Function at 0x4036c0
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff8
sub esp, 0x70
fld qword [ebp + 0x10]
fst qword [esp + 0x50]
mov ebx, dword [esp + 0x54]
mov esi, ebx
sar esi, 0x14
mov eax, esi
not eax
or eax, 0x7ff
add eax, esi
fld st(0)
fchs
test ebx, ebx
js 0x4036f3
fstp st(0)
fld st(0)
mov esi, dword [ebp + 0xc]
mov edi, dword [esp + 0x50]
inc eax
je 0x40374a
fstp st(1)
mov dword [esp + 0x20], ecx
mov dword [esp + 0x1c], edx
cmp eax, 0x7ff
mov ecx, ebx
jne 0x4037a5
fstp st(0)
mov ebx, ecx
mov eax, ecx
and eax, 0xfffff
or edi, eax
mov ecx, 0x4512f5
je 0x40372d
mov ecx, 0x451543
mov eax, dword [esp + 0x20]
mov dword [eax], ecx
mov eax, dword [ebp + 0xc]
mov dword [eax], 0x7000
mov esi, 3
mov edx, dword [esp + 0x1c]
jmp 0x403bf3
fxch st(1)
fstp qword [esp + 0x48]
mov eax, SysReAllocString
and eax, dword [esp + 0x4c]
or eax, dword [esp + 0x48]
je 0x403a05
mov dword [esp + 0x20], ecx
mov dword [esp + 0x1c], edx
xor eax, eax
mov ecx, ebx
test ebx, 0x80000
jne 0x4037a5
mov edx, 0x80000
xor esi, esi
xor eax, eax
mov dword [esp + 8], edi
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
dec eax
shrd esi, edx, 1
shr edx, 1
mov edi, edx
and edi, ecx
mov ebx, esi
and ebx, dword [esp + 8]
or ebx, edi
je 0x403790
mov dword [esp + 0x2c], ecx
mov ecx, eax
not ecx
and ecx, 0x3ff
and eax, 0xfffffc00
sub eax, ecx
js 0x4037c8
imul ecx, eax, 0x4d1
shr ecx, 0xc
inc ecx
jmp 0x4037f8
mov ecx, eax
and ecx, 0xfffffd96
mov edx, eax
and edx, 0x269
or eax, 0x269
imul eax, edx
xor edx, 0x269
imul edx, ecx
add eax, edx
mov ecx, eax
sar ecx, 0x1f
shr ecx, 0x15
add ecx, eax
sar ecx, 0xb
mov ebx, dword [ebp + 8]
mov dword [esp + 0x10], ecx
mov eax, 0x12
sub eax, ecx
sub esp, 0x14
mov dword [esp + 0x10], eax
fstp qword [esp + 8]
lea eax, [esp + 0x6c]
mov dword [esp + 4], eax
lea eax, [esp + 0x74]
mov dword [esp], eax
call fcn.004062d0
add esp, 0x14
fld qword [esp + 0x60]
fnstcw word [esp + 0x1a]
movzx eax, word [esp + 0x1a]
or eax, 0xc00
mov word [esp + 0x2a], ax
fldcw word [esp + 0x2a]
fld st(0)
fistp qword [esp + 0x40]
fldcw word [esp + 0x1a]
mov esi, dword [esp + 0x40]
mov ecx, dword [esp + 0x44]
mov dword [esp + 0x3c], ecx
mov dword [esp + 0x38], esi
fild qword [esp + 0x38]
fld st(1)
fsub st(1)
fld st(0)
fsub st(3)
fld st(1)
fsub st(1)
fsubp st(4)
faddp st(2)
fxch st(2)
fsubrp st(1)
faddp st(1)
fadd qword [esp + 0x58]
fnstcw word [esp + 0x18]
movzx edx, word [esp + 0x18]
or edx, 0xc00
mov word [esp + 0x28], dx
fldcw word [esp + 0x28]
fistp qword [esp + 0x30]
fldcw word [esp + 0x18]
mov edi, dword [esp + 0x30]
mov edx, dword [esp + 0x34]
mov eax, edx
and eax, ecx
xor edx, ecx
mov ecx, edi
and ecx, esi
xor edi, esi
shld eax, ecx, 1
add ecx, ecx
add edi, ecx
mov ecx, dword [esp + 0x10]
adc edx, eax
mov eax, 0xa763ffff
cmp eax, edi
mov eax, 0xde0b6b3
mov esi, edx
sbb eax, edx
adc ecx, 0
mov edx, dword [ebp + 0x18]
test edx, edx
js 0x4038e0
add edx, ecx
cmp edx, 0x17
jbe 0x4038f5
jmp 0x40395e
mov eax, edx
and eax, 0x7ffffff
and edx, 1
xor eax, 1
lea edx, [eax + edx*2]
cmp edx, 0x17
ja 0x40395e
mov dword [esp + 0x10], ecx
xor eax, eax
mov ecx, 0x3b9ac9ff
mov dword [esp + 8], edi
cmp ecx, edi
mov dword [esp + 0xc], esi
sbb eax, esi
setb al
movzx eax, al
mov ecx, edx
lea edx, [eax + eax*8]
inc edx
mov eax, edx
mov dword [esp + 4], ecx
sub eax, ecx
mov ecx, dword [edx*8 + 0x44f0fc]
mov edi, dword [edx*8 + 0x44f0f8]
cmp dword [esp + 8], edi
mov esi, dword [esp + 0xc]
sbb esi, ecx
jb 0x403943
inc edx
inc eax
cmp edx, 0x14
jne 0x403920
jmp 0x403952
cmp dword [esp + 4], edx
jae 0x403952
cmp eax, 0x17
jbe 0x403c02
mov ecx, dword [esp + 0x10]
mov esi, dword [esp + 0xc]
mov edi, dword [esp + 8]
xor edx, edx
mov eax, edi
or eax, esi
mov dword [esp + 0x10], ecx
je 0x4039ff
test esi, esi
jle 0x4039c7
mov eax, esi
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
push 0
push 0x3e8
push esi
push edi
call fcn.0040cc80
mov dword [esp + 8], edx
mov dword [esp + 4], eax
mov ecx, 0x3e8
mul ecx
imul ecx, dword [esp + 8], 0x3e8
add ecx, edx
mov edx, edi
sub edx, eax
mov eax, esi
sbb eax, ecx
or eax, edx
jne 0x403a1f
shr esi, 3
mov eax, dword [esp + 4]
mov edi, eax
cmp esi, 0x7c
mov esi, dword [esp + 8]
ja 0x403980
mov edi, eax
imul eax, edi, 0x26e978d5
ror eax, 3
cmp eax, 0x418937
ja 0x4039f9
mov ecx, 0x10624dd3
nop
nop
nop
nop
mov eax, edi
mul ecx
mov edi, edx
shr edi, 6
imul eax, edi, 0x26e978d5
ror eax, 3
cmp eax, 0x418938
jb 0x4039e0
xor ecx, ecx
xor edx, edx
jmp 0x403a23
xor edi, edi
xor ecx, ecx
jmp 0x403a23
fstp st(0)
mov dword [esi], 1
mov eax, dword [ebp + 8]
mov dword [ecx], eax
mov byte [eax], 0x30
mov esi, 1
jmp 0x403bf3
xor edx, edx
mov ecx, esi
lea eax, [ebx + 0x40]
mov dword [esp + 0x14], eax
add ebx, 0x3e
jmp 0x403a42
mov ecx, dword [esp + 0xc]
add edi, 0xfffffff8
mov dword [esp + 0x14], edi
add ebx, 0xfffffff8
mov edi, dword [esp + 0x24]
cmp edi, 0x5f5e100
mov eax, ecx
sbb eax, 0
mov dword [esp + 4], edx
jl 0x403a80
push 0
push 0x5f5e100
push ecx
push edi
call fcn.0040cc80
mov ecx, edx
mov dword [esp + 0x24], eax
imul eax, eax, 0x5f5e100
sub edi, eax
je 0x403b0e
mov dword [esp + 0xc], ecx
jmp 0x403a98
test edi, edi
je 0x403bb8
mov dword [esp + 0xc], 0
mov dword [esp + 0x24], 0
xor esi, esi
nop
nop
nop
nop
nop
nop
mov dword [esp + 8], edi
mov eax, edi
mov ecx, 0x51eb851f
mul ecx
shr edx, 5
imul ecx, edx, 0x64
mov eax, edi
sub eax, ecx
mov ecx, eax
and ecx, 0x7d
mov edi, ebx
mov ebx, eax
and ebx, 2
or eax, 2
imul eax, ebx
xor ebx, 2
imul ebx, ecx
movzx eax, word [ebx + eax + str.00010203040506070809101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899]
mov ebx, edi
mov word [edi + esi], ax
add esi, 0xfffffffe
cmp dword [esp + 8], 0x63
mov edi, edx
ja 0x403aa0
mov eax, dword [esp + 0x24]
mov ecx, dword [esp + 0xc]
or eax, ecx
je 0x403bb0
mov edx, dword [esp + 4]
sub edx, esi
cmp esi, 0xfffffff8
mov edi, dword [esp + 0x14]
je 0x403a34
jmp 0x403b18
xor esi, esi
mov edx, dword [esp + 4]
mov edi, dword [esp + 0x14]
mov dword [esp + 0xc], ecx
mov dword [esp + 4], edx
lea eax, [edi - 8]
lea ecx, [esi + 8]
push ecx
push 0x30
push eax
call fcn.0040cd70
add esp, 0xc
mov eax, esi
and eax, 3
je 0x403b60
xor ecx, ecx
mov edx, dword [esp + 4]
nop
mov edi, edx
xor edi, 1
and edx, 1
lea edx, [edi + edx*2]
inc ecx
cmp eax, ecx
jne 0x403b40
mov eax, esi
sub eax, ecx
mov edi, dword [esp + 0x14]
jmp 0x403b66
mov eax, esi
mov edx, dword [esp + 4]
add esi, 7
cmp esi, 3
jb 0x403a30
add eax, 8
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov ecx, edx
xor ecx, 1
and edx, 1
lea edx, [ecx + edx*2]
xor edx, 1
and ecx, 1
lea ecx, [edx + ecx*2]
xor ecx, 1
and edx, 1
lea edx, [ecx + edx*2]
xor edx, 1
and ecx, 1
lea edx, [edx + ecx*2]
add eax, 0xfffffffc
jne 0x403b80
jmp 0x403a30
mov edx, dword [esp + 4]
sub edx, esi
jmp 0x403bba
xor esi, esi
mov ecx, dword [esp + 0x10]
mov edi, dword [esp + 0x14]
add edi, esi
test edx, edx
je 0x403bde
mov esi, edx
cmp byte [edi], 0x30
mov edx, dword [esp + 0x1c]
mov ebx, dword [esp + 0x2c]
mov eax, dword [ebp + 0xc]
jne 0x403beb
inc edi
dec esi
jmp 0x403beb
xor esi, esi
mov edx, dword [esp + 0x1c]
mov ebx, dword [esp + 0x2c]
mov eax, dword [ebp + 0xc]
mov dword [eax], ecx
mov eax, dword [esp + 0x20]
mov dword [eax], edi
mov dword [edx], esi
shr ebx, 0x1f
mov eax, ebx
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret
mov esi, dword [eax*8 + 0x44f0f8]
mov dword [esp + 4], esi
mov edx, dword [eax*8 + 0x44f0fc]
mov eax, edx
shld eax, esi, 0x1f
mov esi, edx
shr esi, 1
add eax, dword [esp + 8]
adc esi, dword [esp + 0xc]
cmp eax, edi
mov edi, esi
sbb edi, ecx
mov edi, dword [esp + 0x10]
sbb edi, 0xffffffff
push edx
push dword [esp + 8]
push esi
push eax
call fcn.0040cc80
mov ecx, edi
mov edi, eax
mov esi, edx
jmp 0x40395e