Function at 0x180081070
Capabilities:
Enumerate process modules
Terminate process

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
push r14
push r15
sub rsp, 0x9d0
lea rbp, [rsp + 0x40]
and rbp, 0xffffffffffffffe0
mov rax, qword [0x180235010]
xor rax, rsp
mov qword [rbp + 0x980], rax
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov edx, eax
mov ecx, 0x18
call qword [sym.imp.KERNEL32.dll_CreateToolhelp32Snapshot]
mov rdi, rax
mov ebx, 8
cmp rax, 0xffffffffffffffff
je 0x1800811a3
lea rdx, [rbp + 0x480]
mov dword [rbp + 0x480], 0x438
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_Module32FirstW]
test eax, eax
je 0x1800811a3
lea rdx, str.GameAssembly.dll
lea rcx, [rbp + 0x4b0]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
je 0x180081116
lea rdx, [rbp + 0x480]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_Module32NextW]
jmp 0x1800810e4
lea rcx, [rbp + 0x40]
mov rdx, rbx
lea rax, [rbp + 0x480]
nop dword [rax]
nop dword [rax + rax]
lea rcx, [rcx + 0x80]
movups xmm0, xmmword [rax]
movups xmm1, xmmword [rax + 0x10]
lea rax, [rax + 0x80]
movups xmmword [rcx - 0x80], xmm0
movups xmm0, xmmword [rax - 0x60]
movups xmmword [rcx - 0x70], xmm1
movups xmm1, xmmword [rax - 0x50]
movups xmmword [rcx - 0x60], xmm0
movups xmm0, xmmword [rax - 0x40]
movups xmmword [rcx - 0x50], xmm1
movups xmm1, xmmword [rax - 0x30]
movups xmmword [rcx - 0x40], xmm0
movups xmm0, xmmword [rax - 0x20]
movups xmmword [rcx - 0x30], xmm1
movups xmm1, xmmword [rax - 0x10]
movups xmmword [rcx - 0x20], xmm0
movups xmmword [rcx - 0x10], xmm1
sub rdx, 1
jne 0x180081130
movups xmm0, xmmword [rax]
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx], xmm0
movups xmm0, xmmword [rax + 0x20]
mov rax, qword [rax + 0x30]
movups xmmword [rcx + 0x10], xmm1
movups xmmword [rcx + 0x20], xmm0
mov qword [rcx + 0x30], rax
jmp 0x1800811bd
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
xor edx, edx
lea rcx, [rbp + 0x40]
mov r8d, 0x438
call sub.VCRUNTIME140.dll_memset
lea rdx, [0x180343ff0]
lea rax, [rbp + 0x40]
nop dword [rax + rax]
lea rdx, [rdx + 0x80]
movups xmm0, xmmword [rax]
movups xmm1, xmmword [rax + 0x10]
lea rax, [rax + 0x80]
movups xmmword [rdx - 0x80], xmm0
movups xmm0, xmmword [rax - 0x60]
movups xmmword [rdx - 0x70], xmm1
movups xmm1, xmmword [rax - 0x50]
movups xmmword [rdx - 0x60], xmm0
movups xmm0, xmmword [rax - 0x40]
movups xmmword [rdx - 0x50], xmm1
movups xmm1, xmmword [rax - 0x30]
movups xmmword [rdx - 0x40], xmm0
movups xmm0, xmmword [rax - 0x20]
movups xmmword [rdx - 0x30], xmm1
movups xmm1, xmmword [rax - 0x10]
movups xmmword [rdx - 0x20], xmm0
movups xmmword [rdx - 0x10], xmm1
sub rbx, 1
jne 0x1800811d0
movups xmm0, xmmword [rax]
mov rcx, qword [rax + 0x30]
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rdx], xmm0
movups xmm0, xmmword [rax + 0x20]
mov rax, qword [rbp + 0x58]
movups xmmword [rdx + 0x10], xmm1
movups xmmword [rdx + 0x20], xmm0
mov qword [rdx + 0x30], rcx
mov qword [0x180344428], rax
mov rax, qword [rbp + 0x68]
mov qword [0x180343fd8], rax
call fcn.180076df0
movabs rbx, 0xb9d338ebd21aa9d8
movabs rdi, 0x5db02396d63d985b
test al, al
jne 0x1800813bb
movabs rax, 0x33d564f9a459e113
lea r8, [rbp + 0x10]
mov qword [rbp], rax
lea rdx, [rbp + 0x900]
mov rax, qword [rbp]
movabs rsi, 0xb38b33dc38cbad95
mov qword [rbp + 0x10], rax
movabs r14, 0x7dd2b5f95b048392
mov qword [rbp], rbx
xor r9d, r9d
mov rax, qword [rbp]
xor ecx, ecx
mov qword [rbp + 0x18], rax
mov qword [rbp], rdi
mov rax, qword [rbp]
mov qword [rbp], rbx
mov qword [rbp + 0x940], rax
mov rax, qword [rbp]
mov qword [rbp + 0x948], rax
movabs rax, 0x99047f3ba54f91d
movdqa xmm0, xmmword [rbp + 0x940]
pxor xmm0, xmmword [rbp + 0x10]
movdqa xmmword [rbp + 0x10], xmm0
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x900], rax
movabs rax, 0xd8ba4c82bc5389b7
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x908], rax
movabs rax, 0x81e75afc5db1c4f9
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x910], rax
movabs rax, 0x7dd2b5f97a74f3f1
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x918], rax
mov qword [rbp], rdi
mov rax, qword [rbp]
mov qword [rbp + 0x8c0], rax
mov qword [rbp], rbx
mov rax, qword [rbp]
mov qword [rbp + 0x8c8], rax
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0x8d0], rax
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0x8d8], rax
vmovdqu ymm0, ymmword [rbp + 0x8c0]
vpxor ymm1, ymm0, ymmword [rbp + 0x900]
vmovdqa ymmword [rbp + 0x900], ymm1
vzeroupper
call qword [sym.imp.USER32.dll_MessageBoxA]
mov ecx, 0xffffffff
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea rdx, [rbp + 0x20]
movabs r15, 0xe073d5e471d100
movabs rsi, 0xb38b33dc38cbad95
mov qword [rbp], r15
movabs r14, 0x7dd2b5f95b048392
mov rax, qword [rbp]
mov qword [rbp + 0x20], rax
movabs rax, 0xdebd518fbc73eff8
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x28], rax
movabs rax, 0xc0ff56af5eade2b5
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x30], rax
movabs rax, 0x7dd2b5f95b2aadbc
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x38], rax
mov qword [rbp], rdi
mov rax, qword [rbp]
mov qword [rbp + 0x960], rax
mov qword [rbp], rbx
mov rax, qword [rbp]
mov qword [rbp + 0x968], rax
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0x970], rax
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0x978], rax
vmovdqu ymm0, ymmword [rbp + 0x960]
vpxor ymm1, ymm0, ymmword [rbp + 0x20]
vmovdqa ymmword [rbp + 0x20], ymm1
vzeroupper
call fcn.180060d10
lea rdx, [0x180060ee0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rcx, [0x180342da0]
call fcn.180076160
cmp byte [0x180235252], 0
movabs rdx, 0xa9ef5ee59a78f4f6
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
je 0x18008155d
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0x8c0], rax
movabs rax, 0xdfb577cbbe76e8f8
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x8c8], rax
movabs rax, 0xc5ea7bfc4bbfc8e6
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x8d0], rax
movabs rax, 0x2ef2db9c3e46a3f7
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x8d8], rax
movabs rax, 0xe2c50771da50eb9a
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x8e0], rax
movabs rax, 0xe28676e1e7e01d10
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x8e8], rax
movabs rax, 0xf5d845f82f5caaed
jmp 0x1800815fd
movabs rax, 0x7de073d5e471d100
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x8c0], rax
movabs rax, 0xf7f365b99d48fb9d
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x8c8], rax
movabs rax, 0xfcab5fb079ebd9fa
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x8d0], rax
movabs rax, 0x3bf2c68d3e77e5f4
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x8d8], rax
movabs rax, 0xffe05423db5dfd80
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x8e0], rax
movabs rax, 0xff9d76e4e7f21219
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x8e8], rax
movabs rax, 0xf5d845f80e39e7e6
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x8f0], rax
mov qword [rbp], rdx
mov rax, qword [rbp]
mov qword [rbp + 0x8f8], rax
mov qword [rbp], rdi
mov rax, qword [rbp]
mov qword [rbp + 0x900], rax
mov qword [rbp], rbx
mov rax, qword [rbp]
mov qword [rbp + 0x908], rax
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0x910], rax
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0x918], rax
movabs rax, 0x97a37402bf3388ef
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x920], rax
movabs rax, 0x8cf319a7c799717c
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x928], rax
movabs rax, 0xf5d845f82f5c8b89
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x930], rax
mov qword [rbp], rdx
lea rdx, [rbp + 0x8c0]
mov rax, qword [rbp]
vmovdqu ymm0, ymmword [rbp + 0x900]
vpxor ymm1, ymm0, ymmword [rbp + 0x8c0]
vmovdqa ymmword [rbp + 0x8c0], ymm1
mov qword [rbp + 0x938], rax
vmovdqu ymm0, ymmword [rbp + 0x920]
vpxor ymm1, ymm0, ymmword [rbp + 0x8e0]
vmovdqa ymmword [rbp + 0x8e0], ymm1
vzeroupper
call fcn.180060d10
lea rdx, [0x180060ee0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov rax, qword [0x180342da8]
call rax
mov rcx, rax
call qword [0x180342da0]
call fcn.180078e90
mov rcx, qword [rbp + 0x980]
xor rcx, rsp
call fcn.1800833d0
lea r11, [rsp + 0x9d0]
mov rbx, qword [r11 + 0x20]
mov rsi, qword [r11 + 0x28]
mov rdi, qword [r11 + 0x30]
mov rsp, r11
pop r15
pop r14
pop rbp
ret