Function at 0x6c6d5850
Capabilities:
Encode data using xor

Disassembly:
push ebp
push edi
push esi
push ebx
mov ebx, eax
sub esp, 0x9c
fld xword [esp + 0xb0]
fxam
wait
fnstsw ax
and ax, 0x4500
cmp ax, 0x100
je 0x6c6d5bb0
fld st(0)
fstp xword [esp + 0x50]
movzx edx, word [esp + 0x58]
test dx, dx
js 0x6c6d5a70
fxam
wait
fnstsw ax
and ax, 0x4500
cmp ax, 0x500
je 0x6c6d5da0
and dx, 0x7fff
fstp xword [esp + 0x40]
mov edi, dword [esp + 0x40]
mov ebp, dword [esp + 0x44]
mov word [esp + 0x30], dx
jne 0x6c6d5a80
mov edx, ebp
or edx, edi
jne 0x6c6d5c48
mov eax, dword [ebx + 0xc]
mov dword [esp + 0x24], eax
cmp eax, 0xe
jbe 0x6c6d5aa8
mov eax, dword [ebx + 4]
mov dword [esp + 0x2c], eax
lea eax, [esp + 0x78]
mov dword [esp + 0x28], eax
mov edx, dword [ebx + 0xc]
test edx, edx
jle 0x6c6d5e38
mov byte [esp + 0x78], 0x2e
lea eax, [esp + 0x79]
mov byte [eax], 0x30
lea esi, [eax + 1]
mov eax, dword [ebx + 8]
mov dword [esp + 0x34], eax
test eax, eax
jle 0x6c6d5d62
mov edx, dword [ebx + 0xc]
mov eax, esi
sub eax, dword [esp + 0x28]
movsx edi, word [esp + 0x30]
test edx, edx
lea ecx, [eax + edx]
mov edx, dword [esp + 0x2c]
cmovg eax, ecx
mov ecx, 0x66666667
mov dword [esp + 0x24], edi
and edx, 0x1c0
cmp edx, 1
sbb eax, 0xfffffffa
mov ebp, eax
mov eax, edi
imul ecx
mov eax, edi
mov edi, ebp
sar eax, 0x1f
mov ecx, edx
sar ecx, 2
sub ecx, eax
je 0x6c6d5e4f
mov dword [esp + 0x30], esi
lea esi, [esi]
nop
mov eax, 0x66666667
add edi, 1
imul ecx
mov eax, ecx
lea esi, [edi + 2]
sar eax, 0x1f
sub esi, ebp
sar edx, 2
sub edx, eax
mov ecx, edx
jne 0x6c6d5960
movsx ebp, si
mov esi, dword [esp + 0x30]
mov eax, dword [esp + 0x34]
cmp eax, edi
jle 0x6c6d5d90
sub eax, edi
test dword [esp + 0x2c], 0x600
je 0x6c6d5df0
mov dword [ebx + 8], eax
test byte [esp + 0x2c], 0x80
jne 0x6c6d5d7b
test dword [esp + 0x2c], 0x100
jne 0x6c6d5dc0
test byte [esp + 0x2c], 0x40
jne 0x6c6d5dd8
mov edx, ebx
mov eax, 0x30
call fcn.6c6d4170
mov eax, dword [ebx + 4]
mov edx, ebx
and eax, 0x20
or eax, 0x58
call fcn.6c6d4170
mov eax, dword [ebx + 8]
test eax, eax
jle 0x6c6d5a19
test byte [ebx + 5], 2
je 0x6c6d5a19
sub eax, 1
mov dword [ebx + 8], eax
lea esi, [esi]
lea esi, [esi]
mov edx, ebx
mov eax, 0x30
call fcn.6c6d4170
mov eax, dword [ebx + 8]
lea edx, [eax - 1]
mov dword [ebx + 8], edx
test eax, eax
jg 0x6c6d5a00
mov edi, dword [esp + 0x28]
cmp esi, dword [esp + 0x28]
ja 0x6c6d5a4a
jmp 0x6c6d5bdc
movzx eax, word [ebx + 0x1c]
mov word [esp + 0x68], ax
test ax, ax
jne 0x6c6d5d28
cmp esi, edi
je 0x6c6d5bdc
movsx eax, byte [esi - 1]
sub esi, 1
cmp eax, 0x2e
je 0x6c6d5c98
cmp eax, 0x2c
je 0x6c6d5a30
mov edx, ebx
call fcn.6c6d4170
jmp 0x6c6d5a42
or dword [ebx + 4], 0x80
jmp 0x6c6d588a
mov eax, dword [ebx + 0xc]
sub word [esp + 0x30], 0x3fff
mov dword [esp + 0x24], eax
cmp eax, 0xe
jbe 0x6c6d5aae
mov eax, dword [ebx + 4]
mov edx, ebp
or edx, edi
mov dword [esp + 0x2c], eax
jne 0x6c6d5b18
jmp 0x6c6d58da
shld ebp, edi, 1
add edi, edi
test ebp, ebp
jns 0x6c6d5aa8
mov ecx, 0xe
sub ecx, dword [esp + 0x24]
mov eax, 4
xor edx, edx
shl ecx, 2
xor esi, esi
shld edx, eax, cl
shl eax, cl
test cl, 0x20
cmovne edx, eax
cmovne eax, esi
mov esi, edi
mov edi, ebp
shrd esi, ebp, 1
shr edi, 1
add esi, eax
adc edi, edx
test edi, edi
js 0x6c6d5c88
shld edi, esi, 1
add esi, esi
mov ecx, 0xf
sub ecx, dword [esp + 0x24]
xor ebp, ebp
shl ecx, 2
shrd esi, edi, cl
shr edi, cl
and ecx, 0x20
cmovne esi, edi
cmovne edi, ebp
mov ebp, edi
mov edi, esi
mov eax, dword [ebx + 4]
mov dword [esp + 0x2c], eax
lea eax, [esp + 0x78]
mov dword [esp + 0x24], ebx
mov dword [esp + 0x28], eax
mov esi, eax
mov eax, dword [esp + 0x2c]
mov edx, eax
and eax, 0x20
and edx, 0x800
mov byte [esp + 0x34], al
mov dword [esp + 0x3c], edx
movzx edx, word [esp + 0x30]
jmp 0x6c6d5b6d
xor ecx, ecx
cmp esi, dword [esp + 0x28]
ja 0x6c6d5b5b
mov eax, dword [esp + 0x24]
mov ebx, dword [eax + 0xc]
test ebx, ebx
js 0x6c6d5b63
lea eax, [ecx + 0x30]
mov byte [esi], al
add esi, 1
mov ecx, ebp
or ecx, edi
je 0x6c6d5d40
mov ecx, edi
mov eax, edi
mov ebx, ebp
and ecx, 0xfffffff0
and eax, 0xf
or ebx, ecx
je 0x6c6d5ca8
mov ebx, dword [esp + 0x24]
shrd edi, ebp, 4
shr ebp, 4
mov ecx, dword [ebx + 0xc]
test ecx, ecx
jle 0x6c6d5b99
sub ecx, 1
mov dword [ebx + 0xc], ecx
test eax, eax
je 0x6c6d5b48
mov ecx, eax
cmp eax, 9
jbe 0x6c6d5b5b
add eax, 0x37
or al, byte [esp + 0x34]
jmp 0x6c6d5b5e
fstp st(0)
add esp, 0x9c
mov ecx, ebx
mov edx, 0x6c7acfc7
xor eax, eax
pop ebx
pop esi
pop edi
pop ebp
jmp fcn.6c6d44d0
mov edx, ebx
mov eax, 0x30
call fcn.6c6d4170
mov eax, dword [ebx + 0xc]
lea edx, [eax - 1]
mov dword [ebx + 0xc], edx
test eax, eax
jg 0x6c6d5bd0
mov eax, dword [ebx + 4]
mov edx, ebx
and eax, 0x20
or eax, 0x50
call fcn.6c6d4170
mov eax, dword [esp + 0x24]
add dword [ebx + 8], ebp
or dword [ebx + 4], 0x1c0
cdq
mov dword [esp + 0x68], eax
mov dword [esp + 0x6c], edx
mov ecx, edx
mov dword [esp], eax
mov eax, dword [esp + 0x6c]
sar ecx, 0x1f
mov dword [esp + 0x10], ebx
mov dword [esp + 0x70], ecx
mov dword [esp + 0x74], ecx
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
mov dword [esp + 0xc], ecx
call fcn.6c6d4b10
add esp, 0x9c
pop ebx
pop esi
pop edi
pop ebp
ret
test ebp, ebp
js 0x6c6d5e59
mov eax, 0xffffc001
lea esi, [esi]
shld ebp, edi, 1
mov edx, eax
add edi, edi
sub eax, 1
test ebp, ebp
jns 0x6c6d5c58
mov word [esp + 0x30], dx
mov eax, dword [ebx + 0xc]
mov dword [esp + 0x24], eax
cmp eax, 0xe
ja 0x6c6d5b11
jmp 0x6c6d5ab2
add word [esp + 0x30], 1
jmp 0x6c6d5af1
mov eax, ebx
call fcn.6c6d4f30
jmp 0x6c6d5a42
cmp esi, dword [esp + 0x28]
ja 0x6c6d5cc8
mov ebx, dword [esp + 0x3c]
test ebx, ebx
jne 0x6c6d5cc8
mov ecx, dword [esp + 0x24]
mov ecx, dword [ecx + 0xc]
test ecx, ecx
jle 0x6c6d5cce
lea esi, [esi]
mov byte [esi], 0x2e
add esi, 1
mov ecx, edi
xor ecx, 1
mov dword [esp + 0x30], ecx
lea ecx, [edx - 1]
mov word [esp + 0x3a], cx
mov ecx, dword [esp + 0x30]
or ecx, ebp
je 0x6c6d5e28
movzx ecx, word [esp + 0x3a]
mov dword [esp + 0x30], esi
mov esi, eax
lea esi, [esi]
lea esi, [esi]
shrd edi, ebp, 1
shr ebp, 1
mov edx, ecx
mov ebx, edi
mov eax, ebp
lea ecx, [edx - 1]
xor ebx, 1
or eax, ebx
jne 0x6c6d5d00
mov eax, esi
xor edi, edi
mov esi, dword [esp + 0x30]
xor ebp, ebp
jmp 0x6c6d5b99
mov ecx, ebx
mov edx, 1
lea eax, [esp + 0x68]
call fcn.6c6d41d0
jmp 0x6c6d5a42
mov word [esp + 0x30], dx
mov ebx, dword [esp + 0x24]
cmp esi, dword [esp + 0x28]
je 0x6c6d58e2
mov eax, dword [ebx + 8]
mov dword [esp + 0x34], eax
test eax, eax
jg 0x6c6d590b
movsx eax, word [esp + 0x30]
mov ebp, 2
mov dword [esp + 0x24], eax
test byte [esp + 0x2c], 0x80
je 0x6c6d59ae
mov edx, ebx
mov eax, 0x2d
call fcn.6c6d4170
jmp 0x6c6d59c7
mov dword [ebx + 8], 0xffffffff
jmp 0x6c6d59a3
fstp st(0)
add esp, 0x9c
mov eax, edx
mov ecx, ebx
mov edx, 0x6c7acfcb
pop ebx
and eax, 0x8000
pop esi
pop edi
pop ebp
jmp fcn.6c6d44d0
mov edx, ebx
mov eax, 0x2b
call fcn.6c6d4170
jmp 0x6c6d59c7
mov edx, ebx
mov eax, 0x20
call fcn.6c6d4170
jmp 0x6c6d59c7
lea edx, [eax - 1]
mov dword [ebx + 8], edx
test eax, eax
jle 0x6c6d59a3
nop
mov edx, ebx
mov eax, 0x20
call fcn.6c6d4170
mov eax, dword [ebx + 8]
lea edx, [eax - 1]
mov dword [ebx + 8], edx
test eax, eax
jg 0x6c6d5e00
mov eax, dword [ebx + 4]
mov dword [esp + 0x2c], eax
jmp 0x6c6d59a3
xor edi, edi
xor ebp, ebp
jmp 0x6c6d5b99
mov eax, dword [esp + 0x28]
test dword [esp + 0x2c], 0x800
je 0x6c6d58f6
jmp 0x6c6d58ed
mov ebp, 2
jmp 0x6c6d5984
mov eax, 0xffffc002
mov word [esp + 0x30], ax
jmp 0x6c6d5c6c