Function at 0x18006e530
Capabilities:
Encrypt data using aes via x86 extensions
Resolve function by parsing pe exports

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rbp
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
mov r9d, dword [rcx]
lea rbp, str.cwko0
mov dword [rdx], r9d
mov rsi, rdx
mov r11d, dword [rcx + 4]
mov dword [rdx + 4], r11d
mov edi, dword [rcx + 8]
mov dword [rdx + 8], edi
mov ebx, dword [rcx + 0xc]
mov dword [rdx + 0xc], ebx
mov eax, ebx
shr eax, 0x18
movzx ecx, al
mov eax, ebx
shr eax, 0x10
movzx r8d, bl
mov r10d, dword [rbp + r8*4 + 0xc00]
xor r10d, dword [rbp + rcx*4 + 0x800]
movzx ecx, al
mov eax, ebx
shr eax, 8
xor r10d, dword [rbp + rcx*4 + 0x400]
movzx ecx, al
xor r10d, dword [rbp + rcx*4]
xor r10d, r9d
xor r10d, 1
xor r11d, r10d
mov dword [rdx + 0x10], r10d
xor edi, r11d
mov dword [rdx + 0x14], r11d
xor ebx, edi
mov dword [rdx + 0x18], edi
mov dword [rdx + 0x1c], ebx
mov eax, ebx
shr eax, 0x18
movzx ecx, al
mov eax, ebx
shr eax, 0x10
movzx edx, bl
mov r8d, dword [rbp + rdx*4 + 0xc00]
xor r8d, dword [rbp + rcx*4 + 0x800]
movzx ecx, al
mov eax, ebx
shr eax, 8
xor r8d, dword [rbp + rcx*4 + 0x400]
movzx ecx, al
xor r8d, dword [rbp + rcx*4]
xor r8d, r10d
xor r8d, 2
xor r11d, r8d
mov dword [rsi + 0x20], r8d
xor edi, r11d
mov dword [rsi + 0x24], r11d
xor ebx, edi
mov dword [rsi + 0x28], edi
movzx edx, bl
mov eax, ebx
shr eax, 0x18
movzx ecx, al
mov eax, ebx
shr eax, 0x10
mov r9d, dword [rbp + rdx*4 + 0xc00]
mov dword [rsi + 0x2c], ebx
xor r9d, dword [rbp + rcx*4 + 0x800]
movzx ecx, al
mov eax, ebx
shr eax, 8
xor r9d, dword [rbp + rcx*4 + 0x400]
movzx ecx, al
xor r9d, dword [rbp + rcx*4]
xor r9d, r8d
xor r9d, 4
xor r11d, r9d
mov dword [rsi + 0x30], r9d
xor edi, r11d
mov dword [rsi + 0x34], r11d
xor ebx, edi
mov dword [rsi + 0x38], edi
mov dword [rsi + 0x3c], ebx
mov eax, ebx
movzx edx, bl
mov r8d, dword [rbp + rdx*4 + 0xc00]
shr eax, 0x18
movzx ecx, al
mov eax, ebx
shr eax, 0x10
xor r8d, dword [rbp + rcx*4 + 0x800]
movzx ecx, al
mov eax, ebx
shr eax, 8
xor r8d, dword [rbp + rcx*4 + 0x400]
movzx ecx, al
xor r8d, dword [rbp + rcx*4]
xor r8d, r9d
xor r8d, 8
xor r11d, r8d
mov dword [rsi + 0x40], r8d
xor edi, r11d
mov dword [rsi + 0x44], r11d
xor ebx, edi
mov dword [rsi + 0x48], edi
movzx edx, bl
mov eax, ebx
shr eax, 0x18
movzx ecx, al
mov eax, ebx
shr eax, 0x10
mov r9d, dword [rbp + rdx*4 + 0xc00]
mov dword [rsi + 0x4c], ebx
xor r9d, dword [rbp + rcx*4 + 0x800]
movzx ecx, al
mov eax, ebx
shr eax, 8
xor r9d, dword [rbp + rcx*4 + 0x400]
movzx ecx, al
xor r9d, dword [rbp + rcx*4]
xor r9d, r8d
xor r9d, 0x10
xor r11d, r9d
mov dword [rsi + 0x50], r9d
xor edi, r11d
mov dword [rsi + 0x54], r11d
xor ebx, edi
mov dword [rsi + 0x58], edi
movzx edx, bl
mov eax, ebx
shr eax, 0x18
movzx ecx, al
mov eax, ebx
shr eax, 0x10
mov r8d, dword [rbp + rdx*4 + 0xc00]
mov dword [rsi + 0x5c], ebx
xor r8d, dword [rbp + rcx*4 + 0x800]
movzx ecx, al
mov eax, ebx
shr eax, 8
xor r8d, dword [rbp + rcx*4 + 0x400]
movzx ecx, al
xor r8d, dword [rbp + rcx*4]
xor r8d, r9d
xor r8d, 0x20
xor r11d, r8d
mov dword [rsi + 0x60], r8d
xor edi, r11d
mov dword [rsi + 0x64], r11d
xor ebx, edi
mov dword [rsi + 0x68], edi
mov eax, ebx
movzx edx, bl
shr eax, 0x18
movzx ecx, al
mov eax, ebx
shr eax, 0x10
mov r9d, dword [rbp + rdx*4 + 0xc00]
mov dword [rsi + 0x6c], ebx
xor r9d, dword [rbp + rcx*4 + 0x800]
movzx ecx, al
mov eax, ebx
shr eax, 8
xor r9d, dword [rbp + rcx*4 + 0x400]
movzx ecx, al
xor r9d, dword [rbp + rcx*4]
xor r9d, r8d
mov dword [rsi + 0xf0], 0
xor r9d, 0x40
mov byte [rsi + 0xf0], 0xa0
xor r11d, r9d
mov dword [rsi + 0x70], r9d
xor edi, r11d
mov dword [rsi + 0x74], r11d
xor ebx, edi
mov dword [rsi + 0x78], edi
movzx edx, bl
mov eax, ebx
shr eax, 0x18
movzx ecx, al
mov eax, ebx
shr eax, 0x10
mov r8d, dword [rbp + rdx*4 + 0xc00]
mov dword [rsi + 0x7c], ebx
xor r8d, dword [rbp + rcx*4 + 0x800]
movzx ecx, al
mov eax, ebx
shr eax, 8
xor r8d, dword [rbp + rcx*4 + 0x400]
movzx ecx, al
xor r8d, dword [rbp + rcx*4]
xor r8d, r9d
btc r8d, 7
xor r11d, r8d
mov dword [rsi + 0x80], r8d
xor edi, r11d
mov dword [rsi + 0x84], r11d
xor ebx, edi
mov dword [rsi + 0x88], edi
movzx edx, bl
mov eax, ebx
shr eax, 0x18
movzx ecx, al
mov eax, ebx
shr eax, 0x10
mov r9d, dword [rbp + rdx*4 + 0xc00]
mov dword [rsi + 0x8c], ebx
xor r9d, dword [rbp + rcx*4 + 0x800]
movzx ecx, al
mov eax, ebx
shr eax, 8
xor r9d, dword [rbp + rcx*4 + 0x400]
movzx ecx, al
xor r9d, dword [rbp + rcx*4]
xor r9d, r8d
xor r9d, 0x1b
xor r11d, r9d
mov dword [rsi + 0x90], r9d
xor edi, r11d
mov dword [rsi + 0x94], r11d
xor ebx, edi
mov dword [rsi + 0x98], edi
mov eax, ebx
movzx edx, bl
shr eax, 0x18
movzx ecx, al
mov eax, ebx
shr eax, 0x10
mov r8d, dword [rbp + rdx*4 + 0xc00]
mov dword [rsi + 0x9c], ebx
xor r8d, dword [rbp + rcx*4 + 0x800]
movzx ecx, al
mov eax, ebx
shr eax, 8
xor r8d, dword [rbp + rcx*4 + 0x400]
movzx ecx, al
xor r8d, dword [rbp + rcx*4]
xor r8d, r9d
xor r8d, 0x36
xor r11d, r8d
mov dword [rsi + 0xa0], r8d
xor edi, r11d
mov dword [rsi + 0xa4], r11d
xor ebx, edi
mov dword [rsi + 0xa8], edi
mov dword [rsi + 0xac], ebx
xor eax, eax
mov rbx, qword [rsp + 8]
mov rbp, qword [rsp + 0x10]
mov rsi, qword [rsp + 0x18]
mov rdi, qword [rsp + 0x20]
ret
sub rsp, 0x38
mov r9, rcx
mov r8, rdx
mov ecx, dword [0x1800ec414]
test ecx, ecx
jns 0x18006e565
xor ecx, ecx
mov qword [rsp + 0x30], rbx
mov eax, 1
cpuid
mov rbx, qword [rsp + 0x30]
and ecx, 0x2000000
mov dword [0x1800ec414], ecx
test ecx, ecx
jne 0x18006e576
mov rdx, r8
mov rcx, r9
add rsp, 0x38
jmp 0x18006b600
movdqu xmm2, xmmword [r9]
movdqa xmm1, xmm2
movdqa xmmword [r8], xmm2
pslldq xmm1, 4
movdqa xmm0, xmm1
pslldq xmm1, 4
movdqa xmm3, xmm1
pxor xmm0, xmm2
pslldq xmm1, 4
pxor xmm3, xmm0
pxor xmm3, xmm1
aeskeygenassist xmm0, xmm2, 1
pshufd xmm1, xmm0, 0xff
pxor xmm3, xmm1
movdqa xmm1, xmm3
movdqa xmmword [r8 + 0x10], xmm3
pslldq xmm1, 4
movdqa xmm0, xmm1
pslldq xmm1, 4
movdqa xmm2, xmm1
pxor xmm0, xmm3
pxor xmm2, xmm0
pslldq xmm1, 4
pxor xmm2, xmm1
aeskeygenassist xmm0, xmm3, 2
pshufd xmm1, xmm0, 0xff
pxor xmm2, xmm1
movdqa xmm1, xmm2
movdqa xmmword [r8 + 0x20], xmm2
pslldq xmm1, 4
movdqa xmm0, xmm1
pslldq xmm1, 4
movdqa xmm3, xmm1
pxor xmm0, xmm2
pslldq xmm1, 4
pxor xmm3, xmm0
pxor xmm3, xmm1
aeskeygenassist xmm0, xmm2, 4
pshufd xmm1, xmm0, 0xff
pxor xmm3, xmm1
movdqa xmm1, xmm3
movdqa xmmword [r8 + 0x30], xmm3
pslldq xmm1, 4
movdqa xmm0, xmm1
pslldq xmm1, 4
movdqa xmm2, xmm1
pxor xmm0, xmm3
pxor xmm2, xmm0
pslldq xmm1, 4
pxor xmm2, xmm1
aeskeygenassist xmm0, xmm3, 8
pshufd xmm1, xmm0, 0xff
pxor xmm2, xmm1
movdqa xmm1, xmm2
movdqa xmmword [r8 + 0x40], xmm2
pslldq xmm1, 4
movdqa xmm0, xmm1
pslldq xmm1, 4
movdqa xmm3, xmm1
pxor xmm0, xmm2
pslldq xmm1, 4
pxor xmm3, xmm0
pxor xmm3, xmm1
aeskeygenassist xmm0, xmm2, 0x10
pshufd xmm1, xmm0, 0xff
pxor xmm3, xmm1
movdqa xmm1, xmm3
movdqa xmmword [r8 + 0x50], xmm3
pslldq xmm1, 4
movdqa xmm0, xmm1
pslldq xmm1, 4
movdqa xmm2, xmm1
pxor xmm0, xmm3
pxor xmm2, xmm0
pslldq xmm1, 4
pxor xmm2, xmm1
aeskeygenassist xmm0, xmm3, 0x20
pshufd xmm1, xmm0, 0xff
pxor xmm2, xmm1
movdqa xmmword [r8 + 0x60], xmm2
movdqa xmm1, xmm2
pslldq xmm1, 4
xor eax, eax
movdqa xmm0, xmm1
pslldq xmm1, 4
pxor xmm0, xmm2
movdqa xmm3, xmm1
pslldq xmm1, 4
pxor xmm3, xmm0
pxor xmm3, xmm1
aeskeygenassist xmm0, xmm2, 0x40
pshufd xmm1, xmm0, 0xff
pxor xmm3, xmm1
movdqa xmmword [r8 + 0x70], xmm3
movdqa xmm1, xmm3
pslldq xmm1, 4
movdqa xmm0, xmm1
pslldq xmm1, 4
movdqa xmm2, xmm1
pxor xmm0, xmm3
pxor xmm2, xmm0
pslldq xmm1, 4
pxor xmm2, xmm1
aeskeygenassist xmm0, xmm3, 0x80
pshufd xmm1, xmm0, 0xff
pxor xmm2, xmm1
movdqa xmmword [r8 + 0x80], xmm2
movdqa xmm1, xmm2
pslldq xmm1, 4
movdqa xmm0, xmm1
pslldq xmm1, 4
pxor xmm0, xmm2
movdqa xmm3, xmm1
pslldq xmm1, 4
pxor xmm3, xmm0
pxor xmm3, xmm1
aeskeygenassist xmm0, xmm2, 0x1b
pshufd xmm1, xmm0, 0xff
pxor xmm3, xmm1
movdqa xmmword [r8 + 0x90], xmm3
movdqa xmm1, xmm3
pslldq xmm1, 4
movdqa xmm0, xmm1
pslldq xmm1, 4
movdqa xmm2, xmm1
pxor xmm0, xmm3
pxor xmm2, xmm0
pslldq xmm1, 4
pxor xmm2, xmm1
aeskeygenassist xmm0, xmm3, 0x36
pshufd xmm1, xmm0, 0xff
pxor xmm2, xmm1
movdqa xmmword [r8 + 0xa0], xmm2
mov dword [r8 + 0xf0], 0
mov byte [r8 + 0xf0], 0xa0
add rsp, 0x38
ret