Function at 0x140009760
Capabilities:
Create thread
Enumerate process modules
Inject thread

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x198
mov rsi, rdx
mov rbx, rcx
mov ecx, 0x1000
mov edx, 4
call fcn.14000a490
test rax, rax
je 0x14000a1b0
mov rdi, rax
mov dword [rsp + 0x90], 0
lea r8, [rsp + 0x90]
mov rcx, rax
mov edx, 0x1000
call sub.PSAPI.DLL_EnumProcesses
mov ebp, eax
test eax, eax
je 0x140009822
mov eax, dword [rsp + 0x90]
mov ecx, eax
shr ecx, 2
cmp ecx, 0x400
mov r12d, 0x400
cmovb r12d, ecx
cmp eax, 4
jb 0x140009957
shl r12d, 2
xor r13d, r13d
mov r14, rdi
jmp 0x1400097f9
add r13, 4
cmp r12, r13
je 0x140009842
mov r15d, dword [rdi + r13]
mov ecx, 0x410
xor edx, edx
mov r8d, r15d
call sub.KERNEL32.dll_OpenProcess
test rax, rax
je 0x1400097f0
mov rcx, rax
call sub.KERNEL32.dll_CloseHandle
mov dword [r14], r15d
add r14, 4
jmp 0x1400097f0
mov edx, 0x1000
mov r8d, 4
mov rcx, rdi
call fcn.14000a470
xor r14d, r14d
mov edi, 4
jmp 0x14000995d
sub r14, rdi
je 0x140009957
call fcn.14000ab20
shr r14, 2
mov qword [rsp + 0xf8], rax
lea r8, [rsp + 0xf8]
mov rcx, rdi
mov rdx, r14
call fcn.1400081e0
test rax, rax
je 0x1400099cc
mov eax, dword [rax]
mov dword [rsp + 0x84], eax
lea rax, [rsp + 0x84]
mov qword [rsp + 0x40], rax
lea rax, [fcn.1400a3a50]
mov qword [rsp + 0x48], rax
lea rax, [0x1400ab4e0]
mov qword [rsp + 0x90], rax
mov qword [rsp + 0x98], 2
mov qword [rsp + 0xb0], 0
lea r12, [rsp + 0x40]
mov qword [rsp + 0xa0], r12
mov qword [rsp + 0xa8], 1
lea rcx, [rsp + 0x90]
call fcn.14003cdd0
mov r8d, dword [rsp + 0x84]
mov r14, qword [rsi + 8]
mov r15, qword [rsi + 0x10]
mov dword [rsp + 0x88], r8d
mov ecx, 0x1fffff
xor edx, edx
call sub.KERNEL32.dll_OpenProcess
test rax, rax
je 0x140009a29
mov rbp, rax
lea rcx, [rsp + 0x100]
mov rdx, r14
mov r8, r15
call fcn.140084690
movabs rax, 0x8000000000000000
cmp qword [rsp + 0x100], rax
jne 0x140009a94
mov r15, qword [rsp + 0x108]
mov r14, qword [rsp + 0x110]
jmp 0x140009b6d
mov r14d, 0x400
mov rax, qword [0x1400d10c8]
movzx eax, byte [rax]
mov ecx, 0x1e
mov edx, 1
call fcn.14000a460
test rax, rax
je 0x14000a1c4
movups xmm0, xmmword [0x1400ab4b6]
movups xmmword [rax + 0xe], xmm0
movups xmm0, xmmword [str.No_injectable_processes_found.Selected_random_PID:__n]
movups xmmword [rax], xmm0
mov qword [rbx + 8], 0x1e
mov qword [rbx + 0x10], rax
mov qword [rbx + 0x18], 0x1e
mov qword [rbx], 1
test ebp, ebp
je 0x14000a182
shl r14d, 2
mov r8d, 4
mov rcx, rdi
mov rdx, r14
jmp 0x14000a17d
mov rax, qword [0x1400d10c8]
movzx eax, byte [rax]
mov ecx, 0x22
mov edx, 1
call fcn.14000a460
test rax, rax
je 0x14000a1d8
movups xmm0, xmmword [0x1400ab598]
movups xmmword [rax + 0x10], xmm0
movups xmm0, xmmword [str.Failed_to_select_a_random_process.]
movups xmmword [rax], xmm0
mov word [rax + 0x20], 0x2e73
mov qword [rbx + 8], 0x22
mov qword [rbx + 0x10], rax
mov qword [rbx + 0x18], 0x22
mov qword [rbx], 1
jmp 0x14000a14c
lea rax, [rsp + 0x88]
mov qword [rsp + 0x40], rax
lea rax, [fcn.1400a3a50]
mov qword [rsp + 0x48], rax
lea rax, [0x1400ab340]
mov qword [rsp + 0x90], rax
mov qword [rsp + 0x98], 1
mov qword [rsp + 0xb0], 0
mov qword [rsp + 0xa0], r12
mov qword [rsp + 0xa8], 1
lea rcx, [rsp + 0x60]
lea rdx, [rsp + 0x90]
call fcn.140085170
jmp 0x140009fb1
movups xmm0, xmmword [rsp + 0x100]
movups xmm1, xmmword [rsp + 0x110]
movaps xmmword [rsp + 0x50], xmm1
movaps xmmword [rsp + 0x40], xmm0
mov qword [rsp + 0x60], 0
mov qword [rsp + 0x68], 1
mov qword [rsp + 0x70], 0
mov qword [rsp + 0xc0], 0x20
mov byte [rsp + 0xc8], 3
mov qword [rsp + 0x90], 0
mov qword [rsp + 0xa0], 0
lea rax, [rsp + 0x60]
mov qword [rsp + 0xb0], rax
lea rax, [0x1400ab190]
mov qword [rsp + 0xb8], rax
lea rcx, [rsp + 0x40]
lea rdx, [rsp + 0x90]
call fcn.140084ea0
test al, al
jne 0x14000a1ec
mov r13, r12
mov r12, qword [rsp + 0x60]
mov r15, qword [rsp + 0x68]
mov r14, qword [rsp + 0x70]
mov rdx, qword [rsp + 0x40]
test rdx, rdx
je 0x140009b57
mov rcx, qword [rsp + 0x48]
mov r8d, 1
call fcn.14000a470
movabs rax, 0x8000000000000000
cmp r12, rax
jne 0x140009d4c
mov r12, r13
mov dword [rsp + 0x20], 4
mov rcx, rbp
xor edx, edx
mov r8, r14
mov r9d, 0x1000
call sub.KERNEL32.dll_VirtualAllocEx
test rax, rax
je 0x140009cbc
mov r13, rax
mov qword [rsp + 0x20], 0
mov rcx, rbp
mov rdx, rax
mov r8, r15
mov r9, r14
call sub.KERNEL32.dll_WriteProcessMemory
test eax, eax
je 0x140009d63
lea rdx, str.kernel32.dllsrc_common_inject.rs_n_
lea rcx, [rsp + 0x40]
mov r8d, 0xc
call fcn.140084690
movabs rax, 0x8000000000000000
cmp qword [rsp + 0x40], rax
jne 0x14000a21d
mov rcx, qword [rsp + 0x48]
mov rax, qword [rsp + 0x50]
mov qword [rsp + 0xf0], rax
mov qword [rsp + 0xe8], rcx
call sub.KERNEL32.dll_LoadLibraryA
test rax, rax
je 0x140009df3
mov r12, rax
lea rdx, [0x1400ab424]
lea rcx, [rsp + 0x40]
mov r8d, 0xc
call fcn.140084690
movabs rax, 0x8000000000000000
cmp qword [rsp + 0x40], rax
jne 0x14000a265
mov rdx, qword [rsp + 0x48]
mov rax, qword [rsp + 0x50]
mov qword [rsp + 0xe0], rax
mov rcx, r12
mov qword [rsp + 0xd8], rdx
call sub.KERNEL32.dll_GetProcAddress
test rax, rax
je 0x140009e53
mov qword [rsp + 0x20], r13
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0
mov rcx, rbp
xor edx, edx
xor r8d, r8d
mov r9, rax
call sub.KERNEL32.dll_CreateRemoteThread
test rax, rax
lea r12, [rsp + 0x40]
je 0x140009ec1
mov rcx, rax
call sub.KERNEL32.dll_CloseHandle
mov rcx, rbp
call sub.KERNEL32.dll_CloseHandle
movabs rax, 0x8000000000000000
mov qword [rsp + 0x60], rax
jmp 0x140009f51
mov rcx, rbp
call sub.KERNEL32.dll_CloseHandle
lea rax, [rsp + 0x88]
mov qword [rsp + 0x40], rax
lea rax, [fcn.1400a3a50]
mov qword [rsp + 0x48], rax
lea rax, str.Failed_to_allocate_memory_in_process_with_PID:
mov qword [rsp + 0x90], rax
mov qword [rsp + 0x98], 1
mov qword [rsp + 0xb0], 0
mov qword [rsp + 0xa0], r12
mov qword [rsp + 0xa8], 1
lea rcx, [rsp + 0x150]
lea rdx, [rsp + 0x90]
call fcn.140085170
movups xmm0, xmmword [rsp + 0x150]
movaps xmmword [rsp + 0x60], xmm0
mov rax, qword [rsp + 0x160]
mov qword [rsp + 0x70], rax
jmp 0x140009f97
mov qword [rsp + 0x60], r12
mov qword [rsp + 0x68], r15
mov qword [rsp + 0x70], r14
mov r12, r13
jmp 0x14000a064
mov rcx, rbp
call sub.KERNEL32.dll_CloseHandle
lea rax, [rsp + 0x88]
mov qword [rsp + 0x40], rax
lea rax, [fcn.1400a3a50]
mov qword [rsp + 0x48], rax
lea rax, str.Failed_to_write_to_process_memory_for_PID:
mov qword [rsp + 0x90], rax
mov qword [rsp + 0x98], 1
mov qword [rsp + 0xb0], 0
mov qword [rsp + 0xa0], r12
mov qword [rsp + 0xa8], 1
lea rcx, [rsp + 0x168]
lea rdx, [rsp + 0x90]
call fcn.140085170
movups xmm0, xmmword [rsp + 0x168]
movaps xmmword [rsp + 0x60], xmm0
mov rax, qword [rsp + 0x178]
mov qword [rsp + 0x70], rax
jmp 0x140009f97
mov rcx, rbp
call sub.KERNEL32.dll_CloseHandle
mov rax, qword [0x1400d10c8]
movzx eax, byte [rax]
mov ecx, 0x1c
mov edx, 1
call fcn.14000a460
test rax, rax
je 0x14000a2ad
movups xmm0, xmmword [0x1400ab414]
movups xmmword [rax + 0xc], xmm0
movups xmm0, xmmword [str.Failed_to_load_kernel32.dll.LoadLibraryA_n_]
movups xmmword [rax], xmm0
mov qword [rsp + 0x60], 0x1c
mov qword [rsp + 0x68], rax
mov qword [rsp + 0x70], 0x1c
lea r12, [rsp + 0x40]
jmp 0x140009f74
mov rcx, rbp
call sub.KERNEL32.dll_CloseHandle
mov rax, qword [0x1400d10c8]
movzx eax, byte [rax]
mov ecx, 0x26
mov edx, 1
call fcn.14000a460
test rax, rax
lea r12, [rsp + 0x40]
je 0x14000a2be
movups xmm0, xmmword [0x1400ab458]
movups xmmword [rax + 0x10], xmm0
movups xmm0, xmmword [str.Failed_to_get_address_of_LoadLibraryA.Failed_to_create_remote_thread_for_PID:]
movups xmmword [rax], xmm0
movabs rcx, 0x2e41797261726269
mov qword [rax + 0x1e], rcx
mov qword [rsp + 0x60], 0x26
mov qword [rsp + 0x68], rax
mov qword [rsp + 0x70], 0x26
jmp 0x140009f51
mov rcx, rbp
call sub.KERNEL32.dll_CloseHandle
lea rax, [rsp + 0x88]
mov qword [rsp + 0x40], rax
lea rax, [fcn.1400a3a50]
mov qword [rsp + 0x48], rax
lea rax, [0x1400ab498]
mov qword [rsp + 0x90], rax
mov qword [rsp + 0x98], 1
mov qword [rsp + 0xb0], 0
lea rax, [rsp + 0x40]
mov qword [rsp + 0xa0], rax
mov qword [rsp + 0xa8], 1
lea rcx, [rsp + 0x180]
lea rdx, [rsp + 0x90]
call fcn.140085170
movups xmm0, xmmword [rsp + 0x180]
movaps xmmword [rsp + 0x60], xmm0
mov rax, qword [rsp + 0x190]
mov qword [rsp + 0x70], rax
mov rcx, qword [rsp + 0xd8]
mov byte [rcx], 0
mov rdx, qword [rsp + 0xe0]
test rdx, rdx
je 0x140009f74
mov r8d, 1
call fcn.14000a470
mov rcx, qword [rsp + 0xe8]
mov byte [rcx], 0
mov rdx, qword [rsp + 0xf0]
test rdx, rdx
je 0x140009f97
mov r8d, 1
call fcn.14000a470
mov byte [r15], 0
test r14, r14
je 0x140009fb1
mov r8d, 1
mov rcx, r15
mov rdx, r14
call fcn.14000a470
movabs rax, 0x8000000000000000
cmp qword [rsp + 0x60], rax
jne 0x14000a064
mov qword [rsp + 0x40], rsi
lea rax, [0x1400096f0]
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x84]
mov qword [rsp + 0x50], rax
lea rax, [fcn.1400a3a50]
mov qword [rsp + 0x58], rax
lea rax, str.Successfully_injected__into_PID:
mov qword [rsp + 0x90], rax
mov qword [rsp + 0x98], 2
mov qword [rsp + 0xb0], 0
mov qword [rsp + 0xa0], r12
mov qword [rsp + 0xa8], 2
lea rcx, [rsp + 0x120]
lea rdx, [rsp + 0x90]
call fcn.140085170
mov rax, qword [rsp + 0x130]
mov qword [rbx + 0x18], rax
movups xmm0, xmmword [rsp + 0x120]
movups xmmword [rbx + 8], xmm0
mov qword [rbx], 0
jmp 0x14000a14c
mov rax, qword [rsp + 0x70]
mov qword [rsp + 0x110], rax
mov rax, qword [rsp + 0x60]
mov qword [rsp + 0x100], rax
mov rax, qword [rsp + 0x68]
mov qword [rsp + 0x108], rax
lea rax, [rsp + 0x84]
mov qword [rsp + 0x40], rax
lea rax, [fcn.1400a3a50]
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x100]
mov qword [rsp + 0x50], rax
lea rax, [0x1400096f0]
mov qword [rsp + 0x58], rax
lea rax, str.Failed_to_inject_into_PID_:
mov qword [rsp + 0x90], rax
mov qword [rsp + 0x98], 2
mov qword [rsp + 0xb0], 0
mov qword [rsp + 0xa0], r12
mov qword [rsp + 0xa8], 2
lea rcx, [rsp + 0x138]
lea rdx, [rsp + 0x90]
call fcn.140085170
mov rax, qword [rsp + 0x148]
mov qword [rbx + 0x18], rax
movups xmm0, xmmword [rsp + 0x138]
movups xmmword [rbx + 8], xmm0
mov qword [rbx], 1
mov rdx, qword [rsp + 0x100]
test rdx, rdx
je 0x14000a14c
mov rcx, qword [rsp + 0x108]
mov r8d, 1
call fcn.14000a470
mov rcx, qword [rsp + 0xf8]
dec qword [rcx]
jne 0x14000a16f
dec qword [rcx + 8]
jne 0x14000a16f
mov edx, 0x170
mov r8d, 0x10
call fcn.14000a470
mov edx, 0x1000
mov r8d, 4
mov rcx, rdi
call fcn.14000a470
mov rdx, qword [rsi]
test rdx, rdx
je 0x14000a199
mov rcx, qword [rsi + 8]
mov r8d, 1
call fcn.14000a470
mov rax, rbx
add rsp, 0x198
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
mov ecx, 4
mov edx, 0x1000
call fcn.140083c10
jmp 0x14000a2cd
mov ecx, 1
mov edx, 0x1e
call fcn.140083c10
jmp 0x14000a2cd
mov ecx, 1
mov edx, 0x22
call fcn.140083c10
jmp 0x14000a2cd
lea rax, [0x1400ab248]
mov qword [rsp + 0x20], rax
lea rcx, str.a_Display_implementation_returned_an_error_unexpectedly_rustc_f6e511eec7342f59a25f7c0534f1dbea00d01b14library_alloc_src_string.rs
lea r9, [0x1400ab260]
lea r8, [rsp + 0x8f]
mov edx, 0x37
call fcn.140090e30
jmp 0x14000a2cd
movups xmm0, xmmword [rsp + 0x40]
movups xmm1, xmmword [rsp + 0x50]
movaps xmmword [rsp + 0xa0], xmm1
movaps xmmword [rsp + 0x90], xmm0
lea rax, [0x1400ab3f0]
mov qword [rsp + 0x20], rax
lea rcx, str.called__Result::unwrap____on_an__Err__valueError
lea r9, [0x1400ab280]
lea r8, [rsp + 0x90]
mov edx, 0x2b
call fcn.140090e30
jmp 0x14000a2cd
movups xmm0, xmmword [rsp + 0x40]
movups xmm1, xmmword [rsp + 0x50]
movaps xmmword [rsp + 0xa0], xmm1
movaps xmmword [rsp + 0x90], xmm0
lea rax, [0x1400ab430]
mov qword [rsp + 0x20], rax
lea rcx, str.called__Result::unwrap____on_an__Err__valueError
lea r9, [0x1400ab280]
lea r8, [rsp + 0x90]
mov edx, 0x2b
call fcn.140090e30
jmp 0x14000a2cd
mov ecx, 1
mov edx, 0x1c
call fcn.140083c10
jmp 0x14000a2cd
mov ecx, 1
mov edx, 0x26
call fcn.140083c10
ud2