Function at 0x10001580
Capabilities:
Check for debugger via api
Shutdown system
Terminate process

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x14
push ebx
push esi
push edi
and dword [ebp - 0x10], 0
and dword [ebp - 8], 0
nop
nop
nop
pushal
jmp 0x100015cb
popal
push 0
push str.jm1tgIVrZkk
call fcn.10002fab
pop ecx
push eax
call dword [sym.imp.USER32.dll_FindWindowA]
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0xc], 0
je 0x1000164d
lea eax, [ebp - 4]
push eax
push dword [ebp - 0xc]
call dword [sym.imp.USER32.dll_GetWindowThreadProcessId]
push dword [ebp - 4]
push 1
push 1
call dword [sym.imp.KERNEL32.dll_OpenProcess]
mov dword [ebp - 0x14], eax
push 0
push 0
push 0x10
push dword [ebp - 0xc]
call dword [sym.imp.USER32.dll_SendMessageA]
push 0x8000000
push 0xfffffffffffffff0
push dword [ebp - 0xc]
call dword [sym.imp.USER32.dll_SetWindowLongA]
push 0xc8
push dword [ebp - 0x14]
call dword [sym.imp.KERNEL32.dll_TerminateProcess]
push dword [ebp - 0x14]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [ebp - 0x10], 1
jmp 0x100018b2
push 0
push str.qriqu6q4SQ
call fcn.10002fab
pop ecx
push eax
push 0
push 0
call dword [sym.imp.USER32.dll_FindWindowExA]
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0xc], 0
je 0x100016d2
lea eax, [ebp - 4]
push eax
push dword [ebp - 0xc]
call dword [sym.imp.USER32.dll_GetWindowThreadProcessId]
push dword [ebp - 4]
push 1
push 1
call dword [sym.imp.KERNEL32.dll_OpenProcess]
mov dword [ebp - 0x14], eax
push 0
push 0
push 0x10
push dword [ebp - 0xc]
call dword [sym.imp.USER32.dll_SendMessageA]
push 0x8000000
push 0xfffffffffffffff0
push dword [ebp - 0xc]
call dword [sym.imp.USER32.dll_SetWindowLongA]
push 0xc8
push dword [ebp - 0x14]
call dword [sym.imp.KERNEL32.dll_TerminateProcess]
push dword [ebp - 0x14]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [ebp - 0x10], 1
jmp 0x100018b2
push str.Z2RvZoB0ZDlJ
call fcn.10002fab
pop ecx
push eax
xor ebx, ebx
call fcn.100018cd
pop ecx
test eax, eax
je 0x100016fb
mov dword [ebp - 0x10], 1
jmp 0x100018b2
push str.m25qcmSANJRJ
call fcn.10002fab
pop ecx
push eax
xor ebx, ebx
call fcn.100018cd
pop ecx
test eax, eax
je 0x1000172e
push 0
push 6
call dword [sym.imp.USER32.dll_ExitWindowsEx]
mov dword [ebp - 0x10], 1
jmp 0x100018b2
push 0
push str.lnBvhWtmh3tobGSKbWh6ekk
call fcn.10002fab
pop ecx
push eax
push 0
push 0
call dword [sym.imp.USER32.dll_FindWindowExA]
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0xc], 0
je 0x10001796
lea eax, [ebp - 4]
push eax
push dword [ebp - 0xc]
call dword [sym.imp.USER32.dll_GetWindowThreadProcessId]
push dword [ebp - 4]
push 1
push 1
call dword [sym.imp.KERNEL32.dll_OpenProcess]
mov dword [ebp - 0x14], eax
push 0x8000000
push 0xfffffffffffffff0
push dword [ebp - 0xc]
call dword [sym.imp.USER32.dll_SetWindowLongA]
push dword [ebp - 0x14]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [ebp - 0x10], 1
jmp 0x100018b2
push str.kIWIQymYdHBqcil6dWh7dUk
call fcn.10002fab
pop ecx
push eax
push 0
push 0
push 0
call dword [sym.imp.USER32.dll_FindWindowExA]
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0xc], 0
je 0x1000181b
lea eax, [ebp - 4]
push eax
push dword [ebp - 0xc]
call dword [sym.imp.USER32.dll_GetWindowThreadProcessId]
push dword [ebp - 4]
push 1
push 1
call dword [sym.imp.KERNEL32.dll_OpenProcess]
mov dword [ebp - 0x14], eax
push 0
push 0
push 0x10
push dword [ebp - 0xc]
call dword [sym.imp.USER32.dll_SendMessageA]
push 0x8000000
push 0xfffffffffffffff0
push dword [ebp - 0xc]
call dword [sym.imp.USER32.dll_SetWindowLongA]
push 0xc8
push dword [ebp - 0x14]
call dword [sym.imp.KERNEL32.dll_TerminateProcess]
push dword [ebp - 0x14]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [ebp - 0x10], 1
jmp 0x100018b2
lea eax, [ebp - 8]
push eax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push eax
call dword [sym.imp.KERNEL32.dll_CheckRemoteDebuggerPresent]
test eax, eax
je 0x1000184b
cmp dword [ebp - 8], 0
je 0x1000184b
mov dword [ebp - 0x10], 1
push 0
push 6
call dword [sym.imp.USER32.dll_ExitWindowsEx]
jmp 0x100018b2
call fcn.100018ba
test eax, eax
je 0x10001869
mov dword [ebp - 0x10], 1
push 0
push 6
call dword [sym.imp.USER32.dll_ExitWindowsEx]
jmp 0x100018b2
push str.moGQby9lbW1J
call fcn.10002fab
pop ecx
push eax
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
test eax, eax
je 0x1000188a
mov dword [ebp - 0x10], 1
jmp 0x100018b2
push 0
push str.mZuOioyOj56WkIFjpaeio2ImppJ
call fcn.10002fab
pop ecx
push eax
push 0
push 0
call dword [sym.imp.USER32.dll_FindWindowExA]
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0xc], 0
je 0x100018b2
mov dword [ebp - 0x10], 1
mov eax, dword [ebp - 0x10]
pop edi
pop esi
pop ebx
leave
ret