Function at 0x41ce50
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
push edi
push esi
mov esi, eax
push ebx
and esp, 0xfffffff0
sub esp, 0xa0
fld xword [ebp + 8]
fxam
wait
fnstsw ax
and ax, 0x4500
cmp ax, 0x100
je 0x41d050
fld st(0)
fstp xword [esp + 0x60]
movzx edi, word [esp + 0x68]
test di, di
js 0x41cf00
fxam
wait
fnstsw ax
and ax, 0x4500
cmp ax, 0x500
je 0x41d3a8
fstp xword [esp + 0x50]
mov edx, dword [esp + 0x54]
mov eax, dword [esp + 0x50]
mov ecx, edx
mov dword [esp + 0x48], eax
mov edx, eax
mov dword [esp + 0x4c], ecx
and di, 0x7fff
jne 0x41cf10
mov eax, ecx
or eax, edx
je 0x41d070
mov eax, edx
mov edx, ecx
test ecx, ecx
js 0x41d47c
mov ecx, 0xffffc001
lea esi, [esi]
shld edx, eax, 1
mov edi, ecx
add eax, eax
sub ecx, 1
test edx, edx
jns 0x41ced8
mov dword [esp + 0x48], eax
mov dword [esp + 0x4c], edx
mov ebx, dword [esi + 0xc]
cmp ebx, 0xe
ja 0x41cfaf
jmp 0x41cf42
or dword [esi + 4], 0x80
jmp 0x41ce87
mov ebx, dword [esi + 0xc]
sub di, 0x3fff
cmp ebx, 0xe
ja 0x41d088
mov edx, dword [esp + 0x4c]
mov eax, dword [esp + 0x48]
test edx, edx
js 0x41cf42
lea esi, [esi]
shld edx, eax, 1
add eax, eax
test edx, edx
jns 0x41cf30
mov dword [esp + 0x48], eax
mov dword [esp + 0x4c], edx
mov ecx, 0xe
mov eax, 4
xor edx, edx
sub ecx, ebx
shl ecx, 2
shld edx, eax, cl
shl eax, cl
test cl, 0x20
je 0x41cf61
mov edx, eax
xor eax, eax
mov dword [esp + 0x40], eax
mov eax, dword [esp + 0x48]
mov dword [esp + 0x44], edx
mov edx, dword [esp + 0x4c]
shrd eax, edx, 1
shr edx, 1
add eax, dword [esp + 0x40]
adc edx, dword [esp + 0x44]
test edx, edx
js 0x41d3e0
shld edx, eax, 1
add eax, eax
mov ecx, 0xf
sub ecx, ebx
xor ebx, ebx
shl ecx, 2
shrd eax, edx, cl
shr edx, cl
and ecx, 0x20
cmovne eax, edx
cmovne edx, ebx
mov dword [esp + 0x48], eax
mov dword [esp + 0x4c], edx
mov eax, dword [esi + 4]
lea ebx, [esp + 0x88]
mov word [esp + 0x34], di
mov dword [esp + 0x40], ebx
mov edx, eax
mov ecx, eax
mov dword [esp + 0x38], eax
mov eax, dword [esp + 0x48]
and edx, 0x800
and ecx, 0x20
mov dword [esp + 0x48], esi
mov dword [esp + 0x2c], edx
mov edx, dword [esp + 0x4c]
mov byte [esp + 0x3c], cl
jmp 0x41d013
cmp ebx, dword [esp + 0x40]
ja 0x41d001
mov edi, dword [esp + 0x48]
mov esi, dword [edi + 0xc]
test esi, esi
js 0x41d009
add ecx, 0x30
mov byte [ebx], cl
add ebx, 1
mov edi, edx
or edi, eax
je 0x41d348
mov edi, eax
mov ecx, eax
and edi, 0xfffffff0
and ecx, 0xf
or edi, edx
je 0x41d2c0
mov edi, dword [esp + 0x48]
shrd eax, edx, 4
shr edx, 4
mov esi, dword [edi + 0xc]
test esi, esi
jle 0x41d03d
sub esi, 1
mov dword [edi + 0xc], esi
test ecx, ecx
je 0x41cff0
cmp ecx, 9
jbe 0x41d001
add ecx, 0x37
or cl, byte [esp + 0x3c]
jmp 0x41d004
fstp st(0)
lea esp, [ebp - 0xc]
mov ecx, esi
mov edx, 0x4da9c7
xor eax, eax
pop ebx
pop esi
pop edi
pop ebp
jmp fcn.0041bb10
mov ebx, dword [esi + 0xc]
cmp ebx, 0xe
ja 0x41d09a
mov eax, dword [esp + 0x48]
mov edx, dword [esp + 0x4c]
jmp 0x41cf30
mov ecx, dword [esp + 0x4c]
mov edx, dword [esp + 0x48]
mov eax, ecx
or eax, edx
jne 0x41cfaf
mov eax, dword [esi + 4]
mov dword [esp + 0x38], eax
lea eax, [esp + 0x88]
mov dword [esp + 0x40], eax
mov eax, dword [esi + 0xc]
test eax, eax
jle 0x41d458
mov byte [esp + 0x88], 0x2e
lea eax, [esp + 0x89]
mov byte [eax], 0x30
lea ebx, [eax + 1]
mov eax, dword [esi + 8]
mov dword [esp + 0x34], eax
test eax, eax
jle 0x41d36a
movsx edx, di
mov eax, ebx
sub eax, dword [esp + 0x40]
mov dword [esp + 0x48], edx
mov edx, dword [esi + 0xc]
test edx, edx
lea ecx, [eax + edx]
mov edx, dword [esp + 0x38]
cmovg eax, ecx
mov ecx, 0x66666667
and edx, 0x1c0
mov edi, eax
mov eax, dword [esp + 0x48]
cmp edx, 1
sbb edi, 0xfffffffa
imul ecx
mov eax, dword [esp + 0x48]
sar eax, 0x1f
mov ecx, edx
sar ecx, 2
sub ecx, eax
je 0x41d46f
mov dword [esp + 0x3c], ebx
mov dword [esp + 0x30], esi
mov esi, edi
nop
mov eax, 0x66666667
add edi, 1
imul ecx
mov eax, ecx
lea ebx, [edi + 2]
sar eax, 0x1f
sub ebx, esi
sar edx, 2
sub edx, eax
mov ecx, edx
jne 0x41d130
movsx eax, bx
mov ebx, dword [esp + 0x3c]
mov esi, dword [esp + 0x30]
mov dword [esp + 0x3c], eax
mov eax, dword [esp + 0x34]
cmp eax, edi
jle 0x41d398
sub eax, edi
test dword [esp + 0x38], 0x600
je 0x41d408
mov dword [esi + 8], eax
test byte [esp + 0x38], 0x80
jne 0x41d384
test dword [esp + 0x38], 0x100
jne 0x41d3c8
test byte [esp + 0x38], 0x40
jne 0x41d3f0
mov edx, esi
mov eax, 0x30
call fcn.0041b7b0
mov eax, dword [esi + 4]
mov edx, esi
and eax, 0x20
or eax, 0x58
call fcn.0041b7b0
mov eax, dword [esi + 8]
test eax, eax
jle 0x41d1e9
test byte [esi + 5], 2
je 0x41d1e9
sub eax, 1
mov dword [esi + 8], eax
nop
mov edx, esi
mov eax, 0x30
call fcn.0041b7b0
mov eax, dword [esi + 8]
lea edx, [eax - 1]
mov dword [esi + 8], edx
test eax, eax
jg 0x41d1d0
mov edi, dword [esp + 0x40]
cmp ebx, dword [esp + 0x40]
ja 0x41d20e
jmp 0x41d23c
movzx eax, word [esi + 0x1c]
mov word [esp + 0x78], ax
test ax, ax
jne 0x41d330
cmp ebx, edi
je 0x41d23c
movsx eax, byte [ebx - 1]
sub ebx, 1
cmp eax, 0x2e
je 0x41d2b0
cmp eax, 0x2c
je 0x41d1f8
mov edx, esi
call fcn.0041b7b0
jmp 0x41d20a
mov edx, esi
mov eax, 0x30
call fcn.0041b7b0
mov eax, dword [esi + 0xc]
lea edx, [eax - 1]
mov dword [esi + 0xc], edx
test eax, eax
jg 0x41d230
mov eax, dword [esi + 4]
mov edx, esi
and eax, 0x20
or eax, 0x50
call fcn.0041b7b0
mov eax, dword [esp + 0x3c]
add dword [esi + 8], eax
mov eax, dword [esp + 0x48]
or dword [esi + 4], 0x1c0
mov dword [esp + 0x10], esi
cdq
mov dword [esp + 0x78], eax
mov dword [esp + 0x7c], edx
mov ecx, edx
mov dword [esp], eax
mov eax, dword [esp + 0x7c]
sar ecx, 0x1f
mov dword [esp + 0x80], ecx
mov dword [esp + 0x84], ecx
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
mov dword [esp + 0xc], ecx
call fcn.0041c140
lea esp, [ebp - 0xc]
pop ebx
pop esi
pop edi
pop ebp
ret
mov eax, esi
call fcn.0041c530
jmp 0x41d20a
cmp ebx, dword [esp + 0x40]
ja 0x41d2e0
mov edi, dword [esp + 0x2c]
test edi, edi
jne 0x41d2e0
mov esi, dword [esp + 0x48]
mov esi, dword [esi + 0xc]
test esi, esi
jle 0x41d2e6
lea esi, [esi]
mov byte [ebx], 0x2e
add ebx, 1
mov esi, eax
xor esi, 1
mov edi, esi
movzx esi, word [esp + 0x34]
sub esi, 1
or edi, edx
je 0x41d448
mov dword [esp + 0x30], ebx
mov ebx, ecx
lea esi, [esi]
nop
shrd eax, edx, 1
shr edx, 1
mov edi, esi
mov ecx, eax
lea esi, [edi - 1]
xor ecx, 1
or ecx, edx
jne 0x41d308
mov ecx, ebx
mov word [esp + 0x34], di
mov ebx, dword [esp + 0x30]
xor eax, eax
xor edx, edx
jmp 0x41d03d
mov ecx, esi
mov edx, 1
lea eax, [esp + 0x78]
call fcn.0041b810
jmp 0x41d20a
movzx edi, word [esp + 0x34]
mov esi, dword [esp + 0x48]
cmp ebx, dword [esp + 0x40]
je 0x41d0ac
mov eax, dword [esi + 8]
mov dword [esp + 0x34], eax
test eax, eax
jg 0x41d0db
movsx eax, di
mov dword [esp + 0x3c], 2
mov dword [esp + 0x48], eax
test byte [esp + 0x38], 0x80
je 0x41d186
mov edx, esi
mov eax, 0x2d
call fcn.0041b7b0
jmp 0x41d19f
mov dword [esi + 8], 0xffffffff
jmp 0x41d17b
fstp st(0)
lea esp, [ebp - 0xc]
mov eax, edi
mov ecx, esi
mov edx, 0x4da9cb
pop ebx
and eax, 0x8000
pop esi
pop edi
pop ebp
jmp fcn.0041bb10
mov edx, esi
mov eax, 0x2b
call fcn.0041b7b0
jmp 0x41d19f
add edi, 1
jmp 0x41cf8d
mov edx, esi
mov eax, 0x20
call fcn.0041b7b0
jmp 0x41d19f
lea edx, [eax - 1]
mov dword [esi + 8], edx
test eax, eax
jle 0x41d17b
lea esi, [esi]
lea esi, [esi]
mov edx, esi
mov eax, 0x20
call fcn.0041b7b0
mov eax, dword [esi + 8]
lea edx, [eax - 1]
mov dword [esi + 8], edx
test eax, eax
jg 0x41d420
mov eax, dword [esi + 4]
mov dword [esp + 0x38], eax
jmp 0x41d17b
xor eax, eax
xor edx, edx
jmp 0x41d03d
mov eax, dword [esp + 0x40]
test dword [esp + 0x38], 0x800
je 0x41d0c6
jmp 0x41d0b7
mov dword [esp + 0x3c], 2
jmp 0x41d15c
mov edi, 0xffffc002
jmp 0x41ceef