Function at 0x10020abe
Capabilities:
Capture screenshot
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x58
push ebx
push esi
push edi
xor ebx, ebx
push ebx
push ebx
push ebx
push str.DISPLAY
mov dword [ebp - 8], ebx
call dword [sym.imp.GDI32.dll_CreateDCA]
mov esi, dword [sym.imp.GDI32.dll_GetDeviceCaps]
mov edi, eax
push 8
push edi
pushfd
test byte [0x10020abe], 0x77
jne 0x10020abf
sub byte [edi - 0x2584b481], cl
cmp byte [esi - 0x21d5b416], 0xe0
call 0xde7df55d
mov ch, 0x6f
pushfd
popfd
mov dword [ebp - 0xc], edi
call esi
pushfd
test byte [0x10020b77], 0xf
jne 0x10020b78
mov dword [ecx], edi
mov bl, 0xbc
or al, 0xe5
push esp
aas
mov esp, 0x3f54e50c
pop esi
stc
mov esi, 0x66c17190
and al, al
cmp dh, bl
mov ch, 0xc5
xor esi, dword [ecx]
sbb ebp, dword [edx + edx*2 - 0x27]
push ss
inc ebp
inc ebp
aas
test eax, 0x27918f93
bound ebp, qword cs:[ebx + 0xe3c0043]
dec ecx
sahf
or al, 0x20
or ecx, ecx
push ebx
xor dl, byte [eax + 0x608e4659]
push ebx
push esp
and al, 0xe0
xchg edi, eax
scasb al, byte es:[edi]
xlatb
push esi
sbb eax, 0x785f00ed
adc edi, esi
and bl, byte [0xff1d9807]
les ebp, [ebx - 0x6a]
sar dword [edi + ebx + 0x19], 1
call 0xd2776615
sbb byte [eax], cl
mov dword [ebp - 0x4b45714b], ebp
salc
push esp
push eax
dec ecx
scasb al, byte es:[edi]
sbb dword [ebx], edx
cmp al, 0xeb
in al, 0xda
dec ebp
push 0x3d3991d0
js 0x10020bb0
mov ebp, ds
push ss
stosb byte es:[edi], al
inc ecx
loopne 0x10020ad6
ror dword [esi + esi*2 + 0x4a], cl
mov esp, 0x648a6c91
mov eax, edx
jo 0x10020b92
cwde
aad 0x6b
inc ebp
pop ds
add al, 0x42
sub byte [edi], bh
add eax, 0x70044644
or al, 0xa7
dec edx
dec ebx
cmpsd dword [esi], dword es:[edi]
adc al, 0x4b
inc eax
in eax, dx
mov bh, 0x18
jns 0x10020bdc
popfd
push 0xa
push edi
mov dword [ebp - 0x14], eax
pushfd
test byte [0x10020c88], 0xcd
jne 0x10020c89
out dx, eax
jo 0x10020b5d
mov al, 0xb7
mov al, 0x28
stosd dword es:[edi], eax
mov edx, 0xaf8fce73
mov bh, 0xb0
sub byte [ebx - 0x70318c46], ch
scasd eax, dword es:[edi]
adc dword [ecx + 0x27], ebp
cmpsb byte [esi], byte es:[edi]
cld
mov dword [ebx], esi
imul esp, dword [edi], 0x3389fca6
mov dh, 0xd3
cmp dword [esi], esp
mov bh, 0xb5
adc byte [eax + 0x4b2296c0], dh
sub dword [eax - 0x15], edi
xchg esi, eax
and cl, byte [ebx + 0x29]
js 0x10020b9c
jmp 0x10020bb7
add eax, 0x31e299bd
and dword [esp + 0x4fc49722], 0xb17c32b8
or ah, dl
add eax, 0xc98a0021
movsb byte es:[edi], byte [esi]
and al, 0x22
xchg edi, eax
les ecx, [edi - 0x48]
xor bh, byte [ecx + esi*4 + 8]
aam 5
and dword [eax], eax
mov cl, cl
jbe 0x10020b5a
dec esi
aam 0x53
cmp bl, cl
sub byte [ecx - 0x1dd464a2], ch
xor byte [ebp + edx*8 - 0x77], 0xe3
dec dword [edi - 0x24331da3]
xchg ecx, eax
stc
or dword [esi], ecx
pop es
pop ebp
loop 0x10020bab
fist dword [ecx + 0x70e09f9]
mov ah, 0x9c
or byte [esi], dl
mov ebx, 0xde690ee3
mov dl, 0x30
lea esi, [edi - 0x1ac008fc]
adc eax, 0x99b1f029
mov ebp, 0xa3fdca3f
and eax, 0x63733abc
adc byte [0xdf595d9d], 0xbb
mov ah, 0x12
add byte [edx + esi*2 - 0x32e3cd3d], 0x87
mov ch, 0x78
test eax, 0x4e2c5143
adc al, byte [eax + 0x32c37284]
sbb al, 0xcd
xchg dword [ebp + 0x5143a978], esi
sub al, 0x4e
xlatb
xchg esp, eax
pop ecx
push cs
and edi, ebp
out dx, al
fisttp qword [edx + 0x10557ae4]
or ch, dl
dec ebx
cmp al, 0x86
sub byte [ecx - 0x61626afb], bl
pop ds
sar byte [edi + 0x71a5947d], 1
enter 0xffffffffffffa8e2, 0xffffffffffffffd8
popal
mov ebp, 0x8654070e
add eax, 0xd0008d8f
jnp 0x10020c29
adc byte [eax], cl
aad 0xff
retf
lodsd eax, dword [esi]
loop 0x10020c0d
dec edi
popfd
aam 0x9f
mov ah, 0x3e
push edx
push ecx
push ss
fst dword [edx]
cmp eax, 0x813f388
mov al, byte [0xe8e29bb0]
mov ch, 0x26
nop
test al, 0x90
xchg ebx, eax
and byte [0x801d35ef], dl
push edx
xor bl, 0x52
xchg esp, eax
scasd eax, dword es:[edi]
xor ah, byte [eax + 0x4321766a]
fsub dword [eax - 0x2c]
arpl word [edi + 0x4e2b02d9], sp
dec ebx
popfd
call esi
push edi
mov dword [ebp - 0x10], eax
call dword [sym.imp.GDI32.dll_CreateCompatibleDC]
push dword [ebp - 0x10]
mov dword [ebp - 4], eax
push dword [ebp - 0x14]
push edi
call dword [sym.imp.GDI32.dll_CreateCompatibleBitmap]
mov esi, dword [sym.imp.GDI32.dll_SelectObject]
push eax
push dword [ebp - 4]
call esi
push 0xcc0020
push ebx
pushfd
test byte [0x10020cf6], 0xd2
jne 0x10020cf7
pop ebx
cmp dl, ch
xor cl, al
jl 0x10020d1e
add ebp, dword [ebx + 0x14]
fdiv qword [ebx + edi*2]
scasb al, byte es:[edi]
fmulp st(6)
jg 0x10020c74
pop ds
les esp, ss:[edx - 0x3b]
stc
or esp, dword [ebp - 0x67]
push ss
nop
sbb dword [eax + 0x25], ebp
test dword [edi - 0x10], edx
xlatb
xor ah, ch
les esp, [ebx + esi*4 - 0x2c]
pushfd
cmp byte fs:[0x949d8ab7], al
mov dword [ebx - 0x4e], esi
popfd
push ebx
pushfd
test byte [0x10020d1c], 0x58
jne 0x10020d1d
dec ebp
sub al, 0x93
pop edx
pushfd
nop
dec esi
sahf
or al, 0x83
test edi, ebp
test dword [ebp + 0x5caa76a], 0x65cee93d
int1
js 0x10020d45
popfd
push edi
push dword [ebp - 0x10]
mov dword [ebp - 0x18], eax
push dword [ebp - 0x14]
push ebx
pushfd
test byte [0x10020da7], 0xe0
jne 0x10020da8
cmc
imul cl
daa
push ss
into
push edi
sub dword [ecx - 0x139ede8a], ebp
loop 0x10020d04
pop esi
xchg dword [edx + 0x37], edx
aaa
and cl, dh
in al, 0xdb
fdiv qword [esi]
popfd
sub edx, ecx
jge 0x10020d25
push 0x51
cmp ebx, dword [edi + 0x35]
sti
sub dword [edi - 0x6bd877c4], 0xeb4eefc4
shl edi, 0x17
pop ecx
cmp al, 0x53
mov byte [edi], ah
xchg esp, eax
invalid
out dx, al
pop edx
push esp
dec esp
outsb dx, byte [esi]
cmpsb byte [esi], byte es:[edi]
sub byte [edi], bh
test al, 0x26
push 0x3d
jecxz 0x10020d39
lahf
xchg ecx, eax
push ss
in al, 0x31
out dx, eax
out dx, al
pop ss
mov ecx, 0xee329fe7
mov al, byte [0x39abc037]
cmp dword [edi], esi
add dword [ebp - 0x12], edx
cld
ffreep st(4)
imul edi, dword [ebx + 0x36], 0x34a4975f
nop
inc edx
inc eax
push ds
push edi
dec eax
xchg ecx, eax
push cs
cmp word [edx + 0x76], sp
cmp byte [ecx], bh
jg 0x10020d5b
popfd
push ebx
push dword [ebp - 4]
call dword [sym.imp.GDI32.dll_BitBlt]
push dword [ebp - 0x18]
pushfd
test byte [0x10020e94], 0xe7
jne 0x10020e95
sbb dword [ecx], ecx
in eax, dx
sbb al, 0xe3
xor dword [eax], ecx
loopne 0x10020d4f
test dword [edx], ecx
push eax
rcr dh, cl
mov al, byte [0x64098cd9]
mov ch, 0x3e
inc ebx
loopne 0x10020d68
adc al, dh
pop ecx
and al, 0x64
or al, dh
dec esp
test eax, 0x28657fd
or dword [edi - 0x1ce88a62], edx
cld
inc edi
sar dword [ebp + 0x3f1a5c83], 1
jb 0x10020e64
or eax, 0x4f6818aa
test dl, dh
mov bl, 0xc2
out 0x89, al
test dword [edi + edi*2 - 0x388efc67], 0x63c92788
adc eax, 0xb248c77a
daa
pop esi
adc al, 0x16
in eax, 0x3a
movsd dword es:[edi], dword [esi]
sahf
dec eax
ficom word [ebx]
pop ebx
jg 0x10020ea2
nop
jbe 0x10020e60
lahf
dec esi
out dx, al
cmp ah, dl
int 0x67
test eax, 0xbc5e04d
push edx
cmp eax, 0x8a8ad63d
xchg esi, eax
add ebx, 0xe34febc2
cld
imul ebp, dword [edi], 0x434b4189
mov dword [0x9fe9d312], eax
into
mov dword [0x44d78bae], eax
cld
xchg ebx, eax
dec eax
cdq
fiadd dword [ebx]
pop ecx
add byte [ebx + ecx], 0x18
pushfd
push es
inc ecx
test ah, ch
in al, dx
js 0x10020ed7
das
xor byte [bp + si - 0x1b58], 0x89
outsb dx, byte [esi]
insb byte es:[edi], dx
push ebp
push cs
enter 0xffffffffffffc562, 0x7e
test byte [eax - 0x1b], al
int 0xf2
leave
out 0x98, al
or cl, bh
imul edx, dword [edi + edi*8], 0xffffffc7
add dword [edi + 0x1fe944eb], esi
adc dword [eax - 0x34], esp
mov ebp, 0x7fe5deb2
cdq
mov cl, 0x58
push esi
lds esi, [ecx]
sahf
popfd
push dword [ebp - 4]
call esi
lea ecx, [ebp - 0x30]
push ecx
push 0x18
pushfd
test byte [0x10020f58], 0xb5
jne 0x10020f59
int3
shr bl, 1
sub bl, dh
int3
popfd
push eax
mov dword [ebp - 0x14], eax
call dword [sym.imp.GDI32.dll_GetObjectA]
mov eax, dword [ebp - 0x2c]
mov ecx, dword [ebp - 0x28]
mov dword [ebp - 0x54], eax
pushfd
test byte [0x10020feb], 0x2d
je 0x10020fec
jmp 0x10020f81
jo 0x10020f9d
frstor dword [ebx]
sub dword [edx], ebx
or al, cl
sub dword [eax], edx
mov bl, 0x36
test byte [edx - 4], ch
outsb dx, byte [esi]
mov ecx, 0x7757bccd
arpl si, bx
mov eax, 0xc9341650
push ds
leave
out 0xef, al
sahf
and byte [edi + 0x45], cl
adc dword ds:[ebx], 0xef2caa9c
lodsb al, byte [esi]
sbb cl, dl
and al, 0x85
fimul dword [ecx + 0x71]
mov esp, esp
push 0xffffffffffffffa0
fisttp qword [ebp + 5]
aam 0xa0
or byte [ecx], al
cwde
mov word [edx - 0xe203059], ds
popfd
out 0xb9, al
or esp, 0xffffffa7
pop esi
clc
dec ebx
lea edx, [eax + 0x11]
cmp ebp, ecx
push esp
adc ebx, dword [edx + ebp*4 + 0x1aacef2c]
retf 0x8524
lahf
cmp byte [0xe1c386b3], bl
jl 0x10020f70
jle 0x10021045
movzx ebx, word [ebx - 0x6aedc590]
nop
pushfd
mov ah, 0x2b
daa
std
loopne 0x10020fcd
sahf
xor al, 0xea
and dl, dl
popfd
xor edx, edx
inc edx
lea eax, [eax*8 + 0x1f]
pushfd
test byte [0x1002100a], 0x99
je 0x1002110b
pop ss
cmp bh, byte [ebp + 0xb0231ce]
stosb byte es:[edi], al
dec ebx
fxch st(6)
mov edi, 0x4c2b8551
dec byte es:[edx - 0x42a4f49c]
int1
push ds
lodsb al, byte [esi]
or ecx, esi
xchg ebp, eax
test byte [ecx + 0x1e0ff16f], ah
jb 0x10021075
adc bh, dl
dec esi
or edx, dword [ecx + 0x14368f08]
sub edi, dword [edi + 0x3608767b]
in eax, 0xe8
les ecx, [ebp + 0x1a]
cmp byte [ebp + 0x19], dl
aam 0x85
rcr dword [edx - 0x2b], cl
fdiv dword [eax + 0xe]
pop edx
aad 0xd8
jo 0x10021058
out dx, eax
or esi, dword [0x4054e41d]
sti
loopne 0x1002109f
test dword [ebx + 0xc], esi
jne 0x10021086
jne 0x10021086
push ds
add dl, byte [edx - 0x7c]
sub byte [esi], dl
clc
inc esp
add dh, byte [0x6b2e3313]
mov edx, dword [ebx - 0x37110b15]
jne 0x10021091
cmpsd dword [esi], dword es:[edi]
add al, 0xd3
dec edx
push es
push es
int1
fdiv qword [ebx - 0x659086cc]
and eax, edx
clc
adc esi, eax
adc ah, byte [ebp - 0x25d15537]
jns 0x1002108f
fidivr dword cs:[ecx + 5]
sub al, 0x33
aas
add dh, byte [edx - 0x5c]
movsb byte es:[edi], byte [esi]
pop eax
mov ebp, dword [eax + ebx*2 + 0x33]
in eax, dx
xchg ebp, eax
fdivrp st(5)
jne 0x100210c3
xor ecx, dword [edi - 0xaa429de]
pop ebx
cmc
cmp byte [edx - 0x65ddd2f2], al
fistp qword [edi]
xchg ebp, eax
xchg ebx, eax
adc ebp, dword ds:[ecx]
cmove ebp, dword [eax]
jnp 0x100210e7
mov esp, 0xc08dfa1f
adc al, 0xe1
mov dword [ebx + 0x78c5bc3b], edi
test byte [esi - 0x79], bl
div dword [edi + ecx*4]
imul ebp, dword [esi], 0xf6b334bf
xchg ecx, ecx
sub ecx, dword [ebx + 0x4db65032]
inc ecx
xchg esp, eax
or eax, 0xb31031a7
pop ebx
pop esi
imul eax, dword [ebx - 0x7e], 9
lodsd eax, dword es:[esi]
in al, dx
aad 0x95
fld qword [esi]
fist dword [esi - 0x31996628]
rcr byte [edi], 1
int 0xc6
pop esp
stc
xor eax, 0xfd6b9850
dec eax
pop ebx
mov al, 0xc3
movsd dword es:[edi], dword [esi]
jno 0x1002113f
std
mov bl, 0xbf
stc
aas
cmpsd dword [esi], dword es:[edi]
dec esp
mov edi, 0x4ca73ff9
out dx, al
pushal
into
popfd
push 8
mov word [ebp - 0x4c], dx
pop edx
and eax, 0xffffffe0
mov word [ebp - 0x4a], dx
cdq
pushfd
test byte [0x10021176], 0x3b
jne 0x10021177
lahf
das
mov dword [0xaa4f9710], eax
stosb byte es:[edi], al
imul esp, eax, 0xac84ac2e
or al, 0x61
cmpsb byte [esi], byte es:[edi]
cwde
inc edi
sbb cl, ch
lea ebx, [ebx]
imul esp, dword [esi + 0x43b96e5d], 0x7d
sbb eax, 0xa1ec6df1
lahf
mov al, byte [0x6a52c9ad]
jne 0x100211c0
mov ecx, 0xf11d7d43
insd dword es:[edi], dx
in al, dx
mov eax, dword [0xc9ada09f]
push edx
push 0x75
jno 0x10021103
mov bl, 0x22
salc
and dl, dh
dec eax
or edi, ecx
loop 0x10021180
add byte [ecx + 3], al
push es
lodsb al, byte [esi]
mov al, byte [0x75bc3e9f]
in eax, dx
salc
loop 0x1002112b
mov cl, byte [edi - 0x6a1aa378]
pop esp
in eax, 0x95
cmp al, 0x6d
ficomp word [esi + eax*4]
test eax, 0x842d820e
in al, dx
popfd
and edx, 7
add eax, edx
sar eax, 3
imul eax, ecx
add eax, 0x428
push eax
push ebx
mov dword [ebp - 0x58], 0x28
mov dword [ebp - 0x50], ecx
mov dword [ebp - 0x48], ebx
mov dword [ebp - 0x44], ebx
mov dword [ebp - 0x40], ebx
mov dword [ebp - 0x3c], ebx
pushfd
test byte [0x100211dc], 0x34
jne 0x100211dd
mov ah, 0x24
imul dword [ebx + 0xecf5ac]
mov al, byte [0xb4d30bf7]
sahf
push edx
mov ecx, 0x8dabe21b
mov dl, 0xd2
loop 0x10021168
lea esi, [edx + 0x367010d2]
adc byte [eax + 0x36], dh
cmc
xchg ebx, eax
add byte [esi + 0xe], dl
sub bl, bl
xchg dh, ah
test eax, 0x4a6dac6e
outsb dx, byte [esi]
lodsb al, byte [esi]
insd dword es:[edi], dx
dec edx
dec ebx
in eax, 0xdd
mov ebp, esi
test dh, ch
push ebx
in al, 0x17
push edi
dec ebp
popfd
mov dword [ebp - 0x38], ebx
pushfd
test byte [0x100212be], 0xdc
jne 0x100212bf
push ebx
lock sbb byte [eax - 0x64], bh
push ds
dec edx
jle 0x100211cc
fistp qword [eax]
cmp dl, bh
imul ebx, dword [edi + edx*2 - 0x80], 0x53
imul edx, edi, 0x7dfeee9a
xor al, 0xaf
push eax
sub edi, dword [esi + 0x5f]
pop eax
pop eax
xor ebx, ecx
salc
inc edx
ja 0x10021264
jns 0x10021261
outsb dx, byte [esi]
and byte [esi], al
mov cl, 0xf7
insd dword es:[edi], dx
pop eax
dec eax
xlatb
mov dl, 0x3a
mov ebp, 0x708550e
jg 0x100211bb
add bh, byte [edx]
dec esp
or eax, 0xb238262
cmc
test eax, ebx
pop ebp
aas
jg 0x100211cd
dec ecx
adc eax, 0x4b557b7e
jmp dword [ecx - 0x49]
cmp esp, dword [ebx]
pop ebp
push ebx
ja 0x100211f4
push eax
mov word [edx], ss
adc eax, 0x372f45ee
xor byte [0xd0357e6c], 0xdf
in eax, 0xca
cmp edx, esi
pop esp
xchg edx, eax
adc edx, dword [esi + 0x4f7608ee]
add bp, word [edx]
mov esi, 0x59ab6f48
xor ebx, dword [ecx + 0x1028eca2]
int3
popfd
mov dword [ebp - 0x34], ebx
call dword [sym.imp.KERNEL32.dll_GlobalAlloc]
mov dword [ebp - 0x10], eax
pushfd
test byte [0x100212f3], 0x56
jne 0x100212f4
fld xword [ebx + 0x123d2dd7]
idiv al
push ss
or edx, dword [ebx + 0x51d76e40]
fsub qword [edx]
clc
jo 0x10021353
mov dword [edi - 0x29b0b470], ecx
das
lodsb al, byte [esi]
sub al, 0xa7
popfd
mov ecx, dword [ebp + 8]
mov dword [ecx], eax
pushfd
test byte [0x10021317], 0xdc
jne 0x10021418
daa
pop esp
adc ebp, dword [eax + 0x29]
sahf
test edx, ebx
sbb eax, 0x2f5dced7
sub byte [esi - 0x32168a1a], dl
mov dword [0x53682d91], eax
mov esi, 0xda6e409e
frstor dword [ecx + 0x4f]
mov esp, dword [esi + 0x166dd8c6]
mov esi, esi
add byte [eax + edx*2 - 0x150c6157], 0x2f
lodsd eax, dword [esi]
inc ebp
xlatb
int1
dec ebx
cdq
not byte [eax + 0x62]
push edi
sar word [ebp - 0x47], 0xc8
mov edx, 0xd05ae31d
inc esi
and eax, 0x989b5c99
sal byte [ecx - 0x25], 1
sets byte [ebx + esi*8 + 0x577db560]
lahf
inc esi
cmp ch, ah
insb byte es:[edi], dx
sub dword [ecx + ecx*2 + 0xa], ebx
dec eax
xor eax, 0x2adb00d0
push eax
jge 0x100212fb
aaa
in eax, 0x20
add eax, 0x183db6c3
lahf
mov al, 0xb8
pop ebx
xchg ebx, eax
cdq
xchg byte [esp + ebp*2], bh
cmp ah, byte [edi + eax*8]
jo 0x100213df
dec ebp
and eax, 0x9e2a23bf
inc edi
or ecx, dword [esi]
sahf
outsb dx, byte [esi]
sbb byte [ebx - 0x58b9add3], bh
fist word [ebx]
sbb dword [ebp - 0x3c], 0x6196a60
or dword [ebx], 0x5af86e84
sbb dword [eax + 0x5d], eax
fld st(2)
cli
xor byte [edx], al
pop es
inc ecx
clc
sal byte [eax + ebx - 0x69705362], cl
sbb dh, byte [ecx]
adc cl, byte [esi]
pmuludq mm0, qword [ecx - 0x3f]
imul eax, dword [edi + 0x659a613b], 0x6daf1909
in al, dx
sbb dl, byte [ebx + ebx*8 - 0x1b]
leave
pushal
call [edx + 0x27]
outsd dx, dword ss:[esi]
enter 0x4a1a, 0x6f
out dx, eax
dec eax
sbb dword [edi + 0x5ccf945], 0x7f
add dword [ebx], 0x7b
lodsb al, byte [esi]
jbe 0x1002141a
lahf
inc ebp
stc
int3
sal dword [esi], 0x61
cmp dword [ebp - 7], ecx
stosd dword es:[edi], eax
add al, 0x33
cmc
imul ecx, dword [ebx + edi*4], 0xf387a4ad
lea eax, [edi]
push eax
push ebp
in al, dx
sahf
mov ebp, 0x59359fdb
push edx
outsb dx, byte [esi]
sub edi, dword [bx]
test byte [ebx + 0x7b], 0x4a
scasd eax, dword es:[edi]
add ch, byte [ebx - 0x784ca88f]
popfd
cmp eax, ebx
jne 0x1002176d
ret
push dword [ebp - 0x14]
call dword [sym.imp.GDI32.dll_DeleteObject]
mov esi, dword [sym.imp.GDI32.dll_DeleteDC]
pushfd
test byte [0x100214f3], 8
jne 0x100214f4
or al, 0x63
cmp ah, byte [edi - 0x17]
add byte [esi + esi*4 - 0x686d4c59], bh
add eax, 0x447eff50
cli
in al, 0x38
aas
pop es
test dword [esp + esi*2], 0xead3e957
push es
pop es
and ecx, dword [ebx + 0x11]
out dx, al
sbb al, 0xf3
mov dh, 0xa3
add eax, dword [0x83b9f961]
test dl, ah
inc edi
xor eax, 0xf25252d0
cmp bh, byte [edi + 0x39afa03d]
insd dword es:[edi], dx
div byte [ebx - 0x3a]
mov dr6, ebx
sub eax, 0x4bdf8bd4
movsb byte es:[edi], byte [esi]
js 0x10021421
mov edi, dword [esi - 0x2f]
or eax, 0xc453a541
pop edx
add eax, 0xffffffdb
pop ss
xchg edi, eax
pop ebp
adc byte [ecx + 0x5f7972f], 0x26
pop ss
adc ebp, dword [ebx - 0x37]
outsd dx, dword [esi]
mov edi, 0x5daed963
mov byte [edi - 0x4a], al
shl byte [ebx], 1
sub byte [edx], 0x69
into
pushal
pop eax
jo 0x1002144f
lcall 0x6bfa, 0x7436bca8
fsub qword [edx - 0x37a5a450]
aaa
push edi
and eax, 0x4d1d5384
test al, 0xbc
je 0x100214b4
imul ebx, esp, 0xffffffa2
mov al, 0x5b
pop edx
enter 0x5737, 0x25
test byte [ebx + 0x1d], dl
dec ebp
pop ds
cwde
xor al, 0x26
dec edx
mov dh, 0xc7
imul edx, dword [eax + 0x2c], 0x8b104f74
push cs
sbb al, 0xd2
pop edx
sbb ecx, dword [eax - 0x63]
inc eax
mov dl, 0x61
aaa
inc esp
sbb bl, al
pop esp
inc esp
invalid
popfd
push edi
pushfd
test byte [0x100215b7], 0x14
je 0x100215b8
popal
fsub qword [esi - 0x125dfab5]
adc ebx, dword [esi]
add edi, dword [eax + 0x59]
add eax, dword [ebx + eax - 0x50ffdd32]
jl 0x1002158c
cmpsb byte [esi], byte es:[edi]
outsb dx, byte ds:[esi]
dec esi
insb byte es:[edi], dx
sbb dword [ebp - 0x3b], esp
mov ch, byte [ebp + 5]
dec ebp
fimul word [edx - 0x57]
sub ch, dh
bound eax, qword [esi]
insb byte es:[edi], dx
jl 0x10021531
xor byte [ecx], bl
dec ecx
in al, dx
mov dh, 0xc1
insb byte es:[edi], dx
push ds
xchg esp, eax
cmp al, 0xd0
xchg ebp, eax
leave
mov dword [eax + 0x1b2fb977], ebp
cmpsd dword [esi], dword es:[edi]
in al, 0xab
adc byte [esi + 0x3c08e87], cl
fstp dword [edx + 0x3f]
sub eax, 0x5884bdc0
test dword [ecx + 9], ebp
adc byte [eax], dh
jl 0x10021593
mov ebp, 0x69855884
or dword [eax], edx
xor byte [ecx + edi + 0x2e], bh
pop esi
pop esi
sbb edi, dword [edx + eax*8]
das
div dword [esi - 0x17fbbd52]
out 0x89, al
fiadd dword [ebx + ecx*4 - 1]
xchg ebp, eax
and byte [edx + 0x4defa891], ah
mul byte [eax + esi*4]
daa
int 6
pushal
out dx, eax
mov esp, es
xor eax, 0xb87133e0
lodsd eax, dword [esi]
jbe 0x100215d6
mov es, word [edi + eax*4 + 0x31]
xchg dword [ecx], esi
push cs
push ecx
aaa
xchg ecx, eax
xor eax, 0x1ce1eb80
in al, dx
add esi, edi
cmp esi, dword [eax - 0xf]
test byte [ecx], ah
push cs
cmp ecx, ebx
pop ds
salc
sub al, 0xe
jo 0x1002159f
sub dword gs:[ebx + 0x5b], ebx
in al, dx
mov esi, 0xcf1e4213
scasd eax, dword es:[edi]
jb 0x10021550
xchg esi, eax
cmpsb byte [esi], byte es:[edi]
jg 0x100215d2
js 0x10021603
popfd
call esi
push dword [ebp - 4]
pushfd
test byte [0x1002164b], 0x8d
jne 0x1002164c
test dword [eax - 0x32000000], eax
into
push 0xffffffffffffff84
ror byte [ebx + ecx*2 + 3], 0xcc
dec esp
dec ebx
add ecx, esp
out dx, al
loopne 0x10021641
push 0x74
out dx, al
je 0x100215c7
mov eax, dword [0x23f68174]
rol byte [esi], 0x2c
inc esp
cmpsb byte [esi], byte es:[edi]
clc
pop esi
add byte [edx], 0xd
adc eax, 0x9cd865fe
jnp 0x10021588
std
dec eax
test esp, 0xacce89a
scasb al, byte es:[edi]
push eax
mov esi, 0x803e986f
leave
lahf
imul ebp, dword [edi + 0x27], 0x6c1abb05
daa
add eax, 0x186c1abb
out 0x72, eax
sti
mov ebx, 0xe7186c1a
insb byte es:[edi], dx
sbb bh, ah
jb 0x10021607
nop
xchg ebx, eax
cld
outsb dx, byte [esi]
sbb dword [esi - 0x626078ac], esp
aam 0xde
or byte ss:[eax - 0x6a3b5a80], bl
std
stosb byte es:[edi], al
jno 0x10021605
xor al, 0xa1
test al, 0xde
xor dword [ecx + 0x37b221fa], ecx
jno 0x10021667
scasb al, byte es:[edi]
out dx, al
jne 0x10021607
sub al, 2
push 0xffffffffffffff81
mov cl, dh
mov eax, dword [0x2bfddd96]
jo 0x100215d0
popal
popal
push ds
add dword [esi - 0x25], ebp
sbb al, 0x35
cmp dh, byte [ebx - 0x65]
clc
popfd
call esi
pop edi
pushfd
test byte [0x100216ab], 0x84
jne 0x100216ac
sal ebx, cl
inc edx
std
cmp eax, 0x469bd244
out dx, al
movsb byte es:[edi], byte [esi]
fstp qword [ebp + 0x1b]
jge 0x10021690
pop ebp
sbb edi, dword [ebp + 0x25]
xor al, 0x41
and eax, 0xf63900a3
add cl, byte [ecx - 0x7dcb6bc5]
cmp eax, 0x14f7f4bb
test esi, eax
mov al, byte [0xd2a423e7]
adc ah, bl
rcl dword [esi], 0x87
stosb byte es:[edi], al
adc eax, 0xba6d8b50
dec dh
into
in eax, 0x80
jns 0x100216b9
add al, cl
lahf
mov bl, 0x40
cmp al, byte [edx + 0x7750d699]
scasb al, byte es:[edi]
mov dh, 0xac
cdq
sub ch, cl
dec edi
inc ecx
pop ds
out 0xd3, eax
insd dword es:[edi], dx
popfd
pop esi
mov eax, ebx
pop ebx
pushfd
test byte [0x10021769], 0xd
jne 0x1002176a
pop eax
mov ecx, edi
pop ebx
jne 0x100216ca
mov ch, 0xe4
inc ebx
out 0x8c, eax
jno 0x100216a0
invalid
pushfd
adc dword [esi + 0x75], esi
jg 0x10021715
nop
cmpsd dword [esi], dword es:[edi]
inc ecx
int3
lodsb al, byte [esi]
test al, 0x3e
push ebx
or al, 0x7f
fnsave dword [ebx + 9]
add al, 0x4c
dec esp
or dword [edi - 0x3c2c3ea8], edx
mov ebx, 0x981ecda6
mov ah, 0x8f
mov esp, 0xe38829cb
out dx, al
xor eax, 0x9814cfd3
stosd dword es:[edi], eax
ja 0x1002170c
pop esi
push eax
add bl, byte [ecx]
mov edi, cs
mov bh, 0xcd
lodsd eax, dword [esi]
outsd dx, dword [esi]
jae 0x10021716
and al, 0xcb
add edi, eax
imul esp, dword [eax - 0xe], 0x5e5c16f2
mov bl, 0xec
mov bl, 0x7a
out 4, eax
mov bh, 0x7f
or al, 0x3b
mov eax, dword [0x67b3b751]
adc byte [ecx + edi*2], 0x3b
fsubr dword gs:[ebx]
mov edi, 0xb3d7067d
ja 0x10021771
add ch, bh
popfd
leave
ret
push 0xa
pushfd
test byte [0x1002185d], 0x95
add eax, 0x1002185d
xchg ebp, eax
adc byte [ebp + 0xe1850f], dl
add byte [eax], al
jne 0x1002185e
pop esp
mov esp, 0x78f4476d
ror bl, 1
xor dh, byte [ebx - 0x66]
lock or dword [ecx + 0x7c], eax
cmc
test eax, 0xdd2a211d
adc dword [edi - 0x2e], 0x79fb74f7
div dword [ebx + edi*8 + 0x79]
push esi
stosb byte es:[edi], al
push cs
movsd dword es:[edi], dword [esi]
adc eax, 0x58d3ecd7
sub eax, 0x73c48d40
xor al, 0x3c
popal
lds edx, [edi + 0x2d]
sbb edi, esi
mov edi, dword [ebp + 0x23ac77bc]
in al, 0xa3
das
jecxz 0x1002179c
push 0x453b162e
sbb al, 0x2e
jle 0x10021768
add ebx, eax
fld xword [edx - 0x2e]
inc esp
jnp 0x10021795
int 0xf9
scasb al, byte es:[edi]
dec esp
cmpsb byte [esi], byte es:[edi]
add dword [ecx + 0x12872a47], esi
loop 0x10021775
jge 0x10021834
cmc
push 0xffffffffffffff84
add al, 0x64
les ebx, [esi + 0x625d3df2]
add esp, dword [ecx + edx*2 + 0x3d]
int1
enter 0x4fcf, 0x21
push 0x20098698
out 0xcd, al
cmpsd dword [esi], dword es:[edi]
nop
xchg ecx, eax
add dword [esp + ebx*2 - 0x50e887f2], eax
imul esp, dword [edi], 0xa68fabd8
aad 0x17
and dl, ch
push esi
sbb dword [ebx - 0x5dd97cc9], edi
nop
and bh, dh
test al, 0x8d
invalid
or dword [ecx], 0x1c
test eax, 0xfd852814
popfd
dec eax
pop esp
mov bl, 0x4a
fmul dword cs:[edi]
stc
fsubr qword [eax + esi - 0x43]
ficomp word [eax]
cmp ah, dl
dec eax
push cs
pop esp
jge 0x100218a0
push ecx
mov esi, 0xce46a3fb
jbe 0x100218a6
int3
popfd
pop ecx
pushfd
test byte [0x100218cf], 0x1e
jne 0x100218d0
into
insd dword es:[edi], dx
cmp eax, esi
lea ecx, [edx + 0x43371916]
cmc
mov esp, 0x202653a9
cmc
sbb dword [ecx + 0xf], esi
push cs
xchg esp, eax
jo 0x100218a1
cmp eax, 0x777b7f5b
xchg edi, eax
cmp eax, 0x34c40c91
push ss
lds eax, [ebp + 0x7c5cd663]
xchg esp, eax
nop
mov dl, 0x4e
leave
adc ch, byte [ecx + 0x4a]
mov ebp, edx
dec ebx
cmp dword [ebx + 0x254425ee], esi
fstp qword [ecx - 0xbc8fc9d]
scasd eax, dword es:[edi]
xchg edi, eax
arpl bx, di
pop edx
dec ebx
mov bl, byte [edx + 3]
inc ebx
mov dword [edx + 0xc10abf1], eax
pop edx
cwde
and al, 0x4a
cmpsd dword [esi], dword es:[edi]
mov edi, 0x3f1b77ee
daa
and dword [ebx + 1], ebp
xchg ebx, eax
push 0x325ba049
mov bl, 0xee
out dx, al
and eax, 0x99dd2544
cdq
arpl word [ebx], ax
aaa
hlt
popfd
mov edi, eax
lea esi, [ebp - 0x58]
push 0xf
rep movsd dword es:[edi], dword [esi]
call dword [sym.imp.GDI32.dll_GetStockObject]
mov esi, dword [sym.imp.GDI32.dll_SelectPalette]
mov edi, dword [sym.imp.GDI32.dll_RealizePalette]
mov dword [ebp - 0x18], eax
cmp eax, ebx
je 0x10021b6c
pushfd
test byte [0x10021955], 0xba
je 0x10021a56
das
xchg ebx, eax
sub byte [edi - 0x456b9751], ch
add dword [ebx + 0x67beb894], ecx
pop ebp
movsb byte es:[edi], byte [esi]
test eax, 0xaf7c27d6
pop ds
pop edi
sti
and eax, 0xa916e2dd
push ebp
enter 0x4bda, 0x7c
xor ch, bl
fstp xword [ecx - 0x4723af38]
mov edx, 0xf8fbd965
jbe 0x100219a6
aad 0x39
push dword [esi + 0x67]
jne 0x100219a9
jne 0x100219a9
and eax, 0x884347e7
add eax, 0xcaa1b901
fsubrp st(6)
sar byte [ecx - 0x5ea34416], 0xee
out dx, al
and eax, 0x5d06c20d
add ebp, ecx
or eax, 0xbba49c93
or al, 0x2d
push 0xaa4922ae
mov dword [0x2ec1c57], eax
add eax, 0x9cc3be65
imul dl
push ebx
cwde
sar al, 1
int1
cmpsb byte [esi], byte es:[edi]
fild dword [ebx - 0x6d33a007]
sbb dword [ecx + 0x3cd6e2a2], 0xffffffab
mov dword [0x6ffae403], eax
mov bl, 0x30
mov dword [0xb3b51efc], eax
cmp dword [eax - 0x4d90b22d], eax
loop 0x1002193a
mov al, 0x31
jnp 0x10021955
shl ah, 1
popfd
xchg ebp, eax
adc al, 0xe9
outsb dx, byte [esi]
arpl bp, bp
mov dword [edx], edi
pop eax
pop esp
cmp bl, byte [eax + 0x5c]
xchg ebp, eax
mov ah, 0xbc
sub ebp, dword [eax - 0x240d2dd3]
in eax, 0xa5
mov ebx, 0x1ac5915f
push cs
pop ecx
mov esi, 0xaf94bf47
std
fbstp tbyte [edx - 0x443b2249]
pop ebx
inc ecx
popfd
and byte [ebp + 0x79], bl
xor eax, 0xb074a320
inc esi
mov ebx, dword [ebp + 0x2427c0f9]
inc edi
mov edi, 0xdffdaf94
mov dl, 0xb7
ffree st(4)
mov ebx, 0x209d415b
pop ebp
jns 0x1002194f
lock and byte [ebx - 0x74b94f8c], ah
popfd
stc
shl byte [edi], 0x24
add al, 0x10
mov ebx, dword [edi - 0x7f27db56]
cmpsb byte [esi], byte es:[edi]
ficomp dword [ebp + 0x72e8b1c0]
xlatb
mov ebp, esp
dec ecx
dec edx
out 0xc, eax
push cs
stosd dword es:[edi], eax
outsb dx, byte [esi]
lodsb al, byte [esi]
push es
mov bh, 0xed
cmpsd dword [esi], dword es:[edi]
inc ecx
cmp al, 0x16
xchg ebp, eax
cmp dword [ebx + 0x22], esi
xor al, byte [edx + ebx + 0x7103110c]
cmp bl, byte [ebx - 7]
aaa
dec ecx
sbb byte [0xf384db5], bh
sbb dword [esi + 0x50], ebp
popal
and byte [ebx - 0x26ff2787], 0xbb
mov esi, 0xcacf2368
aad 0xa2
jl 0x100219bc
mov byte [0xab967c66], al
jl 0x100219bc
stosd dword es:[edi], eax
call 0xc6a7ff88
mov dl, 0x8f
xchg ebx, eax
inc ebx
pop edx
mov cl, 0x65
call 0xf2f545c8
in eax, 0xad
mul ch
cmpsd dword [esi], dword es:[edi]
idiv dword ss:[eax - 0x2f]
mov ebp, 0x718332e6
push eax
sbb ch, byte [edx]
sbb ebx, dword [ebp + 0x66837a30]
sub ecx, dword es:[ecx + 3]
stosb byte es:[edi], al
je 0x10021a24
popfd
push ebx
call dword [sym.imp.USER32.dll_GetDC]
adc al, 0x10
push ebx
push dword [ebp - 0x18]
mov dword [ebp + 8], eax
push eax
call esi
push dword [ebp + 8]
pushfd
test byte [0x10021b65], 0x15
jne 0x10021b66
mov dl, 0x4b
dec ebp
jecxz 0x10021a22
int 0x12
mov esp, ds
sal dword ds:[eax + 0x7300d110], 1
push esi
mov esi, 0x566bc2b2
cmpsd dword [esi], dword es:[edi]
fistp qword [esi + 0x3d6c0b55]
adc dword [ebp + 0x19ec2b75], edx
xor byte [bx + di - 0x21], dh
mov al, byte [0xb1d998a4]
add edx, ebx
push 0x66
xchg esi, eax
cmp bl, byte [edx - 0x173ec2ea]
jne 0x10021b01
ja 0x10021a5c
pop ecx
fiadd dword [esi + edx*4]
frstor dword [esi]
inc eax
or al, 0x75
add ch, al
mov dh, 0xda
ja 0x10021a7b
insb byte es:[edi], dx
mov edi, 0xc9d983d5
leave
bound edx, qword [esi - 0x17a0e686]
int 0x9e
sub cl, 0x6c
cmpsb byte [esi], byte es:[edi]
mov gs, word [eax - 0x73904db4]
xchg edi, eax
push esi
cmpsd dword [esi], dword es:[edi]
aam 0x51
inc ebx
aad 0x4d
sar byte [ebx], 0x55
in al, 0x78
dec esp
bound ebx, qword [ebp - 0x5955910]
dec ecx
je 0x10021aec
invalid
popal
adc al, 0x58
scasd eax, dword es:[edi]
out dx, eax
cmp al, 0xb7
jns 0x10021b44
sahf
mov dword [0xb34a1141], eax
push cs
mov bl, 0xe
mov dl, 0x15
add byte [ebp - 0x89e36f3], cl
xchg esi, eax
inc esi
add bl, 0xcd
and eax, 0xe49119
jl 0x10021b48
and eax, 0x382dea2c
cmp al, 0x44
sbb edx, dword [edi]
push ds
mov bh, 0x8a
push esp
popfd
jle 0x10021ac8
jb 0x10021b4d
arpl bx, sp
push 0xe7679653
adc cl, byte [ebx - 0x73b70dd4]
popal
call 0xd12eb0c7
daa
sar dword [edi - 0x3a], 1
sbb edx, esi
aad 0xf4
and al, 0x94
cmc
hlt
mov ch, 0xcd
test eax, 0xc92fe9aa
das
leave
dec edx
lodsd eax, dword [esi]
inc ebx
xor cl, byte [edi + ebp - 0x1c]
xchg esp, eax
dec esp
das
in al, 0x94
in al, 0x68
pushal
pop ebx
inc eax
add dword ss:[edi + 0x4a9fb84c], eax
xchg ebp, eax
pop eax
popfd
mov dword [ebp - 8], eax
call edi
mov eax, dword [ebp - 0x10]
push ebx
pushfd
test byte [0x10021c5a], 0xa2
jne 0x10021c5b
pushal
lea ecx, [ebp + 0xe]
mov dh, 0xa7
lea eax, [ebp - 0xc]
nop
pushfd
xor esp, 0xcf7e0481
mov ebp, 0xb44bf8ef
scasd eax, dword es:[edi]
lodsd eax, dword [esi]
lea esi, [edx + 0x35b04348]
mov al, 0x35
cmp ecx, dword [0xbae3cdcc]
jne 0x10021b9a
sar dword [ebx + 0x4b], 1
aas
cld
jno 0x10021bda
fidiv dword [edi]
mov dl, 0xe3
fild dword [edi]
or dword [esi + 0x4ba37205], edx
stosb byte es:[edi], al
in eax, 0xe2
or cl, cl
mov esi, 0x198e445d
imul esi, dword [esi], 0x39
aam 0xdf
jg 0x10021c12
popal
pushal
cli
salc
mov dl, 0x80
mov bl, 0xbe
jbe 0x10021b54
rol dword es:[esi - 0x17], cl
test byte [edx + 0x76c863d1], ah
dec ecx
or bh, byte [ebx]
sbb ecx, dword [edi]
fisub dword [ebx]
enter 0x4976, 0xa
cmp ebx, dword [ebx]
pminub mm4, qword [ebx]
fdivr dword [edi]
popal
in al, 0x62
into
cmp eax, 0xa86edf9d
xor ebx, esi
sub byte [ecx + 0x63a0d666], dl
in eax, 0x66
inc edi
push es
outsb dx, byte [esi]
sub al, 0xdc
mov gs, word [ebx - 0x57b76ae1]
aad 0x18
pop eax
push 0xfffffffffffffff9
fmul qword [esi + 0x48951fab]
test al, 0xd5
sbb byte [eax + 0x6a], bl
stc
add byte [eax], bh
pushal
jne 0x10021ba9
or eax, esp
in al, 0xc8
sar byte [ebp + 0x11], cl
or al, 0x71
pop ecx
pop ss
or dx, word [edi]
in eax, dx
scasb al, byte es:[edi]
jno 0x10021c90
add eax, dword [esi - 0x66657591]
inc edx
fidivr word cs:[ecx]
lea edi, [eax + 7]
dec esp
or al, 0xc9
mov bh, 0xdf
and eax, 0xfdd4378c
xchg ecx, eax
push ds
sbb eax, 0xb45c45df
sub edi, edi
xchg ecx, eax
lahf
or ecx, esp
and dword [esi], eax
push esi
and al, 0x26
sbb eax, 0xee5308
adc al, byte [esi - 0x3a]
lodsd eax, dword [esi]
jnp 0x10021bfd
mov ebp, 0x10b60be8
dec edx
int3
popfd
push eax
add eax, 0x428
push eax
push dword [ebp - 0x28]
push ebx
push dword [ebp - 0x14]
push dword [ebp + 8]
call dword [sym.imp.GDI32.dll_GetDIBits]
cmp dword [ebp - 8], ebx
je 0x10021dad
push 1
pushfd
test byte [0x10021c94], 0x81
jne 0x10021d95
cmp esi, dword [edi + 0x76]
push edi
pop edx
mov es, esp
ja 0x10021c49
sub bh, byte [ebx - 0x4c]
mov ah, 0xfd
pop ds
dec edi
daa
lodsb al, byte [esi]
adc dword gs:[edi + edx*4 - 0x41380e08], edx
scasd eax, dword es:[edi]
jecxz 0x10021caf
push ecx
lds edx, [esi + 0x615598f5]
popal
push cs
mov eax, ebp
js 0x10021ca9
out dx, al
xor eax, 0x7654d432
daa
shl dword [edi], 1
sal byte [esi - 0x690fcff9], 1
sti
push 0xffffffffffffffd9
les ebx, [eax + 0x67]
cmpsb byte [esi], byte es:[edi]
pop ebx
push ds
int3
popfd
push dword [ebp - 8]
push dword [ebp - 0xc]
call esi
push dword [ebp - 0xc]
call edi
push dword [ebp + 8]
push ebx
call dword [sym.imp.USER32.dll_ReleaseDC]
mov edi, dword [ebp - 0xc]
xor ebx, ebx
inc ebx
jmp 0x10021421