Function at 0x700929f0
Capabilities:
Encode data using xor

Disassembly:
push ebp
push edi
push esi
push ebx
mov ebx, eax
sub esp, 0x7c
fld xword [esp + 0x90]
fld st(0)
fstp xword [esp + 0x48]
fxam
wait
fnstsw ax
and ax, 0x4500
cmp ax, 0x100
je 0x70092e38
fld st(0)
fstp xword [esp + 0x30]
movzx edx, word [esp + 0x38]
test dx, dx
js 0x70092b40
fxam
wait
fnstsw ax
fstp st(0)
and ax, 0x4500
cmp ax, 0x500
je 0x70092eb0
and dx, 0x7fff
mov esi, dword [esp + 0x48]
mov edi, dword [esp + 0x4c]
mov word [esp + 0x18], dx
jne 0x70092b50
mov edx, edi
or edx, esi
je 0x70092e60
test edi, edi
js 0x70092f80
mov eax, 0xffffc001
lea esi, [esi]
shld edi, esi, 1
mov edx, eax
add esi, esi
lea eax, [edx - 1]
test edi, edi
jns 0x70092a78
mov word [esp + 0x18], dx
mov ebp, dword [ebx + 0xc]
cmp ebp, 0xe
jbe 0x70092c96
mov eax, dword [ebx + 4]
lea ecx, [esp + 0x5e]
mov edx, ebx
mov dword [esp + 0xc], ecx
mov ebp, ecx
mov ecx, eax
mov dword [esp + 0x24], eax
mov dword [esp + 0x1c], eax
and ecx, 0x800
and eax, 0x20
mov dword [esp + 0x2c], ecx
mov byte [esp + 0x20], al
jmp 0x70092aea
xor ecx, ecx
cmp ebp, dword [esp + 0xc]
ja 0x70092ad7
mov ebx, dword [edx + 0xc]
test ebx, ebx
js 0x70092ae0
lea eax, [ecx + 0x30]
mov byte [ebp], al
add ebp, 1
mov ecx, edi
or ecx, esi
je 0x70092cf0
mov eax, esi
and eax, 0xf
mov ebx, eax
mov ecx, eax
mov dword [esp + 0x10], eax
sar ebx, 0x1f
xor ecx, esi
mov dword [esp + 0x14], ebx
mov ebx, dword [esp + 0x14]
xor ebx, edi
or ebx, ecx
je 0x70092da8
mov ecx, dword [edx + 0xc]
shrd esi, edi, 4
shr edi, 4
test ecx, ecx
jle 0x70092b22
sub ecx, 1
mov dword [edx + 0xc], ecx
test eax, eax
je 0x70092ac8
mov ecx, eax
cmp eax, 9
jle 0x70092ad7
add eax, 0x37
or al, byte [esp + 0x20]
jmp 0x70092ada
or dword [ebx + 4], 0x80
jmp 0x70092a2d
mov edx, edi
sub word [esp + 0x18], 0x3fff
mov ebp, dword [ebx + 0xc]
or edx, esi
jne 0x70092a8f
mov eax, dword [ebx + 4]
mov dword [esp + 0x24], eax
lea eax, [esp + 0x5e]
mov dword [esp + 0xc], eax
mov edi, dword [esp + 0x24]
mov dword [esp + 0x1c], edi
test ebp, ebp
jle 0x70092e98
mov byte [esp + 0x5e], 0x2e
lea eax, [esp + 0x5f]
mov byte [eax], 0x30
lea ebp, [eax + 1]
mov eax, dword [ebx + 8]
mov dword [esp + 0x20], eax
test eax, eax
jg 0x70092d0b
movsx eax, word [esp + 0x18]
mov esi, 2
mov dword [esp + 0x10], eax
test byte [esp + 0x1c], 0x80
jne 0x70092e20
test dword [esp + 0x1c], 0x100
jne 0x70092ed0
test byte [esp + 0x1c], 0x40
jne 0x70092e80
mov edx, ebx
mov eax, 0x30
call fcn.70091850
mov eax, dword [ebx + 4]
mov edx, ebx
and eax, 0x20
or eax, 0x58
call fcn.70091850
mov eax, dword [ebx + 8]
test eax, eax
jle 0x70092c0b
mov edx, dword [ebx + 4]
and edx, 0x600
cmp edx, 0x200
je 0x70092ee8
mov edi, dword [esp + 0xc]
cmp ebp, dword [esp + 0xc]
jbe 0x70092c4c
lea esi, [esi]
movsx eax, byte [ebp - 1]
sub ebp, 1
mov edx, ebx
call fcn.70091e90
cmp ebp, edi
jne 0x70092c18
mov eax, dword [ebx + 0xc]
lea edx, [eax - 1]
mov dword [ebx + 0xc], edx
test eax, eax
jle 0x70092c59
lea esi, [esi]
nop
mov edx, ebx
mov eax, 0x30
call fcn.70091850
mov eax, dword [ebx + 0xc]
lea edx, [eax - 1]
mov dword [ebx + 0xc], edx
test eax, eax
jg 0x70092c40
mov eax, dword [ebx + 4]
mov edx, ebx
and eax, 0x20
or eax, 0x50
call fcn.70091850
add dword [ebx + 8], esi
mov eax, dword [esp + 0x10]
mov ecx, ebx
or dword [ebx + 4], 0x1c0
cdq
call fcn.70091ed0
add esp, 0x7c
pop ebx
pop esi
pop edi
pop ebp
ret
shld edi, esi, 1
add esi, esi
test edi, edi
jns 0x70092c90
mov ecx, 0xe
mov eax, 4
xor edx, edx
sub ecx, ebp
shl ecx, 2
shld edx, eax, cl
shl eax, cl
test cl, 0x20
je 0x70092cb9
mov edx, eax
xor eax, eax
shrd esi, edi, 1
shr edi, 1
add esi, eax
adc edi, edx
test edi, edi
js 0x70092f48
shld edi, esi, 1
add esi, esi
mov ecx, 0xf
sub ecx, ebp
shl ecx, 2
shrd esi, edi, cl
shr edi, cl
test cl, 0x20
je 0x70092ce9
mov esi, edi
xor edi, edi
jmp 0x70092a98
mov ebx, edx
cmp ebp, dword [esp + 0xc]
je 0x70092f92
mov eax, dword [ebx + 8]
mov dword [esp + 0x20], eax
test eax, eax
jle 0x70092ba1
movsx edi, word [esp + 0x18]
mov edx, dword [ebx + 0xc]
mov eax, ebp
sub eax, dword [esp + 0xc]
mov dword [esp + 0x10], edi
test edx, edx
jle 0x70092d23
add eax, edx
xor edx, edx
test dword [esp + 0x24], 0x1c0
mov ecx, 0x66666667
setne dl
lea edi, [eax + edx + 5]
mov eax, dword [esp + 0x10]
mov dword [esp + 0x18], edi
imul ecx
mov eax, dword [esp + 0x10]
sar eax, 0x1f
mov ecx, edx
sar ecx, 2
sub ecx, eax
je 0x70092f68
lea esi, [esi]
nop
mov eax, 0x66666667
add edi, 1
imul ecx
sar ecx, 0x1f
lea esi, [edi + 2]
sub si, word [esp + 0x18]
sar edx, 2
sub edx, ecx
mov ecx, edx
jne 0x70092d60
movsx esi, si
mov eax, dword [esp + 0x20]
cmp eax, edi
jle 0x70092e50
sub eax, edi
test dword [esp + 0x24], 0x600
je 0x70092f10
mov dword [ebx + 8], eax
jmp 0x70092baf
cmp ebp, dword [esp + 0xc]
ja 0x70092dba
mov ebx, dword [esp + 0x2c]
test ebx, ebx
je 0x70092e70
mov byte [ebp], 0x2e
add ebp, 1
movzx ecx, word [esp + 0x18]
mov ebx, esi
xor ebx, 1
sub ecx, 1
mov dword [esp + 0x10], ebx
mov word [esp + 0x28], cx
mov ecx, dword [esp + 0x10]
or ecx, edi
je 0x70092f58
movzx ecx, word [esp + 0x28]
mov dword [esp + 0x10], eax
mov dword [esp + 0x28], edx
shrd esi, edi, 1
shr edi, 1
mov eax, ecx
mov ebx, esi
mov edx, edi
lea ecx, [eax - 1]
xor ebx, 1
or edx, ebx
jne 0x70092df0
mov word [esp + 0x18], ax
mov edx, dword [esp + 0x28]
xor esi, esi
xor edi, edi
mov eax, dword [esp + 0x10]
jmp 0x70092b22
mov edx, ebx
mov eax, 0x2d
call fcn.70091850
jmp 0x70092bd3
fstp st(0)
mov ecx, ebx
mov edx, 0x702bf2bd
xor eax, eax
call fcn.70091ab0
add esp, 0x7c
pop ebx
pop esi
pop edi
pop ebp
ret
mov dword [ebx + 8], 0xffffffff
jmp 0x70092baf
mov ebp, dword [ebx + 0xc]
jmp 0x70092b64
mov ecx, dword [edx + 0xc]
test ecx, ecx
jg 0x70092dba
jmp 0x70092dc1
mov edx, ebx
mov eax, 0x20
call fcn.70091850
jmp 0x70092bd3
and edi, 0x800
mov eax, dword [esp + 0xc]
je 0x70092b8c
jmp 0x70092b83
mov eax, edx
mov ecx, ebx
mov edx, 0x702bf2c1
and eax, 0x8000
call fcn.70091ab0
add esp, 0x7c
pop ebx
pop esi
pop edi
pop ebp
ret
mov edx, ebx
mov eax, 0x2b
call fcn.70091850
jmp 0x70092bd3
sub eax, 1
mov dword [ebx + 8], eax
nop
mov edx, ebx
mov eax, 0x30
call fcn.70091850
mov eax, dword [ebx + 8]
lea edx, [eax - 1]
mov dword [ebx + 8], edx
test eax, eax
jg 0x70092ef0
jmp 0x70092c0b
lea edx, [eax - 1]
mov dword [ebx + 8], edx
test eax, eax
jle 0x70092baf
nop
mov edx, ebx
mov eax, 0x20
call fcn.70091850
mov eax, dword [ebx + 8]
lea edx, [eax - 1]
mov dword [ebx + 8], edx
test eax, eax
jg 0x70092f20
mov eax, dword [ebx + 4]
mov dword [esp + 0x1c], eax
jmp 0x70092baf
add word [esp + 0x18], 1
jmp 0x70092cd1
xor esi, esi
xor edi, edi
jmp 0x70092b22
mov edi, dword [esp + 0x18]
mov esi, 2
jmp 0x70092d81
mov eax, 0xffffc002
mov ebp, dword [ebx + 0xc]
mov word [esp + 0x18], ax
jmp 0x70092a8f
mov ebp, dword [edx + 0xc]
jmp 0x70092b73