Function at 0x180045ea0
Capabilities:
Enumerate processes
Terminate process

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rdi
push rbp
lea rbp, [rsp - 0x1e0]
sub rsp, 0x2e0
xor edi, edi
nop dword [rax]
mov edx, edi
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___int____ptr64]
lea rdx, [0x1800539f0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
inc edi
mov ecx, 0x64
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rdx, str.Anydesk
lea rcx, [rsp + 0x20]
call fcn.1800507f0
mov dword [rbp - 0x60], 0x238
xor edx, edx
lea ecx, [rdx + 2]
call qword [sym.imp.KERNEL32.dll_CreateToolhelp32Snapshot]
mov rbx, rax
cmp rax, 0xffffffffffffffff
je 0x180045f6e
lea rdx, [rbp - 0x60]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_Process32FirstW]
test eax, eax
je 0x180045f65
nop dword [rax]
lea rdx, [rsp + 0x20]
cmp qword [rsp + 0x38], 7
cmova rdx, qword [rsp + 0x20]
lea rcx, [rbp - 0x34]
call qword [sym.imp.VCRUNTIME140.dll_wcsstr]
mov rcx, rbx
test rax, rax
jne 0x1800466ef
lea rdx, [rbp - 0x60]
call qword [sym.imp.KERNEL32.dll_Process32NextW]
test eax, eax
jne 0x180045f30
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
xor ebx, ebx
mov rdx, qword [rsp + 0x38]
cmp rdx, 7
jbe 0x180045fb2
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180045fad
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18004676d
call fcn.18012643c
test ebx, ebx
jne 0x180046c9f
lea rdx, [0x1801620b8]
lea rcx, [rsp + 0x20]
call fcn.1800507f0
mov dword [rbp - 0x60], 0x238
xor edx, edx
lea ecx, [rbx + 2]
call qword [sym.imp.KERNEL32.dll_CreateToolhelp32Snapshot]
mov rbx, rax
cmp rax, 0xffffffffffffffff
je 0x18004603e
lea rdx, [rbp - 0x60]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_Process32FirstW]
test eax, eax
je 0x180046035
nop word [rax + rax]
lea rdx, [rsp + 0x20]
cmp qword [rsp + 0x38], 7
cmova rdx, qword [rsp + 0x20]
lea rcx, [rbp - 0x34]
call qword [sym.imp.VCRUNTIME140.dll_wcsstr]
mov rcx, rbx
test rax, rax
jne 0x1800466fd
lea rdx, [rbp - 0x60]
call qword [sym.imp.KERNEL32.dll_Process32NextW]
test eax, eax
jne 0x180046000
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
xor ebx, ebx
mov rdx, qword [rsp + 0x38]
cmp rdx, 7
jbe 0x180046082
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18004607d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180046774
call fcn.18012643c
test ebx, ebx
jne 0x180046bea
lea rdx, [0x1801620e8]
lea rcx, [rsp + 0x20]
call fcn.1800507f0
mov dword [rbp - 0x60], 0x238
xor edx, edx
lea ecx, [rbx + 2]
call qword [sym.imp.KERNEL32.dll_CreateToolhelp32Snapshot]
mov rbx, rax
cmp rax, 0xffffffffffffffff
je 0x18004610e
lea rdx, [rbp - 0x60]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_Process32FirstW]
test eax, eax
je 0x180046105
nop word [rax + rax]
lea rdx, [rsp + 0x20]
cmp qword [rsp + 0x38], 7
cmova rdx, qword [rsp + 0x20]
lea rcx, [rbp - 0x34]
call qword [sym.imp.VCRUNTIME140.dll_wcsstr]
mov rcx, rbx
test rax, rax
jne 0x18004670b
lea rdx, [rbp - 0x60]
call qword [sym.imp.KERNEL32.dll_Process32NextW]
test eax, eax
jne 0x1800460d0
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
xor ebx, ebx
mov rdx, qword [rsp + 0x38]
cmp rdx, 7
jbe 0x180046152
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18004614d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18004677b
call fcn.18012643c
test ebx, ebx
jne 0x180046b35
lea rdx, [0x180162110]
lea rcx, [rsp + 0x20]
call fcn.1800507f0
mov dword [rbp - 0x60], 0x238
xor edx, edx
lea ecx, [rbx + 2]
call qword [sym.imp.KERNEL32.dll_CreateToolhelp32Snapshot]
mov rbx, rax
cmp rax, 0xffffffffffffffff
je 0x1800461de
lea rdx, [rbp - 0x60]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_Process32FirstW]
test eax, eax
je 0x1800461d5
nop word [rax + rax]
lea rdx, [rsp + 0x20]
cmp qword [rsp + 0x38], 7
cmova rdx, qword [rsp + 0x20]
lea rcx, [rbp - 0x34]
call qword [sym.imp.VCRUNTIME140.dll_wcsstr]
mov rcx, rbx
test rax, rax
jne 0x180046719
lea rdx, [rbp - 0x60]
call qword [sym.imp.KERNEL32.dll_Process32NextW]
test eax, eax
jne 0x1800461a0
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
xor ebx, ebx
mov rdx, qword [rsp + 0x38]
cmp rdx, 7
jbe 0x180046222
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18004621d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180046782
call fcn.18012643c
test ebx, ebx
jne 0x180046a80
lea rdx, [0x180162140]
lea rcx, [rsp + 0x20]
call fcn.1800507f0
mov dword [rbp - 0x60], 0x238
xor edx, edx
lea ecx, [rbx + 2]
call qword [sym.imp.KERNEL32.dll_CreateToolhelp32Snapshot]
mov rbx, rax
cmp rax, 0xffffffffffffffff
je 0x1800462ae
lea rdx, [rbp - 0x60]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_Process32FirstW]
test eax, eax
je 0x1800462a5
nop word [rax + rax]
lea rdx, [rsp + 0x20]
cmp qword [rsp + 0x38], 7
cmova rdx, qword [rsp + 0x20]
lea rcx, [rbp - 0x34]
call qword [sym.imp.VCRUNTIME140.dll_wcsstr]
mov rcx, rbx
test rax, rax
jne 0x180046727
lea rdx, [rbp - 0x60]
call qword [sym.imp.KERNEL32.dll_Process32NextW]
test eax, eax
jne 0x180046270
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
xor ebx, ebx
mov rdx, qword [rsp + 0x38]
cmp rdx, 7
jbe 0x1800462f2
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800462ed
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180046789
call fcn.18012643c
test ebx, ebx
jne 0x1800469cb
lea rdx, [0x180162170]
lea rcx, [rsp + 0x20]
call fcn.1800507f0
mov dword [rbp - 0x60], 0x238
xor edx, edx
lea ecx, [rbx + 2]
call qword [sym.imp.KERNEL32.dll_CreateToolhelp32Snapshot]
mov rbx, rax
cmp rax, 0xffffffffffffffff
je 0x18004637e
lea rdx, [rbp - 0x60]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_Process32FirstW]
test eax, eax
je 0x180046375
nop word [rax + rax]
lea rdx, [rsp + 0x20]
cmp qword [rsp + 0x38], 7
cmova rdx, qword [rsp + 0x20]
lea rcx, [rbp - 0x34]
call qword [sym.imp.VCRUNTIME140.dll_wcsstr]
mov rcx, rbx
test rax, rax
jne 0x180046735
lea rdx, [rbp - 0x60]
call qword [sym.imp.KERNEL32.dll_Process32NextW]
test eax, eax
jne 0x180046340
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
xor ebx, ebx
mov rdx, qword [rsp + 0x38]
cmp rdx, 7
jbe 0x1800463c2
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800463bd
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180046790
call fcn.18012643c
test ebx, ebx
jne 0x180046916
lea rdx, [0x180162198]
lea rcx, [rsp + 0x20]
call fcn.1800507f0
mov dword [rbp - 0x60], 0x238
xor edx, edx
lea ecx, [rbx + 2]
call qword [sym.imp.KERNEL32.dll_CreateToolhelp32Snapshot]
mov rbx, rax
cmp rax, 0xffffffffffffffff
je 0x18004644e
lea rdx, [rbp - 0x60]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_Process32FirstW]
test eax, eax
je 0x180046445
nop word [rax + rax]
lea rdx, [rsp + 0x20]
cmp qword [rsp + 0x38], 7
cmova rdx, qword [rsp + 0x20]
lea rcx, [rbp - 0x34]
call qword [sym.imp.VCRUNTIME140.dll_wcsstr]
mov rcx, rbx
test rax, rax
jne 0x180046743
lea rdx, [rbp - 0x60]
call qword [sym.imp.KERNEL32.dll_Process32NextW]
test eax, eax
jne 0x180046410
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
xor ebx, ebx
mov rdx, qword [rsp + 0x38]
cmp rdx, 7
jbe 0x180046492
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18004648d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180046797
call fcn.18012643c
test ebx, ebx
jne 0x180046861
lea rdx, str.SystemInformer
lea rcx, [rsp + 0x20]
call fcn.1800507f0
mov dword [rbp - 0x60], 0x238
xor edx, edx
lea ecx, [rbx + 2]
call qword [sym.imp.KERNEL32.dll_CreateToolhelp32Snapshot]
mov rbx, rax
cmp rax, 0xffffffffffffffff
je 0x18004651e
lea rdx, [rbp - 0x60]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_Process32FirstW]
test eax, eax
je 0x180046515
nop word [rax + rax]
lea rdx, [rsp + 0x20]
cmp qword [rsp + 0x38], 7
cmova rdx, qword [rsp + 0x20]
lea rcx, [rbp - 0x34]
call qword [sym.imp.VCRUNTIME140.dll_wcsstr]
mov rcx, rbx
test rax, rax
jne 0x180046751
lea rdx, [rbp - 0x60]
call qword [sym.imp.KERNEL32.dll_Process32NextW]
test eax, eax
jne 0x1800464e0
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
xor ebx, ebx
mov rdx, qword [rsp + 0x38]
cmp rdx, 7
jbe 0x180046562
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18004655d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18004679e
call fcn.18012643c
test ebx, ebx
jne 0x1800467ac
lea rdx, [0x1801621f8]
lea rcx, [rsp + 0x20]
call fcn.1800507f0
mov dword [rbp - 0x60], 0x238
xor edx, edx
lea ecx, [rbx + 2]
call qword [sym.imp.KERNEL32.dll_CreateToolhelp32Snapshot]
mov rbx, rax
cmp rax, 0xffffffffffffffff
je 0x1800465ee
lea rdx, [rbp - 0x60]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_Process32FirstW]
test eax, eax
je 0x1800465e5
nop word [rax + rax]
lea rdx, [rsp + 0x20]
cmp qword [rsp + 0x38], 7
cmova rdx, qword [rsp + 0x20]
lea rcx, [rbp - 0x34]
call qword [sym.imp.VCRUNTIME140.dll_wcsstr]
mov rcx, rbx
test rax, rax
jne 0x18004675f
lea rdx, [rbp - 0x60]
call qword [sym.imp.KERNEL32.dll_Process32NextW]
test eax, eax
jne 0x1800465b0
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
xor ebx, ebx
mov rdx, qword [rsp + 0x38]
cmp rdx, 7
jbe 0x180046632
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18004662d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800467a5
call fcn.18012643c
test ebx, ebx
je 0x180045ec0
mov edx, reloc.WLDAP32.dll_Ordinal_200
mov ecx, edx
call qword [sym.imp.KERNEL32.dll_Beep]
lea rdx, str.Everything
lea rcx, [rsp + 0x60]
call fcn.180040460
mov rcx, rax
call fcn.180044c50
lea rcx, [rsp + 0x40]
call fcn.1800404a0
mov rbx, rax
lea rdx, [0x18015582a]
lea rcx, [rsp + 0x60]
call fcn.180040460
nop
lea rdx, str.Everything
lea rcx, [rbp - 0x80]
call fcn.180040460
nop
lea rdx, [0x18015582a]
lea rcx, [rsp + 0x20]
call fcn.180040460
nop
mov r9, rbx
lea r8, [rsp + 0x60]
lea rdx, [rbp - 0x80]
lea rcx, [rsp + 0x20]
call fcn.1800452b0
nop
lea rcx, [rsp + 0x20]
call fcn.180044bf0
nop
lea rcx, [rbp - 0x80]
call fcn.180044bf0
nop
lea rcx, [rsp + 0x60]
call fcn.180044bf0
nop
lea rcx, [rsp + 0x40]
call fcn.180044bf0
mov ecx, 0xffffffff
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov ebx, dword [rbp - 0x58]
jmp 0x180045f70
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov ebx, dword [rbp - 0x58]
jmp 0x180046040
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov ebx, dword [rbp - 0x58]
jmp 0x180046110
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov ebx, dword [rbp - 0x58]
jmp 0x1800461e0
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov ebx, dword [rbp - 0x58]
jmp 0x1800462b0
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov ebx, dword [rbp - 0x58]
jmp 0x180046380
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov ebx, dword [rbp - 0x58]
jmp 0x180046450
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov ebx, dword [rbp - 0x58]
jmp 0x180046520
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov ebx, dword [rbp - 0x58]
jmp 0x1800465f0
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov edx, reloc.WLDAP32.dll_Ordinal_200
mov ecx, edx
call qword [sym.imp.KERNEL32.dll_Beep]
lea rdx, str.winprefetchview
lea rcx, [rsp + 0x40]
call fcn.180040460
mov rcx, rax
call fcn.180044c50
lea rcx, [rsp + 0x40]
call fcn.1800404a0
mov rbx, rax
lea rdx, [0x18015582a]
lea rcx, [rsp + 0x20]
call fcn.180040460
nop
lea rdx, str.systeminformer
lea rcx, [rbp - 0x80]
call fcn.180040460
nop
lea rdx, [0x18015582a]
lea rcx, [rsp + 0x60]
call fcn.180040460
nop
mov r9, rbx
lea r8, [rsp + 0x20]
lea rdx, [rbp - 0x80]
lea rcx, [rsp + 0x60]
call fcn.1800452b0
nop
lea rcx, [rsp + 0x60]
call fcn.180044bf0
nop
lea rcx, [rbp - 0x80]
call fcn.180044bf0
nop
lea rcx, [rsp + 0x20]
call fcn.180044bf0
nop
lea rcx, [rsp + 0x40]
call fcn.180044bf0
mov ecx, 0xffffffff
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov edx, reloc.WLDAP32.dll_Ordinal_200
mov ecx, edx
call qword [sym.imp.KERNEL32.dll_Beep]
lea rdx, str.winprefetchview
lea rcx, [rsp + 0x40]
call fcn.180040460
mov rcx, rax
call fcn.180044c50
lea rcx, [rsp + 0x40]
call fcn.1800404a0
mov rbx, rax
lea rdx, [0x18015582a]
lea rcx, [rsp + 0x20]
call fcn.180040460
nop
lea rdx, str.winprefetchview
lea rcx, [rbp - 0x80]
call fcn.180040460
nop
lea rdx, [0x18015582a]
lea rcx, [rsp + 0x60]
call fcn.180040460
nop
mov r9, rbx
lea r8, [rsp + 0x20]
lea rdx, [rbp - 0x80]
lea rcx, [rsp + 0x60]
call fcn.1800452b0
nop
lea rcx, [rsp + 0x60]
call fcn.180044bf0
nop
lea rcx, [rbp - 0x80]
call fcn.180044bf0
nop
lea rcx, [rsp + 0x20]
call fcn.180044bf0
nop
lea rcx, [rsp + 0x40]
call fcn.180044bf0
mov ecx, 0xffffffff
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov edx, reloc.WLDAP32.dll_Ordinal_200
mov ecx, edx
call qword [sym.imp.KERNEL32.dll_Beep]
lea rdx, str.debugger
lea rcx, [rsp + 0x40]
call fcn.180040460
mov rcx, rax
call fcn.180044c50
lea rcx, [rsp + 0x40]
call fcn.1800404a0
mov rbx, rax
lea rdx, [0x18015582a]
lea rcx, [rsp + 0x20]
call fcn.180040460
nop
lea rdx, str.debugger
lea rcx, [rbp - 0x80]
call fcn.180040460
nop
lea rdx, [0x18015582a]
lea rcx, [rsp + 0x60]
call fcn.180040460
nop
mov r9, rbx
lea r8, [rsp + 0x20]
lea rdx, [rbp - 0x80]
lea rcx, [rsp + 0x60]
call fcn.1800452b0
nop
lea rcx, [rsp + 0x60]
call fcn.180044bf0
nop
lea rcx, [rbp - 0x80]
call fcn.180044bf0
nop
lea rcx, [rsp + 0x20]
call fcn.180044bf0
nop
lea rcx, [rsp + 0x40]
call fcn.180044bf0
mov ecx, 0xffffffff
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov edx, reloc.WLDAP32.dll_Ordinal_200
mov ecx, edx
call qword [sym.imp.KERNEL32.dll_Beep]
lea rdx, str.httpdebugger
lea rcx, [rsp + 0x40]
call fcn.180040460
mov rcx, rax
call fcn.180044c50
lea rcx, [rsp + 0x40]
call fcn.1800404a0
mov rbx, rax
lea rdx, [0x18015582a]
lea rcx, [rsp + 0x20]
call fcn.180040460
nop
lea rdx, str.httpdebugger
lea rcx, [rbp - 0x80]
call fcn.180040460
nop
lea rdx, [0x18015582a]
lea rcx, [rsp + 0x60]
call fcn.180040460
nop
mov r9, rbx
lea r8, [rsp + 0x20]
lea rdx, [rbp - 0x80]
lea rcx, [rsp + 0x60]
call fcn.1800452b0
nop
lea rcx, [rsp + 0x60]
call fcn.180044bf0
nop
lea rcx, [rbp - 0x80]
call fcn.180044bf0
nop
lea rcx, [rsp + 0x20]
call fcn.180044bf0
nop
lea rcx, [rsp + 0x40]
call fcn.180044bf0
mov ecx, 0xffffffff
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov edx, reloc.WLDAP32.dll_Ordinal_200
mov ecx, edx
call qword [sym.imp.KERNEL32.dll_Beep]
lea rdx, str.processhacker
lea rcx, [rsp + 0x40]
call fcn.180040460
mov rcx, rax
call fcn.180044c50
lea rcx, [rsp + 0x40]
call fcn.1800404a0
mov rbx, rax
lea rdx, [0x18015582a]
lea rcx, [rsp + 0x20]
call fcn.180040460
nop
lea rdx, str.processhacker
lea rcx, [rbp - 0x80]
call fcn.180040460
nop
lea rdx, [0x18015582a]
lea rcx, [rsp + 0x60]
call fcn.180040460
nop
mov r9, rbx
lea r8, [rsp + 0x20]
lea rdx, [rbp - 0x80]
lea rcx, [rsp + 0x60]
call fcn.1800452b0
nop
lea rcx, [rsp + 0x60]
call fcn.180044bf0
nop
lea rcx, [rbp - 0x80]
call fcn.180044bf0
nop
lea rcx, [rsp + 0x20]
call fcn.180044bf0
nop
lea rcx, [rsp + 0x40]
call fcn.180044bf0
mov ecx, 0xffffffff
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov edx, reloc.WLDAP32.dll_Ordinal_200
mov ecx, edx
call qword [sym.imp.KERNEL32.dll_Beep]
lea rdx, str.cheatengine
lea rcx, [rsp + 0x40]
call fcn.180040460
mov rcx, rax
call fcn.180044c50
lea rcx, [rsp + 0x40]
call fcn.1800404a0
mov rbx, rax
lea rdx, [0x18015582a]
lea rcx, [rsp + 0x20]
call fcn.180040460
nop
lea rdx, str.cheatengine
lea rcx, [rbp - 0x80]
call fcn.180040460
nop
lea rdx, [0x18015582a]
lea rcx, [rsp + 0x60]
call fcn.180040460
nop
mov r9, rbx
lea r8, [rsp + 0x20]
lea rdx, [rbp - 0x80]
lea rcx, [rsp + 0x60]
call fcn.1800452b0
nop
lea rcx, [rsp + 0x60]
call fcn.180044bf0
nop
lea rcx, [rbp - 0x80]
call fcn.180044bf0
nop
lea rcx, [rsp + 0x20]
call fcn.180044bf0
nop
lea rcx, [rsp + 0x40]
call fcn.180044bf0
mov ecx, 0xffffffff
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov edx, reloc.WLDAP32.dll_Ordinal_200
mov ecx, edx
call qword [sym.imp.KERNEL32.dll_Beep]
lea rcx, [rsp + 0x40]
call fcn.1800404a0
mov rbx, rax
lea rdx, [0x18015582a]
lea rcx, [rsp + 0x20]
call fcn.180040460
nop
lea rdx, str.Cheat_Engine
lea rcx, [rbp - 0x80]
call fcn.180040460
nop
lea rdx, [0x18015582a]
lea rcx, [rsp + 0x60]
call fcn.180040460
nop
mov r9, rbx
lea r8, [rsp + 0x20]
lea rdx, [rbp - 0x80]
lea rcx, [rsp + 0x60]
call fcn.1800452b0
nop
lea rcx, [rsp + 0x60]
call fcn.180044bf0
nop
lea rcx, [rbp - 0x80]
call fcn.180044bf0
nop
lea rcx, [rsp + 0x20]
call fcn.180044bf0
nop
lea rcx, [rsp + 0x40]
call fcn.180044bf0
lea rdx, str.Cheat_Engine
lea rcx, [rsp + 0x40]
call fcn.180040460
mov rcx, rax
call fcn.180044c50
mov ecx, 0xffffffff
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov edx, reloc.WLDAP32.dll_Ordinal_200
mov ecx, edx
call qword [sym.imp.KERNEL32.dll_Beep]
lea rcx, [rsp + 0x40]
call fcn.1800404a0
mov rbx, rax
lea rdx, [0x18015582a]
lea rcx, [rsp + 0x20]
call fcn.180040460
nop
lea rdx, str.anydesk
lea rcx, [rbp - 0x80]
call fcn.180040460
nop
lea rdx, [0x18015582a]
lea rcx, [rsp + 0x60]
call fcn.180040460
nop
mov r9, rbx
lea r8, [rsp + 0x20]
lea rdx, [rbp - 0x80]
lea rcx, [rsp + 0x60]
call fcn.1800452b0
nop
lea rcx, [rsp + 0x60]
call fcn.180044bf0
nop
lea rcx, [rbp - 0x80]
call fcn.180044bf0
nop
lea rcx, [rsp + 0x20]
call fcn.180044bf0
nop
lea rcx, [rsp + 0x40]
call fcn.180044bf0
lea rdx, str.anydesk
lea rcx, [rsp + 0x40]
call fcn.180040460
mov rcx, rax
call fcn.180044c50
mov ecx, 0xffffffff
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3