; ; +-------------------------------------------------------------------------+ ; | This file is generated by The Interactive Disassembler (IDA) | ; | Copyright (c) 2007 by DataRescue sa/nv, <ida@datarescue.com> | ; | Licensed to: SRI, 1 computer, std, 05/2007 | ; +-------------------------------------------------------------------------+ ; ; ; +-------------------------------------------------------------------------+ ; | This file is generated by The Interactive Disassembler (IDA) | ; | Copyright (c) 2007 by DataRescue sa/nv, <ida@datarescue.com> | ; | Licensed to: SRI, 1 computer, std, 05/2007 | ; +-------------------------------------------------------------------------+ ; ; Input MD5 : 7586A2002B77992419CCE8696338C24F ; File Name : u:\work\7586a2002b77992419cce8696338c24f_unpacked.exe ; Format : Portable executable for 80386 (PE) ; Imagebase : 31420000 ; Section 1. (virtual address 00001000) ; Virtual size : 00005000 ( 20480.) ; Section size in file : 00005000 ( 20480.) ; Offset to raw data for section: 00001000 ; Flags E0000080: Bss Executable Readable Writable ; Alignment : default .686p .mmx .model flat ; =========================================================================== ; Segment type: Pure code ; Segment permissions: Read/Write/Execute UPX0 segment para public 'CODE' use32 assume cs:UPX0 ;org 31421000h assume es:nothing, ss:nothing, ds:UPX0, fs:nothing, gs:nothing dd 1400h dup(0) UPX0 ends ; Section 2. (virtual address 00006000) ; Virtual size : 00002000 ( 8192.) ; Section size in file : 00002000 ( 8192.) ; Offset to raw data for section: 00006000 ; Flags E0000060: Text Data Executable Readable Writable ; Alignment : default ; =========================================================================== ; Segment type: Pure code ; Segment permissions: Read/Write/Execute UPX1 segment para public 'CODE' use32 assume cs:UPX1 ;org 31426000h assume es:nothing, ss:nothing, ds:UPX0, fs:nothing, gs:nothing dd 0E8D2FE1Fh, 87778778h, 0BE817BB1h, 26493A6Dh, 94F32D5Dh dd 796894F9h, 17958305h, 4B2E2B70h, 782E2F8Eh, 84107912h dd 6D876339h, 0A7A36950h, 0F37DC7CEh, 0DA643A0h, 58916A7Fh dd 0FDF5257Ah, 10448688h, 0C2A4A3E0h, 6628547Ch, 0F04568F4h dd 0B70D6F7Dh, 4D804F4Eh, 1275AF6Fh, 5FC5A7Eh, 64838A8Eh dd 284D7DFCh, 21177790h, 88102164h, 0E3D518C2h, 7B7A1553h dd 0C338F447h, 4C91C7A3h, 8780FBF8h, 0D843DF1h, 5893657Ch dd 15872EEAh, 0D95E317h, 5CE82B70h, 7060BE43h, 8468760Dh dd 0CB06A695h, 7B120451h, 0C7299320h, 2F786841h, 4BD96419h dd 0C8D583E3h, 28803D1Bh, 494A2B2Fh, 4B4A764Ch, 2E8C0E8Eh dd 2B800D2Eh, 8744004Bh, 0D2204E43h, 2BE7E47Dh, 0BCFBCD38h dd 87B84B74h, 27878027h, 0BBB12326h, 705C34F3h, 7C5C3CF3h dd 0B7FB2F60h, 77123887h, 537909F5h, 8787A381h, 68F22187h dd 7B8720F2h, 0B9A17AA9h, 9AF87C82h, 5C2C527Bh, 7A9BB860h dd 0DDF0AB72h, 0C38323F2h, 0F2792885h, 62B28660h, 0FB6EA95Ah dd 5B617BB8h, 87C2639Bh, 6E6488C3h, 6CF53E3Eh, 4882FB4Fh dd 0BB24C704h, 1794FB0Dh, 40C057C3h, 0C6215F21h, 5F23A34h dd 0DD8B729Ch, 5B97871Eh, 77DCDDA3h, 25F3B048h, 0A3FD6874h dd 0FB7B05DCh, 9D8762BBh, 0C67795A0h, 704DF605h, 0AE2F9CA9h dd 21B8FD21h, 1CF56B0Ch, 35CF8783h, 0B9536240h, 0E1BB7B21h dd 3CF2818Fh, 5B939C6Dh, 453B067h, 0B0B0763Ah, 39F27B93h dd 8785C698h, 3DF3FCA7h, 0DF32E74h, 78F22F68h, 340CB8FCh dd 542B19F3h, 1017877Ah, 0F26BA780h, 8FBEF3A0h, 7025F0A0h dd 7B6E7040h, 0CE7FF06Ah, 21871717h, 1983F83Fh, 7D730421h dd 0F47E0702h, 1996FB8Bh, 9F8E3972h, 2277817Eh, 0D303539h dd 0BA1C23C3h, 33C3CF73h, 1F785FF8h, 4B36BB25h, 0A376F3B1h dd 7C879915h, 696CCE77h, 0FB39BA7Bh, 0EA887B81h, 0F3F621E1h dd 0FDC66E96h, 0FE195ABAh, 0A0F88512h, 1454A810h, 7CA407C4h dd 28EED91Ch, 7F5DF11Ch, 0F881CE3h, 0BF2FF7FEh, 73D3A0FDh dd 841DFB78h, 0C3101078h, 5BB961C7h, 21217C9Ah, 0C5F180F3h dd 87FD67A8h, 9694A34Ch, 5C4AFC77h, 687CBFFBh, 0F72F5B76h dd 0F31E4E4Fh, 28219C42h, 0A796F677h, 0F8978387h, 0F23478DFh dd 0E0FDF07Fh, 0FBA0C65Fh, 0E5F11993h, 0E6F073ACh, 97C66F0Dh dd 0F50A831Eh, 313F709Eh, 44CF0612h, 703D9347h, 0CDF18815h dd 3CBC8EB4h, 0B34EA0A0h, 5EF8E87Eh, 9C2C2FD1h, 0B9940327h dd 0F2EF7B97h, 3E7EF06Eh, 0FA4B3A57h, 87C20685h, 3EF5E465h dd 0CE7A5979h, 0A7911B77h, 2865580h, 0D7E4064h, 723C120Eh dd 0B1FE438h, 61A49464h, 76EC537Fh, 14A1C8F4h, 394812A0h dd 0C675A01Eh, 4BA074C9h, 0D7860EEh, 0A1C54163h, 4F89B4E6h dd 0E479EE7Fh, 0FA0A921h, 55E077DDh, 35FB2102h, 0BA7D716Ch dd 88CBF4F3h, 35F31070h, 5275F988h, 3BFDB0C1h, 7890F2DCh dd 68B5D6E6h, 71157FD1h, 0E329603Ch, 12A314D5h, 6F7FE11Bh dd 4BE8E87Ch, 0A1C2C7A3h, 0CC540F5h, 4EE644Ah, 0F6944D0Eh dd 37FE99C8h, 287C4DCCh, 0C736B891h, 25C10410h, 0BCBF61A1h dd 93866964h, 8F0D6B60h, 1055E6B8h, 2B746108h, 38341078h dd 0FF72AE0Ch, 77882BEFh, 0F5A32B50h, 6294D3AFh, 288480D3h dd 0FDDE58FCh, 2B2E56EBh, 74892E83h, 2ABA55A3h, 2E667C9Ch dd 65C75446h, 0CE41F30Fh, 0D5AE4BAEh, 0E06533A3h, 17122FCAh dd 0C787AF4Dh, 0D1BA1859h, 7C7C054h, 444C6819h, 0FCF2470Ch dd 0FE38F8CEh, 7FF9CECCh, 478E8303h, 0BF73BB67h, 0F81C4D21h dd 98B9211Bh, 504DFD7Bh, 0D7A5727Ah, 0D11E0E89h, 126A0DFEh dd 0AB87A2EDh, 0F0859470h, 0DA37E514h, 8A7B9384h, 87CF86CEh dd 0AA4B1C2Dh, 1BEB98C1h, 0BAF9898Fh, 787E6330h, 0D5EC972Ah dd 86077B15h, 1BF00A6Eh, 24F4DF7Eh, 9098560Dh, 4CD02ECEh dd 2572F6Dh, 0B3CD2F2Fh, 0F4D69EC2h, 7D747027h, 133A9472h dd 0F5668F17h, 0A469083Bh, 937B5C5Ch, 4B15E157h, 63C04034h dd 38865CB8h, 0C31F1F38h, 6031A2ACh, 0F17C0E5Ch, 73466554h dd 0E74EE573h, 0AA26B848h, 4C12AEC3h, 76EA7083h, 7B103F41h dd 0B9E19A2h, 1B6458ADh, 0F5FF2645h, 7A66CDCCh, 60581374h dd 131DE97Ah, 61932796h, 60642F00h, 85F48C6Ch, 35775CFBh dd 7579F164h, 4774BF50h, 1E86969Bh, 48F19CC0h, 34FCD994h dd 0A8D5EBC4h, 5927AD90h, 0B0F076E3h, 7ACD567Dh, 8C052A73h dd 63692084h, 0C011DD07h, 6512D87Dh, 0CF249D2Eh, 69E7CE1Fh dd 2228EC3Dh, 0CC7B71E4h, 7ECC1610h, 5C3400BEh, 86B56A1Fh dd 27CE4E6Dh, 0CC752CF2h, 71F86EF0h, 0B7E17E39h, 501717BEh dd 18129604h, 3FE0642Dh, 8F4991DCh, 7046A6F2h, 4698A9A0h dd 0C40BC5B4h, 6687348Bh, 711259F5h, 97199710h, 2149FE76h dd 58333DFCh, 95C2B247h, 2F627C07h, 3DF098A8h, 39836883h dd 1EEA5867h, 98A88621h, 822F717Ch, 9E1F3182h, 5110032Ah dd 0A0479976h, 10AA1A98h, 12A3CB17h, 2BA45C68h, 1E3CF973h dd 1EFD75BFh, 1027A50Bh, 189CD1C5h, 1773611Eh, 0A42F0DD8h dd 0F184E05Eh, 1C49980Dh, 5E6F50A1h, 4F7B9256h, 0BBFF38ECh dd 0DFB0C7CCh, 4310A098h, 2D99E3FBh, 3DF83B04h, 0ED60AB80h dd 7FFED617h, 10874B35h, 9E657E38h, 3E3195E8h, 0D0B8E014h dd 6385636h, 1C3E744Bh, 7A61E3A6h, 7048C001h, 0F925883Eh dd 5FF4779Eh, 495E19F8h, 79BDFD77h, 44C5A1D6h, 7FA870A7h dd 88C44478h, 0B4C82EE8h, 7469700Eh, 0B38C3A27h, 248F4459h dd 0CB696789h, 0FA9C9474h, 726B7A33h, 0D8800016h, 0D94649BDh dd 0F15D33C6h, 0A33BD2FDh, 0D68808D8h, 0EADA7C05h, 36B87744h dd 7A039064h, 0FC7A8A12h, 3F840563h, 887A3261h, 0D84B9C7Ah dd 7A6E3010h, 0AACF4DAFh, 0DF45057Bh, 0EE71079h, 4E9EB49Eh dd 4232581Ch, 6322CFB4h, 0A4FFCF4Ch, 120EFC98h, 0EE8C5208h dd 9EB09BF4h, 26B018F8h, 2EF1C72h, 5F46635Dh, 0DA5078FCh dd 4E337847h, 44A1C113h, 0E0C1CA14h, 9C0FC59Ah, 0A4791F2Ch dd 49062877h, 0BF0FBB9Ch, 0D4104375h, 0AB50B875h, 0C940B6A4h dd 9D1770B1h, 0A374027Ch, 0AA303D5Ah, 0A555BD80h, 0AE635957h dd 3856A364h, 7E086AA6h, 34E84194h, 38C4803Ch, 0BA09E8AEh dd 63A6283Ch, 21436668h, 0ECCF4B17h, 0F959EF75h, 1F91D481h dd 90048693h, 6E5CDDF8h, 105D7E78h, 5DE5642Ah, 648A237Fh dd 0EE8C6A0Eh, 0F1E591BBh, 0EC72971Dh, 3B00412h, 1CC99BBBh dd 0B1C63174h, 0E165A103h, 0E8992C9Ch, 0F4E7915Ch, 0A4B4BB31h dd 0B7005C56h, 54FA3095h, 801C7D54h, 1E8C6D74h, 4B61D87Ah dd 7008025Bh, 0F7F1260Ch, 8CBEA576h, 6429B427h, 0F8CB97E4h dd 75C9CD9h, 7DDC4DD0h, 0CDA80063h, 2F6AFA80h, 220C2F4Fh dd 72B38149h, 0C80766Ch, 71D81033h, 0B250CF2Bh, 55450CB6h dd 1F95FDB1h, 0D8395811h, 77842D87h, 4DC2C190h, 289CE6AFh dd 76EE50D4h, 23487A88h, 2D3FC735h, 0F4787180h, 106DFB9Ch dd 8C0D2043h, 60FF963Ah, 0FD6B59BDh, 0D17228F3h, 0C78F07CEh dd 4439F357h, 10B97B2Fh, 30F33554h, 2800F34Ch, 0D88C35F1h dd 967E52CCh, 6410A033h, 25EFA063h, 888D21D2h, 7010AA79h dd 0B9F5946Ah, 950CBBC9h, 6968AF75h, 8C1776FAh, 6C71CA12h dd 8035895Bh, 0E90E5429h, 606028FDh, 0F15210EFh, 142CD891h dd 0B23825C8h, 3EB8957Bh dd 934C131Bh, 0E2D36148h, 2116AD00h, 7B05882Dh, 0D31F3D9Eh dd 8846A533h, 2B284929h, 7198D466h, 8C4DBC8Fh, 6F82AEC5h dd 47921512h, 2D0FA889h, 0CBF4394h, 6393207Dh, 229D066Fh dd 5D4CF4C7h, 7D847621h, 4E9F4C27h, 0C707F93h, 99842097h dd 272A66FEh, 18572929h, 0CA114977h, 24E9D93Ch, 0C2C05D75h dd 0A558A33Ah, 0CA6BC9D7h, 694BD694h, 55217793h, 0CE1281BAh dd 0E195BCC9h, 74F844C4h, 6C28D028h, 55F0CAEh, 25B85428h dd 3C218461h, 3B0458C2h, 5C04F32Fh, 0DDBDFB6Ch, 669AA22h dd 1C62FF6Fh, 0F847878Dh, 6CF019BAh, 8F433E66h, 5CF89104h dd 0BEF47843h, 2CADAEA3h, 27563CF3h, 2E2FD422h, 486065A3h dd 57591E0Ch, 0F0EEA40Bh, 28885695h, 782E2861h, 7BBBD4D2h dd 0ED0F994Ch, 318C35BCh, 0F71316F4h, 88748210h, 0B170BF87h dd 4CE311EEh, 5652B44Ch, 0E1D50B34h, 72720D95h, 6258C428h dd 466E7960h, 7FBE2CD9h, 794307C0h, 0D589B60Ch, 0F3743805h dd 29707978h, 275C3CF5h, 0E3194C59h, 0AB6948BDh, 0C5C217Bh dd 7F803690h, 7FC3B46Dh, 1E57B058h, 4B4BBF83h, 0B980B09Ch dd 73FD689Fh, 3E01C8ACh, 0F37A78CEh, 784B6A25h, 8B085E3Fh dd 79E5BA79h, 2BBC92B1h, 0DB699BBEh, 8ACD034Dh, 0BB5D284Dh dd 5ECEE5FBh, 0D59F30F8h, 381E14CDh, 39886FE6h, 0C3104DEDh dd 0E0B69B49h, 0CF141045h, 3F37883Ch, 61C91814h, 0DD352C86h dd 54BDAB6Ch, 42CA2A4h, 84758678h, 4BD94CC2h, 530178C1h dd 0AB943BFh, 0AB9F37Ah, 9993CF17h, 90D95153h, 5BBF7B60h dd 865DDBD4h, 5B45B4EEh, 12690Ah, 0A2493880h, 0BC934450h dd 0F28996Bh, 148E375Eh, 0EC66AC69h, 0B544106Dh, 7396351Ah dd 0EF40107Bh, 0E51E4644h, 2C2B42CDh, 0A8FB2A2Bh, 0F43F98C9h dd 7CBAE05Ch, 6B15FA5Bh, 761C48E0h, 90A8C98Fh, 70BB6EACh dd 0C3963651h, 0F12F3B0Fh, 0F810107Eh, 5FFC65F1h, 25370660h dd 6C9415DAh, 788AACB8h, 0B94C2BE9h, 7A031314h, 0F8934279h dd 0E2AC109Eh, 6235850Fh, 0CB324E00h, 0A4B5570Ch, 1F0226DBh dd 0DB1D740Dh, 2B84DC86h, 62A1AA29h, 42FE2E6Bh, 0A44610A0h dd 5E2EA0F4h, 20612681h, 80A2126Ah, 267D68BAh, 97332EB8h dd 741EEFDCh, 9425F190h, 0A7877D75h, 5D958F18h, 427C6787h dd 3B84DBBBh, 0F2679F0Ch, 27B1FCB4h, 0C9031C5h, 921328A7h dd 1C38273Ah, 0DD61FDC2h, 3C741C1Dh, 5391D7DBh, 6C802703h dd 0E63067A0h, 82B6D594h, 6D580610h, 9A931A36h, 24B9B72Bh dd 3D27993Ah, 0D479E83Bh, 81E6503h, 0C84B44D6h, 0AB7F69AEh dd 7A46A33Bh, 0F842AE9Eh, 0E3757281h, 0D3C810CCh, 0C981BDBh dd 0FA5379A0h, 8CDB0304h, 0FE71A183h, 0CF459CB5h, 51983D2Ah dd 96B58E08h, 617C1C75h, 101B639Ah, 946B5BCAh, 244C37CDh dd 6BFE936Bh, 0C818E1D6h, 4D118362h, 41083C80h, 0E85D5438h dd 0AAE8F7EBh, 8B5B01Ch, 0E83DF46Bh, 0EC7E9724h, 0A41642Ch dd 0E434E09Ch, 0DC44D83Ch, 3F5BE94Ch, 0D454D0F6h, 4164C85Ch dd 0CCB09C0Ah, 0C46CC060h, 0E774B868h, 0BC64F63Fh, 0B47CB070h dd 80A83584h, 5BE9B09Ch, 88A08CACh, 0FDD694A4h, 90980A41h dd 7CFF9C9Ch, 78F31EC5h, 0DB14AB4Fh, 0C100A2A6h, 7A84C815h dd 0B71FBF4h, 94F44C6Ah, 39247B0Eh, 32F5E8FDh, 93748721h dd 35F56290h, 0CC759C40h, 0B1416224h, 0FF738804h, 0AC10410Ch dd 4FD0D335h, 0CE4A1A0Fh, 0BC7E35B4h, 0FC467515h, 0E2C431FCh dd 362F7C1Dh, 52A3430Ah, 724C6D59h, 5F166EDAh, 396F4642h dd 27E2503Ah, 559986Ch, 8060CC90h, 93E46BF0h, 0BAFA3A9Bh dd 226DE1EBh, 6318EDD7h, 1B2D3F7Bh, 0A607DCF8h, 0D56988D2h dd 733DF229h, 4A8712E6h, 0F8B995A3h, 0B4422ABBh, 0A4254049h dd 89708642h, 7325F05Dh, 77857FAAh, 22744DCFh, 80748721h dd 8FE177EBh, 0F6AE7B86h, 83F8BB86h, 56AD0A87h, 26C5BE23h dd 270E1AC2h, 0E06BCA1Ch, 104B177Ch, 2EA27120h, 0F9703740h dd 0BF757C72h, 71A321C8h, 0F80DF773h, 18E33155h, 2781770Dh dd 66F1545Dh, 45E5D59Ch, 7B87FC4Ah, 83F93BAFh, 0CD75C609h dd 27E7EE5Bh, 13DE25FFh, 337436Eh, 15DA220Bh, 9E2F4461h dd 0E10B7857h, 85C600CFh, 8E86877Ch, 19F00744h, 4B841423h dd 70F38D77h, 0D2A48B43h, 0A0CBCA0Eh, 2FD8DB46h, 0E42F57E6h dd 7A5DE6A1h, 6B2180AEh, 5D165DBBh, 0CBC38776h, 0BB8A960Dh dd 1099D4F6h, 0ABDE5F68h, 0EEE6ABC6h, 0FCB9B9F8h, 28D15508h dd 682AD51Ah, 0F7BA3D36h, 0C2184A8Dh, 8AD22412h, 9881A4A7h dd 73844234h, 1C10C87Bh, 7B0AA536h, 6968437Eh, 0AF3AC25Fh dd 14986A8Fh, 73F8BE71h, 0C85341A7h, 2D1773C8h, 0FC2FEB2Eh dd 0F8B400A0h, 296B9EA0h, 101E6435h, 856774DDh, 0A16C1A8Ch dd 2BF17E96h, 7A738E19h, 70402812h, 0D82385D7h, 0AA7D5425h dd 600C78EEh, 0B7F6971h, 68793FF5h, 786C617Dh, 71A5FD6Bh dd 6F7EA037h, 3AC5D276h, 0C88F9A3h, 0BFAD2B75h, 0C6696829h dd 41597999h, 42605C34h, 695FD95h, 0A00EA069h, 5E33DDFEh dd 976C3554h, 14615DEEh, 93DA7D0Fh, 0F30D758Ah, 1DC0C80Eh dd 1082A593h, 0B9634B47h, 0EEF918B0h, 0FA86D74h, 16D11A4Eh dd 0E86C7068h, 57FF33DBh, 2E60A129h, 0A0A02484h, 8E604FCAh dd 0C452E46h, 1B69B67Dh, 193952A4h, 0CF3354E4h, 685828ABh dd 217B7060h, 0D2731A84h, 0F32D7726h, 22B699BEh, 564BDA2Fh dd 2E2B542Eh, 0B1E860FCh, 5D5F782Dh, 22B6217Bh, 7C742A72h dd 0EA1AB758h, 50D72574h, 0F19ACF79h, 59A62BBBh, 0ECF61136h dd 6B8E8C40h, 2466444Ch, 8F01364Eh, 3BD5A67Ch, 50656C14h dd 1002DC55h, 0EAB9944Dh, 8CA02255h, 5A8C7168h, 0B75843A8h dd 96804E02h, 3F055A65h, 79660CF5h, 8D2E8403h, 307CB986h dd 0CD876466h, 0C1CB3D98h, 873D5758h, 702A6777h, 19BB2F18h dd 643E284Bh, 4CF1C50Eh, 0CF4BD80Ch, 2FAED144h, 75E9C9B0h dd 0E037D4CEh, 64F8AC7Eh, 0A09C0A41h, 9814A40Ch, 0E9309C18h dd 90F63F5Bh, 88589444h, 614CA968h, 0CF788CB4h, 1BC773FCh dd 1C049A19h, 0F30681C6h, 0D91C29DAh, 0CCBC4560h, 0B3A04E70h dd 766F0D0Ah, 0DE356531h, 5271E6E2h, 0C5DBFB46h, 0F23E710Dh dd 0F0983Ch, 0F43F8C12h, 0CC710CC8h, 12F0210Ch, 0F3CBF91Bh dd 0FCC4A621h, 2575AD9h, 98FB47B9h, 7DB8FB7Bh, 0FEC1B52Fh dd 852132F3h, 28E568B7h, 456A6016h, 6445AE7Fh, 765E961Eh dd 2890476Ch, 0E054973Ah, 5838DA19h, 3304B239h, 0AFBE4710h dd 0B421CB7Eh, 6339A1FEh, 0B7D95DABh, 0C0798C2Ch, 0EEF9987Fh dd 0E7F37738h, 46B9F06Fh, 3067BD6Fh, 7D856CBFh, 5D211548h dd 98CBC268h, 0C7286512h, 0FE6845A0h, 29840988h, 6D4F0C47h dd 4920427Eh, 18DFC372h, 0C685F27Eh, 8C2B2AA9h, 69EC445h dd 452BA0CBh, 7793C940h, 0D8B9B621h, 0CE4AC5CBh, 40A66310h dd 1D9A1DC8h, 0B010BA5Eh, 234F4337h, 0C33EA98Eh, 0EF6275C1h dd 39AE734Dh, 346A266Ah, 236BE88h, 0BE499632h, 0CE3943C3h dd 5485E8B4h, 0E8CE68CDh, 307F60CFh, 186D9374h, 5560F89Dh dd 0D76171B5h, 294AC266h, 3C4B7425h, 94234528h, 120510FBh dd 0B438696Bh, 8C521E9Fh, 507E8778h, 0D168807Dh, 8CE9E197h dd 29786388h, 0F58FA7E3h, 0A43F562h, 7391F96Ch, 0D5FD7C55h dd 79C985C6h, 53940B6Fh, 74BCF3B0h, 70F399F3h, 0CDCA4E92h dd 3B2BDB7Ah, 3D7D241Ch dd 204E4E7Dh, 0DA787831h, 897A547Ah, 0F74CC76Ch, 2A5C7A7Eh dd 0F849392Bh, 0CF078787h, 8D7979F7h, 169FBF5h, 9C52942Ah dd 319F8E42h, 0C69892E3h, 6A359D7h, 8782ED3Ch, 26628787h dd 0FDD84A19h, 0ECE71267h, 0FC41EC87h, 4DF75EDEh, 0DD2465B6h dd 2CA73B1h, 87480A1Dh, 4F678787h, 11021735h, 57191414h dd 5848564Ch, 15171B50h, 110C1908h, 431D141Ah, 87853558h dd 312B8323h, 6D4E583Dh, 16112F71h, 0B0F171Ch, 582C3658h dd 5149564Dh, 0AC73C345h, 78F69C4Ch, 0BC797CACh, 0B7458FCCh dd 0E8D8768Bh, 107C0CF8h, 448BB776h, 307120A7h, 48AC0C44h dd 1CA14FB7h, 685A583Dh, 95784832h, 80463B07h, 0E1B6B38h dd 0D0A560Eh, 0C5CE4E06h, 7F780FCDh, 0EF141C1Dh, 0B91E771Dh dd 8703078Ah, 191D0B1Dh, 76101B0Ah, 1A170A67h, 101B0017h dd 0A31F1619h, 0AAC1C307h, 740C1D67h, 1A561C0Ah, 19780211h dd 0FDA01B50h, 13109C15h, 0C741519h, 5C00557Eh, 0C1C315CBh dd 17147E78h, 134F1A76h, 0C68E853Fh, 7A0E5E15h, 0E0C5602h dd 170C6963h, 0FD165608h, 6FF455F8h, 5F0B7711h, 0F887734Bh dd 7700F515h, 140D1C19h, 331D550Ch, 6A30E11h, 4BF80ACBh dd 0BDE1617h, 1A560C36h, 0A772B805h, 1F11371Fh, 0F00784Ah dd 2307CB19h, 1A125483h, 0E378D51Ah, 191E1902h, 8030FFD0h dd 1D2556CEh, 19D7245Bh, 8E95801Ah, 1D1C1B87h, 11101F1Eh dd 15141312h, 0A09BD16h, 0F0E0D8Fh, 87BE0100h, 1D7628A7h dd 3E3D3C3Bh, 3231303Fh, 36353433h, 2C292837h, 8710BB87h dd 2F2E2D2Ch, 63222120h, 0C0C105Bh, 57574208h, 43E3885Dh dd 57730BC8h, 856EF1Dh, 3470810h, 76CE8306h, 0B5E7745h dd 1C7E161Bh, 1E16115Eh, 517F430Eh, 494505CFh, 0C6B5E41h dd 2093D863h, 188EC383h, 4F4A4945h, 424979D0h, 57484840h dd 0F887A71Dh, 78A794F5h, 4B25A790h, 96C11EB1h, 87A31787h dd 7D0DF579h, 7EF286F3h, 3E7FE144h, 3E48547Eh, 7FF0E14Ch dd 93959A3Fh, 904C578Fh, 6A29072h, 561F1DA7h, 0B1E1EB09h dd 0A7879779h, 0C5856A86h, 7F6E85E9h, 0D2100AB9h, 0D21E853Ah dd 6CC26885h, 62E0D164h, 8F23C987h, 89E08BB1h, 97AFE70h dd 27E868B8h, 21EA4FB3h, 77EB64EEh, 4200CB83h, 92F9C6Ch dd 9427205h, 0C683E53Dh, 89E58B95h, 8971F17Ch, 3869E47Ch dd 85F695CBh, 9B8B1F5Bh, 0A4646888h, 1821CA73h, 45F7B1E3h dd 795D978Eh, 0D97C6CA1h, 0E609B26Fh, 1910F553h, 0EE3E6FCBh dd 9A62D5E9h, 506965EEh, 951715E7h, 78B028CAh, 2FA46CE1h dd 366A5D2Dh, 0A794B8DCh, 6AE995A6h, 8F95E131h, 0BC6C782Ch dd 9B3B242h, 0FFCB6443h, 5C8785A5h, 0B762599Ch, 1EF7B5B5h dd 83CEF954h, 664714E7h, 0FBC0C883h, 256AB5BBh, 65B3B1D0h dd 17E5CA07h, 735CD55Dh, 0EEDE3022h, 0B186B3B8h, 34636C1Ch dd 8B93DF51h, 0A187C2E4h, 6E91CB8Fh, 95E8C4Ch, 8176848Dh dd 51976B43h, 1787133Eh, 274F8F0Eh, 943F1EA6h, 796ED8D0h dd 9587BDCFh, 85919491h, 971977C3h, 549984CFh, 848DB279h dd 848A2284h, 85C7879Dh, 8D848F93h, 0BFAED3D2h, 21D2814Ch dd 52525DCCh, 0EBD4B11Eh, 0C6CFF9E8h, 0E8871F88h, 0B1FB1BE5h dd 48EA09B5h, 294D61C7h, 72EDA16Ch, 8787E90Ah, 9529458h dd 0DDAA93B0h, 99F8AD6Ah, 17D22AE2h, 0E252F56Ch, 3E86A7B0h dd 0F36AC183h, 0BB3F32E2h, 0A3E3D3E6h, 9458DB61h, 87A5DA14h dd 0C58785C7h, 0A7E695FDh, 93F990DAh, 0B06A2D3Ch, 56EE67C5h dd 0A06A93F5h, 6A22E2FDh, 87E271E5h, 22B57371h, 0A8EE8068h dd 71E315Ah, 0FF6A8685h, 0C31716A3h, 0EDBA22D1h, 0FA6AFD7Ah dd 0B322E97Ch, 81C1B78Fh, 0FD07381Fh, 3A352B87h, 0B02B600Ah dd 71B78CC7h, 781A8687h, 0FB3B287Ah, 372F2C3Dh, 9B23952Ah dd 28583387h, 2A3F372Ah, 49583539h, 39346FB5h, 2A7A3536h dd 721AE893h, 0CF6D1ED3h, 0CF23CEEEh, 0C31F137Bh, 4B76080Dh dd 0CE671962h, 355F930Ch, 59204A5Bh, 564A4A4Ah, 1EAB2049h dd 5860AE52h, 22F34A44h, 0DC4BB0B1h, 94637F0Bh, 745AFDA3h dd 7C785B87h, 586C7269h, 0F5A2A67Dh, 11D8AC62h, 2B333478h dd 7CE9282Bh, 0EFCFF007h, 329870FAh, 95806F0Bh, 165C782Fh dd 17781C78h, 420B780Dh, 26A6B00Ch, 71794814h, 4D7841F4h dd 0A4B8145Bh, 7F5665EEh, 4AD3A278h, 70F1B758h, 432FA258h dd 0E734EBFBh, 3E8A787Bh, 0B9E8665Bh, 387F3F7Eh, 0A97E787Eh dd 683E9F87h, 0F26D6779h, 783098F0h, 0F93C7837h, 86638785h dd 8A021261h, 5064319Ch, 0C5D48D7h, 992B1F68h, 6B04FD44h dd 480DA724h, 0D6C57C78h, 7F24CEC1h, 247022C5h, 0A4E4F19h dd 7F5635AFh, 5640784Eh, 4363480Fh, 3115F1E3h, 903B9478h dd 811B4778h, 1C760178h, 7CA470DAh, 1587588Eh, 78876E38h dd 7678A6A6h, 79E76E78h, 71C75E7Ah, 50386A6Bh, 0B9697B61h dd 0F305BB3Eh, 0AB0CA114h, 0C39C5108h, 0E452E3D4h, 0A0655D13h dd 68E715CBh, 637C3076h, 2515B72Ch, 222C6BAFh, 5A211B5Eh dd 0FBB3BF24h, 3DC1874Ch, 787DFF1Dh, 30687B73h, 0BD8787C0h dd 76C068A6h, 50127D73h, 0C9744161h, 0D0E369A8h, 537B878h dd 0A1940799h, 25278D56h, 6493F2F0h, 90E769B1h, 30685344h dd 0CA560418h, 8C74A9EFh, 74D818DBh, 0ED9C44F8h, 74C974D8h dd 4A414386h, 0F074D878h, 78717838h, 0FC037B94h, 787F815Fh dd 37386CEDh, 0C7380804h, 7EB0DD94h, 6B3B7F78h, 0F087BA01h dd 786BFD00h, 91DE23D3h, 6080686Bh, 579C71B7h, 5B768687h dd 0AC2048B9h, 0FC70C638h, 5AB9CF0h, 68C13BAAh, 0C0798796h dd 14E1968h, 0D558748Ah, 0E7077F75h, 778A6D9Dh, 87960A0h dd 77E877FCh, 77FC5D01h, 357877EDh, 7A7E84E6h, 1477FC07h dd 0FCD2A677h, 0D0E278FFh, 71473B17h, 676BB0F4h, 28201611h dd 0B8DEA358h, 780A28B2h, 41793C3Eh, 44FC37B1h, 6A44134Ah dd 37A0D6Dh, 3944FC75h, 0EC64782Bh, 64D78779h, 0BE7E935Ah dd 0B5D2424h, 1B081124h, 0E387810Dh, 94F91E5Ch, 9C877F64h dd 3C1D2B78h, 1F0D1A1Dh, 824F0E11h, 1FFD4D60h, 121C39DFh dd 172C190Dh, 94E1CE9Ch, 6F161D13h, 6A17340Bh, 0C715080Dh dd 192EE7A5h, 391D0D14h, 5008376Fh, 0B5C1B17h, 0F5309220h dd 0E3B784Ch, 1D4B4719h, 9B492ADBh, 80153401h, 8D7D1563h dd 2C27691Dh, 2F01190Ah, 0EDAD55CDh, 493B6F4Dh, 2A2A6219h dd 1055C3E5h, 102C7D17h, 0B2E6C74h, 0DB23130Dh, 503920A3h dd 0DD003D37h, 0F4B151Fh, 3F4D1642h, 6A668B8Dh, 308C10EFh dd 7282C2Ch, 2F4A5844h, 85972ACDh, 75333758h, 0E7337972h dd 12A71E3Ch, 34557AC3h, 42551F7Ch, 600D5D58h, 0B2200322h dd 12C5057h, 0DE155ECDh, 8DBA2CEh, 6DFB1BFEh, 0F6D19657h dd 55BF7A22h, 3AB10AEBh, 0E72EC9F3h, 53783F2Fh, 0DB233FC2h dd 9D1C8E8Ch, 3AB30BB3h, 15F52F83h, 0D11B0E0Bh, 0A2110FB3h dd 892BF30Fh, 6F274A7Bh, 0E2119F0Dh, 7FCD9E56h, 4E4F407Bh dd 0DEC35F0Ch, 4B674C4Dh, 4A7B4B11h, 0AB330D8Ah, 6B414849h dd 0B0404740h, 4F75FB58h, 584D4E7Fh, 4C4A74FBh, 0E8E24A4Bh dd 4849B042h, 81428B00h, 0B4EDD487h, 372BC3A1h, 392F2C3Eh dd 35243D2Ah, 1AB98011h, 170B1703h, 24C724AFh, 0A0A0D3Bh dd 1319C45Ah, 0BA42E6Dh, 0D2A2472h, 0FDCFE716h, 0C5B6F6Eh dd 105CAA17h, 872B5848h ; --------------------------------------------------------------------------- fld tbyte ptr [eax] adc [ebx-71h], ah wait inc ebx pop ds push ss or ebx, [edx+ecx] adc cl, [eax] jmp short loc_31427875 ; --------------------------------------------------------------------------- dd 1D5301CEh, 292B787Ah, 7E1955FEh, 1476277Eh, 2F4E5E35h dd 271E3310h, 18B9315Bh, 4C3A6450h, 10872C2Dh, 6B73B84Fh dd 263B582Bh, 0AD0E581Fh ; --------------------------------------------------------------------------- locret_31427840: ; CODE XREF: UPX1:314278AAj retf ; --------------------------------------------------------------------------- db 0CFh, 0EDh, 83h dd 0F8200E43h, 0B05BCD4Ah, 41DC826h, 843F6263h, 5B21161Eh dd 1EB6A6Fh, 4E4C130Bh, 3A780806h, 19C7581Bh, 0CFCDCE5Bh dd 15636B20h, 0A5EF2A58h db 0Ah ; --------------------------------------------------------------------------- loc_31427875: ; CODE XREF: UPX1:3142780Ej dec edi into int 3 ; Trap to Debugger js short near ptr loc_314278F4+1 cmp al, 98h pop eax jbe short loc_3142789D push edi enter 35Dh, 96h pop ds adc eax, 5C1B52D4h sbb esp, [ebx] pushf mov ds:0C115AC7h, al add [eax+35h], ebx sbb [esi], edx ; --------------------------------------------------------------------------- db 66h dd 0D449C062h db 79h ; --------------------------------------------------------------------------- loc_3142789D: ; CODE XREF: UPX1:3142787Dj insd pop eax or al, 0F1h setalc push edx push edx mov esp, 0F485EAC3h inc eax jns short locret_31427840 db 3Eh or bl, ds:887E741Dh mov ds:3F75815Bh, eax ; CODE XREF: UPX1:314278D9j sbb eax, 0FF17350Ch daa repne out dx, eax call far ptr 1519h:36133E1Dh adc [ecx+14h], bh or ecx, [ebx+eax] xchg eax, edi bound edi, [eax+72ED1B0Ah] cmp edx, [edi] or [ecx], al popa jb short near ptr loc_314278B3+4 or [edi], dl stc fnstcw word ptr ds:364A1D00h mov es, word ptr [edi+172C042Ah] pop ss adc al, 1Fh or [ebx+4Ah], cl sub edx, [esi] sbb [eax], ecx loc_314278F4: ; CODE XREF: UPX1:31427878j or edx, [eax] pop ss or al, 61h movsd aad 35h repne in al, 6Ah dec edx or cl, [ebx] ja short loc_31427930 jge short loc_31427911 aad 6Ch test dword ptr [ebp+54h], 837DCE60h clc pop ecx loc_31427911: ; CODE XREF: UPX1:31427904j db 36h sbb eax, 19110C00h cmp ds:3D665927h[eax*4], ebp push cs ja short loc_31427934 sbb [ecx], edx or al, 3Eh pop ss or ch, [ebx] pop ecx retn 0CE8Eh ; --------------------------------------------------------------------------- dd 37031F44h ; --------------------------------------------------------------------------- loc_31427930: ; CODE XREF: UPX1:31427902j sbb dl, [edx] push cs push esp loc_31427934: ; CODE XREF: UPX1:3142791Fj cmp al, 99h shl dword ptr [ecx-0AA5DD45h], 0Ah adc [ebx+42h], esi out dx, eax xchg eax, esp ; --------------------------------------------------------------------------- dw 0C7C5h db 0B0h ; ° db 0Bh, 1Dh, 30h db 19h db 16h, 1Ch, 74h db 3Fh ; ? db 5Ch, 26h, 0BAh db 0C5h ; Å db 0BBh, 0CEh, 70h db 16h db 0AAh, 19h, 22h db 88h ; ˆ ; --------------------------------------------------------------------------- retf ; --------------------------------------------------------------------------- dw 0CDB5h db 69h ; i db 0EFh, 3Ch, 0DBh db 2Eh ; . db 1Ch, 1, 6Ch ; --------------------------------------------------------------------------- retn ; --------------------------------------------------------------------------- db 0Dh, 0A7h, 0CEh db 34h ; 4 db 0E0h, 19h, 53h db 31h ; 1 db 16h, 1Eh, 17h db 77h ; w db 2Bh, 71h, 1Dh db 8 db 7Eh, 0F8h, 4Fh db 60h ; ` db 1Ah, 31h, 0E4h ; --------------------------------------------------------------------------- pop esi adc ebx, ds:0A1F03D1Ch sbb al, 0CBh push eax retf ; --------------------------------------------------------------------------- db 16h db 4Eh ; N db 83h, 9Fh, 0EAh db 0B5h ; µ db 0A8h, 98h, 6Ah db 73h ; s db 39h, 2 dup(1Ch) db 0Ah db 77h, 0CBh, 8Fh db 65h ; e db 69h, 73h, 34h db 11h db 1Ah, 0Ah, 19h db 1Fh db 0CDh, 0F2h, 9Eh db 0A2h ; ¢ db 18h, 53h, 35h db 0FAh ; ú db 4, 6Bh, 4Eh db 73h ; s db 70h, 0B3h, 0ADh db 0F6h ; ö db 0B7h, 1Bh, 0BBh db 0A2h ; ¢ db 3Ah, 3, 2Ch db 11h db 0F9h, 0F0h, 0Dh db 1Dh db 0A6h, 6Dh, 31h db 0A0h ; db 0F2h, 35h, 91h db 0 db 4Ch, 0A2h, 63h db 4Eh ; N db 0E3h, 0AAh, 75h db 25h ; % db 0BCh, 41h, 8Ah ; --------------------------------------------------------------------------- push 1A37691Eh and bh, ds:1955CE00h retf ; --------------------------------------------------------------------------- db 49h ; I db 0A7h, 72h, 1Bh db 6Bh ; k db 15h, 0E6h, 0E3h db 98h ; ˜ db 0BEh, 55h, 2Ah db 63h ; c db 21h, 3, 70h db 98h ; ˜ db 0B8h, 1Eh, 6Fh db 0FEh ; þ db 2, 1Dh, 40h db 0DFh ; ß db 34h, 18h, 0DBh db 0CDh ; Í db 0FDh, 6Dh, 3Dh ; --------------------------------------------------------------------------- test [ebx-181A56E8h], bh or eax, 1F42534Bh fnstenv byte ptr [ebx] sbb eax, 94433D01h cmp [esi+77B9FE68h], dh sub [edx-48h], esi db 26h mov edx, 0E6698E22h dec eax jmp dword ptr [ecx] ; --------------------------------------------------------------------------- db 14h db 3Ah, 9Fh, 59h db 68h ; h db 98h, 64h, 0FCh db 0Eh db 3, 29h, 74h db 39h ; 9 db 1Ah, 16h, 0C6h db 2Bh ; + db 10h, 53h, 76h db 0DDh ; Ý db 50h, 7Ch, 49h db 0FEh ; þ db 47h, 0B9h, 62h ; --------------------------------------------------------------------------- std mov eax, ds:68F14E0Fh retn ; --------------------------------------------------------------------------- db 1Ah db 0CEh ; Î db 5, 72h, 3Ch db 6Ah ; j db 19h, 76h, 0Ah db 11h db 1Eh, 63h, 0AEh db 42h ; B db 0CEh, 1, 0B2h db 1Fh db 0F7h, 0Dh, 53h db 4Eh ; N db 14h, 17h, 19h db 17h db 3Bh, 0B6h, 17h db 1 db 54h, 69h, 17h db 28h ; ( db 5Bh, 8, 1Fh db 68h ; h db 2Ah, 0F7h, 76h db 0E8h ; è db 47h, 8Eh, 40h db 0A8h ; ¨ align 2 dw 396Ch ; --------------------------------------------------------------------------- sbb ecx, [ecx] or eax, 0D6080A11h or al, 0A0h xor eax, 42D84D31h dec esi mov ebx, 0A66B21DFh xchg eax, esp or ecx, [edx] mov dl, 7Eh adc eax, 0A9B660C9h retf 764Dh ; --------------------------------------------------------------------------- db 0EAh, 77h, 6Dh db 0A2h ; ¢ db 0E1h, 13h, 2Bh db 35h ; 5 db 65h, 27h, 3Ch db 20h db 0BDh, 72h, 0Ch db 0C0h ; À db 47h, 27h, 10h db 8Eh ; Ž db 81h, 5Fh, 4Eh db 0A3h ; £ db 3Eh, 0B4h, 7Ah db 7Fh ; db 1, 0Ah, 37h db 91h ; ‘ db 68h, 79h, 0F0h db 6Dh ; m db 0D5h, 18h, 0E9h db 5Ah ; Z db 55h, 0B4h, 79h db 4Ch ; L db 0B5h, 65h, 5Fh db 1Dh ; --------------------------------------------------------------------------- jbe short loc_31427B34 sbb [edx+726C4E54h], edi lahf int 3 ; Trap to Debugger retn ; --------------------------------------------------------------------------- dd 317E966Dh, 80B0F1Eh, 391EC97Dh, 0E41AFB37h, 7C5C8C1Eh dd 0A3191422h, 0E32DFD3Bh, 4F766939h, 1F7D5954h, 63FE136Ch dd 167B7EDEh, 0C2B3B31h, 0F4ED76F9h, 753F621Dh, 0D095CAB3h dd 7A0B87D9h, 5479757Ah, 4154CAB3h, 746F4C17h, 0CAB354CAh dd 686B7C71h, 373DD26Eh, 3D284ED2h, 9C87CE76h, 21B0EECFh ; --------------------------------------------------------------------------- loc_31427B34: ; CODE XREF: UPX1:31427AC5j mov al, ds:78987838h ja short near ptr loc_31427BB3+1 jnb short loc_31427BB6 jle short loc_31427BB3 pop esi retf 7964h ; --------------------------------------------------------------------------- adc [edx-5Ch], ch loc_31427B46: ; CODE XREF: UPX1:31427B76j dec esp pop ebx push 76BEDB5Dh cmp cl, [ecx+73h] jp short loc_31427B84 dec ebx iret ; --------------------------------------------------------------------------- dd 747FE3DCh, 414C6618h, 68C84E33h, 552F7E7Fh, 1A68F825h dd 41C71F4h, 0C8D6493Dh db 79h, 66h, 56h ; --------------------------------------------------------------------------- loc_31427B73: ; CODE XREF: UPX1:31427BCEj adc bh, al stc jnz short loc_31427B46 ficomp word ptr [eax+ebp*8+5Eh] mov esp, 0E804031Ch out 7Ch, eax cwde loc_31427B84: ; CODE XREF: UPX1:31427B50j push esi sbb al, 99h sub dword ptr [ecx+ebx*8+23h], 0FFFFFFA0h dec edi jg short loc_31427BE1 pop edi outsb mov eax, 33987830h cmp edi, ecx push edi mov ebx, 7878782Ch js short loc_31427C18 js short near ptr loc_31427C18+2 js short near ptr loc_31427C1B+1 call near ptr 0A9BAF430h js short near ptr loc_31427C1B+8 js short loc_31427C25 js short near ptr loc_31427C25+2 js short near ptr loc_31427BC6+3 ; --------------------------------------------------------------------------- db 0C6h, 78h ; --------------------------------------------------------------------------- loc_31427BB3: ; CODE XREF: UPX1:31427B3Dj ; UPX1:31427B39j sbb [edx], bh loc_31427BB5: ; CODE XREF: UPX1:31427C10j dec ecx loc_31427BB6: ; CODE XREF: UPX1:31427B3Bj cmc mov byte ptr [eax-38h], 87h xchg ebp, [edi] sti mov ch, 87h xchg eax, ebx push 0E8E8E8E8h loc_31427BC6: ; CODE XREF: UPX1:31427BAFj call near ptr 6FC16EB3h lock jg short near ptr loc_31427C0A+3 jns short loc_31427B73 or eax, 0FB66F37Fh xchg eax, esi test [ecx-5Dh], ch or dl, [ebp+787879C0h] ; CODE XREF: UPX1:31427C4Ej js short near ptr loc_31427C59+1 loc_31427BE1: ; CODE XREF: UPX1:31427B8Dj mov ds:66F37F0Dh, eax sti xchg eax, esi test [ecx-5Dh], ch imul edi, [eax-68F45C87h], 66F3710Dh sti xchg eax, esi test [ecx-5Dh], ch ; CODE XREF: UPX1:31427C05j or ebx, [ecx+ecx*2+7B90FBB1h] or dh, [ebp-47h] cwde jo short near ptr loc_31427BF7+2 jle short loc_31427C47 sti loc_31427C0A: ; CODE XREF: UPX1:31427BCBj mov [edi-420EF3F4h], al jns short loc_31427BB5 or eax, 0FB66F37Fh xchg eax, esi loc_31427C18: ; CODE XREF: UPX1:31427B9Ej ; UPX1:31427BA0j test [ecx-5Dh], ch loc_31427C1B: ; CODE XREF: UPX1:31427BA2j ; UPX1:31427BA9j imul esi, [ecx+7F0DA379h], 96FB66F3h loc_31427C25: ; CODE XREF: UPX1:31427BABj ; UPX1:31427BADj test [ecx-5Dh], ch imul esi, [ecx+7939580Dh], 0F37F0DA3h db 66h sti xchg eax, esi loc_31427C35: ; CODE XREF: UPX1:loc_31427CABj test [ecx-5Dh], ch imul esi, [ecx-68F45C87h], 66F3710Dh sti xchg eax, esi test [ecx-5Dh], ch loc_31427C47: ; CODE XREF: UPX1:31427C07j or ebx, [ebx+edi*8-7A068547h] js short near ptr loc_31427BD9+2 xchg eax, [edi-0A865605h] insb push edi sti loc_31427C59: ; CODE XREF: UPX1:loc_31427CCCj ; UPX1:31427BDFj test [esi+ecx+3A7AF277h], eax lock jg short near ptr loc_31427CA1+1 xor ds:871B918Fh, ecx xchg eax, [edi-4850C18h] mov edx, 0FB7FF17Ch mov edi, 7C91FB7Ch jns near ptr 65D433F8h xchg eax, [edi-700ED979h] rol dword ptr [esi], 78h js short loc_31427D02 repne jg short loc_31427CCC push esp nop inc esp jns short loc_31427CA1 ; --------------------------------------------------------------------------- dw 0F88Fh db 47h, 79h ; --------------------------------------------------------------------------- loc_31427C96: ; CODE XREF: UPX1:31427CDCj or eax, 0F27FF38Ah daa jl short loc_31427CBC ; --------------------------------------------------------------------------- dw 90B9h db 70h ; --------------------------------------------------------------------------- loc_31427CA1: ; CODE XREF: UPX1:31427C90j ; UPX1:31427C60j mov ecx, 0BCFE68B8h push ecx cmp al, 93h nop loc_31427CAB: ; CODE XREF: UPX1:31427CAEj jns short loc_31427C35 icebp jg short loc_31427CAB loc_31427CB0: ; CODE XREF: UPX1:31427CF6j mov edi, 9AA0F17Dh mov eax, ds:2878C6F5h js short near ptr loc_31427D33+1 ; CODE XREF: UPX1:31427CC4j loc_31427CBC: ; CODE XREF: UPX1:31427C9Cj rep jg short near ptr loc_31427D2F+1 mov eax, 27F33D0Ch jl short near ptr loc_31427CBA+1 cld dec eax js short near ptr loc_31427CD0+2 js short near ptr loc_31427D43+1 loc_31427CCC: ; CODE XREF: UPX1:31427C8Aj jns short loc_31427C59 sub bl, bh loc_31427CD0: ; CODE XREF: UPX1:31427CC8j mov edi, 0F4EE8770h or [eax+78h], bh in eax, dx repne jg short loc_31427D1B jo short loc_31427C96 or al, 0A4h icebp add dword ptr [ecx], 7FCF777Fh aas sub [edi], bh shr dword ptr [edi], 30h mov dl, dh sub eax, 8E8EE87h js short near ptr loc_31427D6D+1 jno short loc_31427CB0 loc_31427CF8: ; CODE XREF: UPX1:31427CFBj or al, 7Fh icebp jnp short loc_31427CF8 mov ebx, 87A0937Ch loc_31427D02: ; CODE XREF: UPX1:31427C88j out dx, al in al, dx or [eax+78h], bh sbb [ecx-787821A1h], edx js short loc_31427D87 js short loc_31427D89 js short loc_31427D8B js short loc_31427D8D js short loc_31427D8F js short loc_31427D91 js short loc_31427D93 loc_31427D1B: ; CODE XREF: UPX1:31427CD9j js short loc_31427D95 js short loc_31427D97 js short loc_31427D99 js short loc_31427D9B js short loc_31427D9D js short loc_31427D9F js short loc_31427DA1 js short loc_31427DA3 js short loc_31427DA5 js short loc_31427DA7 loc_31427D2F: ; CODE XREF: UPX1:loc_31427CBCj js short loc_31427DA9 js short loc_31427DAB loc_31427D33: ; CODE XREF: UPX1:loc_31427CBAj js short loc_31427DAD js short loc_31427DAF js short loc_31427DB1 js short loc_31427DB3 js short loc_31427DB5 js short loc_31427DB7 js short loc_31427DB9 js short loc_31427DBB loc_31427D43: ; CODE XREF: UPX1:31427CCAj js short loc_31427DBD js short loc_31427DBF js short loc_31427DC1 js short loc_31427DC3 js short loc_31427DC5 js short loc_31427DC7 js short loc_31427DC9 js short loc_31427DCB js short loc_31427DCD js short loc_31427DCF js short loc_31427DD1 js short loc_31427DD3 js short loc_31427DD5 js short loc_31427DD7 js short loc_31427DD9 js short loc_31427DDB js short loc_31427DDD js short loc_31427DDF js short loc_31427DE1 js short loc_31427DE3 js short loc_31427DE5 loc_31427D6D: ; CODE XREF: UPX1:31427CF4j js short loc_31427DE7 js short loc_31427DE9 js short loc_31427DEB js short loc_31427DED js short loc_31427DEF js short loc_31427DF1 js short loc_31427DF3 js short loc_31427DF5 js short loc_31427DF7 js short loc_31427DF9 js short loc_31427DFB js short loc_31427DFD js short loc_31427DFF loc_31427D87: ; CODE XREF: UPX1:31427D0Dj js short near ptr byte_31427E01 loc_31427D89: ; CODE XREF: UPX1:31427D0Fj js short near ptr byte_31427E03 loc_31427D8B: ; CODE XREF: UPX1:31427D11j js short near ptr byte_31427E05 loc_31427D8D: ; CODE XREF: UPX1:31427D13j js short near ptr byte_31427E07 loc_31427D8F: ; CODE XREF: UPX1:31427D15j js short near ptr byte_31427E09 loc_31427D91: ; CODE XREF: UPX1:31427D17j js short near ptr byte_31427E0B loc_31427D93: ; CODE XREF: UPX1:31427D19j js short near ptr byte_31427E0D loc_31427D95: ; CODE XREF: UPX1:loc_31427D1Bj js short near ptr byte_31427E0F loc_31427D97: ; CODE XREF: UPX1:31427D1Dj js short near ptr byte_31427E11 loc_31427D99: ; CODE XREF: UPX1:31427D1Fj js short near ptr byte_31427E13 loc_31427D9B: ; CODE XREF: UPX1:31427D21j js short near ptr byte_31427E15 loc_31427D9D: ; CODE XREF: UPX1:31427D23j js short near ptr byte_31427E17 loc_31427D9F: ; CODE XREF: UPX1:31427D25j js short near ptr byte_31427E19 loc_31427DA1: ; CODE XREF: UPX1:31427D27j js short near ptr byte_31427E1B loc_31427DA3: ; CODE XREF: UPX1:31427D29j js short near ptr byte_31427E1D loc_31427DA5: ; CODE XREF: UPX1:31427D2Bj js short near ptr byte_31427E1F loc_31427DA7: ; CODE XREF: UPX1:31427D2Dj js short near ptr byte_31427E21 loc_31427DA9: ; CODE XREF: UPX1:loc_31427D2Fj js short near ptr byte_31427E23 loc_31427DAB: ; CODE XREF: UPX1:31427D31j js short near ptr byte_31427E25 loc_31427DAD: ; CODE XREF: UPX1:loc_31427D33j js short near ptr byte_31427E27 loc_31427DAF: ; CODE XREF: UPX1:31427D35j js short near ptr byte_31427E29 loc_31427DB1: ; CODE XREF: UPX1:31427D37j js short near ptr byte_31427E2B loc_31427DB3: ; CODE XREF: UPX1:31427D39j js short near ptr byte_31427E2D loc_31427DB5: ; CODE XREF: UPX1:31427D3Bj js short near ptr byte_31427E2F loc_31427DB7: ; CODE XREF: UPX1:31427D3Dj js short near ptr byte_31427E31 loc_31427DB9: ; CODE XREF: UPX1:31427D3Fj js short near ptr byte_31427E33 loc_31427DBB: ; CODE XREF: UPX1:31427D41j js short near ptr byte_31427E35 loc_31427DBD: ; CODE XREF: UPX1:loc_31427D43j js short near ptr byte_31427E37 loc_31427DBF: ; CODE XREF: UPX1:31427D45j js short near ptr byte_31427E39 loc_31427DC1: ; CODE XREF: UPX1:31427D47j js short near ptr byte_31427E3B loc_31427DC3: ; CODE XREF: UPX1:31427D49j js short near ptr byte_31427E3D loc_31427DC5: ; CODE XREF: UPX1:31427D4Bj js short near ptr byte_31427E3F loc_31427DC7: ; CODE XREF: UPX1:31427D4Dj js short near ptr byte_31427E41 loc_31427DC9: ; CODE XREF: UPX1:31427D4Fj js short near ptr byte_31427E43 loc_31427DCB: ; CODE XREF: UPX1:31427D51j js short near ptr byte_31427E45 loc_31427DCD: ; CODE XREF: UPX1:31427D53j js short near ptr byte_31427E47 loc_31427DCF: ; CODE XREF: UPX1:31427D55j js short near ptr byte_31427E49 loc_31427DD1: ; CODE XREF: UPX1:31427D57j js short near ptr byte_31427E4B loc_31427DD3: ; CODE XREF: UPX1:31427D59j js short near ptr byte_31427E4D loc_31427DD5: ; CODE XREF: UPX1:31427D5Bj js short near ptr byte_31427E4F loc_31427DD7: ; CODE XREF: UPX1:31427D5Dj js short near ptr byte_31427E51 loc_31427DD9: ; CODE XREF: UPX1:31427D5Fj js short near ptr byte_31427E53 loc_31427DDB: ; CODE XREF: UPX1:31427D61j js short near ptr byte_31427E55 loc_31427DDD: ; CODE XREF: UPX1:31427D63j js short near ptr byte_31427E57 loc_31427DDF: ; CODE XREF: UPX1:31427D65j js short near ptr byte_31427E59 loc_31427DE1: ; CODE XREF: UPX1:31427D67j js short near ptr byte_31427E5B loc_31427DE3: ; CODE XREF: UPX1:31427D69j js short near ptr byte_31427E5D loc_31427DE5: ; CODE XREF: UPX1:31427D6Bj js short near ptr byte_31427E5F loc_31427DE7: ; CODE XREF: UPX1:loc_31427D6Dj js short near ptr byte_31427E61 loc_31427DE9: ; CODE XREF: UPX1:31427D6Fj js short near ptr byte_31427E63 loc_31427DEB: ; CODE XREF: UPX1:31427D71j js short near ptr byte_31427E65 loc_31427DED: ; CODE XREF: UPX1:31427D73j js short near ptr byte_31427E67 loc_31427DEF: ; CODE XREF: UPX1:31427D75j js short near ptr byte_31427E69 loc_31427DF1: ; CODE XREF: UPX1:31427D77j js short near ptr byte_31427E6B loc_31427DF3: ; CODE XREF: UPX1:31427D79j js short near ptr byte_31427E6D loc_31427DF5: ; CODE XREF: UPX1:31427D7Bj js short near ptr byte_31427E6F loc_31427DF7: ; CODE XREF: UPX1:31427D7Dj js short near ptr byte_31427E71 loc_31427DF9: ; CODE XREF: UPX1:31427D7Fj js short near ptr byte_31427E73 loc_31427DFB: ; CODE XREF: UPX1:31427D81j js short near ptr byte_31427E75 loc_31427DFD: ; CODE XREF: UPX1:31427D83j js short near ptr byte_31427E77 loc_31427DFF: ; CODE XREF: UPX1:31427D85j js short $+2 ; --------------------------------------------------------------------------- byte_31427E01 db 2 dup(0) ; CODE XREF: UPX1:loc_31427D87j byte_31427E03 db 0 ; CODE XREF: UPX1:loc_31427D89j db 0 byte_31427E05 db 2 dup(0) ; CODE XREF: UPX1:loc_31427D8Bj byte_31427E07 db 0 ; CODE XREF: UPX1:loc_31427D8Dj db 0 byte_31427E09 db 2 dup(0) ; CODE XREF: UPX1:loc_31427D8Fj byte_31427E0B db 0 ; CODE XREF: UPX1:loc_31427D91j db 0 byte_31427E0D db 2 dup(0) ; CODE XREF: UPX1:loc_31427D93j byte_31427E0F db 0 ; CODE XREF: UPX1:loc_31427D95j db 0 byte_31427E11 db 2 dup(0) ; CODE XREF: UPX1:loc_31427D97j byte_31427E13 db 0 ; CODE XREF: UPX1:loc_31427D99j db 0 byte_31427E15 db 2 dup(0) ; CODE XREF: UPX1:loc_31427D9Bj byte_31427E17 db 0 ; CODE XREF: UPX1:loc_31427D9Dj db 0 byte_31427E19 db 2 dup(0) ; CODE XREF: UPX1:loc_31427D9Fj byte_31427E1B db 0 ; CODE XREF: UPX1:loc_31427DA1j db 0 byte_31427E1D db 2 dup(0) ; CODE XREF: UPX1:loc_31427DA3j byte_31427E1F db 0 ; CODE XREF: UPX1:loc_31427DA5j db 0 byte_31427E21 db 2 dup(0) ; CODE XREF: UPX1:loc_31427DA7j byte_31427E23 db 0 ; CODE XREF: UPX1:loc_31427DA9j db 0 byte_31427E25 db 2 dup(0) ; CODE XREF: UPX1:loc_31427DABj byte_31427E27 db 0 ; CODE XREF: UPX1:loc_31427DADj db 0 byte_31427E29 db 2 dup(0) ; CODE XREF: UPX1:loc_31427DAFj byte_31427E2B db 0 ; CODE XREF: UPX1:loc_31427DB1j db 0 byte_31427E2D db 2 dup(0) ; CODE XREF: UPX1:loc_31427DB3j byte_31427E2F db 0 ; CODE XREF: UPX1:loc_31427DB5j db 0 byte_31427E31 db 2 dup(0) ; CODE XREF: UPX1:loc_31427DB7j byte_31427E33 db 0 ; CODE XREF: UPX1:loc_31427DB9j db 0 byte_31427E35 db 2 dup(0) ; CODE XREF: UPX1:loc_31427DBBj byte_31427E37 db 0 ; CODE XREF: UPX1:loc_31427DBDj db 0 byte_31427E39 db 2 dup(0) ; CODE XREF: UPX1:loc_31427DBFj byte_31427E3B db 0 ; CODE XREF: UPX1:loc_31427DC1j db 0 byte_31427E3D db 2 dup(0) ; CODE XREF: UPX1:loc_31427DC3j byte_31427E3F db 0 ; CODE XREF: UPX1:loc_31427DC5j db 0 byte_31427E41 db 2 dup(0) ; CODE XREF: UPX1:loc_31427DC7j byte_31427E43 db 0 ; CODE XREF: UPX1:loc_31427DC9j db 0 byte_31427E45 db 2 dup(0) ; CODE XREF: UPX1:loc_31427DCBj byte_31427E47 db 0 ; CODE XREF: UPX1:loc_31427DCDj db 0 byte_31427E49 db 2 dup(0) ; CODE XREF: UPX1:loc_31427DCFj byte_31427E4B db 0 ; CODE XREF: UPX1:loc_31427DD1j db 0 byte_31427E4D db 2 dup(0) ; CODE XREF: UPX1:loc_31427DD3j byte_31427E4F db 0 ; CODE XREF: UPX1:loc_31427DD5j db 0 byte_31427E51 db 2 dup(0) ; CODE XREF: UPX1:loc_31427DD7j byte_31427E53 db 0 ; CODE XREF: UPX1:loc_31427DD9j db 0 byte_31427E55 db 2 dup(0) ; CODE XREF: UPX1:loc_31427DDBj byte_31427E57 db 0 ; CODE XREF: UPX1:loc_31427DDDj db 0 byte_31427E59 db 2 dup(0) ; CODE XREF: UPX1:loc_31427DDFj byte_31427E5B db 0 ; CODE XREF: UPX1:loc_31427DE1j db 0 byte_31427E5D db 2 dup(0) ; CODE XREF: UPX1:loc_31427DE3j byte_31427E5F db 0 ; CODE XREF: UPX1:loc_31427DE5j db 0 byte_31427E61 db 2 dup(0) ; CODE XREF: UPX1:loc_31427DE7j byte_31427E63 db 0 ; CODE XREF: UPX1:loc_31427DE9j db 0 byte_31427E65 db 2 dup(0) ; CODE XREF: UPX1:loc_31427DEBj byte_31427E67 db 0 ; CODE XREF: UPX1:loc_31427DEDj db 0 byte_31427E69 db 2 dup(0) ; CODE XREF: UPX1:loc_31427DEFj byte_31427E6B db 0 ; CODE XREF: UPX1:loc_31427DF1j db 0 byte_31427E6D db 2 dup(0) ; CODE XREF: UPX1:loc_31427DF3j byte_31427E6F db 0 ; CODE XREF: UPX1:loc_31427DF5j db 0 byte_31427E71 db 2 dup(0) ; CODE XREF: UPX1:loc_31427DF7j byte_31427E73 db 0 ; CODE XREF: UPX1:loc_31427DF9j db 0 byte_31427E75 db 2 dup(0) ; CODE XREF: UPX1:loc_31427DFBj byte_31427E77 db 0 ; CODE XREF: UPX1:loc_31427DFDj align 200h UPX1 ends ; Section 3. (virtual address 00008000) ; Virtual size : 00008000 ( 32768.) ; Section size in file : 00008000 ( 32768.) ; Offset to raw data for section: 00008000 ; Flags E0000060: Text Data Executable Readable Writable ; Alignment : default ; =========================================================================== ; Segment type: Pure code ; Segment permissions: Read/Write/Execute UPX2 segment para public 'CODE' use32 assume cs:UPX2 ;org 31428000h assume es:nothing, ss:nothing, ds:UPX0, fs:nothing, gs:nothing dd 3 dup(0) dd 80C4h, 808Ch, 3 dup(0) dd 80D1h, 809Ch, 3 dup(0) dd 80DEh, 80A4h, 3 dup(0) dd 80E9h, 80ACh, 3 dup(0) dd 80F4h, 80B4h, 3 dup(0) dd 8100h, 80BCh, 5 dup(0) dd 7C801D77h, 7C80ADA0h, 7C81CDDAh, 0 dd 77DD6BF0h, 0 dd 77C371D3h, 0 dd 7E41A8ADh, 0 dd 42C2C8A1h, 0 dd 71AB9639h, 0 dd 4E52454Bh, 32334C45h, 4C4C442Eh, 56444100h, 33495041h dd 6C642E32h, 534D006Ch, 54524356h, 6C6C642Eh, 45535500h dd 2E323352h, 6C6C64h, 494E4957h, 2E54454Eh, 6C6C64h, 5F325357h dd 642E3233h, 6C6Ch, 64616F4Ch, 7262694Ch, 41797261h, 65470000h dd 6F725074h, 64644163h, 73736572h, 78450000h, 72507469h dd 7365636Fh, 73h, 43676552h, 65736F6Ch, 79654Bh, 61720000h dd 646Eh, 72707377h, 66746E69h, 41h, 65746E49h, 74656E72h dd 6E65704Fh, 41h, 26h dup(0) dd 1C39068h, 0FFC48BEDh, 0E85B93D0h, 59h, 824648Bh, 4EBB8h dd 64FAEB00h, 18A167h, 0F30408Bh, 830240B6h, 3C7500F8h dd 0E8h, 0ED815D00h, 402334h, 237B858Bh, 85030040h, 402383h dd 858BF08Bh, 40237Fh, 23838503h, 8B500040h, 0ACC933FEh dd 238B8532h, 41AA0040h, 23878D3Bh, 0EF7C0040h, 64C02BC3h dd 896430FFh, 5678B820h, 3871234h, 6000h, 7BB0h, 31420000h dd 1E00h db 78h ; =============== S U B R O U T I N E ======================================= public start start proc near var_C = dword ptr -0Ch var_4 = dword ptr -4 call $+5 push ebp mov ebx, [esp+8] mov ebp, [esp+8+var_4] sub [esp+8+var_4], 8Eh and ebx, 0FFFFF000h sub ebp, 401005h loc_314282AB: ; CODE XREF: start+3Dj cmp dword ptr [ebx+4Eh], 73696854h jnz short loc_314282C0 mov eax, [ebx+3Ch] add eax, ebx cmp word ptr [eax], 4550h jz short loc_314282C8 loc_314282C0: ; CODE XREF: start+29j sub ebx, 100h jmp short loc_314282AB ; --------------------------------------------------------------------------- loc_314282C8: ; CODE XREF: start+35j mov edx, [eax+78h] add edx, ebx mov esi, [edx+20h] mov ecx, [edx+18h] add esi, ebx push ecx loc_314282D6: ; CODE XREF: start:loc_314282FDj lodsd add eax, ebx cmp dword ptr [eax-1], 74654700h jnz short loc_314282FD cmp dword ptr [eax+3], 636F7250h jnz short loc_314282FD cmp dword ptr [eax+7], 72646441h jnz short loc_314282FD cmp dword ptr [eax+0Bh], 737365h jz short loc_31428302 loc_314282FD: ; CODE XREF: start+57j start+60j ... loop loc_314282D6 pop ecx pop ebp retn ; --------------------------------------------------------------------------- loc_31428302: ; CODE XREF: start+72j sub [esp+0Ch+var_C], ecx mov esi, [edx+24h] pop ecx add esi, ebx movzx eax, word ptr [esi+ecx*2] mov edi, [edx+1Ch] add edi, ebx mov esi, [edi+eax*4] add esi, ebx call near ptr loc_31428328+2 inc ebx insb outsd jnb short near ptr loc_31428386+2 dec eax popa outsb db 64h insb loc_31428328: ; CODE XREF: start+90p add gs:[ebx-1], dl start endp ; sp-analysis failed setalc mov [ebp+402407h], eax call near ptr loc_31428344+1 inc ebx jb short loc_314283A0 popa jz short loc_314283A3 inc ebp jbe short near ptr loc_314283A5+1 outsb jz short near ptr loc_31428383+2 loc_31428344: ; CODE XREF: UPX2:31428333p add [ebx-1], dl setalc mov [ebp+40240Bh], eax call sub_31428360 inc edi db 65h jz short loc_314283A3 popa jnb short sub_314283CE inc ebp jb short near ptr sub_314283CE+1 outsd jb short $+2 ; =============== S U B R O U T I N E ======================================= sub_31428360 proc near ; CODE XREF: UPX2:3142834Ep ; FUNCTION CHUNK AT 314283DE SIZE 00000023 BYTES push ebx call esi mov [ebp+40240Fh], eax call sub_314283B3 test eax, eax jz short loc_31428393 push eax call dword ptr [ebp+40240Fh] test eax, eax jnz short loc_3142838D lea eax, [ebp+401155h] loc_31428383: ; CODE XREF: UPX2:31428342j mov dl, [eax-1] loc_31428386: ; CODE XREF: start+98j call sub_314283CE jmp short loc_314283DE ; --------------------------------------------------------------------------- loc_3142838D: ; CODE XREF: sub_31428360+1Bj call dword ptr [ebp+402407h] loc_31428393: ; CODE XREF: sub_31428360+10j pop ebp retn sub_31428360 endp ; --------------------------------------------------------------------------- loc_31428395: ; CODE XREF: sub_314283B3+2p pop edx push 0 push 0 push 0 push 0 ; --------------------------------------------------------------------------- dw 168h ; --------------------------------------------------------------------------- loc_314283A0: ; CODE XREF: UPX2:31428339j add [eax+eax], al loc_314283A3: ; CODE XREF: UPX2:3142833Cj ; UPX2:31428354j mov eax, esp loc_314283A5: ; CODE XREF: UPX2:3142833Fj push 0 push eax push 0Ch mov eax, esp jmp edx ; --------------------------------------------------------------------------- push esi push esp pop edi xor eax, [eax] ; =============== S U B R O U T I N E ======================================= sub_314283B3 proc near ; CODE XREF: sub_31428360+9p xor ecx, ecx call loc_31428395 lea edx, [ebp+401125h] push edx push ecx push ecx push eax call dword ptr [ebp+40240Bh] add esp, 20h retn sub_314283B3 endp ; sp-analysis failed ; =============== S U B R O U T I N E ======================================= sub_314283CE proc near ; CODE XREF: UPX2:31428358j ; sub_31428360:loc_31428386p ... mov dh, dl mov ecx, 12B2h loc_314283D5: ; CODE XREF: sub_314283CE+Cj xor [eax], dl inc eax add dl, dh loop loc_314283D5 retn sub_314283CE endp ; --------------------------------------------------------------------------- db 24h ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_31428360 loc_314283DE: ; CODE XREF: sub_31428360+2Bj cmpsd in eax, dx in al, dx test dh, ah fdivr st, st(4) mov ds:0F098ECE1h, eax aam 0F8h lahf in eax, 0ECh pushf in al, dx sal ah, 1 dec edi cli in eax, 0E6h mov edx, 0B115F08Ch jmp near ptr 1DCB0494h ; END OF FUNCTION CHUNK FOR sub_31428360 ; --------------------------------------------------------------------------- db 9Dh, 81h, 0F1h dd 0DBC4E068h, 5BE9BDC5h, 0B9E480B8h, 9A8BB830h, 0D75BE0BCh dd 0F8B02BD9h, 57CCC1DCh, 0D8601463h, 2FCF20FCh, 0FB94DA98h dd 986428DFh, 9D7DD8ACh, 0A8C44427h, 384CC9A4h, 37A4EA5Ch dd 18109B79h, 0E704257Ch, 87AB7088h, 0BD695763h, 9834402Ch dd 27BD0F37h, 3994704Ah, 8340031h, 3A211D6Ch, 9B4460EDh dd 7B364F29h, 74EF60F0h, 0D8C7D8C6h, 7911ED65h, 0CB14B0D4h dd 41580BF7h, 1FCA00BBh, 0EBACF760h, 8754310Ch, 48C0DB09h dd 0B8B0D32Ch, 0AC0B2039h, 476B8EBDh, 22246A4Bh, 0DCB4F86Dh dd 682CA0FCh, 7D4B18Ch, 0C8405B89h, 173455ACh, 577AB4B8h dd 68149A33h, 0CCA48034h, 99347AECh, 8293AC94h, 793C600Dh dd 0F7E4C19Ch, 0D8504BB9h, 280E88BCh, 2D6B704Dh, 486424C7h dd 0D8B49584h, 96E7C9FCh, 0F8BE4F73h, 0E26EA345h, 9B612FA6h dd 43842018h, 8597333Dh, 0C8E4A467h, 0DEB01FECh, 3B5F82h dd 7854300Ah, 44A094D2h, 0D8B5060h, 2844C4F3h, 0AEA3C5C1h dd 8117009Ch, 0FC272DE1h, 61F520BCh, 0F933581Fh, 35E7401Ch dd 18B4F41Fh, 0FA006F3Ch, 0B3EB0F32h, 888017D9h, 5944EFECh dd 0CB0525F3h, 0FDDF304Ch, 8A4E407h, 177520D3h, 68272739h dd 2719FB4Ch, 0AB2440F8h, 0D9C56F65h, 4B90A573h, 0DE3CB0CCh dd 59BBFE2h, 58E04F39h, 91EC323Ch, 5214F094h, 98A0EA5Ch dd 0CDCBEF86h, 0E8848457h, 1074F48Fh, 8E498A5h, 981E84A7h dd 2C6E2C37h, 0BAFE7026h, 20246A8Eh, 0D8B4C855h, 2152096h dd 6D2BE073h, 882464BFh, 0E77189F3h, 5557E433h, 8D990F33h dd 0C8E4905Ch, 58321F55h, 1B2B2B7Ch, 78B9B1A9h, 85E4808Ch dd 0D8671EA9h, 0A5E41FBCh, 0F883F9D9h, 0DDDB52DCh, 0D8F4B40Fh dd 68443614h, 97BBFC8Ch, 0D8143577h, 7182B9DEh, 0CDE30550h dd 4D78919Ah, 98A4C139h, 7C278513h, 6D4DA03Ch, 7814141Bh dd 288E94CCh, 0D8BAF46h, 2844C41Bh, 0CDCBB0C9h, 4A4E96E3h dd 0C3FC63Ah, 80162196h, 0F8D4B09Dh, 0ED20254Fh, 4893A5CEh dd 0C1F2094Eh, 5D7395A0h, 5D5BD65Ch, 587434FBh, 0BE9264F7h dd 2F02605Ah, 2C775563h, 5CF7506Ch, 0BDFBB7ACh, 0B8D4544Bh dd 4A4E00B6h, 0FC8F0593h, 40FD20BCh, 6FD4B08Dh, 84EDA137h dd 0E7A38488h, 0E8A013A9h, 0BBE2C3CCh, 888077F9h, 0F6010ECh dd 0CCB33583h, 0B8D1304Ch, 8BA29CE8h, 760654D2h, 20209443h dd 92FE7026h, 6C4B9523h, 1831902Ch, 80D7FC88h, 0F8D4B368h dd 6BF5892Fh, 0EF71E99Ch, 0DD842018h, 6D571E4h, 98A48050h dd 96240B8h, 1797F02Ch, 38700399h, 5124459Ch, 0EC8B5F58h dd 0AD8BE898h, 0B8D454BBh, 0B7DA0934h, 4D4BC393h, 680404FBh dd 3C552867h, 88644134h, 1F612FFBh, 41842018h, 0C7EB0C5Dh dd 90FCD8CCh, 582C29ECh, 0E8CF547Ch, 7854310Ch, 8E4C09Ch dd 9874502Ch, 7B52B1BCh, 9C87E5B3h, 118F009Ch, 0AD7414C0h dd 0ABAAC207h, 0A7E683DBh, 0FC16294Ah, 6B98D0D9h, 0CDE81248h dd 4A57F0A2h, 0ADD0E139h, 3D5879AAh, 9A87A03Dh, 1D205169h dd 6D88A9DAh, 0E8043161h, 69638ED5h, 0DDE6334Ch, 184174BDh dd 0BDD7FF1Eh, 6805538Fh, 99B1C2CFh, 0ED362568h, 7D80BFC1h dd 0CDF60868h, 7B1494ADh, 0BCC5E52Eh, 2A5C4489h, 0E8A0C119h dd 1931424Fh, 67B0A5E8h, 0FD1C3C43h, 1A3790D0h, 0C8F51E1Fh dd 3C4B68AFh, 0B1CCD56Ch, 1A2C7488h, 0F8B0D1E9h, 0CE10255Bh dd 5991BCC5h, 0C1F61448h, 5D6085AEh, 8FA4C12Fh, 31726489h dd 8197C510h, 3F545576h, 61A2B4F9h, 0F1203540h, 6F0485D1h dd 0D7D90429h, 2D4875B8h, 0BCDAF124h, 68054590h, 0ACA0D5CBh dd 0CE142D79h, 5691BCC5h, 0E9E10D5Dh, 4C71B7CCh, 0B8C9E508h dd 304071BCh, 8D83A03Dh, 0A316678h, 668BA9EFh, 0EC11172Ch dd 5B7685EAh, 0FDFA1F25h, 42441A4h, 94D0F103h, 9364295h dd 0F895C9FEh, 0DE142151h, 5783B5C5h, 0C4ED265Ah, 485BF0A9h dd 0A1E2EE39h, 39797580h, 86ADD00Ch, 3754716Bh, 588AA5ECh dd 0FD173F5Eh, 780493CFh, 0DDF71F3Eh, 7A1773AFh, 0ABC6F92Ah dd 1A142088h, 8BB1D3E3h, 0C656736Fh, 1880A8C9h, 0EEF0056Fh dd 79719CA5h, 0A1D6F428h, 3D40658Eh, 0BBC4E10Fh, 11124469h dd 61B0A5F0h, 0CB743541h, 586185D0h, 0D5FA254Ch, 217270BDh dd 0BEFBE709h, 0D2849BAh, 8ABDE68Ch, 0E4053568h, 7798BCEDh dd 0DAD3605Fh, 7E7184A5h, 0C8C1EC35h, 3C7564A2h, 9CB7D516h dd 0E3D425Ch, 6F81ACF5h, 0F7202349h, 286A85D7h, 0CAD70402h dd 2D5061B9h, 0BDD8F92Ah, 2B306EFCh, 8CB5D5FEh, 0E7161079h dd 6B87B5CFh, 0EBF02E3Ch, 4C7595BEh, 0A7D6D039h, 2B47758Fh dd 0A6C4D839h, 8357D78h, 7F81A9CAh, 0FD273663h, 476D94DFh dd 0CCDA7022h, 26417093h, 0BBDBE23Ch, 3C375399h, 96B1DBE3h dd 0D8100E1Ch, 7D80BFDEh, 0C1D2145Fh, 596184BEh, 0A5C1CD30h dd 584D6283h, 9A93D432h, 2E314465h, 7D90B2F5h, 0FD393C4Dh dd 51768FD1h, 0D4E0224Ch, 2B4D6E89h, 8BD1F403h, 62D5288h dd 0B9BBE4EBh, 0DB0D3372h, 769DA2D8h, 0FBD3605Bh, 5960A38Dh dd 0B8D1F42Eh, 375873ECh, 87B7C50Fh, 0C315B6Fh, 668BA39Ch dd 0EC173542h, 5C6187BCh, 0CCE71F24h, 294A79BEh, 0AAB4F501h dd 68324399h, 9CBAD5FFh, 0EB0B331Ch, 1880B5C7h, 0CDF00E75h dd 4C719EBEh, 0BBCBEC1Fh, 36555889h, 0E8A1CC18h, 1D205E45h dd 7C81AEEEh, 0DB00356Bh, 4D6A8ED3h, 0DCF1042Fh, 3C45748Fh dd 0B6FD9009h, 6364588h, 889BC4E9h, 88252E79h, 7D80BEE5h dd 0DCE10E4Eh, 56718083h, 89C8F209h, 2C5A59ECh, 8DAAD219h dd 19316278h, 648D86F8h, 0DC355049h, 6154A1EAh, 0FCBA427Fh dd 1A244C90h, 0B4F7F709h, 23215393h, 0AAD4C9E9h, 0F82B2779h dd 7DBFBEC9h, 0E9FC2545h, 5F71A2CCh, 0BAC1F50Dh, 34554695h dd 9081C509h, 1D06304Dh, 7C8193FBh, 0ED18317Ah, 697CA5D9h dd 0BD7DF34Ch, 2075C8F7h, 30B4906Ch, 6B606C71h, 0FDBEB0E6h dd 0E237104Dh, 48385BA9h, 0FCD4B4B7h, 6A45B0A6h, 63317F0Fh dd 0DB3450C8h, 7D3BACB8h, 781414A3h, 0CBEC041Fh, 7F1DD7Bh dd 1B04A0A8h, 0B8FE20B3h, 0DDDB06B6h, 0D8F4B407h, 1730E079h dd 0A0EDD8DCh, 5CEF401Ch, 0D47FD0C6h, 0A8EC6456h, 5214E0CCh dd 0C8CED25Eh, 586C2984h, 0B9C4CA7Ch, 0EDAB605Fh, 8A4E43Fh dd 0D8B0973h, 2844C4BBh, 0F3E08FC9h, 5CAC8D57h, 0D457902Ch dd 7844B571h, 29D7B0CCh, 5A9B134Bh, 3C635527h, 2709607Ch dd 3814E3B5h, 375BD8B4h, 0C3B19B13h, 65C4E058h, 7847F683h dd 0F7A3289Ch, 1DFFAFD3h, 2844C423h, 0B3E0B0C9h, 5BF78F51h dd 0EA5C906Ch, 0E3BBDF03h, 0AD17EF4Bh, 886440F4h, 0F5758DACh dd 0A8C47894h, 0BD9939FFh, 0C8E49C62h, 96544BDh, 1795F12Ch dd 38700799h, 2CE0479Ch, 0BC73C5D3h, 0EA59E0FCh, 50C17048h dd 482400DCh, 0F591131h, 24460E4h, 5A413D73h, 0D8640004h dd 3CD41DFEh, 2B844A3Ch, 0FF72FC08h, 88BC68D9h, 9F14DDECh dd 0A8DC4AF9h, 5254140Ch, 62279D9Ch, 67753A2Dh, 2C771F8Fh dd 781165B3h, 434CF0A8h, 53B4906Ch, 38477B2Ch, 0FE613DB0h dd 3640005h, 18F5DC16h, 0A00EEB3Ch, 3B14F0CDh, 0A86FABA4h dd 0FEC7DB67h, 0AFC1D41Dh, 0BABFC5EEh, 5FEB071Fh, 132784A7h dd 4250B070h, 0D2C6210Ch, 0E3B1FF23h, 5BB4D048h, 0FDCF2C38h dd 0F89494B3h, 62E79737h, 72F317ABh, 2184883Ch, 51D7F39Bh dd 888181C9h, 50B015ECh dd 0AA049374h, 0EDDD2ABCh, 8A4E59Dh, 0DAF9B2DBh, 0E1FA4ADDh dd 0ED579139h, 48240034h, 3535CD6Ch, 68043964h, 0DDD12D07h dd 0F4E7405Ch, 17F4D888h, 0A884D9B8h, 30F871CCh, 9CA4805Eh dd 58351484h, 0BF515F7Ch, 0F3547028h, 2C604D60h, 98745128h dd 0C0048AECh, 0B8947048h, 4870528Ah, 8B216F3Bh, 5B4460D8h dd 0FC433D45h, 0D964401Dh, 49F6BAFDh, 0A8EC6156h, 6A54F0CCh dd 0EC8315A3h, 0DDA210ACh, 0B89FD48Ah, 79505858h, 0F7B3C09Ch dd 9A547498h, 0BDFBE0BCh, 0B8D454AFh, 3CE48585h, 88A0737Ah dd 682EF477h, 0AE83E1DEh, 0ACEBD5E3h, 9DADD0ECh, 0FE5415FCh dd 1C136533h, 9F29801Ch, 326342A8h, 7F49F838h, 78543108h dd 6224F337h, 3387093Ch, 7854B0ECh, 0EAC4201Ch, 6C0B9523h dd 1C35902Ch, 684422F4h, 0F0F0C473h, 0ACB7D5E3h, 0E7A7D0ECh dd 0E8A0B3A9h, 3CD6ADCCh, 0C29A005Ch, 0D3721199h, 0A8D024F1h dd 0F54DD30Ch, 48F4C009h, 0CEA5532Ch, 0E8803243h, 0B98BF843h dd 0CC2B00DCh, 0D8B4917Ch, 1D7E1E7Ch, 0C654F69Ch, 89E04F1Ch dd 98F4D0ADh, 59F14002h, 682A718Ah, 0BDE3CE15h, 9EFB9BAEh dd 0C38BA13Ah, 783E61C2h, 0F7B796CDh, 0D8509BB9h, 0E93FB9BCh dd 0B84BF543h, 0CDA900DCh, 0D8F48C5Eh, 642C2096h, 0A8D4B08Ch dd 43F1BF4Fh, 25F49088h, 0A8846030h, 38AB75C3h, 794D805Ch dd 0D93410ECh, 0A196F042h, 0DDD13F5Ah, 8BE4C09Ch, 0A4D858EAh dd 0B180EFB1h, 8494704Ch, 0E4D775FCh, 5DBBAA50h, 68442070h dd 0D8F4BD21h, 0A959603Ch, 6D80B5CBh, 88B8CC43h, 46958CB9h dd 0BCCCA0A3h, 0D9456598h, 0D2B4A302h, 10211F23h, 81B875Ah dd 88CE6123h, 0DF04E09Bh, 2D6B22AEh, 4864245Fh, 88E4505Fh dd 61AC70ACh, 0BCD4B08Ch, 0E40A3773h, 1890B1C3h, 8C5FF5C3h dd 0F891F08Ch, 197B628h, 7D319565h, 8095A03Ch, 0F854320Ch dd 58B291CDh, 0BCABC5D3h, 0BD89E0FCh, 0B8D469DEh, 1CED338Ch dd 89E6C03Dh, 5FD1DFADh, 7FD4F0A8h, 1D9B6418h, 18B4F4ABh dd 2504A3C4h, 3854E4BBh, 9B67795Dh, 0F6056A3h, 0B481F23Dh dd 0A375941h, 6E8BB3F3h, 0F1230C58h, 5F6B84D2h, 0CDD72C3Fh dd 264172AEh, 0AAD1C618h, 62B498Fh, 88ACF5D0h, 0ED162F70h dd 76A1D0DEh, 0CDF11155h, 4C679F84h, 37A4825Ch, 5834101Ch dd 87B6D07Ch, 19395974h, 6B96A9B2h, 0F918314Bh, 582A99C4h dd 0F1DA7020h, 27044B9Fh, 0BEC4E907h, 62234E91h, 0AA91E3D9h dd 0BA54303Ch, 29C4E59Ch, 86A44E1Ch, 724BCAECh, 0E8EAC913h dd 2A5D66CAh, 0BDCED508h, 785430E4h, 0E5659D9Ch, 98344C68h dd 3C73657Ah, 4794700Ch, 8005B49h, 0C75C516Ch, 762E1C88h dd 0DCCF0507h, 243D405Ch, 3281FE90h, 57BAE15Ah, 0B53785D1h dd 88807BE1h, 5A429BECh, 4DA2052Bh, 5B1BB581h, 8D6BC0DCh dd 98347359h, 0D2426946h, 436A3EC0h, 87C6016Dh, 5D39D387h dd 68043463h, 92D4DADCh, 0E3F1BF1Ah, 9BF49088h, 0AC8C4440h dd 3CFCDBB9h, 9BA4805Ch, 0A73453AAh, 0A8E0EFE9h, 8418D80Ch dd 0F0C3F63h, 0CB74502Ch, 675BA3FAh, 2D6B701Fh, 48642493h dd 2748A584h, 9C0DC803h, 752B4F73h, 8824527Eh, 18F4DB44h dd 0EDD7353Ch, 1626C39Eh, 0C8E8CC18h, 7C578513h, 0E22CA03Ch dd 0F54300Ch, 6196B0EFh, 0D9122442h, 0BDFBB0BCh, 0B8D4545Fh dd 6C3B8555h, 0E9BB902Ch, 7FCDAD71h, 7D5DB0CCh, 8824651Dh dd 7B612FFDh, 3B842018h, 3814F4A4h, 5E110D5Ch, 13450FBh dd 0CC231DF1h, 3EBC304Ch, 6E1B3F6Bh, 8382D5EBh, 0D8FBE0FCh dd 0A36CD5CFh, 0C524009Ch, 98AF26F9h, 21070FCh, 0AAD4DA8Dh dd 88644274h, 0F3612F2Ch, 2D842018h, 1A61AA0Ch, 0D34D0DD1h dd 326610ACh, 1E712D7Ah, 2C547017h, 59B490CAh, 77E1AF7Eh dd 7004A098h, 9C73E5B3h, 0CDE2009Ch, 0D8F4B764h, 6848C8FCh dd 0AB83B08Ch, 0BB2F0353h, 54B0FE9Eh, 3D7B6070h, 3854D4AFh dd 0C8A3E8CFh, 0EDB910ECh, 0E884B691h, 0CFE9BD55h, 0E0E480B8h dd 678BA6EDh, 2804EC54h, 0F6DD274Ch, 1C614E95h, 94F8D442h dd 0BD1DFFCh, 7DD4F0A8h, 6FE04FDCh, 8BF4D0ADh, 0A8846554h dd 13A17DCCh, 91A4C04Bh, 7CE7AD61h, 622CA03Ch, 0FBABCFFAh dd 48C01721h, 1C7B502Ch, 2804E17Eh, 0B9049CCDh, 207000DCh dd 0D8B4916Dh, 4CF3B503h, 3C55B0CCh, 8864418Ch, 72205BFCh dd 3D7B323Ch, 3854D41Bh, 0BDFD40D9h, 4BBC78E1h, 7D3BA07Ch dd 7814148Fh, 0B5672277h, 98344BD4h, 0A52D95BCh, 0F88F8CC9h dd 0DDDB50DCh, 0D8F4B4AFh, 0EC4BE079h, 0F8D4B1B7h, 3680097h dd 97C42FACh, 0E89F98B9h, 309136CCh, 0C9A4C07Bh, 595E1086h dd 7D3BA216h, 781414C3h, 71B381Fh, 987542A8h, 0BD8973BCh dd 0B8D46BB8h, 1B7610B6h, 0FC0B0593h, 0A8C120BCh, 0F8263583h dd 35E9401Ch, 18B4CCBAh, 686C688Dh, 50EB0F36h, 0C8A480C8h dd 0D1D23BB2h, 17908448h, 38706F99h, 2C594D9Ch, 29741030h dd 0D2A508BDh, 0FC1F8FB3h, 0A8E510F8h, 0FCF09B64h, 60A4E1F8h dd 0F0F0F487h, 8861A84Ch, 36D1D0ACh, 0FF84180Ah, 1C0B6533h dd 0C27801Ch, 5E73D6E0h, 0F9512D5Ch, 12547010h, 8C5A89Ch dd 0CB26502Ch, 0CCF7543h, 0C419700Ch, 0B77314F8h, 9890B3F9h dd 5040E6FCh, 0F8BEF086h, 7737174Ch, 58D01B39h, 2562633Ch dd 7808C271h, 0A0A4EA5Ch, 583410E0h, 7D3BF32Bh, 781414C7h dd 8E4CCA1h, 1539252Ch, 6821E909h, 0B019FD4Ch, 632440FBh dd 89B4FAA2h, 0FDBB73AAh, 0F894944Bh, 0F664B89Fh, 0E67F4183h dd 8D8DD5B1h, 35A4F08Ch, 0D8D12EAEh, 0A2C3F88Ch, 9AA55F83h dd 0F55DD31Bh, 0E20FC1EBh, 565F9FA7h, 0D0D5D31h, 1C67700Ch dd 0F1CFF75Bh, 63216F3Fh, 0E84460D8h, 0B8C0C731h, 0A210411Ch dd 1881E0C4h, 2B119F3Ch, 0B814B0E8h, 888388E1h, 494010ECh dd 0F33C25BBh, 7854304Ch, 8D22C09Ch, 98347724h, 0D65209BCh dd 3D538FB3h, 4864145Ch, 58B4906Ch, 6840E2A1h, 0DFDD0501h dd 7732405Ch, 58D09339h, 577CE33Ch, 38AF74C3h, 4D2D805Ch dd 587438E1h, 1792A016h, 38704B99h, 724459Ch, 9874F4A8h dd 78C4CBBCh, 0E8971A1Ch, 484C01B6h, 8E74906Ch, 4C63B503h dd 57B0CCh, 6CE04FE3h, 91F4D0AEh, 0E8AC71B9h, 2D997DCCh dd 45A4C074h, 181C0D79h, 8296F17Ch, 0EDAB600Ch, 8A4E4D7h dd 978BA8AFh, 28065238h, 47941A4Ch, 80C1169h, 9F216F6Ch dd 0EB4460D8h, 7CDB4F74h, 88644287h, 30D15525h, 61B7607Ch dd 684533CFh, 99A0EA0Dh, 7025A513h, 7D3BA03Ch, 78141427h dd 8CEB0019h, 9874525Bh, 0AD8D298Fh, 0B8D45865h, 2075518Dh dd 0D8BB9073h, 0FD1DFACh, 7DD4F0A8h, 0B8E04FDCh, 91F4D0AEh dd 0E8AC4DB9h, 739F33CCh, 909C3864h, 8A0710ECh, 1933617Fh dd 0FDDDD1FBh, 8A4E8A9h, 20481BA7h, 2804F4BAh, 7997A27Fh dd 0A9D3F12Bh, 0F08515E5h, 678720BCh, 1D2FB3Bh, 0DBE976FFh dd 5B43DFB4h, 0E1546328h, 3B3C31A7h, 979E018Ch, 0A15A799Bh dd 6B8DBE08h, 0A553C76h, 34AF4B43h, 9B6012A7h, 6C89F0FEh dd 61638F04h, 0CD1FC1FFh, 0D8F4B849h, 2CCF793Fh, 705DBCA8h dd 886440A4h, 9337109Fh, 258F8BF3h, 7833F971h, 172F7C5Ch dd 6498D9DFh, 0D4C2D21Dh, 54564776h, 54D86ABCh, 0B648BC58h dd 28383DC8h, 70779839h, 0D190157h, 0ACB4D534h, 2B171DF7h dd 7DDBB0DEh, 779BBF55h, 4FC9D327h, 0A7C72E75h, 0C7EBCC48h dd 8BF3BDA3h, 0DC3B5EB9h dd 173B5F4Dh, 4B176731h, 2E60CFAEh, 0A58BAFD3h, 6750B3ECh dd 478FF443h, 9317FF23h, 274AD384h, 66C02F03h, 0CB2B4F73h dd 8872A8CEh, 761CD0ACh, 407B9FC3h, 3814F0CCh, 7B490101h dd 0B13450CDh, 0E8C4A085h, 0F366CF68h, 48CCED29h, 0BAFD342Ch dd 653A61DAh, 5A117F16h, 0C32400DCh, 6B7AC32h, 387FA19Ah dd 2A51BFC9h, 7F64401Ch, 38F4C6EFh, 2D8B603Ch, 3814F009h dd 0CAF8C3AAh, 588F94E3h, 9645A07Ch, 5874102Ch, 0A660CFBCh dd 7074502Ch, 0D7FB1E73h, 0B837F243h, 0DFCC00DCh, 304B6F92h dd 6844205Eh, 0D0E52D07h, 3D8C405Ch, 170B2F51h, 0A884E8B8h dd 15A17BCCh, 43A4C074h, 86372CB2h, 173A3E94h, 0F92242F3h dd 884E4D6h, 66FFB02Ch, 3C7EE3EAh, 0A894C5C1h, 3227009Ch dd 0DDB5297Ch, 9B1320FCh, 1BD70129h, 0D7C0B31Eh, 29FB82F2h dd 0FD03EDAEh, 0B014F0CDh, 34C7F0Ch, 2CBEF02h, 0EBC8EAF7h dd 39D92046h, 20A7EB99h, 5F6617A5h, 824C0FAh, 0F31D506Ch dd 586E8BF4h, 0F08515E7h, 227D20BCh, 71D7C384h, 0CA654856h dd 409753BCh, 9D01EB3Ch, 3914B0E4h, 8BA5881Eh, 3CE623BCh dd 67A082F7h, 0C5D7680Eh, 8A4E88Dh, 7AF05F2Ch, 0D7FB1F41h dd 0F8BC5DF9h, 0CFB1FFDCh, 27B4D048h, 286C0949h, 0FF414F8Ch dd 5640038h, 58DCC521h, 0B511ED3Ch, 6914B0E4h, 37A4EA0Eh dd 181C0159h, 97515F7Ch, 87547028h, 48CCD129h, 9FE1AF2Ch dd 0A504A098h, 0F8B379F9h, 4591FFDCh, 8EB4D044h, 4C3FB503h dd 5D57B0CCh, 8824680Dh, 181C13ACh, 0F584603Ch, 0D595F1A6h dd 0C8E4A372h, 993BE0B4h, 0A8D020F9h, 0BB94B50Ch, 0F81B081Fh dd 18F19123h, 0EB04A0A8h, 92946071h, 2E3875DCh, 0D490ECEDh dd 7B315190h, 71058ECh, 8D11BFE3h, 0E7091244h, 575688C3h dd 16750F33h, 9EDCADA3h, 0B05402D8h, 173B5FD6h, 3CDF0979h dd 0BD69F0B8h, 98347725h, 4E0CB037h, 0BA924ACDh, 207225AFh dd 0D84B906Ch, 682EE477h, 6D2BE0DEh, 882464AFh, 99FC142Fh dd 97BB3C02h, 0BB178590h, 0BC4C849Ah, 0B0CBEF11h, 173B5FF8h dd 7871886Dh, 0B027C09Ch, 98745003h, 2804F054h, 0B8B4B24Ch dd 48243064h, 0D8B7786Ch, 4C8620FCh, 0DC803D8Ch, 0B4A8D10h dd 188D054h, 0A884885Ch, 6C9FF0CCh, 43F9B078h, 0A9D991F6h dd 0C4E05Fh, 87ABC408h, 8E002FDh, 1A5Ch dup(0) UPX2 ends ; Section 4. (virtual address 00010000) ; Virtual size : 00001000 ( 4096.) ; Section size in file : 00000200 ( 512.) ; Offset to raw data for section: 00010000 ; Flags C0000040: Data Readable Writable ; Alignment : default ; =========================================================================== ; Segment type: Pure data ; Segment permissions: Read/Write _idata2 segment para public 'DATA' use32 assume cs:_idata2 ;org 31430000h dd 80h dup(0) align 1000h _idata2 ends end start