Function at 0x6e6fbe
Capabilities:
Encrypt data using aes
Reference aes constants

Disassembly:
lea edx, reloc.KERNEL32.dll_SetErrorMode
jmp 0x6e6edb
jmp 0x6e749f
dec edx
mov dh, 0x7c
jmp 0x6e6f03
mov dx, ax
bswap edx
movzx ebx, byte [esi + 0x11]
mov ebx, dword [ebx*4 + reloc.KERNEL32.dll_SetErrorMode]
jmp 0x6e6ec5
lea edi, [eax*4]
mov di, word [esp]
jmp 0x6e6f2e
add esi, 0x10
xchg di, dx
mov edx, dword [esi]
mov edi, ebx
jmp 0x6e6eed
pushfd
mov dword [esp], eax
and edi, ecx
call fcn.006e6f3c
xor dh, byte [edx + 0x5ab24720]
xor byte [edi + 0x5ab14227], dh
test al, 0x3e
pop ecx
test al, 0x56
inc ebp
hlt
mov edi, edx
shr edi, 0x18
mov edi, dword [edi*4 + reloc.KERNEL32.dll_SetErrorMode]
jmp 0x6e6f0f
sub esp, 0xb
lea esp, [esp + 3]
jmp 0x6e6fdf
and edx, ecx
mov edx, dword [edx*4 + reloc.KERNEL32.dll_SetErrorMode]
clc
jmp 0x6e7010
and edx, ecx
lea esp, [esp + 0xc]
xor edi, dword [edx*4 + reloc.KERNEL32.dll_SetErrorMode]
jmp 0x6e704b
mov dword [esi], edi
ror di, 8
dec edi
jmp 0x6e71e7
mov edx, dword [esi + 4]
sub esp, 0x11
mov byte [esp + 7], bl
lea esp, [esp + 1]
jmp 0x6e701f
bt ebx, edx
rcl ebx, cl
mov ebx, dword [esp]
movzx ebx, byte [esi + 6]
jmp 0x6e70c5
and ebx, ecx
lea esp, [esp + 0x30]
xor edi, dword [ebx*4 + reloc.KERNEL32.dll_SetErrorMode]
mov bx, word [esp]
jmp 0x6e7075
mov ebx, dword [ebx*4 + reloc.KERNEL32.dll_SetErrorMode]
sub esp, 0x14
stc
and ebx, ecx
call fcn.006e7083
movzx ebx, byte [esi + 9]
jmp 0x6e7116
and edi, ecx
mov edi, dword [edi*4 + reloc.KERNEL32.dll_SetErrorMode]
clc
pushal
mov dword [esp], esi
jmp 0x6e709c
lea esp, [esp + 2]
jmp 0x6e7124
and edx, ecx
mov edx, dword [edx*4 + reloc.KERNEL32.dll_SetErrorMode]
push cx
push ebp
jmp 0x6e7100
and edx, ecx
pushfd
lea esp, [esp + 8]
xor edi, dword [edx*4 + reloc.KERNEL32.dll_SetErrorMode]
jmp 0x6e71b3
shr edi, 0x18
stc
mov edi, dword [edi*4 + reloc.KERNEL32.dll_SetErrorMode]
jmp 0x6e70f0
mov di, word [esp]
btc di, bx
sub esp, 5
lea esp, [esp + 1]
jmp 0x6e7193
mov dword [esi + 4], edi
dec di
push bp
lea esp, [esp + 2]
mov ebx, dword [ebx*4 + reloc.KERNEL32.dll_SetErrorMode]
jmp 0x6e7152
mov edi, edx
call fcn.006e717d
mov edi, dword [edi*4 + reloc.KERNEL32.dll_SetErrorMode]
stc
cmc
jmp 0x6e71c0
mov dl, 3
mov edx, dword [esi + 8]
push si
lea esp, [esp + 2]
jmp 0x6e7169
and edi, ecx
call 0x6e71c8
push ebp
mov edi, dword [edi*4 + reloc.KERNEL32.dll_SetErrorMode]
and ebx, ecx
jmp 0x6e7267
mov ebx, dword [ebx*4 + reloc.KERNEL32.dll_SetErrorMode]
lea edi, reloc.KERNEL32.dll_SetErrorMode
mov di, ax
mov edi, edx
jmp 0x6e7145
lea esp, [esp + 0xc]
xor edi, dword [ebx*4 + reloc.KERNEL32.dll_SetErrorMode]
xchg bh, bl
movzx ebx, byte [esi + 0xa]
call 0x6e722f
and edx, ecx
sub esp, 9
lea esp, [esp + 1]
jmp 0x6e74e6
mov edx, dword [esi + 0xc]
push eax
push esi
or al, 0x50
mov dword [esi + 8], edi
call fcn.006e7362
dec dword [ebp - 4]
mov dword [esi + 0xc], edi
jne 0x68a661
je 0x68a677
jb 0x6e744e
xchg dword [edx - 0x69], esi
div dword [edi - 0x19]
xor byte [ecx - 0x7f], 0xea
add eax, 0x8d50ca21
and al, 8
xor edi, dword [edx*4 + reloc.KERNEL32.dll_SetErrorMode]
jmp 0x6e7459
pop esi
bswap ebx
mov bl, byte [esp]
jmp 0x6e74be
pop edi
not bh
xchg bl, bh
mov ebx, esi
jmp 0x6e7489
mov ebx, dword [esp]
lea esp, [esp + 4]
leave
ret
lea esp, [esp + 8]
xor edi, dword [edx*4 + reloc.KERNEL32.dll_SetErrorMode]
mov dh, 0xaf
mov edx, ebx
not edx
jmp 0x6e744d