Function at 0x180042280
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 0x10], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x27]
sub rsp, 0xe0
mov rax, qword [0x1800cd230]
xor rax, rsp
mov qword [rbp + 0x1f], rax
imul eax, edx, 0xa90
mov rbx, rcx
mov qword [rbp - 0x69], r9
mov r12d, edx
mov qword [rbp - 0x29], r8
mov dword [rbp - 0x41], edx
mov qword [rbp - 0x21], rcx
mov dword [rbp - 0x71], eax
cmp edx, eax
ja 0x180042374
mov r13, qword [rbp - 0x59]
xor r10d, r10d
mov r14d, dword [rbp - 0x71]
mov rdi, qword [rbp - 0x59]
mov rsi, qword [rbp - 0x59]
mov r15, qword [rbp - 0x59]
nop word [rax + rax]
cmp r12d, 0x76de
ja 0x1800424d6
je 0x1800424a7
cmp r12d, 0xef
ja 0x18004243d
je 0x180042893
mov eax, r12d
sub eax, 0x3f
je 0x180042423
sub eax, 0x74
je 0x18004240e
sub eax, 0x1a
je 0x18004239f
cmp eax, 9
jne 0x18004275a
test rbx, rbx
je 0x180042887
mov esi, 0x2f
cmp esi, 0x2f
je 0x1800427d9
cmp esi, 0x210c
je 0x18004279c
cmp esi, 0x41e9
je 0x180042777
cmp esi, 0x62c6
jne 0x180042875
mov rax, qword [rbp - 0x49]
mov rcx, qword [rbp + 0x1f]
xor rcx, rsp
call fcn.1800a7b10
mov rbx, qword [rsp + 0x128]
add rsp, 0xe0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
mov rcx, qword [r8]
mov rax, qword [rcx]
call qword [rax + 0x28]
mov rdx, qword [rbp - 0x69]
mov rbx, rax
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 0x28]
cmp rax, rbx
jbe 0x1800423c6
mov rax, qword [rbp - 0x69]
mov rcx, qword [rax]
jmp 0x1800423cd
mov rcx, qword [rbp - 0x29]
mov rcx, qword [rcx]
mov rax, qword [rcx]
call qword [rax + 0x28]
mov rbx, qword [rbp - 0x21]
lea r9, [rbp - 0x19]
mov qword [rbp - 0x19], rax
lea rdx, [rbp - 0x31]
xor r8d, r8d
mov ecx, 0xba
mov rax, qword [rbx]
mov qword [rbp - 0x31], rax
call fcn.1800191f0
mov rax, qword [rbx]
xor r10d, r10d
mov r9, qword [rbp - 0x69]
mov rax, qword [rax + 0x10]
mov qword [rbp - 0x31], rax
jmp 0x18004275a
mov byte [rbp - 0x79], 1
mov qword [rbp - 0x59], r10
mov qword [rbp - 0x39], 0xffffffffffffffff
jmp 0x18004275a
movss xmm0, dword [rbx + 0x98]
mulss xmm0, dword [r9]
movss dword [rbx + 0x9c], xmm0
jmp 0x18004275a
cmp r12d, 0xfd
je 0x18004249b
cmp r12d, 0x29d6
je 0x180042478
cmp r12d, 0x536d
jne 0x18004275a
mov rdx, qword [rbx]
mov r8d, 0xb6
xor ecx, ecx
call fcn.180036e10
mov r9, qword [rbp - 0x69]
xor r10d, r10d
jmp 0x18004275a
mov r9, rbx
mov qword [rsp + 0x20], r10
xor edx, edx
xor ecx, ecx
mov r8d, 0x13c
call fcn.18009ddd0
mov r9, qword [rbp - 0x69]
xor r10d, r10d
jmp 0x18004275a
mov qword [0x1800ce148], r10
jmp 0x18004275a
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateMutexA]
mov rcx, qword [rbp - 0x39]
xor r8d, r8d
xor edx, edx
mov qword [rbx + 0x40], rax
call qword [sym.imp.dbghelp.dll_SymInitialize]
mov r9, qword [rbp - 0x69]
xor r10d, r10d
mov dword [rbp - 0x61], eax
jmp 0x18004275a
cmp r12d, 0x10f77
ja 0x18004260e
je 0x1800425ec
cmp r12d, 0x8822
je 0x1800425e0
cmp r12d, 0xa802
je 0x180042565
cmp r12d, 0xed09
jne 0x18004275a
cmp dword [rbp - 0x61], 0
mov ecx, r10d
movzx eax, byte [rbp - 0x79]
cmovne ecx, eax
mov qword [rbp - 0x11], r10
mov byte [rbp - 0x79], cl
cmp cl, 0
je 0x180042542
mov rcx, qword [rbp - 0x39]
xor r8d, r8d
xor edx, edx
call qword [sym.imp.dbghelp.dll_SymEnumerateModules64]
mov rcx, qword [rbp - 0x39]
mov dword [rbp - 0x61], eax
call qword [sym.imp.dbghelp.dll_SymCleanup]
mov rcx, qword [rbp - 0x59]
lea rdx, [rbp - 0x11]
call qword [sym.imp.SHELL32.dll_DragQueryPoint]
cmp qword [rbx + 0x40], 0
mov r9, qword [rbp - 0x69]
setne byte [rbp - 0x49]
xor r10d, r10d
jmp 0x18004275a
cmp byte [0x1800cd30a], 0
je 0x18004275a
mov rdx, qword [0x1800ce158]
mov rcx, rdx
mov byte [0x1800cd30a], 0
neg rcx
mov qword [0x1800ce178], rcx
test rcx, rcx
jle 0x1800425b8
mov rax, qword [0x1800ce170]
sub rax, rdx
cmp rcx, rax
jge 0x1800425b8
lea rax, [rcx + rdx]
mov qword [0x1800ce160], rax
mov qword [0x1800ce168], rax
jmp 0x18004275a
mov r8, qword [0x1800ce158]
xor edx, edx
add r8, rcx
lea rcx, [0x1800ce150]
lea r9d, [rdx + 0x32]
call fcn.180072020
mov r9, qword [rbp - 0x69]
xor r10d, r10d
jmp 0x18004275a
mov rax, qword [r9]
mov r13, qword [rax + 0x10]
jmp 0x18004275a
mov rcx, qword [r8]
mov rax, qword [rcx + 0x10]
mov r15, qword [rcx + 0x18]
mov qword [rbp - 0x51], rax
mov rax, qword [rbx]
mov rdi, qword [rax + 0x18]
mov rax, qword [r9]
mov rsi, qword [rax + 0x18]
jmp 0x18004275a
cmp r12d, 0x16334
je 0x180042374
cmp r12d, 0x196cc
je 0x180042678
cmp r12d, 0x21e21
jne 0x18004275a
mov eax, r14d
cmp rax, r13
jae 0x180042657
nop dword [rax]
mov eax, dword [rsi]
inc r14d
mov dword [rdi], eax
add rsi, 4
add rdi, 4
mov eax, r14d
cmp rax, r13
jb 0x180042640
mov r8, qword [rbp - 0x31]
xor edx, edx
sub r8, r13
mov rcx, rdi
shl r8, 2
call sub.VCRUNTIME140.dll_memset
mov r9, qword [rbp - 0x69]
xor r10d, r10d
jmp 0x18004275a
mov rdx, qword [rbp - 0x51]
mov rcx, r13
cmp r13, rdx
mov r14d, r10d
cmova rcx, rdx
cmp rcx, 0x10
jb 0x180042729
lea eax, [rcx - 1]
mov edx, eax
lea r8, [rdi + rax*4]
lea rax, [rsi + rax*4]
cmp rdi, rax
ja 0x1800426aa
cmp r8, rsi
jae 0x180042725
lea rax, [r15 + rdx*4]
cmp rdi, rax
ja 0x1800426b8
cmp r8, r15
jae 0x180042725
mov rdx, rcx
and rdx, 0xfffffffffffffff0
nop
movdqu xmm0, xmmword [rsi]
add r14d, 0x10
movdqu xmm1, xmmword [r15]
mov eax, r14d
pxor xmm1, xmm0
movdqu xmm0, xmmword [rsi + 0x10]
movdqu xmmword [rdi], xmm1
movdqu xmm1, xmmword [r15 + 0x10]
pxor xmm1, xmm0
movdqu xmm0, xmmword [rsi + 0x20]
movdqu xmmword [rdi + 0x10], xmm1
movdqu xmm1, xmmword [r15 + 0x20]
pxor xmm1, xmm0
movdqu xmm0, xmmword [rsi + 0x30]
add rsi, 0x40
movdqu xmmword [rdi + 0x20], xmm1
movdqu xmm1, xmmword [r15 + 0x30]
add r15, 0x40
pxor xmm1, xmm0
movdqu xmmword [rdi + 0x30], xmm1
add rdi, 0x40
cmp rax, rdx
jb 0x1800426c0
mov rdx, qword [rbp - 0x51]
mov eax, r14d
cmp rax, rcx
jae 0x18004274f
mov eax, dword [r15]
inc r14d
xor eax, dword [rsi]
add r15, 4
mov dword [rdi], eax
add rsi, 4
add rdi, 4
mov eax, r14d
cmp rax, rcx
jb 0x180042731
cmp rdx, r13
jbe 0x18004275a
mov rsi, r15
mov r13, rdx
imul eax, dword [rbp - 0x41], 0xa9
add r12d, eax
cmp r12d, dword [rbp - 0x71]
ja 0x180042374
mov r8, qword [rbp - 0x29]
jmp 0x1800422f0
cmp dword [rbp + 0x17], 0x62726f76
jne 0x180042887
cmp word [rbp + 0x1b], 0x7369
jne 0x180042887
mov dword [rbp - 0x49], 1
jmp 0x180042875
xor eax, eax
mov qword [rsp + 0x30], r10
mov dword [rbp + 0x17], eax
lea r9, [rbp + 0x17]
mov word [rbp + 0x1b], ax
lea rdx, [rbp - 9]
lea rax, [rbp - 0x71]
mov dword [rsp + 0x28], 0x83
xor r8d, r8d
mov qword [rsp + 0x20], rax
xor ecx, ecx
mov dword [rbp - 0x71], 6
call fcn.180072300
jmp 0x180042872
mov r14d, dword [rbx + 8]
mov rdi, qword [rbx]
mov ebx, 0x38
mov eax, ebx
sub eax, 0x38
je 0x180042822
sub eax, 0x34
je 0x18004281c
cmp eax, 0x4a
jne 0x180042832
mov rcx, qword [0x1800cd2f0]
lea r9d, [rax + 0x15]
mov qword [rsp + 0x28], r10
lea rdx, [rbp - 9]
xor r8d, r8d
mov qword [rsp + 0x20], r10
call fcn.180019aa0
xor r10d, r10d
jmp 0x180042832
mov dword [rbp + 0xf], r14d
jmp 0x180042832
mov qword [rbp - 9], r10
mov qword [rbp + 0xf], r10
mov qword [rbp + 7], rdi
mov qword [rbp - 1], rdi
add ebx, 0x34
cmp ebx, 0xd4
jb 0x1800427e5
mov rbx, qword [rbp - 0x21]
cmp dword [rbx + 0xc], 0
je 0x180042887
mov dword [rsp + 0x28], 0x59
lea r9, [rbp - 0x71]
xor r8d, r8d
mov qword [rsp + 0x20], r10
xor edx, edx
mov dword [rbp - 0x71], 8
lea rcx, [rbp - 9]
call fcn.18007e140
cmp eax, 1
jne 0x180042887
xor r10d, r10d
add esi, 0x20dd
cmp esi, 0x8374
jbe 0x180042347
mov dword [rbp - 0x49], 0
jmp 0x180042374
xor r8d, r8d
xor edx, edx
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_LoadLibraryExW]
mov rdx, qword [rbp - 0x69]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
jmp 0x180042378