Function at 0x14004fcc0
Capabilities:
Enumerate processes

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rbp
mov qword [rsp + 0x18], rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x2c0
mov rax, qword [0x1400f00c0]
xor rax, rsp
mov qword [rsp + 0x2b0], rax
xor ebp, ebp
mov edi, ebp
xor sil, sil
movzx eax, byte [reloc.WS2_32.dll_accept]
test al, al
je 0x14004ff87
lea r13d, [rbp + 1]
movabs r12, 0x7fffffffffffffff
movabs r14, 0x4e94914effff
movabs r15, 0x431bde82d7b634db
nop dword [rax]
mov dword [rsp + 0x70], 0x238
xor edx, edx
lea ecx, [rdx + 2]
call qword [sym.imp.KERNEL32.dll_CreateToolhelp32Snapshot]
mov rbx, rax
lea rdx, [rsp + 0x70]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_Process32FirstW]
cmp eax, 1
jne 0x14004fd9c
lea rdx, [rsp + 0x70]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_Process32NextW]
cmp eax, 1
jne 0x14004fd9c
nop dword [rax]
lea rdx, str.rocketleague.exe
lea rcx, [rsp + 0x9c]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
je 0x14004fdf3
lea rdx, [rsp + 0x70]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_Process32NextW]
cmp eax, 1
je 0x14004fd70
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
test sil, sil
je 0x14004fdc4
test rdi, rdi
je 0x14004fdbb
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rdi, rbp
mov dword [0x1400f16d0], ebp
xor sil, sil
lea rcx, [rsp + 0x20]
call fcn.14004c920
mov rax, qword [rsp + 0x20]
movabs rcx, 0x7fffffff1194d7fe
cmp rax, rcx
jg 0x14004ff0e
mov ebx, 0xee6b2800
add rbx, rax
jmp 0x14004ff11
mov ebx, dword [rsp + 0x78]
test ebx, ebx
je 0x14004fda5
test sil, sil
jne 0x14004fdc4
test rdi, rdi
jne 0x14004fe29
mov r8d, ebx
xor edx, edx
mov ecx, 0x1fffff
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov rdi, rax
test rax, rax
jne 0x14004fe29
mov dword [0x1400f16d0], 2
jmp 0x14004fdc4
mov dword [0x1400f16d0], r13d
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rsp + 0x58], xmm0
mov qword [rsp + 0x68], rax
movups xmmword [rsp + 0x30], xmm0
mov qword [rsp + 0x40], rbp
mov qword [rsp + 0x48], rbp
lea r8d, [rax + 6]
lea rdx, str.851248
lea rcx, [rsp + 0x30]
call fcn.1400534e0
lea r8, [rsp + 0x30]
lea rdx, [rsp + 0x58]
lea rcx, [0x1400f17a0]
call fcn.140061ff0
nop
mov ecx, dword [0x1400f1a38]
test ecx, ecx
je 0x14004fe9c
sub ecx, 1
je 0x14004fe95
cmp ecx, 1
jne 0x14004fe9c
mov ecx, 0x9470
jmp 0x14004fea1
mov ecx, 0x6d60
jmp 0x14004fea1
mov ecx, 0x4a38
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rdx, [rsp + 0x58]
mov ecx, ebx
call fcn.140001ba0
movzx eax, al
movzx esi, sil
test al, al
cmovne esi, r13d
add eax, 2
mov dword [0x1400f16d0], eax
mov rcx, qword [rsp + 0x58]
test rcx, rcx
je 0x14004fdc4
mov rdx, qword [rsp + 0x68]
sub rdx, rcx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14004ff04
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14004ffb8
call fcn.1400bbf24
jmp 0x14004fdc4
mov rbx, r12
lea rcx, [rsp + 0x28]
call fcn.14004c920
mov rax, qword [rsp + 0x28]
cmp rbx, rax
je 0x14004ff6a
jl 0x14004ff6a
mov rcx, rbx
sub rcx, rax
cmp rcx, r14
jg 0x14004ff5e
mov rax, r15
imul rcx
sar rdx, 0x12
mov rax, rdx
shr rax, 0x3f
add rdx, rax
imul rax, rdx, 0xf4240
cmp rax, rcx
jge 0x14004ff55
inc rdx
mov ecx, edx
call sub.KERNEL32.dll_Sleep
jmp 0x14004ff11
mov ecx, 0x5265c00
call sub.KERNEL32.dll_Sleep
jmp 0x14004ff11
movzx eax, byte [reloc.WS2_32.dll_accept]
test al, al
jne 0x14004fd30
test rdi, rdi
je 0x14004ff87
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [rsp + 0x2b0]
xor rcx, rsp
call fcn.1400bbec0
lea r11, [rsp + 0x2c0]
mov rbx, qword [r11 + 0x30]
mov rbp, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
ret
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3