Function at 0x180036470
Capabilities:
Encode data using xor

Disassembly:
mov rax, rsp
mov qword [rax + 0x10], rbx
mov dword [rax + 0x18], r8d
mov qword [rax + 8], rcx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x5f]
sub rsp, 0xc0
movaps xmmword [rax - 0x48], xmm6
movaps xmmword [rax - 0x58], xmm7
movaps xmmword [rax - 0x68], xmm8
mov r15, rdx
mov r14, rcx
xor r12d, r12d
test r8d, r8d
je 0x18003669f
lea ecx, [r12 + 0x6e]
nop dword [rax]
mov rdi, qword [r15 + 8]
mov r13d, dword [r15]
mov eax, dword [r14 + 0xd4]
cmp eax, 0xc1
jne 0x1800364dc
mov ebx, 0x37
jmp 0x180036502
cmp eax, 0x21
jne 0x1800364e6
lea ebx, [rax + 0x14]
jmp 0x180036502
mov eax, dword [r14 + 0xd0]
cmp eax, 6
jne 0x1800364f7
lea ebx, [rax + 0x5a]
jmp 0x180036502
mov ebx, 0x63
cmp eax, 7
cmove ebx, ecx
cmp byte [0x18010a364], 0
je 0x18003665b
lea rdx, [rbp - 0x69]
mov rcx, r14
call fcn.18001ea60
mov rsi, rax
cmp qword [rax + 0x18], 0x10
jb 0x180036528
mov rsi, qword [rax]
movdqa xmm6, xmmword [0x1800ec510]
movdqa xmm7, xmmword [0x1800ec270]
movdqa xmm8, xmmword [0x1800ec6a0]
mov dword [rbp - 0x19], 0x70a2c301
mov dword [rbp - 0x15], 0xb7f6a3d5
mov dword [rbp - 0x11], 0x14abc617
mov word [rbp - 0xd], 0xefb1
mov rcx, qword gs:[0x58]
mov eax, dword [0x18010bb98]
mov edx, 4
mov rcx, qword [rcx + rax*8]
mov eax, dword [rdx + rcx]
cmp dword [0x18010d280], eax
jg 0x18003685d
cmp byte [0x1801063de], 0
je 0x1800365f2
xor r10d, r10d
mov r11d, 1
lea r14, [0x1801063a0]
sub r11, r14
movabs r8, 0xd993efbb19cfe32d
nop dword [rax]
lea rdx, [r10 + r14]
movzx ecx, r10b
and cl, 7
shl cl, 3
mov rax, r8
shr rax, cl
xor byte [rdx], al
lea r9, [rdx + 1]
lea ecx, [r11 + rdx]
and cl, 7
shl cl, 3
mov rdx, r8
shr rdx, cl
xor byte [r9], dl
add r10, 2
cmp r10, 0x3e
jb 0x1800365b0
mov r14, qword [rbp + 0x67]
mov byte [0x1801063de], 0
mov dword [rsp + 0x28], ebx
mov dword [rsp + 0x20], r13d
mov r9d, dword [r14 + 0xd0]
mov r8, rsi
lea rdx, [0x1801063a0]
mov ecx, 5
call fcn.18006a848
nop
mov rdx, qword [rbp - 0x51]
cmp rdx, 0x10
jb 0x180036652
inc rdx
mov rcx, qword [rbp - 0x69]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18003664d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800368d1
call fcn.18009d1f4
mov ecx, WSAGetLastError
mov r8d, dword [rbp + 0x77]
cmp r13d, ebx
jbe 0x18003668f
cmp byte [rdi], 0x2a
jne 0x18003668f
cmp byte [rdi + 1], 2
jne 0x18003668f
cmp byte [rdi + 6], 0
jne 0x18003668f
cmp byte [rdi + 7], 4
jne 0x18003668f
cmp byte [rdi + 8], 0
jne 0x18003668f
cmp byte [rdi + 9], 6
jne 0x18003668f
cmp byte [rdi + 0x18], 0
jne 0x18003668f
cmp byte [rdi + 0x19], 1
je 0x1800366ce
inc r12d
add r15, 0x10
cmp r12d, r8d
jb 0x1800364c0
xor bl, bl
movzx eax, bl
lea r11, [rsp + 0xc0]
mov rbx, qword [r11 + 0x48]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
movaps xmm8, xmmword [r11 - 0x30]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
mov bl, 1
cmp dword [r14 + 0xd4], 0x21
jne 0x1800366a1
cmp r13d, 0xc8
jbe 0x1800366a1
lea ebx, [r13 - 0x1a]
lea r14, [rdi + 0x1a]
mov qword [rbp - 0x69], 0
mov qword [rbp - 0x51], reloc.WS2_32.dll_ntohs
cmp rbx, 0xf
ja 0x180036727
mov qword [rbp - 0x59], rbx
mov r8d, ebx
mov rdx, r14
lea rcx, [rbp - 0x69]
call fcn.18009fc20
mov byte [rbp + rbx - 0x69], 0
mov rsi, qword [rbp - 0x51]
mov rbx, qword [rbp - 0x59]
mov rdi, qword [rbp - 0x69]
jmp 0x180036799
mov rsi, rbx
or rsi, 0xf
mov eax, socket
cmp rsi, rax
cmovb rsi, rax
lea rcx, [rsi + 1]
cmp rcx, 0x1000
jb 0x180036773
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x1800368d7
mov rcx, rax
call fcn.18009d1b8
test rax, rax
je 0x180036857
lea rdi, [rax + 0x27]
and rdi, 0xffffffffffffffe0
mov qword [rdi - 8], rax
jmp 0x18003677b
call fcn.18009d1b8
mov rdi, rax
mov qword [rbp - 0x59], rbx
mov qword [rbp - 0x51], rsi
mov r8, rbx
mov rdx, r14
mov rcx, rdi
call fcn.18009fc20
mov byte [rdi + rbx], 0
mov qword [rbp - 0x69], rdi
lea r14, [rbp - 0x69]
cmp rsi, 0x10
cmovae r14, rdi
cmp rbx, 0x25
jb 0x180036808
lea r15, [rbx + r14]
lea r8, [r15 - 0x24]
sub r8, r14
mov edx, 0x53
mov rcx, r14
call fcn.1800a06d0
mov rbx, rax
test rax, rax
je 0x180036808
nop dword [rax + rax]
mov r8d, 0x25
lea rdx, str.Script_Plug_in:_Invitation_to_Session
mov rcx, rbx
call fcn.18009fb20
test eax, eax
je 0x180036852
inc rbx
lea r8, [r15 - 0x24]
sub r8, rbx
mov edx, 0x53
mov rcx, rbx
call fcn.1800a06d0
mov rbx, rax
test rax, rax
jne 0x1800367d0
mov rbx, 0xffffffffffffffff
cmp rbx, 0xffffffffffffffff
sete bl
cmp rsi, 0x10
jb 0x1800366a1
lea rdx, [rsi + 1]
mov rax, rdi
cmp rdx, 0x1000
jb 0x180036845
add rdx, 0x27
mov rdi, qword [rdi - 8]
sub rax, rdi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180036857
mov rcx, rdi
call fcn.18009d1f4
jmp 0x1800366a1
sub rbx, r14
jmp 0x18003680f
call fcn.1800a45b8
nop
lea rcx, [0x18010d280]
call fcn.18009d704
cmp dword [0x18010d280], 0xffffffff
jne 0x180036583
mov byte [0x1801063de], 1
movaps xmmword [0x1801063a0], xmm6
movaps xmmword [0x1801063b0], xmm7
movaps xmmword [0x1801063c0], xmm8
movsd xmm0, qword [rbp - 0x19]
movsd qword [0x1801063d0], xmm0
mov eax, dword [rbp - 0x11]
mov dword [0x1801063d8], eax
movzx eax, word [rbp - 0xd]
mov word [0x1801063dc], ax
lea rcx, [0x1800ce480]
call fcn.18009d564
lea rcx, [0x18010d280]
call fcn.18009d6a4
jmp 0x180036583
call fcn.1800a45b8
int3
call fcn.180001df0
int3