Function at 0x10027e00
Capabilities:
Access peb ldr_data
Encode data using xor
Hash data using fnv
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x34
mov eax, dword [0x1017c400]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword [0x101f8240]
push ebx
mov ebx, dword [0x101f0cc8]
mov dword [ebp - 0x28], ebx
push esi
push edi
test eax, eax
jne 0x10027ee5
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
mov ebx, dword [eax + 0x18]
mov dword [ebp - 0x1c], ebx
mov ecx, dword [ebx + 0x3c]
mov ecx, dword [ecx + ebx + 0x78]
add ecx, ebx
mov dword [ebp - 0x24], ecx
cmp ecx, ebx
je 0x10027eb8
mov edx, dword [ecx + 0x18]
test edx, edx
je 0x10027eb8
mov ecx, dword [ecx + 0x20]
lea ecx, [ecx + edx*4]
add ecx, ebx
nop word [eax + eax]
mov esi, dword [ecx - 4]
sub ecx, 4
add esi, ebx
mov dword [ebp - 0x20], ecx
dec edx
mov edi, 0x15c49ca7
mov dword [ebp - 0x18], edx
mov bl, byte [esi]
inc esi
test bl, bl
je 0x10027eb1
nop dword [eax + eax]
movsx edx, bl
lea esi, [esi + 1]
sub bl, 0x41
mov ecx, edx
or ecx, 0x20
cmp bl, 0x19
mov bl, byte [esi - 1]
cmova ecx, edx
xor ecx, edi
imul edi, ecx, 0x1000193
test bl, bl
jne 0x10027e80
cmp edi, 0xf06c2b28
je 0x10027ebf
mov edx, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x20]
mov ebx, dword [eax + 0x18]
test edx, edx
jne 0x10027e60
mov eax, dword [eax]
jmp 0x10027e35
mov esi, dword [ebp - 0x24]
mov ecx, dword [ebp - 0x18]
mov edx, dword [ebp - 0x1c]
mov ebx, dword [ebp - 0x28]
mov eax, dword [esi + 0x24]
lea eax, [eax + ecx*2]
movzx ecx, word [eax + edx]
mov eax, dword [esi + 0x1c]
lea eax, [eax + ecx*4]
mov eax, dword [eax + edx]
add eax, edx
mov dword [0x101f8240], eax
lea ecx, [ebp - 0x14]
push ecx
push dword [0x101f8048]
call eax
mov eax, dword [ebp - 0xc]
sub eax, dword [ebp - 0x14]
movd xmm1, eax
mov eax, dword [ebp - 8]
sub eax, dword [ebp - 0x10]
cvtdq2ps xmm1, xmm1
movd xmm0, eax
lea eax, [ebp - 0x30]
cvtdq2ps xmm0, xmm0
push eax
movss dword [ebx + 0x10], xmm1
movss dword [ebx + 0x14], xmm0
call dword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
mov edi, dword [ebp - 0x30]
mov ecx, edi
sub ecx, dword [0x101f8050]
mov esi, dword [ebp - 0x2c]
mov edx, esi
sbb edx, dword [0x101f8054]
call fcn.10140140
mov edx, dword [0x101f805c]
mov ecx, dword [0x101f8058]
cvtsd2ss xmm0, xmm0
movss dword [ebp - 0x1c], xmm0
call fcn.10140140
movss xmm1, dword [ebp - 0x1c]
cvtsd2ss xmm0, xmm0
divss xmm1, xmm0
movss dword [ebx + 0x18], xmm1
mov eax, dword [0x101f8248]
mov dword [0x101f8050], edi
mov dword [0x101f8054], esi
test eax, eax
jne 0x10028032
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
nop dword [eax + eax]
mov ebx, dword [eax + 0x18]
mov dword [ebp - 0x20], ebx
mov ecx, dword [ebx + 0x3c]
mov ecx, dword [ecx + ebx + 0x78]
add ecx, ebx
mov dword [ebp - 0x24], ecx
cmp ecx, ebx
je 0x10028008
mov edx, dword [ecx + 0x18]
test edx, edx
je 0x10028008
mov ecx, dword [ecx + 0x20]
lea ecx, [ecx + edx*4]
add ecx, ebx
mov esi, dword [ecx - 4]
sub ecx, 4
add esi, ebx
mov dword [ebp - 0x1c], ecx
dec edx
mov edi, 0x103dc3ee
mov dword [ebp - 0x18], edx
mov bl, byte [esi]
inc esi
test bl, bl
je 0x10028001
movsx edx, bl
lea esi, [esi + 1]
sub bl, 0x41
mov ecx, edx
or ecx, 0x20
cmp bl, 0x19
mov bl, byte [esi - 1]
cmova ecx, edx
xor ecx, edi
imul edi, ecx, 0x1000193
test bl, bl
jne 0x10027fd0
cmp edi, 0x6d9ed382
je 0x1002800c
mov edx, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x1c]
mov ebx, dword [eax + 0x18]
test edx, edx
jne 0x10027fb5
mov eax, dword [eax]
jmp 0x10027f90
mov esi, dword [ebp - 0x24]
mov ecx, dword [ebp - 0x18]
mov edx, dword [ebp - 0x20]
mov ebx, dword [ebp - 0x28]
mov eax, dword [esi + 0x24]
lea eax, [eax + ecx*2]
movzx ecx, word [eax + edx]
mov eax, dword [esi + 0x1c]
lea eax, [eax + ecx*4]
mov eax, dword [eax + edx]
add eax, edx
mov dword [0x101f8248], eax
push 0x11
call eax
shr eax, 0xf
and al, 1
mov byte [ebx + 0x100], al
mov eax, dword [0x101f8244]
test eax, eax
jne 0x10028102
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
nop word [eax + eax]
mov ebx, dword [eax + 0x18]
mov dword [ebp - 0x20], ebx
mov ecx, dword [ebx + 0x3c]
mov ecx, dword [ecx + ebx + 0x78]
add ecx, ebx
mov dword [ebp - 0x24], ecx
cmp ecx, ebx
je 0x100280d8
mov edx, dword [ecx + 0x18]
test edx, edx
je 0x100280d8
mov ecx, dword [ecx + 0x20]
lea ecx, [ecx + edx*4]
add ecx, ebx
mov esi, dword [ecx - 4]
sub ecx, 4
add esi, ebx
mov dword [ebp - 0x1c], ecx
dec edx
mov edi, 0x1cabb5c2
mov dword [ebp - 0x18], edx
mov bl, byte [esi]
inc esi
test bl, bl
je 0x100280d1
movsx edx, bl
lea esi, [esi + 1]
sub bl, 0x41
mov ecx, edx
or ecx, 0x20
cmp bl, 0x19
mov bl, byte [esi - 1]
cmova ecx, edx
xor ecx, edi
imul edi, ecx, 0x1000193
test bl, bl
jne 0x100280a0
cmp edi, 0xacf15346
je 0x100280dc
mov edx, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x1c]
mov ebx, dword [eax + 0x18]
test edx, edx
jne 0x10028085
mov eax, dword [eax]
jmp 0x10028060
mov esi, dword [ebp - 0x24]
mov ecx, dword [ebp - 0x18]
mov edx, dword [ebp - 0x20]
mov ebx, dword [ebp - 0x28]
mov eax, dword [esi + 0x24]
lea eax, [eax + ecx*2]
movzx ecx, word [eax + edx]
mov eax, dword [esi + 0x1c]
lea eax, [eax + ecx*4]
mov eax, dword [eax + edx]
add eax, edx
mov dword [0x101f8244], eax
push 0x10
call eax
shr eax, 0xf
and al, 1
mov byte [ebx + 0x101], al
mov eax, dword [0x101f8250]
test eax, eax
jne 0x100281d2
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
nop word [eax + eax]
mov ebx, dword [eax + 0x18]
mov dword [ebp - 0x20], ebx
mov ecx, dword [ebx + 0x3c]
mov ecx, dword [ecx + ebx + 0x78]
add ecx, ebx
mov dword [ebp - 0x24], ecx
cmp ecx, ebx
je 0x100281a8
mov edx, dword [ecx + 0x18]
test edx, edx
je 0x100281a8
mov ecx, dword [ecx + 0x20]
lea ecx, [ecx + edx*4]
add ecx, ebx
mov esi, dword [ecx - 4]
sub ecx, 4
add esi, ebx
mov dword [ebp - 0x1c], ecx
dec edx
mov edi, 0x705aad2a
mov dword [ebp - 0x18], edx
mov bl, byte [esi]
inc esi
test bl, bl
je 0x100281a1
movsx edx, bl
lea esi, [esi + 1]
sub bl, 0x41
mov ecx, edx
or ecx, 0x20
cmp bl, 0x19
mov bl, byte [esi - 1]
cmova ecx, edx
xor ecx, edi
imul edi, ecx, 0x1000193
test bl, bl
jne 0x10028170
cmp edi, 0x12e3f7be
je 0x100281ac
mov edx, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x1c]
mov ebx, dword [eax + 0x18]
test edx, edx
jne 0x10028155
mov eax, dword [eax]
jmp 0x10028130
mov esi, dword [ebp - 0x24]
mov ecx, dword [ebp - 0x18]
mov edx, dword [ebp - 0x20]
mov ebx, dword [ebp - 0x28]
mov eax, dword [esi + 0x24]
lea eax, [eax + ecx*2]
movzx ecx, word [eax + edx]
mov eax, dword [esi + 0x1c]
lea eax, [eax + ecx*4]
mov eax, dword [eax + edx]
add eax, edx
mov dword [0x101f8250], eax
push 0x12
call eax
shr eax, 0xf
and al, 1
mov byte [ebx + 0x103], 0
mov byte [ebx + 0x102], al
call fcn.100278a0
cmp byte [ebx + 0xb0], 0
je 0x100281fb
or eax, 0xffffffff
jmp 0x10028206
mov eax, dword [0x101f0cc8]
mov eax, dword [eax + 0x1d38]
cmp dword [0x101e2bb0], eax
je 0x10028218
mov dword [0x101e2bb0], eax
call fcn.10027610
mov ecx, dword [ebp - 4]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.100bf244
mov esp, ebp
pop ebp
ret