Function at 0x5bf662
Capabilities:
Check os version
Encrypt data using aes mixcolumns step

Disassembly:
cmpsb byte [esi], byte es:[edi]
movsd dword es:[edi], dword [esi]
mov dl, dl
lea ecx, [ecx]
mov eax, dword [esi + 4]
mov eax, dword [ebp + eax]
mov ebx, dword [esi + 8]
jmp 0x5d9ff1
push esi
jmp 0x5ae575
push edx
xchg edi, ebp
xchg ebp, edi
call fcn.005cbeff
jno 0x5c4155
jo 0x5ae58c
sbb eax, 0xf83fae4
add bl, 0x5b
add dword [eax], eax
jo 0x5c4155
xor dl, 0x8a
push esp
add eax, 0x8aed89f0
invalid
pop edi
shl bx, 0x20
jno 0x5c392d
jo 0x5ae8e5
sbb al, 0xde
jo 0x5c392d
add eax, 0x24648d4c
add al, 0x5d
ret
mov di, di
push 0x5ddd39
ret
call fcn.005d477f
xor eax, 0x8768d61
mov dh, dh
push esi
mov esi, dword [esi - 4]
mov dx, dx
js 0x5c1925
jns 0x5aed3f
add dword [ebp + 0x2be0890f], esp
add dword [eax], eax
jns 0x5c1925
xor al, 0x8f
test ax, 0xf0b3
xor dl, cl
jb 0x5bf793
clc
add dl, 0x80
mov byte [ebp + esi - 8], dl
inc esi
cmp esi, 8
jl 0x5c8c14
jge 0x5aed6e
nop
cpuid
ret
js 0x5b122f
jns 0x5aed78
nop
mov eax, 0x24b1890f
add byte [eax], al
jns 0x5b122f
add eax, 0xfdb3132
and byte [edx + 0x39ffffef], 0xc9
xor edi, edi
jb 0x5baa94
ja 0x5cd8ba
jbe 0x5aed9c
invalid
mov byte [ebx], 0
call fcn.005b7d7f
js 0x5bedd7
shl ch, 0x20
jns 0x5af680
nop
cpuid
ret 0x890f
jns 0x5bedd7
xor al, 0x55
mov ecx, dword [ebp - 8]
xor eax, eax
jb 0x5de454
cmp word [ebp - 0xa], 0xfafa
setne al
dec eax
and eax, ecx
jb 0x5d4055
mov esp, ebp
pop ebp
push 0x5ca424
ret
mov eax, dword [ebp - 8]
shr esi, 0x40
call fcn.005d45a6
fisubr dword [ebx - 0x7ef006a2]
mov dh, 0xda
add al, byte [eax]
jo 0x5b0a9f
into
outsb dx, byte [esi]
jo 0x5de551
and eax, 0xe5895500
mov edx, edx
push 0x5c338a
ret
jmp 0x5baafa
shr si, 0x40
mov cl, byte [ebp + 0xc]
mov dx, word [ebp + 0x10]
push eax
jmp 0x5b18d3
push esi
mov di, di
mov bx, bx
mov byte [esi + 0xba], cl
mov esi, esi
mov byte [esi + 0xbb], 0
mov word [esi + 0xbc], dx
shr dh, 0x40
call fcn.005eb4dd
mov al, byte [ebp + 0xb]
jmp 0x5b18fd
push esi
shl cx, 0x20
mov byte [esi + 0xba], bl
mov al, al
mov ah, ah
mov byte [esi + 0xbb], al
mov word [esi + 0xbc], di
call 0x5ba247
jne 0x5d6288
shl si, 0x20
shl ah, 0x20
mov cl, cl
je 0x5b1934
nop
cpuid
ret 0x840f
je 0x5d6288
xchg bh, al
xchg al, bh
mov ebx, dword [esi + 4]
lea esi, [esi + 8]
neg byte [ebp + ebx]
mov edx, edx
jmp dword [esi]
call fcn.005b2c73
invalid
cmp cx, 0x12c
je 0x5d96e0
jne 0x5b1b95
pop eax
cpuid
ret
test bx, bx
jb 0x5aefb6
je 0x5c3ea1
jne 0x5b1ba8
loope 0x5b1b2c
mov ax, ax
mov edi, dword [edi]
call fcn.005df5e8
xor al, 0x71
push 0x5bfed1
ret
xchg edx, eax
movsb byte es:[edi], byte [esi]
jbe 0x5aea67
shr di, 0x40
mov ax, word [ebp + eax]
mov ebp, ebp
lea esi, [esi + 0xc]
stc
add word [ebx + edx], ax
jmp dword [esi]
push cs
dec eax
mov ax, ax
push 0x5d5f33
ret
mov ah, 0x81
call 0x5be646
fld dword [edx + 0x68]
pop ds
jg 0x5b21ac
add bl, al
and eax, 0x5d481b58
add byte [eax], al
inc ecx
add byte [eax + 0x40], al
add byte [ecx], al
add byte [eax], al
add al, 0
add byte [eax], al
add byte [ecx], al
add byte [eax], al
add byte [ecx], al
add byte [eax], al
add byte [eax], al
out dx, eax
add al, 0x5c
add byte [ebx + 0x5d005df2], ah
mov al, byte [0x48005b]
add byte [eax], al
mov al, byte [0x15005bf5]
add byte [eax], al
add byte [eax], bh
add byte [eax], al
add byte [ebx + esi*8 + 0x5b], al
add ch, dl
sahf
pop esp
add byte [ebx], bl
dec eax
pop ebp
add byte [eax], al
inc ecx
add byte [eax], al
cmp byte [eax], al
add byte [eax], al
add byte [ecx], al
add byte [eax], al
add byte [ecx], ah
xor byte [eax + eax], 0
add byte [eax], al
and dword [eax], eax
add byte [eax + eax], dh
add byte [eax], al
out dx, eax
add al, 0x5c
add byte [ebp - 0x60], bl
pop ebx
add byte [eax + eax], al
add byte [ebx + 0x6b91005b], dh
cmpsb byte [si], byte es:[di]
pop ebx
add byte [eax], ah
add byte [eax], al
add byte [eax + eax], cl
add byte [ecx - 0x27], ch
pop esp
add byte [edx], al
add byte [eax], al
add byte [eax], dh
add byte [eax], al
add byte [esi], al
in eax, 0x5b
add byte [esi - 0x34ffa2a5], bl
mov al, byte [0x40005b]
add byte [eax], al
cmp eax, 0xa000000
sbb dword [ebp], ebx
add esp, dword [edx]
pop ebx
add byte [edi], cl
mov byte [0x52d5e1c3], al
pop ebp
add byte [eax + eax], cl
add byte [eax], al
xor byte [eax], al
add byte [eax], al
jmp 0x5b21d0
pop edi
pop esi
jmp 0x5e2321
shl ch, 0x20
mov eax, dword [esi + 4]
mov ebx, dword [esi + 8]
mov eax, dword [eax]
lea esi, [esi + 0xc]
mov cl, cl
mov dword [ebp + ebx], eax
ja 0x5c92ea
shl ecx, 0x20
jbe 0x5b3ec2
cpuid
ret
jbe 0x5c92ea
fidivr dword [esi + 0x5d5613]
invalid
pop ebp
ret
mov eax, dword [edi]
mov si, si
lea ecx, [ebp - 4]
mov dl, dl
jno 0x5da436
jo 0x5b3ffd
jge 0x5b401d
xchg ecx, eax
jo 0x5ba434
jo 0x5da436
add al, byte [eax]
xor eax, 0x24448f86
cld
push ebx
push esi
push edi
mov edi, dword [ebp + 8]
mov ebx, 0x77cb6d
mov dword [ebp - 0xc], 1
mov al, byte [edi + 0x16]
inc edi
push ss
mov dword [ebp - 8], ebx
push eax
mov dword [ebp - 4], 0x77c564
mov esi, 0x77cf38
call fcn.005bcb25
or al, al
add esp, 4
test eax, eax
jb 0x5e0a3a
je 0x5b406e
jne 0x5b4052
sbb esp, dword [esi - 0x39]
test eax, edi
invalid
mov dword [ebp - 8], 0x77cb6e
mov dword [ebp - 4], 0x77c568
mov ebx, dword [ebp - 8]
mov esi, 0x77d040
cmp dword [edi + 8], 0x6873686c
push 0x5c3f0a
ret
xchg bh, dh
xchg dh, bh
je 0x5b44a0
xchg esp, eax
bnd je 0x5d9de2
je 0x5d9de2
push 0x100
lea ecx, [ebp - 0x100]
mov eax, dword [esi]
push eax
jmp 0x5b44b5
push ecx
call fcn.005e4496
lea edx, [ebp - 0x100]
lea eax, [eax]
push 0
push edx
call fcn.005cd20f
push 0x5d0299
ret
mov eax, dword [ebp + 0x10]
js 0x5c1bfc
jns 0x5b44e1
adc al, 0x4e
call 0x15e45411
xlatb
add byte [eax], al
jns 0x5c1bfc
fisubr dword [esi + 0x68]
ja 0x5b4498
int1
in eax, dx
push 0x77c78d
jmp 0x5b44f4
push edi
jmp 0x5b44f7
push eax
call fcn.00600010
add esp, 0x14
mov dword [ebp - 0x1c], eax
test eax, eax
jb 0x5d18d7
je 0x5c33c4
jne 0x5b451b
cpuid
ret
push ebx
call fcn.005ffe30
mov ecx, dword [ebp - 4]
push ecx
call fcn.005d53fe
mov edx, dword [ebp - 0xc]
jmp 0x5b452f
push edx
call fcn.005d53fe
mov eax, dword [ebp - 0x14]
push eax
call fcn.005d53fe
mov ecx, dword [ebp - 0x1c]
mov edx, dword [esi]
push ecx
push edx
call fcn.005cdd65
add esp, 0x18
shl esi, 0x20
pop edi
pop esi
pop ebx
mov esp, ebp
push 0x5c33c0
ret
shl dl, 0x20
call fcn.005d5edc
mov dl, dl
mov esi, eax
add esp, 0x18
test si, si
jb 0x5cbd82
je 0x5cbfd6
sub eax, 0x9762870f
add al, byte [eax]
jbe 0x5b4e3b
cpuid
nop
ret
jbe 0x5de597
mov edx, dword [ebp - 0x24]
push eax
mov eax, dword [ebp - 0x10]
push edx
push eax
call fcn.005d6c54
add esp, 0xc
mov dword [ebp - 0xc], eax
shr bx, 0x40
test edi, edi
jb 0x5b1be4
je 0x5b4e9e
mov edi, edi
jne 0x5b4e74
in eax, dx
cpuid
ret
mov eax, dword [esi]
lea ecx, [edi + edi*2]
mov edx, dword [ebx + ecx*4]
lea edi, [ebx + ecx*4]
push edx
jmp 0x5b4e81
push eax
call fcn.005d111c
mov ecx, dword [esi]
push 0
push ecx
call fcn.005db81b
mov di, word [edi + 8]
jmp 0x5b4ebb
mov eax, dword [esi]
push 0
push eax
call fcn.005d111c
mov ecx, dword [esi]
shr ah, 0x40
push 0
push ecx
mov ah, ah
call fcn.005db81b
mov di, word [ebx + 8]
mov edx, dword [esi]
push edi
shr edx, 0x40
call fcn.005cc3df
invalid
push esi
ja 0x5af669
jbe 0x5b5a1c
cpuid
nop
ret
jbe 0x5af669
add eax, 0x1f896668
mov word [edi], bx
jmp dword [esi]
jbe 0x5b5a0f
mov bx, bx
mov edi, edi
xchg ebx, edi
xchg edi, ebx
call fcn.005c04e5
fldenv [eax - 0x8f6a73]
invalid
mov eax, dword [ebp + 8]
test eax, eax
jb 0x5d7c11
je 0x5c08d5
mov ebp, ebp
jne 0x5b5abc
sar byte [esi], 0xc0
out dx, eax
inc eax
shr bh, 0x40
mov dword [eax], 0
jno 0x5c08d5
jo 0x5b5ad0
enter 0xfffffffffffffcc7, 0xf
cmp bh, 0xad
add byte [eax], al
jo 0x5c08d5
fadd st(5)
lea esi, [esi + 4]
mov dx, dx
shr dl, 0x40
stc
js 0x5d0645
jns 0x5b5aec
in eax, dx
push ds
jns 0x5d0645
add dword [ebp + ebx], eax
jmp dword [esi]
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
shr dx, 0x40
mov edx, dword [esi + 4]
push edi
lea ecx, [ebp - 0x28]
push edx
mov si, si
push ecx
push eax
call fcn.005f5760
add esp, 0x10
add esi, 0
test ax, ax
jb 0x5d1764
je 0x5b6990
jne 0x5b6941
and eax, 0x558bc3cd
clc
mov edx, dword [ebp - 8]
push edx
call fcn.005d53fe
jmp 0x5b694b
push ebx
shl ebx, 0x20
call fcn.005ffe30
mov eax, dword [ebp - 4]
push eax
call fcn.005d53fe
mov ecx, dword [ebp - 0xc]
jmp 0x5b6963
push ecx
call fcn.005d53fe
mov edx, dword [ebp - 0x14]
push edx
call fcn.005d53fe
mov eax, dword [esi]
push 0xcf
push eax
call fcn.005cdd65
add esp, 0x1c
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov ebx, ebx
mov ecx, dword [ebp - 0x28]
xor eax, eax
jb 0x5b7ddf
xor edi, edi
jb 0x5b7de9
mov dword [ebp - 0x18], eax
test ecx, ecx
jb 0x5b3ec8
shl ch, 0x20
jbe 0x5becf5
ja 0x5b69be
fidivr dword [ecx]
xchg esi, eax
jno 0x5cff1f
jo 0x5b69ca
call 0x1009b2a8
or byte [edi - 0x6b], 1
add byte [eax*8 + 0x5cd969], dh
add dword [eax], eax
jo 0x5cff1f
xor al, 0xc5
imul ebx, ecx, 0x1005c
add byte [eax], al
xor byte [eax], al
add byte [eax], al
adc ebp, dword [esi + 0x7582005b]
pop ebp
add ch, bh
mov bh, 0x5c
add dl, dh
imul ebx, dword [ebx], 0xc2a20f90
std
mov bh, 0x5c
add byte [edx - 0x3fffa28b], al
in eax, dx
inc eax
je 0x5d0a51
jne 0x5b6a09
cpuid
sbb eax, 0x34870fc3
mov al, byte [0x2760001]
ja 0x5d0a43
jbe 0x5b6a13
rep movsb byte es:[edi], byte [esi]
jbe 0x5d0a43
xor eax, 0x5d481b2c
add byte [eax], al
inc eax
add byte [eax], al
xor al, 0
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [ecx], ah
cmp byte [eax], 0
add byte [eax], al
add byte [ecx], ah
add byte [eax], al
push esi
add byte [eax], al
add byte [eax + 0x5d005dc8], bl
mov al, byte [0x44005b]
add byte [eax], al
mov ah, 0xe3
pop ebx
add byte [ebp + 0x5c0c71], bl
mov cl, 0
add byte [eax], al
xor byte [eax], al
add byte [eax], al
add al, 0xe5
pop ebx
add dl, ch
imul ebx, dword [ebx], 0xffffff9c
rcr dword [ebx], cl
inc eax
add byte [eax], al
add byte [eax + eax], cl
add byte [edx], cl
sbb dword [ebp], ebx
js 0x5b6add
pop ebx
add byte [ebx - 0x1a], ah
sti
or bl, byte [ecx]
pop ebp
add dl, ch
imul ebx, dword [ebx], 0x1b
dec eax
pop ebp
add byte [eax], al
popal
add byte [eax + 0x38], al
add byte [ecx], ah
add byte [eax], al
mov esp, 0
adc byte [eax], al
add byte [eax], al
inc eax
add byte [eax], al
dec eax
add byte [eax], al
add byte [eax - 0x34ffa238], bl
mov al, byte [0x40005b]
add byte [eax], al
xor al, 0
add byte [eax], al
sbb ecx, dword [eax + 0x5d]
add byte [eax], al
inc ecx
add byte [eax + 0x30], al
add byte [ecx], al
add byte [eax], al
movsd dword es:[edi], dword [esi]
add dword [eax], eax
add byte [eax], al
add dword [eax], eax
add byte [eax], al
inc ecx
add byte [eax], al
xor al, 0
add byte [eax], al
out dx, eax
add al, 0x5c
add ah, al
jne 0x5b6b32
add byte [eax], al
add byte [eax], al
add byte [eax + eax], cl
add byte [eax], al
add byte [ebx], dl
push esi
pop ebp
add bh, bh
inc dword [eax]
add byte [eax + eax], dh
add byte [eax], al
inc esp
pop ebx
add bh, dh
in eax, dx
pop esp
add bl, ch
mov edi, fcn.0048005d
add byte [eax], al
xor al, 0
add byte [eax], al
inc esp
pop ebx
add byte [ecx], al
out dx, al
pop esp
add byte [ebp - 0x60], bl
pop ebx
add byte [eax], cl
add byte [eax], al
mov al, byte [0x54005bf5]
push ebx
add byte [eax], al
xor al, 0
add byte [eax], al
inc esp
pop ebx
add byte [0xe5005deb], ah
ljmp 0
pop ebp
add byte [eax + eax], cl
add byte [eax], dh
add byte [eax], al
add byte [ebx], bl
dec eax
pop ebp
add byte [eax], al
inc eax
add byte [eax], al
xor al, 0
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [ecx], ah
cmp byte [eax], 0
add byte [eax], al
add byte [ecx], ah
add byte [eax], al
or al, byte [eax]
add byte [eax], al
cwde
enter 0x5d, 0xffffffffffffff9f
cmp byte [eax + eax + 0x34], bl
add byte [eax], al
add byte [ebp - 0x60], bl
pop ebx
add byte [eax + eax], dh
add byte [eax], al
pop ebp
mov al, byte [0x44005b]
add byte [eax], al
invalid
pop edi
pop esi
shl bp, 0x20
mov ax, 0x1e
pop ebx
mov esp, ebp
pop ebp
mov edx, edx
ret
shr ah, 0x40
mov ebx, dword [ebp + 0x18]
ja 0x5da7a4
jbe 0x5b7043
wait
mov ecx, 0x860fba9b
pop ebx
aaa
mov edx, 0x375b860f
jbe 0x5da7a4
add al, byte [eax]
fsubr dword [ecx + ebp*2]
fstp dword [eax + eax + 2]
add byte [eax], al
add byte [eax], dh
add byte [eax], al
add byte [esi], al
in eax, 0x5b
add byte [ebx + 0x71], ah
pop ebx
add byte [edi - 0x5a], ah
pop ebx
add byte [eax], ah
add byte [eax], al
add byte [eax + eax], bh
add byte [eax], al
or bl, byte [ecx]
pop ebp
add byte [ebp + 0x70], dh
pop ebx
add byte [esi], dh
lodsb al, byte [esi]
aad 0x52
pop ebp
add byte [eax + eax], cl
add byte [eax], al
xor byte [eax], al
add byte [eax], al
jmp 0x5b7042
ret
sbb eax, 0x840fce8f
jne 0x5b7529
add byte [eax], al
fcomp dword [esi + 0x6a20e3c1]
push es
shl ebx, 0x20
push 6
push ecx
lea edx, [ebp - 0x40]
push edi
push edx
js 0x5b473a
jns 0x5b75ac
xor edi, dword [edi + ecx - 0x77]
mov cl, dl
invalid
jns 0x5b473a
scasb al, byte es:[edi]
shl dl, 0x20
jmp 0x5b3e9f
and eax, 0x24448fb8
cld
mov byte [esi + 0xbb], al
shl di, 0x20
jne 0x5c553a
je 0x5b7e05
stosb byte es:[edi], al
cdq
invalid
je 0x5c553a
invalid
push 0xe
add ecx, 0x74
push eax
push ecx
call fcn.005e4496
mov edx, dword [esi]
push 0
push edx
mov edx, edx
call fcn.005cdd65
add esp, 0x20
shr dh, 0x40
pop esi
mov esp, ebp
pop ebp
ret
mov ebx, eax
lea ecx, [ebp - 0xb0]
mov dword [ebp - 0x60], ebx
xchg ch, cl
xchg cl, ch
lea eax, [ebp - 0x120]
mov dword [ebx + 0x18], ecx
mov ecx, dword [ebp - 0x1c]
xchg cx, bp
xchg bp, cx
mov dword [ebp - 0x98], eax
mov dword [ebp - 0xac], edx
mov edx, dword [ebp - 0xc]
lea eax, [ebp - 0x13c]
ja 0x5d0cf3
jbe 0x5b9902
xor bl, ch
cwde
pop ss
jbe 0x5d0cf3
fcmovu st(0), st(4)
mov cl, byte [ebp + 0x34]
mov edi, edi
mov ebx, dword [esi + 4]
shr esi, 0x40
lea esi, [esi + 8]
rcl byte [ebx], cl
jmp dword [esi]
mov cx, cx
shl dx, 0x20
mov dx, dx
mov dx, word [ebp + 0x10]
xchg dh, cl
shl dx, 0x20
xchg cx, di
xchg di, cx
xchg cl, dh
xchg di, cx
xchg cx, di
ja 0x5e335e
jbe 0x5b99af
cpuid
nop
ret
jbe 0x5e335e
fisubr dword [ebp - 0x77]
ror byte [edx - 0x7699f4bb], cl
fisttp dword [eax + 0xba9e]
add byte [eax + 0xbb86], cl
add byte [esi + 0xfc686f0], al
mov byte [ebx], ah
mov esi, 0x89660002
fstp xword [ecx + 4]
mov bh, 0xfa
xor bh, byte [edi + 0xf]
mov dword [esi + edi*4], edx
add al, byte [eax]
add eax, 0xef8097
test al, al
jb 0x5de795
je 0x5c3ea1
jne 0x5b99fb
ret 0x6ac7
push 0
push 0
push 3
push 0
push 3
push 0xc0000000
push ecx
call dword [sym.imp.KERNEL32.dll_CreateFileA]
cmp eax, 0xffffffff
mov dword [0x77c569], eax
jne 0x5b9a44
je 0x5b9a27
mov edx, dword [edi]
push 7
push edx
call fcn.005cdd65
add esp, 8
pop edi
pop esi
pop ebx
shr ax, 0x40
mov esp, ebp
pop ebp
ret
jmp 0x5b9a45
mov eax, 1
pop esi
pop ebp
ret
push eax
jmp 0x5ba01a
push esi
call 0x5ba030
add esp, 8
pop esi
pop ebp
shr cx, 0x40
ret
add byte [eax], al
cwde
enter 0x5d, 0xffffffffffffffd5
cmp al, 0x5d
add ch, dl
and dword [edi + 0x383e], ebx
add byte [ebx + edx*2], dl
pop ebx
add ch, dl
and dword [edi + 0x383e], ebx
add byte [ebx], bl
dec eax
pop ebp
add byte [eax], al
popal
add byte [eax + 0x34], al
add byte [ecx], ah
add byte [eax], al
dec esi
add byte [eax], al
add byte [eax], al
adc byte [eax], al
add byte [eax], al
inc eax
add byte [eax], al
xor byte [eax], al
add byte [eax], al
cmp eax, 0x44005cce
pop ebx
add dh, cl
jb 0x5ba4d9
add byte [ebx + edx*2], dl
pop ebx
add byte [edi], dl
add byte [eax], al
add byte [eax], dh
add byte [eax], al
add byte [ebx], dl
push esi
pop ebp
add bh, bh
inc dword [eax]
add byte [eax], dh
add byte [eax], al
add byte [ebx + esi*8 + 0x5b], al
add dh, dl
jb 0x5ba4f9
add byte [edi + 0x2a], dl
pop ebx
add byte [eax], bh
add byte [eax], al
add byte [eax], bh
add byte [eax], al
add byte [eax + 0x7005bf5], ah
int1
add byte [eax], al
xor byte [eax], al
add byte [eax], al
inc esp
pop ebx
add byte [eax - 0x3d], dl
pop ebx
add byte [ecx + 0x22005c97], dh
rcr dword [esi], 1
inc edx
push esi
pop esi
add dl, dl
movsb byte es:[edi], byte [esi]
pop ebx
add byte [eax + 0x42c2a20f], dl
push esi
pop esi
add byte [edx], ah
rcr dword [esi], 1
add eax, 0x8827e8aa
add byte [0x8827e8aa], al
invalid
cmp al, 0
add byte [eax], al
inc esp
add byte [eax], al
add ch, ah
ljmp 0
jne 0x5c6c74
je 0x5ba7ee
cpuid
ret
je 0x5c6c74
add eax, 0x24448faf
cld
push ebp
pop ebp
lea eax, [esi + 0x2c]
push edx
jmp 0x5ba802
push eax
mov bx, bx
call fcn.005e4496
and bx, bx
cmc
add esp, 0xc
mov cx, cx
jmp fcn.005be798
dec ebp
xchg ebp, eax
sub byte [edi], cl
test bl, ah
inc edx
invalid
pop edi
sub byte [ebx + ecx*4], 0x5d
inc esp
mov edx, dword [esi + 8]
mov eax, dword [esi + 4]
lea esi, [esi + 0xc]
or word [ebx + edx], ax
jb 0x5b4e2d
jmp dword [esi]
push ebp
sub cl, byte [edi]
sub dword [edx + 0x24], 0x4700003
invalid
mov eax, dword [ebp - 0x14]
jmp 0x5bb8fd
push ebx
mov dword [edx], eax
jmp 0x5cc05d
pop esi
xchg bh, cl
xchg cl, bh
pop ebx
shl di, 0x20
mov esp, ebp
pop ebp
ret
mov word [esi + 0xbc], di
mov edi, edi
call fcn.005eafde
jmp 0x5e35d0
mov ah, ah
jge 0x5be35d
jl 0x5be350
cpuid
nop
ret
shl dx, 0x20
lea esi, [esi + 8]
jmp dword [esi]
mov esi, dword [esi + 4]
shl eax, 0x20
mov esi, dword [ebp + esi]
mov cx, cx
jmp dword [esi]
push eax
call fcn.005cdd65
cmc
add esp, 0x18
pop edi
pop esi
pop ebx
mov esp, ebp
shl cl, 0x20
pop ebp
ret
mov edx, dword [esi]
mov cl, cl
push 0x29a
push edx
mov ecx, ecx
call fcn.005cdd65
add esp, 8
pop edi
pop esi
pop ebx
xchg ah, ch
xchg ch, ah
mov esp, ebp
pop ebp
ret
mov ecx, dword [ebp - 0x28]
inc edi
cmp eax, ecx
mov dword [ebp - 0x18], eax
mov bp, bp
jb 0x5cff1f
jae 0x5becf3
cpuid
nop
ret
mov ebp, ebp
mov ecx, dword [esi + 4]
mov edx, edi
push 2
add edx, ecx
ja 0x5c47aa
jbe 0x5bed0a
cpuid
nop
ret
jbe 0x5c47aa
fmul dword [edi]
call fcn.005eba71
add eax, 0x5afeeb08
add cl, dh
add byte [eax], al
add byte [eax], dh
add byte [eax], al
add byte [ebx + esi*8 + 0x5b], al
add byte [eax + 0x73005e8b], ah
pop es
pop ebp
add byte [edx], dl
add byte [eax], al
xor byte [eax], al
add byte [eax], al
pop esp
jecxz 0x5bed96
add byte [ecx], dh
add byte [eax], al
add byte [ecx], dh
add byte [eax], al
add byte [ebx + edx*2], dl
pop ebx
add byte [eax], al
add byte [eax], al
add byte [eax], cl
add byte [eax], al
adc edx, dword [esi + 0x5d]
add bh, bh
add byte [eax], al
add byte [eax], dh
add byte [eax], al
add byte [ebx + esi*8 + 0x5b], al
add byte [esi], ah
mov ebx, dword [ebx]
inc esp
and bl, byte [esi]
dec esp
add byte [eax], al
add byte [eax + eax], cl
add byte [ebp - 0x60], bl
pop ebx
add byte [eax + eax], al
add byte [ebx + 0x5cdf005b], dh
mov ebx, 0x30005afb
add byte [eax], al
add byte [eax], dh
add byte [eax], al
add byte [ebx + esi*8 + 0x5b], al
add byte [esi], dh
mov ebx, dword [ebx]
mov ecx, dword [ebx + 0x993005e]
pop ebp
add byte [edx], cl
add byte [ebx + 0xa005d09], dl
push eax
pop esi
add byte [esi - 0x5bffa413], ah
ja 0x5bede9
or dl, byte [eax + 0x5e]
add byte [ebx + 0x34005d09], dl
and ecx, dword [ebx + 0x77c5690d]
add bh, bh
int1
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [0x77c569], ebx
jno 0x5befce
jo 0x5bedcf
nop
sub edi, dword [esi + 0xf]
cmp cl, 1
add byte [eax], al
jo 0x5befce
xor al, 0x3f
push 8
push 0
shr eax, 0x40
push 0x77d038
call fcn.005b7d7f
cmp esi, esi
add esp, 0x18
test byte [ecx + 0x18c4], 0
jno 0x5df976
jo 0x5bedfb
add esi, dword [edx]
jb 0x5bee0b
jo 0x5df976
xor byte [ebp + 0xb], 2
add al, bl
mov esp, 0x5be506
push ss
fdivr dword [esi + eax + 0x16005be5]
push ss
pop ebx
add byte [edx], cl
sbb dword [ebp], ebx
push ss
or bl, byte [ecx]
pop ebp
add byte [esi], dl
out dx, al
pop ebx
add byte [ebx + ebp*8 + 0x5d481bea], ah
add byte [eax], al
popal
add byte [eax + 0x34], al
add byte [ecx], ah
add byte [eax], al
or byte [eax], al
add byte [eax], al
add byte [ecx], dl
add byte [eax], al
add byte [ecx], al
add byte [eax], bh
add byte [eax], al
add bh, ch
add al, 0x5c
add bl, ch
mov edi, 0x30005d
add byte [eax], al
xor byte [eax], al
add byte [eax], al
inc esp
pop ebx
add byte [eax], dh
add byte [eax], al
add byte [ebx + esi*8 + 0x5b], al
add byte [ebx - 0x19], al
pop edx
add byte [ebx], bl
dec eax
pop ebp
add byte [eax], al
popal
add byte [eax + 0x34], al
add byte [ecx], ah
add byte [eax], al
mov esp, 0
adc byte [eax], al
add byte [eax], al
inc eax
add byte [eax], al
xor byte [eax], al
add byte [eax], al
cwde
enter 0x5d, 0x14
push ebx
pop ebx
add byte [ebx], cl
add byte [eax], al
add byte [eax], dh
add byte [eax], al
add ch, dl
cmp al, 0x5d
add dl, dl
jno 0x5bee35
fld dword [eax + eax]
add byte [ebx + edx*2], dl
pop ebx
add dl, dl
jno 0x5bee41
fld dword [eax + eax]
add byte [edx], ch
sbb byte [eax + eax + 0x30], 0
add byte [eax], al
xor byte [eax], al
add byte [eax], al
jmp 0x5bee63
pop edi
pop esi
jne 0x5d0c6c
mov si, si
je 0x5befde
cld
shr byte [esi + 0xf], 0x84
mov byte [ecx + eax], bl
add byte [0x8768dd4], dh
je 0x5d0c6c
xor eax, 0x8768dd4
jno 0x5c390d
jo 0x5beff5
cpuid
nop
ret
jo 0x5c390d
xor byte [edx + 0x6a0e8b], 0x51
call fcn.005eb938
mov si, si
mov edx, dword [esi]
push 0x100
lea eax, [ebp - 0x110]
call fcn.005e6f1c
xor al, 0xd4
mov eax, dword [0xff89664a]
mov ecx, dword [esi + 4]
lea ecx, [ecx]
mov ebx, dword [esi + 8]
lea esi, [esi + 0xc]
sar word [ebx], cl
xchg al, dl
xchg dl, al
jmp dword [esi]
add edi, edx
mov ecx, dword [esi + 4]
mov ebx, dword [esi + 8]
lea esi, [esi + 0xc]
shr bl, 0x40
mov ah, ah
sar dword [ebx], cl
mov cl, cl
js 0x5cbe83
jns 0x5bf44e
jecxz 0x5bf45e
jns 0x5cbe83
mov dword [edi], ebp
retf 0
add eax, 0x5d3cd589
add ch, bl
pop esi
add byte [eax], al
xor byte [eax], al
add byte [eax], al
adc al, 0x53
pop ebx
add byte [eax], al
add byte [eax], al
add byte [eax + eax], al
add byte [ebx], dl
push esi
pop ebp
add bh, bh
inc dword [eax]
add byte [eax], dh
add byte [eax], al
add byte [ebx + esi*8 + 0x5b], al
add byte [ebx + 0x7b], ch
pop esp
add byte [0x3e4005b], al
pop ebp
add byte [edx], cl
sbb dword [ebp], ebx
xchg ebp, eax
hlt
jno 0x5c3eb6
jo 0x5bf508
nop
cpuid
ret 0x800f
jo 0x5c3eb6
fst dword [ecx - 0x60]
cmc
pop ebx
add byte [0x34000000], dl
add byte [eax], al
add byte [ebx + esi*8 + 0x5b], al
add ch, dh
xor eax, 0x6266005c
pop ebp
add byte [eax + eax], cl
add byte [eax + eax], cl
add byte [ebx], bl
dec eax
pop ebp
add byte [eax], al
inc eax
add byte [eax], al
xor al, 0
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [ecx], ah
cmp byte [eax], 0
add byte [eax], al
add byte [ecx], ah
add byte [eax], al
push esi
add byte [eax], al
add byte [eax + 0x5d005dc8], bl
mov al, byte [0x44005b]
add byte [eax], al
das
mov dword [esi], ebx
les eax, [esi + 0x5d]
add byte [edi + 0x34005d11], bl
salc
pop ebp
ret
mov edx, dword [ebp + 0xc]
ja 0x5bb8f9
jbe 0x5bf65a
and esi, edi
test byte [edi], cl
xchg byte [ecx + 0x34ffffc2], bl
push ss
jbe 0x5bb8f9
xor al, 0x16
mov di, di
mov eax, dword [esi + 4]
shl ecx, 0x20
mov ebx, dword [esi + 8]
jno 0x5aed21
jo 0x5bf678
jnp 0x5bf646
jo 0x5aed21
and eax, 0xc768dd2
shl dword [ebx], cl
js 0x5e2303
jns 0x5bf691
cpuid
ret
jns 0x5e2303
fimul dword [esi - 0x15]
push esi
shr dh, 0x40
call fcn.005cb249
add esp, 8
cmp di, di
test eax, eax
jb 0x5cc1cc
jne 0x5bf6dc
je 0x5bf6c0
push 0x458bbf64
or al, 0x89
neg byte [esi + 0x66]
mov dword [eax], 0xc766fffd
inc eax
add al, byte [eax]
cmp byte [eax + 1], 0x5d
mov eax, dword [ebp + 0xc]
mov esi, esi
pop esi
mov word [eax], 0xfffd
mov word [eax + 2], 0x8000
mov eax, 1
pop ebp
ret
push 0x77ce11
mov si, si
push esi
call fcn.005cb249
add esp, 8
test eax, eax
jb 0x5cc1e5
mov eax, dword [ebp + 0xc]
jne 0x5ba017
je 0x5bf706
adc dh, byte [ebx]
mov word [eax], 0
mov word [eax + 2], 0x100
jmp 0x5ba00d
invalid
pop ebp
ret
fild dword [edx + 0x66]
xchg ebp, esi
xchg si, bp
mov dword [edi], ebx
jmp dword [esi]
mov ebx, 0x51b5e8a8
add al, byte [eax]
aad 0x3c
pop ebp
add cl, ch
add byte [eax], al
add byte [eax], cl
add byte [eax], al
mov al, byte [0x14005bf5]
test byte [eax], al
add byte [eax], cl
add byte [eax], al
inc esp
pop ebx
add ah, dl
mov bl, 0x5c
add byte [edx], ch
sbb byte [eax + eax + 0x38], 0
add byte [eax], al
cmp byte [eax], al
add byte [eax], al
fcmovnb st(0), st(7)
pop ebp
add byte [eax], cl
add byte [eax], al
xor al, 0
add byte [eax], al
retf 0x5b6f
test eax, eax
jb 0x5c04ed
je 0x5d72bd
jne 0x5c0845
nop
cpuid
ret 0x458b
mov eax, dword [ebp - 4]
shl cx, 0x20
mov ebx, 1
mov ecx, dword [eax]
shr ah, 0x40
mov dword [0x77c4bd], ecx
mov ecx, dword [eax]
test ecx, ecx
jb 0x5c04f9
jne 0x5c0878
je 0x5c0872
mov esp, 0x8bc3a20f
pop ebp
clc
mov ebx, dword [ebp - 8]
shl ebx, 0x20
jmp 0x5c0879
push eax
call edi
test ebx, ebx
jb 0x5e56c7
je 0x5d72bd
jne 0x5c088f
sal byte [esi], 1
mov edx, dword [ebp - 0x14]
push str.GetSystemMetrics
jmp 0x5c0898
push edx
call esi
call fcn.005da5c4
fxch st(0)
lea esp, [esp + 4]
lea esi, [esi + 4]
shr si, 0x40
mov ebx, ebx
cmc
jmp dword [esi]
mov edx, dword [eax]
mov ebx, dword [ebp - 0x18]
add edx, ebx
mov ecx, 0x20
mov dword [eax + 4], edx
mov edx, dword [eax]
jno 0x5e51a4
jo 0x5c0dc1
xor esi, dword [edi]
mov word [esi + 0x43dd800f], gs
add al, byte [eax]
jo 0x5e51a4
fdivr st(4)
add byte [eax], al
add byte [ebx + esi*8 + 0x5b], al
add byte [edx + 0x13005dd1], dh
scasb al, byte es:[edi]
pop ebx
add byte [ebx], dh
mov eax, dword [0xb7fd005e]
pop esp
add byte [edi + ecx + 0x5c], al
add byte [eax + 0x20], dh
mov eax, 0x5cb7fd51
add byte [ebx], dh
mov eax, dword [0xff82005e]
add eax, 8
mov dword [ebp - 8], eax
mov esi, esi
mov ecx, dword [ebp - 8]
mov edx, dword [esi]
sub ecx, edi
jmp 0x5c0f60
push ecx
jmp 0x5c0f63
push edx
call fcn.005eb938
mov eax, dword [esi]
mov edi, dword [ebp - 8]
jmp 0x5c0f70
push eax
shr edi, 3
call fcn.005eafde
clc
and eax, 0xffff
jb 0x5b214b
add esp, 0xc
cmp edi, eax
ja 0x5be745
jbe 0x5c0f99
dec ebp
nop
jnp 0x5c0f25
mov ecx, dword [esi]
push cs
push edi
shr ah, 0x40
jmp 0x5c0fa0
push ecx
lea ebx, [ebx]
call fcn.005bd913
add esp, 8
jmp 0x5c0fb0
push ebx
call fcn.005ffe30
mov eax, dword [ebp - 4]
push eax
call fcn.005d53fe
mov ecx, dword [ebp - 0xc]
push ecx
call fcn.005d53fe
mov edx, dword [ebp - 0x14]
jmp 0x5c0fcd
push edx
call fcn.005d53fe
mov dl, dl
mov eax, dword [esi]
push 0
ja 0x5be72b
jbe 0x5c0fe5
adc bh, byte [ecx + 0x3d]
jbe 0x5be72b
and eax, 0x8726ff19
xadd al, ah
and byte [edi], cl
add esp, 0xffffffed
invalid
mov edx, dword [ebp + 8]
lea ecx, [ebp - 0x210]
jmp 0x5c102a
push edi
jmp 0x5c102d
push ecx
js 0x5ae573
jns 0x5c1039
and edx, esp
jns 0x5ae573
xor al, 0xb8
cmp eax, 0x30005cf7
add byte [eax], al
add byte [eax], bh
add byte [eax], al
add byte [ebx + esi*8 + 0x5b], al
add byte [edx + 4], ch
pop esi
add byte [ebx], bl
dec eax
pop ebp
add byte [eax], al
popal
add byte [eax + 0x34], al
add byte [ecx], ah
add byte [eax], al
or al, 0
add byte [eax], al
add byte [ecx], dl
add byte [eax], al
add byte [ecx], al
add byte [eax], dh
add byte [eax], al
add bh, ch
add al, 0x5c
add byte [ebx + 7], dh
pop ebp
add byte [eax], al
add byte [eax], al
add byte [ecx], dh
add byte [eax], al
add byte [ecx - 0x6d], dh
pop ebp
add byte [eax], bh
add byte [eax], al
add byte [eax], dh
add byte [eax], al
add ch, dl
cmp al, 0x5d
add byte [ebx], cl
add byte [eax], al
add byte [eax], dh
add byte [eax], al
add byte [eax + 0x31005bf5], ah
push ecx
add eax, dword [eax]
xor byte [eax], al
add byte [eax], al
inc esp
pop ebx
add byte [esi - 0x4d], bh
pop ebp
add byte [ebx + edx*2], dl
pop ebx
add byte [ebp + 0x3000004e], ch
add byte [eax], al
add byte [ebp - 0x60], bl
pop ebx
add byte [eax + eax], al
add ch, ah
ljmp 0
mov dword [ebp + 0x40], esp
mov esi, dword [ebp + esi]
ja 0x5e881b
jbe 0x5c1938
outsd dx, dword [esi]
cmp eax, 0x860f476c
invalid
jbe 0x5e881b
mov dword [ebp - 0x70], ecx
call fcn.005ffd30
mov edx, dword [ebp - 0x34]
mov edi, dword [ebp - 0x14]
jno 0x5b98c0
jo 0x5c1957
ror byte [ecx + 0x63800f94], 0x7f
invalid
jo 0x5b98c0
xor al, 0x6a
sbb ecx, dword [eax + 0x5d]
add byte [eax], al
inc ecx
add byte [eax + 0x40], al
add byte [ecx], al
add byte [eax], al
add al, 0
add byte [eax], al
add byte [ecx], al
add byte [eax], al
add byte [ecx], al
add byte [eax], al
add byte [eax], al
out dx, eax
add al, 0x5c
add byte [ebx + 0x69005df2], ah
fstp dword [eax + eax + 2]
add byte [eax], al
add byte [eax], dh
add byte [eax], al
add byte [edi - 0x5a], ah
pop ebx
add byte [eax], ah
add byte [eax], al
add byte [eax + eax], al
add byte [esi], al
in eax, 0x5b
add byte [ecx + 0x66005c1a], bh
bound ebx, qword [ebp]
xor al, 0
add byte [eax], al
xor al, 0
add byte [eax], al
or bl, byte [ecx]
pop ebp
add byte [edi + 0x4005c19], bh
lcall 0x5d, 0xeae5eb02
xor byte [eax], al
add byte [eax], al
cmp al, 0
add byte [eax], al
in eax, 0xea
pop ebp
add byte [eax + eax], bh
add byte [eax], al
xor byte [eax], al
add byte [eax], al
sbb ecx, dword [eax + 0x5d]
add byte [eax], al
popal
add byte [eax + 0x38], al
add byte [ecx], ah
add byte [eax], al
mov esp, 0
adc byte [eax], al
add byte [eax], al
inc eax
add byte [eax], al
xor al, 0
add byte [eax], al
cwde
enter 0x5d, 0x44
and bl, byte [esi]
xor al, 0
add byte [eax], al
xor byte [eax], al
add byte [eax], al
pushfd
rcr dword [ebx], cl
push cs
add byte [eax], al
add byte [eax], dh
add byte [eax], al
add byte [eax + 0x2005c], ah
add byte [eax], al
xor al, 0
add byte [eax], al
cmp eax, 0x34005cf7
add byte [eax], al
add byte [eax], dh
add byte [eax], al
add byte [ebx + esi*8 + 0x5b], al
add byte [ebx + 0x41005aec], bh
add byte [eax + eax + 0x30], bl
add byte [eax], al
add byte [eax], dh
add byte [eax], al
add byte [ebx], bl
dec eax
pop ebp
add byte [eax], al
popal
add byte [eax + 0x38], al
add byte [ecx], ah
add byte [eax], al
and al, byte [eax]
add byte [eax], al
add byte [eax], dl
add byte [eax], al
add byte [eax], al
add byte [eax], dh
add byte [eax], al
add byte [0x44005cce], bh
pop ebx
add bl, bh
mov ebp, 0xf5a0005c
pop ebx
add byte [eax - 0x1e], dl
add byte [eax], al
xor byte [eax], al
add byte [eax], al
inc esp
pop ebx
add byte [esi + edi*4], al
pop esp
add byte [ebx + edx*2], dl
pop ebx
add byte [eax], al
add byte [eax], al
add byte [eax], bh
add byte [eax], al
add byte [ebx + edx*2], dl
pop ebx
add ah, ch
add al, 0
add byte [eax], dh
add byte [eax], al
add byte [ebx], dl
push esi
pop ebp
add bh, bh
inc dword [eax]
add byte [eax], dh
add byte [eax], al
add byte [ebx + esi*8 + 0x5b], al
add byte [esi + 0x32], dl
pop esi
add byte [ebp - 0x60], bl
pop ebx
add byte [eax + eax], al
add byte [ebx - 0x6d77ffa5], dh
les esi, [ebp + 0x5b]
jne 0x5c1b17
add byte [eax], al
add byte [eax], al
add byte [eax + eax], al
add byte [0x34005c7d], ah
add byte [eax], al
add byte [eax + eax], dh
add byte [eax], al
mov ebx, 0x30005afb
add byte [eax], al
add byte [eax], dh
add byte [eax], al
add byte [ebx + esi*8 + 0x5b], al
add byte [eax], dl
jge 0x5c1b41
add byte [esi], al
in eax, 0x5b
add byte [ebx + 0x1b], ah
pop esp
add byte [edx], cl
sbb dword [ebp], ebx
stc
sbb bl, byte [eax + eax + 0xc]
sub bl, 0xe4
jmp 0x5c1aba
add byte [eax], al
sbb ecx, dword [eax + 0x5d]
add byte [eax], al
popal
add byte [eax + 0x38], al
add byte [ecx], ah
add byte [eax], al
and al, byte [eax]
add byte [eax], al
add byte [eax], dl
add byte [eax], al
add byte [eax], al
add byte [eax], dh
add byte [eax], al
add byte [eax + 0x5d005dc8], bl
mov al, byte [0x44005b]
add byte [eax], al
invalid
inc esp
add byte [eax], al
add dh, bh
imul ebx, dword [ebp], 0x34
add byte [eax], al
add byte [eax], dh
add byte [eax], al
add dh, bh
imul ebx, dword [ebp], 0x30
add byte [eax], al
add byte [eax + eax], dh
add byte [eax], al
mov ah, 0xe3
pop ebx
add byte [ebx - 0x55], ah
adc ebp, dword [esi - 0x596affa5]
pop ebp
add ch, bh
mov bh, 0x5c
add byte [esi + 0x1b], dh
pop esp
add byte [edi], bl
pop edx
stosd dword es:[edi], eax
std
mov bh, 0x5c
add byte [ebp - 0x7dffa25a], dl
mov eax, dword [0x187eee8]
add byte [edi], cl
cmp dword [ebx], 0x70fffefd
add bl, al
into
jo 0x5b18c6
add eax, 0xff23d23e
xchg ecx, eax
sub ebp, eax
mov dword [edx], 0x48340002
jmp 0x5b41c3
mov ecx, dword [ebp + 0x14]
jmp fcn.005bf01e
mov ecx, dword [ebp + 0xc]
xchg cx, si
xchg si, cx
push esi
mov eax, eax
push 0
jne 0x5b7596
je 0x5c1eda
cpuid
ret
je 0x5b7596
fsub dword [esi + 0x4c481]
add byte [eax], al
test eax, eax
jb 0x5b1f23
jne 0x5c1f13
je 0x5c1efc
test eax, 0x6aa027f4
push esi
push 0x2e
push esi
call fcn.005cdd65
test al, 0x6d
add esp, 8
jmp 0x5dafc4
js 0x5c98e8
jns 0x5c1f1e
fisubr dword [ebp - 0x3b76f01a]
jns 0x5c1f23
jns 0x5c98e8
add byte [edx + 0x24448f99], al
cld
sbb byte [ecx - 0x3dbbb71], 0xf7
sti
idiv ebx
mov eax, 0x66666667
mov bl, dl
or ax, ax
imul ecx
sar edx, 2
mov ecx, edx
stc
jb 0x5c1f43
push 0x5b8e36
ret
pop ebp
ret
cmp ecx, eax
je 0x5de4bc
jne 0x5c2784
sbb esp, dword [eax + 0x1d48880f]
invalid
js 0x5b44d2
jns 0x5c2790
pop ecx
sub byte [ebx], 0xe9
jns 0x5b44d2
fdivr dword [ebp + 0x211cce9]
add byte [ebx + edx*8 + 0x7005b], bl
add byte [eax], al
xor al, 0
add byte [eax], al
retf
add al, 0x64
mov esi, 0x820f3227
adc cl, 0x76
add al, byte [eax]
sal dword [esi + 2], 1
add cl, bl
adc eax, 0x20e3c166
fst dword [0x20e3c166]
mov eax, dword [esi + 4]
lea esi, [esi + 8]
mov dword [ebp + 0x50], eax
push 0x5b7005
ret
mov edx, dword [esi + 4]
mov ebx, dword [esi + 8]
shr dx, 0x40
mov eax, dword [eax + edx]
lea esi, [esi + 0xc]
xor dword [ebp + ebx], eax
jb 0x5c7677
ja 0x5e6ba1
jbe 0x5c2a05
rcl byte [edx - 0x6979f00d]
inc ecx
add al, byte [eax]
jbe 0x5e6ba1
xor al, 0x61
mov dword [esi + 4], edx
jne 0x5d9e23
je 0x5c2a1b
or dword [ebp - 0x4c387e4d], esp
test esi, ebp
loopne 0x5c29a3
add edi, 0xe0ee85b3
sub edi, 0xe0ee85b3
cmp ebx, 2
out dx, eax
mov bl, 0x85
out dx, al
loopne 0x5c29a9
sti
add al, byte [eax]
add byte [eax], al
jbe 0x5d9e07
ja 0x5c2a38
inc ebp
inc esi
leave
shr dl, 0x40
mov eax, dword [ebp + 0x10]
lea ecx, [ebp - 0x1c]
jmp 0x5c2a42
push eax
xchg di, bp
xchg bp, di
jmp 0x5c2a4b
push edi
push ecx
mov si, si
push esi
call fcn.005c37f4
mov edi, dword [ebp - 0x1c]
add esp, 0x10
mov dword [ebp - 0x84], edi
shl ax, 0x20
lea eax, [ebp - 0x84]
mov dword [ebp + 8], 0x19
ja 0x5c0da4
jbe 0x5c2a83
sub al, 0x26
push ecx
lea ecx, [edi]
xchg byte [ebx], bl
jecxz 0x5c2a87
jbe 0x5c0da4
invalid
inc dword [edx + 0x4468b3c]
lea esi, [esi + 8]
cmp byte [ebx + ecx*4], 0x46
add al, 0x8d
jbe 0x5c2a99
push 0x5d58d3
ret
mov di, di
mov ebx, dword [esi + 8]
mov ax, word [ebp + eax]
mov ebx, dword [ebp + ebx]
lea esi, [esi + 0xc]
sbb word [ebx], ax
jmp dword [esi]
jg 0x5c2a4b
shr bp, 0x40
mov eax, dword [esi + 4]
mov si, si
mov ebx, dword [esi + 8]
shl di, 0x20
mov eax, dword [ebp + eax]
mov ebx, dword [ebp + ebx]
lea esi, [esi + 0xc]
sbb dword [ebx], eax
call fcn.005c0acc
fst dword [0x424648d]
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp - 8]
jno 0x5df149
jo 0x5c33d1
pop edx
jo 0x5df149
jo 0x5df149
add ah, 0x8d
and al, 4
cmp ebx, 1
jne 0x5e93fa
je 0x5c33ed
lea ebp, [eax + ebp*8 + 0x25ff9]
call fcn.005e93eb
invalid
mov edx, dword [ebp - 8]
mov eax, dword [ebp - 4]
mov dword [esi], edx
mov dword [esi + 4], eax
pop esi
pop ebx
mov esp, ebp
pop ebp
xchg ebx, edi
xchg edi, ebx
ret
push 0x5be3e9
ret
pop esi
and dh, dh
xor ax, ax
jb 0x5d38c5
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [edi]
push 7
jne 0x5e22aa
je 0x5c3eb0
cmpsd dword [esi], dword es:[edi]
sub dl, byte [esi - 0x1c0b7bf1]
add dword [eax], eax
je 0x5e22aa
ja 0x5b9981
jbe 0x5c3ec0
bound edi, qword [esi]
jbe 0x5b9981
fcmovb st(0), st(4)
mov edi, eax
add esp, 0x10
test edi, edi
jb 0x5b758b
je 0x5e5aa8
jne 0x5c4171
cmp dword [ebp - 0x7699e269], edx
leave
mov cx, cx
push edi
mov bp, bp
call fcn.005bc6bb
mov esi, dword [ebp + 0xc]
shr ah, 0x40
xchg si, bp
xchg bp, si
inc eax
jmp 0x5c418b
push eax
jmp 0x5c418e
push 0x77cdfb
jmp 0x5c47b0
push edx
call fcn.005e4496
mov eax, dword [ebp - 8]
add edi, 2
push eax
mov cl, cl
call fcn.005d53fe
add esp, 0x10
mov esi, esi
mov ecx, edi
mov dword [ebp - 8], edi
and ecx, 7
jb 0x5b2144
je 0x5c0f58
jne 0x5c47ed
nop
cpuid
ret 0xf889
mov eax, edi
sub eax, ecx
test esp, edi
jno 0x5c47f8
mov word [eax], ds
iretd
jno 0x5c0f4e
xor eax, 0xd534688d
pop esp
add bl, al
xor eax, 0x24648d20
add al, 0xff
sahf
mov dword [0x40eec166], eax
mov eax, dword [esi + 4]
xchg cl, ch
xchg ch, cl
mov ebx, dword [esi + 8]
mov ebx, dword [ebp + ebx]
xchg dx, ax
xchg dx, ax
lea esi, [esi + 0xc]
and cx, cx
add byte [ebx], al
jmp dword [esi]
mov word [esi + 0xbc], di
push 0x5e6bfc
ret
inc ebx
cmp cl, byte [edi]
xchg dword [edx - 0x1e], ebp
add byte [eax], al
jbe 0x5c564f
mov ch, 0xfe
push ds
leave
jbe 0x5d38b3
and byte [edx], 0xe8
sbb byte [ecx + 2], 0
call fcn.005eafde
shl eax, 3
push esi
mov edi, eax
call fcn.005eb56f
mov esi, dword [ebp + 0x1c]
sub edi, eax
add esp, 8
mov eax, dword [esi + 0xc]
test eax, eax
jb 0x5ed373
jne 0x5b7031
je 0x5c5689
cpuid
nop
ret
jne 0x5b701e
xchg bp, di
xchg di, bp
je 0x5c5699
imul esi, dword [edx], 0xf
test byte [edi + 0x19], bh
invalid
je 0x5b701e
and eax, 0x565f57e4
call fcn.005e7143
mov edx, edx
mov eax, dword [edi + 0x3c]
add esp, 0x20
mov al, al
shl eax, 1
jne 0x5cd503
je 0x5c56c4
push ecx
enter 0xffffffffffffa38f, 0xf
test byte [ecx], bh
jle 0x5c56c9
je 0x5cd503
add byte [0x8c4812a], ah
and eax, 0x8c4812a
add byte [eax], al
add byte [esi - 0x48], ah
add al, byte [eax]
pop edi
pop esi
pop ebx
mov esp, ebp
jmp fcn.005c9db7
call fcn.005cdd65
add esp, 8
pop edi
pop esi
pop ebx
shr bh, 0x40
mov esp, ebp
pop ebp
ret
mov edx, dword [esi]
push 0x24
push edx
call fcn.005cdd65
add esp, 8
pop edi
pop esi
pop ebx
mov esp, ebp
jno 0x5bfcec
jo 0x5c6a1b
nop
cpuid
ret 0x800f
jo 0x5bfcec
sbb byte [edx + 0xf], 0x84
fmul dword [0xc1660002]
out dx, al
inc eax
jne 0x5c6a33
test eax, 0xe9b43dfc
call 0x835c69de
or byte [edx + 0xe], ch
jmp 0x5c1020
add ecx, 0x74
jmp 0x5c6a43
push eax
push ecx
call fcn.005bc5c4
cmp bx, bx
add esp, 0xc
neg al
sbb eax, eax
stc
and al, 0xea
jb 0x5d2eab
add eax, 0x16
mov ebx, ebx
pop esi
xchg ch, dl
xchg dl, ch
mov esp, ebp
pop ebp
ret
mov edx, dword [esi + 4]
mov cl, byte [ebp + 0x34]
lea esi, [esi + 8]
shr byte [ebx + edx], cl
jmp 0x5e986c
shl ax, 0x20
mov ch, ch
jne 0x5cf5a6
shl di, 0x20
shr ax, 0x40
je 0x5c6c8c
push es
cmc
push 0x5ebcd6
ret
mov dword [0x6f810f43], eax
sbb al, 2
add byte [eax + 4], dh
retf
cmp al, 0x3d
push esi
jne 0x5dafaa
je 0x5c809f
mov cl, byte [eax + 0xbc]
mov dl, byte [eax + esi + 0x24]
sub cl, 2
jne 0x5aed47
je 0x5c8c2d
nop
cpuid
ret 0x840f
je 0x5aed47
pop dword [esp - 4]
mov edx, dword [esi]
push 0x17
push edx
call fcn.005cdd65
add esp, 8
pop edi
ja 0x5bd14a
jbe 0x5c8c53
test al, 0x99
lahf
jbe 0x5bd14a
add eax, 0x35e8568a
mov eax, 0xc4810001
adc byte [eax], al
add byte [eax], al
xchg ecx, ebx
xchg ebx, ecx
mov eax, esi
js 0x5bab17
jns 0x5c8c79
cpuid
nop
ret
jns 0x5bab17
and eax, 0x6cf7666f
sbb eax, 0xc768d00
mov word [ebp + ebx], ax
jmp dword [esi]
jmp dword [esi]
push ecx
in eax, dx
mov eax, dword [esi + 4]
shl bx, 0x20
mov ebx, dword [esi + 8]
mov ax, ax
xchg ah, bh
xchg bh, ah
movsx eax, byte [ebp + eax]
lea esi, [esi + 0xc]
mov dword [ebp + ebx], eax
jmp dword [esi]
lahf
mov ebp, ebp
call fcn.005e4556
ret
mov al, byte [edi + 0x16]
add dl, 0
cmp al, 0x3c
xchg si, cx
xchg cx, si
jne 0x5c8091
xchg al, ah
xchg ah, al
je 0x5c9905
add cl, byte [edx + 0x3c578b16]
mov edx, dword [edi + 0x3c]
push esi
push edx
push esi
call fcn.005d7019
jmp 0x5c6314
pop edi
pop esi
lea ecx, [ecx]
pop ebx
push eax
pop eax
mov esp, ebp
js 0x5d5ed8
push esi
pop esi
jns 0x5cbff5
jg 0x5cc00a
clc
jns 0x5d5ed8
push esi
mov byte [esi + 0xba], cl
shl cl, 0x20
mov si, si
mov byte [esi + 0xbb], 0
xchg byte [ebx], bh
xchg bx, bp
shl ax, 0x20
xchg bp, bx
shr edx, 0x40
mov word [esi + 0xbc], dx
shl bp, 0x20
call fcn.005b7988
mov al, byte [ebp + 0xb]
push esi
shr bx, 0x40
mov byte [esi + 0xba], bl
shr cx, 0x40
mov byte [esi + 0xbb], al
shl ecx, 0x20
shr dl, 0x40
mov word [esi + 0xbc], di
shl edx, 0x20
push 0x5d25bd
ret
call fcn.005d53fe
add esp, 4
mov bx, bx
jno 0x5ae8d6
jo 0x5cc076
retf 0x7806
jo 0x5ae8d6
xor al, 0xa0
test byte [eax - 0x78], dl
ror byte [ebx + 0x5e8b0446], 8
push edi
pop edi
mov eax, dword [ebp + eax]
lea esi, [esi + 0xc]
sub dword [ebx], eax
mov al, al
jmp dword [esi]
or dl, 0xc0
jmp 0x4a34d2d
call fcn.005e4496
mov eax, dword [ebp - 0x18]
jmp 0x5d0655
test al, 7
jb 0x5e9732
je 0x5e67f7
jne 0x5cd517
nop
cpuid
ret 0xe8c1
shr eax, 3
inc eax
push eax
push esi
call fcn.005bd913
mov dl, byte [edi + 0x3c]
mov eax, 8
shl dl, 1
call fcn.005e6771
and eax, 0xc768d17
test dword [ebp + ebx], eax
jb 0x5e8aaf
jmp dword [esi]
test eax, eax
jb 0x5c92ec
je 0x5d0661
jne 0x5cff31
pushfd
sbb al, 0x66
and ebx, ebx
and bx, bx
test al, 0x3f
jb 0x5c930d
mov cx, cx
shl dl, 0x20
jne 0x5d0661
je 0x5cff4c
mov dword [0xff8966d9], eax
mov di, di
mov eax, dword [esi + 4]
mov ecx, edi
push 2
add ecx, eax
push 0x77cdf7
push ecx
ja 0x5cce9c
jbe 0x5cff69
mov ah, 0x72
jbe 0x5cce9c
and eax, 0x66f639f8
cmp ebx, ebx
cmp bl, 1
xchg ecx, edi
mov ecx, ecx
xchg edi, ecx
mov byte [esi + 0xba], bl
mov byte [esi + 0xbb], al
push 0x5e8d1d
ret
add esp, 0xc
add edi, 2
shr al, 0x40
mov ecx, dword [ebp - 8]
mov edx, dword [esi + 4]
mov cl, byte [eax + ecx]
inc eax
mov byte [edi + edx], cl
ja 0x5becdb
jbe 0x5d067b
sahf
je 0x5d068b
jbe 0x5becdb
xchg byte [edx - 0x1a], bl
invalid
and eax, 0x24448fde
cld
mov edx, dword [esi + 4]
mov ebx, dword [esi + 8]
xchg al, dh
xchg dh, al
mov ax, word [eax + edx]
pop esi
or byte [esi + 0x66c686f0], al
mov eax, dword [eax + edx]
lea esi, [esi + 0xc]
test dh, 0x7d
add word [ebp + ebx], ax
jmp dword [esi]
jmp 0x5d0a44
push eax
call fcn.005d53fe
add esp, 4
cmp dl, dl
test edi, edi
jb 0x5bae81
je 0x5d0a9b
jne 0x5d0a67
pop esi
cpuid
ret
cmp edi, 0xffffffff
je 0x5d0a9b
jne 0x5d0a79
mov dword [0xc13b3f60], eax
jecxz 0x5d0a9c
shl ebx, 0x20
mov edx, dword [esi]
push 0
push edx
call fcn.005cdd65
add esp, 8
pop edi
pop esi
pop ebx
mov esp, ebp
shr edx, 0x40
pop ebp
shl eax, 0x20
ret
cmp word [ebp - 0x38], 0
je 0x5c69f9
cmp dword [ebp - 0x38], 0x840f0000
push edx
pop edi
invalid
jne 0x5d0aad
add dword [edi], ebx
sub eax, 0xc8458bcc
mov eax, dword [ebp - 0x38]
mov ecx, dword [esi]
ja 0x5e6ead
jbe 0x5d0abe
cpuid
lodsb al, byte [esi]
ret
jbe 0x5e6ead
invalid
mov bp, bp
pop ebx
mov esi, esi
mov esp, ebp
pop ebp
jne 0x5e1267
je 0x5d0c81
cpuid
nop
ret
je 0x5e1267
and eax, 0xd326ff7b
insb byte es:[edi], dx
call fcn.005bba09
add eax, 0x40eac0b5
mov al, byte [ebp + eax]
push ebp
pop ebp
lea esi, [esi + 0xc]
call fcn.005c8018
pop esi
mov bx, bx
pop ebx
pop ebp
ret
jmp 0x5d0cf4
push eax
mov dword [ebp - 0xb0], 0x42
mov dword [ebp - 0xa8], edi
mov dword [ebp - 0x120], 0x41
mov dword [ebp - 0x11c], ecx
mov dword [ebp - 0x118], edx
call fcn.005ffbd0
mov ecx, dword [ebp - 8]
or esi, esi
jae 0x5d0d2b
test eax, 0x830ff32f
loope 0x5d0d93
jae 0x5d7212
add byte [eax], al
and eax, 0x1d850f42
cmpsb byte [esi], byte es:[edi]
add dword [eax], eax
je 0x5d0d3f
inc ebp
pop esp
xchg ebx, eax
xchg edx, eax
je 0x5eb356
fidivr dword [ebx - 0x73]
and al, 4
push 3
push esi
call fcn.005cdd65
add esp, 8
pop edi
pop esi
pop ebx
shr ch, 0x40
mov esp, ebp
xchg cx, ax
xchg cx, ax
pop ebp
ret
inc ebp
or byte [edi], cl
test cl, bl
push es
invalid
sal byte [ebx + 0x468bf688], 1
add al, 0xc0
out 0x20, al
mov ebx, dword [esi + 8]
mov ax, word [eax]
mov esi, esi
shr bl, 0x40
lea esi, [esi + 0xc]
call fcn.005b7dd4
mov dword [edi], 0xff40edc1
invalid
mov edi, 0x5d840fea
invalid
xor eax, 0xe8c1665b
inc eax
xchg cx, bp
xchg bp, cx
jae 0x5d1901
jb 0x5d18f7
mov dh, 0xdf
push 0xffffffffffffff8d
jbe 0x5d1902
lea esi, [esi + 8]
mov ax, ax
jmp dword [esi]
mov esi, dword [esi + 4]
jbe 0x5d1908
mov eax, eax
jmp dword [esi]
invalid
test ebp, 0xee5d1a71
test ecx, ecx
jb 0x5e572a
jbe 0x5b0a86
ja 0x5d3675
cpuid
nop
ret
mov dl, byte [eax + esi - 8]
mov byte [eax + esi], dl
shr cl, 0x40
inc eax
call fcn.005b0a70
jmp fcn.005c4d73
jne 0x5c20a4
je 0x5d38bf
pop ds
je 0x5c20a4
pop ebp
ret
xchg si, ax
xchg si, ax
lea esi, [esi + 0xc]
sbb word [ebp + ebx], ax
xchg ah, dl
xchg dl, ah
jmp dword [esi]
js 0x5b5aa5
jns 0x5d72c9
xchg ebx, eax
int 0x7a
leave
jns 0x5b5aa5
mov dword [eax + ebp*8 + 0xd1c0], 0xe8c10e8b
inc eax
lea eax, [ebp - 0x180]
jne 0x5b97d5
je 0x5d72ed
mov esp, 0xfc3a20f
test dl, ah
and al, 0xfe
inc dword [0x30ff39c0]
je 0x5b97d5
add eax, 0x30ff39c0
inc esp
sbb eax, 0xe6820f00
mov al, 0xff
invalid
sub bl, 0
test bx, bx
jb 0x5e09cc
shl ah, 0x20
je 0x5daaf5
jne 0x5d96fa
sub dword [ecx], eax
sbb eax, dword [eax - 0x117f463a]
mov ecx, 0xffffe381
add byte [eax], al
add dh, 0xb9
sub dh, 0xb9
and ebx, 0xffff
jb 0x5e09e9
shl ebx, 8
push edx
pop edx
lea ebx, [ebx + 0x7e5c60]
test ebx, ebx
jb 0x5e09f1
je 0x5c3ea1
jne 0x5d9729
mov byte [0x3b80f5], cl
cmc
cmp byte [ebx], 0
je 0x5c3ea1
jne 0x5d9739
nop
cpuid
ret
cmp cx, 0x12c
jne 0x5b3fe7
je 0x5d974a
adc byte [ecx + 0x24], al
call 0xc79ed9
mov eax, dword [edi]
push 0
push eax
call fcn.005cdd65
mov ecx, dword [edi]
push 0x14
push ecx
lea ebx, [ebx]
call fcn.005c3f81
mov edx, dword [edi]
push 1
push edx
call fcn.005b0c8e
add esp, 0x18
js 0x5b33ac
jns 0x5d977d
pop ebx
cpuid
ret
jns 0x5b33ac
fadd st(6)
ja 0x5e6b16
mov di, di
jbe 0x5da000
inc ecx
cpuid
ret
jbe 0x5e6b16
sbb byte [ebp + 0x20e3c166], 0x66
mov dword [esi + 0xbc], ecx
jne 0x5ba7e2
mov bh, bh
mov ebp, ebp
je 0x5da022
and al, 0x16
xor byte [edi], cl
test byte [edx - 0x380001f9], bh
invalid
je 0x5ba7e2
invalid
push 0
push ecx
lcall 0x90a2, 0xf005da7
ret
jmp 0x5da7a5
push ebx
mov dh, dh
mov bp, bp
push eax
call fcn.005f4210
mov eax, dword [ebx]
add esp, 8
test eax, eax
jb 0x5ec8da
mov ebp, ebp
jne 0x5da7e0
je 0x5da7d0
wait
push eax
jns 0x5da792
shl ecx, 0x20
loope 0x5da7f3
pop edi
pop esi
mov ax, 0x1e
pop ebx
mov esp, ebp
pop ebp
ret
mov edx, edi
push 1
and edx, 0xffff
jb 0x5ec8f5
push ecx
pop ecx
lea ecx, [ebp - 0x40]
push edx
dec ebp
sar bh, 0xf2
mov edx, dword [esi]
add edx, 0x74
push ecx
jmp 0x5da802
push edx
push eax
call fcn.005f4f10
add esp, 0x14
test ax, ax
jb 0x5ec8fd
je 0x5c1ebf
jne 0x5da825
shr byte [edi - 0x14fc740a], 0xff
invalid
mov eax, dword [ebx]
jmp 0x5da828
push eax
call fcn.005d53fe
add esp, 4
mov ax, 0x20
pop edi
pop esi
pop ebx
mov esp, ebp
shr cx, 0x40
pop ebp
shl cl, 0x20
ret
and bl, bl
xor esi, esi
jb 0x5adf62
jne 0x5e6af9
je 0x5dab09
mov eax, dword [0xea840f5c]
mov edi, 0xdf340000
je 0x5e6af9
xor al, 0xdf
lea ecx, [ebp - 0x110]
mov dx, dx
push 0
push ecx
xchg esi, ebx
xchg ebx, esi
call fcn.005eb938
lea edx, [ebp - 0x510]
lea eax, [ebp - 0x110]
jmp 0x5dab34
push edx
push 0x5c9e3a
ret
lds esp, [ebx - 0x78991278]
ljmp 0x6c26
insb byte es:[edi], dx
cmp byte [edi], cl
add dword [esi + 0x70fffd91], 0xe995e903
jo 0x5b5a24
jmp 0x806db23a
fcmovbe st(0), st(4)
shl cx, 0x20
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov cx, cx
lea eax, [ebp - 8]
push 8
lea ecx, [ebp - 0x1c]
shr cx, 0x40
jne 0x5e7855
je 0x5dd8f7
cpuid
and ebx, eax
je 0x5e7855
add eax, 0x24448f00
cld
jmp 0x5dd904
push esi
call fcn.005c42ef
add esp, 0x30
test ax, ax
jb 0x5baef8
jne 0x5cbfdf
je 0x5dd925
mov ch, 0x58
mov al, byte [0xff6ffeb]
sub dword [ecx], 0x70fffe7d
add al, byte [ecx]
adc ecx, dword [edi]
sbb byte [edi], 0x7d
invalid
jmp 0x5dd926
push esi
jno 0x5c5657
jo 0x5dd932
add dword [ebx], edx
jo 0x5c5657
and eax, 0x38558b69
div ebx
mov dword [ebp + 0x30], eax
mov dword [ebp + 0x38], edx
jmp dword [esi]
cmp dword [ebp + 0x10], eax
mov di, di
je 0x5bf64c
jne 0x5de4ce
out dx, eax
arpl word [ebp - 0xc0014d1], si
jmp 0x5de4cf
push ebx
call fcn.005d53fe
cmc
cmc
add esp, 4
mov ax, 0xa
pop edi
pop esi
and word [edi], bx
push edx
and al, 0xf
adc dword [eax + ecx], 0x470fffd
nop
cpuid
ret 0x800f
fisub dword [ebp + 0x66]
shl edi, 0x20
shl dh, 0x20
push esi
pop esi
xchg bp, ax
xchg bp, ax
jmp 0x5be342
test eax, eax
jb 0x5d18df
mov si, si
je 0x5c47ce
jne 0x5df15f
xchg esp, eax
aas
mov al, byte [0xc0f0458b]
in eax, dx
inc eax
mov eax, dword [ebp - 0x10]
shr ch, 0x40
push eax
call fcn.005d53e7
add esp, 4
mov dword [ebp - 8], eax
test eax, eax
jb 0x5d1747
jne 0x5b690a
xchg bp, cx
xchg cx, bp
mov al, al
je 0x5df190
push 0xffffffffffffffd3
mov edi, 0xe8595153
cwde
or al, 2
add byte [ebx - 0x1c3e03b3], cl
and byte [ecx - 0x18], dl
pop edx
invalid
push ebx
push ecx
pop ecx
call fcn.005ffe30
mov ecx, dword [ebp - 4]
shl ebx, 0x20
push ecx
call fcn.005d53fe
mov edx, dword [ebp - 0xc]
push edx
call fcn.005d53fe
mov eax, dword [ebp - 0x14]
mov dl, dl
mov ecx, ecx
push eax
call fcn.005d53fe
mov ecx, dword [esi]
push 0xc
push ecx
call fcn.005cdd65
add esp, 0x18
pop edi
ja 0x5b6902
jbe 0x5df1d9
mov bh, 5
ja 0x5df254
jbe 0x5b6902
add eax, 0x5c389f49
add byte [eax + eax], al
add byte [esi + 0x62], ah
pop ebp
add byte [eax], al
add byte [eax], al
inc esp
add byte [eax], al
add ch, dl
push edx
pop ebp
add byte [eax], cl
add byte [eax], al
add byte [eax + eax], dh
add byte [eax], al
sbb ecx, dword [eax + 0x5d]
add byte [eax], al
popal
add byte [eax + 0x34], al
add byte [ecx], ah
add byte [eax], al
mov edx, 0
adc al, byte [eax]
add byte [eax], al
inc edx
add byte [eax], al
xor byte [eax], al
add byte [eax], al
xor al, 0x5a
pop ebx
add byte [ecx - 0x27], ch
pop esp
add byte [ecx], al
add byte [eax], al
add byte [eax], dh
add byte [eax], al
add byte [esi], al
in eax, 0x5b
add byte [eax], bl
rcr dword [esi], 0xa
sbb dword [ebp], ebx
inc esp
pop ebp
add byte [ebx + 0x481b2835], bl
pop ebp
add byte [eax], al
popal
add byte [eax + 0x34], al
add byte [ecx], ah
add byte [eax], al
or al, byte [eax]
add byte [eax], al
add byte [eax], dl
add byte [eax], al
add byte [eax], al
add byte [eax], dh
add byte [eax], al
add byte [eax + 0x41005dc8], bl
add byte [eax + eax + 0x30], bl
add byte [eax], al
add byte [eax], dh
add byte [eax], al
pop esi
test dword [ebx + 0x5e8b0446], 0x40efc008
mov eax, dword [ebp + eax]
mov ebx, dword [ebp + ebx]
shl esi, 0x20
lea esi, [esi + 0xc]
add dword [ebx], eax
jmp dword [esi]
xchg ebx, eax
lodsd eax, dword [esi]
push 0x5dfd7a
ret
add eax, 0xc768db4
xor byte [ebx], al
jb 0x5cd31d
jmp dword [esi]
invalid
push eax
call fcn.005cdd65
add esp, 8
pop edi
pop esi
pop ebx
mov esp, ebp
xchg dx, cx
xchg cx, dx
pop ebp
ret
shr dl, 0x40
pop ebx
mov esp, ebp
jne 0x5b3fe3
je 0x5e2333
and eax, 0xfc3a20f
test byte [edx + 0x34fffd1c], ch
stc
je 0x5b3fe3
xor al, 0xf9
jmp 0x5bd2de
push eax
mov cl, cl
shl ax, 0x20
push esi
shr ax, 0x40
shl esi, 0x20
mov cx, cx
mov byte [esi + 0xba], cl
mov edx, edx
push 0x5cf073
ret
mov cl, byte [ebp + 0xc]
jno 0x5bf4fc
jo 0x5e35df
bound ecx, qword [edi - 6]
or byte [edi], cl
adc byte [edi], 0xbf
std
jmp dword [0xe5c0502a]
jo 0x5bf4fc
and eax, 0xe5c0502a
and al, ch
inc edx
and al, 0xff
dec dword [ebp - 0x10b73]
jmp [eax + 5]
add byte [eax], al
cmp eax, 0x1b000000
dec eax
pop ebp
add byte [eax], al
inc ecx
add byte [eax], al
xor byte [eax], al
add byte [eax], al
add byte [ecx], al
add byte [eax], al
add byte [ecx], ah
xor byte [eax + eax], 0
add byte [eax], al
and dword [eax], eax
add byte [eax + eax], cl
add byte [eax], al
out dx, eax
add al, 0x5c
add byte [ebp - 0x60], bl
pop ebx
add byte [eax + eax], al
add byte [eax - 0x57], ah
pop ebp
add byte [eax], al
add byte [eax], al
cmp al, 0
add byte [eax], al
mov ah, 0xe3
pop ebx
add byte [0x5e892ff5], cl
add byte [esi], al
in al, 0x5b
add byte [edi - 0x27ffa2ef], bl
daa
push edx
call fcn.005c37f4
cmp dl, dl
add esp, 0x10
cmp ebx, 1
mov dl, dl
jbe 0x5c37dd
ja 0x5e3825
mov ah, cl
jb 0x5e37b1
mov ecx, dword [ebp + 0xc]
or si, si
dec ebp
or al, 0x66
or esi, esi
xor eax, eax
jb 0x5e5713
clc
jne 0x5d365b
je 0x5e3840
pushal
cpuid
ret
je 0x5d365b
xor al, 0x5d
jmp 0x5e3849
push ebx
push esi
push edi
push 0x2000
mov bl, bl
push 0x40
call dword [sym.imp.KERNEL32.dll_LocalAlloc]
mov edi, eax
jno 0x5eaf14
jo 0x5e386a
fcmovbe st(0), st(0)
add al, 0xad
jo 0x5eaf14
add eax, 0x9998e892
invalid
dec eax
jmp 0x5e43fc
push esi
mov esi, esp
xchg al, cl
xchg cl, al
pushal
mov dh, dh
mov eax, 0
cpuid
call fcn.005c466d
fcom st(3)
test ebx, ebx
jb 0x5b5a29
je 0x5d72bd
jne 0x5e4446
ja 0x5e43fa
popfd
popfd
xchg bp, ax
xchg bp, ax
push str.WFFreeMemory
push edi
call esi
shl ebp, 0x20
mov edi, eax
test edi, edi
jb 0x5b5a39
je 0x5d72bd
jne 0x5e446b
pop ebx
cdq
fdiv dword [edx - 0x73]
push ebp
invalid
lea edx, [ebp - 0x10]
lea eax, [ebp - 4]
push edx
push eax
push 4
push 0xffffffff
push 0
call ebx
add ebx, 0
jno 0x5e4488
cpuid
ret
jno 0x5c0831
add byte [edx], 0x89
in al, dx
pop ebp
ret
pop si
mov ebx, dword [ebp + 0x44]
jno 0x5c6b6e
jo 0x5e5724
salc
cmc
push ecx
jl 0x5e5734
jo 0x5c6b6e
add byte [esp + edx - 2], 0xff
ficom dword [edi - 0x113efdc4]
inc eax
pop ebp
add bl, al
invalid
pop ebp
ret
mov ecx, dword [ebp + 8]
mov eax, 4
stc
jne 0x5c2778
je 0x5e642d
nop
cpuid
ret
je 0x5c2778
fisub dword [edx + 0xf]
mov byte [esi], dl
sbb bh, bh
invalid
mov eax, dword [eax]
shl bl, 0x20
shr bx, 0x40
lea esi, [esi + 0xc]
and bx, bx
ja 0x5b64f8
jbe 0x5e6b31
cmp ch, bl
and al, 0x91
jbe 0x5b64f8
push eax
push ecx
jne 0x5c69e2
je 0x5e6ebb
imul ecx, dword [ecx + ebx*8 + 0x21840fcd], 0xfffffffb
std
push dword [0xc5e856b0]
je 0x5c69e2
xor eax, 0xc5e856b0
popfd
cld
dec dword [ebx + 0x39660c7d]
rol byte [ecx + 0x8c4], cl
add dh, dh
invalid
jmp 0x5e7856
push eax
jmp 0x5e7859
push ecx
call fcn.005bc5c4
add esp, 0xc
test al, al
jb 0x5bf417
jne 0x5e788a
je 0x5e7878
inc edi
invalid
xor eax, eax
jb 0x5bf430
pop esi
mov esp, ebp
pop ebp
ret
mov eax, 1
pop esi
mov esp, ebp
js 0x5c26fc
jns 0x5e789e
adc al, 0xda
in eax, dx
and ecx, dword [edi]
mov dword [eax - 0x52], ebx
std
invalid
jns 0x5c26fc
fnstenv [edx - 0x78]
pop es
pop ebp
add byte [eax], al
add byte [eax], al
add byte [eax], dh
add byte [eax], al
add byte [ebx + 0x30005afb], bh
add byte [eax], al
add byte [eax], dh
add byte [eax], al
add byte [ebx + esi*8 + 0x5b], al
add ch, dh
pop esp
add dl, cl
outsd dx, dword [esi]
pop ebx
add byte [eax + eax], bh
add byte [eax], al
cmp al, 0
add byte [eax], al
push es
in eax, 0x5b
add byte [edx + 0x77], bl
pop ebp
add byte [edx], cl
sbb dword [ebp], ebx
in eax, 0x78
pop esi
add byte [ebx + 0x481b0adf], al
pop ebp
add byte [eax], al
popal
add byte [eax + 0x34], al
add byte [ecx], ah
add byte [eax], al
or al, 0
add byte [eax], al
add byte [ecx], dl
add byte [eax], al
add byte [ecx], al
add byte [eax], dh
add byte [eax], al
add bh, ch
add al, 0x5c
add byte [esi], bh
mov dword [0x7740005e], eax
pop ebp
add al, bl
cmp eax, 0x229b26ff
shr edx, 0x40
lea ebx, [ebx]
mov eax, dword [ebp + 0x44]
js 0x5c29e0
jns 0x5e792b
cpuid
nop
ret
jns 0x5c29e0
xor eax, 0x40edc1eb
mov edx, dword [ebp + 8]
shl dh, 0x20
jmp 0x5e793d
push edx
call fcn.005d53fe
mov eax, dword [ebp - 0x10]
mov ecx, dword [esi]
push eax
push ecx
call fcn.005cdd65
add esp, 0xc
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
sbb ch, 0x52
jmp 0x5e8ab3
push eax
mov bx, bx
push 4
push 0xffffffff
push 0
call ebx
test eax, eax
jb 0x5dc88a
je 0x5e8b2b
xchg dx, bp
xchg bp, dx
jne 0x5e8add
push eax
js 0x5e8ad4
inc ebp
mov eax, dword [ebp - 4]
shl ax, 0x20
mov ecx, dword [eax]
mov dword [0x77c4bd], ecx
mov ecx, dword [eax]
test ecx, ecx
jb 0x5dc896
je 0x5e8b09
jne 0x5e8b00
push ds
adc edi, eax
inc ebp
clc
add dword [eax], eax
add byte [eax], al
mov dword [ebp - 8], 1
mov edx, edx
push ecx
pop ecx
push eax
call edi
xchg di, si
xchg si, di
mov eax, dword [ebp - 8]
test eax, eax
jb 0x5dc8a0
jne 0x5c088f
je 0x5e8b2b
sub eax, 0x9368b806
ret
push str.wfapi.dll
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov edi, eax
test edi, edi
jb 0x5dc8a9
je 0x5d72bd
jne 0x5e8b4b
xchg edx, eax
inc esp
push str.WFQuerySessionInformationA
jmp 0x5e8b51
push edi
call esi
mov ebx, eax
js 0x5e4432
jns 0x5e8b63
fistp qword [edx + 0x2f]
stosd dword es:[edi], eax
jns 0x5e4432
fld dword [edi + ecx - 0x79]
adc byte [eax], al
add byte [eax], al
jbe 0x5e8b75
fld xword [ebx - 0x78]
ror byte [ebp - 0x7699f78a], cl
leave
mov dl, dl
lea esi, [esi + 8]
mov cx, cx
jmp dword [esi]
mov ecx, dword [ebp + 0x10]
lea edx, [ebp - 8]
jmp 0x5e9401
push ecx
push 0
push 0
jne 0x5e3803
je 0x5e9413
aas
mov ebp, 0x840f69b7
ljmp 0x5be3
je 0x5e3803
mov ah, 0xe3
pop ebx
add byte [esi + 0x5e892f6e], dh
add byte [edx + 0x7c], dl
pop esp
add byte [edi + 0x25005d11], bl
ror dword [ebx - 0x3b7e03bb], 1
sbb byte [eax], al
add byte [eax], al
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
add eax, 0x69158bcb
lds esi, [edi]
jmp 0x5e973b
push edx
mov dl, dl
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov ecx, dword [ebp + 8]
test cx, cx
jb 0x5de7a9
je 0x5d96e0
jne 0x5e975d
nop
cpuid
ret
ja 0x5b1b84
jbe 0x5e9767
sub ch, byte [edi + ecx]
xchg byte [edi], dl
test ah, bh
invalid
jbe 0x5b1b84
fmul dword [edx - 0x7b]
ror byte [edi], 0x82
fbld tbyte [esi - 0x7bf00004]
push ss
add byte [eax], al
add byte [esi - 0x77], ah
push dword [ebp + 4]
xor al, 0xa
mov byte [ecx - 1], bl
invalid
test edi, edi
jb 0x5c2ab0
je 0x5dd806
sub bh, bh
push dword [ebp + 3]
jne 0x5eaf27
push es
jno 0x5eaf1f
jmp fcn.005e96fb
ljmp 0x44e:0x8bc08926
invalid
xor eax, 0xf689669f
mov eax, dword [esi + 4]
mov ebx, dword [esi + 8]
mov ax, word [eax]
js 0x5d69b1
jns 0x5ec917
cpuid
ret
jns 0x5d69b1
add eax, 0x24448f62
cld
jmp 0x5ed37a
push esi
mov edi, eax
call fcn.005d53fe
mov ecx, dword [ebp + 0x1c]
push ecx
lea ebp, [ebp]
call fcn.005d53fe
add esp, 0x18
or bl, bl
test edi, edi
jb 0x5c5641
je 0x5e6418
xchg cx, bp
xchg bp, cx
jne 0x5ed3b1
aam 0xce
movsb byte es:[edi], byte [esi]
push ebx
call fcn.005d53fe
add esp, 4
mov ax, 0x15
pop edi
pop esi
pop ebx
mov esp, ebp
jno 0x5e6412
jo 0x5ed3d2
add ebp, dword [ebx - 0x12]
jo 0x5e6412
invalid