Function at 0x68855830
Capabilities:
Encrypt data using aes
Reference aes constants

Disassembly:
sub rsp, 0x30
mov qword [rsp + 0x28], rbp
lea rbp, [rsp + 0x28]
mov rcx, qword [rsp + 0x70]
cmp rcx, 0xf
jbe 0x68855c6c
nop
nop
nop
nop
mov rdx, qword [rsp + 0x68]
mov ebx, dword [rdx]
mov esi, dword [rdx + 4]
mov edi, dword [rdx + 8]
mov edx, dword [rdx + 0xc]
mov rcx, qword [rsp + 0x40]
test rcx, rcx
jbe 0x68855c65
bswap ebx
mov r8, qword [rsp + 0x38]
xor ebx, dword [r8]
cmp rcx, 1
jbe 0x68855c5b
bswap esi
xor esi, dword [r8 + 4]
cmp rcx, 2
jbe 0x68855c51
bswap edi
xor edi, dword [r8 + 8]
cmp rcx, 3
jbe 0x68855c47
bswap edx
xor edx, dword [r8 + 0xc]
mov r9, rcx
shr rcx, 2
lea r10, [rcx - 2]
xor eax, eax
xor ecx, ecx
xor r11d, r11d
xor r12d, r12d
xor r13d, r13d
mov r14d, 4
jmp 0x68855936
inc rax
mov r15d, dword [r8 + r14*4 + 0xc]
shr ebx, 0x18
mov r11d, r15d
movzx r15d, bl
mov r15d, dword [r13 + r15*4]
xor r15d, r11d
shr esi, 0x10
mov ebx, r15d
movzx r15d, sil
lea rsi, sym.dpapi.dll_crypto_aes.te1
mov r15d, dword [rsi + r15*4]
xor ebx, r15d
shr edx, 8
movzx r15d, dl
mov edx, dword [r10 + r15*4]
xor edx, ebx
mov r15d, dword [rsp + 0x20]
movzx r15d, r15b
mov r15d, dword [r12 + r15*4]
xor edx, r15d
add r14, 4
mov r15d, dword [rsp + 0x14]
mov ebx, dword [rsp + 0x18]
mov r10, rcx
mov esi, r15d
mov ecx, ebx
mov r11d, esi
mov r12d, edi
mov r13d, edx
cmp rax, r10
jge 0x68855a64
cmp r14, r9
jae 0x68855c3c
mov dword [rsp + 0x1c], ebx
mov r11d, dword [r8 + r14*4]
shr ebx, 0x18
movzx ebx, bl
lea r13, sym.dpapi.dll_crypto_aes.te0
mov ebx, dword [r13 + rbx*4]
xor ebx, r11d
mov r11d, esi
shr esi, 0x10
movzx esi, sil
lea r15, sym.dpapi.dll_crypto_aes.te1
mov esi, dword [r15 + rsi*4]
xor ebx, esi
mov esi, edi
shr edi, 8
movzx edi, dil
mov rcx, r10
lea r10, sym.dpapi.dll_crypto_aes.te2
mov edi, dword [r10 + rdi*4]
xor ebx, edi
movzx edi, dl
lea r12, sym.dpapi.dll_crypto_aes.te3
mov edi, dword [r12 + rdi*4]
xor ebx, edi
lea rdi, [r14 + 1]
cmp rdi, r9
jae 0x68855c31
mov dword [rsp + 0x18], ebx
mov dword [rsp + 0x24], r11d
mov edi, dword [r8 + r14*4 + 4]
shr r11d, 0x18
movzx r11d, r11b
mov r11d, dword [r13 + r11*4]
xor r11d, edi
mov edi, esi
shr esi, 0x10
movzx esi, sil
mov esi, dword [r15 + rsi*4]
xor r11d, esi
mov esi, edx
shr edx, 8
movzx edx, dl
mov edx, dword [r10 + rdx*4]
xor r11d, edx
mov edx, dword [rsp + 0x1c]
movzx ebx, dl
mov ebx, dword [r12 + rbx*4]
xor r11d, ebx
lea rbx, [r14 + 2]
cmp rbx, r9
jae 0x68855c26
mov dword [rsp + 0x14], r11d
mov dword [rsp + 0x20], edi
mov ebx, dword [r8 + r14*4 + 8]
shr edi, 0x18
movzx edi, dil
mov edi, dword [r13 + rdi*4]
xor edi, ebx
mov ebx, esi
shr esi, 0x10
movzx esi, sil
mov esi, dword [r15 + rsi*4]
xor edi, esi
mov esi, edx
shr edx, 8
movzx edx, dl
mov edx, dword [r10 + rdx*4]
xor edi, edx
mov edx, dword [rsp + 0x24]
movzx r11d, dl
mov r11d, dword [r12 + r11*4]
xor edi, r11d
lea r11, [r14 + 3]
cmp r11, r9
jb 0x688558c9
jmp 0x68855c1b
mov edx, ecx
shr ecx, 0x18
lea rbx, sym.dpapi.dll_crypto_aes.sbox0
movzx esi, byte [rbx + rcx]
shl esi, 0x18
mov edi, r11d
shr r11d, 0x10
movzx r10d, r11b
movzx r10d, byte [r10 + rbx]
shl r10d, 0x10
or esi, r10d
mov r10d, r12d
shr r12d, 8
movzx r11d, r12b
movzx r11d, byte [r11 + rbx]
shl r11d, 8
or esi, r11d
movzx r11d, r13b
movzx r11d, byte [r11 + rbx]
or r11d, esi
mov esi, edi
shr edi, 0x18
movzx edi, byte [rbx + rdi]
shl edi, 0x18
mov r12d, r10d
shr r10d, 0x10
movzx r10d, r10b
movzx r10d, byte [r10 + rbx]
shl r10d, 0x10
or edi, r10d
mov r10d, r13d
shr r13d, 8
movzx r13d, r13b
movzx r13d, byte [r13 + rbx]
shl r13d, 8
or edi, r13d
movzx r13d, dl
movzx r13d, byte [r13 + rbx]
or r13d, edi
mov edi, r12d
shr r12d, 0x18
movzx r12d, byte [rbx + r12]
shl r12d, 0x18
mov r15d, r10d
shr r10d, 0x10
movzx r10d, r10b
movzx r10d, byte [r10 + rbx]
shl r10d, 0x10
or r12d, r10d
mov r10d, edx
shr edx, 8
movzx edx, dl
movzx edx, byte [rdx + rbx]
shl edx, 8
or edx, r12d
movzx r12d, sil
movzx r12d, byte [r12 + rbx]
or r12d, edx
shr r15d, 0x18
movzx edx, byte [r15 + rbx]
shl edx, 0x18
shr r10d, 0x10
movzx r10d, r10b
movzx r10d, byte [r10 + rbx]
shl r10d, 0x10
or edx, r10d
shr esi, 8
movzx esi, sil
movzx esi, byte [rsi + rbx]
shl esi, 8
or edx, esi
movzx esi, dil
movzx ebx, byte [rsi + rbx]
or ebx, edx
cmp r14, r9
jae 0x68855c10
mov edx, dword [r8 + r14*4]
xor edx, r11d
lea rax, [r14 + 1]
cmp rax, r9
jae 0x68855c08
mov esi, dword [r8 + r14*4 + 4]
xor esi, r13d
lea rax, [r14 + 2]
cmp rax, r9
jae 0x68855c00
mov edi, dword [r8 + r14*4 + 8]
xor edi, r12d
lea rax, [r14 + 3]
cmp rax, r9
jae 0x68855bf8
mov r8d, dword [r8 + r14*4 + 0xc]
xor r8d, ebx
mov rcx, qword [rsp + 0x58]
cmp rcx, 0xf
jbe 0x68855bee
nop
bswap edx
mov rax, qword [rsp + 0x50]
mov dword [rax], edx
nop
bswap esi
mov dword [rax + 4], esi
nop
bswap edi
mov dword [rax + 8], edi
bswap r8d
mov dword [rax + 0xc], r8d
mov rbp, qword [rsp + 0x28]
add rsp, 0x30
ret
mov eax, 0xf
call sym.dpapi.dll_runtime.panicIndex
mov rcx, r9
call sym.dpapi.dll_runtime.panicIndex
mov rcx, r9
call sym.dpapi.dll_runtime.panicIndex
mov rcx, r9
call sym.dpapi.dll_runtime.panicIndex
mov rax, r14
mov rcx, r9
call sym.dpapi.dll_runtime.panicIndex
mov rax, r11
mov rcx, r9
call sym.dpapi.dll_runtime.panicIndex
mov rax, rbx
mov rcx, r9
call sym.dpapi.dll_runtime.panicIndex
mov rax, rdi
mov rcx, r9
call sym.dpapi.dll_runtime.panicIndex
mov rax, r14
mov rcx, r9
call sym.dpapi.dll_runtime.panicIndex
mov eax, 3
call sym.dpapi.dll_runtime.panicIndex
mov eax, 2
call sym.dpapi.dll_runtime.panicIndex
mov eax, 1
call sym.dpapi.dll_runtime.panicIndex
xor eax, eax
call sym.dpapi.dll_runtime.panicIndex
mov eax, 0xf
call sym.dpapi.dll_runtime.panicIndex
nop
int3