Function at 0x18000b6c0
Capabilities:
Enumerate processes
Print debug messages

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x18], rsi
push rdi
push r14
push r15
sub rsp, 0x2b0
mov rax, qword [0x1800a2de8]
xor rax, rsp
mov qword [rsp + 0x2a0], rax
mov qword [rsp + 0x40], rsp
mov rsi, rdx
mov edi, ecx
mov r15d, 0x104
mov qword [rsp + 0x38], 0xffffffffffffffff
xor r14d, r14d
mov dword [rsp + 0x60], r14d
xor edx, edx
mov r8d, 0x234
lea rcx, [rsp + 0x64]
call fcn.180056c20
nop
xor edx, edx
lea ecx, [rdx + 2]
call qword [sym.imp.KERNEL32.dll_CreateToolhelp32Snapshot]
mov rbx, rax
mov qword [rsp + 0x38], rax
cmp rax, 0xffffffffffffffff
jne 0x18000b808
call qword [sym.imp.KERNEL32.dll_GetLastError]
lea edi, [rax + 0x1e]
mov dword [rsp + 0x30], edi
call qword [sym.imp.KERNEL32.dll_GetLastError]
lea esi, [rax + 0x1e]
mov ecx, 0x1000a
call fcn.180053ad4
mov rbx, rax
test rax, rax
jne 0x18000b77c
lea rcx, str.Memory_allocation_error_in_log_file_n
call fcn.180053f50
lea rcx, str.Memory_allocation_error_in_log_file_n
call qword [sym.imp.KERNEL32.dll_OutputDebugStringW]
jmp 0x18000b7e7
lea r8, [0x180088a64]
mov edx, 0xffff
mov rcx, rax
call fcn.180053a70
test eax, eax
jle 0x18000b7c4
mov byte [rbx + 0xffff], 0
mov dword [rsp + 0x28], esi
mov qword [rsp + 0x20], rbx
lea r9, str.GetProcessNameByPid
mov edx, 0x377
mov r8d, 1
lea rcx, str...ApiAuxNA.cpp
call fcn.180001b40
jmp 0x18000b7df
mov edx, esi
lea rcx, str.Error__d_in_swprintf_s_n
call fcn.180053f50
lea rcx, str.Error_in_swprintf_s_n
call qword [sym.imp.KERNEL32.dll_OutputDebugStringW]
mov rcx, rbx
call fcn.180053a94
mov dword [rsp + 0x4c], edi
lea rdx, [0x18000b7ff]
mov rcx, qword [rsp + 0x40]
call fcn.180057580
nop
nop
nop
mov eax, dword [rsp + 0x30]
jmp 0x18000baa2
mov dword [rsp + 0x60], 0x238
lea rdx, [rsp + 0x60]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_Process32FirstW]
test eax, eax
jne 0x18000b8f5
call qword [sym.imp.KERNEL32.dll_GetLastError]
lea edi, [rax + 0x1e]
mov dword [rsp + 0x30], edi
call qword [sym.imp.KERNEL32.dll_GetLastError]
lea esi, [rax + 0x1e]
mov ecx, 0x1000a
call fcn.180053ad4
mov rbx, rax
test rax, rax
jne 0x18000b869
lea rcx, str.Memory_allocation_error_in_log_file_n
call fcn.180053f50
lea rcx, str.Memory_allocation_error_in_log_file_n
call qword [sym.imp.KERNEL32.dll_OutputDebugStringW]
jmp 0x18000b8d4
lea r8, [0x180088a64]
mov edx, 0xffff
mov rcx, rax
call fcn.180053a70
test eax, eax
jle 0x18000b8b1
mov byte [rbx + 0xffff], 0
mov dword [rsp + 0x28], esi
mov qword [rsp + 0x20], rbx
lea r9, str.GetProcessNameByPid
mov edx, 0x37b
mov r8d, 1
lea rcx, str...ApiAuxNA.cpp
call fcn.180001b40
jmp 0x18000b8cc
mov edx, esi
lea rcx, str.Error__d_in_swprintf_s_n
call fcn.180053f50
lea rcx, str.Error_in_swprintf_s_n
call qword [sym.imp.KERNEL32.dll_OutputDebugStringW]
mov rcx, rbx
call fcn.180053a94
mov dword [rsp + 0x50], edi
lea rdx, [0x18000b8ec]
mov rcx, qword [rsp + 0x40]
call fcn.180057580
nop
nop
nop
mov eax, dword [rsp + 0x30]
jmp 0x18000baa2
cmp dword [rsp + 0x68], edi
jne 0x18000b932
movsxd rdx, r15d
or r9, 0xffffffffffffffff
lea r8, [rsp + 0x8c]
mov rcx, rsi
call fcn.180054f68
mov dword [rsp + 0x48], r14d
lea rdx, [0x18000b92b]
mov rcx, qword [rsp + 0x40]
call fcn.180057580
nop
nop
nop
xor eax, eax
jmp 0x18000baa2
lea rdx, [rsp + 0x60]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_Process32NextW]
test eax, eax
jne 0x18000b8f5
cmp rbx, 0xffffffffffffffff
je 0x18000b954
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
nop
mov ecx, 0x1000a
call fcn.180053ad4
mov rbx, rax
test rax, rax
jne 0x18000b981
lea rcx, str.Memory_allocation_error_in_log_file_n
call fcn.180053f50
lea rcx, str.Memory_allocation_error_in_log_file_n
call qword [sym.imp.KERNEL32.dll_OutputDebugStringW]
jmp 0x18000b9f3
lea r8, [0x180088a64]
mov edx, 0xffff
mov rcx, rax
call fcn.180053a70
test eax, eax
jle 0x18000b9cd
mov byte [rbx + 0xffff], 0
mov dword [rsp + 0x28], 9
mov qword [rsp + 0x20], rbx
lea r9, str.GetProcessNameByPid
mov edx, 0x391
mov r8d, 1
lea rcx, str...ApiAuxNA.cpp
call fcn.180001b40
jmp 0x18000b9eb
mov edx, 9
lea rcx, str.Error__d_in_swprintf_s_n
call fcn.180053f50
lea rcx, str.Error_in_swprintf_s_n
call qword [sym.imp.KERNEL32.dll_OutputDebugStringW]
mov rcx, rbx
call fcn.180053a94
mov eax, 9
jmp 0x18000baa2
mov rcx, qword [rsp + 0x2a0]
xor rcx, rsp
call fcn.180052be0
lea r11, [rsp + 0x2b0]
mov rbx, qword [r11 + 0x20]
mov rsi, qword [r11 + 0x30]
mov rsp, r11
pop r15
pop r14
pop rdi
ret