Function at 0x54efc4
Capabilities:
Create process on windows

Disassembly:
adc al, 0
js 0x54e43a
adc al, 0
add byte [eax], al
add byte [eax], al
push edx
add byte [ebx + 0x6c], al
outsd dx, dword [esi]
jae 0x54e4c0
dec eax
popal
outsb dx, byte [esi]
insb byte es:[edi], dx
add byte gs:[eax], bl
add al, byte [edi + 0x65]
je 0x54e4b5
outsd dx, dword [esi]
jne 0x54e4d8
dec eax
popal
outsb dx, byte [esi]
insb byte es:[edi], dx
push edi
add byte [eax], al
jecxz 0x54e47a
dec ecx
outsb dx, byte [esi]
imul esi, dword [ecx + ebp*2 + 0x61], 0x657a696c
inc ebx
jb 0x54e4ee
je 0x54e4f0
arpl word [ecx + 0x6c], sp
push ebx
arpl word gs:[ecx + ebp*2 + 0x6f], si
outsb dx, byte [esi]
inc ecx
outsb dx, byte [esi]
push ebx
jo 0x54e500
outsb dx, byte [esi]
inc ebx
outsd dx, dword [esi]
jne 0x54e50a
je 0x54e49e
mov dl, 4
push ebx
insb byte es:[edi], dx
jo 0x54e4a6
lock add dword [edi + 0x65], eax
je 0x54e4f2
imul ebp, dword [ebp + 0x53], 0x657a69
and eax, 0x69725705
je 0x54e520
add eax, 0x74697257
inc esi
inc esi
imul ebp, dword [ebp], 0x655203c0
popal
rol byte [ebx], 0x52
popal
inc esi
imul ebp, dword [ebp], 0x47021400
je 0x54e51f
outsd dx, dword [esi]
jne 0x54e542
inc esi
imul ebp, dword [ebp + 0x4e], 0x57656d61
add byte [eax], al
test dword [edx], eax
inc edi
je 0x54e53c
insd dword es:[edi], dx
jo 0x54e53c
popal
je 0x54e557
push 0x83000057
add al, byte [edi + 0x65]
je 0x54e54c
push edi
add byte [eax], al
add dword [edx], 0x47
je 0x54e54c
insd dword es:[edi], dx
jo 0x54e542
imul ebp, dword [ebp + 0x4e], 0x57656d61
popal
insd dword es:[edi], dx
push edi
add byte [eax], al
pop dword [eax]
inc ebx
jb 0x54e570
popal
popal
je 0x54e573
inc esi
imul ebp, dword [ebp + 0x57], 0x53046100
je 0x54e560
imul ebp, dword [ebp + 0x41], 0x69727474
je 0x54e593
jb 0x54e58b
imul esp, dword [edx + 0x75], 0x57736574
bound esi, qword [ebp + 0x74]
jae 0x54e57f
add byte [eax], al
salc
add byte [ebp + 0x6c], al
je 0x54e597
inc esi
imul ebp, dword [ebp + 0x57], 0x4d036300
outsd dx, dword [esi]
jbe 0x54e5a3
inc esi
imul ebp, dword [ebp + 0x57], 0x4d036000
push edi
add byte [eax + 3], ah
dec ebp
outsd dx, dword [esi]
jbe 0x54e5af
inc esi
imul ebp, dword [ebp + 0x45], 0x8c005778
add dword [edi + 0x65], eax
je 0x54e59b
insb byte es:[edi], dx
inc ebp
js 0x54e5a8
add byte [ecx + eax + 0x43746547], cl
inc ebx
outsd dx, dword [esi]
insd dword es:[edi], dx
jo 0x54e5d1
je 0x54e5c3
jb 0x54e5ae
popal
insd dword es:[edi], dx
inc ecx
add byte [eax], al
adc dword [0x65646957], eax
inc ebx
push 0x6f547261
push esp
outsd dx, dword [esi]
dec ebp
jne 0x54e5e1
je 0x54e5e0
inc edx
jns 0x54e5ee
add byte gs:[edi + 2], dh
inc edi
je 0x54e5d5
jns 0x54e5f7
je 0x54e5eb
insd dword es:[edi], dx
push esp
imul ebp, dword [ebp + 0x65], 0x47018700
je 0x54e5d5
add byte [edi + 0x74654701], al
inc ebx
outsd dx, dword [esi]
insd dword es:[edi], dx
insd dword es:[edi], dx
popal
outsb dx, byte [esi]
dec esp
imul ebp, dword [esi + 0x65], 0x3b10057
push edx
popal
imul esi, dword [ebx + 0x65], 0x65637845
jo 0x54e61f
push edi
add byte [ecx + 0x69615203], dh
jae 0x54e60a
inc ebp
js 0x54e60b
jo 0x54e61f
imul ebp, dword [edi + 0x6e], 0x4180000
push edx
add byte [eax], al
sbb byte [edx + edx*2], al
add byte [eax], bl
add al, 0x52
je 0x54e621
push ebp
outsb dx, byte [esi]
ja 0x54e622
outsb dx, byte [esi]
add bh, cl
add cl, byte [eax + 0x65]
popal
jo 0x54e609
jb 0x54e62a
add byte gs:[eax], al
retf
outsd dx, dword [esi]
arpl word [eax], ax
ljmp 0x646f
add byte [ebp + 0x6e], al
arpl word [edi + 0x64], bp
push eax
outsd dx, dword [esi]
imul ebp, dword [esi + 0x74], 0xca007265
add byte [ebp + 0x63], al
outsd dx, dword [esi]
push eax
je 0x54e647
jb 0x54e5e4
jb 0x54e5e4
retf 0x4400
push eax
outsd dx, dword [esi]
imul ebp, dword [esi + 0x74], 0xc5007265
add dword [edi + 0x65], eax
je 0x54e63d
je 0x54e63d
jne 0x54e66e
jb 0x54e663
outsb dx, byte [esi]
je 0x54e655
push 0x64616572
dec ecx
add byte fs:[eax], al
add byte [esi], bh
add ecx, dword ds:[edi + ebp*2 + 0x61]
add ecx, dword [edi + ebp*2 + 0x61]
dec esp
imul esp, dword [edx + 0x72], 0x45797261
js 0x54e671
add byte [eax], al
jae 0x54e622
push ebx
je 0x54e66e
dec esp
popal
jae 0x54e699
inc ebp
jb 0x54e69a
outsd dx, dword [esi]
jb 0x54e62b
add byte [eax], al
out dx, eax
add bh, ch
add cl, byte [ecx + 0x6e]
je 0x54e697
jb 0x54e6a0
outsd dx, dword [esi]
arpl word [ebx + 0x65], bp
dec ecx
outsb dx, byte [esi]
arpl word [edx + 0x65], si
insd dword es:[edi], dx
insd dword es:[edi], dx
outsb dx, byte gs:[esi]
je 0x54e643
add bl, ch
add cl, byte [ecx + 0x6e]
outsb dx, byte [esi]
je 0x54e6af
jb 0x54e6b8
outsd dx, dword [esi]
arpl word [ebx + 0x65], bp
inc esp
arpl word gs:[edx + 0x65], si
insd dword es:[edi], dx
insd dword es:[edi], dx
outsb dx, byte gs:[esi]
je 0x54e65b
add byte [ecx], bl
add dword [ebp + 0x78], eax
imul esi, dword [eax + edx*2 + 0x72], 0x7365636f
jb 0x54e6d4
arpl word [ebp + 0x73], sp
jae 0x54e66a
pop ss
add al, byte [edi + 0x65]
je 0x54e6bd
outsd dx, dword [esi]
jne 0x54e6e0
dec eax
popal
outsb dx, byte [esi]
insb byte es:[edi], dx
inc ebp
js 0x54e6d5
add byte [eax], al
add ecx, dword [di + 0x75]
insb byte es:[edi], dx
je 0x54e6f0
inc edx
jns 0x54e6fe
push esp
outsd dx, dword [esi]
push edi
imul esp, dword [ebp + 0x43], 0x726168
add al, byte fs:[edi + 0x65]
add al, byte [edi + 0x65]
je 0x54e6ef
je 0x54e6ef
je 0x54e702
dec eax
popal
outsb dx, byte [esi]
insb byte es:[edi], dx
add byte gs:[eax], al
dec edx
add al, byte [edi + 0x65]
je 0x54e6fc
jb 0x54e71d
arpl word [ebp + 0x73], sp
jae 0x54e6fb
jae 0x54e725
dec eax
popal
jo 0x54e6b7
add bl, dh
add dword [edi + 0x65], eax
add dword [edi + 0x65], eax
je 0x54e704
inc esi
imul ebp, dword [ebp + 0x54], 0x657079
arpl word [edx], ax
inc edi
je 0x54e71f
je 0x54e72f
jb 0x54e744
jne 0x54e742
dec ecx
outsb dx, byte [esi]
outsw dx, word [esi]
outsd dx, dword [esi]
push edi
add cl, al
add dword [edi + 0x65], eax
je 0x54e721
jne 0x54e752
jb 0x54e747
outsb dx, byte [esi]
je 0x54e735
jb 0x54e756
arpl word [ebp + 0x73], sp
jae 0x54e735
add byte fs:[ecx + 2], bh
add al, byte [edi + 0x65]
je 0x54e747
inc edi
je 0x54e747
jns 0x54e769
je 0x54e75d
insd dword es:[edi], dx
push esp
imul ebp, dword [ebp + 0x65], 0x69467341
insb byte es:[edi], dx
insd dword es:[edi], dx
inc ecx
jae 0x54e746
imul ebp, dword [ebp + 0x54], 0x656d69
fiadd dword [ecx]
inc edi
push esp
imul ebp, dword [ebp + 0x65], 0x4701da00
je 0x54e753
outsb dx, byte [esi]
jbe 0x54e77a
jb 0x54e782
outsb dx, byte [esi]
insd dword es:[edi], dx
outsb dx, byte gs:[esi]
je 0x54e76c
je 0x54e78d
imul ebp, dword [esi + 0x67], 0x5773
jae 0x54e777
push edi
add byte [eax], al
add byte [ecx + 1], ah
inc esi
popal
add dword [esi + 0x72], eax
inc ebp
jb 0x54e78c
inc ebp
outsb dx, byte [esi]
jbe 0x54e795
jb 0x54e79d
outsb dx, byte [esi]
insd dword es:[edi], dx
outsb dx, byte gs:[esi]
je 0x54e787
je 0x54e7a8
jb 0x54e7a0
imul ebp, dword [esi + 0x67], 0xd3005773
outsb dx, byte [esi]
jae 0x54e792
add bl, dl
add al, 0x55
outsb dx, byte [esi]
push 0x6c646e61
outsb dx, byte [esi]
insb byte es:[edi], dx
insb byte es:[edi], dx
inc ebp
inc ebp
inc ebp
js 0x54e7ad
jo 0x54e7c1
imul ebp, dword [edi + 0x6e], 0x746c6946
jb 0x54e757
insb byte es:[edi], dx
je 0x54e7ba
jb 0x54e757
add byte [eax], al
movsd dword es:[edi], dword [esi]
add al, 0x53
je 0x54e7b3
add byte [ebp + 0x74655304], ah
push ebp
outsb dx, byte [esi]
push 0x6c646e61
inc ebp
js 0x54e7cc
jo 0x54e7e0
imul ebp, dword [edi + 0x6e], 0x746c6946
jb 0x54e776
rol byte [esp + edx*2], 0x65
add al, 0x54
jb 0x54e7e9
jb 0x54e7e9
imul ebp, dword [esi + 0x61], 0x72506574
outsd dx, dword [esi]
jb 0x54e7f3
arpl word [ebp + 0x73], sp
jae 0x54e789
add ch, al
add al, 0x54
push esp
insb byte es:[edi], dx
jae 0x54e7d1
insb byte es:[edi], dx
insb byte es:[edi], dx
outsd dx, dword [esi]
arpl word [eax], ax
add bh, al
add al, 0x54
insb byte es:[edi], dx
jae 0x54e7e3
je 0x54e7f5
je 0x54e7f5
popal
insb byte es:[edi], dx
jne 0x54e808
add al, cl
add al, 0x54
insb byte es:[edi], dx
jae 0x54e7fd
je 0x54e803
popal
insb byte es:[edi], dx
jne 0x54e816
add dh, al
add al, 0x54
insb byte es:[edi], dx
jae 0x54e7fe
jb 0x54e81f
add byte gs:[eax], al
add ecx, dword [ecx + 0x73]
inc esp
bound esi, qword gs:[ebp + 0x67]
jb 0x54e819
jb 0x54e830
jae 0x54e832
outsb dx, byte gs:[esi]
outsb dx, byte [esi]
je 0x54e7d0
add al, 3
dec ecx
jae 0x54e825
add ecx, dword [ecx + 0x73]
push eax
jb 0x54e846
arpl word [ebp + 0x73], sp
jae 0x54e84b
jb 0x54e824
popal
je 0x54e857
jb 0x54e849
push eax
push eax
jb 0x54e84c
jae 0x54e84e
outsb dx, byte [esi]
je 0x54e7ec
aam 2
dec eax
popal
jo 0x54e846
imul edi, dword [edx + 0x65], 0x30a0000
add byte gs:[eax], al
or al, byte [ebx]
dec ecx
jae 0x54e853
popal
insb byte es:[edi], dx
imul esp, dword [ebx + eax*2 + 0x6f], 0x61506564
push eax
popal
add byte gs:[bx + si + 1], ch
add byte gs:[eax + 1], ch
inc edi
je 0x54e851
inc ebx
push eax
add byte [eax], al
aaa
add al, byte [edi + 0x65]
je 0x54e869
inc edi
je 0x54e869
dec edi
inc ebp
dec ebp
inc ebx
push eax
add byte [eax], al
jb 0x54e823
add byte [edx + 1], dh
inc edi
je 0x54e869
je 0x54e869
inc ebx
push eax
dec ecx
outsb dx, byte [esi]
outsw dx, word [esi]
add dl, dl
add cl, byte [eax + 0x65]
popal
jo 0x54e885
push edx
inc ecx
insb byte es:[edi], dx
insb byte es:[edi], dx
outsd dx, dword [esi]
arpl word [eax], ax
push edi
add dword [esi + 0x6c], eax
jne 0x54e8b3
push 0x656c6946
inc edx
jne 0x54e8ae
jb 0x54e8bf
jb 0x54e8bf
jae 0x54e84d
add byte [eax], al
add byte [edx + 0x74654701], bl
lcall 0x6f43, 0x74654701
je 0x54e897
inc ebx
outsd dx, dword [esi]
outsb dx, byte [esi]
jae 0x54e8c7
outsd dx, dword [esi]
insb byte es:[edi], dx
inc ebx
push eax
add byte [eax], al
lodsb al, byte [esi]
add dword [edi + 0x65], eax
je 0x54e8a7
outsd dx, dword [esi]
outsb dx, byte [esi]
jae 0x54e8d7
insb byte es:[edi], dx
dec ebp
outsd dx, dword [esi]
add byte gs:[eax], al
add al, 0x53
je 0x54e8bc
imul ebp, dword [ebp + 0x50], 0x746e696f
jb 0x54e881
add byte [edi + 4], ah
push ebx
je 0x54e8ce
imul ebp, dword [ebp + 0x50], 0x746e696f
jb 0x54e8d8
js 0x54e895
add byte [esi + 0x61655203], bh
add edx, dword [edx + 0x65]
popal
inc ebx
outsd dx, dword [esi]
outsb dx, byte [esi]
jae 0x54e910
insb byte es:[edi], dx
push edi
add byte [eax], al
mov al, byte [ebx]
dec edi
jne 0x54e91f
add ecx, dword [edi + 0x75]
je 0x54e91c
jo 0x54e922
jne 0x54e922
je 0x54e8f3
inc esp
bound esi, qword gs:[ebp + 0x67]
push ebx
je 0x54e928
imul ebp, dword [esi + 0x67], 0x69000057
add al, byte [edi + 0x65]
je 0x54e915
imul eax, dword [edx], 0x53746547
je 0x54e915
je 0x54e936
imul ebp, dword [esi + 0x67], 0x65707954
push edi
push esp
jns 0x54e93a
push edi
add byte [eax], al
sub eax, 0x4d434c03
popal
jo 0x54e929
je 0x54e94a
jb 0x54e942
imul ebp, dword [esi + 0x67], 0x87000057
add al, 0x53
outsb dx, byte [esi]
push edi
add byte [eax], al
xchg dword [ebx + edx*2], eax
je 0x54e937
je 0x54e94a
dec eax
popal
outsb dx, byte [esi]
insb byte es:[edi], dx
add byte gs:[eax], al
and al, 5
push edi
jb 0x54e95c
je 0x54e95a
inc ebx
outsd dx, dword [esi]
outsb dx, byte [esi]
jae 0x54e969
insb byte es:[edi], dx
push edi
add byte [ebx + 4], dl
push ebx
je 0x54e949
outsb dx, byte [esi]
dec edi
inc si
imul ebp, dword [ebp], 0x4802ce00
dec eax
popal
jo 0x54e959
jae 0x54e98c
jb 0x54e989
jns 0x54e91c
add al, byte [edx]
inc edi
je 0x54e96e
popal
jae 0x54e999
inc ebp
jb 0x54e99a
outsd dx, dword [esi]
jb 0x54e92b
add cl, dl
add byte [ebp + 0x6c], al
je 0x54e999
inc ebx
jb 0x54e9a0
imul esi, dword [ecx + ebp*2 + 0x63], 0x65536c61
arpl word [ecx + ebp*2 + 0x6f], si
je 0x54e9a2
arpl word [ecx + 0x6c], sp
popal
insb byte es:[edi], dx
push ebx
arpl word gs:[ecx + ebp*2 + 0x6f], si
outsb dx, byte [esi]
add byte [ecx], bh
add ecx, dword [ebp + 0x61]
jbe 0x54e9b0
inc ebx
inc ebx
jb 0x54e9b7
je 0x54e9b9
arpl word [ecx + 0x6c], sp
push ebx
arpl word gs:[ecx + ebp*2 + 0x6f], si
outsb dx, byte [esi]
add byte [eax], al
out dx, al
add byte [ebp + 0x6e], al
je 0x54e9c7
jb 0x54e9a7
jb 0x54e9cf
je 0x54e9d1
arpl word [ecx + 0x6c], sp
popal
insb byte es:[edi], dx
push ebx
arpl word gs:[ecx + ebp*2 + 0x6f], si
je 0x54e9d9
outsd dx, dword [esi]
outsb dx, byte [esi]
add byte [eax], al
rol byte [ecx], 0x47
je 0x54e9bd
jne 0x54e9ee
jb 0x54e9e3
outsb dx, byte [esi]
je 0x54e9d1
jb 0x54e9f2
arpl word [ebp + 0x73], sp
jae 0x54e988
adc eax, 0x74654702
dec ebp
add al, byte [edi + 0x65]
je 0x54e9db
outsd dx, dword [esi]
jne 0x54e9fe
dec eax
popal
outsb dx, byte [esi]
insb byte es:[edi], dx
inc ecx
inc ecx
add byte [eax], al
test al, 0
inc ebx
jb 0x54ea06
popal
popal
je 0x54ea09
push eax
jb 0x54ea16
arpl word [ebp + 0x73], sp
jae 0x54ea03
add byte [eax], al
dec ebp
add dword [esi + 0x69], eax
outsb dx, byte [esi]
push edx
jae 0x54ea27
inc esi
imul ebp, dword [esi + 0x64], 0x6f736552
outsd dx, dword [esi]
jne 0x54ea2c
jb 0x54ea1e
arpl word [ebp + 0x45], sp
inc ebp
js 0x54ea16
add byte [esi + 1], cl
inc esi
imul ebp, dword [esi + 0x64], 0x6f736552
jae 0x54ea39
jne 0x54ea3e
arpl word [ebp + 0x57], sp
add byte [edi], bh
add ecx, dword [edi + ebp*2 + 0x61]
dec esp
imul esp, dword [edx + 0x72], 0x57797261
jb 0x54ea3c
jb 0x54ea56
push edi
add byte [eax], al
cmp al, 3
dec esp
outsd dx, dword [esi]
popal
dec esp
imul esp, dword [edx + 0x72], 0x41797261
add byte [eax], al
mov ebp, 0x73795304
push ebx
jns 0x54ea68
je 0x54ea5c
insd dword es:[edi], dx
push esp
imul ebp, dword [ebp + 0x65], 0x69466f54
insb byte es:[edi], dx
push esp
inc esi
imul ebp, dword [ebp + 0x54], 0x656d69
add byte [ecx + 0x7a695304], dh
outsd dx, dword gs:[esi]
push dx
jae 0x54ea83
imul ebp, dword [ebp + 0x65], 0x4b10000
add byte [eax], al
mov cl, 4
add al, 0x53
push ebx
imul edi, dword [edx + 0x65], 0x6552666f
jae 0x54ea83
jne 0x54ea88
arpl word [ebp], sp
add byte [ecx + 3], al
dec esp
outsd dx, dword [esi]
popal
push edx
jae 0x54ea93
jne 0x54ea98
arpl word [ebp], sp
add byte [ebp + 2], al
add byte gs:[eax], al
inc ebp
add al, byte [edi + 0x65]
je 0x54ea80
inc edi
je 0x54ea80
jb 0x54eaa1
arpl word [ecx + 0x64], ax
jb 0x54ea9d
jae 0x54eaad
jae 0x54ea3b
add byte [eax], al
add byte [edi + 0x65755103], ah
cmpsd dword [esi], dword es:[edi]
add edx, dword [ecx + 0x75]
jb 0x54eabc
push ecx
jne 0x54eaa6
jb 0x54eabc
push eax
jb 0x54eaad
outsd dx, dword [esi]
jb 0x54eab7
popal
outsb dx, byte [esi]
arpl word [ebp + 0x43], sp
outsd dx, dword [esi]
jne 0x54eac0
je 0x54eab9
jb 0x54ea56
push esp
add ecx, dword [edi + ebp*2 + 0x63]
imul edx, dword [edx + 0x65], 0x73
outsd dx, dword [esi]
push edx
jae 0x54eacf
jne 0x54ead4
arpl word [ebp], sp
add byte [ecx + 0x65724300], al
inc ebx
jb 0x54ead0
popal
je 0x54ead3
push ebx
jb 0x54eae8
imul esp, dword [ebx + 0x65], 0x7e000057
add dl, byte [edx + 0x65]
push ebx
je 0x54ead7
push esi
popal
insb byte es:[edi], dx
jne 0x54eaea
inc ebp
js 0x54eadf
add byte [eax], al
cmp dword [edx], eax
push edx
inc ebx
jb 0x54eaf7
popal
je 0x54eafa
dec ebx
jns 0x54eade
inc ebp
js 0x54eaf2
add cl, cl
add dl, byte [ebx + 0x74]
popal
jb 0x54eb17
push ebx
jb 0x54eb1d
jbe 0x54eb11
imul esp, dword [ebx + 0x65], 0x2240057
arpl word [ebp + 0x57], sp
add byte [edx + eax], ah
add dl, byte [ecx + 0x75]
jb 0x54eb2c
push ecx
jne 0x54eb16
jb 0x54eb2c
push ebx
jb 0x54eb2d
imul esp, dword [ebx + 0x65], 0x666e6f43
imul esp, dword [edi + 0x57], 0x4f01fb00
jo 0x54eb2c
inc ebx
outsd dx, dword [esi]
outsb dx, byte [esi]
imul sp, word [edi + 0x57], 0xfb00
push edi
add bl, bh
add dword [edi + 0x70], ecx
outsb dx, byte gs:[esi]
outsb dx, byte [esi]
push ebx
jb 0x54eb42
imul esp, dword [ebx + 0x65], 0xf9000057
push edi
add byte [eax], al
stc
add dword [edi + 0x70], ecx
outsb dx, byte gs:[esi]
dec edi
jo 0x54eb3c
outsb dx, byte [esi]
push ebx
inc ebx
dec ebp
popal
outsb dx, byte [esi]
popal
jb 0x54eb39
jb 0x54eb39
add byte [eax], al
push edi
add byte [ebx + 0x6c], al
outsd dx, dword [esi]
jae 0x54eb50
push ebx
push ebx
jb 0x54eb65
imul esp, dword [ebx + 0x65], 0x646e6148
insb byte es:[edi], dx
dec eax
popal
outsb dx, byte [esi]
insb byte es:[edi], dx
add byte gs:[eax], al
push eax
add byte [ebx + 0x68], al
popal
outsb dx, byte [esi]
push ebx
jb 0x54eb7c
imul esp, dword [ebx + 0x65], 0x666e6f43
imul esp, dword [edi + 0x57], 0x2610000
add byte [ecx + 2], ah
push edx
dec edi
dec edi
dec edi
jo 0x54eb7f
outsb dx, byte [esi]
dec ebx
jns 0x54eb64
jns 0x54eb64
js 0x54eb78
add byte [eax], dh
add dl, byte [edx + 0x65]
inc ebx
insb byte es:[edi], dx
outsd dx, dword [esi]
jae 0x54eb91
dec ebx
jns 0x54eb30
retf
insb byte es:[edi], dx
popal
jae 0x54eba3
inc ebx
outsd dx, dword [esi]
outsb dx, byte [esi]
je 0x54eba8
js 0x54ebb9
js 0x54ebb9
add byte [ecx + 0x79724300], dh
jo 0x54ebc1
inc ecx
arpl word [ecx + 0x75], si
imul esi, dword [edx + 0x65], 0x746e6f43
js 0x54ebcf
jne 0x54ebbb
jb 0x54ebb9
inc ebx
outsd dx, dword [esi]
outsb dx, byte [esi]
je 0x54ebbe
js 0x54ebcf
push edi
add byte [eax], al
add dword gs:[edi + 0x65], eax
je 0x54ebb9
jae 0x54ebcb
jb 0x54ebb6
jb 0x54ebb6
popal
insd dword es:[edi], dx
push edi
add byte [eax], al
add dword fs:[edi + 0x65], eax
je 0x54ebc9
jae 0x54ebdb
jb 0x54ebc6
popal
insd dword es:[edi], dx
inc ecx
add byte [eax], al
push ecx
add byte [ebx + 0x68], al
arpl word gs:[ebx + 0x54], bp
outsd dx, dword [esi]
imul esp, dword [ebp + 0x6e], 0x4d
insd dword es:[edi], dx
bound esp, qword [ebp + 0x72]
jae 0x54ebfa
push 0x7069
and byte [ecx], al
inc esi
imul esi, dword [eax], 0x46012000
jb 0x54ec00
push ebx
imul esp, dword [eax + eax + 0x20], 0x6c6c4100
insb byte es:[edi], dx
insb byte es:[edi], dx
outsd dx, dword [esi]
arpl word [ecx + 0x74], sp
inc ecx
je 0x54ec0f
inc ecx
outsb dx, byte [esi]
dec ecx
outsb dx, byte [esi]
imul esi, dword [ecx + ebp*2 + 0x61], 0x657a696c
push ebx
push ebx
imul esp, dword [eax + eax], 0x6552026e
add byte fs:[eax], al
outsb dx, byte [esi]
add dl, byte [edx + 0x65]
add byte [esi + 2], ch
push edx
push ecx
push ecx
push ecx
jne 0x54ec29
jb 0x54ec3f
push esi
popal
insb byte es:[edi], dx
jne 0x54ec30
inc ebp
js 0x54ec25
add byte [eax], al
add byte ds:[ebx + 0x6f], al
add byte [esi], bh
add byte [ebx + 0x6f], al
dec ecx
outsb dx, byte [esi]
imul esi, dword [ecx + ebp*2 + 0x61], 0x657a696c
add byte [eax], al
adc byte [eax], al
imul edi, dword [edx + 0x65], 0x100000
inc ebx
outsd dx, dword [esi]
inc ebx
jb 0x54ec4c
popal
je 0x54ec4f
dec ecx
outsb dx, byte [esi]
jae 0x54ec62
popal
outsb dx, byte [esi]
arpl word [ebp], sp
add byte [edx], ah
add dword [ebx + 0x68], edx
insb byte es:[edi], dx
insb byte es:[edi], dx
inc ebp
js 0x54ec63
arpl word [ebp + 0x74], si
push edi
je 0x54ec67
push edi
add cl, ah
add byte [ebx + 0x48], dl
inc edi
je 0x54ec5f
jo 0x54ec73
arpl word [ecx + 0x61], bp
insb byte es:[edi], dx
inc esi
outsd dx, dword [esi]
insb byte es:[edi], dx
jb 0x54ec69
imul esp, dword [ecx + 0x6c], 0x646c6f46
jb 0x54ec69
popal
je 0x54ec84
push edi
add byte [edi], ah
push eax
popal
je 0x54ec8c
dec ecx
jae 0x54ec79
outsd dx, dword [esi]
outsd dx, dword [esi]
je 0x54ec82
add byte [ecx + 0x74615000], cl
push 0x6f6d6552
je 0x54ec9a
push edx
insd dword es:[edi], dx
outsd dx, dword [esi]
jbe 0x54ec9d
inc ebp
js 0x54ecaf
outsb dx, byte gs:[esi]
jae 0x54eca8
outsd dx, dword [esi]
outsb dx, byte [esi]
push edi
add byte [eax], al
xor al, byte [eax]
push eax
popal
je 0x54ecb2
inc ecx
inc ebp
inc ebp
js 0x54ecc4
je 0x54ecb6
outsb dx, byte gs:[esi]
outsb dx, byte [esi]
jae 0x54ecbd
outsd dx, dword [esi]
outsb dx, byte [esi]
push edi
add byte [eax + eax], dh
push eax
popal
je 0x54ecc6
inc ecx
jo 0x54ecd1
outsb dx, byte gs:[esi]
outsb dx, byte [esi]
push edi
add byte [ebp], al
push eax
add byte [eax + 0x61], dl
popal
je 0x54ecd4
inc esi
imul ebp, dword [ebp + 0x45], 0x74736978
jae 0x54ece9
jae 0x54ecce
add byte [eax], al
add byte [edi + esi*2 + 0x6d], al
inc edi
je 0x54ecc5
inc esp
js 0x54ecd6
push ebx
push 0x64657261
push ebx
popal
jb 0x54ecec
push ebx
jne 0x54ecfd
popaw
popal
arpl word [ebp], sp
dec ebx
inc ebp
add byte gs:[ebx + 0x45], cl
push edx
dec esi
inc ebp
dec esp
xor esi, dword [edx]
insb byte es:[edi], dx
insb byte es:[edi], dx
insb byte es:[edi], dx
add byte [ecx + 0x44], al
inc ecx
inc esp
push esi
inc ecx
push eax
dec ecx
xor esi, dword [edx]
insb byte es:[edi], dx
insb byte es:[edi], dx
add byte [edi + 0x6c], ch
outsd dx, dword [esi]
insb byte es:[edi], dx
xor esi, dword gs:[edx]
insb byte es:[edi], dx
insb byte es:[edi], dx
insb byte es:[edi], dx
add byte [ebx + 0x48], dl
inc ebp
dec esp
dec esp
xor esi, dword [edx]
insb byte es:[edi], dx
insb byte es:[edi], dx
insb byte es:[edi], dx
add byte [ebx + 0x48], dl
dec esp
push edi
inc ecx
push eax
dec ecx
insb byte es:[edi], dx
insb byte es:[edi], dx
add byte [ebp + 0x53], dl
push ebx
inc ebp
push edx
xor esi, dword [edx]
inc esp
xor ch, byte [esi]
inc esp
dec esp
dec esp
add byte [ecx + sym.imp.KERNEL32.dll_CloseHandle], ah
jmp eax
add bh, bh
loopne 0x54ec80
je 0x54ecc3
push esp
add bh, bh
loopne 0x54ec87
js 0x54ecca
push esp
add bh, bh
loopne 0x54ec8e
mov eax, dword [sym.imp.KERNEL32.dll_Sleep]
jmp eax
jl 0x54ecd1
push esp
add bh, bh
loopne 0x54ec95
and dl, 0x54
add bh, bh
loopne 0x54ec9c
test dl, ah
push esp
add bh, bh
loopne 0x54eca3
mov dl, ah
push esp
add bh, bh
loopne 0x54ecaa
mov edx, fs
push esp
add bh, bh
loopne 0x54ecb1
nop
loop 0x54ed67
add bh, bh
loopne 0x54ecb8
xchg esp, eax
loop 0x54ed6e
add bh, bh
loopne 0x54ecbf
cwde
loop 0x54ed75
add bh, bh
loopne 0x54ecc6
pushfd
loop 0x54ed7c
add bh, bh
loopne 0x54eccd
mov al, byte [0xff0054e2]
add bh, bh
loopne 0x54ecd4
movsb byte es:[edi], byte [esi]
loop 0x54ed8a
add bh, bh
loopne 0x54ecdb
test al, 0xe2
push esp
add bh, bh
loopne 0x54ece2
lodsb al, byte [esi]
loop 0x54ed98
add bh, bh
loopne 0x54ece9
mov al, 0xe2
push esp
add bh, bh
loopne 0x54ecf0
mov ah, 0xe2
push esp
add bh, bh
loopne 0x54ecf7
mov eax, 0xff0054e2
add bh, bh
loopne 0x54ecfe
mov esp, 0xff0054e2
add bh, bh
loopne 0x54ed05
shl dl, 0x54
add bh, bh
loopne 0x54ed0c
invalid
add bh, bh
loopne 0x54ed13
enter 0x54e2, 0
jmp eax
add bh, bh
loopne 0x54ed1a
int3
add bh, bh
loopne 0x54ed21
shl dl, 1
push esp
add bh, bh
loopne 0x54ed28
aam 0xe2
push esp
add bh, bh
loopne 0x54ed2f
fsub st(2)
push esp
add bh, bh
loopne 0x54ed36
fsubr st(2), st(0)
push esp
add bh, bh
loopne 0x54ed3d
loopne 0x54ed80
push esp
add bh, bh
loopne 0x54ed44
in al, 0xe2
push esp
add bh, bh
loopne 0x54ed4b
call 0xff554291
add bh, bh
loopne 0x54ed52
in al, dx
loop 0x54ee08
add bh, bh
loopne 0x54ed59
invalid
add bh, bh
loopne 0x54ed60
hlt
add bh, bh
loopne 0x54ed67
clc
loop 0x54ee1d
add bh, bh
loopne 0x54ed6e
cld
loop 0x54ee24
add bh, bh
loopne 0x54ed75
add bl, ah
push esp
add bh, bh
loopne 0x54ed7c
add al, 0xe3
push esp
add bh, bh
loopne 0x54ed83
or bl, ah
push esp
add bh, bh
loopne 0x54ed8a
or al, 0xe3
push esp
add bh, bh
loopne 0x54ed91
adc bl, ah
push esp
add bh, bh
loopne 0x54ed98
adc al, 0xe3
push esp
add bh, bh
loopne 0x54ed9f
sbb bl, ah
push esp
add bh, bh
loopne 0x54eda6
sbb al, 0xe3
push esp
add bh, bh
loopne 0x54edad
and bl, ah
push esp
add bh, bh
loopne 0x54edb4
and al, 0xe3
push esp
add bh, bh
loopne 0x54edbb
sub bl, ah
push esp
add bh, bh
loopne 0x54edc2
sub al, 0xe3
push esp
add bh, bh
loopne 0x54edc9
xor bl, ah
push esp
add bh, bh
loopne 0x54edd0
xor al, 0xe3
push esp
add bh, bh
loopne 0x54edd7
cmp bl, ah
push esp
add bh, bh
loopne 0x54edde
cmp al, 0xe3
push esp
add bh, bh
loopne 0x54ede5
inc eax
jecxz 0x54ee9b
add bh, bh
loopne 0x54edec
inc esp
jecxz 0x54eea2
add bh, bh
loopne 0x54edf3
dec eax
jecxz 0x54eea9
add bh, bh
loopne 0x54edfa
dec esp
jecxz 0x54eeb0
add bh, bh
loopne 0x54ee01
push eax
jecxz 0x54eeb7
add bh, bh
loopne 0x54ee08
push esp
jecxz 0x54eebe
add bh, bh
loopne 0x54ee0f
pop eax
jecxz 0x54eec5
add bh, bh
loopne 0x54ee16
pop esp
jecxz 0x54eecc
add bh, bh
loopne 0x54ee1d
pushal
jecxz 0x54eed3
add bh, bh
loopne 0x54ee24
jecxz 0x54eeda
jecxz 0x54eeda
add bh, bh
loopne 0x54ee2b
push 0xff0054e3
jecxz 0x54eee1
add bh, bh
loopne 0x54ee32
insb byte es:[edi], dx
jecxz 0x54eee8
add bh, bh
loopne 0x54ee39
jo 0x54ee7d
push esp
add bh, bh
loopne 0x54ee40
je 0x54ee84
push esp
add bh, bh
loopne 0x54ee47
js 0x54ee8b
push esp
add bh, bh
loopne 0x54ee4e
jl 0x54ee92
push esp
add bh, bh
loopne 0x54ee55
and bl, 0x54
add bh, bh
loopne 0x54ee5c
test bl, ah
push esp
add bh, bh
loopne 0x54ee63
mov bl, ah
push esp
add bh, bh
loopne 0x54ee6a
mov ebx, fs
push esp
add bh, bh
loopne 0x54ee71
nop
jecxz 0x54ef27
add bh, bh
loopne 0x54ee78
xchg esp, eax
jecxz 0x54ef2e
add bh, bh
loopne 0x54ee7f
cwde
jecxz 0x54ef35
add bh, bh
loopne 0x54ee86
pushfd
jecxz 0x54ef3c
add bh, bh
loopne 0x54ee8d
mov al, byte [0xff0054e3]
add bh, bh
loopne 0x54ee94
movsb byte es:[edi], byte [esi]
jecxz 0x54ef4a
add bh, bh
loopne 0x54ee9b
test al, 0xe3
push esp
add bh, bh
loopne 0x54eea2
lodsb al, byte [esi]
jecxz 0x54ef58
add bh, bh
loopne 0x54eea9
mov al, 0xe3
push esp
add bh, bh
loopne 0x54eeb0
mov ah, 0xe3
push esp
add bh, bh
loopne 0x54eeb7
mov eax, 0xff0054e3
add bh, bh
loopne 0x54eebe
mov esp, 0xff0054e3
add bh, bh
loopne 0x54eec5
shl bl, 0x54
add bh, bh
loopne 0x54eecc
invalid
add bh, bh
loopne 0x54eed3
int3
add bh, bh
loopne 0x54eeda
shl bl, 1
push esp
jecxz 0x54ef90
add bh, bh
loopne 0x54eee1
aam 0xe3
push esp
add bh, bh
loopne 0x54eee8
fsub st(3)
push esp
add bh, bh
loopne 0x54eeef
fsubr st(3), st(0)
push esp
add bh, bh
loopne 0x54eef6
loopne 0x54ef3a
push esp
add bh, bh
loopne 0x54eefd
in al, 0xe3
push esp
add bh, bh
loopne 0x54ef04
call 0xff55444b
add bh, bh
loopne 0x54ef0b
in al, dx
jecxz 0x54efc1
add bh, bh
loopne 0x54ef12
invalid
add bh, bh
loopne 0x54ef19
hlt
add bh, bh
loopne 0x54ef20
clc
jecxz 0x54efd6
add bh, bh
loopne 0x54ef27
cld
jecxz 0x54efdd
add bh, bh
loopne 0x54ef2e
add ah, ah
push esp
add bh, bh
loopne 0x54ef35
add al, 0xe4
push esp
add bh, bh
loopne 0x54ef3c
or ah, ah
push esp
add bh, bh
loopne 0x54ef43
or al, 0xe4
push esp
add bh, bh
loopne 0x54ef4a
adc ah, ah
push esp
add bh, bh
loopne 0x54ef51
adc al, 0xe4
push esp
add bh, bh
loopne 0x54ef58
sbb al, 0xe4
push esp
add bh, bh
loopne 0x54ef5f
and ah, ah
push esp
add bh, bh
loopne 0x54ef66
sub ah, ah
push esp
add bh, bh
loopne 0x54ef6d
sub al, 0xe4
push esp
add bh, bh
loopne 0x54ef74
xor al, 0xe4
push esp
add bh, bh
loopne 0x54ef7b
cmp ah, ah
push esp
add bh, bh
loopne 0x54ef82
cmp al, 0xe4
push esp
add bh, bh
loopne 0x54ef89
inc eax
in al, 0x54
add bh, bh
loopne 0x54ef90
inc esp
in al, 0x54
add bh, bh
loopne 0x54ef97
dec esp
in al, 0x54
add bh, bh
loopne 0x54effd
add byte [eax], al
add bh, bh
invalid