Function at 0x140002c20
Capabilities:
Create thread
Inject dll
Inject thread

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
mov qword [rsp + 0x20], r12
push r13
push r14
push r15
sub rsp, 0x120
mov rax, qword [0x14000a008]
xor rax, rsp
mov qword [rsp + 0x118], rax
mov rsi, rdx
xor r13d, r13d
mov dword [rsp + 0x60], r13d
cmp ecx, 3
je 0x140002c80
lea rcx, str._nUsage:__Dll_Inject.exe_processToInjectTo_libraryName__n
call fcn.140001010
lea rcx, str.So_long..._n
call fcn.140001010
jmp 0x140002f34
mov rbx, qword [rdx + 8]
mov r15, 0xffffffffffffffff
mov rdi, r15
nop
inc rdi
cmp byte [rbx + rdi], r13b
jne 0x140002c90
call fcn.1400056a8
mov qword [rsp + 0x70], rbx
mov qword [rsp + 0x78], rdi
lea r8, [rsp + 0x70]
mov edx, eax
lea rcx, [rsp + 0xc0]
call fcn.140001930
nop
mov rbx, qword [rsi + 0x10]
mov rdi, r15
inc rdi
cmp byte [rbx + rdi], 0
jne 0x140002cc4
call fcn.1400056a8
mov qword [rsp + 0x70], rbx
mov qword [rsp + 0x78], rdi
lea r8, [rsp + 0x70]
mov edx, eax
lea rcx, [rsp + 0x80]
call fcn.140001930
mov ebx, 0xf0
lea rcx, [rsp + 0xc0]
call fcn.140001ea0
test al, al
je 0x140002d9c
call fcn.1400056a8
lea r14, str..exe
mov qword [rsp + 0x70], r14
mov qword [rsp + 0x78], 4
lea r8, [rsp + 0x70]
mov edx, eax
lea rcx, [rsp + 0x40]
call fcn.140001930
nop
mov dword [rsp + 0x60], 0x3f1
lea rdx, [rsp + 0xa0]
lea rcx, [rsp + 0xc0]
call fcn.140001d90
mov ebx, 0x3f3
lea rcx, [rsp + 0x40]
mov rdi, qword [rsp + 0x58]
cmp rdi, 8
cmovae rcx, qword [rsp + 0x40]
mov qword [rsp + 0x70], rcx
mov rcx, qword [rsp + 0x50]
mov qword [rsp + 0x78], rcx
movaps xmm0, xmmword [rsp + 0x70]
movdqa xmmword [rsp + 0x70], xmm0
lea rdx, [rsp + 0x70]
mov rcx, rax
call fcn.140001b80
test eax, eax
je 0x140002da8
mov sil, 1
jmp 0x140002dab
lea r14, str..exe
mov rdi, qword [rsp + 0x58]
xor sil, sil
test bl, 2
je 0x140002e1d
and ebx, 0xfffffffd
mov rdx, qword [rsp + 0xb8]
cmp rdx, 8
jb 0x140002e03
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0xa0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140002df9
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140002df9
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140005dfc
mov rdi, qword [rsp + 0x58]
movdqa xmm0, xmmword [0x1400078e0]
movdqu xmmword [rsp + 0xb0], xmm0
mov word [rsp + 0xa0], r13w
test bl, 1
je 0x140002e65
and ebx, 0xfffffffe
cmp rdi, 8
jb 0x140002e65
lea rdx, [rdi*2 + 2]
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140002e60
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140002e60
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140005dfc
test sil, sil
je 0x140002f68
lea rcx, str._nUsage:__Dll_Inject.exe_processToInjectTo_libraryName__n
call fcn.140001010
lea rcx, str.So_long..._n
call fcn.140001010
nop
mov rdx, qword [rsp + 0x98]
cmp rdx, 8
jb 0x140002ecf
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x80]
cmp rdx, 0x1000
mov rax, rcx
jb 0x140002eca
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140003d96
call fcn.140005dfc
mov qword [rsp + 0x90], r13
mov qword [rsp + 0x98], 7
mov word [rsp + 0x80], r13w
mov rdx, qword [rsp + 0xd8]
cmp rdx, 8
jb 0x140002f34
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0xc0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140002f2f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140003e0a
call fcn.140005dfc
xor eax, eax
mov rcx, qword [rsp + 0x118]
xor rcx, rsp
call fcn.140005da0
lea r11, [rsp + 0x120]
mov rbx, qword [r11 + 0x20]
mov rsi, qword [r11 + 0x28]
mov rdi, qword [r11 + 0x30]
mov r12, qword [r11 + 0x38]
mov rsp, r11
pop r15
pop r14
pop r13
ret
lea rcx, [rsp + 0xc0]
cmp qword [rsp + 0xd8], 8
cmovae rcx, qword [rsp + 0xc0]
mov rax, qword [rsp + 0xd0]
lea rdx, [rcx + rax*2]
mov rdi, rdx
call fcn.140001a90
cmp rax, rdx
je 0x140002fdc
nop dword [rax + rax]
movzx ecx, word [rax]
cmp cx, 0x5c
je 0x140002faf
cmp cx, 0x2f
jne 0x140002fb8
add rax, 2
cmp rax, rdx
jne 0x140002fa0
cmp rax, rdx
je 0x140002fdc
nop dword [rax]
lea r8, [rdi - 2]
movzx ecx, word [r8]
cmp cx, 0x5c
je 0x140002fdc
cmp cx, 0x2f
je 0x140002fdc
mov rdi, r8
cmp rax, r8
jne 0x140002fc0
mov r8d, 0x3a
mov rcx, rdi
call fcn.140005cc0
cmp rdi, rax
je 0x140003027
lea rcx, [rax - 2]
cmp rdi, rcx
je 0x140003027
cmp word [rcx], 0x2e
jne 0x14000300f
lea rdx, [rcx - 2]
cmp rdi, rdx
jne 0x14000302a
cmp word [rdx], 0x2e
jne 0x14000302a
jmp 0x140003027
sub rcx, 2
cmp rdi, rcx
je 0x140003027
cmp word [rcx], 0x2e
je 0x14000302a
sub rcx, 2
cmp rdi, rcx
jne 0x140003018
mov rcx, rax
sub rax, rcx
cmp rax, 2
jae 0x14000313e
call fcn.1400056a8
mov qword [rsp + 0x70], r14
mov qword [rsp + 0x78], 4
lea r8, [rsp + 0x70]
mov edx, eax
lea rcx, [rsp + 0xa0]
call fcn.140001930
or ebx, 0xc00
mov rsi, qword [rsp + 0xb0]
lea r9, [rsp + 0xa0]
cmp qword [rsp + 0xb8], 8
cmovae r9, qword [rsp + 0xa0]
mov r14, qword [rsp + 0xd0]
mov rcx, qword [rsp + 0xd8]
mov rax, rcx
sub rax, r14
cmp rsi, rax
ja 0x1400030dd
lea rax, [r14 + rsi]
mov qword [rsp + 0xd0], rax
lea rdi, [rsp + 0xc0]
cmp rcx, 8
cmovae rdi, qword [rsp + 0xc0]
lea rcx, [rdi + r14*2]
lea r8, [rsi + rsi]
mov rdx, r9
call sub.VCRUNTIME140.dll_memmove
lea rax, [rsi + r14]
mov word [rdi + rax*2], r13w
jmp 0x1400030f3
mov qword [rsp + 0x20], rsi
mov rdx, rsi
lea rcx, [rsp + 0xc0]
call fcn.1400047c0
nop
mov rdx, qword [rsp + 0xb8]
cmp rdx, 8
jb 0x14000313e
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0xa0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140003139
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140003139
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140005dfc
lea rcx, [rsp + 0x80]
cmp qword [rsp + 0x98], 8
cmovae rcx, qword [rsp + 0x80]
mov rax, qword [rsp + 0x90]
lea rdx, [rcx + rax*2]
mov rdi, rdx
call fcn.140001a90
cmp rax, rdx
je 0x1400031ac
movzx ecx, word [rax]
cmp cx, 0x5c
je 0x140003180
cmp cx, 0x2f
jne 0x140003189
add rax, 2
cmp rax, rdx
jne 0x140003171
cmp rax, rdx
je 0x1400031ac
nop
lea r8, [rdi - 2]
movzx ecx, word [r8]
cmp cx, 0x5c
je 0x1400031ac
cmp cx, 0x2f
je 0x1400031ac
mov rdi, r8
cmp rax, r8
jne 0x140003190
mov r8d, 0x3a
mov rcx, rdi
call fcn.140005cc0
cmp rdi, rax
je 0x1400031f7
lea rcx, [rax - 2]
cmp rdi, rcx
je 0x1400031f7
cmp word [rcx], 0x2e
jne 0x1400031df
lea rdx, [rcx - 2]
cmp rdi, rdx
jne 0x1400031fa
cmp word [rdx], 0x2e
jne 0x1400031fa
jmp 0x1400031f7
sub rcx, 2
cmp rdi, rcx
je 0x1400031f7
cmp word [rcx], 0x2e
je 0x1400031fa
sub rcx, 2
cmp rdi, rcx
jne 0x1400031e8
mov rcx, rax
sub rax, rcx
cmp rax, 2
jb 0x14000337f
call fcn.1400056a8
lea r14, str..dll
mov qword [rsp + 0x70], r14
mov qword [rsp + 0x78], 4
lea r8, [rsp + 0x70]
mov edx, eax
lea rcx, [rsp + 0xa0]
call fcn.140001930
or ebx, 0x3000
or ebx, 4
mov dword [rsp + 0x60], ebx
lea rcx, [rsp + 0x80]
cmp qword [rsp + 0x98], 8
cmovae rcx, qword [rsp + 0x80]
mov rax, qword [rsp + 0x90]
lea rdx, [rcx + rax*2]
mov rdi, rdx
call fcn.140001a90
cmp rax, rdx
je 0x1400032ae
movzx ecx, word [rax]
cmp cx, 0x5c
je 0x140003284
cmp cx, 0x2f
jne 0x14000328d
add rax, 2
cmp rax, rdx
jne 0x140003275
cmp rax, rdx
je 0x1400032ae
lea r8, [rdi - 2]
movzx ecx, word [r8]
cmp cx, 0x5c
je 0x1400032ae
cmp cx, 0x2f
je 0x1400032ae
mov rdi, r8
cmp rax, r8
jne 0x140003292
mov r8d, 0x3a
mov rcx, rdi
call fcn.140005cc0
cmp rdi, rax
je 0x1400032ff
lea rdx, [rax - 2]
cmp rdi, rdx
je 0x1400032ff
cmp word [rdx], 0x2e
jne 0x1400032e1
lea rcx, [rdx - 2]
cmp rdi, rcx
jne 0x140003302
cmp word [rcx], 0x2e
jne 0x140003302
jmp 0x1400032ff
sub rdx, 2
cmp rdi, rdx
je 0x1400032ff
nop word [rax + rax]
cmp word [rdx], 0x2e
je 0x140003302
sub rdx, 2
cmp rdi, rdx
jne 0x1400032f0
mov rdx, rax
sub rax, rdx
sar rax, 1
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
mov qword [rsp + 0x50], r13
mov qword [rsp + 0x58], r13
mov r8, rax
lea rcx, [rsp + 0x40]
call fcn.140004990
or ebx, 0x1c008
lea rax, [rsp + 0xa0]
mov rdi, qword [rsp + 0xb8]
cmp rdi, 8
cmovae rax, qword [rsp + 0xa0]
mov qword [rsp + 0x70], rax
mov rax, qword [rsp + 0xb0]
mov qword [rsp + 0x78], rax
movaps xmm0, xmmword [rsp + 0x70]
movdqa xmmword [rsp + 0x70], xmm0
lea rdx, [rsp + 0x70]
lea rcx, [rsp + 0x40]
call fcn.140001b80
test eax, eax
je 0x14000338e
mov sil, 1
jmp 0x140003391
lea r14, str..dll
mov rdi, qword [rsp + 0xb8]
xor sil, sil
test bl, 8
je 0x1400033fa
and ebx, 0xfffffff7
mov rdx, qword [rsp + 0x58]
cmp rdx, 8
jb 0x1400033e6
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400033d9
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400033d9
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140005dfc
mov rdi, qword [rsp + 0xb8]
movdqa xmm0, xmmword [0x1400078e0]
movdqu xmmword [rsp + 0x50], xmm0
mov word [rsp + 0x40], r13w
test bl, 4
je 0x140003445
and ebx, 0xfffffffb
cmp rdi, 8
jb 0x140003445
lea rdx, [rdi*2 + 2]
mov rcx, qword [rsp + 0xa0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140003440
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140003440
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140005dfc
test sil, sil
jne 0x140002e6e
lea rcx, [rsp + 0x80]
cmp qword [rsp + 0x98], 8
cmovae rcx, qword [rsp + 0x80]
mov rax, qword [rsp + 0x90]
lea rdx, [rcx + rax*2]
mov rdi, rdx
call fcn.140001a90
cmp rax, rdx
je 0x1400034bc
movzx ecx, word [rax]
cmp cx, 0x5c
je 0x140003490
cmp cx, 0x2f
jne 0x140003499
add rax, 2
cmp rax, rdx
jne 0x140003481
cmp rax, rdx
je 0x1400034bc
nop
lea r9, [rdi - 2]
movzx ecx, word [r9]
cmp cx, 0x5c
je 0x1400034bc
cmp cx, 0x2f
je 0x1400034bc
mov rdi, r9
cmp rax, r9
jne 0x1400034a0
mov r8d, 0x3a
mov rcx, rdi
call fcn.140005cc0
cmp rdi, rax
je 0x140003507
lea rcx, [rax - 2]
cmp rdi, rcx
je 0x140003507
cmp word [rcx], 0x2e
jne 0x1400034ef
lea rdx, [rcx - 2]
cmp rdi, rdx
jne 0x14000350a
cmp word [rdx], 0x2e
jne 0x14000350a
jmp 0x140003507
sub rcx, 2
cmp rdi, rcx
je 0x140003507
cmp word [rcx], 0x2e
je 0x14000350a
sub rcx, 2
cmp rdi, rcx
jne 0x1400034f8
mov rcx, rax
sub rax, rcx
cmp rax, 2
jae 0x14000361e
call fcn.1400056a8
mov qword [rsp + 0x70], r14
mov qword [rsp + 0x78], 4
lea r8, [rsp + 0x70]
mov edx, eax
lea rcx, [rsp + 0xa0]
call fcn.140001930
or ebx, 0x600000
mov rsi, qword [rsp + 0xb0]
lea r9, [rsp + 0xa0]
cmp qword [rsp + 0xb8], 8
cmovae r9, qword [rsp + 0xa0]
mov r14, qword [rsp + 0x90]
mov rcx, qword [rsp + 0x98]
mov rax, rcx
sub rax, r14
cmp rsi, rax
ja 0x1400035bd
lea rax, [rsi + r14]
mov qword [rsp + 0x90], rax
lea rdi, [rsp + 0x80]
cmp rcx, 8
cmovae rdi, qword [rsp + 0x80]
lea rcx, [rdi + r14*2]
lea r8, [rsi + rsi]
mov rdx, r9
call sub.VCRUNTIME140.dll_memmove
lea rax, [rsi + r14]
mov word [rdi + rax*2], r13w
jmp 0x1400035d3
mov qword [rsp + 0x20], rsi
mov rdx, rsi
lea rcx, [rsp + 0x80]
call fcn.1400047c0
nop
mov rdx, qword [rsp + 0xb8]
cmp rdx, 8
jb 0x14000361e
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0xa0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140003619
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140003619
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140005dfc
lea rdx, str._exeArg_:
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400044e0
mov rdi, rax
lea rcx, [rsp + 0xc0]
cmp qword [rsp + 0xd8], 8
cmovae rcx, qword [rsp + 0xc0]
mov qword [rsp + 0x70], rcx
mov rcx, qword [rsp + 0xd0]
mov qword [rsp + 0x78], rcx
call fcn.1400056a8
movaps xmm0, xmmword [rsp + 0x70]
movdqa xmmword [rsp + 0x70], xmm0
lea r8, [rsp + 0x70]
mov edx, eax
lea rcx, [rsp + 0xa0]
call fcn.140004220
or ebx, 0x60000
lea rax, [rsp + 0xa0]
cmp qword [rsp + 0xb8], 0x10
cmovae rax, qword [rsp + 0xa0]
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0xb0]
mov qword [rsp + 0x48], rax
mov word [rsp + 0x50], 0x5c22
lea rdx, [rsp + 0x40]
mov rcx, rdi
call fcn.140005370
mov rdi, rax
mov rdx, qword [rsp + 0xb8]
cmp rdx, 0x10
jb 0x140003713
inc rdx
mov rcx, qword [rsp + 0xa0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000370e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000370e
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140005dfc
movdqa xmm0, xmmword [0x1400078f0]
movdqu xmmword [rsp + 0xb0], xmm0
mov byte [rsp + 0xa0], 0
lea rdx, [0x140004780]
mov rcx, rdi
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, str._dllArg_:
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400044e0
mov rdi, rax
lea rcx, [rsp + 0x80]
cmp qword [rsp + 0x98], 8
cmovae rcx, qword [rsp + 0x80]
mov qword [rsp + 0x70], rcx
mov rcx, qword [rsp + 0x90]
mov qword [rsp + 0x78], rcx
call fcn.1400056a8
movaps xmm0, xmmword [rsp + 0x70]
movdqa xmmword [rsp + 0x70], xmm0
lea r8, [rsp + 0x70]
mov edx, eax
lea rcx, [rsp + 0xa0]
call fcn.140004220
or ebx, 0x180000
lea rax, [rsp + 0xa0]
cmp qword [rsp + 0xb8], 0x10
cmovae rax, qword [rsp + 0xa0]
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0xb0]
mov qword [rsp + 0x48], rax
mov word [rsp + 0x50], 0x5c22
lea rdx, [rsp + 0x40]
mov rcx, rdi
call fcn.140005370
mov rdi, rax
mov rdx, qword [rsp + 0xb8]
cmp rdx, 0x10
jb 0x140003831
inc rdx
mov rcx, qword [rsp + 0xa0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000382c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000382c
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140005dfc
movdqa xmm0, xmmword [0x1400078f0]
movdqu xmmword [rsp + 0xb0], xmm0
mov byte [rsp + 0xa0], 0
lea rdx, [0x140004780]
mov rcx, rdi
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rcx, [rsp + 0x80]
cmp qword [rsp + 0x98], 8
cmovae rcx, qword [rsp + 0x80]
mov r9d, 0xffffffff
mov r8d, 3
lea rdx, [rsp + 0xa0]
call fcn.140005938
mov edx, eax
test eax, eax
jne 0x1400038e4
mov eax, dword [rsp + 0xb0]
test al, 1
mov ecx, 0x1ff
mov edi, 0x16d
cmovne ecx, edi
mov dword [rsp + 0x74], ecx
bt eax, 0xa
jae 0x1400038d6
mov ecx, dword [rsp + 0xb4]
cmp ecx, 0xa000000c
jne 0x1400038c7
lea eax, [rdx + 4]
jmp 0x140003908
cmp ecx, 0xa0000003
jne 0x1400038d6
mov eax, 0xa
jmp 0x140003908
movzx eax, al
and eax, 0x10
or eax, 0x20
shr eax, 4
jmp 0x140003908
mov dword [rsp + 0x74], 0xffff
sub eax, 2
je 0x140003903
sub eax, 1
je 0x140003903
sub eax, 0x32
je 0x140003903
cmp eax, 0x46
mov eax, r13d
jne 0x140003908
mov eax, 1
mov dword [rsp + 0x70], edx
lea rcx, [0x14000a038]
mov qword [rsp + 0x78], rcx
movaps xmm0, xmmword [rsp + 0x70]
movdqa xmmword [rsp + 0x70], xmm0
test eax, eax
je 0x140003d13
cmp eax, 1
je 0x140003d1b
lea rdx, str._dllArg__Valid
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400044e0
lea rdx, [0x140004780]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, [rsp + 0xc0]
lea rcx, [rsp + 0xa0]
call fcn.140003e40
lea rcx, [rsp + 0xa0]
call fcn.1400027e0
mov r12, rax
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
mov qword [rsp + 0x50], r13
mov qword [rsp + 0x58], 7
mov word [rsp + 0x40], r13w
bts ebx, 0x17
mov dword [rsp + 0x60], ebx
cmp qword [rsp + 0x90], 0
je 0x140003aa1
mov edx, 0x104
mov r9d, edx
lea rcx, [rsp + 0x40]
call fcn.140004d20
nop dword [rax]
nop word [rax + rax]
mov r14d, dword [rsp + 0x50]
lea r8, [rsp + 0x40]
cmp qword [rsp + 0x58], 8
cmovae r8, qword [rsp + 0x40]
lea rcx, [rsp + 0x80]
cmp qword [rsp + 0x98], 8
cmovae rcx, qword [rsp + 0x80]
mov edx, r14d
call fcn.140005908
mov rbx, rax
mov rsi, rax
shr rsi, 0x20
mov ecx, eax
mov r8, qword [rsp + 0x50]
cmp rcx, r8
ja 0x140003a3b
lea rax, [rsp + 0x40]
cmp qword [rsp + 0x58], 8
cmovae rax, qword [rsp + 0x40]
mov qword [rsp + 0x50], rcx
mov word [rax + rcx*2], r13w
jmp 0x140003a90
mov rdx, rcx
sub rdx, r8
mov rdi, qword [rsp + 0x58]
mov rax, rdi
sub rax, r8
cmp rdx, rax
ja 0x140003a83
mov qword [rsp + 0x50], rcx
lea r9, [rsp + 0x40]
cmp rdi, 8
cmovae r9, qword [rsp + 0x40]
lea rdi, [r9 + r8*2]
test rdx, rdx
je 0x140003a78
movzx eax, r13w
mov rcx, rdx
rep stosw word [rdi], ax
lea rax, [r8 + rdx]
mov word [r9 + rax*2], r13w
jmp 0x140003a90
mov r9, rdx
lea rcx, [rsp + 0x40]
call fcn.140004d20
cmp ebx, r14d
jae 0x1400039d0
test esi, esi
jne 0x140003e11
mov rdx, qword [rsp + 0x98]
cmp rdx, 8
jb 0x140003aec
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x80]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140003ae7
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140003ae7
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140005dfc
movups xmm0, xmmword [rsp + 0x40]
movups xmmword [rsp + 0x80], xmm0
movups xmm1, xmmword [rsp + 0x50]
movups xmmword [rsp + 0x90], xmm1
lea rdx, [rsp + 0x80]
movq rcx, xmm0
movdqa xmm0, xmm1
psrldq xmm0, 8
movq rax, xmm0
cmp rax, 8
cmovae rdx, rcx
mov qword [rsp + 0x70], rdx
movq qword [rsp + 0x78], xmm1
call fcn.1400056a8
movaps xmm0, xmmword [rsp + 0x70]
movdqa xmmword [rsp + 0x70], xmm0
lea r8, [rsp + 0x70]
mov edx, eax
lea rcx, [rsp + 0xe0]
call fcn.140004220
nop
lea rdi, [rsp + 0xe0]
cmp qword [rsp + 0xf8], 0x10
cmovae rdi, qword [rsp + 0xe0]
lea rdx, str.
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400044e0
lea rdx, [0x140004780]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, str.Press_enter_to_attempt_injection
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400044e0
lea rdx, [0x140004780]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_getchar]
nop
mov r8, r15
inc r8
cmp byte [rdi + r8], 0
jne 0x140003bc3
inc r8
mov dword [rsp + 0x20], 4
xor edx, edx
mov r9d, 0x1000
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_VirtualAllocEx]
mov rbx, rax
mov r9, r15
nop
inc r9
cmp byte [rdi + r9], 0
jne 0x140003bf0
inc r9
mov qword [rsp + 0x20], r13
mov r8, rdi
mov rdx, rbx
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
lea rcx, str.Kernel32.dll
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov rcx, rax
lea rdx, str.LoadLibraryA
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov r9, rax
mov qword [rsp + 0x30], r13
mov dword [rsp + 0x28], r13d
mov qword [rsp + 0x20], rbx
xor r8d, r8d
xor edx, edx
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_CreateRemoteThread]
mov edx, 0xffffffff
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
nop dword [rax]
lea r15, [r15 + 1]
cmp byte [rdi + r15], 0
jne 0x140003c60
lea r8, [r15 + 1]
mov r9d, 0x8000
mov rdx, rbx
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_VirtualFreeEx]
lea rdx, str.Succesful__nSo_long...
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400044e0
lea rdx, [0x140004780]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
nop
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_CloseHandle]
nop
mov rdx, qword [rsp + 0xf8]
cmp rdx, 0x10
jb 0x140003cf5
inc rdx
mov rcx, qword [rsp + 0xe0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140003cf0
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140003cf0
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140005dfc
movdqa xmm0, xmmword [0x1400078f0]
movdqu xmmword [rsp + 0xf0], xmm0
mov byte [rsp + 0xe0], 0
jmp 0x140002e87
test edx, edx
jne 0x140003e21
lea rdx, str._n_dllArg__Invalid
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400044e0
lea rdx, [0x140004780]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rcx, str._nUsage:__Dll_Inject.exe_processToInjectTo_libraryName__n
call fcn.140001010
lea rcx, str.So_long..._n
call fcn.140001010
nop
mov rdx, qword [rsp + 0x98]
cmp rdx, 8
jb 0x140003da2
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x80]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140003d9d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140003d9d
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140005dfc
mov qword [rsp + 0x90], r13
mov qword [rsp + 0x98], 7
mov word [rsp + 0x80], r13w
mov rdx, qword [rsp + 0xd8]
cmp rdx, 8
jb 0x140002f34
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0xc0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140002f2f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140002f2f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
lea r8, [rsp + 0x80]
mov edx, esi
call fcn.140002710
nop
lea r8, [rsp + 0x80]
lea rdx, [rsp + 0x70]
call fcn.140002780
int3