Function at 0x40e2b4
Capabilities:
Encode data using xor

Disassembly:
push ebp
push edi
push esi
push ebx
sub esp, 0x6c
fld xword [esp + 0x80]
mov ebx, eax
fld st(0)
fstp xword [esp + 0x50]
fxam
wait
fnstsw ax
and eax, 0x4500
cmp eax, 0x100
je 0x40e74c
mov edx, dword [esp + 0x58]
mov esi, edx
and esi, 0x8000
jne 0x40e4cc
fxam
wait
fnstsw ax
fstp st(0)
and eax, 0x4500
cmp eax, 0x500
je 0x40e762
and edx, 0x7fff
je 0x40e4d8
sub edx, 0x3fff
mov word [esp + 0xe], dx
mov edx, dword [esp + 0x50]
mov ecx, dword [esp + 0x54]
mov ebp, dword [ebx + 0xc]
cmp ebp, 0xe
ja 0x40e3ce
cmp ecx, 0x7fffffff
ja 0x40e351
mov ax, word [esp + 0xe]
add edx, edx
adc ecx, ecx
cmp ecx, 0x7fffffff
jbe 0x40e340
mov word [esp + 0xe], ax
mov esi, edx
mov edi, ecx
shrd esi, edi, 1
shr edi, 1
mov dword [esp + 0x10], esi
mov dword [esp + 0x14], edi
mov ecx, 0xe
sub ecx, ebp
shl ecx, 2
mov esi, 4
xor edi, edi
shld edi, esi, cl
shl esi, cl
test cl, 0x20
je 0x40e382
mov edi, esi
xor esi, esi
add dword [esp + 0x10], esi
adc dword [esp + 0x14], edi
mov eax, dword [esp + 0x14]
test eax, eax
js 0x40e742
mov eax, dword [esp + 0x10]
mov edx, dword [esp + 0x14]
add dword [esp + 0x10], eax
adc dword [esp + 0x14], edx
mov edx, 0xf
sub edx, ebp
lea ecx, [edx*4]
mov esi, dword [esp + 0x10]
mov edi, dword [esp + 0x14]
shrd esi, edi, cl
shr edi, cl
test cl, 0x20
je 0x40e3ca
mov esi, edi
xor edi, edi
mov edx, esi
mov ecx, edi
mov edi, ecx
or edi, edx
je 0x40e775
mov esi, dword [ebx + 4]
mov dword [esp + 0x1c], esi
mov dword [esp + 0x20], esi
lea edi, [esp + 0x3e]
mov dword [esp + 0x24], edi
mov esi, edi
mov ebp, dword [esp + 0x1c]
and ebp, 0x800
mov dword [esp + 0x2c], ebp
mov al, byte [esp + 0x1c]
and eax, 0x20
mov byte [esp + 0x28], al
mov ax, word [esp + 0xe]
mov dword [esp + 0x10], ebx
jmp 0x40e457
mov ebp, dword [esp + 0x10]
mov edi, dword [ebp + 0xc]
test edi, edi
jle 0x40e427
dec edi
mov ebp, dword [esp + 0x10]
mov dword [ebp + 0xc], edi
shrd edx, ecx, 4
shr ecx, 4
mov edi, dword [esp + 0x1c]
mov dword [esp + 0x20], edi
test ebx, ebx
je 0x40e4b4
cmp ebx, 9
jle 0x40e4c5
add ebx, 0x37
or ebx, dword [esp + 0x28]
mov byte [esi], bl
inc esi
mov ebx, ecx
or ebx, edx
je 0x40e510
mov ebx, edx
and ebx, 0xf
mov ebp, ebx
sar ebp, 0x1f
xor ebp, ecx
mov edi, edx
xor edi, ebx
or ebp, edi
jne 0x40e414
cmp esi, dword [esp + 0x24]
ja 0x40e484
mov edi, dword [esp + 0x2c]
test edi, edi
jne 0x40e484
mov edi, dword [esp + 0x10]
mov ebp, dword [edi + 0xc]
test ebp, ebp
jle 0x40e490
mov byte [esi], 0x2e
inc esi
mov ebp, dword [esp + 0x1c]
mov dword [esp + 0x20], ebp
mov edi, edx
xor edi, 1
or edi, ecx
je 0x40e4ac
lea esi, [esi]
dec eax
shrd edx, ecx, 1
shr ecx, 1
mov edi, edx
xor edi, 1
or edi, ecx
jne 0x40e49c
xor edx, edx
xor ecx, ecx
test ebx, ebx
jne 0x40e43a
cmp esi, dword [esp + 0x24]
ja 0x40e4c5
mov ebp, dword [esp + 0x10]
mov edi, dword [ebp + 0xc]
test edi, edi
js 0x40e44d
add ebx, 0x30
jmp 0x40e44a
or dword [ebx + 4], 0x80
jmp 0x40e2f1
mov edx, dword [esp + 0x50]
mov ecx, dword [esp + 0x54]
mov eax, ecx
or eax, edx
je 0x40e6dc
test ecx, ecx
js 0x40e7b4
mov esi, 0xffffc001
nop
add edx, edx
adc ecx, ecx
mov eax, esi
dec esi
test ecx, ecx
jns 0x40e4f8
mov word [esp + 0xe], ax
jmp 0x40e327
mov word [esp + 0xe], ax
mov ebx, dword [esp + 0x10]
cmp esi, dword [esp + 0x24]
je 0x40e7af
mov ebp, dword [ebx + 8]
mov dword [esp + 0x28], ebp
test ebp, ebp
jle 0x40e6c1
mov edx, esi
sub edx, dword [esp + 0x24]
movsx ecx, word [esp + 0xe]
mov dword [esp + 0x10], ecx
mov eax, dword [ebx + 0xc]
test eax, eax
jle 0x40e54a
add edx, eax
mov eax, dword [esp + 0x1c]
and eax, 0x1c0
cmp eax, 1
sbb eax, eax
lea ebp, [edx + eax + 6]
mov ecx, 0x66666667
mov eax, dword [esp + 0x10]
imul ecx
mov ecx, edx
sar ecx, 2
mov eax, dword [esp + 0x10]
sar eax, 0x1f
sub ecx, eax
je 0x40e7a5
mov edi, 2
inc ebp
inc edi
mov eax, 0x66666667
imul ecx
sar edx, 2
sar ecx, 0x1f
sub edx, ecx
mov ecx, edx
jne 0x40e580
cmp ebp, dword [esp + 0x28]
jge 0x40e6a4
mov eax, dword [esp + 0x28]
sub eax, ebp
mov dword [ebx + 8], eax
test dword [esp + 0x1c], 0x600
je 0x40e6e8
movsx edi, di
test byte [esp + 0x20], 0x80
jne 0x40e6b0
test dword [esp + 0x20], 0x100
jne 0x40e720
test byte [esp + 0x20], 0x40
jne 0x40e731
mov edx, ebx
mov eax, 0x30
call fcn.0040d468
mov eax, dword [ebx + 4]
and eax, 0x20
or eax, 0x58
mov edx, ebx
call fcn.0040d468
mov eax, dword [ebx + 8]
test eax, eax
jle 0x40e625
test byte [ebx + 5], 2
je 0x40e625
dec eax
mov dword [ebx + 8], eax
nop
mov edx, ebx
mov eax, 0x30
call fcn.0040d468
mov eax, dword [ebx + 8]
lea edx, [eax - 1]
mov dword [ebx + 8], edx
test eax, eax
jg 0x40e60c
cmp esi, dword [esp + 0x24]
jbe 0x40e660
mov ebp, dword [esp + 0x24]
jmp 0x40e63f
mov edx, ebx
call fcn.0040d468
cmp esi, ebp
jbe 0x40e660
dec esi
movsx eax, byte [esi]
cmp eax, 0x2e
jne 0x40e634
mov eax, ebx
call fcn.0040dbd0
jmp 0x40e63b
mov edx, ebx
mov eax, 0x30
call fcn.0040d468
mov eax, dword [ebx + 0xc]
lea edx, [eax - 1]
mov dword [ebx + 0xc], edx
test eax, eax
jg 0x40e654
mov eax, dword [ebx + 4]
and eax, 0x20
or eax, 0x50
mov edx, ebx
call fcn.0040d468
add dword [ebx + 8], edi
or dword [ebx + 4], 0x1c0
mov esi, dword [esp + 0x10]
mov edi, esi
sar edi, 0x1f
mov eax, esi
mov edx, edi
mov ecx, ebx
call fcn.0040d6f8
add esp, 0x6c
pop ebx
pop esi
pop edi
pop ebp
ret
mov dword [ebx + 8], 0xffffffff
jmp 0x40e5b6
mov edx, ebx
mov eax, 0x2d
call fcn.0040d468
jmp 0x40e5dd
mov eax, dword [esp + 0x1c]
mov dword [esp + 0x20], eax
mov edi, 2
movsx edx, word [esp + 0xe]
mov dword [esp + 0x10], edx
jmp 0x40e5b9
mov word [esp + 0xe], 0
jmp 0x40e327
lea edx, [eax - 1]
mov dword [ebx + 8], edx
test eax, eax
jle 0x40e5b6
nop
mov edx, ebx
mov eax, 0x20
call fcn.0040d468
mov eax, dword [ebx + 8]
lea edx, [eax - 1]
mov dword [ebx + 8], edx
test eax, eax
jg 0x40e6f8
mov edx, dword [ebx + 4]
mov dword [esp + 0x20], edx
movsx edi, di
jmp 0x40e5b9
mov edx, ebx
mov eax, 0x2b
call fcn.0040d468
jmp 0x40e5dd
mov edx, ebx
mov eax, 0x20
call fcn.0040d468
jmp 0x40e5dd
inc word [esp + 0xe]
jmp 0x40e3a6
fstp st(0)
mov ecx, ebx
mov edx, 0x416d14
xor ax, ax
call fcn.0040d670
jmp 0x40e69b
mov ecx, ebx
mov edx, 0x416d18
mov eax, esi
call fcn.0040d670
jmp 0x40e69b
mov eax, dword [ebx + 4]
mov dword [esp + 0x1c], eax
lea edx, [esp + 0x3e]
mov dword [esp + 0x24], edx
test ebp, ebp
jle 0x40e7c0
mov byte [esp + 0x3e], 0x2e
lea esi, [esp + 0x40]
lea edx, [esp + 0x3f]
mov byte [edx], 0x30
mov edi, dword [esp + 0x1c]
mov dword [esp + 0x20], edi
jmp 0x40e523
mov edi, 2
jmp 0x40e595
mov ebp, dword [ebx + 0xc]
jmp 0x40e784
mov word [esp + 0xe], 0xc002
jmp 0x40e327
test dword [esp + 0x1c], 0x800
jne 0x40e788
lea esi, [esp + 0x3f]
mov edx, dword [esp + 0x24]
jmp 0x40e795