Function at 0x418630
Capabilities:
Encode data using xor
Resolve function by parsing pe exports

Disassembly:
sub esp, 0x54
mov ecx, dword [esp + 0x58]
push ebx
push ebp
mov ebp, dword [esp + 0x64]
mov eax, dword [ecx + 8]
mov ebx, dword [ecx + 0x10]
mov edx, dword [ecx + 0x14]
push esi
push edi
mov edi, dword [ecx + 0xc]
mov dword [esp + 0x68], eax
mov dword [esp + 0x48], edi
mov dword [esp + 0x40], ebx
mov dword [esp + 0x3c], edx
nop dword [eax + eax]
mov dword [esp + 0x54], eax
movzx eax, byte [ebp + 2]
mov dword [esp + 0x60], edx
movzx edx, byte [ebp + 3]
shl edx, 8
or edx, eax
mov dword [esp + 0x5c], ebx
movzx eax, byte [ebp + 1]
shl edx, 8
or edx, eax
mov esi, dword [esp + 0x3c]
movzx eax, byte [ebp]
add esi, 0xe8c7b756
shl edx, 8
or edx, eax
mov dword [esp + 0x58], edi
mov eax, dword [esp + 0x3c]
xor eax, ebx
mov dword [ecx + 0x58], edx
and eax, edi
movzx ebx, byte [ebp + 7]
xor eax, dword [esp + 0x3c]
add eax, edx
shl ebx, 8
mov dword [esp + 0x10], edx
mov edx, dword [esp + 0x68]
add edx, 0xd76aa478
add edx, eax
movzx eax, byte [ebp + 6]
or ebx, eax
rol edx, 7
movzx eax, byte [ebp + 5]
add edx, edi
shl ebx, 8
or ebx, eax
movzx eax, byte [ebp + 4]
shl ebx, 8
or ebx, eax
mov eax, dword [esp + 0x40]
xor eax, edi
mov dword [ecx + 0x5c], ebx
and eax, edx
mov dword [esp + 0x28], ebx
xor eax, dword [esp + 0x40]
add eax, ebx
movzx ebx, byte [ebp + 0xb]
add esi, eax
shl ebx, 8
movzx eax, byte [ebp + 0xa]
or ebx, eax
rol esi, 0xc
movzx eax, byte [ebp + 9]
add esi, edx
shl ebx, 8
or ebx, eax
movzx eax, byte [ebp + 8]
shl ebx, 8
or ebx, eax
mov eax, edi
xor eax, edx
mov dword [ecx + 0x60], ebx
and eax, esi
mov dword [esp + 0x44], ebx
xor eax, edi
mov edi, dword [esp + 0x40]
add eax, ebx
add edi, 0x242070db
movzx ebx, byte [ebp + 0xf]
add edi, eax
movzx eax, byte [ebp + 0xe]
shl ebx, 8
or ebx, eax
ror edi, 0xf
movzx eax, byte [ebp + 0xd]
add edi, esi
shl ebx, 8
or ebx, eax
movzx eax, byte [ebp + 0xc]
shl ebx, 8
or ebx, eax
mov dword [esp + 0x20], ebx
mov dword [ecx + 0x64], ebx
mov eax, esi
movzx ebp, byte [ebp + 0x13]
xor eax, edx
and eax, edi
shl ebp, 8
xor eax, edx
add eax, ebx
mov ebx, dword [esp + 0x48]
add ebx, 0xc1bdceee
add ebx, eax
mov eax, dword [esp + 0x6c]
ror ebx, 0xa
add ebx, edi
movzx eax, byte [eax + 0x12]
or ebp, eax
mov eax, dword [esp + 0x6c]
shl ebp, 8
movzx eax, byte [eax + 0x11]
or ebp, eax
mov eax, dword [esp + 0x6c]
shl ebp, 8
movzx eax, byte [eax + 0x10]
or ebp, eax
mov eax, esi
xor eax, edi
mov dword [ecx + 0x68], ebp
and eax, ebx
mov dword [esp + 0x38], ebp
xor eax, esi
add eax, 0xf57c0faf
add eax, ebp
add edx, eax
mov eax, dword [esp + 0x6c]
rol edx, 7
add edx, ebx
movzx ebp, byte [eax + 0x17]
movzx eax, byte [eax + 0x16]
shl ebp, 8
or ebp, eax
mov eax, dword [esp + 0x6c]
shl ebp, 8
movzx eax, byte [eax + 0x15]
or ebp, eax
mov eax, dword [esp + 0x6c]
shl ebp, 8
movzx eax, byte [eax + 0x14]
or ebp, eax
mov eax, edi
xor eax, ebx
mov dword [ecx + 0x6c], ebp
and eax, edx
mov dword [esp + 0x18], ebp
xor eax, edi
add ebp, 0x4787c62a
add eax, ebp
add esi, eax
mov eax, dword [esp + 0x6c]
rol esi, 0xc
add esi, edx
movzx ebp, byte [eax + 0x1b]
movzx eax, byte [eax + 0x1a]
shl ebp, 8
or ebp, eax
mov eax, dword [esp + 0x6c]
shl ebp, 8
movzx eax, byte [eax + 0x19]
or ebp, eax
mov eax, dword [esp + 0x6c]
shl ebp, 8
movzx eax, byte [eax + 0x18]
or ebp, eax
mov eax, ebx
xor eax, edx
mov dword [esp + 0x30], ebp
and eax, esi
mov dword [ecx + 0x70], ebp
xor eax, ebx
add ebp, 0xa8304613
add eax, ebp
add edi, eax
mov eax, dword [esp + 0x6c]
ror edi, 0xf
add edi, esi
movzx ebp, byte [eax + 0x1f]
movzx eax, byte [eax + 0x1e]
shl ebp, 8
or ebp, eax
mov eax, dword [esp + 0x6c]
shl ebp, 8
movzx eax, byte [eax + 0x1d]
or ebp, eax
mov eax, dword [esp + 0x6c]
shl ebp, 8
movzx eax, byte [eax + 0x1c]
or ebp, eax
mov eax, esi
xor eax, edx
mov dword [ecx + 0x74], ebp
and eax, edi
mov dword [esp + 0x14], ebp
xor eax, edx
add ebp, 0xfd469501
add eax, ebp
add ebx, eax
mov eax, dword [esp + 0x6c]
ror ebx, 0xa
add ebx, edi
movzx ebp, byte [eax + 0x23]
movzx eax, byte [eax + 0x22]
shl ebp, 8
or ebp, eax
mov eax, dword [esp + 0x6c]
shl ebp, 8
movzx eax, byte [eax + 0x21]
or ebp, eax
mov eax, dword [esp + 0x6c]
shl ebp, 8
movzx eax, byte [eax + 0x20]
or ebp, eax
mov eax, esi
xor eax, edi
mov dword [ecx + 0x78], ebp
and eax, ebx
mov dword [esp + 0x2c], ebp
xor eax, esi
add eax, ebp
lea ebp, [edx + 0x698098d8]
add ebp, eax
mov eax, dword [esp + 0x6c]
rol ebp, 7
add ebp, ebx
movzx edx, byte [eax + 0x27]
movzx eax, byte [eax + 0x26]
shl edx, 8
or edx, eax
mov eax, dword [esp + 0x6c]
shl edx, 8
movzx eax, byte [eax + 0x25]
or edx, eax
mov eax, dword [esp + 0x6c]
shl edx, 8
movzx eax, byte [eax + 0x24]
or edx, eax
mov eax, edi
xor eax, ebx
mov dword [ecx + 0x7c], edx
and eax, ebp
mov dword [esp + 0x40], edx
add edx, 0x8b44f7af
xor eax, edi
add eax, edx
add esi, eax
mov eax, dword [esp + 0x6c]
rol esi, 0xc
add esi, ebp
mov dword [esp + 0x68], esi
movzx edx, byte [eax + 0x2b]
movzx eax, byte [eax + 0x2a]
shl edx, 8
or edx, eax
shl edx, 8
mov eax, dword [esp + 0x6c]
movzx eax, byte [eax + 0x29]
or edx, eax
mov eax, dword [esp + 0x6c]
shl edx, 8
movzx eax, byte [eax + 0x28]
or edx, eax
mov eax, ebx
xor eax, ebp
mov dword [ecx + 0x80], edx
and eax, esi
mov dword [esp + 0x24], edx
xor eax, ebx
add edx, 0xffff5bb1
add eax, edx
add edi, eax
mov eax, dword [esp + 0x6c]
ror edi, 0xf
add edi, esi
mov dword [esp + 0x4c], edi
movzx edx, byte [eax + 0x2f]
movzx eax, byte [eax + 0x2e]
shl edx, 8
or edx, eax
mov eax, dword [esp + 0x6c]
shl edx, 8
movzx eax, byte [eax + 0x2d]
or edx, eax
mov eax, dword [esp + 0x6c]
shl edx, 8
movzx eax, byte [eax + 0x2c]
or edx, eax
mov eax, esi
xor eax, ebp
mov dword [ecx + 0x84], edx
and eax, edi
mov dword [esp + 0x3c], edx
xor eax, ebp
add eax, edx
lea edx, [ebx - 0x76a32842]
add edx, eax
mov eax, dword [esp + 0x6c]
ror edx, 0xa
add edx, edi
movzx ebx, byte [eax + 0x33]
movzx eax, byte [eax + 0x32]
shl ebx, 8
or ebx, eax
mov eax, dword [esp + 0x6c]
shl ebx, 8
movzx eax, byte [eax + 0x31]
or ebx, eax
mov eax, dword [esp + 0x6c]
shl ebx, 8
movzx eax, byte [eax + 0x30]
or ebx, eax
mov eax, esi
xor eax, edi
mov dword [ecx + 0x88], ebx
and eax, edx
mov dword [esp + 0x1c], ebx
xor eax, esi
lea esi, [ebp + 0x6b901122]
mov ebp, dword [esp + 0x6c]
add eax, ebx
add esi, eax
rol esi, 7
add esi, edx
movzx ebx, byte [ebp + 0x37]
movzx eax, byte [ebp + 0x36]
shl ebx, 8
or ebx, eax
movzx eax, byte [ebp + 0x35]
shl ebx, 8
or ebx, eax
movzx eax, byte [ebp + 0x34]
shl ebx, 8
or ebx, eax
mov eax, edi
mov dword [esp + 0x34], ebx
mov dword [ecx + 0x8c], ebx
xor eax, edx
movzx ebp, byte [ebp + 0x3b]
and eax, esi
shl ebp, 8
xor eax, edi
mov edi, dword [esp + 0x68]
add eax, ebx
add edi, 0xfd987193
add edi, eax
mov ebx, dword [esp + 0x6c]
rol edi, 0xc
add edi, esi
movzx eax, byte [ebx + 0x3a]
or ebp, eax
movzx eax, byte [ebx + 0x39]
shl ebp, 8
or ebp, eax
movzx eax, byte [ebx + 0x38]
mov ebx, dword [esp + 0x4c]
shl ebp, 8
add ebx, 0xa679438e
or ebp, eax
mov eax, edx
xor eax, esi
mov dword [ecx + 0x90], ebp
and eax, edi
mov dword [esp + 0x48], ebp
xor eax, edx
add eax, ebp
add ebx, eax
mov eax, dword [esp + 0x6c]
ror ebx, 0xf
add ebx, edi
movzx eax, byte [eax + 0x3f]
shl eax, 8
mov dword [esp + 0x68], eax
mov eax, dword [esp + 0x6c]
movzx eax, byte [eax + 0x3e]
or dword [esp + 0x68], eax
mov eax, dword [esp + 0x6c]
shl dword [esp + 0x68], 8
movzx eax, byte [eax + 0x3d]
or dword [esp + 0x68], eax
mov eax, dword [esp + 0x6c]
shl dword [esp + 0x68], 8
movzx eax, byte [eax + 0x3c]
or dword [esp + 0x68], eax
mov eax, dword [esp + 0x68]
mov dword [ecx + 0x94], eax
mov eax, edi
xor eax, esi
and eax, ebx
xor eax, esi
add eax, 0x49b40821
add eax, dword [esp + 0x68]
add edx, eax
mov eax, ebx
ror edx, 0xa
add edx, ebx
xor eax, edx
and eax, edi
xor eax, ebx
add eax, 0xf61e2562
add eax, dword [esp + 0x28]
add esi, eax
mov eax, edx
rol esi, 5
add esi, edx
xor eax, esi
and eax, ebx
xor eax, edx
add eax, 0xc040b340
add eax, dword [esp + 0x30]
add edi, eax
rol edi, 9
add edi, esi
mov eax, edi
xor eax, esi
and eax, edx
xor eax, esi
add eax, 0x265e5a51
add eax, dword [esp + 0x3c]
add ebx, eax
mov eax, edi
rol ebx, 0xe
add ebx, edi
xor eax, ebx
and eax, esi
xor eax, edi
add eax, 0xe9b6c7aa
add eax, dword [esp + 0x10]
add edx, eax
mov eax, ebx
ror edx, 0xc
add edx, ebx
xor eax, edx
and eax, edi
xor eax, ebx
add eax, 0xd62f105d
add eax, dword [esp + 0x18]
add esi, eax
mov eax, edx
rol esi, 5
add esi, edx
xor eax, esi
and eax, ebx
xor eax, edx
add eax, 0x2441453
add eax, dword [esp + 0x24]
add edi, eax
rol edi, 9
add edi, esi
mov eax, edi
xor eax, esi
and eax, edx
xor eax, esi
add eax, 0xd8a1e681
add eax, dword [esp + 0x68]
add ebx, eax
mov eax, edi
rol ebx, 0xe
add ebx, edi
xor eax, ebx
and eax, esi
xor eax, edi
add eax, 0xe7d3fbc8
add eax, dword [esp + 0x38]
add edx, eax
mov eax, ebx
ror edx, 0xc
add edx, ebx
xor eax, edx
and eax, edi
xor eax, ebx
add eax, 0x21e1cde6
add eax, dword [esp + 0x40]
add esi, eax
mov eax, edx
rol esi, 5
add esi, edx
xor eax, esi
and eax, ebx
xor eax, edx
add eax, ebp
lea ebp, [edi - 0x3cc8f82a]
add ebp, eax
rol ebp, 9
add ebp, esi
mov eax, ebp
xor eax, esi
and eax, edx
xor eax, esi
add eax, 0xf4d50d87
add eax, dword [esp + 0x20]
add ebx, eax
mov eax, ebp
rol ebx, 0xe
add ebx, ebp
xor eax, ebx
mov dword [esp + 0x4c], ebx
and eax, esi
xor eax, ebp
add eax, 0x455a14ed
lea edi, [esi - 0x561c16fb]
add eax, dword [esp + 0x2c]
add edx, eax
mov eax, ebx
ror edx, 0xc
add edx, ebx
xor eax, edx
mov dword [esp + 0x50], edx
and eax, ebp
mov esi, dword [esp + 0x50]
xor eax, ebx
add esi, 0x8d2a4c8a
add eax, dword [esp + 0x34]
add edi, eax
mov eax, edx
rol edi, 5
add edi, edx
xor eax, edi
and eax, ebx
lea ebx, [ebp - 0x3105c08]
xor eax, edx
mov ebp, dword [esp + 0x4c]
add eax, dword [esp + 0x44]
add ebp, 0x676f02d9
add ebx, eax
rol ebx, 9
add ebx, edi
mov eax, ebx
xor eax, edi
and eax, edx
mov edx, ebx
xor eax, edi
add eax, dword [esp + 0x14]
add ebp, eax
rol ebp, 0xe
add ebp, ebx
xor edx, ebp
mov eax, edx
and eax, edi
xor eax, ebx
add eax, dword [esp + 0x1c]
add esi, eax
mov eax, ebp
ror esi, 0xc
add esi, ebp
xor edx, esi
xor eax, esi
add edx, 0xfffa3942
add edx, dword [esp + 0x18]
add edi, edx
rol edi, 4
add edi, esi
xor eax, edi
add eax, 0x8771f681
add eax, dword [esp + 0x2c]
add ebx, eax
rol ebx, 0xb
add ebx, edi
mov eax, ebx
mov edx, ebx
xor eax, esi
xor eax, edi
add eax, 0x6d9d6122
add eax, dword [esp + 0x3c]
add ebp, eax
rol ebp, 0x10
add ebp, ebx
xor edx, ebp
mov eax, edx
xor eax, edi
add eax, 0xfde5380c
add eax, dword [esp + 0x48]
add esi, eax
ror esi, 9
add esi, ebp
xor edx, esi
add edx, 0xa4beea44
add edx, dword [esp + 0x28]
add edi, edx
rol edi, 4
add edi, esi
mov eax, ebp
xor eax, esi
xor eax, edi
add eax, 0x4bdecfa9
add eax, dword [esp + 0x38]
add ebx, eax
rol ebx, 0xb
add ebx, edi
mov eax, ebx
mov edx, ebx
xor eax, esi
xor eax, edi
add eax, 0xf6bb4b60
add eax, dword [esp + 0x14]
add ebp, eax
rol ebp, 0x10
add ebp, ebx
xor edx, ebp
mov eax, edx
xor eax, edi
add eax, 0xbebfbc70
add eax, dword [esp + 0x24]
add esi, eax
mov eax, ebp
ror esi, 9
add esi, ebp
xor eax, esi
xor edx, esi
add edx, 0x289b7ec6
add edx, dword [esp + 0x34]
add edi, edx
rol edi, 4
add edi, esi
xor eax, edi
add eax, 0xeaa127fa
add eax, dword [esp + 0x10]
add ebx, eax
rol ebx, 0xb
add ebx, edi
mov eax, ebx
mov edx, ebx
xor eax, esi
xor eax, edi
add eax, 0xd4ef3085
add eax, dword [esp + 0x20]
add ebp, eax
rol ebp, 0x10
add ebp, ebx
xor edx, ebp
mov eax, edx
xor eax, edi
add edi, 0xd9d4d039
add eax, 0x4881d05
add eax, dword [esp + 0x30]
add esi, eax
mov eax, ebp
ror esi, 9
add esi, ebp
xor edx, esi
xor eax, esi
add edx, dword [esp + 0x40]
add edx, edi
lea edi, [ebx - 0x1924661b]
rol edx, 4
lea ebx, [ebp + 0x1fa27cf8]
add edx, esi
xor eax, edx
add eax, dword [esp + 0x1c]
add edi, eax
rol edi, 0xb
add edi, edx
mov eax, edi
xor eax, esi
xor eax, edx
add eax, dword [esp + 0x68]
add ebx, eax
mov eax, edi
rol ebx, 0x10
add ebx, edi
xor eax, ebx
xor eax, edx
mov ebp, dword [esp + 0x44]
add eax, 0xc4ac5665
add eax, ebp
add esi, eax
mov eax, edi
not eax
ror esi, 9
add esi, ebx
or eax, esi
xor eax, ebx
add eax, 0xf4292244
add eax, dword [esp + 0x10]
add edx, eax
mov eax, ebx
not eax
rol edx, 6
add edx, esi
or eax, edx
xor eax, esi
add eax, 0x432aff97
add eax, dword [esp + 0x14]
add edi, eax
mov eax, esi
not eax
rol edi, 0xa
add edi, edx
or eax, edi
xor eax, edx
add eax, 0xab9423a7
add eax, dword [esp + 0x48]
add ebx, eax
mov eax, edx
not eax
rol ebx, 0xf
add ebx, edi
or eax, ebx
xor eax, edi
add eax, 0xfc93a039
add eax, dword [esp + 0x18]
add esi, eax
mov eax, edi
not eax
ror esi, 0xb
add esi, ebx
or eax, esi
xor eax, ebx
add eax, 0x655b59c3
add eax, dword [esp + 0x1c]
add edx, eax
mov eax, ebx
not eax
rol edx, 6
add edx, esi
or eax, edx
xor eax, esi
add eax, 0x8f0ccc92
add eax, dword [esp + 0x20]
add edi, eax
mov eax, esi
not eax
rol edi, 0xa
add edi, edx
or eax, edi
xor eax, edx
add eax, 0xffeff47d
add eax, dword [esp + 0x24]
add ebx, eax
mov eax, edx
not eax
rol ebx, 0xf
add ebx, edi
or eax, ebx
xor eax, edi
add eax, 0x85845dd1
add eax, dword [esp + 0x28]
add esi, eax
mov eax, edi
ror esi, 0xb
not eax
add esi, ebx
or eax, esi
add ebp, 0x2ad7d2bb
xor eax, ebx
add eax, 0x6fa87e4f
add eax, dword [esp + 0x2c]
add edx, eax
mov eax, ebx
not eax
rol edx, 6
add edx, esi
or eax, edx
xor eax, esi
add eax, 0xfe2ce6e0
add eax, dword [esp + 0x68]
add edi, eax
mov eax, esi
not eax
rol edi, 0xa
add edi, edx
or eax, edi
xor eax, edx
add eax, 0xa3014314
add eax, dword [esp + 0x30]
add ebx, eax
mov eax, edx
not eax
rol ebx, 0xf
add ebx, edi
or eax, ebx
xor eax, edi
add eax, 0x4e0811a1
add eax, dword [esp + 0x34]
add esi, eax
mov eax, edi
not eax
ror esi, 0xb
add esi, ebx
or eax, esi
xor eax, ebx
add eax, 0xf7537e82
add eax, dword [esp + 0x38]
add edx, eax
mov eax, ebx
not eax
rol edx, 6
add edx, esi
or eax, edx
mov dword [esp + 0x68], edx
xor eax, esi
lea edx, [edi - 0x42c50dcb]
add eax, dword [esp + 0x3c]
mov edi, dword [esp + 0x68]
add edx, eax
rol edx, 0xa
mov eax, esi
add edx, edi
not eax
or eax, edx
xor eax, edi
not edi
add eax, ebp
mov ebp, dword [esp + 0x6c]
add ebx, eax
mov eax, dword [esp + 0x68]
add eax, dword [esp + 0x54]
rol ebx, 0xf
add ebx, edx
mov dword [esp + 0x68], eax
or edi, ebx
xor edi, edx
add edi, 0xeb86d391
add edi, dword [esp + 0x40]
add edi, esi
ror edi, 0xb
add edi, ebx
add ebx, dword [esp + 0x5c]
add edi, dword [esp + 0x58]
add edx, dword [esp + 0x60]
mov dword [esp + 0x48], edi
mov dword [esp + 0x40], ebx
mov dword [esp + 0x3c], edx
add ebp, 0x40
sub dword [esp + 0x70], 0x40
mov dword [esp + 0x6c], ebp
jne 0x418660
mov dword [ecx + 0xc], edi
pop edi
pop esi
mov dword [ecx + 8], eax
mov eax, ebp
pop ebp
mov dword [ecx + 0x10], ebx
mov dword [ecx + 0x14], edx
pop ebx
add esp, 0x54
ret