Function at 0x1000f8c0
Capabilities:
Terminate process

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x10015523
mov eax, dword fs:[0]
push eax
sub esp, 0x134
mov eax, dword [0x1001c018]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
xor ebx, ebx
cmp dword [0x1012cd78], ebx
jne 0x1000f914
push 0x7a120
mov dword [0x1012cd7c], 0x7a120
call fcn.10014310
add esp, 4
mov dword [0x1012cd78], eax
push 0x24
mov dword [ebp - 0x128], ebx
call dword [sym.imp.MSVCR100.dll_void____cdecl_operator_new_unsigned_int_]
add esp, 4
cmp eax, ebx
je 0x10010412
mov dword [ebp - 0x12c], eax
mov dword [eax], eax
mov eax, dword [ebp - 0x12c]
mov dword [eax + 4], eax
mov eax, dword [ebp - 0x12c]
mov dword [eax + 8], eax
mov eax, dword [ebp - 0x12c]
mov byte [eax + 0x20], 1
mov ecx, dword [ebp - 0x12c]
mov byte [ecx + 0x21], 1
mov dword [ebp - 4], ebx
mov edx, dword [0x1012cd7c]
mov eax, dword [0x1012cd78]
push 0x1012cd74
push edx
push eax
push 0x40
call dword [0x1012cd38]
mov esi, dword [sym.imp.MSVCR100.dll_void___cdecl_operator_delete___void__]
mov dword [0x1012cd70], eax
cmp eax, 0xc0000004
jne 0x1000f9de
lea ebx, [ebx]
mov eax, dword [0x1012cd78]
cmp eax, ebx
je 0x1000f9a5
push eax
call esi
add esp, 4
mov dword [0x1012cd78], ebx
mov eax, dword [0x1012cd74]
push eax
mov dword [0x1012cd7c], eax
call fcn.10014310
mov ecx, dword [0x1012cd7c]
add esp, 4
push 0x1012cd74
push ecx
push eax
push 0x40
mov dword [0x1012cd78], eax
call dword [0x1012cd38]
mov dword [0x1012cd70], eax
cmp eax, 0xc0000004
je 0x1000f990
cmp eax, ebx
mov eax, dword [0x1012cd78]
je 0x1000fa4d
cmp eax, ebx
je 0x1000f9fd
push eax
call esi
add esp, 4
mov dword [0x1012cd78], ebx
mov dword [0x1012cd7c], ebx
mov dword [ebp - 4], 1
mov eax, dword [ebp - 0x12c]
mov ecx, dword [eax]
push eax
push ecx
lea edi, [ebp - 0x11c]
lea esi, [ebp - 0x130]
call fcn.1000de60
mov edx, dword [ebp - 0x12c]
push edx
call dword [sym.imp.MSVCR100.dll_void___cdecl_operator_delete_void__]
add esp, 4
xor al, al
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.100143c4
mov esp, ebp
pop ebp
ret
mov dword [ebp - 0x134], eax
cmp eax, ebx
je 0x10010358
lea edi, [eax + 8]
cmp edi, ebx
je 0x10010358
mov dword [ebp - 0x120], ebx
cmp dword [eax], ebx
jbe 0x10010358
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
cmp dword [edi + 4], eax
je 0x1001033a
movzx eax, word [edi + 0x12]
cmp eax, dword [0x1012cd84]
jne 0x1001033a
mov ecx, dword [edi]
cmp ecx, dword [0x1012cd88]
jne 0x1001033a
test byte [edi + 0xc], 0x20
je 0x1001033a
lea edx, [edi + 4]
mov eax, 0x1012cd44
call fcn.10010450
mov edx, dword [eax]
mov eax, dword [edx + 0x3c]
push eax
call fcn.10010940
add esp, 4
push eax
lea ecx, [ebp - 0x118]
push 0x100184f0
push ecx
call dword [sym.imp.MSVCR100.dll_sprintf]
add esp, 0xc
mov ecx, str.System
lea eax, [ebp - 0x118]
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x1000fb07
cmp dl, bl
je 0x1000fb03
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x1000fb07
add eax, 2
add ecx, 2
cmp dl, bl
jne 0x1000fae7
xor eax, eax
jmp 0x1000fb0c
sbb eax, eax
sbb eax, 0xffffffff
cmp eax, ebx
je 0x1001033a
mov ecx, str.csrss.exe
lea eax, [ebp - 0x118]
nop
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x1000fb40
cmp dl, bl
je 0x1000fb3c
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x1000fb40
add eax, 2
add ecx, 2
cmp dl, bl
jne 0x1000fb20
xor eax, eax
jmp 0x1000fb45
sbb eax, eax
sbb eax, 0xffffffff
cmp eax, ebx
je 0x1001033a
mov ecx, str.ExitLag.exe
lea eax, [ebp - 0x118]
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x1000fb78
cmp dl, bl
je 0x1000fb74
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x1000fb78
add eax, 2
add ecx, 2
cmp dl, bl
jne 0x1000fb58
xor eax, eax
jmp 0x1000fb7d
sbb eax, eax
sbb eax, 0xffffffff
cmp eax, ebx
je 0x1001033a
mov ecx, str.NoPing.exe
lea eax, [ebp - 0x118]
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x1000fbb0
cmp dl, bl
je 0x1000fbac
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x1000fbb0
add eax, 2
add ecx, 2
cmp dl, bl
jne 0x1000fb90
xor eax, eax
jmp 0x1000fbb5
sbb eax, eax
sbb eax, 0xffffffff
cmp eax, ebx
je 0x1001033a
mov ecx, str.NoPingUpdater.exe
lea eax, [ebp - 0x118]
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x1000fbe8
cmp dl, bl
je 0x1000fbe4
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x1000fbe8
add eax, 2
add ecx, 2
cmp dl, bl
jne 0x1000fbc8
xor eax, eax
jmp 0x1000fbed
sbb eax, eax
sbb eax, 0xffffffff
cmp eax, ebx
je 0x1001033a
mov ecx, str.svchost.exe
lea eax, [ebp - 0x118]
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x1000fc20
cmp dl, bl
je 0x1000fc1c
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x1000fc20
add eax, 2
add ecx, 2
cmp dl, bl
jne 0x1000fc00
xor eax, eax
jmp 0x1000fc25
sbb eax, eax
sbb eax, 0xffffffff
cmp eax, ebx
je 0x1001033a
mov ecx, str.devenv.exe
lea eax, [ebp - 0x118]
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x1000fc58
cmp dl, bl
je 0x1000fc54
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x1000fc58
add eax, 2
add ecx, 2
cmp dl, bl
jne 0x1000fc38
xor eax, eax
jmp 0x1000fc5d
sbb eax, eax
sbb eax, 0xffffffff
cmp eax, ebx
je 0x1001033a
mov ecx, str.conhost.exe
lea eax, [ebp - 0x118]
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x1000fc90
cmp dl, bl
je 0x1000fc8c
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x1000fc90
add eax, 2
add ecx, 2
cmp dl, bl
jne 0x1000fc70
xor eax, eax
jmp 0x1000fc95
sbb eax, eax
sbb eax, 0xffffffff
cmp eax, ebx
je 0x1001033a
mov ecx, str.Launcher.exe
lea eax, [ebp - 0x118]
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x1000fcc8
cmp dl, bl
je 0x1000fcc4
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x1000fcc8
add eax, 2
add ecx, 2
cmp dl, bl
jne 0x1000fca8
xor eax, eax
jmp 0x1000fccd
sbb eax, eax
sbb eax, 0xffffffff
cmp eax, ebx
je 0x1001033a
mov ecx, str.game.exe
lea eax, [ebp - 0x118]
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x1000fd00
cmp dl, bl
je 0x1000fcfc
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x1000fd00
add eax, 2
add ecx, 2
cmp dl, bl
jne 0x1000fce0
xor eax, eax
jmp 0x1000fd05
sbb eax, eax
sbb eax, 0xffffffff
cmp eax, ebx
je 0x1001033a
mov ecx, str.teamviewer.exe
lea eax, [ebp - 0x118]
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x1000fd38
cmp dl, bl
je 0x1000fd34
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x1000fd38
add eax, 2
add ecx, 2
cmp dl, bl
jne 0x1000fd18
xor eax, eax
jmp 0x1000fd3d
sbb eax, eax
sbb eax, 0xffffffff
cmp eax, ebx
je 0x1001033a
mov ecx, str.steam.exe
lea eax, [ebp - 0x118]
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x1000fd70
cmp dl, bl
je 0x1000fd6c
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x1000fd70
add eax, 2
add ecx, 2
cmp dl, bl
jne 0x1000fd50
xor eax, eax
jmp 0x1000fd75
sbb eax, eax
sbb eax, 0xffffffff
cmp eax, ebx
je 0x1001033a
mov ecx, str.lightshot.exe
lea eax, [ebp - 0x118]
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x1000fda8
cmp dl, bl
je 0x1000fda4
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x1000fda8
add eax, 2
add ecx, 2
cmp dl, bl
jne 0x1000fd88
xor eax, eax
jmp 0x1000fdad
sbb eax, eax
sbb eax, 0xffffffff
cmp eax, ebx
je 0x1001033a
mov ecx, str.discord.exe
lea eax, [ebp - 0x118]
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x1000fde0
cmp dl, bl
je 0x1000fddc
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x1000fde0
add eax, 2
add ecx, 2
cmp dl, bl
jne 0x1000fdc0
xor eax, eax
jmp 0x1000fde5
sbb eax, eax
sbb eax, 0xffffffff
cmp eax, ebx
je 0x1001033a
mov ecx, str.skype.exe
lea eax, [ebp - 0x118]
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x1000fe18
cmp dl, bl
je 0x1000fe14
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x1000fe18
add eax, 2
add ecx, 2
cmp dl, bl
jne 0x1000fdf8
xor eax, eax
jmp 0x1000fe1d
sbb eax, eax
sbb eax, 0xffffffff
cmp eax, ebx
je 0x1001033a
mov ecx, str.chrome.exe
lea eax, [ebp - 0x118]
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x1000fe50
cmp dl, bl
je 0x1000fe4c
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x1000fe50
add eax, 2
add ecx, 2
cmp dl, bl
jne 0x1000fe30
xor eax, eax
jmp 0x1000fe55
sbb eax, eax
sbb eax, 0xffffffff
cmp eax, ebx
je 0x1001033a
mov ecx, str.slack.exe
lea eax, [ebp - 0x118]
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x1000fe88
cmp dl, bl
je 0x1000fe84
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x1000fe88
add eax, 2
add ecx, 2
cmp dl, bl
jne 0x1000fe68
xor eax, eax
jmp 0x1000fe8d
sbb eax, eax
sbb eax, 0xffffffff
cmp eax, ebx
je 0x1001033a
mov ecx, str.anydesk.exe
lea eax, [ebp - 0x118]
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x1000fec0
cmp dl, bl
je 0x1000febc
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x1000fec0
add eax, 2
add ecx, 2
cmp dl, bl
jne 0x1000fea0
xor eax, eax
jmp 0x1000fec5
sbb eax, eax
sbb eax, 0xffffffff
cmp eax, ebx
je 0x1001033a
mov ecx, str.opengl32.dll
lea eax, [ebp - 0x118]
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x1000fef8
cmp dl, bl
je 0x1000fef4
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x1000fef8
add eax, 2
add ecx, 2
cmp dl, bl
jne 0x1000fed8
xor eax, eax
jmp 0x1000fefd
sbb eax, eax
sbb eax, 0xffffffff
cmp eax, ebx
je 0x1001033a
mov ecx, 0x100185ec
lea eax, [ebp - 0x118]
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x1000ff30
cmp dl, bl
je 0x1000ff2c
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x1000ff30
add eax, 2
add ecx, 2
cmp dl, bl
jne 0x1000ff10
xor eax, eax
jmp 0x1000ff35
sbb eax, eax
sbb eax, 0xffffffff
cmp eax, ebx
je 0x1001033a
mov ecx, str.notepad.exe
lea eax, [ebp - 0x118]
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x1000ff68
cmp dl, bl
je 0x1000ff64
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x1000ff68
add eax, 2
add ecx, 2
cmp dl, bl
jne 0x1000ff48
xor eax, eax
jmp 0x1000ff6d
sbb eax, eax
sbb eax, 0xffffffff
cmp eax, ebx
je 0x1001033a
mov ecx, str.ping.exe
lea eax, [ebp - 0x118]
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x1000ffa0
cmp dl, bl
je 0x1000ff9c
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x1000ffa0
add eax, 2
add ecx, 2
cmp dl, bl
jne 0x1000ff80
xor eax, eax
jmp 0x1000ffa5
sbb eax, eax
sbb eax, 0xffffffff
cmp eax, ebx
je 0x1001033a
mov ecx, str.nvcontainer.exe
lea eax, [ebp - 0x118]
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x1000ffd8
cmp dl, bl
je 0x1000ffd4
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x1000ffd8
add eax, 2
add ecx, 2
cmp dl, bl
jne 0x1000ffb8
xor eax, eax
jmp 0x1000ffdd
sbb eax, eax
sbb eax, 0xffffffff
cmp eax, ebx
je 0x1001033a
mov ecx, str.NVDisplay.Container.exe
lea eax, [ebp - 0x118]
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x10010010
cmp dl, bl
je 0x1001000c
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x10010010
add eax, 2
add ecx, 2
cmp dl, bl
jne 0x1000fff0
xor eax, eax
jmp 0x10010015
sbb eax, eax
sbb eax, 0xffffffff
cmp eax, ebx
je 0x1001033a
mov ecx, str.Taskmgr.exe
lea eax, [ebp - 0x118]
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x10010048
cmp dl, bl
je 0x10010044
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x10010048
add eax, 2
add ecx, 2
cmp dl, bl
jne 0x10010028
xor eax, eax
jmp 0x1001004d
sbb eax, eax
sbb eax, 0xffffffff
cmp eax, ebx
je 0x1001033a
mov ecx, str.GameManagerService.exe
lea eax, [ebp - 0x118]
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x10010080
cmp dl, bl
je 0x1001007c
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x10010080
add eax, 2
add ecx, 2
cmp dl, bl
jne 0x10010060
xor eax, eax
jmp 0x10010085
sbb eax, eax
sbb eax, 0xffffffff
cmp eax, ebx
je 0x1001033a
mov ecx, str.Razer_Central.exe
lea eax, [ebp - 0x118]
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x100100b8
cmp dl, bl
je 0x100100b4
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x100100b8
add eax, 2
add ecx, 2
cmp dl, bl
jne 0x10010098
xor eax, eax
jmp 0x100100bd
sbb eax, eax
sbb eax, 0xffffffff
cmp eax, ebx
je 0x1001033a
mov ecx, str.Razer_Synapse_3.exe
lea eax, [ebp - 0x118]
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x100100f0
cmp dl, bl
je 0x100100ec
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x100100f0
add eax, 2
add ecx, 2
cmp dl, bl
jne 0x100100d0
xor eax, eax
jmp 0x100100f5
sbb eax, eax
sbb eax, 0xffffffff
cmp eax, ebx
je 0x1001033a
mov ecx, str.Razer_Synapse_Service_Process.exe
lea eax, [ebp - 0x118]
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x10010128
cmp dl, bl
je 0x10010124
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x10010128
add eax, 2
add ecx, 2
cmp dl, bl
jne 0x10010108
xor eax, eax
jmp 0x1001012d
sbb eax, eax
sbb eax, 0xffffffff
cmp eax, ebx
je 0x1001033a
mov ecx, str.Razer_Synapse_Service.exe
lea eax, [ebp - 0x118]
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x10010160
cmp dl, bl
je 0x1001015c
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x10010160
add eax, 2
add ecx, 2
cmp dl, bl
jne 0x10010140
xor eax, eax
jmp 0x10010165
sbb eax, eax
sbb eax, 0xffffffff
cmp eax, ebx
je 0x1001033a
mov ecx, str.RazeCentralService.exe
lea eax, [ebp - 0x118]
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x10010198
cmp dl, bl
je 0x10010194
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x10010198
add eax, 2
add ecx, 2
cmp dl, bl
jne 0x10010178
xor eax, eax
jmp 0x1001019d
sbb eax, eax
sbb eax, 0xffffffff
cmp eax, ebx
je 0x1001033a
mov ecx, str.IDMan.exe
lea eax, [ebp - 0x118]
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x100101d0
cmp dl, bl
je 0x100101cc
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x100101d0
add eax, 2
add ecx, 2
cmp dl, bl
jne 0x100101b0
xor eax, eax
jmp 0x100101d5
sbb eax, eax
sbb eax, 0xffffffff
cmp eax, ebx
je 0x1001033a
mov ecx, str.Telegram.exe
lea eax, [ebp - 0x118]
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x10010208
cmp dl, bl
je 0x10010204
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x10010208
add eax, 2
add ecx, 2
cmp dl, bl
jne 0x100101e8
xor eax, eax
jmp 0x1001020d
sbb eax, eax
sbb eax, 0xffffffff
cmp eax, ebx
je 0x1001033a
mov ecx, str.Discord.exe
lea eax, [ebp - 0x118]
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x10010240
cmp dl, bl
je 0x1001023c
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x10010240
add eax, 2
add ecx, 2
cmp dl, bl
jne 0x10010220
xor eax, eax
jmp 0x10010245
sbb eax, eax
sbb eax, 0xffffffff
cmp eax, ebx
je 0x1001033a
mov ecx, str.WinZip.exe
lea eax, [ebp - 0x118]
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x10010278
cmp dl, bl
je 0x10010274
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x10010278
add eax, 2
add ecx, 2
cmp dl, bl
jne 0x10010258
xor eax, eax
jmp 0x1001027d
sbb eax, eax
sbb eax, 0xffffffff
cmp eax, ebx
je 0x1001033a
mov ecx, str.opengl32
lea eax, [ebp - 0x118]
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x100102b0
cmp dl, bl
je 0x100102ac
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x100102b0
add eax, 2
add ecx, 2
cmp dl, bl
jne 0x10010290
xor eax, eax
jmp 0x100102b5
sbb eax, eax
sbb eax, 0xffffffff
cmp eax, ebx
je 0x1001033a
mov ecx, str.WinRAR.exe
lea eax, [ebp - 0x118]
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x100102e8
cmp dl, bl
je 0x100102e4
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x100102e8
add eax, 2
add ecx, 2
cmp dl, bl
jne 0x100102c8
xor eax, eax
jmp 0x100102ed
sbb eax, eax
sbb eax, 0xffffffff
cmp eax, ebx
je 0x1001033a
mov ecx, str.Main.exe
lea eax, [ebp - 0x118]
lea esp, [esp]
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x10010320
cmp dl, bl
je 0x1001031c
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x10010320
add eax, 2
add ecx, 2
cmp dl, bl
jne 0x10010300
xor eax, eax
jmp 0x10010325
sbb eax, eax
sbb eax, 0xffffffff
cmp eax, ebx
je 0x1001033a
lea ebx, [ebp - 0x118]
call fcn.10011f70
test al, al
je 0x10010386
xor ebx, ebx
mov eax, dword [ebp - 0x120]
mov edx, dword [ebp - 0x134]
inc eax
add edi, 0x1c
mov dword [ebp - 0x120], eax
cmp eax, dword [edx]
jb 0x1000fa74
mov dword [ebp - 4], 2
mov eax, dword [ebp - 0x12c]
mov ecx, dword [eax]
push eax
push ecx
lea edi, [ebp - 0x11c]
lea esi, [ebp - 0x130]
call fcn.1000de60
mov ecx, dword [ebp - 0x12c]
push ecx
jmp 0x1000fa26
lea edx, [edi + 4]
mov eax, 0x1012cd44
call fcn.10010450
mov eax, dword [eax]
mov ecx, dword [eax + 0x3c]
push ecx
call fcn.10010940
add esp, 4
push eax
push 0x100184f0
push 0
mov ecx, 0x10121ab8
call fcn.100078b0
mov edx, dword [edi + 4]
add esp, 0xc
push edx
push 0
push 0x1f0fff
call dword [sym.imp.KERNEL32.dll_OpenProcess]
mov eax, dword [edi + 4]
push eax
push 0
push 0xc
call fcn.10004650
add esp, 0xc
push 0x10
push str.OPS_
push str._MUGuard__:_AntiCheat_Protection_System_Warning_._n_nPotential_Cheat_Hack_Detected.
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
push 0x1388
mov ecx, 0x21
call fcn.10007da0
push eax
push 2
mov eax, 0x1012bc40
call fcn.10010e10
add esp, 0xc
push 0
call dword [sym.imp.KERNEL32.dll_ExitProcess]
lea edx, [ebp - 0x11c]
push edx
lea ecx, [ebp - 0x140]
mov dword [ebp - 0x11c], ebx
call dword [sym.imp.MSVCR100.dll_public:_void___thiscall_std::exception::constructor_char_const__const_const__]
push 0x10019690
lea eax, [ebp - 0x140]
push eax
mov dword [ebp - method.std::bad_alloc.virtual_0], vtable.std::bad_alloc.0
call sub.MSVCR100.dll__CxxThrowException
int3