Function at 0x10033660
Capabilities:
Resolve function by parsing pe exports
Write file on windows

Disassembly:
push ebp
push ebx
push edi
push esi
sub esp, 0xac
mov eax, dword [0x10065040]
xor eax, esp
mov dword [esp + 0xa8], eax
cmp dword [ecx + 0x10], 0
sete byte [esp + 7]
mov dword [esp + 0x6c], ecx
lea eax, [ecx + 0x14]
mov dword [esp + 0x64], eax
mov dword [esp + 0x68], edx
lea eax, [edx + 4]
mov dword [esp + 0x60], eax
mov ecx, 0x4eb5ab77
mov eax, 0x727c30cc
mov ebx, dword [sym.imp.KERNEL32.dll_CreateFileA]
mov ebp, 0xf269c502
jmp 0x10033800
mov eax, dword [esp + 0x18]
mov eax, dword [eax - 4]
mov dword [esp + 0x5c], eax
mov eax, dword [esp + 0x18]
add eax, 0xffffffff
imul ecx, eax, 0xb885f26d
lea edx, [ecx - 0x2991d747]
and edx, 0xbe99d9cd
add edx, ecx
add edx, 0xd66e28b9
imul esi, eax, 0x8ef41b26
add esi, 0x5323ae8c
and esi, 0x82cc4c64
add esi, edx
lea eax, [ecx + ecx]
add eax, 0xacdc5172
xor eax, 0x7d33b39a
add eax, esi
mov edx, 0x2991d746
sub edx, ecx
or edx, 0x41662632
sub eax, edx
mov ecx, 0x1142371f
sub ecx, eax
add eax, 0x6ebdc8e0
and ecx, 0x41662632
or eax, 0x41662632
sub eax, ecx
imul eax, eax, 0xa2a3e765
lea ecx, [eax + 0x1065d046]
mov edx, ecx
not edx
mov esi, ecx
and esi, 0xa83f5f5
add eax, esi
add eax, 0x1065d046
and edx, 0xf57c0a0a
add edx, eax
xor ecx, 0xa83f5f5
lea eax, [edx + ecx]
add ecx, edx
add ecx, 0xfa7bb6c0
mov edx, ecx
or edx, 0x52e9b734
add edx, eax
not ecx
or ecx, 0x52e9b734
add ecx, edx
sub ecx, dword [esp + 0x5c]
imul eax, ecx, 0x5003ce03
lea ecx, [eax + 0x37cfca48]
mov edx, 0xc83035b7
sub edx, eax
mov esi, edx
and esi, 0xa7741dae
add eax, esi
add eax, 0x37cfca48
xor ecx, 0x588be251
add ecx, eax
or edx, 0xa7741dae
sub ecx, edx
imul eax, ecx, 0xcd19ccab
lea ecx, [eax - 0x3f0351]
and ecx, 0x6298e218
add ecx, eax
add ecx, 0xffc0fcaf
mov edx, 0x803f0350
sub edx, eax
or edx, 0x9d671de7
lea eax, [edx + ecx]
add eax, 0x9d671de7
and eax, 0xffffffe0
cmp eax, 0x3b9b9920
mov eax, 0x68a9a635
mov ecx, 0x56b00188
cmove eax, ecx
mov ecx, 0x772bd132
nop word cs:[eax + eax]
nop dword [eax]
cmp ecx, 0xf1fc41ee
jle 0x10033860
cmp ecx, 0x3793238b
jg 0x100338d0
cmp ecx, 0x179ae56c
jg 0x10033997
cmp ecx, 0xff3c55d6
jg 0x10033b56
cmp ecx, 0xf1fc41ef
je 0x10033d3c
cmp ecx, 0xf8d166a7
je 0x10033d57
cmp ecx, 0xff309542
jne 0x10033800
mov ecx, 0x772bd132
jmp 0x10033800
cmp ecx, 0xb2f06d8f
jle 0x10033940
cmp ecx, 0xc35f8936
jg 0x100339e2
cmp ecx, 0xbc7df8cc
jg 0x10033b95
cmp ecx, 0xb2f06d90
je 0x10033d72
cmp ecx, 0xb6975745
je 0x10033d8d
cmp ecx, 0xb77ac70b
jne 0x10033800
mov ecx, dword [esp]
cmp ecx, 0x44a1bda3
mov ecx, 0x9de376b7
mov edx, 0x5336ef6a
cmove ecx, edx
jmp 0x10033800
cmp ecx, 0x54987bcc
jg 0x10033a58
cmp ecx, 0x481c9351
jle 0x10033bd4
cmp ecx, 0x52e4fef9
jle 0x10033d23
cmp ecx, 0x52e4fefa
je 0x10033da8
cmp ecx, 0x5336ef6a
jne 0x10033800
mov ecx, dword [esp + 0x6c]
mov dword [esp + 0x30], ecx
mov eax, dword [esp + 0x64]
mov dword [esp + 0x34], eax
mov eax, dword [esp + 0x34]
cmp dword [eax], 0x10
mov dword [esp + 0x38], ecx
mov eax, dword [esp + 0x38]
jae 0x10034221
mov eax, dword [esp + 0x30]
jmp 0x10034223
cmp ecx, 0x9de376b6
jle 0x10033b0b
cmp ecx, 0xab76acd3
jg 0x10033c13
cmp ecx, 0x9de376b7
je 0x10033dc3
cmp ecx, 0xa05bf5d5
je 0x10033dcd
cmp ecx, 0xab152f81
jne 0x10033800
mov ecx, dword [esp]
cmp ecx, 0xf269c502
mov ecx, 0x9de376b7
mov edx, 0x6c30d9e6
cmove ecx, edx
jmp 0x10033800
cmp ecx, 0x31b82cc1
jg 0x10033c52
cmp ecx, 0x179ae56d
je 0x10033de8
cmp ecx, 0x200ed7f0
je 0x10033e0e
cmp ecx, 0x2cf414f5
jne 0x10033800
mov ecx, dword [esp]
cmp ecx, 0xaf761a95
mov ecx, 0x9de376b7
mov edx, 0x200ed7f0
cmove ecx, edx
jmp 0x10033800
cmp ecx, 0xe4a75972
jg 0x10033c91
cmp ecx, 0xc35f8937
je 0x10033fa7
cmp ecx, 0xd626bfad
je 0x10033fc2
cmp ecx, 0xde04f59e
jne 0x10033800
mov eax, dword [esp + 0x24]
mov dword [esp + 0x54], eax
mov eax, dword [esp + 0x10]
mov edx, dword [esp + 0x54]
lea ecx, [esp + 0x90]
call fcn.1004d9f0
mov eax, dword [esp + 0x88]
mov eax, dword [eax]
mov ecx, dword [esp + 0x4c]
cmp dword [ecx], 0x10
mov ecx, dword [esp + 0x50]
mov dword [esp + 0x84], edi
jae 0x1003425d
mov ecx, dword [esp + 0x10]
jmp 0x1003425f
cmp ecx, 0x6c30d9e5
jg 0x10033ccc
cmp ecx, 0x54987bcd
je 0x10033fdd
cmp ecx, 0x60306247
je 0x10033ff8
cmp ecx, 0x67a5bec2
jne 0x10033800
mov eax, dword [esp + 0x14]
mov ecx, eax
not ecx
mov edx, ecx
and edx, 0xffffffdc
add edx, eax
xor eax, 0x23
add eax, edx
or ecx, 0xffffffdc
sub eax, ecx
imul ecx, eax, 0xaa546e83
lea eax, [ecx - 0xc207594]
mov edx, eax
not edx
mov esi, eax
and esi, 0xd33a11f1
add ecx, esi
add ecx, 0xf3df8a6c
and edx, 0x2cc5ee0e
add edx, ecx
xor eax, 0xd33a11f1
add eax, edx
mov ecx, 0xd33a11f1
sub ecx, eax
imul eax, ecx, 0x60d22fd5
mov ecx, eax
or ecx, 0x1edfa3a5
add ecx, eax
not eax
or eax, 0x1edfa3a5
lea edi, [eax + ecx]
add edi, 2
mov eax, dword [esp + 0x5c]
mov dword [esp + 0x1c], eax
mov ecx, 0x772bd132
mov eax, 0x606e6387
jmp 0x10033800
cmp ecx, 0x8c3f8e28
jle 0x10033cee
cmp ecx, 0x8c3f8e29
je 0x10034013
cmp ecx, 0x90b57971
je 0x100336b1
cmp ecx, 0x97f9947f
jne 0x10033800
mov ecx, dword [esp]
cmp ecx, 0x18f295f8
mov ecx, 0x9de376b7
mov edx, 0x765d53cd
cmove ecx, edx
jmp 0x10033800
cmp ecx, 0xff3c55d7
je 0x1003402d
cmp ecx, 0x12c72d6
je 0x10034048
cmp ecx, 0xb4c9f7a
jne 0x10033800
mov ecx, dword [esp]
cmp ecx, 0x68a9a635
mov ecx, 0xf1fc41ef
mov edx, 0xe65364f0
cmovl ecx, edx
jmp 0x10033800
cmp ecx, 0xbc7df8cd
je 0x10034063
cmp ecx, 0xbff82392
je 0x1003407e
cmp ecx, 0xc2d9daf1
jne 0x10033800
mov ecx, dword [esp]
cmp ecx, 0x44a1bda3
mov ecx, 0xb2f06d90
mov edx, 0x12c72d6
cmovl ecx, edx
jmp 0x10033800
cmp ecx, 0x3793238c
je 0x10034099
cmp ecx, 0x39edebb3
je 0x100340e6
cmp ecx, 0x4685c889
jne 0x10033800
mov ecx, dword [esp]
cmp ecx, 0x56b00188
mov ecx, 0x9de376b7
mov edx, 0x67a5bec2
cmove ecx, edx
jmp 0x10033800
cmp ecx, 0xab76acd4
je 0x1003411c
cmp ecx, 0xac329c0f
je 0x10034137
cmp ecx, 0xadcff21f
jne 0x10033800
mov ecx, dword [esp]
cmp ecx, 0xd356e05e
mov ecx, 0xe4a75973
mov edx, 0x842fd007
cmovl ecx, edx
jmp 0x10033800
cmp ecx, 0x31b82cc2
je 0x10034152
cmp ecx, 0x33e6d7b0
je 0x1003416e
cmp ecx, 0x367e77ee
jne 0x10033800
mov ecx, dword [esp]
cmp ecx, 0x606e6387
mov ecx, 0x9de376b7
mov edx, 0x31b82cc2
cmove ecx, edx
jmp 0x10033800
cmp ecx, 0xe4a75973
je 0x10034189
cmp ecx, 0xe65364f0
je 0x100341a4
cmp ecx, 0xf1c71904
jne 0x10033800
cmp byte [esp + 7], 0
mov eax, 0x1c63c567
cmovne eax, ebp
mov ecx, 0x772bd132
jmp 0x10033800
cmp ecx, 0x765d53cd
je 0x100341bf
cmp ecx, 0x772bd132
jne 0x100345c4
mov ecx, 0x4eb5ab77
jmp 0x10033800
cmp ecx, 0x842fd007
je 0x10034206
cmp ecx, 0x8c2ba433
jne 0x10033800
push dword [esp + 0x3c]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [esp + 0x40]
mov ecx, 0x772bd132
mov eax, 0xf269c502
jmp 0x10033800
cmp ecx, 0x4eb5ab77
jne 0x100345d2
mov dword [esp], eax
mov ecx, 0xa05bf5d5
jmp 0x10033800
mov ecx, dword [esp]
cmp ecx, 0x727c30cc
mov ecx, 0xd626bfad
mov edx, 0x52e4fefa
cmovl ecx, edx
jmp 0x10033800
mov ecx, dword [esp]
cmp ecx, 0xaad47eb0
mov ecx, 0xbc7df8cd
mov edx, 0x33e6d7b0
cmovl ecx, edx
jmp 0x10033800
mov ecx, dword [esp]
cmp ecx, 0x56b00188
mov ecx, 0x4685c889
mov edx, 0xb77ac70b
cmovl ecx, edx
jmp 0x10033800
mov ecx, dword [esp]
cmp ecx, 0xbf251cc1
mov ecx, 0x9de376b7
mov edx, 0x90b57971
cmove ecx, edx
jmp 0x10033800
mov ecx, dword [esp]
cmp ecx, 0x68a9a635
mov ecx, 0x9de376b7
mov edx, 0x481c9352
cmove ecx, edx
jmp 0x10033800
mov ecx, 0xff309542
jmp 0x10033800
mov ecx, dword [esp]
cmp ecx, 0x18f295f8
mov ecx, 0xff3c55d7
mov edx, 0xac329c0f
cmovl ecx, edx
jmp 0x10033800
mov eax, dword [esp + 0x68]
mov dword [esp + 0x28], eax
mov eax, dword [esp + 0x28]
mov eax, dword [eax]
mov ecx, dword [esp + 0x60]
mov dword [esp + 0x2c], ecx
mov ecx, dword [esp + 0x2c]
cmp eax, dword [ecx]
mov eax, 0x44a1bda3
jmp 0x100345b7
mov eax, dword [esp + 0x50]
mov eax, dword [eax]
mov dword [esp + 0x18], eax
mov eax, dword [esp + 0x14]
mov edi, eax
not edi
lea esi, [eax + eax]
and edi, 0x7ffffffe
mov edx, eax
xor edx, 1
add edi, edx
mov ecx, eax
and ecx, 1
add ecx, edi
mov edi, eax
or edi, 1
not ecx
add ecx, edi
add ecx, ecx
sub ecx, esi
lea esi, [ecx - 3]
mov edi, eax
and edi, 0xfffffffe
add edi, edx
or eax, 0xfffffffe
add eax, edx
sub eax, edi
mov edx, esi
not edx
and edx, eax
add ecx, edx
add ecx, 0xfffffffd
add ecx, eax
not eax
or eax, esi
add eax, ecx
lea edx, [eax + eax*2]
add edx, 3
mov ecx, eax
not ecx
add ecx, edx
lea edx, [eax + eax]
add edx, 2
sub ecx, edx
sub ecx, eax
mov eax, ecx
neg eax
or eax, 0x185bb32e
add eax, ecx
lea edx, [ecx - 1]
and edx, 0x185bb32e
add ecx, edx
add ecx, 0xffffffff
sub ecx, eax
lea eax, [ecx + 0x185bb32e]
lea edx, [ecx + ecx]
add edx, 0x30b7665c
not edx
and edx, 0xfffffffc
add ecx, edx
add ecx, 0x185bb32e
mov edx, eax
not edx
mov esi, edx
and esi, 1
add esi, ecx
or eax, 1
add esi, eax
or edx, 0xfffffffe
sub esi, edx
add eax, esi
add eax, 0xe7a44cd0
imul ecx, eax, 0x70822d63
mov edx, ecx
not edx
and edx, 0x80937c1
lea ecx, [ecx + edx*2]
imul eax, eax, 0xe1045ac6
mov edx, eax
xor edx, 0xefed907c
add edx, ecx
or eax, 0x10126f82
lea ecx, [edx + eax]
add edx, eax
add edx, 0xf7f6c842
lea esi, [ecx + ecx - 0x7560677f]
mov eax, edx
not eax
lea eax, [eax + ecx*2]
add eax, 0x8a9f9881
sub edx, esi
and edx, 0xf7f6c83e
mov ecx, eax
or ecx, 0xf7f6c83e
add ecx, edx
mov edx, eax
or edx, 0x80937c1
add edx, ecx
and eax, 0xf7f6c83e
add eax, edx
imul eax, eax, 0xd7d8bc4b
lea ecx, [eax + 0x4f368d56]
not ecx
mov edx, ecx
and edx, 0x70a566d3
add edx, eax
add edx, 0x4f368d56
add eax, edx
add eax, 0x4f368d56
or ecx, 0x70a566d3
add eax, ecx
add eax, 0x1eb5325a
mov ecx, eax
and ecx, 0x775dd10b
or eax, 0x775dd10b
lea edi, [ecx + eax]
add edi, 0x11445dea
cmp edi, 0x1000
mov eax, 0x606e6387
mov ecx, 0xbf251cc1
cmovae eax, ecx
mov ecx, 0x772bd132
mov edx, dword [esp + 0x18]
mov dword [esp + 0x1c], edx
jmp 0x10033800
mov ecx, dword [esp]
cmp ecx, 0x1c63c567
mov ecx, 0x9de376b7
mov edx, 0x179ae56d
cmove ecx, edx
jmp 0x10033800
mov ecx, dword [esp]
cmp ecx, 0x727c30cc
mov ecx, 0x9de376b7
mov edx, 0xf1c71904
cmove ecx, edx
jmp 0x10033800
mov ecx, dword [esp]
cmp ecx, 0x65a41ebd
mov ecx, 0x9de376b7
mov edx, 0xde04f59e
cmove ecx, edx
jmp 0x10033800
mov ecx, dword [esp]
cmp ecx, 0xaad47eb0
mov ecx, 0x9de376b7
mov edx, 0x8c2ba433
cmove ecx, edx
jmp 0x10033800
mov eax, dword [esp + 0x34]
cmp dword [eax], 0x10
mov eax, dword [esp + 0x38]
jae 0x10034585
mov eax, dword [esp + 0x30]
jmp 0x10034587
mov ecx, dword [esp]
cmp ecx, 0x606e6387
mov ecx, 0xb4c9f7a
mov edx, 0xc2d9daf1
cmovl ecx, edx
jmp 0x10033800
mov ecx, dword [esp]
cmp ecx, 0x1c63c567
mov ecx, 0xc35f8937
mov edx, 0x97f9947f
cmovl ecx, edx
jmp 0x10033800
mov ecx, dword [esp]
cmp ecx, 0xaf761a95
mov ecx, 0x2cf414f5
mov edx, 0x60306247
cmovl ecx, edx
jmp 0x10033800
mov ecx, dword [esp]
cmp ecx, 0xb9fe2a6a
mov ecx, 0x9de376b7
mov edx, 0x39edebb3
cmove ecx, edx
jmp 0x10033800
mov eax, dword [esp + 0x20]
mov dword [esp + 0x3c], eax
lea eax, [esp + 0x8c]
mov dword [esp + 0x40], eax
mov eax, dword [esp + 0x40]
mov dword [esp + 0x8c], 0
mov eax, dword [esp + 0x28]
mov eax, dword [eax]
mov dword [esp + 0x44], eax
mov eax, dword [esp + 0x2c]
mov eax, dword [eax]
mov dword [esp + 0x48], eax
mov eax, dword [esp + 0x44]
cmp eax, dword [esp + 0x48]
mov eax, 0x18f295f8
mov ecx, 0xaad47eb0
jmp 0x100337eb
mov eax, dword [esp + 0x10]
mov eax, dword [esp + 0x54]
add eax, 0x18
mov dword [esp + 0x24], eax
cmp eax, dword [esp + 0x48]
mov eax, 0x65a41ebd
mov ecx, 0xaad47eb0
cmove eax, ecx
mov ecx, dword [esp + 0x58]
mov ecx, 0x772bd132
mov edx, dword [esp + 0x58]
mov dword [esp + 0xc], edx
jmp 0x10033800
mov ecx, dword [esp]
cmp ecx, 0xd356e05e
mov ecx, 0x9de376b7
mov edx, 0x8c3f8e29
cmove ecx, edx
jmp 0x10033800
mov ecx, dword [esp]
cmp ecx, 0xb9fe2a6a
mov ecx, 0xadcff21f
mov edx, 0xf8d166a7
cmovl ecx, edx
jmp 0x10033800
push edi
push dword [esp + 0x20]
call fcn.10052cf9
add esp, 8
mov ecx, 0x772bd132
mov eax, 0xb9fe2a6a
jmp 0x10033800
mov ecx, dword [esp]
cmp ecx, 0x90b5fbe1
mov ecx, 0x9de376b7
mov edx, 0x3793238c
cmove ecx, edx
jmp 0x10033800
mov ecx, dword [esp]
cmp ecx, 0xf269c502
mov ecx, 0xab152f81
mov edx, 0xab76acd4
cmovl ecx, edx
jmp 0x10033800
mov ecx, dword [esp]
cmp ecx, 0x65a41ebd
mov ecx, 0x54987bcd
mov edx, 0x367e77ee
cmovl ecx, edx
jmp 0x10033800
lea ecx, [esp + 0x90]
mov dword [esp + 0x10], ecx
lea eax, [esp + 0xa0]
mov dword [esp + 0x88], eax
lea eax, [esp + 0xa4]
mov dword [esp + 0x4c], eax
mov dword [esp + 0x50], ecx
mov ecx, 0x772bd132
mov dword [esp + 0xc], 0
mov eax, 0x65a41ebd
mov edx, dword [esp + 0x44]
mov dword [esp + 0x24], edx
jmp 0x10033800
mov ecx, dword [esp]
cmp ecx, 0xbf251cc1
mov ecx, 0xb6975745
mov edx, 0xbff82392
cmovl ecx, edx
jmp 0x10033800
mov eax, dword [eax]
sub esp, 0x1c
movaps xmm0, xmmword [0x10061960]
movups xmmword [esp + 4], xmm0
mov dword [esp], eax
mov dword [esp + 0x18], 0
mov dword [esp + 0x14], 0x80
call ebx
mov dword [esp + 0x20], eax
cmp eax, 0xffffffff
mov eax, 0x90b5fbe1
mov ecx, 0xd356e05e
jmp 0x100337eb
mov ecx, dword [ecx]
push 0
lea edx, [esp + 0x90]
push edx
push eax
push ecx
push dword [esp + 0x4c]
call dword [sym.imp.KERNEL32.dll_WriteFile]
mov edi, dword [esp + 0x8c]
lea ecx, [edi + 0x190d3cfb]
mov eax, 0x6f2c304
sub eax, edi
and eax, 0x190d3cfb
add eax, edi
or ecx, 0xe6f2c304
add ecx, eax
mov dword [esp + 0x80], ecx
mov eax, edi
not eax
mov ecx, eax
mov edx, edi
and edx, 0xd6220648
mov dword [esp + 0x7c], edx
lea eax, [edi + edi]
not eax
and eax, 0xac440c90
add eax, edx
mov edx, ecx
and edx, 0x29ddf9b7
add edx, eax
mov dword [esp + 0x78], edx
lea eax, [edi + edi*2]
mov edx, ecx
sub edx, eax
mov dword [esp + 8], edx
mov edx, ecx
lea eax, [edi + ecx*2]
lea ecx, [edi + eax]
add ecx, 1
mov ebx, 0xfffffffe
sub ebx, ecx
add eax, edi
add eax, 2
mov dword [esp + 0x74], eax
and eax, edx
and ebx, edx
add ebx, eax
lea eax, [edx + edx]
mov dword [esp + 0x70], edx
and eax, 0x53bbf36e
add eax, edi
mov ebp, dword [esp + 0xc]
not ebp
mov ecx, dword [esp + 8]
add ecx, edi
lea esi, [ecx + edi*2]
mov ecx, ebp
and ebp, edi
add ebx, edi
add ebx, 1
mov dword [esp + 8], ebx
or edi, 0x29ddf9b7
sub eax, edi
mov ebx, dword [esp + 0x78]
add ebx, edi
or edx, 0xd6220648
sub ebx, edx
mov edx, dword [esp + 0x7c]
add edx, ebx
add edx, 1
or edx, eax
mov eax, edx
not eax
and eax, 0xd6220648
lea eax, [eax + eax*2]
mov edi, edx
xor edi, 0xd6220648
add edi, eax
mov eax, edx
or eax, 0xd6220648
sub edi, eax
sub edi, eax
add edi, eax
lea eax, [edx + edx]
or eax, 0x53bbf36e
add eax, edi
add eax, edx
add eax, 2
mov ebx, dword [esp + 0xc]
sub ecx, ebx
sub ecx, ebx
add ecx, ebx
add ecx, ebx
not ecx
and ecx, eax
mov edx, dword [esp + 0x80]
sub edx, ecx
and esi, ebx
mov eax, esi
sub eax, ebp
mov ecx, esi
or ecx, ebp
lea eax, [eax + ecx*2]
not esi
or esi, ebp
lea ecx, [edx + ebx]
lea eax, [eax + esi*2]
add eax, 2
add edx, ebx
add edx, 0x348ab6c
or edx, eax
add edx, ecx
add edx, 0x348ab6c
mov esi, 0xfcb75493
sub esi, ecx
or esi, eax
lea eax, [edx + esi]
lea ecx, [esi + edx]
add ecx, 1
mov edx, ecx
or edx, 0x348ab6b
lea esi, [eax + eax]
add esi, 2
sub eax, edx
or esi, 0x69156d6
add esi, eax
mov eax, ecx
xor eax, 0xfcb75494
lea edx, [esi + eax]
add esi, eax
add esi, 0xfcb75498
and ecx, 0x348ab6b
mov eax, ecx
not eax
add edx, eax
add edx, 0xfcb75498
mov ebp, dword [esp + 0x70]
or ebp, dword [esp + 0x74]
add ebp, dword [esp + 8]
mov eax, ebp
and eax, ebx
mov edi, ebp
not edi
and edi, ebx
add edi, edi
sub eax, edi
lea eax, [eax + ebx*2]
mov edi, ebp
or edi, ebx
not edi
lea eax, [eax + edi*2]
xor ebp, ebx
lea eax, [eax + ebp*2]
add eax, 2
mov edi, ebp
not edi
and edi, eax
mov ebx, eax
or ebx, ebp
add ebx, edi
and ebp, eax
not eax
add eax, ebx
lea edi, [eax + ebp]
add eax, ebp
add eax, 1
sub ecx, esi
mov esi, ecx
and esi, 0xf8356b9d
add esi, edx
xor edx, 0x7ca9462
add edx, esi
or ecx, 0xf8356b9d
sub edx, ecx
lea ecx, [edx + 0x7ca9463]
mov esi, ecx
and esi, eax
add edx, edx
add edx, 0xf9528c6
sub edx, esi
add edx, edi
add edx, 1
not ecx
or ecx, eax
lea eax, [ecx + edx]
add eax, 0xf8356b9e
mov ecx, eax
xor ecx, 0xb34a1ffe
and eax, 0x334a1ffe
lea edx, [ecx + eax*2]
lea esi, [ecx + eax*2]
add esi, 0x996bc005
lea eax, [ecx + eax*2]
add eax, 0x996bc004
and esi, 1
lea ecx, [esi + edx]
add ecx, 0x996bc005
xor eax, 0xfffffffe
add eax, ecx
mov ecx, 0x66943ffb
sub ecx, edx
or ecx, 1
sub eax, ecx
mov ecx, eax
or ecx, 0x4cb5e001
add ecx, eax
not eax
or eax, 0x4cb5e001
add eax, ecx
imul eax, eax, 0x2ddba0dd
lea ecx, [eax + 0x209b3005]
mov edx, ecx
and edx, 0x57fb2e5b
add eax, edx
add eax, 0x209b3005
mov edx, ecx
xor edx, 0x57fb2e5b
add edx, eax
or ecx, 0x57fb2e5b
sub edx, ecx
imul ecx, edx, 0x71afc88b
lea eax, [ecx + 0x7c0808b4]
mov edx, eax
and edx, 0xdcce4368
add edx, ecx
add edx, 0x7c0808b4
mov esi, 0x43f7f74b
sub esi, ecx
and esi, 0x2331bc97
add esi, edx
xor eax, 0xdcce4368
add eax, esi
mov ecx, 0xdcce4368
sub ecx, eax
mov dword [esp + 0x58], ecx
mov eax, dword [esp + 0x4c]
mov eax, dword [eax]
mov dword [esp + 0x14], eax
mov eax, dword [esp + 0x14]
cmp eax, 0x10
mov eax, 0xb9fe2a6a
mov ecx, 0xaf761a95
cmovae eax, ecx
mov ecx, 0x772bd132
mov ebx, dword [sym.imp.KERNEL32.dll_CreateFileA]
mov ebp, 0xf269c502
mov edi, dword [esp + 0x84]
jmp 0x10033800
mov eax, dword [eax]
sub esp, 0x1c
movaps xmm0, xmmword [0x10061950]
movups xmmword [esp + 4], xmm0
mov dword [esp], eax
mov dword [esp + 0x18], 0
mov dword [esp + 0x14], 0x80
call ebx
mov dword [esp + 0x20], eax
cmp eax, 0xffffffff
mov eax, 0x90b5fbe1
cmove eax, ebp
mov ecx, 0x772bd132
jmp 0x10033800
cmp ecx, 0x6c30d9e6
jne 0x10033800
jmp 0x100345e3
cmp ecx, 0x481c9352
jne 0x10033800
call fcn.10054cad
mov ecx, dword [esp + 0xa8]
xor ecx, esp
call fcn.100531fa
add esp, 0xac
pop esi
pop edi
pop ebx
pop ebp
ret