Function at 0x10007b00
Capabilities:
Encode data using xor
Get common file path

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1002057b
mov eax, dword fs:[0]
push eax
sub esp, 0x158
mov eax, dword [0x10031004]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov eax, ecx
mov dword [ebp - 0x150], eax
mov dword [ebp - 0x148], eax
mov dword [ebp - 0x148], eax
lea eax, [ebp - 0x114]
push 0x104
push eax
call dword [sym.imp.KERNEL32.dll_GetSystemDirectoryA]
test eax, eax
je 0x10007bba
cmp eax, 0x104
ja 0x10007bba
lea ecx, [ebp - 0x114]
mov dword [ebp - 0x12c], 0
mov dword [ebp - 0x11c], 0
lea edx, [ecx + 1]
mov dword [ebp - 0x118], 0xf
mov byte [ebp - 0x12c], 0
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10007b90
sub ecx, edx
lea eax, [ebp - 0x114]
push ecx
push eax
lea ecx, [ebp - 0x12c]
call fcn.10004550
mov edx, dword [ebp - 0x118]
mov ebx, dword [ebp - 0x11c]
jmp 0x10007bdd
xor ebx, ebx
mov dword [ebp - 0x12c], 0
mov edx, 0xf
mov dword [ebp - 0x11c], ebx
mov dword [ebp - 0x118], edx
mov byte [ebp - 0x12c], bl
mov dword [ebp - 4], 0
mov eax, 0xe
movaps xmm0, xmmword [0x1002de80]
xor ecx, ecx
mov dword [ebp - 0x164], eax
movups xmmword [ebp - 0x160], xmm0
nop
lea eax, [ecx - 0x6f]
xor byte [ebp + ecx - 0x160], al
inc ecx
mov eax, dword [ebp - 0x164]
cmp ecx, eax
jb 0x10007c00
lea esi, [ebp - 0x160]
mov byte [ebp + eax - 0x160], 0
lea ecx, [esi + 1]
mov al, byte [esi]
inc esi
test al, al
jne 0x10007c26
mov eax, 0x7fffffff
sub esi, ecx
sub eax, ebx
cmp eax, esi
jb 0x10007e09
cmp edx, 0x10
mov dword [ebp - 0x144], 0
lea edx, [ebx + esi]
mov dword [ebp - 0x134], 0
lea eax, [ebp - 0x12c]
mov dword [ebp - 0x130], 0
cmovae eax, dword [ebp - 0x12c]
lea ebx, [ebp - 0x144]
mov edi, 0xf
mov dword [ebp - 0x148], eax
mov dword [ebp - 0x14c], edx
cmp edx, edi
jbe 0x10007d14
mov edi, edx
or edi, 0xf
cmp edi, 0x7fffffff
jbe 0x10007ca2
mov edi, 0x7fffffff
jmp 0x10007cac
mov eax, 0x16
cmp edi, eax
cmovb edi, eax
xor ecx, ecx
mov eax, edi
add eax, 1
setb cl
neg ecx
or ecx, eax
cmp ecx, 0x1000
jb 0x10007cef
lea eax, [ecx + 0x23]
cmp eax, ecx
jbe 0x10007e0e
push eax
call fcn.10008239
add esp, 4
test eax, eax
je 0x10007e13
mov edx, dword [ebp - 0x14c]
lea ebx, [eax + 0x23]
and ebx, 0xffffffe0
mov dword [ebx - 4], eax
jmp 0x10007d08
test ecx, ecx
je 0x10007d06
push ecx
call fcn.10008239
mov edx, dword [ebp - 0x14c]
add esp, 4
mov ebx, eax
jmp 0x10007d08
xor ebx, ebx
mov eax, dword [ebp - 0x148]
mov dword [ebp - 0x144], ebx
mov dword [ebp - 0x130], edi
mov edi, dword [ebp - 0x11c]
push edi
push eax
push ebx
mov dword [ebp - 0x134], edx
call fcn.1000ab40
push esi
lea ecx, [ebp - 0x160]
lea eax, [edi + ebx]
push ecx
push eax
call fcn.1000ab40
lea eax, [edi + esi]
add esp, 0x18
mov byte [ebx + eax], 0
mov esi, dword [ebp - 0x150]
lea edx, [ebp - 0x144]
mov ecx, esi
mov byte [ebp - 4], 1
call fcn.10004990
mov edx, dword [ebp - 0x130]
cmp edx, 0x10
jb 0x10007d9a
mov ecx, dword [ebp - 0x144]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x10007d90
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10007e13
push edx
push ecx
call fcn.10008269
add esp, 8
mov ecx, dword [ebp - 0x118]
mov dword [ebp - 0x134], 0
mov dword [ebp - 0x130], 0xf
mov byte [ebp - 0x144], 0
cmp ecx, 0x10
jb 0x10007deb
mov edx, dword [ebp - 0x12c]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x10007de1
mov edx, dword [edx - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10007e13
push ecx
push edx
call fcn.10008269
add esp, 8
mov eax, esi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.1000822b
mov esp, ebp
pop ebp
ret
call fcn.100043f0
call fcn.10004530
call fcn.1000f2f0
int3