Function at 0x4015e9
Capabilities:
Execute command

Disassembly:
push rbx
sub rsp, 0x20
lea rcx, section..rdata
call sub.msvcrt.dll_system
mov r8d, 0xb
lea rdx, str._nRecorders_n
mov rcx, qword [0x004a90c0]
call fcn.00496a60
lea rcx, str.tasklist__find__i__obs64.exe____nul
call sub.msvcrt.dll_system
test eax, eax
jne 0x4019ba
mov r8d, 0x12
lea rdx, str.e_32mOBS_founde_0m
mov rcx, qword [0x004a90c0]
call fcn.00496a60
mov rax, qword [0x004a90c0]
mov rdx, qword [rax]
add rax, qword [rdx - 0x18]
mov rbx, qword [rax + 0xf0]
test rbx, rbx
je 0x40199a
cmp byte [rbx + 0x38], 0
je 0x40199f
movzx eax, byte [rbx + 0x43]
movsx edx, al
mov rcx, qword [0x004a90c0]
call fcn.004618f0
mov rcx, rax
call fcn.00461ae0
lea rcx, str.tasklist__find__i__nvcontainer.exe____nul
call sub.msvcrt.dll_system
test eax, eax
jne 0x401a50
mov r8d, 0x19
lea rdx, str.e_32mShadowplay_founde_0m
mov rcx, qword [0x004a90c0]
call fcn.00496a60
mov rax, qword [0x004a90c0]
mov rdx, qword [rax]
add rax, qword [rdx - 0x18]
mov rbx, qword [rax + 0xf0]
test rbx, rbx
je 0x401a30
cmp byte [rbx + 0x38], 0
je 0x401a35
movzx eax, byte [rbx + 0x43]
movsx edx, al
mov rcx, qword [0x004a90c0]
call fcn.004618f0
mov rcx, rax
call fcn.00461ae0
lea rcx, str.tasklist__find__i__bdcam.exe____nul
call sub.msvcrt.dll_system
test eax, eax
jne 0x401ae6
mov r8d, 0x17
lea rdx, str.e_32mBandicam_founde_0m
mov rcx, qword [0x004a90c0]
call fcn.00496a60
mov rax, qword [0x004a90c0]
mov rdx, qword [rax]
add rax, qword [rdx - 0x18]
mov rbx, qword [rax + 0xf0]
test rbx, rbx
je 0x401ac6
cmp byte [rbx + 0x38], 0
je 0x401acb
movzx eax, byte [rbx + 0x43]
movsx edx, al
mov rcx, qword [0x004a90c0]
call fcn.004618f0
mov rcx, rax
call fcn.00461ae0
lea rcx, str.tasklist__find__i__RadeonSettings.exe____nul
call sub.msvcrt.dll_system
test eax, eax
jne 0x401b7c
mov r8d, 0x1d
lea rdx, str.e_32mRadeonRecorder_founde_0m
mov rcx, qword [0x004a90c0]
call fcn.00496a60
mov rax, qword [0x004a90c0]
mov rdx, qword [rax]
add rax, qword [rdx - 0x18]
mov rbx, qword [rax + 0xf0]
test rbx, rbx
je 0x401b5c
cmp byte [rbx + 0x38], 0
je 0x401b61
movzx eax, byte [rbx + 0x43]
movsx edx, al
mov rcx, qword [0x004a90c0]
call fcn.004618f0
mov rcx, rax
call fcn.00461ae0
lea rcx, str.tasklist__find__i__Fraps.exe____nul
call sub.msvcrt.dll_system
test eax, eax
jne 0x401c12
mov r8d, 0x14
lea rdx, str.e_32mFraps_founde_0m
mov rcx, qword [0x004a90c0]
call fcn.00496a60
mov rax, qword [0x004a90c0]
mov rdx, qword [rax]
add rax, qword [rdx - 0x18]
mov rbx, qword [rax + 0xf0]
test rbx, rbx
je 0x401bf2
cmp byte [rbx + 0x38], 0
je 0x401bf7
movzx eax, byte [rbx + 0x43]
movsx edx, al
mov rcx, qword [0x004a90c0]
call fcn.004618f0
mov rcx, rax
call fcn.00461ae0
lea rcx, str.tasklist__find__i__CamRecorder.exe____nul
call sub.msvcrt.dll_system
test eax, eax
jne 0x401ca8
mov r8d, 0x1a
lea rdx, str.e_32mCamRecorder_founde_0m
mov rcx, qword [0x004a90c0]
call fcn.00496a60
mov rax, qword [0x004a90c0]
mov rdx, qword [rax]
add rax, qword [rdx - 0x18]
mov rbx, qword [rax + 0xf0]
test rbx, rbx
je 0x401c88
cmp byte [rbx + 0x38], 0
je 0x401c8d
movzx eax, byte [rbx + 0x43]
movsx edx, al
mov rcx, qword [0x004a90c0]
call fcn.004618f0
mov rcx, rax
call fcn.00461ae0
lea rcx, str.tasklist__find__i__XSplit.Core.exe____nul
call sub.msvcrt.dll_system
test eax, eax
jne 0x401d3e
mov r8d, 0x19
lea rdx, str.e_32mXSplitCore_founde_0m
mov rcx, qword [0x004a90c0]
call fcn.00496a60
mov rax, qword [0x004a90c0]
mov rdx, qword [rax]
add rax, qword [rdx - 0x18]
mov rbx, qword [rax + 0xf0]
test rbx, rbx
je 0x401d1e
cmp byte [rbx + 0x38], 0
je 0x401d23
movzx eax, byte [rbx + 0x43]
movsx edx, al
mov rcx, qword [0x004a90c0]
call fcn.004618f0
mov rcx, rax
call fcn.00461ae0
lea rcx, str.tasklist__find__i__Action.exe____nul
call sub.msvcrt.dll_system
test eax, eax
jne 0x401dd4
mov r8d, 0x15
lea rdx, str.e_32mAction_founde_0m
mov rcx, qword [0x004a90c0]
call fcn.00496a60
mov rax, qword [0x004a90c0]
mov rdx, qword [rax]
add rax, qword [rdx - 0x18]
mov rbx, qword [rax + 0xf0]
test rbx, rbx
je 0x401db4
cmp byte [rbx + 0x38], 0
je 0x401db9
movzx eax, byte [rbx + 0x43]
movsx edx, al
mov rcx, qword [0x004a90c0]
call fcn.004618f0
mov rcx, rax
call fcn.00461ae0
nop
add rsp, 0x20
pop rbx
ret
call fcn.00497210
mov rcx, rbx
call fcn.00422a90
mov rax, qword [rbx]
mov edx, 0xa
mov rcx, rbx
call qword [rax + 0x30]
jmp 0x40166c
mov r8d, 0x16
lea rdx, str.e_31mOBS_not_founde_0m
mov rcx, qword [0x004a90c0]
call fcn.00496a60
mov rax, qword [0x004a90c0]
mov rdx, qword [rax]
add rax, qword [rdx - 0x18]
mov rbx, qword [rax + 0xf0]
test rbx, rbx
je 0x401a13
cmp byte [rbx + 0x38], 0
je 0x401a18
movzx eax, byte [rbx + 0x43]
movsx edx, al
mov rcx, qword [0x004a90c0]
call fcn.004618f0
mov rcx, rax
call fcn.00461ae0
jmp 0x401683
call fcn.00497210
mov rcx, rbx
call fcn.00422a90
mov rax, qword [rbx]
mov edx, 0xa
mov rcx, rbx
call qword [rax + 0x30]
jmp 0x4019f7
call fcn.00497210
mov rcx, rbx
call fcn.00422a90
mov rax, qword [rbx]
mov edx, 0xa
mov rcx, rbx
call qword [rax + 0x30]
jmp 0x4016dc
mov r8d, 0x1d
lea rdx, str.e_31mShadowplay_not_founde_0m
mov rcx, qword [0x004a90c0]
call fcn.00496a60
mov rax, qword [0x004a90c0]
mov rdx, qword [rax]
add rax, qword [rdx - 0x18]
mov rbx, qword [rax + 0xf0]
test rbx, rbx
je 0x401aa9
cmp byte [rbx + 0x38], 0
je 0x401aae
movzx eax, byte [rbx + 0x43]
movsx edx, al
mov rcx, qword [0x004a90c0]
call fcn.004618f0
mov rcx, rax
call fcn.00461ae0
jmp 0x4016f3
call fcn.00497210
mov rcx, rbx
call fcn.00422a90
mov rax, qword [rbx]
mov edx, 0xa
mov rcx, rbx
call qword [rax + 0x30]
jmp 0x401a8d
call fcn.00497210
mov rcx, rbx
call fcn.00422a90
mov rax, qword [rbx]
mov edx, 0xa
mov rcx, rbx
call qword [rax + 0x30]
jmp 0x40174c
mov r8d, 0x1b
lea rdx, str.e_31mBandicam_not_founde_0m
mov rcx, qword [0x004a90c0]
call fcn.00496a60
mov rax, qword [0x004a90c0]
mov rdx, qword [rax]
add rax, qword [rdx - 0x18]
mov rbx, qword [rax + 0xf0]
test rbx, rbx
je 0x401b3f
cmp byte [rbx + 0x38], 0
je 0x401b44
movzx eax, byte [rbx + 0x43]
movsx edx, al
mov rcx, qword [0x004a90c0]
call fcn.004618f0
mov rcx, rax
call fcn.00461ae0
jmp 0x401763
call fcn.00497210
mov rcx, rbx
call fcn.00422a90
mov rax, qword [rbx]
mov edx, 0xa
mov rcx, rbx
call qword [rax + 0x30]
jmp 0x401b23
call fcn.00497210
mov rcx, rbx
call fcn.00422a90
mov rax, qword [rbx]
mov edx, 0xa
mov rcx, rbx
call qword [rax + 0x30]
jmp 0x4017bc
mov r8d, 0x21
lea rdx, str.e_31mRadeonRecorder_not_founde_0m
mov rcx, qword [0x004a90c0]
call fcn.00496a60
mov rax, qword [0x004a90c0]
mov rdx, qword [rax]
add rax, qword [rdx - 0x18]
mov rbx, qword [rax + 0xf0]
test rbx, rbx
je 0x401bd5
cmp byte [rbx + 0x38], 0
je 0x401bda
movzx eax, byte [rbx + 0x43]
movsx edx, al
mov rcx, qword [0x004a90c0]
call fcn.004618f0
mov rcx, rax
call fcn.00461ae0
jmp 0x4017d3
call fcn.00497210
mov rcx, rbx
call fcn.00422a90
mov rax, qword [rbx]
mov edx, 0xa
mov rcx, rbx
call qword [rax + 0x30]
jmp 0x401bb9
call fcn.00497210
mov rcx, rbx
call fcn.00422a90
mov rax, qword [rbx]
mov edx, 0xa
mov rcx, rbx
call qword [rax + 0x30]
jmp 0x40182c
mov r8d, 0x18
lea rdx, str.e_31mFraps_not_founde_0m
mov rcx, qword [0x004a90c0]
call fcn.00496a60
mov rax, qword [0x004a90c0]
mov rdx, qword [rax]
add rax, qword [rdx - 0x18]
mov rbx, qword [rax + 0xf0]
test rbx, rbx
je 0x401c6b
cmp byte [rbx + 0x38], 0
je 0x401c70
movzx eax, byte [rbx + 0x43]
movsx edx, al
mov rcx, qword [0x004a90c0]
call fcn.004618f0
mov rcx, rax
call fcn.00461ae0
jmp 0x401843
call fcn.00497210
mov rcx, rbx
call fcn.00422a90
mov rax, qword [rbx]
mov edx, 0xa
mov rcx, rbx
call qword [rax + 0x30]
jmp 0x401c4f
call fcn.00497210
mov rcx, rbx
call fcn.00422a90
mov rax, qword [rbx]
mov edx, 0xa
mov rcx, rbx
call qword [rax + 0x30]
jmp 0x40189c
mov r8d, 0x1e
lea rdx, str.e_31mCamRecorder_not_founde_0m
mov rcx, qword [0x004a90c0]
call fcn.00496a60
mov rax, qword [0x004a90c0]
mov rdx, qword [rax]
add rax, qword [rdx - 0x18]
mov rbx, qword [rax + 0xf0]
test rbx, rbx
je 0x401d01
cmp byte [rbx + 0x38], 0
je 0x401d06
movzx eax, byte [rbx + 0x43]
movsx edx, al
mov rcx, qword [0x004a90c0]
call fcn.004618f0
mov rcx, rax
call fcn.00461ae0
jmp 0x4018b3
call fcn.00497210
mov rcx, rbx
call fcn.00422a90
mov rax, qword [rbx]
mov edx, 0xa
mov rcx, rbx
call qword [rax + 0x30]
jmp 0x401ce5
call fcn.00497210
mov rcx, rbx
call fcn.00422a90
mov rax, qword [rbx]
mov edx, 0xa
mov rcx, rbx
call qword [rax + 0x30]
jmp 0x40190c
mov r8d, 0x1d
lea rdx, str.e_31mXSplitCore_not_founde_0m
mov rcx, qword [0x004a90c0]
call fcn.00496a60
mov rax, qword [0x004a90c0]
mov rdx, qword [rax]
add rax, qword [rdx - 0x18]
mov rbx, qword [rax + 0xf0]
test rbx, rbx
je 0x401d97
cmp byte [rbx + 0x38], 0
je 0x401d9c
movzx eax, byte [rbx + 0x43]
movsx edx, al
mov rcx, qword [0x004a90c0]
call fcn.004618f0
mov rcx, rax
call fcn.00461ae0
jmp 0x401923
call fcn.00497210
mov rcx, rbx
call fcn.00422a90
mov rax, qword [rbx]
mov edx, 0xa
mov rcx, rbx
call qword [rax + 0x30]
jmp 0x401d7b
call fcn.00497210
mov rcx, rbx
call fcn.00422a90
mov rax, qword [rbx]
mov edx, 0xa
mov rcx, rbx
call qword [rax + 0x30]
jmp 0x40197c
mov r8d, 0x19
lea rdx, str.e_31mAction_not_founde_0m
mov rcx, qword [0x004a90c0]
call fcn.00496a60
mov rax, qword [0x004a90c0]
mov rdx, qword [rax]
add rax, qword [rdx - 0x18]
mov rbx, qword [rax + 0xf0]
test rbx, rbx
je 0x401e2d
cmp byte [rbx + 0x38], 0
je 0x401e32
movzx eax, byte [rbx + 0x43]
movsx edx, al
mov rcx, qword [0x004a90c0]
call fcn.004618f0
mov rcx, rax
call fcn.00461ae0
jmp 0x401994
call fcn.00497210
mov rcx, rbx
call fcn.00422a90
mov rax, qword [rbx]
mov edx, 0xa
mov rcx, rbx
call qword [rax + 0x30]
jmp 0x401e11