Function at 0x7c826c33
Capabilities:
Encode data using xor
Get file attributes
Get number of processors
Map section object
Set file attributes

Disassembly:
mov eax, dword [ebp - 0x53c]
mov dword [eax], 0xf000
jmp 0x7c82722b
push 0x6ac
push 0x7c8274f8
call fcn.7c8024d6
mov eax, dword [0x7c8856cc]
mov dword [ebp - 0x1c], eax
mov edx, dword [ebp + 8]
mov dword [ebp - 0x584], edx
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x484], eax
mov eax, dword [ebp + 0x14]
mov dword [ebp - 0x504], eax
mov eax, dword [ebp + 0x18]
mov dword [ebp - 0x4a4], eax
mov eax, dword [ebp + 0x1c]
mov dword [ebp - 0x50c], eax
mov eax, dword [ebp + 0x20]
mov dword [ebp - 0x4c4], eax
mov eax, dword [ebp + 0x24]
mov dword [ebp - 0x5ac], eax
mov eax, dword [ebp + 0x28]
mov dword [ebp - 0x53c], eax
mov ecx, dword [ebp + 0x2c]
mov dword [ebp - 0x548], ecx
mov esi, dword [ebp + 0x30]
mov dword [ebp - 0x4d8], esi
mov esi, dword [ebp + 0x3c]
mov dword [ebp - 0x5fc], esi
or dword [ebp - 0x454], 0xffffffff
mov ecx, dword [ecx]
mov dword [ebp - 0x4cc], ecx
xor ebx, ebx
mov dword [ebp - 0x4f8], ebx
mov dword [ebp - 0x588], ebx
mov dword [ebp - 0x550], ebx
mov dword [ebp - 0x5c0], ebx
mov dword [ebp - 0x514], ebx
mov dword [ebp - 0x598], ebx
mov dword [eax], 0x10000
mov eax, dword fs:[0x18]
add eax, 0xc00
cmp edx, eax
je 0x7c82779d
push 4
push 0x28
lea eax, [ebp - 0x580]
push eax
lea eax, [ebp - 0x490]
push eax
push dword [ebp - 0x484]
call dword [sym.imp.ntdll.dll_NtQueryInformationFile]
cmp eax, ebx
jl 0x7c8276e0
mov ecx, dword [ebp - 0x560]
mov dword [ebp - 0x480], ecx
cmp dword [ebp - 0x4a4], ebx
jne 0x7c8276eb
cmp eax, ebx
jl 0x7c83db2e
mov esi, dword [ebp - 0x4c4]
mov eax, dword [esi]
mov edi, eax
shr edi, 1
and edi, 1
mov dword [ebp - 0x4d0], edi
jne 0x7c83db3b
mov dword [ebp - 4], ebx
mov dword [ebp - 0x464], ebx
mov dword [ebp - 0x558], ebx
mov dword [ebp - 0x460], ebx
cmp dword [ebp - 0x4a4], ebx
jne 0x7c83e64f
mov dword [ebp - 0x494], ebx
mov dword [ebp - 0x54c], ebx
mov dword [ebp - 0x5f4], ebx
mov dword [ebp - 0x51c], ebx
mov dword [ebp - 0x5b0], ebx
mov dword [ebp - 0x538], ebx
mov dword [ebp - 0x4d4], ebx
cmp edi, ebx
jne 0x7c83db5a
cmp dword [ebp - 0x454], 0xffffffff
jne 0x7c827714
mov dword [ebp - 0x5a8], ebx
mov dword [ebp - 0x58c], ebx
mov dword [ebp - 0x494], 0x20
mov edi, dword [ebp - 0x480]
and edi, 0x10
mov esi, edi
neg esi
sbb esi, esi
and esi, 0x3fbd
add esi, 0x64
mov dword [ebp - 0x494], esi
mov eax, dword [ebp - 0x4c4]
mov eax, dword [eax]
test ax, 0x140
jne 0x7c83dbcc
mov ecx, eax
cmp edi, ebx
jne 0x7c837109
and cl, 1
neg cl
sbb ecx, ecx
and ecx, 0xfffffffd
add ecx, 5
mov dword [ebp - 0x4a0], ecx
mov dword [ebp - 0x47c], 0x40110080
cmp edi, ebx
jne 0x7c837116
test al, 0x10
jne 0x7c83dbdd
test al, 0x40
jne 0x7c83dbeb
test al, 0x20
jne 0x7c83dbf7
or dword [ebp - 0x4c8], 0xffffffff
cmp dword [ebp + 0x34], ebx
jne 0x7c83dc10
mov eax, dword [ebp - 0x494]
mov dword [ebp - 0x54c], eax
mov eax, dword [ebp - 0x4a0]
mov dword [ebp - 0x608], eax
mov esi, dword [ebp - 0x504]
push esi
lea eax, [ebp - 0x500]
push eax
call dword [sym.imp.ntdll.dll_RtlInitUnicodeString]
movzx eax, word [ebp - 0x500]
shr eax, 1
xor ecx, ecx
cmp word [esi + eax*2 - 2], 0x5c
sete cl
mov dword [ebp - 0x5a8], ecx
lea eax, [ebp - 0x4f4]
push eax
push ebx
lea eax, [ebp - 0x4ac]
push eax
push esi
call dword [sym.imp.ntdll.dll_RtlDosPathNameToNtPathName_U]
movzx eax, al
mov dword [ebp - 0x5f4], eax
cmp eax, ebx
je 0x7c83dc47
mov eax, dword [ebp - 0x4a8]
mov dword [ebp - 0x5c0], eax
mov eax, dword [ebp - 0x4f4]
cmp ax, bx
jne 0x7c83dc4e
mov dword [ebp - 0x4ec], ebx
mov dword [ebp - 0x534], 0x18
mov eax, dword [ebp - 0x4ec]
mov dword [ebp - 0x530], eax
mov dword [ebp - 0x528], 0x40
lea eax, [ebp - 0x4ac]
mov dword [ebp - 0x52c], eax
mov dword [ebp - 0x524], ebx
mov dword [ebp - 0x520], ebx
mov byte [ebp - 0x4e0], 1
mov dword [ebp - 0x4e4], 2
mov byte [ebp - 0x4df], 1
mov dword [ebp - 0x4e8], 0xc
lea eax, [ebp - 0x4e8]
mov dword [ebp - 0x520], eax
mov dword [ebp - 0x514], ebx
mov dword [ebp - 0x554], ebx
push 7
push 4
lea eax, [ebp - 0x46c]
push eax
lea eax, [ebp - 0x49c]
push eax
push dword [ebp - 0x484]
call dword [sym.imp.ntdll.dll_NtQueryInformationFile]
mov dword [ebp - 0x45c], eax
cmp eax, ebx
jl 0x7c826f8f
mov esi, dword [ebp - 0x46c]
cmp esi, ebx
jne 0x7c83dc65
mov eax, dword [ebp - 0x47c]
mov dword [ebp - 0x470], eax
mov dword [ebp - 0x4c0], ebx
mov edi, dword [ebp - 0x514]
mov dword [ebp - 0x51c], edi
mov eax, dword [ebp - 0x554]
mov dword [ebp - 0x538], eax
mov esi, 0x40000000
push esi
lea eax, [ebp - 0x500]
push eax
call fcn.7c810ef1
mov dword [ebp - 0x58c], eax
cmp eax, ebx
jne 0x7c83dd26
and byte [ebp - 0x47f], 0xef
test byte [ebp - 0x480], 0x10
jne 0x7c826ffa
mov eax, 0x4000
test dword [ebp - 0x480], eax
jne 0x7c83dd7e
cmp dword [ebp - 0x454], ebx
je 0x7c82700f
cmp dword [ebp - 0x454], 0xffffffff
jne 0x7c827096
mov esi, dword [ebp - 0x4c8]
and esi, dword [ebp - 0x480]
and esi, 0x7fb7
push dword [ebp - 0x538]
push dword [ebp - 0x51c]
push dword [ebp - 0x494]
push dword [ebp - 0x4a0]
push dword [ebp - 0x4c0]
push esi
push ebx
lea eax, [ebp - 0x49c]
push eax
lea eax, [ebp - 0x534]
push eax
push dword [ebp - 0x470]
lea eax, [ebp - 0x454]
push eax
call dword [sym.imp.ntdll.dll_NtCreateFile]
mov edi, eax
mov dword [ebp - 0x45c], edi
cmp edi, ebx
jl 0x7c836b40
mov eax, dword [ebp - 0x480]
and eax, 0x10
jne 0x7c83712f
cmp eax, ebx
jne 0x7c837141
test byte [ebp - 0x560], 1
jne 0x7c83e143
cmp dword [ebp - 0x598], ebx
jne 0x7c83e181
mov esi, dword [ebp - 0x4cc]
cmp dword [ebp + 0x34], ebx
jne 0x7c83e1da
mov edi, dword [ebp - 0x5fc]
mov dword [edi], ebx
mov dword [ebp - 0x5b0], ebx
mov dword [ebp - 0x4d4], ebx
push 5
push 0x218
lea eax, [ebp - 0x450]
push eax
lea eax, [ebp - 0x490]
push eax
push dword [ebp - 0x454]
call dword [sym.imp.ntdll.dll_NtQueryVolumeInformationFile]
mov dword [ebp - 0x45c], eax
cmp eax, ebx
jl 0x7c8270f8
mov eax, dword [ebp - 0x450]
mov dword [edi], eax
cmp dword [ebp - 0x58c], ebx
jne 0x7c827134
push 4
push 0x28
lea eax, [ebp - 0x5f0]
push eax
lea eax, [ebp - 0x490]
push eax
push dword [ebp - 0x454]
call dword [sym.imp.ntdll.dll_NtQueryInformationFile]
mov dword [ebp - 0x45c], eax
cmp eax, ebx
jl 0x7c827134
mov eax, dword [ebp - 0x5d0]
mov dword [ebp - 0x4d4], eax
push 5
push 0x218
lea eax, [ebp - 0x450]
push eax
lea eax, [ebp - 0x490]
push eax
push dword [ebp - 0x484]
call dword [sym.imp.ntdll.dll_NtQueryVolumeInformationFile]
mov dword [ebp - 0x45c], eax
cmp eax, ebx
jl 0x7c83e0f2
mov eax, dword [ebp - 0x450]
mov dword [ebp - 0x5b0], eax
test al, 8
je 0x7c827183
mov eax, dword [ebp - 0x4c4]
mov eax, dword [eax]
test al, 0x70
jne 0x7c83e255
mov eax, dword [ebp - 0x4c4]
mov eax, dword [eax]
test al, 0x10
jne 0x7c83e2d9
lea ecx, [ebp - 0x4cc]
push ecx
push eax
push dword [edi]
lea eax, [ebp - 0x4d4]
push eax
push dword [ebp - 0x4c8]
push dword [ebp - 0x480]
push dword [ebp - 0x494]
push dword [ebp - 0x4a0]
push dword [ebp - 0x4c0]
push dword [ebp - 0x470]
lea eax, [ebp - 0x534]
push eax
lea eax, [ebp - 0x454]
push eax
push dword [ebp - 0x504]
push dword [ebp - 0x484]
call fcn.7c82761e
mov dword [ebp - 0x518], eax
cmp eax, ebx
je 0x7c827568
test byte [ebp - 0x480], 0x10
jne 0x7c8371c2
mov edi, dword [ebp - 0x50c]
cmp dword [ebp - 0x4d0], ebx
jne 0x7c8277c6
cmp dword [edi + 4], ebx
jl 0x7c82722b
jg 0x7c8277c6
cmp dword [edi], 0x10000
jae 0x7c8277c6
cmp dword [ebp - 0x4d0], ebx
jne 0x7c83e911
mov eax, dword [edi]
or eax, dword [edi + 4]
je 0x7c827284
mov eax, dword [edi]
mov dword [ebp - 0x4b4], eax
mov eax, dword [edi + 4]
mov dword [ebp - 0x4b0], eax
push 0x14
push 8
lea eax, [ebp - 0x4b4]
push eax
lea eax, [ebp - 0x490]
push eax
push dword [ebp - 0x454]
call dword [sym.imp.ntdll.dll_NtSetInformationFile]
mov dword [ebp - 0x45c], eax
mov eax, 0xc000007f
cmp dword [ebp - 0x45c], eax
je 0x7c83e928
mov dword [ebp - 0x478], ebx
mov dword [ebp - 0x474], ebx
cmp esi, ebx
je 0x7c827310
cmp dword [esi + 0x1c], ebx
je 0x7c83945d
inc dword [esi + 0x10]
mov eax, dword [esi + 0x10]
push dword [esi + 0x18]
push dword [ebp - 0x454]
push dword [ebp - 0x484]
push 1
push eax
push dword [ebp - 0x474]
push dword [ebp - 0x478]
push dword [edi + 4]
push dword [edi]
push dword [esi + 0xc]
push dword [esi + 8]
push dword [esi + 4]
push dword [esi]
call dword [esi + 0x1c]
mov dword [ebp - 0x488], eax
cmp dword [ebp - 0x488], 1
je 0x7c83e996
mov eax, dword [esi + 0x14]
cmp eax, ebx
je 0x7c8272f6
cmp dword [eax], ebx
jne 0x7c83e996
cmp dword [ebp - 0x488], 2
je 0x7c83ebf9
cmp dword [ebp - 0x488], 3
je 0x7c83e94f
cmp dword [ebp - 0x4d0], ebx
jne 0x7c83ea37
cmp dword [edi + 4], ebx
jne 0x7c82797d
mov eax, dword [edi]
cmp eax, 0x40000
jae 0x7c82797d
cmp eax, ebx
je 0x7c82755e
push dword [ebp - 0x484]
push 0x8000000
push 2
push ebx
push ebx
push 0xf001f
lea eax, [ebp - 0x460]
push eax
call dword [sym.imp.ntdll.dll_NtCreateSection]
mov dword [ebp - 0x45c], eax
cmp eax, ebx
jl 0x7c82797d
mov dword [ebp - 0x4bc], ebx
mov dword [ebp - 0x4b8], ebx
mov dword [ebp - 0x458], ebx
mov dword [ebp - 0x468], ebx
push 2
push ebx
push 1
lea eax, [ebp - 0x468]
push eax
lea eax, [ebp - 0x4bc]
push eax
push ebx
push ebx
lea eax, [ebp - 0x464]
push eax
push 0xffffffffffffffff
push dword [ebp - 0x460]
call dword [sym.imp.ntdll.dll_NtMapViewOfSection]
mov dword [ebp - 0x45c], eax
push dword [ebp - 0x460]
call dword [sym.imp.ntdll.dll_NtClose]
mov dword [ebp - 0x460], ebx
cmp dword [ebp - 0x45c], ebx
jl 0x7c82797d
mov eax, dword [ebp - 0x468]
mov dword [ebp - 0x458], eax
mov eax, dword [ebp - 0x464]
mov dword [ebp - 0x5a0], eax
mov eax, dword [edi]
mov dword [ebp - 0x59c], eax
xor eax, eax
inc eax
mov dword [ebp - 0x488], eax
mov dword [ebp - 4], eax
mov esi, dword [ebp - 0x4cc]
mov edi, dword [ebp - 0x50c]
mov ecx, dword [ebp - 0x59c]
cmp ecx, ebx
je 0x7c827552
mov eax, dword [ebp - 0x53c]
mov eax, dword [eax]
cmp ecx, eax
mov dword [ebp - 0x458], eax
ja 0x7c82742d
mov dword [ebp - 0x458], ecx
push ebx
lea eax, [ebp - 0x458]
push eax
push dword [ebp - 0x458]
push dword [ebp - 0x5a0]
push dword [ebp - 0x454]
call sym.KERNEL32.dll_WriteFile
test eax, eax
je 0x7c83e964
mov eax, dword [ebp - 0x458]
sub dword [ebp - 0x59c], eax
add dword [ebp - 0x5a0], eax
cmp esi, ebx
je 0x7c827407
cmp dword [esi + 0x1c], ebx
je 0x7c839468
add dword [ebp - 0x478], eax
adc dword [ebp - 0x474], ebx
add dword [esi + 8], eax
adc dword [esi + 0xc], ebx
push dword [esi + 0x18]
push dword [ebp - 0x454]
push dword [ebp - 0x484]
push ebx
push dword [esi + 0x10]
push dword [ebp - 0x474]
push dword [ebp - 0x478]
push dword [edi + 4]
push dword [edi]
push dword [esi + 0xc]
push dword [esi + 8]
push dword [esi + 4]
push dword [esi]
call dword [esi + 0x1c]
mov dword [ebp - 0x488], eax
cmp dword [ebp - 0x488], 1
je 0x7c82771f
mov eax, dword [esi + 0x14]
cmp eax, ebx
je 0x7c8274d9
cmp dword [eax], ebx
jne 0x7c82771f
cmp dword [ebp - 0x488], 2
je 0x7c83e9dd
cmp dword [ebp - 0x488], 3
jne 0x7c827407
jmp 0x7c83e9b7
mov dword [ebp - 4], ebx
cmp dword [ebp - 0x488], 2
je 0x7c827568
mov dword [ebp - 0x4f8], 1
or dword [ebp - 4], 0xffffffff
call fcn.7c82758c
mov eax, dword [ebp - 0x4f8]
mov ecx, dword [ebp - 0x1c]
call fcn.7c8097aa
call fcn.7c802511
ret 0x38
mov dword [ebp - 0x480], ebx
jmp 0x7c826d2d
mov dword [ebp - 0x560], ebx
jmp 0x7c826d41
mov esi, dword [ebp - 0x4cc]
jmp 0x7c8371e4
cmp dword [ebp - 0x4a4], ebx
je 0x7c83e9cc
jmp 0x7c83ea28
cmp dword [ebp - 0x4a4], ebx
je 0x7c83ebe8
jmp 0x7c827951
mov eax, dword fs:[0x18]
lea esi, [eax + 0xc00]
push 0x41
pop ecx
lea edi, [ebp - 0x228]
rep movsd dword es:[edi], dword [esi]
movsb byte es:[edi], byte [esi]
lea eax, [ebp - 0x228]
mov dword [ebp - 0x584], eax
jmp 0x7c826cfb
push dword [ebp - 0x454]
push dword [ebp - 0x484]
call fcn.7c8277f5
test eax, eax
jne 0x7c82082c
cmp dword [ebp - 0x4d0], ebx
je 0x7c827237
jmp 0x7c83e8fd
mov eax, dword [ebp - 0x53c]
mov eax, dword [eax]
mov dword [ebp - 0x664], eax
mov dword [ebp - 0x66c], ebx
push ebx
lea ecx, [ebp - 0x458]
push ecx
push eax
push dword [ebp - 0x558]
push dword [ebp - 0x484]
call sym.KERNEL32.dll_ReadFile
mov dword [ebp - 0x518], eax
cmp eax, ebx
je 0x7c83ec1d
cmp dword [ebp - 0x458], ebx
je 0x7c827970
push ebx
lea eax, [ebp - 0x458]
push eax
push dword [ebp - 0x458]
push dword [ebp - 0x558]
push dword [ebp - 0x454]
call sym.KERNEL32.dll_WriteFile
test eax, eax
je 0x7c83eaba
mov eax, dword [ebp - 0x458]
add dword [ebp - 0x478], eax
adc dword [ebp - 0x474], ebx
inc dword [ebp - 0x588]
cmp dword [ebp - 0x4d0], ebx
jne 0x7c83eaed
cmp esi, ebx
je 0x7c82784d
cmp dword [esi + 0x1c], ebx
je 0x7c839473
mov eax, dword [ebp - 0x458]
add dword [esi + 8], eax
adc dword [esi + 0xc], ebx
push dword [esi + 0x18]
push dword [ebp - 0x454]
push dword [ebp - 0x484]
push ebx
push dword [esi + 0x10]
push dword [ebp - 0x474]
push dword [ebp - 0x478]
push dword [edi + 4]
push dword [edi]
push dword [esi + 0xc]
push dword [esi + 8]
push dword [esi + 4]
push dword [esi]
call dword [esi + 0x1c]
mov dword [ebp - 0x488], eax
cmp dword [ebp - 0x488], 1
je 0x7c827730
mov eax, dword [esi + 0x14]
cmp eax, ebx
je 0x7c827951
cmp dword [eax], ebx
jne 0x7c827730
cmp dword [ebp - 0x488], 2
je 0x7c83ebf9
cmp dword [ebp - 0x488], 3
jne 0x7c82784d
jmp 0x7c83ec08
cmp eax, ebx
jne 0x7c82755e
jmp 0x7c83ec1d
cmp dword [ebp - 0x4d0], ebx
jne 0x7c83ea37
mov eax, dword fs:[0x18]
mov dword [ebp - 0x680], eax
mov ecx, dword [ebp - 0x53c]
push dword [ecx]
push dword [0x7c8856d4]
mov eax, dword [eax + 0x30]
push dword [eax + 0x18]
call dword [sym.imp.ntdll.dll_RtlAllocateHeap]
mov dword [ebp - 0x558], eax
cmp eax, ebx
je 0x7c83ea8c
jmp 0x7c82784d
xchg esi, eax
lodsd eax, dword [esi]
adc dword [esi - 0x4cd334e], ebp
ret
dec ebx
sub dword [ebx - 0x305ade2], 0xffffffc1
invalid
mov edi, 0xc08fcc5d
mov dh, 0xcc
sahf
sub dword [eax - 0x3066187f], ebp
jmp 0x8b2780b
jb 0x7c8370e2
invalid
test eax, 0xf5986508
pop esi
or byte [ebp - 0x70], 0xfc
push cs
xchg esp, eax
pop ebx
or byte [ebx + 0x49], bh
ror dword [ebp + 0x28], 1
sub byte [edi], ah
mov bh, 0xdd
dec ebp
sbb byte [eax + 0x5608375e], bl
sub dword [edi - 0x2a4faebb], ebx
push eax
and eax, dword [esi + 0x56556fdb]
daa
sahf
cmc
mov dl, 0xf7
popal
outsd dx, dword [esi]
movsb byte es:[edi], byte [esi]
or al, 0x75
add byte [ebp + 0x753c3dc9], 0x8b
and ebp, dword [esi]
imul edi, dword cs:[ecx + 0x2d], 0x106b968a
sub eax, 0x106b968a
inc ebx
and al, 0x39
dec esp
mov cl, 0x40
xchg ecx, eax
test esi, 0xf6deb4a6
mov bl, byte [esp + ebp*2 + 0x68]
xchg ebx, eax
insd dword es:[edi], dx
mov ch, 0x4f
pop ss
scasd eax, dword es:[edi]
outsb dx, byte [esi]
mov al, 0xe7
cmp eax, 0xd60c946
sal dword [edx - 0x490a8c68], cl
push edi
pushal
or eax, 0x7398b2d3
cmc
mov dh, 0x57
cmp ch, byte [esi - 0x523d4858]
cmp al, 0x4b
pop ecx
adc ebx, edx
cmpsb byte [esi], byte es:[edi]
cmp eax, 0x7c1ed93b
cmp esi, dword [esi - 0x2d]
jno 0x7c837265
aas
push ebx
xor al, 0xcb
mov al, 0x4f
js 0x7c8371dc
sub byte [esi + 0x66037fe9], dh
mov edx, 0x2da2d837
cmp al, 0x96
or esp, dword [edx - 0x1f]
jge 0x7c8371a5
pop eax
lds ecx, [esi - 0x5449d4e1]
fcomp qword [edx - 0x6346276]
mov esp, 0xaf526353
sti
sbb byte [ecx], dh
sbb eax, 0x4617186c
pop ss
pop ecx
adc al, byte [ecx + edi*2 - 0x2c30f362]
jecxz 0x7c83723c
test byte [ecx - 0x62], bh
or al, 0xcf
shl ebx, cl
clc
pop ebx
xor ecx, ecx
cmp ch, byte [ebp - 0x3d]
cld
int3
mul esi
invalid
pop ds
mov dword [esi - 0x50292eb6], edx
inc esi
pop edx
and bh, dh
invalid
inc ah
ljmp 0x47d0
invalid
add eax, 0x89baca85
pop esp
dec eax
sub ecx, dword [ebp + 0x355b3a1d]
and dh, byte [eax]
cmp eax, 0xa4cd0b62
jp 0x7c83dad3
push esi
or byte [ecx - 0x77981063], cl
pop eax
inc edi
inc ebp
mov edx, 0x71761122
std
dec ebx
insd dword es:[edi], dx
outsd dx, dword [esi]
adc al, 0x6f
xchg edx, edi
mov esi, 0x8a4504d4
jl 0x7c83db3b
and byte [edi - 0x18], bh
dec ebp
push 0x8cefd91
aad 0xf3
cmp cl, byte [ebx]
inc edx
and dword [eax + 0xeb276f3], ebp
xchg edi, eax
sti
xchg esp, eax
push edi
retf 0x5e1e
sar dword [edx], 0x8f
jge 0x7c83daf8
and dl, byte [eax + 0xa1f5e7a]
fstpnce st(7), st(0)
std
add dword [edi - 3], ecx
movsb byte es:[edi], byte [esi]
sbb dword [edx - 0x26e573a2], eax
stosd dword es:[edi], eax
sub dl, byte [ebp - 9]
pop edi
invalid
cmp al, 0x4f
sal esp, 1
pop esi
popfd
mov word [ecx - 0x69c173a5], cs
xchg edx, eax
or ebx, edi
daa
stc
xchg edi, eax
or eax, 0xffffffc6
adc byte [esi - 0x2e48df0d], dh
cmp ah, byte [ecx]
jp 0x7c83db4d
push ecx
add byte ss:[edx - 0x6a], dh
sahf
lodsd eax, dword [esi]
into
fidiv dword [eax + edx*8 - 0x5667c7b1]
mov eax, dword [0x2f9860db]
test eax, 0x9860dba1
das
jl 0x7c83dc1d
ret
in al, 0xe1
iretd
insd dword es:[edi], dx
imul edx, dword [ebp - 0x51], 1
movsb byte es:[edi], byte [esi]
mov eax, dword [0xf1c262e4]
in al, 0x62
ret 0x76f1
jbe 0x7c83dc0c
adc al, 0xa6
cmpsb byte [esi], byte es:[edi]
aas
push 0xa517eaa2
jb 0x7c83dba6
rol bl, 0x3c
jl 0x7c83dc52
js 0x7c83dbce
cmpsd dword [esi], dword es:[edi]
xor bh, al
neg ebx
retf 0xe77
fcmovne st(0), st(2)
ja 0x7c83dc1e
invalid
sbb eax, 0x208cae20
scasb al, byte es:[edi]
invalid
and byte [esi - 0xf51df74], ch
aad 0xaa
fild word [ebx - 0x39]
cmp ebx, esi
add al, 0xc4
jecxz 0x7c83dbf6
cmp bh, ah
js 0x7c83dbd4
das
std
xor dword [ebp + 0x4157e50c], edx
xchg ecx, eax
push esp
xor al, byte [ebp + 0x7a]
or dword [eax], edi
adc ebx, dword [eax]
sal dword [eax - 0x23811c6], cl
invalid
out dx, al
invalid
test eax, 0x66c22ed1
aas
aas
jmp 0x7c83dbf2
jmp dword [esi]
sbb ebx, dword [edx - 0x3b]
pop ebx
test al, 0xe2
dec ecx
fcmove st(0), st(0)
mov ch, 0x69
xor dword [ebx], ebx
mov cl, 0x28
out dx, al
scasb al, byte es:[edi]
invalid
mov esp, 0x79d8f669
jmp 0x31acc625
das
wait
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
sbb dh, byte [ecx]
mov ch, 0xb9
jg 0x7c83dd72
mov bh, 8
test dword [ebp - 0x62], 0x78a9682a
fldenv [ebp - 0x2d]
invalid
fldcw word [0xa654b727]
mov ch, 0x84
mov word [0x47494c73], gs
pop ecx
mov bl, byte [edi - 0x37c04ad4]
pop edx
pop eax
push eax
out 0xba, al
sbb edi, dword [eax]
xchg dword [eax + 0x33eb87c], esi
ja 0x7c83e0d0
ret 0xf40e
push 0x578e7582
inc ebx
push esi
lodsb al, byte [esi]
and eax, 0x7b00864d
adc eax, 0xcccbc8de
sbb eax, dword [esi - 0x3e]
invalid
jg 0x7c83e19e
int3
and dword [ecx + 0x38], ebx
mov bh, byte [edi - 0x5ca2e7fe]
push 0xffffffffffffffbc
sbb bl, byte [ebp - 0x5d]
cmp dword [ecx - 3], ecx
jmp 0xf761146d
insb byte es:[edi], dx
test byte [ebp - 0x35f26af7], ch
mov dl, 0x6c
dec ebp
enter 0xffffffffffffc93f, 0x6f
invalid
dec esp
rol dword [ecx + 0x7c637ad6], 1
push esi
fnstenv [eax + ebp*8 - 0x5b3fafb7]
adc al, 0x60
add ecx, dword [ecx]
mov dl, byte [edi]
pop esi
lea ebp, [ecx - 0x6c8abc59]
in eax, 0xb7
xor ecx, esp
insd dword es:[edi], dx
and eax, 0xc88b5e01
invalid
adc byte [ebx - 0xf], bl
xor ah, byte [ecx - 0x559408c0]
xor byte [esi], 0x13
jno 0x7c83e20a
adc byte [edi + 0x4af1f1a5], 0x17
jecxz 0x7c83e2aa
sub byte [ebp - 0x39], bl
dec ebx
pop edi
dec eax
inc ecx
invalid
mov ch, 0xe6
mov cl, 0xd1
imul esp, dword [edx + 0x6b], 0xffffff81
sub byte [esi + 0x4191762a], bh
pop esp
mov word [esi], ss
out dx, eax
arpl word [edi + ecx], ax
in al, dx
dec eax
salc
jecxz 0x7c83e314
mov al, byte [0x6710ca4a]
leave
push ebp
push ss
jns 0x7c83e272
xlatb
invalid
mov bl, 0x69
outsd dx, dword [esi]
stosb byte es:[edi], al
loop 0x7c83e2eb
mov ebx, 0x671bc517
mov ss, word [ebp - 0x47]
or dword [edi + 0x26c7d23c], eax
sbb al, 0xe5
lcall 0x7d70, 0x9c74c4ac
mov cl, 0x87
outsb dx, byte [esi]
popfd
in al, 0x2a
jnp 0x7c83e2aa
invalid
fistp word [esi]
xor eax, 0xf708a4a3
out dx, al
call 0x38b6dc21
sub ecx, dword [edx - 0x1aaa7372]
sbb byte [ebp - 0x76dd78d6], ah
jb 0x7c83e30a
stc
xor bh, byte [ebx + ebp + 0x558c8e8a]
in eax, 0x18
movsd dword es:[edi], dword [esi]
sub al, byte [edi - 0x108d76de]
mov bh, byte [esi - 0x7c]
outsd dx, dword [esi]
xchg esp, eax
lahf
mov cl, 1
jae 0x7c83e3a2
inc ecx
lodsb al, byte [esi]
fistp qword [edx - 0x2123ca0a]
or eax, 0xe8865965
pop ecx
xchg al, ch
mov esp, dword [ecx]
jg 0x7c83e3a1
jno 0x7c83e341
jnp 0x7c83e32f
mov byte [edx], ah
push edi
test eax, 0x558d1f13
push ebp
fxch st(5)
dec edx
add esp, ecx
xchg esi, eax
salc
in eax, 0x65
out 0x1d, eax
push ebp
add eax, 0x9aa432f6
xchg esp, eax
push esp
in eax, dx
jl 0x7c83e3d3
movsb byte es:[edi], byte [esi]
cmp cl, ch
invalid
mov word [ecx - 0x45], ss
mov esp, 0x5c754cca
push ecx
mov ebx, 0x754ccabc
pop esp
into
jmp 0x7c83e3e4
lahf
pushfd
out 0x55, al
popfd
pop fs
push 0xe168a314
fldcw word [0xefc4d63]
cld
push cs
sub ebp, dword [edx + 0x5f]
test byte [eax - 0x64f0974a], bh
xor dl, byte [0x767174f]
pop ebp
aaa
cmp dl, cl
jne 0x7c83e427
dec edx
xchg ebx, eax
jb 0x7c83e460
aad 0xb8
cld
mov dword [0x351d4e0e], eax
out dx, eax
rcr byte [ecx + 0x3c], 0x2f
int1
sahf
inc edi
in al, dx
loop 0x7c83e3a9
fdivr dword [esp + ebp*4 + 0x3f]
insd dword es:[edi], dx
in eax, dx
inc edi
rcr dword [esi - 0xa2c0afd], 1
jns 0x7c83e401
push esp
invalid
cli
dec ebp
push ecx
xchg esp, eax
or eax, 0x107fb915
jae 0x7c83e425
sbb dword [esi], ebx
push ebx
xor al, byte [eax - 0x26]
pop ds
and ebp, ebp
into
out 0xde, al
jp 0x7c83e499
mov byte [esi + 0x2ead9862], dh
and al, 6
or byte [esi + 0x6f0efc88], 0xab
push cs
outsd dx, dword [esi]
stosd dword es:[edi], eax
cmc
add dl, ah
js 0x7c83e44a
add esi, dword [ebp + edx*4 + 0x5c]
stc
jno 0x7c83e486
or esi, dword [edi - 0x59]
cmp byte [esi - 0x22], bl
wait
inc dword [ecx - 0x27594a41]
sahf
fisttp word [edi]
invalid
cwde
aad 0xbb
invalid
push esp
call 0xfd4b14f8
mov ebx, es
arpl word [ebx - 5], sp
push ebx
sbb byte [edi], al
outsb dx, byte [esi]
mov edi, 0x639080e
insb byte es:[edi], dx
and al, 0x56
and esi, edi
inc esp
and byte [ecx], 0x76
aad 0xb7
test al, 0x47
sub eax, 0xf6d5c9a7
mov al, 0x8f
lodsd eax, dword [esi]
push edi
imul eax, dword [eax - 0x35], 0xffffff97
or ah, dl
and byte [eax], bh
in eax, 0xd9
xchg byte [eax], dl
pop ebx
xor al, 0x56
mov dword [ecx + 0xfa2bc91], ebp
inc ebp
cmpsb byte [esi], byte es:[edi]
test ebp, esp
jmp dword [edx + esi*4]
pushfd
fiadd word [esi - 0x36]
aad 0x2a
outsd dx, dword [esi]
js 0x7c83e6af
xchg ebp, eax
sub ah, dl
push esi
popfd
out dx, eax
inc ecx
pop ebp
mov ch, 0xfc
ljmp 0x60dd
xlatb
in eax, 0xc9
into
movsb byte es:[edi], byte [esi]
movsb byte es:[edi], byte [esi]
adc dl, byte [edx]
clc
stosd dword es:[edi], eax
push ebp
invalid
pop ecx
ror bh, 1
pop ss
jb 0x7c83e8ff
mov dh, 0x12
xor eax, 0xc04d7cf8
invalid
mul byte [ebx + eax - 0x21]
add ebx, edi
and dword [0x821df16f], eax
push 0x48
int3
jg 0x7c83e8a3
cmp eax, 0x890355e
mov dl, 0x3b
push edi
jno 0x7c83e987
push es
into
sub dword [eax], edi
or byte [eax - 0x19], 0xf
into
fistp word [ebx - 0x55]
stosd dword es:[edi], eax
adc byte [edi - 0x22], dh
mov ah, 0x4a
push ebx
sub edi, esp
mov edi, 0xf844e3ab
fnstenv [esi + 6]
ret 0x70f
and dword [eax], 0x68
add eax, 0x2ff78b2a
pop ss
mov esp, dword [edi + 0x41c009ff]
cmp al, 0xb
mov al, byte [0x504e0606]
push es
push es
dec esi
push eax
push ebx
call 0xe82c8d0
inc ebx
int 0x7b
invalid
add byte [esi - 0x13], al
jne 0x7c83e990
inc esi
push eax
sub al, byte [ebx + 0x5d2bddfb]
add eax, 0x58578460
sti
invalid
test byte [edi + 0x58], dl
sub dl, byte [eax]
lodsd eax, dword [esi]
dec eax
sub byte [edx + 0x6aae15f1], ch
pop ds
add eax, 0xf932f141
scasd eax, dword es:[edi]
add ecx, dword [eax]
pop eax
mov ch, 0x21
add ah, byte [ebx - 0x2ffc3085]
leave
xor dl, ch
inc ecx
or edi, dword [esi]
in al, dx
fldcw word [eax]
mov dword [eax], ecx
dec ebx
popal
movsb byte es:[edi], byte [esi]
ljmp 0xd9ec:0x653e0b41
bnd jle 0x7c83ea22
push ebx
in al, 0x70
jg 0x7c83ea33
imul bx, word [edx], 0x61
imul ebx, dword [edx], 0x61
inc esp
push edi
xchg ebp, eax
jo 0x7c83e961
push es
jge 0x7c83e9c4
mov edi, 0x85cb38f3
aam 0xab
pop edi
int1
jl 0x7c83ea60
cld
push edi
sbb byte [edi - 0x67d4f0ed], ch
test al, 0x8a
adc byte [edi - 0x1f59a0b3], 0x37
pop ebx
xor ebx, dword [edx - 0x5d]
or cl, byte [esi]
mov ch, 0x29
sal byte [ecx + 0x1d], 0xb4
xor byte [eax], 0x81
jbe 0x7c83e9fb
sub eax, eax
jno 0x7c83ea1c
mov ah, 0x82
xor byte [ecx + 0x1ef5762e], al
push ds
scasb al, byte es:[edi]
sbb ch, dl
adc al, 0x8e
movsb byte es:[edi], byte [esi]
ror byte [esi - 0xdaa786e], 0x74
stc
xor ebx, edx
mov esi, 0x8af9f4ec
sti
pop ebx
aam 0xbb
lodsd eax, dword [esi]
and ebp, edi
out dx, eax
mov dword [0x6b2f3e39], eax
wait
xor eax, 0xfc1dee40
in al, dx
xchg ecx, eax
sbb ebp, dword [eax + 0x51]
fstp qword [edi + 0x601d8b29]
cmovno ebx, dword [edx - 0x80]
insd dword es:[edi], dx
mov esp, 0xeb6c5d41
and bh, byte [esi - 0x673e7d2a]
sbb eax, 0x5a410f60
sub byte [ebp - 0x44], 0x41
pop ebp
insb byte es:[edi], dx
jmp 0x7c83ea66
mov esi, 0x98c182d6
add bl, byte [ebx + 0x59b029ad]
ja 0x7c83ea54
xchg ebp, ecx
adc dl, ah
sub al, 0x7b
in al, dx
loop 0x7c83ea82
jnp 0x7c83ea44
mov edi, esi
fsubr st(3)
add al, 0x9b
and esp, dword [ebp + 0x297bb590]
int3
nop
mov ch, 0x7b
sub esp, ecx
scasb al, byte es:[edi]
nop
movsd dword es:[edi], dword [esi]
or eax, 0xa03f5ca8
fcmovnu st(0), st(7)
mov al, byte [0xcd7770e]
or dl, byte [edi - 0x51]
clc
out 0xb9, eax
cli
je 0x7c83ea42
or byte ds:[ebp + 0x39], bl
push ss
sbb eax, 0x88bc3762
add al, 0x98
sti
shr eax, cl
test eax, 0x8afc18fc
sub cl, byte [esp + ebx*2 - 0x3260bcfd]
imul esp, edx, 0x37
cdq
call 0x6b197029
inc ecx
in al, 0x9d
stc
scasd eax, dword es:[edi]
vsqrtss xmm3, xmm0, xmm3
fbstp tbyte [ecx + 0x2c7c9676]
invalid
sbb bh, byte [ecx + 0x49]
shr dword [esi], 0xb6
push esp
invalid
xchg byte [edi], bh
ror byte [esi + 0x55460f9], cl
in al, dx
mov byte [0x6822d256], al
inc edx
invalid
jg 0x7c83ec61
js 0x7c83ebe7
std
mul byte [ecx]
ljmp 0xa093
rcr byte [ebp + 0x12], 1
lodsb al, byte [esi]
sub al, 0x5a
add ch, cl
and eax, 0xdabb04d5
retf 0xa979
test eax, 0x3bf8e8ad
idiv byte [ebx + 0x2ad9a412]
retf 0xb4fb
push esi
cmp dword es:[ebx + 0x7079f987], esi
xchg edi, eax
pop esi
sub ecx, ebx
sbb al, byte [esi + 0x15]
mov dword [0x34bd8848], eax
pop ebp
mov eax, dword [0xa25f6101]
mov ebx, 0xbf04b2a9
inc eax
cli
stosb byte es:[edi], al
xchg esp, eax
pop eax
leave
adc ebp, dword [esi]
nop
inc edx
sub al, 0x8b
fidivr dword [ebx - 0x31]
shl dword [edi + 0x51ae90bb], cl
sbb cl, byte [ebx - 0x6ad2f4a4]
cmpsb byte [esi], byte es:[edi]
mov ah, 0x64
push edi
pop ebx
dec edi
push edi
sub ah, bh
mov ecx, 0x992c1ddc
jns 0x7c83ecc7
jnp 0x7c83ec06
aaa
pop ss
movsd dword es:[edi], dword [esi]
out 0x5c, al
daa
ficom word [edi - 0xf]
stc
cld
pushal
mov dl, 0x22
iretd
loop 0x7c83ecfd
invalid
mov eax, 0xaffa33a
mov bl, 0x83
retf
add cl, dh
nop
push esi
and bl, byte [edi]
adc dword [ebp - 0x4857cf17], ebx
cmp esi, dword [ebp - 0xc7a6cc5]
mov ch, bl
leave
or eax, 0x55598601
stosb byte es:[edi], al
je 0x7c83ed6c
cmp al, 0x7f
xor ecx, edx
sar dl, cl
leave
cmp dword [0x17d3218c], 0xe4d4f360
call 0x46196149
jb 0x7c83ecca
adc edx, dword [esi]
popfd
dec edi
pop ebx
jp 0x7c83ed99
inc edi
shl dword [ecx], 1
invalid
std
mov ecx, 0xfd4ab591
inc edx
cmp ebx, dword [edi]
clc
pop es
scasd eax, dword es:[edi]
or eax, 0xd3f7c4d9
push edx
wait
fsub dword [esp + esi - 0x5e7d11cf]
cmp dword [ecx - 0x71], 0xf480bfea
insd dword es:[edi], dx
adc al, 0x1e
ror dword [edi], 1
cmp al, 0x62
out dx, al
fist word [ecx + 0x4d2ef447]
dec ebp
mov byte [edi + 0x5bd2e644], ah
cwde
cld
in eax, dx
mov esp, 0xf4d7fe0f
lcall 0x16b2, 0x42998327
add al, 0xe
push es
cwde
inc ebx
aas
xabort 0xfffffffffffffffc
sub cl, byte [eax + 0x4eff1e11]
in al, dx
test byte [ebx - 0x59], cl
bound esp, qword [eax + 0x26747fc4]
loope 0x7c83ed8d
dec ebx
bound ebp, qword [esi]
mov edi, 0xfd9632ea
out dx, al
add dword [ecx - 0x1f9956fc], 0x18ca132d
out 0x91, eax
push ds
daa
cmovo ebp, edi
in al, 0x5f
adc byte [ebp + 0x63], 0x41
scasb al, byte es:[edi]
mov dl, 0xef
pop ss
push ebx
and edi, dword [ecx - 0x5f63d2c]
push esp
or bh, dh
jae 0x7c83eddf
std
xlatb
jg 0x7c83ee49
and dword [si], ebp
dec esi
push edx
cdq
ret 0x5ec4
and eax, dword [esi]
imul ecx, dword [esi + 0x990ba45], 0x19571a7
cmp ebp, dword [ebx + ebx*8 - 0x37]
in al, 0x3c
pushfd
sbb al, byte [eax + 0x15bf26a9]
cmpsd dword [esi], dword es:[edi]
mov dl, 0x6f
cmp dh, byte [ebx + ebx*8 + 0x2147dc74]
salc
fnstenv [eax]
jo 0x7c83eec5
adc eax, 0xffffffa1
push 0x1f
push ss
invalid
mov dh, 0x39
sub byte [ebx - 9], ch
sub dword [edi], ebp
mov byte [0x8a922fdf], al
mov ah, 0xbb
test eax, 0xfd549054
fild dword [esi + 0xd]
jb 0x7c83ef44
pop eax
fild qword [esi - 0x3de4e2c4]
salc
int 0x2b
inc esp
int3
into
mov dh, byte [ebp - 0x66]
pop edi
and al, 0x7d
xchg dword [ecx + 0x7d36f627], ebp
inc ebp
push ebp
and al, 0x5d
pop eax
lodsb al, byte [esi]
iretd
cld
and edi, ebp
lds ebp, [edx + 0x34]
adc dh, byte [edx - 0x38]
push ds
pop es
pop ebp
push 0xffffffffffffff97
sbb byte [edx + esi - 0x79], al
xchg edi, eax
or eax, 0x93428389
push ecx
pop ebp
dec esp
xor al, 0xd3
and al, 0xfd
adc eax, 0x76cecc58
dec ebp
xchg ecx, eax
jmp 0x7c83eef0