Function at 0x100423eb
Capabilities:
Enumerate files on windows
Get common file path

Disassembly:
adc ecx, dword [edx - 0x47]
or bh, byte [ecx]
add al, 0xb5
clc
sbb esi, edx
push cs
add dh, byte [esi + 0x7f]
mov edi, 0xad0bdc8b
push ebp
pushfd
test byte [0x100424f9], 0x9f
jne 0x100424fa
mov esp, 0xde61b122
cmp eax, 0x31988147
lahf
popal
adc al, 7
xor bh, cl
sub eax, 0xc15c9117
cmp dword [esi + 0x22], 0xffffff9c
enter 0x1e68, 0xffffffffffffffb6
or ebp, dword [esp + esi - 0x31]
pop ds
daa
inc ebp
add dword [esi], 0x383200e9
jae 0x1004246d
sbb dword [0xffbf99dd], esi
xlatb
inc dword [ebp + 0x783b968a]
push edx
fstp qword [ecx - 0x280041]
test dword [edx + 0x52783b96], ecx
dec esi
je 0x100423d6
push edi
xchg edx, eax
adc ecx, dword [ebx]
jle 0x1004247c
in al, dx
dec bh
mov dh, 0x15
pop eax
sub dl, dl
sbb eax, ebx
std
dec edx
xchg ebx, eax
cmp dword [edi], edi
cld
loop 0x10042413
sbb byte [edx], cl
add dl, byte [edx]
jb 0x10042428
insd dword es:[edi], dx
lodsd eax, dword [esi]
aaa
jg 0x100424cc
jo 0x1004247c
sbb al, 0x2f
xor eax, 0xb261a554
push es
jo 0x10042479
mov dh, 0x2e
add edx, dword [eax + 0x71]
stosd dword es:[edi], eax
cmpsd dword [esi], dword es:[edi]
ror edi, 8
jecxz 0x1004247c
sbb ch, byte [ecx + 0x33]
jl 0x10042489
movsd dword es:[edi], dword ss:[esi]
aad 0x68
aaa
add eax, 0xd871c09b
cmp dword [esi - 0x13], eax
mov al, byte [ebx + 0x13]
movsb byte es:[edi], byte [esi]
clc
cld
xor al, 0x63
test byte [edx + 0x16], dl
sub ah, byte [esi]
sub al, 0xc4
lds ebp, [esi - 0x26]
pop es
or eax, 0xeb993aab
mov bl, 0x47
push edx
fcom qword [edi - 0x33fb9713]
xor ah, byte [ebx - 0x70e5d778]
cdq
xchg byte [eax + 0x8b4d7f5], dh
jae 0x100424d3
into
xor edi, dword [edi]
xchg edi, eax
shl dword [edi - 0x57], cl
xor edx, dword [ecx]
pop edx
pop eax
movsd dword es:[edi], dword [esi]
and ecx, eax
inc edi
aad 0x2f
sub dword [edi + 0x5d], 0x8e9f1f89
cli
in eax, 0xa0
add al, 0xac
pop ds
lahf
invalid
lodsb al, byte [esi]
mov dword [edx + 0x59], esi
pushal
test dword [esi - 0x14], ebp
jg 0x10042548
push edi
insb byte es:[edi], dx
mov eax, 0xfc29c6be
xchg esp, eax
mov ebp, 0xa7d9916d
add edi, eax
dec eax
inc eax
sbb eax, 0x80b90602
mov ebp, 0xa32bc88c
inc edi
popfd
mov ebp, esp
sub esp, 0x24c
mov eax, dword [0x10170c30]
xor eax, ebp
pushfd
test byte [0x10042597], 0xc9
jne 0x10042598
push esp
inc eax
cmpsb byte [esi], byte es:[edi]
test dh, bh
into
sahf
or byte [esi], ch
lahf
dec edi
push edi
push es
aam 0x53
inc ecx
or byte [edx - 0x3e], ah
and esp, dword [ecx]
inc edi
imul eax, dword [esi], 0x23ce640f
mov ebx, gs
in al, dx
xchg byte [esi + 0x51], bl
add byte [esi], 0x74
dec esp
and ecx, ebp
fimul dword [ebx + 0x2f]
int3
push ecx
out 0x1d, al
test edx, 0x58fb3d83
imul edx, edx, 0x9172d63c
lahf
xor bl, al
loop 0x100425c8
idiv byte [ebx]
xor dword [edx + 0x13898d34], 0xa3ac20f6
mov ebx, 0x9fb5a635
jno 0x100425aa
adc eax, 0x614e55f6
push ebp
and byte [ebx + 0x37], ah
pop esi
sbb al, 0xa0
pop es
cmp al, 0x84
sahf
shr byte [ebp + 0x60], cl
pushal
rcr byte [edx + edi - 0xe], 1
sub dl, ah
dec edi
pop ds
clc
sub byte [edi - 0x7aec211f], 0x7a
bound ebp, qword [esi - 0x5e]
popfd
mov dword [ebp - 4], eax
mov eax, dword [ebp + 8]
pushfd
test byte [0x1004269b], 0x64
jne 0x1004269c
add byte [eax], al
add byte [esi - 0xaa7e983], ch
scasb al, byte es:[edi]
jge 0x100425c6
pop eax
cmc
xchg esi, eax
push esi
or edx, dword [esi + 0x3a9196cc]
dec ebx
nop
jge 0x10042584
pop ebx
mov ebp, 0x90ae5506
sbb eax, 0x7be01efd
push ds
loopne 0x10042644
jnp 0x100425aa
loopne 0x1004262a
pop edi
stosd dword es:[edi], eax
mov esp, dword [ebx + 0x2e4f3165]
pop edx
lds esi, [edi + esi]
salc
mov esp, dword [ebx + edx*4]
xchg ebx, eax
push ecx
mov ah, 0xb3
mov al, byte [0x7d5971d2]
mul ah
movsb byte es:[edi], byte [esi]
mov bl, 0xa0
sal byte [ecx + 0x59], cl
jge 0x100425d9
in al, 0xa4
je 0x1004265c
xchg esp, eax
je 0x100425dc
xor eax, 0x985aa409
dec eax
dec esp
outsd dx, dword [esi]
setle ch
push ss
inc ecx
push eax
pop ds
jne 0x1004266b
jbe 0x100425f6
test dword [ebp + 0x47f057ec], ebp
fsubrp st(4)
xor ebp, dword [eax + ebp*2 - 0x75f42ae6]
cwde
sbb dl, byte [ebx - 0x2653423d]
mov eax, 0x838c9cf9
andnps xmm0, xmmword [edx - 9]
outsb dx, byte [esi]
mov gs, word [eax + 0x2f]
xlatb
mov esp, 0xadcbc80
xchg ebx, eax
push edi
stosb byte es:[edi], al
in eax, dx
rol dword [edx - 0x7e], cl
test eax, 0x74eb04eb
popal
out 0xe6, eax
cdq
dec eax
sbb dword [ebp + 0x35], edx
adc al, 3
dec edi
movsd dword es:[edi], dword [esi]
test byte [ebx + ebp - 0xbda12a8], bl
in eax, 0x9a
lea esp, [esi + 0x71c251e5]
add eax, 0x52e5869a
movsd dword es:[edi], dword [esi]
inc ebx
lodsd eax, dword [esi]
test eax, 0x2c542fbb
dec ecx
xor bh, byte [ebx]
dec ebp
les ecx, [ebp - 0x68fd32d9]
hlt
cmp ecx, dword [ebp - 0x3c]
lea esp, [edi]
int 2
xchg edi, eax
or al, 0x75
fistp dword [ebx + ebp*4 - 0x15]
push ecx
out dx, eax
and byte [ebp - 0x68], bh
push ebx
popfd
cmp dword [edx + 0x7e848753], edx
outsb dx, byte [esi]
aaa
insb byte es:[edi], dx
xor ah, byte [esp + ebp*8 + 0x19]
sar byte [edx - 0x48], 1
stosb byte es:[edi], al
aas
xor eax, 0xd80fffd
dec esp
pop edx
call 0xebb9ede2
cmp eax, 0xe4c8f192
pop esp
mov edi, 0xb74ad61e
salc
popfd
and dword [ebp - 0x24c], 0
test eax, eax
jne 0x100426d6
lea eax, [ebp - 0x108]
pushfd
test byte [0x100426c2], 0xb6
jne 0x100426c3
fnstenv [eax - 0x2e]
movsd dword es:[edi], dword [esi]
pop ebp
jge 0x10042702
cmc
jbe 0x10042661
popfd
push eax
push 0x104
call dword [sym.imp.KERNEL32.dll_GetCurrentDirectoryA]
mov byte [ebp - 5], 0
jmp 0x100426e4
push eax
lea eax, [ebp - 0x108]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
push ebx
push esi
lea eax, [ebp - 0x108]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenA]
mov esi, dword [sym.imp.KERNEL32.dll_lstrcatA]
lea ecx, [ebp - 0x108]
cmp byte [ecx + eax - 1], 0x5c
je 0x10042782
call [esp + esi*2 + 0x7c]
push 0x101467b0
mov eax, ecx
push eax
pushfd
test byte [0x1004277e], 0xec
in al, dx
jne 0x1004277f
jnp 0x10042749
push edi
mov cl, 0xf
pop esi
and dword [edx + 0x68c7c30a], ebx
lodsd eax, dword [esi]
outsb dx, byte [esi]
js 0x10042715
int3
pushfd
cmp byte [ebp - 0xd1c1be1], cl
enter 0xffffffffffffbea2, 0xfffffffffffffffb
sbb dword [edi - 0x3c6b3639], 0x54d397cf
ficom dword [edi]
mov ecx, 0xb341761c
mov ebx, 0xf655b9aa
push ebx
mov esp, 0xa01fb7c9
inc esp
cmp al, 0x22
in al, dx
test byte [ebx + 0x4965a305], bh
clc
mov bl, 0x32
push edi
popfd
call esi
push 0x101469b8
lea eax, [ebp - 0x108]
push eax
pushfd
test byte [0x1004279f], 0x89
jne 0x100427a0
push ebx
in al, 0x6e
mov cl, 0x66
scasd eax, dword es:[edi]
scasw ax, word es:[edi]
insd dword es:[edi], dx
popfd
call esi
lea eax, [ebp - 0x248]
push eax
lea eax, [ebp - 0x108]
pushfd
test byte [0x100428aa], 0x9d
jne 0x100428ab
scasd eax, dword es:[edi]
jle 0x1004279d
scasb al, byte es:[edi]
pop ds
dec edx
aaa
out dx, al
pop esi
imul ebp, dword [edx + eax*4 + 0x7dde526], 0xb6ddf569
jg 0x10042853
sub ecx, esi
mov ah, 0xdc
cmp ecx, dword [edx - 4]
dec esi
sbb al, al
sub al, 0xea
cmc
jbe 0x1004282b
out dx, al
shl byte [eax + 0x35], 0xbe
sub dword [ebx], eax
out dx, al
scasb al, byte es:[edi]
aaa
or ebx, dword [esi - 0x8ded545]
adc eax, 0x6a8b8a9
inc edx
out dx, eax
cmp cl, ah
push eax
cmp esi, dword [eax + 0x3f]
popal
das
pop es
add al, 0x8b
pop ebx
jnp 0x10042820
xchg ebp, eax
inc esp
or dword [edi - 0x2f], esp
outsb dx, byte [esi]
int 0xb6
push es
and eax, 0xbeab7af8
mov al, byte [0x6053fc93]
mov edx, 0x286fd4e1
mov ebx, 0xa88c2528
aam 0x6f
sub byte [ebx - 0x5773dad8], bh
sub byte [0x87a7a88c], ah
push ecx
cmpsd dword [esi], dword es:[edi]
xchg dword [ecx - 0x2d], edx
and byte [ebx], bh
or ch, byte [ecx]
mov dword [edi], ebp
movsb byte es:[edi], byte [esi]
shl dword [eax], cl
cmp ecx, dword [edx]
sub dword [ecx + 0x2fe6a42f], ecx
out 0x2f, al
push ebp
add al, 0x66
leave
cld
nop
aad 0xf
add byte [edx + 0x65], cl
dec ebp
cmp esi, dword [esp + 0xb6c5483]
pop ss
push 0x20dcccc9
sub ebp, dword [edx + 0x54e6a940]
out 0x54, al
push esp
jl 0x10042886
lds edi, [ebp + edi*4 + 0x35]
loopne 0x10042852
cmp dword [ebx - 0x50307c93], ecx
dec ebx
jl 0x100428a3
jl 0x10042824
pop eax
add dl, byte [ebx + ebx*8 + 0x251eb359]
xor eax, 0x954c5d3b
push eax
jae 0x100428f3
pop esi
cmp eax, 0x6f9a85e
cmp edx, 0x8cfe3776
loopne 0x10042833
pop eax
push ebx
sbb byte [eax], bl
push ebx
fld dword [edi]
adc eax, 0xa0d85714
pop edx
adc byte [ebx + 0x56], dh
aad 0x5e
stc
mov word [ebx + 0x7e58c85], gs
clc
aam 0xe7
adc dh, byte [esi - 0x64]
jbe 0x10042841
push edx
cwde
xor ch, byte [edx - 0x24]
popfd
push eax
call dword [sym.imp.KERNEL32.dll_FindFirstFileA]
adc eax, sym.imp.KERNEL32.dll_FindFirstFileA
mov ebx, eax
cmp ebx, 0xffffffff
pushfd
test byte [0x1004297a], 0x5f
add al, 0x10
pop edi
jne 0x1004297b
sub dword [edi], 0xffffffaf
add eax, 0x2f6d8a5d
das
test al, 0x9c
int1
aad 0x11
mov ds, word [eax]
sbb dh, byte [edx - 0x383d5d4a]
jge 0x1004291f
inc edx
cmp al, 0x7b
adc eax, 0xeb7f13be
fmul qword [ecx - 0x7b]
jno 0x100428dd
adc esi, esp
mov bh, 0x7b
xor edi, ecx
aad 0xd3
mov byte [ecx - 0x64], bh
pushfd
xchg edx, eax
mul byte [ebx + 0x496c1b0e]
inc edi
in al, dx
xor ebx, esp
int1
sbb al, 0x83
pop ds
jg 0x100428dc
shl dword [ecx], 1
out 0xb8, eax
int 0xf2
adc byte [ecx], al
xchg dword [ebp], ebp
insd dword es:[edi], dx
aaa
test al, bl
ja 0x100428ae
xchg ecx, eax
xchg edi, eax
in al, 0xf8
jle 0x100428bd
push edi
out 0x9a, eax
lodsd eax, dword [esi]
adc al, 9
movsd dword es:[edi], dword [esi]
cmp esp, dword [esi]
jge 0x100428cd
xchg dword [eax], ebp
test dword [edi - 0x6a], eax
sub eax, 0xa723a9d5
mov fs, word [ebx + 0x35]
rcr dword [edi + ebp*2 + 0x3fcc52e9], 1
jb 0x10042936
outsd dx, dword [esi]
jmp 0x8243f58e
popal
cdq
push dword [edx + 0x42e1b5cf]
inc edi
aaa
das
push 0x5b6407d7
mov bl, 0x24
fsubr qword [ecx + 0x79c4bc34]
xor bl, dl
sub eax, 0xb5d30de9
push ebp
cmp al, 0x57
test eax, 0x428927b
inc edi
int1
mov edi, 0x55f2d21a
jle 0x10042909
daa
mov al, 0x85
adc ah, 0x9e
dec eax
add al, 0xc9
dec edi
xchg ecx, eax
inc dword [esi]
popfd
jne 0x10042a45
xor eax, eax
pushfd
test byte [0x10042a3e], 0x74
jne 0x10042a3f
and al, 0xa6
push cs
jle 0x10042936
lodsb al, byte [esi]
xchg byte [ebp - 0x122cd2da], ah
in eax, dx
mov eax, dword [0x5b3653a8]
pop edx
inc edi
into
sub ebp, dword [esi + 0x3b]
mov esp, 0x20b76e80
inc edx
dec edx
aas
adc al, 0x47
jne 0x100429d7
jbe 0x100429e3
aaa
add dword [ebp - 0xbef4cd9], esi
push esi
fcomp st(3)
in eax, dx
xlatb
fcomp qword [esi + 0x3d4ca933]
inc edx
jle 0x1004299d
and esp, dword [esi + 0x75fbae41]
adc edx, dword [ecx]
fisub dword [0x4c5d25b2]
mov dl, 0x25
pop ebp
dec esp
sti
inc esp
mov al, byte [0x450b40f1]
adc al, 0xb7
mov dword [0x902df05a], eax
out 0x96, eax
add dword [edx - 0x53], ebx
cmpsd dword [esi], dword es:[edi]
push ecx
adc al, 0x20
test eax, 0x62aa8920
push cs
mov al, byte [0x60343849]
pop es
or dword [esi], esp
cmp ah, byte [esi - 0x39594d7a]
in al, 0xcd
idiv byte [esi + 0x18]
cmp eax, 0xc6dca0e6
xchg esp, eax
jg 0x10042a3c
mov bh, 0xa3
pop edx
invalid
push cs
push edx
xor al, 0x14
pushfd
xchg edx, eax
adc ebx, dword [0xa4f1f99b]
out 0xf2, eax
int 0xc9
add esp, dword [ecx]
add eax, 0xf38fc29c
push ss
aas
pop ds
push ecx
sub dword [ecx + edi*8 + 0x47], eax
les edi, [eax - 0x6e52dc79]
adc byte [ebx - 0x3c], ch
nop
daa
jae 0x10042a82
popfd
jmp 0x10042deb
mov esi, dword [sym.imp.KERNEL32.dll_FindNextFileA]
lea eax, [ebp - 0x248]
push eax
push ebx
call esi
test eax, eax
je 0x10042dde
push edi
mov edi, dword [sym.imp.KERNEL32.dll_lstrcmpA]
test byte [ebp - 0x248], 0x10
call dword [eax]
je 0x10042d42
push 0x101469b4
pushfd
test byte [0x10042b2a], 7
jne 0x10042b2b
add byte [eax], al
jge 0x10042a69
push ebp
xchg esp, eax
jns 0x10042a84
shr byte [ebp - 8], 0x55
pop ebp
mov dl, dh
add ah, byte [edx]
xor dword [edx - 0x4cd41f9d], esi
scasd eax, dword es:[edi]
nop
shr edx, 0x47
mov dword [esi], ecx
scasd eax, dword es:[edi]
lodsd eax, dword [esi]
and esp, dword [ebx]
arpl word [edx + 0x7b], sp
add byte [edi + edi*2 + 0x3f4519c3], cl
add bl, cl
sub edx, edi
pop esi
push ecx
mov esp, 0x3c4e6f34
call 0x29a5d073
test al, 0xe9
and al, 0xe9
stosd dword es:[edi], eax
and bl, ch
xchg ebp, eax
or al, 0x88
mov dword [ebx - 0x40], 0x3d56eba7
push ds
mov ecx, 0x7b4411a9
jnp 0x10042b15
pop ebp
stosd dword es:[edi], eax
push ss
push ss
add byte [edx + 0x1d], 0x4c
push esp
inc eax
inc esi
cmpsb byte [esi], byte es:[edi]
sub eax, 0x174557d4
clc
mov ch, 0x5a
pop esi
imul ebx, esp, 0xb7a01fcc
test ah, cl
push ecx
movsd dword es:[edi], dword [esi]
pushal
inc ecx
out dx, eax
mov esp, 0xc626bef1
pop ecx
push ebx
pushal
insb byte es:[edi], dx
xchg byte [ecx + edi*4 + 0xbd09239], bh
test dword [esi + 0x15b0cabc], edx
and byte [0x97c3c8d6], al
pop ebx
and al, 0xd0
stosb byte es:[edi], al
std
mov word [edi + 5], es
jle 0x10042ba1
das
mov edx, 0x57f04237
popfd
lea eax, [ebp - 0x21c]
push eax
call edi
test eax, eax
je 0x10042d42
push 0x101469b0
lea eax, [ebp - 0x21c]
pushfd
test byte [0x10042c4b], 0x93
jne 0x10042c4c
int 0xdd
mov dword [0x46d426f7], eax
aam 0x46
push cs
inc esi
fld xword [ebx - 0x7d5a60b4]
aaa
out dx, al
jecxz 0x10042b8f
jns 0x10042b86
add eax, ebx
sbb dword [edx - 0x366b86c1], 0xbe72d332
cwde
int3
rcr edi, 1
dec ebx
rcr byte [eax + eax*4 - 0x142562], 0xda
sti
pushfd
sbb byte [esi - 0x25001426], 0xfb
jmp 0x10042b90
invalid
jbe 0x10042b5b
jl 0x10042b42
mov bl, 0x24
cmp al, 0x6e
cmp dword [edx + 0x21d1a8f4], 0x4b1dbda9
cmp ch, byte [edx]
mov edx, 0x6f4c389e
and dword [ecx + 0x3a4b1dbd], ebp
sub bh, byte [edx + 0x6f4c389e]
neg byte [ebp - 0x67]
jl 0x10042ba1
sbb byte [esi + 0x2dcba65d], bl
loopne 0x10042bf2
dec edx
sbb byte [eax], dl
jbe 0x10042b8b
adc esp, esp
xor dh, byte [edi + 6]
jg 0x10042b95
pushal
add al, 0x19
sbb eax, 0xe4271378
fistp dword [ebx - 0x42]
out dx, eax
or bh, byte [ecx]
xchg esi, eax
pop ss
xchg ebp, eax
sub dword [ebp + 0x18], ebx
fild word [ebp + 0x24]
or al, al
mov edx, 0xa31a8463
test al, 0xa0
clc
clc
sbb ah, byte [ebx - 0x7075f58]
lodsd eax, dword [esi]
or cl, byte [ecx]
add al, 0x5c
pop esp
inc ebx
push ss
push esi
cmp al, 0x72
add al, 0xd7
mov ecx, 0x4a31dc00
loopne 0x10042be2
or ebx, dword [edi + 0x45]
lock xor dword [ecx - 0x5f], ebp
mov ch, 0x6d
in eax, dx
add dword [ebp + ecx*8 + 0x2a], ecx
cmpsd dword [esi], dword es:[edi]
fdiv dword [ebx + 0x7083fd17]
in al, dx
mov dh, 0xd4
mov dh, byte [ebx]
sbb byte [edi - 0x69], dl
xor eax, 0xf0ac5387
outsd dx, dword [esi]
or edi, dword [edx]
std
aas
inc eax
test al, 0x62
xor eax, eax
push es
mov cl, 0x11
push ecx
xlatb
pushfd
xchg esi, eax
sbb eax, 0x73f39eab
mov ss, word [edi]
dec ebx
push ebp
sti
lahf
xlatb
push esi
xchg dword [edi - 0x13], esp
mov gs, word [edi - 2]
daa
loopne 0x10042bec
invalid
out 0x21, al
adc edi, dword [ecx + 0xd]
popfd
push eax
call edi
test eax, eax
jne 0x10042d86
pushfd
test byte [0x10042d40], 0xd6
jne 0x10042d41
push ecx
adc eax, 0xb913e500
cmp dword [esi + ecx*4 + 0x7c672bc], 0x28
add ch, byte [eax + esi*8]
rcl dword [esi + 0x78], 0x35
pop ebx
aaa
sub dword [edi], ebx
sahf
add dword [edx + 0x6fe61b5b], edi
sub byte [eax - 0x74], 0x4c
sub byte [ebx + 7], dl
mov esi, 0x3bf0f007
lea ebx, [0x48654c2]
popal
push 0x6c
jae 0x10042cb1
out dx, al
sti
push ebp
push ebx
aam 0x90
inc ebx
test eax, 0x6f89db43
in eax, dx
pop ebx
pop edi
cli
push edi
push ebp
jae 0x10042c43
aaa
jo 0x10042c60
sbb al, 0x66
add dl, byte [edx - 0x45]
adc ch, byte [0x865c6e89]
xor al, 0xe0
add eax, 0xaa58a85c
pop eax
stosb byte es:[edi], al
or dh, byte [ecx + 0x1f]
out 0x80, eax
and ch, byte [edi + eax*2]
mov dh, 0xa
mov bh, 0x56
cmp al, ah
fnsave dword gs:[ecx + 0x57]
adc byte [ecx + 0x6d], dh
clc
call 0x757ed15d
dec edx
ja 0x10042d0d
sbb eax, 0x569c2a6d
and al, 3
movsd dword es:[edi], dword [esi]
movd mm2, dword [ecx]
dec byte [ecx - 0x2ae5ce24]
push esi
push 0x3c552b08
imul ecx, dword [ebx - 0x5c], 0x52
jle 0x10042cef
pop ebx
lds edx, [esi - 0x6d4effc]
push eax
dec eax
push esp
jno 0x10042cac
std
add dh, byte [ebp - 0x2c]
adc al, 0x3c
loop 0x10042d6f
xor eax, 0xf1224951
and ebp, dword gs:[edx + 0x527b36fb]
in eax, dx
inc dword [0x683088ee]
movsd dword es:[edi], dword [esi]
add ch, byte [esi + 0x16]
jge 0x10042d9f
std
lahf
call 0xfdb38c3
jge 0x10042cc4
or ch, byte [edi]
ja 0x10042d7d
outsd dx, dword [esi]
sbb eax, 0x78b1eaea
popfd
lea eax, [ebp - 0x248]
push eax
push ebx
call esi
pushfd
test byte [0x10042d7a], 0x81
jne 0x10042d7b
popfd
dec eax
rcl dword [esi + 0x43], 0xdd
pop esp
add eax, 0x6f4463b2
inc edx
imul edi, dword [edi], 0xa1c77976
and byte [ecx - 0x79], bl
outsb dx, byte [esi]
pop ebx
or bl, dl
adc al, ah
ja 0x10042de0
aas
jbe 0x10042de0
invalid
ficom dword [edx]
les esi, [edi + 0x6c]
mov al, byte [0x736b92bf]
out dx, eax
in al, dx
popfd
test eax, eax
ror byte [edi], 0x85
loopne 0x10042d7e
jne 0x10042a64
invalid
jmp 0x10042ddd
mov dword [ebp - 0x24c], 1
pushfd
test byte [0x10042ddb], 0xdd
jne 0x10042ddc
dec edx
xlatb
fiadd dword [ebp - 0xa]
jle 0x10042e04
mov cl, 9
xchg dword [edi + 0x37dc3206], eax
xchg edi, eax
cmp edi, dword [edi]
lodsb al, byte [esi]
add byte [ecx - 0x4b], 0x3b
test eax, 0xf6037678
mov ah, 0xf
test dword [esp + ebp*2 + 0xb6682f1], 0x94b94317
xor eax, 0x50944e2c
dec ecx
sti
inc edx
inc ebx
jne 0x10042d64
invalid
adc al, 0xd1
pop ecx
push edi
outsb dx, byte [esi]
push esp
push ecx
mov al, byte [0xf287e76d]
das
dec ebx
popfd
pop edi
push ebx
call dword [sym.imp.KERNEL32.dll_FindClose]
adc eax, sym.imp.KERNEL32.dll_FindClose
mov eax, dword [ebp - 0x24c]
mov ecx, dword [ebp - 4]
pushfd
test byte [0x10042e11], 0x99
jne 0x10042f12
sbb ch, bh
add dword [ecx - 0x42], edi
jo 0x10042e00
mov esi, 0x679efd70
or eax, 0x6fa978a
sahf
or eax, 0x6fa978a
test eax, 0x89e43a3e
pop edi
leave
outsd dx, dword [esi]
cdq
js 0x10042e8e
inc ebx
jbe 0x10042db7
movsb byte es:[edi], byte [esi]
and edi, dword [ebx]
sahf
shl byte [edi], cl
mov esi, 0x8ab9b89c
sub dword [eax - 0x475d945d], ebp
mov ah, 0x62
push edx
mov ch, 0xd5
sbb byte [edi - 2], 0x77
aaa
div dword [ecx + 0x7fe6797f]
pop ebx
or dword [edi], 0xf2ba404e
jb 0x10042e47
jae 0x10042e6b
cmpsb byte [esi], byte es:[edi]
xchg esp, eax
and eax, 0x71f5e6ff
daa
jmp esi
out 0xf5, al
jno 0x10042e73
push esi
leave
lds ebx, [ecx + edx - 0x7c4ad4fa]
std
cmp eax, 0xcc44d9be
xlatb
cmp eax, 0x24bb44ba
push ebp
mov ss, word [ecx + 0x59]
add ah, ch
push 0x7c
daa
leave
scasd eax, dword es:[edi]
test cl, ah
jge 0x10042edf
sbb eax, 0x438b4c6e
inc dword [edx - 0x68f5eb26]
add dword [edx + 0x2f], esp
rcr dword [eax], 0xc8
mov eax, dword [ebx - 1]
sbb dl, 0x14
or dl, byte [edi - 0x3ed09dff]
sbb al, cl
int 0x69
int 0xdd
mov word [ecx + 0x34ad5a53], ss
sal byte [ebp + 0xf], 1
dec ebx
dec edx
mov edx, 0x20d126ab
dec edx
loopne 0x10042e48
adc eax, 0x461f088a
ror ebp, 0xb8
pop ebp
pop ss
salc
push ss
push edi
xchg dword [ebp + 0x3bf56fa8], edi
pushal
jecxz 0x10042e48
mov ebx, 0x5b96e1b0
xor dword [ebp + 8], edx
xchg esi, eax
popfd
lahf
fadd st(7)
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
outsd dx, dword [esi]
aam 0x6d
dec edi
dec esp
into
mov edi, 0xa3c9e535
jb 0x10042f28
test al, 0x72
dec edx
xor dl, byte [edi + 0xba5c5f]
fst qword [eax]
dec ebx
mov edx, 0x4b10dd00
into
mov edi, esp
fcmovnbe st(0), st(4)
sub dword [ebx - 0x1e988b2c], edi
std
je 0x10042f48
loope 0x10042ee0
loope 0x10042ee0
sub al, 0xe1
out 0x2f, al
cmp byte [ebp + 0x25], bh
aaa
push 0x75
mov eax, 0xad204b6d
jbe 0x10042f28
jns 0x10042f6b
in eax, dx
lea esi, [ecx + 0x41bef6cb]
sbb dword [0x3f52b2f4], edx
mov edi, 0xd3ec3bab
pop esi
inc edi
or eax, dword [ecx + 0x44067182]
cmc
popfd
pop esi
pushfd
test byte [0x10042f99], 0x72
jne 0x10042f9a
jl 0x10042ed1
cli
mov dl, 0x79
xchg ebp, eax
aas
and eax, 0xb6f569d0
pop ss
cmc
mov dh, 0x17
dec edx
loop 0x10042fa2
in al, 0x9a
fild qword [edi + 0x66]
pop ds
push ebx
out 0x53, al
adc eax, 0x92dddfd9
mov ch, 0xe1
mov al, byte [0x40f8b007]
mov eax, dword [ebx]
out dx, eax
movd esi, mm5
out dx, al
inc edi
sbb byte [esi], al
pop ebp
add edi, esp
dec ebp
mov cl, 0x7a
cli
xchg ebp, eax
mul byte [ebx - 0x62006e74]
and byte [eax], al
scasb al, byte es:[edi]
idiv dword [esi - 7]
inc edx
fbld tbyte [ecx + 0x4acacf0d]
dec ebx
fcom qword gs:[ebx]
mov dword [0x763d8c80], eax
adc esp, dword [ebx + 0x763d8c80]
fadd qword [ebp - 0x5f31c986]
sahf
dec esp
pop edi
jbe 0x10042f90
or dword [ebx - 0x22], edx
or byte [ebx - 3], ah
daa
rol byte [edi - 0x5412c84d], cl
sub al, 0x40
out 0x97, al
jecxz 0x10042f48
push ds
push ds
insd dword es:[edi], dx
leave
and esi, edi
out dx, eax
nop
inc ebp
stc
popfd
xor ecx, ebp
pop ebx
pushfd
test byte [0x10042fb5], 0x6f
das
add al, 0x10
outsd dx, dword [esi]
jne 0x100430b6
mov ah, 0xd1
cmp dword [ebp], esp
add ecx, ebx
inc edx
leave
pop ds
push eax
adc dword gs:[eax], 0x7395fba0
and al, 0x21
inc ebx
mov esi, 0xc52e592a
ror byte [ecx - 0x56], 0xca
out dx, al
pop edi
xchg ebp, eax
js 0x1004304a
popal
inc edi
mov ecx, 0x99536adb
mov edi, 0xaec02497
loop 0x10043007
js 0x10043050
test byte [0x874510c6], 0x86
into
loopne 0x10042ff3
push eax
dec edi
jo 0x10043028
pop esi
sub dword [0x4c1d396a], ebx
jne 0x10042fc0
cmp dword [0x1dc8754c], ebx
push edi
inc esi
push eax
jmp 0xa88a4c2d
sbb eax, 0xe9504657
sub al, 0x1c
xchg byte [eax + 0x3235fab7], bl
push 0x26
sar dword [esp + edx], 1
outsb dx, byte [esi]
cdq
inc ebx
inc ebx
ficom dword [ebx]
cdq
push 0xe
lodsd eax, dword [esi]
mov esi, ebx
xor dl, byte [ecx + eax*2 + 0x5e]
adc ebx, dword [ecx - 0x7452f196]
xor dl, byte [ecx + eax*2 + 0x5e]
rol dh, 1
jbe 0x10043030
inc edx
shl dword [esi], cl
jne 0x10043085
pop ebp
xchg edx, eax
xchg edx, eax
daa
pop ecx
dec ebp
mov bh, ch
xchg dword [edx], eax
insd dword es:[edi], dx
dec ebx
jg 0x1004304c
inc ebx
rcr dword [edi - 0x46], cl
and al, 0x7a
fmul qword [eax + 0x34]
xchg ebx, eax
xchg dword [eax + 0x7c], ebx
add dword [edx + 0x1c8bd18c], esi
pop dword [esi + 0x29c5e418]
lds ebp, [ecx]
imul eax, dword [esi + 0x6b33ad6c], 0xffffffc0
xor ebp, dword [ebx - 0x40]
push 0xffffffffffffffd5
fstp qword [0xca7a4532]
dec ecx
outsb dx, byte [esi]
xchg esp, eax
into
cli
jg 0x10043010
sahf
cld
add al, bh
clc
loopne 0x1004306d
out dx, al
mov esp, 0x863ae59b
or ecx, dword gs:[edi]
add al, 0x51
cmp al, byte [esi + 0x40f0b65]
push ecx
pop esi
mov cl, bl
dec ecx
cmpsd dword [esi], dword es:[edi]
jae 0x1004300f
xor eax, dword [esi]
movsd dword es:[edi], dword [esi]
xchg edi, eax
mov edx, 0x49fd30e4
scasd eax, dword es:[edi]
out 0x91, al
xchg edx, eax
mov al, 0x7c
mov ebp, 0xd11bbbae
cmp ecx, dword [edx + ebx*8 - 0x1636d5de]
sub al, 0x58
and edi, dword [edx - 0x7d66dd40]
cmpsd dword [esi], dword es:[edi]
dec esp
loopne 0x10043066
aad 0xe0
mov ah, 0xd3
inc ecx
and byte [eax - 0x35adb028], dh
push 0xbe3acb4
mov ah, ah
push ds
popfd
call fcn.1011e48a
pushfd
test byte [0x100430f4], 0x7b
jne 0x100431f5
pop esp
mov edx, esp
out 0x2f, al
jge 0x100430d7
daa
daa
mov word [0xd621fbd0], ss
and esi, edx
sub al, 0
xchg ebx, esp
mov fs, word [esi + 0x6a]
mov dl, 0x87
cmp al, byte [ecx + 0x2a]
mov bl, 0xae
push edx
cld
adc cl, ch
xchg ebx, eax
dec byte [ecx]
add dword [ebx + 0x7e65a93f], eax
sal byte [0x479a5df3], 0x36
add dword es:[ebx], esp
sahf
int3
popfd
leave
pushfd
test byte [0x1004321a], 0xc7
jne 0x1004331b
outsd dx, dword [esi]
sar dword [esi + 0x7ec9d06e], 1
sti
pushal
dec ecx
imul ebx, ebx, 0x4d129a68
dec ebp
mov dh, byte [esi - 0x22]
jl 0x10043242
fstp qword [edi]
sub dword [ebx + 0xb05b367], ebx
or esi, edi
dec ebp
pushal
in al, dx
lodsb al, byte [esi]
cli
jl 0x1004320c
cmp esp, eax
pop ss
stosd dword es:[edi], eax
insd dword es:[edi], dx
inc esi
sbb byte [ebp + 0x77047ec0], cl
pop edi
xlatb
mov word [eax + ebx], ss
add ebx, dword [eax + ecx*4 - 0x16]
pop esp
mov dl, ch
adc eax, 0x3f6fa820
rol ebx, 0xf2
xchg ebp, eax
mov word [ebx + 0x4a], ds
test dword [ecx - 0x39], 0x1d289469
popal
lea edi, [esi + 0x7f868767]
pop edx
mov ch, 0x9c
int3
popfd
ret