Function at 0x1400114c4
Capabilities:
Execute command

Disassembly:
jmp 0x140017440
push rbp
push rdi
sub rsp, 0x2a8
lea rbp, [rsp + 0x20]
lea rdi, [rsp + 0x20]
mov ecx, 0x72
mov eax, 0xcccccccc
rep stosd dword [rdi], eax
mov rax, qword [0x140026040]
xor rax, rbp
mov qword [rbp + 0x278], rax
lea rcx, [0x14002c0f4]
call fcn.1400116e5
nop
xor eax, eax
cmp eax, 1
je 0x14001777d
lea rdx, str.Enter_process_name_or_PID:
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.14001138e
nop
lea rcx, [rbp + 8]
call fcn.140011569
nop
lea rdx, [rbp + 8]
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_istream_wchar_t__struct_std::char_traits_wchar_t___std::wcin]
call fcn.14001101e
nop
mov dword [rbp + 0x44], 0
xor edx, edx
lea rcx, [rbp + 8]
call fcn.1400110cd
movzx ecx, word [rax]
call qword [sym.imp.ucrtbased.dll_iswdigit]
test eax, eax
je 0x1400174ed
mov r8d, 0xa
xor edx, edx
lea rcx, [rbp + 8]
call fcn.140011654
mov dword [rbp + 0x44], eax
jmp 0x1400174f9
lea rcx, [rbp + 8]
call fcn.140011343
mov dword [rbp + 0x44], eax
cmp dword [rbp + 0x44], 0
je 0x140017670
lea rdx, str.Selected_PID:
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.14001138e
mov edx, dword [rbp + 0x44]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64___cdecl_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::operator___unsigned_long_int____ptr64]
lea rdx, [0x140011366]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64___cdecl_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::operator___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64____cdecl___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64_____ptr64]
nop
xor eax, eax
cmp eax, 1
je 0x14001766b
lea rcx, [rbp + 0x68]
call fcn.14001155a
nop
lea rcx, [rbp + 0x68]
call fcn.1400114bf
movzx eax, al
test eax, eax
jne 0x14001762c
lea rdx, [rbp + 0x68]
mov ecx, dword [rbp + 0x44]
call fcn.140011703
movzx eax, al
test eax, eax
je 0x140017606
lea rdx, str.Successfully_injected_DLL.
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.14001138e
lea rdx, [0x140011366]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64___cdecl_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::operator___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64____cdecl___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64_____ptr64]
nop
lea rdx, str.Do_you_want_to_inject_another_DLL_
lea rcx, [rbp + 0x188]
call fcn.14001123f
nop
lea rcx, [rbp + 0x188]
call fcn.1400111bd
movzx eax, al
test eax, eax
jne 0x1400175ca
mov dword [rbp + 0x274], 1
jmp 0x1400175d4
mov dword [rbp + 0x274], 0
movzx eax, byte [rbp + 0x274]
mov byte [rbp + 0x164], al
lea rcx, [rbp + 0x188]
call fcn.14001162c
movzx eax, byte [rbp + 0x164]
test eax, eax
je 0x140017604
lea rcx, [rbp + 0x68]
call fcn.14001162c
nop
jmp 0x14001766b
jmp 0x14001762a
lea rdx, str.Failed_to_inject_DLL.
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.14001138e
lea rdx, [0x140011366]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64___cdecl_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::operator___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64____cdecl___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64_____ptr64]
nop
jmp 0x14001765c
lea rdx, str.No_DLL_selected.
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.14001138e
lea rdx, [0x140011366]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64___cdecl_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::operator___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64____cdecl___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64_____ptr64]
nop
lea rcx, [rbp + 0x68]
call fcn.14001162c
nop
jmp 0x14001766b
lea rcx, [rbp + 0x68]
call fcn.14001162c
nop
jmp 0x140017533
jmp 0x140017701
lea rdx, str.Process_not_found.
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.14001138e
lea rdx, [0x140011366]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64___cdecl_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::operator___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64____cdecl___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64_____ptr64]
nop
lea rdx, str.Do_you_want_to_re_enter_the_process_name_or_PID_
lea rcx, [rbp + 0x1e8]
call fcn.14001123f
nop
lea rcx, [rbp + 0x1e8]
call fcn.1400111bd
movzx eax, al
test eax, eax
jne 0x1400176c7
mov dword [rbp + 0x274], 1
jmp 0x1400176d1
mov dword [rbp + 0x274], 0
movzx eax, byte [rbp + 0x274]
mov byte [rbp + 0x1c4], al
lea rcx, [rbp + 0x1e8]
call fcn.14001162c
movzx eax, byte [rbp + 0x1c4]
test eax, eax
je 0x140017701
lea rcx, [rbp + 8]
call fcn.14001162c
nop
jmp 0x14001777d
lea rdx, str.Do_you_want_to_start_a_new_injection_process_
lea rcx, [rbp + 0x248]
call fcn.14001123f
nop
lea rcx, [rbp + 0x248]
call fcn.1400111bd
movzx eax, al
test eax, eax
jne 0x140017734
mov dword [rbp + 0x274], 1
jmp 0x14001773e
mov dword [rbp + 0x274], 0
movzx eax, byte [rbp + 0x274]
mov byte [rbp + 0x224], al
lea rcx, [rbp + 0x248]
call fcn.14001162c
movzx eax, byte [rbp + 0x224]
test eax, eax
je 0x14001776e
lea rcx, [rbp + 8]
call fcn.14001162c
nop
jmp 0x14001777d
lea rcx, [rbp + 8]
call fcn.14001162c
nop
jmp 0x14001747e
lea rcx, str.pause
call qword [sym.imp.ucrtbased.dll_system]
nop
xor eax, eax
mov edi, eax
lea rcx, [rbp - 0x20]
lea rdx, [0x140021120]
call fcn.1400115e1
mov eax, edi
mov rcx, qword [rbp + 0x278]
xor rcx, rbp
call fcn.14001135c
lea rsp, [rbp + 0x288]
pop rdi
pop rbp
ret