Function at 0x10009d60
Capabilities:
Access peb ldr_data
Get kernel32 base address

Disassembly:
push 0xffffffffffffffff
push 0x100153de
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x44
push ebx
push ebp
push esi
mov esi, ecx
push edi
mov dword [esp + 0x10], esi
mov dword [esi + 0x88], 0x1001654c
mov dword [esp + 0x14], 0x7f8a
mov dword [esp + 0x18], 0x7f00
mov dword [esp + 0x1c], 0x7f03
mov dword [esp + 0x20], 0x7f89
mov dword [esp + 0x24], 0x7f8b
mov dword [esp + 0x28], 0x7f01
mov dword [esp + 0x2c], 0x7f81
mov dword [esp + 0x30], 0x7f88
mov dword [esp + 0x34], 0x7f80
mov dword [esp + 0x38], 0x7f86
mov dword [esp + 0x3c], 0x7f83
mov dword [esp + 0x40], 0x7f85
mov dword [esp + 0x44], 0x7f82
mov dword [esp + 0x48], 0x7f84
mov dword [esp + 0x4c], 0x7f04
mov dword [esp + 0x50], 0x7f02
lea ebx, [esp + 0x14]
lea edi, [esi + 0xcc]
mov ebp, 0x10
mov eax, dword [ebx]
push eax
push 0
mov dword [edi - 0x40], eax
call dword [sym.imp.USER32.dll_LoadCursorA]
mov dword [edi], eax
add ebx, 4
add edi, 4
dec ebp
jne 0x10009e1b
mov ecx, dword [esp + 0x64]
xor ebp, ebp
mov dword [esp + 0x5c], ebp
mov dword [esi], 0x10016550
lea eax, [ecx - 1]
cmp eax, 0x1f
ja case.0x10009e54.2
xor edx, edx
mov dl, byte [eax + 0x1000a008]
jmp dword [edx*4 + 0x1000a000]
mov dword [esi + 0x70], ecx
jmp 0x10009e67
mov dword [esi + 0x70], 8
mov ecx, esi
call fcn.1000a6f0
test al, al
jne 0x10009e88
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
mov dword [esi + 0x10c], eax
call dword [sym.imp.USER32.dll_GetDC]
mov dword [esi + 0x44], eax
mov dword [esi + 0x10], 0xcc0020
mov byte [esi + 4], 1
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov ecx, dword [esp + 0x6c]
mov dword [esi + 0x14], eax
mov eax, 0x3e8
xor edx, edx
div ecx
mov edi, dword [sym.imp.USER32.dll_GetSystemMetrics]
push ebp
mov dword [esi + 8], ecx
mov dword [esi + 0x18], eax
mov al, byte [esp + 0x6c]
mov byte [esi + 0xc], al
call edi
push 1
mov dword [esi + 0x28], eax
call edi
mov dword [esi + 0x2c], eax
mov eax, 0x20
cdq
idiv dword [esi + 0x70]
mov ecx, dword [esi + 0x44]
mov edi, dword [sym.imp.GDI32.dll_CreateCompatibleDC]
push ecx
mov dword [esi + 0x30], ebp
mov byte [esi + 0x24], al
call edi
mov edx, dword [esi + 0x44]
mov dword [esi + 0x4c], eax
push edx
call edi
push ebp
mov dword [esi + 0x80], eax
call edi
push ebp
mov dword [esi + 0x48], eax
call edi
mov ecx, dword [esi + 0x70]
mov dword [esi + 0x50], eax
mov eax, dword [esi + 0x28]
push 1
lea edi, [esi + 0x5c]
lea ebx, [esi + 0x60]
push eax
push ecx
mov ecx, esi
mov dword [edi], ebp
mov dword [ebx], ebp
call fcn.1000a410
mov edx, dword [esi + 0x2c]
mov ecx, dword [esi + 0x70]
mov dword [esi + 0x64], eax
mov eax, dword [esi + 0x28]
push edx
push eax
push ecx
mov ecx, esi
call fcn.1000a410
mov edx, dword [esi + 0x28]
mov dword [esi + 0x68], eax
mov eax, dword [esi + 0x70]
push 1
push edx
push eax
mov ecx, esi
call fcn.1000a410
mov ecx, dword [esi + 0x64]
mov edx, dword [esi + 0x44]
push ebp
push ebp
push edi
mov edi, dword [sym.imp.GDI32.dll_CreateDIBSection]
push ebp
push ecx
push edx
mov dword [esi + 0x6c], eax
call edi
push ebp
mov dword [esi + 0x54], eax
push ebp
mov eax, dword [esi + 0x68]
mov ecx, dword [esi + 0x44]
push ebx
push ebp
push eax
push ecx
call edi
mov ecx, dword [esi + 0x44]
push ebp
lea edx, [esi + 0x78]
mov dword [esi + 0x58], eax
mov eax, dword [esi + 0x68]
push ebp
push edx
push ebp
push eax
push ecx
call edi
mov edx, dword [esi + 0x58]
mov edi, dword [sym.imp.GDI32.dll_SelectObject]
mov dword [esi + 0x84], eax
mov eax, dword [esi + 0x4c]
push edx
push eax
call edi
mov ecx, dword [esi + 0x54]
mov edx, dword [esi + 0x48]
push ecx
push edx
call edi
mov eax, dword [esi + 0x84]
mov ecx, dword [esi + 0x80]
push eax
push ecx
call edi
mov edx, dword [esi + 0x2c]
mov eax, dword [esi + 0x28]
push edx
push eax
push ebp
lea ecx, [esi + 0x34]
push ebp
push ecx
call dword [sym.imp.USER32.dll_SetRect]
mov edx, dword [esi + 0x68]
mov eax, dword [edx + 0x14]
shl eax, 1
push eax
call sub.MSVCRT.dll_void____cdecl_operator_new_unsigned_int_
mov ecx, dword [esi + 0x68]
mov dword [esi + 0x1c], eax
xor edx, edx
add esp, 4
mov eax, dword [ecx + 0x14]
mov ecx, dword [esp + 0x54]
div dword [esi + 0x2c]
mov dword [esi + 0x20], ebp
pop edi
mov dword [esi + 0x74], eax
mov eax, esi
pop esi
pop ebp
pop ebx
mov dword fs:[0], ecx
add esp, 0x50
ret 0xc
popal
je 0x1001a178
jae 0x1001a105
add byte [eax], al
add byte [ecx + 0x44], al
inc ecx
inc esp
push esi
inc ecx
push eax
dec ecx
xor esi, dword [edx]
insb byte es:[edi], dx
insb byte es:[edi], dx
add byte [eax], al
add byte [eax], al
push edx
imul esi, dword gs:[bp + di + 0x74], 0x65537265
jb 0x1001a19a
imul esp, dword [ebx + 0x65], 0x6c727443
dec eax
popal
outsb dx, byte [esi]
insb byte es:[edi], dx
jb 0x1001a174
add byte [edi + 0x69], dl
push edi
invalid
outsb dx, byte [esi]
push ebx
je 0x1001a19b
xor byte [esp + eax*2 + 0x65], bl
popaw
jne 0x1001a1ae
je 0x1001a144
and byte [eax], al
add byte [eax], al
and eax, 0x22000031
and eax, 0x73250031
and eax, 0x68735c73
insb byte es:[edi], dx
insb byte es:[edi], dx
pop esp
outsd dx, dword [esi]
jo 0x1001a1c1
outsb dx, byte [esi]
pop esp
arpl word [edi + 0x6d], bp
insd dword es:[edi], dx
popal
outsb dx, byte [esi]
add byte fs:[eax], al
add byte [esi], ch
add byte cs:[eax], al
add byte cs:[eax], al
add byte [0x2e2a5c73], ah
and eax, 0x2e2a5c73
sub al, byte [eax]
sub al, byte cs:[eax]
add byte [0x73255c73], ah
and eax, 0x73255c73
add byte [eax], al
add byte [0x25732573], ah
and eax, 0x25732573
jae 0x1001a187
add byte [0x2a732573], ah
and eax, 0x2a732573
sub al, byte cs:[eax]
pop esp
add byte [eax], al
add byte [eax + 0x72], dl
push eax
jb 0x1001a206
arpl word [ebp + 0x73], sp
jae 0x1001a20b
outsd dx, dword [esi]
jb 0x1001a1ec
popal
insd dword es:[edi], dx
push ebx
je 0x1001a216
imul ebp, dword [esi + 0x67], 0x484d7e00
jle 0x1001a1f7
dec eax
jp 0x1001a1ad
add byte [eax], al
add byte [eax + 0x41], cl
dec eax
inc ecx
add byte [eax], al
dec eax
inc ecx
push edx
inc esp
push edi
inc ecx
push edx
inc ebp
pop esp
inc esp
inc ebp
push ebx
inc ebx
push edx
dec ecx
push eax
push esp
dec ecx
dec edi
dec esi
pop esp
push ebx
jns 0x1001a23b
je 0x1001a22f
insd dword es:[edi], dx
pop esp
inc ebx
outsb dx, byte gs:[esi]
je 0x1001a243
popal
insb byte es:[edi], dx
push eax
jb 0x1001a245
arpl word [ebp + 0x73], sp
jae 0x1001a24a
jb 0x1001a239
xor byte [eax], al
add byte [edx], dh
xor ch, byte [esi]
xor byte [esi], ch
xor byte [esi], ch
xor byte [eax], al
push edx
insd dword es:[edi], dx
outsd dx, dword [esi]
jbe 0x1001a253
push ebx
jb 0x1001a268
imul esp, dword [ebx + 0x65], 0x43504c28
push esp
push ebx
push esp
push edx
and byte [eax + esi*2 + 0x53], ch
jb 0x1001a27a
imul esp, dword [ebx + 0x65], 0x656d614e
sub dword [eax], eax
add byte [eax], al
add cl, cl
mov esi, 0xb2b0fdb3
xlatb
mov al, 0xce
les edi, [esi + edi*8 + 0xbaa3]
dec ecx
outsb dx, byte [esi]
jae 0x1001a298
popal
insb byte es:[edi], dx
insb byte es:[edi], dx
dec ebp
outsd dx, dword [esi]
jne 0x1001a298
add byte gs:[eax], al
add byte [ebx + 0x25], dh
jae 0x1001a257
pop esp
jae 0x1001a29a
arpl word [ecx + 0x76], bp
jb 0x1001a29f
push ebx
push ebx
pop esp
je 0x1001a283
push ebx
insb byte es:[edi], dx
outsd dx, dword [esi]
jb 0x1001a2b7
outsb dx, byte [esi]
outsd dx, dword [esi]
inc ebx
je 0x1001a2b6
jb 0x1001a2bd
jb 0x1001a2c1
jne 0x1001a290
inc ebx
pop esp
dec ebp
inc ebp
push esp
push ebx
pop ecx
push ebx
add byte [eax], al
add byte [eax], al
push edx
push ebx
je 0x1001a2b5
popal
insb byte es:[edi], dx
jne 0x1001a2c8
inc ebp
js 0x1001a28e
jae 0x1001a2dc
popal
jb 0x1001a2df
sub dword [eax], eax
add byte [eax], al
add byte [ecx + edi*2 + 0x70], dl
push esp
jns 0x1001a2e3
add byte gs:[eax], al
add byte [eax], al
push ebx
pop ecx
push ebx
push esp
inc ebp
dec ebp
pop esp
inc ebx
jne 0x1001a2f4
jb 0x1001a2e9
outsb dx, byte gs:[esi]
outsb dx, byte [esi]
je 0x1001a2ca
outsd dx, dword [esi]
outsb dx, byte [esi]
je 0x1001a2fd
outsd dx, dword [esi]
insb byte es:[edi], dx
push ebx
inc ebp
je 0x1001a2ed
pop esp
push ebx
jb 0x1001a30b
imul esp, dword [ebx + 0x65], 0x5c73
jae 0x1001a2f6
add byte [eax], al
push edx
push ecx
push ecx
jne 0x1001a307
jb 0x1001a31d
push esi
popal
insb byte es:[edi], dx
jne 0x1001a30e
inc ebp
js 0x1001a2d4
push esp
jns 0x1001a31f
sub dword gs:[eax], eax
add byte [eax], al
push eax
add byte [eax], al
add byte [eax], al
pop esp
jae 0x1001a334
add byte [ebx + esi*2 + 0x79], bl
pop esp
jae 0x1001a334
jae 0x1001a329
outsd dx, dword [esi]
popal
popal
je 0x1001a2c4
iretd
int 0xea
mov cl, 0xcf
add byte [eax], al
add byte [eax], al
iretd
aad 0xdf
cmp al, byte [eax]
push eax
inc ebx
push edx
popal
je 0x1001a2fe
push ebp
jo 0x1001a345
popal
je 0x1001a349
add byte [eax], al
add byte [eax], al
inc ecx
jo 0x1001a35b
insb byte es:[edi], dx
imul esp, dword [ebx + 0x61], 0x6e6f6974
jae 0x1001a351
arpl word [ecx + 0x74], sp
imul ebp, dword [edi + 0x6e], 0x65695c73
js 0x1001a369
pop esp
imul esp, dword [ebp + 0x78], 0x726f6c70
js 0x1001a366
js 0x1001a369
insb byte es:[edi], dx
outsd dx, dword [esi]
jb 0x1001a362
js 0x1001a366
js 0x1001a366
pop esp
jae 0x1001a36c
insb byte es:[edi], dx
insb byte es:[edi], dx
pop esp
outsd dx, dword [esi]
jo str.SeDebugPrivilege
outsb dx, byte [esi]
pop esp
arpl word [edi + 0x6d], bp
outsd dx, dword [esi]
insd dword es:[edi], dx
insd dword es:[edi], dx
popal
outsb dx, byte [esi]
add byte fs:[eax], al
add byte [eax], al
push ebx
jns 0x1001a38e
je 0x1001a382
insd dword es:[edi], dx
add byte [eax], al
push ebx
arpl word gs:[ebp + 0x72], si
add byte [ebx + 0x65], dl
push ebx
arpl word gs:[ebp + 0x72], si
imul esi, dword [ecx + edi*2], 0x41000000
inc ecx
jo 0x1001a39f
add byte [eax], al
add byte [ecx + 0x70], al
inc ecx
jo 0x1001a39f
insb byte es:[edi], dx
insb byte es:[edi], dx
imul esp, dword [ebx + 0x61], 0x6e6f6974
add byte [ebp + 0x73], dh
jne 0x1001a3ad
jb 0x1001a33d
imul ebp, dword [edi + 0x6e], 0x65737500
jne 0x1001a3ad
jb 0x1001a33d
add byte [eax], al
add byte [edx + 0x65], dl
push edx
insd dword es:[edi], dx
popal
jb 0x1001a3b1
imul eax, dword [eax], 0
add byte [eax], al
into
les edi, [esi + edi*8 - 0x194b444e]
aam 0xda
add byte [eax], al
and eax, 0x616c5f73
fiadd dword [eax]
add byte [0x616c5f73], ah
and eax, 0x616c5f73
outsb dx, byte [esi]
imul ebp, dword cs:[bp + 0x69], 0x6d616e00
outsb dx, byte [esi]
popal
insd dword es:[edi], dx
imul ebp, dword cs:[esi + 0x69], 0x6d616e00
outsb dx, byte [esi]
popal
insd dword es:[edi], dx
insd dword es:[edi], dx
add byte gs:[eax], al
add byte [eax], al
imul esp, dword [ebx + 0x6f], 0x6e
add byte [ebx + 0x65], dl
push ebx
inc esp
arpl word [edi + 0x6e], bp
add byte [eax], al
add byte [eax], al
push ebx
inc esp
bound esi, qword gs:[ebp + 0x67]
push eax
jb 0x1001a3e3
jbe 0x1001a3e5
insb byte es:[edi], dx
add byte gs:[bx + si], al
add byte [eax], al
jae 0x1001a3ec
arpl word [edi + 0x6f], bx
jae 0x1001a3b9
insb byte es:[edi], dx
insb byte es:[edi], dx
add byte [eax], al
jae str._d.bak
arpl word [esi], bp
insb byte es:[edi], dx
insb byte es:[edi], dx
add byte [edi + 0x69], dh
ja 0x1001a403
outsb dx, byte [esi]
insb byte es:[edi], dx
outsd dx, dword [esi]
outsd dx, dword [si]
outsb dx, byte [esi]
js 0x1001a409
add byte [eax], al
add byte [eax], al
push edx
insd dword es:[edi], dx
outsd dx, dword [esi]
jbe 0x1001a413
push ebx
jb 0x1001a428
jbe 0x1001a41c
imul esp, dword [ebx + 0x65], 0x735f6d28
arpl word [ebp + 0x28], sp
insd dword es:[edi], dx
pop edi
jae 0x1001a42e
je 0x1001a42d
jb 0x1001a40f
push ebx
jb 0x1001a435
imul esp, dword [ebx + 0x65], 0x656d614e
sub dword [ebx], edi
add byte [eax], al
add byte [eax], al
push ebp
outsb dx, byte [esi]
dec ecx
outsb dx, byte [esi]
jae 0x1001a446
popal
insb byte es:[edi], dx
insb byte es:[edi], dx
push ebx
jb 0x1001a44f
imul esp, dword [ebx + 0x65], 0x2928
and eax, 0x6c645c73
insb byte es:[edi], dx
insb byte es:[edi], dx
arpl word [ecx + 0x63], sp
push 0x73255c65
add byte [eax], al
and eax, 0x6c642e73
and eax, 0x25000073
invalid
jae 0x1001a421
insb byte es:[edi], dx
insb byte es:[edi], dx
add byte [eax], al
and eax, 0x61622e64
imul eax, dword [eax], 0
mov bl, 0xcc
sal dl, 1
ret
dec dh
int1
ret
add byte [0x30255b0a], cl
or eax, 0x30255b0a
xor ah, byte [edi + ebp + 0x25]
xor byte [edx], dh
das
and eax, 0x2f643230
and eax, 0x2f643230
das
and eax, 0x30252064
xor ah, byte [edx + edi + 0x25]
xor byte [edx], dh
xor byte [edx], dh
cmp ah, byte fs:[0x3a643230]
and eax, 0x5d643230
cmp ah, byte fs:[0x5d643230]
pop ebp
pop ebp
and byte [eax], ch
and eax, 0xa0d2973
add byte [eax], al
pop ebp
add byte [eax], al
add byte [0x5f00000a], cl
pop edi
or al, byte [eax]
add byte [ebp], bl
add byte [eax], al
or eax, 0x5f00000a
pop edi
imul esp, dword [ecx + 0x73], 0x70
jb 0x1001a4bb
jb 0x1001a4bb
imul edi, dword [ecx], 0
push edx
inc ebp
inc edi
pop edi
inc edx
dec ecx
dec esi
inc ecx
push edx
pop ecx
add byte [eax], al
and eax, 0x7334322d
and byte [0x7335312d], ah
and byte [0x5200000a], cl
push edx
inc ebp
inc edi
pop edi
dec ebp
push ebp
dec esp
push esp
dec ecx
pop edi
push ebx
pop edx
add byte [eax], al
add byte [eax], al
and eax, 0x7334322d
and byte [0x7335312d], ah
and byte [eax], dh
js 0x1001a4ac
js 0x1001a4b1
and eax, 0xd202964
or al, byte [eax]
push edx
inc ebp
inc edi
pop edi
inc esp
push edi
dec edi
push edx
inc esp
add byte [eax], al
add byte [0x7334322d], ah
and eax, 0x7334322d
and byte [0x7335312d], ah
and byte [0xa0d2073], ah
add byte [eax], al
add byte [edx + 0x45], dl
push edx
inc ebp
or al, byte [eax]
add byte [eax], al
push edx
inc ebp
inc edi
pop edi
inc ebp
pop eax
push eax
inc ecx
dec esi
inc esp
pop edi
push ebx
pop edx
add byte [eax], al
add byte [edx + 0x45], dl
push edx
inc ebp
inc edi
pop edi
push ebx
pop edx
add byte [eax], al
pop ebx
and eax, 0xa0d5d73
add byte [eax], al
and eax, 0x44000064
inc esp
jae 0x1001a53b
jb 0x1001a543
jo 0x1001a550
imul ebp, dword [edi + 0x6e], 0x53595300
push ebx
pop ecx
push ebx
push esp
inc ebp
dec ebp
pop esp
inc ebx
jne 0x1001a55c
jb 0x1001a551
outsb dx, byte [esi]
je 0x1001a532
outsd dx, dword [esi]
outsb dx, byte [esi]
je 0x1001a565
outsd dx, dword [esi]
insb byte es:[edi], dx
push ebx
je 0x1001a555
push ebx
jb 0x1001a573
imul esp, dword [ebx + 0x65], 0x73255c73
add byte [eax], al
add byte [eax], al
dec esp
outsd dx, dword [esi]
arpl word [ecx + 0x6c], sp
push ebx
jns 0x1001a583
je 0x1001a577
insd dword es:[edi], dx
add byte [eax], ah
and byte [ebp + 0x6e], ah
and byte fs:[ebp + 0x6c], al
je 0x1001a584
push ebx
jb 0x1001a599
imul esp, dword [ebx + 0x65], 0x65440000
inc esp
insb byte es:[edi], dx
je 0x1001a593
push ebx
jb 0x1001a5a8
imul esp, dword [ebx + 0x65], 0x5c000000
pop esp
arpl word [ebp + 0x64], bp
js 0x1001a5a5
js 0x1001a5a5
add byte [eax], al
add byte [eax], al
jae 0x1001a5b9
add byte [ebx + 0x73], dh
jae 0x1001a5b9
arpl word gs:[edi + 0x72], bp
push eax
je 0x1001a5af
outsb dx, byte [esi]
imul ebp, dword [ebp + 0x72], 0x5465
insd dword es:[edi], dx
jb 0x1001a5b8
push esp
add byte [eax], al
add byte [eax], al
add byte [ecx + ebp*2 + 0x73], al
inc esp
invalid
jae 0x1001a5bf
outsd dx, dword [esi]
outsb dx, byte [esi]
add byte [eax], al
inc esp
imul esi, dword [ebx + 0x63], 0x656e6e6f
arpl word [esi + ecx*2 + 0x61], si
outsd dx, dword [esi]
outsb dx, byte [esi]
outsb dx, byte [esi]
arpl word gs:[esi + ecx*2 + 0x61], si
insd dword es:[edi], dx
push eax
imul esi, dword [eax + 0x65], 0x52454b00
dec ebx
inc ebp
push edx
dec esi
inc ebp
dec esp
xor esi, dword [edx]
insb byte es:[edi], dx
xor ch, byte [esi]
insb byte es:[edi], dx
insb byte es:[edi], dx
add byte [eax], al
add byte [eax], al
dec ebp
outsd dx, dword [esi]
jbe 0x1001a5e5
inc esi
imul ebp, dword [ebp + 0x45], 0x41004178
inc ecx
inc edx
inc ebp
inc ebp
js 0x1001a5c8
add byte [ecx + 0x42], al
inc ecx
inc edx
inc ebx
inc esp
inc ebp
inc esi
inc edi
dec eax
dec ecx
dec edx
dec ebx
dec esp
dec ebp
dec esi
dec edi
push eax
push ecx
push edx
push ebx
push esp
push ebp
push esi
push edi
pop eax
pop ecx
pop edx
popal
bound esp, qword [ebx + 0x64]
push 0x6a69
push 0x6a69
push 0x6c6b6a69
insd dword es:[edi], dx
imul ebp, dword [ebp + ebp*2 + 0x6e], 0x6f
outsb dx, byte [esi]
outsd dx, dword [esi]
jo 0x1001a624
jb 0x1001a628
je 0x1001a62c
jbe 0x1001a630
ja 0x1001a632
js str.http
jns 0x1001a636
jp 0x1001a5ed
xor byte [ecx], dh
xor dh, byte [ebx]
xor al, 0x35
aaa
cmp byte [ecx], bh
xor dword [edx], esi
xor esi, dword [esi + 0x39383736]
sub ebp, dword [edi]
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
push eax
inc ebx
push edx
popal
je 0x1001a629
je 0x1001a639
arpl word [eax + eax + 4], si
jnp 0x1001a646
popal
jo 0x1001a64f
jb 0x1001a648
jne 0x1001a648
sub eax, 0x7a386174
sub eax, 0x74633566
sub eax, 0x33303170
sub eax, 0x356c7234
arpl word [ebp + ebp + 0x70], si
xor dword [eax], esi
xor ebp, dword [0x356c7234]
xor byte [edi], dh
je 0x1001a636
imul esp, dword [ebx + 0x62], 0x7d36
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
int 0xf8
sal byte [ebx - 0x5e373e4a], cl
mov dl, 0xa2
mov ah, 0xa6
shr ch, 0xcd
ljmp 0xd6d7
in eax, dx
int 0xea
mov cl, 0xcf
add byte [eax], al
xlatb
salc
mov ah, 0xae
push 0xb6707474
je 0x1001a6a8
mov dh, 0xc1
enter 0xffffffffffffb3a1, 0xffffffffffffffac
ror eax, 0xa1
mov bl, 0xac
retf 0xb1
inc ecx
inc ecx
add byte [eax], al
add byte [eax], al
dec ebp
outsd dx, dword [esi]
jp 0x1001a6b9
imul ebp, dword [esp + ebp*2 + 0x61], 0x302e342f
and byte [eax], ch
arpl word [edi + 0x6d], bp
insb byte es:[edi], dx
insb byte es:[edi], dx
popal
das
xor al, 0x2e
xor byte [eax], ah
sub byte [ebx + 0x6f], ah
insd dword es:[edi], dx
jo 0x1001a6bf
je 0x1001a6c9
bound ebp, qword [ebp + 0x29]
add byte [eax], al
add byte [eax], al
dec ecx
outsb dx, byte [esi]
je 0x1001a6d1
jb 0x1001a6dc
je 0x1001a6c3
popal
inc esi
imul ebp, dword [ebp], 0x65000000
insb byte es:[edi], dx
imul eax, dword [esi + 0x64], 0x74526561
outsb dx, byte gs:[esi]
jb 0x1001a6ee
je 0x1001a6f9
dec ecx
add byte [eax], al
add byte [eax], al
inc ecx
insb byte es:[edi], dx
jb 0x1001a6e9
outsb dx, byte [esi]
jo 0x1001a6e7
je 0x1001a6ff
outsb dx, byte [esi]
jb 0x1001a702
je 0x1001a70d
dec ecx
add byte [eax], al
add byte [eax], al
insb byte es:[edi], dx
outsb dx, byte fs:[esi]
popal
dec eax
jae 0x1001a71c
insb byte es:[edi], dx
inc ebx
je 0x1001a716
outsb dx, byte [esi]
jb 0x1001a719
je 0x1001a724
dec ecx
add byte [esp + ebp*2 + 0x64], ch
insb byte es:[edi], dx
insb byte es:[edi], dx
push esp
insb byte es:[edi], dx
push esp
inc ebp
dec esi
dec ecx
dec esi
dec ecx
push edi
add byte [ecx + 0x6e], cl
dec ecx
outsb dx, byte [esi]
je 0x1001a72d
jb 0x1001a738
outsb dx, byte [esi]
je 0x1001a71c
jo 0x1001a734
outsb dx, byte [esi]
inc ecx
add byte [eax], al
add ch, cl
clc
sal byte [ebx - 0x5e373e4a], cl
mov dword [0x680000ba], eax
invalid
je 0x1001a757
jo 0x1001a758
cmp ch, byte [edi]
das
add byte [eax], al
add byte [eax], al
push 0x3a707474
das
add byte [eax], al
add byte [eax + 0x74], ch
invalid
invalid
je 0x1001a760
cmp ch, byte [edi]
das
add byte [eax + 0x6f], cl
dec eax
outsd dx, dword [esi]
jae 0x1001a76c
add byte [eax], al
add byte [eax], al
inc ecx
arpl word [ecx + ebp*2 + 0x76], si
and dh, al
add byte [eax], al
add byte [ecx + 0x63], al
inc ecx
invalid
je 0x1001a769
imul esi, dword [esi + 0x65], 0xb6f4c620
scasd eax, dword es:[edi]
into
les edi, [esi + edi*8 - 0x5e373e4a]
retf 0xb0a7
jbe 0x1001a767
and dh, al
hlt
enter 0xffffffffffffcaa1, 0xffffffffffffffa7
mov al, 0xdc
add byte [ebx + 0x74], dh
jae 0x1001a78a
jne 0x1001a77a
jo 0x1001a77b
popal
je 0x1001a784
add byte [eax], al
add byte [eax], al
and eax, 0x732573
add byte [eax], al
add byte [ebx + 0x4f], dl
push ebx
dec edi
add byte [eax], al
add byte [eax], al
push ebx
dec edi
inc esi
push esp
push edi
inc ecx
push edx
inc ebp
pop esp
dec ebp
imul esp, dword [ebx + 0x72], 0x666f736f
je 0x1001a797
jb 0x1001a7a5
jae 0x1001a7a7
je 0x1001a797
inc ecx
arpl word [ecx + ebp*2 + 0x76], si
and byte gs:[ebx + 0x65], dl
je 0x1001a7bb
jo 0x1001a7a4
dec ecx
outsb dx, byte [esi]
jae 0x1001a7c0
popal
insb byte es:[edi], dx
insb byte es:[edi], dx
and byte fs:[ebx + 0x6f], al
insd dword es:[edi], dx
jo 0x1001a7c6
outsb dx, byte [esi]
outsb dx, byte gs:[esi]
je 0x1001a7cf
pop esp
add byte [eax], al
add dh, dl
salc
fadd st(6)
hlt
int3
add dh, dl
salc
fdivr dword [eax - 0x4c41364c]
std
add byte [eax], al
add byte [eax], al
inc esp
insb byte es:[edi], dx
insb byte es:[edi], dx
inc ecx
dec esp
outsd dx, dword [esi]
outsb dx, byte [esi]
and ch, cl
retf
test byte [eax], 0
add byte [ebx + 0x6f], dl
push ebx
outsd dx, dword [esi]
je 0x1001a804
popal
jb 0x1001a7f5
pop esp
dec ebp
imul esp, dword [ebx + 0x72], 0x666f736f
je 0x1001a7f7
outsd dx, dword [esi]
je 0x1001a7f7
inc ecx
arpl word [ecx + ebp*2 + 0x76], si
and byte gs:[ebx + 0x65], dl
je 0x1001a81b
jne 0x1001a817
jo 0x1001a804
pop esp
dec ecx
outsb dx, byte [esi]
jae 0x1001a820
popal
insb byte es:[edi], dx
insb byte es:[edi], dx
and byte fs:[ebx + 0x6f], al
insd dword es:[edi], dx
jo 0x1001a826
outsb dx, byte [esi]
outsb dx, byte gs:[esi]
je 0x1001a82f
jae 0x1001a819
pop esp
add byte [eax], al
add dh, al
hlt
invalid
mov bh, 0xfe
into
int1
mov bl, 0xc9
mov ecx, 0xc60000a6
add dh, al
hlt
int3
int 0xcb
mov bl, 0xf6
add byte [eax], al
add byte [eax], al
mov dh, 0xcb
mov edi, 0x3ada
add cl, cl
cmp al, byte [eax]
add byte [eax], al
leave
iretd
mov ah, 0xd4
retf
rol byte [eax], 1
add byte [eax], al
add byte [edi - 0x3c0e3102], dh
sti
mov bh, 0xfe
into
int1
ret
mov dword [0xba], eax
add byte [edi + 0x6c], al
inc edi
insb byte es:[edi], dx
outsd dx, dword [esi]
bound esp, qword [ecx + 0x6c]
pop esp
dec esp
popal
outsb dx, byte [esi]
and byte [di], ah
add byte fs:[eax], al
ja 0x1001a8a7
outsb dx, byte [esi]
jae 0x1001a8b5
popal
xor byte [eax], al
insb byte es:[edi], dx
insb byte es:[edi], dx
salc
rol bl, 1
mov ebx, 0xbdb5d2d5
leave
iretd
sal byte gs:[esi - 0x2b28272c], 1
mov esp, 0xba
add byte [ebx + 0x65], dl
push ebx
outsb dx, byte gs:[esi]
outsb dx, byte gs:[esi]
inc ebx
push eax
push ebp
inc ecx
outsb dx, byte [esi]
dec ebp
insd dword es:[edi], dx
outsd dx, dword [esi]
jb 0x1001a93d
push esp
push 0x64616572
and byte [ebp + 0x6e], al
add byte fs:[eax], al
push ebx
outsb dx, byte gs:[esi]
inc ebx
push eax
push ebp
inc ecx
outsb dx, byte [esi]
dec ebp
insd dword es:[edi], dx
outsd dx, dword [esi]
jb 0x1001a959
push esp
push 0x64616572
add byte [eax], al
outsb dx, byte [esi]
je 0x1001a94f
insb byte es:[edi], dx
insb byte es:[edi], dx
add byte [eax], al
add byte [esi + 0x74], cl
dec esi
je 0x1001a944
jne 0x1001a95a
jb str.rundll32.exe__s_UninstallServer__s
push ebx
jns 0x1001a96d
je 0x1001a961
insd dword es:[edi], dx
dec ecx
outsb dx, byte [esi]
outsw dx, word [esi]
jb str.rundll32.exe__s_UninstallServer__s
popal
je 0x1001a96f
outsd dx, dword [esi]
outsb dx, byte [esi]
add byte [eax], al
add byte [eax], al
push eax
jb 0x1001a97e
insd dword es:[di], dx
popal
outsb dx, byte [esi]
add byte [ebx + 0x68], dl
push ebx
push 0x5f6c6c65
push esp
jb 0x1001a97e
jns 0x1001a976
outsb dx, byte [esi]
add byte fs:[eax], al
add byte [ebx + 0x65], dl
push ebx
push ebx
push 0x6f647475
ja 0x1001a99c
push eax
jb 0x1001a99a
jbe 0x1001a99c
insb byte es:[edi], dx
add bh, dl
out dx, al
mov ah, 0xf3
mov ebx, 0xbfb0b4af
fiadd dword [eax]
add dl, dl
scasd eax, dword es:[edi]
mov ah, 0xb0
mov edi, 0xd20000da
invalid
add bh, cl
aam 0xca
mov esi, 0xdabfb0b4
add byte [eax], al
add byte [eax], al
add byte [edi - 0x5c423543], dh
add byte [eax], al
mov bh, 0xbd
retf 0xa3bd
mov edx, 0xd3bcedcc
mov bh, 0xfe
into
int1
and byte cs:[eax], al
add byte [eax], al
add byte [edx + 0x75], dh
jb 0x1001a9e7
jb 0x1001a9e7
outsb dx, byte [esi]
insb byte es:[edi], dx
insb byte es:[edi], dx
xor esi, dword [edx]
js 0x1001a9e1
and byte [0x6e552c73], ah
jae 0x1001a9ac
push ebp
outsb dx, byte [esi]
imul ebp, dword [esi + 0x73], 0x6c6c6174
push ebx
jb 0x1001aa03
jb 0x1001a9b0
and eax, 0xc9000073
mov esi, 0xe2d5fdb3
mov eax, 0xcefeb7f6
mov bh, 0xfe
into
int1
add byte [eax], al
add byte [eax], al
and eax, 0x61622e64
imul ebp, dword [esi], 0x64
insb byte es:[edi], dx
insb byte es:[edi], dx
add byte [eax], al
mov cl, 0xa3
mov ebx, 0xb3dfcfa4
int3
movsb byte es:[edi], byte [esi]
mov edi, 0xf4c6aa
add bh, cl
mov ch, 0xcd
mov bl, 0xc9
call 0x10026dc8
add byte [eax], al
push ebx
jb 0x1001aa6e
imul esp, dword [ebx + 0x65], 0x6c6c44
add byte [eax + 0x61], dl
push eax
popal
jb 0x1001aa65
popal
insd dword es:[edi], dx
je 0x1001aa6d
jb 0x1001aa7d
add byte [eax], al
push ebx
je 0x1001aa70
jb 0x1001aa85
add byte [eax], al
add byte [edi + 0x62], cl
dec edi
bound ebp, qword [edx + 0x65]
arpl word [esi + ecx*2 + 0x61], si
insd dword es:[edi], dx
add byte gs:[eax], al
dec ecx
insd dword es:[edi], dx
popal
push eax
popal
je 0x1001aa91
add byte [eax], al
add byte [ebp + 0x72], al
inc ebp
jb 0x1001aaa1
outsd dx, dword [esi]
jb 0x1001aa75
outsd dx, dword [esi]
outsb dx, byte [esi]
je 0x1001aaa8
outsd dx, dword [esi]
insb byte es:[edi], dx
add byte [eax], al
add byte [eax], al
inc esp
imul esi, dword [ebx + 0x70], 0x4e79616c
popal
insd dword es:[edi], dx
add byte gs:[edi + 0x69], dl
push edi
imul ebp, dword [esi + 0x6c], 0x6e6f676f
add byte [eax], al
add byte [eax], al
xor dword [esi], ebp
xor dword [esi], ebp
xor al, 0
add byte [eax], al
outsb dx, byte [esi]
and byte fs:[ecx + ebp*2 + 0x63], ah
je 0x1001aacf
imul ebp, dword [edi + 0x6e], 0x797261
imul ebp, dword [esi + 0x63], 0x6572726f
outsd dx, dword [esi]
outsb dx, byte [esi]
popal
jb 0x1001aae4
add byte [ecx + 0x6e], ch
invalid
outsb dx, byte [esi]
outsb dx, byte [esi]
arpl word [edi + 0x72], bp
jb 0x1001aad8
jb 0x1001aae4
arpl word gs:[eax + 0x64], si
arpl word [eax + 0x64], si
and byte [ecx + 0x74], ah
popal
popal
je 0x1001aadb
and byte [ebx + 0x68], ah
arpl word gs:[ebx], bp
add byte [eax], al
add byte [ecx + 0x6e], ch
invalid
outsb dx, byte [esi]
outsb dx, byte [esi]
arpl word [edi + 0x72], bp
jb 0x1001aaf0
arpl word [eax + 0x68], si
popal
jb 0x1001aab5
arpl word [eax + 0x65], bp
arpl word [ebx], bp
add byte [ecx + 0x6e], ch
invalid
outsb dx, byte [esi]
jbe 0x1001ab01
popal
insb byte es:[edi], dx
imul esp, dword [eax + 0x77], 0x6f646e69
outsd dx, dword [esi]
ja 0x1001aacb
jae 0x1001ab16
jp 0x1001ab14
add byte [ebp + 0x6e], dh
jne 0x1001ab20
imul ebp, dword [esi + 0x6f], 0x77
outsb dx, byte [esi]
ja 0x1001ab25
and byte [ebx + 0x6f], ah
insd dword es:[edi], dx
jo 0x1001ab2f
jae 0x1001ab33
imul ebp, dword [edi + 0x6e], 0x74656d20
push 0x646f
push esp
stosb byte es:[edi], al
add dword [eax], edx
imul ebp, dword [esi + 0x76], 0x64696c61
and byte [edx + 0x69], ah
je 0x1001aafc
add byte [edx + ebp*4 + 1], dl
adc byte [ecx + 0x6e], ch
invalid
outsb dx, byte [esi]
jbe 0x1001ab35
insb byte es:[edi], dx
imul esp, dword [eax + 0x62], 0x6c207469
bound ebp, qword [ecx + 0x74]
and byte [ebp + 0x6e], ch
insb byte es:[edi], dx
outsb dx, byte gs:[esi]
je 0x1001ab4a
and byte [edx + 0x65], dh
jo 0x1001ab4c
jo 0x1001ab4c
popal
je 0x1001aaea
add byte [eax], al
je 0x1001ab5d
outsd dx, dword [esi]
and byte [ebp + 0x61], ch
insd dword es:[edi], dx
popal
outsb dx, byte [esi]
jns 0x1001ab15
insb byte es:[edi], dx
outsb dx, byte gs:[esi]
je 0x1001ab63
and byte [edi + 0x72], ch
and byte [ecx + ebp*2 + 0x73], ah
je 0x1001ab65
outsd dx, dword [esi]
jb 0x1001ab1f
imul esi, dword fs:[ebx + 0x74], 0x65636e61
and byte [ebx + 0x79], dh
jae 0x1001ab77
popal
outsb dx, byte [esi]
arpl word [ebp + 0x20], sp
jae 0x1001ab83
insd dword es:[edi], dx
bound ebp, qword [edi + 0x6c]
jae str.invalid_stored_block_lengths
imul ebp, dword [esi + 0x76], 0x64696c61
and byte [ebx + 0x74], dh
insb byte es:[edi], dx
imul esp, dword [eax + 0x73], 0x65726f74
and byte fs:[ebx + 0x74], dh
outsd dx, dword [esi]
jb 0x1001ab82
and byte fs:[edx + 0x6c], ah
outsd dx, dword [esi]
arpl word [ebx + 0x20], bp
bound ebp, qword [edi + ebp*2 + 0x63]
imul esp, dword [eax], 0x6c
insb byte es:[edi], dx
outsb dx, byte gs:[esi]
je 0x1001ab93
jae 0x1001ab2d
add byte [eax], al
add byte [ecx + 0x6e], ch
invalid
outsb dx, byte [esi]
jbe 0x1001ab95
popal
insb byte es:[edi], dx
imul esp, dword [eax + 0x62], 0x6b636f6c
and byte [ecx + edi*2 + 0x70], dh
add byte gs:[eax], al
pop esp
stosb byte es:[edi], al
add dword [eax], edx
shr byte [ebx - 0x411befff], 1
add dword [eax], edx
in al, 0xbe
add dword [eax], edx
les ebp, [ebx - 0x544befff]
add dword [eax], edx
test al, 0xab
add dword [eax], edx
xchg esp, eax
stosd dword es:[edi], eax
add dword [eax], edx
test byte [ebx - 0x5493efff], ch
adc byte [ebx + ebp*4 + 1], ch
adc ah, ah
mov esi, 0x6e691001
imul ebp, dword [esi + 0x63], 0x61706d6f
stosd dword es:[edi], eax
add dword [eax], edx
in al, 0xbe
add dword [eax], edx
imul ebp, dword [esi + 0x63], 0x61706d6f
je 0x1001abde
bound ebp, qword [ebp + 0x20]
jbe 0x1001abe0
and byte gs:[esi + 0x65], dh
jb 0x1001abf0
imul ebp, dword [edi + 0x6e], 0
add byte [eax], al
add byte [edx + 0x75], ah
bound esi, qword [ebp + 0x66]
jb 0x1001abab
bound esi, qword [ebp + 0x66]
jb 0x1001abab
jb 0x1001ac00
outsd dx, dword [esi]
jb 0x1001ab91
add byte [eax], al
add byte [ecx + 0x6e], ch
invalid
outsb dx, byte [esi]
outsb dx, byte [esi]
jae 0x1001ac0d
imul sp, word [ebx + 0x69], 0x6e65
je 0x1001abc1
insd dword es:[edi], dx
insd dword es:[edi], dx
outsd dx, dword [esi]
jb 0x1001ac20
add byte [ecx + 0x74], ah
popal
invalid
popal
and byte [ebp + 0x72], ah
jb 0x1001ac20
jb 0x1001abb3
add byte [ebx + 0x74], dh
jae 0x1001ac2a
jb 0x1001ac1d
popal
insd dword es:[edi], dx
and byte [ebp + 0x72], ah
jb 0x1001ac2e
jb 0x1001abc1
add byte [eax], al
add byte [esi + 0x69], ah
imul bp, word [ebp + 0x20], 0x7265
jb str.invalid_literal_length_code
jb 0x1001abcf
add byte [ebx + 0x74], dh
jae 0x1001ac46
jb 0x1001ac39
popal
insd dword es:[edi], dx
and byte [ebp + 0x6e], ah
add byte fs:[eax], al
add byte [eax], al
add byte [eax], al
or byte [eax + 1], ch
adc byte [esi + 0x1011001], bh
add byte [eax], al
push ds
add dword [eax], eax
add byte [edi], cl
add byte [eax], al
sldt word [eax]
add byte [eax], al
add byte [eax], al
add byte [eax + 0x3010016c], cl
add dword [bx + si], edx
add byte [eax], al
add byte [eax], al
push ds
add byte [eax], al
add byte [edi], cl
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax + 0x100167], ch
add byte [eax], al
add byte [ebx], dl
add byte [eax], al
add byte [edi], al
pop es
add byte [eax], al
add byte [ecx + 0x6e], ch
invalid
outsb dx, byte [esi]
jbe 0x1001ac89
insb byte es:[edi], dx
imul esp, dword [eax + 0x64], 0x61747369
jae 0x1001aca4
popal
outsb dx, byte [esi]
arpl word [ebp + 0x20], sp
arpl word [edi + 0x64], bp
add byte gs:[eax], al
add byte [eax], al
add byte [ecx + 0x6e], ch
invalid
outsb dx, byte [esi]
jbe 0x1001aca1
imul ebp, dword [esi + 0x76], 0x64696c61
and byte [ecx + ebp*2 + 0x74], ch
jb 0x1001acab
insb byte es:[edi], dx
imul esp, dword [eax + 0x6c], 0x72657469
popal
insb byte es:[edi], dx
das
insb byte es:[edi], dx
outsb dx, byte gs:[esi]
je 0x1001acba
and byte [ebx + 0x6f], ah
add byte gs:[ecx], cl
add byte [eax], al
add byte [0x60000000], al
pop es
add byte [eax], al
add byte [ecx], al
add byte [eax], al
add byte [eax], cl
add byte [eax], al
push eax
add byte [eax], al
add byte [eax], al
or byte [eax], al
add byte [eax], dl
add byte [eax], al
add byte [eax + ecx], dl
add byte [ebx], dh
add byte [eax], al
push edx
pop es
add byte [eax], al
pop ds
add byte [eax], al
add byte [eax], al
or byte [eax], al
add byte [eax], dh
add byte [eax], al
add byte [eax], cl
add byte [eax], al
xor byte [eax], al
add byte [eax], al
add byte [ecx], cl
add byte [eax], al
rol byte [eax], 0
add byte [eax + 7], dl
pop es
add byte [eax], al
or al, byte [eax]
add byte [eax], al
add byte [eax], cl
add byte [eax], al
pushal
add byte [eax], al
add byte [eax], al
or byte [eax], al
add byte [eax], ah
add byte [eax], al
add byte [eax], al
or dword [eax], eax
add byte [eax], ah
add byte [eax], ah
add byte [eax], al
add byte [eax], cl
add byte [eax], al
and byte [eax], al
add byte [eax], al
add byte [ecx], cl
add byte [eax], al
mov al, byte [pe_dos_header]
or byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
or byte [eax], al
add byte [eax], al
or byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [ecx], cl
add byte [eax], al
loopne 0x1001acde
add byte [eax], al
push eax
pop es
add byte [eax], al
push es
add byte [eax], al
add byte [eax], al
or byte [eax], al
add byte [eax], bl
add byte [eax], al
add byte [eax], cl
add byte [eax], al
sbb byte [eax], al
add byte [eax], al
add byte [ecx], cl
add byte [eax], al
nop
add byte [eax], al
add byte [ebx + 7], dl
add byte [eax], al
cmp eax, dword [eax]
add byte [eax], al
add byte [eax], cl
add byte [eax], al
js 0x1001ad0e
add byte [eax], al
add byte [eax], cl
add byte [eax], al
cmp byte [eax], al
add byte [eax], al
add byte [ecx], cl
add byte [eax], al
rol byte [eax], 1
add byte [eax], al
push ecx
pop es
add byte [eax], al
adc dword [eax], eax
add byte [eax], al
add byte [eax], cl
add byte [eax], al
push 0
or byte [eax], al
add byte [eax], ch
add byte [eax], al
add byte [eax], al
or dword [eax], eax
add byte [eax], dh
or byte [eax], al
add byte [eax], cl
add byte [eax], al
add byte [eax], al
or byte [eax], al
add byte [eax], cl
or byte [eax], al
add byte [eax], cl
add byte [eax], al
add byte [ecx], cl
add byte [eax], al
lock add byte [eax], al
add byte [eax + 7], dl
add byte [eax], al
add al, 0
add byte [eax], al
add byte [eax], cl
add byte [eax], al
push esp
add byte [eax], al
add byte [eax], al
or byte [eax], al
add byte [eax + eax], dl
add byte [eax], al
push ebp
or byte [eax], al
add bl, ah
add byte [eax], al
add byte [ebx + 7], dl
add byte [eax], al
sub eax, dword [eax]
add byte [eax], al
add byte [eax], cl
add byte [eax], al
je 0x1001ad8e
add byte [eax], al
add byte [eax], cl
add byte [eax], al
xor al, 0
add byte [eax], al
add byte [ecx], cl
add byte [eax], al
enter 0, 0
push ecx
pop es
add byte [eax], al
or eax, 0
or byte [eax], al
add byte [eax + eax], ah
add byte [eax], al
or byte [eax], al
add byte [eax + eax], ah
add byte [eax], al
add byte [ecx], cl
add byte [eax], al
test al, 0
add byte [eax], al
add byte [eax], cl
add byte [eax], al
add al, 0
add byte [eax], al
add byte [eax], cl
add byte [eax], al
test byte [eax], al
add byte [eax], al
add byte [eax], cl
add byte [eax], al
inc esp
add byte [eax], al
add byte [eax], al
or dword [eax], eax
add al, ch
add byte [eax], al
add byte [eax + 7], dl
add byte [eax], al
or byte [eax], al
add byte [eax], al
add byte [eax], cl
add byte [eax], al
pop esp
add byte [eax], al
add byte [eax], al
or byte [eax], al
add byte [eax + eax], bl
add byte [eax], al
add byte [ecx], cl
add byte [eax], al
cwde
add byte [eax], al
add byte [edi + eax], dl
add byte [ebx], dl
add byte [eax], al
add byte [eax], cl
add byte [eax], al
jl 0x1001ae0e
add byte [eax], al
add byte [eax], cl
add byte [eax], al
cmp al, 0
add byte [eax], al
add byte [ecx], cl
add byte [eax], al
fadd dword [eax]
add byte [eax], al
push edx
pop es
add byte [eax], al
pop ss
add byte [eax], al
add byte [eax], al
or byte [eax], al
add byte [eax + eax], ch
add byte [eax], al
or byte [eax], al
add byte [eax + eax], ch
add byte [eax], al
add byte [ecx], cl
add byte [eax], al
mov eax, 0
or byte [eax], al
add byte [eax + eax], cl
add byte [eax], al
add byte [eax], cl
add byte [eax], al
mov word [eax], es
add byte [eax], al
add byte [eax], cl
add byte [eax], al
dec esp
add byte [eax], al
add byte [eax], al
or dword [eax], eax
add al, bh
add byte [eax], al
add byte [eax + 7], dl
add byte [eax], al
add eax, dword [eax]
add byte [eax], al
add byte [eax], cl
add byte [eax], al
push edx
add byte [eax], al
add byte [eax], al
or byte [eax], al
add byte [edx], dl
add byte [eax], al
add byte [ebp + 8], dl
add byte [eax], al
mov dword [0x53000000], eax
pop es
add byte [eax], al
and eax, dword [eax]
add byte [eax], al
add byte [eax], cl
add byte [eax], al
jb 0x1001ae8e
add byte [eax], al
add byte [eax], cl
add byte [eax], al
xor al, byte [eax]
add byte [eax], al
add byte [ecx], cl
add byte [eax], al
les eax, [eax]
add byte [eax], al
push ecx
pop es
add byte [eax], al
or eax, dword [eax]
add byte [eax], al
add byte [eax], cl
add byte [eax], al
bound eax, qword [eax]
add byte [eax], al
add byte [eax], cl
add byte [eax], al
and al, byte [eax]
add byte [eax], al
add byte [ecx], cl
add byte [eax], al
movsb byte es:[edi], byte [esi]
add byte [eax], al
add byte [eax], al
or byte [eax], al
add byte [edx], al
add byte [eax], al
add byte [eax], al
or byte [eax], al
add byte [edx], al
or byte [eax], al
add byte [edx], al
add byte [eax], al
add byte [ecx], cl
add byte [eax], al
in al, 0
add byte [eax], al
push eax
pop es
add byte [eax], al
pop es
add byte [eax], al
add byte [eax], al
or byte [eax], al
add byte [edx], bl
add byte [eax], al
add byte [eax], cl
add byte [eax], al
sbb al, byte [eax]
add byte [eax], al
add byte [ecx], cl
add byte [eax], al
xchg esp, eax
add byte [eax], al
add byte [edi + eax], dl
add byte [ebx], al
add byte [eax], al
add byte [eax], cl
add byte [eax], al
jp 0x1001af0e
add byte [eax], al
add byte [eax], cl
add byte [eax], al
cmp al, byte [eax]
add byte [eax], al
add byte [ecx], cl
add byte [eax], al
aam 0
add byte [eax], al
push edx
pop es
add byte [eax], al
adc eax, dword [eax]
add byte [eax], al
add byte [eax], cl
add byte [eax], al
push 0
add byte [eax], al
add byte [eax], cl
add byte [eax], al
sub al, byte [eax]
add byte [eax], al
add byte [ecx], cl
add byte [eax], al
mov ah, 0
add byte [eax], al
add byte [eax], cl
add byte [eax], al
or al, byte [eax]
add byte [eax], al
add byte [eax], cl
add byte [eax], al
mov al, byte [eax]
add byte [eax], al
add byte [eax], cl
add byte [eax], al
dec edx
add byte [eax], al
add byte [eax], al
or dword [eax], eax
add ah, dh
add byte [eax], al
add byte [eax + 7], dl
add byte [eax], al
add eax, 0
or byte [eax], al
add byte [esi], dl
add byte [eax], al
add byte [eax], cl
add byte [eax], al
push ss
add byte [eax], al
add al, al
or byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [ebx + 7], dl
add byte [eax], al
xor eax, dword [eax]
add byte [eax], al
add byte [eax], cl
add byte [eax], al
jbe 0x1001af8e
add byte [eax], al
add byte [eax], cl
add byte [eax], al
add byte ss:[eax], al
add byte [eax], al
or dword [eax], eax
add ah, cl
add byte [eax], al
add byte [ecx + 7], dl
add byte [eax], al
sldt word [eax]
add byte [eax], al
or byte [eax], al
add byte [esi], ah
add byte [eax], al
add byte [eax], cl
add byte [eax], al
add byte es:[eax], al
add byte [eax], al
or dword [eax], eax
add byte [eax + eax + 0x8000000], ch
add byte [eax], al
push es
add byte [eax], al
add byte [eax], al
or byte [eax], al
add byte [esi], al
or byte [eax], al
add byte [esi], al
add byte [eax], al
add byte [ecx], cl
add byte [eax], al
in al, dx
add byte [eax], al
add byte [eax + 7], dl
add byte [eax], al
or dword [eax], eax
add byte [eax], al
add byte [eax], cl
add byte [eax], al
pop esi
add byte [eax], al
add byte [eax], al
or byte [eax], al
add byte [esi], bl
add byte [eax], al
add byte [eax], al
or dword [eax], eax
add byte [eax + eax + 0x7540000], bl
add byte [eax], al
arpl word [eax], ax
add byte [eax], al
add byte [eax], cl
add byte [eax], al
jle 0x1001b00e
add byte [eax], al
add byte [eax], cl
add byte [eax], al
add byte ds:[eax], al
add byte [eax], al
or dword [eax], eax
add ah, bl
add byte [eax], al
add byte [edx + 7], dl
add byte [eax], al
sbb eax, dword [eax]
add byte [eax], al
add byte [eax], cl
add byte [eax], al
outsb dx, byte [esi]
add byte [eax], al
add byte [eax], al
or byte [eax], al
add byte [esi], ch
add byte [eax], al
add byte [eax], al
or dword [eax], eax
add byte [eax + eax + 0x8000000], bh
add byte [eax], al
push cs
add byte [eax], al
add byte [eax], al
or byte [eax], al
add byte [esi], cl
or byte [eax], al
add byte [esi], cl
add byte [eax], al
add byte [ecx], cl
add byte [eax], al
cld
add byte [eax], al
add byte [eax + 7], ah
add byte [eax], al
add byte [ecx], al
add byte [eax], al
add byte [eax], cl
add byte [eax], al
push ecx
add byte [eax], al
add byte [eax], al
or byte [eax], al
add byte [ecx], dl
add byte [eax], al
add byte [ebp + 8], dl
add byte [eax], al
add dword [eax], 0
add byte [edx + 7], dl
add byte [eax], al
pop ds
add byte [eax], al
add byte [eax], al
or byte [eax], al
add byte [ecx], dh
add byte [eax], al
add byte [eax], cl
add byte [eax], al
xor dword [eax], eax
add byte [eax], al
add byte [ecx], cl
add byte [eax], al
ret 0