Function at 0x18039c660
Capabilities:
Encrypt data using aes

Disassembly:
mov qword [rsp + 0x18], r8
mov qword [rsp + 0x10], rdx
mov qword [rsp + 8], rcx
push rdi
sub rsp, 0x50
lea rcx, [0x18060836a]
call fcn.180278fb0
nop
cmp qword [rsp + 0x60], 0
jne 0x18039c6a3
mov r8d, 0x11f
lea rdx, [0x1805948f0]
lea rcx, [0x180594938]
call fcn.1803a4020
nop
xor eax, eax
test eax, eax
jne 0x18039c681
cmp qword [rsp + 0x68], 0
jne 0x18039c6cb
mov r8d, pe_nt_image_headers64
lea rdx, [0x180594950]
lea rcx, [0x180594998]
call fcn.1803a4020
nop
xor eax, eax
test eax, eax
jne 0x18039c6a9
cmp qword [rsp + 0x70], 0
jne 0x18039c6f3
mov r8d, 0x121
lea rdx, [0x1805949b0]
lea rcx, [0x1805949f8]
call fcn.1803a4020
nop
xor eax, eax
test eax, eax
jne 0x18039c6d1
mov rax, qword [rsp + 0x70]
mov eax, dword [rax + 0x1e0]
mov dword [rsp + 0x48], eax
cmp dword [rsp + 0x48], 2
jl 0x18039c716
cmp dword [rsp + 0x48], 0x10
jle 0x18039c720
mov eax, 4
jmp 0x18039d087
mov rax, qword [rsp + 0x70]
mov qword [rsp + 0x40], rax
mov eax, 1
imul rax, rax, 0
mov rcx, qword [rsp + 0x60]
movzx eax, byte [rcx + rax]
and eax, 0xff
shl eax, 0x18
mov ecx, 1
imul rcx, rcx, 1
mov rdx, qword [rsp + 0x60]
movzx ecx, byte [rdx + rcx]
and ecx, 0xff
shl ecx, 0x10
or eax, ecx
mov ecx, 1
imul rcx, rcx, 2
mov rdx, qword [rsp + 0x60]
movzx ecx, byte [rdx + rcx]
and ecx, 0xff
shl ecx, 8
or eax, ecx
mov ecx, 1
imul rcx, rcx, 3
mov rdx, qword [rsp + 0x60]
movzx ecx, byte [rdx + rcx]
and ecx, 0xff
or eax, ecx
mov dword [rsp + 0x20], eax
xor eax, eax
test eax, eax
jne 0x18039c72a
mov eax, 4
imul rax, rax, 0
mov rcx, qword [rsp + 0x40]
mov eax, dword [rcx + rax]
mov ecx, dword [rsp + 0x20]
xor ecx, eax
mov eax, ecx
mov dword [rsp + 0x20], eax
mov eax, 1
imul rax, rax, 0
mov rcx, qword [rsp + 0x60]
movzx eax, byte [rcx + rax + 4]
and eax, 0xff
shl eax, 0x18
mov ecx, 1
imul rcx, rcx, 1
mov rdx, qword [rsp + 0x60]
movzx ecx, byte [rdx + rcx + 4]
and ecx, 0xff
shl ecx, 0x10
or eax, ecx
mov ecx, 1
imul rcx, rcx, 2
mov rdx, qword [rsp + 0x60]
movzx ecx, byte [rdx + rcx + 4]
and ecx, 0xff
shl ecx, 8
or eax, ecx
mov ecx, 1
imul rcx, rcx, 3
mov rdx, qword [rsp + 0x60]
movzx ecx, byte [rdx + rcx + 4]
and ecx, 0xff
or eax, ecx
mov dword [rsp + 0x24], eax
xor eax, eax
test eax, eax
jne 0x18039c7bf
mov eax, 4
imul rax, rax, 1
mov rcx, qword [rsp + 0x40]
mov eax, dword [rcx + rax]
mov ecx, dword [rsp + 0x24]
xor ecx, eax
mov eax, ecx
mov dword [rsp + 0x24], eax
mov eax, 1
imul rax, rax, 0
mov rcx, qword [rsp + 0x60]
movzx eax, byte [rcx + rax + 8]
and eax, 0xff
shl eax, 0x18
mov ecx, 1
imul rcx, rcx, 1
mov rdx, qword [rsp + 0x60]
movzx ecx, byte [rdx + rcx + 8]
and ecx, 0xff
shl ecx, 0x10
or eax, ecx
mov ecx, 1
imul rcx, rcx, 2
mov rdx, qword [rsp + 0x60]
movzx ecx, byte [rdx + rcx + 8]
and ecx, 0xff
shl ecx, 8
or eax, ecx
mov ecx, 1
imul rcx, rcx, 3
mov rdx, qword [rsp + 0x60]
movzx ecx, byte [rdx + rcx + 8]
and ecx, 0xff
or eax, ecx
mov dword [rsp + 0x28], eax
xor eax, eax
test eax, eax
jne 0x18039c858
mov eax, 4
imul rax, rax, 2
mov rcx, qword [rsp + 0x40]
mov eax, dword [rcx + rax]
mov ecx, dword [rsp + 0x28]
xor ecx, eax
mov eax, ecx
mov dword [rsp + 0x28], eax
mov eax, 1
imul rax, rax, 0
mov rcx, qword [rsp + 0x60]
movzx eax, byte [rcx + rax + 0xc]
and eax, 0xff
shl eax, 0x18
mov ecx, 1
imul rcx, rcx, 1
mov rdx, qword [rsp + 0x60]
movzx ecx, byte [rdx + rcx + 0xc]
and ecx, 0xff
shl ecx, 0x10
or eax, ecx
mov ecx, 1
imul rcx, rcx, 2
mov rdx, qword [rsp + 0x60]
movzx ecx, byte [rdx + rcx + 0xc]
and ecx, 0xff
shl ecx, 8
or eax, ecx
mov ecx, 1
imul rcx, rcx, 3
mov rdx, qword [rsp + 0x60]
movzx ecx, byte [rdx + rcx + 0xc]
and ecx, 0xff
or eax, ecx
mov dword [rsp + 0x2c], eax
xor eax, eax
test eax, eax
jne 0x18039c8f1
mov eax, 4
imul rax, rax, 3
mov rcx, qword [rsp + 0x40]
mov eax, dword [rcx + rax]
mov ecx, dword [rsp + 0x2c]
xor ecx, eax
mov eax, ecx
mov dword [rsp + 0x2c], eax
mov eax, dword [rsp + 0x48]
sar eax, 1
mov dword [rsp + 0x4c], eax
mov eax, dword [rsp + 0x20]
shr eax, 0x18
movzx eax, al
lea rcx, [0x18050c3a0]
mov edx, dword [rsp + 0x24]
shr edx, 0x10
movzx edx, dl
lea r8, [0x18050cfa0]
mov edx, dword [r8 + rdx*4]
mov eax, dword [rcx + rax*4]
xor eax, edx
mov ecx, dword [rsp + 0x28]
shr ecx, 8
movzx ecx, cl
lea rdx, [0x18050d3a0]
xor eax, dword [rdx + rcx*4]
mov ecx, dword [rsp + 0x2c]
shr ecx, 0
movzx ecx, cl
lea rdx, [0x18050d7a0]
xor eax, dword [rdx + rcx*4]
mov ecx, 4
imul rcx, rcx, 4
mov rdx, qword [rsp + 0x40]
xor eax, dword [rdx + rcx]
mov dword [rsp + 0x30], eax
mov eax, dword [rsp + 0x24]
shr eax, 0x18
movzx eax, al
lea rcx, [0x18050c3a0]
mov edx, dword [rsp + 0x28]
shr edx, 0x10
movzx edx, dl
lea r8, [0x18050cfa0]
mov edx, dword [r8 + rdx*4]
mov eax, dword [rcx + rax*4]
xor eax, edx
mov ecx, dword [rsp + 0x2c]
shr ecx, 8
movzx ecx, cl
lea rdx, [0x18050d3a0]
xor eax, dword [rdx + rcx*4]
mov ecx, dword [rsp + 0x20]
shr ecx, 0
movzx ecx, cl
lea rdx, [0x18050d7a0]
xor eax, dword [rdx + rcx*4]
mov ecx, 4
imul rcx, rcx, 5
mov rdx, qword [rsp + 0x40]
xor eax, dword [rdx + rcx]
mov dword [rsp + 0x34], eax
mov eax, dword [rsp + 0x28]
shr eax, 0x18
movzx eax, al
lea rcx, [0x18050c3a0]
mov edx, dword [rsp + 0x2c]
shr edx, 0x10
movzx edx, dl
lea r8, [0x18050cfa0]
mov edx, dword [r8 + rdx*4]
mov eax, dword [rcx + rax*4]
xor eax, edx
mov ecx, dword [rsp + 0x20]
shr ecx, 8
movzx ecx, cl
lea rdx, [0x18050d3a0]
xor eax, dword [rdx + rcx*4]
mov ecx, dword [rsp + 0x24]
shr ecx, 0
movzx ecx, cl
lea rdx, [0x18050d7a0]
xor eax, dword [rdx + rcx*4]
mov ecx, 4
imul rcx, rcx, 6
mov rdx, qword [rsp + 0x40]
xor eax, dword [rdx + rcx]
mov dword [rsp + 0x38], eax
mov eax, dword [rsp + 0x2c]
shr eax, 0x18
movzx eax, al
lea rcx, [0x18050c3a0]
mov edx, dword [rsp + 0x20]
shr edx, 0x10
movzx edx, dl
lea r8, [0x18050cfa0]
mov edx, dword [r8 + rdx*4]
mov eax, dword [rcx + rax*4]
xor eax, edx
mov ecx, dword [rsp + 0x24]
shr ecx, 8
movzx ecx, cl
lea rdx, [0x18050d3a0]
xor eax, dword [rdx + rcx*4]
mov ecx, dword [rsp + 0x28]
shr ecx, 0
movzx ecx, cl
lea rdx, [0x18050d7a0]
xor eax, dword [rdx + rcx*4]
mov ecx, 4
imul rcx, rcx, 7
mov rdx, qword [rsp + 0x40]
xor eax, dword [rdx + rcx]
mov dword [rsp + 0x3c], eax
mov rax, qword [rsp + 0x40]
add rax, 0x20
mov qword [rsp + 0x40], rax
mov eax, dword [rsp + 0x4c]
dec eax
mov dword [rsp + 0x4c], eax
cmp dword [rsp + 0x4c], 0
jne 0x18039cb58
jmp 0x18039ccfd
mov eax, dword [rsp + 0x30]
shr eax, 0x18
movzx eax, al
lea rcx, [0x18050c3a0]
mov edx, dword [rsp + 0x34]
shr edx, 0x10
movzx edx, dl
lea r8, [0x18050cfa0]
mov edx, dword [r8 + rdx*4]
mov eax, dword [rcx + rax*4]
xor eax, edx
mov ecx, dword [rsp + 0x38]
shr ecx, 8
movzx ecx, cl
lea rdx, [0x18050d3a0]
xor eax, dword [rdx + rcx*4]
mov ecx, dword [rsp + 0x3c]
shr ecx, 0
movzx ecx, cl
lea rdx, [0x18050d7a0]
xor eax, dword [rdx + rcx*4]
mov ecx, 4
imul rcx, rcx, 0
mov rdx, qword [rsp + 0x40]
xor eax, dword [rdx + rcx]
mov dword [rsp + 0x20], eax
mov eax, dword [rsp + 0x34]
shr eax, 0x18
movzx eax, al
lea rcx, [0x18050c3a0]
mov edx, dword [rsp + 0x38]
shr edx, 0x10
movzx edx, dl
lea r8, [0x18050cfa0]
mov edx, dword [r8 + rdx*4]
mov eax, dword [rcx + rax*4]
xor eax, edx
mov ecx, dword [rsp + 0x3c]
shr ecx, 8
movzx ecx, cl
lea rdx, [0x18050d3a0]
xor eax, dword [rdx + rcx*4]
mov ecx, dword [rsp + 0x30]
shr ecx, 0
movzx ecx, cl
lea rdx, [0x18050d7a0]
xor eax, dword [rdx + rcx*4]
mov ecx, 4
imul rcx, rcx, 1
mov rdx, qword [rsp + 0x40]
xor eax, dword [rdx + rcx]
mov dword [rsp + 0x24], eax
mov eax, dword [rsp + 0x38]
shr eax, 0x18
movzx eax, al
lea rcx, [0x18050c3a0]
mov edx, dword [rsp + 0x3c]
shr edx, 0x10
movzx edx, dl
lea r8, [0x18050cfa0]
mov edx, dword [r8 + rdx*4]
mov eax, dword [rcx + rax*4]
xor eax, edx
mov ecx, dword [rsp + 0x30]
shr ecx, 8
movzx ecx, cl
lea rdx, [0x18050d3a0]
xor eax, dword [rdx + rcx*4]
mov ecx, dword [rsp + 0x34]
shr ecx, 0
movzx ecx, cl
lea rdx, [0x18050d7a0]
xor eax, dword [rdx + rcx*4]
mov ecx, 4
imul rcx, rcx, 2
mov rdx, qword [rsp + 0x40]
xor eax, dword [rdx + rcx]
mov dword [rsp + 0x28], eax
mov eax, dword [rsp + 0x3c]
shr eax, 0x18
movzx eax, al
lea rcx, [0x18050c3a0]
mov edx, dword [rsp + 0x30]
shr edx, 0x10
movzx edx, dl
lea r8, [0x18050cfa0]
mov edx, dword [r8 + rdx*4]
mov eax, dword [rcx + rax*4]
xor eax, edx
mov ecx, dword [rsp + 0x34]
shr ecx, 8
movzx ecx, cl
lea rdx, [0x18050d3a0]
xor eax, dword [rdx + rcx*4]
mov ecx, dword [rsp + 0x38]
shr ecx, 0
movzx ecx, cl
lea rdx, [0x18050d7a0]
xor eax, dword [rdx + rcx*4]
mov ecx, 4
imul rcx, rcx, 3
mov rdx, qword [rsp + 0x40]
xor eax, dword [rdx + rcx]
mov dword [rsp + 0x2c], eax
jmp 0x18039c994
mov eax, dword [rsp + 0x30]
shr eax, 0x18
movzx eax, al
lea rcx, [0x18050e7a0]
mov edx, dword [rsp + 0x34]
shr edx, 0x10
movzx edx, dl
lea r8, [0x18050e3a0]
mov edx, dword [r8 + rdx*4]
mov eax, dword [rcx + rax*4]
xor eax, edx
mov ecx, dword [rsp + 0x38]
shr ecx, 8
movzx ecx, cl
lea rdx, [0x18050dfa0]
xor eax, dword [rdx + rcx*4]
mov ecx, dword [rsp + 0x3c]
shr ecx, 0
movzx ecx, cl
lea rdx, str.cwko0
xor eax, dword [rdx + rcx*4]
mov ecx, 4
imul rcx, rcx, 0
mov rdx, qword [rsp + 0x40]
xor eax, dword [rdx + rcx]
mov dword [rsp + 0x20], eax
mov eax, dword [rsp + 0x20]
shr eax, 0x18
and eax, 0xff
mov ecx, 1
imul rcx, rcx, 0
mov rdx, qword [rsp + 0x68]
mov byte [rdx + rcx], al
mov eax, dword [rsp + 0x20]
shr eax, 0x10
and eax, 0xff
mov ecx, 1
imul rcx, rcx, 1
mov rdx, qword [rsp + 0x68]
mov byte [rdx + rcx], al
mov eax, dword [rsp + 0x20]
shr eax, 8
and eax, 0xff
mov ecx, 1
imul rcx, rcx, 2
mov rdx, qword [rsp + 0x68]
mov byte [rdx + rcx], al
mov eax, dword [rsp + 0x20]
and eax, 0xff
mov ecx, 1
imul rcx, rcx, 3
mov rdx, qword [rsp + 0x68]
mov byte [rdx + rcx], al
xor eax, eax
test eax, eax
jne 0x18039cd65
mov eax, dword [rsp + 0x34]
shr eax, 0x18
movzx eax, al
lea rcx, [0x18050e7a0]
mov edx, dword [rsp + 0x38]
shr edx, 0x10
movzx edx, dl
lea r8, [0x18050e3a0]
mov edx, dword [r8 + rdx*4]
mov eax, dword [rcx + rax*4]
xor eax, edx
mov ecx, dword [rsp + 0x3c]
shr ecx, 8
movzx ecx, cl
lea rdx, [0x18050dfa0]
xor eax, dword [rdx + rcx*4]
mov ecx, dword [rsp + 0x30]
shr ecx, 0
movzx ecx, cl
lea rdx, str.cwko0
xor eax, dword [rdx + rcx*4]
mov ecx, 4
imul rcx, rcx, 1
mov rdx, qword [rsp + 0x40]
xor eax, dword [rdx + rcx]
mov dword [rsp + 0x24], eax
mov eax, dword [rsp + 0x24]
shr eax, 0x18
and eax, 0xff
mov ecx, 1
imul rcx, rcx, 0
mov rdx, qword [rsp + 0x68]
mov byte [rdx + rcx + 4], al
mov eax, dword [rsp + 0x24]
shr eax, 0x10
and eax, 0xff
mov ecx, 1
imul rcx, rcx, 1
mov rdx, qword [rsp + 0x68]
mov byte [rdx + rcx + 4], al
mov eax, dword [rsp + 0x24]
shr eax, 8
and eax, 0xff
mov ecx, 1
imul rcx, rcx, 2
mov rdx, qword [rsp + 0x68]
mov byte [rdx + rcx + 4], al
mov eax, dword [rsp + 0x24]
and eax, 0xff
mov ecx, 1
imul rcx, rcx, 3
mov rdx, qword [rsp + 0x68]
mov byte [rdx + rcx + 4], al
xor eax, eax
test eax, eax
jne 0x18039ce44
mov eax, dword [rsp + 0x38]
shr eax, 0x18
movzx eax, al
lea rcx, [0x18050e7a0]
mov edx, dword [rsp + 0x3c]
shr edx, 0x10
movzx edx, dl
lea r8, [0x18050e3a0]
mov edx, dword [r8 + rdx*4]
mov eax, dword [rcx + rax*4]
xor eax, edx
mov ecx, dword [rsp + 0x30]
shr ecx, 8
movzx ecx, cl
lea rdx, [0x18050dfa0]
xor eax, dword [rdx + rcx*4]
mov ecx, dword [rsp + 0x34]
shr ecx, 0
movzx ecx, cl
lea rdx, str.cwko0
xor eax, dword [rdx + rcx*4]
mov ecx, 4
imul rcx, rcx, 2
mov rdx, qword [rsp + 0x40]
xor eax, dword [rdx + rcx]
mov dword [rsp + 0x28], eax
mov eax, dword [rsp + 0x28]
shr eax, 0x18
and eax, 0xff
mov ecx, 1
imul rcx, rcx, 0
mov rdx, qword [rsp + 0x68]
mov byte [rdx + rcx + 8], al
mov eax, dword [rsp + 0x28]
shr eax, 0x10
and eax, 0xff
mov ecx, 1
imul rcx, rcx, 1
mov rdx, qword [rsp + 0x68]
mov byte [rdx + rcx + 8], al
mov eax, dword [rsp + 0x28]
shr eax, 8
and eax, 0xff
mov ecx, 1
imul rcx, rcx, 2
mov rdx, qword [rsp + 0x68]
mov byte [rdx + rcx + 8], al
mov eax, dword [rsp + 0x28]
and eax, 0xff
mov ecx, 1
imul rcx, rcx, 3
mov rdx, qword [rsp + 0x68]
mov byte [rdx + rcx + 8], al
xor eax, eax
test eax, eax
jne 0x18039cf27
mov eax, dword [rsp + 0x3c]
shr eax, 0x18
movzx eax, al
lea rcx, [0x18050e7a0]
mov edx, dword [rsp + 0x30]
shr edx, 0x10
movzx edx, dl
lea r8, [0x18050e3a0]
mov edx, dword [r8 + rdx*4]
mov eax, dword [rcx + rax*4]
xor eax, edx
mov ecx, dword [rsp + 0x34]
shr ecx, 8
movzx ecx, cl
lea rdx, [0x18050dfa0]
xor eax, dword [rdx + rcx*4]
mov ecx, dword [rsp + 0x38]
shr ecx, 0
movzx ecx, cl
lea rdx, str.cwko0
xor eax, dword [rdx + rcx*4]
mov ecx, 4
imul rcx, rcx, 3
mov rdx, qword [rsp + 0x40]
xor eax, dword [rdx + rcx]
mov dword [rsp + 0x2c], eax
mov eax, dword [rsp + 0x2c]
shr eax, 0x18
and eax, 0xff
mov ecx, 1
imul rcx, rcx, 0
mov rdx, qword [rsp + 0x68]
mov byte [rdx + rcx + 0xc], al
mov eax, dword [rsp + 0x2c]
shr eax, 0x10
and eax, 0xff
mov ecx, 1
imul rcx, rcx, 1
mov rdx, qword [rsp + 0x68]
mov byte [rdx + rcx + 0xc], al
mov eax, dword [rsp + 0x2c]
shr eax, 8
and eax, 0xff
mov ecx, 1
imul rcx, rcx, 2
mov rdx, qword [rsp + 0x68]
mov byte [rdx + rcx + 0xc], al
mov eax, dword [rsp + 0x2c]
and eax, 0xff
mov ecx, 1
imul rcx, rcx, 3
mov rdx, qword [rsp + 0x68]
mov byte [rdx + rcx + 0xc], al
xor eax, eax
test eax, eax
jne 0x18039d00a
xor eax, eax
add rsp, 0x50
pop rdi
ret