Function at 0x1005d238
Capabilities:
Encrypt data using aes mixcolumns step
Resolve function by parsing pe exports

Disassembly:
mov eax, dword [0x1008e030]
jmp 0x1001f82b
push eax
call fcn.10056be0
add esp, 4
test eax, eax
jb 0x100448a9
je 0x10032044
jne 0x1001f84a
loopne 0x1001f891
dec ebp
or byte [ebx + 0x6f850f17], cl
mov dword [eax], eax
add byte [ebx + eax + 0x11], dh
test cl, bl
js 0x10048b28
mov eax, dword [esi + 4]
mov eax, dword [ebp + eax]
xchg ch, bh
xchg bh, ch
push edi
pop edi
jmp 0x10024330
push ecx
jmp 0x10024333
push esi
shl ebp, 0x20
call fcn.10057996
add esp, 0x10
jno 0x1005abcc
add dword [ebx + 0x70000368], 0x706b0d03
jo 0x1002434e
or eax, 0x800f706b
js 0x100243ba
jo 0x1005abcc
add eax, dword [eax]
and eax, 0x458b506c
or al, 0x51
push edx
shl dx, 0x20
ja 0x1004f825
jbe 0x1002436d
mov cl, 0x9c
add dl, byte [eax]
jbe 0x1004f825
and eax, 0xfe816683
add al, 0
jne 0x1004bf58
je 0x10024385
jb 0x10024393
ret 0x8166
cmp bx, 0x354
jae 0x1004bf58
jb 0x10024397
jg 0x10024344
mov al, 0xf6
leave
test eax, 0x40e8c166
test cl, 0xa9
shr ax, 0x40
mov edx, dword [edi]
push edi
pop edi
push 0xb
push 0x1002112d
ret
jmp dword [esi]
mov bh, 0x72
call fcn.100419d9
fcom dword [ebp + 0x1005f866]
or eax, dword [eax]
add byte [eax], al
cmp al, 0
add byte [eax], al
sbb al, 0x4a
add dl, byte [eax]
add byte [ecx], al
cmp byte [eax], 0
add byte [eax], al
add byte [ecx], al
add byte [eax], al
rol byte [eax + eax], cl
add byte [eax], al
add dword [eax], eax
add byte [eax], al
inc ecx
add byte [eax], al
push eax
add byte [eax], al
add byte [edx], cl
lodsd eax, dword [esi]
add edx, dword [eax]
rcl dword [edi], cl
add dl, byte [eax]
push eax
add byte [eax], al
add byte [eax + eax], bh
add byte [eax], al
fcom dword [esp + eax]
adc byte [edi - 0x25], al
add eax, 0x52aa510
adc byte [eax], dl
add byte [eax], al
pop ebp
popal
add edx, dword [eax]
add byte [eax], al
add byte [eax], al
salc
inc eax
add dl, byte [eax]
adc cl, byte [edx + 2]
adc byte [edi + ebx*4 + 0x5e577e6d], ch
salc
inc eax
add dl, byte [eax]
adc eax, 0xd810040c
test byte [ecx + eax*4 + 0x4c6], bl
add byte [ecx], dh
fisttp dword [edi]
or byte [ebx], 0x87
add byte [eax], al
xor edi, edi
jb 0x1002750a
pop ebx
mov cx, cx
pop ebp
ret
cmp byte [esi], 0
je 0x10025fec
jne 0x10025fda
xchg edi, eax
invalid
pop edi
pop esi
xor eax, eax
jb 0x1004f75a
pop ebx
pop ebp
mov bp, bp
ret
stc
jb 0x10025ff1
retf 0xfa2
jb 0x10038c28
fldpi
pop ebp
ret
xor al, 0x94
mov ax, word [ebp + eax]
push 0x10020fa2
ret
mov cx, cx
je 0x100364b7
shr ecx, 0x40
jne 0x10028031
sub dword [ebx - 0x78f0a087], eax
insb byte es:[edi], dx
in al, 0
add byte [esi + 3], dh
pop edi
ja 0x100364a4
jbe 0x1002803d
invalid
jbe 0x100364a4
add eax, 0x81e5899b
in al, dx
xor al, 1
add byte [eax], al
test bx, 0xd44e
and edx, 0xffff
jb 0x1005f387
clc
add ecx, 0x11
or eax, edx
jb 0x1005f390
and ecx, 0xffff
jb 0x1003e142
stc
test bp, 0xedee
ja 0x1005952f
shr ch, 0x40
mov bp, bp
jbe 0x10028a2b
cpuid
ret
jbe 0x1005952f
invalid
test al, 1
jb 0x100440ab
je 0x100297c4
jne 0x100297c3
pop ebx
push 0xffffffffffffff8c
inc edx
sar eax, 1
dec ecx
jno 0x10031f18
jo 0x100297d2
imul esi, dword [ecx + 0x12], 0x8740800f
add byte [eax], al
jo 0x10031f18
fldenv [ecx - 1]
invalid
mov al, byte [ebp + 0xb]
push esi
shr eax, 0x40
mov byte [esi + 0xba], bl
jmp 0x100210b4
mov eax, dword [edi]
ja 0x1002eac7
jbe 0x1002bd1c
push esp
test ebp, esi
pop ss
push cs
jbe 0x1002eac7
xor al, 0x4e
jmp dword [esi]
mov esi, dword [ebp + esi]
jmp dword [esi]
test dword gs:[edi], ecx
xchg byte [ebx + 0x1f], bh
add dword [eax], eax
fiadd dword [ecx + eax*4 - 0x3c]
add al, 0
add byte [eax], al
add esp, 4
mov ecx, ecx
mov dword [ebp + 8], ecx
mov bx, word [eax + 0x1e]
and ebp, ebp
jno 0x1002eae0
inc ebx
pop ds
mov bh, 0xd4
mov eax, dword [0x8adb810f]
add al, byte [eax]
jno 0x100575c1
and eax, 0xeac1660f
inc eax
call fcn.1002675b
or esp, dword [esp + eax + 0x10]
add dword [eax], eax
add byte [eax], al
cmp byte [eax], al
add byte [eax], al
movsd dword es:[edi], dword [esi]
sub al, byte [0x5010]
add byte [0x3c1002f7], al
add byte [eax], al
add byte [ecx], al
add byte [eax], al
add eax, 0x411002f7
add byte [eax], al
add byte [eax + eax], bh
add byte [eax], al
loopne 0x1002eabd
add dl, byte [eax]
jne 0x1002eb0a
add eax, 0x4fb3310
adc byte [0x284e89e5], ah
ret 0x87f6
add byte [eax], al
mov bp, bp
mov dword [ebp - 0x78], 0x48
mov dword [ebp - 0x74], 5
mov dword [ebp - 0x70], ecx
call fcn.1006a970
mov edx, dword [ebp - 0x34]
mov edi, dword [ebp - 0x14]
xchg si, ax
xchg si, ax
mov ebx, eax
xchg bp, di
xchg di, bp
lea ecx, [ebp - 0xb0]
mov dword [ebp - 0x60], ebx
lea eax, [ebp - 0x120]
push 0x10027df8
ret
jne 0x100289e7
je 0x10031ed1
ja 0x10031f09
jo 0x10031e61
xor byte [edx + 0xf], dh
test byte [eax], dl
imul edi, edi, 0xffffffff
je 0x100289e7
fisubr dword [ebx]
xor eax, eax
jb 0x1004f73d
pop ebx
pop ebp
shr bl, 0x40
ret
mov eax, dword [ebp + 0xc]
mov ebx, 0x40
xchg cl, ah
xchg ah, cl
mov word [eax], di
pop edi
mov word [eax + 2], bx
pop esi
mov eax, 1
jne 0x10025fc2
je 0x10031f10
mov esp, es
loopne 0x10031ec3
arpl word [edi], cx
test byte [eax + eax*2 + 0x32daffff], ch
je 0x10025fc2
fidiv dword [edx]
jne 0x100297b0
je 0x10031f26
and al, ah
or esi, dword [0x142ae914]
add al, byte [eax]
xor eax, 0xffdb88fb
lodsb al, byte es:[esi]
jmp fcn.10053355
sub ecx, dword [edi]
and eax, 0x70ffff22
add dh, dl
pop edi
jo 0x10024219
fsub dword [edi + edi*8 + 0x26]
in eax, 0xd2
shl edi, 0x20
call fcn.1002b84f
add eax, 0x45e8bae
mov bl, bl
mov eax, dword [ebp + 0x38]
shr esi, 0x40
mov edx, dword [ebp + 0x40]
lea esi, [esi + 8]
div dword [ebp + ebx]
lea ebp, [ebp]
mov dword [ebp + 0x38], eax
mov edx, edx
mov dword [ebp + 0x40], edx
jmp dword [esi]
cmp ax, 0x354
jae 0x1001f825
jb 0x10032044
pop ebp
mov ebx, 0xe0300d8b
or byte [eax], dl
mov ecx, dword [0x1008e030]
push ecx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
shl al, 0x20
mov dword [0x1008e030], ebx
jmp 0x10034fb2
pop ecx
ror byte [edi], 1
test dword [edi - 0x4f], edi
add byte [eax], al
je 0x10032627
and esp, dword [ecx + 0x74840f52]
mov cl, 0
add byte [0xb6efe846], al
je 0x1003d7a1
add eax, 0xb6efe846
invalid
and dl, 0xc0
loopne 0x1003440a
lea ebx, [ebx]
jne 0x1004a2f3
je 0x100343fa
stosd dword es:[edi], eax
mov al, byte [0xf7e0247]
test bl, dh
pop esi
add dword [eax], eax
je 0x1004a2f3
add eax, 0x4f172e7
adc byte [edi - 0x72], al
add edx, dword [eax]
and eax, 0xb8870f4e
test eax, 0xedc00002
inc eax
mov ebx, ebx
jbe 0x1003441f
nop
mov bh, 0xd2
jp 0x10034435
push 0x100507f8
ret
add byte [eax], al
cld
invalid
mov edx, dword [edi]
push 0xb
push edx
mov bx, bx
call fcn.1003c459
ja 0x10027808
jbe 0x10034fca
mov bl, 3
jbe 0x10027808
fcom dword [edx - 0x73]
and al, 4
jne 0x10037a83
je 0x10034fe0
enter 0x6617, 0xffffffffffffffc1
call 0xaf493927
add dword [eax], eax
shr ax, 0x40
jmp fcn.1004ef2e
xor dl, cl
jb 0x1003261a
sub dl, 0x1f
push 0x1004deff
ret
je 0x100360e2
jne 0x100360ce
cpuid
xchg ebx, eax
ret
shr dx, 0x40
pop edi
pop esi
clc
xor eax, eax
jb 0x10043386
pop ebx
pop ebp
ret
or ax, ax
test di, di
jb 0x1005c59b
jne 0x1003610d
je 0x100360f8
jno 0x10036176
pop edi
pop esi
xor eax, eax
jb 0x1005c5c9
pop ebx
pop ebp
ret
mov eax, dword [ebp + 0xc]
mov ebx, 1
mov word [eax], di
jne 0x1005e662
je 0x10036122
wait
mov edx, 0x853a840f
add al, byte [eax]
je 0x1005e662
add eax, 0xbe896684
mov esp, 0x66000000
shr ecx, 0x40
call fcn.1002668a
mov dl, dl
shr cl, 0x40
ja 0x10053f39
mov cl, cl
shl bh, 0x20
jbe 0x1003614f
mul byte [ecx*4 - 0x221b79f1]
add dword [eax], eax
jbe 0x10053f39
add eax, 0xb226ff89
lds ecx, [ebp + 0x40eac009]
adc byte [eax], bh
add byte [eax], al
add byte [eax], bh
add byte [eax], al
add al, bl
adc al, 4
adc byte [esi + 0x721005b4], ah
int1
add al, 0x10
iretd
pop esi
cmp ch, ch
xor eax, eax
jb 0x1005c5ea
pop ebx
pop ebp
ret
test di, di
jb 0x100343e5
jne 0x10031ee9
je 0x100364ca
jae 0x10036505
pop edi
pop esi
and cx, cx
test eax, ecx
jae 0x100364d8
sub byte [ecx + 0xfad5cb9], cl
cmp ebx, 0xffffffb9
invalid
jae 0x10031ed9
xor eax, 0xfc931cd
xor byte [esi - 0x6a], 0
add byte [esi - 0x75], ah
dec edi
and bl, ch
push ecx
push esi
call fcn.10050cf1
xor edx, edx
jb 0x100249a7
mov dx, word [edi + 0x24]
push edx
push esi
mov edi, edi
call fcn.10057107
push 0x13b
push esi
lea esi, [esi]
call fcn.1002fd29
add esp, 0x18
jmp fcn.10028160
and edx, dword [ebx + ecx*4 - 0x173eb3a3]
inc eax
mov edx, dword [esi + 8]
mov eax, dword [esi + 4]
xchg cx, ax
xchg cx, ax
mov dh, dh
lea esi, [esi + 0xc]
cmp dx, dx
and byte [ebx + edx], al
jb 0x1004d32a
shl ax, 0x20
jmp dword [esi]
test ecx, 0x4000
mov ebp, 0x4c481
add byte [eax], al
and eax, 0xffff
jb 0x100533d2
mov dword [esi + 0x30], eax
mov dword [esi + 0x34], 0x2332
push edi
pop edi
jmp fcn.1002e92b
test di, di
jb 0x1004f764
jne 0x10048003
mov al, al
je 0x10038c3d
rol edi, cl
pop edi
mov edx, edx
pop esi
push 0x10047ff6
ret
call fcn.1002a004
and eax, 0x217d377
adc byte [eax], bh
add byte [eax], al
add byte [eax], bh
add byte [eax], al
add al, bl
adc al, 4
adc byte [ebx - 0x1c], dl
add edx, dword [eax]
add eax, 0x3d1002f7
add byte [eax], al
add byte [ecx], bh
add byte [eax], al
add byte [0x391002f7], al
add byte [eax], al
add byte [0x1c000000], bh
dec edx
add dl, byte [eax]
add byte [ecx], ah
cmp byte [eax + eax], 0
add byte [eax], al
and dword [eax], eax
add byte [edx], bl
add byte [eax], al
add byte [eax], al
adc byte [eax], al
add byte [eax], al
inc eax
add byte [eax], al
cmp byte [eax], al
add byte [eax], al
jb 0x10038de5
add al, 0x10
adc dword [edx + eax], ebp
adc byte [eax], bh
add byte [eax], al
add byte [eax], bh
add byte [eax], al
add byte [esi], dh
cmp al, 4
adc byte [edi - 0xb], bh
add edx, dword [eax]
mov dword [edx - 0x71caeffb], ebp
add edx, dword [eax]
push esp
mov word [ecx + 0x7f1005aa], cs
cmc
add edx, dword [eax]
xor al, 0xb7
push 0x10043b3e
ret
shr cl, 0x40
push 0
push 0x1008e2ac
jmp 0x10039401
push esi
js 0x1004c6da
jns 0x10039411
aaa
push ebp
add byte [ebx], dh
jg 0x10039431
jns 0x1004c6da
fdivr dword [edx - 0x1a107af1]
invalid
add byte [eax], al
cmp esi, eax
xchg cx, ax
xchg cx, ax
jl 0x1005745e
jge 0x10039445
outsb dx, byte gs:[esi]
cmp edx, ebx
pop esi
xor eax, eax
jb 0x10037199
pop ebx
pop ebp
ret
lea esp, [esp + 4]
shr edx, 0x40
xchg ch, bh
xchg bh, ch
mov ah, ah
xchg bh, cl
xchg cl, bh
shl al, 0x20
mov eax, dword [ebp + 0x38]
mov ecx, dword [ebp + 0x3c]
mov edi, dword [ebp + 0x54]
push 0x100356c7
ret
cmp byte [esi], 0
shl ax, 0x20
je 0x10058f99
jne 0x1003a603
sahf
mov esi, 0x997fe983
add dword [eax], eax
iretd
jmp loc.10053f87
cmp al, 0x43
jne loc.10053f87
je 0x1003a617
jns 0x1003a5ce
pop es
cmp byte [esi], 0
jno 0x10053f7d
jo 0x1003a624
xchg ebx, eax
cmp cl, byte [edi]
adc byte [ebx - 0x67], 1
add byte [edx + 0x24a1c34], al
adc byte [eax], al
inc ecx
add byte [eax + 0x48], al
add byte [ecx], al
add byte [eax], al
add al, 0
jo 0x10053f7d
xor byte [esp + ebx], 0x4a
add dl, byte [eax]
add byte [ecx], al
or byte [eax], 0
add byte [eax], al
add dword [eax], eax
add byte [eax + eax], al
add byte [eax], al
add byte [ecx], al
add byte [eax], al
add byte [ecx], al
add byte [eax], cl
add byte [eax], al
or ch, byte [ebp - 0x143feffd]
add eax, 0x3d7a310
adc byte [0x40000000], al
add byte [eax], al
add byte [eax], ah
cdq
add eax, 0x6e7710
add byte [eax], bh
add byte [eax], al
add dl, al
sbb eax, dword [eax + edx]
ja 0x1003a6e0
add byte [eax], al
cmp byte [eax], al
add byte [eax], al
push ds
add eax, 0x4010
add byte [eax + eax], bh
add byte [eax], al
fcom dword [esp + eax]
adc byte [ecx + 8], dl
add al, 0x10
sbb al, 0x4a
add dl, byte [eax]
add byte [ecx], al
cmp byte [eax], 0
add byte [eax], al
add byte [ecx], al
add byte [eax], al
mov byte [eax], al
add byte [eax], al
add byte [ecx], al
add byte [eax], al
add byte [ecx], al
add byte [eax], al
add byte [eax], al
or ch, byte [ebp - 0x799effd]
add eax, 0xc10
add byte [eax + eax], bh
add byte [eax], al
xchg esp, eax
mov ebx, 0xffff1002
add byte [eax], al
inc eax
add byte [eax], al
add al, bl
adc al, 4
adc byte [ebp + 8], ch
add al, 0x10
xchg esp, eax
mov ebx, 0xffff1002
add byte [eax], al
cmp al, 0
add byte [eax], al
fcom dword [esp + eax]
adc byte [edx - 0x2ceffa22], cl
pop ss
add dl, byte [eax]
inc eax
add byte [eax], al
add byte [eax + eax], bh
mov bl, dh
add eax, 0x217d310
adc byte [eax], al
add byte [eax], al
cmp al, 0
add byte [eax], al
fcom dword [esp + eax]
adc dh, bl
add edx, dword ds:[eax]
xchg ebp, edx
add dl, byte [eax]
or byte [eax], al
add byte [eax], al
inc eax
add byte [eax], al
add byte [ebx + edi*4 + 0xff1002], dl
add byte [eax], al
inc eax
add byte [eax], al
add al, bl
adc al, 4
adc al, ch
add edx, dword ds:[eax]
cmp al, 4
adc byte [ecx - 0x2a], dh
add edx, dword [eax]
mov dword [edx - 0x58d4effb], ebp
add edx, dword [eax]
dec edi
int 0x5b
mov dword [edx - 0x298eeffb], ebp
add edx, dword [eax]
and eax, 0xf4858d97
invalid
mov word [esi + 0xbc], di
ja 0x100540a9
jbe 0x10042426
shl byte [ebp + 0x7a], 0xb7
loopne 0x10042436
jbe 0x100540a9
xchg byte [ebp + 0x1c], bh
add dword [eax], eax
invalid
jbe 0x10042444
shl byte [ebx], cl
xchg dx, si
xchg si, dx
jmp 0x1005c1c2
add byte [eax + ecx*4], dh
lea edi, [edi]
jnp 0x10045b32
mov bl, bl
lea esi, [esi + 8]
jmp dword [esi]
push esi
shl eax, 0x20
call fcn.1002b83b
fcomp st(3)
add byte [ebx + edx], al
jmp dword [esi]
rol dl, cl
js 0x10046aab
mov bp, bp
jns 0x100433ac
insd dword es:[edi], dx
add al, 0x8b
xchg esi, eax
test byte [edi + 0xf], bh
mov ecx, edi
add byte ss:[eax], al
jns 0x10046aab
or dh, 0x8f
inc esp
and al, 0xfc
mov eax, dword [eax]
sub ecx, eax
mov dword [edi + 4], ecx
pop edi
jne 0x1004b9b2
je 0x100433ca
inc ecx
nop
je 0x1004b9b2
xor eax, 0xfe8166fe
add al, 0
jne 0x1001f825
je 0x100433e1
aas
push es
test eax, edx
jno 0x100433e7
outsb dx, byte [esi]
or byte [edi], 0x81
dec ecx
in al, dx
invalid
jno 0x10032036
xor al, 0xb9
mov ecx, dword [ebp + 0x14]
mov cx, cx
dec ebp
adc al, 0x66
mov ecx, ecx
push edx
push eax
mov esi, esi
jmp 0x100433fb
push ecx
jmp 0x100433fe
push edi
push 0x9c40244c
push ebx
call dword [0x1008e788]
mov bx, bx
push edi
ja 0x10047b37
jbe 0x1004341d
aas
retf
jmp 0x1004342d
jbe 0x10047b37
jbe 0x100433f0
add al, 0x10
inc esp
add byte [eax], al
add byte [eax + eax], bh
add byte [eax], al
movsd dword es:[edi], dword [esi]
sub al, byte [0x4410]
add byte [ebx + edi*4 + 0xff1002], dl
add byte [eax], al
cmp al, 0
add byte [eax], al
fcom dword [esp + eax]
adc byte [ecx + 0x1c10039c], bh
dec edx
add dl, byte [eax]
add byte [edx], al
add byte [eax + eax], bh
add byte [eax], al
add byte [edx], al
add byte [eax], al
add byte [ecx], ah
add byte [eax], 0
add byte [eax], al
and dword [eax], eax
add byte [ebp], dl
add byte [eax], al
and byte [eax + 0x29941005], ch
add eax, 0x4010
add byte [eax + eax], al
add byte [ebp + 0x4c10052a], ah
add byte [eax], al
add byte [ecx], dl
sti
add al, 0x10
or dl, byte [edx - 0x64]
mov esi, 0x4fce1005
sub byte [edx + 0x4c], bl
jo 0x1004341c
add edx, dword [eax]
add al, byte [eax]
add byte [eax], al
cmp byte [eax], al
add byte [eax], al
stosd dword es:[edi], eax
add eax, 0x4360d10
adc byte [ecx + ebp + 0x401005], ch
add byte [eax], al
inc eax
add byte [eax], al
add bl, ch
pop ds
add eax, 0x434bf10
adc byte [ecx - 0x13], ah
in eax, dx
mov dword [0x201003d7], eax
add byte [eax], al
add byte [eax], al
add byte [eax], al
sbb al, 0x4a
add dl, byte [eax]
add byte [ecx], ah
add byte [eax], 0
add byte [eax], al
and dword [eax], eax
add byte [eax + eax + 0x10000000], bh
add byte [eax], al
add byte [eax], al
add byte [eax + eax], bh
add byte [eax], al
jb 0x100434be
add al, 0x10
sbb al, 0x4a
add dl, byte [eax]
add byte [ecx], ah
add byte [eax], 0
add byte [eax], al
and dword [eax], eax
add byte [eax + eax + 0x12000000], bh
add byte [eax], al
add byte [edx], al
add byte [eax], bh
add byte [eax], al
add byte [eax], ah
test al, 5
adc byte [edi - 0x56], ch
add eax, 0x4410
add byte [eax + eax], al
add byte [ecx + ebp + 0x91005], ch
add byte [eax], al
cmp al, 0
add byte [eax], al
insb byte es:[edi], dx
aad 4
adc byte [edi], al
add byte [eax], al
add byte [eax], bh
add byte [eax], al
add byte [ecx], bh
or eax, 0x381002
add byte [eax], al
cmp al, 0
add byte [eax], al
fcom dword [esp + eax]
adc byte [edx + 0x4f100296], ah
mov dword [0xc1005], eax
add byte [eax], al
cmp byte [eax], al
add byte [eax], al
outsd dx, dword [esi]
stosb byte es:[edi], al
add eax, 0x3810
add byte [eax], bh
add byte [eax], al
add byte [ecx], dl
sub al, 2
adc byte [eax], bh
add byte [eax], al
add byte [eax + eax], al
add byte [edx + 0x321003dd], al
mov ebp, 0xcd1005
add byte [eax], al
cmp al, 0
add byte [eax], al
fcom dword [esp + eax]
adc al, 4
adc byte [edx + 0x5e], dh
add al, 0x10
inc esi
adc byte [edx], al
adc byte [0x44000000], ah
add byte [eax], al
add byte [edx], dh
mov ebp, 0x381005
add byte [eax], al
inc esp
add byte [eax], al
add al, bl
adc al, 4
adc byte [esi - 0x7feffba2], cl
mov esi, 0x65dd1005
add byte [eax], al
cmp al, 0
add byte [eax], al
jbe 0x10043580
add al, 0x10
inc esp
add byte [eax], al
add byte [eax + eax], bh
add byte [eax], al
movsd dword es:[edi], dword [esi]
sub al, byte [0x4410]
add byte [ebx + edi*4 + 0xff1002], dl
add byte [eax], al
cmp al, 0
add byte [eax], al
fcom dword [esp + eax]
adc byte [edx + ecx*8 + 0x4a1c1005], dh
add dl, byte [eax]
add byte [edx], al
add byte [eax + eax], bh
add byte [eax], al
add byte [edx], al
add byte [eax], al
add byte [ecx], ah
add byte [eax], 0
add byte [eax], al
and dword [eax], eax
add byte [ebp], dl
add byte [eax], al
and byte [eax + 0x2aa51005], ch
add eax, 0x4c10
add byte [ecx], dl
sti
add al, 0x10
mov dh, 0x18
popfd
wait
add dl, byte [eax]
cmp byte [eax], al
add byte [eax], al
cmp byte [eax], al
add byte [eax], al
fcom dword [esp + eax]
adc bl, dl
retf 0x1005
pop edi
push 0x1003242c
ret
mov ecx, dword [ebp + 0xc]
xchg dx, si
xchg si, dx
lea eax, [ebp - 0x140]
push eax
mov edx, dword [ecx]
jmp 0x10045ad5
push edx
call dword [sym.imp.KERNEL32.dll_FindNextFileA]
test eax, eax
jb 0x100386b1
je 0x1005abd5
jne 0x10045af2
loopne 0x10045b53
sub bh, byte [eax + 0x6b]
lea eax, [ebp - 0x114]
jmp 0x1005f287
mov esi, dword [esi + 4]
mov esi, dword [ebp + esi]
mov ah, ah
mov esi, dword [esi]
jmp dword [esi]
add byte [esi + ebp*8], dh
jmp 0x10045b57
push edi
jmp fcn.1002dcf2
mov ebx, dword [ebp + 0x4c]
mov eax, dword [esi + 4]
shr bx, 0x40
mov edx, dword [esi + 8]
xchg ah, ch
xchg ch, ah
mov ax, word [ebp + eax]
lea esi, [esi + 0xc]
push 0x100450b6
ret
mov esi, eax
call fcn.1003a292
push 0x1005c162
ret
cmp byte [esi], 0
je 0x10048045
jne 0x1004802e
leave
pop ds
mov ebp, 0xd5865f7f
pop edi
xchg ch, dl
xchg dl, ch
pop esi
xor eax, eax
jb 0x1004ae2e
mov ebx, ebx
pop ebx
push ebx
pop ebx
pop ebp
ret
test di, di
jb 0x1004ae57
js 0x10058f5d
jns 0x10048058
xchg ebx, eax
cmp byte [edi], cl
mov edi, edi
push cs
add dword [eax], eax
jns 0x10058f5d
fcmove st(0), st(1)
cmp ax, di
add eax, 0x6be2e8d5
std
dec dword [ebx + 0x458b2055]
sbb al, 0x81
les eax, [eax + eax]
add byte [eax], al
push ecx
mov ecx, dword [ebp + 0x18]
push edx
xchg ch, ah
xchg ah, ch
mov edx, dword [ebp + 0x14]
push eax
mov eax, dword [0x1008e030]
jmp 0x100496a4
push ecx
push edx
jmp 0x100496a9
push edi
push 0x9c402458
jmp 0x100496b1
push eax
call dword [0x1008e788]
push edi
xchg dx, bx
xchg bx, dx
mov ebx, eax
call fcn.1003a292
add esp, 4
pop edi
jmp fcn.1002d779
sbb eax, 0x66d98766
xchg ebx, ecx
mov ebx, dword [ebp + 0x4c]
mov eax, dword [esi + 4]
mov edx, dword [esi + 8]
mov al, byte [ebp + eax]
lea esi, [esi + 0xc]
add ecx, 0
jno 0x1004ae51
sbb byte [ebp + 0x5377740b], al
jno 0x10043394
ficom dword [eax + esi*2 - 0x7b]
add edx, dword [eax]
add dword [eax], eax
add byte [eax], al
cmp byte [eax], al
add byte [eax], al
stosd dword es:[edi], eax
add eax, 0x48f6710
adc bl, ch
pop ds
add eax, 0x4ae7710
adc byte [ebx + 0x24a1c20], ch
adc byte [eax], al
popal
add byte [eax + 0x40], al
add byte [ecx], ah
add byte [eax], al
mov esp, 0
adc byte [eax], al
pop dword [eax + edx]
jmp 0x1004ae8e
add byte [eax], al
inc eax
add byte [eax], al
cmp al, 0
add byte [eax], al
jb 0x1004ae6a
add al, 0x10
outsd dx, dword [esi]
stosb byte es:[edi], al
add eax, 0x3c10
add byte [eax], bh
add byte [eax], al
add byte [esi], dh
cmp al, 4
adc ah, ah
imul eax, dword [eax + edx], 0xffffff89
stosb byte es:[edi], al
add eax, 0x4aebc10
adc byte [eax - 0x7e], dh
retf 0x87bd
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
pop ebp
jno 0x100413ef
jo 0x100518d3
inc ebx
call 0x1fd80b9b
adc byte [esi], 0xfb
invalid
jo 0x100413ef
xor al, 0x93
mov al, byte [esi]
inc esi
test al, al
jb 0x1004967e
lea eax, [eax]
mov byte [ebp + 8], al
je 0x1005fdf5
jne 0x100518f7
nop
cpuid
ret
mov dx, dx
mov edx, dword [ebp + 8]
jmp 0x100518fe
push edx
call fcn.10056bd1
add esp, 4
add si, 0
cmp al, 0x30
jl 0x1004518b
jge 0x1005191e
pop eax
cpuid
ret
cmp al, 0x50
je 0x1005e33d
jne 0x1005192b
aaa
push ebp
sub esi, 0
jae 0x10051933
test byte [ebx + esi*2 - 0x47a47cf1], ah
add byte [eax], al
jae 0x1005d194
fnop
mov dl, dl
xchg esi, edx
mov ch, ch
mov ax, ax
xchg edx, esi
mov dx, dx
mov word [esi + 0xbc], dx
call fcn.1003da54
mov al, byte [ebp + 0xb]
shr di, 0x40
shr dx, 0x40
push esi
shl esi, 0x20
mov byte [esi + 0xba], bl
mov edi, edi
mov byte [esi + 0xbb], al
mov si, si
ja 0x10042412
jbe 0x10051980
mov dh, byte [eax]
jbe 0x10042412
fdecstp
push eax
call fcn.1001f5de
shr dx, 0x40
mov ecx, eax
ja 0x1002bd0d
jbe 0x100519a1
ret
jbe 0x1002bd0d
ficomp dword [esi]
mov esi, dword [esi + 4]
jno 0x1002cfc5
jo 0x100519b7
cmp dword [ecx], esp
push edi
jo 0x1002cfc5
xor al, 0xca
mov ecx, 0xd4d4d4d4
mov dword [esi + 0x2c], ecx
mov dword [esi + 0x30], ecx
cmp byte [esi], 0
shr ecx, 0x40
ja 0x10028020
jbe 0x10052a5a
sbb dword [edx + 0x55c0860f], edi
std
invalid
jbe 0x10028020
fldcw word [ebp - 0x744f78f1]
std
dec dword [ebp + 0x2403761b]
xor dh, byte [edi]
jbe 0x1002b618
invalid
call fcn.1003e944
shl ebx, 0x20
shl bx, 0x20
mov cl, byte [ebp + 0xc]
mov dx, word [ebp + 0x10]
push eax
lea esi, [esi]
ja 0x10043388
shr bp, 0x40
lea ecx, [ecx]
jbe 0x100540d1
aad 0x9c
les ecx, [edi]
xchg byte [ecx + 0x35fffef2], dh
inc eax
jmp fcn.100407fd
jbe 0x10043388
xor eax, 0xc71fe940
invalid
inc ebx
add eax, 0x10
call fcn.10031620
sub byte [ecx + 0x11e981], 0
add byte [esi - 9], ah
ret 0xd6f6
enter 0xffffffffffffed89, 0x6a
sbb al, 0x55
pop ebp
push 0x10036369
ret
jne 0x10058f7c
je 0x10058f6b
sub dh, bl
scasb al, byte es:[edi]
pushal
jae 0x10058f07
pop edi
pop esi
xor eax, eax
jb 0x10043399
pop ebx
mov bh, bh
pop ebp
ret
mov eax, dword [ebp + 0xc]
mov ebx, 2
mov word [eax], di
pop edi
mov word [eax + 2], bx
pop esi
mov edi, edi
mov eax, 1
pop ebx
pop ebp
ret
xor eax, eax
jb 0x1002edd3
mov esp, ebp
js 0x100518c5
xchg ebp, ebx
xchg ebx, ebp
jns 0x1005abf0
loope 0x1005ac48
or byte [ecx - 0x34], ah
jns 0x100518c5
fsubr st(0)
mov dword [0x31003d7], eax
add byte [eax], al
add byte [eax], bh
add byte [eax], al
add byte [0xd10040d], bl
add byte [eax], al
add byte [eax + eax], bh
add byte [eax], al
xchg esp, eax
mov ebx, 0xffff1002
add byte [eax], al
cmp byte [eax], al
add byte [eax], al
fcom dword [esp + eax]
adc byte [ebx], bl
and byte [0x1f2fa10], al
adc byte [esi], bl
add eax, 0x3810
add byte [eax + eax], bh
add byte [eax], al
fcom dword [esp + eax]
adc byte [ebx - 0x6beffad2], dh
sub dword [0x4010], eax
add byte [eax + eax], bh
add byte [eax], al
xchg ebp, edx
add dl, byte [eax]
or al, 0
add byte [eax], al
cmp byte [eax], al
add byte [eax], al
sbb al, 0x4a
add dl, byte [eax]
add byte [ecx], al
cmp byte [eax], 0
add byte [eax], al
add byte [ecx], al
add byte [eax], al
cli
add byte [eax], al
add byte [eax], al
add dword [eax], eax
add byte [eax], al
inc ecx
add byte [eax], al
push eax
add byte [eax], al
add byte [edx], cl
lodsd eax, dword [esi]
add edx, dword [eax]
jle 0x1005acf8
add dl, byte [eax]
add byte [eax], al
add byte [eax], al
cmp al, 0
add byte [eax], al
xchg esp, eax
mov ebx, 0xffff1002
add byte [eax], al
push eax
add byte [eax], al
add al, bl
adc al, 4
adc byte [ebx - 0x2ceffad2], bh
pop ss
add dl, byte [eax]
push eax
add byte [eax], al
add byte [eax + eax], bh
add byte [eax], al
fcom dword [esp + eax]
adc byte [esi + ebp*8], dl
add al, 0x10
sbb eax, 0x4010040d
add byte [eax], al
add byte [eax], bh
add byte [eax], al
add byte [ebp + 0x5010052a], ah
add byte [eax], al
add ch, bh
stosb byte es:[edi], al
add eax, 0x845010
add byte [eax + eax], bh
add byte [eax], al
fcom dword [esp + eax]
adc byte [edi], bl
out dx, al
add al, 0x10
sbb al, 0x4a
add dl, byte [eax]
add byte [eax], al
add byte [eax + eax], bh
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [ecx], ah
add byte [eax], 0
add byte [eax], al
and dword [eax], eax
add byte [eax + eax], bl
add byte [eax], al
jb 0x1005acc7
add al, 0x10
dec ebp
fiadd dword [edx]
adc byte [esi - 0x49effb51], ah
add al, 3
adc byte [edx], cl
lodsd eax, dword [esi]
add eax, 0xb6144610
add al, 3
adc byte [esi + 0x251004af], ah
or byte [edi + 0x5bfc2444], 0x89
pop dword [esp - 4]
pop ebx
mov esp, ebp
mov cl, cl
pop ebp
ret
mov al, al
jmp dword [esi]
cmp al, 0x58
je 0x10052a4a
jne 0x1005d1a2
cpuid
ret
cmp al, 0x49
je 0x10025fca
jne 0x1005d1b0
cpuid
nop
ret
push edx
pop edx
cmp al, 0x53
je 0x1004801e
jne 0x1005d1c1
int1
cwde
invalid
cmp al, 0x45
jne 0x1003a60a
je 0x1005d1cd
ror byte [esi + 0x471c485], cl
test esp, eax
jno 0x1005d1d5
cpuid
ret
jno 0x1003a5f1
jmp 0x1005d1dc
push eax
jmp 0x1005d1df
push esi
xchg cl, dl
xchg dl, cl
shr al, 0x40
mov al, al
shr si, 0x40
mov byte [esi + 0xba], cl
mov byte [esi + 0xbb], 0
jne 0x10038dbf
shl si, 0x20
je 0x1005d20a
enter 0xfffffffffffffd03, 0xf
test byte [edi - 0x27000245], ch
pop ecx
mov ebx, dword [ecx]
shr edx, 0x10
mov word [esi + ebx*4 + 2], dx
xchg di, ax
xchg di, ax
mov ebx, dword [ecx]
js 0x10056f08
je 0x10038dbf
fcomp dword [ecx - 0x75]
sbb ecx, eax
ljmp 0x29e
shr dh, 0x40
jns 0x1005d230
adc dword es:[eax + 0xf], ebp
mov edx, edx
pushfd
invalid
jns 0x10056f08
cmp byte [eax], 0x8f
inc esp
and al, 0xfc
inc edx
cmp ax, 0xffff
jne 0x100480af
je 0x1005d24c
cmp byte [esi - 0x437e9903], bh
adc dl, ah
loop 0x1005d25b
adc bh, bh
dec dword [edi]
test dword [ecx - 0x75], esi
invalid
push dword [edx + eax - 0x1a]
test eax, 0xf6ff016a
cmp byte [esi], 0
jno 0x100360c2
jo 0x1005e34c
nop
cpuid
ret
jo 0x100360c2
xor al, 0xbe
mov dword [ebp + 0x38], eax
jmp dword [esi]
xchg cl, bl
xchg bl, cl
push esi
xchg bl, cl
xchg cl, bl
jmp 0x1005f292
push eax
call fcn.1005b8d1
mov esi, dword [ebp + 8]
inc eax
lea ecx, [ebp - 0x114]
push eax
jno 0x1002432d
jo 0x1005f2b1
test dword [edi + 0xffd0040], 0xfc507680
inc dword [edx - 0x5f97affa]
loop 0x1005f2c6
jo 0x1002432d
add byte [esi], 0x50
push 0x1008e2a0
jmp 0x1005f2c0
adc bl, ch
push esi
call fcn.1006aba0
lea edx, [ebp - 8]
jmp 0x1005f2cb
add byte [ebp - 0x1407ab], cl
push 0x10047279
push edx
push 0x10047279
jne 0x100393f6
je 0x1005f2e0
scasd eax, dword es:[edi]
sub esi, edx
xor eax, 0x840fea7a
adc byte [ecx - 0x3e270003], ah
je 0x100393f6
fadd st(1)
mov eax, dword [ebp + 0xc]
mov word [eax], di
pop edi
mov word [eax + 2], bx
pop esi
mov eax, 1
pop ebx
push 0x10050873
ret