Function at 0x100c33d2
Capabilities:
Authenticate hmac
Encode data using xor
Read file on windows
Write file on windows

Disassembly:
int 0x60
shr ah, 1
xchg ecx, eax
xchg esi, eax
dec ebx
cwde
sbb ecx, dword [ebx + 0x65e5624d]
jns 0x100c32f5
mov ecx, 0x9f58b6a7
mov esp, 0xa8032e90
lea esp, [ebx - 0x753aec63]
mov esi, 0x5c5bf42f
neg dword [edi + 0x99efd01]
popfd
call fcn.1011e7c5
add esp, 0x14
xor eax, eax
inc eax
pop esi
pop edi
pop ebp
ret
push ebp
mov ebp, esp
sub esp, 0x2c
pushfd
test byte [0x100c33d1], 0x1e
jne 0x100c33d2
xor al, 0x92
out dx, al
outsd dx, dword [esi]
salc
pop ss
sub eax, 0xf9c283c7
and al, byte [ecx + 0x790201a9]
clc
xchg ebx, eax
scasb al, byte es:[edi]
sbb edi, dword [ecx - 0x6325ee26]
fidiv dword [edi]
aam 0xe8
cmpsb byte [esi], byte es:[edi]
mov bl, byte [eax]
mov bh, 0x31
ror byte [edx + 0x16], 1
aad 0xa4
sahf
inc edi
inc ebp
mov word [edx], es
jle 0x100c32a3
push edi
lodsd eax, dword [esi]
jge 0x100c3378
pop edi
mov dword [0xe335d2e], eax
pop ds
outsb dx, byte [esi]
add al, 0x72
sub dl, cl
xchg ebx, eax
ror dword [edx + 0x38ab7a67], cl
xchg byte [esi + 0xeb652c9], bh
mov dh, 0xe
mov al, byte [0x718d8caf]
dec edi
out 0x54, eax
aas
imul ebp, dword [esi + eax*8 + 0x44], 0x7d49eb40
mov bh, ah
and bh, byte [eax + 0x5111e0ea]
mov eax, 0x5111e0ea
push 0x5d95
sbb byte [eax], dl
xchg ebx, eax
test byte [ebx + 0x23], cl
popal
pop es
clc
imul esp, dword [edx], 0xb78e2ead
xchg ecx, eax
out 0x44, al
aaa
stc
and ebx, dword [esi + 0x67]
sahf
rcr dword [edx - 0x5cf05e79], 0x7a
push ebx
jge 0x100c3354
pop ebp
pop edx
sbb bh, byte [eax + 0xb]
stosd dword es:[edi], eax
xchg esi, eax
mov ch, dh
lodsd eax, dword [esi]
xchg bl, dh
leave
js 0x100c333e
not dword [ebx - 0x4259b26a]
jno 0x100c339d
push edi
pop ss
or dl, byte [ebx + 0x58]
pop eax
aad 0x55
enter 0xffffffffffffeacd, 0xffffffffffffffbd
mov cl, bh
out 0x34, eax
push eax
cld
jo 0x100c3346
add eax, 0x34f06f86
xor ch, bl
das
xchg ecx, eax
fcmovne st(0), st(5)
cmp edi, edi
and al, 0x3c
add edx, dword [edx - 0x603831a]
ror esp, 1
sar ah, cl
daa
cmp eax, 0x9cb65f1e
xlatb
xchg ebx, eax
aas
sbb dh, byte [edi - 0x6b]
popfd
mov eax, dword [0x10170c30]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword [ebp + 0xc]
push ebx
push esi
mov esi, dword [ebp + 8]
push edi
mov dword [ebp - 0x1c], eax
xor ebx, ebx
xor eax, eax
mov byte [ebp - 0x18], bl
pushfd
test byte [0x100c342c], 0xa7
jne 0x100c342d
inc esi
pop ebp
jb 0x100c347b
push edi
test dword [edx + 0x37], 0x6e88a430
sub edi, dword [edx]
push ebp
ja 0x100c3426
dec ecx
pushal
push cs
popfd
in al, dx
sbb al, 0xca
push 0x4c6fe04f
mov esp, 0x6bb655e8
into
call 0x7477ea72
into
scasb al, byte es:[edi]
cmpsb byte [esi], byte es:[edi]
or eax, 0x49088aaf
fnstenv [edi - 0x5db2d4a3]
mov bh, 0x5d
sub ecx, dword [ebp - 0x5e]
in eax, 0x2f
popfd
lea edi, [ebp - 0x17]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
push 0x11
stosd dword es:[edi], eax
lea eax, [ebp - 0x18]
push ebx
push eax
mov dword [ebp - 0x28], esi
mov dword [ebp - 0x20], ebx
mov dword [ebp - 0x24], ebx
pushfd
test byte [0x100c351a], 0x25
jne 0x100c351b
call 0x1f011f25
cmp dword [ebx], eax
jl 0x100c3468
mov ecx, 0x93ae2b78
add ch, byte [esi]
xlatb
xchg esp, eax
add cl, bl
and dword [ebx - 0x52], esi
jae 0x100c3418
scasb al, byte es:[edi]
lahf
inc esi
mov al, 0x79
inc esi
xor cl, byte [ecx + ebx*8 + 0x3f]
outsd dx, dword [esi]
xlatb
out dx, eax
dec esi
sbb dword [eax + 0x49], edx
and al, 0xc
adc dword [ebp - 0x5d8e42d1], esp
push edx
cmp al, 0xee
or al, 0x11
movsd dword es:[edi], dword [esi]
das
mov ebp, 0x3c52a271
out dx, al
cmp esp, eax
not dword [edi + 0x67]
enter 0xffffffffffffa0c2, 0x12
push edx
inc ecx
sub ebx, dword [ebx - 0x42411246]
salc
scasb al, byte es:[edi]
push edx
mov byte [ecx], ah
pop ecx
mov ch, 0xed
push ecx
movsd dword es:[edi], dword [esi]
add al, byte [edi + 0x3b7383d6]
cmpsb byte [esi], byte es:[edi]
jns 0x100c3469
xor bp, word [edx + 0x7fa27ca4]
in eax, 0xf1
sub al, 0x34
adc eax, 0x175c3997
jl 0x100c3519
pop esp
mov al, byte [0x7f1e4b41]
fisttp qword [eax]
test dl, 0x3e
and byte [edi - 0x53], 0x7d
pop edx
push 0x78bbf606
sbb eax, 0xa8bd7735
push es
jnp 0x100c3554
adc al, 6
inc esi
in eax, dx
sahf
dec ecx
dec esp
fmul dword [ebx - 0x12]
pushal
cmp byte [esi], ah
stc
in eax, 0x62
inc ebp
rcr dl, 1
les ebp, [edx - 0x5e]
arpl word [esi + esi - 0x5e4d10ae], si
xor al, 0x5c
sahf
in eax, dx
test dword [eax + 0x5be2608d], esi
fld1
fdivr dword [edx]
div byte [ebx]
test al, 0x41
dec edi
dec esp
sbb bh, byte [ebp + 5]
or eax, 0xd20c6bed
xor ch, ch
sbb eax, 0x7989a59d
cld
cmpsd dword [esi], dword es:[edi]
popfd
call fcn.1011df60
add esp, 0xc
push 2
push ebx
push esi
pushfd
test byte [0x100c3583], 0xf5
jne 0x100c3584
xchg edi, eax
adc esp, edx
xchg edi, eax
mov byte [edi], bh
mov eax, 0x37b5bc21
inc ebp
into
outsd dx, dword [esi]
mov al, byte [0x51eb819d]
mov edx, 0x4fb3ceba
sub eax, 0xf12e0a04
xor bh, byte [eax - 0x7290095c]
sub ch, ch
outsd dx, dword [esi]
lea ebp, [edx]
in eax, dx
das
pop edx
adc byte [ecx + 0x22ed1735], al
nop
aad 0x85
pop esi
inc eax
out 7, al
add byte [edi], 0xbe
fidiv word [esi - 0x51734ea5]
xchg ebp, eax
adc esp, edi
adc bh, byte [ecx + 0x1c3ce013]
rcl dword [edx - 0x65], 0x30
sbb al, 0x5c
mov dl, 0xd4
rcl byte [edx + 0x3a], cl
popfd
call dword [sym.imp.KERNEL32.dll_LoadLibraryExA]
mov dword [ebp - 0x2c], eax
pushfd
test byte [0x100c35c7], 7
je 0x100c35c8
sar byte [esi], cl
out 0xae, al
cli
dec ebp
leave
adc dh, 0xf1
or eax, 0x3fa741e9
daa
int 0x1b
jl 0x100c3627
jl 0x100c35d3
or ch, cl
stc
mov bl, 0x68
stosd dword es:[edi], eax
inc esp
in al, dx
dec byte [ecx]
les eax, [ebp - 0xa6545a8]
or eax, 0x3cc83a9
sub al, 0x67
dec eax
popfd
mov esi, 0x8f8
pushfd
test byte [0x100c36b3], 0x5b
or al, 0x10
pop ebx
jne 0x100c36b4
jg 0x100c360d
pop edi
bound esi, qword [edx]
in al, 0xf1
outsd dx, dword [esi]
test byte [ebp - 0x64df0335], ch
mov byte [edx + 0x30], al
jns 0x100c3616
cld
and byte [ebx + 0x79304288], bl
daa
xor byte [ecx + 0x27], bh
sti
xor esi, dword [ecx + eax*2 + 0x26]
imul edi, dword [esp + eax*2 - 0x4225f3e5], 0x1ddf1b6f
scasd eax, dword es:[edi]
lea esi, [eax + ecx*2]
mov al, 0xd2
invd
out 0x89, eax
push edi
loopne 0x100c365a
sub esp, ebx
cmp eax, 0x6adf6404
ja 0x100c35ec
and byte [ebx - 0x3260e233], dl
push ebx
xor ah, byte [eax + 0xa]
push ebx
sti
fcom qword [ebx - 0x29]
dec ebx
sub byte [ebp + 0x7d], bh
jge 0x100c36a6
out dx, al
jno 0x100c35e7
pushal
loop 0x100c3670
pop esp
mov edi, 0xb1c1419a
sbb dh, 0xce
pop esi
jg 0x100c35ef
cld
test dword [ebx + 0x32], 0xdedc64b8
adc al, 0xff
cmp eax, 0x1459d451
mov edi, 0xa117cfc3
or dword [eax - 0x6c11c9dd], 0xffffffb7
xchg esi, eax
adc al, 0xa3
dec ecx
inc edi
pushal
arpl word [ebx + 0x1df2cc7c], si
std
jle 0x100c36cd
and dword ds:[ebx + 0x17], ebx
jae 0x100c36a7
or byte [ecx], ah
xor eax, 0x33f5c1d7
sal ebp, 0x33
adc ecx, dword [eax - 0x15]
std
inc edi
sal edi, 0xc8
xor ecx, esp
aam 0xd4
sbb eax, 0x9c4e187a
sub eax, 0x6e1054c5
mov edx, 0xa8e9741a
sub cl, byte [eax + 0x783da342]
and al, 0x6c
imul byte [ebp + 0x3a]
push es
mov ebp, 0xadc74310
popal
xor ebp, ebp
adc eax, 0x28960a7b
sub byte [edi], ch
das
int3
popfd
cmp eax, ebx
je 0x100c3d7b
lea ecx, [ebp - 0x24]
push ecx
lea ecx, [ebp - 0x20]
push ecx
push 0xa
pushfd
test byte [0x100c3742], 0x7d
jne 0x100c3743
add eax, 0x100c3742
jge 0x100c3745
adc byte [ebp + 0x75], bh
jb 0x100c36c9
mul dword [eax - 0x4b]
xor byte [edi - 0x142fd5cf], 0x75
outsb dx, byte [esi]
mov bl, 0xb
sub byte [ebp + 0x6f], dh
push ss
mov al, 0xaa
and eax, 0xcb197958
mov dh, 0x36
add cl, ah
das
scasb al, byte es:[edi]
push es
dec ecx
push ds
nop
aam 0x4c
int3
pushal
mov ch, 0x80
mov bh, 0x31
sub dl, al
jmp 0x100c3750
popfd
push 0x82
pushfd
test byte [0x100c3773], 0xb3
jne 0x100c3774
add byte [eax], 0
add byte [esi + esi*8 + 0xc377305], bl
adc byte [ebx + 0x53b22175], dh
mov bl, 0x75
and dword [edx + 0x6965753], esi
mov dl, 0x53
push edi
xchg esi, eax
push es
jecxz 0x100c3753
xchg byte [edx - 0x129c84c4], dh
nop
or eax, 0x71c67c92
xor dword [ebp - 0x35], edx
out 0xc9, eax
cld
cdq
sar byte [esp + 0x1f], 0xfa
leave
cmpsd dword [esi], dword es:[edi]
popfd
push eax
pushfd
test byte [0x100c382c], 0xc2
jne 0x100c382d
bound ebp, qword [ecx + 0x30]
mov cl, 0xcc
dec esi
sub byte [esi], bl
into
adc bh, cl
push esp
mov esp, 0x2065f789
xchg byte [eax + 0x37f41584], bl
adc esi, edi
cmp byte [eax], 0xdb
popal
je 0x100c37fd
xchg esp, eax
xlatb
pop ebx
pop eax
mov ah, 0xda
and dword [eax + 0x5d], edx
push 0x3805a8c8
or al, 0x64
mov ebx, 0xf41ea353
mov eax, dword [0xf1455f59]
push edi
outsd dx, dword [esi]
mov esi, 0x153d3250
cdq
jns 0x100c3755
scasd eax, dword es:[edi]
and ebp, esp
jnp 0x100c3817
loop 0x100c3757
dec esi
sahf
add bl, al
rcr byte [ecx - 0x50], 1
sahf
pushal
bound esi, qword [ebp - 0x5e385ecf]
sbb edi, edi
or al, 0x7d
xor eax, 0x9ce645d7
xchg edx, eax
leave
lds esp, [esi + 0x8e5d77f]
dec eax
sti
dec si
emms
xor esp, dword [ecx - 0x67]
xor byte [edx + 0x74569f24], dh
insd dword es:[edi], dx
push esi
je 0x100c386d
fld xword [edx + 0x44]
imul esi, ebx, 0xffffffca
popfd
sub bh, bh
sbb eax, 0x54e2e00f
push esp
stosd dword es:[edi], eax
pushal
adc dword [eax + 0x62627da7], esp
daa
ja 0x100c384c
ficomp dword [esi]
push edx
add dword [edi], ecx
inc edx
cmp al, 0x3f
pop esi
pop eax
mov eax, dword [0x1306c6b7]
or ah, byte [ebx - 2]
push ebp
popfd
call fcn.100a46b9
xor edi, edi
inc edi
add esp, 0x14
cmp eax, edi
jne 0x100c3b7a
cmp dword [ebp - 0x24], 0x908
jne 0x100c3b7a
add byte [eax], al
push str.QueryResource_success_
pushfd
test byte [0x100c3946], 0xaf
jne 0x100c3947
test dword [ebx], ebp
add bl, byte [edi - 0x44e5aafe]
add al, 0x67
test dword [edi + 0x719efa92], ebp
pop esi
xchg edx, eax
cli
sahf
jno 0x100c38a0
pop esi
out dx, eax
lodsb al, byte [esi]
xor cl, bl
jecxz 0x100c3848
jg 0x100c380d
pop ds
bound edi, qword [edi + ecx*2 - 0x4b2ed0b7]
mov edx, 0x8317c634
push ss
or eax, 0x84f4556
jne 0x100c3890
jmp [ebp + 0x2c]
insd dword es:[edi], dx
sub al, 0x5c
pop esp
sbb dword [ebx - 0x3d9007d7], esi
inc esi
dec ebp
nop
mov bh, 0xc1
dec eax
and esp, dword [esi + 0xf0799ec]
push ebx
clc
inc esi
xchg byte [edi], ah
push esi
call 0xb705bdf7
cmp byte [ecx], ch
fisttp qword [ebp - 0xa042315]
pop esp
push esp
push eax
out 0xf7, eax
jb 0x100c3875
sub ebp, ebx
invalid
jmp 0x100c3893
pop ebx
pop eax
dec ebx
cli
cmpsd dword [esi], dword es:[edi]
inc ebp
cdq
and ah, dh
fdiv dword [ebp + 0x5d]
std
adc ebp, dword [ebx + 5]
aad 0xd3
xor byte [ebx - 0x9a6f33b], cl
mov ah, 0x89
popfd
cmp ecx, edx
dec edi
jno 0x100c38b5
mov edx, 0x487c9585
test bl, 0x18
xor al, 0x97
cwde
pushal
loop 0x100c3913
aas
in eax, 0xd0
imul edi, dword [edi], 0x4ca80184
jg 0x100c38b2
add dword [eax - 0x494880b4], ebp
adc esp, ebp
mov dh, 0x11
in al, dx
cdq
lahf
push 0xffffffffffffff90
push cs
push 0x185bac82
out 7, al
outsb dx, byte [esi]
cmp ecx, dword [ecx - 0x49]
test eax, 0x40f9a38a
inc eax
cld
imul eax, edi, 0xffffff9a
or eax, 0xaf162c4c
cmovge esp, edx
sbb eax, 0x8e47f6f8
add dl, byte [edx]
jns 0x100c39a2
dec ebp
or byte ds:[ecx + 0x5e06093f], cl
xor byte [ecx - 0x32], cl
fstp qword [edx - 0x2cdf80b1]
lea ebx, [ebp - 0x1b196e36]
or dword [esi], edi
mov eax, dword [0x94737a76]
popfd
push ebx
push ebx
call fcn.10049c0c
push 0x10
pushfd
test byte [0x100c3a08], 0xd8
jne 0x100c3a09
xchg esp, eax
dec edx
int1
std
imul edi, dword [0xd8e085d2], 0x1b
std
aaa
and bl, byte [edi - 0x32]
push cs
dec ebx
movsd dword es:[edi], dword [esi]
int 0xd3
jb 0x100c38f6
adc byte [esi - 0xe], 0x3d
adc esi, dword [ecx - 0x2a]
loopne 0x100c3951
push esi
cmp eax, 0xe0d67113
rcr dword [edi + esi*8 + 0x70], cl
add dword [edi + 0x7a5df184], esp
dec edx
pop esp
div dword [eax + 1]
movsb byte es:[edi], byte [esi]
daa
test cl, dh
pop ebp
jp 0x100c39d3
mov cl, 0x61
dec ebp
sbb al, 0x68
cld
out dx, eax
fcomp qword [edx]
sbb bh, byte [eax + ebx*2 + 0x7347598]
cmp al, 0xd9
mov ecx, dword [eax - 0x718e6a79]
jbe 0x100c3975
sal bh, cl
and eax, 0x31ae2ba1
mul dword [0x31ae2ba1]
sti
mul byte [esi - 4]
rcl ah, 0x37
nop
mov eax, dword [0x6b163cb7]
adc eax, 0xa84197a4
mov al, byte [ebp + 0x3c]
and al, 0x40
je 0x100c39e9
rcr eax, 1
pop eax
jecxz 0x100c39e6
xchg esp, eax
sbb bh, byte [ebp - 0x1624c0d5]
lodsd eax, dword [esi]
inc edx
imul dword [esi - 9]
and byte [0x380d47f5], 0xf0
mov bh, 0xb5
clc
mov ebp, 0x960c55a0
in eax, 0x93
add dl, cl
test al, 0x73
mov edi, 0x41153020
sbb eax, 0x66
jae 0x100c39aa
and byte [eax], dh
adc eax, 0x66d88341
pop esi
test byte [esi + esi*4 + 0x46bd3262], ah
insb byte es:[edi], dx
mov cl, 0x32
adc ah, dh
popfd
xor esp, dword [ecx - 0x80]
outsd dx, dword [esi]
cld
or al, 0x75
mov ch, 0xad
popfd
push dword [ebp - 0x20]
lea eax, [ebp - 0x18]
push eax
pushfd
test byte [0x100c3a5b], 0x33
jne 0x100c3b5c
jbe 0x100c3a19
push es
mov ebp, 0x83e0b386
bound esp, qword [esi + 0x27]
xchg ebx, eax
mov edx, 0x53a62cff
sbb eax, 0xa85232f0
sbb al, 0xcd
std
and dword [edx], ebp
shl byte [edx], 0xa8
sar edi, cl
les edi, [esi - 0x416d2fee]
test byte [edx + 0x6ed0b44b], dh
mov edx, dword [edx + esi + 0xdb7f9d1]
and dword [ecx - 0x41], ebx
scasd eax, dword es:[edi]
scasd eax, dword es:[edi]
xchg ecx, eax
mov esi, 0x2e485ec5
sbb byte [esi + 0x138d46d8], 0x59
push 0x4f
mov edx, 0x865ca689
adc eax, 0x29211129
xchg byte [0x29211129], dl
inc esi
cmp al, 0xa
push edi
sub byte [edx - 0x7e], ah
cmp byte [ebx + 0x15], bh
mov dh, 0x1c
test al, 0xd
push 0xfe97a3b9
or eax, 0x4bfd68e5
aad 0x67
rcl byte [ebx - 0x5fbe460b], 0x5f
inc ebx
salc
aaa
mov al, byte [0x9f068dde]
add eax, 0x9525dc2b
sub byte [0x95b1b9db], cl
movsb byte es:[edi], byte [esi]
mov dl, 0x84
mov esi, 0x1c8e200e
xchg esi, eax
in al, dx
xchg edx, eax
pop ecx
leave
loop 0x100c3a6b
enter 0x3b1f, 0xffffffffffffffdf
cmp al, 1
mov ecx, 0x4c3e10bf
push 0x16
bound edi, qword [eax]
push edx
cmp al, 0x88
mov dl, 0xf4
xchg ecx, esi
js 0x100c3ae4
loop 0x100c3b26
inc ebx
xchg edi, eax
sub ah, byte [esi]
mov esi, 0xffe1ebdb
cmp bl, byte [edx]
sti
xor byte [esi + 0x45359d52], cl
inc eax
inc eax
pop ds
fisubr word [eax + 0x382adcb5]
dec ecx
xor edi, edi
or al, byte [edi]
mov eax, 0x39ecb635
mov cl, byte [0x4b5d1cea]
cli
xchg al, ah
into
test al, 0xe
xchg edi, eax
js 0x100c3b78
rcl ebx, cl
dec edi
lds edi, [edi + 0x346f7f29]
mov word [edi - 0x59495ef1], es
xor byte [edx], 0x2a
test byte [edx], 0x7d
les eax, [edi - 4]
sub dh, dh
or bh, byte [ebp - 0x3c]
inc edi
cld
dec ebx
dec edx
pop eax
jbe 0x100c3b87
je 0x100c3b54
or byte [edx - 0x11], bh
jp 0x100c3b17
bswap esi
and esp, dword [esi + ecx*2 + 0xbce6cbf]
mov bh, 0xbc
daa
lea edx, [eax]
xor eax, 0x3f73056a
bound ebx, qword [eax - 0x39bce216]
or byte [eax + 0x5a], dh
or dh, byte [edi - 0x47]
jb 0x100c3ba1
fist word [edi + 0x5ba9d89f]
xchg edi, eax
sub ebp, ecx
adc bl, byte [esi - 0x2d7b09ef]
adc esi, esi
test dl, dl
cmpsd dword [esi], dword es:[edi]
cmc
jnp 0x100c3b5c
popfd
call fcn.1011d7d0
mov eax, dword [ebp - 0x20]
push esi
add eax, 0x10
push eax
push dword [ebp - 0x1c]
call fcn.1011d7d0
add esp, 0x24
jmp 0x100c3d03
add byte [eax], al
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push str.QueryResource_Error:_d_
pushfd
test byte [0x100c3bbd], 0xd2
jne 0x100c3bbe
and byte [eax - 0x4e], cl
int1
fiadd dword [edx + 4]
mov ch, 0xac
clc
fsub qword [edx - 0x4d83e95c]
in eax, 0x7e
insd dword es:[edi], dx
jle 0x100c3c10
xchg esi, eax
xor edx, dword [eax - 0x72513f94]
xchg edi, eax
enter 0xffffffffffffa0cb, 0xffffffffffffff95
mov eax, dword [esp]
sub dword [edi + 0x2451b3f2], edx
pop ds
adc eax, 0x117cccac
popfd
push ebx
push ebx
call fcn.10049c0c
add esp, 0x10
pushfd
test byte [0x100c3bff], 0x27
jne 0x100c3d00
xchg ecx, eax
push 0xffffffffffffffda
cli
cli
cmpsb byte [si], byte es:[di]
enter 0xffffffffffffe92a, 0x6e
outsb dx, byte [esi]
sbb ax, 0x9e87
mov ebx, 0x896757a4
push edi
mov dword [bx + si - 0x4289], esp
stc
mov dh, dh
push 0x53
mov al, byte [0x8af9bd77]
imul byte [edx + 0x53]
mov eax, 0x4a57d3ba
or ah, dl
out 0x30, al
and bh, cl
mov edx, 0xa4a57d3
loop 0x100c3be1
xor byte [edx], ah
stc
mov edi, 0x9810afc2
jl 0x100c3be8
xchg edi, eax
loopne 0x100c3beb
adc al, 0xc6
in eax, 0x50
cmp edx, esi
dec ebp
ja 0x100c3c3a
sub dword [ecx + 0x70c86a54], esp
mov eax, dword [0x70c86a54]
aam 0x2f
aad 0xed
sub eax, 0x1a6b8843
push edi
sbb al, 0x92
inc esi
adc ebx, dword [ebx]
aaa
mov ebp, 0x97730265
or eax, dword [esi]
or bl, byte [ebx - 0x3f036ea]
adc eax, 0xdfb09ec8
jecxz 0x100c3c8f
push esp
jns 0x100c3c55
cmc
repe cmpsd dword [esi], dword es:[edi]
jge 0x100c3bf4
mov ch, byte [ebp + 0x3fddb36b]
mov al, 0x12
jecxz 0x100c3c6c
mov edi, 0x22443da4
inc dword [ebp + 0x22]
and byte [eax + 0x754a7438], cl
push ebx
cmp eax, 0x45ff2244
and ah, byte [eax]
mov byte [eax], bh
je 0x100c3ca3
jne 0x100c3c4e
push ebx
xchg edi, ebx
sub dh, byte [eax]
jno 0x100c3c6d
fild qword [edx]
xor byte [ecx + 0xa], dh
sbb eax, 0xc02db66f
mov ds, word [ecx - 0x48]
and bl, dh
fisubr word [edx - 0x5d]
push 0xffffffffffffffa3
aas
or eax, dword [edi - 0x55]
mov edx, 0xf3524241
jg 0x100c3caf
fidivr word [ebp + esi*8 - 0xf]
push es
mov byte [esi], cl
xor ah, bl
clc
sub dword [ebx], eax
leave
lodsb al, byte [esi]
mov ebx, 0x653b0d85
cmp al, 0xf5
pop ebp
sahf
outsd dx, dword [esi]
or edi, esi
shr byte [eax], cl
pop ebp
mov edx, esp
and byte [eax + 0x54], al
jns 0x100c3c5e
insb byte es:[edi], dx
movsd dword es:[edi], dword [esi]
sbb eax, 0x3aa60ebb
add dword [ecx - 0x4d217813], 0xffffff92
cmpsb byte [esi], byte es:[edi]
cmp al, byte [ebx - 0x2178127f]
mov dl, 0x92
in eax, dx
adc al, 0x8a
sbb byte [ecx - 0x44], bh
test al, 0x2c
das
call 0x7b2f2096
ror ebx, 0x99
mov bl, 0x73
inc ebx
je 0x100c3c6d
jo 0x100c3d29
cmp al, 0xb1
mov bh, 0xd
insd dword es:[edi], dx
sahf
fist dword [ebx - 0x7bbe9bf5]
and eax, 0xc2b3c042
push eax
xor edi, dword cs:[ecx - 0xdba69bb]
lock add dword [eax], ecx
mov dword [0x730c701e], eax
aas
dec eax
pop edx
mov word [edi + eax*2 - 0x60cc4ab3], fs
loopne 0x100c3cfe
jns 0x100c3cf0
das
or edi, edx
lodsb al, byte [esi]
pop es
cmpsb byte [esi], byte es:[edi]
insd dword es:[edi], dx
fucomi st(2)
in al, 0x80
add byte [edi - 0x63], 0x33
invalid
inc edi
popfd
xor edi, edi
push dword [ebp - 0x2c]
pushfd
test byte [0x100c3d6b], 7
jne 0x100c3d6c
sbb edx, eax
loop 0x100c3cff
sbb edx, ebx
push 0x32678ae6
jecxz 0x100c3cfe
inc esp
jbe 0x100c3d7c
outsb dx, byte [esi]
leave
daa
stc
sbb eax, 0x97d483ca
inc esi
and byte [ebx], 0x74
pop ebp
sahf
and al, 0x34
scasb al, byte es:[edi]
sal dword [edx - 0xcb0b7b1], 0x85
std
sbb eax, 0x70e89161
cmc
movsb byte es:[edi], byte [esi]
push ss
sal dh, 1
jno 0x100c3dc6
push ecx
jae 0x100c3d22
xacquire xchg dword [edx + 0xf0330b7], edx
mov ebx, 0xd8b1415a
sub byte [edi + 0x29], ah
scasb al, byte es:[edi]
cmp al, 0x3a
sbb dh, byte [ebp + 0x11]
cmp bl, byte [edx]
jne 0x100c3d71
mov dl, 0x83
inc ecx
fcmovb st(0), st(6)
nop dword [edi + 0x6085193]
popfd
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
adc al, 0x10
cmp edi, ebx
jne 0x100c40fd
push str.Read_config_info_from_file_end
pushfd
test byte [0x100c3e07], 0xbd
jne 0x100c3e08
xor byte [edx - 0x963efec], cl
add eax, 0x100c3e07
mov ebp, 0xf2927e75
insb byte es:[edi], dx
xchg edx, eax
repne insb byte es:[edi], dx
in al, dx
xchg ebx, eax
add byte [esi], dh
popfd
xor al, 0x7f
adc dword [ebp - 0x31], edx
xchg ebx, eax
test al, 0x17
inc ebx
sub dl, bl
sbb ecx, 0x57
sbb al, 0xfb
add esp, dword [ebx - 0x1a7e565c]
jb 0x100c3d5c
test eax, 0xb272e581
mov ch, 0xc
scasd eax, dword es:[edi]
lodsb al, byte [esi]
pop ecx
push ebx
lodsb al, byte [esi]
pop esp
aam 0x17
jb 0x100c3d4b
push esi
or al, 0x91
or dword [edx], edi
inc ebx
cdq
lodsb al, byte [esi]
mov cl, bl
sal dword [edi + 0x6e54a988], cl
outsb dx, byte [esi]
cwde
rol dword [edx + edi*2 - 0x4b1335b1], 1
rol al, 0x8c
jb 0x100c3d8d
or eax, 0x1858f2a8
mov al, byte [0x803be13a]
adc byte [edi], dh
sbb esp, dword [edx]
into
das
push 0x37
pop edx
xor al, 0xf9
rcl byte [edx], cl
cmp edx, dword [ebx - 0x5acf5da2]
loop 0x100c3da5
fucompi st(6)
out dx, al
inc ebx
push esi
mov dl, 0x5e
inc esp
loopne 0x100c3e6b
fcomp qword [ebx - 0x78]
adc dword ss:[esi], 0x3112cb6f
xor al, 0x7a
popfd
push ebx
push 3
pushfd
test byte [0x100c3eaf], 0xf9
jne 0x100c3eb0
add byte [eax], al
add byte [ebp - 0x65c27234], ah
imul edi, dword [ebp - 0x1c09878f], 0x81964d34
cld
jge 0x100c3e8c
movsd dword es:[edi], dword [esi]
int3
or al, 0x6f
sti
jle 0x100c3df4
push cs
in eax, dx
push cs
push esi
jl 0x100c3e4b
imul ebp, dword [edi - 0x75], 0x8749902a
adc dword [ecx + edx*4 + 0x38c917f1], ebp
test eax, 0xa168459b
inc edi
sbb al, 0x2f
jnp 0x100c3e6d
sar byte [ebp - 0x11], 1
fst st(3)
cmpsd dword [esi], dword es:[edi]
pushfd
mov dh, 0xe2
in al, dx
repne outsd dx, dword [esi]
or eax, 0x194aa115
xlatb
inc esi
test eax, 0xddbcca06
int3
push es
retf 0xddbc
pop esi
xchg esi, eax
call 0xe7181d4f
std
adc esi, dword [esp + eax*4 + 0x73d4e108]
sti
sbb bh, 0x44
jbe 0x100c3e64
cwde
cmp al, byte [esi + 0x66]
ja 0x100c3efd
xchg esi, eax
xor bh, byte [edx - 0x4f8b144a]
jbe 0x100c3e17
mov al, 0x36
jbe 0x100c3e17
or dword [ecx + eax*8 - 0x69242972], ebp
mov esi, 0x89bcf848
push ebp
inc esp
xchg ecx, eax
cmp esp, edx
or eax, dword [ebx]
stc
sub al, 0x1d
jns 0x100c3ea6
jnp 0x100c3ef8
and dl, byte [edi - 0x47]
lodsb al, byte [esi]
jns 0x100c3f12
popfd
call fcn.10049c0c
push 0x10146a8c
push dword [ebp - 0x28]
call fcn.1011f7ae
mov edi, eax
add esp, 0x14
cmp edi, ebx
pushfd
test byte [0x100c3ed4], 0x3f
jne 0x100c3ed5
inc esi
popfd
jne 0x100c3eee
push str.Cant_Open_File_
push ebx
push ebx
call fcn.10049c0c
add esp, 0xc
xor eax, eax
jmp 0x100c4436
push 2
push 0xfffff708
push edi
pushfd
test byte [0x100c3f72], 0xad
add eax, 0x100c3f72
lodsd eax, dword [esi]
jne 0x100c3f73
lahf
imul edi
or eax, 0x9daab6a6
sti
idiv al
in al, dx
stc
dec ecx
add esp, 0x25713e9
dec edi
sub eax, 0x873f9559
jb 0x100c3f4e
push edi
add cl, byte [edi + 0x2d]
pop ecx
xchg ebp, eax
aas
xchg dword [edx + 0x32], esi
cmp al, 0x6e
mov ss, word [ebx - 0x49ffd518]
cmp eax, 0xd2b34de2
sbb al, 0xbd
dec ebp
cmp dword [edi + 0x32], edx
xchg edi, eax
mov ecx, 0x20992c05
sbb esi, dword [edx]
adc eax, 0xfb3675c2
add eax, 0x1b20992c
xor al, byte [ecx + 0x3675c2d0]
sti
daa
test dword [eax - 0x4d], esi
sal eax, 1
in eax, 0x57
in eax, dx
fidiv dword [esi + ecx - 0x5d]
mov al, 3
inc edi
in eax, 0x3e
shr byte [esi + 0x102e2d8e], 1
shr byte ds:[esi + 0x102e2d8e], 1
das
das
dec ecx
les ecx, [ebp - 0x24]
pop eax
enter 0x7319, 0x36
xchg esp, eax
mov bh, 0xd
jae 0x100c3f89
mov edx, 0x83d6c76f
clc
loop 0x100c3f31
imul esp
fdivrp st(5)
clc
int1
popfd
call fcn.1011fadf
add esp, 0xc
test eax, eax
je 0x100c40d9
push str.fseek_error
push ebx
push ebx
call fcn.10049c0c
push edi
call fcn.1011e7c5
add esp, 0x10
jmp 0x100c3ee7
push edi
push esi
push 1
push dword [ebp - 0x1c]
call fcn.10120084
add esp, 0x10
cmp eax, esi
je 0x100c40f6
push str.fread_error
jmp 0x100c3f89
push edi
call fcn.1011e7c5
pop ecx
mov edi, 0x270f
movsx eax, byte [ebp - 0x18]
neg eax
pushfd
test byte [0x100c416d], 0x69
jne 0x100c416e
pop ecx
jecxz 0x100c4182
sal byte [ebx - 0x2569611e], 8
push ss
les ebp, [ebx]
cmpsb byte [esi], byte es:[edi]
out 0xb5, eax
pop ecx
push 0x5c
xchg ebx, eax
mov esi, 0xcd4c868d
sub byte [edi + 0x33e6f0e1], dl
movsb byte es:[edi], byte [esi]
leave
popfd
shl eax, 0x84
pop edx
mov byte [ecx - 0x6b06151f], ah
and eax, 0x50c8acce
mov bh, 0x4a
dec esi
xchg al, dh
dec esi
mov eax, dword [0xfbe675e1]
in al, dx
lea esp, [eax]
xor al, 0x29
push edx
dec ebp
cmp eax, dword [esi + 0x537c0bc7]
cmp eax, 0x889caa95
xor byte [ebx], dl
add dl, ah
in al, dx
push eax
sbb byte [esi - 0x71c6f3c9], 0x32
popfd
sbb eax, eax
lea ecx, [ebp - 0x18]
and eax, ecx
push eax
push esi
push dword [ebp - 0x1c]
call fcn.100443f7
add esp, 0xc
dec edi
or al, 0x4f
jne 0x100c4102
push 0x101489f8
push dword [ebp - 0x1c]
call fcn.1011ee6b
pop ecx
pop ecx
test eax, eax
je 0x100c4394
pushfd
test byte [0x100c41d4], 0xa4
add eax, 0x100c41d4
movsb byte es:[edi], byte [esi]
jne 0x100c41d5
sub eax, 0xd1e387bf
inc edx
loopne 0x100c41a3
push esi
push ebx
sub byte [edi], bl
int1
daa
sahf
aam 0x5a
push ebx
out dx, eax
push ds
out dx, al
xor al, 6
cdq
xor al, 0xd6
lea edi, [eax - 0x6dbf98cb]
les esi, [ebx - 0x4fd2d8ee]
adc dl, dh
popfd
push str.file_is_not_config
push ebx
pushfd
test byte [0x100c4296], 0x28
jne 0x100c4297
sbb byte [edx], 0xfb
shr bl, 1
arpl word [eax - 0x387ea01b], di
or eax, 0x60e7e1f6
mov bh, 0xd5
jbe 0x100c4277
xchg edi, eax
test eax, 0x1e14a035
jb 0x100c4285
lahf
jns 0x100c4245
test al, 0xb6
xor dl, byte [ebx + ebp*4 - 0x5c]
adc byte [ebx + 0x26d73c37], bl
fidivr word [edi + 0x64afd3b9]
cmp eax, 0x3d41defa
pop ebp
rcr cl, 0xcb
xchg dword [esi + 0x25], edi
push 0x2062dae5
add dword [edi - 0x66868578], 0xd9d3ee95
mov edx, 0xfbba26c0
push ds
std
scasb al, byte es:[edi]
adc al, 0x5d
psubsw mm0, qword [edx + 0x49]
inc edx
dec ecx
pop ss
sbb eax, 0xf9b24be3
mov ebp, 0x54484ef1
in eax, dx
jge 0x100c4255
imul ebp, dword [ecx - 0x5aacfd70], 0xffffff81
xchg esi, eax
not byte [ecx]
ror dword [eax + 0x35415e2c], 0x48
xchg eax, esi
aaa
popfd
push 0x270ed600
and byte [eax], 0x56
and ecx, dword [esi - 0x74]
test dword [eax + 0x7ec2aa80], ecx
inc byte [esp + edi*2 + 0x1c7d5346]
sub byte [edx - 0x7b01813e], 0x7c
inc esi
push ebx
jge 0x100c429e
int 8
dec edi
cwde
pop es
cmp edx, dword [eax - 0x50]
pop ebx
sub eax, 0xe4295b96
jecxz 0x100c4301
sti
pop edi
test al, 0x5a
lahf
popfd
push ebx
call fcn.10049c0c
push esi
push ebx
pushfd
test byte [0x100c4302], 0x93
jne 0x100c4303
jae 0x100c42da
xchg ebx, eax
xor dl, bl
js 0x100c4275
xchg ecx, eax
adc esi, dword [edx - 0x4fb07352]
pop esp
std
jb 0x100c42fc
and ebx, dword [0xe19fa02d]
test dword gs:[ecx + edx*2], esi
fmul st(6), st(0)
pop ds
and byte [edi + 0x7e], 0x6a
xchg ebx, eax
sbb eax, dword [edi]
dec ebx
add dh, dh
jg 0x100c42f5
idiv byte [edi + 0x20]
or bl, ch
stc
ficomp word [eax - 0x19]
jno 0x100c42ad
out 0x71, eax
shr byte [esi + eax*4 - 0x79], 1
sti
daa
or eax, 0x54d16b64
insb byte es:[edi], dx
xchg byte [edi + 0x640d27fb], al
imul edx, ecx, 0x54
in eax, dx
into
lds edi, [ebx + 0x1f6caee2]
pop esp
int1
mov dh, 0xab
lahf
dec esp
or ch, byte [ebx + 0x1f4fb889]
mov ah, 0xe9
pop es
sbb al, 0xb4
push cs
jmp 0x1ec05f08
jecxz 0x100c42d2
popfd
push dword [ebp - 0x1c]
call fcn.1011df60
add esp, 0x18
jmp 0x100c3ee7
xor eax, eax
pushfd
test byte [0x100c4433], 0xe7
jne 0x100c4434
sub byte [ebx - 0x4bab06f3], bh
mov dword [0xbec0d63b], eax
adc bl, bl
mov word [esi + 0x18], ss
mov bh, 0x15
mov dl, byte [ecx - 0x4bbb1879]
pop ebp
out 0xcb, eax
mov eax, dword [0xe7213910]
adc byte [ebx + edx*2], ah
add ch, ah
ja 0x100c4443
push edi
pop eax
mov eax, 0xa1d04155
cmp ch, byte [ecx + eax*8 + 0xe922692]
push cs
mov eax, dword [0x477269a5]
sbb byte [esi - 0x69], ch
sbb dword [edx + 9], ebp
jle 0x100c4446
and dh, byte [edi - 0x64]
cmp esi, dword [ecx + 0x4d]
push eax
in eax, dx
cmp esi, dword [eax + 0x3b]
inc edi
in al, 0xa4
fisttp word [esp + ebp*8]
xor byte [ecx], dh
arpl sp, ax
sub al, 0x2f
insd dword es:[edi], dx
mov esi, 0xbe49a4a5
or edi, dword [eax*8 - 0x53c69a33]
pop ebx
mov ecx, dword [0x6bd3c44e]
sbb dword [edi + 0x64d15dc7], ecx
daa
xchg ecx, eax
adc byte [eax + 0x6d], dh
push ecx
dec esi
scasb al, byte es:[edi]
sub ebx, dword [edx*8 - 0x450b0b74]
test dword [eax - 0x11], ebp
mov dl, 0x7e
div dword [edx - 0x6574cbd5]
jb 0x100c43d8
xor al, 0x8b
lcall 0x4d8b, 0x409da472
cld
popfd
inc eax
mov ecx, dword [ebp - 4]
pop edi
pop esi
xor ecx, ebp
pushfd
test byte [0x100c445a], 0x67
jne 0x100c445b
adc byte [edi + 0x75], ah
adc al, 0x73
push edx
jae 0x100c449b
lodsd eax, dword [esi]
jle 0x100c442f
enter 0xffffffffffffb12e, 0x39
jle 0x100c441d
scasb al, byte es:[edi]
aaa
movsb byte es:[edi], byte [esi]
cmp dword [edi - 0x7d], ecx
xlatb
out dx, eax
popfd
pop ebx
call fcn.1011e48a
pushfd
test byte [0x100c44c0], 0x4a
jne 0x100c44c1
adc byte [edx + 0x75], cl
push ebp
jecxz 0x100c4468
cmpsb byte [esi], byte es:[edi]
jg 0x100c44b1
mov esi, 0x8fc0b44
test dword [ebx - 0x25847709], ebx
and esp, dword [ebx - 6]
sbb ecx, dword [eax]
int 0xd2
rol dword [esi + eax*2 + 0x62], 0x7d
adc cl, byte [ecx + 0x2e]
and esi, dword [edx - 0x72a40728]
mov ch, 0xca
arpl word [ebp - 0x24f0ddaa], dx
xor al, 0xad
push ebp
push es
inc esp
pop es
daa
push ds
xor byte [ebx], ah
je 0x100c44ca
arpl word [edi], di
cld
or eax, dword [0x3fc38e47]
sub eax, 0x7971696
xchg edi, eax
pop es
in eax, dx
fld xword [ecx + 0x65eccf72]
add ecx, dword [ecx + 0x33]
pop es
imul dword [ebp + 0x36]
popfd
leave
ret
call dword [edi + 0x68]
add byte [eax], 0
add byte [edx + 4], ch
push edi
push 1
pushfd
test byte [0x100c44e8], 0x7d
je 0x100c45e9
sub eax, 0x10d6db
sahf
jge 0x100c44fe
in eax, dx
xchg ecx, eax
sbb eax, 0x816ba24e
pop esi
test dword [eax - 0x53106750], edx
cmp al, dl
xor al, 2
add bl, byte [eax - 6]
pop eax
cli
push ebx
or ecx, dword [esi]
mov bl, 0xcb
adc eax, 0x468a7c95
xor dword [esi - 0x68c4d6aa], edx
sub dword [ebx], edi
xchg edi, eax
jae 0x100c4567
outsd dx, dword [esi]
dec esp
xchg edi, eax
add al, 0x90
cmp byte [ebx + ecx*8 - 0xd1a7389], 0x89
test eax, 0xf5c9073f
sub ebx, dword [ecx + 0x1dc5ad35]
scasb al, byte es:[edi]
bound ebp, qword [edi + 0x163f6a03]
outsb dx, byte [esi]
in al, 0x38
or ecx, edx
out 0xb, eax
lds ebx, [edx + 1]
jl 0x100c44c1
pop edx
add dword [edx + eax*4 - 0x75], edi
mov byte [edx + 0x5b], ch
jge 0x100c44ff
mov ecx, dword [eax - 0x4582a496]
nop
sal ch, 1
inc eax
sbb dh, byte [eax - 0x46]
jle 0x100c45c1
jno 0x100c45cc
mov dh, 0xda
fbstp tbyte [eax + ebp]
add eax, 0x9a99490c
or byte [ecx], ch
in eax, 0
jno 0x100c454e
or al, 0x49
cdq
lcall 0xed71, 0xe52908
add byte [esi + 0x4f], ah
js 0x100c450e
stosb byte es:[edi], al
or al, 0xbf
popfd
add dh, byte [esi + 0x6e736e72]
je 0x100c45d7
cmp al, 0x62
lahf
xchg esi, eax
sbb dword ss:[edi + ecx*4], ebp
jecxz 0x100c45db
xor esi, dword [0xe3786061]
sub bh, byte [0x3ca384f2]
mov cl, 0x90
xchg dword [ebx - 0x15], ebp
jg 0x100c453b
jae 0x100c4557
jo 0x100c4598
cld
inc ecx
stc
leave
add eax, 0x6b367a17
xchg edx, ebx
int 0x32
jecxz 0x100c459d
pop ss
jp 0x100c45d1
imul eax, dword [edi - 0x1ccd3226], 0xfffffffb
fcmove st(0), st(5)
xor ah, bl
sti
mov dh, 0x17
test dword [esi + 0x48e2cec8], eax
dec ebp
rcr dword [edx], cl
popal
fcmovnb st(0), st(5)
bound ebx, qword [0x44445a53]
inc esp
inc esp
push cs
xchg esp, esp
sbb eax, 0x4ad7717
or al, 0x35
cli
mov dh, 0x26
xor eax, 0x7aef8d38
sub ecx, edx
adc byte [edx], al
pop es
add ah, byte [esi]
pop es
mov dword [0x488ec248], eax
add bl, byte [esp + ebx*4]
ret 0x488e
scasb al, byte es:[edi]
sub ebx, dword [ecx - 0x408825b6]
fidiv dword [edi - 0x41]
js 0x100c45b4
test al, cl
mov edx, 0x7c59975b
outsd dx, dword [esi]
in al, dx
popfd
push 0x40000000
push dword [ebp + 8]
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov ebx, eax
cmp ebx, 0xffffffff
jne 0x100c4606
xor eax, eax
jmp 0x100c4892
push esi
push edi
pushfd
test byte [0x100c461c], 0x68
jne 0x100c461d
or edi, dword [eax - 0x3211dd26]
mov eax, 0xcdee22da
ja 0x100c4656
cmp esp, ebx
jl 0x100c461c
call [ebp - 0x63f7ba73]
popfd
lea eax, [ebp + 8]
pushfd
test byte [0x100c4653], 0xb2
jne 0x100c4654
mov bh, 0x1a
xchg byte [edi + ecx*2], ch
test dword [esp + esi*8 - 0x8f1449e], ecx
leave
leave
adc ch, byte [ecx]
andnps xmm4, xmmword [esi]
mov dh, ch
hlt
push cs
test ecx, 0xf2912c9
push ebp
mov dh, ch
jge 0x100c4611
push ds
imul eax, dword [esp + edx*4 - 0x51432181], 0x63cb24d1
and dword [edx + 0x5bcffd24], ecx
popfd
push eax
mov esi, 0x50c
push esi
push dword [ebp + 0xc]
pushfd
test byte [0x100c472d], 0xa5
jne 0x100c472e
adc al, 0xc4
ror byte [ecx + 0x7b], 0x71
inc esi
test eax, 0xc65ef33a
or eax, eax
sbb dword [ebx + 0x57af5dab], 0xffffffeb
in al, 0x13
scasd eax, dword es:[edi]
mov dword [0xa10c637e], eax
cmp ch, cl
cmc
inc eax
dec esi
sti
dec ebx
jle 0x100c4635
cld
jno 0x100c4632
jbe 0x100c466f
stosd dword es:[edi], eax
out 0xd7, eax
add al, 0x79
bound ebp, qword [esi - 0x70]
or bh, byte fs:[ebx + 0x13]
mov ch, 0xc0
sub dl, byte [ebp + 0x6cd10d06]
xor ecx, 0x12c0ea8c
xor eax, 0xcaa65ecf
xchg edx, eax
rcl byte [edx + 0x10], 0x16
stosb byte es:[edi], al
add dl, byte [ebx]
push ss
leave
mov dword [edi + 0xa], edi
xchg ebx, eax
inc ebp
pop ebx
fbstp tbyte [edx + 0x77]
mov edi, 0xad489227
mov ebp, 0xca8ab330
popal
in al, 0xe0
in al, dx
int3
popfd
mov dword [ebp + 8], edi
push ebx
call dword [sym.imp.KERNEL32.dll_WriteFile]
pushfd
test byte [0x100c483e], 0x8c
jne 0x100c483f
sti
mov eax, 0x9871941b
xchg esi, eax
cmpsd dword cs:[esi], dword es:[edi]
inc esp
or byte [eax + 0x42], 0xfc
mov al, byte [0x1cdc9e94]
xor dword [ecx + 0x26], 0xffffff99
dec ecx
xlatb
sbb ebx, edi
mov al, 0x82
inc edx
div dword [ebp - 0x4d1f66e7]
mov dh, 0xcb
test edi, 0x9b82b03d
ja 0x100c4764
cli
test byte [edx + 0x3b], 0
xchg ebp, eax
push edx
push cs
cmc
cwde
loop 0x100c47fc
lodsb al, byte [esi]
cld
fimul dword [eax - 0x41]
mov esi, 0x9743bf8c
mov dword [0x8b49e43], eax
jecxz 0x100c47ec
fistp dword [esi - 0x2e]
imul ebp, dword [ecx + 0x4bf71bff], 0x4a
xchg dh, al
mov al, byte [0x2448c2bc]
sub esi, edx
mov dword [edi + 0x64], esi
add dword [esi - 0x55], edx
int 0xc6
or ebx, dword [esi + 0x39]
test byte [ebp - 0x690921a5], bh
mov esp, dword [edi - 0x4893d223]
fcom qword [eax]
push esp
inc ecx
sub byte [eax], bl
or ch, byte [edx]
cdq
outsb dx, byte [esi]
call 0x930be917
clc
pop esi
mov dh, 0x5d
push edi
pop esi
xchg dword [esi], esp
mov dword [ebp + 0x7b], esi
cmp al, 0x5f
xchg cl, al
jle 0x100c4844
xchg edi, eax
pushfd
or al, al
mov ch, 0xf0
in eax, dx
cmp al, 0xec
mov ebx, eax
dec esp
in al, 0x2c
dec ecx
dec esi
xchg esp, eax
xor byte [esp + ebx*2], 0x6f
xchg esi, eax
das
lds ebp, [ebx + 0x76c74f20]
lea ebx, [eax]
mov dl, 0xf8
mov dh, 0x8a
mov edx, 0x1912f9c5
sbb byte [edx - 0x45754908], dh
vmovlpd xmm3, xmm0, qword [ecx]
push ebp
loopne 0x100c4884
aam 0xe8
in al, 0x14
sub ebx, ebx
mov al, byte [0xa87db3d4]
add cl, byte [edx - 0x4f]
lodsb al, byte [esi]
mov esi, 0x65031e43
out 0x61, al
adc cl, al
fistp dword [ecx - 0x5d3b8270]
test al, 0x90
push 0xc4320782
fnstcw word [eax - 0x25]
mov ss, edx
rol dword [ebx - 0x7f37b700], cl
xchg ebx, ecx
xor al, 0xfc
clc
aas
popfd
test eax, eax
jne 0x100c49f4
lodsb al, byte [esi]
add dword [eax], eax
add byte [ebx - 0x64], dl
push ebx
pushfd
test byte [0x100c4887], 0xaa
jne 0x100c4888
pop edi
pop edx
cwde
lea ebp, [ecx]
mov eax, dword [0xc0568f03]
dec edi
sbb al, 0xb0
add esi, dword [esi]
pop esp
push cs
push 0xffffffffffffffaf
pop eax
xor eax, ebp
adc bh, 0x4f
and al, 0xa2
scasd eax, dword es:[edi]
sub dword [edx], ecx
xlatb
adc ah, byte [0x89e9eeec]
test al, 0x7c
mov al, byte [0xaba0e22b]
movsd dword es:[edi], dword [esi]
jns 0x100c48a4
dec ecx
or ebp, dword fs:[ebp + 0x52]
popfd
call dword [sym.imp.KERNEL32.dll_CloseHandle]
xor eax, eax
pop esi
pop edi
pushfd
test byte [0x100c48a6], 0x1a
je 0x100c49a7
das
xchg ebx, eax
pop ds
rep movsb byte es:[edi], byte ds:[esi]
insd dword es:[edi], dx
and edi, ebx
fidivr word [edx + 0x16]
push ss
mov ds, word [ebx - 0x1a30ef70]
mov eax, edx
mov cl, 0x7b
movsd dword es:[edi], dword [esi]
ja 0x100c4915
adc bh, cl
in eax, 0x89
sal byte [ecx + 0x5b77a57b], 1
imul ebp, dword [edi], 0x31
xchg esp, eax
aas
clc
test al, 0xf6
loopne 0x100c493f
mov bl, 0xe2
out 0xc1, al
adc cl, cl
bound ebx, qword [esi - 0x4c]
jne 0x100c48d5
outsb dx, byte [esi]
jae 0x100c48ac
stosd dword es:[edi], eax
push eax
fcom dword [eax - 0x6d]
cld
mov dl, 0xa6
sub al, 0xea
mov al, byte [0x12347e5e]
push eax
mov ecx, 0x49af787c
bound ebx, qword [edx + eax*4 + 0x6d1bf39]
nop
scasb al, byte es:[edi]
fist dword [ebx]
out 0x1d, al
push eax
sub dword [esi], ebx
and eax, 0x52b50b64
rcr dword [ebx + 8], 0xaf
aas
sti
sal byte [edx], 1
cwde
insb byte es:[edi], dx
into
and byte [edi - 0x7c49c9ed], dl
cmp al, ah
jno 0x100c48b0
sub dl, byte [ebp - 0x5e]
pop esp
in al, 0xc9
insb byte es:[edi], dx
mov byte [0x6cc9e45c], al
and ecx, dword [ecx]
popfd
push esi
push ebp
push edi
mov dword [edi], esi
aas
fistp dword [edx - 0x19656df4]
inc ecx
mov ecx, 0xc7953875
mov ch, 0xd0
or byte [ebx - 0x1a19fb5], ah
in eax, dx
push edi
or cl, dl
sub dword [0xfede35c2], edx
fdivp st(6)
sbb eax, 0xed51a65
sbb dl, ch
push cs
mov al, 0x40
mov eax, 0xde1ad11c
or al, 0x93
lodsb al, byte [esi]
int 0x51
test al, 0x4e
nop
into
jnp 0x100c4983
push 0xffffffffffffffb2
mov eax, dword [0xb36b726b]
sub dword [ecx - 0x1b124f98], edi
jg 0x100c4998
jg 0x100c4962
add dword [ebp + 0x30], eax
sub eax, 0x450d580a
js 0x100c49ba
cdq
xlatb
mov dh, 0x67
test al, 0xbe
pop ebx
imul esp, dword [ebx], 0x2e
not ah
or edx, dword [eax - 0x4afc3c1b]
movsb byte es:[edi], byte [esi]
jb 0x100c4943
rcl dword [edx + ebp*2 - 0x5f1fdb04], cl
dec ebp
cld
in al, 0x53
jae 0x100c4a15
jl 0x100c49e2
dec eax
or al, 0x77
cmc
mov dword [0x7cf375b9], eax
mov eax, dword [0x244caf0]
popfd
pop ebx
pushfd
test byte [0x100c49ee], 0xa6
jne 0x100c49ef
push ecx
mov ebx, 0x7303945f
or al, 0xd
pop edi
dec ecx
pop esi
or eax, 0x5ef3495f
inc edi
xchg ebp, eax
popal
mov dh, 0x38
lea esp, [ecx - 0x55]
xor dword [edx + edx*2 - 0x11b94418], 0x7d53aac2
popfd
cmp esp, dword [edx]
push ss
rcr ebx, 0x8a
int 0x21
arpl word cs:[edx], cx
int1
fsubr qword [bp + si + 0x17]
inc esi
out dx, al
ret 0x53aa
pop ss
pop ebp
into
or eax, dword [ebp - 0x56]
jne 0x100c4a3a
movsb byte es:[edi], byte [esi]
lodsd eax, dword [esi]
in eax, 0x4b
dec edi
popfd
pop ebp
ret 8
cmp dword [ebp + 8], esi
je 0x100c4a41
push ebx
pushfd
test byte [0x100c4a32], 0x1f
jne 0x100c4a33
push ebp
xchg edi, eax
loopne 0x100c49cc
mov al, byte [0xb57dd84f]
xchg ecx, eax
adc byte [esi - 0x5083499c], 0x33
nop
fsubr qword [edx - 0x5e]
sahf
xor edx, dword [eax - 0x615d9524]
out 0x40, al
or dword [edx - 0x756e4185], ebp
add edi, ebp
clc
jl 0x100c4a15
enter 0x1287, 0xffffffffffffffd8
jbe 0x100c4a3a
test eax, 0xf6d585b8
popfd
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, edi
jmp 0x100c4891
xor edi, edi
inc edi
jmp 0x100c49f9