Function at 0x1000b780
Capabilities:
Encode data using xor
Resolve function by parsing pe exports

Disassembly:
push ebp
push ebx
push esi
push edi
mov esi, dword [esp + 0x14]
mov edi, dword [esp + 0x18]
mov eax, dword [esp + 0x1c]
mov ebx, esp
call 0x1000b797
pop ebp
lea ebp, [ebp + 0x269]
sub esp, 0x10
and esp, 0xffffffc0
shl eax, 6
add eax, edi
mov dword [esp], esi
mov dword [esp + 4], edi
mov dword [esp + 8], eax
mov dword [esp + 0xc], ebx
nop
nop
nop
nop
nop
nop
nop
nop
mov eax, dword [edi]
mov ebx, dword [edi + 4]
mov ecx, dword [edi + 8]
mov edx, dword [edi + 0xc]
bswap eax
bswap ebx
bswap ecx
bswap edx
push eax
push ebx
push ecx
push edx
mov eax, dword [edi + 0x10]
mov ebx, dword [edi + 0x14]
mov ecx, dword [edi + 0x18]
mov edx, dword [edi + 0x1c]
bswap eax
bswap ebx
bswap ecx
bswap edx
push eax
push ebx
push ecx
push edx
mov eax, dword [edi + 0x20]
mov ebx, dword [edi + 0x24]
mov ecx, dword [edi + 0x28]
mov edx, dword [edi + 0x2c]
bswap eax
bswap ebx
bswap ecx
bswap edx
push eax
push ebx
push ecx
push edx
mov eax, dword [edi + 0x30]
mov ebx, dword [edi + 0x34]
mov ecx, dword [edi + 0x38]
mov edx, dword [edi + 0x3c]
bswap eax
bswap ebx
bswap ecx
bswap edx
push eax
push ebx
push ecx
push edx
add edi, 0x40
sub esp, 0x20
mov dword [esp + 0x64], edi
mov eax, dword [esi]
mov ebx, dword [esi + 4]
mov ecx, dword [esi + 8]
mov edi, dword [esi + 0xc]
mov dword [esp + 4], ebx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], edi
mov edx, dword [esi + 0x10]
mov ebx, dword [esi + 0x14]
mov ecx, dword [esi + 0x18]
mov edi, dword [esi + 0x1c]
mov dword [esp + 0x14], ebx
mov dword [esp + 0x18], ecx
mov dword [esp + 0x1c], edi
nop
nop
nop
nop
nop
nop
nop
nop
mov ebx, dword [esp + 0x5c]
mov ecx, edx
ror ecx, 0xe
mov esi, dword [esp + 0x14]
xor ecx, edx
ror ecx, 5
xor ecx, edx
ror ecx, 6
mov edi, dword [esp + 0x18]
add ebx, ecx
xor esi, edi
mov dword [esp + 0x10], edx
mov ecx, eax
and esi, edx
mov edx, dword [esp + 0xc]
xor esi, edi
mov edi, eax
add ebx, esi
ror ecx, 9
add ebx, dword [esp + 0x1c]
xor ecx, eax
ror ecx, 0xb
mov esi, dword [esp + 4]
xor ecx, eax
ror ecx, 2
add edx, ebx
mov edi, dword [esp + 8]
add ebx, ecx
mov dword [esp], eax
mov ecx, eax
sub esp, 4
or eax, esi
and ecx, esi
and eax, edi
mov esi, dword [ebp]
or eax, ecx
add ebp, 4
add eax, ebx
add edx, esi
add eax, esi
cmp esi, 0xc19bf174
jne 0x1000b860
mov ebx, dword [esp + 0x98]
nop
nop
nop
mov esi, ebx
mov ecx, dword [esp + 0x64]
ror esi, 0xb
mov edi, ecx
xor esi, ebx
ror esi, 7
shr ebx, 3
ror edi, 2
xor ebx, esi
xor edi, ecx
ror edi, 0x11
shr ecx, 0xa
add ebx, dword [esp + 0x9c]
xor edi, ecx
add ebx, dword [esp + 0x78]
mov ecx, edx
add ebx, edi
ror ecx, 0xe
mov esi, dword [esp + 0x14]
xor ecx, edx
ror ecx, 5
mov dword [esp + 0x5c], ebx
xor ecx, edx
ror ecx, 6
mov edi, dword [esp + 0x18]
add ebx, ecx
xor esi, edi
mov dword [esp + 0x10], edx
mov ecx, eax
and esi, edx
mov edx, dword [esp + 0xc]
xor esi, edi
mov edi, eax
add ebx, esi
ror ecx, 9
add ebx, dword [esp + 0x1c]
xor ecx, eax
ror ecx, 0xb
mov esi, dword [esp + 4]
xor ecx, eax
ror ecx, 2
add edx, ebx
mov edi, dword [esp + 8]
add ebx, ecx
mov dword [esp], eax
mov ecx, eax
sub esp, 4
or eax, esi
and ecx, esi
and eax, edi
mov esi, dword [ebp]
or eax, ecx
add ebp, 4
add eax, ebx
mov ebx, dword [esp + 0x98]
add edx, esi
add eax, esi
cmp esi, 0xc67178f2
jne 0x1000b8e0
mov esi, dword [esp + 0x160]
mov ebx, dword [esp + 4]
mov ecx, dword [esp + 8]
mov edi, dword [esp + 0xc]
add eax, dword [esi]
add ebx, dword [esi + 4]
add ecx, dword [esi + 8]
add edi, dword [esi + 0xc]
mov dword [esi], eax
mov dword [esi + 4], ebx
mov dword [esi + 8], ecx
mov dword [esi + 0xc], edi
mov eax, dword [esp + 0x14]
mov ebx, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov edi, dword [esp + 0x164]
add edx, dword [esi + 0x10]
add eax, dword [esi + 0x14]
add ebx, dword [esi + 0x18]
add ecx, dword [esi + 0x1c]
mov dword [esi + 0x10], edx
mov dword [esi + 0x14], eax
mov dword [esi + 0x18], ebx
mov dword [esi + 0x1c], ecx
add esp, 0x160
sub ebp, 0x100
cmp edi, dword [esp + 8]
jb 0x1000b7c0
mov esp, dword [esp + 0xc]
pop edi
pop esi
pop ebx
pop ebp
ret