Function at 0x79fb00
Capabilities:
Encode data using xor

Disassembly:
push ebp
push ebx
push edi
push esi
sub esp, 0x30
mov eax, dword [0xbd33e0]
mov edi, ecx
mov ecx, 0x10
xor edx, edx
xor eax, esp
mov dword [esp + 0x2c], eax
call fcn.007870a0
mov esi, 0xc0a
test eax, eax
je 0x7a0091
mov ecx, dword [edi + 0x1c]
mov ebx, eax
mov dword [esp + 8], edi
call fcn.00783170
lea ecx, [eax + 0x79]
xor edx, edx
mov edi, eax
call fcn.007870a0
test eax, eax
jne 0x79fb56
push ebx
call fcn.00780f60
jmp 0x7a008e
mov edx, fcn.007d30a0
mov ebp, eax
mov esi, eax
xor eax, eax
mov dword [esp], ebx
imul edx, edx
movzx ebx, byte [0xbb4aa3]
and edx, 3
cmp edx, 2
sete al
mov ecx, eax
xor ecx, 1
lea eax, [eax + ecx*2 + 6]
and al, 7
movzx eax, al
bt ebx, eax
jb 0x79fcad
mov al, byte [0xbb4aa3]
xor ecx, ecx
cmp edx, 2
mov ah, 1
sete cl
mov ebx, ecx
xor ebx, 1
lea ecx, [ecx + ebx*2 + 6]
and cl, 7
xor cl, 7
shl ah, cl
or ah, al
lock cmpxchg byte [0xbb4aa3], ah
jne 0x79fb93
mov ecx, fcn.007d30a0
xor edx, edx
movzx eax, al
imul ecx, ecx
and ecx, 3
cmp ecx, 2
sete dl
mov ebx, edx
xor ebx, 1
lea edx, [edx + ebx*2 + 6]
and dl, 7
xor dl, 7
movzx edx, dl
bt eax, edx
jae 0x79fc0e
xor eax, eax
cmp ecx, 2
movzx ebx, byte [0xbb4aa3]
sete al
mov edx, eax
xor edx, 1
lea eax, [eax + edx*2 + 6]
and al, 7
movzx eax, al
bt ebx, eax
jae 0x79fbe7
jmp 0x79fcad
xor eax, eax
cmp ecx, 2
movzx edx, byte [0xbb4aa3]
sete al
mov ecx, eax
xor ecx, 1
lea eax, [eax + ecx*2 + 6]
and al, 7
movzx eax, al
bt edx, eax
jb 0x79fc81
mov ecx, fcn.007d30a0
xor eax, eax
mov ebx, dword [0xbb4a98]
imul ecx, ecx
and ecx, 3
cmp ecx, 2
sete al
mov ecx, eax
not ecx
and ecx, 0x301
lea ecx, [eax + ecx*2 - 0x27e863b2]
mov edx, ecx
xor ebx, ecx
shr edx, 0x1f
mov dword [0xbb4a98], ebx
not ebx
or edx, ecx
and cl, 7
imul edx, ebx
xor dword [0xbb4a9c], edx
mov dl, 1
shl dl, cl
or byte [0xbb4aa3], dl
mov eax, fcn.007d30a0
xor ecx, ecx
imul eax, eax
and eax, 3
cmp eax, 2
sete cl
mov eax, ecx
xor eax, 1
lea ecx, [ecx + eax*2 + 6]
mov al, 0xfe
and cl, 7
xor cl, 7
rol al, cl
and byte [0xbb4aa3], al
mov ecx, dword [esp + 8]
lea eax, [ebp + 0x68]
add edi, 0xf
mov dword [esp + 4], esi
mov dword [esi + 4], eax
push dword [ecx + 0x1c]
push 0xbb4a98
push eax
push edi
call fcn.00783420
add esp, 0x10
call fcn.007a0290
mov edi, dword [0xc26b14]
test edi, edi
je 0x79fd01
mov eax, dword [esp + 4]
mov ebx, edi
mov esi, dword [eax + 4]
mov ecx, dword [ebx + 4]
mov edx, esi
call fcn.00783720
test eax, eax
je 0x7a00a6
mov ebx, dword [ebx + 0x64]
test ebx, ebx
jne 0x79fce8
mov ebx, dword [esp + 4]
mov dword [esp + 0x28], 0
mov dword [ebx + 0x10], 0xffffffff
mov dword [ebx + 0x64], edi
mov dword [0xc26b14], ebx
cmp byte [0xbb32f4], 0
je 0x79fd40
push 0
call fcn.00780b50
add esp, 4
test eax, eax
mov dword [ebx], eax
jne 0x79fd40
mov esi, 0xc0a
jmp 0x7a0003
mov edx, fcn.0082ebd0
mov eax, fcn.0082ebd0
movzx ecx, byte [0xbb4ac3]
add ebp, 8
mov edi, dword [esp]
and edx, 1
xor edx, eax
cmp edx, 0xffffffff
setne al
or al, 4
movzx eax, al
bt ecx, eax
jb 0x79fe8e
mov al, byte [0xbb4ac3]
cmp edx, 0xffffffff
mov ah, 1
setne cl
or cl, 4
xor cl, 7
shl ah, cl
or ah, al
lock cmpxchg byte [0xbb4ac3], ah
jne 0x79fd75
mov ecx, fcn.0082ebd0
mov edx, fcn.0082ebd0
movzx eax, al
and ecx, 1
xor ecx, edx
cmp ecx, 0xffffffff
setne dl
or dl, 4
xor dl, 7
movzx edx, dl
bt eax, edx
jae 0x79fdd3
cmp ecx, 0xffffffff
movzx edx, byte [0xbb4ac3]
setne al
or al, 4
movzx eax, al
bt edx, eax
jae 0x79fdb7
jmp 0x79fe8e
cmp ecx, 0xffffffff
movzx edx, byte [0xbb4ac3]
setne al
or al, 4
movzx eax, al
bt edx, eax
jb 0x79fe69
mov edx, fcn.0082ebd0
mov eax, fcn.0082ebd0
xor ecx, ecx
and edx, 1
xor edx, eax
mov eax, dword [0xbb4ab0]
cmp edx, 0xffffffff
sete cl
xor ecx, 0xd6cef651
or ecx, 0xc
xor eax, ecx
and cl, 5
mov dword [0xbb4ab0], eax
not eax
mov edx, dword [0xbb4ab4]
imul eax, eax, 0xd6cef65d
lea esi, [eax + eax]
xor edx, eax
shr eax, 0x1e
mov dword [0xbb4ab4], edx
or esi, eax
not edx
mov eax, dword [0xbb4ab8]
imul edx, esi
lea esi, [edx*4]
xor eax, edx
shr edx, 0x1d
mov dword [0xbb4ab8], eax
or esi, edx
not eax
mov dl, 1
imul eax, esi
shl dl, cl
xor dword [0xbb4abc], eax
or byte [0xbb4ac3], dl
mov ecx, fcn.0082ebd0
mov eax, fcn.0082ebd0
and ecx, 1
xor ecx, eax
mov al, 0xfe
cmp ecx, 0xffffffff
setne cl
or cl, 4
xor cl, 7
rol al, cl
and byte [0xbb4ac3], al
push 0
push 0xbb4ab0
mov esi, dword [esp + 0x10]
push dword [esi + 0x1c]
call fcn.007986f0
add esp, 0xc
xor ecx, ecx
test eax, eax
sete cl
lea eax, [ecx + ecx*4 + 0x80001]
lea ecx, [esp + 0x28]
push ecx
push eax
push ebp
push dword [ebx + 4]
push dword [esi + 4]
call fcn.00784340
add esp, 0x14
test eax, eax
je 0x7a0044
mov edx, fcn.0081c1d0
xor ecx, ecx
mov dword [esp + 0x14], eax
not edx
and edx, 1
mov dword [esp + 0x18], edx
mov eax, dword [esp + 0x18]
xor ebx, ebx
mov ebp, dword [ecx*4 + 0xb54cf0]
mov edi, dword [ecx*4 + 0xb54e40]
mov dword [esp + 0x20], ecx
add eax, fcn.0081c1d0
mov eax, 1
sete bl
xor ebx, 0x8726a5c3
add ebx, 0x458
xor ebx, dword [ecx*4 + 0xb54f90]
mov ecx, ebx
and cl, 7
movzx edx, cl
shl eax, cl
xor cl, 7
mov dword [esp + 0xc], edx
mov edx, 1
shl edx, cl
movzx ecx, byte [ebp + edi - 1]
mov esi, dword [esp + 0xc]
bt ecx, esi
jb 0x79ffcd
mov dword [esp + 0x10], eax
mov al, byte [ebp + edi - 1]
mov ecx, eax
or cl, dl
lock cmpxchg byte [ebp + edi - 1], cl
jne 0x79ff4d
mov ecx, dword [esp + 0x10]
movzx eax, al
test edx, eax
je 0x79ff6f
movzx eax, byte [ebp + edi - 1]
test ecx, eax
je 0x79ff64
jmp 0x79ffcd
movzx eax, byte [ebp + edi - 1]
test ecx, eax
jne 0x79ffc7
lea ecx, [edi - 4]
shr ecx, 2
je 0x79ffbf
xor eax, eax
mov esi, ebp
mov dword [esp + 0x1c], ecx
mov ecx, esi
mov dword [esp + 0x24], esi
mov esi, dword [esi]
mov dword [esp + 0xc], ebx
xor esi, ebx
mov dword [ecx], esi
mov ecx, eax
not esi
inc eax
shl dword [esp + 0xc], cl
and cl, 0x1f
xor cl, 0x1f
shr ebx, cl
mov ecx, dword [esp + 0x1c]
or ebx, dword [esp + 0xc]
imul ebx, esi
mov esi, dword [esp + 0x24]
add esi, 4
cmp eax, ecx
jne 0x79ff88
mov eax, dword [esp + 0x10]
or byte [ebp + edi - 1], al
not dl
and byte [ebp + edi - 1], dl
mov ecx, dword [esp + 0x20]
inc ecx
cmp ecx, 0x51
jne 0x79fee3
mov ebx, dword [esp + 4]
mov esi, dword [ebx + 4]
call dword [0xbb35b8]
mov ecx, dword [esp + 0x14]
mov edx, eax
push 0x31cc
push esi
push 0xbb4ac4
call fcn.0079cac0
add esp, 0xc
mov esi, eax
mov edi, dword [esp]
mov ecx, ebx
mov edx, 1
push 1
push pe_nt_image_headers32
call fcn.007a02b0
add esp, 8
mov eax, dword [esp + 8]
xor edx, edx
mov ecx, dword [eax + 4]
call fcn.007a0420
push edi
call fcn.00780f60
add esp, 4
push 0
call fcn.00780f60
add esp, 4
call fcn.007a02a0
jmp 0x7a0091
cmp dword [esp + 0x28], 1
jne 0x7a004f
mov byte [ebx + 0x50], 1
mov ecx, ebx
call fcn.007a00c0
mov esi, eax
cmp eax, 0x508
je 0x7a0063
test esi, esi
jne 0x7a0006
mov dword [edi], ebx
inc dword [ebx + 0x5c]
mov eax, dword [esp + 8]
mov dword [eax + 0x18], edi
call fcn.007a02a0
push dword [ebx]
call fcn.007801d0
add esp, 4
mov eax, dword [ebx + 0x60]
mov dword [edi + 4], eax
mov dword [ebx + 0x60], edi
push dword [ebx]
call fcn.007801e0
add esp, 4
mov ecx, dword [esp + 0x2c]
xor ecx, esp
call fcn.00989fe9
mov eax, esi
add esp, 0x30
pop esi
pop edi
pop ebx
pop ebp
ret
push dword [esp + 4]
call fcn.00780f60
add esp, 4
mov edi, dword [esp]
xor esi, esi
jmp 0x7a0063