Function at 0x404b70
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
push edi
push esi
push ebx
mov edi, eax
sub esp, 0x7c
fld xword [ebp + 8]
fld st(0)
fstp xword [ebp - 0x40]
fxam
wait
fnstsw ax
and ax, 0x4500
cmp ax, 0x100
je 0x40515c
movzx ecx, word [ebp - 0x38]
mov ebx, ecx
and ebx, 0x8000
jne 0x404d90
fxam
wait
fnstsw ax
fstp st(0)
and ax, 0x4500
cmp ax, 0x500
je 0x40517a
and cx, 0x7fff
je 0x404da0
lea eax, [ecx - 0x3fff]
mov ebx, dword [ebp - 0x40]
mov esi, dword [ebp - 0x3c]
mov ecx, eax
mov word [ebp - 0x62], ax
mov eax, dword [edi + 0xc]
cmp eax, 0xe
mov dword [ebp - 0x4c], eax
ja 0x40511f
test esi, esi
js 0x404bfe
lea esi, [esi]
shld esi, ebx, 1
add ebx, ebx
test esi, esi
jns 0x404bf0
mov word [ebp - 0x62], cx
mov ecx, 0xe
sub ecx, dword [ebp - 0x4c]
mov eax, 4
xor edx, edx
shrd ebx, esi, 1
shr esi, 1
shl ecx, 2
shld edx, eax, cl
shl eax, cl
test cl, 0x20
je 0x404c24
mov edx, eax
xor eax, eax
add eax, ebx
adc edx, esi
test edx, edx
js 0x405152
shld edx, eax, 1
add eax, eax
mov ecx, 0xf
sub ecx, dword [ebp - 0x4c]
shl ecx, 2
shrd eax, edx, cl
shr edx, cl
test cl, 0x20
je 0x404c4f
mov eax, edx
xor edx, edx
mov ebx, eax
mov esi, edx
mov eax, dword [edi + 4]
lea edx, [ebp - 0x2a]
mov dword [ebp - 0x58], edi
mov dword [ebp - 0x54], edx
mov dword [ebp - 0x50], edx
mov edx, eax
mov dword [ebp - 0x68], eax
and eax, 0x20
and edx, 0x800
mov byte [ebp - 0x63], al
mov dword [ebp - 0x6c], edx
jmp 0x404ccf
mov eax, dword [ebp - 0x58]
mov eax, dword [eax + 0xc]
test eax, eax
jle 0x404c93
mov edx, dword [ebp - 0x58]
sub eax, 1
mov dword [edx + 0xc], eax
mov eax, dword [ebp - 0x50]
shrd ebx, esi, 4
shr esi, 4
mov dword [ebp - 0x4c], eax
test edi, edi
je 0x404d64
mov eax, dword [ebp - 0x4c]
add eax, 1
cmp edi, 9
mov dword [ebp - 0x50], eax
jle 0x404d83
lea eax, [edi + 0x37]
or al, byte [ebp - 0x63]
mov edx, dword [ebp - 0x4c]
mov byte [edx], al
mov eax, esi
or eax, ebx
je 0x404df0
mov edi, ebx
and edi, 0xf
mov eax, edi
mov dword [ebp - 0x60], edi
cdq
mov ecx, edx
mov dword [ebp - 0x5c], edx
xor ecx, esi
mov edx, ecx
mov ecx, edi
xor ecx, ebx
mov eax, ecx
mov ecx, edx
or ecx, eax
jne 0x404c80
mov ecx, dword [ebp - 0x50]
mov eax, dword [ebp - 0x54]
cmp ecx, eax
ja 0x404d10
mov eax, dword [ebp - 0x6c]
test eax, eax
jne 0x404d10
mov eax, dword [ebp - 0x58]
mov dword [ebp - 0x4c], ecx
mov eax, dword [eax + 0xc]
test eax, eax
jle 0x404d1c
lea esi, [esi]
mov ecx, dword [ebp - 0x50]
lea eax, [ecx + 1]
mov byte [ecx], 0x2e
mov dword [ebp - 0x4c], eax
mov ecx, ebx
xor ecx, 1
or ecx, esi
je 0x4050b8
movzx ebx, word [ebp - 0x62]
mov eax, dword [ebp - 0x60]
mov edx, dword [ebp - 0x5c]
sub ebx, 1
lea esi, [esi]
lea edi, [edi]
shrd eax, edx, 1
shr edx, 1
mov ecx, ebx
mov esi, eax
lea ebx, [ecx - 1]
xor esi, 1
or esi, edx
jne 0x404d40
xor ebx, ebx
xor esi, esi
test edi, edi
mov word [ebp - 0x62], cx
jne 0x404ca8
mov edx, dword [ebp - 0x54]
cmp dword [ebp - 0x4c], edx
ja 0x404d7a
mov eax, dword [ebp - 0x58]
mov eax, dword [eax + 0xc]
test eax, eax
js 0x404ed3
mov eax, dword [ebp - 0x4c]
add eax, 1
mov dword [ebp - 0x50], eax
lea eax, [edi + 0x30]
jmp 0x404cc0
or dword [edi + 4], 0x80
jmp 0x404ba8
mov edx, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x40]
mov esi, edx
or esi, eax
je 0x4050c1
test edx, edx
js 0x4051a4
mov ecx, 0xffffc001
lea esi, [esi]
shld edx, eax, 1
mov ebx, ecx
add eax, eax
sub ecx, 1
test edx, edx
jns 0x404dc0
mov word [ebp - 0x62], bx
mov esi, edx
mov ebx, eax
mov eax, dword [edi + 0xc]
cmp eax, 0xe
mov dword [ebp - 0x4c], eax
ja 0x404c53
jmp 0x404bfe
mov edx, dword [ebp - 0x54]
cmp dword [ebp - 0x50], edx
mov edi, dword [ebp - 0x58]
je 0x405199
mov eax, dword [edi + 8]
test eax, eax
mov dword [ebp - 0x58], eax
jle 0x4050a5
movsx edx, word [ebp - 0x62]
mov eax, dword [ebp - 0x50]
sub eax, dword [ebp - 0x54]
mov dword [ebp - 0x4c], edx
mov edx, dword [edi + 0xc]
test edx, edx
jle 0x404e23
add eax, edx
mov edx, dword [ebp - 0x68]
mov ecx, 0x66666667
and edx, 0x1c0
cmp edx, 1
sbb edx, edx
lea esi, [eax + edx + 6]
mov eax, dword [ebp - 0x4c]
imul ecx
mov eax, dword [ebp - 0x4c]
sar edx, 2
sar eax, 0x1f
mov ecx, edx
sub ecx, eax
je 0x40518d
mov ebx, 2
mov esi, esi
lea edi, [edi]
mov eax, 0x66666667
add esi, 1
add ebx, 1
imul ecx
sar ecx, 0x1f
sar edx, 2
sub edx, ecx
mov ecx, edx
jne 0x404e60
movsx eax, bx
mov dword [ebp - 0x60], eax
mov eax, dword [ebp - 0x58]
cmp eax, esi
jle 0x404ee0
sub eax, esi
test dword [ebp - 0x68], 0x600
jne 0x405106
sub eax, 1
mov dword [edi + 8], eax
nop
lea esi, [esi]
mov edx, edi
mov eax, 0x20
call fcn.00403a50
mov eax, dword [edi + 8]
lea edx, [eax - 1]
test eax, eax
mov dword [edi + 8], edx
jg 0x404ea0
mov eax, dword [edi + 4]
mov dword [ebp - 0x68], eax
test byte [ebp - 0x68], 0x80
je 0x404eed
mov edx, edi
mov eax, 0x2d
call fcn.00403a50
jmp 0x404f04
mov eax, dword [ebp - 0x4c]
mov dword [ebp - 0x50], eax
jmp 0x404cc5
mov dword [edi + 8], 0xffffffff
test byte [ebp - 0x68], 0x80
jne 0x404ec5
test dword [ebp - 0x68], 0x100
jne 0x40510e
test byte [ebp - 0x68], 0x40
jne 0x405141
mov edx, edi
mov eax, 0x30
call fcn.00403a50
mov eax, dword [edi + 4]
mov edx, edi
and eax, 0x20
or eax, 0x58
call fcn.00403a50
mov eax, dword [edi + 8]
test eax, eax
jle 0x404f4c
test byte [edi + 5], 2
je 0x404f4c
sub eax, 1
mov dword [edi + 8], eax
mov edx, edi
mov eax, 0x30
call fcn.00403a50
mov eax, dword [edi + 8]
lea edx, [eax - 1]
test eax, eax
mov dword [edi + 8], edx
jg 0x404f33
mov edx, dword [ebp - 0x54]
cmp dword [ebp - 0x50], edx
mov ebx, dword [ebp - 0x50]
ja 0x404f70
jmp 0x40500c
mov edx, edi
call fcn.00403a50
cmp ebx, dword [ebp - 0x54]
je 0x40500c
sub ebx, 1
movsx eax, byte [ebx]
cmp eax, 0x2e
jne 0x404f60
cmp dword [edi + 0x10], 0xfffffffd
je 0x405061
movzx edx, word [edi + 0x14]
test dx, dx
je 0x405050
mov eax, dword [edi + 0x10]
mov dword [ebp - 0x50], esp
add eax, 0xf
shr eax, 4
shl eax, 4
call fcn.00402170
sub esp, eax
lea eax, [ebp - 0x44]
mov dword [ebp - 0x44], 0
lea esi, [esp + 0x10]
mov dword [esp + 4], edx
mov dword [esp + 8], eax
mov dword [esp], esi
call fcn.00406580
test eax, eax
jle 0x405130
add eax, esi
mov dword [ebp - 0x58], ebx
mov ebx, esi
mov esi, eax
mov esi, esi
lea edi, [edi]
add ebx, 1
movsx eax, byte [ebx - 1]
mov edx, edi
call fcn.00403a50
cmp esi, ebx
jne 0x404fe0
mov ebx, dword [ebp - 0x58]
mov esp, dword [ebp - 0x50]
jmp 0x404f67
mov edx, edi
mov eax, 0x30
call fcn.00403a50
mov eax, dword [edi + 0xc]
lea edx, [eax - 1]
test eax, eax
mov dword [edi + 0xc], edx
jg 0x405000
mov eax, dword [edi + 4]
mov edx, edi
and eax, 0x20
or eax, 0x50
call fcn.00403a50
mov eax, dword [ebp - 0x60]
or dword [edi + 4], 0x1c0
mov ecx, edi
add dword [edi + 8], eax
mov eax, dword [ebp - 0x4c]
cdq
call fcn.00403d50
lea esp, [ebp - 0xc]
pop ebx
pop esi
pop edi
pop ebp
ret
mov edx, edi
mov eax, 0x2e
call fcn.00403a50
jmp 0x404f67
mov dword [ebp - 0x44], 0
call sub.msvcrt.dll_localeconv
lea edx, [ebp - 0x44]
mov dword [esp + 8], 0x10
mov dword [esp + 0xc], edx
mov eax, dword [eax]
mov dword [esp + 4], eax
lea eax, [ebp - 0x46]
mov dword [esp], eax
call fcn.00406220
test eax, eax
jle 0x405171
movzx edx, word [ebp - 0x46]
mov word [edi + 0x14], dx
mov dword [edi + 0x10], eax
jmp 0x404f89
movsx eax, word [ebp - 0x62]
mov dword [ebp - 0x60], 2
mov dword [ebp - 0x4c], eax
jmp 0x404ee7
xor ebx, ebx
xor esi, esi
jmp 0x404ca0
mov eax, dword [edi + 0xc]
xor ebx, ebx
xor esi, esi
cmp eax, 0xe
mov dword [ebp - 0x4c], eax
jbe 0x404bf0
xor edx, edx
mov word [ebp - 0x62], dx
mov eax, dword [edi + 4]
mov dword [ebp - 0x68], eax
lea eax, [ebp - 0x2a]
mov dword [ebp - 0x54], eax
mov ecx, dword [ebp - 0x4c]
test ecx, ecx
jle 0x4051b6
lea eax, [ebp - 0x29]
mov byte [ebp - 0x2a], 0x2e
lea edx, [eax + 1]
mov byte [eax], 0x30
mov dword [ebp - 0x50], edx
jmp 0x404dff
mov dword [edi + 8], eax
jmp 0x404ee7
mov edx, edi
mov eax, 0x2b
call fcn.00403a50
jmp 0x404f04
mov eax, esi
or eax, ebx
jne 0x404c53
jmp 0x4050da
mov edx, edi
mov eax, 0x2e
call fcn.00403a50
jmp 0x404ff5
mov edx, edi
mov eax, 0x20
call fcn.00403a50
jmp 0x404f04
add word [ebp - 0x62], 1
jmp 0x404c36
fstp st(0)
mov ecx, edi
mov edx, 0x40b251
xor eax, eax
call fcn.00403cb0
jmp 0x405041
movzx edx, word [edi + 0x14]
jmp 0x40509d
mov ecx, edi
mov edx, 0x40b255
mov eax, ebx
call fcn.00403cb0
jmp 0x405041
mov dword [ebp - 0x60], 2
jmp 0x404e7f
mov eax, dword [edi + 0xc]
mov dword [ebp - 0x4c], eax
jmp 0x4050e6
mov ebx, eax
mov eax, 0xffffc002
mov esi, edx
mov word [ebp - 0x62], ax
jmp 0x404dd7
test dword [ebp - 0x68], 0x800
mov eax, dword [ebp - 0x54]
je 0x4050f8
jmp 0x4050f1