Function at 0x140062170
Capabilities:
Contain obfuscated stackstrings
Encode data using base64
Encode data using xor

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
push rbp
push rdi
push r14
mov rbp, rsp
sub rsp, 0x70
mov rax, qword [0x140131080]
xor rax, rsp
mov qword [rbp - 8], rax
mov rdi, rcx
xorps xmm0, xmm0
movups xmmword [rbp - 0x20], xmm0
lea rsi, [rbp + 0x18]
movabs r14, 0xff00ff00ff00ff00
mov qword [rbp - 0x18], r14
mov qword [rbp - 0x10], rsi
mov rax, qword [rsi]
xor rax, r14
mov qword [rbp - 0x20], rax
xor ebx, ebx
mov qword [rsi], rbx
mov rax, qword [0x14036db08]
test rax, rax
je 0x140062572
mov word [rcx + 2], 1
mov dword [rcx + 4], edx
call rax
test rax, rax
jne 0x1400622a2
cmp word [rdi + 2], 1
jne 0x1400622a2
mov byte [rbp - 0x50], 0xe4
mov byte [rbp - 0x4f], Ordinal_211
mov byte [rbp - 0x4e], 0xcf
mov byte [rbp - 0x4d], 0xdc
mov byte [rbp - 0x4c], 0xcc
mov byte [rbp - 0x4b], 0xd4
mov byte [rbp - 0x4a], Ordinal_143
mov byte [rbp - 0x49], 0xda
mov byte [rbp - 0x48], reloc.WLDAP32.dll_Ordinal_217
mov byte [rbp - 0x47], Ordinal_200
mov byte [rbp - 0x46], 0x9d
mov byte [rbp - 0x45], Ordinal_211
mov byte [rbp - 0x44], 0xde
mov byte [rbp - 0x43], 0xde
mov byte [rbp - 0x42], reloc.WLDAP32.dll_Ordinal_211
mov byte [rbp - 0x41], reloc.WLDAP32.dll_Ordinal_217
mov byte [rbp - 0x40], 0xd4
mov byte [rbp - 0x3f], 0x9e
mov byte [rbp - 0x3e], 0xbc
mov byte [rbp - 0x3d], 0xba
movzx eax, byte [rbp - 0x50]
movabs r11, 0x40949e0741846da9
mov r10, r11
lea rax, [rbp - 0x50]
sub r10, rax
mov r9d, reloc.WS2_32.dll_ntohs
nop
lea r8, [rbp - 0x50]
add r8, rbx
mov rcx, rbx
and ecx, r9d
cmp rcx, r9
cmovae rcx, r9
shl cl, 2
mov rdx, r11
shr rdx, cl
and dl, r9b
lea eax, [r10 + r8]
xor dl, al
movzx eax, byte [r8]
xor dl, al
mov byte [rbp + rbx - 0x50], dl
inc rbx
cmp rbx, 0x14
jb 0x140062260
lea rcx, [rbp - 0x50]
jmp 0x14006256d
movzx eax, word [rdi + 2]
cmp byte [rdi], 0
je 0x1400622b6
test ax, ax
sete al
jmp 0x140062574
mov ecx, eax
sub ecx, 2
je 0x1400624c2
sub ecx, 1
je 0x1400623f2
cmp ecx, 1
jne 0x140062572
mov byte [rbp - 0x50], 0x79
mov byte [rbp - 0x4f], 0x57
mov byte [rbp - 0x4e], Ordinal_79
mov byte [rbp - 0x4d], 0x53
mov byte [rbp - 0x4c], 0x50
mov byte [rbp - 0x4b], 0x58
mov byte [rbp - 0x4a], 0x57
mov byte [rbp - 0x49], 0x63
mov byte [rbp - 0x48], Ordinal_41
mov byte [rbp - 0x47], gethostname
mov byte [rbp - 0x46], Ordinal_41
mov byte [rbp - 0x45], 0x24
mov byte [rbp - 0x44], Ordinal_45
mov byte [rbp - 0x43], 0x3e
mov byte [rbp - 0x42], Ordinal_45
mov byte [rbp - 0x41], 0x24
mov byte [rbp - 0x40], 0x60
mov byte [rbp - 0x3f], Ordinal_41
mov byte [rbp - 0x3e], Ordinal_60
mov byte [rbp - 0x3d], Ordinal_41
mov byte [rbp - 0x3c], 0x3e
mov byte [rbp - 0x3b], reloc.WLDAP32.dll_Ordinal_32
mov byte [rbp - 0x3a], gethostname
mov byte [rbp - 0x39], Ordinal_60
mov byte [rbp - 0x38], 0x3e
mov byte [rbp - 0x37], reloc.WLDAP32.dll_Ordinal_60
mov byte [rbp - 0x36], 0x79
mov byte [rbp - 0x35], 0x24
mov byte [rbp - 0x34], gethostname
mov byte [rbp - 0x33], 0x34
mov byte [rbp - 0x32], reloc.WLDAP32.dll_Ordinal_33
mov byte [rbp - 0x31], 0x7a
mov byte [rbp - 0x30], 0x24
mov byte [rbp - 0x2f], gethostname
mov byte [rbp - 0x2e], 0x7b
mov byte [rbp - 0x2d], gethostname
mov byte [rbp - 0x2c], reloc.WLDAP32.dll_Ordinal_46
mov byte [rbp - 0x2b], gethostname
mov byte [rbp - 0x2a], 0x25
mov byte [rbp - 0x29], 6
mov byte [rbp - 0x28], reloc.WS2_32.dll_send
mov byte [rbp - 0x27], Ordinal_79
mov byte [rbp - 0x26], 0x63
mov byte [rbp - 0x25], 0x67
movzx eax, byte [rbp - 0x50]
movabs r11, 0x22c73a003cf1e039
mov r10, r11
lea rax, [rbp - 0x50]
sub r10, rax
mov r9d, reloc.WS2_32.dll_ntohs
nop dword [rax]
nop word [rax + rax]
lea r8, [rbp - 0x50]
add r8, rbx
mov rcx, rbx
and ecx, r9d
cmp rcx, r9
cmovae rcx, r9
shl cl, 2
mov rdx, r11
shr rdx, cl
and dl, r9b
lea eax, [r8 + r10]
xor dl, al
movzx eax, byte [r8]
xor dl, al
mov byte [rbp + rbx - 0x50], dl
inc rbx
cmp rbx, 0x2c
jb 0x1400623b0
lea rcx, [rbp - 0x50]
jmp 0x14006256d
mov byte [rbp - 0x50], 0x33
mov byte [rbp - 0x4f], 7
mov byte [rbp - 0x4e], reloc.WS2_32.dll_listen
mov byte [rbp - 0x4d], reloc.WLDAP32.dll_Ordinal_22
mov byte [rbp - 0x4c], reloc.WLDAP32.dll_Ordinal_22
mov byte [rbp - 0x4b], 4
mov byte [rbp - 0x4a], reloc.WS2_32.dll_sendto
mov byte [rbp - 0x49], reloc.WS2_32.dll_recvfrom
mov byte [rbp - 0x48], 0x49
mov byte [rbp - 0x47], listen
mov byte [rbp - 0x46], ntohs
mov byte [rbp - 0x45], 9
mov byte [rbp - 0x44], 0
mov byte [rbp - 0x43], Ordinal_30
mov byte [rbp - 0x42], 0x53
mov byte [rbp - 0x41], reloc.WS2_32.dll_socket
mov byte [rbp - 0x40], reloc.WS2_32.dll_recvfrom
mov byte [rbp - 0x3f], reloc.WLDAP32.dll_Ordinal_27
mov byte [rbp - 0x3e], reloc.WS2_32.dll_select
mov byte [rbp - 0x3d], 6
mov byte [rbp - 0x3c], 6
mov byte [rbp - 0x3b], Ordinal_26
mov byte [rbp - 0x3a], 0x5e
mov byte [rbp - 0x39], WSAStartup
mov byte [rbp - 0x38], 0x79
movzx eax, byte [rbp - 0x50]
movabs r11, 0x327c294229535b63
mov r10, r11
lea rax, [rbp - 0x50]
sub r10, rax
mov r9d, reloc.WS2_32.dll_ntohs
nop dword [rax]
nop dword [rax + rax]
lea r8, [rbp - 0x50]
add r8, rbx
mov rcx, rbx
and ecx, r9d
cmp rcx, r9
cmovae rcx, r9
shl cl, 2
mov rdx, r11
shr rdx, cl
and dl, r9b
lea eax, [r10 + r8]
xor dl, al
movzx eax, byte [r8]
xor dl, al
mov byte [rbp + rbx - 0x50], dl
inc rbx
cmp rbx, 0x19
jb 0x140062480
lea rcx, [rbp - 0x50]
jmp 0x14006256d
mov byte [rbp - 0x50], Ordinal_26
mov byte [rbp - 0x4f], 0x3d
mov byte [rbp - 0x4e], Ordinal_41
mov byte [rbp - 0x4d], Ordinal_50
mov byte [rbp - 0x4c], 0x35
mov byte [rbp - 0x4b], reloc.WS2_32.dll_gethostname
mov byte [rbp - 0x4a], 0x3f
mov byte [rbp - 0x49], 0x7b
mov byte [rbp - 0x48], reloc.WLDAP32.dll_Ordinal_41
mov byte [rbp - 0x47], reloc.WLDAP32.dll_Ordinal_35
mov byte [rbp - 0x46], Ordinal_60
mov byte [rbp - 0x45], reloc.WS2_32.dll_ntohs
mov byte [rbp - 0x44], reloc.WS2_32.dll_listen
mov byte [rbp - 0x43], reloc.WS2_32.dll_recv
mov byte [rbp - 0x42], reloc.WS2_32.dll_recv
mov byte [rbp - 0x41], 0x44
mov byte [rbp - 0x40], 0x6a
mov byte [rbp - 0x3f], 0x63
movzx eax, byte [rbp - 0x50]
movabs r11, 0xe019caf470a08655
mov r10, r11
lea rax, [rbp - 0x50]
sub r10, rax
mov r9d, reloc.WS2_32.dll_ntohs
nop dword [rax + rax]
lea r8, [rbp - 0x50]
add r8, rbx
mov rcx, rbx
and ecx, r9d
cmp rcx, r9
cmovae rcx, r9
shl cl, 2
mov rdx, r11
shr rdx, cl
and dl, r9b
lea eax, [r10 + r8]
xor dl, al
movzx eax, byte [r8]
xor dl, al
mov byte [rbp + rbx - 0x50], dl
inc rbx
cmp rbx, 0x12
jb 0x140062530
lea rcx, [rbp - 0x50]
call fcn.140017ec0
xor al, al
mov rcx, qword [rbp - 0x20]
xor rcx, r14
mov qword [rsi], rcx
mov rcx, qword [rbp - 8]
xor rcx, rsp
call fcn.1400f6140
lea r11, [rsp + 0x70]
mov rbx, qword [r11 + 0x28]
mov rsi, qword [r11 + 0x30]
mov rsp, r11
pop r14
pop rdi
pop rbp
ret