Function at 0x10014f9f
Capabilities:
Acquire debug privileges
Encode data using xor
Terminate process

Disassembly:
pushfd
test byte [0x10014112], 0x11
jne 0x10014113
pop edx
pushfd
add al, 0xed
rol dword [edx - 0x5a], 1
push esi
cmp byte [esp + ebp*4], dh
or ah, byte [edx - 0x519bf57d]
xchg ebx, eax
mov al, 0xfa
out 0x27, eax
xchg dword [edx], ebp
pop ss
sub dword [esi], ebp
fnsave dword [edx - 0x2e]
mov dword [0x2fb475c5], eax
mov dl, 0xa4
imul ebx, esp, 0x7db1288e
in eax, 0x93
salc
pushal
and al, 0x95
dec edx
inc ecx
add dword [ebp - 0x71], edi
popfd
push ebp
pushfd
test byte [0x10014129], 0x2f
jne 0x1001422a
push ebx
or dh, byte [esp + ebp*2]
jg 0x10014133
shl dword [edx + edi*8], cl
lodsd eax, dword [esi]
popal
out dx, eax
sub eax, 0x6dbf5b49
insd dword es:[edi], dx
xchg edi, eax
jne 0x100140b8
sbb al, 0xf4
cwde
in eax, dx
pop ebx
inc ebp
in al, 0
fild word [ebx]
mov eax, dword [0xb1570461]
sbb dword [ebx + 0x688c8e40], edi
enter 0x1fe5, 0x7a
sbb ch, byte [ecx]
int3
xor ebp, dword gs:[ecx]
push ss
lodsb al, byte [esi]
stc
fsubp st(6)
popfd
mov ebp, esp
push 0xffffffffffffffff
pushfd
test byte [0x1001432e], 0xb2
jne 0x1001432f
xchg esi, eax
add al, 0x35
dec edx
xor esp, dword [edi + ecx*8 - 0x2157ad7a]
enter 0x64f1, 0x33
or byte [ebx + 0x2d], dh
lodsd eax, dword [esi]
push ecx
rcr dword [0xc8a218fd], cl
dec esp
jo 0x10014222
push ebp
sbb byte [edx + 0xa], bh
daa
in eax, 0x25
push eax
rcr dword [edi], cl
bound ecx, qword [esi - 0x10]
movsb byte es:[edi], byte [esi]
out 0xf, eax
dec esp
xor ebp, edx
sbb dword [esp + ecx*8 - 0x75], esi
dec edx
arpl word [eax + 0x3a74ab81], sp
sbb al, cl
aam 0x9b
xchg ebp, eax
add dl, byte [0x29cd4dda]
cld
pushfd
dec edx
std
pop esi
xchg ecx, eax
add eax, 0x8c082fb8
xlatb
push ds
xchg edx, eax
inc eax
int 0x9d
and esp, esi
inc eax
loopne 0x10014290
fdiv st(2)
fdiv st(2)
out dx, eax
adc ecx, dword [esi + 0x68]
xchg esi, edx
push 0x8b3dd687
push 0xf15339f4
salc
cmp eax, 0x39f4688b
push ebx
int1
cli
insb byte es:[edi], dx
js 0x1001429b
pop esi
cli
cmp dl, 0xb4
clc
pop ebx
inc esp
xchg ebp, eax
fmul st(2), st(0)
cli
outsd dx, dword [esi]
jne 0x100142a2
enter 0x2abc, 0xffffffffffffffa1
shr ebp, 0xf4
js 0x100142a0
mov al, 0xd7
int3
inc esi
inc ebx
dec dword [edx + 0x28]
invalid
popfd
push 0x1013def3
mov eax, dword fs:[0]
push eax
push ecx
add byte [eax + 0x51], dl
mov eax, 0x1224
call fcn.1011f220
mov eax, dword [0x10170c30]
xor eax, ebp
pushfd
test byte [0x100143f1], 0x21
jne 0x100143f2
xor byte [bx + di - 0x1a], al
cld
inc ecx
out 0xfc, al
xchg edx, eax
or dl, cl
xor eax, 0x502f933f
out 0x22, al
je 0x100143a9
lds ebx, [esi - 0x14]
cmp byte [0x88e33b76], cl
sbb dword [edi], 0xbfe791ec
jle 0x10014304
xlatb
push ebp
push eax
aaa
inc ecx
jg 0x1001438f
in eax, dx
inc esp
stc
in eax, dx
das
daa
pop eax
loop 0x100143a9
cdq
into
loopne 0x1001433a
rol dword [edi + 0x57], 1
int3
dec ebp
frstor dword [ebp + 0x4ce431ed]
xor esp, esp
dec esp
or ah, byte [esi + 0x4b]
scasd eax, dword es:[edi]
jbe 0x100143ad
inc esi
scasd eax, dword es:[edi]
lds esp, [ebx]
mov ah, 0x53
cmc
scasb al, byte es:[edi]
dec ecx
je 0x1001435e
xor dl, dl
push 0x12c8de16
clc
mov ecx, 0x63ebd46d
fidiv dword [eax - 0x7a5707f8]
and dword es:[edi - 5], 1
fidivr word [ebx + edx]
xchg ebp, eax
pop ecx
mov dword [edx - 0x74], 0xbcf2bd9a
sal ecx, cl
inc edx
mov word [edx - 0x2c430d43], ds
int1
ficom dword [ebp + 0x40]
xlatb
pop ebx
pushal
outsd dx, dword [esi]
jge 0x10014411
popfd
mov dword [ebp - 0x14], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
pushfd
test byte [0x1001450a], 0xd8
jne 0x1001450b
add byte [eax], al
add bh, ch
out dx, eax
punpckldq mm2, dword [eax - 0x59]
pop es
movsd dword es:[edi], dword [esi]
les esp, ss:[esi + 0x44]
add eax, 0xe343776b
movsd dword es:[edi], dword [esi]
in eax, 0x62
jo 0x100143e1
jle 0x1001446a
pop si
dec edi
inc ebp
and dword [ebx + eax*2], ecx
sub byte [edi + 0x216962cb], cl
add bl, byte [esi + 0x5aa8f805]
mov ecx, 0xda7a9fda
stosd dword es:[edi], eax
pop eax
fcom dword [edi + 0x6e]
push eax
fcomp dword [eax + 0x24]
mov cl, 0x1b
sbb eax, 0x4dbf49cd
inc eax
ja 0x10014406
mov edi, 0xaf77404d
or edx, dword [eax - 0x5f]
lodsb al, byte [esi]
clc
lahf
adc al, 0x96
sub ecx, 0x9844df55
push ebx
xchg edi, eax
lodsd eax, dword [esi]
mov eax, dword [0xb765f548]
mov dh, dl
cmc
mov bh, 0x88
salc
push edi
adc al, 0xfe
push 0xffffffffffffffb0
fmul dword [eax - 3]
adc al, 0x14
or dword [0x5c77973f], edi
mov ah, 0x3a
dec eax
cmp dword [0x3f73b2be], edi
fcmovu st(0), st(6)
pop ecx
pop es
cmp eax, 0xe8a19f0a
sub eax, 0xd15a8f0e
jae 0x100144e0
enter 0x1b8, 0x42
lahf
and dword [esi - 0x2b760495], eax
js 0x10014509
sub ecx, esp
aas
mov ch, 2
aas
fisub word [eax]
test al, 0xa7
xchg ebx, eax
dec edx
and byte [esi - 0xbfcc0b4], ch
pop eax
jnp 0x100144bf
and dword [ebp + 0x1f], eax
inc ebp
pop ds
popfd
stosb byte es:[edi], al
and eax, 0x6a4da20
stc
jae 0x10014452
movsd dword es:[edi], dword [esi]
sub ebp, ebp
pop ss
inc esp
push 0x78
xchg ecx, eax
mov ch, 0xee
fisttp dword [esi + 0x3669d64]
xchg edx, eax
mov esi, 0x8d05f1ad
pop ebp
in eax, 0xbd
add eax, 0xbde55d8d
ror dword [esp + ecx*4 - 0x654e987e], 1
dec eax
jbe 0x10014532
add dh, byte [edx + 0x2f2683e7]
inc edi
and eax, 0x37d0d5d4
sahf
mov ebx, 0xe0c1d327
jns 0x10014577
xor bh, ch
jge 0x10014557
sahf
or ebp, esp
popfd
mov eax, dword [ebp + 8]
mov dword [ebp - 0x1230], eax
mov eax, dword [str.unknown]
mov dword [ebp - 0x118], eax
mov eax, dword [0x10146754]
push 0xfc
mov dword [ebp - 0x114], eax
xor ebx, ebx
lea eax, [ebp - 0x110]
push ebx
push eax
mov dword [ebp - 0x1220], ecx
call fcn.1011df60
add esp, 0xc
lea eax, [ebp - 0x1234]
push eax
push 0x28
mov dword [ebp - 0x1224], ebx
mov dword [ebp - 4], ebx
pushfd
test byte [0x100145a9], 0x5a
jne 0x100145aa
aaa
test eax, 0x22b3c3ec
jbe 0x100145cb
sbb byte [ecx - 0x6b9c3aad], al
and ecx, edi
push ecx
pop ss
cmp eax, 0x1336fa2
cmpsb byte [esi], byte es:[edi]
mov byte [0xa601336f], al
cmpsd dword [esi], dword es:[edi]
xchg esi, eax
outsb dx, byte [esi]
pop es
xor ecx, dword [ebp + 0x68ab42f5]
and ebx, dword [ebx]
test eax, 0x229c04f5
inc edx
int1
inc edx
stosd dword es:[edi], eax
push 0xa93e1b23
cmc
add al, 0x9c
and al, byte [edx - 0xf]
pop esi
jbe 0x10014609
push cs
fidivr word [ecx + 0x4b]
dec eax
shl ebx, cl
scasd eax, dword es:[edi]
out dx, eax
je 0x10014583
add ah, byte [eax]
lea ecx, [edi]
or dword [edx + 0x74], esp
pop ebp
push eax
stosb byte es:[edi], al
inc esi
popfd
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push eax
call dword [sym.imp.ADVAPI32.dll_OpenProcessToken]
push 1
push str.SeDebugPrivilege
push dword [ebp - 0x1234]
call fcn.1004a362
pushfd
test byte [0x1001460c], 0xfb
jne 0x1001460d
into
or eax, 0x9ac1da7b
jns 0x1001460a
mov esp, 0xd4982913
imul edx, dword [esi], 0x1a
mov edi, 0x4d0a1b58
fidivr word [edx + 4]
cmp bh, dh
pop edx
popfd
jl 0x1001460f
pushal
and dh, byte [ebp - 0x74]
test byte [eax + 0x6c12a82f], cl
pop edx
or bh, byte [ecx]
popfd
xlatb
cmpsd dword [esi], dword es:[edi]
dec eax
or eax, 0xb374f9c0
shr dword [edx], 1
sub al, byte [esi - 0x7c626a02]
xchg dh, bh
xchg ebp, eax
popfd
add esp, 0xc
lea eax, [ebp - 0x1228]
push eax
push 0x1000
les ecx, [ecx*4 - 0x12277b]
call dword [eax + 0x68]
add byte [eax], dl
add byte [eax], al
lea eax, [ebp - 0x1118]
push eax
call sub.PSAPI.DLL_EnumProcesses
test eax, eax
jne 0x10014638
push 0xe0000047
call fcn.100b89bc
pop ecx
mov esi, dword [ebp - 0x1228]
shr esi, 2
mov eax, 0x400
cmp esi, eax
jae 0x1001464c
mov eax, esi
cmp ebx, eax
jae 0x10014c85
pushfd
test byte [0x100146d8], 0xc1
jne 0x100146d9
in eax, 0xb8
insb byte es:[edi], dx
pop esi
das
jb 0x100146bf
lea edi, [0x69cabd51]
mov es, word [ebx - 0x26]
sub bl, byte [ebx + 0x60f4e912]
or byte [ecx - 0x6b], bl
xchg ebp, eax
jnp 0x10014676
leave
test byte [si - 0x15d0], ah
sub bh, al
add ebp, edx
shl dword [0x22286bc0], 1
and byte [ecx + esi*4 - 0x26], al
outsb dx, byte [esi]
sbb dword [ebp + 0x5c16168f], ecx
salc
jbe 0x10014707
cmp esi, esi
fidiv word cs:[edx - 0x53ac0e60]
xchg edx, eax
movsd dword es:[edi], dword [esi]
adc ebp, edx
dec ebx
xor eax, 0xfc21a46
xchg ebx, eax
jns 0xd104ed66
test byte [edi], 0x52
adc ecx, esi
jmp dword [ecx - 0x1e]
push esi
xchg ebx, eax
adc al, 0x15
insb byte es:[edi], dx
aam 0xd2
cli
mov eax, 0xd0c0f606
cmp ah, byte [edx + eax]
xchg ecx, eax
out dx, eax
mov dh, 0xd9
or al, 0xcb
xor al, byte [esi - 0x73]
in al, dx
popfd
lea edi, [ebp + ebx*4 - 0x1118]
push dword [edi]
push 0
push 0x410
call dword [sym.imp.KERNEL32.dll_OpenProcess]
add bh, bh
adc eax, sym.imp.KERNEL32.dll_OpenProcess
mov dword [ebp - 0x1220], eax
test eax, eax
pushfd
test byte [0x100147a9], 0xb9
jne 0x100147aa
or dword [eax - 0x3d], esi
sub byte [ebx + 0x356aeec8], dh
invalid
je 0x100146e9
ret
xchg esi, eax
push ebx
and cl, byte [0x10ddcac1]
cmp al, byte [edx - 0x51]
neg dword [edx]
push 0xffffffffffffffd6
pop ebp
jo 0x10014772
outsb dx, byte [esi]
pop ss
mov word [edi + 0x4c9faa0a], cs
mov esp, 0x3f9dfb9c
sbb dh, bh
inc eax
push esp
dec ebp
adc al, 0x18
adc al, 0xf3
dec esp
call 0x3e9a9b26
popfd
jnp 0x10014803
xor edx, ebp
fisub dword [ebp - 3]
cmp al, 0xad
popfd
je 0x10014b10
lea ecx, [ebp - 0x1228]
push ecx
push 4
lea ecx, [ebp - 0x122c]
push ecx
push eax
call sub.PSAPI.DLL_EnumProcessModules
test eax, eax
pushfd
test byte [0x100148b9], 0xef
jne 0x100148ba
xchg esp, eax
sti
jl 0x10014782
pop ebx
xor ch, al
fiadd dword [esi - 0x7bac7b5b]
push cs
leave
aam 0xba
ror byte [ebx], 0x85
cmp al, 0xf
test eax, 0x66b0d0f2
xchg edi, eax
out 0x2b, eax
cmp dh, byte [esi]
or dword [esi + 0x7e6cb601], ecx
out dx, al
ror byte [esi - 0x5f], cl
test ah, dl
jg 0x10014804
jmp [ecx - 0x139833ad]
test eax, 0xec67cc53
jne 0x1001482a
add byte [eax + 0x7d], dl
movsb byte es:[edi], byte [esi]
scasd eax, dword es:[edi]
adc eax, 0x9ef590ba
add edi, dword [esi + 0x28e52175]
mov word [ebx - 0x742f4f9c], ds
or bh, byte [edx + 0x49a84cb0]
or edi, dword [edx - 0x37]
leave
mov dl, 0x4a
cmpsd dword [esi], dword es:[edi]
sbb ecx, dword [edx + 0x4da0b508]
mov dword [eax + 0x79a9ee4c], edx
xchg edi, eax
loopne 0x10014804
sub cl, byte [edi + 0x42]
mov word [esi + 0xda504e3], fs
sar dh, 1
cwde
pop edi
int3
popfd
je 0x10014b04
push 0x104
lea eax, [ebp - 0x118]
push eax
push dword [ebp - 0x122c]
push dword [ebp - 0x1220]
pushfd
test byte [0x1001498e], 0x18
jne 0x1001498f
invalid
pop esp
les eax, [ecx]
mov esi, 0x3374da3d
lodsb al, byte [esi]
dec esi
lahf
mov al, 0x78
jb 0x100148d1
imul ebp, dword [ebp + 0x13260e4b], 0x33
and dl, byte [eax]
inc edi
stosb byte es:[edi], al
cmp dword [0xe4056c49], eax
scasd eax, dword es:[edi]
or al, 0xfa
sub bh, dl
add dh, byte [edi + 0x52]
mov esi, 0xa9e70cab
outsd dx, dword [esi]
dec ebp
adc al, 0x23
adc eax, 0x901ebbbb
cmp dword [ebx - 0x4f], ebx
or cl, bh
lds edi, [edi + 0x2d8c04d3]
int3
popfd
call sub.PSAPI.DLL_GetModuleBaseNameA
test eax, eax
je 0x10014b04
pushfd
test byte [0x100149f1], 0xbe
jne 0x100149f2
lahf
shl al, 0xe2
loopne 0x100149ac
call [ecx - 0x2e6f04e9]
inc esp
adc bl, byte [esi + 0x11]
movsb byte es:[edi], byte [esi]
call 0x6b1c3ffb
cdq
pop ss
sti
nop
rol dword [edx + edx + 0x5e], 1
adc dword [esi + ebp + 0x1af63ee8], esp
pop ebx
sti
jns 0x100149ff
lodsb al, byte [esi]
sar cl, cl
or al, 0x7f
enter 0x47b7, 0x21
jecxz 0x100149c6
add dword [edi], 0x2dd903fd
or dword [ebp + esi*4 - 0x14], eax
cld
add edi, edx
xchg ebx, eax
inc esi
cmc
inc edi
push esi
cld
mov dword [0xa801d173], eax
mov al, 0x30
invalid
popfd
push dword [ebp - 0x1230]
lea eax, [ebp - 0x118]
push eax
call fcn.1011f079
pop ecx
pop ecx
test eax, eax
pushfd
test byte [0x10014af8], 0xdb
jne 0x10014af9
jo 0x10014a3b
movsd dword es:[edi], dword [esi]
pop ebx
pop es
cmp cl, byte [ebx + edi*2]
jnp 0x10014a39
cmpsd dword [esi], dword es:[edi]
xchg ebx, eax
int 0xd9
mov ds, edi
les ebx, [edi + 0x6260c816]
dec ecx
call 0x63139e9e
inc esp
imul byte cs:[edi - 0x29]
mov eax, dword [0x62fb489]
mov dword [edi + ebp + 0x51898d06], esi
xor eax, 0xae449423
das
push es
lea ecx, [ecx - 0x6bdccaaf]
inc esp
scasb al, byte es:[edi]
dec sp
dec edi
fdivr qword [eax + 0x1784808c]
daa
push 0xed0af5bc
pop esp
int1
daa
cmpsd dword [esi], dword es:[edi]
fsubr dword [ebp - 0x4751708e]
dec edx
je 0x10014ad6
daa
scasb al, byte es:[edi]
lodsb al, byte [esi]
cmc
pop es
das
lodsb al, byte [esi]
xchg esi, eax
mov dword [ebp - 0x3f792ceb], eax
mov esi, 0x993f6353
mov bh, 0xf2
je 0x10014ada
arpl word [edi - 0x49], bp
pop ebx
cmp edx, ecx
jno 0x10014ae7
js 0x10014a44
inc dword [edi]
sub eax, 0xfc329f9f
add cl, ah
nop
fmulp st(2)
and dh, byte [esi + ebp + 0x7a]
sub dword [ebx + 0x6a], 0x16
cmp edi, esp
push 0xfffffffffffffff9
outsb dx, byte [esi]
dec ebx
cdq
arpl ax, di
lahf
sahf
scasd eax, dword es:[edi]
imul esi, dword [esi + 0x404da889], 0xf691823e
adc eax, 0x86158fa
scasd eax, dword es:[edi]
cli
scasd eax, dword es:[edi]
adc bl, dh
scasb al, byte es:[edi]
lds eax, [edi - 0x5b]
aam 0xca
cld
in eax, 0xb9
imul dword [eax - 0x931ea18]
mov ebp, 0x9708dd16
test eax, 0x71a10f3f
dec esi
pop fs
jno 0x10014b1e
inc ebx
mov ebx, 0x988d94da
cwde
cmp ebp, esp
cmp byte [ebp + 0x29a789c5], ah
push esi
xor edx, ebp
xor al, 0x6b
dec ebx
inc ecx
movsd dword es:[edi], dword [esi]
lds ecx, [ecx + 0x315629a7]
ljmp 0x4167
inc ecx
and al, 0x9f
mov dl, 0xf0
les esp, [esi]
dec ebx
test bl, bh
inc esi
clc
xchg edi, ebp
jno 0x10014acc
aas
inc esi
popfd
jne 0x10014b04
mov eax, dword [edi]
mov dword [ebp - 0x1224], eax
push dword [ebp - 0x1220]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
inc ebx
jmp 0x10014641
cmp byte [edi + 0x14], ah
adc byte [edx], ch
pushfd
test byte [0x10014b3b], 0xb7
jne 0x10014b3c
dec ebx
cli
sahf
sub al, 0x76
adc edx, dword [edi]
in al, dx
enter 0x75b0, 0xffffffffffffffd8
fsubr st(0), st(0)
popfd
push 0
call fcn.10049c0c
mov eax, dword [ebp - 0x1220]
mov dword [eax + 8], 0xe000000a
add esp, 0x10
mov eax, 0x10014c85
pushfd
test byte [0x10014b82], 0x10
jne 0x10014c83
inc ebx
jecxz 0x10014bb1
mov al, byte [0x6fcc735d]
cli
or dword [esi - 0x279275a7], ecx
das
push edx
cmp al, 0x6b
or dword [edi], eax
lea esi, [ecx + 0x54]
inc eax
pop ecx
inc edi
adc esp, dword [ecx + 0x42]
mov dl, 0x5a
add byte [ebp - 0x690d3ef8], 0x95
enter 0x1ba4, 0xffffffffffffffaf
ja 0x10014ba7
std
aaa
inc eax
add ebx, dword [ecx - 0x14]
sti
xor al, 0xff
xor al, 0xd4
or al, 0xf6
sbb esi, ecx
mov dword [esp + ebx*2 + 0x6c], ecx
mov eax, dword [0xa88e6616]
fmul qword [edx + 0x4a]
push esi
pop esi
sal dword [edi + 0x36], cl
inc edx
test ebx, 0xc008841e
or al, al
out dx, al
mov al, 0xd6
cmp al, 0x82
insd dword es:[edi], dx
pop edx
sbb dword [edx + edi*2 - 0x68e9a20b], 0x489958ba
shr byte [ecx - 0x530bbc95], 1
pushal
inc esp
mov al, byte [0xbaa5428e]
movsd dword es:[edi], dword [esi]
sti
sar dword [ebp - 0x68], cl
out 0x36, eax
out 0xd5, eax
out 0xd5, eax
movsb byte es:[edi], byte [esi]
xor bl, byte [edi - 0x3e08fb0]
sub al, 0xe5
arpl word [eax], sp
mov ecx, 0x47d0adca
add eax, 0xe4ec43c1
fcom qword [0xc70e8ad5]
cwde
mov cl, 0x1f
daa
mov ch, al
xor al, ch
sar dword [ecx - 0xf9f73e3], 1
adc dword [edx - 0x2b], ecx
xor bl, ch
cli
inc esi
fiadd dword [eax + edx + 0x28]
std
push es
jno 0x10014be1
aad 0x8a
push cs
invalid
inc ebx
xchg esp, eax
cwde
xchg edi, eax
push ecx
rcl dword [edx - 0x7c5eb6b6], 3
mov al, 0x1e
jne 0x10014bb9
fimul dword [esi]
push ebp
mov al, byte [0xd3e3055b]
scasb al, byte es:[edi]
or al, byte [ecx]
aad 0x8a
cmc
scasd eax, dword es:[edi]
fadd qword [0x8c7004b]
add al, 0x94
adc al, 0x46
and al, 0x5f
xchg ebp, eax
pushal
pop esp
sbb edx, dword [eax]
push 0x24
fstpnce st(7), st(0)
dec edx
sub byte [edx], cl
push ebp
movsd dword es:[edi], dword [esi]
rcr ecx, cl
jae 0x10014c85
inc byte [edi + 0x63]
outsb dx, byte [esi]
cmp esp, edi
jbe 0x10014bfb
aad 0xd
lodsd eax, dword [esi]
sal byte [ebp + ebp - 0x6d], 0x9d
mov byte [edi - 0x57], dh
mov esi, 0xe62d5366
xchg esi, eax
je 0x10014c95
notrack call 0x4f42171c
push esp
push ss
pushfd
xchg edx, edi
mov word [eax], ds
sbb byte [ebp - 0x237a743d], bl
in eax, dx
invalid
popfd
ret
mov eax, dword [ebp - 0x1224]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pushfd
test byte [0x10014ca3], 0xa2
je 0x10014da4
add al, 0xdc
adc bh, dh
mov dword [0xd67ea8df], eax
fcom qword [eax]
mul dword [ebx - 0x29815721]
mov ebx, dword [edi + 0x73ae87bb]
sub byte [edi + 0x606e55a0], dh
cmp al, 0x9b
adc al, 0x3f
inc ebx
dec esp
mov bl, 0x4d
and dword [eax + 0x72], eax
pop edi
out 0x8e, al
clc
aaa
push ds
sub ecx, esp
lea esp, [esi + 0xe]
rcl dword ds:[0x4d926749]
cmpsb byte [esi], byte es:[edi]
dec eax
mov bl, 0xe1
push cs
int1
fcomp dword [edi]
push ebp
mul byte [edi - 0x7a]
jne 0x10014c82
frndint
int 0xb1
jb 0x10014c7d
cld
mov al, byte [0xa63f4c7]
and byte [eax + 0x62], bl
cmp al, 0xcd
in eax, dx
cmpsb byte [esi], byte es:[edi]
cmp al, 0xd9
stc
in eax, dx
test ah, ah
inc esi
popal
push ecx
cmpsb byte [esi], byte es:[edi]
std
adc cl, 0xa6
cmp dword [edx + 0x46eccc4], esi
imul eax, dword [edi + esi*2], 0xffffffb5
push cs
mov al, byte [0xfd4eb1d0]
mov eax, 0x27f87762
or byte [esp + edx*4 - 0x11], 0xc
ja 0x10014ca4
mov byte [eax], ch
rcl esp, 1
fcom qword [ecx + 0x75f4232a]
xlatb
neg eax
invalid
xchg byte [eax - 0x7521cf1a], ah
and al, 0xf
das
jbe 0x10014d68
test al, 0xa3
mov cl, 0xb9
rcl byte [ecx]
arpl word [edx - 0x7007b0c6], sp
loop 0x10014dea
pop esp
aad 0x4d
sbb ah, byte [edx]
adc dword [ebx + 0xe0271ca], edx
mov ebp, 0x7a3a7bb1
clc
test byte [0xb5222f45], 0xd0
mov word [edx], ds
mov bh, 0xdc
mov esp, 0x9444ba84
popal
popfd
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x14]
pushfd
test byte [0x10014e7a], 0x88
je 0x10014e7b
sub dword [0x3a067e1d], edi
cli
sub al, 0x14
aad 0x5f
inc esp
mov esi, 0xc5d3bf7a
xor dl, ch
pop esp
add dword [edx + 6], edi
push eax
dec eax
mov dword [0x3d6bbf3f], eax
js 0x10014d72
xor dword [edx + 0x6c8dc41e], 0x15
pop esi
ja 0x10014d92
mov dl, 0x1e
les ecx, [ebp + 0x775e156c]
scasb al, byte es:[edi]
int3
push edx
loopne 0x10014e13
jg 0x10014ddb
pop ebx
aad 0x44
xor dword [ebx - 0x36], ebx
cwde
sub byte [ebx - 0x4bb852ad], dh
mov al, 0xc8
sar byte [edx], 0xea
mov byte [esi + 0x68], al
inc edx
test dword [eax], edi
lodsd eax, dword [esi]
dec esi
bound esi, qword [0x4fe7572b]
sbb eax, 0xb69f6007
mov cl, byte [0xf09efe26]
lahf
mov dh, 0x8a
or eax, 0xf09efe26
ja 0x10014e2a
dec esi
leave
scasb al, byte es:[edi]
in al, 0xfa
sti
xchg edx, eax
pop eax
mov al, 0x65
scasd eax, dword es:[edi]
call 0xf2199fb1
adc dword [ecx + 0x18], 0xffffffe2
dec ebx
mov dword [edx], esi
aas
in al, dx
outsb dx, byte [esi]
pop es
aam 0x37
mul byte [esi + ebx + 0x54c5194a]
inc ecx
xchg dword [edx], ecx
cmp byte [ecx], dl
sub al, ch
inc ecx
in al, dx
xlatb
mov dword [0x7163e622], eax
jecxz 0x10014dd3
and esi, edx
stc
mov esp, 0xc3d9fdbe
mov esp, 0x98301878
in al, 0xbb
in al, dx
pushfd
xchg byte [edi], ah
int1
arpl word [ecx + 9], ax
jae 0x10014ee5
mov cl, 0x64
outsb dx, byte [esi]
and eax, 0xd37f7576
push 0x42
popfd
mov edi, dword [edi + ecx*8 + 0x35185dcc]
popfd
xor ecx, ebp
call fcn.1011e48a
leave
ret 4
cmp al, 0x7f
adc dword ss:[eax + 0x17], ebx
mov eax, esp
push ds
aas
or byte [edx + 0x51cff188], cl
loop 0x10014efc
add eax, 0xfc0859d
test byte [ebx], ah
pop es
popfd
test eax, eax
je 0x10015623
and eax, dword [edi]
add byte [eax], al
cmp byte [eax], 0
je 0x10015623
mov edi, eax
pushfd
test byte [0x10014f9f], 0xf6
jne 0x10014fa0
pop ss
scasd eax, dword es:[edi]
push esp
adc cl, dl
or eax, 0x2bcede4d
sub byte [edi - 0x63ca007c], ch
out 0xca, eax
dec ebp
push eax
inc ebp
and eax, 0x9fead1d8
in al, dx
sbb al, 0xcf
leave
int1
sbb edi, dword [edi]
rol bh, 0x43
xor eax, 0xc6d0ca6f
push 0xffffffffffffffef
xor dword [eax - 0x5c], esi
mov esp, 0x7d2f3808
cmpsb byte [esi], byte es:[edi]
or byte [eax], bh
das
jge 0x10014ef6
cmpsd dword [esi], dword es:[edi]
cmpsb byte [esi], byte es:[edi]
adc edx, 0xffffffe8
popal
outsb dx, byte [esi]
call 0xdeab05b8
movsd dword es:[edi], dword [esi]
and eax, dword [edx + 0x52653096]
pop esp
push ds
xchg ebx, eax
out dx, eax
sbb ecx, edi
dec eax
add al, 0xe4
loop 0x10014f9b
test dl, ah
or bl, 0xb5
jns 0x10014f9c
mov edi, 0xc1fbd280
and dh, byte [esi - 0x3eaa0a8a]
mov bl, 0x65
push edi
leave
xor edx, dword [edx - 0x268e287d]
adc eax, dword [ecx - 0x1d]
xor ebp, edi
mov dh, 0xdd
bound esp, qword [ebx]
mov eax, 0x2481e33f
out dx, al
mov eax, 0xad752f7d
das
jne 0x10014f4b
scasb al, byte es:[edi]
pop es
popfd
push edi
call fcn.1011d740
add eax, edi
mov dword [ebp - 8], eax
push 0xa
lea eax, [ebp - 8]
pushfd
test byte [0x10015031], 0x2a
jne 0x10015032
sub dword [ebp + 0xb], ebx
adc edx, dword [edx - 0x626ee757]
add edi, dword [ecx - 0x16]
sbb byte [ecx - 0x1586fc63], dl
fisubr dword [edi - 0x295ed7f8]
cmp eax, 0xd6a12808
pop es
fucompi st(7)
cmp eax, 0xaba42cef
xor al, 0x61
mov esp, 0x8190b41a
out dx, eax
imul edi, dword [ebx + 0xf], 0x6a
rcl eax, 1
fisttp dword [edi + 0x3a]
mov ecx, 0x71e74f29
lahf
mov eax, 0xe10dae92
popal
cli
xor byte [esp + ecx*8], 0xdb
jle 0x10014fc1
xchg esi, eax
inc eax
push edx
inc esp
xchg edi, eax
fiadd word [eax - 0x35]
insd dword es:[edi], dx
add dword [ebx - 0x61112013], edx
or byte [edi], dl
in al, dx
pop ebp
cmp byte [ebx], dh
xor esp, dword [eax + 0x1d]
jne 0x10014fc9
test eax, 0x63d9dd1f
push 0x6f0b1004
rol byte [edi*8 + 0xebcecee], 1
inc esi
mov cl, 5
push esp
cmp dword [ebx], 0x28
int 0xa5
popfd
push eax
pushfd
test byte [0x1001506b], 0xac
jne 0x1001506c
adc ecx, edx
xor ecx, eax
jae 0x10015069
mov ebx, 0x234a935b
xchg edi, eax
fimul word [edi + 0x6ec57642]
fimul word [esi - 0x7d]
cwde
dec edx
clc
cmp bh, cl
stosd dword es:[edi], eax
inc edx
pop esi
fcom qword [ebp + 0xa8b2fee]
cdq
test bl, bl
xlatb
call 0x7071b2cf
pushal
out dx, al
dec ebp
popfd
push edi
call fcn.1011f476
mov edi, eax
add esp, 0x10
test edi, edi
jne 0x10015097
push dword [esi]
mov ecx, ebx
call fcn.100140d3
mov edi, eax
test edi, edi
jne 0x10015097
mov dword [ebx + 8], 0xe0000006
jmp 0x1001562a
lea eax, [ebp - 4]
push eax
push 0x28
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push eax
call dword [sym.imp.ADVAPI32.dll_OpenProcessToken]
test eax, eax
jne 0x10015360
mov dword [ebx + 8], 0xe0000008
pushfd
test byte [0x1001510e], 0x18
je 0x1001520f
pushfd
or eax, 0x24bf9cb4
shl dword [ecx - 0x35], cl
cmp byte [edi - 0x19cd7b45], dh
push eax
or al, 0x9a
int3
popfd
jmp 0x1001562a
push 1
push str.SeDebugPrivilege
pushfd
test byte [0x10015406], 0xf1
jne 0x10015407
stosb byte es:[edi], al
mov al, byte [0x6bb53110]
rol dword [eax + 0x1f15ad9d], 1
mov dh, byte [ebx - 0x31d20755]
out 0x91, eax
in al, dx
cmp byte ss:[esi], ah
mov dword [ebp - 0x49], edi
test al, 0x5e
cmp al, 2
stc
aam 0xcd
enter 0x2cf6, 0xffffffffffffffbb
scasd eax, dword es:[edi]
inc ebx
pop ebp
daa
imul ecx, dword [0xf40031e7], 9
mov dword [0x9679b508], eax
stosb byte es:[edi], al
inc esp
add al, 0x5e
outsd dx, dword [esi]
in eax, dx
add ah, byte [edi + 0x53]
out 0x46, al
mov bh, 0xf6
pushfd
lahf
cmp byte [ebx + 0x30cdde64], 0xf6
scasb al, byte es:[edi]
xor eax, 0x6e9fa369
into
push 0xffffffffffffff99
or ecx, dword [0x5434556]
xlatb
stosb byte es:[edi], al
mov ah, byte [ecx + 0x43]
or dword [eax - 0x29008a36], esi
dec ecx
add eax, edx
fcom qword [ecx]
cli
mov ebp, 0xf1d7eb19
dec eax
pop esp
dec esi
sbb dword [ebx - 0x38422b47], ebp
jb 0x100153fe
out 0xe3, eax
push edi
xchg edi, eax
xor byte [eax + edx - 0x38], dl
sbb ebp, dword [edi + 0x26021120]
jo 0x10015422
scasb al, byte es:[edi]
popfd
push dword [ebp - 4]
call fcn.1004a362
add esp, 0xc
test eax, eax
jne 0x10015488
pushfd
test byte [0x1001547a], 0x96
jne 0x1001547b
mov ss, word [edi - 0x1c]
or cl, byte [ecx + 0x4a941de8]
adc al, byte [edx]
push edi
in al, 0xa
mov eax, ebp
sbb eax, 0x2124a94
mov ch, byte [ebp + edi*2 + 0x33b031d9]
adc eax, 0x984261de
cwde
mov ch, 0x73
je 0x1001543c
call esi
salc
cmp cl, byte [ecx - 0x32d213eb]
mov bh, 0x76
cmpsb byte [esi], byte es:[edi]
mov dword [0xed8487fa], eax
outsd dx, dword [esi]
sbb ebp, dword es:[ebx + 0x7491b064]
and ax, 0x8ce7
pop edi
or byte [ebp - 9], ah
fldcw word [edx + 0x64]
add edx, ecx
sbb eax, 0x8518490c
xchg esi, eax
fnstcw word [ebp - 0x543b337f]
and byte [edx - 0x26e36e2a], dh
leave
sbb eax, 0x294be120
add al, 0x9d
popfd
mov dword [ebx + 8], 0xe0000009
jmp 0x1001562a
push dword [ebp - 4]
mov esi, dword [sym.imp.KERNEL32.dll_CloseHandle]
bound edx, qword [eax + edx]
pushfd
test byte [0x100154d6], 0x44
jne 0x100154d7
pop eax
jae 0x10015437
cld
inc esp
jl 0x10015521
dec edi
idiv byte [eax]
and edx, edx
jle 0x1001548e
stosd dword es:[edi], eax
cwde
in eax, dx
dec eax
dec eax
dec edi
rcl ch, 1
neg dword [ebx + ecx]
push 0xc5f0a987
mov ecx, 0xab5d7666
pop ss
pushfd
mov bh, byte [edi + 0x1335727a]
adc cl, al
in eax, 4
shl dh, 1
xchg ecx, eax
add al, 0xd0
out 0x2e, al
xchg ecx, eax
dec ebp
and al, byte ss:[edx + 0x69]
dec eax
popfd
call esi
push edi
push 0
push 1
call dword [sym.imp.KERNEL32.dll_OpenProcess]
adc eax, sym.imp.KERNEL32.dll_OpenProcess
mov edi, eax
test edi, edi
jne 0x10015562
mov dword [ebx + 8], 0xe0000007
pushfd
test byte [0x1001555b], 0xf6
jne 0x1001555c
push 0xffffffffffffffe7
pushfd
mov esi, 0xa15fe647
sub cl, byte ss:[eax - 1]
or dword [edx + 0x72], eax
or al, 0x6a
pop ds
sub edi, ebx
js 0x100154cb
mov dword [0x90c54a87], eax
mov byte [edi], cl
mov dword [ecx - 0x71c48570], edi
xchg edx, eax
rol dword [ecx], 0xb9
mov ecx, 0xa15b8e7a
les ebx, [ebx + 0x1dddf767]
mov esi, 0xee374cb7
nop
call 0x283879b3
aaa
jecxz 0x100154e0
and al, 0x62
push ss
and eax, ecx
inc ebp
mov word [0x189dfc75], ds
adc dword ss:[ebx], esp
out 0xf8, eax
fiadd dword [esi]
and dword [ebp + ebp*8 + 0x74c3af02], esp
or eax, 0x911b60f4
popfd
jmp 0x1001562a
push 0
push edi
call dword [sym.imp.KERNEL32.dll_TerminateProcess]
mov dword [ebp - 0xc], eax
test eax, eax
jne 0x1001557b
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebx + 8], eax
push edi
call esi
mov eax, dword [ebp - 0xc]
pushfd
test byte [0x100155be], 0x69
jne 0x100155bf
mov al, 0x3c
pop es
test cl, dl
adc al, 0xb
fcom st(6)
leave
sbb byte [edx - 0x63], 0x57
adc dh, bl
dec eax
adc bh, ch
cmp dh, bh
cmc
lock or byte [ebp + 0x54], dh
lodsb al, byte [esi]
mov bl, 0xa2
int1
add dword [eax], ebx
jg 0x10015620
or edi, dword [0xcad8c48a]
dec edi
jne 0x24fc7da4
stc
out 0xbd, al
popfd
jmp 0x10015749
out 0x94, eax
popfd
mov dword [ebx + 8], 0xe0000001
xor eax, eax
pushfd
test byte [0x10015647], 8
jne 0x10015748
pop esp
lodsb al, byte [esi]
int1
inc edi
leave
pushal
cmp dl, byte [ebx + 0x3b]
popfd
stc
rcl bh, 1
xlatb
jns 0x10015696
inc ecx
scasd eax, dword es:[edi]
shl byte [ebp - 0x17], 0xf1
test al, 0x89
mov ecx, esi
jecxz 0x10015666
lodsd eax, dword [esi]
loopne 0x1001568c
test byte [edx + ebp*4 + 0x30], ch
push 0x9a6fa354
cmp eax, 0x8928a154
push ecx
sub dword [edx + 0xe], 0x56
popfd
cmp ecx, ebx
or byte [esi], bl
mov ecx, 0x58c5af78
and ebx, dword [eax + 0x24]
nop
mov dh, 0xb1
outsb dx, byte [esi]
jbe 0x10015646
aad 0xd1
push esp
cmp al, 0xb1
ja 0x100156f0
push 0xffffffffffffffc0
sbb ecx, dword ss:[ebx]
pop esp
sbb dword [edi - 0x5c], 0x26e31909
sal byte [esi], 0x1b
or ebx, dword [ecx + eax*4 + 0x5f]
pop edi
movsb byte es:[edi], byte [esi]
or dword [ecx], ebx
jecxz 0x100156b8
pop ds
mov esp, 0xd88ba94e
mov ebx, eax
xlatb
dec ebx
inc dword [eax - 9]
sub al, 0x77
xchg byte [edi + 0x34779f5b], ah
add eax, 0x1d92c48c
insb byte es:[edi], dx
shl byte [ecx + 0x2d9cc166], 1
add edi, dword [esi + 5]
dec ecx
dec ebx
sbb eax, 0x66a1d06c
rcr dword [ebp + ebp + 0x49057e03], 0x26
dec ebx
xchg edi, eax
add eax, 0x231a1a85
cmc
les edi, [edx + 0x41]
dec esp
add eax, 0x5e453d4
jno 0x100156f6
cdq
inc edi
cmpsb byte [esi], byte es:[edi]
test cl, dh
lodsd eax, dword [esi]
add eax, 0xb1b97300
jbe 0x100156ed
lds ecx, [ecx + ecx + 0xe]
pop ds
sahf
stc
fistp qword [eax + 0x10b295f4]
xchg esi, eax
sub eax, 0xc38d1aa3
mov ecx, 0x25991670
mov ebp, 0xd2d0eb3
pop dword [0x29a3fdf7]
cmpsd dword [esi], dword es:[edi]
pop es
xchg esp, eax
cdq
and eax, 0x2d0eb3bd
or eax, 0xfdf7058f
mov bl, 0xe
sub eax, 0xf7058f0d
std
idiv ebp
mov dword [0x9407a729], eax
sub al, 0x49
and byte [edi + edi*8], 0x57
jl 0x10015685
pop ds
lahf
push esi
imul ecx, edi, 0xffffffac
mov ebx, 0x470ead6d
xor ebx, esi
loopne 0x100156a9
jbe 0x10015707
mov eax, es
mov word [edi + edx - 0x2194507d], ss
mov word [esi + eax*4 + 0x630481c1], es
inc edi
jnp 0x10015744
test eax, 0xbf5e86b5
xchg dword [eax + 0x506a7abf], esp
mov byte [ebp - 0xca792e5], bh
xor dword [ebx - 0x6e050314], ebx
fsubr dword [ebx]
pop esp
cmp ebx, dword [edx]
cmp byte [ecx], dl
push esp
sbb bh, byte [eax]
adc dword [ebp + ebx*4 + 0x5f], edx
popfd
pop edi
pop esi
pop ebx
leave
ret