Function at 0x10034ab0
Capabilities:
Resolve function by parsing pe exports
Write file on windows

Disassembly:
push ebp
push ebx
push edi
push esi
sub esp, 0xac
mov eax, dword [0x10069040]
xor eax, esp
mov dword [esp + 0xa8], eax
cmp dword [ecx + 0x10], 0
sete byte [esp + 0xb]
mov dword [esp + 0x84], ecx
lea eax, [ecx + 0x14]
mov dword [esp + 0x7c], eax
mov dword [esp + 0x80], edx
lea eax, [edx + 4]
mov dword [esp + 0x78], eax
mov ecx, 0xf8395515
mov eax, 0x488c8e5a
mov ebx, 0xc2c43b4c
jmp 0x10034b10
mov ecx, 0xf8395515
nop word cs:[eax + eax]
nop dword [eax]
cmp ecx, 0xfc918c1b
jle 0x10034b80
cmp ecx, 0x40f299d7
jle 0x10034bf0
cmp ecx, 0x5c6147c5
jg 0x10034ca7
cmp ecx, 0x4f446578
jg 0x10034dd2
cmp ecx, 0x40f299d8
je 0x10035463
cmp ecx, 0x4220ed6f
je 0x1003547f
cmp ecx, 0x4d9db01c
jne 0x10034b10
push dword [esp + 0x30]
push dword [esp + 0x30]
call fcn.100563d1
add esp, 8
mov ecx, 0x84ae7615
mov eax, 0xaf7e2183
jmp 0x10034b10
cmp ecx, 0xbb4fce82
jg 0x10034c50
cmp ecx, 0x99675b3f
jg 0x10034cf1
cmp ecx, 0x9273987d
jg 0x10034e3d
cmp ecx, 0x84ae7615
je 0x10034afe
cmp ecx, 0x8d7ca701
je 0x1003549a
cmp ecx, 0x8e94a797
jne 0x10034b10
mov ecx, dword [esp]
cmp ecx, 0xc2386695
mov ecx, 0xe73eed29
mov edx, 0x4f446579
cmove ecx, edx
jmp 0x10034b10
cmp ecx, 0x1ec7f420
jg 0x10034d3c
cmp ecx, 0x1168d5a7
jg 0x10034e7c
cmp ecx, 0xfc918c1c
je 0x100354b5
cmp ecx, 0x6737626
je 0x100354d0
cmp ecx, 0xc5c7533
jne 0x10034b10
mov ecx, dword [esp]
cmp ecx, 0x488c8e5a
mov ecx, 0x9d3e6f1b
mov edx, 0xbb8b0e1d
cmovl ecx, edx
jmp 0x10034b10
cmp ecx, 0xd29fb8c7
jg 0x10034d87
cmp ecx, 0xcb81bbd2
jg 0x10034ebd
cmp ecx, 0xbb4fce83
je 0x100354eb
cmp ecx, 0xbb8b0e1d
je 0x10035506
cmp ecx, 0xc255740f
jne 0x10034b10
mov ecx, dword [esp]
cmp ecx, 0xaf7e2183
mov ecx, 0xd0b71aa6
mov edx, 0x25cac3e1
cmovl ecx, edx
jmp 0x10034b10
cmp ecx, 0x6ae128b2
jg 0x10034efc
cmp ecx, 0x5c6147c6
je 0x10035521
cmp ecx, 0x61279f97
je 0x10035552
cmp ecx, 0x65dd3380
jne 0x10034b10
mov eax, dword [esp + 0x4c]
cmp dword [eax], 0x10
mov eax, dword [esp + 0x50]
jae 0x1003598c
mov eax, dword [esp + 0x48]
jmp 0x1003598e
cmp ecx, 0xa1beb090
jg 0x100353cc
cmp ecx, 0x99675b40
je 0x1003556d
cmp ecx, 0x9d3e6f1b
je 0x10035632
cmp ecx, 0xa0776649
jne 0x10034b10
mov ecx, dword [esp]
cmp ecx, 0x7c9eb1e1
mov ecx, 0xccae45db
mov edx, 0x953559f0
cmovl ecx, edx
jmp 0x10034b10
cmp ecx, 0x25cac3e0
jle 0x1003540b
cmp ecx, 0x25cac3e1
je 0x1003564d
cmp ecx, 0x38389f41
je 0x10035668
cmp ecx, 0x3be4d346
jne 0x10034b10
mov ecx, dword [esp]
cmp ecx, 0xaf7e2183
mov ecx, 0xe73eed29
mov edx, 0xd29fb8c8
cmove ecx, edx
jmp 0x10034b10
cmp ecx, 0xe73eed28
jg 0x1003543e
cmp ecx, 0xd29fb8c8
je 0x10035683
cmp ecx, 0xe2edabdd
je 0x100356b4
cmp ecx, 0xe3df0e29
jne 0x10034b10
mov ecx, dword [esp]
cmp ecx, 0x28dd4c78
mov ecx, 0xe73eed29
mov edx, 0x5c6147c6
cmove ecx, edx
jmp 0x10034b10
cmp ecx, 0x4f446579
je 0x100356f3
cmp ecx, 0x52a32c74
je 0x10035743
cmp ecx, 0x57540c45
jne 0x10034b10
lea ecx, [esp + 0x90]
mov dword [esp + 0x20], ecx
lea eax, [esp + 0xa0]
mov dword [esp + 0x88], eax
lea eax, [esp + 0xa4]
mov dword [esp + 0x64], eax
mov dword [esp + 0x68], ecx
mov ecx, 0x84ae7615
mov dword [esp + 0x38], 0
mov eax, 0x20f352fc
mov edx, dword [esp + 0x5c]
mov dword [esp + 0x3c], edx
jmp 0x10034b10
cmp ecx, 0x9273987e
je 0x1003575e
cmp ecx, 0x953559f0
je 0x10035779
cmp ecx, 0x95ba9f7d
jne 0x10034b10
mov ecx, dword [esp]
cmp ecx, 0x4db73c80
mov ecx, 0xe73eed29
mov edx, 0x23e76e84
cmove ecx, edx
jmp 0x10034b10
cmp ecx, 0x1168d5a8
je 0x10035794
cmp ecx, 0x131d03c9
je 0x100357af
cmp ecx, 0x1abf09f2
jne 0x10034b10
push dword [esp + 0x54]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [esp + 0x58]
mov ecx, 0x84ae7615
mov eax, 0x4db73c80
jmp 0x10034b10
cmp ecx, 0xcb81bbd3
je 0x100357ca
cmp ecx, 0xccae45db
je 0x100357e5
cmp ecx, 0xd0b71aa6
jne 0x10034b10
mov ecx, dword [esp]
cmp ecx, 0xb42675aa
mov ecx, 0x222b2a86
mov edx, 0x3be4d346
cmovl ecx, edx
jmp 0x10034b10
cmp ecx, 0x6ae128b3
je 0x10035800
cmp ecx, 0x6e8d329a
je 0x1003580a
cmp ecx, 0x7f67ba13
jne 0x10034b10
mov eax, dword [esp + 0x28]
mov eax, dword [eax - 4]
mov dword [esp + 0x74], eax
mov ebp, dword [esp + 0x28]
lea ecx, [ebp + 0x469042f6]
mov eax, ecx
or eax, 0xfffffffc
xor ecx, 3
add ecx, eax
mov eax, 1
sub eax, ebp
or eax, 0xfffffffc
sub ecx, eax
lea esi, [ecx - 4]
mov eax, esi
xor eax, 0xb96fbd0a
add eax, ecx
add eax, 0xfffffffc
xor esi, 0x469042f5
add esi, eax
mov edx, ebp
not edx
mov eax, ebp
and eax, 3
mov ebx, eax
mov ecx, eax
xor ecx, 3
lea ecx, [ecx + ecx*2]
sub ebx, ecx
mov ecx, ebp
or ecx, 3
mov dword [esp + 4], ecx
add ebx, ecx
mov ecx, ebp
add ecx, ebp
or ecx, 0xfffffff8
sub ebx, ecx
mov edi, edx
and edi, 0xfffffffc
mov dword [esp + 0x1c], edi
mov dword [esp + 0xc], edi
or edi, eax
mov ecx, 0xfffffffe
sub ecx, eax
mov dword [esp + 0x18], ecx
mov ecx, edx
or ecx, 3
mov dword [esp + 0x10], ecx
add ebx, ecx
not eax
mov dword [esp + 0x14], eax
add ebx, eax
mov eax, dword [esp + 4]
and eax, ebx
mov ecx, dword [esp + 0x1c]
xor ecx, ebx
sub ecx, eax
mov eax, dword [esp + 0xc]
or eax, ebx
add eax, ecx
or ebx, ebp
or ebx, 3
add ebx, eax
sub esi, ebx
mov eax, edi
not eax
and eax, 0x2fa2077
and edi, 0x2fa2077
lea ebx, [edi + eax*2]
mov ecx, 0x2fa2076
sub ecx, ebx
lea eax, [edi + eax*2]
add eax, 0xfd05df89
mov edi, edx
and edi, 0xfd05df88
and ecx, edi
mov ebx, eax
or ebx, edi
add ebx, ecx
not edi
or edi, eax
lea eax, [edi + ebx]
add eax, 1
lea ecx, [esi - 0x469042f6]
mov edi, ecx
xor edi, 0x356adf04
add edi, esi
add edi, 0xb96fbd0a
mov ebx, ecx
xor ebx, 0xca9520fb
add ebx, edi
add esi, ebx
add esi, 0xb96fbd0a
mov edi, ecx
not edi
or edi, 0xca9520fb
lea ebx, [esi + edi]
add esi, edi
add esi, 0x356adf08
and ecx, 0xca9520fb
mov edi, ecx
not edi
add edi, ebx
add edi, 0x356adf08
sub ecx, esi
xor eax, 0x2fa2077
mov esi, 0xfffffffe
sub esi, eax
and esi, edi
add esi, edi
lea ebx, [eax + 1]
and ecx, ebx
add ecx, esi
lea esi, [eax + ecx]
add esi, 1
xor edi, ebx
sub esi, edi
mov eax, ebp
and eax, 0x312778bd
mov ecx, eax
xor ecx, 0x312778bd
add ecx, eax
add ecx, ebp
mov edi, ebp
xor edi, 0xced88742
add edi, ecx
not eax
add edi, eax
add edi, 2
mov eax, ebp
xor eax, 3
mov ecx, dword [esp + 4]
add eax, ecx
not ecx
lea ebx, [eax + ecx*2]
sub ebx, dword [esp + 0x10]
add ebx, 4
mov eax, ebx
and eax, ebp
sub eax, ebp
mov ecx, ebx
or ecx, ebp
xor ebp, ebx
mov dword [esp + 4], ebp
or ebx, edx
and edx, 0xced88742
or edi, edx
xor edi, 0xced88742
lea edx, [esi + edi]
lea ebp, [esi + edi]
add ebp, 0xca9520fc
mov edi, ebp
mov esi, dword [esp + 0x18]
and edi, esi
add edi, edx
add edi, 0xca9520fc
add edi, dword [esp + 0x14]
mov edx, esi
xor edx, ebp
add edx, edi
or esi, ebp
sub edx, esi
add ecx, eax
mov esi, dword [esp + 4]
not esi
add esi, ecx
sub esi, ebx
mov ecx, esi
not ecx
mov eax, ecx
sub eax, esi
lea eax, [eax + esi*2]
sub eax, esi
mov ebp, esi
mov esi, eax
and esi, 0x87462b1
lea edi, [eax + eax]
xor edi, 0xef173a9c
add edi, esi
mov ebx, eax
or ebx, 0x87462b1
add ebx, edi
xor eax, 0x87462b1
add eax, ebx
sub eax, esi
add eax, 2
and ecx, 0xf78b9d4e
add ecx, ebp
xor ebp, 0x87462b1
add ecx, ebp
add ecx, 1
or ecx, eax
mov eax, ecx
xor eax, 0x87462b1
add eax, 1
mov esi, edx
and esi, eax
add esi, edx
xor ecx, 0xf78b9d4e
add ecx, esi
mov esi, edx
or esi, eax
not esi
add esi, ecx
xor eax, edx
lea ecx, [eax + esi]
mov dword [esp + 4], ecx
lea ebx, [eax + esi]
add ebx, 1
mov dword [esp + 0x1c], ebx
mov eax, dword [esp + 0x74]
mov edx, eax
mov esi, eax
not edx
not ebx
lea ebp, [ecx + ebx*2]
add ebp, 2
mov dword [esp + 0xc], ebp
mov ecx, ebp
xor ecx, edx
mov dword [esp + 0x18], ecx
mov ecx, ebp
or ecx, edx
mov dword [esp + 0x14], ecx
not ebp
or ebp, edx
lea ecx, [edx + edx]
and edx, 0xaaf0649f
lea eax, [edx + edx*2]
or ecx, 0x55e0c93e
sub eax, ecx
mov dword [esp + 0x10], esi
mov ecx, esi
and ecx, 0x550f9b60
sub eax, ecx
sub eax, ecx
lea edx, [esi + esi]
or edx, 0xaa1f36c0
add edx, eax
mov eax, edx
not eax
mov edi, ecx
and edi, eax
mov esi, edx
or esi, ecx
add esi, edi
xor edx, ecx
not edx
add edx, esi
or eax, ecx
sub edx, eax
lea eax, [edx + edx]
xor eax, 0x55e0c93f
xor edx, 0x550f9b60
add edx, eax
mov eax, edx
xor eax, ebx
mov ecx, edx
or ecx, ebx
add ecx, eax
not edx
mov edi, dword [esp + 0x1c]
mov eax, edi
and eax, edx
add eax, ecx
or edx, edi
mov ecx, edx
sub ecx, eax
sub eax, edx
lea edx, [eax + ecx*2]
lea eax, [eax + ecx*2]
add eax, 0xffffffff
mov ecx, eax
xor ecx, 0x5a83d74d
add ecx, edx
mov edx, eax
or edx, 0xa57c28b2
add edx, ecx
or eax, 0x5a83d74d
sub edx, eax
add edx, 0xb507ae9b
mov eax, edx
not eax
mov ecx, edi
and ecx, eax
mov esi, edx
sub esi, ecx
mov ecx, dword [esp + 4]
add esi, ecx
add esi, 1
xor edx, edi
add edx, esi
or eax, edi
lea ecx, [edx + eax]
add eax, edx
add eax, 1
mov edx, eax
not edx
mov esi, edx
and esi, 0xa57c28b2
add ecx, esi
add ecx, 1
and edx, 0x5a83d74d
add edx, ecx
add edx, eax
mov ecx, dword [esp + 0xc]
mov eax, dword [esp + 0x18]
sub eax, ecx
mov esi, dword [esp + 0x14]
add esi, eax
mov eax, ecx
mov ecx, dword [esp + 0x10]
xor eax, ecx
add eax, esi
sub eax, ebp
and eax, dword [esp + 0xc]
lea esi, [edx + eax]
add eax, edx
add eax, 0xa57c28b3
mov edx, eax
or edx, 0x5df15c87
add esi, edx
add esi, 0xa57c28b3
mov edx, eax
xor edx, 0xa20ea378
add edx, esi
not eax
or eax, 0xa20ea378
add eax, edx
mov ebp, ecx
sub eax, ecx
lea ecx, [eax - 0x5df15c86]
mov edx, ecx
not edx
and ecx, 0x220ea378
lea eax, [eax + ecx*2]
add eax, 0xa20ea37a
add edx, edx
or edx, 0xbbe2b90e
lea ecx, [eax + edx]
add eax, edx
add eax, 0x5df15c8a
and ebx, ebp
add ebx, ebp
mov edx, ebp
xor edx, edi
add ebx, edx
add ebx, edi
or ebp, edi
sub ebx, ebp
sub ebx, ebp
mov esi, dword [esp + 4]
add edx, esi
add edx, 1
sub edx, ebp
or edx, ebx
mov ebx, 0xc2c43b4c
mov esi, eax
and esi, 0xa1baa3d7
add ecx, esi
add ecx, 0x5df15c8a
mov esi, eax
xor esi, 0xa1baa3d7
add esi, ecx
or eax, 0xa1baa3d7
add eax, edx
sub esi, eax
imul eax, esi, 0x49f7455d
mov ecx, eax
not ecx
and ecx, 0x529f9128
add ecx, eax
or eax, 0xad606ed7
add eax, ecx
add eax, 0x529f9128
not eax
imul eax, eax, 0xd7f2c90b
mov ecx, eax
xor ecx, 0xa5a3a4b7
add ecx, eax
mov edx, eax
xor edx, 0x5a5c5b48
add edx, ecx
add edx, eax
not eax
mov ecx, eax
or ecx, 0x5a5c5b48
add ecx, edx
or eax, 0xa5a3a4b7
add eax, ecx
add eax, 0xa5a3a4bb
cmp eax, 0x20
mov eax, 0x88341084
mov ecx, 0xb42675aa
cmovb eax, ecx
mov ecx, 0x84ae7615
jmp 0x10034b10
cmp ecx, 0xa1beb091
je 0x10035833
cmp ecx, 0xaa218ff7
je 0x1003584e
cmp ecx, 0xb8a362a9
jne 0x10034b10
mov ecx, dword [esp]
cmp ecx, 0x7c9eb1e1
mov ecx, 0xe73eed29
mov edx, 0x6e8d329a
cmove ecx, edx
jmp 0x10034b10
cmp ecx, 0x1ec7f421
je 0x10035967
cmp ecx, 0x222b2a86
jne 0x10035b63
mov ecx, dword [esp]
cmp ecx, 0xb42675aa
mov ecx, 0xe73eed29
mov edx, 0xaa218ff7
cmove ecx, edx
jmp 0x10034b10
cmp ecx, 0xe73eed29
je 0x10035982
cmp ecx, 0xf8395515
jne 0x10035b71
mov dword [esp], eax
mov ecx, 0x61279f97
jmp 0x10034b10
cmp byte [esp + 0xb], 0
mov eax, 0x7c9eb1e1
mov ecx, 0x4db73c80
cmovne eax, ecx
mov ecx, 0x84ae7615
jmp 0x10034b10
mov ecx, dword [esp]
cmp ecx, 0x28dd4c78
mov ecx, 0xe3df0e29
mov edx, 0xbb4fce83
cmovl ecx, edx
jmp 0x10034b10
mov ecx, dword [esp]
cmp ecx, 0xfb51d181
mov ecx, 0xa1beb091
mov edx, 0x1ec7f421
cmovl ecx, edx
jmp 0x10034b10
mov ecx, dword [esp]
cmp ecx, 0xc2c43b4c
mov ecx, 0xe73eed29
mov edx, 0x1abf09f2
cmove ecx, edx
jmp 0x10034b10
mov ecx, dword [esp]
cmp ecx, 0x7fa8598c
mov ecx, 0xe73eed29
mov edx, 0x99675b40
cmove ecx, edx
jmp 0x10034b10
mov ecx, dword [esp]
cmp ecx, 0x20f352fc
mov ecx, 0xe73eed29
mov edx, 0xe2edabdd
cmove ecx, edx
jmp 0x10034b10
mov ecx, dword [esp]
cmp ecx, 0x4817e18a
mov ecx, 0xe73eed29
mov edx, 0x57540c45
cmove ecx, edx
jmp 0x10034b10
mov ecx, dword [esp + 0x84]
mov dword [esp + 0x48], ecx
mov eax, dword [esp + 0x7c]
mov dword [esp + 0x4c], eax
mov eax, dword [esp + 0x4c]
cmp dword [eax], 0x10
mov dword [esp + 0x50], ecx
mov eax, dword [esp + 0x50]
jae 0x100359c9
mov eax, dword [esp + 0x48]
jmp 0x100359cb
mov ecx, dword [esp]
cmp ecx, 0x20f352fc
mov ecx, 0x131d03c9
mov edx, 0x38389f41
cmovl ecx, edx
jmp 0x10034b10
mov eax, dword [esp + 0x68]
mov eax, dword [eax]
mov dword [esp + 0x28], eax
mov eax, dword [esp + 0x24]
lea ecx, [eax + 0x78f62171]
and ecx, 0x8709de8f
add ecx, eax
add ecx, 0x78f62171
mov edx, 0x8709de8e
sub edx, eax
and edx, 0x8709de8f
add edx, ecx
imul ecx, edx, 0x5af2d57d
lea eax, [ecx + 0x5af2d57d]
mov edx, 0xa50d2a82
sub edx, ecx
and edx, 0xd303fb12
add edx, ecx
add edx, 0x5af2d57d
xor eax, 0x2cfc04ed
add eax, edx
mov edx, 0x250d2a82
sub edx, ecx
or edx, 0xd303fb12
sub eax, edx
imul eax, eax, 0xf2680bd5
lea ecx, [eax + 0x3e965406]
mov edx, ecx
not edx
mov esi, ecx
and esi, 0xc169abf9
add eax, esi
add eax, 0x3e965406
and edx, 0x3e965406
add edx, eax
xor ecx, 0xc169abf9
lea eax, [ecx + edx]
add eax, 0xc169abfb
mov dword [esp + 0x30], eax
cmp eax, 0x1000
mov eax, 0xceead332
mov ecx, 0xfb51d181
cmovae eax, ecx
mov ecx, 0x84ae7615
mov edx, dword [esp + 0x28]
mov dword [esp + 0x2c], edx
jmp 0x10034b10
mov ecx, dword [esp]
cmp ecx, 0x488c8e5a
mov ecx, 0xe73eed29
mov edx, 0x40f299d8
cmove ecx, edx
jmp 0x10034b10
mov ecx, dword [esp]
cmp ecx, 0x88341084
mov ecx, 0xe73eed29
mov edx, 0xef41b051
cmove ecx, edx
jmp 0x10034b10
mov ecx, dword [esp]
cmp ecx, 0xc2386695
mov ecx, 0x1168d5a8
mov edx, 0xc255740f
cmovl ecx, edx
jmp 0x10034b10
mov eax, dword [esp + 0x20]
mov eax, dword [esp + 0x6c]
add eax, 0x18
mov dword [esp + 0x3c], eax
cmp eax, dword [esp + 0x60]
mov eax, 0x20f352fc
cmove eax, ebx
mov ecx, dword [esp + 0x70]
mov ecx, 0x84ae7615
mov edx, dword [esp + 0x70]
mov dword [esp + 0x38], edx
jmp 0x10034b10
mov eax, dword [esp + 0x3c]
mov dword [esp + 0x6c], eax
mov eax, dword [esp + 0x20]
mov edx, dword [esp + 0x6c]
lea ecx, [esp + 0x90]
call fcn.100509d0
mov eax, dword [esp + 0x88]
mov eax, dword [eax]
mov ecx, dword [esp + 0x64]
cmp dword [ecx], 0x10
mov ecx, dword [esp + 0x68]
jae 0x10035a11
mov ecx, dword [esp + 0x20]
jmp 0x10035a13
mov eax, dword [esp + 0x34]
mov dword [esp + 0x54], eax
lea eax, [esp + 0x8c]
mov dword [esp + 0x58], eax
mov eax, dword [esp + 0x58]
mov dword [esp + 0x8c], 0
mov eax, dword [esp + 0x40]
mov eax, dword [eax]
mov dword [esp + 0x5c], eax
mov eax, dword [esp + 0x44]
mov eax, dword [eax]
mov dword [esp + 0x60], eax
mov eax, dword [esp + 0x5c]
cmp eax, dword [esp + 0x60]
mov eax, 0x4817e18a
cmove eax, ebx
mov ecx, 0x84ae7615
jmp 0x10034b10
mov ecx, dword [esp]
cmp ecx, 0x720f5443
mov ecx, 0xe73eed29
mov edx, 0x65dd3380
cmove ecx, edx
jmp 0x10034b10
mov ecx, dword [esp]
cmp ecx, 0xc2c43b4c
mov ecx, 0xfc918c1c
mov edx, 0x8e94a797
cmovl ecx, edx
jmp 0x10034b10
mov ecx, dword [esp]
cmp ecx, 0x720f5443
mov ecx, 0x52a32c74
mov edx, 0x95ba9f7d
cmovl ecx, edx
jmp 0x10034b10
mov ecx, dword [esp]
cmp ecx, 0xceead332
mov ecx, 0x8d7ca701
mov edx, 0x9273987e
cmovl ecx, edx
jmp 0x10034b10
mov ecx, dword [esp]
cmp ecx, 0x4db73c80
mov ecx, 0xa0776649
mov edx, 0xcb81bbd3
cmovl ecx, edx
jmp 0x10034b10
mov ecx, dword [esp]
cmp ecx, 0x4817e18a
mov ecx, 0xc5c7533
mov edx, 0x4220ed6f
cmovl ecx, edx
jmp 0x10034b10
mov ecx, dword [esp]
cmp ecx, 0x7fa8598c
mov ecx, 0x6737626
mov edx, 0xb8a362a9
cmovl ecx, edx
jmp 0x10034b10
mov ecx, 0x84ae7615
jmp 0x10034b10
mov eax, dword [esp + 0x80]
mov dword [esp + 0x40], eax
mov eax, dword [esp + 0x40]
mov eax, dword [eax]
mov ecx, dword [esp + 0x78]
mov dword [esp + 0x44], ecx
mov ecx, dword [esp + 0x44]
cmp eax, dword [ecx]
mov eax, 0x28dd4c78
jmp 0x100359c2
mov ecx, dword [esp]
cmp ecx, 0xfb51d181
mov ecx, 0xe73eed29
mov edx, 0x7f67ba13
cmove ecx, edx
jmp 0x10034b10
mov ecx, dword [esp + 0x24]
mov eax, ecx
xor eax, 0xffffffdb
mov edx, ecx
xor edx, 0x24
add edx, eax
mov eax, ecx
or eax, 0xffffffdb
lea esi, [eax + edx]
add esi, 1
add edx, eax
not esi
lea edx, [esi + edx*2]
add edx, 4
lea esi, [ecx + 0x129c8b66]
mov edi, esi
and edi, edx
add ecx, edi
add ecx, 0x129c8b66
add ecx, edx
mov edi, esi
or edi, edx
not edi
add edi, ecx
xor esi, edx
lea ecx, [esi + edi]
add ecx, 0xed6374bf
not eax
mov edx, ecx
and edx, eax
or eax, ecx
lea ecx, [eax + edx]
add ecx, 1
mov esi, ecx
not esi
add eax, edx
and ecx, 1
lea eax, [eax + ecx*2]
add eax, 1
add esi, esi
or esi, 0xfffffffc
add esi, eax
imul ecx, esi, 0x5e4f3e47
lea eax, [ecx + 0x5e4f3e47]
mov edx, eax
not edx
mov esi, edx
and esi, 0x9d614978
add ecx, esi
add ecx, 0x5e4f3e47
xor eax, 0x629eb687
add eax, ecx
or edx, 0x9d614978
sub eax, edx
lea ecx, [eax + 0x3f990cec]
mov edx, ecx
or edx, 0x629eb687
add edx, eax
mov esi, ecx
and esi, 0x1d614978
and ecx, 0x629eb687
lea ecx, [ecx + esi*2]
add eax, ecx
add eax, 0x3f990cec
sub eax, edx
imul eax, eax, 0x501b0b77
lea ecx, [eax - 0x721621ca]
mov edx, ecx
xor edx, 0x55722914
add eax, edx
add eax, 0x69f6b138
mov edx, ecx
not edx
and edx, 0xaa8dd6eb
add edx, eax
and ecx, 0x55722914
lea eax, [ecx + edx]
add eax, 0x2eb6a922
mov dword [esp + 0x30], eax
mov eax, dword [esp + 0x74]
mov dword [esp + 0x2c], eax
mov ecx, 0x84ae7615
mov eax, 0xceead332
jmp 0x10034b10
mov ecx, dword [esp]
cmp ecx, 0xceead332
mov ecx, 0xe73eed29
mov edx, 0x4d9db01c
cmove ecx, edx
jmp 0x10034b10
mov ecx, 0x6ae128b3
jmp 0x10034b10
mov eax, dword [eax]
sub esp, 0x1c
movaps xmm0, xmmword [0x10065950]
movups xmmword [esp + 4], xmm0
mov dword [esp], eax
mov dword [esp + 0x18], 0
mov dword [esp + 0x14], 0x80
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov dword [esp + 0x34], eax
cmp eax, 0xffffffff
mov eax, 0xc2386695
mov ecx, 0x4db73c80
jmp 0x10035a04
mov eax, dword [eax]
sub esp, 0x1c
movaps xmm0, xmmword [0x10065960]
movups xmmword [esp + 4], xmm0
mov dword [esp], eax
mov dword [esp + 0x18], 0
mov dword [esp + 0x14], 0x80
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov dword [esp + 0x34], eax
cmp eax, 0xffffffff
mov eax, 0xc2386695
mov ecx, 0x720f5443
cmove eax, ecx
mov ecx, 0x84ae7615
jmp 0x10034b10
mov ecx, dword [ecx]
push 0
lea edx, [esp + 0x90]
push edx
push eax
push ecx
push dword [esp + 0x64]
call dword [sym.imp.KERNEL32.dll_WriteFile]
mov eax, dword [esp + 0x8c]
mov ecx, eax
not ecx
mov edx, ecx
and edx, 0x24b738e1
add edx, eax
xor eax, 0xdb48c71e
add eax, edx
or ecx, 0x24b738e1
sub eax, ecx
lea ecx, [eax + 0x24b738e1]
mov edx, ecx
and edx, 0xdb48c71f
mov esi, ecx
and esi, 0x24b738e0
sub esi, edx
add eax, esi
add eax, 0x24b738e1
xor ecx, 0x24b738e0
lea edx, [eax + ecx]
add ecx, eax
add ecx, 0xb6918e3f
mov esi, ecx
or esi, 0x98b27785
add esi, edx
mov eax, ecx
xor eax, 0x674d887a
add eax, esi
or ecx, 0x674d887a
sub eax, ecx
lea ecx, [eax - 0x7ad360cb]
mov esi, dword [esp + 0x38]
mov edx, esi
not edx
or edx, ecx
not ecx
and ecx, esi
add eax, ecx
add eax, 0x852c9f35
add eax, esi
add edx, eax
mov eax, 0x7ffffffe
sub eax, edx
or eax, 0x98b27785
lea eax, [eax + edx*2]
mov ecx, 0xfffffffe
sub ecx, edx
or ecx, 0x674d887a
add ecx, eax
imul eax, ecx, 0x13f411d3
lea ecx, [eax - 0x31636115]
mov edx, ecx
not edx
mov esi, ecx
and esi, 0xc45ce938
add eax, esi
add eax, 0xce9c9eeb
and edx, 0x3ba316c7
add edx, eax
xor ecx, 0xc45ce938
add ecx, edx
imul eax, ecx, 0xed0891a5
lea ecx, [eax - 0x714fff2a]
mov edx, ecx
and edx, 0x5e5890cf
add eax, edx
add eax, 0x8eb000d6
mov edx, ecx
or edx, 0x5e5890cf
sub edx, eax
xor ecx, 0xa1a76f30
lea eax, [edx + ecx]
add eax, 0xa1a76f32
mov dword [esp + 0x70], eax
mov eax, dword [esp + 0x64]
mov eax, dword [eax]
mov dword [esp + 0x24], eax
mov eax, dword [esp + 0x24]
cmp eax, 0x10
mov eax, 0xaf7e2183
mov ecx, 0x7fa8598c
cmovae eax, ecx
mov ecx, 0x84ae7615
jmp 0x10034b10
cmp ecx, 0x23e76e84
jne 0x10034b10
jmp 0x10035b82
cmp ecx, 0xef41b051
jne 0x10034b10
call fcn.1005838d
mov ecx, dword [esp + 0xa8]
xor ecx, esp
call fcn.100568da
add esp, 0xac
pop esi
pop edi
pop ebx
pop ebp
ret