Function at 0x14007a1b0
Capabilities:
Contain obfuscated stackstrings
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x100]
sub rsp, 0x200
mov rax, qword [0x14016d080]
xor rax, rsp
mov qword [rbp + 0xf0], rax
xorps xmm0, xmm0
movups xmmword [rbp - 0x48], xmm0
xor r13d, r13d
mov qword [rbp - 0x38], r13
mov qword [rbp - 0x30], reloc.WS2_32.dll_ntohs
mov byte [rbp - 0x48], r13b
mov qword [rbp - 0x28], r13
mov qword [rbp - 0x70], r13
mov byte [rbp - 0x68], 0x45
mov al, 9
mov cl, 0xa
mov dl, 6
mov r8b, 4
movzx r9d, al
movzx r10d, r8b
mov r11b, reloc.WS2_32.dll_setsockopt
movzx ebx, r11b
mov dil, 1
movzx esi, r8b
mov r14b, reloc.WS2_32.dll_recvfrom
movzx r15d, r8b
xor r12d, r12d
xor al, 0x45
mov byte [rbp - 0x67], al
xor cl, 0x45
mov byte [rbp - 0x66], cl
xor dl, 0x45
mov byte [rbp - 0x65], dl
xor r8b, 0x45
mov byte [rbp - 0x64], r8b
xor r9b, 0x45
mov byte [rbp - 0x63], r9b
xor r10b, 0x45
mov byte [rbp - 0x62], r10b
xor r11b, 0x45
mov byte [rbp - 0x61], r11b
xor bl, 0x45
mov byte [rbp - 0x60], bl
xor dil, 0x45
mov byte [rbp - 0x5f], dil
xor sil, 0x45
mov byte [rbp - 0x5e], sil
xor r14b, 0x45
mov byte [rbp - 0x5d], r14b
xor r15b, 0x45
mov byte [rbp - 0x5c], r15b
mov byte [rbp - 0x5b], r12b
lea r8, [rbp - 0x67]
lea rdx, [rbp - 0x28]
lea rcx, [rbp - 0x70]
call qword [sym.imp.api_ms_win_crt_environment_l1_1_0.dll__dupenv_s]
lea rsi, [r13 - 1]
mov rcx, qword [rbp - 0x70]
test rcx, rcx
je 0x14007a2fe
mov rdi, rsi
inc rdi
cmp byte [rcx + rdi], r12b
jne 0x14007a2b4
mov rax, qword [rbp - 0x30]
cmp rdi, rax
ja 0x14007a2eb
lea rbx, [rbp - 0x48]
cmp rax, 0xf
cmova rbx, qword [rbp - 0x48]
mov qword [rbp - 0x38], rdi
mov r8, rdi
mov rdx, rcx
mov rcx, rbx
call sub.VCRUNTIME140.dll_memmove
mov byte [rbx + rdi], r12b
jmp 0x14007a2fa
mov r9, rcx
mov rdx, rdi
lea rcx, [rbp - 0x48]
call fcn.14006bea0
mov rcx, qword [rbp - 0x70]
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
movdqa xmm0, xmmword [0x14015adb0]
movdqa xmmword [rsp + 0x30], xmm0
movdqa xmm1, xmmword [0x14015ad10]
movdqa xmmword [rsp + 0x40], xmm1
movdqa xmm0, xmmword [0x14015ab30]
movdqa xmmword [rsp + 0x50], xmm0
movdqa xmm1, xmmword [0x14015ae80]
movdqa xmmword [rsp + 0x60], xmm1
movdqa xmm0, xmmword [0x14015add0]
movdqa xmmword [rsp + 0x70], xmm0
mov dword [rbp - 0x80], 0x6e697a6b
mov dword [rbp - 0x7c], 0x276d787c
mov word [rbp - 0x78], 0x7b60
xor eax, eax
mov byte [rbp - 0x76], al
mov rcx, r13
nop word [rax + rax]
movzx eax, byte [rsp + 0x30]
xor byte [rsp + rcx + 0x31], al
inc rcx
cmp rcx, 0x59
jb 0x14007a370
mov byte [rbp - 0x76], r12b
lea rax, [rsp + 0x31]
nop dword [rax + rax]
inc rsi
cmp byte [rax + rsi], r12b
jne 0x14007a390
mov r8, rsi
lea rdx, [rsp + 0x31]
lea rcx, [rbp - 0x48]
call fcn.140069970
xor edx, edx
mov r8d, 0x110
lea rcx, [rbp - 0x20]
call sub.VCRUNTIME140.dll_memset
lea rdx, [rbp - 0x48]
cmp qword [rbp - 0x30], 0xf
cmova rdx, qword [rbp - 0x48]
lea rcx, [rbp - 0x20]
call fcn.140069f80
mov rax, qword [rbp - 0x20]
movsxd rcx, dword [rax + 4]
lea rax, vtable.std::basic_ifstream_char__struct_std::char_traits_char__.0
mov qword [rbp + rcx - 0x20], rax
mov rax, qword [rbp - 0x20]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0xb0]
mov dword [rbp + rcx - 0x24], edx
lea r13, [0x14016d1a8]
cmp qword [rbp + 0x70], 0
je 0x14007a575
xorps xmm0, xmm0
movups xmmword [rbp - 0x68], xmm0
mov qword [rbp - 0x58], 0
mov qword [rbp - 0x50], reloc.WS2_32.dll_ntohs
mov byte [rbp - 0x68], 0
mov rax, qword [rbp - 0x20]
movsxd rcx, dword [rax + 4]
lea rax, [rbp - 0x20]
add rcx, rax
mov dl, 0xa
call qword [sym.imp.MSVCP140.dll_public:_char___cdecl_std::basic_ios_char__struct_std::char_traits_char__::widen_char_const___ptr64]
movzx r8d, al
lea rdx, [rbp - 0x68]
lea rcx, [rbp - 0x20]
call fcn.14006ff20
mov rcx, qword [rax]
movsxd rcx, dword [rcx + 4]
add rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_bool___cdecl_std::ios_base::operator_bool_void_const___ptr64]
test al, al
je 0x14007a503
nop word [rax + rax]
lea r9, [rbp - 0x68]
cmp qword [rbp - 0x50], 0xf
cmova r9, qword [rbp - 0x68]
mov rdi, qword [rbp - 0x58]
mov rax, qword [reloc.WS2_32.dll_ntohs]
cmp rdi, rax
ja 0x14007a4b8
mov rbx, r13
cmp rax, 0xf
cmova rbx, qword [0x14016d1a8]
mov qword [0x14016d1b8], rdi
mov r8, rdi
mov rdx, r9
mov rcx, rbx
call sub.VCRUNTIME140.dll_memmove
mov byte [rdi + rbx], 0
jmp 0x14007a4c3
mov rdx, rdi
mov rcx, r13
call fcn.14006bea0
mov rax, qword [rbp - 0x20]
movsxd rcx, dword [rax + 4]
lea rax, [rbp - 0x20]
add rcx, rax
mov dl, 0xa
call qword [sym.imp.MSVCP140.dll_public:_char___cdecl_std::basic_ios_char__struct_std::char_traits_char__::widen_char_const___ptr64]
movzx r8d, al
lea rdx, [rbp - 0x68]
lea rcx, [rbp - 0x20]
call fcn.14006ff20
mov rcx, qword [rax]
movsxd rcx, dword [rcx + 4]
add rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_bool___cdecl_std::ios_base::operator_bool_void_const___ptr64]
test al, al
jne 0x14007a470
lea rcx, [rbp - 0x10]
call fcn.140069ec0
test rax, rax
jne 0x14007a52e
mov rax, qword [rbp - 0x20]
movsxd rcx, dword [rax + 4]
lea rax, [rbp - 0x20]
add rcx, rax
xor r8d, r8d
lea edx, [r8 + 2]
call qword [sym.imp.MSVCP140.dll_public:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::setstate_int__bool____ptr64]
nop
mov rdx, qword [rbp - 0x50]
cmp rdx, 0xf
jbe 0x14007a67a
inc rdx
mov rcx, qword [rbp - 0x68]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14007a56b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14007a56b
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400d03f0
jmp 0x14007a67a
movdqa xmm1, xmmword [str.__f_f]
movdqu xmmword [rbp - 0x68], xmm1
mov cl, reloc.WS2_32.dll_recv
mov dl, reloc.WS2_32.dll_socket
movzx r9d, cl
mov r10b, Ordinal_27
mov r11b, 0x5e
mov bl, 0x18
movzx edi, dl
mov sil, reloc.WS2_32.dll_select
mov r14b, reloc.WLDAP32.dll_Ordinal_27
mov r15b, 0x44
movzx r12d, r11b
movdqa xmm0, xmm1
psrldq xmm0, 1
movd eax, xmm0
movd r8d, xmm1
xor al, r8b
mov byte [rbp - 0x67], al
xor byte [rbp - 0x66], r8b
xor byte [rbp - 0x65], r8b
xor byte [rbp - 0x64], r8b
xor byte [rbp - 0x63], r8b
xor byte [rbp - 0x62], r8b
xor byte [rbp - 0x61], r8b
xor byte [rbp - 0x60], r8b
xor byte [rbp - 0x5f], r8b
xor byte [rbp - 0x5e], r8b
xor byte [rbp - 0x5d], r8b
xor byte [rbp - 0x5c], r8b
xor byte [rbp - 0x5b], r8b
xor byte [rbp - 0x5a], r8b
xor byte [rbp - 0x59], r8b
xor cl, r8b
mov byte [rbp - 0x58], cl
xor dl, r8b
mov byte [rbp - 0x57], dl
xor r9b, r8b
mov byte [rbp - 0x56], r9b
xor r10b, r8b
mov byte [rbp - 0x55], r10b
xor r11b, r8b
mov byte [rbp - 0x54], r11b
xor bl, r8b
mov byte [rbp - 0x53], bl
xor dil, r8b
mov byte [rbp - 0x52], dil
xor sil, r8b
mov byte [rbp - 0x51], sil
xor r14b, r8b
mov byte [rbp - 0x50], r14b
xor r15b, r8b
mov byte [rbp - 0x4f], r15b
xor r12b, r8b
mov byte [rbp - 0x4e], r12b
mov byte [rbp - 0x4d], 0
lea rdx, [rbp - 0x67]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
call fcn.14006b480
lea rdx, [rbp - 0x48]
cmp qword [rbp - 0x30], 0xf
cmova rdx, qword [rbp - 0x48]
mov r8, qword [rbp - 0x38]
mov rcx, rax
call fcn.1400032e0
lea rdx, [0x14006b650]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
cmp qword [reloc.WS2_32.dll_ntohs], 0xf
cmova r13, qword [0x14016d1a8]
mov r8, qword [0x14016d1b8]
test r8, r8
jne 0x14007a6ad
lea rdx, [0x1400e27b8]
mov rcx, r13
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
je 0x14007a754
mov byte [rbp - 0x68], Ordinal_27
mov al, 0x5c
mov cl, 0x51
movzx edx, al
mov r8b, gethostname
mov r9b, 0x4a
mov r10b, 0x7d
mov r11b, 0x7b
movzx ebx, r10b
mov dil, WSAStartup
mov sil, WSAGetLastError
movzx r14d, r10b
mov r15b, 0x7c
xor r12d, r12d
xor al, 0x18
mov byte [rbp - 0x67], al
xor cl, 0x18
mov byte [rbp - 0x66], cl
xor dl, 0x18
mov byte [rbp - 0x65], dl
xor r8b, 0x18
mov byte [rbp - 0x64], r8b
xor r9b, 0x18
mov byte [rbp - 0x63], r9b
xor r10b, 0x18
mov byte [rbp - 0x62], r10b
xor r11b, 0x18
mov byte [rbp - 0x61], r11b
xor bl, 0x18
mov byte [rbp - 0x60], bl
xor dil, 0x18
mov byte [rbp - 0x5f], dil
xor sil, 0x18
mov byte [rbp - 0x5e], sil
xor r14b, 0x18
mov byte [rbp - 0x5d], r14b
xor r15b, 0x18
mov byte [rbp - 0x5c], r15b
mov byte [rbp - 0x5b], r12b
lea rdx, [rbp - 0x67]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14006b480
lea rdx, [0x14006b650]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
nop
mov rax, qword [rbp - 0x20]
movsxd rcx, dword [rax + 4]
lea rax, vtable.std::basic_ifstream_char__struct_std::char_traits_char__.0
mov qword [rbp + rcx - 0x20], rax
mov rax, qword [rbp - 0x20]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0xb0]
mov dword [rbp + rcx - 0x24], edx
lea rcx, [rbp - 0x10]
call fcn.140068e90
lea rcx, [rbp - 8]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_istream_char__struct_std::char_traits_char__::destructor_void____ptr64]
lea rcx, [rbp + 0x90]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::destructor_void____ptr64]
nop
mov rdx, qword [rbp - 0x30]
cmp rdx, 0xf
jbe 0x14007a7d9
inc rdx
mov rcx, qword [rbp - 0x48]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14007a7d4
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14007a7d4
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400d03f0
mov rcx, qword [rbp + 0xf0]
xor rcx, rsp
call fcn.1400d00f0
lea r11, [rsp + 0x200]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret