Function at 0x1001946b
Capabilities:
Parse pe header

Disassembly:
dec edx
inc ebx
push ecx
imul edi, dword [eax], 0x63
inc edi
je 0x100194de
dec edi
insb byte es:[edi], dx
dec esi
xor byte [ecx + 0x58], bl
dec edx
xor byte [eax + 0x6a], dl
imul edi, dword [ecx + 0x4e], 0x7a
arpl word [edx], si
dec edi
push esp
inc ecx
ja 0x100194d6
inc esp
ja 0x10019502
arpl word [edi + 0x74], ax
push 0x4f
insb byte es:[edi], dx
dec esi
xor byte [ecx + 0x58], bl
dec edx
xor byte [eax + 0x67], dl
xor byte [ebx + 0x43], cl
push ecx
imul ecx, dword [edx + 0x50], 0x48
inc edx
jb 0x100194fe
jp 0x10019517
inc esi
bound ebp, qword [ebp + 0x51]
sub ecx, dword [edi + 0x54]
dec ecx
xor ecx, dword [esi + 0x7a]
pop ecx
xor eax, 0x356b444d
push eax
inc ebx
cmp dword [edi + 0x61], esi
xor cl, byte [ebp + 0x36]
push edx
push edi
xor eax, 0x3067506b
dec ebx
inc ebx
push ecx
imul edi, dword [eax], 0x4c
xor eax, dword [edx + 0x72]
pop ecx
jp 0x10019543
dec esp
pop edx
pop eax
insb byte es:[edi], dx
push ebx
pop ecx
push edi
xor eax, 0x34545a6e
cmp byte [ebx + 0x47], ah
je 0x1001954e
xor al, 0x38
arpl word [edi + 0x74], ax
push 0x4f
dec edi
imul esi, dword [esp + ebp*2 + 0x65], 0x56
dec edx
push 0x6c646d62
push eax
xor byte [bp + di + 0x43], cl
push ecx
imul ecx, dword [edx + 0x50], 0x48
inc edx
jb 0x10019556
jp 0x1001956f
jo 0x10019553
push ebx
pop edx
push edi
pop edx
inc edx
pop ecx
xor edx, dword [edx + 0x44]
bound esi, qword [edx]
xor eax, 0x6457616d
dec edx
pop edx
inc esp
xor eax, 0x51475a37
js 0x10019567
inc esp
inc ebp
jp 0x1001956b
inc edi
inc ebp
je 0x1001957b
inc esp
push ebp
xor bl, byte [ecx + 0x79]
xor byte [eax], dh
pop ecx
insd dword es:[edi], dx
dec ebp
ja 0x10019579
push edi
inc ebp
jns 0x1001958b
push esp
imul esi, dword [ebp + ecx*2 + 0x54], 0x52
push 0x4e
inc esp
pop ecx
jns 0x10019596
push 0x51
jns 0x10019590
push esp
push esi
imul esp, dword [esi + 0x54], 0x47637677
je 0x100195b6
dec edi
insb byte es:[edi], dx
dec edx
insb byte es:[edi], dx
pop edx
imul eax, dword [esi + 0x6a], 0x64
push 0x64
inc ebp
dec esi
jbe 0x100195bb
insd dword es:[edi], dx
pop edx
jo 0x100195b7
xor byte [ebx + ebp*2 + 0x50], ch
xor byte [bp + di + 0x43], cl
push ecx
imul ecx, dword [edx + 0x50], 0x48
dec edx
push eax
dec eax
inc edx
jb 0x100195c6
jp 0x100195df
push ecx
pop ecx
pop eax
dec edx
xor byte [esi + ebp*2 + 0x56], dl
je 0x100195d2
insd dword es:[edi], dx
push esi
jns 0x100195cd
insb byte es:[edi], dx
js 0x100195cf
push ebx
xor byte [edx + 0x4f], bh
inc esp
xor ecx, dword [bp + 0x7a]
ja 0x10019602
jbe 0x100195f0
arpl word [edi + 0x74], ax
push 0x4f
inc edi
je 0x100195fa
dec edi
insb byte es:[edi], dx
inc edx
push 0x4f526e63
push edx
dec edi
push edi
xor dword [ecx + 0x5a], ebp
pop eax
dec ecx
sub eax, dword [ecx + edx*2 + 0x6f]
dec edx
inc ebx
push ecx
imul edi, dword [eax], 0x63
inc edi
je 0x10019616
dec edi
imul edx, dword [esi + 0x31], 0x62
inc edi
inc esi
push ebp
pop eax
inc edx
insb byte es:[edi], dx
push eax
imul edi, dword [ecx], 0x46
inc esi
push esp
push esp
ja 0x10019636
arpl word [edi + 0x74], ax
push 0x4f
imul edx, dword [esi + 0x31], 0x62
inc edi
push esi
xor dword [edx + 0x47], esp
inc esi
push ebp
pop eax
pop eax
inc edx
insb byte es:[edi], dx
push eax
xor byte [bp + di + 0x43], cl
xor byte [ebx + 0x43], cl
push ecx
imul ecx, dword [edx + 0x50], 0x48
inc edx
jb 0x10019636
jp 0x1001964f
dec edx
arpl word [ecx], si
pop edx
push 0x6b6c4762
push eax
outsb dx, byte [esi]
push edx
jns 0x10019651
push edi
push ebp
cmp byte [ebx + esi + 0x42], cl
jb 0x1001964e
dec esp
xor eax, dword [edx + 0x72]
pop ecx
jp 0x10019667
dec edx
arpl word [ecx], si
pop edx
push 0x6b6c4762
push eax
xor byte [bp + di + 0x43], cl
xor byte [ebx + 0x43], cl
push ecx
imul ecx, dword [edx + 0x50], 0x48
inc edx
jb 0x10019666
jp 0x1001967f
push esp
inc edi
inc esi
jns 0x10019679
inc esp
xor al, 0x78
dec esi
push esp
jp 0x1001966a
jp 0x1001966c
ja 0x1001966e
inc esp
ja 0x1001969a
arpl word [edi + 0x74], ax
push 0x4f
insb byte es:[edi], dx
dec esi
xor byte [ecx + 0x58], bl
dec edx
xor byte [eax + 0x67], dl
xor byte [ebx + 0x43], cl
push ecx
imul ecx, dword [edx + 0x50], 0x48
inc edx
jb 0x10019696
jp 0x100196af
inc esi
bound ebp, qword [ebp + 0x51]
sub ecx, dword [ebp + 0x54]
push ebp
xor al, 0x4d
jp 0x10019698
jp 0x1001969c
push esp
imul edi, dword [eax], 0x4c
cmp byte [ebx + esi + 0x42], cl
jb 0x100196ae
xor eax, dword [edx + 0x72]
pop ecx
jp 0x100196c7
inc esi
bound ebp, qword [ebp + 0x51]
sub eax, dword [ecx + edx*2 + 0x6f]
dec edx
inc ebx
push esp
ja 0x100196da
arpl word [edi + 0x74], ax
je 0x100196d2
push 0x4f
dec edi
imul esi, dword [esp + ebp*2 + 0x65], 0x56
je 0x100196d8
push esi
dec edx
push 0x6c646d62
push eax
push 0x78
ja 0x100196da
xor cl, byte [ebp + 0x36]
push ebx
xor dl, byte [esi + 0x35]
push ebp
insd dword es:[edi], dx
inc esi
jne 0x100196df
xor eax, 0x75466d55
pop edx
xor dl, byte [ebp + 0x2b]
inc esi
push 0x64
inc ebp
pop ecx
push ebp
js 0x1001972f
inc esp
dec ebp
push edi
dec edx
ja 0x10019742
xor dword [edx + 0x57], esp
dec edx
dec ebp
push edx