Function at 0x4187a0
Capabilities:
Enumerate processes
Terminate process
Terminate process by name

Disassembly:
sub esp, 0x23c
mov eax, dword [0x455e64]
push ebx
push ebp
push esi
push edi
mov dword [esp + 0x248], eax
xor eax, eax
mov byte [esp + 0x144], 0
mov ecx, 0x40
lea edi, [esp + 0x145]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov eax, dword [esp + 0x250]
push eax
push 0x444f80
lea ecx, [esp + 0x14c]
push 0x104
push ecx
call fcn.0042898d
mov edi, dword [0x454e08]
mov eax, 0x9c9a6c87
imul edi
add edx, edi
sar edx, 0xe
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x454df8]
mov ecx, dword [0x454e14]
imul edx, edx, 0xcd41
sub edx, eax
imul ecx, ecx, 0xfb02
mov eax, dword [0x454dfc]
mov ebx, dword [0x454df4]
imul eax, eax, 0x10088
add edx, ecx
lea edx, [eax + edx + 0x139e4]
mov dword [str._r_____r_____n], edx
mov esi, dword [0x454e0c]
mov eax, 0x93140835
imul ebx
add edx, ebx
sar edx, 0xf
mov eax, edx
shr eax, 0x1f
add eax, edx
mov ebx, eax
mov eax, 0x30780947
imul edi
mov ebp, esi
imul esi, esi, 0xcd41
sar edx, 0xe
imul ebp, ebp, 0x689f
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x454e10]
sub ebx, ebp
sub ebx, eax
mov eax, 0x3d4263a3
imul edx
sar edx, 0xd
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [str._r_____r_____n]
sub ebx, eax
add ebx, edx
mov eax, 0x68649efd
imul dword [0x454dfc]
sar edx, 0xf
mov eax, edx
add esi, edx
mov edx, dword [0x454e00]
shr eax, 0x1f
add esp, 0x10
add eax, esi
imul edx, edx, 0x8bf0
mov dword [0x454df4], ebx
mov dword [esp + 0x10], 0
sub eax, edx
sub eax, ecx
push 0
add eax, 0x64b7
push 2
mov dword [0x454df8], eax
call sub.KERNEL32.dll_CreateToolhelp32Snapshot
mov esi, dword [0x454e08]
mov edi, dword [0x454df4]
mov edx, dword [0x454e10]
mov ebp, eax
mov ecx, esi
imul ecx, ecx, 0x139e4
mov eax, edi
imul eax, eax, 0x8bf0
mov ebx, dword [0x454df8]
add ecx, eax
mov eax, 0x7fbc240d
imul edx
sar edx, 0xf
mov eax, edx
shr eax, 0x1f
add eax, edx
sub ecx, eax
sub ecx, ebx
add ecx, 0xd145
cmp ebp, 0xffffffff
mov dword [esp + 0x18], ebp
mov dword [0x454e10], ecx
jne 0x4189ac
mov ebx, dword [0x454e0c]
mov eax, 0x93140835
imul ebx, ebx, 0x689f
imul edi
add edx, edi
sar edx, 0xf
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edi, eax
mov eax, 0x30780947
imul esi
sar edx, 0xe
mov eax, edx
shr eax, 0x1f
add eax, edx
sub edi, ebx
sub edi, eax
mov eax, 0x3d4263a3
imul ecx
sar edx, 0xd
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
mov edx, dword [str._r_____r_____n]
sub edi, ecx
add edi, edx
push str.CreateToolhelp32Snapshot__of_processes_
mov dword [0x454df4], edi
call fcn.0042830d
add esp, 4
jmp 0x418f64
mov ecx, dword [0x454dfc]
mov eax, 0xa2ad5745
imul ecx
add edx, ecx
mov ecx, dword [0x454e0c]
sar edx, 0xe
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edi, eax
mov eax, 0xc2bd9c5d
imul ecx
sar edx, 0xd
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
mov ebx, ecx
mov ecx, dword [0x454e14]
mov eax, 0x7fbc240d
imul ecx
sar edx, 0xf
mov ecx, edx
sub ebx, edi
add ebx, edx
mov eax, 0x7fbc240d
imul esi
sar edx, 0xf
shr ecx, 0x1f
mov eax, edx
add ecx, ebx
shr eax, 0x1f
add eax, edx
sub ecx, eax
sub ecx, 0xdecb
mov dword [0x454dfc], ecx
lea ecx, [esp + 0x1c]
push ecx
push ebp
mov dword [esp + 0x24], 0x128
call sub.KERNEL32.dll_Process32First
test eax, eax
jne 0x418a89
mov esi, dword [0x454e10]
mov edx, dword [0x454df8]
imul esi, esi, 0xdecb
mov ecx, dword [0x454e08]
imul edx, edx, 0xcd41
add esi, edx
mov eax, 0x7514b1e9
imul ecx
mov ecx, dword [0x454e04]
sar edx, 0xe
imul ecx, ecx, 0x85ba
mov eax, edx
shr eax, 0x1f
add eax, edx
sub esi, eax
lea edx, [esi + ecx + 0x139e4]
push ebp
mov dword [0x454e00], edx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x418f64
mov ecx, dword [0x454e04]
mov esi, dword [0x454e14]
mov eax, 0x20a2ed5d
imul ecx
sar edx, 0xd
mov eax, edx
shr eax, 0x1f
add eax, edx
mov ecx, esi
imul ecx, ecx, 0xdecb
mov edi, eax
sub edi, ecx
mov ecx, dword [0x454e00]
mov eax, 0x68649efd
imul ecx
sar edx, 0xf
mov eax, edx
shr eax, 0x1f
add eax, edx
sub edi, eax
mov eax, 0x68649efd
imul esi
sar edx, 0xf
mov eax, edx
shr eax, 0x1f
add edi, edx
lea edx, [eax + edi + 0x8bf0]
mov dword [0x454e04], edx
lea esp, [esp]
mov esi, dword [0x454dfc]
imul ecx, ecx, 0xdecc
imul esi, esi, 0x689f
add esi, ecx
mov ecx, dword [0x454df8]
mov eax, ecx
imul eax, eax, 0x15208
sub esi, eax
mov eax, 0x3d4263a3
imul ecx
sar edx, 0xd
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
lea edx, [esp + 0x144]
push edx
lea eax, [esp + 0x44]
sub esi, ecx
push eax
mov dword [0x454e08], esi
call fcn.00431f9e
add esp, 8
test eax, eax
je 0x418cdf
mov ecx, dword [0x454df8]
mov eax, 0xa2ad5745
imul ecx
mov eax, dword [0x454e04]
add edx, ecx
imul eax, eax, 0x5706
sar edx, 0xe
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
mov edx, dword [str._r_____r_____n]
imul edx, edx, 0x64b7
sub edx, ecx
lea ecx, [edx + eax - 0xdecb]
mov edx, dword [esp + 0x24]
push edx
push 0
push 0x1f0fff
mov dword [0x454e0c], ecx
call dword [sym.imp.KERNEL32.dll_OpenProcess]
mov edi, dword [0x454e08]
mov ecx, dword [0x454e14]
mov esi, eax
imul ecx, ecx, 0xfb02
mov eax, 0x9c9a6c87
imul edi
add edx, edi
sar edx, 0xe
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x454df8]
sub ecx, eax
imul edx, edx, 0xcd41
mov eax, dword [0x454dfc]
imul eax, eax, 0x10088
add ecx, edx
test esi, esi
lea ebx, [ecx + eax + 0x139e4]
mov dword [str._r_____r_____n], ebx
jne 0x418c00
push 0x444f4c
call fcn.0042830d
add esp, 4
jmp 0x418cc5
mov ecx, dword [0x454df4]
mov ebp, dword [0x454e0c]
mov eax, 0x93140835
imul ebp, ebp, 0x689f
imul ecx
add edx, ecx
sar edx, 0xf
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
mov eax, ecx
sub eax, ebp
mov ecx, dword [0x454e10]
mov ebp, eax
mov eax, 0x30780947
imul edi
sar edx, 0xe
mov eax, edx
shr eax, 0x1f
add eax, edx
sub ebp, eax
mov eax, 0x3d4263a3
imul ecx
sar edx, 0xd
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
sub ebp, ecx
add ebp, ebx
push esi
mov dword [0x454df4], ebp
call dword [sym.imp.KERNEL32.dll_GetPriorityClass]
test eax, eax
jne 0x418c77
push 0x444f38
call fcn.0042830d
add esp, 4
mov ecx, dword [0x454df8]
mov edi, dword [0x454dfc]
mov edx, dword [0x454e00]
imul edi, edi, 0x689f
mov eax, ecx
imul edx, edx, 0xdecc
imul eax, eax, 0x15208
add edi, edx
sub edi, eax
mov eax, 0x3d4263a3
imul ecx
sar edx, 0xd
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
sub edi, ecx
push esi
mov dword [0x454e08], edi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov ebp, dword [esp + 0x18]
lea edx, [esp + 0x1c]
push edx
push ebp
call sub.KERNEL32.dll_Process32Next
test eax, eax
je 0x418d45
mov ecx, dword [0x454e00]
jmp 0x418af0
mov ecx, dword [0x454e04]
mov eax, 0x20a2ed5d
imul ecx
mov ecx, dword [0x454e14]
sar edx, 0xd
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, ecx
imul edx, edx, 0xdecb
mov esi, eax
sub esi, edx
mov edx, dword [0x454e00]
mov eax, 0x68649efd
imul edx
sar edx, 0xf
mov edi, dword [esp + 0x24]
mov eax, edx
shr eax, 0x1f
add eax, edx
sub esi, eax
mov eax, 0x68649efd
imul ecx
sar edx, 0xf
mov ecx, edx
shr ecx, 0x1f
add esi, edx
lea ecx, [ecx + esi + 0x8bf0]
mov dword [0x454e04], ecx
jmp 0x418d4f
mov ecx, dword [0x454e04]
mov edi, dword [esp + 0x10]
mov esi, dword [0x454df8]
imul ecx, ecx, 0x5706
mov eax, 0xa2ad5745
imul esi
mov ebx, dword [sym.imp.KERNEL32.dll_CloseHandle]
add edx, esi
sar edx, 0xe
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [str._r_____r_____n]
imul edx, edx, 0x64b7
sub edx, eax
lea eax, [edx + ecx - 0xdecb]
push ebp
mov dword [0x454e0c], eax
call ebx
mov ecx, dword [0x454e14]
mov esi, dword [0x454e0c]
imul ecx, ecx, 0xfb02
imul esi, esi, 0xcd41
sub esi, ecx
mov ecx, dword [0x454dfc]
mov eax, 0x68649efd
imul ecx
sar edx, 0xf
add esi, edx
mov ecx, edx
mov edx, dword [0x454e00]
imul edx, edx, 0x8bf0
shr ecx, 0x1f
add ecx, esi
sub ecx, edx
add ecx, 0x64b7
test edi, edi
mov dword [0x454df8], ecx
je 0x418f23
mov eax, dword [esp + 0x24]
push eax
push 0
push 0x1f0fff
call dword [sym.imp.KERNEL32.dll_OpenProcess]
mov ecx, dword [0x454dfc]
mov esi, eax
mov eax, 0xa2ad5745
imul ecx
add edx, ecx
sar edx, 0xe
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
mov edi, ecx
mov ecx, dword [0x454e0c]
mov eax, 0xc2bd9c5d
imul ecx
mov ecx, dword [0x454e14]
sar edx, 0xd
mov eax, edx
shr eax, 0x1f
add eax, edx
mov ebp, eax
mov eax, 0x7fbc240d
imul ecx
mov ecx, dword [0x454e08]
sub ebp, edi
sar edx, 0xf
add ebp, edx
mov edi, edx
mov eax, 0x7fbc240d
imul ecx
sar edx, 0xf
shr edi, 0x1f
mov eax, edx
shr eax, 0x1f
add edi, ebp
add eax, edx
sub edi, eax
sub edi, 0xdecb
test esi, esi
mov dword [0x454dfc], edi
je 0x418f64
mov edi, dword [0x454e10]
mov edx, dword [0x454df8]
imul edi, edi, 0xdecb
imul edx, edx, 0xcd41
add edi, edx
mov eax, 0x7514b1e9
imul ecx
mov ecx, dword [0x454e04]
sar edx, 0xe
imul ecx, ecx, 0x85ba
mov eax, edx
shr eax, 0x1f
add eax, edx
sub edi, eax
push 0
lea edx, [edi + ecx + 0x139e4]
push esi
mov dword [0x454e00], edx
call dword [sym.imp.KERNEL32.dll_TerminateProcess]
mov ecx, dword [0x454df8]
mov eax, 0xa2ad5745
imul ecx
add edx, ecx
mov ecx, dword [str._r_____r_____n]
sar edx, 0xe
imul ecx, ecx, 0x64b7
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x454e04]
imul edx, edx, 0x5706
sub ecx, eax
lea eax, [ecx + edx - 0xdecb]
push esi
mov dword [0x454e0c], eax
call ebx
pop edi
pop esi
pop ebp
mov eax, 1
pop ebx
mov ecx, dword [esp + 0x238]
call fcn.00427501
add esp, 0x23c
ret
mov esi, dword [0x454e08]
mov edx, dword [0x454df4]
imul esi, esi, 0x139e4
imul edx, edx, 0x8bf0
add esi, edx
mov edx, dword [0x454e10]
mov eax, 0x7fbc240d
imul edx
sar edx, 0xf
mov eax, edx
shr eax, 0x1f
add eax, edx
sub esi, eax
sub esi, ecx
add esi, 0xd145
mov dword [0x454e10], esi
mov ecx, dword [esp + 0x248]
pop edi
pop esi
pop ebp
xor eax, eax
pop ebx
call fcn.00427501
add esp, 0x23c
ret