Function at 0x18014a420
Capabilities:
Enumerate processes

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
mov qword [rsp + 0x20], r14
push r15
sub rsp, 0x1b0
mov rbx, rdx
mov rsi, rcx
call fcn.180254440
xor r14d, r14d
mov qword [rsp + 0x38], r14
mov qword [rsp + 0x30], r14
mov qword [rsp + 0x40], r14
lea rcx, str._OpenXR__OpenXR_system_Name:_
mov qword [rsp + 0x50], rcx
mov qword [rsp + 0x58], 0x1f
movups xmm0, xmmword [rsp + 0x30]
movaps xmmword [rsp + 0x60], xmm0
movsd xmm1, qword [rsp + 0x40]
movsd qword [rsp + 0x70], xmm1
lea rdi, [rbx + 0x1c]
mov qword [rsp + 0x20], rdi
lea r9, [rsp + 0x50]
lea r8d, [r14 + 2]
lea rdx, [rsp + 0x60]
mov rcx, rax
call fcn.180094cd0
call fcn.180254440
mov qword [rsp + 0x38], r14
mov qword [rsp + 0x30], r14
mov qword [rsp + 0x40], r14
lea rcx, str._OpenXR__OpenXR_system_Vendor:_
mov qword [rsp + 0x50], rcx
mov qword [rsp + 0x58], 0x21
movups xmm0, xmmword [rsp + 0x30]
movaps xmmword [rsp + 0x60], xmm0
movsd xmm1, qword [rsp + 0x40]
movsd qword [rsp + 0x70], xmm1
lea rcx, [rbx + 0x18]
mov qword [rsp + 0x20], rcx
lea r9, [rsp + 0x50]
lea r8d, [r14 + 2]
lea rdx, [rsp + 0x60]
mov rcx, rax
call fcn.18000b480
call fcn.180254440
mov qword [rsp + 0x38], r14
mov qword [rsp + 0x30], r14
mov qword [rsp + 0x40], r14
lea rcx, str._OpenXR__OpenXR_system_max_width:_
mov qword [rsp + 0x50], rcx
mov qword [rsp + 0x58], 0x24
movups xmm0, xmmword [rsp + 0x30]
movaps xmmword [rsp + 0x60], xmm0
movsd xmm1, qword [rsp + 0x40]
movsd qword [rsp + 0x70], xmm1
lea rcx, [rbx + 0x120]
mov qword [rsp + 0x20], rcx
lea r9, [rsp + 0x50]
lea r8d, [r14 + 2]
lea rdx, [rsp + 0x60]
mov rcx, rax
call fcn.18000b480
call fcn.180254440
mov qword [rsp + 0x38], r14
mov qword [rsp + 0x30], r14
mov qword [rsp + 0x40], r14
lea rcx, str._OpenXR__OpenXR_system_max_height:_
mov qword [rsp + 0x50], rcx
mov qword [rsp + 0x58], 0x25
movups xmm0, xmmword [rsp + 0x30]
movaps xmmword [rsp + 0x60], xmm0
movsd xmm1, qword [rsp + 0x40]
movsd qword [rsp + 0x70], xmm1
lea rcx, [rbx + 0x11c]
mov qword [rsp + 0x20], rcx
lea r9, [rsp + 0x50]
lea r8d, [r14 + 2]
lea rdx, [rsp + 0x60]
mov rcx, rax
call fcn.18000b480
call fcn.180254440
mov qword [rsp + 0x38], r14
mov qword [rsp + 0x30], r14
mov qword [rsp + 0x40], r14
lea rcx, str._OpenXR__OpenXR_system_supports__layers
mov qword [rsp + 0x50], rcx
mov qword [rsp + 0x58], 0x29
movups xmm0, xmmword [rsp + 0x30]
movaps xmmword [rsp + 0x60], xmm0
movsd xmm1, qword [rsp + 0x40]
movsd qword [rsp + 0x70], xmm1
lea rcx, [rbx + 0x124]
mov qword [rsp + 0x20], rcx
lea r9, [rsp + 0x50]
lea r8d, [r14 + 2]
lea rdx, [rsp + 0x60]
mov rcx, rax
call fcn.18000b480
call fcn.180254440
mov qword [rsp + 0x38], r14
mov qword [rsp + 0x30], r14
mov qword [rsp + 0x40], r14
lea rcx, str._OpenXR__OpenXR_system_orientation:_
mov qword [rsp + 0x50], rcx
mov qword [rsp + 0x58], 0x26
movups xmm0, xmmword [rsp + 0x30]
movaps xmmword [rsp + 0x60], xmm0
movsd xmm1, qword [rsp + 0x40]
movsd qword [rsp + 0x70], xmm1
lea rcx, [rbx + 0x128]
mov qword [rsp + 0x20], rcx
lea r9, [rsp + 0x50]
lea r8d, [r14 + 2]
lea rdx, [rsp + 0x60]
mov rcx, rax
call fcn.18000b480
call fcn.180254440
mov qword [rsp + 0x38], r14
mov qword [rsp + 0x30], r14
mov qword [rsp + 0x40], r14
lea rcx, str._OpenXR__OpenXR_system_position:_
mov qword [rsp + 0x50], rcx
mov qword [rsp + 0x58], 0x23
movups xmm0, xmmword [rsp + 0x30]
movaps xmmword [rsp + 0x60], xmm0
movsd xmm1, qword [rsp + 0x40]
movsd qword [rsp + 0x70], xmm1
lea rcx, [rbx + 0x12c]
mov qword [rsp + 0x20], rcx
lea r9, [rsp + 0x50]
lea r8d, [r14 + 2]
lea rdx, [rsp + 0x60]
mov rcx, rax
call fcn.18000b480
mov rax, qword [rsi + 0x920]
cmp byte [rax + 8], r14b
jne 0x18014a90b
mov rax, 0xffffffffffffffff
nop
inc rax
cmp byte [rdi + rax], r14b
jne 0x18014a700
cmp rax, 0xe
jb 0x18014a90b
lea rbx, [rax + rdi]
lea r8, [rbx - 0xd]
sub r8, rdi
mov edx, 0x53
mov rcx, rdi
call fcn.1802878e0
test rax, rax
je 0x18014a90b
movabs r14, 0x2f52566d61657453
nop
cmp qword [rax], r14
jne 0x18014a8eb
cmp dword [rax + 8], 0x6e65704f
jne 0x18014a8eb
cmp word [rax + 0xc], 0x5258
jne 0x18014a8eb
sub rax, rdi
cmp rax, 0xffffffffffffffff
je 0x18014a90b
lea rcx, str._OpenXR__Detected_SteamVR_OpenXR__checking_for_Virtual_Desktop_Streamer...
call fcn.180019b40
xor edx, edx
mov r8d, 0x130
lea rcx, [rsp + 0x80]
call fcn.180288120
mov dword [rsp + 0x80], 0x130
xor edx, edx
lea ecx, [rdx + 2]
call sub.KERNEL32.dll_CreateToolhelp32Snapshot
mov rdi, rax
cmp rax, 0xffffffffffffffff
jne 0x18014a7bf
lea rcx, str._OpenXR__Failed_to_take_a_snapshot_of_all_processes_in_the_system.
call fcn.18000a630
jmp 0x18014a90b
lea rdx, [rsp + 0x80]
mov rcx, rdi
call sub.KERNEL32.dll_Process32First
test eax, eax
jne 0x18014a800
call fcn.180254440
lea r8, str._OpenXR__Failed_to_retrieve_information_about_the_first_process.
mov edx, 4
mov rcx, rax
call fcn.180019c60
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x18014a90b
lea rax, [rsp + 0xac]
mov qword [rsp + 0x50], rax
lea rcx, [rsp + 0xac]
mov rax, 0xffffffffffffffff
nop dword [rax]
inc rax
cmp byte [rcx + rax], 0
jne 0x18014a820
mov qword [rsp + 0x58], rax
lea r15, [rsp + 0xac]
cmp rax, 0x1b
jb 0x18014a8b4
lea r14, [rsp + 0x92]
add r14, rax
lea rbx, [rsp + 0xac]
nop
mov r8, r14
sub r8, rbx
mov edx, 0x56
mov rcx, rbx
call fcn.1802878e0
mov rbx, rax
test rax, rax
je 0x18014a8b4
mov r8d, 0x1b
lea rdx, str.VirtualDesktop.Streamer.exe
mov rcx, rax
call fcn.180287980
test eax, eax
jne 0x18014a8af
sub rbx, r15
cmp rbx, 0xffffffffffffffff
je 0x18014a8b4
call fcn.180254440
lea r8, str._OpenXR__Detected_Virtual_Desktop__enabling_Virtual_Desktop_fix.
mov edx, 2
mov rcx, rax
call fcn.180019c60
mov byte [rsi + 0x928], 1
jmp 0x18014a8df
inc rbx
jmp 0x18014a850
lea rdx, [rsp + 0x80]
mov rcx, rdi
call sub.KERNEL32.dll_Process32Next
test eax, eax
jne 0x18014a800
lea rcx, str._OpenXR__Did_not_detect_Virtual_Desktop__disabling_Virtual_Desktop_fix.
call fcn.180019b40
mov byte [rsi + 0x928], 0
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
nop
jmp 0x18014a90b
inc rax
lea r8, [rbx - 0xd]
sub r8, rax
mov edx, 0x53
mov rcx, rax
call fcn.1802878e0
test rax, rax
jne 0x18014a740
lea r11, [rsp + 0x1b0]
mov rbx, qword [r11 + 0x10]
mov rsi, qword [r11 + 0x18]
mov rdi, qword [r11 + 0x20]
mov r14, qword [r11 + 0x28]
mov rsp, r11
pop r15
ret