Function at 0x10001cd0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
push edi
push ebx
push esi
and esp, 0xfffffff0
sub esp, 0xc0
mov ax, 0x8fa6
mov word [esp + 0xa4], 0x7a78
mov dword [esp + 0x9c], 0
mov dword [esp + 0x98], 0x6f072439
mov ecx, dword [esp + 0xa8]
mov edx, dword [esp + 0xac]
mov dword [esp + 0x94], 0xb1e954c
mov esi, dword [esp + 0xb8]
mov word [esp + 0x72], 0xc33f
mov edi, esi
xor edi, 0x272b1f50
mov dword [esp + 0xb8], edi
mov dword [esp + 0x4c], 0
mov dword [esp + 0x48], 0x7c913374
mov bx, word [esp + 0xa6]
mov word [esp + 0x8e], 0x350c
mov di, word [esp + 0x8e]
mov word [esp + 0xa6], bx
cmp ax, di
mov word [esp + 0x42], bx
mov dword [esp + 0x3c], ecx
mov dword [esp + 0x38], edx
mov dword [esp + 0x34], esi
jne 0x10001da9
jmp 0x10001e1b
mov dword [esp + 0xac], 0
mov dword [esp + 0xa8], 0x44081451
mov dword [esp + 0x74], 0
jmp 0x10001e41
lea eax, str.ppeqoinq.dll
mov ecx, esp
mov dword [ecx], str.ppeqoinq.dll
mov ecx, dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
mov dword [esp + 0x30], eax
call ecx
sub esp, 4
mov dl, byte [esp + 0xb7]
xor dl, 0xff
mov byte [esp + 0xb7], dl
cmp eax, 0
jne 0x1000203f
jmp 0x10001eab
mov eax, dword [esp + 0x80]
lea esp, [ebp - 0xc]
pop esi
pop ebx
pop edi
pop ebp
ret
lea eax, str.self.exe
mov ecx, esp
mov dword [ecx], str.self.exe
mov ecx, dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
mov dword [esp + 0x2c], eax
call ecx
sub esp, 4
cmp eax, 0
jne 0x10001e7b
jmp 0x10001f0f
mov eax, 0xb1e954c
mov ecx, dword [esp + 0x34]
imul edx, ecx, 0x7b209f00
sub eax, dword [esp + 0x94]
mov dword [esp + 0xb8], edx
mov dword [esp + 0x44], eax
jmp 0x10002054
mov eax, dword [esp + 0x94]
mov ecx, dword [esp + 0x3c]
mov dword [esp + 0xa8], ecx
mov edx, dword [esp + 0x38]
mov dword [esp + 0xac], edx
mov esi, dword [esp + 0x74]
add eax, 0xf4e16dfd
mov word [esp + 0xa6], 0x78
cmp esi, eax
jne 0x10001fdd
jmp 0x10001e8b
mov dword [esp + 0x80], 1
jmp 0x10002071
mov dword [esp + 0x80], 0
mov ax, word [esp + 0x42]
sub ax, ax
mov word [esp + 0xa6], ax
jmp 0x10002071
mov eax, dword [esp + 0x34]
mov dword [esp + 0xb8], eax
mov ecx, dword [esp + 0x3c]
and ecx, 0x509cee10
mov edx, dword [esp + 0x98]
mov esi, dword [esp + 0x9c]
mov dword [esp + 0xa8], ecx
mov dword [esp + 0xac], 0
mov ecx, dword [esp + 0x48]
mov edi, dword [esp + 0x4c]
xor ecx, edx
xor edi, esi
xor ecx, 0x46e9cf32
or ecx, edi
mov dword [esp + 0x28], ecx
je 0x10001e7b
jmp 0x10001df4
mov dword [esp + 0x80], 0
jmp 0x10002071
mov eax, dword [esp + 0x94]
xor eax, 0xb1e954c
mov dword [esp + 0x24], eax
call fcn.100045e0
mov ecx, dword [esp + 0x24]
cmp eax, ecx
jne 0x10001eff
jmp 0x10001e1b
xor eax, eax
mov cx, word [esp + 0x42]
mov word [esp + 0xa6], cx
mov edx, dword [esp + 0x94]
xor edx, 0xb1e954c
mov esi, dword [esp + 0x34]
add esi, 0xfa7f83f7
mov dword [esp + 0xb8], esi
mov dword [esp + 0x90], 0x61e
mov esi, esp
mov dword [esi + 4], 0xee8
mov dword [esi], 0xbc5d4e
mov esi, dword [sym.imp.USER32.dll_ShowOwnedPopups]
mov dword [esp + 0x20], eax
mov dword [esp + 0x1c], edx
call esi
sub esp, 8
mov dword [esp + 0xac], 0
mov dword [esp + 0xa8], 0
mov edx, esp
mov esi, dword [esp + 0x1c]
mov dword [edx + 0x10], esi
mov dword [edx + 0xc], esi
mov dword [edx + 8], esi
mov dword [edx + 4], 0
mov dword [edx], 0
mov edx, dword [sym.imp.ADVAPI32.dll_RegLoadAppKeyA]
mov dword [esp + 0x18], eax
call edx
sub esp, 0x14
mov edx, dword [esp + 0x44]
add edx, 1
mov dword [esp + 0x44], edx
mov dword [esp + 0x14], eax
jmp 0x10002054
xorps xmm0, xmm0
movaps xmmword [esp + 0x50], xmm0
mov dword [esp + 0x60], 0
mov dword [esp + 0x84], 0x91b
mov dword [esp + 0x7c], 0
mov dword [esp + 0x78], 0
lea eax, [esp + 0x78]
mov dword [esp + 0x88], eax
mov eax, dword [esp + 0x3c]
add eax, 0x39d7b8d3
mov ecx, dword [esp + 0x38]
adc ecx, 0
mov edx, dword [esp + 0x74]
inc edx
mov dword [esp + 0xa8], eax
mov dword [esp + 0xac], ecx
mov dword [esp + 0x74], edx
jmp 0x10001e41
mov eax, dword [esp + 0x94]
add eax, 0xf4e16ab5
mov dword [esp + 0x80], eax
jmp 0x10002071
mov eax, dword [esp + 0x94]
mov ecx, dword [esp + 0x44]
xor eax, 0xb1e96b3
cmp ecx, eax
jl 0x10001f31
jmp 0x10001d86
mov ax, word [esp + 0xa4]
mov byte [esp + 0xb7], 0x77
add ax, 0x994c
mov cx, word [esp + 0x72]
mov dword [esp + 0xb8], 0x3f491b6d
cmp cx, ax
ja 0x10001de5
jmp 0x10001d86