Function at 0x140002530
Capabilities:
Terminate process

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rdi
push rbp
mov rbp, rsp
sub rsp, 0x50
xor edi, edi
mov qword [rbp - 0x30], rdi
mov qword [rbp - 0x20], rdi
mov qword [rbp - 0x18], reloc.WS2_32.dll_ntohs
lea r8d, [rdi + 0xb]
lea rdx, str.ollydbg.exe
lea rcx, [rbp - 0x30]
call fcn.140008bd0
lea rcx, [rbp - 0x30]
call fcn.1400023c0
test rax, rax
setne bl
mov rdx, qword [rbp - 0x18]
cmp rdx, 0x10
jb 0x1400025b2
inc rdx
mov rcx, qword [rbp - 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400025ad
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400032c5
call fcn.140087144
test bl, bl
jne 0x140003b2d
mov qword [rbp - 0x30], rdi
mov qword [rbp - 0x20], rdi
mov qword [rbp - 0x18], reloc.WS2_32.dll_ntohs
mov r8d, reloc.WS2_32.dll_recvfrom
lea rdx, str.ProcessHacker.exe
lea rcx, [rbp - 0x30]
call fcn.140008bd0
lea rcx, [rbp - 0x30]
call fcn.1400023c0
test rax, rax
setne bl
mov rdx, qword [rbp - 0x18]
cmp rdx, 0x10
jb 0x14000262a
inc rdx
mov rcx, qword [rbp - 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140002625
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400032c5
call fcn.140087144
test bl, bl
jne 0x140003b2d
mov qword [rbp - 0x30], rdi
mov qword [rbp - 0x20], rdi
mov qword [rbp - 0x18], reloc.WS2_32.dll_ntohs
mov r8d, reloc.WS2_32.dll_ntohl
lea rdx, str.Dump_Fixer.exe
lea rcx, [rbp - 0x30]
call fcn.140008bd0
lea rcx, [rbp - 0x30]
call fcn.1400023c0
test rax, rax
setne bl
mov rdx, qword [rbp - 0x18]
cmp rdx, 0x10
jb 0x1400026a2
inc rdx
mov rcx, qword [rbp - 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000269d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400032c5
call fcn.140087144
test bl, bl
jne 0x140003b2d
mov qword [rbp - 0x30], rdi
mov qword [rbp - 0x20], rdi
mov qword [rbp - 0x18], reloc.WS2_32.dll_ntohs
mov r8d, reloc.WS2_32.dll_listen
lea rdx, str.kdstinker.exe
lea rcx, [rbp - 0x30]
call fcn.140008bd0
lea rcx, [rbp - 0x30]
call fcn.1400023c0
test rax, rax
setne bl
mov rdx, qword [rbp - 0x18]
cmp rdx, 0x10
jb 0x14000271a
inc rdx
mov rcx, qword [rbp - 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140002715
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400032c5
call fcn.140087144
test bl, bl
jne 0x140003b2d
mov qword [rbp - 0x30], rdi
mov qword [rbp - 0x20], rdi
mov qword [rbp - 0x18], reloc.WS2_32.dll_ntohs
mov r8d, ntohs
lea rdx, str.tcpview.exe
lea rcx, [rbp - 0x30]
call fcn.140008bd0
lea rcx, [rbp - 0x30]
call fcn.1400023c0
test rax, rax
setne bl
mov rdx, qword [rbp - 0x18]
cmp rdx, 0x10
jb 0x140002792
inc rdx
mov rcx, qword [rbp - 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000278d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400032c5
call fcn.140087144
test bl, bl
jne 0x140003b2d
mov qword [rbp - 0x30], rdi
mov qword [rbp - 0x20], rdi
mov qword [rbp - 0x18], reloc.WS2_32.dll_ntohs
mov r8d, ntohs
lea rdx, str.autoruns.exe
lea rcx, [rbp - 0x30]
call fcn.140008bd0
lea rcx, [rbp - 0x30]
call fcn.1400023c0
test rax, rax
setne bl
mov rdx, qword [rbp - 0x18]
cmp rdx, 0x10
jb 0x14000280a
inc rdx
mov rcx, qword [rbp - 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140002805
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400032c5
call fcn.140087144
test bl, bl
jne 0x140003b2d
mov qword [rbp - 0x30], rdi
mov qword [rbp - 0x20], rdi
mov qword [rbp - 0x18], reloc.WS2_32.dll_ntohs
mov r8d, reloc.WS2_32.dll_listen
lea rdx, str.autorunsc.exe
lea rcx, [rbp - 0x30]
call fcn.140008bd0
lea rcx, [rbp - 0x30]
call fcn.1400023c0
test rax, rax
setne bl
mov rdx, qword [rbp - 0x18]
cmp rdx, 0x10
jb 0x140002882
inc rdx
mov rcx, qword [rbp - 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000287d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400032c5
call fcn.140087144
test bl, bl
jne 0x140003b2d
mov qword [rbp - 0x30], rdi
mov qword [rbp - 0x20], rdi
mov qword [rbp - 0x18], reloc.WS2_32.dll_ntohs
mov r8d, ntohs
lea rdx, str.filemon.exe
lea rcx, [rbp - 0x30]
call fcn.140008bd0
lea rcx, [rbp - 0x30]
call fcn.1400023c0
test rax, rax
setne bl
mov rdx, qword [rbp - 0x18]
cmp rdx, 0x10
jb 0x1400028fa
inc rdx
mov rcx, qword [rbp - 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400028f5
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400032c5
call fcn.140087144
test bl, bl
jne 0x140003b2d
mov qword [rbp - 0x30], rdi
mov qword [rbp - 0x20], rdi
mov qword [rbp - 0x18], reloc.WS2_32.dll_ntohs
mov r8d, ntohs
lea rdx, str.procmon.exe
lea rcx, [rbp - 0x30]
call fcn.140008bd0
lea rcx, [rbp - 0x30]
call fcn.1400023c0
test rax, rax
setne bl
mov rdx, qword [rbp - 0x18]
cmp rdx, 0x10
jb 0x140002972
inc rdx
mov rcx, qword [rbp - 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000296d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400032c5
call fcn.140087144
test bl, bl
jne 0x140003b2d
mov qword [rbp - 0x30], rdi
mov qword [rbp - 0x20], rdi
mov qword [rbp - 0x18], reloc.WS2_32.dll_ntohs
mov r8d, 0xa
lea rdx, str.regmon.exe
lea rcx, [rbp - 0x30]
call fcn.140008bd0
lea rcx, [rbp - 0x30]
call fcn.1400023c0
test rax, rax
setne bl
mov rdx, qword [rbp - 0x18]
cmp rdx, 0x10
jb 0x1400029ea
inc rdx
mov rcx, qword [rbp - 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400029e5
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400032c5
call fcn.140087144
test bl, bl
jne 0x140003b2d
mov qword [rbp - 0x30], rdi
mov qword [rbp - 0x20], rdi
mov qword [rbp - 0x18], reloc.WS2_32.dll_ntohs
mov r8d, ntohs
lea rdx, str.procexp.exe
lea rcx, [rbp - 0x30]
call fcn.140008bd0
lea rcx, [rbp - 0x30]
call fcn.1400023c0
test rax, rax
setne bl
mov rdx, qword [rbp - 0x18]
cmp rdx, 0x10
jb 0x140002a62
inc rdx
mov rcx, qword [rbp - 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140002a5d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400032c5
call fcn.140087144
test bl, bl
jne 0x140003b2d
mov qword [rbp - 0x30], rdi
mov qword [rbp - 0x20], rdi
mov qword [rbp - 0x18], reloc.WS2_32.dll_ntohs
mov r8d, reloc.WS2_32.dll_sendto
lea rdx, str.ImmunityDebugger.exe
lea rcx, [rbp - 0x30]
call fcn.140008bd0
lea rcx, [rbp - 0x30]
call fcn.1400023c0
test rax, rax
setne bl
mov rdx, qword [rbp - 0x18]
cmp rdx, 0x10
jb 0x140002ada
inc rdx
mov rcx, qword [rbp - 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140002ad5
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400032c5
call fcn.140087144
test bl, bl
jne 0x140003b2d
mov qword [rbp - 0x30], rdi
mov qword [rbp - 0x20], rdi
mov qword [rbp - 0x18], reloc.WS2_32.dll_ntohs
mov r8d, reloc.WS2_32.dll_listen
lea rdx, str.Wireshark.exe
lea rcx, [rbp - 0x30]
call fcn.140008bd0
lea rcx, [rbp - 0x30]
call fcn.1400023c0
test rax, rax
setne bl
mov rdx, qword [rbp - 0x18]
cmp rdx, 0x10
jb 0x140002b52
inc rdx
mov rcx, qword [rbp - 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140002b4d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400032c5
call fcn.140087144
test bl, bl
jne 0x140003b2d
mov qword [rbp - 0x30], rdi
mov qword [rbp - 0x20], rdi
mov qword [rbp - 0x18], reloc.WS2_32.dll_ntohs
mov r8d, ntohs
lea rdx, str.dumpcap.exe
lea rcx, [rbp - 0x30]
call fcn.140008bd0
lea rcx, [rbp - 0x30]
call fcn.1400023c0
test rax, rax
setne bl
mov rdx, qword [rbp - 0x18]
cmp rdx, 0x10
jb 0x140002bca
inc rdx
mov rcx, qword [rbp - 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140002bc5
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400032c5
call fcn.140087144
test bl, bl
jne 0x140003b2d
mov qword [rbp - 0x30], rdi
mov qword [rbp - 0x20], rdi
mov qword [rbp - 0x18], reloc.WS2_32.dll_ntohs
mov r8d, reloc.WS2_32.dll_recv
lea rdx, str.HookExplorer.exe
lea rcx, [rbp - 0x30]
call fcn.140008bd0
lea rcx, [rbp - 0x30]
call fcn.1400023c0
test rax, rax
setne bl
mov rdx, qword [rbp - 0x18]
cmp rdx, 0x10
jb 0x140002c42
inc rdx
mov rcx, qword [rbp - 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140002c3d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400032c5
call fcn.140087144
test bl, bl
jne 0x140003b2d
mov qword [rbp - 0x30], rdi
mov qword [rbp - 0x20], rdi
mov qword [rbp - 0x18], reloc.WS2_32.dll_ntohs
mov r8d, reloc.WS2_32.dll_listen
lea rdx, str.ImportREC.exe
lea rcx, [rbp - 0x30]
call fcn.140008bd0
lea rcx, [rbp - 0x30]
call fcn.1400023c0
test rax, rax
setne bl
mov rdx, qword [rbp - 0x18]
cmp rdx, 0x10
jb 0x140002cba
inc rdx
mov rcx, qword [rbp - 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140002cb5
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400032c5
call fcn.140087144
test bl, bl
jne 0x140003b2d
mov qword [rbp - 0x30], rdi
mov qword [rbp - 0x20], rdi
mov qword [rbp - 0x18], reloc.WS2_32.dll_ntohs
mov r8d, ntohs
lea rdx, str.PETools.exe
lea rcx, [rbp - 0x30]
call fcn.140008bd0
lea rcx, [rbp - 0x30]
call fcn.1400023c0
test rax, rax
setne bl
mov rdx, qword [rbp - 0x18]
cmp rdx, 0x10
jb 0x140002d32
inc rdx
mov rcx, qword [rbp - 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140002d2d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400032c5
call fcn.140087144
test bl, bl
jne 0x140003b2d
mov qword [rbp - 0x30], rdi
mov qword [rbp - 0x20], rdi
mov qword [rbp - 0x18], reloc.WS2_32.dll_ntohs
mov r8d, 0xa
lea rdx, str.LordPE.exe
lea rcx, [rbp - 0x30]
call fcn.140008bd0
lea rcx, [rbp - 0x30]
call fcn.1400023c0
test rax, rax
setne bl
mov rdx, qword [rbp - 0x18]
cmp rdx, 0x10
jb 0x140002daa
inc rdx
mov rcx, qword [rbp - 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140002da5
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400032c5
call fcn.140087144
test bl, bl
jne 0x140003b2d
mov qword [rbp - 0x30], rdi
mov qword [rbp - 0x20], rdi
mov qword [rbp - 0x18], reloc.WS2_32.dll_ntohs
mov r8d, ntohs
lea rdx, str.dumpcap.exe
lea rcx, [rbp - 0x30]
call fcn.140008bd0
lea rcx, [rbp - 0x30]
call fcn.1400023c0
test rax, rax
setne bl
mov rdx, qword [rbp - 0x18]
cmp rdx, 0x10
jb 0x140002e22
inc rdx
mov rcx, qword [rbp - 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140002e1d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400032c5
call fcn.140087144
test bl, bl
jne 0x140003b2d
mov qword [rbp - 0x30], rdi
mov qword [rbp - 0x20], rdi
mov qword [rbp - 0x18], reloc.WS2_32.dll_ntohs
mov r8d, reloc.WS2_32.dll_recv
lea rdx, str.SysInspector.exe
lea rcx, [rbp - 0x30]
call fcn.140008bd0
lea rcx, [rbp - 0x30]
call fcn.1400023c0
test rax, rax
setne bl
mov rdx, qword [rbp - 0x18]
cmp rdx, 0x10
jb 0x140002e9a
inc rdx
mov rcx, qword [rbp - 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140002e95
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400032c5
call fcn.140087144
test bl, bl
jne 0x140003b2d
mov qword [rbp - 0x30], rdi
mov qword [rbp - 0x20], rdi
mov qword [rbp - 0x18], reloc.WS2_32.dll_ntohs
mov r8d, reloc.WS2_32.dll_recvfrom
lea rdx, str.proc_analyzer.exe
lea rcx, [rbp - 0x30]
call fcn.140008bd0
lea rcx, [rbp - 0x30]
call fcn.1400023c0
test rax, rax
setne bl
mov rdx, qword [rbp - 0x18]
cmp rdx, 0x10
jb 0x140002f12
inc rdx
mov rcx, qword [rbp - 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140002f0d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400032c5
call fcn.140087144
test bl, bl
jne 0x140003b2d
mov qword [rbp - 0x30], rdi
mov qword [rbp - 0x20], rdi
mov qword [rbp - 0x18], reloc.WS2_32.dll_ntohs
mov r8d, reloc.WS2_32.dll_ntohs
lea rdx, str.sysAnalyzer.exe
lea rcx, [rbp - 0x30]
call fcn.140008bd0
lea rcx, [rbp - 0x30]
call fcn.1400023c0
test rax, rax
setne bl
mov rdx, qword [rbp - 0x18]
cmp rdx, 0x10
jb 0x140002f8a
inc rdx
mov rcx, qword [rbp - 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140002f85
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400032c5
call fcn.140087144
test bl, bl
jne 0x140003b2d
mov qword [rbp - 0x30], rdi
mov qword [rbp - 0x20], rdi
mov qword [rbp - 0x18], reloc.WS2_32.dll_ntohs
mov r8d, reloc.WS2_32.dll_listen
lea rdx, str.sniff_hit.exe
lea rcx, [rbp - 0x30]
call fcn.140008bd0
lea rcx, [rbp - 0x30]
call fcn.1400023c0
test rax, rax
setne bl
mov rdx, qword [rbp - 0x18]
cmp rdx, 0x10
jb 0x140003002
inc rdx
mov rcx, qword [rbp - 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140002ffd
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400032c5
call fcn.140087144
test bl, bl
jne 0x140003b2d
mov qword [rbp - 0x30], rdi
mov qword [rbp - 0x20], rdi
mov qword [rbp - 0x18], reloc.WS2_32.dll_ntohs
mov r8d, 0xa
lea rdx, str.windbg.exe
lea rcx, [rbp - 0x30]
call fcn.140008bd0
lea rcx, [rbp - 0x30]
call fcn.1400023c0
test rax, rax
setne bl
mov rdx, qword [rbp - 0x18]
cmp rdx, 0x10
jb 0x14000307a
inc rdx
mov rcx, qword [rbp - 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140003075
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400032c5
call fcn.140087144
test bl, bl
jne 0x140003b2d
mov qword [rbp - 0x30], rdi
mov qword [rbp - 0x20], rdi
mov qword [rbp - 0x18], reloc.WS2_32.dll_ntohs
mov r8d, reloc.WS2_32.dll_recvfrom
lea rdx, str.joeboxcontrol.exe
lea rcx, [rbp - 0x30]
call fcn.140008bd0
lea rcx, [rbp - 0x30]
call fcn.1400023c0
test rax, rax
setne bl
mov rdx, qword [rbp - 0x18]
cmp rdx, 0x10
jb 0x1400030f2
inc rdx
mov rcx, qword [rbp - 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400030ed
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400032c5
call fcn.140087144
test bl, bl
jne 0x140003b2d
mov qword [rbp - 0x30], rdi
mov qword [rbp - 0x20], rdi
mov qword [rbp - 0x18], reloc.WS2_32.dll_ntohs
mov r8d, ntohs
lea rdx, str.Fiddler.exe
lea rcx, [rbp - 0x30]
call fcn.140008bd0
lea rcx, [rbp - 0x30]
call fcn.1400023c0
test rax, rax
setne bl
mov rdx, qword [rbp - 0x18]
cmp rdx, 0x10
jb 0x14000316a
inc rdx
mov rcx, qword [rbp - 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140003165
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400032c5
call fcn.140087144
test bl, bl
jne 0x140003b2d
mov qword [rbp - 0x30], rdi
mov qword [rbp - 0x20], rdi
mov qword [rbp - 0x18], reloc.WS2_32.dll_ntohs
mov r8d, reloc.WS2_32.dll_recv
lea rdx, str.joeboxserver.exe
lea rcx, [rbp - 0x30]
call fcn.140008bd0
lea rcx, [rbp - 0x30]
call fcn.1400023c0
test rax, rax
setne bl
mov rdx, qword [rbp - 0x18]
cmp rdx, 0x10
jb 0x1400031e2
inc rdx
mov rcx, qword [rbp - 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400031dd
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400032c5
call fcn.140087144
test bl, bl
jne 0x140003b2d
mov qword [rbp - 0x30], rdi
mov qword [rbp - 0x20], rdi
mov qword [rbp - 0x18], reloc.WS2_32.dll_ntohs
mov r8d, 9
lea rdx, str.ida64.exe
lea rcx, [rbp - 0x30]
call fcn.140008bd0
lea rcx, [rbp - 0x30]
call fcn.1400023c0
test rax, rax
setne bl
mov rdx, qword [rbp - 0x18]
cmp rdx, 0x10
jb 0x140003256
inc rdx
mov rcx, qword [rbp - 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140003251
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400032c5
call fcn.140087144
test bl, bl
jne 0x140003b2d
mov qword [rbp - 0x30], rdi
mov qword [rbp - 0x20], rdi
mov qword [rbp - 0x18], reloc.WS2_32.dll_ntohs
mov r8d, 7
lea rdx, str.ida.exe
lea rcx, [rbp - 0x30]
call fcn.140008bd0
lea rcx, [rbp - 0x30]
call fcn.1400023c0
test rax, rax
setne bl
mov rdx, qword [rbp - 0x18]
cmp rdx, 0x10
jb 0x1400032d1
inc rdx
mov rcx, qword [rbp - 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400032cc
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400032cc
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140087144
test bl, bl
jne 0x140003b2d
mov qword [rbp - 0x30], rdi
movdqa xmm0, xmmword [0x1400a8e60]
movdqu xmmword [rbp - 0x20], xmm0
mov r8d, 0xa
lea rdx, str.idaq64.exe
lea rcx, [rbp - 0x30]
call fcn.140008bd0
lea rcx, [rbp - 0x30]
call fcn.1400023c0
mov rbx, rax
lea rcx, [rbp - 0x30]
call fcn.1400084c0
test rbx, rbx
jne 0x140003b2d
lea rdx, str.Vmtoolsd.exe
lea rcx, [rbp - 0x30]
call fcn.140008520
lea rcx, [rbp - 0x30]
call fcn.1400023c0
mov rbx, rax
lea rcx, [rbp - 0x30]
call fcn.1400084c0
test rbx, rbx
jne 0x140003b2d
lea rdx, str.Vmwaretrat.exe
lea rcx, [rbp - 0x30]
call fcn.140008520
lea rcx, [rbp - 0x30]
call fcn.1400023c0
mov rbx, rax
lea rcx, [rbp - 0x30]
call fcn.1400084c0
test rbx, rbx
jne 0x140003b2d
lea rdx, str.Vmwareuser.exe
lea rcx, [rbp - 0x30]
call fcn.140008520
lea rcx, [rbp - 0x30]
call fcn.1400023c0
mov rbx, rax
lea rcx, [rbp - 0x30]
call fcn.1400084c0
test rbx, rbx
jne 0x140003b2d
lea rdx, str.Vmacthlp.exe
lea rcx, [rbp - 0x30]
call fcn.140008520
lea rcx, [rbp - 0x30]
call fcn.1400023c0
mov rbx, rax
lea rcx, [rbp - 0x30]
call fcn.1400084c0
test rbx, rbx
jne 0x140003b2d
lea rdx, str.vboxservice.exe
lea rcx, [rbp - 0x30]
call fcn.140008520
lea rcx, [rbp - 0x30]
call fcn.1400023c0
mov rbx, rax
lea rcx, [rbp - 0x30]
call fcn.1400084c0
test rbx, rbx
jne 0x140003b2d
lea rdx, str.vboxtray.exe
lea rcx, [rbp - 0x30]
call fcn.140008520
lea rcx, [rbp - 0x30]
call fcn.1400023c0
mov rbx, rax
lea rcx, [rbp - 0x30]
call fcn.1400084c0
test rbx, rbx
jne 0x140003b2d
lea rdx, str.ReClass.NET.exe
lea rcx, [rbp - 0x30]
call fcn.140008520
lea rcx, [rbp - 0x30]
call fcn.1400023c0
mov rbx, rax
lea rcx, [rbp - 0x30]
call fcn.1400084c0
test rbx, rbx
jne 0x140003b2d
lea rdx, str.x64dbg.exe
lea rcx, [rbp - 0x30]
call fcn.140008520
lea rcx, [rbp - 0x30]
call fcn.1400023c0
mov rbx, rax
lea rcx, [rbp - 0x30]
call fcn.1400084c0
test rbx, rbx
jne 0x140003b2d
lea rdx, str.OLLYDBG.exe
lea rcx, [rbp - 0x30]
call fcn.140008520
lea rcx, [rbp - 0x30]
call fcn.1400023c0
mov rbx, rax
lea rcx, [rbp - 0x30]
call fcn.1400084c0
test rbx, rbx
jne 0x140003b2d
lea rdx, str.Cheat_Engine.exe
lea rcx, [rbp - 0x30]
call fcn.140008520
lea rcx, [rbp - 0x30]
call fcn.1400023c0
mov rbx, rax
lea rcx, [rbp - 0x30]
call fcn.1400084c0
test rbx, rbx
jne 0x140003b2d
lea rdx, str.cheatengine_x86_64_SSE4_AVX2.exe
lea rcx, [rbp - 0x30]
call fcn.140008520
lea rcx, [rbp - 0x30]
call fcn.1400023c0
mov rbx, rax
lea rcx, [rbp - 0x30]
call fcn.1400084c0
test rbx, rbx
jne 0x140003b2d
movdqa xmm0, xmmword [str.__1____.a5vy]
movdqu xmmword [rbp - 0x30], xmm0
movdqa xmm1, xmmword [str.gf_a]
movdqu xmmword [rbp - 0x20], xmm1
mov word [rbp - 0x10], 0x100
lea rcx, [rbp - 0x30]
call fcn.140003b50
mov rdx, rax
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowA]
test rax, rax
jne 0x140003b2d
lea rdx, str.MugenJinFuu_i386.exe
lea rcx, [rbp - 0x30]
call fcn.140008520
lea rcx, [rbp - 0x30]
call fcn.1400023c0
mov rbx, rax
lea rcx, [rbp - 0x30]
call fcn.1400084c0
test rbx, rbx
jne 0x140003b2d
movdqa xmm0, xmmword [0x1400a92e0]
movdqu xmmword [rbp - 0x30], xmm0
mov dword [rbp - 0x20], 0x312b377f
mov word [rbp - 0x1c], 0x100
lea rcx, [rbp - 0x30]
call fcn.140003b80
mov rdx, rax
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowA]
test rax, rax
jne 0x140003b2d
lea rdx, str.Mugen_JinFuu.exe
lea rcx, [rbp - 0x30]
call fcn.140008520
lea rcx, [rbp - 0x30]
call fcn.1400023c0
mov rbx, rax
lea rcx, [rbp - 0x30]
call fcn.1400084c0
test rbx, rbx
jne 0x140003b2d
movdqa xmm0, xmmword [0x1400a9110]
movdqu xmmword [rbp - 0x30], xmm0
mov word [rbp - 0x20], 0x100
lea rcx, [rbp - 0x30]
call fcn.140002380
mov rdx, rax
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowA]
test rax, rax
jne 0x140003b2d
lea rdx, str.MugenJinFuu_x86_64_SSE4_AVX2.exe
lea rcx, [rbp - 0x30]
call fcn.140008520
lea rcx, [rbp - 0x30]
call fcn.1400023c0
mov rbx, rax
lea rcx, [rbp - 0x30]
call fcn.1400084c0
test rbx, rbx
jne 0x140003b2d
movdqa xmm0, xmmword [str._f7___f.]
movdqu xmmword [rbp - 0x30], xmm0
movdqa xmm1, xmmword [str.gf_a]
movdqu xmmword [rbp - 0x20], xmm1
mov word [rbp - 0x10], 0x100
lea rcx, [rbp - 0x30]
call fcn.140003b50
mov rdx, rax
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowA]
test rax, rax
jne 0x140003b2d
lea rdx, str.MugenJinFuu_x86_64.exe
lea rcx, [rbp - 0x30]
call fcn.140008520
lea rcx, [rbp - 0x30]
call fcn.1400023c0
mov rbx, rax
lea rcx, [rbp - 0x30]
call fcn.1400084c0
test rbx, rbx
jne 0x140003b2d
movdqa xmm0, xmmword [str._f7___f.]
movdqu xmmword [rbp - 0x30], xmm0
mov dword [rbp - 0x20], 0x317d6667
mov dword [rbp - 0x1c], 0x100332d
lea rcx, [rbp - 0x30]
call fcn.140002350
mov rdx, rax
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowA]
test rax, rax
jne 0x140003b2d
movdqa xmm0, xmmword [0x1400a90e0]
movdqu xmmword [rbp - 0x30], xmm0
mov dword [rbp - 0x20], 0x263c2525
mov dword [rbp - 0x1c], 0x3616763e
mov dword [rbp - 0x18], 0x26223638
mov dword [rbp - 0x14], 0x1002c38
lea rcx, [rbp - 0x30]
call fcn.140003bb0
mov rdx, rax
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowA]
test rax, rax
jne 0x140003b2d
movdqa xmm0, xmmword [0x1400a9130]
movdqu xmmword [rbp - 0x30], xmm0
movdqa xmm1, xmmword [0x1400a8eb0]
movdqu xmmword [rbp - 0x20], xmm1
mov dword [rbp - 0x10], 0x1040514
mov word [rbp - 0xc], reloc.WS2_32.dll_socket
mov byte [rbp - 0xa], 1
lea rcx, [rbp - 0x30]
call fcn.140003be0
mov rdx, rax
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowA]
test rax, rax
jne 0x140003b2d
mov dword [rbp + 0x10], 0x20777439
mov dword [rbp + 0x14], 0x1002127
lea rcx, [rbp + 0x10]
call fcn.1400022c0
mov rdx, rax
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowA]
test rax, rax
jne 0x140003b2d
mov dword [rbp - 0x30], 0x3107310a
mov dword [rbp - 0x2c], 0x3a223628
mov word [rbp - 0x28], 0x100
lea rcx, [rbp - 0x30]
call fcn.140003c10
mov rdx, rax
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowA]
test rax, rax
jne 0x140003b2d
lea rdx, str.KsDumper.exe
lea rcx, [rbp - 0x30]
call fcn.140008520
lea rcx, [rbp - 0x30]
call fcn.1400023c0
mov rbx, rax
lea rcx, [rbp - 0x30]
call fcn.1400084c0
test rbx, rbx
jne 0x140003b2d
mov dword [rbp + 0x10], 0x34102c25
mov word [rbp + 0x14], reloc.WLDAP32.dll_Ordinal_60
mov byte [rbp + 0x16], 1
lea rcx, [rbp + 0x10]
call fcn.140003c40
mov rdx, rax
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowA]
test rax, rax
jne 0x140003b2d
lea rdx, str.dnSpy.exe
lea rcx, [rbp - 0x30]
call fcn.140008520
lea rcx, [rbp - 0x30]
call fcn.1400023c0
mov rbx, rax
lea rcx, [rbp - 0x30]
call fcn.1400084c0
test rbx, rbx
jne 0x140003b2d
lea rdx, str.cheatengine_i386.exe
lea rcx, [rbp - 0x30]
call fcn.140008520
lea rcx, [rbp - 0x30]
call fcn.1400023c0
mov rbx, rax
lea rcx, [rbp - 0x30]
call fcn.1400084c0
test rbx, rbx
jne 0x140003b2d
lea rdx, str.cheatengine_x86_64.exe
lea rcx, [rbp - 0x30]
call fcn.140008520
lea rcx, [rbp - 0x30]
call fcn.1400023c0
mov rbx, rax
lea rcx, [rbp - 0x30]
call fcn.1400084c0
test rbx, rbx
jne 0x140003b2d
lea rdx, str.Fiddler_Everywhere.exe
lea rcx, [rbp - 0x30]
call fcn.140008520
lea rcx, [rbp - 0x30]
call fcn.1400023c0
mov rbx, rax
lea rcx, [rbp - 0x30]
call fcn.1400084c0
test rbx, rbx
jne 0x140003b2d
lea rdx, str.HTTPDebuggerSvc.exe
lea rcx, [rbp - 0x30]
call fcn.140008520
lea rcx, [rbp - 0x30]
call fcn.1400023c0
mov rbx, rax
lea rcx, [rbp - 0x30]
call fcn.1400084c0
test rbx, rbx
jne 0x140003b2d
lea rdx, str.Fiddler.WebUi.exe
lea rcx, [rbp - 0x30]
call fcn.140008520
lea rcx, [rbp - 0x30]
call fcn.1400023c0
mov rbx, rax
lea rcx, [rbp - 0x30]
call fcn.1400084c0
test rbx, rbx
jne 0x140003b2d
mov dword [rbp + 0x10], 0x35222628
mov dword [rbp + 0x14], 0x1007273
lea rcx, [rbp + 0x10]
call fcn.1400022c0
mov rdx, rax
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowA]
test rax, rax
jne 0x140003b2d
movdqa xmm0, xmmword [0x1400a90f0]
movdqu xmmword [rbp - 0x30], xmm0
mov dword [rbp - 0x20], 0x1003723
lea rcx, [rbp - 0x30]
call fcn.140003c70
mov rdx, rax
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowA]
test rax, rax
jne 0x140003b2d
mov dword [rbp - 0x30], 0x21312b16
mov dword [rbp - 0x2c], 0x3a262e36
mov word [rbp - 0x28], Ordinal_35
mov byte [rbp - 0x26], 1
lea rcx, [rbp - 0x30]
call fcn.140002320
mov rdx, rax
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowA]
test rax, rax
jne 0x140003b2d
mov dword [rbp - 0x30], 0x342e3705
mov dword [rbp - 0x2c], 0x372726
mov byte [rbp - 0x28], 1
lea rcx, [rbp - 0x30]
call fcn.140002030
mov rdx, rax
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowA]
test rax, rax
jne 0x140003b2d
mov dword [rbp - 0x30], 0x20272b07
mov dword [rbp - 0x2c], 0x66352329
mov dword [rbp - 0x28], 0x19292f1e
mov word [rbp - Ordinal_41], 0x24
mov byte [rbp - 0x22], 1
lea rcx, [rbp - 0x30]
call fcn.140003ca0
mov rdx, rax
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowA]
test rax, rax
jne 0x140003b2d
movdqa xmm0, xmmword [0x1400a92d0]
movdqu xmmword [rbp - 0x30], xmm0
mov dword [rbp - 0x20], 0x203a3063
mov dword [rbp - 0x1c], 0x1007f26
lea rcx, [rbp - 0x30]
call fcn.140002350
mov rdx, rax
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowA]
test rax, rax
jne 0x140003b2d
mov dword [rbp - 0x30], 0x14171609
mov dword [rbp - 0x2c], 0x2a220265
mov dword [rbp - 0x28], 0x292c2d3c
mov word [rbp - 0x24], 0x3f
mov byte [rbp - 0x22], 1
lea rcx, [rbp - 0x30]
call fcn.140003ca0
mov rdx, rax
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowA]
test rax, rax
jne 0x140003b2d
mov dword [rbp + 0x10], 0x72222628
mov word [rbp + 0x14], WSAStartup
mov byte [rbp + 0x16], 1
lea rcx, [rbp + 0x10]
call fcn.140003c40
mov rdx, rax
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowA]
test rax, rax
jne 0x140003b2d
movdqa xmm0, xmmword [0x1400a8ea0]
movdqu xmmword [rbp - 0x30], xmm0
mov byte [rbp - 0x20], 1
lea rcx, [rbp - 0x30]
call fcn.1400022f0
mov rdx, rax
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowA]
test rax, rax
jne 0x140003b2d
lea rdx, str.createdump.exe
lea rcx, [rbp - 0x30]
call fcn.140008520
lea rcx, [rbp - 0x30]
call fcn.1400023c0
mov rbx, rax
lea rcx, [rbp - 0x30]
call fcn.1400084c0
test rbx, rbx
je 0x140003b36
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov rbx, qword [rsp + 0x68]
mov rdi, qword [rsp + 0x70]
add rsp, 0x50
pop rbp
ret