Function at 0x14003d0d0
Capabilities:
Allocate or change rwx memory
Create thread
Execute shellcode via indirect call
Spawn thread to rwx shellcode

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x37]
sub rsp, 0xe0
mov rax, qword [0x1400f1080]
xor rax, rsp
mov qword [rbp + 0x27], rax
xorps xmm0, xmm0
xor r14d, r14d
mov esi, r14d
movups xmmword [0x1400f1160], xmm0
movups xmmword [0x1400f1170], xmm0
movups xmmword [0x1400f1180], xmm0
call qword [sym.imp.KERNEL32.dll_GetConsoleWindow]
mov rcx, rax
lea rdx, str.Crosshair
call qword [sym.imp.USER32.dll_SetWindowTextA]
xor r9d, r9d
mov qword [rsp + 0x28], r14
lea r8, [0x14003cd70]
mov dword [rsp + 0x20], r14d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
xor r9d, r9d
mov qword [rsp + 0x28], r14
lea r8, [0x14003cf70]
mov dword [rsp + 0x20], r14d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
xor r9d, r9d
mov qword [rsp + 0x28], r14
lea r8, [0x140032500]
mov dword [rsp + 0x20], r14d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
cmp dword [0x1400f1168], 0x12
je 0x14003d4c5
movabs rbx, 0xf215f3a0651c7bc6
movabs r13, 0xecc2ff3f77537f8b
movabs r15, 0x89b69651032110cd
movabs r12, 0xf215f3a0651c5be6
nop word [rax + rax]
xor ecx, ecx
mov edx, 0x1000
mov r8d, edx
lea r9d, [rcx + 0x40]
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov rdi, rax
test rax, rax
je 0x14003d253
movups xmm0, xmmword [0x1400f2978]
movups xmmword [rax], xmm0
movsd xmm1, qword [0x1400f2988]
movsd qword [rax + 0x10], xmm1
mov ecx, dword [0x1400f2990]
mov dword [rax + 0x18], ecx
movzx ecx, word [0x1400f2994]
mov word [rax + 0x1c], cx
mov ecx, 0xfc
call rdi
xor edx, edx
mov r8d, 0x1000
mov rcx, rdi
mov ebx, eax
call sub.VCRUNTIME140.dll_memset
xor edx, edx
mov r8d, 0x8000
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_VirtualFree]
test ebx, ebx
jne 0x14003d4c5
movabs rbx, 0xf215f3a0651c7bc6
cmp byte [0x1400f29c8], r14b
jne 0x14003d4c5
cmp byte [0x1400f141c], r14b
jne 0x14003d294
lea rcx, [rbp - 0x41]
call fcn.1400322a0
movups xmm0, xmmword [rax]
movups xmm1, xmmword [rax + 0x10]
movups xmmword [0x1400f2418], xmm0
movsd xmm0, qword [rax + 0x20]
movsd qword [0x1400f2438], xmm0
movups xmmword [0x1400f2428], xmm1
mov eax, 0x10624dd3
imul esi
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
imul ecx, edx, 0x1f4
cmp esi, ecx
jne 0x14003d316
mov qword [rbp - 0x69], r13
lea rdx, [rbp - 0x69]
mov qword [rbp - 0x61], rbx
lea rcx, [rbp - 0x59]
movdqa xmm0, xmmword [rbp - 0x69]
movabs rax, 0xe0e1fa3066537e98
mov qword [rbp - 0x59], rax
movabs rax, 0xf215f3a012733f88
mov qword [rbp - 0x51], rax
mov qword [rbp + 7], r15
mov qword [rbp + 0xf], r12
xorps xmm0, xmmword [rbp + 7]
movdqa xmmword [rbp - 0x69], xmm0
movdqa xmm0, xmmword [rbp - 0x59]
mov qword [rbp + 0x17], r15
mov qword [rbp + 0x1f], r12
xorps xmm0, xmmword [rbp + 0x17]
movdqa xmmword [rbp - 0x59], xmm0
call qword [sym.imp.USER32.dll_FindWindowA]
test rax, rax
je 0x14003d6b0
mov rdx, qword [0x1400f23a0]
lea rcx, [0x1400f1160]
xor r9d, r9d
mov dword [rsp + 0x20], 1
xor r8d, r8d
inc esi
call qword [sym.imp.USER32.dll_PeekMessageA]
test eax, eax
je 0x14003d358
lea rcx, [0x1400f1160]
call qword [sym.imp.USER32.dll_TranslateMessage]
lea rcx, [0x1400f1160]
call qword [sym.imp.USER32.dll_DispatchMessageA]
call qword [sym.imp.USER32.dll_GetForegroundWindow]
cmp rax, qword [0x1400f24e0]
jne 0x14003d39d
mov edx, 3
mov rcx, rax
call qword [sym.imp.USER32.dll_GetWindow]
mov rcx, qword [0x1400f23a0]
xor r9d, r9d
mov dword [rsp + 0x30], 3
mov rdx, rax
mov dword [rsp + 0x28], r14d
xor r8d, r8d
mov dword [rsp + 0x20], r14d
call qword [sym.imp.USER32.dll_SetWindowPos]
cmp byte [0x1400f1434], 1
mov rcx, qword [0x1400f23a0]
jne 0x14003d3b4
mov edx, reloc.WS2_32.dll_recvfrom
jmp 0x14003d3b6
xor edx, edx
call qword [sym.imp.USER32.dll_SetWindowDisplayAffinity]
mov rcx, qword [0x1400f24e0]
lea rdx, [rbp - 0x11]
xorps xmm0, xmm0
mov qword [rbp - 0x19], r14
movups xmmword [rbp - 0x11], xmm0
call qword [sym.imp.USER32.dll_GetClientRect]
mov rcx, qword [0x1400f24e0]
lea rdx, [rbp - 0x19]
call qword [sym.imp.USER32.dll_ClientToScreen]
mov eax, dword [rbp - 0x19]
mov rcx, qword [0x1400f24e0]
mov dword [rbp - 0x11], eax
mov eax, dword [rbp - 0x15]
mov dword [rbp - 0xd], eax
mov rax, qword [0x1400f2330]
mov qword [rax + 0x120], rcx
mov eax, dword [0x1400f29f8]
mov ecx, dword [rbp - 5]
mov edx, dword [rbp - 9]
cmp dword [rbp - 0x11], eax
jne 0x14003d436
cmp edx, dword [0x1400f2a00]
jne 0x14003d436
mov eax, dword [0x1400f29fc]
cmp dword [rbp - 0xd], eax
jne 0x14003d436
cmp ecx, dword [0x1400f2a04]
je 0x14003d497
movups xmm0, xmmword [rbp - 0x11]
mov r9d, dword [rbp - 0x15]
mov r8d, dword [rbp - 0x19]
mov dword [rsp + 0x30], 8
mov dword [rsp + 0x28], ecx
mov dword [rsp + 0x20], edx
mov dword [0x1400f24f0], edx
mov dword [0x1400f24f4], ecx
mov dword [0x1400f1110], edx
xor edx, edx
mov dword [0x1400f1114], ecx
mov rcx, qword [0x1400f23a0]
movups xmmword [0x1400f29f8], xmm0
call qword [sym.imp.USER32.dll_SetWindowPos]
mov rcx, qword [0x1400f1108]
lea rdx, [0x1400f1110]
mov rax, qword [rcx]
call qword [rax + 0x80]
call fcn.14003ca20
mov eax, 0x3e8
cdq
idiv dword [0x1400f1420]
movsxd rcx, eax
mov qword [rbp - 0x49], rcx
lea rcx, [rbp - 0x49]
call fcn.140041a60
cmp dword [0x1400f1168], 0x12
jne 0x14003d1d0
mov rcx, qword [0x1400f2330]
test rcx, rcx
je 0x14003d4da
mov rdi, qword [rcx + 0xf0]
jmp 0x14003d4dd
mov rdi, r14
lea rsi, [rcx + 8]
test rcx, rcx
je 0x14003d559
mov rbx, qword [rcx + 0xf0]
test rbx, rbx
je 0x14003d559
cmp qword [rbx], r14
je 0x14003d559
mov rdx, qword [rbx + 8]
test rdx, rdx
je 0x14003d514
mov rax, qword [rdx]
mov rcx, rdx
call qword [rax + reloc.WS2_32.dll_recv]
mov rcx, qword [0x1400f2330]
mov qword [rbx + 8], r14
mov rdx, qword [rbx + 0x10]
test rdx, rdx
je 0x14003d531
mov rax, qword [rdx]
mov rcx, rdx
call qword [rax + reloc.WS2_32.dll_recv]
mov rcx, qword [0x1400f2330]
mov qword [rbx + 0x10], r14
mov rdx, qword [rbx + 0x18]
test rdx, rdx
je 0x14003d559
mov rax, qword [rdx]
mov rcx, rdx
call qword [rax + reloc.WS2_32.dll_recv]
mov rcx, qword [0x1400f2330]
mov qword [rbx + 0x18], r14
mov rax, qword [rcx + 0xa8]
mov qword [rax + 8], r14
mov rdx, qword [rdi]
test rdx, rdx
je 0x14003d571
mov rax, qword [rdx]
mov rcx, rdx
call qword [rax + reloc.WS2_32.dll_recv]
mov rcx, qword [0x1400f2330]
mov qword [rsi + 0xd8], r14
mov qword [rsi + 0xe8], r14
test rcx, rcx
je 0x14003d58a
dec dword [rcx + 0x3b0]
mov rcx, rdi
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov rax, qword [0x1400f2330]
test rax, rax
je 0x14003d5a8
mov rbx, qword [rax + 0xe8]
jmp 0x14003d5ab
mov rbx, r14
mov rcx, qword [rbx + 0x30]
lea rdi, [rax + 8]
test rcx, rcx
je 0x14003d5c5
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
mov rax, qword [0x1400f2330]
mov qword [rdi + 0xd0], r14
mov qword [rdi + 0xe0], r14
test rax, rax
je 0x14003d5de
dec dword [rax + 0x3b0]
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov rbx, qword [0x1400f2330]
mov rcx, rbx
call fcn.140008e00
cmp qword [0x1400f2330], rbx
jne 0x14003d606
mov qword [0x1400f2330], r14
test rbx, rbx
je 0x14003d62e
mov rcx, rbx
call fcn.140017500
mov rax, qword [0x1400f2330]
test rax, rax
je 0x14003d625
dec dword [rax + 0x3b0]
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov rcx, qword [0x1400f1108]
test rcx, rcx
je 0x14003d650
mov rax, qword [rcx]
call qword [rax + 0x150]
mov rcx, qword [0x1400f1108]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov rcx, qword [0x1400f1100]
test rcx, rcx
je 0x14003d662
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov rcx, qword [0x1400f23a0]
call qword [sym.imp.USER32.dll_DestroyWindow]
mov rdx, qword [0x1400f2368]
mov rcx, qword [0x1400f2390]
call qword [sym.imp.USER32.dll_UnregisterClassA]
mov rcx, qword [rbp + 0x27]
xor rcx, rsp
call fcn.1400a6bc0
lea r11, [rsp + 0xe0]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
xor ecx, ecx
call fcn.140031db0
int3