Function at 0x140002030
Capabilities:
Encode data using xor
Resolve function by parsing pe exports

Disassembly:
mov dword [rsp + 0x18], r8d
mov qword [rsp + 0x10], rdx
push rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x38
mov ebx, dword [rcx + 8]
mov rbp, rdx
mov r11d, dword [rcx + 0xc]
mov r10d, dword [rcx + 0x10]
mov r9d, dword [rcx + 0x14]
nop dword [rax]
movzx eax, byte [rbp + 2]
movzx edx, byte [rbp + 3]
shl edx, 8
or edx, eax
mov dword [rsp + 0x2c], r9d
movzx eax, byte [rbp + 1]
shl edx, 8
or edx, eax
mov dword [rsp + 0x28], r10d
movzx eax, byte [rbp]
shl edx, 8
or edx, eax
mov dword [rsp + 0x20], ebx
mov dword [rcx + 0x58], edx
mov eax, r9d
movzx r8d, byte [rbp + 7]
xor eax, r10d
and eax, r11d
shl r8d, 8
xor eax, r9d
mov dword [rsp + 0x80], edx
add eax, 0xd76aa478
mov dword [rsp + 0x24], r11d
add edx, eax
movzx eax, byte [rbp + 6]
or r8d, eax
add edx, ebx
movzx eax, byte [rbp + 5]
shl r8d, 8
or r8d, eax
ror edx, 0x19
movzx eax, byte [rbp + 4]
add edx, r11d
shl r8d, 8
or r8d, eax
mov eax, r10d
xor eax, r11d
mov dword [rcx + 0x5c], r8d
and eax, edx
mov dword [rsp + 4], r8d
xor eax, r10d
add eax, r8d
lea r8d, [r9 - 0x173848aa]
movzx r9d, byte [rbp + 0xb]
add r8d, eax
movzx eax, byte [rbp + 0xa]
shl r9d, 8
or r9d, eax
ror r8d, 0x14
movzx eax, byte [rbp + 9]
add r8d, edx
shl r9d, 8
or r9d, eax
movzx eax, byte [rbp + 8]
shl r9d, 8
or r9d, eax
mov eax, r11d
xor eax, edx
mov dword [rcx + 0x60], r9d
and eax, r8d
mov dword [rsp + 0x10], r9d
xor eax, r11d
add eax, r9d
lea r9d, [r10 + 0x242070db]
movzx r10d, byte [rbp + 0xf]
add r9d, eax
movzx eax, byte [rbp + 0xe]
shl r10d, 8
or r10d, eax
ror r9d, 0xf
movzx eax, byte [rbp + 0xd]
add r9d, r8d
shl r10d, 8
or r10d, eax
movzx eax, byte [rbp + 0xc]
shl r10d, 8
or r10d, eax
mov eax, r8d
xor eax, edx
mov dword [rsp], r10d
mov dword [rcx + 0x64], r10d
and eax, r9d
xor eax, edx
add eax, 0xc1bdceee
add r10d, eax
movzx eax, byte [rbp + 0x12]
add r10d, r11d
movzx r11d, byte [rbp + 0x13]
shl r11d, 8
or r11d, eax
ror r10d, 0xa
movzx eax, byte [rbp + 0x11]
add r10d, r9d
shl r11d, 8
or r11d, eax
movzx eax, byte [rbp + 0x10]
shl r11d, 8
or r11d, eax
mov eax, r8d
xor eax, r9d
mov dword [rcx + 0x68], r11d
and eax, r10d
mov dword [rsp + 0xc], r11d
xor eax, r8d
add eax, r11d
lea r11d, [rdx - 0xa83f051]
movzx edx, byte [rbp + 0x17]
add r11d, eax
movzx eax, byte [rbp + 0x16]
shl edx, 8
or edx, eax
ror r11d, 0x19
movzx eax, byte [rbp + 0x15]
add r11d, r10d
shl edx, 8
or edx, eax
movzx eax, byte [rbp + 0x14]
shl edx, 8
or edx, eax
mov eax, r9d
xor eax, r10d
mov dword [rcx + 0x6c], edx
and eax, r11d
mov dword [rsp + 0x98], edx
xor eax, r9d
add eax, 0x4787c62a
add eax, edx
movzx edx, byte [rbp + 0x1b]
add r8d, eax
shl edx, 8
movzx eax, byte [rbp + 0x1a]
or edx, eax
ror r8d, 0x14
movzx eax, byte [rbp + 0x19]
add r8d, r11d
shl edx, 8
or edx, eax
movzx eax, byte [rbp + 0x18]
shl edx, 8
or edx, eax
mov eax, r10d
xor eax, r11d
mov dword [rcx + 0x70], edx
movzx r13d, byte [rbp + 0x1f]
and eax, r8d
xor eax, r10d
shl r13d, 8
add eax, 0xa8304613
mov dword [rsp + 8], edx
add eax, edx
add r9d, eax
movzx eax, byte [rbp + 0x1e]
or r13d, eax
ror r9d, 0xf
movzx eax, byte [rbp + 0x1d]
add r9d, r8d
shl r13d, 8
or r13d, eax
movzx eax, byte [rbp + 0x1c]
shl r13d, 8
or r13d, eax
mov dword [rcx + 0x74], r13d
movzx edx, byte [rbp + 0x23]
mov eax, r8d
xor eax, r11d
shl edx, 8
and eax, r9d
xor eax, r11d
add eax, 0xfd469501
add eax, r13d
add r10d, eax
movzx eax, byte [rbp + 0x22]
or edx, eax
ror r10d, 0xa
movzx eax, byte [rbp + 0x21]
add r10d, r9d
shl edx, 8
mov ebx, r10d
or edx, eax
movzx eax, byte [rbp + 0x20]
shl edx, 8
or edx, eax
mov eax, r8d
xor eax, r9d
mov dword [rcx + 0x78], edx
and eax, r10d
mov dword [rsp + 0x18], edx
xor eax, r8d
add eax, edx
lea edx, [r11 + 0x698098d8]
movzx r11d, byte [rbp + 0x27]
add edx, eax
movzx eax, byte [rbp + 0x26]
shl r11d, 8
or r11d, eax
ror edx, 0x19
movzx eax, byte [rbp + 0x25]
add edx, r10d
shl r11d, 8
xor ebx, edx
or r11d, eax
movzx eax, byte [rbp + 0x24]
shl r11d, 8
or r11d, eax
mov eax, r9d
mov dword [rcx + 0x7c], r11d
xor eax, r10d
movzx r12d, byte [rbp + 0x2b]
and eax, edx
xor eax, r9d
shl r12d, 8
add eax, 0x8b44f7af
mov dword [rsp + 0x14], r11d
add r11d, eax
movzx eax, byte [rbp + 0x2a]
or r12d, eax
add r11d, r8d
movzx eax, byte [rbp + 0x29]
shl r12d, 8
or r12d, eax
ror r11d, 0x14
movzx eax, byte [rbp + 0x28]
add r11d, edx
and ebx, r11d
shl r12d, 8
or r12d, eax
xor ebx, r10d
add ebx, 0xffff5bb1
mov dword [rcx + 0x80], r12d
movzx eax, byte [rbp + 0x2e]
add ebx, r12d
movzx r8d, byte [rbp + 0x2f]
add ebx, r9d
shl r8d, 8
or r8d, eax
ror ebx, 0xf
movzx eax, byte [rbp + 0x2d]
add ebx, r11d
shl r8d, 8
or r8d, eax
movzx eax, byte [rbp + 0x2c]
shl r8d, 8
or r8d, eax
mov dword [rcx + 0x84], r8d
mov edi, r11d
movzx eax, byte [rbp + 0x32]
xor edi, edx
movzx r14d, byte [rbp + 0x33]
and edi, ebx
mov dword [rsp + 0x1c], r8d
xor edi, edx
shl r14d, 8
add edi, 0x895cd7be
or r14d, eax
add edi, r8d
movzx eax, byte [rbp + 0x31]
add edi, r10d
shl r14d, 8
mov r8d, r11d
or r14d, eax
ror edi, 0xa
movzx eax, byte [rbp + 0x30]
xor r8d, ebx
add edi, ebx
shl r14d, 8
or r14d, eax
and r8d, edi
mov dword [rcx + 0x88], r14d
xor r8d, r11d
movzx eax, byte [rbp + 0x36]
add r8d, 0x6b901122
movzx r15d, byte [rbp + 0x37]
add r8d, edx
mov rdx, qword [rsp + 0x88]
add r8d, r14d
shl r15d, 8
mov r9d, ebx
or r15d, eax
ror r8d, 0x19
movzx eax, byte [rbp + 0x35]
xor r9d, edi
shl r15d, 8
add r8d, edi
or r15d, eax
and r9d, r8d
movzx eax, byte [rbp + 0x34]
xor r9d, ebx
add r9d, 0xfd987193
shl r15d, 8
or r15d, eax
mov r10d, edi
mov dword [rcx + 0x8c], r15d
xor r10d, r8d
movzx eax, byte [rbp + 0x3a]
add r9d, r15d
movzx esi, byte [rbp + 0x3b]
add r9d, r11d
shl esi, 8
or esi, eax
ror r9d, 0x14
movzx eax, byte [rbp + 0x39]
add r9d, r8d
and r10d, r9d
shl esi, 8
or esi, eax
xor r10d, edi
movzx eax, byte [rbp + 0x38]
add r10d, 0xa679438e
shl esi, 8
or esi, eax
mov dword [rcx + 0x90], esi
add r10d, esi
movzx ebp, byte [rbp + 0x3f]
add r10d, ebx
movzx eax, byte [rdx + 0x3e]
shl ebp, 8
or ebp, eax
ror r10d, 0xf
movzx eax, byte [rdx + 0x3d]
add r10d, r9d
shl ebp, 8
or ebp, eax
movzx eax, byte [rdx + 0x3c]
shl ebp, 8
or ebp, eax
lea edx, [rdi + 0x49b40821]
mov edi, dword [rsp + 0x1c]
mov eax, r9d
xor eax, r8d
mov dword [rcx + 0x94], ebp
and eax, r10d
xor eax, r8d
add eax, ebp
add edx, eax
mov eax, r10d
ror edx, 0xa
add edx, r10d
xor eax, edx
and eax, r9d
xor eax, r10d
add eax, 0xf61e2562
lea r11d, [rdx - 0x16493856]
add eax, dword [rsp + 4]
add r8d, eax
mov eax, edx
ror r8d, 0x1b
add r8d, edx
xor eax, r8d
and eax, r10d
xor eax, edx
add eax, 0xc040b340
add eax, dword [rsp + 8]
add r9d, eax
ror r9d, 0x17
add r9d, r8d
mov eax, r9d
xor eax, r8d
and eax, edx
lea edx, [r8 - 0x29d0efa3]
xor eax, r8d
add eax, 0x265e5a51
add eax, edi
add r10d, eax
mov eax, r9d
ror r10d, 0x12
add r10d, r9d
xor eax, r10d
and eax, r8d
lea r8d, [r9 + 0x2441453]
xor eax, r9d
add eax, dword [rsp + 0x80]
add r11d, eax
mov eax, r10d
ror r11d, 0xc
add r11d, r10d
xor eax, r11d
and eax, r9d
lea r9d, [r10 - 0x275e197f]
xor eax, r10d
add eax, dword [rsp + 0x98]
add edx, eax
mov eax, r11d
ror edx, 0x1b
add edx, r11d
xor eax, edx
and eax, r10d
lea r10d, [r11 - 0x182c0438]
xor eax, r11d
add eax, r12d
add r8d, eax
ror r8d, 0x17
add r8d, edx
mov eax, r8d
xor eax, edx
and eax, r11d
xor eax, edx
add eax, ebp
add r9d, eax
mov eax, r8d
ror r9d, 0x12
add r9d, r8d
xor eax, r9d
and eax, edx
xor eax, r8d
add eax, dword [rsp + 0xc]
add r10d, eax
lea r11d, [rdx + 0x21e1cde6]
lea edx, [r8 - 0x3cc8f82a]
ror r10d, 0xc
add r10d, r9d
mov eax, r9d
xor eax, r10d
and eax, r8d
lea r8d, [r9 - 0xb2af279]
xor eax, r9d
add eax, dword [rsp + 0x14]
lea ebx, [r10 + 0x455a14ed]
add r11d, eax
mov eax, r10d
ror r11d, 0x1b
add r11d, r10d
xor eax, r11d
and eax, r9d
xor eax, r10d
add eax, esi
lea r9d, [r11 - 0x561c16fb]
add edx, eax
ror edx, 0x17
add edx, r11d
mov eax, edx
xor eax, r11d
and eax, r10d
xor eax, r11d
lea r10d, [rdx - 0x3105c08]
add eax, dword [rsp]
add r8d, eax
mov eax, edx
ror r8d, 0x12
add r8d, edx
xor eax, r8d
and eax, r11d
xor eax, edx
add eax, dword [rsp + 0x18]
lea r11d, [r8 + 0x676f02d9]
add ebx, eax
mov eax, r8d
ror ebx, 0xc
add ebx, r8d
xor eax, ebx
and eax, edx
xor eax, r8d
add eax, r15d
add r9d, eax
mov eax, ebx
ror r9d, 0x1b
add r9d, ebx
xor eax, r9d
and eax, r8d
xor eax, ebx
add eax, dword [rsp + 0x10]
add r10d, eax
ror r10d, 0x17
add r10d, r9d
mov eax, r10d
mov edx, r10d
xor eax, r9d
and eax, ebx
xor eax, r9d
add eax, r13d
add r11d, eax
ror r11d, 0x12
add r11d, r10d
xor edx, r11d
mov r8d, edx
and r8d, r9d
xor r8d, r10d
add r8d, 0x8d2a4c8a
add r8d, r14d
add r8d, ebx
ror r8d, 0xc
add r8d, r11d
xor edx, r8d
add edx, 0xfffa3942
add edx, dword [rsp + 0x98]
add r9d, edx
ror r9d, 0x1c
add r9d, r8d
mov eax, r11d
xor eax, r8d
xor eax, r9d
add eax, 0x8771f681
add eax, dword [rsp + 0x18]
add r10d, eax
ror r10d, 0x15
add r10d, r9d
mov eax, r10d
mov edx, r10d
xor eax, r8d
xor eax, r9d
add eax, 0x6d9d6122
add eax, edi
add r11d, eax
ror r11d, 0x10
add r11d, r10d
xor edx, r11d
mov eax, edx
xor eax, r9d
add eax, 0xfde5380c
add eax, esi
add r8d, eax
mov eax, r11d
ror r8d, 9
add r8d, r11d
xor eax, r8d
xor edx, r8d
add edx, 0xa4beea44
add edx, dword [rsp + 4]
add r9d, edx
ror r9d, 0x1c
add r9d, r8d
xor eax, r9d
add eax, 0x4bdecfa9
add eax, dword [rsp + 0xc]
add r10d, eax
ror r10d, 0x15
add r10d, r9d
mov eax, r10d
mov edx, r10d
xor eax, r8d
xor eax, r9d
add eax, 0xf6bb4b60
add eax, r13d
add r11d, eax
ror r11d, 0x10
add r11d, r10d
xor edx, r11d
mov eax, edx
xor eax, r9d
add eax, 0xbebfbc70
add eax, r12d
add r8d, eax
mov eax, r11d
ror r8d, 9
add r8d, r11d
xor eax, r8d
xor edx, r8d
add edx, 0x289b7ec6
add edx, r15d
add r9d, edx
ror r9d, 0x1c
add r9d, r8d
xor eax, r9d
add eax, 0xeaa127fa
add eax, dword [rsp + 0x80]
add r10d, eax
ror r10d, 0x15
add r10d, r9d
mov eax, r10d
mov edx, r10d
xor eax, r8d
xor eax, r9d
add eax, 0xd4ef3085
add eax, dword [rsp]
add r11d, eax
ror r11d, 0x10
add r11d, r10d
xor edx, r11d
mov eax, edx
xor eax, r9d
add r9d, 0xd9d4d039
add eax, 0x4881d05
add eax, dword [rsp + 8]
add r8d, eax
mov eax, r11d
ror r8d, 9
add r8d, r11d
xor eax, r8d
xor edx, r8d
add edx, dword [rsp + 0x14]
add edx, r9d
lea r9d, [r10 - 0x1924661b]
lea r10d, [r11 + 0x1fa27cf8]
ror edx, 0x1c
add edx, r8d
lea r11d, [r8 - 0x3b53a99b]
xor eax, edx
add eax, r14d
add r9d, eax
ror r9d, 0x15
add r9d, edx
mov eax, r9d
xor eax, r8d
lea r8d, [rdx - 0xbd6ddbc]
xor eax, edx
add eax, ebp
add r10d, eax
mov eax, r9d
ror r10d, 0x10
add r10d, r9d
xor eax, r10d
xor eax, edx
lea edx, [r9 + 0x432aff97]
add eax, dword [rsp + 0x10]
add r11d, eax
mov eax, r9d
not eax
ror r11d, 9
add r11d, r10d
lea r9d, [r10 - 0x546bdc59]
or eax, r11d
xor eax, r10d
add eax, dword [rsp + 0x80]
add r8d, eax
mov eax, r10d
not eax
ror r8d, 0x1a
add r8d, r11d
lea r10d, [r11 - 0x36c5fc7]
or eax, r8d
xor eax, r11d
add eax, r13d
add edx, eax
mov eax, r11d
not eax
ror edx, 0x16
add edx, r8d
lea r11d, [r8 + 0x655b59c3]
or eax, edx
xor eax, r8d
add eax, esi
add r9d, eax
mov eax, r8d
not eax
ror r9d, 0x11
add r9d, edx
or eax, r9d
xor eax, edx
add eax, dword [rsp + 0x98]
add r10d, eax
mov eax, edx
not eax
ror r10d, 0xb
add r10d, r9d
or eax, r10d
xor eax, r9d
add eax, r14d
add r11d, eax
ror r11d, 0x1a
add r11d, r10d
lea r8d, [rdx - 0x70f3336e]
mov eax, r9d
lea edx, [r9 - 0x100b83]
not eax
lea r9d, [r10 - 0x7a7ba22f]
or eax, r11d
xor eax, r10d
add eax, dword [rsp]
add r8d, eax
mov eax, r10d
not eax
ror r8d, 0x16
add r8d, r11d
lea r10d, [r11 + 0x6fa87e4f]
or eax, r8d
xor eax, r11d
add eax, r12d
add edx, eax
mov eax, r11d
not eax
ror edx, 0x11
add edx, r8d
lea r11d, [r8 - 0x1d31920]
or eax, edx
xor eax, r8d
add eax, dword [rsp + 4]
add r9d, eax
mov eax, r8d
not eax
ror r9d, 0xb
add r9d, edx
lea r8d, [rdx - 0x5cfebcec]
or eax, r9d
xor eax, edx
add eax, dword [rsp + 0x18]
add r10d, eax
mov eax, edx
not eax
ror r10d, 0x1a
add r10d, r9d
lea edx, [r9 + 0x4e0811a1]
or eax, r10d
xor eax, r9d
add eax, ebp
add r11d, eax
lea ebx, [r10 - 0x8ac817e]
mov eax, r9d
ror r11d, 0x16
not eax
add r11d, r10d
or eax, r11d
xor eax, r10d
add eax, dword [rsp + 8]
add r8d, eax
lea r9d, [r11 - 0x42c50dcb]
ror r8d, 0x11
mov eax, r10d
not eax
add r8d, r11d
or eax, r8d
xor eax, r11d
add eax, r15d
add edx, eax
mov eax, r11d
not eax
ror edx, 0xb
add edx, r8d
or eax, edx
xor eax, r8d
add eax, dword [rsp + 0xc]
add ebx, eax
mov eax, r8d
not eax
ror ebx, 0x1a
add ebx, edx
or eax, ebx
xor eax, edx
add eax, edi
add r9d, eax
ror r9d, 0x16
mov rbp, qword [rsp + 0x88]
lea r11d, [rdx - 0x14792c6f]
add r9d, ebx
mov eax, ebx
not eax
add rbp, 0x40
mov r10d, edx
mov qword [rsp + 0x88], rbp
not r10d
or r10d, r9d
xor r10d, ebx
add ebx, dword [rsp + 0x20]
add r10d, 0x2ad7d2bb
add r10d, dword [rsp + 0x10]
add r10d, r8d
ror r10d, 0x11
add r10d, r9d
or eax, r10d
xor eax, r9d
add r9d, dword [rsp + 0x2c]
add eax, dword [rsp + 0x14]
add r11d, eax
ror r11d, 0xb
add r11d, dword [rsp + 0x24]
add r11d, r10d
add r10d, dword [rsp + 0x28]
add dword [rsp + 0x90], 0xffffffc0
jne 0x140002060
mov dword [rcx + 8], ebx
mov rax, rbp
mov dword [rcx + 0xc], r11d
mov dword [rcx + 0x10], r10d
mov dword [rcx + 0x14], r9d
add rsp, 0x38
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
pop rbx
ret