Function at 0xbaf2f7
Capabilities:
Encrypt data using aes

Disassembly:
mov cl, byte [ecx + 3]
clc
jmp 0xb7a616
cmp cl, 0x41
jb 0xb7a6f2
cmp cl, 0x5a
jmp 0xbaf2b1
mov eax, 0x403
jmp 0xbaeb39
push bp
mov word [esp], bx
jmp 0xbaf2cc
call fcn.00baf345
hlt
cmp cl, 0x61
jmp 0xbaf29b
cmp cl, 0x2b
jmp 0xbaf30d
call fcn.00baf90f
or eax, 0x8b781989
cmp byte [ebp + 0x2adfb82a], ch
wait
retf
push ecx
jmp 0xbaf434
jmp 0xbaf394
call 0xbaf4f6
adc dh, byte [eax + 0x37b04126]
sub eax, 0xb7443dad
or edi, dword [edi + ecx]
xchg esi, eax
add eax, eax
xor edi, dword [edx*4 + reloc.RASAPI32.dll_RasEnumEntriesA]
call fcn.00baeb2b
pop eax
jmp 0xbaebed
jmp 0xbaec08
push esi
cmp bl, 0x2b
jne 0xbaec59
jmp 0xbaf4fe
jne 0xbaecc9
je 0xbaec64
xlatb
push ecx
shl dword [eax - reloc.RASAPI32.dll_RasEnumEntriesA], 0x40
daa
shl byte [ebp - 0x2d], cl
dec edx
in eax, 0x14
xchg dword [esi], ebp
call fcn.00baebaa
xor dword [ecx + reloc.RASAPI32.dll_RasEnumEntriesA], edi
adc dword [edx + reloc.RASAPI32.dll_RasEnumEntriesA], ebx
jnp 0xbaec92
int 0x5c
scasd eax, dword es:[edi]
call fcn.00baf520
mov esp, 0x3ccdaa34
invalid
cmp bl, 0x2f
push bp
lea esp, [esp + 2]
jmp 0xbaec13
push 0x3f
jmp 0xbaec43
invalid
call fcn.00bafc1b
inc edi
rol dword [ecx + 0x20], 1
shl dword [edx - 0x39], cl
push edx
shl byte [edi - 0x35ac1bae], 0x65
xchg esp, eax
pop es
jmp 0xbaf53a
jmp 0xbaf52e
cmp dl, 0x2f
jmp 0xbaf5da
mov edx, dword [ebp - 8]
jmp 0xbaeda2
mov edx, dword [esp]
lea esp, [esp + 4]
and al, 0x8d
and al, 4
jmp 0xbaeda2
pushfd
push word [esp]
call fcn.00baf77f
push 0xffffffffffffff85
aaa
fild word [edx + ebx*8 - 0x43]
dec esp
mov dword [ecx + 0x70], esi
jae 0xbaed0d
stc
das
call fcn.00baf70f
inc esp
pop edi
invalid
cmp edi, 3
jmp 0xbaf694
mov ecx, dword [esp]
jmp 0xbaf6f4
call fcn.00baf7cc
pushfd
add byte [esi + 0x22b100f1], dl
mov ebp, 0x70c7342d
or al, 0x9f
out 0x11, al
nop
insd dword es:[edi], dx
jmp 0xbaf603
mov word [esp + 1], si
jmp 0xbaf266
jmp 0xbaf238
je 0xb7a60c
push cx
lea esp, [esp + 2]
jmp 0xbaf275
lea esp, [esp + 4]
je 0xb7a60c
cmp dl, 0x2f
jmp 0xbaf250
cmp dl, 0x3d
push edi
jmp 0xbaf2e7
jb 0xb7a6c4
jae 0xbaf2bd
mov cs, word [esi]
pushfd
sti
push ss
aam 0x1c
mov dword [reloc.RASAPI32.dll_RasEnumEntriesA], eax
xchg cx, ax
jbe 0xb7a6da
ja 0xb7a6f2
cmp cl, 0x7a
jbe 0xb7a6da
ja 0xb7a6c4
lea esp, [esp + 2]
cmp cl, 0x30
jmp 0xbaf410
lea esp, [esp + 4]
jne 0xb7a677
je 0xb7a60c
lea esp, [esp + 4]
jmp 0xbaf331
je 0xb7a6da
cmp cl, 0x2f
call 0xbaf2f7
cmp cl, 0x3d
jmp 0xbaf35b
je 0xb7a6da
sub esp, 0x1e
push ebp
lea esp, [esp + 2]
lea esp, [esp + 0x20]
jmp 0xbaf31b
je 0xb7a6da
jne 0xb7a677
lea esp, [esp + 8]
cmp dl, 0x3d
push bp
lea esp, [esp]
lea esp, [esp + 2]
jmp 0xbaf3ac
push eax
xor ebx, ebx
jmp 0xbaf3c2
jne 0xbaeb6f
push edx
lea esp, [esp + 4]
mov dword [edi], 1
jmp 0xbaeb59
lea esp, [esp + 4]
cmp cl, 0x3d
setne bl
push di
jmp 0xbaf3ec
cmp cl, 0x39
call fcn.00baf384
lea esp, [esp + 2]
inc ebx
pushfd
lea esp, [esp + 4]
jmp 0xbaf45f
pop edx
mov bl, byte [ebp - 1]
jmp 0xbaeb59
jb 0xb7a708
push ebp
push esp
lea esp, [esp + 8]
jmp 0xbaf3e4
lea esp, [esp + 0xc]
jne 0xbaeb85
je 0xbaf445
sbb edx, dword [ebx + 0x2c956603]
xchg esi, eax
add eax, eax
or dword [ebp + reloc.RASAPI32.dll_RasEnumEntriesA], 0x2b
lea esp, [esp + 4]
cmp al, 0x2b
pushal
lea esp, [esp + 0x11]
lea esp, [esp + 3]
jmp 0xbaf41e
push 0x3e
jmp 0xbaeba7
inc ebx
push edx
mov edx, edi
mov dword [edx], ebx
jmp 0xbaf3f8
push 0x3e
jmp 0xbaec43
push sp
lea esp, [esp + 2]
jmp 0xbb0672
mov edi, dword [edi]
clc
cmc
push edi
jmp 0xbaf573
lea esp, [esp + 8]
sub esi, 0x41
jmp 0xbaeca9
lea esp, [esp + 4]
cmp edi, 2
call fcn.00baf55c
invalid
jb 0xbaecf5
pushfd
lea esp, [esp + 4]
cmp dl, 0x2b
jmp 0xbaf593
push edx
call 0xbaf5f2
push esi
rcl dword [ecx + 0x30], 0xc3
ja 0xbaf57b
inc edi
xlatb
mov dl, 0x41
sti
jp 0xbaf5fc
les esi, [edi - 0x64]
jmp 0xbaf550
push 0x3f
jmp 0xbaed0b
jne 0xbaedfb
je 0xbaf5c4
seta byte [edi]
bound edx, qword [ecx - 0x61f768d5]
stc
or bl, cl
and eax, 0x556ec754
push esi
lea esp, [esp + 0x10]
and al, 0x10
jne 0xbaecdf
invalid
call fcn.00baf5c2
cmp dl, 0x39
call 0xbaf60c
jns 0xbaf5f5
pop edi
add dword [eax], eax
add cl, ch
jmp 0xbaf73f
inc esi
fimul dword [eax + 0x2f]
fisubr dword [ebx - 0x5c]
aas
scasd eax, dword es:[edi]
retf 0xf239
jne 0xbaed76
call fcn.00baf679
pop word [esp + 3]
lea esp, [esp + 2]
jmp 0xbaf6ba
lea esp, [esp + 4]
push 0x3e
jmp 0xbaedce
lea esp, [esp + 4]
jmp 0xbaede4
add esi, 4
jmp 0xbaeca9
mov dh, 9
add byte [eax], al
call 0xbb085d
jno 0xbafffd
jp 0xbb0038
in al, dx
pop edx
mov dword [ecx], edx
and eax, 0x9209a513
add byte [edi - 0x6e], ah
push edi
xchg ebx, eax
call fcn.00bb06cc
adc byte [eax + 0x3988791e], cl
mov esi, 0x2fdcb525
fsubr qword [edi]
lcall 0x58d8, 0xf9ee47d4
pop eax
jmp 0xbb0361
jmp 0xbb00e0
mov esi, dword [esp]
jmp 0xbb0889
push ebp
lea esp, [esp + 4]
cmp bl, 0x2b
jne 0xbb0158
je 0xbb0922
invalid
jmp 0xbb0138
push bp
lea esp, [esp + 2]
pop edx
jmp 0xbb016e
push sp
lea esp, [esp + 1]
lea esp, [esp + 1]
movzx edx, bl
jmp 0xbb0950
cmp bl, 0x2f
jmp 0xbb092e
call 0xbb09d6
pushfd
lea esp, [esp + 3]
lea esp, [esp + 1]
jmp 0xbb0a0e
dec esi
fdivr qword [ebx - 0x59a01aaa]
rcl dword [eax - 0x18]
pushfd
push es
add byte [eax], al
call 0xbb082c
les edx, [edi - 0x39]
mov byte [0xc852e951], al
pop esi
cmp eax, ecx
jl 0xbb0182
adc al, 0x87
cmp dword cs:[eax - reloc.RASAPI32.dll_RasEnumEntriesA], eax
jbe 0xbb01b0
cmp cl, 0x2f
pushfd
jmp 0xbb0a20
add byte [eax], al
add dword [edx + reloc.RASAPI32.dll_RasEnumEntriesA], ebx
popal
jmp [edi + 0xa]
call fcn.00bb09f1
inc eax
fimul word [ebx + ebp - 0x1a]
push edx
mov dl, 0x33
mov dword [reloc.RASAPI32.dll_RasEnumEntriesA], eax
mov eax, dword [reloc.RASAPI32.dll_RasEnumEntriesA]
pushal
jmp 0xbb1331
push esp
mov byte [esp], ah
jmp 0xbb0975
call 0xbb01d9
retf 0xdf4f
push esi
jmp 0xbb07d6
movzx esi, bl
cmp bl, 0x39
ja 0xbaec93
jbe 0xbafc6c
jb 0xbb002a
jae 0xbb070f
out 0x74, al
adc ebp, esi
pop edi
xchg edi, eax
dec cl
push 0x424648d
cmp cl, 0x30
jmp 0xbb0684
cmp cl, 0x39
jbe 0xbaffe4
ja 0xbb002a
pop word [esp]
lea esp, [esp + 2]
jmp 0xbb0736
cmp al, 0x2b
jne 0xbb0012
call 0xbb0744
inc edx
lea esp, [esp + 4]
jmp 0xbb0949
cmp dl, 0x2b
pushfd
jmp 0xbb07fc
lea esp, [esp + 4]
jne 0xbb018b
je 0xbb0842
mov bl, 0x21
mov cl, 0xd0
and edx, dword [eax - reloc.RASAPI32.dll_RasEnumEntriesA]
invalid
push 0x3e
jmp 0xbb00c5
lea esp, [esp + 4]
jmp 0xbb0097
push edx
lea esp, [esp + 4]
push 0x3e
jmp 0xbb012f
jne 0xbb0119
je 0xbb096e
popfd
add byte [esi + 0x1db500f1], dl
mov ebp, 0x42c7342d
or al, 0x8e
sbb al, 0x7b
xchg esi, eax
sub byte [edi - 0xf16c196], bl
idiv bh
inc dword [eax - reloc.RASAPI32.dll_RasEnumEntriesA]
cdq
clc
invalid
push 0x3e
jmp 0xbb0040
cmp bl, 0x39
ja 0xbb01f2
cmc
jmp 0xbb098b
push 0x3f
jmp 0xbb012f
lea esp, [esp + 4]
cmp bl, 0x5a
jmp 0xbb0993
add edx, 4
jmp 0xbb016e
ja 0xbb01bd
stc
sub edx, 0x41
jmp 0xbb016e
jne 0xbb01a1
call 0xbb09f8
push 0x3e
jmp 0xbb01d3
lea esp, [esp + 4]
jne 0xbb0208
push 0x3f
jmp 0xbb01d3
mov ecx, dword [esp + 0x20]
lea esp, [esp + 0x24]
jmp fcn.00bb02ce