Function at 0x41dc50
Capabilities:
Terminate process

Disassembly:
push 0xffffffffffffffff
push 0x4d6bed
mov eax, dword fs:[0]
push eax
sub esp, 0x24c
mov eax, dword [0x536f50]
xor eax, esp
mov dword [esp + 0x248], eax
push ebx
push ebp
push esi
push edi
mov eax, dword [0x536f50]
xor eax, esp
push eax
lea eax, [esp + 0x260]
mov dword fs:[0], eax
xor edi, edi
mov dword [esp + 0x14], edi
mov eax, dword [0x53a938]
push eax
mov dword [esp + 0x1c], ecx
call dword [0x4fbd3c]
mov ecx, dword [0x53a938]
push ecx
call fcn.004d1c80
push 0x206
lea eax, [esp + 0x62]
xor edx, edx
push edi
push eax
mov word [esp + 0x68], dx
call fcn.0047a920
lea ecx, [esp + 0x68]
push 0x4df0ec
push ecx
call fcn.0047b59d
add esp, 0x1c
push edi
push 0x320
push 0x258
push edi
push edi
push 0x100
push 0x10ce0000
lea edx, [esp + 0x70]
push edx
push edi
call fcn.0041dbd0
mov ecx, eax
call dword [0x4fbd38]
call fcn.0041dbd0
mov ecx, eax
call dword [0x4fbd34]
push 1
push edi
call fcn.0041dbd0
mov esi, dword [sym.Uninst.exe_public:_void___thiscall_DuiLib::CWindowWnd::ShowWindow_bool__bool_]
mov ecx, eax
call esi
lea ecx, [esp + 0x1c]
call fcn.00401910
push 0xb
push 0x4df0e0
lea ecx, [esp + 0x40]
mov dword [esp + 0x270], edi
mov dword [esp + 0x58], 0xf
mov dword [esp + 0x54], edi
mov byte [esp + 0x44], 0
call fcn.00404570
lea eax, [esp + 0x1c]
push eax
lea ecx, [esp + 0x3c]
push ecx
mov byte [esp + 0x270], 1
mov dword [esp + 0x1c], 1
call fcn.004d3f00
add esp, 8
test al, al
je 0x41dd80
cmp dword [esp + 0x34], edi
jbe 0x41dd80
mov bl, 1
jmp 0x41dd82
xor bl, bl
cmp dword [esp + 0x50], 0x10
mov dword [esp + 0x268], edi
jb 0x41dd9d
mov edx, dword [esp + 0x3c]
push edx
call fcn.004798f2
add esp, 4
test bl, bl
je 0x41de48
push 4
push 0x4df0d0
push 0x4df070
call fcn.0041dbd0
mov ecx, eax
call dword [0x4fbd2c]
push eax
call dword [sym.imp.USER32.dll_MessageBoxW]
cmp eax, 6
jne 0x41de7f
mov eax, dword [esp + 0x30]
mov edi, dword [eax]
mov esi, dword [esp + 0x1c]
mov ebx, dword [sym.imp.KERNEL32.dll_OpenProcess]
mov edi, edi
mov ebp, dword [esp + 0x30]
test esi, esi
je 0x41ddee
cmp esi, dword [esp + 0x1c]
je 0x41ddf3
call fcn.0047b9cb
cmp edi, ebp
je 0x41de40
test esi, esi
jne 0x41de38
call fcn.0047b9cb
xor eax, eax
cmp edi, dword [eax + 0x14]
jne 0x41de0c
call fcn.0047b9cb
mov ecx, dword [edi + 8]
push ecx
push 0
push 1
call ebx
push 0
push eax
call dword [sym.imp.KERNEL32.dll_TerminateProcess]
test esi, esi
jne 0x41de3c
call fcn.0047b9cb
xor eax, eax
cmp edi, dword [eax + 0x14]
jne 0x41de34
call fcn.0047b9cb
mov edi, dword [edi]
jmp 0x41dde0
mov eax, dword [esi]
jmp 0x41de02
mov eax, dword [esi]
jmp 0x41de2a
mov esi, dword [sym.Uninst.exe_public:_void___thiscall_DuiLib::CWindowWnd::ShowWindow_bool__bool_]
xor edi, edi
push 1
push 1
call fcn.0041dbd0
mov ecx, eax
call esi
call dword [0x4fbd28]
call dword [0x4fbd24]
push 1
push edi
call fcn.0041dbd0
mov ecx, eax
call esi
call fcn.0041dbd0
mov ecx, eax
call fcn.004319e0
mov ecx, dword [esp + 0x18]
mov byte [ecx], al
lea ecx, [esp + 0x1c]
call fcn.004022f0
mov edx, dword [esp + 0x1c]
push edx
call fcn.004798f2
add esp, 4
mov ecx, dword [esp + 0x260]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0x248]
xor ecx, esp
call fcn.0047a885
add esp, 0x258
ret