Function at 0x411460
Capabilities:
Enumerate processes
Terminate process

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x310
push ebx
push esi
push edi
lea edi, [ebp - 0x310]
mov ecx, 0xc4
mov eax, 0xcccccccc
rep stosd dword es:[edi], eax
mov eax, dword [0x418010]
xor eax, ebp
mov dword [ebp - 4], eax
mov dword [ebp - 0x234], 0x22c
push 0
push 2
call fcn.00411028
mov dword [ebp - 0x240], eax
lea eax, [ebp - 0x234]
push eax
mov ecx, dword [ebp - 0x240]
push ecx
call fcn.00411181
mov dword [ebp - 0x24c], eax
cmp dword [ebp - 0x24c], 0
je 0x41168d
mov esi, esp
lea eax, [ebp - 0x210]
push eax
call dword [sym.imp.MSVCR100D.dll_wcslen]
add esp, 4
cmp esi, esp
call fcn.0041116d
add eax, 1
mov esi, esp
push eax
lea ecx, [ebp - 0x210]
push ecx
call dword [sym.imp.MSVCR100D.dll__wcslwr_s]
add esp, 8
cmp esi, esp
call fcn.0041116d
mov esi, esp
push str.ollyice.exe
lea eax, [ebp - 0x210]
push eax
call dword [sym.imp.MSVCR100D.dll_wcscmp]
add esp, 8
cmp esi, esp
call fcn.0041116d
test eax, eax
jne 0x411547
mov esi, esp
push str._______WARNING________n
call dword [sym.imp.MSVCR100D.dll_printf]
add esp, 4
cmp esi, esp
call fcn.0041116d
mov esi, esp
push 0
call dword [sym.imp.MSVCR100D.dll_exit]
cmp esi, esp
call fcn.0041116d
mov esi, esp
push str.ollydbg.exe
lea eax, [ebp - 0x210]
push eax
call dword [sym.imp.MSVCR100D.dll_wcscmp]
add esp, 8
cmp esi, esp
call fcn.0041116d
test eax, eax
jne 0x411591
mov esi, esp
push str.________nWARNING_n________n
call dword [sym.imp.MSVCR100D.dll_printf]
add esp, 4
cmp esi, esp
call fcn.0041116d
mov esi, esp
push 0
call dword [sym.imp.MSVCR100D.dll_exit]
cmp esi, esp
call fcn.0041116d
mov esi, esp
push str.peid.exe
lea eax, [ebp - 0x210]
push eax
call dword [sym.imp.MSVCR100D.dll_wcscmp]
add esp, 8
cmp esi, esp
call fcn.0041116d
test eax, eax
jne 0x4115db
mov esi, esp
push str.________nWARNING_n________n
call dword [sym.imp.MSVCR100D.dll_printf]
add esp, 4
cmp esi, esp
call fcn.0041116d
mov esi, esp
push 0
call dword [sym.imp.MSVCR100D.dll_exit]
cmp esi, esp
call fcn.0041116d
mov esi, esp
push str.ida.exe
lea eax, [ebp - 0x210]
push eax
call dword [sym.imp.MSVCR100D.dll_wcscmp]
add esp, 8
cmp esi, esp
call fcn.0041116d
test eax, eax
jne 0x411625
mov esi, esp
push str.________nWARNING_n________n
call dword [sym.imp.MSVCR100D.dll_printf]
add esp, 4
cmp esi, esp
call fcn.0041116d
mov esi, esp
push 0
call dword [sym.imp.MSVCR100D.dll_exit]
cmp esi, esp
call fcn.0041116d
mov esi, esp
push str.idaq.exe
lea eax, [ebp - 0x210]
push eax
call dword [sym.imp.MSVCR100D.dll_wcscmp]
add esp, 8
cmp esi, esp
call fcn.0041116d
test eax, eax
jne 0x41166f
mov esi, esp
push str.________nWARNING_n________n
call dword [sym.imp.MSVCR100D.dll_printf]
add esp, 4
cmp esi, esp
call fcn.0041116d
mov esi, esp
push 0
call dword [sym.imp.MSVCR100D.dll_exit]
cmp esi, esp
call fcn.0041116d
lea eax, [ebp - 0x234]
push eax
mov ecx, dword [ebp - 0x240]
push ecx
call fcn.00411055
mov dword [ebp - 0x24c], eax
jmp 0x4114ba
mov esi, esp
mov eax, dword [ebp - 0x240]
push eax
call dword [sym.imp.KERNEL32.DLL_CloseHandle]
cmp esi, esp
call fcn.0041116d
push edx
mov ecx, ebp
push eax
lea edx, [0x4116d4]
call fcn.00411096
pop eax
pop edx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00411019
add esp, 0x310
cmp ebp, esp
call fcn.0041116d
mov esp, ebp
pop ebp
ret