Function at 0x10007b70
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x28
mov dword [ebp - 0x25], 0x5a41575a
xor ecx, ecx
mov dword [ebp - 0x21], 0xa045a50
mov dword [ebp - 0x1d], 0x50575e17
mov word [ebp - 0x19], 0x100
lea eax, [ecx + 0x31]
xor byte [ebp + ecx - 0x25], al
inc ecx
cmp ecx, 0xc
jb 0x10007b93
push esi
mov esi, dword [sym.imp.KERNEL32.dll_LoadLibraryA]
lea eax, [ebp - 0x25]
push str.ActivateActCtx_ActivateActCtxWorker_AddAtomA_AddAtomW_AddConsoleAliasA_AddConsoleAliasW_AddIntegrityLabelToBoundaryDescriptor_AddLocalAlternateComputerNameA_AddLocalAlternateComputerNameW_AddRefActCtx_AddRefActCtxWorker_AddResourceAttributeAce_AddSIDToBoundaryDescriptor_AddScopedPolicyIDAce_AddSecureMemoryCacheCallback_AdjustCalendarDate_AllocConsole_AllocateUserPhysicalPages_AllocateUserPhysicalPagesNuma_ApplicationRecoveryFinished_ApplicationRecoveryInProgress_AreFileApisANSI_AssignProcessToJobObject_AttachConsole_BackupRead_BackupSeek_BackupWrite_BaseCheckAppcompatCache_BaseCheckAppcompatCacheEx_BaseCheckAppcompatCacheExWorker_BaseCheckAppcompatCacheWorker_BaseCheckElevation_BaseCleanupAppcompatCacheSupport_BaseCleanupAppcompatCacheSupportWorker_BaseDestroyVDMEnvironment_BaseDllReadWriteIniFile_BaseDumpAppcompatCache_BaseDumpAppcompatCacheWorker_BaseElevationPostProcessing_BaseFlushAppcompatCache_BaseFlushAppcompatCacheWorker_BaseFormatObjectAttributes_BaseFormatTimeOut_BaseFreeAppCompatDataForProcessWorker_BaseGenerateAppCompatData_BaseGetNamedObjectDirectory_BaseInitAppcompatCacheSupport_BaseInitAppcompatCacheSupportWorker_BaseIsAppcompatInfrastructureDisabled_BaseIsAppcompatInfrastructureDisabledWorker_BaseIsDosApplication_BaseQueryModuleData_BaseReadAppCompatDataForProcessWorker_BaseSetLastNTError_BaseThreadInitThunk_BaseUpdateAppcompatCache_BaseUpdateAppcompatCacheWorker_BaseUpdateVDMEntry_BaseVerifyUnicodeString_BaseWriteErrorElevationRequiredEvent_Basep8BitStringToDynamicUnicodeString_BasepAllocateActivationContextActivationBlock_BasepAnsiStringToDynamicUnicodeString_BasepAppContainerEnvironmentExtension_BasepAppXExtension_BasepCheckAppCompat_BasepCheckWebBladeHashes_BasepCheckWinSaferRestrictions_BasepConstructSxsCreateProcessMessage_BasepCopyEncryption_BasepFreeActivationContextActivationBlock_BasepFreeAppCompatData_BasepGetAppCompatData_BasepGetComputerNameFromNtPath_BasepGetExeArchType_BasepInitAppCompatData_BasepIsProcessAllowed_BasepMapModuleHandle_BasepNotifyLoadStringResource_BasepPostSuccessAppXExtension_BasepProcessInvalidImage_BasepQueryAppCompat_BasepQueryModuleChpeSettings_BasepReleaseAppXContext_BasepReleaseSxsCreateProcessUtilityStruct_BasepReportFault_BasepSetFileEncryptionCompression_Beep_BeginUpdateResourceA_BeginUpdateResourceW_BindIoCompletionCallback_BuildCommDCBA_BuildCommDCBAndTimeoutsA_BuildCommDCBAndTimeoutsW_BuildCommDCBW_CallNamedPipeA_CallNamedPipeW_CallbackMayRunLong_CancelDeviceWakeupRequest_CancelIo_CancelIoEx_CancelSynchronousIo_CancelTimerQueueTimer_CancelWaitableTimer_ChangeTimerQueueTimer_CheckAllowDecryptedRemoteDestinationPolicy_CheckElevation_CheckElevationEnabled_CheckForReadOnlyResource_CheckForReadOnlyResourceFilter_CheckNameLegalDOS8Dot3A_CheckNameLegalDOS8Dot3W_CheckRemoteDebuggerPresent_CheckTokenCapability_CheckTokenMembershipEx_ClearCommBreak_ClearCommError_CloseConsoleHandle_CloseHandle_ClosePrivateNamespace_CloseProfileUserMapping_CmdBatNotification_CommConfigDialogA_CommConfigDialogW_CompareCalendarDates_CompareFileTime_CompareStringA_CompareStringEx_CompareStringOrdinal_CompareStringW_ConnectNamedPipe_ConsoleMenuControl_ContinueDebugEvent_ConvertCalDateTimeToSystemTime_ConvertDefaultLocale_ConvertFiberToThread_ConvertNLSDayOfWeekToWin32DayOfWeek_ConvertSystemTimeToCalDateTime_ConvertThreadToFiber_ConvertThreadToFiberEx_CopyContext_CopyFile2_CopyFileA_CopyFileExA_CopyFileExW_CopyFileTransactedA_CopyFileTransactedW_CopyFileW_CopyLZFile_CreateActCtxA_CreateActCtxW_CreateActCtxWWorker_CreateBoundaryDescriptorA_CreateBoundaryDescriptorW_CreateConsoleScreenBuffer_CreateDirectoryA_CreateDirectoryExA_CreateDirectoryExW_CreateDirectoryTransactedA_CreateDirectoryTransactedW_CreateDirectoryW_CreateEventA_CreateEventExA_CreateEventExW_CreateEventW_CreateFiber_CreateFiberEx_CreateFile2_CreateFileA_CreateFileMappingA_CreateFileMappingNumaA_CreateFileMappingNumaW_CreateFileMappingW_CreateFileTransactedA_CreateFileTransactedW_CreateFileW_CreateHardLinkA_CreateHardLinkTransactedA_CreateHardLinkTransactedW_CreateHardLinkW_CreateIoCompletionPort_CreateJobObjectA_CreateJobObjectW_C
push eax
mov byte [ebp - 0x18], 0
call esi
push eax
call fcn.10007c60
add esp, 8
test eax, eax
je 0x10007c59
mov dword [ebp - 0xb], 0x5857465f
xor ecx, ecx
mov dword [ebp - 7], 0x54531859
mov word [ebp - 3], 0x55
mov byte [ebp - 1], 1
lea eax, [ecx + 0x31]
xor byte [ebp + ecx - 0xb], al
inc ecx
cmp ecx, 9
jb 0x10007be1
push str.A_SHAFinal_A_SHAInit_A_SHAUpdate_AlpcAdjustCompletionListConcurrencyCount_AlpcFreeCompletionListMessage_AlpcGetCompletionListLastMessageInformation_AlpcGetCompletionListMessageAttributes_AlpcGetHeaderSize_AlpcGetMessageAttribute_AlpcGetMessageFromCompletionList_AlpcGetOutstandingCompletionListMessageCount_AlpcInitializeMessageAttribute_AlpcMaxAllowedMessageLength_AlpcRegisterCompletionList_AlpcRegisterCompletionListWorkerThread_AlpcRundownCompletionList_AlpcUnregisterCompletionList_AlpcUnregisterCompletionListWorkerThread_ApiSetQueryApiSetPresence_CsrAllocateCaptureBuffer_CsrAllocateMessagePointer_CsrCaptureMessageBuffer_CsrCaptureMessageMultiUnicodeStringsInPlace_CsrCaptureMessageString_CsrCaptureTimeout_CsrClientCallServer_CsrClientConnectToServer_CsrFreeCaptureBuffer_CsrGetProcessId_CsrIdentifyAlertableThread_CsrSetPriorityClass_CsrVerifyRegion_DbgBreakPoint_DbgPrint_DbgPrintEx_DbgPrintReturnControlC_DbgPrompt_DbgQueryDebugFilterState_DbgSetDebugFilterState_DbgUiConnectToDbg_DbgUiContinue_DbgUiConvertStateChangeStructure_DbgUiConvertStateChangeStructureEx_DbgUiDebugActiveProcess_DbgUiGetThreadDebugObject_DbgUiIssueRemoteBreakin_DbgUiRemoteBreakin_DbgUiSetThreadDebugObject_DbgUiStopDebugging_DbgUiWaitStateChange_DbgUserBreakPoint_EtwCheckCoverage_EtwCreateTraceInstanceId_EtwDeliverDataBlock_EtwEnumerateProcessRegGuids_EtwEventActivityIdControl_EtwEventEnabled_EtwEventProviderEnabled_EtwEventRegister_EtwEventSetInformation_EtwEventUnregister_EtwEventWrite_EtwEventWriteEndScenario_EtwEventWriteEx_EtwEventWriteFull_EtwEventWriteNoRegistration_EtwEventWriteStartScenario_EtwEventWriteString_EtwEventWriteTransfer_EtwGetTraceEnableFlags_EtwGetTraceEnableLevel_EtwGetTraceLoggerHandle_EtwLogTraceEvent_EtwNotificationRegister_EtwNotificationUnregister_EtwProcessPrivateLoggerRequest_EtwRegisterSecurityProvider_EtwRegisterTraceGuidsA_EtwRegisterTraceGuidsW_EtwReplyNotification_EtwSendNotification_EtwSetMark_EtwTraceEventInstance_EtwTraceMessage_EtwTraceMessageVa_EtwUnregisterTraceGuids_EtwWriteUMSecurityEvent_EtwpCreateEtwThread_EtwpGetCpuSpeed_EvtIntReportAuthzEventAndSourceAsync_EvtIntReportEventAndSourceAsync_ExpInterlockedPopEntrySListEnd_ExpInterlockedPopEntrySListFault_ExpInterlockedPopEntrySListResume_KiRaiseUserExceptionDispatcher_KiUserApcDispatcher_KiUserCallbackDispatcher_KiUserExceptionDispatcher_KiUserInvertedFunctionTable_LdrAccessResource_LdrAddDllDirectory_LdrAddLoadAsDataTable_LdrAddRefDll_LdrAppxHandleIntegrityFailure_LdrCallEnclave_LdrControlFlowGuardEnforced_LdrCreateEnclave_LdrDeleteEnclave_LdrDisableThreadCalloutsForDll_LdrEnumResources_LdrEnumerateLoadedModules_LdrFastFailInLoaderCallout_LdrFindEntryForAddress_LdrFindResourceDirectory_U_LdrFindResourceEx_U_LdrFindResource_U_LdrFlushAlternateResourceModules_LdrGetDllDirectory_LdrGetDllFullName_LdrGetDllHandle_LdrGetDllHandleByMapping_LdrGetDllHandleByName_LdrGetDllHandleEx_LdrGetDllPath_LdrGetFailureData_LdrGetFileNameFromLoadAsDataTable_LdrGetKnownDllSectionHandle_LdrGetProcedureAddress_LdrGetProcedureAddressEx_LdrGetProcedureAddressForCaller_LdrInitShimEngineDynamic_LdrInitializeEnclave_LdrInitializeThunk_LdrLoadAlternateResourceModule_LdrLoadAlternateResourceModuleEx_LdrLoadDll_LdrLoadEnclaveModule_LdrLockLoaderLock_LdrOpenImageFileOptionsKey_LdrProcessInitializationComplete_LdrProcessRelocationBlock_LdrProcessRelocationBlockEx_LdrQueryImageFileExecutionOptions_LdrQueryImageFileExecutionOptionsEx_LdrQueryImageFileKeyOption_LdrQueryModuleServiceTags_LdrQueryOptionalDelayLoadedAPI_LdrQueryProcessModuleInformation_LdrRegisterDllNotification_LdrRemoveDllDirectory_LdrRemoveLoadAsDataTable_LdrResFindResource_LdrResFindResourceDirectory_LdrResGetRCConfig_LdrResRelease_LdrResSearchResource_LdrResolveDelayLoadedAPI_LdrResolveDelayLoadsFromDll_LdrRscIsTypeExist_LdrSetAppCompatDllRedirectionCallback_LdrSetDefaultDllDirectories_LdrSetDllDirectory_LdrSetDllManifestProber_LdrSetImplicitPathOptions_LdrSetMUICacheType_LdrShutdownProcess_LdrShutdownThread_LdrStandardizeSystemPath_LdrSystemDllInitBlock_LdrUnloadAlternateResourceModule_LdrUnloadAlternateResourceModuleEx_LdrU
lea eax, [ebp - 0xb]
mov byte [ebp - 1], 0
push eax
call esi
push eax
call fcn.10007c60
add esp, 8
test eax, eax
je 0x10007c59
mov dword [ebp - 0x17], 0x46564144
xor ecx, ecx
mov dword [ebp - 0x13], 0x5c190406
mov dword [ebp - 0xf], 0x1005655
lea eax, [ecx + 0x31]
xor byte [ebp + ecx - 0x17], al
inc ecx
cmp ecx, 0xa
jb 0x10007c21
push str.ActivateKeyboardLayout_AddClipboardFormatListener_AdjustWindowRect_AdjustWindowRectEx_AdjustWindowRectExForDpi_AlignRects_AllowForegroundActivation_AllowSetForegroundWindow_AnimateWindow_AnyPopup_AppendMenuA_AppendMenuW_AreDpiAwarenessContextsEqual_ArrangeIconicWindows_AttachThreadInput_BeginDeferWindowPos_BeginPaint_BlockInput_BringWindowToTop_BroadcastSystemMessage_BroadcastSystemMessageA_BroadcastSystemMessageExA_BroadcastSystemMessageExW_BroadcastSystemMessageW_BuildReasonArray_CalcMenuBar_CalculatePopupWindowPosition_CallMsgFilter_CallMsgFilterA_CallMsgFilterW_CallNextHookEx_CallWindowProcA_CallWindowProcW_CancelShutdown_CascadeChildWindows_CascadeWindows_ChangeClipboardChain_ChangeDisplaySettingsA_ChangeDisplaySettingsExA_ChangeDisplaySettingsExW_ChangeDisplaySettingsW_ChangeMenuA_ChangeMenuW_ChangeWindowMessageFilter_ChangeWindowMessageFilterEx_CharLowerA_CharLowerBuffA_CharLowerBuffW_CharLowerW_CharNextA_CharNextExA_CharNextW_CharPrevA_CharPrevExA_CharPrevW_CharToOemA_CharToOemBuffA_CharToOemBuffW_CharToOemW_CharUpperA_CharUpperBuffA_CharUpperBuffW_CharUpperW_CheckDBCSEnabledExt_CheckDlgButton_CheckMenuItem_CheckMenuRadioItem_CheckProcessForClipboardAccess_CheckProcessSession_CheckRadioButton_CheckWindowThreadDesktop_ChildWindowFromPoint_ChildWindowFromPointEx_CliImmSetHotKey_ClientThreadSetup_ClientToScreen_ClipCursor_CloseClipboard_CloseDesktop_CloseGestureInfoHandle_CloseTouchInputHandle_CloseWindow_CloseWindowStation_ConsoleControl_ControlMagnification_CopyAcceleratorTableA_CopyAcceleratorTableW_CopyIcon_CopyImage_CopyRect_CountClipboardFormats_CreateAcceleratorTableA_CreateAcceleratorTableW_CreateCaret_CreateCursor_CreateDCompositionHwndTarget_CreateDesktopA_CreateDesktopExA_CreateDesktopExW_CreateDesktopW_CreateDialogIndirectParamA_CreateDialogIndirectParamAorW_CreateDialogIndirectParamW_CreateDialogParamA_CreateDialogParamW_CreateIcon_CreateIconFromResource_CreateIconFromResourceEx_CreateIconIndirect_CreateMDIWindowA_CreateMDIWindowW_CreateMenu_CreatePalmRejectionDelayZone_CreatePopupMenu_CreateSystemThreads_CreateWindowExA_CreateWindowExW_CreateWindowInBand_CreateWindowInBandEx_CreateWindowIndirect_CreateWindowStationA_CreateWindowStationW_CsrBroadcastSystemMessageExW_CtxInitUser32_DWMBindCursorToOutputConfig_DWMCommitInputSystemOutputConfig_DWMSetCursorOrientation_DWMSetInputSystemOutputConfig_DdeAbandonTransaction_DdeAccessData_DdeAddData_DdeClientTransaction_DdeCmpStringHandles_DdeConnect_DdeConnectList_DdeCreateDataHandle_DdeCreateStringHandleA_DdeCreateStringHandleW_DdeDisconnect_DdeDisconnectList_DdeEnableCallback_DdeFreeDataHandle_DdeFreeStringHandle_DdeGetData_DdeGetLastError_DdeGetQualityOfService_DdeImpersonateClient_DdeInitializeA_DdeInitializeW_DdeKeepStringHandle_DdeNameService_DdePostAdvise_DdeQueryConvInfo_DdeQueryNextServer_DdeQueryStringA_DdeQueryStringW_DdeReconnect_DdeSetQualityOfService_DdeSetUserHandle_DdeUnaccessData_DdeUninitialize_DefFrameProcA_DefFrameProcW_DefMDIChildProcA_DefMDIChildProcW_DefRawInputProc_DeferWindowPos_DeferWindowPosAndBand_DelegateInput_DeleteMenu_DeregisterShellHookWindow_DestroyAcceleratorTable_DestroyCaret_DestroyCursor_DestroyDCompositionHwndTarget_DestroyIcon_DestroyMenu_DestroyPalmRejectionDelayZone_DestroyReasons_DestroyWindow_DialogBoxIndirectParamA_DialogBoxIndirectParamAorW_DialogBoxIndirectParamW_DialogBoxParamA_DialogBoxParamW_DisableProcessWindowsGhosting_DispatchMessageA_DispatchMessageW_DisplayConfigGetDeviceInfo_DisplayConfigSetDeviceInfo_DisplayExitWindowsWarnings_DlgDirListA_DlgDirListComboBoxA_DlgDirListComboBoxW_DlgDirListW_DlgDirSelectComboBoxExA_DlgDirSelectComboBoxExW_DlgDirSelectExA_DlgDirSelectExW_DoSoundConnect_DoSoundDisconnect_DragDetect_DragObject_DrawAnimatedRects_DrawCaption_DrawCaptionTempA_DrawCaptionTempW_DrawEdge_DrawFocusRect_DrawFrame_DrawFrameControl_DrawIcon_DrawIconEx_DrawMenuBar_DrawMenuBarTemp_DrawStateA_DrawStateW_DrawTextA_DrawTextExA_DrawTextExW_DrawTextW_DwmGetDxRgn_DwmGetDxSharedSurface_DwmGetRemoteSessionOcclusionEvent_DwmGetRemoteSessionOcclusionState_DwmKernelShutdown_DwmKernelStartup_DwmLockScreenUpdates_DwmVal
lea eax, [ebp - 0x17]
mov byte [ebp - 0xc], 0
push eax
call esi
push eax
call fcn.10007c60
add esp, 8
test eax, eax
je 0x10007c59
push 0x10096390
push 0xe
call fcn.100083c0
add esp, 8
pop esi
mov esp, ebp
pop ebp
ret