Function at 0x90f0f4
Capabilities:
Encode data using xor

Disassembly:
jbe 0x90e1a6
pop ecx
popal
pushal
pushal
pushal
popal
or si, 0x5442
popal
mov edx, 0x6217f6d7
popal
push edi
mov dword [esp], 0x4467b800
mov dword [esp], edi
jmp 0x90e1db
xor eax, eax
jge 0x90e1f0
jmp 0x90e1f0
lodsb al, byte [esi]
jo 0x90e20b
jmp 0x90e20b
push edx
mov dh, al
mov bl, dh
mov edx, dword [esp]
add esp, 4
jnp 0x90e23a
je 0x90e23a
jmp 0x90e23a
jl 0x90e24c
ja 0x90e24c
jg 0x90e24c
push edx
mov dl, 0x8e
sub dl, 0x6f
not dl
add dl, 0x73
dec dl
add dl, 0x9e
and bl, dl
pop edx
jmp 0x90e26c
cmp bl, 0x70
je 0x90e83c
jne 0x90e27c
cmc
cmp al, 0xf
je 0x90e37a
jb 0x90e294
pushal
pushal
popal
jg 0x90e293
popal
cmp al, 0xe9
je 0x90ed15
cmc
pushal
sbb dh, 0xa7
push edi
pop esi
popal
cmp al, 0xeb
je 0x90f15d
jne 0x90e2bc
pushal
jle 0x90e2b9
pushal
popal
popal
cmp al, 0xe3
je 0x90e660
jae 0x90e2d2
js 0x90e2d2
pushal
popal
cmp al, 0xe2
je 0x90f2fe
jp 0x90e2e7
jl 0x90e2e7
cld
push dword [esp]
pop edi
add esp, 4
stc
mov ebx, dword [esp]
push edx
mov edx, esp
add edx, 4
add edx, 4
xchg dword [esp], edx
pop esp
jo 0x90e323
pushal
call fcn.0090e31b
movsd dword es:[edi], dword [esi]
or bl, byte [edx - 0x16]
hlt
mov ecx, dword [esp]
push ecx
mov ecx, esp
add ecx, 4
add ecx, 4
xchg dword [esp], ecx
pop esp
pushal
mov di, 0x7345
add cl, 0xa6
popal
push dword [esp]
pop esi
add esp, 4
jg 0x90e350
cmc
jp 0x90e36b
pushal
jmp 0x90e367
movzx ebx, cx
popal
ret
mov dword [ebp + 0x20d5df3a], 6
stc
push 0x2b1c7084
mov dword [esp], edx
mov edx, 0
add edx, esi
mov bl, byte [edx]
pop edx
jns 0x90e3a1
pushal
mov ch, 0xdc
popal
push ecx
mov ch, 0x61
xor ch, 0xd0
neg ch
add ch, 0xa1
and bl, ch
mov ecx, dword [esp]
add esp, 4
jne 0x90e3c1
jg 0x90e3c1
cld
cmp bl, 0x80
jne 0x90e2e7
jmp 0x90e3e2
push edx
mov edx, 1
sub esi, edx
pop edx
pushal
mov edi, 0x20731855
popal
mov eax, dword [ebp + 0x20bffa83]
jmp 0x90e403
mov edx, dword [ebp + 0x20a73915]
jmp 0x90e41e
push dword [esi + 2]
mov ebx, dword [esp]
add esp, 4
cld
push ebp
mov ebp, 0x2f73b800
shl ebp, 3
dec ebp
not ebp
xor ebp, 0x7ef3b3d2
xor ebp, 0x877ea903
add ebx, ebp
pop ebp
add ebx, esi
sub ebx, 0x7def5ad1
pushal
mov cl, dh
adc ebx, 0x44e7a657
popal
push esi
mov esi, 6
add ebx, 0x73dbfc35
add ebx, esi
sub ebx, 0x73dbfc35
pop esi
cmc
cmp ebx, eax
jb 0x90e4b4
pushal
jmp 0x90e481
pushal
movsx ebx, bx
and ecx, 0x521f563e
popal
popal
cmp ebx, edx
jbe 0x90e2e7
je 0x90e4ad
jmp 0x90e4ad
jnp 0x90e4b4
clc
add ebx, 0x5eff834e
add ebx, 0x1cf7ed1d
sub ebx, edi
sub ebx, 0x1cf7ed1d
sub ebx, 0x5eff834e
cld
push 0x66eecbb
mov dword [esp], edi
mov edi, 6
sub ebx, edi
pop edi
jo 0x90e4fd
pushal
stc
call fcn.0090e4fb
pop es
aaa
hlt
lodsw ax, word [esi]
stc
jg 0x90e50f
pushal
cld
jne 0x90e50e
popal
stosw word es:[edi], ax
jmp 0x90e51d
push eax
push ebx
mov eax, dword [esp]
add esp, 4
pop ebx
pushal
sbb cl, 0xc1
jmp 0x90e541
popal
stosd dword es:[edi], eax
jmp 0x90e556
jl 0x90e567
pushal
jne 0x90e563
add bh, 0x34
popal
push eax
mov eax, 4
add esi, 0x76c703b8
add esi, eax
sub esi, 0x76c703b8
pop eax
pushal
jmp 0x90e592
stc
popal
cmc
mov dword [esp], edi
jmp 0x90e5af
mov dword [esp + 0xc], esi
pushal
movzx ecx, cx
jb 0x90e5c3
jp 0x90e5c3
popal
mov dword [ebp + 0x20a732ed], esi
ja 0x90e5e9
jmp 0x90e5e9
push dword [esp]
pop edi
add esp, 4
pushal
mov edx, 0x59ff24f5
add bx, 0xd3eb
popal
mov ebx, dword [esp]
push ebp
mov ebp, esp
add ebp, 4
add ebp, 4
xchg dword [esp], ebp
pop esp
jmp 0x90e624
push dword [esp]
pop ecx
add esp, 4
cmc
push dword [esp]
pop esi
add esp, 4
cld
push eax
mov eax, esp
add eax, 4
add eax, 4
xchg dword [esp], eax
mov esp, dword [esp]
jnp 0x90e64f
clc
jmp 0x90bfc8
mov dword [ebp + 0x20d5df3a], 2
pushal
mov esi, 0x376b190b
jmp 0x90e681
popal
push edx
mov dword [esp], esi
pop ebx
clc
movzx ecx, byte [esi]
jle 0x90e6a4
jno 0x90e6a4
jmp 0x90e6a4
cmp cl, 0x80
jae 0x90e737
jo 0x90e6bb
jne 0x90e6bb
pushal
popal
stc
sub ebx, 0x1ff98108
add ebx, ecx
push eax
mov eax, 0x253fee81
neg eax
add eax, 0x48edf278
neg eax
sub eax, 0xbc587b01
add ebx, eax
pop eax
pushal
ja 0x90e6e2
mov al, 0xcd
popal
push edi
mov edi, 0x654a51c9
sub edi, 0x776da3b8
sub edi, 0x3fa46e06
add edi, 0x51c7bff6
add ebx, edi
pop edi
jmp 0x90e717
jmp 0x90e72f
jmp 0x90e79e
push eax
mov al, 0x14
xor al, 0x55
push eax
not byte [esp]
pop eax
dec al
shr al, 4
add al, 0xf4
sub cl, al
pop eax
stc
push edx
mov edx, 0
sub edx, ecx
xor ecx, edx
xor edx, ecx
xor ecx, edx
pop edx
jae 0x90e762
cmc
push ebx
mov ebx, 0x2ff7a0cd
sub ebx, 1
shl ebx, 2
inc ebx
xor ebx, 0xbfde83ce
and ecx, ebx
pop ebx
cld
add ebx, 0x7fff9c6d
sub ebx, ecx
push eax
mov eax, 0x7fbfa145
inc eax
and eax, 0x7ffd1b68
add eax, 0x429b2d
sub ebx, eax
pop eax
pushal
push eax
push esi
pop ebx
pop edi
movzx edi, si
popal
mov eax, dword [ebp + 0x20bffa83]
pushal
jmp 0x90e7b9
mov di, si
popal
mov edx, dword [ebp + 0x20a73915]
clc
cmp dword [ebp + 0x20a7294b], 1
je 0x90ec14
cmc
cmp ebx, eax
jb 0x90ec14
pushal
jmp 0x90e7ef
mov dh, al
popal
pushal
mov ecx, 0x6cf5b6b4
pushal
jl 0x90e7ff
jns 0x90e805
popal
popal
cmp ebx, edx
jb 0x90e2e7
jmp 0x90e81d
js 0x90e836
pushal
movsx edi, di
call fcn.0090e834
rcl dword [esp + ebp*2], 0x46
invalid
jmp 0x90ec14
mov dword [ebp + 0x20d5df3a], 2
jmp 0x90e854
push edi
mov dword [esp], edx
mov edx, esi
mov ebx, edx
pop edx
pushal
push edi
jge 0x90e865
pop ebx
call 0x90e879
enter 0xffffffffffff8177, 0x52
shr dh, 0x10
xchg dword [di - 0xeb2], esi
inc edx
fist dword [eax + 0x59]
pop ebx
popal
movzx ecx, byte [esi]
jnp 0x90e887
stc
cmp cl, 0x80
jae 0x90e91b
pushal
jmp 0x90e8aa
popal
sub ebx, 0x7f197286
add ebx, 0x4dff1fd1
add ebx, ecx
sub ebx, 0x4dff1fd1
add ebx, 0x7f197286
clc
push ebx
inc dword [esp]
mov ebx, dword [esp]
add esp, 4
pushal
pushal
pushal
popal
call 0x90e8e5
add byte [ebx + 0x6ae53a3e], bl
fcmovnu st(0), st(3)
stosb byte es:[edi], al
pop edx
popal
jg 0x90e8ef
mov bh, 0xc9
popal
jmp 0x90e998
push eax
mov al, 0x90
add al, 0x13
sub al, 1
sub al, 0x1c
not al
add al, 0x3c
xor al, 0x4a
sub cl, al
pop eax
jmp 0x90e942
xchg ecx, edx
not edx
xchg ecx, edx
inc ecx
js 0x90e957
pushal
jg 0x90e956
popal
push edx
push eax
mov eax, 0xff
mov edx, eax
pop eax
and ecx, edx
pop edx
js 0x90e970
pushal
mov ecx, edi
mov bl, ch
popal
push esi
mov esi, 0x67772d8a
dec esi
shl esi, 2
and esi, 0x7d7fd3e1
and esi, 0x7fffa047
sub esi, 0x9d717ab4
sub ebx, esi
pop esi
sub ebx, ecx
add ebx, 0x7feb054c
cmc
mov eax, dword [ebp + 0x20bffa83]
jb 0x90e9ac
jne 0x90e9ac
pushal
popal
pushal
mov bh, 0xb9
jne 0x90e9b7
mov ch, dl
popal
mov edx, dword [ebp + 0x20a73915]
cld
cmp dword [ebp + 0x20a7294b], 1
je 0x90ec14
cmc
cmp ebx, eax
jb 0x90ea01
jbe 0x90e9ee
jmp 0x90e9ee
pushal
sbb al, 0x55
mov ecx, 0x6de28b31
popal
cmp ebx, edx
jbe 0x90e2e7
cmc
push eax
mov eax, 0xffffffff
add esi, eax
pop eax
jmp 0x90ea1a
jmp 0x90ea30
push ebx
mov bh, 0xd4
inc bh
push ax
mov al, 0xc6
sub bh, al
pop ax
mov al, bh
pop ebx
stc
stosb byte es:[edi], al
pushal
pushal
jmp 0x90ea51
mov bx, 0x72d7
popal
and bx, 0xa541
popal
push eax
mov eax, 0
add eax, 0x3fefa6aa
add eax, esi
sub eax, 0x3fefa6aa
mov cl, byte [eax]
pop eax
cmc
push edx
mov dh, 0xd4
push ebx
mov bh, 0x92
mov al, 0x3e
sub al, bh
pop ebx
add al, dh
pop edx
pushal
mov bx, cx
add dl, 0x17
popal
push eax
mov ah, 0x43
push ebx
mov bh, 6
sub bh, 0x3a
add ah, bh
pop ebx
and cl, ah
pop eax
cld
or al, cl
pushal
stc
cmc
popal
jmp 0x90eaa9
stosb byte es:[edi], al
jae 0x90eab1
clc
stc
push eax
mov eax, 0x7b7515e7
add ebx, eax
pop eax
sub ebx, edi
sub ebx, 0x7b7515e7
cmc
sub esp, 4
mov dword [esp], edi
mov edi, 4
sub ebx, edi
pop edi
stc
pushal
push ebx
call fcn.0090eaec
dec eax
sbb dh, ah
ficom word [ecx]
hlt
push eax
mov eax, 1
sub esi, eax
pop eax
clc
mov al, 0xce
inc al
shr al, 2
or al, 0x18
push bx
mov bh, 0xd2
xor al, bh
pop bx
pushal
jne 0x90ec36
popal
stosb byte es:[edi], al
pushal
xor cx, 0xe9d7
mov di, 0xd2fa
popal
push esi
mov eax, dword [esp]
add esp, 4
jmp 0x90ec60
add eax, 0x72ef6fa1
sub eax, 0x6ff5f1d8
sub eax, edi
add eax, 0x6ff5f1d8
sub eax, 0x72ef6fa1
pushal
jae 0x90ec7e
clc
mov bx, di
popal
push 0x10121a91
mov dword [esp], ecx
mov ecx, 4
sub eax, ecx
pop ecx
clc
stosd dword es:[edi], eax
jnp 0x90eca5
jmp 0x90eca5
push edx
mov edx, esp
add edx, 4
add edx, 4
push edx
push dword [esp + 4]
pop edx
pop dword [esp]
pop esp
stc
mov ebx, dword [esp]
push ecx
mov ecx, esp
add ecx, 4
add ecx, 4
xchg dword [esp], ecx
pop esp
cmc
push dword [esp]
pop ecx
add esp, 4
cmc
mov esi, dword [esp]
push ebp
mov ebp, esp
add ebp, 4
add ebp, 4
xchg dword [esp], ebp
pop esp
cld
push eax
mov eax, esp
add eax, 4
add eax, 4
push eax
push dword [esp + 4]
pop eax
pop dword [esp]
pop esp
clc
jmp 0x90c2d8
mov dword [ebp + 0x20d5df3a], 5
jmp 0x90ed36
push dword [esi]
mov ebx, dword [esp]
add esp, 4
pushal
mov dx, 0xc854
jnp 0x90ed52
and eax, 0x507e4693
popal
add ebx, 0x7dbe9c2a
add ebx, esi
push eax
mov eax, 0x7ae453df
xor eax, 0x75acff5
sub ebx, eax
pop eax
pushal
mov ecx, 0x361d43a2
mov di, 0xb92e
popal
push 0x66102563
mov dword [esp], eax
mov eax, 4
add ebx, eax
pop eax
cld
mov eax, dword [ebp + 0x20bffa83]
pushal
jl 0x90ed94
mov ch, ah
pushal
mov esi, 0x412392c1
jmp 0x90edae
popal
popal
mov edx, dword [ebp + 0x20a73915]
pushal
call fcn.0090edd0
add byte [ecx - 0x54c49063], dl
clc
add ch, bh
inc ebx
xchg dword [ebx], esi
add byte [ecx], ch
inc ebx
cdq
movsd dword es:[edi], dword [esi]
retf 0x78a6
push eax
mov eax, 0x7ff2f2f9
dec eax
sub eax, 0x7ff2f2f7
sub esi, eax
pop eax
jne 0x90ee12
jmp 0x90ee12
cmp dword [ebp + 0x20a72913], 1
je 0x90f50b
pushal
xor edi, 0x4d5abd27
add cx, 0x4cfd
popal
cmp ebx, eax
jb 0x90ee82
add byte [eax], al
add byte [eax - 0x17], ah
adc eax, dword [eax]
add byte [eax], al
push edi
loopne 0x90eeaa
pushal
jmp 0x90ee4d
and byte [eax + edx + 0x46], ah
sub al, 0x99
xchg esp, eax
push ds
lea esi, [eax - 0x236e83dd]
sub ch, al
or byte [eax], al
add byte [eax], al
call 0x90ee5a
mov eax, dword [0x51717009]
outsd dx, dword [esi]
jne 0x90ee31
pop edx
popal
cmp ebx, edx
jbe 0x90efa7
jae 0x90ee82
jmp 0x90ee82
mov dword [ebp + 0x20a732ed], esi
stc
pushal
jmp 0x90ee9e
call 0x90eea8
xlatb
adc cl, byte ss:[ecx - 0x3d]
mov dh, 0x39
pop edx
popal
mov ebx, dword [ebp + 0x20d5df3a]
cmc
sub dword [esp + 0xc], 0x6ebb9424
sub dword [esp + 0xc], 0x3e973d7e
add dword [esp + 0xc], ebx
add dword [esp + 0xc], 0x3e973d7e
add dword [esp + 0xc], 0x6ebb9424
jmp 0x90eeee
jmp 0x90f50b
cmp dword [ebp + 0x20a7294b], 1
je 0x90f50b
jmp 0x90efc9
sub ebx, dword [ebp + 0x20bffa83]
cmc
mov ecx, dword [ebp + 0x20c18842]
pushal
cmc
mov bh, 0xf0
popal
sub ecx, 0x7ec628f1
add ecx, ebx
push edi
mov edi, 0x77f75903
and edi, 0x6e9e78d0
sub edi, 0xe7d02f0f
add ecx, edi
pop edi
jmp 0x90f011
add ecx, 0x59f7796f
sub ecx, 0x37ffb792
sub ecx, edi
add ecx, 0x37ffb792
sub ecx, 0x59f7796f
pushal
mov al, 0x4c
push edi
adc ecx, 0x51f5a9c7
pop esi
popal
push ebp
mov ebp, 5
sub ecx, ebp
mov ebp, dword [esp]
add esp, 4
stc
push ecx
mov ch, 0x5b
mov al, 0x6c
xor al, ch
pop ecx
and al, 0x49
sub al, 0x18
jmp 0x90f05f
stosb byte es:[edi], al
jmp 0x90f074
stc
push eax
push eax
mov dword [esp], ecx
pop eax
pop ecx
cld
stosd dword es:[edi], eax
pushal
jmp 0x90f095
mov cx, dx
popal
push ebx
mov ebx, esp
add ebx, 4
push esi
mov esi, 4
add ebx, esi
pop esi
xchg dword [esp], ebx
pop esp
jge 0x90f0c1
jmp 0x90f0c1
push dword [esp]
pop ebx
add esp, 4
pushal
mov bx, 0xa8b1
sbb bx, 0x4278
popal
mov ecx, dword [esp]
push ecx
mov ecx, esp
add ecx, 4
add ecx, 4
xchg dword [esp], ecx
pop esp
pushal
movsx edx, bx
mov ax, cx
popal
mov esi, dword [esp]
push ebp
mov ebp, esp
add ebp, 4
add ebp, 4
xchg dword [esp], ebp
pop esp
jne 0x90f121
jmp 0x90f121
pushal
pushal
adc ecx, 0x1e002703
popal
je 0x90f132
mov esi, edi
popal
push ecx
mov ecx, esp
add ecx, 4
add ecx, 4
xchg dword [esp], ecx
mov esp, dword [esp]
cld
jmp 0x90c2d8
mov dword [ebp + 0x20d5df3a], 2
pushal
jmp 0x90f178
and ch, 0
popal
push edi
push esi
xor dword [esp], 0x5faecd3b
pop edi
xor edi, 0x5faecd3b
mov ebx, edi
pop edi
cmc
movzx ecx, byte [esi]
jmp 0x90f1ab
pushal
mov cl, dl
sbb ebx, 0x571429b3
popal
cmp cl, 0x80
jae 0x90f234
pushal
pushal
movsx edx, bx
mov ch, 0xe2
popal
popal
pushal
or ax, 0x70ae
movzx edx, dx
popal
add ebx, 0x37edefc2
add ebx, 0x57fb700a
add ebx, ecx
sub ebx, 0x57fb700a
sub ebx, 0x37edefc2
jnp 0x90f1fb
jmp 0x90f1fb
push ebp
mov ebp, 0x3effa930
dec ebp
not ebp
inc ebp
shr ebp, 1
and ebp, 0x7eeeb3c1
add ebp, 0x9f7fdcc1
add ebx, ebp
pop ebp
je 0x90f22e
jno 0x90f22e
jmp 0x90f22e
jmp 0x90f2e2
push eax
mov ah, 0xff
add cl, 0xd9
sub cl, ah
sub cl, 0xd9
pop eax
pushal
movsx eax, dx
push edi
stc
pop ecx
popal
jmp 0x90f258
mul byte [ecx - 0x6c41f2f9]
push 0
add dword [esp], 0x3e3e97e2
sub dword [esp], ecx
sub dword [esp], 0x3e3e97e2
pop ecx
jmp 0x90f27f
or eax, dword [eax]
add byte [eax], al
pop ds
aad 0
mov esp, 0xec3fa7
add byte [edx], bh
pop esp
push esi
mov dword [esp], eax
mov eax, 0xff
and ecx, eax
pop eax
pushal
jmp 0x90f296
call 0x90f2ad
push ds
dec edi
jns 0x90f252
mov bl, 0xf2
jns 0x90f270
int 0x26
jo 0x90f302
invalid
mov eax, dword [ebp + 0x20bffa83]
jbe 0x90f2ef
cld
clc
mov edx, dword [ebp + 0x20a73915]
cld
cld
jmp 0x90ede8
mov dword [ebp + 0x20d5df3a], 2
aad 0x20
add al, byte [eax]
add byte [eax], al
ja 0x90f31a
jns 0x90f31a
jp 0x90f31a
push edx
mov edx, esi
push ecx
mov ecx, edx
mov ebx, ecx
pop ecx
pop edx
clc
movzx ecx, byte [esi]
jo 0x90f336
pushal
sub eax, 0x4b45e670
popal
cmp cl, 0x80
jae 0x90f3cd
jmp 0x90f350
add ebx, 0x3f9f8334
add ebx, ecx
push edx
mov edx, 0x3f9f8334
sub ebx, edx
pop edx
jmp 0x90f379
push ebx
inc dword [esp]
mov ebx, dword [esp]
add esp, 4
jmp 0x90f397
jmp 0x90f3a8
jmp 0x90f463
push ebx
mov bl, 0x29
sub bl, 0x7d
push 0
sub byte [esp], bl
mov bl, byte [esp]
add esp, 4
dec bl
inc bl
add bl, 0xab
sub cl, bl
pop ebx
clc
not ecx
add ecx, 1
pushal
mov dx, 0x4e62
popal
push 0x67531a00
mov dword [esp], eax
mov eax, 0x75fc0017
dec eax
shr eax, 1
sub eax, 0x3afdff0c
and ecx, eax
pop eax
pushal
jb 0x90f41d
movzx edi, ax
movzx ebx, di
popal
push edi
mov edi, 0x7f8db1fb
xor edi, 0x6ffff576
and edi, 0x7a7fcda7
sub edi, 0x77b83792
and edi, 0x7fef7147
add edi, 0x2213f173
add ebx, edi
pop edi
sub ebx, ecx
sub ebx, 0x3abdf1b6
ja 0x90f462
jg 0x90f462
ja 0x90f462
clc
mov eax, dword [ebp + 0x20bffa83]
cld
mov edx, dword [ebp + 0x20a73915]
cmc
cmp dword [ebp + 0x20a7294b], 1
je 0x90ec14
pushal
push ebx
jmp 0x90f490
pop esi
mov esi, 0x3b1d652c
popal
cmp ebx, eax
jb 0x90f4e9
pushal
jmp 0x90f4b7
jnp 0x90f4d4
call 0x90f4d3
pop ebp
arpl ax, ax
salc
out dx, eax
int 0xf9
fild word [eax - 0x7f]
mov bh, 0x21
push 0
fcomp qword [ecx + eax*4 + 0x58]
popal
cmp ebx, edx
jbe 0x90e2e7
jmp 0x90f4e9
push ecx
mov ecx, 1
sub esi, ecx
pop ecx
pushal
pushal
mov ecx, 0x17513bca
mov di, 0x5b00
popal
jmp 0x90f50a
popal
push ecx
mov dword [esp], ebp
mov ebp, esi
mov ecx, ebp
pop ebp
cmc
push esi
mov esi, 0x7fde8957
add ecx, esi
pop esi
sub ecx, edi
sub ecx, 0x7fde8957
jmp 0x90f534
push esi
mov dword [esp], ebx
mov ebx, 5
sub ecx, ebx
pop ebx
jnp 0x90f547
stc
mov al, 0xc0
push ebx
mov bh, 0x5f
neg bh
not bh
xor bh, 0xd
add al, bh
pop ebx
add al, 0x6e
shl al, 2
shr al, 2
add al, 0xbc
xor al, 0x54
jmp 0x90f57b
stosb byte es:[edi], al
pushal
mov bh, dh
popal
jmp 0x90f58d
xor eax, ecx
xor ecx, eax
xor eax, ecx
pushal
mov ch, 0x31
popal
jmp 0x90f5af
stosd dword es:[edi], eax
cmc
jmp 0x90c2d8