Function at 0x14005a284
Capabilities:
Encrypt data using aes
Reference aes constants

Disassembly:
mov dword [rsp + 0x20], r9d
mov qword [rsp + 0x18], r8
mov qword [rsp + 0x10], rdx
mov qword [rsp + 8], rcx
sub rsp, 0x198
mov qword [rsp + 0xe0], 0xfffffffffffffffe
cmp qword [rsp + 0x1a8], 0
jne 0x14005a316
lea rdx, [0x14006b5f8]
lea rcx, [rsp + 0x130]
call fcn.14000fa18
mov qword [rsp + 0x70], rax
mov rax, qword [rsp + 0x70]
mov qword [rsp + 0x78], rax
mov rcx, qword [rsp + 0x78]
call fcn.140023e98
mov rdx, rax
lea rcx, [rsp + 0xe8]
call fcn.14001c27c
lea rdx, [0x14008abd8]
lea rcx, [rsp + 0xe8]
call fcn.14002c9c8
nop
lea rcx, [rsp + 0x130]
call fcn.140016e88
nop
cmp dword [rsp + 0x1b8], 0x10
je 0x14005a3a4
cmp dword [rsp + 0x1b8], 0x18
je 0x14005a3a4
cmp dword [rsp + 0x1b8], 0x20
je 0x14005a3a4
lea rdx, [0x14006b610]
lea rcx, [rsp + 0x150]
call fcn.14000fa18
mov qword [rsp + 0x80], rax
mov rax, qword [rsp + 0x80]
mov qword [rsp + 0x88], rax
mov rcx, qword [rsp + 0x88]
call fcn.140023e98
mov rdx, rax
lea rcx, [rsp + 0x100]
call fcn.14001c27c
lea rdx, [0x14008abd8]
lea rcx, [rsp + 0x100]
call fcn.14002c9c8
nop
lea rcx, [rsp + 0x150]
call fcn.140016e88
nop
cmp dword [rsp + 0x1c0], 0x10
je 0x14005a432
cmp dword [rsp + 0x1c0], 0x18
je 0x14005a432
cmp dword [rsp + 0x1c0], 0x20
je 0x14005a432
lea rdx, [0x14006b640]
lea rcx, [rsp + reloc.OLEAUT32.dll_VarBstrFromUI8]
call fcn.14000fa18
mov qword [rsp + 0x90], rax
mov rax, qword [rsp + 0x90]
mov qword [rsp + 0x98], rax
mov rcx, qword [rsp + 0x98]
call fcn.140023e98
mov rdx, rax
lea rcx, [rsp + 0x118]
call fcn.14001c27c
lea rdx, [0x14008abd8]
lea rcx, [rsp + 0x118]
call fcn.14002c9c8
nop
lea rcx, [rsp + reloc.OLEAUT32.dll_VarBstrFromUI8]
call fcn.140016e88
nop
mov rax, qword [rsp + 0x1a0]
mov ecx, dword [rsp + 0x1b8]
mov dword [rax + 0x3cc], ecx
mov rax, qword [rsp + 0x1a0]
mov ecx, dword [rsp + 0x1c0]
mov dword [rax + 0x3d0], ecx
mov rax, qword [rsp + 0x1a0]
movsxd rax, dword [rax + 0x3d0]
mov rcx, qword [rsp + 0x1a0]
add rcx, 0x3d8
mov r8, rax
mov rdx, qword [rsp + 0x1b0]
call fcn.14002bc80
mov rax, qword [rsp + 0x1a0]
movsxd rax, dword [rax + 0x3d0]
mov rcx, qword [rsp + 0x1a0]
add rcx, 0x3f8
mov r8, rax
mov rdx, qword [rsp + 0x1b0]
call fcn.14002bc80
mov rax, qword [rsp + 0x1a0]
mov eax, dword [rax + 0x3cc]
mov dword [rsp + 0x58], eax
cmp dword [rsp + 0x58], 0x10
je 0x14005a4dd
cmp dword [rsp + 0x58], 0x18
je 0x14005a537
jmp 0x14005a56e
mov rax, qword [rsp + 0x1a0]
cmp dword [rax + 0x3d0], 0x10
jne 0x14005a4f8
mov dword [rsp + 0x60], 0xa
jmp 0x14005a523
mov rax, qword [rsp + 0x1a0]
cmp dword [rax + 0x3d0], 0x18
jne 0x14005a513
mov dword [rsp + 0x5c], 0xc
jmp 0x14005a51b
mov dword [rsp + 0x5c], 0xe
mov eax, dword [rsp + 0x5c]
mov dword [rsp + 0x60], eax
mov rax, qword [rsp + 0x1a0]
mov ecx, dword [rsp + 0x60]
mov dword [rax + 0x3d4], ecx
jmp 0x14005a580
mov rax, qword [rsp + 0x1a0]
cmp dword [rax + 0x3d0], 0x20
je 0x14005a552
mov dword [rsp + 0x64], 0xc
jmp 0x14005a55a
mov dword [rsp + 0x64], 0xe
mov rax, qword [rsp + 0x1a0]
mov ecx, dword [rsp + 0x64]
mov dword [rax + 0x3d4], ecx
jmp 0x14005a580
mov rax, qword [rsp + 0x1a0]
mov dword [rax + 0x3d4], 0xe
mov rax, qword [rsp + 0x1a0]
mov eax, dword [rax + 0x3d0]
cdq
and edx, 3
add eax, edx
sar eax, 2
mov dword [rsp + 0x34], eax
mov dword [rsp + 0x24], 0
jmp 0x14005a5af
mov eax, dword [rsp + 0x24]
inc eax
mov dword [rsp + 0x24], eax
mov rax, qword [rsp + 0x1a0]
mov eax, dword [rax + 0x3d4]
cmp dword [rsp + 0x24], eax
jg 0x14005a607
mov dword [rsp + 0x20], 0
jmp 0x14005a5d7
mov eax, dword [rsp + 0x20]
inc eax
mov dword [rsp + 0x20], eax
mov eax, dword [rsp + 0x34]
cmp dword [rsp + 0x20], eax
jge 0x14005a605
movsxd rax, dword [rsp + 0x24]
imul rax, rax, 0x20
mov rcx, qword [rsp + 0x1a0]
lea rax, [rcx + rax + 0xc]
movsxd rcx, dword [rsp + 0x20]
mov dword [rax + rcx*4], 0
jmp 0x14005a5cd
jmp 0x14005a5a5
mov dword [rsp + 0x24], 0
jmp 0x14005a61b
mov eax, dword [rsp + 0x24]
inc eax
mov dword [rsp + 0x24], eax
mov rax, qword [rsp + 0x1a0]
mov eax, dword [rax + 0x3d4]
cmp dword [rsp + 0x24], eax
jg 0x14005a676
mov dword [rsp + 0x20], 0
jmp 0x14005a643
mov eax, dword [rsp + 0x20]
inc eax
mov dword [rsp + 0x20], eax
mov eax, dword [rsp + 0x34]
cmp dword [rsp + 0x20], eax
jge 0x14005a674
movsxd rax, dword [rsp + 0x24]
imul rax, rax, 0x20
mov rcx, qword [rsp + 0x1a0]
lea rax, [rcx + rax + 0x1ec]
movsxd rcx, dword [rsp + 0x20]
mov dword [rax + rcx*4], 0
jmp 0x14005a639
jmp 0x14005a611
mov rax, qword [rsp + 0x1a0]
mov eax, dword [rax + 0x3d4]
inc eax
imul eax, dword [rsp + 0x34]
mov dword [rsp + 0x54], eax
mov rax, qword [rsp + 0x1a0]
mov eax, dword [rax + 0x3cc]
cdq
and edx, 3
add eax, edx
sar eax, 2
mov dword [rsp + 0x30], eax
mov rax, qword [rsp + 0x1a0]
add rax, 0x418
mov qword [rsp + 0x48], rax
mov rax, qword [rsp + 0x1a8]
mov qword [rsp + 0x38], rax
mov dword [rsp + 0x24], 0
jmp 0x14005a6de
mov eax, dword [rsp + 0x24]
inc eax
mov dword [rsp + 0x24], eax
mov eax, dword [rsp + 0x30]
cmp dword [rsp + 0x24], eax
jge 0x14005a799
mov rax, qword [rsp + 0x38]
movzx eax, byte [rax]
shl eax, 0x18
mov rcx, qword [rsp + 0x48]
mov dword [rcx], eax
mov rax, qword [rsp + 0x38]
inc rax
mov qword [rsp + 0x38], rax
mov rax, qword [rsp + 0x38]
movzx eax, byte [rax]
shl eax, 0x10
mov rcx, qword [rsp + 0x48]
mov ecx, dword [rcx]
or ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x48]
mov dword [rcx], eax
mov rax, qword [rsp + 0x38]
inc rax
mov qword [rsp + 0x38], rax
mov rax, qword [rsp + 0x38]
movzx eax, byte [rax]
shl eax, 8
mov rcx, qword [rsp + 0x48]
mov ecx, dword [rcx]
or ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x48]
mov dword [rcx], eax
mov rax, qword [rsp + 0x38]
inc rax
mov qword [rsp + 0x38], rax
mov rax, qword [rsp + 0x38]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x48]
mov ecx, dword [rcx]
or ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x48]
mov dword [rcx], eax
mov rax, qword [rsp + 0x38]
inc rax
mov qword [rsp + 0x38], rax
mov rax, qword [rsp + 0x48]
add rax, 4
mov qword [rsp + 0x48], rax
jmp 0x14005a6d4
mov dword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
jmp 0x14005a7bf
mov eax, dword [rsp + 0x20]
inc eax
mov dword [rsp + 0x20], eax
mov eax, dword [rsp + 0x28]
inc eax
mov dword [rsp + 0x28], eax
mov eax, dword [rsp + 0x30]
cmp dword [rsp + 0x20], eax
jge 0x14005a8b5
mov eax, dword [rsp + 0x54]
cmp dword [rsp + 0x28], eax
jge 0x14005a8b5
movsxd rax, dword [rsp + 0x20]
mov qword [rsp + 0xa0], rax
mov eax, dword [rsp + 0x28]
cdq
idiv dword [rsp + 0x34]
cdqe
imul rax, rax, 0x20
mov rcx, qword [rsp + 0x1a0]
lea rax, [rcx + rax + 0xc]
mov qword [rsp + 0xa8], rax
mov eax, dword [rsp + 0x28]
cdq
idiv dword [rsp + 0x34]
mov eax, edx
cdqe
mov rcx, qword [rsp + 0x1a0]
mov rdx, qword [rsp + 0xa0]
mov ecx, dword [rcx + rdx*4 + 0x418]
mov rdx, qword [rsp + 0xa8]
mov dword [rdx + rax*4], ecx
movsxd rax, dword [rsp + 0x20]
mov qword [rsp + 0xb0], rax
mov eax, dword [rsp + 0x28]
cdq
idiv dword [rsp + 0x34]
mov rcx, qword [rsp + 0x1a0]
mov ecx, dword [rcx + 0x3d4]
sub ecx, eax
mov eax, ecx
cdqe
imul rax, rax, 0x20
mov rcx, qword [rsp + 0x1a0]
lea rax, [rcx + rax + 0x1ec]
mov qword [rsp + 0xb8], rax
mov eax, dword [rsp + 0x28]
cdq
idiv dword [rsp + 0x34]
mov eax, edx
cdqe
mov rcx, qword [rsp + 0x1a0]
mov rdx, qword [rsp + 0xb0]
mov ecx, dword [rcx + rdx*4 + 0x418]
mov rdx, qword [rsp + 0xb8]
mov dword [rdx + rax*4], ecx
jmp 0x14005a7ab
mov dword [rsp + 0x50], 0
mov eax, dword [rsp + 0x54]
cmp dword [rsp + 0x28], eax
jge 0x14005ad40
mov eax, dword [rsp + 0x30]
dec eax
cdqe
mov rcx, qword [rsp + 0x1a0]
mov eax, dword [rcx + rax*4 + 0x418]
mov dword [rsp + 0x2c], eax
mov eax, 4
imul rax, rax, 0
mov ecx, dword [rsp + 0x2c]
sar ecx, 0x10
and ecx, 0xff
movsxd rcx, ecx
lea rdx, str.cw
movsx ecx, byte [rdx + rcx]
and ecx, 0xff
shl ecx, 0x18
mov edx, dword [rsp + 0x2c]
sar edx, 8
and edx, 0xff
movsxd rdx, edx
lea r8, str.cw
movsx edx, byte [r8 + rdx]
and edx, 0xff
shl edx, 0x10
xor ecx, edx
mov edx, dword [rsp + 0x2c]
and edx, 0xff
movsxd rdx, edx
lea r8, str.cw
movsx edx, byte [r8 + rdx]
and edx, 0xff
shl edx, 8
xor ecx, edx
mov edx, dword [rsp + 0x2c]
sar edx, 0x18
and edx, 0xff
movsxd rdx, edx
lea r8, str.cw
movsx edx, byte [r8 + rdx]
and edx, 0xff
xor ecx, edx
movsxd rdx, dword [rsp + 0x50]
lea r8, [0x14006b380]
movsx edx, byte [r8 + rdx]
and edx, 0xff
shl edx, 0x18
xor ecx, edx
mov rdx, qword [rsp + 0x1a0]
mov eax, dword [rdx + rax + 0x418]
xor eax, ecx
mov ecx, 4
imul rcx, rcx, 0
mov rdx, qword [rsp + 0x1a0]
mov dword [rdx + rcx + 0x418], eax
mov eax, dword [rsp + 0x50]
inc eax
mov dword [rsp + 0x50], eax
cmp dword [rsp + 0x30], 8
je 0x14005aa4c
mov dword [rsp + 0x24], 1
mov dword [rsp + 0x20], 0
mov eax, dword [rsp + 0x30]
cmp dword [rsp + 0x24], eax
jge 0x14005aa47
movsxd rax, dword [rsp + 0x24]
movsxd rcx, dword [rsp + 0x20]
mov rdx, qword [rsp + 0x1a0]
mov r8, qword [rsp + 0x1a0]
mov ecx, dword [r8 + rcx*4 + 0x418]
mov eax, dword [rdx + rax*4 + 0x418]
xor eax, ecx
movsxd rcx, dword [rsp + 0x24]
mov rdx, qword [rsp + 0x1a0]
mov dword [rdx + rcx*4 + 0x418], eax
mov eax, dword [rsp + 0x20]
inc eax
mov dword [rsp + 0x20], eax
mov eax, dword [rsp + 0x24]
inc eax
mov dword [rsp + 0x24], eax
jmp 0x14005a9e8
jmp 0x14005ac27
mov dword [rsp + 0x24], 1
mov dword [rsp + 0x20], 0
mov eax, dword [rsp + 0x30]
cdq
sub eax, edx
sar eax, 1
cmp dword [rsp + 0x24], eax
jge 0x14005aac0
movsxd rax, dword [rsp + 0x24]
movsxd rcx, dword [rsp + 0x20]
mov rdx, qword [rsp + 0x1a0]
mov r8, qword [rsp + 0x1a0]
mov ecx, dword [r8 + rcx*4 + 0x418]
mov eax, dword [rdx + rax*4 + 0x418]
xor eax, ecx
movsxd rcx, dword [rsp + 0x24]
mov rdx, qword [rsp + 0x1a0]
mov dword [rdx + rcx*4 + 0x418], eax
mov eax, dword [rsp + 0x20]
inc eax
mov dword [rsp + 0x20], eax
mov eax, dword [rsp + 0x24]
inc eax
mov dword [rsp + 0x24], eax
jmp 0x14005aa5c
mov eax, dword [rsp + 0x30]
cdq
sub eax, edx
sar eax, 1
dec eax
cdqe
mov rcx, qword [rsp + 0x1a0]
mov eax, dword [rcx + rax*4 + 0x418]
mov dword [rsp + 0x2c], eax
mov eax, dword [rsp + 0x30]
cdq
sub eax, edx
sar eax, 1
cdqe
mov ecx, dword [rsp + 0x2c]
and ecx, 0xff
movsxd rcx, ecx
lea rdx, str.cw
movsx ecx, byte [rdx + rcx]
and ecx, 0xff
mov edx, dword [rsp + 0x2c]
sar edx, 8
and edx, 0xff
movsxd rdx, edx
lea r8, str.cw
movsx edx, byte [r8 + rdx]
and edx, 0xff
shl edx, 8
xor ecx, edx
mov edx, dword [rsp + 0x2c]
sar edx, 0x10
and edx, 0xff
movsxd rdx, edx
lea r8, str.cw
movsx edx, byte [r8 + rdx]
and edx, 0xff
shl edx, 0x10
xor ecx, edx
mov edx, dword [rsp + 0x2c]
sar edx, 0x18
and edx, 0xff
movsxd rdx, edx
lea r8, str.cw
movsx edx, byte [r8 + rdx]
and edx, 0xff
shl edx, 0x18
xor ecx, edx
mov rdx, qword [rsp + 0x1a0]
mov eax, dword [rdx + rax*4 + 0x418]
xor eax, ecx
mov dword [rsp + 0x68], eax
mov eax, dword [rsp + 0x30]
cdq
sub eax, edx
sar eax, 1
cdqe
mov rcx, qword [rsp + 0x1a0]
mov edx, dword [rsp + 0x68]
mov dword [rcx + rax*4 + 0x418], edx
mov eax, dword [rsp + 0x30]
cdq
sub eax, edx
sar eax, 1
mov dword [rsp + 0x20], eax
mov eax, dword [rsp + 0x20]
inc eax
mov dword [rsp + 0x24], eax
mov eax, dword [rsp + 0x30]
cmp dword [rsp + 0x24], eax
jge 0x14005ac27
movsxd rax, dword [rsp + 0x24]
movsxd rcx, dword [rsp + 0x20]
mov rdx, qword [rsp + 0x1a0]
mov r8, qword [rsp + 0x1a0]
mov ecx, dword [r8 + rcx*4 + 0x418]
mov eax, dword [rdx + rax*4 + 0x418]
xor eax, ecx
movsxd rcx, dword [rsp + 0x24]
mov rdx, qword [rsp + 0x1a0]
mov dword [rdx + rcx*4 + 0x418], eax
mov eax, dword [rsp + 0x20]
inc eax
mov dword [rsp + 0x20], eax
mov eax, dword [rsp + 0x24]
inc eax
mov dword [rsp + 0x24], eax
jmp 0x14005abc8
mov dword [rsp + 0x20], 0
jmp 0x14005ac45
mov eax, dword [rsp + 0x20]
inc eax
mov dword [rsp + 0x20], eax
mov eax, dword [rsp + 0x28]
inc eax
mov dword [rsp + 0x28], eax
mov eax, dword [rsp + 0x30]
cmp dword [rsp + 0x20], eax
jge 0x14005ad3b
mov eax, dword [rsp + 0x54]
cmp dword [rsp + 0x28], eax
jge 0x14005ad3b
movsxd rax, dword [rsp + 0x20]
mov qword [rsp + 0xc0], rax
mov eax, dword [rsp + 0x28]
cdq
idiv dword [rsp + 0x34]
cdqe
imul rax, rax, 0x20
mov rcx, qword [rsp + 0x1a0]
lea rax, [rcx + rax + 0xc]
mov qword [rsp + 0xc8], rax
mov eax, dword [rsp + 0x28]
cdq
idiv dword [rsp + 0x34]
mov eax, edx
cdqe
mov rcx, qword [rsp + 0x1a0]
mov rdx, qword [rsp + 0xc0]
mov ecx, dword [rcx + rdx*4 + 0x418]
mov rdx, qword [rsp + 0xc8]
mov dword [rdx + rax*4], ecx
movsxd rax, dword [rsp + 0x20]
mov qword [rsp + 0xd0], rax
mov eax, dword [rsp + 0x28]
cdq
idiv dword [rsp + 0x34]
mov rcx, qword [rsp + 0x1a0]
mov ecx, dword [rcx + 0x3d4]
sub ecx, eax
mov eax, ecx
cdqe
imul rax, rax, 0x20
mov rcx, qword [rsp + 0x1a0]
lea rax, [rcx + rax + 0x1ec]
mov qword [rsp + 0xd8], rax
mov eax, dword [rsp + 0x28]
cdq
idiv dword [rsp + 0x34]
mov eax, edx
cdqe
mov rcx, qword [rsp + 0x1a0]
mov rdx, qword [rsp + 0xd0]
mov ecx, dword [rcx + rdx*4 + 0x418]
mov rdx, qword [rsp + 0xd8]
mov dword [rdx + rax*4], ecx
jmp 0x14005ac31
jmp 0x14005a8bd
mov dword [rsp + 0x40], 1
jmp 0x14005ad54
mov eax, dword [rsp + 0x40]
inc eax
mov dword [rsp + 0x40], eax
mov rax, qword [rsp + 0x1a0]
mov eax, dword [rax + 0x3d4]
cmp dword [rsp + 0x40], eax
jge 0x14005ae44
mov dword [rsp + 0x20], 0
jmp 0x14005ad80
mov eax, dword [rsp + 0x20]
inc eax
mov dword [rsp + 0x20], eax
mov eax, dword [rsp + 0x34]
cmp dword [rsp + 0x20], eax
jge 0x14005ae3f
movsxd rax, dword [rsp + 0x40]
imul rax, rax, 0x20
mov rcx, qword [rsp + 0x1a0]
lea rax, [rcx + rax + 0x1ec]
movsxd rcx, dword [rsp + 0x20]
mov eax, dword [rax + rcx*4]
mov dword [rsp + 0x2c], eax
mov eax, dword [rsp + 0x2c]
sar eax, 0x18
and eax, 0xff
cdqe
lea rcx, [0x14006a380]
mov edx, dword [rsp + 0x2c]
sar edx, 0x10
and edx, 0xff
movsxd rdx, edx
lea r8, [0x14006a780]
mov edx, dword [r8 + rdx*4]
mov eax, dword [rcx + rax*4]
xor eax, edx
mov ecx, dword [rsp + 0x2c]
sar ecx, 8
and ecx, 0xff
movsxd rcx, ecx
lea rdx, [0x14006ab80]
xor eax, dword [rdx + rcx*4]
mov ecx, dword [rsp + 0x2c]
and ecx, 0xff
movsxd rcx, ecx
lea rdx, [0x14006af80]
xor eax, dword [rdx + rcx*4]
movsxd rcx, dword [rsp + 0x40]
imul rcx, rcx, 0x20
mov rdx, qword [rsp + 0x1a0]
lea rcx, [rdx + rcx + 0x1ec]
movsxd rdx, dword [rsp + 0x20]
mov dword [rcx + rdx*4], eax
jmp 0x14005ad76
jmp 0x14005ad4a
mov rax, qword [rsp + 0x1a0]
mov byte [rax + 8], 1
add rsp, 0x198
ret