Function at 0x670a7010
Capabilities:
Enumerate gui resources
Terminate process

Disassembly:
cmp dword [esp + 8], 0
jne case.default.0x670a7028
mov eax, dword [esp + 0xc]
cmp eax, 0xe
ja case.default.0x670a7028
jmp dword [eax*4 + 0x670a711c]
mov ecx, dword [esp + 4]
jmp sym.QtCore4.dll_protected:_void___thiscall_QProcess::started_void_
mov eax, dword [esp + 0x10]
mov ecx, dword [eax + 4]
mov edx, dword [ecx]
mov ecx, dword [esp + 4]
push edx
call sym.QtCore4.dll_protected:_void___thiscall_QProcess::finished_int_
ret
mov eax, dword [esp + 0x10]
mov ecx, dword [eax + 8]
mov edx, dword [ecx]
mov eax, dword [eax + 4]
mov ecx, dword [eax]
push edx
push ecx
mov ecx, dword [esp + 0xc]
call sym.QtCore4.dll_protected:_void___thiscall_QProcess::finished_int__enum_QProcess::ExitStatus_
ret
mov edx, dword [esp + 0x10]
mov eax, dword [edx + 4]
mov ecx, dword [eax]
push ecx
mov ecx, dword [esp + 8]
call sym.QtCore4.dll_protected:_void___thiscall_QProcess::error_enum_QProcess::ProcessError_
ret
mov edx, dword [esp + 0x10]
mov eax, dword [edx + 4]
mov ecx, dword [eax]
push ecx
mov ecx, dword [esp + 8]
call sym.QtCore4.dll_protected:_void___thiscall_QProcess::stateChanged_enum_QProcess::ProcessState_
ret
mov ecx, dword [esp + 4]
jmp sym.QtCore4.dll_protected:_void___thiscall_QProcess::readyReadStandardOutput_void_
mov ecx, dword [esp + 4]
jmp sym.QtCore4.dll_protected:_void___thiscall_QProcess::readyReadStandardError_void_
mov edx, dword [esp + 4]
mov ecx, dword [edx + 4]
jmp 0x670d29d0
mov eax, dword [esp + 4]
mov ecx, dword [eax + 4]
jmp fcn.670d2a10
mov ecx, dword [esp + 4]
mov ecx, dword [ecx + 4]
call fcn.670a64a0
mov edx, dword [esp + 0x10]
mov ecx, dword [edx]
jmp 0x670a70de
mov eax, dword [esp + 4]
mov ecx, dword [eax + 4]
call fcn.670a6670
mov ecx, dword [esp + 0x10]
mov ecx, dword [ecx]
test ecx, ecx
je case.default.0x670a7028
mov byte [ecx], al
ret
mov edx, dword [esp + 4]
mov ecx, dword [edx + 4]
call fcn.670a6840
jmp 0x670a70d8
mov edx, dword [esp + 4]
mov ecx, dword [edx + 4]
call fcn.670a43d0
jmp 0x670a70d8
mov edx, dword [esp + 4]
mov ecx, dword [edx + 4]
call fcn.670a6a20
jmp 0x670a70d8
mov edx, dword [esp + 4]
mov ecx, dword [edx + 4]
jmp 0x670d3320
push esi
mov esi, ecx
mov eax, dword [esi + 0xa4]
test eax, eax
je 0x670d2a02
mov eax, dword [eax + 8]
push eax
push 0x670d2990
call dword [sym.imp.USER32.dll_EnumWindows]
mov ecx, dword [esi + 0xa4]
mov edx, dword [ecx + 0xc]
push 0
push 0
push 0x10
push edx
call dword [sym.imp.USER32.dll_PostThreadMessageW]
pop esi
ret
push esi
mov esi, ecx
mov ecx, dword [esi + 0x174]
call sym.QtCore4.dll_public:_void___thiscall_QTimer::stop_void_
cmp dword [esi + 0x150], 0
jne 0x670d3340
cmp dword [esi + 0x14c], 0
je 0x670d335c
mov ecx, dword [esi + 0x178]
test ecx, ecx
je 0x670d3355
push 0
call sym.QtCore4.dll_public:_bool___thiscall_QWindowsPipeWriter::waitForWrite_int_
test al, al
je 0x670d335c
mov ecx, esi
call fcn.670a6840
mov ecx, esi
call fcn.670d2f00
or eax, edx
je 0x670d336e
mov ecx, esi
call fcn.670a64a0
mov ecx, esi
call fcn.670d3030
or eax, edx
je 0x670d3380
mov ecx, esi
call fcn.670a6670
cmp dword [esi + 0x9c], 0
je 0x670d3396
mov ecx, dword [esi + 0x174]
push 0x64
call sym.QtCore4.dll_public:_void___thiscall_QTimer::start_int_
pop esi
ret