Function at 0x140020de0
Capabilities:
Encode data using xor
Resolve function by parsing pe exports

Disassembly:
mov qword [rsp + 8], rbx
mov dword [rsp + 0x20], r9d
mov qword [rsp + 0x18], r8
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x30
mov ebx, dword [rdx + 8]
mov rsi, r8
mov r11d, dword [rdx + 0xc]
mov r10d, dword [rdx + 0x10]
mov r9d, dword [rdx + 0x14]
movzx eax, byte [rsi + 2]
movzx ecx, byte [rsi + 3]
shl ecx, 8
or ecx, eax
mov dword [rsp + 0x2c], r9d
movzx eax, byte [rsi + 1]
shl ecx, 8
or ecx, eax
mov dword [rsp + 0x28], r10d
movzx eax, byte [rsi]
shl ecx, 8
or ecx, eax
mov dword [rsp + 0x20], ebx
mov dword [rdx + 0x58], ecx
mov eax, r9d
movzx r8d, byte [rsi + 7]
xor eax, r10d
and eax, r11d
shl r8d, 8
xor eax, r9d
mov dword [rsp + 0x78], ecx
add eax, 0xd76aa478
mov dword [rsp + 0x24], r11d
add ecx, eax
movzx eax, byte [rsi + 6]
or r8d, eax
add ecx, ebx
movzx eax, byte [rsi + 5]
shl r8d, 8
or r8d, eax
ror ecx, 0x19
movzx eax, byte [rsi + 4]
add ecx, r11d
shl r8d, 8
or r8d, eax
mov eax, r10d
xor eax, r11d
mov dword [rdx + 0x5c], r8d
and eax, ecx
mov dword [rsp + 8], r8d
xor eax, r10d
add eax, r8d
lea r8d, [r9 - 0x173848aa]
movzx r9d, byte [rsi + 0xb]
add r8d, eax
movzx eax, byte [rsi + 0xa]
shl r9d, 8
or r9d, eax
ror r8d, 0x14
movzx eax, byte [rsi + 9]
add r8d, ecx
shl r9d, 8
or r9d, eax
movzx eax, byte [rsi + 8]
shl r9d, 8
or r9d, eax
mov eax, r11d
xor eax, ecx
mov dword [rdx + 0x60], r9d
and eax, r8d
mov dword [rsp + 0x14], r9d
xor eax, r11d
add eax, r9d
lea r9d, [r10 + 0x242070db]
movzx r10d, byte [rsi + 0xf]
add r9d, eax
movzx eax, byte [rsi + 0xe]
shl r10d, 8
or r10d, eax
ror r9d, 0xf
movzx eax, byte [rsi + 0xd]
add r9d, r8d
shl r10d, 8
or r10d, eax
movzx eax, byte [rsi + 0xc]
shl r10d, 8
or r10d, eax
mov eax, r8d
xor eax, ecx
mov dword [rsp + 4], r10d
mov dword [rdx + 0x64], r10d
and eax, r9d
xor eax, ecx
add eax, 0xc1bdceee
add r10d, eax
movzx eax, byte [rsi + 0x12]
add r10d, r11d
movzx r11d, byte [rsi + 0x13]
shl r11d, 8
or r11d, eax
ror r10d, 0xa
movzx eax, byte [rsi + 0x11]
add r10d, r9d
shl r11d, 8
or r11d, eax
movzx eax, byte [rsi + 0x10]
shl r11d, 8
or r11d, eax
mov eax, r8d
xor eax, r9d
mov dword [rdx + 0x68], r11d
and eax, r10d
mov dword [rsp + 0x10], r11d
xor eax, r8d
add eax, r11d
lea r11d, [rcx - 0xa83f051]
movzx ecx, byte [rsi + 0x17]
add r11d, eax
movzx eax, byte [rsi + 0x16]
shl ecx, 8
or ecx, eax
ror r11d, 0x19
movzx eax, byte [rsi + 0x15]
add r11d, r10d
shl ecx, 8
or ecx, eax
movzx eax, byte [rsi + 0x14]
shl ecx, 8
or ecx, eax
mov eax, r9d
xor eax, r10d
mov dword [rdx + 0x6c], ecx
and eax, r11d
mov dword [rsp], ecx
xor eax, r9d
add eax, 0x4787c62a
add ecx, eax
movzx eax, byte [rsi + 0x1a]
add ecx, r8d
movzx r8d, byte [rsi + 0x1b]
shl r8d, 8
or r8d, eax
ror ecx, 0x14
movzx eax, byte [rsi + 0x19]
add ecx, r11d
shl r8d, 8
or r8d, eax
movzx eax, byte [rsi + 0x18]
shl r8d, 8
or r8d, eax
mov eax, r10d
mov dword [rdx + 0x70], r8d
xor eax, r11d
movzx r12d, byte [rsi + 0x1f]
and eax, ecx
xor eax, r10d
shl r12d, 8
add eax, 0xa8304613
mov dword [rsp + 0xc], r8d
add r8d, eax
movzx eax, byte [rsi + 0x1e]
or r12d, eax
add r8d, r9d
movzx eax, byte [rsi + 0x1d]
shl r12d, 8
or r12d, eax
ror r8d, 0xf
movzx eax, byte [rsi + 0x1c]
add r8d, ecx
shl r12d, 8
or r12d, eax
mov dword [rdx + 0x74], r12d
lea r9d, [r10 - 0x2b96aff]
mov eax, ecx
xor eax, r11d
movzx r10d, byte [rsi + 0x23]
and eax, r8d
shl r10d, 8
xor eax, r11d
add eax, r12d
add r9d, eax
movzx eax, byte [rsi + 0x22]
or r10d, eax
ror r9d, 0xa
movzx eax, byte [rsi + 0x21]
add r9d, r8d
shl r10d, 8
or r10d, eax
movzx eax, byte [rsi + 0x20]
shl r10d, 8
or r10d, eax
mov eax, ecx
xor eax, r8d
mov dword [rdx + 0x78], r10d
and eax, r9d
mov dword [rsp + 0x1c], r10d
xor eax, ecx
add eax, r10d
lea r10d, [r11 + 0x698098d8]
movzx r11d, byte [rsi + 0x27]
add r10d, eax
movzx eax, byte [rsi + 0x26]
shl r11d, 8
or r11d, eax
ror r10d, 0x19
movzx eax, byte [rsi + 0x25]
add r10d, r9d
shl r11d, 8
or r11d, eax
movzx eax, byte [rsi + 0x24]
shl r11d, 8
or r11d, eax
mov eax, r8d
mov dword [rdx + 0x7c], r11d
xor eax, r9d
movzx r15d, byte [rsi + 0x2b]
and eax, r10d
xor eax, r8d
shl r15d, 8
add eax, r11d
mov dword [rsp + 0x18], r11d
lea r11d, [rcx - 0x74bb0851]
mov ecx, r9d
add r11d, eax
xor ecx, r10d
movzx eax, byte [rsi + 0x2a]
or r15d, eax
ror r11d, 0x14
movzx eax, byte [rsi + 0x29]
add r11d, r10d
and ecx, r11d
shl r15d, 8
or r15d, eax
xor ecx, r9d
movzx eax, byte [rsi + 0x28]
add ecx, 0xffff5bb1
shl r15d, 8
or r15d, eax
mov dword [rdx + 0x80], r15d
add ecx, r15d
movzx eax, byte [rsi + 0x2e]
add ecx, r8d
movzx r13d, byte [rsi + 0x2f]
shl r13d, 8
or r13d, eax
ror ecx, 0xf
movzx eax, byte [rsi + 0x2d]
add ecx, r11d
shl r13d, 8
or r13d, eax
movzx eax, byte [rsi + 0x2c]
shl r13d, 8
or r13d, eax
mov dword [rdx + 0x84], r13d
mov ebx, r11d
movzx eax, byte [rsi + 0x32]
xor ebx, r10d
movzx ebp, byte [rsi + 0x33]
and ebx, ecx
xor ebx, r10d
shl ebp, 8
or ebp, eax
add ebx, 0x895cd7be
movzx eax, byte [rsi + 0x31]
add ebx, r13d
add ebx, r9d
shl ebp, 8
or ebp, eax
ror ebx, 0xa
movzx eax, byte [rsi + 0x30]
add ebx, ecx
shl ebp, 8
mov r9d, ecx
or ebp, eax
xor r9d, ebx
mov dword [rdx + 0x88], ebp
mov r8d, r11d
movzx eax, byte [rsi + 0x36]
xor r8d, ecx
movzx r14d, byte [rsi + 0x37]
and r8d, ebx
shl r14d, 8
xor r8d, r11d
or r14d, eax
add r8d, 0x6b901122
movzx eax, byte [rsi + 0x35]
add r8d, ebp
add r8d, r10d
shl r14d, 8
or r14d, eax
ror r8d, 0x19
movzx eax, byte [rsi + 0x34]
lea r10d, [rcx - 0x5986bc72]
add r8d, ebx
shl r14d, 8
or r14d, eax
and r9d, r8d
mov dword [rdx + 0x8c], r14d
xor r9d, ecx
movzx eax, byte [rsi + 0x3a]
add r9d, 0xfd987193
movzx edi, byte [rsi + 0x3b]
add r9d, r14d
mov rcx, qword [rsp + 0x80]
add r9d, r11d
shl edi, 8
or edi, eax
ror r9d, 0x14
movzx eax, byte [rsi + 0x39]
add r9d, r8d
shl edi, 8
or edi, eax
movzx eax, byte [rsi + 0x38]
shl edi, 8
or edi, eax
mov eax, ebx
xor eax, r8d
mov dword [rdx + 0x90], edi
movzx esi, byte [rsi + 0x3f]
and eax, r9d
xor eax, ebx
shl esi, 8
add eax, edi
add r10d, eax
movzx eax, byte [rcx + 0x3e]
or esi, eax
ror r10d, 0xf
movzx eax, byte [rcx + 0x3d]
add r10d, r9d
shl esi, 8
or esi, eax
movzx eax, byte [rcx + 0x3c]
shl esi, 8
or esi, eax
mov ecx, r9d
mov dword [rdx + 0x94], esi
xor ecx, r8d
mov eax, r10d
and ecx, r10d
xor ecx, r8d
add ecx, 0x49b40821
add ecx, esi
add ecx, ebx
ror ecx, 0xa
add ecx, r10d
xor eax, ecx
and eax, r9d
xor eax, r10d
add eax, 0xf61e2562
lea r11d, [rcx - 0x16493856]
add eax, dword [rsp + 8]
add r8d, eax
mov eax, ecx
ror r8d, 0x1b
add r8d, ecx
xor eax, r8d
and eax, r10d
xor eax, ecx
add eax, 0xc040b340
add eax, dword [rsp + 0xc]
add r9d, eax
ror r9d, 0x17
add r9d, r8d
mov eax, r9d
xor eax, r8d
and eax, ecx
lea ecx, [r8 - 0x29d0efa3]
xor eax, r8d
add eax, 0x265e5a51
add eax, r13d
add r10d, eax
mov eax, r9d
ror r10d, 0x12
add r10d, r9d
xor eax, r10d
and eax, r8d
lea r8d, [r9 + 0x2441453]
xor eax, r9d
add eax, dword [rsp + 0x78]
add r11d, eax
mov eax, r10d
ror r11d, 0xc
add r11d, r10d
xor eax, r11d
and eax, r9d
lea r9d, [r10 - 0x275e197f]
xor eax, r10d
add eax, dword [rsp]
add ecx, eax
mov eax, r11d
ror ecx, 0x1b
add ecx, r11d
xor eax, ecx
and eax, r10d
lea r10d, [r11 - 0x182c0438]
xor eax, r11d
add eax, r15d
add r8d, eax
ror r8d, 0x17
add r8d, ecx
mov eax, r8d
xor eax, ecx
and eax, r11d
xor eax, ecx
add eax, esi
add r9d, eax
mov eax, r8d
ror r9d, 0x12
add r9d, r8d
xor eax, r9d
and eax, ecx
xor eax, r8d
add eax, dword [rsp + 0x10]
add r10d, eax
ror r10d, 0xc
add r10d, r9d
lea r11d, [rcx + 0x21e1cde6]
lea ecx, [r8 - 0x3cc8f82a]
mov eax, r9d
xor eax, r10d
and eax, r8d
lea r8d, [r9 - 0xb2af279]
xor eax, r9d
lea ebx, [r10 + 0x455a14ed]
add eax, dword [rsp + 0x18]
add r11d, eax
mov eax, r10d
ror r11d, 0x1b
add r11d, r10d
xor eax, r11d
and eax, r9d
xor eax, r10d
add eax, edi
lea r9d, [r11 - 0x561c16fb]
add ecx, eax
ror ecx, 0x17
add ecx, r11d
mov eax, ecx
xor eax, r11d
and eax, r10d
xor eax, r11d
lea r10d, [rcx - 0x3105c08]
add eax, dword [rsp + 4]
add r8d, eax
mov eax, ecx
ror r8d, 0x12
add r8d, ecx
xor eax, r8d
and eax, r11d
xor eax, ecx
add eax, dword [rsp + 0x1c]
lea r11d, [r8 + 0x676f02d9]
add ebx, eax
mov eax, r8d
ror ebx, 0xc
add ebx, r8d
xor eax, ebx
and eax, ecx
xor eax, r8d
add eax, r14d
add r9d, eax
mov eax, ebx
ror r9d, 0x1b
add r9d, ebx
xor eax, r9d
and eax, r8d
xor eax, ebx
add eax, dword [rsp + 0x14]
add r10d, eax
ror r10d, 0x17
add r10d, r9d
mov eax, r10d
mov ecx, r10d
xor eax, r9d
and eax, ebx
xor eax, r9d
add eax, r12d
add r11d, eax
ror r11d, 0x12
add r11d, r10d
xor ecx, r11d
mov eax, r11d
mov r8d, ecx
and r8d, r9d
xor r8d, r10d
add r8d, 0x8d2a4c8a
add r8d, ebp
add r8d, ebx
ror r8d, 0xc
add r8d, r11d
xor ecx, r8d
add ecx, 0xfffa3942
add ecx, dword [rsp]
add r9d, ecx
ror r9d, 0x1c
add r9d, r8d
xor eax, r8d
xor eax, r9d
add eax, 0x8771f681
add eax, dword [rsp + 0x1c]
add r10d, eax
ror r10d, 0x15
add r10d, r9d
mov eax, r10d
mov ecx, r10d
xor eax, r8d
xor eax, r9d
add eax, 0x6d9d6122
add eax, r13d
add r11d, eax
ror r11d, 0x10
add r11d, r10d
xor ecx, r11d
mov eax, ecx
xor eax, r9d
add eax, 0xfde5380c
add eax, edi
add r8d, eax
mov eax, r11d
ror r8d, 9
add r8d, r11d
xor eax, r8d
xor ecx, r8d
add ecx, 0xa4beea44
add ecx, dword [rsp + 8]
add r9d, ecx
ror r9d, 0x1c
add r9d, r8d
xor eax, r9d
add eax, 0x4bdecfa9
add eax, dword [rsp + 0x10]
add r10d, eax
ror r10d, 0x15
add r10d, r9d
mov eax, r10d
mov ecx, r10d
xor eax, r8d
xor eax, r9d
add eax, 0xf6bb4b60
add eax, r12d
add r11d, eax
ror r11d, 0x10
add r11d, r10d
xor ecx, r11d
mov eax, ecx
xor eax, r9d
add eax, 0xbebfbc70
add eax, r15d
add r8d, eax
mov eax, r11d
ror r8d, 9
add r8d, r11d
xor eax, r8d
xor ecx, r8d
add ecx, 0x289b7ec6
add ecx, r14d
add r9d, ecx
ror r9d, 0x1c
add r9d, r8d
xor eax, r9d
add eax, 0xeaa127fa
add eax, dword [rsp + 0x78]
add r10d, eax
ror r10d, 0x15
add r10d, r9d
mov eax, r10d
mov ecx, r10d
xor eax, r8d
xor eax, r9d
add eax, 0xd4ef3085
add eax, dword [rsp + 4]
add r11d, eax
ror r11d, 0x10
add r11d, r10d
xor ecx, r11d
mov eax, ecx
xor eax, r9d
add eax, 0x4881d05
add r9d, 0xd9d4d039
add eax, dword [rsp + 0xc]
add r8d, eax
mov eax, r11d
ror r8d, 9
add r8d, r11d
xor eax, r8d
xor ecx, r8d
add ecx, dword [rsp + 0x18]
add ecx, r9d
lea r9d, [r10 - 0x1924661b]
lea r10d, [r11 + 0x1fa27cf8]
ror ecx, 0x1c
add ecx, r8d
lea r11d, [r8 - 0x3b53a99b]
xor eax, ecx
add eax, ebp
add r9d, eax
ror r9d, 0x15
add r9d, ecx
mov eax, r9d
xor eax, r8d
lea r8d, [rcx - 0xbd6ddbc]
xor eax, ecx
add eax, esi
add r10d, eax
mov eax, r9d
ror r10d, 0x10
add r10d, r9d
xor eax, r10d
xor eax, ecx
lea ecx, [r9 + 0x432aff97]
add eax, dword [rsp + 0x14]
add r11d, eax
mov eax, r9d
not eax
ror r11d, 9
add r11d, r10d
lea r9d, [r10 - 0x546bdc59]
or eax, r11d
xor eax, r10d
add eax, dword [rsp + 0x78]
add r8d, eax
mov eax, r10d
not eax
ror r8d, 0x1a
add r8d, r11d
lea r10d, [r11 - 0x36c5fc7]
or eax, r8d
xor eax, r11d
add eax, r12d
add ecx, eax
mov eax, r11d
not eax
ror ecx, 0x16
add ecx, r8d
lea r11d, [r8 + 0x655b59c3]
or eax, ecx
xor eax, r8d
add eax, edi
add r9d, eax
mov eax, r8d
not eax
ror r9d, 0x11
add r9d, ecx
or eax, r9d
xor eax, ecx
add eax, dword [rsp]
add r10d, eax
mov eax, ecx
not eax
ror r10d, 0xb
add r10d, r9d
or eax, r10d
xor eax, r9d
add eax, ebp
add r11d, eax
mov eax, r9d
ror r11d, 0x1a
add r11d, r10d
not eax
lea r8d, [rcx - 0x70f3336e]
or eax, r11d
lea ecx, [r9 - 0x100b83]
xor eax, r10d
lea r9d, [r10 - 0x7a7ba22f]
add eax, dword [rsp + 4]
add r8d, eax
mov eax, r10d
not eax
ror r8d, 0x16
add r8d, r11d
lea r10d, [r11 + 0x6fa87e4f]
or eax, r8d
xor eax, r11d
add eax, r15d
add ecx, eax
mov eax, r11d
not eax
ror ecx, 0x11
add ecx, r8d
lea r11d, [r8 - 0x1d31920]
or eax, ecx
xor eax, r8d
add eax, dword [rsp + 8]
add r9d, eax
mov eax, r8d
not eax
ror r9d, 0xb
add r9d, ecx
lea r8d, [rcx - 0x5cfebcec]
or eax, r9d
xor eax, ecx
add eax, dword [rsp + 0x1c]
add r10d, eax
mov eax, ecx
not eax
ror r10d, 0x1a
add r10d, r9d
lea ecx, [r9 + 0x4e0811a1]
or eax, r10d
xor eax, r9d
add eax, esi
add r11d, eax
lea ebx, [r10 - 0x8ac817e]
mov eax, r9d
ror r11d, 0x16
not eax
add r11d, r10d
or eax, r11d
xor eax, r10d
add eax, dword [rsp + 0xc]
add r8d, eax
lea r9d, [r11 - 0x42c50dcb]
ror r8d, 0x11
mov eax, r10d
not eax
add r8d, r11d
or eax, r8d
xor eax, r11d
add eax, r14d
add ecx, eax
mov eax, r11d
not eax
ror ecx, 0xb
add ecx, r8d
or eax, ecx
mov r10d, ecx
xor eax, r8d
add eax, dword [rsp + 0x10]
add ebx, eax
mov eax, r8d
not eax
ror ebx, 0x1a
add ebx, ecx
or eax, ebx
xor eax, ecx
add eax, r13d
add r9d, eax
ror r9d, 0x16
add r9d, ebx
mov rsi, qword [rsp + 0x80]
lea r11d, [rcx - 0x14792c6f]
not r10d
mov eax, ebx
or r10d, r9d
not eax
xor r10d, ebx
add rsi, 0x40
add ebx, dword [rsp + 0x20]
add r10d, 0x2ad7d2bb
add r10d, dword [rsp + 0x14]
add r10d, r8d
mov qword [rsp + 0x80], rsi
ror r10d, 0x11
add r10d, r9d
or eax, r10d
xor eax, r9d
add r9d, dword [rsp + 0x2c]
add eax, dword [rsp + 0x18]
add r11d, eax
ror r11d, 0xb
add r11d, dword [rsp + 0x24]
add r11d, r10d
add r10d, dword [rsp + 0x28]
add dword [rsp + 0x88], 0xffffffc0
jne 0x140020e10
mov dword [rdx + 8], ebx
mov rax, rsi
mov rbx, qword [rsp + 0x70]
mov dword [rdx + 0xc], r11d
mov dword [rdx + 0x10], r10d
mov dword [rdx + 0x14], r9d
add rsp, 0x30
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret