Function at 0x100369d0
Capabilities:
Resolve function by parsing pe exports
Write file on windows

Disassembly:
push ebp
push ebx
push edi
push esi
sub esp, 0xa4
mov eax, dword [0x1006b040]
xor eax, esp
mov dword [esp + 0xa0], eax
cmp dword [ecx + 0x10], 0
sete byte [esp + 7]
mov dword [esp + 0x70], ecx
lea eax, [ecx + 0x14]
mov dword [esp + 0x68], eax
mov dword [esp + 0x6c], edx
lea eax, [edx + 4]
mov dword [esp + 0x64], eax
mov ecx, 0x82668ff6
mov eax, 0xef64b092
jmp 0x10036a60
mov eax, dword [esp + 0x34]
sub esp, 0x1c
movaps xmm0, xmmword [0x10067950]
movups xmmword [esp + 4], xmm0
mov dword [esp], eax
mov dword [esp + 0x18], 0
mov dword [esp + 0x14], 0x80
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov dword [esp + 0x20], eax
cmp eax, 0xffffffff
mov eax, 0x7a747ce7
mov ecx, 0xd296c93a
cmove eax, ecx
mov ecx, 0xf51a8f48
nop dword [eax + eax]
cmp ecx, 0x986d5a6
jg 0x10036ad0
cmp ecx, 0xd738e775
jg 0x10036b40
cmp ecx, 0xb969a33e
jg 0x10036be4
cmp ecx, 0xa4901aab
jg 0x10036d60
cmp ecx, 0x82668ff6
je 0x1003734b
cmp ecx, 0x8560fc3f
je 0x10037358
cmp ecx, 0x9a5ce885
jne 0x10036a60
mov ecx, dword [esp]
cmp ecx, 0xe06a4be
mov ecx, 0xdaf186ce
mov edx, 0xd4b180fd
cmovl ecx, edx
jmp 0x10036a60
cmp ecx, 0x3bd29c9b
jg 0x10036b90
cmp ecx, 0x1ea22c18
jg 0x10036c42
cmp ecx, 0xfd12e69
jg 0x10036d9f
cmp ecx, 0x986d5a7
je 0x1003738e
cmp ecx, 0xac4d655
je 0x100373a9
cmp ecx, 0xce082a3
jne 0x10036a60
mov ecx, dword [esp]
cmp ecx, 0x7a747ce7
mov ecx, 0xe0ab41ca
mov edx, 0x676d7c73
cmove ecx, edx
jmp 0x10036a60
cmp ecx, 0xf51a8f47
jg 0x10036c8d
cmp ecx, 0xe61f9817
jg 0x10036dcd
cmp ecx, 0xd738e776
je 0x100373c4
cmp ecx, 0xdaf186ce
je 0x100373df
cmp ecx, 0xe0ab41ca
jne 0x10036a60
mov ecx, 0x1e8ce9f7
jmp 0x10036a60
cmp ecx, 0x4ef4670c
jg 0x10036ce3
cmp ecx, 0x46f6bdf7
jg 0x10036e0c
cmp ecx, 0x3bd29c9c
je 0x100373fa
cmp ecx, 0x3c5b08d5
je 0x10037415
cmp ecx, 0x3e18c202
jne 0x10036a60
mov eax, dword [esp + 0x38]
cmp dword [eax], 0x10
mov eax, dword [esp + 0x3c]
jb 0x10036a13
mov eax, dword [eax]
jmp 0x10036a17
cmp ecx, 0xcd4f5753
jg 0x10036e4b
cmp ecx, 0xb969a33f
je 0x10037454
cmp ecx, 0xb9871298
je 0x1003746f
cmp ecx, 0xbaf3b63c
jne 0x10036a60
mov ecx, dword [esp + 0x70]
mov dword [esp + 0x34], ecx
mov eax, dword [esp + 0x68]
mov dword [esp + 0x38], eax
mov eax, dword [esp + 0x38]
cmp dword [eax], 0x10
mov dword [esp + 0x3c], ecx
mov eax, dword [esp + 0x3c]
jae 0x10037751
mov eax, dword [esp + 0x34]
jmp 0x10037753
cmp ecx, 0x2aa94cee
jg 0x10036eb6
cmp ecx, 0x1ea22c19
je 0x1003748a
cmp ecx, 0x29109f85
je 0x100374a5
cmp ecx, 0x291c83ba
jne 0x10036a60
mov ecx, dword [esp]
cmp ecx, 0x8ce8d89b
mov ecx, 0xe0ab41ca
mov edx, 0x34d9e38b
cmove ecx, edx
jmp 0x10036a60
cmp ecx, 0xfe850ad5
jle 0x10037214
cmp ecx, 0xfe850ad6
je 0x100374c1
cmp ecx, 0x7c4f983
je 0x100374dc
cmp ecx, 0x7fab451
jne 0x10036a60
mov eax, dword [esp + 0x6c]
mov dword [esp + 0x2c], eax
mov eax, dword [esp + 0x2c]
mov eax, dword [eax]
mov ecx, dword [esp + 0x64]
mov dword [esp + 0x30], ecx
mov ecx, dword [esp + 0x30]
cmp eax, dword [ecx]
mov eax, 0xca5d7f9c
jmp 0x10036a4b
cmp ecx, 0x68cb8f78
jg 0x10037318
cmp ecx, 0x4ef4670d
je 0x100374f7
cmp ecx, 0x574dade6
je 0x10037512
cmp ecx, 0x676d7c73
jne 0x10036a60
mov eax, dword [esp + 0x20]
mov dword [esp + 0x40], eax
lea eax, [esp + 0x84]
mov dword [esp + 0x44], eax
mov eax, dword [esp + 0x44]
mov dword [esp + 0x84], 0
mov eax, dword [esp + 0x2c]
mov eax, dword [eax]
mov dword [esp + 0x48], eax
mov eax, dword [esp + 0x30]
mov eax, dword [eax]
mov dword [esp + 0x4c], eax
mov eax, dword [esp + 0x48]
cmp eax, dword [esp + 0x4c]
mov eax, 0x42ba9deb
mov ecx, 0x8b3522ba
jmp 0x10036a50
cmp ecx, 0xa4901aac
je 0x1003752d
cmp ecx, 0xad137c6d
je 0x10037548
cmp ecx, 0xae433af3
jne 0x10036a60
mov ecx, dword [esp]
cmp ecx, 0xfc927a78
mov ecx, 0xe0ab41ca
mov edx, 0x7fab451
cmove ecx, edx
jmp 0x10036a60
cmp ecx, 0xfd12e6a
je 0x10037563
cmp ecx, 0x19e461eb
je 0x1003757e
cmp ecx, 0x1e8ce9f7
jne 0x10036a60
mov ecx, 0xf51a8f48
jmp 0x10036a60
cmp ecx, 0xe61f9818
je 0x1003759d
cmp ecx, 0xe61fd0fe
je 0x100375ba
cmp ecx, 0xe8585761
jne 0x10036a60
mov ecx, dword [esp]
cmp ecx, 0xa4375d93
mov ecx, 0xe0ab41ca
mov edx, 0x3c5b08d5
cmove ecx, edx
jmp 0x10036a60
cmp ecx, 0x46f6bdf8
je 0x100375d5
cmp ecx, 0x4837f368
je 0x100375f0
cmp ecx, 0x4ce4a6ee
jne 0x10036a60
mov ecx, dword [esp]
cmp ecx, 0x826f1cde
mov ecx, 0xe0ab41ca
mov edx, 0x68cb8f79
cmove ecx, edx
jmp 0x10036a60
cmp ecx, 0xcd4f5754
je 0x1003760b
cmp ecx, 0xd4b180fd
je 0x10037626
cmp ecx, 0xd6219319
jne 0x10036a60
lea ecx, [esp + 0x88]
mov dword [esp + 8], ecx
lea eax, [esp + 0x98]
mov dword [esp + 0x80], eax
lea eax, [esp + 0x9c]
mov dword [esp + 0x50], eax
mov dword [esp + 0x54], ecx
mov ecx, 0xf51a8f48
mov dword [esp + 0x24], 0
mov eax, 0xa4375d93
mov edx, dword [esp + 0x48]
mov dword [esp + 0x28], edx
jmp 0x10036a60
cmp ecx, 0x2aa94cef
je 0x10037641
cmp ecx, 0x34d9e38b
je 0x1003765c
cmp ecx, 0x354c1b5b
jne 0x10036a60
mov eax, dword [esp + 0x10]
mov eax, dword [eax - 4]
mov dword [esp + 0x60], eax
mov eax, dword [esp + 0x10]
mov ecx, eax
or ecx, 0x3d1d014c
mov edx, eax
or edx, 0xc2e2feb3
add edx, ecx
not edx
lea eax, [edx + eax*2]
mov ecx, eax
not ecx
mov edx, eax
and edx, 0xfffffffb
add eax, eax
sub eax, edx
or ecx, 0xfffffffb
add ecx, eax
imul eax, ecx, 0x114e34cb
add eax, 0xcc15619f
mov ecx, eax
not ecx
mov edx, ecx
and edx, 0x28c01914
xor eax, 0xd73fe6eb
add eax, edx
add eax, ecx
or ecx, 0x28c01914
sub eax, ecx
imul ecx, eax, 0x7bc06f1d
lea eax, [ecx + 0x281debd9]
mov edx, eax
and edx, 0xb7c7a8b8
mov esi, eax
and esi, 0x48385747
sub esi, edx
add ecx, esi
add ecx, 0x281debd9
not eax
or eax, 0xb7c7a8b8
add eax, ecx
lea ecx, [eax + edx]
lea esi, [edx + eax]
add esi, 0x48385749
mov eax, esi
and eax, 0x53a28344
add ecx, eax
add ecx, 0x48385749
mov eax, esi
or eax, 0x53a28344
sub ecx, eax
xor esi, 0x53a28344
lea ebp, [ecx + esi]
mov dword [esp + 0x14], ebp
lea edx, [ecx + esi]
add edx, 0xb6a2bfc
mov edi, ecx
mov dword [esp + 0x7c], ecx
mov dword [esp + 0x78], esi
mov eax, edx
or eax, 0x80df1205
mov ebx, 0xf495d403
sub ebx, ebp
mov ecx, ebx
or ecx, 0x80df1205
add ecx, eax
mov eax, edx
or eax, 0x7f20edfa
add edi, esi
add edi, 0x53a28344
sub eax, edi
add ecx, edi
mov edi, edx
and edi, 0x80df1205
add edi, ebp
add edi, 0xb6a2bfc
sub edi, ecx
add edi, 0xc917694c
lea ecx, [eax + 0x48385748]
mov ebp, ecx
or ebp, edi
add ebp, eax
add ebp, 0x48385748
mov eax, ecx
xor eax, edi
not eax
add eax, ebp
not edi
add eax, edi
or edi, ecx
add edi, edi
sub eax, edi
mov ecx, eax
and ecx, 0x7f20edfa
mov edi, eax
xor edi, 0x80df1205
add edi, ecx
not eax
or eax, 0x80df1205
lea ecx, [eax + edi]
add ecx, 1
mov eax, ecx
not eax
mov esi, dword [esp + 0x60]
mov edi, esi
not edi
mov dword [esp + 0x74], edi
mov ebp, esi
and ebp, eax
or eax, edi
add eax, ebp
add eax, ecx
or ecx, esi
not eax
add eax, ecx
mov edi, dword [esp + 0x14]
lea ecx, [eax + edi*2]
add ecx, 0x3a4a241d
add ecx, ecx
lea eax, [edi + edi]
add eax, 0x3a4a241d
sub ecx, eax
mov ebp, esi
neg ebp
mov eax, 0x69abbb2f
sub eax, ecx
and eax, ebp
lea eax, [eax + ecx*2]
add eax, 0x2ca889a0
add ecx, 0x965444d0
or ecx, ebp
add ecx, esi
sub eax, ecx
mov ecx, eax
and ecx, 0x4635ef0b
add ecx, ecx
mov ebp, eax
sub ebp, ecx
add eax, eax
mov ecx, eax
or ecx, 0x8c6bde16
add ecx, ebp
xor eax, 0x739421e8
lea ebp, [ecx + eax]
add ecx, eax
add ecx, 0x162dd60f
mov edi, esi
or edi, edx
neg edi
mov eax, 0xe9d229f0
sub eax, ebp
and eax, edi
add ebp, eax
add ebp, 0x162dd60f
mov eax, ecx
or eax, edi
add eax, ebp
xor edi, ecx
sub eax, edi
mov edi, eax
and edi, 0xcff7e701
add edi, eax
mov ecx, eax
xor ecx, 0xcff7e701
add ecx, edi
or eax, 0xcff7e701
sub ecx, eax
mov eax, ebx
and eax, esi
mov edi, edx
and edi, esi
add edi, eax
mov ebp, dword [esp + 0x74]
or ebx, ebp
lea eax, [ebx + edi]
add eax, 1
mov edi, edx
and edi, ebp
or edi, eax
lea eax, [ecx + 0x2bbc82b1]
mov ebx, eax
xor eax, edi
not edi
xor ebx, edi
add ebx, edi
add eax, ebx
lea edi, [ecx + eax]
lea ebx, [ecx + eax]
add ebx, 0x2bbc82b2
lea eax, [edi + edi]
add eax, 0x57790564
or eax, 0xf768d364
add eax, edi
add eax, 0x2bbc82b2
mov ecx, ebx
xor ecx, 0x44b964d
add ecx, eax
sub ebx, ecx
mov eax, 0xb495d403
sub eax, dword [esp + 0x14]
and eax, 0x19911604
and edx, 0xe66ee9fb
or edx, eax
xor edx, 0xe66ee9fb
add edx, eax
mov eax, dword [esp + 0x7c]
mov ecx, dword [esp + 0x78]
add eax, ecx
add eax, 0x6b6a2bfc
or eax, 0xe66ee9fb
lea ecx, [edx + eax]
add edx, eax
add edx, 1
lea eax, [ecx + ecx]
add eax, 2
mov edi, edx
xor edi, esi
add edi, edi
sub edi, eax
mov eax, edx
or edx, ebp
and eax, esi
add edx, edi
lea edx, [edx + ecx*2]
mov edi, 0xfffffffe
sub edi, ecx
or edi, esi
add edx, edi
add edx, 4
mov ecx, eax
not ecx
mov esi, edx
and esi, ecx
mov edi, eax
or edi, edx
add edi, esi
xor eax, edx
not eax
add eax, edi
or ecx, edx
sub eax, ecx
lea ecx, [ebx + eax]
add eax, ebx
add eax, 0x89225d2b
mov edx, eax
and edx, 0x6e467639
add ecx, edx
add ecx, 0x89225d2b
mov esi, eax
xor esi, 0x91b989c6
add esi, ecx
xor eax, 0x6e467639
add eax, esi
neg eax
add eax, edx
add eax, 0x91b989c6
cmp eax, 0x20
mov eax, 0x826f1cde
mov ecx, 0x8ce8d89b
cmovb eax, ecx
mov ecx, 0xf51a8f48
jmp 0x10036a60
cmp ecx, 0xf51a8f48
je 0x1003772c
cmp ecx, 0xfaf57a1e
jne 0x1003793d
mov eax, dword [esp + 0x54]
mov eax, dword [eax]
mov dword [esp + 0x10], eax
mov eax, dword [esp + 0xc]
mov ecx, eax
not ecx
mov edx, ecx
and edx, 0xb378a352
add edx, eax
xor eax, 0x4c875cad
add eax, edx
or ecx, 0xb378a352
sub eax, ecx
imul eax, eax, 0x2c123cf9
lea ecx, [eax - 0x6f3d14bd]
and ecx, 0x1ee7188f
add ecx, eax
add ecx, 0x90c2eb43
mov edx, 0x6f3d14bc
sub edx, eax
or edx, 0xe118e770
lea eax, [ecx + edx]
add ecx, edx
add ecx, 0xe118e771
mov edx, 0x9ee7188e
sub edx, eax
and edx, 0x64b0ae4a
lea eax, [edx + eax*2]
add eax, 0xc231cee2
or ecx, 0x64b0ae4a
sub eax, ecx
imul ecx, eax, 0x3229c549
lea eax, [ecx - 0x665e18c0]
mov edx, eax
and edx, 0xb4dcd110
add ecx, edx
add ecx, 0x99a1e740
or eax, 0x4b232eef
mov edx, eax
not edx
add edx, ecx
mov esi, edx
and esi, 0x5c0373a6
add esi, esi
sub edx, esi
mov esi, ecx
sub esi, eax
lea edx, [edx + esi*2]
sub eax, ecx
add eax, eax
or eax, 0xb806e74c
add eax, edx
add eax, 0x5c0373a6
mov dword [esp + 0x1c], eax
cmp eax, 0x1000
mov eax, 0xef62c73e
mov ecx, 0x5df4d9f7
cmovae eax, ecx
mov ecx, 0xf51a8f48
mov edx, dword [esp + 0x10]
mov dword [esp + 0x18], edx
jmp 0x10036a60
cmp ecx, 0x787630a5
je 0x10037736
cmp ecx, 0x79cd2fcb
jne 0x1003794b
mov ecx, dword [esp]
cmp ecx, 0x5df4d9f7
mov ecx, 0xa4901aac
mov edx, 0x4ef4670d
cmovl ecx, edx
jmp 0x10036a60
mov dword [esp], eax
mov ecx, 0x3bd29c9c
jmp 0x10036a60
mov eax, dword [esp + 8]
mov eax, dword [esp + 0x58]
add eax, 0x18
mov dword [esp + 0x28], eax
cmp eax, dword [esp + 0x4c]
mov eax, 0xa4375d93
mov ecx, 0x8b3522ba
cmove eax, ecx
mov ecx, dword [esp + 0x5c]
mov ecx, 0xf51a8f48
mov edx, dword [esp + 0x5c]
mov dword [esp + 0x24], edx
jmp 0x10036a60
mov ecx, dword [esp]
cmp ecx, 0xca5d7f9c
mov ecx, 0xe0ab41ca
mov edx, 0xbaf3b63c
cmove ecx, edx
jmp 0x10036a60
mov ecx, dword [esp]
cmp ecx, 0x1bc03cde
mov ecx, 0xe0ab41ca
mov edx, 0xfaf57a1e
cmove ecx, edx
jmp 0x10036a60
mov ecx, dword [esp]
cmp ecx, 0x42aee101
mov ecx, 0xe0ab41ca
mov edx, 0x8560fc3f
cmove ecx, edx
jmp 0x10036a60
mov ecx, dword [esp]
cmp ecx, 0x1bc03cde
mov ecx, 0xac4d655
mov edx, 0xad137c6d
cmovl ecx, edx
jmp 0x10036a60
mov ecx, dword [esp]
cmp ecx, 0xef64b092
mov ecx, 0xe61fd0fe
mov edx, 0xfe850ad6
cmovl ecx, edx
jmp 0x10036a60
mov eax, dword [esp + 0x28]
mov dword [esp + 0x58], eax
mov eax, dword [esp + 8]
mov edx, dword [esp + 0x58]
lea ecx, [esp + 0x88]
call fcn.10052b80
mov eax, dword [esp + 0x80]
mov eax, dword [eax]
mov ecx, dword [esp + 0x50]
cmp dword [ecx], 0x10
mov ecx, dword [esp + 0x54]
jae 0x10037791
mov ecx, dword [esp + 8]
jmp 0x10037793
mov ecx, dword [esp]
cmp ecx, 0x42ba9deb
mov ecx, 0xe0ab41ca
mov edx, 0xd6219319
cmove ecx, edx
jmp 0x10036a60
mov ecx, dword [esp]
cmp ecx, 0x5df4d9f7
mov ecx, 0xe0ab41ca
mov edx, 0x354c1b5b
cmove ecx, edx
jmp 0x10036a60
mov ecx, dword [esp]
cmp ecx, 0x8b3522ba
mov ecx, 0x7c4f983
mov edx, 0x4ce4a6ee
cmovl ecx, edx
jmp 0x10036a60
cmp byte [esp + 7], 0
mov eax, 0xfc927a78
mov ecx, 0xd296c93a
cmovne eax, ecx
mov ecx, 0xf51a8f48
jmp 0x10036a60
mov ecx, dword [esp]
cmp ecx, 0xa4375d93
mov ecx, 0x574dade6
mov edx, 0x1ea22c19
cmovl ecx, edx
jmp 0x10036a60
mov ecx, dword [esp]
cmp ecx, 0x8ce8d89b
mov ecx, 0x291c83ba
mov edx, 0xfd12e6a
cmovl ecx, edx
jmp 0x10036a60
mov ecx, dword [esp]
cmp ecx, 0x42ba9deb
mov ecx, 0xb969a33f
mov edx, 0xd738e776
cmovl ecx, edx
jmp 0x10036a60
mov ecx, dword [esp]
cmp ecx, 0xd296c93a
mov ecx, 0x787630a5
mov edx, 0x46f6bdf8
cmovl ecx, edx
jmp 0x10036a60
mov ecx, dword [esp]
cmp ecx, 0x7a747ce7
mov ecx, 0xce082a3
mov edx, 0xb9871298
cmovl ecx, edx
jmp 0x10036a60
mov ecx, dword [esp]
cmp ecx, 0xe06a4be
mov ecx, 0xe0ab41ca
mov edx, 0x3e18c202
cmove ecx, edx
jmp 0x10036a60
mov ecx, dword [esp]
cmp ecx, 0x8b3522ba
mov ecx, 0xe0ab41ca
mov edx, 0xe61f9818
cmove ecx, edx
jmp 0x10036a60
push dword [esp + 0x1c]
push dword [esp + 0x1c]
call fcn.10058253
add esp, 8
mov ecx, 0xf51a8f48
mov eax, 0x42aee101
jmp 0x10036a60
push dword [esp + 0x40]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [esp + 0x44]
mov ecx, 0xf51a8f48
mov eax, 0xd296c93a
jmp 0x10036a60
mov ecx, dword [esp]
cmp ecx, 0x42aee101
mov ecx, 0x79cd2fcb
mov edx, 0x9a5ce885
cmovl ecx, edx
jmp 0x10036a60
mov ecx, dword [esp]
cmp ecx, 0xca5d7f9c
mov ecx, 0x986d5a7
mov edx, 0xe8585761
cmovl ecx, edx
jmp 0x10036a60
mov ecx, dword [esp]
cmp ecx, 0xef64b092
mov ecx, 0xe0ab41ca
mov edx, 0x29109f85
cmove ecx, edx
jmp 0x10036a60
mov ecx, dword [esp]
cmp ecx, 0xd296c93a
mov ecx, 0xe0ab41ca
mov edx, 0xf8497ed1
cmove ecx, edx
jmp 0x10036a60
mov ecx, dword [esp]
cmp ecx, 0xfc927a78
mov ecx, 0xae433af3
mov edx, 0x4837f368
cmovl ecx, edx
jmp 0x10036a60
mov ecx, dword [esp]
cmp ecx, 0xef62c73e
mov ecx, 0xe0ab41ca
mov edx, 0x19e461eb
cmove ecx, edx
jmp 0x10036a60
imul ecx, dword [esp + 0xc], 0x99384e37
lea eax, [ecx + 0x158cab41]
mov edx, 0x6a7354be
sub edx, ecx
and edx, 0x62f8b838
add edx, ecx
add edx, 0x158cab41
xor eax, 0x9d0747c7
add eax, edx
mov edx, 0xea7354be
sub edx, ecx
or edx, 0x62f8b838
sub eax, edx
add eax, 0x9d0747c8
imul ecx, eax, 0x548ec787
imul eax, eax, 0xa91d8f0e
mov edx, ecx
not edx
add eax, edx
or ecx, 0x501db9ae
or edx, 0x501db9ae
add edx, ecx
sub eax, edx
lea ecx, [eax - 0x5fc48ca4]
lea edx, [eax + eax]
add edx, 0x4076e6b8
xor ecx, 0xf0ef289a
lea eax, [ecx + eax*2]
add eax, 0x4076e6b8
or edx, 0xe1de5134
sub eax, edx
lea ecx, [eax - 1]
mov edx, ecx
and edx, 0xafe24651
add edx, eax
add edx, 0xffffffff
mov esi, ecx
xor esi, 0xafe24651
add esi, edx
xor ecx, 0x501db9ae
add ecx, esi
neg eax
or eax, 0x501db9ae
add eax, ecx
add eax, 0xafe24654
mov dword [esp + 0x1c], eax
mov eax, dword [esp + 0x60]
mov dword [esp + 0x18], eax
mov ecx, 0xf51a8f48
mov eax, 0xef62c73e
jmp 0x10036a60
mov ecx, 0x82668ff6
jmp 0x10036a60
mov ecx, dword [esp]
cmp ecx, 0xef62c73e
mov ecx, 0x2aa94cef
mov edx, 0xcd4f5754
cmovl ecx, edx
jmp 0x10036a60
mov eax, dword [eax]
sub esp, 0x1c
movaps xmm0, xmmword [0x10067960]
movups xmmword [esp + 4], xmm0
mov dword [esp], eax
mov dword [esp + 0x18], 0
mov dword [esp + 0x14], 0x80
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov dword [esp + 0x20], eax
cmp eax, 0xffffffff
mov eax, 0x7a747ce7
mov ecx, 0xe06a4be
jmp 0x10036a50
mov ecx, dword [ecx]
push 0
lea edx, [esp + 0x88]
push edx
push eax
push ecx
push dword [esp + 0x50]
call dword [sym.imp.KERNEL32.dll_WriteFile]
mov eax, dword [esp + 0x84]
mov ebp, dword [esp + 0x24]
mov ecx, ebp
xor ecx, 0x2773da09
mov esi, ebp
add esi, ebp
not esi
and esi, 0xb1184bec
add esi, ecx
or ecx, 0xd88c25f6
mov edx, ebp
or edx, 0xd88c25f6
add edx, ecx
sub edx, esi
mov ecx, eax
not ecx
mov esi, eax
or esi, edx
not edx
mov edi, eax
and edi, edx
sub edi, eax
add edi, esi
or edx, eax
lea ebx, [edi + edx]
lea esi, [edx + edi]
add esi, 0xbcf0721e
mov edx, esi
and edx, ecx
lea edi, [edx + ebx]
add edi, 0xbcf0721e
add edi, eax
mov edx, esi
xor edx, eax
not edx
add edx, edi
or esi, ecx
sub edx, esi
mov esi, edx
and esi, 0xbcf0721d
lea edi, [edx + edx]
sub edi, esi
not edx
add edx, edi
add esi, edx
add esi, 0x430f8de4
mov edi, ebp
neg edi
mov ebx, esi
lea edx, [ebp - 1]
or edx, esi
not esi
and esi, edi
sub ebx, esi
add ebx, ebp
sub edx, ebx
mov edi, ebp
and edi, ecx
mov esi, ebp
not esi
mov ebx, eax
and ebx, esi
lea ebx, [edi + ebx*2]
mov edi, ebp
xor edi, eax
add edi, edi
sub edi, ebx
mov ebx, ebp
xor ebx, ecx
add ebx, ecx
or esi, eax
or eax, ebp
add eax, ebx
lea ecx, [edx + 1]
add esi, eax
add esi, 2
or esi, edi
mov eax, esi
neg eax
mov edi, ecx
and edi, eax
add edx, edi
add edx, 1
mov edi, ecx
xor edi, eax
add edi, edx
or eax, ecx
add eax, esi
sub eax, edi
mov ecx, eax
not ecx
and ecx, 0xe805cf09
add ecx, eax
mov edx, eax
or edx, 0xe805cf09
add edx, ecx
xor eax, 0x17fa30f6
lea ecx, [edx + eax]
add eax, edx
add eax, 1
mov edx, eax
and edx, 0xfffffffe
add ecx, edx
add ecx, 1
mov edx, eax
xor edx, 0xfffffffe
add edx, ecx
or eax, 0xfffffffe
sub edx, eax
lea eax, [edx + 1]
mov ecx, eax
and ecx, 0x17fa30f6
add ecx, edx
add ecx, 1
mov edx, eax
not edx
add edx, ecx
and eax, 0xe805cf09
add eax, edx
imul eax, eax, 0x167f0deb
lea ecx, [eax + 0x522f8ba8]
mov edx, ecx
not edx
and edx, 0xed4ecf85
add eax, edx
add eax, 0x522f8ba8
or ecx, 0x12b1307a
add ecx, eax
imul eax, ecx, 0x5ee1b2c3
add eax, 0x5ee1b2c3
mov dword [esp + 0x5c], eax
mov eax, dword [esp + 0x50]
mov eax, dword [eax]
mov dword [esp + 0xc], eax
mov eax, dword [esp + 0xc]
cmp eax, 0x10
mov eax, 0x42aee101
mov ecx, 0x1bc03cde
cmovae eax, ecx
mov ecx, 0xf51a8f48
jmp 0x10036a60
cmp ecx, 0xf8497ed1
jne 0x10036a60
jmp 0x1003795c
cmp ecx, 0x68cb8f79
jne 0x10036a60
call fcn.1005a20d
mov ecx, dword [esp + 0xa0]
xor ecx, esp
call fcn.1005875a
add esp, 0xa4
pop esi
pop edi
pop ebx
pop ebp
ret