Function at 0x100074b0
Capabilities:
Access peb ldr_data
Encode data using xor
Hash data using fnv
Resolve function by parsing pe exports

Disassembly:
push ebp
push ebx
push edi
push esi
sub esp, 0x24
mov dword [esp + 0x20], edx
mov ebx, ecx
mov eax, dword fs:[0x18]
mov eax, dword [eax + 0x30]
mov ebp, dword [eax + 0xc]
add ebp, 0x14
mov dword [esp + 4], ebp
mov dword [esp], ecx
jmp 0x100074ea
xor ecx, ecx
cmp ecx, ebx
je 0x100075f6
mov ebp, dword [ebp]
mov edx, dword [ebp]
xor eax, eax
mov ecx, dword [esp + 4]
cmp edx, dword [ecx]
je 0x1000778e
mov ecx, dword [edx + 0x28]
test ecx, ecx
je 0x1000778e
mov dword [esp + 0xc], edx
movzx edi, word [edx + 0x24]
push ecx
call fcn.1000f0b8
add esp, 4
test edi, edi
je 0x100074e0
movzx ecx, byte [eax]
xor ecx, 0x4b9ace2f
imul ecx, ecx, 0x1000193
cmp edi, 1
je 0x100074e2
lea edx, [edi - 1]
cmp di, 9
mov dword [esp + 8], edx
jb 0x100075bd
shr edx, 3
xor ebx, ebx
nop word cs:[eax + eax]
movzx esi, byte [eax + ebx*8 + 1]
xor esi, ecx
imul ecx, esi, 0x1000193
movzx esi, byte [eax + ebx*8 + 2]
xor esi, ecx
imul ecx, esi, 0x1000193
movzx esi, byte [eax + ebx*8 + 3]
xor esi, ecx
imul ecx, esi, 0x1000193
movzx esi, byte [eax + ebx*8 + 4]
xor esi, ecx
imul ecx, esi, 0x1000193
movzx esi, byte [eax + ebx*8 + 5]
xor esi, ecx
imul ecx, esi, 0x1000193
movzx esi, byte [eax + ebx*8 + 6]
xor esi, ecx
imul ecx, esi, 0x1000193
movzx esi, byte [eax + ebx*8 + 7]
xor esi, ecx
imul ecx, esi, 0x1000193
movzx esi, byte [eax + ebx*8 + 8]
xor esi, ecx
imul ecx, esi, 0x1000193
inc ebx
cmp edx, ebx
jne 0x10007550
mov esi, dword [esp + 8]
mov edx, esi
and edx, 0xfffffff8
cmp edx, esi
jne 0x100075d2
mov ebx, dword [esp]
jmp 0x100074e2
inc edx
mov ebx, dword [esp]
nop word cs:[eax + eax]
movzx esi, byte [eax + edx]
xor esi, ecx
imul ecx, esi, 0x1000193
inc edx
cmp edi, edx
jne 0x100075e0
jmp 0x100074e2
mov eax, dword [esp + 0xc]
mov edi, dword [eax + 0x10]
xor eax, eax
test edi, edi
je 0x1000778e
mov ecx, dword [edi + 0x3c]
mov ecx, dword [edi + ecx + 0x78]
test ecx, ecx
je 0x1000778e
mov edx, dword [edi + ecx + 0x18]
mov dword [esp + 0xc], edx
test edx, edx
je 0x1000778e
mov eax, dword [edi + ecx + 0x20]
add eax, edi
mov dword [esp + 8], eax
mov eax, dword [edi + ecx + 0x1c]
add eax, edi
mov dword [esp + 0x18], eax
mov eax, dword [edi + ecx + 0x24]
add eax, edi
mov dword [esp + 0x14], eax
lea eax, [edi + 8]
mov dword [esp + 0x1c], eax
xor ecx, ecx
mov dword [esp + 0x10], edi
nop word cs:[eax + eax]
mov eax, dword [esp + 8]
mov dword [esp + 4], ecx
mov ebp, dword [eax + ecx*4]
lea ebx, [edi + ebp]
push ebx
call fcn.1000f580
add esp, 4
mov ecx, 0
test eax, eax
je 0x10007760
movzx ecx, byte [ebx]
xor ecx, 0x4b9ace2f
imul ecx, ecx, 0x1000193
cmp eax, 1
je 0x10007760
lea edx, [eax - 1]
cmp eax, 9
mov dword [esp], edx
jb 0x1000771d
shr edx, 3
add ebp, dword [esp + 0x1c]
xor edi, edi
movzx esi, byte [ebp + edi*8 - 7]
xor esi, ecx
imul ecx, esi, 0x1000193
movzx esi, byte [ebp + edi*8 - 6]
xor esi, ecx
imul ecx, esi, 0x1000193
movzx esi, byte [ebp + edi*8 - 5]
xor esi, ecx
imul ecx, esi, 0x1000193
movzx esi, byte [ebp + edi*8 - 4]
xor esi, ecx
imul ecx, esi, 0x1000193
movzx esi, byte [ebp + edi*8 - 3]
xor esi, ecx
imul ecx, esi, 0x1000193
movzx esi, byte [ebp + edi*8 - 2]
xor esi, ecx
imul ecx, esi, 0x1000193
movzx esi, byte [ebp + edi*8 - 1]
xor esi, ecx
imul ecx, esi, 0x1000193
movzx esi, byte [ebp + edi*8]
xor esi, ecx
imul ecx, esi, 0x1000193
inc edi
cmp edx, edi
jne 0x100076b0
mov esi, dword [esp]
mov edx, esi
and edx, 0xfffffff8
cmp edx, esi
jne 0x1000772f
mov edi, dword [esp + 0x10]
jmp 0x10007760
inc edx
mov edi, dword [esp + 0x10]
nop word cs:[eax + eax]
movzx esi, byte [ebx + edx]
xor esi, ecx
imul ecx, esi, 0x1000193
inc edx
cmp eax, edx
jne 0x10007740
nop word cs:[eax + eax]
cmp ecx, dword [esp + 0x20]
je 0x10007779
mov ecx, dword [esp + 4]
inc ecx
cmp ecx, dword [esp + 0xc]
jne 0x10007660
xor eax, eax
jmp 0x1000778e
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 4]
movzx eax, word [eax + ecx*2]
mov ecx, dword [esp + 0x18]
add edi, dword [ecx + eax*4]
mov eax, edi
add esp, 0x24
pop esi
pop edi
pop ebx
pop ebp
ret