Function at 0x4ff2a0
Capabilities:
Encrypt data using aes
Reference aes constants

Disassembly:
push rbp
mov rbp, rsp
sub rsp, 0x40
mov qword [rsp + 0x50], rax
mov qword [rsp + 0x68], rdi
mov qword [rsp + 0x80], r9
nop word [rax + rax]
cmp r10, 0xf
jbe 0x4ff709
nop
nop
nop
nop
test rbx, rbx
jbe 0x4ff6ff
mov edx, dword [r9]
bswap edx
xor edx, dword [rax]
nop
cmp rbx, 1
jbe 0x4ff6f2
mov r8d, dword [r9 + 4]
bswap r8d
xor r8d, dword [rax + 4]
cmp rbx, 2
jbe 0x4ff6e5
mov r10d, dword [r9 + 8]
bswap r10d
xor r10d, dword [rax + 8]
cmp rbx, 3
jbe 0x4ff6d5
mov qword [rsp + 0x70], rsi
mov qword [rsp + 0x68], rdi
mov rcx, rbx
shr rbx, 2
mov r9d, dword [r9 + 0xc]
bswap r9d
xor r9d, dword [rax + 0xc]
add rbx, 0xfffffffffffffffe
xor r11d, r11d
xor r12d, r12d
xor r13d, r13d
xor r15d, r15d
mov r11d, 4
mov qword [rsp + 0x38], r11
xor r11d, r11d
jmp 0x4ff3c0
shr r10d, 0x18
movzx ebx, r10b
mov ebx, dword [r13 + rbx*4]
xor ebx, dword [rax + r11*4 + 0xc]
shr edx, 0x10
movzx edx, dl
xor ebx, dword [rdi + rdx*4]
shr r15d, 8
movzx edx, r15b
xor ebx, dword [rsi + rdx*4]
mov edx, dword [rsp + 0x28]
movzx edx, dl
mov r8, qword [rsp + 0x30]
dec r8
xor ebx, dword [r9 + rdx*4]
lea rdx, [r11 + 4]
mov r15d, dword [rsp + 0x20]
mov r11d, dword [rsp + 0x24]
mov rsi, qword [rsp + 0x70]
mov rdi, qword [rsp + 0x68]
mov r9d, ebx
mov r10d, r12d
mov r12d, r9d
mov r13d, r10d
mov qword [rsp + 0x38], rdx
mov rbx, r8
mov edx, r11d
mov r8d, r15d
nop dword [rax + rax]
test rbx, rbx
jle 0x4ff4ee
mov r11, qword [rsp + 0x38]
cmp rcx, r11
jbe 0x4ff6cd
mov qword [rsp + 0x30], rbx
mov dword [rsp + 0x1c], r10d
mov r12d, edx
shr edx, 0x18
movzx edx, dl
lea r13, [0x00901ce0]
mov edx, dword [r13 + rdx*4]
xor edx, dword [rax + r11*4]
mov r15d, r9d
shr r9d, 0x10
movzx r9d, r9b
lea rdi, [0x009020e0]
xor edx, dword [rdi + r9*4]
shr r10d, 8
movzx r10d, r10b
lea rsi, [0x009024e0]
xor edx, dword [rsi + r10*4]
movzx r10d, r8b
lea rbx, [r11 + 1]
lea r9, [0x009028e0]
xor edx, dword [r9 + r10*4]
cmp rcx, rbx
jbe 0x4ff6c5
mov dword [rsp + 0x24], edx
mov dword [rsp + 0x2c], r15d
mov ebx, r8d
shr r8d, 0x18
movzx r8d, r8b
mov r8d, dword [r13 + r8*4]
xor r8d, dword [rax + r11*4 + 4]
mov r10d, r12d
shr r12d, 0x10
movzx r12d, r12b
xor r8d, dword [rdi + r12*4]
shr r15d, 8
movzx r15d, r15b
xor r8d, dword [rsi + r15*4]
mov r15d, dword [rsp + 0x1c]
movzx edx, r15b
lea r12, [r11 + 2]
xor r8d, dword [r9 + rdx*4]
cmp rcx, r12
jbe 0x4ff6bd
mov dword [rsp + 0x20], r8d
mov dword [rsp + 0x28], r10d
mov edx, r15d
shr r15d, 0x18
movzx r12d, r15b
mov r12d, dword [r13 + r12*4]
xor r12d, dword [rax + r11*4 + 8]
mov r15d, ebx
shr ebx, 0x10
movzx ebx, bl
xor r12d, dword [rdi + rbx*4]
shr r10d, 8
movzx r10d, r10b
xor r12d, dword [rsi + r10*4]
mov r10d, dword [rsp + 0x2c]
movzx r8d, r10b
lea rbx, [r11 + 3]
xor r12d, dword [r9 + r8*4]
nop dword [rax + rax]
cmp rcx, rbx
ja 0x4ff350
jmp 0x4ff6b5
mov dword [rsp + 0x18], r15d
mov dword [rsp + 0x14], r13d
mov edx, r11d
shr r11d, 0x18
lea rbx, [0x008fe0a0]
movzx r8d, byte [rbx + r11]
shl r8d, 0x18
mov r9d, r12d
shr r12d, 0x10
movzx r10d, r12b
movzx r10d, byte [r10 + rbx]
shl r10d, 0x10
or r10d, r8d
mov r8d, r13d
shr r13d, 8
movzx r11d, r13b
movzx r11d, byte [r11 + rbx]
shl r11d, 8
or r10d, r11d
movzx r11d, r15b
movzx r11d, byte [r11 + rbx]
mov r12d, r15d
shr r15d, 0x18
movzx r13d, byte [rbx + r15]
shl r13d, 0x18
mov r15d, edx
shr edx, 0x10
movzx edx, dl
movzx edx, byte [rdx + rbx]
shl edx, 0x10
or edx, r13d
mov r13d, r9d
shr r9d, 8
movzx r9d, r9b
movzx r9d, byte [r9 + rbx]
shl r9d, 8
or edx, r9d
movzx r9d, r8b
movzx r9d, byte [r9 + rbx]
shr r8d, 0x18
movzx r8d, byte [r8 + rbx]
shl r8d, 0x18
shr r12d, 0x10
movzx r12d, r12b
movzx r12d, byte [r12 + rbx]
shl r12d, 0x10
or r12d, r8d
mov r8d, r15d
shr r15d, 8
movzx r15d, r15b
movzx r15d, byte [r15 + rbx]
shl r15d, 8
or r12d, r15d
movzx r15d, r13b
movzx r15d, byte [r15 + rbx]
shr r13d, 0x18
movzx r13d, byte [rbx + r13]
shl r13d, 0x18
mov edi, dword [rsp + 0x14]
shr edi, 0x10
movzx edi, dil
movzx edi, byte [rdi + rbx]
shl edi, 0x10
or edi, r13d
mov r13d, dword [rsp + 0x18]
shr r13d, 8
movzx r13d, r13b
movzx r13d, byte [r13 + rbx]
shl r13d, 8
or edi, r13d
movzx r8d, r8b
movzx ebx, byte [r8 + rbx]
or r11d, r10d
or r9d, edx
or r15d, r12d
or ebx, edi
mov rdx, qword [rsp + 0x38]
nop
cmp rcx, rdx
jbe 0x4ff6ad
lea rdi, [rdx + 1]
xor r11d, dword [rax + rdx*4]
cmp rcx, rdi
jbe 0x4ff6a5
lea rdi, [rdx + 2]
xor r9d, dword [rax + rdx*4 + 4]
nop
cmp rcx, rdi
jbe 0x4ff69a
lea rdi, [rdx + 3]
xor r15d, dword [rax + rdx*4 + 8]
cmp rcx, rdi
jbe 0x4ff692
xor ebx, dword [rax + rdx*4 + 0xc]
cmp rsi, 0xf
jbe 0x4ff685
bswap r11d
bswap r9d
bswap r15d
bswap ebx
nop
mov rax, qword [rsp + 0x68]
mov dword [rax], r11d
nop
mov dword [rax + 4], r9d
nop
mov dword [rax + 8], r15d
nop
mov dword [rax + 0xc], ebx
add rsp, 0x40
pop rbp
ret
mov eax, 0xf
mov rcx, rsi
call fcn.00472ea0
mov rax, rdi
call fcn.00472ea0
mov rax, rdi
nop dword [rax]
call fcn.00472ea0
mov rax, rdi
call fcn.00472ea0
mov rax, rdx
call fcn.00472ea0
mov rax, rbx
call fcn.00472ea0
mov rax, r12
call fcn.00472ea0
mov rax, rbx
call fcn.00472ea0
mov rax, r11
call fcn.00472ea0
mov eax, 3
mov rcx, rax
nop dword [rax]
call fcn.00472ea0
mov eax, 2
mov rcx, rax
call fcn.00472ea0
mov eax, 1
mov rcx, rax
call fcn.00472ea0
xor eax, eax
mov rcx, rax
call fcn.00472ea0
mov eax, 0xf
mov rcx, r10
call fcn.00472ea0
nop
int3