Function at 0x48f950
Capabilities:
Enumerate gui resources
Terminate process

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x50ff2a
mov eax, dword fs:[0]
push eax
sub esp, 0x8c
push ebx
push esi
push edi
mov eax, dword [0x572bb0]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov ebx, ecx
push str.Started_for:
lea ecx, [ebp - 0x18]
call fcn.00471c70
push str.KillProcess
lea ecx, [ebp - 0x2c]
mov dword [ebp - 4], 0
call fcn.00471bb0
mov byte [ebp - 4], 1
call fcn.00460220
xor ecx, ecx
mov edx, eax
test edx, edx
setne cl
test ecx, ecx
jne 0x48f9be
push 0x80004005
call fcn.004712d0
mov eax, dword [edx]
mov ecx, edx
call dword [eax + 0xc]
lea esi, [eax + 0x10]
mov dword [ebp - 0x10], esi
lea eax, [ebp - 0x18]
mov byte [ebp - 4], 2
push eax
lea edx, [ebp - 0x10]
lea ecx, [ebp - 0x20]
call fcn.00472fc0
push dword [ebp + 8]
mov edx, eax
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x1c]
call fcn.00472fc0
add esp, 8
mov byte [ebp - 4], 4
cmp dword [ebx + 8], 0
je 0x48fa0c
push 0
push eax
lea eax, [ebp - 0x2c]
push eax
lea eax, [ebx + 4]
push eax
call fcn.00473100
mov byte [ebp - 4], 3
or edi, 0xffffffff
mov edx, dword [ebp - 0x1c]
mov eax, edi
add edx, 0xfffffff0
lea ecx, [edx + 0xc]
lock xadd dword [ecx], eax
dec eax
test eax, eax
jg 0x48fa2f
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 2
mov ecx, edi
mov edx, dword [ebp - 0x20]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x48fa4f
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
add esi, 0xfffffff0
mov byte [ebp - 4], 1
mov ecx, edi
lea eax, [esi + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x48fa6c
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0
mov ecx, edi
mov edx, dword [ebp - 0x2c]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x48fa8c
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov dword [ebp - 4], 0xffffffff
mov ecx, edi
mov edx, dword [ebp - 0x18]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x48faaf
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push dword [ebp + 0x10]
lea eax, [ebp - 0x2c]
mov dword [ebp - 0x2c], 0
push dword [ebp + 0xc]
mov ecx, ebx
push eax
mov eax, dword [ebp + 8]
push dword [eax]
call fcn.00490bb0
mov esi, eax
mov dword [ebp - 0x24], esi
test esi, esi
jne 0x48fc1c
push str.Could_not_find_the_process_or_get_a_handle_of_it:
lea ecx, [ebp + 0xc]
call fcn.00471c70
push str.KillProcess
lea ecx, [ebp + 0x10]
mov dword [ebp - 4], 5
call fcn.00471bb0
mov byte [ebp - 4], 6
call fcn.00460220
xor ecx, ecx
mov edx, eax
test edx, edx
setne cl
test ecx, ecx
jne 0x48fb1a
push 0x80004005
call fcn.004712d0
mov eax, dword [edx]
mov ecx, edx
call dword [eax + 0xc]
lea esi, [eax + 0x10]
mov dword [ebp - 0x10], esi
lea eax, [ebp + 0xc]
mov byte [ebp - 4], 7
push eax
lea edx, [ebp - 0x10]
lea ecx, [ebp - 0x20]
call fcn.00472fc0
push dword [ebp + 8]
mov edx, eax
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x1c]
call fcn.00472fc0
add esp, 8
mov byte [ebp - 4], 9
cmp dword [ebx + 8], 0
je 0x48fb68
push 0
push eax
lea eax, [ebp + 0x10]
push eax
lea eax, [ebx + 4]
push eax
call fcn.00473100
mov byte [ebp - 4], 8
mov ecx, edi
mov edx, dword [ebp - 0x1c]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x48fb88
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 7
mov ecx, edi
mov edx, dword [ebp - 0x20]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x48fba8
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
add esi, 0xfffffff0
mov byte [ebp - 4], 6
mov ecx, edi
lea eax, [esi + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x48fbc5
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 5
mov ecx, edi
mov edx, dword [ebp + 0x10]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x48fbe5
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov dword [ebp - 4], 0xffffffff
mov edx, dword [ebp + 0xc]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], edi
dec edi
test edi, edi
jg 0x48fc06
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
xor al, al
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
push str.Handle:
lea ecx, [ebp - 0x28]
call fcn.00471c70
push str.Found_the_process:
lea ecx, [ebp - 0x14]
mov dword [ebp - 4], 0xa
call fcn.00471c70
push str.KillProcess
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 0xb
call fcn.00471bb0
mov edx, esi
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x38]
call fcn.00473060
mov dword [ebp - 0x34], eax
mov byte [ebp - 4], 0xd
call fcn.00460220
xor ecx, ecx
mov edx, eax
test edx, edx
setne cl
test ecx, ecx
jne 0x48fc7f
push 0x80004005
call fcn.004712d0
mov eax, dword [edx]
mov ecx, edx
call dword [eax + 0xc]
lea esi, [eax + 0x10]
mov dword [ebp - 0x10], esi
lea eax, [ebp - 0x14]
mov byte [ebp - 4], 0xe
push eax
lea edx, [ebp - 0x10]
lea ecx, [ebp - 0x3c]
call fcn.00472fc0
push dword [ebp + 8]
mov edx, eax
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0x40]
call fcn.00472fc0
push 0x57a1c8
mov edx, eax
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0x30]
call fcn.00472fc0
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0x11
push ecx
mov edx, eax
lea ecx, [ebp - 0x20]
call fcn.00472fc0
mov byte [ebp - 4], 0x12
lea ecx, [ebp - 0x1c]
push dword [ebp - 0x34]
mov edx, eax
call fcn.00472fc0
add esp, 0x14
mov byte [ebp - 4], 0x13
cmp dword [ebx + 8], 0
je 0x48fd03
push 0
push eax
lea eax, [ebp - 0x18]
push eax
lea eax, [ebx + 4]
push eax
call fcn.00473100
mov byte [ebp - 4], 0x12
mov ecx, edi
mov edx, dword [ebp - 0x1c]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x48fd23
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x11
mov ecx, edi
mov edx, dword [ebp - 0x20]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x48fd43
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x10
mov ecx, edi
mov edx, dword [ebp - 0x30]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x48fd63
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0xf
mov ecx, edi
mov edx, dword [ebp - 0x40]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x48fd83
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0xe
mov ecx, edi
mov edx, dword [ebp - 0x3c]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x48fda3
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
add esi, 0xfffffff0
mov byte [ebp - 4], 0xd
mov ecx, edi
lea eax, [esi + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x48fdc0
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0xc
mov ecx, edi
mov edx, dword [ebp - 0x38]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x48fde0
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0xb
mov ecx, edi
mov edx, dword [ebp - 0x18]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x48fe00
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0xa
mov ecx, edi
mov edx, dword [ebp - 0x14]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x48fe20
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov dword [ebp - 4], 0xffffffff
mov ecx, edi
mov edx, dword [ebp - 0x28]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x48fe43
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push str.Starting_loop
lea ecx, [ebp - 0x14]
call fcn.00471c70
push str.KillProcess
lea ecx, [ebp - 0x18]
mov dword [ebp - 4], 0x14
call fcn.00471bb0
mov byte [ebp - 4], 0x15
call fcn.00460220
xor ecx, ecx
mov edx, eax
test edx, edx
setne cl
test ecx, ecx
jne 0x48fe84
push 0x80004005
call fcn.004712d0
mov eax, dword [edx]
mov ecx, edx
call dword [eax + 0xc]
lea esi, [eax + 0x10]
mov dword [ebp - 0x10], esi
lea eax, [ebp - 0x14]
mov byte [ebp - 4], 0x16
push eax
lea edx, [ebp - 0x10]
lea ecx, [ebp - 0x1c]
call fcn.00472fc0
add esp, 4
mov byte [ebp - 4], 0x17
cmp dword [ebx + 8], 0
je 0x48fec1
push 0
push eax
lea eax, [ebp - 0x18]
push eax
lea eax, [ebx + 4]
push eax
call fcn.00473100
mov byte [ebp - 4], 0x16
mov ecx, edi
mov edx, dword [ebp - 0x1c]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x48fee1
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
add esi, 0xfffffff0
mov byte [ebp - 4], 0x15
mov ecx, edi
lea eax, [esi + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x48fefe
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x14
mov ecx, edi
mov edx, dword [ebp - 0x18]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x48ff1e
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov dword [ebp - 4], 0xffffffff
mov ecx, edi
mov edx, dword [ebp - 0x14]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x48ff41
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
xor eax, eax
inc eax
mov esi, str.Process:
mov dword [ebp - 0x18], eax
call fcn.00460220
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
je 0x48f9b4
mov edx, dword [eax]
mov ecx, eax
call dword [edx + 0xc]
add eax, 0x10
mov dword [ebp - 0x14], eax
mov dword [ebp - 4], 0x18
test esi, 0xffff0000
jne 0x48ff96
movzx esi, si
mov ecx, esi
call fcn.00471400
test eax, eax
je 0x48ffa3
push esi
push eax
lea ecx, [ebp - 0x14]
call fcn.004724d0
jmp 0x48ffa3
push str.Process:
lea ecx, [ebp - 0x14]
call fcn.00471eb0
mov dword [ebp - 4], 0x19
call fcn.00460220
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
je 0x48f9b4
mov edx, dword [eax]
mov ecx, eax
call dword [edx + 0xc]
add eax, 0x10
mov dword [ebp - 0x28], eax
mov eax, str.Loop_iteration:
mov byte [ebp - 4], 0x1a
test eax, 0xffff0000
jne 0x48fff5
movzx esi, ax
mov ecx, esi
call fcn.00471400
test eax, eax
je 0x490002
push esi
push eax
lea ecx, [ebp - 0x28]
call fcn.004724d0
jmp 0x490002
push str.Loop_iteration:
lea ecx, [ebp - 0x28]
call fcn.00471eb0
push str.KillProcess
lea ecx, [ebp - 0x5c]
mov byte [ebp - 4], 0x1b
call fcn.00471bb0
mov byte [ebp - 4], 0x1c
call fcn.00460220
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
je 0x48f9b4
mov edx, dword [eax]
mov ecx, eax
call dword [edx + 0xc]
lea esi, [eax + 0x10]
mov dword [ebp - 0x10], esi
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x1d
push eax
lea edx, [ebp - 0x10]
lea ecx, [ebp - 0x8c]
call fcn.00472fc0
mov byte [ebp - 4], 0x1e
lea ecx, [ebp - 0x7c]
push dword [ebp - 0x18]
mov edx, eax
call fcn.00472f20
push 0x57a1c8
mov edx, eax
mov byte [ebp - 4], 0x1f
lea ecx, [ebp - 0x94]
call fcn.00472fc0
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x20
push ecx
mov edx, eax
lea ecx, [ebp - 0x64]
call fcn.00472fc0
push dword [ebp + 8]
mov edx, eax
mov byte [ebp - 4], 0x21
lea ecx, [ebp - 0x74]
call fcn.00472fc0
add esp, 0x14
mov byte [ebp - 4], 0x22
cmp dword [ebx + 8], 0
je 0x4900b5
push 0
push eax
lea eax, [ebp - 0x5c]
push eax
lea eax, [ebx + 4]
push eax
call fcn.00473100
mov byte [ebp - 4], 0x21
mov ecx, edi
mov edx, dword [ebp - 0x74]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x4900d5
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x20
mov ecx, edi
mov edx, dword [ebp - 0x64]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x4900f5
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x1f
mov ecx, edi
mov edx, dword [ebp - 0x94]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x490118
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x1e
mov ecx, edi
mov edx, dword [ebp - 0x7c]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x490138
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x1d
mov ecx, edi
mov edx, dword [ebp - 0x8c]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x49015b
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
add esi, 0xfffffff0
mov byte [ebp - 4], 0x1c
mov ecx, edi
lea eax, [esi + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x490178
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x1b
mov ecx, edi
mov edx, dword [ebp - 0x5c]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x490198
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x19
mov ecx, edi
mov edx, dword [ebp - 0x28]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x4901b8
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov dword [ebp - 4], 0xffffffff
mov ecx, edi
mov edx, dword [ebp - 0x14]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x4901db
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push dword [ebp - 0x2c]
push 0x492460
call dword [sym.imp.USER32.dll_EnumWindows]
call fcn.00460220
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
je 0x48f9b4
mov edx, dword [eax]
mov ecx, eax
call dword [edx + 0xc]
add eax, 0x10
mov dword [ebp - 0x14], eax
mov eax, str.Waiting_for_process_to_signal:
mov dword [ebp - 4], 0x23
test eax, 0xffff0000
jne 0x490237
movzx esi, ax
mov ecx, esi
call fcn.00471400
test eax, eax
je 0x490244
push esi
push eax
lea ecx, [ebp - 0x14]
call fcn.004724d0
jmp 0x490244
push str.Waiting_for_process_to_signal:
lea ecx, [ebp - 0x14]
call fcn.00471eb0
push str.KillProcess
lea ecx, [ebp - 0x58]
mov dword [ebp - 4], 0x24
call fcn.00471bb0
mov byte [ebp - 4], 0x25
call fcn.00460220
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
je 0x48f9b4
mov edx, dword [eax]
mov ecx, eax
call dword [edx + 0xc]
lea esi, [eax + 0x10]
mov dword [ebp - 0x10], esi
lea eax, [ebp - 0x14]
mov byte [ebp - 4], 0x26
push eax
lea edx, [ebp - 0x10]
lea ecx, [ebp - 0x6c]
call fcn.00472fc0
push dword [ebp + 8]
mov edx, eax
mov byte [ebp - 4], 0x27
lea ecx, [ebp - 0x68]
call fcn.00472fc0
add esp, 8
mov byte [ebp - 4], 0x28
cmp dword [ebx + 8], 0
je 0x4902be
push 0
push eax
lea eax, [ebp - 0x58]
push eax
lea eax, [ebx + 4]
push eax
call fcn.00473100
mov byte [ebp - 4], 0x27
mov ecx, edi
mov edx, dword [ebp - 0x68]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x4902de
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x26
mov ecx, edi
mov edx, dword [ebp - 0x6c]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x4902fe
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
add esi, 0xfffffff0
mov byte [ebp - 4], 0x25
mov ecx, edi
lea eax, [esi + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x49031b
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x24
mov ecx, edi
mov edx, dword [ebp - 0x58]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x49033b
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov dword [ebp - 4], 0xffffffff
mov ecx, edi
mov edx, dword [ebp - 0x14]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x49035e
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push 0x1f4
push dword [ebp - 0x24]
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
test eax, eax
je 0x4905e9
push str.Timeout_while_waiting_for_the_process:
lea ecx, [ebp - 0x3c]
call fcn.00471c70
push str.KillProcess
lea ecx, [ebp - 0x38]
mov dword [ebp - 4], 0x29
call fcn.00471bb0
mov byte [ebp - 4], 0x2a
call fcn.00460220
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
je 0x48f9b4
mov edx, dword [eax]
mov ecx, eax
call dword [edx + 0xc]
lea esi, [eax + 0x10]
mov dword [ebp - 0x10], esi
lea eax, [ebp - 0x3c]
mov byte [ebp - 4], 0x2b
push eax
lea edx, [ebp - 0x10]
lea ecx, [ebp - 0x48]
call fcn.00472fc0
push dword [ebp + 8]
mov edx, eax
mov byte [ebp - 4], 0x2c
lea ecx, [ebp - 0x84]
call fcn.00472fc0
add esp, 8
mov byte [ebp - 4], 0x2d
cmp dword [ebx + 8], 0
je 0x4903fe
push 2
push eax
lea eax, [ebp - 0x38]
push eax
lea eax, [ebx + 4]
push eax
call fcn.00473100
mov byte [ebp - 4], 0x2c
mov ecx, edi
mov edx, dword [ebp - 0x84]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x490421
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x2b
mov ecx, edi
mov edx, dword [ebp - 0x48]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x490441
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
add esi, 0xfffffff0
mov byte [ebp - 4], 0x2a
mov ecx, edi
lea eax, [esi + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x49045e
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x29
mov ecx, edi
mov edx, dword [ebp - 0x38]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x49047e
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov dword [ebp - 4], 0xffffffff
mov ecx, edi
mov edx, dword [ebp - 0x3c]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x4904a1
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push 0
push dword [ebp - 0x24]
call dword [sym.imp.KERNEL32.dll_TerminateProcess]
mov esi, eax
mov dword [ebp - 0x14], esi
test esi, esi
jne 0x490717
push str.TerminateProcess_failed_for_the_process:
lea ecx, [ebp - 0x30]
call fcn.00471c70
push str.KillProcess
lea ecx, [ebp - 0x40]
mov dword [ebp - 4], 0x2e
call fcn.00471bb0
mov byte [ebp - 4], 0x2f
call fcn.00460220
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
je 0x48f9b4
mov edx, dword [eax]
mov ecx, eax
call dword [edx + 0xc]
lea esi, [eax + 0x10]
mov dword [ebp - 0x10], esi
lea eax, [ebp - 0x30]
mov byte [ebp - 4], 0x30
push eax
lea edx, [ebp - 0x10]
lea ecx, [ebp - 0x54]
call fcn.00472fc0
push dword [ebp + 8]
mov edx, eax
mov byte [ebp - 4], 0x31
lea ecx, [ebp - 0x4c]
call fcn.00472fc0
add esp, 8
mov byte [ebp - 4], 0x32
cmp dword [ebx + 8], 0
je 0x490540
push 2
push eax
lea eax, [ebp - 0x40]
push eax
lea eax, [ebx + 4]
push eax
call fcn.00473100
mov byte [ebp - 4], 0x31
mov ecx, edi
mov edx, dword [ebp - 0x4c]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x490560
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x30
mov ecx, edi
mov edx, dword [ebp - 0x54]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x490580
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
add esi, 0xfffffff0
mov byte [ebp - 4], 0x2f
mov ecx, edi
lea eax, [esi + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x49059d
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x2e
mov ecx, edi
mov edx, dword [ebp - 0x40]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x4905bd
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov dword [ebp - 4], 0xffffffff
mov ecx, edi
mov edx, dword [ebp - 0x30]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x490717
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
jmp 0x490717
push str.Finished_waiting_for_the_process:
lea ecx, [ebp - 0x1c]
call fcn.00471c70
push str.KillProcess
lea ecx, [ebp - 0x20]
mov dword [ebp - 4], 0x33
call fcn.00471bb0
mov byte [ebp - 4], 0x34
call fcn.00460220
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
je 0x48f9b4
mov edx, dword [eax]
mov ecx, eax
call dword [edx + 0xc]
lea esi, [eax + 0x10]
mov dword [ebp - 0x10], esi
lea eax, [ebp - 0x1c]
mov byte [ebp - 4], 0x35
push eax
lea edx, [ebp - 0x10]
lea ecx, [ebp - 0x44]
call fcn.00472fc0
push dword [ebp + 8]
mov edx, eax
mov byte [ebp - 4], 0x36
lea ecx, [ebp - 0x50]
call fcn.00472fc0
add esp, 8
mov byte [ebp - 4], 0x37
cmp dword [ebx + 8], 0
je 0x490670
push 0
push eax
lea eax, [ebp - 0x20]
push eax
lea eax, [ebx + 4]
push eax
call fcn.00473100
mov byte [ebp - 4], 0x36
mov ecx, edi
mov edx, dword [ebp - 0x50]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x490690
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x35
mov ecx, edi
mov edx, dword [ebp - 0x44]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x4906b0
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
add esi, 0xfffffff0
mov byte [ebp - 4], 0x34
mov ecx, edi
lea eax, [esi + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x4906cd
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x33
mov ecx, edi
mov edx, dword [ebp - 0x20]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x4906ed
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov dword [ebp - 4], 0xffffffff
mov ecx, edi
mov edx, dword [ebp - 0x1c]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x490710
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov dword [ebp - 0x14], 1
push dword [ebp - 0x24]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
cmp dword [ebp - 0x18], 5
jge 0x49075a
push 0x1f4
call dword [sym.imp.KERNEL32.dll_Sleep]
push dword [ebp + 0x10]
lea eax, [ebp - 0x2c]
mov ecx, ebx
push dword [ebp + 0xc]
push eax
mov eax, dword [ebp + 8]
push dword [eax]
call fcn.00490bb0
mov dword [ebp - 0x24], eax
test eax, eax
je 0x49091f
mov eax, dword [ebp - 0x18]
jmp 0x48ff43
push str.Process:
lea ecx, [ebp - 0x1c]
call fcn.00471c70
push str.Breaking_the_loop
lea ecx, [ebp + 0xc]
mov dword [ebp - 4], 0x38
call fcn.00471c70
push str.KillProcess
lea ecx, [ebp + 0x10]
mov byte [ebp - 4], 0x39
call fcn.00471bb0
mov byte [ebp - 4], 0x3a
call fcn.00460220
xor ecx, ecx
mov edx, eax
test edx, edx
setne cl
test ecx, ecx
jne 0x4907ac
push 0x80004005
call fcn.004712d0
mov eax, dword [edx]
mov ecx, edx
call dword [eax + 0xc]
lea esi, [eax + 0x10]
mov dword [ebp - 0x44], esi
lea eax, [ebp + 0xc]
mov byte [ebp - 4], 0x3b
push eax
lea edx, [ebp - 0x44]
lea ecx, [ebp - 0x48]
call fcn.00472fc0
push 0x57a1c8
mov edx, eax
mov byte [ebp - 4], 0x3c
lea ecx, [ebp - 0x4c]
call fcn.00472fc0
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 0x3d
push ecx
mov edx, eax
lea ecx, [ebp - 0x54]
call fcn.00472fc0
push dword [ebp + 8]
mov edx, eax
mov byte [ebp - 4], 0x3e
lea ecx, [ebp - 0x50]
call fcn.00472fc0
add esp, 0x10
mov byte [ebp - 4], 0x3f
cmp dword [ebx + 8], 0
je 0x49081f
push 0
push eax
lea eax, [ebp + 0x10]
push eax
lea eax, [ebx + 4]
push eax
call fcn.00473100
mov byte [ebp - 4], 0x3e
mov ecx, edi
mov edx, dword [ebp - 0x50]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x49083f
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x3d
mov ecx, edi
mov edx, dword [ebp - 0x54]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x49085f
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x3c
mov ecx, edi
mov edx, dword [ebp - 0x4c]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x49087f
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x3b
mov ecx, edi
mov edx, dword [ebp - 0x48]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x49089f
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
add esi, 0xfffffff0
mov byte [ebp - 4], 0x3a
mov ecx, edi
lea eax, [esi + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x4908bc
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x39
mov ecx, edi
mov edx, dword [ebp + 0x10]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x4908dc
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x38
mov ecx, edi
mov edx, dword [ebp + 0xc]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x4908fc
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov dword [ebp - 4], 0xffffffff
mov ecx, edi
mov edx, dword [ebp - 0x1c]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x49091f
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push str.Process:
lea ecx, [ebp - 0x10]
call fcn.00471c70
push str._iterations
lea ecx, [ebp - 0x34]
mov dword [ebp - 4], 0x40
call fcn.00471c70
push str.Ended_the_loop_after
lea ecx, [ebp - 0x60]
mov byte [ebp - 4], 0x41
call fcn.00471c70
push str.KillProcess
lea ecx, [ebp - 0x24]
mov byte [ebp - 4], 0x42
call fcn.00471bb0
mov byte [ebp - 4], 0x43
call fcn.00460220
xor ecx, ecx
mov edx, eax
test edx, edx
setne cl
test ecx, ecx
jne 0x490982
push 0x80004005
call fcn.004712d0
mov eax, dword [edx]
mov ecx, edx
call dword [eax + 0xc]
lea esi, [eax + 0x10]
mov dword [ebp + 0x10], esi
lea eax, [ebp - 0x60]
mov byte [ebp - 4], 0x44
push eax
lea edx, [ebp + 0x10]
lea ecx, [ebp - 0x98]
call fcn.00472fc0
mov byte [ebp - 4], 0x45
lea ecx, [ebp - 0x90]
push dword [ebp - 0x18]
mov edx, eax
call fcn.00472f20
lea ecx, [ebp - 0x34]
mov byte [ebp - 4], 0x46
push ecx
mov edx, eax
lea ecx, [ebp - 0x88]
call fcn.00472fc0
push 0x57a1c8
mov edx, eax
mov byte [ebp - 4], 0x47
lea ecx, [ebp - 0x80]
call fcn.00472fc0
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 0x48
push ecx
mov edx, eax
lea ecx, [ebp - 0x78]
call fcn.00472fc0
push dword [ebp + 8]
mov edx, eax
mov byte [ebp - 4], 0x49
lea ecx, [ebp - 0x70]
call fcn.00472fc0
add esp, 0x18
mov byte [ebp - 4], 0x4a
cmp dword [ebx + 8], 0
je 0x490a21
push 0
push eax
lea eax, [ebp - 0x24]
push eax
lea eax, [ebx + 4]
push eax
call fcn.00473100
mov byte [ebp - 4], 0x49
mov ecx, edi
mov edx, dword [ebp - 0x70]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x490a41
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x48
mov ecx, edi
mov edx, dword [ebp - 0x78]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x490a61
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x47
mov ecx, edi
mov edx, dword [ebp - 0x80]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x490a81
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x46
mov ecx, edi
mov edx, dword [ebp - 0x88]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x490aa4
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x45
mov ecx, edi
mov edx, dword [ebp - 0x90]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x490ac7
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x44
mov ecx, edi
mov edx, dword [ebp - 0x98]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x490aea
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
add esi, 0xfffffff0
mov byte [ebp - 4], 0x43
mov ecx, edi
lea eax, [esi + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x490b07
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x42
mov ecx, edi
mov edx, dword [ebp - 0x24]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x490b27
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x41
mov ecx, edi
mov edx, dword [ebp - 0x60]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x490b47
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x40
mov ecx, edi
mov edx, dword [ebp - 0x34]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x490b67
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov dword [ebp - 4], 0xffffffff
mov edx, dword [ebp - 0x10]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], edi
dec edi
test edi, edi
jg 0x490b88
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
xor eax, eax
cmp dword [ebp - 0x14], 1
sete al
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc