Function at 0x6fa14240
Capabilities:
Encrypt data using aes
Inspect section memory permissions
Reference aes constants
Resolve function by parsing pe exports

Disassembly:
push ebp
push edi
push esi
push ebx
sub esp, 0x5c
mov eax, dword [esp + 0x70]
test eax, eax
je 0x6fa145da
mov ecx, dword [esp + 0x74]
test ecx, ecx
je 0x6fa14612
mov edx, dword [esp + 0x78]
test edx, edx
je 0x6fa145f6
mov edi, dword [esp + 0x78]
mov ebx, dword [eax]
mov esi, dword [eax + 4]
mov ebp, dword [eax + 8]
mov edx, dword [eax + 0xc]
bswap ebx
mov ecx, dword [edi + 0x1e0]
xor ebx, dword [edi]
bswap esi
xor esi, dword [edi + 4]
bswap ebp
bswap edx
xor ebp, dword [edi + 8]
xor edx, dword [edi + 0xc]
sar ecx, 1
mov dword [esp + 0x10], edi
mov dword [esp + 0x4c], ecx
mov dword [esp + 0x48], ecx
mov ecx, edi
mov dword [esp + 0x14], ebx
mov dword [esp + 0x18], esi
jmp 0x6fa1436d
mov ecx, dword [esp + 0x14]
mov edi, dword [esp + 0x20]
mov edx, dword [edx*4 + 0x6fab0b40]
xor edx, dword [ebx*4 + 0x6faaf740]
mov ecx, dword [ecx*4 + 0x6fab0b40]
xor ecx, dword [edi*4 + 0x6faaf740]
xor ecx, dword [esp + 0x24]
mov edi, dword [esp + 0x34]
xor ecx, dword [esi*4 + 0x6faaff40]
mov esi, dword [esp + 0x1c]
xor ecx, dword [esi*4 + 0x6faafb40]
mov esi, dword [esp + 0x10]
mov dword [esp + 0x14], ecx
mov ecx, dword [esp + 0x28]
mov ecx, dword [ecx*4 + 0x6fab0b40]
xor ecx, dword [edi*4 + 0x6faaf740]
mov edi, dword [esp + 0x2c]
xor ecx, dword [esi + 4]
mov esi, dword [esp + 0x30]
xor ecx, dword [edi*4 + 0x6faaff40]
mov edi, dword [esp + 0x40]
xor ecx, dword [esi*4 + 0x6faafb40]
mov esi, dword [esp + 0x10]
xor edx, dword [esi + 0xc]
mov dword [esp + 0x18], ecx
mov ecx, dword [esp + 0x38]
mov ecx, dword [ecx*4 + 0x6fab0b40]
xor ecx, dword [edi*4 + 0x6faaf740]
xor ecx, dword [esi + 8]
xor ecx, dword [ebp*4 + 0x6faaff40]
mov ebp, dword [esp + 0x3c]
xor ecx, dword [ebp*4 + 0x6faafb40]
mov ebx, dword [esp + 0x44]
xor edx, dword [ebx*4 + 0x6faaff40]
xor edx, dword [eax*4 + 0x6faafb40]
mov ebp, ecx
mov ecx, esi
mov eax, dword [esp + 0x14]
movzx esi, dl
mov edi, eax
shr edi, 0x18
mov eax, dword [edi*4 + 0x6fab0b40]
xor eax, dword [esi*4 + 0x6faaf740]
mov esi, dword [esp + 0x18]
xor eax, dword [ecx + 0x10]
mov ebx, esi
shr ebx, 0x10
movzx ecx, bl
mov ebx, ebp
xor eax, dword [ecx*4 + 0x6faaff40]
movzx edi, bh
movzx ecx, byte [esp + 0x14]
xor eax, dword [edi*4 + 0x6faafb40]
mov edi, dword [esp + 0x10]
mov dword [esp + 0x18], eax
mov eax, esi
shr eax, 0x18
mov ebx, dword [eax*4 + 0x6fab0b40]
mov eax, ebp
xor ebx, dword [ecx*4 + 0x6faaf740]
shr eax, 0x10
xor ebx, dword [edi + 0x14]
movzx edi, dh
movzx ecx, al
mov eax, esi
xor ebx, dword [ecx*4 + 0x6faaff40]
mov ecx, ebp
xor ebx, dword [edi*4 + 0x6faafb40]
mov edi, esi
movzx esi, al
mov eax, dword [esp + 0x10]
shr ecx, 0x18
mov ecx, dword [ecx*4 + 0x6fab0b40]
xor ecx, dword [esi*4 + 0x6faaf740]
xor ecx, dword [eax + 0x18]
mov eax, edx
shr edx, 0x18
shr eax, 0x10
mov edx, dword [edx*4 + 0x6fab0b40]
movzx esi, al
mov eax, dword [esp + 0x14]
xor ecx, dword [esi*4 + 0x6faaff40]
movzx esi, ah
mov eax, ebp
movzx ebp, al
mov eax, dword [esp + 0x14]
xor ecx, dword [esi*4 + 0x6faafb40]
xor edx, dword [ebp*4 + 0x6faaf740]
mov ebp, dword [esp + 0x10]
shr eax, 0x10
xor edx, dword [ebp + 0x1c]
add ebp, 0x20
movzx esi, al
mov dword [esp + 0x10], ebp
mov ebp, dword [esp + 0x18]
mov eax, edi
xor edx, dword [esi*4 + 0x6faaff40]
movzx edi, ah
mov eax, ebx
xor edx, dword [edi*4 + 0x6faafb40]
shr eax, 0x10
movzx edi, ch
shr ebp, 0x18
movzx esi, al
mov dword [esp + 0x14], ebp
mov dword [esp + 0x1c], edi
mov eax, dword [esp + 0x10]
movzx ebp, dl
mov dword [esp + 0x20], ebp
mov ebp, ebx
mov edi, dword [eax]
mov eax, ecx
shr ebp, 0x18
shr eax, 0x10
mov dword [esp + 0x28], ebp
movzx ebp, dh
mov dword [esp + 0x30], ebp
mov dword [esp + 0x24], edi
movzx edi, al
mov dword [esp + 0x2c], edi
mov edi, dword [esp + 0x18]
mov eax, edi
movzx ebp, al
mov eax, ecx
shr eax, 0x18
mov dword [esp + 0x34], ebp
mov dword [esp + 0x38], eax
mov eax, edx
shr edx, 0x18
shr eax, 0x10
movzx ebp, al
mov eax, edi
movzx eax, ah
mov dword [esp + 0x3c], eax
movzx eax, bl
mov dword [esp + 0x40], eax
mov eax, edi
shr eax, 0x10
sub dword [esp + 0x48], 1
movzx edi, al
movzx eax, bh
movzx ebx, cl
mov dword [esp + 0x44], edi
jne 0x6fa142b0
mov ecx, esi
mov esi, eax
mov eax, dword [esp + 0x14]
mov edi, dword [esp + 0x4c]
mov eax, dword [eax*4 + 0x6faae740]
xor eax, dword [ecx*4 + 0x6faaeb40]
mov ecx, dword [esp + 0x1c]
xor eax, dword [esp + 0x24]
shl edi, 5
add edi, dword [esp + 0x78]
xor eax, dword [ecx*4 + 0x6faaef40]
mov ecx, dword [esp + 0x20]
xor eax, dword [ecx*4 + str.cwko0]
mov ecx, dword [esp + 0x74]
bswap eax
mov dword [ecx], eax
mov ecx, dword [esp + 0x2c]
mov eax, dword [esp + 0x28]
mov eax, dword [eax*4 + 0x6faae740]
xor eax, dword [ecx*4 + 0x6faaeb40]
mov ecx, dword [esp + 0x30]
xor eax, dword [edi + 4]
xor eax, dword [ecx*4 + 0x6faaef40]
mov ecx, dword [esp + 0x34]
xor eax, dword [ecx*4 + str.cwko0]
mov ecx, dword [esp + 0x74]
bswap eax
mov dword [ecx + 4], eax
mov eax, dword [esp + 0x38]
mov ecx, dword [esp + 0x40]
mov eax, dword [eax*4 + 0x6faae740]
xor eax, dword [ebp*4 + 0x6faaeb40]
mov ebp, dword [esp + 0x3c]
xor eax, dword [edi + 8]
xor eax, dword [ebp*4 + 0x6faaef40]
mov ebp, dword [esp + 0x74]
xor eax, dword [ecx*4 + str.cwko0]
bswap eax
mov dword [ebp + 8], eax
mov eax, dword [edx*4 + 0x6faae740]
mov edx, dword [esp + 0x44]
xor eax, dword [edx*4 + 0x6faaeb40]
xor eax, dword [edi + 0xc]
xor eax, dword [esi*4 + 0x6faaef40]
xor eax, dword [ebx*4 + str.cwko0]
bswap eax
mov dword [ebp + 0xc], eax
add esp, 0x5c
xor eax, eax
pop ebx
pop esi
pop edi
pop ebp
ret
mov dword [esp + 8], 0x124
mov dword [esp + 4], str.src_ciphers_aes_aes.c
mov dword [esp], 0x6faac9b6
call fcn.6fa1c540
mov dword [esp + 8], 0x126
mov dword [esp + 4], str.src_ciphers_aes_aes.c
mov dword [esp], str.skey___NULL
call fcn.6fa1c540
mov dword [esp + 8], 0x125
mov dword [esp + 4], str.src_ciphers_aes_aes.c
mov dword [esp], 0x6faac9c1
call fcn.6fa1c540
nop