Function at 0x100c189d
Capabilities:
Encode data using xor

Disassembly:
test al, 0xba
in eax, 0xea
push ecx
xchg esi, eax
adc byte [ebp + 0xac8c1d6], bl
mov cl, 0x66
and bh, bh
arpl sp, cx
jno 0x100c1896
xchg esi, eax
push es
xor byte [edi], ah
and cl, byte [edx + 0x2f71e3c1]
mov byte [esi], cl
sal ecx, 0x44
pop esi
xchg ebp, eax
lodsb al, byte [esi]
js 0x100c18e5
xor ebp, 0x12
mov cl, 0xbd
push edx
sub byte fs:[ebx - 0x73], bl
insd dword es:[edi], dx
aas
arpl word [esi - 0x784ec02e], ax
daa
mov dword [0x9e9c871b], eax
or bh, byte [esi]
cmpsd dword [esi], dword es:[edi]
leave
or eax, ebx
popal
in eax, 0x57
int3
call fcn.1011e48a
leave
ret
push ebp
pushfd
test byte [0x100c1921], 0x29
je 0x100c1922
mov ch, 0xa
js 0x100c183f
xchg ebx, eax
mov dh, 0xea
std
pop ecx
pop ds
arpl word [eax + 0x7d891c27], dx
add esp, dword [ebx - 0x6e]
mov edx, 0x44401763
mov dword [ebp + 3], edi
arpl word [edx + 0x401763ba], dx
inc esp
lock xor dword [esi - 0x1a], 0x72e7a6c
scasb al, byte es:[edi]
push edx
loop 0x100c18ab
dec edx
pop ebp
cmp cl, byte [esi + esi*4]
mov bl, 0x83
add al, 0xea
or ch, bh
leave
pop ecx
xchg esp, eax
jnp 0x100c18b5
mov dl, 0xe4
imul dword [esi + 0x16d3a54b]
xor eax, dword [esi - 0x73]
bound edi, qword cs:[esi - 0x61f0a399]
lea ebp, [esi]
bound edi, qword [esi - 0x61f0a399]
push ebx
or cl, byte [ecx - 0xc]
jb 0x100c18d6
adc ebx, dword [esi]
cmp al, 0x32
in al, dx
movsb byte es:[edi], byte [esi]
bound esi, qword [0x44de3cad]
sbb eax, 0x1ee15bf4
sahf
sar dword [ebx - 0x38], cl
inc ebx
or dword [ecx + 0x66], edi
pop edi
mov word [edi], ds
pop ebp
mov cl, 0x73
dec eax
push esp
pop es
jne 0x100c1900
hlt
mov esp, 0x6490b246
in eax, dx
fdiv st(3), st(0)
cmp al, 0x9e
salc
popfd
mov ebp, esp
sub esp, 0x3c
pushfd
test byte [0x100c1a26], 0x6a
jne 0x100c1a27
dec edi
sbb bh, al
dec esp
xchg edx, eax
xchg ebp, eax
fldenv [edx]
mov ebx, 0xcee7a228
push esp
je 0x100c1977
sahf
xor byte [ebx + 0x25], bh
in eax, dx
push esi
mov gs, word [edi]
cmp byte [edx + 0x5a], bl
jg 0x100c1982
xor eax, 0x9fb70b38
xchg ebp, eax
inc edi
dec esi
popfd
or al, 0xa6
push edi
adc ebx, dword [ecx + edx*2 - 0x6d]
outsd dx, dword [esi]
leave
inc eax
std
xor al, 0x5c
cmpsb byte [esi], byte es:[edi]
and eax, 0x36720cd8
dec edx
stc
enter 0x6707, 0xffffffffffffff8f
xor al, 0xc3
push ecx
cmp ch, byte [ecx - 0x3d]
mov al, 1
arpl word [ebx + edi], ax
xchg ecx, eax
push ebp
stosb byte es:[edi], al
les esi, [edi]
cmp edx, dword [ecx + 0x37c4aa55]
arpl word [0x15115035], ax
test byte [ecx + 0x40], 0x3e
out 0xf2, al
inc ecx
add al, byte [ebp - 0x3a]
cdq
scasb al, byte es:[edi]
and ch, al
inc ecx
mov ah, 0xbd
cmp dword [ebx - 0xd38e395], ecx
xor edi, eax
adc byte [edi], 0xd
frstor dword [ecx + 0x2e]
into
aam 0x4f
jb 0x100c1a02
cmp bl, 0x90
mov edx, 0x2259766d
mov ebp, ecx
and dword [ebx + 0x432391d8], esp
xchg cl, dl
jb 0x100c1a30
and dword [ebx], esp
rol byte [ebp + 0x3ee0378f], 0x1a
test al, 0x41
sbb byte [esi - 0x7f], dl
adc al, byte [ebp - 0x78]
shr dword [edi], 0xeb
stc
and cl, bl
push eax
mov dl, 1
adc dword [eax], edi
add al, 0x55
sub dword [esi], edx
nop
mov al, byte [0xb1b755cf]
mov bh, 0xb1
aam 0xb4
imul eax, dword [ecx + 0x5a29a5cb], 0xffffffeb
xchg ecx, eax
pushfd
push ecx
jne 0x100c19ed
sub dword [esi + 0x51], edi
mov bh, 0x7d
pushfd
daa
sub eax, 0x4a7c0200
push esp
leave
or byte [ebx - 0x6fa623f5], dl
and edx, dword [ecx]
fcmovnu st(0), st(7)
mov ebx, 0xbc2a81e0
jmp [edi + eax + 0x66]
popfd
mov eax, dword [0x10170c30]
pushfd
test byte [0x100c1a42], 0xe1
jne 0x100c1b43
inc edx
sbb cl, byte [eax + edx]
loope 0x100c1a45
test dword [eax], ecx
add dword [eax], eax
add cl, dl
adc dword [eax - 0x76], edx
push esi
sal byte [ecx], cl
mov ebx, 0x8d5de9c8
rcl dword [ecx]
push eax
mov dl, byte [esi - 0x2e]
xor dword [ebx - 0x72a21638], edi
pop ebp
lea ebp, [esi]
arpl word [esi + 0xf2f8203], bp
arpl word cs:[esi + 0xf2f8203], bp
xchg esp, eax
jl 0x100c1a5a
or dword [edi + edx*8 - 0x6d69efcd], eax
test bh, dl
xor edx, dword [eax]
xchg esi, eax
xchg edx, eax
sbb bh, bl
out dx, al
into
bound ebx, qword [ebx - 0x2b3c3c79]
sbb byte [eax], cl
cmpsb byte [esi], byte es:[edi]
sbb dl, byte [edx + edi*2 + 0x43a2651a]
cmp al, 0x91
scasb al, byte es:[edi]
aaa
lea ebx, [esi + eax*2 + 0x630009ba]
rcr dword [eax + 0x5a], 1
enter 0x24b2, 0xffffffffffffffc2
ja 0x100c1a50
popal
push edx
movsb byte es:[edi], byte [esi]
adc ah, byte [edi + ebx*2]
sbb al, 0xc3
sbb al, byte [edi]
mov fs, word [edi]
mov ah, 0x38
or eax, 0xaf02e62f
pop edi
cmp byte [eax - 0x767b3a50], bl
popal
and edi, ebp
mov edx, 0xafd22000
xor al, 0xf0
cmovnp ebx, dword [eax]
and dword [ecx - 0x5f], edi
pushal
loopne 0x100c1a56
daa
test dword [ebx + 0x5cf040d1], eax
or dword es:[ebx], ebx
je 0x100c1b1d
adc ecx, 0x40
invalid
and eax, 0x18316405
sbb ebp, ebx
add byte [eax + ecx + 0x28d847f7], 0x9b
std
push es
pop esp
in eax, 0x9c
and eax, 0x3d6d12d9
adc byte [ecx + ebp*4], dh
inc esp
and byte [esp + edi*8 - 0x7fd5610], cl
bound eax, qword [ebx]
sar dword [edx + 0x5a], 1
add edx, ecx
jp 0x100c1b3c
outsb dx, byte [esi]
bound esp, qword [esi - 0xba64f5c]
mov eax, dword [0x54e5bf29]
xchg edi, eax
popal
pop ds
pop es
inc eax
mov ch, 0x4e
inc ecx
jae 0x100c1ade
imul esp, dword [ebp + ebp*2 - 0x62], 0xe08a6487
mov ah, al
xor eax, 0x57f677d4
ja 0x100c1b45
popfd
loopne 0x100c1b68
mov dword [esi + 0x25], ebx
lahf
adc byte [edx + esi*2], dh
or al, byte [edi - 0x44]
jae 0x100c1aaf
mov esp, 0xb2529973
add eax, dword [ebx + 0x3da4126a]
dec edi
and eax, 0xf8236255
push edx
mov dl, 3
sub dword [edx + 0x12], 0xffffffa4
cmp eax, 0x6255254f
and edi, eax
or ebx, dword [eax - 0x71]
cmp eax, 0x5e02202e
pop ds
push 0xffffffffffffffdc
push ebx
mov dl, 0xb7
inc esp
lea esp, [edi + 0x31]
cmpsd dword [esi], dword es:[edi]
inc eax
pushal
test byte [eax + 0x60], cl
invalid
pushal
jl 0x100c1afd
pop ss
sub byte [esi - 0x45], bh
popfd
xor eax, ebp
mov dword [ebp - 4], eax
push esi
push edi
lds ecx, [ecx + 0x5756fc45]
pushfd
test byte [0x100c1c46], 0x89
je 0x100c1c47
loopne 0x100c1b13
sal dword cs:[edx + 0xa], cl
mov ebp, 0x35fd813f
add edi, dword [ebx + 0x2a]
salc
pop es
or eax, 0xb87e9efb
jle 0x100c1b26
mov eax, dword [0x7d0eac82]
sub byte [edx - 0x61], dl
pop eax
or eax, eax
jl 0x100c1b6c
jecxz 0x100c1b8e
cmpsb byte [esi], byte es:[edi]
fiadd word [ebp + 0x60c5ca8d]
movsb byte es:[edi], byte [esi]
cmc
mov al, ah
and al, 0xe0
insb byte es:[edi], dx
cmp eax, 0x89cc331d
stosb byte es:[edi], al
sbb eax, 0xaa89cc33
mov esi, ecx
salc
xchg dword [edx + 0x2bf71f46], ebp
js 0x100c1bc9
sub eax, ebp
loopne 0x100c1b9d
lds edi, [esi]
loopne 0x100c1b9d
inc edi
push 0x71cc70f3
pushfd
mov bl, 0xfd
int 0x3e
imul ecx, dword [eax - 0x48f0b3d3], 0x11c67a47
in eax, dx
push ss
and dh, ah
jns 0x100c1bb9
sbb edx, dword [edi]
fistp word [edx + edi + 0x35]
std
mov word [ebx - 0x5ecfb5ec], fs
mov eax, 0xe4bbfc70
jbe 0x100c1c26
xor byte [ecx - 0x38f4799], ah
mov ebx, 0xb75376e4
jbe 0x100c1bc4
mov bh, 0x66
jbe 0x100c1bc4
inc byte [edx - 4]
imul esp, dword [edi], 0x95805477
adc ch, byte [ebx - 0x53]
aaa
arpl word [edi], cx
fmulp st(6)
add byte [ecx + 0x18c3540e], bh
sahf
aas
and ah, byte [ebx - 0x2d44ea2f]
aad 0xbf
imul esi, dword [ebx - 0x7e], 0x34fc992d
push ebp
fbld tbyte [edi + 0x5e6210ed]
pop eax
cmpsb byte [esi], byte es:[edi]
in eax, 0x78
cld
pushfd
pop ecx
cmp dword [ecx], ecx
inc ebp
mov dword [0x44e6a9d9], eax
push ebp
push eax
imul dword [eax - 0x2f]
mov esp, es
enter 0x19d6, 0x2e
cmp dword [edx], edx
movsb byte es:[edi], byte [esi]
push ss
push ebp
out 0x3e, al
inc edx
sti
bound ecx, qword [esi]
mov eax, 0x31f057fc
sal byte [ebp - 0x74380275], cl
pushal
sbb dword [ebp - 0x749cb06e], esi
les ecx, [edi - 0x4a5d3a26]
pop edx
int1
inc edx
popfd
lea eax, [ebp - 0x38]
push str.wuauserv_mux
pushfd
test byte [0x100c1d40], 0xc4
jne 0x100c1d41
std
xchg esi, eax
mov ah, 0xc2
cmp edi, dword [edx + 0x6d9e8c32]
jle 0x100c1c7c
popfd
sbb al, 0xf6
add eax, dword [edi + 0x15203037]
fld qword [0x28750ea8]
or ah, 0xe
mov al, 0x24
adc al, 0x60
salc
out dx, eax
sahf
adc al, 0xc7
pushal
popal
rcr byte [ebx], cl
push ebx
jl 0x100c1c24
cdq
or al, 0xa
clc
and dl, byte [eax - 0x5429f402]
stc
lodsd eax, dword [esi]
add esp, dword [esi + 0x6a662dc5]
sbb dword [0x173448d9], esi
sbb ebp, esp
lahf
push esp
fidivr word [ecx - 0x22851b49]
push esp
rcr byte [ebp - 0x7b0e9aa3], cl
mov esp, 0x640b0d84
popfd
pop es
add byte [eax], 0x3c
dec esi
into
xor dword [ecx + 0x454383c2], 0x5f5a92f5
nop
dec edx
mov ecx, 0x7b6a50bc
insb byte es:[edi], dx
mov bl, 0x93
or al, 0xc8
add ebx, ebp
adc byte [esi - 0x1b], dh
fldcw word [esi + 0x55]
pop eax
mov esi, 0x6508f060
test al, 0xd2
xchg edi, eax
xchg esp, eax
mov ebp, 0x6e09630d
sbb al, 0x45
or eax, 0x1c6e0963
inc ebp
and ah, byte [ecx - 0x3a6e1673]
cwde
cmp al, 0xd7
fsubr qword [esi]
and eax, 0xb3f7e401
jns 0x100c1d05
jo 0x100c1d5f
scasb al, byte es:[edi]
xchg edi, eax
fsub dword [edx]
mov edx, 0x76a16d81
pushal
jbe 0x100c1d71
cmpsb byte [esi], byte es:[edi]
push es
cmp dword [esi - 0x7b8f1039], eax
add bl, ch
xor esp, ebx
add eax, 0xe3bd971c
jbe 0x100c1d6a
test al, 0xf6
int1
xor edx, ebp
and eax, 0xf8277a01
push ebp
or dword [eax - 0x23262384], 0x3d2ca7ce
imul ebp, dword [eax - 0x4780d105], 0xffffffbf
aaa
popfd
push eax
pushfd
test byte [0x100c1d74], 0xb1
jne 0x100c1d75
lodsd eax, dword [esi]
int 0x23
loopne 0x100c1d93
dec ecx
sbb cl, byte [eax]
cmp cl, al
cdq
jno 0x100c1dcc
xor al, 0x25
jbe 0x100c1d63
xor byte [esi + ebp*4 - 0x6c], bh
jl 0x100c1d0f
xchg esp, eax
xchg edi, eax
movsd dword es:[edi], dword [esi]
inc ebp
daa
jo 0x100c1ceb
cwde
mov esp, 0xe24390f3
mov word [edi - 0x6dc1836b], ds
xchg ebp, eax
jl 0x100c1db2
xchg edx, eax
popfd
call fcn.1011f120
mov esi, dword [sym.imp.KERNEL32.dll_OpenEventA]
pop ecx
pushfd
test byte [0x100c1de1], 0x70
je 0x100c1de2
sub al, 0xfb
insb byte es:[edi], dx
pop ecx
mov cl, 0x8a
scasb al, byte es:[edi]
add al, 0xf
mov ds, word [esi + 0x33]
aaa
mov eax, dword [0xbbb85f00]
mov dl, byte [edi + 0x1f]
outsb dx, byte [esi]
test dword [eax - 0x19], eax
mov byte [edx + edx], ch
mov edi, 0x13230bce
insd dword es:[edi], dx
sti
adc ah, dh
adc al, 0x73
mov al, 0xe2
out dx, eax
sub dword [eax - 0x74], ecx
idiv byte [ecx + 0x67]
stc
movsb byte es:[edi], byte [esi]
sal bl, cl
mov ecx, 0x10e333dd
jl 0x100c1ddb
xor al, byte [edi]
or cl, dh
mov dword [0xe3679557], eax
stosd dword es:[edi], eax
dec ebx
dec esi
scasd eax, dword es:[edi]
dec ecx
jge 0x100c1dcc
jns 0x100c1e55
sbb al, 0x59
pop ecx
inc ebx
mov bh, 0x88
pop ebx
jne 0x100c1d66
popfd
pop ecx
lea eax, [ebp - 0x38]
pushfd
test byte [0x100c1e84], 0x8e
jne 0x100c1e85
jno 0x100c1ddd
cmp edi, dword [ebp - 0x30731be7]
add dh, byte [eax]
add ah, byte [edx]
and eax, 0xa69f875f
insd dword es:[edi], dx
sub edi, ebx
pop ebx
outsb dx, byte [esi]
push edi
inc ecx
pop es
ror byte [edx + 0x32], cl
dec esp
das
inc esp
loopne 0x100c1e93
pop ds
lahf
sbb eax, 0xa3d565ed
and eax, 0x1c9e44bb
int3
mov dword [0x9e44bb25], eax
sbb al, 0xcc
add byte [ebp - 0x6aec2af0], bh
cdq
out dx, al
sbb ch, byte [ecx - 0x231dbd10]
cmpsb byte [esi], byte es:[edi]
clc
fdiv qword [ebx + 0x7d]
clc
or dl, byte [esi + ecx*8 - 0xd]
jle 0x100c1e60
mov ebx, 0xa74c6e78
shr bl, 1
xor edi, dword [esi - 8]
mov eax, dword [0xbf4825b5]
mov ecx, 0x1d87aaa8
push esi
push esi
pop esp
xor dword [edi + 0x63], ebp
stc
fidivr dword [0x1baf3236]
xlatb
sbb edx, edi
stosb byte es:[edi], al
push 0x58
jmp dword [0xa2f3c364]
fxch st(0)
nop
mov ch, 0xed
sbb al, 0x1b
cmp cl, al
cmp edi, dword [eax + 0x11]
jne 0x100c1e1e
dec esi
mov dl, 0xd9
push ebp
push eax
into
popfd
push eax
push 0
pushfd
test byte [0x100c1ea8], 0x43
jne 0x100c1ea9
mul dword [ecx]
xchg dword [edx - 0x1572dc71], ecx
arpl word [edx], bp
cdq
and ecx, dword [ecx]
push eax
xor dword [ebx - 0x2ab5bbb], edi
popfd
push 2
call esi
pushfd
test byte [0x100c1f03], 7
jne 0x100c1f04
push es
sub ebp, dword [ebp + 1]
push eax
imul ebp, dword [ebp + 0x6ae6c084], 0xb2803af5
jns 0x100c1ec8
invalid
js 0x100c1e71
xchg dword [ebx + 0x42ec5268], ebx
push edx
in al, dx
inc edx
mov ch, cl
cmp al, 0xa4
mov al, byte [0x1e4a1392]
push ss
call 0xe69a8a2f
cmpsb byte [esi], byte es:[edi]
idiv dword [esi - 0x48]
shr byte [esi + 0x5b977d4f], cl
adc esi, eax
or bl, bh
or bl, bh
salc
sbb eax, dword [edi]
push edx
jns 0x100c1ece
jbe 0x100c1eed
jno 0x100c1f2d
pop edi
outsd dx, dword es:[esi]
and dword [ecx], 0xffffffc4
test eax, 0x81b85139
popfd
mov edi, eax
test edi, edi
jne 0x100c2065
call dword [sym.imp.KERNEL32.dll_GetLastError]
sub eax, 2
neg eax
pushfd
test byte [0x100c1f5b], 0x5a
jne 0x100c205c
xor eax, 0xa100a39e
test al, 0x59
sahf
mov dword [0xc8f6a100], eax
pop ecx
mov eax, dword [0x8659c8f6]
sub al, 0x90
xchg byte [ebp + 0x2c], ah
nop
imul esi, dword [edx + 0x71], 0xdd90c67f
sbb cl, bh
mov dl, byte [ebp + 0x660fed4]
imul byte [esi + 0x5f]
call 0x81a112b8
xchg byte [0x817a0b23], al
jp 0x100c1ed3
cmp eax, 0x4c925858
xlatb
sbb eax, 0xc73a0498
xor eax, 0x2b281fce
add ebx, dword [0x2a6d5749]
pop ebx
sub eax, dword [ebx]
mov esi, 0x296a9f26
mov eax, dword [0xcdd53727]
xchg dword [eax - 0x5ca6ffd0], esp
adc al, 0xa6
dec ecx
xchg edi, eax
adc eax, 0x3f9e679b
sahf
aas
sbb dword [esi], 0x438c0811
dec edx
add dword [edx], ebp
pop ss
fistp dword [ebx]
jno 0x100c1f2a
jns 0x100c1f50
jae 0x100c1f83
mov eax, 0xfc734851
push edi
mov esp, 0xe989ea8
pushfd
mov bh, 0xb
imul edi, dword [ebp - 0x2485d3c7], 0xdf42e1e8
jl 0x100c2014
int1
les ebx, [esi + 0x42d545a2]
jne 0x100c2016
jno 0x100c2033
cmp dl, byte [ecx - 0x70]
sub byte [ebx + 0x74], ch
mov eax, 0x77294b68
pop ds
jo 0x100c1f58
push cs
salc
aam 0x33
sbb dword [edx + 9], 0x71ba7cdd
or dl, byte [ebx]
insd dword es:[edi], dx
or al, 0xde
cdq
mov al, byte [0xa9758276]
pop edx
xor esi, ecx
test eax, 0xf1335a64
mov edx, 0x8f10fd2a
push edi
test eax, 0x6d93ef10
insb byte es:[edi], dx
sub ecx, dword [edi]
test al, 0xe4
mov cl, 0x1c
test byte [eax - 0x26], dl
movsd dword es:[edi], dword [esi]
inc edx
push edi
cmp al, 0x28
push esp
aad 0x35
inc edx
fsub st(4), st(0)
arpl word fs:[eax], bp
mov edi, 0x1c2bd8df
xchg ebx, eax
add al, 0x3c
aaa
xor al, 3
stosd dword es:[edi], eax
cmpsd dword [esi], dword es:[edi]
jno 0x100c2087
mov eax, 0xcf4324c5
sar byte [ecx + eax*2 + 0x30], 0x1a
xor eax, 0x12bf00d9
jecxz 0x100c1fe0
popal
test al, 0x8e
lodsb al, byte [esi]
lahf
push cs
int3
dec esi
push esi
mov dh, 0x2c
cmp eax, dword [eax + 0x6ac8db58]
daa
mov eax, esi
sbb eax, 0x731b5fd6
push es
xchg esp, eax
add ebx, dword [ecx - 0x7994132c]
mov ebx, dword [ecx + edx*2 - 0x46]
dec edi
adc byte [eax - 0x1c], al
and ecx, esp
xchg edx, eax
sbb dword [edi - 0x20], ebp
popfd
sbb eax, eax
inc eax
jmp 0x100c24f9
push edi
call dword [sym.imp.KERNEL32.dll_SetEvent]
adc eax, sym.imp.KERNEL32.dll_SetEvent
push edi
test eax, eax
jne 0x100c207e
call dword [sym.imp.KERNEL32.dll_CloseHandle]
xor eax, eax
jmp 0x100c24f9
add byte [eax], al
mov edi, dword [sym.imp.KERNEL32.dll_CloseHandle]
call edi
and dword [ebp - 0x3c], 0
les eax, gs:[eax]
push ebx
push 0x3e8
pushfd
test byte [0x100c2180], 0x4a
jne 0x100c2181
loopne 0x100c20e2
call 0xb95f94ec
sub byte [edx], dh
mov esi, 0xb220cc3b
loopne 0x100c207c
xor dword [edx], 0x254d3251
mov dl, 0xc9
xor bx, word [ecx + ebx*2 + 0x73b3989b]
daa
sbb eax, 0xc494a4a3
cmp al, 0xa3
add ch, ch
pop ds
xchg edx, eax
out dx, al
cmpsd dword [esi], dword es:[edi]
sbb ch, byte [ebx]
sti
jecxz 0x100c205f
pop edi
mov ch, 0xd2
inc ebx
jbe 0x100c2067
dec ecx
cmpsb byte [esi], byte es:[edi]
stc
sbb dword [edi - 0x29017df4], edx
pop ebp
adc eax, dword [ebx]
invalid
add ebx, edi
fnstsw word [eax + 0x28d045e8]
int1
aaa
aaa
mov ebx, 0x45a5ecd6
dec ebx
push ebp
xchg edi, eax
test eax, 0xb6b16b81
mov cl, 0xb6
clc
pop eax
xchg ecx, eax
xchg edx, eax
outsb dx, byte [esi]
pop ebp
sahf
adc eax, 0xfa31a162
lodsd eax, dword [esi]
pop ss
mov sp, 0xe76f
cli
push edi
cmp byte [eax + 0x4a], 0x8a
dec ecx
loop 0x100c2114
push ecx
int1
or dword [edi + ecx*4], edx
fcmovnb st(0), st(6)
cmpsd dword [esi], dword es:[edi]
and bh, byte [ebx + 0x3f1400f8]
test byte [ebp + eax*8 - 0x2e8203bd], cl
cdq
mov ah, 0x1c
dec ebx
fld st(1)
push ss
into
pop edi
sub bh, dl
pop ebx
add ebx, ebp
dec edx
dec ebp
jle 0x100c21af
stosd dword es:[edi], eax
sbb dh, byte [eax - 0x571954c6]
out dx, al
dec esp
pop esi
mov dh, 0x78
or dh, byte [esi - 0x7be174c]
xor byte [ecx], dh
push ecx
aad 0x6c
rol byte [ecx], 1
loopne 0x100c214e
or ebx, 0xfffffffc
outsb dx, byte [esi]
or al, 0x15
in eax, dx
and al, 0xeb
inc ebp
loop 0x100c218f
push ebx
or ah, byte [esi + 0x30]
cmp eax, dword [ebx + 0x33]
cwde
popfd
outsd dx, dword [esi]
scasd eax, dword es:[edi]
xchg ebp, eax
jl 0x100c20f8
test eax, 0xfa219f12
fimul dword [edi + 0x72c1eec8]
out 0xb1, eax
clc
cwde
lodsb al, byte [esi]
popfd
call dword [sym.imp.KERNEL32.dll_Sleep]
lea eax, [ebp - 0x38]
push eax
pushfd
test byte [0x100c21c6], 0
je 0x100c21c7
invalid
into
or al, 0xd
adc eax, 0x45cbcbbf
mov ebp, 0x50d8eb27
xchg byte [ebp - 0x30b7070b], dh
sub byte [eax + 0x1b5b070], dl
mov ch, 0xf5
cmc
clc
dec eax
iretd
mul edi
jns 0x100c21a5
popal
push ds
out dx, eax
popal
pop esi
insb byte es:[edi], dx
cmp al, 0xfa
les esi, [ebx - 0x3c564a4b]
lds ebx, [eax - 0x49bc4213]
popfd
push 0
push 2
pushfd
test byte [0x100c22b6], 0x70
jne 0x100c22b7
jbe 0x100c21e6
outsb dx, byte [esi]
mov dl, 0x8d
jl 0x100c2259
mov ebp, 0x1dfc619b
cmc
idiv eax
cmp dword [ecx + 0x3b107ff1], esp
xchg bl, cl
mov ebp, 0x6c8c6a08
jl 0x100c2199
sbb eax, 0xc7a98559
js 0x100c220e
jl 0x100c2271
sub esi, dword [eax]
movsd dword es:[edi], dword [esi]
dec esi
jecxz 0x100c225a
pop edi
pop edi
sub esi, edi
pop ds
mov eax, dword [0x97ddba80]
jecxz 0x100c21a4
cmp byte [edx - 0x6f1c6823], 0xd1
xchg esp, eax
sal dword [esi], 1
xchg esp, eax
sbb dword [edx - 0x4e28b43d], ebp
cmp dword [esp + ebp - 0x27e1f565], 0x78edfef2
add al, 0xeb
xor dword [esi], 0x3934ebc0
nop
shl dword [eax + 0x2975e1d8], 1
push edi
mov dword [edi + 0x6ca511c0], ebx
jb 0x100c21c8
cmp al, 0x1c
cmc
xchg ebp, eax
and eax, 0xb034e7a8
pop edi
nop
scasd eax, dword es:[edi]
cli
mov esp, dword [eax + ebx*8 + 0x58]
lodsb al, byte [esi]
call 0x29d7542c
out 0xa1, al
mov eax, dword [0xe4e73c48]
invalid
dec eax
cmp al, 0xe7
in al, 0xdb
ja 0x100c22c8
and cl, byte [ebx + 0x6dc53a08]
pop edi
aad 0xae
xchg ecx, eax
insb byte es:[edi], dx
mov esi, 0xfa1abae1
idiv byte [edx - 0x12]
insd dword es:[edi], dx
fldcw word [edi]
dec byte [esi - 0x16]
xchg ebp, eax
dec edi
xchg ebp, edi
dec esi
stosd dword es:[edi], eax
lahf
push edx
mov eax, dword [0x8e3b6bc2]
clc
xor cl, byte [edi - 0x3e]
xchg byte [ebp - 0x2e], dl
aad 0xb5
out dx, al
pop esi
dec edi
or al, 0x1f
jge 0x100c22b9
mov es, word [edx + 0x20ed0be7]
aad 0x64
insb byte es:[edi], dx
push ebx
mov cl, 0xaa
xchg esi, eax
jb 0x100c22fb
sub cl, byte [edi + 0x3c12af20]
mov dword [0x6a0d6c7], eax
push ds
add dh, al
jns 0x100c22a7
popfd
call esi
salc
mov ebx, eax
test ebx, ebx
je 0x100c2625
pushfd
test byte [0x100c22d7], 0xb0
jne 0x100c23d8
and cl, byte [eax + edx]
mov al, 0xf
test dword [esi], eax
add dword [eax], eax
add byte [edi + 0x42], ch
outsd dx, dword [esi]
inc edx
inc ebp
cdq
or al, 0x13
imul ah
and edi, ebx
fistp word [ecx]
inc ebp
popal
xor dword [eax - 0x1abc26e8], esi
nop
mov dword [0x79c81bfe], eax
pop esp
dec eax
mov ebp, 0x2975b217
not byte [esi + 0x1f]
xor edi, dword [edi]
add eax, 0xde0f77d7
inc ebp
aam 0xc9
ja 0x100c230c
fiadd word [ebp - 0x2c]
leave
mov byte [edx + ebp + 0x48], al
pop esi
loopne 0x100c2323
inc esi
and al, 0xfe
fxam
dec esi
in eax, 0x4e
jecxz 0x100c22a5
xchg esp, eax
push edi
cmc
push eax
or al, 0x72
xchg dword [eax], eax
movsb byte es:[edi], byte [esi]
xor eax, 0x205c42d7
scasd eax, dword es:[edi]
lea eax, fs:[ecx - 0x1b97529e]
push ebx
cdq
bound ebp, qword [ebp - 0x66ac1b98]
add dword [0xc66cf5dc], eax
int 0x86
push 0x72770e5e
mov dl, 0xe0
and al, 0x8c
mov al, byte [0xb651162b]
inc edi
mov dh, 0x47
shr dword [eax - 0x53eee1bb], 1
js 0x100c237c
dec ebp
imul ebx, eax, 0xcafc456d
popal
xchg edx, eax
xchg ebx, eax
and byte [edx + 0x1ce49033], dh
sub byte [edi + 0x1d], 0xb7
cmp edx, dword [edi - 0xeb4d521]
js 0x100c22e7
arpl word [edi - 0x5b], ax
inc edx
or cl, byte [ebx]
add ah, dl
mov eax, 0x1d7a02f
dec esi
out dx, al
inc ebx
push eax
stosd dword es:[edi], eax
cmp al, 0x4e
jb 0x100c2365
call 0x549e3857
xlatb
adc al, 0x92
inc esp
mov eax, dword [0x9834a4c8]
inc esi
mov ecx, 0x47cc00ba
insb byte es:[edi], dx
dec esp
add eax, 0x9c55e058
ror byte [esi + 0x51932fb1], 0x8b
push ebx
cmp dword [esi + 0x74], eax
add ecx, dword [eax - 0x7788dec]
or eax, 0xe9fcff96
and byte [edx + esi*8 + 0x67], dh
aam 0xd0
push cs
aad 0xc7
pop ebx
sar edi, 1
pop esi
pop ds
jns 0x100c233f
sar dword [ecx - 0x3fcebaf], 0x17
scasd eax, dword es:[edi]
int 0xf9
cmp eax, 0x60c6bb35
mov esp, 0x9bf20bbe
xchg dl, dh
dec edi
sub edx, 0x433ce3b7
dec eax
je 0x100c2375
popfd
popfd
cmp dword [ebp - 0x3c], 0x12b
jne 0x100c24c7
push ebx
pushfd
test byte [0x100c24bf], 0x94
jne 0x100c24c0
sbb al, 0xcb
xchg edi, eax
mov ebx, 0x2134c8de
push 0x6310dbb9
ror ah, 0x38
xor byte [ebp + 0x5c58eebd], 0x61
push eax
xor byte [edi], 0x79
fcomp qword ss:[0x57e0f9a4]
pop ss
push edx
in al, 0xec
outsd dx, dword [esi]
dec esp
cmp al, 0xf0
je 0x100c23d7
adc dword [edi + 0x4b], esi
or eax, 0x7d150989
popal
salc
in al, dx
xor dword [eax - 0x268195a9], ebp
imul esp, dword [ecx + ecx + 0x79], 0x5e9b577b
xchg dword [ecx - 0x71], ecx
sub eax, 0xe513f81c
test al, 0xa1
push cs
mov al, 0xdd
fist dword [ebx]
daa
and al, 0xc9
dec esi
adc eax, dword [edi + ecx]
mov al, 0xb
test eax, 0x7e098d0
xor dword [edx], esi
mov esi, 0x6417a8aa
pushfd
inc esi
out 0x83, eax
mov al, byte [0x71320435]
mov cl, 0x68
push es
xlatb
movsd dword es:[edi], dword [esi]
and eax, edi
scasb al, byte es:[edi]
popfd
popal
fstp qword [edx + 0x12096c1a]
xchg edi, edx
and edx, edx
inc ebp
mov edi, 0x5eb36672
mov al, byte [0x495ac0e1]
lodsb al, byte [esi]
in eax, dx
push ds
mov dword [esi + edi - 0x9951f52], edi
call 0x101932f1
aam 0xec
add ah, dl
in al, dx
sbb dword [edx - 0x63], edx
xor ebp, dword [ebx - 0x77]
pop es
xchg edi, eax
mov bl, 0x62
lodsd eax, dword [esi]
sbb eax, 0x22f7aff
scasd eax, dword es:[edi]
push edi
fistp qword ss:[ecx + 0x4707e120]
pushfd
jns 0x100c24ed
cli
pop ecx
inc edx
pop ds
fistp word fs:[ebp + 0x60]
pushal
cmp al, 0x1f
into
popfd
call dword [sym.imp.KERNEL32.dll_ResetEvent]
push ebx
call edi
inc dword [ebp - 0x3c]
cmp dword [ebp - 0x3c], 0x12c
jl 0x100c208b
xor eax, eax
pushfd
test byte [0x100c24f6], 0xad
jne 0x100c24f7
test byte [eax], cl
dec edi
or eax, 0xc03570ba
mov ebx, esp
pop ds
cmp ch, byte [edi]
enter 0x42cd, 0x71
ror byte [ebx + 0x2f3a1fdc], 0xc8
int 0x42
jno 0x100c2495
popfd
pop ebx
mov ecx, dword [ebp - 4]
pop edi
pushfd
test byte [0x100c2515], 0xf2
jne 0x100c2516
fidivr word [edx + 0x56805dfb]
aad 0xb7
nop
or al, 0x23
out dx, al
cmp al, 0xa4
inc esi
popfd
xor ecx, ebp
pop esi
pushfd
test byte [0x100c253f], 7
jne 0x100c2540
daa
xor dword [ecx], eax
enter 0xffffffffffffb020, 0x44
push 0xa53b1f57
cli
ja 0x100c2517
dec ebp
jae 0x100c24bc
fistp dword [esi]
imul ebx, dword [ecx + ebx*8 + 0x3c], 0xba157e82
jle 0x100c2554
mov edx, 0xbf44e89d
add eax, 0x5f69c00
and dword [esi], esp
or al, 0x10
add dword [edi], ecx
test esi, ecx
add byte [eax], al
add dl, bl
mov dh, 0xe3
pop esi
pop ebp
in al, 0xe3
loope 0x100c2531
popfd
call fcn.1011e48a
pushfd
test byte [0x100c2621], 1
jne 0x100c2622
fidiv dword [esi - 0x1ba2a11d]
jecxz 0x100c253d
aam 0x45
inc ebp
cwde
dec ecx
fisttp dword [ebp - 0x1e43245e]
push eax
dec esp
sbb esp, esi
insb byte es:[edi], dx
in al, 0x1a
xchg esp, eax
cmp eax, 0xc914a008
cmp al, 0x9e
lds esp, [eax + 0x317aa4c3]
sub eax, dword [ebx + 0x42547c8d]
and esi, esp
mov edi, 0xd7181698
mov dword [0xbfadabd5], eax
cmp byte [edi - 0x78], bh
push esi
int3
popfd
leave
ret
xor eax, eax
inc eax
jmp 0x100c24f8