Function at 0x11e666e0
Capabilities:
Contain obfuscated stackstrings
Print debug messages
Read file on windows

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x11fbfbdb
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x4cc
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
xor esi, esi
mov dword [ebp - 0x20], esi
mov dword [ebp - 0x18], esi
mov dword [ebp - 0x14], esi
mov dword [ebp - 4], esi
mov byte [ebp - 0x43c], 0
mov ecx, 0xff
xor eax, eax
lea edi, [ebp - 0x43b]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov dword [ebp - 0x4bc], esi
push esi
lea eax, [ebp - 0x4bc]
push eax
push 0x3ff
lea ecx, [ebp - 0x43c]
push ecx
mov ebx, dword [ebp + 8]
push ebx
call dword [sym.imp.KERNEL32.dll_ReadFile]
test eax, eax
jne 0x11e66760
mov esi, 0xfffffffe
mov dword [ebp - 0x1c], esi
jmp 0x11e66ddb
push 0x1209e0d0
lea edx, [ebp - 0x43c]
push edx
call fcn.11e68ba0
add esp, 8
mov dword [ebp - 0x478], eax
cmp eax, esi
jne 0x11e6678b
mov esi, 0xfffffffd
mov dword [ebp - 0x1c], esi
jmp 0x11e66ddb
mov byte [eax], 0
push str.TVSize
lea eax, [ebp - 0x43c]
push eax
call fcn.11e68ba0
add esp, 8
mov dword [ebp - 0x4b0], eax
cmp eax, esi
jne 0x11e667b9
mov esi, 0xfffffffc
mov dword [ebp - 0x1c], esi
jmp 0x11e66ddb
add eax, 7
push eax
call fcn.11e6901b
add esp, 4
mov esi, eax
mov dword [ebp - 0x24], esi
mov word [ebp - 0x474], 0
mov ecx, 9
xor eax, eax
lea edi, [ebp - 0x472]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
push esi
push str.Size:_d
lea ecx, [ebp - 0x474]
push ecx
call fcn.11e682d7
add esp, 0xc
lea edx, [ebp - 0x474]
push edx
call dword [sym.imp.KERNEL32.dll_OutputDebugStringW]
cmp esi, 0x200000
jle 0x11e6681b
mov esi, 0xffffffee
mov dword [ebp - 0x1c], esi
jmp 0x11e66ddb
push 0
push 0
push 0
push ebx
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
push esi
call fcn.11e67ea5
add esp, 4
mov edi, eax
mov dword [ebp - 0x20], edi
test edi, edi
jne 0x11e66847
mov esi, 0xfffffffb
mov dword [ebp - 0x1c], esi
jmp 0x11e66ddb
mov ecx, esi
xor eax, eax
mov edx, ecx
shr ecx, 2
rep stosd dword es:[edi], eax
mov ecx, edx
and ecx, 3
rep stosb byte es:[edi], al
xor edi, edi
mov dword [ebp - 0x4bc], edi
push edi
lea eax, [ebp - 0x4bc]
push eax
push esi
mov ecx, dword [ebp - 0x20]
push ecx
push ebx
mov esi, dword [sym.imp.KERNEL32.dll_ReadFile]
call esi
test eax, eax
jne 0x11e66888
mov esi, 0xfffffffa
mov dword [ebp - 0x1c], esi
jmp 0x11e66ddb
mov byte [ebp - 0x3c], 0
xor edx, edx
mov dword [ebp - 0x3b], edx
mov dword [ebp - 0x37], edx
mov dword [ebp - 0x33], edx
mov dword [ebp - 0x2f], edx
mov dword [ebp - 0x2b], edx
mov word [ebp - 0x27], dx
mov byte [ebp - 0x25], dl
mov dword [ebp - 0x4bc], edi
push edi
lea eax, [ebp - 0x4bc]
push eax
push 0x18
lea ecx, [ebp - 0x3c]
push ecx
push ebx
call esi
test eax, eax
jne 0x11e668cc
mov esi, 0xfffffff9
mov dword [ebp - 0x1c], esi
jmp 0x11e66ddb
mov ecx, 6
mov edi, str.TrustView_UDP_Protected.
lea esi, [ebp - 0x3c]
xor edx, edx
repe cmpsd dword [esi], dword es:[edi]
je 0x11e668f7
mov esi, 0xfffffff8
mov dword [ebp - 0x1c], esi
push str.File_check_error
call dword [sym.imp.KERNEL32.dll_OutputDebugStringW]
jmp 0x11e66ddb
push str.File_check_ok
call dword [sym.imp.KERNEL32.dll_OutputDebugStringW]
mov byte [ebp - 0x444], 0
xor eax, eax
mov word [ebp - 0x443], ax
mov byte [ebp - 0x441], al
mov dword [ebp - 0x4bc], eax
push eax
lea ecx, [ebp - 0x4bc]
push ecx
push 4
lea edx, [ebp - 0x444]
push edx
push ebx
mov edi, dword [sym.imp.KERNEL32.dll_ReadFile]
call edi
test eax, eax
jne 0x11e66949
mov esi, 0xfffffff7
mov dword [ebp - 0x1c], esi
jmp 0x11e66ddb
push 4
lea eax, [ebp - 0x444]
push eax
call fcn.11e664f0
add esp, 8
mov esi, eax
mov dword [ebp - 0x4ac], esi
mov byte [ebp - 0x448], 0
xor ecx, ecx
mov word [ebp - 0x447], cx
mov byte [ebp - 0x445], cl
mov dword [ebp - 0x4bc], ecx
push ecx
lea edx, [ebp - 0x4bc]
push edx
push 4
lea eax, [ebp - 0x448]
push eax
push ebx
call edi
test eax, eax
jne 0x11e669a3
mov esi, 0xfffffff6
mov dword [ebp - 0x1c], esi
jmp 0x11e66ddb
xor eax, eax
mov dword [ebp - 0x440], eax
mov byte [ebp - 0x44c], al
xor ecx, ecx
mov word [ebp - 0x44b], cx
mov byte [ebp - 0x449], cl
mov dword [ebp - 0x4bc], eax
push eax
lea edx, [ebp - 0x4bc]
push edx
push 4
lea eax, [ebp - 0x44c]
push eax
push ebx
call edi
test eax, eax
jne 0x11e669eb
mov esi, 0xfffffff5
mov dword [ebp - 0x1c], esi
jmp 0x11e66ddb
mov ecx, 0x120fe6d4
lea edx, [ebp - 0x44c]
mov eax, dword [edx]
cmp eax, dword [ecx]
je 0x11e66a77
mov ecx, 0x120fe6c8
lea edx, [ebp - 0x44c]
mov eax, dword [edx]
cmp eax, dword [ecx]
je 0x11e66a77
mov ecx, 0x120fe6cc
lea edx, [ebp - 0x44c]
mov eax, dword [edx]
cmp eax, dword [ecx]
je 0x11e66a40
mov ecx, 0x12133004
lea edx, [ebp - 0x44c]
mov eax, dword [edx]
cmp eax, dword [ecx]
je 0x11e66a40
mov ecx, 0x120fe6d0
lea edx, [ebp - 0x44c]
mov eax, dword [edx]
cmp eax, dword [ecx]
jne 0x11e66a5f
mov dword [ebp - 0x440], 0
cmp esi, 0x200000
jle 0x11e66a9c
mov esi, 0xffffffed
mov dword [ebp - 0x1c], esi
jmp 0x11e66ddb
mov esi, 0xfffffff4
mov dword [ebp - 0x1c], esi
push str.Encrypt_Type_Error.
call dword [sym.imp.KERNEL32.dll_OutputDebugStringW]
jmp 0x11e66ddb
mov dword [ebp - 0x440], 1
mov eax, dword [ebp + 0xc]
test eax, eax
je 0x11e66dc4
mov dword [eax], 5
xor esi, esi
mov dword [ebp - 0x1c], esi
jmp 0x11e66ddb
push esi
call fcn.11e67ea5
add esp, 4
mov edi, eax
mov dword [ebp - 0x18], edi
test edi, edi
jne 0x11e66abb
mov esi, 0xfffffff3
mov dword [ebp - 0x1c], esi
jmp 0x11e66ddb
mov ecx, esi
xor eax, eax
mov edx, ecx
shr ecx, 2
rep stosd dword es:[edi], eax
mov ecx, edx
and ecx, 3
rep stosb byte es:[edi], al
mov dword [ebp - 0x4bc], 0
push 0
lea eax, [ebp - 0x4bc]
push eax
push esi
mov ecx, dword [ebp - 0x18]
push ecx
push ebx
call dword [sym.imp.KERNEL32.dll_ReadFile]
test eax, eax
jne 0x11e66afd
mov esi, 0xfffffff2
mov dword [ebp - 0x1c], esi
jmp 0x11e66ddb
mov byte [ebp - 0x4a4], 0x8e
mov byte [ebp - 0x4a3], 0xfd
mov byte [ebp - 0x4a2], 0x40
mov byte [ebp - 0x4a1], 0xa9
mov byte [ebp - 0x4a0], 0x9e
mov byte [ebp - 0x49f], 0x6a
mov bl, 0xab
mov byte [ebp - 0x49e], bl
mov byte [ebp - 0x49d], 0x3b
mov byte [ebp - 0x49c], 0xcf
mov byte [ebp - 0x49b], 4
mov byte [ebp - 0x49a], 0x2f
mov byte [ebp - 0x499], 0xdb
mov byte [ebp - 0x498], 0xdc
mov byte [ebp - 0x497], 0x97
mov dl, 0xcd
mov byte [ebp - 0x496], dl
mov byte [ebp - 0x495], 0x22
mov byte [ebp - 0x494], 0x78
mov byte [ebp - 0x493], 0x70
mov byte [ebp - 0x492], 0x60
mov byte [ebp - 0x491], 0x65
mov byte [ebp - 0x490], 0x7e
mov cl, 0xa3
mov byte [ebp - 0x48f], cl
mov byte [ebp - 0x48e], 0x8c
mov al, 0x45
mov byte [ebp - 0x48d], al
mov byte [ebp - 0x48c], al
mov byte [ebp - 0x48b], 0xef
mov byte [ebp - 0x48a], 0x3a
mov byte [ebp - 0x489], 0x91
mov byte [ebp - 0x488], 0xe4
mov byte [ebp - 0x487], 0xed
mov byte [ebp - 0x486], 0xa
mov byte [ebp - 0x485], 0x3e
mov byte [ebp - 0x4cc], 0x57
mov byte [ebp - 0x4cb], 0xc6
mov byte [ebp - 0x4ca], 0x21
mov byte [ebp - 0x4c9], 0xa9
mov byte [ebp - 0x4c8], 0x36
mov byte [ebp - 0x4c7], 0x87
mov byte [ebp - 0x4c6], 1
mov byte [ebp - 0x4c5], 0xbd
mov byte [ebp - 0x4c4], cl
mov byte [ebp - 0x4c3], 0x74
mov byte [ebp - 0x4c2], 0xf0
mov byte [ebp - 0x4c1], 0xb4
mov byte [ebp - 0x4c0], bl
mov byte [ebp - 0x4bf], 0x43
mov byte [ebp - 0x4be], dl
mov byte [ebp - 0x4bd], 0x47
lea edi, [esi + 0x31]
push edi
call fcn.11e67ea5
add esp, 4
mov ebx, eax
mov dword [ebp - 0x14], ebx
test ebx, ebx
jne 0x11e66c6f
mov esi, 0xfffffff1
mov dword [ebp - 0x1c], esi
jmp 0x11e66ddb
mov ecx, edi
xor eax, eax
mov edi, ebx
mov edx, ecx
shr ecx, 2
rep stosd dword es:[edi], eax
mov ecx, edx
and ecx, 3
rep stosb byte es:[edi], al
lea eax, [ebp - 0x4cc]
push eax
push ebx
push esi
mov ecx, dword [ebp - 0x18]
push ecx
push 0x20
lea edx, [ebp - 0x4a4]
push edx
call fcn.11e66520
mov dword [ebp - 0x484], eax
cmp eax, 0xffffffff
jne 0x11e66cb6
mov esi, 0xfffffff0
mov dword [ebp - 0x1c], esi
jmp 0x11e66ddb
mov dword [ebp - 0x4b8], 0x60
add ebx, 0x60
mov dword [ebp - 0x4a8], ebx
push ebx
call dword [sym.imp.KERNEL32.dll_OutputDebugStringW]
mov eax, dword [ebp + 0x10]
test eax, eax
je 0x11e66d6b
push str.AuName
push ebx
call fcn.11e68668
add esp, 8
mov edi, eax
mov dword [ebp - 0x4d4], edi
test edi, edi
jne 0x11e66d02
mov esi, 0xffffffef
mov dword [ebp - 0x1c], esi
jmp 0x11e66ddb
push 0x3b
push edi
call fcn.11e684ca
add esp, 8
mov esi, eax
mov dword [ebp - 0x4d0], esi
test esi, esi
je 0x11e66d6b
push str.AuName
call fcn.11e67d05
add esp, 4
sub esi, edi
sar esi, 1
sub esi, eax
push esi
push str.AuName
call fcn.11e67d05
add esp, 4
lea eax, [edi + eax*2]
push eax
lea ecx, [ebp - 0x4d8]
call fcn.11e7ee90
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x4d8]
push ecx
mov ecx, dword [ebp + 0x10]
call fcn.11e7f410
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x4d8]
call fcn.11e7f280
push str.PolicyType
push ebx
call fcn.11e68668
add esp, 8
mov esi, eax
mov dword [ebp - 0x480], esi
test esi, esi
jne 0x11e66d8f
mov esi, 0xffffffee
mov dword [ebp - 0x1c], esi
jmp 0x11e66ddb
push 0x3b
push esi
call fcn.11e684ca
add esp, 8
mov dword [ebp - 0x4b4], eax
test eax, eax
je 0x11e66da9
mov word [eax], 0
add esi, 0x16
push esi
call fcn.11e69ced
add esp, 4
mov dword [ebp - 0x47c], eax
mov ecx, dword [ebp + 0xc]
test ecx, ecx
je 0x11e66dc4
mov dword [ecx], eax
xor esi, esi
mov dword [ebp - 0x1c], esi
jmp 0x11e66ddb
mov dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0x20]
test eax, eax
je 0x11e66df2
push eax
call fcn.11e67fdf
add esp, 4
mov eax, dword [ebp - 0x18]
test eax, eax
je 0x11e66e02
push eax
call fcn.11e67fdf
add esp, 4
mov eax, dword [ebp - 0x14]
test eax, eax
je 0x11e66e12
push eax
call fcn.11e67fdf
add esp, 4
mov eax, esi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret