Function at 0x100c851a
Capabilities:
Encrypt data using aes mixcolumns step
Resolve function by parsing pe exports

Disassembly:
inc esi
xchg dword [esp + edx*8 + 0xc], esi
inc cx
neg esi
inc ecx
ror eax, 3
inc edx
movsx eax, word [esp + edx + 0x21]
inc ecx
xor eax, 0x5d9a5aae
inc edx
mul byte [esp + edx + 0x23]
inc ecx
ror edx, 0xd8
dec al
dec esp
mov dword [esp + edx - 0x551aa940], edi
inc esp
xor dword [esp + edx - 0x551aa940], eax
inc ecx
mov edi, 0x2c010296
dec eax
cwde
dec esp
mov dword [esp + ecx], edx
dec esp
mov edi, dword [esp + edx - 0x551aa940]
inc esp
movsx esp, dh
dec ebp
arpl ax, ax
dec edx
mul dword [esp + edx*4 - 0x3f8]
jae 0x10173aaf
dec eax
push ecx
xchg edx, ecx
neg eax
xadd byte [esp + ecx*2 - 0x26392e0a], ch
dec eax
rol eax, 1
or ecx, edx
dec edx
xor ebx, eax
ror ecx, 0x8f
btr dx, dx
and ecx, 0xfb1c4e90
adc ebp, eax
neg cx
jno 0x100d86a3
leave
invalid
push 0xfd1fde8b
neg dword [esp]
dec ebx
lea esp, [esp + 8]
jne 0x1017bf2b
call fcn.10201527
add dword [edx], 0x8b8df3
jae 0x100c8503
fsub dword [edi]
je 0x100c85be
out 0x40, eax
dec eax
daa
je 0x100c85c4
jg 0x100c8547
jo 0x100c8570
je 0x100c85ca
aas
mov byte [eax - 0x7c808bd9], ah
adc byte [eax + 0x5f7f7427], al
fdivr dword [eax - 0x2c808bd9]
cwde
test al, 0x27
je 0x100c85e2
dec eax
retf 0x6cfa
dec esp
salc
or al, 0x11
sahf
sbb eax, 0xeff31382
inc esi
xor eax, 0xeff3137a
invalid
pop dword [0x5662c213]
invalid
sub dword [edx], esp
movsb byte es:[edi], byte [esi]
bound esp, qword [eax + esi*2 - 0x4855ed62]
test byte [ebx], ch
fld dword [ebx]
movsb byte es:[edi], byte [esi]
or dword [ebx + 0x78], edx
mov al, byte [0xd6403a4]
add bl, byte [eax - 0x40]
movsb byte es:[edi], byte [esi]
add esp, dword [esi + ecx*8 - 0x32]
push esi
pop eax
shl byte [ebx + eax + 0x64cece64], 0x56
into
enter 0x4f, 0
aas
aas
xor byte [edi], bh
and al, 0x62
popal
jae 0x100c8662
arpl word [edi + 0x69], bx
outsd dx, dword [esi]
jae 0x100c863f
inc esp
push ebp
aas
and al, 0x63
push 0x745f7261
jb 0x100c866c
imul esi, dword [ebx + esi*2 + 0x40], 0x74734044
inc eax
inc eax
inc eax
jae 0x100c868d
inc eax
inc eax
dec ecx
inc ecx
inc ebp
inc eax
pop eax
pop edx
add byte [ecx + 0x4ee], al
add byte [ecx - 0x227f6d66], bh
not cx
mov eax, 0xa89c969a
mov edx, dword [esi]
xor edx, ebx
cbw
dec edx
bswap edx
shl cx, cl
sal ax, 0x61
xor edx, 0x6399cc8f
dec edx
add ax, 0x6fba
xor ebx, edx
lea ecx, [ecx*4 + 0x37bbb01e]
shr ecx, cl
add ebp, edx
mov di, word [edi + ecx*2 - 4]
retf 0xd366
dec edi
cld
ror cl, cl
jb fcn.102260e1
mov eax, 0xc5ac7788
lea eax, [eax + 0x75145f0a]
lea esi, [esi + eax - 0x3ac0d696]
movzx edx, al
shr eax, 1
mov eax, dword [esi + eax - 0x1d606b49]
btc edx, 0x3b
xor eax, ebx
shr edx, 0xc8
not edx
not eax
shl dl, 0x25
sets dl
ror eax, 1
btc edx, 0x92
xor eax, 0x2a0f82af
imul dx, dx
or edx, edx
jne 0x10105c82
cmp esi, dword [ebx]
ret
mov edx, dword [edi + ecx - 0x7b1cf9f0]
lea eax, [ecx + ecx*8 + 0x6493e183]
mov cl, byte [edi + ecx - 0x7b1cf9ec]
neg dword [esp]
adc edi, 1
jmp 0x1016af71
sbb eax, 0xe73df424
rol dx, 0xa6
neg eax
imul dx, dx
jb 0x10163658
mov edx, 0x9202a784
dec eax
mov ecx, edi
inc esp
movzx eax, dx
dec esi
lea esi, [eax*8 + 0x24b84835]
dec edx
lea edi, [edi + eax - 0xa786]
call fcn.10213612
dec edi
lea edx, [ebx + ebp*2 - 0x6ccd205c]
add al, 0x9c
inc bp
imul esp, esp
jo 0x1023302a
inc ecx
ror esp, 1
inc ecx
movzx eax, ax
xchg dword [esp + esi - 0x5f9d], ecx
dec esp
mov dword [esp + ecx*2 - 0x172], edi
add al, byte [esp + ecx - 0xc0]
cwde
dec eax
cwde
inc esp
xor dword [esp + ecx*4 - 0x2fc], esp
inc cx
sal ebx, 0xcf
dec eax
mov dword [esp + ecx - 0xb5], 0x662eecbc
dec esp
mov edi, dword [esp + ecx*2 - 0x172]
neg byte [esp + ecx - 0xb8]
inc si
dec ebp
arpl sp, sp
mov ebp, 0xb9222c05
call fcn.1021c2a0
add byte [eax], al
add byte [esi + 0x72], ah
add bh, dh
not ecx
mul dx
invalid
leave
call fcn.1015f661
mov esi, dword [edi + 8]
mov edx, 0x7c8e23b4
dec eax
lea edi, [edi + edx - 0x7c8e23a8]
mov ecx, edx
dec esp
lea ebx, [edx + ecx*8 + 0x289ec42c]
mov dword ss:[eax + edx - 0x7c8e23b4], esi
call fcn.101f92be
neg al
dec eax
add dword [esp + esi*4 - 0x2b0], ebp
dec al
not esi
inc ecx
pop ebx
imul ebp, esi
rol al, 1
inc esp
and edx, esi
inc esp
xor bh, al
inc ecx
push esi
not byte [esp + ecx + 0x40640003]
inc esi
movzx eax, word [esp + ebp*4 - 0x18844]
dec eax
lea eax, [esp + eax + 8]
inc ecx
btr esi, 0xb2
dec eax
neg ebp
mov dword [ecx + eax + 0x40640000], edx
sub ebp, esi
mov ebp, dword [edi + ecx + 0x40640004]
inc cx
sal esp, 0x6c
dec eax
lea eax, [esi*8 + 0x6b069fa3]
inc ecx
push ebp
inc edi
movzx esi, byte [ecx + ebp*4 - 0x1884a]
inc ebp
xor dh, bh
dec ebp
or ebp, edx
inc ecx
ror dh, 1
ror ax, 0x46
dec edx
lea edx, [eax*4 - 0x1963b9e0]
inc ecx
xor dh, 0x1b
dec ecx
rol eax, 0xd4
inc ecx
rol dh, 1
inc cx
sal eax, 0x28
inc cx
sbb ecx, eax
inc ecx
add edx, 0x298818be
inc ecx
dec dh
jmp 0x10178908
inc ebp
mov ebp, edx
mov ecx, eax
dec esi
lea esp, [eax*2 + 0x69ba571e]
inc ecx
push edi
inc ecx
shr esp, 0x8b
inc esp
xor dword [esp + ebp - 0x48008801], esi
dec eax
or ecx, eax
call fcn.1022680d
dec esi
mov dword [edi + ebx - 0xfd], esp
inc eax
ror dh, 0x45
dec eax
lea edi, [esi + edi - 0xaf5fffc]
jmp ebx
lea eax, [eax + eax*8 - 0x4ad4924a]
shr word [esp + eax*2 - 0x6512e081], 0x49
shr edx, cl
movzx ecx, al
call fcn.1014b867
cmp al, byte [eax - 0x4c066097]
add ch, byte [0xb3d19f5a]
sub eax, 0xbf7d9f5a
jb 0x1016afcc
pop edx
lahf
xchg ecx, eax
fild qword [edx]
sub eax, 0xe7499f5a
cwde
mov ah, 0xba
and eax, 0xa82d5c32
xor bl, byte [ebp + ebp - 0x58]
pushal
dec eax
sti
sal byte [esi + 0x19f30dbc], cl
movsb byte es:[edi], byte [esi]
dec ebx
dec ebp
jbe 0x1016afad
mov ds, word [ecx]
pop es
call 0x29a55de2
ja 0x1016af9f
push esi
push 0xef4fd2e4
lahf
imul ebx, dword [edi + 0x329716ac], 0x1e749f5a
stosd dword es:[edi], eax
xor bl, byte [edx - 0x61]
clc
dec edx
ret
dec ecx
adc ebx, eax
dec eax
mov dword [esp + edx*2], ebx
ret 0x20
inc ecx
rol esp, 5
pop edx
inc ecx
ror dh, 1
inc ebp
xor bh, dh
dec esp
xadd dword [esp + ecx + 0x40640000], edx
shr ax, 0x64
dec esi
lea esi, [esp + esi + 8]
inc edx
shl byte [esp + edx - 0x3ab5bd0f], 0x41
inc dx
not dword [esp + edx - 0x3ab5bd0f]
inc esp
add edx, ecx
inc edx
mov dword [ecx + esi + 0x40640000], ebp
dec eax
rol dword [esp + ecx + 0x40640000], 0x83
inc ecx
movzx esi, byte [ecx + ecx + 0x4063fff9]
dec esi
lea ecx, [ecx + ecx + 0x4063fff9]
inc ecx
imul eax
sal dl, 3
push edx
inc ecx
xor dh, bh
inc eax
xor dh, 0x9d
inc sp
and eax, eax
inc eax
adc dh, 0xb
neg dx
inc eax
not dh
dec ecx
sbb edx, esp
dec eax
sar dword [esp + ecx + 0x40640003], 0x4f
inc eax
inc dh
call fcn.10149c60
push eax
call 0x100c851a
inc ecx
mov eax, 0x3807a427
dec edi
lea ecx, [ecx + eax*2 - 0x700f4852]
inc edi
mov edx, dword [ecx + eax - 0x3807a427]
dec edi
lea ebx, [eax + eax*8 - 0x1676dc4d]
inc ecx
push ebx
inc ebp
xor edx, edi
inc ecx
xor edx, 0x32913334
inc ebp
movzx ebp, bx
inc dx
dec dword [esp + ebp*2 - 0x1d21f]
inc edi
lea edx, [ebp + edx - 0x2bb4cc48]
dec esi
lea esi, [ebp*2 - 0x266609e7]
jge 0x10162c2b
inc ecx
bswap edx
inc ecx
movsx esi, ch
dec ecx
sar ebp, 0xc1
dec ecx
lea eax, [ebx + esi*2 - 0x6865a257]
inc ecx
xor edx, 0x66a66d80
movzx edx, al
dec ecx
shl ebx, 0x54
inc edi
lea edx, [edx + eax - 0x7b083b2e]
dec esi
mov dword [esp + eax - 0x3807a427], edi
shl edx, 0xc4
inc esi
xor dword [esp + eax*2 - 0x700f484e], edx
dec ebp
lea esp, [ebx + edx*2 + 0x2cbb29ae]
inc ecx
pop edi
sar dl, 3
inc ecx
sar ebp, 0x9f
sbb dl, 0x8d
dec ebp
arpl dx, dx
dec ecx
adc ebx, edx
dec eax
neg esi
inc edx
mov edi, dword [edi + eax - 0x3807a427]
inc ebp
and ebp, ebp
inc ebp
movzx edx, bx
inc ebp
sbb dh, bl
jns fcn.10115f46
dec ecx
inc ecx
dec ch
dec eax
bswap edx
bswap ecx
inc ecx
shl ah, 1
inc eax
dec dh
dec eax
btc esi, eax
inc ecx
push edi
inc edx
xor dword [esp + ebp - 0x26fd], ecx
inc esp
movsx edi, si
sar al, 0xe1
call fcn.10233b17
inc cx
shld edx, ebp, cl
dec edx
lea ebp, [eax + ebp*8 + 0x49b0d890]
inc ecx
movsx ecx, bp
inc si
mov dword [edi + esi*2 - 0x6dd2], edx
inc ecx
shr eax, 0xa1
dec eax
rol ecx, 0xc
dec edx
mov dword [esp + esi*2 - 0x6dd2], ebx
ret 0x10
mov eax, dword [ebp + ebx*4]
jmp 0x1017a99d
jo 0x10125be3
inc ecx
mov ebx, 0xeaae5cb2
dec ecx
sub ecx, 2
inc ebp
movzx esi, word [ecx]
inc ebp
mov edx, ebx
inc bp
xor esi, edi
inc cx
inc esi
dec ebp
lea eax, [edx - 0xdd974c6]
inc cx
ror esi, 1
inc ecx
push eax
inc cx
neg esi
call fcn.100cd950