Function at 0x14001127b
Capabilities:
Link many functions at runtime

Disassembly:
jmp 0x140011a10
mov qword [rsp + 0x10], rdx
mov dword [rsp + 8], ecx
push rbp
push rdi
sub rsp, 0x568
lea rbp, [rsp + 0x60]
lea rdi, [rsp + 0x60]
mov ecx, 0xe2
mov eax, 0xcccccccc
rep stosd dword [rdi], eax
mov ecx, dword [rsp + 0x588]
mov rax, qword [section..data]
xor rax, rbp
mov qword [rbp + 0x4f8], rax
lea rcx, [0x1400230a3]
call fcn.14001137a
nop
mov dword [rbp + 0x24], 0
mov qword [rbp + 0x68], 0
mov qword [rbp + 0x88], 0
mov qword [rbp + 0xa8], 0
mov dword [rbp + 0x164], 0
mov dword [rbp + 0x184], 0
mov qword [rbp + 0x1a8], 0
lea rax, [0x14001afc4]
mov qword [rbp + 0x1c8], rax
mov qword [rbp + 0x1e8], 8
mov dword [rbp + 0x208], 0x30
mov qword [rbp + 0x210], 0
lea rax, [rbp + 0x218]
mov rdi, rax
xor eax, eax
mov ecx, 0x20
rep stosb byte [rdi], al
mov eax, 8
imul rax, rax, 1
mov rcx, qword [rbp + 0x528]
mov rcx, qword [rcx + rax]
call qword [sym.imp.ucrtbased.dll_atoi]
mov dword [rbp + 4], eax
mov eax, dword [rbp + 4]
mov qword [rbp + 0x258], rax
mov qword [rbp + 0x260], 0
cmp dword [rbp + 0x520], 2
jge 0x140011b34
lea rcx, str.__Usage_:_Ntapi_Injector.exe_PID_n
call fcn.1400111a4
nop
mov eax, 1
jmp 0x140011f91
lea rcx, str.NTDLL
call fcn.140011127
mov qword [rbp + 0xa8], rax
lea rcx, str.__Populating_function_prototypes..._n
call fcn.1400111a4
nop
lea rdx, str.NtOpenProcess
mov rcx, qword [rbp + 0xa8]
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [rbp + 0x288], rax
lea rdx, str.NtCreateThreadEx
mov rcx, qword [rbp + 0xa8]
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [rbp + 0x2a8], rax
lea rdx, str.NtClose
mov rcx, qword [rbp + 0xa8]
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [rbp + 0x2c8], rax
lea rdx, str.NtAllocateVirtualMemory
mov rcx, qword [rbp + 0xa8]
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [rbp + 0x2e8], rax
lea rdx, str.NtWriteVirtualMemory
mov rcx, qword [rbp + 0xa8]
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [rbp + 0x308], rax
lea rdx, str.NtCreateThreadEx
mov rcx, qword [rbp + 0xa8]
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [rbp + 0x328], rax
lea rdx, str.NtWaitForSingleObject
mov rcx, qword [rbp + 0xa8]
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [rbp + 0x348], rax
lea rdx, str.NtProtectVirtualMemory
mov rcx, qword [rbp + 0xa8]
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [rbp + 0x368], rax
lea rcx, str.__Beginning_of_the_magic_Injection_n
call fcn.1400111a4
nop
lea r9, [rbp + 0x258]
lea r8, [rbp + 0x208]
mov edx, 0x1fffff
lea rcx, [rbp + 0x48]
call qword [rbp + 0x288]
mov dword [rbp + 0xc4], eax
cmp dword [rbp + 0xc4], 0
je 0x140011c82
mov edx, dword [rbp + 0xc4]
lea rcx, str.___NtOpenProcess__failed_to_get_a_handle_on_the_process__error_0x_lx_n
call fcn.1400111a4
nop
jmp 0x140011f51
mov rdx, qword [rbp + 0x88]
mov ecx, 8
call fcn.1400110e1
test eax, eax
jne 0x140011cae
lea rcx, str.__Buffer_is_not_properly_aligned__n
call fcn.1400111a4
nop
jmp 0x140011f51
mov dword [rsp + 0x28], 4
mov dword [rsp + 0x20], 0x3000
lea r9, [rbp + 0x1e8]
xor r8d, r8d
lea rdx, [rbp + 0x88]
mov rcx, qword [rbp + 0x48]
call qword [rbp + 0x2e8]
mov dword [rbp + 0xc4], eax
cmp dword [rbp + 0xc4], 0
je 0x140011d05
mov edx, dword [rbp + 0xc4]
lea rcx, str.___NtAllocateVirtualMemory__failed_to_allocate_memory__error_0x_lx_n
call fcn.1400111a4
nop
jmp 0x140011f51
mov rdx, qword [rbp + 0x88]
mov ecx, 8
call fcn.1400110e1
test eax, eax
jne 0x140011d31
lea rcx, str.__Allocated_memory_is_not_properly_aligned__n
call fcn.1400111a4
nop
jmp 0x140011f51
mov rdx, qword [rbp + 0x88]
mov ecx, 8
call fcn.1400110e1
test eax, eax
je 0x140011d53
lea rcx, str.__Allocated_memory_is__properly_aligned__n
call fcn.1400111a4
nop
lea rax, [rbp + 0x1a8]
mov qword [rsp + 0x20], rax
mov r9, qword [rbp + 0x1e8]
mov r8, qword [rbp + 0x1c8]
mov rdx, qword [rbp + 0x88]
mov rcx, qword [rbp + 0x48]
call qword [rbp + 0x308]
mov dword [rbp + 0x104], eax
cmp dword [rbp + 0x104], 0
je 0x140011daa
mov edx, dword [rbp + 0x104]
lea rcx, str.___NtWriteVirtualMemory__failed_to_write_memory__error_0x_lx_n
call fcn.1400111a4
nop
jmp 0x140011f51
mov r8, qword [rbp + 0x1a8]
mov rdx, qword [rbp + 0x88]
lea rcx, str.___0x_p___RW___wrote__zu_bytes_to_the_allocated_buffer__n
call fcn.1400111a4
nop
mov rdx, qword [rbp + 0x88]
mov ecx, 8
call fcn.1400110e1
test eax, eax
jne 0x140011df1
lea rcx, str.__Written_memory_is_not_properly_aligned__n
call fcn.1400111a4
nop
jmp 0x140011f51
lea rax, [rbp + 0x184]
mov qword [rsp + 0x20], rax
mov r9d, 0x20
lea r8, [rbp + 0x1e8]
lea rdx, [rbp + 0x88]
mov rcx, qword [rbp + 0x48]
call qword [rbp + 0x368]
mov dword [rbp + 0x164], eax
cmp dword [rbp + 0x164], 0
je 0x140011e47
mov edx, dword [rbp + 0x164]
lea rcx, str.___NtProtectVirtualMemory__failed_to_change_memory_protection__error_0x_lx_n
call fcn.1400111a4
nop
jmp 0x140011f51
mov rdx, qword [rbp + 0x88]
lea rcx, str.___0x_p___R_X__changed_allocated_buffer_protection_to_PAGE_EXECUTE_READ__R_X___n
call fcn.1400111a4
nop
mov qword [rsp + 0x50], 0
mov qword [rsp + 0x48], 0
mov qword [rsp + 0x40], 0
mov qword [rsp + 0x38], 0
mov dword [rsp + 0x30], 0
mov qword [rsp + 0x28], 0
mov rax, qword [rbp + 0x88]
mov qword [rsp + 0x20], rax
mov r9, qword [rbp + 0x48]
lea r8, [rbp + 0x208]
mov edx, 0x1fffff
lea rcx, [rbp + 0x68]
call qword [rbp + 0x328]
mov dword [rbp + 0x124], eax
cmp dword [rbp + 0x124], 0
je 0x140011edc
mov edx, dword [rbp + 0x124]
lea rcx, str.___NtCreateThreadEx__failed_to_create_remote_thread__error_0x_lx_n
call fcn.1400111a4
nop
jmp 0x140011f51
mov rdx, qword [rbp + 0x68]
lea rcx, str.___0x_p__successfully_created_a_thread__n
call fcn.1400111a4
nop
mov rdx, qword [rbp + 0x68]
lea rcx, str.___0x_p__waiting_for_thread_to_finish_execution..._n
call fcn.1400111a4
nop
xor r8d, r8d
xor edx, edx
mov rcx, qword [rbp + 0x68]
call qword [rbp + 0x348]
mov dword [rbp + 0x144], eax
cmp dword [rbp + 0x144], 0
je 0x140011f33
mov edx, dword [rbp + 0x144]
lea rcx, str.___NtWaitForSingleObject__failed_to_wait_for_the_thread__error_0x_lx_n
call fcn.1400111a4
nop
jmp 0x140011f51
mov rdx, qword [rbp + 0x68]
lea rcx, str.___0x_p__thread_finished_execution__beginning_cleanup..._n
call fcn.1400111a4
nop
lea rcx, str.__Injection_completed_successfully__n
call fcn.1400111a4
nop
cmp qword [rbp + 0x68], 0
je 0x140011f63
mov rcx, qword [rbp + 0x68]
call qword [rbp + 0x2c8]
nop
lea rcx, str.__Thread_was_closed_n
call fcn.1400111a4
nop
cmp qword [rbp + 0x48], 0
je 0x140011f82
mov rcx, qword [rbp + 0x48]
call qword [rbp + 0x2c8]
nop
lea rcx, str.__process_was_closed_n
call fcn.1400111a4
nop
xor eax, eax
mov rdi, rax
lea rcx, [rbp - 0x60]
lea rdx, [0x14001ae80]
call fcn.140011316
mov rax, rdi
mov rcx, qword [rbp + 0x4f8]
xor rcx, rbp
call fcn.1400111bd
lea rsp, [rbp + 0x508]
pop rdi
pop rbp
ret