Function at 0x418802
Capabilities:
Enumerate process modules
Terminate process

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x23a0
call fcn.00464040
mov eax, dword [0x485008]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push esi
push edi
lea eax, [ebp - 0x2398]
push eax
push 0x2000
lea eax, [ebp - 0x2388]
push eax
call dword [sym.imp.KERNEL32.dll_K32EnumProcesses]
xor esi, esi
test eax, eax
je 0x418a9c
mov edi, dword [ebp - 0x2398]
mov ebx, esi
shr edi, 2
mov ecx, 0x46e060
test edi, edi
je 0x4189f7
lea eax, [ebp - 0x2388]
mov dword [ebp - 0x238c], eax
cmp dword [eax], esi
je 0x4189e0
push 0x104
lea eax, [ebp - 0x288]
push esi
push eax
call fcn.00447370
mov eax, dword [ebp - 0x238c]
add esp, 0xc
push dword [eax]
push esi
push 0x410
call dword [sym.imp.KERNEL32.dll_OpenProcess]
mov dword [ebp - 0x2390], eax
test eax, eax
je 0x4189da
lea ecx, [ebp - 0x23a0]
push ecx
push 4
lea ecx, [ebp - 0x239c]
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_K32EnumProcessModules]
test eax, eax
je 0x4188db
push 0x104
lea eax, [ebp - 0x288]
push eax
push dword [ebp - 0x239c]
push dword [ebp - 0x2390]
call dword [sym.imp.KERNEL32.dll_K32GetModuleBaseNameA]
lea ecx, [ebp - 0x288]
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4188e4
sub ecx, edx
push str..exe
lea eax, [ebp + ecx - 0x28c]
push eax
call fcn.00454e7d
pop ecx
pop ecx
test eax, eax
jne 0x4189ce
mov dword [ebp - 0x2394], esi
push 0x80
lea eax, [ebp - 0x84]
push esi
push eax
call fcn.00447370
add esp, 0xc
lea eax, [ebp - 0x84]
push esi
push 0x80
push eax
mov eax, dword [0x4a1700]
imul eax, dword [ebp - 0x2394]
add eax, dword [0x4a16fc]
push eax
push dword [ebp - 0x2390]
call dword [sym.imp.KERNEL32.dll_ReadProcessMemory]
lea eax, [ebp - 0x84]
mov ecx, esi
mov edx, 0x46e060
movzx eax, byte [eax + ecx]
cmp al, byte [edx + ecx]
jne 0x4189b8
inc ecx
lea eax, [ebp - 0x84]
cmp ecx, 8
jne 0x41895d
push dword [ebp - 0x2390]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [ebp - 0x238c]
push dword [eax]
lea eax, [ebp - 0x184]
push str.LFSLazy_PID__d
push 0x100
push eax
call fcn.00401599
add esp, 0x10
lea eax, [ebp - 0x184]
push eax
push esi
push esi
call dword [sym.imp.KERNEL32.dll_CreateMutexA]
call dword [sym.imp.KERNEL32.dll_GetLastError]
test eax, eax
je 0x418a03
mov eax, dword [ebp - 0x2394]
inc eax
mov dword [ebp - 0x2394], eax
cmp eax, 8
jl 0x41890f
push dword [ebp - 0x2390]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [ebp - 0x238c]
inc ebx
add eax, 4
mov dword [ebp - 0x238c], eax
cmp ebx, edi
jb 0x418863
mov ecx, 0x46e060
push esi
push ecx
push str.Cannot_find_LFS_process
jmp 0x418aa7
push dword [ebp + ebx*4 - 0x2388]
push esi
push 0x638
call dword [sym.imp.KERNEL32.dll_OpenProcess]
mov edi, eax
test edi, edi
jne 0x418a51
mov edx, 0x100
lea ecx, [ebp - 0x388]
call fcn.004049d2
push eax
lea eax, [ebp - 0x184]
push str.Cannot_open_LFS._Error_:__s
push eax
call fcn.00401468
add esp, 0xc
mov eax, 0x46e060
push esi
push eax
lea eax, [ebp - 0x184]
push eax
jmp 0x418aa7
mov eax, dword [ebp + ebx*4 - 0x2388]
mov dword [0x6b82d4], eax
call fcn.00404945
mov dword [0x49120c], eax
test eax, eax
jne 0x418a79
push esi
mov eax, 0x46e060
push eax
push str.Didnt_found_LFSs_class._0x89
jmp 0x418aa7
push 0x104
push 0x7e6a38
push esi
push edi
call dword [sym.imp.KERNEL32.dll_K32GetModuleFileNameExA]
mov ecx, dword [ebp - 4]
mov eax, edi
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.00445b7e
leave
ret
push esi
push 0x46e060
push str.Unable_to_enumerate_processes
push esi
call dword [sym.imp.USER32.dll_MessageBoxA]
push esi
call fcn.004498af
int3