Function at 0x491e80
Capabilities:
Terminate process

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4e0681
mov eax, dword fs:[0]
push eax
sub esp, 0x3c
push ebx
push esi
push edi
mov eax, dword [0x520404]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov eax, dword [0x528084]
test eax, eax
jne 0x491ee5
push 0x4e9488
push 0x2c
call fcn.004a7f94
add esp, 8
mov dword [ebp - 0x30], eax
mov dword [ebp - 4], 0
test eax, eax
je 0x491ed7
mov ecx, eax
call fcn.00484580
jmp 0x491ed9
xor eax, eax
mov dword [ebp - 4], 0xffffffff
mov dword [0x528084], eax
push str.killApp
push str.App___SetupHelper
push eax
call fcn.00484be0
add esp, 0xc
call fcn.00479580
mov ebx, dword [sym.imp.KERNEL32.dll_TerminateProcess]
mov esi, eax
mov edi, dword [sym.imp.KERNEL32.dll_CloseHandle]
test esi, esi
je 0x491f8e
push 0
push 0x2410
push esi
call fcn.0048b270
add esp, 0xc
mov dword [ebp - 0x30], 0
lea eax, [ebp - 0x30]
push eax
push esi
call dword [sym.imp.USER32.dll_GetWindowThreadProcessId]
push dword [ebp - 0x30]
push 0
push 1
call dword [sym.imp.KERNEL32.dll_OpenProcess]
mov esi, eax
test esi, esi
je 0x491f8e
push 0xbb8
push esi
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
test eax, eax
jne 0x491f6e
push str.killApp_host_wait_object
push str.App___SetupHelper
call fcn.00484b60
push eax
call fcn.00484be0
add esp, 0xc
jmp 0x491f8b
push str.killApp_host_TerminateProcess
push str.App___SetupHelper
call fcn.00484b60
push eax
call fcn.00484be0
add esp, 0xc
push 0
push esi
call ebx
push esi
call edi
call fcn.0047a400
mov esi, eax
test esi, esi
je 0x492015
push 0
push 0
push 0x10
push esi
call dword [sym.imp.USER32.dll_PostMessageW]
lea eax, [ebp - 0x30]
mov dword [ebp - 0x30], 0
push eax
push esi
call dword [sym.imp.USER32.dll_GetWindowThreadProcessId]
push dword [ebp - 0x30]
push 0
push 1
call dword [sym.imp.KERNEL32.dll_OpenProcess]
mov esi, eax
test esi, esi
je 0x492015
push 0xbb8
push esi
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
test eax, eax
jne 0x491ff5
push str.killApp_tray_wait_object
push str.App___SetupHelper
call fcn.00484b60
push eax
call fcn.00484be0
add esp, 0xc
jmp 0x492012
push str.killApp_tray_TerminateProcess
push str.App___SetupHelper
call fcn.00484b60
push eax
call fcn.00484be0
add esp, 0xc
push 0
push esi
call ebx
push esi
call edi
call fcn.0047a410
mov esi, eax
test esi, esi
je 0x49209c
push 0
push 0
push 0x10
push esi
call dword [sym.imp.USER32.dll_PostMessageW]
lea eax, [ebp - 0x30]
mov dword [ebp - 0x30], 0
push eax
push esi
call dword [sym.imp.USER32.dll_GetWindowThreadProcessId]
push dword [ebp - 0x30]
push 0
push 1
call dword [sym.imp.KERNEL32.dll_OpenProcess]
mov esi, eax
test esi, esi
je 0x49209c
push 0xbb8
push esi
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
test eax, eax
jne 0x49207c
push str.killApp_wallpaper_wait_object
push str.App___SetupHelper
call fcn.00484b60
push eax
call fcn.00484be0
add esp, 0xc
jmp 0x492099
push str.killApp_wallpaper_TerminateProcess
push str.App___SetupHelper
call fcn.00484b60
push eax
call fcn.00484be0
add esp, 0xc
push 0
push esi
call ebx
push esi
call edi
call fcn.00479130
mov esi, eax
test esi, esi
je 0x492123
push 0
push 0
push 0x10
push esi
call dword [sym.imp.USER32.dll_PostMessageW]
lea eax, [ebp - 0x30]
mov dword [ebp - 0x30], 0
push eax
push esi
call dword [sym.imp.USER32.dll_GetWindowThreadProcessId]
push dword [ebp - 0x30]
push 0
push 1
call dword [sym.imp.KERNEL32.dll_OpenProcess]
mov esi, eax
test esi, esi
je 0x492123
push 0xbb8
push esi
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
test eax, eax
jne 0x492103
push str.killApp_clean_wait_object
push str.App___SetupHelper
call fcn.00484b60
push eax
call fcn.00484be0
add esp, 0xc
jmp 0x492120
push str.killApp_clean_TerminateProcess
push str.App___SetupHelper
call fcn.00484b60
push eax
call fcn.00484be0
add esp, 0xc
push 0
push esi
call ebx
push esi
call edi
call fcn.004782d0
mov ecx, eax
test ecx, ecx
je 0x49269e
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x14], eax
push str.GameAssistant.exe
lea ecx, [ebp - 0x14]
mov dword [ebp - 4], 1
call fcn.00477ee0
test al, al
jne 0x492164
push 0x11
push str.GameAssistant.exe
lea ecx, [ebp - 0x14]
call fcn.00478540
mov ecx, 0x5282f8
mov dword [ebp - 4], 2
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x492173
sub ecx, edx
sar ecx, 1
jne 0x492189
call fcn.00491770
call fcn.004782d0
mov ecx, eax
test ecx, ecx
je 0x4926a8
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x10], eax
push 0x5282f8
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 3
call fcn.00477ee0
test al, al
jne 0x4921dd
mov ecx, 0x5282f8
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x4921c0
sub ecx, edx
sar ecx, 1
push ecx
push 0x5282f8
lea ecx, [ebp - 0x10]
call fcn.00478540
lea eax, [ebp - 0x14]
mov byte [ebp - 4], 4
push eax
lea eax, [ebp - 0x10]
push eax
lea eax, [ebp - 0x40]
push eax
call fcn.0048bbd0
add esp, 0xc
mov edx, dword [ebp - 0x10]
or esi, 0xffffffff
mov byte [ebp - 4], 6
add edx, 0xfffffff0
mov eax, esi
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x492216
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x14]
mov eax, esi
mov byte [ebp - 4], 7
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x492234
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
call fcn.004782d0
mov ecx, eax
test ecx, ecx
je 0x4926b2
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x1c], eax
push str.Wallpaper.exe
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 8
call fcn.00477ee0
test al, al
jne 0x492272
push 0xd
push str.Wallpaper.exe
lea ecx, [ebp - 0x1c]
call fcn.00478540
mov ecx, 0x5282f8
mov byte [ebp - 4], 9
lea edx, [ecx + 2]
mov edi, edi
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x492280
sub ecx, edx
sar ecx, 1
jne 0x492296
call fcn.00491770
call fcn.004782d0
mov ecx, eax
test ecx, ecx
je 0x4926bc
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x18], eax
push 0x5282f8
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 0xa
call fcn.00477ee0
test al, al
jne 0x4922ed
mov ecx, 0x5282f8
lea edx, [ecx + 2]
lea ecx, [ecx]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x4922d0
sub ecx, edx
sar ecx, 1
push ecx
push 0x5282f8
lea ecx, [ebp - 0x18]
call fcn.00478540
lea eax, [ebp - 0x1c]
mov byte [ebp - 4], 0xb
push eax
lea eax, [ebp - 0x18]
push eax
lea eax, [ebp - 0x3c]
push eax
call fcn.0048bbd0
add esp, 0xc
mov edx, dword [ebp - 0x18]
mov eax, esi
mov byte [ebp - 4], 0xd
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x492323
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x1c]
mov eax, esi
mov byte [ebp - 4], 0xe
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x492341
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
call fcn.004782d0
mov ecx, eax
test ecx, ecx
je 0x4926c6
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x24], eax
push str.Clean.exe
lea ecx, [ebp - 0x24]
mov byte [ebp - 4], 0xf
call fcn.00477ee0
test al, al
jne 0x49237f
push 9
push str.Clean.exe
lea ecx, [ebp - 0x24]
call fcn.00478540
mov ecx, 0x5282f8
mov byte [ebp - 4], 0x10
lea edx, [ecx + 2]
jmp 0x492390
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x492390
sub ecx, edx
sar ecx, 1
jne 0x4923a6
call fcn.00491770
call fcn.004782d0
mov ecx, eax
test ecx, ecx
je 0x4926d0
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x20], eax
push 0x5282f8
lea ecx, [ebp - 0x20]
mov byte [ebp - 4], 0x11
call fcn.00477ee0
test al, al
jne 0x4923fd
mov ecx, 0x5282f8
lea edx, [ecx + 2]
lea ecx, [ecx]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x4923e0
sub ecx, edx
sar ecx, 1
push ecx
push 0x5282f8
lea ecx, [ebp - 0x20]
call fcn.00478540
lea eax, [ebp - 0x24]
mov byte [ebp - 4], 0x12
push eax
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp - 0x38]
push eax
call fcn.0048bbd0
add esp, 0xc
mov edx, dword [ebp - 0x20]
mov eax, esi
mov byte [ebp - 4], 0x14
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x492433
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x24]
mov eax, esi
mov byte [ebp - 4], 0x15
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x492451
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
call fcn.004782d0
mov ecx, eax
test ecx, ecx
je 0x4926da
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x2c], eax
push str.LocalServer.exe
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x16
call fcn.00477ee0
test al, al
jne 0x49248f
push 0xf
push str.LocalServer.exe
lea ecx, [ebp - 0x2c]
call fcn.00478540
mov ecx, 0x5282f8
mov byte [ebp - 4], 0x17
lea edx, [ecx + 2]
jmp 0x4924a0
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x4924a0
sub ecx, edx
sar ecx, 1
jne 0x4924b6
call fcn.00491770
call fcn.004782d0
mov ecx, eax
test ecx, ecx
je 0x4926e4
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x28], eax
push 0x5282f8
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0x18
call fcn.00477ee0
test al, al
jne 0x49250d
mov ecx, 0x5282f8
lea edx, [ecx + 2]
lea ecx, [ecx]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x4924f0
sub ecx, edx
sar ecx, 1
push ecx
push 0x5282f8
lea ecx, [ebp - 0x28]
call fcn.00478540
lea eax, [ebp - 0x2c]
mov byte [ebp - 4], 0x19
push eax
lea eax, [ebp - 0x28]
push eax
lea eax, [ebp - 0x34]
push eax
call fcn.0048bbd0
add esp, 0xc
mov edx, dword [ebp - 0x28]
mov eax, esi
mov byte [ebp - 4], 0x1b
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x492543
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x2c]
mov eax, esi
mov byte [ebp - 4], 0x1c
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x492561
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push 0x14
mov dword [ebp - 0x48], 0
mov dword [ebp - 0x44], 0
call fcn.004a7d07
mov dword [eax], eax
mov dword [eax + 4], eax
mov dword [eax + 8], eax
mov word [eax + 0xc], 0x101
mov dword [ebp - 0x48], eax
lea eax, [ebp - 0x48]
mov byte [ebp - 4], 0x1d
push eax
lea eax, [ebp - 0x40]
push eax
call fcn.0048d510
lea eax, [ebp - 0x48]
push eax
call fcn.0048db30
lea eax, [ebp - 0x3c]
push eax
call fcn.0048d830
lea eax, [ebp - 0x38]
push eax
call fcn.0048d830
lea eax, [ebp - 0x34]
push eax
call fcn.0048d830
mov eax, dword [0x528084]
add esp, 0x1c
test eax, eax
jne 0x4925f6
push 0x4e9488
push 0x2c
call fcn.004a7f94
add esp, 8
mov dword [ebp - 0x30], eax
mov byte [ebp - 4], 0x1e
test eax, eax
je 0x4925eb
mov ecx, eax
call fcn.00484580
jmp 0x4925ed
xor eax, eax
mov byte [ebp - 4], 0x1d
mov dword [0x528084], eax
push str.killApp_kill_all_process
push str.App___SetupHelper
push eax
call fcn.00484be0
add esp, 0xc
lea ecx, [ebp - 0x48]
call fcn.0048d4c0
mov edx, dword [ebp - 0x34]
mov eax, esi
mov byte [ebp - 4], 0x15
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x49262f
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x38]
mov eax, esi
mov byte [ebp - 4], 0xe
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x49264d
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x3c]
mov eax, esi
mov byte [ebp - 4], 7
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x49266b
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x40]
mov dword [ebp - 4], 0xffffffff
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], esi
dec esi
test esi, esi
jg 0x49268a
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov al, 1
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
push 0x80004005
call fcn.00477ec0
push 0x80004005
call fcn.00477ec0
push 0x80004005
call fcn.00477ec0
push 0x80004005
call fcn.00477ec0
push 0x80004005
call fcn.00477ec0
push 0x80004005
call fcn.00477ec0
push 0x80004005
call fcn.00477ec0
push 0x80004005
call fcn.00477ec0
int3