Function at 0x1400478d0
Capabilities:
Enumerate processes

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x18], rbp
mov qword [rsp + 0x20], rsi
push rdi
push r14
push r15
sub rsp, 0x180
movaps xmm0, xmmword [rdx]
xor r14d, r14d
movq rdi, xmm0
movaps xmmword [rsp + 0x40], xmm0
mov rax, rdi
mov r15, rdx
shr rax, 0x10
mov rbp, rcx
test ax, ax
jne 0x14004792f
mov rax, rdi
shr rax, 0x30
test eax, eax
jne 0x14004792f
mov rsi, qword [rsp + 0x48]
mov rax, rsi
shr rax, 0x10
test ax, ax
jne 0x14004792f
shr rdi, 0x20
jmp 0x140047937
movzx edi, r14w
movzx esi, r14w
movzx eax, si
mov ecx, r14d
movzx ebx, di
shl ebx, 0x10
or ebx, eax
lea rax, [0x140135f00]
nop dword [rax]
cmp ebx, dword [rax]
je 0x140047bd0
inc ecx
add rax, 4
cmp ecx, 0x3a
jb 0x140047950
lea rcx, str.SDL_JOYSTICK_ROG_CHAKRAM
call fcn.140048f70
xor edx, edx
mov rcx, rax
call fcn.140049010
test eax, eax
jne 0x14004799a
mov ecx, r14d
lea rax, [0x140133e58]
cmp ebx, dword [rax]
je 0x140047bd0
inc ecx
add rax, 4
cmp ecx, 6
jb 0x140047987
mov dword [rsp + 0x30], r14d
mov r9d, 0xffffffff
mov dword [rsp + 0x28], r14d
movzx r8d, si
movzx edx, di
mov dword [rsp + 0x20], r14d
mov rcx, rbp
call fcn.140047320
cmp eax, 4
je 0x1400479cc
cmp eax, 7
jne 0x140047b05
xor edx, edx
lea rax, str.DS4Windows.exe
mov qword [rsp + 0x40], rax
mov edi, r14d
lea rax, str.InputMapper.exe
mov qword [rsp + 0x48], rax
lea ecx, [rdx + 2]
call qword [sym.imp.KERNEL32.dll_CreateToolhelp32Snapshot]
mov rsi, rax
cmp rax, 0xffffffffffffffff
je 0x140047b05
lea rdx, [rsp + 0x50]
mov dword [rsp + 0x50], 0x130
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_Process32First]
test eax, eax
je 0x140047af4
nop dword [rax]
mov ebx, r14d
lea r11, [rsp + 0x40]
nop dword [rax + rax]
mov r8, qword [r11]
lea r10, [rsp + 0x7c]
sub r10, r8
nop dword [rax + rax]
movzx ecx, byte [r10 + r8]
movzx edx, byte [r8]
lea eax, [rcx - 0x61]
cmp eax, 0x19
lea r9d, [rcx - 0x20]
lea eax, [rdx - 0x61]
cmova r9d, ecx
cmp eax, 0x19
lea ecx, [rdx - 0x20]
cmova ecx, edx
cmp r9d, ecx
jne 0x140047a77
test r9d, r9d
je 0x140047a72
inc r8
jmp 0x140047a40
mov edi, 1
mov rax, qword [r11 + 8]
lea r10, [rsp + 0x7c]
sub r10, rax
nop dword [rax]
nop word [rax + rax]
movzx edx, byte [r10 + rax]
movzx r8d, byte [rax]
lea ecx, [rdx - 0x61]
cmp ecx, 0x19
lea r9d, [rdx - 0x20]
lea ecx, [r8 - 0x61]
cmova r9d, edx
cmp ecx, 0x19
lea edx, [r8 - 0x20]
cmova edx, r8d
cmp r9d, edx
jne 0x140047aca
test r9d, r9d
je 0x140047ac5
inc rax
jmp 0x140047a90
mov edi, 1
add ebx, 2
add r11, 0x10
cmp ebx, 2
jb 0x140047a30
lea rdx, [rsp + 0x50]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_Process32Next]
test eax, eax
je 0x140047af4
test edi, edi
je 0x140047a20
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
test edi, edi
jne 0x140047bd0
movaps xmm0, xmmword [r15]
lea rcx, [rsp + 0x40]
xor edx, edx
movdqa xmmword [rsp + 0x40], xmm0
call fcn.140020530
test rax, rax
jne 0x140047b2d
cmp qword [0x140183de8], r14
je 0x140047c13
cmp dword [0x140183e10], r14d
jne 0x140047b43
cmp dword [0x140183dd8], r14d
je 0x140047c13
movaps xmm0, xmmword [r15]
movq rbx, xmm0
movaps xmmword [rsp + 0x40], xmm0
mov rax, rbx
shr rax, 0x10
test ax, ax
jne 0x140047b7f
mov rax, rbx
shr rax, 0x30
test eax, eax
jne 0x140047b7f
mov rdi, qword [rsp + 0x48]
mov rax, rdi
shr rax, 0x10
test ax, ax
jne 0x140047b7f
shr rbx, 0x20
jmp 0x140047b87
movzx ebx, r14w
movzx edi, r14w
lea rcx, str.SDL_GAMECONTROLLER_ALLOW_STEAM_VIRTUAL_GAMEPAD
call fcn.140048f70
xor edx, edx
mov rcx, rax
call fcn.140049010
test eax, eax
jne 0x140047c13
mov edx, dword [0x140183e10]
movzx ecx, bx
shl ecx, 0x10
movzx eax, di
or ecx, eax
test edx, edx
jle 0x140047bf2
mov rax, qword [0x140183e18]
nop dword [rax]
cmp ecx, dword [rax]
je 0x140047c13
inc r14d
add rax, 4
cmp r14d, edx
jl 0x140047bc0
mov eax, 1
lea r11, [rsp + 0x180]
mov rbx, qword [r11 + 0x20]
mov rbp, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rsp, r11
pop r15
pop r14
pop rdi
ret
mov edx, dword [0x140183dd8]
test edx, edx
jle 0x140047c13
mov rax, qword [0x140183de0]
cmp ecx, dword [rax]
je 0x140047bd0
inc r14d
add rax, 4
cmp r14d, edx
jl 0x140047c03
xor eax, eax
jmp 0x140047bd5