Function at 0x1007fb90
Capabilities:
Access peb ldr_data
Encode data using xor
Hash data using fnv
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x480
mov eax, dword [0x101733b8]
xor eax, ebp
mov dword [ebp - 8], eax
push ebx
push esi
push edi
push 0x140
lea eax, [ebp - 0x464]
mov dword [ebp - 0x480], ecx
push 0
push eax
call fcn.1010e880
add esp, 0xc
cmp dword [ebp + 8], 0
je 0x1008019a
mov eax, dword [0x101e2e60]
test eax, eax
jne 0x1007fcb2
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
nop word [eax + eax]
mov ebx, dword [eax + 0x18]
mov dword [ebp - 0x474], ebx
mov ecx, dword [ebx + 0x3c]
mov ecx, dword [ecx + ebx + 0x78]
add ecx, ebx
mov dword [ebp - 0x470], ecx
cmp ecx, ebx
je 0x1007fc7f
mov edx, dword [ecx + 0x18]
test edx, edx
je 0x1007fc7f
mov ecx, dword [ecx + 0x20]
lea ecx, [ecx + edx*4]
add ecx, ebx
nop dword [eax + eax]
mov esi, dword [ecx - 4]
sub ecx, 4
add esi, ebx
mov dword [ebp - 0x468], ecx
dec edx
mov edi, 0x6c29aea
mov dword [ebp - 0x46c], edx
mov bl, byte [esi]
inc esi
test bl, bl
je 0x1007fc78
movsx edx, bl
lea esi, [esi + 1]
sub bl, 0x41
mov ecx, edx
or ecx, 0x20
cmp bl, 0x19
mov bl, byte [esi - 1]
cmova ecx, edx
xor ecx, edi
imul edi, ecx, 0x1000193
test bl, bl
jne 0x1007fc41
cmp edi, 0xc8c269e
je 0x1007fc86
mov edx, dword [ebp - 0x46c]
mov ecx, dword [ebp - 0x468]
mov ebx, dword [eax + 0x18]
test edx, edx
jne 0x1007fc20
mov eax, dword [eax]
jmp 0x1007fbf0
mov esi, dword [ebp - 0x470]
mov ecx, dword [ebp - 0x46c]
mov edx, dword [ebp - 0x474]
mov eax, dword [esi + 0x24]
lea eax, [eax + ecx*2]
movzx ecx, word [eax + edx]
mov eax, dword [esi + 0x1c]
lea eax, [eax + ecx*4]
mov eax, dword [eax + edx]
add eax, edx
mov dword [0x101e2e60], eax
lea ecx, [ebp - 0x47c]
push ecx
lea ecx, [ebp - 0x324]
push ecx
push 0x104
push dword [ebp - 0x480]
call eax
test eax, eax
je 0x10080576
mov esi, dword [ebp - 0x47c]
lea edx, [ebp - 0x21c]
mov ecx, esi
sub edx, esi
mov al, byte [ecx]
lea ecx, [ecx + 1]
mov byte [edx + ecx - 1], al
test al, al
jne 0x1007fce5
mov dword [esi], 0x2a2e2a
mov eax, dword [0x101e2e7c]
mov dword [ebp - 0x464], 0x10
test eax, eax
jne 0x1007fde2
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
nop dword [eax + eax]
mov ebx, dword [eax + 0x18]
mov dword [ebp - 0x468], ebx
mov ecx, dword [ebx + 0x3c]
mov ecx, dword [ecx + ebx + 0x78]
add ecx, ebx
mov dword [ebp - 0x470], ecx
cmp ecx, ebx
je 0x1007fdaf
mov edx, dword [ecx + 0x18]
test edx, edx
je 0x1007fdaf
mov ecx, dword [ecx + 0x20]
lea ecx, [ecx + edx*4]
add ecx, ebx
nop dword [eax + eax]
mov esi, dword [ecx - 4]
sub ecx, 4
add esi, ebx
mov dword [ebp - 0x474], ecx
dec edx
mov edi, 0x91d6313
mov dword [ebp - 0x46c], edx
mov bl, byte [esi]
inc esi
test bl, bl
je 0x1007fda8
movsx edx, bl
lea esi, [esi + 1]
sub bl, 0x41
mov ecx, edx
or ecx, 0x20
cmp bl, 0x19
mov bl, byte [esi - 1]
cmova ecx, edx
xor ecx, edi
imul edi, ecx, 0x1000193
test bl, bl
jne 0x1007fd71
cmp edi, 0x68eb7bdb
je 0x1007fdb6
mov edx, dword [ebp - 0x46c]
mov ecx, dword [ebp - 0x474]
mov ebx, dword [eax + 0x18]
test edx, edx
jne 0x1007fd50
mov eax, dword [eax]
jmp 0x1007fd20
mov esi, dword [ebp - 0x470]
mov ecx, dword [ebp - 0x46c]
mov edx, dword [ebp - 0x468]
mov eax, dword [esi + 0x24]
lea eax, [eax + ecx*2]
movzx ecx, word [eax + edx]
mov eax, dword [esi + 0x1c]
lea eax, [eax + ecx*4]
mov eax, dword [eax + edx]
add eax, edx
mov dword [0x101e2e7c], eax
lea ecx, [ebp - 0x464]
push ecx
lea ecx, [ebp - 0x324]
push ecx
call eax
mov dword [ebp - 0x468], eax
cmp eax, 0xffffffff
je 0x100800b9
push 1
lea eax, [ebp - 0x438]
push 0x1016a4f4
push eax
call fcn.1011ca60
add esp, 0xc
test eax, eax
je 0x1007ffbc
push 2
lea eax, [ebp - 0x438]
push 0x1016a638
push eax
call fcn.1011ca60
add esp, 0xc
test eax, eax
je 0x1007ffbc
test byte [ebp - 0x464], 0x10
je 0x1007ffbc
mov eax, dword [0x101e2d4c]
test eax, eax
jne 0x1007ff22
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
mov ebx, dword [eax + 0x18]
mov dword [ebp - 0x478], ebx
mov ecx, dword [ebx + 0x3c]
mov ecx, dword [ecx + ebx + 0x78]
add ecx, ebx
mov dword [ebp - 0x470], ecx
cmp ecx, ebx
je 0x1007feef
mov edx, dword [ecx + 0x18]
test edx, edx
je 0x1007feef
mov ecx, dword [ecx + 0x20]
lea ecx, [ecx + edx*4]
add ecx, ebx
nop
mov esi, dword [ecx - 4]
sub ecx, 4
add esi, ebx
mov dword [ebp - 0x474], ecx
dec edx
mov edi, 0xad6d07ee
mov dword [ebp - 0x46c], edx
mov bl, byte [esi]
inc esi
test bl, bl
je 0x1007fee8
movsx edx, bl
lea esi, [esi + 1]
sub bl, 0x41
mov ecx, edx
or ecx, 0x20
cmp bl, 0x19
mov bl, byte [esi - 1]
cmova ecx, edx
xor ecx, edi
imul edi, ecx, 0x1000193
test bl, bl
jne 0x1007feb1
cmp edi, 0x181f7fca
je 0x1007fef6
mov edx, dword [ebp - 0x46c]
mov ecx, dword [ebp - 0x474]
mov ebx, dword [eax + 0x18]
test edx, edx
jne 0x1007fe90
mov eax, dword [eax]
jmp 0x1007fe63
mov esi, dword [ebp - 0x470]
mov ecx, dword [ebp - 0x46c]
mov edx, dword [ebp - 0x478]
mov eax, dword [esi + 0x24]
lea eax, [eax + ecx*2]
movzx ecx, word [eax + edx]
mov eax, dword [esi + 0x1c]
lea eax, [eax + ecx*4]
mov eax, dword [eax + edx]
add eax, edx
mov dword [0x101e2d4c], eax
lea ecx, [ebp - 0x47c]
push ecx
lea ecx, [ebp - 0x114]
push ecx
push 0x104
push dword [ebp - 0x480]
call eax
test eax, eax
je 0x10080576
mov edx, dword [ebp - 0x47c]
lea ecx, [ebp - 0x438]
mov al, byte [ecx]
lea ecx, [ecx + 1]
mov byte [edx], al
lea edx, [edx + 1]
test al, al
jne 0x1007ff51
lea edi, [ebp - 0x114]
dec edi
mov al, byte [edi + 1]
lea edi, [edi + 1]
test al, al
jne 0x1007ff66
mov ax, word [0x1016a634]
lea edx, [ebp - 0x21c]
mov word [edi], ax
mov esi, edx
mov al, byte [edx]
inc edx
test al, al
jne 0x1007ff81
lea edi, [ebp - 0x114]
sub edx, esi
dec edi
mov al, byte [edi + 1]
inc edi
test al, al
jne 0x1007ff91
mov ecx, edx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
mov edx, fcn.100805e0
and ecx, 3
rep movsb byte es:[edi], byte [esi]
push 1
lea ecx, [ebp - 0x114]
call fcn.1007fb90
add esp, 4
mov eax, dword [0x101e2d34]
test eax, eax
jne 0x100800a2
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
nop word [eax + eax]
mov ebx, dword [eax + 0x18]
mov dword [ebp - 0x470], ebx
mov ecx, dword [ebx + 0x3c]
mov ecx, dword [ecx + ebx + 0x78]
add ecx, ebx
mov dword [ebp - 0x474], ecx
cmp ecx, ebx
je 0x1008006f
mov edx, dword [ecx + 0x18]
test edx, edx
je 0x1008006f
mov ecx, dword [ecx + 0x20]
lea ecx, [ecx + edx*4]
add ecx, ebx
nop dword [eax + eax]
mov esi, dword [ecx - 4]
sub ecx, 4
add esi, ebx
mov dword [ebp - 0x478], ecx
dec edx
mov edi, 0x17c18d0d
mov dword [ebp - 0x46c], edx
mov bl, byte [esi]
inc esi
test bl, bl
je 0x10080068
movsx edx, bl
lea esi, [esi + 1]
sub bl, 0x41
mov ecx, edx
or ecx, 0x20
cmp bl, 0x19
mov bl, byte [esi - 1]
cmova ecx, edx
xor ecx, edi
imul edi, ecx, 0x1000193
test bl, bl
jne 0x10080031
cmp edi, 0xf138550
je 0x10080076
mov edx, dword [ebp - 0x46c]
mov ecx, dword [ebp - 0x478]
mov ebx, dword [eax + 0x18]
test edx, edx
jne 0x10080010
mov eax, dword [eax]
jmp 0x1007ffe0
mov esi, dword [ebp - 0x474]
mov ecx, dword [ebp - 0x46c]
mov edx, dword [ebp - 0x470]
mov eax, dword [esi + 0x24]
lea eax, [eax + ecx*2]
movzx ecx, word [eax + edx]
mov eax, dword [esi + 0x1c]
lea eax, [eax + ecx*4]
mov eax, dword [eax + edx]
add eax, edx
mov dword [0x101e2d34], eax
lea ecx, [ebp - 0x464]
push ecx
push dword [ebp - 0x468]
call eax
test eax, eax
jne 0x1007fe01
mov eax, dword [0x101e2e78]
test eax, eax
jne 0x10080192
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
mov ebx, dword [eax + 0x18]
mov dword [ebp - 0x470], ebx
mov ecx, dword [ebx + 0x3c]
mov ecx, dword [ecx + ebx + 0x78]
add ecx, ebx
mov dword [ebp - 0x474], ecx
cmp ecx, ebx
je 0x1008015f
mov edx, dword [ecx + 0x18]
test edx, edx
je 0x1008015f
mov ecx, dword [ecx + 0x20]
lea ecx, [ecx + edx*4]
add ecx, ebx
nop dword [eax]
mov esi, dword [ecx - 4]
sub ecx, 4
add esi, ebx
mov dword [ebp - 0x478], ecx
dec edx
mov edi, 0x84918ca1
mov dword [ebp - 0x46c], edx
mov bl, byte [esi]
inc esi
test bl, bl
je 0x10080158
movsx edx, bl
lea esi, [esi + 1]
sub bl, 0x41
mov ecx, edx
or ecx, 0x20
cmp bl, 0x19
mov bl, byte [esi - 1]
cmova ecx, edx
xor ecx, edi
imul edi, ecx, 0x1000193
test bl, bl
jne 0x10080121
cmp edi, 0xb32d20fa
je 0x10080166
mov edx, dword [ebp - 0x46c]
mov ecx, dword [ebp - 0x478]
mov ebx, dword [eax + 0x18]
test edx, edx
jne 0x10080100
mov eax, dword [eax]
jmp 0x100800d2
mov esi, dword [ebp - 0x474]
mov ecx, dword [ebp - 0x46c]
mov edx, dword [ebp - 0x470]
mov eax, dword [esi + 0x24]
lea eax, [eax + ecx*2]
movzx ecx, word [eax + edx]
mov eax, dword [esi + 0x1c]
lea eax, [eax + ecx*4]
mov eax, dword [eax + edx]
add eax, edx
mov dword [0x101e2e78], eax
push dword [ebp - 0x468]
call eax
mov eax, dword [0x101e2c24]
test eax, eax
jne 0x10080272
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
mov ebx, dword [eax + 0x18]
mov dword [ebp - 0x470], ebx
mov ecx, dword [ebx + 0x3c]
mov ecx, dword [ecx + ebx + 0x78]
add ecx, ebx
mov dword [ebp - 0x474], ecx
cmp ecx, ebx
je 0x1008023f
mov edx, dword [ecx + 0x18]
test edx, edx
je 0x1008023f
mov ecx, dword [ecx + 0x20]
lea ecx, [ecx + edx*4]
add ecx, ebx
nop
mov esi, dword [ecx - 4]
sub ecx, 4
add esi, ebx
mov dword [ebp - 0x478], ecx
dec edx
mov edi, 0x623ab5cb
mov dword [ebp - 0x468], edx
mov bl, byte [esi]
inc esi
test bl, bl
je 0x10080238
movsx edx, bl
lea esi, [esi + 1]
sub bl, 0x41
mov ecx, edx
or ecx, 0x20
cmp bl, 0x19
mov bl, byte [esi - 1]
cmova ecx, edx
xor ecx, edi
imul edi, ecx, 0x1000193
test bl, bl
jne 0x10080201
cmp edi, 0x701986c3
je 0x10080246
mov edx, dword [ebp - 0x468]
mov ecx, dword [ebp - 0x478]
mov ebx, dword [eax + 0x18]
test edx, edx
jne 0x100801e0
mov eax, dword [eax]
jmp 0x100801b3
mov esi, dword [ebp - 0x474]
mov ecx, dword [ebp - 0x468]
mov edx, dword [ebp - 0x470]
mov eax, dword [esi + 0x24]
lea eax, [eax + ecx*2]
movzx ecx, word [eax + edx]
mov eax, dword [esi + 0x1c]
lea eax, [eax + ecx*4]
mov eax, dword [eax + edx]
add eax, edx
mov dword [0x101e2c24], eax
lea ecx, [ebp - 0x464]
push ecx
push dword [ebp - 0x480]
call eax
mov dword [ebp - 0x46c], eax
cmp eax, 0xffffffff
je 0x100805bd
test byte [ebp - 0x464], 0x10
jne 0x100803ce
mov eax, dword [0x101e2d48]
test eax, eax
jne 0x10080382
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
nop word [eax + eax]
mov ebx, dword [eax + 0x18]
mov dword [ebp - 0x470], ebx
mov ecx, dword [ebx + 0x3c]
mov ecx, dword [ecx + ebx + 0x78]
add ecx, ebx
mov dword [ebp - 0x474], ecx
cmp ecx, ebx
je 0x1008034f
mov edx, dword [ecx + 0x18]
test edx, edx
je 0x1008034f
mov ecx, dword [ecx + 0x20]
lea ecx, [ecx + edx*4]
add ecx, ebx
nop dword [eax + eax]
mov esi, dword [ecx - 4]
sub ecx, 4
add esi, ebx
mov dword [ebp - 0x478], ecx
dec edx
mov edi, 0x8fb0a4a0
mov dword [ebp - 0x468], edx
mov bl, byte [esi]
inc esi
test bl, bl
je 0x10080348
movsx edx, bl
lea esi, [esi + 1]
sub bl, 0x41
mov ecx, edx
or ecx, 0x20
cmp bl, 0x19
mov bl, byte [esi - 1]
cmova ecx, edx
xor ecx, edi
imul edi, ecx, 0x1000193
test bl, bl
jne 0x10080311
cmp edi, 0xbc9bb6a0
je 0x10080356
mov edx, dword [ebp - 0x468]
mov ecx, dword [ebp - 0x478]
mov ebx, dword [eax + 0x18]
test edx, edx
jne 0x100802f0
mov eax, dword [eax]
jmp 0x100802c0
mov esi, dword [ebp - 0x474]
mov ecx, dword [ebp - 0x468]
mov edx, dword [ebp - 0x470]
mov eax, dword [esi + 0x24]
lea eax, [eax + ecx*2]
movzx ecx, word [eax + edx]
mov eax, dword [esi + 0x1c]
lea eax, [eax + ecx*4]
mov eax, dword [eax + edx]
add eax, edx
mov dword [0x101e2d48], eax
lea ecx, [ebp - 0x47c]
push ecx
lea ecx, [ebp - 0x21c]
push ecx
push 0x104
push dword [ebp - 0x480]
call eax
test eax, eax
je 0x10080576
mov edx, dword [ebp - 0x47c]
lea ecx, [ebp - 0x438]
mov al, byte [ecx]
lea ecx, [ecx + 1]
mov byte [edx], al
lea edx, [edx + 1]
test al, al
jne 0x100803b1
lea eax, [ebp - 0x438]
push eax
call fcn.100805e0
add esp, 4
mov eax, dword [0x101e2e68]
test eax, eax
jne 0x100804b1
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
nop word [eax + eax]
mov ebx, dword [eax + 0x18]
mov dword [ebp - 0x470], ebx
mov ecx, dword [ebx + 0x3c]
mov ecx, dword [ecx + ebx + 0x78]
add ecx, ebx
mov dword [ebp - 0x474], ecx
cmp ecx, ebx
je 0x1008047e
mov edx, dword [ecx + 0x18]
test edx, edx
je 0x1008047e
mov ecx, dword [ecx + 0x20]
lea ecx, [ecx + edx*4]
add ecx, ebx
nop dword [eax + eax]
sub ecx, 4
dec edx
mov dword [ebp - 0x478], ecx
mov edi, 0x8ae65d40
mov dword [ebp - 0x468], edx
mov ecx, dword [ecx]
add ecx, ebx
mov bl, byte [ecx]
inc ecx
test bl, bl
je 0x10080471
movsx esi, bl
lea ecx, [ecx + 1]
sub bl, 0x41
mov edx, esi
or edx, 0x20
cmp bl, 0x19
mov bl, byte [ecx - 1]
cmova edx, esi
xor edx, edi
imul edi, edx, 0x1000193
test bl, bl
jne 0x10080440
cmp edi, 0xc8ebe3ef
je 0x10080485
mov edx, dword [ebp - 0x468]
mov ecx, dword [ebp - 0x478]
mov ebx, dword [eax + 0x18]
test edx, edx
jne 0x10080420
mov eax, dword [eax]
jmp 0x100803f0
mov esi, dword [ebp - 0x474]
mov ecx, dword [ebp - 0x468]
mov edx, dword [ebp - 0x470]
mov eax, dword [esi + 0x24]
lea eax, [eax + ecx*2]
movzx ecx, word [eax + edx]
mov eax, dword [esi + 0x1c]
lea eax, [eax + ecx*4]
mov eax, dword [eax + edx]
add eax, edx
mov dword [0x101e2e68], eax
lea ecx, [ebp - 0x464]
push ecx
push dword [ebp - 0x46c]
call eax
test eax, eax
jne 0x10080290
mov eax, dword [0x101e2c2c]
test eax, eax
jne 0x100805b5
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
mov ebx, dword [eax + 0x18]
mov dword [ebp - 0x470], ebx
mov ecx, dword [ebx + 0x3c]
mov ecx, dword [ecx + ebx + 0x78]
add ecx, ebx
mov dword [ebp - 0x474], ecx
cmp ecx, ebx
je 0x1008056f
mov edx, dword [ecx + 0x18]
test edx, edx
je 0x1008056f
mov ecx, dword [ecx + 0x20]
lea ecx, [ecx + edx*4]
add ecx, ebx
nop dword [eax]
mov esi, dword [ecx - 4]
sub ecx, 4
add esi, ebx
mov dword [ebp - 0x478], ecx
dec edx
mov edi, 0xa767effc
mov dword [ebp - 0x468], edx
mov bl, byte [esi]
inc esi
test bl, bl
je 0x10080568
movsx edx, bl
lea esi, [esi + 1]
sub bl, 0x41
mov ecx, edx
or ecx, 0x20
cmp bl, 0x19
mov bl, byte [esi - 1]
cmova ecx, edx
xor ecx, edi
imul edi, ecx, 0x1000193
test bl, bl
jne 0x10080531
cmp edi, 0x75865f35
je 0x10080589
mov edx, dword [ebp - 0x468]
mov ecx, dword [ebp - 0x478]
mov ebx, dword [eax + 0x18]
test edx, edx
jne 0x10080510
mov eax, dword [eax]
jmp 0x100804e1
xor eax, eax
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 8]
xor ecx, ebp
call fcn.100b5418
mov esp, ebp
pop ebp
ret
mov esi, dword [ebp - 0x474]
mov ecx, dword [ebp - 0x468]
mov edx, dword [ebp - 0x470]
mov eax, dword [esi + 0x24]
lea eax, [eax + ecx*2]
movzx ecx, word [eax + edx]
mov eax, dword [esi + 0x1c]
lea eax, [eax + ecx*4]
mov eax, dword [eax + edx]
add eax, edx
mov dword [0x101e2c2c], eax
push dword [ebp - 0x46c]
call eax
mov ecx, dword [ebp - 8]
mov eax, 1
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.100b5418
mov esp, ebp
pop ebp
ret