Function at 0x140014ea1
Capabilities:
Enumerate processes

Disassembly:
jmp 0x14002aaf0
mov qword [rsp + 8], rcx
push rbp
push rdi
sub rsp, 0x748
lea rbp, [rsp + 0x20]
lea rdi, [rsp + 0x20]
mov ecx, 0x13a
mov eax, 0xcccccccc
rep stosd dword [rdi], eax
mov rcx, qword [rsp + 0x768]
mov rax, qword [0x140053040]
xor rax, rbp
mov qword [rbp + 0x718], rax
lea rcx, [0x14005d11c]
call fcn.140015162
nop
xor edx, edx
mov ecx, 2
call fcn.14001482f
mov qword [rbp + 8], rax
cmp qword [rbp + 8], 0xffffffffffffffff
jne 0x14002ab7a
lea rdx, str.Chyba_pri_vytvoreni_snimku_procesu.
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
call fcn.1400141e5
lea rdx, [0x1400140aa]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
nop
jmp 0x14002ae41
mov dword [rbp + 0x30], 0x238
lea rdx, [rbp + 0x30]
mov rcx, qword [rbp + 8]
call fcn.140014a8c
test eax, eax
je 0x14002ae36
lea rdx, str.ProcessHacker.exe
lea rcx, [rbp + 0x5c]
call qword [sym.imp.ucrtbased.dll__wcsicmp]
test eax, eax
je 0x14002abee
lea rdx, str.Aimbot.exe
lea rcx, [rbp + 0x5c]
call qword [sym.imp.ucrtbased.dll__wcsicmp]
test eax, eax
je 0x14002abee
lea rdx, str.aimbot.exe
lea rcx, [rbp + 0x5c]
call qword [sym.imp.ucrtbased.dll__wcsicmp]
test eax, eax
je 0x14002abee
lea rdx, str.ptm.exe
lea rcx, [rbp + 0x5c]
call qword [sym.imp.ucrtbased.dll__wcsicmp]
test eax, eax
jne 0x14002ae21
lea rcx, [rbp + 0x288]
call fcn.1400141ea
nop
lea rdx, [rbp + 0x5c]
lea rcx, [rbp + 0x588]
call fcn.1400145a5
nop
lea rdx, [rbp + 0x588]
lea rcx, [rbp + 0x2c8]
call fcn.140014e06
nop
lea rcx, [rbp + 0x588]
call fcn.140014ee7
nop
lea r8, [rbp + 0x2c8]
lea rdx, [0x1400498f0]
lea rcx, [rbp + 0x5c8]
call fcn.1400140be
mov qword [rbp + 0x6f8], rax
mov rax, qword [rbp + 0x6f8]
mov qword [rbp + 0x700], rax
lea r8, str.___Verejna_IP_adresa:
mov rdx, qword [rbp + 0x700]
lea rcx, [rbp + 0x608]
call fcn.140014fe1
mov qword [rbp + 0x708], rax
mov rax, qword [rbp + 0x708]
mov qword [rbp + 0x710], rax
lea r8, [rbp + 0x288]
mov rdx, qword [rbp + 0x710]
lea rcx, [rbp + 0x308]
call fcn.1400145d7
nop
lea rcx, [rbp + 0x608]
call fcn.1400142fd
nop
lea rcx, [rbp + 0x5c8]
call fcn.1400142fd
nop
mov rdx, qword [rbp + 0x740]
lea rcx, [rbp + 0x308]
call fcn.1400149a6
movzx eax, al
test eax, eax
je 0x14002add3
cmp dword [0x1400536f0], 1
jne 0x14002ad0b
lea rdx, [rbp + 0x308]
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
call fcn.140014f6e
lea rdx, [0x1400140aa]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
nop
lea rdx, str.ProcesDetect
lea rcx, [rbp + 0x648]
call fcn.1400147cb
nop
lea r8, [rbp + 0x2c8]
lea rdx, [0x1400498f0]
lea rcx, [rbp + 0x688]
call fcn.1400140be
mov qword [rbp + 0x6f8], rax
mov rax, qword [rbp + 0x6f8]
mov qword [rbp + 0x700], rax
lea r8, str._nalezen
mov rdx, qword [rbp + 0x700]
lea rcx, [rbp + 0x6c8]
call fcn.140014fe1
mov qword [rbp + 0x708], rax
mov rax, qword [rbp + 0x708]
mov qword [rbp + 0x710], rax
lea r8, [rbp + 0x648]
lea rdx, [rbp + 0x288]
mov rcx, qword [rbp + 0x710]
call fcn.1400149d8
nop
lea rcx, [rbp + 0x6c8]
call fcn.1400142fd
nop
lea rcx, [rbp + 0x688]
call fcn.1400142fd
nop
lea rcx, [rbp + 0x648]
call fcn.1400142fd
nop
lea rdx, [rbp + 0x308]
mov rcx, qword [rbp + 0x740]
call fcn.140014e33
nop
lea rcx, [rbp + 0x308]
call fcn.1400142fd
nop
lea rcx, [rbp + 0x2c8]
call fcn.1400142fd
nop
lea rcx, [rbp + 0x288]
call fcn.1400142fd
nop
jmp 0x14002ae36
lea rdx, [rbp + 0x30]
mov rcx, qword [rbp + 8]
call fcn.140014eec
test eax, eax
jne 0x14002ab96
mov rcx, qword [rbp + 8]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
nop
lea rcx, [rbp - 0x20]
lea rdx, [0x140046550]
call fcn.140014e65
mov rcx, qword [rbp + 0x718]
xor rcx, rbp
call fcn.140014861
lea rsp, [rbp + 0x728]
pop rdi
pop rbp
ret