Function at 0x41315a
Capabilities:
Enumerate processes
Terminate process

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x56060a
mov eax, dword fs:[0]
push eax
sub esp, 0x990
mov eax, dword [0x5d6c64]
xor eax, ebp
mov dword [ebp - 0x10], eax
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x988], ecx
and dword [ebp - 0x298], 0
push 0
push 2
call sub.KERNEL32.dll_CreateToolhelp32Snapshot
mov dword [ebp - 0x8d8], eax
cmp dword [ebp - 0x8d8], 0xffffffff
jne 0x4131ce
push 4
call fcn.0041b640
pop ecx
movzx eax, al
test eax, eax
je 0x4131c7
push str._WeGameLauncerApp__KillZombieLauncher_failed__create_snapshot_failed.
push 4
call fcn.0041b5a4
pop ecx
pop ecx
xor al, al
jmp 0x413604
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [ebp - 0x4a8], eax
xor eax, eax
mov word [ebp - 0x4a4], ax
push 0x206
push 0
lea eax, [ebp - 0x4a2]
push eax
call sub.MSVCR100.dll_memset
add esp, 0xc
push 0x104
lea eax, [ebp - 0x4a4]
push eax
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
lea eax, [ebp - 0x941]
mov dword [ebp - 0x940], eax
lea eax, [ebp - 0x64]
mov dword [ebp - 0x98c], eax
and dword [ebp - 4], 0
push 0
push 0
lea ecx, [ebp - 0x64]
call fcn.00406660
mov dword [ebp - 4], 1
lea eax, [ebp - 0x4a4]
push eax
lea ecx, [ebp - 0x2c]
call fcn.00404e60
mov byte [ebp - 4], 2
lea eax, [ebp - 0x64]
push eax
lea eax, [ebp - 0x2c]
push eax
call fcn.004279db
pop ecx
pop ecx
mov byte [ebp - 4], 3
push 0
push 1
lea ecx, [ebp - 0x2c]
call fcn.00406660
mov byte [ebp - 4], 1
mov eax, dword [ebp - 0x54]
mov dword [ebp - 0x958], eax
cmp dword [ebp - 0x958], 0
jne 0x4132c7
push 4
call fcn.0041b640
pop ecx
movzx eax, al
test eax, eax
je 0x41329e
push str._WeGameLauncerApp__KillZombieLauncher_failed__my_name_is_empty.
push 4
call fcn.0041b5a4
pop ecx
pop ecx
mov byte [ebp - 0x935], 0
mov dword [ebp - 4], 4
push 0
push 1
lea ecx, [ebp - 0x64]
call fcn.00406660
or dword [ebp - 4], 0xffffffff
mov al, byte [ebp - 0x935]
jmp 0x413604
and dword [ebp - 0x8d4], 0
push 0x424
push 0
lea eax, [ebp - 0x8d0]
push eax
call sub.MSVCR100.dll_memset
add esp, 0xc
mov dword [ebp - 0x8d4], 0x428
and dword [ebp - 0x294], 0
push 0x228
push 0
lea eax, [ebp - 0x290]
push eax
call sub.MSVCR100.dll_memset
add esp, 0xc
mov dword [ebp - 0x294], 0x22c
lea eax, [ebp - 0x294]
push eax
push dword [ebp - 0x8d8]
call sub.KERNEL32.dll_Process32FirstW
test eax, eax
je 0x4135b0
cmp dword [ebp - 0x28c], 0
je 0x413346
mov eax, dword [ebp - 0x4a8]
cmp eax, dword [ebp - 0x28c]
jne 0x41334b
jmp 0x413596
push dword [ebp - 0x28c]
push 8
call sub.KERNEL32.dll_CreateToolhelp32Snapshot
mov dword [ebp - 0x8dc], eax
cmp dword [ebp - 0x8dc], 0xffffffff
jne 0x41336c
jmp 0x413596
lea eax, [ebp - 0x8d4]
push eax
push dword [ebp - 0x8dc]
call sub.KERNEL32.dll_Module32FirstW
test eax, eax
jne 0x413393
push dword [ebp - 0x8dc]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x413596
push dword [ebp - 0x8dc]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
lea eax, [ebp - 0x961]
mov dword [ebp - 0x960], eax
lea eax, [ebp - 0x8f8]
mov dword [ebp - 0x990], eax
mov byte [ebp - 4], 5
push 0
push 0
lea ecx, [ebp - 0x8f8]
call fcn.00406660
mov byte [ebp - 4], 6
lea eax, [ebp - 0x270]
push eax
lea ecx, [ebp - 0x914]
call fcn.00404e60
mov byte [ebp - 4], 7
lea eax, [ebp - 0x6b4]
push eax
lea ecx, [ebp - 0x48]
call fcn.00404e60
mov byte [ebp - 4], 8
lea eax, [ebp - 0x8f8]
push eax
lea eax, [ebp - 0x48]
push eax
call fcn.004276fd
pop ecx
pop ecx
mov byte [ebp - 4], 9
push 0
push 1
lea ecx, [ebp - 0x48]
call fcn.00406660
mov byte [ebp - 4], 7
push 0x56e4f8
lea eax, [ebp - 0x8f8]
push eax
lea eax, [ebp - 0x930]
push eax
call fcn.00412033
add esp, 0xc
mov byte [ebp - 4], 0xa
cmp dword [ebp - 0x900], 8
jb 0x413453
mov eax, dword [ebp - 0x914]
mov dword [ebp - 0x994], eax
jmp 0x41345f
lea eax, [ebp - 0x914]
mov dword [ebp - 0x994], eax
cmp dword [ebp - 0x50], 8
jb 0x413470
mov eax, dword [ebp - 0x64]
mov dword [ebp - 0x998], eax
jmp 0x413479
lea eax, [ebp - 0x64]
mov dword [ebp - 0x998], eax
push dword [ebp - 0x994]
push dword [ebp - 0x998]
call dword [sym.imp.MSVCR100.dll__wcsicmp]
pop ecx
pop ecx
test eax, eax
jne 0x413551
cmp dword [ebp - 0x91c], 8
jb 0x4134ac
mov eax, dword [ebp - 0x930]
mov dword [ebp - 0x99c], eax
jmp 0x4134b8
lea eax, [ebp - 0x930]
mov dword [ebp - 0x99c], eax
push 0
push dword [ebp - 0x99c]
call dword [sym.imp.MSVCR100.dll__waccess]
pop ecx
pop ecx
test eax, eax
jne 0x413551
push dword [ebp - 0x28c]
push 0
push 0x100411
call dword [sym.imp.KERNEL32.dll_OpenProcess]
mov dword [ebp - 0x298], eax
cmp dword [ebp - 0x298], 0
je 0x413551
push 0
call dword [sym.imp.KERNEL32.dll_SetLastError]
push 0
push dword [ebp - 0x298]
call dword [sym.imp.KERNEL32.dll_TerminateProcess]
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x934], eax
push 4
call fcn.0041b640
pop ecx
movzx eax, al
test eax, eax
je 0x41353e
push dword [ebp - 0x934]
push dword [ebp - 0x28c]
push str._WeGameLauncerApp__KillZombieLauncher:_pid_u__ret_u
push 4
call fcn.0041b5a4
add esp, 0x10
push dword [ebp - 0x298]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
and dword [ebp - 0x298], 0
mov byte [ebp - 4], 0xb
push 0
push 1
lea ecx, [ebp - 0x930]
call fcn.00406660
mov byte [ebp - 4], 7
mov byte [ebp - 4], 0xc
push 0
push 1
lea ecx, [ebp - 0x914]
call fcn.00406660
mov byte [ebp - 4], 6
mov byte [ebp - 4], 0xd
push 0
push 1
lea ecx, [ebp - 0x8f8]
call fcn.00406660
mov byte [ebp - 4], 1
lea eax, [ebp - 0x294]
push eax
push dword [ebp - 0x8d8]
call sub.KERNEL32.dll_Process32NextW
test eax, eax
jne 0x41332f
push dword [ebp - 0x8d8]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
or dword [ebp - 0x8d8], 0xffffffff
push 4
call fcn.0041b640
pop ecx
movzx eax, al
test eax, eax
je 0x4135e0
push str._WeGameLauncerApp__KillZombieLauncher:_done.
push 4
call fcn.0041b5a4
pop ecx
pop ecx
mov byte [ebp - 0x936], 1
mov dword [ebp - 4], 0xe
push 0
push 1
lea ecx, [ebp - 0x64]
call fcn.00406660
or dword [ebp - 4], 0xffffffff
mov al, byte [ebp - 0x936]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.004610a0
leave
ret