; ; +-------------------------------------------------------------------------+ ; | This file is generated by The Interactive Disassembler (IDA) | ; | Copyright (c) 2007 by DataRescue sa/nv, <ida@datarescue.com> | ; | Licensed to: SRI, 1 computer, std, 05/2007 | ; +-------------------------------------------------------------------------+ ; ; ; +-------------------------------------------------------------------------+ ; | This file is generated by The Interactive Disassembler (IDA) | ; | Copyright (c) 2007 by DataRescue sa/nv, <ida@datarescue.com> | ; | Licensed to: SRI, 1 computer, std, 05/2007 | ; +-------------------------------------------------------------------------+ ; ; Input MD5 : 507C93BAF08F51CBF5C653EDF5876F24 ; File Name : u:\work\507c93baf08f51cbf5c653edf5876f24_unpacked.exe ; Format : Portable executable for 80386 (PE) ; Imagebase : 31420000 ; Section 1. (virtual address 00001000) ; Virtual size : 00005000 ( 20480.) ; Section size in file : 00005000 ( 20480.) ; Offset to raw data for section: 00001000 ; Flags E0000080: Bss Executable Readable Writable ; Alignment : default .686p .mmx .model flat ; =========================================================================== ; Segment type: Pure code ; Segment permissions: Read/Write/Execute UPX0 segment para public 'CODE' use32 assume cs:UPX0 ;org 31421000h assume es:nothing, ss:nothing, ds:UPX0, fs:nothing, gs:nothing dd 1400h dup(0) UPX0 ends ; Section 2. (virtual address 00006000) ; Virtual size : 00002000 ( 8192.) ; Section size in file : 00002000 ( 8192.) ; Offset to raw data for section: 00006000 ; Flags E0000060: Text Data Executable Readable Writable ; Alignment : default ; =========================================================================== ; Segment type: Pure code ; Segment permissions: Read/Write/Execute UPX1 segment para public 'CODE' use32 assume cs:UPX1 ;org 31426000h assume es:nothing, ss:nothing, ds:UPX0, fs:nothing, gs:nothing dd 0E8D2FE1Fh, 87778778h, 0BE817BB1h, 26493A6Dh, 94F32D5Dh dd 796894F9h, 17958305h, 4B2E2B70h, 782E2F8Eh, 84107912h dd 6D876339h, 0A7A36950h, 0F37DC7CEh, 0DA643A0h, 58916A7Fh dd 0FDF5257Ah, 10448688h, 0C2A4A3E0h, 6628547Ch, 0F04568F4h dd 0B70D6F7Dh, 4D804F4Eh, 1275AF6Fh, 5FC5A7Eh, 64838A8Eh dd 284D7DFCh, 21177790h, 88102164h, 0E3D518C2h, 7B7A1553h dd 0C338F447h, 4C91C7A3h, 8780FBF8h, 0D843DF1h, 5893657Ch dd 15872EEAh, 0D95E317h, 5CE82B70h, 7060BE43h, 8468760Dh dd 0CB06A695h, 7B120451h, 0C7299320h, 2F786841h, 4BD96419h dd 0C8D583E3h, 28803D1Bh, 494A2B2Fh, 4B4A764Ch, 2E8C0E8Eh dd 2B800D2Eh, 8744004Bh, 0D2204E43h, 2BE7E47Dh, 0BCFBCD38h dd 87B84B74h, 27878027h, 0BBB12326h, 705C34F3h, 7C5C3CF3h dd 0B7FB2F60h, 77123887h, 537909F5h, 8787A381h, 68F22187h dd 7B8720F2h, 0B9A17AA9h, 9AF87C82h, 5C2C527Bh, 7A9BB860h dd 0DDF0AB72h, 0C38323F2h, 0F2792885h, 62B28660h, 0FB6EA95Ah dd 5B617BB8h, 87C2639Bh, 6E6488C3h, 6CF53E3Eh, 4882FB4Fh dd 0BB24C704h, 1794FB0Dh, 40C057C3h, 0C6215F21h, 5F23A34h dd 0DD8B729Ch, 5B97871Eh, 77DCDDA3h, 25F3B048h, 0A3FD6874h dd 0FB7B05DCh, 9D8762BBh, 0C67795A0h, 704DF605h, 0AE2F9CA9h dd 21B8FD21h, 1CF56B0Ch, 35CF8783h, 0B9536240h, 0E1BB7B21h dd 3CF2818Fh, 5B939C6Dh, 453B067h, 0B0B0763Ah, 39F27B93h dd 8785C698h, 3DF3FCA7h, 0DF32E74h, 78F22F68h, 340CB8FCh dd 542B19F3h, 1017877Ah, 0F26BA780h, 8FBEF3A0h, 7025F0A0h dd 7B6E7040h, 0CE7FF06Ah, 21871717h, 1983F83Fh, 7D730421h dd 0F47E0702h, 1996FB8Bh, 9F8E3972h, 2277817Eh, 0D303539h dd 0BA1C23C3h, 33C3CF73h, 1F785FF8h, 4B36BB25h, 0A376F3B1h dd 7C879915h, 696CCE77h, 0FB39BA7Bh, 0EA887B81h, 0F3F621E1h dd 0FDC66E96h, 0FE195ABAh, 0A0F88512h, 1454A810h, 7CA407C4h dd 28EED91Ch, 7F5DF11Ch, 0F881CE3h, 0BF2FF7FEh, 73D3A0FDh dd 841DFB78h, 0C3101078h, 5BB961C7h, 21217C9Ah, 0C5F180F3h dd 87FD67A8h, 9694A34Ch, 5C4AFC77h, 687CBFFBh, 0F72F5B76h dd 0F31E4E4Fh, 28219C42h, 0A796F677h, 0F8978387h, 0F23478DFh dd 0E0FDF07Fh, 0FBA0C65Fh, 0E5F11993h, 0E6F073ACh, 97C66F0Dh dd 0F50A831Eh, 313F709Eh, 44CF0612h, 703D9347h, 0CDF18815h dd 3CBC8EB4h, 0B34EA0A0h, 5EF8E87Eh, 9C2C2FD1h, 0B9940327h dd 0F2EF7B97h, 3E7EF06Eh, 0FA4B3A57h, 87C20685h, 3EF5E465h dd 0CE7A5979h, 0A7911B77h, 2865580h, 0D7E4064h, 723C120Eh dd 0B1FE438h, 61A49464h, 76EC537Fh, 14A1C8F4h, 394812A0h dd 0C675A01Eh, 4BA074C9h, 0D7860EEh, 0A1C54163h, 4F89B4E6h dd 0E479EE7Fh, 0FA0A921h, 55E077DDh, 35FB2102h, 0BA7D716Ch dd 88CBF4F3h, 35F31070h, 5275F988h, 3BFDB0C1h, 7890F2DCh dd 68B5D6E6h, 71157FD1h, 0E329603Ch, 12A314D5h, 6F7FE11Bh dd 4BE8E87Ch, 0A1C2C7A3h, 0CC540F5h, 4EE644Ah, 0F6944D0Eh dd 37FE99C8h, 287C4DCCh, 0C736B891h, 25C10410h, 0BCBF61A1h dd 93866964h, 8F0D6B60h, 1055E6B8h, 2B746108h, 38341078h dd 0FF72AE0Ch, 77882BEFh, 0F5A32B50h, 6294D3AFh, 288480D3h dd 0FDDE58FCh, 2B2E56EBh, 74892E83h, 2ABA55A3h, 2E667C9Ch dd 65C75446h, 0CE41F30Fh, 0D5AE4BAEh, 0E06533A3h, 17122FCAh dd 0C787AF4Dh, 0D1BA1859h, 7C7C054h, 444C6819h, 0FCF2470Ch dd 0FE38F8CEh, 7FF9CECCh, 478E8303h, 0BF73BB67h, 0F81C4D21h dd 98B9211Bh, 504DFD7Bh, 0D7A5727Ah, 0D11E0E89h, 126A0DFEh dd 0AB87A2EDh, 0F0859470h, 0DA37E514h, 8A7B9384h, 87CF86CEh dd 0AA4B1C2Dh, 1BEB98C1h, 0BAF9898Fh, 787E6330h, 0D5EC972Ah dd 86077B15h, 1BF00A6Eh, 24F4DF7Eh, 9098560Dh, 4CD02ECEh dd 2572F6Dh, 0B3CD2F2Fh, 0F4D69EC2h, 7D747027h, 133A9472h dd 0F5668F17h, 0A469083Bh, 937B5C5Ch, 4B15E157h, 63C04034h dd 38865CB8h, 0C31F1F38h, 6031A2ACh, 0F17C0E5Ch, 73466554h dd 0E74EE573h, 0AA26B848h, 4C12AEC3h, 76EA7083h, 7B103F41h dd 0B9E19A2h, 1B6458ADh, 0F5FF2645h, 7A66CDCCh, 60581374h dd 131DE97Ah, 61932796h, 60642F00h, 85F48C6Ch, 35775CFBh dd 7579F164h, 4774BF50h, 1E86969Bh, 48F19CC0h, 34FCD994h dd 0A8D5EBC4h, 5927AD90h, 0B0F076E3h, 7ACD567Dh, 8C052A73h dd 63692084h, 0C011DD07h, 6512D87Dh, 0CF249D2Eh, 69E7CE1Fh dd 2228EC3Dh, 0CC7B71E4h, 7ECC1610h, 5C3400BEh, 86B56A1Fh dd 27CE4E6Dh, 0CC752CF2h, 71F86EF0h, 0B7E17E39h, 501717BEh dd 18129604h, 3FE0642Dh, 8F4991DCh, 7046A6F2h, 4698A9A0h dd 0C40BC5B4h, 6687348Bh, 711259F5h, 97199710h, 2149FE76h dd 58333DFCh, 95C2B247h, 2F627C07h, 3DF098A8h, 39836883h dd 1EEA5867h, 98A88621h, 822F717Ch, 9E1F3182h, 5110032Ah dd 0A0479976h, 10AA1A98h, 12A3CB17h, 2BA45C68h, 1E3CF973h dd 1EFD75BFh, 1027A50Bh, 189CD1C5h, 1773611Eh, 0A42F0DD8h dd 0F184E05Eh, 1C49980Dh, 5E6F50A1h, 4F7B9256h, 0BBFF38ECh dd 0DFB0C7CCh, 4310A098h, 2D99E3FBh, 3DF83B04h, 0ED60AB80h dd 7FFED617h, 10874B35h, 9E657E38h, 3E3195E8h, 0D0B8E014h dd 6385636h, 1C3E744Bh, 7A61E3A6h, 7048C001h, 0F925883Eh dd 5FF4779Eh, 495E19F8h, 79BDFD77h, 44C5A1D6h, 7FA870A7h dd 88C44478h, 0B4C82EE8h, 7469700Eh, 0B38C3A27h, 248F4459h dd 0CB696789h, 0FA9C9474h, 726B7A33h, 0D8800016h, 0D94649BDh dd 0F15D33C6h, 0A33BD2FDh, 0D68808D8h, 0EADA7C05h, 36B87744h dd 7A039064h, 0FC7A8A12h, 3F840563h, 887A3261h, 0D84B9C7Ah dd 7A6E3010h, 0AACF4DAFh, 0DF45057Bh, 0EE71079h, 4E9EB49Eh dd 4232581Ch, 6322CFB4h, 0A4FFCF4Ch, 120EFC98h, 0EE8C5208h dd 9EB09BF4h, 26B018F8h, 2EF1C72h, 5F46635Dh, 0DA5078FCh dd 4E337847h, 44A1C113h, 0E0C1CA14h, 9C0FC59Ah, 0A4791F2Ch dd 49062877h, 0BF0FBB9Ch, 0D4104375h, 0AB50B875h, 0C940B6A4h dd 9D1770B1h, 0A374027Ch, 0AA303D5Ah, 0A555BD80h, 0AE635957h dd 3856A364h, 7E086AA6h, 34E84194h, 38C4803Ch, 0BA09E8AEh dd 63A6283Ch, 21436668h, 0ECCF4B17h, 0F959EF75h, 1F91D481h dd 90048693h, 6E5CDDF8h, 105D7E78h, 5DE5642Ah, 648A237Fh dd 0EE8C6A0Eh, 0F1E591BBh, 0EC72971Dh, 3B00412h, 1CC99BBBh dd 0B1C63174h, 0E165A103h, 0E8992C9Ch, 0F4E7915Ch, 0A4B4BB31h dd 0B7005C56h, 54FA3095h, 801C7D54h, 1E8C6D74h, 4B61D87Ah dd 7008025Bh, 0F7F1260Ch, 8CBEA576h, 6429B427h, 0F8CB97E4h dd 75C9CD9h, 7DDC4DD0h, 0CDA80063h, 2F6AFA80h, 220C2F4Fh dd 72B38149h, 0C80766Ch, 71D81033h, 0B250CF2Bh, 55450CB6h dd 1F95FDB1h, 0D8395811h, 77842D87h, 4DC2C190h, 289CE6AFh dd 76EE50D4h, 23487A88h, 2D3FC735h, 0F4787180h, 106DFB9Ch dd 8C0D2043h, 60FF963Ah, 0FD6B59BDh, 0D17228F3h, 0C78F07CEh dd 4439F357h, 10B97B2Fh, 30F33554h, 2800F34Ch, 0D88C35F1h dd 967E52CCh, 6410A033h, 25EFA063h, 888D21D2h, 7010AA79h dd 0B9F5946Ah, 950CBBC9h, 6968AF75h, 8C1776FAh, 6C71CA12h dd 8035895Bh, 0E90E5429h, 606028FDh, 0F15210EFh, 142CD891h dd 0B23825C8h, 3EB8957Bh dd 934C131Bh, 0E2D36148h, 2116AD00h, 7B05882Dh, 0D31F3D9Eh dd 8846A533h, 2B284929h, 7198D466h, 8C4DBC8Fh, 6F82AEC5h dd 47921512h, 2D0FA889h, 0CBF4394h, 6393207Dh, 229D066Fh dd 5D4CF4C7h, 7D847621h, 4E9F4C27h, 0C707F93h, 99842097h dd 272A66FEh, 18572929h, 0CA114977h, 24E9D93Ch, 0C2C05D75h dd 0A558A33Ah, 0CA6BC9D7h, 694BD694h, 55217793h, 0CE1281BAh dd 0E195BCC9h, 74F844C4h, 6C28D028h, 55F0CAEh, 25B85428h dd 3C218461h, 3B0458C2h, 5C04F32Fh, 0DDBDFB6Ch, 669AA22h dd 1C62FF6Fh, 0F847878Dh, 6CF019BAh, 8F433E66h, 5CF89104h dd 0BEF47843h, 2CADAEA3h, 27563CF3h, 2E2FD422h, 486065A3h dd 57591E0Ch, 0F0EEA40Bh, 28885695h, 782E2861h, 7BBBD4D2h dd 0ED0F994Ch, 318C35BCh, 0F71316F4h, 88748210h, 0B170BF87h dd 4CE311EEh, 5652B44Ch, 0E1D50B34h, 72720D95h, 6258C428h dd 466E7960h, 7FBE2CD9h, 794307C0h, 0D589B60Ch, 0F3743805h dd 29707978h, 275C3CF5h, 0E3194C59h, 0AB6948BDh, 0C5C217Bh dd 7F803690h, 7FC3B46Dh, 1E57B058h, 4B4BBF83h, 0B980B09Ch dd 73FD689Fh, 3E01C8ACh, 0F37A78CEh, 784B6A25h, 8B085E3Fh dd 79E5BA79h, 2BBC92B1h, 0DB699BBEh, 8ACD034Dh, 0BB5D284Dh dd 5ECEE5FBh, 0D59F30F8h, 381E14CDh, 39886FE6h, 0C3104DEDh dd 0E0B69B49h, 0CF141045h, 3F37883Ch, 61C91814h, 0DD352C86h dd 54BDAB6Ch, 42CA2A4h, 84758678h, 4BD94CC2h, 530178C1h dd 0AB943BFh, 0AB9F37Ah, 9993CF17h, 90D95153h, 5BBF7B60h dd 865DDBD4h, 5B45B4EEh, 12690Ah, 0A2493880h, 0BC934450h dd 0F28996Bh, 148E375Eh, 0EC66AC69h, 0B544106Dh, 7396351Ah dd 0EF40107Bh, 0E51E4644h, 2C2B42CDh, 0A8FB2A2Bh, 0F43F98C9h dd 7CBAE05Ch, 6B15FA5Bh, 761C48E0h, 90A8C98Fh, 70BB6EACh dd 0C3963651h, 0F12F3B0Fh, 0F810107Eh, 5FFC65F1h, 25370660h dd 6C9415DAh, 788AACB8h, 0B94C2BE9h, 7A031314h, 0F8934279h dd 0E2AC109Eh, 6235850Fh, 0CB324E00h, 0A4B5570Ch, 1F0226DBh dd 0DB1D740Dh, 2B84DC86h, 62A1AA29h, 42FE2E6Bh, 0A44610A0h dd 5E2EA0F4h, 20612681h, 80A2126Ah, 267D68BAh, 97332EB8h dd 741EEFDCh, 9425F190h, 0A7877D75h, 5D958F18h, 427C6787h dd 3B84DBBBh, 0F2679F0Ch, 27B1FCB4h, 0C9031C5h, 921328A7h dd 1C38273Ah, 0DD61FDC2h, 3C741C1Dh, 5391D7DBh, 6C802703h dd 0E63067A0h, 82B6D594h, 6D580610h, 9A931A36h, 24B9B72Bh dd 3D27993Ah, 0D479E83Bh, 81E6503h, 0C84B44D6h, 0AB7F69AEh dd 7A46A33Bh, 0F842AE9Eh, 0E3757281h, 0D3C810CCh, 0C981BDBh dd 0FA5379A0h, 8CDB0304h, 0FE71A183h, 0CF459CB5h, 51983D2Ah dd 96B58E08h, 617C1C75h, 101B639Ah, 946B5BCAh, 244C37CDh dd 6BFE936Bh, 0C818E1D6h, 4D118362h, 41083C80h, 0E85D5438h dd 0AAE8F7EBh, 8B5B01Ch, 0E83DF46Bh, 0EC7E9724h, 0A41642Ch dd 0E434E09Ch, 0DC44D83Ch, 3F5BE94Ch, 0D454D0F6h, 4164C85Ch dd 0CCB09C0Ah, 0C46CC060h, 0E774B868h, 0BC64F63Fh, 0B47CB070h dd 80A83584h, 5BE9B09Ch, 88A08CACh, 0FDD694A4h, 90980A41h dd 7CFF9C9Ch, 78F31EC5h, 0DB14AB4Fh, 0C100A2A6h, 7A84C815h dd 0B71FBF4h, 94F44C6Ah, 39247B0Eh, 32F5E8FDh, 93748721h dd 35F56290h, 0CC759C40h, 0B1416224h, 0FF738804h, 0AC10410Ch dd 4FD0D335h, 0CE4A1A0Fh, 0BC7E35B4h, 0FC467515h, 0E2C431FCh dd 362F7C1Dh, 52A3430Ah, 724C6D59h, 5F166EDAh, 396F4642h dd 27E2503Ah, 559986Ch, 8060CC90h, 93E46BF0h, 0BAFA3A9Bh dd 226DE1EBh, 6318EDD7h, 1B2D3F7Bh, 0A607DCF8h, 0D56988D2h dd 733DF229h, 4A8712E6h, 0F8B995A3h, 0B4422ABBh, 0A4254049h dd 89708642h, 7325F05Dh, 77857FAAh, 22744DCFh, 80748721h dd 8FE177EBh, 0F6AE7B86h, 83F8BB86h, 56AD0A87h, 26C5BE23h dd 270E1AC2h, 0E06BCA1Ch, 104B177Ch, 2EA27120h, 0F9703740h dd 0BF757C72h, 71A321C8h, 0F80DF773h, 18E33155h, 2781770Dh dd 66F1545Dh, 45E5D59Ch, 7B87FC4Ah, 83F93BAFh, 0CD75C609h dd 27E7EE5Bh, 13DE25FFh, 337436Eh, 15DA220Bh, 9E2F4461h dd 0E10B7857h, 85C600CFh, 8E86877Ch, 19F00744h, 4B841423h dd 70F38D77h, 0D2A48B43h, 0A0CBCA0Eh, 2FD8DB46h, 0E42F57E6h dd 7A5DE6A1h, 6B2180AEh, 5D165DBBh, 0CBC38776h, 0BB8A960Dh dd 1099D4F6h, 0ABDE5F68h, 0EEE6ABC6h, 0FCB9B9F8h, 28D15508h dd 682AD51Ah, 0F7BA3D36h, 0C2184A8Dh, 8AD22412h, 9881A4A7h dd 73844234h, 1C10C87Bh, 7B0AA536h, 6968437Eh, 0AF3AC25Fh dd 14986A8Fh, 73F8BE71h, 0C85341A7h, 2D1773C8h, 0FC2FEB2Eh dd 0F8B400A0h, 296B9EA0h, 101E6435h, 856774DDh, 0A16C1A8Ch dd 2BF17E96h, 7A738E19h, 70402812h, 0D82385D7h, 0AA7D5425h dd 600C78EEh, 0B7F6971h, 68793FF5h, 786C617Dh, 71A5FD6Bh dd 6F7EA037h, 3AC5D276h, 0C88F9A3h, 0BFAD2B75h, 0C6696829h dd 41597999h, 42605C34h, 695FD95h, 0A00EA069h, 5E33DDFEh dd 976C3554h, 14615DEEh, 93DA7D0Fh, 0F30D758Ah, 1DC0C80Eh dd 1082A593h, 0B9634B47h, 0EEF918B0h, 0FA86D74h, 16D11A4Eh dd 0E86C7068h, 57FF33DBh, 2E60A129h, 0A0A02484h, 8E604FCAh dd 0C452E46h, 1B69B67Dh, 193952A4h, 0CF3354E4h, 685828ABh dd 217B7060h, 0D2731A84h, 0F32D7726h, 22B699BEh, 564BDA2Fh dd 2E2B542Eh, 0B1E860FCh, 5D5F782Dh, 22B6217Bh, 7C742A72h dd 0EA1AB758h, 50D72574h, 0F19ACF79h, 59A62BBBh, 0ECF61136h dd 6B8E8C40h, 2466444Ch, 8F01364Eh, 3BD5A67Ch, 50656C14h dd 1002DC55h, 0EAB9944Dh, 8CA02255h, 5A8C7168h, 0B75843A8h dd 96804E02h, 3F055A65h, 79660CF5h, 8D2E8403h, 307CB986h dd 0CD876466h, 0C1CB3D98h, 873D5758h, 702A6777h, 19BB2F18h dd 643E284Bh, 4CF1C50Eh, 0CF4BD80Ch, 2FAED144h, 75E9C9B0h dd 0E037D4CEh, 64F8AC7Eh, 0A09C0A41h, 9814A40Ch, 0E9309C18h dd 90F63F5Bh, 88589444h, 614CA968h, 0CF788CB4h, 1BC773FCh dd 1C049A19h, 0F30681C6h, 0D91C29DAh, 0CCBC4560h, 0B3A04E70h dd 766F0D0Ah, 0DE356531h, 5271E6E2h, 0C5DBFB46h, 0F23E710Dh dd 0F0983Ch, 0F43F8C12h, 0CC710CC8h, 12F0210Ch, 0F3CBF91Bh dd 0FCC4A621h, 2575AD9h, 98FB47B9h, 7DB8FB7Bh, 0FEC1B52Fh dd 852132F3h, 28E568B7h, 456A6016h, 6445AE7Fh, 765E961Eh dd 2890476Ch, 0E054973Ah, 5838DA19h, 3304B239h, 0AFBE4710h dd 0B421CB7Eh, 6339A1FEh, 0B7D95DABh, 0C0798C2Ch, 0EEF9987Fh dd 0E7F37738h, 46B9F06Fh, 3067BD6Fh, 7D856CBFh, 5D211548h dd 98CBC268h, 0C7286512h, 0FE6845A0h, 29840988h, 6D4F0C47h dd 4920427Eh, 18DFC372h, 0C685F27Eh, 8C2B2AA9h, 69EC445h dd 452BA0CBh, 7793C940h, 0D8B9B621h, 0CE4AC5CBh, 40A66310h dd 1D9A1DC8h, 0B010BA5Eh, 234F4337h, 0C33EA98Eh, 0EF6275C1h dd 39AE734Dh, 346A266Ah, 236BE88h, 0BE499632h, 0CE3943C3h dd 5485E8B4h, 0E8CE68CDh, 307F60CFh, 186D9374h, 5560F89Dh dd 0D76171B5h, 294AC266h, 3C4B7425h, 94234528h, 120510FBh dd 0B438696Bh, 8C521E9Fh, 507E8778h, 0D168807Dh, 8CE9E197h dd 29786388h, 0F58FA7E3h, 0A43F562h, 7391F96Ch, 0D5FD7C55h dd 79C985C6h, 53940B6Fh, 74BCF3B0h, 70F399F3h, 0CDCA4E92h dd 3B2BDB7Ah, 3D7D241Ch dd 204E4E7Dh, 0DA787831h, 897A547Ah, 0F74CC76Ch, 2A5C7A7Eh dd 0F849392Bh, 0CF078787h, 8D7979F7h, 169FBF5h, 9C52942Ah dd 319F8E42h, 0C69892E3h, 6A359D7h, 8782ED3Ch, 26628787h dd 0FDD84A19h, 0ECE71267h, 0FC41EC87h, 4DF75EDEh, 0DD2465B6h dd 2CA73B1h, 87480A1Dh, 4F678787h, 11021735h, 57191414h dd 5848564Ch, 15171B50h, 110C1908h, 431D141Ah, 87853558h dd 312B8323h, 6D4E583Dh, 16112F71h, 0B0F171Ch, 582C3658h dd 5149564Dh, 0AC73C345h, 78F69C4Ch, 0BC797CACh, 0B7458FCCh dd 0E8D8768Bh, 107C0CF8h, 448BB776h, 307120A7h, 48AC0C44h dd 1CA14FB7h, 685A583Dh, 95784832h, 80463B07h, 0E1B6B38h dd 0D0A560Eh, 0C5CE4E06h, 7F780FCDh, 0EF141C1Dh, 0B91E771Dh dd 8703078Ah, 191D0B1Dh, 76101B0Ah, 1A170A67h, 101B0017h dd 0A31F1619h, 0AAC1C307h, 740C1D67h, 1A561C0Ah, 19780211h dd 0FDA01B50h, 13109C15h, 0C741519h, 5C00557Eh, 0C1C315CBh dd 17147E78h, 134F1A76h, 0C68E853Fh, 7A0E5E15h, 0E0C5602h dd 170C6963h, 0FD165608h, 6FF455F8h, 5F0B7711h, 0F887734Bh dd 7700F515h, 140D1C19h, 331D550Ch, 6A30E11h, 4BF80ACBh dd 0BDE1617h, 1A560C36h, 0A772B805h, 1F11371Fh, 0F00784Ah dd 2307CB19h, 1A125483h, 0E378D51Ah, 191E1902h, 8030FFD0h dd 1D2556CEh, 19D7245Bh, 8E95801Ah, 1D1C1B87h, 11101F1Eh dd 15141312h, 0A09BD16h, 0F0E0D8Fh, 87BE0100h, 1D7628A7h dd 3E3D3C3Bh, 3231303Fh, 36353433h, 2C292837h, 8710BB87h dd 2F2E2D2Ch, 63222120h, 0C0C105Bh, 57574208h, 43E3885Dh dd 57730BC8h, 856EF1Dh, 3470810h, 76CE8306h, 0B5E7745h dd 1C7E161Bh, 1E16115Eh, 517F430Eh, 494505CFh, 0C6B5E41h dd 2093D863h, 188EC383h, 4F4A4945h, 424979D0h, 57484840h dd 0F887A71Dh, 78A794F5h, 4B25A790h, 96C11EB1h, 87A31787h dd 7D0DF579h, 7EF286F3h, 3E7FE144h, 3E48547Eh, 7FF0E14Ch dd 93959A3Fh, 904C578Fh, 6A29072h, 561F1DA7h, 0B1E1EB09h dd 0A7879779h, 0C5856A86h, 7F6E85E9h, 0D2100AB9h, 0D21E853Ah dd 6CC26885h, 62E0D164h, 8F23C987h, 89E08BB1h, 97AFE70h dd 27E868B8h, 21EA4FB3h, 77EB64EEh, 4200CB83h, 92F9C6Ch dd 9427205h, 0C683E53Dh, 89E58B95h, 8971F17Ch, 3869E47Ch dd 85F695CBh, 9B8B1F5Bh, 0A4646888h, 1821CA73h, 45F7B1E3h dd 795D978Eh, 0D97C6CA1h, 0E609B26Fh, 1910F553h, 0EE3E6FCBh dd 9A62D5E9h, 506965EEh, 951715E7h, 78B028CAh, 2FA46CE1h dd 366A5D2Dh, 0A794B8DCh, 6AE995A6h, 8F95E131h, 0BC6C782Ch dd 9B3B242h, 0FFCB6443h, 5C8785A5h, 0B762599Ch, 1EF7B5B5h dd 83CEF954h, 664714E7h, 0FBC0C883h, 256AB5BBh, 65B3B1D0h dd 17E5CA07h, 735CD55Dh, 0EEDE3022h, 0B186B3B8h, 34636C1Ch dd 8B93DF51h, 0A187C2E4h, 6E91CB8Fh, 95E8C4Ch, 8176848Dh dd 51976B43h, 1787133Eh, 274F8F0Eh, 943F1EA6h, 796ED8D0h dd 9587BDCFh, 85919491h, 971977C3h, 549984CFh, 848DB279h dd 848A2284h, 85C7879Dh, 8D848F93h, 0BFAED3D2h, 21D2814Ch dd 52525DCCh, 0EBD4B11Eh, 0C6CFF9E8h, 0E8871F88h, 0B1FB1BE5h dd 48EA09B5h, 294D61C7h, 72EDA16Ch, 8787E90Ah, 9529458h dd 0DDAA93B0h, 99F8AD6Ah, 17D22AE2h, 0E252F56Ch, 3E86A7B0h dd 0F36AC183h, 0BB3F32E2h, 0A3E3D3E6h, 9458DB61h, 87A5DA14h dd 0C58785C7h, 0A7E695FDh, 93F990DAh, 0B06A2D3Ch, 56EE67C5h dd 0A06A93F5h, 6A22E2FDh, 87E271E5h, 22B57371h, 0A8EE8068h dd 71E315Ah, 0FF6A8685h, 0C31716A3h, 0EDBA22D1h, 0FA6AFD7Ah dd 0B322E97Ch, 81C1B78Fh, 0FD07381Fh, 3A352B87h, 0B02B600Ah dd 71B78CC7h, 781A8687h, 0FB3B287Ah, 372F2C3Dh, 9B23952Ah dd 28583387h, 2A3F372Ah, 49583539h, 39346FB5h, 2A7A3536h dd 721AE893h, 0CF6D1ED3h, 0CF23CEEEh, 0C31F137Bh, 4B76080Dh dd 0CE671962h, 355F930Ch, 59204A5Bh, 564A4A4Ah, 1EAB2049h dd 5860AE52h, 22F34A44h, 0DC4BB0B1h, 94637F0Bh, 745AFDA3h dd 7C785B87h, 586C7269h, 0F5A2A67Dh, 11D8AC62h, 2B333478h dd 7CE9282Bh, 0EFCFF007h, 329870FAh, 95806F0Bh, 165C782Fh dd 17781C78h, 420B780Dh, 26A6B00Ch, 71794814h, 4D7841F4h dd 0A4B8145Bh, 7F5665EEh, 4AD3A278h, 70F1B758h, 432FA258h dd 0E734EBFBh, 3E8A787Bh, 0B9E8665Bh, 387F3F7Eh, 0A97E787Eh dd 683E9F87h, 0F26D6779h, 783098F0h, 0F93C7837h, 86638785h dd 8A021261h, 5064319Ch, 0C5D48D7h, 992B1F68h, 6B04FD44h dd 480DA724h, 0D6C57C78h, 7F24CEC1h, 247022C5h, 0A4E4F19h dd 7F5635AFh, 5640784Eh, 4363480Fh, 3115F1E3h, 903B9478h dd 811B4778h, 1C760178h, 7CA470DAh, 1587588Eh, 78876E38h dd 7678A6A6h, 79E76E78h, 71C75E7Ah, 50386A6Bh, 0B9697B61h dd 0F305BB3Eh, 0AB0CA114h, 0C39C5108h, 0E452E3D4h, 0A0655D13h dd 68E715CBh, 637C3076h, 2515B72Ch, 222C6BAFh, 5A211B5Eh dd 0FBB3BF24h, 3DC1874Ch, 787DFF1Dh, 30687B73h, 0BD8787C0h dd 76C068A6h, 50127D73h, 0C9744161h, 0D0E369A8h, 537B878h dd 0A1940799h, 25278D56h, 6493F2F0h, 90E769B1h, 30685344h dd 0CA560418h, 8C74A9EFh, 74D818DBh, 0ED9C44F8h, 74C974D8h dd 4A414386h, 0F074D878h, 78717838h, 0FC037B94h, 787F815Fh dd 37386CEDh, 0C7380804h, 7EB0DD94h, 6B3B7F78h, 0F087BA01h dd 786BFD00h, 91DE23D3h, 6080686Bh, 579C71B7h, 5B768687h dd 0AC2048B9h, 0FC70C638h, 5AB9CF0h, 68C13BAAh, 0C0798796h dd 14E1968h, 0D558748Ah, 0E7077F75h, 778A6D9Dh, 87960A0h dd 77E877FCh, 77FC5D01h, 357877EDh, 7A7E84E6h, 1477FC07h dd 0FCD2A677h, 0D0E278FFh, 71473B17h, 676BB0F4h, 28201611h dd 0B8DEA358h, 780A28B2h, 41793C3Eh, 44FC37B1h, 6A44134Ah dd 37A0D6Dh, 3944FC75h, 0EC64782Bh, 64D78779h, 0BE7E935Ah dd 0B5D2424h, 1B081124h, 0E387810Dh, 94F91E5Ch, 9C877F64h dd 3C1D2B78h, 1F0D1A1Dh, 824F0E11h, 1FFD4D60h, 121C39DFh dd 172C190Dh, 94E1CE9Ch, 6F161D13h, 6A17340Bh, 0C715080Dh dd 192EE7A5h, 391D0D14h, 5008376Fh, 0B5C1B17h, 0F5309220h dd 0E3B784Ch, 1D4B4719h, 9B492ADBh, 80153401h, 8D7D1563h dd 2C27691Dh, 2F01190Ah, 0EDAD55CDh, 493B6F4Dh, 2A2A6219h dd 1055C3E5h, 102C7D17h, 0B2E6C74h, 0DB23130Dh, 503920A3h dd 0DD003D37h, 0F4B151Fh, 3F4D1642h, 6A668B8Dh, 308C10EFh dd 7282C2Ch, 2F4A5844h, 85972ACDh, 75333758h, 0E7337972h dd 12A71E3Ch, 34557AC3h, 42551F7Ch, 600D5D58h, 0B2200322h dd 12C5057h, 0DE155ECDh, 8DBA2CEh, 6DFB1BFEh, 0F6D19657h dd 55BF7A22h, 3AB10AEBh, 0E72EC9F3h, 53783F2Fh, 0DB233FC2h dd 9D1C8E8Ch, 3AB30BB3h, 15F52F83h, 0D11B0E0Bh, 0A2110FB3h dd 892BF30Fh, 6F274A7Bh, 0E2119F0Dh, 7FCD9E56h, 4E4F407Bh dd 0DEC35F0Ch, 4B674C4Dh, 4A7B4B11h, 0AB330D8Ah, 6B414849h dd 0B0404740h, 4F75FB58h, 584D4E7Fh, 4C4A74FBh, 0E8E24A4Bh dd 4849B042h, 81428B00h, 0B4EDD487h, 372BC3A1h, 392F2C3Eh dd 35243D2Ah, 1AB98011h, 170B1703h, 24C724AFh, 0A0A0D3Bh dd 1319C45Ah, 0BA42E6Dh, 0D2A2472h, 0FDCFE716h, 0C5B6F6Eh dd 105CAA17h, 872B5848h ; --------------------------------------------------------------------------- fld tbyte ptr [eax] adc [ebx-71h], ah wait inc ebx pop ds push ss or ebx, [edx+ecx] adc cl, [eax] jmp short loc_31427875 ; --------------------------------------------------------------------------- dd 1D5301CEh, 292B787Ah, 7E1955FEh, 1476277Eh, 2F4E5E35h dd 271E3310h, 18B9315Bh, 4C3A6450h, 10872C2Dh, 6B73B84Fh dd 263B582Bh, 0AD0E581Fh ; --------------------------------------------------------------------------- locret_31427840: ; CODE XREF: UPX1:314278AAj retf ; --------------------------------------------------------------------------- db 0CFh, 0EDh, 83h dd 0F8200E43h, 0B05BCD4Ah, 41DC826h, 843F6263h, 5B21161Eh dd 1EB6A6Fh, 4E4C130Bh, 3A780806h, 19C7581Bh, 0CFCDCE5Bh dd 15636B20h, 0A5EF2A58h db 0Ah ; --------------------------------------------------------------------------- loc_31427875: ; CODE XREF: UPX1:3142780Ej dec edi into int 3 ; Trap to Debugger js short near ptr loc_314278F4+1 cmp al, 98h pop eax jbe short loc_3142789D push edi enter 35Dh, 96h pop ds adc eax, 5C1B52D4h sbb esp, [ebx] pushf mov ds:0C115AC7h, al add [eax+35h], ebx sbb [esi], edx ; --------------------------------------------------------------------------- db 66h dd 0D449C062h db 79h ; --------------------------------------------------------------------------- loc_3142789D: ; CODE XREF: UPX1:3142787Dj insd pop eax or al, 0F1h setalc push edx push edx mov esp, 0F485EAC3h inc eax jns short locret_31427840 db 3Eh or bl, ds:887E741Dh mov ds:3F75815Bh, eax ; CODE XREF: UPX1:314278D9j sbb eax, 0FF17350Ch daa repne out dx, eax call far ptr 1519h:36133E1Dh adc [ecx+14h], bh or ecx, [ebx+eax] xchg eax, edi bound edi, [eax+72ED1B0Ah] cmp edx, [edi] or [ecx], al popa jb short near ptr loc_314278B3+4 or [edi], dl stc fnstcw word ptr ds:364A1D00h mov es, word ptr [edi+172C042Ah] pop ss adc al, 1Fh or [ebx+4Ah], cl sub edx, [esi] sbb [eax], ecx loc_314278F4: ; CODE XREF: UPX1:31427878j or edx, [eax] pop ss or al, 61h movsd aad 35h repne in al, 6Ah dec edx or cl, [ebx] ja short loc_31427930 jge short loc_31427911 aad 6Ch test dword ptr [ebp+54h], 837DCE60h clc pop ecx loc_31427911: ; CODE XREF: UPX1:31427904j db 36h sbb eax, 19110C00h cmp ds:3D665927h[eax*4], ebp push cs ja short loc_31427934 sbb [ecx], edx or al, 3Eh pop ss or ch, [ebx] pop ecx retn 0CE8Eh ; --------------------------------------------------------------------------- dd 37031F44h ; --------------------------------------------------------------------------- loc_31427930: ; CODE XREF: UPX1:31427902j sbb dl, [edx] push cs push esp loc_31427934: ; CODE XREF: UPX1:3142791Fj cmp al, 99h shl dword ptr [ecx-0AA5DD45h], 0Ah adc [ebx+42h], esi out dx, eax xchg eax, esp ; --------------------------------------------------------------------------- dw 0C7C5h db 0B0h ; ° db 0Bh, 1Dh, 30h db 19h db 16h, 1Ch, 74h db 3Fh ; ? db 5Ch, 26h, 0BAh db 0C5h ; Å db 0BBh, 0CEh, 70h db 16h db 0AAh, 19h, 22h db 88h ; ˆ ; --------------------------------------------------------------------------- retf ; --------------------------------------------------------------------------- dw 0CDB5h db 69h ; i db 0EFh, 3Ch, 0DBh db 2Eh ; . db 1Ch, 1, 6Ch ; --------------------------------------------------------------------------- retn ; --------------------------------------------------------------------------- db 0Dh, 0A7h, 0CEh db 34h ; 4 db 0E0h, 19h, 53h db 31h ; 1 db 16h, 1Eh, 17h db 77h ; w db 2Bh, 71h, 1Dh db 8 db 7Eh, 0F8h, 4Fh db 60h ; ` db 1Ah, 31h, 0E4h ; --------------------------------------------------------------------------- pop esi adc ebx, ds:0A1F03D1Ch sbb al, 0CBh push eax retf ; --------------------------------------------------------------------------- db 16h db 4Eh ; N db 83h, 9Fh, 0EAh db 0B5h ; µ db 0A8h, 98h, 6Ah db 73h ; s db 39h, 2 dup(1Ch) db 0Ah db 77h, 0CBh, 8Fh db 65h ; e db 69h, 73h, 34h db 11h db 1Ah, 0Ah, 19h db 1Fh db 0CDh, 0F2h, 9Eh db 0A2h ; ¢ db 18h, 53h, 35h db 0FAh ; ú db 4, 6Bh, 4Eh db 73h ; s db 70h, 0B3h, 0ADh db 0F6h ; ö db 0B7h, 1Bh, 0BBh db 0A2h ; ¢ db 3Ah, 3, 2Ch db 11h db 0F9h, 0F0h, 0Dh db 1Dh db 0A6h, 6Dh, 31h db 0A0h ; db 0F2h, 35h, 91h db 0 db 4Ch, 0A2h, 63h db 4Eh ; N db 0E3h, 0AAh, 75h db 25h ; % db 0BCh, 41h, 8Ah ; --------------------------------------------------------------------------- push 1A37691Eh and bh, ds:1955CE00h retf ; --------------------------------------------------------------------------- db 49h ; I db 0A7h, 72h, 1Bh db 6Bh ; k db 15h, 0E6h, 0E3h db 98h ; ˜ db 0BEh, 55h, 2Ah db 63h ; c db 21h, 3, 70h db 98h ; ˜ db 0B8h, 1Eh, 6Fh db 0FEh ; þ db 2, 1Dh, 40h db 0DFh ; ß db 34h, 18h, 0DBh db 0CDh ; Í db 0FDh, 6Dh, 3Dh ; --------------------------------------------------------------------------- test [ebx-181A56E8h], bh or eax, 1F42534Bh fnstenv byte ptr [ebx] sbb eax, 94433D01h cmp [esi+77B9FE68h], dh sub [edx-48h], esi db 26h mov edx, 0E6698E22h dec eax jmp dword ptr [ecx] ; --------------------------------------------------------------------------- db 14h db 3Ah, 9Fh, 59h db 68h ; h db 98h, 64h, 0FCh db 0Eh db 3, 29h, 74h db 39h ; 9 db 1Ah, 16h, 0C6h db 2Bh ; + db 10h, 53h, 76h db 0DDh ; Ý db 50h, 7Ch, 49h db 0FEh ; þ db 47h, 0B9h, 62h ; --------------------------------------------------------------------------- std mov eax, ds:68F14E0Fh retn ; --------------------------------------------------------------------------- db 1Ah db 0CEh ; Î db 5, 72h, 3Ch db 6Ah ; j db 19h, 76h, 0Ah db 11h db 1Eh, 63h, 0AEh db 42h ; B db 0CEh, 1, 0B2h db 1Fh db 0F7h, 0Dh, 53h db 4Eh ; N db 14h, 17h, 19h db 17h db 3Bh, 0B6h, 17h db 1 db 54h, 69h, 17h db 28h ; ( db 5Bh, 8, 1Fh db 68h ; h db 2Ah, 0F7h, 76h db 0E8h ; è db 47h, 8Eh, 40h db 0A8h ; ¨ align 2 dw 396Ch ; --------------------------------------------------------------------------- sbb ecx, [ecx] or eax, 0D6080A11h or al, 0A0h xor eax, 42D84D31h dec esi mov ebx, 0A66B21DFh xchg eax, esp or ecx, [edx] mov dl, 7Eh adc eax, 0A9B660C9h retf 764Dh ; --------------------------------------------------------------------------- db 0EAh, 77h, 6Dh db 0A2h ; ¢ db 0E1h, 13h, 2Bh db 35h ; 5 db 65h, 27h, 3Ch db 20h db 0BDh, 72h, 0Ch db 0C0h ; À db 47h, 27h, 10h db 8Eh ; Ž db 81h, 5Fh, 4Eh db 0A3h ; £ db 3Eh, 0B4h, 7Ah db 7Fh ; db 1, 0Ah, 37h db 91h ; ‘ db 68h, 79h, 0F0h db 6Dh ; m db 0D5h, 18h, 0E9h db 5Ah ; Z db 55h, 0B4h, 79h db 4Ch ; L db 0B5h, 65h, 5Fh db 1Dh ; --------------------------------------------------------------------------- jbe short loc_31427B34 sbb [edx+726C4E54h], edi lahf int 3 ; Trap to Debugger retn ; --------------------------------------------------------------------------- dd 317E966Dh, 80B0F1Eh, 391EC97Dh, 0E41AFB37h, 7C5C8C1Eh dd 0A3191422h, 0E32DFD3Bh, 4F766939h, 1F7D5954h, 63FE136Ch dd 167B7EDEh, 0C2B3B31h, 0F4ED76F9h, 753F621Dh, 0D095CAB3h dd 7A0B87D9h, 5479757Ah, 4154CAB3h, 746F4C17h, 0CAB354CAh dd 686B7C71h, 373DD26Eh, 3D284ED2h, 9C87CE76h, 21B0EECFh ; --------------------------------------------------------------------------- loc_31427B34: ; CODE XREF: UPX1:31427AC5j mov al, ds:78987838h ja short near ptr loc_31427BB3+1 jnb short loc_31427BB6 jle short loc_31427BB3 pop esi retf 7964h ; --------------------------------------------------------------------------- adc [edx-5Ch], ch loc_31427B46: ; CODE XREF: UPX1:31427B76j dec esp pop ebx push 76BEDB5Dh cmp cl, [ecx+73h] jp short loc_31427B84 dec ebx iret ; --------------------------------------------------------------------------- dd 747FE3DCh, 414C6618h, 68C84E33h, 552F7E7Fh, 1A68F825h dd 41C71F4h, 0C8D6493Dh db 79h, 66h, 56h ; --------------------------------------------------------------------------- loc_31427B73: ; CODE XREF: UPX1:31427BCEj adc bh, al stc jnz short loc_31427B46 ficomp word ptr [eax+ebp*8+5Eh] mov esp, 0E804031Ch out 7Ch, eax cwde loc_31427B84: ; CODE XREF: UPX1:31427B50j push esi sbb al, 99h sub dword ptr [ecx+ebx*8+23h], 0FFFFFFA0h dec edi jg short loc_31427BE1 pop edi outsb mov eax, 33987830h cmp edi, ecx push edi mov ebx, 7878782Ch js short loc_31427C18 js short near ptr loc_31427C18+2 js short near ptr loc_31427C1B+1 call near ptr 0A9BAF430h js short near ptr loc_31427C1B+8 js short loc_31427C25 js short near ptr loc_31427C25+2 js short near ptr loc_31427BC6+3 ; --------------------------------------------------------------------------- db 0C6h, 78h ; --------------------------------------------------------------------------- loc_31427BB3: ; CODE XREF: UPX1:31427B3Dj ; UPX1:31427B39j sbb [edx], bh loc_31427BB5: ; CODE XREF: UPX1:31427C10j dec ecx loc_31427BB6: ; CODE XREF: UPX1:31427B3Bj cmc mov byte ptr [eax-38h], 87h xchg ebp, [edi] sti mov ch, 87h xchg eax, ebx push 0E8E8E8E8h loc_31427BC6: ; CODE XREF: UPX1:31427BAFj call near ptr 6FC16EB3h lock jg short near ptr loc_31427C0A+3 jns short loc_31427B73 or eax, 0FB66F37Fh xchg eax, esi test [ecx-5Dh], ch or dl, [ebp+787879C0h] ; CODE XREF: UPX1:31427C4Ej js short near ptr loc_31427C59+1 loc_31427BE1: ; CODE XREF: UPX1:31427B8Dj mov ds:66F37F0Dh, eax sti xchg eax, esi test [ecx-5Dh], ch imul edi, [eax-68F45C87h], 66F3710Dh sti xchg eax, esi test [ecx-5Dh], ch ; CODE XREF: UPX1:31427C05j or ebx, [ecx+ecx*2+7B90FBB1h] or dh, [ebp-47h] cwde jo short near ptr loc_31427BF7+2 jle short loc_31427C47 sti loc_31427C0A: ; CODE XREF: UPX1:31427BCBj mov [edi-420EF3F4h], al jns short loc_31427BB5 or eax, 0FB66F37Fh xchg eax, esi loc_31427C18: ; CODE XREF: UPX1:31427B9Ej ; UPX1:31427BA0j test [ecx-5Dh], ch loc_31427C1B: ; CODE XREF: UPX1:31427BA2j ; UPX1:31427BA9j imul esi, [ecx+7F0DA379h], 96FB66F3h loc_31427C25: ; CODE XREF: UPX1:31427BABj ; UPX1:31427BADj test [ecx-5Dh], ch imul esi, [ecx+7939580Dh], 0F37F0DA3h db 66h sti xchg eax, esi loc_31427C35: ; CODE XREF: UPX1:loc_31427CABj test [ecx-5Dh], ch imul esi, [ecx-68F45C87h], 66F3710Dh sti xchg eax, esi test [ecx-5Dh], ch loc_31427C47: ; CODE XREF: UPX1:31427C07j or ebx, [ebx+edi*8-7A068547h] js short near ptr loc_31427BD9+2 xchg eax, [edi-0A865605h] insb push edi sti loc_31427C59: ; CODE XREF: UPX1:loc_31427CCCj ; UPX1:31427BDFj test [esi+ecx+3A7AF277h], eax lock jg short near ptr loc_31427CA1+1 xor ds:871B918Fh, ecx xchg eax, [edi-4850C18h] mov edx, 0FB7FF17Ch mov edi, 7C91FB7Ch jns near ptr 65D433F8h xchg eax, [edi-700ED979h] rol dword ptr [esi], 78h js short loc_31427D02 repne jg short loc_31427CCC push esp nop inc esp jns short loc_31427CA1 ; --------------------------------------------------------------------------- dw 0F88Fh db 47h, 79h ; --------------------------------------------------------------------------- loc_31427C96: ; CODE XREF: UPX1:31427CDCj or eax, 0F27FF38Ah daa jl short loc_31427CBC ; --------------------------------------------------------------------------- dw 90B9h db 70h ; --------------------------------------------------------------------------- loc_31427CA1: ; CODE XREF: UPX1:31427C90j ; UPX1:31427C60j mov ecx, 0BCFE68B8h push ecx cmp al, 93h nop loc_31427CAB: ; CODE XREF: UPX1:31427CAEj jns short loc_31427C35 icebp jg short loc_31427CAB loc_31427CB0: ; CODE XREF: UPX1:31427CF6j mov edi, 9AA0F17Dh mov eax, ds:2878C6F5h js short near ptr loc_31427D33+1 ; CODE XREF: UPX1:31427CC4j loc_31427CBC: ; CODE XREF: UPX1:31427C9Cj rep jg short near ptr loc_31427D2F+1 mov eax, 27F33D0Ch jl short near ptr loc_31427CBA+1 cld dec eax js short near ptr loc_31427CD0+2 js short near ptr loc_31427D43+1 loc_31427CCC: ; CODE XREF: UPX1:31427C8Aj jns short loc_31427C59 sub bl, bh loc_31427CD0: ; CODE XREF: UPX1:31427CC8j mov edi, 0F4EE8770h or [eax+78h], bh in eax, dx repne jg short loc_31427D1B jo short loc_31427C96 or al, 0A4h icebp add dword ptr [ecx], 7FCF777Fh aas sub [edi], bh shr dword ptr [edi], 30h mov dl, dh sub eax, 8E8EE87h js short near ptr loc_31427D6D+1 jno short loc_31427CB0 loc_31427CF8: ; CODE XREF: UPX1:31427CFBj or al, 7Fh icebp jnp short loc_31427CF8 mov ebx, 87A0937Ch loc_31427D02: ; CODE XREF: UPX1:31427C88j out dx, al in al, dx or [eax+78h], bh sbb [ecx-787821A1h], edx js short loc_31427D87 js short loc_31427D89 js short loc_31427D8B js short loc_31427D8D js short loc_31427D8F js short loc_31427D91 js short loc_31427D93 loc_31427D1B: ; CODE XREF: UPX1:31427CD9j js short loc_31427D95 js short loc_31427D97 js short loc_31427D99 js short loc_31427D9B js short loc_31427D9D js short loc_31427D9F js short loc_31427DA1 js short loc_31427DA3 js short loc_31427DA5 js short loc_31427DA7 loc_31427D2F: ; CODE XREF: UPX1:loc_31427CBCj js short loc_31427DA9 js short loc_31427DAB loc_31427D33: ; CODE XREF: UPX1:loc_31427CBAj js short loc_31427DAD js short loc_31427DAF js short loc_31427DB1 js short loc_31427DB3 js short loc_31427DB5 js short loc_31427DB7 js short loc_31427DB9 js short loc_31427DBB loc_31427D43: ; CODE XREF: UPX1:31427CCAj js short loc_31427DBD js short loc_31427DBF js short loc_31427DC1 js short loc_31427DC3 js short loc_31427DC5 js short loc_31427DC7 js short loc_31427DC9 js short loc_31427DCB js short loc_31427DCD js short loc_31427DCF js short loc_31427DD1 js short loc_31427DD3 js short loc_31427DD5 js short loc_31427DD7 js short loc_31427DD9 js short loc_31427DDB js short loc_31427DDD js short loc_31427DDF js short loc_31427DE1 js short loc_31427DE3 js short loc_31427DE5 loc_31427D6D: ; CODE XREF: UPX1:31427CF4j js short loc_31427DE7 js short loc_31427DE9 js short loc_31427DEB js short loc_31427DED js short loc_31427DEF js short loc_31427DF1 js short loc_31427DF3 js short loc_31427DF5 js short loc_31427DF7 js short loc_31427DF9 js short loc_31427DFB js short loc_31427DFD js short loc_31427DFF loc_31427D87: ; CODE XREF: UPX1:31427D0Dj js short near ptr byte_31427E01 loc_31427D89: ; CODE XREF: UPX1:31427D0Fj js short near ptr byte_31427E03 loc_31427D8B: ; CODE XREF: UPX1:31427D11j js short near ptr byte_31427E05 loc_31427D8D: ; CODE XREF: UPX1:31427D13j js short near ptr byte_31427E07 loc_31427D8F: ; CODE XREF: UPX1:31427D15j js short near ptr byte_31427E09 loc_31427D91: ; CODE XREF: UPX1:31427D17j js short near ptr byte_31427E0B loc_31427D93: ; CODE XREF: UPX1:31427D19j js short near ptr byte_31427E0D loc_31427D95: ; CODE XREF: UPX1:loc_31427D1Bj js short near ptr byte_31427E0F loc_31427D97: ; CODE XREF: UPX1:31427D1Dj js short near ptr byte_31427E11 loc_31427D99: ; CODE XREF: UPX1:31427D1Fj js short near ptr byte_31427E13 loc_31427D9B: ; CODE XREF: UPX1:31427D21j js short near ptr byte_31427E15 loc_31427D9D: ; CODE XREF: UPX1:31427D23j js short near ptr byte_31427E17 loc_31427D9F: ; CODE XREF: UPX1:31427D25j js short near ptr byte_31427E19 loc_31427DA1: ; CODE XREF: UPX1:31427D27j js short near ptr byte_31427E1B loc_31427DA3: ; CODE XREF: UPX1:31427D29j js short near ptr byte_31427E1D loc_31427DA5: ; CODE XREF: UPX1:31427D2Bj js short near ptr byte_31427E1F loc_31427DA7: ; CODE XREF: UPX1:31427D2Dj js short near ptr byte_31427E21 loc_31427DA9: ; CODE XREF: UPX1:loc_31427D2Fj js short near ptr byte_31427E23 loc_31427DAB: ; CODE XREF: UPX1:31427D31j js short near ptr byte_31427E25 loc_31427DAD: ; CODE XREF: UPX1:loc_31427D33j js short near ptr byte_31427E27 loc_31427DAF: ; CODE XREF: UPX1:31427D35j js short near ptr byte_31427E29 loc_31427DB1: ; CODE XREF: UPX1:31427D37j js short near ptr byte_31427E2B loc_31427DB3: ; CODE XREF: UPX1:31427D39j js short near ptr byte_31427E2D loc_31427DB5: ; CODE XREF: UPX1:31427D3Bj js short near ptr byte_31427E2F loc_31427DB7: ; CODE XREF: UPX1:31427D3Dj js short near ptr byte_31427E31 loc_31427DB9: ; CODE XREF: UPX1:31427D3Fj js short near ptr byte_31427E33 loc_31427DBB: ; CODE XREF: UPX1:31427D41j js short near ptr byte_31427E35 loc_31427DBD: ; CODE XREF: UPX1:loc_31427D43j js short near ptr byte_31427E37 loc_31427DBF: ; CODE XREF: UPX1:31427D45j js short near ptr byte_31427E39 loc_31427DC1: ; CODE XREF: UPX1:31427D47j js short near ptr byte_31427E3B loc_31427DC3: ; CODE XREF: UPX1:31427D49j js short near ptr byte_31427E3D loc_31427DC5: ; CODE XREF: UPX1:31427D4Bj js short near ptr byte_31427E3F loc_31427DC7: ; CODE XREF: UPX1:31427D4Dj js short near ptr byte_31427E41 loc_31427DC9: ; CODE XREF: UPX1:31427D4Fj js short near ptr byte_31427E43 loc_31427DCB: ; CODE XREF: UPX1:31427D51j js short near ptr byte_31427E45 loc_31427DCD: ; CODE XREF: UPX1:31427D53j js short near ptr byte_31427E47 loc_31427DCF: ; CODE XREF: UPX1:31427D55j js short near ptr byte_31427E49 loc_31427DD1: ; CODE XREF: UPX1:31427D57j js short near ptr byte_31427E4B loc_31427DD3: ; CODE XREF: UPX1:31427D59j js short near ptr byte_31427E4D loc_31427DD5: ; CODE XREF: UPX1:31427D5Bj js short near ptr byte_31427E4F loc_31427DD7: ; CODE XREF: UPX1:31427D5Dj js short near ptr byte_31427E51 loc_31427DD9: ; CODE XREF: UPX1:31427D5Fj js short near ptr byte_31427E53 loc_31427DDB: ; CODE XREF: UPX1:31427D61j js short near ptr byte_31427E55 loc_31427DDD: ; CODE XREF: UPX1:31427D63j js short near ptr byte_31427E57 loc_31427DDF: ; CODE XREF: UPX1:31427D65j js short near ptr byte_31427E59 loc_31427DE1: ; CODE XREF: UPX1:31427D67j js short near ptr byte_31427E5B loc_31427DE3: ; CODE XREF: UPX1:31427D69j js short near ptr byte_31427E5D loc_31427DE5: ; CODE XREF: UPX1:31427D6Bj js short near ptr byte_31427E5F loc_31427DE7: ; CODE XREF: UPX1:loc_31427D6Dj js short near ptr byte_31427E61 loc_31427DE9: ; CODE XREF: UPX1:31427D6Fj js short near ptr byte_31427E63 loc_31427DEB: ; CODE XREF: UPX1:31427D71j js short near ptr byte_31427E65 loc_31427DED: ; CODE XREF: UPX1:31427D73j js short near ptr byte_31427E67 loc_31427DEF: ; CODE XREF: UPX1:31427D75j js short near ptr byte_31427E69 loc_31427DF1: ; CODE XREF: UPX1:31427D77j js short near ptr byte_31427E6B loc_31427DF3: ; CODE XREF: UPX1:31427D79j js short near ptr byte_31427E6D loc_31427DF5: ; CODE XREF: UPX1:31427D7Bj js short near ptr byte_31427E6F loc_31427DF7: ; CODE XREF: UPX1:31427D7Dj js short near ptr byte_31427E71 loc_31427DF9: ; CODE XREF: UPX1:31427D7Fj js short near ptr byte_31427E73 loc_31427DFB: ; CODE XREF: UPX1:31427D81j js short near ptr byte_31427E75 loc_31427DFD: ; CODE XREF: UPX1:31427D83j js short near ptr byte_31427E77 loc_31427DFF: ; CODE XREF: UPX1:31427D85j js short $+2 ; --------------------------------------------------------------------------- byte_31427E01 db 2 dup(0) ; CODE XREF: UPX1:loc_31427D87j byte_31427E03 db 0 ; CODE XREF: UPX1:loc_31427D89j db 0 byte_31427E05 db 2 dup(0) ; CODE XREF: UPX1:loc_31427D8Bj byte_31427E07 db 0 ; CODE XREF: UPX1:loc_31427D8Dj db 0 byte_31427E09 db 2 dup(0) ; CODE XREF: UPX1:loc_31427D8Fj byte_31427E0B db 0 ; CODE XREF: UPX1:loc_31427D91j db 0 byte_31427E0D db 2 dup(0) ; CODE XREF: UPX1:loc_31427D93j byte_31427E0F db 0 ; CODE XREF: UPX1:loc_31427D95j db 0 byte_31427E11 db 2 dup(0) ; CODE XREF: UPX1:loc_31427D97j byte_31427E13 db 0 ; CODE XREF: UPX1:loc_31427D99j db 0 byte_31427E15 db 2 dup(0) ; CODE XREF: UPX1:loc_31427D9Bj byte_31427E17 db 0 ; CODE XREF: UPX1:loc_31427D9Dj db 0 byte_31427E19 db 2 dup(0) ; CODE XREF: UPX1:loc_31427D9Fj byte_31427E1B db 0 ; CODE XREF: UPX1:loc_31427DA1j db 0 byte_31427E1D db 2 dup(0) ; CODE XREF: UPX1:loc_31427DA3j byte_31427E1F db 0 ; CODE XREF: UPX1:loc_31427DA5j db 0 byte_31427E21 db 2 dup(0) ; CODE XREF: UPX1:loc_31427DA7j byte_31427E23 db 0 ; CODE XREF: UPX1:loc_31427DA9j db 0 byte_31427E25 db 2 dup(0) ; CODE XREF: UPX1:loc_31427DABj byte_31427E27 db 0 ; CODE XREF: UPX1:loc_31427DADj db 0 byte_31427E29 db 2 dup(0) ; CODE XREF: UPX1:loc_31427DAFj byte_31427E2B db 0 ; CODE XREF: UPX1:loc_31427DB1j db 0 byte_31427E2D db 2 dup(0) ; CODE XREF: UPX1:loc_31427DB3j byte_31427E2F db 0 ; CODE XREF: UPX1:loc_31427DB5j db 0 byte_31427E31 db 2 dup(0) ; CODE XREF: UPX1:loc_31427DB7j byte_31427E33 db 0 ; CODE XREF: UPX1:loc_31427DB9j db 0 byte_31427E35 db 2 dup(0) ; CODE XREF: UPX1:loc_31427DBBj byte_31427E37 db 0 ; CODE XREF: UPX1:loc_31427DBDj db 0 byte_31427E39 db 2 dup(0) ; CODE XREF: UPX1:loc_31427DBFj byte_31427E3B db 0 ; CODE XREF: UPX1:loc_31427DC1j db 0 byte_31427E3D db 2 dup(0) ; CODE XREF: UPX1:loc_31427DC3j byte_31427E3F db 0 ; CODE XREF: UPX1:loc_31427DC5j db 0 byte_31427E41 db 2 dup(0) ; CODE XREF: UPX1:loc_31427DC7j byte_31427E43 db 0 ; CODE XREF: UPX1:loc_31427DC9j db 0 byte_31427E45 db 2 dup(0) ; CODE XREF: UPX1:loc_31427DCBj byte_31427E47 db 0 ; CODE XREF: UPX1:loc_31427DCDj db 0 byte_31427E49 db 2 dup(0) ; CODE XREF: UPX1:loc_31427DCFj byte_31427E4B db 0 ; CODE XREF: UPX1:loc_31427DD1j db 0 byte_31427E4D db 2 dup(0) ; CODE XREF: UPX1:loc_31427DD3j byte_31427E4F db 0 ; CODE XREF: UPX1:loc_31427DD5j db 0 byte_31427E51 db 2 dup(0) ; CODE XREF: UPX1:loc_31427DD7j byte_31427E53 db 0 ; CODE XREF: UPX1:loc_31427DD9j db 0 byte_31427E55 db 2 dup(0) ; CODE XREF: UPX1:loc_31427DDBj byte_31427E57 db 0 ; CODE XREF: UPX1:loc_31427DDDj db 0 byte_31427E59 db 2 dup(0) ; CODE XREF: UPX1:loc_31427DDFj byte_31427E5B db 0 ; CODE XREF: UPX1:loc_31427DE1j db 0 byte_31427E5D db 2 dup(0) ; CODE XREF: UPX1:loc_31427DE3j byte_31427E5F db 0 ; CODE XREF: UPX1:loc_31427DE5j db 0 byte_31427E61 db 2 dup(0) ; CODE XREF: UPX1:loc_31427DE7j byte_31427E63 db 0 ; CODE XREF: UPX1:loc_31427DE9j db 0 byte_31427E65 db 2 dup(0) ; CODE XREF: UPX1:loc_31427DEBj byte_31427E67 db 0 ; CODE XREF: UPX1:loc_31427DEDj db 0 byte_31427E69 db 2 dup(0) ; CODE XREF: UPX1:loc_31427DEFj byte_31427E6B db 0 ; CODE XREF: UPX1:loc_31427DF1j db 0 byte_31427E6D db 2 dup(0) ; CODE XREF: UPX1:loc_31427DF3j byte_31427E6F db 0 ; CODE XREF: UPX1:loc_31427DF5j db 0 byte_31427E71 db 2 dup(0) ; CODE XREF: UPX1:loc_31427DF7j byte_31427E73 db 0 ; CODE XREF: UPX1:loc_31427DF9j db 0 byte_31427E75 db 2 dup(0) ; CODE XREF: UPX1:loc_31427DFBj byte_31427E77 db 0 ; CODE XREF: UPX1:loc_31427DFDj align 200h UPX1 ends ; Section 3. (virtual address 00008000) ; Virtual size : 00008000 ( 32768.) ; Section size in file : 00008000 ( 32768.) ; Offset to raw data for section: 00008000 ; Flags E0000060: Text Data Executable Readable Writable ; Alignment : default ; =========================================================================== ; Segment type: Pure code ; Segment permissions: Read/Write/Execute UPX2 segment para public 'CODE' use32 assume cs:UPX2 ;org 31428000h assume es:nothing, ss:nothing, ds:UPX0, fs:nothing, gs:nothing dd 3 dup(0) dd 80C4h, 808Ch, 3 dup(0) dd 80D1h, 809Ch, 3 dup(0) dd 80DEh, 80A4h, 3 dup(0) dd 80E9h, 80ACh, 3 dup(0) dd 80F4h, 80B4h, 3 dup(0) dd 8100h, 80BCh, 5 dup(0) dd 7C801D77h, 7C80ADA0h, 7C81CDDAh, 0 dd 77DD6BF0h, 0 dd 77C371D3h, 0 dd 7E41A8ADh, 0 dd 42C2C8A1h, 0 dd 71AB9639h, 0 dd 4E52454Bh, 32334C45h, 4C4C442Eh, 56444100h, 33495041h dd 6C642E32h, 534D006Ch, 54524356h, 6C6C642Eh, 45535500h dd 2E323352h, 6C6C64h, 494E4957h, 2E54454Eh, 6C6C64h, 5F325357h dd 642E3233h, 6C6Ch, 64616F4Ch, 7262694Ch, 41797261h, 65470000h dd 6F725074h, 64644163h, 73736572h, 78450000h, 72507469h dd 7365636Fh, 73h, 43676552h, 65736F6Ch, 79654Bh, 61720000h dd 646Eh, 72707377h, 66746E69h, 41h, 65746E49h, 74656E72h dd 6E65704Fh, 41h, 26h dup(0) dd 1C39068h, 0FFC48BEDh, 0E85B93D0h, 59h, 824648Bh, 4EBB8h dd 64FAEB00h, 18A167h, 0F30408Bh, 830240B6h, 3C7500F8h dd 0E8h, 0ED815D00h, 402334h, 237B858Bh, 85030040h, 402383h dd 858BF08Bh, 40237Fh, 23838503h, 8B500040h, 0ACC933FEh dd 238B8532h, 41AA0040h, 23878D3Bh, 0EF7C0040h, 64C02BC3h dd 896430FFh, 5678B820h, 3871234h, 6000h, 7BB0h, 31420000h dd 1E00h db 78h ; =============== S U B R O U T I N E ======================================= public start start proc near var_C = dword ptr -0Ch var_4 = dword ptr -4 call $+5 push ebp mov ebx, [esp+8] mov ebp, [esp+8+var_4] sub [esp+8+var_4], 8Eh and ebx, 0FFFFF000h sub ebp, 401005h loc_314282AB: ; CODE XREF: start+3Dj cmp dword ptr [ebx+4Eh], 73696854h jnz short loc_314282C0 mov eax, [ebx+3Ch] add eax, ebx cmp word ptr [eax], 4550h jz short loc_314282C8 loc_314282C0: ; CODE XREF: start+29j sub ebx, 100h jmp short loc_314282AB ; --------------------------------------------------------------------------- loc_314282C8: ; CODE XREF: start+35j mov edx, [eax+78h] add edx, ebx mov esi, [edx+20h] mov ecx, [edx+18h] add esi, ebx push ecx loc_314282D6: ; CODE XREF: start:loc_314282FDj lodsd add eax, ebx cmp dword ptr [eax-1], 74654700h jnz short loc_314282FD cmp dword ptr [eax+3], 636F7250h jnz short loc_314282FD cmp dword ptr [eax+7], 72646441h jnz short loc_314282FD cmp dword ptr [eax+0Bh], 737365h jz short loc_31428302 loc_314282FD: ; CODE XREF: start+57j start+60j ... loop loc_314282D6 pop ecx pop ebp retn ; --------------------------------------------------------------------------- loc_31428302: ; CODE XREF: start+72j sub [esp+0Ch+var_C], ecx mov esi, [edx+24h] pop ecx add esi, ebx movzx eax, word ptr [esi+ecx*2] mov edi, [edx+1Ch] add edi, ebx mov esi, [edi+eax*4] add esi, ebx call near ptr loc_31428328+2 inc ebx insb outsd jnb short near ptr loc_31428386+2 dec eax popa outsb db 64h insb loc_31428328: ; CODE XREF: start+90p add gs:[ebx-1], dl start endp ; sp-analysis failed setalc mov [ebp+402407h], eax call near ptr loc_31428344+1 inc ebx jb short loc_314283A0 popa jz short loc_314283A3 inc ebp jbe short near ptr loc_314283A5+1 outsb jz short near ptr loc_31428383+2 loc_31428344: ; CODE XREF: UPX2:31428333p add [ebx-1], dl setalc mov [ebp+40240Bh], eax call sub_31428360 inc edi db 65h jz short loc_314283A3 popa jnb short sub_314283CE inc ebp jb short near ptr sub_314283CE+1 outsd jb short $+2 ; =============== S U B R O U T I N E ======================================= sub_31428360 proc near ; CODE XREF: UPX2:3142834Ep arg_238C781C = byte ptr 238C7820h ; FUNCTION CHUNK AT 314283DE SIZE 0000003D BYTES ; FUNCTION CHUNK AT 3142842D SIZE 00000017 BYTES push ebx call esi mov [ebp+40240Fh], eax call sub_314283B3 test eax, eax jz short loc_31428393 push eax call dword ptr [ebp+40240Fh] test eax, eax jnz short loc_3142838D lea eax, [ebp+401155h] loc_31428383: ; CODE XREF: UPX2:31428342j mov dl, [eax-1] loc_31428386: ; CODE XREF: start+98j call sub_314283CE jmp short loc_314283DE ; --------------------------------------------------------------------------- loc_3142838D: ; CODE XREF: sub_31428360+1Bj call dword ptr [ebp+402407h] loc_31428393: ; CODE XREF: sub_31428360+10j pop ebp retn sub_31428360 endp ; --------------------------------------------------------------------------- loc_31428395: ; CODE XREF: sub_314283B3+2p pop edx push 0 push 0 push 0 push 0 ; --------------------------------------------------------------------------- dw 168h ; --------------------------------------------------------------------------- loc_314283A0: ; CODE XREF: UPX2:31428339j add [eax+eax], al loc_314283A3: ; CODE XREF: UPX2:3142833Cj ; UPX2:31428354j mov eax, esp loc_314283A5: ; CODE XREF: UPX2:3142833Fj push 0 push eax push 0Ch mov eax, esp jmp edx ; --------------------------------------------------------------------------- push esi push esp pop edi xor eax, [eax] ; =============== S U B R O U T I N E ======================================= sub_314283B3 proc near ; CODE XREF: sub_31428360+9p xor ecx, ecx call loc_31428395 lea edx, [ebp+401125h] push edx push ecx push ecx push eax call dword ptr [ebp+40240Bh] add esp, 20h retn sub_314283B3 endp ; sp-analysis failed ; =============== S U B R O U T I N E ======================================= sub_314283CE proc near ; CODE XREF: UPX2:31428358j ; sub_31428360:loc_31428386p ... mov dh, dl mov ecx, 12B2h loc_314283D5: ; CODE XREF: sub_314283CE+Cj xor [eax], dl inc eax add dl, dh loop loc_314283D5 retn sub_314283CE endp ; --------------------------------------------------------------------------- db 14h ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_31428360 loc_314283DE: ; CODE XREF: sub_31428360+2Bj xchg eax, edi lea edi, [esp+eax*2+4+arg_238C781C] adc [eax+ecx*8-50h], ecx add al, 18h scasd in eax, 0DCh jl short loc_3142842D nop movsb out dx, eax or ah, [ebp-6Ah] sbb bl, [eax+esi+45h] loc_314283FB: ; CODE XREF: sub_31428360+B9j rcr ecx, 1 xchg eax, ebx mov al, 0E8h mov esp, 1851515Dh pusha xor al, 7Bh xchg eax, ebp std loc_3142840A: ; CODE XREF: sub_31428360+B0j cmp [ebx+59D48088h], edi loopne loc_3142840A fstp tbyte ptr [edx] dec esp pusha sub esi, [edi+9] jmp short loc_314283FB ; END OF FUNCTION CHUNK FOR sub_31428360 ; --------------------------------------------------------------------------- db 98h dd 37FCC1ECh, 78B0D433h, 8F3FA08Ch, 1B449AC8h db 0EFh ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_31428360 loc_3142842D: ; CODE XREF: sub_31428360+8Fj sub [eax+edi*2+7Ch], dl cwde sub eax, 0B4C4D73Dh or [ecx+ecx+1Ch], dh pop eax insb jmp far ptr 0B8C0h:5B295794h ; END OF FUNCTION CHUNK FOR sub_31428360 ; --------------------------------------------------------------------------- dd 47F4A50Ch, 677B30D8h, 5D595753h, 386400FCh, 87CD8FC7h dd 59C4B09Ah, 68040001h, 9AF1DD3Ch, 3BB4E09Dh, 9BE60F79h dd 94DF60C0h, 78979816h, 0D9616D95h, 0AB447004h, 21680BC7h dd 0BF1AC0EBh, 4B5C7710h, 6784715Ch, 0A8F0DB39h, 18E093FCh dd 0C7BA0C9h, 273B4E6Dh, 42146A7Bh, 7C64383Dh, 0C8DC208Ch dd 0E704F1DCh, 28705BB9h, 0B764157Ch, 0F70A3448h, 8445AE3h dd 0AC948004h, 39E4BABCh, 22632CE4h, 99EC205Dh, 17D4C1ACh dd 78000B69h, 887E084Ch, 4D3BB09Dh, 285424F7h, 786455D4h dd 3617498Ch, 186E0F23h, 25EA375h, 3B316F76h, 0E3F4A0E8h dd 0E5C7F3EDh, 0A8D4A457h, 7E60DFBCh, 0A0CBDFF2h, 9884705Ah dd 0A49094E2h, 0ADDB10B0h, 88344403h, 0CEF30511h, 0E12700ACh dd 5CF7EDB1h, 0C105A0CCh, 19E3184Fh, 0D5D7402Ch, 0B8E4B4CFh dd 5A70EFCCh, 0D3BBCFE2h, 0E8B017E9h, 0F9942FBCh, 6BF5A583h dd 1D0F701Ch, 0E894E437h, 0B7256003h, 0C857A7C9h, 47493B9Ch dd 0CB1440C8h, 7915AF35h, 0EB602503h, 3EECF09Ch, 0E5ABBFD2h dd 0F8B00FE9h, 319CB2CCh, 32443044h, 0F890EA6Ch, 6D1B2FD6h dd 48740427h, 0F0A4B4DFh, 0E8D49895h, 384EC477h, 8C1EACC7h dd 0DAAEB0F6h, 40146ABEh, 78640805h, 0A2E5A0E6h, 8DFBA023h dd 6814648Fh, 4721C923h, 0F52764C3h, 0EDC9CFE3h, 0A8D4906Ch dd 0F8E2DF05h, 0BBDBAB0Ch, 9869F1F9h, 65D480BCh, 78375E79h dd 5949F4Ch, 98D33909h, 0BDEB52ECh, 7824745Fh, 0C8B4B664h dd 776BBCDCh, 38243547h, 0D1D2F90Eh, 6D9385A0h, 2D28514Ah dd 0F894C109h, 0DCF74543h, 0CDBD204Ch, 98C4544Bh, 0C8BE94FCh dd 0ADDBEF96h, 883444EBh, 0AD9B7019h, 2A7E96D3h, 0ACEF066Ah dd 20E6A1E6h, 1804F0CDh, 0D10257Fh, 0E8C3E51Eh, 618289BEh dd 3D235570h, 3D6BD66Ch, 0F8A4F4ABh, 1E62E487h, 0CFD2200Ah dd 0CC475553h, 0FCA710BCh, 1D8B375Ch, 0D884949Bh, 2A7E0086h dd 5C5FC5C3h, 0E00DA0CCh, 8F04F0DDh, 64DDA107h, 47F3C458h dd 48D09359h, 0DBB2031Ch, 0E8B077C9h, 0AFB0D0BCh, 6C43B5F3h dd 5801701Ch, 6B929CD8h, 0D6561402h, 805014B3h, 0F2AEB0F6h dd 0C7B9513h, 0B8E1507Ch, 20277CF8h, 1804F338h, 8BC5891Fh dd 4F21A94Ch, 7DF4A0E8h, 6685B134h, 0F8948060h, 0A9B280E8h dd 0B767705Ch, 0D8A043C9h, 0B11445ACh, 4CDB1F88h, 0DFB6868h dd 0D884946Bh, 0D7EA0904h, 0ED9B03C3h, 0C8F4848Bh, 0DC856837h dd 68544104h, 0BF316F2Bh, 0E1F4A0E8h, 0A7BBCC8Dh, 0F0CCD8FCh dd 0F8FCE9BCh, 483FD40Ch, 9884715Ch, 0E8D4C0ACh, 382410FCh dd 0DB22314Ch, 0FCD72563h, 71BF00ACh, 0DA4D490h, 0B5A4277h dd 4736C38Bh, 1C26297Ah, 0CBC89009h, 6D9892B8h, 2A073072h dd 0CDE0E109h, 9D88B9FAh, 3A77204Dh, 0FDF01139h, 8DB8A9EAh dd 485471B1h, 0C9130E25h, 0BDB6F39Ch, 7871748Dh, 1D073F4Eh dd 0C8F5D3FFh, 7961829Fh, 0D062558h, 0DDD0FF11h, 6D868898h dd 1B44547Dh, 0DCF5E51Eh, 8A8C84D9h, 48504169h, 0F9E1021Fh dd 8780A5D8h, 5D4C7C93h, 0BA471020h, 0A8A5DECFh, 5C7B689Fh dd 111C153Ch, 0BADCF4F8h, 186091B9h, 2E20256Bh, 0F9C1FC15h dd 618694B8h, 3D30457Eh, 0EF94C11Fh, 91A2A4D9h, 21674560h dd 0DF841526h, 8192B4C9h, 51707590h, 0CF740521h, 0B789C4F9h dd 4D787588h, 1C0A3174h, 0C8F5C5E0h, 4C70959Bh, 2E242D49h dd 0F6C1FC15h, 49918DADh, 2C21771Ch, 0D8F9E538h, 9090B1ECh dd 2D73204Dh, 0EAE12628h, 86BBA9DFh, 4C4157FCh, 0FB06051Ah dd 9DAADFF5h, 64144194h, 34003153h, 0A9C6C2E5h, 184589AEh dd 3E242161h, 0F7D3F515h, 649DA6AAh, 280B3079h, 0C1D2EE09h dd 99A9B5D0h, 265D507Ch, 0D784313Bh, 0B8BAA5DCh, 5D477F8Eh dd 0D874133Fh, 0BDA7DFEEh, 1A27739Fh, 0B16397Ah, 0BAE4A0F8h dd 6B6193B3h, 2666735Fh, 0B8D0E819h, 4E80859Fh, 19215C75h dd 0C1E6F418h, 9D90A5DEh, 1B34617Fh, 0F1C20439h, 8180A5C0h dd 6B247591h, 0F8110520h, 0B5AAE59Ch, 4142708Dh, 1E2B2759h dd 0ADD8C9CAh, 6A6DA6DCh, 4353558h, 0D7C8FC3Dh, 7AA3E0AFh dd 1E214475h, 0A8F1EC05h, 9CA5A4F2h, 3C475566h, 0EEED020Ch dd 8FB1ACC5h, 57706399h, 881A0527h, 0AA87C4D2h, 4D606189h dd 1D08397Ah, 8BC0EE8Ch, 6C6595AEh, 7261049h, 0CBD7F51Fh dd 4B80AECCh, 2C25556Eh, 0C7E6D009h, 8B97B5DFh, 6345849h dd 0E8E53D28h, 9FB1A9FAh, 5D7776B3h, 0E71D142Fh, 0AC8AB0F2h dd 467170A3h, 1B0B226Ch, 9CC7D3E9h, 76619BB3h, 38200E2Ch dd 0DDD0FF0Eh, 61A294AFh, 3931446Eh, 0C5F1CD00h, 0F89DA2D3h dd 3A635442h, 0CEE10435h, 9DA0B2C5h, 5D697C9Dh, 0F1060F21h dd 0B4B0E29Ch, 4B7D6EB9h, 2B013453h, 0A6DDD2F8h, 596BA4BBh dd 3B3D3342h, 0D6CDE208h, 5BA3E0ABh, 3930635Dh, 0D8E1F41Eh dd 9788B3BCh, 2747457Fh, 0ECE11B3Fh, 86BBA3ACh, 4C477592h dd 0FC11074Ch, 0ACB7DFF4h, 497A798Eh, 0A643551h, 0C8C2C3E9h dd 7C6A95AFh, 0B3B332Ch, 0B8D0F517h, 6D808E85h, 2C215E6Eh dd 0DBFBEC2Fh, 968598D9h, 48514C68h, 0FDF01E15h, 9CB1AEDEh dd 7B5075BBh, 0ED1A0E23h, 0BCA1C4FFh, 5C7574BFh, 162D5059h dd 0A6C6C5F8h, 684B84B9h, 68152E49h, 0DDD0FE35h, 7C918EBEh dd 36214053h, 0E9F8F239h, 8C8A99BCh, 2D5A5269h, 0F9E12228h dd 84BD86C8h, 7C651099h, 0C124211Ah, 9CEA82AFh, 7A144CA0h dd 14273759h, 83D1D3E3h, 4A0489B9h, 181B2749h, 0DDEFFE19h dd 498CA5B5h, 3F21621Ch, 0DAF1F53Dh, 948586C5h, 30714579h dd 0FDD6701Dh, 9CB193CBh, 4D4871AAh, 0C90C2529h, 0DD2D339Ch dd 4045C8C7h, 9064503Ch, 0CB90EC01h, 1D6EF0B6h, 207107Dh dd 0E8681B79h, 5CA43447h, 0A157076h, 3017F3Fh, 7BE49098h dd 0DDCB2CC8h, 98C454F3h, 2BDC042Fh, 0A7A19DABh, 0BB742058h dd 0D8AEE063h, 0BDEB0686h, 78247457h, 0B7C06009h, 403D988Ch dd 0BCDF402Ch, 742F9016h, 89CE4A6h, 3244201Ch, 0A8FED26Eh dd 0F8BCE9D4h, 19344A0Ch, 0D7B200Fh, 0E894E40Fh, 0ADDB49A3h dd 8834444Bh, 93B04F19h, 3C9C8D67h, 7487507Ch, 0D8B43501h dd 0C907F09Ch, 0BAAB137Bh, 9C3315F7h, 8779E08Ch, 58442365h dd 576BD884h, 63615B43h, 0C5346028h, 9897B6D3h, 179328ACh dd 0BDAFEF03h, 883444D3h, 0D3B07019h, 3BC78F61h, 4A8C503Ch dd 434B5F73h, 4DC7AF1Bh, 685440C4h, 5525CD7Ch, 8B4F864h dd 0DDC9F92Fh, 0A8D49C52h, 0A9B584EDh, 0B765715Ch, 0D8A047C9h dd 0CCD047ACh, 1C238503h, 4A29600Ch, 3091B098h, 281400ECh dd 0AF89D161h, 0A2B4E094h, 0BA917D23h, 38540034h, 9C845D2Eh dd 8BF4CACCh, 9F223CD8h, 0E88C68E9h, 3FC41DBCh, 82CCA89h dd 0B284545Ch, 82179DACh, 0C7257AFDh, 8C079F7Fh, 1841A563h dd 237CF098h, 0F364503Ch, 98B7FB5Ch, 1EB17DE0h, 0E3540035h dd 0B8A59CC6h, 7E6BCCh, 5B44301Dh, 0C85FAB94h, 5E171B37h dd 0F31546Dh, 5A6F85BEh, 0BFDB072Fh, 0B377C477h, 0E2203080h dd 0B296E1DCh, 8381FF13h, 0FB641018h, 5D3FAC48h, 1844D4E3h dd 82D79707h, 0D2A3577Bh, 81F408CCh, 3187334Bh, 0E8B181F9h dd 0F060D5BCh, 0AF41304h, 0D0D6AECh, 0E894E5ADh, 7AA9F20Bh dd 418ACA2Dh, 8D0751E9h, 28140004h, 95E50D3Ch, 0C8F4B914h dd 3D016D57h, 14D7406Ch, 0B7A49858h, 8F45948h, 50A8B11Ch dd 0FC94806Eh, 0F8E5D4D4h dd 1FA1DF0Ch, 13843078h, 0CC504D50h, 382411F8h, 60740A1Ch dd 0D8C4B098h, 284052BAh, 2BF1AF6Bh, 0FBB4E0A8h, 1C937D15h dd 3954402Dh, 0E9A6FA2Dh, 89CE1A6h, 0A04301Ch, 8CB31593h dd 7D72D0FCh, 186F54FAh, 99801808h, 1783C0ACh, 3A043448h dd 1D8B604Ch, 0D884947Fh, 5CD485B5h, 2870B32Ah, 0C8DE7407h dd 4E53A18Eh, 4CDBD5D3h, 3DFD903Ch, 5E24950Ch, 7C43A5E3h dd 0FF19802Ch, 92B382F8h, 0DFB97848h, 98847158h, 8214F307h dd 93D749ECh, 0D824301Ch, 8A94E0CCh, 0C3B9513h, 0BCE5507Ch dd 0C8B4A284h, 10208423h, 4C87D5D3h, 47F7903Ch, 48D03359h dd 5C866D1Ch, 0A2AA006Ch, 73A2D1C9h, 820A481h, 159D935Ch dd 0A8C4C039h, 6EF513FCh, 48F0B2B3h, 0D9DB3893h, 0AC1B00ECh dd 7864512Ch, 0BD8E9E0Ch, 2684B6CCh, 69D04F2Ch, 38A4907Dh dd 0F981C0F2h, 87AB15Ah, 0DDD3CE25h, 3E2B5BFEh, 637B214Ah dd 98EE2192h, 178796FDh, 7800DB69h, 494F394Ch, 0D81B3593h dd 0AD9900ECh, 78244C0Eh, 0C4DCA0E6h, 4804F0DCh, 0A3C1BF7Fh dd 85A4D058h, 8F4E0C0h, 58FBB513h, 197D806Ch, 79E4D0BCh dd 1667032h, 3D017F0Ah, 6BD4C0ACh, 488183Ah, 11F06F41h dd 0E4C4B09Ch, 84E775CCh, 0FD6B6A00h, 0C8B4A000h, 3824FD71h dd 4969600Ch, 0CDD0F51Bh, 28C84CB3h, 26C54C69h, 0DCFCA093h dd 7995A5C8h, 72442372h, 0F0F15F73h, 0E82B876Ah, 289E21F3h dd 7F74606Bh, 4D3BE27Eh, 2854246Fh, 2834900Fh, 0C15CF0DCh dd 5C04F0DCh, 43A3743h, 0B8C0F113h, 2C2F7533h, 98C1305Ch dd 61A7B618h, 0DDE15535h, 2065204Ch, 1884725Ch, 0B88291FDh dd 1CFB8503h, 1DF9600Ch, 0D884A90Eh, 7CDD33BCh, 2936006Dh dd 0FF215FDDh, 9F04B0F8h, 0FDAB6428h, 0B8E4B47Bh, 85742334h dd 5804246Bh, 0FB57796Dh, 0AFB096F3h, 1471724Dh, 0EAE71911h dd 8EBBB3C3h, 51734C88h, 0FF1B0422h, 0AD87ECEFh, 4671729Eh dd 0A010648h, 0A6DBC9FFh, 687CB580h, 0D262F40h, 0D6F1900Eh dd 6D8191A5h, 2C375F54h, 5794826Ch, 7796854Ch, 274650DCh dd 0F9E91924h, 8BA6A982h, 5948719Bh, 0F85A1934h, 918AB0F0h dd 5F344BAFh, 10C3F5Ah, 0C2D2DAFCh, 4A41A389h, 5A64320Ch dd 8994A54Ch, 26D4CEECh, 121B0A3Ch, 88DAC923h, 8A8DA69Ah dd 1D3E5578h, 988470B4h, 5559DACh, 38640CB8h, 9C03E58Ah dd 27C4B0DCh, 68305B79h, 678C913Ch, 0D6DE9CF8h, 3C1F4557h dd 0C40D406Ch, 92D1BE40h, 0F7CA61AAh, 0D5674501h, 0E8B07BD1h dd 0FA925BBCh, 0ED52855Bh, 0BBCBF5D1h, 6D5BC0ECh, 38643389h dd 7232E9B6h, 233AFE10h, 0E7F6015Dh, 0FDE913D7h, 0C8F4B413h dd 72049A8Ch, 3C1BF2Ah, 3BA4D058h, 0CFCC4B0h, 5CAC1B69h dd 0FB94806Ch, 7E493FAh, 8106F99h, 64C8985Ch, 0EF3C3F53h dd 6B2410FCh, 0C72B230Ah, 4D3BB0CFh, 285424A3h, 879865D4h dd 3CFD4873h, 95FB0F23h, 6814524Eh, 0B8A49B94h, 4DA7B5CCh dd 7676034Eh, 0A8D8CC28h, 0DC874543h, 42DC204Ch, 0EF84705Ch dd 81A6B0DFh, 79426492h, 1D8B304Ch, 0D884948Fh, 0C0B8565h dd 496B507Ch, 0DF3D2D01h, 9D8DF09Ch, 6814652Dh, 0DB316F2Dh dd 9BF4A0E8h, 58443474h, 3E210D6Ch, 0A1E490ABh, 6CD39D81h dd 0DE6C701Ch, 8E2B3F5Bh, 23D2953Bh, 788B600Ch, 0C33C151Fh dd 0A51400ACh, 387FE6A9h, 0A2E0F08Ch, 4A049ADDh, 68544244h dd 53316FFCh, 8DF4A0E8h, 7A316ADCh, 0B37D0DE1h, 92B6D0FCh dd 0BE81AD0Ah, 0CC843047h, 0B98490FAh, 0D7B1EFAEh, 0D0742068h dd 0FC232563h, 0ADD200ACh, 78247734h, 0C8B8488Ch, 4B53F0DCh dd 5B1F0363h, 0F4E0BE4Eh, 9D0BE080h, 5804147Fh, 0A893E8FFh dd 4D69D0BCh, 487436E1h, 2F39FD05h, 0D48088h, 0C7DBE63Dh dd 88746CA4h, 968DE79Ch, 7C514EA5h, 34281412h, 0AB215F8Ch dd 9D04B0F8h, 8FD04FECh, 2BA4907Dh, 8F4E5A4h, 73F1BD1Ch dd 0F194C07Bh, 0DC376D31h, 0C2DC204Ch, 1B7B8FAAh, 0A8F01711h dd 0BC2B10FCh, 8874618Eh, 0D9545C1Dh, 404000ECh, 7864513Dh dd 0EC033573h, 0DC85F09Ch, 685441BCh, 0D2701B2Ch, 9D0BB2CCh dd 580414CBh, 0DDCD40E9h, 0EB6CB8B1h, 0DDCB200Ch, 98C454DFh dd 55572247h, 38640B04h, 55D154Ch, 98DF4C19h, 0BDEB50ECh dd 782474FFh, 4CBB6009h, 1804F1E7h, 0E35800A7h, 37946F7Ch dd 48EF1849h, 50C1F61Ch, 0A994C04Bh, 0F98ED0D6h, 0DDCB2266h dd 98C45493h, 0E72B382Fh, 38250278h, 1DF9F34Ch, 0D884AB68h dd 7B461086h, 5CDBC5C3h, 831A0CCh, 18F675D3h, 0D5D9402Ch dd 0B8E48C6Ah, 0C81CE87Dh, 30BBCFE6h, 0A89480F8h, 7102FBE2h dd 0B7600438h, 0D8A02FC9h, 0CC694DACh, 892450E0h, 72D5884Dh dd 9C4F4F63h, 0C8D510C8h, 5C205B34h, 0C0546188h, 1020B4D7h dd 6851A87Ch, 9681907Ch, 5FF498FAh, 7C5BA5E3h, 6C17802Ch dd 0FEA316B0h, 59A1AD2Ch, 0F2843040h, 0E8F5A8ACh, 6B7610FCh dd 0ACBFF5B3h, 0A449B0DCh, 0D74314C8h, 384073A9h, 0F0B0668Ch dd 186EB0D6h, 9707177Ch, 0F8805BE9h, 8512E3CCh, 185802A1h dd 0C094EA6Ch, 0F8E4D0B0h, 0DDCB735Bh, 98C45497h, 0E8D4CC91h dd 0B56965FCh, 0C85169F9h, 0D0493D9Ch, 31440CBh, 29643AF2h dd 5D4BF3DAh, 1844D41Bh, 1654B8AFh, 462F0153h, 2DFD5541h dd 55F4305Ch, 0B8E12E9Eh, 21338DCh, 3A55DFF3h, 158D934Bh dd 23FC1DBh, 0F60FDF77h, 0AD7DDDC1h, 7C37B0DCh, 91FFF76Bh dd 0C3F1AF6Fh, 48B4E0A8h, 58108761h, 4220412Ch, 0B8D1A014h dd 8B611FCCh, 0D8447038h, 0E8B388D1h, 0E990D0BCh, 53CCA5CBh dd 9884701Ch, 6D12C0ACh, 386437F4h, 7622894Ch, 5D034F63h dd 2854146Ch, 0F864503Ch, 0C8B062D1h, 3F0D4551h, 9702406Ch dd 0F880D3E9h, 0F70C63CCh, 58FFB413h, 2D1D806Ch, 0F8A4F8B1h dd 0B7622066h, 0D8A00BC9h, 0E71445ACh, 3824B478h, 0D8B44B4Ch dd 88C7DACCh, 287C0186h, 2EA4503Ch, 0EC933573h, 0E087F09Ch dd 8CD04FD3h, 31A4907Eh, 48DCF149h, 4DC9BD1Ch, 2594C044h dd 0B8CCCD29h, 2266710Ch, 0D7B205Ch, 0E894E4E7h, 37DBE87Fh dd 8876D2C8h, 27C4DA9Ch, 683C1159h, 3FF1AF3Ch, 4BB4E0A8h dd 9C0B0F24h, 685442B7h, 908115F5h, 0C1C7E08Ch, 815F31Fh dd 0F990EA3Dh, 0D0F56543h, 0DDCB204Ch, 98C45477h, 6CDB0029h dd 3824128Bh, 0DFDA97Fh, 0D88498B5h, 404551BDh, 786B5023h dd 0AF215FDCh, 9D04B0F8h, 58D04FECh, 31A4907Eh, 48DCCD49h dd 13CFF31Ch, 0F0AC3854h, 2AD7D0BCh, 0B9C3E10Fh, 1D0D91ABh dd 0E894E899h, 80185B77h, 8874744Ah, 19C762AFh, 0C9E3F11Bh dd 5055D5B5h, 0C777A0CCh, 0E102BB6Bh, 3BD976CFh, 0FB139F64h dd 4124E3D8h, 5B6CF177h, 0F7AE01BCh, 18AB9CBh, 0CB7D3E78h dd 0EA857C26h, 0D49F4B73h, 3B305277h, 0CCF9700Eh, 1334FD4h dd 0AD2FC1CFh, 78247819h, 8C3FF94Fh, 908DFCF8h, 68544094h dd 3367504Fh, 85FF0B03h, 186339A1h, 771F7C6Ch, 0C448198Fh dd 7432526Dh, 0B4860726h, 0B4E86A8Ch, 1618FC88h, 8848BD38h dd 102758E9h, 6D290167h, 0C641564h, 8BE79D87h, 9D0BF08Eh dd 97ABBF65h, 0EF9993F7h, 7B7AE85h, 0A7BB0C98h, 0EBC3BD93h dd 7CEB9EE9h, 0B7CBDF3Dh, 0ABC72761h, 0CE50CF9Eh, 5DBEF03h dd 0C720331Ch, 27DF3493h, 0F327FF13h, 879A13D4h, 0C630AF73h dd 2BFB0F23h, 6842A8FEh, 0D64C907Ch, 0E00B1F33h, 5844301Ch dd 1B790131h, 11E4909Dh dd 483420F5h, 13B68F38h, 0A8FCED19h, 1AAD74FCh, 0C54AE12Ah dd 3A41BFC6h, 0A31400ECh, 0A6676C62h, 988F21EAh, 0CA81FF99h dd 9F54402Ch, 98A4863Fh, 8DFBE0CCh, 584430D9h, 0AAC8C39Ah dd 0F85F54B3h, 36B5200Ch, 0B8A4507Ch, 4650CF8Ch, 0D02410FCh dd 778B9E83h, 0D8673293h, 0BFFC00ECh, 909BAFC2h, 0C8B4A02Eh dd 30356D57h, 0DDBC406Ch, 0B75B6F81h, 8F46848h, 75F1BB1Ch dd 2394C044h, 26E7ECE2h, 0B7CABEE4h, 19F202A3h, 0E8B4E4E6h dd 0C6AFF0FCh, 9C0E631Ah, 0C8C40511h, 521700ACh, 7D65E92Ch dd 3BE3A08Ch, 0FB074179h, 37F0B32Eh, 89ABC222h, 5D736D5Eh dd 0D044301Dh, 637C7F3Ch, 0A21B2F52h, 4B386A87h, 0D9096016h dd 0C097EBA9h, 0FF365775h, 0A854400Ah, 934D90BCh, 385E8BC4h dd 5055D5B7h, 828DA0CCh, 910783D4h, 2A554866h, 0E0C7136Ch dd 3D716BCCh, 59447034h, 0EB95882Eh, 9C36E3ECh, 0C7500287h dd 2507285Eh, 0E894E8BDh, 0DAA01FFCh, 778B9FB1h, 98EC9D29h dd 0AF81FFECh, 87641018h, 889C8939h, 1F910FDCh, 0E5540008h dd 0F88C85F1h, 15616DCCh, 9447034h, 5794EA3Eh, 0B8CCC109h dd 37A1DF0Ch, 67843078h, 0A8FCD119h, 3FB1EFFCh, 5742068h dd 98E3B929h, 25A1FFECh, 2E641014h, 0ECCF3573h, 0BD87F09Ch dd 6814683Dh, 0B84C537Ch, 55F4E0CCh, 0B5C53176h, 0A8D4A342h dd 39EB20E4h, 820A089h, 5B44F55Ch, 182B082Fh, 0B8A1D1F3h dd 4B742058h, 0F2C4A0A1h, 4E0875ECh, 74402CBDh, 0DBC1D1E0h dd 0E7C018BCh, 6D21BFD3h, 47595294h, 0F7260833h, 7625CFE3h dd 0FEECAD93h, 1084C288h, 0B7CBDFA6h, 0DC0F4929h, 5D59F088h dd 386437F5h, 0EE7C30C7h, 0DAC28A1Dh, 4042259Fh, 789B503Ch dd 0C8DE6407h, 8DFBA08Eh, 6814649Fh, 39AC54FFh, 37CBBCF2h dd 0DB474540h, 0DC7C84AAh, 101B2F41h, 0B7CBDF88h, 98A1C83Dh dd 5017C0ACh, 382410D3h, 887470A4h, 0D8E4729Ch, 28143054h dd 7867B83Ch, 0EC76A08Ch, 3C507DDCh, 0EB7A8D20h, 0A1D89084h dd 8F408ACh, 0CCF301Ch, 23C9B048h, 90951A6h, 0A034602Fh dd 677B8458h, 0E8D002CDh, 1A5Ch dup(0) UPX2 ends ; Section 4. (virtual address 00010000) ; Virtual size : 00001000 ( 4096.) ; Section size in file : 00000200 ( 512.) ; Offset to raw data for section: 00010000 ; Flags C0000040: Data Readable Writable ; Alignment : default ; =========================================================================== ; Segment type: Pure data ; Segment permissions: Read/Write _idata2 segment para public 'DATA' use32 assume cs:_idata2 ;org 31430000h dd 80h dup(0) align 1000h _idata2 ends end start