Function at 0x140017450
Capabilities:
Enumerate processes
Execute command

Disassembly:
mov qword [rsp + 8], rbx
push rdi
sub rsp, 0x160
mov rax, qword [section..data]
xor rax, rsp
mov qword [rsp + 0x150], rax
lea rcx, str.taskkill__f__im_FortniteClient_Win64_Shipping_EAC.exe__nul_2_nul
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__f__im_EpicGamesLauncher.exe__nul_2_nul
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__f__im_FortniteClient_Win64_Shipping_BE.exe__nul_2_nul
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__f__im_FortniteLauncher.exe__nul_2_nul
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__f__im_FortniteClient_Win64_Shipping.exe__nul_2_nul
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__f__im_EasyAntiCheat.exe__t__fi__status_eq_running___nul_2_nul
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__f__im_BEService.exe__nul_2_nul
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__f__im_BEService_x64.exe__nul_2_nul
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__f__im__RustClient.exe___nul_2_nul
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__f__im__paladins.exe___nul_2_nul
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__f__im__ForHonor.exe___nul_2_nul
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__f__im__DeadByDaylight.exe___nul_2_nul
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__f__im__Gears5.exe___nul_2_nul
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__f__im__Squad.exe___nul_2_nul
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
nop word [rax + rax]
mov ecx, 0x3e8
xor dil, dil
call qword [sym.imp.KERNEL32.dll_Sleep]
xor edx, edx
lea ecx, [rdx + 2]
call qword [sym.imp.KERNEL32.dll_CreateToolhelp32Snapshot]
lea rdx, [rsp + 0x20]
mov dword [rsp + 0x20], 0x130
mov rcx, rax
mov rbx, rax
call qword [sym.imp.KERNEL32.dll_Process32First]
test eax, eax
je 0x1400176d5
nop word [rax + rax]
lea rdx, str.FortniteClient_Win64_Shipping_EAC.exe
lea rcx, [rsp + 0x4c]
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
test eax, eax
je 0x1400176d2
lea rdx, str.EpicGamesLauncher.exe
lea rcx, [rsp + 0x4c]
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
test eax, eax
je 0x1400176d2
lea rdx, str.FortniteClient_Win64_Shipping_BE.exe
lea rcx, [rsp + 0x4c]
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
test eax, eax
je 0x1400176d2
lea rdx, str.FortniteLauncher.exe
lea rcx, [rsp + 0x4c]
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
test eax, eax
je 0x1400176d2
lea rdx, str.FortniteClient_Win64_Shipping.exe
lea rcx, [rsp + 0x4c]
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
test eax, eax
je 0x1400176d2
lea rdx, str.EasyAntiCheat.exe
lea rcx, [rsp + 0x4c]
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
test eax, eax
je 0x1400176d2
lea rdx, str.BEService.exe
lea rcx, [rsp + 0x4c]
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
test eax, eax
je 0x1400176d2
lea rdx, str.BEService_x64.exe
lea rcx, [rsp + 0x4c]
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
test eax, eax
je 0x1400176d2
lea rdx, str.RustClient.exe
lea rcx, [rsp + 0x4c]
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
test eax, eax
je 0x1400176d2
lea rdx, str.paladins.exe
lea rcx, [rsp + 0x4c]
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
test eax, eax
je 0x1400176d2
lea rdx, str.ForHonor.exe
lea rcx, [rsp + 0x4c]
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
test eax, eax
je 0x1400176d2
lea rdx, str.DeadByDaylight.exe
lea rcx, [rsp + 0x4c]
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
test eax, eax
je 0x1400176d2
lea rdx, str.Gears5.exe
lea rcx, [rsp + 0x4c]
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
test eax, eax
je 0x1400176d2
lea rdx, str.Squad.exe
lea rcx, [rsp + 0x4c]
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
test eax, eax
je 0x1400176d2
lea rdx, [rsp + 0x20]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_Process32Next]
test eax, eax
jne 0x140017570
jmp 0x1400176d5
mov dil, 1
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
test dil, dil
jne 0x140017530
lea rcx, str.net_stop_EasyAntiCheatService__nul_2_nul
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.net_stop_BEService__nul_2_nul
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__f__fi__SERVICES_eq_EasyAntiCheat_EOS___im_EasyAntiCheat_EOS.exe__nul_2_nul
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__f__fi__SERVICES_eq_BEService___im_BEService.exe__nul_2_nul
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__f__fi__SERVICES_eq_WerSvc___im_WerSvc.exe__nul_2_nul
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__f__fi__SERVICES_eq_vmicvss___im_vmicvss.exe__nul_2_nul
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__f__fi__SERVICES_eq_edgeupdatem___im_edgeupdatem.exe__nul_2_nul
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__f__fi__SERVICES_eq_edgeupdate___im_edgeupdate.exe__nul_2_nul
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__f__fi__SERVICES_eq_EpicOnlineServices___im_EpicOnlineServices.exe__nul_2_nul
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__f__fi__SERVICES_eq_GameInputSvc___im_GameInputSvc.exe__nul_2_nul
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov rcx, qword [rsp + 0x150]
xor rcx, rsp
call fcn.14001f990
mov rbx, qword [rsp + 0x170]
add rsp, 0x160
pop rdi
ret