Function at 0x100cacf0
Capabilities:
Enumerate processes

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x102a559d
mov eax, dword fs:[0]
push eax
sub esp, 0x3f4
mov eax, dword [0x10373f78]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x3d8], ecx
mov ebx, dword [ebp + 0x10]
mov esi, dword [ebp + 0x14]
push 0x990
mov dword [ebp - 0x3dc], ebx
call fcn.10264bfb
add esp, 4
mov dword [ebp - 0x3d4], eax
mov ecx, eax
mov dword [ebp - 4], 0
call fcn.10114fa0
mov edi, eax
mov dword [ebp - 0x3ec], edi
push esi
mov ecx, edi
mov dword [ebp - 4], 1
call fcn.101155e0
mov esi, dword [ebp - 0x3d8]
lea eax, [ebp - 0x400]
push eax
mov ecx, esi
call fcn.100cbd10
mov byte [ebp - 4], 2
lea eax, [esi + 0x2c]
mov ecx, dword [eax]
mov dword [ebp - 0x3e0], eax
mov dword [ebp - 0x3e4], ecx
mov esi, dword [ecx]
cmp esi, ecx
je 0x100cadde
cmp dword [esi + 0x18], ebx
je 0x100cadde
mov eax, dword [esi + 8]
cmp byte [eax + 0xd], 0
je 0x100cadc4
mov eax, dword [esi + 4]
cmp byte [eax + 0xd], 0
jne 0x100cadc0
nop
cmp esi, dword [eax + 8]
jne 0x100cadc0
mov esi, eax
mov eax, dword [eax + 4]
cmp byte [eax + 0xd], 0
je 0x100cadb0
mov esi, eax
jmp 0x100cadda
mov esi, eax
mov eax, dword [esi]
cmp byte [eax + 0xd], 0
jne 0x100cadda
nop
mov esi, eax
mov eax, dword [esi]
cmp byte [eax + 0xd], 0
je 0x100cadd0
cmp esi, ecx
jne 0x100cad97
push edi
mov dword [ebp - 0x3d4], edi
call fcn.1024f719
add esp, 4
test eax, eax
jne 0x100cb72f
lea eax, [edi + 0x548]
mov byte [ebp - 4], 3
push eax
lea ecx, [ebp - 0x1a4]
call fcn.100b7910
push edi
call fcn.1024f73e
mov byte [ebp - 4], 4
push edi
mov dword [ebp - 0x3d4], edi
call fcn.1024f719
add esp, 8
test eax, eax
jne 0x100cb735
lea eax, [edi + 0x5f0]
mov byte [ebp - 4], 5
push eax
lea ecx, [ebp - 0x70]
call fcn.1004dd50
push edi
call fcn.1024f73e
add esp, 4
lea eax, [ebp - 0x70]
mov byte [ebp - 4], 6
push eax
lea ecx, [ebp - 0xe4]
call fcn.1004dd50
mov byte [ebp - 4], 8
mov edx, dword [ebp - 0x5c]
cmp edx, 0x10
jb 0x100cae93
mov ecx, dword [ebp - 0x70]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x100cae89
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100cb73b
push edx
push ecx
call fcn.1026505f
add esp, 8
mov ebx, dword [ebp - 0x3d8]
push 4
add ebx, 0xc
call fcn.10264bfb
add esp, 4
mov dword [ebp - 0x3e8], eax
mov dword [eax], ebx
push ebx
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov ebx, dword [ebp - 0x3e8]
mov dword [ebp - 0x3d4], ebx
mov eax, dword [ebp - 0x3d8]
lea ecx, [ebp + 8]
push ecx
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 9
push ecx
lea ecx, [eax + 0x34]
call fcn.10087b10
mov eax, dword [eax + 8]
cmp byte [eax + 0xd], 0
jne 0x100caf39
mov ecx, dword [ebp + 0xc]
cmp ecx, dword [eax + 0x14]
jb 0x100caf39
ja 0x100caef6
mov ecx, dword [ebp + 8]
cmp ecx, dword [eax + 0x10]
jb 0x100caf39
mov ecx, dword [ebp - 0x3d8]
lea eax, [ebp + 8]
push eax
lea ecx, [ecx + 0x34]
call fcn.100cc260
call fcn.10048fd0
lea ecx, [ebp + 8]
push ecx
push str.Registration_rejected._Client_with_ID__0__is_in_expired_client_list.
push 1
mov ecx, eax
call fcn.100bfb70
push dword [ebx]
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
push 4
push ebx
call fcn.1026505f
add esp, 8
xor bl, bl
jmp 0x100cb6c3
mov edi, dword [ebp - 0x3d8]
lea eax, [ebp + 8]
push eax
lea eax, [ebp - 0x1c]
push eax
lea ecx, [edi + 4]
call fcn.10087b10
mov eax, dword [eax + 8]
cmp byte [eax + 0xd], 0
jne 0x100caf98
mov ecx, dword [ebp + 0xc]
cmp ecx, dword [eax + 0x14]
jb 0x100caf98
ja 0x100caf6a
mov ecx, dword [ebp + 8]
cmp ecx, dword [eax + 0x10]
jb 0x100caf98
cmp byte [0x1038ab63], 0
jne 0x100caf98
push str.CAT::ClientsConfigManager::RegisterClient
push 0x38
push str.C:devjenkinsworkspacemonitor_win_build_srclibraries_report_processing_report_processingclients_config_manager.cpp
push str.Client_with_such_ID_is_already_registered
mov edx, str.m_clients.count_clientId___0
mov byte [0x1038ab63], 1
call fcn.10114eb0
add esp, 0x10
lea eax, [ebp + 8]
push eax
lea ecx, [edi + 4]
call fcn.100cc570
mov ebx, eax
lea ecx, [ebp - 0x18]
lea eax, [ebp - 0x3ec]
push eax
call fcn.10071210
mov ecx, dword [ebx]
mov edi, eax
mov edx, dword [edi]
mov dword [edi], ecx
mov eax, dword [ebx + 4]
mov dword [ebx], edx
mov ecx, dword [edi + 4]
mov dword [edi + 4], eax
mov edi, dword [ebp - 0x14]
mov dword [ebx + 4], ecx
test edi, edi
je 0x100caff3
or ebx, 0xffffffff
mov eax, ebx
lock xadd dword [edi + 4], eax
jne 0x100caff3
mov eax, dword [edi]
mov ecx, edi
call dword [eax]
lock xadd dword [edi + 8], ebx
dec ebx
jne 0x100caff3
mov eax, dword [edi]
mov ecx, edi
call dword [eax + 4]
mov ecx, dword [ebp - 0x3e0]
lea eax, [ebp + 8]
push eax
call fcn.100cc3d0
mov ecx, dword [ebp - 0x3dc]
push 0
push ecx
mov dword [eax], ecx
call fcn.1011dab0
mov ecx, dword [ebp - 0x3d8]
add esp, 8
mov edi, dword [ebp + 8]
mov ebx, dword [ebp + 0xc]
mov dword [ebp - 0x3f4], eax
lea eax, [ebp - 0x3f4]
lea ecx, [ecx + 0x24]
mov dword [ebp - 0x3f0], edx
push eax
call fcn.100cc4a0
mov dword [eax], edi
mov edi, dword [ebp - 0x3e8]
mov dword [eax + 4], ebx
push dword [edi]
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
push 4
push edi
call fcn.1026505f
add esp, 8
mov dword [ebp - 0x28], 0
xor eax, eax
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 7
mov word [ebp - 0x28], ax
mov byte [ebp - 4], 0xb
cmp esi, dword [ebp - 0x3e4]
jne 0x100cb4b2
lea eax, [ebp - 0xb4]
mov dword [ebp - 0xb4], vtable.std::_Func_impl_no_alloc_class__unsigned_int___cdecl_CAT::Utils::GetParentPid_unsigned_int_::_2::_lambda_2___void__void___.0
mov dword [ebp - 0x90], eax
push 4
mov byte [ebp - 4], 0xc
call fcn.10264bfb
add esp, 4
mov esi, eax
push 0
push 2
call dword [sym.imp.KERNEL32.dll_CreateToolhelp32Snapshot]
mov dword [esi], eax
xor edx, edx
mov ecx, dword [ebp - 0x90]
mov dword [ebp - 0x34], edx
test ecx, ecx
je 0x100cb10d
lea eax, [ebp - 0xb4]
cmp ecx, eax
jne 0x100cb100
mov eax, dword [ecx]
lea edx, [ebp - 0x58]
push edx
call dword [eax + 4]
mov ecx, dword [ebp - 0x90]
mov edx, eax
mov dword [ebp - 0x34], edx
test ecx, ecx
je 0x100cb10d
mov eax, dword [ecx]
mov edx, dword [eax + 0x10]
lea eax, [ebp - 0xb4]
cmp ecx, eax
setne al
push eax
call edx
mov edx, dword [ebp - 0x34]
jmp 0x100cb105
mov edx, ecx
mov dword [ebp - 0x34], edx
xor ecx, ecx
mov dword [ebp - 0x90], ecx
mov dword [ebp - 0x30], esi
test ecx, ecx
je 0x100cb137
mov eax, dword [ecx]
mov edx, dword [eax + 0x10]
lea eax, [ebp - 0xb4]
cmp ecx, eax
setne al
push eax
call edx
mov esi, dword [ebp - 0x30]
mov edx, dword [ebp - 0x34]
mov dword [ebp - 0x90], 0
cmp dword [esi], 0xffffffff
jne 0x100cb184
mov byte [ebp - 4], 0xd
mov dword [ebp - 0x3e4], esi
test edx, edx
je 0x100cb740
mov eax, dword [edx]
lea ecx, [ebp - 0x3e4]
push ecx
mov ecx, edx
call dword [eax + 8]
mov ecx, dword [ebp - 0x34]
test ecx, ecx
je 0x100cb173
mov eax, dword [ecx]
mov edx, dword [eax + 0x10]
lea eax, [ebp - 0x58]
cmp ecx, eax
setne al
push eax
call edx
mov byte [ebp - 4], 0xb
mov ebx, dword [ebp - 0x3dc]
mov esi, ebx
jmp 0x100cb29e
push 0x228
lea eax, [ebp - 0x3cc]
push 0
push eax
call fcn.10267270
add esp, 0xc
mov dword [ebp - 0x3d0], 0x22c
lea eax, [ebp - 0x3d0]
push eax
push dword [esi]
call dword [sym.imp.KERNEL32.dll_Process32FirstW]
test eax, eax
jne 0x100cb1ec
mov eax, dword [ebp - 0x30]
push dword [eax]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov byte [ebp - 4], 0xe
mov eax, dword [ebp - 0x30]
test eax, eax
je 0x100cb15c
mov ecx, dword [ebp - 0x34]
mov dword [ebp - 0x3e8], eax
test ecx, ecx
je 0x100cb745
mov eax, dword [ecx]
lea edx, [ebp - 0x3e8]
push edx
jmp 0x100cb159
mov esi, dword [sym.imp.KERNEL32.dll_Process32NextW]
mov ebx, dword [ebp - 0x3dc]
cmp ebx, dword [ebp - 0x3c8]
je 0x100cb255
lea eax, [ebp - 0x3d0]
push eax
mov eax, dword [ebp - 0x30]
push dword [eax]
call esi
test eax, eax
jne 0x100cb1f8
mov byte [ebp - 4], 0x10
mov eax, dword [ebp - 0x30]
test eax, eax
je 0x100cb23a
mov ecx, dword [ebp - 0x34]
mov dword [ebp - 0x3dc], eax
test ecx, ecx
je 0x100cb74a
mov eax, dword [ecx]
lea edx, [ebp - 0x3dc]
push edx
call dword [eax + 8]
mov ecx, dword [ebp - 0x34]
test ecx, ecx
je 0x100cb251
mov eax, dword [ecx]
mov edx, dword [eax + 0x10]
lea eax, [ebp - 0x58]
cmp ecx, eax
setne al
push eax
call edx
mov esi, ebx
jmp 0x100cb29a
mov esi, dword [ebp - 0x3b8]
mov byte [ebp - 4], 0xf
mov eax, dword [ebp - 0x30]
test eax, eax
je 0x100cb283
mov ecx, dword [ebp - 0x34]
mov dword [ebp - 0x3d4], eax
test ecx, ecx
je 0x100cb74f
mov eax, dword [ecx]
lea edx, [ebp - 0x3d4]
push edx
call dword [eax + 8]
mov ecx, dword [ebp - 0x34]
test ecx, ecx
je 0x100cb29a
mov eax, dword [ecx]
mov edx, dword [eax + 0x10]
lea eax, [ebp - 0x58]
cmp ecx, eax
setne al
push eax
call edx
mov byte [ebp - 4], 0xb
mov eax, dword [ebp - 0x3e0]
mov edx, dword [eax]
mov eax, dword [edx]
cmp eax, edx
je 0x100cb2fb
nop dword [eax]
cmp dword [eax + 0x18], esi
je 0x100cb2f3
mov ecx, dword [eax + 8]
cmp byte [ecx + 0xd], 0
je 0x100cb2db
mov ecx, dword [eax + 4]
cmp byte [ecx + 0xd], 0
jne 0x100cb2d7
cmp eax, dword [ecx + 8]
jne 0x100cb2d7
mov eax, ecx
mov ecx, dword [ecx + 4]
cmp byte [ecx + 0xd], 0
je 0x100cb2c7
mov eax, ecx
jmp 0x100cb2ef
mov eax, ecx
mov ecx, dword [eax]
cmp byte [ecx + 0xd], 0
jne 0x100cb2ef
mov eax, ecx
mov ecx, dword [eax]
cmp byte [ecx + 0xd], 0
je 0x100cb2e5
cmp eax, edx
jne 0x100cb2b0
cmp eax, edx
jne 0x100cb4b2
mov edx, ebx
lea ecx, [ebp - 0xa4]
call fcn.10052f70
mov esi, eax
lea ecx, [ebp - 0x70]
mov byte [ebp - 4], 0x11
call fcn.1008a930
mov byte [ebp - 4], 0x12
mov ecx, dword [eax + 0x10]
add ecx, ecx
cmp dword [eax + 0x14], 8
jb 0x100cb327
mov eax, dword [eax]
push ecx
mov edx, eax
lea ecx, [ebp - 0x40]
call fcn.100a56b0
add esp, 4
lea edx, [ebp - 0x40]
mov byte [ebp - 4], 0x13
lea ecx, [ebp - 0xcc]
call fcn.10083100
push esi
lea eax, [ebp - 0xcc]
mov byte [ebp - 4], 0x14
push eax
push dword [ebp - 0x3d4]
lea ecx, [ebp - 0xfc]
call fcn.10074910
lea eax, [ebp - 0xfc]
push eax
lea ecx, [ebp - 0x28]
call fcn.1004d810
mov edx, dword [ebp - 0xe8]
cmp edx, 8
jb 0x100cb3b3
mov ecx, dword [ebp - 0xfc]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x100cb3a9
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100cb754
push edx
push ecx
call fcn.1026505f
add esp, 8
mov byte [ebp - 4], 0x13
mov edx, dword [ebp - 0xb8]
cmp edx, 8
jb 0x100cb3f7
mov ecx, dword [ebp - 0xcc]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x100cb3ed
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100cb754
push edx
push ecx
call fcn.1026505f
add esp, 8
xor eax, eax
mov dword [ebp - 0xbc], 0
lea ecx, [ebp - 0x40]
mov dword [ebp - 0xb8], 7
mov word [ebp - 0xcc], ax
call fcn.1004db90
mov byte [ebp - 4], 0x11
mov edx, dword [ebp - 0x5c]
cmp edx, 8
jb 0x100cb45a
mov ecx, dword [ebp - 0x70]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x100cb450
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100cb754
push edx
push ecx
call fcn.1026505f
add esp, 8
xor eax, eax
mov byte [ebp - 4], 0xb
mov edx, dword [ebp - 0x90]
mov dword [ebp - 0x60], 0
mov dword [ebp - 0x5c], 7
mov word [ebp - 0x70], ax
cmp edx, 8
jb 0x100cb4b2
mov ecx, dword [ebp - 0xa4]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x100cb4a8
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100cb754
push edx
push ecx
call fcn.1026505f
add esp, 8
mov ebx, dword [ebp - 0x3d8]
mov edi, dword [ebx + 0x3c]
test edi, edi
je 0x100cb539
mov eax, dword [edi]
push 0x50
mov esi, dword [eax + 4]
call fcn.10264bfb
add esp, 4
mov dword [ebp - 0x3d4], eax
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0x15
push ecx
lea ecx, [ebp - 0x1a4]
push ecx
lea ecx, [ebp - 0x400]
push ecx
mov ecx, eax
call fcn.100db520
mov dword [ebp - 0x3e0], eax
sub esp, 8
mov byte [ebp - 4], 0x16
lea eax, [ebp - 0x3e0]
mov ecx, esp
push eax
call fcn.100cc7d0
mov ecx, edi
call esi
mov byte [ebp - 4], 0xb
mov esi, dword [ebp - 0x3e0]
test esi, esi
je 0x100cb539
lea ecx, [esi + 0x24]
call fcn.1004ef60
lea ecx, [esi + 8]
call fcn.1007f700
push 0x50
push esi
call fcn.1026505f
add esp, 8
cmp dword [ebx + 0x44], 0
je 0x100cb6a6
mov ecx, dword [ebp - 0xd4]
test ecx, ecx
je 0x100cb6a6
cmp dword [ebp - 0x18], 0
je 0x100cb6a6
mov dword [ebp - 0x8c], 0
mov dword [ebp - 0x7c], 0
mov dword [ebp - 0x78], 0xf
mov byte [ebp - 0x8c], 0
mov byte [ebp - 0x74], 0
mov byte [ebp - 4], 0x18
lea eax, [ebp - 0xe4]
cmp dword [ebp - 0xd0], 0x10
push ecx
cmovae eax, dword [ebp - 0xe4]
lea ecx, [ebp - 0x8c]
push eax
call fcn.1004f390
push 0x50
mov byte [ebp - 0x74], 0
call fcn.10264bfb
add esp, 4
mov dword [ebp - 0x3d4], eax
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0x19
push ecx
lea ecx, [ebp - 0x1a4]
push ecx
mov ecx, eax
call fcn.100db210
mov esi, eax
mov dword [ebp - 0x3d4], esi
mov byte [ebp - 4], 0x1a
lea ecx, [ebp - 0x8c]
mov ebx, dword [ebx + 0x44]
push ecx
sub esp, 8
mov edi, esp
mov eax, dword [ebx]
mov dword [edi], 0
mov eax, dword [eax + 4]
mov dword [ebp - 0x3e4], eax
mov dword [edi + 4], 0
test esi, esi
je 0x100cb64c
push 0x10
call fcn.10264bfb
mov dword [ebp - 0x3d4], eax
xorps xmm0, xmm0
add esp, 4
movq qword [eax], xmm0
mov dword [eax + 8], 0
mov dword [eax + 4], 1
mov dword [eax + 8], 1
mov dword [eax], vtable.std::_Ref_count_resource_class_CAT::Statistic::NewClientConnected___struct_std::default_delete_class_CAT::Statistic::NewClientConnected__.0
mov dword [eax + 0xc], esi
mov dword [edi], esi
xor esi, esi
mov dword [edi + 4], eax
mov eax, dword [ebp - 0x3e4]
mov dword [ebp - 0x3d4], esi
mov ecx, ebx
call eax
test esi, esi
je 0x100cb66f
lea ecx, [esi + 0x24]
call fcn.1004ef60
lea ecx, [esi + 8]
call fcn.1007f700
push 0x50
push esi
call fcn.1026505f
add esp, 8
mov edx, dword [ebp - 0x78]
cmp edx, 0x10
jb 0x100cb6a6
mov ecx, dword [ebp - 0x8c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x100cb69c
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100cb759
push edx
push ecx
call fcn.1026505f
add esp, 8
mov eax, dword [ebp - 0x14]
mov bl, 1
cmp eax, 8
jb 0x100cb6bd
inc eax
lea ecx, [ebp - 0x28]
push eax
push dword [ebp - 0x28]
call fcn.1004f350
mov edi, dword [ebp - 0x3ec]
lea ecx, [ebp - 0xe4]
call fcn.1004db90
lea ecx, [ebp - 0x1a4]
call fcn.100699a0
lea ecx, [ebp - 0x400]
call fcn.100cc1f0
test edi, edi
je 0x100cb70f
lea ecx, [edi + 0x548]
call fcn.100699f0
lea ecx, [edi + 0x30]
call fcn.1004a6f0
push edi
call fcn.1024f6ce
push 0x990
push edi
call fcn.1026505f
add esp, 0xc
mov al, bl
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.102649e4
mov esp, ebp
pop ebp
ret 0x10
push eax
call fcn.1024f3b1
push eax
call fcn.1024f3b1
call fcn.10275373
call fcn.1024e938
call fcn.1024e938
call fcn.1024e938
call fcn.1024e938
call fcn.10275373
call fcn.10275373
int3