; ; +-------------------------------------------------------------------------+ ; | This file is generated by The Interactive Disassembler (IDA) | ; | Copyright (c) 2007 by DataRescue sa/nv, <ida@datarescue.com> | ; | Licensed to: SRI, 1 computer, std, 05/2007 | ; +-------------------------------------------------------------------------+ ; ; ; +-------------------------------------------------------------------------+ ; | This file is generated by The Interactive Disassembler (IDA) | ; | Copyright (c) 2007 by DataRescue sa/nv, <ida@datarescue.com> | ; | Licensed to: SRI, 1 computer, std, 05/2007 | ; +-------------------------------------------------------------------------+ ; ; Input MD5 : 23910D65277564CF8B3E227FCADBDC20 ; File Name : u:\work\23910d65277564cf8b3e227fcadbdc20_unpacked.exe ; Format : Portable executable for 80386 (PE) ; Imagebase : 31500000 ; Section 1. (virtual address 00001000) ; Virtual size : 00005000 ( 20480.) ; Section size in file : 00005000 ( 20480.) ; Offset to raw data for section: 00001000 ; Flags E0000080: Bss Executable Readable Writable ; Alignment : default .686p .mmx .model flat ; =========================================================================== ; Segment type: Pure code ; Segment permissions: Read/Write/Execute UPX0 segment para public 'CODE' use32 assume cs:UPX0 ;org 31501000h assume es:nothing, ss:nothing, ds:UPX0, fs:nothing, gs:nothing dd 1400h dup(0) UPX0 ends ; Section 2. (virtual address 00006000) ; Virtual size : 00003000 ( 12288.) ; Section size in file : 00003000 ( 12288.) ; Offset to raw data for section: 00006000 ; Flags E0000060: Text Data Executable Readable Writable ; Alignment : default ; =========================================================================== ; Segment type: Pure code ; Segment permissions: Read/Write/Execute UPX1 segment para public 'CODE' use32 assume cs:UPX1 ;org 31506000h assume es:nothing, ss:nothing, ds:UPX0, fs:nothing, gs:nothing dd 0C272D637h, 0AB57AF50h, 69A9AF7Fh, 561004Fh, 0B4E8BCDBh dd 5051B8D9h, 9CF11C7Ah, 0CDEF4509h, 7032FADh, 630F513Ah dd 0BC15D98Bh, 525E80F1h, 2DD9A05Bh, 9BADAFA4h, 0DC45BDAFh dd 0A8D36441h, 0AC15D9AFh, 5573D45Fh, 5825DB06h, 0E064D3Ah dd 48E32DE9h, 15DD00C0h, 0F85A00C4h, 0FAE5940h, 0E4538EB7h dd 426F9038h, 5C94666Ch, 0D5DD9963h, 0AFBDAE9Dh, 0DA2E8FE7h dd 0D8E45D04h, 5070D046h, 0D3101011h, 0BE2C78A9h, 6149303Ah dd 4CEBE9A7h, 4B038C8h, 6E10DA60h, 9CBBC958h, 0B0816AA6h dd 569C6600h, 2F4E731Ch, 1EE6BFE0h, 593A714Ch, 61056738h dd 0D4DD096Ah, 0AF3D1B15h, 6F702B5Bh, 80074A54h, 0AB15D8B0h dd 0A29BAB40h, 4F118607h, 54B08070h, 0AAAA0759h, 64C38A8Ch dd 5E793819h, 0B08840B1h, 0E62DEB66h, 3A64323Ah, 38C7440h dd 3DCAD15Bh, 3614A6ABh, 50525D97h, 505EED38h, 0B136C4B4h dd 4946B6E7h, 8D76718Eh, 25D9AC25h, 0BDA261B0h, 7EC83492h dd 0DB7453BAh, 4940F465h, 0EFB1EFEAh, 0AF072698h, 4DDB0386h dd 2C384DCCh, 0EB0DEABBh, 59029813h, 4883AF63h, 63DC253Ah dd 2CFF3CD7h, 561038AFh, 0C8F01619h, 6327B452h, 63F8384Fh dd 98550304h, 8E34B4B7h, 67270450h, 58609C8Fh, 77DC5F16h dd 7680EDD0h, 65D55F61h, 95EBE7EBh, 5835D3B9h, 50578016h dd 0C0A0EC6Ch, 915E89CAh, 0F5C4106h, 6C711600h, 0B6BB23h dd 41A10C4Fh, 0E08C47E3h, 0BC5C9Bh, 283E5A4Eh, 0A1DF26A8h dd 956F171h, 38D5D975h, 0BCEE5F43h, 0FE47E464h, 0F25490D3h dd 70B84CC2h, 2B50A3ACh, 38383A52h, 90490514h, 1A47C1CEh dd 63E0F052h, 0D75D7B23h, 2D535246h, 3E51F76Dh, 380D2613h dd 38B626CFh, 0E79C6A07h, 3C9D982Bh, 0D4B04B0Ah, 7A203A26h dd 23185E3Ch, 3084C6A4h, 0B15A0E98h, 34DE6223h, 50D42AC7h dd 0E66FF278h, 18E20DCBh, 0E23C6C08h, 0BFC840ACh, 0B23CF998h dd 5F8C5137h, 0EF5FC000h, 40B92E2Dh, 0FC38AA56h, 8378905Dh dd 968D498Bh, 50785899h, 5C1E54B5h, 0CE9358F4h, 952A098Bh dd 3475A97Dh, 8B4C8613h, 758E107Eh, 0E8F4C7B4h, 5D8E1411h dd 0ECFC7F49h, 4B8E0014h, 66A5C340h, 0C4E74E33h, 0D171C75Dh dd 0EFBEE62Eh, 0B82CFCA9h, 4674F5D0h, 38755650h, 0E0224C02h dd 4CCDCF75h, 0C6A44226h, 0B3EA4B1h, 54BF4806h, 982C3A03h dd 8A1B12Bh, 0EE0604E2h, 0DEBC2B99h, 0B104A21Ch, 0CFB974C0h dd 36310684h, 2874C73Eh, 0D218BD9Fh, 0E252C646h, 0A4455CA8h dd 0DC8F5236h, 0F42A41C9h, 0DB0EF858h, 0A30FA415h, 0BB03FA4h dd 0D3369399h, 7064CBCh, 700A7C38h, 0EFE988E4h, 55E05D7Dh dd 424838A8h, 0AC90D512h, 74B5A9Bh, 5E440A24h, 381B24A8h dd 0A4E309B8h, 0A0DBDFA6h, 6D24A6D5h, 3A001DDDh, 3BFC1170h dd 0AFA6929Fh, 0B85FAC05h, 0FC00B4E9h, 8C5FF678h, 0A05EC6CAh dd 0A805B652h, 0C9FDE759h, 0B4DC50FDh, 12A4DF57h, 27D10E0Fh dd 48D730ACh, 31C05DDBh, 50AC354Fh, 0AE899203h, 6C112FEBh dd 38915307h, 18DB2528h, 28DB64h, 0F0A41DD9h, 65822A94h dd 0C18B887Eh, 9325A003h, 0C30E45C7h, 1701BB51h, 0BD24BC42h dd 8C8DE25Dh, 14871408h, 5E2543A2h, 5B721059h, 527D3DAFh dd 1DDD73BBh, 480001A8h, 7E2B4F18h, 7A61C780h, 0D50D9054h dd 0BD55258Bh, 3AA88690h, 3BBB0853h, 4960AA64h, 8DAB24FBh dd 0A005093Eh, 1240EC2Dh, 0A06E1524h, 36BE3B01h, 30062EBh dd 65AFE861h, 0AA2AEB34h, 0F1119DBEh, 7FFBE263h, 61070758h dd 0AB2F48A0h, 24976BBCh, 0BB863655h, 0A68384Bh, 9B45838h dd 0E9E71CBBh, 0BB55AC5Eh, 0E3545857h, 0A92859DBh, 0C25912D4h dd 30030101h, 37D3615Fh, 31393C7Bh, 98C25DD9h, 0B9FC8D1Dh dd 0E1FF3D5Ah, 978E243h, 0FEC9BD7Dh, 7424AF2Bh, 9CE63AA9h dd 65E3D06Ch, 5CA187h, 5C519063h, 8048CED1h, 802B940h dd 0EC70490Dh, 7F3FAE89h, 58740CA7h, 742CDB26h, 0D5A66344h dd 36472EAFh, 0AFAEB074h, 0C94A3AEFh, 0D0A9A709h, 44D83192h dd 0A76B164Eh, 74D0B92Ch, 3F2A506Bh, 0E2C8868Bh, 7E14B9E7h dd 7FC0A0Fh, 8B535306h, 98368B49h, 42237F5Ch, 8CF58DE1h dd 4900A0h, 0D3FA5006h, 0FC8D3C91h, 843F0627h, 3EDF191Dh dd 0AA38DF3Bh, 97AFA05Ch, 0E631EB58h, 75CD033h, 0D30CD42Bh dd 0EA41B0AEh, 3159332Fh, 6FD04725h, 46492460h, 268DEFD8h dd 5724AC4Bh, 0DB5C10DBh, 254F60E8h, 96DB2F52h, 0FCBDF60Bh dd 3F64C06Bh, 2C39359Ch, 77E636E5h, 0D05A5A25h, 0D5E50BA7h dd 4A864Fh, 0E8572511h, 4451262Fh, 0CDEE6983h, 1585018h dd 0CA7414DDh, 649D0C71h, 88A72B31h, 953904Bh, 2829120Fh dd 8C99EA40h, 3A887040h, 1150BCD1h, 84B0E091h, 0A4670D68h dd 0E37538BAh, 51A5041h, 48B03A6h, 39BB9938h, 1A5BBCCFh dd 36882DBFh, 7541703Eh, 862A0B74h, 7D6B6C09h, 5C0901E0h dd 0A8478AFDh, 9C89CD0Ah, 0CC65C5D0h, 4BE16DD2h, 8C980A63h dd 17313039h, 0CB46569Dh, 9A0AF0AEh, 9C0D6B44h, 0F1299492h dd 8FBE6450h, 63F1FF90h, 7BCE50E9h, 22916B97h, 9B91DB52h dd 0EB26A727h, 8F1797Bh, 73975348h, 6D4324FCh, 7DE33D73h dd 3A4122A1h, 0F4B8A8CDh, 9FAD94BBh, 561AC6B6h, 41770C97h dd 3EB44EB4h, 45C434A2h, 535BD838h, 8B09D438h, 6CEC867Ch dd 0B329036Ah, 38633A0h, 40B0F827h, 69F9EDDEh, 0AA92B312h dd 7516015h, 0CE4D3D49h, 8086E6BDh, 0B331354h, 86EA4BEDh dd 56A78B79h, 0D9D03838h, 4293D44Dh, 43778B3Dh, 9044BCB0h dd 2671A2A9h, 626E691h, 522B0303h, 0D0416A51h, 70F3FC00h dd 40A06F67h, 3724515Ah, 482DDCFh, 30F3BCA2h, 92334716h dd 9ACBF1Bh, 0AC99AEF3h, 0FB060103h, 0B6A0B44h, 6DDB86Ah dd 0D78F4B76h, 530E4ECBh, 0E24092DCh, 121C820Eh, 2006B51Dh dd 0ADEEB85Ch, 0DD9A4CDh, 0AF5562BCh, 544FAF75h, 0DCF3936Ah dd 0BC4BAD59h, 14B72413h, 99D49CDAh, 0C0008F24h, 67FD4B76h dd 0DF7712BAh, 0B9C0FF20h, 5C343546h, 730FF024h, 0A8F6EF27h dd 284F8869h, 3238E141h, 781B594Ah, 95DADCCh, 3B2BB09h dd 13150F9Fh, 0C87C80E7h, 62051C0h, 2D633CCDh, 0E0EA9DE4h dd 526E4186h, 0D2D6865Bh, 0D00F6029h, 8043194h, 0F3889C41h dd 2CC4B0C0h, 963C60F0h, 4A34F35Eh, 2E76DC8h, 1E9F263Fh dd 5779CC15h, 14455473h, 0C638EE46h, 0E3DE1A87h, 0E2FB434Dh dd 195B0F4Dh, 5D3D2E97h, 6539C9C2h, 40C01438h, 92BE9B1Fh dd 3A631083h, 2F41E0F1h, 41346AD0h, 0F1F9ADBBh, 0D93400BAh dd 0DA55775h, 13F1B037h, 0AA6FAFA3h, 0ABF368DCh, 132A8F33h dd 2C38AC6Ah, 145A370Bh, 24745497h, 0C049515Bh, 82343C51h dd 0CC0496Ch, 4B45808h, 53706253h, 70181C00h, 14706253h dd 5371B86Ch, 9606462h, 0D3B61D69h, 6924D20Fh, 0F60B7838h dd 0EA705DE4h, 0BE1C343h, 5D384856h, 747E9240h, 5C5A201Ch dd 0F96753B8h, 4F3BB177h, 51A438BCh, 3E197EF0h, 5849E737h dd 5AA37F64h, 543C4BF8h, 7BB89969h, 70C67283h, 6C26462Ch dd 400A2ED9h, 0D868A307h, 4B5DC443h, 0B7BB552Fh, 0F6AFBFD3h dd 6A11655Fh, 0A0054B5Bh, 0E1C05D2Eh, 0D1525846h, 0F0130703h dd 845DAF94h, 54DA4B26h, 245A6C6Eh, 675D6C54h, 8C697B0h dd 165A6EADh, 9A06B4Ah, 0D333B522h, 922724A3h, 17A8FB18h dd 40309E67h, 0E8955469h dd 0FFEB1FD3h, 16539285h, 0EB5C7E9Fh, 0C903353Ch, 0D139C5Eh dd 0C240AFD8h, 6E221BD3h, 2A75030h, 3DCE7646h, 9D213840h dd 0F4402590h, 966BC499h, 9708D3A8h, 0CC246C71h, 3FDEED08h dd 55FC34B6h, 0F2572448h, 64DBB3BBh, 6DD71B6Bh, 6AAC0511h dd 0BB6A0D7Ah, 2A567007h, 0AA0587AFh, 0FE6EE122h, 579B11E8h dd 9ADBCF0h, 659C91Fh, 0D090BBEBh, 777055F4h, 47BC971Ch dd 5B665F82h, 0D1BCC053h, 7A42ACCDh, 385C03D2h, 90D54DDCh dd 43ABC463h, 0B04C6BF6h, 29225FEDh, 88EAC0F6h, 59D8F2A8h dd 0D82F1FD0h, 1BA0D751h, 15DA010Fh, 15D8705Bh, 888B62AFh dd 2752AA6Ah, 0B67E8F4Fh, 0EA0D6861h, 5B0DD875h, 0B7284464h dd 0EC5143BDh, 37F1E75Fh, 0A843AF09h, 0A7C9D977h, 28653AEh dd 0D093AEC1h, 0ED22AFABh, 3CEA300Eh, 26326B09h, 2B7613D0h dd 65DB90DEh, 9D083863h, 1FDD3C25h, 0E85AD16Eh, 0BD590DC4h dd 5BD36648h, 257C2540h, 0F375E35Fh, 2B385C81h, 906DD990h dd 62E5ECD3h, 8753AFD4h, 39ABD113h, 0F4FA3DA2h, 0D70FCF6Ch dd 531CAF0Dh, 232B08E3h, 372DF28Bh, 7FDC530Fh, 2D07C006h dd 81EC87ADh, 0AEAF54A3h, 0D82F6CCCh, 8B5E3BA7h, 0DBBFBB38h dd 8CC96B74h, 0C3E06EFAh, 0F0F395CDh, 77FCE07h, 7CA6B4CCh dd 9A82C44h, 45717843h, 0AF4A45EAh, 0BE25E331h, 65C188C8h dd 0D577F17Ch, 0CE83EE83h, 28C96062h, 63FE20D4h, 32B0FC81h dd 98D31E92h, 0ED2493DFh, 572F0030h, 6DBD27D8h, 5FEB6160h dd 6751535Bh, 38E0A170h, 40EC0BF4h, 0C7EEF841h, 3C00FF51h dd 5BD096FFh, 532F2B8Fh, 54FEA56h, 7BD6306h, 0B6887DD9h dd 4019DF5Dh, 5CF560E9h, 5C93DBE1h, 9DA4AD4Fh, 8B650544h dd 0A69C308Dh, 3A525Bh, 0F90BC868h, 0A7DAE87h, 50C68255h dd 41594824h, 60302FF7h, 550EEBA7h, 42934449h, 533CDB23h dd 653ED7B1h, 2475ADD1h, 4E82055Dh, 97E64E40h, 567401Eh dd 48741C66h, 4AF58486h, 2E65BD67h, 47E01841h, 4E8B5EBDh dd 0BF441B09h, 0BBCF55C3h, 74E716A2h, 39255DD3h, 63CD8DBBh dd 385EC522h, 0F15B016Fh, 1BC1E6B1h, 45407CD0h, 6842405Ch dd 3BE3EEDCh, 82645860h, 0B7EE501h, 648F7C7h, 48AC40h dd 0D59664E2h, 6D066EDDh, 3C7A8924h, 0AACBF9CFh, 1E364448h dd 81787048h, 53CD3DDBh, 55F0E28h, 0FA9E870Ah, 1D06DD19h dd 4B7C067Eh, 39E99C0h, 77700506h, 86229866h, 25A018Ah dd 1629745Ch, 0D5C4CC3h, 3851787Dh, 4D554E7Ch, 0BDB81ECFh dd 5F8B8E7Fh, 6CE2C4DEh, 1E660C4Eh, 4E5DA729h, 463CA5A1h dd 471C80E8h, 2A8EE61Bh, 88616538h, 0E12D7722h, 559740E3h dd 7AD30070h, 0EBBB3444h, 0DD172DE2h, 3514E24h, 6FBF06ACh dd 241F252Ah, 0B0E5AF4Ch, 0CB63B815h, 5FAFA25Bh, 0D058024Fh dd 4C650900h, 26FC1666h, 0E8DDDEDh, 68E7EA28h, 7805F06h dd 0C845397h, 0FD98B422h, 9084567Ch, 0CC8CF888h, 694CDE17h dd 0D8B4C4B0h, 34BC20B8h, 73C19C49h, 68A418A0h, 846CB8E0h dd 0EF5A2A64h, 0F334EE8Bh, 0A5203473h, 98E448DBh, 5F81B06h dd 3950B900h, 5EE03C47h, 445B4DFBh, 654864DCh, 6FD3F045h dd 61F25E3h, 52FB68D6h, 0EA655628h, 0FDD43017h, 3AD8A5C4h dd 7738B533h, 63342620h, 0D348F1D4h, 0A8D71D64h, 90D353B0h dd 591FA355h, 0CF4673Ch, 0D9409893h, 3E23606Dh, 0CA03826h dd 445E765Ah, 0B1BC9437h, 3120B168h, 160B106Eh, 0E8702A63h dd 0DB34FBE6h, 9669BE51h, 84ECC472h, 2A40A359h, 0F157B324h dd 577FD6B9h, 0B8290ECCh, 0E90CAB50h, 2CA4076Dh, 304F95AFh dd 73E75297h, 75A54456h, 0EBD402F0h, 0B01F0D5Bh, 40EFD63Ah dd 0C6438F7h, 0D1B21101h, 67246F40h, 43AB46C3h, 0A8EB5ABEh dd 8153C8C6h, 0BEA40302h, 88267F37h, 6D03EC03h, 73BBE168h dd 5FE9FF4Bh, 75629E09h, 302148D8h, 0B2D8369Bh, 0C69D7635h dd 9CEBFD2Dh, 0EB167CD4h, 98477E91h, 0A24570E9h, 33420EBBh dd 1C371B77h, 6134B700h, 360BEB96h, 0AD6B2818h, 98F0FB7Ch dd 5770DC0Bh, 45BB5C18h, 0B46DC11h, 93599D30h, 0E560E852h dd 635CEE08h, 90644F32h, 2338E10Ch, 0EE6A433Ah, 8418991h dd 5C38A107h, 6876570Eh, 12475199h, 0FF4C5416h, 4B605593h dd 48283944h, 0EF4B2787h, 0A9DBBDA4h, 0DD05B105h, 65055E27h dd 3A42DC83h, 5533A658h, 575C5F23h, 4297D370h, 0CADD4107h dd 0C13893D5h, 0A5660C7Ch, 0C02DEBA8h, 10AE744Ch, 0B0DC210h dd 4226AF3Ch, 96C4B72h, 5E2640B7h, 28444468h, 78EA536Ah dd 6D8E8832h, 9D3BF348h, 0B87300D8h, 219A9566h, 0EE045D83h dd 0E5E71050h, 265B0BDBh, 0E0DB0912h, 0F663AFCDh, 66E65911h dd 3E58C3CDh, 73135800h, 0B08510D3h, 8E6538C7h, 0B81D7B72h dd 0B11AE54Bh, 0A9AE2C2Dh, 0D158BDA6h, 3194CDA9h, 0A75E2327h dd 0C82F3E2Ch, 3422CE6Bh, 5738D792h, 38C77D4Ah, 9EB57153h dd 20C9E63Ah, 45689850h, 0F26E9FABh, 415466FEh, 4017DB76h dd 7678506Dh, 2690F03Dh, 0A8354C27h, 42214975h, 0E8F4316Ah dd 0B04417F6h, 40789A58h, 6AE3332Bh, 5E585C42h, 60CC7B38h dd 0ED08D945h, 3073B196h, 0CF713E91h, 0D782E706h, 5750128Eh dd 81BB5985h, 0FF68A54h, 408A7061h, 5D2D5858h, 917F3DC0h dd 4B023B54h, 0EB57DB6Ah, 33B24A7Dh, 2EDD5664h, 665CA458h dd 0D22D5EC3h, 0ADB01CA9h, 2DE6A4D1h, 8D5D364Ah, 76035718h dd 3CDA9440h, 655491ADh, 0A7005817h, 40F046B8h, 664D707Fh dd 5799D100h, 101A449Ch, 41CD9DDh, 4524A44Ah, 0D38E7E70h dd 97584940h, 237AD116h, 0DBE7E5FEh, 0A7826306h, 5CD7549Fh dd 7C12F95Ah, 8382D5E0h, 5B475EAFh, 900DBF8Ch, 132E505Ch dd 6507ACEDh, 88DD3E4Eh, 7C24DC5Dh, 1491Ah, 73CB6B08h dd 451CF533h, 0E5E0860Fh, 140BD922h, 1A6BF2A8h, 0BC07A806h dd 1273ED2Ch, 36D332BBh, 8DCB7610h, 3561481Dh, 0EE792551h dd 74EA12AEh, 7EAEB87Fh, 647AA954h, 4B25532Eh, 26EF67AFh dd 42B80E5Bh, 5700808h, 51E07F60h, 56594A93h, 0A3802D70h dd 0E6661770h, 0CAB475F5h, 0D3515088h, 0C7DE3C6Dh, 72B4B89Ch dd 0A8B86B57h, 5A67576Ah, 4AFA5B00h, 0E230EC75h, 8051E7A0h dd 0A489B323h, 0AC5F0625h, 93498980h, 287C778Bh, 0DF1355D3h dd 5961107Fh, 660F5EC9h, 0E2931420h, 0FF49FABAh, 538B1206h dd 43783C42h, 0B4F206B4h, 7FBD54C3h, 0D6DDB825h, 0D7FE5BABh dd 0BAB977B6h, 0AC1DDB45h, 0DAEC1656h, 5A4506ADh, 623A862Ch dd 0D3F61944h, 0E3A17843h, 0D540E6A8h, 0C61D371Fh, 2C286284h dd 0ED5F8425h, 2C4DE968h, 4150F5ECh, 80633540h, 8040D7E3h dd 19ECD94Ah, 38907A31h, 257DF51Ch, 90F8E5B0h, 87921183h dd 0CDADDC20h, 0BB83584Fh, 0B8689ECDh, 3EBB312Bh, 3060EE33h dd 56CD2D0Bh, 0F4F5363Ah, 393F125Fh, 0AD984434h, 0D33A405Ch dd 0F4B08F56h, 4A93ED2Dh, 0E7BEEE5Fh, 3F3C1631h, 799D740h dd 0A43F036Bh, 686912E7h, 9917B4Ah, 0A9E99353h, 0C06914DAh dd 0BB5602BDh, 98984F73h, 59BA8813h, 3053BB98h, 103FBF58h dd 0FE9344FBh, 0D450DA68h, 5BE7DE1Bh, 31DB1A5Fh, 9888DA03h dd 86FD8E6h, 842A0AE4h, 0D8E34C75h, 0EDEE0957h, 1E17FB2Dh dd 5B2C0931h, 562F2A55h, 0BED3A3DAh, 0B44BCE31h, 5F115A8Bh dd 161B110Ah, 7DE58578h, 19320B1Fh, 0E47807D0h, 2A5E4858h dd 25A8C212h, 0B365943Dh dd 440E427Ch, 9F3B773Ah, 0DDCF4C59h, 4E5D14F8h, 28C59F48h dd 83920E08h, 1549474Dh, 6ED1336Bh, 6509717Ch, 0CACC38D5h dd 0F8664CF0h, 2093886Bh, 0C165613h, 5BE45960h, 2B1692DDh dd 17DB3634h, 5C152E01h, 0E4373B26h, 3A512857h, 360C1AB3h dd 72FFED4Dh, 28443285h, 0B4C61DE1h, 73AC63CAh, 26FB4D35h dd 818D8FCBh, 0DB4CC4D4h, 4C707C1Eh, 0B9EDB51h, 465D7A70h dd 0FE3BF61Bh, 0EC7D1259h, 9E1EB43Bh, 7854C041h, 0B0302438h dd 0BD6C5670h, 639DD085h, 3B4CBAEAh, 0F0894C48h, 956FE958h dd 74772Eh, 0E4AF2237h, 61331C74h, 6C8CCB34h, 66383870h dd 0FDFC735Ch, 4361AFFCh, 0E73B09FCh, 6C50B798h, 100274D0h dd 2381C7E1h, 6009083Dh, 467E3B4Dh, 28249Ch, 0D0DB9C56h dd 4C3C2B4h, 8CC74478h, 0F24A76Eh, 7B9D5D7h, 9E70414Fh dd 3E30F531h, 88400E4Dh, 505D2DC5h, 70F0730h, 0D90F680Eh dd 0F8D18A46h, 0CA9135A0h, 0A03C72C0h, 0F2D4EED9h, 15273CE5h dd 522C2ED9h, 746D2420h, 0C22C2E79h, 926894D1h, 6B58115Ch dd 0DCD1170Ch, 89DBB0D9h, 7E3D0D4Ch, 0F031085Dh, 0E5542840h dd 7439E118h, 2E33223Eh, 0CC8A13A8h, 0B0255307h, 685AF9D2h dd 15FCC520h, 30D03476h, 12706A20h, 9F4699F0h, 8B625823h dd 4C7CB553h, 98847658h, 723B7C31h, 5C1219C8h, 0EDBAE08Eh dd 5F850370h, 428E4054h, 0DB7377h, 476000B2h, 7561497Ch dd 296C436Ch, 787A8203h, 0E5A891E1h, 0C438A435h, 12AE874Fh dd 54A82643h, 79BB533Ah, 0D0544348h, 0AD42721Eh, 96D3733Ah dd 0BB6F8560h, 0FE40FCC9h, 1C8121AAh, 8AF44923h, 0B0B83E97h dd 0EC7CA257h, 6158B019h, 5BC0F4E4h, 4444572Bh, 5FA5E48Dh dd 55BCC0C2h, 6A94E893h, 189299E5h, 4094C490h, 0A8468095h dd 0D9A16213h, 0BCA3A035h, 7FE81FE1h, 0ACB8D87Dh, 0B4D5970Ch dd 57D9FD16h, 434270ECh, 941CAB0h, 311D332h, 5C42B464h dd 34B70D56h, 0F2BD7DC9h, 2424482Dh, 0AC0DD913h, 0EE8F581Dh dd 7B58A88Dh, 30993900h, 916B19BAh, 196A4A26h, 71B2CA81h dd 0ABA41D2Fh, 817F41Fh, 241685D7h, 0D81BC502h, 14D83BC4h dd 79662EA6h, 775931AEh, 25936B4Eh, 95F2F8FEh, 0F166E31Dh dd 72117C7Fh, 0A420DB73h, 20417C70h, 62A2E854h, 9618019Bh dd 2249DFB7h, 3AD65618h, 1FE4C8A4h, 0A75C3593h, 88EF528Bh dd 0D1885356h, 914E5EABh, 0BE49D838h, 0E76B4511h, 0BC67DCE0h dd 2040D510h, 5BD9EF4Fh, 2784E949h, 4868D858h, 0D24C6869h dd 0D7E75FECh, 0AC41DEBh, 538B01D6h, 0CE744C8Dh, 0EB8CB65Ch dd 8DBA43F6h, 4546A40Dh, 98A1F044h, 8CB4880Eh, 1054DD67h dd 208CCA4Ah, 6B7BC0DEh, 41784443h, 0EF49DB0Ch, 509657D6h dd 0A76D1073h, 0CF351EBh, 0FC045995h, 13329424h, 0FC40D96Ch dd 4D858B4Bh, 52B8C7CCh, 0F44DD974h, 92628A7Bh, 0FC88B91Ah dd 56510990h, 690E46E4h, 0E4B06191h, 412431CFh, 0A9575B24h dd 9C684DCAh, 985A8730h, 4DD85CDDh, 600B176Bh, 384ACD4Dh dd 0B7B9D1F8h, 38B88D2Eh, 731657FCh, 0CAD4FF3Dh, 5DA13094h dd 0CFE005A2h, 0D7BA3D24h, 0D3C45725h, 0AA265592h, 93B2DFCh dd 5B3809AAh, 0AF09774Ah, 16394465h, 0FCFE9A0h, 0BF43EDE2h dd 5A759CE8h, 0B71B82Dh, 0BAAFD317h, 58A1C332h, 6263922Ch dd 43361808h, 65E65E90h, 1A137C3h, 0D402C564h, 43FE3FDDh dd 0BBFF221Ch, 650B7B5Eh, 0A737F10Fh, 0D35A5CBBh, 0BBE5506Dh dd 84ADD790h, 0A9D86449h, 2C24248Bh, 67BED43Bh, 881C4B23h dd 4442FD70h, 71882C50h, 1B894454h, 0D290EA57h, 6E41E8F5h dd 0E93A40BBh, 30EC50E6h, 92D14740h, 0C1027428h, 1E915697h dd 8864B871h, 0F783D4C3h, 2F4762B1h, 82395A19h, 9D64CCC2h dd 745D34DAh, 9D5FE840h, 38CB7298h, 228E080h, 4013CADh dd 0CF8E6B88h, 65769576h, 0A08A8ADCh, 0D2A0692Ah, 47AC4330h dd 0A25F2854h, 56A0286Ch, 5F55D4DDh, 113755CDh, 6B094CEBh dd 0E3060387h, 53523D86h, 2BAC1C44h, 0D4502D9Ah, 33EC270h dd 947865C0h, 966B0036h, 50BE9CA3h, 0ACB31B76h, 50EF01D1h dd 53304184h, 88A9079Ah, 0E5188009h, 0F1B64A20h, 0D3FC3608h dd 6A4A4DEh, 1C630380h, 34E03F02h, 0CC55FA6Ch, 0D8B4CA8Ah dd 0DE7F0380h, 734E56E2h, 529C654Bh, 4F7BFD07h, 0D9430C5Fh dd 0A7A541B4h, 0E13B2F98h, 0CD93F6Bh, 167B9A8Ch, 77906D20h dd 0AC1C75C4h, 57265059h, 1A19F6D3h, 5DA2B4D3h, 5B0CE37Ch dd 167B281Eh, 4753B824h, 1A3A0C98h, 2051D00Fh, 6E65476h dd 0C69644Fh, 0D97DF928h, 846ECF28h, 7C384612h, 15D6974Bh dd 4C1932E5h, 64F576DAh, 0AB3D5B6Eh, 7260E100h, 93AB1CA6h dd 66B77DB1h, 5A6439F2h, 5F76DE5Fh, 0C0E786B8h, 93604031h dd 30032C5Ch, 838647Bh, 7921DDA8h, 93EC3D5Ch, 7C77A2EAh dd 4ECD0A6Dh, 0A4DF409Fh, 0D4C4659Fh, 0A1BB074h, 0ABEB9125h dd 0FDD684Dh, 57966C51h, 0AF326F2Ch, 0E950221Bh, 8D519B10h dd 3C448751h, 0FD6F883Fh, 0CECD8C00h, 78CF87DDh, 4D107E9Dh dd 20113053h, 49B6114Fh, 47EB1E58h, 50AFB7D7h, 5CD9689Eh dd 0CEBB91D5h, 7E15587Dh, 0C217E7h, 0CB65DD9Fh, 0D4BDB8F5h dd 473550h, 0D4BC8E96h, 44511AC2h, 27833081h, 60F6E99Eh dd 81603D40h, 5015965Fh, 0EB3BEBCEh, 0ECD0992Ch, 2E3570F1h dd 56987A19h, 0F6B98FA1h, 642431A8h, 1840ADD1h, 0B01D3F5Fh dd 70697C23h, 0DE2C1697h, 3CB126A7h, 6D9A5A0h, 8798BB28h dd 690C5DBBh, 90BCEB9h, 3C74A358h, 0BF582264h, 705CA97Dh dd 0B0066785h, 9D0D8680h, 5B835F7Fh, 0D8BA0013h, 315457ECh dd 915F78A7h, 40C87F14h, 0EBB61A99h, 0C44106EDh, 2D0C4731h dd 9C3764D1h, 28484A32h, 0E0B4CC32h, 695D5C3Fh, 4830D300h dd 577CC7D1h, 90952436h, 804EF528h, 60838B05h, 56EEDDCAh dd 0C15B58A7h, 0FFD9ED9Dh, 6475AF9Ch, 2F605545h, 7CCA9652h dd 4701509Ch, 58741CDDh, 0A78FE1ADh, 0B9D14422h, 0D5547D5Bh dd 0BC234751h, 94DB987Bh, 0EC1B068Dh, 0DBB1DB5Ch, 9321103Ah dd 73734C17h, 55487333h, 0CF585C44h, 54737373h, 0D440AC50h dd 2CA86A40h, 402C272Eh, 0B8E84028h, 3EABB9EBh, 5BDE3B06h dd 804D5CBCh, 466B10E8h, 77BFEAB9h, 0C355709Ch, 4358B749h dd 9D485751h, 7D55852h, 0A7995B57h, 7F7B50C6h, 0EE1A5060h dd 1EB0B2B7h, 11304F07h, 7896708h, 5050CE80h, 5413AFABh dd 243808BBh, 7F6A2024h, 6762617Fh, 0AF51607Eh, 61EFADC1h dd 6060686Ah, 357E357Fh, 508F3528h, 392A3F1Dh, 3D313C3Ch dd 7F8BAFAFh, 0D8F7764h, 0E9369963h, 25DD51A1h, 0DAAEDB55h dd 57C96C56h, 0AFDA8F16h, 607C56EFh, 0D8C96416h, 0BDB21757h dd 8AB85ABBh, 35327EAAh, 0AF3FAF37h, 0C3217EABh, 425199C9h dd 0ADC1EDADh, 22915746h, 0AD12FA38h, 40ADFA36h, 0ABFD88EAh dd 0F94C44A7h, 0A3994AC8h, 0D658A1C8h, 40952152h, 0AF89ADD7h dd 679B0FC0h, 4CC609C2h, 0B4446A28h, 5A2D2107h, 0A68F2D6Ah dd 0A3152199h, 0D954A1CDh, 0CC54A159h, 9EC1AE97h, 37E41041h dd 40A0B3A3h, 0E25B814Ch, 0A7AB4B09h, 99CB3026h, 44895175h dd 9A47F254h, 0A9342FC9h, 38DD7B08h, 4AFEC131h, 4DC63631h dd 8A8E8B41h, 0E27837h, 44C95098h, 7605078Ch, 8BEDEF42h dd 90F41E6Fh, 0C91942C1h, 5004A7BDh, 9A6A9444h, 0ABEB5F9Bh dd 4C6C2189h, 71B474AFh dd 9D9D9F4Ah, 0A77C36DFh, 0D136896Fh, 0E0AB436Fh, 9D93D3E8h dd 34F80D42h, 993C8F6Bh, 0FE754D9Bh, 0C3AD5C74h, 180AAE99h dd 4490C6F6h, 0F7791C4Ch, 30CCA3BBh, 0EAC737BFh, 0A46446BAh dd 8BA52176h, 0AFA72E9Dh, 0BF436BA9h, 673B1679h, 17368E0Fh dd 0E7FAF8BCh, 0D549A0FBh, 51AFAFC0h, 0BDAF95E7h, 0ADB9BCB9h dd 0ACB1ACE7h, 0A6AF99C9h, 0A50BEE0Fh, 0A2B9ACACh, 0ACA7BBACh dd 89FBFAA5h, 0FAA96497h, 0CF75E409h, 7AAFC7ADh, 0FC99367Ah dd 0E7D1C0C3h, 0D333CDC0h, 0C2219D99h, 6549EF60h, 92ABE0D3h dd 0C58C4401h, 7AC1225Ah, 82BE9821h, 0AFAFBDAFh, 0D08542F5h dd 0FA02CAB1h, 7ADD443Fh, 42E998CAh, 171ACADBh, 0FBCE0908h dd 0F3498BCBh, 3FAFAE8Fh, 0F23CBC70h, 0BDD5ED8Dh, 0B8F28FCEh dd 514BBD1h, 4FED9842h, 0BBDD7EC6h, 0AFB6D5D4h, 0CAD58842h dd 59CD420Ah, 0A8400ACAh, 0E77585C9h, 19AF8DE7h, 0AEAD2F36h dd 0AF9D742h, 0D552C592h, 0C154D242h, 0F8CBA30Ah, 9FA79B3Dh dd 3AFD50Dh, 0DF22121Dh, 4824180Dh, 0AED59803h, 52503256h dd 0AFAFA1FDh, 1E701300h, 1F070415h, 701B02h, 2171F02h dd 61701D11h, 0AFAB479Dh, 111CA6E1h, 5A521D1Eh, 343E3907h dd 7023273Fh, 70223F36h, 7D865307h, 373B2F3Dh, 20253F22h dd 314A635Eh, 0E731D77h, 62B93C6Eh, 62627108h, 1E617E62h dd 56A97004h, 70488A3Bh, 0F420626Ch, 0EB23DBh, 5A57497Bh dd 173AF5Ch, 502DD333h, 445A4154h, 0EB845570h, 9AEB0BB8h dd 1B1C5039h, 50000303h, 0ABD2C706h, 58994E8Fh, 745007B0h dd 5034503Eh, 5027503Fh, 0A6A66A23h, 6024CB32h, 69DC5951h dd 53736550h, 4D14E6B6h, 8A50577Eh, 341E2951h, 8A7058FBh dd 0C234CAD7h, 7653CF07h, 3DD33098h, 17731651h, 23AF1057h dd 50565F73h, 4F514056h, 0B0D8DA45h, 0AF305018h, 501FB5AFh dd 3A49D114h, 19B4A22Ah, 60FF784Ch, 37402475h, 711FB103h dd 8F0C148Fh, 54506025h, 7DFE3BFFh, 0AED570Ch, 0DD310C58h dd 1D258CDDh, 5066577Eh, 60277E68h, 8B2BFF31h, 0BC50194Bh dd 6B745013h, 7D33506Fh, 349F704Fh, 548C58F2h, 0B44E9210h dd 50AF46EFh, 5E508E8Eh, 51CF4650h, 67BF7652h, 78101231h dd 0DB415349h, 0E8388E9Bh, 8324893Ch, 7A335020h, 0EE12C68Bh dd 0CF753BCCh, 25185E40h, 546DD18Dh, 443044Bh, 0ABCF760Ah dd 933868Ch, 9B970C72h, 55D73515h, 0A3186B05h, 40535B50h dd 5140E818h, 64CFAFABh, 783A5155h, 0E15C6949h, 0F8CB4180h dd 891F9050h, 350FA57Eh, 0D4FA80Fh, 4CBBDAD8h, 0B8CF4199h dd 18407B6Ch, 0CF758130h, 0A45CBCDBh, 5CF030F3h, 295F705Ch dd 5CE15CF0h, 1EAFEE50h, 0D85CF0DEh, 50595010h, 505753BCh dd 19B14E91h, 1F1044C5h, 0EF10202Ch, 0E2792B72h, 43135750h dd 6FA0CE29h, 5043D528h, 0B9F60BFBh, 7FA84043h, 52239665h dd 735EAEAFh, 60918210h, 0D4586608h, 0B4A213D8h, 40E92D83h dd 0E851AFBEh, 0A2705C40h, 0FD296631h, 5F2F575Dh, 0B5CF7588h dd 20514845h, 0C0565FD4h, 5FD4295Fh, 52505FC5h, 0ACCE1DD7h dd 3C5FD42Fh, 98CA505Fh, 0F8D4FA8Eh, 9A43133Fh, 4FDC596Fh dd 83E39h, 6C220070h, 5090F68Bh, 69511416h, 996C3B62h dd 426CD41Fh, 11522545h, 2B725003h, 0C44CD45Dh, 0FFAFCB51h dd 9656BB4Ch, 23750C0Ch, 3320390Ch, 0CFD13674h, 0BCAFA92Fh dd 0B4AF574Ch, 14350350h, 37253235h, 3C392639h, 11353735h dd 0E2368B34h, 23253AAFh, 3B3F0424h, 23473E35h, 25423F1Ch dd 0C22F26ADh, 3C310620h, 47113525h, 3F78201Fh, 7FAE5C33h dd 642374E6h, 26343113h, 63392031h, 42B2FEB3h, 3524252Fh dd 43613D22h, 0EB533962h, 35F32F42h, 22040F45h, 69072931h dd 0BF22134Bh, 358BBD8Ch, 35024E31h, 4553F3Dh, 6445C38h dd 3E242239h, 25E686BDh, 378110Ch, 25F2815h, 0F163E22h dd 1B65862Ah, 1872A3A5h, 0D3000404h, 0D9217F8Eh, 0B627010h dd 5D1B1F70h, 8BAD515Ah, 3F1BADFDh, 7D52143Eh, 2437541Ch dd 75706A38h, 7931BD25h, 787F48CBh, 0A4E92904h, 763B2DE6h dd 393C20F7h, 4539D533h, 0F37D287Fh, 9B27BE88h, 3D3F337Dh dd 359D2220h, 0B8F0734h, 5084AF78h, 50041517h, 41345236h dd 8D7BADF1h, 3DC52387h, 0E1332623h, 3DF28D87h, 35512735h dd 0F625F58h, 0AD9C8CB6h, 64612547h, 5557A753h, 0CA393E57h dd 6162537Eh, 88436960h, 68E3C32Bh, 7356284Fh, 5CCB8C57h dd 1F606162h, 2F2F2579h, 0EB70C8ABh, 2150305h, 1E581419h dd 50560819h, 18712B09h, 756AB8F1h, 95F79D34h, 3AFA2A6h dd 704161Fh, 0C150211h, 233F391Dh, 8D0C933Fh, 0E7D3A086h dd 2225130Ch, 98065922h, 0E50CAE23h, 293B112h, 2903EC25h dd 0A202C0ADh, 0B7F1D72Fh, 363407CAh, 3E382331h, 3423342Ah dd 2686423Ch, 27190343h, 0C076F31h, 5E8830F1h, 2DB693Ch dd 0E41B5D07h, 53CC7386h, 362170A5h, 0A75ED6BFh, 26703739h dd 68264BADh, 0CD623526h, 37E9E61Bh, 40037034h, 0E84B3514h dd 4471E267h, 4B47730Ch, 0CB620C6Fh, 12501CFBh, 0FCC1706Fh dd 6DCF4A65h, 0E04EEF73h, 5604FD12h, 391467C2h, 3DEBCE23h dd 36BE26C4h, 0CC3D377Fh, 3C7FA67Ah, 33743399h, 2924395Ah dd 3E311D70h, 895B94Eh, 61994AE1h, 95CDE4DCh, 2648326h dd 585E1103h, 0AFAFBFECh, 0F4914BAFh, 8D19CFDEh, 348B4F15h dd 5DB5E595h, 739BB2FAh, 3333C972h, 2348184Ch, 0BDAFAFAFh dd 0DCCA93A2h, 9C1DD506h, 83FD5FB1h, 67394556h, 0C8F8ADDDh dd 9E205B46h, 4415001Fh, 0A867AFAFh, 0BF621A69h, 8817FEB3h dd 0EAD48FEDh, 23D0674Eh, 5DA5DBD1h, 0C2B02D1Ah, 0B88FAFAFh dd 0E8957DAEh, 0D5B07096h, 38EDCCh, 0E6793Ah, 129364D2h dd 0C858412Fh, 0AFAFAFAFh, 0B7E7E24Ch, 27D9CDCCh, 83C74A6Dh dd 0DD0079F4h, 166AC6F5h, 42B8ACDDh, 0FF40BB46h, 0A8152014h dd 0AFAFAFBAh, 28C63A80h, 113CFE1h, 0D6F877BBh, 59DA6920h dd 0F192448Eh, 462A0391h, 0C7D594EFh, 0F08FF328h, 0C879B75Fh dd 3D9CECEh, 0C45774AEh, 0AFAFAFAFh, 25F3BC9Ah, 0A94DF14Eh dd 9B95E4B8h, 0A08B4A1Eh, 0D7693987h, 2BC4DC4Ah, 0D2434896h dd 1BEF6EE3h, 0A07FAFAFh, 0BB37B012h, 30E767E2h, 8788E3FAh dd 3554D072h, 0AF1BF62Ah, 15D508D6h, 0AC4BAFF6h, 0BEA93EA6h dd 62C09906h, 0E7F66B1Ah, 0BB83882Ah, 0C7BE1233h, 0A75448D8h dd 61000FB8h, 0F6CA539Ch, 0C8E4CA39h, 7C6C0828h, 39E29D64h dd 8C0EA844h, 6483E49Ch, 0C0F4831Dh, 5B3024D0h, 2112B93Dh dd 0B3D7ECFh, 3C8C5525h, 0F7380B74h, 0E750197Eh, 0C6E65D34h dd 3B957C7Dh, 314C37FDh, 8B51A03Eh, 7C25D688h, 2A3F7F22h dd 208B2932h, 1189FCECh, 0F4442232h, 0FD305C29h, 8293C75h dd 86371A68h, 9A3B16A1h, 237E31E6h, 0D4772528h, 3E976A66h dd 6D7E4616h, 3DD0E037h, 7F9A16DEh, 554C3C78h, 3764EB2Bh dd 413F204Ah, 43312A7Eh, 9F4B3693h, 31AE6359h, 104A0F43h dd 373FDE3Eh, 273B2513h, 370DEDC0h, 4F24880Eh, 4FF53334h dd 0ACF9BB09h, 7D233F3Ch, 0F77E0831h, 3BFDE270h, 0FB25B30Bh dd 0EE32463Ch, 0E6EB756Dh, 2236E97Fh, 1A313C36h, 5EBC59AEh dd 31223763h, 24317E2Ah, 3D5BD1D0h, 2766D73Dh, 2DEB8A7Dh dd 4EB5FE3Ah, 33329B25h, 0EF373671h, 2F8B5BBAh, 3D3C3B3Ah dd 21203F3Eh, 27C22402h db 28h ; ( db 29h, 2Ah, 8Ah db 8 db 0AEh, 0Fh, 0A9h db 11h db 12h, 13h, 14h db 15h db 16h, 17h, 18h db 19h db 1Ah, 1Bh, 1Eh db 0ACh ; db 1, 7, 2Bh db 0F1h ; db 8, 10h, 4 db 4Ah ; J db 8, 9, 0Ah db 4Bh ; K db 0E8h, 0FDh, 0A5h db 2 db 0D1h, 0F0h, 27h db 68h ; h db 70h, 7Ah, 0E6h db 57h ; W db 0B9h, 10h, 71h db 52h ; R db 37h, 0DCh, 0AFh db 9Bh ; db 1Bh, 5Ch, 0A6h db 6 db 9Ah, 13h, 1Bh ; --------------------------------------------------------------------------- jo short loc_31508081 add [esi+3], dh lds edi, [esi] cmpsb xor al, 5Bh pop ds push ds pop ss assume ss:UPX0 pop edx pop ebx sbb [edi-4], ebp or eax, 656457AAh retn 1F1Ah ; --------------------------------------------------------------------------- dw 7F5Ch dd 4190501h, 74D13B3Fh, 172B064Ah, 0E6B5A736h, 24734133h dd 0D44729E5h, 90B0570Fh, 70F2529Bh, 0EE86A378h, 3253B80Dh db 34h ; --------------------------------------------------------------------------- loc_31508081: ; CODE XREF: UPX1:3150803Cj imul esi, [eax+64h], 19h adc eax, 59456670h ; CODE XREF: UPX1:3150809Dj push esi pop ebx pusha cld dec esi in al, 65h adc [esi+20h], al bsf edi, [ecx+50h] cmp esp, [edi] and [ebx+31h], edx jl short near ptr loc_31508085+4 sahf in eax, 0B6h ; Interrupt Controller #2, 8259A push edx sbb eax, 395F570Ch push ebx sub al, 42h pop eax out 39h, eax xor eax, 9743617Dh imul bl pop eax ficom dword ptr [ecx+ebx*2-385041F0h] scasd push ecx cmp al, 23h and al, 22h xor edi, ds:35171120h and al, 1Ch aas xor esi, [ecx] cmp al, 35h sbb [esi], edi db 36h aas pop edi or esp, [ecx] push es les eax, [ebx] add dl, [ecx+ebx*2] xor edi, [esi+15h] out 44h, eax das sub [ebp+7], eax or ds:8DA1716h, esi shl dword ptr [eax-32h], cl add al, 39h retf 0C7EDh ; --------------------------------------------------------------------------- db 0E9h, 3Dh, 5Eh db 5Bh ; [ db 4, 3Fh, 70h db 45h ; E db 0F0h, 35h, 0BDh db 5Ch ; \ db 50h, 16h, 11h db 5Ch ; \ db 0EFh, 12h, 6Ch db 0A6h ; db 5Dh, 6Fh, 1Dh ; --------------------------------------------------------------------------- aas xor al, 0FCh jge short loc_3150812F xor [esi-20h], eax retn ; --------------------------------------------------------------------------- db 7Dh, 11h, 0DEh dd 2E0E1139h, 56A45ABFh, 13598F4Fh, 4E29203Fh, 682BAEB4h ; --------------------------------------------------------------------------- retn ; --------------------------------------------------------------------------- cmp [esi], edi loc_3150812F: ; CODE XREF: UPX1:3150810Fj adc eax, 0D1013528h cmpsb scasd push esi mov ebp, 0CA3C3F2Eh and [ebx+62h], ah add edi, [esi] xor [eax], esp and edi, [eax] aas and al, 49h ; --------------------------------------------------------------------------- db 8Dh ; db 0FDh, 9Dh, 0F0h db 83h ; db 42h, 62h, 22h db 23h ; # db 5Fh, 4, 55h db 23h ; # db 0FDh, 11h, 96h db 65h ; e db 7Ch, 48h, 0A6h db 56h ; V db 0ABh, 0D0h, 71h db 1Eh db 35h, 28h, 24h db 38h ; 8 db 20h, 22h, 4 db 3Ch ; < db 9Bh, 37h, 28h db 15h db 26h, 58h, 0AFh db 31h ; 1 db 16h, 0DBh, 3 db 0E1h ; db 0E9h, 0E7h, 12h db 0B4h ; db 2Bh, 1Fh, 32h db 3Ah ; : db 0C9h, 44h, 14h db 0C6h ; db 37h, 43h, 5Ah db 9Fh ; db 45h, 0E7h, 1Ch db 31h ; 1 db 15h, 99h, 9Ah db 0FDh ; db 45h, 6Ah, 76h db 7Fh ; db 15h, 28h, 33h db 0E2h ; db 8Bh, 31h, 2Bh db 4 db 73h, 3Eh, 0Ch db 56h ; V db 35h, 20h, 35h db 0C7h ; db 7Ch, 59h, 0Fh db 41h ; A db 17h, 3Eh, 7Eh db 42h ; B db 3Fh, 0F0h, 88h db 6Fh ; o db 5Bh, 11h, 34h db 34h ; 4 db 22h, 5Fh, 44h db 1Ch db 39h, 32h, 22h db 78h ; x db 5Ch, 0E6h, 0D4h db 31h ; 1 db 0D9h, 7Bh, 1Dh db 75h ; u db 16h, 8Ch, 58h db 37h ; 7 db 4Fh, 0FBh, 0Fh db 35h ; 5 db 18h, 5Eh, 40h db 0C6h ; db 14h, 0D7h, 0CFh db 9Bh ; db 3Ch, 0B1h, 92h db 3Ch ; < db 46h, 4Dh, 20h db 0F2h ; db 33h, 3Bh, 17h db 7Dh ; } db 81h, 31h, 3Dh db 25h ; % db 22h, 0B5h, 1Dh db 8Fh ; db 28h, 3Ch, 66h db 0D9h ; ; --------------------------------------------------------------------------- retn 94A3h ; --------------------------------------------------------------------------- db 5Dh ; ] db 3Ah, 0C8h, 15h db 0C8h ; db 61h, 49h, 5Eh db 32h ; 2 db 0D1h, 5Eh, 2Bh db 13h db 49h, 0B9h, 61h db 19h ; --------------------------------------------------------------------------- retn 8B33h ; --------------------------------------------------------------------------- db 26h ; & db 0D3h, 0B4h, 3Bh db 35h ; 5 db 34h, 5Ah, 33h db 43h ; C db 3Dh, 7Dh, 2 db 0Dh db 28h ; ( db 99h ; db 20h db 4Bh ; K db 6Ah ; j db 58h ; X db 15h db 2Ah ; * db 35h ; 5 db 76h ; v db 94h ; db 43h ; C db 0D6h, 0Eh, 6Dh db 50h ; P db 81h, 38h, 8 db 0F1h ; db 9Dh, 0BEh, 45h db 29h ; ) db 20h, 24h, 4Ah db 0E2h ; db 94h, 40h, 57h db 9Dh ; db 0E6h, 7Fh, 5Ah db 14h db 42h, 31h, 5Eh db 0BCh ; db 2Bh, 55h, 93h db 26h ; & db 39h, 36h, 29h db 16h db 37h, 9Ah, 6Ch db 85h ; db 46h, 0E0h, 0E7h db 0F1h ; db 40h, 0DFh, 7 db 3Fh ; ? db 29h, 7Ch, 41h db 3Dh ; = db 0D6h, 91h, 0EEh db 1Bh db 35h, 29h, 40h db 2 db 0E2h, 4Eh, 35h db 0A9h ; db 33h, 0D7h, 47h db 6Eh ; n db 0BFh, 44h, 11h db 33h ; 3 db 21h, 25h, 39h db 22h ; " db 46h, 4Ah, 0D7h db 5Dh ; ] db 1Dh, 19h, 0DFh db 0Ch db 24h, 0E6h, 0E9h db 9 ; --------------------------------------------------------------------------- cmpsd push 0FFFFFF91h aaa retn 0BF5Dh ; --------------------------------------------------------------------------- db 11h db 40h, 5Eh, 6Bh db 0C4h ; db 71h, 5Dh, 6Eh db 5Fh ; _ db 1, 0BCh, 0C0h db 0E0h ; db 86h, 5Ah, 65h db 41h ; A db 75h, 60h, 0C8h db 95h ; db 36h, 54h, 7Dh db 71h ; q db 40h, 0CEh, 0B1h db 0DEh ; db 15h, 0E5h, 0Fh db 11h db 32h, 39h, 0A5h db 3 db 38h, 1Dh, 93h db 16h db 44h, 0DBh, 0FFh db 3Eh ; > db 43h, 8Eh, 0A8h db 8Dh ; db 0B5h, 27h, 6Bh db 28h ; ( db 3Fh, 39h, 55h db 31h ; 1 db 3Eh, 23h, 39h ; --------------------------------------------------------------------------- loc_315082B4: ; CODE XREF: UPX1:315082E7j push esp xor edi, [edi+3F9BA6E6h] and ecx, [edi] ; CODE XREF: UPX1:31508322j ; --------------------------------------------------------------------------- db 15h, 18h, 0Fh ; --------------------------------------------------------------------------- and [esp+edx+130F5B37h], cl sub [eax], ch push 3C1AC876h sbb al, 0B7h sar dword ptr [ebx], 1 retn ; --------------------------------------------------------------------------- db 0D3h db 2Dh ; - ; --------------------------------------------------------------------------- xor bh, [eax] push edi and [ecx], ch adc bh, [edx+6Bh] jmp short loc_31508324 ; --------------------------------------------------------------------------- retf 9FB2h ; --------------------------------------------------------------------------- lea ecx, [edi] cmp [eax+63h], bh jns short loc_315082B4 imul eax, [edi+2224234Ch], 19565D41h or ebx, [ecx-1599C2C4h] loc_315082FA: ; CODE XREF: UPX1:3150835Dj pop edi cld and al, 0E7h out 89h, al ; DMA page register 74LS612: ; Channel 6 (address bits 17-23) cmp al, 0C4h mov ecx, 2327516Ch ; CODE XREF: UPX1:31508367j sub al, 0DBh and al, 36h dec ecx sal dh, cl dec ecx add cl, [ebx+35h] imul eax, [esi], 6AF2C138h aas inc esp mov [ebx+61h], bl xor esp, [esi+4Bh] jno short loc_3150837D jns short loc_315082BB loc_31508324: ; CODE XREF: UPX1:315082DDj cmp esi, esp rol dword ptr [ebx], cl sbb [edi+ebx], esi movsb add [ebx-78h], ch cmpsb mov al, 0DAh mul dword ptr [ebp+5] and edx, [ecx] inc ecx cmp al, 49h push ecx or ebx, [esi+1Eh] inc ecx dec ebx not byte ptr [esi+67h] or eax, 27C33EEBh add eax, [edi] test [ebp+20524F2h], edx xor al, 0F5h wait loop near ptr loc_315083D0+1 or eax, [edx+52h] pop eax and edx, [edx+5Dh] push ecx jl short loc_315082FA loop loc_315083DD imul edi, [edi], 0E247645Bh ; CODE XREF: UPX1:3150837Bj jl short near ptr loc_31508302+2 loop loc_315083C7 loc_3150836B: ; CODE XREF: UPX1:31508379j pop ecx push esp inc ebx inc eax add al, 9Fh push eax call far ptr 0A516h:15000746h jnz short loc_3150836B jg short near ptr loc_31508361+3 loc_3150837D: ; CODE XREF: UPX1:31508320j or eax, 53108377h lahf retf 4FBDh ; --------------------------------------------------------------------------- dw 5F50h dd 56515B51h, 4342645Ch, 0C8884D48h, 60B5512Bh, 8D5B6165h dd 5290597Ch, 205C573Bh ; --------------------------------------------------------------------------- ror ebp, 1 loc_315083A6: ; CODE XREF: UPX1:315083F5j jmp near ptr 71B4D220h ; --------------------------------------------------------------------------- db 57h dd 0E208B5DAh, 6B385356h ; --------------------------------------------------------------------------- loc_315083B4: ; CODE XREF: UPX1:315083ECj fcom qword ptr [edx+2F925126h] loc_315083BA: ; CODE XREF: UPX1:31508409j xor al, 0E0h push ecx dec esi or [ebx], al and eax, 53547EEAh arpl ax, ax loc_315083C7: ; CODE XREF: UPX1:31508369j xchg eax, ecx pop eax push esi db 64h xchg ax, sp nop db 67h cwde loc_315083D0: ; CODE XREF: UPX1:31508353j mov ebp, 7EB054A4h xor al, 0C0h stosd popf inc ecx inc edx ja short loc_31508437 loc_315083DD: ; CODE XREF: UPX1:3150835Fj db 3Eh or [eax], bl push 30509068h push eax sal byte ptr [ecx], 1 or esi, [eax+6Dh] push ebx jl short loc_315083B4 push ecx push eax push eax push eax push eax push eax push eax jo short loc_315083A6 push eax push eax push eax push eax push eax push eax push eax push eax push eax xor dh, ch push eax xor [eax], al popa fucomp st(6) push eax loopne loc_315083BA scasd pop es rcr dword ptr [ebp-3FBF4451h], cl rol al, 0C0h rol al, 0DAh push esi push ss fcom dword ptr [edi+17h] push ecx mov esp, ds:0D34EDB57h mov esi, 228B41ACh mov ebp, 505051E8h push eax push ecx mov esp, ds:0D34EDB57h loc_31508437: ; CODE XREF: UPX1:315083DBj mov esi, 418B41ACh nop push ecx mov esp, [ebx] mov edi, 4EDB5925h sar dword ptr [esi+238B41ACh], cl mov ah, 61h cdq sar dword ptr [eax-6EA2DDADh], cl mov al, 58h ficom dword ptr [esi+16h] shl dword ptr [eax-26DBDB51h], cl xchg eax, ebp push ecx mov esp, ds:0D34EDB57h mov esi, 418B41ACh cdq push ecx mov esp, ds:0D34EDB57h mov esi, 418B41ACh cdq and eax, 8B511170h and eax, 0D34EDB57h mov esi, 418B41ACh cdq push ecx mov esp, [ebx] mov edi, 4EDB5925h sar dword ptr [esi+238B41ACh], cl ; CODE XREF: UPX1:315084DDj mov ah, 0D3h xchg eax, ecx push edx shr dword ptr [ebp-50505CB0h], 1 ; CODE XREF: UPX1:315084F6j rol dword ptr [ecx+7F44DD51h], cl shr dword ptr [ebp-25A0D954h], cl push edx adc bl, al push edi pop ss assume ss:nothing sbb ds:0AF33B9A7h, esp scasd scasd rcr bl, 52h rcl dword ptr [edx-2CA826ACh], cl xchg eax, edi push esp sar dword ptr [ecx+51A12754h], cl lahf mov ecx, 0AFAFAF1Ch push cs fldenv byte ptr [edi+50509AE9h] push eax ficom dword ptr [edi+17h] jl short near ptr loc_31508492+5 insb push ecx daa cmpsd shr byte ptr [edi+51h], 1 and eax, 0DA57DBA2h andps xmm6, oword ptr [esi] xchg eax, ecx mov eax, 40909158h setalc xchg eax, esp jns short near ptr loc_3150849C+4 sar byte ptr [ebx-265FAE48h], 1 push edi rcl dword ptr [edi-4D7726ABh], cl mov ebp, ebx out dx, al push eax xor [eax+50h], dl fist dword ptr [edi+59h] nop and al, 15h fisttp dword ptr [edi] push esp fst st(4) pusha push eax rcl byte ptr [eax+50h], 1 push ecx mov ds:5897D300h, eax scasd mov ah, 0D0h push eax push eax ; --------------------------------------------------------------------------- db 0C5h ; db 0DAh, 57h, 17h db 58h ; X align 2 dw 8C24h db 0D9h ; db 0A9h, 29h, 57h db 5Fh ; _ db 0E7h, 57h, 17h db 0 db 17h, 0E9h, 7 db 18h db 0A2h, 0FEh, 5 aPPpyrWSUtIpPp1 db 'PPY$WSӓTPP1ǯPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPP' db 'PPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPP' db 'PPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPP',0 align 1000h UPX1 ends ; Section 3. (virtual address 00009000) ; Virtual size : 00008000 ( 32768.) ; Section size in file : 00008000 ( 32768.) ; Offset to raw data for section: 00009000 ; Flags E0000060: Text Data Executable Readable Writable ; Alignment : default ; =========================================================================== ; Segment type: Pure code ; Segment permissions: Read/Write/Execute UPX2 segment para public 'CODE' use32 assume cs:UPX2 ;org 31509000h assume es:nothing, ss:nothing, ds:UPX0, fs:nothing, gs:nothing dd 3 dup(0) dd 90C4h, 908Ch, 3 dup(0) dd 90D1h, 909Ch, 3 dup(0) dd 90DEh, 90A4h, 3 dup(0) dd 90E9h, 90ACh, 3 dup(0) dd 90F4h, 90B4h, 3 dup(0) dd 9100h, 90BCh, 5 dup(0) dd 7C801D77h, 7C80ADA0h, 7C81CDDAh, 0 dd 77DD6BF0h, 0 dd 77C4D444h, 0 dd 7E41A8ADh, 0 dd 42C2C8A1h, 0 dd 71AB9639h, 0 dd 4E52454Bh, 32334C45h, 4C4C442Eh, 56444100h, 33495041h dd 6C642E32h, 534D006Ch, 54524356h, 6C6C642Eh, 45535500h dd 2E323352h, 6C6C64h, 494E4957h, 2E54454Eh, 6C6C64h, 5F325357h dd 642E3233h, 6C6Ch, 64616F4Ch, 7262694Ch, 41797261h, 65470000h dd 6F725074h, 64644163h, 73736572h, 78450000h, 72507469h dd 7365636Fh, 73h, 43676552h, 65736F6Ch, 79654Bh, 69730000h dd 6Eh, 72707377h, 66746E69h, 41h, 65746E49h, 74656E72h dd 6E65704Fh, 41h, 26h dup(0) dd 59E85Bh, 648B0000h, 0EBB80824h, 0EB000004h, 0A16764FAh dd 408B0018h, 40B60F30h, 0F88302h, 0E83C75h, 5D000000h dd 2320ED81h, 858B0040h, 402367h, 236F8503h, 0F08B0040h dd 236B858Bh, 85030040h, 40236Fh, 33FE8B50h, 8532ACC9h dd 402377h, 8D3B41AAh, 402373h, 2BC3EF7Ch, 30FF64C0h, 0B8208964h dd 12345678h, 60000387h, 84000000h, 0 ; --------------------------------------------------------------------------- push eax xor [eax], eax add es:[eax], al push eax ; =============== S U B R O U T I N E ======================================= public start start proc near var_C = dword ptr -0Ch var_4 = dword ptr -4 call $+5 push ebp mov ebx, [esp+8] mov ebp, [esp+8+var_4] sub [esp+8+var_4], 84h and ebx, 0FFFFF000h sub ebp, 401005h loc_315092A1: ; CODE XREF: start+3Dj cmp dword ptr [ebx+4Eh], 73696854h jnz short loc_315092B6 mov eax, [ebx+3Ch] add eax, ebx cmp word ptr [eax], 4550h jz short loc_315092BE loc_315092B6: ; CODE XREF: start+29j sub ebx, 100h jmp short loc_315092A1 ; --------------------------------------------------------------------------- loc_315092BE: ; CODE XREF: start+35j mov edx, [eax+78h] add edx, ebx mov esi, [edx+20h] mov ecx, [edx+18h] add esi, ebx push ecx loc_315092CC: ; CODE XREF: start:loc_315092F3j lodsd add eax, ebx cmp dword ptr [eax-1], 74654700h jnz short loc_315092F3 cmp dword ptr [eax+3], 636F7250h jnz short loc_315092F3 cmp dword ptr [eax+7], 72646441h jnz short loc_315092F3 cmp dword ptr [eax+0Bh], 737365h jz short loc_315092F8 loc_315092F3: ; CODE XREF: start+57j start+60j ... loop loc_315092CC pop ecx pop ebp retn ; --------------------------------------------------------------------------- loc_315092F8: ; CODE XREF: start+72j sub [esp+0Ch+var_C], ecx mov esi, [edx+24h] pop ecx add esi, ebx movzx eax, word ptr [esi+ecx*2] mov edi, [edx+1Ch] add edi, ebx mov esi, [edi+eax*4] add esi, ebx call near ptr loc_3150931E+2 inc ebx insb outsd jnb short near ptr loc_3150937C+2 dec eax popa outsb db 64h insb loc_3150931E: ; CODE XREF: start+90p add gs:[ebx-1], dl start endp ; sp-analysis failed setalc mov [ebp+402407h], eax call near ptr loc_3150933A+1 inc ebx jb short loc_31509396 popa jz short loc_31509399 inc ebp jbe short near ptr loc_3150939B+1 outsb jz short near ptr loc_31509379+2 loc_3150933A: ; CODE XREF: UPX2:31509329p add [ebx-1], dl setalc mov [ebp+40240Bh], eax call sub_31509356 inc edi db 65h jz short loc_31509399 popa jnb short sub_315093C4 inc ebp jb short near ptr sub_315093C4+1 outsd jb short $+2 ; =============== S U B R O U T I N E ======================================= sub_31509356 proc near ; CODE XREF: UPX2:31509344p ; FUNCTION CHUNK AT 315093D4 SIZE 00000006 BYTES push ebx call esi mov [ebp+40240Fh], eax call sub_315093A9 test eax, eax jz short loc_31509389 push eax call dword ptr [ebp+40240Fh] test eax, eax jnz short loc_31509383 lea eax, [ebp+401155h] loc_31509379: ; CODE XREF: UPX2:31509338j mov dl, [eax-1] loc_3150937C: ; CODE XREF: start+98j call sub_315093C4 jmp short loc_315093D4 ; --------------------------------------------------------------------------- loc_31509383: ; CODE XREF: sub_31509356+1Bj call dword ptr [ebp+402407h] loc_31509389: ; CODE XREF: sub_31509356+10j pop ebp retn sub_31509356 endp ; sp-analysis failed ; --------------------------------------------------------------------------- loc_3150938B: ; CODE XREF: sub_315093A9+2p pop edx push 0 push 0 push 0 push 0 ; --------------------------------------------------------------------------- db 68h, 1 ; --------------------------------------------------------------------------- loc_31509396: ; CODE XREF: UPX2:3150932Fj add [eax+eax], al loc_31509399: ; CODE XREF: UPX2:31509332j ; UPX2:3150934Aj mov eax, esp loc_3150939B: ; CODE XREF: UPX2:31509335j push 0 push eax push 0Ch mov eax, esp jmp edx ; --------------------------------------------------------------------------- push esi push esp pop edi xor eax, [eax] ; =============== S U B R O U T I N E ======================================= sub_315093A9 proc near ; CODE XREF: sub_31509356+9p xor ecx, ecx call loc_3150938B lea edx, [ebp+401125h] push edx push ecx push ecx push eax call dword ptr [ebp+40240Bh] add esp, 20h retn sub_315093A9 endp ; sp-analysis failed ; =============== S U B R O U T I N E ======================================= sub_315093C4 proc near ; CODE XREF: UPX2:3150934Ej ; sub_31509356:loc_3150937Cp ... mov dh, dl mov ecx, 12B2h loc_315093CB: ; CODE XREF: sub_315093C4+Cj xor [eax], dl inc eax add dl, dh loop loc_315093CB retn sub_315093C4 endp ; --------------------------------------------------------------------------- xchg eax, edx ; START OF FUNCTION CHUNK FOR sub_31509356 loc_315093D4: ; CODE XREF: sub_31509356+2Bj adc [ecx+6C9A5C36h], eax ; END OF FUNCTION CHUNK FOR sub_31509356 ; --------------------------------------------------------------------------- dw 13FEh dd 98523087h, 850DFC6Ah, 6896503Ah, 35D8DBFAh, 0F826C620h dd 531B958Bh, 5F624F6h, 902A05AFh, 954FC762h, 20EA1F17h dd 400A35F2h, 0F05ECEC5h, 6333EBDDh, 41EE1CEEh, 4C39BBFAh dd 107EEC8Eh, 32D27329h, 0C8CD7FAAh, 0E056D432h, 148589F3h dd 418E5482h, 0AA2E9C52h, 83E31B52h, 0D5BE6CBEh, 0D8827B22h dd 77B143D5h, 3896B1FFh, 9F554CFAh, 0B8209BBBh, 835D4Ah dd 0C5B66482h, 0D0EF8E4Fh, 27E34722h, 627F88h, 60BCB839h dd 3D474CC9h, 0B87E05D7h, 0CB05EF8Ah, 98A1ED2Eh, 8722EBE4h dd 1986F70Ah, 7B5BC3AAh, 2B16C4D6h, 30DBECFEh, 0C657908Dh dd 0EA79A335h, 0A037CE12h, 907EE85Ah, 59C634CAh, 0BB9B83EAh dd 6D568416h, 0E41A03BAh, 1219AB3Ch, 0C046CC0Ah, 6276E052h dd 5C56ED9Ah, 0C8071EB5h, 0E14EBD42h, 3303FB72h, 18DE0C9Eh dd 0B8279408h, 247549B5h, 4D5E24D2h, 79FE6CDAh, 27B94A81h dd 0C3D7FC00h, 97DC2EB8h, 0F03A0F6Fh, 3B973F42h, 6495A109h dd 87F66492h, 2FC02A9Eh, 18801C9Dh, 34803CAAh, 0A85AC8B6h dd 0D41159C5h, 8D2B14C2h, 80AE4AFDh, 75BB6D21h, 103EC8C9h dd 0B0553D13h, 0A00E7D0Dh, 0CCE579B1h, 3F9E0C3Ah, 87180646h dd 57AB17F5h, 0F776A476h, 0D5312DEAh, 98465723h, 0C4D539A1h dd 58690432h, 0B75BC3BBh, 3326D421h, 404A43C7h, 0B7BFC792h dd 15716DABh, 0D80697F6h, 0DF70DA82h, 0F743C94Dh, 0E21ECCEEh dd 0F83EED2Ah, 2AAE768Ah, 779C34D6h, 0F41539E5h, 0DC05F422h dd 38F7548Ah, 7C9D84F2h, 3CD5CC50h, 38CC10E8h, 0EABC5EA0h dd 900FCC12h, 1014EC5Ah, 8395EF3h, 84ADE915h, 0B109C472h dd 0B491F3FFh, 8719A911h, 0D02E2987h, 7CFE412h, 0DBBE2C9Ch dd 19A3870Dh, 0A05EBCC7h, 66138972h, 8FDE0CA9h, 31B319E2h dd 526E9C5Dh, 6CD5B16Dh, 86166C9Ah, 9446B422h, 55E59305h dd 1A414C2h, 0D572E58Ch, 9930B125h, 1CB69E6h, 1D0934D2h dd 0D07E8809h, 3C9171EBh, 349E3CEAh, 577CA498h, 0D4F959C5h dd 0F82314C2h, 16D12995h, 9E60A678h, 111438D1h, 58D7DCF0h dd 0C55D7CEAh, 9D34A176h, 59EC5C1Dh, 1D8A3DB4h, 962EF96Dh dd 2C6171ADh, 94352CDAh, 0C85022B4h, 75B1EB7Ch, 28D620E1h dd 27CE8839h, 9C2101FDh, 4DC0Ah, 0DD4926F8h, 90BE48E1h dd 0D8479C9Bh, 0C1A56B6Ah, 3CF2483Bh, 0C38B73ADh, 0CB669466h dd 0B70B9F7Ch, 88F624F6h, 45C1FB4Eh, 18C6D015h, 3CBAFC2Fh dd 0ACE807B4h, 84A12248h, 38CC1CA6h, 151176A0h, 0C876807Dh dd 0CC0A2CDFh, 5B22DC31h, 693D7CEAh, 0D16627A3h, 70BAFBFFh dd 0F9CE21C2h, 0C022A2CBh, 5822B452h, 0EE7DCCh, 0AB938BB1h dd 654EFC0Eh, 27E25DB2h, 78FA3845h, 9CD1118Dh, 986DC0Ah dd 1B49DB6Ch, 0B4F9F925h, 40ADB462h, 21A638EBh, 978144B2h dd 0F03A8B6Fh, 4F73D42h, 183EE375h, 0B1F63C8Ah, 243EAC02h dd 1986F469h, 60CE3CAAh, 0A81684F2h, 0A15ECC3Ah, 0AD5947D4h dd 80AE78D9h, 4C9AFDB9h, 0F285999Ah, 6B91F74Ch, 0C95823D8h dd 0E823B040h, 42EA7F16h, 788831AEh, 0A14BEE49h, 61308126h dd 50FF49F6h, 0F96306A1h, 8908D95Eh, 49DB611Eh, 1EB73CCAh dd 0FB26D565h, 740FB938h, 27C474F7h, 0E38D09B9h, 0AA05B463h dd 45FA9D0Fh, 7BB21E0h, 0D84AE98Eh, 9C07B130h, 25DC5F8Ah dd 0DC9310B3h, 0B15BDE72h, 6AC5F406h, 5BA5DCFh, 0C479EBA6h dd 8032A952h, 56F526B1h, 0E89D2CABh, 8D36D07Dh, 440A8522h dd 39A346CAh, 0C5497C8Eh, 843F8246h, 44EA4D1Fh, 0D843DB0h dd 815DF97Eh, 7C13A352h, 35D245DCh, 0FD7C1DB1h, 942BFB2Ah dd 4DFA6D34h, 15B325EEh, 0CC43D302h, 750AB307h, 29FE41FEh dd 0F59208B4h, 0BD01B463h, 4DEBA81Eh, 4BF02C2h, 0DD7FC29Fh dd 0BF669527h, 25FA68EFh, 0E9A614BFh, 0D07FC46Eh, 4EF29125h dd 9BD4ECFh, 0EF16EA9Dh, 9508B85Fh, 57CF67F0h, 0C19619A4h dd 0A959E812h, 7217A03Eh, 21B455D0h, 0C1437CABh, 8D3F9242h dd 76F8430Dh, 788338ABh, 0AE4BEC45h, 6D1A8D14h, 20CE4DD7h dd 0D9611A8Bh, 853EF32Ah, 47E4541Ch, 3AD29D9h, 0D754C402h dd 731DB929h, 21F016A1h, 908A1FA8h, 0BB29C672h, 13FD8F0Fh dd 10B30A80h, 0D54D8C8Eh, 940F9236h, 34DA5DEFh, 0FD940DA0h dd 914DC96Eh, 6CE3A762h, 5A255ECh, 0CD7BEDA6h, 95329F3Ah dd 6DA664E7h, 0F08F31A4h, 0BF53CD44h, 79388A15h, 0EC651CEh dd 0D57A0E83h, 8417A853h, 30FD6316h, 0C8F2695h, 0AC47DA6Fh dd 7C38E437h, 25D448DBh, 0EA560091h, 8C27CA43h, 5BF36317h dd 15B523EEh, 0CC68946Ch, 610BAE09h, 21F041E6h, 0DEFE09B6h dd 0BD34F756h, 70EB880Bh, 0DB52BC0h, 0FE1EFF89h, 9D149736h dd 10CB68EBh, 0ED950BA0h, 0A87BDF69h, 55F2BA62h, 9984CCBh dd 0CE59F397h, 843DA969h, 38C87BEBh, 0F0A12884h, 0BA66CA77h dd 631B8F35h, 33A960D1h, 0EE0E128Fh, 87249446h, 44FD690Eh dd 0C943D94h, 8D42FD7Fh, 7A198937h, 24F02CE3h, 0EC6F06B5h dd 9227EA4Fh, 44F77106h, 1FB329F7h, 0EA26ED70h, 6E3BB03Eh dd 2CD947FBh, 0E28A3FBFh, 8C21DA4Bh, 53E0BD05h, 1AA217DBh dd 0B079E293h, 0AB278715h, 34DC7DFEh, 0EBF614A7h, 0B54DC376h dd 73E59B11h, 3CE48CFh, 0CD78EA9Dh, 975EB859h, 57CE60E7h dd 0F98C28B9h, 0AD5BC57Ch, 731B9E5Ah, 3DB534D4h, 0D30E1884h dd 8D3DA75Dh, 5ED70C0Eh, 169431B6h, 0AC6DE86Fh, 4013973Dh dd 3CDA42FBh, 0F64F7487h, 8E3CD95Eh, 4DD17017h, 1EB10FCEh dd 0CC45F16Ch, 743DB82Fh, 48D350F3h, 0F58A0293h, 0AC23DA50h dd 4EEB8C25h, 69F44F3h, 0DE6CE98Eh, 8829A027h, 32FB72EFh dd 0C1F625BEh, 0A25BD874h, 4AF2910Ch, 26AA5DCFh, 0A873E89Bh dd 0B108887Bh, 0A955DD2h, 0CCA218E4h, 0AF53F612h, 63118019h dd 21A37FC7h, 0C76B2EEAh, 8633B47Dh, 75E76931h, 2AE615BAh dd 0B57FFB6Fh, 5E0F9637h, 35CB40FBh, 98470CA7h, 0B329D978h dd 49C07017h, 35BB39D6h, 3B26D57Ah, 0C845D9A3h, 48B64CC3h dd 0DC7384DAh, 0D82CB706h, 70DFF900h, 0E3D32EE1h, 6495DC36h dd 0B80C8012h, 0BFFD4EDBh, 0C8D2CF47h, 0DCFA2F1Ah, 3C29619Dh dd 0A44D3CEAh, 254147FAh, 0B04A53BFh, 68592782h, 86845CA0h dd 0EC5D31EDh, 0D0FBEC1Ah, 30964BD6h, 0A00E24D3h, 0E83C10B9h dd 34F4C0F1h, 68E654AAh, 922CF60Ah, 311EE438h, 3ABE2CC2h dd 0C85525E2h, 0C4ED29D5h, 71C90432h, 54D9D945h, 47A39442h dd 8DE5973Eh, 48F6301Ah, 5736039h, 0D806A422h, 73D92D69h dd 0ED5D964Dh, 0B05EA86Dh, 0EB1F5BCFh, 18461C8Ah, 3099B2Dh dd 901A379Fh, 0DE097962h, 88CE3CB9h, 57E97BB5h, 0D4C149B1h dd 0F82314C2h, 0F6357BEh, 0C836B7C1h, 0EF81DEB2h, 701BF5Dh dd 0A0E62929h, 0B556C432h, 2836E1FBh, 0B1D55482h, 0DC101987h dd 5C27E412h, 1EE7DCBh, 0AF938BB3h, 674EFC0Eh, 0BD692076h dd 709E68BDh, 0B822565Fh, 6E341Fh, 0C9EB2492h, 0D0E6BB37h dd 55B9DE22h, 60965EFFh, 0A58414B2h, 9A1EA8DAh, 0F4A25742h dd 0A82BDBECh, 45F624CAh, 3ABB6B3Ah, 3C86B47Ah, 3DCE16AAh dd 0C217EE31h, 0F6D333Bh, 2D5910F1h, 709A9C4Fh, 0C836AF7Ah dd 4BAE675Ah, 0D5FA64A1h, 0E0177A5Fh, 0E4EC4F32h, 0BB9E0C7Bh dd 78E75C48h, 0EBD69F0Ah, 0C3FD8499h, 24DF8A69h, 6DE433E7h dd 27CD7EC1h, 0FC1D537Dh, 2012C7E9h, 0E966FE56h, 0FF91B618h dd 8928F07h, 9C3AEFDAh dd 0FC7921A9h, 0F7A5FC2Ah, 0AFD1AE31h, 581EE6FDh, 0FB315D42h dd 413B7549h, 8DF624F7h, 0E336A49Eh, 236B6A2h, 45CFA923h dd 4AE184B2h, 5A3F8EB7h, 0D9D3DD7Ch, 80060909h, 9536A412h dd 9E601DBh, 0C54D34E2h, 0A04E59EFh, 0E072B8B1h, 891A037Ah dd 0F9E654C2h, 0C02C94E6h, 0C1EB052h, 0AFBE2C9Bh, 0D8222377h dd 6DB2372Ah, 299220F6h, 1A8E4CBAh, 0B8227C02h, 5238DC4Ah dd 0B7E124C6h, 0D0DA3F4Fh, 558F8722h, 208FF8FDh, 28715B2h dd 0B174DDF8h, 0F866D42Ah, 0D5514ECAh, 88B640F5h, 0A4C8298Ch dd 70D2A439h, 60CE3DAEh, 8CA27BA5h, 0F05ECE1Ah, 1C45817Dh dd 5B75C8Ah, 2B20D0D2h, 0C4F5BC4Eh, 99434C8h, 35F12ABDh dd 0E816E0BDh, 455E8923h, 0ED190212h, 0C06EB80Dh, 5A32B3DFh dd 8FA46CDh, 9902E36Fh, 0D3E5BC2Ah, 71866EB2h, 208EE749h dd 0E876C452h, 95918E1Ah, 48F600BDh, 92F6A85Bh, 0ACB9B422h dd 0B571F44Eh, 68966061h, 638B73A9h, 0A5669466h, 0C0AE1848h dd 89836EECh, 54B3275Ch, 0FB86B476h, 605BB1B3h, 0AB16C4E2h dd 22A19AEBh, 0B0A9D406h, 80EE5DD5h, 0C926201Dh, 2EFEEC5Ah dd 1ED64198h, 0AF0E426Ah, 0E857C5B6h, 10A08C7Ah, 0F9A0A5B7h dd 8E67CC34h, 83349115h, 51F8EA55h, 0C9C85FADh, 0B61FBC40h dd 0E303FB21h, 29DE0C9Eh, 3D295539h, 6EDC95h, 5484A11Fh dd 90946C9Ah, 0D846B84Ah, 0DFDDAC6Ah, 28F28F27h, 0B012B1FAh dd 7D69D442h, 40AE1C35h, 88F6D53Bh, 80002D1Ah, 17D0BD30h dd 60CE992Fh, 0A0D007F2h, 0FF53F096h, 38A68D06h, 0F5CE60CAh dd 0F20A08E1h, 10F26955h, 556B34A2h, 802E5CCAh, 8D31E50Fh dd 9CE1790Eh, 49374FEh, 0E0D1E28Bh, 7D02903Ah, 53C0ADEBh dd 0B7294E92h, 0A788D45Fh, 1999048Dh, 70F95C00h, 0EAC46302h dd 24ED49B5h, 888524D2h, 0C0AE3C8Ah, 0D846BDCAh, 57E1B86Ah dd 9B928DCh, 25E18C9Eh, 0F826F099h, 76DADC0Fh, 0D7FADE1h dd 0D07E891Fh, 1A869C33h, 319FBCAAh, 3DE9D4A4h, 0F01EE8E5h dd 2134810Fh, 0B3BE5C8Ah, 9867F0DBh, 0EF2FBD08h, 18E20337h dd 840AFBEAh, 0CC5151CDh, 0F3660C3Ah, 6C91D942h, 392F9C4Ah dd 4E39B791h, 2FF7BCEh, 0F14B28A7h, 9321CE49h, 74E2621Dh dd 14B025EDh, 0E455E36Dh, 721CA909h, 1EC24AF7h, 0F98D1EBFh dd 9D1ADA4Dh, 4FE28C12h, 68A421C0h, 0C177E2AFh, 972EB137h dd 42AE68F9h, 0DD069BD2h, 0A0EE2368h, 71FE9B10h, 9E05DC7h dd 0C971E780h, 8926AD56h, 38CA64ACh, 0CBAD1584h, 0A746C632h dd 74118720h, 0B933EDBh, 0D82E2EAFh, 0DD66F602h, 1EBE3D4Ah dd 42C67AE2h, 8961D655h, 7E50C41Ch, 25CA5EF3h, 98EE21E8h dd 0BD4EBC2Ah, 34D2E9F3h, 0F5184CFAh, 0B8668075h, 5BFB234Ah dd 89B664B6h, 0AC8A7332h, 6DCDAA48h, 20CED871h, 46EAE8EBh dd 3178A68Fh, 8D7B2B7Ch, 0BB1391A9h, 3F624F6h, 7569AE6Ch dd 9D0B5104h, 608E1FE5h, 8B63017Dh, 79A4CC7Ah, 762AEEC4h dd 815FA734h, 8BDD6BF0h, 4E169D7h, 329634E2h, 5F0816EAh dd 0A872AFA7h, 14E28F7Ah, 539350CAh, 0C02E98E2h, 4B30B752h dd 1F2BD39Ah, 700634C6h, 1FB14066h, 2896039Ah, 33981FBAh dd 0B875DB5Dh, 242149B5h, 7D5E24D2h, 78019326h, 27B9406Bh dd 32EC7195h, 633E44F2h, 0E51E8CFAh, 0CB349111h, 0CEA32B8h dd 1D09649Eh, 0D07E8879h, 1886FE8Ah, 10BD4BAAh, 0DC78ED80h dd 0A05E8D5Ch, 1CB5817Dh, 5675C8Ah, 0C876800Dh, 9DF3DD55h dd 5886232Bh, 850FF963h, 1707C472h, 70BA6FEFh, 7C8EC7C2h dd 4D2E9C0Ah, 486172E7h, 0ED33759Ah, 98465005h, 1FB9FAC2h dd 0AD51628Dh, 709E574Ch, 1DA564FDh, 2EC7B2h, 0FE23A992h dd 0C0FE2CC1h, 0B247DE76h, 22E6AE6Ah, 975644B2h, 0F03A676Fh dd 0A2A65142h, 0CD233EFFh, 88B67F3Bh, 5D38C648h, 589D02D7h dd 309868AAh, 5744D5A2h, 0B07A23AFh, 0AD594C82h, 80AE782Dh dd 0EF3E21D4h, 0F87EEC1Ah, 58C634AEh, 0E3412FBDh, 0C664F779h dd 30D2403Eh, 5C85C13Dh, 0A8BD9C4Ah, 876E455h, 46539917h dd 155F74A2h, 0A06A0B97h, 0DE57EC72h, 7C36B345h, 0EF269402h dd 4E279203h, 0C9870D7h, 6FFE2096h, 9862D7B7h, 2F4E796Ah dd 68D7A336h, 0B5761FFAh, 7566D442h, 0B9373Fh, 357B3DD2h dd 0D07E88C9h, 0E7707E8Ah, 0B773BF55h, 0A816C4D6h, 0F19C4835h dd 0D4271482h, 80EE5D5Ah, 0C937CC46h, 8581EC5Ah, 58861015h dd 0A19EB86Bh, 6306C432h, 629E66AEh, 5C31C13Dh, 0AB9C4Ah dd 607B910Bh, 50BE3F12h, 0BC85E11Dh, 2A5BC6Ah, 336EB9F1h dd 5DE4CFAh, 44A3192Bh, 506E9C51h, 6C75B16Dh, 507B6C9Ah dd 0D97D302Dh, 6005FC6Ah, 97D6CFBEh, 489B03CAh, 3E669459h dd 89140Fh, 889C65D2h, 0D254AD70h, 3C49619Dh, 984D3CEAh dd 0BA928B0Dh, 635ECC3Bh, 2352810Fh, 90845C8Ah, 5DC9F740h dd 103EC8E5h, 0DDC9F427h, 0A00E7C18h, 0F44079BFh, 382F0C3Ah dd 871C942Ah, 0C0BAF4F5h, 2328E452h, 748AA57Ch, 0C7938BB6h dd 6D4EFC0Eh, 688A20CFh, 98DFFDBAh, 47D96EA3h, 104A98C1h dd 43BEC453h, 51FA489Eh, 9C4DBCC2h, 0C8DEF44Eh, 68D644B7h dd 0C828A2DFh, 6D998342h, 40EE3895h, 4EFAA051h, 5D1EAA5Dh dd 589AE5F7h, 8CE56AAh, 0A81684D3h, 65A19F68h, 38E63049h dd 94CA2047h, 0EBA35B45h, 0D67EAC7Eh, 18CC0CA6h, 0F75E7C80h dd 23C33B61h, 339E4C5Eh, 4A5BD924h, 0AA2EDC16h, 87A8C52h dd 3E92C9Ah, 0BCCDE11Dh, 0EC73BC6Ah, 5D960472h, 796BC1F7h dd 3526D427h, 4049D4C7h, 22780F92h, 0C3A83DDAh, 0FC8121DDh dd 0D80DFC2Ah, 0F9F93AB2h, 5937271h, 0F826F14Bh, 0EE5C113Ah dd 609674A7h, 2FC156EDh, 0FB918603h, 61B9B1A3h, 679D6E19h dd 4DD30211h, 38E6318Bh, 7769F839h, 37651DF9h, 505A57CFh dd 2F7BB4A2h, 0A10E3CFEh, 0D83EEE46h, 0CF9E0C0Fh, 38C2D757h dd 0C8931C0Ah, 876A475h, 0D5793DEEh, 98466F1Ah, 0E04EBC2Ah dd 0F9E81B4h, 99DE4CFAh, 47D96A54h, 14EE598Dh, 48B624D2h dd 52A3ECDAh, 6DCBB426h, 20CEDB63h, 2B43BBE4h, 331ECCDEh dd 7C692BBAh, 40AE1C31h, 0A0FBE15Bh, 0D054AC5Ah, 63130B34h dd 0E5CE7C8Eh, 0C928B32h, 0DB5ECC3Ah, 52F64442h, 81840CC9h dd 0C836A47Ah, 8581BA9Ah, 58861085h, 0AFF18469h, 0E85420B6h dd 211B857Ah, 0F5E614EAh, 80068987h, 15E36952h, 1BE6CB2h dd 0C8061EB0h, 0C40529D5h, 0D0150432h, 0C25A4345h, 0D2269400h dd 11DB234Ah, 0B7B664BAh, 0D0DA2B4Fh, 27BE3722h, 22157865h dd 0ED5F44B2h, 0B05EA4DFh, 3B651D71h, 2AFF4CDBh, 3D0935D6h dd 0D07E840Bh, 3CAD619Dh, 0A04B3CEAh, 0AA6100FDh, 396DCC3Ah dd 108F910Bh, 0D1BF5C8Ah, 0C829CC43h, 0EF2EEC55h, 18E25337h dd 0AFCEF9EAh, 0E854F4B6h, 1D1B857Ah, 0BBE614EAh, 7816D781h dd 876BC6Ah, 91BDFEA9h, 79F18515h, 0C87B39A3h, 631D0432h dd 64D8F486h, 6A159402h, 0F1991D49h, 0CD3FC565h, 90BE44EBh dd 93F1BBE1h, 166D056Ch, 67CE173Fh, 0B30ACF4Dh, 390D9D92h dd 0C17E1FA2h, 0E1813BE8h, 0CE4A5574h, 14FC772Bh, 0EB114EABh dd 0EA9DB8B9h, 0E01CCF2Eh, 0C7EE500Fh, 41CD853Dh, 0E0132129h dd 49BDEC1Ah, 54E27029h, 0A0B6F463h, 2865C432h, 0DB5187B9h dd 715BD9C9h, 3C2EDC2Dh, 0C1453BD9h, 22DF1036h, 0EF7C48E4h dd 4A6E9028h, 0C4E2584Eh, 0ADAA6286h, 5053943Eh, 1E514A9h dd 0DEE61AFh, 0ADF518DAh dd 0D814F771h, 0DFC77965h, 6B5DBB4Dh, 0FE57DBC7h, 0C4E2DB01h dd 7D51E375h, 0C6A32785h, 2F0F2815h, 4FBB0B9Dh, 6FFC0FE9h dd 57E9A276h, 0A30EF1C5h, 0BCA95BD6h, 7F11A3D1h, 8BDE7F21h dd 1F8113A4h, 0A7393A26h, 48DC4F15h, 0E856C424h, 0CF616292h dd 78E6BC3Dh, 41739C0Ah, 485757BFh, 5047C59Ah, 676274E2h dd 0CDFB3718h, 4C96445Ah, 0F1B86E33h, 0B77CD93Ch, 6E3ECFh dd 74E8AF92h, 1198B2D9h, 0D703E419h, 208E2EEFh, 7E95B3B2h dd 0B01EACFAh, 0F8A3514Dh, 3581C8Ah, 0CF9668Eh, 0D03EACA1h dd 38A68AE3h, 6FEE1C8Ah, 0A8162A76h, 0E91243Ah, 0BAA9EB7Dh dd 80EE5C69h, 37C833FAh, 10DC04A5h, 0C54D34A2h, 0A04E54DBh dd 17AB71DAh, 0B81A0385h, 0F3E654C2h, 8006B1BFh, 34286F52h dd 0CE56F299h, 0EAF98B1Ch, 0C4043D5Ch, 0C8960412h, 7388B231h dd 0DAB8078h, 2ECC4Ah, 0F1A65E91h, 90FE69DBh, 69E34775h dd 0D38C1F69h, 3A881B16h, 3D8CBDF5h, 0F86781C5h, 0BFFE948Ah dd 7718AF3Ah, 9AB5F6E5h, 8CCF76Eh, 4BCB7D27h, 0EF9FACB1h dd 0D0180B28h, 188634A2h, 0BC61743h, 4DBDB458h, 103EC46Bh dd 2BCE7E9Bh, 0A844F5E9h, 6B468633h, 0BB9E5419h, 38CE6147h dd 0C86C9D0Ah, 3B26A753h, 72354848h, 0C004FB86h, 0C85F01A9h dd 27960432h, 8F23AE3Eh, 95936BFDh, 0FF6E9C62h, 892A307h dd 0B94B93DAh, 2746F40Ah, 60AAFBFFh, 7D5BC9B2h, 3D1ECCD2h dd 0B84EC9D7h, 2AFC4D8Ah, 99439BD2h, 2F3EEC32h, 58A28BF7h dd 717BC3AAh, 5716C4DAh, 0B07ACBAFh, 31139982h, 7FEE1CEDh dd 881EA9A7h, 8581BA5Ah, 588610D9h, 881FD969h, 2B56C472h dd 309E0C92h, 798C09C2h, 0E300718Bh, 0F82EE412h, 0D03BED95h dd 1D0634F6h, 28CD7FEAh, 0E999F48Dh, 30CACC3Fh, 0A81B5702h dd 756EF64Ah, 3437428Eh, 0E19260FEh, 3026A757h, 0DF7103AEh dd 0AA3E41C7h, 58E17307h, 7992B90h, 6D5132EBh, 9AC232AAh dd 2F94447Ah, 21F30B9Dh, 50EA7821h, 8F1F317Fh, 0A0D5CC7Ah dd 227728Ah, 0A59D5ECCh, 0C836CC44h, 0D4F5ECA5h, 89434C8h dd 84BDE915h, 2CD5C472h, 6CA08D72h, 0DBA6BFDh, 0C4E81F09h dd 0F78B90BAh, 0AF3AC465h, 20678B1Dh, 0E04EBC0Fh, 28B9BCB1h dd 60364CBAh, 7A269402h, 30D6DC6Ah, 0A0B62492h, 90FE6CD9h dd 554690E0h, 0ED82D83Eh, 682EC79Ch, 587E9586h, 0F866D442h dd 708A4801h, 9ECEF8Fh, 901D5DF7h, 0EC821C62h, 0A2AFC355h dd 84F6h, 1A5Eh dup(0) UPX2 ends ; Section 4. (virtual address 00011000) ; Virtual size : 00001000 ( 4096.) ; Section size in file : 00000200 ( 512.) ; Offset to raw data for section: 00011000 ; Flags C0000040: Data Readable Writable ; Alignment : default ; =========================================================================== ; Segment type: Pure data ; Segment permissions: Read/Write _idata2 segment para public 'DATA' use32 assume cs:_idata2 ;org 31511000h align 2000h _idata2 ends end start