Function at 0x140001b30
Capabilities:
Access peb ldr_data
Encode data using xor
Execute command
Get ntdll base address
Hash data using fnv
Resolve function by parsing pe exports

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x448]
sub rsp, 0x520
movaps xmmword [rax - 0x38], xmm6
movaps xmmword [rax - 0x48], xmm7
movaps xmmword [rax - 0x58], xmm8
mov rax, qword [0x1400ae080]
xor rax, rsp
mov qword [rbp + 0x3e0], rax
call qword [sym.imp.SecureEngineSDK64.dll_Ordinal_151]
mov eax, dword [str.WGQ9]
mov dword [rsp + 0x50], eax
mov ebx, 4
lea edi, [rbx + 0x1b]
xor r13d, r13d
mov r12d, dword [reloc.WS2_32.dll_accept]
cmp byte [reloc.WS2_32.dll_gethostname], r13b
je 0x140001c6f
cmp r12d, 2
jl 0x140001c31
movdqa xmm3, xmmword [0x1400a0020]
movdqa xmm2, xmm3
punpckldq xmm2, xmm3
pmuldq xmm2, xmmword [0x1400a00f0]
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmmword [0x1400a00f0]
shufps xmm2, xmm0, 0xdd
movd xmm0, ebx
psrad xmm2, xmm0
movd xmm0, edi
movdqa xmm1, xmm2
psrld xmm1, xmm0
paddd xmm1, xmm2
pmulld xmm1, xmmword [0x1400a0040]
psubd xmm3, xmm1
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x1400a0080]
packuswb xmm2, xmm2
paddb xmm2, xmmword [0x1400a00d0]
movd xmm0, eax
xorps xmm2, xmm0
movd dword [rsp + 0x50], xmm2
jmp 0x140001c6f
lea r9, [rsp + 0x50]
mov r8d, r13d
nop dword [rax]
mov eax, 0x4ec4ec4f
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x34
movzx eax, r8b
sub al, cl
add al, 0x36
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, ebx
jl 0x140001c40
xorps xmm0, xmm0
movups xmmword [rbp + 0x80], xmm0
mov qword [rbp + 0x90], r13
mov qword [rbp + 0x98], r13
lea rax, [rsp + 0x50]
mov r15, 0xffffffffffffffff
mov r8, r15
inc r8
cmp byte [rax + r8], r13b
jne 0x140001c96
lea rdx, [rsp + 0x50]
lea rcx, [rbp + 0x80]
call fcn.140003660
mov byte [rsp + 0x48], r13b
lea rdx, [rsp + 0x48]
lea rcx, [rbp + 0x80]
call fcn.14001f260
movsd xmm0, qword [0x14009e510]
movsd qword [rsp + 0x30], xmm0
movzx ecx, word [0x14009e518]
mov word [rsp + 0x38], cx
movzx eax, byte [0x14009e51a]
mov byte [rsp + 0x30], 0x50
xor byte [rsp + 0x31], 0x37
xor byte [rsp + 0x32], 0x38
xor byte [rsp + 0x33], 0x39
xor byte [rsp + 0x34], 0x3a
xor byte [rsp + 0x35], 0x3b
xor byte [rsp + 0x36], 0x3c
xor byte [rsp + 0x37], 0x3d
xor cl, 0x3e
mov byte [rsp + 0x38], cl
xor byte [rsp + 0x39], 0x3f
xor al, 0x40
mov byte [rsp + 0x3a], al
xorps xmm0, xmm0
movups xmmword [rbp + 0x138], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x148], xmm1
lea rax, [rsp + 0x30]
mov r8, r15
nop
inc r8
cmp byte [rax + r8], r13b
jne 0x140001d40
lea rdx, [rsp + 0x30]
lea rcx, [rbp + 0x138]
call fcn.140003660
nop
movsd xmm0, qword [0x14009e530]
movsd qword [rsp + 0x30], xmm0
movzx ecx, word [0x14009e538]
mov word [rsp + 0x38], cx
movzx eax, byte [0x14009e53a]
mov byte [rsp + 0x30], 0x34
xor byte [rsp + 0x31], 0x37
xor byte [rsp + 0x32], 0x38
xor byte [rsp + 0x33], 0x39
xor byte [rsp + 0x34], 0x3a
xor byte [rsp + 0x35], 0x3b
xor byte [rsp + 0x36], 0x3c
xor byte [rsp + 0x37], 0x3d
xor cl, 0x3e
mov byte [rsp + 0x38], cl
xor byte [rsp + 0x39], 0x3f
xor al, 0x40
mov byte [rsp + 0x3a], al
xorps xmm0, xmm0
movups xmmword [rbp + 0x118], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x128], xmm1
lea rax, [rsp + 0x30]
mov r8, r15
inc r8
cmp byte [rax + r8], 0
jne 0x140001dd3
lea rdx, [rsp + 0x30]
lea rcx, [rbp + 0x118]
call fcn.140003660
nop
movups xmm0, xmmword [0x14009e4c0]
movups xmmword [rbp - 0x80], xmm0
movups xmm1, xmmword [0x14009e4d0]
movups xmmword [rbp - 0x70], xmm1
movups xmm0, xmmword [0x14009e4e0]
movups xmmword [rbp - 0x60], xmm0
movups xmm1, xmmword [0x14009e4f0]
movups xmmword [rbp - 0x50], xmm1
movzx eax, byte [0x14009e500]
mov byte [rbp - 0x40], al
mov r8d, r13d
cmp r12d, 2
jl 0x140001f73
movdqa xmm5, xmmword [0x1400a0020]
movdqa xmm4, xmmword [0x1400a00f0]
movd xmm6, ebx
movdqa xmm7, xmmword [0x1400a0040]
movd xmm8, edi
movdqa xmm0, xmmword [0x1400a00d0]
movdqa xmmword [rsp + 0x30], xmm0
lea rcx, [rbp - 0x7c]
mov edx, dword [rsp + 0x30]
nop dword [rax]
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x1400a0080]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm2, xmm0
movd dword [rcx - 4], xmm2
lea eax, [r8 + 4]
movd xmm3, eax
pshufd xmm3, xmm3, 0
paddd xmm3, xmm5
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x1400a0080]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
xorps xmm2, xmm0
movd dword [rcx], xmm2
add r8d, 8
lea rcx, [rcx + 8]
cmp r8d, 0x40
jl 0x140001e70
cmp r8d, 0x41
jge 0x140001fb0
movsxd rax, r8d
lea r9, [rbp - 0x80]
add r9, rax
nop dword [rax]
mov eax, 0x4ec4ec4f
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x34
movzx eax, r8b
sub al, cl
add al, 0x36
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x41
jl 0x140001f80
xorps xmm0, xmm0
movups xmmword [rbp + 0xf8], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x108], xmm1
lea rax, [rbp - 0x80]
mov r8, r15
nop dword [rax]
inc r8
cmp byte [rax + r8], 0
jne 0x140001fd0
lea rdx, [rbp - 0x80]
lea rcx, [rbp + 0xf8]
call fcn.140003660
nop
mov eax, dword [0x14009e50c]
mov dword [rsp + 0x50], eax
cmp byte [reloc.WS2_32.dll_gethostname], 0
je 0x1400020d0
cmp r12d, 2
jl 0x140002090
movdqa xmm3, xmmword [0x1400a0020]
movdqa xmm2, xmm3
punpckldq xmm2, xmm3
pmuldq xmm2, xmmword [0x1400a00f0]
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmmword [0x1400a00f0]
shufps xmm2, xmm0, 0xdd
movd xmm0, ebx
psrad xmm2, xmm0
movd xmm0, edi
movdqa xmm1, xmm2
psrld xmm1, xmm0
paddd xmm1, xmm2
pmulld xmm1, xmmword [0x1400a0040]
psubd xmm3, xmm1
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x1400a0080]
packuswb xmm2, xmm2
paddb xmm2, xmmword [0x1400a00d0]
movd xmm0, eax
xorps xmm2, xmm0
movd dword [rsp + 0x50], xmm2
jmp 0x1400020d0
lea r9, [rsp + 0x50]
mov r8d, r13d
nop dword [rax + rax]
mov eax, 0x4ec4ec4f
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x34
movzx eax, r8b
sub al, cl
add al, 0x36
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 4
jl 0x1400020a0
xorps xmm0, xmm0
movups xmmword [rbp + 0xd8], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0xe8], xmm1
lea rax, [rsp + 0x50]
mov r8, r15
nop dword [rax]
inc r8
cmp byte [rax + r8], 0
jne 0x1400020f0
lea rdx, [rsp + 0x50]
lea rcx, [rbp + 0xd8]
call fcn.140003660
nop
movups xmm0, xmmword [str.CLII]
movups xmmword [rsp + 0x58], xmm0
movsd xmm0, qword [0x14009e550]
movsd qword [rsp + 0x68], xmm0
mov eax, dword [0x14009e558]
mov dword [rsp + 0x70], eax
movzx eax, byte [0x14009e55c]
mov byte [rsp + 0x74], al
mov r8d, r13d
cmp r12d, 2
jl 0x140002283
movdqa xmm5, xmmword [0x1400a0020]
movdqa xmm4, xmmword [0x1400a00f0]
movd xmm6, ebx
movdqa xmm7, xmmword [0x1400a0040]
movd xmm8, edi
movdqa xmm0, xmmword [0x1400a00d0]
movdqa xmmword [rsp + 0x30], xmm0
lea rcx, [rsp + 0x5c]
mov edx, dword [rsp + 0x30]
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x1400a0080]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm2, xmm0
movd dword [rcx - 4], xmm2
lea eax, [r8 + 4]
movd xmm3, eax
pshufd xmm3, xmm3, 0
paddd xmm3, xmm5
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x1400a0080]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
xorps xmm2, xmm0
movd dword [rcx], xmm2
add r8d, 8
lea rcx, [rcx + 8]
cmp r8d, 0x18
jl 0x140002180
cmp r8d, 0x1d
jge 0x1400022c0
movsxd rax, r8d
lea r9, [rsp + 0x58]
add r9, rax
nop
mov eax, 0x4ec4ec4f
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x34
movzx eax, r8b
sub al, cl
add al, 0x36
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x1d
jl 0x140002290
xorps xmm0, xmm0
movups xmmword [rbp + 0xb8], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0xc8], xmm1
lea rax, [rsp + 0x58]
mov r8, r15
nop dword [rax]
inc r8
cmp byte [rax + r8], 0
jne 0x1400022e0
lea rdx, [rsp + 0x58]
lea rcx, [rbp + 0xb8]
call fcn.140003660
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x80], xmm0
movdqa xmm1, xmmword [0x1400a0010]
movdqu xmmword [rbp + 0x90], xmm1
mov byte [rbp + 0x80], 0
xor edx, edx
mov r8d, 0x278
lea rcx, [rbp + 0x160]
call sub.VCRUNTIME140.dll_memset
lea rax, [rbp - 0x20]
mov qword [rsp + 0x40], rax
lea rax, [rbp]
mov qword [rsp + 0x50], rax
lea rax, [rbp + 0x20]
mov qword [rbp - 0x30], rax
lea rax, [rbp + 0x40]
mov qword [rbp - 0x28], rax
lea rdx, [rbp + 0xb8]
lea rcx, [rbp - 0x20]
call fcn.140002fc0
mov r14, rax
lea rdx, [rbp + 0xd8]
lea rcx, [rbp]
call fcn.140002fc0
mov rsi, rax
lea rdx, [rbp + 0xf8]
lea rcx, [rbp + 0x20]
call fcn.140002fc0
mov rdi, rax
lea rdx, [rbp + 0x118]
lea rcx, [rbp + 0x40]
call fcn.140002fc0
mov rbx, rax
lea rdx, [rbp + 0x138]
lea rcx, [rbp + 0x60]
call fcn.140002fc0
nop
mov qword [rsp + 0x28], r14
mov qword [rsp + 0x20], rsi
mov r9, rdi
mov r8, rbx
mov rdx, rax
lea rcx, [rbp + 0x160]
call fcn.140001350
nop
lea rcx, [rbp + 0x160]
call fcn.140034770
movups xmm0, xmmword [0x14009e578]
movups xmmword [rsp + 0x58], xmm0
movzx eax, word [0x14009e588]
mov word [rsp + 0x68], ax
mov esi, 4
lea r14d, [rsi + 0x1b]
cmp byte [0x14009e589], 0
je 0x140002590
mov r8d, r13d
cmp r12d, 2
jl 0x140002553
movdqa xmm5, xmmword [0x1400a0020]
movdqa xmm4, xmmword [0x1400a00f0]
movd xmm6, esi
movdqa xmm7, xmmword [0x1400a0040]
movd xmm8, r14d
movdqa xmm0, xmmword [0x1400a00d0]
movdqa xmmword [rsp + 0x30], xmm0
lea rcx, [rsp + 0x5c]
mov edx, dword [rsp + 0x30]
nop
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x1400a0080]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm2, xmm0
movd dword [rcx - 4], xmm2
lea eax, [r8 + 4]
movd xmm3, eax
pshufd xmm3, xmm3, 0
paddd xmm3, xmm5
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x1400a0080]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
xorps xmm2, xmm0
movd dword [rcx], xmm2
add r8d, 8
lea rcx, [rcx + 8]
cmp r8d, 0x10
jl 0x140002450
cmp r8d, 0x12
jge 0x140002590
movsxd rax, r8d
lea r9, [rsp + 0x58]
add r9, rax
nop
mov eax, 0x4ec4ec4f
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x34
movzx eax, r8b
sub al, cl
add al, 0x36
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x12
jl 0x140002560
lea rdx, [rsp + 0x58]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400032a0
lea rdx, [rbp + 0x80]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_istream_char__struct_std::char_traits_char___std::cin]
call fcn.140003470
lea rdx, [rbp + 0x80]
lea rcx, [rsp + 0x58]
call fcn.140002fc0
mov rdx, rax
lea rcx, [rbp + 0x160]
call fcn.140036130
cmp byte [rbp + 0x370], 0
jne 0x140002726
movsd xmm0, qword [0x14009e520]
movsd qword [rsp + 0x30], xmm0
movzx ecx, word [0x14009e528]
mov word [rsp + 0x38], cx
movzx eax, byte [0x14009e52a]
mov byte [rsp + 0x30], 0xa
xor byte [rsp + 0x31], 0x37
xor byte [rsp + 0x32], 0x38
xor byte [rsp + 0x33], 0x39
xor byte [rsp + 0x34], 0x3a
xor byte [rsp + 0x35], 0x3b
xor byte [rsp + 0x36], 0x3c
xor byte [rsp + 0x37], 0x3d
xor cl, 0x3e
mov byte [rsp + 0x38], cl
xor byte [rsp + 0x39], 0x3f
xor al, 0x40
mov byte [rsp + 0x3a], al
lea rdx, [rsp + 0x30]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400032a0
lea rdx, [rbp + 0x378]
cmp qword [rbp + 0x390], 0x10
cmovae rdx, qword [rbp + 0x378]
mov r8, qword [rbp + 0x388]
mov rcx, rax
call fcn.140003a20
mov ecx, 0x5dc
call qword [sym.imp.KERNEL32.dll_Sleep]
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov edi, dword [rcx + r10 + 0x88]
add rdi, r10
cmp rdi, r10
je 0x140002706
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x140002706
mov ebx, dword [rdi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
lea rcx, [rbx + r9*4]
mov ecx, dword [rcx + r10]
add rcx, r10
mov r8d, 0xad788d4b
movzx edx, byte [rcx]
inc rcx
test dl, dl
je 0x140002701
nop
movsx edx, dl
xor edx, r8d
imul r8d, edx, 0x1000193
movzx edx, byte [rcx]
lea rcx, [rcx + 1]
test dl, dl
jne 0x1400026e0
cmp r8d, 0xf621561b
je 0x14000270b
test r9d, r9d
jne 0x1400026c0
mov rax, qword [rax]
jmp 0x140002690
mov ecx, dword [rdi + 0x1c]
add rcx, r10
mov eax, dword [rdi + 0x24]
add rax, r10
movzx eax, word [rax + r9*2]
mov edx, dword [rcx + rax*4]
add rdx, r10
xor ecx, ecx
call rdx
mov eax, dword [str.U_K9]
mov dword [rsp + 0x50], eax
cmp byte [reloc.WS2_32.dll_gethostname], 0
je 0x140002810
cmp r12d, 2
jl 0x1400027cc
movdqa xmm3, xmmword [0x1400a0020]
movdqa xmm2, xmm3
punpckldq xmm2, xmm3
pmuldq xmm2, xmmword [0x1400a00f0]
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmmword [0x1400a00f0]
shufps xmm2, xmm0, 0xdd
movd xmm0, esi
psrad xmm2, xmm0
movd xmm0, r14d
movdqa xmm1, xmm2
psrld xmm1, xmm0
paddd xmm1, xmm2
pmulld xmm1, xmmword [0x1400a0040]
psubd xmm3, xmm1
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x1400a0080]
packuswb xmm2, xmm2
paddb xmm2, xmmword [0x1400a00d0]
movd xmm0, eax
xorps xmm2, xmm0
movd dword [rsp + 0x50], xmm2
jmp 0x140002810
lea r9, [rsp + 0x50]
mov r8d, r13d
nop dword [rax]
nop dword [rax + rax]
mov eax, 0x4ec4ec4f
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x34
movzx eax, r8b
sub al, cl
add al, 0x36
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 4
jl 0x1400027e0
lea rcx, [rsp + 0x50]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp + 0xa0], xmm0
mov qword [rbp + 0xb0], rax
mov eax, dword [0x14009e504]
mov dword [rsp + 0x40], eax
movzx ecx, word [0x14009e508]
mov word [rsp + 0x44], cx
movzx eax, byte [reloc.WLDAP32.dll_Ordinal_60]
mov byte [rsp + 0x40], Ordinal_50
xor byte [rsp + 0x41], 0x37
xor byte [rsp + 0x42], 0x38
xor byte [rsp + 0x43], 0x39
xor cl, 0x3a
mov byte [rsp + 0x44], cl
xor byte [rsp + 0x45], 0x3b
xor al, 0x3c
mov byte [rsp + 0x46], al
movups xmmword [rsp + 0x58], xmm0
mov qword [rsp + 0x68], r13
mov qword [rsp + 0x70], r13
lea rax, [rsp + 0x40]
inc r15
cmp byte [rax + r15], 0
jne 0x140002885
mov r8, r15
lea rdx, [rsp + 0x40]
lea rcx, [rsp + 0x58]
call fcn.140003660
lea r8, [rsp + 0x58]
lea rdx, [rbp + 0xa0]
lea rcx, [rbp + 0x160]
call fcn.140032150
nop
lea rcx, [rbp + 0xa0]
call fcn.14001ce50
call qword [sym.imp.SecureEngineSDK64.dll_Ordinal_551]
nop
mov rcx, qword [rbp + 0xa0]
test rcx, rcx
je 0x140002922
mov rdx, qword [rbp + 0xb0]
sub rdx, rcx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000290b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000290b
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14008b14c
mov qword [rbp + 0xa0], r13
xorps xmm0, xmm0
movdqu xmmword [rbp + 0xa8], xmm0
lea rcx, [rbp + 0x160]
call fcn.140002b10
nop
mov rdx, qword [rbp + 0x98]
cmp rdx, 0x10
jb 0x140002974
inc rdx
mov rcx, qword [rbp + 0x80]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000296e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000296e
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14008b14c
nop
mov rdx, qword [rbp + 0xd0]
cmp rdx, 0x10
jb 0x1400029b9
inc rdx
mov rcx, qword [rbp + 0xb8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400029b3
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400029b3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14008b14c
nop
mov rdx, qword [rbp + 0xf0]
cmp rdx, 0x10
jb 0x1400029fe
inc rdx
mov rcx, qword [rbp + 0xd8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400029f8
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400029f8
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14008b14c
nop
mov rdx, qword [rbp + 0x110]
cmp rdx, 0x10
jb 0x140002a43
inc rdx
mov rcx, qword [rbp + 0xf8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140002a3d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140002a3d
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14008b14c
nop
mov rdx, qword [rbp + 0x130]
cmp rdx, 0x10
jb 0x140002a88
inc rdx
mov rcx, qword [rbp + 0x118]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140002a82
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140002a82
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14008b14c
nop
mov rdx, qword [rbp + 0x150]
cmp rdx, 0x10
jb 0x140002acc
inc rdx
mov rcx, qword [rbp + 0x138]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140002ac7
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140002ac7
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14008b14c
xor eax, eax
mov rcx, qword [rbp + 0x3e0]
xor rcx, rsp
call fcn.14008b0f0
lea r11, [rsp + 0x520]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
movaps xmm8, xmmword [r11 - 0x30]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret