [eax + 4]
jmp 0x41be47
lea esi, [eax + 4]
lea eax, [ebp - 0x314]
push 0x5251c8
push eax
call fcn.004058d5
pop ecx
pop ecx
push esi
push eax
call fcn.004058d5
pop ecx
pop ecx
push 0x5251c0
push eax
call fcn.004058d5
pop ecx
pop ecx
push str.CSystemCommands::Wait4AllProcesses__EXIT_ALLPROCCESS_ENDED.
push eax
call fcn.004058d5
pop ecx
pop ecx
push 0
push 1
lea esi, [ebp - 0x290]
mov byte [ebp - 4], 0x1e
call fcn.0040754f
lea eax, [ebp - 0x270]
push eax
call sub.log4cplusU.dll_public:_static_class_log4cplus::Logger___cdecl_log4cplus::Logger::getRoot_void_
pop ecx
mov esi, 0x2710
push esi
lea ecx, [ebp - 0x270]
mov byte [ebp - 4], 0x20
call sub.log4cplusU.dll_public:_bool___thiscall_log4cplus::Logger::isEnabledFor_int_const
test al, al
je 0x41bef2
lea eax, [ebp - 0x290]
push eax
lea ecx, [ebp - 0x314]
call fcn.0040532c
push 0x34c
push str..SystemCommands.cpp
push eax
push esi
lea ecx, [ebp - 0x270]
mov byte [ebp - 4], 0x21
call sub.log4cplusU.dll_public:_void___thiscall_log4cplus::Logger::forcedLog_int__class_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t___const___char_const___int_const
push 0
push 1
lea esi, [ebp - 0x290]
call fcn.0040754f
lea ecx, [ebp - 0x270]
mov byte [ebp - 4], 0x1e
call sub.log4cplusU.dll_public_virtual:_void___thiscall_log4cplus::Logger::destructor_void_
lea eax, [ebp - 0x314]
mov byte [ebp - 4], 0x1d
call fcn.0040539b
jmp 0x41be06
call fcn.00411dd9
cmp byte [eax], 0
jne 0x41bfac
lea eax, [ebp - 0x31c]
push eax
call fcn.004071c6
lea eax, [ebp - 0x314]
push str.CSystemCommands::Wait4AllProcesses__not_valid_process_name.
push eax
mov dword [ebp - 4], 9
call fcn.004058d5
pop ecx
pop ecx
lea eax, [ebp - 0x34]
push eax
lea ecx, [ebp - 0x31c]
call fcn.0040574e
lea edi, [ebp - 0x34]
mov byte [ebp - 4], 0xa
call fcn.00405549
push 0
push 1
mov esi, edi
call fcn.0040754f
or dword [ebp - 4], 0xffffffff
lea eax, [ebp - 0x31c]
call fcn.00405a60
xor eax, eax
call fcn.004ec7f8
ret
lea eax, [ebp - 0x314]
push eax
mov dword [ebp - 4], 0xb
call fcn.00405430
mov byte [ebp - 4], 0xc
call fcn.00411dd9
lea ecx, [ebp - 0x290]
call fcn.00405346
mov byte [ebp - 4], 0xd
cmp dword [eax + 0x18], 8
jb 0x41bfe2
mov esi, dword [eax + 4]
jmp 0x41bfe5
lea esi, [eax + 4]
lea eax, [ebp - 0x314]
push 0x5251c8
push eax
call fcn.004058d5
pop ecx
pop ecx
push esi
push eax
call fcn.004058d5
pop ecx
pop ecx
push 0x5251c0
push eax
call fcn.004058d5
pop ecx
pop ecx
push str.CSystemCommands::Wait4AllProcesses__not_valid_process_name.
push eax
call fcn.004058d5
pop ecx
pop ecx
push 0
push 1
lea esi, [ebp - 0x290]
mov byte [ebp - 4], 0xc
call fcn.0040754f
lea eax, [ebp - 0x270]
push eax
call sub.log4cplusU.dll_public:_static_class_log4cplus::Logger___cdecl_log4cplus::Logger::getRoot_void_
pop ecx
mov esi, 0x2710
push esi
lea ecx, [ebp - 0x270]
mov byte [ebp - 4], 0xe
call sub.log4cplusU.dll_public:_bool___thiscall_log4cplus::Logger::isEnabledFor_int_const
test al, al
je 0x41c090
lea eax, [ebp - 0x290]
push eax
lea ecx, [ebp - 0x314]
call fcn.0040532c
push 0x324
push str..SystemCommands.cpp
push eax
push esi
lea ecx, [ebp - 0x270]
mov byte [ebp - 4], 0xf
call sub.log4cplusU.dll_public:_void___thiscall_log4cplus::Logger::forcedLog_int__class_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t___const___char_const___int_const
push 0
push 1
lea esi, [ebp - 0x290]
call fcn.0040754f
lea ecx, [ebp - 0x270]
mov byte [ebp - 4], 0xc
call sub.log4cplusU.dll_public_virtual:_void___thiscall_log4cplus::Logger::destructor_void_
lea eax, [ebp - 0x314]
mov byte [ebp - 4], 0xb
call fcn.0040539b
jmp 0x41bfa4