Function at 0x101aa320
Capabilities:
Encode data using xor
Resolve function by parsing pe exports

Disassembly:
sub esp, 0x54
mov ecx, dword [esp + 0x58]
push ebx
mov eax, dword [ecx + 8]
mov ebx, dword [ecx + 0x10]
mov edx, dword [ecx + 0x14]
push ebp
mov ebp, dword [esp + 0x64]
push esi
push edi
mov edi, dword [ecx + 0xc]
mov dword [esp + 0x68], eax
mov dword [esp + 0x48], edi
mov dword [esp + 0x40], ebx
mov dword [esp + 0x3c], edx
jmp 0x101aa350
mov dword [esp + 0x54], eax
movzx eax, byte [ebp + 2]
mov dword [esp + 0x60], edx
movzx edx, byte [ebp + 3]
shl edx, 8
or edx, eax
movzx eax, byte [ebp + 1]
shl edx, 8
or edx, eax
movzx eax, byte [ebp]
shl edx, 8
or edx, eax
mov eax, dword [esp + 0x3c]
xor eax, ebx
and eax, edi
xor eax, dword [esp + 0x3c]
mov dword [esp + 0x5c], ebx
add eax, edx
mov dword [ecx + 0x58], edx
movzx ebx, byte [ebp + 7]
shl ebx, 8
mov dword [esp + 0x10], edx
mov edx, dword [esp + 0x68]
mov esi, dword [esp + 0x3c]
add edx, 0xd76aa478
add edx, eax
movzx eax, byte [ebp + 6]
rol edx, 7
or ebx, eax
movzx eax, byte [ebp + 5]
shl ebx, 8
or ebx, eax
movzx eax, byte [ebp + 4]
shl ebx, 8
or ebx, eax
mov eax, dword [esp + 0x40]
xor eax, edi
mov dword [ecx + 0x5c], ebx
add edx, edi
and eax, edx
xor eax, dword [esp + 0x40]
mov dword [esp + 0x28], ebx
add eax, ebx
movzx ebx, byte [ebp + 0xb]
shl ebx, 8
add esi, 0xe8c7b756
add esi, eax
movzx eax, byte [ebp + 0xa]
rol esi, 0xc
or ebx, eax
movzx eax, byte [ebp + 9]
shl ebx, 8
or ebx, eax
movzx eax, byte [ebp + 8]
shl ebx, 8
or ebx, eax
mov eax, edi
xor eax, edx
add esi, edx
and eax, esi
xor eax, edi
add eax, ebx
mov dword [ecx + 0x60], ebx
mov dword [esp + 0x58], edi
mov edi, dword [esp + 0x40]
mov dword [esp + 0x44], ebx
movzx ebx, byte [ebp + 0xf]
add edi, 0x242070db
add edi, eax
movzx eax, byte [ebp + 0xe]
ror edi, 0xf
shl ebx, 8
or ebx, eax
movzx eax, byte [ebp + 0xd]
shl ebx, 8
or ebx, eax
movzx eax, byte [ebp + 0xc]
shl ebx, 8
add edi, esi
or ebx, eax
mov dword [esp + 0x20], ebx
mov dword [ecx + 0x64], ebx
movzx ebp, byte [ebp + 0x13]
mov eax, esi
xor eax, edx
and eax, edi
xor eax, edx
add eax, ebx
mov ebx, dword [esp + 0x48]
shl ebp, 8
add ebx, 0xc1bdceee
add ebx, eax
mov eax, dword [esp + 0x6c]
ror ebx, 0xa
movzx eax, byte [eax + 0x12]
or ebp, eax
mov eax, dword [esp + 0x6c]
shl ebp, 8
movzx eax, byte [eax + 0x11]
or ebp, eax
mov eax, dword [esp + 0x6c]
shl ebp, 8
movzx eax, byte [eax + 0x10]
or ebp, eax
mov dword [ecx + 0x68], ebp
add ebx, edi
mov eax, esi
xor eax, edi
and eax, ebx
xor eax, esi
add eax, 0xf57c0faf
add eax, ebp
add edx, eax
mov eax, dword [esp + 0x6c]
mov dword [esp + 0x38], ebp
rol edx, 7
movzx ebp, byte [eax + 0x17]
movzx eax, byte [eax + 0x16]
shl ebp, 8
or ebp, eax
mov eax, dword [esp + 0x6c]
shl ebp, 8
movzx eax, byte [eax + 0x15]
or ebp, eax
mov eax, dword [esp + 0x6c]
shl ebp, 8
movzx eax, byte [eax + 0x14]
or ebp, eax
mov dword [ecx + 0x6c], ebp
mov dword [esp + 0x18], ebp
add ebp, 0x4787c62a
add edx, ebx
mov eax, edi
xor eax, ebx
and eax, edx
xor eax, edi
add eax, ebp
add esi, eax
mov eax, dword [esp + 0x6c]
rol esi, 0xc
movzx ebp, byte [eax + 0x1b]
movzx eax, byte [eax + 0x1a]
shl ebp, 8
or ebp, eax
mov eax, dword [esp + 0x6c]
shl ebp, 8
movzx eax, byte [eax + 0x19]
or ebp, eax
mov eax, dword [esp + 0x6c]
shl ebp, 8
movzx eax, byte [eax + 0x18]
or ebp, eax
mov eax, ebx
xor eax, edx
add esi, edx
and eax, esi
mov dword [esp + 0x30], ebp
mov dword [ecx + 0x70], ebp
xor eax, ebx
add ebp, 0xa8304613
add eax, ebp
add edi, eax
ror edi, 0xf
mov eax, dword [esp + 0x6c]
add edi, esi
movzx ebp, byte [eax + 0x1f]
movzx eax, byte [eax + 0x1e]
shl ebp, 8
or ebp, eax
mov eax, dword [esp + 0x6c]
shl ebp, 8
movzx eax, byte [eax + 0x1d]
or ebp, eax
mov eax, dword [esp + 0x6c]
shl ebp, 8
movzx eax, byte [eax + 0x1c]
or ebp, eax
mov dword [ecx + 0x74], ebp
mov dword [esp + 0x14], ebp
add ebp, 0xfd469501
mov eax, esi
xor eax, edx
and eax, edi
xor eax, edx
add eax, ebp
add ebx, eax
mov eax, dword [esp + 0x6c]
add edx, 0x698098d8
ror ebx, 0xa
movzx ebp, byte [eax + 0x23]
movzx eax, byte [eax + 0x22]
shl ebp, 8
or ebp, eax
mov eax, dword [esp + 0x6c]
shl ebp, 8
movzx eax, byte [eax + 0x21]
or ebp, eax
mov eax, dword [esp + 0x6c]
shl ebp, 8
movzx eax, byte [eax + 0x20]
or ebp, eax
mov eax, esi
xor eax, edi
mov dword [ecx + 0x78], ebp
add ebx, edi
and eax, ebx
xor eax, esi
mov dword [esp + 0x2c], ebp
add ebp, eax
mov eax, dword [esp + 0x6c]
add ebp, edx
movzx edx, byte [eax + 0x27]
rol ebp, 7
movzx eax, byte [eax + 0x26]
shl edx, 8
or edx, eax
mov eax, dword [esp + 0x6c]
shl edx, 8
movzx eax, byte [eax + 0x25]
or edx, eax
mov eax, dword [esp + 0x6c]
shl edx, 8
movzx eax, byte [eax + 0x24]
or edx, eax
add ebp, ebx
mov dword [ecx + 0x7c], edx
mov eax, edi
xor eax, ebx
and eax, ebp
mov dword [esp + 0x40], edx
add edx, 0x8b44f7af
xor eax, edi
add eax, edx
add esi, eax
mov eax, dword [esp + 0x6c]
rol esi, 0xc
movzx edx, byte [eax + 0x2b]
movzx eax, byte [eax + 0x2a]
shl edx, 8
add esi, ebp
or edx, eax
mov dword [esp + 0x68], esi
shl edx, 8
mov eax, dword [esp + 0x6c]
movzx eax, byte [eax + 0x29]
or edx, eax
mov eax, dword [esp + 0x6c]
shl edx, 8
movzx eax, byte [eax + 0x28]
or edx, eax
mov dword [ecx + 0x80], edx
mov eax, ebx
xor eax, ebp
and eax, esi
xor eax, ebx
mov dword [esp + 0x24], edx
add edx, 0xffff5bb1
add eax, edx
add edi, eax
mov eax, dword [esp + 0x6c]
add ebx, 0x895cd7be
ror edi, 0xf
movzx edx, byte [eax + 0x2f]
movzx eax, byte [eax + 0x2e]
shl edx, 8
or edx, eax
mov eax, dword [esp + 0x6c]
shl edx, 8
movzx eax, byte [eax + 0x2d]
or edx, eax
mov eax, dword [esp + 0x6c]
shl edx, 8
movzx eax, byte [eax + 0x2c]
or edx, eax
add edi, esi
mov dword [ecx + 0x84], edx
mov eax, esi
xor eax, ebp
and eax, edi
xor eax, ebp
mov dword [esp + 0x3c], edx
add edx, eax
mov eax, dword [esp + 0x6c]
add edx, ebx
movzx ebx, byte [eax + 0x33]
ror edx, 0xa
movzx eax, byte [eax + 0x32]
shl ebx, 8
or ebx, eax
mov eax, dword [esp + 0x6c]
shl ebx, 8
movzx eax, byte [eax + 0x31]
or ebx, eax
mov eax, dword [esp + 0x6c]
shl ebx, 8
movzx eax, byte [eax + 0x30]
or ebx, eax
mov eax, esi
xor eax, edi
add edx, edi
and eax, edx
xor eax, esi
add eax, ebx
mov dword [ecx + 0x88], ebx
mov dword [esp + 0x1c], ebx
lea esi, [ebp + 0x6b901122]
mov ebp, dword [esp + 0x6c]
add esi, eax
movzx ebx, byte [ebp + 0x37]
rol esi, 7
movzx eax, byte [ebp + 0x36]
shl ebx, 8
or ebx, eax
movzx eax, byte [ebp + 0x35]
shl ebx, 8
or ebx, eax
movzx eax, byte [ebp + 0x34]
shl ebx, 8
add esi, edx
or ebx, eax
mov dword [esp + 0x4c], edi
mov dword [esp + 0x34], ebx
mov dword [ecx + 0x8c], ebx
mov eax, edi
xor eax, edx
and eax, esi
xor eax, edi
add eax, ebx
mov edi, dword [esp + 0x68]
movzx ebp, byte [ebp + 0x3b]
mov ebx, dword [esp + 0x6c]
add edi, 0xfd987193
add edi, eax
movzx eax, byte [ebx + 0x3a]
rol edi, 0xc
shl ebp, 8
or ebp, eax
movzx eax, byte [ebx + 0x39]
shl ebp, 8
or ebp, eax
movzx eax, byte [ebx + 0x38]
mov ebx, dword [esp + 0x4c]
add edi, esi
shl ebp, 8
or ebp, eax
mov eax, edx
xor eax, esi
and eax, edi
xor eax, edx
add eax, ebp
add ebx, 0xa679438e
add ebx, eax
mov eax, dword [esp + 0x6c]
mov dword [ecx + 0x90], ebp
ror ebx, 0xf
movzx eax, byte [eax + 0x3f]
shl eax, 8
mov dword [esp + 0x68], eax
mov eax, dword [esp + 0x6c]
add ebx, edi
movzx eax, byte [eax + 0x3e]
or dword [esp + 0x68], eax
mov eax, dword [esp + 0x6c]
shl dword [esp + 0x68], 8
movzx eax, byte [eax + 0x3d]
or dword [esp + 0x68], eax
mov eax, dword [esp + 0x6c]
shl dword [esp + 0x68], 8
movzx eax, byte [eax + 0x3c]
or dword [esp + 0x68], eax
mov eax, dword [esp + 0x68]
mov dword [ecx + 0x94], eax
mov eax, edi
xor eax, esi
and eax, ebx
xor eax, esi
add eax, 0x49b40821
add eax, dword [esp + 0x68]
mov dword [esp + 0x48], ebp
add edx, eax
ror edx, 0xa
add edx, ebx
mov eax, ebx
xor eax, edx
and eax, edi
xor eax, ebx
add eax, 0xf61e2562
add eax, dword [esp + 0x28]
add esi, eax
mov eax, edx
rol esi, 5
add esi, edx
xor eax, esi
and eax, ebx
xor eax, edx
add eax, 0xc040b340
add eax, dword [esp + 0x30]
add edi, eax
rol edi, 9
add edi, esi
mov eax, edi
xor eax, esi
and eax, edx
xor eax, esi
add eax, 0x265e5a51
add eax, dword [esp + 0x3c]
add ebx, eax
rol ebx, 0xe
add ebx, edi
mov eax, edi
xor eax, ebx
and eax, esi
xor eax, edi
add eax, 0xe9b6c7aa
add eax, dword [esp + 0x10]
add edx, eax
mov eax, ebx
ror edx, 0xc
add edx, ebx
xor eax, edx
and eax, edi
xor eax, ebx
add eax, 0xd62f105d
add eax, dword [esp + 0x18]
add esi, eax
mov eax, edx
rol esi, 5
add esi, edx
xor eax, esi
and eax, ebx
xor eax, edx
add eax, 0x2441453
add eax, dword [esp + 0x24]
add edi, eax
rol edi, 9
add edi, esi
mov eax, edi
xor eax, esi
and eax, edx
xor eax, esi
add eax, 0xd8a1e681
add eax, dword [esp + 0x68]
add ebx, eax
mov eax, edi
rol ebx, 0xe
add ebx, edi
xor eax, ebx
and eax, esi
xor eax, edi
add eax, 0xe7d3fbc8
add eax, dword [esp + 0x38]
add edx, eax
mov eax, ebx
ror edx, 0xc
add edx, ebx
xor eax, edx
and eax, edi
xor eax, ebx
add eax, 0x21e1cde6
add eax, dword [esp + 0x40]
add edi, 0xc33707d6
add esi, eax
mov eax, edx
rol esi, 5
add esi, edx
xor eax, esi
and eax, ebx
xor eax, edx
add ebp, eax
add ebp, edi
rol ebp, 9
add ebp, esi
mov eax, ebp
xor eax, esi
and eax, edx
xor eax, esi
add eax, 0xf4d50d87
add eax, dword [esp + 0x20]
add ebx, eax
mov eax, ebp
rol ebx, 0xe
add ebx, ebp
xor eax, ebx
and eax, esi
mov dword [esp + 0x4c], ebx
xor eax, ebp
add eax, 0x455a14ed
add eax, dword [esp + 0x2c]
mov edi, ebx
add edx, eax
ror edx, 0xc
add edx, ebx
xor edi, edx
and edi, ebp
xor edi, ebx
add edi, dword [esp + 0x34]
add esi, 0xa9e3e905
add edi, esi
mov eax, edx
mov dword [esp + 0x50], edx
mov esi, dword [esp + 0x50]
rol edi, 5
add edi, edx
xor eax, edi
and eax, ebx
xor eax, edx
add eax, dword [esp + 0x44]
lea ebx, [ebp - 0x3105c08]
add ebx, eax
add esi, 0x8d2a4c8a
rol ebx, 9
add ebx, edi
mov ebp, ebx
xor ebp, edi
and ebp, edx
mov edx, dword [esp + 0x4c]
xor ebp, edi
add ebp, dword [esp + 0x14]
add edx, 0x676f02d9
add ebp, edx
mov edx, ebx
rol ebp, 0xe
add ebp, ebx
xor edx, ebp
mov eax, edx
and eax, edi
xor eax, ebx
add eax, dword [esp + 0x1c]
add esi, eax
mov eax, ebp
ror esi, 0xc
add esi, ebp
xor edx, esi
add edx, 0xfffa3942
add edx, dword [esp + 0x18]
xor eax, esi
add edi, edx
rol edi, 4
add edi, esi
xor eax, edi
add eax, 0x8771f681
add eax, dword [esp + 0x2c]
add ebx, eax
rol ebx, 0xb
add ebx, edi
mov eax, ebx
xor eax, esi
xor eax, edi
add eax, 0x6d9d6122
add eax, dword [esp + 0x3c]
mov edx, ebx
add ebp, eax
rol ebp, 0x10
add ebp, ebx
xor edx, ebp
mov eax, edx
xor eax, edi
add eax, 0xfde5380c
add eax, dword [esp + 0x48]
add esi, eax
ror esi, 9
add esi, ebp
xor edx, esi
add edx, 0xa4beea44
add edx, dword [esp + 0x28]
add edi, edx
rol edi, 4
add edi, esi
mov eax, ebp
xor eax, esi
xor eax, edi
add eax, 0x4bdecfa9
add eax, dword [esp + 0x38]
add ebx, eax
rol ebx, 0xb
add ebx, edi
mov eax, ebx
xor eax, esi
xor eax, edi
add eax, 0xf6bb4b60
add eax, dword [esp + 0x14]
mov edx, ebx
add ebp, eax
rol ebp, 0x10
add ebp, ebx
xor edx, ebp
mov eax, edx
xor eax, edi
add eax, 0xbebfbc70
add eax, dword [esp + 0x24]
add esi, eax
mov eax, ebp
ror esi, 9
add esi, ebp
xor edx, esi
xor eax, esi
add edx, 0x289b7ec6
add edx, dword [esp + 0x34]
add edi, edx
rol edi, 4
add edi, esi
xor eax, edi
add eax, 0xeaa127fa
add eax, dword [esp + 0x10]
add ebx, eax
rol ebx, 0xb
add ebx, edi
mov eax, ebx
xor eax, esi
xor eax, edi
add eax, 0xd4ef3085
add eax, dword [esp + 0x20]
mov edx, ebx
add ebp, eax
rol ebp, 0x10
add ebp, ebx
xor edx, ebp
mov eax, edx
xor eax, edi
add eax, 0x4881d05
add eax, dword [esp + 0x30]
add edi, 0xd9d4d039
add esi, eax
add ebx, 0xe6db99e5
ror esi, 9
add esi, ebp
xor edx, esi
add edx, dword [esp + 0x40]
add edx, edi
mov edi, ebp
xor edi, esi
rol edx, 4
add edx, esi
xor edi, edx
add edi, dword [esp + 0x1c]
add edi, ebx
lea ebx, [ebp + 0x1fa27cf8]
rol edi, 0xb
add edi, edx
mov eax, edi
xor eax, esi
xor eax, edx
add eax, dword [esp + 0x68]
add ebx, eax
rol ebx, 0x10
add ebx, edi
mov eax, edi
xor eax, ebx
xor eax, edx
add eax, 0xc4ac5665
mov ebp, dword [esp + 0x44]
add eax, ebp
add esi, eax
ror esi, 9
add esi, ebx
mov eax, edi
not eax
or eax, esi
xor eax, ebx
add eax, 0xf4292244
add eax, dword [esp + 0x10]
add edx, eax
mov eax, ebx
not eax
rol edx, 6
add edx, esi
or eax, edx
xor eax, esi
add eax, 0x432aff97
add eax, dword [esp + 0x14]
add edi, eax
rol edi, 0xa
add edi, edx
mov eax, esi
not eax
or eax, edi
xor eax, edx
add eax, 0xab9423a7
add eax, dword [esp + 0x48]
add ebx, eax
mov eax, edx
not eax
rol ebx, 0xf
add ebx, edi
or eax, ebx
xor eax, edi
add eax, 0xfc93a039
add eax, dword [esp + 0x18]
add esi, eax
ror esi, 0xb
add esi, ebx
mov eax, edi
not eax
or eax, esi
xor eax, ebx
add eax, 0x655b59c3
add eax, dword [esp + 0x1c]
add edx, eax
mov eax, ebx
not eax
rol edx, 6
add edx, esi
or eax, edx
xor eax, esi
add eax, 0x8f0ccc92
add eax, dword [esp + 0x20]
add edi, eax
rol edi, 0xa
mov eax, esi
not eax
add edi, edx
or eax, edi
xor eax, edx
add eax, 0xffeff47d
add eax, dword [esp + 0x24]
add ebx, eax
mov eax, edx
not eax
rol ebx, 0xf
add ebx, edi
or eax, ebx
xor eax, edi
add eax, 0x85845dd1
add eax, dword [esp + 0x28]
add esi, eax
ror esi, 0xb
mov eax, edi
add esi, ebx
not eax
or eax, esi
xor eax, ebx
add eax, 0x6fa87e4f
add eax, dword [esp + 0x2c]
add ebp, 0x2ad7d2bb
add edx, eax
rol edx, 6
add edx, esi
mov eax, ebx
not eax
or eax, edx
xor eax, esi
add eax, 0xfe2ce6e0
add eax, dword [esp + 0x68]
add edi, eax
mov eax, esi
not eax
rol edi, 0xa
add edi, edx
or eax, edi
xor eax, edx
add eax, 0xa3014314
add eax, dword [esp + 0x30]
add ebx, eax
rol ebx, 0xf
add ebx, edi
mov eax, edx
not eax
or eax, ebx
xor eax, edi
add eax, 0x4e0811a1
add eax, dword [esp + 0x34]
add esi, eax
mov eax, edi
not eax
ror esi, 0xb
add esi, ebx
or eax, esi
xor eax, ebx
add eax, 0xf7537e82
add eax, dword [esp + 0x38]
add edi, 0xbd3af235
add edx, eax
mov eax, ebx
not eax
rol edx, 6
add edx, esi
mov dword [esp + 0x68], edx
or edx, eax
xor edx, esi
add edx, dword [esp + 0x3c]
mov eax, esi
add edx, edi
mov edi, dword [esp + 0x68]
not eax
rol edx, 0xa
add edx, edi
or eax, edx
xor eax, edi
add eax, ebp
add ebx, eax
mov eax, dword [esp + 0x68]
rol ebx, 0xf
add eax, dword [esp + 0x54]
mov ebp, dword [esp + 0x6c]
not edi
add ebx, edx
or edi, ebx
xor edi, edx
add edi, 0xeb86d391
add edi, dword [esp + 0x40]
mov dword [esp + 0x68], eax
add edi, esi
ror edi, 0xb
add edi, dword [esp + 0x58]
add edi, ebx
add ebx, dword [esp + 0x5c]
add edx, dword [esp + 0x60]
mov dword [esp + 0x48], edi
mov dword [esp + 0x40], ebx
mov dword [esp + 0x3c], edx
add ebp, 0x40
sub dword [esp + 0x70], 0x40
mov dword [esp + 0x6c], ebp
jne 0x101aa350
mov dword [ecx + 0xc], edi
pop edi
pop esi
mov dword [ecx + 8], eax
mov eax, ebp
pop ebp
mov dword [ecx + 0x10], ebx
mov dword [ecx + 0x14], edx
pop ebx
add esp, 0x54
ret