Function at 0x100055f0
Capabilities:
Access peb ldr_data
Encode data using xor
Get process heap force flags
Hash data using fnv

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x44
mov eax, dword fs:[0x18]
mov dword [ebp - 0xc], ecx
push ebx
push esi
mov eax, dword [eax + 0x30]
push edi
mov ecx, dword [eax + 0xc]
mov eax, dword [ecx + 0x14]
add ecx, 0x14
mov dword [ebp - 0x10], ecx
mov dword [ebp - 4], eax
cmp eax, ecx
je 0x100057d8
nop dword [eax]
mov edx, dword [eax + 0x28]
xor eax, eax
mov ecx, edx
mov dword [ebp - 0x30], 0
mov dword [ebp - 0x2c], 7
mov word [ebp - 0x40], ax
lea esi, [ecx + 2]
nop dword [eax]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x10005640
sub ecx, esi
sar ecx, 1
push ecx
push edx
lea ecx, [ebp - 0x40]
call fcn.100013f0
cmp dword [ebp - 0x2c], 8
lea ecx, [ebp - 0x40]
mov eax, dword [ebp - 0x30]
lea ebx, [ebp - 0x40]
cmovae ecx, dword [ebp - 0x40]
cmovae ebx, dword [ebp - 0x40]
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0xf
lea esi, [ecx + eax*2]
mov byte [ebp - 0x28], 0
mov eax, esi
lea ecx, [ebp - 0x28]
sub eax, ebx
sar eax, 1
push eax
call fcn.10001950
push dword [ebp - 0x10]
lea ecx, [ebp - 0x28]
push esi
push ebx
call fcn.10001ab0
mov edx, dword [ebp - 0x14]
lea eax, [ebp - 0x28]
mov ebx, dword [ebp - 0x28]
lea ecx, [ebp - 0x28]
mov esi, dword [ebp - 0x18]
lea edi, [ebp - 0x28]
cmp edx, 0x10
cmovae eax, ebx
cmovae ecx, ebx
add esi, eax
cmp edx, 0x10
cmovae edi, ebx
cmp edi, esi
je 0x100056eb
sub ecx, edi
mov ebx, ecx
nop word [eax + eax]
movsx eax, byte [edi]
push eax
call dword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_tolower]
mov byte [edi + ebx], al
add esp, 4
inc edi
cmp edi, esi
jne 0x100056d0
mov ebx, dword [ebp - 0x28]
mov edx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x18]
cmp eax, 4
jbe 0x10005711
lea ecx, [eax - 4]
cmp eax, ecx
jb 0x10005858
cmp edx, 0x10
mov dword [ebp - 0x18], ecx
lea eax, [ebp - 0x28]
cmovae eax, ebx
mov byte [eax + ecx], 0
mov ebx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x14]
lea esi, [ebp - 0x28]
cmp eax, 0x10
mov edi, 0x811c9dc5
mov ecx, 1
cmovae esi, ebx
cmp byte [esi + 1], 0
je 0x10005737
nop dword [eax]
inc ecx
cmp byte [ecx + esi], 0
jne 0x10005730
xor edx, edx
test ecx, ecx
je 0x10005754
nop dword [eax]
movsx eax, byte [edx + esi]
inc edx
xor eax, edi
imul edi, eax, 0x1000193
cmp edx, ecx
jb 0x10005740
mov eax, dword [ebp - 0x14]
cmp edi, dword [ebp - 0xc]
je 0x100057e1
cmp eax, 0x10
jb 0x1000578d
lea ecx, [eax + 1]
mov eax, ebx
cmp ecx, 0x1000
jb 0x10005783
mov ebx, dword [ebx - 4]
add ecx, 0x23
sub eax, ebx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1000583f
push ecx
push ebx
call fcn.100041bb
add esp, 8
mov edx, dword [ebp - 0x2c]
cmp edx, 8
jb 0x100057c7
mov ecx, dword [ebp - 0x40]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x100057bd
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1000583f
push edx
push ecx
call fcn.100041bb
add esp, 8
mov eax, dword [ebp - 4]
mov eax, dword [eax]
mov dword [ebp - 4], eax
cmp eax, dword [ebp - 0x10]
jne 0x10005620
xor eax, eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov ecx, dword [ebp - 4]
mov esi, dword [ecx + 0x10]
cmp eax, 0x10
jb 0x10005813
lea ecx, [eax + 1]
mov eax, ebx
cmp ecx, 0x1000
jb 0x10005809
mov ebx, dword [ebx - 4]
add ecx, 0x23
sub eax, ebx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1000583f
push ecx
push ebx
call fcn.100041bb
add esp, 8
mov edx, dword [ebp - 0x2c]
cmp edx, 8
jb 0x1000584f
mov ecx, dword [ebp - 0x40]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x10005845
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x10005845
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.100041bb
add esp, 8
pop edi
mov eax, esi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
call fcn.10001930
int3