Function at 0x100bf6c1
Capabilities:
Encode data using xor

Disassembly:
push esp
movsd dword es:[edi], dword [esi]
clc
inc dword [ebx - 0x5a47f33c]
hlt
push ebp
mov ebp, esp
push ecx
pushfd
test byte [0x100bf758], 0xc1
jne 0x100bf759
pop edx
call 0xff4a2657
aam 0x5d
add eax, 0x6b5e1140
in al, 0x78
dec ebx
adc dword [eax + 0x2c8aac1f], 0x16
push ss
cmpsd dword [esi], dword es:[edi]
clc
xchg esp, eax
shr byte [ebx], cl
into
into
jns 0x100bf6e9
daa
jnp 0x100bf6b4
sub edi, dword [eax + 0x76084251]
jmp dword [edi + 0x6b]
popfd
push ecx
push str.Entering_is_want_exit
push 0
push 3
call fcn.10049c0c
mov eax, dword [0x10172dd8]
add esp, 0xc
test eax, eax
jne 0x100bf8c6
push str.Not_Running
push eax
push 3
call fcn.10049c0c
add esp, 0xc
xor eax, eax
leave
ret
mov dword [ebp - 8], eax
mov eax, dword [0x10172ddc]
mov dword [ebp - 4], eax
mov eax, dword [ebp + 8]
pushfd
test byte [0x100bf928], 0xed
jne 0x100bfa29
inc ebx
mov bh, 0x52
scasd eax, dword es:[edi]
fmul qword [ecx - 0x3ae6c1fd]
sub esp, dword [ecx]
add eax, 0xc0e7d632
pushal
pop ecx
cmp byte [edi], bh
in al, 0xbf
add ch, byte ds:[ebx + 0x7a]
mov dword [esi + 0x65], ebx
outsb dx, byte [esi]
cmp eax, dword [ebx + eax + 0x7f]
int 0x3f
stc
mov esi, 0x2153a709
dec esp
movaps xmm5, xmmword [ebp + 0x71883480]
js 0x100bf938
mov esp, 0x8ff37baf
stosb byte es:[edi], al
jnp 0x100bf8ec
pop ss
push ebx
push eax
js 0x100bf99d
xchg edx, eax
cwde
stosb byte es:[edi], al
imul eax, dword [edi], 0x464d85aa
adc byte [ebx], cl
xor ecx, 0xffffffa0
pop esi
adc byte [ecx - 0x2ef1a001], 0xdf
pop edi
push cs
rcr edi, 1
mov cl, 0x8b
push es
xor eax, 0x3f930645
push ebp
aaa
xchg ecx, eax
pop ss
jae 0x100bf9c5
dec eax
inc ecx
mov ch, 0xd5
add al, byte [ecx - 0x3cff5046]
add eax, 0x61145857
xor dh, byte [edx - 0x1d]
sub ah, ch
pushal
out dx, al
pop ebp
test dword [edi - 0x4843057], 0x63c2af29
adc cl, ch
inc eax
pop ss
add eax, 0xdfe080e4
salc
xchg edx, eax
out 0xad, eax
cmp byte [ebx + 0x603b7cfc], 0x4f
sbb eax, 0xf1956880
test dword [edi + 0x7d], ebp
cmp dword [ebx + 0x527647f2], esp
inc edi
jbe 0x100bf9df
sbb edi, ebp
sal dword [eax - 0x5d], 0xdf
movsd dword es:[edi], dword [esi]
cmp dword [esi + 0x2d3f31f2], esi
dec esp
mov edi, 0x7b89f925
sal byte [eax], 1
pushal
sahf
fbld tbyte [ebp + 0x31f2b639]
aas
sub eax, 0xf925bf4c
stc
mov dword [ebx - 0x30], edi
xor byte [eax - 0x62], ah
in eax, dx
fxch st(1)
mov ch, 0x97
pop ds
push es
cld
ftst
sti
jno 0x100bf9f9
mov ecx, ebp
inc ecx
mov dl, 0x6c
mov ecx, 0x2f2bd9c9
sub ebp, dword [edi]
push sp
sahf
xchg byte [esi + 0x41f8bc00], ch
push ss
daa
mov eax, 0xaf5a29dc
pop edx
scasd eax, dword es:[edi]
xchg ecx, eax
fisub word [ebp + edi*8 - 0xa0078ba]
bound edi, qword [edi + ebp - 0x1cba151c]
in al, 0x75
into
jnp 0x100bf98a
jbe 0x100bf9b9
push edx
movsd dword es:[edi], dword es:[esi]
push ebp
ficom word [eax - 0x21b3c67d]
pushal
xchg esp, eax
cmp eax, 0xb9152e98
cmp eax, 0x93440012
arpl word [esp + ecx*4 + 0x271fb933], si
fist dword [edi]
mov edx, 0xfeeb7c0a
invalid
mov esi, 0xc2f8a18c
out dx, al
aam 0xcd
jb 0x100bf992
clc
ret 0xd4ee
dec eax
jge 0x100bfa08
out 0x2b, al
jle 0x100bf9c9
mov dword [edi], eax
xchg ecx, eax
rol dword [esi + 0x4685ebee], 9
xchg edi, eax
and edx, dword [ebx - 0x36]
add esp, dword [ebx + 0x6e]
add ecx, dword [eax]
popfd
imul eax, eax, 0x3e8
pushfd
test byte [0x100bfa78], 0xef
jne 0x100bfa79
jnp 0x100bfa58
pop ds
ffree st(6)
clc
ror byte [esi + 0x38], 1
push esi
outsb dx, byte [esi]
adc al, 0x2d
cld
xchg byte [ebx - 0x27d3ff06], bh
xlatb
add byte [ebx + 0x8baa24d], bl
xor esi, ecx
ficom dword [edi]
pop ss
jge 0x100bfa3c
rcr ah, cl
xchg ebx, eax
out 0xef, al
jae 0x100bfada
and ebp, edx
sar dword cs:[edi], 0x13
rcl byte [esi - 0x75], cl
sahf
sub al, byte [ecx]
jle 0x100bfa05
stc
jae 0x100bfa20
cmpsb byte [esi], byte es:[edi]
add eax, 0x4357715b
popfd
push esi
push eax
push 0
lea eax, [ebp - 8]
pushfd
test byte [0x100bfaa6], 0xa2
jne 0x100bfaa7
inc edx
push es
or al, 0xcb
mov al, byte [0xa4e46ddb]
pop es
xchg ebp, eax
insd dword es:[edi], dx
aad 0x27
rol byte [ebx + 0x6f6a5c14], 1
call 0x8d2f9425
and edi, dword [edx - 0x6c]
popfd
push eax
push 2
call dword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov esi, eax
push esi
pushfd
test byte [0x100bfb2c], 0xa
jne 0x100bfb2d
push 0xffffffffffffffa8
xchg ecx, eax
xor dword [edx], esi
pop edx
xchg ebp, eax
fild qword [ecx]
jb 0x100bfb3a
in eax, dx
salc
salc
int1
fcomp qword [ebx + 0x58824be8]
mov ebx, 0xc88ee29f
mov dh, 0x50
popal
mov word [edi], cs
push ss
add byte [edi - 0x5c], 0x9d
push edx
fnstsw word [edi]
dec esi
in eax, 0xf2
jecxz 0x100bfb05
insb byte es:[edi], dx
jno 0x100bfaf3
and eax, 0xaada38d8
add dword [edi - 0x63], ecx
inc edx
xchg ebp, eax
into
fdiv st(7), st(0)
out 7, eax
pop eax
das
mov al, byte [0x1fc2139]
aas
push ebx
int3
popfd
push str.WaitForMultipleObjects_d
push 0
pushfd
test byte [0x100bfb8a], 0x13
je 0x100bfc8b
or edx, dword [eax]
adc ecx, dword [edi]
test byte [eax + 1], cl
add byte [eax], al
mov ebp, 0x187db8d
mov ah, 0x90
mov eax, dword [0x62d69f4e]
leave
mov al, byte [0x3e0a44a6]
sub byte [edx - 3], al
inc edi
mov eax, dword [0x769f734d]
mov byte [ebp - 0x6f2b9e0], dl
xchg ebp, eax
cmp byte [edx], ah
adc esi, ecx
out 0xf9, al
mov bh, al
jb 0x100bfba3
sub eax, 0x7fcba399
movsd dword es:[edi], dword [esi]
aad 0xe1
pop ebp
pop edx
cmp ch, dl
xor bh, byte [edi]
and byte [ecx - 0x4d], dl
shl byte ss:[ecx + 0x5ec3e928], 1
enter 0x5a24, 0xffffffffffffffe6
and ch, cl
popal
mov al, 0xf5
dec esi
fnstcw word [ebp - 0x27ee96a8]
mov bh, dh
inc esi
aad 0x3c
add byte [ebx + edi*8 - 0x1eb987f2], bh
pop dword [esp - 0x74]
mov ebp, 0xf3bc291c
inc ecx
loop 0x100bfc15
inc esi
loope 0x100bfb35
inc esp
invalid
lahf
sbb eax, 0xe1a38437
inc ecx
mov eax, dword [0x3595b8ea]
dec edi
sahf
lds edx, [edx + 0x4b660046]
aas
inc ecx
push cs
movsd dword es:[edi], dword [esi]
scasd eax, dword es:[edi]
sbb byte [eax], cl
or byte [esp + esi*2], 0x5b
pop edi
je 0x100bfc3a
enter 0xffffffffffffe484, 0x7c
sbb eax, 0x635008dc
imul eax, dword [esi], 0xffffffb6
mov eax, 0x5cb83574
inc ecx
stc
xchg ebp, eax
add ebx, dword [esi - 0x1a]
frndint
xchg esp, eax
shl ebp, 1
cmp al, 0xd2
cmpsd dword [esi], dword es:[edi]
mov esi, 0xe0f5156c
fstpnce st(5), st(0)
cmp al, 0x6e
insd dword es:[edi], dx
in eax, 0x4a
push 0xffffffffffffff93
sub byte [ebp + 0x49], dh
dec ecx
lds edx, [eax]
aam 0x52
and ebp, dword [edx - 0xd704f47]
fnsave dword [ecx + esi]
mov ecx, 0xddf28fb0
xor al, 0x31
mov ecx, 0x81612e71
xchg esi, eax
test dword [ebx - 0x7676e157], edx
xchg esi, eax
dec edi
popal
adc dword [esi + 0x1ea99385], 0x4f968989
xor dword [edx + 0x31429ed9], edx
int 0xd9
les ebp, [eax]
xlatb
sahf
add bl, ah
or eax, 0x228b91e0
int 0xe1
int 0x5e
jbe 0x100bfc45
xor byte [eax - 0x6aea6bca], cl
sbb esi, dword [ebp - 0x6780c9ef]
cwde
jecxz 0x100bfc4e
jnp 0x100bfc0c
sub dword [ecx + 0x3e7a1acd], eax
jp 0x100bfc8e
mov edx, 0xad9ea78d
sal ch, 0xcb
mov byte [eax + 0x69f15445], dl
mov edi, 0xe0cb0836
packssdw mm1, qword [esp + esi*2 + 0x78]
out dx, al
cdq
xlatb
test dword [ebp + 0x74], edx
fbstp tbyte [ecx]
push ebx
stosb byte es:[edi], al
mov word [esi - 0x59897f4a], fs
xor al, 0x71
jnp 0x100bfc05
sbb ebx, dword [eax + 0x4c9c000c]
imul edi, dword [ecx + ecx*2], 0x9d3db547
int1
stc
popfd
push 3
call fcn.10049c0c
add esp, 0x10
pushfd
test byte [0x100bfcbf], 0x68
je 0x100bfcc0
lodsb al, byte [esi]
sbb byte [edx], cl
dec esp
out dx, al
adc dword [ecx], ecx
popal
sub ch, byte [ecx - 0xf]
aam 0x37
push 0xa7f86d42
cmp esp, eax
shl byte [ecx], 1
in eax, dx
and al, 0x7a
xchg esp, eax
mov ebx, 0x94044371
pop ss
popfd
cmp esi, 0x102
je 0x100bfd83
pushfd
test byte [0x100bfd00], 0x7d
jne 0x100bfd01
pushal
xchg edx, eax
int3
invalid
popfd
xor eax, eax
inc eax
cmp esi, eax
jne 0x100bfd85
pushfd
test byte [0x100bfd81], 0x28
jne 0x100bfd82
call 0x3c5ef1f7
pop ss
inc esi
sbb al, 0xb2
cmp byte [eax], cl
push es
call 0x8843ad45
or dword [esi - 0x68], 0xffffffe5
cld
and dword [esi], 0x14
pop ss
mov eax, dword [0x32470d58]
dec edi
stc
pop ebx
cmp al, 0xee
insd dword es:[edi], dx
outsb dx, byte [esi]
dec edi
jecxz 0x100bfcdc
pop ebp
scasb al, byte es:[edi]
xor eax, 0x389b4be7
xor byte [edi - 0x3e], dh
inc edx
mov al, 0x8f
dec eax
stosd dword es:[edi], eax
xchg esp, eax
pop ecx
test cl, ah
insb byte es:[edi], dx
mov dword [0x6bc17c08], eax
mov al, 0xad
test esi, ebp
inc edi
aam 0xc
push edi
dec ebp
in al, dx
xlatb
dec edx
sub dword [ecx - 0x1d], ebx
pop edi
add al, 0xe1
jb 0x100bfdd7
mov ch, 0x8c
push edx
scasb al, byte es:[edi]
jl 0x100bfdd5
rcr cl, 1
sbb al, 0x48
stosd dword es:[edi], eax
inc esi
bound eax, qword [ebx - 0x2ebdc68b]
fldenv [eax]
popfd
xor eax, eax
pop esi
leave
pushfd