Function at 0x6f90d0
Capabilities:
Encode data using xor
Encrypt data using twofish

Disassembly:
push rbp
push r13
push rdi
push rsi
push rbx
sub rsp, 0x220
mov rbp, rsp
mov rbx, rcx
mov rcx, rbx
lea rdx, [rbp + 0x20]
mov rax, qword [0x0078ef20]
lea r8, [rax + 0x100]
mov r9d, dword [rbx + 0x3c]
call fcn.006f8ca0
mov edx, pe_nt_image_headers64
lea rax, [rbp + 0x20]
lea rcx, [rbp + 0x120]
mov r8, qword [0x0078ef20]
movzx r9, byte [rax]
movzx r8, byte [r8 + r9 + 0x100]
mov byte [rcx], r8b
add rcx, 1
add rax, 1
sub edx, 1
test edx, edx
jne 0x6f9111
nop
mov rcx, rbx
lea rdx, [rbp + 0x120]
lea r8, [rbp + 0x120]
mov r9d, dword [rbx + 0x38]
call fcn.006f8ca0
movzx rax, byte [rbx + 0x30]
movzx rcx, byte [rbx + 0x34]
xor edx, edx
lea r8, [rbp + 0x120]
mov r9, qword [rbx + 0x20]
movsxd r10, edx
mov r11, qword [0x0078f938]
mov rsi, qword [0x0078ef20]
mov rdi, qword [0x0078ef20]
movzx r13, byte [r8]
movzx rdi, byte [rdi + r13]
xor edi, ecx
movsxd rdi, edi
movzx rsi, byte [rsi + rdi]
xor esi, eax
movsxd rsi, esi
mov r11d, dword [r11 + rsi*4]
mov dword [r9 + r10*4], r11d
add edx, 1
add r8, 1
cmp edx, 0x100
jne 0x6f9165
nop
mov rcx, rbx
lea rdx, [rbp + 0x20]
mov r8, qword [0x0078ef20]
mov r9d, dword [rbx + 0x3c]
shr r9d, 8
call fcn.006f8ca0
mov edx, pe_nt_image_headers64
lea rax, [rbp + 0x20]
lea rcx, [rbp + 0x120]
mov r8, qword [0x0078ef20]
movzx r9, byte [rax]
movzx r8, byte [r8 + r9 + 0x100]
mov byte [rcx], r8b
add rcx, 1
add rax, 1
sub edx, 1
test edx, edx
jne 0x6f91dc
nop
mov rcx, rbx
lea rdx, [rbp + 0x120]
lea r8, [rbp + 0x120]
mov r9d, dword [rbx + 0x38]
shr r9d, 8
call fcn.006f8ca0
movzx rax, byte [rbx + 0x31]
movzx rcx, byte [rbx + 0x35]
xor edx, edx
lea r8, [rbp + 0x120]
mov r9, qword [rbx + 0x20]
movsxd r10, edx
mov r11, qword [0x0078f938]
mov rsi, qword [0x0078ef20]
mov rdi, qword [0x0078ef20]
movzx r13, byte [r8]
movzx rdi, byte [rdi + r13 + 0x100]
xor edi, ecx
movsxd rdi, edi
movzx rsi, byte [rsi + rdi]
xor esi, eax
movsxd rsi, esi
mov r11d, dword [r11 + rsi*4 + 0x400]
mov dword [r9 + r10*4 + 0x400], r11d
add edx, 1
add r8, 1
cmp edx, 0x100
jne 0x6f9234
nop
mov rcx, rbx
lea rdx, [rbp + 0x20]
mov r8, qword [0x0078ef20]
mov r9d, dword [rbx + 0x3c]
shr r9d, 0x10
call fcn.006f8ca0
mov edx, pe_nt_image_headers64
lea rax, [rbp + 0x20]
lea rcx, [rbp + 0x120]
mov r8, qword [0x0078ef20]
movzx r9, byte [rax]
movzx r8, byte [r8 + r9]
mov byte [rcx], r8b
add rcx, 1
add rax, 1
sub edx, 1
test edx, edx
jne 0x6f92b7
nop
mov rcx, rbx
lea rdx, [rbp + 0x120]
lea r8, [rbp + 0x120]
mov r9d, dword [rbx + 0x38]
shr r9d, 0x10
call fcn.006f8ca0
movzx rax, byte [rbx + 0x32]
movzx rcx, byte [rbx + 0x36]
xor edx, edx
lea r8, [rbp + 0x120]
mov r9, qword [rbx + 0x20]
movsxd r10, edx
mov r11, qword [0x0078f938]
mov rsi, qword [0x0078ef20]
mov rdi, qword [0x0078ef20]
movzx r13, byte [r8]
movzx rdi, byte [rdi + r13]
xor edi, ecx
movsxd rdi, edi
movzx rsi, byte [rsi + rdi + 0x100]
xor esi, eax
movsxd rsi, esi
mov r11d, dword [r11 + rsi*4 + 0x800]
mov dword [r9 + r10*4 + 0x800], r11d
add edx, 1
add r8, 1
cmp edx, 0x100
jne 0x6f930b
nop
mov rcx, rbx
lea rdx, [rbp + 0x20]
mov rax, qword [0x0078ef20]
lea r8, [rax + 0x100]
mov r9d, dword [rbx + 0x3c]
shr r9d, 0x18
call fcn.006f8ca0
mov edx, pe_nt_image_headers64
lea rax, [rbp + 0x20]
lea rcx, [rbp + 0x120]
mov r8, qword [0x0078ef20]
movzx r9, byte [rax]
movzx r8, byte [r8 + r9]
mov byte [rcx], r8b
add rcx, 1
add rax, 1
sub edx, 1
test edx, edx
jne 0x6f9395
nop
mov rcx, rbx
lea rdx, [rbp + 0x120]
lea r8, [rbp + 0x120]
mov r9d, dword [rbx + 0x38]
shr r9d, 0x18
call fcn.006f8ca0
movzx rax, byte [rbx + 0x33]
movzx rcx, byte [rbx + 0x37]
xor edx, edx
lea r8, [rbp + 0x120]
mov r9, qword [rbx + 0x20]
movsxd r10, edx
mov r11, qword [0x0078f938]
mov rsi, qword [0x0078ef20]
mov rdi, qword [0x0078ef20]
movzx r13, byte [r8]
movzx rdi, byte [rdi + r13 + 0x100]
xor edi, ecx
movsxd rdi, edi
movzx rsi, byte [rsi + rdi + 0x100]
xor esi, eax
movsxd rsi, esi
mov r11d, dword [r11 + rsi*4 + 0xc00]
mov dword [r9 + r10*4 + 0xc00], r11d
add edx, 1
add r8, 1
cmp edx, 0x100
jne 0x6f93e9
nop
lea rsp, [rbp + 0x220]
pop rbx
pop rsi
pop rdi
pop r13
pop rbp
ret