Function at 0x6aad5880
Capabilities:
Encode data using xor

Disassembly:
push ebp
push edi
mov ebp, eax
push esi
push ebx
sub esp, 0x5c
fld xword [esp + 0x70]
fld st(0)
fstp xword [esp + 0x28]
fxam
wait
fnstsw ax
and ax, 0x4500
cmp ax, 0x100
je 0x6aad5da1
movzx edx, word [esp + 0x30]
test dx, dx
js 0x6aad5ce0
fxam
wait
fnstsw ax
fstp st(0)
and ax, 0x4500
cmp ax, 0x500
je 0x6aad5db6
and dx, 0x7fff
mov word [esp + 8], dx
jne 0x6aad5a60
mov eax, dword [esp + 0x28]
mov edx, dword [esp + 0x2c]
mov edi, edx
mov dword [esp + 4], edx
or edx, eax
mov esi, eax
mov dword [esp], eax
je 0x6aad5d03
test edi, edi
js 0x6aad5dfa
mov eax, 0xffffc001
shld edi, esi, 1
mov edx, eax
add esi, esi
sub eax, 1
test edi, edi
jns 0x6aad5901
mov ebx, dword [ebp + 0xc]
mov word [esp + 8], dx
mov dword [esp], esi
mov dword [esp + 4], edi
cmp ebx, 0xe
jbe 0x6aad5a8a
mov eax, dword [ebp + 4]
lea ebx, [esp + 0x3e]
mov dword [esp + 0xc], ebp
mov esi, dword [esp]
mov dword [esp + 0x10], ebx
mov ebp, ebx
movzx ebx, word [esp + 8]
mov edi, eax
mov dword [esp + 0x14], eax
and eax, 0x20
and edi, 0x800
mov byte [esp + 0x1b], al
mov dword [esp + 0x1c], edi
mov edi, dword [esp + 4]
jmp 0x6aad59af
mov eax, dword [esp + 0xc]
mov eax, dword [eax + 0xc]
test eax, eax
jle 0x6aad5975
mov edx, dword [esp + 0xc]
sub eax, 1
mov dword [edx + 0xc], eax
shrd esi, edi, 4
shr edi, 4
test ecx, ecx
mov dword [esp + 8], ebp
je 0x6aad5a32
mov eax, dword [esp + 8]
cmp ecx, 9
lea ebp, [eax + 1]
jle 0x6aad5a52
add ecx, 0x37
or cl, byte [esp + 0x1b]
mov eax, dword [esp + 8]
mov byte [eax], cl
mov edx, edi
or edx, esi
je 0x6aad5b10
mov ecx, esi
and ecx, 0xf
mov eax, ecx
mov dword [esp], ecx
cdq
mov eax, ecx
mov dword [esp + 4], edx
mov edx, dword [esp + 4]
xor eax, esi
xor edx, edi
or edx, eax
jne 0x6aad5960
cmp ebp, dword [esp + 0x10]
ja 0x6aad59f0
mov eax, dword [esp + 0x1c]
test eax, eax
jne 0x6aad59f0
mov eax, dword [esp + 0xc]
mov dword [esp + 8], ebp
mov eax, dword [eax + 0xc]
test eax, eax
jle 0x6aad59fb
lea esi, [esi]
lea eax, [ebp + 1]
mov byte [ebp], 0x2e
mov dword [esp + 8], eax
mov ebp, esi
mov esi, edi
xor ebp, 1
or esi, ebp
je 0x6aad5a26
mov eax, dword [esp]
mov edx, dword [esp + 4]
lea esi, [ebx - 1]
shrd eax, edx, 1
shr edx, 1
mov ebx, esi
mov edi, eax
mov ebp, edx
lea esi, [ebx - 1]
xor edi, 1
or ebp, edi
jne 0x6aad5a10
xor esi, esi
xor edi, edi
test ecx, ecx
jne 0x6aad5988
mov edx, dword [esp + 0x10]
cmp dword [esp + 8], edx
ja 0x6aad5a4b
mov eax, dword [esp + 0xc]
mov ebp, dword [eax + 0xc]
test ebp, ebp
js 0x6aad5d80
mov eax, dword [esp + 8]
lea ebp, [eax + 1]
add ecx, 0x30
jmp 0x6aad599f
mov eax, dword [esp + 0x28]
mov edx, dword [esp + 0x2c]
sub word [esp + 8], 0x3fff
mov dword [esp + 4], edx
or edx, eax
mov dword [esp], eax
je 0x6aad5d03
mov ebx, dword [ebp + 0xc]
cmp ebx, 0xe
ja 0x6aad5928
mov edi, dword [esp + 4]
mov esi, dword [esp]
test edi, edi
js 0x6aad5aa6
shld edi, esi, 1
add esi, esi
test edi, edi
jns 0x6aad5a95
mov dword [esp], esi
mov dword [esp + 4], edi
mov ecx, 0xe
mov eax, 4
xor edx, edx
sub ecx, ebx
shl ecx, 2
shld edx, eax, cl
shl eax, cl
test cl, 0x20
je 0x6aad5ac5
mov edx, eax
xor eax, eax
mov edi, dword [esp + 4]
mov esi, dword [esp]
shrd esi, edi, 1
shr edi, 1
add eax, esi
adc edx, edi
test edx, edx
js 0x6aad5dce
shld edx, eax, 1
add eax, eax
mov ecx, 0xf
sub ecx, ebx
shl ecx, 2
shrd eax, edx, cl
shr edx, cl
test cl, 0x20
je 0x6aad5afc
mov eax, edx
xor edx, edx
mov dword [esp], eax
mov dword [esp + 4], edx
jmp 0x6aad5928
mov word [esp + 8], bx
mov ebx, ebp
cmp ebx, dword [esp + 0x10]
mov ebp, dword [esp + 0xc]
je 0x6aad5d12
mov eax, dword [ebp + 8]
test eax, eax
mov dword [esp], eax
jle 0x6aad5cf0
movsx edi, word [esp + 8]
mov edx, dword [ebp + 0xc]
mov eax, ebx
sub eax, dword [esp + 0x10]
test edx, edx
mov dword [esp + 8], edi
jle 0x6aad5b4b
add eax, edx
xor edx, edx
test dword [esp + 0x14], 0x1c0
mov ecx, 0x66666667
setne dl
lea edi, [eax + edx + 5]
mov eax, dword [esp + 8]
imul ecx
mov eax, dword [esp + 8]
mov ecx, edx
sar eax, 0x1f
sar ecx, 2
sub ecx, eax
je 0x6aad5dd9
mov esi, 2
mov eax, 0x66666667
add edi, 1
add esi, 1
imul ecx
sar ecx, 0x1f
sar edx, 2
sub edx, ecx
mov ecx, edx
jne 0x6aad5b80
movsx esi, si
mov eax, dword [esp]
cmp eax, edi
jle 0x6aad5c00
sub eax, edi
test dword [esp + 0x14], 0x600
jne 0x6aad5d31
sub eax, 1
mov dword [ebp + 8], eax
lea esi, [esi]
mov edx, ebp
mov eax, 0x20
call fcn.6aad48a0
mov eax, dword [ebp + 8]
lea edx, [eax - 1]
test eax, eax
mov dword [ebp + 8], edx
jg 0x6aad5bc0
mov eax, dword [ebp + 4]
mov dword [esp + 0x14], eax
test byte [esp + 0x14], 0x80
je 0x6aad5c0e
mov esi, esi
lea edi, [edi]
mov edx, ebp
mov eax, 0x2d
call fcn.6aad48a0
jmp 0x6aad5c27
mov dword [ebp + 8], 0xffffffff
test byte [esp + 0x14], 0x80
jne 0x6aad5bf0
test dword [esp + 0x14], 0x100
jne 0x6aad5d40
test byte [esp + 0x14], 0x40
jne 0x6aad5d90
mov edx, ebp
mov eax, 0x30
call fcn.6aad48a0
mov eax, dword [ebp + 4]
mov edx, ebp
and eax, 0x20
or eax, 0x58
call fcn.6aad48a0
mov edx, dword [ebp + 8]
test edx, edx
jle 0x6aad5c5d
mov eax, dword [ebp + 4]
and eax, 0x600
cmp eax, 0x200
je 0x6aad5d51
cmp ebx, dword [esp + 0x10]
mov edi, dword [esp + 0x10]
jbe 0x6aad5c9c
mov esi, esi
lea edi, [edi]
sub ebx, 1
movsx eax, byte [ebx]
mov edx, ebp
call fcn.6aad4df0
cmp ebx, edi
jne 0x6aad5c70
mov eax, dword [ebp + 0xc]
lea edx, [eax - 1]
test eax, eax
mov dword [ebp + 0xc], edx
jle 0x6aad5ca9
nop
mov edx, ebp
mov eax, 0x30
call fcn.6aad48a0
mov eax, dword [ebp + 0xc]
lea edx, [eax - 1]
test eax, eax
mov dword [ebp + 0xc], edx
jg 0x6aad5c90
mov eax, dword [ebp + 4]
mov edx, ebp
and eax, 0x20
or eax, 0x50
call fcn.6aad48a0
mov eax, dword [esp + 8]
add dword [ebp + 8], esi
mov ecx, ebp
or dword [ebp + 4], 0x1c0
cdq
call fcn.6aad4e30
add esp, 0x5c
pop ebx
pop esi
pop edi
pop ebp
ret
or dword [ebp + 4], 0x80
jmp 0x6aad58b4
movsx eax, word [esp + 8]
mov esi, 2
mov dword [esp + 8], eax
jmp 0x6aad5c07
mov eax, dword [ebp + 4]
mov dword [esp + 0x14], eax
lea eax, [esp + 0x3e]
mov dword [esp + 0x10], eax
mov edx, dword [ebp + 0xc]
test edx, edx
jle 0x6aad5de3
lea eax, [esp + 0x3f]
mov byte [esp + 0x3e], 0x2e
lea ebx, [eax + 1]
mov byte [eax], 0x30
jmp 0x6aad5b25
mov dword [ebp + 8], eax
jmp 0x6aad5c07
mov edx, ebp
mov eax, 0x2b
call fcn.6aad48a0
jmp 0x6aad5c27
sub edx, 1
mov dword [ebp + 8], edx
mov esi, esi
lea edi, [edi]
mov edx, ebp
mov eax, 0x30
call fcn.6aad48a0
mov eax, dword [ebp + 8]
lea edx, [eax - 1]
test eax, eax
mov dword [ebp + 8], edx
jg 0x6aad5d60
jmp 0x6aad5c5d
mov ebp, dword [esp + 8]
jmp 0x6aad59a5
mov edx, ebp
mov eax, 0x20
call fcn.6aad48a0
jmp 0x6aad5c27
fstp st(0)
mov ecx, ebp
mov edx, 0x6ab672c1
xor eax, eax
call fcn.6aad4b00
jmp 0x6aad5ccf
mov eax, edx
mov ecx, ebp
mov edx, 0x6ab672c5
and eax, 0x8000
call fcn.6aad4b00
jmp 0x6aad5ccf
add word [esp + 8], 1
jmp 0x6aad5ae4
mov esi, 2
jmp 0x6aad5b9c
test dword [esp + 0x14], 0x800
mov eax, dword [esp + 0x10]
je 0x6aad5d26
jmp 0x6aad5d1d
mov ebx, dword [ebp + 0xc]
mov eax, 0xffffc002
mov word [esp + 8], ax
cmp ebx, 0xe
jbe 0x6aad5aa6
jmp 0x6aad5928