Function at 0x431000
Capabilities:
Access peb ldr_data
Encode data using xor
Hash data using fnv
Resolve function by parsing pe exports

Disassembly:
push ebp
push ebx
push edi
push esi
sub esp, 0x10
mov eax, dword [esp + 0x24]
mov dword [0x479880], eax
sub esp, 0x30
mov dword [esp + 0x28], eax
movaps xmm0, xmmword [0x472aa0]
movups xmmword [esp + 0xc], xmm0
mov dword [esp + 0x2c], 0
mov dword [esp + 0x24], 0
mov dword [esp + 0x20], 0
mov dword [esp + 0x1c], 0
mov dword [esp + 8], 0x479884
mov dword [esp + 4], 0x47994c
mov dword [esp], 0
call dword [sym.imp.USER32.dll_CreateWindowExW]
mov dword [esp + 0xc], eax
test eax, eax
je 0x431291
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
add eax, 0xc
jmp 0x431084
mov eax, dword [esp + 4]
mov eax, dword [eax]
mov dword [esp + 4], eax
mov ecx, dword [eax + 0x18]
mov eax, dword [ecx + 0x3c]
mov edx, dword [ecx + eax + 0x78]
mov eax, edx
mov dword [esp], edx
test edx, edx
je 0x431080
mov eax, dword [esp]
mov edi, dword [ecx + eax + 0x18]
lea eax, [ecx + 1]
mov dword [esp + 8], eax
jmp 0x4310bd
mov esi, 0xb32f5727
cmp esi, 0x99932696
je 0x431104
sub edi, 1
jb 0x431080
mov eax, dword [esp]
mov eax, dword [ecx + eax + 0x20]
add eax, ecx
mov ebp, dword [eax + edi*4]
mov al, byte [ecx + ebp]
test al, al
je 0x4310b0
add ebp, dword [esp + 8]
mov esi, 0xb32f5727
nop
movsx edx, al
add al, 0xbf
mov ebx, edx
or ebx, 0x20
cmp al, 0x1a
cmovae ebx, edx
xor ebx, esi
imul esi, ebx, 0x1000193
movzx eax, byte [ebp]
add ebp, 1
test al, al
jne 0x4310e0
jmp 0x4310b5
mov edx, dword [esp]
mov eax, dword [ecx + edx + 0x1c]
add eax, ecx
mov edx, dword [ecx + edx + 0x24]
add edx, ecx
movzx edx, word [edx + edi*2]
add ecx, dword [eax + edx*4]
push 0
push dword [esp + 0x10]
call ecx
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
add eax, 0xc
jmp 0x431134
mov eax, dword [esp + 4]
mov eax, dword [eax]
mov dword [esp + 4], eax
mov ecx, dword [eax + 0x18]
mov eax, dword [ecx + 0x3c]
mov edx, dword [ecx + eax + 0x78]
mov eax, edx
mov dword [esp], edx
test edx, edx
je 0x431130
mov eax, dword [esp]
mov edi, dword [ecx + eax + 0x18]
lea eax, [ecx + 1]
mov dword [esp + 8], eax
jmp 0x43116d
mov esi, 0x1e323e2f
cmp esi, 0x9e830742
je 0x4311b4
sub edi, 1
jb 0x431130
mov eax, dword [esp]
mov eax, dword [ecx + eax + 0x20]
add eax, ecx
mov ebp, dword [eax + edi*4]
mov al, byte [ecx + ebp]
test al, al
je 0x431160
add ebp, dword [esp + 8]
mov esi, 0x1e323e2f
nop
movsx edx, al
add al, 0xbf
mov ebx, edx
or ebx, 0x20
cmp al, 0x1a
cmovae ebx, edx
xor ebx, esi
imul esi, ebx, 0x1000193
movzx eax, byte [ebp]
add ebp, 1
test al, al
jne 0x431190
jmp 0x431165
mov edx, dword [esp]
mov eax, dword [ecx + edx + 0x1c]
add eax, ecx
mov edx, dword [ecx + edx + 0x24]
add edx, ecx
movzx edx, word [edx + edi*2]
add ecx, dword [eax + edx*4]
push dword [esp + 0xc]
call ecx
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
add eax, 0xc
jmp 0x4311e4
mov eax, dword [esp + 4]
mov eax, dword [eax]
mov dword [esp + 4], eax
mov ecx, dword [eax + 0x18]
mov eax, dword [ecx + 0x3c]
mov edx, dword [ecx + eax + 0x78]
mov eax, edx
mov dword [esp], edx
test edx, edx
je 0x4311e0
mov eax, dword [esp]
mov esi, dword [ecx + eax + 0x18]
lea eax, [ecx + 1]
mov dword [esp + 8], eax
jmp 0x43121d
mov ebp, 0x3123518e
cmp ebp, 0xd488226e
je 0x431263
sub esi, 1
jb 0x4311e0
mov eax, dword [esp]
mov eax, dword [ecx + eax + 0x20]
add eax, ecx
mov ebx, dword [eax + esi*4]
mov al, byte [ecx + ebx]
test al, al
je 0x431210
add ebx, dword [esp + 8]
mov ebp, 0x3123518e
nop
movsx edx, al
add al, 0xbf
mov edi, edx
or edi, 0x20
cmp al, 0x1a
cmovae edi, edx
xor edi, ebp
imul ebp, edi, 0x1000193
movzx eax, byte [ebx]
add ebx, 1
test al, al
jne 0x431240
jmp 0x431215
mov edx, dword [esp]
mov eax, dword [ecx + edx + 0x1c]
add eax, ecx
mov edx, dword [ecx + edx + 0x24]
add edx, ecx
movzx edx, word [edx + esi*2]
add ecx, dword [eax + edx*4]
push 0
push 0
push 0
push section..text
push 0
push 0
call ecx
mov eax, 1
jmp 0x431293
xor eax, eax
add esp, 0x10
pop esi
pop edi
pop ebx
pop ebp
ret