Function at 0x1004a362
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x404
mov eax, dword [0x10170c30]
xor eax, ebp
pushfd
test byte [0x10049c3b], 0xd7
jne 0x10049c3c
dec edi
xor byte [ecx], cl
stosd dword es:[edi], eax
fsubr qword [ecx + 0x75af7968]
in al, dx
jbe 0x10049c4e
test ebx, ecx
mov ebx, 0x3d31ac00
pop ebp
dec esp
popfd
mov dword [ebp - 4], eax
push ebx
mov bl, byte [ebp + 8]
pushfd
test byte [0x10049c68], 0xb7
jne 0x10049c69
push edx
fdiv dword [eax - 0x7a]
jle 0x10049cc3
add eax, 0x107b9af
mov ebx, dword [ebx - 0x169e9225]
aad 0xf3
mov ch, 0xb
pushfd
add eax, 0x95451719
popfd
push edi
mov edi, dword [ebp + 0xc]
pushfd
test byte [0x10049d64], 0xbc
jne 0x10049d65
inc ecx
mov ah, 7
cmp edx, dword [ebp - 0x4a]
aam 0x26
pop ebp
add dword [edi], edi
inc esi
mov eax, dword [0x2cd3886e]
push ebp
in al, 0xc5
cli
mov ebp, 0x19e6c41a
or dword cs:[eax - 0x5b], ebp
or dword [eax - 0x5b], ebp
dec edx
into
ja 0x10049cce
jl 0x10049c97
adc eax, 0x8c56ad7c
insd dword es:[edi], dx
xchg esi, eax
jnp 0x10049cdf
mov edx, 0x18960541
push es
rcl dl, cl
xor byte cs:[bp + di - 0x79], 0xe6
sub al, 0xfb
cmpsb byte [esi], byte es:[edi]
push 0x66dd0f20
lds eax, [ecx + 0x56e190ac]
nop
loope 0x10049d1c
and dword [edx], eax
salc
popfd
sbb byte ds:[esi], 0x81
mov esi, 0x3dd796f6
std
mov fs, word [esi + esi*4 - 0x54db3ee2]
push ebx
stosd dword es:[edi], eax
cmp esi, dword [edx + esi*8 - 0x5b]
movsd dword es:[edi], dword [esi]
aas
pop edx
mov edi, 0x9c808fc3
cld
sahf
lds edi, [ebx + 0x3c]
fcom dword [edi + 0x2018ed65]
popfd
xchg byte [esi], bl
cdq
jl 0x10049c8d
pop esp
mov al, byte [0xcb6be554]
cld
mov esp, 0xe86e7efd
stosb byte es:[edi], al
arpl bx, bp
outsd dx, dword [esi]
call 0x7ff000b3
sbb al, 0xd9
stosb byte es:[edi], al
mov byte [ebp - 0x3996628], ch
lodsb al, byte [esi]
loop 0x10049d04
aad 0xf9
mov bl, 0x64
inc ebp
salc
pop eax
inc ecx
cmp byte [ebp - 0x743fb64], bl
lahf
nop
or al, 0xf0
xor byte [edx - 0x2ce2ad6e], ch
cmp al, 0x91
mov esi, 0xf33deb03
and ah, byte [esp + eax*8]
dec ebp
adc al, 0x46
xor cl, byte [esi]
mov es, esp
mov cl, 0x6c
imul eax, ecx, 0xf
pushfd
mov dword [eax], esp
inc ecx
sbb ah, 0x54
pop ebx
pushfd
insd dword es:[edi], dx
sbb esp, dword [esi + 0x291685b1]
clc
inc ebp
dec ecx
cdq
imul dword [edx]
cld
seto byte [edx]
sbb ebp, dword [edi]
cmpsd dword [esi], dword es:[edi]
sub byte [edx], cl
adc bh, byte [edx - 0x58]
popfd
cmp byte [0x1016f4dc], bl
jge 0x10049d82
mov ecx, 0x10172290
call fcn.100486c3
cmp dword [eax + 4], 1
jne 0x1004a354
push esi
push 0x400
xor esi, esi
lea eax, [ebp - 0x404]
push esi
push eax
pushfd
test byte [0x10049dbc], 0x1e
je 0x10049dbd
out 0x91, eax
push cs
cmp eax, 0x56c90806
out dx, eax
cld
xor eax, 0xe0fdfd88
fnstsw word [esi - 0x20]
cmp dword [ecx], ebp
mov eax, 0x53a243c3
mov eax, 0x6772392b
jno 0x10049d5d
ret
popfd
call fcn.1011df60
add esp, 0xc
cmp dword [ebp + 0x10], esi
pushfd
test byte [0x10049ebc], 0x37
sahf
add al, 0x10
aaa
jne 0x10049ebd
pop edi
out dx, al
adc al, 0xc5
popfd
mov esp, 0x93ab3c5f
mov ecx, 0x7965d6a7
out 0xda, al
div al
rcr byte [eax], cl
xor al, 0x5f
xchg dword [ebp + 0x219861da], edi
pop esi
jge 0x10049e55
jns 0x10049dcd
invalid
rcr dl, cl
insd dword es:[edi], dx
int1
dec ebp
in al, 0xee
test ax, 0x26d2
shl byte [esi], cl
xchg ebp, eax
fsubr st(0)
or cl, byte [edx + 0x27]
push ecx
rcl dword [eax - 0x74], cl
jae 0x10049de5
inc ebp
cmp byte [eax - 0x2d470aca], dh
stc
jae 0x10049db2
mov dword [ebp - 0x3dcc1fa8], edx
xchg ebp, eax
xchg ebp, eax
xor byte [esi - 0x79], bl
push edi
push esp
jl 0x10049e00
pop eax
loopne 0x10049e50
ret 0x9595
adc byte [esi - 0x16b466d7], cl
int1
xchg ebx, eax
stc
test byte [edx - 0x23411e50], al
stosb byte es:[edi], al
arpl word [0x80a59459], si
mov ebp, 0x649e71af
clc
inc ebp
test eax, ebp
inc edx
dec ebx
loop 0x10049e1a
pop esp
mov cl, 0x20
sbb al, 0xab
jge 0x10049ebc
enter 0xffffffffffff8a9a, 0xffffffffffffff96
xchg esi, eax
xor ecx, dword [ebx - 0x1a704430]
and byte [ebp + 0x1ce8824], al
not byte [ebp + 0x3e]
vmread dword [ebp + 0x68], ecx
xchg ebp, eax
xor edi, dword [eax]
adc eax, 0xb418ce4f
cmp al, 0x50
sti
test al, 0x74
dec eax
jno 0x10049e71
adc esp, dword [esi - 0x3bebb621]
call 0xc0d25f50
inc edx
in eax, dx
xor byte [ebx - 0x75], bh
cmp dword [ebx + 0x4c], ebx
int3
test dword [eax + 0x7324ed4b], edi
xchg byte [ebp + 0x60570e4a], bh
pushal
popfd
je 0x1004a28a
pushfd
test byte [0x10049f84], 0xd3
jne 0x10049f85
jae 0x10049f13
xchg ebp, eax
bnd je 0x10049f25
push ds
xlatb
sbb eax, 0x8ef9b548
fdiv qword [ebp - 0x5bb60095]
cmp ebx, ebp
pop ecx
adc eax, 0x474b97f8
clc
xchg edi, eax
dec ebx
inc edi
adc byte [edi], bh
mov ecx, 0x66022e5
sub dword [edx], eax
sbb eax, 0xab446d15
sub dword [ecx], 0x8d298ef6
out 0x65, al
xor dword [esi], 0x45
mov ecx, 0x66b9dbcb
push ss
lahf
or ebx, edi
sbb edx, ecx
mov ch, byte [eax - 0x1b20b8c4]
int 0xa7
sbb al, 0x3a
stc
or dword [esp + ebx*8], ebx
push ecx
dec esi
div dword [ecx]
imul dword [ecx + 0xb]
dec ecx
jns 0x10049eb1
cmp al, 0x47
invalid
or ecx, dword [ecx + 0x79]
mov byte [edx - 0xa], cl
dec esp
and dh, dh
sbb al, 0xab
sub ebx, ebp
jo 0x10049ee9
jnp 0x10049f8d
xor eax, 0x9456cef2
sti
jg 0x10049fbc
sbb dword [eax], edx
sar bl, 1
pushfd
in eax, 0xdc
inc edx
test al, 0xc9
cmp dword [edx + 0x43], edi
sbb dword [ecx - 0x30de8983], ebp
mov ah, 0xc9
stosd dword es:[edi], eax
mov al, byte [edi - 0x7e858749]
cmc
out dx, al
pushfd
stosb byte es:[edi], al
in al, dx
mov al, 0x77
xlatb
aam 0xce
sub dword [ecx + 0x60add87f], esi
stc
and byte [edx + 0x7c35b815], ch
cmp eax, 0x757fff07
lea ebp, [eax + 0x79d7b6d6]
and bh, byte [edx + ecx*8 - 0x7b43f1e]
popfd
test edi, edi
pushfd
test byte [0x10049fcb], 0xce
add al, 0x10
into
jne 0x10049fcc
int3
cmpsd dword [esi], dword es:[edi]
outsb dx, byte [esi]
fild dword [esi]
outsb dx, byte [esi]
int 4
sub ecx, dword [edx + 0x3b]
push ecx
cmp dword [ecx], esp
push ss
popfd
je 0x1004a099
lea eax, [ebp - 0x404]
pushfd
test byte [0x1004a07f], 0x34
jne 0x1004a080
cmp bl, byte [esi]
cmc
mov ch, 0xaa
jbe 0x1004a04d
sar dword [eax - 0x59], cl
mov edi, 0x6e1be048
lea edx, cs:[edi]
push 0x2ef3beec
push es
salc
push 0x6f
or byte [edx - 0x80], ah
leave
jne 0x1004a03f
jb 0x10049fda
fnstenv [edi - 0x2d3b560]
jae 0x1004a018
inc ecx
arpl word [ebx - 0x43], di
imul esi, dword [ecx + 0x1683eb1e], 0x56ffd71
je 0x10049fea
xor al, 0x2e
outsd dx, dword [esi]
sub byte [edx + 0x480559a3], ch
xchg ebp, eax
push esi
mov word [eax + 0x55], ss
cmp dword [ecx - 0x44ccb50d], ebp
pop edx
and dword [ecx + 0x3d9cdcc2], 0xffffffa4
sbb bl, ah
mov byte [ecx - 0x6c], cl
cmp eax, 0x88e318a4
dec ecx
xchg esp, eax
or dword [eax - 7], ebx
fstp qword [ecx + esi*2]
mov esp, 0x9c54bdbc
mov edi, 0xf7e110b3
mov esp, 0xbf9c54bd
mov bl, 0x10
loope 0x1004a04d
xchg dword [eax + 0x15fa3f82], edi
cmp dh, byte [eax - 0x1f]
fidiv dword [ebp + 0x7dfdfe52]
insb byte es:[edi], dx
cli
push esp
pop ebp
and eax, 0x5bb591be
mov eax, dword [0x32c5b7e2]
and ah, dh
rol edx, 0xf9
and byte [eax], 0xf6
mov dword [0x379af96c], eax
popfd
push edi
push eax
call fcn.1011f120
pop ecx
pop ecx
lea eax, [ebp - 0x404]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenA]
mov esi, eax
lea eax, [ebp + 0x14]
pushfd
test byte [0x1004a172], 0x54
jne 0x1004a173
das
push ecx
pop edi
cmpsd dword [esi], dword es:[edi]
inc ebx
lodsd eax, dword [esi]
adc eax, dword [edx + 0x8d4e9d3]
lodsb al, byte [esi]
pop ecx
clc
push ecx
sub esp, eax
or byte [ecx + eax*4 - 0x37], dh
lahf
and al, 0x32
test dword [edx + 0x5cb1998f], 0x1201166b
add byte [ebp - 0x2b6f976c], 0x23
test cl, bh
mov edi, edi
movsd dword es:[edi], dword [esi]
pushal
push edi
int 0x4c
fnsave dword [ebx]
pop esp
mov esp, 0x81f00309
movsd dword es:[edi], dword [esi]
into
mov edx, 0x4b3e6f31
mov al, byte [ecx + 0x78698ef4]
fcompi st(5)
mov ch, byte [0xe93dc85b]
stosd dword es:[edi], eax
and byte [esi], ah
push 0x4e
adc byte [edi - 0x2d], al
sbb bh, byte [ebp - 0x5e]
dec ebp
leave
daa
push es
pop ds
cmp dword [ecx + 0x79e7f3c6], ebx
push esi
inc eax
std
call 0x5c1948aa
popfd
cmp dword [0x67d40e69], ebp
mov dword [0xc4566dc4], eax
xchg ebp, ebx
xchg ecx, eax
and byte [ebp + 0x542178dd], bh
xchg dword [eax + 0x31], ebx
aad 0xf8
test byte [ecx - 0x75], cl
lodsd eax, dword [esi]
movsd dword es:[edi], dword [esi]
xchg esi, eax
pop ebp
nop
andnps xmm5, xmmword [edx - 0x5ede4b2e]
jns 0x1004a11e
add al, 0xaa
cmp bl, byte [ecx - 0x1d]
scasd eax, dword es:[edi]
sub al, 0x87
imul eax, dword [eax - 0x74], 0xd7e3099c
or eax, ebp
movsb byte es:[edi], byte [esi]
adc bh, byte [edx - 0x17]
and al, byte [edx]
mov bh, 0x18
xchg ebp, eax
insb byte es:[edi], dx
test dword [edi - 0xe446da2], esi
xchg esp, eax
dec ebx
call 0xa159c688
popfd
push eax
push dword [ebp + 0x10]
mov eax, 0x3ff
sub eax, esi
push eax
lea eax, [esi + ebp - 0x404]
push eax
call fcn.101205f0
add esp, 0x10
cmp dword [0x10172224], 0
pushfd
test byte [0x1004a268], 0x9e
jne 0x1004a269
test byte [eax], al
or byte [ebx + 0x2d], dl
dec esp
lodsd eax, dword [esi]
cwde
mov al, byte [0x3e1c]
cmp eax, 0x338f8089
push esp
dec esi
inc esi
add dword [edx - 0x690f611c], esi
xor edi, edx
ror byte [ebp - 0x46], 0x37
pop edi
rcl byte [ebp - 0x74], 0xd0
aas
sbb ah, dh
xchg ebp, eax
lodsd eax, dword [esi]
push ebp
jne 0x1004a1f5
test byte [ecx + 0x490644e7], 0xae
cmpsb byte [esi], byte es:[edi]
or byte [ebp - 0x72], dl
jg 0x1004a1ac
fcom qword [edi]
xor ebx, dword [ebp + 0x3f82edcc]
jb 0x1004a262
aam 0xce
mov ecx, 0xca63c99e
push ecx
xchg ebx, eax
jbe 0x1004a1ac
inc edi
insd dword es:[edi], dx
out dx, eax
inc eax
jmp [ecx + 0x2ba4e15f]
movsb byte es:[edi], byte [esi]
sub edx, esi
pop esp
or byte [ecx + 0x60a9ed7e], bh
add dword [bx + si - 0x76f7], 7
popal
sub al, 0x9a
push 0xfecba246
cmc
add al, 0xd4
dec ebx
into
movsb byte es:[edi], byte [esi]
pop ebx
mov byte [ebp - 0x6a5ad099], bl
cmc
and al, 0x4f
rcl byte [ebp - 0x235bd4e6], cl
xchg dword [edx], ecx
dec ebp
mov cl, 0xbe
bound esi, qword [esi]
mov byte [eax - 0x7ade8550], 0xb9
pop ecx
push 0xccebec6e
or dword [bp + di - 0x6fdd], 0xffffff9c
dec esp
dec edx
and dl, byte [edi + edi*8 + 0x275849db]
int1
jle 0x1004a214
invalid
push cs
mov ah, 3
test al, 0x8d
lgs ebp, [edx - 0x77]
test ecx, 0x48420e96
inc edx
add dword [edx - 0x5e], ebp
cmpsd dword [esi], dword es:[edi]
jno 0x1004a1fd
pushfd
popfd
lea eax, [ebp - 0x404]
push eax
jne 0x1004a27b
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
jmp 0x1004a28a
movsx ecx, bl
push 0x10146738
call fcn.100491ad
pop ecx
pop ecx
pop esi
pushfd
test byte [0x1004a352], 0xe4
jne 0x1004a353
or byte [ebx - 0x20], bl
pop eax
sub eax, edx
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
bound ebp, qword [0x942cbce2]
loop 0x1004a261
sub al, 0x94
cmp ecx, dword [edx - 0x28a290d2]
cwde
jge 0x1004a2f6
xor ch, cl
pop es
bound eax, qword [ebp - 0x2594bdd6]
mov bh, 0x23
dec eax
adc eax, 0x306aa7bc
xchg esi, eax
dec edi
and ebp, ebx
mov ecx, dword [ebx - 0x45a1eb90]
sbb dword [ebx + edi*4], esi
cli
pop es
jbe 0x1004a2e2
in eax, 0x86
imul byte [eax]
lahf
adc dword [ecx - 0x20], 0x156e4469
push ebx
jns 0x1004a2a3
push eax
mov eax, 0xd9c09336
xchg dword [eax - 0x1ac99fd], eax
push esi
add byte [ecx], ch
in eax, 0xdb
dec ebp
pop esi
add cl, dh
into
out 0x90, eax
pop edx
add eax, 0xce60b556
mov ss, word [esi - 3]
and byte [edx], cl
adc dh, bh
movsb byte es:[edi], byte [esi]
mov dl, byte [edx + 0x3ac20236]
fisub word [ebx - 0x606e8270]
xchg edx, eax
add al, dl
cmp bl, dh
mov dword [0x9f917d90], eax
dec edx
or byte [0xe3265221], bh
pop es
les eax, [eax - 0x4d]
xor eax, 0x20e827da
xor dword [ebp + 0x3529e3ea], ebp
mov eax, 0xdb70a5b
jecxz 0x1004a370
ljmp 0xa5b:0xb83529e3
inc edi
inc edi
pushal
out 0xa0, eax
push ds
cmp esi, dword [edx + edx]
out 0x8a, al
xchg ebx, eax
sti
pop ss
idiv dword [ebp - 0x70a59cef]
sub al, 0x81
leave
and ah, dh
sal byte [esi - 0x15], cl
dec ebx
out 0x78, eax
mov cl, 0xa9
invalid
popfd
mov ecx, dword [ebp - 4]
pop edi
xor ecx, ebp
pop ebx
call fcn.1011e48a
leave
ret
or eax, 0x9cc3c900
test byte [0x1004a376], 0x15
jne 0x1004a477
aas
and ebp, dword [ecx]
sub bl, byte [esi]
and eax, 0xc85f228b
jecxz 0x1004a308
les ebx, [eax]
ffree st(0)
xor dword [ebp - 0x68238e4], edi
add al, 0xc4
sub al, 0x61
shl byte [esi + 0x2c22323b], 1
push cs
or esi, esp
jge 0x1004a35e
inc ebp
sbb byte [edx], 0x26
aad 0x1a
mov ebx, 0x538fb1a3
jno 0x1004a325
stosd dword es:[edi], eax
xlatb
sub byte [eax + ebp*2], bh
adc eax, 0x2549e126
test eax, 0xb619f15f
in al, dx
and dh, byte [edi*8 - 0x1f7ad137]
fnstsw word [edi - 0x7d]
mov al, byte [0xb26850f9]
pushal
je 0x1004a393
xor esi, dword [ebp + 0x48de66d8]
jo 0x1004a414
std
mov ebx, 0xeae3b76b
mov bl, bl
out dx, al
sub ebp, esp
pop edx
cdq
mov al, 0x4f
mov eax, dword [0xd7fd7f36]
outsb dx, byte [esi]
pop es
mov byte [ecx + 0x4a], cl
xchg dword [edi - 0x2d], eax
outsb dx, byte [esi]
inc eax
or eax, 0x5574fda7
dec edi
xchg dword [edx + 0x3b], esi
and ecx, dword [edx + 0x71c8489a]
in al, dx
dec edi
cmp eax, 0xd5bcd479
mov edi, 0xd2c37cf3
sahf
jl 0x1004a3d8
insb byte es:[edi], dx
add dword [ebx + 0x38], esp
add ah, ch
cdq
in al, dx
sub byte [ebx - 0x294dd2b8], 0xf6
add al, ah
jbe 0x1004a46d
dec eax
sub eax, 0xf6d6b2
loopne 0x1004a492
push eax
cld
call 0xe43cf3e5
call 0x34965b81
pop ecx
pop ecx
mov bh, 0x91
and al, 0x59
add esp, dword [ebp + edi*4 + 0x7f]
mov cl, 0xd0
imul ebx, dword [ebx + ecx*2], 0x762fc295
push esp
movsd dword es:[edi], dword [esi]
insb byte es:[edi], dx
loopne 0x1004a424
mov al, byte [0x76d503d9]
mov gs, edi
xor eax, 0x11778c4f
jg 0x1004a442
inc esi
add byte [edi - 0x53], dh
mov cl, 0x5f
sub byte [eax - 0x686bc28e], dh
test eax, 0xc96f00d7
clc
pop edx
out 0x5e, eax
cmpsd dword [esi], dword es:[edi]
in eax, 0x43
sbb al, 0x9b
call 0xbff3312c
in al, dx
adc dh, byte [esi]
dec eax
out dx, eax
mov word [edx + esi*2 - 0x2c], cs
inc esp
push eax
into
inc ebx
dec esi
popal
popfd
push ebp
mov ebp, esp
sub esp, 0x1c
mov eax, dword [0x10170c30]
pushfd
test byte [0x1004a529], 0xa9
je 0x1004a52a
inc edi
loop 0x1004a50c
push 0xf78432b4
mov word [esi], cs
sub ebx, dword [ebp + 0x12c9201a]
pop ds
jae 0x1004a491
mov ch, 0x8f
cmp al, 0xa9
mov dl, 0xf4
insb byte es:[edi], dx
mov cl, 0x1e
xor esp, dword [ecx - 0xd]
adc al, 0xde
aam 0xdf
xchg esi, eax
dec ebp
into
fnclex
les edi, [esi]
jnp 0x1004a52a
or al, byte [eax + 0x6cc12f18]
leave
mov dl, 0xc2
sub byte [edx + 8], dh
jb 0x1004a4d1
pop ds
adc bl, al
enter 0x48e8, 0xfffffffffffffffb
js 0x1004a538
call 0x10051a3f
jb 0x1004a471
call 0xaa771a41
mov bh, 0x72
jns 0x1004a535
jo 0x1004a4c7
lodsb al, byte [esi]
and bl, ch
shl al, 1
mov edx, 0x704187da
jbe 0x1004a491
xchg ebx, eax
dec eax
mov dl, byte ss:[ebx + 0x65]
pop esi
mov al, 0xb3
dec esp
xor esi, dword [ecx + 0x3e]
cli
mov word [esp + esi*4 - 0x7f], ss
add eax, 0xb6ea1b46
test byte [bx + di], bh
mov al, byte [0x57b95828]
cmpsb byte [esi], byte es:[edi]
stc
and ah, bl
jle 0x1004a4f3
jecxz 0x1004a58c
in al, 2
push ds
add bl, byte [esi]
pop edi
in eax, 0x57
popfd
pop ss
cmp byte [edi + 0x52e2d98a], ch
in al, dx
push 0x6e54cccd
push edi
xchg ah, al
inc edx
push ss
and byte [edx + 0x50], bh
popfd
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword [ebp + 0xc]
push esi
pushfd
test byte [0x1004a63a], 0x18
jne 0x1004a63b
cmpsb byte [esi], byte es:[edi]
add al, 0x10
sbb byte [edi], cl
test ecx, edi
add byte [eax], al
add byte [ebx], bl
xchg esp, eax
stc
inc esi
sbb edx, dword [ecx + edi*8 + 0x1da18946]
mov eax, 0x472feca1
mov dword [ecx - 0x135e47e3], esp
das
inc edi
push esi
int1
pop ecx
int3
sbb byte [esi], 0x82
movsb byte es:[edi], byte [esi]
sti
jnp 0x1004a5b0
and ebx, dword [ebx + ebp*4]
sbb al, 0xab
dec esi
xor eax, 0x7e577a61
pop edx
jp 0x1004a5eb
jle 0x1004a5f0
cwde
dec esi
lodsb al, byte [esi]
xchg edi, eax
leave
add al, 0xc
stosd dword es:[edi], eax
stosd dword es:[edi], eax
insd dword es:[edi], dx
cmpsb byte [esi], byte es:[edi]
mov edi, 0xa8e37776
pop esp
dec esi
dec ebx
out dx, eax
in al, dx
adc eax, 0xf661120b
into
scasd eax, dword es:[edi]
test dh, 0xaf
mov eax, dword [0x305844d5]
push ss
je 0x1004a592
and dword [eax - 0x6b5705ac], eax
xchg edx, eax
jle 0x1004a546
int3
shl dword [esi + ebp], 1
mov ebp, dword [edx - 0x7aea458d]
test eax, edx
lahf
jae 0x1004a5a2
adc eax, 0x9fd08585
rcr byte [edi + 0x7676557c], 1
jl 0x1004a644
jbe 0x1004a667
jbe 0x1004a5f8
push es
sahf
jle 0x1004a5e6
dec esp
cli
xchg edi, eax
sbb eax, 0x5c26b71b
scasd eax, dword es:[edi]
in al, dx
loopne 0x1004a677
jle 0x1004a586
ja 0x1004a59f
dec esi
inc ebx
add ebx, dword [ebx]
mov ebx, 0xc15cf27c
in al, dx
add byte [esi - 0x338792a8], dh
jl 0x1004a5fe
pop esp
shr esp, 0
mov dh, 0x58
insd dword es:[edi], dx
js 0x1004a5e1
stosd dword es:[edi], eax
jecxz 0x1004a60a
adc cl, byte [edi - 0x1ab22ada]
inc esp
std
mov al, byte [0x6f394eb]
test al, 0xf1
insd dword es:[edi], dx
test byte [edx - 0x7b1db7a], dl
push esi
pop ds
inc ebx
test byte [ecx + 0x58], 0x33
fistp qword [ecx + 0x1d]
insb byte es:[edi], dx
fdivr dword [esi]
popfd
push edi
mov edi, dword [ebp + 8]
lea ecx, [ebp - 0x1c]
push ecx
push eax
xor esi, esi
push esi
call dword [sym.imp.ADVAPI32.dll_LookupPrivilegeValueA]
test eax, eax
jne 0x1004a66f
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push str.LookupPrivilegeValue_error:__u
push esi
push esi
call fcn.10049c0c
add esp, 0x10
adc byte [ebx], dh
shr cl, 0xce
add al, 0
add byte [ebx + 0x4589e445], cl
invalid
xor eax, eax
jmp 0x1004ab3d
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x10], eax
pushfd
test byte [0x1004a77a], 0x6f
add eax, 0x1004a77a
outsd dx, dword [esi]
jne 0x1004a77b
adc bl, cl
popfd
mov edi, 0x3d7bb472
pop ss
ffree st(2)
out 0x36, al
test dh, bh
dec ebp
cmp eax, 0xb4a348d1
jae 0x1004a6f5
push ecx
mov ecx, 0xaa2099cc
das
movsb byte es:[edi], byte [esi]
shl byte [eax - 0x377b73df], cl
leave
dec ebx
pop esi
test eax, 0xe820b4ca
pop ecx
push eax
xor eax, 0xd92864bf
movsb byte es:[edi], byte [esi]
daa
pop ecx
jo 0x1004a70e
adc dword [ecx - 0x28d7e01], edi
or dword [ecx + 0x2f70e26], edi
sal ebx, cl
scasd eax, dword es:[edi]
pushal
dec esp
mov dword [0x8c699b44], eax
mov eax, 0x48040d9c
lodsd eax, dword [esi]
add bl, 0xe9
jo 0x1004a754
push ax
mov cl, 0x15
insd dword es:[edi], dx
inc edx
inc esi
stosb byte es:[edi], al
inc esi
mov ah, 0x84
test byte [eax - 0xd], ch
outsb dx, byte [esi]
mov eax, 0xe41a844b
xor al, 0x3b
inc edx
xor dword [ecx - 0x3e], ebx
mov cl, 5
mov dword [0xaab493fe], eax
insb byte es:[edi], dx
push 0xb390bb45
xor ebx, dword [edx + 0x55a4ec1]
or eax, 0x3a291699
push ss
sub dword [edx], edi
aad 1
in al, 0xce
int3
jmp 0x1004a719
jmp dword [ebx]
xchg byte [ebp + 0x1e842aa3], dh
arpl bp, bx
aas
inc esi
mov ebp, dword [esi + 0x1d]
xchg esi, eax
pop esi
in eax, dx
pinsrw mm6, edx, 0xf9
push ebp
ror byte [edi], 0xbf
insb byte es:[edi], dx
sub byte [eax - 0x1559e3e8], ch
pop edx
mov dh, 0xd5
mov ebp, 0xaad62dec
popfd
mov eax, dword [ebp - 0x18]
pushfd
test byte [0x1004a85a], 0xa2
jne 0x1004a85b
jo 0x1004a7b9
jns 0x1004a718
jg 0x1004a7ee
ror dword [ecx], cl
cmp eax, 0x64c9a70a
sbb al, 0x4e
cmp byte [edi], al
inc ecx
push ds
cmp dh, byte [ecx + 0x69cc4394]
sbb edx, edx
adc eax, 0x7de41f3a
js 0x1004a7fb
sub al, 0xab
lodsb al, byte [esi]
pop edx
xchg ebp, eax
cmp byte [ecx - 0x4734e7f7], 0x4c
pop esp
adc dh, byte [eax + 9]
mov bh, byte [edx - 0x42]
jle 0x1004a795
mov eax, 0x70125c4c
or dword [edx - 0x2e814186], ecx
dec ebp
cdq
sub dword [0xffffc64e], eax
pop esp
jae 0x1004a793
sub eax, 0xdd52cb4a
pop ecx
mov dh, 0x3b
and al, 0x1d
and ecx, dword [ebx]
adc dword [esi], edx
adc al, 0x27
fld qword [ebx - 0x1d585009]
arpl dx, sp
mov word [ebp + edx*2 - 0x4c], fs
movsb byte es:[edi], byte [esi]
mov cl, 0xcc
mov eax, 0x94bd36f7
xchg esp, eax
mov dh, 0x29
scasb al, byte es:[edi]
add bh, byte [edi]
pop es
lodsd eax, dword [esi]
imul ecx, dword [ebx], 0x1ea05e12
push ebx
rol dword [edx + edi*8 - 0x37], 0x93
or edx, dword [edx]
pop esi
mov al, byte [0x44c1531e]
cli
leave
xchg ebx, eax
arpl si, bx
popfd
add eax, 0x7e1adae5
sbb eax, 0xdf6100b
adc dword [ecx + 2], eax
scasd eax, dword es:[edi]
and al, 0xf5
mov bl, 0xf4
sbb al, 0xb0
adc byte [ecx + 0x44ae5bda], dh
mov dword [0x5e1be5c7], eax
jae 0x1004a7f2
fild word gs:[eax + 0x1335d053]
arpl word [ecx + 0x75], cx
inc esp
stosd dword es:[edi], eax
xlatb
rol dword [edx], cl
add al, 0xc1
xor bl, byte [edx - 0x3d26ed57]
test dword [0x1d8ef336], esi
jb 0x1004a87a
or eax, 0x8bff41d9
sbb byte [edi], 0x8f
adc dword [ebp + edx - 2], 0xdb422abc
popfd
mov dword [ebp - 0xc], eax
mov eax, dword [ebp + 0x10]
pushfd
test byte [0x1004a871], 0x91
jne 0x1004a972
jo 0x1004a8df
insd dword es:[edi], dx
invalid
clc
jge 0x1004a85c
or ch, byte [ebp - 0x5c]
or dword [ebp - 0x35], ebx
or dword [0xc067ff45], 0x8d9dfe12
imul ecx, dword [ecx - 0x31fe25a2], 0xffffffe0
dec ecx
mov ebp, 0x98b60eaa
adc al, 0x5d
fisub word [ebx - 0x6f624014]
dec ebp
xchg esp, eax
pop edi
clc
or al, 0x4a
adc byte [eax + 0x2a], al
cmp ah, byte [esi - 0x4fae4de6]
jnp 0x1004a8f5
xor al, 0xcc
push ss
or al, 0xe4
clc
jno 0x1004a871
jmp dword es:[edx]
dec edx
invalid
lds ebx, [eax + edi*2 - 0x51e01c54]
jb 0x1004a907
cmp dl, byte [ebx + 0xa553324]
xchg edx, eax
inc esi
int1
test al, 0x21
test eax, 0x72cd4711
inc edi
int 0x72
insd dword es:[edi], dx
out 0x2a, eax
sbb al, 0x11
xor byte [edx], ah
cmp al, 0x21
sti
idiv dword [edi + 0x3d08fe76]
or byte [edx - 0x6e0924da], bl
out 0x6d, eax
xchg bl, dl
cmp eax, 0xdb269a08
not byte [ecx - 0x2c799219]
je 0x1004a8c2
xor esi, dword [ebp + 0x6c9a3d2b]
xchg ebx, eax
dec esi
add dl, al
test dword [edx - 0x7a], esi
cmpsd dword [esi], dword es:[edi]
les ebx, [ecx + eax*2 + 0x4d84eb34]
adc ch, dl
inc ebp
aad 0x13
or al, 0xb9
mov cl, 0xe
sbb edi, edx
mov ecx, 0x2a939664
in al, dx
mov eax, dword [0x9212f7e1]
mov eax, dword [0x1dd73228]
pop edi
push es
scasd eax, dword es:[edi]
jae 0x1004a977
js 0x1004a930
cmc
mov word [eax - 0x1801d187], fs
sbb ebp, ecx
rsm
rcl dword [ebp + 5]
cli
fistp qword [ebx + 0x73e6fa9c]
or dword [esi + 0x4e], ecx
lodsb al, byte [esi]
rcr bh, 1
add dh, dh
out dx, eax
in eax, 0x3e
in al, 0xb3
inc ebp
xchg edx, eax
dec edi
cdq
popfd
neg eax
pushfd
test byte [0x1004a981], 0x83
jne 0x1004a982
add eax, 0x1004a981
xor dword [ebp + 3], 0xfffffffa
cli
or ebp, dword [edx]
popfd
push esi
sbb eax, eax
pushfd
test byte [0x1004aa48], 0xf7
jne 0x1004aa49
pushal
mov edx, 0x6a3126e0
and dword [edi], ebp
xor dword es:[edx + 0x21], ebp
das
rcl byte [esi + ecx*2 - 0x63], cl
dec esi
popfd
stosd dword es:[edi], eax
fmul qword [esi + 0x6f]
mov word [ebx + 0x40], es
shl dword [esp + edi*2 + 0x44], 1
aas
add dh, byte [esi]
adc dword [ecx + eax*2 + 8], edi
xor ecx, ebp
jno 0x1004aa1d
in al, 0x96
das
fsub qword [edx + 0x28d25bff]
mov esi, 0xf8d7bc85
jbe 0x1004a99e
rcl dword [edi]
xchg esp, eax
adc byte [ebx - 0x3f], ch
fdiv dword [edx + esi*2 - 0x74]
cmp dword [edi], esp
lodsd eax, dword [esi]
clc
aaa
je 0x1004aa05
rcr ecx, 1
inc ecx
jge 0x1004aa44
pop ecx
dec ebx
and al, 0xb6
or eax, 0x3b13592f
std
div dword [edx + esi*8 - 0x34]
movsd dword es:[edi], dword gs:[esi]
jle 0x1004a9ff
fnstsw word [edi]
call dword [edx + 0x34b8b7d1]
jnp 0x1004a997
sub edx, dword [edi + ebp*4 - 0x56]
dec ecx
mov byte [ecx + 0x23], bh
mov ch, 0xd7
std
imul eax, dword [eax + 0x64], 0xffffffa0
jo 0x1004a9c8
xor al, 0xfd
mov dword [ecx - 1], ebp
xchg ebx, eax
fdivr dword [edx - 0x3dca7762]
in eax, dx
and eax, 0xaeebb41c
scasb al, byte es:[edi]
int 0x7b
jg 0x1004aa32
pop edx
loop 0x1004aa74
dec edi
insb byte es:[edi], dx
sub eax, 0x95888868
xchg ebp, eax
mov cl, 0x4e
or byte [eax - 0x2dab8fe2], dh
in al, dx
push esp
shr ah, cl
jne 0x1004aa2b
push 0x79
push esp
add ch, bh
jle 0x1004aaaa
mov eax, dword ds:[0x5d23c7c6]
cmp eax, 0xf83cc943
popfd
push esi
and eax, 2
push 0x10
mov dword [ebp - 8], eax
lea eax, [ebp - 0x14]
push eax
push esi
push edi
mov dword [ebp - 0x14], 1
call dword [sym.imp.ADVAPI32.dll_AdjustTokenPrivileges]
test eax, eax
jne 0x1004aa7b
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push str.AdjustTokenPrivileges_error:__u
adc al, 0x10
jmp 0x1004a65e
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0x514
jne 0x1004ab3a
push str.The_token_does_not_have_the_specified_privilege.
push esi
pushfd
test byte [0x1004aabe], 0xe6
adc dh, ah
jne 0x1004aabf
push ebp
scasd eax, dword es:[edi]
dec esp
jb 0x1004ab16
mov ah, byte [edi - 0x5151ea4f]
mov edx, dword [ebp - 1]
xchg ebx, eax
mov edi, 0x242199cf
xchg esp, eax
jno 0x1004aa98
mov byte [esi + 0x20], bl
test byte [ecx + ecx*8], ch
or bl, byte [edi]
dec ecx
aam 0x9d
dec edi
popfd
push esi
call fcn.10049c0c
add esp, 0xc
jmp 0x1004a668
dec eax
mov esi, 0x530a3152
mov eax, dword [0xb9cd0312]
adc al, byte [ebx]
int 0xb9
loopne 0x1004ab0f
mov ecx, edx
and byte [ebp + 0x7e], bl
test ebp, 0x5c332641
arpl word [edx + 0x62f7b5f2], bp
fmul dword [esp + esi*2]
cmp bh, byte [edx]
dec edx
nop
popal
jle 0x1004abb5
mov ch, 0xf7
invalid
cmc
scasb al, byte es:[edi]
popfd
xor eax, eax
inc eax
mov ecx, dword [ebp - 4]
pop edi
xor ecx, ebp
pushfd
test byte [0x1004ab84], 0x20
jne 0x1004ac85
popal
xor dh, dl
adc eax, 0x3cd25aeb
lock add byte ss:[edx + 0x3a], al
sal byte [esi + 0xb], cl
or al, byte [edx + 0x16]
xchg dword [ebx + ecx*2 - 0x61], edx
dec esp
stosd dword es:[edi], eax
outsb dx, byte [esi]
jno 0x1004ab7d
sbb ah, dl
scasd eax, dword es:[edi]
scasd eax, dword es:[edi]
and byte [edi + 0x6daca45f], dl
xchg esp, eax
and bh, byte [ebx + 0x46f00062]
inc esi
mov esi, 0xb54b3b70
lodsb al, byte [esi]
cmp eax, 0xa0d172da
dec esp
dec esi
mov edi, 0xbf566109
jnp 0x1004ab29
cwde
bound ebp, qword [eax]
add dword [edi + 0x6e19253d], edi
pop ecx
and eax, 0x33596e19
popfd
aaa
or al, 0xb1
sbb dword [ecx + ebx*8], esi
xor ebx, dword [ebp + 0x19b10c37]
xor al, 0xd9
dec edi
add ebp, ebx
out dx, al
lodsb al, byte [esi]
and byte [eax - 0x22], bh
xor byte [ecx - 0x7a], 0x13
fld qword [edi + 0x2658ac07]
xchg edi, eax
pop eax
xchg edi, eax
shl edx, 0xbf
enter 0xffffffffffffeb4c, 0xffffffffffffff80
mov ebx, ebp
neg eax
ja 0x1004ac0e
fld qword [esi - 0x59f2ce8c]
mov ebx, 0xc03b0ed5
pop ds
sbb dword [eax + eax*2 + 0x491d6096], 0x5595e32b
jno 0x1004ac3d
add byte [edi - 0x75705400], ah
push ds
or al, 0xc3
jae 0x1004ac5c
cdq
or eax, 0x4376f8de
push 0x6782fa85
sti
or al, byte [eax]
jge 0x1004ab9d
out 0x6a, al
clc
sub dword [eax - 0xe], esp
adc eax, 0xe69510c9
dec esi
jno 0x1004ab99
xchg esp, eax
mov al, byte [0x803afee8]
scasd eax, dword es:[edi]
scasd eax, dword es:[edi]
daa
nop
mov edx, eax
mov edi, 0xbcdea24
cmpsd dword [esi], dword es:[edi]
and esi, dword [eax + ebp*2 - 0x58928167]
add edi, dword [edi + 0x33]
add ch, byte [ebx + 0x25]
or al, 0x11
sar edi, 1
test ecx, ebp
xchg dword [eax + 0x69691503], eax
imul eax, dword [edi], 0xb6262474
mov ebx, dword [esi]
or dh, 0x28
sbb eax, 0x14a19e67
loop 0x1004ac55
push 0x20
out dx, eax
and bh, ch
out 0xb4, al
add eax, 0x4b4fca2
pop edi
pop edi
sub dword [ebp + 0x3928628c], edx
dec edx
cmc
cmp dword [edx - 0xb], ecx
inc edi
salc
cmc
mov edx, 0xa7d2c68
fstp dword [ecx - 0x3354dd8c]
inc ecx
mov ch, 0xde
xlatb
pop ecx
cmp al, 0x1f
movsd dword es:[edi], dword [esi]
mov esp, 0xd0a3ed4d
push 0xd90a7d2c
cdq
je 0x1004ac86
stosd dword es:[edi], eax
int3
cmp al, 0xe8
mov ebp, 0x25b31299
push esi
add al, 0x4f
dec ebx
inc eax
das
int 0xce
dec ebp
push 9
popfd
pop esi
pushfd
test byte [0x1004ad80], 0x4d
jne 0x1004ad81
adc dword [edi], 0xfd1cca9f
cmp ah, byte [ecx + 0x17]
cmp al, 0xd4
out 0x1f, al
int1
scasd eax, dword es:[edi]
push eax
push cs
push ds
salc
push cs
test ch, 0xe0
test dword [ecx], ebx
xchg edi, eax
dec esp
and eax, edx
adc ecx, ebx
jns 0x1004ac73
adc eax, 0x742ccdac
dec edi
imul esp, dword [eax - 0x4b], 5
mov ch, 5
jo 0x1004ac45
out 0xa, eax
dec edi
sahf
fcom st(5)
dec di
in eax, 0x62
fcomp dword gs:[edi + ecx*2 + 0x45]
test byte [ecx - 0xaef824f], 0x57
xor byte [ecx - 0x19baf4b4], 0xd2
mov bh, byte [ebp - 0x44]
cli
fdiv st(3), st(0)
and eax, 0x4f1e27f2
fistp dword gs:[ebx + 0x4c]
mov ecx, 0x47cb0348
jle 0x1004ad2e
add dword fs:[edi + 0x5c], ebx
outsd dx, dword [esi]
jae 0x1004acf1
adc byte [edi + ecx*2 - 0x63], 0xf5
xchg ebx, eax
xchg ebx, eax
push edi
push ecx
rcr dh, cl
dec edx
fstp xword [edi + 0x1bd834ab]
cmp al, 0x9b
push ecx
daa
dec edi
lahf
das
add cl, bh
pushal
std
pop edx
outsd dx, dword [esi]
lodsd eax, dword [esi]
adc byte [ecx + 0x54009da9], bl
or dword [edi + 0x4acd7c4], 0xef42e937
aaa
jmp 0xc2c9c76
inc edx
out dx, eax
daa
cld
sub byte [edx], 0xa9
mov esp, 0xe277dbff
sub dword [ecx - 0x80], 0x10
pushal
stc
jg 0x1004ad84
test eax, 0x77dbffbc
loop 0x1004acc0
imul eax, dword [eax + 0x7ff96010], 0x70f0e240
call 0xca1021f7
invalid
loop 0x1004ad36
jo 0x1004ad30
stosd dword es:[edi], eax
je 0x1004ad56
mov edx, 0xfb0990c6
mov cl, 0x15
cmpsb byte [esi], byte es:[edi]
xchg ebx, eax
jg 0x1004ad74
jbe 0x1004add2
daa
cmc
call 0xb301d767
enter 0x4a13, 0xffffffffffffffdf
jl 0x1004ad99
push es
sbb byte [esi + edi*8 - 0x80], dh
or al, 0xaa
sbb al, 0x59
pushal
mov eax, dword [0x5b715065]
adc dword [eax + 0x4d64ab04], 0xffffffd6
mov al, byte [0x45160dec]
leave
popfd
call fcn.1011e48a
leave
ret
aaa
or eax, 0x55c3c900
push ebp
mov ebp, esp
push ecx
push esi
push edi
xor esi, esi
push esi
push 0x80
push 3
push esi
push 3
push connect
push dword [ebp + 8]
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov edi, eax
pushfd
test byte [0x1004ae21], 0x48
jne 0x1004ae22
int1
inc eax
fdiv dword [0xc78c211]
jle 0x1004adc8
or al, 0x7e
or ch, bl
invalid
fisttp qword [edi + 0x640c53f7]
salc
in al, dx
inc esi
xchg edx, eax
out 0x3d, al
leave
imul ecx, edi, 0xc0e9755b
stosb byte es:[edi], al
mov eax, 0xf8a58046
jne 0x1004adbd
shr byte [edx - 0x5a7fb948], 0xf8
add bl, byte [edi]
pop esi
aam 0xe
pushal
jnp 0x1004ae1b
xor ebx, edi
sub dh, bh
inc eax
push ebx
xchg dword [esi], ebp
push ebx
mov eax, 0xe614f213
test ch, 0x17
out 0xf6, al
lds edx, [edi]
mov eax, 0x99c221b8
test eax, 0xfe13dbb1
dec edx
jae 0x1004ad81
fstp xword [ebx - 0x7d]
xchg ecx, eax
nop
cmp al, bl
scasb al, byte es:[edi]
mov cl, byte [edi + ebx]
push esi
sar dword [ebp - 0x68], cl
add edi, ebx
pop edx
cmp byte [eax], dh
push esp
pop eax
sahf
jns 0x1004ae15
insd dword es:[edi], dx
push 0x6e47694a
mov cl, 0xf5
imul eax, dword [edi + 0x6e], 0x839df5b1
invalid
popfd
cmp edi, 0xffffffff
jne 0x1004b346
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push dword [ebp + 8]
pushfd
test byte [0x1004aebe], 0x6b
jne 0x1004aebf
in al, dx
stosd dword es:[edi], eax
stosd dword es:[edi], eax
sub dword [edi], esi
inc esi
and byte [edi - 0x52a3163a], 0x5a
mov eax, dword [0x3272]
xor ebx, eax
js 0x1004aea0
mov edx, 0x6c5daa80
loop 0x1004aeaa
dec esi
daa
mov bh, 0x85
xor al, 0x57
mov ebx, 0xa83834c0
arpl word [edi + 0x7b31cc5b], dx
jns 0x1004adf0
jnp 0x1004aee6
add byte [eax], 0x93
inc ebx
mov ecx, 0x19e7e480
add byte [ebx - 0x1b7f46bd], dl
out 0x19, eax
jne 0x1004aef5
ja 0x1004ae8a
pushfd
arpl di, di
dec dword [eax]
in eax, dx
add dword [ecx + esi*4], edx
cmpsd dword [esi], dword es:[edi]
dec ebp
push cs
and cl, byte [esi - 0x6e8ff20f]
jo 0x1004ae1d
jge 0x1004ae13
sahf
or al, 0x64
test eax, 0xfb18b7dd
pop ebp
mov esi, 0x90dbb73d
jbe 0x1004ae5b
add byte [esi + 0x73], bh
leave
jae 0x1004ae6b
xchg ecx, eax
loopne 0x1004af0b
fidiv word [edx - 0xf]
dec edi
sub eax, 0x945cb766
shl byte [ebp - 0x5924e7cb], 0x7e
mov ebx, 0xd3a3b3dc
dec edx
sub esp, dword [esi - 0x3f]
popfd
push str.Cant_Open_File
push str.MyGetFileSize
push str._s:_s:_s:_d
pushfd
test byte [0x1004af73], 0x74
jne 0x1004af74
push esp
arpl dx, si
jno 0x1004af2d
aas
push esi
dec ecx
mov dh, 0xf2
mov ch, 0xc
mov ch, 0xc
add ch, dh
mov edx, 0x333f5370
js 0x1004aef5
lds ecx, [esi + 0x26bf9f71]
popal
inc edx
xchg esp, eax
jno 0x1004ae96
mov edi, 0x94426126
pop esi
in al, dx
mov ecx, 0x78131b80
mov eax, 0x4d470d9f
sti
adc byte [edx - 0x23], bl
cld
pop ss
pop ebp
push eax
test eax, 0xb128a2a1
popfd
sbb byte [ebp + 0x4540078a], dh
pushfd
or esi, dword [edi - 0x1b]
jbe 0x1004aef3
pop edx
invalid
cmpsb byte [esi], byte es:[edi]
push esi
sahf
inc edx
mov eax, 0x5168262c
dec esp
lodsb al, byte [esi]
in al, 0x5a
imul edx, edi, 0xffffffd3
jge 0x1004aeeb
jae 0x1004af0a
std
bound esp, qword [ebx + 0x63a88db3]
outsb dx, byte [esi]
sub ebp, dword [edi]
mov bh, 0x46
xchg ebx, eax
push edi
push edx
adc bl, byte [ebp + 0x6a86173e]
out 0xd4, eax
popfd
inc ebx
inc ebx
push ebp
sbb cl, byte [esi + edx - 0x764f1]
xor al, 0x7e
add ah, byte [ecx]
fstpnce st(1), st(0)
into
xchg byte cs:[ebp + edi*4 - 0x28], bl
fist word [ecx + 0x50]
xchg ecx, eax
lodsb al, byte [esi]
xor esi, dword [eax + 0x3f9c84af]
add al, 0xbf
popfd
push esi
pushfd
test byte [0x1004b02b], 0x90
jne 0x1004b02c
sbb eax, 0x73b3c05f
dec byte [ebx]
fisttp qword [ecx - 0x39]
adc edx, edx
push ebx
sbb edx, dword [edi + 0x2819a50d]
xor eax, 0xc8c15d85
or edi, dword [esi]
pop edx
or dword [ecx + 0x34], edx
fcmovb st(0), st(4)
or byte [edi + 0x33], al
fdivr qword cs:[ebx - 0x435f1127]
jo 0x1004afbf
cmp eax, 0x922aeaee
leave
pop ebx
enter 0x774c, 0xffffffffffffff81
in al, 0x5d
xlatb
push cs
enter 0xfffffffffffff56b, 6
into
mov dl, 0xa
enter 0x6fdd, 0x41
inc edi
out dx, al
jle 0x1004aff4
stosd dword es:[edi], eax
std
mov ecx, dword [edx - 0x9f52f77]
or al, 0x2d
push ecx
fadd qword [ebx + 0x384bb8b0]
adc ebp, dword [ebx]
and eax, dword [ecx - 0xf]
rcl esp, 0xd1
out 0x17, eax
dec ecx
imul esi, dword [ebx], 0x5b
pop ebx
adc ebx, edx
cli
mov edx, 0x85b9d4db
test al, 0x7e
ja 0x1004b06c
mov ecx, 0x777ea885
jb 0x1004b05d
test dword [eax + 0x6272777e], ebp
bound ebx, qword [edx - 0x1e]
leave
pop edx
loop 0x1004afc7
push es
nop
mov ecx, 0x94c5be6b
inc ebp
xor al, 0xe8
lea eax, [ebx]
sbb dh, bh
xchg ecx, eax
cmp byte [ebx + 0x26], dh
popfd
pushal
sbb dword [ecx - 0x51], esi
mov bh, 0x7e
in eax, dx
add ebx, ebp
in al, dx
mov eax, 0xc207b563
aam 0x33
cmp al, dh
shr byte [edx - 0x6c], 0xd8
pop ebx
lahf
popfd
push esi
pushfd
test byte [0x1004b13a], 0xc5
jne 0x1004b13b
lodsb al, byte [esi]
pushfd
mov bl, 0x2f
loop 0x1004afed
mov bh, 0x1e
test byte [ecx - 0x23], bl
jb 0x1004aff5
out 0x6d, al
adc dword [ebp - 8], 0xb2e7713b
sbb ch, byte [eax + esi*2]
nop
mov esp, 0x3e7d5b04
arpl sp, di
stc
leave
ror dword [ecx], 0x38
leave
lahf
fsubr st(7)
add eax, 0x119e0636
das
mov dword [0x8b8b76b], eax
aas
push eax
movsb byte es:[edi], byte [esi]
push ecx
pop es
sub al, 0xe8
out 8, al
mov cl, 0xd7
sahf
jle 0x1004b0aa
jl 0x1004b0f7
add eax, 0xc05a051f
jecxz 0x1004b094
or dword [esi], ecx
push cs
rcl dword [esi + 0x5f], 0x15
aam 0x9b
or ch, ch
dec ebp
pop ebp
cmp al, 0x4b
sti
out 0xe8, eax
lodsb al, byte [esi]
mov word [ebx + 0x2a], fs
sar byte [0xacd9f252], 2
sub esi, dword [0x80daab51]
push ds
sar dword [eax + 0x345311f9], 1
stosd dword es:[edi], eax
fiadd dword [eax - 0x6472ee2]
adc dword [ebx + 0x34], edx
mov ebx, 0xeb25d21b
xchg ebp, eax
pop ss
fdivr st(5), st(0)
mov cl, byte [ebx - 0x20fbe2e7]
mov ch, 0
ja 0x1004b089
test eax, 0xc2c42620
rcr cl, 0xa9
fld dword [ebx - 0x107fcf08]
fcmovu st(0), st(3)
daa
lodsd eax, dword [esi]
call [ebx]
sub al, 0x79
ror byte [0x61651352], 0x13
in eax, dx
mov eax, dword [0x47149b6]
xor dl, byte [ecx - 0xd]
dec ebx
pop ecx
cli
xchg edi, eax
dec esi
xor byte [ebp - 0x1e], ah
nop
loop 0x1004b08a
invalid
popfd
call fcn.10049c0c
pushfd
test byte [0x1004b195], 0x59
jne 0x1004b196
dec ebx
mov eax, dword [0x4d3b7c9e]
int3
popfd
add esp, 0x1c
pushfd
test byte [0x1004b222], 0xc
jne 0x1004b223
sbb bh, byte [ecx + 0x63]
jle 0x1004b14a
ja 0x1004b214
xor edi, dword [edi + 0x27]
mov ch, 0x98
xchg byte [edx], bh
pop ebx
fsubr qword [edx + 0x66]
mov ch, 0x5c
mov ebp, 0xe4c391ba
xchg ecx, eax
mov byte [edi], bl
mov cl, 0x28
sub dword [eax + 0x66], esp
shl ecx, 1
or eax, 0x50f6ad9d
enter 0x1235, 0x38
dec eax
into
rcl byte [ebx - 0x2841be70], 0xb4
clc
cmp al, byte [ecx + 0x17]
clc
rcr byte [edx - 0x1e], 0x4e
popal
xchg byte [eax], cl
sub edi, eax
lodsd eax, dword [esi]
push edx
inc ecx
mov dword [ecx], edx
push 0x39d2bf8d
cld
jecxz 0x1004b1d2
ja 0x1004b1ea
leave
mov dword [0x978fcb9], eax
xor eax, edi
movsd dword es:[edi], dword [esi]
lds esi, [edx - 0x7dd48ee6]
adc byte [ecx], cl
cmc
jae 0x1004b212
inc edi
mov ebx, ebp
push 0x8e3ca6b9
popfd
in eax, 0x8b
mov dh, 0x5f
fiadd dword [ecx - 0x24b3e9e5]
popfd
add al, 0xfc
or ebp, dword [esi - 0x68]
mov esi, dword [esi + 0x1b81da5f]
push ss
dec esp
fistp dword [ebp + 0x6e0bfc04]
cwde
popfd
or eax, 0xffffffff
jmp 0x1004b6f9
lea eax, [ebp - 4]
push eax
pushfd
test byte [0x1004b419], 0x55
jne 0x1004b41a
lodsd eax, dword [esi]
xor cl, ch
or cl, byte [esp + ebp*4 + 0x1094136f]
dec ecx
pop ecx
mov esp, esi
adc ecx, dword [edx]
inc edi
or eax, 0x9132c236
dec edi
rcr byte [ebp - 0x96560ba], 0xf1
adc eax, 0xd3eefd20
out dx, eax
aas
dec esi
push ebp
mov ah, 0x73
nop
popfd
dec ebp
mov bh, 4
add dword [eax + 4], edx
in al, dx
pop edx
movsd dword es:[edi], dword [esi]
mov bl, 0xbd
popal
push es
dec ecx
add dword [ebp + edi*4 - 0x49], 0x273ee1c5
daa
out 0x5c, al
and bl, cl
inc ecx
cmc
ja 0x1004b397
cmpsd dword [esi], dword es:[edi]
sahf
jns 0x1004b3bc
fistp word [esi]
xor ch, ah
mov bh, 0x1a
fld qword [esi + edi - 0x57e70062]
cld
sub eax, eax
lodsd eax, dword [esi]
push 0x653192be
inc ebp
mov cl, 5
leave
lodsb al, byte [esi]
scasb al, byte es:[edi]
push ebx
sar dword [ecx + 0x39dae153], cl
das
ja 0x1004b3ab
xchg esi, eax
dec ebx
invalid
scasb al, byte es:[edi]
mov ch, 0x5c
ror ebx, 0xca
mov esi, 0x1b3851d9
pop ss
jne 0x1004b3cd
retf
mov bl, 0xaf
or dword [ebx + edi + 0x3d], esp
jg 0x1004b39d
daa
xchg cl, dl
push 0xffffffffffffffa5
sbb dword [ebx + ebp*8], ebx
mov dword [eax], edx
push esi
lahf
mov byte [ecx - 0x202c6ad2], al
jne 0x1004b3e0
ja 0x1004b471
xor eax, 0xd285d9a9
cmp edx, dword [ecx + 0x21]
out 0xd1, eax
and bh, ah
popfd
push edi
pushfd
test byte [0x1004b4a1], 0x4f
jne 0x1004b4a2
cmpsb byte [esi], byte es:[edi]
add eax, dword [eax + 0x19]
or eax, 0x4804cdd7
inc esi
pop esp
outsb dx, byte [esi]
cmpsd dword [esi], dword es:[edi]
push edx
out dx, eax
sub bl, ah
sbb esi, dword [ebx + 0x47413d66]
push ds
mov cl, 0x45
out dx, al
int 0x4b
stosb byte es:[edi], al
mov al, byte [0x5779ce1]
loopne 0x1004b3e4
pushal
int 0x37
stosd dword es:[edi], eax
daa
outsd dx, dword [esi]
xor edi, dword [edx + 0x17]
mov edx, 0x7167c184
in al, 0xb0
push eax
cmp edx, edx
in eax, dx
out dx, al
sal byte [eax], cl
je 0x1004b44f
nop
mov ch, 0x63
and edx, dword [edi - 0x50563b5e]
sub ebp, dword [eax]
jge 0x1004b3f6
test byte [0xe76ea52f], cl
or eax, 0xe76ea52f
pop ebx
mov dl, 0x29
inc eax
sti
dec esp
sub al, byte [esp + ecx*4 + 0x7ea8f886]
jg 0x1004b4e3
mov word [esi + 0x7f7ea8f8], es
pop ebp
in eax, dx
sahf
mov ecx, 0xa1983c36
inc ecx
bound esp, qword [eax]
movzx ebx, word [ebx + 0x3ddf0bc4]
inc esp
jge 0x1004b4fb
stosd dword es:[edi], eax
mov bl, 0x3a
mov eax, dword [0xdcb55fa1]
popfd
mov dword [ebp - 4], esi
call dword [sym.imp.KERNEL32.dll_GetFileSize]
pushfd
test byte [0x1004b59d], 0x84
jne 0x1004b59e
out 0xd5, eax
int 0xc2
fiadd dword [edi]
arpl di, bp
push ss
mov edx, 0xbf360419
add ecx, dword [edx + 0x313afb1e]
add byte [edi + 0x42657376], dh
push eax
sbb ch, ah
inc ebx
in eax, 0xcb
mov ch, dl
cmp dword [eax - 3], edi
stosb byte es:[edi], al
push ds
inc ecx
mov esi, 0x1eb09bc8
enter 0xffffffffffffb09b, 0x1e
enter 0xffffffffffff9244, 0xfffffffffffffffd
adc esp, dword [edi - 0x3231854]
cld
int 0x54
das
cmpsb byte [esi], byte es:[edi]
add ah, bl
cli
mov bl, 0x44
jne 0x1004b47f
add ecx, 0xfffffffd
lahf
sar ebp, 0x9f
mov eax, dword [0x1c744d65]
sub dword [ebx - 0x7e], edi
nop
mov esi, 0x53753e9e
mov bh, 0xb7
pop ecx
in al, dx
imul eax, dword [esi + edi*8], 0x4c
int 0xfd
mov eax, dword [0x20eeb7df]
sub bh, byte [ecx + 0x5770d451]
inc ecx
push 0xaeb946e4
pop ss
and ch, byte [edx - 0x74869eec]
out dx, al
salc
push esp
xchg esp, eax
add al, 0x64
xchg ebx, eax
mov dword [0x8e1b266d], eax
inc ecx
jo 0x1004b51c
mov esp, 0xa6b2ea58
push cs
aaa
lahf
and bl, bl
int 0x73
pop ds
adc cl, ah
salc
fld xword [ebp + 0x5ec8eaf6]
jae 0x1004b55c
adc al, 0x73
xor dword [ebx + 0x16], ecx
adc bh, byte [ebp - 0x46]
adc al, 0x92
mov dl, 0x2a
sub al, 0x59
int 0xe
and dh, dl
dec edx
add byte [esi - 0x38], bh
jns 0x1004b4f0
jne 0x1004b584
sbb edi, dword [edx + 0x69a3cd21]
pop eax
cmp eax, 0x739b5154
and byte [eax + 0x25], ch
push cs
xor dword [esi + 0x2403514b], eax
inc esi
push ecx
add esp, dword [esi + eax*2]
or al, 0xa1
mov esi, 0xc03a0dfd
mov dl, 0x2f
and byte [esi], 0x3a
push ebp
xchg esi, eax
into
rol byte [esi + 0x5f0182bc], 0xc0
popfd
push edi
mov esi, eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
pushfd
test byte [0x1004b6a4], 0xeb
jne 0x1004b6a5
cwde
dec esp
push es
invalid
popfd
cmp esi, 0xffffffff
je 0x1004b224
mov eax, dword [ebp - 4]
pushfd
test byte [0x1004b6ef], 0xd
jne 0x1004b6f0
insb byte es:[edi], dx
and al, 0x9d
and eax, 0xf675acf
outsd dx, dword [esi]
inc edx
fsubp st(1)
call 0x24261bfd
push ebp
test esp, ebp
push esi
fdiv qword [eax + 0x4a]
fisub word [ebp - 0xf32d32a]
popfd
jl 0x1004b6f6
fistp qword [0x73d8cff3]
dec ebp
push 0x80bbdb8c
adc cl, byte [ecx - 0x80]
pop esi
cwde
movsb byte es:[edi], byte [esi]
popfd
imul eax, eax, 0x3e8
add eax, esi
add byte [ebx], al
invalid
pop edi
pop esi
leave
pushfd
test byte [0x1004b70d], 0xd2
jne 0x1004b70e
cld
jl 0x1004b6c7
jnp 0x1004b760
sbb dword [edi + 0x13], esp
popfd
ret 4
inc edx
mov bh, 4
adc byte [edx], ch
jne 0x1004b843
out dx, al
mov esi, 0x24fdce02
xor dword [edx], eax
xchg ebp, eax
sal esi, cl
out 0x47, eax
xchg edi, eax
pushal
push esp
shr dword [edi], cl
inc edx
push ebx
dec eax
arpl word cs:[bx + di], cx
adc ah, bh
cmp al, 0x67
pop edi
sbb ecx, dword [edi]
inc ecx
dec ebp
dec esp
jne 0x1004b778
jns 0x1004b770
xlatb
leave
not byte [eax + eax + 0x102ca391]
inc esp
pop ebp
cli
pop ebp
or byte [edx + 0x2d], al
mov byte [0x4e2bc652], bh
mov bh, 0x37
enter 0x586a, 0xffffffffffffff97
pop eax
xchg edi, eax
jl 0x1004b722
add dh, bh
push ds
jecxz 0x1004b791
sbb byte [eax - 0x106340e3], ch
xchg ebp, eax
test dword [edx + ecx + 0x1b], ebx
test al, 0x1d
mov edi, 0x8595ef9c
pop esp
or bl, byte [ebx]
shl dword [ecx - 0x38692f85], 0x64
rcl dword [esi], 0x5a
sbb al, 0x5c
pop esp
imul edi, dword [edi + ebp*4 + 0x4373deae], 0x42d5f67a
scasd eax, dword es:[edi]
scasb al, byte es:[edi]
fidiv word [ebx + 0x43]
jp 0x1004b78e
aad 0x42
sub byte [edi + edi + 0x331a7b45], dh
bt dword [edi - 0x6c6283ea], ecx
pop ds
into
out 0xc6, al
mov bh, 0xa0
in eax, 0xe3
add dword [esi + 0x77184a86], edi
dec ecx
sbb edx, dword [ebp - 0x351df59]
aam 0xe4
adc cl, 0xb
out 0xdf, al
test ah, cl
mov edx, 0xa7a21d77
test al, 0x5d
cli
jno 0x1004b792
ret 0x1d77
sbb esp, dword [eax + 0x187a4a4a]
and ebp, 0x11d18714
xor al, 0xd6
dec edi
xor al, byte [edx + 0x4a]
call [edi + 0x1b]
xlatb
xlatb
add byte [ebp - 0x311f1fcf], dl
cmp ecx, dword [ebx]
into
inc esp
jns 0x1004b7c7
push ss
cmp eax, 0x578ccece
mov ch, 0x9b
mov ch, 0x84
test byte [ebp + 0x7b04bb13], 0x72
lahf
jns 0x1004b78f
xchg edx, eax
jge 0x1004b838
mov ecx, 0xcac40fb2
jge 0x1004b7a1
ficomp dword [ebx + 0x4e81de9e]
and ebp, dword [ebx + edx*8]
wait
sahf
fiadd word [ecx - 0x2cd3dcb2]
lodsb al, byte [esi]
je 0x1004b814
xchg ebx, eax
test eax, 0x6d86889c
insd dword es:[edi], dx
jo 0x1004b824
mov ebx, 0x1fbc2a0b
aad 0xab
stosd dword es:[edi], eax
mov bh, 0xc4
push ebp
out 7, eax
shr ebx, 0xbf
popfd
jne 0x1004b84c
adc esi, esi
jl 0x1004b8a7
idiv byte [ebx + ebp*2 + 0x34]
or byte [ecx + 0x64], ch
sbb ecx, dword [ecx]
xor al, 8
imul esp, dword [ebx + esi*8 + 0x1b], 0xe8569d09
push ss
daa
or eax, 0xf69c5600
add eax, 0x1004b90d
inc ecx
popfd
push esi
call fcn.1011df60
push esi
pushfd
test byte [0x1004b90d], 0x41
jne 0x1004b90e
out dx, al
xchg edi, eax
or eax, ebx
outsb dx, byte [esi]
loop 0x1004b843
sti
mov ch, 0x63
pop edi
or edi, dword [ecx + 0x38357e40]
jg 0x1004b82d
mov byte [ebx + ebp*4 + 0x7e7ad803], bl
ja 0x1004b8e7
sub dh, ah
out dx, eax
add ebx, ecx
xchg ebx, eax
mov ah, 5
sti
ror dword [edx], cl
outsd dx, dword [esi]
cld
mov edx, 0x67ac15be
and al, 0xd9
sbb al, 0xb0
out 0x22, al
jae 0x1004b853
cmc
jbe 0x58238d05
dec eax
xchg edi, eax
inc ebx
mov ebx, 0x12df5a54
push ebp
push ss
mov ecx, 0x6310ab14
pop es
or eax, 0xff18327d
jge 0x1004b8db
sbb bh, bh
int1
xchg esp, eax
ficomp word [edx]
fdivp st(6)
cmp esi, ebp
sub dword [ebp + esi*8 + 0x49], ebx
int3
lds esp, [ebp - 0x67]
cdq
pop ds
leave
lodsd eax, dword [esi]
sub al, 0x36
or byte [ecx - 0x20feec7], bl
out 0x64, al
sti
rol dh, cl
adc al, 0x66
cmp eax, 0xc135ad76
xor eax, 0x418702c9
or esp, dword [eax + 0x44]
cmp dword [ecx], edx
invalid
jbe 0x1004b896
xor eax, 0x2c935c1
xchg dword [ecx + 0xb], eax
pushal
inc esp
mov bh, 0xdc
ja 0x1004b8d3
ficomp word [ecx + esi*4 - 0x3d]
push edx
das
mov es, esp
dec edi
sub ah, ch
xchg ebp, eax
popfd
and esi, dword [ebp - 0x18]
ror dword [esi + 0x6b35d273], 1
popfd
popfd
push dword [ebp + 8]
call fcn.100471db
add esp, 0x14
mov eax, esi
pop esi
pushfd
test byte [0x1004b951], 0x61
jne 0x1004b952
imul ecx, ebp, 0x7dd42482
out 0xce, al
push es
fcomp qword [ebp + 0x7af29c55]
jb 0x1004b8d1
scasd eax, dword es:[edi]
dec ebx
in al, dx
cmp al, 0x70
popfd
xchg esp, eax
jl 0x1004b939
nop
cmp byte [esi - 0x46], bl
or al, 0x50
xor dword [edi - 0x6f], ebx
pop ecx
cld
push es
push 0x970f2421
popfd
pop ebp
ret