Function at 0x407380
Capabilities:
Enumerate processes

Disassembly:
push ebp
mov ebp, esp
push edi
push esi
push ebx
lea edi, [ebp - 0x244]
sub esp, 0x26c
mov dword [esp + 4], 0
mov dword [esp], 2
call sub.KERNEL32.dll_CreateToolhelp32Snapshot
sub esp, 8
mov esi, eax
mov dword [ebp - 0x244], 0x22c
mov dword [esp + 4], edi
mov dword [esp], eax
call sub.KERNEL32.dll_Process32FirstW
sub esp, 8
test eax, eax
je 0x407600
lea ebx, [ebp - 0x248]
jmp 0x407402
mov byte [ebp - 0x25c], al
mov dword [esp + 8], 4
mov dword [esp + 4], 2
mov dword [esp], edx
call dword [method.QArrayData.deallocate_QArrayData__unsigned_int__unsigned_int_]
movzx eax, byte [ebp - 0x25c]
test al, al
jne 0x407490
mov dword [esp + 4], edi
mov dword [esp], esi
mov dword [ebp - 0x244], 0x22c
call sub.KERNEL32.dll_Process32NextW
sub esp, 8
test eax, eax
je 0x407475
lea eax, [ebp - 0x220]
mov dword [esp + 8], 0xffffffff
mov dword [esp], ebx
mov dword [esp + 4], eax
call dword [method.QString.fromUtf16_unsigned_short_const__int_]
mov eax, dword [ebp + 8]
mov dword [esp + 4], ebx
mov dword [esp], eax
call dword [sym.imp.Qt5Core.dll_operator_QString_const__QString_const_]
mov edx, dword [ebp - 0x248]
mov ecx, dword [edx]
test ecx, ecx
je 0x4073d4
cmp ecx, 0xffffffff
je 0x4073fa
lock sub dword [edx], 1
setne cl
test cl, cl
jne 0x4073fa
mov edx, dword [ebp - 0x248]
jmp 0x4073d4
xor ebx, ebx
mov dword [esp], esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
sub esp, 4
lea esp, [ebp - 0xc]
mov eax, ebx
pop ebx
pop esi
pop edi
pop ebp
ret 4
mov eax, dword [ebp - 0x23c]
mov dword [ebp - 0x25c], eax
call fcn.0041a960
mov edx, dword [ebp - 0x25c]
mov dword [esp], eax
mov ecx, ebx
mov dword [esp + 4], edx
call fcn.00416c00
lea eax, [ebp - 0x250]
sub esp, 8
mov dword [esp + 4], ebx
mov dword [esp], eax
mov eax, dword [method.QDir.toNativeSeparators_QString_const_]
mov dword [ebp - 0x25c], eax
call eax
mov eax, dword [ebp - 0x248]
mov edx, dword [eax]
test edx, edx
jne 0x4075d4
mov dword [esp + 8], 4
mov dword [esp + 4], 2
mov dword [esp], eax
call dword [method.QArrayData.deallocate_QArrayData__unsigned_int__unsigned_int_]
lea eax, [ebp - 0x24c]
mov dword [esp], eax
call dword [method.QCoreApplication.applicationDirPath__]
lea eax, [ebp - 0x24c]
mov dword [esp], ebx
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x25c]
call eax
mov dword [esp + 8], 1
mov dword [esp + 4], 0
lea ecx, [ebp - 0x250]
mov dword [esp], ebx
call dword [method.QString.indexOf_QString_const__int__Qt::CaseSensitivity__const]
mov dword [ebp - 0x25c], eax
mov eax, dword [ebp - 0x248]
sub esp, 0xc
mov edx, dword [eax]
test edx, edx
jne 0x407630
mov dword [esp + 8], 4
mov dword [esp + 4], 2
mov dword [esp], eax
call dword [method.QArrayData.deallocate_QArrayData__unsigned_int__unsigned_int_]
mov eax, dword [ebp - 0x24c]
mov edx, dword [eax]
test edx, edx
jne 0x407610
mov dword [esp + 8], 4
mov dword [esp + 4], 2
mov dword [esp], eax
call dword [method.QArrayData.deallocate_QArrayData__unsigned_int__unsigned_int_]
cmp dword [ebp - 0x25c], 0xffffffff
jne 0x407680
mov eax, dword [ebp - 0x250]
mov edx, dword [eax]
test edx, edx
jne 0x407653
mov dword [esp + 8], 4
mov dword [esp + 4], 2
mov dword [esp], eax
call dword [method.QArrayData.deallocate_QArrayData__unsigned_int__unsigned_int_]
jmp 0x407402
cmp edx, 0xffffffff
je 0x4074fb
lock sub dword [eax], 1
setne dl
test dl, dl
jne 0x4074fb
mov eax, dword [ebp - 0x248]
jmp 0x4074e2
lea esp, [ebp - 0xc]
xor eax, eax
pop ebx
pop esi
pop edi
pop ebp
ret 4
cmp edx, 0xffffffff
je 0x407599
lock sub dword [eax], 1
setne dl
test dl, dl
jne 0x407599
mov eax, dword [ebp - 0x24c]
jmp 0x407580
cmp edx, 0xffffffff
je 0x407570
lock sub dword [eax], 1
setne dl
test dl, dl
jne 0x407570
mov eax, dword [ebp - 0x248]
jmp 0x407557
cmp edx, 0xffffffff
je 0x407402
lock sub dword [eax], 1
setne dl
test dl, dl
jne 0x407402
mov eax, dword [ebp - 0x250]
jmp 0x4075b6
mov eax, dword [ebp - 0x250]
mov ebx, dword [ebp - 0x23c]
mov edx, dword [eax]
test edx, edx
jne 0x4076b0
mov dword [esp + 8], 4
mov dword [esp + 4], 2
mov dword [esp], eax
call dword [method.QArrayData.deallocate_QArrayData__unsigned_int__unsigned_int_]
jmp 0x407477
cmp edx, 0xffffffff
je 0x407477
lock sub dword [eax], 1
setne dl
test dl, dl
jne 0x407477
mov eax, dword [ebp - 0x250]
jmp 0x407692