Function at 0x140003a06
Capabilities:
Enumerate processes
Terminate process

Disassembly:
push rbp
sub rsp, 0x270
lea rbp, [rsp + 0x80]
mov qword [rbp + 0x200], rcx
mov edx, 0
mov ecx, 2
call sym.CreateToolhelp32Snapshot
mov qword [rbp + 0x1e8], rax
cmp qword [rbp + 0x1e8], 0xffffffffffffffff
jne 0x140003a72
lea rax, str.Error_creating_process_snapshot.
mov rdx, rax
mov rax, qword [0x1403883b0]
mov rcx, rax
call method.std::basic_ostream_char__std::char_traits_char____std::operator____std.char_traits_char____std::basic_ostream_char__std::char_traits_char_____char_const_
mov rcx, rax
mov rax, qword [method.std::basic_ostream_char__std::char_traits_char____std::endl_char__std.char_traits_char____std::basic_ostream_char__std::char_traits_char____]
mov rdx, rax
call method.std::ostream.operator___std::ostream____std::ostream__
mov eax, 0
jmp 0x140003c17
mov dword [rbp - 0x60], 0x238
lea rdx, [rbp - 0x60]
mov rax, qword [rbp + 0x1e8]
mov rcx, rax
call sym.Process32FirstW
test eax, eax
sete al
test al, al
je 0x140003add
mov rax, qword [rbp + 0x1e8]
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_CloseHandle]
call rax
lea rax, str.Error_getting_process_information.
mov rdx, rax
mov rax, qword [0x1403883b0]
mov rcx, rax
call method.std::basic_ostream_char__std::char_traits_char____std::operator____std.char_traits_char____std::basic_ostream_char__std::char_traits_char_____char_const_
mov rcx, rax
mov rax, qword [method.std::basic_ostream_char__std::char_traits_char____std::endl_char__std.char_traits_char____std::basic_ostream_char__std::char_traits_char____]
mov rdx, rax
call method.std::ostream.operator___std::ostream____std::ostream__
mov eax, 0
jmp 0x140003c17
mov rax, qword [rbp + 0x200]
mov rcx, rax
call method.std::__cxx11::basic_string_wchar_t__std::char_traits_wchar_t___std::allocator_wchar_t___.c_str___const
mov rdx, rax
lea rax, [rbp - 0x60]
add rax, 0x2c
mov rcx, rax
call sym.wcscmp
test eax, eax
sete al
test al, al
je 0x140003bdf
mov eax, dword [rbp - 0x58]
mov r8d, eax
mov edx, 0
mov ecx, 1
mov rax, qword [sym.imp.KERNEL32.dll_OpenProcess]
call rax
mov qword [rbp + 0x1e0], rax
cmp qword [rbp + 0x1e0], 0
je 0x140003bb4
mov rax, qword [rbp + 0x1e0]
mov edx, 0
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_TerminateProcess]
call rax
test eax, eax
setne al
test al, al
je 0x140003b87
mov rax, qword [rbp + 0x1e0]
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_CloseHandle]
call rax
mov rax, qword [rbp + 0x1e8]
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_CloseHandle]
call rax
mov eax, 1
jmp 0x140003c17
lea rax, str.Error_terminating_process.
mov rdx, rax
mov rax, qword [0x1403883b0]
mov rcx, rax
call method.std::basic_ostream_char__std::char_traits_char____std::operator____std.char_traits_char____std::basic_ostream_char__std::char_traits_char_____char_const_
mov rcx, rax
mov rax, qword [method.std::basic_ostream_char__std::char_traits_char____std::endl_char__std.char_traits_char____std::basic_ostream_char__std::char_traits_char____]
mov rdx, rax
call method.std::ostream.operator___std::ostream____std::ostream__
jmp 0x140003bdf
lea rax, str.Error_opening_process.
mov rdx, rax
mov rax, qword [0x1403883b0]
mov rcx, rax
call method.std::basic_ostream_char__std::char_traits_char____std::operator____std.char_traits_char____std::basic_ostream_char__std::char_traits_char_____char_const_
mov rcx, rax
mov rax, qword [method.std::basic_ostream_char__std::char_traits_char____std::endl_char__std.char_traits_char____std::basic_ostream_char__std::char_traits_char____]
mov rdx, rax
call method.std::ostream.operator___std::ostream____std::ostream__
lea rdx, [rbp - 0x60]
mov rax, qword [rbp + 0x1e8]
mov rcx, rax
call sym.Process32NextW
test eax, eax
setne al
test al, al
jne 0x140003add
mov rax, qword [rbp + 0x1e8]
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_CloseHandle]
call rax
mov eax, 0
add rsp, 0x270
pop rbp
ret