Function at 0x53f03d
Capabilities:
Enumerate process modules
Resolve function by parsing pe exports
Terminate process

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff8
sub esp, 0x160
mov dword [esp + 0xe8], edx
mov dword [esp + 0xe4], ecx
mov eax, dword [0x64fd94]
cmp eax, 2
jbe 0x53f0d3
mov ecx, dword [esp + 0xe4]
lea eax, [esp + 0x110]
lea edx, [esp + 0x130]
lea esi, [esp + 0xa8]
mov dword [edx], eax
mov dword [edx + 4], fcn.004ed150
mov dword [eax], ecx
mov ecx, dword [esp + 0xe8]
mov dword [eax + 4], ecx
xor eax, eax
lea ecx, [esp + 0x30]
inc eax
mov dword [ecx], 0x637f88
mov dword [ecx + 4], eax
and dword [ecx + 0x10], 0
mov dword [ecx + 8], edx
mov dword [ecx + 0xc], eax
mov eax, str.velopack::shared::util_windowssrc_sharedutil_windows.rsChecking_for_running_processes_in:
mov dword [esi], eax
push 0x1e
pop edx
mov dword [esi + 4], edx
mov dword [esi + 8], eax
mov dword [esi + 0xc], edx
mov dword [esi + 0x10], 0x637f90
push 3
pop edx
push esi
call fcn.0045db8c
pop eax
lea edi, [esp + 0x30]
mov ecx, edi
call fcn.00517674
lea esi, [esp + 0x148]
mov edx, edi
mov ecx, esi
call fcn.005176be
mov eax, dword [esi + 8]
mov ecx, dword [esi + 0xc]
mov edx, dword [esi]
mov esi, dword [esi + 4]
movq xmm0, qword [0x63b530]
movsd xmm1, qword [0x63b538]
movq qword [esp + 0xa8], xmm0
movsd qword [esp + 0xb0], xmm1
mov dword [esp + 0xbc], esi
mov dword [esp + 0xb8], edx
mov dword [esp + 0xc4], ecx
mov ecx, 0x18e20
mov dword [esp + 0xc0], eax
call fcn.0046ffbb
mov ebx, eax
lea eax, [esp + 8]
mov dword [esp + 0xa4], edx
and dword [eax], 0
push eax
push 0x63880
push ebx
call dword [sym.imp.psapi.dll_EnumProcesses]
test eax, eax
je 0x53fead
mov esi, dword [esp + 8]
mov dword [esp + 0x60], esi
shr esi, 2
mov ecx, esi
call fcn.0046ffbb
mov ecx, edx
cmp edx, esi
mov dword [esp + 0x6c], eax
jae 0x53f1d6
lea eax, [ecx + ecx]
cmp eax, esi
cmovbe eax, esi
cmp eax, 5
push 4
pop edi
cmovae edi, eax
xor edx, edx
cmp edi, 0x20000000
lea eax, [edi*4]
mov dword [esp + 0x5c], edi
setb dl
mov dword [esp + 0xa0], eax
shl edx, 2
test ecx, ecx
je 0x53f1df
mov eax, dword [esp + 0x6c]
mov edi, ecx
lea ecx, [ecx*4]
mov dword [esp + 0x30], eax
mov dword [esp + 0x34], 4
mov dword [esp + 0x38], ecx
jmp 0x53f1e6
mov dword [esp + 0xe0], ecx
jmp 0x53f22e
and dword [esp + 0x34], 0
mov edi, ecx
lea eax, [esp + 0x30]
lea ecx, [esp + 0x18]
push eax
push dword [esp + 0xa4]
call fcn.004fd96f
pop eax
pop ecx
lea ecx, [esp + 0x18]
cmp dword [ecx], 0
mov eax, dword [ecx + 4]
mov edx, dword [ecx + 8]
mov ecx, dword [esp + 0x6c]
cmove edi, dword [esp + 0x5c]
cmove ecx, eax
mov dword [esp + 0x6c], ecx
mov ecx, 0x80000001
cmovne ecx, eax
mov dword [esp + 0xe0], edi
call fcn.0040424b
cmp dword [esp + 0x60], 4
mov ecx, dword [esp + 0x6c]
mov edx, 0
jb 0x53f24b
xor edx, edx
mov eax, dword [ebx + edx*4]
mov dword [ecx + edx*4], eax
inc edx
cmp esi, edx
jne 0x53f240
mov esi, edx
mov edx, dword [esp + 0xa4]
mov ecx, ebx
call fcn.00512c8a
mov eax, esi
lea edx, [esp + 8]
xor ebx, ebx
shl eax, 2
mov dword [esp + 0xa4], eax
mov ecx, dword [esp + 0x6c]
cmp eax, ebx
je 0x53fc2b
mov esi, dword [ecx + ebx]
mov ecx, edx
mov edx, 0x1000
push esi
call fcn.00533454
pop eax
cmp dword [esp + 8], 0
jne 0x53f644
mov dword [esp + 0x60], ebx
mov ebx, dword [esp + 0xc]
mov dword [esp], esi
lea esi, [esp + 0x30]
mov edx, 0x105
mov ecx, esi
call fcn.0055ce8a
mov ecx, dword [esp + 0x30]
mov edx, dword [esp + 0x34]
call fcn.0055cce8
mov ecx, esi
mov dword [esp + 0x70], eax
call fcn.0055dcd0
lea ecx, [esp + 0x70]
push ecx
push eax
push 0
push ebx
call dword [sym.imp.KERNEL32.dll_QueryFullProcessImageNameW]
mov ecx, eax
call fcn.0055dc39
test eax, eax
je 0x53f2ed
xor esi, esi
mov dword [esp + 0xa0], edx
jmp 0x53f307
lea ecx, [esp + 0x18]
mov edx, esi
call fcn.0051a3c9
mov eax, dword [esp + 0x1c]
mov esi, dword [esp + 0x18]
mov dword [esp + 0xa0], eax
mov ecx, dword [esp + 0x30]
mov edx, dword [esp + 0x38]
call fcn.00526237
mov edi, dword [esp + 0x20]
mov ecx, ebx
call fcn.0055e221
mov ebx, dword [esp + 0x60]
test esi, esi
je 0x53f644
mov edx, esi
lea ecx, [esp + 0x30]
mov dword [esp + 0x5c], esi
mov dword [esp + 4], edi
push edi
call fcn.004f6ea0
pop eax
mov edi, dword [esp + 0x30]
mov ebx, dword [esp + 0x34]
lea ecx, [esp + 0x104]
test edi, edi
mov edx, edi
cmove edx, ebx
push dword [esp + 0x38]
call fcn.00413430
pop eax
mov ecx, edi
mov edx, ebx
call fcn.0041c24b
mov edx, dword [esp + 0xe4]
lea ecx, [esp + 0x30]
push dword [esp + 0xe8]
call fcn.004f6ea0
pop eax
mov edi, dword [esp + 0x30]
mov ebx, dword [esp + 0x34]
lea ecx, [esp + 0xec]
test edi, edi
mov edx, edi
cmove edx, ebx
push dword [esp + 0x38]
call fcn.00413430
pop eax
mov ecx, edi
mov edx, ebx
call fcn.0041c24b
mov edx, dword [esp + 0xf4]
mov ecx, dword [esp + 0xec]
push 0x5c
call fcn.00522b21
pop ecx
mov ecx, eax
push 0x2f
call fcn.00522b21
pop ecx
mov edi, edx
mov ecx, edx
xor edx, edx
mov dword [esp + 0x2c], eax
call fcn.0055c169
mov ebx, edx
mov esi, eax
push edi
push dword [esp + 0x30]
push eax
call fcn.00570e70
add esp, 0xc
mov edx, 0x637270
mov dword [esp + 0x30], esi
mov dword [esp + 0x34], ebx
mov dword [esp + 0x38], edi
lea ecx, [esp + 0x30]
push 1
call fcn.004fc225
pop eax
mov ebx, dword [esp + 0x10c]
mov eax, dword [esp + 0x30]
mov edx, dword [esp + 0x34]
test ebx, ebx
je 0x53f42b
mov esi, dword [esp + 0x38]
test esi, esi
je 0x53f42b
cmp ebx, esi
jae 0x53f59c
and word [esp + 8], 0
mov esi, dword [esp]
mov edi, dword [esp + 4]
mov dword [esp + 0x2c], 0
xor ebx, ebx
mov ecx, eax
call fcn.00448429
mov ecx, dword [esp + 0xec]
mov edx, dword [esp + 0xf0]
call fcn.00448429
mov ecx, dword [esp + 0x104]
mov edx, dword [esp + 0x108]
call fcn.00448429
mov eax, dword [esp + 0x5c]
test bl, bl
jne 0x53f57b
cmp byte [esp + 0x2c], 0
je 0x53f57b
lea ecx, [esp + 0x30]
mov edx, eax
push edi
call fcn.004ecdd0
pop eax
mov ecx, dword [esp + 0xb8]
mov edx, dword [esp + 0xbc]
mov dword [esp + 0x90], esi
push esi
push dword [esp + 0xc8]
push dword [esp + 0xc8]
call fcn.00530b05
add esp, 0xc
cmp dword [esp + 0xb0], 0
mov ebx, eax
mov edi, edx
lea eax, [esp + 0x90]
mov dword [esp + 0x70], eax
je 0x53f758
mov edx, dword [esp + 0xac]
mov ecx, dword [esp + 0xa8]
lea eax, [esp + 0x70]
mov dword [esp + 0x18], eax
lea eax, [esp + 0xa8]
mov dword [esp + 0x1c], eax
push 0x530d27
lea eax, [esp + 0x1c]
push eax
push edi
push ebx
call fcn.00530c27
add esp, 0x10
test eax, eax
je 0x53f5e9
mov eax, dword [esp + 0xa8]
lea edi, [edx - 0x10]
mov ecx, dword [esp + 0x90]
shr ebx, 0x19
movzx esi, byte [eax + edx]
and esi, 1
sub dword [esp + 0xb0], esi
and edi, dword [esp + 0xac]
mov byte [eax + edx], bl
neg edx
imul edx, edx, 0x14
mov byte [edi + eax + 0x10], bl
inc dword [esp + 0xb4]
mov dword [eax + edx - 0x14], ecx
movq xmm0, qword [esp + 0x30]
movsd xmm1, qword [esp + 0x38]
movq qword [eax + edx - 0x10], xmm0
movsd qword [eax + edx - 8], xmm1
mov byte [esp + 0x24], 2
jmp 0x53f625
test bl, bl
mov ebx, dword [esp + 0x60]
je 0x53f636
mov eax, dword [esp + 0xc]
mov ecx, dword [eax]
push eax
call dword [ecx]
mov eax, dword [esp + 0x60]
add esp, 4
jmp 0x53f636
mov edi, dword [esp + 0x104]
mov dword [esp + 0xd0], edx
mov edx, ebx
mov ecx, edi
push esi
mov dword [esp + 0x6c], eax
push eax
call fcn.00522be0
pop ecx
pop edx
test al, al
je 0x53f657
mov al, 1
mov esi, dword [esp]
mov edi, dword [esp + 4]
mov edx, dword [esp + 0xd0]
xor ebx, ebx
mov word [esp + 8], 0x100
mov dword [esp + 0x2c], eax
mov eax, dword [esp + 0x68]
jmp 0x53f442
mov eax, dword [esp + 0xa8]
neg edx
movsd xmm2, qword [esp + 0x30]
imul ecx, edx, 0x14
movsd xmm1, qword [eax + ecx - 8]
movq xmm0, qword [eax + ecx - 0x10]
movsd qword [esp + 0x20], xmm1
movsd xmm1, qword [esp + 0x38]
movq qword [esp + 0x18], xmm0
movsd qword [eax + ecx - 0x10], xmm2
movsd qword [eax + ecx - 8], xmm1
mov ebx, dword [esp + 0x60]
lea ecx, [esp + 0x18]
call fcn.004630de
mov eax, dword [esp + 0x5c]
mov edx, dword [esp + 0xa0]
mov ecx, eax
call fcn.00448429
mov eax, dword [esp + 0xa4]
add ebx, 4
lea edx, [esp + 8]
jmp 0x53f26d
lea ecx, [esp + 0x30]
mov dword [esp + 0x100], edi
mov edx, edi
push ebx
call fcn.00522bf0
pop eax
mov ecx, dword [esp + 0x30]
mov eax, dword [esp + 0x34]
test ecx, ecx
je 0x53f720
mov ebx, dword [esp + 0x38]
mov edx, dword [esp + 0x68]
mov dword [esp + 0x64], ecx
mov dword [esp + 0xcc], eax
lea ecx, [esp + 0x30]
push esi
call fcn.00522bf0
pop eax
mov esi, dword [esp + 0x30]
mov eax, dword [esp + 0x34]
test esi, esi
je 0x53f770
mov ecx, dword [esp + 0x64]
mov edi, dword [esp + 0x38]
mov edx, ebx
mov dword [esp + 0xdc], eax
call fcn.004e1800
test al, al
mov dword [esp + 0xc8], esi
je 0x53f734
mov ecx, esi
mov edx, edi
call fcn.004e1800
test al, al
je 0x53f734
mov esi, dword [esp + 0x64]
lea ecx, [esp + 0x30]
mov edx, esi
push ebx
call fcn.004634d9
pop eax
cmp byte [esp + 0x3c], 2
jne 0x53f7aa
movq xmm0, qword [esp + 0x30]
lea ecx, [esp + 0x18]
mov edx, esi
movq qword [esp + 8], xmm0
push ebx
call fcn.0046312a
pop eax
lea esi, [esp + 8]
push esi
call fcn.004fdf2b
mov ecx, esi
add esp, 4
jmp 0x53f7c6
mov esi, dword [esp]
mov edi, dword [esp + 4]
mov bl, 1
mov dword [esp + 0xc], eax
mov byte [esp + 8], 1
jmp 0x53f792
mov esi, dword [esp]
mov edi, dword [esp + 4]
and word [esp + 8], 0
xor ebx, ebx
mov ecx, dword [esp + 0xc8]
mov edx, dword [esp + 0xdc]
call fcn.00448429
jmp 0x53f782
lea ecx, [esp + 0xa8]
lea edx, [esp + 0xb8]
call fcn.00585841
jmp 0x53f4dc
mov esi, dword [esp]
mov edi, dword [esp + 4]
mov bl, 1
mov dword [esp + 0xc], eax
mov byte [esp + 8], 1
mov edx, dword [esp + 0xcc]
mov ecx, dword [esp + 0x64]
call fcn.00448429
mov cl, byte [esp + 9]
mov eax, dword [esp + 0x68]
mov edx, dword [esp + 0xd0]
mov dword [esp + 0x2c], ecx
jmp 0x53f442
movq xmm0, qword [esp + 0x30]
movsd xmm1, qword [esp + 0x38]
lea ecx, [esp + 8]
movsd qword [esp + 0x20], xmm1
movq qword [esp + 0x18], xmm0
cmp byte [esp + 0x24], 2
mov esi, dword [esp + 0x18]
mov eax, dword [esp + 0x1c]
jne 0x53f7ea
mov edx, esi
push eax
call fcn.00542e42
pop eax
mov esi, dword [esp]
mov edi, dword [esp + 4]
jmp 0x53f893
mov edx, dword [esp + 0x18]
mov ecx, dword [esp + 0x20]
mov ebx, dword [esp + 0xc8]
mov dword [esp + 0xd8], eax
mov dword [esp + 0xd4], edx
mov dword [esp + 0x2c], ecx
lea ecx, [esp + 0x30]
mov edx, ebx
push edi
call fcn.004634d9
pop eax
cmp byte [esp + 0x3c], 2
jne 0x53f845
movq xmm0, qword [esp + 0x30]
lea ecx, [esp + 0x18]
mov edx, ebx
movq qword [esp + 8], xmm0
push edi
call fcn.0046312a
pop eax
lea eax, [esp + 8]
push eax
call fcn.004fdf2b
pop eax
jmp 0x53f85d
movq xmm0, qword [esp + 0x30]
movsd xmm1, qword [esp + 0x38]
movsd qword [esp + 0x20], xmm1
movq qword [esp + 0x18], xmm0
mov edi, dword [esp + 4]
cmp byte [esp + 0x24], 2
mov ebx, dword [esp + 0x18]
mov eax, dword [esp + 0x1c]
jne 0x53f89c
lea ecx, [esp + 8]
mov edx, ebx
push eax
call fcn.00542e42
pop eax
mov ecx, dword [esp + 0xd4]
mov edx, dword [esp + 0xd8]
call fcn.00448429
mov esi, dword [esp]
mov bl, byte [esp + 8]
jmp 0x53f743
mov ecx, dword [esp + 0x18]
mov edi, dword [esp + 0x20]
mov dword [esp + 0xfc], eax
mov edx, esi
mov dword [esp + 0xf8], ecx
lea ecx, [esp + 0x30]
push dword [esp + 0x2c]
call fcn.004f6ea0
pop eax
lea ecx, [esp + 0x80]
lea edx, [esp + 0x30]
call fcn.00522c9f
mov ecx, dword [esp + 0x30]
mov edx, dword [esp + 0x34]
call fcn.0041c24b
lea ecx, [esp + 0x30]
mov edx, ebx
push edi
lea edi, [esp + 0x34]
call fcn.004f6ea0
pop eax
lea ecx, [esp + 0x90]
mov edx, edi
call fcn.00522c9f
mov ecx, dword [esp + 0x30]
mov edx, dword [esp + 0x34]
call fcn.0041c24b
mov edx, dword [esp + 0x80]
lea ecx, [esp + 0x70]
push dword [esp + 0x88]
call fcn.00522cde
pop eax
cmp dword [esp + 0x70], 0
je 0x53f95c
mov ecx, dword [esp + 0x80]
mov edx, dword [esp + 0x84]
call fcn.00448429
mov eax, dword [esp + 0x78]
movq xmm0, qword [esp + 0x70]
mov dword [esp + 0x88], eax
movq qword [esp + 0x80], xmm0
jmp 0x53f9eb
mov eax, dword [esp + 0x74]
lea esi, [esp + 8]
mov dword [esp + 0x7c], eax
mov ecx, dword [0x64fd94]
cmp ecx, 1
jbe 0x53f9e3
lea eax, [esp + 0x80]
mov dword [esp + 0x30], 0x639b38
mov dword [esp + 8], eax
lea eax, [esp + 0x7c]
mov dword [esp + 0xc], fcn.00417a93
mov dword [esp + 0x10], eax
mov dword [esp + 0x14], fcn.00417b50
push 2
pop edx
mov dword [esp + 0x34], edx
and dword [esp + 0x40], 0
mov eax, str.velopack::windows::utilsrcwindowsutil.rs
mov dword [esp + 0x38], esi
mov dword [esp + 0x3c], edx
mov dword [esp + 0x18], eax
push 0x17
pop ecx
mov dword [esp + 0x1c], ecx
mov dword [esp + 0x20], eax
lea eax, [esp + 0x18]
mov dword [esp + 0x24], ecx
mov dword [esp + 0x28], 0x639b48
mov ecx, edi
push eax
call fcn.0045db8c
pop eax
mov eax, dword [esp + 0x7c]
mov ecx, dword [eax]
push eax
call dword [ecx]
add esp, 4
mov esi, dword [esp]
mov edx, dword [esp + 0x90]
lea ecx, [esp + 0x70]
push dword [esp + 0x98]
call fcn.00522cde
pop eax
cmp dword [esp + 0x70], 0
je 0x53fa3f
mov ecx, dword [esp + 0x90]
mov edx, dword [esp + 0x94]
call fcn.00448429
mov eax, dword [esp + 0x78]
movq xmm0, qword [esp + 0x70]
mov dword [esp + 0x98], eax
movq qword [esp + 0x90], xmm0
jmp 0x53face
mov eax, dword [esp + 0x74]
mov dword [esp + 0x7c], eax
mov ecx, dword [0x64fd94]
cmp ecx, 1
jbe 0x53fac6
lea eax, [esp + 0x90]
mov dword [esp + 0x30], 0x639b38
mov dword [esp + 8], eax
lea eax, [esp + 0x7c]
mov dword [esp + 0xc], fcn.00417a93
mov dword [esp + 0x10], eax
mov dword [esp + 0x14], fcn.00417b50
push 2
pop edx
mov dword [esp + 0x34], edx
and dword [esp + 0x40], 0
lea eax, [esp + 8]
mov dword [esp + 0x38], eax
mov eax, str.velopack::windows::utilsrcwindowsutil.rs
mov dword [esp + 0x3c], edx
mov dword [esp + 0x18], eax
push 0x17
pop ecx
mov dword [esp + 0x1c], ecx
mov dword [esp + 0x20], eax
lea eax, [esp + 0x18]
mov dword [esp + 0x24], ecx
mov dword [esp + 0x28], 0x639b58
mov ecx, edi
push eax
call fcn.0045db8c
pop eax
mov eax, dword [esp + 0x7c]
mov ecx, dword [eax]
push eax
call dword [ecx]
add esp, 4
mov edx, dword [esp + 0x80]
mov ecx, edi
push dword [esp + 0x88]
call fcn.00413430
pop eax
mov ecx, dword [esp + 0x80]
mov edx, dword [esp + 0x84]
call fcn.00448429
mov eax, dword [esp + 0x38]
movsd xmm0, qword [esp + 0x30]
mov edx, dword [esp + 0x90]
mov ecx, edi
mov dword [esp + 0x88], eax
movsd qword [esp + 0x80], xmm0
push dword [esp + 0x98]
call fcn.00413430
pop eax
mov ecx, dword [esp + 0x90]
mov edx, dword [esp + 0x94]
call fcn.00448429
mov eax, dword [esp + 0x38]
movq xmm0, qword [esp + 0x30]
mov ebx, edi
mov ecx, dword [esp + 0x84]
mov edi, dword [esp + 0x80]
mov edx, dword [esp + 0x88]
mov dword [esp], ecx
mov dword [esp + 0x98], eax
movq qword [esp + 0x90], xmm0
movq qword [esp + 0x30], xmm0
mov dword [esp + 0x38], eax
mov byte [esp + 0x3c], 1
mov ecx, edi
push ebx
call fcn.00522dd4
pop ecx
mov edx, dword [esp]
mov ecx, edi
mov byte [esp + 9], al
mov dword [esp + 0x2c], eax
mov byte [esp + 8], 0
call fcn.00448429
mov ecx, dword [esp + 0xf8]
mov edx, dword [esp + 0xfc]
call fcn.00448429
mov ecx, dword [esp + 0xd4]
mov edx, dword [esp + 0xd8]
call fcn.00448429
mov ecx, dword [esp + 0xc8]
mov edx, dword [esp + 0xdc]
call fcn.00448429
mov ecx, dword [esp + 0x64]
mov edx, dword [esp + 0xcc]
call fcn.00448429
mov ecx, dword [esp + 0x68]
mov edx, dword [esp + 0xd0]
call fcn.00448429
mov ecx, dword [esp + 0xec]
mov edx, dword [esp + 0xf0]
call fcn.00448429
mov edx, dword [esp + 0x108]
mov ecx, dword [esp + 0x100]
call fcn.00448429
mov eax, dword [esp + 0x5c]
mov edi, dword [esp + 4]
xor ebx, ebx
jmp 0x53f473
mov edx, dword [esp + 0xe0]
call fcn.00512c8a
lea eax, [esp + 0xb8]
mov ebx, dword [esp + 0xa8]
mov edi, dword [esp + 0xac]
movsd xmm1, qword [eax]
movq xmm0, qword [eax - 8]
test ebx, ebx
movsd qword [esp + 0x138], xmm1
movsd xmm1, qword [eax + 8]
movq qword [esp + 0x130], xmm0
movsd qword [esp + 0x140], xmm1
je 0x53fea3
lea esi, [esp + 0x130]
movsd xmm0, qword [esi + 0x10]
movsd xmm2, qword [esi]
movsd xmm1, qword [esi + 8]
movsd qword [esp + 0x128], xmm0
movsd qword [esp + 0x120], xmm1
movsd qword [esp + 0x118], xmm2
mov dword [esp + 0x110], ebx
mov dword [esp + 0x114], edi
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
movdqa xmm0, xmmword [ebx]
mov edx, dword [esp + 0x11c]
mov ecx, edi
mov edi, eax
mov dword [esi], ebx
lea eax, [ecx + ebx + 1]
add ebx, 0x10
mov dword [esi + 4], ebx
mov dword [esi + 8], eax
pmovmskb ecx, xmm0
not ecx
mov word [esi + 0xc], cx
mov dword [esi + 0x10], edx
mov ecx, esi
call fcn.0053b095
test eax, eax
je 0x53fe95
mov ecx, eax
add ecx, 0xffffffec
mov dword [esp + 0x70], ecx
mov ebx, dword [eax - 0x14]
mov ecx, dword [0x64fd94]
cmp ebx, edi
jne 0x53fdb6
cmp ecx, 1
jbe 0x53fcec
mov ecx, dword [eax - 0x10]
mov eax, dword [eax - 8]
mov dword [esp + 0x30], 0x637ff4
mov dword [esp + 0x34], 3
and dword [esp + 0x40], 0
mov dword [esp + 8], ecx
mov dword [esp + 0xc], eax
lea eax, [esp + 8]
mov ecx, str.velopack::shared::util_windowssrc_sharedutil_windows.rsChecking_for_running_processes_in:
mov dword [esp + 0x18], eax
lea eax, [esp + 0x70]
mov dword [esp + 0x1c], fcn.004ed150
mov dword [esp + 0xa8], ecx
mov dword [esp + 0x20], eax
lea eax, [esp + 0x18]
mov dword [esp + 0x24], 0x464973
mov dword [esp + 0x38], eax
mov dword [esp + 0x3c], 2
push 0x1e
pop eax
mov dword [esp + 0xac], eax
mov dword [esp + 0xb0], ecx
mov dword [esp + 0xb4], eax
mov dword [esp + 0xb8], 0x63800c
lea ecx, [esp + 0x30]
push 2
pop edx
lea eax, [esp + 0xa8]
push eax
call fcn.0045db8c
pop eax
jmp 0x53fcec
cmp ecx, 1
jbe 0x53fe5c
mov ecx, dword [eax - 0x10]
mov eax, dword [eax - 8]
mov dword [esp + 0x30], 0x637fb4
mov dword [esp + 0x34], 3
and dword [esp + 0x40], 0
mov dword [esp + 8], ecx
mov dword [esp + 0xc], eax
lea eax, [esp + 8]
mov ecx, str.velopack::shared::util_windowssrc_sharedutil_windows.rsChecking_for_running_processes_in:
mov dword [esp + 0x18], eax
lea eax, [esp + 0x70]
mov dword [esp + 0x1c], fcn.004ed150
mov dword [esp + 0xa8], ecx
mov dword [esp + 0x20], eax
lea eax, [esp + 0x18]
mov dword [esp + 0x24], 0x464973
mov dword [esp + 0x38], eax
mov dword [esp + 0x3c], 2
push 0x1e
pop eax
mov dword [esp + 0xac], eax
mov dword [esp + 0xb0], ecx
mov dword [esp + 0xb4], eax
mov dword [esp + 0xb8], 0x637fcc
lea ecx, [esp + 0x30]
push 2
pop edx
lea eax, [esp + 0xa8]
push eax
call fcn.0045db8c
pop eax
mov eax, dword [esp + 0x70]
mov ebx, dword [eax]
xor edx, edx
lea ecx, [esp + 0x30]
inc edx
push ebx
call fcn.00533454
pop eax
cmp dword [esp + 0x30], 0
jne 0x53fed4
mov ebx, dword [esp + 0x34]
push 1
push ebx
call dword [sym.imp.KERNEL32.dll_TerminateProcess]
mov ecx, eax
call fcn.0055dc39
test eax, eax
jne 0x53fee1
mov ecx, ebx
call fcn.0055e221
jmp 0x53fcec
lea ecx, [esp + 0x110]
call fcn.0053b02c
xor edi, edi
mov eax, edi
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret
call fcn.0055c573
mov ecx, eax
xor edx, edx
call fcn.00584f48
mov edx, dword [esp + 0xa4]
mov ecx, ebx
mov edi, eax
call fcn.00512c8a
lea ecx, [esp + 0xa8]
jmp 0x53fef8
mov ecx, dword [esp + 0x34]
call fcn.00585031
mov edi, eax
jmp 0x53fef1
mov ecx, edx
call fcn.00585031
mov ecx, ebx
mov edi, eax
call fcn.0055e221
lea ecx, [esp + 0x110]
call fcn.0053b02c
jmp 0x53fea3