Function at 0x44aa10
Capabilities:
Access peb ldr_data
Encode data using xor
Hash data using fnv
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
mov ecx, dword [0x573914]
sub esp, 0x24
push ebx
push esi
push edi
test ecx, ecx
jne 0x44ab0d
mov eax, dword fs:[0x30]
xor ebx, ebx
mov dword [ebp - 8], ebx
mov edi, 0x9bc5a608
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
mov eax, dword [eax]
mov ecx, eax
mov dword [ebp - 0x10], eax
mov dword [ebp - 4], ecx
mov eax, dword [ecx + 0x2c]
mov ecx, dword [ecx + 0x30]
test ebx, ebx
je 0x44aa7b
add eax, 0xfffffff8
mov edx, 0x811c9dc5
movzx eax, ax
shr eax, 1
lea esi, [ecx + eax*2]
cmp ecx, esi
je 0x44aa77
movsx eax, byte [ecx]
add ecx, 2
xor eax, edx
imul edx, eax, 0x1000193
cmp ecx, esi
jne 0x44aa65
cmp edx, ebx
jne 0x44aaec
mov eax, dword [ebp - 4]
mov edx, dword [eax + 0x18]
mov dword [ebp - 0xc], edx
mov eax, dword [edx + 0x3c]
mov ecx, dword [eax + edx + 0x78]
mov eax, dword [eax + edx + 0x7c]
mov dword [ebp - 0x1c], eax
lea eax, [ecx + edx]
mov dword [ebp - 0x14], eax
cmp eax, edx
je 0x44aaec
mov esi, dword [eax + 0x18]
test esi, esi
je 0x44aaec
mov eax, dword [eax + 0x20]
lea ebx, [eax + esi*4]
add ebx, edx
nop dword [eax + eax]
mov ecx, dword [ebx - 4]
lea ebx, [ebx - 4]
add ecx, edx
dec esi
mov edx, 0x811c9dc5
mov al, byte [ecx]
inc ecx
test al, al
je 0x44aada
movsx eax, al
lea ecx, [ecx + 1]
xor eax, edx
imul edx, eax, 0x1000193
mov al, byte [ecx - 1]
test al, al
jne 0x44aac5
cmp edx, edi
mov edx, dword [ebp - 0xc]
je 0x44aba3
test esi, esi
jne 0x44aab0
mov ebx, dword [ebp - 8]
mov eax, dword [ebp - 4]
mov eax, dword [eax]
mov ecx, eax
mov dword [ebp - 4], eax
cmp eax, dword [ebp - 0x10]
je 0x44ab05
cmp dword [ecx + 0x18], 0
jne 0x44aa47
xor ecx, ecx
mov dword [0x573914], ecx
call fcn.004495d0
call fcn.00449c80
test eax, eax
je 0x44ab25
mov dword [0], 1
call fcn.0044a090
test eax, eax
je 0x44ab38
mov dword [0], 1
call fcn.0044a3c0
test eax, eax
je 0x44ab4b
mov dword [0], 1
call fcn.0044a540
lea ecx, [ebp - 0x20]
test al, al
je 0x44ab61
mov dword [0], 1
call fcn.004494d0
mov esi, dword [ebp - 0x20]
mov eax, esi
mov ebx, dword [ebp - 0x1c]
mov ecx, ebx
cmp eax, 0xff67697f
jne 0x44ab83
cmp ecx, 0x7fffffff
je 0x44ac2f
cmp ecx, 0x7fffffff
jg 0x44ac1e
jl 0x44ab9c
cmp eax, 0xff67697f
jae 0x44ac1e
or al, 0xff
jmp 0x44ac20
mov edi, dword [ebp - 0x14]
mov eax, dword [edi + 0x24]
lea eax, [eax + esi*2]
movzx ecx, word [eax + edx]
mov eax, dword [edi + 0x1c]
lea ecx, [eax + ecx*4]
mov ecx, dword [ecx + edx]
add ecx, edx
cmp ecx, edi
jbe 0x44ab07
mov eax, dword [ebp - 0x1c]
add eax, edi
cmp ecx, eax
jae 0x44ab07
mov al, byte [ecx]
mov ebx, 0x811c9dc5
mov dword [ebp - 8], ebx
mov edi, ebx
cmp al, 0x2e
je 0x44abf5
movsx eax, al
inc ecx
xor eax, ebx
imul ebx, eax, 0x1000193
mov al, byte [ecx]
cmp al, 0x2e
jne 0x44abe0
mov dword [ebp - 8], ebx
mov al, byte [ecx + 1]
inc ecx
test al, al
je 0x44ac14
nop dword [eax]
movsx eax, al
lea ecx, [ecx + 1]
xor eax, edi
imul edi, eax, 0x1000193
mov al, byte [ecx]
test al, al
jne 0x44ac00
mov eax, dword [ebp - 0x10]
mov eax, dword [eax]
jmp 0x44aaef
mov al, 1
test al, al
jns 0x44ac2f
add esi, 0x989680
adc ebx, 0
jmp 0x44ac37
or esi, 0xffffffff
mov ebx, 0x7fffffff
mov dword [ebp - 0xc], ebx
mov dword [ebp - 8], esi
nop dword [eax]
lea ecx, [ebp - 0x20]
call fcn.004494d0
mov edx, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
cmp esi, edx
jne 0x44ac5a
cmp ebx, ecx
je 0x44ad29
cmp ebx, ecx
jg 0x44ac68
jl 0x44ac64
cmp esi, edx
jae 0x44ac68
or al, 0xff
jmp 0x44ac6a
mov al, 1
test al, al
jle 0x44ad29
mov edi, esi
mov esi, ebx
sub edi, edx
sbb esi, ecx
cmp edi, 0x914f0000
jne 0x44ac8e
cmp esi, 0x4e94
je 0x44ad17
cmp esi, 0x4e94
jg 0x44aca4
jl 0x44aca0
cmp edi, 0x914f0000
jae 0x44aca4
or al, 0xff
jmp 0x44aca6
mov al, 1
test al, al
jns 0x44ad17
push 0
push 0xf4240
push esi
push edi
call fcn.00452550
push 0
mov ebx, eax
mov eax, edx
push 0xf4240
push eax
push ebx
mov dword [ebp - 0x10], eax
call fcn.004526e0
cmp eax, edi
jne 0x44acd5
cmp edx, esi
je 0x44ad03
cmp edx, esi
jg 0x44ace3
jl 0x44acdf
cmp eax, edi
jae 0x44ace3
or al, 0xff
jmp 0x44ace5
mov al, 1
test al, al
jns 0x44ad03
mov eax, dword [ebp - 0x10]
add ebx, 1
push ebx
adc eax, 0
call sub.KERNEL32.dll_Sleep
mov ebx, dword [ebp - 0xc]
mov esi, dword [ebp - 8]
jmp 0x44ac40
mov eax, dword [ebp - 0x10]
push ebx
call sub.KERNEL32.dll_Sleep
mov ebx, dword [ebp - 0xc]
mov esi, dword [ebp - 8]
jmp 0x44ac40
push 0x5265c00
call sub.KERNEL32.dll_Sleep
mov esi, dword [ebp - 8]
jmp 0x44ac40
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret