Function at 0x10019653
Capabilities:
Access peb ldr_data
Check os version
Parse pe header
Resolve function by hash
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x30
xor eax, eax
push ebx
push esi
push edi
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x18], eax
call fcn.1001964b
mov esi, eax
mov eax, 0x5a4d
cmp word [esi], ax
jne 0x10019695
mov eax, dword [esi + 0x3c]
lea ecx, [eax - 0x40]
cmp ecx, 0x3bf
ja 0x10019695
cmp dword [eax + esi], 0x4550
je 0x10019698
dec esi
jmp 0x10019674
mov eax, dword fs:[0x30]
mov dword [ebp - 4], esi
mov dword [ebp - 0x30], 2
mov dword [ebp - 0x2c], 1
mov eax, dword [eax + 0xc]
mov ebx, dword [eax + 0x14]
mov dword [ebp - 0x10], ebx
test ebx, ebx
je 0x10019870
mov edx, dword [ebx + 0x28]
xor ecx, ecx
movzx edi, word [ebx + 0x24]
mov al, byte [edx]
ror ecx, 0xd
cmp al, 0x61
movzx eax, al
jb 0x100196d8
add ecx, 0xffffffe0
add ecx, eax
add edi, 0xffff
inc edx
test di, di
jne 0x100196c9
cmp ecx, 0x6a4abc5b
jne 0x100197c1
mov edi, dword [ebx + 0x10]
mov dword [ebp - 8], 4
mov eax, dword [edi + 0x3c]
mov eax, dword [eax + edi + 0x78]
add eax, edi
mov dword [ebp - 0x28], eax
mov esi, dword [eax + 0x20]
mov eax, dword [eax + 0x24]
add esi, edi
add eax, edi
mov dword [ebp - 0xc], eax
mov ebx, eax
mov ecx, dword [esi]
add ecx, edi
xor edx, edx
mov al, byte [ecx]
ror edx, 0xd
movsx eax, al
add edx, eax
inc ecx
mov al, byte [ecx]
test al, al
jne 0x1001971f
cmp edx, 0xec0e4e8e
je 0x1001974e
cmp edx, 0x7c0dfcaa
je 0x1001974e
cmp edx, 0x91afca54
je 0x1001974e
cmp edx, 0xef632f2
jne 0x100197ab
mov eax, dword [ebp - 0x28]
movzx ecx, word [ebx]
mov eax, dword [eax + 0x1c]
lea eax, [eax + ecx*4]
add eax, edi
cmp edx, 0xec0e4e8e
jne 0x1001976d
mov eax, dword [eax]
add eax, edi
mov dword [ebp - 0x1c], eax
jmp 0x1001979e
cmp edx, 0x7c0dfcaa
jne 0x1001977e
mov eax, dword [eax]
add eax, edi
mov dword [ebp - 0x20], eax
jmp 0x1001979e
cmp edx, 0x91afca54
jne 0x1001978f
mov eax, dword [eax]
add eax, edi
mov dword [ebp - 0x14], eax
jmp 0x1001979e
cmp edx, 0xef632f2
jne 0x1001979e
mov eax, dword [eax]
add eax, edi
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 8]
add eax, 0xffff
mov dword [ebp - 8], eax
jmp 0x100197ae
mov eax, dword [ebp - 8]
push 2
pop ecx
add esi, 4
add ebx, ecx
test ax, ax
jne 0x10019717
jmp 0x1001983f
cmp ecx, 0x3cfa685d
jne 0x10019842
mov edx, dword [ebx + 0x10]
mov eax, dword [edx + 0x3c]
mov eax, dword [eax + edx + 0x78]
add eax, edx
mov dword [ebp - 0x28], eax
mov esi, dword [ebp - 0x28]
mov ebx, dword [eax + 0x20]
mov eax, dword [eax + 0x24]
add ebx, edx
add eax, edx
mov dword [ebp - 0xc], eax
xor eax, eax
inc eax
mov dword [ebp - 8], eax
mov ecx, dword [ebx]
add ecx, edx
xor edi, edi
mov al, byte [ecx]
ror edi, 0xd
movsx eax, al
add edi, eax
inc ecx
mov al, byte [ecx]
test al, al
jne 0x100197f6
cmp edi, 0x534c0ab8
jne 0x1001982e
mov eax, dword [ebp - 0xc]
movzx ecx, word [eax]
mov eax, dword [esi + 0x1c]
lea eax, [eax + ecx*4]
mov eax, dword [eax + edx]
add eax, edx
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 8]
add eax, 0xffff
mov dword [ebp - 8], eax
jmp 0x10019831
mov eax, dword [ebp - 8]
push 2
pop ecx
add dword [ebp - 0xc], ecx
add ebx, 4
test ax, ax
jne 0x100197ee
mov ebx, dword [ebp - 0x10]
cmp dword [ebp - 0x1c], 0
je 0x10019860
cmp dword [ebp - 0x20], 0
je 0x10019860
cmp dword [ebp - 0x14], 0
je 0x10019860
cmp dword [ebp - 0x18], 0
je 0x10019860
cmp dword [ebp - 0x24], 0
jne 0x1001986d
mov ebx, dword [ebx]
mov dword [ebp - 0x10], ebx
test ebx, ebx
jne 0x100196c0
mov esi, dword [ebp - 4]
mov ebx, dword [esi + 0x3c]
push 0x40
add ebx, esi
push 0x3000
mov dword [ebp - 0x10], ebx
push dword [ebx + 0x50]
push 0
call dword [ebp - 0x14]
push dword [ebx + 0x50]
mov edi, eax
push edi
mov dword [ebp - 0xc], edi
call dword [ebp - 0x18]
mov edx, dword [ebx + 0x54]
mov ecx, esi
test edx, edx
je 0x100198ae
mov eax, edi
sub eax, esi
mov dword [ebp - 0x28], eax
mov esi, eax
mov al, byte [ecx]
mov byte [esi + ecx], al
inc ecx
dec edx
jne 0x100198a5
movzx edx, word [ebx + 6]
movzx eax, word [ebx + 0x14]
test edx, edx
je 0x100198ef
lea ecx, [eax + 0x2c]
mov eax, dword [ebp - 4]
add ecx, ebx
mov esi, dword [ecx]
dec edx
mov ebx, dword [ecx - 4]
add esi, eax
mov dword [ebp - 0x28], edx
mov edx, dword [ecx - 8]
add edx, edi
test ebx, ebx
je 0x100198e2
mov al, byte [esi]
mov byte [edx], al
inc edx
inc esi
dec ebx
jne 0x100198d6
mov eax, dword [ebp - 4]
mov edx, dword [ebp - 0x28]
add ecx, 0x28
test edx, edx
jne 0x100198c2
mov ebx, dword [ebp - 0x10]
mov esi, dword [ebx + 0x80]
add esi, edi
mov dword [ebp - 0x18], esi
cmp dword [esi], 0
je 0x1001997d
mov eax, dword [esi + 0xc]
add eax, edi
push eax
call dword [ebp - 0x1c]
mov dword [ebp - 0x28], eax
test eax, eax
je 0x1001996f
mov ebx, dword [esi + 0x10]
mov eax, dword [esi]
add ebx, edi
add eax, edi
mov dword [ebp - 0x14], eax
cmp dword [ebx], 0
je 0x1001996f
mov esi, dword [ebp - 0x28]
test eax, eax
je 0x10019949
mov ecx, dword [eax]
test ecx, ecx
jns 0x10019949
mov eax, dword [esi + 0x3c]
movzx ecx, cx
mov eax, dword [eax + esi + 0x78]
sub ecx, dword [eax + esi + 0x10]
mov eax, dword [eax + esi + 0x1c]
lea eax, [eax + ecx*4]
mov eax, dword [eax + esi]
add eax, esi
jmp 0x10019955
mov eax, dword [ebx]
add eax, 2
add eax, edi
push eax
push esi
call dword [ebp - 0x20]
mov dword [ebx], eax
add ebx, 4
mov eax, dword [ebp - 0x14]
test eax, eax
je 0x10019967
add eax, 4
mov dword [ebp - 0x14], eax
cmp dword [ebx], 0
jne 0x10019923
mov esi, dword [ebp - 0x18]
add esi, 0x14
mov dword [ebp - 0x18], esi
cmp dword [esi], 0
jne 0x100198ff
mov ebx, dword [ebp - 0x10]
mov eax, edi
sub eax, dword [ebx + 0x34]
cmp dword [ebx + 0xa4], 0
mov dword [ebp - 0x28], eax
je 0x10019a3c
mov esi, dword [ebx + 0xa0]
add esi, edi
mov dword [ebp - 0x20], esi
lea ecx, [esi + 4]
mov eax, dword [ecx]
mov dword [ebp - 0x1c], ecx
test eax, eax
je 0x10019a3c
mov ebx, dword [ebp - 0x28]
mov edx, dword [esi]
add eax, 0xfffffff8
add edx, edi
shr eax, 1
mov dword [ebp - 0x28], eax
lea eax, [esi + 8]
mov dword [ebp - 0x18], eax
je 0x10019a24
mov edi, dword [ebp - 0x28]
mov esi, eax
movzx ecx, word [esi]
dec edi
mov ax, cx
shr ax, 0xc
cmp ax, 0xa
je 0x100199e0
cmp ax, 3
jne 0x100199eb
and ecx, 0xfff
add dword [ecx + edx], ebx
jmp 0x10019a12
cmp ax, word [ebp - 0x2c]
jne 0x10019a02
and ecx, 0xfff
mov eax, ebx
shr eax, 0x10
add word [ecx + edx], ax
jmp 0x10019a12
cmp ax, word [ebp - 0x30]
jne 0x10019a12
and ecx, 0xfff
add word [ecx + edx], bx
push 2
pop eax
add esi, eax
test edi, edi
jne 0x100199c9
mov edi, dword [ebp - 0xc]
mov esi, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
add esi, dword [ecx]
mov dword [ebp - 0x20], esi
lea ecx, [esi + 4]
mov eax, dword [ecx]
mov dword [ebp - 0x1c], ecx
test eax, eax
jne 0x100199b0
mov ebx, dword [ebp - 0x10]
mov esi, dword [ebx + 0x28]
push 0
push 0
push 0xffffffffffffffff
add esi, edi
call dword [ebp - 0x24]
push dword [ebp + 8]
xor eax, eax
inc eax
push eax
push edi
call esi
pop edi
mov eax, esi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4