Function at 0x22dc4df30
Capabilities:
Link many functions at runtime

Disassembly:
push r13
push r12
push rbx
sub rsp, 0x40
movaps xmmword [rsp + 0x30], xmm6
lea rax, [0x22ddfd240]
mov rbx, qword [0x22ddadb00]
movq xmm0, qword [0x22ddad420]
movq xmm1, rax
mov edx, 0x310
lea rax, str.th32ProcessID
mov qword [0x22ddfd298], 0
movq xmm4, rax
movdqa xmm3, xmm0
lea rax, str.th32ModuleID
mov byte [0x22ddfd7f0], 1
punpcklqdq xmm3, xmm4
movq xmm5, rax
movdqa xmm4, xmm0
mov qword [0x22ddfd7f8], 0
lea rax, str.dwSize
punpcklqdq xmm4, xmm5
movdqa xmm5, xmm0
movaps xmmword [0x22ddfd860], xmm3
movq xmm2, rax
mov eax, 0x312
movaps xmmword [0x22ddfd8c0], xmm4
mov r8d, 0x310
punpcklqdq xmm5, xmm2
movdqa xmm2, xmmword [0x22dd9bbe0]
mov word [0x22ddfd290], ax
lea rax, str.cntUsage
movq xmm6, rax
lea rax, str.th32DefaultHeapID
movaps xmmword [0x22ddfd800], xmm5
movaps xmmword [0x22ddfd280], xmm2
movdqa xmm2, xmm0
punpcklqdq xmm2, xmm6
movq xmm6, rax
lea rax, str.cntThreads
mov byte [0x22ddfd820], 1
movaps xmmword [0x22ddfd830], xmm2
movq xmm2, rbx
punpcklqdq xmm2, xmm6
movq xmm6, rax
lea rax, str.th32ParentProcessID
mov qword [0x22ddfd828], 4
movaps xmmword [0x22ddfd890], xmm2
movdqa xmm2, xmm0
punpcklqdq xmm2, xmm6
movq xmm6, rax
lea rax, str.pcPriClassBase
mov byte [0x22ddfd850], 1
movaps xmmword [0x22ddfd8f0], xmm2
movdqa xmm2, xmm0
punpcklqdq xmm2, xmm6
movq xmm6, rax
lea rax, str.dwFlags
mov qword [0x22ddfd858], 8
movaps xmmword [0x22ddfd920], xmm2
movdqa xmm2, xmm0
punpcklqdq xmm2, xmm6
movq xmm6, rax
lea rax, [0x22ddfd820]
mov byte [0x22ddfd880], 1
movaps xmmword [0x22ddfd950], xmm2
movdqa xmm2, xmm0
lea rbx, [rax - 0x30]
lea rcx, [rax + 0x30]
punpcklqdq xmm2, xmm6
movq xmm6, rax
mov qword [0x22ddfd888], 0x10
add rax, 0x60
mov byte [0x22ddfd8b0], 1
mov qword [0x22ddfd8b8], 0x18
mov byte [0x22ddfd8e0], 1
mov qword [0x22ddfd8e8], 0x1c
mov byte [0x22ddfd910], 1
mov qword [0x22ddfd918], 0x20
mov byte [0x22ddfd940], 1
mov qword [0x22ddfd948], 0x24
mov byte [0x22ddfd970], 1
mov qword [0x22ddfd978], 0x28
movaps xmmword [0x22ddfd980], xmm2
movq xmm2, rbx
add rbx, 0xc0
punpcklqdq xmm2, xmm6
movq xmm6, rax
add rax, 0x60
mov word [0x22ddfd250], dx
movaps xmmword [0x22ddfdbe0], xmm2
movq xmm2, rcx
add rcx, 0xc0
lea rdx, str.szExeFile
punpcklqdq xmm2, xmm6
movq xmm6, rax
add rax, 0x60
movaps xmmword [0x22ddfda70], xmm3
movaps xmmword [0x22ddfdbf0], xmm2
movq xmm2, rbx
add rbx, 0xc0
punpcklqdq xmm2, xmm6
movq xmm6, rax
add rax, 0x60
movaps xmmword [0x22ddfda40], xmm4
movaps xmmword [0x22ddfdc00], xmm2
movq xmm2, rcx
lea rcx, [0x22ddfdbe0]
punpcklqdq xmm2, xmm6
movq xmm6, rax
mov qword [0x22ddfd7e8], rcx
lea rax, [0x22ddfd4c0]
movaps xmmword [0x22ddfdc10], xmm2
movq xmm2, rbx
mov ecx, 0x312
sub rbx, 0x1b0
punpcklqdq xmm2, xmm6
movq xmm6, rdx
lea rdx, str.GlblcntUsage
mov qword [0x22ddfd258], rax
movaps xmmword [0x22ddfdc20], xmm2
movdqa xmm2, xmmword [0x22dd9bbf0]
movq xmm3, rdx
lea rdx, str.ProccntUsage
mov qword [0x22ddfd2a0], rbx
movaps xmmword [0x22ddfd240], xmm2
movdqa xmm2, xmm1
punpcklqdq xmm2, xmm6
mov word [0x22ddfd210], cx
lea rcx, [0x22ddfd440]
movaps xmmword [0x22ddfd9b0], xmm2
movdqa xmm2, xmmword [0x22dd9bc00]
movaps xmmword [0x22ddfda10], xmm5
movaps xmmword [0x22ddfd200], xmm2
movdqa xmm2, xmm0
punpcklqdq xmm2, xmm3
movq xmm3, rdx
lea rdx, str.modBaseAddr
mov byte [0x22ddfd9a0], 1
movq xmm4, rdx
lea rdx, str.modBaseSize
movaps xmmword [0x22ddfdaa0], xmm2
movdqa xmm2, xmm0
movq xmm5, rdx
mov byte [0x22ddfd7c0], 2
lea rdx, str.hModule
punpcklqdq xmm2, xmm3
mov byte [0x22ddfda00], 1
punpcklqdq xmm0, xmm5
movq xmm3, rdx
mov qword [0x22ddfd9a8], 0x2c
mov qword [0x22ddfd7e0], 0xa
mov qword [0x22ddfd218], 0
mov qword [0x22ddfda08], 0
mov byte [0x22ddfda30], 1
mov qword [0x22ddfda38], 4
mov byte [0x22ddfda60], 1
mov qword [0x22ddfda68], 8
mov byte [0x22ddfda90], 1
mov qword [0x22ddfda98], 0xc
mov byte [0x22ddfdac0], 1
mov rbx, qword [0x22ddad4f0]
movaps xmmword [0x22ddfdb30], xmm0
movq xmm0, rbx
mov qword [0x22ddfd1d8], rax
lea rax, [0x22ddfd1c0]
punpcklqdq xmm0, xmm3
mov qword [rsp + 0x28], rbx
movaps xmmword [0x22ddfdb60], xmm0
movdqa xmm0, xmmword [0x22dd9bc10]
movaps xmmword [0x22ddfdad0], xmm2
movq xmm2, rcx
movaps xmmword [0x22ddfd1c0], xmm0
movq xmm0, rax
punpcklqdq xmm2, xmm4
lea rax, str.szModule
movq xmm4, rax
lea rax, [0x22ddfda30]
mov qword [0x22ddfdac8], 0x10
punpcklqdq xmm0, xmm4
lea rcx, [rax - 0x30]
movq xmm5, rax
mov byte [0x22ddfdaf0], 1
movaps xmmword [0x22ddfdb90], xmm0
movq xmm0, rcx
lea rdx, [rax + 0x30]
add rax, 0x60
punpcklqdq xmm0, xmm5
movq xmm3, rax
lea rbx, [rax + 0x30]
add rax, 0x60
movaps xmmword [0x22ddfd760], xmm0
movq xmm0, rdx
movq xmm4, rax
add rcx, 0x120
punpcklqdq xmm0, xmm3
add rax, 0x60
add rdx, 0x120
mov qword [0x22ddfdaf8], 0x18
movaps xmmword [0x22ddfd770], xmm0
movq xmm0, rbx
movq xmm5, rax
add rax, 0x60
punpcklqdq xmm0, xmm4
movq xmm3, rax
lea rax, str.szExePath
mov byte [0x22ddfdb20], 1
movaps xmmword [0x22ddfd780], xmm0
movq xmm0, rcx
movq xmm4, rax
lea rax, [0x22ddfd760]
punpcklqdq xmm0, xmm5
punpcklqdq xmm1, xmm4
mov qword [0x22ddfd9f8], rax
lea rax, [rdx - 0x1b0]
movaps xmmword [0x22ddfd790], xmm0
movq xmm0, rdx
lea rcx, [0x22dd9b9d0]
punpcklqdq xmm0, xmm3
mov qword [0x22ddfdb28], 0x20
mov byte [0x22ddfdb50], 1
mov qword [0x22ddfdb58], 0x28
mov word [0x22ddfd1d0], r8w
mov byte [0x22ddfdb80], 1
mov qword [0x22ddfdb88], 0x30
mov byte [0x22ddfdbb0], 1
mov qword [0x22ddfdbb8], 0x230
mov qword [0x22ddfd9f0], 0xa
mov byte [0x22ddfd9d0], 2
mov qword [0x22ddfd220], rax
movaps xmmword [0x22ddfdb00], xmm2
movaps xmmword [0x22ddfd7a0], xmm0
movaps xmmword [0x22ddfdbc0], xmm1
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov qword [0x22ddfd740], rax
mov r12, rax
test rax, rax
je 0x22dc4e5d0
lea r13, str.CreateToolhelp32Snapshot
mov rbx, qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, rax
mov rdx, r13
call rbx
test rax, rax
je 0x22dc4e5e0
mov r12, qword [0x22ddfd740]
lea r13, str.Process32FirstW
mov qword [0x22ddfd1a0], rax
mov rdx, r13
mov rcx, r12
call rbx
test rax, rax
je 0x22dc4e5f0
mov r12, qword [0x22ddfd740]
lea r13, str.Process32NextW
mov qword [0x22ddfd198], rax
mov rdx, r13
mov rcx, r12
call rbx
test rax, rax
je 0x22dc4e600
mov r12, qword [0x22ddfd740]
lea r13, str.Module32FirstW
mov qword [0x22ddfd190], rax
mov rdx, r13
mov rcx, r12
call rbx
test rax, rax
je 0x22dc4e610
mov r12, qword [0x22ddfd740]
lea r13, str.Module32NextW
mov qword [0x22ddfd188], rax
mov rdx, r13
mov rcx, r12
call rbx
test rax, rax
je 0x22dc4e620
movaps xmm6, xmmword [rsp + 0x30]
mov qword [0x22ddfd180], rax
add rsp, 0x40
pop rbx
pop r12
pop r13
ret
lea rcx, [0x22dd9b9a0]
call fcn.22dc26640
nop dword [rax]
mov rdx, r13
mov rcx, r12
call fcn.22dc27130
jmp 0x22dc4e522
mov rdx, r13
mov rcx, r12
call fcn.22dc27130
jmp 0x22dc4e548
mov rdx, r13
mov rcx, r12
call fcn.22dc27130
jmp 0x22dc4e56e
mov rdx, r13
mov rcx, r12
call fcn.22dc27130
jmp 0x22dc4e594
mov rdx, r13
mov rcx, r12
call fcn.22dc27130
jmp 0x22dc4e5b6