Function at 0x47b1cb
Capabilities:
Encrypt data using aes

Disassembly:
pop dword [esp + 7]
lea esp, [esp + 4]
lea esp, [esp + 1]
lea esp, [esp + 0x14]
push ebx
push ebp
push esi
push word [esp + 2]
lea esp, [esp + 3]
push sp
push dword [esp + 3]
pop dword [esp]
lea esp, [esp + 2]
mov word [esp], sp
jmp 0x47b14a
pushal
lea ebp, [ebp - 0xa7]
mov cl, al
popal
push esi
lea esp, [esp + 1]
pushal
mov word [esp + 0xb], si
pop dword [esp + 0x18]
pop word [esp + 0x10]
jmp 0x47b0b2
lea esp, [esp + 8]
lea esp, [esp + 4]
jmp 0x47b0ee
lea esp, [esp + 3]
push esi
push edi
movzx edx, byte [eax]
shl edx, 8
movzx esi, byte [eax + 1]
xor edx, esi
movzx esi, byte [eax + 2]
shl edx, 8
pushfd
push dword [esp + 3]
lea esp, [esp + 1]
mov dword [esp], ecx
push ecx
push word [esp]
pop word [esp + 5]
mov word [esp + 1], di
lea esp, [esp + 3]
lea esp, [esp + 8]
push di
pushfd
add esp, 5
lea esp, [esp + 1]
xor edx, esi
push bx
push word [esp + 1]
mov byte [esp + 1], dh
mov word [esp], si
pushal
lea esp, [esp + 0x24]
movzx esi, byte [eax + 3]
shl edx, 8
xor edx, esi
movzx esi, byte [eax + 5]
mov dword [ecx], edx
movzx edx, byte [eax + 4]
shl edx, 8
jmp 0x4dd13f
pushal
mov al, 0x4d
xchg ecx, eax
popal
pushfd
push bx
push sp
mov word [esp + 2], bp
push ebp
pop word [esp + 3]
push word [esp + 4]
mov word [esp + 2], bx
push cx
lea esp, [esp + 1]
pop word [esp + 2]
lea esp, [esp + 3]
jmp 0x47b11b
movzx esi, byte [eax + 9]
mov dword [ecx + 4], edx
movzx edx, byte [eax + 8]
shl edx, 8
xor edx, esi
movzx esi, byte [eax + 0xa]
shl edx, 8
pushfd
xor edx, esi
push edx
push sp
mov dword [esp], esi
jmp 0x4dd202
xor edx, esi
movzx esi, byte [eax + 6]
pushfd
mov byte [esp + 2], cl
mov dword [esp], ebp
push eax
mov dword [esp + 1], esi
push word [esp + 5]
pop dword [esp]
mov dword [esp], ebp
lea esp, [esp + 2]
shl edx, 8
pushfd
mov dword [esp], ecx
mov dword [esp], esp
mov byte [esp], cl
push word [esp + 3]
mov byte [esp + 4], ah
pushal
lea esp, [esp + 2]
lea esp, [esp + 0x28]
pushfd
xor edx, esi
pushal
push dx
push di
mov byte [esp + 0xc], dl
pushal
mov byte [esp + 0x3b], ah
pop dword [esp + 0x35]
mov dword [esp + 0x10], eax
lea esp, [esp + 0x44]
movzx esi, byte [eax + 7]
shl edx, 8
xor edx, esi
push ecx
pushfd
push dword [esp + 7]
mov byte [esp + 3], dh
pop dword [esp + 2]
mov word [esp + 3], cx
push word [esp + 5]
lea esp, [esp + 2]
lea esp, [esp + 8]
jmp 0x4dd10f
push word [esp]
pop word [esp]
lea esp, [esp + 2]
jmp 0x4dd2ba
mov word [esp], bp
push word [esp + 2]
lea esp, [esp + 0xc]
movzx esi, byte [eax + 0xb]
shl edx, 8
xor edx, esi
movzx esi, byte [eax + 0xd]
mov dword [ecx + 8], edx
movzx edx, byte [eax + 0xc]
shl edx, 8
xor edx, esi
movzx esi, byte [eax + 0xe]
movzx eax, byte [eax + 0xf]
pushfd
push word [esp + 1]
push dword [esp + 5]
lea esp, [esp + 2]
shl edx, 8
push dx
mov word [esp], bx
push word [esp]
pop word [esp]
jmp 0x4dd1e5
xor edx, eax
mov dword [ecx + 0xc], edx
mov eax, edx
shr eax, 0x10
mov esi, 0xff
jmp 0x4dd856
xor edx, esi
push sp
pushfd
mov dword [esp], eax
push word [esp + 3]
push word [esp + 3]
lea esp, [esp + 2]
lea esp, [esp + 0x18]
shl edx, 8
jmp 0x4dd26c
lea esp, [esp + 8]
clc
sub esp, 0xb
lea esp, [esp + 0xa]
mov byte [esp], al
sub esp, 0xf
jmp 0x4dd28c
and eax, esi
mov eax, dword [eax*4 + 0x48a840]
xor eax, 0x1000000
pushal
xchg esi, ebx
mov di, word [esp]
xchg ch, al
xchg bp, cx
mov ah, bh
lea edi, [ecx + ebp]
mov si, dx
mov dword [esp], edx
pushfd
lea esp, [esp + 1]
mov byte [esp + 1], cl
mov word [esp], dx
push word [esp + 2]
mov dword [esp], ecx
push word [esp]
push dword [esp + 5]
pop dword [esp]
lea esp, [esp + 3]
lea esp, [esp + 4]
popal
shr edi, 8
clc
sub esp, 1
pushfd
mov dword [esp], ebx
mov byte [esp], bh
mov dword [esp], esp
lea esp, [esp + 1]
and edi, esi
push edx
mov dword [esp], ecx
pop word [esp]
push si
pop word [esp]
mov byte [esp], ah
mov byte [esp], bl
push word [esp]
push dword [esp + 1]
lea esp, [esp + 0xc]
mov edi, dword [edi*4 + 0x48a840]
and edi, 0xff0000
mov ebx, dword [ecx + 4]
and eax, 0xff000000
xor eax, edi
mov edi, edx
shr edi, 0x18
movzx edi, byte [edi*4 + 0x48a840]
clc
xor eax, edi
pushal
push edx
lea esp, [esp + 0x24]
mov edi, edx
and edi, esi
push eax
mov eax, edi
lea eax, [eax*4]
lea eax, [eax + 0x48a840]
mov edi, dword [eax]
pop eax
mov ebp, 0xff00
and edi, ebp
xor eax, edi
xor eax, dword [ecx]
lea edi, [ecx + 0x10]
xor ebx, eax
push edx
pushal
bswap cx
mov eax, 0x7391720a
mov ebp, dword [esp]
mov ch, 0x5d
mov bl, byte [esp]
lea ebp, [eax + ecx]
mov bl, 0xef
mov cx, 0x575b
xchg dh, al
mov dword [esp + 0x14], edi
push si
lea esp, [esp + 2]
popal
mov dword [edx], eax
pop edx
push ebp
mov ebp, ecx
lea ebp, [ebp + 8]
mov eax, dword [ebp]
pop ebp
stc
sub esp, 0x18
sub esp, 0x10
lea esp, [esp + 2]
mov dword [esp + 5], eax
pop word [esp + 3]
mov byte [esp + 1], ch
lea esp, [esp + 2]
lea esp, [esp + 2]
xor eax, ebx
push bx
lea esp, [esp]
push di
mov byte [esp + 1], al
push word [esp + 2]
push bx
pop word [esp + 1]
lea esp, [esp + 2]
lea esp, [esp + 0x24]
push ebp
mov ebp, ecx
lea ebp, [ebp + 0x14]
mov dword [ebp], ebx
pop ebp
mov dword [ecx + 0x18], eax
xor edx, eax
push ebp
mov ebp, ecx
lea ebp, [ebp + 0x1c]
mov dword [ebp], edx
pop ebp
call fcn.0049d83a
pushal
mov ebx, dword [esp]
mov cl, byte [esp]
mov ebp, 0x6cc77597
mov dword [esp + 0x1c], edi
push di
mov byte [esp], bl
lea esp, [esp + 1]
mov byte [esp], cl
push eax
lea esp, [esp + 1]
lea esp, [esp + 4]
popal
mov edx, dword [eax + 0xc]
pushal
mov esi, 0x3105752a
setns cl
lea esi, [esp + ebp]
mov dword [esp + 0x18], edx
pushal
pop word [esp + 0x1a]
lea esp, [esp + 0x14]
lea esp, [esp + 2]
lea esp, [esp + 8]
popal
shr ecx, 8
mov edi, edx
and ecx, esi
mov ecx, dword [ecx*4 + 0x48a840]
shr edi, 0x10
and edi, esi
push edx
mov edx, edi
lea edx, [edx*4]
lea edx, [edx + 0x48a840]
mov edi, dword [edx]
pop edx
and ecx, 0xff0000
and edi, 0xff000000
xor ecx, edi
mov edi, edx
and edx, esi
push edi
mov edi, edx
lea edi, [edi*4]
lea edi, [edi + 0x48a840]
mov edx, dword [edi]
pop edi
shr edi, 0x18
push cx
mov byte [esp], al
mov word [esp], di
mov word [esp], bx
lea esp, [esp]
push word [esp + 1]
push word [esp]
pop word [esp]
lea esp, [esp + 4]
movzx edi, byte [edi*4 + 0x48a840]
xor ecx, edi
and edx, ebp
clc
sub esp, 9
push word [esp + 5]
push dword [esp + 3]
lea esp, [esp + 3]
xor ecx, edx
pushal
lea esp, [esp + 0x2c]
xor ecx, dword [ebx]
lea edi, [eax + 0x10]
xor ecx, dword [eax]
add ebx, 4
mov dword [edi], ecx
mov edx, dword [eax + 4]
xor edx, ecx
mov dword [eax + 0x14], edx
mov ecx, dword [eax + 8]
xor ecx, edx
mov dword [eax + 0x18], ecx
mov edx, dword [eax + 0xc]
xor edx, ecx
mov dword [eax + 0x1c], edx
call fcn.0049d895
and eax, 0xfeef850f
invalid