Function at 0x10009820
Capabilities:
Access peb ldr_data

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x10014f2e
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x48
push ebx
push esi
mov esi, ecx
push edi
mov dword [ebp - 0x14], esi
mov dword [ebp - 0x54], 0x7f8a
mov dword [esi + 0x88], 0x1001624c
mov dword [ebp - 0x50], 0x7f00
mov dword [ebp - 0x4c], 0x7f03
mov dword [ebp - 0x48], 0x7f89
mov dword [ebp - 0x44], 0x7f8b
mov dword [ebp - 0x40], 0x7f01
mov dword [ebp - 0x3c], 0x7f81
mov dword [ebp - 0x38], 0x7f88
mov dword [ebp - 0x34], 0x7f80
mov dword [ebp - 0x30], 0x7f86
mov dword [ebp - 0x2c], 0x7f83
mov dword [ebp - 0x28], 0x7f85
mov dword [ebp - 0x24], 0x7f82
mov dword [ebp - 0x20], 0x7f84
mov dword [ebp - 0x1c], 0x7f04
mov dword [ebp - 0x18], 0x7f02
lea ebx, [ebp - 0x54]
lea edi, [esi + 0xcc]
mov dword [ebp - 0x10], 0x10
mov eax, dword [ebx]
push eax
push 0
mov dword [edi - 0x40], eax
call dword [0x1001b57c]
mov dword [edi], eax
mov eax, dword [ebp - 0x10]
add ebx, 4
add edi, 4
dec eax
mov dword [ebp - 0x10], eax
jne 0x100098cd
xor ebx, ebx
push str.GDI32.dll
mov dword [ebp - 4], ebx
mov dword [esi], 0x10016250
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov edi, dword [ebp + 8]
mov dword [0x1001bde8], eax
lea eax, [edi - 1]
cmp eax, 0x1f
ja case.0x1000991a.2
xor ecx, ecx
mov cl, byte [eax + 0x10009b24]
jmp dword [ecx*4 + 0x10009b1c]
mov dword [esi + 0x70], edi
jmp 0x1000992d
mov dword [esi + 0x70], 8
mov ecx, esi
call fcn.1000a3b0
test al, al
jne 0x1000994e
call dword [0x1001b538]
push eax
mov dword [esi + 0x10c], eax
call dword [0x1001b53c]
mov dword [esi + 0x44], eax
mov dword [esi + 0x10], 0xcc0020
mov byte [esi + 4], 1
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov ecx, dword [ebp + 0x10]
mov dword [esi + 0x14], eax
mov eax, 0x3e8
xor edx, edx
div ecx
mov dl, byte [ebp + 0xc]
mov edi, dword [0x1001b544]
push ebx
mov dword [esi + 8], ecx
mov byte [esi + 0xc], dl
mov dword [esi + 0x18], eax
call edi
push 1
mov dword [esi + 0x28], eax
call edi
mov dword [esi + 0x2c], eax
mov eax, 0x20
cdq
idiv dword [esi + 0x70]
mov dword [esi + 0x30], ebx
mov byte [esi + 0x24], al
nop
nop
nop
mov eax, dword [0x1001bde8]
mov ebx, dword [sym.imp.KERNEL32.dll_GetProcAddress]
push str.CreateCompatibleDC
push eax
call ebx
mov ecx, dword [esi + 0x44]
mov edi, eax
push ecx
call edi
mov edx, dword [esi + 0x44]
mov dword [esi + 0x4c], eax
push edx
call edi
push 0
mov dword [esi + 0x80], eax
call edi
mov dword [esi + 0x48], eax
nop
nop
nop
push 0
call edi
push 0x30
mov dword [esi + 0x50], eax
mov dword [esi + 0x5c], 0
mov dword [esi + 0x60], 0
call dword [sym.imp.MSVCRT.dll_putchar]
mov eax, dword [esi + 0x28]
mov ecx, dword [esi + 0x70]
add esp, 4
push 1
push eax
push ecx
mov ecx, esi
call fcn.10009fe0
mov edx, dword [esi + 0x2c]
mov ecx, dword [esi + 0x70]
mov dword [esi + 0x64], eax
mov eax, dword [esi + 0x28]
push edx
push eax
push ecx
mov ecx, esi
call fcn.10009fe0
mov edx, dword [esi + 0x28]
mov dword [esi + 0x68], eax
mov eax, dword [esi + 0x70]
push 1
push edx
push eax
mov ecx, esi
call fcn.10009fe0
mov dword [esi + 0x6c], eax
mov ecx, dword [0x1001bde8]
push str.CreateDIBSection
push ecx
call ebx
mov edi, eax
push 0x30
call dword [sym.imp.MSVCRT.dll_putchar]
mov edx, dword [esi + 0x64]
add esp, 4
lea eax, [esi + 0x5c]
push 0
push 0
push eax
mov eax, dword [esi + 0x44]
push 0
push edx
push eax
call edi
mov ecx, dword [esi + 0x68]
mov edx, dword [esi + 0x44]
mov dword [esi + 0x54], eax
push 0
lea eax, [esi + 0x60]
push 0
push eax
push 0
push ecx
push edx
call edi
mov ecx, dword [esi + 0x68]
mov edx, dword [esi + 0x44]
mov dword [esi + 0x58], eax
push 0
lea eax, [esi + 0x78]
push 0
push eax
push 0
push ecx
push edx
call edi
mov dword [esi + 0x84], eax
mov eax, dword [0x1001bde8]
push str.SelectObject
push eax
call ebx
mov ecx, dword [esi + 0x58]
mov edx, dword [esi + 0x4c]
push ecx
mov edi, eax
push edx
call edi
mov eax, dword [esi + 0x54]
mov ecx, dword [esi + 0x48]
push eax
push ecx
call edi
mov edx, dword [esi + 0x84]
mov eax, dword [esi + 0x80]
push edx
push eax
call edi
mov ecx, dword [esi + 0x2c]
mov edx, dword [esi + 0x28]
push ecx
push edx
push 0
lea eax, [esi + 0x34]
push 0
push eax
call dword [0x1001b540]
mov ecx, dword [esi + 0x68]
mov edx, dword [ecx + 0x14]
shl edx, 1
push edx
call sub.MSVCRT.dll_void____cdecl_operator_new_unsigned_int_
mov dword [esi + 0x1c], eax
mov eax, dword [esi + 0x68]
xor edx, edx
add esp, 4
mov eax, dword [eax + 0x14]
mov dword [esi + 0x20], 0
div dword [esi + 0x2c]
pop edi
mov dword [esi + 0x74], eax
mov eax, esi
pop esi
mov ecx, dword [ebp - 0xc]
pop ebx
mov dword fs:[0], ecx
mov esp, ebp
pop ebp
ret 0xc
imul ebp, dword [ebp + 0x68], 0x76
jb 0x10019c99
insd dword es:[edi], dx
push 0x21777276
pop edx
push 0x7a
insb byte es:[edi], dx
and dword [edx + 0x6a], ebx
jp 0x10019c93
jnp 0x10019c8d
and cl, byte [di + 0x68]
imul esi, dword fs:[ebx + 0x76], 0x77
and cl, byte fs:[esi + 0x7a]
jo 0x10019c3b
add al, 1
add al, byte [edx]
add eax, dword [ecx]
add al, byte [ebx]
add eax, 0x5020302
add al, byte [ebx]
add dword [edx], eax
add eax, dword [0x5020302]
or byte [0x2030201], al
add eax, 0x2010403
add al, 3
add eax, 0x5040208
or byte [ecx], al
add al, byte [ebx + eax]
add dword [ecx], eax
or byte [ecx], al
add al, byte [ebx + eax]
add dword [ecx], eax
add eax, 0x2010202
add dword [ebx], eax
add eax, 0x2010202
add dword [ebx], eax
add eax, dword [ecx]
add al, byte [ebx]
add eax, 0x4020602
add dword [ebx], eax
add al, byte [ecx]
add al, byte [esi]
add al, byte [ebx]
add eax, dword [edx]
add dword [ecx], eax
add eax, dword [esi]
add al, byte [ecx]
add al, byte [esp + eax]
add al, 4
add eax, dword [ecx]
add al, byte [ebx]
add eax, 0x1030602
add al, byte [ebx]
add eax, 0x2050602
add eax, dword [0x2050602]
add al, byte [ecx]
add al, byte [ecx]
add al, byte [esi]
add al, byte [ebx]
add eax, dword [edx]
add dword [ecx], eax
add eax, 0x2010202
add dword [edx], eax
add eax, dword [edx]
add eax, 0x2010403
add al, byte [ebx]
add dword [edx], eax
add eax, dword [0x5020302]
or byte [0x2030201], al
add eax, 0x2010403
add al, 3
add eax, 0x5040208
or byte [ecx], al
add al, byte [ebx + eax]
add dword [ecx], eax
or byte [ecx], al
add al, byte [ebx + eax]
add dword [ecx], eax
add eax, 0x2010202
add dword [ebx], eax
add eax, 0x2010202
add dword [ebx], eax
add eax, dword [ecx]
add al, byte [ebx]
add eax, 0x4020602
add dword [ebx], eax
add al, byte [ecx]
add al, byte [esi]
add al, byte [ebx]
add eax, dword [edx]
add dword [ecx], eax
add eax, dword [esi]
add al, byte [ecx]
add al, byte [esp + eax]
add eax, dword [ecx]
add al, byte [ebx]
add eax, 0x1030602
add al, byte [ebx]
add eax, 0x2050602
add al, byte [ecx]
add al, byte [ecx]
add al, byte [esi]
add al, byte [ebx]
add eax, dword [edx]
add dword [ecx], eax
add eax, 0x2010202
add dword [edx], eax
add eax, dword [edx]
add eax, 0x2010403
add al, byte [ebx]
add dword [edx], eax
add esp, dword [eax]
and byte [edx + 0x71], dl
insd dword es:[edi], dx
bound edi, qword [edx + 0x64]
insb byte es:[edi], dx
inc esp
push 0x6e
pushal
jo 0x10019d6b
pop ebp
dec eax
jbe 0x10019db7
jo 0x10019da4
push edx
jae 0x10019dc0
push 0x76677d68
das
bound esi, qword [ecx + 0x65]
add al, 3
add dword [ecx], eax
add eax, 0x2010202
add dword [ebx], eax
add eax, 0x2010202
add dword [edx], eax
add dword [ebx], eax
add eax, dword [ecx]
add al, byte [ebx]
add eax, 0x4020602
add dword [ebx], eax
add al, byte [ecx]
add al, byte [esi]
add al, byte [ebx]
add eax, dword [edx]
add dword [ecx], eax
add eax, dword [esi]
add al, byte [ecx]
add al, byte [esp + eax]
add eax, dword [ecx]
add al, byte [ebx]
add eax, 0x1030602
add al, byte [ebx]
add eax, 0x2050602
add al, byte [ecx]
add al, byte [ecx]
add al, byte [esi]
add al, byte [ebx]
add eax, dword [edx]
add dword [ecx], eax
add eax, 0x2010202
add al, byte [ecx]
add dword [0x2010202], eax
add dword [edx], eax
add eax, dword [edx]
add eax, 0x2010403
add al, byte [ebx]
add al, byte [0x2010403]
add al, byte [ebx]
add dword [edx], eax
add eax, dword [0x5020302]
or byte [0x2030201], al
add eax, 0x2030201
add eax, 0x2010403
add al, 3
add eax, 0x5040208
or byte [ecx], al
add al, byte [ebx + eax]
add dword [ecx], eax
or byte [ecx], al
add al, byte [ebx + eax]
add dword [ecx], eax
add eax, 0x2010202
add dword [ebx], eax
add eax, 0x2010202
add dword [ebx], eax
add eax, dword [ecx]
add al, byte [ebx]
add eax, 0x4020602
add dword [ebx], eax
add al, byte [ecx]
add al, byte [esi]
add al, byte [ebx]
add eax, dword [edx]
add dword [ecx], eax
add eax, dword [esi]
add al, byte [ecx]
add al, byte [esp + eax]
add eax, dword [ecx]
add al, byte [ebx]
add eax, 0x1030602
add al, byte [ebx]
add eax, 0x2050602
add al, byte [ecx]
add al, byte [ecx]
add al, byte [esi]
add al, byte [ebx]
add eax, dword [edx]
add dword [ecx], eax
add eax, 0x2010202
add dword [edx], eax
add eax, dword [edx]
add eax, 0x2010403
add al, byte [ebx]
add dword [edx], eax
add eax, dword [0x5020302]
or byte [0x30401], al
add byte [esi + 0x4d], bh
jle 0x10019e93
dec eax
jp 0x10019e49
add byte [eax], al
add byte [eax + 0x41], cl
dec eax
inc ecx
push edx
inc esp
push edi
inc ecx
push edx
inc ebp
pop esp
inc esp
inc ebp
push ebx
inc ebx
push edx
dec ecx
push eax
push esp
dec ecx
dec edi
dec esi
pop esp
push ebx
jns 0x10019ed7
je 0x10019ecb
insd dword es:[edi], dx
pop esp
inc ebx
outsb dx, byte gs:[esi]
je 0x10019edf
popal
insb byte es:[edi], dx
push eax
jb 0x10019ee1
arpl word [ebp + 0x73], sp
jae 0x10019ee6
jb 0x10019ed5
xor byte [eax], al
add byte [edx], bh
add byte [eax], al
add byte [edi + 0x6c], al
inc edi
insb byte es:[edi], dx
outsd dx, dword [esi]
bound esp, qword [ecx + 0x6c]
pop esp
dec esi
je 0x10019eea
and eax, 0x64
push esp
dec edi
pop eax
dec eax
dec edx
and byte [ebp + 0x59], cl
dec esp
dec edi
push esi
inc ebp
add byte [eax], al
add byte [eax], al
push ebx
inc edx
popal
arpl word [ebx + 0x75], bp
jo 0x10019ef9
jb 0x10019f14
jbe 0x10019f16
insb byte es:[edi], dx
add byte gs:[bx + si], al
add byte [ebx + 0x65], dl
push ebx
push edx
jae 0x10019f2e
outsd dx, dword [esi]
jb 0x10019f22
push eax
jb 0x10019f29
jbe 0x10019f2b
insb byte es:[edi], dx
add byte gs:[bx + si], al
push ebx
jb 0x10019f42
jbe 0x10019f36
imul esp, dword [ebx + 0x65], 0x6c6c44
add byte [0x61505c73], ah
and eax, 0x61505c73
arpl word [ebp + 0x44], sp
insb byte es:[edi], dx
insb byte es:[edi], dx
add byte [eax], al
and eax, 0x61505c73
jae 0x10019f33
push eax
popal
jb 0x10019f3c
insd dword es:[edi], dx
je 0x10019f44
jb 0x10019f54
add byte [eax], al
add byte [ebx + 0x4f], dl
push ebx
dec edi
inc esi
push esp
push edi
inc ecx
push edx
inc ebp
pop esp
and eax, 0x654e0064
dec esi
je 0x10019f21
push esp
insd dword es:[edi], dx
jo 0x10019f27
imul ebp, dword [esi + 0x69], 0
inc edi
je 0x10019f5b
imul ebp, dword [esi + 0x64], 0x4473776f
imul esi, dword [edx + 0x65], 0x726f7463
jns 0x10019f55
add byte [eax], al
add byte [eax], al
push ebx
pop ecx
push ebx
push esp
inc ebp
dec ebp
pop esp
inc ebx
jne 0x10019f94
jb 0x10019f95
jb 0x10019f89
outsb dx, byte gs:[esi]
outsb dx, byte [esi]
je 0x10019f6a
outsd dx, dword [esi]
outsb dx, byte [esi]
je 0x10019f9d
outsd dx, dword [esi]
insb byte es:[edi], dx
push ebx
je 0x10019f8d
push ebx
jb 0x10019fab
jb 0x10019fab
imul esp, dword [ebx + 0x65], 0x5c73
arpl word [ebp + 0x73], sp
pop esp
add byte [eax], al
and eax, 0x73000073
jae 0x10019fb1
jne 0x10019fab
outsd dx, dword [esi]
jne 0x10019f47
add byte [ebx + 0x4f], dl
push ebx
dec edi
inc esi
push esp
push edi
inc ecx
push edx
inc ebp
pop esp
dec ebp
imul esp, dword [ebx + 0x72], 0x666f736f
je 0x10019fb7
jb 0x10019fc5
outsd dx, dword [esi]
jae 0x10019fc7
je 0x10019fb7
push edi
imul ebp, dword [esi + 0x64], 0x2073776f
dec esi
push esp
pop esp
inc ebx
jne 0x10019fdb
jb 0x10019fd0
outsb dx, byte gs:[esi]
outsb dx, byte [esi]
je 0x10019fc4
jb 0x10019fe4
imul ebp, dword [edi + 0x6e], 0x6376535c
dec eax
outsd dx, dword [esi]
jae str.1.1.4
add byte [eax], al
add byte [eax], al
pop esp
push eax
popal
jb 0x10019fe6
insd dword es:[edi], dx
je 0x10019fee
jb 0x10019ffe
add byte [0x74737953], ah
and eax, 0x74737953
insd dword es:[edi], dx
push ebx
jns 0x1001a003
je 0x10019ff7
insd dword es:[edi], dx
push edx
outsd dx, dword [esi]
outsd dx, dword [esi]
je 0x10019fbd
pop esp
push ebx
jns 0x1001a00f
je 0x1001a003
insd dword es:[edi], dx
insd dword es:[edi], dx
xor esi, dword [edx]
pop esp
jae 0x1001a01a
arpl word [eax + 0x6f], bp
jae 0x1001a01d
js 0x1001a012
js 0x1001a012
and byte [0x6f73206b], ch
jne 0x1001a01c
outsd dx, dword [esi]
jne str.Mjjxhj__Bjnl
add byte [ebp + 0x6a], cl
dec ebp
push 0x6a
js 0x1001a025
push 0x5f
pop edi
inc edx
dec ebp
push 0x6a
js 0x1001a025
push 0x5f
pop edi
inc edx
push 0x6e
insb byte es:[edi], dx
add byte [eax], al
add byte [eax], al
inc edi
je 0x1001a019
add byte [eax], al
add byte [edi + 0x65], al
inc edi
je 0x1001a019
outsd dx, dword [esi]
jne 0x1001a03c
inc esi
imul ebp, dword [ebp + 0x4e], 0x41656d61
add byte [eax], al
or al, byte [eax]
add byte [eax], al
arpl word [edx], di
add byte [edx], cl
add byte [eax], al
add byte [ebx + 0x3a], ah
arpl word [edx], di
pop esp
push edi
imul ebp, dword [esi + 0x5f], 0x692e6a6c
outsb dx, byte [esi]
imul eax, dword [eax], 0x2e310000
xor dword [esi], ebp
pop edi
insb byte es:[edi], dx
push 0x2e
imul ebp, dword [esi + 0x69], 0x31000000
xor dword [esi], ebp
xor dword [esi], ebp
add byte [eax], al
xor dword [esi], ebp
xor dword [esi], ebp
xor al, 0
add byte [eax], al
outsb dx, byte [esi]
and byte fs:[ecx + ebp*2 + 0x63], ah
add byte [esi + 0x65], ch
outsb dx, byte [esi]
and byte fs:[ecx + ebp*2 + 0x63], ah
imul esp, dword [ebx + 0x74], 0x616e6f69
je 0x1001a06b
outsd dx, dword [esi]
outsb dx, byte [esi]
popal
jb 0x1001a080
add byte [ecx + 0x6e], ch
imul ebp, dword [esi + 0x63], 0x6572726f
arpl word [eax + 0x64], si
popal
popal
je 0x1001a077
and byte [ebx + 0x68], ah
arpl word gs:[ebx], bp
arpl word [ebx], bp
add byte [eax], al
add byte [eax], al
imul ebp, dword [esi + 0x63], 0x6572726f
add byte [eax], al
add byte [ecx + 0x6e], ch
invalid
outsb dx, byte [esi]
arpl word [edi + 0x72], bp
jb 0x1001a08c
arpl word [eax + 0x68], si
popal
jb 0x1001a051
arpl word [eax + 0x65], bp
arpl word [ebx], bp
add byte [ecx + 0x6e], ch
invalid
outsb dx, byte [esi]
jbe 0x1001a09d
insb byte es:[edi], dx
imul esp, dword [eax + 0x77], 0x6f646e69
ja 0x1001a067
jae 0x1001a0b2
jp 0x1001a0b0
add byte [ebp + 0x6e], dh
jne 0x1001a0bc
imul ebp, dword [esi + 0x6f], 0x77
outsb dx, byte [esi]
ja 0x1001a0c1
and byte [ebx + 0x6f], ah
insd dword es:[edi], dx
jo 0x1001a0cb
jae 0x1001a0cf
imul ebp, dword [edi + 0x6e], 0x74656d20
push 0x646f
invalid
add al, dh
lahf
add dword [eax], edx
imul ebp, dword [esi + 0x76], 0x64696c61
and byte [edx + 0x69], ah
je 0x1001a098
adc byte [ecx + 0x6e], ch
invalid
outsb dx, byte [esi]
jbe 0x1001a0d1
insb byte es:[edi], dx
imul esp, dword [eax + 0x62], 0x6c207469
bound ebp, qword [ecx + 0x74]
and byte [ebp + 0x6e], ch
insb byte es:[edi], dx
outsb dx, byte gs:[esi]
je 0x1001a0e6
and byte [edx + 0x65], dh
jo 0x1001a0e8
jo 0x1001a0e8
popal
je 0x1001a086
add byte [eax], al
je 0x1001a0f9
outsd dx, dword [esi]
and byte [ebp + 0x61], ch
insd dword es:[edi], dx
popal
outsb dx, byte [esi]
jns 0x1001a0b1
insb byte es:[edi], dx
outsb dx, byte gs:[esi]
je 0x1001a0ff
and byte [edi + 0x72], ch
and byte [ecx + ebp*2 + 0x73], ah
je 0x1001a101
outsd dx, dword [esi]
jb 0x1001a0bb
imul esi, dword fs:[ebx + 0x74], 0x65636e61
and byte [ebx + 0x79], dh
jae 0x1001a113
popal
outsb dx, byte [esi]
arpl word [ebp + 0x20], sp
jae 0x1001a11f
insd dword es:[edi], dx
bound ebp, qword [edi + 0x6c]
jae str.invalid_stored_block_lengths
imul ebp, dword [esi + 0x76], 0x64696c61
and byte [ebx + 0x74], dh
insb byte es:[edi], dx
imul esp, dword [eax + 0x73], 0x65726f74
and byte fs:[ebx + 0x74], dh
outsd dx, dword [esi]
jb 0x1001a11e
and byte fs:[edx + 0x6c], ah
outsd dx, dword [esi]
arpl word [ebx + 0x20], bp
bound ebp, qword [edi + ebp*2 + 0x63]
imul esp, dword [eax], 0x6c
insb byte es:[edi], dx
outsb dx, byte gs:[esi]
je 0x1001a12f
jae 0x1001a0c9
add byte [eax], al
add byte [ecx + 0x6e], ch
invalid
outsb dx, byte [esi]
jbe 0x1001a131
popal
insb byte es:[edi], dx
imul esp, dword [eax + 0x62], 0x6b636f6c
and byte [ecx + edi*2 + 0x70], dh
add byte gs:[eax], al
clc
lahf
add dword [eax], edx
insb byte es:[edi], dx
mov eax, dword [0xb5f01001]
add dword [eax], edx
pushal
mov eax, dword [0xa1501001]
add dword [eax], edx
inc esp
mov eax, dword [0xa1301001]
add dword [eax], edx
and byte [ecx - 0x5ef7efff], ah
add dword [eax], edx
invalid
add dword [eax], edx
invalid
mov eax, dword [0xa1201001]
add dword [eax], edx
or byte [ecx - 0x4a0fefff], ah
adc byte [eax], cl
mov eax, dword [0xb5f01001]
add dword [eax], edx
imul ebp, dword [esi + 0x63], 0x61706d6f
je 0x1001a17a
bound ebp, qword [ebp + 0x20]
jbe 0x1001a17c
and byte gs:[esi + 0x65], dh
jb 0x1001a18c
imul ebp, dword [edi + 0x6e], 0
add byte [eax], al
add byte [edx + 0x75], ah
bound esi, qword [ebp + 0x66]
jb 0x1001a147
bound esi, qword [ebp + 0x66]
jb 0x1001a147
jb 0x1001a19c
outsd dx, dword [esi]
jb 0x1001a12d
add byte [eax], al
add byte [ecx + 0x6e], ch
invalid
outsb dx, byte [esi]
outsb dx, byte [esi]
jae 0x1001a1a9
imul sp, word [ebx + 0x69], 0x6e65
je 0x1001a15d
insd dword es:[edi], dx
insd dword es:[edi], dx
outsd dx, dword [esi]
jb str.invalid_distance_code
add byte [ecx + 0x74], ah
popal
invalid
popal
and byte [ebp + 0x72], ah
jb str.invalid_distance_code
jb 0x1001a14f
add byte [ebx + 0x74], dh
jae 0x1001a1c6
jb 0x1001a1b9
popal
insd dword es:[edi], dx
and byte [ebp + 0x72], ah
jb 0x1001a1ca
jb 0x1001a15d
add byte [eax], al
add byte [esi + 0x69], ah
imul bp, word [ebp + 0x20], 0x7265
jb 0x1001a1d8
jb 0x1001a16b
add byte [ebx + 0x74], dh
jae 0x1001a1e2
jb 0x1001a1d5
popal
insd dword es:[edi], dx
and byte [ebp + 0x6e], ah
add byte fs:[eax], al
or byte [ebp + 1], ah
adc byte [ebx + 0x1011001], bh
add byte [eax], al
push ds
add dword [eax], edx
mov esp, 0x1100163
add dword [eax], eax
add byte [esi], bl
add dword [eax], eax
add byte [edi], cl
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax + 0x30100169], cl
add byte [eax], al
add byte [eax], al
mov byte [ecx + 1], ch
adc byte [eax], dh
add dword fs:[eax], edx
add byte [eax], al
add byte [eax], al
push ds
add byte [eax], al
add byte [edi], cl
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax + 0x100164], ch
add byte [eax], al
add byte [ebx], dl
add byte [eax], al
add byte [edi], al
add byte [eax], al
add byte [ecx + 0x6e], ch
invalid
outsb dx, byte [esi]
jbe 0x1001a221
imul ebp, dword [esi + 0x76], 0x64696c61
and byte [ecx + ebp*2 + 0x73], ah
je 0x1001a22a
insb byte es:[edi], dx
imul esp, dword [eax + 0x64], 0x61747369
outsb dx, byte [esi]
arpl word [ebp + 0x20], sp
arpl word [edi + 0x64], bp
add byte gs:[eax], al
add byte [ecx + 0x6e], ch
invalid
outsb dx, byte [esi]
outsb dx, byte [esi]
jbe 0x1001a239
insb byte es:[edi], dx
imul esp, dword [eax + 0x6c], 0x72657469
popal
insb byte es:[edi], dx
das
insb byte es:[edi], dx
outsb dx, byte gs:[esi]
je 0x1001a252
and byte [ebx + 0x6f], ah
add byte gs:[ecx], cl
add byte [eax], al
add byte [0x60000000], al
pop es
add byte [eax], al
add byte [ecx], al
add byte [eax], al
add byte [eax], cl
add byte [eax], al
push eax
add byte [eax], al
add byte [eax], al
or byte [eax], al
add byte [eax], dl
add byte [eax], al
add byte [eax + ecx], dl
add byte [ebx], dh
add byte [eax], al
push edx
pop es
add byte [eax], al
pop ds
add byte [eax], al
add byte [eax], al
or byte [eax], al
add byte [eax], dh
add byte [eax], al
add byte [eax], cl
add byte [eax], al
xor byte [eax], al
add byte [eax], al
add byte [ecx], cl
add byte [eax], al
rol byte [eax], 0
add byte [eax + 7], dl
pop es
add byte [eax], al
or al, byte [eax]
add byte [eax], al
add byte [eax], cl
add byte [eax], al
pushal
add byte [eax], al
add byte [eax], al
or byte [eax], al
add byte [eax], ah
add byte [eax], al
add byte [eax], al
or dword [eax], eax
add byte [eax], ah
add byte [eax], al
mov al, byte [pe_dos_header]
or byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
or byte [eax], al
add byte [eax], al
or byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [ecx], cl
add byte [eax], al
loopne 0x1001a276
add byte [eax], al
push eax
pop es
add byte [eax], al
push es
add byte [eax], al
add byte [eax], al
or byte [eax], al
add byte [eax], bl
add byte [eax], al
add byte [eax], cl
add byte [eax], al
sbb byte [eax], al
add byte [eax], al
add byte [ecx], cl
add byte [eax], al
nop
add byte [eax], al
add byte [ebx + 7], dl
add byte [eax], al
cmp eax, dword [eax]
add byte [eax], al
add byte [eax], cl
add byte [eax], al
js 0x1001a2a6
add byte [eax], al
add byte [eax], cl
add byte [eax], al
cmp byte [eax], al
add byte [eax], al
add byte [ecx], cl
add byte [eax], al
rol byte [eax], 1
add byte [eax], al
push ecx
pop es
add byte [eax], al
adc dword [eax], eax
add byte [eax], al
add byte [eax], cl
add byte [eax], al
push 0
or byte [eax], al
add byte [eax], ch
add byte [eax], al
add byte [eax], al
or dword [eax], eax
add byte [eax], dh
or byte [eax], al
add byte [eax], cl
add byte [eax], al
add byte [eax], al
or byte [eax], al
add byte [eax], cl
or byte [eax], al
add byte [eax], cl
add byte [eax], al
add byte [ecx], cl
add byte [eax], al
lock add byte [eax], al
add byte [eax + 7], dl
add byte [eax], al
add al, 0
add byte [eax], al
add byte [eax], cl
add byte [eax], al
push esp
add byte [eax], al
add byte [eax], al
or byte [eax], al
add byte [eax + eax], dl
add byte [eax], al
push ebp
or byte [eax], al
add bl, ah
add byte [eax], al
add byte [ebx + 7], dl
add byte [eax], al
sub eax, dword [eax]
add byte [eax], al
add byte [eax], cl
add byte [eax], al
je 0x1001a326
add byte [eax], al
add byte [eax], cl
add byte [eax], al
xor al, 0
add byte [eax], al
add byte [ecx], cl
add byte [eax], al
enter 0, 0
push ecx
pop es
add byte [eax], al
or eax, 0
or byte [eax], al
add byte [eax + eax], ah
add byte [eax], al
or byte [eax], al
add byte [eax + eax], ah
add byte [eax], al
add byte [ecx], cl
add byte [eax], al
test al, 0
add byte [eax], al
add byte [eax], cl
add byte [eax], al
add al, 0
add byte [eax], al
add byte [eax], cl
add byte [eax], al
test byte [eax], al
add byte [eax], al
add byte [eax], cl
add byte [eax], al
inc esp
add byte [eax], al
add byte [eax], al
or dword [eax], eax
add al, ch
add byte [eax], al
add byte [eax + 7], dl
add byte [eax], al
or byte [eax], al
add byte [eax], al
add byte [eax], cl
add byte [eax], al
pop esp
add byte [eax], al
add byte [eax], al
or byte [eax], al
add byte [eax + eax], bl
add byte [eax], al
add byte [ecx], cl
add byte [eax], al
cwde
add byte [eax], al
add byte [edi + eax], dl
add byte [ebx], dl
add byte [eax], al
add byte [eax], cl
add byte [eax], al
jl 0x1001a3a6
add byte [eax], al
add byte [eax], cl
add byte [eax], al
cmp al, 0
add byte [eax], al
add byte [ecx], cl
add byte [eax], al
fadd dword [eax]
add byte [eax], al
push edx
pop es
add byte [eax], al
pop ss
add byte [eax], al
add byte [eax], al
or byte [eax], al
add byte [eax + eax], ch
add byte [eax], al
or byte [eax], al
add byte [eax + eax], ch
add byte [eax], al
add byte [ecx], cl
add byte [eax], al
mov eax, 0
or byte [eax], al
add byte [eax + eax], cl
add byte [eax], al
add byte [eax], cl
add byte [eax], al
mov word [eax], es
add byte [eax], al
add byte [eax], cl
add byte [eax], al
dec esp
add byte [eax], al
add byte [eax], al
or dword [eax], eax
add al, bh
add byte [eax], al
add byte [eax + 7], dl
add byte [eax], al
add eax, dword [eax]
add byte [eax], al
add byte [eax], cl
add byte [eax], al
push edx
add byte [eax], al
add byte [eax], al
or byte [eax], al
add byte [edx], dl
add byte [eax], al
add byte [ebp + 8], dl
add byte [eax], al
mov dword [0x53000000], eax
pop es
add byte [eax], al
and eax, dword [eax]
add byte [eax], al
add byte [eax], cl
add byte [eax], al
jb 0x1001a426
add byte [eax], al
add byte [eax], cl
add byte [eax], al
xor al, byte [eax]
add byte [eax], al
add byte [ecx], cl
add byte [eax], al
les eax, [eax]
add byte [eax], al
push ecx
pop es
add byte [eax], al
or eax, dword [eax]
add byte [eax], al
add byte [eax], cl
add byte [eax], al
bound eax, qword [eax]
add byte [eax], al
add byte [eax], cl
add byte [eax], al
and al, byte [eax]
add byte [eax], al
add byte [ecx], cl
add byte [eax], al
movsb byte es:[edi], byte [esi]
add byte [eax], al
add byte [eax], al
or byte [eax], al
add byte [edx], al
add byte [eax], al
add byte [eax], al
or byte [eax], al
add byte [edx], al
or byte [eax], al
add byte [edx], al
add byte [eax], al
add byte [ecx], cl
add byte [eax], al
in al, 0
add byte [eax], al
push eax
pop es
add byte [eax], al
pop es
add byte [eax], al
add byte [eax], al
or byte [eax], al
add byte [edx], bl
add byte [eax], al
add byte [eax], cl
add byte [eax], al
sbb al, byte [eax]
add byte [eax], al
add byte [ecx], cl
add byte [eax], al
xchg esp, eax
add byte [eax], al
add byte [edi + eax], dl
add byte [ebx], al
add byte [eax], al
add byte [eax], cl
add byte [eax], al
jp 0x1001a4a6
add byte [eax], al
add byte [eax], cl
add byte [eax], al
cmp al, byte [eax]
add byte [eax], al
add byte [ecx], cl
add byte [eax], al
aam 0
add byte [eax], al
push edx
pop es
add byte [eax], al
adc eax, dword [eax]
add byte [eax], al
add byte [eax], cl
add byte [eax], al
push 0
add byte [eax], al
add byte [eax], cl
add byte [eax], al
sub al, byte [eax]
add byte [eax], al
add byte [ecx], cl
add byte [eax], al
mov ah, 0
add byte [eax], al
add byte [eax], cl
add byte [eax], al
or al, byte [eax]
add byte [eax], al
add byte [eax], cl
add byte [eax], al
mov al, byte [eax]
add byte [eax], al
add byte [eax], cl
add byte [eax], al
dec edx
add byte [eax], al
add byte [eax], al
or dword [eax], eax
add ah, dh
add byte [eax], al
add byte [eax + 7], dl
add byte [eax], al
add eax, 0
or byte [eax], al
add byte [esi], dl
add byte [eax], al
add byte [eax], cl
add byte [eax], al
push ss
add byte [eax], al
add al, al
or byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [ebx + 7], dl
add byte [eax], al
xor eax, dword [eax]
add byte [eax], al
add byte [eax], cl
add byte [eax], al
jbe 0x1001a526
add byte [eax], al
add byte [eax], cl
add byte [eax], al
add byte ss:[eax], al
add byte [eax], al
or dword [eax], eax
add ah, cl
add byte [eax], al
add byte [ecx + 7], dl
add byte [eax], al
sldt word [eax]
add byte [eax], al
or byte [eax], al
add byte [esi], ah
add byte [eax], al
add byte [eax], cl
add byte [eax], al
add byte es:[eax], al
add byte [eax], al
or dword [eax], eax
add byte [eax + eax + 0x8000000], ch
add byte [eax], al
push es
add byte [eax], al
add byte [eax], al
or byte [eax], al
add byte [esi], al
or byte [eax], al
add byte [esi], al
add byte [eax], al
add byte [ecx], cl
add byte [eax], al
in al, dx
add byte [eax], al
add byte [eax + 7], dl
add byte [eax], al
or dword [eax], eax
add byte [eax], al
add byte [eax], cl
add byte [eax], al
pop esi
add byte [eax], al
add byte [eax], al
or byte [eax], al
add byte [esi], bl
add byte [eax], al
add byte [eax], al
or dword [eax], eax
add byte [eax + eax + 0x7540000], bl
add byte [eax], al
arpl word [eax], ax
add byte [eax], al
add byte [eax], cl
add byte [eax], al
jle 0x1001a5a6
add byte [eax], al
add byte [eax], cl
add byte [eax], al
add byte ds:[eax], al
add byte [eax], al
or dword [eax], eax
add ah, bl
add byte [eax], al
add byte [edx + 7], dl
add byte [eax], al
sbb eax, dword [eax]
add byte [eax], al
add byte [eax], cl
add byte [eax], al
outsb dx, byte [esi]
add byte [eax], al
add byte [eax], al
or byte [eax], al
add byte [esi], ch
add byte [eax], al
add byte [eax], al
or dword [eax], eax
add byte [eax + eax + 0x8000000], bh
add byte [eax], al
push cs
add byte [eax], al
add byte [eax], al
or byte [eax], al
add byte [esi], cl
or byte [eax], al
add byte [esi], cl
add byte [eax], al
add byte [ecx], cl
add byte [eax], al
cld
add byte [eax], al
add byte [eax + 7], ah
add byte [eax], al
add byte [ecx], al
add byte [eax], al
add byte [eax], cl
add byte [eax], al
push ecx
add byte [eax], al
add byte [eax], al
or byte [eax], al
add byte [ecx], dl
add byte [eax], al
add byte [ebp + 8], dl
add byte [eax], al
add dword [eax], 0
add byte [edx + 7], dl
add byte [eax], al
pop ds
add byte [eax], al
add byte [eax], al
or byte [eax], al
add byte [ecx], dh
add byte [eax], al
add byte [eax], cl
add byte [eax], al
xor dword [eax], eax
add byte [eax], al
add byte [ecx], cl
add byte [eax], al
ret 0