Function at 0x180032f10
Capabilities:
Create thread
Encode data using xor

Disassembly:
mov qword [rsp + 0x18], rbx
mov qword [rsp + 0x20], rsi
push rbp
push rdi
push r15
lea rbp, [rsp - 0x47]
sub rsp, 0xa0
movdqa xmm0, xmmword [0x18012caa0]
movdqu xmmword [rbp + 7], xmm0
mov dword [rbp + 0x17], 0xe8afb9a9
mov dword [rbp + 0x1b], 0x8e85ceeb
mov word [rbp + 0x1f], reloc.WLDAP32.dll_Ordinal_143
mov byte [rbp + 0x21], 1
xor ecx, ecx
nop dword [rax]
nop word [rax + rax]
lea eax, [rcx - 0x35]
xor byte [rbp + rcx + 7], al
inc rcx
cmp rcx, 0x19
jb 0x180032f60
mov byte [rbp + 0x21], 0
lea rcx, [rbp + 7]
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov rbx, rax
test rax, rax
je 0x18003335a
mov dword [rbp - 0x29], 0x99aebeac
mov dword [rbp - 0x25], 0xbdb5bea6
mov word [rbp - 0x21], 0xa4
mov byte [rbp - 0x1f], 1
xor ecx, ecx
nop dword [rax]
nop dword [rax + rax]
lea eax, [rcx - 0x35]
xor byte [rbp + rcx - 0x29], al
inc rcx
cmp rcx, 9
jb 0x180032fb0
mov byte [rbp - 0x1f], 0
xor edx, edx
lea rcx, [rbp - 0x29]
call qword [sym.imp.USER32.dll_FindWindowA]
mov qword [0x180175650], rax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov qword [0x180175658], rax
movdqa xmm0, xmmword [0x18012c8f0]
movdqu xmmword [rbp - 0x19], xmm0
mov dword [rbp - 9], 0xf0b8aab2
mov dword [rbp - 5], 0x8d8cbb
mov byte [rbp - 1], 1
xor ecx, ecx
nop word [rax + rax]
lea eax, [rcx - 0x35]
xor byte [rbp + rcx - 0x19], al
inc rcx
cmp rcx, 0x17
jb 0x180033010
mov byte [rbp - 1], 0
lea rcx, [rbp - 0x19]
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov qword [0x1801756f8], rax
lea rdx, [0x1801716c0]
cmp qword [reloc.WS2_32.dll_ntohs], 0x10
cmovae rdx, qword [0x1801716c0]
mov rcx, rax
call fcn.18000c040
mov qword [0x180175700], rax
lea rdx, [0x1801716e0]
cmp qword [reloc.WS2_32.dll_ntohs], 0x10
cmovae rdx, qword [0x1801716e0]
mov rcx, qword [0x1801756f8]
call fcn.18000c040
mov qword [0x180175708], rax
mov rdi, qword [0x180171740]
add rdi, rbx
mov rsi, qword [0x180171748]
add rsi, rbx
mov rbx, qword [0x180171700]
add rbx, qword [0x180175658]
mov edx, 8
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x1800330be
mov rax, qword [rbx]
jmp 0x1800330c0
xor eax, eax
mov qword [0x180175680], rax
mov rbx, qword [0x180171708]
add rbx, qword [0x180175658]
mov edx, 8
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x1800330ec
mov rax, qword [rbx]
jmp 0x1800330ee
xor eax, eax
mov qword [0x180175688], rax
mov rbx, qword [0x180171720]
add rbx, qword [0x180175658]
mov edx, 8
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x18003311a
mov rax, qword [rbx]
jmp 0x18003311c
xor eax, eax
mov qword [0x180175698], rax
mov rbx, qword [0x180171718]
add rbx, qword [0x180175658]
mov edx, 8
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x180033148
mov rax, qword [rbx]
jmp 0x18003314a
xor eax, eax
mov qword [0x180175690], rax
mov rdx, qword [0x180175658]
mov rcx, qword [0x180171728]
add rcx, rdx
mov qword [0x180175670], rcx
mov rcx, qword [0x180171710]
add rcx, rdx
mov qword [0x1801756a0], rcx
mov rcx, qword [0x180171730]
lea rax, [rdx - 0xc]
add rax, rcx
mov qword [0x180175678], rax
lea rbx, [rcx + rdx]
mov edx, 4
lea rcx, [rbx - 0xb]
call qword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x1800331ab
mov eax, dword [rbx - 0xb]
jmp 0x1800331ad
xor eax, eax
movsxd rcx, eax
mov rax, qword [0x180175678]
add rax, 5
add rcx, rax
mov qword [0x180175678], rcx
mov rdx, qword [0x180175658]
mov rcx, qword [0x180171750]
add rcx, rdx
mov qword [0x1801756c8], rcx
mov rcx, qword [0x180171758]
add rcx, rdx
mov qword [0x1801756d0], rcx
mov rcx, qword [0x180171760]
add rcx, rdx
mov qword [0x1801756d8], rcx
mov rcx, qword [0x180171770]
add rcx, rdx
mov qword [0x1801756e8], rcx
mov rcx, qword [0x180171768]
add rcx, rdx
mov qword [0x1801756e0], rcx
lea rcx, [rdx - 0x56]
add rcx, qword [0x180171738]
mov qword [0x1801755d8], rcx
mov rcx, qword [0x180171778]
add rcx, rdx
mov qword [0x1801755d0], rcx
xor ebx, ebx
xor eax, eax
mov r15d, 1
lock cmpxchg dword [0x180175640], r15d
je 0x180033283
nop dword [rax]
cmp rbx, 0x20
jae 0x18003326a
xor ecx, ecx
jmp 0x18003326d
mov ecx, r15d
call qword [sym.imp.KERNEL32.dll_Sleep]
inc rbx
xor eax, eax
lock cmpxchg dword [0x180175640], r15d
jne 0x180033260
cmp qword [0x180175648], 0
jne 0x1800332a1
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_HeapCreate]
mov qword [0x180175648], rax
xor eax, eax
xchg dword [0x180175640], eax
cmp byte [0x1801717e6], 0
je 0x1800332d9
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
xor r9d, r9d
lea r8, [0x180032860]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
jmp 0x180033305
lea r8, [0x180175620]
lea rdx, [0x180032300]
mov rcx, rsi
call fcn.18009d060
lea r8, [0x180175600]
lea rdx, [0x180032400]
mov rcx, rdi
call fcn.18009d060
lea r8, [0x1801755c8]
lea rdx, [0x180031b10]
mov rcx, qword [0x180175678]
call fcn.18009d060
lea r8, [0x1801755c0]
lea rdx, [0x180031d50]
mov rcx, qword [0x180175670]
call fcn.18009d060
mov edx, r15d
xor ecx, ecx
lea r11, [rsp + 0xa0]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rsp, r11
pop r15
pop rdi
pop rbp
jmp 0x18009d390
lea rax, [rbp + 7]
mov qword [rbp + 0x67], rax
mov dword [rbp - 0x19], 0xabbba58d
mov dword [rbp - 0x15], 0xa094f082
mov dword [rbp - 0x11], 0xa7bba1
mov byte [rbp - 0xd], 1
lea rdx, [rbp + 7]
lea rcx, [rbp - 0x19]
call fcn.180036010
mov rbx, rax
mov dword [rbp - 0x29], 0xa0a8bc84
mov dword [rbp - 0x25], 0xb7a583ef
mov dword [rbp - 0x21], 0x100b9b2
lea rdx, [rbp + 0x27]
lea rcx, [rbp - 0x29]
call fcn.180035c60
nop
mov rdx, rbx
mov rcx, rax
call fcn.18000abd0
int3