Function at 0x7ff70ca115f2
Capabilities:
Link many functions at runtime

Disassembly:
push rbp
push rdi
push rsi
sub rsp, 0x2c0
lea rbp, [rsp + 0x80]
mov dword [rbp + 0x260], ecx
mov qword [rbp + 0x268], rdx
call fcn.7ff70ca11c30
movabs rax, 0x331e130706001b24
mov qword [rbp + 0x231], rax
mov dword [rbp + 0x239], 0x111d1e1e
mov word [rbp + 0x23d], 0xa37
mov byte [rbp + 0x23f], 0
movabs rax, 0x111d00221c17023d
mov qword [rbp + 0x225], rax
mov dword [rbp + 0x22d], 0x10117
movabs rax, 0x1d002217061b0025
movabs rdx, 0x1d1f173f01011711
mov qword [rbp + 0x210], rax
mov qword [rbp + 0x218], rdx
mov word [rbp + 0x220], 0xb00
mov byte [rbp + 0x222], 0
movabs rax, 0x1720170613170031
movabs rdx, 0x17001a2617061d1f
mov qword [rbp + 0x1f0], rax
mov qword [rbp + 0x1f8], rdx
mov dword [rbp + 0x200], 0xa371613
mov byte [rbp + 0x204], 0
movabs rax, 0x21001d34061b1325
movabs rdx, 0x18103d171e151c1b
mov qword [rbp + 0x1d0], rax
mov qword [rbp + 0x1d8], rdx
mov dword [rbp + 0x1e0], 0x61117
movabs rax, 0x1c133a17011d1e31
mov qword [rbp + 0x1c4], rax
mov dword [rbp + 0x1cc], 0x171e16
lea rax, [rbp - 0x40]
lea rdx, [0x7ff70ca1a200]
mov ecx, 0x40
mov rdi, rax
mov rsi, rdx
rep movsq qword [rdi], qword [rsi]
cmp dword [rbp + 0x260], 1
jg 0x7ff70ca1174d
mov rax, qword [rbp + 0x268]
mov rax, qword [rax]
mov rdx, rax
lea rcx, str.usage:_process.exe__PID__n
call fcn.7ff70ca11550
mov eax, 1
jmp 0x7ff70ca11b6d
mov rax, qword [rbp + 0x268]
add rax, 8
mov rax, qword [rax]
mov rcx, rax
call sub.msvcrt.dll_atoi
mov dword [0x7ff70ca1e030], eax
mov eax, dword [0x7ff70ca1e030]
mov edx, eax
lea rcx, str.Trying_to_open_a_handle_to_process___ld__n
call fcn.7ff70ca11550
lea rax, [rbp + 0x225]
mov edx, 0xc
mov rcx, rax
call fcn.7ff70ca115a1
lea rcx, str.kernel32.dll
mov rax, qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
call rax
mov rcx, rax
lea rax, [rbp + 0x225]
mov rdx, rax
mov rax, qword [sym.imp.KERNEL32.dll_GetProcAddress]
call rax
mov qword [0x7ff70ca1e058], rax
mov rax, qword [0x7ff70ca1e058]
mov edx, dword [0x7ff70ca1e030]
mov r8d, edx
mov edx, 0
mov ecx, 0x1f0fff
call rax
mov qword [0x7ff70ca1e038], rax
mov rax, qword [0x7ff70ca1e038]
test rax, rax
jne 0x7ff70ca1180e
mov rax, qword [sym.imp.KERNEL32.dll_GetLastError]
call rax
mov edx, eax
lea rcx, str.____failed_to_open_a_handle_to_process__error:__ld._n
call fcn.7ff70ca11550
mov eax, 1
jmp 0x7ff70ca11b6d
mov rax, qword [0x7ff70ca1e038]
mov rdx, rax
lea rcx, str.Handle_to_process_opened_successfully._n___0x_p_n
call fcn.7ff70ca11550
lea rax, [rbp + 0x231]
mov edx, 0xf
mov rcx, rax
call fcn.7ff70ca115a1
lea rcx, str.kernel32.dll
mov rax, qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
call rax
mov rcx, rax
lea rax, [rbp + 0x231]
mov rdx, rax
mov rax, qword [sym.imp.KERNEL32.dll_GetProcAddress]
call rax
mov qword [0x7ff70ca1e060], rax
lea rax, [rbp - 0x40]
mov edx, 0x200
mov rcx, rax
call fcn.7ff70ca115a1
mov r10, qword [0x7ff70ca1e060]
mov rax, qword [0x7ff70ca1e038]
mov dword [rsp + 0x20], 0x40
mov r9d, 0x3000
mov r8d, 0x200
mov edx, 0
mov rcx, rax
call r10
mov qword [0x7ff70ca1e048], rax
mov edx, 0x200
lea rcx, str.___allocated__lu_bytes_in_remote_process_with_PAGE_EXECUTE_READWRITE_permissions_n
call fcn.7ff70ca11550
lea rax, [rbp + 0x210]
mov edx, 0x13
mov rcx, rax
call fcn.7ff70ca115a1
lea rcx, str.kernel32.dll
mov rax, qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
call rax
mov rcx, rax
lea rax, [rbp + 0x210]
mov rdx, rax
mov rax, qword [sym.imp.KERNEL32.dll_GetProcAddress]
call rax
mov qword [0x7ff70ca1e068], rax
mov r10, qword [0x7ff70ca1e068]
mov rdx, qword [0x7ff70ca1e048]
mov rax, qword [0x7ff70ca1e038]
lea rcx, [rbp - 0x40]
mov qword [rsp + 0x20], 0
mov r9d, 0x200
mov r8, rcx
mov rcx, rax
call r10
mov edx, 0x200
lea rcx, str.___wrote__lu_bytes_to_process_memory_n
call fcn.7ff70ca11550
lea rax, [rbp + 0x1f0]
mov edx, 0x15
mov rcx, rax
call fcn.7ff70ca115a1
lea rcx, str.kernel32.dll
mov rax, qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
call rax
mov rcx, rax
lea rax, [rbp + 0x1f0]
mov rdx, rax
mov rax, qword [sym.imp.KERNEL32.dll_GetProcAddress]
call rax
mov qword [0x7ff70ca1e070], rax
mov r10, qword [0x7ff70ca1e070]
mov rax, qword [0x7ff70ca1e048]
mov rcx, rax
mov rax, qword [0x7ff70ca1e038]
lea rdx, [0x7ff70ca1e034]
mov qword [rsp + 0x38], rdx
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0
mov qword [rsp + 0x20], 0
mov r9, rcx
mov r8d, 0
mov edx, 0
mov rcx, rax
call r10
mov qword [0x7ff70ca1e040], rax
mov rax, qword [0x7ff70ca1e040]
test rax, rax
jne 0x7ff70ca11a59
mov rax, qword [sym.imp.KERNEL32.dll_GetLastError]
call rax
mov edx, eax
lea rcx, str.____failed_to_get_a_handle_to_the_thread__error:__ld._n
call fcn.7ff70ca11550
lea rax, [rbp + 0x1c4]
mov edx, 0xc
mov rcx, rax
call fcn.7ff70ca115a1
lea rcx, str.kernel32.dll
mov rax, qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
call rax
mov rcx, rax
lea rax, [rbp + 0x1c4]
mov rdx, rax
mov rax, qword [sym.imp.KERNEL32.dll_GetProcAddress]
call rax
mov qword [0x7ff70ca1e080], rax
mov rdx, qword [0x7ff70ca1e080]
mov rax, qword [0x7ff70ca1e038]
mov rcx, rax
call rdx
mov eax, 1
jmp 0x7ff70ca11b6d
mov rdx, qword [0x7ff70ca1e040]
mov eax, dword [0x7ff70ca1e034]
mov r8, rdx
mov edx, eax
lea rcx, str.got_a_handle_to_the_thread___ld__n___0x_p_n
call fcn.7ff70ca11550
lea rcx, str.waiting_for_thread_to_finish_n
call fcn.7ff70ca11550
lea rax, [rbp + 0x1d0]
mov edx, 0x14
mov rcx, rax
call fcn.7ff70ca115a1
lea rcx, str.kernel32.dll
mov rax, qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
call rax
mov rcx, rax
lea rax, [rbp + 0x1d0]
mov rdx, rax
mov rax, qword [sym.imp.KERNEL32.dll_GetProcAddress]
call rax
mov qword [0x7ff70ca1e078], rax
mov r8, qword [0x7ff70ca1e078]
mov rax, qword [0x7ff70ca1e040]
mov edx, 0xffffffff
mov rcx, rax
call r8
lea rcx, str.thread_finished_executing_n
call fcn.7ff70ca11550
lea rcx, str.cleaning_up..._n
call fcn.7ff70ca11550
lea rax, [rbp + 0x1c4]
mov edx, 0xc
mov rcx, rax
call fcn.7ff70ca115a1
lea rcx, str.kernel32.dll
mov rax, qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
call rax
mov rcx, rax
lea rax, [rbp + 0x1c4]
mov rdx, rax
mov rax, qword [sym.imp.KERNEL32.dll_GetProcAddress]
call rax
mov qword [0x7ff70ca1e080], rax
mov rdx, qword [0x7ff70ca1e080]
mov rax, qword [0x7ff70ca1e040]
mov rcx, rax
call rdx
mov rdx, qword [0x7ff70ca1e080]
mov rax, qword [0x7ff70ca1e038]
mov rcx, rax
call rdx
lea rcx, str.Finished___n
call fcn.7ff70ca11550
mov eax, 0
add rsp, 0x2c0
pop rsi
pop rdi
pop rbp
ret