Function at 0x14002c307
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call

Disassembly:
jmp 0x140056150
mov qword [rsp + 0x18], r8
mov qword [rsp + 0x10], rdx
mov qword [rsp + 8], rcx
push rbp
push rdi
sub rsp, 0x978
lea rbp, [rsp + 0x30]
lea rdi, [rsp + 0x30]
mov ecx, 0x192
mov eax, 0xcccccccc
rep stosd dword [rdi], eax
mov rcx, qword [rsp + 0x998]
mov rax, qword [0x1400a9040]
xor rax, rbp
mov qword [rbp + 0x930], rax
lea rcx, [0x1400b85ab]
call fcn.14002dc9d
nop
mov r8, qword [rbp + 0x968]
lea rdx, [rbp + 8]
mov rcx, qword [rbp + 0x960]
call fcn.14002d29d
mov r8, qword [rbp + 0x10]
lea rdx, [rbp + 0x40]
mov rcx, qword [rbp + 0x960]
call fcn.14002c965
mov rax, qword [0x1400a9b50]
mov qword [rbp + 0x8f8], rax
mov rax, qword [rbp + 0xc8]
add rax, 0x10
mov qword [rsp + 0x20], 0
mov r9d, 8
lea r8, [rbp + 0x528]
mov rdx, rax
mov rcx, qword [rbp + 8]
call qword [rbp + 0x8f8]
mov dword [rbp + 0x900], eax
cmp dword [rbp + 0x900], 0
jne 0x1400562b4
lea rdx, str.Error_leyendo_la_memoria_del_proceso:
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
call fcn.14002c348
mov qword [rbp + 0x8f8], rax
mov rax, qword [rbp + 0x8f8]
mov qword [rbp + 0x900], rax
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rbp + 0x908], eax
mov edx, dword [rbp + 0x908]
mov rcx, qword [rbp + 0x900]
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___unsigned_long_int____ptr64]
mov qword [rbp + 0x910], rax
mov rax, qword [rbp + 0x910]
mov qword [rbp + 0x918], rax
lea rdx, [0x14002c12c]
mov rcx, qword [rbp + 0x918]
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, str.Error_leyendo_la_memoria_del_proceso
lea rcx, [rbp + 0x8a8]
call fcn.14002d88d
lea rdx, [0x1400a80d0]
lea rcx, [rbp + 0x8a8]
call fcn.14002df45
lea rdx, str.Direcci
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14002c348
mov qword [rbp + 0x8f8], rax
mov rax, qword [rbp + 0x8f8]
mov qword [rbp + 0x900], rax
lea rdx, [0x14002d9f0]
mov rcx, qword [rbp + 0x900]
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::ios_base____ptr64____cdecl___class_std::ios_base____ptr64_____ptr64]
mov qword [rbp + 0x908], rax
mov rax, qword [rbp + 0x908]
mov qword [rbp + 0x910], rax
mov rax, qword [rbp + 0x528]
mov qword [rbp + 0x918], rax
mov rdx, qword [rbp + 0x918]
mov rcx, qword [rbp + 0x910]
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___unsigned_long_long_unsigned___int64_____ptr64]
mov qword [rbp + 0x920], rax
mov rax, qword [rbp + 0x920]
mov qword [rbp + 0x928], rax
lea rdx, [0x14002c12c]
mov rcx, qword [rbp + 0x928]
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov rcx, qword [rbp + 0x970]
call fcn.14002cc26
mov qword [rbp + 0x8f8], rax
mov rax, qword [rbp + 0x528]
mov qword [rbp + 0x900], rax
lea rax, [rbp + 0x544]
mov qword [rsp + 0x20], rax
mov r9d, 0x40
mov r8, qword [rbp + 0x8f8]
mov rdx, qword [rbp + 0x900]
mov rcx, qword [rbp + 8]
call qword [sym.imp.KERNEL32.dll_VirtualProtectEx]
test eax, eax
jne 0x140056439
lea rdx, str.Error_cambiando_los_permisos_del_proceso:
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
call fcn.14002c348
mov qword [rbp + 0x8f8], rax
mov rax, qword [rbp + 0x8f8]
mov qword [rbp + 0x900], rax
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rbp + 0x908], eax
mov edx, dword [rbp + 0x908]
mov rcx, qword [rbp + 0x900]
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___unsigned_long_int____ptr64]
mov qword [rbp + 0x910], rax
mov rax, qword [rbp + 0x910]
mov qword [rbp + 0x918], rax
lea rdx, [0x14002c12c]
mov rcx, qword [rbp + 0x918]
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, str.Error_cambiando_los_permisos_del_proceso
lea rcx, [rbp + 0x8d8]
call fcn.14002d88d
lea rdx, [0x1400a80d0]
lea rcx, [rbp + 0x8d8]
call fcn.14002df45
mov r8, qword [rbp + 0x970]
mov rdx, qword [rbp + 8]
mov rcx, qword [rbp + 0x960]
call fcn.14002d5ea
mov qword [rbp + 0x8f8], rax
mov rax, qword [rbp + 0x8f8]
mov qword [rbp + 0x568], rax
mov rax, qword [rbp + 0x568]
mov qword [rsp + 0x20], rax
lea r9, [rbp + 0x40]
mov r8, qword [rbp + 0x10]
mov rdx, qword [rbp + 8]
mov rcx, qword [rbp + 0x960]
call fcn.14002d55e
mov rcx, qword [rbp + 8]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [rbp + 0x10]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
nop
jmp 0x1400564a0
lea rcx, [rbp - 0x30]
lea rdx, [0x140093a80]
call fcn.14002d7a7
mov rcx, qword [rbp + 0x930]
xor rcx, rbp
call fcn.14002ce01
lea rsp, [rbp + 0x948]
pop rdi
pop rbp
ret