Function at 0x10036620
Capabilities:
Write file on windows

Disassembly:
push ebp
push ebx
push edi
push esi
sub esp, 0x90
mov eax, dword [0x1006a040]
xor eax, esp
mov dword [esp + 0x8c], eax
cmp dword [ecx + 0x10], 0
sete byte [esp + 7]
mov dword [esp + 0x64], ecx
lea eax, [ecx + 0x14]
mov dword [esp + 0x5c], eax
mov dword [esp + 0x60], edx
lea eax, [edx + 4]
mov dword [esp + 0x58], eax
mov ecx, 0xa3e5ac9b
mov eax, 0x8415f641
jmp 0x100366a0
mov eax, dword [esp + 0x60]
mov dword [esp + 0x20], eax
mov eax, dword [esp + 0x20]
mov eax, dword [eax]
mov ecx, dword [esp + 0x58]
mov dword [esp + 0x24], ecx
mov ecx, dword [esp + 0x24]
cmp eax, dword [ecx]
mov eax, 0xfe611ef7
mov ecx, 0x77e09ac
cmove eax, ecx
mov ecx, 0x86d1e940
nop word cs:[eax + eax]
nop dword [eax + eax]
cmp ecx, 0x2795b5de
jg 0x10036710
cmp ecx, 0xb9b63f4f
jle 0x10036780
cmp ecx, 0xdfde4ed4
jg 0x10036836
cmp ecx, 0xc698a013
jg 0x10036962
cmp ecx, 0xb9b63f50
je 0x10036cd5
cmp ecx, 0xbe66988e
je 0x10036cf0
cmp ecx, 0xc0806d4c
jne 0x100366a0
mov ecx, dword [esp]
cmp ecx, 0xaf77f415
mov ecx, 0x6a7c3c75
mov edx, 0x843b6de6
cmove ecx, edx
jmp 0x100366a0
cmp ecx, 0x5e46d745
jle 0x100367e0
cmp ecx, 0x7285decf
jg 0x10036881
cmp ecx, 0x6bf93c93
jg 0x100369a1
cmp ecx, 0x5e46d746
je 0x10036d0b
cmp ecx, 0x6a7c3c75
je 0x10036d26
cmp ecx, 0x6bd1ce93
jne 0x100366a0
mov ecx, dword [esp]
cmp ecx, 0xaf77f415
mov ecx, 0x2a94e601
mov edx, 0x5e46d746
cmovl ecx, edx
jmp 0x100366a0
cmp ecx, 0x9a3efb7e
jle 0x100368cc
cmp ecx, 0xb462c77c
jg 0x10036b15
cmp ecx, 0x9a3efb7f
je 0x10036d30
cmp ecx, 0xa3e5ac9b
je 0x10036d4b
cmp ecx, 0xb13d614e
jne 0x100366a0
mov ecx, dword [esp]
cmp ecx, 0xc7f3038b
mov ecx, 0x6a7c3c75
mov edx, 0x3dbd19a3
cmove ecx, edx
jmp 0x100366a0
cmp ecx, 0x34db6497
jle 0x10036917
cmp ecx, 0x3dc88522
jg 0x10036b56
cmp ecx, 0x34db6498
je 0x10036d58
cmp ecx, 0x380170c2
je 0x10036d73
cmp ecx, 0x3dbd19a3
jne 0x100366a0
mov eax, dword [esp + 0x2c]
cmp dword [eax], 0x10
mov eax, dword [esp + 0x30]
jae 0x100372bc
mov eax, dword [esp + 0x28]
jmp 0x100372be
cmp ecx, 0x6344b28
jg 0x10036b84
cmp ecx, 0xdfde4ed5
je 0x10036d8e
cmp ecx, 0xe75984a4
je 0x10036da9
cmp ecx, 0xf58546f1
jne 0x100366a0
mov ecx, dword [esp]
cmp ecx, 0xa57c2d64
mov ecx, 0x6a7c3c75
mov edx, 0xb5f96a1f
cmove ecx, edx
jmp 0x100366a0
cmp ecx, 0x7c1a4613
jg 0x10036be1
cmp ecx, 0x7285ded0
je 0x10036dc4
cmp ecx, 0x776a6349
je 0x10036ddf
cmp ecx, 0x78f18724
jne 0x100366a0
mov ecx, dword [esp]
cmp ecx, 0xbdfe5629
mov ecx, 0x6a7c3c75
mov edx, 0xc698a014
cmove ecx, edx
jmp 0x100366a0
cmp ecx, 0x8e4dd897
jle 0x10036c33
cmp ecx, 0x8e4dd898
je 0x10036dfb
cmp ecx, 0x953e0a8f
je 0x10036e16
cmp ecx, 0x96c2953a
jne 0x100366a0
mov ecx, dword [esp]
cmp ecx, 0xd0e97469
mov ecx, 0x6a7c3c75
mov edx, 0xb5180bfc
cmove ecx, edx
jmp 0x100366a0
cmp ecx, 0x2a94e600
jle 0x10036c66
cmp ecx, 0x2a94e601
je 0x10036e31
cmp ecx, 0x3383fd3f
je 0x10036e4c
cmp ecx, 0x34b0cd1b
jne 0x100366a0
mov ecx, dword [esp]
cmp ecx, 0xaa525788
mov ecx, 0x953e0a8f
mov edx, 0xf58546f1
cmovl ecx, edx
jmp 0x100366a0
cmp ecx, 0xc698a014
je 0x10036e67
cmp ecx, 0xd4330c5e
je 0x1003704f
cmp ecx, 0xd8fb740c
jne 0x100366a0
mov ecx, dword [esp]
cmp ecx, 0xfe611ef7
mov ecx, 0x6a7c3c75
mov edx, 0x7dd23ada
cmove ecx, edx
jmp 0x100366a0
cmp ecx, 0x6bf93c94
je 0x10037096
cmp ecx, 0x7191dd26
je 0x100370cc
cmp ecx, 0x71edbdac
jne 0x100366a0
mov eax, dword [esp + 0xc]
mov edx, eax
xor edx, 0xffffffb8
lea ecx, [eax + eax]
sub edx, ecx
and ecx, 0xffffff70
add ecx, edx
mov esi, eax
and esi, 0xffffffdb
mov edx, esi
sub edx, eax
lea edi, [edx + 0x24]
mov ebx, edi
or ebx, esi
add edx, ebx
add edx, 0x24
not esi
or esi, edi
add esi, ebx
sub edx, esi
mov edi, edx
not edi
and edi, ecx
add edi, ecx
mov esi, ecx
not esi
and esi, edx
add esi, edi
add esi, edx
xor edx, ecx
sub esi, edx
mov edx, eax
not edx
lea ebp, [eax + 1]
mov ecx, 0x7ffffffe
sub ecx, eax
mov edi, esi
and edi, ecx
lea edi, [esi + edi*2]
lea ebx, [edx + edx*2]
sub edx, edi
xor ebp, esi
lea edx, [edx + ebp*2]
or ecx, esi
lea esi, [ebx + eax*2]
add esi, 2
and esi, 0xee682f4c
mov edi, eax
and edi, 0x1197d0b3
mov ebx, eax
xor ebx, 0xee682f4c
add ebx, edi
xor eax, 0x1197d0b3
add eax, ebx
add eax, 1
or eax, esi
mov esi, eax
and esi, 0x24
mov edi, esi
xor edi, 0x20
mov ebx, eax
xor ebx, 0xee682f68
add edi, ebx
add edi, 1
mov ebp, eax
xor ebp, 0x1197d097
add ebp, edi
mov edi, esi
xor edi, 4
lea edi, [edi + edi*2]
add edi, ebx
add edi, 1
add eax, eax
xor eax, 0x232fa166
add eax, edi
xor esi, 0x7fffffdf
add esi, eax
add esi, 0xffffffdd
or esi, ebp
lea eax, [edx + ecx*2]
add esi, esi
lea ecx, [edx + ecx*2]
add ecx, 0xb8c85e05
mov edx, esi
neg edx
and ecx, edx
add eax, ecx
add eax, 0xb8c85e05
sub eax, esi
sub eax, ecx
mov ecx, eax
and ecx, 0x4737a1fc
add ecx, eax
mov edx, eax
xor edx, 0x4737a1fc
add edx, ecx
or eax, 0x4737a1fc
sub eax, edx
mov esi, 0x373f41b9
sub esi, eax
mov ecx, esi
and ecx, 0xf0079fbd
add ecx, eax
add eax, 0xc8c0be46
xor eax, 0xff86042
add eax, ecx
or esi, 0xf0079fbd
sub esi, eax
add esi, 0x4737a1fd
mov ebx, dword [esp + 0x54]
mov ecx, 0x86d1e940
mov eax, 0x36355ab9
jmp 0x100366a0
cmp ecx, 0xb462c77d
je 0x100370e7
cmp ecx, 0xb5180bfc
je 0x10036663
cmp ecx, 0xb5f96a1f
jne 0x100366a0
push dword [esp + 0x34]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [esp + 0x38]
mov ecx, 0x86d1e940
mov eax, 0x77e09ac
jmp 0x100366a0
cmp ecx, 0x3dc88523
je 0x10037100
cmp ecx, 0x4136d98d
je 0x1003711b
cmp ecx, 0x56303af9
jne 0x100366a0
mov ecx, 0x86d1e940
jmp 0x100366a0
cmp ecx, 0x6344b29
je 0x10037136
cmp ecx, 0xd2b7ef2
je 0x10037151
cmp ecx, 0x20ae9565
jne 0x100366a0
mov eax, dword [esp + 0x1c]
mov dword [esp + 0x4c], eax
mov eax, dword [esp + 8]
mov edx, dword [esp + 0x4c]
lea ecx, [esp + 0x74]
call fcn.10052a50
mov eax, dword [esp + 0x6c]
mov eax, dword [eax]
mov ecx, dword [esp + 0x44]
cmp dword [ecx], 0x10
mov ecx, dword [esp + 0x48]
jae 0x100372f7
mov ecx, dword [esp + 8]
jmp 0x100372f9
cmp ecx, 0x7c1a4614
je 0x1003716c
cmp ecx, 0x7c346335
je 0x10037187
cmp ecx, 0x7dd23ada
jne 0x100366a0
mov ecx, dword [esp + 0x64]
mov dword [esp + 0x28], ecx
mov eax, dword [esp + 0x5c]
mov dword [esp + 0x2c], eax
mov eax, dword [esp + 0x2c]
cmp dword [eax], 0x10
mov dword [esp + 0x30], ecx
mov eax, dword [esp + 0x30]
jae 0x100373a4
mov eax, dword [esp + 0x28]
jmp 0x100373a6
cmp ecx, 0x8d042f6f
jle 0x10036cbf
cmp ecx, 0x8dd6586e
jne 0x100373e4
mov ecx, dword [esp]
cmp ecx, 0xfff787a
mov ecx, 0x6a7c3c75
mov edx, 0x20ae9565
cmove ecx, edx
jmp 0x100366a0
cmp ecx, 0x2795b5df
je 0x100372a1
cmp ecx, 0x29b32f35
jne 0x100366a0
lea ecx, [esp + 0x74]
mov dword [esp + 8], ecx
lea eax, [esp + 0x84]
mov dword [esp + 0x6c], eax
lea eax, [esp + 0x88]
mov dword [esp + 0x44], eax
mov dword [esp + 0x48], ecx
mov ecx, 0x86d1e940
mov dword [esp + 0x18], 0
mov eax, 0xfff787a
mov edx, dword [esp + 0x3c]
mov dword [esp + 0x1c], edx
jmp 0x100366a0
cmp ecx, 0x86d1e940
jne 0x100373f1
mov ecx, 0xa3e5ac9b
jmp 0x100366a0
mov ecx, dword [esp]
cmp ecx, 0x36355ab9
mov ecx, 0x6a7c3c75
mov edx, 0xb462c77d
cmove ecx, edx
jmp 0x100366a0
mov ecx, dword [esp]
cmp ecx, 0x5195f9da
mov ecx, 0x6a7c3c75
mov edx, 0x7c346335
cmove ecx, edx
jmp 0x100366a0
mov ecx, dword [esp]
cmp ecx, 0xa57c2d64
mov ecx, 0x34b0cd1b
mov edx, 0x7c1a4614
cmovl ecx, edx
jmp 0x100366a0
mov ecx, 0x56303af9
jmp 0x100366a0
mov ecx, dword [esp]
cmp ecx, 0xd0e97469
mov ecx, 0x380170c2
mov edx, 0x6bd1ce93
cmovl ecx, edx
jmp 0x100366a0
mov dword [esp], eax
mov ecx, 0x9a3efb7f
jmp 0x100366a0
mov ecx, dword [esp]
cmp ecx, 0xfe611ef7
mov ecx, 0x4136d98d
mov edx, 0x8e4dd898
cmovl ecx, edx
jmp 0x100366a0
mov ecx, dword [esp]
cmp ecx, 0xfff787a
mov ecx, 0x2795b5df
mov edx, 0x34db6498
cmovl ecx, edx
jmp 0x100366a0
mov ecx, dword [esp]
cmp ecx, 0xe166a1bf
mov ecx, 0x6a7c3c75
mov edx, 0x29b32f35
cmove ecx, edx
jmp 0x100366a0
mov ecx, dword [esp]
cmp ecx, 0xc7f3038b
mov ecx, 0xb13d614e
mov edx, 0x78f18724
cmovl ecx, edx
jmp 0x100366a0
mov ecx, dword [esp]
cmp ecx, 0xb48021af
mov ecx, 0x3383fd3f
mov edx, 0xc0806d4c
cmovl ecx, edx
jmp 0x100366a0
cmp byte [esp + 7], 0
mov eax, 0xd0e97469
mov ecx, 0x77e09ac
cmovne eax, ecx
mov ecx, 0x86d1e940
jmp 0x100366a0
mov ecx, dword [esp]
cmp ecx, 0xe166a1bf
mov ecx, 0xdfde4ed5
mov edx, 0x96c2953a
cmovl ecx, edx
jmp 0x100366a0
mov ecx, dword [esp]
cmp ecx, 0xaa525788
mov ecx, 0x6a7c3c75
mov edx, 0x71edbdac
cmove ecx, edx
jmp 0x100366a0
mov ecx, dword [esp]
cmp ecx, 0xbdfe5629
mov ecx, 0xe75984a4
mov edx, 0x7285ded0
cmovl ecx, edx
jmp 0x100366a0
mov ecx, dword [esp]
cmp ecx, 0xb48021af
mov ecx, 0x6a7c3c75
mov edx, 0x6bf93c94
cmove ecx, edx
jmp 0x100366a0
mov eax, dword [esp + 0x10]
mov eax, dword [eax - 4]
mov dword [esp + 0x54], eax
mov eax, dword [esp + 0x10]
mov ecx, eax
not ecx
lea edx, [eax + ecx*2]
mov ebp, 0xfffffffe
sub ebp, edx
mov edi, ebp
add edi, ebp
or edi, 8
sub edi, edx
xor ebp, 0xfffffffb
add ebp, edi
lea ecx, [eax + ecx*2]
add ecx, 1
lea edx, [ecx + ebp]
add edx, 0xfffffff8
add ebp, ecx
and ecx, 3
mov edi, edx
and edi, 0xd5f1e627
lea ebp, [ebp + edi*2 - 8]
or edx, 0x2a0e19d8
sub ebp, edx
not edx
lea edi, [edx + ebp]
mov dword [esp + 0x68], esi
mov esi, ebx
mov ebx, 0xd5f1e626
sub ebx, edi
and ebx, ecx
not ecx
add edx, ebp
add edx, 0x2a0e19d9
lea ebp, [ecx + edi*2]
add ebp, 0x541c33b2
or edx, ecx
add ebx, edx
add ebx, edi
sub ebp, ebx
mov ebx, esi
mov esi, dword [esp + 0x68]
lea ecx, [ebp - 0x541c33b4]
add ecx, ebp
mov edx, ecx
xor edx, 0xabe3cc4e
add edx, ebp
add edx, 0xd5f1e626
xor ecx, 0x541c33b0
lea ebp, [edx + ecx]
add ecx, edx
add ecx, 0x2a0e19da
mov edi, ecx
not edi
mov edx, eax
and edx, 3
add eax, eax
or eax, 0xfffffff8
sub edx, eax
and edi, 0x32fd6ab1
lea eax, [edi + ebp*2]
add eax, 0x541c33b4
mov edi, ecx
xor edi, 0xcd02954e
add edi, eax
sub edi, ebp
and ecx, 0xcd02954e
add ecx, edi
add ecx, edx
imul eax, ecx, 0x4ab17b41
lea ecx, [eax - 0x37cec01d]
mov edx, ecx
and edx, 0xdd6f7d1a
add edx, eax
add edx, 0xc8313fe3
mov edi, 0x77cec01c
sub edi, eax
and edi, 0x229082e5
add edi, edx
xor ecx, 0xdd6f7d1a
add ecx, edi
imul eax, ecx, 0x135114c1
lea ecx, [eax + 0x50af821c]
mov edx, ecx
and edx, 0xc2a192a4
lea ebp, [edx + eax]
add ebp, 0x50af821c
or ecx, 0x3d5e6d5b
sub ebp, ecx
mov edx, dword [esp + 0x54]
mov eax, edx
neg eax
mov ecx, ebp
and ecx, 0xe0a667aa
add ecx, ebp
or ebp, 0x1f599855
sub ecx, ebp
add ecx, 0x3eb330aa
mov ebp, ecx
not ebp
mov edi, ebp
and edi, eax
add edi, edx
mov edx, ecx
sub edx, edi
xor ecx, eax
add ecx, edx
or ebp, eax
lea eax, [ecx + ebp]
add ecx, ebp
add ecx, 1
mov edx, ecx
not edx
mov edi, 0x1ffffffe
sub edi, eax
and edi, 0x1f599855
lea edi, [edi + edi*2]
add edi, ecx
and edx, 0xe0a667aa
add edx, edi
xor ecx, 0xe0a667aa
add ecx, edx
lea eax, [ecx + eax*2]
imul eax, eax, 0xad137ab3
lea ecx, [eax - 0x6cc2012]
mov edx, ecx
xor edx, 0x755fefbe
add eax, edx
add eax, 0xf933dfee
xor ecx, 0x8aa01041
add ecx, eax
imul eax, ecx, 0x4101c47b
add eax, 0x4101c47b
cmp eax, 0x20
mov eax, 0xaf77f415
mov ecx, 0xaa525788
cmovb eax, ecx
mov ecx, 0x86d1e940
jmp 0x100366a0
mov eax, dword [esp + 0x14]
mov dword [esp + 0x34], eax
lea eax, [esp + 0x70]
mov dword [esp + 0x38], eax
mov eax, dword [esp + 0x38]
mov dword [esp + 0x70], 0
mov eax, dword [esp + 0x20]
mov eax, dword [eax]
mov dword [esp + 0x3c], eax
mov eax, dword [esp + 0x24]
mov eax, dword [eax]
mov dword [esp + 0x40], eax
mov eax, dword [esp + 0x3c]
cmp eax, dword [esp + 0x40]
mov eax, 0xe166a1bf
mov ecx, 0xa57c2d64
jmp 0x10036689
mov eax, dword [esp + 8]
mov eax, dword [esp + 0x4c]
add eax, 0x18
mov dword [esp + 0x1c], eax
cmp eax, dword [esp + 0x40]
mov eax, 0xfff787a
mov ecx, 0xa57c2d64
cmove eax, ecx
mov ecx, dword [esp + 0x50]
mov ecx, 0x86d1e940
mov edx, dword [esp + 0x50]
mov dword [esp + 0x18], edx
jmp 0x100366a0
mov ecx, dword [esp]
cmp ecx, 0x67847b02
mov ecx, 0x6a7c3c75
mov edx, 0xd4330c5e
cmove ecx, edx
jmp 0x100366a0
push esi
push ebx
call fcn.10057de0
add esp, 8
mov ecx, 0x86d1e940
mov eax, 0xb48021af
jmp 0x100366a0
mov ecx, dword [esp]
cmp ecx, 0x77e09ac
mov ecx, 0x6a7c3c75
mov edx, 0x8d042f70
cmove ecx, edx
jmp 0x100366a0
mov ecx, dword [esp]
cmp ecx, 0x77e09ac
mov ecx, 0x3dc88523
mov edx, 0xd8fb740c
cmovl ecx, edx
jmp 0x100366a0
mov ecx, dword [esp]
cmp ecx, 0x36355ab9
mov ecx, 0xb9b63f50
mov edx, 0x8dd6586e
cmovl ecx, edx
jmp 0x100366a0
mov ecx, dword [esp]
cmp ecx, 0x67847b02
mov ecx, 0x7191dd26
mov edx, 0xbe66988e
cmovl ecx, edx
jmp 0x100366a0
mov ecx, dword [esp]
cmp ecx, 0x8415f641
mov ecx, 0x6a7c3c75
mov edx, 0x776a6349
cmove ecx, edx
jmp 0x100366a0
mov eax, dword [esp + 0x48]
mov eax, dword [eax]
mov dword [esp + 0x10], eax
mov eax, dword [esp + 0xc]
mov ecx, eax
xor ecx, 0x2d8adcf7
add ecx, eax
xor eax, 0xd2752308
lea edx, [ecx + eax]
add eax, ecx
add eax, 0x2d8adcf8
mov ecx, eax
and ecx, 0x2d8adcf6
add ecx, edx
add ecx, 0x2d8adcf8
not eax
or eax, 0xd2752309
add eax, ecx
imul ecx, eax, 0x7c3af205
lea eax, [ecx + 0x1be81537]
mov edx, eax
and edx, 0xb09a65ed
mov esi, eax
and esi, 0x4f659a12
sub edx, esi
add ecx, edx
add ecx, 0x1be81537
xor eax, 0xb09a65ed
add eax, ecx
mov ecx, eax
and ecx, 0xffdc7a7b
add ecx, eax
not eax
add ecx, eax
or eax, 0xffdc7a7b
sub ecx, eax
lea eax, [ecx - 0x238585]
mov edx, eax
and edx, 0x4f659a12
add ecx, edx
add ecx, 0xffdc7a7b
mov edx, eax
not edx
add edx, ecx
and eax, 0xb09a65ed
add eax, edx
imul eax, eax, 0xc1780acd
lea ecx, [eax + eax]
add ecx, 0x88f8b15c
mov edx, ecx
and edx, 0x49fdc4fc
add eax, edx
add eax, 0x447c58ae
mov edx, ecx
xor edx, 0x49fdc4fc
add edx, eax
or ecx, 0x49fdc4fc
sub edx, ecx
lea eax, [edx + 0x5b011d81]
mov ecx, eax
and ecx, 0x6abb2ea9
lea esi, [ecx + edx]
add esi, 0x5b011d81
or eax, 0x9544d156
sub esi, eax
add esi, 0x2a89a2ac
cmp esi, 0x1000
mov eax, 0x36355ab9
mov ecx, 0xbdfe5629
cmovae eax, ecx
mov ecx, 0x86d1e940
mov ebx, dword [esp + 0x10]
jmp 0x100366a0
mov ecx, dword [esp]
cmp ecx, 0x5195f9da
mov ecx, 0xd2b7ef2
mov edx, 0x6344b29
cmovl ecx, edx
jmp 0x100366a0
mov eax, dword [eax]
sub esp, 0x1c
movaps xmm0, xmmword [0x10066950]
movups xmmword [esp + 4], xmm0
mov dword [esp], eax
mov dword [esp + 0x18], 0
mov dword [esp + 0x14], 0x80
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov dword [esp + 0x14], eax
cmp eax, 0xffffffff
mov eax, 0x67847b02
jmp 0x10036684
mov ecx, dword [ecx]
push 0
lea edx, [esp + 0x74]
push edx
push eax
push ecx
push dword [esp + 0x44]
call dword [sym.imp.KERNEL32.dll_WriteFile]
mov eax, dword [esp + 0x70]
lea ecx, [eax - 0x3d2d5765]
mov edi, dword [esp + 0x18]
lea edx, [eax + edi]
add edx, 0xc2d2a89b
mov ebp, ecx
xor ebp, edi
sub edx, ebp
or ecx, edi
lea ecx, [edx + ecx*2]
mov edx, edi
not edx
add edx, ecx
sub edx, eax
lea eax, [edx + 0x3d2d5766]
mov ecx, eax
not ecx
mov ebp, ecx
and ebp, 0xc2d2a89b
add edx, ebp
add edx, 0x3d2d5766
xor eax, 0x3d2d5764
add eax, edx
or ecx, 0xc2d2a89b
sub eax, ecx
add eax, 0x3d2d5765
imul ecx, eax, 0xf37ebfbd
imul eax, eax, 0x19028086
add eax, ecx
imul eax, eax, 0xd3d0c6b
mov dword [esp + 0x50], eax
mov eax, dword [esp + 0x44]
mov eax, dword [eax]
mov dword [esp + 0xc], eax
mov eax, dword [esp + 0xc]
cmp eax, 0x10
mov eax, 0xb48021af
mov ecx, 0x5195f9da
cmovae eax, ecx
mov ecx, 0x86d1e940
jmp 0x100366a0
mov eax, dword [eax]
sub esp, 0x1c
movaps xmm0, xmmword [0x10066960]
movups xmmword [esp + 4], xmm0
mov dword [esp], eax
mov dword [esp + 0x18], 0
mov dword [esp + 0x14], 0x80
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov dword [esp + 0x14], eax
cmp eax, 0xffffffff
mov eax, 0x67847b02
mov ecx, 0xc7f3038b
jmp 0x10036689
cmp ecx, 0x8d042f70
je 0x10037402
jmp 0x100366a0
cmp ecx, 0x843b6de6
jne 0x100366a0
call fcn.10059d9d
mov ecx, dword [esp + 0x8c]
xor ecx, esp
call fcn.100582ea
add esp, 0x90
pop esi
pop edi
pop ebx
pop ebp
ret