Function at 0x10034eb0
Capabilities:
Resolve function by parsing pe exports
Write file on windows

Disassembly:
push ebp
push ebx
push edi
push esi
sub esp, 0xa8
mov eax, dword [0x10067040]
xor eax, esp
mov dword [esp + 0xa4], eax
cmp dword [ecx + 0x10], 0
sete byte [esp + 7]
mov dword [esp + 0x78], ecx
lea eax, [ecx + 0x14]
mov dword [esp + 0x70], eax
mov dword [esp + 0x74], edx
lea eax, [edx + 4]
mov dword [esp + 0x6c], eax
mov ecx, 0x67f1f1ce
mov eax, 0x8758e7f4
jmp 0x10034f30
mov eax, dword [esp + 0x74]
mov dword [esp + 0x34], eax
mov eax, dword [esp + 0x34]
mov eax, dword [eax]
mov ecx, dword [esp + 0x6c]
mov dword [esp + 0x38], ecx
mov ecx, dword [esp + 0x38]
cmp eax, dword [ecx]
mov eax, 0xb04d6d17
mov ecx, 0x553267f2
cmove eax, ecx
mov ecx, 0x8c6acfa
nop word cs:[eax + eax]
nop dword [eax + eax]
cmp ecx, 0x9578d8b
jg 0x10034f90
cmp ecx, 0xc61b8cf3
jle 0x10035000
cmp ecx, 0xee6b7c70
jle 0x100351a5
cmp ecx, 0xf9bd3c4b
jle 0x100352ff
cmp ecx, 0x31776f2
jle 0x100356f3
cmp ecx, 0x31776f3
je 0x1003571a
cmp ecx, 0x8c6acfa
jne 0x10034f30
mov ecx, 0x67f1f1ce
jmp 0x10034f30
cmp ecx, 0x3f0a5217
jle 0x10035060
cmp ecx, 0x628d8e2c
jg 0x100351f2
cmp ecx, 0x4d001a26
jg 0x1003533e
cmp ecx, 0x3f0a5218
je 0x10035735
cmp ecx, 0x4784c9a0
je 0x10035750
cmp ecx, 0x4996c69e
jne 0x10034f30
mov ecx, dword [esp]
cmp ecx, 0xb04d6d17
mov ecx, 0x3c95f2f9
mov edx, 0xf0a20dc0
cmovl ecx, edx
jmp 0x10034f30
cmp ecx, 0x9af67de7
jle 0x10035269
cmp ecx, 0xb19b9aa5
jg 0x1003537d
cmp ecx, 0x9af67de8
je 0x10035906
cmp ecx, 0xabcce9b4
je 0x10035921
cmp ecx, 0xadd3efd8
jne 0x10034f30
mov ecx, dword [esp]
cmp ecx, 0x4e8903b5
mov ecx, 0xeb27b94d
mov edx, 0xfba3ae0f
cmove ecx, edx
jmp 0x10034f30
cmp ecx, 0x2573adf9
jle 0x100352b4
cmp ecx, 0x39a35fe8
jg 0x100355d0
cmp ecx, 0x2573adfa
je 0x1003593c
cmp ecx, 0x376a276c
je 0x10035958
cmp ecx, 0x38e26757
jne 0x10034f30
mov eax, dword [esp + 0x5c]
mov eax, dword [eax]
mov dword [esp + 0x10], eax
mov ecx, dword [esp + 0xc]
lea eax, [ecx + 0x4b682a48]
mov edx, eax
and edx, 0xb497d5b7
add edx, ecx
add edx, 0x4b682a48
mov esi, 0x3497d5b7
sub esi, ecx
and esi, 0x4b682a48
add esi, edx
xor eax, 0xb497d5b7
add eax, esi
mov ecx, 0xb4b2393a
sub ecx, eax
not eax
and eax, 1
or ecx, 1
sub eax, ecx
mov ecx, eax
or ecx, 0x96b5f10c
add ecx, eax
not eax
mov edx, eax
and edx, 0x694a0ef3
lea ecx, [ecx + edx*2]
or eax, 0x96b5f10c
sub ecx, eax
imul eax, ecx, 0x1ce98c27
lea ecx, [eax + 0x3f144b17]
add eax, eax
add eax, 0x7e28962e
mov edx, ecx
or edx, 0xb826eb21
or ecx, 0x47d914de
add ecx, edx
sub eax, ecx
imul edx, eax, 0xb89cdc69
lea eax, [edx - 0x5858a050]
lea ecx, [edx + edx]
add ecx, 0x4f4ebf60
mov esi, ecx
and esi, 0xbba66ee
mov edi, eax
and edi, 0xfa22cc88
add edi, esi
lea esi, [edx + edi]
add esi, 0xa7a75fb0
mov edi, 0x858a04f
sub edi, edx
and edi, 0x5dd3377
add edi, esi
xor eax, 0xfa22cc88
sub eax, edi
or ecx, 0xbba66ee
add eax, ecx
add eax, 0xfa22cc8a
mov dword [esp + 0x24], eax
cmp eax, 0x1000
mov eax, 0xc9525f59
mov ecx, 0x180f9789
cmovae eax, ecx
mov ecx, 0x8c6acfa
mov edx, dword [esp + 0x10]
mov dword [esp + 0x20], edx
jmp 0x10034f30
cmp ecx, 0xe9b6b11b
jg 0x1003560f
cmp ecx, 0xc61b8cf4
je 0x10035973
cmp ecx, 0xc7230aef
je 0x10035992
cmp ecx, 0xcdc3c145
jne 0x10034f30
push dword [esp + 0x48]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [esp + 0x4c]
mov ecx, 0x8c6acfa
mov eax, 0x553267f2
jmp 0x10034f30
cmp ecx, 0x6dccbc44
jg 0x1003564e
cmp ecx, 0x628d8e2d
je 0x100359ad
cmp ecx, 0x67f1f1ce
je 0x100359b7
cmp ecx, 0x68d45d19
jne 0x10034f30
lea ecx, [esp + 0x8c]
mov dword [esp + 8], ecx
lea eax, [esp + 0x9c]
mov dword [esp + 0x84], eax
lea eax, [esp + 0xa0]
mov dword [esp + 0x58], eax
mov dword [esp + 0x5c], ecx
mov ecx, 0x8c6acfa
mov dword [esp + 0x2c], 0
mov eax, 0x7cee7cbf
mov edx, dword [esp + 0x50]
mov dword [esp + 0x30], edx
jmp 0x10034f30
cmp ecx, 0x8c65f23b
jg 0x1003568d
cmp ecx, 0x81f2dcee
je 0x100359c4
cmp ecx, 0x853a2e84
je 0x10035a11
cmp ecx, 0x85a181ba
jne 0x10034f30
mov ecx, dword [esp]
cmp ecx, 0x553267f2
mov ecx, 0xeb27b94d
mov edx, 0x91df0c06
cmove ecx, edx
jmp 0x10034f30
cmp ecx, 0x1205686f
jle 0x100356c0
cmp ecx, 0x12056870
je 0x10035a2c
cmp ecx, 0x193de2db
je 0x10034ef3
cmp ecx, 0x1eb526d8
jne 0x10034f30
mov ecx, dword [esp]
cmp ecx, 0xc81be33e
mov ecx, 0x6dccbc45
mov edx, 0xb77686ac
cmovl ecx, edx
jmp 0x10034f30
cmp ecx, 0xee6b7c71
je 0x10035a47
cmp ecx, 0xf0a20dc0
je 0x10035a86
cmp ecx, 0xf3af6514
jne 0x10034f30
mov ecx, dword [esp]
cmp ecx, 0xb4cb1744
mov ecx, 0x853a2e84
mov edx, 0xc7230aef
cmovl ecx, edx
jmp 0x10034f30
cmp ecx, 0x4d001a27
je 0x10035aa1
cmp ecx, 0x525ab14b
je 0x10035abc
cmp ecx, 0x5a16cb5b
jne 0x10034f30
mov ecx, dword [esp]
cmp ecx, 0xc9525f59
mov ecx, 0xeb27b94d
mov edx, 0xc61b8cf4
cmove ecx, edx
jmp 0x10034f30
cmp ecx, 0xb19b9aa6
je 0x10035ad7
cmp ecx, 0xb77686ac
je 0x10035b0d
cmp ecx, 0xbd0227bf
jne 0x10034f30
mov eax, dword [esp + 0x10]
mov eax, dword [eax - 4]
mov dword [esp + 0x68], eax
mov eax, dword [esp + 0x10]
mov edx, eax
not edx
mov esi, eax
and esi, 3
lea ecx, [esi + esi]
sub ecx, esi
add ecx, 0xe92465c7
mov esi, ecx
or esi, 0x16db9a38
not ecx
or ecx, 0xe92465c7
add esi, eax
sub ecx, esi
mov esi, ecx
and esi, 4
add esi, ecx
or ecx, 0xfffffffb
sub ecx, esi
lea edi, [ecx + 1]
and edx, 0xfffffffc
mov esi, eax
or esi, 0xfffffffc
xor esi, 3
xor eax, 0xfffffffc
add esi, eax
or eax, edx
sub esi, eax
lea eax, [ecx + ecx]
add eax, 2
xor edi, 0xa5576660
lea ecx, [edi + ecx*2]
add ecx, 2
mov edx, eax
xor edx, 0xb551333e
add edx, ecx
or eax, 0xb551333e
sub edx, eax
lea eax, [edx + esi*2]
sub eax, esi
lea ecx, [eax - 0x4aaeccc0]
add eax, eax
add eax, 0x6aa26680
sub ecx, eax
lea eax, [ecx - 0x7ee817ef]
and eax, 0xd990b18e
add ecx, eax
add ecx, 0x8117e811
mov edx, eax
sub edx, ecx
mov dword [esp + 0x80], edx
neg ecx
lea ebx, [eax + ecx]
add ebx, 0x266f4e72
mov edx, dword [esp + 0x68]
mov edi, edx
not edi
mov eax, ebx
and eax, edi
mov esi, eax
mov dword [esp + 0x18], eax
mov eax, edx
mov ecx, edx
xor eax, ebx
mov edx, eax
mov dword [esp + 0x1c], eax
mov ebp, ecx
lea eax, [ecx + eax*2]
add eax, 2
lea ecx, [esi + esi*2]
sub eax, ecx
lea eax, [eax + edi*2]
add eax, ebx
mov dword [esp + 0x7c], eax
not ebx
mov ecx, ebp
mov esi, ebp
mov dword [esp + 0x14], ebp
and ecx, ebx
mov ebp, ebx
mov eax, edx
not eax
lea ebx, [ecx + edx]
lea eax, [ebx + eax*2]
lea ebx, [eax + edx*2]
add ebx, 2
mov eax, ebp
and eax, edi
lea edx, [ecx + eax*2]
not ecx
or ecx, dword [esp + 0x18]
add ecx, ebx
mov eax, 0xfffffffd
sub eax, ecx
sub eax, ecx
mov ebx, 0x99017278
sub ebx, esi
and eax, ebx
add eax, ebx
lea eax, [eax + ecx*2]
add eax, 2
add ecx, ecx
add ecx, 2
lea ebx, [esi + 0x66fe8d87]
or ebx, ecx
lea ecx, [eax + ebx]
add eax, ebx
add eax, 1
add ecx, ecx
add ecx, 2
mov ebx, ecx
xor ebx, 0xcdfd1b10
xor eax, 0x99017277
add eax, ebx
and ecx, 0xcdfd1b10
lea ebx, [eax + ecx]
add eax, ecx
add eax, 1
mov ecx, dword [esp + 0x80]
add ecx, edi
add ecx, 0x266f4e72
add ecx, dword [esp + 0x1c]
mov esi, dword [esp + 0x14]
or esi, ebp
add ecx, esi
add ecx, 2
or ecx, dword [esp + 0x7c]
mov esi, ecx
not esi
lea ecx, [ecx + esi*2]
mov esi, ecx
not esi
lea ebx, [ecx + ebx*2]
add ebx, 3
or esi, eax
or eax, ecx
add eax, esi
mov ecx, edi
and ecx, 0x2a5c21a7
mov esi, dword [esp + 0x14]
add ecx, esi
xor esi, 0xd5a3de58
add ecx, esi
add ecx, 1
mov esi, edi
and esi, 0xd5a3de58
or ecx, esi
mov esi, eax
sub esi, ebx
sub ebx, eax
lea eax, [ebx + esi*2]
xor ecx, 0x2a5c21a7
not eax
add eax, ecx
add edx, dword [esp + 0x18]
add edx, dword [esp + 0x1c]
or edi, ebp
sub edx, edi
mov ecx, edx
not ecx
add ecx, ecx
not ecx
sub ecx, edx
lea edx, [ecx*4]
sub eax, edx
lea eax, [eax + ecx*2]
imul eax, eax, 0x86730ef3
mov ecx, 0x2c418fd3
sub ecx, eax
imul eax, ecx, 0xe75a45c5
add eax, 0x509a73a3
cmp eax, 0x20
mov eax, 0x4e8903b5
mov ecx, 0xdce58062
cmovb eax, ecx
mov ecx, 0x8c6acfa
jmp 0x10034f30
cmp ecx, 0x39a35fe9
je 0x10035b28
cmp ecx, 0x3c95f2f9
je 0x10035b43
cmp ecx, 0x3cf55555
jne 0x10034f30
mov ecx, dword [esp]
cmp ecx, 0x553267f2
mov ecx, 0x85a181ba
mov edx, 0x9af67de8
cmovl ecx, edx
jmp 0x10034f30
cmp ecx, 0xe9b6b11c
je 0x10035b5e
cmp ecx, 0xeb27b94d
je 0x10035b8c
cmp ecx, 0xee01b312
jne 0x10034f30
mov ecx, dword [esp]
cmp ecx, 0x50c2364c
mov ecx, 0x978a8a4e
mov edx, 0x4d001a27
cmovl ecx, edx
jmp 0x10034f30
cmp ecx, 0x6dccbc45
je 0x10035b96
cmp ecx, 0x77a606dd
je 0x10035bb1
cmp ecx, 0x7dfd61b0
jne 0x10034f30
mov ecx, dword [esp]
cmp ecx, 0xb4cb1744
mov ecx, 0xeb27b94d
mov edx, 0x38e26757
cmove ecx, edx
jmp 0x10034f30
cmp ecx, 0x8c65f23c
je 0x10035bcc
cmp ecx, 0x978a8a4e
jne 0x10035de8
mov ecx, dword [esp]
cmp ecx, 0x73bb171f
mov ecx, 0x39a35fe9
mov edx, 0x3cf55555
cmovl ecx, edx
jmp 0x10034f30
cmp ecx, 0x9578d8c
je 0x10035be7
cmp ecx, 0x102ffb7b
jne 0x10034f30
mov ecx, dword [esp]
cmp ecx, 0xc9525f59
mov ecx, 0xee01b312
mov edx, 0xf3af6514
cmovl ecx, edx
jmp 0x10034f30
cmp ecx, 0xf9bd3c4c
jne 0x10035df6
mov ecx, dword [esp]
cmp ecx, 0x4e8903b5
mov ecx, 0xadd3efd8
mov edx, 0x376a276c
cmovl ecx, edx
jmp 0x10034f30
mov ecx, dword [esp]
cmp ecx, 0xdce58062
mov ecx, 0x3f0a5218
mov edx, 0x5a16cb5b
cmovl ecx, edx
jmp 0x10034f30
mov ecx, dword [esp]
cmp ecx, 0xdce58062
mov ecx, 0xeb27b94d
mov edx, 0x4784c9a0
cmove ecx, edx
jmp 0x10034f30
mov esi, dword [esp + 0xc]
mov edx, esi
not edx
lea eax, [esi + esi]
mov ecx, eax
or ecx, 0x6cbb4770
mov edi, esi
xor edi, 0xc9a25c47
add ecx, edi
add ecx, 0x10828349
mov edi, ecx
or edi, 0x24
and ecx, 0x24
add ecx, edi
mov edi, ecx
not edi
mov ebx, ecx
and ebx, 0xb91fd900
add ebx, ecx
and edi, 0x46e026ff
add edi, ebx
xor ecx, 0xb91fd900
add ecx, edi
or esi, 0x24
sub ecx, esi
lea esi, [ecx + 0x567ea75f]
mov edi, esi
not edi
and esi, 0x1d5ece5d
add esi, esi
neg esi
add esi, ecx
add esi, 0x567ea75f
lea ecx, [esi + ecx*2]
add ecx, 0xacfd4ebe
add edi, edi
or edi, 0x3abd9cba
lea esi, [ecx + edi]
add ecx, edi
add ecx, 0x62a131a4
and edx, 0xffffffdb
or eax, 0x48
add eax, edx
mov edx, 0xfffffffe
sub edx, eax
mov edi, edx
and edi, 0xf8dd1f54
add edi, edi
mov ebx, edx
or ebx, 0x8722e0ab
sub edi, ebx
add edi, 0x8722e0ab
mov ebx, 0x7fffffe
sub ebx, eax
or ebx, 0x78dd1f54
and ebx, edi
mov ebp, edi
not ebp
or edx, 0x78dd1f54
or edi, edx
lea eax, [edi + ebx*2]
add edx, edx
sub eax, edx
add eax, ebp
xor eax, 0x78dd1f54
add eax, 1
mov edx, ecx
and edx, 0x13c7f964
lea edx, [esi + edx*2]
add edx, 0x62a131a4
not ecx
add ecx, ecx
or ecx, 0xd8700d36
mov edi, 0x13c7f962
sub edi, edx
sub edi, ecx
add ecx, edx
add ecx, 0xec38069d
mov edx, ecx
and edx, eax
add edx, edx
sub ecx, edx
and edi, eax
add edi, edi
sub ecx, edi
lea eax, [eax + eax*2]
add eax, ecx
mov ecx, eax
not ecx
mov edx, ecx
and edx, 0xec38069b
add edx, eax
and ecx, 0x13c7f964
add ecx, edx
lea edx, [ecx + eax]
add eax, ecx
add eax, 0x13c7f966
lea ecx, [edx + edx]
add ecx, 0x278ff2cc
sub ecx, eax
mov edx, 0xad20f87e
sub edx, ecx
sub edx, ecx
lea eax, [ecx + 0x296f83c0]
lea esi, [ecx + ecx]
add esi, 0x52df0780
and edx, 0xad20f87e
lea ecx, [edx + ecx*2]
add ecx, 0x52df0780
xor esi, 0x52df0780
add esi, ecx
xor eax, 0xd6907c3f
add eax, esi
imul eax, eax, 0x97f61787
add eax, 0x2fec2f0f
imul ecx, eax, 0x84d001c9
imul eax, eax, 0xf65ffc6e
add eax, ecx
add eax, 0x84d001c9
mov dword [esp + 0x24], eax
mov eax, dword [esp + 0x68]
mov dword [esp + 0x20], eax
mov ecx, 0x8c6acfa
mov eax, 0xc9525f59
jmp 0x10034f30
mov ecx, dword [esp]
cmp ecx, 0x50c2364c
mov ecx, 0xeb27b94d
mov edx, 0x81f2dcee
cmove ecx, edx
jmp 0x10034f30
mov ecx, dword [esp]
cmp ecx, 0xbc40e2da
mov ecx, 0x525ab14b
mov edx, 0x7dfd61b0
cmovl ecx, edx
jmp 0x10034f30
cmp byte [esp + 7], 0
mov eax, 0xc5bc5db3
mov ecx, 0x553267f2
cmovne eax, ecx
mov ecx, 0x8c6acfa
jmp 0x10034f30
mov ecx, dword [esp]
cmp ecx, 0x180f9789
mov ecx, 0xeb27b94d
mov edx, 0xbd0227bf
cmove ecx, edx
jmp 0x10034f30
push dword [esp + 0x24]
push dword [esp + 0x24]
call fcn.10055108
add esp, 8
mov ecx, 0x8c6acfa
mov eax, 0x73bb171f
jmp 0x10034f30
mov ecx, dword [esp]
cmp ecx, 0x9904f0be
mov ecx, 0x4996c69e
mov edx, 0x12056870
cmovl ecx, edx
jmp 0x10034f30
mov ecx, 0x8c6acfa
jmp 0x10034f30
mov dword [esp], eax
mov ecx, 0x102ffb7b
jmp 0x10034f30
mov eax, dword [esp + 0x28]
mov dword [esp + 0x48], eax
lea eax, [esp + 0x88]
mov dword [esp + 0x4c], eax
mov eax, dword [esp + 0x4c]
mov dword [esp + 0x88], 0
mov eax, dword [esp + 0x34]
mov eax, dword [eax]
mov dword [esp + 0x50], eax
mov eax, dword [esp + 0x38]
mov eax, dword [eax]
mov dword [esp + 0x54], eax
mov eax, dword [esp + 0x50]
cmp eax, dword [esp + 0x54]
mov eax, 0xbc40e2da
mov ecx, 0xc81be33e
jmp 0x10034f19
mov ecx, dword [esp]
cmp ecx, 0xc5bc5db3
mov ecx, 0x1eb526d8
mov edx, 0xabcce9b4
cmovl ecx, edx
jmp 0x10034f30
mov ecx, dword [esp]
cmp ecx, 0x8758e7f4
mov ecx, 0xeb27b94d
mov edx, 0x2573adfa
cmove ecx, edx
jmp 0x10034f30
mov eax, dword [esp + 0x30]
mov dword [esp + 0x60], eax
mov eax, dword [esp + 8]
mov edx, dword [esp + 0x60]
lea ecx, [esp + 0x8c]
call fcn.10050240
mov eax, dword [esp + 0x84]
mov eax, dword [eax]
mov ecx, dword [esp + 0x58]
cmp dword [ecx], 0x10
mov ecx, dword [esp + 0x5c]
jae 0x10035c01
mov ecx, dword [esp + 8]
jmp 0x10035c03
mov ecx, dword [esp]
cmp ecx, 0x9904f0be
mov ecx, 0xeb27b94d
mov edx, 0x9578d8c
cmove ecx, edx
jmp 0x10034f30
mov ecx, dword [esp]
cmp ecx, 0x180f9789
mov ecx, 0xf9bd3c4c
mov edx, 0x31776f3
cmovl ecx, edx
jmp 0x10034f30
mov ecx, dword [esp]
cmp ecx, 0xbc40e2da
mov ecx, 0xeb27b94d
mov edx, 0x68d45d19
cmove ecx, edx
jmp 0x10034f30
mov eax, dword [esp + 8]
mov eax, dword [esp + 0x60]
add eax, 0x18
mov dword [esp + 0x30], eax
cmp eax, dword [esp + 0x54]
mov eax, 0x7cee7cbf
mov ecx, 0xc81be33e
cmove eax, ecx
mov ecx, dword [esp + 0x64]
mov ecx, 0x8c6acfa
mov edx, dword [esp + 0x64]
mov dword [esp + 0x2c], edx
jmp 0x10034f30
mov ecx, dword [esp]
cmp ecx, 0xc5bc5db3
mov ecx, 0xeb27b94d
mov edx, 0x193de2db
cmove ecx, edx
jmp 0x10034f30
mov ecx, dword [esp]
cmp ecx, 0x7cee7cbf
mov ecx, 0x8c65f23c
mov edx, 0x77a606dd
cmovl ecx, edx
jmp 0x10034f30
mov ecx, dword [esp]
cmp ecx, 0xb04d6d17
mov ecx, 0xeb27b94d
mov edx, 0xe9b6b11c
cmove ecx, edx
jmp 0x10034f30
mov ecx, dword [esp + 0x78]
mov dword [esp + 0x3c], ecx
mov eax, dword [esp + 0x70]
mov dword [esp + 0x40], eax
mov eax, dword [esp + 0x40]
cmp dword [eax], 0x10
mov dword [esp + 0x44], ecx
mov eax, dword [esp + 0x44]
jae 0x10035d6d
mov eax, dword [esp + 0x3c]
jmp 0x10035d6f
mov ecx, 0x628d8e2d
jmp 0x10034f30
mov ecx, dword [esp]
cmp ecx, 0xc81be33e
mov ecx, 0xeb27b94d
mov edx, 0xcdc3c145
cmove ecx, edx
jmp 0x10034f30
mov ecx, dword [esp]
cmp ecx, 0x73bb171f
mov ecx, 0xeb27b94d
mov edx, 0xb19b9aa6
cmove ecx, edx
jmp 0x10034f30
mov ecx, dword [esp]
cmp ecx, 0x7cee7cbf
mov ecx, 0xeb27b94d
mov edx, 0xee6b7c71
cmove ecx, edx
jmp 0x10034f30
mov eax, dword [esp + 0x40]
cmp dword [eax], 0x10
mov eax, dword [esp + 0x44]
jae 0x10035dad
mov eax, dword [esp + 0x3c]
jmp 0x10035daf
mov ecx, dword [ecx]
push 0
lea edx, [esp + 0x8c]
push edx
push eax
push ecx
push dword [esp + 0x58]
call dword [sym.imp.KERNEL32.dll_WriteFile]
mov ecx, dword [esp + 0x88]
mov edx, ecx
and edx, 0x809dd623
lea eax, [ecx + ecx]
sub eax, edx
or ecx, 0x809dd623
sub eax, ecx
lea ecx, [eax - 1]
or ecx, 0x7f6229dc
lea edx, [eax + ecx]
add edx, 0xffffffff
not ecx
lea ecx, [edx + ecx*2]
neg eax
or eax, 0x7f6229dc
sub ecx, eax
mov esi, dword [esp + 0x2c]
lea eax, [esi + ecx*2]
add eax, 0x15442e36
add ecx, 0x8aa2171b
mov edx, esi
not edx
or edx, ecx
or ecx, esi
add edx, ecx
sub eax, edx
imul ecx, eax, 0x2df31ff
lea eax, [ecx - 0x74662ee5]
mov edx, 0x34662ee4
sub edx, ecx
and edx, 0x36406def
add edx, ecx
add edx, 0x8b99d11b
xor eax, 0xc9bf9210
add eax, edx
mov edx, 0x74662ee4
sub edx, ecx
or edx, 0x36406def
sub eax, edx
lea ecx, [eax + 0x36406def]
lea edx, [eax + eax]
add edx, 0x6c80dbde
mov esi, edx
and esi, 0x806e4ed0
mov edi, ecx
and edi, 0x3fc8d897
add edi, esi
add eax, edi
add eax, 0x36406def
mov esi, ecx
not esi
and esi, 0xc0372768
add esi, eax
xor ecx, 0xc0372768
add ecx, esi
or edx, 0x806e4ed0
sub ecx, edx
lea eax, [ecx - 0x3fc8d898]
mov edx, eax
xor edx, 0x36406def
add ecx, edx
add ecx, 0xc0372768
mov edx, eax
or edx, 0x36406def
sub ecx, edx
and eax, 0x36406def
add eax, ecx
imul eax, eax, 0x8f5ccdff
lea ecx, [eax + 0x5ae61bef]
mov edx, ecx
and edx, 0x1d217767
add eax, edx
add eax, 0x5ae61bef
mov edx, ecx
not edx
add edx, eax
and ecx, 0xe2de8898
lea eax, [ecx + edx]
add eax, 0x1d217769
mov dword [esp + 0x64], eax
mov eax, dword [esp + 0x58]
mov eax, dword [eax]
mov dword [esp + 0xc], eax
mov eax, dword [esp + 0xc]
cmp eax, 0x10
mov eax, 0x73bb171f
mov ecx, 0xb4cb1744
cmovae eax, ecx
mov ecx, 0x8c6acfa
jmp 0x10034f30
mov eax, dword [eax]
sub esp, 0x1c
movaps xmm0, xmmword [0x10063960]
movups xmmword [esp + 4], xmm0
mov dword [esp], eax
mov dword [esp + 0x18], 0
mov dword [esp + 0x14], 0x80
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov dword [esp + 0x28], eax
cmp eax, 0xffffffff
mov eax, 0x50c2364c
mov ecx, 0x9904f0be
jmp 0x10034f19
mov eax, dword [eax]
sub esp, 0x1c
movaps xmm0, xmmword [0x10063950]
movups xmmword [esp + 4], xmm0
mov dword [esp], eax
mov dword [esp + 0x18], 0
mov dword [esp + 0x14], 0x80
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov dword [esp + 0x28], eax
cmp eax, 0xffffffff
mov eax, 0x50c2364c
jmp 0x10034f14
cmp ecx, 0x91df0c06
jne 0x10034f30
jmp 0x10035e07
cmp ecx, 0xfba3ae0f
jne 0x10034f30
call fcn.100570bd
mov ecx, dword [esp + 0xa4]
xor ecx, esp
call fcn.1005560a
add esp, 0xa8
pop esi
pop edi
pop ebx
pop ebp
ret