Function at 0x66d990
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
push edi
push esi
mov esi, eax
push ebx
and esp, 0xfffffff0
sub esp, 0xa0
fld xword [ebp + 8]
fxam
wait
fnstsw ax
and ax, 0x4500
cmp ax, 0x100
je 0x66db90
fld st(0)
fstp xword [esp + 0x60]
movzx edi, word [esp + 0x68]
test di, di
js 0x66da40
fxam
wait
fnstsw ax
and ax, 0x4500
cmp ax, 0x500
je 0x66dee8
fstp xword [esp + 0x50]
mov edx, dword [esp + 0x54]
mov eax, dword [esp + 0x50]
mov ecx, edx
mov dword [esp + 0x48], eax
mov edx, eax
mov dword [esp + 0x4c], ecx
and di, 0x7fff
jne 0x66da50
mov eax, ecx
or eax, edx
je 0x66dbb0
mov eax, edx
mov edx, ecx
test ecx, ecx
js 0x66dfbc
mov ecx, 0xffffc001
lea esi, [esi]
shld edx, eax, 1
mov edi, ecx
add eax, eax
sub ecx, 1
test edx, edx
jns 0x66da18
mov dword [esp + 0x48], eax
mov dword [esp + 0x4c], edx
mov ebx, dword [esi + 0xc]
cmp ebx, 0xe
ja 0x66daef
jmp 0x66da82
or dword [esi + 4], 0x80
jmp 0x66d9c7
mov ebx, dword [esi + 0xc]
sub di, 0x3fff
cmp ebx, 0xe
ja 0x66dbc8
mov edx, dword [esp + 0x4c]
mov eax, dword [esp + 0x48]
test edx, edx
js 0x66da82
lea esi, [esi]
shld edx, eax, 1
add eax, eax
test edx, edx
jns 0x66da70
mov dword [esp + 0x48], eax
mov dword [esp + 0x4c], edx
mov ecx, 0xe
mov eax, 4
xor edx, edx
sub ecx, ebx
shl ecx, 2
shld edx, eax, cl
shl eax, cl
test cl, 0x20
je 0x66daa1
mov edx, eax
xor eax, eax
mov dword [esp + 0x40], eax
mov eax, dword [esp + 0x48]
mov dword [esp + 0x44], edx
mov edx, dword [esp + 0x4c]
shrd eax, edx, 1
shr edx, 1
add eax, dword [esp + 0x40]
adc edx, dword [esp + 0x44]
test edx, edx
js 0x66df20
shld edx, eax, 1
add eax, eax
mov ecx, 0xf
sub ecx, ebx
xor ebx, ebx
shl ecx, 2
shrd eax, edx, cl
shr edx, cl
and ecx, 0x20
cmovne eax, edx
cmovne edx, ebx
mov dword [esp + 0x48], eax
mov dword [esp + 0x4c], edx
mov eax, dword [esi + 4]
lea ebx, [esp + 0x88]
mov word [esp + 0x34], di
mov dword [esp + 0x40], ebx
mov edx, eax
mov ecx, eax
mov dword [esp + 0x38], eax
mov eax, dword [esp + 0x48]
and edx, 0x800
and ecx, 0x20
mov dword [esp + 0x48], esi
mov dword [esp + 0x2c], edx
mov edx, dword [esp + 0x4c]
mov byte [esp + 0x3c], cl
jmp 0x66db53
cmp ebx, dword [esp + 0x40]
ja 0x66db41
mov edi, dword [esp + 0x48]
mov esi, dword [edi + 0xc]
test esi, esi
js 0x66db49
add ecx, 0x30
mov byte [ebx], cl
add ebx, 1
mov edi, edx
or edi, eax
je 0x66de88
mov edi, eax
mov ecx, eax
and edi, 0xfffffff0
and ecx, 0xf
or edi, edx
je 0x66de00
mov edi, dword [esp + 0x48]
shrd eax, edx, 4
shr edx, 4
mov esi, dword [edi + 0xc]
test esi, esi
jle 0x66db7d
sub esi, 1
mov dword [edi + 0xc], esi
test ecx, ecx
je 0x66db30
cmp ecx, 9
jbe 0x66db41
add ecx, 0x37
or cl, byte [esp + 0x3c]
jmp 0x66db44
fstp st(0)
lea esp, [ebp - 0xc]
mov ecx, esi
mov edx, 0x8d97db
xor eax, eax
pop ebx
pop esi
pop edi
pop ebp
jmp fcn.0066c650
mov ebx, dword [esi + 0xc]
cmp ebx, 0xe
ja 0x66dbda
mov eax, dword [esp + 0x48]
mov edx, dword [esp + 0x4c]
jmp 0x66da70
mov ecx, dword [esp + 0x4c]
mov edx, dword [esp + 0x48]
mov eax, ecx
or eax, edx
jne 0x66daef
mov eax, dword [esi + 4]
mov dword [esp + 0x38], eax
lea eax, [esp + 0x88]
mov dword [esp + 0x40], eax
mov eax, dword [esi + 0xc]
test eax, eax
jle 0x66df98
mov byte [esp + 0x88], 0x2e
lea eax, [esp + 0x89]
mov byte [eax], 0x30
lea ebx, [eax + 1]
mov eax, dword [esi + 8]
mov dword [esp + 0x34], eax
test eax, eax
jle 0x66deaa
movsx edx, di
mov eax, ebx
sub eax, dword [esp + 0x40]
mov dword [esp + 0x48], edx
mov edx, dword [esi + 0xc]
test edx, edx
lea ecx, [eax + edx]
mov edx, dword [esp + 0x38]
cmovg eax, ecx
mov ecx, 0x66666667
and edx, 0x1c0
mov edi, eax
mov eax, dword [esp + 0x48]
cmp edx, 1
sbb edi, 0xfffffffa
imul ecx
mov eax, dword [esp + 0x48]
sar eax, 0x1f
mov ecx, edx
sar ecx, 2
sub ecx, eax
je 0x66dfaf
mov dword [esp + 0x3c], ebx
mov dword [esp + 0x30], esi
mov esi, edi
nop
mov eax, 0x66666667
add edi, 1
imul ecx
mov eax, ecx
lea ebx, [edi + 2]
sar eax, 0x1f
sub ebx, esi
sar edx, 2
sub edx, eax
mov ecx, edx
jne 0x66dc70
movsx eax, bx
mov ebx, dword [esp + 0x3c]
mov esi, dword [esp + 0x30]
mov dword [esp + 0x3c], eax
mov eax, dword [esp + 0x34]
cmp eax, edi
jle 0x66ded8
sub eax, edi
test dword [esp + 0x38], 0x600
je 0x66df48
mov dword [esi + 8], eax
test byte [esp + 0x38], 0x80
jne 0x66dec4
test dword [esp + 0x38], 0x100
jne 0x66df08
test byte [esp + 0x38], 0x40
jne 0x66df30
mov edx, esi
mov eax, 0x30
call fcn.0066c2f0
mov eax, dword [esi + 4]
mov edx, esi
and eax, 0x20
or eax, 0x58
call fcn.0066c2f0
mov eax, dword [esi + 8]
test eax, eax
jle 0x66dd29
test byte [esi + 5], 2
je 0x66dd29
sub eax, 1
mov dword [esi + 8], eax
nop
mov edx, esi
mov eax, 0x30
call fcn.0066c2f0
mov eax, dword [esi + 8]
lea edx, [eax - 1]
mov dword [esi + 8], edx
test eax, eax
jg 0x66dd10
mov edi, dword [esp + 0x40]
cmp ebx, dword [esp + 0x40]
ja 0x66dd4e
jmp 0x66dd7c
movzx eax, word [esi + 0x1c]
mov word [esp + 0x78], ax
test ax, ax
jne 0x66de70
cmp ebx, edi
je 0x66dd7c
movsx eax, byte [ebx - 1]
sub ebx, 1
cmp eax, 0x2e
je 0x66ddf0
cmp eax, 0x2c
je 0x66dd38
mov edx, esi
call fcn.0066c2f0
jmp 0x66dd4a
mov edx, esi
mov eax, 0x30
call fcn.0066c2f0
mov eax, dword [esi + 0xc]
lea edx, [eax - 1]
mov dword [esi + 0xc], edx
test eax, eax
jg 0x66dd70
mov eax, dword [esi + 4]
mov edx, esi
and eax, 0x20
or eax, 0x50
call fcn.0066c2f0
mov eax, dword [esp + 0x3c]
add dword [esi + 8], eax
mov eax, dword [esp + 0x48]
or dword [esi + 4], 0x1c0
mov dword [esp + 0x10], esi
cdq
mov dword [esp + 0x78], eax
mov dword [esp + 0x7c], edx
mov ecx, edx
mov dword [esp], eax
mov eax, dword [esp + 0x7c]
sar ecx, 0x1f
mov dword [esp + 0x80], ecx
mov dword [esp + 0x84], ecx
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
mov dword [esp + 0xc], ecx
call fcn.0066cc80
lea esp, [ebp - 0xc]
pop ebx
pop esi
pop edi
pop ebp
ret
mov eax, esi
call fcn.0066d070
jmp 0x66dd4a
cmp ebx, dword [esp + 0x40]
ja 0x66de20
mov edi, dword [esp + 0x2c]
test edi, edi
jne 0x66de20
mov esi, dword [esp + 0x48]
mov esi, dword [esi + 0xc]
test esi, esi
jle 0x66de26
lea esi, [esi]
mov byte [ebx], 0x2e
add ebx, 1
mov esi, eax
xor esi, 1
mov edi, esi
movzx esi, word [esp + 0x34]
sub esi, 1
or edi, edx
je 0x66df88
mov dword [esp + 0x30], ebx
mov ebx, ecx
lea esi, [esi]
nop
shrd eax, edx, 1
shr edx, 1
mov edi, esi
mov ecx, eax
lea esi, [edi - 1]
xor ecx, 1
or ecx, edx
jne 0x66de48
mov ecx, ebx
mov word [esp + 0x34], di
mov ebx, dword [esp + 0x30]
xor eax, eax
xor edx, edx
jmp 0x66db7d
mov ecx, esi
mov edx, 1
lea eax, [esp + 0x78]
call fcn.0066c350
jmp 0x66dd4a
movzx edi, word [esp + 0x34]
mov esi, dword [esp + 0x48]
cmp ebx, dword [esp + 0x40]
je 0x66dbec
mov eax, dword [esi + 8]
mov dword [esp + 0x34], eax
test eax, eax
jg 0x66dc1b
movsx eax, di
mov dword [esp + 0x3c], 2
mov dword [esp + 0x48], eax
test byte [esp + 0x38], 0x80
je 0x66dcc6
mov edx, esi
mov eax, 0x2d
call fcn.0066c2f0
jmp 0x66dcdf
mov dword [esi + 8], 0xffffffff
jmp 0x66dcbb
fstp st(0)
lea esp, [ebp - 0xc]
mov eax, edi
mov ecx, esi
mov edx, 0x8d97df
pop ebx
and eax, 0x8000
pop esi
pop edi
pop ebp
jmp fcn.0066c650
mov edx, esi
mov eax, 0x2b
call fcn.0066c2f0
jmp 0x66dcdf
add edi, 1
jmp 0x66dacd
mov edx, esi
mov eax, 0x20
call fcn.0066c2f0
jmp 0x66dcdf
lea edx, [eax - 1]
mov dword [esi + 8], edx
test eax, eax
jle 0x66dcbb
lea esi, [esi]
lea esi, [esi]
mov edx, esi
mov eax, 0x20
call fcn.0066c2f0
mov eax, dword [esi + 8]
lea edx, [eax - 1]
mov dword [esi + 8], edx
test eax, eax
jg 0x66df60
mov eax, dword [esi + 4]
mov dword [esp + 0x38], eax
jmp 0x66dcbb
xor eax, eax
xor edx, edx
jmp 0x66db7d
mov eax, dword [esp + 0x40]
test dword [esp + 0x38], 0x800
je 0x66dc06
jmp 0x66dbf7
mov dword [esp + 0x3c], 2
jmp 0x66dc9c
mov edi, 0xffffc002
jmp 0x66da2f