Function at 0x9f7c3e
Capabilities:
Encrypt data using aes

Disassembly:
push ebp
mov ebp, eax
add ebp, 3
movzx esi, byte [ebp]
jmp 0xa2b055
lea esi, reloc.KERNEL32.dll_HeapSize
mov dword [esp], esi
neg ebx
jmp 0x9f7c24
pop ebp
bts bp, sp
add bp, 0xcd20
mov bx, ax
jmp 0xa2b06d
shl edx, 8
and bl, ch
btc di, si
xor edx, esi
jmp 0xa2b07e
mov dword [ecx], edx
jmp 0xa2b0c1
lea esi, [edx + esi]
lea esp, [esp + 2]
mov dword [esp + 0x2c], eax
sub esp, 8
lea esp, [esp + 0x1c]
popal
jmp 0xa2b0f6
push ecx
pushal
sub esp, 0x1f
lea esp, [esp + 9]
jmp 0xa2b0a4
sub esp, 3
xchg dword [esp], esi
lea esp, [esp + 1]
movzx esi, byte [eax + 5]
neg bx
jmp 0xa2b141
xchg di, bx
jmp 0xa2b11a
add ecx, 4
movzx edx, byte [ecx]
pop ecx
push cx
mov ebx, dword [esp]
jmp 0xa2b0cc
bts ebp, edi
mov ebx, 0x4894e8cc
jmp 0xa2b150
movzx esi, byte [eax + 6]
mov bp, 0xe9c9
mov ebx, 0x2e9c1790
shl edx, 8
jmp 0xa2b104
shl edx, 8
mov bp, word [esp]
bsf bp, bp
xor edx, esi
jmp 0xa2b0df
xor edx, esi
mov ebx, edi
push edx
jmp 0xa2b1b8
bswap edi
rol di, cl
clc
shl edx, 8
mov ebp, 0x3c55518a
jmp 0xa2b18d
xchg ebx, edi
not bh
xor edx, esi
mov si, word [esp]
mov bh, 0xcf
jmp 0xa2b1a0
mov dword [ecx + 4], edx
jmp 0xa2b298
mov edx, eax
add edx, 7
movzx esi, byte [edx]
pop edx
btr ebx, edx
jmp 0xa2b157
movzx esi, byte [eax + 0xb]
xchg ebp, edi
shl edx, 8
lea ebp, [ebx*4]
not bh
jmp 0xa2b1f0
shl edx, 8
mov bx, word [esp]
xor edx, esi
mov bp, di
jmp 0xa2b1c6
xor edx, esi
lea edi, [edi*4]
sub esp, 0x18
pop dword [esp + 0xa]
jmp 0xa2b22f
xor edx, esi
movzx esi, byte [eax + 0xa]
xchg bp, di
jmp 0xa2b1e2
shl edx, 8
jmp 0xa2b23c
mov dword [ecx + 8], edx
movzx edx, byte [eax + 0xc]
movzx esi, byte [eax + 0xd]
jmp 0xa2b219
xor edx, esi
movzx esi, byte [eax + 0xe]
jmp 0xa2b27f
lea esp, [esp + 2]
movzx esi, byte [eax + 9]
mov ebx, 0xfa7e948
shl edx, 8
jmp 0xa2b20e
shl edx, 8
jmp 0xa2b2e6
movzx eax, byte [eax + 0xf]
jmp 0xa2b269
movzx edx, byte [eax + 8]
pushfd
dec esi
pop word [esp]
neg bx
jmp 0xa2b257
mov esi, 0xff
jmp 0xa2b2c7
mov dword [ecx + 0xc], edx
mov eax, edx
shr eax, 0x10
jmp 0xa2b2a7
and eax, esi
push edx
mov edx, eax
jmp 0xa2b305
lea esp, [esp + 0x40]
xor eax, 0x1000000
mov edi, 0x5dba93b4
jmp 0xa2b2ef
xor edx, esi
shl edx, 8
xor edx, eax
jmp 0xa2b2bd
mov ebx, 0x1c71da9f
sub bx, di
jmp 0xa2b32d
lea edx, [edx*4]
lea edx, reloc.KERNEL32.dll_HeapSize
mov eax, dword [edx]
pop edx
jmp 0xa2b2ce
popal
neg ebx
sbb bp, sp
jmp 0xa2bb86
pushal
mov bl, 0x48
xchg cl, ah
mov ax, word [esp]
mov dword [esp], edx
jmp 0xa2b317
mov edi, edx
sub esp, 0xf
pop bp
lea ebp, [eax*4]
jmp 0xa2b394
xor eax, edi
or ebp, edx
lea ebp, reloc.KERNEL32.dll_HeapSize
lea ebp, [ecx + 0x60]
jmp 0xa2b33b
mov ebx, dword [ecx + 4]
mov bp, 0xded4
mov ebp, dword [esp]
and eax, 0xff000000
jmp 0xa2b351
xor eax, edi
mov di, 0x4ae
neg bp
jmp 0xa2b3a5
lea esp, [esp + 1]
shr edi, 0x18
movzx edi, byte [edi*4 + 0xa02d78]
jmp 0xa2b37b
mov edi, edx
sub esp, 0x1d
bt ebp, ecx
lea esp, [esp + 1]
jmp 0xa2b47c
push eax
pushal
mov dword [esp + 0x1c], edi
sub esp, 0xa
clc
jmp 0xa2b3fa
and edi, 0xff0000
mov bp, 0xb7c3
not bp
dec bh
mov bx, 0x64ca
jmp 0xa2b36a
mov edi, dword [eax]
pop eax
jmp 0xa2b439
lea esp, [esp + 2]
lea esp, [esp + 8]
popal
lea eax, [eax*4]
lea eax, reloc.KERNEL32.dll_HeapSize
jmp 0xa2b3e4
xor eax, edi
inc di
pushal
call 0xa2b41d
or al, 0x8d
and al, 0x60
xor eax, dword [ecx]
jmp 0xa2b45b
mov ebp, 0xff00
sub esp, 0x14
and edi, ebp
jmp 0xa2b412
lea edi, [ecx*4]
call fcn.00a2b445
js 0xa2b462
imul ecx, dword [eax], reloc.KERNEL32.dll_HeapSize
dec eax
das
fisubr dword [ecx - 0x48]
aas
scasd eax, dword es:[edi]
retf 0x8539
and edi, esi
rol ebp, 0x19
pushfd
mov ebp, 0xe915619a
pop ebp
jmp 0xa2b3b6
mov bl, byte [esp]
mov edi, dword [edi*4 + reloc.KERNEL32.dll_HeapSize]
cmc
mov bh, al
lea ebx, [esi*4]
jmp 0xa2b3cf
shr edi, 8
mov bx, 0xb220
not bh
and edi, esi
jmp 0xa2b824