Function at 0x14002d8b0
Capabilities:
Enumerate processes

Disassembly:
jmp 0x14005a2c0
mov qword [rsp + 0x10], rdx
mov qword [rsp + 8], rcx
push rbp
push rdi
sub rsp, 0x5c8
lea rbp, [rsp + 0x40]
lea rdi, [rsp + 0x40]
mov ecx, 0x102
mov eax, 0xcccccccc
rep stosd dword [rdi], eax
mov rcx, qword [rsp + 0x5e8]
mov rax, qword [0x1400a9040]
xor rax, rbp
mov qword [rbp + 0x570], rax
lea rcx, [0x1400b8728]
call fcn.14002dc9d
mov dword [rbp + 4], 0
xor edx, edx
mov ecx, 2
call fcn.14002cdb6
mov qword [rbp + 0x28], rax
cmp qword [rbp + 0x28], 0xffffffffffffffff
jne 0x14005a361
lea rdx, str.Error_al_tomar_snapshot_de_procesos
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
call fcn.14002c348
mov qword [rbp + 0x568], rax
lea rdx, [0x14002c12c]
mov rcx, qword [rbp + 0x568]
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
xor eax, eax
jmp 0x14005a47b
mov dword [rbp + 0x50], 0x238
lea rdx, [rbp + 0x50]
mov rcx, qword [rbp + 0x28]
call fcn.14002d171
test eax, eax
jne 0x14005a3b8
lea rdx, str.Error_al_obtener_la_primera_entrada_de_proceso
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
call fcn.14002c348
mov qword [rbp + 0x568], rax
lea rdx, [0x14002c12c]
mov rcx, qword [rbp + 0x568]
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov rcx, qword [rbp + 0x28]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
xor eax, eax
jmp 0x14005a47b
mov qword [rsp + 0x38], 0
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x104
lea rax, [rbp + 0x2b0]
mov qword [rsp + 0x20], rax
mov r9d, 0xffffffff
lea r8, [rbp + 0x7c]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
mov dword [rbp + 0x3d4], eax
cmp dword [rbp + 0x3d4], 0
jle 0x14005a42b
mov rcx, qword [rbp + 0x5a8]
call fcn.14002c2df
mov rdx, rax
lea rcx, [rbp + 0x2b0]
call qword [sym.imp.ucrtbased.dll__stricmp]
test eax, eax
jne 0x14005a429
mov eax, dword [rbp + 0x58]
mov dword [rbp + 4], eax
jmp 0x14005a46e
jmp 0x14005a459
lea rdx, str.Error_al_convertir_WCHAR_a_char
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
call fcn.14002c348
mov qword [rbp + 0x568], rax
lea rdx, [0x14002c12c]
mov rcx, qword [rbp + 0x568]
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, [rbp + 0x50]
mov rcx, qword [rbp + 0x28]
call fcn.14002d883
test eax, eax
jne 0x14005a3b8
mov rcx, qword [rbp + 0x28]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [rbp + 4]
mov rdi, rax
lea rcx, [rbp - 0x40]
lea rdx, [0x140094b40]
call fcn.14002d7a7
mov rax, rdi
mov rcx, qword [rbp + 0x570]
xor rcx, rbp
call fcn.14002ce01
lea rsp, [rbp + 0x588]
pop rdi
pop rbp
ret