Function at 0x40936b
Capabilities:
Enumerate gui resources
Enumerate processes
Terminate process

Disassembly:
push 0x26c
mov eax, 0x47f0fc
call fcn.004649f3
mov ebx, ecx
mov dword [ebp - 0x26c], ebx
xor esi, esi
mov dword [ebp - 0x278], esi
mov dword [ebp - 0x274], esi
mov dword [ebp - 0x270], esi
push 0x497a98
lea ecx, [ebp - 0x2c]
mov dword [ebp - 4], esi
call fcn.00403358
push esi
push 2
mov byte [ebp - 4], 1
mov dword [ebp - 0x260], esi
call dword [sym.imp.KERNEL32.dll_CreateToolhelp32Snapshot]
mov edi, eax
or esi, 0xffffffff
cmp edi, esi
je 0x4095c3
lea eax, [ebp - 0x25c]
mov dword [ebp - 0x25c], 0x22c
push eax
push edi
call dword [sym.imp.KERNEL32.dll_Process32FirstW]
test eax, eax
jne 0x4093f1
push edi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push 0xfffffffffffffffe
pop esi
jmp 0x4095c3
lea eax, [ebp - 0x238]
push eax
call fcn.004026a2
pop ecx
push eax
lea eax, [ebp - 0x238]
push eax
lea ecx, [ebp - 0x2c]
call fcn.00403a06
lea ecx, [ebp - 0x2c]
call fcn.0042696d
push ebx
call fcn.004026a2
pop ecx
push eax
push 0
push ebx
lea ecx, [ebp - 0x2c]
call fcn.00403690
mov ebx, dword [sym.imp.KERNEL32.dll_CloseHandle]
cmp eax, esi
je 0x4094c0
push dword [ebp - 0x254]
push 0
push 0x1fffff
call dword [sym.imp.KERNEL32.dll_OpenProcess]
test eax, eax
je 0x4094ae
push eax
call ebx
mov eax, dword [ebp - 0x254]
and dword [ebp - 0x264], 0
mov dword [ebp - 0x268], eax
lea eax, [ebp - 0x268]
push eax
push 0x409334
call dword [sym.imp.USER32.dll_EnumWindows]
push dword [ebp - 0x254]
push 0
push 0x1fffff
call dword [sym.imp.KERNEL32.dll_OpenProcess]
mov dword [ebp - 0x260], eax
test eax, eax
je 0x4094a2
push 0
push eax
call dword [sym.imp.KERNEL32.dll_TerminateProcess]
mov eax, dword [ebp - 0x260]
push eax
call ebx
xor eax, eax
inc eax
mov dword [ebp - 0x260], eax
lea eax, [ebp - 0x254]
push eax
lea ecx, [ebp - 0x278]
call fcn.0040a1a3
lea eax, [ebp - 0x238]
push eax
call fcn.004026a2
pop ecx
push eax
lea eax, [ebp - 0x238]
push eax
lea ecx, [ebp - 0x2c]
call fcn.00403a06
lea ecx, [ebp - 0x2c]
call fcn.0042696d
push dword [ebp - 0x26c]
call fcn.004026a2
pop ecx
push eax
push 0
push dword [ebp - 0x26c]
lea ecx, [ebp - 0x2c]
call fcn.00403690
cmp eax, esi
je 0x40959c
push dword [ebp - 0x254]
push 0
push 0x1fffff
call dword [sym.imp.KERNEL32.dll_OpenProcess]
test eax, eax
je 0x40958a
push eax
call ebx
mov eax, dword [ebp - 0x254]
and dword [ebp - 0x264], 0
mov dword [ebp - 0x268], eax
lea eax, [ebp - 0x268]
push eax
push 0x409334
call dword [sym.imp.USER32.dll_EnumWindows]
push dword [ebp - 0x254]
push 0
push 0x1fffff
call dword [sym.imp.KERNEL32.dll_OpenProcess]
mov ebx, eax
test ebx, ebx
je 0x409577
push 0x7d0
push ebx
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
push 0
push ebx
call dword [sym.imp.KERNEL32.dll_TerminateProcess]
push ebx
mov ebx, dword [sym.imp.KERNEL32.dll_CloseHandle]
call ebx
mov dword [ebp - 0x260], 1
lea eax, [ebp - 0x254]
push eax
lea ecx, [ebp - 0x278]
call fcn.0040a1a3
lea eax, [ebp - 0x25c]
push eax
push edi
call dword [sym.imp.KERNEL32.dll_Process32NextW]
test eax, eax
jne 0x4094c0
push edi
call ebx
mov esi, dword [ebp - 0x260]
dec esi
neg esi
sbb esi, esi
and esi, 0xfffffffd
push 0
push 1
lea ecx, [ebp - 0x2c]
call fcn.0040224f
lea ecx, [ebp - 0x278]
call fcn.00403486
mov eax, esi
call fcn.004649a2
ret