Function at 0x10052670
Capabilities:
Access peb ldr_data
Encode data using xor

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x10080503
mov eax, dword fs:[0]
push eax
push ebx
sub esp, 0xf8
mov eax, dword [0x10098010]
xor eax, ebp
mov dword [ebp - 0x14], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edi, ecx
mov dword [ebp - 0xc0], edi
cmp dword [edi + 0xc], 0
je 0x100531a7
mov esi, dword [edi]
or eax, 0xffffffff
mov ecx, dword [edi + 4]
mov dword [ebp - 0xb0], esi
mov dword [ebp - 0xd4], ecx
cmp esi, ecx
je 0x100531a7
nop
inc eax
mov dword [ebp - 0xcc], eax
mov eax, dword [esi + 0x24]
test eax, eax
je 0x1005270c
cmp byte [esi + 0x28], 0
je 0x10053185
mov ecx, dword [edi + 0xc]
push eax
call fcn.1007a0d0
mov dword [esi + 0x24], 0
mov byte [esi + 0x28], 0
mov eax, dword fs:[0x2c]
mov ecx, dword [0x100e42e0]
mov ecx, dword [eax + ecx*4]
mov eax, dword [0x100f3850]
cmp eax, dword [ecx + 4]
jle 0x10052773
push 0x100f3850
call fcn.1007bfd7
add esp, 4
cmp dword [0x100f3850], 0xffffffff
jne 0x10052773
mov dword [ebp - 4], 0
lea ecx, [ebp - 0xa9]
mov byte [ebp - 0xa9], 0
call fcn.10078a90
push 0x100f3850
mov eax, dword [eax + 3]
mov dword [0x100f3864], eax
mov dword [ebp - 4], 0xffffffff
call fcn.1007bf8d
add esp, 4
call dword [0x100f3864]
mov ecx, dword [esi]
or ecx, dword [esi + 4]
mov dword [ebp - 0xa8], eax
mov dword [esi + 0x24], eax
jne 0x1005279b
mov ecx, edi
call fcn.10051e60
add eax, 1
mov dword [esi], eax
adc edx, 0
mov dword [esi + 4], edx
mov dword [ebp - 0x44], 0
mov dword [ebp - 0x34], 0
mov dword [ebp - 0x30], 0xf
mov byte [ebp - 0x44], 0
mov dword [ebp - 4], 1
mov dword [ebp - 0x2c], 0
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x18], 0xf
mov byte [ebp - 0x2c], 0
mov byte [ebp - 4], 2
mov eax, dword [0x100e9020]
mov ecx, dword [0x100e9024]
cmp eax, ecx
je 0x1005281c
mov edx, dword [esi + 8]
nop word [eax + eax]
cmp dword [eax], edx
je 0x100527fd
add eax, 0x1c
cmp eax, ecx
jne 0x100527f0
jmp 0x1005281c
add eax, 4
lea ecx, [ebp - 0x44]
cmp ecx, eax
je 0x1005281c
cmp dword [eax + 0x14], 0x10
mov ecx, dword [eax + 0x10]
jb 0x10052812
mov eax, dword [eax]
push ecx
push eax
lea ecx, [ebp - 0x44]
call fcn.100109d0
call fcn.100409c0
mov ecx, dword [eax]
mov eax, dword [eax + 4]
cmp ecx, eax
je 0x1005285c
mov edx, dword [esi + 0xc]
nop dword [eax]
cmp dword [ecx], edx
je 0x1005283d
add ecx, 0x1c
cmp ecx, eax
jne 0x10052830
jmp 0x1005285c
add ecx, 4
lea eax, [ebp - 0x2c]
cmp eax, ecx
je 0x1005285c
cmp dword [ecx + 0x14], 0x10
mov eax, dword [ecx + 0x10]
jb 0x10052852
mov ecx, dword [ecx]
push eax
push ecx
lea ecx, [ebp - 0x2c]
call fcn.100109d0
movaps xmm0, xmmword [str._CDQDILQ_vRLK]
mov edi, 0xc
mov dword [ebp - 0xa4], edi
movups xmmword [ebp - 0xa0], xmm0
lea eax, [edi + 1]
call fcn.1007cdb0
mov esi, esp
lea edi, [ebp - 0x9f]
xor edx, edx
mov dword [ebp - 0xb8], esi
sub edi, esi
lea ecx, [edx + esi]
mov esi, 0xc
sub esi, edx
mov dl, byte [ebp - 0xa0]
nop
mov al, byte [ecx + edi]
lea ecx, [ecx + 1]
xor al, dl
mov byte [ecx - 1], al
sub esi, 1
jne 0x100528a0
mov eax, dword [ebp - 0xb8]
mov edi, 0xc
mov dword [ebp - 0x8c], esi
mov dword [ebp - 0x7c], esi
mov dword [ebp - 0x78], 0xf
mov byte [eax + edi], 0
mov eax, dword [ebp - 0x34]
mov byte [ebp - 0x8c], 0
cmp eax, 1
jb 0x100531cd
dec eax
or ecx, 0xffffffff
cmp eax, 0xffffffff
cmovb ecx, eax
cmp dword [ebp - 0x30], 0x10
lea eax, [ebp - 0x44]
cmovae eax, dword [ebp - 0x44]
push ecx
inc eax
lea ecx, [ebp - 0x8c]
push eax
call fcn.100109d0
mov byte [ebp - 4], 3
mov esi, dword [ebp - 0x34]
lea eax, [esi + 2]
call fcn.1007cdb0
mov ecx, dword [ebp - 0x44]
mov edi, esp
xor edx, edx
mov dword [ebp - 0xbc], edi
mov dword [ebp - 0xc8], ecx
test esi, esi
je 0x10052958
jmp 0x10052936
mov ecx, dword [ebp - 0xc8]
cmp dword [ebp - 0x30], 0x10
lea eax, [ebp - 0x44]
cmovae eax, ecx
lea ecx, [ebp - 0x44]
cmovae ecx, dword [ebp - 0xc8]
mov al, byte [eax + edx + 1]
xor al, byte [ecx]
mov byte [edx + edi], al
inc edx
cmp edx, esi
jb 0x10052930
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x74], 0
mov byte [esi + edi - 2], 0
mov dword [ebp - 0x64], 0
mov dword [ebp - 0x60], 0xf
mov byte [ebp - 0x74], 0
cmp eax, 1
jb 0x100531cd
dec eax
or ecx, 0xffffffff
cmp eax, 0xffffffff
cmovb ecx, eax
cmp dword [ebp - 0x18], 0x10
lea eax, [ebp - 0x2c]
cmovae eax, dword [ebp - 0x2c]
push ecx
inc eax
lea ecx, [ebp - 0x74]
push eax
call fcn.100109d0
mov byte [ebp - 4], 4
mov esi, dword [ebp - 0x1c]
lea eax, [esi + 2]
call fcn.1007cdb0
mov ecx, dword [ebp - 0x2c]
mov eax, esp
xor edx, edx
mov dword [ebp - 0xb4], eax
mov dword [ebp - 0xc4], ecx
test esi, esi
je 0x10052a02
mov edi, esp
nop word [eax + eax]
cmp dword [ebp - 0x18], 0x10
lea eax, [ebp - 0x2c]
lea ecx, [ebp - 0x2c]
cmovae eax, dword [ebp - 0xc4]
cmovae ecx, dword [ebp - 0xc4]
mov al, byte [eax]
xor al, byte [ecx + edx + 1]
mov byte [edx + edi], al
inc edx
cmp edx, esi
jb 0x100529d0
mov edi, dword [ebp - 0xbc]
mov eax, dword [ebp - 0xb4]
mov ecx, edi
mov dword [ebp - 0xec], 0
mov byte [esi + eax - 2], 0
mov dword [ebp - 0xdc], 0
mov dword [ebp - 0xd8], 0xf
mov byte [ebp - 0xec], 0
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10052a31
sub ecx, edx
push ecx
push edi
lea ecx, [ebp - 0xec]
call fcn.100109d0
push 3
push 0x1008d310
lea ecx, [ebp - 0xec]
mov byte [ebp - 4], 5
call fcn.10010c50
mov esi, eax
mov eax, dword [ebp - 0xb4]
mov edx, eax
lea edi, [edx + 1]
nop word [eax + eax]
mov cl, byte [edx]
inc edx
test cl, cl
jne 0x10052a70
sub edx, edi
mov ecx, esi
push edx
push eax
call fcn.10010c50
push 2
push 0x1008d30c
mov ecx, eax
call fcn.10010c50
push eax
lea ecx, [ebp - 0x5c]
call fcn.1000f4e0
mov byte [ebp - 4], 7
mov edx, dword [ebp - 0xd8]
cmp edx, 0x10
jb 0x10052ad7
mov ecx, dword [ebp - 0xec]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x10052acd
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100531a1
push edx
push ecx
call fcn.1007be73
add esp, 8
mov dword [ebp - 0xdc], 0
mov dword [ebp - 0xd8], 0xf
mov byte [ebp - 0xec], 0
mov byte [ebp - 4], 8
call dword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
cdq
mov ecx, 0x7f
idiv ecx
lea ecx, [ebp - 0x104]
mov dword [ebp - 0x104], 0
mov al, dl
mov dword [ebp - 0xf4], 0
push eax
mov dword [ebp - 0xf0], 0xf
mov dword [ebp - 0xbc], eax
call fcn.10010880
mov eax, dword [ebp - 0x4c]
xor esi, esi
add eax, 1
je 0x10052b74
cmp dword [ebp - 0x48], 0x10
lea eax, [ebp - 0x5c]
lea ecx, [ebp - 0x104]
cmovae eax, dword [ebp - 0x5c]
mov al, byte [eax + esi]
xor al, byte [ebp - 0xbc]
mov byte [ebp - 0xd0], al
push dword [ebp - 0xd0]
call fcn.10010880
mov eax, dword [ebp - 0x4c]
inc esi
inc eax
cmp esi, eax
jb 0x10052b40
mov eax, dword [ebp - 0xcc]
mov edi, dword [ebp - 0xc0]
mov byte [ebp - 4], 7
lea ecx, [eax + eax*2]
mov eax, dword [edi + 0x10]
lea esi, [eax + ecx*8]
lea eax, [ebp - 0x104]
cmp esi, eax
je 0x10052be3
mov ecx, dword [esi + 0x14]
cmp ecx, 0x10
jb 0x10052bca
mov eax, dword [esi]
inc ecx
cmp ecx, 0x1000
jb 0x10052bc0
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100531a1
mov eax, edx
push ecx
push eax
call fcn.1007be73
add esp, 8
movups xmm0, xmmword [ebp - 0x104]
movups xmmword [esi], xmm0
movq xmm0, qword [ebp - 0xf4]
movq qword [esi + 0x10], xmm0
jmp 0x10052c1d
mov edx, dword [ebp - 0xf0]
cmp edx, 0x10
jb 0x10052c1d
mov ecx, dword [ebp - 0x104]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x10052c13
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100531a1
push edx
push ecx
call fcn.1007be73
add esp, 8
mov eax, dword [edi + 0xc]
mov edi, dword [ebp - 0xa8]
mov ecx, dword [ebp - 0xb0]
mov esi, dword fs:[0x2c]
mov eax, dword [eax + 8]
mov dword [edi + 0x1c], eax
movzx eax, word [ecx + 8]
mov word [edi + 0x24], ax
mov eax, dword [ecx]
mov ecx, dword [ecx + 4]
mov dword [edi + 8], eax
mov eax, dword [0x100e42e0]
mov dword [edi + 0xc], ecx
mov dword [edi + 0x20], 1
mov byte [edi + 0x30], 0
mov esi, dword [esi + eax*4]
mov dword [edi + 0x10], 0
mov dword [edi + 0x14], 0
mov eax, dword [0x100f3884]
cmp eax, dword [esi + 4]
jle 0x10052caf
push 0x100f3884
call fcn.1007bfd7
add esp, 4
cmp dword [0x100f3884], 0xffffffff
jne 0x10052caf
mov byte [ebp - 4], 9
call fcn.10079200
push 0x100f3884
mov dword [0x100f3888], eax
mov byte [ebp - 4], 7
call fcn.1007bf8d
add esp, 4
mov eax, dword [0x100f3878]
cmp eax, dword [esi + 4]
jle 0x10052cf2
push 0x100f3878
call fcn.1007bfd7
add esp, 4
cmp dword [0x100f3878], 0xffffffff
jne 0x10052cf2
mov ecx, dword [0x100f3888]
push 0x100f3878
mov eax, dword [ecx + 1]
add ecx, 5
add eax, ecx
mov dword [0x100f386c], eax
call fcn.1007bf8d
add esp, 4
push dword [ebp - 0xb8]
mov ecx, edi
call dword [0x100f386c]
mov esi, dword [ebp - 0xb0]
mov eax, dword [esi + 0x18]
test eax, eax
js 0x10052d34
push eax
push 0x50
mov ecx, edi
call fcn.10079390
push 0
push 0x51
mov ecx, edi
call fcn.10079390
movzx eax, word [edi + 0x26]
and eax, 0xfe1f
xor eax, 0x120
mov word [edi + 0x26], ax
movd xmm2, dword [esi + 0xc]
mov ecx, edi
cvtdq2ps xmm2, xmm2
push 6
call fcn.10079670
movd xmm2, dword [esi + 0x10]
mov ecx, edi
cvtdq2ps xmm2, xmm2
push 7
call fcn.10079670
movss xmm2, dword [esi + 0x14]
mov ecx, edi
push 8
call fcn.10079670
mov cx, word [edi + 0x26]
mov eax, 0xffe0
and cx, ax
xor cx, 8
mov word [edi + 0x26], cx
mov eax, dword [esi + 8]
cmp eax, 0x2a
je 0x10052ddc
cmp eax, 0x3b
je 0x10052ddc
cmp eax, 0x1f4
je 0x10052ddc
cmp eax, 0x203
je 0x10052ddc
cmp eax, 0x200
je 0x10052ddc
cmp eax, 0x1f9
je 0x10052ddc
cmp eax, 0x1fc
je 0x10052ddc
cmp eax, 0x1fa
je 0x10052ddc
cmp eax, 0x204
je 0x10052ddc
cmp eax, 0x1fb
je 0x10052ddc
cmp eax, 0x202
je 0x10052ddc
cmp eax, 0x1fd
je 0x10052ddc
movzx eax, cx
and eax, 0x87ff
xor eax, 0x3000
mov word [edi + 0x26], ax
mov eax, dword [esi + 8]
cmp eax, 0x2a
je 0x10052e35
cmp eax, 0x3b
je 0x10052e35
cmp eax, 0x1f4
je 0x10052e35
cmp eax, 0x203
je 0x10052e35
cmp eax, 0x200
je 0x10052e35
cmp eax, 0x1f9
je 0x10052e35
cmp eax, 0x1fc
je 0x10052e35
cmp eax, 0x1fa
je 0x10052e35
cmp eax, 0x204
je 0x10052e35
cmp eax, 0x1fb
je 0x10052e35
cmp eax, 0x202
je 0x10052e35
cmp eax, 0x1fd
je 0x10052e35
movzx eax, word [edi + 0x26]
jmp 0x10052e44
movzx eax, word [edi + 0x26]
and eax, 0xfe1f
xor eax, 0x60
movzx eax, ax
and eax, 0xf9ff
add esi, 0x1c
xor eax, 0x200
mov word [edi + 0x26], ax
mov eax, dword [ebp - 0xb0]
add eax, 0x24
mov dword [ebp - 0xbc], eax
cmp esi, eax
je 0x10052ed9
mov edi, dword [esi]
test edi, edi
je 0x10052ed2
mov eax, dword [0x100e42e0]
mov ecx, dword fs:[0x2c]
mov ecx, dword [ecx + eax*4]
mov eax, dword [0x100f3870]
cmp eax, dword [ecx + 4]
jle 0x10052ebf
push 0x100f3870
call fcn.1007bfd7
add esp, 4
cmp dword [0x100f3870], 0xffffffff
jne 0x10052ebf
mov byte [ebp - 4], 0xa
call fcn.10079000
push 0x100f3870
mov dword [0x100f3880], eax
mov byte [ebp - 4], 7
call fcn.1007bf8d
add esp, 4
mov ecx, dword [ebp - 0xa8]
push edi
call dword [0x100f3880]
mov eax, dword [ebp - 0xbc]
add esi, 4
cmp esi, eax
jne 0x10052e68
mov eax, dword [0x100e42e0]
mov ecx, dword fs:[0x2c]
mov edi, dword [ebp - 0xc0]
mov esi, dword [ecx + eax*4]
mov eax, dword [0x100f38c0]
mov edi, dword [edi + 0xc]
cmp eax, dword [esi + 4]
jle 0x10052f33
push 0x100f38c0
call fcn.1007bfd7
add esp, 4
cmp dword [0x100f38c0], 0xffffffff
jne 0x10052f33
mov byte [ebp - 4], 0xb
call fcn.1007a7f0
push 0x100f38c0
mov dword [0x100f38a0], eax
mov byte [ebp - 4], 7
call fcn.1007bf8d
add esp, 4
mov ecx, edi
call fcn.1007a1f0
push dword [ebp - 0xa8]
mov ecx, dword [eax]
mov edx, dword [ecx + 4]
mov ecx, eax
call edx
push 1
push 0
push 1
push dword [ebp - 0xa8]
mov ecx, edi
call dword [0x100f38a0]
test eax, eax
je 0x10053047
mov ecx, dword [ebp - 0xa8]
mov eax, dword [ecx + 8]
mov dword [ebp - 0xa8], eax
mov eax, dword [ecx + 0xc]
mov dword [ebp - 0xb4], eax
mov eax, dword [0x100f38ac]
cmp eax, dword [esi + 4]
jle 0x10052fbf
push 0x100f38ac
call fcn.1007bfd7
add esp, 4
cmp dword [0x100f38ac], 0xffffffff
jne 0x10052fbf
mov byte [ebp - 4], 0xc
call fcn.1007a660
push 0x100f38ac
mov dword [0x100f38a8], eax
mov byte [ebp - 4], 7
call fcn.1007bf8d
add esp, 4
push dword [ebp - 0xb4]
mov ecx, edi
push dword [ebp - 0xa8]
call dword [0x100f38a8]
test eax, eax
je 0x10052fe0
cmp byte [eax + 0x204], 0
jne 0x10053040
mov eax, dword [0x100f38b4]
mov edi, dword [0x100e89ac]
cmp eax, dword [esi + 4]
jle 0x10053028
push 0x100f38b4
call fcn.1007bfd7
add esp, 4
cmp dword [0x100f38b4], 0xffffffff
jne 0x10053028
mov byte [ebp - 4], 0xd
call fcn.1007a9e0
push 0x100f38b4
mov dword [0x100f38a4], eax
mov byte [ebp - 4], 7
call fcn.1007bf8d
add esp, 4
push dword [ebp - 0xb4]
mov ecx, edi
push dword [ebp - 0xa8]
call dword [0x100f38a4]
test eax, eax
je 0x10053047
mov byte [eax + 0xa1], 1
mov byte [ebp - 4], 4
mov edx, dword [ebp - 0x48]
cmp edx, 0x10
jb 0x1005307f
mov ecx, dword [ebp - 0x5c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x10053075
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100531a1
push edx
push ecx
call fcn.1007be73
add esp, 8
mov byte [ebp - 4], 3
mov edx, dword [ebp - 0x60]
mov dword [ebp - 0x4c], 0
mov dword [ebp - 0x48], 0xf
mov byte [ebp - 0x5c], 0
cmp edx, 0x10
jb 0x100530c9
mov ecx, dword [ebp - 0x74]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x100530bf
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100531a1
push edx
push ecx
call fcn.1007be73
add esp, 8
mov byte [ebp - 4], 2
mov edx, dword [ebp - 0x78]
cmp edx, 0x10
jb 0x10053104
mov ecx, dword [ebp - 0x8c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x100530fa
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100531a1
push edx
push ecx
call fcn.1007be73
add esp, 8
mov byte [ebp - 4], 1
mov eax, dword [ebp - 0x18]
cmp eax, 0x10
jb 0x1005313d
mov edx, dword [ebp - 0xc4]
lea ecx, [eax + 1]
mov eax, edx
cmp ecx, 0x1000
jb 0x10053133
mov edx, dword [edx - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100531a1
push ecx
push edx
call fcn.1007be73
add esp, 8
mov dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0x30]
cmp eax, 0x10
jb 0x10053179
mov edx, dword [ebp - 0xc8]
lea ecx, [eax + 1]
mov eax, edx
cmp ecx, 0x1000
jb 0x1005316f
mov edx, dword [edx - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100531a1
push ecx
push edx
call fcn.1007be73
add esp, 8
mov edi, dword [ebp - 0xc0]
mov esi, dword [ebp - 0xb0]
add esi, 0x30
mov dword [ebp - 0xb0], esi
cmp esi, dword [ebp - 0xd4]
je 0x100531a7
mov eax, dword [ebp - 0xcc]
jmp 0x100526e0
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
lea esp, [ebp - 0x114]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.1007ba06
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret 4
call fcn.100122c0
int3