Function at 0x778af0
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x7855c7
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x820
mov eax, dword [0x77353c]
push ebx
push esi
push edi
mov dword [esp + 0x824], eax
xor ebx, ebx
xor eax, eax
mov dword [esp + 0x170], ebx
mov ecx, 0x104
lea edi, [esp + 0x174]
rep stosd dword es:[edi], eax
lea ecx, [esp + 0x5b8]
call fcn.0077b940
xor eax, eax
mov byte [esp + 0x738], bl
mov ecx, 0x1f
lea edi, [esp + 0x739]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov eax, dword [0x785748]
push 0x48
push eax
lea ecx, [esp + 0x7c0]
mov dword [esp + 0x83c], ebx
call fcn.0077b8f0
mov ecx, dword [eax]
mov edx, dword [eax + 4]
mov dword [esp + 0x160], ecx
mov ecx, dword [eax + 8]
mov dword [esp + 0x164], edx
mov edx, dword [eax + 0xc]
mov dword [esp + 0x168], ecx
mov dword [esp + 0x16c], edx
xor ecx, ecx
lea esi, [esp + 0x738]
lea ebx, [ebx]
xor eax, eax
mov dl, byte [esp + eax + 0x160]
xor dl, cl
mov byte [esi + eax], dl
inc eax
cmp eax, 0x10
jl 0x778bb2
inc ecx
add esi, 0x10
cmp ecx, 8
jl 0x778bb0
lea eax, [esp + 0x58]
push eax
lea ecx, [esp + 0x73c]
push 0x80
push ecx
call fcn.0077bf70
add esp, 0xc
xor esi, esi
lea esp, [esp]
mov ecx, dword [0x78574c]
lea edx, [esp + 0x58]
push edx
lea eax, [esp + esi + 0x58c]
push eax
lea edx, [esi + ecx]
push edx
call fcn.0077c1e0
add esi, 0x10
add esp, 0xc
cmp esi, 0x30
jl 0x778bf0
mov edi, dword [0x78574c]
mov ecx, 0xc
lea esi, [esp + 0x588]
rep movsd dword es:[edi], dword [esi]
mov eax, dword [0x78574c]
mov edx, dword [eax + 0x14]
add eax, 0x14
mov ecx, 0x773d48
cmp edx, dword [ecx]
je 0x778c4c
mov ecx, 0x773d9c
cmp edx, dword [ecx]
jne 0x779266
mov al, 0x23
mov byte [esp + 0x154], al
mov byte [esp + 0x156], al
mov byte [esp + 0x150], 0x34
mov byte [esp + 0x151], 0x45
mov byte [esp + 0x152], 0x76
mov byte [esp + 0x153], 0x87
mov byte [esp + 0x155], 0xc6
mov byte [esp + 0x157], 0x74
mov byte [esp + 0x158], 0x88
mov byte [esp + 0x159], 0x79
mov byte [esp + 0x15a], 0x19
mov byte [esp + 0x15b], 8
mov byte [esp + 0x15c], 0x75
mov byte [esp + 0x15d], 0xf4
mov byte [esp + 0x15e], 0xd3
mov byte [esp + 0x15f], 0
xor eax, eax
mov edi, edi
xor byte [esp + eax + 0x150], 0x79
inc eax
cmp eax, 0x10
jl 0x778cd0
lea eax, [esp + 0x150]
push eax
lea ecx, [esp + 0x5bc]
call fcn.0077b960
mov ecx, dword [0x78574c]
push 8
add ecx, 0x18
push 0x785740
push ecx
lea ecx, [esp + 0x5c4]
call fcn.0077b9a0
mov dx, word [0x785740]
mov ax, word [0x785742]
lea ecx, [esp + 0x170]
push ecx
mov word [esp + 0x180], dx
mov word [esp + 0x182], ax
call fcn.00779e20
add esp, 4
cmp eax, ebx
je 0x778d4f
mov dword [0x7857b8], 0x773d3c
jmp 0x779266
lea edx, [esp + 0x170]
push edx
call fcn.0077a0b0
add esp, 4
cmp eax, ebx
je 0x778d72
mov dword [0x7857b8], 0x773d30
jmp 0x779266
mov edx, dword [0x78574c]
mov eax, dword [edx + 2]
cmp eax, ebx
je 0x778d9f
cmp dword [esp + 0x174], eax
je 0x778d9f
lea eax, [esp + 0x170]
mov dword [0x7857b8], 0x773d24
push eax
jmp 0x77925e
mov al, byte [edx + 0xe]
cmp al, 0x40
jae 0x778e05
movzx cx, al
lea edx, [esp + 0x170]
push edx
mov word [esp + 0x180], cx
call fcn.0077a370
add esp, 4
cmp word [esp + 0x17e], bx
jne 0x778de3
lea eax, [esp + 0x170]
mov dword [0x7857b8], 0x773d14
push eax
jmp 0x77925e
mov edx, dword [0x78574c]
cmp byte [edx + 0xf], 1
jne 0x778e05
lea ecx, [esp + 0x170]
push ecx
call fcn.0077a460
mov edx, dword [0x78574c]
add esp, 4
cmp dword [edx + 6], ebx
jne 0x778e0f
cmp dword [edx + 0xa], ebx
je 0x778e40
lea edx, [esp + 0x170]
push edx
call fcn.0077a280
mov edx, dword [0x78574c]
mov eax, dword [esp + 0x17c]
mov ecx, dword [edx + 6]
add esp, 4
cmp eax, ecx
jb 0x77924c
cmp eax, dword [edx + 0xa]
ja 0x77924c
cmp byte [edx + 0x10], 0xff
je 0x77910a
movzx ax, byte [edx + 0x11]
lea ecx, [esp + 0x170]
push ecx
mov word [esp + 0x180], ax
call fcn.0077a120
mov edx, dword [esp + 0x18c]
mov eax, dword [esp + 0x190]
mov esi, dword [esp + 0x188]
movzx ecx, word [esp + 0x184]
mov dword [esp + 0x168], edx
mov edx, dword [esp + 0x194]
mov dword [esp + 0x170], edx
mov edx, dword [0x78574c]
mov dword [esp + 0x16c], eax
mov al, byte [edx + 0x10]
add esp, 4
cmp al, 1
mov dword [esp + 0x160], esi
jne 0x77920f
lea eax, [esp + 0x10]
push eax
call dword [sym.imp.KERNEL32.dll_GetSystemTime]
mov edx, dword [esp + 0x14]
mov ecx, dword [esp + 0x10]
mov eax, dword [esp + 0x18]
mov dword [esp + 0x188], edx
mov dword [esp + 0x184], ecx
mov ecx, dword [esp + 0x1c]
lea edx, [esp + 0x170]
push edx
mov dword [esp + 0x190], eax
mov dword [esp + 0x194], ecx
call fcn.0077a520
mov ecx, dword [esp + 0x18c]
mov edx, dword [esp + 0x194]
mov eax, dword [esp + 0x188]
add esp, 4
mov dword [esp + 0x4c], ecx
mov ecx, dword [esp + 0x18c]
mov dword [esp + 0x54], edx
mov edx, ecx
mov dword [esp + 0x50], ecx
or edi, 0xffffffff
push edi
push ebx
shr edx, 0x10
push edx
mov edx, dword [esp + 0x58]
movzx ecx, cx
push ecx
shr edx, 0x10
push edx
mov ecx, eax
shr ecx, 0x10
movzx edx, ax
push ecx
push edx
lea ecx, [esp + 0x3c]
mov dword [esp + 0x64], eax
call fcn.0077ac90
movzx eax, word [esp + 0x1a]
movzx ecx, word [esp + 0x18]
movzx edx, word [esp + 0x16]
push edi
push ebx
push eax
movzx eax, word [esp + 0x1e]
push ecx
movzx ecx, word [esp + 0x20]
push edx
push eax
push ecx
lea ecx, [esp + 0x44]
mov byte [esp + 0x850], 1
call fcn.0077ac90
sub esp, 8
mov eax, esp
mov dword [eax], 0x773d50
mov edx, dword [esp + 0x34]
mov dword [eax + 4], edx
lea eax, [esp + 0x4c]
mov dword [esp + 0x48], esp
push eax
lea ecx, [esp + 0x2c]
mov byte [esp + 0x840], 2
call fcn.0077ae80
lea ecx, [esp + 0x44]
call fcn.0077ae20
cmp eax, 0xc
jle 0x778fdf
lea ecx, [esp + 0x170]
push ecx
mov dword [0x7857b8], 0x773d90
call fcn.00779de0
add esp, 4
jmp 0x779093
movzx edx, word [esp + 0x16]
movzx eax, word [esp + 0x12]
movzx ecx, word [esp + 0x10]
push edi
push ebx
push ebx
push ebx
push edx
push eax
push ecx
lea ecx, [esp + 0x54]
call fcn.0077ac90
movzx edx, word [esp + 0x166]
movzx eax, word [esp + 0x162]
push edi
push 0
push 0
push 0
push edx
movzx ecx, si
push eax
push ecx
mov bl, 3
lea ecx, [esp + 0x4c]
mov byte [esp + 0x850], bl
call fcn.0077ac90
sub esp, 8
mov eax, esp
mov dword [eax], 0x773d50
mov edx, dword [esp + 0x3c]
lea ecx, [esp + 0x40]
mov byte [esp + 0x83c], 4
mov dword [esp + 0x48], esp
mov dword [eax + 4], edx
call fcn.0077adc0
test eax, eax
je 0x7790c1
lea eax, [esp + 0x170]
push eax
mov dword [0x7857b8], 0x773d7c
call fcn.00779de0
add esp, 4
lea ecx, [esp + 0x30]
mov byte [esp + 0x834], bl
call fcn.0077ad00
lea ecx, [esp + 0x38]
mov byte [esp + 0x834], 2
call fcn.0077ad00
lea ecx, [esp + 0x28]
mov byte [esp + 0x834], 1
call fcn.0077ad00
lea ecx, [esp + 0x20]
mov byte [esp + 0x834], 0
call fcn.0077ad00
mov dword [esp + 0x834], edi
jmp 0x779271
lea ecx, [esp + 0x30]
mov byte [esp + 0x834], bl
call fcn.0077ad00
lea ecx, [esp + 0x38]
mov byte [esp + 0x834], 2
call fcn.0077ad00
lea ecx, [esp + 0x28]
mov byte [esp + 0x834], 1
call fcn.0077ad00
lea ecx, [esp + 0x20]
mov byte [esp + 0x834], 0
call fcn.0077ad00
mov edx, dword [0x78574c]
xor eax, eax
mov ecx, 0x12
mov edi, 0x785770
rep stosd dword es:[edi], eax
mov eax, dword [edx + 0x18]
mov dword [0x7857a0], eax
mov ecx, dword [edx + 0x1c]
mov dword [0x7857a4], ecx
mov ax, word [edx + 0xe]
mov word [0x78577e], ax
mov ecx, dword [edx + 0x10]
mov dword [0x785780], ecx
mov eax, dword [edx + 0x14]
mov ecx, dword [0x785748]
mov dword [0x78579c], eax
mov ax, word [ecx + 0x1a]
mov word [0x785770], ax
mov ecx, dword [edx + 2]
mov dword [0x785772], ecx
mov eax, dword [edx + 6]
mov dword [0x785776], eax
mov ecx, dword [edx + 0xa]
mov ax, word [0x785740]
mov dx, word [0x785742]
mov dword [0x78577a], ecx
mov word [esp + 0x17c], ax
mov word [esp + 0x17e], dx
mov esi, 0x785786
movzx eax, ax
lea ecx, [esp + 0x170]
push ecx
mov dword [esp + 0x17c], eax
call fcn.00779b20
mov dx, word [esp + 0x182]
mov ax, word [esp + 0x180]
mov cx, word [esp + 0x184]
mov word [esi], dx
mov dx, word [esp + 0x186]
mov word [esi - 2], ax
mov word [esi + 2], cx
mov word [esi + 4], dx
add esi, 8
add esp, 4
cmp esi, 0x78579e
jl 0x779190
lea eax, [esp + 0x170]
push eax
call fcn.00779de0
add esp, 4
lea ecx, [esp + 0x5b8]
mov dword [esp + 0x834], 0xffffffff
call fcn.0077b950
mov al, 1
jmp 0x77927f
cmp al, 2
jne 0x779227
cmp ecx, ebx
jne 0x77910a
mov dword [0x7857b8], 0x773d68
jmp 0x779256
cmp al, 3
jne 0x77910a
cmp ecx, 0x18
jge 0x77910a
lea edx, [esp + 0x170]
mov dword [0x7857b8], 0x773d54
push edx
jmp 0x77925e
mov dword [0x7857b8], 0x773d08
lea ecx, [esp + 0x170]
push ecx
call fcn.00779de0
add esp, 4
mov dword [esp + 0x834], 0xffffffff
lea ecx, [esp + 0x5b8]
call fcn.0077b950
xor al, al
mov ecx, dword [esp + 0x82c]
mov dword fs:[0], ecx
mov ecx, dword [esp + 0x824]
call fcn.0077ef06
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret