Function at 0x14001143d
Capabilities:
Enumerate processes

Disassembly:
jmp 0x140015510
push rbp
push rsi
push rdi
sub rsp, 0x510
lea rbp, [rsp + 0x20]
lea rdi, [rsp + 0x20]
mov ecx, 0xdc
mov eax, 0xcccccccc
rep stosd dword [rdi], eax
mov rax, qword [0x140023018]
xor rax, rbp
mov qword [rbp + 0x4e8], rax
lea rcx, [0x1400290f6]
call fcn.140011609
lea rax, [rbp + 8]
lea rcx, str.c:_yimmenuinjector_yimmenu.dll
mov rdi, rax
mov rsi, rcx
mov ecx, 0x3e
rep movsb byte [rdi], byte [rsi]
mov dword [rbp + 0x64], 0
xor edx, edx
mov ecx, 2
call fcn.1400112e9
mov qword [rbp + 0x88], rax
cmp qword [rbp + 0x88], 0xffffffffffffffff
je 0x140015636
mov dword [rbp + 0xb0], 0x238
lea rdx, [rbp + 0xb0]
mov rcx, qword [rbp + 0x88]
call fcn.1400113ca
test eax, eax
je 0x140015629
lea rdx, [rbp + 0xdc]
lea rcx, [rbp + 0x4a8]
call fcn.140011208
mov qword [rbp + 0x4d8], rax
mov rax, qword [rbp + 0x4d8]
mov qword [rbp + 0x4e0], rax
lea rdx, str.GTA5.exe
mov rcx, qword [rbp + 0x4e0]
call fcn.14001121c
mov byte [rbp + 0x484], al
lea rcx, [rbp + 0x4a8]
call fcn.14001157d
movzx eax, byte [rbp + 0x484]
test eax, eax
je 0x140015612
mov eax, dword [rbp + 0xb8]
mov dword [rbp + 0x64], eax
jmp 0x140015629
lea rdx, [rbp + 0xb0]
mov rcx, qword [rbp + 0x88]
call fcn.140011582
test eax, eax
jne 0x1400155af
mov rcx, qword [rbp + 0x88]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
cmp dword [rbp + 0x64], 0
jne 0x140015663
lea rdx, str.Unable_to_find_the_target_process
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.140011334
lea rdx, [0x14001130c]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64___cdecl_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::operator___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64____cdecl___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64_____ptr64]
xor eax, eax
jmp 0x1400156bd
lea rdx, [rbp + 8]
mov ecx, dword [rbp + 0x64]
call fcn.14001148d
test eax, eax
je 0x140015698
lea rdx, str.DLL_has_been_injected_into_the_process_successfully
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.140011334
lea rdx, [0x14001130c]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64___cdecl_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::operator___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64____cdecl___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64_____ptr64]
jmp 0x1400156bb
lea rdx, str.Couldnt_inject_DLL_into_the_process
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.140011334
lea rdx, [0x14001130c]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64___cdecl_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::operator___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64____cdecl___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64_____ptr64]
xor eax, eax
mov rdi, rax
lea rcx, [rbp - 0x20]
lea rdx, [0x14001eec0]
call fcn.14001153c
mov rax, rdi
mov rcx, qword [rbp + 0x4e8]
xor rcx, rbp
call fcn.140011302
lea rsp, [rbp + 0x4f0]
pop rdi
pop rsi
pop rbp
ret