Function at 0x140011861
Capabilities:
Access pe header

Disassembly:
jmp 0x14001f870
mov qword [rsp + 0x10], rdx
mov qword [rsp + 8], rcx
push rbp
push rdi
sub rsp, 0x548
lea rbp, [rsp + 0x20]
lea rdi, [rsp + 0x20]
mov ecx, 0xea
mov eax, 0xcccccccc
rep stosd dword [rdi], eax
mov rcx, qword [rsp + 0x568]
mov rax, qword [0x14008aec0]
xor rax, rbp
mov qword [rbp + 0x518], rax
lea rcx, [0x140093239]
call fcn.140011a64
mov rcx, qword [rbp + 0x548]
call fcn.140011104
mov qword [rbp + 8], rax
cmp qword [rbp + 8], 0
jne 0x14001f8f8
lea rdx, str.invalid_dll_n
lea rcx, [rbp + 0x228]
call fcn.1400118d9
mov rcx, rax
call fcn.140011159
mov rcx, rax
call fcn.140011505
mov rcx, qword [rbp + 8]
call qword [sym.imp.ntdll.dll_RtlImageNtHeader]
mov qword [rbp + 0x28], rax
cmp qword [rbp + 0x28], 0
jne 0x14001f930
lea rdx, str.pe:_invalid_pe_header_n
lea rcx, [rbp + 0x258]
call fcn.140011a8c
mov rcx, rax
call fcn.140011b36
mov rcx, rax
call fcn.140011505
mov dword [rbp + 0x64], 0
cmp dword [rbp + 0x64], 0
jne 0x14001f980
lea rdx, str.Call_of_Duty
lea rcx, [rbp + 0x288]
call fcn.1400119fb
mov rcx, rax
call fcn.140011280
mov rdx, rax
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowA]
lea rdx, [rbp + 0x64]
mov rcx, rax
call qword [sym.imp.USER32.dll_GetWindowThreadProcessId]
mov dword [rbp + 0x44], eax
mov ecx, 0x14
call qword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x14001f937
lea rdx, str.process_id:_0x
lea rcx, [rbp + 0x2b8]
call fcn.140011960
mov rcx, rax
call fcn.14001119f
mov rdx, rax
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14001112c
lea rdx, [0x14001197e]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::ios_base____ptr64____cdecl___class_std::ios_base____ptr64_____ptr64]
mov edx, dword [rbp + 0x64]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___unsigned_long_int____ptr64]
lea rdx, [0x140011069]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, str.thread_id:_0x
lea rcx, [rbp + 0x2e8]
call fcn.14001124e
mov rcx, rax
call fcn.1400118c0
mov rdx, rax
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14001112c
lea rdx, [0x14001197e]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::ios_base____ptr64____cdecl___class_std::ios_base____ptr64_____ptr64]
mov edx, dword [rbp + 0x44]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___unsigned_long_int____ptr64]
lea rdx, [0x140011069]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
cmp dword [rbp + 0x64], 0
je 0x14001fc99
cmp dword [rbp + 0x44], 0
je 0x14001fc99
call fcn.14001153c
mov edx, dword [rbp + 0x64]
mov rcx, rax
call fcn.14001156e
call fcn.14001153c
mov r8d, 0x40
mov rcx, qword [rbp + 0x28]
mov edx, dword [rcx + 0x50]
mov rcx, rax
call fcn.140011a37
mov qword [rbp + 0x88], rax
lea rdx, str.allocate_base:_0x
lea rcx, [rbp + 0x318]
call fcn.140011294
mov rcx, rax
call fcn.1400117f8
mov rdx, rax
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14001112c
lea rdx, [0x14001197e]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::ios_base____ptr64____cdecl___class_std::ios_base____ptr64_____ptr64]
mov rdx, qword [rbp + 0x88]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___void_const____ptr64____ptr64]
lea rdx, [0x140011069]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov r8, qword [rbp + 0x28]
mov rdx, qword [rbp + 8]
mov rcx, qword [rbp + 0x88]
call fcn.140011096
test eax, eax
jne 0x14001fb1a
call fcn.14001153c
mov rdx, qword [rbp + 0x88]
mov rcx, rax
call fcn.140011aeb
lea rdx, str.reloc_failed_n
lea rcx, [rbp + 0x348]
call fcn.14001124e
mov rcx, rax
call fcn.1400118c0
mov rcx, rax
call fcn.140011505
lea rdx, str.relocate_image_success__n
lea rcx, [rbp + 0x378]
call fcn.14001137a
mov rcx, rax
call fcn.14001146f
mov rcx, rax
call fcn.140011505
mov r8, qword [rbp + 0x28]
mov rdx, qword [rbp + 8]
mov ecx, dword [rbp + 0x44]
call fcn.1400114bf
test eax, eax
jne 0x14001fb88
call fcn.14001153c
mov rdx, qword [rbp + 0x88]
mov rcx, rax
call fcn.140011aeb
lea rdx, str.import_failed_n
lea rcx, [rbp + 0x3b8]
call fcn.140011960
mov rcx, rax
call fcn.14001119f
mov rcx, rax
call fcn.140011505
lea rdx, str.resolve_import_success__n
lea rcx, [rbp + 0x3e8]
call fcn.14001137a
mov rcx, rax
call fcn.14001146f
mov rcx, rax
call fcn.140011505
mov r8, qword [rbp + 0x28]
mov rdx, qword [rbp + 8]
mov rcx, qword [rbp + 0x88]
call fcn.1400119d8
lea rdx, str.write_sections_success__n
lea rcx, [rbp + 0x428]
call fcn.14001137a
mov rcx, rax
call fcn.14001146f
mov rcx, rax
call fcn.140011505
xor r9d, r9d
mov r8, qword [rbp + 0x28]
mov rdx, qword [rbp + 0x88]
mov ecx, dword [rbp + 0x44]
call fcn.1400118c5
lea rdx, str.call_dll_main_success__n
lea rcx, [rbp + 0x468]
call fcn.14001167c
mov rcx, rax
call fcn.140011131
mov rcx, rax
call fcn.140011505
mov rdx, qword [rbp + 0x28]
mov rcx, qword [rbp + 0x88]
call fcn.14001100a
mov r8d, 0x8000
xor edx, edx
mov rcx, qword [rbp + 8]
call qword [sym.imp.KERNEL32.dll_VirtualFree]
lea rdx, str.cleanup_success__n
lea rcx, [rbp + 0x498]
call fcn.140011294
mov rcx, rax
call fcn.1400117f8
mov rcx, rax
call fcn.140011505
lea rdx, str.inject_success__n
lea rcx, [rbp + 0x4c8]
call fcn.1400119fb
mov rcx, rax
call fcn.140011280
mov rcx, rax
call fcn.140011505
lea rdx, [0x140011069]
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
jmp 0x14001fcbc
lea rdx, str.process_not_found__n
lea rcx, [rbp + 0x4f8]
call fcn.140011546
mov rcx, rax
call fcn.140011208
mov rcx, rax
call fcn.140011505
lea rcx, [rbp - 0x20]
lea rdx, [0x1400331b0]
call fcn.1400118ac
mov rcx, qword [rbp + 0x518]
xor rcx, rbp
call fcn.140011528
lea rsp, [rbp + 0x528]
pop rdi
pop rbp
ret