Function at 0x480050
Capabilities:
Terminate process

Disassembly:
mov qword [rsp + 8], rcx
mov eax, 0x12a8
call fcn.00499730
sub rsp, rax
mov qword [rsp + 0x12a0], rbx
mov qword [rsp + 0x1298], rbp
mov qword [rsp + 0x1290], rsi
mov qword [rsp + 0x1288], rdi
mov qword [rsp + 0x1280], r12
mov qword [rsp + 0x1278], r13
mov qword [rsp + 0x1270], r14
mov qword [rsp + 0x1268], r15
mov rbx, rcx
mov qword [rsp + 0x48], 0xfffffffffffffffe
call fcn.004545a0
test eax, eax
je 0x48012e
mov r8, qword [rbx]
lea rdx, str.KillThisGuy_:_csAppToTerminate___s_n
lea rcx, [rsp + 0x150]
call fcn.00486850
movabs rdx, 0x203a5952544e45
mov qword [rsp + 0x50], rdx
lea rdi, [rsp + 0x50]
xor eax, eax
mov rcx, 0xffffffffffffffff
repne scasb al, byte [rdi]
lea rdx, [rsp + 0x150]
xor ecx, ecx
nop
nop
nop
movzx eax, byte [rdx + rcx]
mov byte [rdi + rcx - 1], al
inc rcx
test al, al
jne 0x480100
call fcn.004546e0
mov rcx, rax
call fcn.004545b0
call fcn.004546e0
mov rcx, rax
lea rdx, [rsp + 0x50]
call fcn.004548a0
xor r12d, r12d
mov rax, qword [0x004dfd00]
mov qword [rsp + 0x20], rax
lea rcx, str.PSAPI.dll
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov rbp, rax
mov qword [rsp + 0x30], rax
test rax, rax
je 0x48021d
lea rdx, str.EnumProcesses
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rdi, rax
test rax, rax
je 0x4801f7
lea rdx, str.EnumProcessModules
mov rcx, rbp
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov r14, rax
test rax, rax
je 0x4801d1
lea rdx, str.GetModuleBaseNameA
mov rcx, rbp
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov r15, rax
test rax, rax
jne 0x480243
call fcn.004545a0
test eax, eax
je 0x4803e5
call fcn.004546e0
mov rcx, rax
lea rdx, str.Failed_to_load_export_GetModuleBaseNameA_n
call fcn.004548a0
jmp 0x4803e5
call fcn.004545a0
test eax, eax
je 0x4803e5
call fcn.004546e0
mov rcx, rax
lea rdx, str.Failed_to_load_export_EnumProcessModules_n
call fcn.004548a0
jmp 0x4803e5
call fcn.004545a0
test eax, eax
je 0x4803e5
call fcn.004546e0
mov rcx, rax
lea rdx, str.Failed_to_load_export_EnumProcesses_n
call fcn.004548a0
jmp 0x4803e5
call fcn.004545a0
test eax, eax
je 0x4803f0
call fcn.004546e0
mov rcx, rax
lea rdx, str.Failed_to_load_PSAPI.dll_file_n
call fcn.004548a0
jmp 0x4803f0
lea r8, [rsp + 0x2c]
mov edx, 0x1000
lea rcx, [rsp + 0x260]
call rdi
mov edx, dword [rsp + 0x2c]
shr edx, 2
je 0x4803e5
lea rsi, [rsp + 0x260]
mov r13d, edx
movabs rbp, 0x6e776f6e6b6e75
nop
nop
mov qword [rsp + 0x150], rbp
mov r8d, 0xfc
xor edx, edx
lea rcx, [rsp + 0x158]
call fcn.00499630
mov r8d, dword [rsi]
xor edx, edx
mov ecx, 0x1f0fff
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov rdi, rax
test rax, rax
je 0x4803ca
lea r9, [rsp + 0x40]
mov r8d, 8
lea rdx, [rsp + 0x38]
mov rcx, rax
call r14
test eax, eax
je 0x4803ca
mov r9d, 0x104
lea r8, [rsp + 0x150]
mov rdx, qword [rsp + 0x38]
mov rcx, rdi
call r15
lea rdx, [rsp + 0x150]
lea rcx, [rsp + 0x20]
call fcn.0049b398
lea rcx, [rsp + 0x20]
call fcn.0049b664
mov rdx, qword [rsp + 0x20]
cmp dword [rdx - 8], 0
je 0x4803ca
mov rdx, qword [rbx]
cmp dword [rdx - 8], 0
je 0x4803ca
lea rcx, [rsp + 0x20]
call fcn.0049a400
cmp eax, 0xffffffff
jne 0x48034d
mov rdx, qword [rsp + 0x20]
mov rcx, rbx
call fcn.0049a400
cmp eax, 0xffffffff
je 0x4803ca
call fcn.004545a0
test eax, eax
je 0x48036a
call fcn.004546e0
mov rcx, rax
lea rdx, str.Found_App_Running..attempting_to_stop_it_n
call fcn.004548a0
lea rdx, [rsp + 0x28]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_GetExitCodeProcess]
test eax, eax
je 0x4803ca
mov edx, dword [rsp + 0x28]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_TerminateProcess]
test eax, eax
je 0x480395
mov r12d, 1
jmp 0x4803ca
call fcn.004545a0
test eax, eax
je 0x4803ca
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov r8d, eax
lea rdx, str.FAILED_:_Failed_to_stop_app_:_GetLastError_____d_n
lea rcx, [rsp + 0x50]
call fcn.00486850
call fcn.004546e0
mov rcx, rax
lea rdx, [rsp + 0x50]
call fcn.004548a0
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
add rsi, 4
dec r13
jne 0x480280
mov rbp, qword [rsp + 0x30]
mov rcx, rbp
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
jmp 0x480408
mov rdx, rbx
lea rcx, [rsp + 0x30]
call fcn.0049b680
mov rcx, rax
call fcn.0047fdb0
mov r12d, eax
call fcn.004545a0
test eax, eax
je 0x480480
mov r8d, r12d
lea rdx, str.KillThisGuy_:_bRetVal___d_n
lea rcx, [rsp + 0x150]
call fcn.00486850
movabs rdx, 0x20203a54495845
mov qword [rsp + 0x50], rdx
lea rdi, [rsp + 0x50]
xor eax, eax
mov rcx, 0xffffffffffffffff
repne scasb al, byte [rdi]
lea rdx, [rsp + 0x150]
xor ecx, ecx
movzx eax, byte [rdx + rcx]
mov byte [rdi + rcx - 1], al
inc rcx
test al, al
jne 0x480451
call fcn.004546e0
mov rcx, rax
lea rdx, [rsp + 0x50]
call fcn.004548a0
call fcn.004546e0
mov rcx, rax
call fcn.004545c0
nop
lea rcx, [rsp + 0x20]
call fcn.0049b1dc
nop
mov rcx, rbx
call fcn.0049b1dc
mov eax, r12d
mov rbx, qword [rsp + 0x12a0]
mov rbp, qword [rsp + 0x1298]
mov rsi, qword [rsp + 0x1290]
mov rdi, qword [rsp + 0x1288]
mov r12, qword [rsp + 0x1280]
mov r13, qword [rsp + 0x1278]
mov r14, qword [rsp + 0x1270]
mov r15, qword [rsp + 0x1268]
add rsp, 0x12a8
ret