Function at 0x140001250
Capabilities:
Enumerate processes

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
mov qword [rsp + 0x20], r14
push rbp
lea rbp, [rsp - 0x1e0]
sub rsp, 0x2e0
mov rax, qword [0x140005008]
xor rax, rsp
mov qword [rbp + 0x1d0], rax
mov rbx, qword [0x1400056e0]
lea rcx, str..intel_storage_driver_134682583
xor edi, edi
xor r9d, r9d
mov qword [rsp + 0x30], rdi
xor r8d, r8d
mov dword [rsp + 0x28], 0x80
mov edx, 0x80000000
mov dword [rsp + 0x20], 3
call qword [sym.imp.KERNEL32.dll_CreateFileA]
mov qword [rbx + 8], rax
cmp rax, 0xffffffffffffffff
jne 0x1400012de
lea rcx, str._n__log_____failed_to_initialize_driver._n
call fcn.140001070
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_istream_char__struct_std::char_traits_char___std::cin]
call qword [sym.imp.MSVCP140.dll_public:_int___cdecl_std::basic_istream_char__struct_std::char_traits_char__::get_void____ptr64]
lea rcx, str._n__log_____driver_initialized._n
call fcn.140001070
mov ecx, 0x50
mov qword [rsp + 0x78], rdi
call fcn.140001e20
movaps xmm0, xmmword [str.FortniteClient_Win64_Shipping.exe]
mov rbx, rax
xor edx, edx
mov qword [rsp + 0x70], rax
mov qword [rbp - 0x80], 0x21
movups xmmword [rax], xmm0
mov qword [rbp - 0x78], 0x27
movaps xmm1, xmmword [0x140003470]
lea ecx, [rdx + 2]
movups xmmword [rax + 0x10], xmm1
mov dword [rbp - 0x70], 0x238
movaps xmm0, xmmword [0x140003480]
movups xmmword [rax + 0x20], xmm0
movaps xmm1, xmmword [0x140003490]
movups xmmword [rax + 0x30], xmm1
movzx eax, word [0x1400034a0]
mov word [rbx + 0x40], ax
mov word [rbx + 0x42], di
call qword [sym.imp.KERNEL32.dll_CreateToolhelp32Snapshot]
mov rsi, rax
cmp rax, 0xffffffffffffffff
je 0x1400013f6
lea rdx, [rbp - 0x70]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_Process32FirstW]
lea rax, [rbp - 0x44]
mov r8, rbx
sub r8, rax
movzx edx, word [rax]
movzx ecx, word [rax + r8]
sub edx, ecx
jne 0x140001395
add rax, 2
test ecx, ecx
jne 0x140001381
mov rcx, rsi
test edx, edx
je 0x14000156d
lea rdx, [rbp - 0x70]
call qword [sym.imp.KERNEL32.dll_Process32NextW]
test eax, eax
je 0x1400013ed
nop
lea rax, [rbp - 0x44]
mov r8, rbx
sub r8, rax
nop word [rax + rax]
movzx edx, word [rax]
movzx ecx, word [rax + r8]
sub edx, ecx
jne 0x1400013d4
add rax, 2
test ecx, ecx
jne 0x1400013c0
mov rcx, rsi
test edx, edx
je 0x14000156d
lea rdx, [rbp - 0x70]
call qword [sym.imp.KERNEL32.dll_Process32NextW]
test eax, eax
jne 0x1400013b0
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov edx, 0x50
mov rcx, rbx
mov esi, edi
call fcn.140001e64
lea rcx, str._n__log_____failed_to_get_process_id._n
call fcn.140001070
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_istream_char__struct_std::char_traits_char___std::cin]
call qword [sym.imp.MSVCP140.dll_public:_int___cdecl_std::basic_istream_char__struct_std::char_traits_char__::get_void____ptr64]
lea rcx, str.__log_____failed_to_attach_to_pid._n
call fcn.140001070
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_istream_char__struct_std::char_traits_char___std::cin]
call qword [sym.imp.MSVCP140.dll_public:_int___cdecl_std::basic_istream_char__struct_std::char_traits_char__::get_void____ptr64]
mov edx, esi
lea rcx, str.__pid______i_n
call fcn.140001070
mov rcx, qword [0x1400056e0]
xor r9d, r9d
mov dword [rsp + 0x48], 0x10
xor r8d, r8d
xor edx, edx
mov dword [rsp + 0x74], edi
mov qword [rbp - 0x78], rdi
mov eax, dword [rcx]
mov rcx, qword [rcx + 8]
mov dword [rsp + 0x70], eax
lea rax, [rsp + 0x70]
mov qword [rsp + 0x58], rax
lea rax, [rsp + 0x50]
mov qword [rsp + 0x40], rax
lea rax, [rsp + 0x50]
mov dword [rsp + 0x38], 0x10
mov qword [rsp + 0x30], rax
lea rax, [rsp + 0x60]
mov dword [rsp + 0x28], edi
mov qword [rsp + 0x20], rax
mov qword [rsp + 0x78], rdi
mov qword [rbp - 0x80], rdi
mov dword [rsp + 0x50], 5
mov dword [rsp + 0x54], 1
call fcn.140001de0
mov r14, qword [rsp + 0x78]
test r14, r14
jne 0x1400014e3
lea rcx, str.__log_____failed_to_get_base_address._n
call fcn.140001070
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_istream_char__struct_std::char_traits_char___std::cin]
call qword [sym.imp.MSVCP140.dll_public:_int___cdecl_std::basic_istream_char__struct_std::char_traits_char__::get_void____ptr64]
mov rdx, r14
lea rcx, str.__base_address______I64d_n
call fcn.140001070
mov rdx, r14
call fcn.140001b20
test al, al
jne 0x140001517
lea rcx, str.__log_____failed_to_get_cr3._n
call fcn.140001070
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_istream_char__struct_std::char_traits_char___std::cin]
call qword [sym.imp.MSVCP140.dll_public:_int___cdecl_std::basic_istream_char__struct_std::char_traits_char__::get_void____ptr64]
mov rdx, r14
call fcn.140001860
mov rbx, rax
test rax, rax
jne 0x140001540
lea rcx, str.__log_____failed_to_get_buffer._n
call fcn.140001070
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_istream_char__struct_std::char_traits_char___std::cin]
call qword [sym.imp.MSVCP140.dll_public:_int___cdecl_std::basic_istream_char__struct_std::char_traits_char__::get_void____ptr64]
mov rdx, rbx
lea rcx, str._buffer____0x_p_n
call fcn.140001070
call qword [sym.imp.MSVCP140.dll__Query_perf_frequency]
mov rbx, rax
call qword [sym.imp.MSVCP140.dll__Query_perf_counter]
cmp rbx, 0x989680
jne 0x140001599
imul rbx, rax, 0x64
jmp 0x1400015ba
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov esi, dword [rbp - 0x68]
mov edx, 0x50
mov rcx, rbx
call fcn.140001e64
test esi, esi
je 0x140001405
mov rax, qword [0x1400056e0]
mov dword [rax], esi
jmp 0x140001437
cqo
idiv rbx
mov rcx, rax
imul rax, rdx, 0x3b9aca00
cqo
idiv rbx
mov rbx, rax
imul rax, rcx, 0x3b9aca00
add rbx, rax
mov rsi, rdi
nop dword [rax]
lea rdx, [rsi + r14]
call fcn.140001860
inc rsi
cmp rsi, 0x10000
jb 0x1400015c0
call qword [sym.imp.MSVCP140.dll__Query_perf_frequency]
mov rsi, rax
call qword [sym.imp.MSVCP140.dll__Query_perf_counter]
cmp rsi, 0x989680
jne 0x1400015f3
imul rax, rax, 0x64
jmp 0x140001611
cqo
idiv rsi
mov rcx, rax
imul rax, rdx, 0x3b9aca00
imul rcx, rcx, 0x3b9aca00
cqo
idiv rsi
add rax, rcx
xorps xmm0, xmm0
lea rcx, str.___0x10_000_______fs_n
sub rax, rbx
cvtsi2ss xmm0, rax
divss xmm0, dword [str._knN]
cvtps2pd xmm1, xmm0
movq rdx, xmm1
call fcn.140001070
call qword [sym.imp.MSVCP140.dll__Query_perf_frequency]
mov rbx, rax
call qword [sym.imp.MSVCP140.dll__Query_perf_counter]
cmp rbx, 0x989680
jne 0x140001656
imul rbx, rax, 0x64
jmp 0x140001677
cqo
idiv rbx
mov rcx, rax
imul rax, rdx, 0x3b9aca00
cqo
idiv rbx
mov rbx, rax
imul rax, rcx, 0x3b9aca00
add rbx, rax
lea rdx, [rdi + r14]
call fcn.140001860
inc rdi
cmp rdi, 0x100000
jb 0x140001677
call qword [sym.imp.MSVCP140.dll__Query_perf_frequency]
mov rdi, rax
call qword [sym.imp.MSVCP140.dll__Query_perf_counter]
cmp rdi, 0x989680
jne 0x1400016aa
imul rax, rax, 0x64
jmp 0x1400016c8
cqo
idiv rdi
mov rcx, rax
imul rax, rdx, 0x3b9aca00
imul rcx, rcx, 0x3b9aca00
cqo
idiv rdi
add rax, rcx
xorps xmm0, xmm0
lea rcx, str.___0x100_000_______fs_n
sub rax, rbx
cvtsi2ss xmm0, rax
divss xmm0, dword [str._knN]
cvtps2pd xmm1, xmm0
movq rdx, xmm1
call fcn.140001070
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_istream_char__struct_std::char_traits_char___std::cin]
call qword [sym.imp.MSVCP140.dll_public:_int___cdecl_std::basic_istream_char__struct_std::char_traits_char__::get_void____ptr64]
nop dword [rax]
lea rdx, [r14 + 0xea84a78]
call fcn.140001860
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea rdx, str.uworld:
mov qword [0x1400056d0], rax
call fcn.140001910
mov rdx, qword [0x1400056d0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___unsigned_long_long_unsigned___int64_____ptr64]
mov rcx, rax
lea rdx, [0x140001ae0]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov rdx, qword [0x1400056d0]
add rdx, 0x1b8
call fcn.140001860
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea rdx, str.game_instance:
mov qword [0x1400056c8], rax
call fcn.140001910
mov rdx, qword [0x1400056c8]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___unsigned_long_long_unsigned___int64_____ptr64]
mov rcx, rax
lea rdx, [0x140001ae0]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov rdx, qword [0x1400056d0]
add rdx, 0x30
call fcn.140001860
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea rdx, str.level:
mov qword [0x1400056d8], rax
call fcn.140001910
mov rdx, qword [0x1400056d8]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___unsigned_long_long_unsigned___int64_____ptr64]
mov rcx, rax
lea rdx, [0x140001ae0]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov ecx, 0xbb8
call qword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x140001700