Function at 0x10001ab0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
push edi
push esi
and esp, 0xfffffff0
sub esp, 0x90
lea eax, str.ppeqoinq.dll
mov dword [esp + 0x84], 0x10378e84
mov byte [esp + 0x6f], 0xc6
mov ecx, dword [esp + 0x88]
imul edx, ecx, 0x8bff3b8
mov dword [esp + 0x88], edx
mov edx, esp
mov dword [edx], str.ppeqoinq.dll
mov edx, dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
mov dword [esp + 0x30], eax
mov dword [esp + 0x2c], ecx
call edx
sub esp, 4
mov ecx, dword [esp + 0x2c]
xor ecx, 0xffffffff
mov dword [esp + 0x88], ecx
cmp eax, 0
je 0x10001b40
mov dword [esp + 0x34], 1
jmp 0x10001bcc
mov al, 0x1c
mov ecx, dword [esp + 0x78]
xor ecx, 0x7f84f106
mov dl, byte [esp + 0x6f]
mov dword [esp + 0x78], ecx
cmp al, dl
jne 0x10001b6c
jmp 0x10001c02
lea eax, str.self.exe
mov ecx, esp
mov dword [ecx], str.self.exe
mov ecx, dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
mov dword [esp + 0x28], eax
call ecx
sub esp, 4
mov byte [esp + 0x8f], 0x70
cmp eax, 0
jne 0x10001be3
jmp 0x10001ba9
mov eax, dword [esp + 0x84]
xor eax, 0x10378e84
mov dword [esp + 0x3c], eax
jmp 0x10001bd7
mov al, byte [esp + 0x8f]
xor al, byte [esp + 0x8f]
mov ecx, dword [esp + 0x84]
mov byte [esp + 0x8f], al
xor ecx, 0x10378e84
mov dword [esp + 0x68], ecx
jmp 0x10001ce2
mov ax, word [esp + 0x82]
xor ax, 0x8c1d
mov word [esp + 0x82], ax
call fcn.100042b0
cmp eax, 0
jne 0x10001c17
jmp 0x10001b23
mov eax, dword [esp + 0x34]
lea esp, [ebp - 8]
pop esi
pop edi
pop ebp
ret
cmp dword [esp + 0x3c], 0x3ff
jl 0x10001c29
jmp 0x10001b7e
mov al, byte [esp + 0x8f]
or al, byte [esp + 0x8f]
mov byte [esp + 0x8f], al
mov dword [esp + 0x34], 1
jmp 0x10001bcc
mov eax, dword [esp + 0x2c]
mov dword [esp + 0x88], eax
mov dword [esp + 0x34], 0
jmp 0x10001bcc
mov eax, dword [esp + 0x84]
add eax, 0xefc8717c
mov dword [esp + 0x34], eax
jmp 0x10001bcc
mov eax, 0xbc5d4e
mov ecx, 0xee8
mov dword [esp + 0x70], 0x61e
mov edx, esp
mov dword [edx + 4], 0xee8
mov dword [edx], 0xbc5d4e
mov edx, dword [sym.imp.USER32.dll_ShowOwnedPopups]
mov dword [esp + 0x24], eax
mov dword [esp + 0x20], ecx
call edx
sub esp, 8
xor ecx, ecx
mov edx, dword [esp + 0x2c]
mov dword [esp + 0x88], edx
mov esi, esp
mov dword [esi + 0x10], 0
mov dword [esi + 0xc], 0
mov dword [esi + 8], 0
mov dword [esi + 4], 0
mov dword [esi], 0
mov esi, dword [sym.imp.ADVAPI32.dll_RegLoadAppKeyA]
mov dword [esp + 0x1c], eax
mov dword [esp + 0x18], ecx
call esi
sub esp, 0x14
mov di, word [esp + 0x82]
add di, 0x9d71
mov ecx, dword [esp + 0x3c]
add ecx, 1
mov word [esp + 0x82], di
mov dword [esp + 0x3c], ecx
mov di, word [esp + 0x82]
or di, word [esp + 0x82]
mov word [esp + 0x82], di
mov dword [esp + 0x14], eax
jmp 0x10001bd7
cmp dword [esp + 0x68], 0x349
je 0x10001c02
xorps xmm0, xmm0
movaps xmmword [esp + 0x40], xmm0
mov dword [esp + 0x50], 0
mov dword [esp + 0x38], 0x91b
mov al, byte [esp + 0x8f]
or al, 0x49
mov byte [esp + 0x8f], al
mov dword [esp + 0x64], 0
mov dword [esp + 0x60], 0
lea ecx, [esp + 0x60]
mov dword [esp + 0x74], ecx
mov ecx, dword [esp + 0x78]
mov edx, dword [esp + 0x7c]
mov esi, ecx
imul esi, edx
mov eax, ecx
mul ecx
add edx, esi
add edx, esi
mov ecx, dword [esp + 0x68]
inc ecx
mov dword [esp + 0x78], eax
mov dword [esp + 0x7c], edx
mov dword [esp + 0x68], ecx
mov di, word [esp + 0x82]
sub di, word [esp + 0x82]
mov word [esp + 0x82], di
jmp 0x10001ce2