Function at 0x18002cc60
Capabilities:
Decrypt data using aes via x86 extensions

Disassembly:
mov rax, rsp
mov qword [rax + 0x10], rdx
mov dword [rax + 8], ecx
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x58]
sub rsp, 0x158
movzx ebx, byte [rbp + 0xa0]
lea r8d, [rcx + 0xd]
movaps xmmword [rax - 0x58], xmm6
mov r9, rdx
movaps xmmword [rax - 0x68], xmm7
mov edx, ecx
movaps xmmword [rax - 0x78], xmm8
movaps xmmword [rax - 0x88], xmm9
movaps xmmword [rax - 0x98], xmm10
movaps xmmword [rax - 0xa8], xmm11
movaps xmmword [rax - 0xb8], xmm12
movaps xmmword [rax - 0xc8], xmm13
movaps xmmword [rax - 0xd8], xmm14
movaps xmmword [rax - 0xe8], xmm15
mov dword [rbp + 0xb8], r8d
cmp ecx, r8d
jae case.0x18002cd9d.7
movdqu xmm9, xmmword [rbp - 0x40]
mov rdi, qword [rbp + 0xb0]
lea r8d, [rcx - 0x10a]
mov rcx, qword [rbp - 0x80]
lea rsi, [0x180000000]
movdqu xmm10, xmmword [rbp - 0x50]
mov r14, qword [rbp + 0xb0]
lea r10, [0x180069b70]
movdqu xmm13, xmmword [rbp - 0x60]
mov r12, qword [rbp + 0xb0]
mov r11d, 0x10
movdqu xmm14, xmmword [rbp - 0x70]
mov r15, qword [rbp + 0xb0]
movdqu xmm15, xmmword [rbp - 0x80]
mov r13, qword [rbp + 0xb0]
movdqu xmm11, xmmword [rbp - 0x50]
mov eax, dword [rbp + 0xb8]
movdqu xmm12, xmmword [rbp - 0x60]
mov qword [rsp + 0x30], rcx
mov rcx, qword [rbp - 0x80]
movdqa xmm7, xmmword [rbp - 0x80]
movdqa xmm8, xmmword [rbp - 0x80]
mov qword [rsp + 0x40], rcx
mov dword [rsp + 0x20], r8d
nop word [rax + rax]
cmp r8d, 0x1d
ja case.default.0x18002cd9d
movzx eax, byte [rsi + r8 + 0x2d344]
mov ecx, dword [rsi + rax*4 + 0x2d314]
add rcx, rsi
jmp rcx
lea rdx, [0x180099664]
mov rcx, r9
call fcn.180071154
mov qword [rbp - 0x68], rax
jmp 0x18002d25b
mov rcx, qword [rbp - 0x68]
test rcx, rcx
je case.0x18002cd9d.11
call fcn.180070ca4
jmp 0x18002d25b
xor edx, edx
lea ecx, [rdx + 8]
call fcn.1800202b0
mov qword [rbp - 0x70], rax
mov rcx, rax
mov qword [rsp + 0x70], rax
jmp 0x18002d25b
mov r9, qword [rsp + 0x70]
xor r8d, r8d
xor edx, edx
mov ecx, 0xb9
call fcn.18005cf80
mov r9, rax
xor r8d, r8d
xor edx, edx
mov ecx, 0xb9
call fcn.18005cf80
mov qword [rsp + 0x70], rax
jmp 0x18002d25b
mov rcx, qword [rbp - 0x70]
xor r9d, r9d
xor r8d, r8d
mov edx, 0x11d
call fcn.180042ca0
jmp 0x18002d25b
xor edx, edx
mov dword [rsp + 0x28], 0xffffffff
lea r8, [rsp + 0x28]
lea ecx, [rdx + 0x3d]
call fcn.180015f20
jmp 0x18002d25b
cmp qword [rbp - 0x68], 0
setne byte [rbp + 0xb0]
jmp case.0x18002cd9d.11
movzx ebx, byte [rbp + 0xb0]
jmp case.0x18002cd9d.11
xor esi, esi
mov qword [rsp + 0x50], r10
movdqu xmm6, xmmword [rsp + 0x50]
mov dword [rbp - 0x60], esi
mov edi, 0x61
cmp edi, 0x8b0f
ja 0x18002cf92
je 0x18002cf85
cmp edi, 0x2e9b
ja 0x18002cf4b
je 0x18002cf2a
mov eax, edi
sub eax, 0xc
je 0x18002cf06
sub eax, 0x55
je 0x18002cecb
cmp eax, 0x5f
jne 0x18002d01e
movdqu xmm0, xmmword [rbp - 0x60]
movdqa xmm7, xmm6
pxor xmm7, xmm0
jmp 0x18002d01e
test esi, esi
cmove esi, r11d
mov ecx, esi
shl rcx, 3
mov dword [rbp - 0x60], esi
call fcn.18006f754
mov r12, rax
test rax, rax
je 0x18002cf3b
mov ecx, 0x20
call fcn.18006f754
mov r14, rax
lea r10, [0x180069b70]
mov r11d, 0x10
jmp 0x18002d01e
mov rcx, qword [rbp - 0x60]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
test eax, eax
je 0x18002d304
lea r10, [0x180069b70]
mov r11d, 0x10
jmp 0x18002d01e
test r14, r14
jne 0x18002d01e
mov rcx, r12
call fcn.18006f74c
mov qword [rsp + 0x30], 0
xor edi, edi
jmp 0x18002d254
cmp edi, 0x5c40
je 0x18002cf6f
cmp edi, 0x5cd5
jne 0x18002d01e
mov qword [r14], r12
mov dword [r14 + 8], 0
jmp 0x18002d01e
movdqu xmm0, xmmword [rsp + 0x60]
aesdec xmm7, xmm0
movdqu xmm0, xmmword [rsp + 0x70]
jmp 0x18002d019
mov dword [r14 + 0xc], esi
mov qword [r14 + 0x10], r10
jmp 0x18002d01e
cmp edi, 0xb7c0
je 0x18002d00a
cmp edi, 0xb949
je 0x18002d03a
cmp edi, 0x11340
je 0x18002d002
cmp edi, 0x16ec0
je 0x18002cffa
cmp edi, 0x1ca40
jne 0x18002d01e
movdqu xmm0, xmmword [rbp - 0x40]
movdqu xmm1, xmmword [rbp - 0x10]
aesdec xmm7, xmm0
movdqu xmm0, xmmword [rbp - 0x30]
aesdec xmm7, xmm0
movdqu xmm0, xmmword [rbp - 0x20]
aesdec xmm7, xmm0
movdqa xmm0, xmm7
aesdeclast xmm0, xmm1
movq qword [rsp + 0x30], xmm0
movq rdi, xmm0
jmp 0x18002d254
aesdec xmm7, xmm11
jmp 0x18002d01e
aesdec xmm7, xmm12
jmp 0x18002d01e
movdqu xmm0, xmmword [rbp - 0x80]
aesdec xmm7, xmm0
movdqu xmm0, xmmword [rbp - 0x70]
aesdec xmm7, xmm0
add edi, 0x2e3a
cmp edi, 0x22ab8
jbe 0x18002ce80
mov rdi, qword [rsp + 0x30]
jmp 0x18002d254
lea rax, [0x180069b60]
mov qword [rsp + 0x30], r14
mov qword [r14 + 0x18], rax
mov rdi, r14
jmp 0x18002d254
xor r8d, r8d
mov edx, 0xb7
mov rcx, rdi
call fcn.18004be90
xor r8d, r8d
mov edx, 0xb7
xor ecx, ecx
call fcn.18004be90
xor edx, edx
mov dword [rsp + 0x28], 0
lea r8, [rsp + 0x28]
lea ecx, [rdx + 0x3d]
call fcn.180015f20
lea rax, [0x180069b70]
xor esi, esi
mov qword [rsp + 0x60], rax
mov edi, 0x61
movdqu xmm6, xmmword [rsp + 0x60]
mov dword [rbp - 0x80], esi
cmp edi, 0x8b0f
ja 0x18002d1b8
je 0x18002d1ab
cmp edi, 0x2e9b
ja 0x18002d170
je 0x18002d14f
mov eax, edi
sub eax, 0xc
je 0x18002d131
sub eax, 0x55
je 0x18002d0f8
cmp eax, 0x5f
lea rax, [0x180069b70]
jne 0x18002d23d
movdqu xmm0, xmmword [rbp - 0x80]
movdqa xmm8, xmm6
pxor xmm8, xmm0
jmp 0x18002d23d
mov eax, 0x10
test esi, esi
cmove esi, eax
mov ecx, esi
shl rcx, 3
mov dword [rbp - 0x80], esi
call fcn.18006f754
mov r13, rax
test rax, rax
je 0x18002d160
mov ecx, 0x20
call fcn.18006f754
mov r15, rax
lea rax, [0x180069b70]
jmp 0x18002d23d
mov rcx, qword [rbp - 0x80]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
test eax, eax
je 0x18002d304
lea rax, [0x180069b70]
jmp 0x18002d23d
test r15, r15
jne 0x18002d23d
mov rcx, r13
call fcn.18006f74c
mov qword [rsp + 0x40], 0
xor edi, edi
jmp 0x18002d254
cmp edi, 0x5c40
je 0x18002d194
cmp edi, 0x5cd5
jne 0x18002d23d
mov qword [r15], r13
mov dword [r15 + 8], 0
jmp 0x18002d23d
movdqu xmm0, xmmword [rsp + 0x70]
aesdec xmm8, xmm0
aesdec xmm8, xmm15
jmp 0x18002d23d
mov dword [r15 + 0xc], esi
mov qword [r15 + 0x10], rax
jmp 0x18002d23d
cmp edi, 0xb7c0
je 0x18002d231
cmp edi, 0xb949
je 0x18002d299
cmp edi, 0x11340
je 0x18002d229
cmp edi, 0x16ec0
je 0x18002d221
cmp edi, 0x1ca40
jne 0x18002d23d
movdqu xmm0, xmmword [rbp - 0x30]
movdqu xmm1, xmmword [rbp]
aesdec xmm8, xmm0
movdqu xmm0, xmmword [rbp - 0x20]
aesdec xmm8, xmm0
movdqu xmm0, xmmword [rbp - 0x10]
aesdec xmm8, xmm0
movdqa xmm0, xmm8
aesdeclast xmm0, xmm1
movq qword [rsp + 0x40], xmm0
movq rdi, xmm0
jmp 0x18002d254
aesdec xmm8, xmm9
jmp 0x18002d23d
aesdec xmm8, xmm10
jmp 0x18002d23d
aesdec xmm8, xmm14
aesdec xmm8, xmm13
add edi, 0x2e3a
cmp edi, 0x22ab8
jbe 0x18002d0a4
mov rdi, qword [rsp + 0x40]
lea rsi, [0x180000000]
mov r8d, dword [rsp + 0x20]
lea r10, [0x180069b70]
mov edx, dword [rbp + 0xa0]
mov r11d, 0x10
mov eax, dword [rbp + 0xb8]
inc edx
inc r8d
mov dword [rbp + 0xa0], edx
mov dword [rsp + 0x20], r8d
cmp edx, eax
jae case.0x18002cd9d.7
mov r9, qword [rbp + 0xa8]
jmp 0x18002cd80
lea rax, [0x180069b60]
mov qword [rsp + 0x40], r15
mov qword [r15 + 0x18], rax
mov rdi, r15
jmp 0x18002d254
lea r11, [rsp + 0x158]
movzx eax, bl
movaps xmm6, xmmword [r11 - 0x18]
movaps xmm7, xmmword [r11 - 0x28]
movaps xmm8, xmmword [r11 - 0x38]
movaps xmm9, xmmword [r11 - 0x48]
movaps xmm10, xmmword [r11 - 0x58]
movaps xmm11, xmmword [r11 - 0x68]
movaps xmm12, xmmword [r11 - 0x78]
movaps xmm13, xmmword [r11 - 0x88]
movaps xmm14, xmmword [r11 - 0x98]
movaps xmm15, xmmword [r11 - 0xa8]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret
lea rcx, str.me_de_fichiers__attendez_...
call fcn.18002cc20
int3