Function at 0x6b462620
Capabilities:
Encode data using xor
Resolve function by parsing pe exports

Disassembly:
push ebp
xor eax, eax
push edi
push esi
push ebx
sub esp, 0x2c
mov ebx, dword [esp + 0x40]
mov esi, dword [esp + 0x44]
cmp dword [ebx + 0x84], 0xffffffff
je 0x6b46279f
mov eax, dword [ebx]
mov dword [esp], eax
call sym.libcrypto_1_1.dll_EVP_CIPHER_CTX_block_size
mov edi, eax
mov eax, dword [esp + 0x48]
mov dword [eax], edi
test esi, esi
je 0x6b46279a
mov ecx, dword [ebx + 0x84]
cmp edi, ecx
je 0x6b4627b0
mov eax, edi
mov byte [ebx + ecx + 0x64], pe_nt_image_headers32
sub eax, ecx
cmp eax, 1
jle 0x6b46268f
sub eax, 1
lea edx, [ebx + ecx + 0x65]
mov dword [esp + 4], 0
mov dword [esp + 8], eax
mov dword [esp], edx
call sym._memset
test edi, edi
jle 0x6b46277c
lea edx, [esi + 4]
lea eax, [ebx + 0x24]
cmp edx, eax
lea edx, [ebx + 0x68]
setbe al
cmp esi, edx
setae dl
or eax, edx
test esi, 3
sete dl
test al, dl
je 0x6b4628c8
lea eax, [edi - 1]
cmp eax, 2
jbe 0x6b4628c8
mov eax, edi
mov edx, dword [ebx + 0x64]
xor edx, dword [ebx + 0x24]
shr eax, 2
mov dword [esi], edx
cmp eax, 1
je 0x6b46273b
mov edx, dword [ebx + 0x68]
xor edx, dword [ebx + 0x28]
mov dword [esi + 4], edx
cmp eax, 2
je 0x6b46273b
mov edx, dword [ebx + 0x6c]
xor edx, dword [ebx + 0x2c]
mov dword [esi + 8], edx
cmp eax, 3
je 0x6b46273b
mov edx, dword [ebx + 0x70]
xor edx, dword [ebx + 0x30]
mov dword [esi + 0xc], edx
cmp eax, 4
je 0x6b46273b
mov edx, dword [ebx + 0x74]
xor edx, dword [ebx + 0x34]
mov dword [esi + 0x10], edx
cmp eax, 5
je 0x6b46273b
mov edx, dword [ebx + 0x78]
xor edx, dword [ebx + 0x38]
mov dword [esi + 0x14], edx
cmp eax, 6
je 0x6b46273b
mov edx, dword [ebx + 0x7c]
xor edx, dword [ebx + 0x3c]
mov dword [esi + 0x18], edx
cmp eax, 7
je 0x6b46273b
mov eax, dword [ebx + 0x80]
xor eax, dword [ebx + 0x40]
mov dword [esi + 0x1c], eax
mov edx, edi
and edx, 0xfffffffc
test edi, 3
je 0x6b46277c
movzx eax, byte [ebx + edx + 0x64]
lea ecx, [edx + 1]
xor al, byte [ebx + edx + 0x24]
mov byte [esi + edx], al
cmp edi, ecx
jle 0x6b46277c
movzx eax, byte [ebx + edx + 0x65]
lea ecx, [edx + 2]
xor al, byte [ebx + edx + 0x25]
mov byte [esi + edx + 1], al
cmp edi, ecx
jle 0x6b46277c
movzx eax, byte [ebx + edx + 0x66]
xor al, byte [ebx + edx + 0x26]
mov byte [esi + edx + 2], al
mov dword [esp + 0xc], edi
mov dword [esp + 8], esi
mov dword [esp + 4], esi
mov eax, dword [ebx]
mov dword [esp], eax
call sym.libcrypto_1_1.dll_EVP_Cipher
test eax, eax
je 0x6b4628a8
mov eax, 1
add esp, 0x2c
pop ebx
pop esi
pop edi
pop ebp
ret
test edi, edi
jle 0x6b46277c
lea eax, [ebx + 0x68]
cmp esi, eax
setae al
cmp ebx, esi
setae dl
or eax, edx
test esi, 3
sete dl
test al, dl
je 0x6b4628f0
lea eax, [edi - 1]
cmp eax, 2
jbe 0x6b4628f0
mov eax, edi
mov edx, dword [ebx + 4]
xor edx, dword [ebx + 0x64]
shr eax, 2
mov dword [esi], edx
cmp eax, 1
je 0x6b462852
mov edx, dword [ebx + 0x68]
xor edx, dword [ebx + 8]
mov dword [esi + 4], edx
cmp eax, 2
je 0x6b462852
mov edx, dword [ebx + 0x6c]
xor edx, dword [ebx + 0xc]
mov dword [esi + 8], edx
cmp eax, 3
je 0x6b462852
mov edx, dword [ebx + 0x70]
xor edx, dword [ebx + 0x10]
mov dword [esi + 0xc], edx
cmp eax, 4
je 0x6b462852
mov edx, dword [ebx + 0x74]
xor edx, dword [ebx + 0x14]
mov dword [esi + 0x10], edx
cmp eax, 5
je 0x6b462852
mov edx, dword [ebx + 0x78]
xor edx, dword [ebx + 0x18]
mov dword [esi + 0x14], edx
cmp eax, 6
je 0x6b462852
mov edx, dword [ebx + 0x7c]
xor edx, dword [ebx + 0x1c]
mov dword [esi + 0x18], edx
cmp eax, 7
je 0x6b462852
mov eax, dword [ebx + 0x80]
xor eax, dword [ebx + 0x20]
mov dword [esi + 0x1c], eax
mov edx, edi
and edx, 0xfffffffc
test edi, 3
je 0x6b46277c
movzx eax, byte [ebx + edx + 0x64]
lea ebp, [edx + 1]
xor al, byte [ebx + edx + 4]
mov byte [esi + edx], al
cmp ebp, ecx
jge 0x6b46277c
movzx eax, byte [ebx + edx + 0x65]
lea ebp, [edx + 2]
xor al, byte [ebx + edx + 5]
mov byte [esi + edx + 1], al
cmp ecx, ebp
jle 0x6b46277c
movzx eax, byte [ebx + edx + 0x66]
xor al, byte [ebx + edx + 6]
mov byte [esi + edx + 2], al
jmp 0x6b46277c
mov dword [esp + 4], edi
mov dword [esp], esi
mov dword [esp + 0x1c], eax
call sym.libcrypto_1_1.dll_OPENSSL_cleanse
mov eax, dword [esp + 0x1c]
add esp, 0x2c
pop ebx
pop esi
pop edi
pop ebp
ret
mov ecx, esi
lea edx, [ebx + 0x64]
lea ebp, [edi + esi]
movzx eax, byte [edx]
xor al, byte [edx - 0x40]
add ecx, 1
add edx, 1
mov byte [ecx - 1], al
cmp ecx, ebp
jne 0x6b4628d0
jmp 0x6b46277c
mov ecx, esi
lea edx, [ebx + 0x64]
lea ebp, [esi + edi]
lea esi, [esi]
nop
movzx eax, byte [edx - 0x60]
xor al, byte [edx]
add ecx, 1
add edx, 1
mov byte [ecx - 1], al
cmp ecx, ebp
jne 0x6b462900
jmp 0x6b46277c