Function at 0x516722
Capabilities:
Encrypt data using aes
Reference aes constants
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x10
push ebx
push esi
push edi
jmp 0x516736
movzx edx, byte [eax]
movzx esi, byte [eax + 1]
shl edx, 8
xor edx, esi
movzx esi, byte [eax + 2]
shl edx, 8
xor edx, esi
movzx esi, byte [eax + 3]
shl edx, 8
xor edx, esi
xor edx, dword [ecx]
movzx ebx, byte [eax + 4]
mov dword [ebp - 4], edx
movzx edx, byte [eax + 5]
movzx esi, byte [eax + 8]
shl ebx, 8
xor ebx, edx
movzx edx, byte [eax + 6]
movzx edi, byte [eax + 0xd]
shl ebx, 8
xor ebx, edx
movzx edx, byte [eax + 7]
shl ebx, 8
xor ebx, edx
movzx edx, byte [eax + 9]
shl esi, 8
xor esi, edx
movzx edx, byte [eax + 0xa]
shl esi, 8
xor esi, edx
movzx edx, byte [eax + 0xb]
shl esi, 8
xor esi, edx
movzx edx, byte [eax + 0xc]
xor esi, dword [ecx + 8]
shl edx, 8
xor edx, edi
movzx edi, byte [eax + 0xe]
movzx eax, byte [eax + 0xf]
shl edx, 8
xor edx, edi
xor ebx, dword [ecx + 4]
shl edx, 8
xor edx, eax
xor edx, dword [ecx + 0xc]
mov eax, 0xff
mov dword [ebp - 0x10], edx
shr edx, 0x10
and edx, eax
mov edx, dword [edx*4 + 0x520778]
mov edi, esi
shr edi, 8
and edi, eax
xor edx, dword [edi*4 + 0x520b78]
mov edi, dword [ebp - 4]
shr edi, 0x18
xor edx, dword [edi*4 + 0x520378]
mov edi, ebx
and edi, eax
xor edx, dword [edi*4 + 0x520f78]
mov edi, dword [ebp - 4]
xor edx, dword [ecx + 0x10]
shr edi, 0x10
mov dword [ebp - 8], edx
mov edx, dword [ebp - 0x10]
shr edx, 8
and edx, eax
mov edx, dword [edx*4 + 0x520b78]
and edi, eax
xor edx, dword [edi*4 + 0x520778]
mov edi, ebx
shr edi, 0x18
xor edx, dword [edi*4 + 0x520378]
mov dword [ebp - 0xc], esi
and esi, eax
xor edx, dword [esi*4 + 0x520f78]
xor edx, dword [ecx + 0x14]
mov edi, dword [ebp - 4]
shr edi, 8
and edi, eax
mov esi, ebx
shr esi, 0x10
and esi, eax
mov esi, dword [esi*4 + 0x520778]
xor esi, dword [edi*4 + 0x520b78]
mov edi, dword [ebp - 0xc]
shr edi, 0x18
xor esi, dword [edi*4 + 0x520378]
mov edi, dword [ebp - 0x10]
and edi, eax
xor esi, dword [edi*4 + 0x520f78]
mov edi, dword [ebp - 0xc]
shr edi, 0x10
and edi, eax
mov edi, dword [edi*4 + 0x520778]
shr ebx, 8
and ebx, eax
xor edi, dword [ebx*4 + 0x520b78]
mov ebx, dword [ebp - 0x10]
xor esi, dword [ecx + 0x18]
shr ebx, 0x18
xor edi, dword [ebx*4 + 0x520378]
mov ebx, dword [ebp - 4]
and ebx, eax
xor edi, dword [ebx*4 + 0x520f78]
mov ebx, esi
xor edi, dword [ecx + 0x1c]
shr ebx, 8
mov dword [ebp - 0x10], edi
shr edi, 0x10
and edi, eax
mov edi, dword [edi*4 + 0x520778]
and ebx, eax
xor edi, dword [ebx*4 + 0x520b78]
mov ebx, dword [ebp - 8]
shr ebx, 0x18
xor edi, dword [ebx*4 + 0x520378]
mov ebx, edx
and ebx, eax
xor edi, dword [ebx*4 + 0x520f78]
mov ebx, dword [ebp - 8]
xor edi, dword [ecx + 0x20]
shr ebx, 0x10
mov dword [ebp - 4], edi
mov edi, dword [ebp - 0x10]
shr edi, 8
and edi, eax
mov edi, dword [edi*4 + 0x520b78]
and ebx, eax
xor edi, dword [ebx*4 + 0x520778]
mov ebx, edx
shr ebx, 0x18
xor edi, dword [ebx*4 + 0x520378]
mov ebx, esi
and ebx, eax
xor edi, dword [ebx*4 + 0x520f78]
mov ebx, dword [ebp - 8]
xor edi, dword [ecx + 0x24]
shr ebx, 8
mov dword [ebp - 0xc], edi
mov edi, edx
shr edi, 0x10
and edi, eax
mov edi, dword [edi*4 + 0x520778]
and ebx, eax
xor edi, dword [ebx*4 + 0x520b78]
mov ebx, esi
shr ebx, 0x18
xor edi, dword [ebx*4 + 0x520378]
mov ebx, dword [ebp - 0x10]
and ebx, eax
xor edi, dword [ebx*4 + 0x520f78]
shr esi, 0x10
xor edi, dword [ecx + 0x28]
and esi, eax
mov esi, dword [esi*4 + 0x520778]
shr edx, 8
and edx, eax
xor esi, dword [edx*4 + 0x520b78]
mov edx, dword [ebp - 0x10]
shr edx, 0x18
xor esi, dword [edx*4 + 0x520378]
mov edx, dword [ebp - 8]
and edx, eax
xor esi, dword [edx*4 + 0x520f78]
mov ebx, edi
xor esi, dword [ecx + 0x2c]
shr ebx, 8
and ebx, eax
mov edx, esi
shr edx, 0x10
and edx, eax
mov edx, dword [edx*4 + 0x520778]
xor edx, dword [ebx*4 + 0x520b78]
mov ebx, dword [ebp - 4]
shr ebx, 0x18
xor edx, dword [ebx*4 + 0x520378]
mov ebx, dword [ebp - 0xc]
and ebx, eax
xor edx, dword [ebx*4 + 0x520f78]
mov ebx, dword [ebp - 4]
xor edx, dword [ecx + 0x30]
shr ebx, 0x10
mov dword [ebp - 0x10], esi
and ebx, eax
shr esi, 8
and esi, eax
mov dword [ebp - 8], edx
mov edx, dword [esi*4 + 0x520b78]
xor edx, dword [ebx*4 + 0x520778]
mov esi, dword [ebp - 0xc]
mov ebx, dword [ebp - 4]
shr esi, 0x18
xor edx, dword [esi*4 + 0x520378]
mov esi, edi
shr ebx, 8
and esi, eax
xor edx, dword [esi*4 + 0x520f78]
mov esi, dword [ebp - 0xc]
and ebx, eax
shr esi, 0x10
and esi, eax
mov esi, dword [esi*4 + 0x520778]
xor esi, dword [ebx*4 + 0x520b78]
mov ebx, edi
shr ebx, 0x18
xor esi, dword [ebx*4 + 0x520378]
mov ebx, dword [ebp - 0x10]
and ebx, eax
xor esi, dword [ebx*4 + 0x520f78]
mov ebx, dword [ebp - 0xc]
xor esi, dword [ecx + 0x38]
shr edi, 0x10
shr ebx, 8
and edi, eax
mov edi, dword [edi*4 + 0x520778]
and ebx, eax
xor edi, dword [ebx*4 + 0x520b78]
mov ebx, dword [ebp - 0x10]
xor edx, dword [ecx + 0x34]
shr ebx, 0x18
xor edi, dword [ebx*4 + 0x520378]
mov ebx, dword [ebp - 4]
and ebx, eax
xor edi, dword [ebx*4 + 0x520f78]
mov ebx, esi
xor edi, dword [ecx + 0x3c]
shr ebx, 8
mov dword [ebp - 0x10], edi
shr edi, 0x10
and edi, eax
mov edi, dword [edi*4 + 0x520778]
and ebx, eax
xor edi, dword [ebx*4 + 0x520b78]
mov ebx, dword [ebp - 8]
shr ebx, 0x18
xor edi, dword [ebx*4 + 0x520378]
mov ebx, edx
and ebx, eax
xor edi, dword [ebx*4 + 0x520f78]
mov ebx, dword [ebp - 8]
xor edi, dword [ecx + 0x40]
shr ebx, 0x10
mov dword [ebp - 4], edi
mov edi, dword [ebp - 0x10]
and ebx, eax
shr edi, 8
and edi, eax
mov edi, dword [edi*4 + 0x520b78]
xor edi, dword [ebx*4 + 0x520778]
mov ebx, edx
shr ebx, 0x18
xor edi, dword [ebx*4 + 0x520378]
mov ebx, esi
and ebx, eax
xor edi, dword [ebx*4 + 0x520f78]
mov ebx, dword [ebp - 8]
xor edi, dword [ecx + 0x44]
shr ebx, 8
mov dword [ebp - 0xc], edi
mov edi, edx
and ebx, eax
shr edx, 8
shr edi, 0x10
and edx, eax
and edi, eax
mov edi, dword [edi*4 + 0x520778]
xor edi, dword [ebx*4 + 0x520b78]
mov ebx, esi
shr esi, 0x10
and esi, eax
mov esi, dword [esi*4 + 0x520778]
xor esi, dword [edx*4 + 0x520b78]
mov edx, dword [ebp - 0x10]
shr edx, 0x18
xor esi, dword [edx*4 + 0x520378]
mov edx, dword [ebp - 8]
shr ebx, 0x18
xor edi, dword [ebx*4 + 0x520378]
mov ebx, dword [ebp - 0x10]
and edx, eax
xor esi, dword [edx*4 + 0x520f78]
and ebx, eax
xor edi, dword [ebx*4 + 0x520f78]
xor esi, dword [ecx + 0x4c]
xor edi, dword [ecx + 0x48]
mov edx, esi
shr edx, 0x10
and edx, eax
mov edx, dword [edx*4 + 0x520778]
mov ebx, edi
shr ebx, 8
and ebx, eax
xor edx, dword [ebx*4 + 0x520b78]
mov ebx, dword [ebp - 4]
shr ebx, 0x18
xor edx, dword [ebx*4 + 0x520378]
mov ebx, dword [ebp - 0xc]
mov dword [ebp - 0x10], esi
and ebx, eax
xor edx, dword [ebx*4 + 0x520f78]
mov ebx, dword [ebp - 4]
xor edx, dword [ecx + 0x50]
shr esi, 8
and esi, eax
mov dword [ebp - 8], edx
mov edx, dword [esi*4 + 0x520b78]
mov esi, dword [ebp - 0xc]
shr ebx, 0x10
shr esi, 0x18
and ebx, eax
xor edx, dword [ebx*4 + 0x520778]
xor edx, dword [esi*4 + 0x520378]
mov esi, edi
and esi, eax
xor edx, dword [esi*4 + 0x520f78]
mov esi, dword [ebp - 0xc]
xor edx, dword [ecx + 0x54]
shr esi, 0x10
and esi, eax
mov esi, dword [esi*4 + 0x520778]
mov ebx, dword [ebp - 4]
shr ebx, 8
and ebx, eax
xor esi, dword [ebx*4 + 0x520b78]
mov ebx, edi
shr ebx, 0x18
xor esi, dword [ebx*4 + 0x520378]
mov ebx, dword [ebp - 0x10]
and ebx, eax
xor esi, dword [ebx*4 + 0x520f78]
mov ebx, dword [ebp - 0xc]
shr edi, 0x10
and edi, eax
mov edi, dword [edi*4 + 0x520778]
shr ebx, 8
and ebx, eax
xor edi, dword [ebx*4 + 0x520b78]
mov ebx, dword [ebp - 0x10]
xor esi, dword [ecx + 0x58]
shr ebx, 0x18
xor edi, dword [ebx*4 + 0x520378]
mov ebx, dword [ebp - 4]
and ebx, eax
xor edi, dword [ebx*4 + 0x520f78]
mov ebx, esi
xor edi, dword [ecx + 0x5c]
shr ebx, 8
mov dword [ebp - 0x10], edi
shr edi, 0x10
and edi, eax
mov edi, dword [edi*4 + 0x520778]
and ebx, eax
xor edi, dword [ebx*4 + 0x520b78]
mov ebx, dword [ebp - 8]
shr ebx, 0x18
xor edi, dword [ebx*4 + 0x520378]
mov ebx, edx
and ebx, eax
xor edi, dword [ebx*4 + 0x520f78]
mov ebx, dword [ebp - 8]
xor edi, dword [ecx + 0x60]
shr ebx, 0x10
mov dword [ebp - 4], edi
mov edi, dword [ebp - 0x10]
shr edi, 8
and edi, eax
mov edi, dword [edi*4 + 0x520b78]
and ebx, eax
xor edi, dword [ebx*4 + 0x520778]
mov ebx, edx
shr ebx, 0x18
xor edi, dword [ebx*4 + 0x520378]
mov ebx, esi
and ebx, eax
xor edi, dword [ebx*4 + 0x520f78]
mov ebx, dword [ebp - 8]
xor edi, dword [ecx + 0x64]
shr ebx, 8
mov dword [ebp - 0xc], edi
mov edi, edx
shr edi, 0x10
and edi, eax
mov edi, dword [edi*4 + 0x520778]
and ebx, eax
xor edi, dword [ebx*4 + 0x520b78]
mov ebx, esi
shr ebx, 0x18
xor edi, dword [ebx*4 + 0x520378]
mov ebx, dword [ebp - 0x10]
shr esi, 0x10
and esi, eax
mov esi, dword [esi*4 + 0x520778]
shr edx, 8
and ebx, eax
xor edi, dword [ebx*4 + 0x520f78]
and edx, eax
xor esi, dword [edx*4 + 0x520b78]
mov edx, dword [ebp - 0x10]
xor edi, dword [ecx + 0x68]
shr edx, 0x18
xor esi, dword [edx*4 + 0x520378]
mov edx, dword [ebp - 8]
and edx, eax
xor esi, dword [edx*4 + 0x520f78]
mov ebx, edi
xor esi, dword [ecx + 0x6c]
shr ebx, 8
and ebx, eax
mov edx, esi
shr edx, 0x10
and edx, eax
mov edx, dword [edx*4 + 0x520778]
xor edx, dword [ebx*4 + 0x520b78]
mov ebx, dword [ebp - 4]
shr ebx, 0x18
xor edx, dword [ebx*4 + 0x520378]
mov ebx, dword [ebp - 0xc]
and ebx, eax
xor edx, dword [ebx*4 + 0x520f78]
mov ebx, dword [ebp - 4]
xor edx, dword [ecx + 0x70]
shr ebx, 0x10
and ebx, eax
mov dword [ebp - 0x10], esi
shr esi, 8
and esi, eax
mov dword [ebp - 8], edx
mov edx, dword [esi*4 + 0x520b78]
xor edx, dword [ebx*4 + 0x520778]
mov esi, dword [ebp - 0xc]
mov ebx, dword [ebp - 4]
shr esi, 0x18
xor edx, dword [esi*4 + 0x520378]
mov esi, edi
shr ebx, 8
and ebx, eax
and esi, eax
xor edx, dword [esi*4 + 0x520f78]
mov esi, dword [ebp - 0xc]
shr esi, 0x10
and esi, eax
mov esi, dword [esi*4 + 0x520778]
xor esi, dword [ebx*4 + 0x520b78]
mov ebx, edi
shr ebx, 0x18
xor esi, dword [ebx*4 + 0x520378]
mov ebx, dword [ebp - 0x10]
and ebx, eax
xor esi, dword [ebx*4 + 0x520f78]
mov ebx, dword [ebp - 0xc]
xor esi, dword [ecx + 0x78]
shr edi, 0x10
shr ebx, 8
and edi, eax
mov edi, dword [edi*4 + 0x520778]
and ebx, eax
xor edi, dword [ebx*4 + 0x520b78]
mov ebx, dword [ebp - 0x10]
xor edx, dword [ecx + 0x74]
shr ebx, 0x18
xor edi, dword [ebx*4 + 0x520378]
mov ebx, dword [ebp - 4]
and ebx, eax
xor edi, dword [ebx*4 + 0x520f78]
mov ebx, esi
xor edi, dword [ecx + 0x7c]
shr ebx, 8
mov dword [ebp - 0x10], edi
shr edi, 0x10
and edi, eax
mov edi, dword [edi*4 + 0x520778]
and ebx, eax
xor edi, dword [ebx*4 + 0x520b78]
mov ebx, dword [ebp - 8]
shr ebx, 0x18
xor edi, dword [ebx*4 + 0x520378]
mov ebx, edx
and ebx, eax
xor edi, dword [ebx*4 + 0x520f78]
xor edi, dword [ecx + 0x80]
mov dword [ebp - 4], edi
mov edi, dword [ebp - 0x10]
mov ebx, dword [ebp - 8]
shr ebx, 0x10
and ebx, eax
shr edi, 8
and edi, eax
mov edi, dword [edi*4 + 0x520b78]
xor edi, dword [ebx*4 + 0x520778]
mov ebx, edx
shr ebx, 0x18
xor edi, dword [ebx*4 + 0x520378]
mov ebx, esi
and ebx, eax
xor edi, dword [ebx*4 + 0x520f78]
mov ebx, dword [ebp - 8]
xor edi, dword [ecx + 0x84]
shr ebx, 8
and ebx, eax
mov dword [ebp - 0xc], edi
mov edi, edx
shr edx, 8
and edx, eax
shr edi, 0x10
and edi, eax
mov edi, dword [edi*4 + 0x520778]
xor edi, dword [ebx*4 + 0x520b78]
mov ebx, esi
shr ebx, 0x18
xor edi, dword [ebx*4 + 0x520378]
mov ebx, dword [ebp - 0x10]
shr esi, 0x10
and esi, eax
mov esi, dword [esi*4 + 0x520778]
xor esi, dword [edx*4 + 0x520b78]
mov edx, dword [ebp - 0x10]
shr edx, 0x18
xor esi, dword [edx*4 + 0x520378]
mov edx, dword [ebp - 8]
and edx, eax
xor esi, dword [edx*4 + 0x520f78]
and ebx, eax
xor edi, dword [ebx*4 + 0x520f78]
xor esi, dword [ecx + 0x8c]
xor edi, dword [ecx + 0x88]
mov edx, esi
shr edx, 0x10
and edx, eax
mov edx, dword [edx*4 + 0x520778]
mov ebx, edi
shr ebx, 8
and ebx, eax
xor edx, dword [ebx*4 + 0x520b78]
mov ebx, dword [ebp - 4]
shr ebx, 0x18
xor edx, dword [ebx*4 + 0x520378]
mov ebx, dword [ebp - 0xc]
and ebx, eax
xor edx, dword [ebx*4 + 0x520f78]
mov ebx, dword [ebp - 4]
xor edx, dword [ecx + 0x90]
shr ebx, 0x10
mov dword [ebp - 8], edx
mov edx, esi
shr edx, 8
and edx, eax
mov edx, dword [edx*4 + 0x520b78]
and ebx, eax
xor edx, dword [ebx*4 + 0x520778]
mov ebx, dword [ebp - 0xc]
shr ebx, 0x18
xor edx, dword [ebx*4 + 0x520378]
mov ebx, edi
and ebx, eax
xor edx, dword [ebx*4 + 0x520f78]
mov ebx, dword [ebp - 4]
xor edx, dword [ecx + 0x94]
mov dword [ebp - 0x10], edx
mov edx, dword [ebp - 0xc]
shr edx, 0x10
and edx, eax
shr ebx, 8
mov edx, dword [edx*4 + 0x520778]
and ebx, eax
xor edx, dword [ebx*4 + 0x520b78]
mov ebx, edi
shr ebx, 0x18
xor edx, dword [ebx*4 + 0x520378]
mov ebx, esi
and ebx, eax
xor edx, dword [ebx*4 + 0x520f78]
mov ebx, dword [ebp - 0xc]
xor edx, dword [ecx + 0x98]
shr edi, 0x10
and edi, eax
mov edi, dword [edi*4 + 0x520778]
shr ebx, 8
and ebx, eax
xor edi, dword [ebx*4 + 0x520b78]
shr esi, 0x18
xor edi, dword [esi*4 + 0x520378]
mov esi, dword [ebp - 4]
and esi, eax
xor edi, dword [esi*4 + 0x520f78]
xor edi, dword [ecx + 0x9c]
cmp dword [ebp + 8], 0xa
or byte [edx], cl