Function at 0x140007760
Capabilities:
Enumerate processes
Terminate process
Terminate process by name

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
push r14
push r15
lea rbp, [rsp - 0x80]
sub rsp, 0x180
mov rax, qword [0x14003e080]
xor rax, rsp
mov qword [rbp + 0x70], rax
lea rsi, [0x1403ed820]
lea r14, [0x1403ed860]
lea r15, [0x1403ed840]
lea rcx, [rbp + 0x50]
call fcn.140007560
nop
mov ecx, 0x3e8
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rdx, [rbp + 0x50]
cmp qword [rbp + 0x68], 0xf
seta r9b
mov rcx, qword [rbp + 0x50]
cmova rdx, rcx
mov r8, qword [rbp + 0x60]
cmp r8, 3
jne 0x140007832
cmp byte [rdx], 0x30
jne 0x1400077ec
cmp byte [rdx + 1], 0x78
jne 0x1400077ec
cmp byte [rdx + 2], 0x30
jne 0x1400077ec
xor eax, eax
jmp 0x1400077f1
sbb eax, eax
or eax, 1
test eax, eax
jne 0x140007832
mov rax, qword [rbp + 0x68]
cmp rax, 0xf
jbe 0x1400077a3
lea rdx, [rax + 1]
cmp rdx, 0x1000
mov rax, rcx
jb 0x140007828
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140007b2c
call fcn.1400093b0
jmp 0x1400077a3
lea rax, [rbp + 0x50]
test r9b, r9b
cmovne rax, rcx
cmp r8, 3
jne 0x14000786b
cmp byte [rax], 0x30
jne 0x140007858
cmp byte [rax + 1], 0x78
jne 0x140007858
cmp byte [rax + 2], 0x31
jne 0x140007858
xor eax, eax
jmp 0x14000785d
sbb eax, eax
or eax, 1
test eax, eax
jne 0x14000786b
call fcn.1400038f0
jmp 0x140007af4
lea rax, [rbp + 0x50]
test r9b, r9b
cmovne rax, rcx
cmp r8, 3
jne 0x14000793e
cmp byte [rax], 0x30
jne 0x140007895
cmp byte [rax + 1], 0x78
jne 0x140007895
cmp byte [rax + 2], 0x32
jne 0x140007895
xor eax, eax
jmp 0x14000789a
sbb eax, eax
or eax, 1
test eax, eax
jne 0x14000793e
mov byte [0x1403ed818], al
xor edx, edx
mov r8d, 0x12c
lea rcx, [rsp + 0x24]
call fcn.14002b3e0
mov dword [rsp + 0x20], 0x130
xor edx, edx
lea ecx, [rdx + 2]
call qword [sym.imp.KERNEL32.dll_CreateToolhelp32Snapshot]
mov rdi, rax
lea rdx, [rsp + 0x20]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_Process32First]
test eax, eax
je 0x140007930
lea rdx, [rsp + 0x4c]
lea rcx, str.gkjdhsawdv.exe
call fcn.14002ac60
test eax, eax
jne 0x14000791e
mov r8d, dword [rsp + 0x28]
xor edx, edx
lea ecx, [rax + 1]
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov rbx, rax
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_TerminateProcess]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea rdx, [rsp + 0x20]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_Process32Next]
test eax, eax
jne 0x1400078e2
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x140007af4
lea rax, [rbp + 0x50]
test r9b, r9b
cmovne rax, rcx
cmp r8, 3
jne 0x14000798a
cmp byte [rax], 0x30
jne 0x140007964
cmp byte [rax + 1], 0x78
jne 0x140007964
cmp byte [rax + 2], 0x33
jne 0x140007964
xor eax, eax
jmp 0x140007969
sbb eax, eax
or eax, 1
test eax, eax
jne 0x14000798a
mov rdx, rsi
cmp qword [0x1403ed838], 0xf
cmova rdx, qword [0x1403ed820]
call fcn.140002410
jmp 0x140007af4
lea rax, [rbp + 0x50]
test r9b, r9b
cmovne rax, rcx
cmp r8, 3
jne 0x1400079d6
cmp byte [rax], 0x30
jne 0x1400079b0
cmp byte [rax + 1], 0x78
jne 0x1400079b0
cmp byte [rax + 2], 0x34
jne 0x1400079b0
xor eax, eax
jmp 0x1400079b5
sbb eax, eax
or eax, 1
test eax, eax
jne 0x1400079d6
mov rdx, r14
cmp qword [0x1403ed878], 0xf
cmova rdx, qword [0x1403ed860]
call fcn.140002410
jmp 0x140007af4
lea rax, [rbp + 0x50]
test r9b, r9b
cmovne rax, rcx
cmp r8, 3
jne 0x140007a22
cmp byte [rax], 0x30
jne 0x1400079fc
cmp byte [rax + 1], 0x78
jne 0x1400079fc
cmp byte [rax + 2], 0x35
jne 0x1400079fc
xor eax, eax
jmp 0x140007a01
sbb eax, eax
or eax, 1
test eax, eax
jne 0x140007a22
mov rdx, r15
cmp qword [0x1403ed858], 0xf
cmova rdx, qword [0x1403ed840]
call fcn.140002410
jmp 0x140007af4
lea rax, [rbp + 0x50]
test r9b, r9b
cmovne rax, rcx
cmp r8, 3
jne 0x140007a69
cmp byte [rax], 0x30
jne 0x140007a48
cmp byte [rax + 1], 0x78
jne 0x140007a48
cmp byte [rax + 2], 0x36
jne 0x140007a48
xor eax, eax
jmp 0x140007a4d
sbb eax, eax
or eax, 1
test eax, eax
jne 0x140007a69
mov rdx, rsi
cmp qword [0x1403ed838], 0xf
cmova rdx, qword [0x1403ed820]
jmp 0x140007aef
lea rax, [rbp + 0x50]
test r9b, r9b
cmovne rax, rcx
cmp r8, 3
jne 0x140007aad
cmp byte [rax], 0x30
jne 0x140007a8f
cmp byte [rax + 1], 0x78
jne 0x140007a8f
cmp byte [rax + 2], 0x37
jne 0x140007a8f
xor eax, eax
jmp 0x140007a94
sbb eax, eax
or eax, 1
test eax, eax
jne 0x140007aad
mov rdx, r14
cmp qword [0x1403ed878], 0xf
cmova rdx, qword [0x1403ed860]
jmp 0x140007aef
lea rax, [rbp + 0x50]
test r9b, r9b
cmovne rax, rcx
cmp r8, 3
jne 0x140007af8
cmp byte [rax], 0x30
jne 0x140007ad3
cmp byte [rax + 1], 0x78
jne 0x140007ad3
cmp byte [rax + 2], 0x38
jne 0x140007ad3
xor eax, eax
jmp 0x140007ad8
sbb eax, eax
or eax, 1
test eax, eax
jne 0x140007af8
mov rdx, r15
cmp qword [0x1403ed858], 0xf
cmova rdx, qword [0x1403ed840]
call fcn.1400029b0
mov rcx, qword [rbp + 0x50]
lea rdx, [rbp + 0x50]
cmp qword [rbp + 0x68], 0xf
cmova rdx, rcx
lea rcx, [0x1400384d4]
call fcn.140007510
nop
mov rdx, qword [rbp + 0x68]
cmp rdx, 0xf
jbe 0x1400077a3
inc rdx
mov rcx, qword [rbp + 0x50]
jmp 0x140007803
call fcn.140011d64
int3