Function at 0xcafacc
Capabilities:
Execute syscall

Disassembly:
inc sp
sub dword [esp + ecx*8 - 0xeff6], ecx
movzx edi, si
xor edx, 0xc6afee98
inc eax
rol dh, 0xa4
inc ecx
or ebx, 0x78942836
dec esp
adc edx, dword [esp + ecx - 0x1df9]
bswap edx
lea edx, [ecx + edx + 0x2ba45cac]
inc ecx
sal bl, 0xc2
inc esp
and bl, byte [esp + ecx*2 - 0x3bfe]
inc cx
neg esi
not edx
inc esp
sub esi, ebx
ror edx, 1
inc dx
mov dword [esp + esi*2 - 0x58394b47], ebx
dec esi
mov dword [esp + esi - 0x2c1ca594], eax
shl dword [esp + ecx - 0x1df4], 0xb1
inc edx
movzx eax, byte [esp + esi*2 - 0x58394b40]
inc ecx
pop esi
inc edx
xor dword [esp + esi - 0x585cf4], edx
inc ecx
xor cl, ch
dec ecx
dec ebp
sbb esi, ebx
dec esi
mov eax, dword [esp + esi - 0x585cf4]
dec edx
mov dword [esp + esi*4 - 0x16173e8], esi
inc edx
inc dword [esp + esi*4 - 0x16173e7]
dec ecx
inc ecx
dec eax
arpl dx, dx
dec esp
adc esp, edx
cdq
inc ecx
pop ebx
pop edi
jmp fcn.00cb64ad
mov esi, 0x4c31e88a
sub esi, 0xe98ec731
movzx esi, byte [esi + eax - 0x62a32159]
push 0xb8206498
jb 0xcf6bbe
inc esp
movsx ebp, byte [esp + ecx - 0x1df2]
inc ecx
xor ebp, 0xe8b77c00
inc ecx
not ebx
inc ecx
and edi, ebx
inc ecx
mov dword [edi + ecx - 0x1e04], edi
dec ebp
lea edi, [edi + ecx*2 - 0x3c04]
inc esp
xor ecx, ecx
inc esp
add cl, dl
inc ecx
shl ch, 0x84
mov edx, dword [ebp + ecx*8 - 0xf008]
dec esp
lea ebx, [esi*2 - 0x568f4d5]
dec eax
mov dword [esp + ecx - 0x1df0], 0x4690ff92
inc sp
and ebx, dword [esp + ecx*4 - 0x77f8]
dec eax
lea ebp, [ebp + ecx - 0x1e08]
dec ecx
not ecx
inc sp
and esi, ecx
inc ecx
xor edx, eax
jmp 0x74e4a4
mov eax, ebp
sub dword [esp], 0x679d629f
adc eax, edx
mov dword [ebp - 4], eax
push 0xf42f67ae
sal byte [esp + 7], 0x86
test ebx, ebx
lea esp, [esp + 8]
je 0xc53646
mov eax, dword [ebp + ebx*4]
jmp 0xc88301
not byte [esp + eax*2 - 0x5ffa0b3b]
rol cl, 1
cdq
push eax
mov word [esp + edx*2 + 5], dx
xor bl, cl
and dword [esp + edx*4], 0x9a28c9ae
neg ax
lea ecx, [esp + ecx + 0x10]
or edx, dword [edx + ecx]
movzx ecx, al
xor cx, ax
shr byte [esp + eax - 0x2ffdfa55], 0xe2
mov dword [esi + eax - 0x2ffdfa65], edx
lea ecx, [eax*8 - 0x5a563853]
movsx edx, ax
or cl, ch
lea edx, [esp + ecx - 0x25999a9b]
imul eax, dword [esp + ecx - 0x25999abc]
call fcn.00d3f8e3
inc bp
xor eax, edx
inc ecx
sal ebp, 0x63
dec eax
shr edx, 0x56
inc cx
shl ecx, 0x87
dec esp
add edx, esp
movsx edi, ax
sal dx, 0xa
mov ebx, 0xdf9f942d
inc ecx
mov ecx, dword [edx + edx*4 - 0x32000]
dec ecx
inc esi
inc ecx
mov dword [edi + edx*4 - 0x32004], ecx
inc esp
movzx ebp, word [ebp + edx*2 - 0x19004]
cbw
dec ecx
ror esi, 0x5b
inc bp
xor ebp, eax
cbw
inc cx
sub ebp, 0xf766271f
fisub dword [esi + 0x41]
rol ebp, 1
dec eax
mul ebx
inc ecx
mov ebx, 0x8328a6a7
inc eax
movsx ecx, bh
inc cx
not ebp
dec eax
not edi
inc sp
adc ebp, eax
dec eax
add edi, 0xc799ff0e
or al, 0xc
adc eax, edx
inc bp
xor eax, ebp
dec esp
lea esi, [edx + edi*8 - 0x7acfc6c1]
dec esp
add ebp, esp
inc esp
movzx edx, si
call fcn.00ac2072
ror ecx, 1
movzx esi, byte [esp + eax - 0x13c00007]
inc ecx
neg ecx
dec esp
mov dword [esp + eax*2 - 0x27800014], eax
xor dword [esp + eax - 0x13c0000a], ecx
jmp 0xbbb7c7
sbb ecx, edx
lea esi, [ecx + esi - 0xc092ada]
mov dword [esi + ecx - 0xc092ad6], eax
lea ebp, [ebp + ecx*8 - 0x604956b4]
rol ecx, 0xc1
mov eax, edx
mov edx, dword [ebp + ecx*4 - 0x604956b0]
seta al
dec cx
xor edx, ebx
cwde
xor edx, 0xb80692b
sal ecx, cl
sar cx, 0x68
btr ecx, ecx
ror edx, 3
rol eax, 0xab
sbb edx, 0x702e21af
xor edx, 0x190fce2b
sar cx, 0x6f
bt eax, eax
bts cx, cx
xor ebx, edx
jmp 0xc26fae
inc dword [esp + eax - 0x13c06803]
mov bx, word [ebp + eax - 0x13c06816]
dec eax
lea ebp, [ebp + eax*4 - 0x4f01a040]
dec ecx
xor edx, 0x7e339f01
add edx, edx
inc bp
bts esi, esi
inc cx
xor ebx, eax
dec esp
or dword [esp + eax*2 - 0x2780d014], edx
cwd
inc ecx
sete dl
sbb bx, 0x5bd
movsx ecx, word [esp + eax - 0x13c06803]
inc cx
not ebx
rol bx, 1
inc eax
sal dh, 0x27
neg bx
inc ecx
shr cl, 0x61
sar cx, cl
xor bx, 0xe0c
dec esp
xor ebx, edi
inc esp
btc edi, ebx
not bx
dec eax
rol dword [esp + eax - 0x13c06807], 0xd5
inc word [esp + edx - 0x1000fffd]
sbb bx, 0x8c93
inc sp
xor eax, ebx
mov byte [esp + eax*2 - 0x2780d013], cl
inc eax
and byte [esp + eax - 0x13c06807], bh
inc cx
mov dword [edi + eax - 0x13c06810], ebx
dec esi
lea edi, [eax + edi - 0x13c06810]
dec esp
cmovne edx, dword [esp + eax - 0x13c06806]
sal byte [esp + eax - 0x13c0680a], 0xa6
inc ecx
xadd cl, bh
pop eax
pop ebx
jo fcn.00cb64ad
inc ecx
mov ebp, 0x4f9f3818
inc ecx
push ebp
inc ecx
dec ebp
inc edx
mov eax, dword [ebp + ebp - 0x4f9f381b]
dec ecx
lea ebp, [ebp + ebp - 0x4f9f381b]
inc ecx
push ebp
inc ecx
and ebp, 0xcb37890f
inc ecx
xor eax, eax
dec edx
add dword [esp + ebp - 0x4b1707ff], 0x6799e180
inc bp
sbb ebp, ebp
inc ecx
lea eax, [ebp + eax - 0x5429c227]
not eax
call fcn.00b9777a
mov ecx, dword [esi]
mov edx, 0xcbbe58a8
movzx eax, dx
xor ecx, ebx
shr ax, 0xee
bswap ecx
sbb dx, dx
mul eax
ror ecx, 1
sub ecx, eax
sar al, 0xa1
xor edx, 0x3206d2a5
neg ecx
xor ebx, ecx
add ebp, ecx
push eax
lea ecx, [eax*2 + 0x20000b3c]
cdq
add al, byte [esi + edx*8 + 4]
xor edx, 0x6d9fc880
cmovno edx, ecx
xor al, bl
xchg edx, ecx
ror al, 1
call fcn.00b70f34
mov ecx, 0xb6895215
lea ecx, [ecx*8 + 0x2b800183]
lea eax, [esp + 0x4c]
mov dx, word [eax]
bts ecx, ecx
mov word [edi - 2], dx
movsx eax, cl
lea edi, [edi + eax*2 - 0x58]
jae 0xd19b62
sar dword [esp + eax - 0x108], 0x61
lea edx, [edx + eax*4 - 0x7dbe1849]
bswap edx
cwde
not edx
adc eax, ecx
bts eax, eax
neg edx
push eax
call fcn.00b69fb4
lea esp, [esp + 8]
mov ecx, 0x88259510
mov eax, ecx
mov eax, dword [ebp]
lea edx, [ecx*2 + 0x3039029d]
lea edx, [edx + ecx*4 - 0x6e47c443]
shr edx, cl
lea ebp, [ebp + edx - 0xf2ce]
xor eax, ebx
shl dx, 0x2a
not eax
rol eax, 3
not eax
rol cx, 0x21
inc ecx
lea eax, [edx + eax - 0xb0e98a1]
bt ecx, edx
shr ecx, 0xbc
sbb edx, 0xd1b238af
not eax
sbb ecx, 0x9db6e1a0
lea eax, [eax + ecx + 0x7543a4f]
xor cl, 0xad
bswap eax
shr cx, cl
adc dl, 0xb9
call fcn.00b7f8de
xor edx, 0x10184aa6
bswap eax
shl cx, 0xe1
shl ecx, 0x7b
bswap edx
xor ebx, edx
cbw
sar ax, 0xe9
not cl
adc ebp, edx
call fcn.00b72ac6
mov ecx, 0x8026c9ac
mov edx, dword [edi]
movsx eax, cx
lea ecx, [ecx + ecx*4 - 0x5adb04f3]
ror eax, cl
movzx ax, byte ss:[edx + ecx*2 - 0x4bcdd6d2]
mov dx, ax
movzx dx, dl
shr cl, 0xe1
mov cl, byte [edi + ecx*2 - 0x4bcdd664]
mov eax, 0xcc1be216
push eax
not dl
cwde
imul eax, dword [esp]
or dword [esp + eax - 0x45e6d9e4], eax
not cl
and eax, 0x8f128634
btr eax, eax
or dl, cl
mov word [edi + eax*2 - 0xa050044], dx
mov ecx, dword [esi + eax*8 - 0x28140120]
xor ecx, ebx
ror word [esp + eax - 0x5028022], 0xa1
adc ecx, 0xa9b65295
mov edx, dword [esp + eax*2 - 0xa050048]
neg ecx
and word [esp + eax - 0x5028022], ax
div dl
or edx, dword [esp + eax - 0x5025685]
rol ecx, 3
xchg word [esp + eax - 0x5025683], dx
xchg ah, dl
imul ax, ax
bswap ecx
xor ebx, ecx
pop eax
neg eax
bts dx, dx
add ebp, ecx
lea edx, [eax*8 - 0x26c89379]
mov ax, word [eax + edi - 0x4090406]
sub dx, dx
adc edi, 6
movzx ecx, byte [esi + 4]
sub esi, 0xfffffffb
xor cl, bl
sub dl, dl
rol cl, 1
inc cl
xor edx, edx
shl edx, 0xa1
neg cl
sub cl, 0x36
ror edx, 0x28
and dl, 0x89
ror cl, 1
add cl, 0x2d
xor bl, cl
btc edx, edx
call fcn.00bb8de3
mov ecx, 0xd1026007
xor cx, cx
movzx eax, byte [edi]
neg cl
movzx edx, cl
ror cl, 0x21
xor al, bl
rol al, 1
shl ecx, 0xa1
or cl, dl
dec edx
sbb al, 0x1f
lea edx, [ecx + ecx + 0x38098007]
add dx, 0x7d24
sar cx, 0xc1
xor al, 0x25
lea ecx, [edx + 0x723e3d2d]
shl cx, 0x21
neg al
and cl, 0x24
sal cx, 8
not al
sub cl, 0xb
sbb ecx, edx
sub ecx, ecx
xor bl, al
sal edx, 0xf4
sub dl, dl
jp 0xce3b87
syscall
call fcn.00bc8a8d
mov esi, dword [esi*4 + 0xbb7abc]
xor word [esp + 2], 0x6633
call fcn.007a144c
mov ecx, 0x5516471d
movsx edx, cx
mov ax, word [esi + edx - 0x471d]
mov cl, byte [ecx + esi - 0x5516471b]
rol dl, 0x87
lea edx, [edx + edx*8 + 0x198a12bc]
lea esi, [esi + edx*4 - 0x66325ae6]
inc edx
shr ax, cl
movzx ecx, dl
xadd cl, dh
mov word [edx + esi - 0x198cbbbb], ax
mov eax, 0x6790ed1f
shl ecx, cl
lea ebp, [ebp + edx*2 - 0x3319777a]
xadd ecx, edx
shl cl, 0xa2
ror dl, 0x65
mov ecx, dword [ebp + edx - 0xa20000]
cbw
cbw
xor ecx, ebx
bt eax, edx
sub edx, 0xeb125189
not ecx
bswap edx
bts dx, dx
xor ecx, 0xb79d07bd
push edx
sub ecx, 0xe53ce182
call fcn.00cb0657
mov edx, 0x288d3ebf
shl edx, 0xf6
mov eax, dword [esi]
mov edx, dword [esi + 4]
mov ecx, 0x1aa2499
lea esi, [esi + ecx*8 - 0xd5124c0]
add ecx, ecx
jge 0xbc36c6
add ax, 0x6805
inc esp
mov esi, edx
inc ecx
pop eax
dec esi
lea ebp, [esi*4 - 0x1148ab64]
dec eax
arpl cx, cx
inc ecx
sub dl, cl
inc eax
dec dh
dec esp
add esp, ecx
sar esi, 0xe6
movzx ecx, word [ebp + eax - 0x13c06815]
inc cx
xor ecx, eax
inc ebp
mov edx, ecx
inc ecx
bswap ebx
dec ebp
bts edx, esi
not cx
inc ebp
and cl, dl
sbb cx, 0xc580
dec ecx
rol ebp, 0x49
dec eax
dec eax
neg cx
inc ecx
push ebp
dec esp
xor edx, dword [esp + eax - 0x13c0680e]
rol cx, 1
jmp 0xc6def8
mov dword fs:[ecx + eax - 0x3544932], edx
mov edx, ecx
bts ecx, edx
mov edx, dword [ebp + ecx*4 - 0xd5124c8]
ror ecx, 0xe9
lea eax, [ecx + ecx*2 - 0x1640f658]
rol ecx, 0x96
adc ebp, 4
xor edx, ebx
bts ax, ax
bt eax, 0x81
not cx
lea edx, [edx + eax - 0x34b3caf4]
push ecx
xor edx, 0x13aa3d12
sub edx, 0x3ca62014
sal ecx, cl
bts ax, cx
sar byte [esp + 2], 0x45
rol edx, 1
inc eax
sal eax, 9
adc dword [esp], eax
neg edx
sal byte [esp + 3], 0xe3
xchg word [esp + 1], cx
xor ebx, edx
add edi, edx
pop edx
jmp edi
rol word [esp + eax*8 - 0x284ea], 0x49
inc ecx
not bl
inc esp
xor dword [esp + eax*2 - 0xa139], ebp
inc ecx
or cl, bl
xor dword [esp + eax*4 - 0x14275], eax
dec ebp
imul ecx, ecx
ror eax, 0xcb
inc cx
mov dword [edi + eax - 0x13c00008], ecx
mov ecx, dword [eax + ebp - 0x13c0000e]
inc ebp
movsx ebx, cx
movzx edx, al
inc ecx
xor ecx, eax
inc ecx
dec eax
bts edx, 0x1b
shr dword [esp + eax - 0x13c00008], 0xa3
jne 0x7c843f
jmp 0xb01a03
lea ebx, [edx + edx*8 + 0x7fbd2683]
bts ebx, edx
cpuid
sbb esi, 7
call fcn.00ad160d
add edi, edx
mul cl
sar eax, 1
xor cl, ah
jns fcn.00ad155b
mov eax, 0x4f229c39
bswap eax
push eax
mov eax, dword [ebp + eax*2 - 0x7338449e]
call fcn.00ce182e
shl ecx, 1
rol edx, 1
push eax
lea edx, [edx + eax*2 - 0x4a63cd87]
lea ecx, [ecx - 0xccf47e7]
add eax, ecx
adc word [esp + 1], 0x33b6
not edx
add dword [esp], eax
xor ebx, edx
add ebp, edx
or dword [esp], eax
xor word [esp], ax
movzx edx, byte [edi + 5]
js 0x7964cc
adc edi, 6
xor dl, bl
call fcn.00c04f35
ror edx, cl
inc ecx
not esi
movzx esi, dl
inc ecx
xor esi, 0xd2b52a19
bts si, 0x21
inc ecx
neg esi
inc ebp
imul ebp, ebp
inc cx
sbb ebx, 0xff41cda6
mov byte [ecx - 9], 0xd6
call fcn.00b1bf93
inc cx
movzx ecx, byte [edi]
inc ecx
mov ecx, 0xdeb0509e
inc ebp
mov bl, byte [edi + 2]
dec ebx
lea edi, [ecx + ecx - 0x16d58164]
inc ecx
movzx eax, cx
inc esp
movzx ebp, di
not cl
inc ecx
push ebp
jmp 0xbd8a1c
inc ecx
push edx
inc ebp
btc edx, ebx
inc sp
xor eax, ecx
not dx
movzx ebx, word [esp + eax*2 - 0x2780d010]
inc cx
shr edx, 0x23
inc cx
mov dword [edi + eax*2 - 0x2780d01c], ecx
jne 0xabe482
pop esp
and al, 0xb0
mov eax, 0x7d8bbddf
mov ecx, ds
dec ecx
mov ebp, 0xd9b4c505
dec ecx
mov ebp, 0xd9a00935
dec ecx
mov ebp, 0xd998c759
dec ecx
mov ebp, 0x5b48f96c
daa
and eax, 0xc9104335
push cs
fsubr qword [ebp + ebp*4 - 0x3ac09008]
clc
cmp byte [eax - 0x6569a853], ch
and dl, cl
adc byte [ecx], al
lahf
mov dword [0xb3661341], eax
lodsb al, byte [esi]
test al, 0xde
cmpsd dword [esi], dword es:[edi]
xchg edx, eax
in al, 0x89
cmp al, 0x2d
sub esi, dword [ecx]
leave
inc esi
retf
call fcn.00acee1c
lea esp, [esp + 0xc]
jne 0x77240c
mov esi, 0xd1bf679f
mov eax, esi
sal eax, 0xad
pop esi
jmp 0xd22df0
adc eax, esp
rol ecx, 0xa1
add cx, cx
sal ecx, 0xc2
xor ecx, dword [eax + ecx]
movzx eax, dl
cdq
mov dword [esi + edx*4 - 4], ecx
lea ecx, [edx + 0x7ea9bf21]
sar cl, cl
or edx, dword [edi + edx + 1]
xchg cx, ax
rol eax, 0xc5
jae 0xd2bd7f
xor esi, ecx
and esi, 0xff
jmp 0xb8283e
sar eax, 3
lea edx, [ecx + ecx + 0x49ae300d]
mov ecx, dword [eax + esi - 5]
btr eax, eax
call fcn.00d63b88
lea ecx, [esp + ecx + 4]
sbb dx, ax
mov eax, dword [eax + ecx - 0x6049099c]
pop ecx
jnp 0xab86fb
movzx eax, dx
or edx, edx
xor cl, bl
shl al, 0xc5
bt edx, 0xb5
add dword [esp + eax - 0xffb8], 0xdda9b3b2
ror cl, 1
not cl
and dword [esp + eax*2 - 0x1ff78], edx
sbb cl, 0xb1
mov dword [esp + eax*2 - 0x1ff7c], 0x582ffd05
bts eax, 0x89
ror cl, 1
and eax, 0x37bbcdb2
xchg dword [esp + eax*8 - 0x66bfd], eax
add al, 0xba
adc cl, 0x82
jmp 0x7b5766
mov edx, 0xdc2c1186
not ecx
not edx
mov eax, 0xc1358723
mul al
mov dword [edi + edx*2 - 0x47a7dcf2], ecx
imul ax
mov edx, dword [esi + edx - 0x23d30016]
cbw
mov ecx, eax
adc esi, 3
neg al
add eax, eax
jge 0xc0529a
fadd dword [ebx]
ror byte [edi], 0x8d
jne 0xd22e47
out dx, al
push dword [ebx]
rcr dword [eax - 0x35f01f2d], cl
xor edx, ebx
cwde
shl eax, cl
bswap edx
sbb ecx, 0x89b8f95
btr ecx, eax
add cl, al
ror edx, 1
sub edx, 0x26119b16
sub cx, ax
cwde
jns 0xb79ffe
in eax, 0xff
sub dword [ecx + ecx*4 + 0x4eb748ed], 0x42
adc eax, 0x6a4888b5
enter 0xfffffffffffff8d5, 0xffffffffffffff98
mov ch, 0x88
dec eax
push 0x36
enter 0xfffffffffffff8d5, 0xffffffffffffff98
jae 0xd22ea4
adc ecx, ecx
or byte [esi - 0x1b], cl
push esi
jl 0xd22e1c
add ebx, dword [ecx]
sub byte [edi - 0x13], 0x86
mov eax, 0xa8310082
je 0xd22e2a
mov edx, 0x887b6d58
push ds
sahf
mov cs, word [eax - 5]
mov ebx, 0x47579b63
cmp ch, bl
int1
movsb byte es:[edi], byte [esi]
loope 0xd22e88
add byte [eax], al
add byte [ecx + 0x77e03b4], bh
hlt
aas
jp 0xd22e52
invalid
xor edx, ebx
shr ecx, 0xc1
rol edx, 3
rol ecx, 0x37
neg edx
jmp 0xc6b82d