Function at 0x14001152d
Capabilities:
Allocate or change rwx memory
Create thread
Spawn thread to rwx shellcode

Disassembly:
jmp 0x140017ff0
push rbp
push rdi
sub rsp, 0x6f8
lea rbp, [rsp + 0x30]
lea rdi, [rsp + 0x30]
mov ecx, 0x122
mov eax, 0xcccccccc
rep stosd dword [rdi], eax
mov rax, qword [0x140027040]
xor rax, rbp
mov qword [rbp + 0x6b8], rax
lea rcx, [0x14002d0f7]
call fcn.140011785
nop
call fcn.1400112a3
cmp eax, 2
jae 0x14001803f
xor eax, eax
jmp 0x140018341
call fcn.14001153c
cmp eax, 0x800
jae 0x140018052
xor eax, eax
jmp 0x140018341
call fcn.1400114f6
cmp eax, 0x64
jae 0x140018063
xor eax, eax
jmp 0x140018341
call fcn.140011776
movzx eax, al
test eax, eax
je 0x140018076
xor eax, eax
jmp 0x140018341
call fcn.14001183e
movzx eax, al
test eax, eax
je 0x140018089
xor eax, eax
jmp 0x140018341
call fcn.1400112a3
mov edx, eax
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___unsigned_int____ptr64]
lea rdx, [0x140011055]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
nop
call fcn.14001153c
mov edx, eax
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___unsigned_int____ptr64]
lea rdx, [0x140011055]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
nop
call fcn.1400114f6
mov edx, eax
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___unsigned_int____ptr64]
lea rdx, [0x140011055]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
nop
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov ecx, eax
call fcn.1400116d6
mov r8d, 0x104
lea rdx, [rbp + 0x10]
mov ecx, eax
call fcn.14001173f
nop
lea rdx, [rbp + 0x10]
lea rcx, str.Process:__s_n
call fcn.14001104b
nop
lea rdx, str.C:PROGRAM_FILESMICROSOFT_VISUAL_STUDIO2022COMMUNITYCOMMON7IDECOMMONEXTENSIONSPLATFORMDEBUGGERVSDEBUGCONSOLE.EXE
lea rcx, [rbp + 0x238]
call fcn.14001135c
nop
lea rax, [rbp + 0x5e8]
mov qword [rbp + 0x618], rax
lea rax, [rbp + 0x638]
mov qword [rbp + 0x668], rax
lea rcx, [rbp + 0x5c4]
call fcn.140011415
mov qword [rbp + 0x698], rax
mov rdx, qword [rbp + 0x618]
lea rcx, [rbp + 0x238]
call fcn.1400110e6
mov qword [rbp + 0x6a0], rax
mov rdx, qword [rbp + 0x668]
lea rcx, [rbp + 0x238]
call fcn.1400117a8
mov qword [rbp + 0x6a8], rax
mov rax, qword [rbp + 0x698]
mov r9, rax
mov r8, qword [rbp + 0x6a0]
mov rdx, qword [rbp + 0x6a8]
lea rcx, [rbp + 0x588]
call fcn.140011631
mov qword [rbp + 0x6b0], rax
mov rdx, qword [rbp + 0x6b0]
lea rcx, [rbp + 0x10]
call fcn.140011311
mov byte [rbp + 0x564], al
lea rcx, [rbp + 0x588]
call fcn.1400116a9
movzx eax, byte [rbp + 0x564]
test eax, eax
je 0x14001821b
lea rdx, [0x140022e54]
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400110d7
lea rdx, [0x140011055]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
nop
mov byte [rbp + 0x278], 0x8d
mov byte [rbp + 0x279], 0x42
mov byte [rbp + 0x27a], 1
mov byte [rbp + 0x27b], 0xf
mov byte [rbp + 0x27c], 0xaf
mov byte [rbp + 0x27d], 0xc1
mov byte [rbp + 0x27e], 3
mov byte [rbp + 0x27f], 0xc2
mov byte [rbp + 0x280], 0xc3
mov r9d, 0x40
mov r8d, 0x3000
mov edx, 9
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov qword [rbp + 0x2a8], rax
mov r8d, 9
lea rdx, [rbp + 0x278]
mov rcx, qword [rbp + 0x2a8]
call fcn.1400113bb
nop
mov dword [rbp + 0x2e4], 0
jmp 0x1400182ae
mov eax, dword [rbp + 0x2e4]
inc eax
mov dword [rbp + 0x2e4], eax
movsxd rax, dword [rbp + 0x2e4]
cmp rax, 9
jae 0x1400182e3
movsxd rax, dword [rbp + 0x2e4]
mov rcx, qword [rbp + 0x2a8]
movsx eax, byte [rcx + rax]
xor eax, 0x35
movsxd rcx, dword [rbp + 0x2e4]
mov rdx, qword [rbp + 0x2a8]
mov byte [rdx + rcx], al
jmp 0x1400182a0
lea rax, [rbp + 0x2c4]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], 0
xor r9d, r9d
mov r8, qword [rbp + 0x2a8]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
mov qword [rbp + 0x308], rax
mov edx, 0xffffffff
mov rcx, qword [rbp + 0x308]
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
nop
mov dword [rbp + 0x684], 0
lea rcx, [rbp + 0x238]
call fcn.14001116d
mov eax, dword [rbp + 0x684]
mov rdi, rax
lea rcx, [rbp - 0x30]
lea rdx, [0x140023f70]
call fcn.140011654
mov rax, rdi
mov rcx, qword [rbp + 0x6b8]
xor rcx, rbp
call fcn.1400113b6
lea rsp, [rbp + 0x6c8]
pop rdi
pop rbp
ret