Function at 0x1400029e0
Capabilities:
Encrypt data using aes

Disassembly:
mov qword [rsp + 0x18], r8
mov dword [rsp + 0x10], edx
mov qword [rsp + 8], rcx
sub rsp, 0x18
mov dword [rsp + 4], 0
cmp qword [rsp + 0x20], 0
je 0x140002a0a
cmp qword [rsp + 0x30], 0
jne 0x140002a14
mov eax, 0xffffffff
jmp 0x14000348a
cmp dword [rsp + 0x28], 0x80
je 0x140002a3c
cmp dword [rsp + 0x28], 0xc0
je 0x140002a3c
cmp dword [rsp + 0x28], 0x100
je 0x140002a3c
mov eax, 0xfffffffe
jmp 0x14000348a
mov rax, qword [rsp + 0x30]
mov qword [rsp + 8], rax
cmp dword [rsp + 0x28], 0x80
jne 0x140002a61
mov rax, qword [rsp + 0x30]
mov dword [rax + 0xf0], 0xa
jmp 0x140002a8b
cmp dword [rsp + 0x28], 0xc0
jne 0x140002a7c
mov rax, qword [rsp + 0x30]
mov dword [rax + 0xf0], reloc.OLEAUT32.dll_VariantTimeToDosDateTime
jmp 0x140002a8b
mov rax, qword [rsp + 0x30]
mov dword [rax + 0xf0], reloc.WS2_32.dll_ntohl
mov eax, 1
imul rax, rax, 0
mov rcx, qword [rsp + 0x20]
movzx eax, byte [rcx + rax]
shl eax, 0x18
mov ecx, 1
imul rcx, rcx, 1
mov rdx, qword [rsp + 0x20]
movzx ecx, byte [rdx + rcx]
shl ecx, 0x10
xor eax, ecx
mov ecx, 1
imul rcx, rcx, 2
mov rdx, qword [rsp + 0x20]
movzx ecx, byte [rdx + rcx]
shl ecx, 8
xor eax, ecx
mov ecx, 1
imul rcx, rcx, 3
mov rdx, qword [rsp + 0x20]
movzx ecx, byte [rdx + rcx]
xor eax, ecx
mov ecx, 4
imul rcx, rcx, 0
mov rdx, qword [rsp + 8]
mov dword [rdx + rcx], eax
mov eax, 1
imul rax, rax, 0
mov rcx, qword [rsp + 0x20]
movzx eax, byte [rcx + rax + 4]
shl eax, 0x18
mov ecx, 1
imul rcx, rcx, 1
mov rdx, qword [rsp + 0x20]
movzx ecx, byte [rdx + rcx + 4]
shl ecx, 0x10
xor eax, ecx
mov ecx, 1
imul rcx, rcx, 2
mov rdx, qword [rsp + 0x20]
movzx ecx, byte [rdx + rcx + 4]
shl ecx, 8
xor eax, ecx
mov ecx, 1
imul rcx, rcx, 3
mov rdx, qword [rsp + 0x20]
movzx ecx, byte [rdx + rcx + 4]
xor eax, ecx
mov ecx, 4
imul rcx, rcx, 1
mov rdx, qword [rsp + 8]
mov dword [rdx + rcx], eax
mov eax, 1
imul rax, rax, 0
mov rcx, qword [rsp + 0x20]
movzx eax, byte [rcx + rax + 8]
shl eax, 0x18
mov ecx, 1
imul rcx, rcx, 1
mov rdx, qword [rsp + 0x20]
movzx ecx, byte [rdx + rcx + 8]
shl ecx, 0x10
xor eax, ecx
mov ecx, 1
imul rcx, rcx, 2
mov rdx, qword [rsp + 0x20]
movzx ecx, byte [rdx + rcx + 8]
shl ecx, 8
xor eax, ecx
mov ecx, 1
imul rcx, rcx, 3
mov rdx, qword [rsp + 0x20]
movzx ecx, byte [rdx + rcx + 8]
xor eax, ecx
mov ecx, 4
imul rcx, rcx, 2
mov rdx, qword [rsp + 8]
mov dword [rdx + rcx], eax
mov eax, 1
imul rax, rax, 0
mov rcx, qword [rsp + 0x20]
movzx eax, byte [rcx + rax + 0xc]
shl eax, 0x18
mov ecx, 1
imul rcx, rcx, 1
mov rdx, qword [rsp + 0x20]
movzx ecx, byte [rdx + rcx + 0xc]
shl ecx, 0x10
xor eax, ecx
mov ecx, 1
imul rcx, rcx, 2
mov rdx, qword [rsp + 0x20]
movzx ecx, byte [rdx + rcx + 0xc]
shl ecx, 8
xor eax, ecx
mov ecx, 1
imul rcx, rcx, 3
mov rdx, qword [rsp + 0x20]
movzx ecx, byte [rdx + rcx + 0xc]
xor eax, ecx
mov ecx, 4
imul rcx, rcx, 3
mov rdx, qword [rsp + 8]
mov dword [rdx + rcx], eax
cmp dword [rsp + 0x28], 0x80
jne 0x140002dd9
xor eax, eax
cmp eax, 1
je 0x140002dd9
mov eax, 4
imul rax, rax, 3
mov rcx, qword [rsp + 8]
mov eax, dword [rcx + rax]
mov dword [rsp], eax
mov eax, 4
imul rax, rax, 0
mov ecx, dword [rsp]
shr ecx, 0x10
and ecx, 0xff
mov ecx, ecx
lea rdx, str.ccccwwww
mov ecx, dword [rdx + rcx*4]
and ecx, 0xff000000
mov rdx, qword [rsp + 8]
mov eax, dword [rdx + rax]
xor eax, ecx
mov ecx, dword [rsp]
shr ecx, 8
and ecx, 0xff
mov ecx, ecx
lea rdx, str.ccccwwww
mov ecx, dword [rdx + rcx*4]
and ecx, 0xff0000
xor eax, ecx
mov ecx, dword [rsp]
and ecx, 0xff
mov ecx, ecx
lea rdx, str.ccccwwww
mov ecx, dword [rdx + rcx*4]
and ecx, 0xff00
xor eax, ecx
mov ecx, dword [rsp]
shr ecx, 0x18
mov ecx, ecx
lea rdx, str.ccccwwww
mov ecx, dword [rdx + rcx*4]
and ecx, 0xff
xor eax, ecx
movsxd rcx, dword [rsp + 4]
lea rdx, [0x140362448]
xor eax, dword [rdx + rcx*4]
mov ecx, 4
imul rcx, rcx, 4
mov rdx, qword [rsp + 8]
mov dword [rdx + rcx], eax
mov eax, 4
imul rax, rax, 1
mov ecx, 4
imul rcx, rcx, 4
mov rdx, qword [rsp + 8]
mov r8, qword [rsp + 8]
mov ecx, dword [r8 + rcx]
mov eax, dword [rdx + rax]
xor eax, ecx
mov ecx, 4
imul rcx, rcx, 5
mov rdx, qword [rsp + 8]
mov dword [rdx + rcx], eax
mov eax, 4
imul rax, rax, 2
mov ecx, 4
imul rcx, rcx, 5
mov rdx, qword [rsp + 8]
mov r8, qword [rsp + 8]
mov ecx, dword [r8 + rcx]
mov eax, dword [rdx + rax]
xor eax, ecx
mov ecx, 4
imul rcx, rcx, 6
mov rdx, qword [rsp + 8]
mov dword [rdx + rcx], eax
mov eax, 4
imul rax, rax, 3
mov ecx, 4
imul rcx, rcx, 6
mov rdx, qword [rsp + 8]
mov r8, qword [rsp + 8]
mov ecx, dword [r8 + rcx]
mov eax, dword [rdx + rax]
xor eax, ecx
mov ecx, 4
imul rcx, rcx, 7
mov rdx, qword [rsp + 8]
mov dword [rdx + rcx], eax
mov eax, dword [rsp + 4]
inc eax
mov dword [rsp + 4], eax
cmp dword [rsp + 4], 0xa
jne 0x140002dc6
xor eax, eax
jmp 0x14000348a
mov rax, qword [rsp + 8]
add rax, 0x10
mov qword [rsp + 8], rax
jmp 0x140002c45
mov eax, 1
imul rax, rax, 0
mov rcx, qword [rsp + 0x20]
movzx eax, byte [rcx + rax + 0x10]
shl eax, 0x18
mov ecx, 1
imul rcx, rcx, 1
mov rdx, qword [rsp + 0x20]
movzx ecx, byte [rdx + rcx + 0x10]
shl ecx, 0x10
xor eax, ecx
mov ecx, 1
imul rcx, rcx, 2
mov rdx, qword [rsp + 0x20]
movzx ecx, byte [rdx + rcx + 0x10]
shl ecx, 8
xor eax, ecx
mov ecx, 1
imul rcx, rcx, 3
mov rdx, qword [rsp + 0x20]
movzx ecx, byte [rdx + rcx + 0x10]
xor eax, ecx
mov ecx, 4
imul rcx, rcx, 4
mov rdx, qword [rsp + 8]
mov dword [rdx + rcx], eax
mov eax, 1
imul rax, rax, 0
mov rcx, qword [rsp + 0x20]
movzx eax, byte [rcx + rax + 0x14]
shl eax, 0x18
mov ecx, 1
imul rcx, rcx, 1
mov rdx, qword [rsp + 0x20]
movzx ecx, byte [rdx + rcx + 0x14]
shl ecx, 0x10
xor eax, ecx
mov ecx, 1
imul rcx, rcx, 2
mov rdx, qword [rsp + 0x20]
movzx ecx, byte [rdx + rcx + 0x14]
shl ecx, 8
xor eax, ecx
mov ecx, 1
imul rcx, rcx, 3
mov rdx, qword [rsp + 0x20]
movzx ecx, byte [rdx + rcx + 0x14]
xor eax, ecx
mov ecx, 4
imul rcx, rcx, 5
mov rdx, qword [rsp + 8]
mov dword [rdx + rcx], eax
cmp dword [rsp + 0x28], 0xc0
jne 0x1400030bf
xor eax, eax
cmp eax, 1
je 0x1400030bf
mov eax, 4
imul rax, rax, 5
mov rcx, qword [rsp + 8]
mov eax, dword [rcx + rax]
mov dword [rsp], eax
mov eax, 4
imul rax, rax, 0
mov ecx, dword [rsp]
shr ecx, 0x10
and ecx, 0xff
mov ecx, ecx
lea rdx, str.ccccwwww
mov ecx, dword [rdx + rcx*4]
and ecx, 0xff000000
mov rdx, qword [rsp + 8]
mov eax, dword [rdx + rax]
xor eax, ecx
mov ecx, dword [rsp]
shr ecx, 8
and ecx, 0xff
mov ecx, ecx
lea rdx, str.ccccwwww
mov ecx, dword [rdx + rcx*4]
and ecx, 0xff0000
xor eax, ecx
mov ecx, dword [rsp]
and ecx, 0xff
mov ecx, ecx
lea rdx, str.ccccwwww
mov ecx, dword [rdx + rcx*4]
and ecx, 0xff00
xor eax, ecx
mov ecx, dword [rsp]
shr ecx, 0x18
mov ecx, ecx
lea rdx, str.ccccwwww
mov ecx, dword [rdx + rcx*4]
and ecx, 0xff
xor eax, ecx
movsxd rcx, dword [rsp + 4]
lea rdx, [0x140362448]
xor eax, dword [rdx + rcx*4]
mov ecx, 4
imul rcx, rcx, 6
mov rdx, qword [rsp + 8]
mov dword [rdx + rcx], eax
mov eax, 4
imul rax, rax, 1
mov ecx, 4
imul rcx, rcx, 6
mov rdx, qword [rsp + 8]
mov r8, qword [rsp + 8]
mov ecx, dword [r8 + rcx]
mov eax, dword [rdx + rax]
xor eax, ecx
mov ecx, 4
imul rcx, rcx, 7
mov rdx, qword [rsp + 8]
mov dword [rdx + rcx], eax
mov eax, 4
imul rax, rax, 2
mov ecx, 4
imul rcx, rcx, 7
mov rdx, qword [rsp + 8]
mov r8, qword [rsp + 8]
mov ecx, dword [r8 + rcx]
mov eax, dword [rdx + rax]
xor eax, ecx
mov ecx, 4
imul rcx, rcx, 8
mov rdx, qword [rsp + 8]
mov dword [rdx + rcx], eax
mov eax, 4
imul rax, rax, 3
mov ecx, 4
imul rcx, rcx, 8
mov rdx, qword [rsp + 8]
mov r8, qword [rsp + 8]
mov ecx, dword [r8 + rcx]
mov eax, dword [rdx + rax]
xor eax, ecx
mov ecx, 4
imul rcx, rcx, 9
mov rdx, qword [rsp + 8]
mov dword [rdx + rcx], eax
mov eax, dword [rsp + 4]
inc eax
mov dword [rsp + 4], eax
cmp dword [rsp + 4], 8
jne 0x140003040
xor eax, eax
jmp 0x14000348a
mov eax, 4
imul rax, rax, 4
mov ecx, 4
imul rcx, rcx, 9
mov rdx, qword [rsp + 8]
mov r8, qword [rsp + 8]
mov ecx, dword [r8 + rcx]
mov eax, dword [rdx + rax]
xor eax, ecx
mov ecx, 4
imul rcx, rcx, 0xa
mov rdx, qword [rsp + 8]
mov dword [rdx + rcx], eax
mov eax, 4
imul rax, rax, 5
mov ecx, 4
imul rcx, rcx, 0xa
mov rdx, qword [rsp + 8]
mov r8, qword [rsp + 8]
mov ecx, dword [r8 + rcx]
mov eax, dword [rdx + rax]
xor eax, ecx
mov ecx, 4
imul rcx, rcx, 0xb
mov rdx, qword [rsp + 8]
mov dword [rdx + rcx], eax
mov rax, qword [rsp + 8]
add rax, 0x18
mov qword [rsp + 8], rax
jmp 0x140002ebf
mov eax, 1
imul rax, rax, 0
mov rcx, qword [rsp + 0x20]
movzx eax, byte [rcx + rax + 0x18]
shl eax, 0x18
mov ecx, 1
imul rcx, rcx, 1
mov rdx, qword [rsp + 0x20]
movzx ecx, byte [rdx + rcx + 0x18]
shl ecx, 0x10
xor eax, ecx
mov ecx, 1
imul rcx, rcx, 2
mov rdx, qword [rsp + 0x20]
movzx ecx, byte [rdx + rcx + 0x18]
shl ecx, 8
xor eax, ecx
mov ecx, 1
imul rcx, rcx, 3
mov rdx, qword [rsp + 0x20]
movzx ecx, byte [rdx + rcx + 0x18]
xor eax, ecx
mov ecx, 4
imul rcx, rcx, 6
mov rdx, qword [rsp + 8]
mov dword [rdx + rcx], eax
mov eax, 1
imul rax, rax, 0
mov rcx, qword [rsp + 0x20]
movzx eax, byte [rcx + rax + 0x1c]
shl eax, 0x18
mov ecx, 1
imul rcx, rcx, 1
mov rdx, qword [rsp + 0x20]
movzx ecx, byte [rdx + rcx + 0x1c]
shl ecx, 0x10
xor eax, ecx
mov ecx, 1
imul rcx, rcx, 2
mov rdx, qword [rsp + 0x20]
movzx ecx, byte [rdx + rcx + 0x1c]
shl ecx, 8
xor eax, ecx
mov ecx, 1
imul rcx, rcx, 3
mov rdx, qword [rsp + 0x20]
movzx ecx, byte [rdx + rcx + 0x1c]
xor eax, ecx
mov ecx, 4
imul rcx, rcx, 7
mov rdx, qword [rsp + 8]
mov dword [rdx + rcx], eax
cmp dword [rsp + 0x28], 0x100
jne 0x140003488
xor eax, eax
cmp eax, 1
je 0x140003488
mov eax, 4
imul rax, rax, 7
mov rcx, qword [rsp + 8]
mov eax, dword [rcx + rax]
mov dword [rsp], eax
mov eax, 4
imul rax, rax, 0
mov ecx, dword [rsp]
shr ecx, 0x10
and ecx, 0xff
mov ecx, ecx
lea rdx, str.ccccwwww
mov ecx, dword [rdx + rcx*4]
and ecx, 0xff000000
mov rdx, qword [rsp + 8]
mov eax, dword [rdx + rax]
xor eax, ecx
mov ecx, dword [rsp]
shr ecx, 8
and ecx, 0xff
mov ecx, ecx
lea rdx, str.ccccwwww
mov ecx, dword [rdx + rcx*4]
and ecx, 0xff0000
xor eax, ecx
mov ecx, dword [rsp]
and ecx, 0xff
mov ecx, ecx
lea rdx, str.ccccwwww
mov ecx, dword [rdx + rcx*4]
and ecx, 0xff00
xor eax, ecx
mov ecx, dword [rsp]
shr ecx, 0x18
mov ecx, ecx
lea rdx, str.ccccwwww
mov ecx, dword [rdx + rcx*4]
and ecx, 0xff
xor eax, ecx
movsxd rcx, dword [rsp + 4]
lea rdx, [0x140362448]
xor eax, dword [rdx + rcx*4]
mov ecx, 4
imul rcx, rcx, 8
mov rdx, qword [rsp + 8]
mov dword [rdx + rcx], eax
mov eax, 4
imul rax, rax, 1
mov ecx, 4
imul rcx, rcx, 8
mov rdx, qword [rsp + 8]
mov r8, qword [rsp + 8]
mov ecx, dword [r8 + rcx]
mov eax, dword [rdx + rax]
xor eax, ecx
mov ecx, 4
imul rcx, rcx, 9
mov rdx, qword [rsp + 8]
mov dword [rdx + rcx], eax
mov eax, 4
imul rax, rax, 2
mov ecx, 4
imul rcx, rcx, 9
mov rdx, qword [rsp + 8]
mov r8, qword [rsp + 8]
mov ecx, dword [r8 + rcx]
mov eax, dword [rdx + rax]
xor eax, ecx
mov ecx, 4
imul rcx, rcx, 0xa
mov rdx, qword [rsp + 8]
mov dword [rdx + rcx], eax
mov eax, 4
imul rax, rax, 3
mov ecx, 4
imul rcx, rcx, 0xa
mov rdx, qword [rsp + 8]
mov r8, qword [rsp + 8]
mov ecx, dword [r8 + rcx]
mov eax, dword [rdx + rax]
xor eax, ecx
mov ecx, 4
imul rcx, rcx, 0xb
mov rdx, qword [rsp + 8]
mov dword [rdx + rcx], eax
mov eax, dword [rsp + 4]
inc eax
mov dword [rsp + 4], eax
cmp dword [rsp + 4], 7
jne 0x140003326
xor eax, eax
jmp 0x14000348a
mov eax, 4
imul rax, rax, 0xb
mov rcx, qword [rsp + 8]
mov eax, dword [rcx + rax]
mov dword [rsp], eax
mov eax, 4
imul rax, rax, 4
mov ecx, dword [rsp]
shr ecx, 0x18
mov ecx, ecx
lea rdx, str.ccccwwww
mov ecx, dword [rdx + rcx*4]
and ecx, 0xff000000
mov rdx, qword [rsp + 8]
mov eax, dword [rdx + rax]
xor eax, ecx
mov ecx, dword [rsp]
shr ecx, 0x10
and ecx, 0xff
mov ecx, ecx
lea rdx, str.ccccwwww
mov ecx, dword [rdx + rcx*4]
and ecx, 0xff0000
xor eax, ecx
mov ecx, dword [rsp]
shr ecx, 8
and ecx, 0xff
mov ecx, ecx
lea rdx, str.ccccwwww
mov ecx, dword [rdx + rcx*4]
and ecx, 0xff00
xor eax, ecx
mov ecx, dword [rsp]
and ecx, 0xff
mov ecx, ecx
lea rdx, str.ccccwwww
mov ecx, dword [rdx + rcx*4]
and ecx, 0xff
xor eax, ecx
mov ecx, 4
imul rcx, rcx, 0xc
mov rdx, qword [rsp + 8]
mov dword [rdx + rcx], eax
mov eax, 4
imul rax, rax, 5
mov ecx, 4
imul rcx, rcx, 0xc
mov rdx, qword [rsp + 8]
mov r8, qword [rsp + 8]
mov ecx, dword [r8 + rcx]
mov eax, dword [rdx + rax]
xor eax, ecx
mov ecx, 4
imul rcx, rcx, 0xd
mov rdx, qword [rsp + 8]
mov dword [rdx + rcx], eax
mov eax, 4
imul rax, rax, 6
mov ecx, 4
imul rcx, rcx, 0xd
mov rdx, qword [rsp + 8]
mov r8, qword [rsp + 8]
mov ecx, dword [r8 + rcx]
mov eax, dword [rdx + rax]
xor eax, ecx
mov ecx, 4
imul rcx, rcx, 0xe
mov rdx, qword [rsp + 8]
mov dword [rdx + rcx], eax
mov eax, 4
imul rax, rax, 7
mov ecx, 4
imul rcx, rcx, 0xe
mov rdx, qword [rsp + 8]
mov r8, qword [rsp + 8]
mov ecx, dword [r8 + rcx]
mov eax, dword [rdx + rax]
xor eax, ecx
mov ecx, 4
imul rcx, rcx, 0xf
mov rdx, qword [rsp + 8]
mov dword [rdx + rcx], eax
mov rax, qword [rsp + 8]
add rax, 0x20
mov qword [rsp + 8], rax
jmp 0x1400031a5
xor eax, eax
add rsp, 0x18
ret