Function at 0x6672e3
Capabilities:
Encrypt data using aes

Disassembly:
movzx esi, byte [eax + 2]
pushfd
pop word [esp]
mov word [esp], si
lea esp, [esp]
lea esp, [esp]
push word [esp + 1]
mov dword [esp], ebx
shl edx, 8
push eax
jmp 0x667318
push word [esp]
mov byte [esp], bh
push dword [esp + 1]
lea esp, [esp + 8]
jmp 0x6671f4
xor edx, esi
pushfd
lea esp, [esp + 2]
mov word [esp], bx
mov byte [esp], dh
jmp 0x667221
lea esp, [esp + 1]
lea esp, [esp + 0x1c]
push sp
mov byte [esp], bl
lea esp, [esp + 2]
push esi
push edi
movzx edx, byte [eax]
shl edx, 8
movzx esi, byte [eax + 1]
clc
push bx
mov byte [esp], dh
mov byte [esp], al
mov byte [esp], bh
mov word [esp], sp
lea esp, [esp + 2]
jmp 0x66723e
push ebp
lea esp, [esp + 4]
push ebx
pushal
push word [esp + 9]
mov byte [esp + 9], dl
mov byte [esp + 6], ch
lea esp, [esp + 2]
mov dword [esp + 0x1c], ebp
push di
push word [esp]
mov byte [esp + 1], ah
mov word [esp + 1], ax
push dword [esp + 3]
lea esp, [esp + 7]
jmp 0x66725d
push ebp
lea esp, [esp + 4]
lea esp, [esp + 4]
jmp 0x66729f
lea esp, [esp + 2]
lea esp, [esp + 0x24]
xor edx, esi
movzx esi, byte [eax + 3]
pushal
jmp 0x6a776e
mov byte [esp], al
pushfd
pop word [esp + 1]
pop word [esp]
pop word [esp]
pushal
jmp 0x6672fa
mov word [esp + 0x1b], di
pushal
push word [esp]
pop dword [esp + 0x15]
push word [esp + 4]
lea esp, [esp + 0xe]
push esi
pushal
lea esp, [esp + 2]
shl edx, 8
push esi
jmp 0x6a7933
shl edx, 8
pushal
mov dword [esp + 0x13], ebp
add esp, 0x13
mov byte [esp + 9], cl
lea esp, [esp + 1]
jmp 0x6a7b7d
movzx esi, byte [eax + 0xa]
shl edx, 8
xor edx, esi
movzx esi, byte [eax + 0xb]
jmp 0x6a788c
lea esp, [esp + 1]
pushal
mov word [esp + 0xd], di
mov byte [esp + 0x15], ah
lea esp, [esp + 0x14]
lea esp, [esp + 1]
lea esp, [esp + 0xc]
xor edx, esi
movzx esi, byte [eax + 6]
shl edx, 8
xor edx, esi
movzx esi, byte [eax + 7]
shl edx, 8
xor edx, esi
movzx esi, byte [eax + 9]
push ebx
mov ebx, ecx
lea ebx, [ebx + 4]
mov dword [ebx], edx
pop ebx
movzx edx, byte [eax + 8]
push dx
push word [esp]
mov dword [esp], esp
mov word [esp + 1], cx
shl edx, 8
lea esp, [esp + 4]
xor edx, esi
jmp 0x6a78af
pop word [esp]
mov word [esp], sp
mov byte [esp], dl
push word [esp]
lea esp, [esp]
lea esp, [esp + 0x58]
pushfd
mov word [esp], dx
push word [esp + 3]
cmc
lea esp, [esp + 2]
xor edx, esi
push ecx
lea esp, [esp]
pop word [esp]
mov word [esp], bx
pushfd
mov word [esp + 3], di
push ebp
lea esp, [esp + 2]
lea esp, [esp + 0xc]
movzx esi, byte [eax + 5]
push esi
mov esi, ecx
mov dword [esi], edx
pop esi
movzx edx, byte [eax + 4]
push si
mov byte [esp], cl
lea esp, [esp + 1]
pushfd
mov word [esp], sp
push word [esp + 3]
lea esp, [esp + 6]
mov byte [esp], ah
lea esp, [esp + 1]
shl edx, 8
pushfd
pop word [esp]
jmp 0x6a78cd
sub esp, 0
pushal
push dword [esp]
push dword [esp + 0x15]
xor eax, edi
pushfd
mov dword [esp], ebp
push word [esp + 1]
lea esp, [esp + 2]
lea esp, [esp + 0x2c]
jmp 0x6a7af9
lea esi, [esi*4]
lea esi, reloc.RASAPI32.dll_RasGetConnectStatusA
mov edi, dword [esi]
pop esi
and edi, 0xff0000
push esi
mov esi, ecx
lea esi, [esi + 4]
mov ebx, dword [esi]
pop esi
and eax, 0xff000000
jmp 0x6a7b1b
xor edx, esi
pushfd
pop word [esp]
mov word [esp], si
push dx
pushal
push dword [esp + 5]
lea esp, [esp + 0x22]
lea esp, [esp + 2]
lea esp, [esp + 0x10]
movzx esi, byte [eax + 0xd]
push esi
pushal
mov ebp, dword [esp]
mov bl, dh
mov dl, bh
mov bl, ch
xchg dl, al
mov ebp, 0x630660b1
bswap di
mov dword [esp + 4], ecx
push esi
mov dword [esp], edi
lea esp, [esp + 4]
popal
lea esi, [esi + 8]
mov dword [esi], edx
pop esi
movzx edx, byte [eax + 0xc]
push ecx
push dword [esp + 2]
mov dword [esp], esi
pop word [esp + 3]
mov dword [esp], edx
lea esp, [esp + 2]
shl edx, 8
pushfd
lea esp, [esp + 1]
mov byte [esp], cl
lea esp, [esp + 3]
lea esp, [esp + 4]
xor edx, esi
movzx esi, byte [eax + 0xe]
movzx eax, byte [eax + 0xf]
push esi
shl edx, 8
push cx
lea esp, [esp + 2]
lea esp, [esp + 4]
xor edx, esi
pushfd
push word [esp + 3]
lea esp, [esp + 2]
shl edx, 8
push cx
lea esp, [esp + 1]
mov byte [esp], al
lea esp, [esp + 1]
lea esp, [esp + 4]
xor edx, eax
mov dword [ecx + 0xc], edx
mov eax, edx
shr eax, 0x10
mov esi, 0xff
and eax, esi
mov eax, dword [eax*4 + reloc.RASAPI32.dll_RasGetConnectStatusA]
xor eax, 0x1000000
mov edi, edx
shr edi, 8
sub esp, 4
and edi, esi
pushal
lea esp, [esp + 3]
mov byte [esp + 0x16], dh
push word [esp + 0xa]
pop word [esp + 0x10]
mov dword [esp + 3], ecx
pushfd
push dword [esp + 0x11]
push dword [esp + 0x1a]
lea esp, [esp + 1]
lea esp, [esp + 0x2c]
push esi
pushal
mov bp, 0x4696
mov dword [esp + 4], edi
push eax
mov word [esp + 1], bp
lea esp, [esp + 4]
popal
jmp 0x6a7b4a