Function at 0x1402b0d00
Capabilities:
Encode data using xor
Resolve function by parsing pe exports

Disassembly:
test r8, r8
je 0x1402b1781
mov qword [rsp + 8], rcx
push rbx
push rdi
sub rsp, 0x68
mov edi, dword [rcx]
mov rax, r8
mov ebx, dword [rcx + 4]
mov r11d, dword [rcx + 8]
mov r10d, dword [rcx + 0xc]
mov qword [rsp + 0x60], rbp
mov qword [rsp + 0x58], rsi
mov qword [rsp + 0x50], r12
mov qword [rsp + 0x48], r13
mov qword [rsp + 0x40], r14
mov qword [rsp + 0x38], r15
mov dword [rsp + 0x18], edi
mov dword [rsp + 0x1c], ebx
mov dword [rsp + 0x20], r11d
mov dword [rsp + 0x24], r10d
nop dword [rax]
nop dword [rax + rax]
dec rax
movzx ecx, byte [rdx]
mov qword [rsp + 0x90], rax
movzx eax, byte [rdx + 1]
shl eax, 8
or ecx, eax
movzx r8d, byte [rdx + 4]
movzx eax, byte [rdx + 2]
shl eax, 0x10
or ecx, eax
movzx r9d, byte [rdx + 8]
movzx eax, byte [rdx + 3]
shl eax, 0x18
or ecx, eax
movzx eax, byte [rdx + 5]
shl eax, 8
or r8d, eax
mov dword [rsp + 0x88], ecx
movzx eax, byte [rdx + 6]
shl eax, 0x10
or r8d, eax
movzx eax, byte [rdx + 7]
shl eax, 0x18
or r8d, eax
mov eax, r10d
xor eax, r11d
mov dword [rsp + 4], r8d
and eax, ebx
xor eax, r10d
add eax, 0xd76aa478
add ecx, eax
movzx eax, byte [rdx + 9]
shl eax, 8
add ecx, edi
or r9d, eax
ror ecx, 0x19
movzx eax, byte [rdx + 0xa]
add ecx, ebx
shl eax, 0x10
or r9d, eax
movzx eax, byte [rdx + 0xb]
shl eax, 0x18
or r9d, eax
mov eax, r11d
xor eax, ebx
mov dword [rsp + 0x10], r9d
and eax, ecx
xor eax, r11d
add eax, r8d
lea r8d, [r10 - 0x173848aa]
movzx r10d, byte [rdx + 0xc]
add r8d, eax
movzx eax, byte [rdx + 0xd]
shl eax, 8
or r10d, eax
ror r8d, 0x14
movzx eax, byte [rdx + 0xe]
add r8d, ecx
shl eax, 0x10
or r10d, eax
movzx eax, byte [rdx + 0xf]
shl eax, 0x18
or r10d, eax
mov eax, ebx
xor eax, ecx
mov dword [rsp], r10d
and eax, r8d
xor eax, ebx
add eax, r9d
lea r9d, [r11 + 0x242070db]
movzx r11d, byte [rdx + 0x10]
add r9d, eax
movzx eax, byte [rdx + 0x11]
shl eax, 8
or r11d, eax
ror r9d, 0xf
movzx eax, byte [rdx + 0x12]
add r9d, r8d
shl eax, 0x10
or r11d, eax
movzx eax, byte [rdx + 0x13]
shl eax, 0x18
or r11d, eax
movzx edi, byte [rdx + 0x18]
movzx r13d, byte [rdx + 0x1c]
mov eax, r8d
xor eax, ecx
mov dword [rsp + 0xc], r11d
and eax, r9d
xor eax, ecx
add eax, 0xc1bdceee
add r10d, eax
movzx eax, byte [rdx + 0x15]
shl eax, 8
add r10d, ebx
movzx ebx, byte [rdx + 0x14]
or ebx, eax
ror r10d, 0xa
movzx eax, byte [rdx + 0x16]
add r10d, r9d
shl eax, 0x10
or ebx, eax
movzx eax, byte [rdx + 0x17]
shl eax, 0x18
or ebx, eax
mov eax, r8d
xor eax, r9d
mov dword [rsp + 0x98], ebx
and eax, r10d
xor eax, r8d
add eax, r11d
lea r11d, [rcx - 0xa83f051]
add r11d, eax
mov ecx, r9d
movzx eax, byte [rdx + 0x19]
xor ecx, r10d
shl eax, 8
or edi, eax
ror r11d, 0x19
movzx eax, byte [rdx + 0x1a]
add r11d, r10d
shl eax, 0x10
and ecx, r11d
or edi, eax
xor ecx, r9d
movzx eax, byte [rdx + 0x1b]
add ecx, 0x4787c62a
shl eax, 0x18
add ecx, ebx
or edi, eax
add ecx, r8d
movzx eax, byte [rdx + 0x1d]
mov r8d, r10d
shl eax, 8
xor r8d, r11d
or r13d, eax
mov dword [rsp + 8], edi
movzx eax, byte [rdx + 0x1e]
shl eax, 0x10
or r13d, eax
ror ecx, 0x14
movzx eax, byte [rdx + 0x1f]
add ecx, r11d
shl eax, 0x18
and r8d, ecx
or r13d, eax
xor r8d, r10d
movzx eax, byte [rdx + 0x21]
add r8d, 0xa8304613
add r8d, edi
shl eax, 8
movzx edi, byte [rdx + 0x20]
add r8d, r9d
or edi, eax
ror r8d, 0xf
movzx eax, byte [rdx + 0x22]
add r8d, ecx
shl eax, 0x10
or edi, eax
movzx eax, byte [rdx + 0x23]
shl eax, 0x18
or edi, eax
movzx ebx, byte [rdx + 0x24]
lea r9d, [r10 - 0x2b96aff]
movzx r12d, byte [rdx + 0x28]
lea r10d, [r11 + 0x698098d8]
movzx r14d, byte [rdx + 0x30]
mov eax, ecx
xor eax, r11d
mov dword [rsp + 0x28], edi
and eax, r8d
xor eax, r11d
lea r11d, [rcx - 0x74bb0851]
add eax, r13d
add r9d, eax
movzx eax, byte [rdx + 0x25]
shl eax, 8
or ebx, eax
ror r9d, 0xa
movzx eax, byte [rdx + 0x26]
add r9d, r8d
shl eax, 0x10
or ebx, eax
movzx eax, byte [rdx + 0x27]
shl eax, 0x18
or ebx, eax
mov eax, ecx
xor eax, r8d
mov dword [rsp + 0x14], ebx
and eax, r9d
xor eax, ecx
lea ecx, [r8 - 0xa44f]
add eax, edi
add r10d, eax
movzx eax, byte [rdx + 0x29]
shl eax, 8
or r12d, eax
ror r10d, 0x19
movzx eax, byte [rdx + 0x2a]
add r10d, r9d
shl eax, 0x10
or r12d, eax
movzx eax, byte [rdx + 0x2b]
shl eax, 0x18
or r12d, eax
mov eax, r8d
xor eax, r9d
and eax, r10d
xor eax, r8d
add eax, ebx
movzx ebx, byte [rdx + 0x2c]
add r11d, eax
movzx eax, byte [rdx + 0x2d]
shl eax, 8
or ebx, eax
ror r11d, 0x14
movzx eax, byte [rdx + 0x2e]
add r11d, r10d
shl eax, 0x10
or ebx, eax
movzx eax, byte [rdx + 0x2f]
shl eax, 0x18
or ebx, eax
mov eax, r9d
xor eax, r10d
mov dword [rsp + 0x2c], ebx
and eax, r11d
xor eax, r9d
add eax, r12d
add ecx, eax
movzx eax, byte [rdx + 0x31]
shl eax, 8
or r14d, eax
ror ecx, 0xf
movzx eax, byte [rdx + 0x32]
add ecx, r11d
shl eax, 0x10
or r14d, eax
movzx eax, byte [rdx + 0x33]
shl eax, 0x18
or r14d, eax
mov eax, r11d
xor eax, r10d
and eax, ecx
movzx r15d, byte [rdx + 0x34]
xor eax, r10d
movzx esi, byte [rdx + 0x38]
add eax, ebx
movzx ebp, byte [rdx + 0x3c]
lea r8d, [r9 - 0x76a32842]
add r8d, eax
lea r9d, [r10 + 0x6b901122]
movzx eax, byte [rdx + 0x35]
lea rdx, [rdx + 0x40]
shl eax, 8
mov r10d, ecx
or r15d, eax
ror r8d, 0xa
movzx eax, byte [rdx - 0xa]
add r8d, ecx
shl eax, 0x10
xor r10d, r8d
or r15d, eax
movzx eax, byte [rdx - 9]
shl eax, 0x18
or r15d, eax
mov eax, r11d
xor eax, ecx
and eax, r8d
xor eax, r11d
add eax, r14d
add r9d, eax
movzx eax, byte [rdx - 7]
shl eax, 8
or esi, eax
ror r9d, 0x19
movzx eax, byte [rdx - 6]
add r9d, r8d
shl eax, 0x10
and r10d, r9d
or esi, eax
xor r10d, ecx
movzx eax, byte [rdx - 5]
add r10d, 0xfd987193
shl eax, 0x18
add r10d, r15d
or esi, eax
add r10d, r11d
movzx eax, byte [rdx - 3]
shl eax, 8
or ebp, eax
ror r10d, 0x14
movzx eax, byte [rdx - 2]
add r10d, r9d
shl eax, 0x10
or ebp, eax
movzx eax, byte [rdx - 1]
shl eax, 0x18
or ebp, eax
mov eax, r8d
xor eax, r9d
and eax, r10d
xor eax, r8d
add eax, 0xa679438e
add eax, esi
add ecx, eax
mov eax, r10d
xor eax, r9d
ror ecx, 0xf
add ecx, r10d
and eax, ecx
xor eax, r9d
add eax, 0x49b40821
add eax, ebp
add r8d, eax
mov eax, ecx
ror r8d, 0xa
add r8d, ecx
xor eax, r8d
and eax, r10d
xor eax, ecx
add eax, 0xf61e2562
add eax, dword [rsp + 4]
add r9d, eax
lea r11d, [rcx + 0x265e5a51]
ror r9d, 0x1b
add r9d, r8d
mov eax, r8d
xor eax, r9d
and eax, ecx
lea ecx, [r8 - 0x16493856]
xor eax, r8d
add eax, 0xc040b340
add eax, dword [rsp + 8]
add r10d, eax
ror r10d, 0x17
add r10d, r9d
mov eax, r10d
xor eax, r9d
and eax, r8d
lea r8d, [r9 - 0x29d0efa3]
xor eax, r9d
add eax, ebx
add r11d, eax
mov eax, r10d
ror r11d, 0x12
add r11d, r10d
xor eax, r11d
and eax, r9d
lea r9d, [r10 + 0x2441453]
xor eax, r10d
add eax, dword [rsp + 0x88]
add ecx, eax
mov eax, r11d
ror ecx, 0xc
add ecx, r11d
xor eax, ecx
and eax, r10d
lea r10d, [r11 - 0x275e197f]
xor eax, r11d
add eax, dword [rsp + 0x98]
add r8d, eax
mov eax, ecx
ror r8d, 0x1b
add r8d, ecx
xor eax, r8d
and eax, r11d
lea r11d, [rcx - 0x182c0438]
xor eax, ecx
add eax, r12d
add r9d, eax
ror r9d, 0x17
add r9d, r8d
mov eax, r9d
xor eax, r8d
and eax, ecx
lea ecx, [r8 + 0x21e1cde6]
xor eax, r8d
add eax, ebp
add r10d, eax
mov eax, r9d
ror r10d, 0x12
add r10d, r9d
xor eax, r10d
and eax, r8d
lea r8d, [r9 - 0x3cc8f82a]
xor eax, r9d
add eax, dword [rsp + 0xc]
add r11d, eax
mov eax, r10d
ror r11d, 0xc
add r11d, r10d
xor eax, r11d
and eax, r9d
xor eax, r10d
add eax, dword [rsp + 0x14]
add ecx, eax
mov eax, r11d
ror ecx, 0x1b
add ecx, r11d
xor eax, ecx
and eax, r10d
xor eax, r11d
add eax, esi
add r8d, eax
ror r8d, 0x17
lea ebx, [r10 - 0xb2af279]
add r8d, ecx
lea r9d, [rcx - 0x561c16fb]
mov eax, r8d
xor eax, ecx
and eax, r11d
xor eax, ecx
lea r10d, [r8 - 0x3105c08]
add eax, dword [rsp]
add ebx, eax
mov eax, r8d
ror ebx, 0x12
add ebx, r8d
xor eax, ebx
and eax, ecx
xor eax, r8d
add eax, edi
lea edi, [r11 + 0x455a14ed]
add edi, eax
mov eax, ebx
ror edi, 0xc
add edi, ebx
xor eax, edi
and eax, r8d
xor eax, ebx
add eax, r15d
add r9d, eax
mov eax, edi
ror r9d, 0x1b
add r9d, edi
xor eax, r9d
and eax, ebx
xor eax, edi
add eax, dword [rsp + 0x10]
add r10d, eax
ror r10d, 0x17
add r10d, r9d
mov r11d, r10d
mov ecx, r10d
xor r11d, r9d
and r11d, edi
xor r11d, r9d
add r11d, 0x676f02d9
add r11d, r13d
add r11d, ebx
ror r11d, 0x12
add r11d, r10d
xor ecx, r11d
mov eax, r11d
mov r8d, ecx
and r8d, r9d
xor r8d, r10d
add r8d, 0x8d2a4c8a
add r8d, r14d
add r8d, edi
ror r8d, 0xc
add r8d, r11d
xor eax, r8d
xor ecx, r8d
add ecx, 0xfffa3942
add ecx, dword [rsp + 0x98]
add r9d, ecx
ror r9d, 0x1c
add r9d, r8d
xor eax, r9d
add eax, 0x8771f681
add eax, dword [rsp + 0x28]
add r10d, eax
ror r10d, 0x15
add r10d, r9d
mov eax, r10d
mov ecx, r10d
xor eax, r8d
xor eax, r9d
add eax, 0x6d9d6122
add eax, dword [rsp + 0x2c]
add r11d, eax
ror r11d, 0x10
add r11d, r10d
xor ecx, r11d
mov eax, ecx
xor eax, r9d
add eax, 0xfde5380c
add eax, esi
add r8d, eax
mov eax, r11d
ror r8d, 9
add r8d, r11d
xor eax, r8d
xor ecx, r8d
add ecx, 0xa4beea44
add ecx, dword [rsp + 4]
add r9d, ecx
ror r9d, 0x1c
add r9d, r8d
xor eax, r9d
add eax, 0x4bdecfa9
add eax, dword [rsp + 0xc]
add r10d, eax
ror r10d, 0x15
add r10d, r9d
mov eax, r10d
mov ecx, r10d
xor eax, r8d
xor eax, r9d
add eax, 0xf6bb4b60
add eax, r13d
add r11d, eax
ror r11d, 0x10
add r11d, r10d
xor ecx, r11d
mov eax, ecx
xor eax, r9d
add eax, 0xbebfbc70
add eax, r12d
add r8d, eax
mov eax, r11d
ror r8d, 9
add r8d, r11d
xor eax, r8d
xor ecx, r8d
add ecx, 0x289b7ec6
add ecx, r15d
add r9d, ecx
ror r9d, 0x1c
add r9d, r8d
xor eax, r9d
add eax, 0xeaa127fa
add eax, dword [rsp + 0x88]
add r10d, eax
ror r10d, 0x15
add r10d, r9d
mov eax, r10d
mov ecx, r10d
xor eax, r8d
xor eax, r9d
add eax, 0xd4ef3085
add eax, dword [rsp]
add r11d, eax
ror r11d, 0x10
add r11d, r10d
xor ecx, r11d
mov eax, ecx
xor eax, r9d
add r9d, 0xd9d4d039
add eax, 0x4881d05
add eax, dword [rsp + 8]
add r8d, eax
mov eax, r11d
ror r8d, 9
add r8d, r11d
xor ecx, r8d
xor eax, r8d
add ecx, dword [rsp + 0x14]
add ecx, r9d
lea r9d, [r10 - 0x1924661b]
ror ecx, 0x1c
add ecx, r8d
xor eax, ecx
add eax, r14d
add r9d, eax
lea r10d, [r11 + 0x1fa27cf8]
ror r9d, 0x15
add r9d, ecx
lea r11d, [r8 - 0x3b53a99b]
mov eax, r9d
xor eax, r8d
lea r8d, [rcx - 0xbd6ddbc]
xor eax, ecx
add eax, ebp
add r10d, eax
mov eax, r9d
ror r10d, 0x10
add r10d, r9d
xor eax, r10d
xor eax, ecx
lea ecx, [r9 + 0x432aff97]
add eax, dword [rsp + 0x10]
add r11d, eax
mov eax, r9d
not eax
ror r11d, 9
add r11d, r10d
lea r9d, [r10 - 0x546bdc59]
or eax, r11d
xor eax, r10d
add eax, dword [rsp + 0x88]
add r8d, eax
mov eax, r10d
not eax
ror r8d, 0x1a
add r8d, r11d
lea r10d, [r11 - 0x36c5fc7]
or eax, r8d
xor eax, r11d
add eax, r13d
add ecx, eax
mov eax, r11d
not eax
ror ecx, 0x16
add ecx, r8d
lea r11d, [r8 + 0x655b59c3]
or eax, ecx
xor eax, r8d
add eax, esi
add r9d, eax
mov eax, r8d
not eax
ror r9d, 0x11
add r9d, ecx
lea r8d, [rcx - 0x70f3336e]
or eax, r9d
xor eax, ecx
add eax, dword [rsp + 0x98]
add r10d, eax
mov eax, ecx
not eax
ror r10d, 0xb
add r10d, r9d
lea ecx, [r9 - 0x100b83]
or eax, r10d
xor eax, r9d
add eax, r14d
add r11d, eax
mov eax, r9d
not eax
ror r11d, 0x1a
add r11d, r10d
or eax, r11d
xor eax, r10d
add eax, dword [rsp]
add r8d, eax
mov eax, r10d
not eax
ror r8d, 0x16
add r8d, r11d
or eax, r8d
xor eax, r11d
add eax, r12d
add ecx, eax
ror ecx, 0x11
add ecx, r8d
mov edi, dword [rsp + 0x18]
lea r9d, [r10 - 0x7a7ba22f]
mov eax, r11d
lea r10d, [r11 + 0x6fa87e4f]
not eax
lea r11d, [r8 - 0x1d31920]
or eax, ecx
xor eax, r8d
add eax, dword [rsp + 4]
add r9d, eax
mov eax, r8d
not eax
ror r9d, 0xb
add r9d, ecx
or eax, r9d
xor eax, ecx
add eax, dword [rsp + 0x28]
add r10d, eax
lea ebx, [r9 + 0x4e0811a1]
mov eax, ecx
ror r10d, 0x1a
not eax
add r10d, r9d
or eax, r10d
xor eax, r9d
add eax, ebp
add r11d, eax
mov eax, r9d
not eax
ror r11d, 0x16
add r11d, r10d
or eax, r11d
mov r8d, r11d
xor eax, r10d
not r8d
add eax, 0xa3014314
add eax, dword [rsp + 8]
lea r9d, [r11 - 0x42c50dcb]
add ecx, eax
mov eax, r10d
not eax
ror ecx, 0x11
add ecx, r11d
or eax, ecx
xor eax, r11d
add eax, r15d
add ebx, eax
mov eax, ecx
not eax
ror ebx, 0xb
add ebx, ecx
or r8d, ebx
xor r8d, ecx
add r8d, 0xf7537e82
add r8d, dword [rsp + 0xc]
add r8d, r10d
ror r8d, 0x1a
add r8d, ebx
or eax, r8d
add edi, r8d
xor eax, ebx
add eax, dword [rsp + 0x2c]
add r9d, eax
mov eax, ebx
not eax
ror r9d, 0x16
add r9d, r8d
or eax, r9d
xor eax, r8d
add eax, 0x2ad7d2bb
add eax, dword [rsp + 0x10]
add ecx, eax
mov eax, r8d
mov r8, qword [rsp + 0x80]
not eax
ror ecx, 0x11
add ecx, r9d
or eax, ecx
xor eax, r9d
mov dword [r8], edi
add eax, 0xeb86d391
add eax, dword [rsp + 0x14]
mov r11d, dword [rsp + 0x20]
add ebx, eax
mov r10d, dword [rsp + 0x24]
add r11d, ecx
mov rax, qword [rsp + 0x90]
add r10d, r9d
ror ebx, 0xb
add ebx, dword [rsp + 0x1c]
add ebx, ecx
mov dword [r8 + 8], r11d
mov dword [r8 + 4], ebx
mov dword [r8 + 0xc], r10d
mov dword [rsp + 0x18], edi
mov dword [rsp + 0x1c], ebx
mov dword [rsp + 0x20], r11d
mov dword [rsp + 0x24], r10d
test rax, rax
jne 0x1402b0d60
mov r15, qword [rsp + 0x38]
mov r14, qword [rsp + 0x40]
mov r13, qword [rsp + 0x48]
mov r12, qword [rsp + 0x50]
mov rsi, qword [rsp + 0x58]
mov rbp, qword [rsp + 0x60]
add rsp, 0x68
pop rdi
pop rbx
ret