Function at 0x7891dc
Capabilities:
Execute anti-debugging instructions

Disassembly:
xchg bp, bx
mov dx, 0x74e3
lea esi, [ecx*4]
jmp 0x788d7d
mov ecx, 0x5048a02b
not ebp
inc cx
push bx
mov bh, 0x5b
not si
jmp 0x788de1
inc dl
setle al
pushal
push dword [esp + 0x13]
setns ch
lea edx, [ecx - 0x46]
jmp 0x788ffd
xchg bx, ax
pop ax
mov ax, 0xce5f
call 0x7891dc
lodsb al, byte [esi]
mov esp, 0xbfe236db
xchg byte [ecx], dh
aas
outsd dx, dword fs:[esi]
ja 0x789086
insb byte es:[edi], dx
outsd dx, dword [esi]
popal
push eax
jb 0x78908e
jb 0x789087
jae 0x789097
inc eax
push ecx
dec esi
je 0x7890a1
outsd dx, dword [esi]
jb 0x789098
push edx
jo 0x78909d
jns 0x789073
inc eax
push ecx
inc ecx
inc ebp
pop eax
pop edi
dec edx
xor byte [eax + 0x5a], al
add byte [edi], bh
jno 0x7890b5
pop edi
insd dword es:[edi], dx
je 0x7890a7
arpl word [ecx + 0x73], sp
je 0x78908b
push ecx
inc ebp
jbe 0x7890b4
outsb dx, byte [esi]
je 0x78909e
outsd dx, dword [esi]
outsd dx, dword [esi]
jo 0x789096
inc eax
push ebp
inc ecx
inc ebp
push eax
inc ecx
pop eax
push eax
inc edx
inc esp
inc eax
pop edx
add byte [eax], dh
xor edi, dword [edi]
popal
je 0x7890dd
jb 0x7890d4
bound esi, qword [ebp + 0x74]
inc eax
push ecx
dec esi
je 0x7890ec
je 0x7890ec
outsd dx, dword [esi]
jb 0x7890e3
push edx
jo 0x7890e8
jns 0x7890be
inc eax
push ecx
inc edx
inc ebp
aas
inc ecx
push esi
push ecx
push esi
popal
jb 0x7890f3
popal
outsb dx, byte [esi]
je 0x7890ce
inc eax
push edi
xor al, 0x41
je 0x789108
jb 0x7890ff
bound esi, qword [ebp + 0x74]
jne 0x78910d
je 0x7890ff
inc eax
inc eax
push ecx
dec esi
je 0x789117
je 0x789117
outsd dx, dword [esi]
jb 0x78910e
push edx
jno 0x78911c
jae 0x78911e
inc eax
inc eax
inc eax
pop edx
add byte [edi], bh
jb 0x789117
jae 0x789119
jb 0x78912c
jbe 0x78911c
inc eax
inc eax
push ecx
inc edx
jns 0x789130
inc ecx
jb 0x789132
popal
jns 0x789103
inc eax
push ecx
inc ecx
inc ebp
pop eax
dec eax
inc eax
pop edx
add byte [ebx], ch
test al, 0x3e
pop ecx
pop ecx
test al, 0x4e
inc ebp
hlt
aas
jae 0x78914b
popal
je 0x789143
arpl word [ebp + 0x65], cx
je 0x789140
dec edi
bound ebp, qword [edx + 0x65]
arpl word [eax + eax*2 + 0x51], si
inc ebp
jbe 0x78914f
outsb dx, byte [esi]
je 0x789139
dec esp
outsd dx, dword [esi]
outsd dx, dword [esi]
jo 0x789131
inc eax
xor dl, byte [ebp + 0x51]
push ebp
push ecx
dec ebp
je 0x78915a
dec edi
bound ebp, qword [edx + 0x65]
arpl word [eax + eax*2 + 0x40], si
inc eax
inc eax
inc edx
add byte [edi], bh
aas
arpl word [ecx + 0x73], bp
jae 0x789158
popal
insd dword es:[edi], dx
inc eax
inc eax
push ecx
dec ebp
je 0x789174
dec edi
bound ebp, qword [edx + 0x65]
arpl word [eax + eax*2 + 0x40], si
inc eax
inc eax
push ecx
inc edx
inc ebp
push eax
inc edx
inc esp
pop eax
pop edx
add ch, ah
imul edi, ebx, 0xffffff9e
insd dword es:[edi], dx
mov cl, byte [0x9465028c]
add ah, byte [ebp - 0x6c]
jbe 0x7890ca
cdq
clc
fstp xword [edi]
jno 0x7891aa
pop edi
insd dword es:[edi], dx
je 0x78919c
je 0x78919c
arpl word [ecx + 0x6c], sp
insb byte es:[edi], dx
inc eax
push ecx
inc ebp
jbe 0x7891a9
outsb dx, byte gs:[esi]
outsb dx, byte [esi]
je 0x789193
outsd dx, dword [esi]
outsd dx, dword [esi]
jo 0x78918b
inc eax
push ebp
inc ecx
inc ebp
dec eax
push edi
xor al, 0x43
popal
insb byte es:[edi], dx
insb byte es:[edi], dx
inc eax
push ecx
dec ebp
je 0x7891bd
je 0x7891bd
dec edi
bound ebp, qword [edx + 0x65]
arpl word [eax + eax*2 + 0x40], si
dec eax
push eax
inc ecx
push eax
inc ecx
pop eax
inc eax
pop edx
add byte [edi], bh
popal
jo 0x7891e1
outsb dx, byte gs:[esi]
inc eax
inc eax
push ecx
inc edx
jns 0x7891ed
inc ecx
jb 0x7891ef
popal
jns 0x7891c0
inc eax
push ecx
inc ecx
inc ebp
inc ecx
inc ecx
push esi
xor dword [eax + 0x50], eax
inc edx
inc esp
inc eax
pop edx
add byte [edx], dh
sub eax, 0x65683f3c
popal
jb 0x7891da
push 0x65646165
jb 0x7891da
push ecx
dec esi
je 0x789216
outsd dx, dword [esi]
jb 0x78920d
push edx
jo 0x789212
jns 0x7891e8
inc eax
push ecx
inc edx
inc ebp
aas
inc ecx
push esi
push ecx
push esi
popal
jb 0x78921d
popal
outsb dx, byte [esi]
je 0x7891f8
inc eax
push edi
xor al, 0x4b
outsb dx, byte [esi]
outsd dx, dword [esi]
ja 0x78922e
dec eax
popal
jb 0x78923a
inc eax
push ecx
dec esi
je 0x789244
outsd dx, dword [esi]
jb 0x78923b
push edx
jno 0x789249
jae 0x78924b
inc eax
inc eax
inc eax
pop edx
add byte [ecx - 3], bl
pop dword [esp + 4]
jmp 0x78933e
add al, 0xe9
push edi
add dword [eax], eax
add byte [ebx], cl
xchg ebx, eax
add esp, dword [esi - 0x6b]
jp 0x789184
xchg esi, eax
add eax, eax
cmp dword [edx], 0x3f
jno 0x789269
rol byte [ebx + 0x74713f3a], 0x5f
pop edi
insd dword es:[edi], dx
je 0x78925b
je 0x78925b
arpl word [ecx + 0x73], sp
je 0x78923f
push ecx
dec edi
bound ebp, qword [edx + 0x65]
arpl word [eax + eax*2 + 0x40], si
push ebp
inc ecx
inc ebp
push eax
inc ecx
pop eax
push eax
inc edx
inc esp
inc eax
pop edx
add byte [eax], dl
xchg ebp, eax
add eax, 0x827d9f6c
push es
xchg esp, eax
push cs
loopne 0x789258
push ds
imul ecx, dword [eax + reloc.SHELL32.dll_ShellExecuteW], 0x40646e65
push ecx
inc edx
jns 0x7892a4
inc ecx
jb 0x7892a6
popal
jns 0x789277
inc eax
push ecx
inc ecx
inc ebp
inc ecx
inc ecx
push esi
xor dword [eax + 0x44], eax
inc eax
inc esp
inc eax
pop edx
add byte [edi], bh
aas
jno 0x78929c
outsb dx, byte [esi]
jb 0x7892af
imul esi, dword gs:[bp + di + 0x74], reloc.SHELL32.dll_ShellExecuteW
imul esi, dword [bp + di + 0x74], reloc.SHELL32.dll_ShellExecuteW
imul esi, dword [ebx + 0x74], reloc.SHELL32.dll_ShellExecuteW
jae 0x7892c3
jne 0x7892c8
arpl word [ebp + 0x44], sp
inc esp
popal
je 0x7892bd
popal
inc eax
inc eax
pop ecx
inc ecx
pop edi
dec esi
dec eax
push eax
inc edx
inc ebp
xor byte [eax], dh
inc eax
pop edx
add byte [ebx], ch
inc edx
std
int3
jb 0x7892e8
jb 0x7892e1
jae 0x7892f1
inc eax
push ecx
dec esi
je 0x7892fb
outsd dx, dword [esi]
jb 0x7892f2
push edx
jo 0x7892f7
jns 0x7892cd
inc eax
push ecx
inc ecx
inc ebp
pop eax
pop edi
dec edx
xor byte [eax + 0x5a], al
add byte [edi], bh
jno 0x7892ed
imul esi, dword gs:[bp + di + 0x74], reloc.SHELL32.dll_ShellExecuteW
imul esi, dword [bp + di + 0x74], reloc.SHELL32.dll_ShellExecuteW
jae 0x789315
jne 0x78931a
arpl word [ebp + 0x44], sp
popal
je 0x78930f
inc eax
inc eax
pop ecx
inc ecx
pop edi
dec esi
dec eax
push eax
inc edx
inc ebp
xor byte [eax], dh
inc eax
pop edx
add byte [edi - 0x5a], bl
pop edi
cmpsb byte [esi], byte es:[edi]
rcl dword [eax - 0x2d]
aas
aas
xor byte [ecx + 0x46], dl
outsd dx, dword [esi]
outsb dx, byte [esi]
je 0x78930b
inc eax
push ecx
inc ecx
inc ebp
inc eax
inc ecx
inc edx
push esi
push ecx
push ebx
je 0x789349
imul ebp, dword [esi + 0x67], reloc.SHELL32.dll_ShellExecuteW
pop edi
dec esi
inc eax
pop edx
add byte [edi], bh
jno 0x789338
jae 0x789358
outsd dx, dword [esi]
jne 0x78935d
arpl word [ebp + 0x46], sp
inc esi
popal
je 0x789367
jne 0x789365
jb 0x789359
pop edx
pop edx
insb byte es:[edi], dx
imul esp, dword [edx + 0x40], 0x45415940
bound eax, qword [eax + 0x40]
pop ecx
inc ecx
inc ebp
pop eax
pop edx
add byte [ebp - 0x38], cl
pop esi
cmp eax, ecx
and ebp, esp
adc al, 0x87
aas
popal
arpl word [ecx + ebp*2 + 0x76], si
popal
jbe 0x789372
je 0x789378
inc eax
push ecx
dec ebp
je 0x78937a
dec edi
bound ebp, qword [edx + 0x65]
arpl word [eax + eax*2 + 0x40], si
push ebx
inc ecx
pop eax
push eax
inc ecx
push esi
push ecx
dec edi
bound ebp, qword [edx + 0x65]
arpl word [eax + eax*2 + 0x40], si
push eax
inc edx
push ebp
xor dword [eax + 0x48], eax
push eax
inc ecx
push eax
inc ecx
pop eax
inc eax
pop edx
add byte [ebx - 0x79fadba4], cl
inc esp
and al, 0x1c
mov ebx, dword [esp + 5]
xchg byte [esp + 0x1c], al
mov ebx, 0x55845b6c
jmp 0x7893c3
test byte [ebp - 0x15], dl
jbe 0x78937f
mov ecx, 0x5bbb4829
sbb byte [edi], bh
jns 0x7893c6
popal
insd dword es:[edi], dx
imul esp, dword [ebx + 0x4d], 0x4f617465
je 0x7893c1
dec edi
bound ebp, qword [edx + 0x65]
arpl word [eax + eax*2 + 0x51], si
je 0x7893a7
push ecx
dec edi
bound ebp, qword [edx + 0x65]
arpl word [esp + eax*2 + 0x61], si
je 0x7893d3
inc eax
inc eax
push ecx
inc edx
inc ebp
push eax
inc ecx
push ebp
push ecx
dec ebp
je 0x7893e0
dec edi
bound ebp, qword [edx + 0x65]
arpl word [eax + eax*2 + 0x40], si
pop eax
pop edx
add byte [ebx + 0x52], bh
aas
jno 0x789403
pop edi
insd dword es:[edi], dx
je 0x7893f5
arpl word [ecx + 0x6c], sp
insb byte es:[edi], dx
inc eax
push ecx
dec edi
bound ebp, qword [edx + 0x65]
arpl word [eax + eax*2 + 0x40], si
push ebp
inc ecx
inc ebp
dec eax
push edi
xor al, 0x43
popal
insb byte es:[edi], dx
insb byte es:[edi], dx
inc eax
push ecx
dec ebp
je 0x789413
dec edi
bound ebp, qword [edx + 0x65]
arpl word [eax + eax*2 + 0x40], si
dec eax
push eax
inc ecx
push eax
inc ecx
pop eax
inc eax
pop edx
add byte [ecx + 0x66112454], cl
xchg ecx, esi
mov dword [esp + 0x11], edx
xchg cx, si
adc dword [esi - 0x79], esp
int1
lea ebp, [esi + edi]
push dword [esp + 0x19]
jmp 0x7893fc
int 0x5c
scasd eax, dword es:[edi]
mov dh, 0xa1
loopne 0x789419
je 0x78944e
inc eax
push ecx
dec edi
bound ebp, qword [edx + 0x65]
push 0x65
arpl word [eax + eax*2 + 0x40], si
push ebx
inc ecx
aas
inc ecx
push esi
push ecx
push ebx
je 0x789461
imul ebp, dword [esi + 0x67], reloc.SHELL32.dll_ShellExecuteW
inc edx
inc esp
xor byte [eax + 0x40], cl
pop edx
add byte [esi + 0x6607245c], al
pop dword [esp + 8]
xchg byte [esp + 7], bl
pop word [esp + 8]
and al, 8
xchg al, dl
push eax
jmp 0x78946a
aas
xor byte [ecx + 0x54], dl
jb 0x78947a
outsb dx, byte [esi]
jae 0x789488
popal
je 0x78948e
jb 0x789461
inc eax
push ecx
inc ecx
inc ebp
inc eax
push eax
inc ecx
push esi
push ecx
dec edi
bound ebp, qword [edx + 0x65]
arpl word [eax + eax*2 + 0x40], si
inc eax
pop edx
add byte [esi + 0x2ed3b426], ch
cli
xlatb
aas
jb 0x7894af
insd dword es:[edi], dx
inc esp
popal
je 0x7894a6
inc eax
push ecx
dec ecx
insd dword es:[edi], dx
popal
inc eax
inc eax
push ebx
inc ecx
aas
inc ecx
push esi
xor dword [eax + 0x41], eax
inc edx
push esi
push ecx
inc edx
jns 0x7894d0
inc ecx
jb 0x7894d2
popal
jns 0x7894a3
inc eax
push eax
inc edx
inc esp
inc eax
pop edx
add byte [edi + 0x367a0379], bh
mov edi, 0x367a0379
mov bx, sp
mov bl, 0x22
setb ah
popal
cmc
jmp 0x789864
out 3, al
add byte [eax], al
or dword ds:[edi], edi
jae 0x7894e8
je 0x7894d4
jb 0x7894ee
popal
outsb dx, byte [esi]
imul edi, dword [edx + 0x61], 0x6e6f6974
outsd dx, dword [esi]
outsb dx, byte [esi]
inc esp
outsd dx, dword [esi]
insd dword es:[edi], dx
popal
imul ebp, dword [esi + 0x40], 0x726f4351
inc ecx
jo 0x78950f
insb byte es:[edi], dx
imul esp, dword [ebx + 0x61], 0x6e6f6974
je 0x78950e
outsd dx, dword [esi]
outsb dx, byte [esi]
inc eax
inc eax
push ebx
inc ecx
pop eax
inc ecx
inc edx
push esi
push ecx
push ebx
je 0x789525
imul ebp, dword [esi + 0x67], reloc.SHELL32.dll_ShellExecuteW
add byte [ebx + 0x2adfb82a], ah
invalid
je 0x789546
jb 0x78953d
bound esi, qword [ebp + 0x74]
inc eax
push ecx
inc ebx
outsd dx, dword [esi]
jb 0x789543
inc ecx
jo 0x789551
insb byte es:[edi], dx
imul esp, dword [ebx + 0x61], 0x6e6f6974
outsb dx, byte [esi]
inc eax
inc eax
push ebx
inc ecx
pop eax
push edi
xor al, 0x41
jo 0x789563
insb byte es:[edi], dx
imul esp, dword [ebx + 0x61], 0x6e6f6974
inc ecx
je 0x789572
jb 0x789569
bound esi, qword [ebp + 0x74]
inc eax
push ecx
je 0x789548
inc eax
pop edi
dec esi
inc eax
pop edx
add byte [edi], bh
aas
aas
xor byte [ecx + 0x42], dl
jns 0x789589
inc ecx
jb 0x78958b
popal
jns 0x78955c
inc eax
push ecx
inc ecx
inc ebp
inc eax
inc ecx
inc edx
push esi
xor byte [eax + 0x40], al
inc eax
inc eax
pop edx
add dh, al
aas
aas
xor al, 0x51
inc edx
jns 0x7895a5
inc ecx
jb 0x7895a7
popal
jns 0x789578
inc eax
push ecx
inc ecx
inc ebp
inc ecx
inc ecx
push esi
xor byte [eax + 0x24], al
and al, 0x51
push ecx
inc ecx
push esi
xor byte [eax + 0x40], al
inc eax
pop edx
add byte [edi], bh
aas
xor byte [ecx + 0x45], dl
jbe 0x7895b7
outsb dx, byte gs:[esi]
outsb dx, byte [esi]
je 0x7895a1
outsd dx, dword [esi]
outsd dx, dword [esi]
jo 0x789599
inc eax
push ecx
inc ecx
inc ebp
inc eax
push eax
inc ecx
push esi
push ecx
dec edi
bound ebp, qword [edx + 0x65]
arpl word [eax + eax*2 + 0x40], si
inc eax
inc eax
pop edx
add byte [ecx + esi*8 + 0x61], bh
add bl, dh
adc edi, dword [esi - 0xe]
pushal
pop es
sbb dword [ebx + 0x6a], esi
sbb dword [ebx + 0x6a], esi
aas
imul ebp, dword [esi + 0x73], 0x6c6c6174
push esp
jb 0x7895e7
outsb dx, byte [esi]
jae 0x7895f5
popal
je 0x7895fb
outsd dx, dword [esi]
jb 0x7895ce
push ecx
inc ebx
outsd dx, dword [esi]
jb 0x7895f8
inc ecx
jo 0x789606
insb byte es:[edi], dx
imul esp, dword [ebx + 0x61], 0x6e6f6974
popal
je 0x789605
outsd dx, dword [esi]
outsb dx, byte [esi]
inc eax
inc eax
push ebx
inc ecx
pop edi
dec esi
push eax
inc ecx
push esi
push ecx
push esp
jb 0x78960c
outsb dx, byte [esi]
jae 0x78961a
popal
je 0x789620
jb 0x7895f3
inc eax
inc eax
pop edx
add byte [edi], bh
aas
jbe 0x789620
outsb dx, byte [esi]
je 0x7895fe
push ecx
inc ebp
jbe 0x789627
outsb dx, byte [esi]
je 0x789611
outsd dx, dword [esi]
outsd dx, dword [esi]
jo 0x789609
inc eax
push ebp
inc ecx
inc ebp
pop edi
dec esi
push eax
inc ecx
push esi
push ecx
inc ebp
jbe 0x78963b
outsb dx, byte [esi]
je 0x789619
inc eax
inc eax
pop edx
add byte [edx + 0xffc9505], cl
out dx, al
and al, 0xb6
and al, 0x43
mov esi, 0xd94e275c
aas
jae 0x789654
je 0x789632
jo 0x789663
insb byte es:[edi], dx
imul esp, dword [ebx + 0x61], 0x6e6f6974
arpl word [ecx + 0x74], sp
imul ebp, dword [edi + 0x6e], reloc.SHELL32.dll_ShellExecuteW
inc eax
dec esi
popal
insd dword es:[edi], dx
inc eax
push ecx
inc ebx
outsd dx, dword [esi]
jb 0x78966a
inc ecx
jo 0x789678
insb byte es:[edi], dx
imul esp, dword [ebx + 0x61], reloc.SHELL32.dll_ShellExecuteW
je 0x789677
outsd dx, dword [esi]
outsb dx, byte [esi]
inc eax
inc eax
push ebx
inc ecx
pop eax
inc ecx
inc edx
push esi
push ecx
push ebx
je 0x78968e
imul ebp, dword [esi + 0x67], reloc.SHELL32.dll_ShellExecuteW
inc eax
inc eax
pop edx
add byte [edi], bh
jno 0x78969c
imul esi, dword [eax + eax*2 + 0x51], reloc.SHELL32.dll_ShellExecuteW
je 0x78967d
outsd dx, dword [esi]
outsd dx, dword [esi]
jo 0x789675
inc eax
push ecx
inc ecx
inc ebp
pop eax
pop eax
pop edx
add byte [ecx], ch
mov edx, 0x53ba4f28
or dword [edi + reloc.SHELL32.dll_ShellExecuteW], ebx
jb 0x78968a
js 0x7896b3
arpl word [eax + 0x51], ax
inc ebp
jbe 0x7896b9
outsb dx, byte [esi]
je 0x7896a3
outsd dx, dword [esi]
outsd dx, dword [esi]
jo 0x78969b
inc eax
push ecx
inc ecx
inc ebp
dec eax
push esi
aas
and al, 0x51
push ecx
inc esi
insb byte es:[edi], dx
popal
jae 0x7896aa
push edi
xor al, 0x50
jb 0x7896de
arpl word [ebp + 0x73], sp
jae 0x7896b9
jbe 0x7896db
outsb dx, byte gs:[esi]
outsb dx, byte [esi]
je 0x7896ec
jae 0x7896c0
inc esi
insb byte es:[edi], dx
popal
inc eax
inc eax
push ecx
inc ebp
jbe 0x7896e7
outsb dx, byte [esi]
je 0x7896d1
outsd dx, dword [esi]
outsd dx, dword [esi]
jo 0x7896c9
inc eax
inc eax
inc eax
inc eax
pop edx
add byte [edi], bh
jb 0x7896f7
jae 0x7896fd
jp 0x7896fb
inc eax
push ecx
inc esi
imul ebp, dword [ebp + 0x40], 0x45415540
inc eax
inc eax
inc eax
push ebp
inc ecx
inc ebp
pop edi
dec esi
pop edi
dec edx
inc eax
pop edx
add byte [edi], bh
jo 0x78971d
jb 0x789711
jo 0x789713
jo 0x789713
outsb dx, byte [esi]
inc eax
push ecx
push ebx
je 0x789727
imul ebp, dword [esi + 0x67], reloc.SHELL32.dll_ShellExecuteW
inc eax
push ecx
inc ecx
inc ebp
inc ecx
inc ecx
push esi
xor dword [eax + 0x50], eax
inc edx
inc esp
inc eax
pop edx
add byte [edi], bh
imul esi, dword fs:[ebx + 0x63], reloc.SHELL32.dll_ShellExecuteW
arpl word [eax + eax*2 + 0x51], si
dec edi
bound ebp, qword [edx + 0x65]
arpl word [eax + eax*2 + 0x40], si
inc eax
inc eax
push ecx
inc edx
inc ebp
pop edi
dec esi
push eax
inc edx
inc esp
push eax
inc edx
push esi
xor dword [eax + 0x30], eax
inc eax
pop edx
add byte [esi - 0x13], bh
jge 0x7896f6
test dword [eax + ebp*2], reloc.SHELL32.dll_ShellExecuteW
insb byte es:[edi], dx
or eax, dword [esi]
mov bl, 0x4f
salc
inc ecx
ret
inc eax
push ecx
inc ebx
outsd dx, dword [esi]
jb 0x78977d
inc ecx
jo 0x78978b
insb byte es:[edi], dx
imul esp, dword [ebx + 0x61], 0x6e6f6974
inc eax
inc eax
push ebx
inc ecx
arpl word [ecx + 0x74], sp
imul ebp, dword [edi + 0x6e], 0x41534040
pop eax
inc ecx
inc edx
push esi
push ecx
push ebx
je 0x7897a1
imul ebp, dword [esi + 0x67], reloc.SHELL32.dll_ShellExecuteW
add byte [edi], bh
outsb dx, byte [esi]
outsd dx, dword [esi]
jae 0x7897ac
popal
arpl word [ebp + 0x40], sp
push ecx
inc esp
bound esi, qword gs:[ebp + 0x67]
inc eax
inc eax
push ecx
inc ecx
inc ebp
inc ecx
inc ecx
push esi
xor dword [eax + 0x58], eax
pop edx
add byte [edx + 0x3f], bh
insb byte es:[edi], dx
outsd dx, dword [esi]
popal
inc eax
push ecx
push esp
jb 0x7897bf
outsb dx, byte [esi]
jae 0x7897cd
popal
je 0x7897d3
jb 0x7897a6
inc eax
push ecx
inc ecx
inc ebp
pop edi
dec esi
inc ecx
inc edx
push esi
push ecx
push ebx
je 0x7897e5
imul ebp, dword [esi + 0x67], reloc.SHELL32.dll_ShellExecuteW
xor byte [eax + 0x5a], al
add byte [edi], bh
jae 0x7897e6
je 0x7897c4
jne 0x7897f9
outsd dx, dword [esi]
dec ecx
outsb dx, byte [esi]
jae 0x7897ef
jb 0x789800
je 0x7897e0
push ebx
jo 0x7897f0
arpl word [ebp + 0x73], sp
inc eax
push ecx
inc esp
bound esi, qword gs:[ebp + 0x67]
inc eax
inc eax
push ecx
inc ecx
inc ebp
pop eax
pop edi
dec esi
inc eax
pop edx
add byte [eax - 0x2b], al
inc ebp
sub al, 0xdf
je 0x78977d
inc esi
aam 0xb3
dec esi
std
pushal
sti
imul ecx, dword [esi], reloc.SHELL32.dll_ShellExecuteW
push edx
pop esi
test eax, 0x7475613f
outsd dx, dword [esi]
dec ecx
outsb dx, byte [esi]
jae 0x789826
jb 0x789837
push ebx
jo 0x789827
arpl word [ebp + 0x73], sp
inc eax
push ecx
inc esp
bound esi, qword gs:[ebp + 0x67]
bound esi, qword [ebp + 0x67]
inc eax
inc eax
push ecx
inc edx
inc ebp
pop edi
dec esi
pop eax
pop edx
add byte [edi], bh
imul esi, dword [ebx + 0x4e], 0x406c6c75
insb byte es:[edi], dx
inc eax
push ecx
push esi
popal
jb 0x789850
imul esp, dword [ecx + 0x6e], reloc.SHELL32.dll_ShellExecuteW
popal
outsb dx, byte [esi]
je 0x78982b
inc eax
push ecx
inc edx
inc ebp
pop edi
dec esi
pop eax
pop edx
add al, cl
imul edi, dword [edi], 0x3f
xor byte [ecx + 0x54], dl
push ecx
push esp
js 0x789872
push ebx
je 0x789873
jb 0x789867
popal
popal
insd dword es:[edi], dx
inc eax
inc eax
push ecx
inc ecx
inc ebp
inc eax
push eax
inc ecx
push esi
push ecx
dec ecx
dec edi
inc esp
jbe 0x78987d
arpl word [ebp + 0x40], sp
inc eax
inc eax
pop edx
add byte [edi], bh
aas
xor eax, 0x78655451
je 0x789877
je 0x789898
popal
popal
insd dword es:[edi], dx
inc eax
inc eax
push ecx
inc ecx
inc ebp
inc ecx
inc ecx
push esi
xor byte [eax + 0x41], al
inc ecx
dec eax
inc eax
pop edx
add byte [edx + 0xf19600], bl
mov bh, 0x3d
or al, 0x9f
out 0x11, al
nop
aas
insd dword es:[edi], dx
popal
jns 0x7898ac
push ebx
jo 0x7898af
arpl word [ebp + 0x40], sp
inc eax
push ecx
inc esp
bound esi, qword gs:[ebp + 0x67]
inc eax
inc eax
push ecx
inc ecx
inc ebp
inc ecx
inc ecx
push esi
xor dword [eax + 0x58], eax
pop edx
add byte [edi], cl
xor dword [esi - 1], esp
je 0x78988e
rdtsc
push word [esp + 1]
push dword [esp + 1]
add dword [eax + reloc.SHELL32.dll_ShellExecuteW], ecx
dec ebx
mov byte [esp + 4], bl
dec bx
jmp 0x7898d3
pushal
or dl, byte [edi + 0x36916207]
mov bh, byte [edi]
xchg ecx, eax
mov bh, byte ss:[edi]
arpl word [ecx + 0x6e], sp
outsb dx, byte [esi]
push edx
popal
dec esp
imul ebp, dword [esi + 0x65], 0x4f495140
inc esp
jbe 0x7898f7
arpl word [ebp + 0x40], sp
inc eax
push ebp
inc edx
inc ebp
pop edi
dec esi
pop eax
pop edx
add byte [edi], bh
aas
push ecx
inc esp
bound esi, qword gs:[ebp + 0x67]
inc eax
inc eax
push ecx
inc ecx
inc ebp
inc ecx
inc ecx
push esi
xor byte [eax + 0x48], al
inc eax
dec eax
inc eax
pop edx
add byte [0x7479623f], ah
jae 0x78990d
outsd dx, dword [esi]
push edi
jb 0x789926
je 0x789924
inc eax
push ecx
dec ecx
dec edi
inc esp
jbe 0x789930
arpl word [ebp + 0x40], sp
inc eax
push ebp
inc edx
inc ebp
pop edi
dec edx
pop eax
pop edx
add byte [esi - 0x71], ah
inc esp
and al, 2
pop word [esp + 2]
xchg word [esp + 2], dx
setge al
cld
inc ch
jmp 0x78990f
popal
inc eax
push ecx
dec ecx
dec edi
inc esp
jbe 0x78996b
arpl word [ebp + 0x40], sp
inc eax
push ebp
inc ecx
inc ebp
pop edi
dec esi
dec eax
inc eax
pop edx
add byte [esi + 0xf], ah
mov bl, 0xc9
btr cx, cx
sub esp, 0x12
xchg di, ax
mov bx, 0x904c
xchg al, dh
jmp 0x7899ca
pop eax
aas
ja 0x789989
imul esi, dword [esi + eax*2 + 0x6f], reloc.SHELL32.dll_ShellExecuteW
jae 0x78998a
jb 0x78999e
je 0x7899ab
outsb dx, byte gs:[esi]
inc eax
push ecx
dec ecx
dec edi
inc esp
jbe 0x7899aa
arpl word [ebp + 0x40], sp
inc eax
push ebp
inc ecx
inc ebp
pop edi
dec esi
dec eax
inc eax
pop edx
add byte [edi], bh
aas
push ecx
inc esp
bound esi, qword gs:[ebp + 0x67]
inc eax
inc eax
push ecx
inc ecx
inc ebp
inc ecx
inc ecx
push esi
xor byte [eax + 0x50], al
inc edx
inc esp
inc eax
pop edx
add byte [edi], bh
bound edi, qword [ecx + 0x74]
jae 0x7899af
jbe 0x7899d1
imul ebp, dword [ecx + 0x62], reloc.SHELL32.dll_ShellExecuteW
dec ecx
dec edi
inc esp
jbe 0x7899e7
arpl word [ebp + 0x40], sp
inc eax
push ebp
inc edx
inc ebp
pop edi
dec edx
pop eax
pop edx
add byte [edi], bh
aas
imul esi, dword [ebx + 0x53], reloc.SHELL32.dll_ShellExecuteW
outsb dx, byte [esi]
je 0x7899fe
popal
insb byte es:[edi], dx
inc eax
push ecx
inc esi
imul ebp, dword [ebp + 0x44], 0x63697665
inc eax
jbe 0x789a0a
arpl word [ebp + 0x40], sp
inc eax
push ebp
inc edx
inc ebp
pop edi
dec esi
pop eax
pop edx
add byte [ebx + 0x723f0d92], bh
jae 0x789a1a
or eax, 0x7365723f
je 0x7899f7
je 0x7899f7
push ecx
dec ecx
dec edi
inc esp
jbe 0x789a27
arpl word [ebp + 0x40], sp
inc eax
push ebp
inc ecx
inc ebp
pop edi
dec esi
pop eax
pop edx
add byte [esi - 0x74a7992b], al
dec esp
and al, 5
xchg ch, dl
pop ax
mov ecx, dword [esp + 5]
add eax, 0x2454885b
pcmpgtd mm3, qword [ecx - 0x15]
pop esp
pushfd
out dx, eax
mul cl
and byte [edi], bh
popal
je 0x789a29
pop ebx
mov byte [esp + 0xf], dl
pop cx
jmp 0x789a37
outsb dx, byte [esi]
inc eax
push ecx
inc esi
imul ebp, dword [ebp + 0x44], 0x63697665
inc eax
inc eax
push ebp
inc edx
inc ebp
pop edi
dec esi
pop eax
pop edx
add byte [edi], bh
insb byte es:[edi], dx
insb byte es:[edi], dx
jne 0x789a74
push 0x69465140
insb byte es:[edi], dx
inc esp
jbe 0x789a75
jbe 0x789a75
arpl word [ebp + 0x40], sp
inc eax
push ecx
inc ecx
inc ebp
pop edi
dec esi
pop eax
pop edx
add byte [ebx - 0x66], ah
aas
jae 0x789a82
imul eax, dword gs:[eax + 0x51], 0x46
imul ebp, dword [ebp + 0x44], 0x63697665
inc eax
jbe 0x789a92
arpl word [ebp + 0x40], sp
inc eax
push ebp
inc ecx
inc ebp
pop edi
dec esi
pop edi
dec edx
inc eax
pop edx
add byte [eax + 0x32], ah
loopne 0x7899c8
pushal
xor ah, al
lea esp, [esp + 0xd]
and al, 0xd
cpuid
rdtsc
neg bp
jmp 0x789a67
shl si, 0xb
mov byte [esp + 0x18], ch
xchg edi, ebx
push word [esp + 0x1b]
and al, 0x1b
sbb ebp, ebx
push 0xb
mov byte [0x3f3f2cdd], al
jb 0x789ae5
jmp 0x789ae2
popal
inc esp
inc esp
popal
je 0x789ae7
inc eax
push ecx
inc esi
imul ebp, dword [ebp + 0x44], 0x63697665
inc eax
inc eax
inc eax
dec ebp
inc ecx
inc ebp
pop edi
dec edx
push eax
inc ecx
inc esp
pop edi
dec edx
inc eax
pop edx
add byte [esp + eax*4], bl
sbb bh, byte [ebp - 0x74]
cmp ebp, dword [edx + reloc.SHELL32.dll_ShellExecuteW]
mov dh, 0xb0
mov bl, 0xaa
lds esi, [edi + 0x3f]
arpl word [edi + 0x6d], bp
jo 0x789b25
je 0x789b21
inc edx
popal
jae 0x789b25
dec esi
popal
insd dword es:[edi], dx
inc eax
push ecx
inc esi
imul ebp, dword [ebp + 0x49], 0x406f666e
inc eax
push ecx
inc edx
inc ebp
aas
inc ecx
push esi
push ecx
push ebx
je 0x789b4c
imul ebp, dword [esi + 0x67], reloc.SHELL32.dll_ShellExecuteW
add byte [esi - 0x74dedba4], al
xchg byte [esp + 0x21], bl
mov eax, esi
mov ecx, dword [esp + 8]
push word [esp + 0xc]
stc
and dword [ebx + reloc.SHELL32.dll_ShellExecuteW], ecx
or byte [esi - 1], ah
je 0x789b14
invalid
or al, 0xf9
jmp 0x789b51
dec edx
push eax
inc edx
inc esp
pop edi
dec edx
inc eax
pop edx
add byte [edi], bh
js 0x789b8a
jae 0x789b97
jae 0x789b65
push ecx
inc esi
imul ebp, dword [ebp + 0x40], 0x45425140
pop edi
dec esi
pop eax
pop edx
add byte [edi], bh
aas
push ecx
push esp
js 0x789bb0
push ebx
je 0x789bb1
popal
insd dword es:[edi], dx
inc eax
inc eax
push ecx
inc ecx
inc ebp
inc ecx
inc ecx
push esi
xor byte [eax + 0x5f], al
pop edi
dec edx
inc eax
pop edx
add byte [esi - 0x4e720238], al
pop dword [eax]
add byte [eax], al
xchg al, cl
std
lea esi, [ecx + 0x8f]
pop bx
rdtsc
jmp 0x789b8f
mov bh, 0xad
aas
jb 0x789bcf
popal
dec esp
imul ebp, dword [esi + 0x65], 0x61746144
inc eax
push ecx
inc esi
imul ebp, dword [ebp + 0x44], 0x63697665
inc eax
inc eax
dec ebp
inc ecx
inc ebp
pop edi
dec edx
push eax
inc ecx
inc esp
pop edi
dec edx
inc eax
pop edx
add byte [esi + 0x660f2454], al
xchg edi, ebp
xchg byte [esp + 0xf], dl
xchg di, bp
not al
mov edi, esp
call 0x789bf7
ror byte [ebx + 0x58e8fc], 1
add byte [eax], al
mov esp, 0x4081168f
add edi, dword [edi]
insd dword es:[edi], dx
je 0x789c0b
dec edi
bound ebp, qword [edx + 0x65]
arpl word [eax + eax*2 + 0x51], si
inc eax
push ecx
inc esi
imul ebp, dword [ebp + 0x40], 0x45425540
push eax
inc edx
push ebp
push ecx
dec ebp
je 0x789c24
dec edi
bound ebp, qword [edx + 0x65]
arpl word [eax + eax*2 + 0x40], si
pop eax
pop edx
add byte [edx + 0x38c9ae38], bh
in al, dx
xchg ebp, eax
cmp byte [esi - 0x6a13c737], ch
add al, 0x3f
imul bp, word [esp + ebp*2 + 0x40], 0x5051
imul edi, dword [eax + 0x6d], 0x40407061
push ecx
inc ecx
inc ebp
pop eax
inc ecx
inc edx
push esi
push ecx
inc ebx
outsd dx, dword [esi]
insb byte es:[edi], dx
outsd dx, dword [esi]
jb 0x789c33
inc eax
inc eax
pop edx
add ch, dh
cld
jmp 0x789c83
or byte [ebx + 0x6c69663f], ch
dec esi
popal
insd dword es:[edi], dx
inc eax
push ecx
inc esi
imul ebp, dword [ebp + 0x40], 0x45425540
aas
inc ecx
push esi
push ecx
push ebx
je 0x789c9a
imul ebp, dword [esi + 0x67], reloc.SHELL32.dll_ShellExecuteW
add byte [edi], bh
aas
xor byte [ecx + 0x54], dl
push ecx
push esp
insd dword es:[edi], dx
jo 0x789ca8
jb 0x789c9c
jb 0x789cb6
inc esp
imul esi, dword [edx + 0x40], 0x45415140
inc eax
pop eax
pop edx
add dl, al
jge 0x789c98
fbld tbyte [esi]
aas
jno 0x789cc5
pop edi
insd dword es:[edi], dx
je 0x789cb7
arpl word [ecx + 0x6c], sp
insb byte es:[edi], dx
inc eax
push ecx
inc esi
imul ebp, dword [ebp + 0x40], 0x45415540
dec eax
push edi
xor al, 0x43
popal
insb byte es:[edi], dx
insb byte es:[edi], dx
inc eax
push ecx
dec ebp
je 0x789cd3
dec edi
bound ebp, qword [edx + 0x65]
arpl word [eax + eax*2 + 0x40], si
dec eax
push eax
inc ecx
push eax
inc ecx
pop eax
inc eax
pop edx
add byte [edx + 0x66092454], cl
xchg edi, edx
mov dl, byte [esp + 9]
xchg di, dx
bsf ecx, eax
mov cx, word [esp + 0x21]
jmp 0x789d71
sar byte [edi], 1
jb 0x789d01
outsb dx, byte [esi]
popal
insd dword es:[edi], dx
inc eax
push ecx
inc esi
imul ebp, dword [ebp + 0x40], 0x45415140
push ecx
inc ecx
inc ebp
pop edi
dec esi
inc ecx
inc edx
push esi
push ecx
push ebx
je 0x789d26
imul ebp, dword [esi + 0x67], reloc.SHELL32.dll_ShellExecuteW
inc eax
inc eax
inc eax
inc eax
pop edx
add byte [edi], bh
aas
xor dword [ecx + 0x54], edx
insd dword es:[edi], dx
jo 0x789d34
jb 0x789d28
jb 0x789d42
inc esp
imul esi, dword [edx + 0x40], 0x45415140
inc eax
pop eax
pop edx
add byte [ebx - 0x36], dl
xchg esp, eax
aas
jb 0x789d41
insd dword es:[edi], dx
outsd dx, dword [esi]
jbe 0x789d45
inc eax
push ecx
inc esi
imul ebp, dword [ebp + 0x40], 0x5f415340
dec esi
inc ecx
inc edx
push esi
push ecx
push ebx
je 0x789d65
imul ebp, dword [esi + 0x67], reloc.SHELL32.dll_ShellExecuteW
add byte [edi], bh
jo 0x789d63
jb 0x789d6d
imul esi, dword [ebx + 0x73], reloc.SHELL32.dll_ShellExecuteW
inc eax
push ecx
inc esi
jae 0x789d76
imul ebp, dword [edi + 0x6e], reloc.SHELL32.dll_ShellExecuteW
imul ebp, dword [ebp + 0x40], reloc.SHELL32.dll_ShellExecuteW
aas
inc ecx
push esi
aas
and al, 0x51
inc esi
insb byte es:[edi], dx
popal
jae 0x789d5e
push edi
xor al, 0x50
jb 0x789d91
imul esi, dword [ebx + 0x73], reloc.SHELL32.dll_ShellExecuteW
jae 0x789d91
outsd dx, dword [esi]
outsb dx, byte [esi]
inc eax
push ecx
inc esi
imul ebp, dword [ebp + 0x44], 0x63697665
inc eax
arpl word [ebp + 0x40], sp
inc eax
inc eax
inc eax
pop eax
pop edx
add byte [ebx + ecx*4], al
sbb edi, dword [esi - 0x73]
lea ebp, [ecx - 0x56]
sub al, 0xa2
lds esi, [ebx*8 - 0x3756c644]
cmp ebx, ecx
cwde
imul ebp, dword [edx + reloc.SHELL32.dll_ShellExecuteW], 0xa939bcdd
enter 0xffffffffffffd93b, 0xffffffffffffff98
mov byte [0xbcdd34c5], al
cmp dword [ecx - reloc.SHELL32.dll_ShellExecuteW], ebp
sti
aas
jno 0x789dc8
pop edi
insd dword es:[edi], dx
je 0x789dba
arpl word [ecx + 0x73], sp
je 0x789d9e
push ecx
inc esi
imul ebp, dword [ebp + 0x40], 0x45415540
inc eax
inc eax
push ebp
inc ecx
inc ebp
push eax
inc ecx
pop eax
push eax
inc edx
inc esp
inc eax
pop edx
add byte [ebp - 0x3e2db9c], cl
lea esp, [esp + 0x1d]
cld
mov bl, byte [esp + 0xa]
clc
neg ax
jmp 0x789db1
je 0x789dd3
push ecx
push esp
imul ebp, dword [ebp + 0x65], 0x55404072
inc edx
inc ebp
push eax
inc edx
push ebp
push ecx
dec ebp
je 0x789e07
dec edi
bound ebp, qword [edx + 0x65]
arpl word [eax + eax*2 + 0x40], si
pop eax
pop edx
add byte [ebp - 0x79fbdb9c], cl
pop esp
and al, 4
lea esp, [esp + 4]
xchg byte [esp + 4], bl
cmp dh, dh
mov dx, 0x5b8a
dec di
mul byte [esi - 0x46]
mov bl, byte [ebx + 0x66]
dec edi
jmp 0x789e75
jno 0x789e3e
pop edi
insd dword es:[edi], dx
je 0x789e30
arpl word [ecx + 0x73], sp
je 0x789e14
inc eax
push ecx
push esp
imul ebp, dword [ebp + 0x65], 0x55404072
inc ecx
inc ebp
push eax
inc ecx
pop eax
push eax
inc edx
inc esp
inc eax
pop edx
add byte [edi], bh
aas
xor byte [ecx + 0x4d], dl
jae 0x789e63
popal
dec esp
outsd dx, dword [esi]
jb 0x789e3a
inc eax
push ecx
inc ecx
inc ebp
inc eax
push eax
inc edx
inc esp
dec eax
xor byte [eax + 0x5a], al
add byte [edi], ch
das
aas
je 0x789e75
insd dword es:[edi], dx
jb 0x789e55
jbe 0x789e77
outsb dx, byte [esi]
je 0x789e55
inc eax
push ecx
push esp
imul ebp, dword [ebp + 0x65], 0x4d404072
inc ecx
inc ebp
pop eax
push eax
inc ecx
push esi
push ecx
push esp
imul ebp, dword [ebp + 0x65], 0x65764572
outsb dx, byte [esi]
je 0x789e70
inc eax
inc eax
pop edx
add byte [edi], bh
aas
cmp byte [ecx + 0x53], dl
je 0x789ead
jb 0x789ea5
imul ebp, dword [esi + 0x67], reloc.SHELL32.dll_ShellExecuteW
outsb dx, byte [esi]
inc eax
inc eax
inc eax
push ecx
inc edx
inc ebp
pop edi
dec esi
push eax
inc edx
inc esp
inc eax
pop edx
add byte [ecx], ah
aas
ja 0x789ec1
imul esi, dword [ebp + 0x40], reloc.SHELL32.dll_ShellExecuteW
dec edi
inc esp
jbe 0x789ec3
arpl word [ebp + 0x40], sp
inc eax
push ecx
inc ecx
inc ebp
pop edi
dec edx
inc ecx
inc edx
push esi
push ecx
inc edx
jns 0x789ede
inc ecx
jb 0x789ee0
popal
jns 0x789eb1
inc eax
inc eax
inc eax
pop edx
add byte [edi + 0x5802244c], al
xchg dword [esp + 2], ecx
and al, 2
pop eax
bswap eax
neg bl
xchg ebx, eax
add esp, 0
jmp 0x789f1f
xor al, 0x43
popal
insb byte es:[edi], dx
insb byte es:[edi], dx
inc eax
push ecx
dec ebp
je 0x789f11
dec edi
bound ebp, qword [edx + 0x65]
arpl word [eax + eax*2 + 0x40], si
dec eax
push eax
inc ecx
push eax
inc ecx
pop eax
inc eax
pop edx
add byte [edi], bh
aas
imul esi, dword [ebx + 0x56], reloc.SHELL32.dll_ShellExecuteW
inc eax
push ecx
push edx
arpl word gs:[eax + eax*2 + 0x40], si
jae 0x789f1b
popal
insb byte es:[edi], dx
imul esp, dword [eax + eax*2 + 0x51], 0x74636552
inc eax
inc eax
push ecx
inc edx
inc ebp
pop edi
dec esi
pop eax
pop edx
add byte [edi + edi], ah
jae 0x789f42
je 0x789f2f
push eax
jb 0x789f4f
jb 0x789f4f
imul esi, dword [ebx + 0x73], reloc.SHELL32.dll_ShellExecuteW
inc eax
push ecx
inc esi
imul ebp, dword [ebp + 0x40], 0x45415540
pop edi
dec esi
push esi
aas
and al, 0x51
inc esi
insb byte es:[edi], dx
popal
jae 0x789f40
push edi
xor al, 0x50
jb 0x789f73
imul esi, dword [ebx + 0x73], reloc.SHELL32.dll_ShellExecuteW
push ecx
inc esi
imul ebp, dword [ebp + 0x44], 0x63697665
inc eax
inc esp
jbe 0x789f7f
arpl word [ebp + 0x40], sp
inc eax
inc eax
inc eax
inc eax
pop edx
add byte [ebx - 0xafedba4], cl
mov ebx, dword [esp + 1]
cmc
xchg di, ax
xchg dword [esp], edx
mov al, dh
mov dword [esp], edi
jmp 0x789f67
aas
jae 0x789f9b
popal
insb byte es:[edi], dx
inc eax
push ecx
push ebx
imul edi, dword [edx + 0x65], 0x42514040
jp 0x789fa7
inc eax
inc eax
push ecx
inc edx
inc ebp
aas
inc ecx
push esi
xor dword [eax + 0x48], eax
dec eax
push edi
xor al, 0x41
jae 0x789fc3
arpl word gs:[edx + edx*2 + 0x61], si
je 0x789fc3
outsd dx, dword [esi]
dec ebp
outsd dx, dword [esi]
inc eax
push ecx
je 0x789fa3
inc eax
inc eax
pop edx
add byte [esi - 1], ah
je 0x789f8f
push word [esp + 3]
call 0x789fdc
dec esp
iretd
add ebp, eax
imul eax, dword [eax], 0
add byte [edi + ecx*8 + 0x5f], cl
pop edi
cmp cl, cl
loop 0x789f96
insb byte es:[edi], dx
jg 0x789fc2
int1
aas
aas
push ecx
inc esp
bound esi, qword gs:[ebp + 0x67]
inc eax
inc eax
push ecx
inc ecx
inc ebp
inc ecx
inc ecx
push esi
xor byte [eax + 0x41], al
inc eax
inc ecx
inc edx
push esi
push ecx
push ebx
je 0x78a009
jb 0x78a001
imul ebp, dword [esi + 0x67], reloc.SHELL32.dll_ShellExecuteW
outsb dx, byte [esi]
inc eax
inc eax
inc eax
pop edx
add al, bh
jb 0x789f82
xchg dword [edx - 0x70], esi
jb 0x789f35
aas
arpl word [edi + 0x6e], bp
je 0x78a00d
imul ebp, dword [esi + 0x73], reloc.SHELL32.dll_ShellExecuteW
jb 0x78a01e
outsb dx, byte [esi]
inc eax
inc eax
push ecx
inc edx
inc ebp
pop edi
dec esi
inc ecx
inc edx
push esi
xor dword [eax + 0x57], eax
inc eax
push edi
xor al, 0x43
popal
jae 0x78a02e
push ebx
outsb dx, byte gs:[esi]
jae 0x78a037
je 0x78a039
jbe 0x78a03b
je 0x78a04d
inc eax
push ecx
je 0x78a018
inc eax
inc eax
pop edx
add dh, dh
xlatb
stc
cld
rdtsc
pop ebx
jmp 0x78a0cb
je 0x78a078
imul ebp, dword [esi + 0x67], reloc.SHELL32.dll_ShellExecuteW
inc eax
push ebp
inc ecx
inc ebp
push eax
inc ecx
pop eax
push eax
inc edx
inc esp
inc eax
pop edx
add byte [edi], bh
je 0x78a088
outsd dx, dword [esi]
dec esp
outsd dx, dword [esi]
outsb dx, byte [esi]
dec esp
outsd dx, dword [esi]
outsb dx, byte [esi]
inc eax
push ecx
push esi
popal
jb 0x78a090
popal
outsb dx, byte [esi]
je 0x78a06b
inc eax
push ecx
inc edx
inc ebp
pop edi
dec edx
push eax
inc ecx
pop edi
dec esi
inc eax
pop edx
add byte [ecx + 0x3f], bl
aas
jo 0x78a09d
popal
je 0x78a0a6
inc eax
push ecx
push esp
insd dword es:[edi], dx
jo 0x78a0b4
jb 0x78a0a8
jb 0x78a0c2
inc esp
imul esi, dword [edx + 0x40], 0x45425140
inc eax
push ecx
inc edx
inc ebp
aas
inc ecx
push esi
push ecx
push ebx
je 0x78a0ca
imul ebp, dword [esi + 0x67], reloc.SHELL32.dll_ShellExecuteW
add byte [edi], bh
outsb dx, byte gs:[esi]
insb byte es:[edi], dx
inc eax
push ecx
push esp
js 0x78a0df
push ebx
je 0x78a0e0
popal
insd dword es:[edi], dx
inc esi
jne 0x78a0e2
arpl word [ecx + ebp*2 + 0x6f], si
outsb dx, byte [esi]
jae 0x78a0bb
inc eax
pop ecx
inc ecx
inc ecx
inc ecx
push esi
push ecx
push esp
js 0x78a0fa
push ebx
je 0x78a0fb
jb 0x78a0ef
popal
popal
insd dword es:[edi], dx
inc eax
inc eax
inc ecx
inc ecx
push esi
xor al, byte [eax + 0x40]
pop edx
add byte [edx + 0x3acfa83a], dh
out dx, al
nop
pop ds
invalid
aas
jbe 0x78a10f
jbe 0x78a10f
outsb dx, byte [esi]
je 0x78a0ed
push ecx
push ebx
je 0x78a126
imul ebp, dword [esi + 0x67], reloc.SHELL32.dll_ShellExecuteW
jae 0x78a0f7
inc eax
dec ebp
inc ecx
inc ebp
pop edi
dec esi
push eax
inc ecx
push esi
push ecx
inc ebp
jbe 0x78a129
outsb dx, byte [esi]
je 0x78a107
inc eax
inc eax
pop edx
add byte [edx + 0xf4566cb], cl
mov esp, 0x6c8b66fe
and al, 3
mov cl, bl
inc bp
bsf edi, esi
mov bp, word [esp + 3]
stc
stc
jmp 0x78a171
rol dword [eax + reloc.SHELL32.dll_ShellExecuteW], 0x4a
cmp byte [edi], 0x3f
aas
inc ecx
push ecx
dec edx
jae 0x78a157
outsb dx, byte [esi]
dec edi
bound ebp, qword [edx + 0x65]
arpl word [eax + eax*2 + 0x40], si
inc eax
inc eax
push ecx
inc edx
inc ebp
aas
inc ecx
push esi
push ecx
dec edx
jae 0x78a16a
outsd dx, dword [esi]
outsb dx, byte [esi]
push esi
popal
insb byte es:[edi], dx
jne 0x78a166
inc eax
inc eax
inc ecx
inc edx
push esi
push ecx
push ebx
je 0x78a17c
imul ebp, dword [esi + 0x67], reloc.SHELL32.dll_ShellExecuteW
inc eax
pop edx
add byte [edi], bh
jb 0x78a17e
push 0x53514074
je 0x78a18f
imul ebp, dword [esi + 0x67], reloc.SHELL32.dll_ShellExecuteW
inc ebp
aas
inc ecx
push esi
xor dword [eax + 0x48], eax
inc eax
dec eax
inc eax
pop edx
add byte [edi - 0x39], cl
push edi
xor al, cl
and edx, edi
aad 0x44
idiv dword [edi]
jno 0x78a1af
pop edi
insd dword es:[edi], dx
je 0x78a1a1
arpl word [ecx + 0x6c], sp
insb byte es:[edi], dx
inc eax
push ecx
push ebx
je 0x78a1be
imul ebp, dword [esi + 0x67], reloc.SHELL32.dll_ShellExecuteW
inc ecx
inc ebp
dec eax
push edi
xor al, 0x43
popal
insb byte es:[edi], dx
insb byte es:[edi], dx
inc eax
push ecx
dec ebp
je 0x78a1c1
dec edi
bound ebp, qword [edx + 0x65]
arpl word [eax + eax*2 + 0x40], si
inc eax
inc eax
dec eax
push eax
inc ecx
push eax
inc ecx
pop eax
inc eax
pop edx
add byte [esi - 0x79], ah
out dx, al
xchg si, bp
mov ch, byte [esp]
mov word [esp + 1], bx
inc ah
cpuid
jmp 0x78a203
popal
inc ebp
outsb dx, byte [esi]
jne 0x78a201
pop edi
bound esi, qword gs:[ebp + 0x67]
dec edi
jo 0x78a202
jb 0x78a200
je 0x78a210
jb 0x78a1e3
inc eax
pop ecx
inc ecx
aas
inc ecx
push esi
push ecx
inc esp
bound esi, qword gs:[ebp + 0x67]
inc eax
inc eax
inc ecx
inc ecx
push esi
xor dword [eax + 0x48], eax
push eax
inc edx
push ebp
push ecx
dec ebp
je 0x78a220
popal
dec edi
bound ebp, qword [edx + 0x65]
push 0x65
arpl word [eax + eax*2 + 0x40], si
push eax
inc edx
inc esp
inc eax
pop edx
add byte [ebp - 0x36], al
pop eax
aas
retf 0xeb28
push ebx
je 0x78a25b
imul ebp, dword [esi + 0x67], reloc.SHELL32.dll_ShellExecuteW
inc edx
inc ebp
push eax
inc edx
push ebp
push ecx
dec ebp
je 0x78a259
dec edi
bound ebp, qword [edx + 0x65]
arpl word [eax + eax*2 + 0x40], si
pop eax
pop edx
add al, al
out dx, al
add eax, 0x1246c8a
shr dh, 5
mov ch, byte [esp + 1]
xchg al, dl
xchg byte [esp + 2], dh
mov ch, 0x5e
jmp 0x78a2e5
inc eax
push ecx
dec ebp
jae 0x78a29a
popal
dec esp
outsd dx, dword [esi]
jb 0x78a271
inc eax
push ecx
inc edx
inc ebp
aas
inc ecx
push esi
push ecx
inc esp
bound esi, qword gs:[ebp + 0x67]
inc eax
inc eax
pop eax
pop edx
add byte [edi], bh
jno 0x78a2bb
imul esi, dword [eax + eax*2 + 0x51], reloc.SHELL32.dll_ShellExecuteW
inc ecx
jo 0x78a2c1
insb byte es:[edi], dx
imul esp, dword [ebx + 0x61], 0x6e6f6974
inc eax
inc eax
push ebx
inc ecx
pop eax
pop eax
pop edx
add byte [eax - 0x1c], ch
jp 0x78a282
in al, dx
pop es
xchg ecx, eax
adc byte [ebx + 0x3f3fa50a], dl
xor byte [ecx + 0x42], dl
jne 0x78a2d9
jb 0x78a2b7
inc eax
push ecx
inc ecx
inc ebp
inc eax
push eax
inc ecx
push esi
push ecx
inc edx
jns 0x78a2f7
je 0x78a2e9
inc ecx
inc ecx
jb 0x78a2f9
popal
jns 0x78a2ca
inc eax
push eax
inc ecx
push esi
push ecx
dec edi
bound ebp, qword [edx + 0x65]
arpl word [eax + eax*2 + 0x40], si
inc eax
pop edx
add byte [edi], bh
aas
jae 0x78a313
jb 0x78a310
jns 0x78a308
inc eax
push ecx
dec edi
bound ebp, qword [edx + 0x65]
arpl word [eax + eax*2 + 0x40], si
push ecx
inc ecx
inc ebp
pop eax
push eax
inc ecx
push esi
xor dword [eax + 0x40], eax
inc eax
pop edx
add ah, dl
inc edi
out dx, al
aas
bound esi, qword gs:[ebp + 0x67]
jne 0x78a32a
inc eax
push ecx
dec ebp
jae 0x78a33c
popal
dec esp
outsd dx, dword [esi]
jb 0x78a313
inc eax
push ecx
inc edx
inc ebp
aas
inc ecx
push esi
push ecx
inc esp
bound esi, qword gs:[ebp + 0x67]
inc eax
inc eax
pop eax
pop edx
add byte [edi + 0x34ff66b7], dh
and al, 0x83
in al, dx
adc byte [edx - 0x3849f04e], bh
mov bh, 0xb7
push word [esp]
xor al, 0x24
sub esp, 0x10
mov edx, 0xc7b60fb2
jmp 0x78a318
cmp edx, dword [edx]
lea ebx, [edi + edi]
aas
xor byte [ecx + 0x52], dl
arpl word gs:[eax + eax*2 + 0x40], si
push ecx
inc ecx
inc ebp
inc eax
inc ecx
inc edx
push esi
push ecx
push eax
outsd dx, dword [esi]
imul ebp, dword [esi + 0x74], 0x40304040
pop edx
outsb dx, byte [esi]
je 0x78a353
inc eax
xor byte [eax + 0x5a], al
add byte [ebp + 0x8d0989], cl
add byte [edi], cl
iretd
lea ecx, reloc.SHELL32.dll_ShellExecuteW
bswap edi
lea esi, [eax + ebp]
xchg word [esp + 8], bp
jmp 0x78a374
outsd dx, dword [esi]
jbe 0x78a38e
mov al, byte [0x7465733f]
dec esp
je 0x78a377
push ecx
push edx
arpl word gs:[eax + eax*2 + 0x40], si
inc eax
inc eax
push ecx
inc ecx
inc ebp
pop eax
dec eax
inc eax
pop edx
add bl, ah
sbb bh, byte [edi]
jae 0x78a3bf
popal
je 0x78a3b7
arpl word [ebp + 0x65], cx
je 0x78a3b4
dec edi
bound ebp, qword [edx + 0x65]
arpl word [eax + eax*2 + 0x51], si
dec edi
bound ebp, qword [edx + 0x65]
arpl word [eax + eax*2 + 0x40], si
xor dl, byte [ebp + 0x51]
dec ebp
je 0x78a3cb
dec edi
bound ebp, qword [edx + 0x65]
arpl word [eax + eax*2 + 0x40], si
inc edx
add byte [ebx - 0x2509ef3c], al
add esp, 0x10
neg dl
add esp, 7
mov edi, eax
mov ax, word [esp]
jmp 0x78a431
push esp
outsd dx, dword [esi]
jo 0x78a3d2
push ecx
push edx
arpl word gs:[eax + eax*2 + 0x40], si
push ecx
inc ecx
inc ebp
pop eax
dec eax
inc eax
pop edx
add byte [edi], bh
aas
xor dword [ecx + 0x4a], edx
jae 0x78a417
outsb dx, byte [esi]
dec edi
bound ebp, qword [edx + 0x65]
arpl word [eax + eax*2 + 0x40], si
push ecx
inc ecx
inc ebp
inc eax
pop eax
pop edx
add dh, bh
aas
outsd dx, dword [esi]
jo 0x78a422
outsb dx, byte [esi]
inc eax
push ecx
inc edx
jne 0x78a429
jb 0x78a407
inc eax
push ebp
inc ecx
inc ebp
pop edi
dec esi
push esi
aas
and al, 0x51
inc esi
insb byte es:[edi], dx
popal
jae 0x78a417
push edi
xor al, 0x4f
jo 0x78a441
outsb dx, byte [esi]
dec ebp
outsd dx, dword [esi]
inc esi
insb byte es:[edi], dx
popal
inc eax
push ecx
dec ecx
dec edi
inc esp
jbe 0x78a456
arpl word [ebp + 0x40], sp
inc eax
inc eax
inc eax
inc eax
pop edx
add byte [edi], bh
jae 0x78a45e
je 0x78a43d
outsd dx, dword [esi]
je 0x78a472
outsd dx, dword [esi]
insd dword es:[edi], dx
inc eax
push ecx
push edx
arpl word gs:[eax + eax*2 + 0x40], si
inc eax
push ecx
inc ecx
inc ebp
pop eax
dec eax
inc eax
pop edx
add dh, al
dec ecx
fnstcw word [eax - 0x749755b5]
aas
mov edi, dword [edi]
jae 0x78a480
je 0x78a46f
imul esp, dword [edi + 0x68], reloc.SHELL32.dll_ShellExecuteW
push ecx
push edx
arpl word gs:[eax + eax*2 + 0x40], si
push ecx
inc ecx
inc ebp
pop eax
dec eax
inc eax
pop edx
add byte [ebx - 0x137cef14], al
pop es
sub esp, 0x10
sub esp, 7
pushal
lea ecx, [ecx*4]
add byte [eax], al
jmp 0x78a664
add al, byte [eax]
add byte [edx], ah
pop ebp
lodsb al, byte [esi]
aas
je 0x78a4b9
jo 0x78a498
je 0x78a490
push ecx
push edx
arpl word gs:[eax + eax*2 + 0x40], si
inc eax
push ecx
inc edx
inc ebp
aas
inc ecx
push esi
push ecx
push eax
outsd dx, dword [esi]
imul ebp, dword [esi + 0x74], 0x5a584040
add byte [edi], bh
popal
je 0x78a4ce
inc eax
push ecx
inc edx
jns 0x78a4e6
inc ecx
jb 0x78a4e8
popal
jns 0x78a4b9
inc eax
push ecx
inc ecx
inc ebp
push eax
inc ecx
inc esp
pop eax
pop edx
add byte [edi + 0x3f303186], bh
je 0x78a4cf
outsd dx, dword [esi]
outsd dx, dword [esi]
jb 0x78a4f4
jae 0x78a4d2
push ecx
push edx
arpl word gs:[eax + eax*2 + 0x40], si
inc eax
push ecx
inc edx
inc ebp
pop eax
push eax
inc ecx
dec eax
xor byte [eax], dh
xor byte [eax + 0x5a], al
add byte [edi], bh
imul esi, dword fs:[ebx + 0x63], 0x656e6e6f
arpl word [eax + eax*2 + 0x51], si
dec edi
bound ebp, qword [edx + 0x65]
arpl word [eax + eax*2 + 0x40], si
inc eax
inc eax
push ecx
inc edx
inc ebp
pop edi
dec esi
push eax
inc edx
push esi
xor dword [eax + 0x50], eax
inc edx
inc esp
inc eax
pop edx
add byte [ebx], dh
sub al, byte [ebp + 0x3f]
aas
insb byte es:[edi], dx
popal
jae 0x78a547
je 0x78a51d
dec ecx
outsb dx, byte [esi]
js 0x78a528
inc ax
push ecx
push ebx
je 0x78a551
imul ebp, dword [esi + 0x67], reloc.SHELL32.dll_ShellExecuteW
inc ebp
dec eax
inc ecx
inc edx
push esi
xor dword [eax + 0x48], eax
push edi
xor al, 0x43
popal
jae 0x78a559
push ebx
outsb dx, byte gs:[esi]
jae 0x78a562
je 0x78a564
jbe 0x78a566
je 0x78a578
inc eax
push ecx
je 0x78a543
inc eax
inc eax
pop edx
add byte [edi], bh
insd dword es:[edi], dx
je 0x78a56d
dec edi
bound ebp, qword [edx + 0x65]
arpl word [eax + eax*2 + 0x51], si
push esp
push 0x64616572
inc eax
inc eax
push ebp
inc edx
inc ebp
push eax
inc edx
push ebp
push ecx
dec ebp
je 0x78a588
dec edi
bound ebp, qword [edx + 0x65]
arpl word [eax + eax*2 + 0x40], si
pop eax
pop edx
add byte [edi], bh
aas
xor byte [ecx + 0x44], dl
popal
insb byte es:[edi], dx
imul ebp, dword [esi + 0x65], 0x656d6954
jb 0x78a584
inc eax
inc eax
push ecx
inc ecx
inc ebp
inc eax
push edi
xor al, 0x46
outsd dx, dword [esi]
jb 0x78a5b4
jbe 0x78a5b6
jb 0x78a596
outsd dx, dword [esi]
outsb dx, byte [esi]
jae 0x78a5cb
popal
outsb dx, byte [esi]
je 0x78a59b
xor byte [eax + 0x57], al
xor al, 0x54
imul ebp, dword [ebp + 0x65], 0x70795472
jb 0x78a5b9
push esp
jns 0x78a5d7
jo 0x78a5cd
inc eax
inc eax
push ecx
je 0x78a5ac
inc eax
inc eax
pop edx
add byte [edi], bh
jno 0x78a5e7
pop edi
insd dword es:[edi], dx
je 0x78a5d9
arpl word [ecx + 0x73], sp
je 0x78a5bd
push ecx
push esp
push 0x64616572
inc eax
inc eax
push ebp
inc ecx
inc ebp
push eax
inc ecx
pop eax
push eax
inc edx
inc esp
inc eax
pop edx
add ah, dh
aas
jae 0x78a60a
popal
je 0x78a602
arpl word [ebp + 0x65], cx
je 0x78a5ff
je 0x78a5ff
dec edi
bound ebp, qword [edx + 0x65]
arpl word [eax + eax*2 + 0x51], si
push esp
push 0x64616572
inc eax
inc eax
xor dl, byte [ebp + 0x51]
dec ebp
je 0x78a616
popal
dec edi
bound ebp, qword [edx + 0x65]
arpl word [eax + eax*2 + 0x40], si
inc edx
add byte [edi], bh
jae 0x78a62b
jp 0x78a629
inc eax
push ecx
inc edx
jns 0x78a63d
inc ecx
jb 0x78a63f
popal
jns 0x78a610
inc eax
push ecx
inc edx
inc ebp
dec eax
pop eax
pop edx
add byte [edi], bh
imul ebp, dword [esi + 0x64], reloc.SHELL32.dll_ShellExecuteW
inc eax
push ecx
push ebx
je 0x78a657
imul ebp, dword [esi + 0x67], reloc.SHELL32.dll_ShellExecuteW
inc eax
inc eax
push ecx
inc edx
inc ebp
dec eax
push esi
push ecx
inc ebx
push 0x40407261
dec eax
push edi
xor al, 0x43
popal
jae 0x78a662
push ebx
outsb dx, byte gs:[esi]
outsb dx, byte [esi]
jae 0x78a66b
je 0x78a66d
jbe 0x78a66f
je 0x78a681
inc eax
push ecx
je 0x78a64c
inc eax
inc eax
pop edx
add byte [edi], bh
aas
imul esi, dword [ebx + 0x4f], reloc.SHELL32.dll_ShellExecuteW
outsb dx, byte [esi]
inc eax
push ecx
dec ecx
dec edi
inc esp
jbe 0x78a688
arpl word [ebp + 0x40], sp
inc eax
push ecx
inc edx
inc ebp
pop edi
dec esi
pop eax
pop edx
add bh, ah
push cs
out 0xe, eax
aas
jno 0x78a6a4
pop edi
insd dword es:[edi], dx
je 0x78a696
arpl word [ecx + 0x6c], sp
insb byte es:[edi], dx
inc eax
push ecx
push esp
push 0x64616572
inc eax
jb 0x78a6a4
popal
inc eax
inc eax
push ebp
inc ecx
inc ebp
dec eax
push edi
xor al, 0x43
popal
insb byte es:[edi], dx
insb byte es:[edi], dx
inc eax
push ecx
dec ebp
je 0x78a6b4
dec edi
bound ebp, qword [edx + 0x65]
arpl word [eax + eax*2 + 0x40], si
dec eax
push eax
inc ecx
push eax
inc ecx
pop eax
inc eax
pop edx
add byte [edi], cl
xchg esp, eax
invalid
sete dh
not dx
pushfd
xchg ebx, ebp
bswap edi
mov ecx, eax
jmp 0x78a76c
push ecx
push esp
push 0x64616572
inc eax
inc eax
push ebp
inc ecx
inc ebp
pop edi
dec esi
push eax
inc ecx
push esi
push ecx
inc ebp
jbe 0x78a6fb
outsb dx, byte [esi]
je 0x78a6d9
inc eax
inc eax
pop edx
add byte [0xb7443dad], bh
push edi
sub eax, 0xc64b2cbe
das
mov esi, 0x2fc64b2c
setbe byte [ecx]
rol byte [ebx + 0x51303f3f], 0x54
push 0x64616572
inc eax
jb 0x78a71b
popal
inc eax
inc eax
push ecx
inc ecx
inc ebp
inc eax
push eax
inc ecx
push esi
push ecx
dec edi
bound ebp, qword [edx + 0x65]
arpl word [eax + eax*2 + 0x40], si
inc eax
pop edx
add byte [edi], bh
insd dword es:[edi], dx
imul esi, dword [eax + 0x61], 0x74
push 0x69445140
jb 0x78a71a
inc eax
inc eax
push ecx
inc edx
inc ebp
pop edi
dec esi
inc ecx
inc edx
push esi
push ecx
push ebx
je 0x78a759
imul ebp, dword [esi + 0x67], reloc.SHELL32.dll_ShellExecuteW
add byte [edx], bh
adc eax, 0x69663f84
outsb dx, byte [esi]
imul esi, dword [ebx + 0x68], 0x51406465
inc eax
push ecx
push esp
push 0x64616572
inc eax
inc eax
push ecx
inc ecx
inc ebp
pop eax
push ebp
push ecx
push eax
jb 0x78a777
jbe 0x78a771
je 0x78a777
push ebx
imul esp, dword [edi + 0x6e], 0x31406c61
inc eax
inc eax
pop edx
add byte [edi], bh
aas
xor al, 0x51
push ebx
je 0x78a797
imul ebp, dword [esi + 0x67], reloc.SHELL32.dll_ShellExecuteW
inc ebp
inc ecx
inc ecx
push esi
xor byte [eax + 0x41], al
inc edx
push esi
push ecx
inc edx
jns 0x78a7ad
inc ecx
jb 0x78a7af
popal
jns 0x78a780
inc eax
inc eax
pop edx
add byte [edi], bh
ja 0x78a7a8
imul esi, dword [eax + eax*2 + 0x51], reloc.SHELL32.dll_ShellExecuteW
popal
inc eax
inc eax
push ecx
inc ecx
inc ebp
pop edi
dec esi
push esi
push ecx
inc esp
popal
insb byte es:[edi], dx
imul ebp, dword [esi + 0x65], 0x656d6954
jb 0x78a7a8
inc eax
inc eax
pop edx
add byte [esi + 0x11bf66c1], al
xchg cl, al
mov di, 0x3a11
xchg al, dh
mov eax, 0x1de8bcc5
stc
cpuid
cmp al, byte [esi - 0x433a4710]
call 0xa288a099
jmp 0x78a832
add byte [edi], dh
aas
aas
pop ecx
push ecx
push ebx
je 0x78a7fb
imul ebp, dword [esi + 0x67], reloc.SHELL32.dll_ShellExecuteW
inc ebp
inc ecx
inc ecx
push esi
xor byte [eax + 0x41], al
inc edx
push esi
push ecx
inc edx
jns 0x78a811
inc ecx
jb 0x78a813
popal
jns 0x78a7e4
inc eax
inc eax
pop edx
add byte [esp + ebx*4], cl
or al, 0x9c
xor dl, byte [ebp - 0x5c]
add edi, dword [edx - 0x17]
jns 0x78a7ca
jmp 0x1963c02d
jmp 0x78a7cc
dec edi
inc esp
jbe 0x78a838
arpl word [ebp + 0x40], sp
inc eax
push ecx
inc edx
inc ebp
aas
inc ecx
push esi
push ecx
push ebx
je 0x78a84f
imul ebp, dword [esi + 0x67], reloc.SHELL32.dll_ShellExecuteW
add byte [edi], bh
aas
dec ebp
inc eax
pop ecx
inc ecx
pop edi
dec esi
inc ecx
inc edx
push esi
push ecx
push ebx
je 0x78a866
imul ebp, dword [esi + 0x67], reloc.SHELL32.dll_ShellExecuteW
pop edx
add byte [edi], bh
jae 0x78a865
je 0x78a858
popal
insb byte es:[edi], dx
jne 0x78a86b
inc eax
push ecx
push ebx
je 0x78a880
imul ebp, dword [esi + 0x67], reloc.SHELL32.dll_ShellExecuteW
inc eax
push ecx
inc ecx
inc ebp
pop eax
inc ecx
inc edx
push esi
push ecx
push ebx
je 0x78a88f
imul ebp, dword [esi + 0x67], reloc.SHELL32.dll_ShellExecuteW
push esi
push ecx
push esi
popal
jb 0x78a893
popal
outsb dx, byte [esi]
je 0x78a86e
inc eax
inc eax
pop edx
add byte [esi + 0x665a66ee], al
btr edx, esi
xchg dh, ch
pop dx
btr dx, si
mov bl, 0xf2
mov bx, di
xchg dword [esp + 0x24], eax
jmp 0x78aa60
push ecx
push ebx
je 0x78a8c8
imul ebp, dword [esi + 0x67], reloc.SHELL32.dll_ShellExecuteW
inc eax
inc eax
push ecx
inc edx
inc ebp
aas
inc ecx
push esi
push ecx
push esi
popal
jb 0x78a8ce
popal
outsb dx, byte [esi]
je 0x78a8a9
inc eax
inc ecx
inc edx
push esi
push ecx
push ebx
je 0x78a8e3
imul ebp, dword [esi + 0x67], reloc.SHELL32.dll_ShellExecuteW
push esi
xor al, byte [eax + 0x40]
pop edx
add cl, bl
dec esi
fdivr qword [ebx - 0x59a000aa]
sar dword [edi], 1
aas
xor byte [ecx + 0x53], dl
je 0x78a903
imul ebp, dword [esi + 0x67], reloc.SHELL32.dll_ShellExecuteW
inc eax
inc eax
push ecx
inc ecx
inc ebp
inc eax
inc ecx
inc edx
push esi
push ecx
push ebx
je 0x78a912
imul ebp, dword [esi + 0x67], reloc.SHELL32.dll_ShellExecuteW
inc esi
outsd dx, dword [esi]
jb 0x78a918
popal
je 0x78a8ee
xor byte [eax + 0x50], al
inc ecx
push esi
push ecx
dec edi
bound ebp, qword [edx + 0x65]
arpl word [eax + eax*2 + 0x40], si
inc eax
pop edx
add byte [edi], bh
popal
jb 0x78a92a
inc eax
push ecx
push ebx
je 0x78a93a
imul ebp, dword [esi + 0x67], reloc.SHELL32.dll_ShellExecuteW
inc edx
inc ebp
aas
inc ecx
push esi
xor dword [eax + 0x5f], eax
dec edx
dec eax
dec eax
push esi
push ecx
inc ebx
push 0x40407261
inc eax
pop edx
add byte [eax - 0x2d], dl
dec edx
aas
popal
jb 0x78a952
inc eax
push ecx
push ebx
je 0x78a962
imul ebp, dword [esi + 0x67], reloc.SHELL32.dll_ShellExecuteW
inc ebp
aas
inc ecx
push esi
xor dword [eax + 0x41], eax
inc edx
push esi
xor dword [eax + 0x48], eax
push esi
push ecx
inc ebx
push 0x40407261
inc eax
pop edx
add byte [edi], bh
aas
xor byte [ecx + 0x46], dl
inc esi
imul ebp, dword [ebp + 0x40], reloc.SHELL32.dll_ShellExecuteW
push ecx
inc ecx
inc ebp
inc eax
inc ecx
inc edx
push esi
push ecx
push ebx
je 0x78a995
imul ebp, dword [esi + 0x67], reloc.SHELL32.dll_ShellExecuteW
add bl, dh
cmc
pushfd
outsd dx, dword [esi]
fiadd word [ebx]
xchg esi, eax
add al, 0x63
sahf
aaa
xchg dword [esi], ebp
cmp dword [edi], edi
aas
arpl word [edi + ebp*2 + 0x73], bp
inc eax
push ecx
inc esi
imul ebp, dword [ebp + 0x44], 0x63697665
inc eax
inc eax
push ebp
inc ecx
inc ebp
pop eax
pop eax
pop edx
add byte [edi], bh
arpl word [edi + 0x6e], bp
jae 0x78a9cf
inc esp
popal
je 0x78a9c0
inc eax
push ecx
inc edx
jns 0x78a9d8
inc ecx
jb 0x78a9da
popal
jns 0x78a9ab
inc eax
push ecx
inc edx
inc ebp
push eax
inc edx
inc esp
pop eax
pop edx
add byte [eax], bl
jnp 0x78a9b7
je 0x78a9e9
push ebx
je 0x78a9ef
imul ebp, dword [esi + 0x67], reloc.SHELL32.dll_ShellExecuteW
insb byte es:[edi], dx
inc eax
inc eax
push ecx
inc edx
inc ebp
aas
inc ecx
push esi
push ecx
push ebx
je 0x78aa03
imul ebp, dword [esi + 0x67], reloc.SHELL32.dll_ShellExecuteW
inc eax
push esi
aas
and al, 0x51
push ebp
jb 0x78aa09
push esp
ja 0x78aa0f
inc esi
insb byte es:[edi], dx
popal
jae 0x78a9e6
push edi
xor al, 0x55
jb 0x78aa17
inc esi
outsd dx, dword [esi]
jb 0x78aa1c
popal
je 0x78aa26
imul ebp, dword [esi + 0x67], reloc.SHELL32.dll_ShellExecuteW
je 0x78aa22
outsd dx, dword [esi]
outsb dx, byte [esi]
inc eax
push ecx
push ebp
jb 0x78aa2c
inc eax
inc eax
push edi
xor al, 0x43
outsd dx, dword [esi]
insd dword es:[edi], dx
jo 0x78aa38
outsb dx, byte [esi]
outsb dx, byte gs:[esi]
je 0x78aa14
outsd dx, dword [esi]
jb 0x78aa3e
popal
je 0x78aa48
imul ebp, dword [esi + 0x67], reloc.SHELL32.dll_ShellExecuteW
outsd dx, dword [esi]
outsb dx, byte [esi]
inc eax
xor al, byte [eax + 0x40]
jo 0x78aa4e
imul ebp, dword [edi + 0x6e], reloc.SHELL32.dll_ShellExecuteW
inc eax
inc eax
pop edx
add byte [edi], bh
imul esi, dword [ebx + 0x45], reloc.SHELL32.dll_ShellExecuteW
inc eax
insd dword es:[edi], dx
jo 0x78aa60
jns 0x78aa2e
push ecx
dec esp
imul esi, dword [ebx + 0x74], 0x61746144
inc eax
inc eax
push ecx
inc edx
inc ebp
pop edi
dec esi
pop eax
pop edx
add byte [edx - 0x30], cl
inc esi
and eax, edx
int 0x5c
scasd eax, dword es:[edi]
aas
aas
inc ecx
push ecx
push ebx
je 0x78aa83
imul ebp, dword [esi + 0x67], reloc.SHELL32.dll_ShellExecuteW
inc eax
inc eax
push ecx
inc ecx
inc ebp
aas
inc ecx
push esi
push ecx
inc ebx
push 0x65527261
inc ax
inc ax
inc eax
dec eax
inc eax
pop edx
add byte [edi], bh
arpl word [edi + 0x75], bp
outsd dx, dword [esi]
jne 0x78aa9d
outsb dx, byte [esi]
je 0x78aa71
push ecx
dec edx
jae 0x78aaa4
outsb dx, byte [esi]
inc ecx
jb 0x78aaab
jb 0x78aa9b
popal
jns 0x78aa7c
inc eax
push ecx
inc edx
inc ebp
dec eax
pop eax
pop edx
add byte [esi + 0x3f3fe0a1], dh
aas
xor al, 0x51
inc ebx
push 0x65527261
inc ax
jb 0x78aaa2
inc ax
inc eax
push ecx
inc ecx
inc ebp
inc ecx
inc ecx
push esi
xor byte [eax + 0x44], al
inc eax
pop edx
add byte [ebx + 0x648d1fec], al
and al, 0x59
sub esp, 0x1f
lea esp, [esp + 0x59]
shr ecx, 0x1b
xchg bp, bx
jmp 0x78ac14
add byte [ebx], ah
pop edx
mov ch, 0xa4
aas
je 0x78aae8
push ebx
je 0x78aae0
push edi
push ebx
je 0x78aaf2
imul ebp, dword [esi + 0x67], reloc.SHELL32.dll_ShellExecuteW
jb 0x78aaf2
inc eax
push ecx
push ebx
je 0x78aafa
imul ebp, dword [esi + 0x67], reloc.SHELL32.dll_ShellExecuteW
outsb dx, byte [esi]
inc eax
inc eax
push ecx
inc edx
inc ebp
aas
inc ecx
push esi
aas
and al, 0x62
popal
jae 0x78ab02
arpl word [edi + 0x73], bx
je 0x78ab10
jae 0x78ab11
jb 0x78ab08
imul ebp, dword [esi + 0x67], reloc.SHELL32.dll_ShellExecuteW
outsb dx, byte [esi]
inc eax
pop edi
push edi
push ebp
aas
and al, 0x63
push 0x745f7261
jb 0x78ab10
pop edi
je 0x78ab20
popal
imul esi, dword [ebx + esi*2 + 0x40], reloc.SHELL32.dll_ShellExecuteW
je 0x78ab1d
inc eax
inc eax
push esi
aas
and al, 0x61
insb byte es:[edi], dx
insb byte es:[edi], dx
outsd dx, dword [esi]
arpl word [ecx + 0x74], sp
outsd dx, dword [esi]
jb 0x78ab08
pop edi
push edi
inc eax
xor al, byte [eax + 0x40]
jae 0x78ab44
inc eax
inc eax
pop eax
pop edx
add byte [edi], bh
arpl word [edi + 0x6c], bp
outsd dx, dword [esi]
jb 0x78ab1d
push ecx
dec ebp
popal
jo 0x78ab30
outsd dx, dword [esi]
inc edx
popal
jae 0x78ab4e
inc eax
inc eax
inc eax
push ecx
inc edx
inc ebp
aas
inc ecx
push edi
xor al, 0x43
inc ebx
outsd dx, dword [esi]
insb byte es:[edi], dx
outsd dx, dword [esi]
jb 0x78ab38
xor dword [eax + 0x58], eax
pop eax
pop edx
add dh, cl
pop ebx
retf
and al, 0xbc
push edx
xor eax, 0xa80973c4
retf
jae 0x78ab13
test al, 0xcb
bound edi, qword [edi]
aas
inc edx
push ecx
inc ebx
push 0x65527261
popal
jb 0x78ab68
inc ax
inc ax
inc eax
push ecx
inc edx
inc ebp
aas
inc ecx
push esi
push ecx
inc ebx
push 0x40407261
pop eax
pop edx
add byte [edi], bh
imul esi, dword [ebx + 0x44], 0x6c62756f
inc eax
bound ebp, qword [ebp + 0x40]
push ecx
dec edx
jae 0x78aba7
outsb dx, byte [esi]
push esi
popal
insb byte es:[edi], dx
jne 0x78aba3
inc eax
inc eax
push ecx
inc edx
inc ebp
pop edi
dec esi
pop eax
pop edx
add byte [ebp + 0x7465733f], bl
push eax
popal
jb 0x78abb6
outsb dx, byte [esi]
je 0x78ab94
push ecx
dec ebp
popal
jo 0x78aba7
outsd dx, dword [esi]
inc edx
popal
jae 0x78abc5
inc eax
inc eax
push ecx
inc ecx
inc ebp
pop eax
push eax
inc ecx
push ebp
xor dword [eax + 0x40], eax
pop edx
add byte [edi], bh
imul esi, dword [ebx + 0x53], 0x6e697274
inc eax
push ecx
dec edx
jae 0x78abeb
outsb dx, byte [esi]
push esi
popal
insb byte es:[edi], dx
jne 0x78abe7
inc eax
inc eax
push ecx
inc edx
inc ebp
pop edi
dec esi
pop eax
pop edx
add bh, dh
outsb dx, byte [esi]
cld
wait
jbe 0x78ab83
jecxz 0x78ab17
adc esi, dword [esi - 0x7b]
add al, 0xc6
jno 0x78abda
jae 0x78ac02
je 0x78abe2
outsd dx, dword [esi]
insb byte es:[edi], dx
outsd dx, dword [esi]
jb 0x78abe4
inc eax
push ecx
dec ebp
popal
jo 0x78abf7
outsd dx, dword [esi]
inc edx
popal
jae 0x78ac15
inc eax
inc eax
push ecx
inc ecx
inc ebp
pop eax
push edi
xor al, 0x43
outsd dx, dword [esi]
insb byte es:[edi], dx
outsd dx, dword [esi]
jb 0x78abfe
xor dword [eax + 0x40], eax
pop edx
add byte [edi], bh
jb 0x78ac28
jb 0x78ac28
jae 0x78ac2e
inc eax
push ecx
dec esp
imul esi, dword [ebx + 0x74], 0x61746144
inc eax
inc eax
push ecx
inc ecx
inc ebp
push eax
inc ecx
push eax
inc ecx
pop eax
push eax
inc ecx
push eax
inc ecx
pop eax
inc eax
pop edx
add byte [eax - 0xe], dh
pushal
pop es
bnd jae 0x78ac57
jae 0x78ac57
test dword [edi], esi
dec esi
aas
aas
xor byte [ecx + 0x53], dl
je 0x78ac6a
jb 0x78ac62
imul ebp, dword [esi + 0x67], reloc.SHELL32.dll_ShellExecuteW
outsb dx, byte [esi]
inc eax
inc eax
push ecx
inc ecx
inc ebp
inc eax
push esi
push ecx
dec esp
popal
je 0x78ac70
outsb dx, byte [esi]
xor dword [ebx + 0x74], edx
jb 0x78ac76
outsb dx, byte [esi]
inc eax
inc eax
inc eax
pop edx
add byte [esi - 0x75], ah
or al, 0x24
mov cx, word [esp]
mov ecx, dword [esp]
lea ecx, reloc.SHELL32.dll_ShellExecuteW
mov bp, 0x25f5
jmp 0x78ad6d
cmp byte [ebx], bl
aas
aas
xor dword [ecx + 0x4a], edx
dec edx
jae 0x78aca0
outsb dx, byte [esi]
inc esp
outsd dx, dword [esi]
arpl word [ebp + 0x6d], si
outsb dx, byte gs:[esi]
je 0x78ac7b
inc eax
push ecx
inc ecx
inc ebp
inc eax
pop eax
pop edx
add byte [edi], bh
aas
xor byte [ecx + 0x56], dl
popal
jb 0x78acb4
popal
outsb dx, byte [esi]
je 0x78ac8f
inc eax
push ecx
inc ecx
inc ebp
inc eax
push eax
inc edx
inc esp
inc eax
pop edx
add byte [edi], bh
aas
xor byte [ecx + 0x4a], dl
jae 0x78acd0
outsb dx, byte [esi]
inc esp
outsd dx, dword [esi]
arpl word [ebp + 0x6d], si
outsb dx, byte gs:[esi]
je 0x78acab
inc eax
inc eax
push ecx
inc ecx
inc ebp
inc eax
pop eax
pop edx
add byte [edi], bh
jae 0x78acdf
jp 0x78acdd
inc eax
push ecx
dec edx
jae 0x78acec
outsb dx, byte [esi]
inc ecx
jb 0x78acf3
popal
jns 0x78acc4
inc eax
push ecx
inc edx
inc ebp
dec eax
pop eax
pop edx
add byte [edx + 0x6d], dh
jl 0x78acdf
dec edi
aas
jb 0x78acf8
insd dword es:[edi], dx
outsd dx, dword [esi]
jbe 0x78acfc
inc eax
push ecx
dec esp
imul esi, dword [ebx + 0x74], 0x61746144
popal
inc eax
inc eax
push ecx
inc ecx
inc ebp
pop eax
dec eax
inc eax
pop edx
add byte [edi], bh
aas
imul esi, dword [ebx + 0x4f], reloc.SHELL32.dll_ShellExecuteW
je 0x78acf5
inc eax
push ecx
dec edx
jae 0x78ad28
outsb dx, byte [esi]
inc esp
outsd dx, dword [esi]
arpl word [ebp + 0x6d], si
outsb dx, byte gs:[esi]
je 0x78ad03
inc eax
push ecx
inc edx
inc ebp
pop edi
dec esi
pop eax
pop edx
add bh, dl
push esp
retf 0x5cad
pop esp
mov edx, 0x3051c143
ret
lodsd eax, dword [esi]
jp 0x78ad35
push ebp
aas
je 0x78ad52
push ebp
je 0x78ad4c
cmp byte [eax + 0x51], al
push ebx
je 0x78ad5e
imul ebp, dword [esi + 0x67], reloc.SHELL32.dll_ShellExecuteW
inc edx
inc ebp
aas
inc ecx
push esi
push ecx
inc edx
jns 0x78ad70
inc ecx
jb 0x78ad72
popal
jns 0x78ad43
inc eax
pop eax
pop edx
add byte [edi], bh
js 0x78ad74
jae 0x78ad81
jae 0x78ad4f
push ecx
inc esi
imul ebp, dword [ebp + 0x49], 0x406f666e
inc eax
push ecx
inc edx
inc ebp
pop edi
dec esi
pop eax
pop edx
add ah, al
ja 0x78ad83
test eax, 0x72663fc8
outsd dx, dword [esi]
jb 0x78ad9a
insd dword es:[edi], dx
dec edx
jae 0x78ad9e
outsb dx, byte [esi]
inc eax
push ecx
dec edx
jae 0x78ada4
outsb dx, byte [esi]
inc esp
outsd dx, dword [esi]
arpl word [ebp + 0x6d], si
outsb dx, byte gs:[esi]
je 0x78ad7f
inc eax
push ebx
inc ecx
aas
inc ecx
push esi
xor dword [eax + 0x41], eax
inc edx
push esi
push ecx
inc edx
jns 0x78adc2
inc ecx
inc ecx
jb 0x78adc4
popal
jns 0x78ad95
inc eax
push eax
inc ecx
push ebp
push ecx
dec edx
jae 0x78adcc
outsb dx, byte [esi]
push eax
popal
jb 0x78add5
inc ebp
jb 0x78add8
outsd dx, dword [esi]
jb 0x78ada9
inc eax
inc eax
pop edx
add byte [esi - 0x41], ah
pop ebp
mov di, 0x155d
std
adc eax, 0xbd0f66fd
fisttp word [ebx + 0x65eb2404]
outsd dx, dword [esi]
out dx, eax
jg 0x78ad99
bsr bx, di
mov eax, dword [esp]
mov ebp, 0x24048bdf
jmp 0x78ade0
jmp 0x3fb62fa2
cmp byte [0x6a626f3f], 0x65
aas
outsd dx, dword [esi]
bound ebp, qword [edx + 0x65]
arpl word [eax + eax*2 + 0x51], si
dec edx
jae 0x78adfe
outsb dx, byte [esi]
inc esp
outsd dx, dword [esi]
arpl word [ebp + 0x6d], si
outsb dx, byte gs:[esi]
je 0x78add9
inc eax
push ecx
inc edx
inc ebp
aas
inc ecx
push esi
push ecx
dec edx
jae 0x78ae13
outsb dx, byte [esi]
dec edi
bound ebp, qword [edx + 0x65]
arpl word [eax + eax*2 + 0x40], si
pop eax
pop edx
add byte [ecx], cl
mov ds, word [ebx + edi*2]
xchg esi, eax
jbe 0x78ad50
and esi, dword [ebx - reloc.SHELL32.dll_ShellExecuteW]
adc dword [eax + reloc.SHELL32.dll_ShellExecuteW], edx
aas
aas
xor al, 0x51
push ebx
je 0x78ae3b
imul ebp, dword [esi + 0x67], reloc.SHELL32.dll_ShellExecuteW
inc eax
inc eax
push ecx
inc ecx
inc ebp
inc ecx
inc ecx
push esi
xor byte [eax + 0x24], al
and al, 0x51
inc eax
and al, 0x24
push ecx
inc ecx
push esi
xor byte [eax + 0x40], al
pop edx
add byte [ebp - 0xcf67], cl
jmp dword [esi - 0x75]
lea ebx, [ecx - 0xd0]
mov cx, word [esp]
mov dx, cx
setae ch
jmp 0x78ae21
jae 0x78ae40
push ecx
dec edx
jae 0x78ae73
outsb dx, byte [esi]
dec edi
bound ebp, qword [edx + 0x65]
arpl word [eax + eax*2 + 0x40], si
push ecx
inc edx
inc ebp
pop edi
dec esi
inc ecx
inc edx
push esi
push ecx
push ebx
je 0x78ae8b
imul ebp, dword [esi + 0x67], reloc.SHELL32.dll_ShellExecuteW
add byte [esi - 0x6cc5ed4b], bh
mov esi, 0x933a12b5
mov al, dh
mov dh, 0xd4
cpuid
stc
jmp 0x78ae55
push 0x69445140
jb 0x78ae82
inc eax
push ecx
inc edx
inc ebp
aas
inc ecx
push esi
push ecx
push ebx
je 0x78aebf
imul ebp, dword [esi + 0x67], reloc.SHELL32.dll_ShellExecuteW
add byte [esi - 0x47], ah
mov bh, 0xcc
mov cx, 0xccb7
setle bh
mov al, 0xff
call 0x78af17
add eax, 0x97641d8d
ja 0x78ae06
out dx, eax
aas
imul esi, dword fs:[edx + 0x4e], 0x40656d61
inc eax
push ecx
inc esp
imul esi, dword [edx + 0x40], 0x45425140
inc eax
push ecx
inc edx
inc ebp
aas
inc ecx
push esi
push ecx
push ebx
je 0x78aef6
imul ebp, dword [esi + 0x67], reloc.SHELL32.dll_ShellExecuteW
add bh, bh
je 0x78ae79
lea edi, [ebx + ebx*8 - 0x15]
popal
int1
nop
arpl word [ebp + 0x3f9a6320], si
je 0x78af0d
dec edi
bound ebp, qword [edx + 0x65]
arpl word [eax + eax*2 + 0x51], si
dec edx
jae 0x78af18
outsb dx, byte [esi]
push esi
popal
insb byte es:[edi], dx
jne 0x78af14
push edx
inc ax
inc eax
push ecx
inc edx
inc ebp
aas
inc ecx
push esi
push ecx
dec edx
jae 0x78af2d
outsb dx, byte [esi]
dec edi
bound ebp, qword [edx + 0x65]
arpl word [eax + eax*2 + 0x40], si
pop eax
pop edx
add byte [edi], bh
jb 0x78af32
popal
inc ecx
insb byte es:[edi], dx
insb byte es:[edi], dx
inc eax
push ecx
dec ecx
dec edi
inc esp
jbe 0x78af43
arpl word [ebp + 0x40], sp
inc eax
inc eax
push ecx
inc ecx
inc ebp
aas
inc ecx
push esi
push ecx
inc edx
jns 0x78af5c
inc ecx
jb 0x78af5e
popal
jns 0x78af2f
inc eax
pop eax
pop edx
add dh, bh
jne 0x78aedb
invalid
inc eax
inc eax
push ecx
inc edx
inc ebp
pop edi
dec edx
pop eax
pop edx
add byte [edi + 0x6bd2a880], bh
mov di, word [esp + 2]
sub byte [eax - 0x7499942e], 0x7c
imul esp, dword [esi - 0x75], 0x7c
and al, 2
bswap ebp
jmp 0x78af51
aas
arpl word [edx + 0x65], si
jb 0x78af96
popal
je 0x78af99
inc esp
popal
je 0x78af99
inc eax
push ecx
dec ebp
popal
jo 0x78af82
popal
je 0x78afa2
inc edx
popal
jae 0x78afaa
inc eax
inc eax
push ebx
inc ecx
push eax
inc ecx
push ebp
xor dword [eax + 0x58], eax
pop edx
add byte [esi - 0x71], ah
add al, 0x24
pop word [esp]
add esp, 1
cmc
cld
mov cl, 0x3d
mov dl, 0xbd
jmp 0x78afce
push eax
inc ecx
push ebp
xor dword [eax + 0x40], eax
pop edx
add byte [eax], cl
test byte [edx], bl
jge 0x78af1b
mov esi, 0x33c0a131
shl byte [eax + 0x32c7a032], cl
mov al, byte [0x32c7a032]
invalid
sal byte [ebx + 0x6572663f], 1
push esp
push esp
jb 0x78b00a
inc eax
push ecx
dec ebp
popal
jo 0x78aff0
popal
je 0x78b010
inc edx
popal
jae 0x78b018
inc eax
inc eax
push ecx
inc ecx
inc ebp
pop eax
push eax
inc ecx
push ebp
push ecx
dec ebp
popal
jo 0x78b00f
outsd dx, dword [esi]
inc edx
popal
jae 0x78b02d
inc eax
inc eax
dec eax
inc eax
pop edx
add byte [esi - 0x48], ah
inc ebp
xchg ebx, esi
mov ax, 0xf245
xchg ebx, esi
mov di, word [esp]
xchg bh, ch
jmp 0x78b0ec
inc eax
inc eax
push ecx
inc edx
inc ebp
aas
inc ecx
push esi
xor dword [eax + 0x48], eax
inc eax
pop edx
add byte [eax], cl
cdq
or dword [eax - 0x65], ebp
jo 0x78b070
cli
push 0x485dfa0f
pop ebp
dec eax
fisttp word [edi + 0x2a]
fst dword [esi]
push ss
mov dl, 0x3f
arpl word [edx + 0x65], si
popal
je 0x78b07e
dec esi
dec esi
outsd dx, dword [esi]
inc eax
push ecx
dec ebp
popal
jo 0x78b067
popal
je 0x78b087
inc edx
popal
jae 0x78b08f
inc eax
inc eax
push ecx
inc ecx
inc ebp
push eax
inc ecx
push ebp
push ecx
dec ebp
popal
jo 0x78b085
outsd dx, dword [esi]
inc edx
popal
jae 0x78b0a3
inc eax
inc eax
dec eax
dec eax
push eax
inc ecx
push ebp
xor al, byte [eax + 0x5f]
dec esi
inc eax
pop edx
add byte [edi], bh
popal
jo 0x78b0c0
outsb dx, byte gs:[esi]
inc eax
push ecx
push ebx
je 0x78b0ca
imul ebp, dword [esi + 0x67], reloc.SHELL32.dll_ShellExecuteW
inc ebp
inc ecx
inc ecx
push esi
xor dword [eax + 0x41], eax
inc edx
push esi
xor dword [eax + 0x40], eax
pop edx
add byte [ecx + 0x37c4bd2d], bh
les esi, [edi]
cmp byte [edi + ecx*4 + 0x3408116], 0x3f
insd dword es:[edi], dx
imul esp, dword [eax + eax*2 + 0x51], 0x69727453
outsb dx, byte [esi]
inc eax
push ecx
push ebx
je 0x78b0f4
imul ebp, dword [esi + 0x67], reloc.SHELL32.dll_ShellExecuteW
inc eax
inc eax
push ecx
inc edx
inc ebp
aas
inc ecx
push esi
xor dword [eax + 0x48], eax
dec eax
dec eax
inc eax
pop edx
add byte [edi], bh
je 0x78b106
dec ecx
outsb dx, byte [esi]
je 0x78b0db
push ecx
push ebx
je 0x78b111
imul ebp, dword [esi + 0x67], reloc.SHELL32.dll_ShellExecuteW
inc eax
push ecx
inc edx
inc ebp
dec eax
push eax
inc ecx
pop edi
dec esi
dec eax
inc eax
pop edx
add byte [edi + 0x38c9ae38], ch
xchg ecx, eax
adc dword [reloc.SHELL32.dll_ShellExecuteW], 0x13
xchg byte [ebx + esi*2], dl
mov fs, word [edi]
mov bh, 0x3f
jb 0x78b12b
arpl word [ecx + 0x6c], sp
arpl word [ebp + 0x6f], cx
dec ebp
outsd dx, dword [esi]
jae 0x78b142
dec esp
je 0x78b121
outsd dx, dword [esi]
inc eax
push ecx
dec ebp
popal
jo 0x78b120
inc esp
popal
je 0x78b140
inc edx
popal
jae 0x78b148
inc eax
inc eax
push ecx
inc ecx
inc ebp
pop eax
pop eax
pop edx
add byte [esi - 0x42], ah
xor al, byte [edi + 0xf24248d]
mov si, 0x8732
lea esp, [esp]
bswap ebx
mov ax, bp
xchg byte [esp], ch
stc
jmp 0x78b185
retf
jo 0x78b169
jb 0x78b16f
inc eax
push ecx
push ebx
je 0x78b181
imul ebp, dword [esi + 0x67], reloc.SHELL32.dll_ShellExecuteW
inc eax
inc eax
push ecx
inc edx
inc ebp
dec eax
inc ecx
inc edx
push esi
xor dword [eax + 0x57], eax
xor al, 0x43
popal
jae 0x78b188
push ebx
outsb dx, byte gs:[esi]
jae 0x78b191
je 0x78b193
jbe 0x78b195
imul esi, dword [ecx + edi*2 + 0x40], reloc.SHELL32.dll_ShellExecuteW
je 0x78b1a7
inc eax
push ecx
je 0x78b172
inc eax
inc eax
pop edx
add cl, dh
imul edi, ecx, 0x11de6b98
mov bl, byte [eax]
jg 0x78b0cb
mov ah, byte [ebx]
and esi, dword [ecx + reloc.SHELL32.dll_ShellExecuteW]
add dl, 0x3f
mov cl, 0x2f
mov edi, 0xc28029da
aas
ret 0x663f
jb 0x78b1b2
dec esi
outsd dx, dword [esi]
inc ecx
outsb dx, byte [esi]
push edx
bound esp, qword gs:[ecx + 0x6c]
popal
outsb dx, byte [esi]
arpl word [ebp + 0x40], sp
push ecx
dec ebp
popal
jo 0x78b1a8
popal
je 0x78b1c8
inc edx
popal
jae 0x78b1d0
inc eax
inc eax
push ecx
inc ecx
inc ebp
pop eax
push eax
inc ecx
push ebp
push ecx
dec ebp
popal
jo 0x78b1c7
outsd dx, dword [esi]
inc edx
popal
jae 0x78b1e5
inc eax
inc eax
inc eax
pop edx
add byte [ebx + 0xfd7f6ea], dh
mov byte [0x8b6656b1], al
sbb al, 0x24
mov bl, 0xea
not bh
xlatb
cpuid
mov cl, 0x56
mov bx, word [esp]
setp cl
jmp 0x78b2ac
shr ecx, 0x13
add dword [eax], eax
add byte [ebp + 0x4c], bh
adc eax, dword [ecx]
add byte [eax], al
jge 0x78b1e7
aas
jae 0x78b20e
insb byte es:[edi], dx
imul esi, dword [eax + eax*2 + 0x51], 0x69727453
outsb dx, byte [esi]
inc eax
inc eax
push ecx
inc edx
inc ebp
aas
inc ecx
push esi
push ecx
push ebx
je 0x78b227
imul ebp, dword [esi + 0x67], reloc.SHELL32.dll_ShellExecuteW
inc eax
inc eax
push esi
push ecx
inc ebx
push 0x40407261
push esi
aas
and al, 0x51
inc esi
insb byte es:[edi], dx
popal
jae 0x78b210
push edi
xor al, 0x53
jo 0x78b241
imul esi, dword [edx + eax*2 + 0x65], reloc.SHELL32.dll_ShellExecuteW
outsd dx, dword [esi]
jb 0x78b226
insb byte es:[edi], dx
popal
jae 0x78b225
push ecx
je 0x78b228
inc eax
inc eax
inc eax
inc eax
push edi
xor al, 0x43
popal
jae 0x78b256
push ebx
outsb dx, byte gs:[esi]
jae 0x78b25f
je 0x78b261
jbe 0x78b263
je 0x78b275
inc eax
push ecx
je 0x78b240
inc eax
inc eax
pop edx
add byte [edi], bh
jae 0x78b27b
popal
jb 0x78b27e
inc eax
push ecx
push esp
push 0x64616572
inc eax
jb 0x78b275
popal
inc eax
inc eax
push ecx
inc ecx
inc ebp
pop eax
push edi
xor al, 0x50
jb 0x78b286
outsd dx, dword [esi]
jb 0x78b289
je 0x78b29b
inc eax
xor dword [eax + 0x40], eax
inc eax
pop edx
add ah, al
arpl bx, si
les esp, [ebx - 0xd]
xchg esi, eax
in al, 0x26
push ecx
rcl byte [ebx - 0x36]
aas
jae 0x78b29f
popal
jb 0x78b29f
pop edi
outsb dx, byte [esi]
jne 0x78b2ab
insb byte es:[edi], dx
inc eax
push ecx
dec ebp
popal
jo 0x78b28a
popal
je 0x78b2aa
inc edx
popal
jae 0x78b2b2
inc eax
inc eax
xor dl, byte [ebp + 0x31]
inc eax
inc edx
add byte [edi], bh
aas
xor byte [ecx + 0x42], dl
jns 0x78b2d0
inc ecx
jb 0x78b2d2
jb 0x78b2c2
popal
jns 0x78b2a3
inc eax
push ecx
inc ecx
inc ebp
inc eax
push eax
inc edx
inc esp
dec eax
inc eax
pop edx
add byte [edi + eax + 0x72633fae], dl
popal
je 0x78b2de
push esp
push 0x64616572
dec ecx
jb 0x78b2e2
popal
dec ecx
insd dword es:[edi], dx
jo 0x78b2ef
inc eax
push ecx
push esp
push 0x64616572
inc eax
popal
inc eax
inc eax
inc ebx
inc ecx
push eax
inc ecx
push esi
xor dword [eax + 0x24], eax
and al, 0x51
inc ecx
push esi
aas
and al, 0x66
jne 0x78b312
jne 0x78b312
jne 0x78b312
jb 0x78b306
inc eax
inc eax
pop eax
inc eax
jae 0x78b31a
inc eax
inc eax
inc eax
pop edx
add byte [esi + 0xf], ah
mov esp, 0x241c8bd6
bsf dx, si
mov ebx, dword [esp]
and al, 0x8a
or al, 0x24
mov cl, byte [esp]
push edx
pop word [esp]
jmp 0x78b31c
aas
je 0x78b334
dec ecx
outsb dx, byte [esi]
je 0x78b309
push ecx
dec edx
jae 0x78b33c
outsb dx, byte [esi]
push esi
popal
insb byte es:[edi], dx
jne 0x78b338
inc eax
inc eax
inc eax
push ecx
inc edx
inc ebp
dec eax
dec eax
inc eax
pop edx
add al, al
pop esi
int3
loope 0x78b313
and dword ss:[eax + 0x3f], esp
jbe 0x78b34b
insb byte es:[edi], dx
jne 0x78b352
inc eax
push ecx
dec edx
jae 0x78b361
outsb dx, byte [esi]
dec edi
bound ebp, qword [edx + 0x65]
arpl word [eax + eax*2 + 0x40], si
push ecx
inc edx
inc ebp
aas
inc ecx
push esi
push ecx
dec edx
jae 0x78b374
outsb dx, byte [esi]
push esi
popal
insb byte es:[edi], dx
jne 0x78b370
inc eax
inc eax
inc ecx
inc edx
push esi
push ecx
push ebx
je 0x78b386
jb 0x78b37e
imul ebp, dword [esi + 0x67], reloc.SHELL32.dll_ShellExecuteW
outsb dx, byte [esi]
inc eax
inc eax
inc eax
pop edx
add byte [ebp - 0x7899c4cc], cl
salc
lea esi, [ebx + edi]
xchg si, dx
btc ax, cx
mov bl, dh
pushfd
neg bx
jmp 0x78b3a2
outsd dx, dword [esi]
push ebx
je 0x78b3aa
imul ebp, dword [esi + 0x67], reloc.SHELL32.dll_ShellExecuteW
outsd dx, dword [esi]
push ecx
dec edx
jae 0x78b3af
outsb dx, byte [esi]
push esi
popal
insb byte es:[edi], dx
jne 0x78b3ab
inc eax
inc eax
push ecx
inc edx
inc ebp
aas
inc ecx
push esi
push ecx
push ebx
je 0x78b3c4
imul ebp, dword [esi + 0x67], reloc.SHELL32.dll_ShellExecuteW
add byte [edi], bh
insb byte es:[edi], dx
je 0x78b3c6
dec esp
popal
je 0x78b3ca
jb 0x78b3a7
push ecx
dec edi
bound ebp, qword [edx + 0x65]
arpl word [eax + eax*2 + 0x40], si
push ecx
inc ecx
inc ebp
pop eax
pop eax
pop edx
add byte [edi + 0x3f], dl
je 0x78b3ea
inc ecx
jb 0x78b3f0
popal
jns 0x78b3c1
push ecx
dec edx
jae 0x78b3f4
outsb dx, byte [esi]
push esi
popal
insb byte es:[edi], dx
jne 0x78b3f0
inc eax
inc eax
push ecx
inc edx
inc ebp
aas
inc ecx
push esi
push ecx
dec edx
jae 0x78b406
outsb dx, byte [esi]
inc ecx
jb 0x78b40d
popal
jns 0x78b3de
inc eax
pop eax
pop edx
add byte [esi - 0x79], ah
fisub word [esi - 0x75]
xchg si, bx
mov ax, sp
push word [esp + 1]
les esp, [esi - 1]
je 0x78b3d0
and al, 1
add dword [edi], ecx
mov byte [0xe8e942fd], al
add byte [eax], al
add byte [esi + 0x6f743f89], bh
dec edi
bound ebp, qword [edx + 0x65]
arpl word [eax + eax*2 + 0x51], si
cpuid
std
inc edx
jmp 0x78b49e
inc eax
push ecx
dec edx
jae 0x78b435
outsb dx, byte [esi]
push esi
popal
insb byte es:[edi], dx
jne 0x78b431
inc eax
inc eax
push ecx
inc edx
inc ebp
aas
inc ecx
push esi
push ecx
dec edx
jae 0x78b447
outsb dx, byte [esi]
dec edi
bound ebp, qword [edx + 0x65]
arpl word [eax + eax*2 + 0x40], si
je 0x78b420
inc eax
pop eax
pop edx
add byte [eax], ch
aas
aas
inc ecx
push ecx
dec edx
jae 0x78b45b
outsb dx, byte [esi]
inc ecx
jb 0x78b462
popal
jns 0x78b433
inc eax
push ecx
inc ecx
inc ebp
aas
inc ecx
push esi
push ecx
dec edx
jae 0x78b46d
outsb dx, byte [esi]
push esi
popal
insb byte es:[edi], dx
jne 0x78b469
push edx
inc ax
inc ax
inc eax
dec eax
inc eax
pop edx
add byte [edi], bh
aas
jae 0x78b484
popal
jb 0x78b487
inc eax
push ecx
push esp
imul ebp, dword [ebp + 0x65], 0x51404072
inc ecx
inc ebp
pop eax
dec eax
inc eax
pop edx
add byte [edi], bh
je 0x78b496
push ebx
je 0x78b49c
imul ebp, dword [esi + 0x67], reloc.SHELL32.dll_ShellExecuteW
jb 0x78b49c
popal
outsb dx, byte [esi]
je 0x78b477
inc eax
push ecx
inc edx
inc ebp
aas
inc ecx
push esi
push ecx
push ebx
je 0x78b4b4
imul ebp, dword [esi + 0x67], reloc.SHELL32.dll_ShellExecuteW
pop eax
pop edx
add byte [edi], bh
popal
bound esi, qword [ebx + 0x6f]
insb byte es:[edi], dx
jne 0x78b4c6
inc esp
imul esi, dword [edx + 0x40], 0x6c694651
dec ecx
outsb dx, byte [esi]
outsw dx, word [esi]
inc eax
inc eax
push ecx
inc edx
inc ebp
aas
inc ecx
push esi
push ecx
inc esp
imul esi, dword [edx + 0x40], 0x5a5840
dec ebx
iretd
inc eax
pop eax
pop edx
add byte [ebx - 0x31], cl
pop edi
cmp cl, cl
add esp, ebx
pushal
jecxz 0x78b4d9
not byte [ecx + 0x6c1d8660]
jg 0x78b4c7
aas
je 0x78b4f3
push edx
popal
insb byte es:[edi], dx
inc eax
push ecx
push esi
popal
jb 0x78b4f7
popal
outsb dx, byte [esi]
je 0x78b4d2
inc eax
push ecx
inc edx
inc ebp
dec esi
push eax
inc ecx
pop edi
dec esi
inc eax
pop edx
add byte [esi - 0x75], ah
je 0x78b4c6
mov si, word [esp + 1]
sbb dx, 0x9ffe
not cx
jmp 0x78b4e3
add dword [esi - 0x7f], esp
invalid
aas
popal
bound esi, qword [ebx + 0x6f]
insb byte es:[edi], dx
jne 0x78b530
inc esi
imul ebp, dword [ebp + 0x50], 0x40687461
push ecx
inc esp
imul esi, dword [edx + 0x40], 0x45425140
aas
inc ecx
push esi
push ecx
push ebx
je 0x78b548
imul ebp, dword [esi + 0x67], reloc.SHELL32.dll_ShellExecuteW
inc eax
inc eax
inc ecx
inc edx
push esi
xor al, byte [eax + 0x40]
pop edx
add byte [ebp + 0x66072464], cl
not ecx
lea esp, [esp + 7]
not cx
rcl bx, 0xd
std
jmp 0x78b5a4
add bl, dh
ljmp 0x6e65
mov ah, 0xa7
aas
outsb dx, byte gs:[esi]
je 0x78b570
jns 0x78b54c
imul esi, dword [ebx + 0x74], reloc.SHELL32.dll_ShellExecuteW
jb 0x78b549
inc eax
push ecx
inc edx
inc ebp
aas
inc ecx
push esi
push ecx
push ebx
je 0x78b586
imul ebp, dword [esi + 0x67], reloc.SHELL32.dll_ShellExecuteW
inc eax
inc eax
inc ecx
inc edx
push esi
xor al, byte [eax + 0x56]
aas
and al, 0x51
inc esi
insb byte es:[edi], dx
popal
jae 0x78b56c
push edi
xor al, 0x46
imul ebp, dword [esp + esi*2 + 0x65], 0x44514072
insb byte es:[edi], dx
je 0x78b598
jb 0x78b575
push ecx
inc esp
imul esi, dword [edx + 0x40], reloc.SHELL32.dll_ShellExecuteW
aas
and al, 0x51
inc esi
insb byte es:[edi], dx
popal
jae 0x78b587
push edi
xor al, 0x53
push ebx
outsd dx, dword [esi]
jb 0x78b5c1
je 0x78b594
inc esi
insb byte es:[edi], dx
popal
inc eax
push ecx
inc esp
imul esi, dword [edx + 0x40], 0x40404040
pop edx
add byte [edi], bh
popal
jo 0x78b5d1
outsb dx, byte gs:[esi]
inc eax
push ecx
push ebx
je 0x78b5db
imul ebp, dword [esi + 0x67], reloc.SHELL32.dll_ShellExecuteW
inc eax
inc eax
push ecx
inc ecx
inc ebp
inc ecx
inc ecx
push esi
xor dword [eax + 0x50], eax
inc eax
push eax
inc edx
inc esp
inc eax
pop edx
add dh, cl
pop ecx
aas
popal
je 0x78b5c2
push ecx
dec edx
jae 0x78b5f5
outsb dx, byte [esi]
inc ecx
jb 0x78b5fc
popal
jns 0x78b5cd
inc eax
push ecx
inc edx
inc ebp
aas
inc ecx
push esi
push ecx
dec edx
jae 0x78b607
outsb dx, byte [esi]
push esi
popal
insb byte es:[edi], dx
jne 0x78b603
inc eax
inc eax
dec eax
inc eax
pop edx
add byte [ecx + 0x236a9233], bh
mov ecx, 0x236a9233
mov bx, bp
rdtsc
lea edx, [edx + ebx]
jmp 0x78b631
insd dword es:[edi], dx
inc eax
push ecx
inc esi
imul ebp, dword [ebp + 0x49], 0x406f666e
outsb dx, byte [esi]
outsw dx, word [esi]
inc eax
inc eax
push ecx
inc edx
inc ebp
aas
inc ecx
push esi
push ecx
push ebx
je 0x78b64b
imul ebp, dword [esi + 0x67], reloc.SHELL32.dll_ShellExecuteW
inc eax
inc eax
inc eax
pop eax
pop edx
add dh, dh
jo 0x78b5ca
xor dword [eax - 0x67], reloc.SHELL32.dll_ShellExecuteW
ja 0x78b582
cli
jle 0x78b5dc
mov eax, dword [esi - reloc.SHELL32.dll_ShellExecuteW]
aas
outsd dx, dword [esi]
sar dword [edi], 0x6f
jo 0x78b65f
outsb dx, byte [esi]
inc eax
push ecx
inc esi
imul ebp, dword [ebp + 0x40], 0x45415540
push ebp
inc ecx
inc ebp
pop edi
dec esi
push esi
aas
and al, 0x51
inc esi
insb byte es:[edi], dx
popal
jae 0x78b652
push edi
xor al, 0x4f
jo 0x78b67c
outsb dx, byte [esi]
dec ebp
outsd dx, dword [esi]
inc esi
insb byte es:[edi], dx
popal
inc eax
push ecx
dec ecx
dec edi
inc esp
jbe 0x78b691
arpl word [ebp + 0x40], sp
inc eax
inc eax
inc eax
inc eax
pop edx
add byte [esi - 0x42], ah
pop edi
cmc
mov si, 0xf55f
mov bx, 0x271f
mov al, 0x4c
ror ebx, 3
jmp 0x78b664
bound esp, qword [ebp + 0x72]
inc eax
push ecx
push ebx
je 0x78b6c5
jb 0x78b6bd
imul ebp, dword [esi + 0x67], reloc.SHELL32.dll_ShellExecuteW
outsb dx, byte [esi]
inc eax
inc eax
push ebx
inc ecx
aas
inc ecx
push esi
xor dword [eax + 0x48], eax
dec eax
dec eax
inc eax
pop edx
add byte [ebp - 0x74fedb9c], cl
adc al, 0x24
lea esp, [esp + 1]
mov edx, dword [esp]
sub esp, 5
shr bh, 5
inc di
jmp 0x78b8ab
xor byte [ecx + 0x43], dl
push 0x40407261
push ecx
inc ecx
inc ebp
inc eax
push ebp
push ecx
dec esp
popal
je 0x78b6f7
imul ebp, dword [esi + 0x31], reloc.SHELL32.dll_ShellExecuteW
inc eax
outsb dx, byte [esi]
xor dword [ebx + 0x68], eax
popal
jb 0x78b6d5
push 0x40407261
inc eax
inc eax
pop edx
add byte [esi + eax*8 + 0x54], cl
xor ecx, esi
sub al, 0xfe
jnp 0x78b68d
invalid
push ecx
inc ecx
inc ebp
inc ecx
inc ecx
push esi
xor byte [eax + 0x24], al
and al, 0x51
and al, 0x24
push ecx
inc ecx
push esi
xor byte [eax + 0x40], al
pop edx
add byte [edi], bh
imul bp, word [ebp + 0x4e], 0x6d61
popal
insd dword es:[edi], dx
inc eax
push ecx
push ebp
jb 0x78b749
inc eax
inc eax
push ecx
inc edx
inc ebp
aas
inc ecx
push esi
push ecx
push ebx
je 0x78b75b
imul ebp, dword [esi + 0x67], reloc.SHELL32.dll_ShellExecuteW
and al, 0x51
inc esi
insb byte es:[edi], dx
popal
jae 0x78b738
inc eax
push edi
xor al, 0x43
outsd dx, dword [esi]
insd dword es:[edi], dx
jo 0x78b76e
outsb dx, byte [esi]
outsb dx, byte gs:[esi]
je 0x78b74a
outsd dx, dword [esi]
jb 0x78b774
popal
je 0x78b77e
imul ebp, dword [esi + 0x67], reloc.SHELL32.dll_ShellExecuteW
outsd dx, dword [esi]
outsb dx, byte [esi]
inc eax
push ecx
push ebp
jb 0x78b784
inc eax
inc eax
inc eax
inc eax
inc eax
pop edx
add byte [esi + 0x16fb9c0e], al
ret 0x661f
push ebx
je 0x78b7ad
imul ebp, dword [esi + 0x67], reloc.SHELL32.dll_ShellExecuteW
push eax
popal
jb 0x78b7b9
imul ebp, dword [esi + 0x67], reloc.SHELL32.dll_ShellExecuteW
inc eax
dec ebp
outsd dx, dword [esi]
inc eax
xor byte [eax + 0x40], al
pop edx
add byte [edi], bh
jae 0x78b7cb
imul di, word [eax + 0x40], 0x4651
push ecx
inc esi
imul ebp, dword [ebp + 0x49], reloc.SHELL32.dll_ShellExecuteW
inc eax
push ecx
inc edx
inc ebp
aas
inc ecx
push esi
push ecx
push ebx
je 0x78b7e2
imul ebp, dword [esi + 0x67], reloc.SHELL32.dll_ShellExecuteW
inc eax
pop eax
pop edx
add byte [ecx - 0x5af56cf0], dl
aam 0x3f
aas
aas
xor byte [ecx + 0x55], dl
jb 0x78b7f1
insb byte es:[edi], dx
push ecx
jne 0x78b7ed
jb 0x78b803
inc eax
inc eax
push ecx
inc ecx
inc ebp
inc eax
inc ecx
inc edx
push esi
push ecx
push ebx
je 0x78b809
imul ebp, dword [esi + 0x67], reloc.SHELL32.dll_ShellExecuteW
add byte [edi], bh
aas
xor byte [ecx + 0x44], dl
imul esi, dword [edx + 0x40], 0x45415140
inc eax
inc ecx
inc edx
push esi
push ecx
push ebx
je 0x78b825
imul ebp, dword [esi + 0x67], reloc.SHELL32.dll_ShellExecuteW
pop edx
add byte [ebx + ecx*8 + 0x5b], cl
int 0x24
out dx, al
stc
fdivr dword [edi]
popal
jb 0x78b82f
inc eax
push ecx
push ebx
je 0x78b83f
imul ebp, dword [esi + 0x67], reloc.SHELL32.dll_ShellExecuteW
inc ebp
aas
inc ecx
push esi
xor dword [eax + 0x48], eax
dec eax
dec eax
push esi
push ecx
inc ebx
push 0x40407261
jb 0x78b824
inc eax
inc eax
pop edx
add byte [edi], bh
insd dword es:[edi], dx
jae 0x78b858
jo 0x78b830
jo 0x78b830
push ecx
push esp
push 0x64616572
inc eax
inc eax
push ebx
inc ecx
pop eax
dec ebx
inc eax
pop edx
add byte [edi], bh
outsb dx, byte [esi]
outsd dx, dword [esi]
jb 0x78b872
popal
insb byte es:[edi], dx
imul edi, dword [edx + 0x65], 0x70795464
push esp
jns 0x78b87e
inc eax
push ecx
dec ebp
je 0x78b876
dec edi
bound ebp, qword [edx + 0x65]
arpl word [eax + eax*2 + 0x40], si
push ebx
inc ecx
aas
inc ecx
push esi
push ecx
inc edx
jns 0x78b89a
je 0x78b88c
inc ecx
inc ecx
jb 0x78b89c
popal
jns 0x78b86d
inc eax
push eax
inc edx
inc esp
inc eax
pop edx
add byte [edi + 0x69], dl
outsb dx, byte [esi]
dec eax
je 0x78b8ae
jo 0x78b88e
arpl word gs:[ebp + 0x69], sp
jbe 0x78b8a7
imul esi, dword [esi + 0x65], reloc.SHELL32.dll_ShellExecuteW
push edx
jae 0x78b8b6
outsd dx, dword [esi]
outsb dx, byte [esi]
jae 0x78b8af
add byte [edi], bh
jno 0x78b8c3
jb 0x78b8ca
dec ecx
je 0x78b8b9
insd dword es:[edi], dx
push esi
popal
insb byte es:[edi], dx
jne 0x78b8bf
inc eax
push ecx
push ebp
jb 0x78b8cb
push ecx
jne 0x78b8c7
jb 0x78b8dd
inc eax
inc eax
push ecx
inc edx
inc ebp
aas
inc ecx
push esi
push ecx
push ebx
je 0x78b8e2
imul ebp, dword [esi + 0x67], reloc.SHELL32.dll_ShellExecuteW
inc eax
inc eax
inc ecx
inc edx
push esi
xor al, byte [eax + 0x56]
aas
and al, 0x51
inc esi
insb byte es:[edi], dx
popal
jae 0x78b8c4
push edi
xor al, 0x43
outsd dx, dword [esi]
insd dword es:[edi], dx
jo 0x78b8fa
outsb dx, byte [esi]
outsb dx, byte gs:[esi]
je 0x78b8d6
outsd dx, dword [esi]
jb 0x78b900
popal
je 0x78b90a
imul ebp, dword [esi + 0x67], reloc.SHELL32.dll_ShellExecuteW
outsd dx, dword [esi]
outsb dx, byte [esi]
inc eax
push ecx
push ebp
jb 0x78b910
jo 0x78b910
imul ebp, dword [edi + 0x6e], reloc.SHELL32.dll_ShellExecuteW
insb byte es:[edi], dx
inc eax
inc eax
inc eax
inc eax
inc eax
pop edx
add byte [esi - 1], ah
je 0x78b8d3
push word [esp + 5]
and al, 5
add eax, 0xad048d
add byte [eax], al
lea eax, [ebp*4]
bsf dx, bp
jmp 0x78b905
add byte [esi + 0xf], ah
mov esp, 0x3b48ebd5
adc cl, byte [ebp + 0x62613f1c]
lea ebx, [edi + edi]
popal
bound esi, qword [ebx + 0x6f]
jae 0x78b935
insb byte es:[edi], dx
jne 0x78b93d
push eax
push eax
popal
je 0x78b936
inc eax
push ecx
inc esp
imul esi, dword [edx + 0x40], 0x45425140
inc eax
inc eax
push ecx
inc edx
inc ebp
aas
inc ecx
push esi
push ecx
push ebx
je 0x78b951
imul ebp, dword [esi + 0x67], reloc.SHELL32.dll_ShellExecuteW
inc eax
inc eax
pop eax
pop edx
add byte [edi], bh
outsb dx, byte [esi]
jne 0x78b958
bound esp, qword [ebp + 0x72]
inc eax
push ecx
push ebx
je 0x78b965
imul ebp, dword [esi + 0x67], reloc.SHELL32.dll_ShellExecuteW
aas
inc ecx
push esi
xor dword [eax + 0x4e], eax
inc esp
dec eax
inc eax
pop edx
add byte [ebx + 0x245489c1], cl
mov eax, ecx
mov dword [esp + 2], edx
mov ax, 0x78d5
add ah, byte [esi - 0x48]
aad 0x78
mov bp, cx
mov ebp, ecx
jmp 0x78b9d3
inc edx
inc ebp
pop edi
dec esi
inc ecx
inc edx
push esi
push ecx
push ebx
je 0x78b9b2
imul ebp, dword [esi + 0x67], reloc.SHELL32.dll_ShellExecuteW
add byte [edi], bh
aas
xor al, 0x51
push ebx
je 0x78b9c1
imul ebp, dword [esi + 0x67], reloc.SHELL32.dll_ShellExecuteW
inc eax
inc eax
push ecx
inc ecx
inc ebp
inc ecx
inc ecx
push esi
xor byte [eax + 0x50], al
inc edx
inc esp
inc eax
pop edx
add bh, ch
not dword [bp + si - reloc.SHELL32.dll_ShellExecuteW]
pop ss
cwde
push cs
imul ebx, dword [eax - reloc.SHELL32.dll_ShellExecuteW], 0x3f68c9fe
outsb dx, byte gs:[esi]
je 0x78b9eb
xchg edx, eax
popal
adc dword [edi], reloc.SHELL32.dll_ShellExecuteW
jp 0x78b9e4
xchg edi, eax
dec cl
push 0x746e653f
jb 0x78b9f3
jns 0x78b9c7
dec esp
imul esi, dword [ebx + 0x74], reloc.SHELL32.dll_ShellExecuteW
jb 0x78b9c4
inc eax
push ecx
inc edx
inc ebp
aas
inc ecx
push esi
push ecx
push ebx
je 0x78ba01
imul ebp, dword [esi + 0x67], reloc.SHELL32.dll_ShellExecuteW
inc eax
inc eax
push esi
aas
and al, 0x51
inc esi
insb byte es:[edi], dx
popal
jae 0x78b9e2
push edi
xor al, 0x46
imul ebp, dword [esp + esi*2 + 0x65], 0x44514072
imul esi, dword [edx + 0x40], 0x56404040
inc eax
push esi
aas
and al, 0x51
inc esi
insb byte es:[edi], dx
popal
jae 0x78b9fd
push edi
xor al, 0x53
outsd dx, dword [esi]
jb 0x78ba37
inc esi
insb byte es:[edi], dx
popal
inc eax
inc eax
push ecx
inc esp
imul esi, dword [edx + 0x40], 0x40404040
pop edx
add byte [ebp + 0xfcd2484], cl
add byte [eax], al
lea eax, reloc.SHELL32.dll_ShellExecuteW
mov dword [esp + 3], ebx
mov cx, 0x60d9
jmp 0x78baaf
add byte [eax], al
add byte [ebx + 0x65723f22], cl
imul esi, dword [bp + di + 0x74], 0x6f4e7265
imul esi, dword gs:[bp + di + 0x74], reloc.SHELL32.dll_ShellExecuteW
outsd dx, dword [esi]
jb 0x78ba63
popal
insb byte es:[edi], dx
imul edi, dword [edx + 0x65], 0x70795464
jns 0x78ba6f
inc ax
inc ax
push ecx
dec ebp
je 0x78ba6a
push esp
jns 0x78ba7c
inc eax
inc eax
push ebx
inc ecx
dec eax
inc ecx
inc edx
push esi
push ecx
inc edx
jns 0x78ba8d
inc ecx
jb 0x78ba8f
popal
jns 0x78ba60
inc eax
dec eax
inc eax
pop edx
add byte [edi], bh
aas
xor byte [ecx + 0x56], dl
popal
jb 0x78ba96
popal
outsb dx, byte [esi]
je 0x78ba71
inc eax
push ecx
inc ecx
inc ebp
inc eax
inc ecx
inc edx
push esi
push ecx
push edx
arpl word gs:[eax + eax*2 + 0x40], si
inc eax
pop edx
add byte [ebp - 0x54], bl
mov edi, 0x65733f86
je 0x78ba95
outsb dx, byte [esi]
je 0x78bab4
jb 0x78bac7
popal
insb byte es:[edi], dx
inc eax
push ecx
push esp
imul ebp, dword [ebp + 0x65], 0x51404072
inc ecx
inc ebp
pop eax
dec eax
inc eax
pop edx
add byte [edi], bh
aas
xor dword [ecx + 0x53], edx
imul esp, dword [edi + 0x6e], 0x614d6c61
outsb dx, byte [si]
popal
insb byte es:[edi], dx
dec ebp
popal
jo 0x78bae2
jo 0x78bad8
jb 0x78bab5
jb 0x78bab5
inc eax
push ebp
inc ecx
inc ebp
inc eax
pop eax
pop edx
add byte [edi], bh
mov cl, 0x21
inc eax
mov bl, 0x5a
xor byte [ebx], dh
aas
jae 0x78baf1
outsb dx, byte [esi]
insb byte es:[di], dx
push ebx
push 0x5140746f
je 0x78bad1
push ecx
push esp
imul ebp, dword [ebp + 0x65], 0x53404072
jb 0x78bad8
jb 0x78bad8
inc eax
push ebx
inc ecx
pop eax
dec eax
push eax
inc edx
push esi
push ecx
dec edi
bound ebp, qword [edx + 0x65]
arpl word [eax + eax*2 + 0x40], si
push eax
inc edx
inc esp
inc eax
pop edx
add byte [esi - 0x2d], ah
call 0x24cd421c
add eax, 0x24448966
add al, 0x86
in eax, 0xeb
jge 0x78baeb
shr ax, cl
xchg word [esp + 5], dx
push esp
and al, 5
mov word [esp + 4], ax
xchg ch, ah
jmp 0x78bb3d
inc ebp
hlt
je 0x78bb2b
dec edi
bound ebp, qword [edx + 0x65]
arpl word [eax + eax*2 + 0x51], si
push ecx
push ebx
imul esp, dword [edi + 0x6e], 0x614d6c61
dec ebp
popal
jo 0x78bb4c
jb 0x78bb1f
inc eax
push ebp
inc edx
inc ebp
push eax
inc edx
push ebp
push ecx
dec ebp
je 0x78bb4c
dec edi
bound ebp, qword [edx + 0x65]
arpl word [eax + eax*2 + 0x40], si
inc eax
inc eax
pop eax
pop edx
add byte [edi], bh
ja 0x78bb62
insb byte es:[edi], dx
insb byte es:[edi], dx
inc edi
jb 0x78bb6d
ja 0x78bb40
push ecx
dec eax
popal
jae 0x78bb6d
inc esp
popal
je 0x78bb6a
inc eax
inc eax
push ecx
inc ecx
inc ebp
pop edi
dec esi
pop eax
pop edx
add byte [ecx + 0x74713ff8], bl
pop edi
insd dword es:[edi], dx
je 0x78bb7e
arpl word [ecx + 0x73], sp
je 0x78bb62
jae 0x78bb95
inc eax
push ecx
push ebx
imul esp, dword [edi + 0x6e], 0x614d6c61
jo 0x78bb9d
jb 0x78bb70
inc eax
push ebp
inc ecx
inc ebp
push eax
inc ecx
pop eax
push eax
inc edx
inc esp
inc eax
pop edx
add byte [esi - 0x785df01d], al
je 0x78bb68
xchg bl, ah
cpuid
xchg dword [esp + 2], esi
mov byte [0x2247487], al
add cl, byte [edi]
enter 0x48f, 0x24
bswap eax
pop dword [esp]
jmp 0x78bbd3
add byte [eax], al
add bl, bl
xor ch, byte [0x65723f3c]
imul esi, dword [bp + di + 0x74], 0x6f4e7265
jb 0x78bbcd
popal
insb byte es:[edi], dx
imul edi, dword [edx + 0x65], reloc.SHELL32.dll_ShellExecuteW
inc eax
jo 0x78bbcf
inc eax
push ecx
dec ebp
je 0x78bbd1
push esp
jns 0x78bbe3
inc eax
inc eax
push ebx
inc ecx
dec eax
inc ecx
inc edx
push esi
push ecx
inc edx
jns 0x78bbf4
inc ecx
jb 0x78bbf6
popal
jns 0x78bbc7
inc eax
push eax
inc ecx
pop eax
push eax
inc ecx
pop eax
inc eax
pop edx
push eax
inc ecx
push eax
inc ecx
pop eax
xor dword [eax + 0x42], edx
pop eax
inc eax
pop edx
dec eax
push esi
aas
and al, 0x51
inc esi
insb byte es:[edi], dx
popal
jae 0x78bbe8
push edi
xor al, 0x54
jns 0x78bc1d
inc esi
insb byte es:[edi], dx
popal
inc eax
push ecx
dec ebp
je 0x78bc19
push esp
jns 0x78bc2b
inc eax
inc eax
inc eax
inc eax
push eax
inc edx
push ebp
push ecx
dec ebp
je 0x78bc29
popal
dec edi
bound ebp, qword [edx + 0x65]
arpl word [eax + eax*2 + 0x40], si
je 0x78bc0f
inc eax
inc eax
pop edx
add byte [edx + 0x66012454], cl
mov eax, ebx
mov dl, byte [esp + 1]
mov ax, bx
mov di, word [esp + 2]
pop ebx
cpuid
jmp 0x78bce6
inc dword [eax]
add byte [eax], al
setbe byte [edi]
xchg esi, eax
aas
aas
xor byte [ecx + 0x53], dl
imul esp, dword [edi + 0x6e], 0x614d6c61
popal
jo 0x78bc67
jo 0x78bc5d
jb 0x78bc3a
jb 0x78bc3a
inc eax
push ecx
inc ecx
inc ebp
inc eax
push eax
inc ecx
push esi
push ecx
dec edi
bound ebp, qword [edx + 0x65]
arpl word [eax + eax*2 + 0x40], si
inc eax
pop edx
add byte [ecx], al
sar byte [edi], 0x71
je 0x78bc73
insd dword es:[edi], dx
je 0x78bc79
arpl word [ecx + 0x6c], sp
popal
insb byte es:[edi], dx
insb byte es:[edi], dx
inc eax
push ecx
push ebx
imul esp, dword [edi + 0x6e], 0x614d6c61
jo 0x78bc98
jb 0x78bc6b
jb 0x78bc6b
inc eax
push ebp
inc ecx
inc ebp
dec eax
push edi
xor al, 0x43
popal
insb byte es:[edi], dx
insb byte es:[edi], dx
inc eax
push ecx
dec ebp
je 0x78bc9d
je 0x78bc9d
dec edi
bound ebp, qword [edx + 0x65]
arpl word [eax + eax*2 + 0x40], si
dec eax
push eax
inc ecx
push eax
inc ecx
pop eax
inc eax
pop edx
add byte [edi], bh
jae 0x78bcb9
jp 0x78bcb7
inc eax
push ecx
dec esp
imul esi, dword [ebx + 0x74], 0x61746144
inc eax
inc eax
push ecx
inc edx
inc ebp
dec eax
pop eax
pop edx
add byte [edi], bh
jae 0x78bccd
je 0x78bcb7
je 0x78bcb7
popal
jo 0x78bcdd
imul ebp, dword [esi + 0x67], reloc.SHELL32.dll_ShellExecuteW
outsb dx, byte [si]
popal
insb byte es:[edi], dx
dec ebp
imul esp, dword [edi + 0x6e], reloc.SHELL32.dll_ShellExecuteW
popal
jo 0x78bcec
jb 0x78bcbf
inc eax
push ecx
inc ecx
inc ebp
pop eax
push eax
inc ecx
push esi
push ecx
dec edi
bound ebp, qword [edx + 0x65]
arpl word [eax + eax*2 + 0x40], si
inc ecx
inc edx
push esi
push ecx
push ebx
je 0x78bd09
imul ebp, dword [esi + 0x67], reloc.SHELL32.dll_ShellExecuteW
outsb dx, byte [esi]
inc eax
inc eax
inc eax
pop edx
add byte [edx + 0x6c], al
jne 0x78bd08
je 0x78bd14
outsd dx, dword [esi]
je 0x78bd10
inc esi
imul ebp, dword [esi + 0x64], 0x7478654e
push edx
popal
imul ebp, dword fs:[edi], reloc.SHELL32.dll_ShellExecuteW
aas
push ecx
push ecx
inc esp
bound esi, qword gs:[ebp + 0x67]
inc eax
inc eax
push ecx
inc ecx
inc ebp
inc ecx
inc ecx
push esi
xor byte [eax + 0x50], al
inc ecx
inc ecx
inc ecx
push esi
push ecx
push esp
js 0x78bd48
push ebx
je 0x78bd49
popal
insd dword es:[edi], dx
inc eax
inc eax
inc ecx
inc ecx
push esi
xor dword [eax + 0x40], eax
pop edx
inc eax
pop edx
add byte [eax + ebx*2 + 0xffd8766], dh
mov ah, 0x58
xchg bp, di
setno bl
bsf ax, di
jmp 0x78bd22
xchg ecx, eax
ret
dec eax
popal
jae 0x78bd74
inc esp
popal
je 0x78bd71
inc eax
inc eax
push ecx
inc ecx
inc ebp
push eax
inc ecx
push ebp
dec esi
outsd dx, dword [esi]
inc eax
xor dword [eax + 0x58], eax
pop edx
add byte [esi - 0x43], ah
jnp 0x78bd71
mov bp, 0x4b7b
stc
lea edi, reloc.SHELL32.dll_ShellExecuteW
rdtsc
lea ebx, [eax - 6]
jmp 0x78bdb2
inc ebp
aas
inc ecx
push edi
xor al, 0x54
jns 0x78bdc0
inc eax
xor dword [eax + 0x58], eax
pop edx
add byte [eax - 0x3302bdd5], cl
aas
push 0x68537361
jb 0x78bdd9
outsb dx, byte [esi]
imul eax, dword [eax + 0x51], 0x48
popal
jae 0x78bdd4
inc esp
popal
je 0x78bdd1
inc eax
inc eax
push ecx
inc ecx
inc ebp
pop eax
pop eax
pop edx
add byte [edi], bh
je 0x78bdeb
inc edx
outsd dx, dword [esi]
outsd dx, dword [esi]
insb byte es:[edi], dx
inc eax
push ecx
push esi
popal
jb 0x78bdef
popal
outsb dx, byte [esi]
je 0x78bdca
inc eax
push ecx
inc edx
inc ebp
pop edi
dec esi
pop eax
pop edx
add byte [edi], bh
jb 0x78bdfc
dec esi
outsd dx, dword [esi]
inc eax
push ecx
dec eax
popal
jae 0x78be0a
mov bl, cl
dec eax
stc
not ebp
xchg cl, ah
mov ebp, dword [esp]
jmp 0x78be3b
jecxz 0x78be35
push ss
in eax, 1
cmpsb byte [esi], byte es:[edi]
rcl dword [eax + 0x3f]
je 0x78be2e
je 0x78be2e
arpl word [eax + 0x5f], bp
push 0x65706c65
insb byte es:[edi], dx
jo 0x78be3a
jb 0x78be17
jb 0x78be17
push ecx
dec eax
popal
jae 0x78be44
inc esp
popal
je 0x78be41
inc eax
inc eax
push ecx
inc ecx
inc ebp
push eax
inc ecx
push ebp
xor dword [eax + 0x50], eax
inc ecx
pop eax
push eax
inc ecx
push ebp
dec esi
outsd dx, dword [esi]
inc eax
xor dword [eax + 0x50], eax
inc ecx
pop eax
inc eax
pop edx
push eax
inc ecx
pop eax
xor byte [eax + 0x5a], al
dec eax
dec eax
inc eax
pop edx
add dl, al
push edi
invalid
xchg dword [edi], edi
popal
insb byte es:[edi], dx
insb byte es:[edi], dx
outsd dx, dword [esi]
arpl word [ecx + 0x74], sp
dec esi
outsd dx, dword [esi]
inc eax
push ecx
dec eax
popal
jae 0x78be93
inc esp
popal
je 0x78be90
popal
inc eax
inc eax
push ecx
inc ecx
inc ebp
push eax
inc ecx
pop eax
dec eax
inc eax
pop edx
add ch, dh
cmc
inc ecx
mov ah, byte [esp]
rdtsc
bswap edx
xor dword [edi], ecx
retf 0xbe66
mov si, 0x41f3
jmp 0x78bf20
je 0x78bef7
jb 0x78bed4
inc eax
push ecx
dec edi
bound ebp, qword [edx + 0x65]
arpl word [eax + eax*2 + 0x40], si
push ecx
inc ecx
inc ebp
pop eax
push eax
inc ecx
push esi
xor dword [eax + 0x40], eax
pop edx
add byte [edi], bh
jae 0x78bf14
popal
jb 0x78bf14
pop edi
outsb dx, byte [esi]
jne 0x78bf20
insb byte es:[edi], dx
inc eax
push ecx
dec eax
popal
jae 0x78bf23
je 0x78bf3f
loopne 0x78bf38
jb 0x78bf60
push ecx
inc ecx
inc ebp
pop eax
push eax
inc ecx
push esi
xor dword [eax + 0x40], eax
pop edx
add byte [esi - 0x75], ah
fisttp qword [ebx - 0x4a2e0907]
bound eax, qword [edi - 0x14524b36]
push ebp
cmpsd dword ss:[esi], dword es:[edi]
aaa
push edx
mov eax, dword [reloc.SHELL32.dll_ShellExecuteW]
mov bx, bp
mov edi, ecx
not cl
mov ch, 0x62
xchg edx, ecx
mov ah, 0xad
jmp 0x78bf84
je 0x78bf7a
push ecx
dec esp
imul esi, dword [ebx + 0x74], 0x61746144
popal
inc eax
inc eax
push ecx
inc edx
inc ebp
push eax
inc ecx
push eax
inc ecx
pop eax
dec eax
inc eax
pop edx
add byte [ebx + 0x3fcca535], ah
mov fs, word [edi + edx*8 + 0x656e3f3e]
js 0x78bfd3
dec esi
outsd dx, dword [esi]
inc eax
push ecx
dec eax
popal
jae 0x78bfd1
inc eax
push eax
inc ecx
push ebp
xor dh, byte [ecx]
inc eax
inc eax
pop edx
add byte [esi - 0x47], ah
and byte [ebp - 0x76], 4
and al, 0xbe
ficomp word [edi + 0x68]
loope 0x78bf42
mov cx, 0x6580
mov al, byte [esp]
mov esi, 0xe1685fde
mov cl, 0x77
bswap edx
jmp 0x78bfba
ja 0x78bfa2
setne bl
lea ebx, [ecx - 0xf5]
cpuid
cmc
call 0x78bff6
popfd
in al, dx
inc esi
jno 0x78c010
imul ebp, dword [esi + 0x73], reloc.SHELL32.dll_ShellExecuteW
inc eax
push ecx
inc ebx
outsd dx, dword [esi]
jb 0x78c044
jae 0x78c049
inc ecx
jo 0x78c052
insb byte es:[edi], dx
imul esp, dword [ebx + 0x61], 0x6e6f6974
inc eax
inc eax
push ebx
inc ecx
push eax
inc ecx
push esi
xor dword [eax + 0x58], eax
pop edx
add byte [eax - 4], bl
jmp 0x78c069
jae 0x78c086
inc esp
popal
je 0x78c077
inc eax
push ecx
push esi
popal
jb 0x78c085
popal
outsb dx, byte [esi]
je 0x78c060
inc eax
push ecx
inc edx
inc ebp
push eax
inc edx
pop eax
pop eax
pop edx
add byte [edi], bh
insb byte es:[edi], dx
outsb dx, byte gs:[esi]
je 0x78c099
inc eax
push ecx
push ebx
je 0x78c0a8
imul ebp, dword [esi + 0x67], reloc.SHELL32.dll_ShellExecuteW
inc ebp
dec eax
pop eax
pop edx
add byte [eax], bh
aas
arpl word [edi + 0x6e], bp
je 0x78c0aa
imul ebp, dword [esi + 0x73], reloc.SHELL32.dll_ShellExecuteW
arpl word [eax + eax*2 + 0x40], si
inc eax
inc eax
push ecx
inc edx
inc ebp
pop edi
dec esi
inc ecx
inc edx
push esi
push ecx
push eax
outsd dx, dword [esi]
imul ebp, dword [esi + 0x74], 0x4e5f4040
outsb dx, byte [esi]
je 0x78c0a3
inc eax
pop edi
dec esi
inc eax
pop edx
add byte [edx + 0x24148bc7], cl
mov al, bh
mov edx, dword [esp]
cld
neg dx
sub esp, 5
shr edx, cl
jmp 0x78c0a8
jb 0x78c0fb
je 0x78c101
jns 0x78c0c9
inc eax
push ecx
dec edi
bound ebp, qword [edx + 0x65]
arpl word [eax + eax*2 + 0x40], si
push ecx
inc edx
inc ebp
aas
inc ecx
push esi
push ecx
push esi
popal
jb 0x78c106
popal
outsb dx, byte [esi]
je 0x78c0e1
inc eax
push eax
inc edx
inc esp
inc eax
pop edx
add byte [esi - 0x75], ah
mov ax, word [esp + 3]
inc esp
and al, 3
lea ebx, [ebx + esi]
bsf cx, cx
jmp 0x78c13b
push esp
imul ebp, dword [ebp + 0x65], 0x51404072
inc edx
inc ebp
pop edi
dec esi
pop eax
pop edx
add byte [esi - 5], ch
imul ecx, dword [esi], reloc.SHELL32.dll_ShellExecuteW
push edx
inc esp
fdiv qword [edx + 0x15]
in al, 0x53
test eax, 0x496f743f
adc eax, 0x3fa953e4
je 0x78c157
dec ecx
outsb dx, byte [esi]
je 0x78c12c
push ecx
push esi
popal
jb 0x78c15a
popal
outsb dx, byte [esi]
je 0x78c135
inc eax
push ecx
inc edx
inc ebp
dec eax
push eax
inc ecx
pop edi
dec esi
inc eax
pop edx
add byte [edi], bh
aas
imul esi, dword fs:[ebx + 0x70], reloc.SHELL32.dll_ShellExecuteW
outsd dx, dword [esi]
jae 0x78c16e
inc eax
push ecx
dec esp
imul esi, dword [ebx + 0x74], 0x61746144
inc eax
inc eax
push ecx
inc ecx
inc ebp
pop eax
pop eax
pop edx
add al, cl
aas
aas
xor byte [ecx + 0x54], dl
imul ebp, dword [ebp + 0x65], 0x51404072
inc ecx
inc ebp
inc eax
push eax
inc ecx
push esi
push ecx
dec edi
bound ebp, qword [edx + 0x65]
arpl word [eax + eax*2 + 0x40], si
je 0x78c177
inc eax
inc eax
pop edx
add byte [ebp + 0x2398b42d], cl
setge bl
lea ebp, reloc.SHELL32.dll_ShellExecuteW
setge bl
pop si
mov byte [esp + 1], cl
jmp 0x78c1cc
arpl word [ebp + 0x65], cx
je 0x78c1bd
dec edi
bound ebp, qword [edx + 0x65]
arpl word [eax + eax*2 + 0x51], si
push esp
imul ebp, dword [ebp + 0x65], 0x32404072
push ebp
push ecx
dec ebp
je 0x78c1d3
dec edi
bound ebp, qword [edx + 0x65]
arpl word [eax + eax*2 + 0x40], si
je 0x78c1b9
inc eax
inc edx
add byte [edi], bh
arpl word [edi + 0x6e], bp
jae 0x78c1f6
inc esp
popal
je 0x78c1e7
inc eax
push ecx
push ebx
je 0x78c1fd
imul ebp, dword [esi + 0x67], reloc.SHELL32.dll_ShellExecuteW
inc ebp
push eax
inc edx
push esi
push ecx
inc ebx
push 0x40407261
pop eax
pop edx
add byte [0x69743f0c], bh
insd dword es:[edi], dx
outsd dx, dword gs:[esi]
jne 0x78c21e
inc eax
push ecx
push esp
imul ebp, dword [ebp + 0x65], 0x51404072
inc ecx
inc ebp
pop eax
push ebp
push ecx
push eax
jb 0x78c225
jbe 0x78c21f
popal
je 0x78c225
push ebx
imul esp, dword [edi + 0x6e], 0x31406c61
inc eax
inc eax
pop edx
add byte [edi], cl
xor dword [esi - 0x42], esp
test byte [esi], al
rdtsc
mov si, 0x684
pop si
pop esi
xchg byte [esp], dl
mov byte [esp], cl
jmp 0x78c238
jne 0x78c255
je 0x78c23f
jns 0x78c25d
inc esi
outsd dx, dword [esi]
jb 0x78c232
push ecx
push esp
imul ebp, dword [ebp + 0x65], 0x43404072
jb 0x78c239
inc eax
inc ebx
inc ecx
aas
inc ecx
push edi
xor al, 0x54
imul ebp, dword [ebp + 0x65], 0x70795472
inc eax
push ecx
je 0x78c24d
inc eax
dec eax
inc eax
pop edx
add byte [0x796ec754], ah
pop eax
aas
jae 0x78c280
je 0x78c270
imul ebp, dword [esi + 0x67], reloc.SHELL32.dll_ShellExecuteW
outsd dx, dword [esi]
outsb dx, byte [esi]
insb byte es:[di], dx
push ebx
push 0x5140746f
je 0x78c267
push ecx
push esp
imul ebp, dword [ebp + 0x65], 0x51404072
inc ecx
inc ebp
pop eax
pop edi
dec esi
inc eax
pop edx
add byte [esi - 0x75], ah
cld
mov di, sp
mov edi, esp
bswap eax
push esp
xchg si, cx
xchg esi, ecx
sub esp, 0xa
mov dword [esp + 4], edx
jmp 0x78c26a
pushfd
aas
jb 0x78c2b6
popal
insb byte es:[edi], dx
insb byte es:[edi], dx
outsd dx, dword [esi]
arpl word [eax + 0x51], ax
dec esp
imul esi, dword [ebx + 0x74], 0x61746144
popal
je 0x78c2c1
inc eax
inc eax
push ecx
inc ecx
inc ebp
pop eax
dec eax
inc eax
pop edx
add byte [edx + 0x48bf8de9], cl
test byte [eax], 0
mov ch, cl
lea edi, reloc.SHELL32.dll_ShellExecuteW
add byte [eax], al
mov ebx, esp
mov ah, byte [esp + 6]
jmp 0x78c2ac
aas
je 0x78c2e6
arpl word [eax + 0x5f], bp
jb 0x78c2fa
ja 0x78c2cd
push ecx
dec esp
imul esi, dword [ebx + 0x74], 0x61746144
inc eax
inc eax
push ecx
inc ecx
inc ebp
push eax
inc ecx
push ebp
inc esp
popal
je 0x78c303
inc eax
xor dword [eax + 0x50], eax
inc ecx
dec eax
dec eax
inc eax
pop edx
add byte [edx + 0x7c8766e8], dh
and al, 9
mov dl, 0xe8
xchg word [esp + 9], di
mov bp, word [esp + 0xe]
and al, 0xe
jmp 0x78c2fa
pop ss
aas
imul esi, dword [ebx + 0x46], 0x40656c69
push ecx
inc esi
imul ebp, dword [ebp + 0x49], 0x406f666e
insb byte es:[edi], dx
dec ecx
outsb dx, byte [esi]
outsw dx, word [esi]
inc eax
inc eax
push ecx
inc edx
inc ebp
pop edi
dec esi
pop eax
pop edx
add byte [edi], bh
bound esp, qword [ebp + 0x67]
imul ebp, dword [esi + 0x40], 0x73694c51
je 0x78c32e
imul esi, dword [ebx + 0x74], reloc.SHELL32.dll_ShellExecuteW
popal
je 0x78c34e
inc eax
inc eax
push ecx
inc edx
inc ebp
push eax
inc ecx
push eax
inc ecx
pop eax
pop eax
pop edx
add byte [esi - 0x45], ah
xchg esi, eax
leave
mov bx, 0xc996
neg edx
lea edi, [ebx*4]
add byte [eax], al
add byte [eax], al
jmp 0x78c45a
push esp
imul ebp, dword [ebp + 0x65], 0x70795472
inc eax
push ecx
je 0x78c37b
inc eax
push eax
inc edx
push esi
push ecx
dec edi
bound ebp, qword [edx + 0x65]
arpl word [eax + eax*2 + 0x40], si
push eax
inc ecx
push esi
push ecx
push ebx
insb byte es:[edi], dx
outsd dx, dword [esi]
je 0x78c3a0
bound ebp, qword [edx + 0x65]
arpl word [edx + eax*2 + 0x61], si
jae 0x78c3bf
inc eax
push ecx
je 0x78c3ae
jb 0x78c3c9
jbe 0x78c3c3
je 0x78c3c9
inc eax
inc eax
inc eax
pop edx
add byte [edi], bh
outsb dx, byte gs:[esi]
inc eax
push ecx
dec esp
imul esi, dword [ebx + 0x74], 0x61746144
inc eax
inc eax
push ecx
inc edx
inc ebp
push eax
inc ecx
push eax
inc ecx
pop eax
pop eax
pop edx
add byte [edi], bh
push ecx
push ebx
je 0x78c3fb
imul ebp, dword [esi + 0x67], reloc.SHELL32.dll_ShellExecuteW
pop edi
push 0x6f
imul ebp, dword [esi + 0x40], 0x72507451
imul esi, dword [esi + 0x61], 0x40406574
inc eax
pop ecx
inc ecx
aas
inc ecx
push esi
push ecx
push ebx
je 0x78c41c
imul ebp, dword [esi + 0x67], reloc.SHELL32.dll_ShellExecuteW
inc eax
push eax
inc edx
push esi
push ecx
push ebx
je 0x78c428
imul ebp, dword [esi + 0x67], reloc.SHELL32.dll_ShellExecuteW
inc eax
inc eax
push eax
inc edx
push esi
push ecx
inc ebx
push 0x40407261
dec eax
inc eax
pop edx
add byte [edi], bh
je 0x78c433
arpl word [eax + 0x40], bp
push ecx
dec esp
imul esi, dword [ebx + 0x74], 0x61746144
inc eax
inc eax
push ecx
inc ecx
inc ebp
push eax
inc ecx
push ebp
inc esp
popal
je 0x78c44b
inc eax
xor dword [eax + 0x48], eax
inc eax
pop edx
add byte [esi + 0x20d1b620], bh
cmpsd dword [esi], dword es:[edi]
fstp qword [ebp - 0x33]
xchg esp, eax
mov cl, 0x2c
aas
push es
aas
aas
xor byte [ecx + 0x46], dl
imul ebp, dword [ebp + 0x49], 0x406f666e
inc eax
push ecx
inc ecx
inc ebp
inc eax
inc ecx
inc edx
push esi
push ecx
push ebx
je 0x78c48b
imul ebp, dword [esi + 0x67], reloc.SHELL32.dll_ShellExecuteW
inc eax
inc eax
inc eax
pop edx
add byte [edi], bh
aas
cmp byte [eax + 0x59], al
inc ecx
pop edi
dec esi
inc ecx
inc edx
push esi
push ecx
push ebx
je 0x78c4a2
imul ebp, dword [esi + 0x67], reloc.SHELL32.dll_ShellExecuteW
pop edx
inc eax
inc eax
xor byte [eax + 0x5a], al
add byte [ecx + 0x613fb3b0], dh
jo 0x78c4b0
outsb dx, byte gs:[esi]
inc eax
push ecx
dec esp
imul esi, dword [ebx + 0x74], 0x61746144
je 0x78c4ae
inc eax
inc eax
push ecx
inc ecx
inc ebp
push eax
inc ecx
push eax
inc ecx
pop eax
pop eax
pop edx
add byte [esi - 0x74fcdba4], al
std
xchg byte [esp + 3], bl
mov edi, ebp
lea edx, [edx + 0x5f]
pop dword [esp + 4]
mov ecx, ebx
push esp
jmp 0x78c496
inc ecx
push esi
xor dword [eax + 0x50], eax
inc edx
inc esp
dec eax
inc eax
pop edx
add byte [edi + 0x66], dl
pop eax
push edi
pop ax
cpuid
not edi
mov bl, ah
add esp, 7
jmp 0x78c57f
xor byte [ecx + 0x56], dl
push esi
popal
jb 0x78c51d
popal
outsb dx, byte [esi]
je 0x78c4f8
inc eax
push ecx
inc ecx
inc ebp
inc eax
inc ecx
inc edx
push esi
push ecx
push ebx
je 0x78c536
imul ebp, dword [esi + 0x67], reloc.SHELL32.dll_ShellExecuteW
add byte [ebp + ebp - 0x2cc83b43], ch
mov esi, 0x46cbac3e
cmpsd dword [esi], dword es:[edi]
invalid
popal
je 0x78c55c
inc eax
xor dword [eax + 0x42], eax
add byte [edi], bh
aas
xor byte [ecx + 0x53], dl
je 0x78c579
imul ebp, dword [esi + 0x67], reloc.SHELL32.dll_ShellExecuteW
inc ebp
inc eax
inc ecx
inc edx
push esi
xor byte [eax + 0x40], al
pop edx
add byte [edx + 0x6c70733f], bh
imul esi, dword [eax + eax*2 + 0x51], reloc.SHELL32.dll_ShellExecuteW
outsb dx, byte [esi]
inc eax
inc eax
push ecx
inc edx
inc ebp
aas
inc ecx
push esi
push ecx
push ebx
je 0x78c5a5
imul ebp, dword [esi + 0x67], reloc.SHELL32.dll_ShellExecuteW
inc eax
inc eax
inc ecx
inc edx
dec esp
imul esi, dword [ebx + 0x74], 0x42414040
push esi
xor dword [eax + 0x56], eax
aas
and al, 0x51
inc esi
insb byte es:[edi], dx
popal
jae 0x78c58b
push edi
xor al, 0x53
jo 0x78c5bc
imul esi, dword [edx + eax*2 + 0x65], reloc.SHELL32.dll_ShellExecuteW
outsd dx, dword [esi]
jb 0x78c5a1
insb byte es:[edi], dx
popal
jae 0x78c5a0
push ecx
je 0x78c5a3
je 0x78c5bb
inc eax
inc eax
pop edx
add byte [edi], cl
iretd
bswap edi
mov edx, dword [esp + 7]
mov dh, 0x5c
pop edi
xchg word [esp + 3], ax
and al, 3
jmp 0x78c60c
outsb dx, byte [esi]
je 0x78c616
inc eax
push ecx
inc ebx
outsd dx, dword [esi]
jb 0x78c60e
inc ecx
jo 0x78c61c
insb byte es:[edi], dx
imul esp, dword [ebx + 0x61], 0x6e6f6974
inc eax
inc eax
push ebx
inc ecx
pop eax
push esi
aas
and al, 0x51
push ecx
inc esi
insb byte es:[edi], dx
popal
jae 0x78c603
push edi
xor al, 0x50
jb 0x78c637
arpl word [ebp + 0x73], sp
jae 0x78c612
pop edi
dec esi
dec eax
push eax
inc ecx
pop eax
inc eax
pop edx
add byte [eax - 0x42fcdb84], cl
in al, 0xaa
xchg edi, eax
cdq
mov byte [esp + 3], bh
and al, 3
mov ebp, 0x9997aae4
mov cx, si
mov ecx, esi
lea esp, [esp + 2]
jmp 0x78c6b6
xor byte [eax + 0x40], al
pop edx
add byte [edi], bh
aas
pop ecx
push ecx
push ebx
je 0x78c6b5
xchg al, ah
mov ch, ah
push ebx
add esp, 1
mov byte [esp + 2], al
setp ch
jmp 0x78c71f
btr edx, edi
btc bx, ax
rdtsc
mov word [esp], dx
push edx
pop edi
jmp 0x78c988
mov bh, ch
mov word [esp + 4], sp
mov dword [esp], eax
shl ecx, 0x1c
jmp 0x78ca86
bsr bp, di
push eax
rdtsc
add esp, 2
pop ebp
mov dh, bh
jmp 0x78cac8
bswap ebx
ror dh, cl
shr cx, 5
mov eax, dword [esp + 3]
mov dl, byte [esp + 3]
jmp 0x78cc2e
mov al, 0xf2
pop bx
not ah
bts bx, sp
bsr si, di
cld
jmp 0x78cd9c
lea esp, [esp + 1]
mov word [esp], bp
add esp, 1
lea edi, [ecx + esi]
push esi
jmp 0x78ce9e
lea ebp, [edx*4]
xchg dword [esp], eax
not cx
rdtsc
jmp 0x78cfba
mov di, word [esp + 3]
mov ecx, dword [esp + 1]
xchg dword [esp], eax
not di
jmp 0x78d096
mov al, byte [esp + 1]
mov ebp, 0xbb1d2d84
mov word [esp + 2], bp
jmp 0x78d1ac
push dword [esp]
pushfd
xchg dword [esp + 8], edi
mov edi, 0x7062f072
jmp 0x78d2b2
xchg byte [esp + 4], bl
dec bp
mov word [esp + 2], di
cpuid
call int.0078d350
test byte [edi], dh
push ds
imul edi, dword [edi], reloc.SHELL32.dll_ShellExecuteW
jne 0x78d341
jb 0x78d336
jne 0x78d3b5
call 0x78ed24
push ebx
popal
outsb dx, byte gs:[esi]
imul ebp, dword [bp + 0x65], reloc.SHELL32.dll_ShellExecuteW
insb byte es:[edi], dx
outsb dx, byte gs:[esi]
and byte [esi + 0x32], dh
xor al, 0x2e
xor byte [esi], ch
xor byte [eax], al
pushfd
cld
cld
pushal
jmp 0x788cde