Function at 0x100c0251
Capabilities:
Encode data using xor

Disassembly:
push ebp
pushfd
test byte [0x100c0126], 0xfe
jne 0x100c0127
test al, 0xc5
or eax, 0xb1e47ec1
dec edi
in al, dx
pop es
mov cl, 0x2f
add dword [edx + 0x7756fcc7], 0x7f50710d
mov dword [0x6abf0e12], eax
pop esp
pop esi
mov bh, 0x4b
jg 0x100c011c
ja 0x100c0137
adc ebx, dword [ecx]
insd dword es:[edi], dx
adc ebp, dword [ebx + 0x4c02bfcf]
push ds
mov edi, 0x1e664c02
bound edx, qword [edi - 9]
jnp 0x100c00f1
cwde
popfd
mov ebp, esp
pushfd
test byte [0x100c0150], 0xb7
jne 0x100c0251
add byte [eax], al
add byte [ebx - 0x13], dl
push ebx
in eax, dx
out dx, eax
push ebx
cmpsb byte [esi], byte es:[edi]
pop ds
mov ebp, dword [edx - 0x74]
popal
cwde
insd dword es:[edi], dx
sahf
sal byte [ebx - 0x48c8b383], cl
pushfd
js 0x100c019a
nop
pop ss
sub cl, bl
xlatb
adc ebp, dword [ebx + 0x77]
dec ebx
mov ds, word [edx - 0x68]
or eax, 0xd2734bd2
sar dword [edx - 0xbb32541], 1
arpl word [ebp + 0x33e44ac4], di
xchg esi, eax
jg 0x100c0136
pop es
add edi, dword [eax + ecx*4 - 0x46]
nop dword [esi - 0x2f731591]
fdivr st(3)
sbb eax, 0x8cea6fa6
rcr al, 1
sti
adc byte [ecx], 0xcd
pop ss
pop ebx
jo 0x100c0174
adc al, 0xa
mov dword [esi + 0xf130441], ebp
push edx
cmp byte [edx - 0x4d], ch
adc byte [ebx - 0x3159ff1a], ch
mov bl, 0xd1
push es
clc
arpl word [edx + 0x2db53b40], di
mov edx, 0x2db53b40
stosd dword es:[edi], eax
jge 0x100c021f
daa
push eax
out 0x2b, al
sahf
sbb al, bh
mov bh, byte [edi - 0xe]
pop esp
and dword [eax], 0xcb3953a0
cld
xchg esp, eax
push ds
fidivr dword [esi - 0xd]
fimul word [ebx + 0x38]
push ds
pop ebp
test al, 0x76
jo 0x100c01a4
test dword [edx - 0x24], edi
fldcw word [ebp + 0x6c517052]
push edx
jo 0x100c021b
insb byte es:[edi], dx
in eax, 0x7d
or ch, byte [ecx]
in al, 0xa7
out 0x9a, al
sub bl, byte [eax]
add bl, byte [edx - 0x61]
pop esp
mov dh, 0x6a
salc
cmc
mov dl, 0x57
pop ebx
jne 0x100c0165
sub al, 0x86
inc esp
push ecx
jno 0x100c022b
sbb eax, 0xe7301517
shr edx, 1
mov ch, byte [edi]
jne 0x100c020a
mov esi, 0x3a75f22c
cmp edx, dword [eax + 0x7f05f756]
into
sbb ch, byte [eax]
pop ss
stc
xchg esp, eax
and eax, 0x95713320
dec ebp
test byte cs:[ebx - 0x59], 0x19
xchg edi, eax
out 0x57, al
jne 0x100c01e2
adc eax, 0x87cdfa36
mov dword [0xbbb1cf95], eax
iretd
test dword [edx], 0xea7324da
insd dword es:[edi], dx
add bl, dl
and al, 0x73
ljmp 0x5118
fistp word [edi]
neg dword [eax]
push ecx
imul eax, dword [ebx + 0x59], 0x19ee7858
jnp 0x100c026a
inc ebx
pop ecx
pop eax
js 0x100c021e
sbb dword [ebx + 0x37], edi
loopne 0x100c0225
add dword [ecx + 0x70], esi
jae 0x100c01c7
stosb byte es:[edi], al
lds edx, [edx + 0x5cb1167]
mov gs, word [edi - 0x4d]
push 0x4c
not byte [edi]
dec ecx
arpl word [esi - 3], bp
rcr esi, 1
sub byte [ebx], 0x89
popfd
sub esp, 0x6c
mov eax, dword [0x10170c30]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
xor ebx, ebx
push esi
push edi
cmp dword [0x10172220], ebx
jle 0x100c0645
mov esi, dword [sym.imp.KERNEL32.dll_OpenEventA]
push str.wuauserv_mux
pushfd
test byte [0x100c029f], 0x10
je 0x100c03a0
mov bl, 0x76
int3
sbb eax, 0xe8f00d66
inc ecx
rol byte [ebp + 0x1e], 0x97
add byte [edx + 0x517dc8d3], al
xchg esi, eax
das
js 0x100c0322
fisubr dword [edi + 0x10]
mov dword [0x7c5a1fee], eax
cmp ebp, dword [ecx + 0x7d]
pop edx
mov esp, 0xe75cabe
fsubr dword [edx - 0x3661b825]
mov esi, 0xd80e75ca
stosb byte es:[edi], al
fild dword [edi - 0x62]
leave
push 0xffffffffffffffbe
push ebx
in al, 0xff
cdq
out dx, al
jle 0x100c029b
cmp ah, ah
push edx
cmp eax, 0xcc9cfa30
pop ds
lodsb al, byte [esi]
and cl, 0xe6
lahf
cdq
pop ds
sal ch, 0x6d
cmc
insd dword es:[edi], dx
jns 0x100c02bc
in al, 0xa5
sbb dh, byte [edx - 0x19]
or byte [eax], 0xd1
enter 0x5b0e, 0x5d
mov eax, 0xe939bf72
add al, 0x42
sbb esi, dword [edi]
test byte [esi], 0x2d
xor edx, edx
in al, 0x98
fidivr dword [esi + 0x56]
mov dl, 0xae
cmpsd dword [esi], dword es:[edi]
fisub word [esi - 0x7eb9d393]
stosb byte es:[edi], al
insb byte es:[edi], dx
cmp byte [eax + 0x1f], dl
push 0x7ffe9878
xor ebx, edi
xor edx, eax
loop 0x100c032d
xchg dword [esi + edx*4 - 0x1473f576], eax
pop ebx
jle 0x100c038c
jmp 0x100c037f
outsb dx, byte [esi]
lodsb al, byte [esi]
fidiv word [ebp - 7]
imul ecx, ebp, 0x7c3477a7
push es
cmpsd dword [esi], dword es:[edi]
ja 0x100c0364
jl 0x100c0338
pop es
out dx, al
mov esp, 0x48b40c7c
dec eax
cwde
adc cl, al
ja 0x100c03bb
inc ebp
sub edi, dword [edx - 0x4bac0990]
pop esi
jo 0x100c033a
push ebx
mov ah, 0x5e
dec esp
or esi, dword [esi]
mov byte [eax - 0x7c69e7d2], ah
fdivp st(5)
jo 0x100c02e0
pop ebp
xor eax, 0xd2301904
sub al, 0x2b
push edx
adc dh, byte [esi + 0x4394c72a]
int 0x2f
js 0x100c02f9
loop 0x100c035d
jecxz 0x100c03ba
imul ebp, dword [eax - 0x911f82a], 0x3b
mov edx, 0xf31b0ff1
test eax, 0xb532b2f
das
sub edx, dword [ebx + 0xb]
push ss
dec edi
or al, 0x56
dec ebx
mov esp, gs
xchg esi, eax
pop edx
xchg ecx, eax
stosd dword es:[edi], eax
pushal
bound ebp, qword [edi + ebp*4 - 0x6bbe2954]
lodsb al, byte [esi]
salc
inc ecx
xchg esp, eax
rcl dword [edi], 0x94
adc edi, esi
pop esp
jecxz 0x100c0379
and ch, bl
xchg ebp, eax
rcl byte [eax - 0x68], 0x5d
outsb dx, byte [esi]
popfd
push ebx
push 0x100002
pushfd
test byte [0x100c0463], 0xbf
jne 0x100c0464
scasd eax, dword es:[edi]
add byte [eax], al
add byte [ebx], al
loop 0x100c0342
add esp, edx
mov ch, bl
neg dword [ebp + 0x23]
sbb dword [ebp + 0x118bfd8b], ebx
jmp 0x100c03b1
pop ebp
and ebx, dword [ecx]
popfd
mov edi, ebp
mov edx, dword [ecx]
sub bl, al
cdq
cwde
push esp
nop
clc
clc
pop esi
out dx, al
inc ebx
dec eax
add edx, dword [edi - 1]
xchg ecx, eax
xchg edi, eax
and bl, bh
div dword [ebx - 0x5b31302]
sub al, 0x81
mov dl, 0xdd
loop 0x100c042f
jne 0x100c0427
sti
cmpsb byte [esi], byte es:[edi]
pop edx
shl dword [esi], 0xec
and eax, 0x37795674
push ebp
cmp esp, dword [edi + 0xb]
push 0x2e
stosd dword es:[edi], eax
xchg edx, eax
stosd dword es:[edi], eax
scasb al, byte es:[edi]
or byte [ebp - 0x3e], cl
and ecx, 0xeefc92c4
xchg ecx, eax
inc edi
and byte [ebx], dl
pop ss
and bh, ch
pop edi
pop esp
imul ecx, dword [edi], 0xfffffff3
fisub dword [edx]
fcmovnbe st(0), st(5)
pop dword [ebx + edx + 0x6363ec9]
sahf
loopne 0x100c03b5
daa
or cl, bh
jb 0x100c03b2
pop edi
aad 0x59
in eax, 0xe2
stc
sar ch, cl
sbb al, byte [esi - 0x3b779248]
inc ebp
and al, byte [eax + 0x36]
out dx, al
loop 0x100c049b
inc ecx
loopne 0x100c03c7
mov esi, ecx
add byte [esi + 0x67], al
fabs
aad 0x2b
xchg byte [edi - 0x430249db], ch
dec ebp
sahf
push eax
inc ebx
xor dword [ecx - 0x3bc0aa93], eax
rcl ah, 0x37
mov ecx, 0x2aae8bc1
xchg edi, eax
mov bh, 0xda
xchg esp, eax
in eax, dx
sahf
pop esp
jnp 0x100c04c0
popfd
call esi
push str.wuauserv_cont
push ebx
pushfd
test byte [0x100c050a], 0xd9
jne 0x100c050b
adc byte [esi + 0x13dfd3e5], ah
out dx, al
jbe 0x100c040e
push ebx
int1
add byte [ebp + 0x2e], ch
stosd dword es:[edi], eax
xor ebp, edi
mov eax, dword [0xf1a11c38]
dec ebp
or cx, word [edi - 0x38ea377f]
add dword [ecx + 0x58], edi
pop eax
mov edx, 0xc5c39570
out dx, al
add eax, 0x4d75d03e
dec ebp
dec ecx
test al, 0xac
xor esi, edi
xor eax, 0xcfc81187
or eax, 0x31320ad5
jecxz 0x100c0504
inc esp
and ch, byte [ebp - 5]
fdivr st(2), st(0)
adc dword [eax + 0xa30c305], ecx
and edi, edx
mov eax, fs
add eax, 0x210a30c3
xlatb
mov dword [0x1ed312d1], eax
pop ds
cmpsd dword [esi], dword es:[edi]
adc ecx, edx
inc esi
pushal
sbb dh, bh
inc edi
ror al, 1
push es
aam 0x39
cmp dword [ebx], ebp
xchg esi, eax
sub byte [ebx - 0x28], cl
or ebx, esp
mov byte [ebx + 0x1f8cb880], dl
xchg esp, eax
je 0x100c04e5
xchg ebx, eax
cmp byte [eax + 0x74941f8c], 0xf8
ja 0x100c04a6
inc ebp
push es
mov ss, word [edx]
adc edx, dword [edx + 0x3491550a]
imul esi, dword [ebp - 0x3e823657], 0xffffffab
in al, 2
stosb byte es:[edi], al
xchg byte [ecx - 0x3e655b11], bh
mov ecx, 0xc19aa4ef
xchg edi, eax
pop es
popfd
mov edi, 0x1f0003
push edi
mov dword [0x10172dd8], eax
call esi
pushfd
test byte [0x100c057f], 0xfb
jne 0x100c0580
int 0xbd
mov ah, ah
mov eax, 0xd837e9a4
imul ecx, dword [edx - 0x61], 0x72ffe631
int3
popfd
push str.hynode_exit
push ebx
push edi
fmul dword [ecx + 0x57531014]
mov dword [0x10172ddc], eax
call esi
mov dword [0x10172de0], eax
cmp dword [0x10172dd8], ebx
je 0x100c0645
xor eax, eax
pushfd
test byte [0x100c063d], 0x3c
jne 0x100c063e
leave
movsd dword es:[edi], dword [esi]
cmp byte es:[eax - 0x3526c1], ah
pop ds
int1
pop esi
out 0x1e, eax
stc
cmp byte [eax + 0x204b6f62], ah
jecxz 0x100c062d
push ds
sal byte [esi - 0x56e7c4de], 1
pop esi
and byte [ebx], ah
inc ebp
cmc
imul edi, eax, 0xe064c190
cmpsd dword [esi], dword es:[edi]
loopne 0x100c0582
or ah, byte [eax + 0x27bd3711]
inc esp
jg 0x100c064a
mov ebp, 0x667f4427
cli
jecxz 0x100c05d9
push es
out 0x99, eax
test al, 0x19
test dword [ebx + 0x2fea239b], 0x8ecfe216
in eax, dx
jb 0x100c061f
stc
sbb eax, 0x6ea9678c
cmp dword [edx], ebx
mov dword [edi], esp
insb byte es:[edi], dx
out dx, al
je 0x100c05e8
sbb eax, 0xc311c8f3
lds edx, [edx]
jle 0x100c05df
mov edx, 0x80529c1d
and eax, 0xb4a4ebce
dec ecx
test eax, 0x325fd64a
in al, 0x39
pop esp
int1
sub al, 0x95
pop edi
xor ah, ah
cmp dword [ecx + esi*8 + 0x2c], ebx
xchg ebp, eax
inc edi
in al, 0x48
jo 0x100c0694
xchg esi, eax
and ebx, dword [0x854de1f1]
cld
out dx, eax
xchg byte [ecx - 0xf], ah
jb 0x100c067d
lsl esi, word [eax + edx*8]
popfd
inc eax
jmp 0x100c17c9
lea eax, [ebp - 0x38]
push str.wuauserv_mux
enter 0xffffffffffffcc68, 0xffffffffffffff88
adc al, 0x10
mov byte [eax + edx], dl
push eax
call fcn.1011f120
pop ecx
pushfd
test byte [0x100c0706], 0x9b
or al, 0x10
wait
jne 0x100c0707
scasd eax, dword es:[edi]
stosd dword es:[edi], eax
mov al, 0xce
cmp al, 0xfc
bound ecx, qword [ecx - 0x11340027]
push 0xd
outsb dx, byte [esi]
scasb al, byte es:[edi]
stosd dword es:[edi], eax
fadd qword [eax]
mov ebp, 0x88e8b6a6
pop esp
mov esp, 0xeb9041c4
lds ebp, [0xfa12d1cb]
jle 0x100c06c3
les eax, [ecx - 0x70]
jmp 0x100c0647
inc esi
dec ecx
xlatb
sbb ebx, dword [ebp - 0x351042d7]
cmc
xchg ebp, eax
sbb ecx, dword [esi - 0x5077ac08]
mov eax, dword [0x80e26652]
adc cl, bh
scasd eax, dword es:[edi]
and byte [edx + ebp], cl
mov ax, bp
cwde
cmc
jnp 0x100c0659
push edx
sub ah, dh
mov gs, word [ebx]
fcom qword [ebx]
lds ebx, [ebp + 0x2d]
xchg edi, eax
push esp
out dx, al
xchg esi, eax
mov al, byte [0xbbbeda15]
xchg dword [edi + 0x3b095918], edx
or dword [ebx], edi
dec eax
jns 0x100c065c
ja 0x100c06df
mov esp, 0x5556ddde
xchg ebx, eax
sub dword [ebp - 0x4e], edx
test eax, 0x4a8fcdf7
sub eax, 0xfdeab982
jbe 0x100c06ca
sbb al, 0xb7
cmpsb byte [esi], byte es:[edi]
and al, 0xee
fist dword [esi - 0x2d]
outsb dx, byte [esi]
adc al, 0xcb
sbb eax, 0x5ae5c961
and bh, cl
or dword [ebp + edx + 0x7a], esi
fstp qword [ebp - 0x11]
aas
cdq
insd dword es:[edi], dx
or byte [ebp - 0x14], ah
outsb dx, byte [esi]
dec esp
sub dl, byte [eax - 0x133a9ec0]
pop esi
popfd
pop ecx
lea eax, [ebp - 0x48]
pushfd
test byte [0x100c071c], 0xc
jne 0x100c071d
jbe 0x100c0797
sti
cmp bl, bh
push ss
popfd
push eax
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
xor esi, esi
inc esi
push esi
lea eax, [ebp - 0x40]
push eax
mov dword [ebp - 0x48], ebx
mov dword [ebp - 0x4c], ebx
mov dword [ebp - 0x44], ebx
mov dword [ebp - 0x40], ebx
mov word [ebp - 0x3c], 0x100
call dword [sym.imp.ADVAPI32.dll_AllocateAndInitializeSid]
test eax, eax
jne 0x100c07ac
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
pushfd
test byte [0x100c07a0], 0x5b
jne 0x100c07a1
cmc
push cs
cmp ebp, ebx
fst dword [edx + 0x57]
add byte [edx + 0x10ec1e27], al
cmpsb byte [esi], byte es:[edi]
jno 0x100c0741
jbe 0x100c06f5
cmp esi, dword [ebp + 0xd]
pop edx
out 2, al
push 0xffffffffffffffe6
out dx, eax
mov ebx, 0xcc01b404
push ebx
mov al, byte [0xbd307db8]
dec ebx
cwde
xorps xmm7, xmmword [ecx - 0x6e22a75]
jo 0x100c07c8
cwde
add ch, byte [ebp + 0xe]
adc dh, byte [ebp + 0x13f44bdb]
pop es
shr dword [ebx + 0x4a], cl
into
jl 0x100c07eb
mov esi, dword [ebx - 0x5b]
popfd
push str.AllocateAndInitializeSid_Error__u_n
jmp 0x100c1756
push 0x20
lea eax, [ebp - 0x6c]
pushfd
test byte [0x100c0801], 0x8e
jne 0x100c0902
aas
mov ch, 0x25
in al, dx
movsb byte es:[edi], byte [esi]
pop ss
inc ecx
mov esi, 0xa721d763
xchg esp, eax
cmp eax, 0x46a9e2f7
dec esi
imul edx, dword [ecx + 0x2ead5044], 0xffffffc0
sub byte [edx + 0x47], cl
xlatb
and dword [edi - 0x1d08c26c], esp
test eax, 0x6bceff46
xchg ecx, eax
inc esp
push eax
lodsd eax, dword [esi]
shr byte cs:[eax], 0x4a
inc edi
xor ebp, dword [edi - 0x7024b184]
jge 0x100c0856
mov eax, dword [0x5cf9c3dc]
inc edx
ror dword [edx - 0xb8b6b3b], cl
aam 0x43
not al
clc
mov al, 0x8f
pop edx
das
mov ebx, ebx
sbb byte [ebx + 1], bl
mov ch, 0x74
xchg ebp, eax
sbb byte [ebx - 0x2b], bl
and ch, bh
pop ebx
add dword [ebp + 0x5b189574], esi
aad 0x22
out dx, eax
inc edi
mov byte [eax - 0x68b0d9fd], ch
add dh, dl
jae 0x100c07fe
sahf
dec edi
aad 0x63
scasb al, byte es:[edi]
out dx, eax
mov edx, 0x7a5442d8
ror dword [edx - 0x719a63b0], 0x4a
aas
and eax, 0xa45bbdf8
mov ah, 0xba
cmp eax, 0x9a3351dd
dec esi
test eax, 0xb51dd124
dec ecx
jl 0x100c0867
push esp
or al, 0xd0
jae 0x100c0805
leave
pushfd
push cs
fadd st(4), st(0)
adc eax, 0xcc3e41c1
xor dl, byte [ebx]
and al, 5
sbb dword [ecx - 0x43], ebx
fisttp dword [esi + 0x1b]
out 0x3d, al
adc ecx, ebx
movsb byte es:[edi], byte [esi]
adc ebx, dword [eax - 0x392d9656]
shl dl, cl
mov esp, 0x3c52b41b
cli
push edi
cmp edx, esp
pop edi
adc eax, 0x42750c8e
or bl, cl
adc dword [ebx - 0x20feef63], ebx
ja 0x100c0880
wait
popfd
adc byte [ecx], al
fbstp tbyte [edi + 5]
lodsb al, byte [esi]
stosd dword es:[edi], eax
dec ebx
mov ch, 0x9b
test eax, 0xc26cac44
and dword [eax - 0x4b], edx
out dx, eax
dec esp
sub dword [ebp + 0x5b], ebx
xchg esp, eax
jle 0x100c087e
shl dword [ebx + 0x2dc4d675], 0xed
mov cl, 0xb1
je 0x100c0874
test dword [ecx - 0x325f8993], 0xf7604ad5
sub al, 0x7a
adc byte [edx], 0x8f
movsb byte es:[edi], byte [esi]
imul esp, dword [edi], 0x19
mov esi, 0x7a3f58bc
fsub st(4), st(0)
clc
inc ecx
mov ch, 0x29
out 0xfb, al
mov cl, 0xd3
fcom qword [esp + ebp*4 + 0x5c]
push ss
inc esp
popal
mov al, 5
mov ebx, 0x542bb6d5
inc ecx
add eax, 0xa5306139
mov ch, ah
push esp
xor edi, dword [ebx]
scasd eax, dword es:[edi]
xor esi, dword [edx + esi*8]
setne byte [edx*8 + 0x4da02857]
jb 0x100c0915
push edi
sub byte [eax + 0x2d72644d], ah
mov al, 0x15
sbb esp, dword [eax - 0x2b]
sbb byte [esi + esi*2], 0x4a
int3
popfd
push ebx
push eax
call fcn.1011df60
add esp, 0xc
push 2
pop eax
mov dword [ebp - 0x68], eax
mov dword [ebp - 0x54], eax
lodsb al, byte [esi]
mov eax, dword [ebp - 0x48]
mov dword [ebp - 0x50], eax
lea eax, [ebp - 0x4c]
push eax
push ebx
pushfd
test byte [0x100c09ec], 0xea
jne 0x100c09ed
and ecx, dword [ebp + 0x6dcbbcd9]
aas
xchg esi, eax
and byte [ecx + 0x4faf407c], dh
fmulp st(4)
idiv byte [ebp - 0x26]
out dx, al
pop esi
outsd dx, dword [esi]
pop edx
inc esi
sbb bh, byte [edx]
int 0x40
dec esi
sti
pop edi
adc dh, dh
div dword [esi + 0x79]
mov eax, dword [0x9e83a385]
pop ebp
jb 0x100c08e1
int3
popfd
lea eax, [ebp - 0x6c]
push eax
push esi
mov dword [ebp - 0x6c], 0xf003f
mov dword [ebp - 0x64], ebx
mov dword [ebp - 0x58], ebx
call dword [sym.imp.ADVAPI32.dll_SetEntriesInAclA]
pushfd
test byte [0x100c0aa7], 0x56
je 0x100c0aa8
stosb byte es:[edi], al
mov ebp, 0x45602d3f
pushal
mov ah, 0x7b
into
inc esi
inc edx
mov bh, 0xc
inc ebx
out dx, eax
stosd dword es:[edi], eax
dec esi
mov ah, 0x42
mov bh, 0x8b
push cs
sub byte [ecx + 0x7756b283], cl
or bl, al
jl 0x100c0a97
inc eax
pop edi
mov eax, 0x6824e6d9
imul edx, dword [edi - 0x1d10a758], 0x7786c4d8
call 0xaf167e14
in eax, dx
cmpsd dword [esi], dword es:[edi]
or esp, dword [esi - 0x58062e8c]
and dl, ch
dec esp
lahf
jns 0x100c0a63
push ds
mov esi, dword [eax]
in al, dx
inc ebx
or eax, dword [edi - 7]
mov bl, bl
xor al, 0xca
mov dword [0x1893a344], eax
dec eax
stosd dword es:[edi], eax
imul eax, dword [esi], 0x6c507b9a
adc dl, bh
fistp qword [ebx + 0x38]
add al, 0xa3
pop edi
fucompp
sbb dword [esi - 0x685aae22], ebx
imul ebx, ecx, 0x7c
fnstcw word [eax + edi + 0x5c]
inc esp
inc ebp
cmp byte [esp + eax*2 + 0x45], bl
push ebx
loop 0x100c0a4c
jl 0x100c0a85
jecxz 0x100c0a85
mov eax, 0x20e3a9e2
stosb byte es:[edi], al
jo 0x100c0a83
jmp 0x100c0acf
out 0x69, eax
cld
push edi
imul ebp, dword [ebp - 0x46c8160c], 0x3d165a
popfd
mov edi, dword [sym.imp.KERNEL32.dll_GetLastError]
adc al, 0x10
test eax, eax
je 0x100c0dab
add byte [esi + esi*8 + 0xc0b8305], bl
adc cl, ch
pushfd
test byte [0x100c0b83], 0xe9
jne 0x100c0b84
mov eax, dword [ecx - 0x11cd1728]
loopne 0x100c0ab6
push ss
test byte [esp + edx*8], dl
xchg edi, eax
out dx, eax
dec esp
and al, 0x8c
scasd eax, dword es:[edi]
jecxz 0x100c0add
test al, 0x56
and al, 0x44
inc esp
cdq
pop edx
js 0x100c0b3b
add bh, dh
nop
and dword [ebx + 0x78], 0x5caab3ce
idiv dword [edi]
je 0x100c0b07
ja 0x100c0ad5
mov al, byte [0x2d877794]
mov ebp, 0xd005a2f8
dec edx
fnstenv [edx + 0x6b644087]
adc ch, byte [edi + ecx*8]
aam 0xc8
iretd
aam 0xc8
pop esp
dec edx
jecxz 0x100c0aad
not cl
mov word [ecx + 0x4d732eef], fs
pop ss
inc ebp
cmpsb byte [esi], byte es:[edi]
or ah, al
xlatb
in eax, 0x64
scasd eax, dword es:[edi]
aam 0x97
mov dword [eax], ecx
loop 0x100c0b05
aad 0x7e
inc ebx
inc edi
loop 0x100c0ad4
or ebp, dword [esi + 0x25]
loopne 0x100c0b7a
dec ebx
inc esi
inc esp
pop eax
mov dl, 0x48
or ch, dl
cmp eax, 0x97d1acd9
mov al, 0xea
cdq
rcl dword [edi - 0x18661550]
push ebx
out 0x53, eax
mov eax, 0xb498de47
push ecx
shl byte [ebx + 0x66], 1
jbe 0x100c0b40
sub cl, bl
or dword [ebx], esp
lodsb al, byte [esi]
ficomp dword [eax - 0x21]
mov byte [ebp + 0x70d40734], dl
add byte [ecx + 0x63], dl
add eax, 0x3f052be9
pop ss
dec eax
mov bl, 0xc2
sub eax, dword [0x6648173f]
mov bl, 0xc2
ret 0x7840
inc eax
js 0x100c0b6d
mov eax, dword [0xfb27db6a]
add bl, dh
sal dword [esi + edx], 0xfa
out 0x5a, eax
loopne 0x100c0b67
invalid
std
jne 0x100c0b60
cmc
stosb byte es:[edi], al
dec edi
cli
cmpsd dword [esi], dword es:[edi]
popfd
call edi
pushfd
test byte [0x100c0c6b], 0x34
jne 0x100c0c6c
add byte [eax], al
add bh, bl
pop eax
adc ebx, dword [esi + 0x7625c591]
xor al, 0x98
pop ebp
fistp word [eax + 0x13]
sahf
xchg ecx, eax
lds esp, [0x5d983476]
popfd
sal eax, 1
sub dh, dh
and byte [ecx - 0x379854f7], ah
push eax
lodsb al, byte [esi]
lea ebx, [ebp - 0x2d]
jno 0x100c0b92
xor byte [esi + edi - 0x12], cl
arpl word [ebx + 0x29], si
add byte [edx + 0x7f], 0x62
pushfd
not dl
mov al, byte [0x291a1ea9]
push ebx
xchg edi, eax
sbb dl, byte [edi - 0x3b681281]
rol byte gs:[eax + 0x44], 1
add eax, 0x7d1d08bb
mov edi, 0xe60ba36f
sbb ebx, dword [eax - 0x73]
mov bl, 0xf9
mov dword [0x19533bff], eax
salc
out 0x1b, al
pop eax
lea esi, [ebx + 0x3bffa3f9]
push ebx
sbb esi, edx
shl dword [ebp + edx*4 + 0x4ae1443c], 0x8f
or al, byte [ebx]
pop esp
sal ebx, cl
popal
daa
cld
test al, 7
jg 0x100c0bda
inc esp
loope 0x100c0c37
invalid
aaa
jnp 0x100c0c29
nop
out 9, al
pop ds
fnstenv [ebx]
outsd dx, dword [esi]
adc dh, byte [edi + edi*8 - 0x1a4a3603]
xchg ecx, eax
sbb ecx, dword [esi + 0x74]
test al, 0x8c
xlatb
cmp eax, 0xb535666a
mov esp, 0x546bdebf
cmpsd dword [esi], dword es:[edi]
xchg ebp, eax
stc
movsb byte es:[edi], byte [esi]
in al, dx
ficomp dword [edi - 0x1cc32acb]
and byte [eax], dh
or al, 0x63
mov ebp, 0x55427648
aad 0xf3
inc edx
test byte [esi], ch
or bh, dl
or bh, dl
sub dword [ecx], ebp
inc edi
xchg ebx, ecx
ror dword [esi - 0xe057272], 0x50
mov ah, 0x90
inc ebp
fcmovnbe st(0), st(4)
sbb ecx, dword [eax + 0x7f]
xchg ebx, eax
mov eax, dword [0xe5be49a2]
jge 0x100c0bea
adc al, 0x2d
fnstenv ss:[esi]
out 0xb7, eax
salc
or al, byte [ecx]
pop esp
pop esp
jb 0x100c0cdc
fnclex
std
insd dword es:[edi], dx
pop ds
sahf
sbb ecx, dword [edx - 0x5e]
popfd
push eax
push str.SetEntriesInAcl_Error__u_n
pushfd
test byte [0x100c0ca4], 0xaf
jne 0x100c0da5
jns 0x100c0c34
cmc
cmp ebx, 0xffffffb8
push esp
inc ecx
mov ch, 1
shr dword [esi + 0x4e50b007], cl
mov al, 0xc1
jbe 0x100c0c9e
or byte [edi + edi*4 + 0x7ff7245b], 0x37
dec esp
jecxz 0x100c0cda
pop ebx
sbb eax, 0x6f4e1296
push es
push esp
jo 0x100c0d0f
mov ebx, 0x25382509
adc bh, dh
fsub st(0)
and edi, dword [edx - 0x27]
or dh, byte [esi - 0x6a96c2]
inc esp
mov esi, 0xc9a02765
cmpsd dword [esi], dword es:[edi]
pop sp
ficomp word [eax - 0x42]
mov bh, 0xc9
imul edx, dword [ebx], 0xffffffa4
xchg ebp, eax
push ss
shl byte [edi + 0x2dc1707d], cl
ja 0x100c0d46
outsd dx, dword [esi]
mov ch, 0x36
adc al, 0xb0
adc al, 0xb0
mov al, 0xb5
cld
mov ch, 0xfc
cmp esp, dword [edx]
cmp ch, bl
pop edi
stosd dword es:[edi], eax
std
and al, al
pop eax
cmp byte [edi + 0xc], al
test dh, ch
sbb al, 0x54
cmpsb byte [esi], byte es:[edi]
sub bl, byte [ecx - 0x56]
std
aad 0xca
pop ebx
cwde
invalid
scasd eax, dword es:[edi]
fstp dword [0x5b1a998d]
aaa
pop ss
xor eax, 0x6947cfdb
cmc
cmpsd dword [esi], dword es:[edi]
sbb edi, dword [esi - 0x3d9245da]
lds eax, [esi + 0x5b]
adc al, byte [ecx - 0xf]
mov cl, 0xed
pop es
imul esi, esp, 0xffffff81
sub dword [ecx + 0x76ff4284], ebx
pop edx
add al, 0xaa
test dword [ebx], eax
xor byte [esi - 0x73773dac], ah
ror byte [ecx + 0x2f], cl
sbb dword [esi], 0x6342cc8b
jnp 0x100c0d7c
lodsd eax, dword [esi]
insd dword es:[edi], dx
out dx, eax
push eax
sbb al, 0x64
mov ch, 0xa4
xchg ebx, eax
add dh, byte [esi + 0x172dfc5c]
push 0xe72c727f
clc
sub eax, 0xc5f29744
jne 0x100c0cf9
test eax, 0x2c2a0c12
sbb al, 0x52
mul byte [ecx + 0x368c952a]
jno 0x100c0da0
xor al, 0x34
stosb byte es:[edi], al
sbb al, 0x38
jne 0x100c0ddb
xor byte [ecx], ah
and ch, bh
movsb byte es:[edi], byte [esi]
push 0xffffffffffffffa7
inc ebx
cmp al, byte [ebx + 0x15]
pop edx
or byte [esi - 0x20], bl
mov al, byte [0x1e3a408b]
jl 0x100c0d2e
shr dword [ecx], 0xdf
and esp, ebp
push cs
outsd dx, dword [esi]
mov eax, dword [0x6231e5db]
cmpsb byte [esi], byte es:[edi]
xor dword [edx - 0x5a], esp
pop ecx
push ss
popfd
jmp 0x100c0eeb
push 0x14
push 0x40
call dword [sym.imp.KERNEL32.dll_LocalAlloc]
mov dword [ebp - 0x44], eax
pushfd
test byte [0x100c0dc9], 0x82
jne 0x100c0dca
or byte [ecx - 3], bh
jns 0x100c0dc1
mov dl, 0xa1
xchg esi, esp
dec ebp
push edi
popfd
cmp eax, ebx
jne 0x100c0ddc
call edi
push eax
push str.LocalAlloc_Error__u_n
jmp 0x100c0eeb
add byte [esi + 0x50], dl
push esi
push eax
call dword [sym.imp.ADVAPI32.dll_InitializeSecurityDescriptor]
test eax, eax
jne 0x100c0df5
call edi
push eax
push str.InitializeSecurityDescriptor_Error__u_n
jmp 0x100c0eeb
push ebx
push dword [ebp - 0x4c]
push esi
push dword [ebp - 0x44]
call dword [sym.imp.ADVAPI32.dll_SetSecurityDescriptorDacl]
pushfd
test byte [0x100c0e93], 0x54
jne 0x100c0e94
cmp dword [eax - 0x7d923412], esp
cmpsb byte [esi], byte es:[edi]
sbb eax, 0xe6c57159
cmp dh, byte ss:[eax + 0x6b]
insb byte es:[edi], dx
jecxz 0x100c0df9
jnp 0x100c0e5e
mov esp, 0xbb847339
inc edx
and al, 0xf1
cmp dh, byte [edi]
dec ecx
rol dword [esi], 0x88
salc
adc al, 5
mov dword [0xc446ee2c], ebp
imul edi, dword [ebp + 0x5067c081], 0x4fe6ffe4
cmp byte [ebx + 0x96d5513], bl
push cs
clc
stosd dword es:[edi], eax
push es
mov eax, 0x8d38f73d
mov dword [edx + 0x17], esi
mov cl, 0xf4
dec ebx
dec edi
and bl, byte [edx]
aaa
sbb dh, byte [edi]
sbb dword [ebx + 0xa], ebp
invalid
popfd
test eax, eax
pushfd
test byte [0x100c0edf], 0xc0
jne 0x100c0ee0
push es
push ds
mov byte ds:[esi + 0x2960152], bh
mov eax, dword [0xe8964df1]
jnp 0x100c0ee6
inc eax
lahf
xchg ebp, eax
js 0x100c0ef1
fcmovnb st(0), st(6)
inc edx
mov ch, 0x8a
push es
mov ebp, 0x3be992c5
insb byte es:[edi], dx
insb byte es:[edi], dx
and ch, byte [esi + 4]
popfd
mov eax, 0x9a0d33dd
mov eax, dword [0x28ab8e2]
outsb dx, byte [esi]
or edi, dword [esi + 0x11]
ficomp dword [ecx + 0x12c9939]
push ss
scasb al, byte es:[edi]
test al, 0xf8
popfd
jne 0x100c0ef5
call edi
push eax
push str.SetSecurityDescriptorDacl_Error__u_n
push ebx
push ebx
call fcn.10049c0c
add esp, 0x10
inc dword [ebx + 0x5d3910c4]
mov eax, 0x75ff0974
mov eax, 0x602015ff
adc al, 0x10
cmp dword [ebp - 0x48], ebx
je 0x100c0f03
push dword [ebp - 0x48]
call dword [sym.imp.ADVAPI32.dll_FreeSid]
mov esi, dword [sym.imp.KERNEL32.dll_LocalFree]
cmp dword [ebp - 0x4c], ebx
je 0x100c0f40
push dword [ebp - 0x4c]
call esi
pushfd
test byte [0x100c0f3e], 0x15
jne 0x100c0f3f
push esp
mov ebp, 0xc482a07d
nop
sub byte [edi], al
pop edi
mov esp, dword [edx + 8]
pop ds
fucomp st(1)
pushfd
jle 0x100c0f2e
js 0x100c0f8c
pop ecx
ja 0x100c0f32
inc ebx
sub al, 0x71
add bh, byte [edi + 0x16]
mov al, 0x72
cmp bl, ah
popfd
cmp dword [ebp - 0x44], ebx
je 0x100c0f4a
push dword [ebp - 0x44]
call esi
mov esi, dword [sym.imp.KERNEL32.dll_CreateEventA]
pushfd
test byte [0x100c0f6a], 0xea
adc dl, ch
jne 0x100c106b
mov edx, 0x30f7963b
or ebp, edx
ror ch, cl
leave
dec esp
ja 0x100c0fa8
push ebp
inc edi
sahf
add esp, dword [edi + 0x711ee813]
dec edi
sub ah, ah
inc ebx
pop ds
int3
std
pop es
jo 0x100c0f9d
xchg ebp, eax
into
add al, 0xc5
lea esp, [ebx + 0x6a645309]
sbb al, 0x39
into
in eax, 0x6f
pop ss
clc
jae 0x100c0f56
dec edi
mov ebp, 0x8625e0a6
dec esi
dec ebx
xchg byte [esi + 0x4b], cl
cmpsb byte [esi], byte es:[edi]
xchg ebp, eax
add esp, dword [edx - 0x79774990]
clc
xchg ecx, eax
add byte [esi], bh
sal byte [ebx - 0x25], 1
mov eax, 0xac54019c
imul dword [edi + ebp*4 + 0x36]
sbb dh, bh
daa
push ss
add al, 0x7f
jne 0x100c103f
mov edi, 0x390c3d0c
cmp byte [eax], ah
pushal
loopne 0x100c1048
or edx, edi
inc esi
push esi
test bh, 0x7b
sbb dl, byte [ecx]
sbb eax, 0x2256841b
enter 0xffffffffffff8833, 6
xchg ecx, eax
xchg ecx, eax
sbb esi, ebx
cmp eax, 0x4fd95570
out 0xa6, eax
fimul word [esi]
inc ebp
adc al, 0xe2
mov bh, 0x99
lodsd eax, dword [esi]
xchg ebp, eax
mov ah, 3
and eax, 0x434eb4
mov al, 0x29
or dword [ebx + 0x52], ebp
test eax, 0xac90a905
dec ebx
add eax, 0x4bac90a9
sub dword [edx + 0xa], ebp
jbe 0x100c1049
xor ebp, dword [eax]
add bh, dl
sti
ja 0x100c1080
jb 0x100c100a
out 0x61, al
mov al, byte [esi + 0xb]
add bh, byte [0x2f046dff]
mov dh, 0x62
imul ebx, dword [esi - 0x31defee3], 0x3e
insb byte es:[edi], dx
add byte [edx + 0x241928fa], ah
xchg ebx, eax
fcomp qword [eax + eax*2 + 0x74b9d40]
pop es
neg dword [ecx + eax]
int3
je 0x100c108b
inc ecx
and ecx, eax
push cs
push cs
clc
cmp byte [esi], bl
lahf
mov cl, 0xbe
sbb ebx, dword [0x93ceb917]
lodsb al, byte [esi]
cmc
xchg esi, eax
int3
popfd
cmp dword [0x10172dd8], ebx
jne 0x100c130d
lea eax, [ebp - 0x38]
pushfd
test byte [0x100c1086], 0xd7
or al, 0x10
xlatb
jne 0x100c1087
jns 0x100c1053
popfd
push eax
push ebx
push 1
pushfd
test byte [0x100c110e], 0x8e
jne 0x100c110f
add dword [esi + esi*8 + 0xc110e05], ebx
adc byte [esi - 0x2c2f868b], cl
rcl bl, 1
jbe 0x100c10db
cmp byte [edx + 9], dh
dec esp
mov edx, 0x114e225a
aaa
cdq
cdq
pop edi
pop ebp
shl dword [edx], 1
jae 0x100c10dd
and dh, byte [ebx + 0x31]
mov dl, 0xa5
loopne 0x100c10a9
jge 0x100c10b7
clc
sub byte [edx - 0x504ed3aa], bl
mov cl, 0xaf
lds esi, [esi]
dec sp
test eax, 0xd6f71e62
cmp al, byte [0x21fd208]
leave
jg 0x100c10e5
test eax, 0xce272e22
mov dl, 0x7c
sti
je 0x100c1144
in al, dx
pop edx
mov edi, 0x1bd5e8f
mov cl, 0x62
pop edx
mov dword [0x61654750], eax
add dword [ecx + 0x50a35a62], esi
bound ebx, qword [edx - 0x5d]
push eax
inc edi
popal
sub esi, dword [esi]
cli
cli
mov edx, 0x2eed8b43
add dword [edi], esp
cmp eax, 0x9a4b0e92
push eax
salc
arpl word [ebx], dx
pop ss
sub byte [ebp - 0x6d], ah
push ebx
jno 0x100c1145
add bl, byte [eax - 0x20]
out 2, eax
mov ch, 0x3a
packuswb mm7, mm5
cmpsd dword [esi], dword es:[edi]
jle 0x100c10ee
sub bh, dh
mov dl, 0x37
popfd
push ebx
call esi
pushfd
test byte [0x100c1141], 0xe6
jne 0x100c1242
push eax
out dx, al
in eax, dx
dec edi
pop edi
jae 0x100c112f
cld
imul ebx, dword [edx - 0x57fdf0ee], 0x46eab52c
mov bh, 0xd
mov ebx, 0x412fc92a
sub al, 0xb5
ljmp 0xc92a
or eax, 0x2fc92abb
inc ecx
cmp bl, byte [edx - 0x6a]
xor byte [esi + 0x34], bl
dec ebp
sub eax, 0x70d6258b
jge 0x100c1114
salc
jo 0x100c11c4
int3
jle 0x100c1197
cli
sbb byte [ecx + 0x202af24b], bh
popal
cdq
scasb al, byte es:[edi]
add al, 0xb4
jge 0x100c1134
pushfd
jno 0x100c1196
aam 0x72
xchg esi, eax
sbb eax, esi
or eax, 0xa1f6cedf
sbb al, 0xbf
and eax, dword [esi - 0x250313ea]
push edi
or al, 0x7b
mov dword [0xebbd4479], eax
and al, 0x4b
cmp ch, byte [edi + 0x177c7fdf]
dec ecx
dec edx
dec eax
add byte [edx + edi*4 + 0x4c], ch
xchg byte [ecx + 0x70], bl
pop ecx
fisubr dword [eax + 0x66f21da1]
jle 0x100c1129
js 0x100c11de
mov esp, dword [edi]
insb byte es:[edi], dx
or al, 0x7c
jl 0x100c118e
div byte [edx - 0x20ca39e2]
inc ebx
aad 0xe5
mov dl, 0x40
out dx, eax
movsb byte es:[edi], byte gs:[esi]
pop ss
aas
insd dword es:[edi], dx
stosb byte es:[edi], al
pop edi
adc esi, dword [edi + 8]
cmp byte [edx + 0x3ae7494d], cl
adc al, 0xce
imul esi, edi, 0xed5dbb6b
mul dword [ebp + 0x45dfe6eb]
xchg edx, eax
ror byte [ebx + ebx*2 - 0x449bc9cf], 0xc3
out 0x80, eax
mov dl, 0x1e
invalid
mov word [ebx + 0x31], ds
mov ebx, 0xdf80e7c3
test byte [esi + 0x62853179], dh
fild word [esi + esi*4 + 0x62853179]
enter 0x4d02, 4
cmc
enter 0x1c8a, 0xffffffffffffffe5
push ecx
dec eax
cmp byte [ebp + 0x7b4449eb], bh
fist word [edx - 0x44d45793]
and ebp, edx
push 0x9fb08b48
mov cl, 0xb8
mov ebx, 0xc2bd4f1f
cmp al, byte [0x14d4bba5]
jno 0x100c11cd
arpl word [esp + ebx*8 - 0x414a3712], di
salc
push edi
lahf
add edx, dword [ecx]
xchg esi, eax
inc eax
stosd dword es:[edi], eax
ficom word [ecx - 0x6e7ac6f7]
inc eax
cwde
xor ebp, ebp
xor dl, byte [ebp - 0x6ebaae28]
push ds
inc ebx
and ebx, ecx
add al, 0x9f
lahf
test eax, 0x7bb8fcfa
loop 0x100c1225
mov word [eax - 0x41], ds
loop 0x100c11de
jno 0x100c11eb
btr dword [esi - 0x1035863e], 0x2c
dec eax
xchg dword [ebx], edx
xlatb
mov cl, 0x5e
popfd
mov dword [0x10172dd8], eax
cmp eax, ebx
pushfd
test byte [0x100c1305], 0xd1
jne 0x100c1306
cli
lds ebp, [edi + 0x41]
sub dword [esi + 0x7af23d79], 0xc63e3b43
aam 0x83
sbb ecx, dword [ebp + 0x2927acc6]
dec edx
xor dword [ecx - 0x2ef2af00], ecx
add cl, byte [ebp - 0x61]
test eax, 0xd3359f82
add al, 0x98
pushfd
mov edx, 0x5b403d10
sbb al, 0x18
jge 0x100c12f5
bnd jp 0x100c12a6
cmp edi, dword [esi]
invalid
dec edi
movsd dword es:[edi], dword [esi]
loopne 0x100c1260
out 0x3b, eax
pop esi
loop 0x100c12bf
test byte [edx + ecx + 5], ch
dec esi
enter 0xaf, 0x3a
movsb byte es:[edi], byte [esi]
cmp edx, dword [ebx - 0x17c30b0e]
cmp al, 0x6e
cmp al, 0x9f
push 0xffffffffffffffc8
rcr dword [ebp + 0x5c], 1
add byte [eax + esi*4 + 0x2e819d47], 0xba
inc esp
xor al, 0xbb
add dword [esi + 0x7193a2c1], 0xffffffb1
fiadd word [ebp + ecx*2 - 0xb859ff2]
shl dword [edx - 0x214e8e6d], 0x84
dec ebp
push cs
pushal
jp 0x100c12b8
outsb dx, byte [esi]
test eax, 0xe58f71f0
lahf
push ax
scasd eax, dword es:[edi]
mov ebp, 0x72a0d4a2
arpl word [edi + 0x26765db3], si
mov bh, 0x41
inc ecx
and esi, dword [edi]
out dx, al
test eax, 0xf98caad2
push es
int1
mov ebp, 0x35d9b59b
xor dl, al
stosb byte es:[edi], al
std
mov bh, 0x71
mov byte [edi + 0x2edf155b], cl
xor dword [eax - 3], eax
adc eax, 0x40312edf
std
rcl byte [ebp + 0x6982a097], cl
pop ds
and ebx, dword fs:[esi - 0x3a]
pop esi
invalid
popfd
je 0x100c174e
call edi
cmp eax, 0xb7
je 0x100c174e
pushfd
test byte [0x100c1363], 0x71
jne 0x100c1364
cld
pop ss
mov edi, 0x682c139f
pop edx
mov esi, 0xef823975
popal
pop ss
int 0xcf
and dword [ebx - 0x71e59e1b], 0xffffff8c
or ch, bh
das
ja 0x100c1304
stosd dword es:[edi], eax
mov dl, 0x12
xchg edi, eax
xchg ebx, eax
inc esi
xchg byte [eax + edi*8 + 0x7e902208], bl
fsubr dword [eax]
inc eax
cmc
out 0x88, al
stosd dword es:[edi], eax
jne 0x100c13b7
mov edi, 0x1adec2fa
push ss
dec ebx
mov ebx, 0xf373f083
popfd
cmp dword [0x10172ddc], ebx
jne 0x100c13db
pushfd
test byte [0x100c138a], 0xc0
jne 0x100c138b
inc esi
pop ebp
popfd
mov eax, dword [0xfaba96cf]
add ecx, dword [eax]
out dx, al
mov edx, dword [esi - 0x309a5d7c]
cmpsb byte [esi], byte es:[edi]
jo 0x100c1405
popfd
lea eax, [ebp - 0x38]
push str.wuauserv_cont
push eax
call fcn.1011f120
pop ecx
pop ecx
lea eax, [ebp - 0x38]
push eax
push ebx
push ebx
push ebx
call esi
mov dword [0x10172ddc], eax
cmp eax, ebx
pushfd
test byte [0x100c13d3], 0x19
jne 0x100c13d4
xchg edx, eax
lahf
lodsd eax, dword [esi]
sub dword [edx - 0x2b], ecx
out 0x54, al
jne 0x100c13c3
jo 0x100c1432
ficom dword [edi + 0x50e7c99b]
xchg edi, eax
wait
leave
out 0x50, eax
inc ecx
outsb dx, byte [esi]
mov ch, byte [ecx]
movsb byte es:[edi], byte [esi]
sbb ah, bl
mov cl, byte [edi]
push ecx
popfd
je 0x100c1744
add eax, dword [eax]
add bh, bh
xlatb
call edi
pushfd
test byte [0x100c1486], 0x50
jne 0x100c1487
dec ecx
test byte [ecx - 0x2f], bh
jns 0x100c13c0
sbb dword [ecx], edx
pop edx
push ss
cmp dl, byte [ecx]
add ah, byte [esi + esi*4]
and al, 0x58
and edi, dword [ecx + edx*4 - 0x5ff05d01]
in eax, dx
dec ebp
test dword [ebp - 0x50fc72a6], esi
pop edx
lea eax, [ebx]
scasd eax, dword es:[edi]
loopne 0x100c13d8
sub eax, 0x629d5de1
jbe 0x100c13ed
push esi
or ch, cl
sub ecx, edx
push ecx
out dx, al
or edi, edx
and esp, dword [ebx + 0x3d]
push esi
aas
out dx, al
xchg dh, bh
outsd dx, dword cs:[esi]
cdq
call dword [ecx + esi*8 + 9]
imul bh
cld
sahf
jg 0x100c1414
jmp 0xfe5de542
pop ebx
outsb dx, byte [esi]
dec edx
sbb eax, 0x7df4ac6a
dec edx
dec esp
aam 0x98
and al, 0xd8
mov esp, 0x1158e956
popfd
add ch, byte [ebp + ebx*2 - 0x6c]
mov ecx, 0xf5e29b85
push edx
int3
popfd
cmp eax, 0xb7
je 0x100c1744
cmp dword [0x10172de0], ebx
jne 0x100c165d
lea eax, [ebp - 0x38]
push str.hynode_exit
pushfd
test byte [0x100c1555], 0xcb
jne 0x100c1556
or al, 0xc5
add bl, byte [ebp + 0x79]
cwde
or al, 4
mov bh, 0xee
popfd
int1
cmp dword [ebx - 0x2ad2eded], ebp
mov bh, 0xfd
mov ch, 0x19
xchg edi, eax
enter 0xffffffffffff8c0d, 0xffffffffffffffd2
lodsd eax, dword [esi]
in eax, 6
add al, 0xe6
mov ah, 0x14
jbe 0x100c14db
and eax, 0x42c8599a
mov cl, bl
adc ebp, edx
popfd
clc
inc edi
stosb byte es:[edi], al
and dl, byte [ebx - 0x47a34a12]
inc edx
sub ecx, ebp
sal byte [ebp - 0x37675df2], 0x1e
mov ecx, 0xa1a2c8f
cmc
jnp 0x100c14ff
lcall 0x13cb, 0x8a42c859
ljmp 0x9322
inc dword [ecx + 6]
inc ecx
push es
cld
fistp qword [eax - 0x20]
std
cli
out 0x48, al
cld
add byte gs:[esi - 0x9e84e5b], bh
mov al, byte [0xfc0ef582]
push esi
mov ch, 0xa6
pop edx
or dword [ebx + 0x2d6eb1fd], 0x1f
aaa
outsd dx, dword [esi]
dec ebp
sub eax, 0x4d6f371f
idiv byte [ecx + 0x7b]
sbb edi, esi
cmp al, 0xa3
idiv dword [edi]
or eax, 0x7cf0adbe
or dh, byte [esi - 0x50]
dec eax
jae 0x100c1563
mov dword [0xbe0d3ff7], eax
lodsd eax, dword [esi]
invalid
add edi, dword [0xaa149c88]
push ebx
loop 0x100c152b
or eax, 0xe0017cb9
or dword [ebx], ebp
fnstenv [edx]
inc esp
shr edi, 0xb5
push ds
sub ebx, ecx
xor al, byte [ecx + eax*8 - 0x11]
mov ch, 0x1e
push esp
adc dword [edi + 0x65], edx
mov ebp, eax
popfd
push eax
call fcn.1011f120
pop ecx
pushfd
test byte [0x100c1647], 0x6f
or al, 0x10
outsd dx, dword [esi]
jne 0x100c1648
add byte [eax], al
add byte [edx], ch
je 0x100c1520
sub dh, byte [ecx + esi*4 - 0x41]
push ds
adc dl, byte [ebp - 5]
mov edi, 0xfb55121e
jns 0x100c15f3
mul byte [ebp + 0x56af4531]
and edx, dword [ebx - 0x17]
pop ebp
mov bh, 0x6e
jb 0x100c157f
out dx, al
popal
div cl
mov byte [edx - 0x562e85e], ah
push edx
push ebx
xlatb
xor dword [ebx + 0x59], eax
pop esp
push 0x65e6528d
jbe 0x100c15fc
jb 0x100c1569
jne 0x100c1548
mov ch, 0x27
and dword [edi + esi*8], 0xe7129c80
test bh, 0xe5
sub byte [edi + 0xa], ch
out 0xf6, eax
iretd
add byte [edx - 0x6fa36e2d], 0x76
mov esi, 0x1246c6d6
xor dh, dh
cmp byte [edi + 0x46], 0xbd
mov eax, dword [0x119fe552]
fist word [esi - 8]
mov ebp, dword [edx + 0x68]
pop ss
mov eax, 0x6b5dd977
push ebx
xchg ecx, eax
jb 0x100c1607
out dx, al
test eax, 0x47e4c76b
pushfd
fisttp dword [ecx*8 - 0x254238dc]
pop esi
popal
shr byte [esi + ebx + 0x3eb7b36b], cl
mov eax, dword [0x51c8941c]
push ebx
movsd dword es:[edi], dword [esi]
enter 0x5351, 0xffffffffffffffa5
sub dword [esi - 0x65a7a806], ebx
mov edx, 0x2949f92d
pop edx
lcall 0x5a29, 0x49f92dba
leave
cdq
cld
xchg ecx, eax
add bl, byte [ebx + 0x3a]
dec esi
mov edx, 0xea99aea6
rcr ah, 1
mov dword [ebp + 0x1d79b958], ebx
adc dword [eax + 0x4f], edx
mov dword [ebx + 0x40], ebx
push eax
xchg ebp, eax
jle 0x100c15b1
jbe 0x100c15aa
mov esp, 0x76e4c131
shl esp, 0x76
call 0xd086032c
enter 0xffffffffffff9fbf, 0x27
nop
fdivr st(3)
std
jnp 0x100c1698
dec ebx
sbb edx, dword [ecx]
sub dword [esi - 0x75], ebp
out dx, eax
dec ebx
fiadd dword [esi - 0x20]
jg 0x100c1626
jl 0x100c16ba
dec eax
popfd
pop ecx
lea eax, [ebp - 0x38]
push eax
push ebx
push 1
push ebx
call esi
mov dword [0x10172de0], eax
cmp eax, ebx
je 0x100c166a
call edi
cmp eax, 0xb7
jne 0x100c05a0
invalid
call edi
push eax
pushfd
test byte [0x100c1701], 0xb3
jne 0x100c1702
sub al, 0xf1
mov dh, 0x9a
cld
or eax, 0xd988e3ea
inc dword [ebp + 0x4cd66887]
mov cl, 0xa4
int1
inc esi
invalid
or byte [ecx + ecx*2], al
cmp byte ds:[eax - 0x56f1d024], dh
cmp byte [eax - 0x56f1d024], dh
das
sub al, 0x3e
js 0x100c1705
xor ebx, dword [esi + 0x6b]
mov al, 0x66
jecxz 0x100c1694
ljmp 0x2174:0x7e63ff5c
pop esp
jmp dword [ebx + 0x7e]
pop esp
in eax, dx
test dword [0x21f8f1c8], edx
mov bl, 4
mov dword [0xf515edce], eax
cwde
int1
jae 0x100c1668
mov dword [esi + 0x4aee7f35], ebx
sbb dword [edi], esp
cmpxchg ch, ch
test al, 0xaf
dec esp
push ebp
aas
pop ds
or eax, 0x42bc40c9
push esp
push edx
xchg edi, eax
sub byte [eax], bh
pop edi
jg 0x100c171a
daa
jb 0x100c173b
xlatb
in al, dx
salc
add byte [edi + 0x79a2d829], ah
jo 0x100c1723
int 0x20
push esp
je 0x100c16a9
xor eax, esp
popfd
push str.Create_g_hHYNodeExit_Error:_d
mov dword [eax + edx], edx
jmp 0x100c1756
sub dword [ebx - 0x5f], ebx
in al, 0xd7
call 0x5ae9848f
dec edx
cdq
pop edi
out 0x11, al
inc esi
pop esi
push 0x80a7e0a5
or al, 0xe3
mov dh, 0xc9
pushal
pop esp
dec edi
sub al, 0x98
sahf
imul ebp, dword [ecx + 0x71], 0xfffffff8
jno 0x100c1735
insd dword es:[edi], dx
call 0x5df1253b
popfd
call edi
push eax
push str.Create_g_hContinue_Error:_d
jmp 0x100c1756
call edi
push eax
push str.Create_g_hRunning_Error:_d
push ebx
push ebx
call fcn.10049c0c
add esp, 0x10
pushfd
test byte [0x100c17c5], 0x15
jne 0x100c17c6
and dword [ebx + 0x7b45706f], esp
xchg ebx, eax
cmp dl, byte [edx + 0x12]
mov ecx, 0x8f0cf769
pop esp
pop esp
sub dl, byte [ebx]
and dword [ebx - 0x5f], ebp
loopne 0x100c17e5
sbb al, 0x8e
pop ss
aaa
and al, 0xd9
adc dword [edx + 0x78d958b8], ecx
mov edi, 0xcbf7d7a0
cmp ebx, dword [eax - 0x68f575bf]
dec byte [eax + 0x10]
lea eax, [ebx - 0x5d]
mov byte ds:[ecx + 0x71], bl
test ebx, 0x8a41983b
or dl, byte [edi - 0x72efb702]
inc ebx
mov dword [0x7159883e], eax
pop eax
movsb byte es:[edi], byte [esi]
mov al, byte [0x5ee7bde5]
invalid
popfd
xor eax, eax
mov ecx, dword [ebp - 4]
pop edi
pop esi
pushfd
test byte [0x100c1891], 0x45
jne 0x100c1892
push 0xffffffffffffff86
mov eax, dword [0x523ad5be]
push esi
mov ch, 0xe1
jnp 0x100c185b
loope 0x100c1862
jae 0x100c177a
xchg ecx, eax
push 0xffffffffffffffda
xchg esi, ecx
test ax, 0xe5ad
in eax, dx
or eax, 0xc7437ac8
cmpsb byte [esi], byte es:[edi]
rol byte [eax + eax*4 - 0x35], 1
mov ebp, 0xe116ba1
js 0x100c1791
mov eax, dword [0x3df9d3c5]
pop esp
mov dword [eax - 0x5e], edx
push 0x58bb8ccc
push edi
xor edi, eax
pushfd
shl dword [edi], 0x68
xor eax, 0x170843b3
psraw mm3, mm5
test byte [eax - 0x1f], 0xd9
pop ss
ror byte [ecx], cl
movsb byte es:[edi], byte [esi]
push es
cmp ch, bl
pop edx
adc eax, 0xf785bb59
out 0xfc, eax
inc esi
loop 0x100c1842
cmpsd dword [si], dword es:[di]
jecxz 0x100c187c
pop esp
out 0x66, eax
cdq
in eax, 0xea
mov al, cl
jecxz 0x100c18d0
das
xchg dword [edi], esp
popfd
xor ecx, ebp
pop ebx