Function at 0x100200df
Capabilities:
Encode data using xor
Write file on windows

Disassembly:
pop esi
dec ebp
sbb al, 0xfb
add edi, 0xffffffdb
push ds
cmp al, 0x20
mov dh, 0x96
into
cmp byte [edi + 0x3bb77765], 0x89
mov al, byte [0x9c8669c8]
or eax, 0xe55c0f64
sar byte [ecx], 1
mov ebx, 0x1f903f1c
adc eax, 0x39516125
idiv byte [esi]
pushal
jnp 0x10020093
sbb esp, dword [ebp + 0x2f2ece86]
mov byte [eax - 0x77ef4db1], bl
cmp esp, edi
sbb eax, 0x73b650bd
and eax, dword [ecx]
stosb byte es:[edi], al
call 0xe5ef4b04
popfd
dec edx
in eax, dx
aad 0x9d
leave
ret
push ebp
mov ebp, esp
sub esp, 0x18
mov eax, dword [0x10170c30]
xor eax, ebp
mov dword [ebp - 4], eax
push esi
pushfd
test byte [0x100200df], 0x93
jne 0x100200e0
clc
insd dword es:[edi], dx
and dword [ebx - 0x5ce36955], 0x9363d930
jno 0x100200a4
scasb al, byte es:[edi]
scasd eax, dword es:[edi]
bnd jne 0x1002004b
sar dword [ecx + ecx*4 - 0x1e], 1
dec edi
xchg bx, ax
fdiv st(2), st(0)
or eax, 0x70195d3c
jo 0x1002011c
sbb ch, cl
mov eax, dword [0x8448c2c5]
inc esi
popfd
mov esi, dword [ebp + 8]
push edi
mov edi, dword [ebp + 0xc]
test edi, edi
pushfd
test byte [0x1002019e], 0x2f
jne 0x1002019f
dec edx
popfd
scasd eax, dword es:[edi]
adc ebp, dword [0x33cec526]
xor bl, byte [esi]
imul ecx, dword [ebx + 0xc0b4df8], 0x15
or al, 0x15
mov cl, 0x83
jne 0x10020164
sub ah, byte [ebx + 0x62]
lodsd eax, dword [esi]
sbb dword [0x8d56e24f], edi
cmp eax, 0x8d56e24f
push esi
lea esi, [eax]
mov al, byte [0x370abe17]
xor byte [eax + 0x370abe17], ah
or dh, byte [edi]
aaa
add al, 0xa9
jg 0x10020116
xchg ecx, eax
mov al, 0xa8
test dword [eax], eax
inc ebp
outsd dx, dword [esi]
pop edx
jecxz 0x10020113
fild qword ss:[ebp - 0x50]
out dx, al
fisub dword [eax]
lodsd eax, dword [esi]
sbb dword [ebp + 0x3c2d2598], edx
mov bh, 0x63
ficom word [edi - 0x6543d818]
push cs
enter 0x4948, 0x1c
jne 0x10020108
add dword [edi + 0x64a8d99a], 0xc401f831
inc esi
inc edi
dec eax
test byte [eax + 0x36e55dde], cl
or eax, 0x972689ce
and dword [esi], 0x2ec9b77a
lahf
jp 0x1002011d
leave
lahf
cmp dword [ebp - 0x60], edi
adc esp, dword [ebp + eax*8 - 0x7b3a98f0]
add eax, 0x171f9efb
mul dword [eax]
push ss
sub eax, esp
xchg ecx, eax
inc esi
dec ebp
arpl word [edi], dx
outsb dx, byte [esi]
sbb al, 0xe4
loopne 0x100201d6
add edi, dword [ecx]
xor al, 0x2c
and dword [ebx - 0x70], ecx
fadd qword [esp + ebx*8 - 0x7e]
clc
lodsd eax, dword [esi]
and al, 0x52
ja 0x10020201
clc
cmp edx, edx
cmc
pop edx
popfd
jne 0x100201a9
xor eax, eax
jmp 0x100209ef
push 0x101468bc
push esi
call fcn.1011f7ae
pop ecx
pop ecx
mov dword [ebp - 0x18], eax
pushfd
test byte [0x10020207], 0xfc
jne 0x10020308
das
cmpsd dword [esi], dword es:[edi]
mov bh, bl
mov ebp, esp
mov ebx, 0x799e1d8d
push 0xffffffffffffffde
popfd
out dx, al
xchg ebx, eax
pop esp
int 0x54
rol dword [eax + 0x47], 0x3c
cmpsd dword [esi], dword es:[edi]
or al, 0xe4
add eax, 0xc6027740
into
in eax, 0x82
mov ah, 0x8a
cmpsd dword [esi], dword es:[edi]
arpl word [ebp - 0x64576126], bp
in al, 0x5f
cdq
sbb al, 0xf1
outsd dx, dword [esi]
jmp esi
xchg edi, eax
sub al, 0x64
insd dword es:[edi], dx
test eax, 0x9d45f97a
mov cl, 0x69
pushal
sub al, 0x5a
xor eax, 0x399af7a4
cmp ch, byte [edi + 0x38]
or dword [ecx], ebp
push ecx
insd dword es:[edi], dx
adc al, 0x5c
stc
js 0x100201b6
dec edi
pop ecx
mov dword [0x2e9c6a08], eax
leave
inc ebp
sub eax, dword [eax]
mov ah, 0x74
mov dword [0x70c839ff], eax
mov al, 0xc7
sahf
salc
loopne 0x1002028f
aaa
mov word cs:[eax + eax*4 - 0x7b], ss
sal al, 0x4f
pop ecx
in eax, dx
sbb eax, 0x7d331de2
mov dl, 0xeb
or eax, 0x889c9c6f
push ebp
shl byte [ecx - 0x4e040e94], 0xd8
mov dword [0x14f92e0d], eax
dec ebx
jecxz 0x100202b1
mov bh, 0x99
salc
call 0xa09a7183
std
xchg byte [ebp - 0x6cdf18af], dl
not dword [ecx - 0x74ef5b8d]
int3
mov ecx, esp
test al, 0xe6
and bl, byte [edx - 0x45f44595]
stosd dword es:[edi], eax
aad 0x53
sub eax, 0x7800f1a2
daa
aam 0x9f
mov esp, 0xc8af1eed
pop ds
pop ds
sbb dword [ecx], ecx
leave
xor eax, 0x68db6132
or byte [ebp - 0x131036ab], dh
push es
inc ecx
or eax, 0x6e1f699c
inc edx
aam 0xe
salc
unpcklps xmm1, xmmword [eax - 0x3daceedb]
stc
mov word [ebx], es
test dword [edx + 0x55a29eaa], ebp
int 0x54
sbb dword [esi], esp
jnp 0x10020263
sbb al, 0xad
push 0xae771d70
ja 0x10020274
sub eax, 0x86c52f6a
push ds
mov edi, 0x353a5bbc
scasb al, byte es:[edi]
push es
sub edi, dword [ebp - 0x735497ef]
and al, 0x99
mov al, byte [0xafe62676]
out 0x8a, eax
enter 0xfffffffffffffb88, 0x15
mov esi, 0x418bf544
pop ds
jo 0x100202c4
inc edi
in al, 0x1e
sbb byte [ebp + 0x4d], ch
lds eax, [eax - 0x2b]
mov bh, 0x50
push edx
adc dword [edi], ecx
add dword [ecx - 0x32], ecx
out 0x72, eax
or dword [ecx - 0x7e], esp
insd dword es:[edi], dx
insd dword es:[edi], dx
nop
popfd
test eax, eax
jne 0x10020322
push esi
push str.Cant_open_file:_s_
push eax
push eax
call fcn.10049c0c
cwde
add al, byte [eax]
add esp, 0x10
jmp 0x100201a2
mov cl, byte [edi + 0xe]
mov esi, dword [sym.imp.KERNEL32.dll_GlobalSize]
push ebx
pushfd
test byte [0x10020360], 0x76
jne 0x10020361
cmp eax, 0x251fd70d
mov ecx, 0xb647199f
mov al, byte [0xb32970ee]
inc esi
and bl, ah
into
cld
arpl word [ebx + 0x16], ax
or edi, dword [edi - 0x2b]
sub byte [ebp + ebp - 0x1fb98f5e], ch
adc al, 0x67
or eax, ecx
pushfd
imul dh
or al, byte [edx + 0x47]
popfd
xor ebx, ebx
mov eax, 0x4d42
inc ebx
push edi
shl ebx, cl
pushfd
test byte [0x10020389], 0xf3
jne 0x1002048a
out 0xc8, al
jae 0x10020317
std
inc esp
mov cl, 0x94
mov bh, 0x76
cmpsb byte [esi], byte es:[edi]
inc eax
fdivr dword [esi - 0x1a2e0d5b]
mov bh, 0x9e
mov cl, 0x53
sub ebx, dword [ecx + 0x6a]
cmpsb byte [esi], byte es:[edi]
les dx, [ecx]
nop
xchg ebx, eax
or byte [edi + 0x40be2c5f], bl
jbe 0x100203bf
sahf
push edi
inc ecx
cmp ebp, dword [edx - 0x4d0a39a8]
pop ss
adc eax, 0x61bff71c
mov al, 0x9c
add byte [eax - 0x70], ch
out dx, eax
push eax
dec ecx
test dword [ecx - 0x24], 0x86f78aa9
push 0xaa33c40
push ss
test eax, 0x6886f78a
inc eax
cmp al, 0xa3
or dl, byte [esi]
adc dword [edx - 0x38], esp
imul eax, dword [0x1b025100], 0x64
pop ecx
fist word [ecx]
mov byte [ebx - 0x682a66ec], dh
in al, 0xde
push esp
mov ebp, 0x7d835fc3
push ds
push 0xfffffffffffffff5
ficom word [ebp + edi*4 - 0x3d]
pop edi
cmp dword [ebp + 0x1e], 0x6a
cmc
fisubr word [ebx + 0x10]
sub byte [ebx - 0x2ab8d17d], 0x1e
lahf
add eax, 0xfdb9ce1a
adc al, 0x84
clc
pop eax
push ebp
xchg edi, eax
sahf
imul esi, dword [edx + esi + 0x47], 0x16
neg cl
inc esp
mov al, byte [0xc0ba7af0]
imul esp, dword [esi*2 + 0x3c70f6a9], 0xffffffeb
mov edx, 0xfe681c0c
add ecx, dword [edi]
xchg dword [eax + 0x3e], eax
stosb byte es:[edi], al
mov ah, 0xb6
mov word [esi], ds
jb 0x1002047a
scasb al, byte es:[edi]
mov bl, 0x2b
adc ebx, dword [ebp - 0x47]
inc eax
and dword [eax - 0x64964aa1], edx
jecxz 0x1002043e
cmp al, 0xab
cmp dword [ebp - 0x666aa253], edi
pop ss
jnp 0x10020440
movsd dword es:[edi], dword [esi]
xchg ch, dl
sub cl, dl
cmpsb byte [esi], byte es:[edi]
sub byte [0xf6e55654], bh
aad 0x28
shl dword [esi + 0x56543d28], 1
in eax, 0xf6
sub eax, 0x3740aba
jnp 0x100203dd
mov edx, 0x4e8e67b
mov dh, 0x13
inc esp
cmpsd dword [esi], dword es:[edi]
rcl dword [ebp - 0x74], cl
adc al, 0x21
dec eax
add dword [ecx + 0x15b4efa7], edx
add byte [eax - 0x7e], cl
lds edi, [esi + 0x19]
mov esp, 0x7136a8e8
mov cl, 0xab
push ds
fisttp word [ebp - 3]
cmp al, 0xf2
mov ecx, edx
mov ebp, ebp
add edx, dword [edi + 0x119348f8]
fdiv st(4), st(0)
test eax, 0x6c289024
retf 0xed89
popfd
mov word [ebp - 0x14], ax
call esi
push dword [ebp - 0x18]
add eax, 0xe
mov dword [ebp - 0x12], eax
xor eax, eax
mov word [ebp - 0xe], ax
pushfd
test byte [0x10020525], 0x61
je 0x10020526
mov bl, 3
sar dword [0x5918aa81], 0x53
jne 0x100204e0
dec ebx
call 0x315aceaf
sub eax, 0x2864627b
xor al, 0xd7
and eax, 0x5c354845
loopne 0x100204e7
dec eax
xor eax, 0xb11de05c
push ss
mov cl, 0x16
pop ss
enter 0xffffffffffffc246, 0xffffffffffffffc7
jbe 0x10020514
imul eax, dword [ebp + 0x52dc259f], 0xffffffd4
sar byte [eax], 1
out dx, eax
stosb byte es:[edi], al
fbld tbyte [esi + 0x11]
cdq
push ds
arpl word [edx + 0x1e], di
adc word [ecx + 0x1e7a631e], bx
cmp dl, 0xa7
xor dh, byte [eax - 0xe]
adc dword [ebx + 0x2e41114b], 0x1fb8b1d7
or al, 0xbf
loop 0x1002049c
pop edx
sub ah, byte ds:[esi + 0x4b97d0d6]
cli
loopne 0x100204c5
push es
sbb dword [edx - 0x2afb3d9a], ebx
push esi
mov dword [ecx - 0x356f8bc4], esi
jecxz 0x100204d1
retf 0xbae3
push cs
adc al, 0x9c
and ecx, esi
sbb dl, byte [eax + 0xc]
jno 0x100204ea
sub eax, 0x90e4e812
popfd
mov word [ebp - 0xc], ax
mov eax, dword [edi]
lea eax, [eax + ebx*4 + 0xe]
push 1
mov dword [ebp - 0xa], eax
lea eax, [ebp - 0x14]
push 0xe
push eax
pushfd
test byte [0x1002054d], 0xfe
jne 0x1002064e
xor byte [ebx - 1], bl
pushal
pop ebp
and eax, 0xbe3c8448
outsb dx, byte [esi]
inc eax
inc eax
jne 0x11afcd15
fmul qword [edx + edi*2]
dec ecx
outsd dx, dword [esi]
shl dword fs:[0x6c2aef49], 1
cli
dec ecx
and eax, 0x3b683925
xchg byte [eax + eax*8 - 0x340ee096], al
imul ebp, esi, 0x25
xor byte [ecx + eax*2 - 0x21560dd], cl
sub bh, bl
xchg esi, eax
je 0x100205a7
adc esp, dword [esp + edx*8]
inc ecx
mov ebp, 0x287b6234
or byte [esi + 0xa], 0x41
dec edx
mov bh, 0xcf
xchg dword [edx + 9], esp
adc al, 0x22
cmp eax, 0xe93b9f45
pop ebx
call 0x833993cf
xor ecx, dword [edi + 0x70]
mov word [edi - 0x38804723], ds
aad 0x28
dec edi
jo 0x10020536
lahf
fnstsw word [eax + 0x28d5c77f]
dec ebp
lodsb al, byte [esi]
and eax, 0x5a610196
sub byte [eax + 0x7bde75fd], 0x19
js 0x100205ab
push esp
test eax, 0xc07fca21
sub ebp, eax
les esp, [esi]
std
sbb ch, byte [ebx - 0x3b]
mov ecx, 0x16cf3728
jno 0x100205c7
add eax, 0x7ac50c99
xor eax, 0x95f5f462
scasb al, byte es:[edi]
shr dword [edx - 0x76], cl
clc
fcom st(2)
jg 0x10020669
or al, 0x49
sub dword [esi], ebp
dec ebp
sal eax, 1
mov esp, dword [eax + 0x78099cb2]
pushfd
nop
in eax, 0x19
jae 0x1002063b
cwde
sbb eax, 0x1c1914d6
mov byte [esi + 0x35], 0x95
and byte [ebx + 0x30], 0x40
dec esi
das
pop edx
or ebp, dword [ecx - 0x69c6aff0]
int3
mov dword [ebx - 0x55], 0x2f1c009c
mov bh, byte [edi + 0x5afc4351]
cdq
xchg esp, eax
and byte [esi + 0x53], bl
xlatb
popfd
call fcn.1011f678
add esp, 0x10
push edi
call esi
pushfd
test byte [0x100206e1], 0xb7
jne 0x100206e2
sbb byte [edx + eax*8], 0x2b
xor al, 0xb1
jle 0x100206cc
mov cl, 0x7e
pushal
and eax, 0x1f398289
outsb dx, byte [esi]
out 0xc7, al
xor edx, edi
jecxz 0x100206b2
dec esi
sub eax, 0x97c89ea5
sub dword [ecx + ebx*2], ebp
inc ecx
mov eax, dword [0xdac762cc]
aas
clc
cli
mov ebx, 0xb243f04b
cmp bh, al
test byte [eax + 0x2a], bl
pop ebx
or eax, 0xb9de6b2f
dec ebp
inc edi
sar byte [esi - 0x45], 1
xlatb
push cs
or esp, dword [edi + 0x1935e05f]
mov ecx, 0x1dac893
pop es
push 0xffffffffffffffdf
stc
mov ss, word [edx]
xchg ecx, eax
xor esp, dword [ebx - 0x7de149a4]
or dword [ebx], esi
add dl, byte [eax + 0x5b]
and dword [ebx - 0x74], esi
push ebx
or al, byte [ebp - 0x4b]
in eax, dx
or ch, byte [esi - 0x59529bbb]
lodsd eax, dword [esi]
cmpsb byte [esi], byte es:[edi]
loopne 0x10020701
inc esi
cmp byte [ebx + eax - 0x68266423], ah
int3
popfd
push dword [ebp - 0x18]
push 1
push edi
pushfd
add dword [edi - 0x64], edx
test byte [0x10020788], 8
je 0x10020789
push 0x1d5e2b8a
rcl byte [ebx + 0x6a]
add al, 0x20
mov ebx, 0xff44def1
xchg ebp, eax
jbe 0x10020738
mov ah, 0xcf
in al, 0x22
sti
sbb byte [eax], bl
dec ebp
push ds
and al, 0xd
pop esi
cmp ax, 0x7a07
or eax, 0x32d938eb
cli
push ecx
js 0x100206e7
xchg ebp, eax
std
das
push es
in al, 0x71
fstp qword [0x55b355d8]
mov edi, 0x857f7e78
popal
push ebp
insd dword es:[edi], dx
call 0x37f2fd94
push edi
div al
daa
pop ebx
les edx, [edi + 0x2256c734]
cmpsd dword [esi], dword es:[edi]
push 0x6f
add al, 0x31
stosb byte es:[edi], al
rol dword [eax], 0x84
push ebp
cmpsb byte [esi], byte es:[edi]
imul ecx, dword [ebp - 0x2a], 0xf3b7a471
dec ebp
push ss
or eax, 0xa2f5cc47
xchg esp, eax
jns 0x100207da
dec esp
and dh, byte [edx - 0x59]
pop ss
mov ch, 0x3c
pop dword [esi - 0x207a1bf0]
in eax, 0xa6
xchg ch, bl
xlatb
into
je 0x100207dd
pushal
imul ebp, dword [edi + edx - 0x5679eed3], 0xffffff98
pop ss
sub eax, 0x98a98611
mov al, 0xcd
push cs
jbe 0x10020739
test dword [eax - 0x4b], esp
pop es
popfd
call esi
push eax
push edi
call fcn.1011f678
pushfd
test byte [0x1002088b], 0xf5
jne 0x1002088c
fcompp
pop ecx
xchg edx, eax
mov eax, dword [0xb3e2f7c8]
mov edi, 0x471a8f30
push ebp
inc edx
inc ebp
mov byte [edi], 0xbb
mov ecx, dword [edi - 0xf0ce3b9]
js 0x100207d5
xor ebp, dword [eax + ebx*2 - 0x2d]
jle 0x1002077a
call 0xd69c9617
stosb byte es:[edi], al
pop ecx
add dword [ebx - 0x63], 0x46170c50
pop es
aaa
bnd jbe 0x10020855
jg 0x100207dc
add eax, 0x66d67920
push esp
and byte [ecx - 0x2a], bh
push sp
mov es, word [0x5251b8d6]
add eax, 0x5251b8d6
dec edx
pop esi
push ecx
fcomp qword [ecx + 0x20c06e14]
jg 0x100207eb
push eax
sbb dword [ecx - 0x7b], esi
xchg ebx, eax
cmp eax, dword [ecx + edx*8]
inc esi
fnstsw word [ebx]
and byte [eax - 0x23], dh
pushal
clc
jle 0x10020805
pop esi
xor bh, byte [edi + 0x680d2508]
xchg edx, eax
int1
sbb dh, byte [ebp + 0x254e91a1]
dec eax
push 0xb51af192
mov eax, dword [0x48254e91]
mov ch, 0xa1
xchg ecx, eax
dec esi
and eax, 0xc9931a48
mov eax, dword [0x46e0c599]
sbb dl, byte [ebx - 0x3a665e37]
loopne 0x1002085d
pop ebp
ja 0x10020837
mov edx, 0x1b29c025
je 0x100207af
int1
adc dword [edi], eax
dec ecx
in al, dx
fbstp tbyte [edx + 0x4caf283a]
push cs
inc edi
xchg ebx, eax
ja 0x100207ee
jne 0x10020809
xor dword [ebp + 0x15066791], edi
cmp eax, 0xf78c4556
aas
push es
adc eax, 0x8c45563d
idiv dword [edi]
cmpsb byte [esi], byte es:[edi]
stosb byte es:[edi], al
mov dl, 0xef
enter 0x5f09, 0xffffffffffffffd3
insd dword es:[edi], dx
push esp
adc eax, 0xa80d2415
or edx, edi
lodsd eax, dword [esi]
pop esi
clc
dec eax
mov edi, dword [ebx]
ja 0x100207e5
cmp esi, dword [edi - 0x73]
in eax, dx
xchg esi, eax
push ss
sal bh, 1
dec edx
jno 0x1002085a
mov edi, 0x4a330f53
push ebp
and al, 0x64
cmp al, 0x9e
pop eax
dec eax
mov ebx, 0x3f75305c
xor esp, esp
push 0xffffffffffffffc2
imul esi, dword [esi], 0xffffffc3
cmc
cmp dword [esi + eax], ebp
cwde
cmc
das
dec esi
in eax, 0xc7
adc ebp, dword [edx + edx*8]
xchg edi, eax
lodsb al, byte [esi]
push ebp
xor esi, ecx
popfd
push dword [ebp - 0x18]
call fcn.1011e7c5
add esp, 0x14
pushfd
test byte [0x100208e9], 0xbe
je 0x100209ea
test byte [esi - 0x5efb4819], ah
pushfd
inc ebp
mov byte [ecx], bh
inc ebx
push cs
mov eax, dword [edx - 0x76e375dd]
call 0xafd47b2
add eax, 0xb67324d8
mov ebx, eax
cld
into
push ss
pop esi
cmpxchg edi, esi
mov ch, 0x3a
push ecx
sub edx, dword [eax + eax*8 + 0x2a]
repne outsd dx, dword es:[esi]
mov ebp, 0xb6913f34
and al, 0x54
fnstsw word [ebp - 0x1f27f61e]
dec esi
jbe 0x10020895
insd dword es:[edi], dx
test al, 0x41
call 0xb3d4e2ed
mov edx, dword [ebx - 0x74]
mov edx, 0xef1df5ea
mov al, byte [0x84441240]
inc edi
sub eax, 0x4ceca9a3
cld
add dl, al
push esp
dec eax
push ebx
ror ch, 1
dec edx
sub eax, 0xb9b80b68
push esi
ja 0x10020979
mov ebx, 0x53baa5e0
test byte [ecx], cl
out 0x8e, al
test eax, 0x822d877a
shr byte [esi - 0xe463ec2], 1
jb 0x100208fa
mov ecx, dword [eax]
sub byte [ecx + 0x41], ch
jmp [eax - 0x36990448]
mov cl, 0xc4
add eax, 0xb6ff54ba
in al, dx
mov dh, 0xec
jecxz 0x10020934
fdivr dword [ecx]
lodsd eax, dword [esi]
inc edi
les ebp, [esi + 0x5d]
pop ebp
mov gs, ecx
sub edi, dword [edi - 0x48]
loop 0x1002093a
dec esi
jno 0x10020944
or eax, dword [esi + edi*2 - 0x33a6def0]
mov bh, 0xc0
les eax, [edi]
cmp bh, byte [ebp - 0x6cad8012]
adc edi, dword [ebx]
fstp dword [eax - 0xefd2751]
sahf
mov eax, 0x2e7d14a8
fild word [edx - 0x62]
fisttp word [eax + 0x7dab457f]
dec edi
and eax, 0xc0be5481
arpl di, bx
cmpsb byte [esi], byte es:[edi]
adc al, 4
sbb byte [ebp + 0x43], dh
adc dword [esi + edi*4 - 0x40], 0x14a6df63
add al, 0x18
jne 0x100209c8
xor al, 0x63
ficom word [edx + 0x2f]
xor ecx, dword [eax + 0x7f784cb7]
mov esi, 0xdaae4f04
loopne 0x100209a1
mov ebx, 0x38811872
or al, 0x22
inc ecx
push ecx
int1
test al, 0x9c
cmp dword [esp + ecx*4 - 0x43], edi
in al, dx
mov ah, 0x93
xchg ecx, eax
jae 0x100209e3
mov esp, 0xd11d794e
je 0x10020942
dec ecx
jmp [edx + 0x43]
mov eax, 0xd4910922
or ch, byte [ebp - 0x7b]
dec ebx
invalid
add cl, byte [ecx + ebx*2 - 0x4d57a1b0]
popfd
xor eax, eax
inc eax
pop ebx
mov ecx, dword [ebp - 4]
pop edi
xor ecx, ebp
pushfd
test byte [0x10020a6f], 0xb0
jne 0x10020a70
add dl, byte [eax]
mov al, 0x75
jno 0x10020a6b
imul esi, dword [edi], 0x78
pop es
aaa
js 0x10020a0a
popal
inc ecx
rol dword [edi - 0x73], cl
pop edi
leave
ror ebx, 0x79
ftst
add al, 0x2d
cmpsd dword [esi], dword es:[edi]
and byte [ebx + 0xf8b624c], 0x2f
pop ebx
push ds
out 0x28, al
push ss
mov esp, 0xa6ad870a
sub eax, 0x23d1148d
cmpsb byte [esi], byte es:[edi]
or byte [edi], ch
arpl word fs:[ebx], dx
inc ebp
mov esi, ds
push edx
mov dword [esi - 0x80], ebx
pop esi
in eax, 0xc3
pop esp
dec esp
mov esi, cs
and al, 7
outsd dx, dword [esi]
adc byte [ebx - 0x73332977], ch
cmp esp, dword [esi + 0x22]
loop 0x100209fa
in eax, dx
xor eax, 0xa07031a0
enter 0x656d, 0xffffffffffffffe2
mov cl, 0xaa
aaa
int 0x90
cmp dword [edi + 0x12], 0x7f
mov esp, dword [edi + edx - 0x49]
add edi, dword [ecx]
cmp dh, ah
std
inc ebp
sbb al, 0x82
lock adc dword [edi + 0x75], eax
adc dword [edi + 0x75], eax
mov al, 0xa0
popfd
pop esi
call fcn.1011e48a
leave
ret