Function at 0xdf1da4
Capabilities:
Encode data using xor

Disassembly:
jmp 0xdf1dae
pushal
call 0xdf1db4
pop ebp
sub ebp, 0x10
sub ebp, 0x9f1da4
jmp 0xdf1dca
mov eax, 0x9f1da4
add eax, ebp
add eax, 0x4c
mov ecx, 0x57b
mov edx, 0x253eb0e0
xor byte [eax], dl
inc eax
dec ecx
jne 0xdf1de1
test esi, esi
invalid
jmp 0xdf1df4
add byte [eax], al
mov edi, 0x6b8c8643
sub eax, 0xe0dc696b
imul ebp, dword [0xe0dc696b], 0xffffffe0
loopne 0xdf1e5e
imul ebx, esp, 0x61e0e0e0
fsubr st(0), st(0)
loopne 0xdf1ddc
popal
and dword [eax], ebx
loopne 0xdf1de1
loopne 0xdf1de6
sub eax, 0xe0e0e458
loopne 0xdf1e64
enter 0xffffffffffffe0e0, 0xffffffffffffffe0
pop ss
add ah, bl
sub byte [ebx + 0x61], ch
imul esp, dword [ecx - 0x14], 0xffffffe0
loopne 0xdf1df8
popal
in al, dx
loopne 0xdf1df7
loopne 0xdf1dfc
jecxz 0xdf1e3f
and eax, 0xf488b0b0
mov al, 0xb0
mov ah, dh
cmp eax, 0x6f88e0ff
mov byte [edi - 0x60], ch
lahf
loopne 0xdf1e08
outsd dx, dword [esi]
mov al, byte [0xcce1e09f]
loope 0xdf1df4
int3
les ecx, [eax + 0x7f56ad30]
or ch, ah
jg 0xdf1e37
in eax, 0xe0
loopne 0xdf1e13
loopne 0xdf1e12
loopne 0xdf1e3d
or eax, ecx
loopne 0xdf1e17
enter 0xffffffffffffe0e0, 0xffffffffffffffe0
mov ch, 0xb4
mov ebp, 0xe0e8656b
loopne 0xdf1dee
mov ah, 0xbd
imul esp, dword [ebp - 0x18], 0xffffffe0
call 0x6cbfff22
jne 0xdf1e30
loopne 0xdf1e21
imul esi, dword [ebp - 0x14], 0xffffffe0
loopne 0xdf1e27
loopne 0xdf1e26
loopne 0xdf1eb3
imul ebp, dword [ebp - 0x10], 0xffffffe0
loopne 0xdf1e2d
insd dword es:[edi], dx
invalid
and dword [ecx], ecx
loop 0xdf1e22
loop 0xdf1eb6
arpl word [edx], sp
in al, 0xa9
out dx, eax
adc al, 0x1f
and ah, ah
test eax, 0x1f1465ef
pop ds
pop ds
mov ebp, 0x6be0ec22
in al, dx
loopne 0xdf1ecc
insb byte es:[edi], dx
invalid
loopne 0xdf1e46
loopne 0xdf1df0
hlt
loopne 0xdf1efb
pop ebp
call 0x62bfff76
popal
adc esi, esp
outsd dx, dword [esi]
stosd dword es:[edi], eax
popal
adc esi, esp
outsd dx, dword [esi]
stosd dword es:[edi], eax
shr dword [ecx], cl
sal dword [edx], cl
arpl word [eax], cx
in eax, 0xa8
out dx, eax
scasb al, byte es:[edi]
loopne 0xdf1e8e
loopne 0xdf1e9f
push 0xe0e0e0a8
loopne 0xdf1e95
xchg byte [ebx - 4], ch
imul edi, esp, 0xffffffd9
pushal
sbb ecx, dword [eax]
out dx, eax
cld
fldenv [eax + 0x1b]
or bh, ch
cli
loopne 0xdf1ea1
loopne 0xdf1f23
sbb ecx, dword [ecx]
out dx, eax
int1
loopne 0xdf1eaa
loopne 0xdf1e52
popal
sbb ebx, dword [edi]
invalid
or ch, ah
or dword [ebx + 0x1f], ecx
pop ds
pop ds
mov ebp, 0xb5e0ec22
in al, dx
loopne 0xdf1eb7
imul ecx, dword [esi + esi*4], 0xffffffb7
mov ch, 0x6b
xchg ebp, eax
in al, dx
imul ebx, dword [ebp + 0x60521ce8], 0x6a
or al, 0xb6
mov bh, 0xb5
imul edx, dword [ebp - 0x17629414], 0x1c
push edx
call 0x6b3f712d
sbb al, 0x52
pushal
push 0xffffffffffffffe6
popal
out 0x61, al
loope 0xdf1ef6
loopne 0xdf1ef8
push 0xe12761e7
loopne 0xdf1eff
loopne 0xdf1f7c
pop ebx
loop 0xdf1f03
loopne 0xdf1f05
loop 0xdf1f59
out dx, eax
in eax, 0xe0
loopne 0xdf1f0c
loopne 0xdf1f0d
loopne 0xdf1f98
push 0xfffffffffffffff6
cmpsb byte [esi], byte es:[edi]
xor ch, bh
arpl word [eax], di
mul byte [esi + 0x63ef32f2]
cmp byte [edi], bl
pop ds
pop ds
pop ds
loop 0xdf1f6c
out dx, eax
in eax, 0xe0
loopne 0xdf1f20
loopne 0xdf1fab
push 0xfffffffffffffff6
cmpsb byte [esi], byte es:[edi]
mul byte [esi + 0x63ef32f2]
mov ah, al
loopne 0xdf1f2b
xor ch, bh
arpl word [edx - 0x2c1f1f20], cx
loopne 0xdf1f2a
loopne 0xdf1f1f
shl dword [eax], cl
loop 0xdf1f81
and dl, ah
xor ch, bh
out dx, eax
in eax, 0xe0
loopne 0xdf1f35
push 0xfffffffffffffff6
cmpsb byte [esi], byte es:[edi]
xor ch, bh
xor ch, bh
arpl dx, cx
loope 0xdf1f3f
loopne 0xdf1f43
xor ch, bh
in eax, 0xe0
loopne 0xdf1f48
push 0xfffffffffffffff6
cmpsb byte [esi], byte es:[edi]
xor dh, bl
xor dh, bl
and dl, ah
xor ch, bh
in eax, 0xe0
loopne 0xdf1f57
push 0xfffffffffffffff6
cmpsb byte [esi], byte es:[edi]
xor dh, bl
and dl, ah
and dl, ah
xor ch, bh
in eax, 0xe0
in eax, 0xe0
loopne 0xdf1f66
push 0xfffffffffffffff6
cmpsb byte [esi], byte es:[edi]
xor dh, bl
and dl, ah
xor ch, bh
out dx, eax
in eax, 0xe0
loopne 0xdf1f75
push 0xfffffffffffffff6
cmpsb byte [esi], byte es:[edi]
xor dh, bl
and bh, ch
and bh, ch
out 0xe0, al
loopne 0xdf1f82
imul edi, dword [edi], 0xffffffcb
cmp byte [edx - 0x1d], ch
push 0xe25ba7e7
loopne 0xdf1f8f
pop ebx
loop 0xdf1f8e
loopne 0xdf1f90
loopne 0xdf1fba
or dword [eax + 0x581f1f1f], edx
nop
pop ds
pop ds
pop ds
pop eax
loope 0xdf1f98
loopne 0xdf1f9a
loop 0xdf1fee
out dx, eax
in eax, 0xe0
loopne 0xdf1fa2
push 0xfffffffffffffff6
cmpsb byte [esi], byte es:[edi]
xor dh, bl
and dl, ah
xor ch, bh
loop 0xdf1ffd
out dx, eax
in eax, 0xe0
loopne 0xdf1fb1
loopne 0xdf1fb0
loopne 0xdf203c
push 0xfffffffffffffff6
cmpsb byte [esi], byte es:[edi]
xor ch, bh
mul byte [esi + 0x62ef32f2]
pop ds
out dx, eax
bound edi, qword [esi]
pop ds
pop ds
pop ds
retf
aam 0xe0
loopne 0xdf1fc9
pop ecx
loope 0xdf1fcc
loopne 0xdf1fce
loop 0xdf2022
out dx, eax
in eax, 0xe0
loopne 0xdf1fd6
push 0xfffffffffffffff6
cmpsb byte [esi], byte es:[edi]
xor dh, bl
sub edx, esp
xor ch, bh
loop 0xdf2031
out dx, eax
in eax, 0xe0
loopne 0xdf1fe5
push 0xfffffffffffffff6
cmpsb byte [esi], byte es:[edi]
xor ch, bh
xor ch, bh
bound edi, qword [esi]
pop ds
pop ds
pop ds
mov dh, 0x6b
pop ss
retf
out 0xa6, al
imul ecx, dword [eax], 0x59
loope 0xdf2009
loopne 0xdf200b
loop 0xdf205f
out dx, eax
in eax, 0xe0
loopne 0xdf2013
push 0xfffffffffffffff6
cmpsb byte [esi], byte es:[edi]
xor dh, bl
sub edx, esp
xor ch, bh
mul byte [esi + 0x29f332f2]
loop 0xdf206e
out dx, eax
in eax, 0xe0
loopne 0xdf2022
push 0xfffffffffffffff6
cmpsb byte [esi], byte es:[edi]
xor ch, bh
bound edi, qword [esi]
pop ds
pop ds
pop ds
popal
sbb al, ah
popfd
loopne 0xdf2033
popal
cmp dword [edi], ebx
pop ds
pop ds
pop ds
popal
sbb al, ah
in eax, 0xe0
loopne 0xdf20c1
popal
cmp dword [edi], ebx
pop ds
pop ds
pop ds
popal
sbb byte [eax - 0x20], ah
loopne 0xdf204b
popal
xor eax, esp
loopne 0xdf2050
loopne 0xdf20d3
sbb byte [eax - 0x20], ah
loopne 0xdf2057
popal
xor eax, esp
loopne 0xdf205c
loopne 0xdf2034
mov dh, 0x6b
pop ss
imul edx, dword [edi], 0xffffffcb
adc byte [ebx], dl
inc esp
mov esi, 0x1f1e7b09
retf
adc eax, dword [esi + edi*4 + 9]
jnp 0xdf20a6
pop ds
pop ds
push 0xffffffffffffffe6
cmpsb byte [esi], byte es:[edi]
out 0xa6, al
shr dword [ecx], cl
and byte [eax], cl
loope 0xdf2082
cli
loopne 0xdf2077
loopne 0xdf20fa
xor edx, esp
loopne 0xdf207d
loopne 0xdf210a
or byte [esi + 0x10cb176b], dh
adc eax, dword [esi + edi*4 + 0x5b]
loope 0xdf208b
inc esp
mov esi, 0xe0e0e15b
loopne 0xdf20b7
loopne 0xdf208d
or dword [ebx - 0x42e0e0e2], edx
retf
xchg ebx, eax
push ds
pop ds
pop ds
mov ebp, 0x6be89dcb
daa
mov edi, 0xbd056bbe
and ch, al
loopne 0xdf2080
mov esi, 0xe0e0e409
loopne 0xdf20ab
jno 0xdf20cb
inc ebx
pop eax
inc esp
std
jg 0xdf20b0
jecxz 0xdf20f7
popal
and byte [ebp + 0x59e0e0e3], ch
lcall 0xad89, 0x5ae0e0e2
lodsb al, byte [esi]
sal al, 1
mov al, byte [0x1665efa9]
pop ds
pop ds
pop ds
or esp, esp
loopne 0xdf20d0
loopne 0xdf208f
insb byte es:[edi], dx
les esp, [ebx - 0x8fd88f2]
add dh, bh
mov ch, 2
xor eax, 0x898929be
add dh, byte [0x898929be]
mov dword [edx + 0x2570277], ecx
iretd
mov ecx, 0x898989bd
mov byte [0x2730e51], al
mov dword [esi], ecx
jae 0xdf2127
jo 0xdf211d
invalid
push cs
jo 0xdf2128
jae 0xdf20ab
mov dword [ecx - 0x30f27977], ecx
iretd
mov dword [ecx + 0x85f8a89], ecx
dec esi
or dword [ecx + 0x60088989], 0x89898981
or byte [eax - 0x77], dh
mov dword [ecx + 0x450d8689], ecx
jbe 0xdf21ba
or dword [ecx + 0x70088989], 0x89898989
xchg byte [0x76767645], cl
out dx, eax
jbe 0xdf2135
add cl, byte [esi + 0xa856148]
imul eax, dword [esi - 0x76758ef8], 0xc868989
test byte [ecx + 0x2ef8989], cl
mov cs, word [eax]
imul esi, dword [esi - 0x7a], 0x4b8a8989
mov byte [ecx + 0x4e0ac0c0], dl
mov esp, dword [eax + 0x41]
jbe 0xdf21e6
jbe 0xdf21d2
lea ecx, [ecx + 0x47018989]
cmp byte [ebp + 0x16942d31], dl
mov dword [edx + 0x7549084c], ecx
mov cl, byte [ecx - 0x77bdcf77]
mov dword [ecx + 0x319eef33], ecx
add al, 0xb9
cdq
leave
rol byte [esi + 0x76767f0c], 0x76
pushal
lea ecx, [ecx + 0x43428989]
rcl byte [0x98641868]
shr dword [eax + 0x18], cl
push ebx
fsubr dword [edi - 0x11]
out dx, eax
out dx, eax
in al, dx
adc dword [eax + edx*4 - 0x1d], ebp
out dx, eax
loopne 0xdf2225
jl 0xdf21ab
out dx, eax
out dx, eax
test al, 0xe3
in al, dx
sub dword [edi + 0x309f7a10], edi
mov edi, 0x309f7a10
xchg ecx, eax
out dx, eax
outsb dx, byte [esi]
pop ss
out dx, eax
out dx, eax
out dx, eax
out dx, eax
loopne 0xdf223c
jecxz 0xdf21c3
out dx, eax
out dx, eax
test al, 0xe3
in al, dx
sub dword [edi + 0x30937a10], edi
xchg ecx, eax
out dx, eax
insb byte es:[edi], dx
nop
jecxz 0xdf21d5
loopne 0xdf2253
mov ch, bh
out dx, eax
out dx, eax
insb byte es:[edi], dx
nop
out dx, eax
out dx, eax
loopne 0xdf225c
in eax, 0xef
out dx, eax
out dx, eax
insb byte es:[edi], dx
nop
invalid
in al, dx
and dword [esi + 0x2e], ebp
in eax, dx
out dx, eax
out dx, eax
out dx, eax
mov esi, 0x9b7d10bf
xor byte [ecx - 0x55994a11], dl
out dx, eax
mov bh, 0x6e
sub ch, bl
out dx, eax
out dx, eax
out dx, eax
push es
sub al, 0x10
adc byte [eax], dl
mov dl, 0x6e
sub bl, bh
out dx, eax
out dx, eax
out dx, eax
push es
jmp 0xdf222d
mov word [eax], ss
adc byte [eax], dl
mov ebx, 0xefda108b
adc dl, bl
out dx, eax
out dx, eax
out dx, eax
out dx, eax
xchg dword [ebx - 0x45108f34], eax
mov ecx, 0x64d3a964
imul ebx, edi, 0xffffffc7
jo 0xdf224d
mov edx, 0xd3a964b9
imul ebx, edi, 0xffffffc7
out dx, eax
out dx, eax
out dx, eax
in al, dx
sub dword [eax], edx
btc dword [edi - 0x7e553076], eax
xchg byte [eax - 0x4030717e], cl
popfd
sbb byte [ebx - 0x7f647376], 0x9d
iretd