Function at 0x100037b0
Capabilities:
Access peb ldr_data
Encode data using xor
Get process heap force flags
Hash data using fnv

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x44
mov eax, dword fs:[0x18]
mov dword [ebp - 0xc], ecx
push ebx
push esi
mov eax, dword [eax + 0x30]
push edi
mov ecx, dword [eax + 0xc]
mov eax, dword [ecx + 0x14]
add ecx, 0x14
mov dword [ebp - 0x10], ecx
mov dword [ebp - 4], eax
cmp eax, ecx
je 0x10003998
nop dword [eax]
mov edx, dword [eax + 0x28]
xor eax, eax
mov ecx, edx
mov dword [ebp - 0x30], 0
mov dword [ebp - 0x2c], 7
mov word [ebp - 0x40], ax
lea esi, [ecx + 2]
nop dword [eax]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x10003800
sub ecx, esi
sar ecx, 1
push ecx
push edx
lea ecx, [ebp - 0x40]
call fcn.100011b0
cmp dword [ebp - 0x2c], 8
lea ecx, [ebp - 0x40]
mov eax, dword [ebp - 0x30]
lea ebx, [ebp - 0x40]
cmovae ecx, dword [ebp - 0x40]
cmovae ebx, dword [ebp - 0x40]
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0xf
lea esi, [ecx + eax*2]
mov byte [ebp - 0x28], 0
mov eax, esi
lea ecx, [ebp - 0x28]
sub eax, ebx
sar eax, 1
push eax
call fcn.10001620
push dword [ebp - 0x10]
lea ecx, [ebp - 0x28]
push esi
push ebx
call fcn.100017b0
mov edx, dword [ebp - 0x14]
lea eax, [ebp - 0x28]
mov ebx, dword [ebp - 0x28]
lea ecx, [ebp - 0x28]
mov esi, dword [ebp - 0x18]
lea edi, [ebp - 0x28]
cmp edx, 0x10
cmovae eax, ebx
cmovae ecx, ebx
add esi, eax
cmp edx, 0x10
cmovae edi, ebx
cmp edi, esi
je 0x100038ab
sub ecx, edi
mov ebx, ecx
nop word [eax + eax]
movsx eax, byte [edi]
push eax
call dword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_tolower]
mov byte [edi + ebx], al
add esp, 4
inc edi
cmp edi, esi
jne 0x10003890
mov ebx, dword [ebp - 0x28]
mov edx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x18]
cmp eax, 4
jbe 0x100038d1
lea ecx, [eax - 4]
cmp eax, ecx
jb 0x10003a18
cmp edx, 0x10
mov dword [ebp - 0x18], ecx
lea eax, [ebp - 0x28]
cmovae eax, ebx
mov byte [eax + ecx], 0
mov ebx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x14]
lea esi, [ebp - 0x28]
cmp eax, 0x10
mov edi, 0x811c9dc5
mov ecx, 1
cmovae esi, ebx
cmp byte [esi + 1], 0
je 0x100038f7
nop dword [eax]
inc ecx
cmp byte [ecx + esi], 0
jne 0x100038f0
xor edx, edx
test ecx, ecx
je 0x10003914
nop dword [eax]
movsx eax, byte [edx + esi]
inc edx
xor eax, edi
imul edi, eax, 0x1000193
cmp edx, ecx
jb 0x10003900
mov eax, dword [ebp - 0x14]
cmp edi, dword [ebp - 0xc]
je 0x100039a1
cmp eax, 0x10
jb 0x1000394d
lea ecx, [eax + 1]
mov eax, ebx
cmp ecx, 0x1000
jb 0x10003943
mov ebx, dword [ebx - 4]
add ecx, 0x23
sub eax, ebx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100039ff
push ecx
push ebx
call fcn.10002496
add esp, 8
mov edx, dword [ebp - 0x2c]
cmp edx, 8
jb 0x10003987
mov ecx, dword [ebp - 0x40]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x1000397d
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100039ff
push edx
push ecx
call fcn.10002496
add esp, 8
mov eax, dword [ebp - 4]
mov eax, dword [eax]
mov dword [ebp - 4], eax
cmp eax, dword [ebp - 0x10]
jne 0x100037e0
xor eax, eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov ecx, dword [ebp - 4]
mov esi, dword [ecx + 0x10]
cmp eax, 0x10
jb 0x100039d3
lea ecx, [eax + 1]
mov eax, ebx
cmp ecx, 0x1000
jb 0x100039c9
mov ebx, dword [ebx - 4]
add ecx, 0x23
sub eax, ebx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100039ff
push ecx
push ebx
call fcn.10002496
add esp, 8
mov edx, dword [ebp - 0x2c]
cmp edx, 8
jb 0x10003a0f
mov ecx, dword [ebp - 0x40]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x10003a05
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x10003a05
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.10002496
add esp, 8
pop edi
mov eax, esi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
call fcn.10001600
int3