Function at 0x140001330
Capabilities:
Enumerate processes

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
mov qword [rsp + 0x20], r14
push rbp
lea rbp, [rsp - 0x1e0]
sub rsp, 0x2e0
mov rax, qword [section..data]
xor rax, rsp
mov qword [rbp + 0x1d0], rax
mov rbx, qword [0x140005728]
lea rcx, str..5b6b64b3_dbdb_4444_b55b_clad4fbb20fd
xor edi, edi
xor r9d, r9d
mov qword [rsp + 0x30], rdi
xor r8d, r8d
mov dword [rsp + 0x28], 0x80
mov edx, 0x80000000
mov dword [rsp + 0x20], 3
call qword [sym.imp.KERNEL32.dll_CreateFileA]
mov qword [rbx + 8], rax
cmp rax, 0xffffffffffffffff
jne 0x1400013be
lea rcx, str._n__log_____failed_to_initialize_driver._n
call fcn.140001070
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_istream_char__struct_std::char_traits_char___std::cin]
call qword [sym.imp.MSVCP140.dll_public:_int___cdecl_std::basic_istream_char__struct_std::char_traits_char__::get_void____ptr64]
lea rcx, str._n__log_____driver_initialized._n
call fcn.140001070
mov ecx, 0x50
mov qword [rsp + 0x78], rdi
call fcn.140001f70
movaps xmm0, xmmword [str.FortniteClient_Win64_Shipping.exe]
mov rbx, rax
mov qword [rsp + 0x70], rax
xor edx, edx
mov ecx, 2
mov qword [rbp - 0x80], 0x21
movups xmmword [rax], xmm0
mov qword [rbp - 0x78], 0x27
movaps xmm1, xmmword [0x140003470]
movups xmmword [rax + 0x10], xmm1
mov dword [rbp - 0x70], 0x238
movaps xmm0, xmmword [0x140003480]
movups xmmword [rax + 0x20], xmm0
movaps xmm1, xmmword [0x140003490]
movups xmmword [rax + 0x30], xmm1
movzx eax, word [0x1400034a0]
mov word [rbx + 0x40], ax
mov word [rbx + 0x42], di
call qword [sym.imp.KERNEL32.dll_CreateToolhelp32Snapshot]
mov rsi, rax
cmp rax, 0xffffffffffffffff
je 0x1400014d6
lea rdx, [rbp - 0x70]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_Process32FirstW]
lea rax, [rbp - 0x44]
mov r8, rbx
sub r8, rax
movzx edx, word [rax]
movzx ecx, word [rax + r8]
sub edx, ecx
jne 0x140001477
add rax, 2
test ecx, ecx
jne 0x140001463
mov rcx, rsi
test edx, edx
je 0x140001683
lea rdx, [rbp - 0x70]
call qword [sym.imp.KERNEL32.dll_Process32NextW]
test eax, eax
je 0x1400014cd
lea rax, [rbp - 0x44]
mov r8, rbx
sub r8, rax
nop word [rax + rax]
movzx edx, word [rax]
movzx ecx, word [rax + r8]
sub edx, ecx
jne 0x1400014b4
add rax, 2
test ecx, ecx
jne 0x1400014a0
mov rcx, rsi
test edx, edx
je 0x140001683
lea rdx, [rbp - 0x70]
call qword [sym.imp.KERNEL32.dll_Process32NextW]
test eax, eax
jne 0x140001490
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov edx, 0x50
mov rcx, rbx
mov esi, edi
call fcn.140001fb4
lea rcx, str._n__log_____failed_to_get_process_id._n
call fcn.140001070
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_istream_char__struct_std::char_traits_char___std::cin]
call qword [sym.imp.MSVCP140.dll_public:_int___cdecl_std::basic_istream_char__struct_std::char_traits_char__::get_void____ptr64]
lea rcx, str.__log_____failed_to_attach_to_pid._n
call fcn.140001070
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_istream_char__struct_std::char_traits_char___std::cin]
call qword [sym.imp.MSVCP140.dll_public:_int___cdecl_std::basic_istream_char__struct_std::char_traits_char__::get_void____ptr64]
mov edx, esi
lea rcx, str.__pid______i_n
call fcn.140001070
mov rcx, qword [0x140005728]
xor r9d, r9d
mov dword [rsp + 0x48], 0x10
xor r8d, r8d
xor edx, edx
mov dword [rsp + 0x74], edi
mov qword [rbp - 0x78], rdi
mov eax, dword [rcx]
mov rcx, qword [rcx + 8]
mov dword [rsp + 0x70], eax
lea rax, [rsp + 0x70]
mov qword [rsp + 0x58], rax
lea rax, [rsp + 0x50]
mov qword [rsp + 0x40], rax
lea rax, [rsp + 0x50]
mov dword [rsp + 0x38], 0x10
mov qword [rsp + 0x30], rax
lea rax, [rsp + 0x60]
mov dword [rsp + 0x28], edi
mov qword [rsp + 0x20], rax
mov qword [rsp + 0x78], rdi
mov qword [rbp - 0x80], rdi
mov dword [rsp + 0x50], 5
mov dword [rsp + 0x54], 1
call fcn.140001f30
mov rsi, qword [rsp + 0x78]
test rsi, rsi
jne 0x1400015c3
lea rcx, str.__log_____failed_to_get_base_address._n
call fcn.140001070
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_istream_char__struct_std::char_traits_char___std::cin]
call qword [sym.imp.MSVCP140.dll_public:_int___cdecl_std::basic_istream_char__struct_std::char_traits_char__::get_void____ptr64]
mov rdx, rsi
lea rcx, str.__base_address______I64d_n
call fcn.140001070
mov rdx, rsi
call fcn.140001c70
test al, al
jne 0x1400015f7
lea rcx, str.__log_____failed_to_get_cr3._n
call fcn.140001070
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_istream_char__struct_std::char_traits_char___std::cin]
call qword [sym.imp.MSVCP140.dll_public:_int___cdecl_std::basic_istream_char__struct_std::char_traits_char__::get_void____ptr64]
mov rdx, rsi
call fcn.1400019a0
mov rbx, rax
test rax, rax
jne 0x140001620
lea rcx, str.__log_____failed_to_get_buffer._n
call fcn.140001070
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_istream_char__struct_std::char_traits_char___std::cin]
call qword [sym.imp.MSVCP140.dll_public:_int___cdecl_std::basic_istream_char__struct_std::char_traits_char__::get_void____ptr64]
mov rdx, rbx
lea rcx, str._buffer____0x_p_n
call fcn.140001070
lea rcx, [rsp + 0x50]
call fcn.140001250
mov rbx, rdi
nop dword [rax]
lea rdx, [rbx + rsi]
call fcn.1400019a0
inc rbx
cmp rbx, 0x10000
jb 0x140001640
call qword [sym.imp.MSVCP140.dll__Query_perf_frequency]
mov rbx, rax
call qword [sym.imp.MSVCP140.dll__Query_perf_counter]
movabs r14, 0xb2f4fc0794908cf3
mov rcx, rax
cmp rbx, 0x989680
jne 0x1400016af
imul rax, rcx, 0x64
jmp 0x140001722
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov esi, dword [rbp - 0x68]
mov edx, 0x50
mov rcx, rbx
call fcn.140001fb4
test esi, esi
je 0x1400014e5
mov rax, qword [0x140005728]
mov dword [rax], esi
jmp 0x140001517
cmp rbx, 0x16e3600
jne 0x140001704
mov rax, r14
imul rcx
lea r8, [rcx + rdx]
sar r8, 0x18
mov rax, r8
shr rax, 0x3f
add r8, rax
imul rax, r8, 0x16e3600
sub rcx, rax
mov rax, r14
imul rcx, rcx, 0x3b9aca00
imul rcx
add rdx, rcx
sar rdx, 0x18
mov rax, rdx
shr rax, 0x3f
add rdx, rax
imul rax, r8, 0x3b9aca00
add rax, rdx
jmp 0x140001722
cqo
idiv rbx
mov rcx, rax
imul rax, rdx, 0x3b9aca00
imul rcx, rcx, 0x3b9aca00
cqo
idiv rbx
add rax, rcx
sub rax, qword [rsp + 0x50]
lea rcx, str.___0x10_000_______fs_n
xorps xmm0, xmm0
cvtsi2ss xmm0, rax
divss xmm0, dword [str._knN]
cvtps2pd xmm1, xmm0
movq rdx, xmm1
call fcn.140001070
lea rcx, [rsp + 0x50]
call fcn.140001250
lea rdx, [rdi + rsi]
call fcn.1400019a0
inc rdi
cmp rdi, 0x100000
jb 0x140001755
call qword [sym.imp.MSVCP140.dll__Query_perf_frequency]
mov rbx, rax
call qword [sym.imp.MSVCP140.dll__Query_perf_counter]
mov r9, rax
cmp rbx, 0x989680
jne 0x14000178b
imul rax, r9, 0x64
jmp 0x1400017fe
cmp rbx, 0x16e3600
jne 0x1400017e0
mov rax, r14
imul r9
mov rax, r14
lea r8, [r9 + rdx]
sar r8, 0x18
mov rcx, r8
shr rcx, 0x3f
add r8, rcx
imul rcx, r8, 0x16e3600
sub r9, rcx
imul rcx, r9, 0x3b9aca00
imul rcx
add rdx, rcx
sar rdx, 0x18
mov rax, rdx
shr rax, 0x3f
add rdx, rax
imul rax, r8, 0x3b9aca00
add rax, rdx
jmp 0x1400017fe
cqo
idiv rbx
mov rcx, rax
imul rax, rdx, 0x3b9aca00
imul rcx, rcx, 0x3b9aca00
cqo
idiv rbx
add rax, rcx
sub rax, qword [rsp + 0x50]
lea rcx, str.___0x100_000_______fs_n
xorps xmm0, xmm0
cvtsi2ss xmm0, rax
divss xmm0, dword [str._knN]
cvtps2pd xmm1, xmm0
movq rdx, xmm1
call fcn.140001070
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_istream_char__struct_std::char_traits_char___std::cin]
call qword [sym.imp.MSVCP140.dll_public:_int___cdecl_std::basic_istream_char__struct_std::char_traits_char__::get_void____ptr64]
lea rdx, [rsi + 0xea84a78]
call fcn.1400019a0
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea rdx, str.uworld:
mov qword [0x140005718], rax
call fcn.140001a50
mov rdx, qword [0x140005718]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___unsigned_long_long_unsigned___int64_____ptr64]
mov rcx, rax
lea rdx, [0x140001c30]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov rdx, qword [0x140005718]
add rdx, 0x1b8
call fcn.1400019a0
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea rdx, str.game_instance:
mov qword [0x140005710], rax
call fcn.140001a50
mov rdx, qword [0x140005710]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___unsigned_long_long_unsigned___int64_____ptr64]
mov rcx, rax
lea rdx, [0x140001c30]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov rdx, qword [0x140005718]
add rdx, 0x30
call fcn.1400019a0
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea rdx, str.level:
mov qword [0x140005720], rax
call fcn.140001a50
mov rdx, qword [0x140005720]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___unsigned_long_long_unsigned___int64_____ptr64]
mov rcx, rax
lea rdx, [0x140001c30]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov ecx, 0xbb8
call qword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x140001834