Function at 0x40419c
Capabilities:
Enumerate processes
Enumerate services
Terminate process
Terminate process by name

Disassembly:
push ebp
sub esp, 0x128
lea ebp, [esp - 4]
mov eax, dword [0x4c72ac]
xor eax, ebp
mov dword [ebp + 0x128], eax
push 0x58
mov eax, 0x487b8d
call fcn.0046ace6
push 5
push 5
sub esp, 0x1c
xor edi, edi
mov dword [ebp - 0x38], ecx
mov dword [ebp - 0x24], edi
mov ecx, esp
mov dword [ebp - 0x10], esp
push str.NBARNygqFg01OkkBPAA7Oyk9ETQ1EygLLT0aTSkqHjcpOkk2OgMgQTIDDkQ
call fcn.004023cb
call fcn.00403e5c
add esp, 0x20
mov dword [ebp - 0x10], esp
mov esi, esp
push 3
push 3
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x10], esp
push str.KTtNQTEtQQswOx5BPysWSjQtChY0DkRE
call fcn.004023cb
push esi
call fcn.00403d46
add esp, 0x28
call fcn.0042d14f
pop ecx
test al, al
je 0x40421b
xor eax, eax
jmp 0x404964
push ecx
mov esi, esp
mov dword [ebp - 0x10], esp
push 2
pop ebx
push ebx
push ebx
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x28], esp
push str.PDg4KD8OFjcOywvPDsaHA
call fcn.004023cb
push esi
call fcn.00403d46
add esp, 0x24
mov dword [ebp - 0x28], esp
mov esi, esp
push ebx
push ebx
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x28], esp
push str.NS0sLz8RFiovDkkaPzgSRA
mov dword [ebp - 4], edi
call fcn.004023cb
push esi
call fcn.00403d46
or dword [ebp - 4], 0xffffffff
add esp, 0x28
call fcn.0042b2c7
pop ecx
pop ecx
call sub.KERNEL32.dll_GetCurrentProcessId
mov dword [ebp - 0x10], eax
call fcn.0044876c
mov eax, dword [eax + 4]
push dword [eax + 0x60]
lea ecx, [ebp - 0x18]
call fcn.00404158
push 3
push 3
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x28], esp
push str.Nx5MMzQQQTs9EwoBNjwrPA
mov dword [ebp - 4], 1
call fcn.004023cb
lea eax, [ebp - 0x1c]
push eax
call fcn.00403d46
add esp, 0x28
mov eax, dword [eax]
push dword [eax - 0xc]
lea ecx, [ebp - 0x18]
push eax
mov byte [ebp - 4], bl
call fcn.004038c9
mov ecx, dword [ebp - 0x1c]
add ecx, 0xfffffff0
mov byte [ebp - 4], 1
call fcn.00401240
push edi
push ebx
call sub.KERNEL32.dll_CreateToolhelp32Snapshot
mov dword [ebp - 0x1c], eax
call dword [sym.imp.KERNEL32.dll_GetLastError]
push 0x124
lea eax, [ebp + 4]
push edi
push eax
mov dword [ebp - 0x2c], edi
call fcn.0046a630
add esp, 0xc
lea eax, [ebp]
push eax
push dword [ebp - 0x1c]
mov dword [ebp], 0x128
call sub.KERNEL32.dll_Process32First
mov esi, 0x4c8724
call fcn.0044890c
push eax
lea ecx, [ebp - 0x20]
call fcn.004035c3
lea eax, [ebp + 0x24]
push eax
lea ecx, [ebp - 0x20]
mov byte [ebp - 4], 3
call fcn.00403a8a
push esi
lea eax, [ebp - 0x28]
push esi
push eax
call fcn.00403a33
add esp, 0xc
mov eax, dword [eax]
push dword [eax - 0xc]
lea ecx, [ebp - 0x20]
push eax
mov byte [ebp - 4], 4
call fcn.004038c9
mov ecx, dword [ebp - 0x28]
add ecx, 0xfffffff0
mov byte [ebp - 4], 3
call fcn.00401240
mov eax, dword [ebp - 0x18]
push dword [eax - 0xc]
lea ecx, [ebp - 0x20]
push eax
call fcn.004038c9
push ecx
mov ecx, esp
mov dword [ebp - 0x3c], esp
push 0x496090
call fcn.00404158
push ecx
lea eax, [ebp + 0x24]
mov ecx, esp
mov dword [ebp - 0x14], esp
push eax
mov byte [ebp - 4], 5
call fcn.00404158
push 0x4c8734
mov byte [ebp - 4], 3
call fcn.0042c769
push dword [ebp - 0x18]
lea eax, [ebp + 0x24]
push eax
call fcn.00478b34
add esp, 0x14
test eax, eax
jne 0x4043ba
mov eax, dword [ebp + 8]
cmp eax, dword [ebp - 0x10]
jne 0x4043df
mov ecx, dword [ebp - 0x20]
add ecx, 0xfffffff0
mov byte [ebp - 4], 1
call fcn.00401240
lea eax, [ebp]
push eax
push dword [ebp - 0x1c]
call sub.KERNEL32.dll_Process32Next
test eax, eax
jne 0x404312
jmp 0x404412
push eax
push edi
push 0x1f0fff
call dword [sym.imp.KERNEL32.dll_OpenProcess]
mov esi, eax
lea eax, [ebp - 0x2c]
push eax
push esi
call dword [sym.imp.KERNEL32.dll_GetExitCodeProcess]
push dword [ebp - 0x2c]
push esi
call dword [sym.imp.KERNEL32.dll_TerminateProcess]
mov ecx, dword [ebp - 0x20]
add ecx, 0xfffffff0
mov byte [ebp - 4], 1
call fcn.00401240
push 0x8ca0
call fcn.00446848
mov dword [esp], 0xf003f
push str.ServicesActive
push edi
mov dword [ebp - 0x20], eax
call dword [sym.imp.ADVAPI32.dll_OpenSCManagerA]
mov esi, dword [sym.imp.ADVAPI32.dll_EnumServicesStatusA]
push edi
lea ecx, [ebp - 0x34]
push ecx
lea ecx, [ebp - 0x30]
push ecx
push 0x3e8
push dword [ebp - 0x20]
mov dword [ebp - 0x10], eax
push 1
push 0x30
push eax
mov dword [ebp - 0x30], edi
mov dword [ebp - 0x34], edi
call esi
mov eax, dword [ebp - 0x30]
cmp eax, edi
je 0x40447b
push edi
lea ecx, [ebp - 0x34]
push ecx
lea ecx, [ebp - 0x30]
push ecx
add eax, 0x3e8
push eax
push dword [ebp - 0x20]
push 1
push 0x30
push dword [ebp - 0x10]
call esi
mov dword [ebp - 0x1c], edi
cmp dword [ebp - 0x34], edi
jbe 0x4044c6
mov esi, dword [ebp - 0x20]
push ecx
mov ecx, esp
mov dword [ebp - 0x14], esp
push 0x496090
call fcn.00404158
push ecx
mov ecx, esp
mov dword [ebp - 0x3c], esp
push dword [esi]
mov byte [ebp - 4], 6
call fcn.00404158
push 0x4c8738
mov byte [ebp - 4], 1
call fcn.0042c769
add esp, 0xc
inc dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
add esi, 0x24
cmp eax, dword [ebp - 0x34]
jb 0x404486
mov ecx, dword [ebp - 0x18]
or dword [ebp - 4], 0xffffffff
add ecx, 0xfffffff0
call fcn.00401240
mov eax, dword [0x4cad80]
cmp eax, 1
jne 0x404552
mov eax, dword [0x4cad84]
push dword [eax]
lea ecx, [ebp - 0x18]
call fcn.00404158
push 3
push 3
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x14], esp
push str.Nzs8MzcTSRY6EDhSPChNSA
mov dword [ebp - 4], 7
call fcn.004023cb
lea eax, [ebp - 0x10]
push eax
call fcn.00403d46
push dword [eax]
push dword [ebp - 0x18]
call fcn.0046c19c
mov ecx, dword [ebp - 0x10]
add esp, 0x30
mov ebx, eax
neg ebx
sbb bl, bl
add ecx, 0xfffffff0
inc bl
call fcn.00401240
test bl, bl
je 0x40453f
mov byte [0x4c88d3], 1
push 4
push 4
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x14], esp
push str.NBE8QT8TKC01PDhLKT0eMzQRPzQ2OERE
jmp 0x4045ce
cmp eax, ebx
jne 0x404633
mov eax, dword [0x4cad84]
push dword [eax + 4]
lea ecx, [ebp - 0x18]
call fcn.00404158
push 3
push 3
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x14], esp
push str.Nzs8MzcTSRY6EDhSPChNSA
mov dword [ebp - 4], 8
call fcn.004023cb
lea eax, [ebp - 0x10]
push eax
call fcn.00403d46
push dword [eax]
push dword [ebp - 0x18]
call fcn.0046c19c
mov ecx, dword [ebp - 0x10]
add esp, 0x30
mov ebx, eax
neg ebx
sbb bl, bl
add ecx, 0xfffffff0
inc bl
call fcn.00401240
test bl, bl
je 0x4045bd
mov byte [0x4c88d3], 1
jmp 0x40461f
push 3
push 3
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x14], esp
push str.NxNJTSoDKEAqLDgAKSwVPA
call fcn.004023cb
lea eax, [ebp - 0x10]
push eax
call fcn.00403d46
push dword [eax]
push dword [ebp - 0x18]
call fcn.0046c19c
add esp, 0x30
test eax, eax
je 0x404604
push str.uber
push dword [ebp - 0x18]
call fcn.0046c19c
pop ecx
pop ecx
test eax, eax
je 0x404604
xor bl, bl
jmp 0x404606
mov bl, 1
mov ecx, dword [ebp - 0x10]
add ecx, 0xfffffff0
mov dword [ebp - 0x24], edi
call fcn.00401240
test bl, bl
je 0x40461f
mov byte [0x4c88d4], 1
mov ecx, dword [ebp - 0x18]
or dword [ebp - 4], 0xffffffff
add ecx, 0xfffffff0
call fcn.00401240
push 2
pop ebx
jmp 0x40466f
cmp eax, 3
jne 0x40466f
mov eax, dword [0x4cad84]
push dword [eax + 4]
mov ecx, 0x4c8764
call fcn.00403a16
mov eax, dword [0x4cad84]
push dword [eax + 8]
call fcn.0046c3a4
mov dword [0x4c8714], eax
mov eax, dword [0x4cad84]
pop ecx
push dword [eax + 4]
mov ecx, 0x4c8768
call fcn.00403a16
call fcn.00430a09
lea eax, [ebp - 0x10]
push eax
call fcn.0042b5b3
pop ecx
mov ecx, eax
mov dword [ebp - 4], 9
call fcn.0040385b
push eax
lea ecx, [ebp - 0x2c]
call fcn.00403711
mov ecx, dword [ebp - 0x10]
add ecx, 0xfffffff0
mov byte [ebp - 4], 0xb
call fcn.00401240
push edi
push 3
pop esi
push esi
push esi
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x14], esp
push str.NQFNSjQ9SSs2OjxNMjszPA
call fcn.004023cb
lea eax, [ebp - 0x18]
push eax
call fcn.00403d46
add esp, 0x28
push dword [eax]
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0xc
call fcn.0040368a
cmp eax, 0xffffffff
jle 0x404707
push 4
pop esi
push esi
push esi
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x14], esp
push str.Mig8TTIDLCg_HkFAPBIVKTQTCgM2OhItPC00DjYTATcyAw4WKzhERA
call fcn.004023cb
lea eax, [ebp - 0x30]
push eax
call fcn.00403d46
add esp, 0x28
mov byte [ebp - 4], 0xd
mov dword [ebp - 0x24], esi
jmp 0x404735
push esi
push esi
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x14], esp
push str.Nh47MzIqPEAxEzRPNSwSHikqChwqPUErPxA4VjUqDgwpKyw2KzhERA
call fcn.004023cb
lea eax, [ebp - 0x28]
push eax
call fcn.00403d46
add esp, 0x28
mov dword [ebp - 4], 0xe
mov dword [ebp - 0x24], 8
push eax
lea ecx, [ebp - 0x1c]
call fcn.00403711
mov dword [ebp - 4], 0xf
test byte [ebp - 0x24], 8
je 0x40475a
mov ecx, dword [ebp - 0x28]
and dword [ebp - 0x24], 0xfffffff7
add ecx, 0xfffffff0
call fcn.00401240
test byte [ebp - 0x24], 4
je 0x40476b
mov ecx, dword [ebp - 0x30]
add ecx, 0xfffffff0
call fcn.00401240
mov ecx, dword [ebp - 0x18]
add ecx, 0xfffffff0
mov byte [ebp - 4], 0x12
call fcn.00401240
push ecx
mov dword [ebp - 0x14], esp
mov esi, esp
push ebx
push ebx
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x14], esp
push str.NTs_GjIoCi4xHgogPz1BKD8rDjIhOixWPDssGjceEho_AQ41MigKLjMrDjsESw0MSsBIT0oPDc
call fcn.004023cb
push esi
call fcn.00403d46
mov ecx, dword [ebp - 0x38]
add esp, 0x28
call fcn.00404071
or dword [0x4c8714], eax
push ecx
mov dword [ebp - 0x14], esp
mov esi, esp
push 3
push 3
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x14], esp
push str.Mi0RMzUqPE88EyxWPCxJSCkTChYvEw5ONTsWTz8oTS83Hk0yNRNJHD8RFk89ESAeNCg8NjE9SU4xEywBMhAOGDY6Ci41A0lOKisWDz0SEk4pKhE8KzhERA
call fcn.004023cb
push esi
call fcn.00403d46
mov ecx, dword [ebp - 0x38]
add esp, 0x28
call fcn.00404071
or dword [0x4c8714], eax
push ecx
mov dword [ebp - 0x14], esp
mov esi, esp
push 4
push 4
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x14], esp
push str.MihNTSoTGkA1OEFAPBIVKTQTCgM2OhItPC00DikrFjU0PQocLBMgOCgrHkk4PBIANwBIOzE6SQ00ODxLNjsgODIrNDc2A00tKTsOQDw9ESk2Og4qNQMoDTESPFIpLDwuKSs_MzgqEjs_EhZLNhE8AzIDETwrOERE
call fcn.004023cb
push esi
call fcn.00403d46
mov esi, dword [ebp - 0x38]
add esp, 0x28
mov ecx, esi
call fcn.00404071
or dword [0x4c8714], eax
push ebx
push ebx
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x14], esp
push str.MS0eFSkrIDY_ASwuPjtJST47GiAxEQ41MysOOz4RLDQxKwEhPSg8Nw
call fcn.004023cb
lea eax, [ebp - 0x10]
push eax
call fcn.00403d46
add esp, 0x24
mov ecx, esp
mov dword [ebp - 0x14], esp
push eax
lea eax, [ebp - 0x1c]
push eax
push ecx
mov byte [ebp - 4], 0x13
call fcn.00403a33
add esp, 0xc
mov ecx, esi
call fcn.00404071
mov ecx, dword [ebp - 0x10]
or dword [0x4c8714], eax
mov byte [ebp - 4], 0x12
add ecx, 0xfffffff0
call fcn.00401240
push 4
push 4
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x14], esp
push str.Mi1IMzcDMA0wPEFIKTszKjcTSTYqAygNOhMwSTwDATY0KzQKLBMODT0QQQkpKBYgNzs3MzoDPCgoLyAAPRJJHTcoTUE1Ezw9KTsOCyk6ETw
call fcn.004023cb
lea eax, [ebp - 0x10]
push eax
call fcn.00403d46
add esp, 0x24
mov ecx, esp
mov dword [ebp - 0x14], esp
push eax
lea eax, [ebp - 0x1c]
push eax
push ecx
mov byte [ebp - 4], 0x14
call fcn.00403a33
add esp, 0xc
mov ecx, esi
call fcn.00404071
mov ecx, dword [ebp - 0x10]
or dword [0x4c8714], eax
add ecx, 0xfffffff0
mov byte [ebp - 4], 0x12
call fcn.00401240
mov eax, dword [0x4c8764]
cmp dword [eax - 0xc], edi
jne 0x40493d
call dword [sym.imp.COMCTL32.dll_InitCommonControls]
lea ecx, [ebp - 0x64]
call fcn.00447978
mov dword [ebp - 0x64], 0x495ba0
lea eax, [ebp - 0x64]
push eax
mov ecx, esi
mov byte [ebp - 4], 0x15
call fcn.00446eea
mov ecx, esi
call fcn.00447315
push edi
call fcn.0044bec3
pop ecx
push 5
push 5
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x14], esp
push str.NwAWMiotPC0qLDhWPDgWLjQRMzAyLSgtPRAWVjw7MEA0KzQeKjoSFi09IAk8LSg2Mj1JDjYASRYoKBJNNjsjNTcOOCspOgpNKzwoRA
call fcn.004023cb
lea eax, [ebp - 0x20]
push eax
call fcn.00403d46
add esp, 0x28
push dword [eax]
mov ecx, esi
mov byte [ebp - 4], 0x16
call fcn.0044b3e5
mov ecx, dword [ebp - 0x20]
add ecx, 0xfffffff0
call fcn.00401240
lea ecx, [ebp - 0x64]
mov byte [ebp - 4], 0x12
call fcn.004479bc
mov ecx, esi
mov byte [esi + 0xa4], 1
call fcn.00403eed
mov ecx, dword [ebp - 0x1c]
add ecx, 0xfffffff0
call fcn.00401240
mov ecx, dword [ebp - 0x2c]
add ecx, 0xfffffff0
call fcn.00401240
xor eax, eax
inc eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp + 0x128]
xor ecx, ebp
call fcn.0046acd7
add ebp, 0x12c
leave
ret