Function at 0x18015c940
Capabilities:
Enumerate processes

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
mov qword [rsp + 0x20], r14
push r15
sub rsp, 0x1b0
mov rbx, rdx
mov rsi, rcx
call fcn.180270610
xor r14d, r14d
mov qword [rsp + 0x38], r14
mov qword [rsp + 0x30], r14
mov qword [rsp + 0x40], r14
lea rcx, str._OpenXR__OpenXR_system_Name:_
mov qword [rsp + 0x50], rcx
mov qword [rsp + 0x58], 0x1f
movups xmm0, xmmword [rsp + 0x30]
movaps xmmword [rsp + 0x60], xmm0
movsd xmm1, qword [rsp + 0x40]
movsd qword [rsp + 0x70], xmm1
lea rdi, [rbx + 0x1c]
mov qword [rsp + 0x20], rdi
lea r9, [rsp + 0x50]
lea r8d, [r14 + 2]
lea rdx, [rsp + 0x60]
mov rcx, rax
call fcn.18009c7b0
call fcn.180270610
mov qword [rsp + 0x38], r14
mov qword [rsp + 0x30], r14
mov qword [rsp + 0x40], r14
lea rcx, str._OpenXR__OpenXR_system_Vendor:_
mov qword [rsp + 0x50], rcx
mov qword [rsp + 0x58], 0x21
movups xmm0, xmmword [rsp + 0x30]
movaps xmmword [rsp + 0x60], xmm0
movsd xmm1, qword [rsp + 0x40]
movsd qword [rsp + 0x70], xmm1
lea rcx, [rbx + 0x18]
mov qword [rsp + 0x20], rcx
lea r9, [rsp + 0x50]
lea r8d, [r14 + 2]
lea rdx, [rsp + 0x60]
mov rcx, rax
call fcn.18000b120
call fcn.180270610
mov qword [rsp + 0x38], r14
mov qword [rsp + 0x30], r14
mov qword [rsp + 0x40], r14
lea rcx, str._OpenXR__OpenXR_system_max_width:_
mov qword [rsp + 0x50], rcx
mov qword [rsp + 0x58], 0x24
movups xmm0, xmmword [rsp + 0x30]
movaps xmmword [rsp + 0x60], xmm0
movsd xmm1, qword [rsp + 0x40]
movsd qword [rsp + 0x70], xmm1
lea rcx, [rbx + 0x120]
mov qword [rsp + 0x20], rcx
lea r9, [rsp + 0x50]
lea r8d, [r14 + 2]
lea rdx, [rsp + 0x60]
mov rcx, rax
call fcn.18000b120
call fcn.180270610
mov qword [rsp + 0x38], r14
mov qword [rsp + 0x30], r14
mov qword [rsp + 0x40], r14
lea rcx, str._OpenXR__OpenXR_system_max_height:_
mov qword [rsp + 0x50], rcx
mov qword [rsp + 0x58], 0x25
movups xmm0, xmmword [rsp + 0x30]
movaps xmmword [rsp + 0x60], xmm0
movsd xmm1, qword [rsp + 0x40]
movsd qword [rsp + 0x70], xmm1
lea rcx, [rbx + 0x11c]
mov qword [rsp + 0x20], rcx
lea r9, [rsp + 0x50]
lea r8d, [r14 + 2]
lea rdx, [rsp + 0x60]
mov rcx, rax
call fcn.18000b120
call fcn.180270610
mov qword [rsp + 0x38], r14
mov qword [rsp + 0x30], r14
mov qword [rsp + 0x40], r14
lea rcx, str._OpenXR__OpenXR_system_supports__layers
mov qword [rsp + 0x50], rcx
mov qword [rsp + 0x58], 0x29
movups xmm0, xmmword [rsp + 0x30]
movaps xmmword [rsp + 0x60], xmm0
movsd xmm1, qword [rsp + 0x40]
movsd qword [rsp + 0x70], xmm1
lea rcx, [rbx + 0x124]
mov qword [rsp + 0x20], rcx
lea r9, [rsp + 0x50]
lea r8d, [r14 + 2]
lea rdx, [rsp + 0x60]
mov rcx, rax
call fcn.18000b120
call fcn.180270610
mov qword [rsp + 0x38], r14
mov qword [rsp + 0x30], r14
mov qword [rsp + 0x40], r14
lea rcx, str._OpenXR__OpenXR_system_orientation:_
mov qword [rsp + 0x50], rcx
mov qword [rsp + 0x58], 0x26
movups xmm0, xmmword [rsp + 0x30]
movaps xmmword [rsp + 0x60], xmm0
movsd xmm1, qword [rsp + 0x40]
movsd qword [rsp + 0x70], xmm1
lea rcx, [rbx + 0x128]
mov qword [rsp + 0x20], rcx
lea r9, [rsp + 0x50]
lea r8d, [r14 + 2]
lea rdx, [rsp + 0x60]
mov rcx, rax
call fcn.18000b120
call fcn.180270610
mov qword [rsp + 0x38], r14
mov qword [rsp + 0x30], r14
mov qword [rsp + 0x40], r14
lea rcx, str._OpenXR__OpenXR_system_position:_
mov qword [rsp + 0x50], rcx
mov qword [rsp + 0x58], 0x23
movups xmm0, xmmword [rsp + 0x30]
movaps xmmword [rsp + 0x60], xmm0
movsd xmm1, qword [rsp + 0x40]
movsd qword [rsp + 0x70], xmm1
lea rcx, [rbx + 0x12c]
mov qword [rsp + 0x20], rcx
lea r9, [rsp + 0x50]
lea r8d, [r14 + 2]
lea rdx, [rsp + 0x60]
mov rcx, rax
call fcn.18000b120
mov rax, qword [rsi + 0x950]
cmp byte [rax + 8], r14b
jne 0x18015ce2b
mov rax, 0xffffffffffffffff
nop
inc rax
cmp byte [rdi + rax], r14b
jne 0x18015cc20
cmp rax, 0xe
jb 0x18015ce2b
lea rbx, [rax + rdi]
lea r8, [rbx - 0xd]
sub r8, rdi
mov edx, 0x53
mov rcx, rdi
call fcn.1802bc7d0
test rax, rax
je 0x18015ce2b
movabs r14, 0x2f52566d61657453
nop
cmp qword [rax], r14
jne 0x18015ce0b
cmp dword [rax + 8], 0x6e65704f
jne 0x18015ce0b
cmp word [rax + 0xc], 0x5258
jne 0x18015ce0b
sub rax, rdi
cmp rax, 0xffffffffffffffff
je 0x18015ce2b
lea rcx, str._OpenXR__Detected_SteamVR_OpenXR__checking_for_Virtual_Desktop_Streamer...
call fcn.180023fc0
xor edx, edx
mov r8d, 0x130
lea rcx, [rsp + 0x80]
call fcn.1802bd010
mov dword [rsp + 0x80], 0x130
xor edx, edx
lea ecx, [rdx + 2]
call sub.KERNEL32.dll_CreateToolhelp32Snapshot
mov rdi, rax
cmp rax, 0xffffffffffffffff
jne 0x18015ccdf
lea rcx, str._OpenXR__Failed_to_take_a_snapshot_of_all_processes_in_the_system.
call fcn.18000a2d0
jmp 0x18015ce2b
lea rdx, [rsp + 0x80]
mov rcx, rdi
call sub.KERNEL32.dll_Process32First
test eax, eax
jne 0x18015cd20
call fcn.180270610
lea r8, str._OpenXR__Failed_to_retrieve_information_about_the_first_process.
mov edx, 4
mov rcx, rax
call fcn.1800240e0
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x18015ce2b
lea rax, [rsp + 0xac]
mov qword [rsp + 0x50], rax
lea rcx, [rsp + 0xac]
mov rax, 0xffffffffffffffff
nop dword [rax]
inc rax
cmp byte [rcx + rax], 0
jne 0x18015cd40
mov qword [rsp + 0x58], rax
lea r15, [rsp + 0xac]
cmp rax, 0x1b
jb 0x18015cdd4
lea r14, [rsp + 0x92]
add r14, rax
lea rbx, [rsp + 0xac]
nop
mov r8, r14
sub r8, rbx
mov edx, 0x56
mov rcx, rbx
call fcn.1802bc7d0
mov rbx, rax
test rax, rax
je 0x18015cdd4
mov r8d, 0x1b
lea rdx, str.VirtualDesktop.Streamer.exe
mov rcx, rax
call fcn.1802bc870
test eax, eax
jne 0x18015cdcf
sub rbx, r15
cmp rbx, 0xffffffffffffffff
je 0x18015cdd4
call fcn.180270610
lea r8, str._OpenXR__Detected_Virtual_Desktop__enabling_Virtual_Desktop_fix.
mov edx, 2
mov rcx, rax
call fcn.1800240e0
mov byte [rsi + 0x958], 1
jmp 0x18015cdff
inc rbx
jmp 0x18015cd70
lea rdx, [rsp + 0x80]
mov rcx, rdi
call sub.KERNEL32.dll_Process32Next
test eax, eax
jne 0x18015cd20
lea rcx, str._OpenXR__Did_not_detect_Virtual_Desktop__disabling_Virtual_Desktop_fix.
call fcn.180023fc0
mov byte [rsi + 0x958], 0
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
nop
jmp 0x18015ce2b
inc rax
lea r8, [rbx - 0xd]
sub r8, rax
mov edx, 0x53
mov rcx, rax
call fcn.1802bc7d0
test rax, rax
jne 0x18015cc60
lea r11, [rsp + 0x1b0]
mov rbx, qword [r11 + 0x10]
mov rsi, qword [r11 + 0x18]
mov rdi, qword [r11 + 0x20]
mov r14, qword [r11 + 0x28]
mov rsp, r11
pop r15
ret