Function at 0x100d72c0
Capabilities:
Encode data using base64
Encode data using xor
Enumerate files on windows
Enumerate files recursively
Parse pe header

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0xc0
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x18], eax
mov eax, dword [ebp + 8]
mov dword [ebp - 0x14], eax
mov eax, dword [0x101bdbec]
xor eax, ebp
mov dword [ebp - 0x10], eax
mov eax, dword [0x101bbd08]
and eax, dword [0x101bbd0c]
imul eax, eax, 0x350fe294
or eax, 0xd54041ef
imul eax, eax, 0xc9dbf686
sub eax, 0x77f0d29a
add eax, 0x4e6da25a
or eax, 0x1b7e2842
sub eax, 0x72ef3b39
and eax, 0x789e8e80
and eax, 0xcb6de981
and eax, 0xc7b46ba9
xor eax, 0x9e1fa92b
xor eax, 0xfe16e81a
add eax, 0x9e22d304
imul eax, eax, 0xe8cfc510
sub eax, 0x6100cc66
imul eax, eax, 0x8624b7ba
add eax, 0xc1d7611d
add eax, 0xd427229d
sub eax, 0x662d665c
add eax, 0xaf4baa0d
add eax, 0x24e9b013
and eax, 0xda13cbdd
sub eax, 0x49405055
xor eax, 0x35e55323
mov ecx, 0xc634b2ca
xor edx, edx
div ecx
imul eax, eax, 0x1cfbaddc
xor eax, 0x31a9beef
mov ecx, 0x356a449e
xor edx, edx
div ecx
sub eax, 0xbcef4341
and eax, 0xb95cfc2
mov ecx, 0x404d2ae8
xor edx, edx
div ecx
and eax, 0xc3913f70
xor eax, 0xda8f4d23
or eax, 0xe30a68d4
xor eax, 0x9ea5caf5
add eax, 0xb0382147
or eax, 0xb6b9c2f7
or eax, 0xcec9c179
cmp eax, 0x80382d60
jb 0x100de52b
mov eax, dword [0x101bbd10]
imul eax, dword [0x101bbd14]
imul eax, eax, 0xc5f43027
xor eax, 0xb18ce3fa
sub eax, 0xd1bf434a
and eax, 0x1f3b8995
or eax, 0xcc4b0202
xor eax, 0x342a4121
sub eax, 0x6f0c2561
add eax, 0xe059b1ec
or eax, 0xf5afb42f
and eax, 0x92e8e5ff
mov ecx, 0x3d056180
xor edx, edx
div ecx
sub eax, 0xc4013584
or eax, 0xbcd6c8d
add eax, 0xe3f285df
imul eax, eax, 0x4601efc0
and eax, 0x639fa333
add eax, 0x5d1493d8
xor eax, 0xbc05c215
mov ecx, 0xc296dab2
xor edx, edx
div ecx
sub eax, 0x1c59c45b
sub eax, 0x31e60ec9
and eax, 0xf4f7e253
sub eax, 0xeae5806c
imul eax, eax, 0xad94acf9
xor eax, 0x8c9ee5d5
imul eax, eax, 0x56ece03
and eax, 0x32088031
mov ecx, 0x1928d9c7
xor edx, edx
div ecx
xor eax, 0x3bcaf2d9
and eax, 0x4426a38d
or eax, 0x237f580
and eax, 0x14f0eca
sub eax, 0xfc4fb1a9
or eax, 0x9cef03ae
sub eax, 0x176a31a2
add eax, 0x251d31bd
mov ecx, 0x2fefe58b
xor edx, edx
div ecx
imul eax, eax, 0x443abda5
cmp eax, 0xa5d1272b
je 0x100e0c1c
mov esi, dword [ebp - 0x14]
mov edi, dword [ebp - 0x18]
mov eax, 0x43960e06
mov dword [ebp - 0x20], eax
push eax
mov eax, esp
mov dword [ebp - 0x44], eax
push eax
mov ecx, esp
mov dword [ebp - 0x40], ecx
push eax
mov edx, esp
mov dword [ebp - 0x3c], edx
sub esp, 0x140
mov eax, esp
mov dword [ebp - 0x38], eax
push eax
mov ebx, esp
mov dword [ebp - 0x24], ebx
sub esp, 0xc8
mov ebx, esp
mov dword [ebp - 0x28], ebx
sub esp, 0x1f4
mov ebx, esp
mov dword [ebp - 0x34], ebx
sub esp, 0xc
mov ebx, esp
mov dword [ebp - 0x30], ebx
sub esp, 0xc
mov ebx, esp
mov dword [ebp - 0x2c], ebx
mov dword [ecx], edi
mov dword [edx], esi
mov ecx, dword [ecx]
sub esp, 8
mov dword [esp], ecx
mov dword [esp + 4], eax
call dword [sym.imp.KERNEL32.dll_FindFirstFileA]
mov ecx, dword [ebp - 0x28]
mov edx, eax
mov eax, dword [ebp - 0x24]
mov dword [eax], edx
lea eax, str.Program_Files
sub esp, 0xc
mov dword [esp], ecx
mov dword [esp + 4], eax
mov dword [esp + 8], 0xc8
call fcn.10164b40
mov ecx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x20]
add esp, 0xc
mov edx, 0xffffffff
cmp dword [ecx], edx
setne cl
mov byte [ebp - 0x19], cl
cmp eax, 0xb2314362
ja 0x100e0c1c
mov eax, dword [0x101bbd20]
or eax, dword [0x101bbd24]
mov ecx, 0x761496c
xor edx, edx
div ecx
or eax, 0x5fa3dc4e
and eax, 0xf9981e61
and eax, 0x3e913548
mov ecx, 0x32eff82c
xor edx, edx
div ecx
imul eax, eax, 0x2b9152ca
add eax, 0x3e7e6a54
imul eax, eax, 0x9054e3f6
and eax, 0x4e4f1fc7
xor eax, 0xbe9c25c8
mov ecx, 0xbf4d2387
xor edx, edx
div ecx
sub eax, 0x2d2d36ee
add eax, 0x77135b26
or eax, 0xffef31ba
and eax, 0x27ac06d6
mov ecx, 0x8368a3e9
xor edx, edx
div ecx
sub eax, 0xd387c215
imul eax, eax, 0xc034513e
sub eax, 0x1de81241
xor eax, 0xebcd2b58
and eax, 0x782b984a
imul eax, eax, 0x8fcbf889
xor eax, 0x1ef915d3
add eax, 0xe993d1ab
imul eax, eax, 0x785ea6b3
add eax, 0x5ef590fb
add eax, 0x7036a29d
add eax, 0xda0fd1c8
add eax, 0xe49a8f09
mov ecx, 0x7aa4c0a8
xor edx, edx
div ecx
and eax, 0x8491373f
or eax, 0x69c8eab1
xor eax, 0x2f724694
mov ecx, 0x6b6593e0
xor edx, edx
div ecx
imul eax, eax, 0x18cbcc2f
xor eax, 0x2ba47da0
xor eax, 0xce617ecc
xor eax, 0x732a263b
cmp eax, 0x53b0a678
jb 0x100d73c7
mov eax, dword [0x101bbd28]
sub eax, dword [0x101bbd2c]
or eax, 0x2c232bd5
mov ecx, 0xb53ac34d
xor edx, edx
div ecx
sub eax, 0xac9bff13
imul eax, eax, 0x19603dac
sub eax, 0x63554976
add eax, 0x72a6dd67
xor eax, 0xa7118207
add eax, 0xadcbba17
mov ecx, 0x5c5b0fcd
xor edx, edx
div ecx
imul eax, eax, 0xf513f45c
or eax, 0xe2547dd2
mov ecx, 0x7a6688f1
xor edx, edx
div ecx
mov ecx, 0x635e3842
xor edx, edx
div ecx
mov ecx, 0xf8f7bccb
xor edx, edx
div ecx
mov ecx, 0x311c016
xor edx, edx
div ecx
and eax, 0xc599a38f
and eax, 0x64323239
add eax, 0x64f802fd
sub eax, 0x67e5ccfd
sub eax, 0x308558d3
imul eax, eax, 0x62a90bdd
mov ecx, 0xe13e74a4
xor edx, edx
div ecx
mov ecx, 0xf56cc258
xor edx, edx
div ecx
mov ecx, 0x5d0fa0f5
xor edx, edx
div ecx
sub eax, 0xa6ea07c5
imul eax, eax, 0x84489215
mov ecx, 0xe2744d92
xor edx, edx
div ecx
or eax, 0x29a5d0c0
and eax, 0x787b21a8
and eax, 0x9e9bc654
xor eax, 0xf9ef5353
xor eax, 0x6c0d7c14
add eax, 0xe0351f03
and eax, 0xcdf0e069
and eax, 0xa4766a26
or eax, 0x5936a546
imul eax, eax, 0x29da8af1
xor eax, 0x39aac9b2
cmp eax, 0xb099399c
jb 0x100e0d43
mov eax, dword [0x101bbd30]
xor edx, edx
div dword [0x101bbd34]
sub eax, 0x6ae51392
sub eax, 0xe30850c2
or eax, 0x120d8fbb
imul eax, eax, 0xb16db784
xor eax, 0x800ec39
xor eax, 0xb2326e3a
imul eax, eax, 0xb1e2d0b7
imul eax, eax, 0xacc04a33
xor eax, 0x7cc42b4e
xor eax, 0xab8f5731
mov ecx, 0x6824effb
xor edx, edx
div ecx
add eax, 0x7dba1d15
sub eax, 0xc2289477
or eax, 0x44b0f67e
xor eax, 0xeac2b054
mov ecx, 0x848b93d1
xor edx, edx
div ecx
xor eax, 0x388cddba
sub eax, 0xe9f100a7
mov ecx, 0x5d883f7c
xor edx, edx
div ecx
imul eax, eax, 0x2353303
imul eax, eax, 0xc910e9bb
or eax, 0xab1c0f44
mov ecx, 0x2de0db3c
xor edx, edx
div ecx
and eax, 0xe33643c9
sub eax, 0xd35f2b77
mov ecx, 0xda36c7b
xor edx, edx
div ecx
add eax, 0x25fc857b
mov ecx, 0x52a84368
xor edx, edx
div ecx
mov ecx, 0x888b03df
xor edx, edx
div ecx
and eax, 0x2baaedd7
add eax, 0x643b53a
and eax, 0xefd59adb
mov ecx, 0x37d469f0
xor edx, edx
div ecx
mov ecx, 0x5505a843
xor edx, edx
div ecx
add eax, 0xb502078e
add eax, 0xb93e4064
sub eax, 0x23630c65
add eax, 0xe59fa2fe
cmp eax, 0x3af48b53
jae 0x100e0d43
mov al, byte [ebp - 0x19]
test al, 1
jne 0x100d7868
jmp 0x100dd9ae
mov eax, dword [0x101bbd38]
xor edx, edx
div dword [str.o_0]
xor eax, 0x918c6ae5
and eax, 0x7982f202
add eax, 0x4dc11203
or eax, 0xdb0dff49
sub eax, 0x7a1dfd95
and eax, 0x6fc5f15
and eax, 0xaa40cd8f
mov ecx, 0x2a67bc6f
xor edx, edx
div ecx
mov ecx, 0xfa2cda76
xor edx, edx
div ecx
and eax, 0x495a1d33
and eax, 0xb0cd9cce
sub eax, 0x8b942a55
and eax, 0x26a2636b
xor eax, 0xbc7e785b
sub eax, 0x7c890894
xor eax, 0xf19c12fc
sub eax, 0x709a8885
imul eax, eax, 0x3efd1c0a
imul eax, eax, 0x274429a3
xor eax, 0x2b63bbc6
imul eax, eax, 0x5248e772
sub eax, 0x47d6bd1c
or eax, 0x632fdb4d
or eax, 0x69f5b603
xor eax, 0x6c72f8ab
xor eax, 0x4a0d62ca
sub eax, 0x64f355b
sub eax, 0x6941dde6
or eax, 0x6a5590c3
sub eax, 0xb9deb0db
imul eax, eax, 0x88b66cca
or eax, 0x886ac4b3
add eax, 0xc80531b0
add eax, 0xadb967ad
mov ecx, 0x3c9cbe70
xor edx, edx
div ecx
imul eax, eax, 0xf3ff186d
add eax, 0xc37953c5
add eax, 0x3d8955b1
cmp eax, 0x51e4d69b
je 0x100de750
mov eax, dword [0x101bbd40]
add eax, dword [0x101bbd44]
add eax, 0xf26eebbd
xor eax, 0xe4dca0ec
xor eax, 0x1bdc634d
mov ecx, 0x36a8b059
xor edx, edx
div ecx
imul eax, eax, 0xd577c0b
mov ecx, 0x90a497c2
xor edx, edx
div ecx
imul eax, eax, 0x91d503ca
xor eax, 0xa51f131a
or eax, 0x12d4e467
and eax, 0xea59c365
and eax, 0x444d01d5
add eax, 0x92e9dd41
and eax, 0x3718b825
sub eax, 0x4ad3a0b8
xor eax, 0x6bcd5b5a
and eax, 0x38707db5
sub eax, 0x1a1c0518
mov ecx, 0x5dacd368
xor edx, edx
div ecx
and eax, 0x825a3c46
sub eax, 0x7412eb15
or eax, 0xe1dd6e12
add eax, 0x7676e45b
or eax, 0x44942587
sub eax, 0xfa81be6e
imul eax, eax, 0x204d57ce
or eax, 0xac67bb87
sub eax, 0x55ce92be
imul eax, eax, 0xa907c40
mov ecx, 0x1945824d
xor edx, edx
div ecx
sub eax, 0x77618831
add eax, 0xe54af1b7
add eax, 0x7dadf204
mov ecx, 0xfa117740
xor edx, edx
div ecx
sub eax, 0xc88c6009
imul eax, eax, 0x4be49db7
imul eax, eax, 0xb96b037f
and eax, 0xe11db4ac
or eax, 0xc8a293a6
cmp eax, 0xf4c03f6f
jae 0x100e0de0
mov eax, dword [0x101bbd48]
and eax, dword [0x101bbd4c]
and eax, 0xeb8fae2
sub eax, 0xcaea6321
sub eax, 0x22a42428
imul eax, eax, 0x7fa3db7c
mov ecx, 0xaa69a19
xor edx, edx
div ecx
or eax, 0xc9163ac2
mov ecx, 0xef64271a
xor edx, edx
div ecx
and eax, 0x85b35164
and eax, 0xf97177b6
mov ecx, 0x518de208
xor edx, edx
div ecx
xor eax, 0xf88989
and eax, 0xee74c1f6
and eax, 0xb1fc2770
add eax, 0x95ff8a7d
and eax, 0xfd6cf1f9
xor eax, 0x438f7038
xor eax, 0xb733482c
and eax, 0x386e4447
add eax, 0x6e09ecb5
sub eax, 0x51273280
or eax, 0x54cec5fd
imul eax, eax, 0x82c59a61
imul eax, eax, 0xacbac465
xor eax, 0xab085d20
or eax, 0xe71f4c86
imul eax, eax, 0x5f5b1bea
add eax, 0x9f5387d5
mov ecx, 0xe2afc697
xor edx, edx
div ecx
or eax, 0xd66603ca
or eax, 0x64cb2e44
and eax, 0x637af5bf
or eax, 0xa637f581
mov ecx, 0xecbf3ab
xor edx, edx
div ecx
xor eax, 0x3fc166b4
add eax, 0x984b2ade
or eax, 0xe55366de
add eax, 0x91d2a34b
xor eax, 0x8fa43c4c
cmp eax, 0xa985e42d
ja 0x100d7a3d
mov eax, dword [0x101bbd50]
xor edx, edx
div dword [0x101bbd54]
or eax, 0x2c605959
imul eax, eax, 0xe609ee11
sub eax, 0x9202ade0
and eax, 0x42235866
sub eax, 0xe7041e27
sub eax, 0xa8455a10
add eax, 0x8bd165f1
and eax, 0xc7715c87
and eax, 0x764beaec
or eax, 0x367fcf94
sub eax, 0x943cf4fe
imul eax, eax, 0x21b3e0dc
sub eax, 0xa48d1845
or eax, 0x962d889a
add eax, 0x4876fb5
imul eax, eax, 0x740f3554
and eax, 0xe726378c
mov ecx, 0x2076abd5
xor edx, edx
div ecx
xor eax, 0x5ea64c90
sub eax, 0xfa804c9a
imul eax, eax, 0x14831527
imul eax, eax, 0x121bf03c
mov ecx, 0x8dcd9f7a
xor edx, edx
div ecx
mov ecx, 0x5049eef7
xor edx, edx
div ecx
imul eax, eax, 0x89fe8b12
and eax, 0xe5fa4063
add eax, 0xa0cb584d
xor eax, 0x72272af5
add eax, 0xa51d3c2b
xor eax, 0x8d772d2f
and eax, 0x2c39be23
sub eax, 0x19f54880
mov ecx, 0x9cb7fd03
xor edx, edx
div ecx
add eax, 0xaaba982f
or eax, 0xf0886322
imul eax, eax, 0xe5d949ec
mov ecx, 0x642bd569
xor edx, edx
div ecx
sub eax, 0x2baa3b64
cmp eax, 0x3fcd15fa
je 0x100d794f
jmp 0x100d7c1f
mov eax, dword [0x101bc0b8]
xor edx, edx
div dword [0x101bc0bc]
xor eax, 0x7ba2f5e1
xor eax, 0xa0937335
or eax, 0xd4507849
xor eax, 0x1dac4a88
xor eax, 0x58f0735
sub eax, 0x4d0f535a
and eax, 0xa14d2ac4
add eax, 0x18f9b7d8
sub eax, 0x191a92df
imul eax, eax, 0xdece14f3
sub eax, 0x61c8e7e4
mov ecx, 0xdde43e3b
xor edx, edx
div ecx
add eax, 0xbac0d9db
add eax, 0xd4a17024
and eax, 0x59363059
or eax, 0xa8c2808a
and eax, 0x730ff79a
and eax, 0x9421f977
or eax, 0x84dc4f0e
sub eax, 0x8707ce93
imul eax, eax, 0x91c6830
sub eax, 0xaec54007
add eax, 0x25185190
and eax, 0x49eca1fa
mov ecx, 0x2357ea19
xor edx, edx
div ecx
or eax, 0xc8b4fdbf
mov ecx, 0xd3ad3d66
xor edx, edx
div ecx
xor eax, 0x17a93d67
add eax, 0xe2063be5
mov ecx, 0x1f6f583d
xor edx, edx
div ecx
xor eax, 0xae72cdcf
sub eax, 0xf98c0f3f
mov ecx, 0xb7f7dac6
xor edx, edx
div ecx
sub eax, 0xaf2dbd75
xor eax, 0x288d34e6
mov ecx, 0x9e800c26
xor edx, edx
div ecx
imul eax, eax, 0x2968d4c5
imul eax, eax, 0x639e098f
cmp eax, 0xaa52ca6e
ja 0x100e26ae
mov esi, dword [ebp - 0x14]
mov edi, dword [ebp - 0x18]
mov eax, 0x70bf0627
mov dword [ebp - 0x98], eax
sub dword ss:[ecx], esi
pop edx
cmp dword [ebx - 0x5b8ac0e5], ebp
push ecx
test eax, 0x4d44ad0c
cmp al, 0x46
mov esi, 0x5646b0de
lcall 0xec0e, 0xb38aa0a9
pop eax
sub al, 0xd4
stosb byte es:[edi], al
call 0x50a69da3
in al, dx
add esp, eax
xchg ebp, eax
ljmp 0xada0
mov eax, dword [0x101bc0c8]
imul eax, dword [0x101bc0cc]
imul eax, eax, 0xfb328eb8
add eax, 0x75ec58ea
imul eax, eax, 0xd29d27d7
sub eax, 0xbf2723ae
or eax, 0xb8aba3ed
xor eax, 0x12207baa
add eax, 0x90dffa54
xor eax, 0xf69b17bd
and eax, 0xd6193ba9
or eax, 0x8bdc589
or eax, 0xe44a1788
mov ecx, 0xb58a494d
xor edx, edx
div ecx
and eax, 0xff029fbc
xor eax, 0xc7d63add
add eax, 0x2b6ed0a9
or eax, 0xa8007407
sub eax, 0xeea6ca39
imul eax, eax, 0x3a360774
sub eax, 0x836e4b25
xor eax, 0x4341eb2c
sub eax, 0x298a2662
xor eax, 0x67103ec4
mov ecx, 0x8ace29cd
xor edx, edx
div ecx
add eax, 0x7fe5be8a
and eax, 0x2810c93d
sub eax, 0xe6ce575b
imul eax, eax, 0xef6c15d2
sub eax, 0x619e05e2
or eax, 0x5005ca18
imul eax, eax, 0x3f1a099f
add eax, 0x7f36a0e2
or eax, 0x24f652a
xor eax, 0xd6162fc9
imul eax, eax, 0xef487d7f
imul eax, eax, 0x973199bd
or eax, 0x4f131ed4
sub eax, 0x1783674a
or eax, 0xf678c0ec
cmp eax, 0xe99bab6d
jb 0x100e2859
mov eax, dword [0x101bc0d0]
sub eax, dword [0x101bc0d4]
and eax, 0xe00ce78d
add eax, 0x46c31ead
add eax, 0xc793ea0b
sub eax, 0xa2ec11c1
mov ecx, 0xa2cb411b
xor edx, edx
div ecx
or eax, 0x8a538508
or eax, 0xc57b171c
sub eax, 0x1a00429
sub eax, 0xde39e965
sub eax, 0x14143f3e
imul eax, eax, 0xb8381df
or eax, 0xbae380bd
and eax, 0x2427fbf1
imul eax, eax, 0x816c04b4
sub eax, 0x7ab8c420
or eax, 0x6ecb6a84
imul eax, eax, 0xeef0e02e
add eax, 0x95be47fd
or eax, 0x2587afb0
imul eax, eax, 0x78569e08
or eax, 0xb3de6531
and eax, 0xe62a3d6c
and eax, 0xbc39e797
sub eax, 0x5cf66206
imul eax, eax, 0xe9c23d2a
and eax, 0x558a9d65
imul eax, eax, 0x6bd0c830
and eax, 0x3d3f0554
add eax, 0xecd507e2
sub eax, 0x64457941
xor eax, 0xde36ed30
mov ecx, 0xc6f68a6c
xor edx, edx
div ecx
add eax, 0x5a5d1652
mov ecx, 0xc13a5c81
xor edx, edx
div ecx
or eax, 0xcfbd435a
imul eax, eax, 0x673dead1
imul eax, eax, 0x97395b5a
sub eax, 0x7bf75129
xchg ebp, esi
or al, 0xcc
fcom dword [ebp + 2]
invalid
mov esi, dword [ebp - 0x14]
mov edi, dword [ebp - 0x18]
mov al, 0x64
stc
pop ecx
add dword [0xd909eefd], ebx
xor eax, 0xfd0e063d
rol bl, cl
invalid
outsb dx, byte [esi]
aad 0x15
mov edx, 0xcaf3fa4f
inc ebx
imul esi, dword [ebx], 0xa78fbcb6
adc dword [ebx - 0x3847e708], 0xffffff9f
add al, 0xbf
scasd eax, dword es:[edi]
and dh, byte [ebx - 0x24d26f65]
cmpsb byte [esi], byte es:[edi]
invalid
mov bh, 0x7f
outsb dx, byte [esi]
pop eax
fiadd dword [ecx]
mov dh, 0x68
outsb dx, byte [esi]
pop eax
sub bl, byte [ebx - 0x55]
cmp bh, ah
test dword [ecx - 0x42], ecx
insb byte es:[edi], dx
dec esi
popal
and al, 0x85
jae 0x100e0e77
div byte [ecx]
mov ebp, ss
mov ch, 0x3f
retf
mov ch, 0xe2
enter 0x22d7, 0xfffffffffffffff4
les ecx, [esi + 0xfda1843]
pop ecx
insd dword es:[edi], dx
inc eax
test eax, 0x41e05935
mov al, 0xf4
pop ecx
mov eax, 0xa8b10eff
add byte [edi], bl
invalid
xor byte [edx], ah
xchg edi, eax
mov ebp, 0x758bffff
in al, dx
mov esi, dword [ebp - 0x14]
mov edi, dword [ebp - 0x18]
int1
cmpsb byte [esi], byte es:[edi]
je 0x100e2663
je 0x100e2731
sahf
mov bl, dl
js 0x100e265e
add byte [ebx - 0x1f], ch
push edx
push ebx
add edi, dword [ecx + 0x2c]
xor eax, 0x6fc5e4d4
bound edx, qword [esp + ebx*4]
cli
sub eax, 0xff44d033
cwde
mov esp, 0x599f2de
scasd eax, dword es:[edi]
pop ss
push es
sbb esp, dword [esi]
lds esi, [esp + edi]
xchg byte [edx - 0x3b], bh
jp 0x100e26ab
jmp 0x100e26e4
pop ds
mov dl, 0xdf
loopne 0x100e2783
stosd dword es:[edi], eax
xchg byte gs:[edx + edx*4 - 0xd], bl
add byte [eax + esi*2 - 0x4cb51438], al
lcall 0x3129, 0x366dfd84
pop edx
cmp dword [ebx - 0x5b8ac0e5], ebp
push ecx
test eax, 0x4d44ad0c
cmp al, 0x46
mov esi, 0x5646b0de
lcall 0xec0e, 0xb38aa0a9
pop eax
sub al, 0xd4
stosb byte es:[edi], al
call 0x50a6debd
in al, dx
add esp, eax
xchg ebp, eax
ljmp 0xada0
sti
jecxz 0x100e2797
hlt
jmp 0x3fc32a33
fmul qword [0x968fec82]
cld
salc
mov edi, 0xa44c83a4
sti
rol dword [esi - 0x79], 1
and esi, dword [edx - 0xf]
dec ebp
xlatb
xchg esp, eax
cli
out 0xf4, eax
sub eax, 0xad18e194
clc
jmp 0x25490340