; ; +-------------------------------------------------------------------------+ ; | This file is generated by The Interactive Disassembler (IDA) | ; | Copyright (c) 2007 by DataRescue sa/nv, <ida@datarescue.com> | ; | Licensed to: SRI, 1 computer, std, 05/2007 | ; +-------------------------------------------------------------------------+ ; ; ; +-------------------------------------------------------------------------+ ; | This file is generated by The Interactive Disassembler (IDA) | ; | Copyright (c) 2007 by DataRescue sa/nv, <ida@datarescue.com> | ; | Licensed to: SRI, 1 computer, std, 05/2007 | ; +-------------------------------------------------------------------------+ ; ; Input MD5 : A6D486C78CC8B31915A7978665F216ED ; File Name : u:\work\a6d486c78cc8b31915a7978665f216ed_unpacked.exe ; Format : Portable executable for 80386 (PE) ; Imagebase : 31420000 ; Section 1. (virtual address 00001000) ; Virtual size : 00005000 ( 20480.) ; Section size in file : 00005000 ( 20480.) ; Offset to raw data for section: 00001000 ; Flags E0000080: Bss Executable Readable Writable ; Alignment : default .686p .mmx .model flat ; =========================================================================== ; Segment type: Pure code ; Segment permissions: Read/Write/Execute UPX0 segment para public 'CODE' use32 assume cs:UPX0 ;org 31421000h assume es:nothing, ss:nothing, ds:UPX0, fs:nothing, gs:nothing dd 1400h dup(0) UPX0 ends ; Section 2. (virtual address 00006000) ; Virtual size : 00002000 ( 8192.) ; Section size in file : 00002000 ( 8192.) ; Offset to raw data for section: 00006000 ; Flags E0000060: Text Data Executable Readable Writable ; Alignment : default ; =========================================================================== ; Segment type: Pure code ; Segment permissions: Read/Write/Execute UPX1 segment para public 'CODE' use32 assume cs:UPX1 ;org 31426000h assume es:nothing, ss:nothing, ds:UPX0, fs:nothing, gs:nothing dd 0E8D2FE1Fh, 87778778h, 0BE817BB1h, 26493A6Dh, 94F32D5Dh dd 796894F9h, 17958305h, 4B2E2B70h, 782E2F8Eh, 84107912h dd 6D876339h, 0A7A36950h, 0F37DC7CEh, 0DA643A0h, 58916A7Fh dd 0FDF5257Ah, 10448688h, 0C2A4A3E0h, 6628547Ch, 0F04568F4h dd 0B70D6F7Dh, 4D804F4Eh, 1275AF6Fh, 5FC5A7Eh, 64838A8Eh dd 284D7DFCh, 21177790h, 88102164h, 0E3D518C2h, 7B7A1553h dd 0C338F447h, 4C91C7A3h, 8780FBF8h, 0D843DF1h, 5893657Ch dd 15872EEAh, 0D95E317h, 5CE82B70h, 7060BE43h, 8468760Dh dd 0CB06A695h, 7B120451h, 0C7299320h, 2F786841h, 4BD96419h dd 0C8D583E3h, 28803D1Bh, 494A2B2Fh, 4B4A764Ch, 2E8C0E8Eh dd 2B800D2Eh, 8744004Bh, 0D2204E43h, 2BE7E47Dh, 0BCFBCD38h dd 87B84B74h, 27878027h, 0BBB12326h, 705C34F3h, 7C5C3CF3h dd 0B7FB2F60h, 77123887h, 537909F5h, 8787A381h, 68F22187h dd 7B8720F2h, 0B9A17AA9h, 9AF87C82h, 5C2C527Bh, 7A9BB860h dd 0DDF0AB72h, 0C38323F2h, 0F2792885h, 62B28660h, 0FB6EA95Ah dd 5B617BB8h, 87C2639Bh, 6E6488C3h, 6CF53E3Eh, 4882FB4Fh dd 0BB24C704h, 1794FB0Dh, 40C057C3h, 0C6215F21h, 5F23A34h dd 0DD8B729Ch, 5B97871Eh, 77DCDDA3h, 25F3B048h, 0A3FD6874h dd 0FB7B05DCh, 9D8762BBh, 0C67795A0h, 704DF605h, 0AE2F9CA9h dd 21B8FD21h, 1CF56B0Ch, 35CF8783h, 0B9536240h, 0E1BB7B21h dd 3CF2818Fh, 5B939C6Dh, 453B067h, 0B0B0763Ah, 39F27B93h dd 8785C698h, 3DF3FCA7h, 0DF32E74h, 78F22F68h, 340CB8FCh dd 542B19F3h, 1017877Ah, 0F26BA780h, 8FBEF3A0h, 7025F0A0h dd 7B6E7040h, 0CE7FF06Ah, 21871717h, 1983F83Fh, 7D730421h dd 0F47E0702h, 1996FB8Bh, 9F8E3972h, 2277817Eh, 0D303539h dd 0BA1C23C3h, 33C3CF73h, 1F785FF8h, 4B36BB25h, 0A376F3B1h dd 7C879915h, 696CCE77h, 0FB39BA7Bh, 0EA887B81h, 0F3F621E1h dd 0FDC66E96h, 0FE195ABAh, 0A0F88512h, 1454A810h, 7CA407C4h dd 28EED91Ch, 7F5DF11Ch, 0F881CE3h, 0BF2FF7FEh, 73D3A0FDh dd 841DFB78h, 0C3101078h, 5BB961C7h, 21217C9Ah, 0C5F180F3h dd 87FD67A8h, 9694A34Ch, 5C4AFC77h, 687CBFFBh, 0F72F5B76h dd 0F31E4E4Fh, 28219C42h, 0A796F677h, 0F8978387h, 0F23478DFh dd 0E0FDF07Fh, 0FBA0C65Fh, 0E5F11993h, 0E6F073ACh, 97C66F0Dh dd 0F50A831Eh, 313F709Eh, 44CF0612h, 703D9347h, 0CDF18815h dd 3CBC8EB4h, 0B34EA0A0h, 5EF8E87Eh, 9C2C2FD1h, 0B9940327h dd 0F2EF7B97h, 3E7EF06Eh, 0FA4B3A57h, 87C20685h, 3EF5E465h dd 0CE7A5979h, 0A7911B77h, 2865580h, 0D7E4064h, 723C120Eh dd 0B1FE438h, 61A49464h, 76EC537Fh, 14A1C8F4h, 394812A0h dd 0C675A01Eh, 4BA074C9h, 0D7860EEh, 0A1C54163h, 4F89B4E6h dd 0E479EE7Fh, 0FA0A921h, 55E077DDh, 35FB2102h, 0BA7D716Ch dd 88CBF4F3h, 35F31070h, 5275F988h, 3BFDB0C1h, 7890F2DCh dd 68B5D6E6h, 71157FD1h, 0E329603Ch, 12A314D5h, 6F7FE11Bh dd 4BE8E87Ch, 0A1C2C7A3h, 0CC540F5h, 4EE644Ah, 0F6944D0Eh dd 37FE99C8h, 287C4DCCh, 0C736B891h, 25C10410h, 0BCBF61A1h dd 93866964h, 8F0D6B60h, 1055E6B8h, 2B746108h, 38341078h dd 0FF72AE0Ch, 77882BEFh, 0F5A32B50h, 6294D3AFh, 288480D3h dd 0FDDE58FCh, 2B2E56EBh, 74892E83h, 2ABA55A3h, 2E667C9Ch dd 65C75446h, 0CE41F30Fh, 0D5AE4BAEh, 0E06533A3h, 17122FCAh dd 0C787AF4Dh, 0D1BA1859h, 7C7C054h, 444C6819h, 0FCF2470Ch dd 0FE38F8CEh, 7FF9CECCh, 478E8303h, 0BF73BB67h, 0F81C4D21h dd 98B9211Bh, 504DFD7Bh, 0D7A5727Ah, 0D11E0E89h, 126A0DFEh dd 0AB87A2EDh, 0F0859470h, 0DA37E514h, 8A7B9384h, 87CF86CEh dd 0AA4B1C2Dh, 1BEB98C1h, 0BAF9898Fh, 787E6330h, 0D5EC972Ah dd 86077B15h, 1BF00A6Eh, 24F4DF7Eh, 9098560Dh, 4CD02ECEh dd 2572F6Dh, 0B3CD2F2Fh, 0F4D69EC2h, 7D747027h, 133A9472h dd 0F5668F17h, 0A469083Bh, 937B5C5Ch, 4B15E157h, 63C04034h dd 38865CB8h, 0C31F1F38h, 6031A2ACh, 0F17C0E5Ch, 73466554h dd 0E74EE573h, 0AA26B848h, 4C12AEC3h, 76EA7083h, 7B103F41h dd 0B9E19A2h, 1B6458ADh, 0F5FF2645h, 7A66CDCCh, 60581374h dd 131DE97Ah, 61932796h, 60642F00h, 85F48C6Ch, 35775CFBh dd 7579F164h, 4774BF50h, 1E86969Bh, 48F19CC0h, 34FCD994h dd 0A8D5EBC4h, 5927AD90h, 0B0F076E3h, 7ACD567Dh, 8C052A73h dd 63692084h, 0C011DD07h, 6512D87Dh, 0CF249D2Eh, 69E7CE1Fh dd 2228EC3Dh, 0CC7B71E4h, 7ECC1610h, 5C3400BEh, 86B56A1Fh dd 27CE4E6Dh, 0CC752CF2h, 71F86EF0h, 0B7E17E39h, 501717BEh dd 18129604h, 3FE0642Dh, 8F4991DCh, 7046A6F2h, 4698A9A0h dd 0C40BC5B4h, 6687348Bh, 711259F5h, 97199710h, 2149FE76h dd 58333DFCh, 95C2B247h, 2F627C07h, 3DF098A8h, 39836883h dd 1EEA5867h, 98A88621h, 822F717Ch, 9E1F3182h, 5110032Ah dd 0A0479976h, 10AA1A98h, 12A3CB17h, 2BA45C68h, 1E3CF973h dd 1EFD75BFh, 1027A50Bh, 189CD1C5h, 1773611Eh, 0A42F0DD8h dd 0F184E05Eh, 1C49980Dh, 5E6F50A1h, 4F7B9256h, 0BBFF38ECh dd 0DFB0C7CCh, 4310A098h, 2D99E3FBh, 3DF83B04h, 0ED60AB80h dd 7FFED617h, 10874B35h, 9E657E38h, 3E3195E8h, 0D0B8E014h dd 6385636h, 1C3E744Bh, 7A61E3A6h, 7048C001h, 0F925883Eh dd 5FF4779Eh, 495E19F8h, 79BDFD77h, 44C5A1D6h, 7FA870A7h dd 88C44478h, 0B4C82EE8h, 7469700Eh, 0B38C3A27h, 248F4459h dd 0CB696789h, 0FA9C9474h, 726B7A33h, 0D8800016h, 0D94649BDh dd 0F15D33C6h, 0A33BD2FDh, 0D68808D8h, 0EADA7C05h, 36B87744h dd 7A039064h, 0FC7A8A12h, 3F840563h, 887A3261h, 0D84B9C7Ah dd 7A6E3010h, 0AACF4DAFh, 0DF45057Bh, 0EE71079h, 4E9EB49Eh dd 4232581Ch, 6322CFB4h, 0A4FFCF4Ch, 120EFC98h, 0EE8C5208h dd 9EB09BF4h, 26B018F8h, 2EF1C72h, 5F46635Dh, 0DA5078FCh dd 4E337847h, 44A1C113h, 0E0C1CA14h, 9C0FC59Ah, 0A4791F2Ch dd 49062877h, 0BF0FBB9Ch, 0D4104375h, 0AB50B875h, 0C940B6A4h dd 9D1770B1h, 0A374027Ch, 0AA303D5Ah, 0A555BD80h, 0AE635957h dd 3856A364h, 7E086AA6h, 34E84194h, 38C4803Ch, 0BA09E8AEh dd 63A6283Ch, 21436668h, 0ECCF4B17h, 0F959EF75h, 1F91D481h dd 90048693h, 6E5CDDF8h, 105D7E78h, 5DE5642Ah, 648A237Fh dd 0EE8C6A0Eh, 0F1E591BBh, 0EC72971Dh, 3B00412h, 1CC99BBBh dd 0B1C63174h, 0E165A103h, 0E8992C9Ch, 0F4E7915Ch, 0A4B4BB31h dd 0B7005C56h, 54FA3095h, 801C7D54h, 1E8C6D74h, 4B61D87Ah dd 7008025Bh, 0F7F1260Ch, 8CBEA576h, 6429B427h, 0F8CB97E4h dd 75C9CD9h, 7DDC4DD0h, 0CDA80063h, 2F6AFA80h, 220C2F4Fh dd 72B38149h, 0C80766Ch, 71D81033h, 0B250CF2Bh, 55450CB6h dd 1F95FDB1h, 0D8395811h, 77842D87h, 4DC2C190h, 289CE6AFh dd 76EE50D4h, 23487A88h, 2D3FC735h, 0F4787180h, 106DFB9Ch dd 8C0D2043h, 60FF963Ah, 0FD6B59BDh, 0D17228F3h, 0C78F07CEh dd 4439F357h, 10B97B2Fh, 30F33554h, 2800F34Ch, 0D88C35F1h dd 967E52CCh, 6410A033h, 25EFA063h, 888D21D2h, 7010AA79h dd 0B9F5946Ah, 950CBBC9h, 6968AF75h, 8C1776FAh, 6C71CA12h dd 8035895Bh, 0E90E5429h, 606028FDh, 0F15210EFh, 142CD891h dd 0B23825C8h, 3EB8957Bh dd 934C131Bh, 0E2D36148h, 2116AD00h, 7B05882Dh, 0D31F3D9Eh dd 8846A533h, 2B284929h, 7198D466h, 8C4DBC8Fh, 6F82AEC5h dd 47921512h, 2D0FA889h, 0CBF4394h, 6393207Dh, 229D066Fh dd 5D4CF4C7h, 7D847621h, 4E9F4C27h, 0C707F93h, 99842097h dd 272A66FEh, 18572929h, 0CA114977h, 24E9D93Ch, 0C2C05D75h dd 0A558A33Ah, 0CA6BC9D7h, 694BD694h, 55217793h, 0CE1281BAh dd 0E195BCC9h, 74F844C4h, 6C28D028h, 55F0CAEh, 25B85428h dd 3C218461h, 3B0458C2h, 5C04F32Fh, 0DDBDFB6Ch, 669AA22h dd 1C62FF6Fh, 0F847878Dh, 6CF019BAh, 8F433E66h, 5CF89104h dd 0BEF47843h, 2CADAEA3h, 27563CF3h, 2E2FD422h, 486065A3h dd 57591E0Ch, 0F0EEA40Bh, 28885695h, 782E2861h, 7BBBD4D2h dd 0ED0F994Ch, 318C35BCh, 0F71316F4h, 88748210h, 0B170BF87h dd 4CE311EEh, 5652B44Ch, 0E1D50B34h, 72720D95h, 6258C428h dd 466E7960h, 7FBE2CD9h, 794307C0h, 0D589B60Ch, 0F3743805h dd 29707978h, 275C3CF5h, 0E3194C59h, 0AB6948BDh, 0C5C217Bh dd 7F803690h, 7FC3B46Dh, 1E57B058h, 4B4BBF83h, 0B980B09Ch dd 73FD689Fh, 3E01C8ACh, 0F37A78CEh, 784B6A25h, 8B085E3Fh dd 79E5BA79h, 2BBC92B1h, 0DB699BBEh, 8ACD034Dh, 0BB5D284Dh dd 5ECEE5FBh, 0D59F30F8h, 381E14CDh, 39886FE6h, 0C3104DEDh dd 0E0B69B49h, 0CF141045h, 3F37883Ch, 61C91814h, 0DD352C86h dd 54BDAB6Ch, 42CA2A4h, 84758678h, 4BD94CC2h, 530178C1h dd 0AB943BFh, 0AB9F37Ah, 9993CF17h, 90D95153h, 5BBF7B60h dd 865DDBD4h, 5B45B4EEh, 12690Ah, 0A2493880h, 0BC934450h dd 0F28996Bh, 148E375Eh, 0EC66AC69h, 0B544106Dh, 7396351Ah dd 0EF40107Bh, 0E51E4644h, 2C2B42CDh, 0A8FB2A2Bh, 0F43F98C9h dd 7CBAE05Ch, 6B15FA5Bh, 761C48E0h, 90A8C98Fh, 70BB6EACh dd 0C3963651h, 0F12F3B0Fh, 0F810107Eh, 5FFC65F1h, 25370660h dd 6C9415DAh, 788AACB8h, 0B94C2BE9h, 7A031314h, 0F8934279h dd 0E2AC109Eh, 6235850Fh, 0CB324E00h, 0A4B5570Ch, 1F0226DBh dd 0DB1D740Dh, 2B84DC86h, 62A1AA29h, 42FE2E6Bh, 0A44610A0h dd 5E2EA0F4h, 20612681h, 80A2126Ah, 267D68BAh, 97332EB8h dd 741EEFDCh, 9425F190h, 0A7877D75h, 5D958F18h, 427C6787h dd 3B84DBBBh, 0F2679F0Ch, 27B1FCB4h, 0C9031C5h, 921328A7h dd 1C38273Ah, 0DD61FDC2h, 3C741C1Dh, 5391D7DBh, 6C802703h dd 0E63067A0h, 82B6D594h, 6D580610h, 9A931A36h, 24B9B72Bh dd 3D27993Ah, 0D479E83Bh, 81E6503h, 0C84B44D6h, 0AB7F69AEh dd 7A46A33Bh, 0F842AE9Eh, 0E3757281h, 0D3C810CCh, 0C981BDBh dd 0FA5379A0h, 8CDB0304h, 0FE71A183h, 0CF459CB5h, 51983D2Ah dd 96B58E08h, 617C1C75h, 101B639Ah, 946B5BCAh, 244C37CDh dd 6BFE936Bh, 0C818E1D6h, 4D118362h, 41083C80h, 0E85D5438h dd 0AAE8F7EBh, 8B5B01Ch, 0E83DF46Bh, 0EC7E9724h, 0A41642Ch dd 0E434E09Ch, 0DC44D83Ch, 3F5BE94Ch, 0D454D0F6h, 4164C85Ch dd 0CCB09C0Ah, 0C46CC060h, 0E774B868h, 0BC64F63Fh, 0B47CB070h dd 80A83584h, 5BE9B09Ch, 88A08CACh, 0FDD694A4h, 90980A41h dd 7CFF9C9Ch, 78F31EC5h, 0DB14AB4Fh, 0C100A2A6h, 7A84C815h dd 0B71FBF4h, 94F44C6Ah, 39247B0Eh, 32F5E8FDh, 93748721h dd 35F56290h, 0CC759C40h, 0B1416224h, 0FF738804h, 0AC10410Ch dd 4FD0D335h, 0CE4A1A0Fh, 0BC7E35B4h, 0FC467515h, 0E2C431FCh dd 362F7C1Dh, 52A3430Ah, 724C6D59h, 5F166EDAh, 396F4642h dd 27E2503Ah, 559986Ch, 8060CC90h, 93E46BF0h, 0BAFA3A9Bh dd 226DE1EBh, 6318EDD7h, 1B2D3F7Bh, 0A607DCF8h, 0D56988D2h dd 733DF229h, 4A8712E6h, 0F8B995A3h, 0B4422ABBh, 0A4254049h dd 89708642h, 7325F05Dh, 77857FAAh, 22744DCFh, 80748721h dd 8FE177EBh, 0F6AE7B86h, 83F8BB86h, 56AD0A87h, 26C5BE23h dd 270E1AC2h, 0E06BCA1Ch, 104B177Ch, 2EA27120h, 0F9703740h dd 0BF757C72h, 71A321C8h, 0F80DF773h, 18E33155h, 2781770Dh dd 66F1545Dh, 45E5D59Ch, 7B87FC4Ah, 83F93BAFh, 0CD75C609h dd 27E7EE5Bh, 13DE25FFh, 337436Eh, 15DA220Bh, 9E2F4461h dd 0E10B7857h, 85C600CFh, 8E86877Ch, 19F00744h, 4B841423h dd 70F38D77h, 0D2A48B43h, 0A0CBCA0Eh, 2FD8DB46h, 0E42F57E6h dd 7A5DE6A1h, 6B2180AEh, 5D165DBBh, 0CBC38776h, 0BB8A960Dh dd 1099D4F6h, 0ABDE5F68h, 0EEE6ABC6h, 0FCB9B9F8h, 28D15508h dd 682AD51Ah, 0F7BA3D36h, 0C2184A8Dh, 8AD22412h, 9881A4A7h dd 73844234h, 1C10C87Bh, 7B0AA536h, 6968437Eh, 0AF3AC25Fh dd 14986A8Fh, 73F8BE71h, 0C85341A7h, 2D1773C8h, 0FC2FEB2Eh dd 0F8B400A0h, 296B9EA0h, 101E6435h, 856774DDh, 0A16C1A8Ch dd 2BF17E96h, 7A738E19h, 70402812h, 0D82385D7h, 0AA7D5425h dd 600C78EEh, 0B7F6971h, 68793FF5h, 786C617Dh, 71A5FD6Bh dd 6F7EA037h, 3AC5D276h, 0C88F9A3h, 0BFAD2B75h, 0C6696829h dd 41597999h, 42605C34h, 695FD95h, 0A00EA069h, 5E33DDFEh dd 976C3554h, 14615DEEh, 93DA7D0Fh, 0F30D758Ah, 1DC0C80Eh dd 1082A593h, 0B9634B47h, 0EEF918B0h, 0FA86D74h, 16D11A4Eh dd 0E86C7068h, 57FF33DBh, 2E60A129h, 0A0A02484h, 8E604FCAh dd 0C452E46h, 1B69B67Dh, 193952A4h, 0CF3354E4h, 685828ABh dd 217B7060h, 0D2731A84h, 0F32D7726h, 22B699BEh, 564BDA2Fh dd 2E2B542Eh, 0B1E860FCh, 5D5F782Dh, 22B6217Bh, 7C742A72h dd 0EA1AB758h, 50D72574h, 0F19ACF79h, 59A62BBBh, 0ECF61136h dd 6B8E8C40h, 2466444Ch, 8F01364Eh, 3BD5A67Ch, 50656C14h dd 1002DC55h, 0EAB9944Dh, 8CA02255h, 5A8C7168h, 0B75843A8h dd 96804E02h, 3F055A65h, 79660CF5h, 8D2E8403h, 307CB986h dd 0CD876466h, 0C1CB3D98h, 873D5758h, 702A6777h, 19BB2F18h dd 643E284Bh, 4CF1C50Eh, 0CF4BD80Ch, 2FAED144h, 75E9C9B0h dd 0E037D4CEh, 64F8AC7Eh, 0A09C0A41h, 9814A40Ch, 0E9309C18h dd 90F63F5Bh, 88589444h, 614CA968h, 0CF788CB4h, 1BC773FCh dd 1C049A19h, 0F30681C6h, 0D91C29DAh, 0CCBC4560h, 0B3A04E70h dd 766F0D0Ah, 0DE356531h, 5271E6E2h, 0C5DBFB46h, 0F23E710Dh dd 0F0983Ch, 0F43F8C12h, 0CC710CC8h, 12F0210Ch, 0F3CBF91Bh dd 0FCC4A621h, 2575AD9h, 98FB47B9h, 7DB8FB7Bh, 0FEC1B52Fh dd 852132F3h, 28E568B7h, 456A6016h, 6445AE7Fh, 765E961Eh dd 2890476Ch, 0E054973Ah, 5838DA19h, 3304B239h, 0AFBE4710h dd 0B421CB7Eh, 6339A1FEh, 0B7D95DABh, 0C0798C2Ch, 0EEF9987Fh dd 0E7F37738h, 46B9F06Fh, 3067BD6Fh, 7D856CBFh, 5D211548h dd 98CBC268h, 0C7286512h, 0FE6845A0h, 29840988h, 6D4F0C47h dd 4920427Eh, 18DFC372h, 0C685F27Eh, 8C2B2AA9h, 69EC445h dd 452BA0CBh, 7793C940h, 0D8B9B621h, 0CE4AC5CBh, 40A66310h dd 1D9A1DC8h, 0B010BA5Eh, 234F4337h, 0C33EA98Eh, 0EF6275C1h dd 39AE734Dh, 346A266Ah, 236BE88h, 0BE499632h, 0CE3943C3h dd 5485E8B4h, 0E8CE68CDh, 307F60CFh, 186D9374h, 5560F89Dh dd 0D76171B5h, 294AC266h, 3C4B7425h, 94234528h, 120510FBh dd 0B438696Bh, 8C521E9Fh, 507E8778h, 0D168807Dh, 8CE9E197h dd 29786388h, 0F58FA7E3h, 0A43F562h, 7391F96Ch, 0D5FD7C55h dd 79C985C6h, 53940B6Fh, 74BCF3B0h, 70F399F3h, 0CDCA4E92h dd 3B2BDB7Ah, 3D7D241Ch dd 204E4E7Dh, 0DA787831h, 897A547Ah, 0F74CC76Ch, 2A5C7A7Eh dd 0F849392Bh, 0CF078787h, 8D7979F7h, 169FBF5h, 9C52942Ah dd 319F8E42h, 0C69892E3h, 6A359D7h, 8782ED3Ch, 26628787h dd 0FDD84A19h, 0ECE71267h, 0FC41EC87h, 4DF75EDEh, 0DD2465B6h dd 2CA73B1h, 87480A1Dh, 4F678787h, 11021735h, 57191414h dd 5848564Ch, 15171B50h, 110C1908h, 431D141Ah, 87853558h dd 312B8323h, 6D4E583Dh, 16112F71h, 0B0F171Ch, 582C3658h dd 5149564Dh, 0AC73C345h, 78F69C4Ch, 0BC797CACh, 0B7458FCCh dd 0E8D8768Bh, 107C0CF8h, 448BB776h, 307120A7h, 48AC0C44h dd 1CA14FB7h, 685A583Dh, 95784832h, 80463B07h, 0E1B6B38h dd 0D0A560Eh, 0C5CE4E06h, 7F780FCDh, 0EF141C1Dh, 0B91E771Dh dd 8703078Ah, 191D0B1Dh, 76101B0Ah, 1A170A67h, 101B0017h dd 0A31F1619h, 0AAC1C307h, 740C1D67h, 1A561C0Ah, 19780211h dd 0FDA01B50h, 13109C15h, 0C741519h, 5C00557Eh, 0C1C315CBh dd 17147E78h, 134F1A76h, 0C68E853Fh, 7A0E5E15h, 0E0C5602h dd 170C6963h, 0FD165608h, 6FF455F8h, 5F0B7711h, 0F887734Bh dd 7700F515h, 140D1C19h, 331D550Ch, 6A30E11h, 4BF80ACBh dd 0BDE1617h, 1A560C36h, 0A772B805h, 1F11371Fh, 0F00784Ah dd 2307CB19h, 1A125483h, 0E378D51Ah, 191E1902h, 8030FFD0h dd 1D2556CEh, 19D7245Bh, 8E95801Ah, 1D1C1B87h, 11101F1Eh dd 15141312h, 0A09BD16h, 0F0E0D8Fh, 87BE0100h, 1D7628A7h dd 3E3D3C3Bh, 3231303Fh, 36353433h, 2C292837h, 8710BB87h dd 2F2E2D2Ch, 63222120h, 0C0C105Bh, 57574208h, 43E3885Dh dd 57730BC8h, 856EF1Dh, 3470810h, 76CE8306h, 0B5E7745h dd 1C7E161Bh, 1E16115Eh, 517F430Eh, 494505CFh, 0C6B5E41h dd 2093D863h, 188EC383h, 4F4A4945h, 424979D0h, 57484840h dd 0F887A71Dh, 78A794F5h, 4B25A790h, 96C11EB1h, 87A31787h dd 7D0DF579h, 7EF286F3h, 3E7FE144h, 3E48547Eh, 7FF0E14Ch dd 93959A3Fh, 904C578Fh, 6A29072h, 561F1DA7h, 0B1E1EB09h dd 0A7879779h, 0C5856A86h, 7F6E85E9h, 0D2100AB9h, 0D21E853Ah dd 6CC26885h, 62E0D164h, 8F23C987h, 89E08BB1h, 97AFE70h dd 27E868B8h, 21EA4FB3h, 77EB64EEh, 4200CB83h, 92F9C6Ch dd 9427205h, 0C683E53Dh, 89E58B95h, 8971F17Ch, 3869E47Ch dd 85F695CBh, 9B8B1F5Bh, 0A4646888h, 1821CA73h, 45F7B1E3h dd 795D978Eh, 0D97C6CA1h, 0E609B26Fh, 1910F553h, 0EE3E6FCBh dd 9A62D5E9h, 506965EEh, 951715E7h, 78B028CAh, 2FA46CE1h dd 366A5D2Dh, 0A794B8DCh, 6AE995A6h, 8F95E131h, 0BC6C782Ch dd 9B3B242h, 0FFCB6443h, 5C8785A5h, 0B762599Ch, 1EF7B5B5h dd 83CEF954h, 664714E7h, 0FBC0C883h, 256AB5BBh, 65B3B1D0h dd 17E5CA07h, 735CD55Dh, 0EEDE3022h, 0B186B3B8h, 34636C1Ch dd 8B93DF51h, 0A187C2E4h, 6E91CB8Fh, 95E8C4Ch, 8176848Dh dd 51976B43h, 1787133Eh, 274F8F0Eh, 943F1EA6h, 796ED8D0h dd 9587BDCFh, 85919491h, 971977C3h, 549984CFh, 848DB279h dd 848A2284h, 85C7879Dh, 8D848F93h, 0BFAED3D2h, 21D2814Ch dd 52525DCCh, 0EBD4B11Eh, 0C6CFF9E8h, 0E8871F88h, 0B1FB1BE5h dd 48EA09B5h, 294D61C7h, 72EDA16Ch, 8787E90Ah, 9529458h dd 0DDAA93B0h, 99F8AD6Ah, 17D22AE2h, 0E252F56Ch, 3E86A7B0h dd 0F36AC183h, 0BB3F32E2h, 0A3E3D3E6h, 9458DB61h, 87A5DA14h dd 0C58785C7h, 0A7E695FDh, 93F990DAh, 0B06A2D3Ch, 56EE67C5h dd 0A06A93F5h, 6A22E2FDh, 87E271E5h, 22B57371h, 0A8EE8068h dd 71E315Ah, 0FF6A8685h, 0C31716A3h, 0EDBA22D1h, 0FA6AFD7Ah dd 0B322E97Ch, 81C1B78Fh, 0FD07381Fh, 3A352B87h, 0B02B600Ah dd 71B78CC7h, 781A8687h, 0FB3B287Ah, 372F2C3Dh, 9B23952Ah dd 28583387h, 2A3F372Ah, 49583539h, 39346FB5h, 2A7A3536h dd 721AE893h, 0CF6D1ED3h, 0CF23CEEEh, 0C31F137Bh, 4B76080Dh dd 0CE671962h, 355F930Ch, 59204A5Bh, 564A4A4Ah, 1EAB2049h dd 5860AE52h, 22F34A44h, 0DC4BB0B1h, 94637F0Bh, 745AFDA3h dd 7C785B87h, 586C7269h, 0F5A2A67Dh, 11D8AC62h, 2B333478h dd 7CE9282Bh, 0EFCFF007h, 329870FAh, 95806F0Bh, 165C782Fh dd 17781C78h, 420B780Dh, 26A6B00Ch, 71794814h, 4D7841F4h dd 0A4B8145Bh, 7F5665EEh, 4AD3A278h, 70F1B758h, 432FA258h dd 0E734EBFBh, 3E8A787Bh, 0B9E8665Bh, 387F3F7Eh, 0A97E787Eh dd 683E9F87h, 0F26D6779h, 783098F0h, 0F93C7837h, 86638785h dd 8A021261h, 5064319Ch, 0C5D48D7h, 992B1F68h, 6B04FD44h dd 480DA724h, 0D6C57C78h, 7F24CEC1h, 247022C5h, 0A4E4F19h dd 7F5635AFh, 5640784Eh, 4363480Fh, 3115F1E3h, 903B9478h dd 811B4778h, 1C760178h, 7CA470DAh, 1587588Eh, 78876E38h dd 7678A6A6h, 79E76E78h, 71C75E7Ah, 50386A6Bh, 0B9697B61h dd 0F305BB3Eh, 0AB0CA114h, 0C39C5108h, 0E452E3D4h, 0A0655D13h dd 68E715CBh, 637C3076h, 2515B72Ch, 222C6BAFh, 5A211B5Eh dd 0FBB3BF24h, 3DC1874Ch, 787DFF1Dh, 30687B73h, 0BD8787C0h dd 76C068A6h, 50127D73h, 0C9744161h, 0D0E369A8h, 537B878h dd 0A1940799h, 25278D56h, 6493F2F0h, 90E769B1h, 30685344h dd 0CA560418h, 8C74A9EFh, 74D818DBh, 0ED9C44F8h, 74C974D8h dd 4A414386h, 0F074D878h, 78717838h, 0FC037B94h, 787F815Fh dd 37386CEDh, 0C7380804h, 7EB0DD94h, 6B3B7F78h, 0F087BA01h dd 786BFD00h, 91DE23D3h, 6080686Bh, 579C71B7h, 5B768687h dd 0AC2048B9h, 0FC70C638h, 5AB9CF0h, 68C13BAAh, 0C0798796h dd 14E1968h, 0D558748Ah, 0E7077F75h, 778A6D9Dh, 87960A0h dd 77E877FCh, 77FC5D01h, 357877EDh, 7A7E84E6h, 1477FC07h dd 0FCD2A677h, 0D0E278FFh, 71473B17h, 676BB0F4h, 28201611h dd 0B8DEA358h, 780A28B2h, 41793C3Eh, 44FC37B1h, 6A44134Ah dd 37A0D6Dh, 3944FC75h, 0EC64782Bh, 64D78779h, 0BE7E935Ah dd 0B5D2424h, 1B081124h, 0E387810Dh, 94F91E5Ch, 9C877F64h dd 3C1D2B78h, 1F0D1A1Dh, 824F0E11h, 1FFD4D60h, 121C39DFh dd 172C190Dh, 94E1CE9Ch, 6F161D13h, 6A17340Bh, 0C715080Dh dd 192EE7A5h, 391D0D14h, 5008376Fh, 0B5C1B17h, 0F5309220h dd 0E3B784Ch, 1D4B4719h, 9B492ADBh, 80153401h, 8D7D1563h dd 2C27691Dh, 2F01190Ah, 0EDAD55CDh, 493B6F4Dh, 2A2A6219h dd 1055C3E5h, 102C7D17h, 0B2E6C74h, 0DB23130Dh, 503920A3h dd 0DD003D37h, 0F4B151Fh, 3F4D1642h, 6A668B8Dh, 308C10EFh dd 7282C2Ch, 2F4A5844h, 85972ACDh, 75333758h, 0E7337972h dd 12A71E3Ch, 34557AC3h, 42551F7Ch, 600D5D58h, 0B2200322h dd 12C5057h, 0DE155ECDh, 8DBA2CEh, 6DFB1BFEh, 0F6D19657h dd 55BF7A22h, 3AB10AEBh, 0E72EC9F3h, 53783F2Fh, 0DB233FC2h dd 9D1C8E8Ch, 3AB30BB3h, 15F52F83h, 0D11B0E0Bh, 0A2110FB3h dd 892BF30Fh, 6F274A7Bh, 0E2119F0Dh, 7FCD9E56h, 4E4F407Bh dd 0DEC35F0Ch, 4B674C4Dh, 4A7B4B11h, 0AB330D8Ah, 6B414849h dd 0B0404740h, 4F75FB58h, 584D4E7Fh, 4C4A74FBh, 0E8E24A4Bh dd 4849B042h, 81428B00h, 0B4EDD487h, 372BC3A1h, 392F2C3Eh dd 35243D2Ah, 1AB98011h, 170B1703h, 24C724AFh, 0A0A0D3Bh dd 1319C45Ah, 0BA42E6Dh, 0D2A2472h, 0FDCFE716h, 0C5B6F6Eh dd 105CAA17h, 872B5848h dd 631028DBh, 1F439B8Fh, 0A1C0B16h, 65EB0812h, 1D5301CEh dd 292B787Ah, 7E1955FEh, 1476277Eh, 2F4E5E35h, 271E3310h dd 18B9315Bh, 4C3A6450h, 10872C2Dh, 6B73B84Fh, 263B582Bh dd 0AD0E581Fh, 83EDCFCBh, 0F8200E43h, 0B05BCD4Ah, 41DC826h dd 843F6263h, 5B21161Eh, 1EB6A6Fh, 4E4C130Bh, 3A780806h dd 19C7581Bh, 0CFCDCE5Bh, 15636B20h, 0A5EF2A58h, 0CCCE4F0Ah dd 983C7B78h, 571E7658h, 96035DC8h, 52D4151Fh, 231B5C1Bh dd 5AC7A29Ch, 58010C11h, 66161935h, 0D449C062h, 0C586D79h dd 5252D6F1h, 85EAC3BCh, 947940F4h, 1D1D0A3Eh, 0A3887E74h dd 3F75815Bh, 17350C1Dh, 0EFF227FFh, 133E1D9Ah, 10151936h dd 0C0B1479h, 0B8629703h, 72ED1B0Ah, 108173Bh, 8DC7261h dd 3DD9F917h, 364A1D00h, 42A878Eh, 1417172Ch, 4A4B081Fh dd 819162Bh, 0C17100Bh, 35D5A561h, 4A6AE4F2h, 2C770B0Ah dd 6CD50B7Dh, 60544DF7h, 0F8837DCEh, 1D3659h, 3919110Ch dd 5927852Ch, 770E3D66h, 0C111913h, 2B0A173Eh, 0CE8EC259h dd 37031F44h, 540E121Ah, 0A1C1993Ch, 0F55A22BBh, 4273110Ah dd 0C7C594EFh, 301D0BB0h, 741C1619h, 0BA265C3Fh, 70CEBBC5h dd 2219AA16h, 0CDB5CB88h, 0DB3CEF69h, 6C011C2Eh, 0CEA70DC3h dd 5319E034h, 171E1631h, 1D712B77h, 4FF87E08h, 0E4311A60h dd 1C1D135Eh, 1CA1F03Dh, 16CB50CBh, 0EA9F834Eh, 6A98A8B5h dd 1C1C3973h, 8FCB770Ah, 34736965h, 190A1A11h, 9EF2CD1Fh dd 355318A2h, 4E6B04FAh, 0ADB37073h, 0BB1BB7F6h, 2C033AA2h dd 0DF0F911h, 316DA61Dh, 9135F2A0h, 63A24C00h, 75AAE34Eh dd 8A41BC25h, 37691E68h, 3D221Ah, 0CB1955CEh, 1B72A749h dd 0E3E6156Bh, 2A55BE98h, 70032163h, 6F1EB898h, 401D02FEh dd 0DB1834DFh, 3D6DFDCDh, 0A918BB84h, 4B0DE7E5h, 0D91F4253h dd 3D011D33h, 0B6389443h, 77B9FE68h, 26B87229h, 698E22BAh dd 21FF48E6h, 599F3A14h, 0FC649868h, 7429030Eh, 0C6161A39h dd 7653102Bh, 497C50DDh, 62B947FEh, 4E0FA1FDh, 1AC368F1h dd 3C7205CEh, 0A76196Ah, 0AE631E11h, 0B201CE42h, 530DF71Fh dd 1917144Eh, 17B63B17h, 17695401h, 1F085B28h, 76F72A68h dd 408E47E8h, 396CCCA8h, 110D091Bh, 0CD6080Ah, 4D3135A0h dd 0BB4E42D8h, 0A66B21DFh, 0B20A0B94h, 60C9157Eh, 4DCAA9B6h dd 6D77EA76h, 2B13E1A2h, 3C276535h, 0C72BD20h, 102747C0h dd 4E5F818Eh, 7AB43EA3h, 370A017Fh, 0F0796891h, 0E918D56Dh dd 79B4555Ah, 5F65B54Ch, 196D761Dh, 6C4E54BAh, 0C3CC9F72h dd 317E966Dh, 80B0F1Eh, 391EC97Dh, 0E41AFB37h, 7C5C8C1Eh dd 0A3191422h, 0E32DFD3Bh, 4F766939h, 1F7D5954h, 63FE136Ch dd 167B7EDEh, 0C2B3B31h, 0F4ED76F9h, 753F621Dh, 0D095CAB3h dd 7A0B87D9h, 5479757Ah, 4154CAB3h, 746F4C17h, 0CAB354CAh dd 686B7C71h, 373DD26Eh, 3D284ED2h, 9C87CE76h, 21B0EECFh dd 987838A0h, 73797778h, 5E747E79h, 107964CAh, 5B4CA46Ah dd 0BEDB5D68h, 73493A76h, 0CF4B327Ah, 747FE3DCh, 414C6618h dd 68C84E33h, 552F7E7Fh, 1A68F825h, 41C71F4h, 0C8D6493Dh dd 12566679h, 0CE75F9F8h, 5EE85CDEh, 4031CBCh, 987CE7E8h dd 83991C56h, 0A023D96Ch, 5F527F4Fh, 7830B86Eh, 0F93B3398h dd 782CBB57h, 2 dup(78787878h), 787887E8h, 97787878h, 66F3710Dh dd 698496FBh, 499C0BA3h, 7B90FBB1h, 98B9750Ah, 3E7EF270h dd 0C8788FBh, 79BDF10Ch, 0F37F0DA3h, 8496FB66h, 0B169A369h dd 7F0DA379h, 96FB66F3h, 69A36984h, 39580DB1h, 7F0DA379h dd 96FB66F3h, 69A36984h, 0BA379B1h, 0F3710D97h, 8496FB66h dd 9C0BA369h, 0F97AB9FBh, 878B7885h, 79A9FB87h, 0FB576CF5h dd 770E8485h, 0F03A7AF2h, 0D313F7Fh, 871B918Fh, 0F3E88787h dd 7CBAFB7Ah, 0BFFB7FF1h, 7C91FB7Ch, 0B779890Fh, 87873491h dd 8FF12687h, 787806C1h, 3F7FF278h, 79449054h, 47F88F0Fh dd 0F38A0D79h, 7C27F27Fh, 7090B91Eh, 0FE68B8B9h, 0F88051BCh dd 88799093h, 0BFFB7FF1h, 9AA0F17Dh, 78C6F5A1h, 0F3787828h dd 0CB8717Fh, 7C27F33Dh, 7848FCF5h, 79787808h, 0BFFB288Bh dd 0F4EE8770h, 0ED787808h, 703F7FF2h, 0F1A40CB8h, 777F0181h dd 283F7FCFh, 302FC13Fh, 872DD68Ah, 7808E8EEh, 0CB87178h dd 0FB7BF17Fh, 0A0937CBBh, 8ECEE87h, 91197878h, 8787DE5Fh dd 3Ch dup(78787878h), 787878h, 2 dup(0) dd 0C4000000h, 8C000080h, 80h, 2 dup(0) dd 0D1000000h, 9C000080h, 80h, 2 dup(0) dd 0DE000000h, 0A4000080h, 80h, 82h dup(0) UPX1 ends ; Section 3. (virtual address 00008000) ; Virtual size : 00002000 ( 8192.) ; Section size in file : 00002000 ( 8192.) ; Offset to raw data for section: 00008000 ; Flags E0000060: Text Data Executable Readable Writable ; Alignment : default ; =========================================================================== ; Segment type: Pure code ; Segment permissions: Read/Write/Execute UPX2 segment para public 'CODE' use32 assume cs:UPX2 ;org 31428000h assume es:nothing, ss:nothing, ds:UPX0, fs:nothing, gs:nothing dd 0E9000000h, 0AC000080h, 80h, 2 dup(0) dd 0F4000000h, 0B4000080h, 80h, 3 dup(0) dd 0BC000081h, 80h, 4 dup(0) dd 0A000000h, 18000081h, 28000081h, 78000081h, 78787878h dd 1878C618h, 0C6F5493Ah, 8787C878h, 87B5FB2Fh, 0E8E86893h dd 0E8E8E8E8h, 0F03E7EF2h, 0A3793F7Fh, 66F37F0Dh, 698496FBh dd 0C0950AA3h, 78787879h, 7F0DA379h, 96FB66F3h, 69A36984h dd 0BA379B8h, 0F3710D97h, 8496FB66h, 9C0BA369h, 90FBB149h dd 0B9750A7Bh, 7EF27098h, 8788FB3Eh, 0BDF10C0Ch, 7F0DA379h dd 96FB66F3h, 69A36984h, 0DA379B1h, 0FB66F37Fh, 0A3698496h dd 580DB169h, 0DA37939h, 0FB66F37Fh, 0A3698496h, 0A379B169h dd 710D970Bh, 96FB66F3h, 0BA36984h, 7AB9FB9Ch, 8B7885F9h dd 0A9FB8787h, 576CF579h, 0E8485FBh, 3A7AF277h, 313F7FF0h dd 1B918F0Dh, 0E8878787h, 0BAFB7AF3h, 0FB7FF17Ch, 91FB7CBFh dd 79890F7Ch, 873491B7h, 0F1268787h, 7806C18Fh, 7FF27878h dd 4490543Fh, 0F88F0F79h, 8A0D7947h, 27F27FF3h, 90B91E7Ch dd 68B8B970h, 8051BCFEh, 799093F8h, 0FB7FF188h, 0A0F17DBFh dd 0C6F5A19Ah, 78782878h, 0B8717FF3h, 27F33D0Ch, 48FCF57Ch dd 78780878h, 0FB288B79h, 0EE8770BFh, 787808F4h, 3F7FF2EDh dd 0A40CB870h, 7F0181F1h, 3F7FCF77h, 2FC13F28h, 2DD68A30h dd 8E8EE87h, 0B8717878h, 7BF17F0Ch, 937CBBFBh, 0ECEE87A0h dd 19787808h, 87DE5F91h, 78787887h, 12h dup(78787878h) ; --------------------------------------------------------------------------- public start start: js short loc_3142827A js short loc_3142827C js short loc_3142827E js short loc_31428280 js short loc_31428282 js short loc_31428284 js short loc_31428286 js short loc_31428288 js short loc_3142828A js short loc_3142828C js short loc_3142828E js short loc_31428290 js short loc_31428292 js short loc_31428294 js short loc_31428296 js short loc_31428298 js short loc_3142829A js short loc_3142829C js short loc_3142829E js short loc_314282A0 js short loc_314282A2 js short loc_314282A4 js short loc_314282A6 js short near ptr byte_314282A8 js short near ptr word_314282AA js short near ptr byte_314282AC js short near ptr word_314282AE js short near ptr byte_314282B0 js short near ptr word_314282B2 js short loc_314282B4 js short near ptr loc_314282B4+2 js short near ptr loc_314282B4+4 js short near ptr word_314282BA js short near ptr byte_314282BC js short near ptr word_314282BE js short near ptr byte_314282C0 js short near ptr word_314282C2 js short near ptr byte_314282C4 js short near ptr word_314282C6 js short loc_314282C8 js short near ptr loc_314282C8+2 js short near ptr loc_314282C8+4 js short near ptr word_314282CE js short near ptr byte_314282D0 js short near ptr word_314282D2 js short near ptr byte_314282D4 js short near ptr word_314282D6 js short near ptr byte_314282D8 js short near ptr word_314282DA js short loc_314282DC js short near ptr loc_314282DC+2 js short near ptr loc_314282DC+4 js short near ptr word_314282E2 js short near ptr byte_314282E4 js short near ptr word_314282E6 js short near ptr byte_314282E8 js short near ptr word_314282EA js short near ptr byte_314282EC js short near ptr word_314282EE js short loc_314282F0 js short near ptr loc_314282F0+2 loc_3142827A: ; CODE XREF: UPX2:startj js short near ptr loc_314282F0+4 loc_3142827C: ; CODE XREF: UPX2:31428202j js short near ptr word_314282F6 loc_3142827E: ; CODE XREF: UPX2:31428204j js short near ptr byte_314282F8 loc_31428280: ; CODE XREF: UPX2:31428206j js short near ptr word_314282FA loc_31428282: ; CODE XREF: UPX2:31428208j js short near ptr byte_314282FC loc_31428284: ; CODE XREF: UPX2:3142820Aj js short near ptr word_314282FE loc_31428286: ; CODE XREF: UPX2:3142820Cj js short near ptr byte_31428300 loc_31428288: ; CODE XREF: UPX2:3142820Ej js short near ptr word_31428302 loc_3142828A: ; CODE XREF: UPX2:31428210j js short loc_31428304 loc_3142828C: ; CODE XREF: UPX2:31428212j js short near ptr loc_31428305+1 loc_3142828E: ; CODE XREF: UPX2:31428214j js short loc_31428308 loc_31428290: ; CODE XREF: UPX2:31428216j js short near ptr word_3142830A loc_31428292: ; CODE XREF: UPX2:31428218j js short near ptr byte_3142830C loc_31428294: ; CODE XREF: UPX2:3142821Aj js short near ptr word_3142830E loc_31428296: ; CODE XREF: UPX2:3142821Cj js short near ptr byte_31428310 loc_31428298: ; CODE XREF: UPX2:3142821Ej js short near ptr word_31428312 loc_3142829A: ; CODE XREF: UPX2:31428220j js short near ptr byte_31428314 loc_3142829C: ; CODE XREF: UPX2:31428222j js short near ptr word_31428316 loc_3142829E: ; CODE XREF: UPX2:31428224j js short loc_31428318 loc_314282A0: ; CODE XREF: UPX2:31428226j js short near ptr loc_31428318+2 loc_314282A2: ; CODE XREF: UPX2:31428228j js short near ptr loc_31428318+4 loc_314282A4: ; CODE XREF: UPX2:3142822Aj js short near ptr word_3142831E loc_314282A6: ; CODE XREF: UPX2:3142822Cj js short near ptr dword_31428320 ; --------------------------------------------------------------------------- byte_314282A8 db 2 dup(0) ; CODE XREF: UPX2:3142822Ej word_314282AA dw 0 ; CODE XREF: UPX2:31428230j byte_314282AC db 2 dup(0) ; CODE XREF: UPX2:31428232j word_314282AE dw 0 ; CODE XREF: UPX2:31428234j byte_314282B0 db 2 dup(0) ; CODE XREF: UPX2:31428236j word_314282B2 dw 0 ; CODE XREF: UPX2:31428238j ; --------------------------------------------------------------------------- loc_314282B4: ; CODE XREF: UPX2:3142823Aj ; UPX2:3142823Cj ... les eax, [eax-7F740000h] ; --------------------------------------------------------------------------- word_314282BA dw 0 ; CODE XREF: UPX2:31428240j byte_314282BC db 2 dup(0) ; CODE XREF: UPX2:31428242j word_314282BE dw 0 ; CODE XREF: UPX2:31428244j byte_314282C0 db 2 dup(0) ; CODE XREF: UPX2:31428246j word_314282C2 dw 0 ; CODE XREF: UPX2:31428248j byte_314282C4 db 2 dup(0) ; CODE XREF: UPX2:3142824Aj word_314282C6 dw 0 ; CODE XREF: UPX2:3142824Cj ; --------------------------------------------------------------------------- loc_314282C8: ; CODE XREF: UPX2:3142824Ej ; UPX2:31428250j ... rol dword ptr [eax-7F640000h], 1 ; --------------------------------------------------------------------------- word_314282CE dw 0 ; CODE XREF: UPX2:31428254j byte_314282D0 db 2 dup(0) ; CODE XREF: UPX2:31428256j word_314282D2 dw 0 ; CODE XREF: UPX2:31428258j byte_314282D4 db 2 dup(0) ; CODE XREF: UPX2:3142825Aj word_314282D6 dw 0 ; CODE XREF: UPX2:3142825Cj byte_314282D8 db 2 dup(0) ; CODE XREF: UPX2:3142825Ej word_314282DA dw 0 ; CODE XREF: UPX2:31428260j ; --------------------------------------------------------------------------- loc_314282DC: ; CODE XREF: UPX2:31428262j ; UPX2:31428264j ... fiadd word ptr [eax-7F5C0000h] ; --------------------------------------------------------------------------- word_314282E2 dw 0 ; CODE XREF: UPX2:31428268j byte_314282E4 db 2 dup(0) ; CODE XREF: UPX2:3142826Aj word_314282E6 dw 0 ; CODE XREF: UPX2:3142826Cj byte_314282E8 db 2 dup(0) ; CODE XREF: UPX2:3142826Ej word_314282EA dw 0 ; CODE XREF: UPX2:31428270j byte_314282EC db 2 dup(0) ; CODE XREF: UPX2:31428272j word_314282EE dw 0 ; CODE XREF: UPX2:31428274j ; --------------------------------------------------------------------------- loc_314282F0: ; CODE XREF: UPX2:31428276j ; UPX2:31428278j ... jmp near ptr 0DD428375h ; --------------------------------------------------------------------------- db 80h word_314282F6 dw 0 ; CODE XREF: UPX2:loc_3142827Cj byte_314282F8 db 2 dup(0) ; CODE XREF: UPX2:loc_3142827Ej word_314282FA dw 0 ; CODE XREF: UPX2:loc_31428280j byte_314282FC db 2 dup(0) ; CODE XREF: UPX2:loc_31428282j word_314282FE dw 0 ; CODE XREF: UPX2:loc_31428284j byte_31428300 db 2 dup(0) ; CODE XREF: UPX2:loc_31428286j word_31428302 dw 0 ; CODE XREF: UPX2:loc_31428288j ; --------------------------------------------------------------------------- loc_31428304: ; CODE XREF: UPX2:loc_3142828Aj hlt ; --------------------------------------------------------------------------- loc_31428305: ; CODE XREF: UPX2:loc_3142828Cj add byte ptr [eax], 0 loc_31428308: ; CODE XREF: UPX2:loc_3142828Ej mov ah, 80h ; --------------------------------------------------------------------------- word_3142830A dw 0 ; CODE XREF: UPX2:loc_31428290j byte_3142830C db 2 dup(0) ; CODE XREF: UPX2:loc_31428292j word_3142830E dw 0 ; CODE XREF: UPX2:loc_31428294j byte_31428310 db 2 dup(0) ; CODE XREF: UPX2:loc_31428296j word_31428312 dw 0 ; CODE XREF: UPX2:loc_31428298j byte_31428314 db 2 dup(0) ; CODE XREF: UPX2:loc_3142829Aj word_31428316 dw 0 ; CODE XREF: UPX2:loc_3142829Cj ; --------------------------------------------------------------------------- loc_31428318: ; CODE XREF: UPX2:loc_3142829Ej ; UPX2:loc_314282A0j ... add [ecx-7F440000h], al ; --------------------------------------------------------------------------- word_3142831E dw 0 ; CODE XREF: UPX2:loc_314282A4j dword_31428320 dd 5 dup(0) ; CODE XREF: UPX2:loc_314282A6j dd 810Ah, 8118h, 8128h, 0 dd 8136h, 0 dd 8144h, 0 dd 814Ah, 0 dd 8156h, 0 dd 80000003h, 0 dd 4E52454Bh, 32334C45h, 4C4C442Eh, 56444100h, 33495041h dd 6C642E32h, 534D006Ch, 54524356h, 6C6C642Eh, 45535500h dd 2E323352h, 6C6C64h, 494E4957h, 2E54454Eh, 6C6C64h, 5F325357h dd 642E3233h, 6C6Ch, 64616F4Ch, 7262694Ch, 41797261h, 65470000h dd 6F725074h, 64644163h, 73736572h, 78450000h, 72507469h dd 7365636Fh, 73h, 43676552h, 65736F6Ch, 79654Bh, 61720000h dd 646Eh, 72707377h, 66746E69h, 41h, 700h dup(0) UPX2 ends ; Section 4. (virtual address 0000A000) ; Virtual size : 00001000 ( 4096.) ; Section size in file : 00000200 ( 512.) ; Offset to raw data for section: 0000A000 ; Flags C0000040: Data Readable Writable ; Alignment : default ; =========================================================================== ; Segment type: Pure data ; Segment permissions: Read/Write _idata2 segment para public 'DATA' use32 assume cs:_idata2 ;org 3142A000h dd 80h dup(0) align 1000h _idata2 ends end start