Function at 0x5cc410
Capabilities:
Enumerate threads
Terminate process
Terminate thread

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x30
mov eax, dword [0x70f200]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push esi
push edi
mov edi, dword [sym.imp.USER32.dll_FindWindowExW]
mov ebx, ecx
push 0
push 0
push 0
push 0
call edi
mov esi, eax
test esi, esi
je 0x5cc477
nop dword [eax + eax]
lea eax, [ebp - 8]
mov dword [ebp - 8], 0
push eax
push esi
call dword [sym.imp.USER32.dll_GetWindowThreadProcessId]
test eax, eax
je 0x5cc468
cmp dword [ebp - 8], ebx
jne 0x5cc468
push 0
push 0
push 2
push esi
call dword [sym.imp.USER32.dll_PostMessageW]
push 0
push 0
push esi
push 0
call edi
mov esi, eax
test esi, esi
jne 0x5cc440
mov ecx, ebx
call fcn.005cc910
test al, al
jne 0x5cc495
pop edi
pop esi
mov al, 1
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.0041e1b5
mov esp, ebp
pop ebp
ret
push ebx
push 0
or edi, 0xffffffff
push 1
mov dword [ebp - 0x30], edi
call dword [sym.imp.KERNEL32.dll_OpenProcess]
mov dword [ebp - 0x2c], 0
mov esi, eax
mov dword [ebp - 0xc], esi
test esi, esi
je 0x5cc503
cmp esi, 0xffffffff
je 0x5cc509
push 0
push esi
call dword [sym.imp.KERNEL32.dll_TerminateProcess]
push 0
push 0x14
call dword [sym.imp.KERNEL32.dll_SleepEx]
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
or esi, 0xffffffff
mov ecx, ebx
mov dword [ebp - 0xc], esi
call fcn.005cc910
test al, al
je 0x5cc5e5
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp eax, 0x1e
jge 0x5cc509
push ebx
push 0
push 1
call dword [sym.imp.KERNEL32.dll_OpenProcess]
jmp 0x5cc4ad
or esi, 0xffffffff
mov dword [ebp - 0xc], esi
push ebx
push 4
call dword [sym.imp.KERNEL32.dll_CreateToolhelp32Snapshot]
mov dword [ebp - 0x2c], eax
test eax, eax
jne 0x5cc554
mov dword [ebp - 0x30], 0xffffffff
xor bl, bl
mov eax, dword [ebp - 0x30]
cmp eax, 0xffffffff
je 0x5cc535
test eax, eax
je 0x5cc535
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
cmp edi, 0xffffffff
je 0x5cc663
test edi, edi
je 0x5cc663
push edi
mov edi, dword [sym.imp.KERNEL32.dll_CloseHandle]
call edi
jmp 0x5cc669
mov dword [ebp - 0x30], eax
cmp eax, 0xffffffff
je 0x5cc520
lea ecx, [ebp - 0x28]
mov dword [ebp - 0x10], 0
xorps xmm0, xmm0
mov dword [ebp - 0x30], eax
push ecx
push eax
movups xmmword [ebp - 0x28], xmm0
movq qword [ebp - 0x18], xmm0
call dword [sym.imp.KERNEL32.dll_Thread32First]
test eax, eax
je 0x5cc5da
mov esi, dword [ebp - 0x2c]
mov dword [ebp - 0x30], esi
cmp dword [ebp - 0x1c], ebx
jne 0x5cc5c8
push dword [ebp - 0x20]
push 0
push 3
call dword [sym.imp.KERNEL32.dll_OpenThread]
mov dword [ebp - 0x2c], eax
cmp edi, 0xffffffff
je 0x5cc5af
test edi, edi
je 0x5cc5af
push edi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [ebp - 0x2c]
mov edi, eax
test eax, eax
jne 0x5cc5ba
or edi, 0xffffffff
jmp 0x5cc5c8
cmp edi, 0xffffffff
je 0x5cc5c8
push 0
push edi
call dword [sym.imp.KERNEL32.dll_TerminateThread]
lea eax, [ebp - 0x28]
push eax
push esi
call dword [sym.imp.KERNEL32.dll_Thread32Next]
test eax, eax
jne 0x5cc587
mov esi, dword [ebp - 0xc]
mov ecx, ebx
call fcn.005cc910
test al, al
jne 0x5cc5ec
mov bl, 1
jmp 0x5cc522
mov dword [ebp - 0x2c], 0
push ebx
push 0
push 1
call dword [sym.imp.KERNEL32.dll_OpenProcess]
mov dword [ebp - 0xc], eax
cmp esi, 0xffffffff
je 0x5cc614
test esi, esi
je 0x5cc614
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [ebp - 0xc]
mov esi, eax
test eax, eax
je 0x5cc64f
cmp esi, 0xffffffff
je 0x5cc652
push 0
push esi
call dword [sym.imp.KERNEL32.dll_TerminateProcess]
push 0
push 0x14
call dword [sym.imp.KERNEL32.dll_SleepEx]
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp eax, 0x1e
jl 0x5cc5f3
mov ecx, ebx
call fcn.005cc910
test al, al
sete bl
jmp 0x5cc522
or esi, 0xffffffff
mov ecx, ebx
call fcn.005cc910
test al, al
sete bl
jmp 0x5cc522
mov edi, dword [sym.imp.KERNEL32.dll_CloseHandle]
cmp esi, 0xffffffff
je 0x5cc675
test esi, esi
je 0x5cc675
push esi
call edi
mov ecx, dword [ebp - 4]
mov al, bl
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.0041e1b5
mov esp, ebp
pop ebp
ret