Function at 0x10050ec5
Capabilities:
Create directory
Encode data using xor

Disassembly:
adc dword [esi], ecx
aas
call 0x97060780
int1
mov dh, 0x89
adc bh, byte [ebx]
mov dl, 0x88
mov cl, 6
sbb esi, eax
scasb al, byte es:[edi]
sbb al, 0xf3
jle 0x10050ee9
pop ss
stosd dword es:[edi], eax
mov byte [ecx - 0xf], dh
popfd
ret
push ebp
mov ebp, esp
sub esp, 0x124
mov eax, dword [0x10170c30]
xor eax, ebp
mov dword [ebp - 4], eax
pushfd
test byte [0x10050fac], 0x54
jne 0x10050fad
into
and eax, dword [edi]
fbld tbyte [ebp - 0xbf06d]
add esp, ebx
inc edx
dec ebp
cmpsb byte [esi], byte es:[edi]
xor al, 0xd0
jo 0x10050ea6
fadd qword [ecx]
mov word es:[ecx + 0x183197cc], fs
cmp al, 0x6e
fdisi8087_nop
jg 0x10050ec6
cli
xchg esi, eax
sar ebp, cl
jb 0x10050f2b
adc esi, ebx
mov dword fs:[0x51167e45], eax
fisttp word [edx - 0x2871f5b0]
dec ecx
pop ds
mov cl, 0xd1
sbb eax, dword [esi + ebp*4]
mov dh, 0x95
sub esp, dword [edi + eax - 0x334a8b0d]
int3
cmp dword [eax + 0x78], esi
imul ebp, dword [esi - 0x130f6540], 0xfa3e2022
int 0x30
cmc
mov al, byte [0xbc7ca8a5]
adc byte [ebx], ah
dec eax
mov bh, 0x54
pop eax
xchg esp, eax
mov eax, dword [0x213a3582]
cmp dword [bp + di], esi
or byte [0xf31a53a8], bl
mov byte [ecx + 0x1b575ed7], bh
fnstenv [eax - 0x50]
mov dl, 0x3d
adc eax, 0x8f06eeba
xchg edi, eax
push ds
push ebx
enter 0xffffffffffffd6ac, 3
call 0xa4e091e9
pushfd
inc ebx
sti
dec ebp
sbb eax, 0x205a263a
imul edi, dword [eax + 0x346df1d2], 0x534dd1
cmp cl, al
mov esp, 0x8e050013
das
scasb al, byte es:[edi]
fist dword [esp + ebx*4 + 0x1d4dfb43]
cmp ah, byte [esi]
pop edx
and byte [ecx - 0x48], ch
sal cl, cl
insd dword es:[edi], dx
xor al, 0xd1
dec ebp
push ebx
add byte [eax], bh
sar dword [ebx + edx + 0x2f8e0500], 0xae
xchg esp, eax
mov dword [ecx - 0x7749da91], eax
sub edx, eax
jnp 0x10050f2c
inc ecx
and ebx, ebx
cmp al, 0x6f
add eax, 0x781be735
cmp ebp, dword [eax - 0x63]
jae 0x10050ff5
pop ebp
jo 0x10050f72
popfd
push ebx
mov ebx, dword [ebp + 8]
push esi
push edi
mov esi, str.HYNet
lea edi, [ebp - 0xc]
pushfd
test byte [0x10050fd6], 0x2c
jne 0x100510d7
pop ss
sbb bh, byte [edi - 0x20156acf]
in al, dx
xchg esp, eax
inc eax
push esi
mov ah, 0x57
scasb al, byte es:[edi]
add byte [esi - 0x394f6edf], al
out 0xbe, eax
fnstcw word [edi]
outsd dx, dword [esi]
cdq
jl 0x10050fd3
pop ecx
mov es, word [ebx]
or byte [edx - 0x27], 0x72
mov ch, 0xa7
adc al, 0xfd
sbb byte [eax], ah
in eax, 0x32
mov edx, 0x6db3b500
inc dword [ecx - 0x6f1c52ab]
add dl, byte [ecx - 0x68e3fd7]
cld
das
push edx
movsb byte es:[edi], byte [esi]
sub ch, byte [esi - 0x4f0e394b]
jbe 0x1005100b
clc
inc ebp
mov edi, 0x7c9c100
je 0x10050fb9
xchg ebp, eax
push 0x969ceaad
or eax, 0xce445879
fidivr dword [edi + 0x4b272702]
inc ebp
lodsd eax, dword [esi]
daa
push esp
je 0x1005109c
clc
lodsb al, byte [esi]
not dl
dec esi
or bh, byte [ebx]
cmp bl, byte [edi]
dec eax
pop ds
cmpsb byte [esi], byte es:[edi]
pop ss
cmp eax, 0xc842435d
leave
cmpsb byte [esi], byte es:[edi]
xor byte [esi + 0x51c777d7], ch
inc edx
enter 0xffffffffffffa6c9, 0x30
scasb al, byte es:[edi]
xlatb
ja 0x10051012
push ecx
pop esp
cmp cl, byte [esi - 0x34a032f0]
dec ebx
cmp eax, dword [ecx + 0x36bc830]
dec ebx
jbe 0x10051039
dec ecx
cmpsb byte [esi], byte es:[edi]
jns 0x10051034
test dword [edx - 2], ebp
ror dword [ebx], 0x43
into
int1
movsd dword es:[edi], dword [esi]
imul ecx, dword [esp + eax + 0x1d6f35ac], 0xf76df9e1
jbe 0x10051042
mov bl, 0x2b
or byte [eax - 0x54], bh
std
and eax, 0x1b85b59d
or eax, 0xc1d3f437
das
or ebp, dword [edx]
mov edx, 0x2f0cd6af
mov ch, 0x24
fnstsw word [ebp - 0x12803181]
xor eax, 0xc9ea0d14
sahf
push esp
sal bh, cl
inc esp
pop esi
mov cl, 0x4d
stosd dword es:[edi], eax
ficom dword [edx + 0x76]
dec esp
pop ebp
push esi
neg byte [esi]
adc ebp, esi
aaa
sub byte [ebx], bh
pop ss
lodsd eax, dword [esi]
mov esi, 0xcdf85b43
loopne 0x100510d4
ljmp 0x44f7:0xd2549ec9
aas
in al, dx
adc byte [esp + eax*2 + 0x2f037899], bh
in al, 0xf6
add ecx, esi
add al, 0x64
sbb ebx, esp
push ebp
xchg edx, eax
or al, 0xe6
daa
fdiv dword [ebp + 0x58]
jne 0x1005112e
dec ecx
popfd
push 0x103
movsd dword es:[edi], dword [esi]
lea eax, [ebp - 0x10f]
push 0
push eax
movsw word es:[edi], word [esi]
mov dword [ebp - 0x124], 0x302e31
mov byte [ebp - 0x110], 0
call fcn.1011df60
add esp, 0xc
push 0x104
lea eax, [ebp - 0x110]
push eax
push dword [0x101723ac]
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
pushfd
test byte [0x100511bd], 0x91
jne 0x100511be
lodsd eax, dword [esi]
fisub word [0xb74a9185]
pop esp
dec edx
mov bh, 0x5c
and byte [ebx - 0x1c264f62], 0xa6
xor dl, 0x9a
pop ss
lodsd eax, dword [si]
mov dh, 0x4a
mov dh, 0xf4
fdivr qword [edx]
int1
out 0xf1, eax
push ecx
dec ecx
mov esp, ebx
fmul qword [esi - 0x5aaaaa7f]
jb 0x1005116a
imul ebx, dword [esi + 0x9beb484], 0x4cc4c8ae
or al, 0x76
popfd
adc esp, dword [ecx - 0x77f2eda7]
mov bl, 0xec
push cs
jnp 0x100511d0
mov cl, 0xf4
imul esi, eax, 0x9c9a4d65
cmc
mov eax, dword [0x7f1d89cc]
out 0xae, eax
mov ah, 0x3f
arpl word [ebx - 0x2571f0ae], si
adc al, 0xd0
mov ah, 0x44
push ecx
mov edx, 0x1f41c090
mov ecx, 0x2be8bcd9
arpl word [ecx + ebx*4 - 0xb5937f0], bx
pop esi
bound ecx, qword [edi + 0x75]
sub dword [edx], 0xdd085901
ror dword [eax - 0x1d2a21a4], 1
sti
inc esp
mov word gs:[ecx], es
or byte [eax - 0x53], ah
xlatb
scasd eax, dword es:[edi]
popfd
mov bl, 0xb4
mov ch, 0x7d
leave
mov ch, 0xa0
popfd
lea eax, [ebp - 0x110]
push eax
call fcn.1011d740
pushfd
test byte [0x10051231], 0x3b
jne 0x10051232
add eax, 0x5d753b10
push ss
lds ebx, [ebx + 0x5def3dd2]
cmpsb byte [esi], byte es:[edi]
push 0x6712e702
mov fs, word [ecx]
jbe 0x10051167
sub edx, dword [ecx + edi*8 + 0x79cb9993]
mov ecx, 0xcf62d1e2
xchg byte [ecx + ebx*4 + 0x3f], bl
pushfd
int 0xe0
fadd st(4), st(0)
mov bh, 0x21
or ecx, eax
sal byte [esi + ebp*4], 1
call 0x38bb7a1a
add bh, dh
lodsd eax, dword [esi]
sti
and byte [bx], ch
sbb ebx, dword [edi]
cdq
dec ebp
pop ebp
adc eax, 0x6f48244f
jnp 0x10051264
mov eax, 0x38b5b870
shr edi, 1
sub dword [edi], ebx
popfd
sub ch, byte [ecx]
and al, 0xdf
pop es
xor dword [edx + 0x4db58acf], esi
insb byte es:[edi], dx
shr ecx, 1
popfd
pop ecx
jmp 0x10051240
cmp byte [eax + ebp - 0x110], 0x5c
je 0x10051248
dec eax
jns 0x10051236
jmp 0x10051714
mov byte [eax + ebp - 0x110], 0
lea eax, [ebp - 0x110]
push str.DADump
push eax
call fcn.1011f130
pop ecx
pushfd
test byte [0x100512a2], 0xb1
jne 0x100513a3
add eax, 0x100512a2
mov cl, 0xf
test dword [ebx], esi
add dword [eax], eax
add bh, dh
ret
test ebx, 0x6443a704
or ch, byte [ecx - 0x63]
lodsd eax, dword [esi]
stosd dword es:[edi], eax
pop ebx
mov ch, 0xbc
pop ecx
inc esi
cmpsb byte [esi], byte es:[edi]
or al, 0x24
mov al, 0xdf
inc ebp
jle 0x10051218
dec ebp
leave
popfd
dec ebx
sub dh, byte [edx]
clc
fstp qword [ebx]
sub al, 0xea
inc ebx
sbb ebp, dword [edi]
and dword [eax + 0x797665aa], 0x398a549f
adc al, 0xbe
mov dl, 0x66
pop ecx
adc esi, esp
jecxz 0x10051301
push ecx
dec eax
int1
push ds
dec edx
mov eax, 0xb88582e3
int 0xc7
cmpsd dword [esi], dword es:[edi]
push ss
rcl byte [ebx - 0x7c30074a], cl
xchg ecx, eax
arpl word [ebx + 0x6f], sp
or dword [ebx - 0x4b], 0x65
cwde
pop edi
sbb bh, ch
sub edi, dword [eax]
into
cmp eax, 0xd79048e9
in al, 0x7d
inc ecx
pop esi
and al, 0x85
test al, 0xf4
cmp esi, dword [eax - 0x16531da]
sbb dword [ebx - 0x43102a59], 0x7a428173
mov ss, word [edx]
enter 0xffffffffffffdfe9, 0xffffffffffffffb7
lea edx, [edi]
cmpsd dword [esi], dword es:[edi]
aaa
sbb al, cl
lds edx, [ebx + 0x5a]
arpl word [edx + 0x7e], cx
shl byte [edx], cl
jae 0x10051367
insb byte es:[edi], dx
push ecx
sub dword [edi - 0x7ebefa67], 0xfffffff9
mov byte [esi - 0x162ea162], ah
js 0x1005138f
sbb cl, bh
neg byte [ebx - 0x14406bbc]
mov edx, 0xc18818a
or dword [esi - 3], ebx
push ebx
pushal
dec esp
test al, 0x42
insb byte es:[edi], dx
push ebp
add bl, byte [ebx + 0x61f8cb62]
mov eax, dword [0x4ac21c58]
adc eax, 0x313dddf1
popal
mov esp, 0x8dcf0aa0
das
inc ecx
int3
invalid
fstp qword [esi - 0x60c5a6e]
sub dword [edx + 0x57], edx
push ebx
sbb ah, byte [edx + 0x2a]
pop ecx
mov byte [ebx - 0xa18f0d8], dl
popfd
pop ecx
push 0
lea eax, [ebp - 0x110]
push eax
call dword [sym.imp.KERNEL32.dll_CreateDirectoryA]
popal
adc al, 0x10
lea eax, [ebp - 0x120]
push eax
call dword [sym.imp.KERNEL32.dll_GetLocalTime]
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
push eax
pushfd
test byte [0x1005140a], 0x6e
jne 0x1005150b
aam 0x6f
dec eax
out 0x3b, al
cdq
jae 0x100513b1
pop esp
and ecx, ecx
sar byte [edx + ebp*8 + 0x28], cl
imul ebp, dword fs:[esi - 0x3067afb6], 0xffffff82
cmp dword [ebp - 0x41], edx
dec esp
dec eax
mov al, byte [0xe0880f19]
js 0x10051403
scasb al, byte es:[edi]
dec edx
push eax
cwde
iretd
sub ebx, esp
inc ebp
scasb al, byte es:[edi]
jge 0x1005146e
and eax, 0x3960cf7e
push edi
jecxz 0x1005145b
iretd
inc ebp
cmp byte [esi], al
dec esp
bound esp, qword [ebp - 0x2c]
lds ebx, [edi - 0x4f]
js 0x10051467
push ebp
mov al, byte [0x69f573d9]
or al, 0xfb
sbb eax, dword [di - 0x26]
inc ecx
jg 0x100513e9
lodsb al, byte [esi]
jne 0x1005140a
inc edx
mul dword [edx]
push esp
pop esp
mov eax, edi
and eax, 0xc20a8836
dec esp
in eax, dx
mov edx, dword [edi - 0x2b]
movsd dword es:[edi], dword [esi]
int1
not dword [esi - 0x29]
inc ebx
movsb byte es:[edi], byte es:[esi]
insd dword es:[edi], dx
ja 0x10051462
mov ecx, 0x31946178
shr byte [ecx + 0x1f1aa70e], cl
sal esp, 1
add byte [edx + 0x5a], 0xee
and dword [esi + 0x566391ed], 0xa80beab9
or dword [esi + 0x55], esi
mov ecx, 0x9a80bea
jbe 0x100514b7
push edi
dec ecx
mov dl, 0x4e
push ebx
pushfd
jge 0x10051463
pop esp
popfd
lahf
add ebp, ecx
push es
jle 0x100514f1
jmp 0x20849279
adc byte [esi], dh
mov dword [ebp + 0x777dfc2a], edx
xchg ebp, eax
sub bh, ah
jge 0x100514f1
xchg bh, dh
mov ebp, 0xa2f0609e
inc esp
aas
sub bl, byte [ecx - 0x3c]
pop edi
and byte [eax], dl
add eax, 0x10b17a21
je 0x10051475
and eax, 0xb2e85e97
mov edi, 0x78d5b7b8
dec ebx
scasb al, byte es:[edi]
in eax, dx
mov esi, 0x1323409e
mov eax, 0x28a1c831
xchg dword [ecx + edx*4 - 0x28], esp
sti
and ah, byte [esi]
mov edi, 0xd9226f91
adc dword [edx - 0x56ab5bbb], esi
out dx, eax
mov eax, ecx
cmp eax, 0x83b22a15
adc esp, ebx
test byte [ebx], 0xcd
push esp
test eax, 0x3dc18bef
adc eax, 0x1183b22a
fdivr st(6), st(0)
add ecx, ebp
lodsb al, byte [esi]
pop edi
sbb edx, dword [ecx + 0x33]
rcr byte [edi + ecx*2 - 0x54], 5
xchg edi, eax
mov ecx, 0xd4430c09
nop
inc eax
push ebp
stosd dword es:[edi], eax
sub dword [esi + 0x5edf7a37], 0x5a
sahf
pop ss
sub ah, byte [edi - 0x46d5797e]
mov byte [ebp + 0x7545ed0f], cl
or eax, 0xaf9eb544
mov ch, 0x9e
scasd eax, dword es:[edi]
mov word [ebx + edx], gs
scasb al, byte es:[edi]
int1
stosd dword es:[edi], eax
mov eax, 0xc9e45aa0
rol dword [ebx - 0xf122d3d], cl
mov bl, 0x32
or al, byte [eax]
inc ecx
dec esp
popfd
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
push eax
movzx eax, word [ebp - 0x114]
push eax
movzx eax, word [ebp - 0x116]
push eax
movzx eax, word [ebp - 0x118]
push eax
movzx eax, word [ebp - 0x11a]
push eax
pushfd
test byte [0x1005155d], 0x1e
jne 0x1005165e
sbb eax, 0xf8000001
clc
xchg esi, eax
push 0xfffffffffffffff8
xchg ebp, ecx
imul edi, dword [ecx - 8], 0xffffffc1
xor eax, 0x31bfb7cd
lodsd eax, dword [esi]
fadd dword [edx - 0x76dd39c9]
bound ebp, qword fs:[edx + edi*4 - 0x40]
mov eax, 0xcefbc37f
dec esi
aaa
and al, 0xb7
jg 0x10051587
ja 0x100515e2
js 0x100515c1
push esi
sbb eax, 0xcdb1af89
cmp byte [0x63b4fd27], bh
xor byte [eax - 0x533f6307], dl
call 0x7eb67753
stc
pushfd
shr byte [ebp - 0x4e9e2e18], 0x6e
xchg byte [esi - 0x2d], al
enter 0x4e43, 8
xchg ecx, eax
adc dh, byte [edi + 0x55ced01e]
dec esi
or byte [ecx - 0x2fe148ee], dl
into
push ebp
pop esp
insb byte es:[edi], dx
add al, 9
test dword [ebx + 0x3c], esi
loopne 0x100515d7
out dx, eax
les edi, [ebp - 0x44666baa]
or ebx, dword [ecx]
add ebx, dword [esp + ebp*2 - 0x6a]
pop esp
insb byte es:[edi], dx
xchg esi, eax
loopne 0x10051578
push es
test dword [ecx], 0x15f8e30a
in al, 0x2f
mov bh, 0xe1
mov dword [eax - 0x68f424b4], ebp
loope 0x1005153d
test al, 0x4c
fisttp dword [ebx]
xchg edi, eax
or edx, dword [edi - 0x47e3320f]
loopne 0x100515d7
int1
int 0x1c
mov eax, 0x968a18e0
mov dl, byte [esi - 0x6e27cff7]
shl dword [ebp + 0x6404479c], 1
or dword [eax], esi
fcom dword [ecx + 0x479ca5d1]
add al, 0x64
jns 0x10051630
out dx, eax
cmpsd dword [esi], dword es:[edi]
mov dh, 0x24
mov bh, 0x4d
ficomp dword [ecx + 0x34]
dec edi
pop ebp
jle 0x10051569
fist word [edx + 0x7e]
jae 0x100515b2
add dl, byte [ebp + 0x42]
jl 0x100515a3
test dword [esp + edx*2], 0x5a74b856
pop edx
push 0xffffffffffffffc9
push ebx
jns 0x100515b7
aas
push esp
push ebp
inc ebp
add ch, ch
push esi
sbb cl, byte [ebx - 0x62]
adc ch, bh
mov cl, 0x9b
jns 0x100515ea
cmp dword [ebp - 0x52], esi
movsb byte es:[edi], byte [esi]
shl dword [ebx + 0x290775e8], 1
popal
mov dh, 0x84
cwde
mov esp, 0x2921762
ja 0x100515c3
out 0xed, eax
mov ebp, 0xbcef4890
sub dword [ebx + 0x2f], 0xffffffd7
xor edx, ecx
pop edi
or al, 0x7c
push edx
outsb dx, byte [esi]
xchg ebx, eax
push esi
sbb eax, 0x4331210e
jg 0x1005163f
xor dword [ebx + 0x7f], eax
je 0xd4e2a9b8
test byte [ebx - 0x3e3b226d], al
dec edi
or ebp, dword [edi]
ror dword [edi + 0xb], 0x2f
rcr byte [edx + 0x582f9757], 1
adc ch, dh
mov dword [0x339b59ce], eax
push ss
xchg ebx, eax
mov ebx, 0x190c13f6
pop ebx
jecxz 0x1005162c
dec edx
push cs
aaa
insb byte es:[edi], dx
cld
scasb al, byte es:[edi]
insb byte es:[edi], dx
imul esp, ecx, 0x50
jns 0x1005166d
in eax, dx
popfd
movzx eax, word [ebp - 0x11e]
push eax
movzx eax, word [ebp - 0x120]
push eax
lea eax, [ebp - 0x124]
push eax
pushfd
test byte [0x100516f9], 0x12
jne 0x100516fa
call dword [eax - 0x73]
test esp, ebx
invalid
pop esp
stc
or ecx, ebp
clc
adc edi, eax
xor byte [esi], ah
jb 0x10051620
xor al, 0x8a
shl edx, cl
leave
fsubr qword [eax + 0x1d6a4622]
dec ecx
mov eax, dword [0x4a313a40]
aad 0xb5
push ebx
sbb eax, 0x326460eb
inc esi
xor eax, 0xa5b625f3
dec ecx
sbb bl, byte [eax]
and dword [esi + 0x4e], esi
arpl word [esi + 0x42], ax
mov al, byte [0x89f9945d]
mov edi, 0x687c398f
dec edi
pop ecx
inc edx
adc dword [ebx + esi*4], ebp
xchg edx, eax
xchg ecx, eax
scasd eax, dword es:[edi]
mov esi, 0x3ee9899d
stosd dword es:[edi], eax
inc eax
push esi
je 0x10051696
adc dword [ebx], edi
pop ss
fcom dword [edi + 0x37e6a702]
nop
imul edi, dword [eax - 0x7be199d4], 0x687432bf
into
add ah, byte [edi + 0x699037e6]
mov eax, 0x841e662c
mov edi, 0xce687432
push ds
test byte [edi - 0x31978bce], bh
nop
xchg esp, eax
imul ebp, dword [eax], 0xffffff81
cmpsb byte [esi], byte es:[edi]
xor cl, byte [edi - 0x6efe56d4]
jae 0x100516d5
sub dword [esi], ebp
inc esp
sub ecx, ebx
jle 0x100516ea
popfd
lea eax, [ebp - 0xc]
push eax
lea eax, [ebp - 0x110]
push eax
push str._s_s__s__04d_02d_02d__02d_02d_02d__ld__ld.dmp
push ebx
call fcn.1011f090
add esp, 0x34
mov ecx, dword [ebp - 4]
pop edi
pop esi
pushfd
test byte [0x100517db], 0xdb
jne 0x100517dc
fist dword [edi]
add eax, 0x850fdb10
mov ch, 0
add byte [eax], al
add byte [edi + 0x1a], cl
fidiv dword [eax - 0x63938d7d]
dec edi
sbb bl, dl
mov al, 0x83
jb 0x1005179a
pushfd
add dword [edx - 0x15], 0x24dbaec5
pop esp
jo 0x10051760
mov ebx, 0x7b02cef2
je 0x100516cc
xor edi, dword [edx - 0x68]
loop 0x1005173e
fimul word [ebx + ebx]
popal
jne 0x100516dd
loop 0x100517a0
push ebx
inc esp
push ebx
xor al, 9
test dword [eax + 0x14], edi
fcom qword [esi - 0x2f0c1d62]
std
xchg esi, eax
sahf
loop 0x1005174c
sar ch, 1
jl 0x1005171c
jge 0x10051726
rcr dl, 1
lodsd eax, dword [esi]
mov word [ebx - 0x445546ec], fs
mov ss, word [ecx + 0x556347ef]
cmpsd dword [esi], dword es:[edi]
fisubr dword [ebp - 0x46eb5c74]
stosb byte es:[edi], al
mov ebx, 0x47ef918e
arpl word [ebp - 0x59], dx
popal
push 0x3b
push 0xffffffffffffffcf
inc esp
add byte [ecx + 0x1a], bh
xchg byte [edx], bl
and esi, dword [ecx + 0x689ebe37]
test dword [edi + ecx*2 + 0x39], 0xedca7ff4
pop dword [ebp - 4]
xchg edi, eax
adc ecx, ecx
das
loopne 0x10051784
hlt
mov al, byte [0xbd63746e]
imul ebp, dword [esi + 0x1241b71], 0x38187240
and al, 1
inc eax
jb 0x100517b7
cmp byte [eax - 0x662f1ef6], bl
cmp edx, dword [esi - 0x655698fd]
pop ebp
xchg ebp, eax
aaa
cwde
or ah, cl
rcr byte [ecx + 0x6703963b], 1
test eax, 0x37955d9a
mov cl, 0xc4
aam 0xd4
push ebx
cdq
int 0xbf
xchg esp, eax
das
rcr dword [eax - 0x432489a2], 0xf8
inc edi
xor al, 0xf7
arpl word [ebx + ebx + 0x26], cx
sbb dword [ecx], 0x4c10e122
popal
daa
inc edi
xchg edi, eax
jae 0x10051755
fimul word [edi]
into
pop es
push 0xbdf0d903
popfd
mov eax, ebx
xor ecx, ebp
pop ebx
pushfd
test byte [0x100518ac], 0xc0
je 0x100518ad
fcomp dword [edi]
mov dl, 0x3e
xchg esp, eax
xor bl, byte [edi]
push esi
pop esp
pop ebx
xor al, byte [edx]
jae 0x2ba0d4e2
cwde
and eax, 0xeafc348b
inc esp
test byte [ebp + 0x49ed336a], dh
bound ebx, qword ds:[0x71b7c2b]
jbe 0x10051828
jl 0x100517bf
and eax, 0x252e910f
adc edx, eax
imul esp, ecx, 0x4a
test al, 0xf8
push 0xd57914c9
or bl, dh
lodsb al, byte [esi]
pop ds
push ecx
insd dword es:[edi], dx
scasb al, byte es:[edi]
leave
adc al, 0x79
aad 0xa
fisubr word [edi + ebx - 0x519b92af]
mov bh, 0xd0
mov cl, byte [edi + 0x2695455e]
dec esi
dec eax
in al, 0xd0
and eax, 0xf784bea3
mov eax, dword [0xaa1ba22b]
dec esp
pop edi
inc edi
inc esi
out dx, eax
std
pop ss
jge 0x100518a2
scasb al, byte es:[edi]
mov dl, 0x47
inc edi
and esi, ebx
insb byte es:[edi], dx
pop esp
pop ss
cmc
push esi
inc ebx
fsubr qword [edi + eax*4]
and bh, byte [eax]
lahf
clc
clc
or al, 6
inc esp
mov cl, 0x18
mov ebx, 0x248f20f4
cmp byte [edi - 0x7d], 0x64
adc dh, byte [esi]
mov esi, 0xf5d74362
imul byte [ecx + 0x1e]
or bh, byte [ebp + 0x5d]
cmpsb byte [esi], byte es:[edi]
cmpsb byte [esi], byte es:[edi]
push esi
adc dh, byte [edx + ebx*8]
add ax, 0xdd22
in eax, dx
clc
arpl word [esi - 0x4b097aaf], bp
xlatb
std
mov edx, 0xa0769163
push ds
stosd dword es:[edi], eax
cdq
mov dword [ebx + edi*2 + 0xf], ecx
cdq
push 0xffffffffffffffa6
jge 0x10051855
popfd
enter 0xffffffffffffe616, 0x38
mov ch, 0x28
popfd
call fcn.1011e48a
leave
ret