Function at 0x643c723c
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ecx, 0x11
mov ebp, esp
push edi
push esi
lea edi, [ebp - 0x170]
mov esi, 0x643eb389
push ebx
sub esp, 0x19c
mov eax, dword [0x643e7f88]
rep movsb byte es:[edi], byte [esi]
lea edi, [ebp - 0x14e]
mov esi, str.The_remote_procedure_call_failed_and_did_not_execute.
lea edx, [eax + 0x67078320]
add eax, 0x77af9555
mov dword [0x643e8040], edx
mov dword [str.S_y9d_t], eax
call dword [sym.imp.KERNEL32.dll_GetCurrentThread]
mov ecx, 0x36
rep movsb byte es:[edi], byte [esi]
xor eax, 0x9cb36b63
mov dword [str.S_y9d_t], eax
xor eax, eax
cmp byte [eax + str.DFS_is_unavailable_on_the_contacted_server.], 0
je 0x643c72c4
inc eax
cmp eax, 0x120e
jne 0x643c7299
call fcn.643cf804
mov eax, dword [str.S_y9d_t]
or eax, 0x5a94c13
mov dword [0x643e8040], eax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov eax, dword [0x643e7f88]
or eax, 0xbd55708a
lea edx, [eax + 0x6fb6616d]
mov dword [str.S_y9d_t], eax
imul eax, eax, 0x2b4bf6f2
mov dword [0x643e8040], edx
mov dword [0x643e7f88], eax
xor eax, eax
mov byte [ebp + eax - 0x118], al
inc eax
cmp eax, 0x100
jne 0x643c72ec
mov edx, str.The_request_failed_due_to_a_fatal_device_hardware_error.
mov ecx, 0x501
movsx eax, byte [edx]
inc edx
test al, al
je 0x643c731c
add ecx, eax
cmp ecx, 0xd77
jbe 0x643c7305
call fcn.643d089c
mov eax, dword [str.S_y9d_t]
mov ebx, str.TargetPath
mov esi, 0x10f6
mov ecx, eax
xor ecx, 0x35502b66
mov dword [str.S_y9d_t], ecx
movsx edx, byte [ebx]
inc ebx
test dl, dl
je 0x643c735e
add esi, edx
cmp esi, 0x1b47
jbe 0x643c7339
sub ecx, 0x2a18e871
mov dword [0x643e7f88], ecx
call fcn.643d27ac
jmp 0x643c7368
xor eax, 0xb0603891
mov dword [0x643e7f88], eax
imul eax, dword [0x643e7f88], 0x24a8cc3f
xor esi, esi
xor ebx, ebx
mov dword [0x643e8040], eax
call fcn.643d3548
mov edx, str.The_request_failed_due_to_a_fatal_device_hardware_error.
mov ecx, 0xa07
movsx eax, byte [edx]
inc edx
test al, al
je 0x643c73b0
add ecx, eax
cmp ecx, 0xe1e
jbe 0x643c738a
call fcn.643d089c
xor dword [str.S_y9d_t], 0xc72f65bd
call fcn.643d2c24
mov eax, dword [0x643e7f88]
mov edi, 0x35
mov cl, byte [ebp + ebx - 0x118]
or eax, 0x65697772
lea edx, [eax + 0x10517c36]
mov dword [0x643e7f88], eax
imul eax, eax, 0x9bfe70ac
mov dword [str.S_y9d_t], edx
xor edx, edx
mov dword [0x643e8040], eax
mov eax, ebx
div edi
mov al, byte [ebp + edx - 0x14e]
add eax, ecx
add eax, esi
movzx esi, al
mov al, byte [ebp + esi - 0x118]
mov byte [ebp + ebx - 0x118], al
inc ebx
mov byte [ebp + esi - 0x118], cl
cmp ebx, 0x100
jne 0x643c7380
xor ecx, ecx
xor edi, edi
xor esi, esi
lea eax, [esi + 1]
mov dword [ebp - 0x18c], ecx
movzx esi, al
mov eax, dword [str.S_y9d_t]
or eax, 0x7863c2c4
mov dword [str.S_y9d_t], eax
add eax, 0x5ae88c06
mov dword [0x643e8040], eax
call fcn.643d4004
mov bl, byte [ebp + esi - 0x118]
lea edx, [ebx + edi]
movzx edi, dl
mov al, byte [ebp + edi - 0x118]
mov byte [ebp + esi - 0x118], al
mov eax, dword [0x643e7f88]
mov byte [ebp + edi - 0x118], bl
sub eax, 0x3d95d067
mov dword [0x643e8040], eax
mov dword [esp + 4], str.originName
mov dword [esp], eax
call fcn.643d2a58
mov eax, dword [0x643e8040]
mov edx, eax
sub eax, 0x628f3117
xor edx, 0x7a557a36
mov dword [0x643e7f88], eax
mov dword [str.S_y9d_t], edx
call fcn.643d0f40
mov ecx, dword [ebp - 0x18c]
add bl, byte [ebp + esi - 0x118]
movzx ebx, bl
mov al, byte [ebp + ebx - 0x118]
xor al, byte [ebp + ecx - 0x170]
mov byte [ebp + ecx - 0x15f], al
inc ecx
cmp ecx, 0x11
jne 0x643c741e
mov byte [ebp - 0x14e], 0
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
xor eax, 0xe3e04e43
mov dword [str.S_y9d_t], eax
call dword [sym.imp.USER32.dll_GetDoubleClickTime]
mov edx, str.originName
mov ecx, 0x19b0
movzx eax, byte [edx]
inc edx
test al, al
je 0x643c7522
add ecx, eax
cmp ecx, 0x19cd
jbe 0x643c7501
mov eax, dword [str.S_y9d_t]
and eax, 0x68c59422
mov dword [0x643e7f88], eax
mov eax, dword [str.S_y9d_t]
xor ebx, ebx
mov esi, 0xaa
add eax, 0x7d75d282
mov dword [0x643e8040], eax
call fcn.643d27ac
mov dword [ebp - 0x17c], 0x24
mov dword [ebp - 0x178], 0x5a
mov dword [ebp - 0x174], 0x1b
mov eax, dword [str.S_y9d_t]
add eax, 0xe92ab77
mov dword [0x643e8040], eax
mov dword [esp], 0x8f1
call dword [sym.imp.USER32.dll_IsZoomed]
push eax
mov eax, dword [0x643e8040]
add dword [str.S_y9d_t], 0x66308ccc
xor eax, 0x5271ab2b
mov dword [0x643e7f88], eax
call fcn.643d2c24
sub esi, dword [ebp + ebx*4 - 0x17c]
inc ebx
cmp ebx, 3
jne 0x643c755b
lea eax, [ebp - 0x15f]
mov dword [esp + 0xc], esi
mov dword [esp + 8], eax
mov dword [esp + 4], 0x11dc
mov dword [esp], str.Pn5weWy9y6bc49thNEoCUWmnJ2B4lnJ2MaGUBjUDnjD6uiTo0wjJCgrQ4n82q0ymqlWQxoULhXZG1tc0c2QHsKyjDS6cn9dswkuzhE7OJNULmdtbW7ZfZfOCtbBM2jE37HQnOYrh64j8zu43gqHKEYTK6kd5Cg7BagkfJalgjM02IXcvdec8lNOw0QrCcp5Q7xP5HDEXWf6AfyHQHpQqkchxuKC0dvbDRU99yCFmNfJVtzjdVmE8AOPi008jt_VEABnLxhAclCWNV9LeOdOozmJRp3cOURmKRqfaP5dl5V7dXPsV70dPAGyZvdAl46RKZgrJVwxAQ9GVgM6wVESrfU1YCoVltygQ0Yzm2m6lj7i5jJ1CTTOOFNPKfwcVnDs6uhAwwECFOyHX8FT2_8ygIIyJdQCXhb3yvQoqEvqIWc9MsiElpgeA4ragykrkqHxVdFvzobJhrFCJurgptDdZJBqaTTxm1pmTqpwDGg33IbaSQDHvHStkz3HPNvhvX2BYmohznlqc51ptHbXqG0gd57xo_39On3DTV4BLN1AHMphIaoqAjDbSdyGiFwaWZeVQIoOG9DZyLVm7mSDOLcaelV_AN7wYL96FR0hB8fpOaYrbC0_lPoreWg6EQoVsKTP9ibhta6KiMQD3S9xCEDYDWm6ygv6wb73YQj9548Ws9TNG2FOMa1EAp80v8R4rZ5NaS9_ueQM3t4B3EfpEFsN8iA7YhSvnPqXmr4Z0xguQpe6bp8BouxfPf5dtMKmsSBPq0jY4q6leMfpEU1I5_v8aJbDfpDYY51nxOdhDae8noCZYu5_x7Bxw86875DP0RBuUjUVFQRaYuXSk9U8kqcnhb66H4i73Hl2vJ12WxH1nv0fyRUK6feYzs4WLC1YRV4TzPiuQHxzJTWrsaVKJZbpemYcdXjJwB1HVj1J_Qy7NQ9W1IsA8kQfpYCjnMaOIKpRas_UCrRmd1jE39S7t3Gh19jrTFk3uYSuXIPtk4eYTSwACVJCdIUky7YmgJHq_f4Y_htMcJ6lxKgRqlnlNA0edExTpBYQscZNWLoFl8qq4D2E_LTzbslbrTbWuda5vZqWkOQ5QTXBUXwA0_5qKWmsPmd5wI_Xzd9QEZVzE5fhnGV_bWHpiN1eNe0A7vl5gkOBJ0PV1LvkaWjRexkcRhpD_KPsRn07yJblJcdEQ263zzkBn342aP8ZIWIxx3R6zD9Mkqp5M7hueCw67FtrAUXUOFAR8DM_Kk3kMSOfAa7P4C3FIDuPiHOSGfhERwWanEOWrEbxqtSwC8gDgIUhBtRebfwA16pTdI4FBjcH8PjexFfB6d5FVIIFk8qST89sIM5s2mr2KkQY68ZUqxsUiefulHanaEnpm6x1iT3IHGFAfAGsrTpRxmgCeKZGulXl6YP4x8MdeLyZU_0IGaFBA8tSwGDOZN3i8AMmg3YfwlyInOFAViGK4uti5Nz0NByZRhufu5T_wNyESg3jStD1EV4A1SLWXe7JTexNbX4UMuw94DECDXMY1c3O8vyHLl6Ou_xB2afel6j5BNeDbsIaqvoP7TAtZHmpn0IkaYuoIQDyjtCgwdItk7OoNoWC84G62_ZmeyX34Z8A5CuOQjGIybSl2ejdslU09S4ngKjF9XwWy0LpAqIKM8kAYbf6jl1ij8ebo3B_NdNKTKrIJ8N3DRjxYj4D8lxgg9tGgLJDxWacH6ofVFNfPtpQkpdiQlaZoSNSQBW7axHkdwr88TYYdSimC6sxB1PkYk3EvLv46urtsraeaiPMWhycu_zymJ86aUZARxEFbG7lOY9_STjSeDIIQ1G7FlP0cvK94FuCZVf4_AVkjLbtxre4Z9KmOQWO2b1fTn2lZ1TAwe1o2UB7Bou1LqhTwBuPFbQaIHNQ26LB23hr40X5CDfLHcPcPEpFFp9ndiCeP_8mKOPDGjtRwHya5hj2IA_U12deaplbQeOCt0sghma9Bhp3Q41GalzO5rj3gUunuG0A8p4wOSuei9zgbl9jMqf8NngQG6sRzGi3FAbVD7csP4oBVccw9LKycruouXmt2O47isqyZNdqA2Jx6YJS1Sa2eptsLbVdYvERvRhySyMZB63GgP80ZNdcjD9SeVtte5TlqPtim2Ssy05cSkyuzUAGLjt4s6ZDe5hOKqnHIq_IFTw8w_kJRDD1a7EDreKTOTAXAB_5Kw9KmgrbqZQShVeHF4cXmFnon3S9oIccfSPEK09ad9SkC6rc6Ujv2OLZyZXinqEWH8wzm5fitIAFevAa0Ry48tW2BNefjvh31B30Ei_HjrJ_HxQYO2ZsCcvzcx9zQC8waugUNnn4g5up2jcYmg_0xi_1dbKnkYiT9c9WGnmbzmNOO3mKNFDbDMQZwrwfKlmnlEKfzuJuxzhbcjV42BI_TV6FNc3Dxcplw2xZpZqwkrJwZVsPRUNR6zJ52RNcYymtzq0HGvekarjJmpaNJjAvNQDhRBhHtfetqpKgdRMil5ktZXTxmqIIoQHTFK7P6xbLE_OiXHM5bMgKciexcnxq6axFVVxMvJk2tSA4rnmyVwor3KXlqq2AsWPvKO1nHhC1elS9_7WtfU88OGrm1w5SB8GL9dLXSoxMUuWvJ62CYXu8rK20ZXGHqWAe1zxycmIEi6NWygnFUN4eHZEmx2o2fIPHIDGd98XUUlikBC0i1Z8RlYFbHT3DtzHNqCZoNAGdyoVPEe_QD7Jv2drMjPiTuECYYbmTynOKofx4IS2bHX2xSAgTyt6QphFHhkTXrmKYEVWMxTHn0mnxn6KvHjBilZna8AHXxVgp9JQDI0xknUEuSjrkZSdRPDjHQ0tcpCk5nPVEHkIXmijwG61XywE1VAO_yRaIsuHS6tnLZ7i40RmubC_6j7Zyhq6lMCXhgxq1lZHBWpYsrOhe9hlV38SO5CAUKrr7C8yUljJuE2gfHDV8RTVaFW0GWJmw6MiL8K7BMZfuMBAXjuFPWnK62lshnJa22r9x31fFGUvoBHtlYWv7b5cs4mnfezQ6AewgbGHqrEvrWALQe88yYN8JEvWjo7Q9gEk7JptKYC94axPvgEtSuKjFG9XjvaOIn8bEiZP0Y_EPUlLKDQ223KONvjrdkZ0d4QylaMowuNJGwyKn0WOm2abke9Rp7I_QIuioWtPotxUmdjFtylqW9jKbCySO4catuGVDyTtvgI2Ho8pvsd4TMjMK9aJTVr8KOHZz8pGq8JLe8bxJHuOcU18wC1QFssY5tExHeeeZGpRt_YgVP055rTnun0xHrYR41Q1xwoe6SatprkwcI8TKvy4yQBZLQzcb32Rztk2phFF5PgOGaBvCKd95Vle1qZKoEda9mRGQqaN18mh7tKatDy6FpWYjAohkSDUVaKX9YdBVb1pP2Z98ByiEKTGju4w33ysdR292sbYuEl4fJUAofZdEZgLf8YYm7MchSTECDwRLJ8SoMs6K6AY6vNUttcTw24PiKIVI6qVz6ioCnhZTuOu1pX71MQrcdidwmh8AWewn6Lx0L5md8X1Jexc9P29OSf52lRnP1E4MGvoXHrYGA3Vv3n31Fvf_uaPa86wRxiYO8j8j3JGIjBQ8vZZbNKdpN6sxcPdt0A6qA2jX0juAUhs9jQ3wduFoNmyFDcHjlb2EvFCnouHORtnyqg57wBzJwE1DlnjLWuMlA75Yne5jewYIw6FlP0fHo4eb24isFQRwdiMcHUuW3HDc3T_OJYAEXl7vqelucp3G15Oitg_E8WTcnV10XFZDrCf_G1HL1RK5FkxsdsprT9FCMYpLfCAnNhu4dKeEcWzwp6iqB9wo4r6c6wYLTkRWnq8L2ShJSvwF3AgnQBJffLJDWMcEQoZJNXDANYOq4Q0ReYPx5GG1wixm2HySY9H9VH2bbDnrqeDDzYRh83MNuolgy7S5Qbu8sedB_OVbdFUtVrSLJOaLMhw9VTZ9xhVjLZIefzb5xgR3STmzGlwA_b5El7zYv8MCYaNlCrFeqA7ZpYXXisqx1f2ov9yucmtTbuSZQMYT9_IYaQZaZ_ifigdVTn
call fcn.643cb468
lea esp, [ebp - 0xc]
pop ebx
pop esi
pop edi
pop ebp
ret