Function at 0xbdf03f
Capabilities:
Encrypt data using aes

Disassembly:
pop edi
mov ebx, dword [esp]
jmp 0xbdf5a9
xchg ah, al
not edi
mov edi, dword [esp]
jmp 0xbab16a
cmp eax, 1
jmp 0xbdef62
mov bh, ah
not bl
jmp 0xbdef83
mov esi, dword [esp]
push edi
lea esi, [ebx*4]
jmp 0xbab102
pushal
lea esp, [esp + 0x24]
push esi
jmp 0xbab0c6
mov ebx, eax
shl ebx, 2
clc
jmp 0xbab113
mov esi, ecx
call fcn.00bc6622
and dword [ebp - 4], 0
jmp 0xbab0e8
mov dword [ebp - 8], eax
pushal
lea esp, [esp + 0x20]
test ebx, ebx
jmp 0xbab156
lea ecx, [esi + 8]
jmp 0xbab01b
jle 0xbab03d
not dx
lea edx, [esi + ebx*4 + 8]
cmc
jmp 0xbab140
mov eax, dword [edx - 8]
jmp 0xbded9e
cmp dl, 0x3d
jmp 0xbdfdf4
push ebp
mov ebp, ecx
add ebp, 0xfffffff8
jmp 0xbdf576
push esi
pushal
mov bh, dh
mov dword [esp + 4], edx
call fcn.00bdee1e
mov dword [ebp], edi
pop ebp
lea esp, [esp + 0x40]
sub ebx, 4
stc
jmp 0xbdeef9
add ecx, 0x10
jmp 0xbdef20
sub edx, 0x10
cmp dword [ebp - 4], ebx
pushal
jmp 0xbdefc4
add esi, 0xfffffff8
mov dword [esi], eax
pop esi
mov ax, word [esp]
jmp 0xbdeeda
lea esp, [esp + 0x1c]
lea ecx, [eax - 1]
mov edi, ebx
bt bx, ax
bsf ebx, ecx
jmp 0xbdef99
jle 0xbab005
pushal
pop dword [esp + 0x17]
neg ebx
or bx, bp
jmp 0xbdef4c
mov eax, dword [ebp - 8]
jmp 0xbab03d
movzx ebx, byte [esi + 0x11]
push sp
cmp edi, 0x92f698b4
not dl
jmp 0xbdefa6
mov dword [ebp - 4], ecx
mov ecx, 0xff
jmp 0xbab053
lea esp, [esp + 2]
push ebp
mov ebp, ebx
jmp 0xbdeffc
lea esp, [esp + 0x20]
jl 0xbab01b
push cx
pop ax
lea eax, [ecx + edx]
jmp 0xbdef7b
lea edi, [esp + ebx]
xchg dl, dh
lea edi, [ebp*4]
mov edx, dword [esi]
mov edi, ebp
jmp 0xbdf012
lea ebp, [ebp*4]
lea ebp, reloc.RASAPI32.dll_RasHangUpA
mov ebx, dword [ebp]
pop ebp
add esi, 0x10
jmp 0xbdefd7
mov edi, edx
call 0xbdf01a
jbe 0xbdefdc
out dx, eax
sbb al, ch
dec ecx
add byte [eax], al
add byte [ebx + 0x5bacbd3c], cl
mov ebx, 0x15ec8300
lea esp, [esp + 1]
jmp 0xbdf047
sub esp, 0x11
lea esp, [esp + 1]
push esi
mov esi, ecx
jmp 0xbdef3d
and edi, ecx
cmc
mov edi, dword [edi*4 + reloc.RASAPI32.dll_RasHangUpA]
jmp 0xbdf186
mov ebx, dword [ebx*4 + reloc.RASAPI32.dll_RasHangUpA]
and ebx, ecx
pushal
pop word [esp + 0x12]
call fcn.00bdf075
push esi
jmp 0xbdf0f0
pop esi
sub esp, 0xb
lea esp, [esp + 3]
jmp 0xbdf134
mov esi, edx
lea esi, [esi*4]
lea esi, reloc.RASAPI32.dll_RasHangUpA
mov edx, dword [esi]
jmp 0xbdf0da
mov edx, dword [esi + 4]
cmc
sub esp, 4
add esp, 0
jmp 0xbdf159
and edx, ecx
lea esp, [esp + 0x10]
xor edi, dword [edx*4 + reloc.RASAPI32.dll_RasHangUpA]
jmp 0xbdf11e
shr edi, 0x18
jmp 0xbdf166
mov dword [esi], edi
mov ebx, dword [ebx*4 + reloc.RASAPI32.dll_RasHangUpA]
mov edi, edx
jmp 0xbdf143
mov edi, dword [edi*4 + reloc.RASAPI32.dll_RasHangUpA]
push ax
mov byte [esp], bl
lea esp, [esp + 2]
jmp 0xbdf470
and ebx, ecx
lea esp, [esp + 0x1c]
xor edi, dword [ebx*4 + reloc.RASAPI32.dll_RasHangUpA]
movzx ebx, byte [esi + 2]
jmp 0xbdf08b
and edi, ecx
mov edi, dword [edi*4 + reloc.RASAPI32.dll_RasHangUpA]
push bp
cmc
call fcn.00bdf216
lea ecx, reloc.RASAPI32.dll_RasHangUpA
mov edi, dword [ecx]
pop ecx
push bx
clc
add esp, 1
jmp 0xbdf496
lea esp, [esp + 1]
jmp 0xbdf540
and edi, ecx
mov edi, dword [edi*4 + reloc.RASAPI32.dll_RasHangUpA]
sub esp, 5
push word [esp + 2]
call fcn.00bdf4d8
add ecx, 0xe
movzx ebx, byte [ecx]
pop ecx
mov ebx, dword [ebx*4 + reloc.RASAPI32.dll_RasHangUpA]
jmp 0xbdf964
mov edi, dword [ebp]
pop ebp
clc
add dword [ebp - 4], 4
stc
jmp 0xbdf038
pop esi
jmp 0xbdf5e1
pop ebx
call fcn.00bdf5cb
cmp cl, 0x2b
jmp 0xbdfd75
xor ebx, ebx
sub esp, 5
jmp 0xbdfe23
pop edi
pop ebx
jmp 0xbe0333
sub esp, 0x1f
mov dword [esp + 0x10], eax
push dword [esp + 7]
call fcn.00bdf7bd
push word [esp + 1]
lea esp, [esp + 3]
jmp 0xbdf994
lea esp, [esp + 0xc]
push ecx
stc
push ecx
call fcn.00bdfa0b
sub eax, 0xa25730a2
pushal
insd dword es:[edi], dx
out 0x77, eax
adc ah, cl
sub ebx, dword [edx + reloc.RASAPI32.dll_RasHangUpA]
jmp 0xbe02dd
je 0xbab2ee
pushfd
call fcn.00bdfdb0
xchg dword [ebx], ebx
mov ebp, esi
sbb eax, 0x68c9feda
mov eax, dword [eax - reloc.RASAPI32.dll_RasHangUpA]
pop edx
mov ch, 0xfc
dec dword [edi]
xchg dword [ebp - 8], ecx
invalid
jne 0xbdf603
push edi
push dword [esp + 2]
jmp 0xbdfe14
lea esp, [esp + 8]
mov dword [edi], 1
jmp 0xbdf65d
lea esp, [esp + 1]
jmp 0xbdfe63
lea esp, [esp + 4]
cmp cl, 0x3d
call fcn.00bdfe4d
xor eax, eax
jmp 0xbdf619
leave
ret