Function at 0x71584c
Capabilities:
Encrypt data using aes
Reference aes constants

Disassembly:
call fcn.00715800
lea esp, [esp + 4]
mov dl, byte [ecx + 2]
stc
jmp 0x715842
call fcn.007156ed
repe cmpsb byte [esi], byte es:[edi]
jmp 0x742a9e
mov dword [esp + 0xb], esi
lea esp, [esp + 2]
jmp 0x714eef
xor edi, dword [ebx*4 + reloc.RASAPI32.dll_RasHangUpA]
movzx ebx, byte [esi + 6]
jmp 0x714aae
mov edi, dword [edi*4 + reloc.RASAPI32.dll_RasHangUpA]
and ebx, ecx
lea esp, [esp + 0x48]
jmp 0x714a32
mov ebx, dword [ebx*4 + reloc.RASAPI32.dll_RasHangUpA]
push esp
and ebx, ecx
call fcn.00714a95
mov edx, dword [edx*4 + reloc.RASAPI32.dll_RasHangUpA]
sub esp, 0x1a
push dword [esp + 0xe]
mov byte [esp + 0x18], bh
lea esp, [esp + 2]
jmp 0x714b95
shr edi, 0x18
mov edi, dword [edi*4 + reloc.RASAPI32.dll_RasHangUpA]
and edi, ecx
jmp 0x714a51
mov dl, dh
mov edx, dword [esi + 8]
call fcn.00714b43
btr edi, esp
jmp 0x714bc3
and edx, ecx
lea esp, [esp + 0x3c]
xor edi, dword [edx*4 + reloc.RASAPI32.dll_RasHangUpA]
neg dx
jmp 0x714b5c
mov edi, edx
clc
clc
call fcn.00714ba7
shr edi, 0x18
mov edi, dword [edi*4 + reloc.RASAPI32.dll_RasHangUpA]
call 0x714bdc
dec edi
mov word [esp], bx
pop word [esp]
jmp 0x714c25
mov ebx, dword [ebx*4 + reloc.RASAPI32.dll_RasHangUpA]
mov di, 0x58a7
pushal
sub esp, 0
mov edi, edx
jmp 0x714b16
and edi, ecx
cmc
clc
mov edi, dword [edi*4 + reloc.RASAPI32.dll_RasHangUpA]
jmp 0x714d23
lea esp, [esp + 2]
jmp 0x714c0a
mov dword [esi], edi
lea edi, [esi + 0x65]
pushal
ror edi, 1
jmp 0x714bf4
and ebx, ecx
sub esp, 8
add esp, 5
lea esp, [esp + 3]
jmp 0x714cc6
mov ebx, dword [ebx*4 + reloc.RASAPI32.dll_RasHangUpA]
sub esp, 0
clc
cmc
push edx
jmp 0x714c48
mov bl, bh
setge bl
lea ebx, [ebx + edi]
movzx ebx, byte [esi + 0xa]
stc
jmp 0x714c5e
push edi
mov edi, edx
jmp 0x714caa
lea esp, [esp + 4]
movzx ebx, byte [esi + 0xd]
and edx, ecx
jmp 0x714c86
lea edi, [edi*4]
lea edi, reloc.RASAPI32.dll_RasHangUpA
mov edx, dword [edi]
pop edi
jmp 0x714cda
lea esp, [esp + 4]
xor edi, dword [ebx*4 + reloc.RASAPI32.dll_RasHangUpA]
neg ebx
push esp
mov bl, byte [esp + 1]
jmp 0x714c9e
and edx, ecx
stc
jmp 0x714d0b
pop dword [esp + 4]
add esp, 9
lea esp, [esp + 3]
lea esp, [esp + 0x14]
xor edi, dword [ebx*4 + reloc.RASAPI32.dll_RasHangUpA]
jmp 0x714c77
xor edi, dword [edx*4 + reloc.RASAPI32.dll_RasHangUpA]
bsf dx, si
jmp 0x714d36
sub esp, 0x12
mov word [esp + 4], di
lea esp, [esp + 2]
and ebx, ecx
sub esp, 0x10
jmp 0x714cf0
mov edx, dword [esi + 0xc]
cmc
call 0x714d40
fld qword [ebx + 0x648d01c4]
and al, 3
jmp 0x714dfa
mov edx, dword [esi + 4]
sub esp, 8
mov word [esp + 4], dx
push word [esp + 7]
lea esp, [esp + 2]
jmp 0x714c3e
pushal
shr edi, 0x18
clc
sub esp, 0x16
call fcn.00714d92
push ecx
mov ecx, ebx
lea ecx, [ecx*4]
jmp 0x714e68
mov dword [esi + 8], edi
mov ebx, dword [ebx*4 + reloc.RASAPI32.dll_RasHangUpA]
mov edi, edx
jmp 0x714dbd
lea ecx, reloc.RASAPI32.dll_RasHangUpA
mov ebx, dword [ecx]
pop ecx
cmc
and edx, ecx
call fcn.00714e51
cmc
lea esp, [esp + 0x40]
xor edi, dword [ebx*4 + reloc.RASAPI32.dll_RasHangUpA]
stc
jmp 0x714ed6
lea esp, [esp + 4]
xor edi, dword [edx*4 + reloc.RASAPI32.dll_RasHangUpA]
call 0x714ebe
das
pop word [esp]
lea esp, [esp + 1]
lea esp, [esp + 1]
jmp 0x7156ad
and edx, ecx
sub esp, 0xa
lea esp, [esp + 3]
lea esp, [esp + 3]
jmp 0x714ead
lea esp, [esp + 0x1c]
xor edi, dword [edx*4 + reloc.RASAPI32.dll_RasHangUpA]
neg edx
mov edx, dword [esp]
bts edx, esp
jmp 0x714d5c
dec dword [ebp - 4]
call fcn.00715006
mov word [esp], bx
lea esp, [esp + 4]
jbe 0x6e739e
ja 0x6e73eb
rol dword [ecx - 0x2f], cl
mov al, 0x43
test byte [eax + 0x24896643], 0x24
mov word [esp], sp
jmp 0x7156b5
cmp dl, 0x41
push edx
call 0x71584c
xor cl, byte [edi + 0x70e82404]
add byte [eax], al
add byte [edi], ah
lodsd eax, dword [esi]
cmp eax, 0x3770b744
mov esi, 0x72c64b2c
add edx, dword [ebx + reloc.RASAPI32.dll_RasHangUpA]
xchg esi, eax
add eax, eax
pop dword [esp]
clc
and edx, ecx
sub esp, 0x12
jmp 0x7149d0
push 0x837f44d
call fcn.006f5a94