Function at 0x6e07da
Capabilities:
Encode data using xor

Disassembly:
adc ch, byte [eax + 0x52]
mov byte [0xb8e4710c], al
or esp, dword [edx - 0x40]
movsb byte es:[edi], byte [esi]
mov al, 0x23
mov dl, 0x30
dec edx
invalid
and cl, dh
push 0x71291f4c
pop esp
mov byte [0xa2410f1d], al
or al, 0x71
mov esp, 0x5c719a91
mov byte [0xa24c680c], al
or al, 0x71
adc bh, byte [ebx - 0x3d9d315d]
idiv byte [ebp + edi - 0x18]
test al, 0xf0
ficom word [ecx + 0x67dfd01c]
mov dl, 0xad
jno 0x6dd7a9
or al, 0x8e
fdiv dword [esi + 0xc]
jno 0x6dd880
ret 0xc1d
cmpsd dword [esi], dword es:[edi]
invalid
mov edi, 0xfa30addd
mov esp, 0x3033d924
lahf
and dword [edx + 0x26], 0x38
sub al, 0xbe
pop ebp
inc eax
test eax, 0x3e1c12ab
cmp esi, dword [edx - 0x287e329c]
mov dword [0xab5c710c], eax
xor byte [0xa37438bd], dl
cmp byte [eax], 0x99
dec ecx
mov esi, 0x5c7d74bb
mov byte [0xd1ca7e0f], al
lcall 0x5c71, 0x1bbb4ec8
jle 0x6ddb02
rcr dword [edx + 0x1bbb4ec8], 1
jno 0x6ddb9c
mov byte [0x1b33754c], al
pushfd
xlatb
inc eax
and cl, byte [eax]
invalid
ret 0x548c
pop edi
pushal
popal
popal
xor eax, eax
jnp 0x6df82a
clc
lodsb al, byte [esi]
jmp 0x6df844
cmc
push edx
mov dl, al
push ecx
mov ch, dl
mov bl, ch
pop ecx
pop edx
pushal
ja 0x6df857
stc
mov eax, 0x3ada5260
popal
push edx
push eax
mov ah, 0xbe
add ah, 0xfb
not ah
or ah, 0x89
add ah, 0x6e
mov dh, ah
pop eax
shl dh, 2
sub dh, 4
and bl, dh
pop edx
cld
cmp bl, 0x70
je 0x6dfe70
pushal
jmp 0x6df89c
jo 0x6df8a4
mov edx, eax
popal
jmp 0x6df8b9
cmp al, 0xf
je 0x6df9e5
cmc
cmp al, 0xe9
je 0x6e0410
stc
pushal
xor bx, 0xd16
xor dx, 0xf262
popal
cmp al, 0xeb
je 0x6e0840
cmc
pushal
mov di, bx
popal
cmp al, 0xe3
je 0x6dfcbf
jns 0x6df909
pushal
jmp 0x6df908
popal
cmp al, 0xe2
je 0x6e0a04
pushal
mov dl, bl
and dl, 0x25
popal
pushal
movzx ecx, di
jmp 0x6df933
popal
mov edi, dword [esp]
push ecx
mov ecx, esp
add ecx, 4
add ecx, 4
xchg dword [esp], ecx
pop esp
pushal
push edi
and edi, 0x1ac8ee77
pop ebx
pushal
pushal
popal
pushal
popal
popal
popal
push dword [esp]
pop ebx
add esp, 4
cld
push dword [esp]
pop ecx
add esp, 4
jmp 0x6df983
jmp 0x6df993
mov esi, dword [esp]
push ebp
mov ebp, esp
add ebp, 4
add ebp, 4
xchg dword [esp], ebp
pop esp
jnp 0x6df9b9
pushal
jae 0x6df9b6
push eax
pop ebx
popal
ret
mov dword [ebp + 0x1253c45c], 6
pushal
mov cx, 0x73c1
jbe 0x6df9fa
popal
push 0x27acdf4a
mov dword [esp], edx
mov edx, 0
add edx, esi
mov bl, byte [edx]
pop edx
cmc
push dx
mov dl, 0xf0
and bl, dl
mov dx, word [esp]
add esp, 2
jbe 0x6dfa2b
pushal
mov dl, 0xc7
and bl, 0xe3
popal
cmp bl, 0x80
jne 0x6df934
js 0x6dfa54
pushal
call 0x6dfa45
nop
sub dword [ecx - 0x16a400e9], esi
or byte [eax], al
add byte [eax], al
sub ebx, esp
out dx, al
adc bl, cl
invalid
xchg esi, eax
dec eax
xor esi, eax
xor eax, esi
xor esi, eax
cmc
mov eax, dword [ebp + 0x1249e03e]
pushal
stc
popal
mov edx, dword [ebp + 0x122d26bc]
stc
push ecx
mov ecx, 2
add ecx, esi
push dword [ecx]
pop ebx
pop ecx
jmp 0x6dfa92
sub ebx, 0x7769bc29
add ebx, esi
push edx
mov edx, 0x7769bc29
add ebx, edx
pop edx
jmp 0x6dfab3
jmp 0x6dfac7
push edi
mov edi, 6
add ebx, edi
mov edi, dword [esp]
add esp, 4
jmp 0x6dfaed
cmp ebx, eax
jb 0x6dfb35
js 0x6dfb06
pushal
sbb dh, 1
jl 0x6dfb05
popal
jbe 0x6dfb15
pushal
cld
sub esi, 0x607d2284
popal
cmp ebx, edx
jbe 0x6df934
cmc
jmp 0x6dfb35
push eax
mov eax, 0x6d7f7185
sub ebx, eax
pop eax
sub ebx, edi
add ebx, 0x6d7f7185
jmp 0x6dfb51
push ebp
push edi
mov edi, 6
mov ebp, edi
pop edi
sub ebx, ebp
pop ebp
js 0x6dfb65
cmc
lodsw ax, word [esi]
jns 0x6dfb6f
pushal
popal
stosw word es:[edi], ax
pushal
jmp 0x6dfb84
mov si, 0xd54d
popal
push eax
sub esp, 4
mov dword [esp], ebx
pop eax
pop ebx
jg 0x6dfb9c
cld
cld
stosd dword es:[edi], eax
jae 0x6dfbb9
jmp 0x6dfbb9
push edi
mov dword [esp], eax
mov eax, 4
add esi, eax
pop eax
clc
mov dword [esp], edi
clc
cmc
mov dword [esp + 0xc], esi
cld
jmp 0x6dfbe1
mov dword [ebp + 0x124badb8], esi
pushal
pushal
mov edi, 0x2068700
js 0x6dfbf4
popal
popal
mov edi, dword [esp]
push eax
mov eax, esp
add eax, 4
add eax, 4
xchg dword [esp], eax
pop esp
jmp 0x6dfc15
pushal
call 0x6dfc2a
mov eax, 0x6fc0cf12
fidivr word [ecx - 0x482ec057]
push esp
add eax, 0xbe662081
pop esp
cwde
pop edi
mov dx, 0xdac1
popal
push dword [esp]
pop ebx
add esp, 4
stc
mov ecx, dword [esp]
push ebx
mov ebx, esp
add ebx, 4
add ebx, 4
xchg dword [esp], ebx
pop esp
pushal
mov bh, 0x2e
cld
popal
push dword [esp]
pop esi
add esp, 4
pushal
mov dx, 0xbee7
jp 0x6dfc6a
mov dx, 0x95b1
popal
jmp 0x6dfc78
push edx
mov edx, esp
push ebp
mov ebp, 0x7ddb5d0e
sub ebp, 0x71ca668b
shr ebp, 2
add ebp, 0x7efe530f
shr ebp, 7
xor ebp, 0x1040525
add edx, ebp
pop ebp
add edx, 4
xchg dword [esp], edx
pop esp
stc
stc
jmp 0x6dd7ec
mov dword [ebp + 0x1253c45c], 2
clc
sub esp, 4
mov dword [esp], esi
pop ebx
clc
pushal
mov si, bx
popal
movzx ecx, byte [esi]
stc
jmp 0x6dfcf5
cmp cl, 0x80
jae 0x6dfd50
jmp 0x6dfd0c
jmp 0x6dfd25
sub ebx, 0x43ffc7e0
add ebx, ecx
push esi
mov esi, 0x43ffc7e0
add ebx, esi
pop esi
stc
xor ebx, ecx
xor ecx, ebx
xor ebx, ecx
inc ecx
xchg ebx, ecx
clc
jmp 0x6dfdd0
push eax
mov ah, 0xff
sub cl, ah
mov eax, dword [esp]
add esp, 4
jmp 0x6dfd6f
push esi
mov dword [esp], 0
sub dword [esp], ecx
pop ecx
pushal
movzx edx, si
cld
popal
sub esp, 4
mov dword [esp], edi
mov edi, 0xff
and ecx, edi
pop edi
jge 0x6dfdb5
pushal
stc
call 0x6dfdb3
mov al, 0x8b
inc eax
inc ecx
or dword [edx + 0x5dbb2900], 0xa42f3b48
lodsb al, byte [esi]
xor dword [ecx + 5], ebp
sub dword [edi + ebx*2 + 0x61], edx
add ebx, 0x5e6fc67b
add ebx, 0xaff8220
sub ebx, ecx
sub ebx, 0xaff8220
sub ebx, 0x5e6fc67b
stc
mov eax, dword [ebp + 0x1249e03e]
cmc
mov edx, dword [ebp + 0x122d26bc]
jmp 0x6dfdf6
cmp dword [ebp + 0x122d2a3a], 1
je 0x6e02e5
jbe 0x6dfe0a
clc
cmp ebx, eax
jb 0x6e02e5
jns 0x6dfe19
clc
jns 0x6dfe20
stc
cmp ebx, edx
jb 0x6df934
jae 0x6dfe40
jg 0x6dfe40
jmp 0x6dfe40
jmp 0x6e02e5
mov dword [ebp + 0x1253c45c], 2
jmp 0x6dfe92
stc
push 0x79113a00
mov dword [esp], eax
mov eax, esi
mov ebx, eax
pop eax
clc
jns 0x6dfea8
cmc
movzx ecx, byte [esi]
clc
cmp cl, 0x80
jae 0x6dfefb
cld
sub ebx, 0x5bdd518c
add ebx, 0x7bb74167
add ebx, ecx
sub ebx, 0x7bb74167
add ebx, 0x5bdd518c
jnp 0x6dfeea
jmp 0x6dfeea
push esi
mov esi, 0xffffffff
sub ebx, esi
pop esi
stc
clc
jmp 0x6dff56
push ebx
mov dword [esp], edx
mov dl, 0x2e
add dl, 0xc6
sub dl, 0xf5
sub cl, dl
pop edx
stc
not ecx
add ecx, 1
pushal
mov edi, eax
adc si, 0xb575
popal
push ebx
push edx
mov edx, 0x5df57f00
mov ebx, edx
pop edx
inc ebx
add ebx, 0xa20a81fe
and ecx, ebx
pop ebx
stc
push ecx
mov ecx, 0x6f4e0df1
add ebx, ecx
pop ecx
sub ebx, ecx
sub ebx, 0x6f4e0df1
jmp 0x6dff56
mov eax, dword [ebp + 0x1249e03e]
jnp 0x6dff69
ja 0x6dff69
cmc
mov edx, dword [ebp + 0x122d26bc]
clc
cmp dword [ebp + 0x122d2a3a], 1
je 0x6e02e5
jmp 0x6dff89
clc
cmp ebx, eax
jb 0x6dffc0
jbe 0x6dffa0
jg 0x6dffa0
pushal
popal
cmp ebx, edx
jbe 0x6df934
pushal
call fcn.006dffb7
invalid
push ebx
mov ebx, 1
sub esi, ebx
pop ebx
jmp 0x6dffd9
push ebx
push edx
mov dh, 0x19
mov bl, 0xd0
add bl, dh
pop edx
mov al, pe_nt_image_headers32
sub al, bl
pop ebx
jmp 0x6e0000
pushal
jge 0x6e000d
jne 0x6e000d
call 0x6e0023
adc edi, ecx
pushfd
sti
xor dl, byte [edx - 0x13]
mov dh, cl
or dh, byte [ebx]
ret
push edx
mov edx, 0xffffffff
add esi, edx
pop edx
jge 0x6e02fe
jmp 0x6e02fe
push ebp
mov dword [esp], edx
mov dh, 0xbc
mov al, 0x55
xor al, dh
pop edx
jae 0x6e0317
pushal
jb 0x6e0316
popal
stosb byte es:[edi], al
jmp 0x6e0328
push esi
sub dword [esp], 0x75bd20e6
pop eax
push edi
mov edi, 0x75bd20e6
add eax, edi
pop edi
stc
sub eax, 0x7fb91085
sub eax, edi
push esi
mov esi, 0x7fb91085
add eax, esi
pop esi
cld
push edi
push ebx
mov ebx, 4
mov edi, ebx
pop ebx
sub eax, edi
pop edi
clc
stosd dword es:[edi], eax
js 0x6e0362
cld
push eax
mov eax, esp
add eax, 4
add eax, 4
xchg dword [esp], eax
mov esp, dword [esp]
pushal
add esi, 0x515dd919
popal
mov ebx, dword [esp]
push eax
mov eax, esp
add eax, 4
add eax, 4
xchg dword [esp], eax
pop esp
jp 0x6e0394
stc
push dword [esp]
pop ecx
add esp, 4
jmp 0x6e03b2
mov esi, dword [esp]
push ebx
mov ebx, esp
add ebx, 4
add ebx, 4
xchg dword [esp], ebx
pop esp
jmp 0x6e03d8
push ebx
mov ebx, esp
add ebx, 4
add ebx, 4
push ebx
push dword [esp + 4]
pop ebx
pop dword [esp]
pop esp
pushal
jmp 0x6e0404
mov edx, 0x475ee71
popal
jmp 0x6ddb36
mov dword [ebp + 0x1253c45c], 5
jmp 0x6e0427
pushal
mov eax, 0x1cf41c28
adc dh, 0x7f
popal
push eax
mov eax, 0
add eax, esi
mov ebx, dword [eax]
mov eax, dword [esp]
add esp, 4
pushal
mov dx, 0x6407
jl 0x6e0453
mov di, 0x2871
popal
pushal
stc
mov dl, 0xd7
popal
add ebx, 0x2ffdf819
sub ebx, 0x5fc611ab
add ebx, esi
add ebx, 0x5fc611ab
sub ebx, 0x2ffdf819
jmp 0x6e047e
push eax
push edx
push 0x27ffd825
pop edx
shl edx, 4
xor edx, 0x7ffd8254
mov eax, edx
pop edx
add ebx, eax
pop eax
jno 0x6e04a2
jp 0x6e04a2
cmc
mov eax, dword [ebp + 0x1249e03e]
jmp 0x6e04ba
cld
mov edx, dword [ebp + 0x122d26bc]
jmp 0x6e04d9
push edx
mov edx, 1
sub esi, edx
pop edx
cmc
cmp dword [ebp + 0x122d2aca], 1
je 0x6e0bef
jae 0x6e0512
je 0x6e0512
jmp 0x6e0512
jmp 0x6e0526
cmp ebx, eax
jb 0x6e0575
pushal
mov ax, bx
jns 0x6e0539
cmc
popal
pushal
xor cx, 0xe517
mov edx, 0x40953725
popal
cmp ebx, edx
jbe 0x6e0698
jae 0x6e0568
jmp 0x6e0568
jmp 0x6e0575
mov dword [ebp + 0x124badb8], esi
pushal
xor dx, 0x55cd
sbb cx, 0x8c8a
popal
mov ebx, dword [ebp + 0x1253c45c]
cmc
sub dword [esp + 0xc], 0x7b6fc654
add dword [esp + 0xc], ebx
push ebp
mov ebp, 0x7b6fc654
add dword [esp + 0x10], ebp
pop ebp
js 0x6e05ac
cmc
jmp 0x6e0bef
cmp dword [ebp + 0x122d2a3a], 1
je 0x6e0bef
jmp 0x6e06bc
sub ebx, dword [ebp + 0x1249e03e]
stc
mov ecx, dword [ebp + 0x122d1d74]
jmp 0x6e06d3
sub ecx, 0x6f1bfb93
add ecx, 0x1df79d6f
add ecx, ebx
sub ecx, 0x1df79d6f
add ecx, 0x6f1bfb93
pushal
add edi, 0x1a90e222
sbb si, 0xf69
popal
push edx
mov edx, 0x4faf9b2c
shl edx, 3
and edx, 0x47bf694b
neg edx
shr edx, 1
sub edx, 0x338296e9
sub ecx, edx
pop edx
sub ecx, edi
add ecx, 0x29df4477
cmc
push eax
mov eax, 5
sub ecx, 0x67d53c80
sub ecx, eax
add ecx, 0x67d53c80
pop eax
jg 0x6e073c
cld
push esi
mov dword [esp], ebx
mov bl, 0xe9
mov al, bl
pop ebx
jg 0x6e0753
pushal
xor ax, 0xe32
stc
popal
stosb byte es:[edi], al
pushal
pushal
and edx, 0x7ab18b07
push esi
pop edi
popal
jmp 0x6e0770
popal
push eax
push ecx
pop eax
mov ecx, dword [esp]
add esp, 4
cld
ja 0x6e078b
jne 0x6e078b
clc
stosd dword es:[edi], eax
pushal
jb 0x6e07ac
call 0x6e07ab
inc eax
mov eax, dword [0x46e412f8]
jnp 0x6e0752
arpl di, di
inc ebp
cmp dl, dl
mov esi, dword [ecx + esi - 0xa]
fistp dword [edi + 0x61]
popal
jmp 0x6e07ba
push edi
push esp
pop edi
add edi, 4
add edi, 4
xchg dword [esp], edi
pop esp
je 0x6e07d7
jg 0x6e07d7
stc
mov ebx, dword [esp]
push ebp
mov ebp, esp
add ebp, 4
add ebp, 4
xchg dword [esp], ebp
pop esp
cld
push dword [esp]
pop ecx
add esp, 4
jmp 0x6e0805
push dword [esp]
pop esi
add esp, 4
clc
push ebx
mov dword [esp], ecx
mov ecx, esp
add ecx, 4
add ecx, 4
xchg dword [esp], ecx
pop esp
stc
pushal
jbe 0x6e0828
add ax, 0xe7db
popal
jmp 0x6ddb36
mov dword [ebp + 0x1253c45c], 2
cld
push ebp
mov dword [esp], esi
pop ebx
jmp 0x6e085e
movzx ecx, byte [esi]
cmc
cmp cl, 0x80
jae 0x6e0924
pushal
push ecx
call fcn.006e0885
mov ebx, 0xf6467e6c
jns 0x6e0865
adc dword [esi - 0x58], 0x35
invalid
push edi
mov dword [esp], ebx
mov bh, 0xff
sub cl, bh
pop ebx
cmc
push ecx
dec dword [esp]
not dword [esp]
pop ecx
stc
push edx
mov edx, 0xff
and ecx, edx
mov edx, dword [esp]
add esp, 4
pushal
jmp 0x6e095e
jmp 0x6e096e
popal
sub ebx, 0x6f9df062
sub ebx, ecx
push esi
mov esi, 0x6f9df062
add ebx, esi
pop esi
je 0x6e099d
jmp 0x6e099d
xchg edx, eax
mov esp, 0x8cb95299
mov dl, pe_nt_image_headers32
mov eax, ecx
cwde
push 0x1d
iretd
mov eax, dword [ebp + 0x1249e03e]
pushal
call 0x6e09ae
test dword [edx + 0x22], ecx
jecxz 0x6e098d
pop eax
mov esi, ecx
popal
pushal
movzx esi, di
jnp 0x6e09be
mov dl, 6
popal
mov edx, dword [ebp + 0x122d26bc]
jb 0x6e09e6
pushal
clc
jmp 0x6e09e5
popal
jmp 0x6e04d9
mov dword [ebp + 0x1253c45c], 2
cmc
push esi
mov ebx, dword [esp]
add esp, 4
jmp 0x6e0a2c
movzx ecx, byte [esi]
jmp 0x6e0a45
cmp cl, 0x80
jae 0x6e0ab9
clc
sub ebx, 0x48572920
add ebx, ecx
push esi
mov esi, 0x4ffc9e9d
xor esi, 0x3fff454d
sub esi, 0x79ccc821
shl esi, 5
or esi, 0x7e675d19
sub esi, 0xb69054d9
add ebx, esi
pop esi
jle 0x6e0a98
pushal
call 0x6e0a92
scasb al, byte es:[edi]
ja 0x6e0b02
sub edx, dword ss:[edi]
mov bl, 0xa0
mov al, byte [0x665bba68]
mov edx, 0x5361c370
push ebx
inc dword [esp]
mov ebx, dword [esp]
add esp, 4
clc
jmp 0x6e0b46
push ebx
mov bh, 0x4a
add bh, 0xd8
and bh, 0x4d
sub bh, 0x22
add bh, 0x21
sub cl, bh
pop ebx
jmp 0x6e0ad5
not ecx
add ecx, 1
stc
push ebx
mov ebx, 0x6fe8d2c1
inc ebx
dec ebx
not ebx
shr ebx, 3
neg ebx
sub ebx, 0xedfd195a
and ecx, ebx
pop ebx
jbe 0x6e0b05
je 0x6e0b05
jae 0x6e0b05
add byte [eax], al
add byte [ecx - 0x61cc4315], al
jg 0x6e0b35
sub ebx, 0x7f9e33bc
sub ebx, ecx
push ecx
mov ecx, 0x3f3f114c
inc ecx
sub ecx, 0x7b327665
dec ecx
and ecx, 0x3d8ade5a
sub ecx, 0x277f5376
add ecx, 0xa314ecf0
add ebx, ecx
pop ecx
jmp 0x6e0b46
retf
jb 0x6e0b58
adc byte [ecx], al
xor eax, 0x566640
mov cl, 4
adc cl, bl
ret 0x4a1
mov eax, dword [ebp + 0x1249e03e]
pushal
mov si, 0x4f1e
jg 0x6e0b57
popal
mov edx, dword [ebp + 0x122d26bc]
jle 0x6e0b65
cmc
cmp dword [ebp + 0x122d2a3a], 1
je 0x6e02e5
jmp 0x6e0b88
jmp 0x6e0b9d
cmp ebx, eax
jb 0x6e0bdb
jmp 0x6e0bb9
cmp ebx, edx
jbe 0x6df934
pushal
mov cx, di
jmp 0x6e0bd9
popal
stc
push eax
mov eax, 0xffffffff
add esi, eax
pop eax
jmp 0x6e0bef
push ebx
push esi
add dword [esp], 0x6ffea1e1
pop ebx
sub ebx, 0x6ffea1e1
mov ecx, ebx
pop ebx
cld
sub ecx, 0x7bf59eba
sub ecx, 0x6b5f7165
sub ecx, edi
add ecx, 0x6b5f7165
add ecx, 0x7bf59eba
pushal
jmp 0x6e0c33
mov ebx, edi
popal
push edx
mov edx, 0x6cf31c08
add edx, 0x6fff1979
add edx, 0x230dca84
sub ecx, edx
pop edx
clc
push ecx
mov cl, 0xe9
push edx
mov dl, cl
mov al, dl
pop edx
pop ecx
cld
jmp 0x6e0c69
stosb byte es:[edi], al
pushal
jb 0x6e0c73
mov dh, 0x80
jmp 0x6e0c85
popal
xor eax, ecx
xor ecx, eax
xor eax, ecx
pushal
cld
sbb esi, 0x25653e85
popal
stosd dword es:[edi], eax
stc
jmp 0x6ddb36