Function at 0x407610
Capabilities:
Encode data using xor

Disassembly:
push ebp
push edi
push esi
push ebx
mov ebx, eax
sub esp, 0x5c
fld xword [esp + 0x70]
fld st(0)
fstp xword [esp + 0x28]
fxam
wait
fnstsw ax
and ax, 0x4500
cmp ax, 0x100
je 0x407b1b
movzx edx, word [esp + 0x30]
test dx, dx
js 0x407a80
fxam
wait
fnstsw ax
fstp st(0)
and ax, 0x4500
cmp ax, 0x500
je 0x407b30
mov eax, edx
and ax, 0x7fff
je 0x407820
mov edx, dword [ebx + 0xc]
mov edi, dword [esp + 0x28]
sub ax, 0x3fff
mov ebp, dword [esp + 0x2c]
cmp edx, 0xe
mov dword [esp], edi
mov dword [esp + 4], ebp
ja 0x407ab6
test ebp, ebp
js 0x4076a1
nop
lea esi, [esi]
shld ebp, edi, 1
add edi, edi
test ebp, ebp
jns 0x407690
mov dword [esp], edi
mov dword [esp + 4], ebp
mov ecx, 0xe
mov esi, 4
mov edi, 0
sub ecx, edx
xor ebp, ebp
shl ecx, 2
shld edi, esi, cl
shl esi, cl
test cl, 0x20
cmovne edi, esi
cmovne esi, ebp
mov dword [esp + 8], esi
mov dword [esp + 0xc], edi
mov esi, dword [esp]
mov edi, dword [esp + 4]
shrd esi, edi, 1
shr edi, 1
add esi, dword [esp + 8]
adc edi, dword [esp + 0xc]
test edi, edi
js 0x407b13
shld edi, esi, 1
add esi, esi
mov ecx, 0xf
xor ebp, ebp
sub ecx, edx
shl ecx, 2
shrd esi, edi, cl
shr edi, cl
test cl, 0x20
cmovne esi, edi
cmovne edi, ebp
mov dword [esp], esi
mov dword [esp + 4], edi
mov edi, dword [ebx + 4]
lea esi, [esp + 0x38]
mov ebp, dword [esp + 4]
mov dword [esp + 8], ebx
mov dword [esp + 0x10], esi
mov ecx, edi
mov dword [esp + 0x18], edi
and ecx, 0x800
mov dword [esp + 0x1c], ecx
mov ecx, edi
mov edi, dword [esp]
and ecx, 0x20
mov byte [esp + 0x17], cl
jmp 0x40778e
mov ebx, dword [esp + 8]
mov ecx, dword [ebx + 0xc]
test ecx, ecx
jle 0x407757
mov ebx, dword [esp + 8]
sub ecx, 1
mov dword [ebx + 0xc], ecx
shrd edi, ebp, 4
shr ebp, 4
test edx, edx
mov dword [esp], esi
je 0x4077f2
mov esi, dword [esp]
add esi, 1
cmp edx, 9
jle 0x407813
add edx, 0x37
or dl, byte [esp + 0x17]
mov ecx, dword [esp]
mov byte [ecx], dl
mov ecx, ebp
or ecx, edi
je 0x407880
mov edx, edi
and edx, 0xf
cmp edi, edx
jne 0x407742
cmp esi, dword [esp + 0x10]
ja 0x4077b3
mov ebx, dword [esp + 0x1c]
test ebx, ebx
jne 0x4077b3
mov ecx, dword [esp + 8]
mov dword [esp], esi
mov ecx, dword [ecx + 0xc]
test ecx, ecx
jle 0x4077bc
lea ecx, [esi + 1]
mov byte [esi], 0x2e
mov dword [esp], ecx
cmp ebp, 0
ja 0x4077c6
cmp edi, 1
jbe 0x4077e6
lea ecx, [eax - 1]
lea esi, [esi]
shrd edi, ebp, 1
shr ebp, 1
mov eax, ecx
mov ebx, edi
mov esi, ebp
lea ecx, [eax - 1]
xor ebx, 1
or esi, ebx
jne 0x4077d0
xor edi, edi
xor ebp, ebp
test edx, edx
jne 0x407769
mov ecx, dword [esp + 0x10]
cmp dword [esp], ecx
ja 0x40780d
mov esi, dword [esp + 8]
mov ecx, dword [esi + 0xc]
mov esi, dword [esp]
test ecx, ecx
js 0x407784
mov esi, dword [esp]
add esi, 1
add edx, 0x30
jmp 0x40777f
mov ebp, dword [esp + 0x2c]
mov edi, dword [esp + 0x28]
mov ecx, ebp
mov dword [esp], edi
mov dword [esp + 4], ebp
or ecx, edi
je 0x407a9a
test ebp, ebp
js 0x407b52
mov edx, 0xffffc001
lea esi, [esi]
lea edi, [edi]
shld ebp, edi, 1
mov eax, edx
add edi, edi
sub edx, 1
test ebp, ebp
jns 0x407850
mov dword [esp], edi
mov dword [esp + 4], ebp
mov edx, dword [ebx + 0xc]
cmp edx, 0xe
ja 0x407711
jmp 0x4076a1
cmp esi, dword [esp + 0x10]
mov ebx, dword [esp + 8]
je 0x407ad6
mov edi, dword [ebx + 8]
test edi, edi
mov dword [esp + 8], edi
jle 0x407a8c
cwde
mov edx, esi
sub edx, dword [esp + 0x10]
mov edi, eax
mov eax, dword [ebx + 0xc]
mov dword [esp], edi
lea ecx, [edx + eax]
test eax, eax
cmovg edx, ecx
xor eax, eax
test dword [esp + 0x18], 0x1c0
mov ecx, 0x66666667
setne al
lea ebp, [edx + eax + 5]
mov eax, edi
imul ecx
mov eax, edi
sar eax, 0x1f
mov ecx, edx
sar ecx, 2
sub ecx, eax
je 0x407b48
mov edi, 2
mov eax, 0x66666667
add ebp, 1
add edi, 1
imul ecx
sar ecx, 0x1f
sar edx, 2
sub edx, ecx
mov ecx, edx
jne 0x4078e5
movsx edi, di
mov eax, dword [esp + 8]
cmp eax, ebp
jle 0x407960
sub eax, ebp
test dword [esp + 0x18], 0x600
jne 0x407aae
sub eax, 1
mov dword [ebx + 8], eax
nop
mov edx, ebx
mov eax, 0x20
call fcn.004063c0
mov eax, dword [ebx + 8]
lea edx, [eax - 1]
test eax, eax
mov dword [ebx + 8], edx
jg 0x407920
mov eax, dword [ebx + 4]
mov dword [esp + 0x18], eax
test byte [esp + 0x18], 0x80
je 0x40796e
mov esi, esi
lea edi, [edi]
mov edx, ebx
mov eax, 0x2d
call fcn.004063c0
jmp 0x407987
mov dword [ebx + 8], 0xffffffff
test byte [esp + 0x18], 0x80
jne 0x407950
test dword [esp + 0x18], 0x100
jne 0x407af1
test byte [esp + 0x18], 0x40
jne 0x407b02
mov edx, ebx
mov eax, 0x30
call fcn.004063c0
mov eax, dword [ebx + 4]
mov edx, ebx
and eax, 0x20
or eax, 0x58
call fcn.004063c0
mov eax, dword [ebx + 8]
test eax, eax
jle 0x4079d9
test byte [ebx + 5], 2
je 0x4079d9
sub eax, 1
mov dword [ebx + 8], eax
lea esi, [esi]
lea edi, [edi]
mov edx, ebx
mov eax, 0x30
call fcn.004063c0
mov eax, dword [ebx + 8]
lea edx, [eax - 1]
test eax, eax
mov dword [ebx + 8], edx
jg 0x4079c0
cmp esi, dword [esp + 0x10]
mov ebp, dword [esp + 0x10]
ja 0x407a07
jmp 0x407a2c
movzx eax, word [ebx + 0x1c]
test ax, ax
mov word [esp + 0x26], ax
je 0x407a03
lea eax, [esp + 0x26]
mov ecx, ebx
mov edx, 1
call fcn.00406420
cmp esi, ebp
je 0x407a2c
sub esi, 1
movsx eax, byte [esi]
cmp eax, 0x2e
je 0x407a70
cmp eax, 0x2c
je 0x4079e5
mov edx, ebx
call fcn.004063c0
jmp 0x407a03
mov edx, ebx
mov eax, 0x30
call fcn.004063c0
mov eax, dword [ebx + 0xc]
lea edx, [eax - 1]
test eax, eax
mov dword [ebx + 0xc], edx
jg 0x407a20
mov eax, dword [ebx + 4]
mov edx, ebx
and eax, 0x20
or eax, 0x50
call fcn.004063c0
mov eax, dword [esp]
add dword [ebx + 8], edi
mov ecx, ebx
or dword [ebx + 4], 0x1c0
cdq
call fcn.00406c50
add esp, 0x5c
pop ebx
pop esi
pop edi
pop ebp
ret
mov eax, ebx
call fcn.00406720
jmp 0x407a03
or dword [ebx + 4], 0x80
jmp 0x407644
cwde
mov edi, 2
mov dword [esp], eax
jmp 0x407967
mov edx, dword [ebx + 0xc]
cmp edx, 0xe
ja 0x407ac7
mov edi, dword [esp]
mov ebp, dword [esp + 4]
jmp 0x407690
mov dword [ebx + 8], eax
jmp 0x407967
mov ebp, dword [esp + 4]
mov edi, dword [esp]
mov ecx, ebp
or ecx, edi
jne 0x407711
mov edi, dword [ebx + 4]
mov dword [esp + 0x18], edi
lea edi, [esp + 0x38]
mov dword [esp + 0x10], edi
mov edx, dword [ebx + 0xc]
test edx, edx
jle 0x407b5c
lea edx, [esp + 0x39]
mov byte [esp + 0x38], 0x2e
lea esi, [edx + 1]
mov byte [edx], 0x30
jmp 0x40788e
mov edx, ebx
mov eax, 0x2b
call fcn.004063c0
jmp 0x407987
mov edx, ebx
mov eax, 0x20
call fcn.004063c0
jmp 0x407987
add eax, 1
jmp 0x4076f0
fstp st(0)
mov ecx, ebx
mov edx, 0x4106e6
xor eax, eax
call fcn.00406680
jmp 0x407a5e
mov eax, edx
mov ecx, ebx
mov edx, 0x4106ea
and eax, 0x8000
call fcn.00406680
jmp 0x407a5e
mov edi, 2
jmp 0x407901
mov eax, 0xffffc002
jmp 0x407866
test dword [esp + 0x18], 0x800
mov edx, dword [esp + 0x10]
je 0x407ae6
jmp 0x407add