Function at 0x6aa7ff80
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
push edi
push esi
push ebx
mov ebx, eax
sub esp, 0x7c
fld xword [ebp + 8]
fld st(0)
fstp xword [ebp - 0x40]
fxam
wait
fnstsw ax
and ax, 0x4500
cmp ax, 0x100
je 0x6aa804a9
movzx edx, word [ebp - 0x38]
mov esi, edx
and esi, 0x8000
jne 0x6aa80166
fxam
wait
fnstsw ax
fstp st(0)
and ax, 0x4500
cmp ax, 0x500
je 0x6aa804c4
and dx, 0x7fff
je 0x6aa80172
mov esi, dword [ebp - 0x40]
sub dx, 0x3fff
mov edi, dword [ebp - 0x3c]
mov word [ebp - 0x6a], dx
mov edx, dword [ebx + 0xc]
cmp edx, 0xe
mov dword [ebp - 0x58], edx
ja 0x6aa80069
test edi, edi
js 0x6aa80011
movzx eax, word [ebp - 0x6a]
lea esi, [esi]
shld edi, esi, 1
add esi, esi
test edi, edi
jns 0x6aa80000
mov dword [ebp - 0x58], edx
mov word [ebp - 0x6a], ax
mov ecx, 0xe
mov eax, 4
sub ecx, dword [ebp - 0x58]
xor edx, edx
shrd esi, edi, 1
shr edi, 1
shl ecx, 2
mov dword [ebp - 0x54], ecx
movzx ecx, byte [ebp - 0x54]
shld edx, eax, cl
shl eax, cl
test cl, 0x20
je 0x6aa8003e
mov edx, eax
xor eax, eax
add esi, eax
adc edi, edx
test edi, edi
js 0x6aa8049f
shld edi, esi, 1
add esi, esi
mov ecx, 0xf
sub ecx, dword [ebp - 0x58]
shl ecx, 2
shrd esi, edi, cl
shr edi, cl
test cl, 0x20
je 0x6aa80069
mov esi, edi
xor edi, edi
mov edx, edi
lea ecx, [ebp - 0x2a]
or edx, esi
mov dword [ebp - 0x54], ecx
je 0x6aa804d7
mov dword [ebp - 0x50], ecx
mov ecx, dword [ebx + 4]
mov dword [ebp - 0x58], ebx
movzx eax, word [ebp - 0x6a]
mov ebx, esi
mov esi, edi
mov dword [ebp - 0x64], ecx
and ecx, 0x800
mov dword [ebp - 0x60], ecx
mov ecx, dword [ebp - 0x64]
and ecx, 0x20
mov dword [ebp - 0x5c], ecx
jmp 0x6aa800e7
mov ecx, dword [ebp - 0x58]
mov edx, dword [ecx + 0xc]
test edx, edx
jle 0x6aa800b4
mov ecx, dword [ebp - 0x58]
sub edx, 1
mov dword [ecx + 0xc], edx
shrd ebx, esi, 4
shr esi, 4
test edi, edi
je 0x6aa80148
cmp edi, 9
jle 0x6aa8015e
lea edx, [edi + 0x37]
or dl, byte [ebp - 0x5c]
mov ecx, dword [ebp - 0x50]
mov byte [ecx], dl
add ecx, 1
mov dword [ebp - 0x50], ecx
mov edx, esi
or edx, ebx
je 0x6aa801b0
mov edi, ebx
mov ecx, esi
and edi, 0xf
mov edx, edi
xor edx, ebx
or ecx, edx
jne 0x6aa800a1
mov ecx, dword [ebp - 0x54]
cmp dword [ebp - 0x50], ecx
ja 0x6aa80110
mov ebx, dword [ebp - 0x60]
test ebx, ebx
jne 0x6aa80110
mov edx, dword [ebp - 0x58]
mov ecx, dword [edx + 0xc]
test ecx, ecx
jle 0x6aa8011c
nop
mov ecx, dword [ebp - 0x50]
mov byte [ecx], 0x2e
add ecx, 1
mov dword [ebp - 0x50], ecx
cmp edi, 1
je 0x6aa8013c
lea edx, [eax - 1]
mov ecx, edi
xor ebx, ebx
shrd ecx, ebx, 1
mov eax, edx
mov esi, ecx
shr ebx, 1
xor esi, 1
or esi, ebx
lea edx, [eax - 1]
jne 0x6aa80128
xor ebx, ebx
xor esi, esi
test edi, edi
jne 0x6aa800c3
mov ecx, dword [ebp - 0x54]
cmp dword [ebp - 0x50], ecx
ja 0x6aa8015e
mov edx, dword [ebp - 0x58]
mov edx, dword [edx + 0xc]
test edx, edx
js 0x6aa800dd
lea edx, [edi + 0x30]
jmp 0x6aa800d2
or dword [ebx + 4], 0x80
jmp 0x6aa7ffb8
mov edi, dword [ebp - 0x3c]
mov esi, dword [ebp - 0x40]
mov word [ebp - 0x6a], 0
mov eax, edi
or eax, esi
je 0x6aa7ffe7
test edi, edi
js 0x6aa80513
mov edx, 0xffffc001
shld edi, esi, 1
mov eax, edx
add esi, esi
sub edx, 1
test edi, edi
jns 0x6aa80195
mov word [ebp - 0x6a], ax
jmp 0x6aa7ffe7
mov ecx, dword [ebp - 0x54]
cmp dword [ebp - 0x50], ecx
mov word [ebp - 0x6a], ax
mov ebx, dword [ebp - 0x58]
je 0x6aa8050b
mov ecx, dword [ebp - 0x64]
mov dword [ebp - 0x5c], ecx
mov ecx, dword [ebx + 8]
test ecx, ecx
mov dword [ebp - 0x60], ecx
jle 0x6aa80451
mov eax, dword [ebx + 0xc]
movsx ecx, word [ebp - 0x6a]
mov edx, dword [ebp - 0x50]
sub edx, dword [ebp - 0x54]
test eax, eax
mov dword [ebp - 0x58], ecx
jle 0x6aa801ed
add edx, eax
mov eax, dword [ebp - 0x64]
and eax, 0x1c0
cmp eax, 1
sbb eax, eax
lea esi, [edx + eax + 6]
mov eax, dword [ebp - 0x58]
mov edx, 0x66666667
imul edx
mov eax, dword [ebp - 0x58]
sar edx, 2
sar eax, 0x1f
mov ecx, edx
sub ecx, eax
je 0x6aa804ff
mov eax, 2
mov edi, 0x66666667
mov dword [ebp - 0x68], ebx
mov ebx, eax
lea esi, [esi]
mov eax, ecx
add esi, 1
imul edi
add ebx, 1
sar ecx, 0x1f
sar edx, 2
sub edx, ecx
mov ecx, edx
jne 0x6aa80230
movsx eax, bx
mov ebx, dword [ebp - 0x68]
mov dword [ebp - 0x68], eax
cmp dword [ebp - 0x60], esi
jle 0x6aa802a3
mov eax, dword [ebp - 0x60]
sub eax, esi
test dword [ebp - 0x64], 0x600
jne 0x6aa80464
lea edx, [eax - 1]
test eax, eax
mov dword [ebx + 8], edx
jle 0x6aa802aa
mov edx, ebx
mov eax, 0x20
call fcn.6aa7f080
mov eax, dword [ebx + 8]
lea edx, [eax - 1]
test eax, eax
mov dword [ebx + 8], edx
jg 0x6aa80270
mov ecx, dword [ebx + 4]
mov dword [ebp - 0x5c], ecx
test byte [ebp - 0x5c], 0x80
je 0x6aa802b0
mov edx, ebx
mov eax, 0x2d
call fcn.6aa7f080
jmp 0x6aa802c7
mov dword [ebx + 8], 0xffffffff
test byte [ebp - 0x5c], 0x80
jne 0x6aa80295
test dword [ebp - 0x5c], 0x100
jne 0x6aa8046c
test byte [ebp - 0x5c], 0x40
jne 0x6aa8048e
mov edx, ebx
mov eax, 0x30
call fcn.6aa7f080
mov eax, dword [ebx + 4]
mov edx, ebx
and eax, 0x20
or eax, 0x58
call fcn.6aa7f080
mov eax, dword [ebx + 8]
test eax, eax
jle 0x6aa8030f
test byte [ebx + 5], 2
je 0x6aa8030f
sub eax, 1
mov dword [ebx + 8], eax
mov edx, ebx
mov eax, 0x30
call fcn.6aa7f080
mov eax, dword [ebx + 8]
lea edx, [eax - 1]
test eax, eax
mov dword [ebx + 8], edx
jg 0x6aa802f6
mov ecx, dword [ebp - 0x54]
cmp dword [ebp - 0x50], ecx
mov esi, dword [ebp - 0x50]
ja 0x6aa80330
jmp 0x6aa803bd
mov edx, ebx
call fcn.6aa7f080
cmp esi, dword [ebp - 0x54]
je 0x6aa803bd
sub esi, 1
movsx eax, byte [esi]
cmp eax, 0x2e
jne 0x6aa80320
cmp dword [ebx + 0x10], 0xfffffffd
je 0x6aa80411
movzx edx, word [ebx + 0x14]
test dx, dx
je 0x6aa80400
mov eax, dword [ebx + 0x10]
mov dword [ebp - 0x50], esp
add eax, 0xf
and eax, 0xfffffff0
call fcn.6aa7e270
sub esp, eax
lea edi, [esp + 0x10]
lea eax, [ebp - 0x44]
mov dword [ebp - 0x44], 0
mov dword [esp + 8], eax
mov dword [esp + 4], edx
mov dword [esp], edi
call fcn.6aa824a0
test eax, eax
jle 0x6aa8047d
lea ecx, [edi + eax]
mov dword [ebp - 0x5c], esi
mov esi, edi
mov edi, ecx
movsx eax, byte [esi]
mov edx, ebx
add esi, 1
call fcn.6aa7f080
cmp esi, edi
jne 0x6aa80395
mov esi, dword [ebp - 0x5c]
mov esp, dword [ebp - 0x50]
jmp 0x6aa80327
mov edx, ebx
mov eax, 0x30
call fcn.6aa7f080
mov eax, dword [ebx + 0xc]
lea edx, [eax - 1]
test eax, eax
mov dword [ebx + 0xc], edx
jg 0x6aa803b1
mov eax, dword [ebx + 4]
mov edx, ebx
and eax, 0x20
or eax, 0x50
call fcn.6aa7f080
mov eax, dword [ebp - 0x58]
mov ecx, dword [ebp - 0x68]
add dword [ebx + 8], ecx
mov ecx, ebx
or dword [ebx + 4], 0x1c0
mov edx, eax
sar edx, 0x1f
call fcn.6aa7f340
lea esp, [ebp - 0xc]
pop ebx
pop esi
pop edi
pop ebp
ret
mov edx, ebx
mov eax, 0x2e
call fcn.6aa7f080
jmp 0x6aa80327
mov dword [ebp - 0x44], 0
call sub.msvcrt.dll_localeconv
lea edx, [ebp - 0x44]
mov dword [esp + 0xc], edx
lea ecx, [ebp - 0x46]
mov dword [esp + 8], 0x10
mov eax, dword [eax]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.6aa82810
test eax, eax
jle 0x6aa804be
movzx edx, word [ebp - 0x46]
mov word [ebx + 0x14], dx
mov dword [ebx + 0x10], eax
jmp 0x6aa80349
movsx ecx, word [ebp - 0x6a]
mov dword [ebp - 0x68], 2
mov dword [ebp - 0x58], ecx
jmp 0x6aa802aa
mov dword [ebx + 8], eax
jmp 0x6aa802aa
mov edx, ebx
mov eax, 0x2b
call fcn.6aa7f080
jmp 0x6aa802c7
mov edx, ebx
mov eax, 0x2e
call fcn.6aa7f080
jmp 0x6aa803a9
mov edx, ebx
mov eax, 0x20
call fcn.6aa7f080
jmp 0x6aa802c7
add word [ebp - 0x6a], 1
jmp 0x6aa80050
fstp st(0)
mov ecx, ebx
mov edx, 0x6ae56a70
xor eax, eax
call fcn.6aa7f2a0
jmp 0x6aa803f6
movzx edx, word [ebx + 0x14]
jmp 0x6aa80449
mov ecx, ebx
mov edx, 0x6ae56a74
mov eax, esi
call fcn.6aa7f2a0
jmp 0x6aa803f6
mov ecx, dword [ebx + 4]
mov dword [ebp - 0x64], ecx
mov esi, dword [ebp - 0x58]
mov ecx, dword [ebp - 0x64]
test esi, esi
mov dword [ebp - 0x5c], ecx
jle 0x6aa8051e
mov byte [ebp - 0x2a], 0x2e
lea edx, [ebp - 0x29]
mov byte [edx], 0x30
add edx, 1
mov dword [ebp - 0x50], edx
jmp 0x6aa801c9
mov dword [ebp - 0x68], 2
jmp 0x6aa8024f
mov eax, dword [ebx + 0xc]
mov dword [ebp - 0x58], eax
jmp 0x6aa804dd
mov word [ebp - 0x6a], 0xc002
jmp 0x6aa7ffe7
and ch, 8
mov edx, dword [ebp - 0x54]
je 0x6aa804f1
jmp 0x6aa804ea