Function at 0x10024754
Capabilities:
Move file
Write file on windows

Disassembly:
dec esp
mov esi, 0xddb80037
and esi, edi
arpl word [si - 0x7c94], dx
mov bl, ch
push ds
sti
push ss
xor eax, 0x97be80d4
dec eax
cmp ah, byte [ebp*8 - 0x4ea5e9ff]
dec edi
sub byte [esi + 0x6e], 0x12
cmp ecx, dword [ecx + 0x45179b58]
inc ebp
dec ecx
and al, 0x7e
pop es
and bl, byte [esi - 0x668d97eb]
adc eax, 0xb54ef766
push eax
nop
bound edi, qword [ebp + 0x70d0192]
jne 0x10024703
fidivr dword [esi - 0x41]
pop edx
push ds
out dx, eax
push cs
test al, 0xc
xchg ebx, eax
popfd
ret 4
push ebp
mov ebp, esp
push dword [ebp + 8]
lea eax, [ecx + 0x9d3]
push 3
push dword [ecx + 0x9c2]
push eax
call fcn.100242b8
pushfd
test byte [0x10024862], 0xda
jne 0x10024863
dec eax
add dl, byte [eax]
fimul dword [edi]
test edi, esp
add byte [eax], al
add cl, bh
stc
jecxz 0x10024772
sar dword [ebp], 0xba
pop edi
aas
in eax, dx
salc
push cs
cli
push edx
push ecx
lds ecx, [edi + edx*8]
or eax, 0x11060604
add al, 0x49
mov dword [0x50450ef], eax
push eax
add al, 5
pop ds
xchg edx, eax
jne 0x1002472c
imul ebp, esi, 0x37
cdq
mov dl, 0x4c
cmp esp, dword fs:[eax]
lodsb al, byte [esi]
xchg edx, eax
mov bl, cl
add dword [ecx], ebp
jno 0x10024804
inc edx
or eax, edi
push es
pop eax
adc eax, 0xac163f4d
mov word [ebp + 0x1fe5fe19], fs
pop ebp
fadd dword [edx]
adc dword [ecx + 0x1195e8a2], ebx
rol dword [edx], cl
nop
pushfd
arpl word [edx], cx
bound ebp, qword [ecx + ebx*8 + 0x49]
mov esp, fs
test dword [edi], edx
adc eax, 0xfcc72d81
rcr dword [ebp + 0x43], cl
push esi
inc esp
jns 0x10024809
xor cl, byte [edi - 0x33]
sbb dword [ecx - 0x54ba5a7e], esi
inc ebp
push esp
aaa
xchg byte [0x6d9fd569], ah
push ebp
bound ecx, qword [ecx - 0x25]
add ch, byte [ebx + 0x72]
cmp eax, 0x234125ab
in al, 0x47
and eax, 0x47e42341
pop eax
cdq
mov bl, 0x4c
xchg esp, eax
xchg esp, eax
lahf
add al, 0xae
xor byte [esi - 0xb], 0xeb
jnp 0x1002482e
dec edi
cmp al, 0x9b
jo 0x10024797
and bl, cl
push eax
jae 0x10024840
into
fld qword [edx + edi*8 + 0x3e9beeea]
and dword [eax], edx
inc ebp
jle 0x100247de
ljmp 0x4510:0x213e9bee
fimul dword [edx + 0x742d12a9]
sbb dword [edx - 0x3489a2a8], ebp
adc ch, byte [0x58aa1974]
pop ebp
jbe 0x10024802
mov bh, 0x4c
add eax, 0x2f237ec3
or dh, byte [edi - 0x670fd2be]
ja 0x100248c0
inc edx
sub eax, 0x7a7798f0
js 0x10024821
sbb esi, dword [eax]
scasd eax, dword es:[edi]
adc eax, dword ss:[esi - 0x31]
inc esp
fist dword [edi + 0x46db7c1a]
enter 0x430, 0x25
push ss
cmp al, 0x71
loopne 0x100248a7
movsb byte es:[edi], byte [esi]
push ds
jns 0x100247fd
popfd
pop ebp
ret 4
add byte [edx + 4], ch
push dword [esi + 0x11]
mov dword [ebp - 0x10c], eax
lea eax, [ebp - 0x114]
push eax
mov ebx, ecx
mov dword [ebp - 0x110], 1
call fcn.1011d7d0
pushfd
test byte [0x10024959], 0x96
jne 0x1002495a
invalid
in al, dx
push es
imul edi, dword [ebx + 0x68], 0xa168002e
add eax, dword [edx - 0x3e083276]
push cs
arpl word [ecx + 0x2d5f7222], dx
ffreep st(0)
or dword [esi - 0x78], esp
push ds
mov byte [edx + edx*4 - 1], 0x4c
loop 0x10024904
nop
xor eax, 0xcaa17196
push ds
mov ecx, 0xb5586101
fimul dword [edx - 0x309b2e2c]
loop 0x1002497f
js 0x10024978
xor ah, 0x30
rcl dword [edx + ebx*8 - 0x19fe75fb]
mov eax, dword [0xd656c208]
pop edx
and eax, 0xa5222379
and esp, dword [edx]
movsd dword es:[edi], dword [esi]
mov ebx, 0x2fd221ad
lahf
daa
mov esi, 0x369893c3
and bh, cl
xchg ebx, eax
cwde
and bh, cl
inc edx
stosb byte es:[edi], al
xchg edx, eax
add ebx, dword [ebx + 0x569132e4]
imul byte [edi]
xchg ecx, eax
jg 0x100249a2
jg 0x10024925
mov dh, 0x11
in eax, dx
jle 0x100249b9
adc byte [edi - 0x20], ch
adc al, 0x34
inc ebp
mov dl, 0xe4
dec ecx
push 0xe6a2fa1
popfd
add esp, 0xc
cmp dword [ebp - 0x114], 0
jne 0x10024be8
push 0
pushfd
test byte [0x10024a58], 0xe0
jne 0x10024a59
add byte [eax], al
add byte [0x5171d77c], dh
xor eax, 0x5171d77c
push ecx
jb 0x100249c1
mov bl, 0xe
cmp esp, dword [edi - 0x680dd2f0]
jns 0x100249cd
jno 0x1002496e
dec ebx
xchg byte [edx - 0x54e6e80f], al
or byte [ebx - 0x7a62f961], bh
and byte [edi - 0x613e3c95], al
push esp
add eax, dword [ecx + 0x6aeffac1]
and ebx, dword [ebp - 0x3f]
rcl byte [edi], cl
jbe 0x10024931
and dword [esi + 0x5b], edi
push esi
call [esp + ebp*4 - 0x5e]
int3
movsb byte es:[edi], byte [esi]
cwde
push cs
call [ecx - 0x52]
mov cl, 0x87
shl byte [ecx + 0x55d65865], cl
cmp ebx, 0x6d
push esi
std
jl 0x10024a1d
dec eax
and al, 0x16
inc esp
pushfd
stc
mov eax, dword [0x9708106]
mov edx, ebx
inc eax
cli
arpl word [edi + 0x3fd8db03], di
dec edx
push ss
mov bh, 0x3d
out 0x44, eax
xor eax, 0xa662010e
sbb cl, byte [ecx - 0x1d]
mov eax, fs
or eax, 0xa2625ba3
cli
jmp dword [eax - 0x2d]
push 0x4d
popfd
rol byte [ecx - 0x2075bb39], 0xbf
mov esp, 0x7883c005
inc ecx
std
jecxz 0x10024aad
and dword [ecx - 0x7e], ecx
xor al, 0x58
mov esp, 0x7c426ed8
rol cl, 1
std
sub edx, esp
cmpsb byte [esi], byte es:[edi]
pushal
pop ebp
aaa
jecxz 0x100249e5
and eax, 0x8eaa5b24
mov dh, 0x33
or eax, 0x1fb6b83f
out 0xec, al
sbb ah, byte [ebx - 0x4546887c]
popfd
push dword [ebp - 0x10c]
call fcn.1011fe14
pop ecx
push eax
pushfd
test byte [0x10024ad9], 0x36
jne 0x10024ada
mov ah, 0xa5
adc byte [ebp + 0x401c8bf1], ah
imul edi, dword [0xcf6a74b6], 0xe297053d
xchg ecx, eax
int3
sbb eax, 0x894d10ca
stosb byte es:[edi], al
xchg esi, eax
xor byte [ebx + 0x5695ce06], dh
inc edi
fstp xword [esi + 0x3c]
adc bl, byte [edx - 0x6a]
loopne 0x10024ad5
mov al, 0xdb
and byte [ecx - 0x77], ch
jo 0x10024b18
push ecx
or byte [esi], ah
xor byte [ebx], bh
pop ebx
inc ebx
arpl sp, si
cmc
and al, byte [eax + 0x1e739f5e]
sbb byte [esi - 0x61], 0x73
push ds
popfd
call fcn.1011fdf8
push 0
pushfd
test byte [0x10024bd6], 0xf9
jne 0x10024bd7
out 0, eax
add byte [eax], al
adc dword [edi - 0x34daeb78], ebp
std
sub eax, 0x47ba9efb
xor dword [esi - 0x2602c616], esi
inc ebp
xchg edi, eax
push edi
nop
out dx, al
sbb byte [esi + edx], ch
mov al, 0xe0
in eax, dx
xchg ebp, eax
popal
sub al, 0x94
in al, dx
popfd
sub esi, dword [ecx + 0x98471ba]
test byte [ecx], cl
adc esi, eax
xchg edx, eax
sar byte [edx + 0x29], cl
out dx, al
fdiv st(6), st(0)
cmpsb byte [esi], byte es:[edi]
aam 0x49
add bl, dl
mov ecx, 0x53544027
fild word [eax + 0x703ce7b8]
pushfd
sbb al, 0x72
sar dword [ebp + 0x2383d228], cl
pop edx
jg 0x10024aec
aam 0x2a
js 0x10024b97
mov dl, 0x4d
imul edi, dword [ebp + 0x7b37bc1a], 0xffffffa9
pop ds
mov edx, 0xf643fd2d
call dword [ebx - 0x56]
insd dword es:[edi], dx
jno 0x10024bd2
enter 0xffffffffffffc0ef, 0xffffffffffffffb5
adc al, 0xb9
fstp st(0)
dec edx
stosb byte es:[edi], al
pop ss
fdiv qword [esi]
pop es
push ds
jge 0x10024be6
adc dword [esi + ebp*4 - 0x72], eax
adc ebp, dword [esi - 0x3f7374ec]
inc edx
pop esp
mov edi, 0x3933cb49
lahf
push esi
mov ecx, 0xf8e715a2
add dword [esi - 0x1dee6fb5], ebx
fild qword [ebx + 0x1a3828d1]
inc edi
inc esi
sub byte [eax], bh
sbb al, byte [edi + 0x46]
ror byte [ebx - 0x52], 1
out 0x2b, eax
jo 0x10024bda
test eax, 0xf62450fd
cld
pushfd
ja 0x10024c11
mov dl, 0x8c
sbb ecx, dword [ecx - 0x49a69a9]
lodsb al, byte [esi]
mov esi, 0x49371898
push 0xffffffffffffffc3
cwde
dec ecx
sal al, 1
xchg byte [ecx], dl
mov eax, dword [0xa19420f6]
xchg dword [0x6ee98acb], esi
sub bl, cl
and byte [eax + 0x5fb3b769], cl
mov bl, 0x5f
push ecx
pop es
jno 0x10024b8b
or eax, edi
pop ds
mov ah, 0xd
mov bl, 0x8a
aas
xor al, 0x9f
popfd
push 0
push dword [ebp - 0x10c]
call fcn.1011fadf
add esp, 0x14
les edx, [edi + edi*8]
mov ch, 0xf4
invalid
push dword [ebp - 0x10c]
mov eax, dword [esi]
sub eax, 4
push 1
push eax
mov eax, dword [esi + 0x11]
add eax, 4
push eax
call fcn.1011f678
push dword [ebp - 0x10c]
call fcn.1011fa2d
pushfd
test byte [0x10024c43], 0x49
dec esp
add dl, byte [eax]
dec ecx
je 0x10024c44
xor byte [0xb2075074], dh
loop 0x10024bc7
jo 0x10024c1d
push ecx
dec eax
push ebx
fsubp st(7)
dec ebx
jbe 0x10024c36
sti
sub eax, 0x9ab5f545
xor bh, byte [0xeaf5f9cc]
mov ah, 0x93
adc esp, dword [eax]
cmp eax, 0xf418eb11
dec esp
test byte [esi - 0x5e], al
popfd
add esp, 0x14
test eax, eax
je 0x10024c5a
and dword [ebp - 0x110], 0
mov dword [ebx + 8], 0xe0000050
cmp byte [esi + 0x10], 1
je 0x10024eee
cmp dword [ebp - 0x110], 1
jne 0x10024eee
push dword [ebp - 0x10c]
mov dword [ebx + 0x9c2], 4
call fcn.1011f9a0
push dword [ebx + 0x9c2]
mov dword [ebp - 0x10c], eax
pushfd
test byte [0x10024cd3], 0xd6
jne 0x10024dd4
pop ebp
jle 0x10024c64
dec dword [esi]
sub cl, byte [bx + 0x20]
cld
adc dword [ebx - 0x75757c9c], esp
adc al, 0xd6
rcr dword [eax - 0x44eec560], 0x9d
stosd dword es:[edi], eax
or dh, al
mov dl, 0xd2
out 0x23, al
xchg dword [ebx - 0x2c837ab3], esp
fcomp dword [esi]
div dword [edx - 6]
sub eax, 0x99f73723
mov bh, 0xcf
xor eax, ebp
lodsb al, byte [esi]
sbb dword [ebx + 0x51fe6dd1], esp
xchg esi, eax
cli
mov edx, 0x652d6a08
sub eax, dword [ecx - 0x72]
in eax, 0xc7
pop es
pop edi
call 0x367464dc
mov byte [ecx + 0x1c], bh
jecxz 0x10024cf9
cmpsb byte [esi], byte es:[edi]
adc edx, dword [ebx - 0x37]
xor eax, 0x1014a0d9
scasd eax, dword es:[edi]
call 0x70c281ee
int3
fldenv [eax - 0x1750efec]
jmp 0x10024d35
xchg edx, eax
call 0x6e4a13ea
xor edi, dword [eax]
sub dword [eax], 0xffffffd9
sub eax, 0xe3436aaa
out dx, al
inc ebx
jecxz 0x10024d26
mov eax, 0x40c9c3e
add al, 0x81
imul ecx, dword [esi], 0x5c
adc bl, byte [eax - 0x70]
test dword [ebp + 0x35704e78], esi
dec edx
fdivr qword [eax + 0x4000cbc6]
rcr cl, 0x10
fldenv [edi + 0x6dbed427]
inc esp
inc ebx
xor bl, ch
mov dh, 0xb8
add eax, 0x43fd0988
xchg esp, eax
test al, 0x6c
xchg ebp, eax
push ebx
mov ch, 0xb
inc eax
test al, 0xd
mov cl, 0x1a
jbe 0x10024d38
out 0xc1, eax
insd dword es:[edi], dx
sub byte [edx - 0x7118c1fe], bh
jmp edx
popfd
lea eax, [ebp - 0x10c]
push eax
add ebx, 0x9d3
pushfd
test byte [0x10024ede], 0x47
jne 0x10024edf
popfd
inc ebx
or dword [edx - 0x76], edi
mov cl, 0x8c
mov al, 4
jle 0x10024e0e
int3
xchg dword [ebp + 0x6c], edx
mov dh, byte [eax - 0x54]
dec ebp
int 0x66
add dword [ebp + 0x192c6882], edx
mov al, byte [0x626f84c7]
fcomp qword [ecx + 0x3ac002b1]
or ebp, ecx
das
dec esi
fxch st(4)
sub esp, edx
test al, 0x3d
enter 0xffffffffffffac6a, 0xffffffffffffffb7
int3
popfd
push ebx
call fcn.1011d7d0
add esp, 0x10
jmp 0x1002546f
push dword [ebp - 0x10c]
call fcn.1011e7c5
and dword [edi + 0x420], 0
pop ecx
push 0
push dword [esi + 0xc]
pushfd
test byte [0x10024fae], 0x32
jne 0x10024faf
cmp al, byte [ebp + 0x40]
mov ecx, 0x19622e11
scasb al, byte es:[edi]
add al, 0xd4
mov ebp, 0x20015e43
pop ds
mov bh, 0x39
pop edx
punpcklbw mm6, dword [ebx + 0x66753dc9]
xor dword [eax], edx
jmp dword ss:[ebx + 0x15]
popfd
mov ecx, ebx
call int.1000e31f
cmp byte [esi + 0x10], 1
pushfd
test byte [0x100250b3], 0x94
jne 0x100250b4
salc
out 0x19, al
mov cl, 6
aad 0x50
pop edx
adc byte [ebp + 0x498eb4f6], ch
dec ecx
mov dword [0x3c178aa1], eax
xchg esi, eax
push esp
or byte [ebp + 0x271eae18], dh
push ds
daa
xor dword [ecx], esp
into
stosd dword es:[edi], eax
add al, 0xb2
out 0x97, eax
mov ch, 0x8c
pop edx
inc dword [edi - 0x45]
pushfd
pop es
push 0x2c
sub eax, 0x3041dbe7
xchg dword [edi], esp
inc ecx
in eax, dx
in al, dx
test al, 0xe0
out 0x97, al
inc esi
add al, 0xca
out 0x70, eax
or esp, dword [eax]
push esi
jecxz 0x10024fe3
retf 0x70e7
xchg esi, eax
xor bh, ah
arpl word [edx - 0x71], di
push ebp
jbe 0x1002500b
sub al, 0x7f
sub eax, dword [ebx]
cmp ah, byte [edi - 0x53161f93]
cmp eax, 0x12e6fd88
dec edx
salc
pushal
sbb ebx, dword [ecx - 0x4a]
into
adc eax, 0x1bbf37c6
out 0xfc, al
push esp
inc eax
push edi
push esp
fsub dword [edi + ecx*8 - 0x3f]
sbb eax, 0xc7e9dafa
dec edx
shr dword [esi - 0x7342eff6], 1
jg 0x100250cf
inc edx
adc dword [esi + ebx*8 - 0x24], 0x7d27a51e
int3
dec esp
lodsd eax, dword [esi]
mov ebp, 0xbe6fdf40
add esi, dword [ebp - 0x4f]
pop ebx
mov dl, byte [ecx]
bound ebx, qword [ebx - 0x58]
inc edx
imul esp, dword [ebx + 0x11], 0x29b9ffcc
test dword [edi], eax
xchg edx, eax
ror dword [ebx - 0x12ffe599], cl
pop es
xor al, 0x9f
sub al, 0x8d
int1
out dx, al
xchg al, bl
sti
xor ecx, dword [ecx - 0x48]
push ds
mov ah, 0xb4
pop esp
mov ah, 0x5c
out 0x2f, al
cmp bl, ch
test dl, 0x6b
int1
push ebp
imul esi, ecx, 0x55
salc
mov dword [0x640886ad], eax
xor cl, dh
dec ecx
ja 0x10025117
and byte [edi + eax*8 - 0x1a], dl
cmp al, 0x79
jbe 0x100250ef
popfd
jne 0x1002546f
mov edi, dword [edi + 0x428]
pushfd
test byte [0x100250ed], 0x3e
jne 0x100251ee
je 0x10025065
pop ecx
sub dword [eax + 0x1f], esi
cmp esp, dword [ebx]
mov ah, 0x8e
and byte [eax - 0x3f], 0x43
or ecx, ecx
mov es, word [edx + 0x943c160]
leave
dec ecx
xchg esp, eax
or al, byte [ebp + 0x238eb7b3]
xlatb
out dx, eax
mov word [eax], es
outsb dx, byte [esi]
jl 0x1002509e
adc byte [edi - 0x19], bh
jg 0x100250d8
into
scasd eax, dword es:[edi]
arpl word [esi - 0x61], dx
inc ebp
xchg dl, dl
and al, 0xf0
stosb byte es:[edi], al
loop 0x10025096
popal
jo 0x10025114
arpl word [edx + 0x5d], dx
dec eax
xchg ecx, eax
test ah, bh
call 0x743ee742
or al, byte [eax]
cwde
inc eax
loopne 0x10025149
pop edx
pop edx
cmp dword [edx], edx
push ss
mov dword [eax + 0x4a2c84a7], 0xfe16b93d
and al, 0xfb
sub dl, 0x36
cwde
leave
push eax
int 0xbf
jno 0x100250fc
mov esp, 0x9e6c245f
enter 0xffffffffffffb089, 0xfffffffffffffff9
xor ah, byte [ecx]
mov dword [0xa739c72], eax
daa
or eax, 0xc2238f2b
leave
and al, 0xbb
adc byte [eax], dh
xchg edi, eax
mov dword [ebp + 6], 0xdd9bd5ef
and eax, 0x69eb0e5c
xor byte [edi - 0x10f9ba39], dl
aad 0x9b
frstor dword [0x69eb0e5c]
adc dword [ebx], edx
cmp eax, 0x7e82dcbd
mov dl, byte [eax - 0x2f]
pop eax
xchg esp, eax
enter 0xffffffffffffd646, 0x30
mov word [esi + 0x19c16109], cs
push ss
mov ebp, 0x4dcedc61
popfd
dec edi
call 0x159e47df
xchg bh, bl
cmp byte [esi + 0x31], 0x2b
sub cl, byte [ecx]
loop 0x1002517c
fild word [eax + 0x2a2b317e]
or edx, esp
not dword [eax]
mov byte [edi + 0x23], cl
test al, 0x6a
adc byte [eax + 0x6aa8234f], cl
movsb byte es:[edi], byte [esi]
salc
scasd eax, dword es:[edi]
pushfd
in eax, dx
cwde
sahf
int1
pushfd
jle 0x10025149
push es
sbb dword [edx + 0x185542c8], 0xab598d26
dec eax
push 0x36cc4d46
stc
push cs
sbb dl, byte [esi - 0x67cd6c13]
adc dword [eax + 0x4d6d0009], ecx
adc eax, 0x6118b349
mov al, 0xdf
or bh, byte [ecx - 0x408bbde4]
adc bh, byte [ebx - 0x28]
test al, 0xe1
cmp ecx, dword [ebp - 0x3fd58c0d]
enter 0xc1d, 0x36
jnp 0x1002522a
stosb byte es:[edi], al
out dx, al
cmp al, byte [edi]
scasd eax, dword es:[edi]
neg dword [edx - 0x59e6de79]
fnsave dword [eax + 0x26]
xor eax, 0x1874a609
lahf
out dx, eax
imul ebx, dword [ebx + 0x28], 0x23
xchg ebx, eax
popfd
lea eax, [ebp - 0x108]
push edi
push eax
call fcn.1011f120
pushfd
test byte [0x100252c5], 0xb8
jne 0x100252c6
xchg dl, bl
mov esi, 0x442883a4
xchg dword [esi + 0x7b], eax
in eax, dx
mov fs, word [edi + esi*8]
pop edx
out 0xea, eax
mov ch, 0x5b
jl 0x10025225
sub ebp, edx
out 0x14, eax
sbb al, 0xfb
sti
pushfd
xor al, 0x4f
imul edx, eax, 0xd9ef9abd
in al, 0x6e
sar byte [ebp - 0x1b261066], 1
outsb dx, byte [esi]
movaps xmm4, xmm1
xor ch, bl
cmp eax, 0xb592f09a
xchg dword [ebp - 0x18], ebx
mov eax, dword [0x89360216]
mov eax, dword [0x153379eb]
out dx, eax
dec ebp
in eax, dx
adc bl, byte [edi]
pushal
inc edi
and eax, 0x5c80bc24
call 0xcfcb3fe8
lahf
fdiv st(4)
cmp dh, byte [ecx]
inc edx
and dword [edi], esi
adc dword [ecx - 0x17], edi
cmp edx, esi
mov al, byte [0xa5b89ca8]
jl 0x100252a0
cmc
mov al, byte [0x872c6ff1]
push cs
push edi
cmp al, 0xb3
push es
insd dword es:[edi], dx
sub eax, 0xd6ca6b7d
shl byte [ebx + 0x38], cl
mov dword [ebx + 0x22a10478], eax
int 0x51
mov ebp, 0x2d52f908
push cs
aas
popfd
pop esp
fbld tbyte ss:[ecx - 0x55a0c2f]
adc byte [edx], 0x49
lds edi, [edi + edx - 0x53]
jl 0x100252b9
lodsd eax, dword [esi]
lahf
mov bl, 0x8b
jl 0x1002522a
xor dword [esi], eax
shl byte [ecx - 0x4d8326b7], cl
mov esi, 0x3d754a6
sub ebx, dword [ecx]
leave
push eax
xchg esi, eax
call 0x494124e8
add dl, al
dec esp
xchg ebp, ebp
aaa
sar byte [esi], cl
cmp dword [eax], eax
ret 0x874c
popfd
lea eax, [ebp - 0x108]
push str..tsf
push eax
call fcn.1011f130
add esp, 0x10
push 1
push edi
lea eax, [ebp - 0x108]
push eax
call dword [sym.imp.KERNEL32.dll_MoveFileExA]
test eax, eax
jne 0x10025468
jmp [eax + 0x60]
pushfd
test byte [0x100253f2], 0xaf
jne 0x100253f3
pop ss
mov esp, 0xa578ecf4
mov eax, 0xdb25d681
inc esp
movsb byte es:[edi], byte [esi]
mov ebp, 0x3422485b
mov dh, 0xc7
cmp al, 4
stc
xor eax, esi
push cs
jg 0x1002531a
movsd dword es:[edi], dword [esi]
pop esp
outsb dx, byte [esi]
jge 0x100252cc
xchg dword [ebp + 0x533d0ef0], ecx
cld
sbb eax, 0x1ecfc85c
jbe 0x10025380
ror bl, 0x30
jns 0x100252bd
sub byte [edi - 0xcb69ebd], ch
imul esi, dword [edi + 0x11448eef], 0xffffff88
movsb byte es:[edi], byte [esi]
fbstp tbyte [ebx + 0x43954391]
lahf
pop ebp
arpl word [ebx - 0x4b13c3fb], cx
mov bl, 0x94
adc al, 0x6b
sbb al, 2
sti
adc byte [esi + 0x75d8f3ea], cl
xchg esp, eax
inc edi
xchg dword [esi], edx
cmp al, 0x57
dec eax
out 0xa4, eax
xor byte [esi], dl
push cs
dec ebx
mov gs, eax
push ds
mov dword [ebx + 0x64ecc89a], edi
xor al, 0x42
inc esp
and ch, byte [ecx - 0x5e]
pop ebp
lodsd eax, dword [esi]
stc
dec ebx
inc esp
and byte [edx - 0x7e81300b], 0xb9
out 0x4e, al
test byte [ebx + 0x5e], bh
mov byte [0x817ecff5], al
mov ecx, 0x7b844ee6
pop esi
dec edx
push esp
nop
salc
xchg esp, eax
pop ecx
or ecx, dword [esi]
xor dl, bl
mov ebx, 0x9988e708
dec esi
ja 0x10025395
in eax, 0xd8
or byte [ecx], ch
into
adc byte [esi + 0x536ba97d], ah
xchg esp, eax
xor ecx, dword [ecx - 0x6c3ba7c7]
xchg esp, eax
sbb ch, byte [esi + edx*2 + 0x50]
dec esi
mov dh, 0x89
xor eax, 0x26e4e8b0
cli
inc esp
dec esi
adc esi, dword [ebx]
outsb dx, byte [esi]
push ecx
cmp byte [esi + ebp*8 + 0x6edd0f59], dh
lds ebp, [esi]
mov esp, 0xbbd1103b
into
cwde
das
mov edi, 0xe68fbc36
sub al, 0x6f
neg dword [ecx + 0x72]
popfd
adc eax, 0xb996363f
aaa
xor byte [edx - 0x2b], ah
mov ch, 0x59
add edi, dword [ecx - 0x7e]
enter 0xffffffffffff8a2d, 0xffffffffffffff85
jne 0x1002543b
popfd
and dword [ebp - 0x110], eax
pushfd
test byte [0x1002545f], 0x24
je 0x10025460
in eax, 0xce
cwde
push ebx
popal
std
xor esi, dword [ecx]
pop es
mov ah, 0x7a
int 0x77
cdq
or dword [ebp + 0x1e], ebp
mov byte [esi + esi*4], al
pop esp
in al, dx
fist dword [ecx + esi*2 + 0x12]
lds ebx, [ebp + 0x65]
mov dl, 0xc
fsubr st(7), st(0)
or dword [edx + edi*2 + 0xe], 0x57
inc edi
fcom st(4)
push edx
sub eax, dword [ebx]
nop
stosd dword es:[edi], eax
push ss
div esp
out 0x12, eax
and byte [edx - 0x68], dh
mov dh, 0xb9
mov ebp, 0xde204585
out dx, eax
mov ecx, 0x204585bd
fsubp st(7)
xchg ecx, eax
dec esp
push 0x71
push edi
cwde
pushal
out 0xad, eax
xchg byte [eax + 0xf], dh
aad 0xef
push ss
xchg esi, eax
mov al, 0x51
push ds
movsb byte es:[edi], byte [esi]
cmp al, 0xe1
push 0x743afcfa
fimul dword [eax - 0x38]
popfd
mov dword [ebx + 8], 0xe0000036
push edi
call fcn.1011bd3a
pop ecx
mov ecx, dword [ebp - 4]
mov eax, dword [ebp - 0x110]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.1011e48a
leave
ret 8