Function at 0x41b410
Capabilities:
Encode data using xor

Disassembly:
push ebp
push edi
push esi
push ebx
mov ebx, eax
sub esp, 0x5c
fld xword [esp + 0x70]
fld st(0)
fstp xword [esp + 0x28]
fxam
wait
fnstsw ax
and ax, 0x4500
cmp ax, 0x100
je 0x41b91b
movzx edx, word [esp + 0x30]
test dx, dx
js 0x41b880
fxam
wait
fnstsw ax
fstp st(0)
and ax, 0x4500
cmp ax, 0x500
je 0x41b930
mov eax, edx
and ax, 0x7fff
je 0x41b620
mov edx, dword [ebx + 0xc]
mov edi, dword [esp + 0x28]
sub ax, 0x3fff
mov ebp, dword [esp + 0x2c]
cmp edx, 0xe
mov dword [esp], edi
mov dword [esp + 4], ebp
ja 0x41b8b6
test ebp, ebp
js 0x41b4a1
nop
lea esi, [esi]
shld ebp, edi, 1
add edi, edi
test ebp, ebp
jns 0x41b490
mov dword [esp], edi
mov dword [esp + 4], ebp
mov ecx, 0xe
mov esi, 4
mov edi, 0
sub ecx, edx
xor ebp, ebp
shl ecx, 2
shld edi, esi, cl
shl esi, cl
test cl, 0x20
cmovne edi, esi
cmovne esi, ebp
mov dword [esp + 8], esi
mov dword [esp + 0xc], edi
mov esi, dword [esp]
mov edi, dword [esp + 4]
shrd esi, edi, 1
shr edi, 1
add esi, dword [esp + 8]
adc edi, dword [esp + 0xc]
test edi, edi
js 0x41b913
shld edi, esi, 1
add esi, esi
mov ecx, 0xf
xor ebp, ebp
sub ecx, edx
shl ecx, 2
shrd esi, edi, cl
shr edi, cl
test cl, 0x20
cmovne esi, edi
cmovne edi, ebp
mov dword [esp], esi
mov dword [esp + 4], edi
mov edi, dword [ebx + 4]
lea esi, [esp + 0x38]
mov ebp, dword [esp + 4]
mov dword [esp + 8], ebx
mov dword [esp + 0x10], esi
mov ecx, edi
mov dword [esp + 0x18], edi
and ecx, 0x800
mov dword [esp + 0x1c], ecx
mov ecx, edi
mov edi, dword [esp]
and ecx, 0x20
mov byte [esp + 0x17], cl
jmp 0x41b58e
mov ebx, dword [esp + 8]
mov ecx, dword [ebx + 0xc]
test ecx, ecx
jle 0x41b557
mov ebx, dword [esp + 8]
sub ecx, 1
mov dword [ebx + 0xc], ecx
shrd edi, ebp, 4
shr ebp, 4
test edx, edx
mov dword [esp], esi
je 0x41b5f2
mov esi, dword [esp]
add esi, 1
cmp edx, 9
jle 0x41b613
add edx, 0x37
or dl, byte [esp + 0x17]
mov ecx, dword [esp]
mov byte [ecx], dl
mov ecx, ebp
or ecx, edi
je 0x41b680
mov edx, edi
and edx, 0xf
cmp edi, edx
jne 0x41b542
cmp esi, dword [esp + 0x10]
ja 0x41b5b3
mov ebx, dword [esp + 0x1c]
test ebx, ebx
jne 0x41b5b3
mov ecx, dword [esp + 8]
mov dword [esp], esi
mov ecx, dword [ecx + 0xc]
test ecx, ecx
jle 0x41b5bc
lea ecx, [esi + 1]
mov byte [esi], 0x2e
mov dword [esp], ecx
cmp ebp, 0
ja 0x41b5c6
cmp edi, 1
jbe 0x41b5e6
lea ecx, [eax - 1]
lea esi, [esi]
shrd edi, ebp, 1
shr ebp, 1
mov eax, ecx
mov ebx, edi
mov esi, ebp
lea ecx, [eax - 1]
xor ebx, 1
or esi, ebx
jne 0x41b5d0
xor edi, edi
xor ebp, ebp
test edx, edx
jne 0x41b569
mov ecx, dword [esp + 0x10]
cmp dword [esp], ecx
ja 0x41b60d
mov esi, dword [esp + 8]
mov ecx, dword [esi + 0xc]
mov esi, dword [esp]
test ecx, ecx
js 0x41b584
mov esi, dword [esp]
add esi, 1
add edx, 0x30
jmp 0x41b57f
mov ebp, dword [esp + 0x2c]
mov edi, dword [esp + 0x28]
mov ecx, ebp
mov dword [esp], edi
mov dword [esp + 4], ebp
or ecx, edi
je 0x41b89a
test ebp, ebp
js 0x41b952
mov edx, 0xffffc001
lea esi, [esi]
lea edi, [edi]
shld ebp, edi, 1
mov eax, edx
add edi, edi
sub edx, 1
test ebp, ebp
jns 0x41b650
mov dword [esp], edi
mov dword [esp + 4], ebp
mov edx, dword [ebx + 0xc]
cmp edx, 0xe
ja 0x41b511
jmp 0x41b4a1
cmp esi, dword [esp + 0x10]
mov ebx, dword [esp + 8]
je 0x41b8d6
mov edi, dword [ebx + 8]
test edi, edi
mov dword [esp + 8], edi
jle 0x41b88c
cwde
mov edx, esi
sub edx, dword [esp + 0x10]
mov edi, eax
mov eax, dword [ebx + 0xc]
mov dword [esp], edi
lea ecx, [edx + eax]
test eax, eax
cmovg edx, ecx
xor eax, eax
test dword [esp + 0x18], 0x1c0
mov ecx, 0x66666667
setne al
lea ebp, [edx + eax + 5]
mov eax, edi
imul ecx
mov eax, edi
sar eax, 0x1f
mov ecx, edx
sar ecx, 2
sub ecx, eax
je 0x41b948
mov edi, 2
mov eax, 0x66666667
add ebp, 1
add edi, 1
imul ecx
sar ecx, 0x1f
sar edx, 2
sub edx, ecx
mov ecx, edx
jne 0x41b6e5
movsx edi, di
mov eax, dword [esp + 8]
cmp eax, ebp
jle 0x41b760
sub eax, ebp
test dword [esp + 0x18], 0x600
jne 0x41b8ae
sub eax, 1
mov dword [ebx + 8], eax
nop
mov edx, ebx
mov eax, 0x20
call fcn.0041a1c0
mov eax, dword [ebx + 8]
lea edx, [eax - 1]
test eax, eax
mov dword [ebx + 8], edx
jg 0x41b720
mov eax, dword [ebx + 4]
mov dword [esp + 0x18], eax
test byte [esp + 0x18], 0x80
je 0x41b76e
mov esi, esi
lea edi, [edi]
mov edx, ebx
mov eax, 0x2d
call fcn.0041a1c0
jmp 0x41b787
mov dword [ebx + 8], 0xffffffff
test byte [esp + 0x18], 0x80
jne 0x41b750
test dword [esp + 0x18], 0x100
jne 0x41b8f1
test byte [esp + 0x18], 0x40
jne 0x41b902
mov edx, ebx
mov eax, 0x30
call fcn.0041a1c0
mov eax, dword [ebx + 4]
mov edx, ebx
and eax, 0x20
or eax, 0x58
call fcn.0041a1c0
mov eax, dword [ebx + 8]
test eax, eax
jle 0x41b7d9
test byte [ebx + 5], 2
je 0x41b7d9
sub eax, 1
mov dword [ebx + 8], eax
lea esi, [esi]
lea edi, [edi]
mov edx, ebx
mov eax, 0x30
call fcn.0041a1c0
mov eax, dword [ebx + 8]
lea edx, [eax - 1]
test eax, eax
mov dword [ebx + 8], edx
jg 0x41b7c0
cmp esi, dword [esp + 0x10]
mov ebp, dword [esp + 0x10]
ja 0x41b807
jmp 0x41b82c
movzx eax, word [ebx + 0x1c]
test ax, ax
mov word [esp + 0x26], ax
je 0x41b803
lea eax, [esp + 0x26]
mov ecx, ebx
mov edx, 1
call fcn.0041a220
cmp esi, ebp
je 0x41b82c
sub esi, 1
movsx eax, byte [esi]
cmp eax, 0x2e
je 0x41b870
cmp eax, 0x2c
je 0x41b7e5
mov edx, ebx
call fcn.0041a1c0
jmp 0x41b803
mov edx, ebx
mov eax, 0x30
call fcn.0041a1c0
mov eax, dword [ebx + 0xc]
lea edx, [eax - 1]
test eax, eax
mov dword [ebx + 0xc], edx
jg 0x41b820
mov eax, dword [ebx + 4]
mov edx, ebx
and eax, 0x20
or eax, 0x50
call fcn.0041a1c0
mov eax, dword [esp]
add dword [ebx + 8], edi
mov ecx, ebx
or dword [ebx + 4], 0x1c0
cdq
call fcn.0041aa50
add esp, 0x5c
pop ebx
pop esi
pop edi
pop ebp
ret
mov eax, ebx
call fcn.0041a520
jmp 0x41b803
or dword [ebx + 4], 0x80
jmp 0x41b444
cwde
mov edi, 2
mov dword [esp], eax
jmp 0x41b767
mov edx, dword [ebx + 0xc]
cmp edx, 0xe
ja 0x41b8c7
mov edi, dword [esp]
mov ebp, dword [esp + 4]
jmp 0x41b490
mov dword [ebx + 8], eax
jmp 0x41b767
mov ebp, dword [esp + 4]
mov edi, dword [esp]
mov ecx, ebp
or ecx, edi
jne 0x41b511
mov edi, dword [ebx + 4]
mov dword [esp + 0x18], edi
lea edi, [esp + 0x38]
mov dword [esp + 0x10], edi
mov edx, dword [ebx + 0xc]
test edx, edx
jle 0x41b95c
lea edx, [esp + 0x39]
mov byte [esp + 0x38], 0x2e
lea esi, [edx + 1]
mov byte [edx], 0x30
jmp 0x41b68e
mov edx, ebx
mov eax, 0x2b
call fcn.0041a1c0
jmp 0x41b787
mov edx, ebx
mov eax, 0x20
call fcn.0041a1c0
jmp 0x41b787
add eax, 1
jmp 0x41b4f0
fstp st(0)
mov ecx, ebx
mov edx, 0x4c7c5e
xor eax, eax
call fcn.0041a480
jmp 0x41b85e
mov eax, edx
mov ecx, ebx
mov edx, 0x4c7c62
and eax, 0x8000
call fcn.0041a480
jmp 0x41b85e
mov edi, 2
jmp 0x41b701
mov eax, 0xffffc002
jmp 0x41b666
test dword [esp + 0x18], 0x800
mov edx, dword [esp + 0x10]
je 0x41b8e6
jmp 0x41b8dd