Function at 0x180067320
Capabilities:
Encrypt data using aes via x86 extensions
Resolve function by parsing pe exports

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rbp
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push r12
push r13
push r14
push r15
mov r9d, dword [rcx]
lea r14, str.cwko0
mov dword [rdx], r9d
mov r13, rdx
mov r10d, dword [rcx + 4]
mov dword [rdx + 4], r10d
mov r11d, dword [rcx + 8]
mov dword [rdx + 8], r11d
mov ebx, dword [rcx + 0xc]
mov dword [rdx + 0xc], ebx
mov edi, dword [rcx + 0x10]
mov dword [rdx + 0x10], edi
mov r15d, dword [rcx + 0x14]
mov dword [rdx + 0x14], r15d
mov r12d, dword [rcx + 0x18]
mov dword [rdx + 0x18], r12d
mov r8d, dword [rcx + 0x1c]
mov dword [rdx + 0x1c], r8d
mov eax, r8d
shr eax, 0x10
mov edx, r8d
movzx ecx, al
mov esi, r8d
mov eax, r8d
shr rdx, 0x18
shr eax, 8
mov ebp, dword [r14 + rdx*4 + 0x800]
xor ebp, dword [r14 + rcx*4 + 0x400]
movzx ecx, al
movzx eax, r8b
xor ebp, dword [r14 + rcx*4]
xor ebp, dword [r14 + rax*4 + 0xc00]
xor ebp, r9d
xor ebp, dword [0x18008ade0]
mov dword [r13 + 0x20], ebp
mov r14d, ebp
xor r14d, r10d
lea r10, str.cwko0
mov dword [r13 + 0x24], r14d
mov r8d, r14d
xor r8d, r11d
mov dword [r13 + 0x28], r8d
xor ebx, r8d
movzx ecx, bl
mov eax, ebx
shr rax, 0x18
mov edx, ebx
mov dword [r13 + 0x2c], edx
mov r9d, dword [r10 + rcx*4]
xor r9d, dword [r10 + rax*4 + 0xc00]
mov eax, ebx
shr eax, 0x10
movzx ecx, al
mov eax, ebx
shr eax, 8
xor r9d, dword [r10 + rcx*4 + 0x800]
movzx ecx, al
xor r9d, dword [r10 + rcx*4 + 0x400]
xor r9d, edi
mov dword [r13 + 0x30], r9d
xor r15d, r9d
mov dword [r13 + 0x34], r15d
xor r12d, r15d
xor esi, r12d
mov dword [r13 + 0x38], r12d
mov dword [r13 + 0x3c], esi
movzx ecx, sil
mov eax, esi
shr rax, 0x18
mov edi, dword [r10 + rcx*4 + 0xc00]
xor edi, dword [r10 + rax*4 + 0x800]
mov eax, esi
shr eax, 0x10
movzx ecx, al
mov eax, esi
shr eax, 8
xor edi, dword [r10 + rcx*4 + 0x400]
movzx ecx, al
xor edi, dword [r10 + rcx*4]
xor edi, ebp
xor edi, dword [0x18008ade4]
mov dword [r13 + 0x40], edi
lea rbp, str.cwko0
xor r14d, edi
mov dword [r13 + 0x44], r14d
mov ebx, r14d
xor ebx, r8d
mov dword [r13 + 0x48], ebx
xor edx, ebx
mov r11d, edx
mov dword [r13 + 0x4c], r11d
mov eax, r11d
shr eax, 0x18
movzx ecx, al
mov eax, r11d
shr eax, 0x10
movzx edx, dl
mov r10d, dword [rbp + rdx*4]
xor r10d, dword [rbp + rcx*4 + 0xc00]
movzx ecx, al
mov eax, r11d
shr eax, 8
xor r10d, dword [rbp + rcx*4 + 0x800]
movzx ecx, al
xor r10d, dword [rbp + rcx*4 + 0x400]
xor r10d, r9d
mov dword [r13 + 0x50], r10d
xor r15d, r10d
mov dword [r13 + 0x54], r15d
xor r12d, r15d
mov dword [r13 + 0x58], r12d
xor esi, r12d
mov dword [r13 + 0x5c], esi
mov eax, esi
shr eax, 0x18
movzx ecx, al
mov eax, esi
shr eax, 0x10
movzx edx, sil
mov r8d, dword [rbp + rdx*4 + 0xc00]
xor r8d, dword [rbp + rcx*4 + 0x800]
movzx ecx, al
mov eax, esi
shr eax, 8
xor r8d, dword [rbp + rcx*4 + 0x400]
movzx ecx, al
xor r8d, dword [rbp + rcx*4]
xor r8d, dword [reloc.WS2_32.dll_connect]
xor edi, r8d
mov dword [r13 + 0x60], edi
xor r14d, edi
mov dword [r13 + 0x64], r14d
xor ebx, r14d
xor r11d, ebx
mov dword [r13 + 0x68], ebx
mov dword [r13 + 0x6c], r11d
mov eax, r11d
shr eax, 0x18
movzx ecx, al
mov eax, r11d
shr eax, 0x10
movzx edx, r11b
mov r8d, dword [rbp + rdx*4]
xor r8d, dword [rbp + rcx*4 + 0xc00]
movzx ecx, al
mov eax, r11d
shr eax, 8
xor r8d, dword [rbp + rcx*4 + 0x800]
movzx ecx, al
xor r8d, dword [rbp + rcx*4 + 0x400]
xor r10d, r8d
xor r15d, r10d
mov dword [r13 + 0x70], r10d
xor r12d, r15d
mov dword [r13 + 0x74], r15d
xor esi, r12d
mov dword [r13 + 0x78], r12d
mov eax, esi
mov dword [r13 + 0x7c], esi
shr eax, 0x18
movzx ecx, al
movzx edx, sil
mov r8d, dword [rbp + rdx*4 + 0xc00]
mov eax, esi
xor r8d, dword [rbp + rcx*4 + 0x800]
shr eax, 0x10
movzx ecx, al
mov eax, esi
shr eax, 8
xor r8d, dword [rbp + rcx*4 + 0x400]
movzx ecx, al
xor r8d, dword [rbp + rcx*4]
xor r8d, dword [0x18008adec]
xor edi, r8d
mov dword [r13 + 0x80], edi
xor r14d, edi
mov dword [r13 + 0x84], r14d
xor ebx, r14d
mov dword [r13 + 0x88], ebx
xor r11d, ebx
mov dword [r13 + 0x8c], r11d
mov eax, r11d
shr eax, 0x18
movzx ecx, al
mov eax, r11d
shr eax, 0x10
movzx edx, r11b
mov r8d, dword [rbp + rdx*4]
xor r8d, dword [rbp + rcx*4 + 0xc00]
movzx ecx, al
mov eax, r11d
shr eax, 8
xor r8d, dword [rbp + rcx*4 + 0x800]
movzx ecx, al
xor r8d, dword [rbp + rcx*4 + 0x400]
xor r10d, r8d
mov dword [r13 + 0x90], r10d
xor r15d, r10d
mov dword [r13 + 0x94], r15d
xor r12d, r15d
mov dword [r13 + 0x98], r12d
xor esi, r12d
mov dword [r13 + 0x9c], esi
mov eax, esi
shr eax, 0x18
movzx ecx, al
mov eax, esi
shr eax, 0x10
movzx edx, sil
mov r8d, dword [rbp + rdx*4 + 0xc00]
xor r8d, dword [rbp + rcx*4 + 0x800]
movzx ecx, al
mov eax, esi
shr eax, 8
xor r8d, dword [rbp + rcx*4 + 0x400]
movzx ecx, al
xor r8d, dword [rbp + rcx*4]
xor r8d, dword [reloc.WS2_32.dll_recv]
xor edi, r8d
mov dword [r13 + 0xa0], edi
xor r14d, edi
mov dword [r13 + 0xa4], r14d
xor ebx, r14d
xor r11d, ebx
mov dword [r13 + 0xa8], ebx
mov dword [r13 + 0xac], r11d
mov eax, r11d
shr eax, 0x18
movzx ecx, al
mov eax, r11d
shr eax, 0x10
movzx edx, r11b
mov r8d, dword [rbp + rdx*4]
xor r8d, dword [rbp + rcx*4 + 0xc00]
movzx ecx, al
mov eax, r11d
shr eax, 8
xor r8d, dword [rbp + rcx*4 + 0x800]
movzx ecx, al
xor r8d, dword [rbp + rcx*4 + 0x400]
xor r10d, r8d
mov dword [r13 + 0xb0], r10d
xor r15d, r10d
mov dword [r13 + 0xb4], r15d
xor r12d, r15d
mov dword [r13 + 0xb8], r12d
xor esi, r12d
mov dword [r13 + 0xbc], esi
mov eax, esi
shr eax, 0x18
movzx ecx, al
mov eax, esi
shr eax, 0x10
movzx edx, sil
mov r8d, dword [rbp + rdx*4 + 0xc00]
xor r8d, dword [rbp + rcx*4 + 0x800]
movzx ecx, al
mov eax, esi
shr eax, 8
xor r8d, dword [rbp + rcx*4 + 0x400]
movzx ecx, al
xor r8d, dword [rbp + rcx*4]
xor r8d, dword [0x18008adf4]
xor edi, r8d
mov dword [r13 + 0xc0], edi
xor r14d, edi
mov dword [r13 + 0xc4], r14d
xor ebx, r14d
mov dword [r13 + 0xc8], ebx
xor r11d, ebx
mov dword [r13 + 0xcc], r11d
mov eax, r11d
shr eax, 0x18
movzx ecx, al
mov eax, r11d
shr eax, 0x10
movzx edx, r11b
mov r8d, dword [rbp + rdx*4]
xor r8d, dword [rbp + rcx*4 + 0xc00]
movzx ecx, al
mov eax, r11d
shr eax, 8
xor r8d, dword [rbp + rcx*4 + 0x800]
movzx ecx, al
xor r8d, dword [rbp + rcx*4 + 0x400]
xor r10d, r8d
mov dword [r13 + 0xd0], r10d
xor r15d, r10d
mov dword [r13 + 0xd4], r15d
xor r12d, r15d
xor esi, r12d
mov dword [r13 + 0xd8], r12d
mov dword [r13 + 0xdc], esi
mov eax, esi
shr eax, 0x18
movzx ecx, al
mov eax, esi
movzx edx, sil
shr eax, 0x10
shr esi, 8
mov r8d, dword [rbp + rdx*4 + 0xc00]
xor r8d, dword [rbp + rcx*4 + 0x800]
movzx ecx, al
movzx eax, sil
mov rsi, qword [rsp + 0x38]
xor r8d, dword [rbp + rcx*4 + 0x400]
xor r8d, dword [rbp + rax*4]
xor r8d, dword [0x18008adf8]
mov rbp, qword [rsp + 0x30]
xor edi, r8d
xor r14d, edi
mov dword [r13 + 0xe0], edi
mov rdi, qword [rsp + 0x40]
xor ebx, r14d
xor r11d, ebx
mov dword [r13 + 0xe8], ebx
mov rbx, qword [rsp + 0x28]
xor eax, eax
mov dword [r13 + 0xf0], 0
mov dword [r13 + 0xec], r11d
mov dword [r13 + 0xe4], r14d
mov byte [r13 + 0xf0], 0xe0
pop r15
pop r14
pop r13
pop r12
ret
sub rsp, 0x38
mov r9, rcx
mov r8, rdx
mov ecx, dword [0x1800a31d0]
test ecx, ecx
jns 0x180067355
xor ecx, ecx
mov qword [rsp + 0x30], rbx
mov eax, 1
cpuid
mov rbx, qword [rsp + 0x30]
and ecx, 0x2000000
mov dword [0x1800a31d0], ecx
test ecx, ecx
jne 0x180067366
mov rdx, r8
mov rcx, r9
add rsp, 0x38
jmp 0x180066340
movdqu xmm3, xmmword [r9 + 0x10]
movdqu xmm1, xmmword [r9]
movdqu xmmword [r8 + 0x10], xmm3
movdqa xmm2, xmm1
movdqu xmmword [r8], xmm1
pslldq xmm2, 4
movdqa xmm0, xmm2
pslldq xmm2, 4
pxor xmm0, xmm1
movdqa xmm4, xmm2
pxor xmm4, xmm0
pslldq xmm2, 4
pxor xmm4, xmm2
aeskeygenassist xmm0, xmm3, 1
pshufd xmm1, xmm0, 0xff
pxor xmm4, xmm1
movdqa xmm1, xmm3
pslldq xmm1, 4
movdqa xmm0, xmm1
movdqu xmmword [r8 + 0x20], xmm4
pslldq xmm1, 4
pxor xmm0, xmm3
movdqa xmm2, xmm1
pslldq xmm1, 4
pxor xmm2, xmm0
pxor xmm2, xmm1
aeskeygenassist xmm0, xmm4, 0
pshufd xmm1, xmm0, 0xaa
pxor xmm2, xmm1
movdqa xmm1, xmm4
pslldq xmm1, 4
movdqa xmm0, xmm1
movdqu xmmword [r8 + 0x30], xmm2
pslldq xmm1, 4
pxor xmm0, xmm4
movdqa xmm3, xmm1
pslldq xmm1, 4
pxor xmm3, xmm0
pxor xmm3, xmm1
aeskeygenassist xmm0, xmm2, 2
pshufd xmm1, xmm0, 0xff
pxor xmm3, xmm1
movdqa xmm1, xmm2
pslldq xmm1, 4
movdqa xmm0, xmm1
movdqu xmmword [r8 + 0x40], xmm3
pxor xmm0, xmm2
pslldq xmm1, 4
movdqa xmm2, xmm1
pslldq xmm1, 4
pxor xmm2, xmm0
pxor xmm2, xmm1
aeskeygenassist xmm0, xmm3, 0
pshufd xmm1, xmm0, 0xaa
pxor xmm2, xmm1
movdqa xmm1, xmm3
pslldq xmm1, 4
movdqa xmm0, xmm1
movdqu xmmword [r8 + 0x50], xmm2
pslldq xmm1, 4
pxor xmm0, xmm3
movdqa xmm3, xmm1
pslldq xmm1, 4
pxor xmm3, xmm0
pxor xmm3, xmm1
aeskeygenassist xmm0, xmm2, 4
pshufd xmm1, xmm0, 0xff
pxor xmm3, xmm1
movdqa xmm1, xmm2
pslldq xmm1, 4
movdqa xmm0, xmm1
movdqu xmmword [r8 + 0x60], xmm3
pxor xmm0, xmm2
pslldq xmm1, 4
movdqa xmm2, xmm1
pslldq xmm1, 4
pxor xmm2, xmm0
pxor xmm2, xmm1
aeskeygenassist xmm0, xmm3, 0
pshufd xmm1, xmm0, 0xaa
pxor xmm2, xmm1
movdqa xmm1, xmm3
movdqu xmmword [r8 + 0x70], xmm2
pslldq xmm1, 4
movdqa xmm0, xmm1
pslldq xmm1, 4
pxor xmm0, xmm3
movdqa xmm3, xmm1
pslldq xmm1, 4
pxor xmm3, xmm0
pxor xmm3, xmm1
aeskeygenassist xmm0, xmm2, 8
pshufd xmm1, xmm0, 0xff
pxor xmm3, xmm1
movdqa xmm1, xmm2
pslldq xmm1, 4
movdqa xmm0, xmm1
movdqu xmmword [r8 + 0x80], xmm3
pslldq xmm1, 4
pxor xmm0, xmm2
movdqa xmm2, xmm1
pslldq xmm1, 4
pxor xmm2, xmm0
pxor xmm2, xmm1
aeskeygenassist xmm0, xmm3, 0
pshufd xmm1, xmm0, 0xaa
pxor xmm2, xmm1
movdqa xmm1, xmm3
pslldq xmm1, 4
movdqa xmm0, xmm1
movdqu xmmword [r8 + 0x90], xmm2
pslldq xmm1, 4
pxor xmm0, xmm3
movdqa xmm3, xmm1
pslldq xmm1, 4
pxor xmm3, xmm0
pxor xmm3, xmm1
aeskeygenassist xmm0, xmm2, 0x10
pshufd xmm1, xmm0, 0xff
pxor xmm3, xmm1
movdqa xmm1, xmm2
pslldq xmm1, 4
movdqa xmm0, xmm1
movdqu xmmword [r8 + 0xa0], xmm3
pslldq xmm1, 4
pxor xmm0, xmm2
movdqa xmm2, xmm1
pslldq xmm1, 4
pxor xmm2, xmm0
pxor xmm2, xmm1
aeskeygenassist xmm0, xmm3, 0
pshufd xmm1, xmm0, 0xaa
pxor xmm2, xmm1
movdqa xmm1, xmm3
pslldq xmm1, 4
movdqa xmm0, xmm1
movdqu xmmword [r8 + 0xb0], xmm2
pslldq xmm1, 4
pxor xmm0, xmm3
movdqa xmm4, xmm1
pslldq xmm1, 4
pxor xmm4, xmm0
pxor xmm4, xmm1
aeskeygenassist xmm0, xmm2, 0x20
pshufd xmm1, xmm0, 0xff
pxor xmm4, xmm1
movdqa xmm1, xmm2
pslldq xmm1, 4
movdqa xmm0, xmm1
movdqu xmmword [r8 + 0xc0], xmm4
pslldq xmm1, 4
pxor xmm0, xmm2
movdqa xmm3, xmm1
pslldq xmm1, 4
pxor xmm3, xmm0
pxor xmm3, xmm1
aeskeygenassist xmm0, xmm4, 0
pshufd xmm1, xmm0, 0xaa
pxor xmm3, xmm1
movdqa xmm1, xmm4
pslldq xmm1, 4
movdqu xmmword [r8 + 0xd0], xmm3
movdqa xmm0, xmm1
xor eax, eax
pslldq xmm1, 4
pxor xmm0, xmm4
movdqa xmm2, xmm1
pslldq xmm1, 4
pxor xmm2, xmm0
pxor xmm2, xmm1
aeskeygenassist xmm0, xmm3, 0x40
pshufd xmm1, xmm0, 0xff
pxor xmm2, xmm1
movdqu xmmword [r8 + 0xe0], xmm2
mov dword [r8 + 0xf0], 0
mov byte [r8 + 0xf0], 0xe0
add rsp, 0x38
ret