Function at 0x402130
Capabilities:
Enumerate processes
Terminate process
Terminate process by name

Disassembly:
sub esp, 0x14c
mov eax, dword [0x425ee0]
xor eax, esp
mov dword [esp + 0x148], eax
fldz
xor eax, eax
fst qword [esp + 0x18]
mov dword [esp + 0xc], eax
fldz
mov word [esp + 8], ax
fstp dword [esp + 4]
fstp qword [esp + 0x10]
fld qword [0x4242c8]
fld1
fadd st(1), st(0)
fxch st(1)
fstp qword [0x4242c8]
fld qword [0x4242c8]
mov ecx, dword [0x423b1c]
fadd qword [0x41f458]
mov dword [esp], ecx
fsub qword [0x41f450]
fild dword [esp]
fadd dword [esp + 4]
fsub qword [0x41f448]
fcompp
fnstsw ax
fadd dword [esp + 4]
fstp dword [esp + 4]
inc dword [0x423b1c]
test ah, 0x41
jp 0x4021c4
fld qword [0x423a90]
fsubr qword [0x41f440]
fmul qword [esp + 0x10]
fstp qword [esp + 0x10]
push ebx
push esi
push 0x104
call fcn.0040b489
add esp, 4
push 0
push 2
mov ebx, eax
call sub.KERNEL32.dll_CreateToolhelp32Snapshot
mov esi, eax
mov dword [esp + 8], esi
test esi, esi
je 0x40235e
lea edx, [esp + 0x28]
push edx
push esi
mov dword [esp + 0x30], 0x128
call sub.KERNEL32.dll_Process32First
test eax, eax
je 0x40230b
push ebp
mov ebp, dword [sym.imp.KERNEL32.dll_TerminateProcess]
push edi
mov edi, ebx
lea eax, [esp + 0x54]
sub edi, eax
lea eax, [esp + 0x54]
jmp 0x402220
mov cl, byte [eax]
mov byte [edi + eax], cl
inc eax
test cl, cl
jne 0x402220
fld qword [esp + 0x20]
push ebx
fadd qword [0x41f438]
fsub qword [0x4230d8]
fadd dword [esp + 0x18]
fstp dword [esp + 0x18]
fld qword [0x4230d8]
fld1
fadd st(1), st(0)
fxch st(1)
fstp qword [0x4230d8]
fadd qword [esp + 0x24]
fstp qword [esp + 0x24]
call fcn.0041e571
mov ecx, dword [esp + 0x164]
add esp, 4
mov eax, ebx
mov edi, edi
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x402290
test dl, dl
je 0x40228c
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x402290
add eax, 2
add ecx, 2
test dl, dl
jne 0x402270
xor eax, eax
jmp 0x402295
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
jne 0x4022de
cmp dword [esp + 0x164], eax
je 0x402305
mov ecx, dword [esp + 0x38]
push ecx
push eax
push 1
call dword [sym.imp.KERNEL32.dll_OpenProcess]
mov esi, eax
test esi, esi
je 0x4022da
inc dword [esp + 0x1c]
push 0xffffffffffffffff
push esi
call ebp
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dx, word [esp + 0x18]
movsx eax, dx
mov dword [esp + 0x14], eax
fild dword [esp + 0x14]
fstp dword [esp + 0x14]
mov esi, dword [esp + 0x10]
fld qword [0x41f430]
lea ecx, [esp + 0x30]
push ecx
mov dword [esp + 0x34], 0x128
fstp qword [esp + 0x2c]
push esi
call sub.KERNEL32.dll_Process32Next
test eax, eax
jne 0x402217
jmp 0x402309
inc dword [esp + 0x1c]
pop edi
pop ebp
mov dx, word [0x4235bc]
fld qword [esp + 0x20]
mov cx, word [esp + 0x10]
movsx eax, dx
movsx edx, cx
add edx, eax
mov dword [esp + 8], edx
fild dword [esp + 8]
fcompp
fnstsw ax
test ah, 5
jp 0x402357
mov eax, dword [0x423d00]
mov dword [esp + 8], eax
fild dword [esp + 8]
fadd qword [esp + 0x20]
fmul qword [0x4242f0]
fstp qword [0x4242f0]
dec dword [0x423d00]
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov cx, word [0x423a44]
mov word [0x4235a8], cx
dec word [0x423a44]
push ebx
call fcn.0040b324
mov ecx, dword [esp + 0x154]
mov eax, dword [esp + 0x18]
add esp, 4
pop esi
pop ebx
xor ecx, esp
call fcn.0040b8c5
add esp, 0x14c
ret