Function at 0x1003a220
Capabilities:
Resolve function by parsing pe exports
Write file on windows

Disassembly:
push ebp
push ebx
push edi
push esi
sub esp, 0x9c
mov eax, dword [0x10070040]
xor eax, esp
mov dword [esp + 0x98], eax
cmp dword [ecx + 0x10], 0
sete byte [esp + 7]
mov dword [esp + 0x70], ecx
lea eax, [ecx + 0x14]
mov dword [esp + 0x68], eax
mov dword [esp + 0x6c], edx
lea eax, [edx + 4]
mov dword [esp + 0x64], eax
mov ecx, 0xaa317b71
mov eax, 0x714a6944
jmp 0x1003a2a0
mov eax, dword [esp + 0x6c]
mov dword [esp + 0x2c], eax
mov eax, dword [esp + 0x2c]
mov eax, dword [eax]
mov ecx, dword [esp + 0x64]
mov dword [esp + 0x30], ecx
mov ecx, dword [esp + 0x30]
cmp eax, dword [ecx]
mov eax, 0x5b323626
mov ecx, 0x93a2f59e
cmove eax, ecx
mov ecx, 0xeb771c32
nop word cs:[eax + eax]
nop dword [eax + eax]
cmp ecx, 0xf56a2328
jg 0x1003a310
cmp ecx, 0xc500f413
jle 0x1003a380
cmp ecx, 0xe7abeaa0
jg 0x1003a437
cmp ecx, 0xca26d5e4
jg 0x1003a56d
cmp ecx, 0xc500f414
je 0x1003a799
cmp ecx, 0xc82638cd
je 0x1003a7b4
cmp ecx, 0xc95fc04f
jne 0x1003a2a0
mov ecx, dword [esp]
cmp ecx, 0x5b323626
mov ecx, 0x472eb8e7
mov edx, 0xef371cbe
cmovl ecx, edx
jmp 0x1003a2a0
cmp ecx, 0x4e1d2f26
jg 0x1003a3e0
cmp ecx, 0xc554f14
jg 0x1003a471
cmp ecx, 0x2ac9df2
jg 0x1003a5ac
cmp ecx, 0xf56a2329
je 0x1003a7cf
cmp ecx, 0xfbd2f4e2
je 0x1003a7ea
cmp ecx, 0xfe2ef330
jne 0x1003a2a0
push dword [esp + 0x20]
push dword [esp + 0x20]
call fcn.1005d15f
add esp, 8
mov ecx, 0xeb771c32
mov eax, 0x93ab54b
jmp 0x1003a2a0
cmp ecx, 0xb63d67a8
jle 0x1003a4bc
cmp ecx, 0xba66b70b
jg 0x1003a5eb
cmp ecx, 0xb63d67a9
je 0x1003a805
cmp ecx, 0xb6c52602
je 0x1003a820
cmp ecx, 0xb8e5148f
jne 0x1003a2a0
mov ecx, dword [esp]
cmp ecx, 0x3e51aead
mov ecx, 0x925fb233
mov edx, 0xb3f9bf3
cmovl ecx, edx
jmp 0x1003a2a0
cmp ecx, 0x6acfff1a
jg 0x1003a507
cmp ecx, 0x5cc3dde9
jg 0x1003a656
cmp ecx, 0x4e1d2f27
je 0x1003a83b
cmp ecx, 0x51221e4b
je 0x1003a87f
cmp ecx, 0x5958f578
jne 0x1003a2a0
mov ecx, dword [esp]
cmp ecx, 0x84d3e272
mov ecx, 0x5d46a2d8
mov edx, 0xb00bd3bf
cmovl ecx, edx
jmp 0x1003a2a0
cmp ecx, 0xed554a1f
jg 0x1003a694
cmp ecx, 0xe7abeaa1
je 0x1003a89a
cmp ecx, 0xe7b91bbc
je 0x1003a8b6
cmp ecx, 0xeb771c32
jne 0x1003a2a0
mov ecx, 0xaa317b71
jmp 0x1003a2a0
cmp ecx, 0x29aa6818
jg 0x1003a6d3
cmp ecx, 0xc554f15
je 0x1003a8c0
cmp ecx, 0x1fb3b46d
je 0x1003a263
cmp ecx, 0x24ea791e
jne 0x1003a2a0
mov ecx, dword [esp]
cmp ecx, 0x84d3e272
mov ecx, 0xe7b91bbc
mov edx, 0x72ff971d
cmove ecx, edx
jmp 0x1003a2a0
cmp ecx, 0xaa317b70
jg 0x1003a712
cmp ecx, 0x925fb233
je 0x1003a8db
cmp ecx, 0x92a66d4d
je 0x1003a8f6
cmp ecx, 0xa8dd703e
jne 0x1003a2a0
mov ecx, dword [esp]
cmp ecx, 0x93ab54b
mov ecx, 0xe7b91bbc
mov edx, 0x79d2b012
cmove ecx, edx
jmp 0x1003a2a0
cmp ecx, 0x72ff971c
jle 0x1003a745
cmp ecx, 0x72ff971d
je 0x1003a913
cmp ecx, 0x74b0987b
je 0x1003aa96
cmp ecx, 0x79d2b012
jne 0x1003a2a0
mov eax, dword [esp + 0xc]
mov eax, dword [esp + 0x58]
add eax, 0x18
mov dword [esp + 0x28], eax
cmp eax, dword [esp + 0x4c]
mov eax, 0xb620fd9
mov ecx, 0xade85e89
cmove eax, ecx
mov ecx, dword [esp + 0x5c]
mov ecx, 0xeb771c32
mov edx, dword [esp + 0x5c]
mov dword [esp + 8], edx
jmp 0x1003a2a0
cmp ecx, 0xca26d5e5
je 0x1003aac4
cmp ecx, 0xdc6cd67c
je 0x1003aadf
cmp ecx, 0xdd919562
jne 0x1003a2a0
mov ecx, dword [esp]
cmp ecx, 0xade85e89
mov ecx, 0xe7b91bbc
mov edx, 0x92a66d4d
cmove ecx, edx
jmp 0x1003a2a0
cmp ecx, 0x2ac9df3
je 0x1003abba
cmp ecx, 0x4d1c5d3
je 0x1003af16
cmp ecx, 0xb3f9bf3
jne 0x1003a2a0
mov ecx, dword [esp]
cmp ecx, 0xb620fd9
mov ecx, 0xe7b91bbc
mov edx, 0x6b90a75b
cmove ecx, edx
jmp 0x1003a2a0
cmp ecx, 0xba66b70c
je 0x1003af31
cmp ecx, 0xbe071376
je 0x1003af4c
cmp ecx, 0xc0807a66
jne 0x1003a2a0
mov eax, dword [esp + 0x24]
mov dword [esp + 0x40], eax
lea eax, [esp + 0x7c]
mov dword [esp + 0x44], eax
mov eax, dword [esp + 0x44]
mov dword [esp + 0x7c], 0
mov eax, dword [esp + 0x2c]
mov eax, dword [eax]
mov dword [esp + 0x48], eax
mov eax, dword [esp + 0x30]
mov eax, dword [eax]
mov dword [esp + 0x4c], eax
mov eax, dword [esp + 0x48]
cmp eax, dword [esp + 0x4c]
mov eax, 0x3e51aead
mov ecx, 0xade85e89
jmp 0x1003a289
cmp ecx, 0x5cc3ddea
je 0x1003af67
cmp ecx, 0x5d46a2d8
je 0x1003af71
cmp ecx, 0x5d7e7d0e
jne 0x1003a2a0
mov eax, dword [esp + 0x38]
cmp dword [eax], 0x10
mov eax, dword [esp + 0x3c]
jae 0x1003b020
mov eax, dword [esp + 0x34]
jmp 0x1003b022
cmp ecx, 0xed554a20
je 0x1003af8c
cmp ecx, 0xef371cbe
je 0x1003afa7
cmp ecx, 0xf3b7dd93
jne 0x1003a2a0
mov ecx, dword [esp]
cmp ecx, 0x714a6944
mov ecx, 0xe7b91bbc
mov edx, 0xe7abeaa1
cmove ecx, edx
jmp 0x1003a2a0
cmp ecx, 0x29aa6819
je 0x1003afc2
cmp ecx, 0x426ddb25
je 0x1003afdd
cmp ecx, 0x472eb8e7
jne 0x1003a2a0
mov ecx, dword [esp]
cmp ecx, 0x714a6944
mov ecx, 0xc554f15
mov edx, 0x29aa6819
cmovl ecx, edx
jmp 0x1003a2a0
cmp ecx, 0xaa317b71
je 0x1003aff8
cmp ecx, 0xb00bd3bf
jne 0x1003b2b7
mov ecx, dword [esp]
cmp ecx, 0x824ed201
mov ecx, 0xe7b91bbc
mov edx, 0x5d7e7d0e
cmove ecx, edx
jmp 0x1003a2a0
cmp ecx, 0x6acfff1b
je 0x1003b005
cmp ecx, 0x6b90a75b
jne 0x1003b2c5
mov eax, dword [esp + 0x28]
mov dword [esp + 0x58], eax
mov eax, dword [esp + 0xc]
mov edx, dword [esp + 0x58]
lea ecx, [esp + 0x80]
call fcn.10057420
mov eax, dword [esp + 0x78]
mov eax, dword [eax]
mov ecx, dword [esp + 0x50]
cmp dword [ecx], 0x10
mov ecx, dword [esp + 0x54]
jae 0x1003b05b
mov ecx, dword [esp + 0xc]
jmp 0x1003b05d
mov ecx, dword [esp]
cmp ecx, 0xd8ebb8c3
mov ecx, 0xe7b91bbc
mov edx, 0xfe2ef330
cmove ecx, edx
jmp 0x1003a2a0
mov ecx, dword [esp]
cmp ecx, 0xf025af03
mov ecx, 0xe7b91bbc
mov edx, 0x1fb3b46d
cmove ecx, edx
jmp 0x1003a2a0
mov ecx, dword [esp]
cmp ecx, 0x93ab54b
mov ecx, 0xa8dd703e
mov edx, 0xc82638cd
cmovl ecx, edx
jmp 0x1003a2a0
mov ecx, dword [esp]
cmp ecx, 0x79ace86d
mov ecx, 0xe7b91bbc
mov edx, 0x2ac9df3
cmove ecx, edx
jmp 0x1003a2a0
mov ecx, dword [esp]
cmp ecx, 0x972ad563
mov ecx, 0xe7b91bbc
mov edx, 0xc0807a66
cmove ecx, edx
jmp 0x1003a2a0
mov ecx, dword [esp]
cmp ecx, 0xd8ebb8c3
mov ecx, 0xc500f414
mov edx, 0x426ddb25
cmovl ecx, edx
jmp 0x1003a2a0
lea ecx, [esp + 0x80]
mov dword [esp + 0xc], ecx
lea eax, [esp + 0x90]
mov dword [esp + 0x78], eax
lea eax, [esp + 0x94]
mov dword [esp + 0x50], eax
mov dword [esp + 0x54], ecx
mov ecx, 0xeb771c32
mov dword [esp + 8], 0
mov eax, 0xb620fd9
mov edx, dword [esp + 0x48]
mov dword [esp + 0x28], edx
jmp 0x1003a2a0
mov ecx, dword [esp]
cmp ecx, 0x66de27bb
mov ecx, 0xe7b91bbc
mov edx, 0x6e2a69fe
cmove ecx, edx
jmp 0x1003a2a0
cmp byte [esp + 7], 0
mov eax, 0xf025af03
mov ecx, 0x93a2f59e
cmovne eax, ecx
mov ecx, 0xeb771c32
jmp 0x1003a2a0
mov ecx, 0x5cc3ddea
jmp 0x1003a2a0
mov ecx, dword [esp]
cmp ecx, 0x79ace86d
mov ecx, 0xfbd2f4e2
mov edx, 0xf3b7dd93
cmovl ecx, edx
jmp 0x1003a2a0
mov ecx, dword [esp]
cmp ecx, 0x3e51aead
mov ecx, 0xe7b91bbc
mov edx, 0x4e1d2f27
cmove ecx, edx
jmp 0x1003a2a0
push dword [esp + 0x40]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [esp + 0x44]
mov ecx, 0xeb771c32
mov eax, 0x93a2f59e
jmp 0x1003a2a0
mov eax, dword [esp + 0x54]
mov eax, dword [eax]
mov dword [esp + 0x14], eax
mov ecx, dword [esp + 0x10]
lea eax, [ecx + ecx]
mov edx, ecx
not edx
lea edx, [edx + ecx*2]
mov esi, ecx
xor esi, 0xfffffffe
mov edi, esi
and edi, ecx
or eax, 2
add eax, edi
add eax, esi
sub eax, ecx
or ecx, 0xfffffffe
lea esi, [edx + ecx]
add edx, ecx
add edx, 3
mov edi, edx
not edi
mov ecx, eax
xor ecx, 0x7dd87f4f
xor ecx, 0x822780b0
and edi, 0xb2d1fdef
lea esi, [edi + esi*2]
add esi, 6
or edx, 0xb2d1fdef
sub esi, edx
lea edx, [esi + 0x4d2e0210]
mov edi, edx
not edi
and edi, ecx
add esi, edi
add esi, 0x4d2e0210
add esi, ecx
mov edi, edx
xor edi, ecx
sub esi, edi
or edx, ecx
add edx, esi
lea ecx, [edx + eax]
add eax, edx
add eax, 0xb2d1fdf1
not eax
mov edx, 0xd2e020e
sub edx, ecx
or edx, 0xd148db01
lea ecx, [edx + ecx*2]
add ecx, 0x65a3fbe2
or eax, 0x2eb724fe
add eax, ecx
add eax, 0x2eb72501
mov ecx, eax
xor ecx, 2
and eax, 2
lea eax, [ecx + eax*2]
mov ecx, eax
not ecx
mov edx, ecx
and edx, 0xd148db01
add edx, eax
xor eax, 0x2eb724fe
add eax, edx
or ecx, 0xd148db01
sub eax, ecx
imul eax, eax, 0xa1c90fc9
mov ecx, 0x4faa8b1f
sub ecx, eax
or ecx, 0x9ef36649
add ecx, eax
lea edx, [eax + 0x305574e0]
and edx, 0x9ef36649
add eax, edx
add eax, 0x305574e0
sub eax, ecx
lea ecx, [eax + 0x6e9df168]
mov edx, ecx
or edx, 0x4837217
add eax, edx
add eax, 0x6e9df168
mov edx, ecx
or edx, 0xfb7c8de8
add edx, eax
not ecx
add ecx, edx
imul edx, ecx, 0x1443a79
lea ecx, [edx + 0xdc9da9]
mov eax, ecx
not eax
mov esi, 0xff236256
sub esi, edx
and esi, 0x77f9d1e9
add esi, esi
neg esi
add edx, esi
add edx, 0xdc9da9
or ecx, 0x8062e16
sub edx, ecx
or eax, 0x8062e16
add eax, edx
add eax, 0xeff3a3d2
mov dword [esp + 0x20], eax
cmp eax, 0x1000
mov eax, 0xd8ebb8c3
mov ecx, 0x79ace86d
cmovae eax, ecx
mov ecx, 0xeb771c32
mov edx, dword [esp + 0x14]
mov dword [esp + 0x1c], edx
jmp 0x1003a2a0
mov ecx, dword [esp + 0x70]
mov dword [esp + 0x34], ecx
mov eax, dword [esp + 0x68]
mov dword [esp + 0x38], eax
mov eax, dword [esp + 0x38]
cmp dword [eax], 0x10
mov dword [esp + 0x3c], ecx
mov eax, dword [esp + 0x3c]
jae 0x1003b277
mov eax, dword [esp + 0x34]
jmp 0x1003b279
mov ecx, dword [esp]
cmp ecx, 0x93a2f59e
mov ecx, 0xe7b91bbc
mov edx, 0xab1548a5
cmove ecx, edx
jmp 0x1003a2a0
mov eax, dword [esp + 0x10]
lea ecx, [eax + 0x639e74e0]
mov edx, ecx
not edx
mov esi, ecx
and esi, 0x24
add eax, esi
add eax, 0x639e74e0
and edx, 0xffffffdb
add edx, eax
xor ecx, 0x24
lea eax, [edx + ecx]
add ecx, edx
add ecx, 0x25
mov edx, ecx
not edx
and edx, 0x639e74df
lea eax, [edx + eax*2]
add eax, 0x4a
or ecx, 0x639e74df
sub eax, ecx
imul eax, eax, 0x90899e07
lea ecx, [eax - 0x20158d97]
not ecx
mov edx, 0x20158d96
sub edx, eax
or edx, 0x4c5b2f0c
lea eax, [edx + eax*2]
add eax, 0xbfd4e4d2
or ecx, 0xb3a4d0f3
add ecx, eax
imul ecx, ecx, 0x364d6fb7
lea eax, [ecx - 0x6095f626]
mov edx, eax
not edx
mov esi, edx
and esi, 0x1003a14a
add ecx, esi
add ecx, 0x9f6a09da
xor eax, 0xeffc5eb5
add eax, ecx
or edx, 0x1003a14a
sub eax, edx
lea ecx, [eax - 0x1003a14a]
mov edx, ecx
not edx
or ecx, 0xde35ef5a
add eax, ecx
add eax, 0xeffc5eb6
or edx, 0xde35ef5a
add eax, edx
add eax, 0x5397c296
mov dword [esp + 0x20], eax
mov eax, dword [esp + 0x60]
mov dword [esp + 0x1c], eax
mov ecx, 0xeb771c32
mov eax, 0xd8ebb8c3
jmp 0x1003a2a0
mov eax, dword [esp + 0x14]
mov eax, dword [eax - 4]
mov dword [esp + 0x60], eax
mov eax, dword [esp + 0x14]
mov edx, eax
and edx, 0xfffffffc
mov ecx, eax
and ecx, 0xf73d1c54
lea ecx, [edx + ecx*2]
add edx, edx
xor edx, 0xee7a38aa
add edx, ecx
mov ecx, eax
not ecx
lea esi, [ecx + ecx]
or esi, 0xee7a38ae
lea edi, [edx + esi]
add edx, esi
add edx, 0x1a48ab02
mov esi, edx
not esi
mov ebx, esi
and ebx, 0x8c2e3aa
add edi, ebx
add edi, 0x1a48ab02
and esi, 0xf73d1c55
add esi, edi
lea edi, [esi + edx]
add esi, edx
add esi, 0xf73d1c57
mov edx, esi
and edx, 0x6d9781b2
add edi, edx
add edi, 0xf73d1c57
mov edx, esi
xor edx, 0x6d9781b2
add edx, edi
or esi, 0x6d9781b2
sub edx, esi
lea esi, [edx + eax]
add esi, 0xd88aab6
add edx, eax
mov edi, esi
xor edi, 0xfffffffc
xor esi, 3
add esi, edi
lea edi, [edx + esi]
add edx, esi
add edx, 0xd88aab3
mov ebx, edx
not ebx
mov esi, edx
and esi, 0xd88aab5
add esi, edi
add esi, 0xd88aab3
and ebx, 0xf277554a
add ebx, esi
xor edx, 0xd88aab5
lea esi, [ebx + edx]
lea edi, [edx + ebx]
add edi, 0xf277554b
lea edx, [ecx + ecx*2]
lea edx, [edx + eax*2]
mov ebx, 0xfffffffe
sub ebx, edx
add edx, esi
mov ebp, 0xd88aab4
sub ebp, esi
and ebp, ebx
xor edi, ebx
lea ebx, [ebx + ebp*2]
add esi, edi
add esi, 0xf277554b
sub esi, ebx
sub esi, edx
lea eax, [eax + ecx*2]
mov ecx, 0xfffffffe
sub ecx, eax
or ecx, 3
add eax, ecx
add eax, 0xfffffffd
not eax
add eax, esi
imul eax, eax, 0xf651585
lea ecx, [eax + 0x13a05dff]
mov edx, ecx
and edx, 0x1beded6
add edx, eax
add edx, 0x13a05dff
not ecx
add edx, ecx
or ecx, 0x1beded6
sub edx, ecx
lea eax, [edx + 0x1beded6]
mov ecx, eax
xor ecx, 0x4b74d490
lea esi, [ecx + edx*2]
add esi, 0x37dbdac
mov ecx, eax
or ecx, 0x4b74d490
sub esi, ecx
and eax, 0xb48b2b6f
mov ecx, eax
not ecx
lea edx, [esi + ecx]
add edx, 0xb48b2b70
add esi, 0xb48b2b70
mov ecx, edx
not ecx
sub eax, esi
and eax, 0x1beded6
add eax, eax
mov esi, edx
sub esi, eax
or edx, 0xfe412129
sub esi, edx
or ecx, 0xfe412129
add ecx, esi
imul ecx, ecx, 0x676264b3
mov eax, ecx
not eax
mov edx, eax
and edx, 0x1c3b4563
add edx, ecx
xor ecx, 0xe3c4ba9c
add ecx, edx
or eax, 0x1c3b4563
sub eax, ecx
lea edx, [eax - 0x1c3b4563]
mov ecx, dword [esp + 0x60]
lea esi, [eax + 0x7b2d5f0d]
mov edi, esi
xor edi, 0x68975b8f
add edi, eax
add edi, 0xe3c4ba9d
mov ebx, esi
or ebx, 0x68975b8f
sub edi, ebx
lea ebx, [eax + edi]
add ebx, 0xe3c4ba9d
add edi, eax
add edi, 0x7b2d5f0e
and esi, 0x9768a470
mov ebp, esi
not ebp
add ebx, ebp
add ebx, 0x9768a471
sub esi, edi
lea esi, [esi + ebx*2]
sub esi, ecx
mov edi, edx
and edi, ecx
mov ebx, edx
not ebx
and ebx, ecx
sub edi, ebx
add edi, ecx
mov ebp, edx
xor ebp, ecx
add edi, ebp
mov ebx, edx
or ebx, ecx
sub edi, ebx
lea ebx, [esi + 1]
or edi, ebp
mov ebp, edi
not ebp
lea edi, [edi*2]
add edi, ebp
mov ebp, ebx
and ebp, 0xdf7913f
add ebp, ebp
add esi, esi
add esi, 2
sub esi, ebp
xor ebx, 0x72086ec0
add ebx, esi
lea esi, [edi + ebx]
add edi, ebx
add edi, 1
and edi, 0x72086ec0
add esi, edi
add esi, 1
not edi
lea ebx, [esi + edi]
add esi, edi
add esi, 0x8df79141
not ecx
or ecx, edx
mov edx, esi
or esi, 0xcb105470
add esi, ebx
add esi, 0x8df79141
not edx
or edx, 0xcb105470
add edx, esi
lea esi, [edx + ecx]
add ecx, edx
add ecx, 2
mov edx, ecx
and edx, 0x34efab8f
add edx, esi
add edx, 2
mov esi, ecx
not esi
or esi, 0x34efab8f
sub ecx, edx
lea edx, [ecx + esi]
add ecx, esi
add ecx, 0xcb105472
mov esi, 0x1c3b4561
sub esi, eax
and esi, ecx
lea ecx, [eax - 0x1c3b4562]
add esi, edx
add esi, 0xcb105472
add esi, eax
add esi, 0xe3c4ba9e
mov eax, 0x34efab8d
sub eax, edx
or eax, ecx
add eax, esi
lea ecx, [eax + eax]
sub eax, ecx
lea edx, [eax - 1]
xor edx, 0x48fcc1e4
lea esi, [eax + edx]
add esi, 0xffffffff
lea ecx, [eax + eax]
add ecx, 0xfffffffe
or ecx, 0x6e067c36
add ecx, esi
neg eax
add ecx, edx
add eax, eax
or eax, 0x91f983c8
lea edx, [ecx + eax]
add eax, ecx
add eax, 0x4e09ca1b
mov ecx, 0xb1f635e4
sub ecx, edx
and ecx, 0x8e1a3702
add ecx, edx
or eax, 0x8e1a3702
add eax, edx
add eax, 0x4e09ca1b
sub eax, ecx
add eax, 0x63ec6bd0
cmp eax, 0x20
mov eax, 0x66de27bb
mov ecx, 0xbc59a4e9
cmovb eax, ecx
mov ecx, 0xeb771c32
jmp 0x1003a2a0
mov ecx, dword [esp]
cmp ecx, 0x972ad563
mov ecx, 0x6acfff1b
mov edx, 0x5958f578
cmovl ecx, edx
jmp 0x1003a2a0
mov ecx, dword [esp]
cmp ecx, 0xade85e89
mov ecx, 0xdd919562
mov edx, 0xb63d67a9
cmovl ecx, edx
jmp 0x1003a2a0
mov ecx, dword [esp]
cmp ecx, 0x5b323626
mov ecx, 0xe7b91bbc
mov edx, 0x74b0987b
cmove ecx, edx
jmp 0x1003a2a0
mov ecx, 0xeb771c32
jmp 0x1003a2a0
mov ecx, dword [esp]
cmp ecx, 0x93a2f59e
mov ecx, 0xca26d5e5
mov edx, 0x24ea791e
cmovl ecx, edx
jmp 0x1003a2a0
mov ecx, dword [esp]
cmp ecx, 0xf025af03
mov ecx, 0xc95fc04f
mov edx, 0x4d1c5d3
cmovl ecx, edx
jmp 0x1003a2a0
mov ecx, dword [esp]
cmp ecx, 0xb620fd9
mov ecx, 0xb8e5148f
mov edx, 0xf56a2329
cmovl ecx, edx
jmp 0x1003a2a0
mov ecx, dword [esp]
cmp ecx, 0x66de27bb
mov ecx, 0x51221e4b
mov edx, 0xbe071376
cmovl ecx, edx
jmp 0x1003a2a0
mov ecx, dword [esp]
cmp ecx, 0xbc59a4e9
mov ecx, 0xe7b91bbc
mov edx, 0xdc6cd67c
cmove ecx, edx
jmp 0x1003a2a0
mov dword [esp], eax
mov ecx, 0xed554a20
jmp 0x1003a2a0
mov ecx, dword [esp]
cmp ecx, 0xbc59a4e9
mov ecx, 0xb6c52602
mov edx, 0xba66b70c
cmovl ecx, edx
jmp 0x1003a2a0
mov eax, dword [eax]
sub esp, 0x1c
movaps xmm0, xmmword [0x1006c950]
movups xmmword [esp + 4], xmm0
mov dword [esp], eax
mov dword [esp + 0x18], 0
mov dword [esp + 0x14], 0x80
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov dword [esp + 0x24], eax
cmp eax, 0xffffffff
mov eax, 0x972ad563
jmp 0x1003a284
mov ecx, dword [ecx]
push 0
lea edx, [esp + 0x80]
push edx
push eax
push ecx
push dword [esp + 0x50]
call dword [sym.imp.KERNEL32.dll_WriteFile]
mov ebp, dword [esp + 0x7c]
mov dword [esp + 0x18], ebp
mov edi, dword [esp + 8]
lea ecx, [edi + edi]
mov edx, ecx
mov esi, ecx
mov eax, ecx
and eax, 0x84bdebe2
mov ebx, edi
and ebx, 0xfda10a0e
lea ebx, [eax + ebx*4]
mov eax, ebp
not eax
mov ebp, edi
and ebp, eax
shl ebp, 2
sub ebp, ecx
sub edx, ebx
xor esi, 0x84bdebe3
add esi, edx
lea edx, [esi + edi*2]
or ecx, 0x7b42141c
lea esi, [edx + ecx]
add ecx, edx
add ecx, 0x84bdebe4
mov edx, ecx
not edx
mov ebx, edx
and ebx, 0x84bdebe3
add esi, ebx
add esi, 0x84bdebe4
and edx, 0x7b42141c
add edx, esi
lea esi, [edx + ecx]
mov dword [esp + 0x74], esi
lea esi, [edx + ecx]
add esi, 0x7b42141e
mov dword [esp + 8], edi
mov ebx, edi
xor ebx, eax
add ebx, ebp
mov edx, edi
not edx
mov ebp, edi
or ebp, eax
or eax, edx
sub ebx, eax
mov ecx, dword [esp + 0x18]
mov eax, ecx
xor eax, edx
mov edi, ecx
or edi, dword [esp + 8]
add edi, eax
mov eax, ecx
and eax, edx
add eax, ecx
sub eax, edi
add ebx, ecx
add eax, ebp
mov edi, ebx
not edi
and edi, eax
add edi, edi
mov ebp, eax
sub ebp, edi
mov edi, ebx
or edi, eax
add edi, ebp
mov ecx, eax
not ecx
or ecx, ebx
sub ecx, edi
and eax, ebx
lea ebp, [ecx + eax]
lea ebx, [ecx + eax]
add ebx, 1
mov eax, esi
not eax
mov ecx, ebx
and ecx, eax
mov edi, dword [esp + 0x74]
add ecx, edi
add ecx, 0x7b42141e
not ebp
add ebp, ecx
xor esi, ebx
not esi
add esi, ebp
or eax, ebx
sub esi, eax
mov ebx, dword [esp + 8]
lea edx, [ebx + edx*2]
lea ecx, [edx + edx]
add ecx, 2
lea eax, [esi - 0x29d7dccb]
lea edi, [esi + edx*2]
add edi, 0xd6282337
mov edx, eax
xor edx, ecx
not edx
add edx, edi
mov edi, ecx
not edi
or edi, eax
sub edx, edi
add edx, esi
and eax, ecx
not eax
lea ecx, [edx + eax]
add eax, edx
add eax, 0xd6282336
add ecx, ecx
add ecx, 0xac50466c
mov edx, ecx
or edx, 0xac50466a
sub ecx, edx
xor eax, 0xd6282335
add eax, ecx
mov edx, dword [esp + 0x18]
and edx, ebx
lea ecx, [eax + edx*2]
lea eax, [eax + edx*2]
add eax, 0x266d08c6
mov edx, eax
or edx, 0xd992f73c
add edx, ecx
mov ecx, eax
xor ecx, 0x266d08c3
add ecx, edx
or eax, 0x266d08c3
sub ecx, eax
add ecx, 0x266d08c6
imul eax, ecx, 0x87b79cc5
imul ecx, ecx, 0xf090c676
mov edx, eax
or edx, 0xe185890b
add edx, ecx
or eax, 0x1e7a76f4
add eax, edx
imul eax, eax, 0x17227df3
mov ecx, 0x7394d28
sub ecx, eax
or ecx, 0x76217471
lea ecx, [ecx + eax*2]
add ecx, 0xf18d65ae
add eax, 0xf8c6b2d7
not eax
or eax, 0x89de8b8e
add eax, ecx
add eax, 0x76217473
mov ecx, eax
xor ecx, 0xa83a56ab
and eax, 0x283a56ab
lea eax, [ecx + eax*2]
mov dword [esp + 0x5c], eax
mov eax, dword [esp + 0x50]
mov eax, dword [eax]
mov dword [esp + 0x10], eax
mov eax, dword [esp + 0x10]
cmp eax, 0x10
mov eax, 0x93ab54b
mov ecx, 0x84d3e272
cmovae eax, ecx
mov ecx, 0xeb771c32
jmp 0x1003a2a0
mov eax, dword [eax]
sub esp, 0x1c
movaps xmm0, xmmword [0x1006c960]
movups xmmword [esp + 4], xmm0
mov dword [esp], eax
mov dword [esp + 0x18], 0
mov dword [esp + 0x14], 0x80
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov dword [esp + 0x24], eax
cmp eax, 0xffffffff
mov eax, 0x972ad563
mov ecx, 0x824ed201
jmp 0x1003a289
cmp ecx, 0xab1548a5
jne 0x1003a2a0
jmp 0x1003b2d6
cmp ecx, 0x6e2a69fe
jne 0x1003a2a0
call fcn.1005f11d
mov ecx, dword [esp + 0x98]
xor ecx, esp
call fcn.1005d66a
add esp, 0x9c
pop esi
pop edi
pop ebx
pop ebp
ret