Function at 0x6459b7
Capabilities:
Check os version
Resolve function by parsing pe exports

Disassembly:
xor dh, dl
jmp 0x6e48a6
lea esp, [esp + 0x20]
ja 0x64328c
call 0x645d06
add byte [eax], al
inc edi
insb byte es:[edi], dx
outsd dx, dword [esi]
bound esp, qword [ecx + 0x6c]
push ebp
outsb dx, byte [esi]
insb byte es:[edi], dx
outsd dx, dword [esi]
arpl word [ebx], bp
pushal
lea esp, [esp + 0x30]
jne 0x6437cf
shr cl, 2
stc
shl cl, 2
jmp 0x6456ab
call fcn.006458fd
shr ecx, 1
jmp 0x644ab8
push 0xfede4ae4
adc dl, dl
push 0x6f4124b1
lea esp, [esp + 8]
jae 0x6dc805
bsf ax, si
bsf eax, esi
call fcn.006e48c4
add byte [eax], al
inc edi
je 0x64162b
jb 0x641646
jbe 0x641640
je 0x641646
push eax
jb 0x641653
imul bp, word [ebp + 0x53], 0x7274
imul ebp, dword [esi + 0x67], 0x4daa0041
and al, 0
or byte [ecx], bh
and al, 0
and ah, byte [edi]
and al, 0
lds edx, [ebp + 0x24]
add byte [ecx - 0x5effd369], ch
push 0x9d910024
sub al, 0
jns 0x6415cd
sub eax, 0x2d8ffb00
add byte [esi], ch
inc eax
and al, 0
dec eax
add byte cs:[0xe3002e39], dl
shr dword [0x2de08700], cl
add byte [edi + 0x35], ah
and al, 0
cmp al, 0x2e
add bl, dh
cmp al, 0x2e
add al, bl
sub dword [esi], ebp
add byte [esi], dh
inc ecx
add byte cs:[edx + 0x66], al
and al, 0
ja 0x641665
add byte cs:[eax - 0x41ffdbc4], cl
das
mov byte [esp], bh
add byte [esi - 0x66ffdbd1], bh
and al, 0
cdq
mov dword [0x4823002c], eax
add bh, ch
cmp dword [eax + eax], esp
and byte [edx + 0x5a22002c], ah
add byte [eax], ah
mov byte [0x5a22002c], al
and al, 0
dec ebx
daa
and al, 0
pop ebp
pushal
and al, 0
fld xword ds:[0x24397400]
fld xword [0x24397400]
add bh, ch
sahf
sub al, 0
fcom qword [esi + 0x2f]
add byte [edx - 0x5e], al
sub al, 0
pop eax
aas
add byte cs:[esp + ebx*4], dl
sub al, 0
add byte [eax], al
add byte [eax], al
push ebp
xor eax, 0x5e3d0024
and al, 0
sub eax, 0xaf002dc5
sahf
sub al, 0
add byte [eax], al
add byte [eax], al
dec ax
and al, 0
lodsd eax, dword [esi]
popfd
sub al, 0
lodsb al, byte [esi]
cmp dword [esi], ebp
add byte [eax], al
add byte [eax], al
add byte [esi - 0x2cffdbd6], ch
shr byte [0x2e217d00], 1
add byte [eax], al
add byte [eax], al
add bl, bl
mov byte [0x39cf002c], al
and al, 0
imul edi, dword [edi], 0x8fa00024
sub eax, 0x2c9d9100
add byte [ecx - 0x41], bh
sub eax, 0
add dh, ah
rcr byte [eax + eax], cl
mov ch, 0x1f
add byte cs:[ecx + 0x5900246c], dl
add cl, dl
and ch, byte [esi]
add byte [ebx], dl
int 0x2d
add byte [esi + 0x48], ah
and al, 0
daa
aam 0x2d
add byte [ebp - 0x5ffd363], ch
and al, 0
push edx
pop edx
and al, 0
pop esp
mov byte [0x3d82002c], al
add byte cs:[ebx + 0x4a], dh
and al, 0
push ebp
das
add dl, ah
pop eax
das
add byte [ecx + edi + 0x5e7e002e], ch
and al, 0
jo 0x6416f1
sbb al, 0
dec esp
pop ebx
and al, 0
xor al, 0x39
add byte cs:[edi], ah
push esi
and al, 0
ja 0x641775
and al, 0
mov dh, 0x22
add byte cs:[eax - 0x5d], al
sub al, 0
invalid
sahf
sub al, 0
xchg ecx, eax
invalid
je 0x5cd3c9
stc
or ecx, ecx
pushfd
call fcn.00646522
add byte [eax], al
push ebx
je 0x64272e
arpl word [edx + 0x6f], si
insb byte es:[edi], dx
insb byte es:[edi], dx
push eax
outsd dx, dword [esi]
jae 0x6426e4
add byte [eax], al
push ebx
je 0x64273f
outsb dx, byte [esi]
push 0x6c646e61
inc ebp
js 0x642758
jo 0x64276c
imul ebp, dword [edi + 0x6e], 0x746c6946
jb 0x642702
jmp dword [sym.imp.kernel32.dll_GetVersionExA]
arpl word [ecx + 0x6c], sp
push ebx
arpl word gs:[ecx + ebp*2 + 0x6f], si
outsb dx, byte [esi]
add bh, dh
fisub dword [esi - 0x2d]
mul dword [esi - 0x7f]
aad 0xda
out dx, eax
pop edx
dec esi
adc ebp, 0x4e5aefda
pushfd
jmp 0x6e3c3c
add byte [eax], al
add byte [ebx + 0x48], dl
inc edi
je 0x6427ae
popal
insb byte es:[edi], dx
insb byte es:[edi], dx
outsd dx, dword [esi]
arpl word [eax], ax
add byte [eax], al
push ebx
outsb dx, byte gs:[esi]
dec ebp
jae 0x6427e4
popal
push esp
imul ebp, dword [ebp + 0x65], 0x4174756f
add byte [eax], al
add byte [ebx + 0x65], dl
je 0x6427da
imul ebp, dword [esi + 0x4d], 0x46617465
imul ebp, dword [ebp + 0x42], 0x737469
add byte [eax], al
inc esi
jb 0x6427fc
inc ebp
outsb dx, byte [esi]
jbe 0x642805
jb 0x64280d
outsb dx, byte [esi]
insd dword es:[edi], dx
outsb dx, byte gs:[esi]
je 0x6427f7
je 0x642818
imul ebp, dword [esi + 0x67], 0xe9005773
test al, 0xa3
or dword [eax], eax
mov dword [0x44890009], eax
and al, 4
mov dword [esp + 4], eax
push ecx
pushal
mov dword [esp + 0x24], 0
call 0x6d8a89
or dword [eax], eax
ja 0x642813
pop edx
or byte [ecx + 0x30d77b9d], cl
push eax
ja 0x642811
xchg ebp, eax
sub ebx, ebp
mov ebx, 0xe9dab0e5
shr dword [ecx + 0x479fcea2], 0x26
xchg ebx, eax
test eax, 0x479fcea2
xchg ebx, eax
mov dword [esi], ebx
jp 0x642857
mov byte [0x7a481e77], al
invalid
pop edi
inc esi
invalid
cmp al, 0x84
push es
invalid
cld
push ebx
sub byte [ecx], al
adc ebp, dword [ebx - 0x5e]
sbb dword [edi - 0x23], esp
cmp ch, byte [esi]
fnstsw word [bp + si]
pushal
pushal
jo 0x64279f
mov ebp, ecx
salc
stosd dword es:[edi], eax
fadd dword [ebx + 0x26546dbe]
and dword [ebx], edx
jmp 0x843cd3ef
cmp dword [esi + 0x2126546d], 0x13
mov esi, 0x2126546d
adc edi, dword [ebx - 0x5f]
jnp 0x6427c2
mov edi, esp
jns 0x642831
outsd dx, dword [esi]
sbb byte [ebp + 0x1e], bl
jnp 0x642830
test dword [ecx], eax
ja 0x642835
invalid
in eax, dx
scasd eax, dword es:[edi]
aad 0x39
xlatb
aam 0xf5
add byte [esp + esi*8 - 0x37fa6876], bl
mov ebx, 0xc41b80c4
popal
invalid
push esi
jnp 0x64287a
lahf
call 0xd4113b02
mov ebp, 0xd07b9d88
cmp al, 0xbd
or dh, byte [ecx - 0x132e76e5]
add byte [edi + 0x1e9b23f9], bl
xor eax, dword [eax + 0x530fc41b]
push ebx
test dword [ebx], ecx
jbe 0x642819
mov dl, 0xa0
mov esp, 0x8c9b3bf7
ljmp 0xe9b6
pushfd
xadd al, ch
mov ecx, edi
lea esp, [esp + 4]
dec al
rcl al, cl
rcr al, cl
dec al
mov al, byte [ecx]
cmp ah, dh
call fcn.006420a6
add byte [eax], al
dec ecx
jae 0x6429e4
popal
insb byte es:[edi], dx
imul esp, dword [ebx + eax*2 + 0x6f], 0x61506564
add byte gs:[bx + si], al
add byte [edi + 0x65], al
je 0x6429f8
imul ebp, dword [esi + 0x64], 0x6554776f
js 0x642a1e
dec esp
outsb dx, byte gs:[esi]
je 0x642a18
push edi
add byte [eax], al
add byte [ebp + 0x6f], cl
jbe 0x642a1d
push esp
outsd dx, dword [esi]
inc ebp
js 0x6429bd
lea esp, [esp + 0x30]
jae 0x6d9bfb
jmp 0x64663d
cli
adc dword [edi + 0x37], 0x1b04f085
xor bh, byte [esi - 0x748b642d]
push edi
push eax
mov ah, 0xdd
pop eax
add al, 0xd5
rcl edi, cl
aad 0xd3
xlatb
add dword [edx - 0x4b42f99c], edi
invalid
sbb al, 0x94
push edx
dec ebp
cmp al, byte [ebx - 0x20]
xor eax, 0xd73cdec0
inc ebx
loopne 0x642a55
rcr dh, 0x3c
xlatb
mov edi, 0xe19c52c1
pop ebp
nop
xor edx, dword [eax - 0x6688621b]
mov al, 0
add byte [edi + 0x65], al
je 0x642a86
outsd dx, dword [esi]
jne 0x642aa9
dec eax
popal
outsb dx, byte [esi]
insb byte es:[edi], dx
push edi
add byte [eax + 0x7223e901], cl
or dword [eax], eax
add byte [eax], al
inc edi
je 0x642a96
outsd dx, dword [esi]
insd dword es:[edi], dx
jo 0x642acc
je 0x642abe
jb 0x642aa9
popal
insd dword es:[edi], dx
inc ecx
add byte [eax - 0x73], ah
and al, 0x20
call fcn.006d9828
pushal
mov word [esp + 4], 0x12e0
adc dl, dl
call 0x6e3f39
add byte [eax], al
inc ebx
push 0x6f4c7261
ja 0x642ae8
jb 0x642ac7
jne 0x642aed
inc cx
inc cx
add byte [eax], al
add byte [ebx + 0x65], dl
je 0x642b05
jo 0x642ad6
imul eax, dword [edi + 0x65], 0x76654474
imul esp, dword [ebx + 0x65], 0x69676552
jae 0x642b16
inc esp
jbe 0x642b03
arpl word [ebp + 0x52], sp
imul esi, dword gs:[bp + di + 0x74], 0x72507972
outsd dx, dword [esi]
jb 0x642b1d
push eax
jb 0x642b16
jo 0x642b0e
jb 0x642b1f
jns 0x642aee
add byte [eax], al
add byte [ebx + 0x79], dl
jae 0x642afa
jb 0x642b1b
push ebx
push ebx
je 0x642b2c
imul ebp, dword [esi + 0x67], 0x5d351f00
xchg esp, eax
leave
pop ss
pop ds
xor eax, 0x17c9945d
dec ebx
mov ch, 0x4c
in eax, 0x6e
outsd dx, dword [esi]
scasb al, byte es:[edi]
push ss
mov edx, 0x539154d3
xchg edx, eax
fistp qword [ebp + edi*4 - 0x60e3eb7f]
adc al, 0x1c
lahf
add al, 0x69
mov bh, byte [eax - 0x43]
inc ebp
sub eax, 0xa6f887c7
mov edx, ebx
inc eax
or byte [edi + 0x53], cl
dec edi
push ebx
sbb ebx, dword [esi - 0x4af432a1]
pop eax
int 0xb
mov ch, 0x58
or esi, dword [ebp + 0xc6c6858]
xchg byte [0x622f5e31], bh
push 0x3d860c6c
xor dword [esi + 0x2f], ebx
bound edx, qword [ecx - 0x62074782]
xchg ecx, eax
jle 0x642ab5
clc
popfd
aam 0xd5
or al, byte [esi]
aad 0xa
push es
or ch, dh
aaa
inc eax
aad 0xdb
or eax, 0x36df2d4
cmc
cdq
add byte [edx + 0x547c07a9], al
push esp
mov dl, 0x74
adc byte [ebx + 0x39], bl
pop esp
cmp dword [esp + edi - 0x57], ebx
cmp al, 0xa9
xor ch, bl
and al, 0xdf
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
int3
xor dl, cl
add byte [eax - 0x4a], bh
cwde
add edi, edx
push ecx
mov edx, 0xb810c658
xchg dl, dh
sbb dword [ecx - 0x3c0157f5], ebx
jno 0x642bb0
adc dh, byte fs:[edi - 0x1fe7061a]
sbb al, 0xde
mov ecx, 0xeaf8f163
mul byte [ebp + 0x7df99f90]
into
pop esp
int 0x31
aam 0xa5
and ah, 0x65
int1
pop ecx
neg cl
aas
aas
jg 0x642b00
aaa
pop ds
add byte [eax], al
dec ecx
outsb dx, byte [esi]
jbe 0x642bd4
insb byte es:[edi], dx
imul esp, dword [ecx + 0x74], 0x63655265
je 0x642b7e
push 0x922154d1
sub ecx, 4
call fcn.006e2246
add byte [eax], al
inc edi
insb byte es:[edi], dx
outsd dx, dword [esi]
bound esp, qword [ecx + 0x6c]
inc esi
imul ebp, dword [esi + 0x64], 0x6d6f7441
inc ecx
add al, ch
invalid
jae 0x642b9b
invalid
bound ebp, qword [ebp]
add eax, 0x404
mov ecx, 8
call fcn.00643c61
add eax, 0x10
pop ecx
ret
insb byte es:[edi], dx
dec edi
jne 0x642c4d
jo 0x642c50
je 0x642c20
push eax
add byte [eax], al
add byte [edi + 0x65], al
je 0x642c38
jns 0x642c5a
je 0x642c4e
insd dword es:[edi], dx
push esp
imul ebp, dword [ebp + 0x65], 0x69467341
insb byte es:[edi], dx
push esp
imul ebp, dword [ebp + 0x65], 0xe9c88900
loop 0x642c6d
mov eax, ecx
jmp 0x6c9be2
or byte [eax], al
add byte [eax], al
inc edi
je 0x642c59
jns 0x642c7b
je 0x642c6f
insd dword es:[edi], dx
push eax
popal
insb byte es:[edi], dx
je 0x642c85
inc ebp
outsb dx, byte [esi]
je 0x642c88
imul esp, dword [ebp + 0x73], 0x24648d00
add al, 0xf
test dword [edx + 0x66000871], ebp
ror esi, 0xa
stosb byte es:[edi], al
jno 0x642c2b
add byte [esi - 0x3f], ah
into
or ch, byte [eax - 0x80]
imul edx, edi, 0xc1990fb8
push 0xb8d76980
setns cl
xlatb
mov eax, 0xfc1990f
mov edx, 0xf9891de9
bts ecx, 0x1d
mov ecx, edi
xor si, 0x20ad
sub ecx, ebx
pushfd
imul byte [ebp - 0x6326d6e0]
sal esi, 1
rcl si, cl
lea esi, [esp + 8]
stc
jmp 0x6e298d
add byte [eax], al
push esi
add byte [esi + 0x61], dl
popal
jb 0x642cbc
popal
outsb dx, byte [esi]
je 0x642c9a
push 0x65676e61
push esp
outsb dx, byte [esi]
push esp
jns 0x642ccf
add bh, bh
xor al, 0x24
rol al, 4
pushfd
pushfd
bt esi, 0x16
pushfd
sub al, 0x2e
pushal
pushal
cmp al, byte [edi]
push 0x84dc3ca1
not al
lea edi, [edi + 1]
jg 0x642c7e
lahf
mov al, byte [esp + 4]
mov eax, dword [esp + 0x38]
jmp 0x6c97b7
cmp cl, ch
sub al, 0x6b
or byte [eax], al
imul ecx, dword [eax], 0
add byte [eax], al
inc esp
jae 0x642d05
jb 0x642d02
jns 0x642ce2
outsb dx, byte gs:[esi]
jne 0x642c99
rcr bl, cl
bswap bx
bsr bx, dx
or bx, si
mov bx, word [esi]
push 0xe6a1533c
pushal
jmp 0x64489a
invalid
inc eax
jne 0x642d0c
pop eax
jge 0x642d1e
push 0x6154734a
and esi, ebx
les ebx, [0x41462f58]
lds esp, [edi + 0x5a]
and byte [0xb6c53b39], bl
test eax, 0xf1064a4b
fistp word [ecx + 0x51275f55]
push ecx
push 0x34
pop esi
arpl word [ebp - 0x67], ax
adc al, dl
sbb bl, byte [edi + 0x774a8634]
or eax, 0x8975d2ea
add byte [ebx], cl
out dx, eax
popal
hlt
sbb al, 0xcd
jo 0x642d51
dec ebx
cmp byte [edi], 0xc9
sbb al, 0xba
or esi, ecx
into
stosb byte es:[edi], al
je 0x642d0d
int 0x27
arpl word [edi + 0xd], bp
outsd dx, dword [esi]
add ch, byte [ecx + 0x267292e7]
jbe 0x642d25
sbb al, 3
outsd dx, dword [esi]
adc eax, 0x7e3d4024
dec esi
jle 0x642d75
mov esp, 0xffccbd5
shl dword [ecx + 0x58], 1
or eax, 0x356067f9
xchg esi, eax
imul eax, dword [edi - 0x6df38c1a], 0xffffffa9
sub eax, 0xcb5e68fa
dec esp
into
dec esi
xchg edx, eax
or eax, 0x5ddd8479
rcl dl, cl
loope 0x642dc0
imul esi, esp, 0xffffffbc
add eax, 0x83aae6b2
popfd
mov esp, 0xaae6b205
sbb dword [ebp + 0x4e88357b], 0xffffff88
jnp 0x642d8f
mov byte [esi - 0x78], cl
dec edx
jns 0x642d69
leave
out dx, eax
leave
cli
loope 0x642d72
xchg esp, eax
xor ah, byte [eax + 0x6d1cafb9]
mov al, byte [0x6d1cafb9]
push ebp
popal
pop eax
or eax, 0x79e3ebf5
xor eax, 0x876ae1db
cmc
jmp 0x642d58
jns 0x642dac
fdisi8087_nop
push 0xffffffffffffff87
out 0x39, al
push eax
mov bl, byte [0x3d9303c8]
imul esi, dword [edx + 0x4f], 0x75
cmp eax, 0x9a23c7e
into
add eax, 0x57cef7b1
mov cl, 0xf7
into
push edi
inc eax
mov dh, 9
retf
dec ebx
shr byte [bx + di], cl
xchg ebx, eax
sbb al, 0x26
push eax
push 0xf
invalid
mov ebp, 0x189e5600
nop
cmp edi, dword [esi + ebx*2 - 0x44]
push ebp
xchg byte [esi + 0x63], ah
pop ecx
xor dword [edi + 0x58], ecx
and al, 0xb7
iretd
call fcn.006436dc
pushal
lea esp, [esp + 0x28]
je 0x5cd3c9
bt sp, bp
aam 0x1b
sub ebx, ebx
aam 0xab
mov dword [ebp - 4], ebx
and cl, al
or ch, ch
mov eax, edx
and cx, 0xe9c5
sub cx, cx
sub cx, dx
shr eax, 0x10
sbb cl, 0xa6
cmp cl, 0x3e
mov ecx, dword [esi + 4]
cmp di, 0x3351
jmp 0x6c99a1
cmc
mov bx, di
shl bl, cl
shld bx, ax, 3
mov bx, word [esi]
pushfd
pushfd
and ebx, 0xfff
cmp dh, 0xef
jmp 0x6e3c25
shld ax, di, 0xc
mov eax, 6
clc
cmc
pushal
sub ecx, eax
call fcn.006dbf51
imul esi, dword fs:[bp + di], 0x6c642e32
insb byte es:[edi], dx
add byte [eax + 0x648d240c], cl
and al, 0x24
jb 0x6f5943
jmp 0x6dcbcc
sal bh, cl
movzx bx, bl
mov bx, word [esi]
jmp 0x5cd477
push dword [esp]
lea esp, [esp + 8]
call fcn.006d9828
jmp 0x6415b6
lea esp, [esp + 0xc]
ja 0x6e4229
jmp 0x6dc5b2
pushfd
mov esi, dword [ebp - 0x20]
and al, cl
not esi
ror al, cl
rcr al, 6
cmc
ror al, 7
add esi, edi
pushfd
push ebp
rep movsb byte es:[edi], byte [esi]
setl al
movzx ecx, al
xchg cx, si
bswap cx
mov esi, dword [esp + 0x28]
pushfd
mov ecx, dword [esp + 0x30]
pushfd
mov al, byte [edi - 1]
jmp 0x6dc87c
pushal
lea esp, [esp + 0x20]
jbe 0x6c9dce
bts di, 5
pushal
shrd si, sp, cl
sub ecx, 1
shr si, 7
call 0x6e4f8e
cmp bh, 0xa1
and ebx, 0xfff
pushal
bt sp, 6
add dword [ebx + edi], edx
sub esp, 0xffffffbc
pushal
mov edi, dword [ebx + ecx*4]
bt dx, cx
add edi, eax
pushfd
mov si, 0xf2ab
mov esi, dword [ebp + 0xc]
lea esp, [esp + 0x24]
pushfd
mov dword [esp], eax
jmp 0x6e415f
cwde
jmp 0x646152
sub edi, 4
stc
push dword [edi]
pop dword [esp + 4]
test ch, 0xbe
pushfd
stc
cmp edi, ebx
call fcn.006f56d6
add byte [eax], al
push ebx
arpl word [edx + 0x6f], si
insb byte es:[edi], dx
insb byte es:[edi], dx
push edi
imul ebp, dword [esi + 0x64], 0xd200776f
sal cl, cl
cmp al, 0xd9
bts ax, di
mov ebx, dword [esp + 4]
btr cx, ax
mov ecx, dword [esp + 8]
adc ax, 0x6bb7
mov byte [ebp - 2], dl
add al, bh
cmp ecx, 4
movzx eax, bl
jmp 0x642bf9
mov ecx, dword [ebp - 4]
jmp 0x6e4b4d
clc
clc
cmp ecx, dword [ebp - 8]
pushal
mov dword [esp + 8], 0x3949e09a
lea esp, [esp + 0x24]
je 0x6dc9a1
jbe 0x6c9dce
mov si, 0x8cd8
pushfd
pop esi
sub ecx, 1
call fcn.006c9946
add byte [eax], al
inc edi
je 0x645a3c
jns 0x645a5e
je 0x645a52
insd dword es:[edi], dx
dec ebp
je 0x645a64
imul esp, dword [ebx + 0x73], 0x47000000
je 0x645a4f
jns 0x645a71
inc ebx
outsd dx, dword [esi]
insb byte es:[edi], dx
outsd dx, dword [esi]
jb 0x645a46
jb 0x645a7b
jae 0x645a70
add bh, al
inc esp
and al, 4
pushal
sahf
sar eax, 1
mov dword [esp + 0x3c], 0x6e2a12
push dword [esp + 4]
call fcn.006d9935
add byte [eax], al
inc edi
je 0x645a6b
outsd dx, dword [esi]
insd dword es:[edi], dx
insd dword es:[edi], dx
popal
outsb dx, byte [esi]
dec esp
imul ebp, dword [esi + 0x65], 0x41
inc edi
je 0x645a8a
popal
jb 0x645aa2
outsb dx, byte gs:[esi]
outsb dx, byte [esi]
je 0x645a40
add byte [eax], al
push ecx
jne 0x645aaa
jb 0x645ac0
jns 0x645a8c
inc esp
outsd dx, dword [esi]
jae 0x645a8f
jbe 0x645ab7
arpl word [ebp + 0x41], sp
inc ecx
add byte [eax], al
add byte [edx + 0x65], dl
inc esi
add byte [eax], al
push edx
inc esi
insb byte es:[edi], dx
jne 0x645ace
push 0x79654b
jns 0x645a60
add byte [eax], al
inc esi
jb 0x645ac6
popal
insd dword es:[edi], dx
push edx
arpl word gs:[eax + eax], si
add byte [eax], al
add byte [ebx + 0x65], dl
je 0x645ae7
jne 0x645ae3
jo 0x645ab8
inc esp
imul eax, dword [edi + 0x65], 0x616c4374
jae 0x645af0
inc esp
jbe 0x645af4
inc ecx
add al, ch
test dh, bh
invalid
call fcn.0064590c
add byte [eax], al
push edi
jb 0x645af6
imul esi, dword [ebp + 0x50], 0x65636f72
jae 0x645b09
je 0x645af4
push eax
jb 0x645b01
arpl word [ebp + 0x73], sp
jae 0x645ae4
dec ebp
insd dword es:[edi], dx
outsd dx, dword [esi]
jb 0x645b15
add byte [eax], al
add byte [edi + 0x65], al
je 0x645af7
push esp
js 0x645b1a
dec ebp
je 0x645b1c
imul esp, dword [ebx + 0x73], 0xc4830041
add al, 1
jecxz 0x645a51
pushal
pushfd
pushfd
lea esp, [esp + 0x2c]
jmp 0x6e2211
add byte [ebx - 0x7b9ffb11], al
idiv bh
xor al, 0x24
push dword [edi]
pop dword [esp + 0x28]
and al, 0x28
clc
jmp 0x6c99b4
add byte gs:[eax], al
add byte [eax], al
add byte [edi + 0x65], al
je 0x645b2e
inc edi
je 0x645b2e
jne 0x645b5f
jb 0x645b54
outsb dx, byte [esi]
je 0x645b42
jb 0x645b63
arpl word [ebp + 0x73], sp
jae 0x645b6b
jae 0x645b42
dec ecx
add byte fs:[edi + eax*8 - 0x7aefdbbc], bl
pop ebp
add byte fs:[eax - 0xfbdbb4], cl
xor byte [edi + 0x680c2444], cl
xor eax, 0x89b9f916
je 0x645b3a
and al, 4
add al, 0x88
xor al, 0x24
mov byte [esp], dh
push edx
push dword [esp + 0x14]
ret 0x18
je 0x645b42
adc al, 0xc2
sbb byte [eax], al
mov byte [esp + 0xc], 0xa4
lea ecx, [ecx - 0x60adf84]
call fcn.00643252
and bh, dl
invalid
jg 0x645b3d
movzx ax, dl
movzx eax, dl
mov eax, dword [esp + 4]
and al, 4
push dword [esp]
jmp 0x64407f
inc ecx
arpl word [ebx + 0x6f], sp
jne 0x645bc8
je 0x645baa
popal
insd dword es:[edi], dx
push edi
push edi
add byte [eax + ebp*8 - 0x3750], bl
mov al, 0xc8
invalid
add edi, dword [ebp + 0x10]
bsr bx, dx
bsr ebx, edx
bsf bx, cx
add esi, 8
sar bh, 1
shld bx, cx, cl
movsx bx, al
mov bx, word [esi]
stc
shr ebx, 0xc
test cx, 0x7152
mov byte [esp], 0xe1
cmp dh, 0xd0
cmp ebx, 1
push ecx
pushfd
lea esp, [esp + 0xc]
je 0x6435ba
jmp 0x645a83
mov edx, 0x8b6606fb
push ds
bt si, 9
pushal
call fcn.006e2325
bswap bx
mov ebx, eax
movzx di, dl
lea ecx, [ebx - 0x4f58a95c]
pushfd
cmpsd dword [esi], dword es:[edi]
mov al, 0x9c
movzx esi, al
mov ecx, 0x3d36
pushal
bswap eax
mov eax, 0x400
movzx si, al
pushal
mov edi, ebx
mov si, word [esp]
rep stosd dword es:[edi], eax
call fcn.006442a6
mov al, byte [0x55375921]
popfd
jnp 0x645c4b
out 0xf3, al
invalid
mov ch, 0x90
into
jmp 0x8422f53
not al
pushfd
lea eax, [ebx + edx*4]
jmp 0x6e4e66
pushfd
bt ebx, ebx
clc
call 0x645ac1
call fcn.006e3db3
add byte [eax], al
insb byte es:[edi], dx
jae 0x6466bb
jb 0x6466ac
jo 0x6466c4
outsb dx, byte [esi]
inc ecx
add byte [ecx], al
ret
in al, 0x53
lahf
push ss
xchg edi, eax
test ch, 8
mov dl, 0xde
test al, 0x60
mov dl, 0x26
push es
add edi, dword [ebp + eax*8 - 0xe142b42]
enter 0x3b03, 0x18
cmp ebx, dword [eax]
mov al, 0x1e
dec eax
jo 0x646726
or al, 0x71
loop 0x64671b
mov word [0xd945947d], ss
aaa
xchg ebp, edi
or dword [edi], 0x6905966b
cmp eax, 0x18681f62
sti
rep movsb byte es:[edi], byte [esi]
pop ebp
cmp ecx, ecx
adc byte [0x711ba012], cl
pop ds
dec edx
popfd
jnp 0x646763
invalid
mov eax, 0x21ca655a
pushfd
sub edx, dword [edx - 0x4fcf78cb]
or byte [edi - 0x37f24ff6], dh
ror byte [eax], 1
insb byte es:[edi], dx
mov al, 8
mov bh, 0xa
mov al, 0xd
enter 0x8d0, 0x6c
or esp, dword [ecx]
test bh, 0x2a
or byte [ebx + eax], ch
outsb dx, byte [esi]
scasd eax, dword es:[edi]
push 0x46
mov ebp, 0x487e4cc5
pop ebp
jne 0x646745
xchg ecx, edx
xlatb
rcl edi, 1
jge 0x646770
shl byte [edx + 0x5f], 0x4b
inc ecx
retf
invalid
mov edx, dword [edi - 0x3f69b75d]
neg bl
mov ebp, cs
insd dword es:[edi], dx
in eax, 0x37
out 0xa3, al
int 0xf4
cwde
ret 0xd5f4
call fcn.00644763
mov dh, 0
mov byte [esp + 4], dl
jmp 0x6e47b5
pushal
or ecx, ecx
pushfd
pushfd
mov byte [esp], 0x65
call fcn.006e3cdd
jmp 0x6e2711
push dword [esp + 4]
cmp edi, ebx
push ebp
push edx
call fcn.006e21f0
pushfd
mov dword [esp], 0x1ca75877
jg 0x6de09e
pushfd
push esi
mov dword [esp + 4], 0xbe8b240e
push 0x4b7da86e
lea esp, [esp + 8]
jmp 0x6f6a9c
lea esp, [esp + 0xc]
call fcn.006c9efb
cmc
rol cl, 1
ror cl, cl
neg cl
mov cl, 4
pushal
pushfd
cmc
shl eax, cl
cmp al, ch
call fcn.006428fc
add byte [eax], al
dec edi
insb byte es:[edi], dx
inc esp
jb 0x6c9b0a
ja fcn.006c9aab
insb byte es:[edi], dx
inc ebx
outsd dx, dword [esi]
jne 0x6c9b7f
je 0x6c9b13
add byte [eax], al
dec edi
insb byte es:[edi], dx
push ebp
outsb dx, byte [esi]
imul ebp, dword [esi + 0x69], 0x6c616974
imul edi, dword [edx + 0x65], 0x679e900
jmp 0x6ca1a3
test edx, edx
mov byte [esp], 0x9d
mov byte [esp + 4], dh
push dword [esp + 4]
lea esp, [esp + 0xc]
je 0x6c9dce
cmc
shrd cx, bp, cl
add edx, eax
jmp 0x6d8f0e
cmpsd dword [esi], dword es:[edi]
idiv edi
sbb ch, ah
pushfd
inc cl
mov dword [ebp - 0x1c], edi
test ax, cx
sbb cx, dx
rol di, 1
mov edi, dword [ebp + 0xc]
shl ch, 1
sub eax, eax
sub esp, 0xfffffffc
jb 0x6ca5bf
neg dx
shld dx, di, 4
call fcn.00644df7
add byte [eax], al
inc ebx
jb 0x6c9c1a
popal
je 0x6c9c1d
inc ebp
outsb dx, byte [esi]
push 0x6174654d
inc esi
imul ebp, dword [ebp + 0x41], 0x4d000000
outsd dx, dword [esi]
jbe 0x6c9c30
inc esi
imul ebp, dword [ebp + 0x41], 0x47000000
je 0x6c9c2e
imul ebp, dword [esi + 0x64], 0x6f4c776f
outsb dx, byte [esi]
inc ecx
add byte [ebp + ecx*4 + 0xf102464], bl
or byte [edx], 0
add byte [edi], cl
sahf
les esi, [0x7d131c34]
pushfd
lea esp, [esp + 0x10]
jb 0x6c9c37
setle ah
xor eax, 0x7d131c34
cmp ecx, 0xa
lahf
pushfd
not ax
call fcn.006e32f5
add byte [eax], al
push eax
outsd dx, dword [esi]
jae 0x6c9c7c
push ecx
jne 0x6c9c74
je 0x6c9c5a
jae 0x6c9c83
popal
add byte gs:[bx + si], al
add byte [edi + 0x65], al
je 0x6c9c6d
je 0x6c9c80
dec eax
popal
outsb dx, byte [esi]
insb byte es:[edi], dx
add byte gs:[edi], cl
or byte [esi], 0
add byte [eax], al
xor ah, 0x5e
and ah, bl
or ax, 0xa5f1
int1
movsd dword es:[edi], dword [esi]
mov eax, 6
bt sp, cx
cmc
cmc
sub ecx, eax
not al
mov al, byte [ebp - 2]
push ebx
stosb byte es:[edi], al
mov byte [esp], al
pushfd
mov byte [esp + 4], al
push esp
lea esp, [esp + 0xc]
jmp fcn.006de3e9
mov dword [esp + 0x20], ecx
clc
mov dword [esp + 0x1c], ebx
rol dh, 3
sar cx, cl
mov dword [esp + 0x18], edi
add esp, 0x18
jbe 0x6c9d4c
add byte [eax], al
push esi
mov ch, 0x8d
rol dx, cl
mov edx, dword [ebp + 8]
ret 0x558b
xor esi, esi
test bp, 0xb0b5
rcr esi, 0x1f
test ebp, 0xdec1b0b5
pop ds
mov esi, dword [ebp + 0xc]
or ecx, ebp
clc
clc
mov ecx, dword [ebp + 0x14]
clc
or edx, edx
jmp 0x6426c6
setb dl
and dl, dl
sal ch, 3
push esi
or si, bp
mov edx, dword [ebp + 8]
pushfd
movzx cx, bl
rcr esi, 0x19
pop ecx
mov esi, dword [ebp + 0xc]
bsf cx, bp
mov ecx, dword [ebp + 0x14]
jmp 0x64325b
bswap dx
sub eax, eax
movsx bx, bl
not dh
movsx edx, al
not si
pop edx
not bl
lea ebx, [ebx + 0x16751a46]
pop ebx
movsx esi, bl
movsx di, al
pushfd
pushal
mov edi, dword [esp + 0x24]
pushfd
mov word [esp], di
mov esi, dword [esp + 0x2c]
pushfd
push edx
mov esp, ebp
lea ebp, [edx*2 - 0x26b57cd8]
pop ebp
pushal
push dword [esp + 0x20]
ret 0x2c
cmp ch, 0x99
cmp byte [edi - 1], 0
push ebp
pushal
call fcn.00644e9a
inc ch
pushfd
not dl
mov byte [ebp - 2], al
clc
bts dx, bp
dec ch
mov ecx, eax
stc
lea edx, [edi*4 + 0x21883e9d]
mov dl, 0xae
mov byte [esp], 0xf4
mov dword [ebp - 0x20], eax
bsf dx, bp
mov dword [ebp - 0x24], eax
bswap dx
bts edx, esp
setl dh
clc
mov dword [ebp - 0x28], eax
rol dh, cl
lea edx, [esp + 0x7dc69ed0]
pushfd
mov dword [ebp - 0x14], eax
sbb dh, dl
test cl, 0xc1
bts dx, 7
neg dl
sub eax, 1
jmp 0x6dca33
pushfd
push ecx
lea esp, [esp + 0xc]
jb 0x6c9c37
btc ax, 0xd
jmp 0x6435f1
cwde
mov eax, 3
pushfd
jmp 0x6d8a3c
bts cx, 0xb
bswap cx
stc
mov ecx, dword [esi + 0x7c]
cmc
cmc
pushfd
bt ebp, edi
add ecx, edx
mov byte [esp], ch
mov dword [ebp - 0x10], ecx
not ch
cmc
mov ecx, dword [ebp + 0xc]
cmp cl, 0x5f
mov word [esp], 0xc4f
cmp al, ch
test sp, 0x6f8a
cmp ecx, 0xffff
call fcn.006c9987
repne scasb al, byte es:[edi]
mov byte [esp], ah
call fcn.00643947
jae 0x6d940f
xor byte [eax + 0x1d], ah
xchg esp, eax
jnp 0x6d9447
ror byte [eax], cl
mov ch, 3
mov ah, 0xe1
fisubr dword [esi + 0x18]
pushal
push cs
sbb byte [eax + 0x64], ah
push cs
jp 0x6d93e0
dec eax
push edi
mov ecx, 0xac3cd2f7
dec esi
jo 0x6d93d1
invalid
test dword ss:[esi + ebx*2], esi
mov dword [edi], edi
out dx, al
pushal
aas
test ebp, ebp
xchg esi, eax
ljmp 0xe2cb
mov al, byte [0x92c7db1a]
sbb byte [0x65470000], ah
je 0x6d94a8
js 0x6d94cb
inc ebp
js 0x6d94ce
outsb dx, byte gs:[esi]
je 0x6d94ae
outsd dx, dword [esi]
imul ebp, dword [esi + 0x74], 0x41
push ebx
je 0x6d94bd
je 0x6d94de
je 0x6d94d2
push 0x4d746c42
outsd dx, dword [esi]
add byte gs:[eax], al
add byte [ebx + 0x65], dl
je 0x6d94c0
imul eax, dword [ebx + 0x6f], 0x6c
outsd dx, dword [esi]
jb 0x6d9485
jmp dword [sym.imp.kernel32.dll_GetVersion_1]
mov byte [ebp - 2], al
push dword [esp + 4]
pushfd
lea esp, [esp + 0x40]
inc eax
jmp fcn.006de3e9
add byte [eax], al
push ebx
imul edi, dword [edx + 0x65], 0x6552666f
jae 0x6d9529
jne 0x6d952e
arpl word [ebp], sp
add byte [eax], al
add byte gs:[eax], al
add byte [ecx + ebp*2 + 0x6e], cl
push esp
outsd dx, dword [esi]
add byte [eax], al
dec esp
imul ebp, dword [esi + 0x65], 0x6f54
add byte [ebx + 0x72], al
popal
jb 0x6d9532
popal
je 0x6d9535
push eax
popal
insb byte es:[edi], dx
je 0x6d954a
add byte gs:[eax], bh
fisubr dword [ecx]
sti
call fcn.00645aaf
invalid
sub eax, 0x5db0e8cf
shl byte [0x3c82fdb7], 1
dec eax
cmp byte [eax + ecx*2], 0x35
xchg ebx, eax
mov edi, 0x99a7ca82
xor eax, 0xca82bf93
cmpsd dword [esi], dword es:[edi]
cdq
invalid
outsb dx, byte [esi]
pop edi
pop esp
xor dword [ebx + 0x26], ecx
mov al, byte [edi - 0x567f6d72]
jae 0x6d953b
retf 0xb9c0
jbe 0x6f57ed
clc
stc
sub ecx, 4
pushfd
push dword [esp]
pushfd
jmp 0x6c9a83
pushfd
call fcn.006dcc94
pushal
test cl, bl
add ecx, 1
clc
clc
test bh, 0x4a
test cl, 0x8b
test ah, ah
pushfd
push esp
lea esp, [esp + 0x38]
jne 0x642978
jmp 0x6dc271
push edi
pushal
mov dword [esp + 0x1c], ebx
pushal
mov dword [esp], 0xde871746
pushfd
lea esp, [esp + 0x40]
call fcn.006d94e1
push 0xde29b18
jmp 0x6f5949
jae 0x6dc5c4
je 0x6dc5ca
jo 0x6dc5b4
imul ebp, dword [esi + 0x64], 0x8d00776f
and al, 0xc
jne 0x64296e
rol ax, cl
sal ax, 8
shl al, 5
sub edx, edx
sub ah, 0x6c
bsr eax, ebp
mov eax, edx
rol al, cl
inc al
adc al, 0xc5
cmp bh, cl
add edi, 1
adc al, ah
stc
clc
add al, ch
mov al, byte [edi]
cmc
call fcn.006d9929
add byte [eax], al
inc ebx
jb 0x6dc604
popal
je 0x6dc607
push eax
imul esi, dword [eax + 0x65], 0x65737500
jb 0x6dc5df
xor ch, byte [esi]
insb byte es:[edi], dx
insb byte es:[edi], dx
add byte [edi], cl
or byte [ebx - 0x17fffe6d], 0x6f
jb 0x6f5943
mov edx, dword [ebx + 0x6fe80001]
call fcn.006d932c
cmp al, 0x8a
inc esp
push ds
jmp 0x6dc556
int 0xff
invalid
shl dword [edi], 0x9b
or cl, ch
ret 0xd9f3
fld dword [ecx]
leave
out dx, eax
out 0xd6, eax
xchg esi, eax
jp 0x6dc636
pop ebp
and al, 0x5f
popal
iretd
pushfd
inc eax
xchg ecx, eax
aad 0x3d
sbb dword [ebx + 0x28], 0x59c33f8f
mov bl, bh
xchg edi, eax
sar edx, 0x24
mov bl, 0x2b
xchg ebx, eax
sub ebx, dword [ecx + 0x5467782a]
pop si
push esp
retf
dec esi
sub eax, 0x1c8216fc
retf
push ss
sbb byte [ebx + ecx*8], 0xf
adc byte [ebx + ecx - 0x1437053c], bl
mov gs, word [esp]
sbb al, 0xa2
sbb dword [ecx - 0x7bba7c0d], ebp
add dword [esi], edx
je 0x6dc634
sbb al, 0xa8
sbb al, 0xbb
jmp 0x6dc5ef
scasb al, byte es:[edi]
loop 0x6dc5dd
cmpsb byte [esi], byte es:[edi]
retf
jae 0x644e53
pushfd
bswap ax
lea eax, [ebx + edx*4]
mov word [esp], 0x260f
jmp 0x643982
jmp 0x6d949d
jmp 0x644879
dec dx
movzx dx, cl
mov dword [ebp - 0x18], eax
and dl, 0x90
add dl, 0xe8
cdq
mov edx, edi
cmc
sar eax, 0x18
pop eax
daa
sub edx, dword [ebp + 0xc]
shld ax, dx, 0xb
push 0x5b5aaf25
sar ah, 1
and edx, 3
aas
mov eax, ecx
call fcn.006e4274
add byte [eax], al
push esi
popal
jb 0x6dcad5
popal
outsb dx, byte [esi]
je 0x6dcab3
insb byte es:[edi], dx
popal
jb 0x6dca75
test edi, 0xf56a5a99
stc
sub ecx, eax
pushal
mov al, byte [ebp - 2]
pushfd
push esi
push esp
stosb byte es:[edi], al
pushfd
push esp
push esp
push 0x7512dc55
lea esp, [esp + 0x40]
jmp fcn.006de3e9
or al, 0xf
test dword [eax + eax*4], edx
idiv bh
xor di, bp
pushal
mov edi, dword [edx + 0x24]
stc
bt dx, 8
test edi, 0x8c05ea6c
add edi, eax
cmc
mov byte [esp + 4], dh
mov word [esp], dx
mov dword [esp], edx
movzx ecx, word [edi + ecx*2]
rcr edi, cl
inc edi
movzx di, al
mov edi, dword [edx + 0x1c]
call fcn.006e2997
add byte [eax], al
inc esp
insb byte es:[edi], dx
je 0x6dcb58
push esi
outsd dx, dword [esi]
insb byte es:[edi], dx
jne 0x6dcb65
dec ebp
outsd dx, dword [esi]
jne 0x6dcb6b
je 0x6dcb4f
outsd dx, dword [esi]
imul ebp, dword [esi + 0x74], 0x41
push ebx
outsb dx, byte gs:[esi]
dec ebp
jae 0x6dcb82
popal
inc ecx
add byte [ecx], bl
sbb ecx, ecx
bt si, ax
lea ecx, [ecx + ecx*2 + 0xb]
stc
xchg dword [esp + 0x20], ecx
shl ecx, 0xf
lea ecx, [edx*2 - 0x7116ece0]
xchg dword [esp + 0x1c], esi
btc ecx, edx
adc si, cx
lea ecx, [eax + 2]
dec al
sbb si, 0xee80
jmp 0x6440df
dec ecx
outsb dx, byte [esi]
outsw dx, word [esi]
add al, ch
invalid
sbb edx, ebx
invalid
call dword [edx - 0x73]
and al, 0x28
jb 0x6c9c37
or ah, dh
cmp ecx, 0xa
mov ax, bx
lea eax, [eax*8 - 0x3fd626bb]
hlt
fmul dword [ebp - 0x26ba3afc]
sub eax, eax
jmp 0x6d8b54
outsd dx, dword [esi]
jb 0x6dcbc6
add byte [eax], al
add byte [ebx + 0x65], dl
je 0x6dcbd0
dec ecx
inc edx
inc ebx
outsd dx, dword [esi]
insb byte es:[edi], dx
outsd dx, dword [esi]
jb 0x6dcbe8
popal
bound ebp, qword [ebp]
add byte [eax], al
inc ebx
jb 0x6dcc03
popal
je 0x6dcc06
inc esi
outsd dx, dword [esi]
outsb dx, byte [esi]
je 0x6dcbef
outsb dx, byte [esi]
imul esi, dword fs:[edx + 0x65], 0x417463
add byte [eax], al
inc edx
imul ebp, dword gs:[bp + 0x50], 0x746e6961
add byte [eax], al
add byte [edi + 0x65], al
je 0x6dcc19
imul ebp, dword [esi + 0x64], 0x6552776f
arpl word [eax + eax - 0x17], si
ja 0x6dcc1a
arpl word gs:[eax + eax - 0x17], si
jmp 0x6c9f3e
insd dword es:[edi], dx
sar esi, cl
jmp dword [esi - 0x39]
shrd ecx, edi, cl
xchg dword [esp + 0x24], esi
shld cx, bx, 2
sub si, sp
pushfd
lea ecx, [eax + 2]
neg esi
pushfd
pushfd
mov esi, dword [ebp - 0x20]
inc al
not esi
sal bh, 0xd6
sbb al, 0x6e
add esi, edi
push 0x1d93db23
pushfd
mov byte [esp + 4], 0xf7
rep movsb byte es:[edi], byte [esi]
lea esi, [esp - 0x2cd32ad0]
and al, 0x30
aad 0x2c
rcr dword [ecx - 0x75], cl
je 0x6dcc46
xor ch, dl
sub al, 0xd3
pop ecx
mov esi, dword [esp + 0x34]
mov byte [esp], ch
xor al, 0x88
sub al, 0x24
movsx cx, cl
mov ecx, dword [esp + 0x38]
push dword [esp + 0x18]
pushfd
mov al, byte [edi - 1]
push ebx
mov byte [ebp - 2], al
pushfd
lea esp, [esp + 0x4c]
jmp fcn.006de3e9
dec ecx
insd dword es:[edi], dx
popal
dec esp
imul esi, dword [ebx + 0x74], 0x7465475f
inc edx
imul eax, dword [ebx + 0x6f], 0x6c
outsd dx, dword [esi]
jb 0x6dcc5b
pushfd
lea esp, [esp + 0x28]
je 0x642c99
pushal
mov byte [esp + 4], cl
pushal
push 0x52e7fb97
lea esp, [esp + 0x44]
jmp fcn.006448af
jmp 0x6e475f
lea edi, [eax + 0x51dd435f]
shl al, cl
ror edi, cl
sar al, 7
mov edi, ebx
pushfd
inc al
stc
mov al, 0x2e
cmp cx, bx
jmp 0x6d93b6
bt ax, 7
cmc
stc
not al
pushfd
call fcn.006dcd34
add byte [eax], al
dec ecx
outsb dx, byte [esi]
imul esi, dword [ebx + eax*2 + 0x6f], 0x6e6f6d6d
inc ebx
outsd dx, dword [esi]
outsb dx, byte [esi]
je 0x6e27a3
outsd dx, dword [esi]
insb byte es:[edi], dx
jae 0x6e2735
add byte [eax], al
dec edi
insb byte es:[edi], dx
dec ecx
outsb dx, byte [esi]
imul esi, dword [ecx + ebp*2 + 0x61], 0x657a696c
add al, ch
or al, 0x76
invalid
add al, 0x24
sub byte [ecx + ebp*8 - 0x1814d], bl
add byte [eax], al
dec ecx
outsb dx, byte [esi]
je 0x6e2817
jb 0x6e2827
arpl word gs:[ebx + eax*2 + 0x6c], si
imul esi, dword [eax + 0x52], 0x746365
add byte [eax], al
inc edi
je 0x6e281d
imul ebp, dword [esi + 0x64], 0x4344776f
add byte [eax + ecx*4 - 0x373fdbc4], bl
add eax, 0xffa230e8
inc dword [eax]
add byte [edi + 0x65], al
je 0x6e2823
jne 0x6e2854
jb 0x6e2849
outsb dx, byte [esi]
je 0x6e2837
outsd dx, dword [esi]
jae 0x6e2853
je 0x6e2855
outsd dx, dword [esi]
outsb dx, byte [esi]
inc ebp
js 0x6e27f1
add byte [eax], al
push ebx
jne 0x6e2869
jo 0x6e285d
outsb dx, byte [esi]
push esp
push 0x64616572
add byte [ebp + 0xf042464], cl
lea esp, [esp + 4]
ja 0x64660d
cmp dx, bx
sub ebx, edi
pushfd
push dword [esp]
lea esp, [esp + 8]
add ebx, esp
pushal
or byte [ecx], al
jecxz 0x6e287b
push 0xdaaab167
push 0x614c4fe9
mov cl, 0xaa
fisubr dword [eax - 0x17]
dec edi
dec esp
popal
lea esp, [esp + 0x28]
and al, 0x28
jmp 0x6e2211
outsb dx, byte [esi]
insb byte es:[edi], dx
add byte gs:[eax], al
add byte [edi + 0x65], al
je 0x6e2886
inc ebx
add byte [eax], al
add byte [edi + 0x65], al
je 0x6e288d
inc ebx
outsd dx, dword [esi]
outsb dx, byte [esi]
jae 0x6e28bd
insb byte es:[edi], dx
inc ebx
push eax
add byte [eax], al
add byte [eax], al
add byte [ebx + 0x65], dl
je 0x6e28a6
push ebx
je 0x6e28a6
popal
jo 0x6e28a9
outsd dx, dword [esi]
add byte gs:[eax], al
add byte [ebp + 0x6e], al
jne 0x6e28d3
push edi
imul ebp, dword [esi + 0x64], 0x73776f
jmp dword [sym.imp.kernel32.dll_GetVersion]
outsd dx, dword fs:[esi]
ja 0x6e28e0
add bh, bh
and eax, sym.imp.kernel32.dll_GetVersion
jecxz 0x6e284e
inc ebx
mov byte [ebx - 0x19106385], dl
mov edi, 0xecb9c108
in al, 0xd6
cmc
pushfd
out dx, eax
out 0xbf, al
or cl, al
mov ecx, 0xf5d6e4ec
xchg edi, eax
sub byte [esi + 0x1bc6afe3], bh
mov esi, 0x1bc6afe3
pop ecx
invalid
invalid
loopne 0x6e2888
fsubrp st(0)
in al, 0xd6
loopne 0x6e288f
salc
out 0xfb, eax
mov bh, 2
mov esi, 0x2a29b715
mov byte [edx + esi*2 - 0x7e374179], dl
sbb eax, 0x5ca4850f
and esp, dword [ebp + 0x2095be04]
je 0x6e28b5
jne 0xa5918567
add al, 0xbe
xchg ebp, eax
and byte [esp + ebp*8 - 0x65], dh
wait
sbb al, byte [edi + edi*4 - 0x321b98c2]
pop edi
mov ebx, dword [eax]
mov byte [eax - 0x25fb92d0], dl
add al, 0xda
outsb dx, byte [esi]
push ebp
add dword [eax + 0x847d74b], esi
scasd eax, dword es:[edi]
mov cs, word [ebx]
stosd dword es:[edi], eax
aas
xlatb
inc edi
or byte [edi + 0x3fab0b8e], ch
lodsb al, byte [esi]
push edx
leave
enter 0xe49, 0xffffffffffffffb8
shr eax, 1
stc
pop ebp
xchg ecx, eax
xor ah, byte [ebx + 0x6f]
dec edx
salc
cmp al, 0x7b
sahf
inc eax
jns 0x6e295b
dec ecx
cwde
frstor dword [eax + 0x6237c7ff]
aaa
inc esp
out 0x75, al
insb byte es:[edi], dx
xchg edx, eax
jle 0x6e2923
jp 0x6e28ff
out 0x76, eax
imul ecx, dword [edx], 0x71
daa
inc edi
mov edx, 0x623863cf
pop ebp
xor eax, 0x6455635f
arpl word [ebp + 0x64], dx
das
push esp
sub eax, 0xfd2f4b4e
and dl, byte [eax + 0x2e]
bound esp, qword [eax]
and byte fs:[ecx], bh
jne 0x6e28d9
jne 0x6e294e
jo 0x6e29ab
daa
js 0x6e2942
sbb edx, ebx
xchg ecx, eax
sti
in al, 0x59
cld
shl byte [ebp + 0x46f78607], 0x88
inc ebp
invalid
push ecx
lea esp, [esp + 0x4c]
jmp fcn.006de3e9
pushfd
mov byte [esp], 0x21
jmp 0x6e3960
mov byte [esp + 4], 0xdb
jmp 0x645637
inc dword [eax]
add byte [esi + 0x61], dl
jb 0x6e2a1b
popal
outsb dx, byte [esi]
je 0x6e29ff
outsb dx, byte [esi]
imul esi, dword [eax + eax], 0x74654700
inc ebx
insb byte es:[edi], dx
imul esp, dword [ebp + 0x6e], 0x63655274
je 0x6e29ca
pushal
mov esp, esi
pushal
pushfd
lea esp, [esp + 0x24]
jmp 0x6c9dce
invalid
push esp
adc eax, 0xaef2fff6
mov dword [esp], 0x1bd58fb4
lea esp, [esp + 4]
jne 0x6c9dce
stc
mov cl, 0x3d
rcr cl, cl
mov ecx, edi
call fcn.006dbd8f
int1
int 0x2c
add byte [esi - 0x64f4846d], 0x40
xchg dword [edx], esi
insd dword es:[edi], dx
pop esi
insb byte es:[edi], dx
pop eax
pop edx
pop ebp
jl 0x6e2a99
jmp 0xb0272c5c
in al, dx
shl dword [ebx + 0x7c], cl
aas
test dword [ebp - 0x62], edi
loopne 0x6e2a3e
dec byte [ecx - 0x6a106484]
push ss
invalid
lea esp, [esp + 4]
jae 0x6c9dd3
stc
dec di
dec bh
ror di, cl
mov ebx, eax
rol ch, cl
bt sp, sp
pushal
cmp ah, 0x3b
mov edi, eax
stc
sal ecx, 0x14
mov ecx, 0x104
cmc
mov word [esp], 0x3380
test bh, bh
pushal
xor al, al
call fcn.006ca635
add byte [eax], al
inc ebx
insb byte es:[edi], dx
outsd dx, dword [esi]
jae 0x6e3a07
inc ebx
insb byte es:[edi], dx
imul esi, dword [eax + 0x62], 0x6472616f
add byte [eax], al
add byte [edx + 0x65], dl
inc ebx
insb byte es:[edi], dx
outsd dx, dword [esi]
jae 0x6e3a1b
dec ebx
jns 0x6e39ba
sub dword [ebx - 0x6c88a9f4], ebx
jnp 0x6e39f9
invalid
iretd
ffree st(7)
add byte [ebx + 0x1de0a04], dh
sub ecx, dword [ecx - 0xb79f58c]
or bl, dh
add dword [ebx], ebp
mov dword [edx + ecx - 0x7a], esi
hlt
test al, 0xd3
sub esi, dword [ebx + 0x7c]
cwde
sub ecx, dword [edx + 0x3d]
cmp byte [edi - 0x49], cl
pop ecx
and dh, byte fs:[edi - 0x5151f904]
scasb al, byte es:[edi]
fsubr st(1)
and bh, ah
js 0x6e3a5f
jmp 0x6e39f5
jnp 0x6e39fe
inc eax
js 0x6e3aaf
invalid
adc al, 0x40
invalid
cmp bp, ax
pushal
add word [ebx + edi], ax
pushfd
mov word [esp + 4], si
lea esp, [esp + 0x2c]
jmp fcn.006448af
mov edi, dword [esp + 4]
pushfd
mov esi, dword [esp + 0xc]
bts bx, bp
inc cl
inc bp
mov ecx, dword [esp + 0x10]
rcr bl, 5
bsr ebx, eax
mov ebx, dword [esp + 0x14]
test dh, dl
add esp, 0x40
movsx bp, cl
movsx bp, al
pop ebp
pushfd
mov byte [esp], ch
push dword [esp + 4]
ret 0x10
mov dh, 0
call fcn.006dbf74
add byte [eax], al
push ebx
je 0x6e3f70
imul ebp, dword [ebp + 0x41], 0x69727474
bound esi, qword [ebp + 0x74]
jae 0x6e3f79
add byte [eax - 0x73], ah
and al, 0x44
js 0x6d9c6a
jae 0x6dc805
xor cl, 0x40
ror bh, cl
or bh, 0x2f
pop ebx
call fcn.00644048
add byte [eax], al
push edx
popal
imul esi, dword [ebx + 0x65], 0x65637845
jo 0x6e3fd9
imul ebp, dword [edi + 0x6e], 0x247c8800
add al, 0x8d
and al, 0x30
xor byte [edi], cl
xchg dword [esi - 0x630009da], edx
ja 0x64660d
pushfd
sub ebx, edi
sti
stc
mov byte [esp], 0x77
pushfd
lea esp, [esp + 8]
add ebx, esp
pushfd
pushal
lea esp, [esp + 0x24]
jmp 0x6e2211
push edi
clc
test byte [edi + eax*4 + 0x5f59b615], ah
aaa
inc esi
daa
invalid
jmp fcn.006e3d25
clc
pushal
cmp ecx, dword [ebp - 4]
mov word [esp + 4], 0x9981
call fcn.006dcb54
pushfd
lea esp, [esp + 0xc]
jb 0x6415cc
test ch, ch
bt cx, 0xf
jmp 0x5cd196
pushfd
mov dword [esp], 0xbe8b240e
pushal
mov byte [esp + 4], 0xf7
lea esp, [esp + 0x20]
jmp 0x6f6a9c
call fcn.006dc7fb
push 0x1d3e5053
lodsb al, byte [esi]
pushfd
clc
bt sp, 4
pushfd
not al
clc
call fcn.006d8f6b
add byte [eax], al
inc esi
imul ebp, dword [esi + 0x64], 0x646e6957
outsd dx, dword [esi]
ja 0x6e4822
js 0x6e4820
add byte [eax], al
add byte [ebp + 0x73], al
je 0x6e4859
outsd dx, dword [esi]
jns 0x6e4841
imul ebp, dword [esi + 0x64], 0x9c00776f
lea esp, [esp + 0x30]
jae 0x6dc805
mov bx, cx
rcl eax, cl
sub bh, dh
call fcn.006f56f7
call fcn.00644b23
add byte [eax], al
inc edi
je 0x6e4869
imul ebp, dword [esi + 0x64], 0x4473776f
imul esi, dword [edx + 0x65], 0x726f7463
jns 0x6e4863
add byte [eax], al
add byte [edi + 0x65], al
je 0x6e4876
outsd dx, dword [esi]
jne 0x6e4899
dec eax
popal
outsb dx, byte [esi]
insb byte es:[edi], dx
inc ecx
add byte [eax], al
add byte [edi + 0x65], al
je 0x6e4892
jb 0x6e48b2
imul ebp, dword [edi + 0x6e], 0x8855aa00
inc ebp
invalid
outsb dx, byte [esi]
add byte [edx - 0x1ba77ab], ch
push ecx
lea esp, [esp + 0x38]
jmp fcn.006de3e9
push 0x2ba1289d
pushfd
mov byte [esp + 4], 0x46
inc esi
stosb byte es:[edi], al
mov word [esp], bx
push dword [esp]
push 0xdbe90d70
mov dword [esp + 8], 0x5cbf1ea9
lea esp, [esp + 0x38]
jmp fcn.006de3e9
push ds
mov edi, 0x24648d5c
cmp cl, ch
wait
invalid
outsd dx, dword [esi]
insb byte es:[edi], dx
add byte [eax], al
add byte [ebx + 0x72], al
popal
je 0x6e4902
inc esp
dec ecx
inc edx
imul esi, dword [ebp + ebp*2 + 0x61], 0x68600070
fnstenv [ebp - 0x3909a694]
add edi, edi
xor al, 0x24
pushal
push 0x596cb5d9
test dh, 1
push dword [esp]
jmp 0x6e3f1c
invalid
pushal
cmp ax, 0x9060
cmp dword [ebp + 0x14], ecx
jmp 0x5cd3bf
push dword [esp]
lea esp, [esp + 8]
call fcn.006d9828
pushal
adc dl, dl
mov dword [esp], edx
pushal
lea esp, [esp + 0x40]
jae 0x6dc805
call fcn.0064565c
jmp 0x642b7e
cmc
call fcn.006459b7
pushfd
mov esp, esi
pushal
pushfd
mov byte [esp], 0x3b
pushal
lea esp, [esp + 0x44]
jmp 0x6c9dd3
pushfd
pushfd
mov dword [ebp + 4], eax
pushfd
pushfd
pop dword [esp + 0x38]
lea esp, [esp + 0x38]
jl 0x6f757c
pushal
mov word [esp + 0xc], dx
mov dword [esp + 4], 0x77ae42cf
push dword [esp + 0x20]
pop dword [ebp]
pushal
push dword [esp + 8]
pushfd
push edi
lea esp, [esp + 0x50]
jmp 0x6f5edb
not eax
pushal
push esp
push dword [esp + 0x10]
not edx
stc
stc
test di, 0x32dd
stc
and eax, edx
push edi
jmp 0x6f63ba
pushal
jmp 0x6f7d6b
pushfd
call fcn.006f77ce
mov cl, byte [ebp + 8]
call fcn.006f7fa8
pushfd
pop dword [esp + 0x1c]
pushal
mov dword [esp + 0x38], eax
call fcn.006f5f8c
push edx
mov eax, dword [ebp]
or dl, 0x4f
mov edx, dword [ebp + 4]
jmp 0x6f66b2