Help-- EnumProcesses in win7.64bit

Hello!

I'm try to get Pid of notepad.exe in my machine, but it not work??? this is my code

Code:

format PE64 GUI 5.0
entry start

include 'win64a.inc'

section '.text' code readable executable

proc strcmpi str1,str2
        push rsi rdi
        mov rsi,[str1]
        mov rdi,[str2]
        invoke MessageBox,0,esi,edi,0
        strcmp_loop:
          lodsb
          mov ah,[rdi]
          or al,32
          or ah,32
          cmp al,0
          je strcmp_loopRet
          cmp al,ah
          je strcmp_loop
          strcmpi_notE:
          pop rdi rsi
          xor rax,rax
          ret
          strcmp_loopRet:
          cmp al,ah
          jne strcmpi_notE
          pop rdi rsi
          mov rax,1
          ret
endp



proc start
    invoke EnumProcesses,Pidarr,4000,Pidcount
    mov [count],0
    process_loop:
        mov ebx,[count]
        mov eax,[Pidarr+ebx*4]
        invoke OpenProcess,2035711,0,eax
        test rax,rax
        je process_loop_cmp
        mov [hProcess],eax
        invoke GetModuleBaseName,eax,0,Pname,1000
        invoke MessageBox,0,Pname,pname,0
        stdcall strcmpi,Pname,pname
        test rax,rax
        jne process_loop_cmp
        mov ebx,[count]
        mov eax,[Pidarr+ebx*4]
        mov [pid],eax
        jmp process_loop_out
        process_loop_cmp:
        inc [count]
        mov ebx,[count]
        cmp ebx,[Pidcount]
        jl process_loop
        process_loop_out:
    ret
endp



section '.idata' import data readable writeable

  library kernel,'KERNEL32.DLL',\
          psapi,'Psapi.dll',\
          user,'user32.dll'

  import kernel,\
         OpenProcess,'OpenProcess',\
         LoadLibraryW,'LoadLibraryW'
  import user,\
         MessageBox,'MessageBoxA'
  import psapi,\
         EnumProcesses,'EnumProcesses',\
         GetModuleBaseName,'GetModuleBaseNameA'

section '.data' readable writeable executable
        pid dd 0
        count dd 0
        pname db 'notepad.exe',0
        hProcess dd 0
        Pidcount dd 0

        Pidarr  rd 4000
        Pname rb 1000

but it list all process if i exclude strcmpi

Code:


format PE64 GUI 5.0
entry start

include 'win64a.inc'

section '.text' code readable executable

proc start
    invoke EnumProcesses,Pidarr,4000,Pidcount
    mov [count],0
    process_loop:
        mov ebx,[count]
        mov eax,[Pidarr+ebx*4]
        invoke OpenProcess,2035711,0,eax
        test rax,rax
        je process_loop_cmp
        mov [hProcess],eax
        invoke GetModuleBaseName,eax,0,Pname,1000
        invoke MessageBox,0,Pname,pname,0
        ;stdcall strcmpi,Pname,pname
        ;test rax,rax
        ;jne process_loop_cmp
        ;mov ebx,[count]
        ;mov eax,[Pidarr+ebx*4]
        ;mov [pid],eax
        ;jmp process_loop_out
        process_loop_cmp:
        inc [count]
        mov ebx,[count]
        cmp ebx,[Pidcount]
        jl process_loop
        process_loop_out:
    ret
endp



section '.idata' import data readable writeable

  library kernel,'KERNEL32.DLL',\
          psapi,'Psapi.dll',\
          user,'user32.dll'

  import kernel,\
         OpenProcess,'OpenProcess',\
         LoadLibraryW,'LoadLibraryW'
  import user,\
         MessageBox,'MessageBoxA'
  import psapi,\
         EnumProcesses,'EnumProcesses',\
         GetModuleBaseName,'GetModuleBaseNameA'

section '.data' readable writeable executable
        pid dd 0
        count dd 0
        pname db 'notepad.exe',0
        hProcess dd 0
        Pidcount dd 0

        Pidarr  rd 4000
        Pname rb 1000

????
and in Mylib.dll

Code:

format PE64 GUI 4.0 DLL
entry DllEntryPoint

include 'win64a.inc'

section '.text' code readable executable


Mess db 'dll inject, im Here',0


proc DllEntryPoint hinstDLL,fdwReason,lpvReserved
     mov rax,[fdwReason]
     cmp rax,1
     jne DllEntryPoint_ret
     ;invoke  CreateThread,0,0,ShowMessage,0,0,0
     DllEntryPoint_ret:
        mov     rax,TRUE
        ret
endp

proc ShowMessage   Pid,pname
        invoke  MessageBox,0,[pname],[pname],0
        ret
endp


section '.idata' import data readable writeable

  library kernel,'KERNEL32.DLL',\
          user,'USER32.DLL'

  import kernel,\
         GetCommandLine,'GetCommandLineA',\
         CreateThread,'CreateThread',\
         Sleep,'Sleep'

  import user,\
         MessageBox,'MessageBoxA',\
          MessageBoxTimeoutA,'MessageBoxTimeoutA'

section '.edata' export data readable

  export 'MyLib.dll',\
         ShowMessage,'ShowMessage'

section '.reloc' fixups data discardable

when i load it

if i add invoke CreateThread,0,0,ShowMessage,0,0,0 in mycode it OK-- why???