Function at 0x14001b450
Capabilities:
Terminate process

Disassembly:
sub rsp, 0x168
mov rax, qword [0x140066018]
xor rax, rsp
mov qword [rsp + 0x158], rax
mov r8d, 0xf003f
xor edx, edx
xor ecx, ecx
call qword [sym.imp.ADVAPI32.dll_OpenSCManagerA]
mov qword [rsp + 0x38], rax
cmp qword [rsp + 0x38], 0
jne 0x14001b4fd
movzx r8d, byte [rsp + 0x24]
lea rdx, [0x140050c14]
lea rcx, [rsp + 0x48]
call fcn.1400162d0
mov rcx, rax
call fcn.1400204d0
mov qword [rsp + 0x40], rax
movzx r8d, byte [rsp + 0x25]
lea rdx, str.start_as_admin
lea rcx, [rsp + 0xc0]
call fcn.140014720
mov rcx, rax
call fcn.140021b50
xor r9d, r9d
mov rcx, qword [rsp + 0x40]
mov r8, rcx
mov rdx, rax
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov edx, 1
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_TerminateProcess]
xor eax, eax
jmp 0x14001b814
movzx r8d, byte [rsp + 0x26]
lea rdx, str.EasyAntiCheatSys
lea rcx, [rsp + 0xf0]
call fcn.140013fe0
mov rcx, rax
call fcn.140020890
mov rdx, rax
mov rcx, qword [rsp + 0x38]
call fcn.140023700
test eax, eax
jne 0x14001b5c7
movzx r8d, byte [rsp + 0x27]
lea rdx, str.BEDaisy
lea rcx, [rsp + 0x50]
call fcn.140015f30
mov rcx, rax
call fcn.140020610
mov rdx, rax
mov rcx, qword [rsp + 0x38]
call fcn.140023700
test eax, eax
jne 0x14001b5c7
movzx r8d, byte [rsp + 0x28]
lea rdx, str.EasyAntiCheat
lea rcx, [rsp + 0xb0]
call fcn.140014de0
mov rcx, rax
call fcn.140021ab0
mov rdx, rax
mov rcx, qword [rsp + 0x38]
call fcn.140023700
test eax, eax
jne 0x14001b5c7
movzx r8d, byte [rsp + 0x29]
lea rdx, str.BEService
lea rcx, [rsp + 0x70]
call fcn.140015ad0
mov rcx, rax
call fcn.140020750
mov rdx, rax
mov rcx, qword [rsp + 0x38]
call fcn.140023700
test eax, eax
je 0x14001b5dc
mov rcx, qword [rsp + 0x38]
call qword [sym.imp.ADVAPI32.dll_CloseServiceHandle]
mov eax, 1
jmp 0x14001b814
mov rcx, qword [rsp + 0x38]
call qword [sym.imp.ADVAPI32.dll_CloseServiceHandle]
movzx r8d, byte [rsp + 0x2a]
lea rdx, str.EasyAntiCheat.exe
lea rcx, [rsp + 0x108]
call fcn.140013020
mov rcx, rax
call fcn.140020930
mov rcx, rax
call fcn.140022da0
mov dword [rsp + 0x20], eax
cmp dword [rsp + 0x20], 0
je 0x14001b626
mov eax, 1
jmp 0x14001b814
movzx r8d, byte [rsp + 0x2b]
lea rdx, str.EscapeFromTarkov.exe
lea rcx, [rsp + 0x120]
call fcn.140011bf0
mov rcx, rax
call fcn.140020a70
mov rcx, rax
call fcn.140022da0
mov dword [rsp + 0x20], eax
cmp dword [rsp + 0x20], 0
je 0x14001b665
mov eax, 1
jmp 0x14001b814
movzx r8d, byte [rsp + 0x2c]
lea rdx, str.EscapeFromTarkov_BE.exe
lea rcx, [rsp + 0x138]
call fcn.140010770
mov rcx, rax
call fcn.140020bb0
mov rcx, rax
call fcn.140022da0
mov dword [rsp + 0x20], eax
cmp dword [rsp + 0x20], 0
je 0x14001b6a4
mov eax, 1
jmp 0x14001b814
movzx r8d, byte [rsp + 0x2d]
lea rdx, str.Rust.exe
lea rcx, [rsp + 0x60]
call fcn.140015dd0
mov rcx, rax
call fcn.1400206b0
mov rcx, rax
call fcn.140022da0
mov dword [rsp + 0x20], eax
cmp dword [rsp + 0x20], 0
je 0x14001b6e0
mov eax, 1
jmp 0x14001b814
movzx r8d, byte [rsp + 0x2e]
lea rdx, str.TslGame_BE.exe
lea rcx, [rsp + 0xd0]
call fcn.1400144e0
mov rcx, rax
call fcn.140021b50
mov rcx, rax
call fcn.140022da0
mov dword [rsp + 0x20], eax
cmp dword [rsp + 0x20], 0
je 0x14001b71f
mov eax, 1
jmp 0x14001b814
movzx r8d, byte [rsp + 0x2f]
lea rdx, str.RustClient.exe
lea rcx, [rsp + 0xe0]
call fcn.140014ba0
mov rcx, rax
call fcn.140021b50
mov rcx, rax
call fcn.140022da0
mov dword [rsp + 0x20], eax
cmp dword [rsp + 0x20], 0
je 0x14001b75e
mov eax, 1
jmp 0x14001b814
movzx r8d, byte [rsp + 0x30]
lea rdx, str.r5apex.exe
lea rcx, [rsp + 0x80]
call fcn.140015920
mov rcx, rax
call fcn.1400207f0
mov rcx, rax
call fcn.140022da0
mov dword [rsp + 0x20], eax
cmp dword [rsp + 0x20], 0
je 0x14001b79a
mov eax, 1
jmp 0x14001b814
movzx r8d, byte [rsp + 0x31]
lea rdx, str.TslGame.exe
lea rcx, [rsp + 0x90]
call fcn.1400153f0
mov rcx, rax
call fcn.140021970
mov rcx, rax
call fcn.140022da0
mov dword [rsp + 0x20], eax
cmp dword [rsp + 0x20], 0
je 0x14001b7d6
mov eax, 1
jmp 0x14001b814
movzx r8d, byte [rsp + 0x32]
lea rdx, str.ExecPubg.exe
lea rcx, [rsp + 0xa0]
call fcn.140015200
mov rcx, rax
call fcn.140021a10
mov rcx, rax
call fcn.140022da0
mov dword [rsp + 0x20], eax
cmp dword [rsp + 0x20], 0
je 0x14001b812
mov eax, 1
jmp 0x14001b814
xor eax, eax
mov rcx, qword [rsp + 0x158]
xor rcx, rsp
call fcn.140025cc0
add rsp, 0x168
ret