Function at 0x1400bec62
Capabilities:
Enumerate processes

Disassembly:
jmp 0x1400d75c0
mov dword [rsp + 0x10], edx
mov qword [rsp + 8], rcx
push rbp
push rdi
sub rsp, 0x6c8
lea rbp, [rsp + 0x20]
lea rdi, [rsp + 0x20]
mov ecx, 0x11a
mov eax, 0xcccccccc
rep stosd dword [rdi], eax
mov rcx, qword [rsp + 0x6e8]
mov rax, qword [0x14029f068]
xor rax, rbp
mov qword [rbp + 0x690], rax
lea rcx, [0x1402bc03b]
call fcn.1400c35eb
mov rax, qword [rbp + 0x6c0]
mov ecx, dword [rbp + 0x6c8]
mov dword [rax], ecx
mov rax, qword [rbp + 0x6c0]
mov qword [rax + 8], 0
mov rax, qword [rbp + 0x6c0]
add rax, 0x10
mov rcx, rax
call fcn.1400c224f
nop
xor edx, edx
mov ecx, 2
call fcn.1400c08c3
mov qword [rbp + 8], rax
cmp qword [rbp + 8], 0xffffffffffffffff
jne 0x1400d76dc
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rbp + 0x684], eax
lea rdx, str.CreateToolhelp32Snapshot
lea rcx, [rbp + 0x4f8]
call fcn.1400bfd01
nop
mov eax, dword [0x14029f008]
add eax, 5
mov dword [rbp + 0x688], eax
lea rdx, str.C:Work_srccrashcrashcrashProcess.cpp
lea rcx, [rbp + 0x538]
call fcn.1400bfd01
nop
mov r9d, dword [rbp + 0x684]
lea r8, [rbp + 0x4f8]
mov edx, dword [rbp + 0x688]
lea rcx, [rbp + 0x538]
call fcn.1400c357d
nop
lea rcx, [rbp + 0x538]
call fcn.1400c2961
nop
lea rcx, [rbp + 0x4f8]
call fcn.1400c2961
jmp 0x1400d78c0
mov edx, 0x10
lea rcx, [rbp + 0x28]
call fcn.1400c1e94
mov rax, qword [sym.imp.KERNEL32.dll_CloseHandle]
mov qword [rbp + 0x578], rax
lea r8, [rbp + 0x578]
mov rdx, qword [rbp + 8]
lea rcx, [rbp + 0x28]
call fcn.1400bec53
nop
lea rax, [rbp + 0x60]
mov rdi, rax
xor eax, eax
mov ecx, 0x238
rep stosb byte [rdi], al
mov dword [rbp + 0x60], 0x238
lea rdx, [rbp + 0x60]
mov rcx, qword [rbp + 8]
call fcn.1400c13ae
test eax, eax
jne 0x1400d77c5
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rbp + 0x684], eax
lea rdx, str.Process32First
lea rcx, [rbp + 0x598]
call fcn.1400bfd01
nop
mov eax, dword [0x14029f008]
add eax, 0xe
mov dword [rbp + 0x688], eax
lea rdx, str.C:Work_srccrashcrashcrashProcess.cpp
lea rcx, [rbp + 0x5d8]
call fcn.1400bfd01
nop
mov r9d, dword [rbp + 0x684]
lea r8, [rbp + 0x598]
mov edx, dword [rbp + 0x688]
lea rcx, [rbp + 0x5d8]
call fcn.1400c357d
nop
lea rcx, [rbp + 0x5d8]
call fcn.1400c2961
nop
lea rcx, [rbp + 0x598]
call fcn.1400c2961
nop
lea rcx, [rbp + 0x28]
call fcn.1400c3195
jmp 0x1400d78c0
mov rax, qword [rbp + 0x6c0]
mov eax, dword [rax]
cmp dword [rbp + 0x68], eax
je 0x1400d77f4
lea rdx, [rbp + 0x60]
mov rcx, qword [rbp + 8]
call fcn.1400c29ac
test eax, eax
jne 0x1400d77f2
lea rcx, [rbp + 0x28]
call fcn.1400c3195
jmp 0x1400d78c0
jmp 0x1400d77c5
mov rax, qword [rbp + 0x6c0]
add rax, 0x10
lea rdx, [rbp + 0x8c]
mov rcx, rax
call fcn.1400bf5b3
mov r8d, dword [rbp + 0x68]
xor edx, edx
mov ecx, 0x1fffff
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov rcx, qword [rbp + 0x6c0]
mov qword [rcx + 8], rax
mov rax, qword [rbp + 0x6c0]
cmp qword [rax + 8], 0
jne 0x1400d78b6
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rbp + 0x684], eax
lea rdx, str.OpenProcess
lea rcx, [rbp + 0x618]
call fcn.1400bfd01
nop
mov eax, dword [0x14029f008]
add eax, 0x1a
mov dword [rbp + 0x688], eax
lea rdx, str.C:Work_srccrashcrashcrashProcess.cpp
lea rcx, [rbp + 0x658]
call fcn.1400bfd01
nop
mov r9d, dword [rbp + 0x684]
lea r8, [rbp + 0x618]
mov edx, dword [rbp + 0x688]
lea rcx, [rbp + 0x658]
call fcn.1400c357d
nop
lea rcx, [rbp + 0x658]
call fcn.1400c2961
nop
lea rcx, [rbp + 0x618]
call fcn.1400c2961
nop
lea rcx, [rbp + 0x28]
call fcn.1400c3195
nop
mov rax, qword [rbp + 0x6c0]
mov rdi, rax
lea rcx, [rbp - 0x20]
lea rdx, [0x140251d20]
call fcn.1400c271d
mov rax, rdi
mov rcx, qword [rbp + 0x690]
xor rcx, rbp
call fcn.1400c096d
lea rsp, [rbp + 0x6a8]
pop rdi
pop rbp
ret