Function at 0x140002b30
Capabilities:
Authenticate hmac
Parse pe header
Query environment variable

Disassembly:
push r11
push r10
push r9
push r8
push rdx
push rcx
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0xc8
movaps xmmword [rsp + 0xb0], xmm5
movaps xmmword [rsp + 0xa0], xmm4
movaps xmmword [rsp + 0x90], xmm3
movaps xmmword [rsp + 0x80], xmm2
movaps xmmword [rsp + 0x70], xmm1
movaps xmmword [rsp + 0x60], xmm0
mov esi, eax
mov rax, qword [0x14004c040]
xor rax, rsp
mov qword [rsp + 0x58], rax
xorps xmm0, xmm0
lea rax, [rsp + 0x40]
movaps xmmword [rax], xmm0
movaps xmmword [rsp + 0x30], xmm0
mov ecx, 1
call fcn.140004740
test eax, eax
jne 0x140003170
xor eax, eax
cpuid
mov dword [rsp + 0x2c], eax
mov dword [rsp + 0x28], ebx
mov dword [rsp + 0x24], ecx
mov dword [rsp + 0x20], edx
cmp dword [rsp + 0x2c], 0
je 0x140003162
cmp esi, 1
jne 0x140002bf8
cmp dword [rsp + 0x28], 0x756e6547
jne 0x140003162
cmp dword [rsp + 0x20], 0x49656e69
jne 0x140003162
cmp dword [rsp + 0x24], 0x6c65746e
jne 0x140003162
mov eax, 1
cpuid
mov r8d, ecx
test dl, 1
je 0x140002c1e
lea rax, [rsp + 0x40]
mov ecx, 2
call fcn.140004740
test eax, eax
jne 0x140003170
test dx, dx
jns 0x140002c3a
lea rax, [rsp + 0x40]
mov ecx, 3
call fcn.140004740
test eax, eax
jne 0x140003170
bt edx, 0x17
jae 0x140002c57
lea rax, [rsp + 0x40]
mov ecx, 4
call fcn.140004740
test eax, eax
jne 0x140003170
bt edx, 0x18
jb 0x1400031cf
bt r8d, 0x1e
jae 0x140002c7f
lea rax, [rsp + 0x40]
mov ecx, 0x12
call fcn.140004740
test eax, eax
jne 0x140003170
bt edx, 0x18
jb 0x140002c95
mov eax, 7
xor ecx, ecx
cpuid
mov ebp, ecx
mov edi, edx
mov r9d, ebx
mov eax, r9d
not eax
test eax, 0x108
jne 0x140002cb8
lea rax, [rsp + 0x40]
mov ecx, 0x14
call fcn.140004740
test eax, eax
jne 0x140003170
test r9b, 4
je 0x140002cd5
lea rax, [rsp + 0x40]
mov ecx, 0x36
call fcn.140004740
test eax, eax
jne 0x140003170
test r9b, 0x10
je 0x140002cf2
lea rax, [rsp + 0x40]
mov ecx, 0x16
call fcn.140004740
test eax, eax
jne 0x140003170
bt r9d, 0xb
jae 0x140002d10
lea rax, [rsp + 0x40]
mov ecx, 0x17
call fcn.140004740
test eax, eax
jne 0x140003170
bt r9d, 0x13
jae 0x140002d2e
lea rax, [rsp + 0x40]
mov ecx, 0x1d
call fcn.140004740
test eax, eax
jne 0x140003170
bt r9d, 0x12
jae 0x140002d4c
lea rax, [rsp + 0x40]
mov ecx, 0x1e
call fcn.140004740
test eax, eax
jne 0x140003170
bt r9d, 0x18
jae 0x140002d6a
lea rax, [rsp + 0x40]
mov ecx, 0x32
call fcn.140004740
test eax, eax
jne 0x140003170
mov eax, 0x80000001
cpuid
test cl, 0x20
je 0x140002d8d
lea rax, [rsp + 0x40]
mov ecx, 0x15
call fcn.140004740
test eax, eax
jne 0x140003170
mov eax, 0x80000008
cpuid
bt ebx, 9
jae 0x140002db1
lea rax, [rsp + 0x40]
mov ecx, 0x37
call fcn.140004740
test eax, eax
jne 0x140003170
test bpl, 0x20
je 0x140002dce
lea rax, [rsp + 0x40]
mov ecx, 0x3e
call fcn.140004740
test eax, eax
jne 0x140003170
test bpl, bpl
jns 0x140002dea
lea rax, [rsp + 0x40]
mov ecx, 0x35
call fcn.140004740
test eax, eax
jne 0x140003170
bt ebp, 8
jae 0x140002e07
lea rax, [rsp + 0x40]
mov ecx, 0x2e
call fcn.140004740
test eax, eax
jne 0x140003170
bt ebp, 0x16
jae 0x140002e24
lea rax, [rsp + 0x40]
mov ecx, 0x33
call fcn.140004740
test eax, eax
jne 0x140003170
bt ebp, 0x19
jae 0x140002e41
lea rax, [rsp + 0x40]
mov ecx, 0x3b
call fcn.140004740
test eax, eax
jne 0x140003170
bt ebp, 0x1b
jae 0x140002e5e
lea rax, [rsp + 0x40]
mov ecx, 0x3c
call fcn.140004740
test eax, eax
jne 0x140003170
bt ebp, 0x1c
jae 0x140002e7b
lea rax, [rsp + 0x40]
mov ecx, 0x3d
call fcn.140004740
test eax, eax
jne 0x140003170
bt ebp, 0x1d
jae 0x140002e98
lea rax, [rsp + 0x40]
mov ecx, 0x40
call fcn.140004740
test eax, eax
jne 0x140003170
bt edi, 0x14
jae 0x140002eb5
lea rax, [rsp + 0x40]
mov ecx, 0x34
call fcn.140004740
test eax, eax
jne 0x140003170
bt edi, 0x12
jae 0x140002ed2
lea rax, [rsp + 0x40]
mov ecx, 0x38
call fcn.140004740
test eax, eax
jne 0x140003170
mov eax, 0x14
xor ecx, ecx
cpuid
test bl, 0x10
je 0x140002ef7
lea rax, [rsp + 0x40]
mov ecx, 0x1b
call fcn.140004740
test eax, eax
jne 0x140003170
bt ebp, 0x17
jb 0x14000334a
mov eax, 7
mov ecx, 1
cpuid
mov r11d, edx
mov r10d, eax
bt eax, 0x16
jae 0x140002f30
lea rax, [rsp + 0x40]
mov ecx, 0x47
call fcn.140004740
test eax, eax
jne 0x140003170
test dil, 0x20
je 0x140002f4d
lea rax, [rsp + 0x40]
mov ecx, 0x48
call fcn.140004740
test eax, eax
jne 0x140003170
bt r11d, 0xe
jae 0x140002f6b
lea rax, [rsp + 0x40]
mov ecx, 0x49
call fcn.140004740
test eax, eax
jne 0x140003170
test r10b, r10b
jns 0x140002f87
lea rax, [rsp + 0x40]
mov ecx, 0x4b
call fcn.140004740
test eax, eax
jne 0x140003170
test r10b, 8
je 0x140002fa4
lea rax, [rsp + 0x40]
mov ecx, 0x4e
call fcn.140004740
test eax, eax
jne 0x140003170
test r11w, r11w
jns 0x140002fc1
lea rax, [rsp + 0x40]
mov ecx, 0x55
call fcn.140004740
test eax, eax
jne 0x140003170
bt r11d, 0x15
jae 0x140002fdf
lea rax, [rsp + 0x40]
mov ecx, 0x58
call fcn.140004740
test eax, eax
jne 0x140003170
bt r10d, 0x1b
jae 0x140002ffd
lea rax, [rsp + 0x40]
mov ecx, 0x59
call fcn.140004740
test eax, eax
jne 0x140003170
bt r10d, 0x13
jae 0x14000301b
lea rax, [rsp + 0x40]
mov ecx, 0x5a
call fcn.140004740
test eax, eax
jne 0x140003170
test bl, 2
je 0x140003037
lea rax, [rsp + 0x40]
mov ecx, 0x5b
call fcn.140004740
test eax, eax
jne 0x140003170
bt r11d, 0x13
jb 0x1400033ab
bt r8d, 0x1b
jb 0x14000340e
lea rcx, str.INTEL_ISA_DISABLE
call sub.api_ms_win_crt_environment_l1_1_0.dll_getenv
test rax, rax
je 0x140003759
mov rdi, rax
mov al, byte [rax]
test al, al
je 0x140003759
xor r8d, r8d
lea r9, [0x14004c1b0]
lea rdx, [rsp + 0x30]
xor r10d, r10d
mov r11, rdi
cmp al, 0x2c
jne 0x14000309d
movzx eax, byte [r11 + 1]
inc r11
cmp eax, 0x2c
je 0x140003088
test eax, eax
je 0x140003745
lea rbx, [r11 + 1]
mov rdi, rbx
mov rax, rdi
movzx ecx, byte [rdi]
inc rdi
cmp ecx, 0x2c
je 0x1400030bb
test ecx, ecx
je 0x1400030bb
mov r10, rax
jmp 0x1400030a4
mov r14, r10
sub r14, r11
inc r14
je 0x140003139
cmp byte [0x14004c1a0], 0
jne 0x1400030d4
call fcn.1400039b0
mov rax, r14
shr rax, 1
mov r15, r14
and r15, 0xfffffffffffffffe
mov ecx, 1
lea r12, [rcx + rcx*2]
mov r12, qword [r9 + r12*8 + 0x10]
test r12, r12
je 0x140003130
cmp r10, r11
je 0x14000311a
xor r13d, r13d
mov bpl, byte [rbx + r13*2 - 1]
cmp bpl, byte [r12 + r13*2]
jne 0x140003130
mov bpl, byte [rbx + r13*2]
cmp bpl, byte [r12 + r13*2 + 1]
jne 0x140003130
inc r13
cmp rax, r13
jne 0x1400030fc
cmp r15, r14
je 0x140003129
mov bpl, byte [r11 + r15]
cmp bpl, byte [r12 + r15]
jne 0x140003130
cmp byte [r12 + r14], 0
je 0x14000314b
inc rcx
cmp rcx, 0x5c
jne 0x1400030e6
dec rdi
mov al, byte [rdi]
test al, al
jne 0x140003081
jmp 0x140003745
cmp rcx, 2
jb 0x140003139
mov rax, rdx
call fcn.140004740
cmp eax, 1
adc r8, 0
jmp 0x140003139
movaps xmm0, xmmword [rsp + 0x40]
movaps xmmword [0x14004c180], xmm0
xor eax, eax
mov rcx, qword [rsp + 0x58]
xor rcx, rsp
cmp rcx, qword [0x14004c040]
jne 0x1400031c9
movaps xmm0, xmmword [rsp + 0x60]
movaps xmm1, xmmword [rsp + 0x70]
movaps xmm2, xmmword [rsp + 0x80]
movaps xmm3, xmmword [rsp + 0x90]
movaps xmm4, xmmword [rsp + 0xa0]
movaps xmm5, xmmword [rsp + 0xb0]
add rsp, 0xc8
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
pop rcx
pop rdx
pop r8
pop r9
pop r10
pop r11
ret
call fcn.140005cd0
int3
lea rax, [rsp + 0x40]
mov ecx, 5
call fcn.140004740
test eax, eax
jne 0x140003170
bt edx, 0x19
jae 0x1400031ff
lea rax, [rsp + 0x40]
mov ecx, 6
call fcn.140004740
test eax, eax
jne 0x140003170
bt edx, 0x1a
jae 0x14000321c
lea rax, [rsp + 0x40]
mov ecx, 7
call fcn.140004740
test eax, eax
jne 0x140003170
test r8b, 1
je 0x140003239
lea rax, [rsp + 0x40]
mov ecx, 8
call fcn.140004740
test eax, eax
jne 0x140003170
bt r8d, 9
jae 0x140003257
lea rax, [rsp + 0x40]
mov ecx, 9
call fcn.140004740
test eax, eax
jne 0x140003170
bt r8d, 0x16
jae 0x140003275
lea rax, [rsp + 0x40]
mov ecx, 0xc
call fcn.140004740
test eax, eax
jne 0x140003170
bt r8d, 0x13
jae 0x140003293
lea rax, [rsp + 0x40]
mov ecx, 0xa
call fcn.140004740
test eax, eax
jne 0x140003170
bt r8d, 0x14
jae 0x1400032b1
lea rax, [rsp + 0x40]
mov ecx, 0xb
call fcn.140004740
test eax, eax
jne 0x140003170
bt r8d, 0x17
jae 0x1400032cf
lea rax, [rsp + 0x40]
mov ecx, 0xd
call fcn.140004740
test eax, eax
jne 0x140003170
test r8b, 2
je 0x1400032ec
lea rax, [rsp + 0x40]
mov ecx, 0xe
call fcn.140004740
test eax, eax
jne 0x140003170
mov r10d, edx
bt r8d, 0x19
jae 0x14000330d
lea rax, [rsp + 0x40]
mov ecx, 0xf
call fcn.140004740
test eax, eax
jne 0x140003170
mov eax, 7
xor ecx, ecx
cpuid
mov ebp, ecx
mov edi, edx
mov r9d, ebx
bt ebx, 0x1d
jb 0x14000332b
mov edx, r10d
jmp 0x140002c61
lea rax, [rsp + 0x40]
mov ecx, 0x24
call fcn.140004740
test eax, eax
mov edx, r10d
jne 0x140003170
jmp 0x140002c61
lea rax, [rsp + 0x40]
mov ecx, 1
call fcn.140004740
test eax, eax
jne 0x140003170
mov eax, 0x19
xor ecx, ecx
cpuid
test bl, 1
je 0x140003386
lea rax, [rsp + 0x40]
mov ecx, 0x45
call fcn.140004740
test eax, eax
jne 0x140003170
test bl, 4
je 0x140002f01
lea rax, [rsp + 0x40]
mov ecx, 0x46
call fcn.140004740
test eax, eax
jne 0x140003170
jmp 0x140002f01
lea rax, [rsp + 0x40]
mov ecx, 1
call fcn.140004740
test eax, eax
jne 0x140003170
mov eax, 0x24
xor ecx, ecx
cpuid
bt ebx, 0x11
jae 0x1400033e8
lea rax, [rsp + 0x40]
mov ecx, 0x56
call fcn.140004740
test eax, eax
jne 0x140003170
bt ebx, 0x12
jae 0x140003042
lea rax, [rsp + 0x40]
mov ecx, 0x57
call fcn.140004740
test eax, eax
jne 0x140003170
jmp 0x140003042
lea rax, [rsp + 0x40]
mov ecx, 1
call fcn.140004740
test eax, eax
jne 0x140003170
xor ecx, ecx
xgetbv
mov edx, eax
not edx
test edx, 0x60000
jne 0x140003457
lea rax, [rsp + 0x40]
mov ecx, 1
call fcn.140004740
test eax, eax
jne 0x140003170
bt edi, 0x18
jb 0x1400037a1
test dl, 6
jne 0x14000304d
lea rax, [rsp + 0x40]
mov ecx, 1
call fcn.140004740
test eax, eax
jne 0x140003170
bt r8d, 0x1c
jb 0x140003837
bt r8d, 0x1d
jae 0x1400034a0
lea rax, [rsp + 0x40]
mov ecx, 0x11
call fcn.140004740
test eax, eax
jne 0x140003170
test r9b, 0x20
jne 0x1400038ae
bt r8d, 0xc
jae 0x1400034c8
lea rax, [rsp + 0x40]
mov ecx, 0x13
call fcn.140004740
test eax, eax
jne 0x140003170
test dl, 0x18
jne 0x140003502
lea rax, [rsp + 0x40]
mov ecx, 1
call fcn.140004740
test eax, eax
jne 0x140003170
bt r9d, 0xe
jae 0x140003502
lea rax, [rsp + 0x40]
mov ecx, 0x25
call fcn.140004740
test eax, eax
jne 0x140003170
test r10b, 0x10
je 0x14000351f
lea rax, [rsp + 0x40]
mov ecx, 0x41
call fcn.140004740
test eax, eax
jne 0x140003170
test dl, 0xe0
jne 0x14000304d
lea rax, [rsp + 0x40]
mov ecx, 1
call fcn.140004740
test eax, eax
jne 0x140003170
bt r9d, 0x10
jae 0x14000355d
lea rax, [rsp + 0x40]
mov ecx, 0x19
call fcn.140004740
test eax, eax
jne 0x140003170
bt r9d, 0x1c
jae 0x14000357b
lea rax, [rsp + 0x40]
mov ecx, 0x23
call fcn.140004740
test eax, eax
jne 0x140003170
bt r9d, 0x1b
jae 0x140003599
lea rax, [rsp + 0x40]
mov ecx, 0x21
call fcn.140004740
test eax, eax
jne 0x140003170
bt r9d, 0x1a
jae 0x1400035b7
lea rax, [rsp + 0x40]
mov ecx, 0x22
call fcn.140004740
test eax, eax
jne 0x140003170
bt r9d, 0x11
jae 0x1400035d5
lea rax, [rsp + 0x40]
mov ecx, 0x1a
call fcn.140004740
test eax, eax
jne 0x140003170
bt r9d, 0x1e
jae 0x1400035f3
lea rax, [rsp + 0x40]
mov ecx, 0x26
call fcn.140004740
test eax, eax
jne 0x140003170
test r9d, r9d
js 0x14000397e
bt r9d, 0x15
jae 0x14000361a
lea rax, [rsp + 0x40]
mov ecx, 0x1f
call fcn.140004740
test eax, eax
jne 0x140003170
test bpl, 2
je 0x140003637
lea rax, [rsp + 0x40]
mov ecx, 0x28
call fcn.140004740
test eax, eax
jne 0x140003170
bt ebp, 0xe
jae 0x140003654
lea rax, [rsp + 0x40]
mov ecx, 0x2b
call fcn.140004740
test eax, eax
jne 0x140003170
test dil, 4
je 0x140003671
lea rax, [rsp + 0x40]
mov ecx, 0x2a
call fcn.140004740
test eax, eax
jne 0x140003170
test dil, 8
je 0x14000368e
lea rax, [rsp + 0x40]
mov ecx, 0x29
call fcn.140004740
test eax, eax
jne 0x140003170
bt ebp, 0xc
jae 0x1400036ab
lea rax, [rsp + 0x40]
mov ecx, 0x2c
call fcn.140004740
test eax, eax
jne 0x140003170
test bpl, 0x40
je 0x1400036c8
lea rax, [rsp + 0x40]
mov ecx, 0x2d
call fcn.140004740
test eax, eax
jne 0x140003170
bt ebp, 0xb
jae 0x1400036e5
lea rax, [rsp + 0x40]
mov ecx, 0x31
call fcn.140004740
test eax, eax
jne 0x140003170
test r10b, 0x20
je 0x140003702
lea rax, [rsp + 0x40]
mov ecx, 0x3f
call fcn.140004740
test eax, eax
jne 0x140003170
bt edi, 0x17
jae 0x14000371f
lea rax, [rsp + 0x40]
mov ecx, 0x3a
call fcn.140004740
test eax, eax
jne 0x140003170
bt edi, 8
jae 0x14000304d
lea rax, [rsp + 0x40]
mov ecx, 0x39
call fcn.140004740
test eax, eax
jne 0x140003170
jmp 0x14000304d
test r8d, r8d
jle 0x140003759
movaps xmm0, xmmword [rsp + 0x30]
andnps xmm0, xmmword [rsp + 0x40]
movaps xmmword [rsp + 0x40], xmm0
mov rax, qword [rsp + 0x48]
cmp esi, 1
jne 0x140003789
mov qword [0x14004c188], rax
mov rcx, qword [rsp + 0x40]
mov qword [0x14004c180], rcx
mov qword [0x14004c198], rax
mov qword [0x14004c190], rcx
jmp 0x14000316e
mov qword [0x14004c198], rax
mov rax, qword [rsp + 0x40]
mov qword [0x14004c190], rax
jmp 0x14000316e
lea rax, [rsp + 0x40]
mov ecx, 0x42
call fcn.140004740
test eax, eax
jne 0x140003170
bt r10d, 0x15
jae 0x1400037d6
lea rax, [rsp + 0x40]
mov ecx, 0x4f
call fcn.140004740
test eax, eax
jne 0x140003170
bt r11d, 8
jae 0x1400037f4
lea rax, [rsp + 0x40]
mov ecx, 0x50
call fcn.140004740
test eax, eax
jne 0x140003170
bt edi, 0x19
jae 0x140003811
lea rax, [rsp + 0x40]
mov ecx, 0x43
call fcn.140004740
test eax, eax
jne 0x140003170
bt edi, 0x16
jae 0x140003457
lea rax, [rsp + 0x40]
mov ecx, 0x44
call fcn.140004740
test eax, eax
jne 0x140003170
jmp 0x140003457
lea rax, [rsp + 0x40]
mov ecx, 0x10
call fcn.140004740
test eax, eax
jne 0x140003170
bt ebp, 9
jae 0x14000386b
lea rax, [rsp + 0x40]
mov ecx, 0x2f
call fcn.140004740
test eax, eax
jne 0x140003170
bt ebp, 0xa
jae 0x140003888
lea rax, [rsp + 0x40]
mov ecx, 0x30
call fcn.140004740
test eax, eax
jne 0x140003170
test r10b, 2
je 0x140003482
lea rax, [rsp + 0x40]
mov ecx, 0x52
call fcn.140004740
test eax, eax
jne 0x140003170
jmp 0x140003482
lea rax, [rsp + 0x40]
mov ecx, 0x18
call fcn.140004740
test eax, eax
jne 0x140003170
test r11b, 0x10
je 0x1400038e2
lea rax, [rsp + 0x40]
mov ecx, 0x4a
call fcn.140004740
test eax, eax
jne 0x140003170
bt r10d, 0x17
jae 0x140003900
lea rax, [rsp + 0x40]
mov ecx, 0x4c
call fcn.140004740
test eax, eax
jne 0x140003170
test r11b, 0x20
je 0x14000391d
lea rax, [rsp + 0x40]
mov ecx, 0x4d
call fcn.140004740
test eax, eax
jne 0x140003170
test r10b, 1
je 0x14000393a
lea rax, [rsp + 0x40]
mov ecx, 0x51
call fcn.140004740
test eax, eax
jne 0x140003170
test r10b, 4
je 0x140003957
lea rax, [rsp + 0x40]
mov ecx, 0x53
call fcn.140004740
test eax, eax
jne 0x140003170
bt r11d, 0xa
jae 0x1400034aa
lea rax, [rsp + 0x40]
mov ecx, 0x54
call fcn.140004740
test eax, eax
jne 0x140003170
jmp 0x1400034aa
lea rax, [rsp + 0x40]
mov ecx, 0x27
call fcn.140004740
test eax, eax
jne 0x140003170
jmp 0x1400035fc