Function at 0x10034b70
Capabilities:
Resolve function by parsing pe exports
Write file on windows

Disassembly:
push ebp
push ebx
push edi
push esi
sub esp, 0x94
mov eax, dword [0x10066040]
xor eax, esp
mov dword [esp + 0x90], eax
cmp dword [ecx + 0x10], 0
sete byte [esp + 7]
mov dword [esp + 0x6c], ecx
lea eax, [ecx + 0x14]
mov dword [esp + 0x64], eax
mov dword [esp + 0x68], edx
lea eax, [edx + 4]
mov dword [esp + 0x60], eax
mov ecx, 0x99be2b90
mov eax, 0x776a4beb
jmp 0x10034bf0
mov eax, dword [esp + 0x68]
mov dword [esp + 0x28], eax
mov eax, dword [esp + 0x28]
mov eax, dword [eax]
mov ecx, dword [esp + 0x60]
mov dword [esp + 0x2c], ecx
mov ecx, dword [esp + 0x2c]
cmp eax, dword [ecx]
mov eax, 0x3078a4f3
mov ecx, 0x1746321e
cmove eax, ecx
mov ecx, 0x603dc2d2
nop word cs:[eax + eax]
nop dword [eax + eax]
cmp ecx, 0x1263610
jle 0x10034c40
cmp ecx, 0x456fa236
jle 0x10034cc0
cmp ecx, 0x603dc2d1
jg 0x10034d89
cmp ecx, 0x4a78779a
jg 0x10034eb6
cmp ecx, 0x494cf348
jle 0x10035085
cmp ecx, 0x494cf349
je 0x10034bb3
cmp ecx, 0x499f10ed
jne 0x10034bf0
mov ecx, 0x603dc2d2
jmp 0x10034bf0
cmp ecx, 0xc34dbb3d
jle 0x10034d40
cmp ecx, 0xf30ff98a
jg 0x10034dd4
cmp ecx, 0xdcbcfdc4
jg 0x10034ef5
cmp ecx, 0xc34dbb3e
je 0x100350d8
cmp ecx, 0xc55891e8
je 0x100350f3
cmp ecx, 0xcb1c36e4
jne 0x10034bf0
mov ecx, dword [esp + 0x6c]
mov dword [esp + 0x30], ecx
mov eax, dword [esp + 0x64]
mov dword [esp + 0x34], eax
mov eax, dword [esp + 0x34]
cmp dword [eax], 0x10
mov dword [esp + 0x38], ecx
mov eax, dword [esp + 0x38]
jae 0x100359b2
mov eax, dword [esp + 0x30]
jmp 0x100359b4
cmp ecx, 0x18b9a237
jle 0x10034e1f
cmp ecx, 0x2a183bf7
jg 0x10034f34
cmp ecx, 0x18b9a238
je 0x1003510e
cmp ecx, 0x1f6aab6b
je 0x10035376
cmp ecx, 0x1f819978
jne 0x10034bf0
lea ecx, [esp + 0x78]
mov dword [esp + 0x10], ecx
lea eax, [esp + 0x88]
mov dword [esp + 0x70], eax
lea eax, [esp + 0x8c]
mov dword [esp + 0x4c], eax
mov dword [esp + 0x50], ecx
mov ecx, 0x603dc2d2
mov dword [esp + 0x20], 0
mov eax, 0xcfa42cac
mov edx, dword [esp + 0x44]
mov dword [esp + 0x24], edx
jmp 0x10034bf0
cmp ecx, 0x98dd13b8
jle 0x10034e6a
cmp ecx, 0xab159298
jg 0x10034f73
cmp ecx, 0x98dd13b9
je 0x10035391
cmp ecx, 0x98eadfd5
je 0x100353ac
cmp ecx, 0x99be2b90
jne 0x10034bf0
mov dword [esp], eax
mov ecx, 0xb437df44
jmp 0x10034bf0
cmp ecx, 0x741a8e97
jg 0x10034fb2
cmp ecx, 0x603dc2d2
je 0x100353c7
cmp ecx, 0x692bb6d8
je 0x100353d1
cmp ecx, 0x72df9812
jne 0x10034bf0
mov ecx, dword [esp]
cmp ecx, 0x2608eaf4
mov ecx, 0x7c3b8785
mov edx, 0xfe27e151
cmovl ecx, edx
jmp 0x10034bf0
cmp ecx, 0xfd2fe868
jg 0x10034ff1
cmp ecx, 0xf30ff98b
je 0x100353ec
cmp ecx, 0xf83a2e1f
je 0x1003557d
cmp ecx, 0xf9263db6
jne 0x10034bf0
mov ecx, dword [esp]
cmp ecx, 0x3078a4f3
mov ecx, 0xfec61592
mov edx, 0xcb1c36e4
cmove ecx, edx
jmp 0x10034bf0
cmp ecx, 0xd745b0c
jg 0x1003501f
cmp ecx, 0x1263611
je 0x10035598
cmp ecx, 0x3b9d9b2
je 0x100355b3
cmp ecx, 0xad14a6e
jne 0x10034bf0
mov ecx, dword [esp]
cmp ecx, 0xcfa42cac
mov ecx, 0xfec61592
mov edx, 0x9180fc27
cmove ecx, edx
jmp 0x10034bf0
cmp ecx, 0x8ff3c906
jle 0x10035052
cmp ecx, 0x8ff3c907
je 0x100355ce
cmp ecx, 0x9180fc27
je 0x100355e9
cmp ecx, 0x93fb5ea2
jne 0x10034bf0
cmp byte [esp + 7], 0
mov eax, 0x3e49dbd1
mov ecx, 0x1746321e
cmovne eax, ecx
mov ecx, 0x603dc2d2
jmp 0x10034bf0
cmp ecx, 0x4a78779b
je 0x10035622
cmp ecx, 0x5d0807d7
je 0x1003563d
cmp ecx, 0x5fd0cfa3
jne 0x10034bf0
mov ecx, dword [esp]
cmp ecx, 0xd66cc501
mov ecx, 0xfec61592
mov edx, 0xf30ff98b
cmove ecx, edx
jmp 0x10034bf0
cmp ecx, 0xdcbcfdc5
je 0x10035658
cmp ecx, 0xdcfc6c62
je 0x10035675
cmp ecx, 0xe18e3e30
jne 0x10034bf0
mov ecx, dword [esp]
cmp ecx, 0x1746321e
mov ecx, 0xfec61592
mov edx, 0xd745b0d
cmove ecx, edx
jmp 0x10034bf0
cmp ecx, 0x2a183bf8
je 0x1003588c
cmp ecx, 0x3c4a38c0
je 0x100358a5
cmp ecx, 0x402a2a99
jne 0x10034bf0
mov ecx, dword [esp]
cmp ecx, 0xc7f131f2
mov ecx, 0x1f6aab6b
mov edx, 0xfd2fe869
cmovl ecx, edx
jmp 0x10034bf0
cmp ecx, 0xab159299
je 0x100358c0
cmp ecx, 0xab1af0fe
je 0x100358f6
cmp ecx, 0xb437df44
jne 0x10034bf0
mov ecx, dword [esp]
cmp ecx, 0x10dc73ff
mov ecx, 0x98eadfd5
mov edx, 0x3c4a38c0
cmovl ecx, edx
jmp 0x10034bf0
cmp ecx, 0x741a8e98
je 0x10035910
cmp ecx, 0x7c3b8785
je 0x1003592b
cmp ecx, 0x7f39f6a0
jne 0x10034bf0
mov ecx, dword [esp]
cmp ecx, 0x2043c833
mov ecx, 0x72df9812
mov edx, 0xc55891e8
cmovl ecx, edx
jmp 0x10034bf0
cmp ecx, 0xfd2fe869
je 0x10035946
cmp ecx, 0xfe27e151
je 0x10035961
cmp ecx, 0xfec61592
jne 0x10034bf0
mov ecx, 0x499f10ed
jmp 0x10034bf0
cmp ecx, 0x15c3b6cb
je 0x1003597c
cmp ecx, 0x182e71d8
jne 0x10035b2f
mov ecx, dword [esp]
cmp ecx, 0x3e49dbd1
mov ecx, 0x83e746b0
mov edx, 0xf9263db6
cmovl ecx, edx
jmp 0x10034bf0
cmp ecx, 0x83e746b0
je 0x10035997
cmp ecx, 0x8ae5fe41
jne 0x10034bf0
mov ecx, dword [esp]
cmp ecx, 0xd23af282
mov ecx, 0xfec61592
mov edx, 0x18b9a238
cmove ecx, edx
jmp 0x10034bf0
cmp ecx, 0x456fa237
jne 0x10035b3d
mov eax, dword [esp + 0x1c]
mov dword [esp + 0x3c], eax
lea eax, [esp + 0x74]
mov dword [esp + 0x40], eax
mov eax, dword [esp + 0x40]
mov dword [esp + 0x74], 0
mov eax, dword [esp + 0x28]
mov eax, dword [eax]
mov dword [esp + 0x44], eax
mov eax, dword [esp + 0x2c]
mov eax, dword [eax]
mov dword [esp + 0x48], eax
mov eax, dword [esp + 0x44]
cmp eax, dword [esp + 0x48]
mov eax, 0xc7f131f2
mov ecx, 0x2608eaf4
jmp 0x10034bd9
mov ecx, dword [esp]
cmp ecx, 0x6297fe18
mov ecx, 0x98dd13b9
mov edx, 0x182e71d8
cmovl ecx, edx
jmp 0x10034bf0
mov ecx, dword [esp]
cmp ecx, 0x1746321e
mov ecx, 0xe18e3e30
mov edx, 0x15c3b6cb
cmovl ecx, edx
jmp 0x10034bf0
mov eax, dword [esp + 0x18]
mov eax, dword [eax - 4]
mov dword [esp + 0x5c], eax
mov eax, dword [esp + 0x18]
mov edx, eax
not edx
mov ecx, edx
or ecx, 3
mov ebx, eax
and ebx, 0xfffffffc
sub ecx, ebx
mov dword [esp + 0xc], edi
lea edi, [ecx + eax]
add edi, 0xfffffffc
mov ecx, eax
or ecx, 0xfffffffc
mov ebp, edi
not ebp
add ebp, ecx
sub edi, ecx
mov ebx, edi
and ebx, 0xf4955013
add ebx, ebp
xor ebp, 0xb6aafec
add ebp, ebx
or edi, 0xf4955013
sub ebp, edi
lea ebx, [eax + ebp]
lea edi, [eax + ebp]
add edi, 0xffffffff
and edi, 4
add edi, ebx
neg ebx
mov dword [esp + 8], esi
mov esi, ebx
xor esi, 0xfffffffb
add esi, edi
or ebx, 4
mov ebp, 6
sub ebp, esi
sub ebp, ebx
add ebx, esi
add ebx, 0xfffffff9
mov esi, edx
and esi, 0xfffffffc
mov edi, edx
and edi, 3
sub esi, edi
or edx, 0xfffffffc
lea edi, [esi + edx]
add edx, esi
add edx, 4
not edx
and edx, eax
and edx, 3
add edx, edi
add edx, 4
and ebp, 0x8a46aea
mov esi, ebx
and esi, 0x8a46aea
add esi, ebp
sub ebx, esi
add ebx, edx
mov edx, ebx
not edx
mov esi, ebx
and esi, 0xf75b9515
add ebx, ebx
sub ebx, esi
and edx, 0x8a46aea
add edx, ebx
add eax, eax
or eax, 0xfffffff8
lea ecx, [ecx + ecx*2]
sub eax, ecx
add eax, edx
imul ecx, eax, 0xce541191
imul eax, eax, 0x6357dcde
add eax, ecx
add eax, 0x7e1c9e88
mov ecx, eax
xor ecx, 0xeaaf91f0
sub ecx, eax
mov edx, eax
or edx, 0x15506e0f
lea edx, [edx + edx*2]
add edx, ecx
not eax
or eax, 0xeaaf91f0
sub edx, eax
lea eax, [edx - 0x3ff14a2e]
mov ecx, eax
not ecx
mov esi, eax
and esi, 0x7e1c9e87
add edx, esi
add edx, 0xc00eb5d2
and ecx, 0x81e36178
add ecx, edx
xor eax, 0x7e1c9e87
add eax, ecx
imul eax, eax, 0x6fb0cf71
lea ecx, [eax - 0x54a12297]
mov edx, ecx
and edx, 0xf3807aef
add edx, eax
add edx, 0xab5edd69
neg edx
add edx, eax
add edx, 0x9edf585a
and ecx, 0xc7f8510
mov eax, dword [esp + 0x5c]
mov esi, edx
sub esi, ecx
sub ecx, edx
lea edx, [ecx + esi*2]
lea ecx, [ecx + esi*2]
add ecx, 0xffffffff
mov esi, ecx
xor esi, 0xbdc94714
add esi, edx
xor ecx, 0x4236b8eb
lea edx, [esi + ecx]
add ecx, esi
add ecx, 0xbdc94714
lea esi, [eax + 0x7fffffff]
and ecx, esi
lea ecx, [edx + ecx*2]
add ecx, 0xbdc94714
mov edi, 0xc236b8eb
sub edi, edx
and edi, esi
mov esi, dword [esp + 8]
sub ecx, eax
lea ecx, [ecx + edi*2]
mov edi, dword [esp + 0xc]
add eax, eax
sub ecx, eax
imul eax, ecx, 0x5942e853
lea ecx, [eax + 0x7ab1a52a]
mov edx, ecx
not edx
and edx, 0x1dcd41c0
lea edx, [eax + edx*2]
add edx, 0x7ab1a52a
xor ecx, 0xe232be3f
add ecx, edx
lea edx, [eax + ecx]
add eax, ecx
add eax, 0x7ab1a52c
and eax, 0x1a608ea
lea ecx, [eax + edx]
add ecx, 0x7ab1a52c
not eax
lea edx, [ecx + eax]
add eax, ecx
add eax, 0x1a608eb
mov ecx, eax
and ecx, 0xe232be3f
add ecx, edx
add ecx, 0x1a608eb
mov edx, eax
xor edx, 0xe232be3f
add edx, ecx
or eax, 0xe232be3f
sub edx, eax
add edx, 0xe232be3f
imul eax, edx, 0x8c9c6425
imul ecx, edx, 0xe6c737b6
mov edx, eax
not edx
or edx, 0x80ed4e2e
sub ecx, edx
and eax, 0x80ed4e2e
add eax, ecx
add eax, 0x7f12b1d1
cmp eax, 0x20
mov eax, 0xeae4305b
mov ecx, 0xd66cc501
cmovb eax, ecx
mov ecx, 0x603dc2d2
jmp 0x10034bf0
mov ecx, dword [esp]
cmp ecx, 0xcd18d292
mov ecx, 0x741a8e98
mov edx, 0x3b9d9b2
cmovl ecx, edx
jmp 0x10034bf0
mov ecx, dword [esp]
cmp ecx, 0x776a4beb
mov ecx, 0x1263611
mov edx, 0xf83a2e1f
cmovl ecx, edx
jmp 0x10034bf0
mov ecx, dword [esp]
cmp ecx, 0x3078a4f3
mov ecx, 0xc34dbb3e
mov edx, 0x7f39f6a0
cmovl ecx, edx
jmp 0x10034bf0
mov ecx, 0x99be2b90
jmp 0x10034bf0
mov ecx, dword [esp]
cmp ecx, 0xeae4305b
mov ecx, 0xfec61592
mov edx, 0x47e5caf2
cmove ecx, edx
jmp 0x10034bf0
mov edx, dword [esp + 0x14]
mov ecx, edx
not ecx
mov eax, ecx
and eax, 0x87fca11e
mov esi, ecx
and esi, 0x78035ee1
sub eax, esi
add eax, ecx
mov dword [esp + 0xc], eax
or ecx, 0xffffffdb
mov esi, edx
and esi, 0x24
sub ecx, esi
lea esi, [ecx + edx]
add esi, 0x24
mov ecx, edx
or ecx, 0x24
mov edi, esi
not edi
add edi, ecx
sub esi, ecx
lea esi, [esi + edi*2]
lea edi, [edx + esi]
add edi, 1
add esi, edx
mov ebx, edx
or ebx, 0xffffffdb
mov eax, 0xfffffffe
sub eax, esi
lea ebp, [ebx + 1]
mov dword [esp + 8], ebp
mov ebp, eax
and ebp, dword [esp + 8]
add esi, ebp
add esi, 1
not ebx
add ebx, esi
mov esi, dword [esp + 8]
xor edi, esi
not edi
add edi, ebx
or eax, esi
sub edi, eax
mov eax, edi
not eax
mov esi, edi
xor esi, 0xffffffdc
add esi, edi
and eax, 0x23
add eax, esi
and edi, 0xffffffdc
mov esi, ecx
not esi
lea esi, [ecx + esi*2]
add esi, 1
lea ecx, [eax + edi]
add eax, edi
add eax, 0xaa76c4f8
mov edi, 0x55893b07
sub edi, ecx
or edi, esi
lea ecx, [edi + ecx*2]
add ecx, 0x54ed89f0
not esi
or esi, eax
mov eax, edx
and eax, 0x87fca11e
mov edi, dword [esp + 0xc]
add eax, edi
add eax, 0x78035ee2
and edx, 0x78035ee1
or edx, eax
mov eax, edx
and eax, 0x24
xor eax, 0x20
xor edx, 0x78035ec5
or edx, eax
add edx, esi
sub ecx, edx
add ecx, 0xbd81085c
mov eax, ecx
xor eax, 0x67f7cd2f
sub eax, ecx
mov edx, ecx
or edx, 0x980832d0
lea edx, [edx + edx*2]
add edx, eax
not ecx
or ecx, 0x67f7cd2f
sub edx, ecx
imul eax, edx, 0x9df9161d
lea ecx, [eax - 0x4ba28b73]
mov edx, ecx
and edx, 0xb28ad4da
add eax, edx
add eax, 0xb45d748d
or ecx, 0x4d752b25
sub eax, ecx
imul eax, eax, 0xdcac5c35
lea ecx, [eax + 0x53593f7]
mov edx, 0xfaca6c08
sub edx, eax
and edx, 0x8edc4015
add eax, edx
add eax, 0x53593f7
or ecx, 0x7123bfea
lea edx, [eax + ecx]
add eax, ecx
add eax, 0x8edc4016
mov ecx, 0x7123bfe9
sub ecx, edx
and ecx, 0xa6729963
lea esi, [ecx + edx*2]
add esi, 0x1db8802c
or eax, 0xa6729963
sub esi, eax
add esi, 0x598d669d
mov edi, dword [esp + 0x5c]
mov ecx, 0x603dc2d2
mov eax, 0x10dc73ff
jmp 0x10034bf0
mov ecx, dword [esp]
cmp ecx, 0x6297fe18
mov ecx, 0xfec61592
mov edx, 0xdcfc6c62
cmove ecx, edx
jmp 0x10034bf0
mov ecx, dword [esp]
cmp ecx, 0x776a4beb
mov ecx, 0xfec61592
mov edx, 0x93fb5ea2
cmove ecx, edx
jmp 0x10034bf0
mov ecx, dword [esp]
cmp ecx, 0xc7f131f2
mov ecx, 0xfec61592
mov edx, 0x1f819978
cmove ecx, edx
jmp 0x10034bf0
mov ecx, dword [esp]
cmp ecx, 0xeae4305b
mov ecx, 0x692bb6d8
mov edx, 0x5fd0cfa3
cmovl ecx, edx
jmp 0x10034bf0
mov eax, dword [esp + 0x24]
mov dword [esp + 0x54], eax
mov eax, dword [esp + 0x10]
mov edx, dword [esp + 0x54]
lea ecx, [esp + 0x78]
call fcn.1004f610
mov eax, dword [esp + 0x70]
mov eax, dword [eax]
mov ecx, dword [esp + 0x4c]
cmp dword [ecx], 0x10
mov ecx, dword [esp + 0x50]
jae 0x100359f2
mov ecx, dword [esp + 0x10]
jmp 0x100359f4
mov ecx, dword [esp]
cmp ecx, 0xd23af282
mov ecx, 0x8ae5fe41
mov edx, 0xad14a6e
cmovl ecx, edx
jmp 0x10034bf0
mov ecx, dword [esp]
cmp ecx, 0xd66cc501
mov ecx, 0x8ff3c907
mov edx, 0x4a78779b
cmovl ecx, edx
jmp 0x10034bf0
push dword [esp + 0x3c]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [esp + 0x40]
mov ecx, 0x603dc2d2
mov eax, 0x1746321e
jmp 0x10034bf0
mov eax, dword [esp + 0x50]
mov eax, dword [eax]
mov dword [esp + 0x18], eax
mov eax, dword [esp + 0x14]
mov ecx, eax
xor ecx, 0x2ef4d9f5
add ecx, eax
mov edx, eax
xor edx, 0xd10b260a
lea esi, [ecx + edx]
add ecx, edx
add ecx, 1
mov edx, 0xfffffffe
sub edx, esi
and edx, 0xd8a6912d
add edx, esi
add edx, 1
and ecx, 0xd8a6912d
lea esi, [edx + ecx]
add ecx, edx
add ecx, 1
mov edx, 0xfffffffe
sub edx, esi
and edx, 0xd8a6912d
add edx, esi
add edx, 1
or ecx, 0x27596ed2
add ecx, edx
lea edx, [eax + eax]
mov esi, edx
and esi, 2
mov ebx, eax
or ebx, 1
add esi, ebx
not ebx
lea esi, [esi + ebx*2]
xor edx, 2
add edx, esi
add edx, 2
mov esi, edx
not esi
mov ebx, esi
and ebx, 0x9df19dd8
or esi, 0x620e6226
add esi, ebx
mov ebx, edx
or ebx, 0x620e6227
add ebx, esi
add ebx, 0x9df19ddb
and edx, 0x620e6226
or edx, ebx
mov esi, edx
not esi
mov ebp, edx
xor ebp, 0x620e6226
or ebx, 0x620e6226
add ebx, ebp
sub edx, ebx
or esi, 0x9df19dd9
add esi, edx
lea edx, [ecx + esi]
add ecx, esi
add ecx, 0x8967d0fb
mov esi, ecx
and esi, 0xaf46ba9c
add edx, esi
add edx, 0x8967d0fb
xor esi, 0xaf46ba9c
add esi, edx
not ecx
mov edx, ecx
and edx, 0x50b94563
add edx, esi
or ecx, 0xaf46ba9c
sub edx, ecx
lea esi, [edx + 0x50b94564]
mov ecx, esi
and ecx, 0x7ffffffe
add ecx, ecx
sub esi, ecx
lea ecx, [edx + edx]
add ecx, 0xa1728ac8
mov edx, ecx
xor edx, 2
add edx, esi
or ecx, 0xfffffffc
mov ebx, 0x50b94564
sub ebx, edx
sub ebx, ecx
lea ebp, [eax + 1]
lea esi, [ebx + eax]
add esi, 1
or ebx, ebp
add esi, ebx
not ebx
lea ebx, [esi + ebx*2]
mov esi, eax
not esi
add ebx, eax
add ecx, edx
add ecx, 0xaf46ba9b
or ecx, ebp
sub ecx, ebx
mov edx, esi
and edx, 0xfffffffe
mov ebx, eax
xor ebx, 0xfffffffe
add ebx, edx
and esi, 1
add esi, ebx
add esi, eax
add esi, 1
and esi, eax
mov edx, esi
and edx, 0x859ce1ec
mov eax, edx
sub eax, esi
mov esi, 0x859ce1ec
sub esi, eax
add eax, 0x7a631e13
mov ebx, esi
and ebx, edx
mov ebp, eax
or ebp, edx
add ebp, ebx
xor eax, edx
not eax
add eax, ebp
or esi, edx
sub eax, esi
xor eax, 0x7a631e13
add eax, ecx
imul eax, eax, 0x83921439
add eax, 0x7c6debc7
mov ecx, eax
not ecx
mov edx, eax
and edx, 0x86878988
lea edx, [edx + edx*2]
mov esi, eax
sub esi, edx
xor eax, 0x79787677
add eax, esi
or ecx, 0x86878988
add ecx, eax
imul eax, ecx, 0xd4b465f7
lea ecx, [eax + 0x5e2e0180]
mov edx, ecx
not edx
or edx, 0x91a33fd1
lea esi, [edx + eax*2]
add esi, 0xbc5c0300
or ecx, 0x6e5cc02e
sub esi, ecx
add esi, 0x533fe4d5
cmp esi, 0x1000
mov eax, 0x10dc73ff
mov ecx, 0xd23af282
cmovae eax, ecx
mov ecx, 0x603dc2d2
mov edi, dword [esp + 0x18]
jmp 0x10034bf0
push esi
push edi
call fcn.10053f09
add esp, 8
mov ecx, 0x603dc2d2
mov eax, 0x92616b77
jmp 0x10034bf0
mov ecx, dword [esp]
cmp ecx, 0xcfa42cac
mov ecx, 0x5d0807d7
mov edx, 0x402a2a99
cmovl ecx, edx
jmp 0x10034bf0
mov eax, dword [esp + 0x10]
mov eax, dword [esp + 0x54]
add eax, 0x18
mov dword [esp + 0x24], eax
cmp eax, dword [esp + 0x48]
mov eax, 0xcfa42cac
mov ecx, 0x2608eaf4
cmove eax, ecx
mov ecx, dword [esp + 0x58]
mov ecx, 0x603dc2d2
mov edx, dword [esp + 0x58]
mov dword [esp + 0x20], edx
jmp 0x10034bf0
mov eax, dword [esp + 0x34]
cmp dword [eax], 0x10
mov eax, dword [esp + 0x38]
jae 0x10035af4
mov eax, dword [esp + 0x30]
jmp 0x10035af6
mov ecx, dword [esp]
cmp ecx, 0xcd18d292
mov ecx, 0xfec61592
mov edx, 0xab1af0fe
cmove ecx, edx
jmp 0x10034bf0
mov ecx, dword [esp]
cmp ecx, 0x2608eaf4
mov ecx, 0xfec61592
mov edx, 0xdcbcfdc5
cmove ecx, edx
jmp 0x10034bf0
mov ecx, dword [esp]
cmp ecx, 0x92616b77
mov ecx, 0xfec61592
mov edx, 0xab159299
cmove ecx, edx
jmp 0x10034bf0
mov ecx, dword [esp]
cmp ecx, 0x2043c833
mov ecx, 0xfec61592
mov edx, 0x456fa237
cmove ecx, edx
jmp 0x10034bf0
mov ecx, dword [esp]
cmp ecx, 0x10dc73ff
mov ecx, 0xfec61592
mov edx, 0x2a183bf8
cmove ecx, edx
jmp 0x10034bf0
mov ecx, dword [esp]
cmp ecx, 0x3e49dbd1
mov ecx, 0xfec61592
mov edx, 0x494cf349
cmove ecx, edx
jmp 0x10034bf0
mov eax, dword [eax]
sub esp, 0x1c
movaps xmm0, xmmword [0x10062960]
movups xmmword [esp + 4], xmm0
mov dword [esp], eax
mov dword [esp + 0x18], 0
mov dword [esp + 0x14], 0x80
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov dword [esp + 0x1c], eax
cmp eax, 0xffffffff
mov eax, 0x2043c833
mov ecx, 0xcd18d292
jmp 0x10034bd9
mov ecx, dword [ecx]
push 0
lea edx, [esp + 0x78]
push edx
push eax
push ecx
push dword [esp + 0x4c]
call dword [sym.imp.KERNEL32.dll_WriteFile]
mov eax, dword [esp + 0x74]
lea ecx, [eax - 0x4ea26328]
mov edx, 0x4ea26327
sub edx, eax
and edx, 0xb15d9cd8
add edx, eax
or ecx, 0x4ea26327
lea eax, [edx + ecx]
add ecx, edx
add ecx, 1
mov edx, ecx
and edx, 0xe1256874
add edx, eax
add edx, 1
mov eax, ecx
xor eax, 0xe1256874
add eax, edx
or ecx, 0xe1256874
sub eax, ecx
mov edx, dword [esp + 0x20]
lea ecx, [eax + edx]
add ecx, 0xe1256874
add eax, edx
mov edx, ecx
not edx
mov ebx, ecx
or ebx, 0xe1256874
add ebx, eax
add ebx, 0xe1256874
and edx, 0x1eda978b
lea edx, [ebx + edx*2]
or ecx, 0x1eda978b
sub edx, ecx
lea ecx, [edx + eax]
add ecx, 0xe1256874
add eax, edx
add eax, 0xb4e0467d
mov edx, eax
xor edx, 0x2e427e6e
add edx, ecx
xor eax, 0xd1bd8191
lea ecx, [edx + eax]
add eax, edx
add eax, 0x1fd5c78
mov edx, eax
not edx
and eax, 0x34e0467b
lea eax, [ecx + eax*2]
add eax, 0x1fd5c78
and edx, 0x34e0467b
lea eax, [eax + edx*2]
add eax, 0xb31cae20
mov dword [esp + 0x58], eax
mov eax, dword [esp + 0x4c]
mov eax, dword [eax]
mov dword [esp + 0x14], eax
mov eax, dword [esp + 0x14]
cmp eax, 0x10
mov eax, 0x92616b77
mov ecx, 0x6297fe18
cmovae eax, ecx
mov ecx, 0x603dc2d2
jmp 0x10034bf0
mov eax, dword [eax]
sub esp, 0x1c
movaps xmm0, xmmword [0x10062950]
movups xmmword [esp + 4], xmm0
mov dword [esp], eax
mov dword [esp + 0x18], 0
mov dword [esp + 0x14], 0x80
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov dword [esp + 0x1c], eax
cmp eax, 0xffffffff
mov eax, 0x2043c833
jmp 0x10034bd4
cmp ecx, 0xd745b0d
jne 0x10034bf0
jmp 0x10035b4e
cmp ecx, 0x47e5caf2
jne 0x10034bf0
call fcn.10055ebd
mov ecx, dword [esp + 0x90]
xor ecx, esp
call fcn.1005440a
add esp, 0x94
pop esi
pop edi
pop ebx
pop ebp
ret