Function at 0x64d9ab
Capabilities:
Execute anti-debugging instructions

Disassembly:
push ax
mov dword [esp], esp
rcl ebx, cl
jmp 0x649e27
not ebx
call 0x649e6a
fstp qword [esi - 0x34]
stosd dword es:[edi], eax
sub byte [0xb54623b3], 0x52
and dword ss:[eax + 0x3f], esp
insd dword es:[edi], dx
je 0x649ea3
dec edi
bound ebp, qword [edx + 0x65]
arpl word [eax + eax*2 + 0x51], si
push ebx
je 0x649ec2
imul ebp, dword [esi + 0x67], reloc.SHELL32.dll_ShellExecuteW
inc edx
inc ebp
push eax
inc edx
push ebp
push ecx
dec ebp
je 0x649ec0
dec edi
bound ebp, qword [edx + 0x65]
arpl word [eax + eax*2 + 0x40], si
pop eax
pop edx
add byte [ebx + 0x246488c6], cl
add al, 0x5a
lea ebx, reloc.SHELL32.dll_ShellExecuteW
mov byte [esp], dl
jmp 0x649fa3
push ecx
dec ebp
je 0x649f09
dec edi
bound ebp, qword [edx + 0x65]
arpl word [eax + eax*2 + 0x40], si
dec eax
push eax
inc ecx
push eax
inc ecx
pop eax
inc eax
pop edx
add cl, bl
pop eax
into
test eax, 0xb531ba58
and eax, 0x2454bf4c
push edi
mov esi, 0x5f74713f
mov ch, 0x25
dec esp
mov edi, 0xbe572454
aas
jno 0x649f3f
pop edi
insd dword es:[edi], dx
je 0x649f31
arpl word [ecx + 0x73], sp
je 0x649f15
push ecx
push ebx
je 0x649f4e
imul ebp, dword [esi + 0x67], reloc.SHELL32.dll_ShellExecuteW
inc ecx
inc ebp
push eax
inc ecx
pop eax
push eax
inc edx
inc esp
inc eax
pop edx
add byte [edi], bh
jbe 0x649f55
outsb dx, byte [esi]
je 0x649f33
push ecx
push ebx
je 0x649f6c
imul ebp, dword [esi + 0x67], reloc.SHELL32.dll_ShellExecuteW
inc ecx
inc ebp
pop edi
dec esi
push eax
inc ecx
push esi
push ecx
inc ebp
jbe 0x649f6f
outsb dx, byte gs:[esi]
outsb dx, byte [esi]
je 0x649f4d
inc eax
inc eax
pop edx
add byte [ecx + 0x6e6f633f], cl
outsb dx, byte [esi]
je 0x649f79
imul ebp, dword [esi + 0x73], reloc.SHELL32.dll_ShellExecuteW
jb 0x649f8a
outsb dx, byte [esi]
inc eax
inc eax
push ecx
inc edx
inc ebp
pop edi
dec esi
inc ecx
inc edx
push esi
xor dword [eax + 0x57], eax
xor al, 0x43
inc ebx
popal
jae 0x649f9a
push ebx
outsb dx, byte gs:[esi]
jae 0x649fa3
je 0x649fa5
jbe 0x649fa7
je 0x649fb9
jns 0x649f81
inc eax
push ecx
je 0x649f84
inc eax
inc eax
pop edx
add byte [edi], bh
aas
inc ecx
push ecx
dec edx
jae 0x649fbe
outsd dx, dword [esi]
outsb dx, byte [esi]
dec edi
bound ebp, qword [edx + 0x65]
arpl word [eax + eax*2 + 0x40], si
je 0x649f97
inc eax
push ecx
inc edx
inc ebp
aas
inc ecx
push esi
push ecx
dec edx
jae 0x649fd1
outsb dx, byte [esi]
push esi
popal
insb byte es:[edi], dx
jne 0x649fcd
inc eax
inc eax
inc ecx
inc edx
push esi
push ecx
push ebx
je 0x649fe3
imul ebp, dword [esi + 0x67], reloc.SHELL32.dll_ShellExecuteW
add byte [eax], ch
dec ebx
loop 0x649fbc
sub byte [ebx - 0x1e], cl
aas
jo 0x649fe0
je 0x649fe9
inc eax
push ecx
push esp
insd dword es:[edi], dx
jo 0x649ff7
jb 0x649feb
jb 0x64a005
inc esp
imul esi, dword [edx + 0x40], 0x45425140
aas
inc ecx
push esi
push ecx
push ebx
je 0x64a00d
jb 0x64a005
imul ebp, dword [esi + 0x67], reloc.SHELL32.dll_ShellExecuteW
outsb dx, byte [esi]
inc eax
inc eax
pop eax
pop edx
add byte [edi - 0x899dbfc], al
sar ch, cl
xchg dword [esp], eax
not dx
and al, 0x66
not edx
std
push dword [esp + 1]
pop ax
jmp 0x649fef
aas
outsb dx, byte gs:[esi]
insb byte es:[edi], dx
inc eax
push ecx
push esp
js 0x64a038
push ebx
je 0x64a039
popal
insd dword es:[edi], dx
inc esi
jne 0x64a03b
arpl word [ecx + ebp*2 + 0x6f], si
outsb dx, byte [esi]
jae 0x64a014
inc eax
pop ecx
inc ecx
inc ecx
inc ecx
push esi
push ecx
push esp
js 0x64a053
push ebx
je 0x64a054
popal
popal
insd dword es:[edi], dx
inc eax
inc eax
inc ecx
inc ecx
push esi
xor al, byte [eax + 0x40]
inc eax
inc eax
pop edx
add byte [ebp + 0xbd14], cl
add byte [eax], al
lea edx, [edi*4]
or bl, 9
mov al, ch
lea eax, [edx + edx]
pop eax
jmp 0x64a107
retf
aas
imul ebp, dword [esi + 0x64], 0x664f7865
inc eax
push ecx
push ebx
je 0x64a084
imul ebp, dword [esi + 0x67], reloc.SHELL32.dll_ShellExecuteW
inc eax
inc eax
push ecx
inc edx
inc ebp
dec eax
push esi
push ecx
inc ebx
push 0x40407261
dec eax
push edi
xor al, 0x43
popal
jae 0x64a08f
push ebx
outsb dx, byte gs:[esi]
jae 0x64a098
je 0x64a09a
jbe 0x64a09c
je 0x64a0ae
inc eax
push ecx
je 0x64a079
inc eax
inc eax
inc eax
pop edx
add byte [esi + 0x3f], al
jb 0x64a0b4
outsd dx, dword [esi]
jb 0x64a098
je 0x64a0b9
imul ebp, dword [esi + 0x67], reloc.SHELL32.dll_ShellExecuteW
inc esp
jbe 0x64a0bb
arpl word [ebp + 0x40], sp
inc eax
inc eax
inc eax
push ecx
inc edx
inc ebp
aas
inc ecx
push esi
push ecx
push ebx
je 0x64a0d2
imul ebp, dword [esi + 0x67], reloc.SHELL32.dll_ShellExecuteW
add byte [edi], bh
jb 0x64a0d4
push 0x53514074
je 0x64a0e5
imul ebp, dword [esi + 0x67], reloc.SHELL32.dll_ShellExecuteW
inc edx
inc ebp
aas
inc ecx
push esi
xor dword [eax + 0x48], eax
inc eax
pop edx
add cl, dh
int1
ljmp 0x4c6f:0x743fb405
outsb dx, byte [esi]
dec esp
outsd dx, dword [esi]
outsb dx, byte [esi]
inc eax
push ecx
push esi
popal
jb 0x64a104
imul esp, dword [ecx + 0x6e], reloc.SHELL32.dll_ShellExecuteW
popal
outsb dx, byte [esi]
je 0x64a0df
inc eax
push ecx
inc edx
inc ebp
pop edi
dec edx
push eax
inc ecx
pop edi
dec esi
inc eax
pop edx
add byte [edi], bh
jno 0x64a124
jne 0x64a119
imul esi, dword [eax + eax*2 + 0x51], reloc.SHELL32.dll_ShellExecuteW
je 0x64a0f2
push ecx
inc ebx
outsd dx, dword [esi]
jb 0x64a11c
inc ecx
jo 0x64a12a
jo 0x64a127
insb byte es:[edi], dx
imul esp, dword [ebx + 0x61], reloc.SHELL32.dll_ShellExecuteW
inc eax
inc eax
push ebx
inc ecx
pop eax
pop eax
pop edx
add byte [edi + 0x3fb859ce], ah
insb byte es:[edi], dx
popal
jae 0x64a147
je 0x64a11d
dec ecx
outsb dx, byte [esi]
js 0x64a128
inc ax
push ecx
push ebx
je 0x64a151
imul ebp, dword [esi + 0x67], reloc.SHELL32.dll_ShellExecuteW
inc edx
inc ebp
dec eax
inc ecx
inc edx
push esi
xor dword [eax + 0x48], eax
push edi
xor al, 0x43
popal
jae 0x64a159
push ebx
outsb dx, byte gs:[esi]
jae 0x64a162
je 0x64a164
jbe 0x64a166
je 0x64a178
inc eax
push ecx
je 0x64a143
inc eax
inc eax
pop edx
add byte [edx + 0x1c8dfdd7], cl
xchg ebp, eax
add byte [eax], al
add byte [eax], al
mov dl, bh
std
lea ebx, [edx*4]
sub esp, 6
cld
neg bl
jmp 0x64a23a
add dword [eax], eax
add byte [ebx + 0x7261773f], bl
outsb dx, byte [esi]
wait
aas
ja 0x64a181
jb 0x64a190
imul ebp, dword [esi + 0x67], reloc.SHELL32.dll_ShellExecuteW
jae 0x64a19e
inc eax
push ecx
dec ebp
jae 0x64a19e
jae 0x64a18d
popal
dec esp
outsd dx, dword [esi]
jb 0x64a175
inc eax
push ecx
inc edx
inc ebp
aas
inc ecx
push esi
push ecx
inc esp
bound esi, qword gs:[ebp + 0x67]
inc eax
inc eax
pop eax
pop edx
add dl, dh
in eax, dx
in eax, dx
aas
bound esi, qword gs:[ebp + 0x67]
inc eax
push ecx
dec ebp
jae 0x64a1c8
popal
dec esp
outsd dx, dword [esi]
jb 0x64a19f
inc eax
push ecx
inc edx
inc ebp
aas
inc ecx
push esi
push ecx
inc esp
bound esi, qword gs:[ebp + 0x67]
inc eax
inc eax
pop eax
pop edx
add byte [edi], bh
aas
xor byte [ecx + 0x42], dl
inc edx
jne 0x64a1de
jb 0x64a1bc
inc eax
push ecx
inc ecx
inc ebp
inc eax
push eax
inc ecx
push esi
push ecx
inc edx
jns 0x64a1fc
inc ecx
jb 0x64a1fe
popal
jns 0x64a1cf
inc eax
inc eax
push eax
inc ecx
push esi
push ecx
dec edi
bound ebp, qword [edx + 0x65]
arpl word [eax + eax*2 + 0x40], si
inc eax
pop edx
add dl, bh
cli
jle 0x64a18e
mov eax, dword [esi - reloc.SHELL32.dll_ShellExecuteW]
cmpsb byte [esi], byte es:[edi]
push ebp
mov edx, 0x4380c156
cli
aas
jno 0x64a227
pop edi
push ecx
dec ebp
je 0x64a21a
inc ebp
outsb dx, byte [esi]
jne 0x64a22a
insd dword es:[edi], dx
pop edi
bound esi, qword gs:[ebp + 0x67]
dec edi
jo 0x64a22b
jb 0x64a229
je 0x64a239
jb 0x64a20c
inc eax
pop ecx
inc ecx
aas
inc ecx
push esi
push ecx
inc esp
bound esi, qword gs:[ebp + 0x67]
inc eax
inc eax
inc ecx
inc ecx
push esi
xor dword [eax + 0x48], eax
inc eax
dec eax
push eax
inc edx
push ebp
push ecx
dec ebp
je 0x64a249
dec edi
bound ebp, qword [edx + 0x65]
arpl word [eax + eax*2 + 0x40], si
push eax
inc edx
inc esp
inc eax
pop edx
add byte [edi], bh
je 0x64a268
jo 0x64a247
je 0x64a23f
je 0x64a23f
inc eax
push ecx
push edx
arpl word gs:[eax + eax*2 + 0x40], si
push ecx
inc edx
inc ebp
aas
inc ecx
push esi
push ecx
push eax
outsd dx, dword [esi]
imul ebp, dword [esi + 0x74], 0x5a584040
add ch, dl
inc esp
neg esi
sub dword [eax + 0x3f], ecx
fisubr word [ecx]
dec eax
aas
aas
xor byte [ecx + 0x52], dl
arpl word gs:[eax + eax*2 + 0x40], si
push ecx
inc ecx
inc ebp
inc eax
inc ecx
inc edx
push esi
push ecx
push eax
outsd dx, dword [esi]
imul ebp, dword [esi + 0x74], 0x40304040
pop edx
add byte [ebx - 0x753d789a], dl
xchg ebx, eax
xchg dx, ax
mov dh, bl
mov edx, 0xdb6a65ac
mov edx, 0xdb6a65ac
mov dh, 0x7a
bsr ebx, edi
jmp 0x64a2fd
fucompi st(1)
scasb al, byte es:[edi]
add byte [eax], al
add bl, ch
aas
imul esi, dword fs:[ebx + 0x63], 0x656e6e6f
arpl word [eax + eax*2 + 0x51], si
dec edi
bound ebp, qword [edx + 0x65]
arpl word [eax + eax*2 + 0x40], si
push ecx
inc edx
inc ebp
pop edi
dec esi
push eax
inc edx
push esi
xor dword [eax + 0x50], eax
inc edx
inc esp
inc eax
pop edx
add byte [edi], bh
jae 0x64a2ec
popal
je 0x64a2e4
arpl word [ebp + 0x65], cx
je 0x64a2e1
dec edi
bound ebp, qword [edx + 0x65]
arpl word [eax + eax*2 + 0x51], si
push esp
push 0x64616572
inc eax
inc eax
xor dl, byte [ebp + 0x51]
dec ebp
je 0x64a2f8
dec edi
bound ebp, qword [edx + 0x65]
arpl word [eax + eax*2 + 0x40], si
inc edx
add byte [edx], cl
adc byte [esi], 0x71
and byte [edx - 0x43], 0x8c
pop ds
xchg cx, ax
aas
popal
je 0x64a312
inc eax
push ecx
inc edx
jns 0x64a32a
inc ecx
jb 0x64a32c
popal
jns 0x64a2fd
inc eax
push ecx
inc ecx
inc ebp
push eax
inc ecx
inc esp
pop eax
pop edx
add byte [edi], bh
jae 0x64a33e
popal
jb 0x64a341
inc eax
push ecx
push esp
imul ebp, dword [ebp + 0x65], 0x51404072
inc ecx
inc ebp
pop eax
dec eax
inc eax
pop edx
add byte [edi], bh
je 0x64a326
je 0x64a326
outsd dx, dword [esi]
outsd dx, dword [esi]
jb 0x64a34b
jae 0x64a329
push ecx
push edx
arpl word gs:[eax + eax*2 + 0x40], si
arpl word [eax + eax*2 + 0x40], si
push ecx
inc edx
inc ebp
pop eax
push eax
inc ecx
dec eax
xor byte [eax], dh
xor byte [eax + 0x5a], al
xor byte [eax], dh
inc eax
pop edx
add dl, dl
enter 0xffffffffffff8766, 0x5c
and al, 4
ror al, cl
xchg word [esp + 4], bx
mov word [esp + 5], sp
xchg byte [esp + 4], bl
jmp 0x64a545
adc byte [edi], bh
insd dword es:[edi], dx
je 0x64a379
dec edi
bound ebp, qword [edx + 0x65]
arpl word [eax + eax*2 + 0x51], si
push esp
push 0x64616572
inc eax
inc eax
push ebp
inc edx
inc ebp
push eax
inc edx
push ebp
push ecx
dec ebp
je 0x64a394
dec edi
bound ebp, qword [edx + 0x65]
arpl word [eax + eax*2 + 0x40], si
pop eax
pop edx
add byte [edi], bh
aas
jno 0x64a3b5
pop edi
insd dword es:[edi], dx
je 0x64a3a7
arpl word [ecx + 0x73], sp
je 0x64a38b
push ecx
push esp
push 0x64616572
inc eax
inc eax
push ebp
inc ecx
inc ebp
push eax
inc ecx
pop eax
push eax
inc edx
inc esp
inc eax
pop edx
add byte [edx + 0x11e28717], bl
mov eax, 0x791e8800
mov byte [ebp - 0x2c], bl
inc edi
out dx, al
stc
aas
aas
xor byte [ecx + 0x44], dl
popal
insb byte es:[edi], dx
insb byte es:[edi], dx
imul ebp, dword [esi + 0x65], reloc.SHELL32.dll_ShellExecuteW
jb 0x64a3c3
inc eax
push ecx
inc ecx
inc ebp
inc eax
push edi
xor al, 0x46
outsd dx, dword [esi]
jb 0x64a3f3
jbe 0x64a3f5
jb 0x64a3d5
outsd dx, dword [esi]
outsb dx, byte [esi]
jae 0x64a40a
popal
outsb dx, byte [esi]
je 0x64a3da
xor byte [eax + 0x57], al
xor al, 0x54
imul ebp, dword [ebp + 0x65], 0x70795472
jns 0x64a416
inc eax
inc eax
push ecx
je 0x64a3eb
inc eax
inc eax
pop edx
add byte [edi], bh
imul esi, dword [ebx + 0x4f], 0x406e6570
outsb dx, byte [esi]
inc eax
push ecx
dec ecx
dec edi
inc esp
jbe 0x64a427
arpl word [ebp + 0x40], sp
inc eax
push ecx
inc edx
inc ebp
pop edi
dec esi
pop eax
pop edx
add al, bl
aas
jae 0x64a444
jb 0x64a441
jns 0x64a439
inc eax
inc eax
push ecx
dec edi
bound ebp, qword [edx + 0x65]
arpl word [eax + eax*2 + 0x40], si
arpl word gs:[eax + eax*2 + 0x40], si
push ecx
inc ecx
inc ebp
pop eax
push eax
inc ecx
push esi
xor dword [eax + 0x40], eax
pop edx
add byte [edi], bh
aas
aas
xor byte [ecx + 0x54], dl
push 0x64616572
popal
inc eax
inc eax
inc eax
push ecx
inc ecx
inc ebp
inc eax
push eax
inc ecx
push esi
push ecx
dec edi
bound ebp, qword [edx + 0x65]
arpl word [eax + eax*2 + 0x40], si
inc eax
pop edx
add byte [eax], dh
mov edi, 0x28b94a2f
xor byte [edi + 0x28b94a2f], bh
push ds
nop
push es
popal
nop
jle 0x64a3a4
lea ebx, [edi + edi]
sbb al, 0x3f
jno 0x64a48f
pop edi
insd dword es:[edi], dx
je 0x64a481
arpl word [ecx + 0x6c], sp
insb byte es:[edi], dx
inc eax
push ecx
push esp
push 0x64616572
inc eax
inc eax
push ebp
inc ecx
inc ebp
dec eax
push edi
xor al, 0x43
popal
insb byte es:[edi], dx
insb byte es:[edi], dx
inc eax
push ecx
dec ebp
je 0x64a49f
dec edi
bound ebp, qword [edx + 0x65]
arpl word [eax + eax*2 + 0x40], si
arpl word gs:[eax + eax*2 + 0x40], si
inc eax
inc eax
dec eax
push eax
inc ecx
push eax
inc ecx
pop eax
inc eax
pop edx
add byte [edi], bh
insd dword es:[edi], dx
imul esi, dword [eax + 0x61], 0x74
push 0x69445140
jb 0x64a49c
inc eax
push ecx
inc edx
inc ebp
pop edi
dec esi
inc ecx
inc edx
push esi
push ecx
push ebx
je 0x64a4db
imul ebp, dword [esi + 0x67], reloc.SHELL32.dll_ShellExecuteW
add byte [edi + 0x76], ch
popal
aas
imul bp, word [esi + 0x69], 0x6873
inc eax
push ecx
push esp
push 0x64616572
inc eax
jb 0x64a4e8
popal
inc eax
inc eax
push ecx
inc ecx
inc ebp
pop eax
push ebp
push ecx
push eax
jb 0x64a4f9
imul esi, dword [esi + 0x61], reloc.SHELL32.dll_ShellExecuteW
outsb dx, byte [si]
popal
insb byte es:[edi], dx
inc eax
xor dword [eax + 0x40], eax
jbe 0x64a4f3
je 0x64a4f9
push ebx
imul esp, dword [edi + 0x6e], 0x31406c61
inc eax
inc eax
pop edx
add byte [edi], bh
aas
xor al, 0x51
push ebx
je 0x64a519
imul ebp, dword [esi + 0x67], reloc.SHELL32.dll_ShellExecuteW
inc ebp
inc ecx
inc ecx
push esi
xor byte [eax + 0x41], al
inc edx
push esi
push ecx
inc edx
jns 0x64a52f
inc ecx
jb 0x64a531
popal
jns 0x64a502
inc eax
inc eax
pop edx
add byte [ebp + 0x22d7b022], ch
shr ch, 0x67
not dword [edx + reloc.SHELL32.dll_ShellExecuteW]
xchg edi, eax
invalid
je 0x64a51d
push ecx
push esp
push 0x64616572
inc eax
inc eax
push ecx
inc ecx
inc ebp
pop edi
dec esi
push esi
push ecx
inc esp
popal
insb byte es:[edi], dx
imul ebp, dword [esi + 0x65], 0x656d6954
outsb dx, byte [esi]
push esp
imul ebp, dword [ebp + 0x65], 0x40404072
jb 0x64a53b
inc eax
inc eax
pop edx
add byte [edi], bh
arpl word [edi + ebp*2 + 0x73], bp
inc eax
outsd dx, dword [esi]
jae 0x64a56a
inc eax
push ecx
inc esi
imul ebp, dword [ebp + 0x44], 0x63697665
inc eax
inc eax
push ebp
inc ecx
inc ebp
pop eax
pop eax
pop edx
add dh, al
dec ecx
fnstcw word [eax - 0x749755b5]
mov eax, 0x8b68aa4b
aas
jbe 0x64a58b
outsb dx, byte [esi]
je 0x64a569
push ecx
push esp
push 0x64616572
inc eax
inc eax
inc eax
push ebp
inc ecx
inc ebp
pop edi
dec esi
push eax
inc ecx
push esi
push ecx
inc ebp
jbe 0x64a5a3
outsb dx, byte [esi]
je 0x64a581
inc eax
inc eax
pop edx
add byte [edx - 0x631e6032], bh
mov edx, 0x9ce19fce
rdtsc
lea eax, [ebx + esi]
mov ah, byte [esp + 2]
jmp 0x64a581
inc ebp
inc ecx
inc ecx
push esi
xor byte [eax + 0x41], al
inc edx
push esi
push ecx
inc edx
jns 0x64a5ea
inc ecx
jb 0x64a5ec
popal
jns 0x64a5bd
inc eax
inc eax
pop edx
add byte [esi - 0x75], ah
push esp
and al, 1
mov dx, word [esp + 1]
xchg byte [esp + 1], bh
call 0x64a5c3
xor al, 0
add byte [eax], al
and byte [edx + 0x50b24720], dh
xor ebp, dword [edx]
aas
jae 0x64a60e
popal
je 0x64a606
arpl word [ebp + 0x65], cx
je 0x64a603
dec edi
bound ebp, qword [edx + 0x65]
arpl word [eax + eax*2 + 0x51], si
dec edi
bound ebp, qword [edx + 0x65]
arpl word [eax + eax*2 + 0x40], si
xor dl, byte [ebp + 0x51]
dec ebp
je 0x64a61a
dec edi
bound ebp, qword [edx + 0x65]
arpl word [eax + eax*2 + 0x40], si
inc edx
add al, al
rol dword [eax], cl
mov edx, dword [esp]
call 0x64a69f
push esp
lds edx, [ebp + 0x3c]
iretd
aas
inc ecx
push esi
xor dword [eax + 0x41], eax
inc edx
push esi
xor dword [eax + 0x48], eax
push esi
push ecx
inc ebx
push 0x40407261
inc eax
pop edx
add cl, cl
pop edi
iretd
stosb byte es:[edi], al
pop ecx
shl byte [ecx], 0xb0
inc ecx
mov al, 0x41
and dword [eax + reloc.SHELL32.dll_ShellExecuteW], esi
sub eax, 0x3f960f3c
setbe byte [edi]
jbe 0x64a674
insb byte es:[edi], dx
jne 0x64a67b
inc eax
push ecx
push ebx
je 0x64a690
je 0x64a690
imul ebp, dword [esi + 0x67], reloc.SHELL32.dll_ShellExecuteW
inc edx
inc ebp
aas
inc ecx
push esi
push ecx
push esi
popal
jb 0x64a696
popal
outsb dx, byte [esi]
je 0x64a671
inc eax
inc ecx
inc edx
push esi
push ecx
push ebx
je 0x64a6ab
imul ebp, dword [esi + 0x67], reloc.SHELL32.dll_ShellExecuteW
push esi
xor al, byte [eax + 0x40]
pop edx
add byte [edi], bh
outsd dx, dword [esi]
jo 0x64a6af
outsb dx, byte [esi]
inc eax
push ecx
inc esi
imul ebp, dword [ebp + 0x40], 0x45415540
pop edi
dec esi
push esi
aas
and al, 0x51
inc esi
insb byte es:[edi], dx
popal
jae 0x64a6a2
push edi
xor al, 0x4f
jo 0x64a6cc
outsb dx, byte [esi]
dec ebp
outsd dx, dword [esi]
inc esi
insb byte es:[edi], dx
popal
inc eax
push ecx
dec ecx
dec edi
inc esp
jbe 0x64a6e1
arpl word [ebp + 0x40], sp
inc eax
inc eax
inc eax
inc eax
pop edx
add byte [ecx], al
aas
aas
xor byte [ecx + 0x46], dl
imul ebp, dword [ebp + 0x40], 0x45415140
inc eax
inc ecx
inc edx
push esi
push ecx
push ebx
je 0x64a709
jb 0x64a701
imul ebp, dword [esi + 0x67], reloc.SHELL32.dll_ShellExecuteW
outsb dx, byte [esi]
inc eax
inc eax
inc eax
pop edx
add byte [ebp - 0x8994bbf], cl
fucompp
clc
add byte [eax], al
add ah, dl
neg dx
jmp 0x64a7a2
inc edx
sal byte [edi + 0x3a83f742], 1
adc eax, 0x3f3f3784
xor al, 0x51
test dword [ebx + reloc.SHELL32.dll_ShellExecuteW], 0x51343f3f
push ebx
je 0x64a72e
imul ebp, dword [esi + 0x67], reloc.SHELL32.dll_ShellExecuteW
inc ebp
inc ecx
inc ecx
push esi
xor byte [eax + 0x24], al
and al, 0x51
inc ecx
push esi
xor byte [eax + 0x40], al
pop edx
add byte [edi], bh
aas
xor byte [ecx + 0x53], dl
je 0x64a74c
imul ebp, dword [esi + 0x67], reloc.SHELL32.dll_ShellExecuteW
inc ebp
inc eax
push esi
push ecx
dec esp
popal
je 0x64a752
outsb dx, byte [esi]
xor dword [ebx + 0x74], edx
jb 0x64a758
outsb dx, byte [esi]
inc eax
inc eax
inc eax
pop edx
add byte [edi], bh
je 0x64a768
push ebp
je 0x64a762
cmp byte [eax + 0x51], al
push ebx
je 0x64a774
jb 0x64a76c
imul ebp, dword [esi + 0x67], reloc.SHELL32.dll_ShellExecuteW
outsb dx, byte [esi]
inc eax
inc eax
push ecx
inc edi
inc edx
inc ebp
aas
inc ecx
push esi
push ecx
inc edx
jns 0x64a786
inc ecx
jb 0x64a788
popal
jns 0x64a759
inc eax
pop eax
pop edx
add byte [edi], bh
jae 0x64a789
jp 0x64a787
inc eax
push ecx
dec esp
imul esi, dword [ebx + 0x74], 0x61746144
inc eax
inc eax
push ecx
inc edx
inc ebp
dec eax
pop eax
pop edx
add byte [edi], bh
arpl word [edi + 0x6e], bp
jae 0x64a7af
inc esp
popal
je 0x64a7a0
inc eax
push ecx
inc edx
jns 0x64a7b8
inc ecx
jb 0x64a7ba
popal
jns 0x64a78b
inc eax
push ecx
inc edx
inc ebp
push eax
inc edx
inc esp
pop eax
pop edx
add byte [edi], bh
aas
inc edx
push ecx
inc ebx
push 0x65527261
inc ax
inc eax
push ecx
inc edx
inc ebp
aas
inc ecx
push esi
push ecx
inc ebx
push 0x40407261
jb 0x64a7ae
inc eax
pop eax
pop edx
add byte [ebx], cl
pushfd
xor dl, byte [ebp - 0x5c]
or eax, 0x422b8869
std
aas
popal
jb 0x64a7e8
inc eax
push ecx
push ebx
je 0x64a7f8
imul ebp, dword [esi + 0x67], reloc.SHELL32.dll_ShellExecuteW
outsb dx, byte [esi]
inc eax
inc eax
inc eax
push ecx
inc edx
inc ebp
aas
inc ecx
push esi
xor dword [eax + 0x5f], eax
dec edx
dec eax
dec eax
push esi
push ecx
inc ebx
push 0x40407261
inc eax
pop edx
add ch, bh
std
xor edx, ebx
mov edx, 0xbe622760
xchg word [esp + 0xd], bx
or eax, 0x154e9
add ah, cl
pop edi
cmpsb byte [esi], byte es:[edi]
sar dword [edi], 1
jmp 0x64a908
aas
arpl word [edi + 0x6c], bp
outsd dx, dword [esi]
insb byte es:[edi], dx
outsd dx, dword [esi]
jb 0x64a7ff
push ecx
dec ebp
popal
jo 0x64a812
outsd dx, dword [esi]
inc edx
popal
jae 0x64a830
inc eax
inc eax
push ecx
inc edx
inc ebp
aas
inc ecx
push edi
xor al, 0x43
outsd dx, dword [esi]
insb byte es:[edi], dx
outsd dx, dword [esi]
jb 0x64a81a
xor dword [eax + 0x58], eax
pop edx
add byte [edi], bh
imul esi, dword [ebx + 0x44], 0x6c62756f
inc eax
inc eax
push ecx
dec edx
jae 0x64a85c
outsb dx, byte [esi]
push esi
popal
insb byte es:[edi], dx
jne 0x64a858
inc eax
inc eax
push ecx
inc edx
inc ebp
pop edi
dec esi
pop eax
pop edx
add byte [eax - 0x2d], dl
dec edx
in eax, 0x14
aas
imul esi, dword [ebx + 0x45], 0x7974706d
inc eax
push ecx
dec esp
imul esi, dword [ebx + 0x74], 0x61746144
je 0x64a875
inc eax
inc eax
push ecx
inc edx
inc ebp
pop edi
dec esi
pop eax
pop edx
add byte [edi], bh
jae 0x64a886
je 0x64a873
popal
jb 0x64a88b
outsb dx, byte [esi]
je 0x64a869
push ecx
dec ebp
popal
jo 0x64a87c
outsd dx, dword [esi]
inc edx
inc edx
popal
jae 0x64a89a
inc eax
inc eax
push ecx
inc ecx
inc ebp
pop eax
push eax
inc ecx
push ebp
xor dword [eax + 0x40], eax
pop edx
add byte [ecx + 0xdfe9b0b], dl
mov eax, 0x4522ac39
mov ah, 0x1d
cmp dword [eax], ebx
jnp 0x64a8a5
aas
jae 0x64a8bb
je 0x64a89b
outsd dx, dword [esi]
insb byte es:[edi], dx
outsd dx, dword [esi]
jb 0x64a89d
inc eax
push ecx
dec ebp
popal
jo 0x64a8b0
outsd dx, dword [esi]
inc edx
popal
jae 0x64a8ce
inc eax
inc eax
push ecx
inc ecx
inc ebp
pop eax
push edi
xor al, 0x43
outsd dx, dword [esi]
insb byte es:[edi], dx
outsd dx, dword [esi]
jb 0x64a8b7
xor dword [eax + 0x40], eax
pop edx
add byte [edi], bh
aas
imul esi, dword [ebx + 0x53], reloc.SHELL32.dll_ShellExecuteW
inc eax
push ecx
dec edx
jae 0x64a8f9
outsb dx, byte [esi]
push esi
popal
insb byte es:[edi], dx
jne 0x64a8f5
inc eax
inc eax
push ecx
inc edx
inc ebp
pop edi
dec esi
pop eax
pop edx
add ch, dl
aad 0x4d
dec ebp
frstor dword [edi + edx*2 + reloc.SHELL32.dll_ShellExecuteW]
sub esp, esi
movsb byte es:[edi], byte [esi]
push edi
loop 0x64a8e6
fimul word [ebx + ebp - 0x1a]
dec edi
scasd eax, dword es:[edi]
mov dh, 0x3f
je 0x64a91a
push ebx
je 0x64a912
push edi
push ebx
je 0x64a924
imul ebp, dword [esi + 0x67], reloc.SHELL32.dll_ShellExecuteW
jb 0x64a924
push ebx
je 0x64a92c
imul ebp, dword [esi + 0x67], reloc.SHELL32.dll_ShellExecuteW
outsb dx, byte [esi]
inc eax
inc eax
push ecx
inc edx
inc ebp
aas
inc ecx
push esi
aas
and al, 0x62
popal
jae 0x64a934
arpl word [edi + 0x73], bx
je 0x64a942
imul ebp, dword [esi + 0x67], reloc.SHELL32.dll_ShellExecuteW
aas
and al, 0x63
push 0x745f7261
jb 0x64a942
imul esi, dword [ebx + esi*2 + 0x40], reloc.SHELL32.dll_ShellExecuteW
je 0x64a94f
push edi
inc eax
jae 0x64a95e
inc eax
inc eax
inc eax
push esi
aas
and al, 0x61
insb byte es:[edi], dx
insb byte es:[edi], dx
outsd dx, dword [esi]
arpl word [ecx + 0x74], sp
outsd dx, dword [esi]
popal
je 0x64a967
jb 0x64a93a
inc eax
pop edi
push edi
inc eax
xor al, byte [eax + 0x40]
jae 0x64a976
inc eax
inc eax
pop eax
pop edx
add byte [edi - 0x74fddbbc], cl
push esp
and al, 0xb
pop dword [esp + 2]
mov edx, dword [esp + 0xb]
mov edx, 0x22e40ecd
push cs
in al, 0x22
call 0x64a976
mov eax, dword [reloc.SHELL32.dll_ShellExecuteW]
arpl word [edi + 0x75], bp
outsb dx, byte [esi]
je 0x64a965
inc eax
push ecx
dec edx
jae 0x64a998
outsb dx, byte [esi]
inc ecx
jb 0x64a99f
jb 0x64a98f
popal
jns 0x64a970
inc eax
push ecx
inc edx
inc ebp
dec eax
pop eax
pop edx
add byte [edi], bh
jb 0x64a9a0
insd dword es:[edi], dx
insd dword es:[edi], dx
outsd dx, dword [esi]
jbe 0x64a9a4
inc eax
push ecx
dec esp
imul esi, dword [ebx + 0x74], reloc.SHELL32.dll_ShellExecuteW
inc eax
inc eax
push ecx
inc ecx
inc ebp
pop eax
dec eax
inc eax
pop edx
add byte [ebp + 0x3f3fd7a4], dh
inc ecx
push ecx
push ebx
je 0x64a9cf
imul ebp, dword [esi + 0x67], reloc.SHELL32.dll_ShellExecuteW
outsb dx, byte [esi]
inc eax
inc eax
push ecx
inc ecx
inc ebp
aas
inc ecx
push esi
push ecx
inc ebx
push 0x65527261
inc ax
inc eax
inc eax
dec eax
inc eax
pop edx
add byte [esi - 0x71], ah
inc esp
and al, 6
pop word [esp + 6]
mov dx, 0xf2b3
add esp, 1
jmp 0x64aab0
push ecx
dec edx
jae 0x64aa02
outsb dx, byte [esi]
inc esp
outsd dx, dword [esi]
arpl word [ebp + 0x6d], si
insd dword es:[edi], dx
outsb dx, byte gs:[esi]
je 0x64a9dd
inc eax
push ecx
inc ecx
inc ebp
inc eax
pop eax
pop edx
add byte [edi], bh
aas
xor dword [ecx + 0x4a], edx
jae 0x64aa1b
outsb dx, byte [esi]
inc esp
outsd dx, dword [esi]
arpl word [ebp + 0x6d], si
outsb dx, byte gs:[esi]
je 0x64a9f6
inc eax
push ecx
inc ecx
inc ebp
inc eax
pop eax
pop edx
add byte [edi + 0x27d48d1d], al
xchg edx, eax
imul dword [esi - 4]
wait
jbe 0x64a9bb
inc esi
jno 0x64aa3e
aas
jb 0x64aa33
jae 0x64aa39
inc eax
push ecx
dec esp
imul esi, dword [ebx + 0x74], 0x61746144
popal
inc eax
inc eax
push ecx
inc ecx
inc ebp
push eax
inc ecx
push eax
inc ecx
pop eax
push eax
inc ecx
push eax
inc ecx
pop eax
inc eax
pop edx
add byte [edi], bh
imul esi, dword [ebx + 0x4f], 0x63656a62
je 0x64aa3a
arpl word gs:[eax + eax*2 + 0x51], si
push ecx
dec edx
jae 0x64aa6d
outsb dx, byte [esi]
inc esp
outsd dx, dword [esi]
arpl word [ebp + 0x6d], si
jne 0x64aa71
outsb dx, byte gs:[esi]
je 0x64aa48
inc eax
push ecx
inc edx
inc ebp
pop edi
dec esi
pop eax
pop edx
add byte [edi - 9], ch
add dh, cl
js 0x64aa82
call 0x3d4cc39b
test dword [edi], esi
call 0x27992f5c
aas
aas
xor al, 0x51
inc ebx
push 0x65527261
inc ax
inc eax
push ecx
inc ecx
inc ebp
inc ecx
inc ecx
push esi
xor byte [eax + 0x44], al
inc eax
pop edx
add byte [edi], bh
aas
outsd dx, dword [esi]
bound ebp, qword [edx + 0x65]
arpl word [eax + eax*2 + 0x51], si
dec edx
jae 0x64aab4
outsb dx, byte [esi]
inc esp
outsd dx, dword [esi]
arpl word [ebp + 0x6d], si
outsb dx, byte gs:[esi]
je 0x64aa8f
inc eax
push ecx
inc edx
inc ebp
aas
inc ecx
push esi
push ecx
dec edx
jae 0x64aac9
outsb dx, byte [esi]
dec edi
bound ebp, qword [edx + 0x65]
arpl word [eax + eax*2 + 0x40], si
pop eax
pop edx
add byte [esi - 0x27], cl
cmp byte [ebx], bl
aas
jb 0x64aadd
outsd dx, dword [esi]
insd dword es:[edi], dx
dec edx
jae 0x64aae1
outsd dx, dword [esi]
outsb dx, byte [esi]
inc eax
push ecx
dec edx
jae 0x64aae7
outsb dx, byte [esi]
inc esp
outsd dx, dword [esi]
arpl word [ebp + 0x6d], si
outsb dx, byte gs:[esi]
je 0x64aac2
inc eax
push ebx
inc ecx
aas
inc ecx
push esi
xor dword [eax + 0x41], eax
inc edx
push esi
push ecx
inc edx
jns 0x64ab05
inc ecx
jb 0x64ab07
popal
jns 0x64aad8
inc eax
push eax
inc ecx
push ebp
push ecx
dec edx
jae 0x64ab0f
outsb dx, byte [esi]
push eax
popal
jb 0x64ab18
inc ebp
jb 0x64ab1b
outsd dx, dword [esi]
jb 0x64aaec
inc eax
inc eax
pop edx
add byte [edi], cl
mov ebp, 0x24548ad1
or ecx, dword [edx - reloc.SHELL32.dll_ShellExecuteW]
mov bl, byte [ecx + ebp*8 + 0xd6]
jb 0x64ab32
bsr edx, ecx
mov dl, byte [esp + 0xb]
push esp
and al, 0xb
mov dl, bh
mov bx, 0x8af6
pushfd
jmp 0x64ab99
add byte [edx + 0x6d], dh
jl 0x64ab06
aas
inc ecx
push ecx
dec edx
jae 0x64ab3c
outsb dx, byte [esi]
inc ecx
jb 0x64ab43
popal
jns 0x64ab14
inc eax
push ecx
inc ecx
inc ebp
aas
inc ecx
push esi
push ecx
dec edx
jae 0x64ab4e
outsb dx, byte [esi]
push esi
popal
insb byte es:[edi], dx
jne 0x64ab4a
push edx
inc ax
inc ax
inc eax
dec eax
inc eax
pop edx
add byte [edi], bh
arpl word [edi + 0x6e], bp
je 0x64ab55
imul ebp, dword [esi + 0x73], reloc.SHELL32.dll_ShellExecuteW
outsd dx, dword [esi]
outsb dx, byte [esi]
dec edi
bound ebp, qword [edx + 0x65]
arpl word [eax + eax*2 + 0x40], si
push ecx
inc edx
inc ebp
pop edi
dec esi
inc ecx
inc edx
push esi
push ecx
push ebx
je 0x64ab83
imul ebp, dword [esi + 0x67], reloc.SHELL32.dll_ShellExecuteW
inc eax
inc eax
inc eax
pop edx
add byte [esi - 0x2d], cl
inc ebx
aad 0x35
salc
inc ecx
ret
push ecx
inc edx
inc ebp
aas
inc ecx
push esi
push ecx
dec edx
jae 0x64abab
outsb dx, byte [esi]
push esi
popal
insb byte es:[edi], dx
jne 0x64aba7
inc eax
inc eax
dec eax
inc eax
pop edx
add byte [edi], bh
jbe 0x64abac
popal
insb byte es:[edi], dx
jne 0x64abb3
inc eax
push ecx
dec edx
jae 0x64abc2
outsb dx, byte [esi]
dec edi
bound ebp, qword [edx + 0x65]
arpl word [eax + eax*2 + 0x40], si
push ecx
inc edx
inc ebp
aas
inc ecx
push esi
push ecx
dec edx
jae 0x64abd5
outsb dx, byte [esi]
push esi
popal
insb byte es:[edi], dx
jne 0x64abd1
inc eax
inc eax
inc ecx
inc edx
push esi
push ecx
push ebx
je 0x64abe7
imul ebp, dword [esi + 0x67], reloc.SHELL32.dll_ShellExecuteW
add byte [edx + 0x55], bh
les edi, [edi]
jae 0x64abec
jp 0x64abea
inc eax
push ecx
dec edx
jae 0x64abf9
outsb dx, byte [esi]
inc ecx
jb 0x64ac00
popal
jns 0x64abd1
inc eax
push ecx
inc edx
inc ebp
dec eax
pop eax
pop edx
add byte [ebp + 0x43663804], cl
lea eax, [eax + edi]
inc bx
mov byte [esp + 0x11], bh
setp bh
lea esp, [esp + 7]
and al, 7
jmp 0x64acd1
add dword [eax], eax
add byte [edi + 0x3f], dh
add byte [eax], al
ja 0x64abef
jae 0x64ac1a
popal
jb 0x64ac1a
pop edi
outsb dx, byte [esi]
jne 0x64ac26
insb byte es:[edi], dx
inc eax
push ecx
dec ebp
popal
jo 0x64ac05
popal
je 0x64ac25
inc edx
popal
jae 0x64ac2d
inc eax
inc eax
xor dl, byte [ebp + 0x31]
inc eax
inc edx
add byte [edi], bh
js 0x64ac3d
jae 0x64ac4a
je 0x64ac4a
jae 0x64ac18
inc eax
push ecx
inc esi
imul ebp, dword [ebp + 0x49], 0x406f666e
inc eax
push ecx
inc edx
inc ebp
pop edi
dec esi
pop eax
pop edx
add byte [esp + ebx*8 + 0x72], bl
adc eax, 0x29aa05e4
mov ecx, 0xc8cb2bd8
fdiv qword [edx + 0x15]
in al, 5
stosb byte es:[edi], al
sub dword [ecx - reloc.SHELL32.dll_ShellExecuteW], edi
imul eax, dword [edx + reloc.SHELL32.dll_ShellExecuteW], 0x65
je 0x64ac57
cmp byte [0x65733f0c], 0x74
push esi
popal
insb byte es:[edi], dx
jne 0x64ac6a
inc eax
push ecx
push ebx
je 0x64ac7f
imul ebp, dword [esi + 0x67], reloc.SHELL32.dll_ShellExecuteW
inc ecx
inc ebp
pop eax
inc ecx
inc edx
push esi
push ecx
push ebx
je 0x64ac8e
imul ebp, dword [esi + 0x67], reloc.SHELL32.dll_ShellExecuteW
push esi
push ecx
push esi
popal
jb 0x64ac92
popal
outsb dx, byte [esi]
je 0x64ac6d
inc eax
inc eax
pop edx
add byte [edi], bh
jb 0x64ac99
popal
inc ecx
insb byte es:[edi], dx
insb byte es:[edi], dx
inc eax
push ecx
dec ecx
dec edi
inc esp
jbe 0x64acaa
arpl word [ebp + 0x40], sp
inc eax
push ecx
inc ecx
inc ebp
aas
inc ecx
push esi
push ecx
inc edx
jns 0x64acc3
inc ecx
jb 0x64acc5
popal
jns 0x64ac96
inc eax
pop eax
pop edx
add byte [edi + 0x69643fe6], bl
jb 0x64acaf
popal
insd dword es:[edi], dx
inc eax
push ecx
inc esp
imul esi, dword [edx + 0x40], 0x45425140
inc eax
push ecx
inc edx
inc ebp
aas
inc ecx
push esi
push ecx
push ebx
je 0x64ace7
imul ebp, dword [esi + 0x67], reloc.SHELL32.dll_ShellExecuteW
add byte [edi], bh
insb byte es:[edi], dx
outsb dx, byte gs:[esi]
je 0x64acec
inc eax
push ecx
push ebx
je 0x64acfb
imul ebp, dword [esi + 0x67], reloc.SHELL32.dll_ShellExecuteW
push ecx
inc edx
inc ebp
dec eax
pop eax
pop edx
add byte [edi], bh
jb 0x64acfe
dec esi
outsd dx, dword [esi]
inc ecx
outsb dx, byte [esi]
push edx
bound esp, qword gs:[ecx + 0x6c]
popal
outsb dx, byte [esi]
arpl word [ebp + 0x40], sp
inc eax
push ecx
dec ebp
popal
jo 0x64acf4
inc esp
popal
je 0x64ad14
inc edx
popal
jae 0x64ad1c
inc eax
inc eax
push ecx
inc ecx
inc ebp
pop eax
push eax
inc ecx
push ebp
push ecx
dec ebp
popal
jo 0x64ad13
outsd dx, dword [esi]
inc edx
popal
jae 0x64ad31
inc eax
inc eax
inc eax
pop edx
add byte [edi - 0x77fbdba4], al
inc esp
and al, 5
xchg dword [esp + 4], ebx
mov byte [esp + 5], al
add esp, 0xa
mov edx, dword [esp]
std
jmp 0x64ae06
aas
jo 0x64ad4b
je 0x64ad54
inc eax
push ecx
inc esp
imul esi, dword [edx + 0x40], 0x45425140
inc edx
inc ebp
aas
inc ecx
push esi
push ecx
push ebx
je 0x64ad6f
imul ebp, dword [esi + 0x67], reloc.SHELL32.dll_ShellExecuteW
outsb dx, byte [esi]
inc eax
inc eax
pop eax
pop edx
add byte [edi], bh
insb byte es:[edi], dx
je 0x64ad4b
push ecx
push ebx
je 0x64ad81
imul ebp, dword [esi + 0x67], reloc.SHELL32.dll_ShellExecuteW
inc eax
push ecx
inc edx
inc ebp
aas
inc ecx
push esi
xor dword [eax + 0x48], eax
dec eax
inc eax
pop edx
add byte [ebx], dl
mov ah, byte [0x3f6ec754]
arpl word [edx + 0x65], si
popal
je 0x64ad92
dec esi
outsd dx, dword [esi]
inc eax
inc eax
push ecx
dec ebp
popal
jo 0x64ad7b
popal
je 0x64ad9b
inc edx
popal
jae 0x64ada3
inc eax
inc eax
push ecx
inc ecx
inc ebp
push eax
inc ecx
push ebp
push ecx
dec ebp
popal
jo 0x64ad99
outsd dx, dword [esi]
inc edx
popal
jae 0x64adb7
inc eax
inc eax
dec eax
dec eax
push eax
inc ecx
push ebp
xor al, byte [eax + 0x5f]
dec esi
inc eax
pop edx
add byte [edi], bh
jb 0x64adc9
push esp
jb 0x64adcd
inc eax
push ecx
dec ebp
popal
jo 0x64adb3
popal
je 0x64add3
inc edx
popal
jae 0x64addb
inc eax
inc eax
push ecx
inc ecx
inc ebp
pop eax
push eax
inc ecx
push ebp
push ecx
dec ebp
popal
jo 0x64add2
outsd dx, dword [esi]
inc edx
popal
jae 0x64adf0
inc eax
inc eax
dec eax
inc eax
pop edx
add byte [ecx + 0x58], bh
pop eax
aas
jb 0x64adfb
arpl word [ecx + 0x6c], sp
arpl word [ebp + 0x6f], cx
outsd dx, dword [esi]
jae 0x64ae12
dec esp
je 0x64adf1
outsd dx, dword [esi]
inc eax
push ecx
dec ebp
popal
jo 0x64adf0
popal
je 0x64ae10
inc edx
popal
jae 0x64ae18
inc eax
inc eax
push ecx
inc ecx
inc ebp
pop eax
pop eax
pop edx
add byte [edi], bh
jb 0x64ae25
inc esp
popal
je 0x64ae26
inc eax
push ecx
dec ebp
popal
jo 0x64ae0f
popal
je 0x64ae2f
popal
inc edx
popal
jae 0x64ae37
inc eax
inc eax
push ebx
inc ecx
pop eax
push eax
inc ecx
push ebp
xor dword [eax + 0x40], eax
inc eax
inc eax
pop edx
add byte [ebx + 0x633f0d92], bh
jb 0x64ae4b
popal
je 0x64ae4e
inc esp
popal
je 0x64ae4e
inc eax
push ecx
dec ebp
popal
jo 0x64ae37
popal
je 0x64ae57
inc edx
popal
jae 0x64ae5f
inc eax
inc eax
push ebx
inc ecx
push eax
inc ecx
push ebp
xor dword [eax + 0x58], eax
pop edx
add byte [esi - 0x75], ah
shr eax, 0xe9
add al, byte [eax]
add byte [eax + 0x26eb8c1e], bl
iretd
mov ax, cx
call 0x64b0f7
cwde
push ds
mov ebx, gs
iretd
jne 0x64adad
mul cl
aas
popal
jo 0x64ae90
outsb dx, byte gs:[esi]
inc eax
push ecx
push ebx
je 0x64ae9a
imul ebp, dword [esi + 0x67], reloc.SHELL32.dll_ShellExecuteW
inc ebp
inc ecx
inc ecx
push esi
xor dword [eax + 0x41], eax
inc edx
push esi
xor dword [eax + 0x40], eax
pop edx
add byte [esi], ah
mov byte [0x4ca25730], al
arpl word [edx + 0x6d3fe4f5], bx
imul esp, dword [eax + eax*2 + 0x51], 0x69727453
outsb dx, byte [esi]
inc eax
inc eax
push ecx
inc edx
inc eax
push ecx
push ebx
je 0x64aec2
imul ebp, dword [esi + 0x67], reloc.SHELL32.dll_ShellExecuteW
inc ebp
aas
inc ecx
push esi
xor dword [eax + 0x48], eax
dec eax
inc eax
pop edx
add byte [edi], bh
je 0x64aed4
dec ecx
outsb dx, byte [esi]
je 0x64aea9
push ecx
push ebx
je 0x64aedf
imul ebp, dword [esi + 0x67], reloc.SHELL32.dll_ShellExecuteW
inc ebp
dec eax
push eax
inc ecx
pop edi
dec esi
dec eax
inc eax
pop edx
add byte [eax], dl
wait
or ebp, dword [esi - 0x63]
jb 0x64aefb
cld
xchg edx, eax
cmc
add al, 0xe6
dec ecx
call 0x6fd8ed9b
dec edi
bound ebp, qword [edx + 0x65]
arpl word [eax + eax*2 + 0x51], si
dec edx
jae 0x64af0a
outsd dx, dword [esi]
outsb dx, byte [esi]
push esi
popal
insb byte es:[edi], dx
jne 0x64af06
push edx
inc ax
inc eax
push ecx
inc edx
inc ebp
aas
inc ecx
push esi
push ecx
dec edx
jae 0x64af1f
outsb dx, byte [esi]
dec edi
bound ebp, qword [edx + 0x65]
arpl word [eax + eax*2 + 0x40], si
pop eax
pop edx
add byte [edi], bh
arpl word [edi + 0x6d], bp
jo 0x64af23
jb 0x64af29
inc eax
push ecx
push ebx
je 0x64af3b
imul ebp, dword [esi + 0x67], reloc.SHELL32.dll_ShellExecuteW
inc ebp
dec eax
inc ecx
inc edx
push esi
xor dword [eax + 0x57], eax
xor al, 0x43
popal
jae 0x64af42
push ebx
outsb dx, byte gs:[esi]
outsb dx, byte [esi]
jae 0x64af4b
je 0x64af4d
jbe 0x64af4f
je 0x64af61
inc eax
push ecx
je 0x64af2c
inc eax
inc eax
pop edx
add byte [ebx + 0x20d1b620], ch
xchg ebp, ebx
sub al, 0x3f
push es
mov cl, 0x3f
aas
jae 0x64af6e
insb byte es:[edi], dx
imul esi, dword [eax + eax*2 + 0x51], 0x69727453
outsb dx, byte [esi]
inc eax
imul ebp, dword [esi + 0x67], reloc.SHELL32.dll_ShellExecuteW
inc eax
push ecx
inc edx
inc ebp
aas
inc ecx
push esi
push ecx
push ebx
je 0x64af87
imul ebp, dword [esi + 0x67], reloc.SHELL32.dll_ShellExecuteW
inc eax
inc eax
push esi
push ecx
inc ebx
push 0x40407261
jb 0x64af65
inc eax
push esi
aas
and al, 0x51
push ecx
inc esi
insb byte es:[edi], dx
popal
jae 0x64af70
push edi
xor al, 0x53
jo 0x64afa1
imul esi, dword [edx + eax*2 + 0x65], reloc.SHELL32.dll_ShellExecuteW
jbe 0x64afa6
outsd dx, dword [esi]
jb 0x64af86
insb byte es:[edi], dx
popal
jae 0x64af85
push ecx
je 0x64af88
inc eax
inc eax
inc eax
push edi
xor al, 0x43
inc ebx
popal
jae 0x64afb6
push ebx
outsb dx, byte gs:[esi]
jae 0x64afbf
je 0x64afc1
jbe 0x64afc3
je 0x64afd5
inc eax
push ecx
je 0x64afa0
inc eax
inc eax
pop edx
add byte [edi], bh
aas
xor byte [ecx + 0x42], dl
jns 0x64afdf
inc ecx
jb 0x64afe1
jb 0x64afd1
popal
jns 0x64afb2
inc eax
push ecx
inc ecx
inc ebp
inc eax
push eax
inc edx
inc esp
dec eax
inc eax
pop edx
add byte [eax + 0x74c5aab3], dh
aas
jae 0x64affa
je 0x64afe8
popal
jb 0x64affd
je 0x64afca
inc eax
push ecx
push esp
push 0x64616572
inc eax
inc eax
push ecx
inc ecx
inc ebp
pop eax
push edi
xor al, 0x50
jb 0x64b005
outsd dx, dword [esi]
jb 0x64b008
je 0x64b01a
jns 0x64afe2
inc eax
xor dword [eax + 0x40], eax
pop edx
add byte [edi], bh
arpl word [edx + 0x65], si
popal
je 0x64b013
push esp
push 0x64616572
dec ecx
popal
dec ecx
insd dword es:[edi], dx
jo 0x64b024
inc eax
push ecx
push esp
push 0x64616572
inc eax
inc eax
inc eax
inc ebx
inc ecx
push eax
inc ecx
push esi
xor dword [eax + 0x24], eax
and al, 0x51
inc ecx
push esi
aas
and al, 0x66
jne 0x64b047
jne 0x64b047
inc eax
pop eax
inc eax
jae 0x64b04f
inc eax
inc eax
inc eax
pop edx
add byte [edi - 0x72], ah
sbb dword [eax + 0x5b], edi
mov ds, word [bx + di]
mov ds, word [ecx]
js 0x64b041
mov dl, 0x3f
jae 0x64b053
jp 0x64b051
inc eax
push ecx
inc esi
imul ebp, dword [ebp + 0x49], 0x406f666e
inc eax
push ecx
inc edx
inc ebp
pop edi
dec edx
pop eax
pop edx
add byte [edi], bh
insb byte es:[edi], dx
je 0x64b06c
je 0x64b06c
dec esp
popal
je 0x64b070
jb 0x64b04d
push ecx
dec edi
bound ebp, qword [edx + 0x65]
arpl word [eax + eax*2 + 0x40], si
je 0x64b055
inc eax
push ecx
inc ecx
inc ebp
pop eax
pop eax
pop edx
add byte [edi + 0x37c4bd2d], ah
loope 0x64afe0
invalid
inc ecx
push esi
push ecx
push ebx
je 0x64b0b9
imul ebp, dword [esi + 0x67], reloc.SHELL32.dll_ShellExecuteW
pop edx
add byte [edi], bh
aas
popal
bound esi, qword [ebx + 0x6f]
outsd dx, dword [esi]
insb byte es:[edi], dx
jne 0x64b0cb
inc esp
imul esi, dword [edx + 0x40], 0x6c694651
dec ecx
outsb dx, byte [esi]
outsw dx, word [esi]
inc eax
inc eax
push ecx
inc edx
inc ebp
aas
inc ecx
push esi
push ecx
inc esp
imul esi, dword [edx + 0x40], 0x5a5840
dec ebx
ret 0x3750
jb 0x64b0b2
inc eax
pop eax
pop edx
add byte [ebx - 0x3e], cl
push eax
aaa
ret 0xf2d
inc esi
imul ebp, dword [ebp + 0x50], 0x40687461
push ecx
inc esp
imul esi, dword [edx + 0x40], 0x45425140
push 0x69445140
jb 0x64b100
inc eax
push ecx
inc edx
inc ebp
aas
inc ecx
push esi
push ecx
push ebx
je 0x64b13d
imul ebp, dword [esi + 0x67], reloc.SHELL32.dll_ShellExecuteW
push esi
xor al, byte [eax + 0x40]
pop edx
add byte [ebp + 0x6f743f04], dl
push edx
popal
insb byte es:[edi], dx
inc eax
push ecx
push esi
popal
jb 0x64b150
popal
outsb dx, byte [esi]
je 0x64b12b
inc eax
push ecx
inc edx
inc ebp
dec esi
push eax
inc ecx
pop edi
dec esi
inc eax
pop edx
add byte [ebp - 0x4e33ef69], cl
mov cs, word [edi]
xor dword [esi - 0x71], esp
add al, 0x24
pop dword [esp]
mov bx, di
jmp 0x64b2f5
dec esp
imul esi, dword [ebx + 0x74], 0x42414040
push esi
xor al, byte [eax + 0x56]
aas
and al, 0x51
inc esi
insb byte es:[edi], dx
popal
jae 0x64b180
push edi
xor al, 0x46
imul ebp, dword [esp + esi*2 + 0x65], 0x44514072
imul esi, dword [edx + 0x40], 0x56404040
inc eax
push esi
aas
and al, 0x51
inc esi
insb byte es:[edi], dx
popal
jae 0x64b19b
push edi
xor al, 0x53
outsd dx, dword [esi]
jb 0x64b1d5
inc esi
insb byte es:[edi], dx
popal
inc eax
push ecx
inc esp
imul esi, dword [edx + 0x40], 0x40404040
pop edx
add ah, ah
imul edi, ecx, 0x88b6b98
stosd dword es:[edi], eax
ret 0x743f
arpl word gs:[eax + eax*2 + 0x51], si
dec edx
jae 0x64b1f7
outsb dx, byte [esi]
push esi
popal
insb byte es:[edi], dx
jne 0x64b1f3
inc eax
inc eax
push ecx
inc edx
inc ebp
aas
inc ecx
push esi
push ecx
dec edx
jae 0x64b209
outsb dx, byte [esi]
dec edi
bound ebp, qword [edx + 0x65]
arpl word [eax + eax*2 + 0x40], si
pop eax
pop edx
add byte [edi], bh
aas
xor byte [ecx + 0x43], dl
push 0x40407261
push ecx
inc ecx
inc ebp
inc eax
push ebp
push ecx
dec esp
popal
je 0x64b223
outsb dx, byte [esi]
xor dword [ebx + 0x68], eax
popal
jb 0x64b201
inc eax
inc eax
pop edx
add byte [ebx - 3], dh
insd dword es:[edi], dx
hlt
jb 0x64b218
push ecx
push ebx
je 0x64b24e
imul ebp, dword [esi + 0x67], reloc.SHELL32.dll_ShellExecuteW
aas
inc ecx
push esi
xor dword [eax + 0x48], eax
dec eax
inc eax
pop edx
add byte [edi + 0x69], dl
outsb dx, byte [esi]
dec eax
je 0x64b267
jo 0x64b247
arpl word gs:[ebp + 0x69], sp
jbe 0x64b260
imul esi, dword gs:[esi + 0x65], reloc.SHELL32.dll_ShellExecuteW
push edx
jae 0x64b26f
outsd dx, dword [esi]
outsb dx, byte [esi]
jae 0x64b268
add byte [edi], bh
imul bp, word [ebp + 0x4e], 0x6d61
dec esi
popal
insd dword es:[edi], dx
inc eax
push ecx
inc esi
imul ebp, dword [ebp + 0x49], 0x406f666e
inc eax
push ecx
inc edx
inc ebp
aas
inc ecx
push esi
push ecx
push ebx
je 0x64b295
imul ebp, dword [esi + 0x67], reloc.SHELL32.dll_ShellExecuteW
add byte [edi], bh
aas
xor al, 0x51
push ebx
je 0x64b2a4
imul ebp, dword [esi + 0x67], reloc.SHELL32.dll_ShellExecuteW
inc ebp
inc ecx
inc ecx
push esi
xor byte [eax + 0x50], al
inc edx
inc esp
inc eax
pop edx
add byte [edi], bh
popal
jb 0x64b2b0
inc eax
push ecx
push ebx
je 0x64b2c0
imul ebp, dword [esi + 0x67], reloc.SHELL32.dll_ShellExecuteW
inc ebp
aas
inc ecx
push esi
xor dword [eax + 0x48], eax
dec eax
dec eax
push esi
push ecx
inc ebx
push 0x40407261
inc eax
pop edx
add byte [edi], bh
aas
xor dword [ecx + 0x53], edx
imul esp, dword [edi + 0x6e], 0x614d6c61
outsb dx, byte [si]
popal
insb byte es:[edi], dx
dec ebp
popal
jo 0x64b2e7
jb 0x64b2ba
inc eax
push ebp
inc ecx
inc ebp
inc eax
pop eax
pop edx
add byte [ebx - 0x36], dl
aas
popal
jo 0x64b2f8
outsb dx, byte gs:[esi]
inc eax
push ecx
push ebx
je 0x64b302
imul ebp, dword [esi + 0x67], reloc.SHELL32.dll_ShellExecuteW
push ecx
inc ecx
inc ebp
inc ecx
inc ecx
push esi
xor dword [eax + 0x50], eax
inc edx
inc esp
inc eax
pop edx
add byte [edi], bh
aas
xor byte [ecx + 0x55], dl
jb 0x64b316
push ecx
jne 0x64b312
jb 0x64b328
inc eax
inc eax
push ecx
inc ecx
inc ebp
inc eax
inc ecx
inc edx
push esi
push ecx
push ebx
je 0x64b32e
imul ebp, dword [esi + 0x67], reloc.SHELL32.dll_ShellExecuteW
inc eax
inc eax
pop edx
add byte [edx - 0x1b], ch
jne 0x64b2e4
out dx, eax
push cs
xchg esp, eax
aas
je 0x64b33d
inc ecx
jb 0x64b343
popal
jns 0x64b314
push ecx
dec edx
jae 0x64b347
outsb dx, byte [esi]
push esi
popal
insb byte es:[edi], dx
jne 0x64b343
inc eax
inc eax
push ecx
inc edx
inc ebp
aas
inc ecx
push esi
push ecx
dec edx
jae 0x64b359
outsb dx, byte [esi]
inc ecx
jb 0x64b360
popal
jns 0x64b331
inc eax
pop eax
pop edx
add byte [esi + 0x24048bfc], al
xchg ah, bh
mov eax, dword [esp]
add al, 0x24
bswap ebx
mov dl, bl
lea ebx, [edi + ebp]
lea esp, [esp + 3]
and al, 3
jmp 0x64b396
jb 0x64b38d
dec ecx
je 0x64b37c
insd dword es:[edi], dx
insd dword es:[edi], dx
inc eax
push ecx
push ebp
jb 0x64b389
push ecx
jne 0x64b385
jb 0x64b39b
inc eax
inc eax
push ecx
inc edx
inc ebp
pop edi
dec esi
inc ecx
inc edx
push esi
push ecx
push ebx
je 0x64b3a2
imul ebp, dword [esi + 0x67], reloc.SHELL32.dll_ShellExecuteW
outsb dx, byte [esi]
inc eax
inc eax
inc eax
pop edx
add byte [esi + 0x34c5a22c], bh
salc
test al, 0x39
test eax, 0x98d03bc8
sti
aas
rcr byte [eax + 0x69663ffb], 1
insb byte es:[edi], dx
dec esi
popal
insd dword es:[edi], dx
imul bp, word [ebp + 0x4e], 0x6d61
inc eax
push ecx
push ebp
jb 0x64b3c0
inc eax
inc eax
push ecx
inc edx
inc ebp
aas
inc ecx
push esi
push ecx
push ebx
je 0x64b3d2
imul ebp, dword [esi + 0x67], reloc.SHELL32.dll_ShellExecuteW
and al, 0x51
inc esi
insb byte es:[edi], dx
popal
jae 0x64b3af
push edi
xor al, 0x43
outsd dx, dword [esi]
insd dword es:[edi], dx
jo 0x64b3e5
outsb dx, byte [esi]
outsb dx, byte gs:[esi]
je 0x64b3c1
outsd dx, dword [esi]
jb 0x64b3eb
popal
je 0x64b3f5
imul ebp, dword [esi + 0x67], reloc.SHELL32.dll_ShellExecuteW
outsd dx, dword [esi]
jo 0x64b3fb
imul ebp, dword [edi + 0x6e], reloc.SHELL32.dll_ShellExecuteW
insb byte es:[edi], dx
outsb dx, byte [esi]
inc eax
push ecx
push ebp
jb 0x64b3fb
inc eax
inc eax
inc eax
inc eax
inc eax
pop edx
add byte [eax - 0x2b74dbdc], cl
mov byte [esp], ah
mov edx, esp
bsf ebx, edx
cld
rdtsc
mov dh, byte [esp]
xor al, 0x24
jmp 0x64b46e
jb 0x64b42b
dec ecx
je 0x64b41a
insd dword es:[edi], dx
push esi
popal
insb byte es:[edi], dx
jne 0x64b420
inc eax
push ecx
push ebp
jb 0x64b42c
push ecx
jne 0x64b428
jb 0x64b43e
inc eax
inc eax
push ecx
inc edx
inc ebp
aas
inc ecx
push esi
push ecx
push ebx
je 0x64b443
imul ebp, dword [esi + 0x67], reloc.SHELL32.dll_ShellExecuteW
outsb dx, byte [esi]
inc eax
inc eax
inc ecx
inc edx
push esi
xor al, byte [eax + 0x56]
aas
and al, 0x51
inc esi
insb byte es:[edi], dx
popal
jae 0x64b425
push edi
xor al, 0x43
outsd dx, dword [esi]
insd dword es:[edi], dx
jo 0x64b45b
outsd dx, dword [esi]
outsb dx, byte [esi]
outsb dx, byte gs:[esi]
je 0x64b437
outsd dx, dword [esi]
jb 0x64b461
popal
je 0x64b46b
imul ebp, dword [esi + 0x67], reloc.SHELL32.dll_ShellExecuteW
outsd dx, dword [esi]
outsb dx, byte [esi]
inc eax
push ecx
push ebp
jb 0x64b471
jo 0x64b471
imul ebp, dword [edi + 0x6e], reloc.SHELL32.dll_ShellExecuteW
insb byte es:[edi], dx
inc eax
inc eax
inc eax
inc eax
inc eax
pop edx
add byte [edi], bh
outsb dx, byte [esi]
outsd dx, dword [esi]
jb 0x64b47e
popal
insb byte es:[edi], dx
imul edi, dword [edx + 0x65], 0x70795464
inc eax
push ecx
dec ebp
je 0x64b482
popal
dec edi
bound ebp, qword [edx + 0x65]
arpl word [eax + eax*2 + 0x40], si
inc eax
push ebx
inc ecx
aas
inc ecx
push esi
push ecx
inc edx
jns 0x64b4a6
inc ecx
jb 0x64b4a8
popal
jns 0x64b479
inc eax
push eax
inc edx
inc esp
inc eax
pop edx
add byte [0xb54623b3], bh
adc al, 0x36
and dword [eax + 0x3f], esp
inc esi
mov ch, 0x14
and dword ss:[eax + 0x3f], esp
jae 0x64b4c1
imul di, word [eax + 0x40], 0x4651
imul ebp, dword [ebp + 0x49], 0x406f666e
inc eax
push ecx
inc edx
inc ebp
aas
inc ecx
push esi
push ecx
push ebx
je 0x64b4d8
imul ebp, dword [esi + 0x67], reloc.SHELL32.dll_ShellExecuteW
pop eax
pop edx
add byte [esi - 0x175dbc4], al
xchg byte [esp], bh
mov bh, dh
add esp, 0
call 0x64b4cf
add byte [eax], al
mov al, 0x27
mov bh, 0xd2
and esi, ebx
fidiv dword [reloc.SHELL32.dll_ShellExecuteW]
shl byte [ecx], cl
invalid
xor eax, 0x303f3f24
push ecx
inc esp
imul esi, dword [edx + 0x40], 0x45415140
inc eax
inc ecx
inc edx
push esi
push ecx
push ebx
je 0x64b50a
imul ebp, dword [esi + 0x67], reloc.SHELL32.dll_ShellExecuteW
add byte [edi - 0x42], dl
mov dword [edi], edi
aas
xor byte [ecx + 0x55], dl
push ecx
push ebp
jb 0x64b516
inc eax
inc eax
push ecx
inc ecx
inc ebp
inc eax
inc ecx
inc edx
push esi
push ecx
push ebx
je 0x64b529
imul ebp, dword [esi + 0x67], reloc.SHELL32.dll_ShellExecuteW
push eax
popal
jb 0x64b535
jae 0x64b52c
imul ebp, dword [esi + 0x67], reloc.SHELL32.dll_ShellExecuteW
inc eax
outsb dx, byte [esi]
dec ebp
outsd dx, dword [esi]
inc eax
xor byte [eax + 0x40], al
pop edx
add byte [esi - 0x79], ah
push esp
and al, 2
pop ax
not eax
jmp 0x64b541
add byte [edi], bh
popal
je 0x64b54f
push ecx
dec esp
imul esi, dword [ebx + 0x74], 0x61746144
je 0x64b579
inc eax
inc eax
push ecx
inc edx
inc ebp
push eax
inc ecx
push eax
inc ecx
pop eax
dec eax
inc eax
pop edx
add byte [edi], bh
je 0x64b598
dec ecx
outsb dx, byte [esi]
je 0x64b56d
inc eax
push ecx
dec edx
jae 0x64b5a0
outsb dx, byte [esi]
push esi
popal
insb byte es:[edi], dx
jne 0x64b59c
inc eax
inc eax
push ecx
inc edx
inc ebp
dec eax
dec eax
inc eax
pop edx
add byte [esi + 0x3b], ah
invalid
cmp ax, di
bt edx, edx
bswap ebx
sets bh
bswap ebx
call 0x64b5d4
inc esi
int1
add dword [eax], reloc.SHELL32.dll_ShellExecuteW
aas
outsb dx, byte gs:[esi]
je 0x64b5ce
jns 0x64b5aa
imul esi, dword [ebx + 0x74], reloc.SHELL32.dll_ShellExecuteW
jb 0x64b5a7
inc eax
push ecx
inc edx
inc ebp
aas
inc ecx
push esi
push ecx
push ebx
je 0x64b5e4
imul ebp, dword [esi + 0x67], reloc.SHELL32.dll_ShellExecuteW
inc eax
inc eax
push esi
aas
and al, 0x51
inc esi
insb byte es:[edi], dx
popal
jae 0x64b5c5
push edi
xor al, 0x46
imul ebp, dword [esp + esi*2 + 0x65], 0x44514072
imul esi, dword [edx + 0x40], 0x56404040
aas
and al, 0x51
inc esi
insb byte es:[edi], dx
popal
jae 0x64b5e0
push edi
xor al, 0x53
outsd dx, dword [esi]
jb 0x64b61a
inc esi
insb byte es:[edi], dx
popal
inc eax
inc eax
push ecx
inc esp
imul esi, dword [edx + 0x40], 0x40404040
pop edx
add byte [edi], bh
outsb dx, byte [esi]
jne 0x64b627
bound esp, qword [ebp + 0x72]
inc eax
push ecx
push ebx
je 0x64b634
imul ebp, dword [esi + 0x67], reloc.SHELL32.dll_ShellExecuteW
inc eax
inc eax
push ebx
inc ecx
aas
inc ecx
push esi
xor dword [eax + 0x4e], eax
dec esi
inc esp
dec eax
inc eax
pop edx
add al, ch
mov byte [0xff000000], al
push 0xc16899fe
adc eax, dword [ebp + reloc.SHELL32.dll_ShellExecuteW]
mov ah, 0xa7
test dword [reloc.SHELL32.dll_ShellExecuteW], edx
cmpsd dword [esi], dword es:[edi]
mov ah, 0xa7
into
pop ecx
mov eax, 0x51303f3f
push ebx
je 0x64b666
imul ebp, dword [esi + 0x67], reloc.SHELL32.dll_ShellExecuteW
inc ecx
inc ebp
inc eax
inc ecx
inc edx
push esi
push ecx
push ebx
je 0x64b675
imul ebp, dword [esi + 0x67], reloc.SHELL32.dll_ShellExecuteW
inc esi
outsd dx, dword [esi]
jb 0x64b67b
popal
je 0x64b651
xor byte [eax + 0x50], al
inc ecx
push esi
push ecx
dec edi
bound ebp, qword [edx + 0x65]
arpl word [eax + eax*2 + 0x40], si
arpl word gs:[eax + eax*2 + 0x40], si
inc eax
pop edx
add byte [edi], bh
jae 0x64b68a
je 0x64b670
outsb dx, byte [esi]
je 0x64b68f
jb 0x64b6a2
popal
insb byte es:[edi], dx
inc eax
push ecx
push esp
imul ebp, dword [ebp + 0x65], 0x51404072
jb 0x64b676
inc eax
push ecx
inc ecx
inc ebp
pop eax
dec eax
inc eax
pop edx
add byte [edi], bh
jb 0x64b6a7
imul esi, dword [bp + di + 0x74], reloc.SHELL32.dll_ShellExecuteW
jb 0x64b6b9
popal
insb byte es:[edi], dx
imul edi, dword [edx + 0x65], 0x70795464
push esp
jns 0x64b6c5
inc ax
push ecx
dec ebp
je 0x64b6c0
push esp
jns 0x64b6d2
inc eax
inc eax
push ebx
inc ecx
dec eax
inc ecx
inc edx
push esi
push ecx
inc edx
jns 0x64b6e3
inc ecx
inc ecx
jb 0x64b6e5
popal
jns 0x64b6b6
inc eax
inc eax
dec eax
inc eax
pop edx
add byte [ebp + 0x60eb1a1c], cl
mov word [edi], ds
invalid
lea ebx, [edx + ebx]
jmp 0x64b6e0
jo 0x64b653
in eax, dx
cld
iretd
push esi
sar dword [edi], 0x73
imul ebp, dword [esi + 0x67], 0x6853656c
outsd dx, dword [esi]
je 0x64b6dd
push ecx
push esp
imul ebp, dword [ebp + 0x65], 0x53404072
jb 0x64b6e4
inc eax
push ebx
inc ecx
pop eax
dec eax
push eax
inc edx
push esi
push ecx
dec edi
bound ebp, qword [edx + 0x65]
arpl word [eax + eax*2 + 0x40], si
push eax
inc edx
inc esp
inc eax
pop edx
add byte [ecx + 0x2f79002], bl
stosd dword es:[edi], eax
inc ebx
aas
aas
xor byte [ecx + 0x56], dl
push ecx
push esi
popal
jb 0x64b733
popal
outsb dx, byte [esi]
je 0x64b70e
inc eax
push ecx
inc ecx
inc ebp
inc eax
inc ecx
inc edx
push esi
push ecx
push edx
arpl word gs:[eax + eax*2 + 0x40], si
inc eax
pop edx
add byte [esi - 0x7ffcdb9c], al
xchg byte [esp + 3], ah
add eax, dword [eax - reloc.SHELL32.dll_ShellExecuteW]
and ah, 0xae
in al, 0xae
xchg edx, ebx
xchg byte [esp + 5], dl
not bx
jmp 0x64b7b8
jb 0x64b750
inc eax
push ebp
inc edx
inc ebp
push eax
inc edx
push ebp
push ecx
dec ebp
je 0x64b77d
dec edi
bound ebp, qword [edx + 0x65]
arpl word [eax + eax*2 + 0x40], si
pop eax
pop edx
add bh, cl
push ebp
lds ebp, [edi + ebx*2 + 0x54c65fea]
xor ecx, esi
dec ecx
neg esi
sub dword [eax - 0x15], ecx
aas
jb 0x64b7a0
imul esi, dword [bp + di + 0x74], reloc.SHELL32.dll_ShellExecuteW
jb 0x64b7b2
popal
insb byte es:[edi], dx
imul edi, dword [edx + 0x65], 0x70795464
push esp
jns 0x64b7be
inc eax
push ecx
dec ebp
je 0x64b7b6
push esp
jns 0x64b7c8
inc eax
inc eax
push ebx
inc ecx
dec eax
inc ecx
inc edx
push esi
push ecx
inc edx
jns 0x64b7d9
inc ecx
jb 0x64b7db
popal
jns 0x64b7ac
inc eax
push eax
inc ecx
pop eax
push eax
inc ecx
pop eax
inc eax
pop edx
push eax
inc ecx
push eax
inc ecx
pop eax
xor dword [eax + 0x42], edx
push eax
inc edx
pop eax
inc eax
pop edx
dec eax
push esi
aas
and al, 0x51
inc esi
insb byte es:[edi], dx
popal
jae 0x64b7cd
push edi
xor al, 0x54
jns 0x64b802
inc esi
insb byte es:[edi], dx
popal
inc eax
push ecx
dec ebp
je 0x64b7fe
push esp
jns 0x64b810
inc eax
inc eax
inc eax
inc eax
push eax
inc edx
push ebp
push ecx
dec ebp
je 0x64b80e
popal
dec edi
bound ebp, qword [edx + 0x65]
arpl word [eax + eax*2 + 0x40], si
je 0x64b7f4
inc eax
inc eax
pop edx
add byte [eax - 0x73], bl
and al, 1
pop eax
lea esp, [esp + 1]
mov bh, ch
std
cmp eax, 0x11be4403
jmp 0x64b80b
push ss
jno 0x64b74b
pop es
mov ebp, 0x74713f8c
pop edi
insd dword es:[edi], dx
je 0x64b837
invalid
arpl word [ecx + 0x6c], sp
insb byte es:[edi], dx
inc eax
push ecx
push ebx
imul esp, dword [edi + 0x6e], 0x614d6c61
jo 0x64b856
jb 0x64b829
inc eax
push ebp
inc ecx
inc ebp
dec eax
push edi
xor al, 0x43
popal
insb byte es:[edi], dx
insb byte es:[edi], dx
inc eax
push ecx
dec ebp
je 0x64b85b
dec edi
bound ebp, qword [edx + 0x65]
arpl word [eax + eax*2 + 0x40], si
dec eax
push eax
inc ecx
push eax
inc ecx
pop eax
inc eax
pop edx
add byte [esi - 0x75], ah
pop esp
mov bx, word [esp + 4]
and al, 4
bt ebx, edx
lea esp, [esp + 4]
jmp 0x64b874
outsb dx, byte [esi]
imul eax, dword [eax + 0x51], 0x48
popal
jae 0x64b899
inc esp
popal
je 0x64b896
inc eax
inc eax
push ecx
inc ecx
inc ebp
pop eax
pop eax
pop edx
add byte [edi], bh
aas
cmp byte [eax + 0x59], al
inc ecx
pop edi
dec esi
inc ecx
inc edx
push esi
push ecx
push ebx
je 0x64b8bf
imul ebp, dword [esi + 0x67], reloc.SHELL32.dll_ShellExecuteW
pop edx
add byte [eax], dl
aas
adc byte [edi], bh
ja 0x64b8c3
insb byte es:[edi], dx
insb byte es:[edi], dx
inc edi
jb 0x64b8ce
ja 0x64b8a1
push ecx
dec eax
popal
jae 0x64b8ce
inc esp
popal
je 0x64b8cb
inc eax
inc eax
push ecx
inc ecx
inc ebp
pop edi
dec esi
pop eax
pop edx
add byte [esi - 1], ah
je 0x64b89c
push word [esp + 1]
xchg word [esp], dx
add dword [esi - 0x79], esp
adc al, 0x24
not dx
jmp 0x64b90d
dec eax
popal
jae 0x64b902
push 0x61746144
inc esp
popal
je 0x64b8ff
inc eax
inc eax
push ecx
inc ecx
inc ebp
push eax
inc ecx
push ebp
dec esi
outsd dx, dword [esi]
inc eax
xor dword [eax + 0x58], eax
pop edx
add byte [edi], bh
je 0x64b92c
jo 0x64b91a
inc eax
push ecx
inc ebp
jbe 0x64b91f
outsb dx, byte [esi]
je 0x64b8fd
inc eax
push ecx
inc edx
inc ebp
aas
inc ecx
push edi
xor al, 0x54
jns 0x64b938
inc eax
xor dword [eax + 0x58], eax
inc eax
pop eax
pop edx
add dh, ch
stc
fdivr dword [ebx]
aas
jae 0x64b93b
je 0x64b925
popal
jo 0x64b94b
imul ebp, dword [esi + 0x67], reloc.SHELL32.dll_ShellExecuteW
outsb dx, byte [si]
popal
insb byte es:[edi], dx
dec ebp
popal
jo 0x64b95a
jb 0x64b92d
inc eax
push ecx
inc ecx
inc ebp
pop eax
push eax
inc ecx
push esi
push ecx
dec edi
bound ebp, qword [edx + 0x65]
arpl word [eax + eax*2 + 0x40], si
inc eax
inc ecx
inc edx
push esi
push ecx
push ebx
je 0x64b977
imul ebp, dword [esi + 0x67], reloc.SHELL32.dll_ShellExecuteW
add byte [esi - 0x75], ah
inc esp
and al, 3
mov ax, word [esp + 3]
call 0x64b9e5
adc edx, dword [eax + reloc.SHELL32.dll_ShellExecuteW]
lea ebx, [edi + ebp*2]
popal
nop
jbe 0x64b8ab
sbb al, 0x6f
outsd dx, dword [esi]
jbe 0x64b983
mov al, byte [0x6168733f]
jb 0x64b98e
push 0x64657261
pop edi
pop edi
outsb dx, byte [esi]
jne 0x64b99a
insb byte es:[edi], dx
insb byte es:[edi], dx
inc eax
push ecx
dec eax
popal
jae 0x64b99d
inc esp
popal
je 0x64b99a
popal
inc eax
inc eax
xor dl, byte [ebp + 0x31]
inc eax
inc edx
add byte [edi], bh
popal
insb byte es:[edi], dx
insb byte es:[edi], dx
outsd dx, dword [esi]
arpl word [ecx + 0x74], sp
dec esi
outsd dx, dword [esi]
inc eax
push ecx
dec eax
popal
jae 0x64b9bc
inc esp
popal
je 0x64b9b9
inc eax
inc eax
push ecx
inc ecx
inc ebp
push eax
inc ecx
pop eax
dec eax
inc eax
pop edx
add cl, ah
not dword [bp + si - reloc.SHELL32.dll_ShellExecuteW]
sbb dword [eax + 0x7a98690e], ebx
jne 0x64b9d6
xchg edi, eax
dec cl
aas
aas
xor byte [ecx + 0x53], dl
imul esp, dword [edi + 0x6e], 0x614d6c61
jo 0x64b9f3
jb 0x64b9c6
inc eax
push ecx
inc ecx
inc ebp
inc eax
push eax
inc ecx
push esi
push ecx
dec edi
bound ebp, qword [edx + 0x65]
arpl word [eax + eax*2 + 0x40], si
inc eax
pop edx
add byte [edi], bh
aas
insd dword es:[edi], dx
popal
outsb dx, byte [esi]
push 0x61747461
outsb dx, byte [esi]
dec esp
outsb dx, byte gs:[esi]
je 0x64ba12
inc eax
push ecx
push eax
outsd dx, dword [esi]
imul ebp, dword [esi + 0x74], 0x42514040
inc ebp
dec eax
pop eax
pop edx
add byte [eax + 0x3f], ch
outsb dx, byte [esi]
js 0x64ba34
dec esi
outsd dx, dword [esi]
inc eax
push ecx
dec eax
popal
jae 0x64ba32
inc esp
popal
je 0x64ba2f
inc eax
inc eax
push ebx
inc ecx
push eax
inc ecx
push ebp
dec esi
outsd dx, dword [esi]
inc eax
xor dword [eax + 0x50], eax
inc ecx
push ebp
xor dh, byte [ecx]
inc eax
inc eax
pop edx
add byte [ebp + 0x665b3304], cl
rol ebx, cl
neg ebx
pop word [esp]
jmp 0x64bab4
mov ebp, 0x8b000000
and bl, byte [ebp - 0x54]
aas
imul ebp, dword [esi + 0x73], 0x6c6c6174
inc ebp
jbe 0x64ba6b
outsb dx, byte [esi]
je 0x64ba4f
imul ebp, dword [esp + esi*2 + 0x65], reloc.SHELL32.dll_ShellExecuteW
bound ebp, qword [edx + 0x65]
push 0x65
arpl word [eax + eax*2 + 0x40], si
push ecx
inc ecx
inc ebp
pop eax
push eax
inc ecx
push esi
xor dword [eax + 0x40], eax
pop edx
add byte [edi + 0x663f3186], bh
jb 0x64ba90
pop edi
push 0x65706c65
insb byte es:[edi], dx
jo 0x64ba97
jb 0x64ba74
push ecx
dec eax
popal
jae 0x64baa1
inc esp
popal
je 0x64ba9e
inc eax
inc eax
push ecx
inc ecx
inc ebp
pop eax
push eax
inc ecx
pop eax
push eax
inc ecx
push ebp
dec esi
outsd dx, dword [esi]
inc eax
xor dword [eax + 0x40], eax
pop edx
inc eax
pop edx
add byte [edi], bh
jne 0x64bacc
jb 0x64bab0
jns 0x64bace
inc eax
push ecx
push esi
popal
jb 0x64bace
popal
outsb dx, byte [esi]
je 0x64baa9
inc eax
push ecx
inc edx
inc ebp
dec eax
pop eax
pop edx
add byte [eax], dh
xor edi, dword [edi]
je 0x64bad9
arpl word [eax + 0x5f], bp
push 0x65706c65
jb 0x64bac2
push ecx
dec eax
popal
jae 0x64baef
inc esp
popal
je 0x64baec
inc eax
inc eax
push ecx
inc ecx
inc ebp
push eax
inc ecx
push ebp
xor dword [eax + 0x50], eax
inc ecx
inc ecx
pop eax
push eax
inc ecx
push ebp
dec esi
outsd dx, dword [esi]
inc eax
xor dword [eax + 0x50], eax
inc ecx
pop eax
inc eax
pop edx
push eax
inc ecx
pop eax
xor byte [eax + 0x5a], al
dec eax
dec eax
inc eax
pop edx
add byte [ebx - 0x74bffe14], al
frstor dword [esi - 1]
xor al, 0x24
sub esp, 1
inc eax
mov ebx, ebp
push word [esp]
sub esp, 7
bswap ebx
jmp 0x64baea
retf
push 0x75
jae 0x64bb45
jne 0x64bb43
je 0x64bb37
inc eax
inc eax
push ecx
push edx
arpl word gs:[eax + eax*2 + 0x40], si
inc eax
inc eax
push ecx
inc edx
inc ebp
aas
inc ecx
push esi
xor dword [eax + 0x48], eax
dec eax
dec eax
dec eax
inc eax
pop edx
add byte [esi - 0x75], ah
mov bx, word [esp + 0xb]
pop esp
and al, 0xb
and ah, 0x28
lea edx, [ebp - 0xce]
jmp 0x64bbeb
dec esi
dec eax
push eax
inc ecx
pop eax
inc eax
pop edx
add byte [edx], dh
sub eax, 0x6e693f3c
imul ebp, dword [esi + 0x73], reloc.SHELL32.dll_ShellExecuteW
inc eax
jae 0x64bbbb
popal
outsb dx, byte [esi]
arpl word [ebp + 0x40], sp
push ecx
inc ebx
outsd dx, dword [esi]
jb 0x64bbb6
inc ecx
jo 0x64bbc4
insb byte es:[edi], dx
imul esp, dword [ebx + 0x61], 0x6e6f6974
inc eax
inc eax
push ebx
inc ecx
push eax
inc ecx
push esi
xor dword [eax + 0x58], eax
pop edx
add byte [edi], bh
aas
xor byte [ecx + 0x53], dl
je 0x64bbe1
imul ebp, dword [esi + 0x67], reloc.SHELL32.dll_ShellExecuteW
inc ebp
inc eax
inc ecx
inc edx
push esi
xor byte [eax + 0x40], al
pop edx
add byte [edi], cl
aas
je 0x64bbf3
dec ecx
outsb dx, byte [esi]
je 0x64bbc8
push ecx
push esi
popal
jb 0x64bbf6
popal
outsb dx, byte [esi]
je 0x64bbd1
inc eax
push ecx
inc edx
inc ebp
dec eax
push eax
inc ecx
pop edi
dec esi
inc eax
pop edx
add byte [edi], bh
je 0x64bc0f
inc edx
outsd dx, dword [esi]
outsd dx, dword [esi]
insb byte es:[edi], dx
inc eax
push ecx
push esi
popal
jb 0x64bc13
popal
outsb dx, byte [esi]
je 0x64bbee
inc eax
push ecx
inc edx
inc ebp
pop edi
dec esi
pop eax
pop edx
add byte [edx + 0x1ced8a14], dl
cmc
sbb al, 0xf5
add eax, eax
cmp dword [edx], 0x15
test byte [edi], bh
jb 0x64bc2b
insd dword es:[edi], dx
outsd dx, dword [esi]
jbe 0x64bc2f
inc ebp
jbe 0x64bc32
outsb dx, byte [esi]
je 0x64bc16
imul ebp, dword [esp + esi*2 + 0x65], reloc.SHELL32.dll_ShellExecuteW
insb byte es:[edi], dx
je 0x64bc39
jb 0x64bc16
push ecx
dec edi
bound ebp, qword [edx + 0x65]
arpl word [eax + eax*2 + 0x40], si
push ecx
inc ecx
inc ebp
pop eax
push eax
inc ecx
push esi
xor dword [eax + 0x40], eax
pop edx
add byte [esi - 0x45], ah
mov esp, ebp
mov bx, 0xec89
in al, dx
mov word [esp + 1], ax
dec bx
add dword [esi + 0x4b], esp
sets dh
inc eax
jmp 0x64bc45
jb 0x64bc7a
popal
outsb dx, byte [esi]
je 0x64bc55
inc eax
push ecx
inc edx
inc ebp
push eax
inc edx
pop eax
pop eax
pop edx
add byte [edi], bh
arpl word [edi + 0x6e], bp
je 0x64bc86
imul ebp, dword [esi + 0x73], reloc.SHELL32.dll_ShellExecuteW
arpl word [eax + eax*2 + 0x40], si
arpl word gs:[eax + eax*2 + 0x40], si
inc eax
push ecx
inc edx
inc ebp
pop edi
dec esi
inc ecx
inc edx
push esi
push ecx
push eax
outsd dx, dword [esi]
imul ebp, dword [esi + 0x74], 0x4e5f4040
inc eax
pop edx
add byte [esi - 0x75], ah
push esp
and al, 4
mov dx, word [esp + 4]
mov bx, 0x3133
mov dh, 0x44
pop dword [esp + 1]
jmp 0x64bc7a
and al, 0x42
std
int3
mov ebx, 0x27164349
mov word [esp + 2], di
mov ah, 0x55
mov dl, 0xbd
jmp 0x64bd48
lea eax, [esi + ebp]
not dh
rdtsc
xchg dword [esp], ebx
pop ebx
jmp 0x64bd88
mov ebx, 0x6370d284
setnp bl
mov ebx, 0x57495ebe
xchg dx, ax
jmp 0x64c065
neg bl
xchg dword [esp], edx
xchg bx, ax
rdtsc
mov ebx, esi
bsf edx, esp
jmp 0x64c095
mov ax, word [esp + 1]
mov dx, sp
adc edx, ebp
push word [esp + 2]
jmp 0x64c111
mov word [esp + 3], ax
sub esp, 0x1c
push dword [esp + 5]
lea eax, [esi + edi]
jmp 0x64c1a9
mov byte [esp + 0x1c], dl
call 0x64c2b0
add byte [ecx + 0x78936001], dl
adc byte [edx], 0x80
out 0x12, eax
mov ch, 0x13
aas
arpl word [ebp + 0x6e], sp
je 0x64c22a
jb 0x64c207
push ecx
push edx
arpl word gs:[eax + eax*2 + 0x40], si
push ecx
inc edx
inc ebp
aas
inc ecx
push esi
push ecx
push eax
outsd dx, dword [esi]
imul ebp, dword [esi + 0x74], 0x5a584040
add byte [ecx + 0x8f99e08], bl
stc
xor dword [ebp + reloc.SHELL32.dll_ShellExecuteW], esp
push esp
invalid
outsd dx, dword [esi]
outsb dx, byte [esi]
outsb dx, byte [esi]
arpl word gs:[ecx + ebp*2 + 0x6f], si
outsb dx, byte [esi]
inc eax
push ecx
dec ebp
je 0x64c277
dec edi
bound ebp, qword [edx + 0x65]
arpl word [eax + eax*2 + 0x40], si
push eax
inc edx
push esi
xor dword [eax + 0x50], eax
inc edx
inc esp
xor byte [ecx], dh
push edi
xor al, 0x43
inc ebx
outsd dx, dword [esi]
outsb dx, byte [esi]
outsb dx, byte [esi]
arpl word gs:[ecx + ebp*2 + 0x6f], si
outsb dx, byte [esi]
push esp
jns 0x64c2a7
inc eax
push ecx
je 0x64c27c
inc eax
inc eax
pop edx
add byte [edx + 0x6c], al
jne 0x64c2a9
je 0x64c2b5
outsd dx, dword [esi]
je 0x64c2b1
inc esi
imul ebp, dword [esi + 0x64], 0x7478654e
push edx
popal
imul ebp, dword fs:[edi], reloc.SHELL32.dll_ShellExecuteW
push ebx
je 0x64c2d0
imul ebp, dword [esi + 0x67], reloc.SHELL32.dll_ShellExecuteW
inc ebp
inc eax
push esi
push ecx
inc ebx
push 0x40407261
inc eax
pop edx
add byte [edi], bh
imul esi, dword [ebx + 0x45], 0x7974706d
inc eax
jo 0x64c2ed
jns 0x64c2bb
push ecx
push ebx
je 0x64c2f1
imul ebp, dword [esi + 0x67], reloc.SHELL32.dll_ShellExecuteW
inc ebp
pop edi
dec esi
pop eax
pop edx
add byte [edi], bh
imul esi, dword fs:[ebx + 0x70], 0x4065736f
push ecx
dec esp
imul esi, dword [ebx + 0x74], 0x61746144
inc eax
inc eax
push ebx
inc ecx
pop eax
push eax
inc ecx
push ebp
inc esp
popal
je 0x64c30b
popal
inc eax
xor dword [eax + 0x40], eax
pop edx
add byte [edi + 0x24648dc3], al
ret
and esp, dword [esi - 0x77]
pop esp
and al, 2
not ebx
mov dh, 0x12
jmp 0x64c388
jae 0x64c346
pop edi
arpl word [edi + 0x6e], bp
je 0x64c339
imul ebp, dword [esi + 0x73], reloc.SHELL32.dll_ShellExecuteW
jb 0x64c34a
jbe 0x64c344
je 0x64c34a
inc eax
inc eax
pop ecx
inc ecx
pop edi
dec esi
push eax
inc edx
push esi
push ecx
push ebx
je 0x64c364
jb 0x64c35c
imul ebp, dword [esi + 0x67], reloc.SHELL32.dll_ShellExecuteW
inc eax
inc eax
inc ecx
inc edx
outsb dx, byte [esi]
dec esp
imul esi, dword [ebx + 0x74], 0x42414040
push esi
push ecx
push ebx
je 0x64c374
imul ebp, dword [esi + 0x67], reloc.SHELL32.dll_ShellExecuteW
inc ebx
popal
jae 0x64c372
push ebx
outsb dx, byte gs:[esi]
jae 0x64c37b
je 0x64c37d
jbe 0x64c37f
je 0x64c391
inc eax
push ecx
je 0x64c35c
inc eax
inc eax
pop edx
add byte [edi + 0x10e18610], al
mov ecx, 0xf6ef9c0d
loope 0x64c34c
aas
je 0x64c39e
push ebx
je 0x64c396
push ebx
je 0x64c3a7
imul ebp, dword [esi + 0x67], reloc.SHELL32.dll_ShellExecuteW
jb 0x64c3a7
push ecx
push ebx
je 0x64c3af
imul ebp, dword [esi + 0x67], reloc.SHELL32.dll_ShellExecuteW
outsb dx, byte [esi]
inc eax
inc eax
push ecx
inc edx
inc ebp
aas
inc ecx
push esi
aas
and al, 0x62
popal
bound esp, qword [ecx + 0x73]
imul esp, dword [ebx + 0x5f], 0x69727473
outsb dx, byte [esi]
inc eax
inc esp
push ebp
aas
jae 0x64c3b7
arpl word [edi + 0x73], bx
je 0x64c3c5
imul ebp, dword [esi + 0x67], reloc.SHELL32.dll_ShellExecuteW
and al, 0x63
push 0x745f7261
jb 0x64c3c4
imul esi, dword [ebx + esi*2 + 0x40], reloc.SHELL32.dll_ShellExecuteW
je 0x64c3d9
inc eax
inc esp
inc eax
jae 0x64c3df
inc eax
inc eax
push esi
aas
and al, 0x61
insb byte es:[edi], dx
insb byte es:[edi], dx
outsd dx, dword [esi]
arpl word [ecx + 0x74], sp
outsd dx, dword [esi]
jb 0x64c3bb
inc esp
inc eax
xor al, byte [eax + 0x40]
inc eax
jae 0x64c3f6
inc eax
inc eax
pop eax
pop edx
add byte [ebx - 0x7563dbec], cl
je 0x64c3b3
mov edx, dword [esp]
pushfd
mov dh, byte [esp + 5]
lea esp, [esp + 2]
add eax, 0x224648d
and al, 2
setnp bl
jmp 0x64c669
ret
aas
jb 0x64c411
insd dword es:[edi], dx
push ebp
je 0x64c40c
cmp byte [eax + 0x51], al
inc eax
push ecx
push ebx
je 0x64c41e
imul ebp, dword [esi + 0x67], reloc.SHELL32.dll_ShellExecuteW
inc eax
inc eax
push ebx
inc ecx
aas
inc ecx
push esi
xor dword [eax + 0x50], eax
inc eax
push eax
inc edx
inc esp
dec eax
inc eax
pop edx
add byte [edi], bh
je 0x64c434
popal
outsb dx, byte [esi]
jae 0x64c432
insb byte es:[edi], dx
popal
je 0x64c42e
inc eax
push ecx
inc ebx
outsd dx, dword [esi]
jb 0x64c434
inc ecx
jo 0x64c442
insb byte es:[edi], dx
imul esp, dword [ebx + 0x61], 0x6e6f6974
outsb dx, byte [esi]
inc eax
inc eax
push ebx
inc ecx
aas
inc ecx
push esi
push ecx
push ebx
je 0x64c457
imul ebp, dword [esi + 0x67], reloc.SHELL32.dll_ShellExecuteW
inc esp
xor byte [eax], dh
dec eax
inc eax
pop edx
add bl, ah
jne 0x64c3db
invalid
inc eax
inc eax
push ebp
inc ecx
inc ebp
pop edi
dec esi
push eax
inc ecx
push esi
push ecx
inc ebp
jbe 0x64c47f
outsb dx, byte [esi]
je 0x64c45d
inc eax
inc eax
pop edx
add byte [edi], bh
pop edi
pop eax
bound esp, qword [ecx + 0x64]
pop edi
popal
insb byte es:[edi], dx
insb byte es:[edi], dx
outsd dx, dword [esi]
arpl word [eax + 0x73], ax
je 0x64c495
jae 0x64c4a4
inc eax
inc eax
inc eax
pop ecx
inc ecx
pop eax
pop eax
pop edx
add byte [ebx], cl
aas
aas
xor dword [ebx + 0x6f], eax
outsb dx, byte [esi]
outsb dx, byte [esi]
arpl word gs:[ecx + ebp*2 + 0x6f], si
arpl word [ecx + ebp*2 + 0x6f], si
outsb dx, byte [esi]
inc eax
push ecx
dec ebp
je 0x64c4ae
dec edi
bound ebp, qword [edx + 0x65]
arpl word [eax + eax*2 + 0x40], si
push ecx
inc ecx
inc ebp
inc eax
pop eax
pop edx
add byte [edi], bh
outsd dx, dword [esi]
bound ebp, qword [edx + 0x65]
arpl word [esi + ecx*2 + 0x61], si
insd dword es:[edi], dx
inc eax
push ecx
dec edi
bound ebp, qword [edx + 0x65]
arpl word [eax + eax*2 + 0x40], si
push ecx
inc edx
inc ebp
aas
inc ecx
push esi
push ecx
push ebx
je 0x64c4ed
imul ebp, dword [esi + 0x67], reloc.SHELL32.dll_ShellExecuteW
inc eax
pop eax
pop edx
add byte [ebp + 0x20d1b620], dh
mov ebp, ebx
sub al, 0x3f
aas
jbe 0x64c4f5
outsb dx, byte [esi]
je 0x64c4d9
imul ebp, dword [esp + esi*2 + 0x65], reloc.SHELL32.dll_ShellExecuteW
je 0x64c4fc
jb 0x64c4d9
push ecx
dec edi
bound ebp, qword [edx + 0x65]
arpl word [eax + eax*2 + 0x40], si
push ebp
inc ecx
inc ebp
pop edi
dec esi
push eax
inc ecx
push esi
xor dword [eax + 0x50], eax
inc ecx
push esi
push ecx
inc ebp
jbe 0x64c518
outsb dx, byte [esi]
je 0x64c4f6
inc eax
inc eax
pop edx
add byte [edi + esi*2 + 0x6d], al
dec ecx
jae 0x64c503
outsd dx, dword [esi]
insd dword es:[edi], dx
jo 0x64c533
jae 0x64c52f
je 0x64c531
outsd dx, dword [esi]
outsb dx, byte [esi]
inc ebp
outsb dx, byte [esi]
popal
bound ebp, qword [ebp + 0x64]
add byte [esi], al
mov cl, 0x3f
jae 0x64c53c
je 0x64c528
bound ebp, qword [edx + 0x65]
arpl word [esi + ecx*2 + 0x61], si
insd dword es:[edi], dx
inc eax
push ecx
dec edi
bound ebp, qword [edx + 0x65]
arpl word [eax + eax*2 + 0x40], si
push ecx
inc ecx
inc ebp
pop eax
inc ecx
inc edx
push esi
push ecx
push ebx
je 0x64c569
jb 0x64c561
imul ebp, dword [esi + 0x67], reloc.SHELL32.dll_ShellExecuteW
outsb dx, byte [esi]
inc eax
inc eax
inc eax
pop edx
add byte [edi], bh
jae 0x64c567
je 0x64c554
push eax
jb 0x64c575
jo 0x64c56d
jb 0x64c57e
jns 0x64c54c
push ecx
dec edi
bound ebp, qword [edx + 0x65]
arpl word [eax + eax*2 + 0x40], si
push ecx
inc ecx
inc ebp
pop edi
dec esi
push eax
inc edx
inc esp
inc ecx
inc edx
push esi
push ecx
push esi
popal
jb 0x64c58e
popal
outsb dx, byte [esi]
je 0x64c569
inc eax
inc eax
inc eax
pop edx
add byte [eax + 0x32c7a032], ch
test dword [ebx + reloc.SHELL32.dll_ShellExecuteW], esi
mov al, byte [0xb38532c7]
aas
xor al, byte [ebp + 0x6f633fb3]
outsb dx, byte [esi]
mov bl, 0x3f
arpl word [edi + 0x6e], bp
outsb dx, byte [esi]
arpl word gs:[ebx + edx*2 + 0x6c], si
push ebx
insb byte es:[edi], dx
outsd dx, dword [esi]
je 0x64c5b4
inc edx
jns 0x64c592
popal
insd dword es:[edi], dx
inc eax
push ecx
dec ebp
je 0x64c5ae
popal
dec edi
bound ebp, qword [edx + 0x65]
arpl word [eax + eax*2 + 0x40], si
inc eax
push ebx
inc ecx
pop eax
push eax
inc ecx
push esi
push ecx
dec edi
bound ebp, qword [edx + 0x65]
arpl word [eax + eax*2 + 0x40], si
je 0x64c5a3
inc eax
inc eax
pop edx
add byte [edi], bh
aas
arpl word [eax + 0x69], bp
insb byte es:[edi], dx
inc ebp
push 0x45646c69
inc ebp
jbe 0x64c5d5
outsb dx, byte [esi]
je 0x64c5b3
push ecx
dec edi
bound ebp, qword [edx + 0x65]
arpl word [eax + eax*2 + 0x40], si
dec ebp
inc ecx
inc ebp
pop eax
push eax
inc ecx
push esi
push ecx
inc ebx
push 0x45646c69
jbe 0x64c5f1
outsb dx, byte [esi]
je 0x64c5cf
inc eax
inc eax
inc eax
pop edx
add byte [ebx + 0x28d9be28], dh
add ebp, 0x6d69743f
jb 0x64c5e6
jbe 0x64c608
outsb dx, byte [esi]
je 0x64c5e6
push ecx
dec edi
bound ebp, qword [edx + 0x65]
arpl word [eax + eax*2 + 0x40], si
inc eax
dec ebp
inc ecx
inc ebp
pop eax
push eax
inc ecx
push esi
push ecx
push esp
imul ebp, dword [ebp + 0x65], 0x65764572
outsb dx, byte [esi]
je 0x64c602
inc eax
inc eax
pop edx
add byte [edi], bh
pop edi
pop edi
inc ebp
js 0x64c62f
jo 0x64c643
imul ebp, dword [edi + 0x6e], reloc.SHELL32.dll_ShellExecuteW
push esp
outsd dx, dword [esi]
inc edx
outsd dx, dword [esi]
outsd dx, dword [esi]
insb byte es:[edi], dx
inc eax
inc eax
pop ecx
inc ecx
pop edi
dec esi
push eax
inc edx
pop eax
inc eax
pop edx
add byte [edi + edi + 0x74], dh
jb 0x64c62c
push ecx
dec ebp
je 0x64c652
dec edi
bound ebp, qword [edx + 0x65]
arpl word [eax + eax*2 + 0x40], si
push ecx
inc edx
inc ebp
aas
inc ecx
push esi
push ecx
push ebx
je 0x64c675
jb 0x64c66d
imul ebp, dword [esi + 0x67], reloc.SHELL32.dll_ShellExecuteW
outsb dx, byte [esi]
inc eax
inc eax
push eax
inc edx
inc esp
xor byte [eax + 0x40], cl
pop edx
add byte [edi], bh
arpl word [edi + 0x6e], bp
outsb dx, byte [esi]
arpl word gs:[esi + ecx*2 + 0x6f], si
je 0x64c685
jns 0x64c65f
push ecx
dec edi
bound ebp, qword [edx + 0x65]
arpl word [eax + eax*2 + 0x40], si
dec ebp
inc ecx
inc ebp
pop eax
inc ecx
inc edx
push esi
push ecx
dec ebp
je 0x64c695
dec ebp
je 0x64c6a0
outsd dx, dword [esi]
inc eax
inc eax
inc eax
pop edx
add byte [edi - 0x72], ah
aas
arpl word [ebp + 0x73], si
jne 0x64c6b8
je 0x64c6b6
insd dword es:[edi], dx
inc ebp
jbe 0x64c6b0
outsb dx, byte [esi]
je 0x64c68e
push ecx
dec edi
bound ebp, qword [edx + 0x65]
arpl word [eax + eax*2 + 0x40], si
arpl word gs:[eax + eax*2 + 0x40], si
dec ebp
inc ecx
inc ebp
pop eax
push eax
inc ecx
push esi
push ecx
inc ebp
jbe 0x64c6c7
outsb dx, byte [esi]
je 0x64c6a5
inc eax
inc eax
pop edx
add byte [edi], cl
mov esp, 0x24048fc2
bsf eax, edx
pop dword [esp]
add al, 0x24
xchg bl, bh
add esp, 0
sub esp, 0x17
in al, dx
pop ss
std
jmp 0x64c718
outsb dx, byte [esi]
outsb dx, byte [esi]
arpl word gs:[esi + ecx*2 + 0x6f], si
je 0x64c6f7
jns 0x64c6d1
push ecx
dec edi
bound ebp, qword [edx + 0x65]
arpl word [eax + eax*2 + 0x40], si
arpl word gs:[eax + eax*2 + 0x40], si
dec ebp
inc ecx
inc ebp
pop eax
inc ecx
inc edx
push esi
push ecx
dec ebp
je 0x64c707
popal
dec ebp
je 0x64c712
outsd dx, dword [esi]
inc eax
inc eax
inc eax
pop edx
add byte [ecx - 0x21], al
dec edi
sub bl, cl
push eax
test eax, 0x30c1a630
mov bh, 0xb1
xor byte [esi - 0x4e48cf3f], ah
sub eax, 0xb237c4bd
mov esp, 0x72703f8f
outsd dx, dword [esi]
jb 0x64c738
arpl word [ebp + 0x73], sp
jae 0x64c713
jbe 0x64c735
outsb dx, byte [esi]
je 0x64c746
inc eax
push ecx
inc ebx
outsd dx, dword [esi]
jb 0x64c73e
inc ecx
jo 0x64c74c
insb byte es:[edi], dx
imul esp, dword [ebx + 0x61], 0x6e6f6974
inc eax
inc eax
push ebx
inc ecx
pop eax
push esi
aas
and al, 0x51
inc esi
insb byte es:[edi], dx
popal
jae 0x64c733
push edi
xor al, 0x50
jb 0x64c767
outsd dx, dword [esi]
arpl word [ebp + 0x73], sp
jae 0x64c742
jbe 0x64c764
outsb dx, byte [esi]
je 0x64c775
inc esi
insb byte es:[edi], dx
popal
inc eax
push ecx
inc ebp
jbe 0x64c770
outsb dx, byte [esi]
je 0x64c75a
outsd dx, dword [esi]
outsd dx, dword [esi]
jo 0x64c752
inc eax
inc eax
inc eax
inc eax
pop edx
add byte [edi + 0xcc483c2], al
xchg edx, eax
add esp, 0xc
push dword [esp + 0xa]
push dword [esp + 2]
jmp 0x64c7d9
jb 0x64c79a
imul esi, dword [bp + di + 0x74], reloc.SHELL32.dll_ShellExecuteW
je 0x64c79f
jb 0x64c79b
popal
je 0x64c79e
pop edi
je 0x64c7a9
jb 0x64c7a8
popal
popal
pop edi
js 0x64c7b2
je 0x64c74b
mov edx, 0x38c9ae38
in al, dx
xchg esp, eax
cmp byte [esi - 0x6b13c737], ch
adc eax, 0xfb1fec85
add al, 0xb7
sahf
jmp 0x5fc40667
je 0x64c7cf
outsd dx, dword [esi]
outsb dx, byte [esi]
push eax
je 0x64c7dd
inc esp
jae 0x64c7e3
jb 0x64c7e0
outsd dx, dword [esi]
jns 0x64c7b3
inc eax
pop ecx
inc ecx
pop eax
push eax
inc ecx
pop eax
inc eax
pop edx
add byte [edi], bh
pop edi
push ebx
jns 0x64c7f5
jb 0x64c7f7
outsd dx, dword [esi]
jb 0x64c7e7
insd dword es:[edi], dx
popal
jo 0x64c7cc
jae 0x64c802
inc eax
inc eax
pop ecx
inc ecx
push eax
inc edx
inc esp
dec eax
inc eax
pop edx
add byte [ebx + 0x643f7dc2], ch
stosd dword es:[edi], eax
ret 0x3f7d
imul esi, dword fs:[ebx + 0x63], reloc.SHELL32.dll_ShellExecuteW
imul esi, dword [ebx + 0x63], reloc.SHELL32.dll_ShellExecuteW
arpl word [ecx + ecx*2 + 0x6d], si
dec ecx
insd dword es:[edi], dx
jo 0x64c818
inc eax
push ecx
dec edi
bound ebp, qword [edx + 0x65]
arpl word [eax + eax*2 + 0x40], si
je 0x64c7f5
inc eax
inc ebx
inc ecx
pop edi
dec esi
push eax
inc edx
push esi
xor dword [eax + 0x50], eax
inc ecx
push eax
inc ecx
pop eax
xor byte [ecx], dh
push eax
inc edx
push ebp
push ecx
dec ebp
je 0x64c82f
je 0x64c82f
dec edi
bound ebp, qword [edx + 0x65]
arpl word [eax + eax*2 + 0x40], si
inc eax
pop edx
add byte [ebx - 0x79f9dba4], cl
je 0x64c804
mov ebx, dword [esp + 6]
xchg byte [esp + 1], dh
xchg byte [esp + 0xb], ah
add dword [esi - reloc.SHELL32.dll_ShellExecuteW], eax
inc esp
and al, 0xb
mov dword [esp + 0x10], eax
and al, 0x10
jmp 0x64c84b
ja 0x64c856
jne 0x64c86e
jne 0x64c86e
pop edi
jb 0x64c873
outsd dx, dword [esi]
jb 0x64c844
jae 0x64c87a
inc eax
inc eax
pop ecx
inc ecx
pop eax
inc ecx
inc edx
push esi
jb 0x64c884
outsd dx, dword [esi]
jb 0x64c874
arpl word [edi + 0x64], bp
inc eax
xor dword [eax + 0x40], eax
pop edx
add dl, dl
push edx
shl byte [edi - 0x35ac4cae], 0x65
xchg esp, eax
pop es
scasb al, byte es:[edi]
aas
pop edi
pop eax
bound esp, qword [ecx + 0x64]
pop edi
popal
pop edi
jne 0x64c8a3
arpl word [ecx + ebp*2 + 0x6f], si
outsb dx, byte [esi]
pop edi
arpl word [ecx + 0x6c], sp
insb byte es:[edi], dx
inc eax
jae 0x64c8b6
inc eax
inc eax
pop ecx
inc ecx
pop eax
pop eax
pop edx
add byte [edi - 0x2f0dbbc], al
xchg dword [esp + 0xf], eax
std
or ebx, 0x1e2d9f35
jmp 0x64c970
je 0x64c8e2
inc ebx
outsd dx, dword [esi]
jo 0x64c8ed
jns 0x64c8b5
inc eax
inc eax
pop ecx
inc ecx
pop eax
push eax
inc ecx
pop eax
push eax
inc edx
pop eax
inc eax
pop edx
add byte [edi], bh
aas
xor byte [edi + 0x4c], bl
outsd dx, dword [esi]
arpl word [ecx + 0x6e], bp
outsw dx, word [esi]
inc eax
jae 0x64c904
inc eax
inc eax
push ecx
inc ecx
inc ebp
inc eax
dec eax
push eax
inc edx
inc esp
inc eax
pop edx
add byte [edi], ch
aas
pop edi
push edx
je 0x64c90e
jb 0x64c917
ja 0x64c909
jne 0x64c921
jne 0x64c921
pop edi
js 0x64c917
jo 0x64c92b
jo 0x64c92b
je 0x64c921
imul ebp, dword [edi + 0x6e], reloc.SHELL32.dll_ShellExecuteW
inc eax
outsd dx, dword [esi]
outsb dx, byte [esi]
inc eax
jae 0x64c931
inc eax
inc eax
pop ecx
inc ecx
pop eax
push esi
js 0x64c92a
jo 0x64c93e
imul ebp, dword [edi + 0x6e], reloc.SHELL32.dll_ShellExecuteW
inc eax
xor dword [eax + 0x40], eax
pop edx
add byte [edi], bh
pop edi
push esp
push 0x5f776f72
inc ebx
pop edi
jb 0x64c956
jb 0x64c956
outsd dx, dword [esi]
jb 0x64c927
jae 0x64c95d
inc eax
inc eax
pop ecx
inc ecx
pop eax
dec eax
inc eax
pop edx
add byte [edi], bh
arpl word [edi + 0x6e], bp
outsb dx, byte [esi]
arpl word gs:[ecx + ecx*2 + 0x6d], si
jo 0x64c96b
inc eax
push ecx
dec edi
bound ebp, qword [edx + 0x65]
arpl word [eax + eax*2 + 0x40], si
arpl word gs:[eax + eax*2 + 0x40], si
inc ebx
inc ecx
aas
inc ecx
push esi
inc ebx
outsd dx, dword [esi]
outsb dx, byte [esi]
outsb dx, byte [esi]
arpl word gs:[ecx + ebp*2 + 0x6f], si
outsb dx, byte [esi]
inc eax
push ecx
dec ebp
je 0x64c97f
dec edi
bound ebp, qword [edx + 0x65]
arpl word [eax + eax*2 + 0x40], si
arpl word gs:[eax + eax*2 + 0x40], si
push eax
inc edx
push esi
xor dword [eax + 0x50], eax
inc eax
push eax
inc ecx
push eax
inc ecx
pop eax
xor byte [ecx], dh
push eax
inc ecx
xor dword [eax + 0x41], edx
push esi
push ecx
push ebx
insb byte es:[edi], dx
outsd dx, dword [esi]
je 0x64c98a
bound ebp, qword [edx + 0x65]
arpl word [edx + eax*2 + 0x61], si
jae 0x64c9a9
inc eax
push ecx
je 0x64c998
jb 0x64c9b3
jbe 0x64c9ad
je 0x64c9b3
inc eax
inc eax
push edi
xor al, 0x43
outsd dx, dword [esi]
outsb dx, byte [esi]
outsb dx, byte [esi]
arpl word gs:[ecx + ebp*2 + 0x6f], si
outsb dx, byte [esi]
push esp
jns 0x64c9cf
inc eax
push ecx
je 0x64c9a4
inc eax
push eax
inc edx
dec eax
push eax
inc edx
push ebp
xor eax, dword [eax + 0x40]
pop edx
add byte [ebp - 0x5a4b447d], cl
and byte [esi - 0x77], ah
pop esp
and al, 7
lea eax, reloc.SHELL32.dll_ShellExecuteW
mov word [esp + 7], bx
mov byte [esp + 0x15], ah
jmp 0x64ca89
jae 0x64c9f1
je 0x64c9ce
pop edi
inc ebx
outsd dx, dword [esi]
outsb dx, byte [esi]
je 0x64c9f9
js 0x64ca0a
inc ebx
popal
insb byte es:[edi], dx
insb byte es:[edi], dx
bound esp, qword [ecx + 0x63]
imul eax, dword [eax + 0x64], 0x65
je 0x64ca04
imul ebp, dword [ebx + esi*2 + 0x40], reloc.SHELL32.dll_ShellExecuteW
jne 0x64ca1f
insb byte es:[edi], dx
jae 0x64c9e7
inc ebx
outsd dx, dword [esi]
outsb dx, byte [esi]
arpl word [ebp + 0x72], si
jb 0x64ca14
outsb dx, byte [esi]
arpl word [ecx + 0x40], di
inc eax
inc ecx
inc ecx
inc ebp
pop eax
pop eax
pop edx
add byte [ebx + 0x572435da], ah
mov esi, 0x74303f3f
popal
jae 0x64ca33
pop edi
arpl word [edi + 0x6e], bp
je 0x64ca37
outsb dx, byte [esi]
jne 0x64ca32
je 0x64ca3c
outsd dx, dword [esi]
outsb dx, byte [esi]
pop edi
arpl word [edi + 0x6e], bp
je 0x64ca40
js 0x64ca51
inc eax
inc ebx
outsd dx, dword [esi]
outsb dx, byte [esi]
arpl word [ebp + 0x72], si
jb 0x64ca4b
outsb dx, byte [esi]
arpl word [ecx + 0x40], di
inc eax
inc ecx
inc ecx
inc ebp
inc eax
pop eax
pop edx
add byte [edi], bh
pop edi
pop edi
inc ebp
js 0x64ca5b
jo 0x64ca6f
jo 0x64ca6f
imul ebp, dword [edi + 0x6e], reloc.SHELL32.dll_ShellExecuteW
jae 0x64ca77
imul esp, dword [edi + 0x6e], reloc.SHELL32.dll_ShellExecuteW
inc ecx
pop eax
push eax
inc ecx
pop eax
push eax
inc edx
pop eax
inc eax
pop edx
add byte [ecx + 0x1de24b28], cl
pop edi
inc ebx
outsb dx, byte [esi]
pop edi
jne 0x64ca8f
jb 0x64ca88
imul esi, dword [bp + di + 0x74], reloc.SHELL32.dll_ShellExecuteW
je 0x64ca8c
je 0x64ca97
jb 0x64ca96
popal
pop edi
pop edi
js 0x64caa0
je 0x64ca39
push edi
imul ebp, dword [esi + 0x48], 0x41707474
dec eax
je 0x64cab3
jo 0x64ca82
inc ecx
push edx
jno 0x64cabc
jae 0x64cabe
dec eax
popal
jb 0x64cac4
add byte [edi], bh
pop edi
inc ebx
popal
jo 0x64cacc
jne 0x64cacc
inc eax
inc eax
pop edi
inc ebx
outsd dx, dword [esi]
outsb dx, byte [esi]
je 0x64cac7
js 0x64cad8
inc ebx
popal
insb byte es:[edi], dx
insb byte es:[edi], dx
bound esp, qword [ecx + 0x63]
imul eax, dword [eax + 0x64], 0x65
je 0x64cad2
je 0x64cad2
imul ebp, dword [ebx + esi*2 + 0x40], reloc.SHELL32.dll_ShellExecuteW
jne 0x64caed
outsb dx, byte [esi]
arpl word [ebp + 0x72], si
jb 0x64cae2
outsb dx, byte [esi]
arpl word [ecx + 0x40], di
inc eax
inc ecx
inc ecx
inc ebp
pop eax
pop eax
pop edx
add byte [esi - 0x45], ah
xchg dword [esi - 0x71], edi
mov bx, 0x7e87
pop dword [esp + 0xe]
jle 0x64ca1d
inc esp
and al, 0xe
xchg word [esp], bx
cld
jmp 0x64cbc4
sub dword [ecx], eax
add byte [eax], al
insb byte es:[edi], dx
jg 0x64cae4
int1
aas
push edx
jo 0x64cb13
jb 0x64cb1a
push ebp
outsb dx, byte [esi]
push 0x6c646e61
inc ebp
jb 0x64cb24
outsd dx, dword [esi]
jb 0x64caf5
pop edi
inc ebp
js 0x64cb1c
jo 0x64cb30
imul ebp, dword [edi + 0x6e], reloc.SHELL32.dll_ShellExecuteW
jb 0x64cb06
outsb dx, byte [esi]
dec eax
outsd dx, dword [esi]
insb byte es:[edi], dx
jb 0x64cb06
jb 0x64cb06
inc eax
je 0x64cb2b
je 0x64cb2b
imul ebp, dword [ebx + esi*2 + 0x40], reloc.SHELL32.dll_ShellExecuteW
jae 0x64cb0e
inc ebx
outsd dx, dword [esi]
outsb dx, byte [esi]
arpl word [ebp + 0x72], si
jne 0x64cb46
jb 0x64cb3b
outsb dx, byte [esi]
arpl word [ecx + 0x40], di
jns 0x64cb1a
inc eax
inc ecx
inc ecx
inc ebp
pop eax
pop eax
pop edx
add bl, dh
jb 0x64cac5
jb 0x64cac5
loopne 0x64ca6d
xchg dword [edx - 0x70], esi
jb 0x64ca78
ljmp 0x6143:0x5f3fb405
pop edi
inc ebx
popal
insb byte es:[edi], dx
insb byte es:[edi], dx
dec ecx
outsb dx, byte [esi]
inc ebx
outsd dx, dword [esi]
outsb dx, byte [esi]
je 0x64cb5e
js 0x64cb6f
inc eax
pop edi
inc ebx
outsd dx, dword [esi]
outsb dx, byte [esi]
je 0x64cb67
js 0x64cb78
inc ebx
popal
insb byte es:[edi], dx
insb byte es:[edi], dx
bound esp, qword [ecx + 0x63]
imul eax, dword [eax + 0x64], 0x65
je 0x64cb72
je 0x64cb72
imul ebp, dword [ebx + esi*2 + 0x40], reloc.SHELL32.dll_ShellExecuteW
jne 0x64cb8d
jae 0x64cb55
inc ebx
outsd dx, dword [esi]
outsb dx, byte [esi]
arpl word [ebp + 0x72], si
jb 0x64cb8e
jb 0x64cb82
outsb dx, byte gs:[esi]
outsb dx, byte [esi]
arpl word [ecx + 0x40], di
inc eax
push ecx
inc edx
inc ebp
pop eax
push esi
aas
and al, 0x66
jne 0x64cb9a
outsb dx, byte [esi]
arpl word [ecx + ebp*2 + 0x6f], si
outsb dx, byte [esi]
inc eax
and al, 0x24
inc ecx
inc ecx
pop eax
pop eax
pop edx
inc eax
jae 0x64cbb1
inc eax
inc eax
pop edi
dec esi
inc eax
pop edx
add byte [edi], bh
pop edi
push edx
jo 0x64cbba
jb 0x64cbc1
push ebp
outsb dx, byte [esi]
outsd dx, dword [esi]
bound esi, qword [ebx + 0x65]
jb 0x64cbcb
inc ebp
js 0x64cbbd
jo 0x64cbd1
imul ebp, dword [edi + 0x6e], reloc.SHELL32.dll_ShellExecuteW
popal
outsd dx, dword [esi]
outsb dx, byte [esi]
inc eax
je 0x64cbc6
imul ebp, dword [ebx + esi*2 + 0x40], reloc.SHELL32.dll_ShellExecuteW
jne 0x64cbe1
jae 0x64cba9
inc ebx
outsd dx, dword [esi]
outsb dx, byte [esi]
arpl word [ebp + 0x72], si
jb 0x64cbd6
outsb dx, byte [esi]
arpl word [ecx + 0x40], di
inc eax
pop ecx
inc ecx
pop eax
pop eax
pop edx
add byte [edi - 0x6447a632], ah
aas
pop edi
push edx
insb byte es:[edi], dx
popal
jae 0x64cbef
pop edi
arpl word [eax + 0x6f], bp
outsd dx, dword [esi]
jb 0x64cbf5
inc eax
je 0x64cbf6
imul ebp, dword [ebx + esi*2 + 0x40], reloc.SHELL32.dll_ShellExecuteW
jne 0x64cc11
outsd dx, dword [esi]
outsb dx, byte [esi]
arpl word [ebp + 0x72], si
jb 0x64cc06
outsb dx, byte [esi]
arpl word [ecx + 0x40], di
inc eax
pop ecx
inc ecx
pop eax
push eax
inc ecx
push ebp
pop edi
push esp
push 0x64616572
jo 0x64cc24
popal
jo 0x64cc24
outsd dx, dword [esi]
insb byte es:[edi], dx
pop edi
arpl word [eax + 0x6f], bp
outsd dx, dword [esi]
jb 0x64cc22
inc eax
xor dword [edx], esi
inc eax
inc eax
pop edx
add byte [ecx - 0x70f5dbb4], cl
inc esp
and al, 5
mov dword [esp + 0xa], ecx
and al, 0xa
pop dword [esp + 5]
add eax, 0x58c2990f
setns dl
pop eax
mov dx, bp
mov edx, ebp
jmp 0x64ccc9
add byte [eax], al
in eax, dx
aas
pop edi
dec esp
outsd dx, dword [esi]
inc ebx
popal
outsb dx, byte [esi]
arpl word [ebp + 0x6c], sp
push esp
popal
jae 0x64cc54
inc eax
pop edi
push esp
popal
jae 0x64cc5a
inc ebp
jbe 0x64cc57
outsb dx, byte [esi]
je 0x64cc41
outsd dx, dword [esi]
jb 0x64cc3b
je 0x64cc60
imul ebp, dword [ebx + esi*2 + 0x40], reloc.SHELL32.dll_ShellExecuteW
jne 0x64cc7b
arpl word [ebp + 0x72], si
jb 0x64cc70
outsb dx, byte [esi]
arpl word [ecx + 0x40], di
inc eax
push ecx
inc ecx
inc ebp
pop eax
pop eax
pop edx
add al, bh
jle 0x64cc06
mov eax, dword [esi - reloc.SHELL32.dll_ShellExecuteW]
cmpsb byte [esi], byte es:[edi]
push ebp
mov bl, 0x56
rol dword [eax + reloc.SHELL32.dll_ShellExecuteW], 0x5f
dec esp
outsd dx, dword [esi]
push ebx
arpl word [eax + 0x65], bp
jne 0x64cca1
push esp
popal
jae 0x64cca5
inc eax
pop edi
push esp
popal
jae 0x64ccab
inc ebp
jbe 0x64cca8
outsb dx, byte [esi]
je 0x64cc92
outsd dx, dword [esi]
jb 0x64cc8c
je 0x64ccb1
imul ebp, dword [ebx + esi*2 + 0x40], reloc.SHELL32.dll_ShellExecuteW
jne 0x64cccc
inc ebx
outsd dx, dword [esi]
outsb dx, byte [esi]
arpl word [ebp + 0x72], si
jb 0x64ccc1
outsb dx, byte [esi]
arpl word [ecx + 0x40], di
inc eax
push ecx
inc ecx
inc ebp
pop eax
pop edi
dec esi
inc eax
pop edx
add byte [edi], bh
inc edi
je 0x64ccb2
jne 0x64cce3
jb 0x64cce4
jb 0x64ccd8
outsb dx, byte gs:[esi]
outsb dx, byte [esi]
je 0x64ccca
push 0x64616572
dec ecx
inc eax
jo 0x64ccec
popal
je 0x64cce9
outsd dx, dword [esi]
jb 0x64ccf3
inc eax
je 0x64ccec
imul ebp, dword [ebx + esi*2 + 0x40], reloc.SHELL32.dll_ShellExecuteW
jne 0x64cd07
insb byte es:[edi], dx
jae 0x64cccf
inc ebx
outsd dx, dword [esi]
outsb dx, byte [esi]
arpl word [ebp + 0x72], si
jb 0x64ccfc
outsb dx, byte [esi]
arpl word [ecx + 0x40], di
inc eax
pop ecx
inc ecx
dec edx
pop eax
pop edx
add byte [edx - 0x3a], al
push esp
xor ecx, esi
and bh, dh
aas
idiv dword [edi]
pop edi
pop edi
inc ebp
js 0x64cd12
jo 0x64cd26
je 0x64cd1c
imul ebp, dword [edi + 0x6e], reloc.SHELL32.dll_ShellExecuteW
outsd dx, dword [esi]
outsb dx, byte [esi]
push eax
je 0x64cd2a
inc ebx
jb 0x64cd20
popal
je 0x64cd23
inc eax
inc eax
pop ecx
inc ecx
pop eax
push eax
inc ecx
pop eax
inc eax
pop edx
add byte [edi], cl
bswap eax
lea esp, [esp + 0xa]
enter 0x648d, 0x24
or cl, byte [eax - 0x4599dbe4]
push es
inc edi
and al, 0xa
mov byte [esp], bl
mov dx, 0x4706
xchg dh, al
jmp 0x64d10e
je 0x64cd53
outsb dx, byte [esi]
popal
insd dword es:[edi], dx
inc eax
pop edi
dec esp
outsd dx, dword [esi]
arpl word [ecx + 0x6e], bp
outsw dx, word [esi]
inc eax
jae 0x64cd68
je 0x64cd59
inc eax
inc eax
inc eax
push ecx
inc edx
inc ebp
push eax
inc edx
inc esp
pop eax
pop edx
add byte [eax + 0x3f], cl
pop edi
dec esp
outsd dx, dword [esi]
push esp
popal
jae 0x64cd75
inc ebx
outsd dx, dword [esi]
insd dword es:[edi], dx
jo 0x64cd7b
je 0x64cd77
inc eax
pop edi
push esp
popal
jae 0x64cd84
inc ebp
jbe 0x64cd81
outsb dx, byte [esi]
je 0x64cd6b
outsd dx, dword [esi]
jb 0x64cd65
jb 0x64cd65
je 0x64cd8a
je 0x64cd8a
imul ebp, dword [ebx + esi*2 + 0x40], reloc.SHELL32.dll_ShellExecuteW
jne 0x64cda5
insb byte es:[edi], dx
jae 0x64cd6d
inc ebx
outsd dx, dword [esi]
outsb dx, byte [esi]
arpl word [ebp + 0x72], si
jb 0x64cd9a
outsb dx, byte [esi]
arpl word [ecx + 0x40], di
inc eax
push ecx
inc ecx
inc ebp
pop eax
pop eax
pop edx
add byte [edi], bh
pop edi
dec esp
outsd dx, dword [esi]
push edi
outsd dx, dword [esi]
jb 0x64cdb5
dec ecx
je 0x64cdb2
insd dword es:[edi], dx
push ebx
je 0x64cdb2
jb 0x64cdc7
inc eax
pop edi
push esp
popal
jae 0x64cdc6
inc ebp
jbe 0x64cdc3
outsb dx, byte [esi]
je 0x64cdad
outsd dx, dword [esi]
jb 0x64cda7
jb 0x64cda7
je 0x64cdcc
je 0x64cdcc
imul ebp, dword [ebx + esi*2 + 0x40], reloc.SHELL32.dll_ShellExecuteW
jne 0x64cde7
jae 0x64cdaf
inc ebx
outsd dx, dword [esi]
outsb dx, byte [esi]
arpl word [ebp + 0x72], si
jb 0x64cddc
outsb dx, byte [esi]
arpl word [ecx + 0x40], di
inc eax
push ecx
inc ecx
inc ebp
pop eax
pop eax
pop edx
add bl, ch
add bh, byte [ebp + 0x4c5f3f8c]
outsd dx, dword [esi]
push esp
popal
jae 0x64cdfb
inc ebp
js 0x64cdf8
arpl word [ebp + 0x74], si
imul ebp, dword [edi + 0x6e], 0x706d6f43
insb byte es:[edi], dx
outsd dx, dword [esi]
insd dword es:[edi], dx
jo 0x64ce0a
je 0x64ce06
inc eax
pop edi
push esp
popal
jae 0x64ce13
imul eax, dword [ebp + 0x76], 0x65
inc ebp
jbe 0x64ce10
outsb dx, byte [esi]
je 0x64cdfa
dec esp
outsd dx, dword [esi]
jb 0x64cdf4
jb 0x64cdf4
je 0x64ce19
je 0x64ce19
imul ebp, dword [ebx + esi*2 + 0x40], reloc.SHELL32.dll_ShellExecuteW
jne 0x64ce34
jb 0x64ce29
outsb dx, byte gs:[esi]
outsb dx, byte [esi]
arpl word [ecx + 0x40], di
jns 0x64ce08
inc eax
inc eax
push ecx
inc ecx
inc ebp
pop eax
pop eax
pop edx
add byte [edi], bh
pop edi
dec esp
outsd dx, dword [esi]
push edi
outsd dx, dword [esi]
jb 0x64ce44
dec ecx
je 0x64ce41
insd dword es:[edi], dx
inc ebx
outsd dx, dword [esi]
insd dword es:[edi], dx
jo 0x64ce4e
je 0x64ce4a
inc eax
pop edi
push esp
popal
jae 0x64ce57
inc ebp
jbe 0x64ce54
outsb dx, byte [esi]
je 0x64ce3e
outsd dx, dword [esi]
jb 0x64ce38
jb 0x64ce38
je 0x64ce5d
je 0x64ce5d
popal
imul ebp, dword [ebx + esi*2 + 0x40], reloc.SHELL32.dll_ShellExecuteW
jne 0x64ce78
jb 0x64ce6d
outsb dx, byte [esi]
arpl word [ecx + 0x40], di
jns 0x64ce4c
inc eax
push ecx
inc ecx
inc ebp
pop eax
pop eax
pop edx
add byte [eax], bl
mov dword [reloc.SHELL32.dll_ShellExecuteW], eax
dec edx
outsb dx, byte [esi]
in al, 0x7a
sbb eax, 0x10910eec
aas
je 0x64ce88
arpl word [eax + 0x40], bp
inc eax
push ecx
dec esp
imul esi, dword [ebx + 0x74], 0x61746144
inc eax
inc eax
push ecx
inc ecx
inc ebp
push eax
inc ecx
push ebp
inc esp
popal
je 0x64cea0
popal
inc eax
xor dword [eax + 0x48], eax
inc eax
dec eax
inc eax
pop edx
add byte [edi], bh
pop edi
inc edi
je 0x64ceaf
je 0x64ceaf
jbe 0x64cec2
inc eax
pop edi
dec esp
outsd dx, dword [esi]
arpl word [ecx + 0x6e], bp
outsb dx, byte [esi]
outsw dx, word [esi]
inc eax
jae 0x64cece
inc eax
inc eax
push ecx
inc edx
inc ebp
aas
inc ecx
push ebp
pop edi
inc ebx
jbe 0x64cedb
jbe 0x64cece
arpl word [eax + 0x40], ax
pop eax
pop edx
add byte [ebx + 0x47d4a50a], dl
out dx, al
aas
pop edi
push ebx
arpl word [eax + 0x65], bp
jne 0x64ceea
pop edi
arpl word [eax + 0x6f], bp
jb 0x64ceea
inc eax
je 0x64ceeb
je 0x64ceeb
imul ebp, dword [ebx + esi*2 + 0x40], reloc.SHELL32.dll_ShellExecuteW
jne 0x64cf06
jb 0x64cefb
outsb dx, byte [esi]
arpl word [ecx + 0x40], di
inc eax
pop ecx
inc ecx
dec eax
push eax
inc ecx
push ebp
pop edi
push esp
push 0x64616572
jo 0x64cf19
outsd dx, dword [esi]
insb byte es:[edi], dx
pop edi
arpl word [eax + 0x6f], bp
outsd dx, dword [esi]
jb 0x64cf17
inc eax
xor dword [edx], esi
inc eax
inc eax
pop edx
add byte [edi], bh
pop edi
push esp
push 0x5f776f72
inc ebx
jo 0x64cf34
pop edi
jb 0x64cf3a
outsd dx, dword [esi]
jb 0x64cf0b
jae 0x64cf41
inc eax
inc eax
inc eax
pop ecx
inc ecx
pop eax
dec eax
inc eax
pop edx
add byte [edi], bh
pop edi
inc edi
je 0x64cf41
je 0x64cf41
popal
jns 0x64cf53
inc eax
pop edi
dec esp
outsd dx, dword [esi]
arpl word [ecx + 0x6e], bp
outsw dx, word [esi]
inc eax
jae 0x64cf60
je 0x64cf51
inc eax
inc eax
inc eax
push ecx
inc edx
inc ebp
push eax
inc edx
inc esp
pop eax
pop edx
add byte [edi], bh
outsd dx, dword [si]
outsd dx, dword [esi]
inc eax
imul ebp, dword [edi + 0x73], 0x7361625f
inc eax
inc eax
jae 0x64cf7d
inc eax
inc eax
push ecx
inc edx
inc ebp
pop edi
dec esi
pop eax
pop edx
add cl, bh
aas
outsb dx, byte gs:[esi]
outsb dx, byte [esi]
inc eax
inc eax
push ecx
dec esp
imul esi, dword [ebx + 0x74], 0x61746144
inc eax
inc eax
push ecx
inc edx
inc ebp
push eax
inc ecx
push eax
inc ecx
pop eax
pop eax
pop edx
add byte [edi], bh
pop edi
dec ecx
outsb dx, byte [esi]
imul esi, dword [eax + eax*2 + 0x6c], reloc.SHELL32.dll_ShellExecuteW
popal
insb byte es:[edi], dx
inc eax
jae 0x64cfb4
inc eax
inc eax
inc eax
inc ebx
inc ecx
push eax
inc ecx
push esi
pop edi
dec esp
outsd dx, dword [esi]
arpl word [ecx + 0x6d], bp
jo 0x64cf90
xor dword [edx], esi
inc eax
xor al, byte [eax + 0x5f]
pop edi
dec esi
inc eax
pop edx
add byte [edi], bh
ja 0x64cfbe
outsd dx, dword [esi]
jne 0x64cfd2
inc eax
jae 0x64cfd5
je 0x64cfc6
inc eax
inc eax
inc eax
xor edx, dword [esi + 0x3f]
and al, 0x62
popal
jae 0x64cfd5
arpl word [edi + 0x6f], bx
jae 0x64cfe5
jb 0x64cfd8
popal
insd dword es:[edi], dx
inc eax
pop edi
push edi
push ebp
aas
and al, 0x63
push 0x745f7261
jb 0x64cfe4
popal
jb 0x64cfdf
je 0x64cff4
popal
imul esi, dword [ebx + esi*2 + 0x40], reloc.SHELL32.dll_ShellExecuteW
je 0x64cff1
inc eax
inc eax
inc eax
xor dword [eax + 0x41], eax
add byte [edi], bh
pop edi
dec esi
ja 0x64cff9
dec esp
outsd dx, dword [esi]
arpl word [ecx + 0x6d], bp
jo 0x64cfe1
pop edi
dec esp
outsd dx, dword [esi]
arpl word [ecx + 0x6d], bp
jo 0x64cfe9
insb byte es:[edi], dx
outsd dx, dword [esi]
arpl word [ecx + 0x6c], sp
inc eax
jae 0x64d026
inc eax
inc eax
inc ebx
inc ecx
push eax
inc ecx
push esi
xor dword [edx], esi
xor eax, dword [eax + 0x5f]
pop edi
dec esi
inc eax
pop edx
add al, bl
cmp edx, dword [edx]
lea ebx, [edi + edi]
aas
xor al, 0x3f
and al, 0x5f
pop ecx
popal
jb 0x64d040
inc eax
inc esp
inc eax
jae 0x64d04b
inc eax
inc eax
inc eax
push ecx
inc ecx
inc ebp
inc ecx
inc ecx
push esi
xor byte [ecx], dh
inc eax
push eax
xor dword [eax + 0x50], eax
inc edx
inc esp
inc eax
pop edx
add byte [edi], bh
aas
pop edi
pop eax
jb 0x64d063
outsb dx, byte [esi]
je 0x64d05a
insd dword es:[edi], dx
pop edi
jb 0x64d069
outsd dx, dword [esi]
jb 0x64d03a
inc eax
jae 0x64d070
inc eax
inc eax
pop ecx
inc ecx
pop eax
push eax
inc edx
inc esp
inc eax
pop edx
add byte [edi], bh
pop edi
dec ebp
popal
imul esp, dword [ebp + 0x6c], 0x6f
arpl word [eax + 0x5f], ax
dec esp
outsd dx, dword [esi]
arpl word [ecx + 0x6d], bp
jo 0x64d05a
insb byte es:[edi], dx
outsd dx, dword [esi]
arpl word [ecx + 0x6c], sp
inc eax
jae 0x64d097
inc eax
inc eax
inc ebx
inc ecx
push eax
inc ecx
push esi
xor dword [edx], esi
xor eax, dword [eax + 0x41]
inc edx
push esi
pop edi
dec esp
outsd dx, dword [esi]
arpl word [ecx + 0x6e], bp
outsw dx, word [esi]
inc eax
xor eax, dword [eax + 0x48]
push eax
inc ecx
push esi
xor dword [edx], esi
xor eax, dword [eax + 0x50]
inc edx
push esi
xor dh, byte [ebx]
inc eax
inc eax
pop edx
add byte [edi], bh
jb 0x64d0b5
jae 0x64d0c7
popal
je 0x64d0bb
inc eax
imul ebp, dword [edi + 0x73], 0x7361625f
pop edi
bound esp, qword [ecx + 0x73]
inc eax
jae 0x64d0d6
inc eax
inc eax
inc eax
push ecx
inc edx
inc ebp
dec eax
pop eax
pop edx
add byte [edi + 0x76], ch
popal
mov al, byte [0x585f3fe3]
jecxz 0x64d0b1
pop edi
pop eax
outsd dx, dword [esi]
jne 0x64d0eb
pop edi
outsd dx, dword [esi]
pop di
jb 0x64d0de
outsb dx, byte [esi]
inc eax
jae 0x64d0f7
inc eax
inc eax
pop ecx
inc ecx
pop eax
push eax
inc edx
inc esp
inc eax
pop edx
add byte [edi + 0x65], al
je 0x64d0d9
imul ebp, dword [ebp + 0x56], reloc.SHELL32.dll_ShellExecuteW
outsd dx, dword [esi]
outsb dx, byte [esi]
dec ecx
outsb dx, byte [esi]
outsw dx, word [esi]
jb 0x64d10d
imul ebp, dword [edi + 0x6e], reloc.SHELL32.dll_ShellExecuteW
push ebx
imul edi, dword [edx + 0x65], 0x3f1a0057
pop edi
pop eax
imul ebp, dword [esi + 0x76], 0x64696c61
pop edi
pop edi
popal
jb 0x64d11d
jne 0x64d125
jne 0x64d125
outsb dx, byte gs:[esi]
je 0x64d0fc
inc eax
jae 0x64d132
inc eax
inc eax
pop ecx
inc ecx
pop eax
push eax
inc edx
inc esp
inc eax
pop edx
add byte [edi], bh
insb byte es:[edi], dx
popal
jae 0x64d111
imul ebp, dword [edi + 0x73], reloc.SHELL32.dll_ShellExecuteW
inc eax
popal
jae 0x64d13e
inc eax
jae 0x64d150
inc eax
inc eax
push ecx
inc edx
inc ebp
dec eax
pop eax
pop edx
add byte [ebp + esi*8 + 0x65], bh
or al, 0xff
pop edx
pop edi
inc ebx
outsb dx, byte [esi]
pop edi
outsd dx, dword fs:[esi]
pop edi
bound esi, qword [edx + 0x6f]
outsd dx, dword [esi]
popal
arpl word fs:[ecx + 0x73], sp
je 0x64d15e
jae 0x64d172
pop edi
popal
je 0x64d161
je 0x64d16c
jb 0x64d16b
popal
pop edi
js 0x64d175
je 0x64d10e
add byte [esi - 0x899dbe4], al
fimul dword [ebp + reloc.SHELL32.dll_ShellExecuteW]
add byte [eax], al
xchg byte [esp], bl
neg dx
lea edx, [ebp*4]
push ebp
jmp 0x64d3d8
mov bh, 2
add byte [eax], al
xchg edi, eax
dec cl
aas
ja 0x64d190
je 0x64d192
inc eax
imul ebp, dword [edi + 0x73], 0x7361625f
inc eax
jae 0x64d1aa
inc eax
inc eax
push ecx
inc edx
inc ebp
pop edi
dec edx
pop eax
pop edx
add byte [ecx + 0x6d], cl
popal
inc esp
imul esi, dword [edx + 0x65], 0x726f7463
jns 0x64d195
outsb dx, byte [esi]
je 0x64d1c5
jns 0x64d1a9
outsd dx, dword [esi]
inc esp
popal
je 0x64d1bb
add byte [edi], bh
ja 0x64d1c7
je 0x64d1c9
inc eax
imul ebp, dword [edi + 0x73], 0x7361625f
inc eax
jae 0x64d1e1
je 0x64d1d2
inc eax
inc eax
inc eax
push ecx
inc ecx
inc ebp
pop edi
dec edx
pop edi
dec edx
inc eax
pop edx
add byte [edi], bh
jne 0x64d1eb
arpl word [ecx + 0x75], sp
push 0x78655f74
arpl word [ebp + 0x70], sp
je 0x64d1f4
outsd dx, dword [esi]
outsb dx, byte [esi]
inc eax
jae 0x64d204
inc eax
inc eax
pop ecx
inc ecx
pop edi
dec esi
pop eax
pop edx
add byte [eax + 0x3f], ch
imul ebp, dword [ebp + 0x62], 0x3f406575
and al, 0x62
popal
jae 0x64d211
arpl word [edi + 0x69], bx
outsd dx, dword [esi]
jae 0x64d1ee
pop edi
imul ebp, dword [edi + 0x73], reloc.SHELL32.dll_ShellExecuteW
pop edi
push edi
push ebp
aas
and al, 0x63
push 0x745f7261
jb 0x64d21c
imul esi, dword [ebx + esi*2 + 0x40], reloc.SHELL32.dll_ShellExecuteW
je 0x64d229
inc eax
inc eax
inc eax
jae 0x64d23e
je 0x64d22f
inc eax
inc eax
inc eax
push ecx
inc ecx
inc ebp
aas
inc ecx
push esi
insb byte es:[edi], dx
outsd dx, dword [esi]
arpl word [ecx + 0x6c], sp
inc eax
xor al, byte [eax + 0x41]
inc edx
push esi
xor esi, dword [edx]
inc eax
inc eax
pop edx
add byte [edi], bh
pop edi
pop eax
insb byte es:[edi], dx
outsb dx, byte gs:[esi]
je 0x64d256
pop edi
jb 0x64d264
outsd dx, dword [esi]
jb 0x64d235
inc eax
jae 0x64d26b
inc eax
inc eax
pop ecx
inc ecx
pop eax
push eax
inc edx
inc esp
inc eax
pop edx
add byte [ebx - 0x4053a2de], cl
aas
aas
aas
and bl, byte [ebp - 0x54]
mov edi, 0x3f363f3f
and al, 0x62
popal
jae 0x64d27a
arpl word [edi + 0x6f], bx
jae 0x64d28a
jb 0x64d27d
popal
insd dword es:[edi], dx
inc eax
inc esp
push ebp
aas
and al, 0x63
push 0x745f7261
jb 0x64d288
imul esi, dword [ebx + esi*2 + 0x40], reloc.SHELL32.dll_ShellExecuteW
jae 0x64d26b
inc esp
inc eax
jae 0x64d2a3
inc eax
inc eax
inc eax
jae 0x64d2a9
inc eax
inc eax
push ecx
inc ecx
inc ebp
inc ecx
inc ecx
push esi
xor byte [ecx], dh
inc eax
dec ecx
inc eax
pop edx
add byte [edi], bh
aas
xor dword [edi], edi
and al, 0x62
popal
jae 0x64d2b7
arpl word [edi + 0x69], bx
outsd dx, dword [esi]
jae 0x64d294
inc esp
push ebp
aas
and al, 0x63
push 0x745f7261
jb 0x64d2c1
imul esi, dword [ebx + esi*2 + 0x40], reloc.SHELL32.dll_ShellExecuteW
inc esp
inc eax
jae 0x64d2dc
inc eax
inc eax
inc eax
jae 0x64d2e2
inc eax
inc eax
push ebp
inc ecx
inc ebp
inc eax
pop eax
pop edx
add byte [esp + eax - 0x27f30266], cl
xor dword [eax], esi
xor ebp, dword [edx]
aas
lcall 0x3330, 0x31d80cfd
fdiv dword [ecx]
xor byte [ebx], dh
sub bh, byte [edi]
aas
xor dword [edi], edi
and al, 0x62
popal
jae 0x64d2f4
imul esp, dword [ebx + 0x5f], reloc.SHELL32.dll_ShellExecuteW
arpl word [edi + 0x69], bx
outsd dx, dword [esi]
jae 0x64d305
jb 0x64d2f8
popal
insd dword es:[edi], dx
inc eax
inc esp
push ebp
aas
and al, 0x63
push 0x745f7261
jb 0x64d303
imul esi, dword [ebx + esi*2 + 0x40], reloc.SHELL32.dll_ShellExecuteW
je 0x64d318
inc eax
inc esp
inc eax
jae 0x64d31e
je 0x64d30f
inc eax
inc eax
inc eax
inc eax
jae 0x64d324
inc eax
inc eax
push ebp
inc ecx
inc ebp
inc eax
pop eax
pop edx
add byte [edi], bh
jae 0x64d336
outsb dx, byte [esi]
arpl word [eax + 0x3f], ax
and al, 0x62
popal
jae 0x64d32f
arpl word [edi + 0x73], bx
je 0x64d33d
popal
insd dword es:[edi], dx
bound esi, qword [ebp + 0x66]
inc eax
inc esp
push ebp
aas
and al, 0x63
push 0x745f7261
jb 0x64d33f
imul esi, dword [ebx + esi*2 + 0x40], reloc.SHELL32.dll_ShellExecuteW
inc eax
inc eax
inc eax
jae 0x64d360
inc esp
inc eax
jae 0x64d35a
pop edx
add byte [esi - 0x3b], cl
push ebp
cmp al, 0xcf
and dh, ah
aas
pop edi
push edi
pop edi
inc edi
je 0x64d372
je 0x64d372
outsd dx, dword [esi]
outsb dx, byte [esi]
je 0x64d371
jae 0x64d34b
pop edi
dec esp
outsd dx, dword [esi]
arpl word [ecx + 0x6e], bp
outsw dx, word [esi]
inc eax
jae 0x64d38a
imul ebp, dword [esi + 0x66], reloc.SHELL32.dll_ShellExecuteW
inc eax
inc eax
push ecx
inc edx
inc ebp
push eax
inc edx
inc edi
pop eax
pop edx
add byte [edi], bh
pop edi
pop edi
inc ebp
js 0x64d38b
jo 0x64d39f
imul ebp, dword [edi + 0x6e], reloc.SHELL32.dll_ShellExecuteW
je 0x64d3a3
inc ebx
jne 0x64d3a6
jb 0x64d39b
outsb dx, byte [esi]
je 0x64d37e
js 0x64d39e
jo 0x64d3b2
je 0x64d3a8
imul ebp, dword [edi + 0x6e], reloc.SHELL32.dll_ShellExecuteW
outsd dx, dword [esi]
outsb dx, byte [esi]
inc eax
inc eax
pop ecx
inc ecx
pop eax
push eax
inc ecx
pop eax
inc eax
pop edx
add bh, ah
push cs
cdq
clc
fstp xword [edi]
pop edi
push edi
pop edi
inc edi
je 0x64d3bd
popal
jns 0x64d3cf
inc eax
pop edi
dec esp
outsd dx, dword [esi]
arpl word [ecx + 0x6e], bp
outsw dx, word [esi]
inc eax
jae 0x64d3dc
inc eax
inc eax
push ecx
inc edx
inc ebp
push eax
inc edx
inc edi
pop eax
pop edx
add byte [edi + 0x69], dl
outsb dx, byte [esi]
dec eax
je 0x64d3ee
jo 0x64d3cd
jne 0x64d3e3
jb 0x64d3f9
inc esp
popal
je 0x64d3e5
inc ecx
jbe 0x64d3e8
bound ebp, qword [ebp]
xor bh, byte [edi]
insb byte es:[edi], dx
add byte gs:[edx], dh
aas
imul ebp, dword [ebp + 0x62], reloc.SHELL32.dll_ShellExecuteW
and al, 0x62
popal
jae 0x64d405
arpl word [edi + 0x73], bx
jae 0x64d414
je 0x64d413
jb 0x64d407
popal
insd dword es:[edi], dx
bound esi, qword [ebp + 0x66]
inc eax
inc ax
inc esp
push ebp
aas
and al, 0x63
push 0x745f7261
jb 0x64d415
inc eax
inc eax
inc eax
jae 0x64d436
inc eax
inc eax
dec ebp
inc ecx
inc ebp
pop eax
inc ecx
inc edx
push esi
insb byte es:[edi], dx
outsd dx, dword [esi]
arpl word [ecx + 0x6c], sp
popal
insb byte es:[edi], dx
inc eax
xor al, byte [eax + 0x40]
pop edx
add byte [esi + 0xf], ah
mov bl, 0xe3
btr bx, sp
lea esp, [esp + 1]
mov eax, 0x3c8be268
mov edi, dword [ecx + edi*8]
stc
jmp 0x64d4e8
aas
jae 0x64d456
je 0x64d455
jne 0x64d45b
inc eax
aas
and al, 0x62
popal
jae 0x64d465
arpl word [edi + 0x73], bx
je 0x64d473
jne 0x64d46d
inc eax
inc esp
push ebp
aas
and al, 0x63
push 0x745f7261
jb 0x64d475
popal
imul esi, dword [ebx + esi*2 + 0x40], reloc.SHELL32.dll_ShellExecuteW
inc eax
inc eax
inc eax
jae 0x64d496
lcall 0x1f2, 0x1ced8a14
rol byte [ebx + 0x3f84153a], 0x5f
inc edi
je 0x64d4b5
outsd dx, dword [esi]
outsb dx, byte [esi]
je 0x64d4b4
outsd dx, dword [esi]
inc eax
jae 0x64d4cd
inc eax
inc eax
push ecx
inc edx
inc ebp
push eax
inc edx
inc esp
pop eax
pop edx
add byte [edi], bh
aas
jne 0x64d4ce
insb byte es:[edi], dx
outsd dx, dword [esi]
ja 0x64d4ac
aas
and al, 0x62
popal
jae 0x64d4db
aas
and al, 0x62
popal
jae 0x64d51b
je 0x64d529
inc eax
inc esp
inc eax
jae 0x64d546
inc eax
inc eax
inc eax
jae 0x64d54c
inc eax
inc eax
dec ebp
inc ecx
inc ebp
pop edi
dec edx
push eax
inc edx
inc esp
pop edi
dec edx
inc eax
pop edx
add byte [ebx - 0x7a72ef14], al
popfd
add byte [eax], al
add bh, dh
shl dword [esi + 0x55], cl
sub esp, 0x10
lea eax, [ebp + 0x9d]
not ebx
push bp
mov dx, cx
jmp 0x64d5a3
je 0x64d5b7
outsd dx, dword [esi]
je 0x64d5b3
imul ebp, dword [esi + 0x64], reloc.SHELL32.dll_ShellExecuteW
je 0x64d5a7
xchg dword [esp + 0x10], eax
rdtsc
inc al
lea ebx, reloc.SHELL32.dll_ShellExecuteW
jmp 0x64d69e
sub eax, dword [edx + 0x3f]
pop edi
dec esp
outsd dx, dword [esi]
arpl word [ebx + 0x40], bp
aas
and al, 0x62
popal
jae 0x64d62f
btr ax, sp
mov word [esp + 0xa], ax
bsf bx, si
jmp 0x64d76a
mov bx, 0xf237
setge ah
mov bx, word [esp + 0x11]
neg ax
jmp 0x64d936
mov al, byte [esp + 0x12]
mov word [esp + 4], si
mov dword [esp], ebp
call 0x64d9ab
mov dh, 0xa1
loopne 0x64d96e
pop edx
push edi
push esp
push ebx
push ecx
jne 0x64d9b7
jb 0x64d9cd
push ebx
jae 0x64d9cb
imul ebp, dword [edi + 0x6e], reloc.SHELL32.dll_ShellExecuteW
jb 0x64d9ce
popal
je 0x64d9cd
outsd dx, dword [esi]
outsb dx, byte [esi]
push edi
add byte [ebp + 0x3f3ed7a4], dh
jo 0x64d9e0
jo 0x64d9e0
je 0x64d9e4
inc eax
aas
and al, 0x62
popal
jae 0x64d9e2
arpl word [edi + 0x73], bx
je 0x64d9f0
popal
insd dword es:[edi], dx
bound esi, qword [ebp + 0x66]
inc eax
inc esp
push ebp
aas
and al, 0x63
push 0x745f7261
jb 0x64d9f2
imul esi, dword [ebx + esi*2 + 0x40], reloc.SHELL32.dll_ShellExecuteW
inc eax
inc eax
inc eax
jae 0x64da13
inc eax
inc eax
dec ecx
inc edx
inc ebp
push eax
inc ecx
inc esp
pop eax
pop edx
add bh, bh
je 0x64d9d2
adc al, bh
clc
jmp 0x64d9ff
mov ebp, dword [ebx - 0x5a]
sub bh, byte [eax - 0x343ed521]
bound edi, qword [edi]
bound esi, qword [di + 0x6d]
jo 0x64da08
aas
and al, 0x62
popal
jae 0x64da37
imul esp, dword [ebx + 0x5f], reloc.SHELL32.dll_ShellExecuteW
arpl word [edi + 0x73], bx
je 0x64da45
jb 0x64da39
popal
popal
insd dword es:[edi], dx
bound esi, qword [ebp + 0x66]
inc eax
inc esp
push ebp
aas
and al, 0x63
push 0x745f7261
popal
jb 0x64da42
pop edi
je 0x64da57
jb 0x64da47
popal
imul esi, dword [ebx + esi*2 + 0x40], reloc.SHELL32.dll_ShellExecuteW
inc eax
inc eax
inc eax
jae 0x64da68
inc eax
inc eax
dec ecx
inc ecx
inc ebp
pop eax
dec eax
inc eax
pop edx
add byte [eax - 0x40], cl
ljmp 0xd88b
dec eax
shr dl, 2
mov dword [esp], edi
mov ebx, eax
rdtsc
bsf eax, edx
jmp 0x64daa7
in al, dx
invalid
je 0x64daab
popal
imul esi, dword [ebx + esi*2 + 0x40], 0x74734044
inc eax
inc eax
inc eax
jae 0x64dabc
je 0x64daad
inc eax
inc eax
inc eax
dec ecx
inc edx
inc ebp
push eax
inc ecx
inc esp
pop eax
pop edx
add cl, cl
inc esp
fidivr dword [ebp - 0xe9e50b4]
mov ebp, 0xf161af4c
popal
add bl, dh
adc esi, dword [eax + 0x73]
push 0xffffffffffffff85
xor al, 0x27
aas
jae 0x64dace
je 0x64dadb
je 0x64dadb
inc eax
aas
and al, 0x62
popal
jae 0x64dadb
arpl word [edi + 0x73], bx
je 0x64dae9
popal
insd dword es:[edi], dx
bound esi, qword [ebp + 0x66]
inc eax
inc esp
push ebp
aas
and al, 0x63
push 0x745f7261
jb 0x64daeb
imul esi, dword [ebx + esi*2 + 0x40], reloc.SHELL32.dll_ShellExecuteW
inc eax
inc eax
inc eax
jae 0x64db0c
inc eax
inc eax
dec ecx
inc ecx
inc ebp
pop eax
push eax
inc ecx
inc esp
xor byte [eax], dh
inc eax
pop edx
add byte [ecx + 0x40d038da], al
sbb edx, 0xe440d038
inc eax
in al, 0x66
bts ebx, ebp
bts bx, bp
mov byte [esp + 0x18], al
pop dx
jmp 0x64dafb
sbb edi, dword [edi]
jo 0x64db30
je 0x64db34
inc eax
aas
and al, 0x62
popal
jae 0x64db32
arpl word [edi + 0x73], bx
je 0x64db40
popal
insd dword es:[edi], dx
bound esi, qword [ebp + 0x66]
inc eax
inc esp
push ebp
aas
and al, 0x63
push 0x745f7261
jb 0x64db42
popal
jb 0x64db3d
je 0x64db52
popal
imul esi, dword [ebx + esi*2 + 0x40], reloc.SHELL32.dll_ShellExecuteW
inc eax
inc eax
inc eax
jae 0x64db63
inc eax
inc eax
dec ecx
inc edx
inc ebp
push eax
inc ecx
inc esp
pop eax
pop edx
add byte [edi - 0x49fcdbbc], cl
pop dword [esp + 3]
mov dh, 0x71
inc dl
xchg bx, ax
mov edx, dword [esp + 9]
jmp 0x64db4c
jno 0x64db00
ret 0x8766
jb 0x64db7b
jl 0x64db5f
salc
aas
pop edi
dec edi
jae 0x64db7c
js 0x64db58
aas
and al, 0x62
popal
jae 0x64db87
arpl word [edi + 0x6f], bx
jae 0x64db97
jb 0x64db8a
popal
insd dword es:[edi], dx
inc eax
inc esp
push ebp
aas
and al, 0x63
push 0x745f7261
pop edi
je 0x64dba5
jb 0x64db95
popal
imul esi, dword [ebx + esi*2 + 0x40], reloc.SHELL32.dll_ShellExecuteW
inc eax
inc eax
inc eax
inc eax
jae 0x64dbb6
inc eax
inc eax
push ecx
inc ecx
inc ebp
pop eax
pop eax
pop edx
add byte [edi], cl
xchg edx, eax
shl byte [esi + 0xf], 0xab
setb al
bts dx, bx
lea edx, [esp + ebp]
mov byte [esp + 8], dl
fimul dword [ebp + reloc.SHELL32.dll_ShellExecuteW]
and al, 8
jmp 0x64ddd1
inc ecx
ret
jae 0x64dbca
je 0x64dbd7
inc eax
aas
and al, 0x62
popal
jae 0x64dbd7
arpl word [edi + 0x73], bx
je 0x64dbe5
popal
insd dword es:[edi], dx
bound esi, qword [ebp + 0x66]
inc eax
inc esp
push ebp
aas
and al, 0x63
push 0x745f7261
jb 0x64dbe7
imul esi, dword [ebx + esi*2 + 0x40], reloc.SHELL32.dll_ShellExecuteW
je 0x64dbfc
inc eax
inc esp
inc eax
jae 0x64dc02
inc eax
inc eax
inc eax
jae 0x64dc08
inc eax
inc eax
inc eax
dec ecx
inc ecx
inc ebp
pop eax
push eax
inc ecx
inc esp
xor byte [eax + 0x5a], al
add byte [ebp + edx*8 + 0x45], al
sub al, 0xdf
xor al, 0xd6
inc esi
aam 0xb3
dec esi
jmp 0x69d91b29
bound esp, qword [ecx + 0x73]
imul esp, dword [ebx + 0x5f], 0x40736f69
inc esp
push ebp
aas
and al, 0x63
push 0x745f7261
jb 0x64dc2d
imul esi, dword [ebx + esi*2 + 0x40], reloc.SHELL32.dll_ShellExecuteW
inc eax
inc eax
inc eax
jae 0x64dc4e
inc eax
inc eax
push ecx
inc edx
inc ebp
push eax
inc ecx
push esi
aas
and al, 0x62
popal
bound esp, qword [ecx + 0x73]
imul esp, dword [ebx + 0x5f], 0x7274736f
popal
jae 0x64dc52
arpl word [edi + 0x6f], bx
jae 0x64dc62
jb 0x64dc55
popal
insd dword es:[edi], dx
inc eax
inc esp
push ebp
aas
and al, 0x63
push 0x745f7261
jb 0x64dc60
je 0x64dc70
popal
imul esi, dword [ebx + esi*2 + 0x40], reloc.SHELL32.dll_ShellExecuteW
inc eax
inc esp
inc eax
jae 0x64dc7b
inc eax
inc eax
inc eax
inc eax
xor al, byte [eax + 0x58]
pop edx
add byte [edi], bh
ja 0x64dc7c
outsb dx, byte gs:[esi]
inc eax
aas
and al, 0x62
popal
jae 0x64dc86
arpl word [edi + 0x69], bx
outsd dx, dword [esi]
jae 0x64dc63
inc esp
push ebp
aas
and al, 0x63
push 0x745f7261
jb 0x64dc90
imul esi, dword [ebx + esi*2 + 0x40], reloc.SHELL32.dll_ShellExecuteW
inc eax
inc eax
inc eax
jae 0x64dcb1
inc eax
inc eax
push ecx
inc edx
inc ebp
inc esp
inc esp
inc eax
pop edx
add byte [edi], bh
jo 0x64dcad
popal
jae 0x64dcb3
inc eax
aas
and al, 0x62
popal
jae 0x64dcbe
arpl word [edi + 0x73], bx
je 0x64dccc
popal
insd dword es:[edi], dx
bound esi, qword [ebp + 0x66]
inc eax
inc esp
push ebp
aas
and al, 0x63
push 0x745f7261
jb 0x64dcce
imul esi, dword [ebx + esi*2 + 0x40], reloc.SHELL32.dll_ShellExecuteW
inc eax
inc esp
inc eax
jae 0x64dce9
inc eax
inc eax
inc eax
jae 0x64dcef
inc eax
inc eax
inc eax
dec ecx
inc edx
inc ebp
push eax
inc ecx
inc esp
pop eax
pop edx
add byte [edi + 0x64], al
imul esi, dword [eax + 0x53], 0x65547465
js 0x64dd06
push edx
outsb dx, byte gs:[esi]
jb 0x64dd02
outsb dx, byte [esi]
dec eax
imul ebp, dword [esi + 0x74], 0x3fa95e00
aas
xor byte [edi], bh
and al, 0x62
popal
jae 0x64dd14
arpl word [edi + 0x73], bx
je 0x64dd22
jae 0x64dd23
jb 0x64dd16
popal
popal
insd dword es:[edi], dx
bound esi, qword [ebp + 0x66]
inc eax
inc esp
push ebp
aas
and al, 0x63
push 0x745f7261
jb 0x64dd24
jb 0x64dd1f
je 0x64dd34
popal
imul esi, dword [ebx + esi*2 + 0x40], reloc.SHELL32.dll_ShellExecuteW
inc eax
inc eax
inc eax
inc eax
jae 0x64dd45
inc eax
inc eax
dec ecx
inc ecx
inc ebp
inc eax
pop eax
pop edx
add byte [edi], bh
jae 0x64dd4e
jne 0x64dd54
arpl word [eax + 0x3f], ax
and al, 0x62
popal
jae 0x64dd51
arpl word [edi + 0x73], bx
je 0x64dd5f
pop edi
jae 0x64dd60
jb 0x64dd53
popal
popal
insd dword es:[edi], dx
bound esi, qword [ebp + 0x66]
inc eax
inc esp
push ebp
aas
and al, 0x63
push 0x745f7261
jb 0x64dd61
imul esi, dword [ebx + esi*2 + 0x40], reloc.SHELL32.dll_ShellExecuteW
jae 0x64dd44
inc esp
inc eax
jae 0x64dd7c
inc eax
inc eax
inc eax
jae 0x64dd82
inc eax
inc eax
push ecx
inc ecx
inc ebp
dec eax
inc esp
inc eax
pop edx
add bl, bl
dec edx
fdivr dword [edi - 0x7d9444b6]
aas
imul eax, dword [edx + reloc.SHELL32.dll_ShellExecuteW], 0x63
bound esp, qword gs:[ecx + 0x63]
bound esp, qword [ecx + 0x63]
popal
arpl word [ebx + 0x40], bp
aas
and al, 0x62
popal
jae 0x64dd97
imul eax, dword [eax + 0x3f], 0x24
bound esp, qword [ecx + 0x73]
imul esp, dword [ebx + 0x5f], 0x65727473
arpl word [edi + 0x73], bx
je 0x64dda5
popal
popal
insd dword es:[edi], dx
bound esi, qword [ebp + 0x66]
inc eax
inc esp
push ebp
aas
and al, 0x63
push 0x745f7261
jb 0x64dda7
popal
imul esi, dword [ebx + esi*2 + 0x40], reloc.SHELL32.dll_ShellExecuteW
inc eax
inc eax
inc eax
jae 0x64ddc8
je 0x64ddb9
inc eax
inc eax
inc eax
dec ecx
inc edx
inc ebp
push eax
inc ecx
inc esp
pop eax
pop edx
add byte [edi + 0x64], al
imul esi, dword [eax + 0x47], 0x65477465
inc edi
imul esi, dword fs:[eax + 0x47], reloc.SHELL32.dll_ShellExecuteW
outsb dx, byte [esi]
jb 0x64ddd6
arpl word [esi + 0x6f], ax
outsb dx, byte [esi]
je 0x64ddb9
popal
insd dword es:[edi], dx
imul ebp, dword [ecx + edi*2 + 0x53], 0x53736e61
push ebx
jb 0x64dde9
add byte [ecx], ch
mov ebp, 0x70c7342d
sub dword [ebp + reloc.SHELL32.dll_ShellExecuteW], edi
sbb dword [esi + 0x3f967b1c], ecx
lahf
out 0x11, al
nop
adc edi, dword [edi]
jo 0x64de0b
jb 0x64ddd9
aas
and al, 0x62
popal
jae 0x64de08
arpl word [edi + 0x73], bx
je 0x64de16
popal
popal
insd dword es:[edi], dx
bound esi, qword [ebp + 0x66]
inc eax
inc esp
push ebp
aas
and al, 0x63
push 0x745f7261
jb 0x64de18
imul esi, dword [ebx + esi*2 + 0x40], reloc.SHELL32.dll_ShellExecuteW
jae 0x64ddfb
inc esp
inc eax
jae 0x64de33
inc eax
inc eax
inc eax
jae 0x64de39
inc eax
inc eax
dec ecx
inc edx
inc ebp
push eax
inc ecx
inc esp
pop eax
pop edx
add al, al
fadd dword [0x8f6695b4]
inc esp
rcr al, 5
mov ah, 0x95
pop word [esp + 0xa]
and al, 0xa
bsf ebx, ecx
jmp 0x64dfc8
jo 0x64de60
je 0x64de5b
inc eax
aas
and al, 0x62
popal
jae 0x64de5d
arpl word [edi + 0x73], bx
je 0x64de6b
popal
insd dword es:[edi], dx
bound esi, qword [ebp + 0x66]
inc eax
inc esp
push ebp
aas
and al, 0x63
push 0x745f7261
jb 0x64de6d
pop edi
je 0x64de7d
popal
imul esi, dword [ebx + esi*2 + 0x40], reloc.SHELL32.dll_ShellExecuteW
inc eax
inc eax
inc eax
jae 0x64de8e
inc eax
inc eax
push ecx
inc ecx
inc ebp
pop edi
dec edx
push eax
inc edx
inc esp
pop edi
dec edx
inc eax
pop edx
add byte [edi], bh
arpl word [edi + 0x75], bp
je 0x64de70
jae 0x64dea6
inc eax
inc eax
inc eax
xor edx, dword [esi + 0x3f]
and al, 0x62
popal
jae 0x64dea6
bound esp, qword [ecx + 0x73]
imul esp, dword [ebx + 0x5f], 0x7274736f
popal
arpl word [edi + 0x6f], bx
jae 0x64deb6
jb 0x64dea9
popal
insd dword es:[edi], dx
inc eax
inc esp
push ebp
aas
and al, 0x63
push 0x745f7261
jb 0x64deb4
imul esi, dword [ebx + esi*2 + 0x40], reloc.SHELL32.dll_ShellExecuteW
inc eax
inc eax
inc eax
xor dword [eax + 0x41], eax
inc eax
inc ecx
add byte [edi], bh
jae 0x64dece
outsd dx, dword [esi]
ja 0x64ded6
popal
outsb dx, byte [esi]
jns 0x64ded0
inc eax
aas
and al, 0x62
popal
jae 0x64dedd
bound esp, qword [ecx + 0x73]
imul esp, dword [ebx + 0x5f], 0x65727473
popal
arpl word [edi + 0x73], bx
je 0x64deeb
popal
insd dword es:[edi], dx
bound esi, qword [ebp + 0x66]
jne 0x64dee5
inc eax
inc esp
push ebp
aas
and al, 0x63
push 0x745f7261
jb 0x64deed
imul esi, dword [ebx + esi*2 + 0x40], reloc.SHELL32.dll_ShellExecuteW
jae 0x64ded0
inc esp
inc eax
jae 0x64df08
inc eax
inc eax
inc eax
jae 0x64df0e
inc eax
inc eax
dec ebp
inc ecx
inc ebp
pop edi
dec edx
pop eax
pop edx
add byte [edi], bh
insb byte es:[edi], dx
jne 0x64df1d
jae 0x64df13
push 0x62243f40
inc eax
aas
and al, 0x62
popal
jae 0x64df1b
arpl word [edi + 0x6f], bx
outsd dx, dword [esi]
jae 0x64df2b
je 0x64df2a
jb 0x64df1e
popal
popal
insd dword es:[edi], dx
inc eax
inc esp
push ebp
aas
and al, 0x63
push 0x745f7261
jb 0x64df29
imul esi, dword [ebx + esi*2 + 0x40], reloc.SHELL32.dll_ShellExecuteW
jae 0x64df44
inc eax
inc eax
inc eax
jae 0x64df4a
inc eax
inc eax
push ecx
inc ecx
inc ebp
inc ecx
inc ecx
push esi
xor dword [edx], esi
inc eax
pop eax
pop edx
add byte [eax - 0x14], bh
js 0x64ded3
bound eax, qword [0x587947f4]
jns 0x64df45
mov ebx, 0x3f3f0d92
aas
and al, 0x62
popal
jae 0x64df62
arpl word [edi + 0x6f], bx
jae 0x64df72
jb 0x64df65
popal
insd dword es:[edi], dx
inc eax
inc esp
push ebp
aas
and al, 0x63
push 0x745f7261
jb 0x64df70
popal
imul esi, dword [ebx + esi*2 + 0x40], reloc.SHELL32.dll_ShellExecuteW
inc esp
inc eax
jae 0x64df8b
inc eax
inc eax
inc eax
jae 0x64df91
inc eax
inc eax
inc eax
push ecx
inc ecx
inc ebp
inc ecx
inc ecx
push esi
xor byte [ecx], dh
inc eax
dec ebx
inc eax
pop edx
add byte [edi], bh
jo 0x64dfa5
je 0x64df72
aas
and al, 0x62
popal
jae 0x64dfa1
arpl word [edi + 0x6f], bx
jae 0x64dfb1
jb 0x64dfa4
aas
and al, 0x63
push 0x745f7261
jb 0x64dfaf
pop edi
je 0x64dfbf
popal
imul esi, dword [ebx + esi*2 + 0x40], reloc.SHELL32.dll_ShellExecuteW
inc eax
inc eax
inc eax
jae 0x64dfd0
inc eax
inc eax
push ecx
inc ecx
inc ebp
inc ecx
inc ecx
push esi
xor dword [edx], esi
inc eax
inc esp
inc eax
pop edx
add byte [ebx + 0x26eb8c1e], cl
invalid
invalid
div dword [ebx - 0x1d]
xchg byte [ebp - 0x3c], dh
mul cl
and byte [edi], bh
aas
aas
and al, 0x62
popal
jae 0x64dfed
arpl word [edi + 0x6f], bx
jae 0x64dffd
jb 0x64dff0
popal
insd dword es:[edi], dx
inc eax
inc esp
push ebp
aas
and al, 0x63
push 0x745f7261
jb 0x64dffb
imul esi, dword [ebx + esi*2 + 0x40], reloc.SHELL32.dll_ShellExecuteW
inc eax
je 0x64e007
inc eax
inc eax
inc eax
jae 0x64e01c
inc eax
inc eax
push ecx
inc ecx
inc ebp
inc ecx
inc ecx
push esi
xor byte [ecx], dh
inc eax
push eax
inc ecx
inc ecx
inc ecx
push esi
xor byte [ecx], dh
inc eax
inc ecx
inc ecx
push esi
xor byte [ecx], dh
inc eax
inc eax
pop edx
inc eax
pop edx
add byte [ebx + 0xf022444], cl
mov bl, 0xc2
mov eax, dword [esp + 2]
btr edx, eax
sub esp, 7
in al, dx
pop es
lea esp, [esp + 0xe]
rdtsc
jmp 0x64dffb
popal
insd dword es:[edi], dx
imul ebp, dword [ecx + edi*2 + 0x46], 0x4e6d6f72
insb byte es:[edi], dx
jns 0x64e039
jb 0x64e064
insd dword es:[edi], dx
dec esi
popal
insd dword es:[edi], dx
add byte gs:[edi], cl
retf 0xd58a
bswap edx
mov dl, ch
btc ax, ax
mov edx, eax
std
xchg dx, ax
xchg edx, eax
jmp 0x64e028
insd dword es:[edi], dx
outsd dx, dword [esi]
outsb dx, byte [esi]
pop edi
jbe 0x64e088
jae 0x64e087
popal
outsb dx, byte [esi]
add byte [esi - 1], ah
je 0x64e050
push word [esp + 6]
bsr edx, esp
mov ax, word [esp + 0xc]
jmp 0x64e10b
add ch, bl
sub al, 0x3f
push es
pop edi
pop edi
jae 0x64e0b6
imul ebp, dword fs:[edi + 0x5f], reloc.SHELL32.dll_ShellExecuteW
outsd dx, dword [esi]
outsb dx, byte [esi]
pop edi
jbe 0x64e0b5
jo 0x64e0c3
imul ebp, dword [esi + 0x74], reloc.SHELL32.dll_ShellExecuteW
jae 0x64e0ce
pop edi
jbe 0x64e0da
jo 0x64e0db
imul ebp, dword [esi + 0x74], reloc.SHELL32.dll_ShellExecuteW
test al, 0x31
mov eax, dword [reloc.SHELL32.dll_ShellExecuteW]
mov bl, 0xaa
pop edi
pop edi
jae 0x64e0f1
pop edi
jbe 0x64e0fd
jae 0x64e0ef
insd dword es:[edi], dx
jae 0x64e0e5
ja 0x64e123
outsb dx, byte [esi]
sub eax, 0x2d747263
jae 0x64e136
imul ebp, dword [edi + 0x2d], reloc.SHELL32.dll_ShellExecuteW
sub eax, 0x6c642e30
insb byte es:[edi], dx
add byte [ecx + 0x70], ah
imul ebp, dword [reloc.SHELL32.dll_ShellExecuteW], 0x632d6e69
jb 0x64e153
outsb dx, byte [esi]
sub eax, 0x2d747263
jae 0x64e156
jb 0x64e14d
sub eax, 0x312d316c
sub eax, 0x6c642e30
insb byte es:[edi], dx
add byte [edi + 0x5f], bl
jae 0x64e16a
imul ebp, dword fs:[edi + 0x5f], reloc.SHELL32.dll_ShellExecuteW
insd dword es:[edi], dx
outsd dx, dword [esi]
outsb dx, byte [esi]
pop edi
jbe 0x64e176
xchg word [esp + 0xb], ax
xchg dx, ax
push di
cld
xchg word [esp + 7], ax
jmp 0x64e15d
imul ebp, dword [reloc.SHELL32.dll_ShellExecuteW], 0x632d6e69
jb 0x64e1a3
arpl word [edi + 0x6d], bp
insd dword es:[edi], dx
outsd dx, dword [esi]
outsb dx, byte [esi]
add byte [esi - 9], ah
shl byte [esi - 0x45], 1
invalid
not ax
mov bx, 0x5fc6
push word [esp + 1]
lea eax, [eax + eax]
add al, 0
jmp 0x64e246
pop dword [esp + 3]
mov word [esp + 0xd], cx
mov dx, 0xc746
setbe dl
jmp 0x64e27b
pushfd
pop word [esp + 0x10]
mov word [esp + 0xe], si
lea esp, [esp + 8]
jmp 0x64e3cc
mov ax, 0xe59c
xchg word [esp + 5], bx
not edx
mov ah, 0x65
jmp 0x64e4d0
pop word [esp + 2]
mov dword [esp + 5], ebp
lea ebx, reloc.SHELL32.dll_ShellExecuteW
jmp 0x64e571
mov dl, al
pop dword [esp]
setge dl
call fcn.0064e631
cld
insd dword es:[edi], dx
std
test byte [edi - 0x64], dh
cld
iretd