Function at 0x4fab2d
Capabilities:
Encrypt data using aes

Disassembly:
mov ch, dh
mov ecx, dword [esp + 2]
mov edi, ecx
mov bp, si
mov di, 0x3b35
mov ebp, dword [esp]
lea edi, [esp + edi]
mov edi, eax
mov di, ax
push ebp
xchg word [esp], di
mov ebp, dword [esp + 0xb]
lea edi, [edx*4]
jmp 0x4fab6b
push cx
push word [esp + 1]
mov word [esp], sp
pop word [esp]
pushal
push dword [esp + 0xe]
pop dword [esp + 0xb]
pop dword [esp + 0x13]
mov byte [esp + 0xf], ch
mov word [esp + 0x16], dx
pushal
lea esp, [esp + 2]
mov dword [esp + 0x1a], edi
push si
pop di
lea edi, [eax + edi]
mov di, 0x34e2
bswap di
mov di, 0x67fd
lea edi, [ebx + edi]
mov di, 0x3478
mov di, word [esp]
lea edi, [esp + esi]
mov edi, 0x493c4b57
bswap edi
bswap di
mov dword [esp + 7], ebp
lea edi, [ecx*4]
lea edi, [eax + edx]
mov bp, word [esp]
mov edi, 0x4a2851ad
mov edi, ebp
mov edi, dword [esp]
bswap di
mov di, dx
lea edi, [edx + ebp]
bswap di
mov dword [esp + 2], ecx
mov di, word [esp]
mov edi, esi
mov ch, 0x3f
bswap edi
mov ch, dl
mov ch, 0x12
xchg ch, cl
mov edi, 0x6ab76575
jmp 0x4faa44
pushal
lea esp, [esp + 0x20]
lea esp, [esp + 4]
jmp 0x4faa7c
lea edi, [ecx + esi]
mov edi, dword [esp]
mov di, word [esp]
mov di, 0x43d8
mov edi, dword [esp + 0x1e]
lea esp, [esp + 0x40]
push ebx
push ebp
push esi
push edi
jmp 0x53b1f4
mov edi, dword [esp]
mov di, word [esp]
mov di, word [esp]
mov di, word [esp]
jmp 0x4fab44
shl edx, 8
stc
sub esp, 0xc
pop dword [esp]
sub esp, 0x1b
lea esp, [esp + 3]
xor edx, esi
push esi
push esi
lea esp, [esp + 0x28]
jmp 0x53b398
movzx edx, byte [eax]
shl edx, 8
movzx esi, byte [eax + 1]
xor edx, esi
movzx esi, byte [eax + 2]
push ax
lea esp, [esp]
lea esp, [esp + 2]
shl edx, 8
push sp
lea esp, [esp + 1]
lea esp, [esp]
mov byte [esp], dh
mov byte [esp], bl
pushfd
mov dword [esp], ecx
push dx
push dword [esp + 5]
lea esp, [esp + 3]
lea esp, [esp + 8]
xor edx, esi
movzx esi, byte [eax + 3]
pushfd
push word [esp + 2]
mov dword [esp], esi
push dword [esp + 3]
pushfd
push dword [esp + 0xd]
mov byte [esp + 7], bl
pop word [esp + 3]
pushfd
shl edx, 8
pushal
push word [esp + 0x1b]
pop dword [esp + 9]
pop dword [esp + 0x10]
push ecx
push word [esp + 0x17]
pop word [esp + 8]
lea esp, [esp + 2]
lea esp, [esp + 0x30]
xor edx, esi
movzx esi, byte [eax + 5]
mov dword [ecx], edx
movzx edx, byte [eax + 4]
shl edx, 8
xor edx, esi
movzx esi, byte [eax + 6]
shl edx, 8
xor edx, esi
movzx esi, byte [eax + 7]
shl edx, 8
xor edx, esi
movzx esi, byte [eax + 9]
push eax
pushal
not dx
mov dword [esp + 0x1c], ecx
push ebx
lea esp, [esp + 4]
popal
lea eax, [eax + 4]
mov dword [eax], edx
pop eax
movzx edx, byte [eax + 8]
shl edx, 8
xor edx, esi
movzx esi, byte [eax + 0xa]
shl edx, 8
xor edx, esi
movzx esi, byte [eax + 0xb]
shl edx, 8
xor edx, esi
movzx esi, byte [eax + 0xd]
mov dword [ecx + 8], edx
movzx edx, byte [eax + 0xc]
jmp 0x53b1cb
lea esp, [esp + 0x24]
mov esi, 0xff
clc
jmp 0x53b832
mov byte [esp + 3], ah
push word [esp + 1]
lea esp, [esp + 1]
jmp 0x53b336
lea esp, [esp + 2]
shr eax, 0x10
pushfd
lea esp, [esp + 3]
lea esp, [esp]
push sp
mov word [esp], ax
pushfd
mov dword [esp], esp
jmp 0x53b352
movzx esi, byte [eax + 0xe]
movzx eax, byte [eax + 0xf]
shl edx, 8
xor edx, esi
shl edx, 8
xor edx, eax
mov dword [ecx + 0xc], edx
mov eax, edx
push ebp
push word [esp + 3]
pushal
lea esp, [esp + 0xe]
pop word [esp + 5]
pushfd
mov byte [esp + 0x13], dl
push word [esp + 0x19]
push word [esp + 0x1a]
jmp 0x53b36f
push word [esp + 1]
mov byte [esp + 1], cl
sub esp, 0x1a
lea esp, [esp + 0x14]
sub esp, 0xd
lea esp, [esp + 1]
xor ecx, edi
pushfd
lea esp, [esp + 0x1c]
mov edi, edx
and edx, esi
mov edx, dword [edx*4 + reloc.oleaut32.dll_SysFreeString]
shr edi, 0x18
movzx edi, byte [edi*4 + 0x506080]
xor ecx, edi
and edx, ebp
xor ecx, edx
xor ecx, dword [ebx]
lea edi, [eax + 0x10]
xor ecx, dword [eax]
add ebx, 4
mov dword [edi], ecx
push edi
mov edi, eax
lea edi, [edi + 4]
mov edx, dword [edi]
pop edi
xor edx, ecx
push edi
mov edi, eax
lea edi, [edi + 0x14]
mov dword [edi], edx
pop edi
mov ecx, dword [eax + 8]
xor ecx, edx
mov dword [eax + 0x18], ecx
mov edx, dword [eax + 0xc]
xor edx, ecx
mov dword [eax + 0x1c], edx
cmp ebx, 0x5078a8
jne 0x53b73f
push 0xa
setge ah
bswap eax
mov ah, dl
setno ah
mov eax, dword [esp]
pushal
mov dword [esp + 0xc], ebx
mov word [esp + 4], sp
pop word [esp + 0xd]
push dword [esp + 0xd]
push word [esp]
push dx
pop word [esp + 0x20]
push word [esp + 0x12]
lea esp, [esp + 2]
lea esp, [esp + 0x28]
pop edi
pop esi
pop ebp
pop ebx
ret
mov ebp, 0xff00
and edi, ebp
xor eax, edi
xor eax, dword [ecx]
lea edi, [ecx + 0x10]
xor ebx, eax
push ebp
pushal
xchg dh, bh
mov dword [esp + 8], edi
push dx
mov byte [esp], ch
lea esp, [esp + 1]
lea esp, [esp]
lea esp, [esp + 1]
popal
mov dword [ebp], eax
pop ebp
mov eax, dword [ecx + 8]
xor eax, ebx
push edx
mov edx, ecx
lea edx, [edx + 0x14]
mov dword [edx], ebx
pop edx
mov dword [ecx + 0x18], eax
xor edx, eax
mov dword [ecx + 0x1c], edx
call fcn.0051d608
mov eax, edi
mov edx, dword [eax + 0xc]
mov ecx, edx
push dx
push cx
pushfd
push word [esp + 4]
mov dword [esp + 4], ecx
push cx
push word [esp + 6]
pop dword [esp + 3]
lea esp, [esp + 2]
shr ecx, 8
pushal
mov dword [esp + 0xa], edi
lea esp, [esp + 0x10]
push word [esp + 9]
pushal
lea esp, [esp + 0xe]
pop word [esp + 0x12]
lea esp, [esp + 0xb]
lea esp, [esp + 3]
lea esp, [esp + 0x1c]
pushal
mov bl, byte [esp]
mov edi, esp
not ecx
xchg ecx, eax
setl ah
xchg bl, ah
mov cl, 0xcd
not ch
mov si, bp
mov dword [esp], edx
push ecx
push eax
mov word [esp + 5], si
pushfd
lea esp, [esp + 0xb]
lea esp, [esp]
mov byte [esp], ah
lea esp, [esp + 1]
popal
and ecx, esi
mov ecx, dword [ecx*4 + reloc.oleaut32.dll_SysFreeString]
shr edi, 0x10
clc
stc
sub esp, 0x19
lea esp, [esp + 0x11]
mov byte [esp + 1], ch
pop word [esp + 3]
sub esp, 0x17
push ebx
stc
lea esp, [esp + 1]
and edi, esi
pushfd
push dword [esp + 3]
mov byte [esp + 4], dh
mov byte [esp + 2], al
push word [esp + 1]
pop dword [esp]
mov dword [esp], edx
mov byte [esp + 4], bh
push dword [esp + 1]
lea esp, [esp + 2]
lea esp, [esp + 0x28]
mov edi, dword [edi*4 + reloc.oleaut32.dll_SysFreeString]
and ecx, 0xff0000
and edi, 0xff000000
stc
cmc
stc
push ebp
jmp 0x53b620
sub esp, 0x1f
sub esp, 2
mov word [esp + 7], ax
add esp, 0
add esp, 9
mov dword [esp + 0xa], esi
pop dword [esp + 3]
push ax
lea esp, [esp + 2]
and eax, esi
pushfd
mov dword [esp], eax
pop word [esp]
mov byte [esp], dh
mov word [esp], dx
lea esp, [esp]
pushal
mov word [esp + 0x1d], sp
lea esp, [esp + 2]
lea esp, [esp + 0x34]
mov eax, dword [eax*4 + reloc.oleaut32.dll_SysFreeString]
xor eax, 0x1000000
mov edi, edx
shr edi, 8
and edi, esi
mov edi, dword [edi*4 + reloc.oleaut32.dll_SysFreeString]
and edi, 0xff0000
mov ebx, dword [ecx + 4]
and eax, 0xff000000
xor eax, edi
mov edi, edx
pushfd
push dword [esp + 2]
mov dword [esp + 1], edx
pop dword [esp]
push dword [esp + 1]
mov word [esp], si
push dword [esp + 7]
shr edi, 0x18
push edi
mov dword [esp], esp
mov dword [esp], esp
lea esp, [esp + 0x10]
movzx edi, byte [edi*4 + 0x506080]
xor eax, edi
push ecx
mov dword [esp], edx
lea esp, [esp]
mov byte [esp], al
push dword [esp]
push word [esp + 6]
pushfd
pop word [esp + 4]
lea esp, [esp + 0xc]
mov edi, edx
and edi, esi
mov edi, dword [edi*4 + reloc.oleaut32.dll_SysFreeString]
jmp 0x53b6f6