Function at 0x180007e70
Capabilities:
Encode data using xor

Disassembly:
mov rax, rsp
push rbp
push rdi
push r12
push r14
push r15
lea rbp, [rax - 0x218]
sub rsp, 0x2f0
mov qword [rbp + 0x48], 0xfffffffffffffffe
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], rsi
mov rax, qword [0x180067008]
xor rax, rsp
mov qword [rbp + 0x1e0], rax
mov r14, rcx
xor r12d, r12d
mov dword [rsp + 0x40], r12d
mov dword [rbp + 0x1c6], 0x6c6c64
mov dword [rbp + 0x1c2], 0x2e6c6c64
mov word [rbp + 0x1c0], 0x746e
lea rcx, [rbp + 0x1c0]
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov r15, rax
mov qword [rbp + 0x1a8], reloc.WS2_32.dll_ntohs
mov qword [rbp + 0x1a0], r12
mov byte [rbp + 0x190], r12b
xor r8d, r8d
lea rdx, [0x180057690]
lea rcx, [rbp + 0x190]
call fcn.1800020b0
nop
test r15, r15
jne 0x180007fac
mov qword [r14 + 0x18], reloc.WS2_32.dll_ntohs
mov qword [r14 + 0x10], r12
cmp qword [r14 + 0x18], 0x10
jb 0x180007f33
mov rax, qword [r14]
jmp 0x180007f36
mov rax, r14
mov byte [rax], 0
xor r8d, r8d
lea rdx, [0x180057690]
mov rcx, r14
call fcn.1800020b0
nop
mov rax, qword [rbp + 0x1a8]
cmp rax, 0x10
jb 0x1800086dd
inc rax
mov rcx, qword [rbp + 0x190]
cmp rax, 0x1000
jb 0x1800086d8
test cl, 0x1f
je 0x180007f7e
call fcn.18003835c
int3
mov rax, qword [rcx - 8]
cmp rax, rcx
jb 0x180007f8d
call fcn.18003835c
int3
sub rcx, rax
cmp rcx, 8
jae 0x180007f9c
call fcn.18003835c
int3
cmp rcx, 0x27
jbe 0x1800086d5
call fcn.18003835c
nop
mov dword [rbp + 0x1b0], 0xabec80f4
mov dword [rbp + 0x1b4], 0x89ecbace
mov dword [rbp + 0x1b8], 0x8ee188fb
mov word [rbp + 0x1bc], 0xe0e0
mov ecx, recv
nop dword [rax + rax]
movzx eax, byte [rbp + rcx + 0x1af]
xor byte [rbp + rcx + 0x1b0], al
dec rcx
test rcx, rcx
jg 0x180007fe0
xor byte [rbp + 0x1b0], 0xa6
lea rdx, [rbp + 0x1b0]
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rbx, rax
test rax, rax
jne 0x1800080b4
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
mov qword [r14 + 0x18], reloc.WS2_32.dll_ntohs
mov qword [r14 + 0x10], r12
cmp qword [r14 + 0x18], 0x10
jb 0x18000803b
mov rax, qword [r14]
jmp 0x18000803e
mov rax, r14
mov byte [rax], 0
xor r8d, r8d
lea rdx, [0x180057690]
mov rcx, r14
call fcn.1800020b0
nop
mov rax, qword [rbp + 0x1a8]
cmp rax, 0x10
jb 0x1800086dd
inc rax
mov rcx, qword [rbp + 0x190]
cmp rax, 0x1000
jb 0x1800086d8
test cl, 0x1f
je 0x180008086
call fcn.18003835c
int3
mov rax, qword [rcx - 8]
cmp rax, rcx
jb 0x180008095
call fcn.18003835c
int3
sub rcx, rax
cmp rcx, 8
jae 0x1800080a4
call fcn.18003835c
int3
cmp rcx, 0x27
jbe 0x1800086d5
call fcn.18003835c
nop
mov dword [rbp + 0x70], 0x114
xor edx, edx
mov r8d, pe_nt_image_headers64
lea rcx, [rbp + 0x74]
call fcn.180037440
lea rcx, [rbp + 0x70]
call rbx
test eax, eax
jne 0x18000864a
mov dword [rbp + 0x1d4], 0x73776f
mov dword [rbp + 0x1d0], 0x646e6957
mov edx, dword [rbp + 0x7c]
lea rcx, [rbp + 0x50]
call fcn.180007e50
mov rsi, rax
mov edx, dword [rbp + 0x78]
lea rcx, [rbp + 0x28]
call fcn.180007e50
mov rdi, rax
mov edx, dword [rbp + 0x74]
lea rcx, [rbp + 8]
call fcn.180007e50
mov rbx, rax
mov qword [rsp + 0x38], reloc.WS2_32.dll_ntohs
mov qword [rsp + 0x30], r12
mov byte [rsp + 0x20], 0
mov r8d, 2
lea rdx, [0x180058964]
lea rcx, [rsp + 0x20]
call fcn.1800020b0
nop
lea r8, [rsp + 0x20]
lea rdx, [rbp + 0x1d0]
lea rcx, [rbp - 0x18]
call fcn.180006900
nop
mov r8, rbx
mov rdx, rax
lea rcx, [rbp - 0x38]
call fcn.180006ad0
nop
lea r8, [0x180058960]
mov rdx, rax
lea rcx, [rbp - 0x58]
call fcn.180006ce0
nop
mov r8, rdi
mov rdx, rax
lea rcx, [rbp - 0x78]
call fcn.180006ad0
nop
lea r8, [0x180058960]
mov rdx, rax
lea rcx, [rsp + 0x68]
call fcn.180006ce0
nop
mov r8, rsi
mov rdx, rax
lea rcx, [rsp + 0x48]
call fcn.180006ad0
mov rbx, rax
lea rax, [rbp + 0x190]
cmp rax, rbx
je 0x180008251
mov rcx, qword [rbp + 0x1a8]
cmp rcx, 0x10
jb 0x180008228
inc rcx
mov rdx, qword [rbp + 0x190]
cmp rcx, 0x1000
jb 0x180008220
test dl, 0x1f
je 0x1800081f3
call fcn.18003835c
int3
mov rax, qword [rdx - 8]
cmp rax, rdx
jb 0x180008202
call fcn.18003835c
int3
sub rdx, rax
cmp rdx, 8
jae 0x180008211
call fcn.18003835c
int3
cmp rdx, 0x27
jbe 0x18000821d
call fcn.18003835c
int3
mov rdx, rax
mov rcx, rdx
call fcn.180033ed0
mov qword [rbp + 0x1a8], reloc.WS2_32.dll_ntohs
mov qword [rbp + 0x1a0], r12
mov byte [rbp + 0x190], 0
mov rdx, rbx
lea rcx, [rbp + 0x190]
call fcn.1800063c0
nop
mov rax, qword [rsp + 0x60]
cmp rax, 0x10
jb 0x1800082a9
inc rax
mov rcx, qword [rsp + 0x48]
cmp rax, 0x1000
jb 0x1800082a4
test cl, 0x1f
je 0x180008277
call fcn.18003835c
int3
mov rax, qword [rcx - 8]
cmp rax, rcx
jb 0x180008286
call fcn.18003835c
int3
sub rcx, rax
cmp rcx, 8
jae 0x180008295
call fcn.18003835c
int3
cmp rcx, 0x27
jbe 0x1800082a1
call fcn.18003835c
int3
mov rcx, rax
call fcn.180033ed0
mov qword [rsp + 0x60], reloc.WS2_32.dll_ntohs
mov qword [rsp + 0x58], r12
mov byte [rsp + 0x48], 0
mov rax, qword [rbp - 0x80]
cmp rax, 0x10
jb 0x180008313
inc rax
mov rcx, qword [rsp + 0x68]
cmp rax, 0x1000
jb 0x18000830e
test cl, 0x1f
je 0x1800082e1
call fcn.18003835c
int3
mov rax, qword [rcx - 8]
cmp rax, rcx
jb 0x1800082f0
call fcn.18003835c
int3
sub rcx, rax
cmp rcx, 8
jae 0x1800082ff
call fcn.18003835c
int3
cmp rcx, 0x27
jbe 0x18000830b
call fcn.18003835c
int3
mov rcx, rax
call fcn.180033ed0
mov qword [rbp - 0x80], reloc.WS2_32.dll_ntohs
mov qword [rsp + 0x78], r12
mov byte [rsp + 0x68], 0
mov rax, qword [rbp - 0x60]
cmp rax, 0x10
jb 0x18000837b
inc rax
mov rcx, qword [rbp - 0x78]
cmp rax, 0x1000
jb 0x180008376
test cl, 0x1f
je 0x180008349
call fcn.18003835c
int3
mov rax, qword [rcx - 8]
cmp rax, rcx
jb 0x180008358
call fcn.18003835c
int3
sub rcx, rax
cmp rcx, 8
jae 0x180008367
call fcn.18003835c
int3
cmp rcx, 0x27
jbe 0x180008373
call fcn.18003835c
int3
mov rcx, rax
call fcn.180033ed0
mov qword [rbp - 0x60], reloc.WS2_32.dll_ntohs
mov qword [rbp - 0x68], r12
mov byte [rbp - 0x78], 0
mov rax, qword [rbp - 0x40]
cmp rax, 0x10
jb 0x1800083e1
inc rax
mov rcx, qword [rbp - 0x58]
cmp rax, 0x1000
jb 0x1800083dc
test cl, 0x1f
je 0x1800083af
call fcn.18003835c
int3
mov rax, qword [rcx - 8]
cmp rax, rcx
jb 0x1800083be
call fcn.18003835c
int3
sub rcx, rax
cmp rcx, 8
jae 0x1800083cd
call fcn.18003835c
int3
cmp rcx, 0x27
jbe 0x1800083d9
call fcn.18003835c
int3
mov rcx, rax
call fcn.180033ed0
mov qword [rbp - 0x40], reloc.WS2_32.dll_ntohs
mov qword [rbp - 0x48], r12
mov byte [rbp - 0x58], 0
mov rax, qword [rbp - 0x20]
cmp rax, 0x10
jb 0x180008447
inc rax
mov rcx, qword [rbp - 0x38]
cmp rax, 0x1000
jb 0x180008442
test cl, 0x1f
je 0x180008415
call fcn.18003835c
int3
mov rax, qword [rcx - 8]
cmp rax, rcx
jb 0x180008424
call fcn.18003835c
int3
sub rcx, rax
cmp rcx, 8
jae 0x180008433
call fcn.18003835c
int3
cmp rcx, 0x27
jbe 0x18000843f
call fcn.18003835c
int3
mov rcx, rax
call fcn.180033ed0
mov qword [rbp - 0x20], reloc.WS2_32.dll_ntohs
mov qword [rbp - 0x28], r12
mov byte [rbp - 0x38], 0
mov rax, qword [rbp]
cmp rax, 0x10
jb 0x1800084ad
inc rax
mov rcx, qword [rbp - 0x18]
cmp rax, 0x1000
jb 0x1800084a8
test cl, 0x1f
je 0x18000847b
call fcn.18003835c
int3
mov rax, qword [rcx - 8]
cmp rax, rcx
jb 0x18000848a
call fcn.18003835c
int3
sub rcx, rax
cmp rcx, 8
jae 0x180008499
call fcn.18003835c
int3
cmp rcx, 0x27
jbe 0x1800084a5
call fcn.18003835c
int3
mov rcx, rax
call fcn.180033ed0
mov qword [rbp], reloc.WS2_32.dll_ntohs
mov qword [rbp - 8], r12
mov byte [rbp - 0x18], 0
mov rax, qword [rsp + 0x38]
cmp rax, 0x10
jb 0x180008515
inc rax
mov rcx, qword [rsp + 0x20]
cmp rax, 0x1000
jb 0x180008510
test cl, 0x1f
je 0x1800084e3
call fcn.18003835c
int3
mov rax, qword [rcx - 8]
cmp rax, rcx
jb 0x1800084f2
call fcn.18003835c
int3
sub rcx, rax
cmp rcx, 8
jae 0x180008501
call fcn.18003835c
int3
cmp rcx, 0x27
jbe 0x18000850d
call fcn.18003835c
int3
mov rcx, rax
call fcn.180033ed0
mov qword [rsp + 0x38], reloc.WS2_32.dll_ntohs
mov qword [rsp + 0x30], r12
mov byte [rsp + 0x20], 0
mov rax, qword [rbp + 0x20]
cmp rax, 0x10
jb 0x18000857e
inc rax
mov rcx, qword [rbp + 8]
cmp rax, 0x1000
jb 0x180008579
test cl, 0x1f
je 0x18000854c
call fcn.18003835c
int3
mov rax, qword [rcx - 8]
cmp rax, rcx
jb 0x18000855b
call fcn.18003835c
int3
sub rcx, rax
cmp rcx, 8
jae 0x18000856a
call fcn.18003835c
int3
cmp rcx, 0x27
jbe 0x180008576
call fcn.18003835c
int3
mov rcx, rax
call fcn.180033ed0
mov qword [rbp + 0x20], reloc.WS2_32.dll_ntohs
mov qword [rbp + 0x18], r12
mov byte [rbp + 8], 0
mov rax, qword [rbp + 0x40]
cmp rax, 0x10
jb 0x1800085e4
inc rax
mov rcx, qword [rbp + 0x28]
cmp rax, 0x1000
jb 0x1800085df
test cl, 0x1f
je 0x1800085b2
call fcn.18003835c
int3
mov rax, qword [rcx - 8]
cmp rax, rcx
jb 0x1800085c1
call fcn.18003835c
int3
sub rcx, rax
cmp rcx, 8
jae 0x1800085d0
call fcn.18003835c
int3
cmp rcx, 0x27
jbe 0x1800085dc
call fcn.18003835c
int3
mov rcx, rax
call fcn.180033ed0
mov qword [rbp + 0x40], reloc.WS2_32.dll_ntohs
mov qword [rbp + 0x38], r12
mov byte [rbp + 0x28], 0
mov rax, qword [rbp + 0x68]
cmp rax, 0x10
jb 0x18000864a
inc rax
mov rcx, qword [rbp + 0x50]
cmp rax, 0x1000
jb 0x180008645
test cl, 0x1f
je 0x180008618
call fcn.18003835c
int3
mov rax, qword [rcx - 8]
cmp rax, rcx
jb 0x180008627
call fcn.18003835c
int3
sub rcx, rax
cmp rcx, 8
jae 0x180008636
call fcn.18003835c
int3
cmp rcx, 0x27
jbe 0x180008642
call fcn.18003835c
int3
mov rcx, rax
call fcn.180033ed0
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
mov qword [r14 + 0x18], reloc.WS2_32.dll_ntohs
mov qword [r14 + 0x10], r12
cmp qword [r14 + 0x18], 0x10
jb 0x18000866b
mov rax, qword [r14]
jmp 0x18000866e
mov rax, r14
mov byte [rax], 0
lea rdx, [rbp + 0x190]
mov rcx, r14
call fcn.1800063c0
nop
mov rax, qword [rbp + 0x1a8]
cmp rax, 0x10
jb 0x1800086dd
inc rax
mov rcx, qword [rbp + 0x190]
cmp rax, 0x1000
jb 0x1800086d8
test cl, 0x1f
je 0x1800086ab
call fcn.18003835c
int3
mov rax, qword [rcx - 8]
cmp rax, rcx
jb 0x1800086ba
call fcn.18003835c
int3
sub rcx, rax
cmp rcx, 8
jae 0x1800086c9
call fcn.18003835c
int3
cmp rcx, 0x27
jbe 0x1800086d5
call fcn.18003835c
int3
mov rcx, rax
call fcn.180033ed0
mov rax, r14
mov rcx, qword [rbp + 0x1e0]
xor rcx, rsp
call fcn.180033e70
lea r11, [rsp + 0x2f0]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r12
pop rdi
pop rbp
ret