Function at 0x401550
Capabilities:
Link many functions at runtime

Disassembly:
push rbp
push rdi
sub rsp, 0x328
lea rbp, [rsp + 0x80]
mov dword [rbp + 0x2c0], ecx
mov qword [rbp + 0x2c8], rdx
call dbg.__main
mov qword [rbp + 0x250], 0
mov qword [rbp + 0x298], 0
mov qword [rbp + 0x240], 0xffffffffffffffff
movabs rax, 0x55005c003a0043
movabs rdx, 0x73007200650073
mov qword [rbp + 0x30], rax
mov qword [rbp + 0x38], rdx
movabs rax, 0x54004c0055005c
movabs rdx, 0x43005000410052
mov qword [rbp + 0x40], rax
mov qword [rbp + 0x48], rdx
movabs rax, 0x69004c0043005c
movabs rdx, 0x720050006e006f
mov qword [rbp + 0x50], rax
mov qword [rbp + 0x58], rdx
movabs rax, 0x630065006a006f
movabs rdx, 0x72005c00730074
mov qword [rbp + 0x60], rax
mov qword [rbp + 0x68], rdx
movabs rax, 0x650070006e0075
movabs rdx, 0x5c006c006c0064
mov qword [rbp + 0x70], rax
mov qword [rbp + 0x78], rdx
movabs rax, 0x7200620069006c
movabs rdx, 0x650070006e0075
mov qword [rbp + 0x80], rax
mov qword [rbp + 0x88], rdx
movabs rax, 0x2e006c006c0064
movabs rdx, 0x6c006c0064
mov qword [rbp + 0x90], rax
mov qword [rbp + 0x98], rdx
lea rdx, [rbp + 0xa0]
mov eax, 0
mov ecx, 0x33
mov rdi, rdx
rep stosq qword [rdi], rax
mov qword [rbp + 0x28], 0x208
lea rcx, str.NTDLL
mov rax, qword [sym.imp.KERNEL32.dll_GetModuleHandleW]
call rax
mov qword [rbp + 0x290], rax
mov rax, qword [rbp + 0x290]
lea rdx, str.NtOpenProcess
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_GetProcAddress]
call rax
mov qword [rbp + 0x288], rax
mov rax, qword [rbp + 0x290]
lea rdx, str.NtCreateThreadEx
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_GetProcAddress]
call rax
mov qword [rbp + 0x280], rax
mov rax, qword [rbp + 0x290]
lea rdx, str.NtClose
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_GetProcAddress]
call rax
mov qword [rbp + 0x278], rax
mov rax, qword [rbp + 0x290]
lea rdx, str.NtAllocateVirtualMemory
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_GetProcAddress]
call rax
mov qword [rbp + 0x270], rax
mov rax, qword [rbp + 0x290]
lea rdx, str.NtWriteVirtualMemory
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_GetProcAddress]
call rax
mov qword [rbp + 0x268], rax
cmp dword [rbp + 0x2c0], 1
jg 0x40175e
lea rcx, str.___No_PID_given__.
call sym.puts
mov eax, 1
jmp 0x401a76
mov rax, qword [rbp + 0x2c8]
add rax, 8
mov rax, qword [rax]
mov rcx, rax
call sym.atoi
mov dword [rbp + 0x264], eax
lea rcx, str.__Looking_for_process_with_the_given_PID.
call sym.puts
mov qword [rbp - 0x10], 0
mov qword [rbp - 8], 0
mov qword [rbp], 0
mov qword [rbp + 8], 0
mov qword [rbp + 0x10], 0
mov qword [rbp + 0x18], 0
mov dword [rbp - 0x10], 0x30
mov eax, dword [rbp + 0x264]
mov qword [rbp - 0x20], rax
mov qword [rbp - 0x18], 0
lea rcx, [rbp - 0x20]
lea rdx, [rbp - 0x10]
lea rax, [rbp + 0x248]
mov r10, qword [rbp + 0x288]
mov r9, rcx
mov r8, rdx
mov edx, 0x1f0fff
mov rcx, rax
call r10
mov dword [rbp + 0x260], eax
cmp dword [rbp + 0x260], 0
je 0x40181b
lea rcx, str.___Failed_to_open_process.
call sym.puts
mov eax, 1
jmp 0x401a76
mov rax, qword [rbp + 0x248]
mov rdx, rax
lea rcx, str.__Got_process_handle____0x_p_._n
call sym.printf
mov rcx, qword [rbp + 0x248]
lea rdx, [rbp + 0x28]
lea rax, [rbp + 0x250]
mov dword [rsp + 0x28], 4
mov dword [rsp + 0x20], 0x3000
mov r10, qword [rbp + 0x270]
mov r9, rdx
mov r8d, 0
mov rdx, rax
call r10
mov dword [rbp + 0x260], eax
cmp dword [rbp + 0x260], 0
je 0x401889
lea rcx, str.___Failed_to_allocate_virtual_memory_space.
call sym.puts
jmp 0x401a3f
mov rax, qword [rbp + 0x250]
mov rdx, rax
lea rcx, str.__Successfully_allocate_virtual_memory_space_at_addr____0x_p_._n
call sym.printf
mov r8, qword [rbp + 0x28]
mov rdx, qword [rbp + 0x250]
mov rax, qword [rbp + 0x248]
lea rcx, [rbp + 0x30]
mov qword [rsp + 0x20], 0
mov r10, qword [rbp + 0x268]
mov r9, r8
mov r8, rcx
mov rcx, rax
call r10
mov dword [rbp + 0x260], eax
cmp dword [rbp + 0x260], 0
je 0x401904
mov rax, qword [rbp + 0x250]
mov edx, dword [rbp + 0x260]
mov r8d, edx
mov rdx, rax
lea rcx, str.___Failed_to_write_at_virtual_memory_space__0x_p__errcode_:_0x_lx._n
call sym.printf
jmp 0x401a3f
lea rcx, str.__Successfully_wrote_to_virtual_memory_space.
call sym.puts
lea rcx, str.Kernel32
mov rax, qword [sym.imp.KERNEL32.dll_GetModuleHandleW]
call rax
mov qword [rbp + 0x298], rax
cmp qword [rbp + 0x298], 0
jne 0x40194d
mov rax, qword [sym.imp.KERNEL32.dll_GetLastError]
call rax
mov edx, eax
lea rcx, str.___Failed_getting_module_to_Kernel32__s.__n._n
call sym.printf
jmp 0x401a3f
mov rax, qword [rbp + 0x298]
mov rdx, rax
lea rcx, str.__Got_handle_to_Kernel32_at_0x_p__n._n
call sym.printf
mov rax, qword [rbp + 0x298]
lea rdx, str.LoadLibraryW
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_GetProcAddress]
call rax
mov qword [rbp + 0x258], rax
mov rdx, qword [rbp + 0x250]
mov r8, qword [rbp + 0x248]
lea rcx, [rbp - 0x10]
lea rax, [rbp + 0x240]
mov qword [rsp + 0x50], 0
mov qword [rsp + 0x48], 0
mov qword [rsp + 0x40], 0
mov qword [rsp + 0x38], 0
mov dword [rsp + 0x30], 0
mov qword [rsp + 0x28], rdx
mov rdx, qword [rbp + 0x258]
mov qword [rsp + 0x20], rdx
mov r10, qword [rbp + 0x280]
mov r9, r8
mov r8, rcx
mov edx, 0x1f03ff
mov rcx, rax
call r10
mov dword [rbp + 0x260], eax
cmp dword [rbp + 0x260], 0
je 0x401a0f
lea rcx, str.___Failed_creating_thread.
call sym.puts
jmp 0x401a3f
lea rcx, str.__Successfully_created_the_thread.
call sym.puts
lea rcx, str.__Waiting_for_end_of_execution_of_thread.
call sym.puts
mov rax, qword [rbp + 0x240]
mov edx, 0xffffffff
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
call rax
mov rax, qword [rbp + 0x248]
mov rdx, qword [rbp + 0x278]
mov rcx, rax
call rdx
mov rax, qword [rbp + 0x240]
mov rdx, qword [rbp + 0x278]
mov rcx, rax
call rdx
lea rcx, str.__Cleanup_complete.
call sym.puts
mov eax, 0
add rsp, 0x328
pop rdi
pop rbp
ret