Function at 0x43916b
Capabilities:
Access peb ldr_data
Encode data using xor
Hash data using fnv
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x11c
mov eax, dword [0x4e2040]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push esi
push edi
push 0xf4
xor esi, esi
lea eax, [ebp - 0x100]
push esi
push eax
call fcn.004b21c0
mov edx, dword [0x4e6d7c]
add esp, 0xc
test edx, edx
jne 0x4393a8
mov eax, dword fs:[0x30]
mov ebx, esi
mov dword [ebp - 0x10c], ebx
mov dword [ebp - 0x108], 0xec2ca235
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
mov ecx, dword [eax + 0x2c]
mov esi, dword [eax + 0x30]
add ecx, 0xfffffff8
test ebx, ebx
je 0x439214
movzx ecx, cx
mov edx, 0x601f53e6
shr ecx, 1
lea edi, [esi + ecx*2]
jmp 0x439208
movsx ecx, byte [esi]
xor ecx, edx
imul edx, ecx, 0x1000193
mov ecx, edx
shr ecx, 0x10
xor ecx, edx
imul edx, ecx, 0x1000193
mov ecx, edx
shr ecx, 0x10
xor ecx, edx
imul edx, ecx, 0x1000193
add esi, 2
cmp esi, edi
jne 0x4391e0
cmp edx, ebx
jne 0x4392d1
mov esi, dword [eax + 0x18]
mov ecx, dword [esi + 0x3c]
mov edi, dword [ecx + esi + 0x78]
mov ecx, dword [ecx + esi + 0x7c]
add edi, esi
mov dword [ebp - 0x114], ecx
mov dword [ebp - 0x11c], edi
cmp edi, esi
je 0x4392d1
mov ebx, dword [edi + 0x18]
test ebx, ebx
je 0x4392cb
mov ecx, dword [edi + 0x20]
lea ecx, [ecx + ebx*4]
add ecx, esi
sub ecx, 4
mov dword [ebp - 0x104], 0x601f53e6
mov dword [ebp - 0x110], ecx
dec ebx
mov ecx, dword [ecx]
add ecx, esi
mov dl, byte [ecx]
inc ecx
mov dword [ebp - 0x118], ecx
test dl, dl
je 0x4392b3
mov edi, dword [ebp - 0x104]
mov esi, ecx
movsx ecx, dl
xor ecx, edi
imul edx, ecx, 0x1000193
mov ecx, edx
shr ecx, 0x10
xor ecx, edx
imul edx, ecx, 0x1000193
mov ecx, edx
shr ecx, 0x10
xor ecx, edx
mov dl, byte [esi]
imul edi, ecx, 0x1000193
inc esi
test dl, dl
jne 0x439278
mov esi, dword [eax + 0x18]
mov dword [ebp - 0x104], edi
mov edi, dword [ebp - 0x11c]
mov ecx, dword [ebp - 0x104]
cmp ecx, dword [ebp - 0x108]
je 0x4392d8
mov ecx, dword [ebp - 0x110]
test ebx, ebx
jne 0x43924b
mov ebx, dword [ebp - 0x10c]
mov eax, dword [eax]
jmp 0x4391c4
mov eax, dword [edi + 0x24]
lea eax, [eax + ebx*2]
movzx ecx, word [eax + esi]
mov eax, dword [edi + 0x1c]
lea eax, [eax + ecx*4]
mov edx, dword [eax + esi]
add edx, esi
cmp edx, edi
jbe 0x4393a2
mov eax, dword [ebp - 0x114]
add eax, edi
cmp edx, eax
jae 0x4393a2
mov eax, 0x601f53e6
mov ecx, eax
mov dword [ebp - 0x10c], eax
mov ebx, eax
mov dword [ebp - 0x108], ecx
mov al, byte [edx]
cmp al, 0x2e
je 0x439358
movsx eax, al
xor eax, ebx
imul ecx, eax, 0x1000193
mov eax, ecx
shr eax, 0x10
xor eax, ecx
imul ecx, eax, 0x1000193
mov eax, ecx
shr eax, 0x10
xor eax, ecx
imul ebx, eax, 0x1000193
inc edx
mov al, byte [edx]
cmp al, 0x2e
jne 0x439320
mov ecx, dword [ebp - 0x108]
mov dword [ebp - 0x10c], ebx
inc edx
mov al, byte [edx]
test al, al
je 0x439391
movsx eax, al
xor eax, ecx
imul ecx, eax, 0x1000193
mov eax, ecx
shr eax, 0x10
xor eax, ecx
imul ecx, eax, 0x1000193
mov eax, ecx
shr eax, 0x10
xor eax, ecx
imul ecx, eax, 0x1000193
inc edx
mov al, byte [edx]
test al, al
jne 0x43935f
mov dword [ebp - 0x108], ecx
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
jmp 0x4392d1
mov dword [0x4e6d7c], edx
push 0x4e75d0
call edx
test eax, eax
jne 0x4394b8
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
mov esi, dword [eax + 0x18]
mov ecx, dword [esi + 0x3c]
mov ecx, dword [ecx + esi + 0x78]
add ecx, esi
mov dword [ebp - 0x110], ecx
cmp ecx, esi
je 0x43945d
mov edi, dword [ecx + 0x18]
test edi, edi
je 0x43945d
mov ecx, dword [ecx + 0x20]
lea ecx, [ecx + edi*4]
add ecx, esi
sub ecx, 4
mov edx, 0x817cea0b
dec edi
mov dword [ebp - 0x104], edx
mov dword [ebp - 0x114], ecx
mov ebx, dword [ecx]
add ebx, esi
mov dl, byte [ebx]
inc ebx
test dl, dl
je 0x439459
mov esi, dword [ebp - 0x104]
movsx ecx, dl
xor ecx, esi
imul edx, ecx, 0x1000193
mov ecx, edx
shr ecx, 0x10
xor ecx, edx
imul edx, ecx, 0x1000193
mov ecx, edx
shr ecx, 0x10
xor ecx, edx
mov dl, byte [ebx]
imul esi, ecx, 0x1000193
inc ebx
test dl, dl
jne 0x439412
mov dword [ebp - 0x104], esi
cmp dword [ebp - 0x104], 0xb8465e6
mov esi, dword [eax + 0x18]
je 0x439464
mov ecx, dword [ebp - 0x114]
test edi, edi
jne 0x4393ec
mov eax, dword [eax]
jmp 0x4393c3
mov edx, dword [ebp - 0x110]
mov eax, dword [edx + 0x24]
lea eax, [eax + edi*2]
movzx ecx, word [eax + esi]
mov eax, dword [edx + 0x1c]
lea eax, [eax + ecx*4]
mov eax, dword [eax + esi]
lea ecx, [ebp - 0x100]
add eax, esi
push ecx
call eax
cmp eax, 1
jne 0x4394b8
xor ebx, ebx
movzx ecx, word [ebp + ebx - 0xfa]
mov eax, ecx
lea edx, [eax - 0x61]
add eax, 0xffffffe0
cmp dx, 0x19
movzx esi, ax
cmova esi, ecx
mov word [ebx + 0x4e75d0], si
add ebx, 2
cmp ebx, 0x48
jb 0x43948f
mov ecx, dword [ebp - 4]
mov eax, 0x4e75d0
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.004b0ce6
leave
ret