Function at 0x10007fc0
Capabilities:
Enumerate processes
Print debug messages

Disassembly:
push ebp
mov ebp, esp
push 0xfffffffffffffffe
push 0x1008fca8
push 0x1005aa50
mov eax, dword fs:[0]
push eax
sub esp, 0x244
mov eax, dword [0x1009cbc0]
xor dword [ebp - 8], eax
xor eax, ebp
mov dword [ebp - 0x1c], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0x10]
mov dword fs:[0], eax
mov dword [ebp - 0x18], esp
mov edi, edx
mov ebx, ecx
mov dword [ebp - 0x250], ebx
mov esi, dword [ebp + 8]
mov dword [ebp - 0x254], esi
mov dword [ebp - 0x24c], 0xffffffff
mov dword [ebp - 0x248], 0
push 0x228
push 0
lea eax, [ebp - 0x244]
push eax
call fcn.10055aa0
add esp, 0xc
mov dword [ebp - 4], 0
mov dword [ebp - 4], 1
mov dword [edi], 0
call fcn.1003ccd0
test eax, eax
je 0x10008133
mov edx, edi
mov ecx, ebx
call fcn.100085e0
mov ebx, eax
test ebx, ebx
je 0x1000810d
push 0x1000a
call fcn.1005218a
add esp, 4
mov esi, eax
test esi, esi
jne 0x10008097
push str.Memory_allocation_error_in_log_file_n
call fcn.10052604
add esp, 4
push str.Memory_allocation_error_in_log_file_n
call dword [sym.imp.KERNEL32.dll_OutputDebugStringW]
jmp 0x100080f3
push 0x100865c0
push 0xffff
push esi
call fcn.10052136
add esp, 0xc
push ebx
test eax, eax
jle 0x100080d2
mov byte [esi + 0xffff], 0
push esi
push str.GetParentProcessInfoEx
push 1
mov edx, 0x303
mov ecx, str...ApiAuxNA.cpp
call fcn.10001cf0
add esp, 0x10
jmp 0x100080ea
push str.Error__d_in_swprintf_s_n
call fcn.10052604
add esp, 8
push str.Error_in_swprintf_s_n
call dword [sym.imp.KERNEL32.dll_OutputDebugStringW]
push esi
call fcn.10052152
add esp, 4
push 0xfffffffffffffffe
lea eax, [ebp - 0x10]
push eax
push 0x1009cbc0
call fcn.10062b20
add esp, 0xc
mov eax, ebx
jmp 0x1000846b
push ecx
mov edx, esi
mov ecx, dword [edi]
call fcn.10008b50
mov esi, eax
push 0xfffffffffffffffe
lea eax, [ebp - 0x10]
push eax
push 0x1009cbc0
call fcn.10062b20
add esp, 0x10
mov eax, esi
jmp 0x1000846b
push 0
push 2
call dword [sym.imp.KERNEL32.dll_CreateToolhelp32Snapshot]
mov esi, eax
mov dword [ebp - 0x24c], esi
cmp esi, 0xffffffff
jne 0x10008201
mov esi, dword [sym.imp.KERNEL32.dll_GetLastError]
call esi
mov ebx, eax
call esi
lea edi, [eax + 0x1e]
push 0x1000a
call fcn.1005218a
add esp, 4
mov esi, eax
test esi, esi
jne 0x1000818a
push str.Memory_allocation_error_in_log_file_n
call fcn.10052604
add esp, 4
push str.Memory_allocation_error_in_log_file_n
call dword [sym.imp.KERNEL32.dll_OutputDebugStringW]
jmp 0x100081e6
push 0x100865c0
push 0xffff
push esi
call fcn.10052136
add esp, 0xc
push edi
test eax, eax
jle 0x100081c5
mov byte [esi + 0xffff], 0
push esi
push str.GetParentProcessInfoEx
push 1
mov edx, 0x30b
mov ecx, str...ApiAuxNA.cpp
call fcn.10001cf0
add esp, 0x10
jmp 0x100081dd
push str.Error__d_in_swprintf_s_n
call fcn.10052604
add esp, 8
push str.Error_in_swprintf_s_n
call dword [sym.imp.KERNEL32.dll_OutputDebugStringW]
push esi
call fcn.10052152
add esp, 4
push 0xfffffffffffffffe
lea eax, [ebp - 0x10]
push eax
push 0x1009cbc0
call fcn.10062b20
add esp, 0xc
lea eax, [ebx + 0x1e]
jmp 0x1000846b
mov dword [ebp - 0x248], 0x22c
lea eax, [ebp - 0x248]
push eax
push esi
call dword [sym.imp.KERNEL32.dll_Process32FirstW]
test eax, eax
jne 0x10008285
mov esi, dword [sym.imp.KERNEL32.dll_GetLastError]
call esi
mov ebx, eax
call esi
lea edi, [eax + 0x1e]
push 0x1000a
call fcn.1005218a
add esp, 4
mov esi, eax
test esi, esi
je 0x10008170
push 0x100865c0
push 0xffff
push esi
call fcn.10052136
add esp, 0xc
push edi
test eax, eax
jle 0x100081c5
mov byte [esi + 0xffff], 0
push esi
push str.GetParentProcessInfoEx
push 1
mov edx, 0x30f
mov ecx, str...ApiAuxNA.cpp
call fcn.10001cf0
add esp, 0x10
jmp 0x100081dd
mov ebx, dword [sym.imp.KERNEL32.dll_Process32NextW]
jmp 0x10008290
mov eax, dword [ebp - 0x250]
cmp dword [ebp - 0x240], eax
je 0x100082ae
lea eax, [ebp - 0x248]
push eax
push esi
call ebx
test eax, eax
jne 0x10008290
jmp 0x100082b6
mov eax, dword [ebp - 0x230]
mov dword [edi], eax
cmp dword [edi], 0
jne 0x100082d8
push 0xfffffffffffffffe
lea eax, [ebp - 0x10]
push eax
push 0x1009cbc0
call fcn.10062b20
add esp, 0xc
mov eax, 9
jmp 0x1000846b
lea eax, [ebp - 0x248]
push eax
push esi
call dword [sym.imp.KERNEL32.dll_Process32FirstW]
test eax, eax
jne 0x10008352
mov esi, dword [sym.imp.KERNEL32.dll_GetLastError]
call esi
mov ebx, eax
call esi
lea edi, [eax + 0x1e]
push 0x1000a
call fcn.1005218a
add esp, 4
mov esi, eax
test esi, esi
je 0x10008170
push 0x100865c0
push 0xffff
push esi
call fcn.10052136
add esp, 0xc
push edi
test eax, eax
jle 0x100081c5
mov byte [esi + 0xffff], 0
push esi
push str.GetParentProcessInfoEx
push 1
mov edx, 0x31d
mov ecx, str...ApiAuxNA.cpp
call fcn.10001cf0
add esp, 0x10
jmp 0x100081dd
mov eax, dword [ebp - 0x240]
cmp eax, dword [edi]
jne 0x1000838f
push 0xffffffffffffffff
lea eax, [ebp - 0x224]
push eax
push 0x104
push dword [ebp - 0x254]
call fcn.1005379d
push 0xfffffffffffffffe
lea eax, [ebp - 0x10]
push eax
push 0x1009cbc0
call fcn.10062b20
add esp, 0x1c
xor eax, eax
jmp 0x1000846b
lea eax, [ebp - 0x248]
push eax
push esi
call ebx
test eax, eax
jne 0x10008352
mov dword [ebp - 4], eax
call fcn.100083bc
mov dword [ebp - 4], 0xfffffffe
mov eax, 9
jmp 0x1000846b
mov ecx, dword [ebp - 0x10]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x1c]
xor ecx, ebp
call fcn.1005132c
mov esp, ebp
pop ebp
ret