Function at 0x1400116d6
Capabilities:
Create thread
Inject dll
Inject thread

Disassembly:
jmp 0x1400164b0
mov qword [rsp + 8], rcx
push rbp
push rdi
sub rsp, 0x1c8
lea rbp, [rsp + 0x40]
lea rdi, [rsp + 0x40]
mov ecx, 0x32
mov eax, 0xcccccccc
rep stosd dword [rdi], eax
mov rcx, qword [rsp + 0x1e8]
mov rax, qword [0x140029040]
xor rax, rbp
mov qword [rbp + 0x178], rax
lea rcx, [0x14002f0fd]
call fcn.14001172b
lea rcx, [0x140029500]
call fcn.14001130c
test rax, rax
jne 0x140016522
lea rdx, str.Failed_to_find_dll__No_dll_selected_
lea rcx, str.Error_0000x2
call fcn.140011028
jmp 0x14001677d
xor r9d, r9d
xor r8d, r8d
mov edx, 0x147
mov rcx, qword [0x1400294e8]
call qword [sym.imp.USER32.dll_SendMessageA]
mov dword [rbp + 4], eax
mov dword [rbp + 0x24], 0
lea rdx, [rbp + 0x24]
mov ecx, dword [rbp + 4]
call fcn.1400114ce
cmp dword [rbp + 0x24], 0
jne 0x14001656e
lea rdx, str.Failed_to_find_process__No_process_selected_
lea rcx, str.Error_0000x3
call fcn.140011028
jmp 0x14001677d
mov r8d, dword [rbp + 0x24]
xor edx, edx
mov ecx, 0x1fffff
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov qword [rbp + 0x48], rax
cmp qword [rbp + 0x48], 0
jne 0x1400165a2
lea rdx, str.Failed_to_open_process__No_permission_
lea rcx, str.Error_0000x4
call fcn.140011028
jmp 0x14001677d
mov dword [rsp + 0x20], 4
mov r9d, 0x3000
mov r8d, 0x104
xor edx, edx
mov rcx, qword [rbp + 0x48]
call qword [sym.imp.KERNEL32.dll_VirtualAllocEx]
mov qword [rbp + 0x68], rax
cmp qword [rbp + 0x68], 0
jne 0x1400165ef
lea rdx, str.Failed_to_allocate_memory_in_target_process
lea rcx, str.Error_0000x5
call fcn.140011028
mov rcx, qword [rbp + 0x48]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x14001677d
mov qword [rsp + 0x20], 0
mov r9d, 0x104
lea r8, [0x140029500]
mov rdx, qword [rbp + 0x68]
mov rcx, qword [rbp + 0x48]
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
test eax, eax
jne 0x140016650
lea rdx, str.Failed_to_write_to_process_memory__No_permission_
lea rcx, str.Error_0000x6
call fcn.140011028
mov rcx, qword [rbp + 0x48]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov r9d, 0x8000
xor r8d, r8d
mov rdx, qword [rbp + 0x68]
mov rcx, qword [rbp + 0x48]
call qword [sym.imp.KERNEL32.dll_VirtualFreeEx]
jmp 0x14001677d
lea rcx, str.kernel32.dll
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
lea rdx, str.LoadLibraryA
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [rbp + 0x88], rax
cmp qword [rbp + 0x88], 0
jne 0x1400166b7
lea rdx, str.Failed_to_get_address_of_LoadLibraryA
lea rcx, str.Error_0000x8
call fcn.140011028
mov rcx, qword [rbp + 0x48]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov r9d, 0x8000
xor r8d, r8d
mov rdx, qword [rbp + 0x68]
mov rcx, qword [rbp + 0x48]
call qword [sym.imp.KERNEL32.dll_VirtualFreeEx]
jmp 0x14001677d
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0
mov rax, qword [rbp + 0x68]
mov qword [rsp + 0x20], rax
mov r9, qword [rbp + 0x88]
xor r8d, r8d
xor edx, edx
mov rcx, qword [rbp + 0x48]
call qword [sym.imp.KERNEL32.dll_CreateRemoteThread]
mov qword [rbp + 0xa8], rax
cmp qword [rbp + 0xa8], 0
jne 0x14001672e
lea rdx, str.Failed_to_create_remote_thread
lea rcx, str.Error_0000x7
call fcn.140011028
mov rcx, qword [rbp + 0x48]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov r9d, 0x8000
xor r8d, r8d
mov rdx, qword [rbp + 0x68]
mov rcx, qword [rbp + 0x48]
call qword [sym.imp.KERNEL32.dll_VirtualFreeEx]
jmp 0x14001677d
mov rcx, qword [rbp + 0xa8]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [rbp + 0x48]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov r9d, 0x8000
xor r8d, r8d
mov rdx, qword [rbp + 0x68]
mov rcx, qword [rbp + 0x48]
call qword [sym.imp.KERNEL32.dll_VirtualFreeEx]
mov r9d, 0x40
lea r8, str.Success
lea rdx, str.DLL_injected_successfully_
mov rcx, qword [rbp + 0x1a0]
call qword [sym.imp.USER32.dll_MessageBoxA]
lea rcx, [rbp - 0x40]
lea rdx, [0x140024310]
call fcn.140011604
mov rcx, qword [rbp + 0x178]
xor rcx, rbp
call fcn.140011361
lea rsp, [rbp + 0x188]
pop rdi
pop rbp
ret