Function at 0x410c80
Capabilities:
Encode data using xor

Disassembly:
push ebp
push edi
push esi
push ebx
mov ebx, eax
sub esp, 0x6c
fld xword [esp + 0x80]
fld st(0)
fstp xword [esp + 0x38]
fxam
wait
fnstsw ax
and ax, 0x4500
cmp ax, 0x100
je 0x410e70
fld st(0)
fstp xword [esp + 0x20]
movzx edx, word [esp + 0x28]
test dx, dx
js 0x410d35
fxam
wait
fnstsw ax
fstp st(0)
and ax, 0x4500
cmp ax, 0x500
je 0x411190
mov edi, dword [esp + 0x38]
mov ebp, dword [esp + 0x3c]
and dx, 0x7fff
mov word [esp + 4], dx
mov dword [esp + 8], edi
mov dword [esp + 0xc], ebp
jne 0x410d41
mov edx, ebp
or edx, edi
je 0x410e90
test ebp, ebp
js 0x411260
mov esi, edi
mov eax, 0xffffc001
mov edi, ebp
shld edi, esi, 1
mov edx, eax
add esi, esi
sub eax, 1
test edi, edi
jns 0x410d05
mov word [esp + 4], dx
mov dword [esp + 8], esi
mov dword [esp + 0xc], edi
mov ebp, dword [ebx + 0xc]
cmp ebp, 0xe
jbe 0x410d72
mov eax, dword [ebx + 4]
mov dword [esp + 0x10], eax
jmp 0x410ddc
or dword [ebx + 4], 0x80
jmp 0x410cb9
mov ebp, dword [ebx + 0xc]
sub word [esp + 4], 0x3fff
cmp ebp, 0xe
ja 0x410eb0
mov edi, dword [esp + 0xc]
mov esi, dword [esp + 8]
test edi, edi
js 0x410d72
shld edi, esi, 1
add esi, esi
test edi, edi
jns 0x410d60
mov dword [esp + 8], esi
mov dword [esp + 0xc], edi
mov ecx, 0xe
mov eax, 4
xor edx, edx
xor esi, esi
sub ecx, ebp
mov edi, dword [esp + 0xc]
shl ecx, 2
shld edx, eax, cl
shl eax, cl
test cl, 0x20
cmovne edx, eax
cmovne eax, esi
mov esi, dword [esp + 8]
shrd esi, edi, 1
shr edi, 1
add eax, esi
adc edx, edi
test edx, edx
js 0x4111c1
shld edx, eax, 1
add eax, eax
mov ecx, 0xf
xor esi, esi
sub ecx, ebp
shl ecx, 2
shrd eax, edx, cl
shr edx, cl
test cl, 0x20
cmovne eax, edx
cmovne edx, esi
mov dword [esp + 8], eax
mov eax, dword [ebx + 4]
mov dword [esp + 0xc], edx
mov dword [esp + 0x10], eax
lea eax, [esp + 0x48]
mov esi, dword [esp + 8]
mov dword [esp], eax
mov ebp, eax
mov eax, dword [esp + 0x10]
mov edi, eax
and eax, 0x20
and edi, 0x800
mov byte [esp + 0x14], al
mov dword [esp + 0x1c], edi
mov edi, dword [esp + 0xc]
jmp 0x410e31
xor edx, edx
cmp ebp, dword [esp]
ja 0x410e1e
mov ecx, dword [ebx + 0xc]
test ecx, ecx
js 0x410e27
lea eax, [edx + 0x30]
mov byte [ebp], al
add ebp, 1
mov edx, edi
or edx, esi
je 0x411135
mov eax, esi
mov ecx, edi
and eax, 0xf
mov edx, eax
xor edx, esi
or ecx, edx
je 0x4110a0
mov edx, dword [ebx + 0xc]
shrd esi, edi, 4
shr edi, 4
test edx, edx
jle 0x410e58
sub edx, 1
mov dword [ebx + 0xc], edx
test eax, eax
je 0x410e10
mov edx, eax
cmp eax, 9
jbe 0x410e1e
add eax, 0x37
or al, byte [esp + 0x14]
jmp 0x410e21
fstp st(0)
mov ecx, ebx
mov edx, 0x429067
xor eax, eax
call fcn.0040fb40
add esp, 0x6c
pop ebx
pop esi
pop edi
pop ebp
ret
mov ebp, dword [ebx + 0xc]
cmp ebp, 0xe
ja 0x411240
mov esi, dword [esp + 8]
mov edi, dword [esp + 0xc]
jmp 0x410d60
mov ebp, dword [esp + 0xc]
mov edi, dword [esp + 8]
mov eax, dword [ebx + 4]
mov edx, ebp
or edx, edi
mov dword [esp + 0x10], eax
jne 0x410ddc
lea esi, [esi]
lea eax, [esp + 0x48]
mov dword [esp], eax
mov edx, dword [ebx + 0xc]
test edx, edx
jle 0x411220
mov byte [esp + 0x48], 0x2e
lea eax, [esp + 0x49]
lea ebp, [eax + 1]
mov byte [eax], 0x30
mov eax, dword [ebx + 8]
mov dword [esp + 0x14], eax
test eax, eax
jle 0x41114d
mov edx, dword [ebx + 0xc]
mov eax, ebp
sub eax, dword [esp]
movsx esi, word [esp + 4]
lea ecx, [eax + edx]
test edx, edx
cmovg eax, ecx
xor edx, edx
mov ecx, 0x66666667
mov dword [esp + 8], esi
test dword [esp + 0x10], 0x1c0
setne dl
lea edi, [eax + edx + 5]
mov eax, esi
imul ecx
mov eax, esi
mov dword [esp + 4], edi
sar eax, 0x1f
mov ecx, edx
sar ecx, 2
sub ecx, eax
je 0x411250
lea esi, [esi]
mov eax, 0x66666667
add edi, 1
imul ecx
sar ecx, 0x1f
lea esi, [edi + 2]
sub si, word [esp + 4]
sar edx, 2
sub edx, ecx
mov ecx, edx
jne 0x410f50
movsx esi, si
mov eax, dword [esp + 0x14]
cmp eax, edi
jle 0x411180
sub eax, edi
test dword [esp + 0x10], 0x600
je 0x4111e1
mov dword [ebx + 8], eax
test byte [esp + 0x10], 0x80
jne 0x411166
test dword [esp + 0x10], 0x100
jne 0x4111b0
test byte [esp + 0x10], 0x40
jne 0x4111d0
mov edx, ebx
mov eax, 0x30
call fcn.0040f8a0
mov eax, dword [ebx + 4]
mov edx, ebx
and eax, 0x20
or eax, 0x58
call fcn.0040f8a0
mov eax, dword [ebx + 8]
test eax, eax
jle 0x410ffc
test byte [ebx + 5], 2
je 0x410ffc
sub eax, 1
mov dword [ebx + 8], eax
mov edx, ebx
mov eax, 0x30
call fcn.0040f8a0
mov eax, dword [ebx + 8]
lea edx, [eax - 1]
mov dword [ebx + 8], edx
test eax, eax
jg 0x410fe3
mov edi, dword [esp]
cmp ebp, dword [esp]
ja 0x411026
jmp 0x41104c
movzx eax, word [ebx + 0x1c]
mov word [esp + 0x36], ax
test ax, ax
jne 0x411120
cmp ebp, edi
je 0x41104c
sub ebp, 1
movsx eax, byte [ebp]
cmp eax, 0x2e
je 0x411090
cmp eax, 0x2c
je 0x411010
mov edx, ebx
call fcn.0040f8a0
jmp 0x411022
mov edx, ebx
mov eax, 0x30
call fcn.0040f8a0
mov eax, dword [ebx + 0xc]
lea edx, [eax - 1]
mov dword [ebx + 0xc], edx
test eax, eax
jg 0x411040
mov eax, dword [ebx + 4]
mov edx, ebx
and eax, 0x20
or eax, 0x50
call fcn.0040f8a0
add dword [ebx + 8], esi
mov eax, dword [esp + 8]
mov ecx, ebx
or dword [ebx + 4], 0x1c0
cdq
call fcn.00410150
add esp, 0x6c
pop ebx
pop esi
pop edi
pop ebp
ret
mov eax, ebx
call fcn.0040fbe0
jmp 0x411022
cmp ebp, dword [esp]
ja 0x4110b4
mov ecx, dword [esp + 0x1c]
test ecx, ecx
jne 0x4110b4
mov edx, dword [ebx + 0xc]
test edx, edx
jle 0x4110bb
mov byte [ebp], 0x2e
add ebp, 1
movzx edx, word [esp + 4]
mov ecx, esi
xor ecx, 1
sub edx, 1
mov dword [esp + 8], ecx
mov word [esp + 0x1a], dx
mov edx, dword [esp + 8]
or edx, edi
je 0x411215
mov dword [esp + 4], eax
movzx edx, word [esp + 0x1a]
mov dword [esp + 8], ebx
lea esi, [esi]
shrd esi, edi, 1
shr edi, 1
mov ebx, edx
mov ecx, esi
mov eax, edi
lea edx, [ebx - 1]
xor ecx, 1
or eax, ecx
jne 0x4110f0
mov eax, dword [esp + 4]
xor esi, esi
mov word [esp + 4], bx
xor edi, edi
mov ebx, dword [esp + 8]
jmp 0x410e58
mov ecx, ebx
mov edx, 1
lea eax, [esp + 0x36]
call fcn.0040f900
jmp 0x411022
cmp ebp, dword [esp]
je 0x410ed7
mov eax, dword [ebx + 8]
mov dword [esp + 0x14], eax
test eax, eax
jg 0x410f00
movsx eax, word [esp + 4]
mov esi, 2
mov dword [esp + 8], eax
test byte [esp + 0x10], 0x80
je 0x410f9b
mov edx, ebx
mov eax, 0x2d
call fcn.0040f8a0
jmp 0x410fb4
mov dword [ebx + 8], 0xffffffff
jmp 0x410f90
mov eax, edx
mov ecx, ebx
mov edx, 0x42906b
and eax, 0x8000
call fcn.0040fb40
add esp, 0x6c
pop ebx
pop esi
pop edi
pop ebp
ret
mov edx, ebx
mov eax, 0x2b
call fcn.0040f8a0
jmp 0x410fb4
add word [esp + 4], 1
jmp 0x410db3
mov edx, ebx
mov eax, 0x20
call fcn.0040f8a0
jmp 0x410fb4
lea edx, [eax - 1]
mov dword [ebx + 8], edx
test eax, eax
jle 0x410f90
nop
mov edx, ebx
mov eax, 0x20
call fcn.0040f8a0
mov eax, dword [ebx + 8]
lea edx, [eax - 1]
mov dword [ebx + 8], edx
test eax, eax
jg 0x4111f0
mov eax, dword [ebx + 4]
mov dword [esp + 0x10], eax
jmp 0x410f90
xor esi, esi
xor edi, edi
jmp 0x410e58
mov eax, dword [esp]
test dword [esp + 0x10], 0x800
je 0x410eeb
jmp 0x410ee2
mov eax, dword [ebx + 4]
mov dword [esp + 0x10], eax
jmp 0x410ed0
mov edi, dword [esp + 4]
mov esi, 2
jmp 0x410f71
mov eax, 0xffffc002
mov word [esp + 4], ax
jmp 0x410d21