Function at 0x10087fc8
Capabilities:
Encode data using xor
Get common file path
Write file on windows

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
pushfd
test byte [0x10087ea0], 0x81
jne 0x10087ea1
salc
mov ebx, 0x15eb7f68
pop eax
sub al, 0x2c
in al, dx
cmp al, 0x59
aaa
popfd
add al, 0x24
push ebp
in al, 7
cld
lodsd eax, dword [esi]
add eax, 0x5e883295
sbb byte [ecx], cl
test dword [edx + 0xb92aae0], 0xa061bfcb
push ebx
cmp dword [edi - 0x18], edi
mov edx, 0x1e7e1ff1
div byte [esi]
xor dword [ecx], 0x33de8454
and ah, al
popfd
push 0x101413c4
mov eax, dword fs:[0]
pushfd
test byte [0x10087ec7], 0x86
jne 0x10087fc8
push ecx
push esp
xor al, 0xf1
bound esi, qword [eax + edx*2 + 0x66b5600c]
push es
mov ecx, dword [eax + 0x5a]
cwde
adc dword [eax - 0x7880c296], esi
mov ecx, 0x6e29ed2d
lodsd eax, dword [esi]
clc
cwde
inc esp
push ds
add al, 0x34
push ss
sahf
int3
popfd
push eax
mov eax, 0x2934
call fcn.1011f220
mov eax, dword [0x10170c30]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
pushfd
test byte [0x100880c2], 0xc3
jne 0x100880c3
mov esi, 0xafc54c15
jg 0x10088025
or byte [esi - 0x10], 0xb0
push ebx
pop ds
add dword [ebx + 0x45], ebx
scasb al, byte es:[edi]
fucomi st(6)
sub byte [ecx - 0x5e], bh
or eax, 0x17e9490b
dec esp
jl 0x10088068
sahf
sbb al, 0xc0
mov dl, 0x4e
movsd dword es:[edi], dword [esi]
arpl word [eax - 0x36750d4a], sp
sbb edx, esi
and ebx, esi
ror ebx, 1
mov esi, 0xe697b678
and byte [ebp + eax*4 + 0x40cee2b2], 8
mov eax, dword [0x9ee83afe]
mov dl, 0xe2
into
inc eax
or byte [ecx - 0x6117c502], ah
push cs
mov esi, 0xfc6041f4
imul edx, ecx, 0xffffffbb
push eax
adc dword [ebp + 0x32], 0xffffffca
popal
pop eax
clc
jae 0x10088053
xlatb
pop ds
out 0x2f, eax
rcl dword [edi + 0x52dfa81c]
xchg byte [ebx], al
arpl di, sp
dec edx
std
or cl, byte [ebp + esi*4 - 0x678a92e8]
mov word [edi - 0xf23d500], gs
scasb al, byte es:[edi]
cmp dl, byte [ebx]
lodsb al, byte [esi]
sbb eax, 0x783c5ddb
invalid
salc
xor byte [eax + ebx], al
lahf
add al, byte [esi - 0x50]
test byte [edi], 0x3a
mov ch, 0x2e
inc esp
call 0xb64de53c
or byte [ebp + 0x50], ah
push esp
salc
jb 0x1008809c
jbe 0x100880f1
mov ebx, 0xbbef7267
insb byte es:[edi], dx
mov dword [0x12b89ea6], eax
cmp eax, 0x473c7f85
xor al, 0x1a
mov edx, dword [eax + 6]
xor dword [esi + edi*8], 0x63
push cs
arpl word [esi], cx
cdq
std
push esi
push edi
sar byte es:[esi - 0x1a2d8a43], 0x21
mov ah, byte [edi - 0x4e]
aas
push ds
les esi, [edx]
dec edi
dec edx
pop esp
sal byte [edx + 0x2bd99f0c], 0x6c
pop esp
into
mov esi, 0x57c67e6c
popfd
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov eax, dword [ebp + 0x10]
mov ebx, dword [ebp + 8]
mov edi, dword [ebp + 0xc]
push 0x27ff
pushfd
test byte [0x100881e9], 0x27
jne 0x100881ea
xor eax, 0xf60befaf
stosb byte es:[edi], al
mov bh, 0x2a
push esi
xchg esp, eax
fstpnce st(1), st(0)
int3
popfd
mov dword [ebp - 0x293c], eax
lea eax, [ebp - 0x2913]
pushfd
test byte [0x10088217], 0x6c
jne 0x10088218
and bl, ah
push ecx
push 0x40
mov edi, 0x8d4b7509
sub dword [edi + 0x20], ebx
mov esp, 0x9529995b
xor edx, dword [ebx + 0x25]
mov cl, 0x1f
pop edi
and byte [ebx + ebx*2 + 0x33952999], bh
push ebx
and eax, 0x6a9d1fb1
add byte [eax - 0x75], dl
int1
popfd
push 0
push eax
mov esi, ecx
mov byte [ebp - 0x2914], 0
call fcn.1011df60
lea eax, [esi + 0x1d0]
add esp, 0xc
push eax
mov byte [ebp - 0x2931], 0
mov dword [ebp - 0x2940], eax
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
add byte [ebp + 0x1d086], cl
add byte [ebx - 0x39aff33c], al
test edi, ecx
salc
invalid
dec eax
bound edx, qword [eax + edx]
push 0xffffffffffffffff
push 0
push ebx
lea ecx, [esi + 0x10]
pushfd
test byte [0x100882a7], 0x88
jne 0x100882a8
mov bl, 0x53
mov edi, 0xaf96196d
mov dl, 0x7c
js 0x10088243
adc eax, 0x2a8ca1ac
mov bl, 0x4e
aas
xlatb
arpl word [ebx + 0x5a], bx
push ebp
mov bl, byte [ebx]
add esi, edi
out 0x40, al
cmc
xor dword [esi - 0x5529aff0], 0xf4630f28
inc edi
jge 0x10088237
je 0x1008820c
in eax, 0xf0
sbb al, 0x37
mov bh, 0xb
and esi, eax
mov al, 0x37
push esp
stosd dword es:[edi], eax
and edi, dword [0xc9b4268]
sbb dh, bl
js 0x10088229
push cs
jo 0x10088302
xor al, 0xf
push ecx
pop edx
popfd
call fcn.10004b88
mov ecx, esi
call fcn.10052fae
mov ecx, esi
pushfd
test byte [0x1008835a], 0xcb
jne 0x1008835b
or bh, ah
sub al, 0xd
mov ah, 0xbb
pop ss
or byte [edx - 0xe85cdd3], ch
lahf
jge 0x100882ee
pop edx
dec ebp
rol dword [esi], cl
pop ebp
cli
arpl word [esi + 0x5b], di
xchg ecx, eax
pop edi
mov dl, 0x42
shl byte [ebx], 1
pop ds
push esp
or al, 0x50
xchg ebp, eax
and eax, 0xb846d5c
int 0x9e
adc dword [ebp - 0x57a1614d], edx
out 0xae, eax
sub eax, 0x43304fe
inc ebx
xchg ecx, eax
outsb dx, byte [esi]
adc bl, byte [ecx + 0x45]
inc ebp
adc esp, ebx
pushal
rol byte [esi + 0x4e], 1
pushal
dec eax
mov dword [esi - 0x649da342], ebx
stosb byte es:[edi], al
dec esi
inc eax
das
into
or eax, 0xeca4a4ff
adc al, 0xf2
loopne 0x10088388
sahf
test esi, 0x8cccb19b
cdq
cmp dl, byte [edx]
aam 0xe9
out dx, al
js 0x1008839e
dec esp
fsub st(5)
push es
fisubr dword [ebx]
inc esi
xchg edx, eax
pushal
mov ah, 0x52
cmp al, 6
jne 0x1008834f
mov ebx, 0x73e6ae88
mov word [ecx + 0x4c], cs
pop esp
inc esp
out dx, al
mov edi, 0x37758d26
jge 0x10088357
push ecx
dec edx
sub al, 0x98
leave
loop 0x100883ba
int1
pushal
arpl word [ecx - 0x65], cx
popfd
call fcn.10075d48
cmp al, 1
jne 0x1008911b
push 0
push dword [ebp - 0x293c]
mov ecx, esi
call fcn.1007ac56
cmp al, 1
jne 0x1008911b
pushfd
test byte [0x10088425], 0x84
add eax, 0x10088425
test byte [edi], cl
test dword [eax + 0x12000000], ebx
cld
jne 0x10088426
adc bh, ah
and al, 0xc5
push eax
dec eax
inc edi
jns 0x100883c0
enter 0xffffffffffffdce5, 0xffffffffffffffc9
jecxz 0x10088327
xor dword [edi + 8], ebp
dec eax
pop ecx
outsd dx, dword [esi]
or byte [eax + 0x59], cl
fmul dword [ebp - 0x14]
stosd dword es:[edi], eax
popal
pop eax
sub al, 0x4a
dec ebp
arpl di, ax
pop ss
fstp xword [edi + 0xbce7e31]
and bl, 0xc
jle 0x10088382
or esp, dword [edi - 0x7e]
jecxz 0x100883c5
test eax, 0x559a572f
adc al, 0xd1
das
push edi
lcall 0x42b8, 0x97d11455
pop edi
aad 0xb1
xchg edi, eax
mov eax, 0xb1d55f42
mov cl, 0x9f
lahf
jge 0x10088390
div byte [esi + esi*8 - 0x72]
popal
jnp 0x100883d6
or ebp, dword [ecx]
jle 0x100883b2
sub dword [esi - 0x22], edi
in eax, 0x5e
mov ah, 0x53
je 0x100883d1
cmp dword [0x8a7f32aa], ebx
push edx
in al, 0
pushfd
and ebp, edx
inc edi
mov ecx, 0xe3d7ce2b
mov eax, 0xc2188566
rol ebx, 1
and cl, byte [esi - 0x3881d090]
int 0x6d
cdq
dec edi
inc eax
test dword [eax - 0x6a26bc71], esi
imul eax, dword [edi + ecx*4 - 0x3005ac10], 0x7376ac2f
inc ecx
sbb al, 0xe1
push edx
in eax, 0x85
and edx, eax
or ebp, dword [edi]
mov dh, 0x74
add dword [ebx + 0x2c], ebp
mov ch, 0x78
insd dword es:[edi], dx
dec edx
aam 0xbe
xor al, 0xb3
popfd
lea eax, [ebp - 0x2930]
pushfd
test byte [0x10088440], 0xd5
jne 0x10088441
test byte gs:[esi + 0x26c7daf1], dl
jb 0x100884b4
popfd
push eax
mov ecx, esi
call fcn.1006f2a4
mov dword [ebp - 0x293c], eax
and dword [ebp - 4], 0
mov ebx, 0x10147604
push ebx
call fcn.1011d740
pop ecx
mov ecx, dword [ebp - 0x293c]
push eax
push ebx
push dword [ecx + 0x10]
push 0
call fcn.1005e4cc
mov ebx, eax
pushfd
test byte [0x1008848a], 0x2b
jne 0x1008858b
invalid
sub dword [esi - 0x71479b7b], esp
movsb byte es:[edi], byte [esi]
enter 0x7f36, 0xffffffffffffff87
push eax
or ebx, ebx
jae 0x100884bc
xchg esp, eax
shl ax, cl
jne 0x1008844e
and byte [edi], bh
neg byte [ebx - 0x23]
popal
insb byte es:[edi], dx
xchg ebp, eax
adc eax, 0x3632e27c
push eax
adc dl, dl
add ebx, ebx
sub eax, 0xfe144369
xchg ebp, eax
mov dword [ebp + 0x27], edx
sahf
jne 0x10088534
jge 0x100884e8
xor byte [esi], ah
xlatb
xlatb
popfd
sar dword [esi - 0x28], cl
jle 0x10088496
jo 0x100884ec
push es
and ecx, dword [ecx]
imul ebx, edi, 0x41
rcl byte [edi], cl
mov ch, 0xa1
cmp dword [ebx - 0x431d23c6], esi
dec edi
test al, 0x5c
mov esi, 0x74cc5b99
shr dword [esi - 0x30], cl
or al, 0x12
or eax, 0xfd7c6320
push esp
mov ebp, 0x49a113cc
jle 0x10088528
mov eax, dword [0x543c7e49]
push esp
push ss
fxch st(6)
sub eax, dword [eax]
jecxz 0x100884f2
push 0xffffffffffffffea
jnp 0x10088529
mov ah, 0x7a
or bh, byte [ecx + 0x6724b562]
mov byte [edx - 0x5b], al
mul dword [esi]
test byte [edi + 0x5e1995ef], ah
test byte es:[edi + 0x5e1995ef], ah
add eax, 0x40cd905d
pop edx
adc bh, byte [ecx + 0x6fc0d023]
add eax, 0xf720a9cc
das
fstp dword [esi + 0x7c]
xchg ebp, eax
jl 0x100884b6
fstp xword ds:[edx]
sbb eax, 0x7c459785
jl 0x1008851f
cmc
mov cl, 0x54
mov ebx, es
jae 0x10088504
sbb ebp, ebp
fstp qword [eax]
mov edi, 0x44f24eb0
inc esp
arpl word [ecx], bp
push eax
push esi
pop eax
loop 0x100885a3
adc byte [edi + 0x655b83b6], dl
aas
mov word [0xae68e387], ss
sub eax, 0x6a5f714d
cmp byte [eax], dl
xchg byte [ebp + 0x4090c0a2], bl
push es
xchg ch, dh
add al, 0xee
jg 0x10088537
popal
pop ecx
nop
in eax, dx
mov esi, 0x1617db55
push ds
aas
xchg esi, eax
sbb eax, 0x4136167f
mov ah, 0xc6
sbb edx, dword [edi + 0x61]
pushal
push 0x79c5180
pop ds
xor eax, 0xddf75ec1
pop esi
neg ebp
movsd dword es:[edi], dword [esi]
shr dword [eax + eax - 0x23], cl
js 0x100885fd
popfd
push 0
pushfd
test byte [0x10088626], 0x5d
jne 0x10088627
and al, 0xd1
pop ds
mov edi, 0xf5bb669f
cmc
movsb byte es:[edi], byte [esi]
out dx, eax
jl 0x10088564
test eax, 0x7e0fd093
fsub qword [esi + 0x6d]
insd dword es:[edi], dx
cmp ecx, dword [edx - 0x3a922925]
mov bh, 4
aad 0xd8
int1
in al, 0xbc
xchg esi, eax
jg 0x10088600
inc dword [0x376caf0c]
xor ebx, dword [edx + 0x4d]
xor cl, byte [ecx - 0xb0c6235]
xor byte [eax], ch
inc ecx
das
sar byte [edi], 1
lds ebp, [edx]
adc dword [edx + edx*2 - 0x60698689], edx
mov dword [eax + ebx*4 + 0x42], eax
cmp edx, dword [esi - 0x47b96ae7]
and dword [eax + edi*2], esp
popfd
inc esi
mov eax, 0x9d782421
mov al, 0x90
jno 0x10088581
mov edx, 0x98b28d5e
rcr byte [edi - 0x4cc42a3], 1
imul ecx, dword [ebx + 0x7f], 0xffffffe7
jg 0x100885e6
out dx, al
pop ebx
or dword [edi - 0x5234da4a], esp
scasd eax, dword es:[edi]
inc ebp
cmpsb byte [esi], byte es:[edi]
popfd
imul ecx, eax, 0xffffffed
lahf
dec ebp
adc ecx, dword [ecx - 0x5b]
xor al, 0xcf
lodsd eax, dword [esi]
rcl dword [esi], cl
jno 0x100885af
inc esp
mov esi, dword [edi + 0x20]
test dword [ebp + 0x74], edx
imul ecx, dword [edi], 0x4506a154
popfd
neg ebx
sbb bl, bl
or dword [ebp - 4], 0xffffffff
push 1
lea ecx, [ebp - 0x2930]
call fcn.10002a9a
inc bl
je 0x1008911b
push 0x103
xor ebx, ebx
lea eax, [ebp - 0x113]
push ebx
push eax
mov byte [ebp - 0x114], 0
call fcn.1011df60
add esp, 0xc
cmp dword [edi + 0x10], ebx
pushfd
test byte [0x100886fb], 0xbe
jne 0x100886fc
aad 0x91
lodsd eax, dword [esi]
xor cl, byte [esi]
push eax
shl dword [esi], 0xff
fptan
dec ecx
lodsb al, byte [esi]
add eax, 0xe6183cef
sbb dh, ah
pop edi
nop
push ds
add al, byte [ecx]
imul eax, dword [ebp + 0x56ad2009], 0xcdca70bf
sal dword [edi], 1
test ecx, esi
in eax, 0x7c
out 0x16, eax
in eax, dx
les edx, [eax]
lds eax, [ebx + 0x5ee2bb55]
orps xmm7, xmmword [esp + ebp*8]
scasd eax, dword es:[edi]
xchg byte [ecx], dl
sbb al, 0x4d
aas
fld xword [ebx - 0x67]
inc ebp
mov ch, 0x40
fmul dword [eax]
push esp
popfd
lds eax, [ebx - 0x7021f734]
adc al, 0xc8
ja 0x100886fe
pop ebp
mov ch, al
xchg esp, eax
xor dl, byte [ecx + 0x21]
dec ecx
pop ebx
mov ebp, 0xd3e3650e
sub cl, dh
ja 0x10088684
fsubr dword [edi]
or byte ss:[ecx], 0xb5
lahf
xor dword [ebx + eax*2 + 0x51e9ca1], ebp
xor dword [eax - 0x78], ebp
cmp dword [edi + 0x1c], ebp
fdiv dword [ecx]
jne 0x10088737
inc eax
fsub dword [edi + edx - 0x36]
jno 0x100886b9
xchg ebp, eax
mov dl, 0x96
cmp dword [esi], ecx
popfd
jne 0x10088bca
test edi, eax
add al, 0
add byte [ebp - 0x1137b], cl
call dword [eax + 0x68]
add al, 1
lea eax, [ebp - 0x114]
push eax
push 0x104
add byte [eax], al
call dword [sym.imp.KERNEL32.dll_GetTempPathA]
lea eax, [ebp - 0x114]
push eax
call dword [sym.imp.SHLWAPI.dll_PathAddBackslashA]
lea eax, [ebp - 0x114]
push eax
pushfd
test byte [0x10088773], 0x82
jne 0x10088874
add eax, 0x10088773
or byte [edi], 0x85
cmp eax, 0x68000001
or esi, 0xffffff90
test al, 0xdc
push 0x2690ce83
test al, 0xdc
cmc
out 0x29, eax
sub byte [ebx], bl
add edx, dword [esi + 0x56ebd8fd]
and eax, 0xee968e8
jns 0x1008870d
push esi
add eax, 0x4cf3947
fild qword [esi - 0x6ecb2ea7]
mov cl, 0x3e
push eax
and al, 0x2e
add bl, byte [esi - 0xc]
jnp 0x10088766
mov esp, 0xbaa72b54
mov ebp, 0xae4320dd
idiv dword [edx - 0x2e693b02]
xchg ecx, edx
cli
lds esi, [ebx]
scasd eax, dword es:[edi]
adc byte [ebx + 0x43ad9ed2], ah
push ebx
jno 0x10088788
jae 0x100887d2
xchg edx, eax
xor al, 0xef
lahf
xor cl, byte [ecx + eax*4 + 0x489bc658]
lodsb al, byte [esi]
rcr esi, 1
pop ecx
sbb al, 4
shr byte [ebx - 0x20f161a8], cl
inc edi
arpl word [esi - 0x2fc57754], sp
in eax, 0x20
je 0x1008872b
call 0xb656e621
xchg byte [esi - 0x7e08731d], dl
bsf ebp, ebp
pop eax
add byte [bx], al
add bh, bh
test dword [edi], edi
jo 0x1008881a
movsd dword es:[edi], dword [esi]
sbb al, 0xd8
aaa
test dword [ebx + 0x7acfc237], 0xe09d346f
push edi
cmp dword [ecx], 0xbe5a8ae0
shr dh, 1
pop edi
out dx, al
loopne 0x1008875e
pop edx
mov esi, 0xee5feed0
or al, 0xf5
mov ecx, 0x7d7ff332
call 0xadca2bc8
movsb byte es:[edi], byte [esi]
sub eax, ecx
xor ch, byte [esi + 0x29]
in al, dx
int 0xa3
jo 0x1008877b
push ebx
fiadd word [ebx - 0x4f82a456]
xchg esp, eax
rcr dword [eax - 0x1af897f3], 1
loop 0x1008880e
mov edi, 0xc6eeef8f
das
sub edx, ecx
sahf
cmp ebp, 0x2d2905f
std
pop edi
nop
rol byte [edx], cl
push 0xd4014de2
pop ebx
xchg ebx, eax
je 0x1008888c
adc eax, 0xb7e853f0
xor al, 0x93
adc esi, dword [eax + 0x5d]
stosb byte es:[edi], al
xchg ebx, eax
stosd dword es:[edi], eax
pop ebp
adc eax, dword [ecx - 0x77]
mov edx, 0xeb1740f4
dec ecx
lodsb al, byte [esi]
add edi, dword [eax + 0x32c1fa2c]
inc esp
sub eax, 0x24ab6159
jb 0x100887e7
jbe 0x10088857
pop esp
cli
aaa
jnp 0x100887cf
mov edx, 0x2feb0fa4
xor al, 0xd2
jmp dword [edi]
xchg edi, eax
test bl, dh
lea ebx, [edx - 0x6d]
push 0xffffffffffffffb4
xor al, 0x8e
xor dword [esi - 0x35], 0xac3873a6
mov ecx, 0x983ca074
ffree st(4)
add byte [edi + 6], cl
cmpsd dword [esi], dword es:[edi]
popfd
call fcn.1011d740
pushfd
test byte [0x1008888b], 0x26
jne 0x1008888c
fcmovu st(0), st(3)
scasd eax, dword es:[edi]
mov eax, 0x3e377704
popfd
pop ecx
push eax
lea eax, [ebp - 0x114]
push eax
mov ecx, edi
call fcn.10005303
cmp dword [edi + 0x14], 0x10
pushfd
test byte [0x10088923], 0x9c
jne 0x10088924
ror byte [ebx], 0xeb
or bh, cl
mov bh, 0xb5
add byte [ebx], dl
and eax, 0x44fb8941
inc ebp
test esi, edi
mov edi, 0xa75d870a
or ch, byte [eax + 0x1d76c344]
cmpsd dword [esi], dword es:[edi]
inc ebp
cdq
sub eax, 0xd9a15e89
pop esi
fmulp st(4)
xor dword [ebp + 0x598e6b95], ebx
cdq
leave
cvtpi2ps xmm4, qword [edx]
mov ch, 0x8a
or byte [edx + 0x25], ah
xchg edi, eax
div cl
jg 0x100888a2
int3
or bl, bl
test byte [ecx], bl
mov eax, dword [0x7f23eb]
les esi, [ebx]
and byte [edx - 0x547a3210], bl
cmp byte [edx + 0xb], ah
mov ebx, 0xa2243c9f
add edx, dword [ebp - 0x37cfaa42]
dec ebp
pop ecx
jb 0x100888f0
mov edi, 0xdfa279ce
push ebp
xor al, byte [ebx - 0x62]
mov edx, 0x9faa669c
sub ecx, dword [ecx]
js 0x100888d1
imul eax, dword [edx - 8], 0xb8e7a118
popfd
jb 0x10088b72
pushfd
test byte [0x10088975], 0x29
jne 0x10088a76
cmpsd dword [esi], dword es:[edi]
sbb eax, 0xd6e22c68
ror byte [0xad375cd], 0x4a
sbb al, 0xf3
jno 0x10088958
sbb byte [edi], bh
pop esp
cmc
xchg ecx, eax
add al, 0x6b
mov bh, bh
mov edi, 0x9d1cec16
inc edi
sbb cl, al
fnstenv [ecx + 0x61]
popfd
add cl, bl
fxch st(3)
fstp xword [esi + 0x79d57092]
push si
mov dl, 0x1a
inc edx
inc edi
fild dword [edi]
sbb eax, 0x7abc5d4e
push es
mov dh, 0xf8
adc dword [edx], esi
aad 0x13
mov edi, 0xc67e88ab
popal
mov bl, 0x21
salc
imul esi, dword [ebx + 0x5a], 0xf4e69ca0
bt dword [edi + 0x2f], edx
leave
sbb dword [ebx], esi
pop ebx
fnstsw word [esi + 0x51]
dec ebx
xor al, 0xdc
pop esp
shl bl, 1
or bh, byte [ebx - 0x66ea9f5d]
jecxz 0x100889a9
mov ebx, 0x991560a3
das
mov ebp, 0xf8a4ab89
mov dword [ebx + 0x601cf8a4], ebp
clc
sbb al, 0x60
call 0xbab2bf98
adc eax, 0xee36a933
xchg byte [esi], ah
push edx
pop esi
imul eax, ebp, 0xaa62d891
stosb byte es:[edi], al
pop esi
sub dh, al
inc edi
insd dword es:[edi], dx
mov eax, 0x4e0bdd40
jl 0x1008899d
pop esp
pop es
cmp al, byte [edi]
lahf
sub eax, 0x30523bd5
out 0x41, al
jae 0x100889a6
imul ebp, dword [eax + 0x69428c3c], 0x15
dec ecx
xchg ecx, eax
jb 0x10088a4c
push cs
pop ecx
mul byte [edi + edi*8 - 0x16]
test eax, 0x99e1e79c
mov dl, 0x6e
loop 0x10088999
test eax, 0x57ac5cd5
xchg edx, eax
lds eax, [edx + edi*8 - 0x914b737]
or ah, byte [esi + 0x13549e7b]
or bh, 0x8c
mov esp, 0x8e87d88e
imul esp, dword [ebx], 0xfffffff5
movsb byte es:[edi], byte [esi]
cdq
and dh, byte [esi + 0x50]
dec esi
sub eax, 0x2cdd646d
cmp byte [eax], bh
mov bl, 0xbe
jae 0x100889bf
int3
pop es
mov al, byte [0xd4a8e69e]
xchg esi, eax
sub dword [esi + ebp*2 + 0xe], 0x13
mov bl, 0xb7
pop esp
inc ebp
cmp eax, 0x34cd8874
sbb dh, byte [ebx]
lahf
stosb byte es:[edi], al
xchg esp, eax
or eax, 0x85c543cd
outsd dx, dword [esi]
mov ecx, 0xa96975a9
push esp
out 0x4d, eax
add al, 0xf9
popfd
mov eax, dword [edi]
jmp 0x10088b74
mov eax, edi
lea ecx, [ebp - 0x114]
push ecx
push ebx
push str.ety
push eax
call dword [sym.imp.KERNEL32.dll_GetTempFileNameA]
lea eax, [ebp - 0x114]
pushfd
test byte [0x10088bb2], 0xb9
jne 0x10088bb3
sub eax, 0xc55484dc
sub dword [esi], ebp
add ch, bl
aas
add al, 0x12
jo 0x10088b7b
rol byte [edi + ecx*8], cl
in al, 0x7b
or esp, dword [ebx + esi*2]
pop esi
add ch, cl
popfd
push eax
call fcn.1011d740
pop ecx
push eax
lea eax, [ebp - 0x114]
push eax
mov ecx, edi
call fcn.10005303
cmp dword [edi + 0x14], 0x10
mov dword [ebp - 0x2938], ebx
jb 0x10088bd8
mov edi, dword [edi]
push 0x101468bc
lea eax, [ebp - 0x2938]
push edi
push eax
call fcn.1011f7c5
add esp, 0xc
test eax, eax
pushfd
test byte [0x10088c16], 0xd4
jne 0x10088c17
mov al, 0x19
mov cl, 0x9d
out dx, eax
in al, 0x2f
cmp dh, bh
or dword [edi - 0x2a], eax
into
sub dword [ebx], eax
movsd dword es:[edi], dword [esi]
push edi
xchg edx, eax
cwde
add eax, dword [edx + 0x1b]
add ah, byte [esp + 0x1728090c]
popfd
jne 0x10088fcd
cmp dword [ebp - 0x2938], ebx
je 0x1008911b
cmp dword [esi + 0xa8], ebx
jbe 0x10088fcd
pushfd
test byte [0x10088d30], 0xc7
jne 0x10088d31
xchg dword [ebx + 0xd], eax
inc ecx
mov gs, esi
or eax, 0x4b45e0d2
mov dword [0x8aab6b2a], eax
in al, 0xbf
pop ecx
pop ds
fld dword [ebx + 0x485af24c]
push esi
je 0x10088c37
dec edx
fadd st(1), st(0)
por mm0, qword [esi]
mov ebx, 0x47c13419
xor byte [esi], bh
rcr byte [esi], cl
lodsb al, byte [esi]
lodsd eax, dword [esi]
xlatb
or bl, byte [edi - 0x7c]
sub byte [ebx + 0x11e0864c], ch
cmp bh, byte [esi - 0x147c5947]
cmpsd dword [esi], dword es:[edi]
xchg esi, eax
push 0x7a91eaf7
push ebx
sbb eax, 0xb601df50
inc eax
fadd st(0), st(0)
scasb al, byte es:[edi]
scasb al, byte es:[edi]
and dword [eax + 0x28], ebx
loop 0x10088cde
sub byte [edi - 0x2308baa7], bl
mov esi, cs
test al, 0xe2
cmp eax, 0xe949306f
dec ecx
shr dword [eax + 0x44], 1
push 0x447a2598
cmp dword [edi + 0x329a6480], 0x3d
mov edi, 0xdab99d5a
xchg dword [ecx - 0x61888f16], eax
pop edx
popfd
mov ecx, 0xea8187da
jo 0x10088d3a
fiadd dword [edi + 0x7770ea81]
sahf
inc eax
mov al, 0x20
pop ss
imul edi, dword [ecx], 0x1a456bca
xlatb
adc cl, al
mov ebp, 0xff258548
mov ds, word [esi + 0x7d]
sti
jns 0x10088cba
jne 0x10088d42
arpl word [edx - 0x1d], dx
fisubr dword [ecx - 0x4c24921a]
push edx
jecxz 0x10088cbc
test eax, 0xb3db6de6
rcl byte [esi + edi + 0x10], cl
mov edx, 0x787e4675
das
int 0xc0
insb byte es:[edi], dx
clc
shl byte [esi], 1
aas
dec esi
leave
xor dword [edx + 0x24], ecx
lahf
adc al, 0xf3
dec eax
rol dword [ebp - 0x56], cl
fnstsw word [edx]
jb 0x10088d1b
das
mov ebx, 0xbbe5d29c
xchg byte [ecx - 4], bh
dec ebx
push ds
pushfd
cdq
push eax
int3
xchg edx, eax
mov word [ebp + 0x79354738], ss
mov esi, 0xc329cc4a
sub ah, 0x25
adc esp, dword [edi - 0x26]
ja 0x10088cbd
push cs
pushfd
popfd
xor edi, edi
push 0x2800
lea eax, [ebp - 0x2914]
pushfd
test byte [0x10088d68], 0x66
test esp, ebp
salc
invalid
push 0x6610088d
jne 0x10088d69
cmp eax, 0xc6b78868
mov dword [0x7782c741], eax
daa
xchg dword [eax - 0x18c7b2b8], edi
and esp, edi
aam 0x60
test byte [esi + 6], cl
jbe 0x10088d7f
test al, 0xc1
and esi, esp
in al, dx
xchg esp, eax
popfd
push eax
mov ecx, esi
call fcn.10053401
mov ebx, eax
test ebx, ebx
je 0x10088d9a
push dword [ebp - 0x2938]
lea eax, [ebp - 0x2914]
push 1
push ebx
push eax
call fcn.1011f678
add edi, ebx
add esp, 0x10
cmp edi, dword [esi + 0xa8]
jb 0x10088d34
test esp, ebp
salc
invalid
push dword [ebp - 0x2938]
pushfd
test byte [0x10088def], 0x94
jne 0x10088ef0
mov esp, 0xc3e29c7c
rcl dword [edi - 0x4e]
lodsb al, byte [esi]
sub dword [eax - 0x778edb26], ecx
outsd dx, dword [esi]
add eax, 0x39ebe5bc
mov edi, 0xd8dfc88d
dec esi
sub bh, byte [edx - 0x1ce25bd6]
mov ebx, 0x584367b5
sbb dword [ebp + edx*8 - 0x3a], edx
mov ebp, 0x1f3a8ae3
xor dword [esi], esp
pop dx
adc byte [edx - 0x6587efe9], ah
pop ecx
lodsb al, byte [esi]
imul eax, dword [ecx - 0x78fa4f4a], 0xfffffff7
frstor dword [ebp - 0x1b]
pop ds
in al, dx
lahf
mov ebp, 0x30ec7bb7
int1
mov bl, 0xc7
stosb byte es:[edi], al
pop ds
pop eax
push 0x819a65e8
or byte [ecx + edi*4 - 0x48], ch
cmp dword [ecx], ebp
mov dword [0x9c70e72d], eax
fsubp st(6)
mov byte [ebp - 0x1534caea], ah
inc ebx
rcr byte [ebx + 0x10b22b1], 0xc6
int3
popfd
call fcn.1011e7c5
and dword [ebp - 0x2938], 0
pop ecx
pushfd
test byte [0x10088fc2], 0x76
jne 0x10088fc3
push 0xffffffffffffff9e
out 0xc7, eax
in al, 0xd9
lahf
aam 0xd5
fdivr st(1)
inc esi
and edx, esp
clc
inc edi
xor edi, eax
test byte [esp + esi*4 + 0x54aa591d], ah
inc esp
enter 0xe74, 0x48
inc edx
lodsd eax, dword [esi]
push ecx
mov byte [edx - 0x5e1ea819], ah
xor ebp, dword [edx]
xchg byte [edx + esi*2 - 9], cl
adc edi, ebx
xor ecx, esi
jne 0x10088f1b
add eax, dword [ebx]
cmp al, 0x75
inc edi
into
mov edx, 0x52843068
and byte [si - 0x74], cl
sahf
int 0xb4
mov al, byte [0x54bd630b]
pop edx
inc ebx
push 0xffffffffffffffef
insd dword es:[edi], dx
and byte [0x819bf9a5], cl
outsb dx, byte [esi]
imul esi, dword [esi - 0x1c225491], 0x5e887059
sbb esp, dword [eax]
mov edx, 0xba68a3fd
xchg edi, eax
adc cl, byte [esi - 0x21249508]
xor eax, 0x231eca8a
jge 0x10088f37
mov cl, 0x2a
dec ebx
clc
and eax, 0xa0923e31
inc esp
inc eax
inc ebp
test al, 0xd3
xchg ecx, eax
xor eax, 0x9500984
pop ss
test byte [ecx], cl
push eax
or dword [edi], edx
push ecx
leave
mov bl, 0x2b
push ecx
ja 0x10088f93
lahf
xor ebx, eax
adc esi, ebp
inc esp
mov ds, word [ebp - 0x463c16a2]
mov ch, 0x4f
aas
push es
cdq
test byte [eax + 0x603ff8b5], ch
aas
pushal
adc byte [esi + 0x68109b5e], ch
pop ss
cld
jle 0x10088fb6
inc eax
popfd
mov byte [ebp - 0x2931], 1
xor ebx, ebx
cmp dword [ebp - 0x2938], ebx
je 0x1008911b
push dword [ebp - 0x2938]
pushfd
test byte [0x10089013], 0xa8
je 0x10089114
movsb byte es:[edi], byte [esi]
push edi
in al, dx
fcom qword [edx]
jg 0x1008904c
add dh, byte [edx - 0x5ab5d894]
jns 0x10088fa2
movsd dword es:[edi], dword [esi]
arpl word [0x814fb150], si
xor eax, 0x814fb150
push esp
test eax, 0xa90f552d
jl 0x10088ffe
outsd dx, dword [esi]
pop esp
dec edi
jl 0x10088f95
cmp eax, 0xbf55f826
push cs
salc
pop ss
stc
cwde
loop 0x1008908f
fnstenv [edx + ecx*8 + 0x786f6d72]
push cs
js 0x10089032
inc ebx
arpl ax, bp
jle 0x10089022
pop ecx
or esp, dword [ecx + edx*2 + 0x1297cbf8]
xchg ebp, eax
out dx, al
or eax, 0x5aef93cf
cmp al, 0x34
inc edi
jecxz 0x10089065
dec esp
adc bh, dh
test ah, 0xa9
mov ah, 2
and byte [esp + edx*4 - 0x43], bl
rcr dword [esi], cl
int3
enter 0x78f9, 0xffffffffffffffb6
das
in al, 0xa5
jns 0x100890ce
dec ebx
aad 0x53
push esi
std
push ecx
cmp dword [eax + 0x2485c2f], esp
mov al, bh
cmp byte [ebx + 0x7b], dh
salc
fbld tbyte [eax]
sahf
jo 0x10089085
or ah, dh
add esi, dword [edx - 0x6c]
and eax, dword [eax + 0x7e17d799]
inc edi
jle 0x100890d8
popal
pushal
jne 0x10089024
popal
sbb eax, 0x173b46e1
fcom dword [ecx + 0x4da97e74]
imul dword [esi + 0x69c7ffc9]
rol dword [ecx - 0x4bb47db], 0x26
movsb byte es:[edi], byte ss:[esi]
into
sub byte [ebp - 0x32bf07b3], al
loop 0x10089071
inc eax
int 0xe2
mov eax, 0x1bfd4393
add dword [ebp + 0x1e93dd65], ebx
invalid
xchg ebx, eax
inc ebx
std
sbb eax, dword [ecx]
popfd
fst qword gs:[ebx - 0x22af0fe2]
aam 0x49
lahf
cmp edi, dword [eax - 0x6b4b1414]
xchg esp, eax
dec ebp
jns 0x100890b5
into
inc esp
das
mov ch, 0xfa
insd dword es:[edi], dx
xchg byte [edx + esi + 0x7fa7fafa], cl
insd dword es:[edi], dx