Function at 0x180042000
Capabilities:
Create process on windows
Encode data using xor

Disassembly:
mov qword [rsp + 0x20], rdi
push rbp
lea rbp, [rsp - 0x20]
sub rsp, 0x120
cmp byte [0x1800a3f6e], 0
movzx edi, cl
je 0x1800426a7
mov rax, qword [0x1800a6dd0]
lea rcx, str.Debug_Console
mov qword [rsp + 0x140], rsi
xor r8d, r8d
xor esi, esi
xor edx, edx
movss xmm0, dword [rax + 0x14]
subss xmm0, dword [0x1800927fc]
or dword [rax + 0x1cb0], 3
mov dword [rax + 0x1cc0], esi
mov qword [rax + 0x1cc8], rsi
mov dword [rax + 0x1cb4], 1
movss dword [rax + 0x1cc4], xmm0
mov dword [rax + 0x1cd0], 0x43fa0000
mov dword [rax + 0x1cd4], 0x43870000
mov dword [rax + 0x1cb8], 1
call fcn.180014170
test al, al
je 0x18004269f
mov rax, qword [0x1800a6dd0]
lea rcx, str.console
mov r9, qword [0x1800a3db0]
mov qword [rsp + 0x38], rsi
cmp r9, 0xf
mov qword [rsp + 0x30], rsi
movss xmm1, dword [rax + 0x1980]
lea rax, [rbp + 0x38]
mulss xmm1, dword [0x1800927cc]
mov qword [rsp + 0x130], rbx
lea rbx, [0x1800a3d98]
mov r8, rbx
mov dword [rsp + 0x28], 0x4004000
cmova r8, qword [0x1800a3d98]
xor edx, edx
movss dword [rbp + 0x3c], xmm1
mov dword [rbp + 0x38], 0x80800000
mov qword [rsp + 0x20], rax
call fcn.180037750
mov rax, qword [0x1800a6dd0]
mov rcx, qword [rax + 0x1c10]
cmp byte [rax + 0x1e1f], sil
je 0x180042153
cmp byte [rax + 0x1e1e], sil
jne 0x180042153
mov edx, dword [rax + 0x1dd0]
cmp edx, dword [rcx + 0x124]
jne 0x180042144
test edx, edx
je 0x180042144
mov al, 1
jmp 0x180042146
xor al, al
test al, al
jne 0x180042221
jmp 0x1800421e8
mov edx, dword [rcx + 0x128]
test dl, 1
je 0x1800421e8
cmp qword [rax + 0x1c18], rcx
je 0x18004216f
test dl, dl
jns 0x1800421e8
mov edx, dword [rax + 0x1c5c]
test edx, edx
je 0x18004218f
cmp edx, dword [rcx + 0x124]
je 0x18004218f
cmp byte [rax + 0x1c69], sil
jne 0x18004218f
cmp edx, dword [rcx + 0x54]
jne 0x1800421e8
mov rdx, qword [rax + 0x1dc8]
test rdx, rdx
je 0x1800421cb
mov rdx, qword [rdx + 0x388]
test rdx, rdx
je 0x1800421cb
cmp byte [rdx + 0x8f], sil
je 0x1800421cb
cmp rdx, qword [rcx + 0x388]
je 0x1800421cb
mov r8d, dword [rdx + 0xc]
bt r8d, 0x1b
jb 0x1800421e8
bt r8d, 0x1a
jb 0x1800421e8
test byte [rax + 0x1c44], 4
jne 0x1800421e8
mov eax, dword [rcx + 0x54]
cmp dword [rcx + 0x124], eax
jne 0x180042221
cmp byte [rcx + 0x90], sil
je 0x180042221
lea rdx, [rbp + 0x38]
mov qword [rbp + 0x38], rsi
call fcn.180011870
mov rax, qword [0x1800a6dd0]
mov rcx, qword [rax + 0x1c10]
movss xmm0, dword [rcx + 0x68]
comiss xmm0, dword [rcx + 0x60]
jbe 0x18004221c
movss dword [rcx + 0x70], xmm0
mov dword [rcx + 0x78], esi
mov dword [rcx + 0x80], esi
call fcn.180011900
test dil, dil
je 0x180042674
xor r8d, r8d
mov qword [rbp + 0x38], rsi
lea rdx, [rbp + 0x38]
lea rcx, str.Clear
call fcn.180032000
test al, al
je 0x18004225f
cmp qword [0x1800a3db0], 0xf
mov qword [0x1800a3da8], rsi
cmova rbx, qword [0x1800a3d98]
mov byte [rbx], sil
movss xmm1, dword [0x180092830]
xorps xmm0, xmm0
call fcn.180017060
lea rdx, [rbp + 0x38]
mov qword [rbp + 0x38], rsi
lea rcx, str.Hide
xor r8d, r8d
call fcn.180032000
test al, al
je 0x180042291
mov byte [0x1800a3f6e], sil
movss xmm1, dword [0x180092830]
xorps xmm0, xmm0
call fcn.180017060
lea rdx, [rbp + 0x38]
mov qword [rbp + 0x38], rsi
lea rcx, str.Download_latest_version
xor r8d, r8d
call fcn.180032000
test al, al
je 0x180042664
movups xmm0, xmmword [str.ZG_EE_r]
movups xmm1, xmmword [str._RHUK_n__.k_a.]
mov r10d, dword [0x1800a32d8]
movdqa xmm5, xmmword [0x180092d60]
movups xmmword [rsp + 0x70], xmm0
movups xmm0, xmmword [0x180091780]
movups xmmword [rbp - 0x80], xmm1
movups xmm1, xmmword [0x180091790]
movaps xmmword [rsp + 0x110], xmm7
movdqa xmm7, xmmword [0x1800928d0]
movups xmmword [rbp - 0x70], xmm0
movups xmm0, xmmword [0x1800917a0]
movups xmmword [rbp - 0x60], xmm1
movups xmm1, xmmword [0x1800917b0]
movaps xmmword [rsp + 0x100], xmm8
movdqa xmm8, xmmword [0x1800928f0]
movups xmmword [rbp - 0x50], xmm0
movups xmm0, xmmword [0x1800917c0]
movups xmmword [rbp - 0x40], xmm1
movups xmm1, xmmword [0x1800917d0]
movaps xmmword [rsp + 0xf0], xmm9
movdqa xmm9, xmmword [0x180092910]
movups xmmword [rbp - 0x30], xmm0
movups xmmword [rbp - 0x20], xmm1
cmp r10d, 2
jl 0x18004245d
mov edx, esi
lea rcx, [rsp + 0x70]
nop dword [rax]
movd xmm2, edx
lea eax, [rdx + 4]
pshufd xmm2, xmm2, 0
lea rcx, [rcx + 0x10]
paddd xmm2, xmm7
add edx, 8
movdqa xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
punpckldq xmm1, xmm2
pmuldq xmm0, xmm5
pmuldq xmm1, xmm5
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm8
psubd xmm2, xmm0
pshufhw xmm0, xmm2, 0xd8
movq xmm2, xmm9
pshuflw xmm1, xmm0, 0xd8
movq xmm0, qword [rcx - 0x10]
pshufd xmm3, xmm1, 0xd8
paddw xmm3, xmm2
movd xmm2, eax
pshufd xmm2, xmm2, 0
xorps xmm3, xmm0
movq qword [rcx - 0x10], xmm3
paddd xmm2, xmm7
movdqa xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm5
punpckldq xmm1, xmm2
pmuldq xmm1, xmm5
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm8
psubd xmm2, xmm0
pshufhw xmm0, xmm2, 0xd8
movq xmm2, xmm9
pshuflw xmm1, xmm0, 0xd8
movq xmm0, qword [rcx - 8]
pshufd xmm3, xmm1, 0xd8
paddw xmm3, xmm2
xorps xmm3, xmm0
movq qword [rcx - 8], xmm3
cmp edx, 0x40
jl 0x180042370
jmp 0x1800424a6
lea r9, [rsp + 0x70]
mov r8d, esi
nop word [rax + rax]
mov eax, 0x51eb851f
lea r9, [r9 + 2]
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
mov eax, 1
sub ax, dx
movzx eax, ax
imul ecx, eax, 0x32
add cx, r8w
inc r8d
xor word [r9 - 2], cx
cmp r8d, 0x40
jl 0x180042470
movzx eax, word [0x180091340]
mov r8d, esi
movsd xmm0, qword [0x180091338]
mov word [rsp + 0x68], ax
movsd qword [rsp + 0x60], xmm0
movups xmm4, xmmword [str.WKDYYE_K]
movups xmmword [rsp + 0x50], xmm4
cmp r10d, 2
jl 0x1800425a7
movdqa xmm1, xmm7
movdqa xmm0, xmm7
punpckhdq xmm0, xmm7
movq xmm2, xmm9
pmuldq xmm0, xmm5
mov r8d, 8
punpckldq xmm1, xmm7
pmuldq xmm1, xmm5
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm8
psubd xmm7, xmm0
pshufhw xmm0, xmm7, 0xd8
pshuflw xmm1, xmm0, 0xd8
pshufd xmm3, xmm1, 0xd8
movq xmm1, xmm4
paddw xmm3, xmm2
movdqa xmm2, xmmword [0x1800928e0]
xorps xmm3, xmm1
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
movdqa xmm1, xmm2
pmuldq xmm0, xmm5
punpckldq xmm1, xmm2
pmuldq xmm1, xmm5
movq qword [rsp + 0x50], xmm3
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm8
psubd xmm2, xmm0
pshufhw xmm0, xmm2, 0xd8
movq xmm2, xmm9
pshuflw xmm1, xmm0, 0xd8
movq xmm0, qword [rsp + 0x58]
pshufd xmm3, xmm1, 0xd8
paddw xmm3, xmm2
xorps xmm3, xmm0
movq qword [rsp + 0x58], xmm3
movaps xmm9, xmmword [rsp + 0xf0]
lea r9, [rsp + 0x50]
movaps xmm8, xmmword [rsp + 0x100]
movaps xmm7, xmmword [rsp + 0x110]
movsxd rax, r8d
lea r9, [r9 + rax*2]
nop dword [rax]
mov eax, 0x51eb851f
lea r9, [r9 + 2]
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
mov eax, 1
sub ax, dx
movzx eax, ax
imul ecx, eax, 0x32
add cx, r8w
inc r8d
xor word [r9 - 2], cx
cmp r8d, 0xd
jl 0x1800425d0
movsd xmm0, qword [str._CQ_6]
lea r9, [rsp + 0x70]
movzx eax, word [0x180091d88]
lea r8, [rsp + 0x50]
movsd qword [rsp + 0x40], xmm0
lea rdx, [rsp + 0x40]
xor word [rsp + 0x42], 0x33
mov ecx, 0x6f
xor word [rsp + 0x44], 0x34
xor ax, 0x36
xor word [rsp + 0x46], 0x35
mov word [rsp + 0x40], cx
xor ecx, ecx
mov dword [rsp + 0x28], 5
mov word [rsp + 0x48], ax
mov qword [rsp + 0x20], rsi
call qword [sym.imp.SHELL32.dll_ShellExecuteW]
movss xmm1, dword [0x180092830]
xorps xmm0, xmm0
call fcn.180017060
movdqa xmm4, xmmword [0x180092c00]
lea rdx, str.Tips:_Press__HOME__hide_show_console
lea rcx, [rsp + 0x40]
movups xmmword [rsp + 0x40], xmm4
call fcn.180031680
call fcn.180016340
mov rbx, qword [rsp + 0x130]
mov rsi, qword [rsp + 0x140]
mov rdi, qword [rsp + 0x148]
add rsp, 0x120
pop rbp
ret