Function at 0x1400ee0cd
Capabilities:
Enumerate processes

Disassembly:
jmp 0x140110870
mov qword [rsp + 8], rcx
push rbp
push rdi
sub rsp, 0x748
lea rbp, [rsp + 0x20]
lea rdi, [rsp + 0x20]
mov ecx, 0x13a
mov eax, 0xcccccccc
rep stosd dword [rdi], eax
mov rcx, qword [rsp + 0x768]
mov rax, qword [0x14032f1c0]
xor rax, rbp
mov qword [rbp + 0x718], rax
lea rcx, [0x14035011c]
call fcn.1400ef031
nop
xor edx, edx
mov ecx, 2
call fcn.1400ebd9b
mov qword [rbp + 8], rax
cmp qword [rbp + 8], 0xffffffffffffffff
jne 0x1401108f9
lea rdx, str.Chyba_pri_vytvoreni_snimku_procesu.
lea rcx, [0x1403324c0]
call fcn.1400e9a91
lea rdx, [0x1400e93ca]
mov rcx, rax
call fcn.1400ec110
nop
jmp 0x140110bbb
mov dword [rbp + 0x30], 0x238
lea rdx, [rbp + 0x30]
mov rcx, qword [rbp + 8]
call fcn.1400ec9f8
test eax, eax
je 0x140110bb0
lea rdx, str.ProcessHacker.exe
lea rcx, [rbp + 0x5c]
call fcn.1400eee0b
test eax, eax
je 0x140110969
lea rdx, str.Aimbot.exe
lea rcx, [rbp + 0x5c]
call fcn.1400eee0b
test eax, eax
je 0x140110969
lea rdx, str.aimbot.exe
lea rcx, [rbp + 0x5c]
call fcn.1400eee0b
test eax, eax
je 0x140110969
lea rdx, str.ptm.exe
lea rcx, [rbp + 0x5c]
call fcn.1400eee0b
test eax, eax
jne 0x140110b9b
lea rcx, [rbp + 0x288]
call fcn.1400e9b1d
nop
lea rdx, [rbp + 0x5c]
lea rcx, [rbp + 0x588]
call fcn.1400eb0a8
nop
lea rdx, [rbp + 0x588]
lea rcx, [rbp + 0x2c8]
call fcn.1400edd53
nop
lea rcx, [rbp + 0x588]
call fcn.1400ee208
nop
lea r8, [rbp + 0x2c8]
lea rdx, [0x1402dbab0]
lea rcx, [rbp + 0x5c8]
call fcn.1400e93fc
mov qword [rbp + 0x6f8], rax
mov rax, qword [rbp + 0x6f8]
mov qword [rbp + 0x700], rax
lea r8, str.___Verejna_IP_adresa:
mov rdx, qword [rbp + 0x700]
lea rcx, [rbp + 0x608]
call fcn.1400ee7b7
mov qword [rbp + 0x708], rax
mov rax, qword [rbp + 0x708]
mov qword [rbp + 0x710], rax
lea r8, [rbp + 0x288]
mov rdx, qword [rbp + 0x710]
lea rcx, [rbp + 0x308]
call fcn.1400eb1a7
nop
lea rcx, [rbp + 0x608]
call fcn.1400ea1da
nop
lea rcx, [rbp + 0x5c8]
call fcn.1400ea1da
nop
mov rdx, qword [rbp + 0x740]
lea rcx, [rbp + 0x308]
call fcn.1400ec561
movzx eax, al
test eax, eax
je 0x140110b4d
cmp dword [0x140331c20], 1
jne 0x140110a85
lea rdx, [rbp + 0x308]
lea rcx, [0x1403324c0]
call fcn.1400ee4e7
lea rdx, [0x1400e93ca]
mov rcx, rax
call fcn.1400ec110
nop
lea rdx, str.ProcesDetect
lea rcx, [rbp + 0x648]
call fcn.1400ebbb1
nop
lea r8, [rbp + 0x2c8]
lea rdx, [0x1402dbab0]
lea rcx, [rbp + 0x688]
call fcn.1400e93fc
mov qword [rbp + 0x6f8], rax
mov rax, qword [rbp + 0x6f8]
mov qword [rbp + 0x700], rax
lea r8, str._nalezen
mov rdx, qword [rbp + 0x700]
lea rcx, [rbp + 0x6c8]
call fcn.1400ee7b7
mov qword [rbp + 0x708], rax
mov rax, qword [rbp + 0x708]
mov qword [rbp + 0x710], rax
lea r8, [rbp + 0x648]
lea rdx, [rbp + 0x288]
mov rcx, qword [rbp + 0x710]
call fcn.1400ec66f
nop
lea rcx, [rbp + 0x6c8]
call fcn.1400ea1da
nop
lea rcx, [rbp + 0x688]
call fcn.1400ea1da
nop
lea rcx, [rbp + 0x648]
call fcn.1400ea1da
nop
lea rdx, [rbp + 0x308]
mov rcx, qword [rbp + 0x740]
call fcn.1400edeb6
nop
lea rcx, [rbp + 0x308]
call fcn.1400ea1da
nop
lea rcx, [rbp + 0x2c8]
call fcn.1400ea1da
nop
lea rcx, [rbp + 0x288]
call fcn.1400ea1da
nop
jmp 0x140110bb0
lea rdx, [rbp + 0x30]
mov rcx, qword [rbp + 8]
call fcn.1400ee24e
test eax, eax
jne 0x140110915
mov rcx, qword [rbp + 8]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
nop
lea rcx, [rbp - 0x20]
lea rdx, [0x1402d81d0]
call fcn.1400edf7e
mov rcx, qword [rbp + 0x718]
xor rcx, rbp
call fcn.1400ebe63
lea rsp, [rbp + 0x728]
pop rdi
pop rbp
ret