Function at 0x101dbef0
Capabilities:
Encrypt data using aes

Disassembly:
lea edx, [eax*4]
jmp 0x101dbed2
xor edx, esi
mov si, 0x3381
jmp 0x101dbd44
movzx esi, byte [eax + 1]
mov bh, 0xe7
mov ebx, dword [esp]
mov ebp, dword [esp]
jmp 0x101dbc99
not edi
lea edi, [edi*4]
shl edx, 8
bts bx, bx
jmp 0x101dbcaf
xor edx, esi
mov esi, dword [esp]
bswap esi
jmp 0x101dbd27
lea ebx, [edx*4]
shl edx, 8
mov bx, word [esp]
dec bh
mov bx, word [esp]
jmp 0x101dbcdd
xor edx, esi
btc edi, edi
lea esi, reloc.KERNEL32.dll_IsValidLocale
movzx esi, byte [eax + 3]
jmp 0x101dbcf3
push esi
mov esi, ecx
mov dword [esi], edx
pop esi
jmp 0x101dbdfc
movzx esi, byte [eax + 2]
mov edi, 0x25c85592
lea ebp, [ebx + esi]
shl edx, 8
jmp 0x101dbd16
movzx esi, byte [eax + 6]
jmp 0x101dbd78
shl edx, 8
xor ebx, 0xcec2406d
xor edx, esi
jmp 0x101dbd55
shl edx, 8
lea ebx, [ebx*4]
mov bl, 0xd7
jmp 0x101dbdc5
pop dword [esp + 2]
setne bl
lea esp, [esp + 3]
lea esp, [esp + 0x18]
movzx esi, byte [eax + 5]
jmp 0x101dbd6b
shl edx, 8
neg bh
sub esp, 8
mov byte [esp + 2], ah
jmp 0x101dbdd2
xor edx, esi
movzx esi, byte [eax + 7]
mov ebx, edi
bsf ebp, esp
jmp 0x101dbda6
xor edx, esi
not bp
mov dword [ecx + 4], edx
jmp 0x101dbe76
movzx esi, byte [eax + 9]
lea edi, [esi*4]
not bx
mov bh, byte [esp]
not bx
jmp 0x101dbe3f
neg dl
mov esi, dword [esp]
mov ebx, 0x35aec215
movzx edx, byte [eax + 4]
sub esp, 0x1f
jmp 0x101dbd91
shl edx, 8
jmp 0x101dbe4c
bts ebp, ecx
movzx esi, byte [eax + 0xa]
mov bx, 0x7ade
mov di, 0x1944
jmp 0x101dbe0f
shl edx, 8
neg bp
setbe bl
xor edx, esi
jmp 0x101dbe25
xor edx, esi
movzx esi, byte [eax + 0xb]
shl edx, 8
jmp 0x101dbe5b
lea edi, [esp + eax]
xor edx, esi
push edi
jmp 0x101dbea4
lea esp, [esp + 8]
movzx edx, byte [eax + 8]
mov edi, 0x3442d9f5
neg bl
mov bp, word [esp]
jmp 0x101dbddf
mov edx, 0x57d590c2
jmp 0x101dbeae
mov edi, ecx
add edi, 8
mov dword [edi], edx
pop edi
jmp 0x101dbe8e
movzx edx, byte [eax + 0xc]
mov bp, si
ror bh, cl
push ax
lea esp, [esp + 2]
jmp 0x101dc45a
xchg dword [esp], edx
lea esp, [esp + 4]
push edi
movzx edx, byte [eax]
jmp 0x101dbccb
xor edx, esi
lea edi, [ebp - 0xb1]
call 0x101dbef0
dec esp
pop ebx
lea esp, [esp + 0x10]
jmp 0x101dc366
shl edx, 8
sbb bh, bh
sub esp, 0x15
pop dword [esp + 5]
xchg dword [esp + 0xc], ebp
lea esp, [esp + 1]
jmp 0x101dbee2
mov di, 0x4f80
push ebp
mov ebp, eax
jmp 0x101dbf6f
mov bp, cx
mov ebx, dword [esp]
lea esp, [esp + 0xc]
xor eax, 0x1000000
jmp 0x101dbf59
btc ebx, ecx
xchg bl, bh
mov esi, 0xff
and eax, esi
jmp 0x101dbf23
mov edi, edx
rcr bl, 4
add bl, dl
bt bx, si
rcl ebp, cl
jmp 0x101dbfae
lea ebp, [ebp*4]
lea ebp, reloc.KERNEL32.dll_IsValidLocale
mov eax, dword [ebp]
pop ebp
bswap ebp
jmp 0x101dbf2c
mov eax, edx
xchg bh, bl
shr eax, 0x10
seto bl
mov di, dx
jmp 0x101dbf4b
mov edi, dword [edi*4 + reloc.KERNEL32.dll_IsValidLocale]
bswap ebp
jmp 0x101dbfec
shr edi, 8
btc ebp, esp
and edi, esi
jmp 0x101dbf98
xor edx, eax
lea ebx, [esp + ebp]
mov dword [ecx + 0xc], edx
jmp 0x101dbf89
mov ebx, dword [ecx + 4]
mov ebp, 0xd61939cb
jmp 0x101dc05f
and edi, 0xff0000
lea ebx, [ebp*4]
jmp 0x101dbfd6
xor edx, esi
mov bx, word [esp]
neg bh
shl edx, 8
jmp 0x101dbfcc
shr edi, 0x18
clc
jmp 0x101dc043
lea ebp, [ecx + esi]
sub esp, 7
btr ebp, edi
mov bp, sp
lea esp, [esp + 3]
jmp 0x101dc01a
lea esp, [esp + 4]
movzx edi, byte [edi*4 + 0x101b2a7c]
push dx
bt ebp, edi
xchg word [esp], bp
jmp 0x101dc276
and eax, 0xff000000
xor eax, edi
mov edi, edx
jmp 0x101dc031
mov edi, dword [edi*4 + reloc.KERNEL32.dll_IsValidLocale]
neg ebp
neg bp
lea ebp, [esi + ebp]
clc
jmp 0x101dc218
mov edi, edx
mov ebp, dword [esp]
mov bp, sp
and edi, esi
jmp 0x101dc06a
mov dword [esi], eax
pop esi
stc
lea eax, reloc.KERNEL32.dll_IsValidLocale
jmp 0x101dc119
xor ebx, eax
push esi
mov esi, edi
jmp 0x101dc08c
push ebp
pushal
mov dword [esp + 8], ecx
call fcn.101dc0e1
loopne 0x101dc12e
out dx, al
mov dword [eax - 0x47], edi
into
push ebp
lds ebp, [edi + ebx*2 - 0x2108bb13]
xor eax, ebx
pushal
mov dword [ecx + 0x14], ebx
jmp 0x101dc0a9
mov eax, dword [ecx + 8]
sub esp, 0x11
sub esp, 0x1a
mov dword [esp + 0x18], ecx
lea esp, [esp + 3]
jmp 0x101dc0c3
btc di, bp
jmp 0x101dc154
shr ecx, 8
cmc
pushal
btr edi, ebx
jmp 0x101dc1a9
mov ecx, dword [ecx*4 + reloc.KERNEL32.dll_IsValidLocale]
shr edi, 0x10
and edi, esi
jmp 0x101dc193
lea edi, [ebx*4]
lea esp, [esp + 4]
xor eax, dword [ecx]
lea edi, [ecx + 0x10]
jmp 0x101dc0a2
mov edi, dword [edi*4 + reloc.KERNEL32.dll_IsValidLocale]
jmp 0x101dc1d6
mov edi, edx
and ecx, esi
sub esp, 0x1c
pop dword [esp + 0xa]
jmp 0x101dc15e
lea esp, [esp + 0x4c]
and ecx, 0xff0000
call fcn.101dc1b6
mov edi, edx
jmp 0x101dc23c
mov ebp, 0xff00
and edi, ebp
xor eax, edi
jmp 0x101dc17e
shr edi, 0x18
pushal
jmp 0x101dc25e
and edx, esi
stc
mov edx, dword [edx*4 + reloc.KERNEL32.dll_IsValidLocale]
jmp 0x101dc226
xor ecx, edi
lea edi, [ebp - 0xeb]
mov di, 0x933b
jmp 0x101dc29f
lea esp, [esp + 0x20]
movzx edi, byte [edi*4 + 0x101b2a7c]
stc
jmp 0x101dc248
pushfd
lea esp, [esp + 2]
xor eax, edi
mov di, word [esp]
xchg bp, di
jmp 0x101dc080
and edx, ebp
bts edi, ebx
bts di, bx
lea edi, [ebp + 0xc7]
call fcn.101dc289
pushfd
or bl, byte [eax + 0x3ebe0aff]
scasd eax, dword es:[edi]
aas
pop edx
test eax, 0x56c05476
xor eax, eax
jle 0x101dc2c3
sar byte [esi - 3], 0xcc
pop edi
int3
xchg dword [esp + 5], edi
lea esp, [esp + 3]
shl edx, 8
mov bp, word [esp]
mov bl, 0x50
jmp 0x101dc00d
movzx esi, byte [eax + 0xe]
push si
lea esp, [esp + 2]
movzx eax, byte [eax + 0xf]
sub esp, 0xf
jmp 0x101dc2c8
movzx esi, byte [eax + 0xd]
inc bl
lea ebp, [edx*4]
mov bh, 0x69
jmp 0x101dbf0d