Function at 0x10f83bf
Capabilities:
Encrypt data using aes

Disassembly:
mov ebx, dword [ebx*4 + reloc.SHELL32.dll_SHGetSpecialFolderPathW]
and edx, ecx
call fcn.010f6e85
cmp bl, 0x5a
call fcn.010f7dcf
lahf
adc al, byte [eax + 0x3ad12e7]
xchg edi, eax
pop es
bound edx, qword [ecx - 0x4ac775d4]
and eax, 0x2a78bf4c
cmpsb byte [esi], byte es:[edi]
xor al, 0x53
scasb al, byte es:[edi]
adc dword [edi - 0x42], edx
mov dword [edx - 0x17], edx
cmpsd dword [esi], dword es:[edi]
push cs
add byte [eax], al
cmp ch, byte [eax]
mov al, 0x26
inc ecx
mov al, 0x74
lodsd eax, dword ss:[esi]
cmp eax, 0x3c73b744
setbe byte [eax - 0x73]
and al, 0xb
push edx
jmp 0x10f7df2
push dword [esp + 4]
jmp 0x10f7e10
sub byte [ebx - 0x1e], cl
push esp
lea esp, [esp + 4]
cmp dl, 0x39
pushal
jmp 0x10f83db
call 0x10f7f2c
dec esi
rcl dword [ecx + 0x30], 0xc3
jle 0x10f6f86
inc edi
xlatb
mov dl, 0x41
cld
jp 0x10f700f
les esi, [edi + 0x5e]
add ebp, eax
pop edi
adc al, byte [eax]
add byte [esi - 0x492cbc53], dl
inc ebp
xchg ebp, eax
add al, 0x9a
std
or al, 0xb9
xor dword [edi + 0x52], edi
mov dword [esp], eax
push dword [esp + 2]
jmp 0x10f7f7d
mov byte [ecx], al
xchg ecx, eax
invalid
xor byte [ebx - 0x3a], 0xe2
jb 0x10f6fef
xchg dword [edx - 0x3d], esi
ljmp 0xf
pushal
call 0x10f7fa3
fild dword [ebp - 0x3b]
push ebp
cmp al, 0xcf
or esi, ebp
jbe 0x10f7009
cmp dword [esi - 0x41], reloc.SHELL32.dll_SHGetSpecialFolderPathW
push cs
cdq
call fcn.010f80bf
mov bh, 0x1b
mov ebp, esi
sbb eax, 0x127cfe9c
jne 0x10f6fbf
inc edx
leave
push 0xe85d228b
xchg ecx, eax
adc al, byte [eax]
add byte [edx - 0x20], ch
jbe 0x10f705b
loopne 0x10f70aa
xchg esp, eax
sbb eax, 0xe327d48d
in al, dx
inc esi
jno 0x10f70c7
cmpsd dword [esi], dword es:[edi]
movsb byte es:[edi], byte ss:[esi]
ret
mov esp, dword ds:[edi + reloc.SHELL32.dll_SHGetSpecialFolderPathW]
jmp 0x10f8036
iretd
xor dword [eax - 0x4c], reloc.SHELL32.dll_SHGetSpecialFolderPathW
ja 0x10f7063
cld
iretd
push edi
xchg esp, eax
pop esp
scasd eax, dword es:[edi]
mov dh, 0xa1
loopne 0x10f70f2
inc ecx
sal dword [eax + reloc.SHELL32.dll_SHGetSpecialFolderPathW], 1
cli
aad 0x44
call fcn.010f81e0
mov al, byte [0x3bc8a939]
mov dword [edx + reloc.SHELL32.dll_SHGetSpecialFolderPathW], eax
fdivp st(3)
sbb cl, byte [eax - 0x421e511]
ror byte [ebp - 0x24], cl
das
call fcn.010f83b7
add byte [eax], al
add bl, dh
js 0x10f70e5
js 0x10f70e5
mov dword [eax - 0x42], edi
fist word [ebp - 0x3b]
lodsb al, byte [esi]
pop edi
sahf
inc esp
neg esi
sub dword [eax - 0x11], ecx
jnp 0x10f70f3
invalid
call fcn.010f8401
push 0xf10267f7
cmp dword [esi - 0x18], esi
jle 0x10f716d
call 0x2843f6b7
dec esi
fstp dword [ecx]
adc byte [esi], 0x71
add byte [esi - 0x43], 0x8c
pop ds
lea sp, [esp + 0x54]
xor edi, dword [ebx*4 + reloc.SHELL32.dll_SHGetSpecialFolderPathW]
movzx ebx, byte [esi + 0xe]
cmp ecx, dword [reloc.SHELL32.dll_SHGetSpecialFolderPathW]
push cs
stc
jmp 0x10f6f12
mov byte [esp + 1], ah
mov edi, dword [edi]
cmc
call fcn.010f7e83
inc edi
fisttp dword [ebx + 0x2e]
invalid
push word [esp + 1]
lea esp, [esp + 3]
lea esp, [esp + 0x18]
sub esi, 0x47
jmp 0x10f6f45
push 0x3f
jmp 0x10f6fa7
jne 0x10f6f89
je 0x10f7f4c
cmpsd dword [esi], dword es:[edi]
and dh, byte [eax - 0x141edd29]
not dword [bp + si - reloc.SHELL32.dll_SHGetSpecialFolderPathW]
sbb dh, byte [ebp + 0x64]
xchg edi, eax
lea esp, [esp + 8]
cmp dl, 0x2f
jmp 0x10f7f65
lea esp, [esp + 4]
add edx, 4
jmp fcn.010f6fbd
mov byte [esp + 2], ah
mov word [esp], bx
mov dword [esp], esi
mov edx, dword [ebp - 8]
jmp 0x10f8397
movzx edx, dl
cmc
push edx
mov byte [esp + 1], dh
jmp 0x10f7fcb
lea esp, [esp + 4]
jmp fcn.010f6fbd
jmp 0x10f84b9
mov dword [esp + 1], ecx
push word [esp + 3]
call fcn.010f8418
mov dl, byte [esi]
test bl, ah
push ds
stosb byte es:[edi], al
pop es
scasb al, byte es:[edi]
mov ecx, 0x2474ff66
add eax, 0x1924648d
push word [esp + 5]
lea esp, [esp + 0x19]
lea esp, [esp + 1]
lea esp, [esp + 8]
ja 0x10f7015
jbe 0x10f8059
lea esp, [esp + 0xc]
jmp 0x10f7145
pop word [esp]
push word [esp + 1]
lea esp, [esp + 4]
jne 0x10f7145
sub esp, 8
jmp 0x10f83c4