Function at 0x1400c3415
Capabilities:
Allocate or change rwx memory
Create thread
Inject thread
Spawn thread to rwx shellcode

Disassembly:
jmp 0x1400da030
mov qword [rsp + 8], rcx
push rbp
push rdi
sub rsp, 0x4c8
lea rbp, [rsp + 0x40]
lea rdi, [rsp + 0x40]
mov ecx, 0xc2
mov eax, 0xcccccccc
rep stosd dword [rdi], eax
mov rcx, qword [rsp + 0x4e8]
mov rax, qword [0x14029f068]
xor rax, rbp
mov qword [rbp + 0x470], rax
lea rcx, [0x1402bc03b]
call fcn.1400c35eb
mov edx, 0x20
lea rcx, [rbp + 8]
call fcn.1400be49c
lea rcx, [rbp + 0x224]
call fcn.1400c086e
mov qword [rbp + 0x458], rax
mov byte [rbp + 0x244], 0xff
mov r9, qword [rbp + 0x458]
lea r8, [rbp + 0x244]
mov edx, 0x80
lea rcx, [rbp + 8]
call fcn.1400c2d3f
nop
lea rcx, [rbp + 8]
call fcn.1400c04a4
mov qword [rbp + 0x458], rax
mov rax, qword [rbp + 0x4a0]
mov rax, qword [rax + 8]
mov qword [rbp + 0x460], rax
mov dword [rsp + 0x20], 0x40
mov r9d, 0x3000
mov r8, qword [rbp + 0x458]
xor edx, edx
mov rcx, qword [rbp + 0x460]
call qword [sym.imp.KERNEL32.dll_VirtualAllocEx]
mov qword [rbp + 0x48], rax
cmp qword [rbp + 0x48], 0
jne 0x1400da1ac
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rbp + 0x454], eax
lea rdx, str.Process32First
lea rcx, [rbp + 0x268]
call fcn.1400bfd01
nop
mov eax, dword [0x14029f018]
add eax, 7
mov dword [rbp + 0x458], eax
lea rdx, str.C:Work_srccrashcrashcrashProcess.cpp
lea rcx, [rbp + 0x2a8]
call fcn.1400bfd01
nop
mov r9d, dword [rbp + 0x454]
lea r8, [rbp + 0x268]
mov edx, dword [rbp + 0x458]
lea rcx, [rbp + 0x2a8]
call fcn.1400c357d
nop
lea rcx, [rbp + 0x2a8]
call fcn.1400c2961
nop
lea rcx, [rbp + 0x268]
call fcn.1400c2961
mov byte [rbp + 0x2e4], 0
lea rcx, [rbp + 8]
call fcn.1400bf9fa
movzx eax, byte [rbp + 0x2e4]
jmp 0x1400da3b4
lea rcx, [rbp + 8]
call fcn.1400c04a4
mov qword [rbp + 0x458], rax
lea rcx, [rbp + 8]
call fcn.1400c3da2
mov qword [rbp + 0x460], rax
mov rax, qword [rbp + 0x4a0]
mov rax, qword [rax + 8]
mov qword [rbp + 0x468], rax
mov qword [rsp + 0x20], 0
mov r9, qword [rbp + 0x458]
mov r8, qword [rbp + 0x460]
mov rdx, qword [rbp + 0x48]
mov rcx, qword [rbp + 0x468]
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov dword [rbp + 0x64], eax
cmp dword [rbp + 0x64], 0
jne 0x1400da2ac
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rbp + 0x454], eax
lea rdx, str.WriteProcessMemory
lea rcx, [rbp + 0x308]
call fcn.1400bfd01
nop
mov eax, dword [0x14029f018]
add eax, 0xe
mov dword [rbp + 0x458], eax
lea rdx, str.C:Work_srccrashcrashcrashProcess.cpp
lea rcx, [rbp + 0x348]
call fcn.1400bfd01
nop
mov r9d, dword [rbp + 0x454]
lea r8, [rbp + 0x308]
mov edx, dword [rbp + 0x458]
lea rcx, [rbp + 0x348]
call fcn.1400c357d
nop
lea rcx, [rbp + 0x348]
call fcn.1400c2961
nop
lea rcx, [rbp + 0x308]
call fcn.1400c2961
mov byte [rbp + 0x384], 0
lea rcx, [rbp + 8]
call fcn.1400bf9fa
movzx eax, byte [rbp + 0x384]
jmp 0x1400da3b4
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0
mov rax, qword [rbp + 0x48]
mov qword [rsp + 0x20], rax
mov r9, qword [rbp + 0x48]
xor r8d, r8d
xor edx, edx
mov rax, qword [rbp + 0x4a0]
mov rcx, qword [rax + 8]
call qword [sym.imp.KERNEL32.dll_CreateRemoteThread]
mov qword [rbp + 0x88], rax
cmp qword [rbp + 0x88], 0
jne 0x1400da38b
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rbp + 0x454], eax
lea rdx, str.CreateRemoteThread
lea rcx, [rbp + 0x3a8]
call fcn.1400bfd01
nop
mov eax, dword [0x14029f018]
add eax, 0x15
mov dword [rbp + 0x458], eax
lea rdx, str.C:Work_srccrashcrashcrashProcess.cpp
lea rcx, [rbp + 0x3e8]
call fcn.1400bfd01
nop
mov r9d, dword [rbp + 0x454]
lea r8, [rbp + 0x3a8]
mov edx, dword [rbp + 0x458]
lea rcx, [rbp + 0x3e8]
call fcn.1400c357d
nop
lea rcx, [rbp + 0x3e8]
call fcn.1400c2961
nop
lea rcx, [rbp + 0x3a8]
call fcn.1400c2961
mov byte [rbp + 0x424], 0
lea rcx, [rbp + 8]
call fcn.1400bf9fa
movzx eax, byte [rbp + 0x424]
jmp 0x1400da3b4
mov edx, 0xffffffff
mov rcx, qword [rbp + 0x88]
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov byte [rbp + 0x444], 1
lea rcx, [rbp + 8]
call fcn.1400bf9fa
movzx eax, byte [rbp + 0x444]
mov rdi, rax
lea rcx, [rbp - 0x40]
lea rdx, [0x140251fa0]
call fcn.1400c271d
mov rax, rdi
mov rcx, qword [rbp + 0x470]
xor rcx, rbp
call fcn.1400c096d
lea rsp, [rbp + 0x488]
pop rdi
pop rbp
ret