Function at 0x402f9f
Capabilities:
Encrypt data using aes
Encrypt data using rc4 ksa
Reference aes constants

Disassembly:
mov eax, 0x429371
call sub.MSVCRT.dll__EH_prolog
sub esp, 0x54
push ebx
push esi
mov esi, ecx
xor ebx, ebx
push edi
cmp byte [esi + 4], bl
jne 0x402ffe
mov al, byte [ebp + 0xb]
mov esi, dword [str.FileCrypt_ERROR:_Encryption_Decryption_Object_not_Initialized_]
push ebx
lea ecx, [ebp - 0x44]
mov byte [ebp - 0x44], al
call dword [sym.imp.MSVCP60.dll_private:_void___thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::_Tidy_bool_]
push esi
call sub.MSVCRT.dll_strlen
pop ecx
push eax
push esi
lea ecx, [ebp - 0x44]
call dword [sym.imp.MSVCP60.dll_public:_class_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char______thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::assign_char_const___unsigned_int_]
lea eax, [ebp - 0x44]
lea ecx, [ebp - 0x60]
push eax
mov dword [ebp - 4], ebx
call dword [sym.imp.MSVCP60.dll_public:_void___thiscall_std::runtime_error::constructor_class_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char___const__]
lea eax, [ebp - 0x60]
push 0x435260
push eax
call sub.MSVCRT.dll__CxxThrowException
mov eax, dword [esi + 8]
cmp eax, 0x10
jne 0x403018
push dword [ebp + 0xc]
mov ecx, esi
push dword [ebp + 8]
call fcn.0040294f
jmp 0x403258
push 4
cdq
pop ecx
idiv ecx
mov edi, eax
sub eax, ecx
xor ecx, ecx
cmp edi, 6
setne cl
inc ecx
neg eax
sbb eax, eax
and eax, ecx
shl eax, 5
cmp edi, ebx
mov ecx, dword [eax + 0x4322ac]
mov dword [ebp - 0x24], ecx
mov ecx, dword [eax + 0x4322b4]
mov eax, dword [eax + 0x4322bc]
mov dword [ebp - 0x20], ecx
mov dword [ebp - 0x28], eax
lea eax, [esi + 0x45c]
jle 0x40309c
lea ecx, [esi + 0x1f8]
mov dword [ebp - 0x18], edi
mov dword [ebp - 0x10], ecx
mov ecx, dword [ebp + 8]
movzx edx, byte [ecx]
shl edx, 0x18
inc ecx
mov dword [eax], edx
movzx edx, byte [ecx]
shl edx, 0x10
or dword [eax], edx
inc ecx
xor edx, edx
mov dh, byte [ecx]
or dword [eax], edx
inc ecx
mov edx, eax
movzx ebx, byte [ecx]
or dword [eax], ebx
mov ebx, dword [ebp - 0x10]
add dword [ebp - 0x10], 4
inc ecx
mov ebx, dword [ebx]
add eax, 4
xor dword [edx], ebx
dec dword [ebp - 0x18]
jne 0x403068
push 1
pop eax
cmp dword [esi + 0x3d8], eax
mov dword [ebp - 0x18], eax
jle 0x40318c
lea eax, [esi + 0x218]
mov dword [ebp - 0x14], eax
test edi, edi
jle 0x40315a
mov eax, dword [ebp - 0x14]
mov edx, dword [ebp - 0x24]
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x20]
sub eax, edx
mov dword [ebp + 8], edx
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x28]
sub eax, edx
lea ecx, [esi + 0x43c]
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x1c], edi
mov eax, dword [ebp - 0x2c]
mov ebx, dword [ebp + 8]
add eax, ebx
cdq
idiv edi
mov eax, edx
xor edx, edx
mov dl, byte [esi + eax*4 + 0x45d]
mov eax, dword [ebp - 0x30]
add eax, ebx
mov dword [ebp - 0x34], edx
cdq
idiv edi
mov eax, dword [esi + edx*4 + 0x45c]
mov edx, dword [ebp - 0x34]
and eax, 0xff
mov ebx, dword [edx*4 + 0x430a80]
xor ebx, dword [eax*4 + 0x430e80]
mov eax, dword [ebp + 8]
cdq
idiv edi
xor eax, eax
mov al, byte [esi + edx*4 + 0x45e]
xor ebx, dword [eax*4 + 0x430680]
xor eax, eax
mov al, byte [ecx + 0x23]
xor ebx, dword [eax*4 + 0x430280]
mov eax, dword [ebp - 0x10]
add dword [ebp - 0x10], 4
xor ebx, dword [eax]
mov dword [ecx], ebx
add ecx, 4
inc dword [ebp + 8]
dec dword [ebp - 0x1c]
jne 0x4030e4
mov eax, edi
shl eax, 2
push eax
lea eax, [esi + 0x43c]
push eax
lea eax, [esi + 0x45c]
push eax
call sub.MSVCRT.dll_memcpy
add dword [ebp - 0x14], 0x20
add esp, 0xc
inc dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
cmp eax, dword [esi + 0x3d8]
jl 0x4030b7
and dword [ebp - 0x10], 0
test edi, edi
jle 0x403258
mov ecx, dword [ebp + 0xc]
mov ebx, dword [ebp - 0x20]
lea eax, [esi + 0x45c]
mov dword [ebp + 0xc], eax
mov eax, dword [ebp - 0x24]
sub eax, ebx
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x28]
sub eax, ebx
mov dword [ebp - 0x30], eax
mov eax, dword [esi + 0x3d8]
mov edx, dword [ebp - 0x10]
lea eax, [edx + eax*8]
mov edx, dword [ebp + 0xc]
add dword [ebp + 0xc], 4
mov eax, dword [esi + eax*4 + 0x1f8]
mov dword [ebp + 8], eax
xor eax, eax
mov al, byte [edx + 3]
mov edx, dword [ebp + 8]
sar edx, 0x18
mov al, byte [eax + 0x42f180]
xor al, dl
mov byte [ecx], al
mov eax, dword [ebp - 0x34]
add eax, ebx
inc ecx
cdq
idiv edi
xor eax, eax
mov al, byte [esi + edx*4 + 0x45e]
mov edx, dword [ebp + 8]
sar edx, 0x10
mov al, byte [eax + 0x42f180]
xor al, dl
mov byte [ecx], al
mov eax, ebx
cdq
idiv edi
xor eax, eax
inc ecx
mov al, byte [esi + edx*4 + 0x45d]
mov edx, dword [ebp + 8]
sar edx, 8
mov al, byte [eax + 0x42f180]
xor al, dl
mov byte [ecx], al
mov eax, dword [ebp - 0x30]
add eax, ebx
inc ecx
cdq
idiv edi
mov eax, dword [esi + edx*4 + 0x45c]
and eax, 0xff
mov al, byte [eax + 0x42f180]
xor al, byte [ebp + 8]
mov byte [ecx], al
inc ecx
inc dword [ebp - 0x10]
inc ebx
cmp dword [ebp - 0x10], edi
jl 0x4031b7
mov ecx, dword [ebp - 0xc]
pop edi
pop esi
pop ebx
mov dword fs:[0], ecx
leave
ret 8