Function at 0x14001133e
Capabilities:
Enumerate processes

Disassembly:
jmp 0x140012ef0
push rbp
push rdi
sub rsp, 0xbf8
lea rbp, [rsp + 0x20]
lea rdi, [rsp + 0x20]
mov ecx, 0x206
mov eax, 0xcccccccc
rep stosd dword [rdi], eax
mov rax, qword [section..data]
xor rax, rbp
mov qword [rbp + 0xbc8], rax
lea rcx, [0x1400250f3]
call fcn.140011492
lea rax, str.RobloxPlayerBeta.exe
mov qword [rbp + 8], rax
lea rax, str..text
mov qword [rbp + 0x30], rax
lea rax, str..rodata
mov qword [rbp + 0x38], rax
lea rax, str..rdata
mov qword [rbp + 0x40], rax
lea rax, str..data
mov qword [rbp + 0x48], rax
lea rax, str..pdata
mov qword [rbp + 0x50], rax
lea rax, str._RDATA
mov qword [rbp + 0x58], rax
lea rax, str..vmp0
mov qword [rbp + 0x60], rax
lea rax, str..reloc
mov qword [rbp + 0x68], rax
lea rax, str..rsrc
mov qword [rbp + 0x70], rax
lea rax, str..krampus
mov qword [rbp + 0x78], rax
xor edx, edx
mov ecx, 2
call fcn.140011230
mov qword [rbp + 0x98], rax
cmp qword [rbp + 0x98], 0xffffffffffffffff
jne 0x14001300d
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rbp + 0xbc4], eax
lea rdx, str._ERR_
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
call fcn.14001109b
mov ecx, dword [rbp + 0xbc4]
mov edx, ecx
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___unsigned_long_int____ptr64]
lea rdx, [0x140011041]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov eax, 1
jmp 0x140013285
mov dword [rbp + 0xc0], 0x238
lea rdx, [rbp + 0xc0]
mov rcx, qword [rbp + 0x98]
call fcn.1400112d5
test eax, eax
je 0x140013236
lea rdx, str.RobloxPlayerBeta.exe
lea rcx, [rbp + 0xec]
call qword [sym.imp.ucrtbased.dll__wcsicmp]
test eax, eax
jne 0x140013219
mov edx, dword [rbp + 0xc8]
mov ecx, 8
call fcn.140011230
mov qword [rbp + 0x318], rax
cmp qword [rbp + 0x318], 0xffffffffffffffff
je 0x1400131d7
mov dword [rbp + 0x340], 0x438
lea rdx, [rbp + 0x340]
mov rcx, qword [rbp + 0x318]
call fcn.1400110c8
test eax, eax
je 0x1400131c8
lea rdx, str._MODULE_
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.140011271
lea rdx, [rbp + 0x370]
mov rcx, rax
call fcn.140011271
lea rdx, str.__BASE_ADDRESS__0x
mov rcx, rax
call fcn.140011271
lea rdx, [0x14001144c]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64___cdecl_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::operator___class_std::ios_base____ptr64____cdecl___class_std::ios_base____ptr64_____ptr64]
mov rdx, qword [rbp + 0x358]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64___cdecl_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::operator___void_const____ptr64____ptr64]
lea rdx, str.__SIZE__0x
mov rcx, rax
call fcn.140011271
lea rdx, [0x14001144c]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64___cdecl_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::operator___class_std::ios_base____ptr64____cdecl___class_std::ios_base____ptr64_____ptr64]
mov edx, dword [rbp + 0x360]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64___cdecl_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::operator___unsigned_long_int____ptr64]
lea rdx, [0x14001124e]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64___cdecl_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::operator___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64____cdecl___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64_____ptr64]
lea rax, [rbp + 0x30]
mov qword [rbp + 0x798], rax
mov rax, qword [rbp + 0x798]
mov qword [rbp + 0x7b8], rax
mov rax, qword [rbp + 0x798]
add rax, 0x50
mov qword [rbp + 0x7d8], rax
jmp 0x140013166
mov rax, qword [rbp + 0x7b8]
add rax, 8
mov qword [rbp + 0x7b8], rax
mov rax, qword [rbp + 0x7d8]
cmp qword [rbp + 0x7b8], rax
je 0x1400131c3
mov rax, qword [rbp + 0x7b8]
mov qword [rbp + 0x7f8], rax
mov rax, qword [rbp + 0x7f8]
mov rdx, qword [rax]
lea rcx, [rbp + 0x370]
call qword [sym.imp.ucrtbased.dll__wcsicmp]
test eax, eax
jne 0x1400131c1
mov r9d, 0x3393000
mov r8d, 0x1000
mov rax, qword [rbp + 0x7f8]
mov rdx, qword [rax]
lea rcx, [rbp + 0x370]
call fcn.14001150a
jmp 0x140013154
jmp 0x14001307d
mov rcx, qword [rbp + 0x318]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x140013217
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rbp + 0xbc4], eax
lea rdx, str._ERR_
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
call fcn.14001109b
mov ecx, dword [rbp + 0xbc4]
mov edx, ecx
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___unsigned_long_int____ptr64]
lea rdx, [0x140011041]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
jmp 0x140013234
lea rdx, [rbp + 0xc0]
mov rcx, qword [rbp + 0x98]
call fcn.14001142e
test eax, eax
jne 0x140013032
jmp 0x140013276
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rbp + 0xbc4], eax
lea rdx, str._ERR_
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
call fcn.14001109b
mov ecx, dword [rbp + 0xbc4]
mov edx, ecx
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___unsigned_long_int____ptr64]
lea rdx, [0x140011041]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov rcx, qword [rbp + 0x98]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
xor eax, eax
mov rdi, rax
lea rcx, [rbp - 0x20]
lea rdx, [0x14001bcb0]
call fcn.14001140b
mov rax, rdi
mov rcx, qword [rbp + 0xbc8]
xor rcx, rbp
call fcn.140011244
lea rsp, [rbp + 0xbd8]
pop rdi
pop rbp
ret