Function at 0x10036f50
Capabilities:
Resolve function by parsing pe exports
Write file on windows

Disassembly:
push ebp
push ebx
push edi
push esi
sub esp, 0x98
mov eax, dword [0x1006b040]
xor eax, esp
mov dword [esp + 0x94], eax
cmp dword [ecx + 0x10], 0
sete byte [esp + 7]
mov dword [esp + 0x6c], ecx
lea eax, [ecx + 0x14]
mov dword [esp + 0x64], eax
mov dword [esp + 0x68], edx
lea eax, [edx + 4]
mov dword [esp + 0x60], eax
mov ecx, 0xfdc82c6
mov eax, 0xd22ad125
jmp 0x10036fd0
mov eax, dword [esp + 0x68]
mov dword [esp + 0x28], eax
mov eax, dword [esp + 0x28]
mov eax, dword [eax]
mov ecx, dword [esp + 0x60]
mov dword [esp + 0x2c], ecx
mov ecx, dword [esp + 0x2c]
cmp eax, dword [ecx]
mov eax, 0xb86a8759
mov ecx, 0xc3ddb685
cmove eax, ecx
mov ecx, 0x4ed9a7d9
nop word cs:[eax + eax]
nop dword [eax + eax]
cmp ecx, 0xf56b3577
jg 0x10037040
cmp ecx, 0xc8503772
jg 0x100370b0
cmp ecx, 0xa43748c5
jg 0x10037157
cmp ecx, 0x931f1407
jg 0x10037296
cmp ecx, 0x84e0b222
je 0x10037465
cmp ecx, 0x8873deb4
je 0x10037480
cmp ecx, 0x8a942d87
jne 0x10036fd0
mov ecx, dword [esp]
cmp ecx, 0x9a0e66a8
mov ecx, 0xc8503773
mov edx, 0x169fb1e0
cmove ecx, edx
jmp 0x10036fd0
cmp ecx, 0x2f736ea0
jg 0x10037100
cmp ecx, 0xfdc82c5
jg 0x100371a2
cmp ecx, 0xfea01b3f
jg 0x100372d5
cmp ecx, 0xf56b3578
je 0x100374ca
cmp ecx, 0xf74563da
je 0x100378de
cmp ecx, 0xf8bf78d0
jne 0x10036fd0
mov ecx, dword [esp]
cmp ecx, 0x8549e0b8
mov ecx, 0xc8503773
mov edx, 0x2b7e8509
cmove ecx, edx
jmp 0x10036fd0
cmp ecx, 0xd77da88e
jle 0x100371ed
cmp ecx, 0xea37bcc1
jg 0x10037314
cmp ecx, 0xd77da88f
je 0x100378f9
cmp ecx, 0xd7a31d48
je 0x10037914
cmp ecx, 0xd83e9d29
jne 0x10036fd0
mov ecx, 0x4ed9a7d9
jmp 0x10036fd0
cmp ecx, 0x53f60511
jle 0x1003724b
cmp ecx, 0x761d19ec
jg 0x10037353
cmp ecx, 0x53f60512
je 0x1003792f
cmp ecx, 0x637747fe
je 0x1003794a
cmp ecx, 0x70786478
jne 0x10036fd0
mov ecx, dword [esp]
cmp ecx, 0x9a0e66a8
mov ecx, 0x8a942d87
mov edx, 0x30dc1729
cmovl ecx, edx
jmp 0x10036fd0
cmp ecx, 0xbb0f5273
jg 0x10037392
cmp ecx, 0xa43748c6
je 0x1003798b
cmp ecx, 0xa659132a
je 0x100379a6
cmp ecx, 0xba67bd09
jne 0x10036fd0
mov ecx, dword [esp]
cmp ecx, 0xc3ddb685
mov ecx, 0xc8503773
mov edx, 0xcddd683d
cmove ecx, edx
jmp 0x10036fd0
cmp ecx, 0x183c4200
jg 0x100373d1
cmp ecx, 0xfdc82c6
je 0x100379c2
cmp ecx, 0x169fb1e0
je 0x100379cf
cmp ecx, 0x17f56a90
jne 0x10036fd0
mov ecx, dword [esp]
cmp ecx, 0xd22ad125
mov ecx, 0x3f186534
mov edx, 0xba67bd09
cmovl ecx, edx
jmp 0x10036fd0
cmp ecx, 0xccbc426a
jg 0x10037410
cmp ecx, 0xc8503773
je 0x100379e9
cmp ecx, 0xc8cdaf19
je 0x100379f3
cmp ecx, 0xcb2ba5cb
jne 0x10036fd0
mov ecx, dword [esp + 0x6c]
mov dword [esp + 0x30], ecx
mov eax, dword [esp + 0x64]
mov dword [esp + 0x34], eax
mov eax, dword [esp + 0x34]
cmp dword [eax], 0x10
mov dword [esp + 0x38], ecx
mov eax, dword [esp + 0x38]
jae 0x10037de6
mov eax, dword [esp + 0x30]
jmp 0x10037de8
cmp ecx, 0x3f19d9ee
jg 0x10037443
cmp ecx, 0x2f736ea1
je 0x10037a0e
cmp ecx, 0x30dc1729
je 0x10037a29
cmp ecx, 0x3f186534
jne 0x10036fd0
mov ecx, dword [esp]
cmp ecx, 0xd22ad125
mov ecx, 0xc8503773
mov edx, 0xbb0f5274
cmove ecx, edx
jmp 0x10036fd0
cmp ecx, 0x931f1408
je 0x10037a44
cmp ecx, 0x95378d5d
je 0x10037a8b
cmp ecx, 0x99d11de7
jne 0x10036fd0
mov ecx, dword [esp]
cmp ecx, 0xd77ab8e4
mov ecx, 0xc8503773
mov edx, 0x931f1408
cmove ecx, edx
jmp 0x10036fd0
cmp ecx, 0xfea01b40
je 0x10037aa6
cmp ecx, 0xfffea23a
je 0x10037adc
cmp ecx, 0x1ed2873
jne 0x10036fd0
mov ecx, dword [esp]
cmp ecx, 0xb86a8759
mov ecx, 0xc8503773
mov edx, 0xcb2ba5cb
cmove ecx, edx
jmp 0x10036fd0
cmp ecx, 0xea37bcc2
je 0x10037af7
cmp ecx, 0xea3ec7fe
je 0x10037b12
cmp ecx, 0xf2ac948e
jne 0x10036fd0
mov ecx, dword [esp]
cmp ecx, 0x95fde203
mov ecx, 0x70786478
mov edx, 0xf8bf78d0
cmovl ecx, edx
jmp 0x10036fd0
cmp ecx, 0x761d19ed
je 0x10036f93
cmp ecx, 0x77fc1ad2
je 0x10037b4b
cmp ecx, 0x7c4e1384
jne 0x10036fd0
mov ecx, dword [esp]
cmp ecx, 0xb963ccb4
mov ecx, 0xc8503773
mov edx, 0xea3ec7fe
cmove ecx, edx
jmp 0x10036fd0
cmp ecx, 0xbb0f5274
je 0x10037b66
cmp ecx, 0xbca83ab3
je 0x10037b82
cmp ecx, 0xc4be005c
jne 0x10036fd0
mov ecx, dword [esp]
cmp ecx, 0xbe000e45
mov ecx, 0xc8503773
mov edx, 0x637747fe
cmove ecx, edx
jmp 0x10036fd0
cmp ecx, 0x183c4201
je 0x10037b9d
cmp ecx, 0x2b7e8509
je 0x10037bb8
cmp ecx, 0x2d098d8a
jne 0x10036fd0
mov ecx, dword [esp]
cmp ecx, 0xb963ccb4
mov ecx, 0x7c4e1384
mov edx, 0x1ed2873
cmovl ecx, edx
jmp 0x10036fd0
cmp ecx, 0xccbc426b
je 0x10037bd5
cmp ecx, 0xce04a382
jne 0x10037f23
mov ecx, dword [esp]
cmp ecx, 0xd7882217
mov ecx, 0xc8503773
mov edx, 0x411fd02f
cmove ecx, edx
jmp 0x10036fd0
cmp ecx, 0x3f19d9ef
je 0x10037bf0
cmp ecx, 0x4ed9a7d9
jne 0x10037f31
mov ecx, 0xfdc82c6
jmp 0x10036fd0
mov ecx, dword [esp]
cmp ecx, 0x11fbdb7f
mov ecx, 0xd7a31d48
mov edx, 0x53f60512
cmovl ecx, edx
jmp 0x10036fd0
mov eax, dword [esp + 0x14]
mov ecx, eax
not ecx
lea eax, [eax + ecx*2]
mov ecx, 0xc9add298
sub ecx, eax
mov eax, ecx
and eax, 0xc9add276
add eax, ecx
mov ebp, ecx
xor ebp, 0xc9add276
add ebp, eax
or ecx, 0xc9add276
sub ebp, ecx
add ebp, 0x36522d8a
mov eax, dword [esp + 0x5c]
mov dword [esp + 8], eax
mov ecx, 0x4ed9a7d9
mov eax, 0x6ae26849
jmp 0x10036fd0
mov eax, dword [esp + 0x50]
mov eax, dword [eax]
mov dword [esp + 0x18], eax
mov esi, dword [esp + 0x14]
mov ecx, esi
not ecx
mov eax, ecx
mov ebp, ecx
mov dword [esp + 0xc], ecx
and eax, 1
mov ecx, esi
xor ecx, 1
add ecx, esi
add ecx, eax
mov edx, esi
or edx, 0xfffffffe
mov dword [esp + 8], edx
add ecx, edx
lea edx, [ecx + ebp]
add edx, 2
mov edi, edx
and edi, esi
or edx, esi
lea ebx, [edi + esi]
sub ebx, edx
add ecx, ebp
add ebx, ecx
not edi
add edi, ebx
lea ecx, [edi + edi*2]
add ecx, 9
mov edx, ecx
not edx
add edi, edi
add edi, 6
lea edi, [edi + edi*2]
and edx, 0xd4dbcb89
lea edx, [edx + edx*2]
add edx, edi
xor edi, 0x564868ec
add edi, edx
and ecx, 0x2b243476
lea edx, [edi + ecx]
add ecx, edi
add ecx, 0x2b243479
mov ebx, ecx
xor ebx, 0x7ffb6eec
add ebx, edx
lea edi, [edx + edx]
add edi, 0x564868f2
xor edi, 0x92226
add edi, ebx
mov ebx, 0xd4dbcb86
sub ebx, edx
or ecx, 0x80049113
or ebx, 0x7ffb6eec
add ebx, ecx
sub edi, ebx
lea ecx, [edi + esi]
add ecx, 0xab1fa365
add edi, esi
mov edx, ecx
and edx, 0x7ffb6eec
add edx, edi
add edx, 0xab1fa365
mov edi, ecx
xor edi, 0x7ffb6eec
add edi, edx
or ecx, 0x7ffb6eec
sub edi, ecx
lea ebx, [edi - 0x7ffb6eeb]
mov ebp, ebx
xor ebp, 0x33210359
add ebp, edi
mov edi, dword [esp + 0xc]
lea ecx, [edi + edi]
mov edx, ecx
and edx, 0xfffffffc
or edx, eax
sub edx, ecx
mov ecx, edi
or ecx, 0xfffffffe
add ecx, edx
sub ecx, dword [esp + 8]
add ecx, 1
mov eax, esi
and eax, 0xfffffffe
mov edx, eax
not edx
and edx, ecx
or eax, ecx
add eax, eax
mov ecx, esi
or ecx, 1
mov dword [esp + 0x70], ecx
add edx, ecx
not eax
add eax, edx
mov ecx, ebx
not ecx
and ecx, 0xccdefca6
add ecx, ebp
and ebx, 0x33210359
add ebx, ecx
lea ecx, [ebx + eax*2]
lea eax, [ebx + eax*2]
add eax, 0x4ce38dbd
mov edx, eax
not edx
and edx, 0xccdefca6
lea ebx, [edx + ecx*2]
add ebx, 0x99c71b7a
mov edx, edi
mov ecx, edi
and ecx, 0x7ab2f896
add ecx, edi
or eax, 0xccdefca6
sub ebx, eax
mov eax, esi
xor eax, 0x854d0769
add eax, ecx
mov ecx, esi
and ecx, 0x54d0769
lea eax, [eax + ecx*2]
mov ecx, 0x854d0767
sub ecx, eax
and ecx, esi
and ecx, 0x854d0769
lea edi, [ecx + eax]
lea edx, [ecx + eax]
add edx, 0x7ab2f898
mov ebp, edx
xor ebp, 0x854d0768
lea ecx, [edi + edi]
add ecx, 0xf565f130
mov eax, ecx
xor eax, 0xf565f12e
add eax, ebp
xor ecx, 0xa9a0ed0
lea edi, [eax + ecx]
add eax, ecx
add eax, 2
xor edx, 0x7ab2f897
lea ecx, [edx + ebp]
add ecx, 1
mov edx, eax
xor edx, ecx
or eax, ecx
mov ebp, 0xfffffffd
sub ebp, edi
or ebp, ecx
add ebp, edx
add ebp, edi
add eax, eax
sub ebp, eax
lea ecx, [ebx + 0x33210359]
mov eax, ecx
and eax, 0x3ad6ecd1
add eax, eax
mov edx, ecx
sub edx, eax
lea eax, [ebx + ebx]
add eax, 0x664206b2
xor eax, 0x8a52265c
add eax, edx
not ecx
add ecx, ecx
or ecx, 0x75add9a2
sub eax, ecx
lea ecx, [ebp + 3]
lea edx, [eax + ebp*2]
add edx, 0xbad6ecd7
add eax, 0xbad6ecd1
mov ebx, eax
or ebx, ecx
not ebx
add ebx, edx
not eax
or eax, ecx
sub ebx, eax
lea eax, [esi - 2]
or eax, 1
add eax, 1
mov ecx, esi
xor ecx, 0xfffffffe
add ecx, esi
mov edx, dword [esp + 8]
not edx
add edx, ecx
sub edx, dword [esp + 0x70]
or edx, eax
lea ecx, [ebx - 0x5f2f6f62]
lea eax, [edx - 1]
mov edi, edx
mov edx, 0x5f2f6f61
sub edx, ebx
and edx, eax
or ecx, eax
lea eax, [edx + ebx*2]
add eax, 0x41a1213c
mov edx, dword [esp + 0xc]
lea edx, [esi + edx*2]
add edx, 1
add ecx, edi
sub eax, ecx
mov ecx, edx
or ecx, 0x2ef07919
xor edx, 0xd10f86e6
lea edi, [ecx + edx]
add edx, ecx
add edx, 1
and esi, 0xd10f86e6
mov ecx, edx
not ecx
and ecx, esi
lea edi, [edi + ecx*2]
add edi, 1
mov ecx, edx
xor ecx, esi
add ecx, esi
sub edi, ecx
lea ecx, [eax + 0x1a065c33]
or esi, edx
add esi, edi
mov edi, esi
xor edi, 0x2ef07919
mov edx, edi
and edx, 0x7ffffffe
or edi, 1
add edi, edx
mov edx, esi
xor edx, 0x2ef07918
or esi, 0x7ffffffe
add esi, edi
sub edx, esi
lea esi, [eax + eax]
add esi, 0x340cb866
mov edi, ecx
or edi, 0x519ee759
sub esi, edi
xor ecx, 0x519ee759
add ecx, esi
mov esi, 0xe5f9a3cc
sub esi, eax
or esi, 0x519ee759
lea eax, [ecx + esi]
add ecx, esi
add ecx, 0x519ee75a
lea esi, [edx + edx]
add esi, 0xfffffffc
and ecx, esi
add eax, ecx
add eax, 0x519ee75a
lea eax, [eax + edx*2]
add eax, 0xfffffffc
sub eax, ecx
imul ecx, eax, 0x166c2e15
lea eax, [ecx - 0x7f26f84d]
and eax, 0xbc9b35ea
add eax, ecx
add eax, 0x80d907b3
mov edx, 0x7f26f84c
sub edx, ecx
or edx, 0xbc9b35ea
add edx, ecx
sub eax, edx
lea ecx, [eax + 0x62eada8a]
xor ecx, 0x4364ca15
add ecx, ecx
add ecx, eax
lea edx, [eax + eax]
add edx, 0xc5d5b514
or edx, 0x86c9942a
sub ecx, edx
mov edx, 0x1d152575
sub edx, eax
add edx, edx
or edx, 0x79366bd4
sub ecx, edx
imul ecx, ecx, 0xb68b313d
lea eax, [ecx + 0x7b766801]
mov edx, eax
and edx, 0x67492403
add edx, ecx
add edx, 0x7b766801
add ecx, ecx
add ecx, 0xf6ecd002
xor ecx, 0xce924806
add ecx, edx
mov edx, eax
xor edx, 0x98b6dbfc
lea esi, [ecx + edx]
add ecx, edx
add ecx, 0x316db7fb
and eax, 0x98b6dbfc
mov edx, eax
not edx
add edx, esi
add edx, 0x316db7fb
sub eax, ecx
and eax, 0xe62ff05b
add eax, edx
and edx, 0xe62ff05b
lea ebp, [edx + eax]
add ebp, 0x33a01f4a
cmp ebp, 0x1000
mov eax, 0x6ae26849
mov ecx, 0x11fbdb7f
cmovae eax, ecx
mov ecx, 0x4ed9a7d9
mov edx, dword [esp + 0x18]
mov dword [esp + 8], edx
jmp 0x10036fd0
mov ecx, dword [esp]
cmp ecx, 0xd7882217
mov ecx, 0xce04a382
mov edx, 0x99d11de7
cmovl ecx, edx
jmp 0x10036fd0
mov ecx, dword [esp]
cmp ecx, 0xbe000e45
mov ecx, 0xc4be005c
mov edx, 0x95378d5d
cmovl ecx, edx
jmp 0x10036fd0
mov ecx, dword [esp]
cmp ecx, 0x11fbdb7f
mov ecx, 0xc8503773
mov edx, 0x3f19d9ef
cmove ecx, edx
jmp 0x10036fd0
mov ecx, dword [esp]
cmp ecx, 0xe6c7a30c
mov ecx, 0xc8503773
mov edx, 0xfea01b40
cmove ecx, edx
jmp 0x10036fd0
lea ecx, [esp + 0x7c]
mov dword [esp + 0x10], ecx
lea eax, [esp + 0x8c]
mov dword [esp + 0x74], eax
lea eax, [esp + 0x90]
mov dword [esp + 0x4c], eax
mov dword [esp + 0x50], ecx
mov ecx, 0x4ed9a7d9
mov dword [esp + 0x20], 0
mov eax, 0xb963ccb4
mov edx, dword [esp + 0x44]
mov dword [esp + 0x24], edx
jmp 0x10036fd0
mov ecx, dword [esp]
cmp ecx, 0x6ae26849
mov ecx, 0x183c4201
mov edx, 0xfffea23a
cmovl ecx, edx
jmp 0x10036fd0
push ebp
push dword [esp + 0xc]
call fcn.10058fb5
add esp, 8
mov ecx, 0x4ed9a7d9
mov eax, 0xe6c7a30c
jmp 0x10036fd0
mov dword [esp], eax
mov ecx, 0xccbc426b
jmp 0x10036fd0
mov eax, dword [esp + 0x34]
cmp dword [eax], 0x10
mov eax, dword [esp + 0x38]
jae 0x10037e26
mov eax, dword [esp + 0x30]
jmp 0x10037e28
mov ecx, 0xd83e9d29
jmp 0x10036fd0
mov ecx, dword [esp]
cmp ecx, 0xd77ab8e4
mov ecx, 0xf74563da
mov edx, 0x17f56a90
cmovl ecx, edx
jmp 0x10036fd0
mov ecx, dword [esp]
cmp ecx, 0xb86a8759
mov ecx, 0xea37bcc2
mov edx, 0xf2ac948e
cmovl ecx, edx
jmp 0x10036fd0
mov ecx, dword [esp]
cmp ecx, 0x95fde203
mov ecx, 0xc8503773
mov edx, 0xf56b3578
cmove ecx, edx
jmp 0x10036fd0
mov eax, dword [esp + 0x1c]
mov dword [esp + 0x3c], eax
lea eax, [esp + 0x78]
mov dword [esp + 0x40], eax
mov eax, dword [esp + 0x40]
mov dword [esp + 0x78], 0
mov eax, dword [esp + 0x28]
mov eax, dword [eax]
mov dword [esp + 0x44], eax
mov eax, dword [esp + 0x2c]
mov eax, dword [eax]
mov dword [esp + 0x48], eax
mov eax, dword [esp + 0x44]
cmp eax, dword [esp + 0x48]
mov eax, 0xbe000e45
mov ecx, 0x8549e0b8
jmp 0x10036fb9
mov ecx, dword [esp]
cmp ecx, 0xbbe1eb21
mov ecx, 0xc8503773
mov edx, 0x8873deb4
cmove ecx, edx
jmp 0x10036fd0
mov eax, dword [esp + 0x10]
mov eax, dword [esp + 0x54]
add eax, 0x18
mov dword [esp + 0x24], eax
cmp eax, dword [esp + 0x48]
mov eax, 0xb963ccb4
mov ecx, 0x8549e0b8
cmove eax, ecx
mov ecx, dword [esp + 0x58]
mov ecx, 0x4ed9a7d9
mov edx, dword [esp + 0x58]
mov dword [esp + 0x20], edx
jmp 0x10036fd0
mov ecx, dword [esp]
cmp ecx, 0x5cae626b
mov ecx, 0xc8503773
mov edx, 0x761d19ed
cmove ecx, edx
jmp 0x10036fd0
mov ecx, dword [esp]
cmp ecx, 0xbbe1eb21
mov ecx, 0xd77da88f
mov edx, 0x2d098d8a
cmovl ecx, edx
jmp 0x10036fd0
mov eax, dword [esp + 0x24]
mov dword [esp + 0x54], eax
mov eax, dword [esp + 0x10]
mov edx, dword [esp + 0x54]
lea ecx, [esp + 0x7c]
call fcn.10054660
mov eax, dword [esp + 0x74]
mov eax, dword [eax]
mov ecx, dword [esp + 0x4c]
cmp dword [ecx], 0x10
mov ecx, dword [esp + 0x50]
jae 0x10037e61
mov ecx, dword [esp + 0x10]
jmp 0x10037e63
mov ecx, dword [esp]
cmp ecx, 0xe6c7a30c
mov ecx, 0xbca83ab3
mov edx, 0xc8cdaf19
cmovl ecx, edx
jmp 0x10036fd0
cmp byte [esp + 7], 0
mov eax, 0x5cae626b
mov ecx, 0xc3ddb685
cmovne eax, ecx
mov ecx, 0x4ed9a7d9
jmp 0x10036fd0
mov ecx, dword [esp]
cmp ecx, 0x5cae626b
mov ecx, 0xa43748c6
mov edx, 0x84e0b222
cmovl ecx, edx
jmp 0x10036fd0
mov ecx, dword [esp]
cmp ecx, 0x6ae26849
mov ecx, 0xc8503773
mov edx, 0xa659132a
cmove ecx, edx
jmp 0x10036fd0
push dword [esp + 0x3c]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [esp + 0x40]
mov ecx, 0x4ed9a7d9
mov eax, 0xc3ddb685
jmp 0x10036fd0
mov ecx, dword [esp]
cmp ecx, 0xc3ddb685
mov ecx, 0x77fc1ad2
mov edx, 0x2f736ea1
cmovl ecx, edx
jmp 0x10036fd0
mov eax, dword [esp + 0x18]
mov eax, dword [eax - 4]
mov dword [esp + 0x5c], eax
mov eax, dword [esp + 0x18]
mov ecx, 0x71e52fa
sub ecx, eax
mov edx, ecx
and edx, 0x38e1ad04
add edx, eax
or ecx, 0xc71e52fb
sub edx, ecx
lea eax, [edx - 0x38e1ad05]
mov ecx, eax
not ecx
mov edi, eax
xor edi, 0x1378a9bf
add edx, edi
add edx, 0xc71e52fb
and ecx, 0xec875640
add ecx, edx
and eax, 0x1378a9bf
lea edx, [ecx + eax]
add eax, ecx
add eax, 0x1378a9c0
mov ecx, eax
not ecx
and ecx, 0xfffffffc
add ecx, edx
add ecx, 0x1378a9c0
or eax, 3
lea edx, [ecx + eax]
add eax, ecx
add eax, 0xfffffffd
mov ecx, eax
not ecx
add edx, edx
add edx, 0xfffffffa
or eax, 0x1378a9bf
sub edx, eax
or ecx, 0xec875640
add ecx, edx
add ecx, 0x8e61e8ad
mov eax, ecx
and eax, 0x719e1753
mov edx, ecx
xor edx, 0x8e61e8ac
add edx, eax
mov edi, ecx
xor edi, 0x719e1753
add edi, edx
and ecx, 0x8e61e8ac
lea eax, [edi + ecx]
add ecx, edi
add ecx, 0x719e1755
mov ebx, dword [esp + 0x5c]
mov esi, ebx
not esi
lea edi, [ebx + esi*2]
mov dword [esp + 0xc], ebp
mov ebp, edi
not ebp
lea edi, [edi + ebp*2]
and edi, ecx
mov ebp, edi
neg ebp
mov edx, ebx
or edx, ebp
and ebp, esi
add ebp, edi
add edx, ebx
add ebp, ebx
sub ebp, edx
not ecx
lea edx, [ecx + eax*2]
add edx, 0xe33c2eac
lea eax, [ebp + 0x490ee826]
mov edi, 0xb6f117d9
sub edi, ebp
and edi, edx
add edi, ebp
add edi, 0x490ee826
add edi, edx
or eax, edx
not eax
add eax, edi
add eax, ebp
mov ebp, dword [esp + 0xc]
lea edx, [esi + esi*2]
lea edx, [edx + ebx*2]
add edx, 2
or edx, ecx
mov ecx, edx
not ecx
mov esi, edx
and esi, 0xca115bf8
or ecx, 0x35eea407
xor edx, 0x35eea407
add ecx, edx
add ecx, 1
or esi, ecx
mov edx, esi
xor edx, 0x35eea407
add edx, esi
not esi
and esi, 0xca115bf8
add esi, edx
or ecx, 0xca115bf8
sub esi, ecx
not eax
mov ecx, esi
not ecx
lea edx, [esi + ecx*2]
lea ecx, [esi + ecx*2]
add ecx, 2
lea esi, [edx + eax*2]
add esi, 2
or ecx, eax
not ecx
add ecx, esi
mov esi, 0xfffffffd
sub esi, edx
or esi, eax
sub esi, ecx
imul eax, esi, 0xf2a5f759
mov ecx, eax
xor ecx, 0xe5abd633
add ecx, eax
xor eax, 0x1a5429cc
lea edx, [ecx + eax]
add eax, ecx
add eax, 0x1a5429ce
lea ecx, [edx + edx]
add ecx, 0x34a8539c
or ecx, 0x547f6f21
xor eax, 0x55c0486f
add eax, ecx
imul eax, eax, 0x9624e0e9
mov ecx, 0x1d2b17ea
sub ecx, eax
add eax, 0xc2d4e815
and eax, 0xe4dc120f
and ecx, 0x1b23edf0
sub eax, ecx
add eax, 0xd9718836
cmp eax, 0x20
mov eax, 0xd7882217
mov ecx, 0xbbe1eb21
cmovb eax, ecx
mov ecx, 0x4ed9a7d9
jmp 0x10036fd0
mov eax, dword [eax]
sub esp, 0x1c
movaps xmm0, xmmword [0x10067960]
movups xmmword [esp + 4], xmm0
mov dword [esp], eax
mov dword [esp + 0x18], 0
mov dword [esp + 0x14], 0x80
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov dword [esp + 0x1c], eax
cmp eax, 0xffffffff
mov eax, 0xd77ab8e4
mov ecx, 0x9a0e66a8
jmp 0x10036fb9
mov eax, dword [eax]
sub esp, 0x1c
movaps xmm0, xmmword [0x10067950]
movups xmmword [esp + 4], xmm0
mov dword [esp], eax
mov dword [esp + 0x18], 0
mov dword [esp + 0x14], 0x80
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov dword [esp + 0x1c], eax
cmp eax, 0xffffffff
mov eax, 0xd77ab8e4
jmp 0x10036fb4
mov ecx, dword [ecx]
push 0
lea edx, [esp + 0x7c]
push edx
push eax
push ecx
push dword [esp + 0x4c]
call dword [sym.imp.KERNEL32.dll_WriteFile]
mov eax, dword [esp + 0x78]
mov edx, eax
neg edx
mov esi, dword [esp + 0x20]
mov ecx, esi
neg ecx
lea ebx, [esi - 1]
or ebx, edx
xor edx, ecx
sub edx, eax
sub edx, esi
add ebx, edx
add eax, 0xffffffff
or eax, ecx
add eax, ebx
mov ecx, 0xfffffffe
sub ecx, eax
imul eax, ecx, 0x65a910df
imul ecx, ecx, 0x34adde42
mov edx, eax
or edx, 0xeb7d2de6
add edx, ecx
mov ecx, eax
xor ecx, 0x1482d219
add ecx, edx
not eax
or eax, 0xeb7d2de6
sub ecx, eax
imul eax, ecx, 0x9bfeab1f
lea ecx, [eax + 0x11facf26]
mov edx, ecx
and edx, 0xee0530da
add eax, edx
add eax, 0x11facf26
not ecx
add eax, ecx
or ecx, 0xee0530da
sub ecx, eax
add ecx, 0x11facf26
mov dword [esp + 0x58], ecx
mov eax, dword [esp + 0x4c]
mov eax, dword [eax]
mov dword [esp + 0x14], eax
mov eax, dword [esp + 0x14]
cmp eax, 0x10
mov eax, 0xe6c7a30c
mov ecx, 0x95fde203
cmovae eax, ecx
mov ecx, 0x4ed9a7d9
jmp 0x10036fd0
cmp ecx, 0xcddd683d
jne 0x10036fd0
jmp 0x10037f42
cmp ecx, 0x411fd02f
jne 0x10036fd0
call fcn.1005af6d
mov ecx, dword [esp + 0x94]
xor ecx, esp
call fcn.100594ba
add esp, 0x98
pop esi
pop edi
pop ebx
pop ebp
ret