Function at 0x1000aa70
Capabilities:
Access peb ldr_data
Create thread
Encode data using xor
Hash data using fnv
Resolve function by parsing pe exports

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x101186e5
mov eax, dword fs:[0]
push eax
push ebx
sub esp, 0x40
mov eax, dword [0x101f3600]
xor eax, ebp
mov dword [ebp - 0x14], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
nop word [eax + eax]
mov edx, dword [eax + 0x18]
mov dword [ebp - 0x18], edx
mov ecx, dword [edx + 0x3c]
mov ecx, dword [ecx + edx + 0x78]
add ecx, edx
mov dword [ebp - 0x24], ecx
cmp ecx, edx
je 0x1000ab27
mov edi, dword [ecx + 0x18]
test edi, edi
je 0x1000ab27
mov ecx, dword [ecx + 0x20]
lea ecx, [ecx + edi*4]
add ecx, edx
sub ecx, 4
dec edi
mov dword [ebp - 0x34], ecx
mov esi, 0x75509659
mov ecx, dword [ecx]
add ecx, edx
mov dl, byte [ecx]
inc ecx
test dl, dl
je 0x1000ab1d
nop dword [eax]
movsx edx, dl
lea ecx, [ecx + 1]
xor edx, esi
imul esi, edx, 0x1000193
mov dl, byte [ecx - 1]
test dl, dl
jne 0x1000ab00
cmp esi, 0xbd4976e8
je 0x1000ab2b
mov ecx, dword [ebp - 0x34]
mov edx, dword [eax + 0x18]
test edi, edi
jne 0x1000aae5
mov eax, dword [eax]
jmp 0x1000aac0
mov eax, dword [ebp - 0x24]
mov edx, dword [ebp - 0x18]
mov esi, dword fs:[0x2c]
mov dword [ebp - 0x20], 0xc4e7bdfa
mov ecx, dword [eax + 0x1c]
mov eax, dword [eax + 0x24]
add ecx, edx
add eax, edx
mov word [ebp - 0x1c], 0xd581
movzx eax, word [eax + edi*2]
mov edi, dword [0x101f7300]
mov eax, dword [ecx + eax*4]
mov ecx, dword [esi + edi*4]
add eax, edx
mov dword [ebp - 0x18], eax
mov eax, dword [0x10201334]
cmp eax, dword [ecx + 4]
jle 0x1000abd3
push 0x10201334
call fcn.100747ff
add esp, 4
cmp dword [0x10201334], 0xffffffff
jne 0x1000abd3
xorps xmm0, xmm0
mov byte [0x1020136a], 1
movlpd qword [ebp - 0x28], xmm0
mov edx, dword [ebp - 0x24]
mov ecx, dword [ebp - 0x28]
nop dword [eax]
mov al, byte [ebp + ecx - 0x20]
mov byte [ecx + 0x10201364], al
add ecx, 1
adc edx, 0
test edx, edx
jne 0x1000abb9
cmp ecx, 6
jb 0x1000aba0
push 0x10119d30
call fcn.10074b68
add esp, 4
push 0x10201334
call fcn.100747ae
add esp, 4
mov ecx, dword [esi + edi*4]
movaps xmm0, xmmword [0x101ec800]
mov eax, dword [0x10201358]
movups xmmword [ebp - 0x50], xmm0
mov dword [ebp - 0x40], 0xcec7a6ca
mov dword [ebp - 0x3c], 0x3dd2b19d
mov dword [ebp - 0x38], 0xabbbbdda
cmp eax, dword [ecx + 4]
jle 0x1000ac63
push 0x10201358
call fcn.100747ff
add esp, 4
cmp dword [0x10201358], 0xffffffff
jne 0x1000ac63
xorps xmm0, xmm0
mov byte [0x10201414], 1
movlpd qword [ebp - 0x20], xmm0
mov edx, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x20]
nop
mov al, byte [ebp + ecx - 0x50]
mov byte [ecx + 0x102013f8], al
add ecx, 1
adc edx, 0
test edx, edx
jne 0x1000ac49
cmp ecx, 0x1c
jb 0x1000ac30
push 0x10119d70
call fcn.10074b68
add esp, 4
push 0x10201358
call fcn.100747ae
add esp, 4
push 0x34
call fcn.10074b82
mov edx, eax
add esp, 4
mov dword [edx], 0x10
mov ecx, dword [0x10201364]
mov dword [edx + 4], ecx
mov cx, word [0x10201368]
mov word [edx + 8], cx
mov cl, byte [0x1020136a]
mov byte [edx + 0xa], cl
movups xmm0, xmmword [0x102013f8]
movups xmmword [edx + 0xc], xmm0
movq xmm0, qword [0x10201408]
movq qword [edx + 0x1c], xmm0
mov eax, dword [0x10201410]
mov dword [edx + 0x24], eax
mov al, byte [0x10201414]
mov byte [edx + 0x28], al
mov eax, dword [ebp - 0x18]
mov dword [edx + 0x2c], 0
mov dword [edx + 0x30], eax
mov dword [ebp - 0x18], edx
lea eax, [ebp - 0x2c]
mov dword [ebp - 4], 0
push eax
push 0
push edx
push 0x1000c170
push 0
push 0
call fcn.100805d0
add esp, 0x18
mov dword [ebp - 0x30], eax
test eax, eax
je 0x1000ad3e
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 1
call fcn.1000a620
mov dword [ebp - 4], 0xffffffff
cmp dword [ebp - 0x2c], 0
jne 0x1000ad4c
mov ecx, 0x1388
call fcn.10007c60
mov dword [0], 0xdeadbeef
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.100747a0
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret
push 6
mov dword [ebp - 0x2c], 0
call fcn.100741db
call fcn.10080661
int3