Function at 0x7feb30
Capabilities:
Encode data using xor
Terminate process

Disassembly:
push ebp
push ebx
push edi
push esi
sub esp, 0x48
mov eax, dword [esp + 0x5c]
mov edi, ecx
mov ebx, edx
mov dword [esp + 0x1c], eax
mov eax, dword [0xbd33e0]
xor eax, esp
mov dword [esp + 0x44], eax
xor eax, eax
mov esi, dword [ecx + 8]
mov ecx, dword [edx + 4]
test cl, 0x20
mov dword [esp + 0x10], esi
jne 0x7fedf5
cmp dword [edi + 0x34], 0
jne 0x7fedf5
test ecx, 0x2000000
je 0x7fedc0
mov ecx, esi
mov edx, 0x11
mov ebp, edi
call fcn.007f75b0
test byte [ebx + 5], 8
mov edi, eax
je 0x7fed7a
mov edx, fcn.007cbc20
xor eax, eax
imul edx, edx
and edx, 3
cmp edx, 2
sete al
mov ecx, eax
xor ecx, 1
lea eax, [eax + ecx*2 + 6]
movzx ecx, byte [0xbb7dcb]
and al, 7
movzx eax, al
bt ecx, eax
jb 0x7fed64
mov al, byte [0xbb7dcb]
mov dword [esp], ebx
xor ecx, ecx
cmp edx, 2
mov ah, 1
sete cl
mov ebx, ecx
xor ebx, 1
lea ecx, [ecx + ebx*2 + 6]
and cl, 7
xor cl, 7
shl ah, cl
or ah, al
lock cmpxchg byte [0xbb7dcb], ah
jne 0x7febcc
mov ecx, fcn.007cbc20
xor edx, edx
movzx eax, al
imul ecx, ecx
and ecx, 3
cmp ecx, 2
sete dl
mov ebx, edx
xor ebx, 1
lea edx, [edx + ebx*2 + 6]
and dl, 7
xor dl, 7
movzx edx, dl
bt eax, edx
jae 0x7fec4a
mov ebx, dword [esp]
xor eax, eax
cmp ecx, 2
sete al
mov edx, eax
xor edx, 1
lea eax, [eax + edx*2 + 6]
movzx edx, byte [0xbb7dcb]
and al, 7
movzx eax, al
bt edx, eax
jae 0x7fec23
jmp 0x7fed64
xor eax, eax
cmp ecx, 2
movzx edx, byte [0xbb7dcb]
mov ebx, dword [esp]
sete al
mov ecx, eax
xor ecx, 1
lea eax, [eax + ecx*2 + 6]
and al, 7
movzx eax, al
bt edx, eax
jb 0x7fed38
mov ecx, fcn.007cbc20
xor eax, eax
imul ecx, ecx
and ecx, 3
cmp ecx, 2
sete al
mov ecx, eax
not ecx
and ecx, 0x459
lea ecx, [eax + ecx*2 - 0x40bd0c5a]
mov eax, dword [0xbb7db0]
mov edx, ecx
shr edx, 0x1f
or edx, ecx
xor eax, ecx
and cl, 7
mov dword [0xbb7db0], eax
not eax
imul edx, eax
mov eax, dword [0xbb7db4]
lea esi, [edx + edx]
xor eax, edx
shr edx, 0x1e
mov dword [0xbb7db4], eax
or edx, esi
not eax
imul eax, edx
mov edx, dword [0xbb7db8]
lea esi, [eax*4]
xor edx, eax
shr eax, 0x1d
mov dword [0xbb7db8], edx
or eax, esi
not edx
imul edx, eax
mov eax, dword [0xbb7dbc]
lea esi, [edx*8]
xor eax, edx
shr edx, 0x1c
mov dword [0xbb7dbc], eax
or edx, esi
not eax
imul eax, edx
mov edx, dword [0xbb7dc0]
mov esi, eax
shl esi, 4
xor edx, eax
shr eax, 0x1b
mov dword [0xbb7dc0], edx
or eax, esi
not edx
mov esi, dword [esp + 0x10]
imul edx, eax
xor dword [0xbb7dc4], edx
mov dl, 1
shl dl, cl
or byte [0xbb7dcb], dl
mov eax, fcn.007cbc20
xor ecx, ecx
imul eax, eax
and eax, 3
cmp eax, 2
sete cl
mov eax, ecx
xor eax, 1
lea ecx, [ecx + eax*2 + 6]
mov al, 0xfe
and cl, 7
xor cl, 7
rol al, cl
and byte [0xbb7dcb], al
mov eax, dword [ebx + 0x14]
push dword [eax + 0x10]
push 0xbb7db0
push 0
push ebp
call fcn.007fdcc0
add esp, 0x10
mov ecx, esi
mov edx, 0xc
push dword [ebx + 0x2c]
push dword [ebx + 0x30]
call fcn.007d10d0
add esp, 8
mov ecx, esi
mov edx, 0x62
push dword [ebx + 0x1c]
push dword [esp + 0x20]
call fcn.007d10d0
add esp, 8
mov ecx, dword [esp + 0x44]
xor ecx, esp
call fcn.00989fe9
mov ecx, esi
mov edx, edi
add esp, 0x48
pop esi
pop edi
pop ebx
pop ebp
jmp fcn.007f75c0
or ecx, 0x2000000
mov edx, 0x45
mov dword [ebx + 4], ecx
mov ecx, esi
mov eax, dword [edi + 0x2c]
inc eax
mov dword [edi + 0x2c], eax
mov dword [ebx + 0x30], eax
push eax
push 0
call fcn.007d10d0
add esp, 8
inc eax
mov ecx, esi
mov edx, 0x11
mov dword [ebx + 0x2c], eax
call fcn.007f75b0
mov ecx, dword [ebx + 0xc]
mov dword [esp + 4], eax
mov dword [esp + 0x14], ecx
call fcn.007fb610
mov ebp, eax
mov eax, dword [esp + 0x1c]
mov ecx, esi
mov edx, 0x64
mov dword [ebx + 0x1c], eax
push ebp
push eax
call fcn.007d10d0
add esp, 8
mov ecx, dword [edi]
mov dword [esp + 0x24], eax
mov dword [esp + 0xc], edi
mov dword [esp + 0x20], ebp
mov edx, ebp
push 1
call fcn.007f7ba0
add esp, 4
test byte [ebx + 5], 8
mov ebp, eax
mov dword [esp + 8], eax
je 0x7ff223
mov edx, 0x796cf0
mov esi, 0x796cf0
movzx ecx, byte [0xbb7de3]
or edx, 2
xor esi, 2
mov eax, edx
add eax, esi
sete al
not al
and al, 3
movzx eax, al
bt ecx, eax
jb 0x7fefa9
mov al, byte [0xbb7de3]
mov ecx, edx
mov ah, 1
add ecx, esi
sete cl
not cl
and cl, 3
xor cl, 7
shl ah, cl
or ah, al
lock cmpxchg byte [0xbb7de3], ah
jne 0x7fee7c
mov ecx, 0x796cf0
mov edx, 0x796cf0
or ecx, 2
xor edx, 2
mov esi, ecx
add esi, edx
sete ah
not ah
and ah, 3
xor ah, 7
movzx esi, ah
movzx eax, al
bt eax, esi
jae 0x7feee4
mov eax, ecx
movzx esi, byte [0xbb7de3]
add eax, edx
sete al
not al
and al, 3
movzx eax, al
bt esi, eax
jae 0x7feec5
jmp 0x7fefa9
add ecx, edx
movzx ecx, byte [0xbb7de3]
sete al
not al
and al, 3
movzx eax, al
bt ecx, eax
jb 0x7fef82
mov eax, 0x796cf0
mov edx, 0x796cf0
xor ecx, ecx
xor edx, 2
or eax, 2
add eax, edx
mov eax, dword [0xbb7dd0]
sete cl
xor ecx, 0xad31a10b
or ecx, 0x10a0
xor eax, ecx
and cl, 3
mov dword [0xbb7dd0], eax
not eax
mov edx, dword [0xbb7dd4]
imul eax, eax, 0xad31b1ab
lea esi, [eax + eax]
xor edx, eax
shr eax, 0x1e
mov dword [0xbb7dd4], edx
or esi, eax
not edx
mov eax, dword [0xbb7dd8]
imul edx, esi
lea esi, [edx*4]
xor eax, edx
shr edx, 0x1d
mov dword [0xbb7dd8], eax
or esi, edx
not eax
mov dl, 1
imul eax, esi
shl dl, cl
xor dword [0xbb7ddc], eax
or byte [0xbb7de3], dl
mov eax, 0x796cf0
mov ecx, 0x796cf0
xor ecx, 2
or eax, 2
add eax, ecx
mov al, 0xfe
sete cl
not cl
and cl, 3
xor cl, 7
rol al, cl
and byte [0xbb7de3], al
mov edx, fcn.00833870
movzx ecx, byte [0xbb7e07]
mov esi, dword [esp + 0x10]
imul edx, edx
and edx, 3
cmp edx, 2
setb al
or al, 4
movzx eax, al
bt ecx, eax
jb 0x7ff111
mov al, byte [0xbb7e07]
cmp edx, 2
mov ah, 1
setb cl
or cl, 4
xor cl, 7
shl ah, cl
or ah, al
lock cmpxchg byte [0xbb7e07], ah
jne 0x7fefd8
mov ecx, fcn.00833870
movzx eax, al
imul ecx, ecx
and ecx, 3
cmp ecx, 2
setb dl
or dl, 4
xor dl, 7
movzx edx, dl
bt eax, edx
jae 0x7ff032
cmp ecx, 2
movzx edx, byte [0xbb7e07]
setb al
or al, 4
movzx eax, al
bt edx, eax
jae 0x7ff016
jmp 0x7ff111
cmp ecx, 2
movzx edx, byte [0xbb7e07]
setb al
or al, 4
movzx eax, al
bt edx, eax
jb 0x7ff0f0
mov eax, fcn.00833870
xor ecx, ecx
imul eax, eax
and eax, 3
cmp eax, 1
mov eax, dword [0xbb7df0]
seta cl
xor ecx, 0x5863a379
add ecx, 0x90c
mov edx, ecx
xor eax, ecx
shr edx, 0x1f
mov dword [0xbb7df0], eax
not eax
or edx, ecx
and cl, 7
imul edx, eax
mov eax, dword [0xbb7df4]
lea esi, [edx + edx]
xor eax, edx
shr edx, 0x1e
mov dword [0xbb7df4], eax
or esi, edx
not eax
mov edx, dword [0xbb7df8]
imul eax, esi
lea esi, [eax*4]
xor edx, eax
shr eax, 0x1d
mov dword [0xbb7df8], edx
or esi, eax
not edx
mov eax, dword [0xbb7dfc]
imul edx, esi
lea esi, [edx*8]
xor eax, edx
shr edx, 0x1c
mov dword [0xbb7dfc], eax
or esi, edx
not eax
mov dl, 1
imul eax, esi
mov esi, dword [esp + 0x10]
shl dl, cl
xor dword [0xbb7e00], eax
or byte [0xbb7e07], dl
mov eax, fcn.00833870
imul eax, eax
and eax, 3
cmp eax, 2
mov al, 0xfe
setb cl
or cl, 4
xor cl, 7
rol al, cl
and byte [0xbb7e07], al
mov dword [esp], ebx
mov ebx, dword [ebx + 0x14]
mov eax, 0xbb7dd0
mov ecx, 0xc26bb3
cmp dword [esp + 4], 0
mov ebp, dword [ebx + 0x1c]
cmove ecx, eax
push dword [ebx + 0x10]
push ecx
push 0xbb7df0
push 1
mov edi, dword [esp + 0x1c]
push edi
call fcn.007fdcc0
mov eax, ebp
add esp, 0x14
mov ebp, dword [esp + 0x20]
cmp dword [eax], ebp
je 0x7ff15e
mov ebx, dword [esp]
mov eax, dword [esp + 8]
mov edx, dword [esp + 4]
jmp 0x7ff35a
lea esi, [esp + 0x2c]
mov dword [esp + 0x18], eax
mov edx, 0xb
mov ecx, esi
push dword [esp + 0x1c]
call fcn.007fdd40
add esp, 4
mov edx, dword [esp]
mov ecx, edi
call fcn.007fddd0
mov dword [esp + 0x3c], eax
mov dword [ebx + 8], 0
mov ecx, edi
mov edx, ebx
push esi
call fcn.007e17a0
add esp, 4
mov edx, dword [esp + 0x3c]
mov ecx, dword [edi]
mov esi, eax
call fcn.00780810
test esi, esi
jne 0x7ff208
test ebp, ebp
jg 0x7ff1bd
mov esi, dword [esp + 0x10]
mov ebx, dword [esp]
mov edi, dword [esp + 0xc]
jmp 0x7ff151
mov ebp, dword [esp + 0x14]
mov edi, dword [esp + 0x18]
xor esi, esi
mov ecx, ebp
mov edx, esi
call fcn.007fcf30
mov ecx, dword [esp + 0xc]
lea ebx, [esi + esi*4]
mov edx, eax
push dword [edi + ebx*4 + 4]
call fcn.007d38e0
add esp, 4
mov ecx, dword [esp + 8]
mov dword [ecx + esi*4 + 0x14], eax
inc esi
cmp esi, dword [esp + 0x20]
jne 0x7ff1c7
mov esi, dword [esp + 0x10]
mov ebx, dword [esp]
mov eax, dword [esp + 8]
mov edx, dword [esp + 4]
jmp 0x7ff35e
mov ecx, dword [esp + 0x44]
xor ecx, esp
call fcn.00989fe9
mov ecx, dword [esp + 8]
add esp, 0x48
pop esi
pop edi
pop ebx
pop ebp
jmp fcn.007ad5b0
mov ebp, dword [ebx + 0x14]
test ebp, ebp
jne 0x7ff23b
mov eax, dword [esp + 8]
mov edx, dword [esp + 4]
mov edi, dword [esp + 0xc]
jmp 0x7ff35a
mov dword [esp], ebx
mov ecx, dword [esp + 0x14]
call fcn.007fcfe0
cmp al, 0x40
jg 0x7ff24d
mov al, 0x41
mov ebx, dword [esp + 8]
mov byte [esp + 0x2b], al
mov eax, dword [esp]
mov edi, dword [esp + 0xc]
test ebx, ebx
je 0x7ff26d
mov edx, dword [eax + 0xc]
mov ecx, edi
call fcn.007d3920
mov dword [ebx + 0x14], eax
mov ecx, edi
call fcn.007fcfa0
mov ecx, edi
mov dword [esp + 0x14], eax
call fcn.007fcfa0
mov ebx, dword [ebp]
mov dword [esp + 0x18], eax
test ebx, ebx
jg 0x7ff297
mov eax, dword [esp + 4]
mov ebp, esi
mov esi, eax
jmp 0x7ff335
mov eax, ebp
mov edi, dword [esp + 4]
mov ebp, dword [esp + 0x10]
add eax, 4
mov esi, dword [eax]
test edi, edi
mov dword [esp + 0x20], eax
je 0x7ff2d1
mov ecx, esi
call fcn.007fa6f0
test eax, eax
je 0x7ff2bf
mov dword [esp + 4], edi
jmp 0x7ff2d9
mov ecx, dword [esp + 0x10]
mov edx, edi
call fcn.007ff3d0
mov eax, dword [esp]
and byte [eax + 7], 0xfd
mov dword [esp + 4], 0
mov edi, dword [esp + 0x14]
mov ecx, dword [esp + 0xc]
mov edx, esi
push edi
call fcn.007f7750
add esp, 4
mov ecx, ebp
mov edx, 0x5b
push 1
lea eax, [esp + 0x2f]
push eax
mov esi, dword [esp + 0x20]
push esi
push 1
push edi
call fcn.007f75d0
add esp, 0x14
mov ecx, ebp
mov edx, 0x83
push 1
push edi
push esi
push dword [esp + 0x28]
call fcn.0078dfd0
add esp, 0x10
mov eax, dword [esp + 0x20]
mov esi, dword [esp + 4]
add eax, 0x14
dec ebx
mov edi, esi
jg 0x7ff2a4
mov edi, dword [esp + 0xc]
mov edx, dword [esp + 0x14]
mov ecx, edi
call fcn.007fc440
mov edx, dword [esp + 0x18]
mov ecx, edi
call fcn.007fc440
mov ebx, dword [esp]
mov eax, dword [esp + 8]
mov edx, esi
mov esi, ebp
test eax, eax
je 0x7ff37b
mov edi, ebx
mov ebx, edx
mov edx, dword [esp + 0x24]
mov ecx, esi
push 0xfffffffffffffff7
push eax
call fcn.0078e110
mov edx, ebx
mov ebx, edi
mov edi, dword [esp + 0x14]
add esp, 8
test edx, edx
je 0x7ff3b6
mov ecx, esi
call fcn.007f75c0
mov ecx, esi
mov edx, 0x41
push dword [ebx + 0x30]
call fcn.007f9600
add esp, 4
mov ecx, esi
call fcn.007fdcb0
mov edx, dword [ebx + 0x2c]
dec eax
mov ecx, esi
dec edx
push eax
call fcn.007fdd60
add esp, 4
mov ecx, edi
call fcn.007fdd70
mov ecx, dword [esp + 0x44]
xor ecx, esp
call fcn.00989fe9
add esp, 0x48
pop esi
pop edi
pop ebx
pop ebp
ret