Function at 0x9c6fea
Capabilities:
Encrypt data using aes

Disassembly:
mov di, word [esp]
mov esi, esp
mov dword [esp + 8], ecx
pushal
pop dword [esp + 0x12]
push dword [esp + 0x1b]
mov byte [esp + 0x18], bh
pop word [esp + 0xd]
jmp 0x9c7023
push bp
mov word [esp], sp
mov word [esp], bx
pushal
pop dword [esp + 0xb]
lea esp, [esp + 3]
shl edx, 8
pushal
lea esp, [esp + 0x3c]
xor edx, esi
movzx esi, byte [eax + 5]
push ebp
pushal
mov ebx, ecx
mov di, bx
lea eax, [edx + ebx]
jmp 0x9c6f00
xor edx, esi
movzx esi, byte [eax + 2]
push ax
mov byte [esp], cl
lea esp, [esp]
push word [esp + 1]
pop word [esp]
lea esp, [esp + 2]
shl edx, 8
pushal
mov dword [esp + 0x15], ebp
push word [esp + 3]
lea esp, [esp + 0x1c]
push word [esp]
lea esp, [esp + 8]
xor edx, esi
movzx esi, byte [eax + 3]
push dx
lea esp, [esp]
lea esp, [esp + 1]
jmp 0x9c6f29
push ebx
lea esp, [esp + 4]
push ebx
push bp
mov byte [esp], bl
lea esp, [esp + 2]
push ebp
pushfd
pop word [esp]
lea esp, [esp + 2]
push esi
push edi
movzx edx, byte [eax]
shl edx, 8
movzx esi, byte [eax + 1]
jmp 0x9c6f64
pushal
lea esp, [esp + 0x20]
lea esp, [esp + 4]
jmp 0x9c6fb5
mov dword [ebp], edx
pop ebp
movzx edx, byte [eax + 4]
shl edx, 8
xor edx, esi
movzx esi, byte [eax + 6]
jmp 0xa03ce0
mov word [esp + 0x16], di
lea esp, [esp + 0x19]
lea esp, [esp]
lea esp, [esp + 1]
lea esp, [esp + 4]
popal
jmp 0x9c7001
lea esp, [esp]
lea esp, [esp + 1]
and eax, esi
push ax
push ecx
push ebp
mov dword [esp + 3], ebp
pop word [esp + 4]
lea esp, [esp + 8]
push ebp
pushal
mov dh, byte [esp]
lea edx, [ebp*4]
jmp 0xa03df4
lea eax, reloc.MSVFW32.dll_DrawDibDraw
xchg ah, ch
pushfd
xchg word [esp + 1], bp
mov dword [esp + 0x20], edx
push bx
lea esp, [esp]
push word [esp]
push dword [esp]
pop word [esp + 2]
pop word [esp]
pushal
lea esp, [esp + 0x28]
popal
shr eax, 0x10
mov esi, 0xff
push si
lea esp, [esp]
lea esp, [esp + 1]
add esp, 0
add esp, 0
mov byte [esp], cl
mov byte [esp], cl
lea esp, [esp]
jmp 0xa03c4d
shl edx, 8
xor edx, esi
movzx esi, byte [eax + 7]
push edi
pushfd
pop word [esp + 1]
push dword [esp]
lea esp, [esp + 2]
shl edx, 8
pushal
push edx
push dword [esp + 0x1a]
push word [esp + 0x21]
push ax
pushfd
push word [esp + 0xd]
push ebp
pop dword [esp + 0x2a]
lea esp, [esp + 2]
lea esp, [esp + 0x38]
xor edx, esi
movzx esi, byte [eax + 9]
push eax
mov eax, ecx
lea eax, [eax + 4]
mov dword [eax], edx
pop eax
movzx edx, byte [eax + 8]
shl edx, 8
xor edx, esi
movzx esi, byte [eax + 0xa]
shl edx, 8
pushal
push word [esp + 0x1d]
mov word [esp + 0x16], si
push dword [esp + 6]
mov byte [esp + 0x19], dl
mov dword [esp + 0x20], edi
lea esp, [esp + 2]
xor edx, esi
push sp
mov byte [esp], dl
mov word [esp], sp
lea esp, [esp]
mov word [esp], cx
lea esp, [esp + 2]
lea esp, [esp + 0x24]
movzx esi, byte [eax + 0xb]
shl edx, 8
xor edx, esi
movzx esi, byte [eax + 0xd]
push esi
mov esi, ecx
lea esi, [esi + 8]
mov dword [esi], edx
pop esi
movzx edx, byte [eax + 0xc]
push ebx
mov word [esp + 1], dx
pop word [esp]
mov word [esp], si
pushfd
lea esp, [esp + 2]
shl edx, 8
lea esp, [esp + 4]
xor edx, esi
movzx esi, byte [eax + 0xe]
movzx eax, byte [eax + 0xf]
shl edx, 8
xor edx, esi
shl edx, 8
xor edx, eax
mov dword [ecx + 0xc], edx
pushal
bswap ax
jmp 0xa03c83
xchg ebx, esi
mov edi, 0x98c43ac
mov dword [esp + 8], eax
pushal
pop word [esp + 0x10]
jmp 0xa03e3b
mov dword [esp + 0xa], ebx
mov dword [esp + 0xb], esi
mov dword [esp + 4], edx
lea esp, [esp + 2]
lea esp, [esp + 0x1c]
popal
lea ebp, [ebp*4]
jmp 0xa04fce
lea ebp, reloc.MSVFW32.dll_DrawDibDraw
mov eax, dword [ebp]
pop ebp
xor eax, 0x1000000
mov edi, edx
shr edi, 8
and edi, esi
mov edi, dword [edi*4 + reloc.MSVFW32.dll_DrawDibDraw]
and edi, 0xff0000
push ebp
mov ebp, ecx
lea ebp, [ebp + 4]
mov ebx, dword [ebp]
pop ebp
and eax, 0xff000000
xor eax, edi
mov edi, edx
push edi
lea esp, [esp + 1]
mov byte [esp + 1], dl
lea esp, [esp + 3]
shr edi, 0x18
movzx edi, byte [edi*4 + 0x9d253c]
xor eax, edi
mov edi, edx
push ecx
sub esp, 0
add esp, 2
stc
mov word [esp], dx
add esp, 0
push word [esp + 1]
cmc
stc
and edi, esi
push ecx
mov byte [esp], dh
pop word [esp]
push esi
mov dword [esp], ecx
mov word [esp + 1], dx
pop word [esp]
lea esp, [esp + 8]
mov edi, dword [edi*4 + reloc.MSVFW32.dll_DrawDibDraw]
mov ebp, 0xff00
sub esp, 0x13
sub esp, 7
mov dword [esp + 0x12], esi
clc
lea esp, [esp + 2]
and edi, ebp
push esp
pushal
lea esp, [esp + 0x19]
pop word [esp]
push word [esp + 5]
lea esp, [esp + 3]
mov dword [esp], ecx
push dword [esp + 1]
pop word [esp + 7]
lea esp, [esp + 2]
lea esp, [esp + 0x20]
xor eax, edi
xor eax, dword [ecx]
lea edi, [ecx + 0x10]
stc
xor ebx, eax
mov dword [edi], eax
mov eax, dword [ecx + 8]
xor eax, ebx
mov dword [ecx + 0x14], ebx
mov dword [ecx + 0x18], eax
xor edx, eax
mov dword [ecx + 0x1c], edx
call fcn.009e3af1
mov eax, edi
mov edx, dword [eax + 0xc]
pushal
mov eax, 0x4a977fe3
lea eax, [ebp*4]
mov bp, word [esp]
mov dword [esp + 0x18], edx
pushal
push dword [esp + 0x1b]
lea esp, [esp + 0x24]
popal
shr ecx, 8
mov edi, edx
and ecx, esi
push ebx
mov ebx, ecx
lea ebx, [ebx*4]
lea ebx, reloc.MSVFW32.dll_DrawDibDraw
mov ecx, dword [ebx]
pop ebx
push cx
pushal
mov byte [esp + 0xb], bh
lea esp, [esp + 2]
shr edi, 0x10
pushfd
push dword [esp + 2]
push word [esp + 4]
pop word [esp + 5]
pop dword [esp]
pop word [esp]
lea esp, [esp + 2]
lea esp, [esp + 0x20]
and edi, esi
push ecx
mov ecx, edi
lea ecx, [ecx*4]
lea ecx, reloc.MSVFW32.dll_DrawDibDraw
mov edi, dword [ecx]
pop ecx
and ecx, 0xff0000
and edi, 0xff000000
xor ecx, edi
mov edi, edx
and edx, esi
mov edx, dword [edx*4 + reloc.MSVFW32.dll_DrawDibDraw]
shr edi, 0x18
movzx edi, byte [edi*4 + 0x9d253c]
xor ecx, edi
and edx, ebp
xor ecx, edx
xor ecx, dword [ebx]
lea edi, [eax + 0x10]
xor ecx, dword [eax]
add ebx, 4
mov dword [edi], ecx
mov edx, dword [eax + 4]
xor edx, ecx
mov dword [eax + 0x14], edx
mov ecx, dword [eax + 8]
push edi
push word [esp + 1]
pop word [esp + 1]
push word [esp + 2]
mov word [esp + 2], si
mov dword [esp], ecx
add esp, 3
lea esp, [esp + 3]
xor ecx, edx
push edi
push word [esp + 1]
mov dword [esp], edx
lea esp, [esp + 2]
lea esp, [esp + 4]
push ebx
pushal
mov dword [esp + 0x10], eax
push ebp
mov byte [esp + 2], ah
mov word [esp + 1], bx
pushfd
lea esp, [esp + 8]
popal
lea ebx, [ebx + 0x18]
mov dword [ebx], ecx
pop ebx
mov edx, dword [eax + 0xc]
sub esp, 7
push dword [esp + 3]
mov byte [esp + 5], ah
pop word [esp + 5]
pop dword [esp]
push dword [esp + 2]
mov word [esp + 2], si
lea esp, [esp + 1]
xor edx, ecx
pushfd
push word [esp + 2]
push word [esp + 2]
push word [esp + 1]
lea esp, [esp + 2]
lea esp, [esp + 0x10]
push edi
mov edi, eax
lea edi, [edi + 0x1c]
mov dword [edi], edx
pop edi
cmp ebx, 0x9d3d64
jne 0xa050b9
push 0xa
pop eax
mov di, word [esp]
mov di, 0x2138
mov di, word [esp]
mov edi, dword [esp]
push ebx
lea esp, [esp + 1]
push ebp
push word [esp + 1]
lea esp, [esp + 1]
lea esp, [esp + 0xc]
pushal
bswap esi
pop dword [esp + 0xb]
pop esi
mov esi, dword [esp + 0x18]
push bp
mov word [esp], di
lea esp, [esp + 2]
lea esp, [esp + 0x1c]
pop ebp
pop ebx
ret