Function at 0x6fef13b0
Capabilities:
Encode data using xor

Disassembly:
push ebp
push edi
push esi
push ebx
mov ebx, eax
sub esp, 0x5c
fld xword [esp + 0x70]
fld st(0)
fstp xword [esp + 0x28]
fxam
wait
fnstsw ax
and ax, 0x4500
cmp ax, 0x100
je 0x6fef18b4
movzx edi, word [esp + 0x30]
mov esi, edi
and esi, 0x8000
jne 0x6fef1520
fxam
wait
fnstsw ax
fstp st(0)
and ax, 0x4500
cmp ax, 0x500
je 0x6fef18c9
and di, 0x7fff
mov ecx, edi
je 0x6fef1530
mov ebp, dword [ebx + 0xc]
lea eax, [ecx - 0x3fff]
mov esi, dword [esp + 0x28]
mov edi, dword [esp + 0x2c]
mov word [esp + 0x16], ax
cmp ebp, 0xe
jbe 0x6fef1681
mov eax, edi
or eax, esi
je 0x6fef184b
mov eax, dword [ebx + 4]
lea ecx, [esp + 0x38]
movzx edx, word [esp + 0x16]
mov dword [esp + 8], ebx
mov ebp, ecx
mov dword [esp + 0xc], ecx
mov ecx, eax
mov dword [esp + 0x18], eax
and eax, 0x20
and ecx, 0x800
mov byte [esp + 0x10], al
mov dword [esp + 0x1c], ecx
mov ecx, ebp
jmp 0x6fef14a7
mov ebx, dword [esp + 8]
mov ebx, dword [ebx + 0xc]
test ebx, ebx
jle 0x6fef147a
mov ebp, dword [esp + 8]
sub ebx, 1
mov dword [ebp + 0xc], ebx
shrd esi, edi, 4
shr edi, 4
test eax, eax
mov ebp, ecx
je 0x6fef14ff
cmp eax, 9
lea ecx, [ebp + 1]
jle 0x6fef1517
add eax, 0x37
or al, byte [esp + 0x10]
mov byte [ebp], al
mov eax, edi
or eax, esi
je 0x6fef1580
mov eax, esi
and eax, 0xf
cmp eax, esi
jne 0x6fef1465
cmp ecx, dword [esp + 0xc]
ja 0x6fef14d0
mov ebp, dword [esp + 0x1c]
test ebp, ebp
jne 0x6fef14d0
mov ebx, dword [esp + 8]
mov ebp, ecx
mov ebx, dword [ebx + 0xc]
test ebx, ebx
jle 0x6fef14d6
nop
lea esi, [esi]
lea ebp, [ecx + 1]
mov byte [ecx], 0x2e
cmp edi, 0
ja 0x6fef14e0
cmp esi, 1
jbe 0x6fef14f7
lea ecx, [edx - 1]
shrd esi, edi, 1
shr edi, 1
mov edx, ecx
mov ebx, esi
lea ecx, [edx - 1]
xor ebx, 1
or ebx, edi
jne 0x6fef14e3
xor esi, esi
xor edi, edi
test eax, eax
jne 0x6fef1487
cmp ebp, dword [esp + 0xc]
ja 0x6fef1514
mov ecx, dword [esp + 8]
mov ecx, dword [ecx + 0xc]
test ecx, ecx
js 0x6fef1700
lea ecx, [ebp + 1]
add eax, 0x30
jmp 0x6fef149a
or dword [ebx + 4], 0x80
jmp 0x6fef13e9
mov edx, dword [esp + 0x2c]
mov eax, dword [esp + 0x28]
mov edi, edx
or edi, eax
je 0x6fef183c
test edx, edx
js 0x6fef18ee
mov ecx, 0xffffc001
nop
shld edx, eax, 1
mov edi, ecx
add eax, eax
sub ecx, 1
test edx, edx
jns 0x6fef1550
mov word [esp + 0x16], di
mov esi, eax
mov edi, edx
mov ebp, dword [ebx + 0xc]
cmp ebp, 0xe
jbe 0x6fef169f
jmp 0x6fef1434
cmp ecx, dword [esp + 0xc]
mov word [esp + 0x16], dx
mov ebp, ecx
mov ebx, dword [esp + 8]
je 0x6fef18e6
mov eax, dword [ebx + 8]
test eax, eax
mov dword [esp + 8], eax
jle 0x6fef1829
mov eax, ebp
sub eax, dword [esp + 0xc]
mov edx, dword [ebx + 0xc]
movsx edi, word [esp + 0x16]
test edx, edx
lea ecx, [eax + edx]
mov edx, dword [esp + 0x18]
mov dword [esp + 0x10], edi
cmovg eax, ecx
mov ecx, 0x66666667
and edx, 0x1c0
cmp edx, 1
sbb edx, edx
lea esi, [eax + edx + 6]
mov eax, edi
imul ecx
mov eax, edi
sar eax, 0x1f
mov ecx, edx
sar ecx, 2
sub ecx, eax
je 0x6fef18dc
mov edi, 2
mov eax, 0x66666667
add esi, 1
add edi, 1
imul ecx
sar ecx, 0x1f
sar edx, 2
sub edx, ecx
mov ecx, edx
jne 0x6fef15f1
movsx edi, di
cmp dword [esp + 8], esi
jle 0x6fef1710
mov eax, dword [esp + 8]
sub eax, esi
test dword [esp + 0x18], 0x600
jne 0x6fef1876
lea edx, [eax - 1]
test eax, eax
mov dword [ebx + 8], edx
jle 0x6fef1717
lea esi, [esi]
mov edx, ebx
mov eax, 0x20
call fcn.6fef01b0
mov eax, dword [ebx + 8]
lea edx, [eax - 1]
test eax, eax
mov dword [ebx + 8], edx
jg 0x6fef1640
mov eax, dword [ebx + 4]
mov dword [esp + 0x18], eax
test byte [esp + 0x18], 0x80
je 0x6fef1722
nop
lea esi, [esi]
mov edx, ebx
mov eax, 0x2d
call fcn.6fef01b0
jmp 0x6fef173b
test edi, edi
js 0x6fef169f
mov ecx, eax
mov esi, esi
lea edi, [edi]
shld edi, esi, 1
add esi, esi
test edi, edi
jns 0x6fef1690
mov word [esp + 0x16], cx
mov ecx, 0xe
mov eax, 4
xor edx, edx
sub ecx, ebp
shl ecx, 2
shrd esi, edi, 1
shld edx, eax, cl
shr edi, 1
shl eax, cl
test cl, 0x20
je 0x6fef16c4
mov edx, eax
xor eax, eax
add eax, esi
adc edx, edi
test edx, edx
js 0x6fef18a9
shld edx, eax, 1
add eax, eax
mov ecx, 0xf
xor esi, esi
sub ecx, ebp
shl ecx, 2
shrd eax, edx, cl
shr edx, cl
test cl, 0x20
cmovne eax, edx
cmovne edx, esi
mov edi, edx
mov esi, eax
jmp 0x6fef1434
mov ecx, ebp
jmp 0x6fef149d
mov dword [ebx + 8], 0xffffffff
test byte [esp + 0x18], 0x80
jne 0x6fef1670
test dword [esp + 0x18], 0x100
jne 0x6fef1887
test byte [esp + 0x18], 0x40
jne 0x6fef1898
mov edx, ebx
mov eax, 0x30
call fcn.6fef01b0
mov eax, dword [ebx + 4]
mov edx, ebx
and eax, 0x20
or eax, 0x58
call fcn.6fef01b0
mov eax, dword [ebx + 8]
test eax, eax
jle 0x6fef1789
test byte [ebx + 5], 2
je 0x6fef1789
sub eax, 1
mov dword [ebx + 8], eax
lea esi, [esi]
mov edx, ebx
mov eax, 0x30
call fcn.6fef01b0
mov eax, dword [ebx + 8]
lea edx, [eax - 1]
test eax, eax
mov dword [ebx + 8], edx
jg 0x6fef1770
cmp ebp, dword [esp + 0xc]
mov esi, dword [esp + 0xc]
ja 0x6fef17b7
jmp 0x6fef17dd
movzx eax, word [ebx + 0x1c]
test ax, ax
mov word [esp + 0x26], ax
je 0x6fef17b3
lea eax, [esp + 0x26]
mov ecx, ebx
mov edx, 1
call fcn.6fef0210
cmp ebp, esi
je 0x6fef17dd
sub ebp, 1
movsx eax, byte [ebp]
cmp eax, 0x2e
je 0x6fef1820
cmp eax, 0x2c
je 0x6fef1795
mov edx, ebx
call fcn.6fef01b0
jmp 0x6fef17b3
mov edx, ebx
mov eax, 0x30
call fcn.6fef01b0
mov eax, dword [ebx + 0xc]
lea edx, [eax - 1]
test eax, eax
mov dword [ebx + 0xc], edx
jg 0x6fef17d1
mov eax, dword [ebx + 4]
mov edx, ebx
and eax, 0x20
or eax, 0x50
call fcn.6fef01b0
mov eax, dword [esp + 0x10]
add dword [ebx + 8], edi
mov ecx, ebx
or dword [ebx + 4], 0x1c0
cdq
call fcn.6fef04d0
add esp, 0x5c
pop ebx
pop esi
pop edi
pop ebp
ret
mov eax, ebx
call fcn.6fef0b90
jmp 0x6fef17b3
movsx eax, word [esp + 0x16]
mov edi, 2
mov dword [esp + 0x10], eax
jmp 0x6fef1717
mov ebp, dword [ebx + 0xc]
cmp ebp, 0xe
jbe 0x6fef187e
xor edx, edx
mov word [esp + 0x16], dx
mov eax, dword [ebx + 4]
mov dword [esp + 0x18], eax
lea eax, [esp + 0x38]
mov dword [esp + 0xc], eax
test ebp, ebp
jle 0x6fef1901
lea eax, [esp + 0x39]
mov byte [esp + 0x38], 0x2e
lea ebp, [eax + 1]
mov byte [eax], 0x30
jmp 0x6fef1595
mov dword [ebx + 8], eax
jmp 0x6fef1717
xor esi, esi
xor edi, edi
jmp 0x6fef1690
mov edx, ebx
mov eax, 0x2b
call fcn.6fef01b0
jmp 0x6fef173b
mov edx, ebx
mov eax, 0x20
call fcn.6fef01b0
jmp 0x6fef173b
add word [esp + 0x16], 1
jmp 0x6fef16d6
fstp st(0)
mov ecx, ebx
mov edx, 0x7076988c
xor eax, eax
call fcn.6fef0430
jmp 0x6fef1810
mov ecx, ebx
mov edx, 0x70769890
mov eax, esi
call fcn.6fef0430
jmp 0x6fef1810
mov edi, 2
jmp 0x6fef160d
mov ebp, dword [ebx + 0xc]
jmp 0x6fef185a
mov esi, eax
mov eax, 0xffffc002
mov edi, edx
mov word [esp + 0x16], ax
jmp 0x6fef1568
test dword [esp + 0x18], 0x800
mov eax, dword [esp + 0xc]
je 0x6fef186b
jmp 0x6fef1862