Function at 0x140001314
Capabilities:
Enumerate threads
Inject apc

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
mov qword [rax + 0x20], r12
push rbp
push r14
push r15
mov rbp, rsp
sub rsp, 0x70
mov rbx, rdx
mov r14d, ecx
mov r8d, ecx
xor edx, edx
lea ecx, [rdx + 0x2a]
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov rdi, rax
test rax, rax
jne 0x1400013b2
lea rdx, str.Failed_to_open_Pixel_Gun_3D_process.
lea rcx, [rbp - 0x20]
call fcn.140001de8
nop
lea rdx, [rbp - 0x20]
lea ecx, [rdi + 0xc]
call fcn.14000117c
nop
mov rdx, qword [rbp - 8]
cmp rdx, 0xf
jbe 0x1400013ab
inc rdx
mov rcx, qword [rbp - 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400013a6
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400013a6
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140002738
xor al, al
jmp 0x140001803
mov r8, qword [rbx + 0x10]
inc r8
mov esi, 4
mov dword [rsp + 0x20], esi
xor edx, edx
mov r9d, 0x3000
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_VirtualAllocEx]
mov r12, rax
test rax, rax
jne 0x140001445
lea rdx, str.Failed_to_allocate_memory_in_the_target_process.
lea rcx, [rbp - 0x20]
call fcn.140001de8
nop
lea rdx, [rbp - 0x20]
lea ecx, [rsi + 8]
call fcn.14000117c
nop
mov rdx, qword [rbp - 8]
cmp rdx, 0xf
jbe 0x140001437
inc rdx
mov rcx, qword [rbp - 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140001432
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140001432
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140002738
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x1400013ab
mov r9, qword [rbx + 0x10]
inc r9
cmp qword [rbx + 0x18], 0xf
jbe 0x140001456
mov rbx, qword [rbx]
and qword [rsp + 0x20], 0
mov r8, rbx
mov rdx, r12
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
test eax, eax
jne 0x1400014d4
lea rdx, str.Failed_to_write_DLL_path_to_the_target_process.
lea rcx, [rbp - 0x20]
call fcn.140001de8
nop
lea rdx, [rbp - 0x20]
mov ecx, 0xc
call fcn.14000117c
nop
mov rdx, qword [rbp - 8]
cmp rdx, 0xf
jbe 0x1400016fc
inc rdx
mov rcx, qword [rbp - 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400016f7
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400016f7
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
lea rcx, str.kernel32.dll
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
test rax, rax
jne 0x14000154b
lea rdx, str.Kernel32.dll_not_found.
lea rcx, [rbp - 0x20]
call fcn.140001de8
nop
lea rdx, [rbp - 0x20]
mov ecx, 0xc
call fcn.14000117c
nop
mov rdx, qword [rbp - 8]
cmp rdx, 0xf
jbe 0x1400016fc
inc rdx
mov rcx, qword [rbp - 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400016f7
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400016f7
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
lea rdx, str.LoadLibraryA
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov r15, rax
test rax, rax
jne 0x1400015c7
lea rdx, str.Failed_to_locate_LoadLibraryA.
lea rcx, [rbp - 0x20]
call fcn.140001de8
nop
lea rdx, [rbp - 0x20]
lea ecx, [r15 + 0xc]
call fcn.14000117c
nop
mov rdx, qword [rbp - 8]
cmp rdx, 0xf
jbe 0x1400016fc
inc rdx
mov rcx, qword [rbp - 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400016f7
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400016f7
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
xor edx, edx
mov ecx, esi
call qword [sym.imp.KERNEL32.dll_CreateToolhelp32Snapshot]
mov rsi, rax
cmp rax, 0xffffffffffffffff
jne 0x14000163d
lea rdx, str.Failed_to_take_a_thread_snapshot.
lea rcx, [rbp - 0x20]
call fcn.140001de8
nop
lea rdx, [rbp - 0x20]
lea ecx, [rsi + 0xd]
call fcn.14000117c
nop
mov rdx, qword [rbp - 8]
cmp rdx, 0xf
jbe 0x1400016fc
inc rdx
mov rcx, qword [rbp - 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400016f7
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400016f7
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov dword [rbp - 0x40], 0x1c
vpxor xmm0, xmm0, xmm0
xor eax, eax
vmovups xmmword [rbp - 0x3c], xmm0
mov qword [rbp - 0x2c], rax
xor ebx, ebx
lea rdx, [rbp - 0x40]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_Thread32First]
jmp 0x14000168e
cmp dword [rbp - 0x34], r14d
jne 0x140001681
mov r8d, dword [rbp - 0x38]
xor edx, edx
lea ecx, [rdx + 0x10]
call qword [sym.imp.KERNEL32.dll_OpenThread]
mov rbx, rax
test rax, rax
jne 0x140001692
lea rdx, [rbp - 0x40]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_Thread32Next]
test eax, eax
jne 0x140001664
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
test rbx, rbx
jne 0x140001716
lea rdx, str.Failed_to_open_a_thread_in_the_target_process.
lea rcx, [rbp - 0x20]
call fcn.140001de8
nop
lea rdx, [rbp - 0x20]
lea ecx, [rbx + 0xc]
call fcn.14000117c
nop
mov rdx, qword [rbp - 8]
cmp rdx, 0xf
jbe 0x1400016fc
inc rdx
mov rcx, qword [rbp - 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400016f7
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400016f7
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140002738
mov r9d, 0x8000
xor r8d, r8d
mov rdx, r12
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_VirtualFreeEx]
jmp 0x140001437
mov r8, r12
mov rdx, rbx
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_QueueUserAPC]
lea rcx, [rbp - 0x20]
test eax, eax
jne 0x140001795
lea rdx, str.Failed_to_queue_the_APC_for_DLL_injection.
call fcn.140001de8
nop
lea rdx, [rbp - 0x20]
mov ecx, 0xc
call fcn.14000117c
nop
mov rdx, qword [rbp - 8]
cmp rdx, 0xf
jbe 0x140001787
inc rdx
mov rcx, qword [rbp - 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140001782
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140001782
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140002738
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x1400016fc
lea rdx, str.DLL_injection_queued_successfully.
call fcn.140001de8
nop
lea rdx, [rbp - 0x20]
mov ecx, 0xb
call fcn.14000117c
nop
mov rdx, qword [rbp - 8]
cmp rdx, 0xf
jbe 0x1400017ef
inc rdx
mov rcx, qword [rbp - 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400017ea
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400017ea
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140002738
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov al, 1
lea r11, [rsp + 0x70]
mov rbx, qword [r11 + 0x20]
mov rsi, qword [r11 + 0x28]
mov rdi, qword [r11 + 0x30]
mov r12, qword [r11 + 0x38]
mov rsp, r11
pop r15
pop r14
pop rbp
ret