Function at 0x14001112c
Capabilities:
Enumerate threads
Inject apc

Disassembly:
jmp 0x140013980
mov dword [rsp + 0x10], edx
mov qword [rsp + 8], rcx
push rbp
push rdi
sub rsp, 0x278
lea rbp, [rsp + 0x30]
lea rdi, [rsp + 0x30]
mov ecx, 0x62
mov eax, 0xcccccccc
rep stosd dword [rdi], eax
mov rcx, qword [rsp + 0x298]
mov rax, qword [0x140023080]
xor rax, rbp
mov qword [rbp + 0x238], rax
lea rcx, [0x1400294a9]
call fcn.140011497
mov rcx, qword [rbp + 0x260]
call qword [sym.imp.KERNEL32.dll_lstrlenW]
inc eax
cdqe
shl rax, 1
mov dword [rbp + 4], eax
mov r8d, dword [rbp + 0x268]
xor edx, edx
mov ecx, 0x28
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov qword [rbp + 0x28], rax
cmp qword [rbp + 0x28], 0
jne 0x140013a1f
mov edx, dword [rbp + 0x268]
lea rcx, str.____Error:_Could_not_open_process_for_PID___d_._n
call fcn.140011032
mov eax, 1
jmp 0x140013c69
movsxd rax, dword [rbp + 4]
mov dword [rsp + 0x20], 4
mov r9d, 0x1000
mov r8, rax
xor edx, edx
mov rcx, qword [rbp + 0x28]
call qword [sym.imp.KERNEL32.dll_VirtualAllocEx]
mov qword [rbp + 0x48], rax
cmp qword [rbp + 0x48], 0
jne 0x140013a67
mov edx, dword [rbp + 0x268]
lea rcx, str.____Error:_Could_not_allocate_memory_inside_PID___d_._n
call fcn.140011032
mov eax, 1
jmp 0x140013c69
lea rcx, str.Kernel32
call qword [sym.imp.KERNEL32.dll_GetModuleHandleW]
lea rdx, str.LoadLibraryW
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [rbp + 0x68], rax
cmp qword [rbp + 0x68], 0
jne 0x140013aa5
lea rcx, str.____Error:_Could_not_find_LoadLibraryA_function_inside_kernel32.dll_library._n
call fcn.140011032
mov eax, 1
jmp 0x140013c69
movsxd rax, dword [rbp + 4]
mov qword [rsp + 0x20], 0
mov r9, rax
mov r8, qword [rbp + 0x260]
mov rdx, qword [rbp + 0x48]
mov rcx, qword [rbp + 0x28]
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov dword [rbp + 0x84], eax
cmp dword [rbp + 0x84], 0
jne 0x140013af5
mov edx, dword [rbp + 0x268]
lea rcx, str.____Error:_Could_not_write_any_bytes_into_the_PID___d__address_space._n
call fcn.140011032
mov eax, 1
jmp 0x140013c69
xor edx, edx
mov ecx, 4
call fcn.140011203
mov qword [rbp + 0xa8], rax
cmp qword [rbp + 0xa8], 0xffffffffffffffff
jne 0x140013b28
lea rcx, str.____Error:_Unable_to_get_thread_information_n
call fcn.140011032
mov eax, 1
jmp 0x140013c69
mov dword [rbp + 0xc4], 0
mov dword [rbp + 0xe8], 0x1c
lea rdx, [rbp + 0xe8]
mov rcx, qword [rbp + 0xa8]
call fcn.1400112df
mov dword [rbp + 0x124], eax
cmp dword [rbp + 0x124], 0
je 0x140013c3b
lea rdx, [rbp + 0xe8]
mov rcx, qword [rbp + 0xa8]
call fcn.14001108c
mov dword [rbp + 0x124], eax
cmp dword [rbp + 0x124], 0
je 0x140013c36
mov eax, dword [rbp + 0x268]
cmp dword [rbp + 0xf4], eax
jne 0x140013c36
mov eax, dword [rbp + 0xf0]
mov dword [rbp + 0xc4], eax
mov edx, dword [rbp + 0xc4]
lea rcx, str.___Using_thread:__i_n
call fcn.140011032
mov r8d, dword [rbp + 0xc4]
xor edx, edx
mov ecx, 0x10
call qword [sym.imp.KERNEL32.dll_OpenThread]
mov qword [rbp + 0x148], rax
cmp qword [rbp + 0x148], 0
jne 0x140013beb
lea rcx, str.____Error:_Cant_open_thread._Continuing_to_try_other_threads..._n
call fcn.140011032
jmp 0x140013c36
mov r8, qword [rbp + 0x48]
mov rdx, qword [rbp + 0x148]
mov rcx, qword [rbp + 0x68]
call qword [sym.imp.KERNEL32.dll_QueueUserAPC]
mov dword [rbp + 0x164], eax
cmp dword [rbp + 0x164], 0
jne 0x140013c1d
lea rcx, str.____Error:_Couldnt_call_QueueUserAPC_on_thread__Continuing_to_try_othrt_threads..._n
call fcn.140011032
jmp 0x140013c29
lea rcx, str.___Success:_DLL_injected_via_QueueUserAPC__._n
call fcn.140011032
mov rcx, qword [rbp + 0x148]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x140013b55
cmp dword [rbp + 0xc4], 0
jne 0x140013c50
lea rcx, str.____Error:_No_threads_found_in_thr_target_process_n
call fcn.140011032
mov rcx, qword [rbp + 0xa8]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [rbp + 0x28]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
xor eax, eax
mov rdi, rax
lea rcx, [rbp - 0x30]
lea rdx, [0x14001f5d0]
call fcn.1400113ed
mov rax, rdi
mov rcx, qword [rbp + 0x238]
xor rcx, rbp
call fcn.140011217
lea rsp, [rbp + 0x248]
pop rdi
pop rbp
ret