Function at 0x4066c0
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
push edi
push esi
push ebx
mov edi, eax
sub esp, 0x7c
fld xword [ebp + 8]
fld st(0)
fstp xword [ebp - 0x40]
fxam
wait
fnstsw ax
and ax, 0x4500
cmp ax, 0x100
je 0x406cac
movzx ecx, word [ebp - 0x38]
mov ebx, ecx
and ebx, 0x8000
jne 0x4068e0
fxam
wait
fnstsw ax
fstp st(0)
and ax, 0x4500
cmp ax, 0x500
je 0x406cca
and cx, 0x7fff
je 0x4068f0
lea eax, [ecx - 0x3fff]
mov ebx, dword [ebp - 0x40]
mov esi, dword [ebp - 0x3c]
mov ecx, eax
mov word [ebp - 0x62], ax
mov eax, dword [edi + 0xc]
cmp eax, 0xe
mov dword [ebp - 0x4c], eax
ja 0x406c6f
test esi, esi
js 0x40674e
lea esi, [esi]
shld esi, ebx, 1
add ebx, ebx
test esi, esi
jns 0x406740
mov word [ebp - 0x62], cx
mov ecx, 0xe
sub ecx, dword [ebp - 0x4c]
mov eax, 4
xor edx, edx
shrd ebx, esi, 1
shr esi, 1
shl ecx, 2
shld edx, eax, cl
shl eax, cl
test cl, 0x20
je 0x406774
mov edx, eax
xor eax, eax
add eax, ebx
adc edx, esi
test edx, edx
js 0x406ca2
shld edx, eax, 1
add eax, eax
mov ecx, 0xf
sub ecx, dword [ebp - 0x4c]
shl ecx, 2
shrd eax, edx, cl
shr edx, cl
test cl, 0x20
je 0x40679f
mov eax, edx
xor edx, edx
mov ebx, eax
mov esi, edx
mov eax, dword [edi + 4]
lea edx, [ebp - 0x2a]
mov dword [ebp - 0x58], edi
mov dword [ebp - 0x54], edx
mov dword [ebp - 0x50], edx
mov edx, eax
mov dword [ebp - 0x68], eax
and eax, 0x20
and edx, 0x800
mov byte [ebp - 0x63], al
mov dword [ebp - 0x6c], edx
jmp 0x40681f
mov eax, dword [ebp - 0x58]
mov eax, dword [eax + 0xc]
test eax, eax
jle 0x4067e3
mov edx, dword [ebp - 0x58]
sub eax, 1
mov dword [edx + 0xc], eax
mov eax, dword [ebp - 0x50]
shrd ebx, esi, 4
shr esi, 4
mov dword [ebp - 0x4c], eax
test edi, edi
je 0x4068b4
mov eax, dword [ebp - 0x4c]
add eax, 1
cmp edi, 9
mov dword [ebp - 0x50], eax
jle 0x4068d3
lea eax, [edi + 0x37]
or al, byte [ebp - 0x63]
mov edx, dword [ebp - 0x4c]
mov byte [edx], al
mov eax, esi
or eax, ebx
je 0x406940
mov edi, ebx
and edi, 0xf
mov eax, edi
mov dword [ebp - 0x60], edi
cdq
mov ecx, edx
mov dword [ebp - 0x5c], edx
xor ecx, esi
mov edx, ecx
mov ecx, edi
xor ecx, ebx
mov eax, ecx
mov ecx, edx
or ecx, eax
jne 0x4067d0
mov ecx, dword [ebp - 0x50]
mov eax, dword [ebp - 0x54]
cmp ecx, eax
ja 0x406860
mov eax, dword [ebp - 0x6c]
test eax, eax
jne 0x406860
mov eax, dword [ebp - 0x58]
mov dword [ebp - 0x4c], ecx
mov eax, dword [eax + 0xc]
test eax, eax
jle 0x40686c
lea esi, [esi]
mov ecx, dword [ebp - 0x50]
lea eax, [ecx + 1]
mov byte [ecx], 0x2e
mov dword [ebp - 0x4c], eax
mov ecx, ebx
xor ecx, 1
or ecx, esi
je 0x406c08
movzx ebx, word [ebp - 0x62]
mov eax, dword [ebp - 0x60]
mov edx, dword [ebp - 0x5c]
sub ebx, 1
lea esi, [esi]
lea edi, [edi]
shrd eax, edx, 1
shr edx, 1
mov ecx, ebx
mov esi, eax
lea ebx, [ecx - 1]
xor esi, 1
or esi, edx
jne 0x406890
xor ebx, ebx
xor esi, esi
test edi, edi
mov word [ebp - 0x62], cx
jne 0x4067f8
mov edx, dword [ebp - 0x54]
cmp dword [ebp - 0x4c], edx
ja 0x4068ca
mov eax, dword [ebp - 0x58]
mov eax, dword [eax + 0xc]
test eax, eax
js 0x406a23
mov eax, dword [ebp - 0x4c]
add eax, 1
mov dword [ebp - 0x50], eax
lea eax, [edi + 0x30]
jmp 0x406810
or dword [edi + 4], 0x80
jmp 0x4066f8
mov edx, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x40]
mov esi, edx
or esi, eax
je 0x406c11
test edx, edx
js 0x406cf4
mov ecx, 0xffffc001
lea esi, [esi]
shld edx, eax, 1
mov ebx, ecx
add eax, eax
sub ecx, 1
test edx, edx
jns 0x406910
mov word [ebp - 0x62], bx
mov esi, edx
mov ebx, eax
mov eax, dword [edi + 0xc]
cmp eax, 0xe
mov dword [ebp - 0x4c], eax
ja 0x4067a3
jmp 0x40674e
mov edx, dword [ebp - 0x54]
cmp dword [ebp - 0x50], edx
mov edi, dword [ebp - 0x58]
je 0x406ce9
mov eax, dword [edi + 8]
test eax, eax
mov dword [ebp - 0x58], eax
jle 0x406bf5
movsx edx, word [ebp - 0x62]
mov eax, dword [ebp - 0x50]
sub eax, dword [ebp - 0x54]
mov dword [ebp - 0x4c], edx
mov edx, dword [edi + 0xc]
test edx, edx
jle 0x406973
add eax, edx
mov edx, dword [ebp - 0x68]
mov ecx, 0x66666667
and edx, 0x1c0
cmp edx, 1
sbb edx, edx
lea esi, [eax + edx + 6]
mov eax, dword [ebp - 0x4c]
imul ecx
mov eax, dword [ebp - 0x4c]
sar edx, 2
sar eax, 0x1f
mov ecx, edx
sub ecx, eax
je 0x406cdd
mov ebx, 2
mov esi, esi
lea edi, [edi]
mov eax, 0x66666667
add esi, 1
add ebx, 1
imul ecx
sar ecx, 0x1f
sar edx, 2
sub edx, ecx
mov ecx, edx
jne 0x4069b0
movsx eax, bx
mov dword [ebp - 0x60], eax
mov eax, dword [ebp - 0x58]
cmp eax, esi
jle 0x406a30
sub eax, esi
test dword [ebp - 0x68], 0x600
jne 0x406c56
sub eax, 1
mov dword [edi + 8], eax
nop
lea esi, [esi]
mov edx, edi
mov eax, 0x20
call fcn.004055a0
mov eax, dword [edi + 8]
lea edx, [eax - 1]
test eax, eax
mov dword [edi + 8], edx
jg 0x4069f0
mov eax, dword [edi + 4]
mov dword [ebp - 0x68], eax
test byte [ebp - 0x68], 0x80
je 0x406a3d
mov edx, edi
mov eax, 0x2d
call fcn.004055a0
jmp 0x406a54
mov eax, dword [ebp - 0x4c]
mov dword [ebp - 0x50], eax
jmp 0x406815
mov dword [edi + 8], 0xffffffff
test byte [ebp - 0x68], 0x80
jne 0x406a15
test dword [ebp - 0x68], 0x100
jne 0x406c5e
test byte [ebp - 0x68], 0x40
jne 0x406c91
mov edx, edi
mov eax, 0x30
call fcn.004055a0
mov eax, dword [edi + 4]
mov edx, edi
and eax, 0x20
or eax, 0x58
call fcn.004055a0
mov eax, dword [edi + 8]
test eax, eax
jle 0x406a9c
test byte [edi + 5], 2
je 0x406a9c
sub eax, 1
mov dword [edi + 8], eax
mov edx, edi
mov eax, 0x30
call fcn.004055a0
mov eax, dword [edi + 8]
lea edx, [eax - 1]
test eax, eax
mov dword [edi + 8], edx
jg 0x406a83
mov edx, dword [ebp - 0x54]
cmp dword [ebp - 0x50], edx
mov ebx, dword [ebp - 0x50]
ja 0x406ac0
jmp 0x406b5c
mov edx, edi
call fcn.004055a0
cmp ebx, dword [ebp - 0x54]
je 0x406b5c
sub ebx, 1
movsx eax, byte [ebx]
cmp eax, 0x2e
jne 0x406ab0
cmp dword [edi + 0x10], 0xfffffffd
je 0x406bb1
movzx edx, word [edi + 0x14]
test dx, dx
je 0x406ba0
mov eax, dword [edi + 0x10]
mov dword [ebp - 0x50], esp
add eax, 0xf
shr eax, 4
shl eax, 4
call fcn.00403cc0
sub esp, eax
lea eax, [ebp - 0x44]
mov dword [ebp - 0x44], 0
lea esi, [esp + 0x10]
mov dword [esp + 4], edx
mov dword [esp + 8], eax
mov dword [esp], esi
call fcn.004080d0
test eax, eax
jle 0x406c80
add eax, esi
mov dword [ebp - 0x58], ebx
mov ebx, esi
mov esi, eax
mov esi, esi
lea edi, [edi]
add ebx, 1
movsx eax, byte [ebx - 1]
mov edx, edi
call fcn.004055a0
cmp esi, ebx
jne 0x406b30
mov ebx, dword [ebp - 0x58]
mov esp, dword [ebp - 0x50]
jmp 0x406ab7
mov edx, edi
mov eax, 0x30
call fcn.004055a0
mov eax, dword [edi + 0xc]
lea edx, [eax - 1]
test eax, eax
mov dword [edi + 0xc], edx
jg 0x406b50
mov eax, dword [edi + 4]
mov edx, edi
and eax, 0x20
or eax, 0x50
call fcn.004055a0
mov eax, dword [ebp - 0x60]
or dword [edi + 4], 0x1c0
mov ecx, edi
add dword [edi + 8], eax
mov eax, dword [ebp - 0x4c]
cdq
call fcn.004058a0
lea esp, [ebp - 0xc]
pop ebx
pop esi
pop edi
pop ebp
ret
mov edx, edi
mov eax, 0x2e
call fcn.004055a0
jmp 0x406ab7
mov dword [ebp - 0x44], 0
call sub.msvcrt.dll_localeconv
lea edx, [ebp - 0x44]
mov dword [esp + 8], 0x10
mov dword [esp + 0xc], edx
mov eax, dword [eax]
mov dword [esp + 4], eax
lea eax, [ebp - 0x46]
mov dword [esp], eax
call fcn.00407d70
test eax, eax
jle 0x406cc1
movzx edx, word [ebp - 0x46]
mov word [edi + 0x14], dx
mov dword [edi + 0x10], eax
jmp 0x406ad9
movsx eax, word [ebp - 0x62]
mov dword [ebp - 0x60], 2
mov dword [ebp - 0x4c], eax
jmp 0x406a37
xor ebx, ebx
xor esi, esi
jmp 0x4067f0
mov eax, dword [edi + 0xc]
xor ebx, ebx
xor esi, esi
cmp eax, 0xe
mov dword [ebp - 0x4c], eax
jbe 0x406740
xor edx, edx
mov word [ebp - 0x62], dx
mov eax, dword [edi + 4]
mov dword [ebp - 0x68], eax
lea eax, [ebp - 0x2a]
mov dword [ebp - 0x54], eax
mov ecx, dword [ebp - 0x4c]
test ecx, ecx
jle 0x406d06
lea eax, [ebp - 0x29]
mov byte [ebp - 0x2a], 0x2e
lea edx, [eax + 1]
mov byte [eax], 0x30
mov dword [ebp - 0x50], edx
jmp 0x40694f
mov dword [edi + 8], eax
jmp 0x406a37
mov edx, edi
mov eax, 0x2b
call fcn.004055a0
jmp 0x406a54
mov eax, esi
or eax, ebx
jne 0x4067a3
jmp 0x406c2a
mov edx, edi
mov eax, 0x2e
call fcn.004055a0
jmp 0x406b45
mov edx, edi
mov eax, 0x20
call fcn.004055a0
jmp 0x406a54
add word [ebp - 0x62], 1
jmp 0x406786
fstp st(0)
mov ecx, edi
mov edx, 0x40c97d
xor eax, eax
call fcn.00405800
jmp 0x406b91
movzx edx, word [edi + 0x14]
jmp 0x406bed
mov ecx, edi
mov edx, 0x40c981
mov eax, ebx
call fcn.00405800
jmp 0x406b91
mov dword [ebp - 0x60], 2
jmp 0x4069cf
mov eax, dword [edi + 0xc]
mov dword [ebp - 0x4c], eax
jmp 0x406c36
mov ebx, eax
mov eax, 0xffffc002
mov esi, edx
mov word [ebp - 0x62], ax
jmp 0x406927
test dword [ebp - 0x68], 0x800
mov eax, dword [ebp - 0x54]
je 0x406c48
jmp 0x406c41