Function at 0x6f6a00
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, eax
push edi
push esi
push ebx
sub esp, 0x5c
fld xword [esp + 0x70]
fld st(0)
fstp xword [esp + 0x28]
fxam
wait
fnstsw ax
and ax, 0x4500
cmp ax, 0x100
je 0x6f6e8a
movzx ebx, word [esp + 0x30]
mov esi, ebx
and esi, 0x8000
jne 0x6f6bf1
fxam
wait
fnstsw ax
fstp st(0)
and ax, 0x4500
cmp ax, 0x500
je 0x6f6e9c
and bx, 0x7fff
je 0x6f6c74
mov eax, dword [esp + 0x28]
sub bx, 0x3fff
mov edx, dword [esp + 0x2c]
mov edi, dword [ebp + 0xc]
cmp edi, 0xe
mov dword [esp + 0xc], edi
jbe 0x6f6c06
mov edi, edx
or edi, eax
je 0x6f6eaf
lea edi, [esp + 0x38]
mov dword [esp + 0x10], edi
mov esi, edi
mov dword [esp + 0xc], ebp
nop
mov ebp, eax
mov ecx, eax
and ebp, 0xf
mov edi, edx
xor ecx, ebp
or edi, ecx
je 0x6f6cd0
mov edi, dword [esp + 0xc]
mov ecx, dword [edi + 0xc]
test ecx, ecx
jle 0x6f6ab8
mov edi, dword [esp + 0xc]
sub ecx, 1
mov dword [edi + 0xc], ecx
shrd eax, edx, 4
mov edi, esi
shr edx, 4
test ebp, ebp
jne 0x6f6ca7
cmp edi, dword [esp + 0x10]
ja 0x6f6adc
mov ecx, dword [esp + 0xc]
mov esi, edi
mov ecx, dword [ecx + 0xc]
test ecx, ecx
js 0x6f6ae4
lea esi, [edi + 1]
lea ecx, [ebp + 0x30]
mov byte [edi], cl
mov edi, edx
or edi, eax
jne 0x6f6a90
cmp esi, dword [esp + 0x10]
mov edi, esi
mov ebp, dword [esp + 0xc]
je 0x6f6ee7
mov eax, dword [ebp + 4]
mov dword [esp + 0xc], eax
mov eax, dword [ebp + 8]
test eax, eax
mov dword [esp + 0x18], eax
jle 0x6f6e39
mov edx, dword [ebp + 0xc]
mov eax, edi
movsx ebx, bx
sub eax, dword [esp + 0x10]
mov dword [esp + 0x14], ebx
test edx, edx
lea ecx, [eax + edx]
mov edx, dword [esp + 0xc]
cmovg eax, ecx
and edx, 0x1c0
cmp edx, 1
sbb edx, edx
lea esi, [eax + edx + 6]
mov eax, ebx
mov edx, 0x66666667
imul edx
mov eax, ebx
sar eax, 0x1f
sar edx, 2
sub edx, eax
mov ecx, edx
je 0x6f6eda
mov ebx, 2
nop
lea esi, [esi]
mov eax, 0x66666667
add esi, 1
imul ecx
add ebx, 1
sar ecx, 0x1f
sar edx, 2
sub edx, ecx
mov ecx, edx
jne 0x6f6b60
movsx eax, bx
mov dword [esp + 0x1c], eax
cmp dword [esp + 0x18], esi
jle 0x6f6d20
mov eax, dword [esp + 0x18]
sub eax, esi
test dword [esp + 0xc], 0x600
jne 0x6f6e58
lea edx, [eax - 1]
test eax, eax
mov dword [ebp + 8], edx
jle 0x6f6d27
lea esi, [esi]
mov edx, ebp
mov eax, 0x20
call fcn.006f5980
mov eax, dword [ebp + 8]
lea edx, [eax - 1]
test eax, eax
mov dword [ebp + 8], edx
jg 0x6f6bb0
mov eax, dword [ebp + 4]
mov dword [esp + 0xc], eax
test byte [esp + 0xc], 0x80
je 0x6f6d32
nop
lea esi, [esi]
mov edx, ebp
mov eax, 0x2d
call fcn.006f5980
jmp 0x6f6d4b
or dword [ebp + 4], 0x80
jmp 0x6f6a39
shld edx, eax, 1
add eax, eax
test edx, edx
jns 0x6f6c00
shrd eax, edx, 1
mov esi, eax
mov eax, 0xe
sub eax, dword [esp + 0xc]
shr edx, 1
mov edi, edx
xor edx, edx
lea ecx, [eax*4]
mov eax, 4
shld edx, eax, cl
shl eax, cl
test cl, 0x20
je 0x6f6c39
mov edx, eax
xor eax, eax
add esi, eax
adc edi, edx
test edi, edi
js 0x6f6e82
shld edi, esi, 1
add esi, esi
mov eax, 0xf
mov edx, edi
sub eax, dword [esp + 0xc]
lea ecx, [eax*4]
mov eax, esi
shr edx, cl
xor esi, esi
shrd eax, edi, cl
and ecx, 0x20
cmovne eax, edx
cmovne edx, esi
jmp 0x6f6a80
mov edx, dword [esp + 0x2c]
mov eax, dword [esp + 0x28]
mov ebx, edx
or ebx, eax
je 0x6f6e4d
test edx, edx
js 0x6f6ef0
mov ecx, 0xffffc001
shld edx, eax, 1
mov ebx, ecx
add eax, eax
sub ecx, 1
test edx, edx
jns 0x6f6c93
jmp 0x6f6a66
cmp ebp, 9
lea esi, [edi + 1]
jbe 0x6f6adf
lea ecx, [ebp + 0x37]
mov ebp, dword [esp + 0xc]
mov ebp, dword [ebp + 4]
mov dword [esp + 0x14], ebp
movzx ebp, byte [esp + 0x14]
and ebp, 0x20
or ecx, ebp
jmp 0x6f6ae2
cmp esi, dword [esp + 0x10]
ja 0x6f6cf0
mov edi, dword [esp + 0xc]
test byte [edi + 5], 8
jne 0x6f6cf0
mov ecx, dword [esp + 0xc]
mov edi, esi
mov ecx, dword [ecx + 0xc]
test ecx, ecx
jle 0x6f6cf6
lea esi, [esi]
lea edi, [esi + 1]
mov byte [esi], 0x2e
mov ecx, eax
xor ecx, 1
or ecx, edx
je 0x6f6d16
lea ecx, [ebx - 1]
shrd eax, edx, 1
mov ebx, ecx
mov esi, eax
shr edx, 1
xor esi, 1
or esi, edx
lea ecx, [ebx - 1]
jne 0x6f6d02
xor eax, eax
xor edx, edx
jmp 0x6f6ac1
mov dword [ebp + 8], 0xffffffff
test byte [esp + 0xc], 0x80
jne 0x6f6be0
test dword [esp + 0xc], 0x100
jne 0x6f6e60
test byte [esp + 0xc], 0x40
jne 0x6f6e71
mov edx, ebp
mov eax, 0x30
call fcn.006f5980
mov eax, dword [ebp + 4]
mov edx, ebp
and eax, 0x20
or eax, 0x58
call fcn.006f5980
mov eax, dword [ebp + 8]
test eax, eax
jle 0x6f6d99
test byte [ebp + 5], 2
je 0x6f6d99
sub eax, 1
mov dword [ebp + 8], eax
lea esi, [esi]
mov edx, ebp
mov eax, 0x30
call fcn.006f5980
mov eax, dword [ebp + 8]
lea edx, [eax - 1]
test eax, eax
mov dword [ebp + 8], edx
jg 0x6f6d80
cmp edi, dword [esp + 0x10]
mov ebx, dword [esp + 0x10]
ja 0x6f6dc7
jmp 0x6f6dee
movzx eax, word [ebp + 0x1c]
test ax, ax
mov word [esp + 0x26], ax
je 0x6f6dc3
mov ecx, ebp
mov edx, 1
lea eax, [esp + 0x26]
call fcn.006f59e0
cmp edi, ebx
je 0x6f6dee
sub edi, 1
movsx eax, byte [edi]
cmp eax, 0x2e
je 0x6f6e30
cmp eax, 0x2c
je 0x6f6da5
mov edx, ebp
call fcn.006f5980
nop
jmp 0x6f6dc3
mov edx, ebp
mov eax, 0x30
call fcn.006f5980
mov eax, dword [ebp + 0xc]
lea edx, [eax - 1]
test eax, eax
mov dword [ebp + 0xc], edx
jg 0x6f6de2
mov eax, dword [ebp + 4]
mov edx, ebp
and eax, 0x20
or eax, 0x50
call fcn.006f5980
mov eax, dword [esp + 0x1c]
mov ecx, ebp
add dword [ebp + 8], eax
mov eax, dword [esp + 0x14]
or dword [ebp + 4], 0x1c0
cdq
call fcn.006f6100
add esp, 0x5c
pop ebx
pop esi
pop edi
pop ebp
ret
mov eax, ebp
call fcn.006f5c50
jmp 0x6f6dc3
movsx eax, bx
mov dword [esp + 0x1c], 2
mov dword [esp + 0x14], eax
jmp 0x6f6d27
xor ebx, ebx
xor eax, eax
xor edx, edx
jmp 0x6f6a66
mov dword [ebp + 8], eax
jmp 0x6f6d27
mov edx, ebp
mov eax, 0x2b
call fcn.006f5980
jmp 0x6f6d4b
mov edx, ebp
mov eax, 0x20
call fcn.006f5980
jmp 0x6f6d4b
add ebx, 1
jmp 0x6f6c4b
fstp st(0)
mov ecx, ebp
mov edx, 0x8d93c3
xor eax, eax
call fcn.006f5bc0
jmp 0x6f6e25
mov ecx, ebp
mov edx, 0x8d93c7
mov eax, esi
call fcn.006f5bc0
jmp 0x6f6e25
lea eax, [esp + 0x38]
mov dword [esp + 0x10], eax
mov edx, dword [esp + 0xc]
mov eax, dword [ebp + 4]
test edx, edx
jle 0x6f6efa
mov dword [esp + 0xc], eax
mov byte [esp + 0x38], 0x2e
lea eax, [esp + 0x39]
lea edi, [eax + 1]
mov byte [eax], 0x30
jmp 0x6f6b01
mov dword [esp + 0x1c], 2
jmp 0x6f6b80
mov eax, dword [ebp + 0xc]
mov dword [esp + 0xc], eax
jmp 0x6f6eb7
mov ebx, 0xffffc002
jmp 0x6f6a66
mov edx, eax
and dh, 8
mov dword [esp + 0xc], eax
mov eax, dword [esp + 0x10]
je 0x6f6ecf
jmp 0x6f6ec6