Function at 0x140026243
Capabilities:
Create thread
Inject dll
Inject thread

Disassembly:
jmp 0x140042ba0
mov qword [rsp + 0x10], rdx
mov dword [rsp + 8], ecx
push rbp
push rdi
sub rsp, 0x298
lea rbp, [rsp + 0x40]
lea rcx, [0x140091123]
call fcn.140026441
nop
mov r8d, dword [rbp + 0x270]
xor edx, edx
mov ecx, 0x1fffff
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov qword [rbp + 8], rax
cmp qword [rbp + 8], 0xffffffffffffffff
jne 0x140042c51
mov dx, 0xc
mov rcx, qword [0x140085980]
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
nop
lea rdx, str.Couldnt_create_a_handle_to_the_process._n
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140025258
mov qword [rbp + 0x238], rax
lea rdx, [0x1400250c8]
mov rcx, qword [rbp + 0x238]
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
nop
mov dword [rbp + 0x164], 5
lea rdx, [rbp + 0x164]
lea rcx, [rbp + 0x148]
call fcn.1400254a6
mov rcx, rax
call fcn.1400253d4
nop
xor al, al
jmp 0x140042f13
mov rcx, qword [rbp + 0x278]
call fcn.140025e97
inc rax
mov dword [rsp + 0x20], 4
mov r9d, 0x3000
mov r8, rax
xor edx, edx
mov rcx, qword [rbp + 8]
call qword [sym.imp.KERNEL32.dll_VirtualAllocEx]
mov qword [rbp + 0x28], rax
cmp qword [rbp + 0x28], 0
jne 0x140042d01
mov dx, 0xc
mov rcx, qword [0x140085980]
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
nop
lea rdx, str.Couldnt_call_VirtualAllocEx.
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140025258
mov qword [rbp + 0x238], rax
lea rdx, [0x1400250c8]
mov rcx, qword [rbp + 0x238]
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
nop
mov rcx, qword [rbp + 8]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
nop
mov dword [rbp + 0x1a4], 5
lea rdx, [rbp + 0x1a4]
lea rcx, [rbp + 0x188]
call fcn.1400254a6
mov rcx, rax
call fcn.1400253d4
nop
xor al, al
jmp 0x140042f13
mov rcx, qword [rbp + 0x278]
call fcn.140025e97
inc rax
mov qword [rbp + 0x238], rax
mov rcx, qword [rbp + 0x278]
call fcn.140025203
mov qword [rbp + 0x240], rax
mov qword [rsp + 0x20], 0
mov r9, qword [rbp + 0x238]
mov r8, qword [rbp + 0x240]
mov rdx, qword [rbp + 0x28]
mov rcx, qword [rbp + 8]
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
test eax, eax
jne 0x140042de8
mov dx, 0xc
mov rcx, qword [0x140085980]
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
nop
lea rdx, str.Couldnt_call_WriteProcessMemory.
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140025258
mov qword [rbp + 0x238], rax
lea rdx, [0x1400250c8]
mov rcx, qword [rbp + 0x238]
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
nop
mov rcx, qword [rbp + 8]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
nop
mov r9d, 0x8000
xor r8d, r8d
mov rdx, qword [rbp + 0x28]
mov rcx, qword [rbp + 8]
call qword [sym.imp.KERNEL32.dll_VirtualFreeEx]
nop
mov dword [rbp + 0x1e4], 5
lea rdx, [rbp + 0x1e4]
lea rcx, [rbp + 0x1c8]
call fcn.1400254a6
mov rcx, rax
call fcn.1400253d4
nop
xor al, al
jmp 0x140042f13
lea rcx, [0x14007b2a8]
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
lea rdx, str.LoadLibraryA
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [rbp + 0x48], rax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0
mov rax, qword [rbp + 0x28]
mov qword [rsp + 0x20], rax
mov r9, qword [rbp + 0x48]
xor r8d, r8d
xor edx, edx
mov rcx, qword [rbp + 8]
call qword [sym.imp.KERNEL32.dll_CreateRemoteThread]
mov qword [rbp + 0x68], rax
cmp qword [rbp + 0x68], 0xffffffffffffffff
jne 0x140042ed3
mov dx, 0xc
mov rcx, qword [0x140085980]
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
nop
lea rdx, str.Couldnt_call_CreateRemoteThread.
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140025258
mov qword [rbp + 0x238], rax
lea rdx, [0x1400250c8]
mov rcx, qword [rbp + 0x238]
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
nop
mov rcx, qword [rbp + 8]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
nop
mov r9d, 0x8000
xor r8d, r8d
mov rdx, qword [rbp + 0x28]
mov rcx, qword [rbp + 8]
call qword [sym.imp.KERNEL32.dll_VirtualFreeEx]
nop
mov dword [rbp + 0x224], 5
lea rdx, [rbp + 0x224]
lea rcx, [rbp + 0x208]
call fcn.1400254a6
mov rcx, rax
call fcn.1400253d4
nop
xor al, al
jmp 0x140042f13
mov edx, 0xffffffff
mov rcx, qword [rbp + 0x68]
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
nop
mov rcx, qword [rbp + 0x68]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
nop
mov rcx, qword [rbp + 8]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
nop
mov r9d, 0x8000
xor r8d, r8d
mov rdx, qword [rbp + 0x28]
mov rcx, qword [rbp + 8]
call qword [sym.imp.KERNEL32.dll_VirtualFreeEx]
nop
mov al, 1
lea rsp, [rbp + 0x258]
pop rdi
pop rbp
ret