Function at 0x140002570
Capabilities:
Create thread
Inject dll
Inject thread

Disassembly:
push rbx
push rsi
push rdi
sub rsp, 0x50
mov rax, qword [section..data]
xor rax, rsp
mov qword [rsp + 0x48], rax
mov rsi, rcx
mov rdi, rdx
mov rcx, qword [0x140006710]
test rcx, rcx
je 0x1400025a8
mov r8, rdx
lea rdx, str.Injecting_DLL:__s_n
call fcn.140001010
mov rdx, rdi
lea rcx, str.Injecting_DLL:__s_n
call fcn.140001060
mov rcx, qword [0x140006710]
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fflush]
lea rcx, str.kernel32.dll
call qword [sym.imp.KERNEL32.dll_GetModuleHandleW]
mov rcx, rax
lea rdx, str.LoadLibraryA
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x140006710]
mov rbx, rax
test rax, rax
jne 0x140002621
test rcx, rcx
je 0x140002601
lea rdx, str.Unable_to_locate_LoadLibraryA_n
call fcn.140001010
lea rcx, str.Unable_to_locate_LoadLibraryA_n
call fcn.140001060
mov rcx, qword [0x140006710]
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fflush]
xor al, al
jmp 0x140002815
mov qword [rsp + 0x80], rbp
test rcx, rcx
je 0x14000263d
mov r8, rbx
lea rdx, str.LoadLibrary_found_at_address:_0x_x_n
call fcn.140001010
mov rdx, rbx
lea rcx, str.LoadLibrary_found_at_address:_0x_x_n
call fcn.140001060
mov rcx, qword [0x140006710]
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fflush]
xor edx, edx
mov dword [rsp + 0x20], 4
mov r9d, 0x3000
mov r8d, 0x104
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_VirtualAllocEx]
mov rbp, rax
test rax, rax
jne 0x1400026b8
mov rcx, qword [0x140006710]
test rcx, rcx
je 0x140002698
lea rdx, str.Could_not_allocate_memory_in_process_n
call fcn.140001010
lea rcx, str.Could_not_allocate_memory_in_process_n
call fcn.140001060
mov rcx, qword [0x140006710]
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fflush]
xor al, al
jmp 0x14000280d
mov r9d, 0x104
mov qword [rsp + 0x20], 0
mov r8, rdi
mov rdx, rbp
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
test eax, eax
jne 0x140002712
mov rcx, qword [0x140006710]
test rcx, rcx
je 0x1400026f2
lea rdx, str.Could_not_write_to_processs_address_space_n
call fcn.140001010
lea rcx, str.Could_not_write_to_processs_address_space_n
call fcn.140001060
mov rcx, qword [0x140006710]
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fflush]
xor al, al
jmp 0x14000280d
mov qword [rsp + 0x30], 0
mov r9, rbx
mov dword [rsp + 0x28], 0
xor r8d, r8d
xor edx, edx
mov qword [rsp + 0x20], rbp
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_CreateRemoteThread]
mov rbx, rax
cmp rax, 0xffffffffffffffff
jne 0x14000277a
mov rcx, qword [0x140006710]
test rcx, rcx
je 0x14000275a
lea rdx, str.Failed_to_create_remote_thread_in_process_n
call fcn.140001010
lea rcx, str.Failed_to_create_remote_thread_in_process_n
call fcn.140001060
mov rcx, qword [0x140006710]
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fflush]
xor al, al
jmp 0x14000280d
mov edx, 0xffffffff
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
test eax, eax
je 0x1400027c1
mov rcx, qword [0x140006710]
test rcx, rcx
je 0x1400027a4
lea rdx, str.Failed_to_wait_for_LoadLibrary_to_exit_n
call fcn.140001010
lea rcx, str.Failed_to_wait_for_LoadLibrary_to_exit_n
call fcn.140001060
mov rcx, qword [0x140006710]
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fflush]
xor al, al
jmp 0x14000280d
lea rdx, [rsp + 0x40]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetExitCodeThread]
cmp dword [rsp + 0x40], 0
jne 0x14000280b
mov rcx, qword [0x140006710]
test rcx, rcx
je 0x1400027ee
lea rdx, str.LoadLibrary_failed_to_return_module_handle_n
call fcn.140001010
lea rcx, str.LoadLibrary_failed_to_return_module_handle_n
call fcn.140001060
mov rcx, qword [0x140006710]
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fflush]
xor al, al
jmp 0x14000280d
mov al, 1
mov rbp, qword [rsp + 0x80]
mov rcx, qword [rsp + 0x48]
xor rcx, rsp
call fcn.140002840
add rsp, 0x50
pop rdi
pop rsi
pop rbx
ret