Function at 0x1001a561
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x48
push ebx
push esi
push edi
mov dword [ebp - 0x28], edx
call fcn.10019a87
xor esi, esi
mov eax, str.PurchaseBannerBuyPro
mov ecx, esi
inc ecx
lea eax, [eax + 2]
cmp ecx, 0x19a3
jg 0x1001a58e
cmp word [eax], si
jne 0x1001a57b
jmp 0x1001a593
call fcn.10019da5
mov edi, dword [0x1002957c]
mov ebx, edi
xor ebx, 0xe9eedaff
mov dword [ebp - 8], edi
or ebx, 0x49a41afc
push ecx
mov dword [0x10029484], ebx
call fcn.10019cde
mov ebx, dword [0x100294bc]
pop ecx
push 0x31
mov dword [ebp - 4], esi
mov dword [ebp - 0x38], 0xc
mov dword [ebp - 0x34], 0x54
mov dword [ebp - 0x30], 0x16
mov dword [ebp - 0x2c], 0x59a6
pop esi
push 0x61
mov eax, 0x2143
mov edx, str.antivirus
pop ecx
imul eax, eax, 0x20000001
inc edx
add eax, ecx
cmp eax, 0x1d
ja 0x1001a603
movsx ecx, byte [edx]
test ecx, ecx
jne 0x1001a5ec
jmp 0x1001a610
call fcn.1001a046
mov ebx, edi
or ebx, 0xe61fcd95
imul ebx, ebx, 0x7798f96d
call fcn.10019941
mov ecx, dword [ebp - 4]
add esi, dword [ebp + ecx*4 - 0x38]
inc ecx
mov dword [ebp - 4], ecx
cmp ecx, 4
jl 0x1001a5df
mov ebx, dword [0x10029484]
mov dword [ebp - 0x14], esi
xor esi, esi
push 0x40
pop ecx
mov dword [ebp - 0x34], 0x56
mov eax, esi
mov dword [ebp - 0x30], 0x4d
mov dword [ebp - 0x2c], 0x446d
add ecx, dword [ebp + eax*4 - 0x34]
inc eax
cmp eax, 3
jl 0x1001a650
mov dword [ebp - 0x18], ecx
mov edx, 0xe000
mov ecx, edi
mov dword [ebp - 0x34], 0x28
mov dword [ebp - 0x30], 0xd
mov eax, esi
mov dword [ebp - 0x2c], 0xbfcb
lea edi, [ecx + 0x647dbd20]
sub edx, dword [ebp + eax*4 - 0x34]
inc eax
cmp eax, 3
jl 0x1001a681
push 0x37
mov dword [ebp - 0x1c], edx
mov eax, esi
pop edx
mov dword [ebp - 0x30], 0x27
mov dword [ebp - 0x2c], 0xffffffa2
add edx, dword [ebp + eax*4 - 0x30]
inc eax
cmp eax, 2
jl 0x1001a6a1
imul eax, ecx, 0x94796796
push 0x50
mov dword [ebp - 0x20], edx
mov edx, str.PurchaseBannerBuyPro
mov dword [ebp - 4], 9
mov dword [ebp - 0x10], eax
pop eax
add eax, 0xffffffd0
cmp ax, word [ebp - 4]
ja 0x1001a6e2
mov ecx, dword [ebp - 8]
add edx, 2
movzx eax, word [edx]
mov dword [ebp - 0xc], eax
test ax, ax
jne 0x1001a6c6
jmp 0x1001a6f1
mov ebx, dword [ebp - 0x10]
or ebx, 0x65699833
mov dword [0x10029484], ebx
or edi, 0x816c9094
mov dword [ebp - 0x34], 5
mov dword [0x100294bc], edi
mov edx, esi
mov dword [ebp - 0x30], 6
mov eax, esi
mov dword [ebp - 0x2c], 0xfffffff5
sub edx, dword [ebp + eax*4 - 0x34]
inc eax
cmp eax, 3
jl 0x1001a716
mov dword [ebp - 0xc], edx
mov eax, esi
mov edx, esi
mov dword [ebp - 0x34], 0x3c
mov dword [ebp - 0x30], 3
mov dword [ebp - 0x2c], 0xffffffc1
sub edx, dword [ebp + eax*4 - 0x34]
inc eax
cmp eax, 3
jl 0x1001a73c
mov dword [ebp - 0x30], 0x4b
xorps xmm1, xmm1
mov dword [ebp - 0x2c], 0xffffff72
xorps xmm2, xmm2
mov dword [ebp - 0x38], 0x19
mov eax, esi
mov dword [ebp - 0x34], 0x2a
movups xmm0, xmmword [ebp - 0x38]
push 0x2f
mov dword [ebp - 0x10], edx
psubd xmm1, xmm0
mov dword [ebp - 0x30], 5
movaps xmm0, xmm1
mov dword [ebp - 0x2c], 0xffffffcc
psrldq xmm0, 8
paddd xmm1, xmm0
movups xmm0, xmm1
psrldq xmm0, 4
paddd xmm1, xmm0
movd dword [ebp - 0x24], xmm1
pop edx
add edx, dword [ebp + eax*4 - 0x30]
inc eax
cmp eax, 2
jl 0x1001a7a3
mov dword [ebp - 0x38], 0x32
lea eax, [ebx - 0xfc9affe]
mov dword [ebp - 0x34], 0x1a
movaps xmm1, xmm2
mov dword [ebp - 0x30], 0x1e
or ecx, 0x8248270b
mov dword [ebp - 0x2c], 0xffffff96
movups xmm0, xmmword [ebp - 0x38]
mov dword [ebp - 0x34], 0x45
mov dword [ebp - 0x30], 0x21
psubd xmm1, xmm0
mov dword [ebp - 0x2c], 0xffffff44
movaps xmm0, xmm1
mov dword [ebp - 0x38], 0x56
psrldq xmm0, 8
paddd xmm1, xmm0
mov dword [ebp - 8], edx
movups xmm0, xmm1
mov dword [0x1002957c], eax
psrldq xmm0, 4
mov eax, esi
paddd xmm1, xmm0
mov dword [0x100293cc], ecx
movups xmm0, xmmword [ebp - 0x38]
push 0x5b
pop edx
psubd xmm2, xmm0
mov dword [ebp - 0x34], 0x3b
movaps xmm0, xmm2
mov dword [ebp - 0x30], 0x32
psrldq xmm0, 8
paddd xmm2, xmm0
mov dword [ebp - 0x2c], 0xffffff38
movups xmm0, xmm2
psrldq xmm0, 4
paddd xmm2, xmm0
add edx, dword [ebp + eax*4 - 0x34]
inc eax
cmp eax, 3
jl 0x1001a85c
mov dword [ebp - 0x2c], edx
mov edx, dword [0x100296e0]
movzx eax, word [edx]
cmp eax, dword [ebp - 0x14]
je 0x1001a943
mov eax, esi
inc eax
cmp eax, 0x2242
jg 0x1001a890
cmp byte [eax + str.antivirus], 0
jne 0x1001a87d
jmp 0x1001a895
call fcn.10019fc2
sub dword [0x1002957c], 0x2fb8dbac
call fcn.10019819
push 0x57
mov ecx, 0x185e
mov eax, str.WINDOW_LEFT
pop edx
add ecx, edx
inc eax
cmp ecx, 0x102f
ja 0x1001a8c5
movsx edx, byte [eax]
test edx, edx
jne 0x1001a8b1
jmp 0x1001a8d1
sub edi, 0x5211e4db
mov dword [0x100294bc], edi
lea eax, [edi + 0x61990f0f]
mov ecx, str.PurchaseBannerBuyPro
push 0x50
mov dword [0x10029484], eax
mov eax, 0xa1d
pop edx
add eax, edx
lea ecx, [ecx + 2]
cmp eax, 0x17e0
ja 0x1001a8fe
movzx edx, word [ecx]
test edx, edx
jne 0x1001a8e9
jmp 0x1001a90a
imul edi, edi, 0x49e9e20b
mov dword [0x100294bc], edi
and edi, 0xa765b18c
mov dword [0x100293cc], edi
call fcn.1001949b
mov dword [ebp - 0x34], 0x3c
mov eax, esi
mov dword [ebp - 0x30], 0x27
mov dword [ebp - 0x2c], 0xffffff9d
sub esi, dword [ebp + eax*4 - 0x34]
inc eax
cmp eax, 3
jl 0x1001a932
mov eax, esi
jmp 0x1001aaef
mov edi, dword [edx + 0x3c]
mov eax, dword [ebp - 0x18]
add edi, edx
cmp dword [edi], eax
je 0x1001a976
push 0x45
mov dword [ebp - 0x34], 0x32
mov dword [ebp - 0x30], 0x35
mov dword [ebp - 0x2c], 0xffffff54
pop eax
add eax, dword [ebp + esi*4 - 0x34]
inc esi
cmp esi, 3
jl 0x1001a967
jmp 0x1001aaef
movzx eax, word [edi + 0x16]
and eax, dword [ebp - 0x1c]
cmp eax, dword [ebp - 0x20]
je 0x1001aa1c
mov edx, dword [ebp - 0xc]
mov eax, dword [ebp - 0x10]
cmp dword [edi + edx*8 + 0x78], eax
je 0x1001aa1c
mov edx, dword [ebp - 0x24]
mov eax, dword [ebp - 8]
cmp dword [edi + edx*8 + 0x7c], eax
mov edx, dword [0x100296e0]
je 0x1001aa1c
movd eax, xmm1
movd ebx, xmm2
mov edi, dword [edi + eax*8 + 0x78]
add edi, edx
mov eax, dword [edi + 0x1c]
mov esi, dword [edi + 0x20]
add esi, edx
mov dword [ebp - 0x24], esi
lea ecx, [eax + edx]
mov dword [ebp - 0x1c], ecx
mov ecx, dword [edi + 0x24]
add ecx, edx
mov dword [ebp - 0x20], ecx
cmp ebx, eax
jae 0x1001a9fc
mov esi, dword [esi + ebx*4]
add esi, edx
mov ecx, esi
call fcn.10012ed2
mov edx, eax
mov ecx, esi
call fcn.1001a33f
cmp eax, dword [ebp - 0x28]
je 0x1001aa04
mov edx, dword [0x100296e0]
inc ebx
mov esi, dword [ebp - 0x24]
cmp ebx, dword [edi + 0x1c]
jb 0x1001a9d3
mov eax, dword [ebp - 0x2c]
jmp 0x1001aaef
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
movzx eax, word [eax + ebx*2]
mov eax, dword [ecx + eax*4]
add eax, dword [0x100296e0]
jmp 0x1001aaef
lea eax, [ebx - 0xfc9affe]
mov dword [ebp - 0xc], esi
imul eax, eax, 0x5f8ee6fe
mov edx, esi
mov dword [ebp - 0x48], 0x5d
mov dword [ebp - 0x44], 0x3b
mov dword [ebp - 0x40], 0x42
mov dword [ebp - 0x3c], 0xffffff26
mov dword [ebp - 8], eax
mov eax, esi
mov edi, str.OCTET_STRING
inc eax
lea edi, [edi + 2]
cmp eax, 0x11d9
jl 0x1001aa65
cmp word [edi], si
jne 0x1001aa53
jmp 0x1001aa71
mov edi, dword [ebp - 8]
mov ebx, edi
cmp eax, 0x1083
jle 0x1001aa7f
or ecx, 0xe4d449e7
mov dword [0x100293cc], ecx
jmp 0x1001aa88
add edi, 0x711df9f0
mov dword [ebp - 8], edi
mov eax, ecx
mov edi, str.OCTET_STRING
and eax, 0x2002002c
push 0x4f
mov dword [0x100294bc], eax
pop eax
add eax, 0xffffffd0
cmp ax, word [ebp - 4]
ja 0x1001aab8
add edi, 2
push 0
pop esi
movzx eax, word [edi]
mov dword [ebp - 0x2c], eax
test ax, ax
jne 0x1001aa9c
jmp 0x1001aac3
imul eax, ebx, 0x53c20301
mov dword [0x100294bc], eax
mov eax, dword [ebp - 0xc]
lea ebx, [ecx + 0x28bcf3f1]
sub eax, dword [ebp + edx*4 - 0x48]
inc edx
mov dword [ebp - 0xc], eax
cmp edx, 4
jl 0x1001aa4c
add ecx, 0x13fe4fbe
mov dword [0x10029484], ebx
mov dword [0x1002957c], ecx
pop edi
pop esi
pop ebx
leave
ret