Function at 0x1005070c
Capabilities:
Encode data using xor
Read file via mapping

Disassembly:
lcall 0x5f6, 0x9c55ffff
imul esp
add al, 0x10
push 0xf
test dword [eax + eax + 0x20300000], ecx
push ebp
pushfd
test byte [0x1004ecf7], 0x6a
jne 0x1004ecf8
xor byte [eax], ah
idiv byte [ebp - 0x65fd37dc]
lodsd eax, dword [esi]
adc eax, 0xbfe05698
cld
je 0x1004ec96
leave
imul edx, dword [edx], 0xe14179e1
lodsb al, byte [esi]
mov esi, 0x87aca8b7
and ch, byte es:[ebx]
mov ebx, 0x61f0ea8f
jl 0x1004ec95
je 0x1004ec75
fidivr word [ebp + ecx*2 + 0x5feac0d9]
mov esp, 0xeac0d94d
pop edi
and bh, byte [edi]
lodsd eax, dword [esi]
les ecx, [ecx + 0x230467af]
sub dword [ebx], edx
dec ebx
outsb dx, byte [esi]
cmp byte [eax], al
add esi, dword [eax]
dec eax
xchg esp, eax
aam 0x34
xor dword [esi + ebx*2 + 0x5ba4cc5c], ebx
loop 0x1004eca0
int3
and eax, 0x75773a21
dec ebp
jl 0x1004ecb6
jl 0x1004ec5a
in eax, 0xbe
arpl sp, dx
stosb byte es:[edi], al
cmp edx, dword [0x6f921a5e]
lodsb al, byte ds:[esi]
sub ecx, dword [esi - 0x25ed576c]
fld dword [ebp + 0x5c43d758]
inc edi
dec edx
rcl dword [ebx], 0xbe
movhlps xmm6, xmm7
int3
popfd
mov ebp, esp
pushfd
test byte [0x1004ed48], 0xaa
jne 0x1004ed49
push es
out 0xdf, al
inc ecx
push ds
sahf
adc al, 0xf0
stosb byte es:[edi], al
mov al, 4
cmpps xmm7, xmmword [ebp*8 - 0x3c700e7e], 0x87
outsb dx, byte [esi]
fidivr dword [ebp - 0x540c0b1a]
jo 0x1004ed48
loopne 0x1004ed52
adc al, 0xc2
cmc
dec edi
adc bl, byte [ebp + edi*2 - 0x7c2f6bb6]
lea ecx, [ebx - 0x44]
mov byte [eax - 0x72db39bd], ah
pop ebx
int1
mov ch, 0xa5
into
push esi
push eax
adc eax, 0x99cf9f53
fisttp qword [ebx]
salc
xchg edx, eax
popfd
push ecx
lea eax, [ebp - 4]
push eax
push 0x28
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
adc eax, sym.imp.KERNEL32.dll_GetCurrentProcess
push eax
pushfd
test byte [0x1004ed8f], 0x5c
jne 0x1004ee90
insd dword es:[edi], dx
adc al, 0xfa
sub byte [esi], ah
jl 0x1004ed59
xchg edi, eax
call 0x3a924161
test eax, 0xf881209
jns 0x1004ed88
or byte [ebp + 0x143c97ac], dh
shr cl, 1
pop esp
or esi, 0xffffffe1
pop eax
adc al, 0x5a
push ebp
push 0x9754a192
test dword [ecx + 4], edx
adc al, 0xfc
mov edi, 0xed5a82b0
inc ebx
movsb byte es:[edi], byte [esi]
xchg ecx, eax
push 0x32
fadd qword [ecx + 0x6f]
mov ebx, 0x4f8dfb02
dec esp
cmp edx, esp
adc dword [esi - 0x28], eax
arpl word [ebx], si
fsub dword [ebx + 0x33]
and dword [edi], ebp
lodsd eax, dword [esi]
sti
into
inc edx
ja 0x1004edeb
jne 0x1004edac
dec esp
jo 0x1004ed6c
insd dword es:[edi], dx
push ds
push ecx
push esi
adc bl, byte [esi]
fdiv dword [edx - 0x2c79d1d0]
test eax, 0x3822d517
add dword [eax - 0x63], ebx
sbb al, 0x11
mov dword [0x4e54a32e], eax
xchg edi, eax
popfd
scasd eax, dword es:[edi]
push esi
mov edx, dword [esp + eax*2 - 0x15ca078e]
pop es
cmp dword cs:[0xaf240a38], esi
int 0x19
imul edi, dword [ebx - 0x7d], 0x59
sal edx, cl
inc ebp
dec ecx
movsd dword es:[edi], dword [esi]
sar dword [edi + ebx + 2], 0xb6
int3
sbb eax, 0x8db31ce4
lahf
push cs
in al, 0xa
insd dword es:[edi], dx
sub ch, byte [ebx + ecx*4 + 0x7c1e7665]
or ah, byte [esi]
xchg ebp, eax
push ebx
push esi
fist dword [ebx + 0x3e70f1d3]
inc esp
and eax, 0x27788893
xchg ebx, eax
mov byte [eax + 0x27], bh
xchg esi, eax
xchg ebx, eax
xchg ecx, eax
xchg edi, eax
jno 0x1004ee85
popfd
call dword [sym.imp.ADVAPI32.dll_OpenProcessToken]
test eax, eax
je 0x1004f0a1
push esi
push dword [ebp + 0xc]
push dword [ebp + 8]
push dword [ebp - 4]
call fcn.1004a362
pushfd
test byte [0x1004eebe], 0x1e
jne 0x1004efbf
out 0xb, al
mov ebp, 0xf9b92191
daa
mov al, byte [0xa96839a4]
dec edi
mov cl, 0x51
mov cl, 0x14
jecxz 0x1004ee66
salc
push esi
sar dword [esi + 0x4e], 1
mov al, byte [0x24903332]
div byte [eax - 0x62]
xor dh, byte [ebx]
nop
and al, 0xf6
jo 0x1004ee7b
sbb dl, byte [eax + 0x6b]
pop esp
scasb al, byte es:[edi]
enter 0xffffffffffffd6d1, 0xffffffffffffffc8
adc al, bh
scasb al, byte es:[edi]
xchg ebx, eax
lodsb al, byte [esi]
pop dword [edi + 0x2c]
shr bl, cl
jne 0x1004ef3a
imul esp, dword [ebx - 0x244b7657], 0xde6942ad
std
mov byte [ebp + 0x2b], cl
inc cl
pushfd
fisub dword [edi]
mov cl, 0xc2
mov ah, 0x23
sub byte [eax - 0x4c2fa583], ch
jnp 0x1004ef8b
add dword [edi + 0x165823c1], eax
leave
stosb byte es:[edi], al
push ebp
sub eax, dword [ecx - 0x6055c323]
inc edx
xor dword [ecx], 0xea4d4d6b
aam 6
xchg edx, eax
cmpsd dword [esi], dword es:[edi]
jecxz 0x1004eed6
popal
out dx, al
in al, 0xd1
scasd eax, dword es:[edi]
rol dl, cl
arpl ax, bp
popfd
pushfd
insb byte es:[edi], dx
sub dh, byte [eax + 0xa]
jo 0x1004ef46
xchg esp, eax
xor eax, 0x2593f999
mov eax, 0xb0ec651
insb byte es:[edi], dx
dec ebp
or edx, dword [0x79d54bb9]
or ebp, dword [ebp + ecx*2 + 0xb]
adc eax, 0x79d54bb9
mov dh, 0x8e
les esi, gs:[edi + 0x1bf285f2]
aam 0xbb
clc
cmp eax, 0x691db208
pop edi
pop edi
push ds
mov bl, dh
pop es
int 9
js 0x1004ef70
jns 0x1004ef34
pop edi
aam 0x23
mov edi, 0x892eaec7
clc
add dh, byte [esi]
or eax, dword [edx - 0x76]
inc ebp
lodsd eax, dword [esi]
or al, 0xa7
movsd dword es:[edi], dword cs:[esi]
lds esp, [ecx - 0x7e]
sahf
xchg esp, eax
test byte [bx], ch
add esi, dword [esi + 0x10]
xchg esp, eax
bound ebp, qword [ecx]
pushfd
add eax, 0x39e08162
inc eax
pop esi
xor al, 0x12
cmp dword [edx + ebx - 0x54], ebx
add eax, 0x76baa8b1
adc byte [edx + 0x62059c29], dl
and eax, 0x345e4039
adc bh, byte [ecx]
pop esp
sbb ch, byte [ebp + eax + 0x76baa8b1]
nop
cmp eax, 0x59f47048
arpl word [ebp + ecx*2 + 0x4d09811c], si
fsetpm
dec ebp
push ebp
outsb dx, byte [esi]
lodsb al, byte [esi]
in eax, dx
fild word [edx + ebp - 0xc]
sal bl, cl
dec ebp
inc esp
popfd
add esp, 0xc
push dword [ebp - 4]
mov esi, eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
pushfd
test byte [0x1004f09c], 0x14
jne 0x1004f09d
stosb byte es:[edi], al
push edx
bnd jns 0x1004eff3
pop ebx
pushal
and dword [0x73834839], 0xffffff9e
sahf
mov ch, 0x8a
cmp byte [edx - 0x70287466], bl
out dx, al
xlatb
fstp xword [esi + 0x64]
lds edi, [edi - 0x6614636a]
mov al, byte [0xb4f18334]
mov ecx, 0xa8c52427
sbb eax, 0xa69e3579
jne 0x1004f02f
xchg dword [ecx + ecx - 0x45], ebx
int 0xe
jl 0x1004f090
mov dword [esi], esp
nop
xchg byte [ebx], al
cmp byte [edi - 0x4f], bh
sbb eax, 0xb570d294
and eax, 0x6cbe617d
mov ecx, 0xbfdef38f
adc esp, dword [eax - 0x3cab530b]
xchg edx, eax
push 0xffffffffffffffa6
and ch, byte [ebx]
not dword [ecx + 0x36]
add al, 0xf4
shr byte [eax], cl
cld
sbb edi, edx
pop ecx
stosb byte es:[edi], al
cwde
mov al, byte [0x658d6b49]
push es
std
or dl, bl
push ebp
call [edx - 0x60]
xchg dword [ebp - 0x13c68629], ebp
in al, dx
jl 0x1004f004
mov edi, 0xacf5a013
push esp
ret
adc al, 0xd6
cwde
mov bh, byte [ebx]
mov esi, dword [ebx + 0x5c]
test dword [eax - 0x7c6e0e61], edx
fdiv qword [ecx + 0x1d]
mov edx, 0x64d828a4
arpl word [esp + ebp*2 + 0x3b67d101], dx
pop es
dec esi
mov ebp, 0xfeb8ab4
add dword [edi - 0x3e], ecx
outsd dx, dword [esi]
mov dword [0x21178332], eax
outsd dx, dword [esi]
outsb dx, byte [esi]
mov byte [ebx - 0x65], al
mov dl, 0x3b
int 0x45
outsb dx, byte [esi]
salc
xchg ecx, eax
fnstenv [edx + 0x159406a3]
popfd
mov eax, esi
pop esi
leave
pushfd
test byte [0x1004f0b5], 0xe5
jne 0x1004f1b6
leave
mov bh, 0x59
cdq
mov bl, 0x54
adc ebx, esp
insb byte es:[edi], dx
inc esp
aaa
lea edi, [ebp - 0x1f]
loopne 0x1004f108
call [eax + 0x54e31cb2]
xchg ecx, eax
sbb eax, 0x3be75cea
mov eax, 0x7db3936f
cmp edi, dword [eax + 0x7db3936f]
or al, 0x2a
pushal
rcr dh, cl
pop ss
dec esi
dec edi
pop es
jecxz 0x1004f0b0
cwde
in al, 0x20
add dword [ecx], ebp
inc eax
and bh, byte [ecx]
std
int 0xc4
test byte [edx - 0x61d71265], bl
or byte [ebp + 0x2e], 0x72
in eax, dx
sub byte [esi + 0x722e4d82], bl
lea edx, [edx*2 - 0x24d68a0f]
in eax, dx
das
in al, 0x3c
outsb dx, byte [esi]
enter 0xfffffffffffffda7, 0xffffffffffffff9b
pushal
sub al, 0x6d
inc ebx
cwde
push es
rcl dword [eax + 0xba761f5], cl
jae 0x1004f0cb
mov ah, 0xd3
fcmovne st(0), st(6)
js 0x1004f182
out 0xa3, eax
xchg esp, eax
outsb dx, byte [esi]
pop esp
fadd qword [esi]
push 0xc7bc611f
sbb dl, bl
arpl word [edx + 0x56b795df], di
jle 0x1004f198
cmp byte [esi], bh
lea esi, [esi + 0x223aa500]
sahf
inc esi
dec ebp
push 0x47
adc edi, dword [edx - 0x1f191edb]
in eax, 0x58
or esp, ebx
inc ebp
loopne 0x1004f0ea
outsd dx, dword [esi]
dec esi
dec ebx
test dword [ebx + 0x3d], ebx
inc edx
adc al, 0xa6
fld xword [eax]
push esi
mul byte [eax]
inc edi
or dh, cl
and dword [esi], 0x9f6c8916
stosd dword es:[edi], eax
dec ecx
out 0x51, al
or dword [esi + esi*8 - 0x4d], edx
sar byte [eax], 0x4b
mov ch, 6
mov cl, 0xce
push edi
mov ebx, 0x641c3c37
push 0xf2b2c2d2
adc eax, 0xc5e0466
mov al, byte [0x990b580c]
dec ecx
dec edi
pop ds
insd dword es:[edi], dx
pop ebx
dec ecx
bound esi, qword [edx]
mov ch, 0x58
out dx, al
xor byte [ebx + ecx*8 - 0x6b330101], bl
sub esi, dword [eax - 0x46da6474]
pop esp
mov eax, 0x4675c1fc
push 0x1ce21b0c
wait
and eax, 0xb85c67b9
cld
sal dword [ebp + 0x46], 0x68
or al, 0x1b
loop 0x1004f1c3
xchg cl, dh
mov al, byte [0xc936083e]
cmpsb byte [esi], byte es:[edi]
rcl dword [esp + edx - 0x70a5a77f]
popfd
ret 8
adc byte [edi + ecx - 0x7c], al
nop
add byte [eax], al
add byte [edx], al
movsb byte es:[edi], byte [esi]
lodsd eax, dword [esi]
sal al, cl
dec esp
push eax
lea edx, [ebx + 0x530d3325]
test dword [edx - 0x3d], esp
aaa
int 0xb4
pop ss
add al, 0x42
push 0xffffffffffffffff
xor edi, ecx
dec ebp
adc byte [ecx], bl
in al, 0x8f
add dword [ebx - 0x66], edi
cmp edi, 0xe
adc dword [eax - 0x58], esp
adc dl, byte [esi - 0x496c6aeb]
cmp byte [edx + 0x65], al
pushfd
cmp dword [ebx + 0x332e18f0], edx
lodsd eax, dword [esi]
sbb edx, dword [ebp - 0x29]
or eax, 0xea5f566b
mov al, cl
xor eax, 0x8a4b3327
cmp al, 0x23
cmp ch, byte [ebp - 0x577d61d2]
push ds
sub al, al
stc
daa
xchg ecx, eax
int 0x5b
lodsd eax, dword [esi]
push cs
and al, 0x3f
std
add dh, byte [esi - 0x80]
sbb eax, 2
call [esi + 0x6657cd3d]
jle 0x1004f1e8
or ebx, ebx
je 0x1004f280
push ebx
mov ebx, 0x306f6e94
add eax, 0xb676b9cd
pop ebx
pop ds
jne 0x1004f265
div byte [ebx]
push edi
cld
imul ecx, dword [edx - 0x47], 0x1ed73d2
add dword [ecx + ecx*8 - 0x24], esi
nop
popfd
sub esp, 0x108
mov eax, dword [0x10170c30]
xor eax, ebp
mov dword [ebp - 4], eax
push esi
push 0x103
pop ss
adc byte [ebx], dh
lds ecx, [ecx + 0x6856fc45]
add eax, dword [ecx]
add byte [eax], al
pushfd
test byte [0x1004f368], 0x48
je 0x1004f369
xlatb
lds esp, [eax + ecx*2 - 0x46]
in eax, 0xe6
cmp eax, 0x9731c65a
pushfd
int 0xd6
jge 0x1004f2ce
jge 0x1004f268
inc ebp
imul ebp
or bh, byte [edi - 0x5316ef1e]
add eax, 0x33bcebbe
and byte [edi], dh
mov esi, 0x2033bceb
aaa
adc cl, cl
sub al, byte [edx]
inc esp
push 0x1dfccf11
in eax, dx
shl byte [ebx - 0x1a3be32d], cl
mov al, byte [0x11db11da]
pop eax
maxps xmm7, xmmword [ebx - 0x3f]
jnp 0x1004f336
mov ah, 0x77
nop
push cs
imul ebp, dword [ecx + 0x174b05ca], 0xe8018f59
add eax, ebp
jns 0x1004f2da
jg 0x1004f29e
in eax, 0x50
xchg dword [ebp + 0x78bb140e], ecx
imul esp, dword fs:[ebx], 2
sbb al, 0x8e
mov ebx, 0x236b6478
add bl, byte [esi + ecx*4]
xchg esi, eax
inc ebx
adc eax, 0x6ef3a718
cli
loopne 0x1004f300
mov eax, 0xecedfdd4
mov ecx, 0x135227bd
push ebp
xchg byte [esi + 8], dl
mov esi, 0x7c907ce1
les eax, [edx + 0x4f8a7b67]
and byte [edi + 0x7b], 0x8a
dec edi
ficomp dword [edi]
lds ebp, [edx + 0x69b1ee7e]
add al, bh
rcr cl, cl
mov cl, 0x1e
sal byte [eax - 0x4fb0defe], 0x9e
xor al, 0xf5
aaa
popfd
sbb eax, 0x8258f91
jno 0x1004f2bb
dec edx
in eax, 0x5e
xor dword [edx], ecx
stosd dword es:[edi], eax
or byte [edx + ecx*8 + 0x366171b7], ah
cmp cl, cl
add edi, dword [ebx]
enter 0x558f, 0xffffffffffffff89
les ebx, [ecx + 0x26]
arpl word [ebx + ecx*4], sp
int 0xa8
cli
call 0xf411ad7c
xchg ecx, eax
xchg edx, eax
les esi, [eax + 0xb3f23f4]
cmp bh, ah
mov dword [eax + 0x42], edx
mov ebp, 0x6790c5b2
ror dl, 1
or ecx, ebx
adc dword [ecx + 0x5e], 0x1c1ee2e5
xchg ecx, eax
pop ebx
push ecx
movsb byte es:[edi], byte [esi]
popfd
lea eax, [ebp - 0x107]
push 0
push eax
pushfd
test byte [0x1004f3b3], 0xd1
jne 0x1004f3b4
and eax, 0x9f5c0cba
xchg ebp, eax
inc esi
pop es
jecxz 0x1004f3cd
xchg ecx, eax
pushfd
push ds
or ah, bl
lodsd eax, dword [esi]
cmc
sub al, 0x1e
dec edx
std
dec eax
sbb al, byte [edi + 0x66]
jle 0x1004f3c9
xor dword [ecx + edi*8], edi
cmp al, 0xf9
xor dh, byte [edx - 0x4825e01e]
adc bl, byte [ebp + 0x6613d7e3]
dec ebx
fidiv dword [edi - 0x281c62ee]
adc esp, dword [esi + 0x4b]
insb byte es:[edi], dx
jge 0x1004f387
clc
xchg edi, eax
cmp edx, dword [edi + eax - 0x47bc29fe]
popfd
mov esi, ecx
mov byte [ebp - 0x108], 0
pushfd
test byte [0x1004f3db], 1
jne 0x1004f4dc
add dword [eax], eax
add byte [ebp + ebx*8 - 0xf], bh
jl 0x1004f3ab
invalid
int1
stc
popal
jae 0x1004f3d5
out 0xda, eax
push 0xffffffffffffffdc
fisubr dword [edx - 0x24]
dec edx
in eax, 0xf9
stc
popfd
dec ecx
ja 0x1004f397
pop edi
push ecx
pushfd
lds ebx, [edi - 0x7c]
outsd dx, dword [esi]
adc dword [ebx + esi*8 + 0x747b5c9a], edi
fsubr dword [edi + 0x10]
lea esp, [esi]
adc eax, 0xf2c6afd4
pop ds
and eax, 0xf85c27bb
jno 0x1004f39e
call 0x6d87db
mov esi, 0xc4550405
adc al, 0x37
adc byte [esi], 6
mov word [ebp - 0x20], ds
test byte [edx], 0xe1
sub bl, byte [esi + 0x70036000]
add ecx, dword [ebx]
mov ebp, 0x3457f580
jae 0x1004f441
insb byte es:[edi], dx
cmp dl, cl
cmc
mov ah, 0xd2
and dword [ecx], 0x577fcdc7
daa
add al, 0xbc
xchg edi, eax
in eax, 0x83
xchg ecx, eax
lahf
or dword [esi], ecx
jae 0x1004f3da
jne 0x1004f4aa
xchg ebp, eax
cmp al, 0x73
inc ebp
imul eax, ebx, 0x2d519686
sbb cl, byte [ebx + 0x71cfd4b]
inc edi
inc ebx
xlatb
jnp 0x1004f46b
int3
push 0xffffffffffffff81
cmp edx, dword [ecx - 0x5f]
pushal
salc
inc ebp
ja 0x1004f48b
fild word [ecx + 0x1f370986]
xchg ecx, eax
jge 0x1004f4fc
das
cmc
lodsb al, byte [esi]
pushfd
cmp dword [esi + ecx*2], edi
js 0x1004f427
cli
or eax, 0x976a1905
mov ebx, 0xf9a2aaf1
les eax, cs:[0x3f6d5c76]
add eax, 0xbb976a19
int1
stosb byte es:[edi], al
mov byte [0x5c42ef9], al
jbe 0x1004f4f5
insd dword es:[edi], dx
aas
push edx
pop esi
or ah, byte [edx + 0x17fe3c35]
sbb ah, bh
int 0xbe
adc dword [esi], eax
mov edi, 0x5149b591
xchg ecx, eax
mov ch, 0x49
push ecx
in eax, 0xe8
add al, 0x9d
sbb dword [edi - 0xa4472a2], esi
movsb byte es:[edi], byte [esi]
cld
mov ebp, 0xb6ee652b
lea esp, [ebp + 0x7d81e423]
dec esp
aam 0xaf
pop edi
sti
adc byte [edi - 0x48021ead], 0x1a
std
mov bh, 0x1a
mov al, byte [0x4fa705c4]
dec esp
popal
popal
rol esi, 0x5f
popfd
call fcn.1011df60
lea eax, [ebp - 0x108]
pushfd
test byte [0x1004f5dc], 0xb5
jne 0x1004f5dd
add byte [ebx], bl
or byte [esi + ebp*2 + 0x11adae65], dl
mov dl, byte [edx - 0x298f1a48]
sbb ecx, dword [eax]
xchg esp, eax
outsb dx, byte [esi]
scasb al, byte es:[edi]
lodsd eax, dword [esi]
adc dword [edx + 0x70e5b892], ecx
salc
sbb edx, dword [edi - 0x17]
mov edi, dword [ebx - 0x1362dcdb]
ja 0x1004f4d8
xchg esp, eax
out dx, eax
xor eax, 0x7ac48037
dec edi
stosd dword es:[edi], eax
xchg ebx, eax
pop ecx
in eax, dx
aad 0xfe
adc eax, 0xd9dfd7ab
mov eax, 0xff3f0542
pushal
in al, 0x40
add eax, 0x3660ff3f
in al, 0x40
push edi
lahf
lea esp, [0x77f1dd73]
js 0x1004f59d
js 0x1004f4ce
pop esi
jbe 0x1004f524
das
div edi
mov al, byte [0x5afce9e6]
insb byte es:[edi], dx
xor al, 0xa8
pop ss
stosd dword es:[edi], eax
jle 0x1004f59c
pop edi
movsd dword es:[edi], dword [esi]
pop ss
loopne 0x1004f5c3
mov al, byte [0xff422d96]
add eax, 0x26a81338
dec ebp
pop ecx
cmp al, 0xdf
mov ch, 0x1b
insb byte es:[edi], dx
or al, 0x66
jbe 0x1004f593
adc byte [ebp + 0x5a], dh
dec esi
and ah, byte cs:[0x7469fcc4]
lea edi, [ecx]
push esi
mov bh, 0xb7
sbb dword [eax], esp
add eax, 0x6c13a49b
inc esi
pop ss
jns 0x1004f5ac
lahf
mov ebp, dword [eax - 0x2f73ce18]
lahf
push ebx
mov al, 0xcb
mov cl, 0x5a
arpl word [edx + 0x23d4956f], bp
sbb byte [edx - 0x2c], 0xc0
or dh, ah
mov eax, dword [0x5342e297]
and eax, dword [edx + 0x8c0d45a]
out 0xa1, al
xchg edi, eax
loop 0x1004f5e0
inc edx
push ebx
aas
fsubp st(0)
mov al, byte [0xb23eabd6]
add byte [ebp + 0x11e36e80], cl
outsb dx, byte [esi]
jecxz 0x1004f5c0
mov ebp, 0x7db9a58a
sbb dword [edx - 0x9eb39e4], esp
mov ah, byte [ebp - 0x5de68247]
sbb al, 0xc6
adc al, 0xf6
mov byte [edi], ch
out 0xcd, al
mov word [ecx + 0x1a], fs
sbb ch, byte [esi - 0x18]
outsb dx, byte [esi]
call 0x152146d
cmpsb byte [esi], byte es:[edi]
push ds
dec ebp
int1
pop ebx
das
neg ebp
push cs
insb byte es:[edi], dx
lodsb al, byte [esi]
mov cl, 0x64
fmul dword [edi]
mov dword [edx], ebp
int3
outsd dx, dword [esi]
xchg ebp, eax
popfd
push eax
call fcn.100475f5
pushfd
test byte [0x1004f68c], 8
jne 0x1004f68d
adc dword [eax - 0x9630001], eax
add eax, 0x1004f68c
or byte [edi], cl
test dword [ebx - 0x80000000], ebx
test byte [ebp - 0x1e], bl
jno 0x1004f5c1
add byte [ebp + ebx*2 + 0xdc971e2], 0x73
add eax, 0xaa054a45
or eax, 0x4a450573
add eax, 0x279b86aa
stosb byte es:[edi], al
xchg byte [ebx + 0x60efe627], bl
wait
daa
out 0xef, al
pushal
stosd dword es:[edi], eax
cld
shr eax, cl
loopne 0x1004f627
mov esp, 0x5f0be7d4
pop ds
jle 0x1004f5b0
dec eax
xchg ecx, eax
inc ecx
loop 0x1004f5fe
pop esp
jae 0x1004f5e6
cmp byte [ebx + 0x71], 0x57
mov al, byte [0x8fc50e4e]
sub dword [ecx - 0x5c], ebp
movsb byte es:[edi], byte [esi]
push cs
jge 0x1004f61c
pop edi
inc edi
dec esi
pop dword [edi + 0x407add3c]
xchg esp, eax
add byte [eax - 0x1f], al
arpl word [edi - 0xee9bfc8], bp
das
dec edi
adc byte [ecx], ch
or edx, dword [edi]
or byte [edx - 0x49ca249], bl
lahf
jb 0x1004f65d
cmp byte [edx], al
push es
movsd dword es:[edi], dword [esi]
ja 0x1004f5db
mov edi, 0x63cec86
push esp
sti
lds edx, [ebx]
adc eax, dword [edi]
pop es
loop 0x1004f6d4
aas
imul edx, dword [ebx + 0x7d54ce55], 0x32
mov dh, 0x23
inc ecx
pop ds
cmp byte [edi + 0x49ab54ad], 0x3c
add dword [edx + 0x77], ebp
push edi
sbb al, 3
xchg esp, eax
loopne 0x1004f600
push ss
jb 0x1004f687
dec esp
add byte [ebx + 0x5033fbb0], ch
push eax
dec esp
cmc
das
fmul st(6), st(0)
popfd
lea eax, [ebp - 0x108]
pushfd
test byte [0x1004f738], 0x10
je 0x1004f739
cld
leave
jl 0x1004f6eb
bound edi, qword [esi - 0x545588c4]
sbb dword [edx + 0x3a], esi
aaa
xlatb
mov dl, 0x74
pop es
push cs
dec ebp
insb byte es:[edi], dx
dec edx
out dx, eax
fnsave dword [esi]
stosb byte es:[edi], al
arpl word [eax + 0x7c50c6c1], si
outsd dx, dword [esi]
mov al, 0xab
mov esi, 0x6b761a8e
and byte [ecx], 0xee
xchg ebx, eax
mov cl, 0x44
shr byte [ebx + 0x4b], 0x97
cmp byte [esi - 0x21], bl
sahf
push edx
push ebx
xchg esp, eax
in al, 0xef
jg 0x1004f73d
xchg ebp, eax
dec esi
cmp byte [esi], dh
mov ah, 0x6c
arpl word [ecx + 0x12075397], ax
sub al, byte [0x2679f94]
fsub st(5)
js 0x1004f73d
jbe 0x1004f732
dec edx
mov byte [esi + 0x3e7080f0], dl
xor dword [edi - 0x48], ecx
push esi
lahf
adc byte [edi + ecx*8], dl
jle 0x1004f780
out dx, al
sbb al, 0xbc
lahf
cmp dword [edi], edi
xchg ebp, eax
std
mov byte [edx - 0x7a], bl
bound ebx, qword [edi - 0x6d0fe00f]
mov ebx, 0xef31ed12
call 0x4ebab60b
mov ecx, 0xaba213c5
mov dh, 0xde
dec ebx
jg 0x1004f79f
xor ecx, dword [edi]
sub dl, dl
mov al, byte [0x47d9374]
and al, 3
popfd
push str.SMEM.tmp
adc al, 0x10
pushfd
test byte [0x1004f75d], 0xfb
jne 0x1004f75e
out dx, eax
sbb ebp, dword [eax + 0x1d1b81aa]
mov ah, 0xa8
pushal
inc ebx
test byte [esi + 0x7fbf7041], ch
rcl byte [ebx - 0x79], 9
popfd
push eax
call fcn.1011f130
add esp, 0x18
push dword [esi + 0x10c]
lea eax, [ebp - 0x108]
pushfd
test byte [0x1004f7e6], 0x7b
jne 0x1004f7e7
fnstcw word [eax]
add al, 0x78
mov al, byte [0x91099148]
int1
mov eax, dword [esi - 0x53a229ca]
dec eax
xchg ecx, eax
or dword [ecx + 0x36868bf1], edx
salc
pop ebp
lodsb al, byte [esi]
sbb bh, ah
outsd dx, dword [esi]
add al, 0x3b
mov eax, dword [0xa2ad0cd5]
sbb eax, 0xaa1847a1
imul edi, esp, 0xaebda8c8
cld
enter 0xffffffffffffbda8, 0xffffffffffffffae
inc edi
nop
or dword [edi - 0x57], eax
lodsb al, byte [esi]
mov ah, 0x32
push ss
jnp 0x1004f784
or dword [edi + 5], esi
sbb bh, byte [edi + 0x1b7abbce]
and al, 0x85
jge 0x1004f7d6
jbe 0x1004f824
mov ebp, 0x2f7f8410
pop edx
pop ebx
insb byte es:[edi], dx
mov ah, 0x96
mov edi, 0xdd0639ee
inc esi
fld qword [esi + 0x57]
push edi
stosd dword es:[edi], eax
mov word [ebp + 0x6b], cs
mov al, byte [0xf84633c8]
inc esi
clc
dec ecx
stosb byte es:[edi], al
cli
cmpsb byte [esi], byte es:[edi]
shr byte [edi], 0xcf
salc
jns 0x1004f7ce
cmc
std
mov cl, 0x9f
lodsd eax, dword [esi]
popfd
push eax
pushfd
test byte [0x1004f846], 6
jne 0x1004f847
dec ebp
sub edi, edx
or byte [edi], bl
sub al, 0xee
daa
and al, 0x35
sahf
or al, 0x36
add ecx, dword [edi + 7]
mov ah, 0xb8
and esp, edi
salc
xchg edi, ecx
int1
mov ebp, 0xc2b55f07
sbb esp, ebp
xor al, byte [eax + eax*2 - 0x1089f6d0]
push ss
je 0x1004f86e
jnp 0x1004f830
xchg dx, ax
fdiv qword [ebp - 0x58]
mov edi, 0x37394822
mov edi, 0xaae422c3
jns 0x1004f851
sahf
fistp dword [esi]
sbb byte [ecx - 0x79b6e328], 0xdf
stosd dword es:[edi], eax
sal byte [0x20d5f9dd], 0x36
jle 0x1004f86a
pop edx
jge 0x1004f7cc
popfd
mov ecx, esi
call fcn.10048949
mov ecx, dword [ebp - 4]
cld
xor ecx, ebp
pushfd
test byte [0x1004f866], 0x8e
jne 0x1004f967
push edi
das
cmpsb byte [esi], byte es:[edi]
xor byte [ebx + 0x6ba4a2fe], 0x88
movsd dword es:[edi], dword [esi]
outsd dx, dword [esi]
imul ecx, dword [eax - 0x3c1f905b], 0xffffffb6
popal
loopne 0x1004f833
mov dh, 0x61
daa
aaa
push ebx
enter 0x616, 0x26
imul edi, dword [esi + 0x32], 0x6e
mov word [ecx], es
mov ch, 0x51
mov edx, 0x1e78800c
mov dh, 0xb1
aas
fisub dword [ecx]
lodsb al, byte [esi]
into
add eax, 0x7ef485f9
daa
adc eax, 0xa2f5eb11
int3
fxch st(5)
pop ebx
jns 0x1004f97e
xchg ebp, eax
sbb dword [edx + 0x2f3f866c], edi
cdq
xor dword [ebp - 0x688c66c3], esi
scasd eax, dword es:[edi]
cmp eax, 0xebf7378a
clc
mov ch, bh
fcomp dword [edi - 0x40]
sbb ebx, dword [ecx + 0x48]
cld
salc
cmp eax, 0xcd72c96b
xor eax, 0x10c0e0f6
jecxz 0x1004f99c
pushfd
sub byte [ecx + 0x1b], al
pop esp
push esp
in al, 0xbe
push esi
loopne 0x1004f917
pop eax
sub ebx, dword [ecx + 0x11]
mov ecx, 0xe713f844
adc dword [ecx + ecx*4 - 0x51246d09], 0x1c5778e
pop edx
popfd
pop esi
call fcn.1011e48a
pushfd
test byte [0x1004fa40], 0x8e
jne 0x1004fa41
and cl, byte [edx]
jle 0x1004f93a
inc ecx
mov es, ebx
and byte [eax + 0x345ec63f], bl
bound edi, qword [edi - 0x41c98624]
neg dword [ebp + 0x6a8632dd]
popfd
je 0x1004f9a0
or bl, 0xac
scasb al, byte es:[edi]
int3
lahf
fdiv qword [eax]
mov esp, 0xbb55871e
adc eax, 0x451edee5
xchg edi, eax
mov dword [0x6106b22e], eax
adc cl, byte [edx]
push ebp
mov ebx, 0xe95e3f1c
fist word [ecx + edx + 0x7ce686a7]
mov ah, 0x11
stc
xor eax, 0x4d1c5ffd
jb 0x1004fa06
lds ecx, [esi]
pop esp
pop ebp
sbb ch, byte [esi + esi*8]
jecxz 0x1004fa09
sbb al, 0xc2
fld dword [ebx]
lahf
and al, 0x37
mov al, byte [0x91ec85cd]
arpl word [esi - 0x1c07f678], bx
les ebx, [eax + 0x7273df82]
jae 0x1004fa61
test al, 0x81
adc byte [bp + di + 0x6a], 0x9e
jb 0x1004f9ed
pop ebx
xchg ebx, eax
and edi, edi
je 0x1004fa59
jge 0x1004fa51
loop 0x1004fa04
test eax, 0x1f3fab90
stosd dword es:[edi], eax
aas
pop ds
xchg esp, eax
lds ebx, [ebp + 0x40ef96f7]
dec eax
shl ch, 1
push edx
popfd
not dword [esi - 0x2fb7bf11]
in eax, 0x52
mov cl, 0xf6
add ah, byte [ebx + edi*4 - 0x5c]
xchg ecx, eax
jae 0x1004f9c4
test eax, 0x2c29295f
pop dword [esi + 0x4e]
pop edi
sub dword [ecx], ebp
sub al, 0x8f
inc esi
dec esi
add al, 0x88
add bh, bh
inc edx
xchg edx, eax
sti
sti
sbb ebx, dword [eax + 0x31d6327c]
mov bh, 0x8e
xor ebx, dword [ebp - 0x5f590a76]
lodsd eax, dword [esi]
xor eax, 0xf7961975
inc edx
mov dh, 0xad
popfd
leave
ret
int3
jne 0x1004fb63
xchg edi, eax
jge 0x1004fab0
push esi
salc
push eax
bound edi, qword [ecx]
pop ebx
cmp ebp, dword [ebx + ebp*2 - 0x2f]
jnp 0x1004fa93
imul edx, ecx, 0x7b
xchg esi, eax
xchg esi, eax
mov eax, dword [edi + 0x35abbc56]
xchg edx, eax
scasd eax, dword es:[edi]
adc esi, dword [eax]
ja 0x1004fa09
cld
leave
push ecx
mov dword [edi + 0x16], edi
jl 0x1004fa19
int3
jbe 0x1004fa1a
push ds
sbb byte [edx + 0x3764040e], 0xd2
fdivr dword ds:[ecx]
popal
leave
daa
in eax, dx
loop 0x1004fa94
push cs
xor eax, 0x8207b02a
cmc
lds ebp, [0x44d88dcd]
stosd dword es:[edi], eax
add byte [ebx + 0x39], al
jo 0x1004fa45
lodsd eax, dword [esi]
pop esi
call 0xa0aa2dc0
nop
xchg dword [edi], ebx
fidiv word [ebx - 0xc]
adc eax, 0x20dc7d32
mov ch, ah
push ecx
arpl word [esp + ebp*2 - 0x6b8ede46], ax
fldenv [eax - 0x4c]
mov edi, 0x3b11a581
xchg esp, eax
sub cl, byte [ecx + 0x2f]
sub eax, dword [eax - 8]
sub dword [edi - 0x36dbdd46], 0xf370706e
xchg edi, eax
cmp edi, dword [ecx]
in al, 0xf0
cmpsd dword [esi], dword es:[edi]
mov bl, ch
mov ss, word [ebp + edi + 0x34]
js 0x1004fa83
test edi, ebx
int 0x9c
xor ebp, dword [esi]
sub cl, dl
push ebx
and byte [edx - 0x2d], cl
adc eax, 0xc71a1cd7
test esp, 0x60ce73e7
jbe 0x1004fb0e
add eax, 0x6c336590
cmpsd dword [esi], dword es:[edi]
push eax
or byte [edx + edx + 0x596e3f8], 0xcf
pop ss
sbb esi, dword [edi + eax*2]
inc edi
and byte [esi + 0x5ee95c39], ch
into
mov ebx, 0x238a2cd6
insd dword es:[edi], dx
and al, byte [ebp + edi*4 - 0xf999f23]
xor eax, 0x25c489de
pushal
lodsd eax, dword [esi]
jg 0x1004fba8
dec ebx
mov ecx, 0xe7757177
sub byte [esp + eax*4 + 0x2bb78c7b], cl
pop edx
outsb dx, byte [esi]
in eax, dx
dec ebx
sub al, ch
push eax
cmp eax, dword [eax + 0x6b]
aam 0x7a
insd dword es:[edi], dx
mov esp, 0x5216558
cmp byte [esi + 0x687f798a], bh
push ss
xor eax, 0x3997270d
popfd
sub esp, 0x514
mov eax, dword [0x10170c30]
pushfd
test byte [0x1004fc4e], 0x4c
jne 0x1004fc4f
xchg ebx, eax
stosd dword es:[edi], eax
bound esp, qword [ebp + 0x4aa1e3d7]
mov ebp, 0x8107fa7c
or ebx, dword [edi]
push edi
out dx, al
cmc
adc eax, 0x1e79431e
in al, 0x32
fnstcw word [ebp + 0x78999bf9]
sub dword [ecx - 0x27], eax
sbb byte [ebx*4 + 0x76298696], dl
mov cl, 0x8f
jae 0x1004fbc6
sbb byte [esi + 0x134da45], ch
cmpsd dword [esi], dword es:[edi]
cld
cld
imul dword [ebx + 0xc]
imul edi, dword [edi], 0xffffffde
mov cl, 0xfc
adc edi, esp
stosd dword es:[edi], eax
jbe 0x1004fb57
push ecx
pop esi
cmp al, byte [edx - 1]
int1
popfd
jl 0x1004fc37
nop
sbb byte [ebx + ecx*2], dl
cwde
mov eax, dword [eax]
inc edi
and bh, byte [edi]
sti
test al, 0xeb
pop edi
rcl bh, 1
sbb dword [ebp + edi*8 - 0x6258ac1e], esp
cwde
xchg esp, eax
mov ebp, 0x271cdcb
add byte [ebx + ebp*8 + 0x750b26], al
or esi, dword es:[ebp]
insb byte es:[edi], dx
sti
imul edi, dword [ecx + 0x3053af71], 0xf8d15108
and eax, 0xe0927a74
xor dh, ah
ficom dword [esi]
loopne 0x1004fc31
out 0xda, al
push ss
sub eax, 0x385b5661
cmc
adc byte [edi + 0x2d], bl
loopne 0x1004fbff
push esp
dec ebp
movsb byte es:[edi], byte [esi]
je 0x1004fc88
inc esi
adc eax, 0xa8f22e2f
mov dh, 0xca
sbb dword [ebx], eax
mov eax, 0xb4b564c2
xchg esi, eax
sahf
scasd eax, dword es:[edi]
mov bh, 0xfb
cwde
push ebx
shl dword [esi], 1
movsb byte es:[edi], byte fs:[esi]
lahf
cmpsb byte ss:[esi], byte es:[edi]
enter 0xffffffffffffada9, 0x68
sub edx, esp
mov byte [ebx + 0x31], al
adc al, 0xb8
call 0x1c65ca9a
xor dword [ecx + 5], 0xe50ba33e
adc eax, 0x486ecce9
jnp 0x1004fbeb
popfd
xor eax, ebp
mov dword [ebp - 4], eax
pushfd
test byte [0x1004fc7e], 0xc6
jne 0x1004fc7f
mov edx, 0x5ea1025a
jb 0x1004fc4f
xor dword [ecx + 0x5cdf839c], ecx
pop esp
insb byte es:[edi], dx
xchg edx, eax
mov ebp, 0xee801e20
ficom dword [edx + 0x17]
mov bh, byte [edi]
add byte [ebp + 0x42b314cd], 0xec
popfd
push ebx
pushfd
test byte [0x1004fcd2], 0x52
push edx
jne 0x1004fcd3
dec eax
cli
mov byte [eax - 0x69], dl
and esi, ebp
cli
aaa
jb 0x1004fd12
xlatb
lodsb al, byte [esi]
scasd eax, dword es:[edi]
or dword [edi + eax*4 - 0x242002c9], 0xffffffdf
lds ecx, es:[ecx + 0x2b]
js 0x1004fd21
mov al, byte [0x460c4478]
cmc
push edx
inc eax
or byte [edi + 0x553190ac], dh
xchg ebp, eax
jbe 0x1004fc6b
inc ebp
js 0x1004fd12
and eax, dword [edx + 0x5b]
fisubr word [ebx]
jb 0x1004fc6c
int 0xe8
add eax, 0xfa293f45
rcr dword [ebx + 0x68], cl
into
or dword [ebp + 0x7a], ebx
neg ah
popfd
push esi
push edi
mov edi, dword [ebp + 8]
push 1
mov esi, ecx
pushfd
test byte [0x1004fd12], 0xda
jne 0x1004fe13
pop edx
lea ecx, [edi]
dec ebp
js 0x1004fc8a
cmp ebp, dword [esi - 0x6acfc526]
xchg esp, eax
xor eax, 0xa2d49cc6
pushal
mul dword [esi + 0x6d]
and eax, 0x304bc8cd
test eax, 0x35c42c6e
adc byte [eax + edi*4], 0x55
pop ebp
sbb eax, 0x7de25f0d
pop edi
loop 0x1004fd92
and eax, 0xf32771ec
outsd dx, dword [esi]
push edi
out dx, al
dec eax
mov edi, 0xf2a89ff5
test al, 0xf2
adc dword [eax], ecx
fcom qword [esi - 0x2e]
les ebp, cs:[esi - 0x1e6b91b8]
jl 0x1004fd2a
scasb al, byte es:[edi]
dec eax
outsb dx, byte [esi]
xchg esp, eax
loope 0x1004fdac
stc
adc byte [eax], bh
aad 0x11
das
xchg ebp, eax
and al, 0x76
mov al, 0x8b
aad 0x8c
sub byte [ecx], dh
lea ebx, [edi + ebx*4]
loop 0x1004fd49
adc byte [ebx], cl
sub al, byte [esi - 0x35adf150]
mov esi, 0xd4a3a56c
or eax, 0xfb8a4277
jae 0x1004fd4b
push cs
push edx
retf 0x6cbe
sti
bound ebp, qword [eax - 0x30]
pop esp
test dword [ebx - 0x65], ecx
and ecx, 0xffffffbe
add ebx, esp
stosd dword es:[edi], eax
push edi
sbb byte [edx - 0x13], bh
xor al, byte fs:[esi]
popfd
fnstsw word [edi + 0x670f9941]
stc
pushfd
pushal
mov dl, byte [esi + ebx*8 + 0x38da16c4]
test al, 0xcc
sbb esi, dword [eax]
add al, 0xd0
mov dh, 0xd
mov ch, 0x80
adc al, 0x57
les eax, fs:[ebp - 0x5b]
mov gs, ecx
pop esi
mov dword [0x1e3399ef], eax
out dx, eax
cdq
xor ebx, dword [esi]
jnp 0x1004fddd
in eax, dx
loopne 0x1004fdd5
push esp
fnsave dword [eax + 0x788cf8d9]
popfd
les edx, [edi]
sub al, 0x7d
into
pop edx
jnp 0x1004fd76
invalid
dec ecx
sub dword [esp + ebx*4 - 0x76b2a5a1], ebx
cmp dh, bl
test al, 0xa2
xlatb
fadd dword [eax]
push es
test dword [edx + 2], edx
insb byte es:[edi], dx
sub ecx, esi
push edx
add ch, byte [ebx + ebp - 0x32]
inc edi
in al, 0xd3
mov ecx, 0x85c1d1a0
lodsd eax, dword [esi]
sti
test al, 0x9f
and al, 0xf7
mov ch, 0x42
dec ecx
or al, 0x17
rcr dword [esi + ebp + 0x60], 1
je 0x1004fdbc
loope 0x1004fe3b
pop edi
push esp
dec esi
xor al, 0x78
sahf
bound edx, qword [ebp - 0x4e1070bb]
add byte [edx], al
out dx, al
lahf
jo 0x1004fe33
jns 0xad3b0799
xchg edi, eax
shl dword [ecx], cl
std
dec ebx
sub eax, 0x31689b26
arpl word [ebx - 0x34], ax
jg 0x1004fda0
jbe 0x1004fe0c
cmp eax, 0x548243b8
mov eax, 0xe9348695
xor al, 0xe9
sal eax, 1
pop ebx
aam 0xc3
popfd
xor ebx, ebx
push str.SeCreateGlobalPrivilege
pushfd
test byte [0x1004ff1f], 0x4b
jne 0x1004ff20
add byte [eax], al
add byte [edi + ebp*4 - 0x5d], bh
mov bh, 0x46
jno 0x1004fe49
jl 0x1004fdda
mov dword [0x7146b736], eax
sbb byte [ebx], ah
jo 0x1004fe55
and esi, dword [eax + 0x21]
and dword [edx + edx*8 + 0x4ba57b50], ecx
mov edx, ss
push eax
jnp 0x1004fdde
dec ebx
adc eax, 0x9d1cfce5
in eax, 0xfc
sbb al, 0x9d
mov eax, dword [edi + eax*2 - 0x54d1e4e3]
scasd eax, dword es:[edi]
popfd
fcmovnbe st(0), st(6)
salc
mov al, 0x9d
xchg esi, eax
test byte [esi - 0x5e46e39c], dh
mov byte [edi + 0x44f6cfc9], dl
mov esp, 0x9df447a4
dec ebx
inc esp
popal
push 0xfffffffffffffff7
leave
iretd
outsd dx, dword [esi]
test ch, al
inc edi
or eax, 0xf0f702d8
in al, dx
dec esi
outsb dx, byte [esi]
xchg edi, eax
push cs
xchg dword [esi + 0x748b9037], ebp
push ebx
xchg ecx, eax
fmul st(3)
out dx, eax
jnp 0x1004fe26
inc ecx
enter 0xfffffffffffff6c5, 0xffffffffffffff9a
mov ss, edi
nop
pop esi
in al, 0xd1
or dword [ebx], esp
push ds
push edi
cmp eax, 0xf4e37e0a
mov edi, dword [ebp - 0x6e9094c2]
jl 0x1004fed6
or bh, byte [esi - 0x1d]
hlt
salc
add al, 0x78
and dword [esi + 0x10], edi
mov dword [0x14d76bec], eax
jle 0x1004fe63
jbe 0x1004fe8f
cmp dl, byte [edi + 0x14]
cmp ebp, dword [ebx]
imul eax, dword [ebx - 0x77], 0x6399cbe8
mov bh, 0xb3
jecxz 0x1004fefc
cmp eax, 0x67f7bed7
in al, 0xff
push esi
jge 0x1004ff40
sbb al, 0x28
push es
leave
adc cl, dl
enter 0xfffffffffffff497, 0x3b
cmpsd dword [esi], dword es:[edi]
sub eax, 0x484e8a3a
pop esp
inc dword [edi + 0x76806dfe]
mov eax, dword ds:[0x345237de]
mov bh, 0xca
sub dword [eax], 0xffffff80
inc edx
imul dword ss:[esi]
popal
mov word [ecx], fs
fadd st(5), st(0)
pop ebp
sub dword [ebx + 0x7a], ebx
cmp dh, byte [esi]
push edi
mov eax, dword [0x3a376bb6]
xchg esi, edi
insd dword es:[edi], dx
xor byte [esi + 0x3e], 0xa1
fidiv word [edi]
push edx
xor al, 0xb7
retf 0x2883
add dword [ebp + 0x65], esp
das
jnp 0x1004ff25
fsubr st(1)
mov dl, 0x82
scasd eax, dword es:[edi]
dec edx
xor eax, 0xa90da837
cld
rol byte [eax], 1
cmp ebx, dword [ebp - 0x76]
dec edx
rcl byte [ecx], 0xcd
pop esp
test eax, 0x82cbb40a
mov bl, 0x4a
inc edi
popfd
mov dword [ebp - 0x514], edi
pushfd
test byte [0x1004ffe5], 0x21
je 0x1004ffe6
invalid
rcr dword [ebx - 0x7a], 0x3d
add al, 0xa
add eax, 0x7003f918
out 0xf9, eax
inc ebx
xor cl, 0x55
int1
push ebp
or dword [eax], edi
jg 0x1004ff7e
idiv dword [ecx + ebp*8 - 0x25]
mov ebx, 0x3112feab
mov dh, 0x18
and ah, byte [edx]
test al, 0xfb
imul ebp, dword [ecx], 0x1f
adc al, 0x5c
cmp eax, 0x6733ee92
push edi
ja 0x1004ffb0
outsb dx, byte [esi]
loop 0x1004ff65
leave
cmp cl, cl
int 0xa5
fstp dword [bp - 0x375d]
bnd jle 0x1004ff73
mov dword [0xfb7ef2c8], eax
cdq
dec ebx
inc eax
mov esp, 0xa2c68b02
pop edi
xchg ebp, eax
outsd dx, dword [esi]
adc byte [ecx - 0x23f7ee13], cl
pop ds
add ecx, esp
xor dword [edi], ebp
nop
mov al, byte [eax]
and ax, 0xfcb3
adc byte [ecx - 0x75], ah
popfd
xor dh, byte [edx]
test eax, 0xa9cc8735
imul ebx, dword [eax], 0x33828a8c
jle 0x1004ff46
invalid
das
dec ebp
inc ebp
add al, dl
popfd
sub dword [esi + 0x7d], ecx
and eax, dword [ebx]
popfd
pop es
cmc
test byte [ebp - 0x13606cc], bl
dec esi
jge 0x1004ffd6
add ebx, dword [ebp - 0x627b0af9]
xor al, 0xf9
leave
invalid
cmp eax, 0xbc53155a
mov eax, dword [0xee0383ec]
inc esp
and ebp, 0x833f93e1
sub eax, 0xe7d3bfb7
mov al, byte [0xfad7e474]
xlatb
cli
inc esp
jnp 0x1004ffbd
salc
mov edi, 0xfb85a221
aam 0xb5
cmp al, 0xd5
push cs
popfd
mov dword [esi + 0x108], ebx
call fcn.1004ec5d
test eax, eax
jne 0x1004fffc
call dword [sym.imp.KERNEL32.dll_GetLastError]
push edi
pushfd
test byte [0x100500e5], 0x1b
add eax, 0x850f1b10
fild dword [eax]
add byte [eax], al
jne 0x100500e6
push ebp
mov esi, 0x5e14e1cc
mov dh, 0xce
popal
push ds
fcmovne st(0), st(1)
or eax, 0x75107507
and eax, 0x161f55fc
jne 0x10050082
sal dword [esi + 0x7fa5d230], 0xb5
dec ebp
mov ch, 0x4d
movntq qword [edi - 0x1b719009], mm6
cmp byte [eax + edx*2 - 0x77a63520], ch
mov dl, 0x3e
mov edi, 0xe6daa988
sub ebx, edx
jno 0x100500a3
push eax
loopne 0x10050002
pop ecx
mov byte [edx - 0x567740c2], dh
invalid
fist word [esi]
jl 0x10050005
loopne 0x1005005b
adc eax, 0x9705770
add dword [ebp + 0x35f6986b], edx
test byte [esi], ah
nop
sbb edx, eax
mov al, 0xe
add esp, edx
sal byte [eax - 0x1dfcd1f2], 1
ror dword [edi - 0xa], 0xaa
mov ecx, 0x45a06c38
out 0x44, al
insd dword es:[edi], dx
cmp ah, byte [esi]
xor dl, dl
pop esi
imul eax, dword [eax + 0x4637344c], 0xfffffff9
adc dword [eax], 0xf5ce9268
push esp
cmc
xor al, 0xc1
xlatb
cli
rcl edi, 0xfa
xchg edi, eax
cmp ecx, dword [esi]
xacquire xchg byte [ebx], cl
mov cl, dl
test eax, 0xfe9972eb
jle 0x1005008f
jb 0x1005002a
invalid
and dh, ah
lock add dword [ebp + 0x1fec69f8], ebx
add eax, 0x7c20a2ea
test eax, 0x7936e7b7
lea ebp, [eax - 0x69a3b401]
imul ebp, esp, 0xa2ea051f
and byte [ecx + ebp*4 - 0x49], bh
out 0x36, eax
jns 0x10050035
mov bh, 0xe7
jns 0x10050035
test al, 0xff
dec ebx
pop esp
xchg esi, eax
sub dword [ebp - 0x1605b80], ebp
xor byte [edi], 0xd7
push ebx
sub al, byte [edi]
les ebx, [0x7e2845e4]
mov ebx, 0x90c9fcb
mov edi, 0x3ca60a21
push esi
insd dword es:[edi], dx
push ss
jecxz 0x10050127
in al, dx
mov es, edi
add al, 0x1b
adc dword [edx], esi
mov ah, 0x54
aas
inc esp
dec ebp
outsb dx, byte [esi]
dec edi
test ch, dl
mov byte [0xcc9ff9c6], bh
popfd
mov edi, 0x50c
push edi
push ebx
push 4
push ebx
pushfd
test byte [0x10050108], 0x31
jne 0x10050109
scasd eax, dword es:[edi]
add bh, byte [ecx - 0x702df384]
xchg ebp, eax
pop esi
jno 0x1005009a
mov bh, byte [ecx]
popfd
push 0xffffffffffffffff
call dword [sym.imp.KERNEL32.dll_CreateFileMappingA]
mov dword [esi], eax
pushfd
test byte [0x100501d6], 6
jne 0x100501d7
lahf
stosd dword es:[edi], eax
bound ecx, qword [0x29990fae]
setns byte [ecx]
enter 0xffffffffffffa962, 0x23
xor ebp, dword [edx]
xor al, 0xe9
push esp
mov ebp, 0xb18f8e68
or eax, 0xd3f431c5
aaa
inc edi
inc edx
and ecx, dword [eax + 0x736b7313]
outsd dx, dword [esi]
sti
test dh, bl
aaa
dec ecx
push ecx
pop ebp
dec ebx
adc byte [edi + 0x29], ah
inc ebx
xchg bh, dl
outsb dx, byte [esi]
push 0xffffffffffffff89
sub ecx, dword [ebx - 0x4b]
inc esi
inc ecx
movsd dword es:[edi], dword [esi]
popfd
add byte [edi + edx], 0xef
inc ebp
aad 0xb4
call 0xf299dfac
xchg edi, eax
sar ebp, 1
loop 0x1005017b
pushfd
daa
mov esi, 0xd2580594
inc ecx
pop esi
bound edx, qword [ecx - 0x28]
push 0x4f
push ecx
fsubr dword [edx + 0x4f]
jl 0x1005018a
or dword [ebp + ebp*4 + 0x297d2aa4], edi
test eax, 0x8e66797f
fisubr dword [ebp - 0xf]
jns 0x100501f2
mov ds, edx
insd dword es:[edi], dx
int1
mov word [0x6739cc1e], ds
xor byte [edx], dh
leave
lodsb al, byte [esi]
mov byte [0xfb9a37de], dl
sub al, 0xd1
xchg esp, eax
or eax, 0x80cece30
mov bh, 0x4c
mov al, 0x6b
fistp dword [edx + 0x63]
mov eax, 0xb00e82e3
fadd dword [esi]
xchg esi, eax
sti
inc edx
jge 0x10050234
mov ds, edx
jecxz 0x100501d9
sub dword [eax + 0x8ab1aff], edx
inc esp
mov edi, edx
xchg edx, eax
cmpsb byte [esi], byte es:[edi]
and al, 0x82
cmp byte [ecx - 0x7e], dl
fisub word [ebp - 0x11b87055]
daa
popfd
cmp eax, ebx
jne 0x1005070e
ret
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp dword [esi + 0x10c], ebx
jne 0x1005041e
add al, byte [eax]
add byte [edi - 0x18], dl
add eax, 0x59000803
add byte [eax], al
push edi
call fcn.100d04fd
pop ecx
pushfd
test byte [0x100502d8], 0xca
jne 0x100502d9
or ch, ch
adc dword [ebp + 0x3e5fcc17], edx
mov esi, 0x373e3f7
shl dword [edi - 0x70], 0xd1
jecxz 0x100501ef
outsd dx, dword [esi]
salc
mov ebp, 0x6fe06528
or edi, edx
inc byte [edi + 0x4b]
push esp
push ds
mov ch, 0x54
mov ebx, 0x4e48f0dc
add ch, byte [eax - 0x64]
pop esi
push esp
outsb dx, byte [esi]
pop esi
mov bh, 0xf4
mov dl, 0xd2
sbb ebx, dword [edx - 0x27aa9eea]
inc esi
add eax, 0xa2166b71
sahf
inc edx
push 0x7542ceea
outsd dx, dword [esi]
and eax, 0xd84c2f87
xor byte [edx + edi*2 - 0x5152d82d], bh
xchg dword [eax + 0x1f], ecx
imul edx, dword [ebx - 0x39], 0xaeba9114
dec ebx
in al, dx
cld
insd dword es:[edi], dx
das
in eax, 0xe1
jbe 0x100501f0
loope 0x100502e3
cmp byte [ecx - 0x16195cde], 0x74
outsd dx, dword [esi]
mov ecx, 0xe9e6a322
je 0x100502e4
xchg ebx, eax
leave
adc bh, bl
adc ch, dh
jns 0x100502bd
test eax, 0x51a9748b
sub dword [0x5f6936f8], 0x57a0017
push ecx
dec eax
ror dword [ecx], 1
mov esi, 0x1a856fdf
clc
dec eax
and bh, byte [ecx]
cld
je 0x10050247
sbb dword [ebx + edi*8 + 0x74], edi
cmp ecx, dword [edx + eax + 0x59]
jle 0x100502f5
jo 0x100502a6
push ecx
xor ebp, dword [edx + 0x40]
cwde
insb byte es:[edi], dx
pop es
adc byte [edi], ch
ja 0x100502b8
jb 0x10050282
fdivr st(3), st(0)
xor ebp, 0xffffffd0
test dword [edx], edx
aad 0x76
cmc
rol byte [ebp - 0x53892aee], 1
jbe 0x1005026b
lodsb al, byte [esi]
xchg ecx, eax
xchg edi, eax
dec edx
dec edx
stc
dec edx
adc dh, byte [esi + 0x3f45e465]
dec ebx
xchg ecx, eax
rcl al, cl
fst st(7)
sub bh, byte [edi - 0x498748fc]
xlatb
popfd
mov dword [esi + 0x10c], eax
cmp eax, ebx
jne 0x1005041e
test dword [esi], esi
add dword [eax], eax
add dword ss:[eax], eax
add byte [esi + esi*8 + 0x5038605], bl
adc byte [esi + 0xf], dh
test dword [ecx + 0x71000000], edx
xor al, 0x9d
pushfd
test byte [0x10050386], 0x76
jne 0x10050387
add byte [ecx + 0x34], dh
jno 0x1005032c
popfd
xchg ebx, eax
mov bl, ah
jg 0x100502fd
call [ebp + 0x40]
pop ebp
inc eax
add dword [edi], 0x42041274
mov edi, ds
push ebp
sub byte [esi - 0x4a], al
sbb dword cs:[ebx - 0x20efbdf5], ecx
mov al, byte [0x9e9f1f08]
push ecx
xchg esi, eax
jae 0x100502be
xor bl, byte [eax]
push ebx
xchg esp, eax
insd dword es:[edi], dx
enter 0x3ec7, 0x77
movsd dword es:[edi], dword [esi]
mov bh, 0x5b
pop ds
lodsb al, byte [esi]
or dword [ebp - 0x114556dd], 0x28da8ada
js 0x100502e2
or byte [ecx - 0x27], 0x8a
mov dword [esi], edi
stosd dword es:[edi], eax
jg 0x10050342
lock add byte [eax], bh
add byte [eax], bh
add dword [bx + si], esi
push esi
and bl, byte [edx]
jl 0x1005037d
cmp bl, byte cs:[eax - 5]
add eax, 0x6a5ddc5f
shl dword [eax + 0x3e6a6ded], 1
pop eax
imul ecx, dword [ebp + ecx*2 - 0x76], 0xdb241bb
pop eax
push cs
push ecx
cmp bh, byte [0xe2555333]
rcl byte [ebp + 0x4a2aaf45], cl
dec ebp
xlatb
movsb byte es:[edi], byte [esi]
xor ch, byte [eax]
push 0xc95c3581
leave
and eax, 0x359005f7
cmp byte [esi], ch
inc ebp
popfd
xor eax, eax
pushfd
test byte [0x10050417], 0xdb
jne 0x10050418
fld dword [esi - 0x66c3d476]
cld
xchg byte [edx - 0x366c3d5], cl
cmp eax, dword [ebp - 0x2f]
imul esp, dword [0x7dd018ca], 0xc24d4e92
xchg esp, eax
pop edi
jae 0x10050399
inc ebp
sub dh, byte [esi - 0x7b]
test byte [0x8b946e6e], 0xa5
add eax, 0x8b946e6e
movsd dword es:[edi], dword [esi]
aad 0x37
insd dword es:[edi], dx
sbb edi, ebp
pop eax
dec esp
out dx, al
test al, 0xc9
mov al, byte [ebp + 0x444b7238]
or bl, byte [edx - 0x3ec0c3af]
or edi, dword [eax - 0x6c440b8a]
rcl byte [ecx]
pop eax
pop edx
pop ebp
je 0x100503b5
jno 0x1005041f
pushal
xchg esi, eax
mov edi, ds
not bh
les edi, [esi - 0x51906f90]
mov eax, 0x5f63ce75
outsd dx, dword [esi]
test al, 0xba
xchg dword [ecx - 0x4ab7d3ac], ebp
jecxz 0x10050467
sub dh, byte [ebx]
mov bl, 0x2a
test ch, dh
dec ebx
jnp 0x10050412
scasd eax, dword es:[edi]
salc
inc edx
push edx
pop ds
push edx
push esp
les ecx, [ecx - 0x5c]
loopne 0x10050470
pop ebp
test eax, 0xefed128a
popfd
jmp 0x1005092d
lea ecx, [ebp - 0x510]
call fcn.10049068
push edi
lea eax, [ebp - 0x510]
push eax
pushfd
test byte [0x10050533], 0x35
je 0x10050534
invalid
pop ebp
popal
push ds
dec esi
sbb byte [edi + 0x71614e1d], bl
outsd dx, dword [esi]
movsb byte es:[edi], byte [esi]
shl byte [0x7dc67b70], cl
sbb eax, dword [ebx - 0x65886ca3]
inc ebx
lea esi, [eax]
enter 0x187f, 0x7a
fsub st(0)
jnp 0x100504ac
mov esp, 0x1df6d279
cmc
cdq
pop eax
mov bh, 0x73
js 0x100504eb
test eax, 0x27b63dda
inc esp
into
cmp eax, 0xf34427b6
into
inc esp
sub esp, ebp
or byte [ecx + 0x67c0b9b9], cl
aad 0x9d
mul byte [0x6822dab5]
adc byte [esi - 0x5e], dl
int3
pushfd
or eax, 0x397d7b35
or byte [esi + 0x38], dh
jns 0x10050481
por xmm2, xmmword [edi]
push dword [0x9c7f8d9b]
mov al, byte [0x74e1871a]
mov ecx, 0x71ef7fca
add dword [edi - 0x3a02a743], ecx
mov dl, 0x48
or dword [edi + 0x75], esp
pop ebp
xchg ebp, eax
xor esi, dword [esp + ebx*4 + 0x34]
and eax, 0x6eb8bef6
inc ebp
push esi
in al, 0x1d
aad 0x8d
out 0xf8, eax
les edx, [ebp + 0x60796c1d]
and al, 0xcc
mov esp, 0xa95adf98
mov ch, 0x27
stosd dword es:[edi], eax
outsd dx, dword [esi]
inc edi
mov fs, word [0xa0f762f5]
mov eax, 0x99125f37
in eax, dx
call 0xf4d8912e
mov eax, 0xad2fbcf0
adc esi, eax
bound edi, qword [eax + ecx*4]
rcl dword [eax - 0x1dffe94a], 0x91
lodsb al, byte [esi]
mov esi, 0x6173bbb6
faddp st(5)
scasd eax, dword es:[edi]
stc
mov dword [ebp + 0x4535990], ebx
cmp dword [ebx], ebp
pushfd
aam 0x6e
stc
dec eax
sbb eax, 0x2460796c
int3
popfd
push dword [esi + 0x10c]
pushfd
test byte [0x100505f8], 0x6b
jne 0x100505f9
clc
out 0xff, al
push 0xf079ac99
clc
clc
mov bl, 0xc3
adc byte [ecx], ah
lahf
lds eax, [edi]
or eax, 0x64e71a55
mov ah, 0x61
mov ch, 0x2a
aam 0x25
jbe 0x100505b8
cmp edi, dword [ebx + edx*8 - 0x6a]
mov dword [ebp + 1], ecx
cmp dword [edx], edi
xor esp, dword [eax + 0x398bb412]
dec ebp
pop edx
xchg dword [ebx + 0x7acd51ce], esi
fimul dword [eax + 0xe]
adc eax, 0xfb8adeea
int1
push ds
mov bh, 0x31
cmp eax, 0x66899d39
jecxz 0x10050553
adc bl, byte [eax + 0x57]
mov ecx, eax
pop ss
js 0x10050600
push 0xa0ea5c26
xlatb
or dword [eax + 0x73], esi
add eax, 0xef73ef4a
jnp 0x10050629
fdivr dword [ecx - 0x16]
les eax, [eax - 0x3b]
and al, dl
not byte [eax]
std
outsb dx, byte gs:[esi]
imul ecx, dword [edi - 0x53331a48], 0xd54d383b
lahf
in eax, dx
mov byte [esi], al
and dword [ebp + 0x14d5eaa0], eax
inc ebp
mov byte [ebp + ebx*4 - 0x781dd51d], dl
adc bh, ah
push es
cli
push ebp
or al, 0xa
pop ds
scasb al, byte es:[edi]
outsd dx, dword [esi]
pop ss
mov dword [0x480dc6f8], eax
add byte [ebp + eax*8 - 0xb13475e], bl
outsb dx, byte [esi]
movsd dword es:[edi], dword [esi]
push edi
mov bl, 0x29
add eax, 0x7b355b38
int3
popfd
call fcn.1011d7d0
push 0x103
add eax, dword [ecx]
add byte [eax], al
push dword [ebp - 0x514]
lea eax, [esi + 4]
push eax
mov dword [esi + 0x108], edi
add byte [eax], al
call fcn.101207f0
add esp, 0x18
mov ecx, esi
call fcn.1004f1ba
jmp 0x1005092d
test byte [0x1005070c], 0x49
jne 0x1005070d
push ebx
test al, ch
fmul qword [eax + 0x23d8b4b6]
or al, 0x5f
jecxz 0x1005065a
sbb dword [ecx], 0x42
test dword [ebp - 0x74], eax
inc ecx
sar dword [ebx - 0x40], 0x70
dec esp
pop ebp
xchg byte [ecx], dh
pop ss
outsd dx, dword [esi]
jl 0x10050612
mov edi, 0x3a73a06e
sbb byte [0x68019513], al
cmp bl, byte [eax]
add eax, 0x68019513
mov bl, 0xb1
in eax, 0x23
adc edx, dword [edi - 0x35763dd9]
outsb dx, byte [esi]
sahf
cmc
cmp dword [ebx - 0x34], esi
xchg ecx, eax
fdivr dword [eax + 0x57515199]
out dx, eax
salc
fild dword [edx - 0x4be3adb]
pop edx
mov dword [0x8b111afd], eax
je 0x100506d4
je 0x1005068d
cmc
xor eax, 0xf45046fe
jne 0x100506b9
inc esi
push eax
hlt
cmp esp, dword [ebp - 0x48]
lahf
cmpsd dword [esi], dword es:[edi]
inc esi
sbb dword [edi - 0x4fa52b75], 0x52
xchg esp, eax
and ebp, dword [esi]
mov bl, 0xea
mov ecx, 0xba216c8
pop edi
lodsb al, byte gs:[esi]
add eax, esp
div dword [ecx]
xchg esi, eax
push esi
leave
add dh, cl
sar byte [edi + 0x30], 1
popal
xor dh, byte gs:[0x283b83be]
adc byte [0x9366ee4a], bl
sbb dword [ecx], 0xffffffcc
push ebx
xchg ebp, eax
mov edx, 0x2bc3612c
cmp ebx, dword [ecx - 0x93e9d15]
sub al, 0xa6
push ds
cmp byte [edx - 0x6c], 0xfc
cmc
push eax
stosb byte es:[edi], al
add bl, byte [ecx - 0x1f143d00]
xchg dword [edi], edx
push 0xffffffffffffffd0
jecxz 0x1005075e
invalid
xlatb
shr byte [0x6c0f1a2c], cl
clc
xlatb
int1
mov byte [ecx], cl
push ss
mov ecx, 0x4fdbca33
aad 0xa9
push ss
dec edx
inc ecx
scasd eax, dword es:[edi]
or byte fs:[edx + 0x1e3f09f], bh
popfd
push ebx
push ebx
push ebx
push ebx
push 4
push 6
push dword [ebp - 0x514]
call dword [sym.imp.ADVAPI32.dll_SetNamedSecurityInfoA]
push 0x103
push dword [ebp - 0x514]
pushfd
test byte [0x1005080b], 0xbb
jne 0x1005080c
invalid
add eax, 0x850fbb10
rol dword [eax], 1
add byte [eax], al
cmp byte [esp + ecx], ah
aas
psrld mm0, qword [esi + edx*2 - 0x16]
xchg esp, eax
div ebp
mov eax, 0xe2e184e1
scasd eax, dword es:[edi]
test eax, 0x4c182a49
xor eax, 0x7a2b39ea
fisubr dword [ebx - 0x29]
fsubr dword [edi]
cmp dword [ebx], ebp
jp 0x10050732
imul edx, edi, 0xffffffd8
das
movsb byte es:[edi], byte [esi]
add al, 0x80
jo 0x10050783
xor byte [eax + 0x22], 0x72
int1
jb 0x10050754
xchg edi, eax
add eax, 0xf87471cc
cmpsb byte [esi], byte es:[edi]
sbb ecx, eax
mov dword [edi], esi
xchg ebp, eax
cmp ch, byte [ebx - 0x7d356bbd]
sahf
xor dword [esi + ebp*4], ebp
loopne 0x1005072b
in al, 0x20
mov bl, 0x70
stosb byte es:[edi], al
xchg esi, eax
push ds
inc ebp
dec ecx
out dx, al
xchg esi, eax
jns 0x10050775
salc
xor bl, byte [ecx - 3]
xchg esi, eax
rcr dword [ebp + edx*8 + 0x53], 0x25
add ecx, ecx
lodsd eax, dword [esi]
jo 0x100507a8
dec ebp
ja 0x10050793
test al, 0x9d
pop esp
dec edx
mov ebx, 0x45805646
jbe 0x100507f4
xor ebp, ebp
sti
or dword [esi], ebp
salc
salc
ja 0x10050816
mov al, 0xf
cli
dec ebx
xchg esp, eax
xor byte [ebx + 0x15], al
jecxz 0x100507b0
adc byte [eax], 0xbd
ja 0x1005083b
xor dword [ecx], eax
xor edi, edi
or ecx, edx
dec edi
movsd dword es:[edi], dword [esi]
xchg edi, eax
aas
and byte [ecx + 0x7b], dl
mov ebp, 0x1f6bea16
sbb cl, byte [esp + edi*4]
sar dword [ecx + 0x66], 0x46
or byte [edx + 0x3c], ch
xchg ecx, eax
mov byte [ecx - 0x6e], dh
add ecx, 0xffffffbf
outsd dx, dword [esi]
rol byte [eax + 0x3e], 0xf3
inc edi
add al, 0xa3
aas
jne 0x100507aa
scasb al, byte es:[edi]
into
lodsd eax, dword [esi]
or dword [ebx + 7], esp
rcl byte [eax + eax*4]
adc al, 0x80
mov edi, 0x2418328f
nop
sbb byte [eax + edx*4], ah
pop edi
dec eax
cli
inc ebx
jb 0x10050813
mov dword [0xb9a80b6f], eax
cmovns bx, word [esi + 0x75]
popfd
lea eax, [esi + 4]
push eax
mov dword [esi + 0x108], edi
or byte [ecx], al
add byte [eax], al
add al, ch
aam 0xff
or al, 0
call fcn.101207f0
add esp, 0xc
push ebx
push ebx
push ebx
push 6
push dword [esi]
call dword [sym.imp.KERNEL32.dll_MapViewOfFile]
mov dword [esi + 0x10c], eax
add byte [eax], al
cmp eax, ebx
jne 0x10050843
push dword [esi]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
bound edx, qword [eax + edx]
jmp 0x10050388
xor eax, eax
inc eax
pushfd
test byte [0x1005092b], 0xca
jne 0x1005092c
or bh, byte [eax]
fiadd word [eax - 0x32]
outsd dx, dword [esi]
jnp 0x100507f9
test bh, 6
xor byte [edi + 0x52], ah
jg 0x10050847
jo 0x100508d4
fistp qword [ecx - 0x4e1f343d]
rcl dword [esp + ebp*4 - 0x221fe552], cl
jne 0x10050830
sal byte [esi], 0x77
jns 0x100508d8
mov edi, ss
xor al, 4
mov ecx, 0xefff81f9
outsb dx, byte [esi]
xlatb
mov ch, 7
inc ebp
shr dword [ecx + 0x7950f320], 1
and cl, ah
xor esi, dword [esi]
inc eax
rcl byte [ecx]
int3
jg 0x10050893
pop ebp
add al, 8
add al, 8
mov dl, 0x1b
xchg esp, eax
test byte [edi + 0x44daeda8], 0x46
mul dword [esi - 0x23]
inc ebx
int3
popfd
mov ecx, dword [ebp - 4]
pop edi
pushfd
test byte [0x10050980], 0x49
jne 0x10050a81
and eax, 0x4c75e578
jno 0x100509c4
call 0x99c30a48
sahf
jo 0x10050994
test eax, 0x8b6b7274
fcom qword [ecx + edi*2 - 0x4f]
or al, 0x46
sbb eax, 0xe5eebfd4
dec esp
and ebp, dword [ebp - 0x4a331abd]
rol dword [edx], cl
sub bl, byte [eax + 0x63]
mov dword [0xb7f72ebd], eax
test dword [eax], 0x6655ec32
scasb al, byte es:[edi]
mov al, 0x35
xchg esp, eax
fld dword [ebp - 0x2f2dc1e8]
leave
xchg ebx, eax
enter 0xffffffffffff9e9d, 0xffffffffffffffab
movsd dword es:[edi], dword [esi]
mov edx, edx
cli
aas
aam 0xad
dec ecx
sub bh, ah
push cs
ficomp dword [edx + 0x5438600d]
scasd eax, dword es:[edi]
lds ebp, [edi + edx*4 - 0x32]
cmp byte [edi + ebp*4 - 0x3b], dl
insb byte es:[edi], dx
xchg edi, eax
into
push ebp
aam 0x70
fldenv [eax - 0x55]
xor dword [ecx - 0x1c], eax
sbb dl, byte [ebp - 0x6c5ce822]
push eax
pop edx
mov ah, 0x49
and eax, 0x23faaee4
arpl cx, si
cli
and esp, dword [ebx - 0xf]
clc
jne 0x1005095e
add dh, byte [eax + 0x1b3602bd]
shr dword [ecx - 0x65446a41], cl
insb byte es:[edi], dx
sbb ebx, dword [ebx + 0x49a6057b]
outsd dx, dword [esi]
lds eax, [ebx + 0x12]
outsd dx, dword [esi]
lahf
mov ch, 0x5e
imul edi, dword [ebx - 0x4967daca], 0x68560f0c
or eax, 0x8dd74399
and al, 0xa2
pop ds
xlatb
inc ebx
movsb byte es:[edi], byte [esi]
mov eax, dword [0x957d642d]
test eax, 0xcd1ec192
and eax, dword [ebx - 0x52]
das
and cl, byte [edx - 0x6aa12e7]
aam 0x72
mov dword ds:[edi], ebx
js 0x10050a4f
js 0x100509b1
fldcw word [eax]
or byte [ecx + 0x62eeccd8], al
dec edx
test eax, 0x9fdacea4
test byte [edi + edx*4 - 0x25], bh
adc byte [esi], dl
or eax, 0x89de8877
mov dl, 0x86
push ds
lodsb al, byte [esi]
pop eax
pop edx
out 0x1d, al
pop ebx
je 0x10050a8d
sbb dword [eax + 0x71], esp
pop esi
je 0x10050a70
xchg ebp, eax
cli
jbe 0x10050a20
adc byte [ebx + 0x4743347e], ah
cmp bh, byte [esi - 0x62cf2713]
xor dword [ecx], edi
js 0x100509e2
xor eax, 0xd984e3c5
mov dword [0x5bbfd081], eax
stc
ficomp dword [edi - 0x43e7dc2b]
rol dword [eax], 0x1a
cwde
cmp ecx, dword [edi + 4]
jnp 0x10050aa6
lahf
aad 0x23
sbb byte [ecx + eax*8 + 0x3b981a00], bh
dec edi
add al, 0x7b
dec ecx
mov ebp, 0x286ff473
cmp eax, 0x87977ab3
mov bl, dh
jle 0x10050aa2
sahf
adc byte [ebx - 5], 0xf3
xor dword [eax], esp
xor al, 0x7b
out 0x7e, al
mov es, word [ebx + 0x2753b24c]
int1
in al, dx
add dh, byte [esi]
int3
popfd
pop esi
pushfd
test byte [0x10050b65], 0x22
jne 0x10050b66
aad 0
add byte [eax], al
mov dword [edi - 0x71], edi
mov esi, 0xf54e548
div byte [ecx]
invalid
retf
push ds
sub dl, 0xc5
enter 0x4aa7, 0x19
leave
idiv byte [ebx + 0x50]
aaa
ror ecx, cl
add eax, dword [edi]
cmp byte [ecx + 0x73], 0x87
rcr ebx, cl
cmpsd dword [esi], dword es:[edi]
cmpsd dword [esi], dword es:[edi]
fcom qword [ebp - 0x23]
dec ecx
sub dword [edi + 0x17334a4a], ebx
pop esp
add eax, 0x2cb9b8a7
mov es, esi
sub byte [ebx], dh
adc al, byte [edi + eax*4]
inc esi
push ecx
aam 0xe3
cmp al, byte [ebx + edx*4]
pop edx
sub esp, dword [ecx]
int 0x71
push ebx
fnstenv [ebx + 0x5787b3d0]
lodsb al, byte [esi]
xchg edi, eax
mov al, byte [0xe8a77a71]
cmc
inc edx
movsd dword es:[edi], dword [esi]
and eax, 0x377de19b
and byte [ebp - 0x1c], bh
dec esi
daa
jnp 0x10050a9c
adc eax, 0xa6622c62
jbe 0x10050acb
mov al, 0xb6
fcomp dword [edi + esi - 0x39fa16a8]
mov esp, 0x6d1f1e93
xchg ebp, eax
inc esp
mov eax, 0xe0be8aa0
sub al, 0xd7
push cs
lodsd eax, dword [esi]
aas
cmp al, 6
pop edi
and eax, 0x2e1488b7
xchg esi, eax
xchg esp, eax
sal byte [ebx], 0x93
and ebx, dword [esi + 0x28fe44fa]
enter 0xfffffffffffffbe2, 0x50
inc dx
stosb byte es:[edi], al
rcr dword [0xf9b4270b], 1
sbb cl, bh
xor eax, 0x80539ab2
inc esp
aad 0xa
xchg ebx, eax
out dx, al
lcall 0xd566, 0x66448053
or dl, byte [ebx + 0x285a3cee]
test eax, 0xaa7d6f7
test dword [ecx - 0x7401342e], eax
jle 0x10050b4d
cmp al, 0x5a
sub byte [ecx + ebp*4 - 9], ah
salc
cmpsd dword [esi], dword es:[edi]
or al, byte [ebp - 0x1342d7f]
mov edi, dword [esi - 0x11]
outsd dx, dword [esi]
cmp eax, 0x56fc4460
push esi
pop ss
popfd
xor ecx, ebp
pushfd
test byte [0x10050c29], 0x8c
jne 0x10050c2a
stosb byte es:[edi], al
mov edi, 0xb2d61bc9
mov eax, dword [0x976fde73]
sub al, 0xec
imul esi, edx, 0xca31fd64
aas
in eax, dx
push ebp
rcl byte [ecx - 0x36], 0xc4
dec esp
shr byte [eax - 0x68], 1
into
into
scasb al, byte es:[edi]
dec esi
and eax, 0x9e24cd08
shl byte [ecx + ecx*8 + 0x1335945d], 1
add bh, ch
mov esp, 0x54270771
mov ah, 0xe6
or eax, dword [edi]
aaa
cdq
loopne 0x10050b43
pop edx
xor bx, word [ebp]
and esi, dword [edi - 0x6568b25]
mov esp, 0x24743ab6
sbb byte [edx - 0x6401711a], dl
rcr dword [ecx + 0x1b], 1
mov esp, 0xea042ec6
and dh, 0x31
pop edx
sbb dh, byte [edi + ecx + 0x1f886401]
xchg edx, eax
mov byte [esi], bl
jo 0x10050bc7
out 0x8e, al
invalid
or al, byte [ebp + 0x7d]
or eax, 0x36e403e2
xchg ecx, eax
xor dh, byte [esi]
sbb eax, dword [edx + ebp*2 + 0x2e72af12]
lds esi, [eax]
pop eax
div dword [edi + 0x46]
out 0x98, al
test ch, al
jecxz 0x10050c4b
outsb dx, byte [esi]
and edx, edx
stosb byte es:[edi], al
mov ch, 0xd9
in al, 0xb5
inc esi
adc cl, byte [esi - 0x80]
and dword [edi - 0x74], 0xe3b2c1a
xor dword [esp + eax + 0x673753f9], esi
and eax, 0xa1f3ef08
cmp al, 3
leave
push edx
dec esp
xchg byte [eax + 0x3e], bl
push ebp
popfd
pop ebx
call fcn.1011e48a
leave
ret 4
mov ebx, 0x62f34ab2
lahf
pop esp
add al, 0x74
aam 0xa7
push esi
test byte [ecx + 0x7d], dl
outsb dx, byte [esi]
inc edx
imul eax, esp, 0x388e696c
scasd eax, dword es:[edi]
dec esp
mov edi, 0x4ba5aada
and dword [eax + 0x46], ebx
mov eax, 0xb2629de7
scasb al, byte es:[edi]
popfd
or ecx, esi
or al, 0x51
jno 0x10050cf0
mov ss, esp
loop 0x10050cb6
lodsb al, byte [esi]
mov al, ch
or al, 0x30
jg 0x10050c7a
dec ecx
cli
mov ch, 0xa6
mov esp, 0x474eb5b
in eax, dx
sbb al, 0xbf
push ebx
pushfd
lodsb al, byte [esi]
fsubr st(6)
push eax
fcmovu st(0), st(0)
popal
pushfd
lodsd eax, dword [esi]
rcl byte [edi - 0x2359af7e], 0xbe
push 0x1d
scasd eax, dword es:[edi]
push es
and eax, 0x28653172
inc esi
das
popfd
push dword [ebp + 8]
mov esi, ecx
int1
and dword [esi], 0
call fcn.1004fa46
mov eax, esi
pop esi
pushfd
test byte [0x10050da0], 0x91
jne 0x10050da1
jo 0x10050cdf
cmpsb byte [esi], byte es:[edi]
jns 0x10050c5d
into
xchg edx, eax
shl eax, 1
cmp byte [eax - 0x55e0b90], ah
adc dword [edi + 0xb], ebp
mov eax, dword [0xb6f11fa]
fstp dword [esp]
lea ebx, [eax - 0x3b8d8d60]
stc
fdivr qword [eax + 0x3b]
js 0x10050d2d
mov bh, 0xf
mov dl, 0x1d
leave
inc ecx
pop ecx
xor dl, byte [ecx + 0x134c51a6]
push cs
adc dword [ecx], esp
xchg ebx, eax
xchg ebp, eax
inc edi
in al, dx
sub byte [edx], al
test bh, bl
movsd dword es:[edi], dword [esi]
outsd dx, dword [esi]
fidivr dword [ebp - 0x61]
dec edx
pop ebx
shl byte [eax], cl
loop 0x10050d8c
sbb eax, 0x67d86390
pop es
adc dword [edi - 0x4aed015d], eax
add eax, 0x3a9581a9
nop
adc dh, byte [ebx + 0x24]
mov bl, 0x9d
xor eax, 0xdaa65f8d
pop edi
mov esp, 0x83c17b85
add byte [ebx], cl
lea ebx, [edi - 0x5a]
pop edi
cmpsb byte [esi], byte es:[edi]
ficomp dword [edi - 0x44]
test dword [ebx - 0x3f], edi
add dword [eax], 0xb
pop esi
aas
fbstp tbyte [eax]
pop ecx
inc esp
inc esi
fist dword [eax + ecx*4 - 0x19]
neg dword [esi + eax*4 - 0x76b1024e]
add eax, ecx
sbb byte [ebp + 0x24], al
or ecx, dword [ebx + 0x1b]
clc
mov eax, 0x4c6bccd7
mov dl, 0xf6
inc esp
sbb bh, dl
xchg edx, eax
pop edx
int3
and eax, ebx
js 0x10050d2e
rcl dword [ecx + eax*8], cl
sub edi, dword [eax + 0x2e]
pop eax
mov al, 0xdb
pop edi
inc eax
xor dword [eax], esi
push ss
cmc
invalid
popfd
pop ebp
ret 4