Function at 0x180158530
Capabilities:
Enumerate processes

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
mov qword [rsp + 0x20], r14
push r15
sub rsp, 0x1b0
mov rbx, rdx
mov rsi, rcx
call fcn.180269230
xor r14d, r14d
mov qword [rsp + 0x38], r14
mov qword [rsp + 0x30], r14
mov qword [rsp + 0x40], r14
lea rcx, str._OpenXR__OpenXR_system_Name:_
mov qword [rsp + 0x50], rcx
mov qword [rsp + 0x58], 0x1f
movups xmm0, xmmword [rsp + 0x30]
movaps xmmword [rsp + 0x60], xmm0
movsd xmm1, qword [rsp + 0x40]
movsd qword [rsp + 0x70], xmm1
lea rdi, [rbx + 0x1c]
mov qword [rsp + 0x20], rdi
lea r9, [rsp + 0x50]
lea r8d, [r14 + 2]
lea rdx, [rsp + 0x60]
mov rcx, rax
call fcn.18009b8c0
call fcn.180269230
mov qword [rsp + 0x38], r14
mov qword [rsp + 0x30], r14
mov qword [rsp + 0x40], r14
lea rcx, str._OpenXR__OpenXR_system_Vendor:_
mov qword [rsp + 0x50], rcx
mov qword [rsp + 0x58], 0x21
movups xmm0, xmmword [rsp + 0x30]
movaps xmmword [rsp + 0x60], xmm0
movsd xmm1, qword [rsp + 0x40]
movsd qword [rsp + 0x70], xmm1
lea rcx, [rbx + 0x18]
mov qword [rsp + 0x20], rcx
lea r9, [rsp + 0x50]
lea r8d, [r14 + 2]
lea rdx, [rsp + 0x60]
mov rcx, rax
call fcn.18000ae00
call fcn.180269230
mov qword [rsp + 0x38], r14
mov qword [rsp + 0x30], r14
mov qword [rsp + 0x40], r14
lea rcx, str._OpenXR__OpenXR_system_max_width:_
mov qword [rsp + 0x50], rcx
mov qword [rsp + 0x58], 0x24
movups xmm0, xmmword [rsp + 0x30]
movaps xmmword [rsp + 0x60], xmm0
movsd xmm1, qword [rsp + 0x40]
movsd qword [rsp + 0x70], xmm1
lea rcx, [rbx + 0x120]
mov qword [rsp + 0x20], rcx
lea r9, [rsp + 0x50]
lea r8d, [r14 + 2]
lea rdx, [rsp + 0x60]
mov rcx, rax
call fcn.18000ae00
call fcn.180269230
mov qword [rsp + 0x38], r14
mov qword [rsp + 0x30], r14
mov qword [rsp + 0x40], r14
lea rcx, str._OpenXR__OpenXR_system_max_height:_
mov qword [rsp + 0x50], rcx
mov qword [rsp + 0x58], 0x25
movups xmm0, xmmword [rsp + 0x30]
movaps xmmword [rsp + 0x60], xmm0
movsd xmm1, qword [rsp + 0x40]
movsd qword [rsp + 0x70], xmm1
lea rcx, [rbx + 0x11c]
mov qword [rsp + 0x20], rcx
lea r9, [rsp + 0x50]
lea r8d, [r14 + 2]
lea rdx, [rsp + 0x60]
mov rcx, rax
call fcn.18000ae00
call fcn.180269230
mov qword [rsp + 0x38], r14
mov qword [rsp + 0x30], r14
mov qword [rsp + 0x40], r14
lea rcx, str._OpenXR__OpenXR_system_supports__layers
mov qword [rsp + 0x50], rcx
mov qword [rsp + 0x58], 0x29
movups xmm0, xmmword [rsp + 0x30]
movaps xmmword [rsp + 0x60], xmm0
movsd xmm1, qword [rsp + 0x40]
movsd qword [rsp + 0x70], xmm1
lea rcx, [rbx + 0x124]
mov qword [rsp + 0x20], rcx
lea r9, [rsp + 0x50]
lea r8d, [r14 + 2]
lea rdx, [rsp + 0x60]
mov rcx, rax
call fcn.18000ae00
call fcn.180269230
mov qword [rsp + 0x38], r14
mov qword [rsp + 0x30], r14
mov qword [rsp + 0x40], r14
lea rcx, str._OpenXR__OpenXR_system_orientation:_
mov qword [rsp + 0x50], rcx
mov qword [rsp + 0x58], 0x26
movups xmm0, xmmword [rsp + 0x30]
movaps xmmword [rsp + 0x60], xmm0
movsd xmm1, qword [rsp + 0x40]
movsd qword [rsp + 0x70], xmm1
lea rcx, [rbx + 0x128]
mov qword [rsp + 0x20], rcx
lea r9, [rsp + 0x50]
lea r8d, [r14 + 2]
lea rdx, [rsp + 0x60]
mov rcx, rax
call fcn.18000ae00
call fcn.180269230
mov qword [rsp + 0x38], r14
mov qword [rsp + 0x30], r14
mov qword [rsp + 0x40], r14
lea rcx, str._OpenXR__OpenXR_system_position:_
mov qword [rsp + 0x50], rcx
mov qword [rsp + 0x58], 0x23
movups xmm0, xmmword [rsp + 0x30]
movaps xmmword [rsp + 0x60], xmm0
movsd xmm1, qword [rsp + 0x40]
movsd qword [rsp + 0x70], xmm1
lea rcx, [rbx + 0x12c]
mov qword [rsp + 0x20], rcx
lea r9, [rsp + 0x50]
lea r8d, [r14 + 2]
lea rdx, [rsp + 0x60]
mov rcx, rax
call fcn.18000ae00
mov rax, qword [rsi + 0x920]
cmp byte [rax + 8], r14b
jne 0x180158a1b
mov rax, 0xffffffffffffffff
nop
inc rax
cmp byte [rdi + rax], r14b
jne 0x180158810
cmp rax, 0xe
jb 0x180158a1b
lea rbx, [rax + rdi]
lea r8, [rbx - 0xd]
sub r8, rdi
mov edx, 0x53
mov rcx, rdi
call fcn.1802d0fc0
test rax, rax
je 0x180158a1b
movabs r14, 0x2f52566d61657453
nop
cmp qword [rax], r14
jne 0x1801589fb
cmp dword [rax + 8], 0x6e65704f
jne 0x1801589fb
cmp word [rax + 0xc], 0x5258
jne 0x1801589fb
sub rax, rdi
cmp rax, 0xffffffffffffffff
je 0x180158a1b
lea rcx, str._OpenXR__Detected_SteamVR_OpenXR__checking_for_Virtual_Desktop_Streamer...
call fcn.180023ca0
xor edx, edx
mov r8d, 0x130
lea rcx, [rsp + 0x80]
call fcn.1802d1800
mov dword [rsp + 0x80], 0x130
xor edx, edx
lea ecx, [rdx + 2]
call sub.KERNEL32.dll_CreateToolhelp32Snapshot
mov rdi, rax
cmp rax, 0xffffffffffffffff
jne 0x1801588cf
lea rcx, str._OpenXR__Failed_to_take_a_snapshot_of_all_processes_in_the_system.
call fcn.180009fb0
jmp 0x180158a1b
lea rdx, [rsp + 0x80]
mov rcx, rdi
call sub.KERNEL32.dll_Process32First
test eax, eax
jne 0x180158910
call fcn.180269230
lea r8, str._OpenXR__Failed_to_retrieve_information_about_the_first_process.
mov edx, 4
mov rcx, rax
call fcn.180023dc0
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x180158a1b
lea rax, [rsp + 0xac]
mov qword [rsp + 0x50], rax
lea rcx, [rsp + 0xac]
mov rax, 0xffffffffffffffff
nop dword [rax]
inc rax
cmp byte [rcx + rax], 0
jne 0x180158930
mov qword [rsp + 0x58], rax
lea r15, [rsp + 0xac]
cmp rax, 0x1b
jb 0x1801589c4
lea r14, [rsp + 0x92]
add r14, rax
lea rbx, [rsp + 0xac]
nop
mov r8, r14
sub r8, rbx
mov edx, 0x56
mov rcx, rbx
call fcn.1802d0fc0
mov rbx, rax
test rax, rax
je 0x1801589c4
mov r8d, 0x1b
lea rdx, str.VirtualDesktop.Streamer.exe
mov rcx, rax
call fcn.1802d1060
test eax, eax
jne 0x1801589bf
sub rbx, r15
cmp rbx, 0xffffffffffffffff
je 0x1801589c4
call fcn.180269230
lea r8, str._OpenXR__Detected_Virtual_Desktop__enabling_Virtual_Desktop_fix.
mov edx, 2
mov rcx, rax
call fcn.180023dc0
mov byte [rsi + 0x928], 1
jmp 0x1801589ef
inc rbx
jmp 0x180158960
lea rdx, [rsp + 0x80]
mov rcx, rdi
call sub.KERNEL32.dll_Process32Next
test eax, eax
jne 0x180158910
lea rcx, str._OpenXR__Did_not_detect_Virtual_Desktop__disabling_Virtual_Desktop_fix.
call fcn.180023ca0
mov byte [rsi + 0x928], 0
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
nop
jmp 0x180158a1b
inc rax
lea r8, [rbx - 0xd]
sub r8, rax
mov edx, 0x53
mov rcx, rax
call fcn.1802d0fc0
test rax, rax
jne 0x180158850
lea r11, [rsp + 0x1b0]
mov rbx, qword [r11 + 0x10]
mov rsi, qword [r11 + 0x18]
mov rdi, qword [r11 + 0x20]
mov r14, qword [r11 + 0x28]
mov rsp, r11
pop r15
ret