Function at 0x8693d0
Capabilities:
Enumerate processes
Enumerate threads

Disassembly:
mov eax, 0x4750
call fcn.0087a1b0
mov eax, dword [0x96d70c]
push ebx
push ebp
push esi
push edi
push 0x1f
lea ecx, [esp + 0x238]
xor ebx, ebx
push 0x96d6fc
push ecx
mov dword [esp + 0x3c], ebx
mov dword [esp + 0x2368], ebx
mov dword [esp + 0x40], eax
call fcn.0087b372
mov edx, dword [esp + 0x3c]
push 0x1f
shl edx, 5
push 0x965a54
mov byte [esp + edx + 0x267], bl
mov eax, dword [esp + 0x44]
shl eax, 5
lea ecx, [esp + eax + 0x1248]
push ecx
call fcn.0087b372
mov edx, dword [esp + 0x48]
add esp, 0x18
shl edx, 5
mov byte [esp + edx + 0x1253], bl
mov eax, dword [esp + 0x30]
inc eax
cmp eax, 0x80
mov dword [esp + 0x30], eax
jge 0x869ff5
mov ecx, dword [0x96d6f4]
push 0x1f
mov dword [esp + eax*4 + 0x38], ecx
mov edx, dword [esp + 0x34]
shl edx, 5
push 0x96d6e8
lea eax, [esp + edx + 0x23c]
push eax
call fcn.0087b372
mov ecx, dword [esp + 0x3c]
push 0x1f
shl ecx, 5
push 0x96d6dc
mov byte [esp + ecx + 0x267], bl
mov edx, dword [esp + 0x44]
shl edx, 5
lea eax, [esp + edx + 0x1248]
push eax
call fcn.0087b372
mov ecx, dword [esp + 0x48]
add esp, 0x18
shl ecx, 5
mov byte [esp + ecx + 0x1253], bl
mov eax, dword [esp + 0x30]
inc eax
cmp eax, 0x80
mov dword [esp + 0x30], eax
jge 0x869ff5
mov edx, dword [0x96d6d4]
push 0x1f
mov dword [esp + eax*4 + 0x38], edx
mov eax, dword [esp + 0x34]
shl eax, 5
push 0x96d6e8
lea ecx, [esp + eax + 0x23c]
push ecx
call fcn.0087b372
mov edx, dword [esp + 0x3c]
push 0x1f
shl edx, 5
push 0x96d6c8
mov byte [esp + edx + 0x267], bl
mov eax, dword [esp + 0x44]
shl eax, 5
lea ecx, [esp + eax + 0x1248]
push ecx
call fcn.0087b372
mov edx, dword [esp + 0x48]
add esp, 0x18
shl edx, 5
mov byte [esp + edx + 0x1253], bl
mov eax, dword [esp + 0x30]
inc eax
cmp eax, 0x80
mov dword [esp + 0x30], eax
jge 0x869ff5
mov ecx, dword [0x96d6c0]
push 0x1f
mov dword [esp + eax*4 + 0x38], ecx
mov edx, dword [esp + 0x34]
shl edx, 5
push 0x96d6b0
lea eax, [esp + edx + 0x23c]
push eax
call fcn.0087b372
mov ecx, dword [esp + 0x3c]
push 0x1f
shl ecx, 5
push 0x96d6a4
mov byte [esp + ecx + 0x267], bl
mov edx, dword [esp + 0x44]
shl edx, 5
lea eax, [esp + edx + 0x1248]
push eax
call fcn.0087b372
mov ecx, dword [esp + 0x48]
add esp, 0x18
shl ecx, 5
mov byte [esp + ecx + 0x1253], bl
mov eax, dword [esp + 0x30]
inc eax
cmp eax, 0x80
mov dword [esp + 0x30], eax
jge 0x869ff5
mov edx, dword [0x96d69c]
push 0x1f
mov dword [esp + eax*4 + 0x38], edx
mov eax, dword [esp + 0x34]
shl eax, 5
push 0x96d68c
lea ecx, [esp + eax + 0x23c]
push ecx
call fcn.0087b372
mov edx, dword [esp + 0x3c]
push 0x1f
shl edx, 5
push 0x96d684
mov byte [esp + edx + 0x267], bl
mov eax, dword [esp + 0x44]
shl eax, 5
lea ecx, [esp + eax + 0x1248]
push ecx
call fcn.0087b372
mov edx, dword [esp + 0x48]
add esp, 0x18
shl edx, 5
mov byte [esp + edx + 0x1253], bl
mov eax, dword [esp + 0x30]
inc eax
cmp eax, 0x80
mov dword [esp + 0x30], eax
jge 0x869ff5
mov ecx, dword [0x96d67c]
push 0x1f
mov dword [esp + eax*4 + 0x38], ecx
mov edx, dword [esp + 0x34]
shl edx, 5
push 0x96d670
lea eax, [esp + edx + 0x23c]
push eax
call fcn.0087b372
mov ecx, dword [esp + 0x3c]
push 0x1f
shl ecx, 5
push 0x96d684
mov byte [esp + ecx + 0x267], bl
mov edx, dword [esp + 0x44]
shl edx, 5
lea eax, [esp + edx + 0x1248]
push eax
call fcn.0087b372
mov ecx, dword [esp + 0x48]
add esp, 0x18
shl ecx, 5
mov byte [esp + ecx + 0x1253], bl
mov eax, dword [esp + 0x30]
inc eax
cmp eax, 0x80
mov dword [esp + 0x30], eax
jge 0x869ff5
mov edx, dword [0x96d668]
push 0x1f
mov dword [esp + eax*4 + 0x38], edx
mov eax, dword [esp + 0x34]
shl eax, 5
push 0x96d65c
lea ecx, [esp + eax + 0x23c]
push ecx
call fcn.0087b372
mov edx, dword [esp + 0x3c]
push 0x1f
shl edx, 5
push 0x96d684
mov byte [esp + edx + 0x267], bl
mov eax, dword [esp + 0x44]
shl eax, 5
lea ecx, [esp + eax + 0x1248]
push ecx
call fcn.0087b372
mov edx, dword [esp + 0x48]
add esp, 0x18
shl edx, 5
mov byte [esp + edx + 0x1253], bl
mov eax, dword [esp + 0x30]
inc eax
cmp eax, 0x80
mov dword [esp + 0x30], eax
jge 0x869ff5
mov ecx, dword [0x96d654]
push 0x1f
mov dword [esp + eax*4 + 0x38], ecx
mov edx, dword [esp + 0x34]
shl edx, 5
push 0x96d644
lea eax, [esp + edx + 0x23c]
push eax
call fcn.0087b372
mov ecx, dword [esp + 0x3c]
push 0x1f
shl ecx, 5
push 0x96d640
mov byte [esp + ecx + 0x267], bl
mov edx, dword [esp + 0x44]
shl edx, 5
lea eax, [esp + edx + 0x1248]
push eax
call fcn.0087b372
mov ecx, dword [esp + 0x48]
add esp, 0x18
shl ecx, 5
mov byte [esp + ecx + 0x1253], bl
mov eax, dword [esp + 0x30]
inc eax
cmp eax, 0x80
mov dword [esp + 0x30], eax
jge 0x869ff5
mov edx, dword [0x96d654]
push 0x1f
mov dword [esp + eax*4 + 0x38], edx
mov eax, dword [esp + 0x34]
shl eax, 5
push 0x96d62c
lea ecx, [esp + eax + 0x23c]
push ecx
call fcn.0087b372
mov edx, dword [esp + 0x3c]
push 0x1f
shl edx, 5
push 0x96d640
mov byte [esp + edx + 0x267], bl
mov eax, dword [esp + 0x44]
shl eax, 5
lea ecx, [esp + eax + 0x1248]
push ecx
call fcn.0087b372
mov edx, dword [esp + 0x48]
add esp, 0x18
shl edx, 5
mov byte [esp + edx + 0x1253], bl
mov eax, dword [esp + 0x30]
inc eax
cmp eax, 0x80
mov dword [esp + 0x30], eax
jge 0x869ff5
mov ecx, dword [0x96d624]
push 0x1f
mov dword [esp + eax*4 + 0x38], ecx
mov edx, dword [esp + 0x34]
shl edx, 5
push 0x96d614
lea eax, [esp + edx + 0x23c]
push eax
call fcn.0087b372
mov ecx, dword [esp + 0x3c]
push 0x1f
shl ecx, 5
push 0x96d60c
mov byte [esp + ecx + 0x267], bl
mov edx, dword [esp + 0x44]
shl edx, 5
lea eax, [esp + edx + 0x1248]
push eax
call fcn.0087b372
mov ecx, dword [esp + 0x48]
add esp, 0x18
shl ecx, 5
mov byte [esp + ecx + 0x1253], bl
mov eax, dword [esp + 0x30]
inc eax
cmp eax, 0x80
mov dword [esp + 0x30], eax
jge 0x869ff5
mov edx, dword [0x96d604]
push 0x1f
mov dword [esp + eax*4 + 0x38], edx
mov eax, dword [esp + 0x34]
shl eax, 5
push 0x96d5f4
lea ecx, [esp + eax + 0x23c]
push ecx
call fcn.0087b372
mov edx, dword [esp + 0x3c]
push 0x1f
shl edx, 5
push 0x96d5e8
mov byte [esp + edx + 0x267], bl
mov eax, dword [esp + 0x44]
shl eax, 5
lea ecx, [esp + eax + 0x1248]
push ecx
call fcn.0087b372
mov edx, dword [esp + 0x48]
add esp, 0x18
shl edx, 5
mov byte [esp + edx + 0x1253], bl
mov eax, dword [esp + 0x30]
inc eax
cmp eax, 0x80
mov dword [esp + 0x30], eax
jge 0x869ff5
mov ecx, dword [0x96d5e0]
push 0x1f
mov dword [esp + eax*4 + 0x38], ecx
mov edx, dword [esp + 0x34]
shl edx, 5
push 0x96d5d4
lea eax, [esp + edx + 0x23c]
push eax
call fcn.0087b372
mov ecx, dword [esp + 0x3c]
push 0x1f
shl ecx, 5
push 0x96d5c8
mov byte [esp + ecx + 0x267], bl
mov edx, dword [esp + 0x44]
shl edx, 5
lea eax, [esp + edx + 0x1248]
push eax
call fcn.0087b372
mov ecx, dword [esp + 0x48]
add esp, 0x18
shl ecx, 5
mov byte [esp + ecx + 0x1253], bl
mov eax, dword [esp + 0x30]
inc eax
cmp eax, 0x80
mov dword [esp + 0x30], eax
jge 0x869ff5
mov edx, dword [0x96d5c0]
push 0x1f
mov dword [esp + eax*4 + 0x38], edx
mov eax, dword [esp + 0x34]
shl eax, 5
push 0x96d5b4
lea ecx, [esp + eax + 0x23c]
push ecx
call fcn.0087b372
mov edx, dword [esp + 0x3c]
push 0x1f
shl edx, 5
push 0x96d5a8
mov byte [esp + edx + 0x267], bl
mov eax, dword [esp + 0x44]
shl eax, 5
lea ecx, [esp + eax + 0x1248]
push ecx
call fcn.0087b372
mov edx, dword [esp + 0x48]
add esp, 0x18
shl edx, 5
mov byte [esp + edx + 0x1253], bl
mov eax, dword [esp + 0x30]
inc eax
cmp eax, 0x80
mov dword [esp + 0x30], eax
jge 0x869ff5
mov ecx, dword [0x96d5a0]
push 0x1f
mov dword [esp + eax*4 + 0x38], ecx
mov edx, dword [esp + 0x34]
shl edx, 5
push 0x96d6e8
lea eax, [esp + edx + 0x23c]
push eax
call fcn.0087b372
mov ecx, dword [esp + 0x3c]
push 0x1f
shl ecx, 5
push 0x96d594
mov byte [esp + ecx + 0x267], bl
mov edx, dword [esp + 0x44]
shl edx, 5
lea eax, [esp + edx + 0x1248]
push eax
call fcn.0087b372
mov ecx, dword [esp + 0x48]
add esp, 0x18
shl ecx, 5
mov byte [esp + ecx + 0x1253], bl
mov eax, dword [esp + 0x30]
inc eax
cmp eax, 0x80
mov dword [esp + 0x30], eax
jge 0x869ff5
mov edx, dword [0x96d58c]
push 0x1f
mov dword [esp + eax*4 + 0x38], edx
mov eax, dword [esp + 0x34]
shl eax, 5
push 0x96d580
lea ecx, [esp + eax + 0x23c]
push ecx
call fcn.0087b372
mov edx, dword [esp + 0x3c]
push 0x1f
shl edx, 5
push 0x96d574
mov byte [esp + edx + 0x267], bl
mov eax, dword [esp + 0x44]
shl eax, 5
lea ecx, [esp + eax + 0x1248]
push ecx
call fcn.0087b372
mov edx, dword [esp + 0x48]
add esp, 0x18
shl edx, 5
mov byte [esp + edx + 0x1253], bl
mov eax, dword [esp + 0x30]
inc eax
cmp eax, 0x80
mov dword [esp + 0x30], eax
jge 0x869ff5
mov ecx, dword [0x96d56c]
push 0x1f
mov dword [esp + eax*4 + 0x38], ecx
mov edx, dword [esp + 0x34]
shl edx, 5
push 0x96d6e8
lea eax, [esp + edx + 0x23c]
push eax
call fcn.0087b372
mov ecx, dword [esp + 0x3c]
push 0x1f
shl ecx, 5
push 0x96d560
mov byte [esp + ecx + 0x267], bl
mov edx, dword [esp + 0x44]
shl edx, 5
lea eax, [esp + edx + 0x1248]
push eax
call fcn.0087b372
mov ecx, dword [esp + 0x48]
add esp, 0x18
shl ecx, 5
mov byte [esp + ecx + 0x1253], bl
mov eax, dword [esp + 0x30]
inc eax
cmp eax, 0x80
mov dword [esp + 0x30], eax
jge 0x869ff5
mov edx, dword [0x96d558]
push 0x1f
mov dword [esp + eax*4 + 0x38], edx
mov eax, dword [esp + 0x34]
shl eax, 5
push 0x96d54c
lea ecx, [esp + eax + 0x23c]
push ecx
call fcn.0087b372
mov edx, dword [esp + 0x3c]
push 0x1f
shl edx, 5
push 0x96d544
mov byte [esp + edx + 0x267], bl
mov eax, dword [esp + 0x44]
shl eax, 5
lea ecx, [esp + eax + 0x1248]
push ecx
call fcn.0087b372
mov edx, dword [esp + 0x48]
add esp, 0x18
shl edx, 5
mov byte [esp + edx + 0x1253], bl
mov eax, dword [esp + 0x30]
inc eax
cmp eax, 0x80
mov dword [esp + 0x30], eax
jge 0x869ff5
mov ecx, dword [0x96d53c]
push 0x1f
mov dword [esp + eax*4 + 0x38], ecx
mov edx, dword [esp + 0x34]
shl edx, 5
push 0x96d530
lea eax, [esp + edx + 0x23c]
push eax
call fcn.0087b372
mov ecx, dword [esp + 0x3c]
push 0x1f
shl ecx, 5
push 0x96d544
mov byte [esp + ecx + 0x267], bl
mov edx, dword [esp + 0x44]
shl edx, 5
lea eax, [esp + edx + 0x1248]
push eax
call fcn.0087b372
mov ecx, dword [esp + 0x48]
add esp, 0x18
shl ecx, 5
mov byte [esp + ecx + 0x1253], bl
mov eax, dword [esp + 0x30]
inc eax
cmp eax, 0x80
mov dword [esp + 0x30], eax
jge 0x869ff5
mov edx, dword [0x96d528]
push 0x1f
mov dword [esp + eax*4 + 0x38], edx
mov eax, dword [esp + 0x34]
shl eax, 5
push 0x96d51c
lea ecx, [esp + eax + 0x23c]
push ecx
call fcn.0087b372
mov edx, dword [esp + 0x3c]
push 0x1f
shl edx, 5
push 0x96d544
mov byte [esp + edx + 0x267], bl
mov eax, dword [esp + 0x44]
shl eax, 5
lea ecx, [esp + eax + 0x1248]
push ecx
call fcn.0087b372
mov edx, dword [esp + 0x48]
add esp, 0x18
shl edx, 5
mov byte [esp + edx + 0x1253], bl
mov eax, dword [esp + 0x30]
inc eax
cmp eax, 0x80
mov dword [esp + 0x30], eax
jge 0x869ff5
mov ecx, dword [0x96d514]
push 0x1f
mov dword [esp + eax*4 + 0x38], ecx
mov edx, dword [esp + 0x34]
shl edx, 5
push 0x96d504
lea eax, [esp + edx + 0x23c]
push eax
call fcn.0087b372
mov ecx, dword [esp + 0x3c]
push 0x1f
shl ecx, 5
push 0x96d4fc
mov byte [esp + ecx + 0x267], bl
mov edx, dword [esp + 0x44]
shl edx, 5
lea eax, [esp + edx + 0x1248]
push eax
call fcn.0087b372
mov ecx, dword [esp + 0x48]
add esp, 0x18
shl ecx, 5
mov byte [esp + ecx + 0x1253], bl
mov eax, dword [esp + 0x30]
inc eax
cmp eax, 0x80
mov dword [esp + 0x30], eax
jge 0x869ff5
mov edx, dword [0x96d4f4]
push 0x1f
mov dword [esp + eax*4 + 0x38], edx
mov eax, dword [esp + 0x34]
shl eax, 5
push 0x96d4e8
lea ecx, [esp + eax + 0x23c]
push ecx
call fcn.0087b372
mov edx, dword [esp + 0x3c]
push 0x1f
shl edx, 5
push 0x96d044
mov byte [esp + edx + 0x267], bl
mov eax, dword [esp + 0x44]
shl eax, 5
lea ecx, [esp + eax + 0x1248]
push ecx
call fcn.0087b372
mov edx, dword [esp + 0x48]
add esp, 0x18
shl edx, 5
mov byte [esp + edx + 0x1253], bl
mov eax, dword [esp + 0x30]
inc eax
cmp eax, 0x80
mov dword [esp + 0x30], eax
jge 0x869ff5
mov ecx, dword [0x96d4e0]
push 0x1f
mov dword [esp + eax*4 + 0x38], ecx
mov edx, dword [esp + 0x34]
shl edx, 5
push 0x96d4d4
lea eax, [esp + edx + 0x23c]
push eax
call fcn.0087b372
mov ecx, dword [esp + 0x3c]
push 0x1f
shl ecx, 5
push 0x96d044
mov byte [esp + ecx + 0x267], bl
mov edx, dword [esp + 0x44]
shl edx, 5
lea eax, [esp + edx + 0x1248]
push eax
call fcn.0087b372
mov ecx, dword [esp + 0x48]
add esp, 0x18
shl ecx, 5
mov byte [esp + ecx + 0x1253], bl
mov eax, dword [esp + 0x30]
inc eax
cmp eax, 0x80
mov dword [esp + 0x30], eax
jge 0x869ff5
mov edx, dword [0x96d4cc]
push 0x1f
mov dword [esp + eax*4 + 0x38], edx
mov eax, dword [esp + 0x34]
shl eax, 5
push 0x96d4c0
lea ecx, [esp + eax + 0x23c]
push ecx
call fcn.0087b372
mov edx, dword [esp + 0x3c]
push 0x1f
shl edx, 5
push 0x96d044
mov byte [esp + edx + 0x267], bl
mov eax, dword [esp + 0x44]
shl eax, 5
lea ecx, [esp + eax + 0x1248]
push ecx
call fcn.0087b372
mov edx, dword [esp + 0x48]
add esp, 0x18
shl edx, 5
mov byte [esp + edx + 0x1253], bl
mov eax, dword [esp + 0x30]
inc eax
cmp eax, 0x80
mov dword [esp + 0x30], eax
jge 0x869ff5
mov ecx, dword [0x96d4b8]
push 0x1f
mov dword [esp + eax*4 + 0x38], ecx
mov edx, dword [esp + 0x34]
shl edx, 5
push 0x96d4ac
lea eax, [esp + edx + 0x23c]
push eax
call fcn.0087b372
mov ecx, dword [esp + 0x3c]
push 0x1f
shl ecx, 5
push 0x96d044
mov byte [esp + ecx + 0x267], bl
mov edx, dword [esp + 0x44]
shl edx, 5
lea eax, [esp + edx + 0x1248]
push eax
call fcn.0087b372
mov ecx, dword [esp + 0x48]
add esp, 0x18
shl ecx, 5
mov byte [esp + ecx + 0x1253], bl
mov eax, dword [esp + 0x30]
inc eax
cmp eax, 0x80
mov dword [esp + 0x30], eax
jge 0x869ff5
mov edx, dword [0x96d4a4]
push 0x1f
mov dword [esp + eax*4 + 0x38], edx
mov eax, dword [esp + 0x34]
shl eax, 5
push 0x96d498
lea ecx, [esp + eax + 0x23c]
push ecx
call fcn.0087b372
mov edx, dword [esp + 0x3c]
push 0x1f
shl edx, 5
push 0x96d044
mov byte [esp + edx + 0x267], bl
mov eax, dword [esp + 0x44]
shl eax, 5
lea ecx, [esp + eax + 0x1248]
push ecx
call fcn.0087b372
mov edx, dword [esp + 0x48]
add esp, 0x18
shl edx, 5
mov byte [esp + edx + 0x1253], bl
mov eax, dword [esp + 0x30]
inc eax
cmp eax, 0x80
mov dword [esp + 0x30], eax
jge 0x869ff5
mov ecx, dword [0x96d490]
push 0x1f
mov dword [esp + eax*4 + 0x38], ecx
mov edx, dword [esp + 0x34]
shl edx, 5
push 0x96d480
lea eax, [esp + edx + 0x23c]
push eax
call fcn.0087b372
mov ecx, dword [esp + 0x3c]
push 0x1f
shl ecx, 5
push 0x96d044
mov byte [esp + ecx + 0x267], bl
mov edx, dword [esp + 0x44]
shl edx, 5
lea eax, [esp + edx + 0x1248]
push eax
call fcn.0087b372
mov ecx, dword [esp + 0x48]
add esp, 0x18
shl ecx, 5
mov byte [esp + ecx + 0x1253], bl
mov eax, dword [esp + 0x30]
inc eax
cmp eax, 0x80
mov dword [esp + 0x30], eax
jge 0x869ff5
mov edx, dword [0x96d490]
push 0x1f
mov dword [esp + eax*4 + 0x38], edx
mov eax, dword [esp + 0x34]
shl eax, 5
push 0x96d470
lea ecx, [esp + eax + 0x23c]
push ecx
call fcn.0087b372
mov edx, dword [esp + 0x3c]
push 0x1f
shl edx, 5
push 0x96d044
mov byte [esp + edx + 0x267], bl
mov eax, dword [esp + 0x44]
shl eax, 5
lea ecx, [esp + eax + 0x1248]
push ecx
call fcn.0087b372
mov edx, dword [esp + 0x48]
add esp, 0x18
shl edx, 5
mov byte [esp + edx + 0x1253], bl
mov eax, dword [esp + 0x30]
inc eax
mov dword [esp + 0x30], eax
push 0x96d044
push 0x96d464
push 0x96d490
lea ecx, [esp + 0x3c]
call fcn.0086a590
push 0x96d044
push 0x96d458
push 0x96d490
lea ecx, [esp + 0x3c]
call fcn.0086a590
push 0x96d044
push 0x96d44c
push 0x96d444
lea ecx, [esp + 0x3c]
call fcn.0086a590
push 0x96d43c
push 0x96d430
push 0x96d428
lea ecx, [esp + 0x3c]
call fcn.0086a590
push 0x96d420
push 0x96d414
push 0x96d40c
lea ecx, [esp + 0x3c]
call fcn.0086a590
push 0x96d404
push 0x96d6e8
push 0x96d3fc
lea ecx, [esp + 0x3c]
call fcn.0086a590
push 0x96d3f4
push 0x96d6e8
push 0x96d3ec
lea ecx, [esp + 0x3c]
call fcn.0086a590
push 0x96d3e4
push 0x96d6e8
push 0x96d3dc
lea ecx, [esp + 0x3c]
call fcn.0086a590
push 0x96d3d4
push 0x96d6e8
push 0x96d3cc
lea ecx, [esp + 0x3c]
call fcn.0086a590
push 0x96d3b8
push 0x96d6e8
push 0x96d3b0
lea ecx, [esp + 0x3c]
call fcn.0086a590
push 0x96d3a4
push 0x96d394
push 0x96d38c
lea ecx, [esp + 0x3c]
call fcn.0086a590
push 0x96d384
push 0x96d37c
push 0x96d374
lea ecx, [esp + 0x3c]
call fcn.0086a590
push 0x96d368
push 0x96d358
push 0x96d350
lea ecx, [esp + 0x3c]
call fcn.0086a590
push 0x96d368
push 0x96d340
push 0x96d338
lea ecx, [esp + 0x3c]
call fcn.0086a590
push 0x96d330
push 0x96d340
push 0x96d328
lea ecx, [esp + 0x3c]
call fcn.0086a590
push 0x96d31c
push 0x96d30c
push 0x96d304
lea ecx, [esp + 0x3c]
call fcn.0086a590
push 0x96d2f8
push 0x96d2e8
push 0x96d2e0
lea ecx, [esp + 0x3c]
call fcn.0086a590
push 0x96d2d4
push 0x96d2c4
push 0x96d2bc
lea ecx, [esp + 0x3c]
call fcn.0086a590
push 0x96d2b0
push 0x96d2a0
push 0x96d298
lea ecx, [esp + 0x3c]
call fcn.0086a590
push 0x96d28c
push 0x96d2a0
push 0x96d284
lea ecx, [esp + 0x3c]
call fcn.0086a590
push 0x96d278
push 0x96d2a0
push 0x96d270
lea ecx, [esp + 0x3c]
call fcn.0086a590
push 0x96d264
push 0x96d2a0
push 0x96d25c
lea ecx, [esp + 0x3c]
call fcn.0086a590
push 0x96d250
push 0x96d248
push 0x96d240
lea ecx, [esp + 0x3c]
call fcn.0086a590
push 0x96d234
push 0x96d228
push 0x96d220
lea ecx, [esp + 0x3c]
call fcn.0086a590
push 0x96d214
push 0x96d204
push 0x96d1fc
lea ecx, [esp + 0x3c]
call fcn.0086a590
push 0x96d1f4
push 0x96d204
push 0x96d1ec
lea ecx, [esp + 0x3c]
call fcn.0086a590
push 0x96d1e4
push 0x96d1d8
push 0x96d1d0
lea ecx, [esp + 0x3c]
call fcn.0086a590
push 0x96d1c8
push 0x96d1bc
push 0x96d1b4
lea ecx, [esp + 0x3c]
call fcn.0086a590
push 0x96d1ac
push 0x96d1a0
push 0x96d198
lea ecx, [esp + 0x3c]
call fcn.0086a590
push 0x96d190
push 0x96d188
push 0x96d180
lea ecx, [esp + 0x3c]
call fcn.0086a590
push 0x96d190
push 0x96d174
push 0x96d16c
lea ecx, [esp + 0x3c]
call fcn.0086a590
push 0x96d168
push 0x96d6e8
push 0x96d160
lea ecx, [esp + 0x3c]
call fcn.0086a590
push 0x96d154
push 0x96d148
push 0x96d140
lea ecx, [esp + 0x3c]
call fcn.0086a590
push 0x96d138
push 0x96d128
push 0x96d120
lea ecx, [esp + 0x3c]
call fcn.0086a590
push 0x96d118
push 0x96d10c
push 0x96d104
lea ecx, [esp + 0x3c]
call fcn.0086a590
push 0x96d0fc
push 0x96d10c
push 0x96d0f4
lea ecx, [esp + 0x3c]
call fcn.0086a590
push 0x96d0ec
push 0x96d0d8
push 0x96d0d0
lea ecx, [esp + 0x3c]
call fcn.0086a590
push 0x96d0c4
push 0x96d0b8
push 0x96d0b0
lea ecx, [esp + 0x3c]
call fcn.0086a590
push 0x96d0a0
push 0x96d08c
push 0x96d084
lea ecx, [esp + 0x3c]
call fcn.0086a590
push 0x96d250
push 0x96d074
push 0x96d06c
lea ecx, [esp + 0x3c]
call fcn.0086a590
push 0x96d1ac
push 0x96d05c
push 0x96d054
lea ecx, [esp + 0x3c]
call fcn.0086a590
mov ecx, 0x49
xor eax, eax
lea edi, [esp + 0x2238]
mov dword [esp + 0x2234], ebx
push ebx
push 2
rep stosd dword es:[edi], eax
call sub.kernel32.dll_CreateToolhelp32Snapshot
mov ebp, eax
cmp ebp, 0xffffffff
mov dword [esp + 0x10], ebp
je 0x86a56b
lea eax, [esp + 0x2234]
mov dword [esp + 0x2234], 0x128
push eax
push ebp
call sub.kernel32.dll_Process32First
test eax, eax
je 0x86a56b
lea ecx, [esp + 0x2258]
push 0x5c
push ecx
call fcn.0087cf51
mov edi, eax
add esp, 8
cmp edi, ebx
jne 0x86a43d
lea edi, [esp + 0x2258]
jmp 0x86a43e
inc edi
push edi
call fcn.0087cec7
mov eax, dword [esp + 0x34]
add esp, 4
xor esi, esi
cmp eax, ebx
jle 0x86a481
lea ebp, [esp + 0x234]
lea edx, [esp + 0x1234]
test edx, edx
jne 0x86a471
push edi
push ebp
call fcn.0087bd4a
add esp, 8
test eax, eax
je 0x86a4ad
mov eax, dword [esp + 0x30]
inc esi
add ebp, 0x20
cmp esi, eax
jl 0x86a458
mov ebp, dword [esp + 0x10]
mov eax, dword [esp + 0x223c]
push edi
push eax
lea ecx, [esp + 0x2364]
call fcn.0086a600
lea ecx, [esp + 0x2234]
push ecx
push ebp
call sub.kernel32.dll_Process32Next
test eax, eax
je 0x86a4bc
jmp 0x86a41c
mov eax, dword [esp + esi*4 + 0x34]
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x4750
ret
push ebp
call dword [sym.imp.kernel32.dll_CloseHandle]
mov ecx, 6
xor eax, eax
lea edi, [esp + 0x18]
mov dword [esp + 0x14], ebx
push ebx
push 4
rep stosd dword es:[edi], eax
call sub.kernel32.dll_CreateToolhelp32Snapshot
mov ebp, eax
cmp ebp, 0xffffffff
je 0x86a56b
lea edx, [esp + 0x14]
mov dword [esp + 0x14], 0x1c
push edx
push ebp
call sub.kernel32.dll_Thread32First
test eax, eax
je 0x86a564
mov edi, dword [esp + 0x1c]
cmp edi, ebx
je 0x86a555
mov edx, dword [esp + 0x235c]
xor eax, eax
cmp edx, ebx
jle 0x86a52a
mov esi, dword [esp + 0x20]
lea ecx, [esp + 0x2360]
cmp dword [ecx], esi
je 0x86a578
inc eax
add ecx, 4
cmp eax, edx
jl 0x86a51e
xor eax, eax
cmp eax, ebx
mov dword [0x97f7f0], eax
je 0x86a555
lea eax, [esp + 0x30]
mov dword [0x97f7f4], ebx
push eax
push 0x8692e0
push edi
call dword [sym.imp.user32.dll_EnumThreadWindows]
mov eax, dword [0x97f7f4]
cmp eax, ebx
jne 0x86a56d
lea ecx, [esp + 0x14]
push ecx
push ebp
call sub.kernel32.dll_Thread32Next
test eax, eax
jne 0x86a4fe
push ebp
call dword [sym.imp.kernel32.dll_CloseHandle]
xor eax, eax
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x4750
ret
shl eax, 5
lea eax, [esp + eax + 0x2760]
jmp 0x86a52c