Function at 0x10005d01
Capabilities:
Access peb ldr_data
Encode data using xor

Disassembly:
push ebp
push ebx
push edi
push esi
sub esp, 0x28
mov eax, dword [0x10044b54]
xor eax, esp
mov dword [esp + 0x24], eax
cmp dword [0x10045980], 0
jne 0x10005f18
mov eax, dword [esp + 0x3c]
mov dword [0x10045980], eax
mov eax, dword fs:[0x18]
mov eax, dword [eax + 0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0x14]
mov eax, dword [eax]
mov eax, dword [eax + 0x10]
mov dword [esp], eax
movaps xmm0, xmmword [0x100350d0]
lea esi, [esp + 0x10]
movups xmmword [esi], xmm0
mov dword [esi + 0x10], 0x55409b4f
xor edi, edi
mov ecx, esi
push dword [esp + 0x10]
push dword [esp + edi*4 + 0x20]
call fcn.10006370
mov dword [esp + edi*4 + 0x1c], eax
inc edi
cmp edi, dword [esp + 0x14]
jb 0x10005d57
lea esi, [esp + 0x10]
mov eax, dword [esi + 8]
mov eax, dword [esp + eax*4 + 0x1c]
mov ecx, dword [esp]
mov edi, dword [eax + ecx]
movaps xmm0, xmmword [0x100350e0]
movups xmmword [esi], xmm0
mov dword [esi + 0x10], 0x65310fcb
xor ebx, ebx
mov ecx, esi
push dword [esp + 0x10]
push dword [esp + ebx*4 + 0x20]
call fcn.10006370
mov dword [esp + ebx*4 + 0x1c], eax
inc ebx
cmp ebx, dword [esp + 0x14]
jb 0x10005d95
add edi, dword [esp]
lea esi, [esp + 0x10]
mov eax, dword [esi + 8]
mov eax, dword [esp + eax*4 + 0x1c]
mov ebp, dword [eax + edi]
movaps xmm0, xmmword [0x100350f0]
movups xmmword [esi], xmm0
mov dword [esi + 0x10], 0x75218447
xor edi, edi
mov ecx, esi
push dword [esp + 0x10]
push dword [esp + edi*4 + 0x20]
call fcn.10006370
mov dword [esp + edi*4 + 0x1c], eax
inc edi
cmp edi, dword [esp + 0x14]
jb 0x10005dd3
add ebp, dword [esp]
lea esi, [esp + 0x10]
mov eax, dword [esi + 8]
mov eax, dword [esp + eax*4 + 0x1c]
mov eax, dword [eax + ebp]
mov dword [esp + 8], eax
movaps xmm0, xmmword [0x10035100]
movups xmmword [esi], xmm0
mov dword [esi + 0x10], 0x4511f8c2
xor edi, edi
mov ecx, esi
push dword [esp + 0x10]
push dword [esp + edi*4 + 0x20]
call fcn.10006370
mov dword [esp + edi*4 + 0x1c], eax
inc edi
cmp edi, dword [esp + 0x14]
jb 0x10005e15
lea esi, [esp + 0x10]
mov eax, dword [esi + 8]
mov eax, dword [esp + eax*4 + 0x1c]
mov eax, dword [eax + ebp]
mov dword [esp + 4], eax
movaps xmm0, xmmword [0x10035110]
movups xmmword [esi], xmm0
mov dword [esi + 0x10], 0x55026d3e
xor edi, edi
mov ecx, esi
push dword [esp + 0x10]
push dword [esp + edi*4 + 0x20]
call fcn.10006370
mov dword [esp + edi*4 + 0x1c], eax
inc edi
cmp edi, dword [esp + 0x14]
jb 0x10005e54
mov ecx, dword [esp]
add dword [esp + 8], ecx
add dword [esp + 4], ecx
lea esi, [esp + 0x10]
mov eax, dword [esi + 8]
mov eax, dword [esp + eax*4 + 0x1c]
mov eax, dword [eax + ebp]
add eax, ecx
mov dword [esp + 0xc], eax
xor ebp, ebp
movaps xmm0, xmmword [0x10035120]
movups xmmword [esp + 0x10], xmm0
mov dword [esp + 0x20], 0x64f2e1ba
xor edi, edi
mov ecx, esi
push dword [esp + 0x10]
push dword [esp + edi*4 + 0x20]
call fcn.10006370
mov dword [esp + edi*4 + 0x1c], eax
inc edi
cmp edi, dword [esp + 0x14]
jb 0x10005ea5
mov eax, dword [esp + 8]
mov edi, dword [eax + ebp*4]
add edi, dword [esp]
push edi
call fcn.10020240
add esp, 4
cmp eax, 0xffffffff
je 0x10005ef5
inc eax
mov ecx, 0x1d
xor edx, edx
movsx ebx, byte [edi + edx]
xor ebx, ecx
lea ecx, [ebx + ebx*4]
inc edx
cmp eax, edx
jne 0x10005edf
cmp ecx, 0xec10575
je 0x10005ef8
inc ebp
jmp 0x10005e8f
mov eax, dword [esp + 0xc]
movzx eax, word [eax + ebp*2]
mov ecx, dword [esp]
mov edx, dword [esp + 4]
add ecx, dword [edx + eax*4]
push 0x100048bb
push 1
call ecx
mov dword [0x10045984], eax
mov ecx, dword [esp + 0x24]
xor ecx, esp
call fcn.10014947
mov al, 1
add esp, 0x28
pop esi
pop edi
pop ebx
pop ebp
ret 0xc