Function at 0x4959d0
Capabilities:
Access peb ldr_data
Encode data using xor
Hash data using fnv
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x39c
mov dword [ebp - 0x188], 1
mov eax, 0x11
mov dword [ebp - 0x180], 0x42
mov word [ebp - 0x17c], ax
mov eax, 0xd
mov word [ebp - 0x17a], ax
mov eax, 4
mov word [ebp - 0x178], ax
mov eax, 0x16
mov word [ebp - 0x176], ax
mov eax, 3
mov dword [ebp - 0x14], ecx
mov ecx, 0x15
mov word [ebp - 0x174], cx
mov word [ebp - 0x172], ax
mov eax, 0x10
mov word [ebp - 0x170], ax
mov eax, 7
mov word [ebp - 0x16e], ax
mov eax, 0x1e
mov word [ebp - 0x16c], ax
mov eax, 0xf
mov word [ebp - 0x16a], ax
mov eax, 0x21
push ebx
push esi
push edi
mov edi, 0x2b
mov dword [ebp - 0x10], edx
mov word [ebp - 0x168], di
mov edx, 0x2d
mov word [ebp - 0x166], ax
mov ebx, 0x31
mov eax, 0x30
mov esi, 0x36
mov word [ebp - 0x164], ax
mov eax, 0x24
mov word [ebp - 0x162], dx
mov word [ebp - 0x160], bx
mov word [ebp - 0x15e], dx
mov word [ebp - 0x15c], ax
mov eax, 0x1e
mov word [ebp - 0x15a], si
mov word [ebp - 0x158], ax
mov eax, 0x26
mov word [ebp - 0x156], cx
mov ecx, 0x27
mov word [ebp - 0x154], di
mov edi, 0x2c
mov word [ebp - 0x152], di
mov word [ebp - 0x150], ax
mov eax, 0x35
mov word [ebp - 0x14e], dx
mov edx, 0x37
mov word [ebp - 0x14c], ax
mov eax, 0x1e
mov word [ebp - 0x14a], bx
mov word [ebp - 0x148], ax
mov eax, 1
mov word [ebp - 0x146], ax
mov eax, 0x30
mov word [ebp - 0x144], dx
mov word [ebp - 0x142], ax
mov word [ebp - 0x140], ax
mov eax, 0x14
mov word [ebp - 0x13e], cx
mov word [ebp - 0x13c], di
mov word [ebp - 0x13a], si
mov word [ebp - 0x138], ax
mov eax, 0x30
mov word [ebp - 0x136], cx
mov word [ebp - 0x134], ax
mov eax, 0x2b
mov word [ebp - 0x132], bx
mov word [ebp - 0x130], ax
mov eax, 0x2d
mov word [ebp - 0x12e], ax
mov eax, 0x1e
mov word [ebp - 0x12c], di
mov word [ebp - 0x12a], ax
mov eax, 0x10
mov word [ebp - 0x128], ax
mov eax, 0x42
mov word [ebp - 0x126], dx
mov word [ebp - 0x124], di
mov word [ebp - 0x122], ax
movzx eax, word [0x40343c]
xor eax, 0x42
mov word [ebp - 0x120], ax
movzx eax, word [0x40343e]
xor eax, 0x42
mov word [ebp - 0x11e], ax
movzx eax, word [0x403440]
xor eax, 0x42
mov word [ebp - 0x11c], ax
movzx eax, word [0x403442]
xor eax, 0x42
mov word [ebp - 0x11a], ax
movzx eax, word [0x403444]
xor eax, 0x42
mov word [ebp - 0x118], ax
movzx eax, word [0x403446]
xor eax, 0x42
mov word [ebp - 0x116], ax
movzx eax, word [0x403448]
xor eax, 0x42
mov word [ebp - 0x114], ax
movzx eax, word [0x40344a]
xor eax, 0x42
mov word [ebp - 0x112], ax
movzx eax, word [0x40344c]
xor eax, 0x42
mov word [ebp - 0x110], ax
movzx eax, word [0x40344e]
xor eax, 0x42
mov word [ebp - 0x10e], ax
movzx eax, word [0x403450]
xor eax, 0x42
mov word [ebp - 0x10c], ax
movzx eax, word [0x403452]
xor eax, 0x42
mov word [ebp - 0x10a], ax
movzx eax, word [0x403454]
xor eax, 0x42
mov word [ebp - 0x108], ax
movzx eax, word [0x403456]
xor eax, 0x42
mov word [ebp - 0x106], ax
movzx eax, word [0x403458]
xor eax, 0x42
mov word [ebp - 0x104], ax
movzx eax, word [0x40345a]
xor eax, 0x42
mov word [ebp - 0x102], ax
movzx eax, word [0x40345c]
xor eax, 0x42
mov word [ebp - 0x100], ax
movzx eax, word [0x40345e]
xor eax, 0x42
mov word [ebp - 0xfe], ax
movzx eax, word [0x403460]
xor eax, 0x42
mov word [ebp - 0xfc], ax
movzx eax, word [0x403462]
xor eax, 0x42
mov word [ebp - 0xfa], ax
movzx eax, word [0x403464]
xor eax, 0x42
mov word [ebp - 0xf8], ax
movzx eax, word [0x403466]
xor eax, 0x42
mov word [ebp - 0xf6], ax
movzx eax, word [0x403468]
xor eax, 0x42
mov word [ebp - 0xf4], ax
movzx eax, word [0x40346a]
xor eax, 0x42
mov word [ebp - 0xf2], ax
movzx eax, word [0x40346c]
xor eax, 0x42
mov word [ebp - 0xf0], ax
movzx eax, word [0x40346e]
xor eax, 0x42
mov word [ebp - 0xee], ax
movzx eax, word [0x403470]
xor eax, 0x42
mov word [ebp - 0xec], ax
movzx eax, word [0x403472]
xor eax, 0x42
mov word [ebp - 0xea], ax
movzx eax, word [0x403474]
xor eax, 0x42
mov word [ebp - 0xe8], ax
movzx eax, word [0x403476]
xor eax, 0x42
mov word [ebp - 0xe6], ax
movzx eax, word [0x403478]
xor eax, 0x42
mov word [ebp - 0xe4], ax
movzx eax, word [0x40347a]
xor eax, 0x42
mov word [ebp - 0xe2], ax
movzx eax, word [0x40347c]
xor eax, 0x42
mov word [ebp - 0xe0], ax
movzx eax, word [0x40347e]
xor eax, 0x42
mov word [ebp - 0xde], ax
movzx eax, word [0x403480]
xor eax, 0x42
mov word [ebp - 0xdc], ax
movzx eax, word [0x403482]
xor eax, 0x42
mov word [ebp - 0xda], ax
movzx eax, word [0x403484]
xor eax, 0x42
mov word [ebp - 0xd8], ax
movzx eax, word [0x403486]
xor eax, 0x42
mov word [ebp - 0xd6], ax
movzx eax, word [0x403488]
xor eax, 0x42
mov word [ebp - 0xd4], ax
movzx eax, word [0x40348a]
xor eax, 0x42
mov word [ebp - 0xd2], ax
movzx eax, word [0x40348c]
xor eax, 0x42
mov word [ebp - 0xd0], ax
movzx eax, word [0x40348e]
xor eax, 0x42
mov word [ebp - 0xce], ax
movzx eax, word [0x403490]
xor eax, 0x42
mov word [ebp - 0xcc], ax
movzx eax, word [0x403492]
xor eax, 0x42
mov word [ebp - 0xca], ax
movzx eax, word [0x403494]
xor eax, 0x42
mov word [ebp - 0xc8], ax
xor eax, eax
mov word [ebp - 0xc6], ax
xor edx, edx
mov ax, word [ebp - 0x17c]
nop dword [eax]
mov ax, word [ebp + edx*2 - 0x17c]
movzx ecx, ax
movzx eax, word [ebp - 0x180]
xor ecx, eax
mov word [ebp + edx*2 - 0x17c], cx
inc edx
cmp edx, 0x5b
jb 0x495ef0
mov ebx, dword [0x4f083c]
xor eax, eax
mov word [ebp - 0xc6], ax
test ebx, ebx
jne 0x495fb1
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
mov eax, dword [eax]
mov ecx, eax
mov dword [ebp - 8], eax
mov edx, eax
mov dword [ebp - 4], ecx
movzx ebx, word [ecx + 0x2c]
xor edi, edi
mov esi, dword [ecx + 0x30]
shr ebx, 1
mov dword [ebp - 0xc], 0x811c9dc5
lea eax, [esi + ebx*2]
cmp esi, eax
cmova ebx, edi
test ebx, ebx
je 0x495f98
nop
mov cl, byte [esi]
lea esi, [esi + 2]
movsx edx, cl
sub cl, 0x41
mov eax, edx
or eax, 0x20
cmp cl, 0x19
cmova eax, edx
inc edi
xor eax, dword [ebp - 0xc]
imul eax, eax, 0x1000193
mov dword [ebp - 0xc], eax
cmp edi, ebx
jne 0x495f60
cmp eax, 0x39794115
je 0x4969cf
mov ecx, dword [ebp - 4]
mov edx, dword [ebp - 8]
mov eax, dword [ecx]
mov ecx, eax
mov dword [ebp - 4], ecx
cmp eax, edx
je 0x495fa9
cmp dword [ecx + 0x18], 0
jne 0x495f41
xor ebx, ebx
mov dword [0x4f083c], ebx
mov eax, dword [0x4f8bf4]
test eax, eax
jne 0x49604e
test ebx, ebx
je 0x496047
mov eax, dword [ebx + 0x3c]
mov ecx, dword [eax + ebx + 0x78]
mov eax, dword [ebp - 4]
mov ebx, dword [eax + 0x18]
jmp 0x495fab