Function at 0x4935c0
Capabilities:
Encrypt data using aes
Reference aes constants
Resolve function by parsing pe exports

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x493fea
add rsp, 0xffffffffffffff80
mov qword [rsp + 0x78], rbp
lea rbp, [rsp + 0x78]
mov qword [rsp + 0x88], rax
mov qword [rsp + 0x90], rbx
mov qword [rsp + 0x98], rcx
mov qword [rsp + 0xa0], rdi
mov qword [rsp + 0xa8], rsi
mov qword [rsp + 0xb0], r8
mov qword [rsp + 0xb8], r9
mov qword [rsp + 0xc0], r10
mov qword [rsp + 0xc8], r11
cmp r10, 0xf
ja 0x49362b
jmp 0x493fdc
cmp r11, 4
jae 0x493636
jmp 0x493fcf
jmp 0x493638
mov qword [rsp + 0x60], r9
mov qword [rsp + 0x68], 4
mov qword [rsp + 0x70], r11
mov rax, r9
mov ebx, 4
mov rcx, r11
call fcn.0048f840
mov dword [rsp + 0x3c], eax
mov rdx, qword [rsp + 0xc8]
mov rsi, qword [rsp + 0xb8]
cmp rdx, 8
jae 0x49367a
jmp 0x493fc5
jmp 0x49367c
lea rcx, [rdx - 4]
mov rdx, rcx
neg rcx
sar rcx, 0x3f
and ecx, 4
lea rax, [rsi + rcx]
mov qword [rsp + 0x60], rax
mov qword [rsp + 0x68], 4
mov qword [rsp + 0x70], rdx
mov ebx, 4
mov rcx, rdx
call fcn.0048f840
mov dword [rsp + 0x38], eax
mov rdx, qword [rsp + 0xc8]
mov rsi, qword [rsp + 0xb8]
cmp rdx, 0xc
jae 0x4936d0
jmp 0x493fb6
jmp 0x4936d2
lea rcx, [rdx - 8]
mov rdx, rcx
neg rcx
sar rcx, 0x3f
and ecx, 8
lea rax, [rsi + rcx]
mov qword [rsp + 0x60], rax
mov qword [rsp + 0x68], 4
mov qword [rsp + 0x70], rdx
mov ebx, 4
mov rcx, rdx
call fcn.0048f840
mov dword [rsp + 0x34], eax
mov rdx, qword [rsp + 0xc8]
mov rsi, qword [rsp + 0xb8]
nop dword [rax + rax]
cmp rdx, 0x10
jae 0x49372b
jmp 0x493fac
jmp 0x49372d
lea rcx, [rdx - 0xc]
mov rdx, rcx
neg rcx
sar rcx, 0x3f
and ecx, 0xc
lea rax, [rsi + rcx]
mov qword [rsp + 0x60], rax
mov qword [rsp + 0x68], 4
mov qword [rsp + 0x70], rdx
mov ebx, 4
mov rcx, rdx
nop dword [rax]
call fcn.0048f840
mov dword [rsp + 0x30], eax
mov edx, dword [rsp + 0x3c]
mov rcx, qword [rsp + 0x90]
mov rsi, qword [rsp + 0x88]
nop dword [rax]
test rcx, rcx
ja 0x49378a
jmp 0x493fa5
xor edx, dword [rsi]
mov dword [rsp + 0x3c], edx
mov esi, dword [rsp + 0x38]
mov rcx, qword [rsp + 0x90]
mov r8, qword [rsp + 0x88]
cmp rcx, 1
ja 0x4937af
jmp 0x493f99
xor esi, dword [r8 + 4]
mov dword [rsp + 0x38], esi
mov esi, dword [rsp + 0x34]
mov rcx, qword [rsp + 0x90]
mov r8, qword [rsp + 0x88]
cmp rcx, 2
ja 0x4937d6
jmp 0x493f8f
xor esi, dword [r8 + 8]
mov dword [rsp + 0x34], esi
mov esi, dword [rsp + 0x30]
mov rcx, qword [rsp + 0x90]
mov r8, qword [rsp + 0x88]
cmp rcx, 3
ja 0x4937fd
jmp 0x493f85
xor esi, dword [r8 + 0xc]
mov dword [rsp + 0x30], esi
mov rsi, qword [rsp + 0x90]
mov qword [rsp + 0x58], rsi
shr rsi, 2
add rsi, 0xfffffffffffffffe
mov qword [rsp + 0x48], rsi
mov qword [rsp + 0x50], 4
mov dword [rsp + 0x2c], 0
mov dword [rsp + 0x28], 0
mov dword [rsp + 0x24], 0
mov dword [rsp + 0x20], 0
mov qword [rsp + 0x40], 0
jmp 0x493853
mov rsi, qword [rsp + 0x40]
cmp qword [rsp + 0x48], rsi
jg 0x493865
nop
jmp 0x493afa
mov rcx, qword [rsp + 0x90]
mov rsi, qword [rsp + 0x88]
mov rax, qword [rsp + 0x50]
cmp rcx, rax
ja 0x493885
nop
jmp 0x493f80
lea rsi, [rsi + rax*4]
mov esi, dword [rsi]
mov r8d, dword [rsp + 0x3c]
shr r8d, 0x18
movzx r8d, r8b
lea r9, [0x00649bc0]
lea r8, [r9 + r8*4]
xor esi, dword [r8]
mov r8d, dword [rsp + 0x30]
shr r8d, 0x10
movzx r8d, r8b
lea r9, [0x00649fc0]
lea r8, [r9 + r8*4]
xor esi, dword [r8]
mov r8d, dword [rsp + 0x34]
shr r8d, 8
movzx r8d, r8b
lea r9, [0x0064a3c0]
lea r8, [r9 + r8*4]
xor esi, dword [r8]
movzx r8d, byte [rsp + 0x38]
lea r9, [0x0064a7c0]
lea r8, [r9 + r8*4]
xor esi, dword [r8]
mov dword [rsp + 0x2c], esi
mov rcx, qword [rsp + 0x90]
mov rsi, qword [rsp + 0x88]
mov rax, qword [rsp + 0x50]
lea r8, [rax + 1]
cmp rcx, r8
ja 0x493917
jmp 0x493f75
lea rsi, [rsi + rax*4]
lea rsi, [rsi + 4]
mov esi, dword [rsi]
mov r8d, dword [rsp + 0x38]
shr r8d, 0x18
movzx r8d, r8b
lea r9, [0x00649bc0]
lea r8, [r9 + r8*4]
xor esi, dword [r8]
mov r8d, dword [rsp + 0x3c]
shr r8d, 0x10
movzx r8d, r8b
lea r9, [0x00649fc0]
lea r8, [r9 + r8*4]
xor esi, dword [r8]
mov r8d, dword [rsp + 0x30]
shr r8d, 8
movzx r8d, r8b
lea r9, [0x0064a3c0]
lea r8, [r9 + r8*4]
xor esi, dword [r8]
movzx r8d, byte [rsp + 0x34]
lea r9, [0x0064a7c0]
lea r8, [r9 + r8*4]
xor esi, dword [r8]
mov dword [rsp + 0x28], esi
mov rcx, qword [rsp + 0x90]
mov rsi, qword [rsp + 0x88]
mov rax, qword [rsp + 0x50]
lea r8, [rax + 2]
cmp rcx, r8
ja 0x4939ad
jmp 0x493f6d
lea rsi, [rsi + rax*4]
lea rsi, [rsi + 8]
mov esi, dword [rsi]
mov r8d, dword [rsp + 0x34]
shr r8d, 0x18
movzx r8d, r8b
lea r9, [0x00649bc0]
lea r8, [r9 + r8*4]
xor esi, dword [r8]
mov r8d, dword [rsp + 0x38]
shr r8d, 0x10
movzx r8d, r8b
lea r9, [0x00649fc0]
lea r8, [r9 + r8*4]
xor esi, dword [r8]
mov r8d, dword [rsp + 0x3c]
shr r8d, 8
movzx r8d, r8b
lea r9, [0x0064a3c0]
lea r8, [r9 + r8*4]
xor esi, dword [r8]
movzx r8d, byte [rsp + 0x30]
lea r9, [0x0064a7c0]
lea r8, [r9 + r8*4]
xor esi, dword [r8]
mov dword [rsp + 0x24], esi
mov rcx, qword [rsp + 0x90]
mov rsi, qword [rsp + 0x88]
mov rax, qword [rsp + 0x50]
lea r8, [rax + 3]
cmp rcx, r8
ja 0x493a45
nop
jmp 0x493f65
lea rsi, [rsi + rax*4]
lea rsi, [rsi + 0xc]
mov esi, dword [rsi]
mov r8d, dword [rsp + 0x30]
shr r8d, 0x18
movzx r8d, r8b
lea r9, [0x00649bc0]
lea r8, [r9 + r8*4]
xor esi, dword [r8]
mov r8d, dword [rsp + 0x34]
shr r8d, 0x10
movzx r8d, r8b
lea r9, [0x00649fc0]
lea r8, [r9 + r8*4]
xor esi, dword [r8]
mov r8d, dword [rsp + 0x38]
shr r8d, 8
movzx r8d, r8b
lea r9, [0x0064a3c0]
lea r8, [r9 + r8*4]
xor esi, dword [r8]
movzx r8d, byte [rsp + 0x3c]
lea r9, [0x0064a7c0]
lea r8, [r9 + r8*4]
xor esi, dword [r8]
mov dword [rsp + 0x20], esi
mov rsi, qword [rsp + 0x50]
add rsi, 4
mov qword [rsp + 0x50], rsi
mov esi, dword [rsp + 0x2c]
mov dword [rsp + 0x3c], esi
mov esi, dword [rsp + 0x28]
mov dword [rsp + 0x38], esi
mov esi, dword [rsp + 0x24]
mov dword [rsp + 0x34], esi
mov esi, dword [rsp + 0x20]
mov dword [rsp + 0x30], esi
jmp 0x493ae8
mov rsi, qword [rsp + 0x40]
inc rsi
mov qword [rsp + 0x40], rsi
jmp 0x493853
mov esi, dword [rsp + 0x2c]
shr esi, 0x18
lea r8, [0x00643d40]
add rsi, r8
movzx esi, byte [rsi]
mov r8d, dword [rsp + 0x20]
shr r8d, 0x10
movzx r8d, r8b
lea r9, [0x00643d40]
add r8, r9
movzx r8d, byte [r8]
mov r9d, dword [rsp + 0x24]
shr r9d, 8
movzx r9d, r9b
lea r10, [0x00643d40]
add r9, r10
movzx r9d, byte [r9]
movzx r10d, byte [rsp + 0x28]
lea r11, [0x00643d40]
add r10, r11
movzx r10d, byte [r10]
shl esi, 0x18
shl r8d, 0x10
or esi, r8d
shl r9d, 8
or esi, r9d
or esi, r10d
mov dword [rsp + 0x3c], esi
mov esi, dword [rsp + 0x28]
shr esi, 0x18
lea r8, [0x00643d40]
add rsi, r8
movzx esi, byte [rsi]
mov r8d, dword [rsp + 0x2c]
shr r8d, 0x10
movzx r8d, r8b
lea r9, [0x00643d40]
add r8, r9
movzx r8d, byte [r8]
mov r9d, dword [rsp + 0x20]
shr r9d, 8
movzx r9d, r9b
lea r10, [0x00643d40]
add r9, r10
movzx r9d, byte [r9]
movzx r10d, byte [rsp + 0x24]
lea r11, [0x00643d40]
add r10, r11
movzx r10d, byte [r10]
shl esi, 0x18
shl r8d, 0x10
or esi, r8d
shl r9d, 8
or esi, r9d
or esi, r10d
mov dword [rsp + 0x38], esi
mov esi, dword [rsp + 0x24]
shr esi, 0x18
lea r8, [0x00643d40]
add rsi, r8
movzx esi, byte [rsi]
mov r8d, dword [rsp + 0x28]
shr r8d, 0x10
movzx r8d, r8b
lea r9, [0x00643d40]
add r8, r9
movzx r8d, byte [r8]
mov r9d, dword [rsp + 0x2c]
shr r9d, 8
movzx r9d, r9b
lea r10, [0x00643d40]
add r9, r10
movzx r9d, byte [r9]
movzx r10d, byte [rsp + 0x20]
lea r11, [0x00643d40]
add r10, r11
movzx r10d, byte [r10]
shl esi, 0x18
shl r8d, 0x10
or esi, r8d
shl r9d, 8
or esi, r9d
or esi, r10d
mov dword [rsp + 0x34], esi
mov esi, dword [rsp + 0x20]
shr esi, 0x18
lea r8, [0x00643d40]
add rsi, r8
movzx esi, byte [rsi]
mov r8d, dword [rsp + 0x24]
shr r8d, 0x10
movzx r8d, r8b
lea r9, [0x00643d40]
add r8, r9
movzx r8d, byte [r8]
mov r9d, dword [rsp + 0x28]
shr r9d, 8
movzx r9d, r9b
lea r10, [0x00643d40]
add r9, r10
movzx r9d, byte [r9]
movzx r10d, byte [rsp + 0x2c]
lea r11, [0x00643d40]
add r10, r11
movzx r10d, byte [r10]
shl esi, 0x18
shl r8d, 0x10
or esi, r8d
shl r9d, 8
or esi, r9d
or esi, r10d
mov dword [rsp + 0x30], esi
mov esi, dword [rsp + 0x3c]
mov rcx, qword [rsp + 0x90]
mov r8, qword [rsp + 0x88]
mov rax, qword [rsp + 0x50]
cmp rcx, rax
ja 0x493cf5
jmp 0x493f60
lea r8, [r8 + rax*4]
xor esi, dword [r8]
mov dword [rsp + 0x3c], esi
mov esi, dword [rsp + 0x38]
mov rcx, qword [rsp + 0x90]
mov r8, qword [rsp + 0x88]
mov rax, qword [rsp + 0x50]
lea r9, [rax + 1]
nop dword [rax]
cmp rcx, r9
ja 0x493d2a
jmp 0x493f55
lea r8, [r8 + rax*4]
lea r8, [r8 + 4]
xor esi, dword [r8]
mov dword [rsp + 0x38], esi
mov esi, dword [rsp + 0x34]
mov rcx, qword [rsp + 0x90]
mov r8, qword [rsp + 0x88]
mov rax, qword [rsp + 0x50]
lea r9, [rax + 2]
cmp rcx, r9
ja 0x493d65
nop dword [rax + rax]
jmp 0x493f4d
lea r8, [r8 + rax*4]
lea r8, [r8 + 8]
xor esi, dword [r8]
mov dword [rsp + 0x34], esi
mov esi, dword [rsp + 0x30]
mov rcx, qword [rsp + 0x90]
mov r8, qword [rsp + 0x88]
mov rax, qword [rsp + 0x50]
lea r9, [rax + 3]
cmp rcx, r9
ja 0x493d9b
jmp 0x493f45
lea r8, [r8 + rax*4]
lea r8, [r8 + 0xc]
xor esi, dword [r8]
mov dword [rsp + 0x30], esi
mov rcx, qword [rsp + 0xa8]
cmp rcx, 0xf
ja 0x493dbd
jmp 0x493f39
mov rdx, qword [rsp + 0xb0]
mov rax, qword [rsp + 0xa0]
cmp rdx, 4
jae 0x493dd8
jmp 0x493f2f
jmp 0x493dda
mov qword [rsp + 0x60], rax
mov qword [rsp + 0x68], 4
mov qword [rsp + 0x70], rdx
mov edi, dword [rsp + 0x3c]
mov ebx, 4
mov rcx, rdx
call fcn.0048f920
mov rdx, qword [rsp + 0xb0]
mov rsi, qword [rsp + 0xa0]
cmp rdx, 8
jae 0x493e19
jmp 0x493f25
jmp 0x493e1b
lea rcx, [rdx - 4]
mov rdx, rcx
neg rcx
sar rcx, 0x3f
and ecx, 4
lea rax, [rsi + rcx]
mov qword [rsp + 0x60], rax
mov qword [rsp + 0x68], 4
mov qword [rsp + 0x70], rdx
mov edi, dword [rsp + 0x38]
mov ebx, 4
mov rcx, rdx
call fcn.0048f920
mov rdx, qword [rsp + 0xb0]
mov rsi, qword [rsp + 0xa0]
cmp rdx, 0xc
jae 0x493e6f
jmp 0x493f19
jmp 0x493e71
lea rcx, [rdx - 8]
mov rdx, rcx
neg rcx
sar rcx, 0x3f
and ecx, 8
lea rax, [rsi + rcx]
mov qword [rsp + 0x60], rax
mov qword [rsp + 0x68], 4
mov qword [rsp + 0x70], rdx
mov edi, dword [rsp + 0x34]
mov ebx, 4
mov rcx, rdx
call fcn.0048f920
mov rdx, qword [rsp + 0xb0]
mov rsi, qword [rsp + 0xa0]
nop word [rax + rax]
cmp rdx, 0x10
jae 0x493ec8
jmp 0x493f0f
jmp 0x493eca
lea rcx, [rdx - 0xc]
mov rdx, rcx
neg rcx
sar rcx, 0x3f
and ecx, 0xc
lea rax, [rsi + rcx]
mov qword [rsp + 0x60], rax
mov qword [rsp + 0x68], 4
mov qword [rsp + 0x70], rdx
mov edi, dword [rsp + 0x30]
mov ebx, 4
mov rcx, rdx
nop
call fcn.0048f920
mov rbp, qword [rsp + 0x78]
sub rsp, 0xffffffffffffff80
ret
mov ecx, 0x10
call fcn.004665a0
mov ecx, 0xc
nop
call fcn.004665a0
mov ecx, 8
call fcn.004665a0
mov ecx, 4
call fcn.004665a0
mov eax, 0xf
nop
call fcn.00466520
mov rax, r9
call fcn.00466520
mov rax, r9
call fcn.00466520
mov rax, r9
call fcn.00466520
nop dword [rax]
call fcn.00466520
mov rax, r8
call fcn.00466520
mov rax, r8
call fcn.00466520
mov rax, r8
call fcn.00466520
nop dword [rax]
call fcn.00466520
mov eax, 3
call fcn.00466520
mov eax, 2
call fcn.00466520
mov eax, 1
nop
call fcn.00466520
xor eax, eax
call fcn.00466520
mov ecx, 0x10
call fcn.004665a0
mov ecx, 0xc
nop dword [rax + rax]
call fcn.004665a0
mov ecx, 8
call fcn.004665a0
mov ecx, 4
mov rdx, r11
call fcn.004665a0
mov eax, 0xf
mov rcx, r10
call fcn.00466520
nop
mov qword [rsp + 8], rax
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rcx
mov qword [rsp + 0x20], rdi
mov qword [rsp + 0x28], rsi
mov qword [rsp + 0x30], r8
mov qword [rsp + 0x38], r9
mov qword [rsp + 0x40], r10
mov qword [rsp + 0x48], r11
call fcn.00463e40
mov rax, qword [rsp + 8]
mov rbx, qword [rsp + 0x10]
mov rcx, qword [rsp + 0x18]
mov rdi, qword [rsp + 0x20]
mov rsi, qword [rsp + 0x28]
mov r8, qword [rsp + 0x30]
mov r9, qword [rsp + 0x38]
mov r10, qword [rsp + 0x40]
mov r11, qword [rsp + 0x48]
jmp fcn.004935c0