Function at 0x6d62f3
Capabilities:
Encrypt data using aes
Reference aes constants

Disassembly:
cmp eax, 1
jmp 0x6d62e7
lea edi, reloc.iphlpapi.dll_GetAdaptersInfo
sub esp, 9
lea edi, [ebx + ebx]
lea esp, [esp + 1]
jmp 0x6d632a
pop edi
mov bx, cx
mov esi, 0xb6d38d6
jmp 0x6d6912
lea eax, reloc.iphlpapi.dll_GetAdaptersInfo
setne ah
mov di, 0xbaf3
jmp 0x6d6128
mov byte [esp + 2], bl
lea esp, [esp + 4]
push edi
lea esi, [ebx*4]
mov si, 0x7369
jmp 0x6a3ebd
jmp 0x6a3e6b
lea ebx, reloc.iphlpapi.dll_GetAdaptersInfo
mov ebx, eax
call 0x6a3ea1
dec ecx
shl ebx, 2
sub esp, 0
jmp 0x6a3ee7
mov esi, ecx
call fcn.006bf257
and dword [ebp - 4], 0
jmp 0x6a3e93
lea esp, [esp + 8]
test ebx, ebx
jle 0x6a3db9
jg 0x6a3f0a
add edi, dword [edx - reloc.iphlpapi.dll_GetAdaptersInfo]
fdiv dword [eax + reloc.iphlpapi.dll_GetAdaptersInfo]
add dword [eax + 0x27], 0x66f84589
push esp
mov dword [ebp - 8], eax
push sp
lea esp, [esp]
push word [esp + 1]
jmp 0x6a3eca
lea edx, [esi + ebx*4 + 8]
lea eax, [ebx + esi]
btc eax, ecx
xchg edi, eax
xchg ah, cl
jmp 0x6a3f1d
lea ecx, [esi + 8]
jmp 0x6a3e31
lea eax, [eax*4]
jmp 0x6d616b
mov eax, dword [edx - 8]
call fcn.006d6155
insd dword es:[edi], dx
invalid
jle 0x6a3df1
call 0x6d62f3
lodsd eax, dword [esi]
pushal
neg bl
lea esp, [esp + 0x24]
jmp 0x6d6343
add edi, 0xfffffffc
mov dword [edi], ecx
pop edi
xchg cx, di
mov edx, dword [esp]
jmp 0x6d631b
mov ecx, 0xd9860870
push ecx
add esp, 2
lea esp, [esp + 2]
jmp 0x6d6361
movzx ebx, byte [esi + 0x11]
mov dl, byte [esp]
mov dl, al
mov dx, word [esp]
jmp 0x6d634b
lea ecx, [eax - 1]
push edi
mov edi, ebp
jmp 0x6d62fc
mov ebx, dword [ebx*4 + reloc.iphlpapi.dll_GetAdaptersInfo]
shr dl, cl
jmp 0x6d636c
add ecx, 0x2679f88f
jmp 0x6a3dd9
lea esp, [esp + 8]
add esi, 0x10
mov edx, dword [esi]
jmp 0x6d63c8
pushal
mov dword [esp], edx
call fcn.006d6377
mov ebp, edi
lea ebp, [ebp*4]
lea ebp, reloc.iphlpapi.dll_GetAdaptersInfo
mov edi, dword [ebp]
jmp 0x6d6424
movzx ebx, byte [esi + 2]
jmp 0x6d644c
lea esp, [esp + 0x24]
xor edi, dword [ebx*4 + reloc.iphlpapi.dll_GetAdaptersInfo]
jmp 0x6d63f7
pop ebp
and ebx, ecx
push eax
lea esp, [esp + 1]
lea esp, [esp + 3]
jmp 0x6d640d
lea esp, [esp + 0x20]
xor edi, dword [ebx*4 + reloc.iphlpapi.dll_GetAdaptersInfo]
or bx, 0xcd7b
jmp 0x6d646e
mov ebx, dword [ebx*4 + reloc.iphlpapi.dll_GetAdaptersInfo]
and ebx, ecx
pushal
jmp 0x6d6432
and edx, ecx
jmp 0x6d64af
movzx ebx, byte [esi + 5]
jmp 0x6d6458
lea esp, [esp + 0x18]
xor edi, dword [edx*4 + reloc.iphlpapi.dll_GetAdaptersInfo]
neg dx
jmp 0x6d64c1
mov edx, dword [edx*4 + reloc.iphlpapi.dll_GetAdaptersInfo]
and edx, ecx
sub esp, 0x19
lea esp, [esp + 1]
jmp 0x6d6499
mov edx, 0xcd60386c
mov edx, dword [esi + 4]
cmc
jmp 0x6d6504
lea edi, [edi*4]
lea edi, [ebx*4]
lea edi, [ecx + 0xfa]
jmp 0x6d65c1
push ecx
mov ecx, esi
mov dword [ecx], edi
pop ecx
jmp 0x6d64e9
lea esp, [esp + 3]
jmp 0x6d6547
push bp
lea esp, [esp + 2]
shr edi, 0x18
cmc
sub esp, 0xb
jmp 0x6d650c
and ebx, ecx
jmp 0x6d6588
mov edi, dword [edi*4 + reloc.iphlpapi.dll_GetAdaptersInfo]
and edi, ecx
mov edi, dword [edi*4 + reloc.iphlpapi.dll_GetAdaptersInfo]
jmp 0x6d6531
and ebx, ecx
jmp 0x6d6599
mov ebx, dword [ebx*4 + reloc.iphlpapi.dll_GetAdaptersInfo]
jmp 0x6d6559
lea esp, [esp + 8]
xor edi, dword [ebx*4 + reloc.iphlpapi.dll_GetAdaptersInfo]
movzx ebx, byte [esi + 6]
jmp 0x6d656f
xor edi, dword [ebx*4 + reloc.iphlpapi.dll_GetAdaptersInfo]
mov ebx, 0xa0e13018
sub esp, 0x17
mov bx, word [esp + 0x14]
lea esp, [esp + 3]
jmp 0x6d665e
bswap edi
mov ebx, dword [ebx*4 + reloc.iphlpapi.dll_GetAdaptersInfo]
not edi
mov edi, edx
jmp 0x6d6522
movzx ebx, byte [esi + 9]
pushfd
and edx, ecx
call 0x6d6609
pushfd
pop word [esp]
lea esp, [esp + 2]
popal
pushal
mov byte [esp + 0x16], bh
jmp 0x6d66a5
and edi, ecx
jmp 0x6d66b6
shr edi, 0x18
mov edi, dword [edi*4 + reloc.iphlpapi.dll_GetAdaptersInfo]
push edx
mov word [esp], di
jmp 0x6d668f
mov edi, dword [edi*4 + reloc.iphlpapi.dll_GetAdaptersInfo]
jmp 0x6d6e03
mov edx, dword [esi]
pop esi
stc
and edx, ecx
sub esp, 0x11
jmp 0x6d6745
mov edx, dword [esi + 0xc]
sub esp, 9
lea esp, [esp + 1]
jmp 0x6d6719
push esi
mov esi, edx
lea esi, [esi*4]
lea esi, reloc.iphlpapi.dll_GetAdaptersInfo
jmp 0x6d66e3
mov dword [esi + 8], edi
lea edi, [esi + edi]
lea edi, reloc.iphlpapi.dll_GetAdaptersInfo
neg edi
jmp 0x6d67e2
sub esp, 0xc
mov word [esp + 4], bp
add esp, 8
jmp 0x6d6791
push word [esp + 0x10]
lea esp, [esp + 3]
lea esp, [esp + 0x34]
xor edi, dword [edx*4 + reloc.iphlpapi.dll_GetAdaptersInfo]
mov edx, 0x30b510fb
jmp 0x6d66ee
pushfd
and edx, ecx
cmc
pushal
jmp 0x6d6707
stc
jmp 0x6d67b5
shr edi, 0x18
mov edi, dword [edi*4 + reloc.iphlpapi.dll_GetAdaptersInfo]
and edi, ecx
jmp 0x6d677b
mov edi, dword [edi*4 + reloc.iphlpapi.dll_GetAdaptersInfo]
and ebx, ecx
call fcn.006d679f
xor edi, dword [ebx*4 + reloc.iphlpapi.dll_GetAdaptersInfo]
movzx ebx, byte [esi + 0xe]
jmp 0x6d6863
mov ebx, dword [ebx*4 + reloc.iphlpapi.dll_GetAdaptersInfo]
mov edi, dword [esp]
mov edi, 0x3a351b61
stc
mov edi, edx
jmp 0x6d672d
mov edx, dword [edx*4 + reloc.iphlpapi.dll_GetAdaptersInfo]
and ebx, ecx
call fcn.006d67f9
mov dword [esi + 0xc], edi
call fcn.006d6885
fld qword [edx + ebx*8 - 0x43]
dec esp
jmp [ebp - 0xf]
mov ebx, dword [ebx*4 + reloc.iphlpapi.dll_GetAdaptersInfo]
and edx, ecx
cmc
jmp 0x6d681f
xor edi, dword [ebx*4 + reloc.iphlpapi.dll_GetAdaptersInfo]
neg bl
mov ebx, dword [esp]
movzx ebx, byte [esi + 0xd]
jmp 0x6d6774
mov word [esp], si
mov byte [esp], ch
lea esp, [esp + 2]
leave
ret
bswap esi
pop esi
pop ebx
push si
jmp 0x6d68d9
movzx ebx, byte [esi + 0xa]
mov ebx, dword [ebx*4 + reloc.iphlpapi.dll_GetAdaptersInfo]
and ebx, ecx
jmp 0x6d689d
and ebx, ecx
lea esp, [esp + 0x40]
xor edi, dword [ebx*4 + reloc.iphlpapi.dll_GetAdaptersInfo]
lea ebx, [esi*4]
jmp 0x6d69d3