Function at 0x10072210
Capabilities:
Access peb ldr_data
Encode data using xor
Hash data using fnv
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
mov eax, dword [0x100f036c]
sub esp, 0x14
mov dword [eax + 0xe], 0x6e
call fcn.10072430
test al, al
je 0x10072245
mov eax, dword [0x100f036c]
push dword [ebp + 0xc]
push dword [ebp + 8]
mov eax, dword [eax + 0x3e102]
call eax
add esp, 8
mov esp, ebp
pop ebp
ret
mov eax, dword [0x100f0b64]
push ebx
push esi
push edi
test eax, eax
jne 0x10072303
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
mov eax, dword [eax]
mov ecx, eax
mov dword [ebp - 4], eax
mov edx, eax
mov dword [ebp - 8], ecx
nop dword [eax]
mov ecx, dword [ecx + 0x18]
mov dword [ebp - 0xc], ecx
mov eax, dword [ecx + 0x3c]
mov eax, dword [eax + ecx + 0x78]
add eax, ecx
mov dword [ebp - 0x14], eax
cmp eax, ecx
je 0x100722e6
mov ebx, dword [eax + 0x18]
test ebx, ebx
je 0x100722e6
mov eax, dword [eax + 0x20]
lea eax, [eax + ebx*4]
add eax, ecx
mov esi, dword [eax - 4]
sub eax, 4
add esi, ecx
mov dword [ebp - 0x10], eax
dec ebx
mov edi, 0xddb1b03a
mov al, byte [esi]
inc esi
test al, al
je 0x100722dc
nop dword [eax]
movsx edx, al
lea esi, [esi + 1]
sub al, 0x41
mov ecx, edx
or ecx, 0x20
cmp al, 0x19
mov al, byte [esi - 1]
cmova ecx, edx
xor ecx, edi
imul edi, ecx, 0x1000193
test al, al
jne 0x100722b0
cmp edi, 0x60f761c3
je 0x10072319
mov ecx, dword [ebp - 0xc]
mov eax, dword [ebp - 0x10]
test ebx, ebx
jne 0x10072295
mov edx, dword [ebp - 4]
mov eax, dword [ebp - 8]
mov ecx, dword [eax]
mov dword [ebp - 8], ecx
cmp ecx, edx
je 0x100722fc
cmp dword [ecx + 0x18], 0
jne 0x10072270
xor eax, eax
mov dword [0x100f0b64], eax
push dword [ebp + 0xc]
push dword [ebp + 8]
call eax
add esp, 8
test eax, eax
jne 0x10072336
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov esi, dword [ebp - 0x14]
mov edx, dword [ebp - 0xc]
mov eax, dword [esi + 0x24]
lea eax, [eax + ebx*2]
movzx ecx, word [eax + edx]
mov eax, dword [esi + 0x1c]
lea eax, [eax + ecx*4]
mov eax, dword [eax + edx]
add eax, edx
jmp 0x100722fe
mov eax, dword [0x100f0b60]
test eax, eax
jne 0x100723f5
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
mov eax, dword [eax]
mov ecx, eax
mov dword [ebp - 0xc], eax
mov edx, eax
mov dword [ebp - 8], ecx
nop dword [eax + eax]
mov ecx, dword [ecx + 0x18]
mov dword [ebp - 4], ecx
mov eax, dword [ecx + 0x3c]
mov eax, dword [eax + ecx + 0x78]
add eax, ecx
mov dword [ebp - 0x10], eax
cmp eax, ecx
je 0x100723d8
mov edi, dword [eax + 0x18]
test edi, edi
je 0x100723d8
mov eax, dword [eax + 0x20]
lea eax, [eax + edi*4]
add eax, ecx
mov edx, dword [eax - 4]
sub eax, 4
add edx, ecx
mov dword [ebp - 0x14], eax
dec edi
mov esi, 0x4eb91de2
mov bl, byte [edx]
inc edx
test bl, bl
je 0x100723d1
nop dword [eax]
movsx ecx, bl
lea edx, [edx + 1]
sub bl, 0x41
mov eax, ecx
or eax, 0x20
cmp bl, 0x19
mov bl, byte [edx - 1]
cmova eax, ecx
xor eax, esi
imul esi, eax, 0x1000193
test bl, bl
jne 0x100723a0
cmp esi, 0x8120c62f
je 0x10072407
mov eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 4]
test edi, edi
jne 0x10072385
mov edx, dword [ebp - 0xc]
mov eax, dword [ebp - 8]
mov ecx, dword [eax]
mov dword [ebp - 8], ecx
cmp ecx, edx
je 0x100723ee
cmp dword [ecx + 0x18], 0
jne 0x10072360
xor eax, eax
mov dword [0x100f0b60], eax
push dword [ebp + 0xc]
push dword [ebp + 8]
call eax
add esp, 8
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov esi, dword [ebp - 0x10]
mov edx, dword [ebp - 4]
mov eax, dword [esi + 0x24]
lea eax, [eax + edi*2]
movzx ecx, word [eax + edx]
mov eax, dword [esi + 0x1c]
lea eax, [eax + ecx*4]
mov eax, dword [eax + edx]
add eax, edx
jmp 0x100723f0