Function at 0x14003a400
Capabilities:
Enumerate process modules

Disassembly:
push rbx
sub rsp, 0x280
mov rax, qword [0x140048040]
xor rax, rsp
mov qword [rsp + 0x270], rax
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea rdx, str._debug__attemping_to_get_base:
mov ebx, dword [0x140048a3c]
call fcn.14003a6b0
mov rcx, rax
lea rdx, str.RobloxPlayerBeta.exe
call fcn.14003a6b0
mov rcx, rax
lea rdx, [0x140040eac]
call fcn.14003a6b0
mov rcx, rax
mov edx, ebx
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___unsigned_long_int____ptr64]
mov rcx, rax
lea rdx, [0x140040ea8]
call fcn.14003a6b0
mov rcx, rax
lea rdx, [0x14003a880]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov edx, ebx
mov ecx, 0x18
call qword [sym.imp.KERNEL32.dll_CreateToolhelp32Snapshot]
mov rbx, rax
cmp rax, 0xffffffffffffffff
je 0x14003a5d1
lea rdx, [rsp + 0x30]
mov dword [rsp + 0x30], 0x238
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_Module32First]
test eax, eax
je 0x14003a5d1
lea rdx, str.RobloxPlayerBeta.exe
lea rcx, [rsp + 0x60]
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
mov rcx, rbx
test eax, eax
je 0x14003a5ec
lea rdx, [rsp + 0x30]
call qword [sym.imp.KERNEL32.dll_Module32Next]
test eax, eax
jne 0x14003a4b4
lea rcx, str._error_:_Roblox_process_wasnt_found_console_will_be_hidden_in_3_seconds..._n
call fcn.140001010
lea rcx, [rsp + 0x20]
call fcn.14003a200
mov rax, qword [rsp + 0x20]
movabs rcx, 0x7fffffff4d2fa1ff
cmp rax, rcx
jge 0x14003a513
mov ebx, 0xb2d05e00
add rbx, rax
jmp 0x14003a51d
movabs rbx, 0x7fffffffffffffff
lea rcx, [rsp + 0x20]
call fcn.14003a200
mov rax, qword [rsp + 0x20]
cmp rax, rbx
jge 0x14003a5c0
mov qword [rsp + 0x290], rsi
movabs rsi, 0x431bde82d7b634db
mov qword [rsp + 0x298], rdi
movabs rdi, 0x4e94914f0000
nop dword [rax]
mov rcx, rbx
sub rcx, rax
cmp rcx, rdi
jl 0x14003a572
mov ecx, 0x5265c00
jmp 0x14003a597
mov rax, rsi
imul rcx
sar rdx, 0x12
mov rax, rdx
shr rax, 0x3f
add rdx, rax
imul rax, rdx, 0xf4240
cmp rax, rcx
jge 0x14003a595
inc rdx
mov ecx, edx
call sub.KERNEL32.dll_Sleep
lea rcx, [rsp + 0x20]
call fcn.14003a200
mov rax, qword [rsp + 0x20]
cmp rax, rbx
jl 0x14003a560
mov rdi, qword [rsp + 0x298]
mov rsi, qword [rsp + 0x290]
call qword [sym.imp.KERNEL32.dll_GetConsoleWindow]
mov rcx, rax
xor edx, edx
call qword [sym.imp.USER32.dll_ShowWindow]
xor eax, eax
mov rcx, qword [rsp + 0x270]
xor rcx, rsp
call fcn.14003a8d0
add rsp, 0x280
pop rbx
ret
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea rdx, str._debug__Got_base_address:_0x
call fcn.14003a6b0
mov rcx, rax
lea rdx, [0x14003a1e0]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::ios_base____ptr64____cdecl___class_std::ios_base____ptr64_____ptr64]
mov rdx, qword [rsp + 0x48]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___unsigned_long_long_unsigned___int64_____ptr64]
mov rcx, rax
lea rdx, [0x14003a880]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov rax, qword [rsp + 0x48]
jmp 0x14003a5d3