Function at 0x4025c2
Capabilities:
Enumerate processes
Terminate process

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x220
push edi
mov dword [ebp - 0x138], 0
cmp dword [ebp - 0x138], 0
je 0x4025df
mov dword [ebp - 0x13c], 0
cmp dword [ebp - 0x13c], 0
je 0x4025f2
mov dword [ebp - 0x140], 0
cmp dword [ebp - 0x140], 0
je 0x402605
mov dword [ebp - 0x144], 0
cmp dword [ebp - 0x144], 0
je 0x402618
mov dword [ebp - 0x148], 0
cmp dword [ebp - 0x148], 0
je 0x40262b
mov dword [ebp - 0x14c], 0
cmp dword [ebp - 0x14c], 0
je 0x40263e
mov dword [ebp - 0x150], 0
cmp dword [ebp - 0x150], 0
je 0x402651
mov dword [ebp - 0x154], 0
cmp dword [ebp - 0x154], 0
je 0x402664
mov dword [ebp - 0x158], 0
cmp dword [ebp - 0x158], 0
je 0x402677
mov dword [ebp - 0x15c], 0
cmp dword [ebp - 0x15c], 0
je 0x40268a
mov dword [ebp - 0x160], 0
cmp dword [ebp - 0x160], 0
je 0x40269d
mov dword [ebp - 0x164], 0
cmp dword [ebp - 0x164], 0
je 0x4026b0
mov dword [ebp - 0x168], 0
cmp dword [ebp - 0x168], 0
je 0x4026c3
mov dword [ebp - 0x16c], 0
cmp dword [ebp - 0x16c], 0
je 0x4026d6
mov dword [ebp - 0x170], 0
cmp dword [ebp - 0x170], 0
je 0x4026e9
mov dword [ebp - 0x174], 0
cmp dword [ebp - 0x174], 0
je 0x4026fc
mov dword [ebp - 0x178], 0
cmp dword [ebp - 0x178], 0
je 0x40270f
mov dword [ebp - 0x17c], 0
cmp dword [ebp - 0x17c], 0
je 0x402722
mov dword [ebp - 0x180], 0
cmp dword [ebp - 0x180], 0
je 0x402735
mov dword [ebp - 0x184], 0
cmp dword [ebp - 0x184], 0
je 0x402748
mov dword [ebp - 0x188], 0
cmp dword [ebp - 0x188], 0
je 0x40275b
mov dword [ebp - 0x18c], 0
cmp dword [ebp - 0x18c], 0
je 0x40276e
mov dword [ebp - 0x190], 0
cmp dword [ebp - 0x190], 0
je 0x402781
mov dword [ebp - 0x194], 0
cmp dword [ebp - 0x194], 0
je 0x402794
mov dword [ebp - 0x198], 0
cmp dword [ebp - 0x198], 0
je 0x4027a7
mov dword [ebp - 0x19c], 0
cmp dword [ebp - 0x19c], 0
je 0x4027ba
mov dword [ebp - 0x1a0], 0
cmp dword [ebp - 0x1a0], 0
je 0x4027cd
mov dword [ebp - 0x1a4], 0
cmp dword [ebp - 0x1a4], 0
je 0x4027e0
mov dword [ebp - 0x1a8], 0
cmp dword [ebp - 0x1a8], 0
je 0x4027f3
mov dword [ebp - 0x1ac], 0
cmp dword [ebp - 0x1ac], 0
je 0x402806
mov dword [ebp - 0x1b0], 0
cmp dword [ebp - 0x1b0], 0
je 0x402819
mov dword [ebp - 0x1b4], 0
cmp dword [ebp - 0x1b4], 0
je 0x40282c
mov dword [ebp - 0x1b8], 0
cmp dword [ebp - 0x1b8], 0
je 0x40283f
mov dword [ebp - 0x1bc], 0
cmp dword [ebp - 0x1bc], 0
je 0x402852
mov dword [ebp - 0x1c0], 0
cmp dword [ebp - 0x1c0], 0
je 0x402865
mov dword [ebp - 0x1c4], 0
cmp dword [ebp - 0x1c4], 0
je 0x402878
mov dword [ebp - 0x1c8], 0
cmp dword [ebp - 0x1c8], 0
je 0x40288b
mov dword [ebp - 0x1cc], 0
cmp dword [ebp - 0x1cc], 0
je 0x40289e
mov dword [ebp - 0x1d0], 0
cmp dword [ebp - 0x1d0], 0
je 0x4028b1
mov dword [ebp - 0x1d4], 0
cmp dword [ebp - 0x1d4], 0
je 0x4028c4
mov dword [ebp - 0x1d8], 0
cmp dword [ebp - 0x1d8], 0
je 0x4028d7
mov dword [ebp - 0x1dc], 0
cmp dword [ebp - 0x1dc], 0
je 0x4028ea
mov dword [ebp - 0x1e0], 0
cmp dword [ebp - 0x1e0], 0
je 0x4028fd
mov dword [ebp - 0x1e4], 0
cmp dword [ebp - 0x1e4], 0
je 0x402910
mov dword [ebp - 0x1e8], 0
cmp dword [ebp - 0x1e8], 0
je 0x402923
mov dword [ebp - 0x1ec], 0
cmp dword [ebp - 0x1ec], 0
je 0x402936
mov dword [ebp - 0x1f0], 0
cmp dword [ebp - 0x1f0], 0
je 0x402949
mov dword [ebp - 0x1f4], 0
cmp dword [ebp - 0x1f4], 0
je 0x40295c
mov dword [ebp - 0x1f8], 0
cmp dword [ebp - 0x1f8], 0
je 0x40296f
mov dword [ebp - 0x1fc], 0
cmp dword [ebp - 0x1fc], 0
je 0x402982
mov dword [ebp - 0x200], 0
cmp dword [ebp - 0x200], 0
je 0x402995
mov dword [ebp - 0x204], 0
cmp dword [ebp - 0x204], 0
je 0x4029a8
mov dword [ebp - 0x208], 0
cmp dword [ebp - 0x208], 0
je 0x4029bb
mov dword [ebp - 0x20c], 0
cmp dword [ebp - 0x20c], 0
je 0x4029ce
mov dword [ebp - 0x210], 0
cmp dword [ebp - 0x210], 0
je 0x4029e1
mov dword [ebp - 0x214], 0
cmp dword [ebp - 0x214], 0
je 0x4029f4
mov dword [ebp - 0x218], 0
cmp dword [ebp - 0x218], 0
je 0x402a07
mov dword [ebp - 0x21c], 0
cmp dword [ebp - 0x21c], 0
je 0x402a1a
call sub.CRTDLL.DLL__getpid
mov dword [ebp - 0x134], eax
mov dword [ebp - 0x128], 0x128
push 0
push 2
call sub.KERNEL32.DLL_CreateToolhelp32Snapshot
mov dword [ebp - 0x130], eax
cmp dword [ebp - 0x130], 0
jne 0x402a51
mov eax, 0
jmp 0x402b10
lea edi, [ebp - 0x128]
push edi
push dword [ebp - 0x130]
call sub.KERNEL32.DLL_Process32First
mov dword [ebp - 0x12c], eax
jmp 0x402afe
push 0xff
lea edi, [ebp - 0x104]
push edi
call fcn.0040185e
add esp, 8
lea edi, [ebp - 0x104]
push edi
call fcn.004021e8
add esp, 4
mov edi, eax
push edi
push dword [ebp + 8]
call sub.CRTDLL.DLL_strcmp
add esp, 8
cmp eax, 0
jne 0x402ae6
mov edi, dword [ebp - 0x120]
cmp dword [ebp - 0x134], edi
je 0x402ae6
push dword [ebp - 0x120]
push 0
push 1
call sub.KERNEL32.DLL_OpenProcess
mov dword [ebp - 0x220], eax
mov edi, dword [ebp - 0x220]
cmp edi, 0
je 0x402ae6
push 0
push edi
call sub.KERNEL32.DLL_TerminateProcess
cmp eax, 0
je 0x402ae6
mov eax, 1
jmp 0x402b10
lea edi, [ebp - 0x128]
push edi
push dword [ebp - 0x130]
call sub.KERNEL32.DLL_Process32Next
mov dword [ebp - 0x12c], eax
cmp dword [ebp - 0x12c], 0
jne 0x402a6e
mov eax, 1
pop edi
leave
ret