Function at 0x1801aef40
Capabilities:
Encode data using xor
Resolve function by parsing pe exports

Disassembly:
test r8, r8
je 0x1801af9b7
mov qword [rsp + 8], rcx
push rbx
push rdi
sub rsp, 0x68
mov ebx, dword [rcx + 4]
mov r11d, dword [rcx + 8]
mov r10d, dword [rcx + 0xc]
mov edi, dword [rcx]
mov qword [rsp + 0x60], rbp
mov qword [rsp + 0x58], rsi
mov qword [rsp + 0x50], r12
mov qword [rsp + 0x48], r13
mov qword [rsp + 0x40], r14
mov dword [rsp + 0x18], ebx
mov dword [rsp + 0x20], r11d
mov dword [rsp + 0x1c], r10d
mov rax, r8
mov qword [rsp + 0x38], r15
dec rax
movzx ecx, byte [rdx]
movzx r8d, byte [rdx + 4]
mov qword [rsp + 0x90], rax
movzx eax, byte [rdx + 1]
movzx r9d, byte [rdx + 8]
shl eax, 8
or ecx, eax
movzx eax, byte [rdx + 2]
shl eax, 0x10
or ecx, eax
movzx eax, byte [rdx + 3]
shl eax, 0x18
or ecx, eax
movzx eax, byte [rdx + 5]
shl eax, 8
mov dword [rsp + 0x88], ecx
or r8d, eax
movzx eax, byte [rdx + 6]
shl eax, 0x10
or r8d, eax
movzx eax, byte [rdx + 7]
shl eax, 0x18
or r8d, eax
mov eax, r10d
xor eax, r11d
mov dword [rsp + 0x14], r8d
and eax, ebx
xor eax, r10d
add eax, 0xd76aa478
add ecx, eax
movzx eax, byte [rdx + 9]
shl eax, 8
add ecx, edi
or r9d, eax
movzx eax, byte [rdx + 0xa]
rol ecx, 7
shl eax, 0x10
add ecx, ebx
or r9d, eax
movzx eax, byte [rdx + 0xb]
shl eax, 0x18
or r9d, eax
mov eax, r11d
xor eax, ebx
mov dword [rsp + 0xc], r9d
and eax, ecx
xor eax, r11d
add eax, r8d
lea r8d, [r10 - 0x173848aa]
movzx r10d, byte [rdx + 0xc]
add r8d, eax
movzx eax, byte [rdx + 0xd]
shl eax, 8
or r10d, eax
movzx eax, byte [rdx + 0xe]
shl eax, 0x10
or r10d, eax
movzx eax, byte [rdx + 0xf]
rol r8d, 0xc
shl eax, 0x18
add r8d, ecx
or r10d, eax
mov eax, ebx
xor eax, ecx
mov dword [rsp + 4], r10d
and eax, r8d
xor eax, ebx
add eax, r9d
lea r9d, [r11 + 0x242070db]
movzx r11d, byte [rdx + 0x10]
add r9d, eax
movzx eax, byte [rdx + 0x11]
shl eax, 8
ror r9d, 0xf
or r11d, eax
movzx eax, byte [rdx + 0x12]
add r9d, r8d
shl eax, 0x10
or r11d, eax
movzx eax, byte [rdx + 0x13]
shl eax, 0x18
movzx edi, byte [rdx + 0x18]
movzx r13d, byte [rdx + 0x1c]
or r11d, eax
mov eax, r8d
xor eax, ecx
mov dword [rsp + 8], r11d
and eax, r9d
xor eax, ecx
add eax, 0xc1bdceee
add r10d, eax
movzx eax, byte [rdx + 0x15]
shl eax, 8
add r10d, ebx
movzx ebx, byte [rdx + 0x14]
or ebx, eax
movzx eax, byte [rdx + 0x16]
ror r10d, 0xa
shl eax, 0x10
add r10d, r9d
or ebx, eax
movzx eax, byte [rdx + 0x17]
shl eax, 0x18
or ebx, eax
mov eax, r8d
xor eax, r9d
mov dword [rsp + 0x98], ebx
and eax, r10d
xor eax, r8d
add eax, r11d
lea r11d, [rcx - 0xa83f051]
mov ecx, r9d
add r11d, eax
movzx eax, byte [rdx + 0x19]
xor ecx, r10d
shl eax, 8
rol r11d, 7
or edi, eax
movzx eax, byte [rdx + 0x1a]
add r11d, r10d
shl eax, 0x10
and ecx, r11d
or edi, eax
movzx eax, byte [rdx + 0x1b]
xor ecx, r9d
shl eax, 0x18
add ecx, 0x4787c62a
or edi, eax
movzx eax, byte [rdx + 0x1d]
add ecx, ebx
shl eax, 8
add ecx, r8d
mov dword [rsp + 0x10], edi
or r13d, eax
movzx eax, byte [rdx + 0x1e]
rol ecx, 0xc
shl eax, 0x10
add ecx, r11d
mov r8d, r10d
or r13d, eax
movzx eax, byte [rdx + 0x1f]
xor r8d, r11d
shl eax, 0x18
and r8d, ecx
or r13d, eax
movzx eax, byte [rdx + 0x21]
xor r8d, r10d
shl eax, 8
add r8d, 0xa8304613
add r8d, edi
movzx edi, byte [rdx + 0x20]
or edi, eax
movzx eax, byte [rdx + 0x22]
add r8d, r9d
shl eax, 0x10
or edi, eax
movzx eax, byte [rdx + 0x23]
shl eax, 0x18
ror r8d, 0xf
add r8d, ecx
or edi, eax
movzx ebx, byte [rdx + 0x24]
movzx r12d, byte [rdx + 0x28]
movzx r14d, byte [rdx + 0x30]
mov eax, ecx
lea r9d, [r10 - 0x2b96aff]
lea r10d, [r11 + 0x698098d8]
xor eax, r11d
mov dword [rsp + 0x24], edi
and eax, r8d
xor eax, r11d
lea r11d, [rcx - 0x74bb0851]
add eax, r13d
add r9d, eax
movzx eax, byte [rdx + 0x25]
shl eax, 8
ror r9d, 0xa
or ebx, eax
movzx eax, byte [rdx + 0x26]
add r9d, r8d
shl eax, 0x10
or ebx, eax
movzx eax, byte [rdx + 0x27]
shl eax, 0x18
or ebx, eax
mov eax, ecx
xor eax, r8d
mov dword [rsp], ebx
and eax, r9d
xor eax, ecx
lea ecx, [r8 - 0xa44f]
add eax, edi
add r10d, eax
movzx eax, byte [rdx + 0x29]
shl eax, 8
rol r10d, 7
or r12d, eax
movzx eax, byte [rdx + 0x2a]
add r10d, r9d
shl eax, 0x10
or r12d, eax
movzx eax, byte [rdx + 0x2b]
shl eax, 0x18
or r12d, eax
mov eax, r8d
xor eax, r9d
and eax, r10d
xor eax, r8d
add eax, ebx
movzx ebx, byte [rdx + 0x2c]
add r11d, eax
movzx eax, byte [rdx + 0x2d]
shl eax, 8
or ebx, eax
movzx eax, byte [rdx + 0x2e]
shl eax, 0x10
or ebx, eax
movzx eax, byte [rdx + 0x2f]
rol r11d, 0xc
shl eax, 0x18
add r11d, r10d
or ebx, eax
mov eax, r9d
xor eax, r10d
mov dword [rsp + 0x28], ebx
and eax, r11d
xor eax, r9d
add eax, r12d
add ecx, eax
movzx eax, byte [rdx + 0x31]
shl eax, 8
or r14d, eax
movzx eax, byte [rdx + 0x32]
ror ecx, 0xf
shl eax, 0x10
add ecx, r11d
or r14d, eax
movzx eax, byte [rdx + 0x33]
shl eax, 0x18
or r14d, eax
mov eax, r11d
xor eax, r10d
and eax, ecx
movzx r15d, byte [rdx + 0x34]
movzx esi, byte [rdx + 0x38]
xor eax, r10d
movzx ebp, byte [rdx + 0x3c]
lea r8d, [r9 - 0x76a32842]
add eax, ebx
lea r9d, [r10 + 0x6b901122]
mov r10d, ecx
add r8d, eax
movzx eax, byte [rdx + 0x35]
lea rdx, [rdx + 0x40]
ror r8d, 0xa
shl eax, 8
or r15d, eax
movzx eax, byte [rdx - 0xa]
add r8d, ecx
shl eax, 0x10
xor r10d, r8d
or r15d, eax
movzx eax, byte [rdx - 9]
shl eax, 0x18
or r15d, eax
mov eax, r11d
xor eax, ecx
and eax, r8d
xor eax, r11d
add eax, r14d
add r9d, eax
movzx eax, byte [rdx - 7]
shl eax, 8
rol r9d, 7
or esi, eax
movzx eax, byte [rdx - 6]
add r9d, r8d
shl eax, 0x10
and r10d, r9d
or esi, eax
movzx eax, byte [rdx - 5]
xor r10d, ecx
shl eax, 0x18
add r10d, 0xfd987193
or esi, eax
movzx eax, byte [rdx - 3]
add r10d, r15d
shl eax, 8
add r10d, r11d
or ebp, eax
movzx eax, byte [rdx - 2]
shl eax, 0x10
rol r10d, 0xc
or ebp, eax
movzx eax, byte [rdx - 1]
add r10d, r9d
shl eax, 0x18
or ebp, eax
mov eax, r8d
xor eax, r9d
and eax, r10d
xor eax, r8d
add eax, 0xa679438e
add eax, esi
add ecx, eax
mov eax, r10d
xor eax, r9d
ror ecx, 0xf
add ecx, r10d
and eax, ecx
xor eax, r9d
add eax, 0x49b40821
add eax, ebp
add r8d, eax
mov eax, ecx
ror r8d, 0xa
add r8d, ecx
xor eax, r8d
and eax, r10d
xor eax, ecx
add eax, 0xf61e2562
add eax, dword [rsp + 0x14]
add r9d, eax
rol r9d, 5
lea r11d, [rcx + 0x265e5a51]
mov eax, r8d
add r9d, r8d
xor eax, r9d
and eax, ecx
lea ecx, [r8 - 0x16493856]
xor eax, r8d
add eax, 0xc040b340
add eax, dword [rsp + 0x10]
add r10d, eax
rol r10d, 9
add r10d, r9d
mov eax, r10d
xor eax, r9d
and eax, r8d
lea r8d, [r9 - 0x29d0efa3]
xor eax, r9d
add eax, ebx
add r11d, eax
mov eax, r10d
rol r11d, 0xe
add r11d, r10d
xor eax, r11d
and eax, r9d
lea r9d, [r10 + 0x2441453]
xor eax, r10d
add eax, dword [rsp + 0x88]
add ecx, eax
mov eax, r11d
ror ecx, 0xc
add ecx, r11d
xor eax, ecx
and eax, r10d
lea r10d, [r11 - 0x275e197f]
xor eax, r11d
add eax, dword [rsp + 0x98]
add r8d, eax
mov eax, ecx
rol r8d, 5
add r8d, ecx
xor eax, r8d
and eax, r11d
lea r11d, [rcx - 0x182c0438]
xor eax, ecx
add eax, r12d
add r9d, eax
rol r9d, 9
add r9d, r8d
mov eax, r9d
xor eax, r8d
and eax, ecx
lea ecx, [r8 + 0x21e1cde6]
xor eax, r8d
add eax, ebp
add r10d, eax
mov eax, r9d
rol r10d, 0xe
add r10d, r9d
xor eax, r10d
and eax, r8d
lea r8d, [r9 - 0x3cc8f82a]
xor eax, r9d
add eax, dword [rsp + 8]
add r11d, eax
mov eax, r10d
ror r11d, 0xc
add r11d, r10d
xor eax, r11d
and eax, r9d
xor eax, r10d
add eax, dword [rsp]
add ecx, eax
mov eax, r11d
rol ecx, 5
add ecx, r11d
xor eax, ecx
and eax, r10d
xor eax, r11d
add eax, esi
add r8d, eax
rol r8d, 9
lea ebx, [r10 - 0xb2af279]
lea r9d, [rcx - 0x561c16fb]
add r8d, ecx
mov eax, r8d
xor eax, ecx
lea r10d, [r8 - 0x3105c08]
and eax, r11d
xor eax, ecx
add eax, dword [rsp + 4]
add ebx, eax
mov eax, r8d
rol ebx, 0xe
add ebx, r8d
xor eax, ebx
and eax, ecx
xor eax, r8d
add eax, edi
lea edi, [r11 + 0x455a14ed]
lea r11d, [rbx + 0x676f02d9]
add edi, eax
mov eax, ebx
ror edi, 0xc
add edi, ebx
xor eax, edi
and eax, r8d
xor eax, ebx
add eax, r15d
add r9d, eax
mov eax, edi
rol r9d, 5
add r9d, edi
xor eax, r9d
and eax, ebx
mov ebx, dword [rsp + 0x28]
xor eax, edi
add eax, dword [rsp + 0xc]
add r10d, eax
rol r10d, 9
add r10d, r9d
mov eax, r10d
mov ecx, r10d
xor eax, r9d
and eax, edi
xor eax, r9d
add eax, r13d
add r11d, eax
rol r11d, 0xe
add r11d, r10d
xor ecx, r11d
mov eax, r11d
mov r8d, ecx
and r8d, r9d
xor r8d, r10d
add r8d, 0x8d2a4c8a
add r8d, r14d
add r8d, edi
ror r8d, 0xc
add r8d, r11d
xor eax, r8d
xor ecx, r8d
add ecx, 0xfffa3942
add ecx, dword [rsp + 0x98]
add r9d, ecx
rol r9d, 4
add r9d, r8d
xor eax, r9d
add eax, 0x8771f681
add eax, dword [rsp + 0x24]
add r10d, eax
rol r10d, 0xb
add r10d, r9d
mov eax, r10d
mov ecx, r10d
xor eax, r8d
xor eax, r9d
add eax, 0x6d9d6122
add eax, ebx
add r11d, eax
rol r11d, 0x10
add r11d, r10d
xor ecx, r11d
mov eax, ecx
xor eax, r9d
add eax, 0xfde5380c
add eax, esi
add r8d, eax
mov eax, r11d
ror r8d, 9
add r8d, r11d
xor eax, r8d
xor ecx, r8d
add ecx, 0xa4beea44
add ecx, dword [rsp + 0x14]
add r9d, ecx
rol r9d, 4
add r9d, r8d
xor eax, r9d
add eax, 0x4bdecfa9
add eax, dword [rsp + 8]
add r10d, eax
rol r10d, 0xb
add r10d, r9d
mov eax, r10d
mov ecx, r10d
xor eax, r8d
xor eax, r9d
add eax, 0xf6bb4b60
add eax, r13d
add r11d, eax
rol r11d, 0x10
add r11d, r10d
xor ecx, r11d
mov eax, ecx
xor eax, r9d
add eax, 0xbebfbc70
add eax, r12d
add r8d, eax
mov eax, r11d
ror r8d, 9
add r8d, r11d
xor eax, r8d
xor ecx, r8d
add ecx, 0x289b7ec6
add ecx, r15d
add r9d, ecx
rol r9d, 4
add r9d, r8d
xor eax, r9d
add eax, 0xeaa127fa
add eax, dword [rsp + 0x88]
add r10d, eax
rol r10d, 0xb
add r10d, r9d
mov eax, r10d
mov ecx, r10d
xor eax, r8d
xor eax, r9d
add eax, 0xd4ef3085
add eax, dword [rsp + 4]
add r11d, eax
rol r11d, 0x10
add r11d, r10d
xor ecx, r11d
mov eax, ecx
xor eax, r9d
add r9d, 0xd9d4d039
add eax, 0x4881d05
add eax, dword [rsp + 0x10]
add r8d, eax
mov eax, r11d
ror r8d, 9
add r8d, r11d
xor ecx, r8d
xor eax, r8d
add ecx, dword [rsp]
add ecx, r9d
lea r9d, [r10 - 0x1924661b]
rol ecx, 4
add ecx, r8d
xor eax, ecx
add eax, r14d
add r9d, eax
lea r10d, [r11 + 0x1fa27cf8]
lea r11d, [r8 - 0x3b53a99b]
rol r9d, 0xb
add r9d, ecx
mov eax, r9d
xor eax, r8d
lea r8d, [rcx - 0xbd6ddbc]
xor eax, ecx
add eax, ebp
add r10d, eax
mov eax, r9d
rol r10d, 0x10
add r10d, r9d
xor eax, r10d
xor eax, ecx
lea ecx, [r9 + 0x432aff97]
add eax, dword [rsp + 0xc]
add r11d, eax
mov eax, r9d
lea r9d, [r10 - 0x546bdc59]
not eax
ror r11d, 9
add r11d, r10d
or eax, r11d
xor eax, r10d
add eax, dword [rsp + 0x88]
add r8d, eax
mov eax, r10d
lea r10d, [r11 - 0x36c5fc7]
not eax
rol r8d, 6
add r8d, r11d
or eax, r8d
xor eax, r11d
add eax, r13d
add ecx, eax
mov eax, r11d
lea r11d, [r8 + 0x655b59c3]
not eax
rol ecx, 0xa
add ecx, r8d
or eax, ecx
xor eax, r8d
add eax, esi
add r9d, eax
mov eax, r8d
lea r8d, [rcx - 0x70f3336e]
not eax
rol r9d, 0xf
add r9d, ecx
or eax, r9d
xor eax, ecx
add eax, dword [rsp + 0x98]
add r10d, eax
mov eax, ecx
lea ecx, [r9 - 0x100b83]
not eax
ror r10d, 0xb
add r10d, r9d
or eax, r10d
xor eax, r9d
add eax, r14d
add r11d, eax
mov eax, r9d
not eax
rol r11d, 6
add r11d, r10d
or eax, r11d
xor eax, r10d
add eax, dword [rsp + 4]
add r8d, eax
mov eax, r10d
not eax
rol r8d, 0xa
add r8d, r11d
or eax, r8d
xor eax, r11d
add eax, r12d
add ecx, eax
rol ecx, 0xf
add ecx, r8d
lea r9d, [r10 - 0x7a7ba22f]
mov eax, r11d
not eax
lea r10d, [r11 + 0x6fa87e4f]
lea r11d, [r8 - 0x1d31920]
or eax, ecx
add ebx, 0xbd3af235
xor eax, r8d
add eax, dword [rsp + 0x14]
add r9d, eax
mov eax, r8d
lea r8d, [rcx - 0x5cfebcec]
not eax
ror r9d, 0xb
add r9d, ecx
or eax, r9d
xor eax, ecx
add eax, dword [rsp + 0x24]
add r10d, eax
mov eax, ecx
lea ecx, [r9 + 0x4e0811a1]
not eax
rol r10d, 6
add r10d, r9d
or eax, r10d
xor eax, r9d
add eax, ebp
add r11d, eax
mov eax, r9d
not eax
rol r11d, 0xa
add r11d, r10d
or eax, r11d
xor eax, r10d
add eax, dword [rsp + 0x10]
add r8d, eax
mov eax, r10d
not eax
rol r8d, 0xf
add r8d, r11d
or eax, r8d
mov r9d, r8d
xor eax, r11d
not r9d
add eax, r15d
add ecx, eax
mov eax, r11d
not eax
ror ecx, 0xb
add ecx, r8d
or eax, ecx
xor eax, r8d
add eax, 0xf7537e82
add eax, dword [rsp + 8]
add r10d, eax
mov eax, ecx
not eax
rol r10d, 6
add r10d, ecx
or r9d, r10d
xor r9d, ecx
add r9d, ebx
add r9d, r11d
rol r9d, 0xa
add r9d, r10d
or eax, r9d
xor eax, r10d
add eax, 0x2ad7d2bb
add eax, dword [rsp + 0xc]
add r8d, eax
mov eax, r10d
not eax
rol r8d, 0xf
add r8d, r9d
or eax, r8d
xor eax, r9d
add eax, 0xeb86d391
add eax, dword [rsp]
add ecx, eax
ror ecx, 0xb
mov rax, qword [rsp + 0x80]
add ecx, r8d
add dword [rax], r10d
mov r10d, dword [rsp + 0x18]
mov edi, dword [rax]
add r10d, ecx
mov ecx, dword [rsp + 0x20]
add ecx, r8d
mov dword [rax + 4], r10d
mov dword [rsp + 0x18], r10d
mov dword [rax + 8], ecx
mov dword [rsp + 0x20], ecx
mov r11d, ecx
mov ecx, dword [rsp + 0x1c]
mov ebx, r10d
add ecx, r9d
mov dword [rax + 0xc], ecx
mov rax, qword [rsp + 0x90]
mov dword [rsp + 0x1c], ecx
mov r10d, ecx
test rax, rax
jne 0x1801aef90
mov r15, qword [rsp + 0x38]
mov r14, qword [rsp + 0x40]
mov r13, qword [rsp + 0x48]
mov r12, qword [rsp + 0x50]
mov rsi, qword [rsp + 0x58]
mov rbp, qword [rsp + 0x60]
add rsp, 0x68
pop rdi
pop rbx
ret