Function at 0x14003db60
Capabilities:
Encrypt data using aes

Disassembly:
mov qword [rsp + 0x18], r8
mov dword [rsp + 0x10], edx
mov qword [rsp + 8], rcx
sub rsp, 0x18
mov dword [rsp], 0
cmp qword [rsp + 0x20], 0
je 0x14003db89
cmp qword [rsp + 0x30], 0
jne 0x14003db93
mov eax, 0xffffffff
jmp 0x14003e287
cmp dword [rsp + 0x28], 0x80
je 0x14003dbbb
cmp dword [rsp + 0x28], 0xc0
je 0x14003dbbb
cmp dword [rsp + 0x28], 0x100
je 0x14003dbbb
mov eax, 0xfffffffe
jmp 0x14003e287
mov rax, qword [rsp + 0x30]
mov qword [rsp + 8], rax
cmp dword [rsp + 0x28], 0x80
jne 0x14003dbe0
mov rax, qword [rsp + 0x30]
mov dword [rax + 0xf0], 0xa
jmp 0x14003dc0a
cmp dword [rsp + 0x28], 0xc0
jne 0x14003dbfb
mov rax, qword [rsp + 0x30]
mov dword [rax + 0xf0], reloc.OLEAUT32.dll_VariantTimeToDosDateTime
jmp 0x14003dc0a
mov rax, qword [rsp + 0x30]
mov dword [rax + 0xf0], 0xe
mov rax, qword [rsp + 0x20]
movzx ecx, byte [rax]
shl ecx, 0x18
mov rax, qword [rsp + 0x20]
movzx eax, byte [rax + 1]
shl eax, 0x10
xor ecx, eax
mov rax, qword [rsp + 0x20]
movzx eax, byte [rax + 2]
shl eax, 8
xor ecx, eax
mov rax, qword [rsp + 0x20]
movzx eax, byte [rax + 3]
xor ecx, eax
mov rax, qword [rsp + 8]
mov dword [rax], ecx
mov rax, qword [rsp + 0x20]
movzx ecx, byte [rax + 4]
shl ecx, 0x18
mov rax, qword [rsp + 0x20]
movzx eax, byte [rax + 5]
shl eax, 0x10
xor ecx, eax
mov rax, qword [rsp + 0x20]
movzx eax, byte [rax + 6]
shl eax, 8
xor ecx, eax
mov rax, qword [rsp + 0x20]
movzx eax, byte [rax + 7]
xor ecx, eax
mov rax, qword [rsp + 8]
mov dword [rax + 4], ecx
mov rax, qword [rsp + 0x20]
movzx ecx, byte [rax + 8]
shl ecx, 0x18
mov rax, qword [rsp + 0x20]
movzx eax, byte [rax + 9]
shl eax, 0x10
xor ecx, eax
mov rax, qword [rsp + 0x20]
movzx eax, byte [rax + 0xa]
shl eax, 8
xor ecx, eax
mov rax, qword [rsp + 0x20]
movzx eax, byte [rax + 0xb]
xor ecx, eax
mov rax, qword [rsp + 8]
mov dword [rax + 8], ecx
mov rax, qword [rsp + 0x20]
movzx ecx, byte [rax + 0xc]
shl ecx, 0x18
mov rax, qword [rsp + 0x20]
movzx eax, byte [rax + 0xd]
shl eax, 0x10
xor ecx, eax
mov rax, qword [rsp + 0x20]
movzx eax, byte [rax + 0xe]
shl eax, 8
xor ecx, eax
mov rax, qword [rsp + 0x20]
movzx eax, byte [rax + 0xf]
xor ecx, eax
mov rax, qword [rsp + 8]
mov dword [rax + 0xc], ecx
cmp dword [rsp + 0x28], 0x80
jne 0x14003de24
xor eax, eax
cmp eax, 1
je 0x14003de24
mov rax, qword [rsp + 8]
mov eax, dword [rax + 0xc]
mov dword [rsp + 4], eax
mov eax, dword [rsp + 4]
shr eax, 0x10
and eax, 0xff
mov ecx, eax
lea rax, str.ccccwwww
mov ecx, dword [rax + rcx*4]
and ecx, 0xff000000
mov rax, qword [rsp + 8]
mov edx, dword [rax]
xor edx, ecx
mov eax, dword [rsp + 4]
shr eax, 8
and eax, 0xff
mov ecx, eax
lea rax, str.ccccwwww
mov eax, dword [rax + rcx*4]
and eax, 0xff0000
xor edx, eax
mov eax, dword [rsp + 4]
and eax, 0xff
mov ecx, eax
lea rax, str.ccccwwww
mov eax, dword [rax + rcx*4]
and eax, 0xff00
xor edx, eax
mov eax, dword [rsp + 4]
shr eax, 0x18
mov ecx, eax
lea rax, str.ccccwwww
mov eax, dword [rax + rcx*4]
and eax, 0xff
mov ecx, edx
xor ecx, eax
movsxd rdx, dword [rsp]
lea rax, [0x140072810]
xor ecx, dword [rax + rdx*4]
mov rax, qword [rsp + 8]
mov dword [rax + 0x10], ecx
mov rcx, qword [rsp + 8]
mov rax, qword [rsp + 8]
mov eax, dword [rax + 0x10]
mov ecx, dword [rcx + 4]
xor ecx, eax
mov rax, qword [rsp + 8]
mov dword [rax + 0x14], ecx
mov rcx, qword [rsp + 8]
mov rax, qword [rsp + 8]
mov eax, dword [rax + 0x14]
mov ecx, dword [rcx + 8]
xor ecx, eax
mov rax, qword [rsp + 8]
mov dword [rax + 0x18], ecx
mov rcx, qword [rsp + 8]
mov rax, qword [rsp + 8]
mov eax, dword [rax + 0x18]
mov ecx, dword [rcx + 0xc]
xor ecx, eax
mov rax, qword [rsp + 8]
mov dword [rax + 0x1c], ecx
mov eax, dword [rsp]
add eax, 1
mov dword [rsp], eax
cmp dword [rsp], 0xa
jne 0x14003de11
xor eax, eax
jmp 0x14003e287
mov rax, qword [rsp + 8]
add rax, 0x10
mov qword [rsp + 8], rax
jmp 0x14003dd02
mov rax, qword [rsp + 0x20]
movzx ecx, byte [rax + 0x10]
shl ecx, 0x18
mov rax, qword [rsp + 0x20]
movzx eax, byte [rax + 0x11]
shl eax, 0x10
xor ecx, eax
mov rax, qword [rsp + 0x20]
movzx eax, byte [rax + 0x12]
shl eax, 8
xor ecx, eax
mov rax, qword [rsp + 0x20]
movzx eax, byte [rax + 0x13]
xor ecx, eax
mov rax, qword [rsp + 8]
mov dword [rax + 0x10], ecx
mov rax, qword [rsp + 0x20]
movzx ecx, byte [rax + 0x14]
shl ecx, 0x18
mov rax, qword [rsp + 0x20]
movzx eax, byte [rax + 0x15]
shl eax, 0x10
xor ecx, eax
mov rax, qword [rsp + 0x20]
movzx eax, byte [rax + 0x16]
shl eax, 8
xor ecx, eax
mov rax, qword [rsp + 0x20]
movzx eax, byte [rax + 0x17]
xor ecx, eax
mov rax, qword [rsp + 8]
mov dword [rax + 0x14], ecx
cmp dword [rsp + 0x28], 0xc0
jne 0x14003dffe
xor eax, eax
cmp eax, 1
je 0x14003dffe
mov rax, qword [rsp + 8]
mov eax, dword [rax + 0x14]
mov dword [rsp + 4], eax
mov eax, dword [rsp + 4]
shr eax, 0x10
and eax, 0xff
mov ecx, eax
lea rax, str.ccccwwww
mov ecx, dword [rax + rcx*4]
and ecx, 0xff000000
mov rax, qword [rsp + 8]
mov edx, dword [rax]
xor edx, ecx
mov eax, dword [rsp + 4]
shr eax, 8
and eax, 0xff
mov ecx, eax
lea rax, str.ccccwwww
mov eax, dword [rax + rcx*4]
and eax, 0xff0000
xor edx, eax
mov eax, dword [rsp + 4]
and eax, 0xff
mov ecx, eax
lea rax, str.ccccwwww
mov eax, dword [rax + rcx*4]
and eax, 0xff00
xor edx, eax
mov eax, dword [rsp + 4]
shr eax, 0x18
mov ecx, eax
lea rax, str.ccccwwww
mov eax, dword [rax + rcx*4]
and eax, 0xff
mov ecx, edx
xor ecx, eax
movsxd rdx, dword [rsp]
lea rax, [0x140072810]
xor ecx, dword [rax + rdx*4]
mov rax, qword [rsp + 8]
mov dword [rax + 0x18], ecx
mov rcx, qword [rsp + 8]
mov rax, qword [rsp + 8]
mov eax, dword [rax + 0x18]
mov ecx, dword [rcx + 4]
xor ecx, eax
mov rax, qword [rsp + 8]
mov dword [rax + 0x1c], ecx
mov rcx, qword [rsp + 8]
mov rax, qword [rsp + 8]
mov eax, dword [rax + 0x1c]
mov ecx, dword [rcx + 8]
xor ecx, eax
mov rax, qword [rsp + 8]
mov dword [rax + 0x20], ecx
mov rcx, qword [rsp + 8]
mov rax, qword [rsp + 8]
mov eax, dword [rax + 0x20]
mov ecx, dword [rcx + 0xc]
xor ecx, eax
mov rax, qword [rsp + 8]
mov dword [rax + 0x24], ecx
mov eax, dword [rsp]
add eax, 1
mov dword [rsp], eax
cmp dword [rsp], 8
jne 0x14003dfb7
xor eax, eax
jmp 0x14003e287
mov rcx, qword [rsp + 8]
mov rax, qword [rsp + 8]
mov eax, dword [rax + 0x24]
mov ecx, dword [rcx + 0x10]
xor ecx, eax
mov rax, qword [rsp + 8]
mov dword [rax + 0x28], ecx
mov rcx, qword [rsp + 8]
mov rax, qword [rsp + 8]
mov eax, dword [rax + 0x28]
mov ecx, dword [rcx + 0x14]
xor ecx, eax
mov rax, qword [rsp + 8]
mov dword [rax + 0x2c], ecx
mov rax, qword [rsp + 8]
add rax, 0x18
mov qword [rsp + 8], rax
jmp 0x14003dea8
mov rax, qword [rsp + 0x20]
movzx ecx, byte [rax + 0x18]
shl ecx, 0x18
mov rax, qword [rsp + 0x20]
movzx eax, byte [rax + 0x19]
shl eax, 0x10
xor ecx, eax
mov rax, qword [rsp + 0x20]
movzx eax, byte [rax + 0x1a]
shl eax, 8
xor ecx, eax
mov rax, qword [rsp + 0x20]
movzx eax, byte [rax + 0x1b]
xor ecx, eax
mov rax, qword [rsp + 8]
mov dword [rax + 0x18], ecx
mov rax, qword [rsp + 0x20]
movzx ecx, byte [rax + 0x1c]
shl ecx, 0x18
mov rax, qword [rsp + 0x20]
movzx eax, byte [rax + 0x1d]
shl eax, 0x10
xor ecx, eax
mov rax, qword [rsp + 0x20]
movzx eax, byte [rax + 0x1e]
shl eax, 8
xor ecx, eax
mov rax, qword [rsp + 0x20]
movzx eax, byte [rax + 0x1f]
xor ecx, eax
mov rax, qword [rsp + 8]
mov dword [rax + 0x1c], ecx
cmp dword [rsp + 0x28], 0x100
jne 0x14003e285
xor eax, eax
cmp eax, 1
je 0x14003e285
mov rax, qword [rsp + 8]
mov eax, dword [rax + 0x1c]
mov dword [rsp + 4], eax
mov eax, dword [rsp + 4]
shr eax, 0x10
and eax, 0xff
mov ecx, eax
lea rax, str.ccccwwww
mov ecx, dword [rax + rcx*4]
and ecx, 0xff000000
mov rax, qword [rsp + 8]
mov edx, dword [rax]
xor edx, ecx
mov eax, dword [rsp + 4]
shr eax, 8
and eax, 0xff
mov ecx, eax
lea rax, str.ccccwwww
mov eax, dword [rax + rcx*4]
and eax, 0xff0000
xor edx, eax
mov eax, dword [rsp + 4]
and eax, 0xff
mov ecx, eax
lea rax, str.ccccwwww
mov eax, dword [rax + rcx*4]
and eax, 0xff00
xor edx, eax
mov eax, dword [rsp + 4]
shr eax, 0x18
mov ecx, eax
lea rax, str.ccccwwww
mov eax, dword [rax + rcx*4]
and eax, 0xff
mov ecx, edx
xor ecx, eax
movsxd rdx, dword [rsp]
lea rax, [0x140072810]
xor ecx, dword [rax + rdx*4]
mov rax, qword [rsp + 8]
mov dword [rax + 0x20], ecx
mov rcx, qword [rsp + 8]
mov rax, qword [rsp + 8]
mov eax, dword [rax + 0x20]
mov ecx, dword [rcx + 4]
xor ecx, eax
mov rax, qword [rsp + 8]
mov dword [rax + 0x24], ecx
mov rcx, qword [rsp + 8]
mov rax, qword [rsp + 8]
mov eax, dword [rax + 0x24]
mov ecx, dword [rcx + 8]
xor ecx, eax
mov rax, qword [rsp + 8]
mov dword [rax + 0x28], ecx
mov rcx, qword [rsp + 8]
mov rax, qword [rsp + 8]
mov eax, dword [rax + 0x28]
mov ecx, dword [rcx + 0xc]
xor ecx, eax
mov rax, qword [rsp + 8]
mov dword [rax + 0x2c], ecx
mov eax, dword [rsp]
add eax, 1
mov dword [rsp], eax
cmp dword [rsp], 7
jne 0x14003e191
xor eax, eax
jmp 0x14003e287
mov rax, qword [rsp + 8]
mov eax, dword [rax + 0x2c]
mov dword [rsp + 4], eax
mov eax, dword [rsp + 4]
shr eax, 0x18
mov ecx, eax
lea rax, str.ccccwwww
mov ecx, dword [rax + rcx*4]
and ecx, 0xff000000
mov rax, qword [rsp + 8]
mov edx, dword [rax + 0x10]
xor edx, ecx
mov eax, dword [rsp + 4]
shr eax, 0x10
and eax, 0xff
mov ecx, eax
lea rax, str.ccccwwww
mov eax, dword [rax + rcx*4]
and eax, 0xff0000
xor edx, eax
mov eax, dword [rsp + 4]
shr eax, 8
and eax, 0xff
mov ecx, eax
lea rax, str.ccccwwww
mov eax, dword [rax + rcx*4]
and eax, 0xff00
xor edx, eax
mov eax, dword [rsp + 4]
and eax, 0xff
mov ecx, eax
lea rax, str.ccccwwww
mov eax, dword [rax + rcx*4]
and eax, 0xff
mov ecx, edx
xor ecx, eax
mov rax, qword [rsp + 8]
mov dword [rax + 0x30], ecx
mov rcx, qword [rsp + 8]
mov rax, qword [rsp + 8]
mov eax, dword [rax + 0x30]
mov ecx, dword [rcx + 0x14]
xor ecx, eax
mov rax, qword [rsp + 8]
mov dword [rax + 0x34], ecx
mov rcx, qword [rsp + 8]
mov rax, qword [rsp + 8]
mov eax, dword [rax + 0x34]
mov ecx, dword [rcx + 0x18]
xor ecx, eax
mov rax, qword [rsp + 8]
mov dword [rax + 0x38], ecx
mov rcx, qword [rsp + 8]
mov rax, qword [rsp + 8]
mov eax, dword [rax + 0x38]
mov ecx, dword [rcx + 0x1c]
xor ecx, eax
mov rax, qword [rsp + 8]
mov dword [rax + 0x3c], ecx
mov rax, qword [rsp + 8]
add rax, 0x20
mov qword [rsp + 8], rax
jmp 0x14003e082
xor eax, eax
add rsp, 0x18
ret