Function at 0x838c20
Capabilities:
Encode data using xor
Terminate process

Disassembly:
push ebp
push ebx
push edi
push esi
sub esp, 0xc
mov esi, ecx
mov ebx, dword [esp + 0x20]
mov dword [esp + 8], edx
mov edx, dword [edx + 0x48]
mov ecx, dword [ecx]
call fcn.0078dee0
mov ebp, eax
mov ecx, esi
xor edx, edx
push eax
call fcn.00800f40
add esp, 4
mov edi, dword [esi + 0x28]
test ebx, ebx
lea eax, [edi + 3]
mov dword [esi + 0x28], eax
je 0x838de1
mov dword [esp + 4], ebp
mov ebp, fcn.007ab170
xor eax, eax
and ebp, 1
movzx edx, byte [0xbbb66f]
inc ebp
mov ecx, ebp
xor ecx, fcn.007ab170
sete al
mov ecx, eax
xor ecx, 1
lea eax, [ecx + eax*2]
or al, 4
movzx eax, al
bt edx, eax
jb 0x838dc0
mov al, byte [0xbbb66f]
mov dword [esp], ebx
mov edx, ebp
xor ecx, ecx
xor edx, fcn.007ab170
sete cl
mov edx, ecx
xor edx, 1
lea ecx, [edx + ecx*2]
mov dl, 1
or cl, 4
xor cl, 7
shl dl, cl
or dl, al
lock cmpxchg byte [0xbbb66f], dl
jne 0x838c9a
mov ecx, fcn.007ab170
xor ebx, ebx
movzx eax, al
and ecx, 1
inc ecx
mov ebp, ecx
xor ebp, fcn.007ab170
sete bl
mov edx, ebx
xor edx, 1
lea edx, [edx + ebx*2]
or dl, 4
xor dl, 7
movzx edx, dl
bt eax, edx
jae 0x838d22
mov ebx, dword [esp]
mov edx, ecx
xor eax, eax
movzx ebp, byte [0xbbb66f]
xor edx, fcn.007ab170
sete al
mov edx, eax
xor edx, 1
lea eax, [edx + eax*2]
or al, 4
movzx eax, al
bt ebp, eax
jae 0x838cf7
jmp 0x838dc0
xor eax, eax
xor ecx, fcn.007ab170
movzx edx, byte [0xbbb66f]
mov ebx, dword [esp]
sete al
mov ecx, eax
xor ecx, 1
lea eax, [ecx + eax*2]
or al, 4
movzx eax, al
bt edx, eax
jb 0x838d95
mov ecx, fcn.007ab170
xor eax, eax
mov ebp, dword [0xbbb664]
and ecx, 1
inc ecx
xor ecx, fcn.007ab170
sete al
mov ecx, eax
xor ecx, 0x80612ee1
lea edx, [ecx + eax*2]
lea ecx, [ecx + eax*2 + 0x14]
xor ebp, ecx
or edx, 0x15
and cl, 7
mov dword [0xbbb664], ebp
not ebp
imul edx, ebp
xor dword [0xbbb668], edx
mov dl, 1
shl dl, cl
or byte [0xbbb66f], dl
mov eax, fcn.007ab170
xor ecx, ecx
and eax, 1
inc eax
xor eax, fcn.007ab170
sete cl
mov eax, ecx
xor eax, 1
lea ecx, [eax + ecx*2]
mov al, 0xfe
or cl, 4
xor cl, 7
rol al, cl
and byte [0xbbb66f], al
mov ebp, dword [esp + 4]
mov ecx, esi
mov edx, ebp
push 0xbbb664
push dword [ebx]
push edi
call fcn.00838f50
add esp, 0xc
mov edx, dword [esp + 8]
jmp 0x838f20
mov edx, fcn.0082b1c0
mov eax, fcn.0082b1c0
mov dword [esp], ebx
mov dword [esp + 4], edi
and edx, 1
movzx ecx, byte [0xbbb67b]
xor edx, eax
cmp edx, 0xffffffff
setne al
or al, 4
movzx eax, al
bt ecx, eax
jb 0x838eff
mov al, byte [0xbbb67b]
cmp edx, 0xffffffff
mov ah, 1
setne cl
or cl, 4
xor cl, 7
shl ah, cl
or ah, al
lock cmpxchg byte [0xbbb67b], ah
jne 0x838e17
mov ecx, fcn.0082b1c0
mov edx, fcn.0082b1c0
movzx eax, al
and ecx, 1
xor ecx, edx
cmp ecx, 0xffffffff
setne dl
or dl, 4
xor dl, 7
movzx edx, dl
bt eax, edx
jae 0x838e75
cmp ecx, 0xffffffff
movzx edx, byte [0xbbb67b]
setne al
or al, 4
movzx eax, al
bt edx, eax
jae 0x838e59
jmp 0x838eff
cmp ecx, 0xffffffff
movzx edx, byte [0xbbb67b]
setne al
or al, 4
movzx eax, al
bt edx, eax
jb 0x838eda
mov edx, fcn.0082b1c0
mov eax, fcn.0082b1c0
xor ecx, ecx
and edx, 1
xor edx, eax
mov eax, dword [0xbbb670]
cmp edx, 0xffffffff
sete cl
xor ecx, 0x7930c4f1
add ecx, 0x101c
mov edx, ecx
xor eax, ecx
shr edx, 0x1f
mov dword [0xbbb670], eax
not eax
or edx, ecx
and cl, 7
imul edx, eax
xor dword [0xbbb674], edx
mov dl, 1
shl dl, cl
or byte [0xbbb67b], dl
mov ecx, fcn.0082b1c0
mov eax, fcn.0082b1c0
and ecx, 1
xor ecx, eax
mov al, 0xfe
cmp ecx, 0xffffffff
setne cl
or cl, 4
xor cl, 7
rol al, cl
and byte [0xbbb67b], al
mov edx, ebp
mov ecx, esi
push 0xbbb670
mov ebx, dword [esp + 0xc]
push dword [ebx]
mov edi, dword [esp + 0xc]
push edi
call fcn.00838f50
mov edx, ebx
add esp, 0xc
mov ebx, dword [esp]
mov eax, dword [esi + 0x2c]
mov ecx, esi
inc eax
push dword [esi + 0x28]
push eax
push edi
push ebx
call fcn.00839ab0
add esp, 0x10
mov ecx, esi
mov edx, ebp
add esp, 0xc
pop esi
pop edi
pop ebx
pop ebp
jmp 0x83a670