Function at 0x407c20
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
push edi
push esi
mov esi, eax
push ebx
and esp, 0xfffffff0
sub esp, 0xa0
fld xword [ebp + 8]
fxam
wait
fnstsw ax
and ax, 0x4500
cmp ax, 0x100
je 0x407e20
fld st(0)
fstp xword [esp + 0x60]
movzx edi, word [esp + 0x68]
test di, di
js 0x407cd0
fxam
wait
fnstsw ax
and ax, 0x4500
cmp ax, 0x500
je 0x408178
fstp xword [esp + 0x50]
mov edx, dword [esp + 0x54]
mov eax, dword [esp + 0x50]
mov ecx, edx
mov dword [esp + 0x48], eax
mov edx, eax
mov dword [esp + 0x4c], ecx
and di, 0x7fff
jne 0x407ce0
mov eax, ecx
or eax, edx
je 0x407e40
mov eax, edx
mov edx, ecx
test ecx, ecx
js 0x40824c
mov ecx, 0xffffc001
lea esi, [esi]
shld edx, eax, 1
mov edi, ecx
add eax, eax
sub ecx, 1
test edx, edx
jns 0x407ca8
mov dword [esp + 0x48], eax
mov dword [esp + 0x4c], edx
mov ebx, dword [esi + 0xc]
cmp ebx, 0xe
ja 0x407d7f
jmp 0x407d12
or dword [esi + 4], 0x80
jmp 0x407c57
mov ebx, dword [esi + 0xc]
sub di, 0x3fff
cmp ebx, 0xe
ja 0x407e58
mov edx, dword [esp + 0x4c]
mov eax, dword [esp + 0x48]
test edx, edx
js 0x407d12
lea esi, [esi]
shld edx, eax, 1
add eax, eax
test edx, edx
jns 0x407d00
mov dword [esp + 0x48], eax
mov dword [esp + 0x4c], edx
mov ecx, 0xe
mov eax, 4
xor edx, edx
sub ecx, ebx
shl ecx, 2
shld edx, eax, cl
shl eax, cl
test cl, 0x20
je 0x407d31
mov edx, eax
xor eax, eax
mov dword [esp + 0x40], eax
mov eax, dword [esp + 0x48]
mov dword [esp + 0x44], edx
mov edx, dword [esp + 0x4c]
shrd eax, edx, 1
shr edx, 1
add eax, dword [esp + 0x40]
adc edx, dword [esp + 0x44]
test edx, edx
js 0x4081b0
shld edx, eax, 1
add eax, eax
mov ecx, 0xf
sub ecx, ebx
xor ebx, ebx
shl ecx, 2
shrd eax, edx, cl
shr edx, cl
and ecx, 0x20
cmovne eax, edx
cmovne edx, ebx
mov dword [esp + 0x48], eax
mov dword [esp + 0x4c], edx
mov eax, dword [esi + 4]
lea ebx, [esp + 0x88]
mov word [esp + 0x34], di
mov dword [esp + 0x40], ebx
mov edx, eax
mov ecx, eax
mov dword [esp + 0x38], eax
mov eax, dword [esp + 0x48]
and edx, 0x800
and ecx, 0x20
mov dword [esp + 0x48], esi
mov dword [esp + 0x2c], edx
mov edx, dword [esp + 0x4c]
mov byte [esp + 0x3c], cl
jmp 0x407de3
cmp ebx, dword [esp + 0x40]
ja 0x407dd1
mov edi, dword [esp + 0x48]
mov esi, dword [edi + 0xc]
test esi, esi
js 0x407dd9
add ecx, 0x30
mov byte [ebx], cl
add ebx, 1
mov edi, edx
or edi, eax
je 0x408118
mov edi, eax
mov ecx, eax
and edi, 0xfffffff0
and ecx, 0xf
or edi, edx
je 0x408090
mov edi, dword [esp + 0x48]
shrd eax, edx, 4
shr edx, 4
mov esi, dword [edi + 0xc]
test esi, esi
jle 0x407e0d
sub esi, 1
mov dword [edi + 0xc], esi
test ecx, ecx
je 0x407dc0
cmp ecx, 9
jbe 0x407dd1
add ecx, 0x37
or cl, byte [esp + 0x3c]
jmp 0x407dd4
fstp st(0)
lea esp, [ebp - 0xc]
mov ecx, esi
mov edx, 0x411b6b
xor eax, eax
pop ebx
pop esi
pop edi
pop ebp
jmp fcn.004068e0
mov ebx, dword [esi + 0xc]
cmp ebx, 0xe
ja 0x407e6a
mov eax, dword [esp + 0x48]
mov edx, dword [esp + 0x4c]
jmp 0x407d00
mov ecx, dword [esp + 0x4c]
mov edx, dword [esp + 0x48]
mov eax, ecx
or eax, edx
jne 0x407d7f
mov eax, dword [esi + 4]
mov dword [esp + 0x38], eax
lea eax, [esp + 0x88]
mov dword [esp + 0x40], eax
mov eax, dword [esi + 0xc]
test eax, eax
jle 0x408228
mov byte [esp + 0x88], 0x2e
lea eax, [esp + 0x89]
mov byte [eax], 0x30
lea ebx, [eax + 1]
mov eax, dword [esi + 8]
mov dword [esp + 0x34], eax
test eax, eax
jle 0x40813a
movsx edx, di
mov eax, ebx
sub eax, dword [esp + 0x40]
mov dword [esp + 0x48], edx
mov edx, dword [esi + 0xc]
test edx, edx
lea ecx, [eax + edx]
mov edx, dword [esp + 0x38]
cmovg eax, ecx
mov ecx, 0x66666667
and edx, 0x1c0
mov edi, eax
mov eax, dword [esp + 0x48]
cmp edx, 1
sbb edi, 0xfffffffa
imul ecx
mov eax, dword [esp + 0x48]
sar eax, 0x1f
mov ecx, edx
sar ecx, 2
sub ecx, eax
je 0x40823f
mov dword [esp + 0x3c], ebx
mov dword [esp + 0x30], esi
mov esi, edi
nop
mov eax, 0x66666667
add edi, 1
imul ecx
mov eax, ecx
lea ebx, [edi + 2]
sar eax, 0x1f
sub ebx, esi
sar edx, 2
sub edx, eax
mov ecx, edx
jne 0x407f00
movsx eax, bx
mov ebx, dword [esp + 0x3c]
mov esi, dword [esp + 0x30]
mov dword [esp + 0x3c], eax
mov eax, dword [esp + 0x34]
cmp eax, edi
jle 0x408168
sub eax, edi
test dword [esp + 0x38], 0x600
je 0x4081d8
mov dword [esi + 8], eax
test byte [esp + 0x38], 0x80
jne 0x408154
test dword [esp + 0x38], 0x100
jne 0x408198
test byte [esp + 0x38], 0x40
jne 0x4081c0
mov edx, esi
mov eax, 0x30
call fcn.00406580
mov eax, dword [esi + 4]
mov edx, esi
and eax, 0x20
or eax, 0x58
call fcn.00406580
mov eax, dword [esi + 8]
test eax, eax
jle 0x407fb9
test byte [esi + 5], 2
je 0x407fb9
sub eax, 1
mov dword [esi + 8], eax
nop
mov edx, esi
mov eax, 0x30
call fcn.00406580
mov eax, dword [esi + 8]
lea edx, [eax - 1]
mov dword [esi + 8], edx
test eax, eax
jg 0x407fa0
mov edi, dword [esp + 0x40]
cmp ebx, dword [esp + 0x40]
ja 0x407fde
jmp 0x40800c
movzx eax, word [esi + 0x1c]
mov word [esp + 0x78], ax
test ax, ax
jne 0x408100
cmp ebx, edi
je 0x40800c
movsx eax, byte [ebx - 1]
sub ebx, 1
cmp eax, 0x2e
je 0x408080
cmp eax, 0x2c
je 0x407fc8
mov edx, esi
call fcn.00406580
jmp 0x407fda
mov edx, esi
mov eax, 0x30
call fcn.00406580
mov eax, dword [esi + 0xc]
lea edx, [eax - 1]
mov dword [esi + 0xc], edx
test eax, eax
jg 0x408000
mov eax, dword [esi + 4]
mov edx, esi
and eax, 0x20
or eax, 0x50
call fcn.00406580
mov eax, dword [esp + 0x3c]
add dword [esi + 8], eax
mov eax, dword [esp + 0x48]
or dword [esi + 4], 0x1c0
mov dword [esp + 0x10], esi
cdq
mov dword [esp + 0x78], eax
mov dword [esp + 0x7c], edx
mov ecx, edx
mov dword [esp], eax
mov eax, dword [esp + 0x7c]
sar ecx, 0x1f
mov dword [esp + 0x80], ecx
mov dword [esp + 0x84], ecx
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
mov dword [esp + 0xc], ecx
call fcn.00406f10
lea esp, [ebp - 0xc]
pop ebx
pop esi
pop edi
pop ebp
ret
mov eax, esi
call fcn.00407300
jmp 0x407fda
cmp ebx, dword [esp + 0x40]
ja 0x4080b0
mov edi, dword [esp + 0x2c]
test edi, edi
jne 0x4080b0
mov esi, dword [esp + 0x48]
mov esi, dword [esi + 0xc]
test esi, esi
jle 0x4080b6
lea esi, [esi]
mov byte [ebx], 0x2e
add ebx, 1
mov esi, eax
xor esi, 1
mov edi, esi
movzx esi, word [esp + 0x34]
sub esi, 1
or edi, edx
je 0x408218
mov dword [esp + 0x30], ebx
mov ebx, ecx
lea esi, [esi]
nop
shrd eax, edx, 1
shr edx, 1
mov edi, esi
mov ecx, eax
lea esi, [edi - 1]
xor ecx, 1
or ecx, edx
jne 0x4080d8
mov ecx, ebx
mov word [esp + 0x34], di
mov ebx, dword [esp + 0x30]
xor eax, eax
xor edx, edx
jmp 0x407e0d
mov ecx, esi
mov edx, 1
lea eax, [esp + 0x78]
call fcn.004065e0
jmp 0x407fda
movzx edi, word [esp + 0x34]
mov esi, dword [esp + 0x48]
cmp ebx, dword [esp + 0x40]
je 0x407e7c
mov eax, dword [esi + 8]
mov dword [esp + 0x34], eax
test eax, eax
jg 0x407eab
movsx eax, di
mov dword [esp + 0x3c], 2
mov dword [esp + 0x48], eax
test byte [esp + 0x38], 0x80
je 0x407f56
mov edx, esi
mov eax, 0x2d
call fcn.00406580
jmp 0x407f6f
mov dword [esi + 8], 0xffffffff
jmp 0x407f4b
fstp st(0)
lea esp, [ebp - 0xc]
mov eax, edi
mov ecx, esi
mov edx, 0x411b6f
pop ebx
and eax, 0x8000
pop esi
pop edi
pop ebp
jmp fcn.004068e0
mov edx, esi
mov eax, 0x2b
call fcn.00406580
jmp 0x407f6f
add edi, 1
jmp 0x407d5d
mov edx, esi
mov eax, 0x20
call fcn.00406580
jmp 0x407f6f
lea edx, [eax - 1]
mov dword [esi + 8], edx
test eax, eax
jle 0x407f4b
lea esi, [esi]
lea esi, [esi]
mov edx, esi
mov eax, 0x20
call fcn.00406580
mov eax, dword [esi + 8]
lea edx, [eax - 1]
mov dword [esi + 8], edx
test eax, eax
jg 0x4081f0
mov eax, dword [esi + 4]
mov dword [esp + 0x38], eax
jmp 0x407f4b
xor eax, eax
xor edx, edx
jmp 0x407e0d
mov eax, dword [esp + 0x40]
test dword [esp + 0x38], 0x800
je 0x407e96
jmp 0x407e87
mov dword [esp + 0x3c], 2
jmp 0x407f2c
mov edi, 0xffffc002
jmp 0x407cbf