Function at 0x1000d730
Capabilities:
Terminate process

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x10057c07
mov eax, dword fs:[0]
push eax
sub esp, 0x11c
mov eax, dword [0x1006a3c0]
xor eax, ebp
mov dword [ebp - 0x10], eax
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x110], ecx
mov eax, dword [0x1006c3bc]
mov ecx, dword fs:[0x2c]
mov edx, dword [ecx + eax*4]
mov eax, dword [0x1006bc40]
cmp eax, dword [edx + 4]
jle 0x1000d7d1
push 0x1006bc40
call fcn.10032980
add esp, 4
cmp dword [0x1006bc40], 0xffffffff
jne 0x1000d7d1
mov dword [ebp - 4], 0
push 0xc
mov ecx, 0x1006bc34
call fcn.1000a660
mov ecx, 0x1006bc34
call fcn.1000ea00
push 0x100592c0
call fcn.10032608
add esp, 4
mov dword [ebp - 4], 0xffffffff
push 0x1006bc40
call fcn.1003292f
add esp, 4
mov ecx, dword [0x1006c3bc]
mov edx, dword fs:[0x2c]
mov eax, dword [edx + ecx*4]
mov ecx, dword [0x1006bc8c]
cmp ecx, dword [eax + 4]
jle 0x1000d843
push 0x1006bc8c
call fcn.10032980
add esp, 4
cmp dword [0x1006bc8c], 0xffffffff
jne 0x1000d843
mov dword [ebp - 4], 1
push 0x44
mov ecx, 0x1006bc48
call fcn.1000a660
mov ecx, 0x1006bc48
call fcn.10013300
push 0x100592e0
call fcn.10032608
add esp, 4
mov dword [ebp - 4], 0xffffffff
push 0x1006bc8c
call fcn.1003292f
add esp, 4
mov edx, dword [0x1006c3bc]
mov eax, dword fs:[0x2c]
mov ecx, dword [eax + edx*4]
mov edx, dword [0x1006bcd0]
cmp edx, dword [ecx + 4]
jle 0x1000d8b4
push 0x1006bcd0
call fcn.10032980
add esp, 4
cmp dword [0x1006bcd0], 0xffffffff
jne 0x1000d8b4
mov dword [ebp - 4], 2
push 0x40
mov ecx, 0x1006bc90
call fcn.1000a660
mov ecx, 0x1006bc90
call fcn.10018f80
push 0x10059300
call fcn.10032608
add esp, 4
mov dword [ebp - 4], 0xffffffff
push 0x1006bcd0
call fcn.1003292f
add esp, 4
mov eax, dword [0x1006c3bc]
mov ecx, dword fs:[0x2c]
mov edx, dword [ecx + eax*4]
mov eax, dword [0x1006bd30]
cmp eax, dword [edx + 4]
jle 0x1000d924
push 0x1006bd30
call fcn.10032980
add esp, 4
cmp dword [0x1006bd30], 0xffffffff
jne 0x1000d924
mov dword [ebp - 4], 3
push 0x58
mov ecx, 0x1006bcd8
call fcn.1000a660
mov ecx, 0x1006bcd8
call fcn.10016830
push 0x100592f0
call fcn.10032608
add esp, 4
mov dword [ebp - 4], 0xffffffff
push 0x1006bd30
call fcn.1003292f
add esp, 4
mov ecx, dword [0x1006c3bc]
mov edx, dword fs:[0x2c]
mov eax, dword [edx + ecx*4]
mov ecx, dword [0x1006bdec]
cmp ecx, dword [eax + 4]
jle 0x1000d999
push 0x1006bdec
call fcn.10032980
add esp, 4
cmp dword [0x1006bdec], 0xffffffff
jne 0x1000d999
mov dword [ebp - 4], 4
push 0xb4
mov ecx, 0x1006bd38
call fcn.1000a660
mov ecx, 0x1006bd38
call fcn.10028270
push 0x100592d0
call fcn.10032608
add esp, 4
mov dword [ebp - 4], 0xffffffff
push 0x1006bdec
call fcn.1003292f
add esp, 4
mov edx, dword [0x1006bc18]
push edx
mov ecx, 0x1006bd38
call fcn.10029480
push str.launcher.exe
lea ecx, [ebp - 0x128]
call fcn.10004f10
mov dword [ebp - 4], 5
lea eax, [ebp - 0x128]
push eax
call fcn.1000cda0
add esp, 4
movzx ecx, al
test ecx, ecx
jne 0x1000d9e3
mov dword [ebp - 0x100], 1
jmp 0x1000d9ed
mov dword [ebp - 0x100], 0
mov dl, byte [ebp - 0x100]
mov byte [ebp - 0xf9], dl
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x128]
call fcn.10004ec0
movzx eax, byte [ebp - 0xf9]
test eax, eax
je 0x1000da1e
push 0
call dword [sym.imp.KERNEL32.dll_ExitProcess]
push str.chrmrgl
call dword [sym.imp.python27.dll_PyImport_ImportModule]
add esp, 4
mov dword [ebp - 0x104], eax
push str.uiGold
call dword [sym.imp.python27.dll_PyImport_ImportModule]
add esp, 4
mov dword [ebp - 0x108], eax
cmp dword [ebp - 0x104], 0
jne 0x1000da57
push 0
call dword [sym.imp.KERNEL32.dll_ExitProcess]
cmp dword [ebp - 0x108], 0
jne 0x1000da68
push 0
call dword [sym.imp.KERNEL32.dll_ExitProcess]
push str.C:Windowsperfets.txt
lea ecx, [ebp - 0x40]
call fcn.10004f10
mov dword [ebp - 4], 6
push 0xb8
lea ecx, [ebp - 0xf8]
call fcn.1000a660
push 1
push 0x40
push 1
lea ecx, [ebp - 0x40]
push ecx
lea ecx, [ebp - 0xf8]
call fcn.1000c7c0
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x28]
call fcn.10008040
mov byte [ebp - 4], 8
lea edx, [ebp - 0x28]
push edx
lea eax, [ebp - 0xf8]
push eax
call fcn.1000c5e0
add esp, 8
lea ecx, [ebp - 0xf8]
call fcn.1000d4f0
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [ebp - 0x10c], eax
push 0xa
push 0
lea ecx, [ebp - 0x28]
push ecx
call fcn.1000e260
add esp, 0xc
cmp eax, dword [ebp - 0x10c]
je 0x1000dafb
push 0
call dword [sym.imp.KERNEL32.dll_ExitProcess]
mov ecx, 0x1006bd38
call fcn.10029770
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x28]
call fcn.10004ec0
mov byte [ebp - 4], 6
lea ecx, [ebp - 0xf8]
call fcn.1000cbf0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x40]
call fcn.10004ec0
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.1003226b
mov esp, ebp
pop ebp
ret