Function at 0x1001b5e7
Capabilities:
Parse pe header
Resolve function by parsing pe exports

Disassembly:
imul dword [edx + 3]
jmp 0x1001075e
je 0x1001009c
jne 0x1001008f
les sp, [ecx - 0x2f]
jge 0x10010077
pop edi
pop esi
mov ax, 0xa
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp + 0x20]
mov edx, dword [ebp + 0x18]
jmp 0x100100a3
push eax
lea ecx, [ebp - 0x120]
mov esi, esi
push 1
push ecx
mov edx, edx
push edx
call fcn.1003ed2c
add esp, 0x10
stc
jb 0x100100c5
test eax, 0x12820f69
inc ecx
add al, byte [eax]
jb 0x100341dd
fsubr dword [ecx]
xchg bl, ah
xchg ah, bl
not word [edi]
xchg cl, ah
xchg ah, cl
jmp dword [esi]
push esi
call fcn.10043909
xchg dh, cl
xchg cl, dh
push 0x55
push esi
call fcn.100252a3
mov al, byte [esi + 0xba]
add esi, 0
jno 0x10010782
adc esi, dword [edi + 0x6c]
push esi
stc
adc cl, byte [edi]
sub dword [ebp + 0x4f], 0xfada0001
jno 0x100256f5
invalid
mov eax, ecx
call fcn.1003080c
add byte [esi], 0x66
mov edx, dword [eax + 0x2e]
mov word [ecx + 2], dx
mov dx, word [eax + 0x28]
mov word [ecx + 4], dx
shl ebp, 0x20
mov dx, word [eax + 0x2a]
xchg ch, dl
xchg dl, ch
mov word [ecx + 6], dx
shl bl, 0x20
mov edx, dword [ebp + 0x14]
dec word [eax + 0x18]
mov si, word [eax + 0x18]
mov edx, dword [edx]
test byte [edx + 0x4d], 1
jb 0x1001b593
lea ecx, [ecx]
jne 0x10010807
je 0x100107d9
push cs
push ebx
mov cl, byte [edx - 0x57fe3b0]
add cl, byte [eax + 0x17820ff6]
add byte [eax], al
add byte [ebx + 3], dh
mov dl, byte [eax + 0x1c]
cmp dl, 2
mov dh, dh
jb 0x100107fe
jae 0x100107ec
push 0xfa8095bb
xor al, 0xf
xchg byte [edx], dl
add byte [eax], al
add byte [edi + 5], dh
cmp dl, 0x34
jbe 0x10010807
ja 0x100107fc
jb 0x100107d9
sal byte [ecx + 0x66ed889a], 1
mov eax, 0x5d5e0007
mov ch, ch
mov ax, 7
pop esi
pop ebp
ret
add ebp, 0xc9f934d7
sub ebp, 0xc9f934d7
test si, si
jb 0x1001514f
je 0x1003adfb
jne 0x1001082a
cld
inc eax
invalid
add di, 0
cmp si, 0x1fff
shl bx, 0x20
ja 0x1003adfb
jbe 0x10010843
mov eax, dword [0xc18100ec]
or byte [eax], al
add byte [eax], al
add ecx, 8
test si, si
jb 0x1001ceea
mov dword [ebp + 8], ecx
jbe 0x1003adfb
xchg edi, eax
xchg edi, eax
ja 0x10010862
outsd dx, dword [esi]
ror dl, cl
shl si, 0x20
mov esi, dword [ebp + 0xc]
mov ax, ax
push ebx
shr dx, 0x40
jmp 0x10010873
push edi
shr eax, 0x40
jmp 0x10014c69
enter 0xffffffffffff92fb, 0xffffffffffffff92
mov eax, dword [esi + 4]
mov ebx, dword [esi + 8]
jmp 0x1002f6c8
xor eax, 0xde876603
xchg bx, si
lea edx, [edx]
mov cl, byte [ebp + 0xc]
mov bl, bl
shr bx, 0x40
mov dx, word [ebp + 0x10]
push eax
shr ecx, 0x40
mov di, di
push esi
jno 0x10028b2f
jo 0x10012939
ret 0xbbc4
jo 0x10028b2f
and eax, 0x5850527a
call fcn.1002c149
add esp, 8
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
shr ah, 0x40
mov dx, word [ecx]
mov dword [ebp + 0x10], eax
shr esi, 0x40
mov word [eax + 0x28], dx
mov dx, word [ecx + 2]
mov word [eax + 0x2a], dx
mov dx, word [ecx + 4]
mov word [eax + 0x2c], dx
mov cx, word [ecx + 6]
lea edx, [eax + 2]
mov word [eax + 0x2e], cx
mov dword [ebp + 0x14], edx
mov dword [ebp + 0xc], 6
mov dx, word [eax + 0x2c]
xor ebx, ebx
jb 0x100128fd
mov bl, dh
mov cx, word [eax + 0x2e]
xor bl, dl
jb 0x1001290c
mov word [eax + 0x20], dx
movzx di, bl
movzx dx, dl
shl edi, 8
cmp si, si
add edi, edx
xor edx, edx
jb 0x1002f6d7
mov dl, ch
mov bl, cl
clc
xor dl, bl
jb 0x1002f6de
mov word [eax + 0x22], cx
xchg ah, ch
xchg ch, ah
movzx dx, dl
and ecx, 0xff00
jb 0x1004a76e
jne 0x1003434d
je 0x10014d07
daa
shl dword [ecx + ecx*4 + 4], 0xaa
je 0x1003434d
invalid
mov eax, dword [esi + 4]
shl ax, 0x20
mov ebx, dword [esi + 8]
mov ax, word [ebp + eax]
lea ecx, [ecx]
lea esi, [esi + 0xc]
shl di, 0x20
mov word [ebx], ax
jmp dword [esi]
pushfd
add ecx, dword [eax + 0x4468bc0]
mov ebx, ebx
mov ebx, dword [esi + 8]
shr eax, 0x40
mov eax, dword [ebp + eax]
xchg ecx, edi
xchg edi, ecx
lea esi, [esi + 0xc]
call fcn.1001ced4
shr byte [ebx], cl
jmp dword [esi]
jmp 0x1001fff5
mov edx, edi
jne 0x1002e831
je 0x100160a2
popfd
inc esi
je 0x1002e831
invalid
test ecx, 0x1000
jb 0x1004bc39
mov esi, esi
jne 0x10020463
je 0x10017669
aas
sbb edi, dword [edx + 0x47]
shr bh, 0x40
mov ax, ax
jmp loc.1003d8c9
sbb dword [edi + 0x66], ebx
mov ebx, ebx
js 0x10015132
shr esi, 0x40
jns 0x1001b5a8
int1
inc esp
hlt
jns 0x10015132
pushal
add byte [edx], 0x10
add dword [eax], eax
add byte [eax], al
cmp byte [eax], al
add byte [eax], al
inc esi
popfd
add dl, byte [eax]
movsd dword es:[edi], dword [esi]
sbb eax, 0x32251001
cmp bl, 1
shr ebp, 0x40
mov byte [esi + 0xba], bl
js 0x1001e831
shl si, 0x20
jns 0x1001b5df
pop esi
invalid
jns 0x1001e831
xor byte [eax], 0x8d
and al, 4
mov eax, edx
test ah, 0x19
jne 0x1004cf8f
sbb dword [ebx], eax
add byte [esi + eax + 0x71], dh
stc
je 0x1001b5fe
jno 0x1001b5f3
popal
aam 0xf3
jno 0x1001b60e
je 0x1004cf8f
test byte [ebx - 0x25fffce7], cl
wait
add esi, 8
ficomp dword [ebx + 0x8c681]
add byte [eax], al
shl eax, cl
add ebx, eax
test ecx, 0x80000000
jb 0x100281ec
jne 0x10014723
je 0x1001b629
cmpsb byte [esi], byte es:[edi]
cld
jecxz 0x1001b5b4
xchg esp, eax
mov ecx, dword [esi]
add esi, 4
js 0x1001764f
mov ax, ax
jns 0x1001b641
add ecx, edi
cmp dword [ebx], esp
test byte [edi], 0x89
or al, al
invalid
jns 0x1001764f
fldl2e
xor al, 0x10
lea ecx, [ebp + 1]
adc byte [eax], bh
add byte [eax], al
add byte [eax], al
add byte [eax], al
xchg ebx, eax
aam 2
adc byte [edi], cl
add byte [eax], al
add byte [eax], al
add byte [eax], al
cli
and al, byte [edx]
adc byte [eax], ah
add byte [eax], al
add byte [eax], bh
add byte [eax], al
add byte [0x110030a], cl
add byte [eax], al
add byte [eax], bh
add byte [eax], al
add byte [esi], cl
add al, 0x10
cmp byte [eax], al
add byte [eax], al
inc eax
add byte [eax], al
add al, cl
adc dword [ebx], eax
adc bl, bh
mov cl, 4
adc byte [edi + eax*2], cl
add dword [eax], edx
add byte [ecx], ah
cmp byte [eax + eax], 0
add byte [eax], al
and dword [eax], eax
add byte [eax + eax], cl
add byte [eax], al
add byte [ecx], dl
add byte [eax], al
add byte [ecx], al
add byte [eax], bh
add byte [eax], al
add dl, bh
test eax, 0xc34d1002
add edx, dword [eax]
jnp 0x1001cf5a
add byte [eax], al
cmp dword [eax], eax
add byte [eax], al
dec ebx
leave
add dword [eax], edx
inc eax
add byte [eax], al
add byte [eax], bh
add byte [eax], al
add byte [esi + 0x7b], ch
add dword [eax], edx
add byte [eax], al
add byte [eax], al
inc esp
add byte [eax], al
add al, ah
iretd
mov byte [esi + 0xbb], al
mov ax, ax
mov word [esi + 0xbc], di
jmp 0x10026f4a
jmp dword [esi]
test bp, 0xf6ce
and byte [edi], bl
jb 0x1003dbed
ja 0x10015a69
jbe 0x10022116
invalid
jbe 0x10015a69
pop esi
xor eax, eax
jb 0x1004754c
pop ebx
pop ebp
ret
add esp, 8
test ax, ax
jb 0x1004b85d
shr bl, 0x40
jne 0x1002d191
push edx
pop edx
je 0x10022166
lds edx, [eax - 0x74]
out dx, al
jg 0x10022166
imul al
jle 0x100220fb
add dword [eax], eax
add dx, 0
add esp, 0x10
cmp al, 1
jne 0x10025759
je 0x1002570e
cpuid
push es
ret
mov cx, word [esi + 0xbc]
mov eax, ecx
and eax, 0xffff
jb 0x10037e99
shl ecx, 6
shr eax, 0xa
cmp ebx, ebx
and ecx, 0xffff
jb 0x10037ea0
or eax, ecx
jb 0x100357f8
add al, 0x4e
sub al, 0x4e
test bp, 0x2864
xor eax, 0xd5bd
jb 0x10049b7e
jmp fcn.1002dc9f
clc
cmp al, 2
jne 0x1002dc8b
je 0x10025769
inc edi
xchg edx, eax
test dword [ebx], esp
push edx
jne 0x10041edc
je 0x10025774
cmp byte [0x62840f2f], bl
mov dword [ecx], 0x8daada00
lea esp, [esp + 4]
je 0x10041edc
fisubr dword [edx + 0x424648d]
jmp dword [esi]
jne 0x1003996e
xchg cl, bl
shr ch, 0x40
xchg bl, cl
je 0x10026f5b
retf 0x6677
mov cx, di
shl ax, 0x20
ja 0x10016096
jbe 0x10026f6e
inc edi
adc byte [ecx + 0x22860f55], al
int1
invalid
jbe 0x10016096
fst dword [ebp + 0xf]
test byte [ecx], dh
add dword [eax], eax
jne 0x10026f82
nop
cpuid
ret 0x358b
mov esi, dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov ah, ah
push str.RegOpenKeyA
jno 0x1003d094
shr cx, 0x40
jo 0x10026f9e
sbb al, 0xb3
fmul qword [edi]
xor al, 0x60
add dword [eax], eax
jo 0x1003d094
and eax, 0x200068a1
add byte [eax], al
push edi
push 0x2000
push edi
call fcn.10041bdc
fsub dword [ecx]
mov ebx, dword [ebp + ebx]
jmp loc.1003c66a
mov esp, 0x14870f1f
cmp al, byte [edx]
add byte [esi + 6], dh
add bh, byte [ecx + 0xe]
sbb dword [esi + esi*8 + 0x3a06860f], eax
add al, byte [eax]
call fcn.1003a073
push esi
call fcn.1004bf4b
jne 0x10022145
je 0x1002821a
cpuid
nop
ret
je 0x10022145
xor eax, 0x89086ad2
fcmovnb st(0), st(0)
out 0x20, eax
push 0x1003382e
ret