Function at 0x1004d871
Capabilities:
Authenticate hmac
Read .ini file

Disassembly:
or eax, 0x55c3c900
push ebp
mov ebp, esp
sub esp, 0x210
mov eax, dword [0x10170c30]
xor eax, ebp
mov dword [ebp - 4], eax
pushfd
test byte [0x1004d099], 0xa3
jne 0x1004d19a
pushfd
stosb byte es:[edi], al
inc esi
mov eax, dword [edi]
pop eax
dec edx
nop
enter 0x3aff, 0xfffffffffffffff5
mov ecx, ds
or eax, 0xc4c96f10
test byte [ebx - 0x4cdcc132], cl
push edx
dec ecx
test eax, 0xa3e51721
loop 0x1004d0a4
or ch, dh
pop es
jno 0x1004d05a
pop ss
not dword [ebx + 0x4d]
shr byte [ebp + 0x5ef45115], 1
inc edx
fiadd dword [esp + eax*4 - 0x40]
out dx, al
mov bl, 0xc6
cmp al, 0xc
mov cl, 0xc8
and eax, 0x5d844ba4
or byte [ebp + 0x1b], al
stosd dword es:[edi], eax
or eax, 0x51907bce
push ecx
sub eax, 0xf9e10e45
sub al, 0xba
insd dword es:[edi], dx
test bl, 0xb5
outsd dx, dword [esi]
pushal
mov cl, 0xab
push eax
sti
inc ebp
leave
push esp
push cs
fnstenv [ebx + 0x50d06788]
cli
mov cl, dh
cdq
mov ebx, 0xb9fc2982
add dh, byte [edx]
push es
mov bl, 0x35
int 0x6a
mov eax, dword [0xeeb53110]
stosd dword es:[edi], eax
ror dword [ebx + ebx*2 + 0x3818ea5f], 0x80
sbb ebp, ebx
pushfd
das
fstp dword [ecx + 0x7a]
xchg ebp, eax
imul esp, dword [edi + 0x4d4aa140], 0xffffff86
fdiv qword [edi + 0x5312023b]
xchg esp, eax
mov ecx, 0x6ade2fa
dec edx
mov al, 0x63
test dword [edi + edi*2], esi
mov word [ebx], gs
lodsb al, byte [esi]
and al, 0xd8
pop ebx
adc edi, dword [edx + 0x3e]
or dh, al
mov bl, 0xc7
push esi
js 0x1004d0d3
retf
mov dl, 0x60
loopne 0x1004d0c9
loop 0x1004d140
adc ch, dh
int 0xd4
rol dword [esi + 0xb486b7b], cl
dec eax
xchg esp, eax
stosd dword es:[edi], eax
or edi, esp
push 0x1d06
loopne 0x1004d13e
in eax, 0x72
jo 0x1004d1bb
cwde
cmpsd dword [esi], dword es:[edi]
cmp dword [ebp + 0x37], edx
cmpsb byte [esi], byte es:[edi]
adc al, 0x3a
sub dword [ecx], edi
clc
pop ebp
das
jge 0x1004d136
cmpsd dword [esi], dword es:[edi]
in eax, dx
adc byte [ecx + 0x5e], al
push ds
xchg esi, eax
mov al, 0x51
mov dword [0xc3722ee7], eax
popal
pop eax
stosb byte es:[edi], al
dec ebx
cmpsd dword [esi], dword es:[edi]
or cl, byte [ebx + ebp*4]
sub al, 0x8f
add al, 0x27
sbb byte [edx], dh
outsd dx, dword es:[esi]
sub eax, 0xb9af9779
fnstcw word [eax + edx*2 + 0x78]
pop ss
and byte [eax - 0x77], ah
not dword [ebx + 0x6c]
xor byte [ecx + 0x542f8810], dl
popfd
mov eax, dword [ebp + 0xc]
push ebx
push esi
push edi
mov edi, dword [ebp + 8]
mov esi, 0x103
xor ebx, ebx
push esi
mov dword [ebp - 0x210], eax
lea eax, [ebp - 0x107]
pushfd
test byte [0x1004d1fd], 0x26
jne 0x1004d1fe
std
rol dword [eax + edx], 1
jne 0x1004d1fe
and eax, ebp
lodsd eax, dword [esi]
or eax, 0xf408300
cmp ch, byte [ebx + ebp - 0x78]
or byte [esi + 0x4b99b9f2], bh
xchg ecx, eax
pop ebx
or dword [eax], 0x51
movsd dword es:[edi], dword [esi]
and eax, 0x9bc790f7
cmpsb byte [esi], byte es:[edi]
popfd
and edi, dword [esi - 0x13565aac]
call 0x69482875
neg byte [ebp + 0x8206a4b]
xlatb
les ebp, [edx]
shl byte [edx], 0xb4
pushfd
add ebp, dword [eax + ecx*8]
mov dl, 0x17
popfd
push ebx
push eax
mov byte [ebp - 0x108], bl
call fcn.1011df60
lea eax, [ebp - 0x108]
push eax
call fcn.100475f5
add esp, 0x10
test eax, eax
pushfd
test byte [0x1004d2ed], 0x51
add eax, 0x1004d2ed
push ecx
jne 0x1004d2ee
xor dh, byte [edi - 0x6e899e04]
sar edi, 0x82
jb 0x1004d201
and esp, esp
pop esi
fdivr qword [edi - 0x267cd52a]
push ecx
mov cl, 0x2e
xchg ebx, esp
push ecx
rcl dword [esi - 0x6210072a], 0x35
push 0x2d3cc72b
adc ch, dh
loopne 0x1004d285
scasb al, byte es:[edi]
int1
inc edi
je 0x1004d2b6
push es
lodsd eax, dword [esi]
mov dl, 0xe3
enter 0xfffffffffffffe0b, 0x30
scasd eax, dword es:[edi]
outsb dx, byte [esi]
cld
dec eax
cmc
dec edi
push ecx
dec ax
cmc
adc dh, byte [ecx + eax*2 + 0x2b]
fisubr dword [edi - 0x57]
cmc
mov ebp, 0x7757da96
xchg byte [eax], dl
jbe 0x1004d21f
cwde
add dword [edx + 0x22ae43bd], edx
ror byte [eax + ecx - 0x70684467], cl
test dword [edi - 0x5e], edx
not dword [edi]
xchg edi, eax
aam 0x5a
and dl, dl
mov word [eax], cs
cdq
mov ebx, 0x57858f97
mov byte [0xd49717f7], al
pop edx
ja 0x1004d2c8
dec edx
jl 0x1004d26d
lahf
dec ebx
inc eax
cdq
mov ebp, 0x8af05781
mov ebx, 0xd9bb9a14
dec ecx
xor al, 0xce
mov eax, dword [0x767c09c3]
mov al, byte [0xca3910b2]
add dword [ecx], 0xffffff8c
cmp al, 0xa0
xor ebp, ebx
in eax, dx
mov ah, 0xb7
or al, 0x68
mov dword [0xea19], eax
int3
retf 0x183
add dword [edx - 0x75], eax
stosb byte es:[edi], al
imul ecx, dword [ebp + 0x37], 0x293f7ded
mov esp, 0x424c615
mov eax, dword [0x4b157a1]
cmc
div byte [ebx]
mov ecx, 0x1fbbbdbc
out dx, eax
inc ecx
pop es
cmp al, 0xbc
pushal
or al, 0x41
dec edx
popfd
jne 0x1004d3ac
push str.GetAppDataDir_Error_
push ebx
push ebx
call fcn.10049c0c
add esp, 0xc
pushfd
test byte [0x1004d3a3], 0x4a
jne 0x1004d3a4
fcomp dword [esi + 0x2eb281a5]
pop esi
jns 0x1004d382
bound ecx, qword [esi + 0x61ef4dec]
mov gs, esp
dec ebp
out dx, eax
popal
outsb dx, byte [esi]
cli
dec edi
dec ebp
dec esp
int 0xb2
in eax, 0x9d
cdq
push es
pop eax
and al, 0xd9
arpl di, cx
cdq
push 0x234cc2a5
jnp 0x1004d375
dec edx
test byte [edx + 0x37], cl
cmpsd dword [esi], dword es:[edi]
test byte [ecx - 0x7e85c385], 0x56
ror dword [edx], 0x9c
jle 0x1004d31c
adc eax, 0x65596050
xchg ecx, eax
sbb byte [ebx + 0x72], ch
mov dl, 0x93
movsd dword es:[edi], dword [esi]
push eax
adc esp, ebx
mov ch, 0xa0
mov al, 0x1d
sbb eax, 0x7f005a7e
sub eax, 0xe08e3a4c
mov byte [edi + 0xf], al
mov dword [0xcfa643bc], eax
jb 0x1004d3b1
mov fs, word [edx]
push ecx
and ch, byte [ebp + 0x5497f7a9]
cmp edi, dword [ecx - 0x3412f665]
lodsd eax, dword [esi]
test eax, 0x3b5497f7
mov ecx, 0xcbed099b
scasd eax, dword es:[edi]
pop esp
sub byte [edx - 0x6e], 0xd
sbb byte [esi - 0x47], bh
push ebx
lds edx, [esi - 0x59c5f8eb]
insd dword es:[edi], dx
xor al, 0x3c
sub esi, ecx
and dword [ecx + esi + 0x3ee8a27a], esi
out dx, al
dec edx
adc dword [ebp - 0x6a], eax
push esi
popfd
xor eax, eax
jmp 0x1004d82d
lea eax, [ebp - 0x108]
push str.wuauserv.ini
push eax
call fcn.1011f130
pushfd
test byte [0x1004d3cd], 0xdf
jne 0x1004d3ce
jmp [eax - 4]
aaa
sbb edx, dword [edi - 0x151a306]
popfd
push esi
lea eax, [ebp - 0x20b]
pushfd
test byte [0x1004d405], 0x2f
je 0x1004d406
fiadd dword [ecx - 0x10d94d44]
and edi, dword [edx]
in eax, dx
pop ebx
fucom st(6)
mov dh, 0x49
mov eax, dword [0xf4bb3beb]
jae 0x1004d461
insb byte es:[edi], dx
fcmovne st(0), st(1)
leave
dec ebp
stosb byte es:[edi], al
push esi
sub ch, bh
adc ebp, 0xc0f9bdfb
popfd
push ebx
push eax
mov byte [ebp - 0x20c], bl
call fcn.1011df60
push 0xa
lea eax, [ebp - 0x20c]
push eax
push dword [edi]
call fcn.101207a0
add esp, 0x20
pushfd
test byte [0x1004d4c5], 0x5a
jne 0x1004d4c6
popfd
or eax, 0x66a4e472
xchg ebx, eax
aam 0x99
push edi
xchg ebp, eax
clc
xchg edi, eax
aam 0xd9
mov byte [ebp - 0x3472f970], dh
lodsd eax, dword [esi]
add byte [eax + 0x7568f6b8], ch
loop 0x1004d4a5
pop edi
sub ebx, edx
aam 0x78
ja 0x1004d436
mov al, 0x33
mov edx, 0x49aa49e7
ror byte [edi], 1
add eax, 0x21ad88fb
mov ah, byte [edi]
neg dword [esi]
adc al, 0x1a
jno 0x1004d4e9
push 0xffffffffffffffe2
adc al, 0xdf
test byte [eax + ebx - 0x3f], bh
in al, 0x6d
push ecx
int3
cli
cmp al, 0x12
out 0x7a, eax
pushfd
dec edi
pop ebp
cmp eax, 0x7f42fa5a
sbb al, dh
lodsd eax, dword [esi]
sub cl, 0xd5
mov bl, 0x58
sbb al, byte [eax + 0x6e1a2185]
and esi, dword [ecx - 8]
pop ss
insb byte es:[edi], dx
cli
popfd
lea eax, [ebp - 0x108]
push eax
pushfd
test byte [0x1004d4f5], 0xf5
jne 0x1004d5f6
mov eax, dword [0x34840450]
cmpsd dword [esi], dword es:[edi]
xchg ecx, eax
mov eax, 0x8e2615f1
test eax, 0x6702da2f
loop 0x1004d517
das
fiadd dword [edx]
loop 0x1004d517
mov edx, 0x92c1c1fd
dec esp
fimul word [ebx + 0x78]
mov dword [0x77aa1f5b], eax
sbb bl, byte [eax]
mov esp, 0x62902e7b
int3
je 0x1004d556
dec ecx
sbb eax, 0xd9f2dda2
sti
jl 0x1004d50c
jge 0x1004d58a
les ecx, [ecx + 0xa3a5a2c]
sbb eax, 0x815c8f8b
mov bh, 0xfd
cld
aaa
mov eax, 0xffcca9f2
pushal
dec ecx
popal
loop 0x1004d549
inc ebp
fild qword [esi + ebp*4]
dec esp
dec eax
inc edi
stosd dword es:[edi], eax
sar byte [edx - 0x1f], 0xc1
mov al, byte [0x23ff1516]
mov eax, esp
in al, 0x77
push 0x7e
or eax, 0xb4aee919
sub edx, dword [edx + ecx - 0x56]
salc
add al, 0xe5
xchg ebx, eax
sbb ecx, ebp
scasb al, byte es:[edi]
mov ah, 0x2b
push esp
or ch, byte [edx - 0x6c1afb2a]
pop esi
loop 0x1004d5a4
jle 0x1004d4fd
mov ecx, 0x27984c6
out 0x3b, al
xchg esi, eax
jae 0x1004d50b
mov ah, 0x6e
test dword [eax + 0x7a], 0xc2f6495c
salc
xlatb
adc bh, byte [eax + 0x33]
stosb byte es:[edi], al
xchg esi, eax
push 0xffffffffffffffba
inc eax
dec esp
mov dword [0xb1f9def1], eax
dec esi
xchg ebp, eax
fisttp dword [edx + 0x29]
les esp, [ecx + 0x51]
push ss
fisttp dword [edx - 0xd5c4c21]
adc bh, byte [ecx]
outsb dx, byte [esi]
mov dword [0x6e3912f2], eax
or al, 0xe2
and byte [ebx + 0xe], dl
sub edx, dword [edx + esi - 0x80]
pushfd
inc si
inc ebp
sub dword [esi - 0x41], ecx
pop ss
aad 0xf6
xor dword [edi], edx
sar byte [eax + 0x1b5674ab], cl
lea esp, [edx + 0x29]
xchg edi, eax
lodsb al, byte [esi]
mov dh, 7
cmp al, 0x97
mov esi, 0x9e073019
cmp al, 0x87
and dword [esp + ecx*8 + 0x6c], esi
xor al, byte [eax - 0x4aebb7cf]
jbe 0x1004d5ad
dec esp
dec esi
fst qword [eax]
ja 0x1004d55f
and dword [ebx + 0x18], ebx
xchg esp, eax
cli
test al, 0xdd
les eax, [ebx]
jno 0x1004d64b
fnstenv [eax + 0x60c6c46d]
rcl byte [eax + 0x24], 0x46
and al, 0x46
mov edi, 0x4c54337
adc ah, cl
pop ebp
lodsd eax, dword [esi]
jno 0x1004d649
mov ch, 0xc8
cmp dword [ecx - 0x19f30e53], eax
sbb ebx, esp
popfd
lea eax, [ebp - 0x20c]
pushfd
test byte [0x1004d641], 0x73
jne 0x1004d742
inc edi
stosd dword es:[edi], eax
xchg byte [ebp + 0x1e], bl
cmp eax, 0x31a0937c
stosb byte es:[edi], al
and al, 0xf8
stc
dec ebp
xor eax, 0xf4efc87a
pop ebp
dec esp
mov esi, 0xc4d259ed
mov edi, 0x7f80eaf0
bound esi, qword [edi - 0x6792648]
pop es
xchg ebx, eax
adc bl, byte [ecx]
pop ebp
jge 0x1004d5df
mov ah, 0x43
inc ebx
into
xlatb
xor dword [ebx], ecx
and byte [ebx - 0x251d72c2], al
leave
int3
mov bl, 0x40
rol dword [0xa9be85f8], 0xbd
xchg ecx, eax
inc esp
stc
mov eax, 0x746535ab
push ecx
and eax, 0x1e906cfb
add byte [ecx + 0x7617d005], ch
jg 0x1004d63a
ror byte [eax - 0x5a], 0x75
push ss
div byte [ebx]
dec edx
pop ds
fstp xword [esi + 8]
jle 0x1004d67d
sub esp, esi
pop es
imul ecx, dword [ebx - 0x67], 0xffffffb9
pop ebp
dec ebp
adc edx, dword [edi]
out 0xf6, eax
enter 0x2fbd, 0x52
jl 0x1004d655
dec esi
mov ebx, 0x9a4c06f
jg 0x1004d67e
inc ebx
mov dl, byte [0xe72d7a20]
adc eax, 0xe72d7a20
arpl word [ebp + 0x4ae2ac73], dx
cmp dl, byte [edi + 0x691dfdd0]
adc eax, 0xb6311793
pushfd
mov dh, 0x77
stosd dword es:[edi], eax
aas
sub al, 8
jns 0x1004d6e3
imul edi, dword [0xc520206d], 0xffffffac
mov al, byte [0x4e29c391]
lds ebp, [eax + 0x4e29c391]
ret
ja 0x1004d6c7
jnp 0x1004d6b6
nop
enter 0x3c6d, 0x57
pop ecx
push ds
mov bl, 0xc8
in al, 0x57
imul esi, dword [eax + ebx*4 - 0x50cb515d], 0x3aaafe28
mov dh, 0xe5
xchg esi, eax
add bh, ah
xor al, bh
mov ch, 0xfb
call 0x3bc3309a
jno 0x1004d673
mov esi, 0x8c8c712b
rcr byte [esi + 0x7925222a], 0x11
imul eax, dword [eax + edx*2 - 0x22], 0x34
pop ecx
mov eax, es
sahf
sub ah, byte [edx]
and eax, 0x446b1179
push eax
fidiv word [ecx + ebx*2]
jno 0x1004d692
xor al, 0x3b
pop edx
stc
or ecx, esp
rol byte [edx - 0x7ea64a3b], 1
test al, 0x5d
or dword [eax - 0x5c], edx
mov word [0x825de9be], cs
dec eax
jne 0x1004d6ba
test eax, 0x2e5d24f1
pop ebp
int1
and al, 0x5d
pop ebp
ja 0x1004d710
inc esp
mov byte [ebp + 0x17], ah
pop ebp
lea ebp, [edi]
cmp ebp, ebp
adc ebp, dword [eax + edx*2]
xchg ecx, eax
cmp al, byte [0xdfec5b00]
fdivr qword [ecx + 0x39]
or ebp, eax
push edi
movsd dword es:[edi], dword [esi]
sub dword [eax - 0x6f4e2fc6], 0x91e21c3
xchg byte [ebp - 0x10], dh
aas
ja 0x1004d705
invalid
popfd
push eax
push dword [ebp - 0x210]
push str.wuauserv
pushfd
test byte [0x1004d822], 0xad
add eax, 0x1004d822
lodsd eax, dword [esi]
jne 0x1004d823
std
jle 0x1004d74a
mov dword [ebp + 0x50], ebx
in eax, dx
push 0xf09cc223
dec edi
sbb ah, bl
add al, 0x30
push ebx
sbb dword [eax - 0x43], esp
in al, dx
push ds
or dl, byte [ebx]
out 0x32, eax
leave
nop
xor byte [edi - 0x72c68661], bl
jo 0x1004d73e
xor edx, ebx
sbb eax, 0xb189f84b
mov ecx, 0x5127c49c
outsd dx, dword [esi]
xchg edx, ebp
xor byte [eax - 0x16825353], cl
or dword [ebx + 0x6aa69733], esp
das
xchg edi, eax
sub ecx, ebp
jne 0x1004d7d0
or ebp, edi
mov ch, 0x2c
sbb al, 0xb7
jecxz 0x1004d824
pop esi
lodsd eax, dword [esi]
lodsb al, byte [esi]
aam 0x78
pop ss
mov bh, 0xa2
ja 0x1004d7ee
or dword [ebx + 0x131e0429], 0xffffffd8
jle 0x1004d7ae
inc edi
out 0x66, al
jae 0x1004d751
mov ecx, 0xa1e7fa27
cli
and eax, 0xb2848647
cmp al, 0x69
movd mm2, ecx
mov edi, 0x621d592f
sbb eax, 0x957a2ac6
pushfd
jo 0x1004d7ab
std
mov esi, 0xf5936af2
in eax, dx
add dword [ebp - 0x15], ecx
mov cl, 0x3d
invalid
dec ecx
shl dh, 0x59
ror byte [eax + 9], cl
adc eax, 0x764dc485
mov eax, ds
dec edi
rcr byte gs:[esp + ebp - 0xb], 1
call 0x9d7fa083
je 0x1004d7c9
fisttp word [ebp + 0x760ba1a]
cmp al, 0xb4
test al, 0x66
sbb byte es:[esp + ecx + 0xb7d9808], 0x1e
fmul qword [ecx - 0x30a7f47b]
int3
popfd
call dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringA]
xor eax, eax
inc eax
mov ecx, dword [ebp - 4]
pop edi
pushfd
test byte [0x1004d85e], 0x41
jne 0x1004d85f
inc ecx
pop esi
loop 0x1004d844
sbb ecx, eax
add al, byte [edx]
xor dword [edx], 0x45efb7bb
insd dword es:[edi], dx
xor bh, byte [ebx + 0x6d45efb7]
out 0xbc, eax
add al, 0x9d
pushal
push 0x2d
jnp 0x1004d871
test al, 0x52
je 0x1004d844
pop eax
xor al, 0xb0
cdq
in al, dx
cmp dword [eax], esi
pop ecx
popfd
pop esi
xor ecx, ebp
pop ebx
call fcn.1011e48a
leave
ret
add dword [eax], eax
add byte [ecx + 0x10170c30], ah
xor eax, ebp
mov dword [ebp - 4], eax
push esi
mov esi, dword [ebp + 8]
push edi
mov edi, dword [ebp + 0xc]
push 0x103
lea eax, [ebp - 0x107]
push 0
push eax
mov byte [ebp - 0x108], 0
call fcn.1011df60
lea eax, [ebp - 0x108]
push eax
call fcn.100475f5
pushfd
test byte [0x1004d8ea], 0xf8
jne 0x1004d9eb
in al, 0x83
xchg byte [esi], cl
xchg ecx, edi
lodsd eax, dword [esi]
mov esp, 0x9a2f9a98
stc
dec esp
sub eax, 0xbb27ec08
and dl, byte [ebx]
idiv ebp
aad 0x49
add byte [edi + 0x497f5384], dl
test eax, 0xa62e242e
mov dword [0x553dece4], eax
in eax, 0xe8
popal
pop ds
stosb byte es:[edi], al
fbstp tbyte [0x14bd0764]
sahf
or dl, byte [edx - 0x4590b2c]
shl byte [edx - 0x7d80e498], cl
pop ss
add eax, 0xe5b1a25f
pop ecx
daa
aas
or eax, 0x335e0095
scasd eax, dword es:[edi]
mov esp, ss
or ah, byte [esi*8 + 0x897ce96]
push ecx
mov ebp, dword [ebx - 0xb]
dec esp
popal
loop 0x1004d978
cmovg edi, dword [edx - 0x4a]
out dx, eax
jle 0x1004d919
push ebx
adc al, 0x32
mov ebp, 0xd6c99a6e
pop ebx
call 0x243a9c0b
adc dword [esp + ecx*8 + 0x582119cb], edi
pop ebx
test byte [ebx - 0x3540c8c3], al
sti
push esi
pop ecx
pop edx
or byte [ebp + 0x64], ch
sub dword [0x46107e2a], esi
xchg byte [esi], dl
xor cl, byte [esi + 0x7f473a5a]
xor edi, dword [esi + ebp*2 + 0x43c90091]
fdivr dword [eax]
pushal
sbb al, 0x16
daa
dec edx
pop esp
and eax, 0x57d2d4d0
jae 0x1004d9c2
enter 0xffffffffffffe6ff, 0xffffffffffffffe1
aas
add cl, byte [edi + edi*4 + 0x3cb2c496]
cmp al, 0x38
bound eax, qword [edx + 0x2fcb7f6b]
cmp byte [edx - 0x7e], ah
imul edi, dword [edi - 0x35], 0x2f
retf
pushal
cld
or al, 0xf4
je 0x1004d97d
mov cl, 0xd9
sbb dword [ebp - 0x38], ecx
and al, 0x75
sub byte [edi + 0x65930aa3], al
das
in al, dx
mov ah, 0x1c
je 0x1004d960
sal byte [ecx + 0x69], cl
cmp al, 0x6d
cmp al, 0xab
dec ebx
jns 0x1004d977
cmp eax, 0x45d28e96
loopne 0x1004d9ef
inc esi
xor ebx, dword [ebx + 0x4161ba01]
jb 0x1004d9fa
mov ah, 0xe0
jnp 0x1004da31
mov al, 0x8b
clc
stosd dword es:[edi], eax
pop ds
bound edx, qword [eax + 0x3c]
loopne 0x1004da38
pop ebx
dec edx
or ch, byte [edi + 0x5aab8aab]
cmp byte [ebx], bl
cmp dword [eax - 0x3a4ce0de], 0xa56f2b5a
in al, 0xe5
adc cl, ch
or bl, byte [ecx + 0x27fe45fb]
add dword [ecx], esp
pushfd
int3
popfd
add esp, 0x10
test eax, eax
jne 0x1004dab5
push str.GetAppDataDir_Error_
adc al, 0x10
push eax
pushfd
test byte [0x1004daa3], 0x15
jne 0x1004daa4
popal
fmul dword [ebx - 0x13490ecd]
pushal
lahf
mov edi, 0x761da116
sub dword [esi + 0x4ec15626], eax
mov bh, 0x2a
add cl, ah
out 0x7a, al
and al, byte [edx]
xor edi, esp
mov ebx, 0x6279a3b8
add dword [edi + 0x7b], ebx
lds ebx, [edx]
mov ch, 0x2e
inc ebx
sub dl, dh
sal byte [esi - 0x69aadc2e], cl
or dword [edx + 0x1fa9d3f2], edi
rol byte [ecx - 0x29], 1
or eax, 0x74038159
pushfd
push cs
cmpsb byte [esi], byte es:[edi]
das
insb byte es:[edi], dx
mov esp, dword [edi + 1]
push ds
popfd
cmp dword [edi - 0x5225f888], edi
test eax, 0xf64e7ab6
fimul word [edi - 0x29e65f28]
sal dword [ebx], 1
sbb al, 0xb0
sub dh, al
sar byte [ebx], cl
not dword [edi + 0x321a2f12]
xchg ecx, eax
add eax, 0xfe7129f6
pop ss
sub byte [0xd8c888be], al
mov bl, 0xb1
and ebx, dword [ecx + 0x29]
xchg ebp, eax
jbe 0x1004dae4
push es
xchg ebp, eax
out 0x79, eax
insb byte es:[edi], dx
xchg edi, eax
popal
xor ebp, dword [0xa96f1664]
in al, dx
sbb ebp, esi
add al, 0x9b
mov bl, ah
mov esp, 0xbcd2e1f4
popal
popfd
push eax
call fcn.10049c0c
sar edi, 0xff
add esp, 0xc
xor eax, eax
jmp 0x1004dc87
lea eax, [ebp - 0x108]
push str.wuauserv.ini
pushfd
test byte [0x1004dafe], 0x93
jne 0x1004daff
xchg edx, eax
jle 0x1004da6f
mov esp, 0x3fe4c7c5
pop edx
cmpsb byte [esi], byte es:[edi]
xor dword [edx + edx*2 + 0x68], 0xffffffc6
pop ds
shr byte [ebp + 0x5b], cl
dec edi
push edi
stosb byte es:[edi], al
enter 0xffffffffffffbb95, 0xffffffffffffffd1
mov edi, dword [ebx + 0x63dfafea]
pushal
xchg esp, eax
xchg esi, eax
jbe 0x1004daa8
mov ecx, 0x34478aac
in al, dx
je 0x1004db31
loop 0x1004db49
loop 0x1004db54
jbe 0x1004db3b
ffree st(2)
popfd
push eax
call fcn.1011f130
pop ecx
pop ecx
lea eax, [ebp - 0x108]
push eax
push 0x104
push esi
push 0x10146825
push edi
push str.wuauserv
pushfd
test byte [0x1004dbe1], 0xdb
jne 0x1004dbe2
pop es
scasd eax, dword es:[edi]
int1
fild dword [edi - 0x35]
jbe 0x1004dba5
sti
imul edi, dword [edi], 0x73
sub ch, byte [ebx]
xchg ebx, eax
add al, bh
popal
sub edx, dword [ebx + 0x6126c702]
aam 0x92
pop ds
jb 0x1004dbc1
clc
xlatb
dec ecx
mov edi, 0x763de176
mov bl, 0xee
cmc
mov al, 0x3a
movsb byte es:[edi], byte [esi]
pop edi
sbb edx, esp
rol dword [ebx + 0x39929b9d], 0x9c
inc edx
ror esp, 1
sub esi, dword [ecx + ecx + 0x4e]
je 0x1004db6d
dec esi
or eax, 0xce91d6e2
test eax, 0x8ae6c41
add eax, 0xc2f93dc6
scasb al, byte es:[edi]
or byte [0xc2f93dc6], al
cmp dword [edx], esp
cmpsd dword ss:[esi], dword es:[edi]
outsb dx, byte [esi]
sbb dword [ecx], ebp
cmp ah, ch
sbb dword [ecx + ecx*2 + 0x78], 0x7cfcd412
fidiv word [ebx]
and eax, 0x5f7a9fa6
push edi
xor eax, 0xd91997c1
int3
jg 0x1004db62
mov dword [0xac5500f5], eax
push ebp
lodsb al, byte [esi]
pop es
pushal
pop ecx
adc byte [ebx + 0x6995f65c], dl
add eax, 0x867c61e8
xchg esi, eax
cmp al, 0xe
int3
imul eax, dword [0x867c61e8], 0xcc0e3c96
mov eax, dword [0xe911b584]
adc ecx, ebp
and al, 0x9d
inc esp
sub al, 0xdf
inc edi
push ss
clc
pop es
pop ss
rol byte [eax + 0x45], cl
out 0x33, eax
cld
jno 0x1004dbaa
jne 0x1004dc36
and dword [edx], 0xffffff8d
xchg edx, eax
adc dword [edi + 0x46fe2f16], esp
popfd
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
pushfd
test byte [0x1004dc82], 0xa1
jne 0x1004dc83
stosd dword es:[edi], eax
xor al, 0xaa
lea esp, [ecx + edx*4]
mov esi, esi
pushfd
dec eax
sub dword [edi - 0x34ae425d], esi
xchg ebx, eax
leave
push esi
add cl, ch
adc eax, 0x8b6c97b3
sub al, 0x14
out 0xda, eax
cli
mov dl, 0x75
mov ebp, 0xe7643831
pushal
and edi, edx
in al, dx
rol dword [edi - 0x15], 1
dec ebx
xor byte [ebx + 0x3c02e80f], ah
je 0x1004dbb4
or eax, 0x3f293d90
pop ecx
dec ebx
mov edx, 0xb0ef1dc9
xchg esp, eax
in eax, 0xc3
mov eax, dword [0xfd6e16d6]
push es
cmp byte [esi - 0x489a6b07], dl
mov ch, 0x33
add dl, al
pop ds
sub dword [edx - 0x26], esi
aas
leave
sbb eax, 0xe594b0ef
ret
in al, dx
or al, 0x8b
cdq
stosb byte es:[edi], al
les esi, [edi - 0x5d7929a9]
stc
mov dl, byte [ebx + 0x3c860a46]
pop esp
cmc
in eax, dx
mov al, 0x3e
fsubr st(4), st(0)
shr byte [edx], 0x97
adc byte [eax], bh
dec esi
mov esp, 0xb03bd800
mov dh, 0x5a
test al, 0x99
rcl dword [esi], cl
xor dword [ebp + edx*8 + 0x7c], edx
into
ja 0x1004dc8e
popfd
xor eax, eax
inc eax
mov ecx, dword [ebp - 4]
pop edi
pushfd
test byte [0x1004dd5e], 0x33
pop esi
fld qword [eax + edx]
xor ecx, dword [edi]
test esi, eax
add byte [eax], al
add byte [ebx + 0x7074aa9e], ah
jne 0x1004dd5f
mov dword [0x7074aa9e], eax
mov cl, 0x40
cmp dword [eax], 0x3c
mov ch, 0x92
sub al, 0xb7
sbb ah, bh
lea eax, [esi]
rcl dword [ebp - 0x7f057ffe], 0xaf
fsub qword [ebp - 0x78]
jge 0x1004dc99
xchg ebp, eax
jg 0x1004dc52
or al, byte [ebx - 0xce2e446]
xchg ecx, eax
das
adc byte [ebx + 0x34], bl
adc byte [0x398327fd], 0x8b
adc eax, 0x97702d02
mov ecx, 0xf833ceb8
dec ebx
jnp 0x1004dd47
push esi
push ds
cmp dword [ebx - 0x20], 0x15
xor dword [edx], 0x646f22cd
test eax, 0xcf1887e9
xchg esp, eax
push edi
in eax, 0x63
je 0x1004dd5c
imul eax, dword [ecx + 0xc], 0xd5cf216c
test byte [0xbae0319c], bl
add eax, 0xc872bac5
dec si
jg 0x1004dc93
pop ecx
or dword [edx + 0x4a], 0xe7a4a8ca
and dword [edi + 0x229c7a55], edx
daa
add al, 0x6c
rol byte [edx + ebx*8 + 0x47], cl
mov dh, 0xdd
inc ebx
pop edi
outsd dx, dword [esi]
or byte [edi - 0xa63978f], cl
mov edx, 0x751a4136
sal dword [ebx + 0x74ad941e], 1
xor al, 0x36
fnstcw word [edi]
push esi
in eax, 0xf3
inc edx
mov al, byte [0xb89cb7cc]
mov edx, 0xa3ff07be
or ch, bl
imul cx, word [ecx + 0xac19d5c], 0xfffa
mov dword [ebp + ebx*4 - 0x3f], ebx
or bh, dl
jl 0x1004ddb6
sar dword [ecx], 0x91
inc ebp
insb byte es:[edi], dx
nop
sub esp, dword [edx + 0x518a3e1e]