А с'я да ви вида
0 отговора
56 прегледа
А с'я да ви вида
Аре ся който е голям пич да го компилира т'ва 
Code Offset = 00001000, Code Size = 00001000
Data Offset = 00002000, Data Size = 00001000
Number of Objects = 0003 (dec), Imagebase = 00400000h
Object01: .text RVA: 00001000 Offset: 00001000 Size: 00001000 Flags: 60000020
Object02: .data RVA: 00002000 Offset: 00002000 Size: 00001000 Flags: C0000040
Object03: .rsrc RVA: 00003000 Offset: 00003000 Size: 00001000 Flags: 40000040
+++++++++++++++++++ MENU INFORMATION ++++++++++++++++++
There Are No Menu Resources in This Application
+++++++++++++++++ DIALOG INFORMATION ++++++++++++++++++
There Are No Dialog Resources in This Application
+++++++++++++++++++ IMPORTED FUNCTIONS ++++++++++++++++++
Number of Imported Modules = 1 (decimal)
Import Module 001: MSVBVM60.DLL
+++++++++++++++++++ IMPORT MODULE DETAILS +++++++++++++++
Import Module 001: MSVBVM60.DLL
Addr:7351B1FC hint(0000) Name: _CIcos
Addr:7351698D hint(0000) Name: _adj_fptan
Addr:7351624E hint(0000) Name: _adj_fdiv_m64
Addr:735168D5 hint(0000) Name: _adj_fprem1
Addr:73516202 hint(0000) Name: _adj_fdiv_m32
Addr:7351629A hint(0000) Name: _adj_fdiv_m16i
Addr:7351639A hint(0000) Name: _adj_fdivr_m16i
Addr:7351B364 hint(0000) Name: _CIsin
Addr:734444AF hint(0000) Name: __vbaChkstk
Addr:7343D86F hint(0000) Name: EVENT_SINK_AddRef
Addr:7351698A hint(0000) Name: _adj_fpatan
Addr:7344E385 hint(0000) Name: EVENT_SINK_Release
Addr:7351B409 hint(0000) Name: _CIsqrt
Addr:734F677C hint(0000) Name: EVENT_SINK_QueryInterface
Addr:73444E5B hint(0000) Name: __vbaExceptHandler
Addr:7351661D hint(0000) Name: _adj_fprem
Addr:7351634E hint(0000) Name: _adj_fdivr_m64
Addr:73529D7F hint(0000) Name: __vbaFPException
Addr:7351B2A1 hint(0000) Name: _CIlog
Addr:735162CE hint(0000) Name: _adj_fdiv_m32i
Addr:735163CE hint(0000) Name: _adj_fdivr_m32i
Addr:73516302 hint(0000) Name: _adj_fdivr_m32
Addr:73515D3D hint(0000) Name: _adj_fdiv_r
Addr:7342DE3E hint(0064) Name: ThunRTMain
Addr:7351B136 hint(0000) Name: _CIatan
Addr:735120EA hint(0000) Name: _allmul
Addr:7351B4BA hint(0000) Name: _CItan
Addr:73510F35 hint(0000) Name: _CIexp
+++++++++++++++++++ EXPORTED FUNCTIONS ++++++++++++++++++
Number of Exported Functions = 0000 (decimal)
+++++++++++++++++++ ASSEMBLY CODE LISTING ++++++++++++++++++
//********************** Start of Code in Object .text **************
Program Entry Point = 00401128 (E:\Deba.exe File Offset:00003128)
:00401000 FC cld
:00401001 B151 mov cl, 51
:00401003 738D jnb 00400F92
:00401005 6951734E625173 imul edx, dword ptr [ecx+73], 7351624E
:0040100C D568 aad (base=104)
:0040100E 51 push ecx
:0040100F 7302 jnb 00401013
:00401011 625173 bound edx, dword ptr [ecx+73]
:00401014 9A6251739A6351 call 5163:9A735162
* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040104B(C)
|
:0040101B 7364 jnb 00401081
:0040101D B351 mov bl, 51
:0040101F 73AF jnb 00400FD0
:00401021 44 inc esp
:00401022 44 inc esp
:00401023 736F jnb 00401094
:00401025 D84373 fadd dword ptr [ebx+73]
:00401028 8A6951 mov ch, byte ptr [ecx+51]
:0040102B 7385 jnb 00400FB2
:0040102D E344 jcxz 00401073
:0040102F 7309 jnb 0040103A
:00401031 B451 mov ah, 51
:00401033 737C jnb 004010B1
:00401035 674F dec edi
:00401037 735B jnb 00401094
:00401039 4E dec esi
* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040102F(C)
|
:0040103A 44 inc esp
:0040103B 731D jnb 0040105A
:0040103D 6651 push cx
:0040103F 734E jnb 0040108F
:00401041 635173 arpl dword ptr [ecx+73], edx
:00401044 7F9D jg 00400FE3
:00401046 52 push edx
:00401047 73A1 jnb 00400FEA
:00401049 B251 mov dl, 51
:0040104B 73CE jnb 0040101B
:0040104D 625173 bound edx, dword ptr [ecx+73]
:00401050 CE into
:00401051 635173 arpl dword ptr [ecx+73], edx
:00401054 026351 add ah, byte ptr [ebx+51]
:00401057 733D jnb 00401096
:00401059 5D pop ebp
* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040103B(C)
|
:0040105A 51 push ecx
:0040105B 733E jnb 0040109B
:0040105D DE4273 fiadd word ptr [edx+73]
:00401060 36 BYTE 036h
:00401061 B151 mov cl, 51
:00401063 73EA jnb 0040104F
:00401065 205173 and byte ptr [ecx+73], dl
:00401068 BAB4517335 mov edx, 357351B4
:0040106D 0F BYTE 0fh
:0040106E 51 push ecx
:0040106F 7300 jnb 00401071
* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040106F(C)
|
:00401071 00000000000000000000 BYTE 10 DUP(0)
:0040107B 0000000000 BYTE 5 DUP(0)
* Reference To: MSVBVM60.__vbaChkstk, Ord:0000h
|
:00401080 FF2520104000 Jmp dword ptr [00401020]
* Reference To: MSVBVM60.__vbaExceptHandler, Ord:0000h
|
:00401086 FF2538104000 Jmp dword ptr [00401038]
* Reference To: MSVBVM60.__vbaFPException, Ord:0000h
|
:0040108C FF2544104000 Jmp dword ptr [00401044]
* Reference To: MSVBVM60._adj_fdiv_m16i, Ord:0000h
|
:00401092 FF2514104000 Jmp dword ptr [00401014]
* Reference To: MSVBVM60._adj_fdiv_m32, Ord:0000h
|
:00401098 FF2510104000 Jmp dword ptr [00401010]
* Reference To: MSVBVM60._adj_fdiv_m32i, Ord:0000h
|
:0040109E FF254C104000 Jmp dword ptr [0040104C]
* Reference To: MSVBVM60._adj_fdiv_m64, Ord:0000h
|
:004010A4 FF2508104000 Jmp dword ptr [00401008]
* Reference To: MSVBVM60._adj_fdiv_r, Ord:0000h
|
:004010AA FF2558104000 Jmp dword ptr [00401058]
* Reference To: MSVBVM60._adj_fdivr_m16i, Ord:0000h
|
:004010B0 FF2518104000 Jmp dword ptr [00401018]
* Reference To: MSVBVM60._adj_fdivr_m32, Ord:0000h
|
:004010B6 FF2554104000 Jmp dword ptr [00401054]
* Reference To: MSVBVM60._adj_fdivr_m32i, Ord:0000h
|
:004010BC FF2550104000 Jmp dword ptr [00401050]
* Reference To: MSVBVM60._adj_fdivr_m64, Ord:0000h
|
:004010C2 FF2540104000 Jmp dword ptr [00401040]
* Reference To: MSVBVM60._adj_fpatan, Ord:0000h
|
:004010C8 FF2528104000 Jmp dword ptr [00401028]
* Reference To: MSVBVM60._adj_fprem, Ord:0000h
|
:004010CE FF253C104000 Jmp dword ptr [0040103C]
* Reference To: MSVBVM60._adj_fprem1, Ord:0000h
|
:004010D4 FF250C104000 Jmp dword ptr [0040100C]
* Reference To: MSVBVM60._adj_fptan, Ord:0000h
|
:004010DA FF2504104000 Jmp dword ptr [00401004]
* Reference To: MSVBVM60._CIatan, Ord:0000h
|
:004010E0 FF2560104000 Jmp dword ptr [00401060]
* Reference To: MSVBVM60._CIcos, Ord:0000h
|
:004010E6 FF2500104000 Jmp dword ptr [00401000]
* Reference To: MSVBVM60._CIexp, Ord:0000h
|
:004010EC FF256C104000 Jmp dword ptr [0040106C]
* Reference To: MSVBVM60._CIlog, Ord:0000h
|
:004010F2 FF2548104000 Jmp dword ptr [00401048]
* Reference To: MSVBVM60._CIsin, Ord:0000h
|
:004010F8 FF251C104000 Jmp dword ptr [0040101C]
* Reference To: MSVBVM60._CIsqrt, Ord:0000h
|
:004010FE FF2530104000 Jmp dword ptr [00401030]
* Reference To: MSVBVM60._CItan, Ord:0000h
|
:00401104 FF2568104000 Jmp dword ptr [00401068]
* Reference To: MSVBVM60._allmul, Ord:0000h
|
:0040110A FF2564104000 Jmp dword ptr [00401064]
* Reference To: MSVBVM60.EVENT_SINK_QueryInterface, Ord:0000h
|
:00401110 FF2534104000 Jmp dword ptr [00401034]
* Reference To: MSVBVM60.EVENT_SINK_AddRef, Ord:0000h
|
:00401116 FF2524104000 Jmp dword ptr [00401024]
* Reference To: MSVBVM60.EVENT_SINK_Release, Ord:0000h
|
:0040111C FF252C104000 Jmp dword ptr [0040102C]
* Reference To: MSVBVM60.ThunRTMain, Ord:0064h
|
:00401122 FF255C104000 Jmp dword ptr [0040105C]
* Possible StringData Ref from Code Obj ->"VB5!"
|
//******************** Program Entry Point ********
:00401128 68C0124000 push 004012C0
* Reference To: MSVBVM60.ThunRTMain, Ord:0064h
|
:0040112D E8F0FFFFFF Call 00401122
:00401132 000000000000 BYTE 6 DUP(0)
:00401138 3000 xor byte ptr [eax], al
:0040113A 0000 add byte ptr [eax], al
:0040113C 40 inc eax
:0040113D 00000000000000 BYTE 7 DUP(0)
:00401144 46 inc esi
:00401145 61 popad
:00401146 4A dec edx
:00401147 AF scasd
:00401148 B93E5C4885 mov ecx, 85485C3E
:0040114D 4A dec edx
:0040114E 9B wait
:0040114F BB230CD13E mov ebx, 3ED10C23
:00401154 000000000000 BYTE 6 DUP(0)
:0040115A 0100 add dword ptr [eax], eax
:0040115C 0000000000000000 BYTE 8 DUP(0)
:00401164 50 push eax
:00401165 726F jb 004011D6
:00401167 6A65 push 00000065
:00401169 63743100 arpl dword ptr [ecx+esi], esi
:0040116D 00000000000000000000 BYTE 10 DUP(0)
:00401177 00 BYTE 0
:00401178 FFCC dec esp
:0040117A 3100 xor dword ptr [eax], eax
:0040117C 019199185D9F add dword ptr [ecx+9F5D1899], edx
:00401182 D833 fdiv dword ptr [ebx]
:00401184 47 inc edi
:00401185 88F3 mov bl, dh
:00401187 B05E mov al, 5E
:00401189 295831 sub dword ptr [eax+31], ebx
:0040118C 5A pop edx
:0040118D FC cld
:0040118E 5D pop ebp
:0040118F 43 inc ebx
:00401190 E271 loop 00401203
:00401192 8B354DA28BBB mov esi, dword ptr [BB8BA24D]
:00401198 FFC9 dec ecx
:0040119A 8A7275 mov dh, byte ptr [edx+75]
:0040119D 3A4FAD cmp cl, byte ptr [edi-53]
:004011A0 339966CF11B7 xor ebx, dword ptr [ecx+B711CF66]
:004011A6 0C00 or al, 00
:004011A8 AA stosb
:004011A9 0060D3 add byte ptr [eax-2D], ah
:004011AC 93 xchg eax,ebx
:004011AD 00000000000000000000 BYTE 10 DUP(0)
:004011B7 00000000000000000000 BYTE 10 DUP(0)
:004011C1 00000000000000000000 BYTE 10 DUP(0)
:004011CB 000000000000 BYTE 6 DUP(0)
:004011D1 9D popfd
:004011D2 000000 BYTE 3 DUP(0)
:004011D5 51 push ecx
* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00401165(C)
|
:004011D6 00000000 BYTE 4 DUP(0)
:004011DA 0500466F72 add eax, 726F4600
:004011DF 6D insd
:004011E0 3100 xor dword ptr [eax], eax
:004011E2 0D011800C2 or eax, C2001801
:004011E7 E0F9 loopnz 004011E2
:004011E9 E020 loopnz 0040120B
:004011EB 2E202E and byte ptr cs:[esi], ch
:004011EE 202E and byte ptr [esi], ch
:004011F0 E427 in al, 27
:004011F2 E5E1 in ax, E1
:004011F4 E020 loopnz 00401216
:004011F6 2E202E and byte ptr cs:[esi], ch
:004011F9 202E and byte ptr [esi], ch
:004011FB E1F0 loopz 004011ED
:004011FD E500 in ax, 00
:004011FF 1901 sbb dword ptr [ecx], eax
:00401201 004200 add byte ptr [edx+00], al
:00401204 23FF and edi, edi
:00401206 FFFFFF BYTE 3 DUP(0ffh)
:00401209 2405 and al, 05
:0040120B 00466F add byte ptr [esi+6F], al
:0040120E 726D jb 0040127D
:00401210 3100 xor dword ptr [eax], eax
:00401212 353C000000 xor eax, 0000003C
:00401217 C20100 ret 0001
:0040121A 00 BYTE 0
:0040121B 3813 cmp byte ptr [ebx], dl
:0040121D 0000 add byte ptr [eax], al
:0040121F 120C00 adc cl, byte ptr [eax+eax]
:00401222 004603 add byte ptr [esi+03], al
:00401225 FF01 inc dword ptr [ecx]
:00401227 45 inc ebp
:00401228 000000 BYTE 3 DUP(0)
:0040122B 0106 add dword ptr [esi], eax
:0040122D 004C6162 add byte ptr [ecx+62], cl
:00401231 65 BYTE 065h
:00401232 6C insb
:00401233 3100 xor dword ptr [eax], eax
:00401235 0101 add dword ptr [ecx], eax
:00401237 0C00 or al, 00
:00401239 C1 BYTE 0d0h
:0040123A F0 lock
:0040123B E0F3 loopnz 00401230
:0040123D 20C4 and ah, al
:0040123F 27 daa
:00401240 E5E1 in ax, E1
:00401242 E020 loopnz 00401264
:00401244 2100 and dword ptr [eax], eax
:00401246 05D002C003 add eax, 03C002D0
:0040124B 2F das
:0040124C 0DDF021200 or eax, 001202DF
:00401251 001F add byte ptr [edi], bl
:00401253 002501CC0000 add byte ptr [0000CC01], ah
:00401259 90 nop
:0040125A 0180A903000B add dword ptr [eax+0B0003A9], eax
:00401260 41 inc ecx
:00401261 7269 jb 004012CC
:00401263 61 popad
:00401264 6C insb
:00401265 20426C and byte ptr [edx+6C], al
:00401268 61 popad
:00401269 636BFF arpl dword ptr [ebx-01], ebp
:0040126C 020400 add al, byte ptr [eax+eax]
:0040126F 005000 add byte ptr [eax+00], dl
:00401272 0000 add byte ptr [eax], al
:00401274 91 xchg eax,ecx
:00401275 99 cdq
:00401276 185D9F sbb byte ptr [ebp-61], bl
:00401279 D833 fdiv dword ptr [ebx]
:0040127B 47 inc edi
:0040127C 88F3 mov bl, dh
:0040127E B05E mov al, 5E
:00401280 295831 sub dword ptr [eax+31], ebx
:00401283 5A pop edx
:00401284 00000000000000000000 BYTE 10 DUP(0)
:0040128E 00000000000000000000 BYTE 10 DUP(0)
:00401298 90 nop
:00401299 00000000000000000000 BYTE 10 DUP(0)
:004012A3 00000000000000000000 BYTE 10 DUP(0)
:004012AD 000000 BYTE 3 DUP(0)
:004012B0 F60000 test byte ptr [eax], 00
:004012B3 0000000000 BYTE 5 DUP(0)
:004012B8 7811 js 004012CB
:004012BA 40 inc eax
:004012BB 004C0000 add byte ptr [eax+eax], cl
:004012BF 005642 add byte ptr [esi+42], dl
:004012C2 3521F01F2A xor eax, 2A1FF021
:004012C7 00000000000000000000 BYTE 10 DUP(0)
:004012D1 000000 BYTE 3 DUP(0)
:004012D4 7E00 jle 004012D6
* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004012D4(C)
|
:004012D6 00000000000000000000 BYTE 10 DUP(0)
:004012E0 0000 BYTE 2 DUP(0)
:004012E2 0A00 or al, byte ptr [eax]
:004012E4 090400 or dword ptr [eax+eax], eax
:004012E7 000000000000000000 BYTE 9 DUP(0)
:004012F0 A016400002 mov al, byte ptr [02004016]
:004012F5 F0 lock
:004012F6 3000 xor byte ptr [eax], al
:004012F8 00FF add bh, bh
:004012FA FFFF BYTE 2 DUP(0ffh)
:004012FC 0800 or byte ptr [eax], al
:004012FE 0000 add byte ptr [eax], al
:00401300 0100 add dword ptr [eax], eax
:00401302 0000 add byte ptr [eax], al
:00401304 0100 add dword ptr [eax], eax
:00401306 0000 add byte ptr [eax], al
:00401308 E900000070 jmp 7040130D
:0040130D 124000 adc al, byte ptr [eax+00]
:00401310 70124000 DWORD 00401270
:00401314 34114000 DWORD 00401134
:00401318 7800 js 0040131A
:0040131A 0000 add byte ptr [eax], al
:0040131C 7D00 jge 0040131E
* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040131C(C)
|
:0040131E 0000 add byte ptr [eax], al
:00401320 8600 xchg byte ptr [eax], al
:00401322 0000 add byte ptr [eax], al
* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00401310(C)
|
:00401324 8700 xchg dword ptr [eax], eax
:00401326 00000000000000000000 BYTE 10 DUP(0)
:00401330 0000000000000000 BYTE 8 DUP(0)
:00401338 44 inc esp
:00401339 65626100 bound esp, dword ptr gs:[ecx+00]
:0040133D 50 push eax
:0040133E 726F jb 004013AF
:00401340 6A65 push 00000065
:00401342 63743100 arpl dword ptr [ecx+esi], esi
:00401346 005072 add byte ptr [eax+72], dl
:00401349 6F outsd
:0040134A 6A65 push 00000065
:0040134C 63743100 arpl dword ptr [ecx+esi], esi
:00401350 00000000 BYTE 4 DUP(0)
:00401354 2C204000 DWORD 0040202C
:00401358 E0184000 DWORD 004018E0
:0040135C FFFFFFFF BYTE 4 DUP(0ffh)
:00401360 00000000 BYTE 4 DUP(0)
:00401364 1C20 sbb al, 20
:00401366 40 inc eax
:00401367 00A45EFF16D6D6 add byte ptr [esi+2*ebx-2929E901], ah
:0040136E 8A4A93 mov cl, byte ptr [edx-6D]
:00401371 1D2FC90C27 sbb eax, 270CC92F
:00401376 3CAE cmp al, AE
:00401378 0A00 or al, byte ptr [eax]
:0040137A 0100 add dword ptr [eax], eax
:0040137C 0400 add al, 00
:0040137E 0100 add dword ptr [eax], eax
:00401380 A4 movsb
:00401381 134000 adc eax, dword ptr [eax+00]
:00401384 00000000000000000000 BYTE 10 DUP(0)
:0040138E 0000 BYTE 2 DUP(0)
:00401390 D813 fcom dword ptr [ebx]
:00401392 40 inc eax
:00401393 0009 add byte ptr [ecx], cl
:00401395 0400 add al, 00
:00401397 0002 add byte ptr [edx], al
:00401399 0400 add al, 00
:0040139B 0000000000 BYTE 5 DUP(0)
:004013A0 0200 add al, byte ptr [eax]
:004013A2 0000 add byte ptr [eax], al
:004013A4 DC1440 fcom qword ptr [eax+2*eax]
:004013A7 00FF add bh, bh
:004013A9 FFFFFF BYTE 3 DUP(0ffh)
:004013AC D01440 rcl byte ptr [eax+2*eax], 1
* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040133E(C)
|
:004013AF 00000000000000000000 BYTE 10 DUP(0)
:004013B9 000000 BYTE 3 DUP(0)
:004013BC E413 in al, 13
:004013BE 40 inc eax
:004013BF 0000000000 BYTE 5 DUP(0)
:004013C4 B8311800FF mov eax, FF001831
:004013C9 FF00 inc dword ptr [eax]
:004013CB 008380010000 add byte ptr [ebx+00000180], al
:004013D1 00000000000000 BYTE 7 DUP(0)
:004013D8 50 push eax
:004013D9 726F jb 0040144A
:004013DB 6A65 push 00000065
:004013DD 63743100 arpl dword ptr [ecx+esi], esi
:004013E1 000000 BYTE 3 DUP(0)
:004013E4 46 inc esi
:004013E5 6F outsd
:004013E6 726D jb 00401455
:004013E8 3100 xor dword ptr [eax], eax
:004013EA 0000 add byte ptr [eax], al
:004013EC FC cld
:004013ED 5D pop ebp
:004013EE 43 inc ebx
:004013EF E271 loop 00401462
:004013F1 8B354DA28BBB mov esi, dword ptr [BB8BA24D]
:004013F7 FFC9 dec ecx
:004013F9 8A7275 mov dh, byte ptr [edx+75]
:004013FC 8602 xchg byte ptr [edx], al
:004013FE 3AA4AA2D714A91 cmp ah, byte ptr [edx+4*ebp-6EB58ED3]
:00401405 07 pop es
:00401406 A7 cmpsd
:00401407 67284E2B sub [bp+2B], cl
:0040140B 1C91 sbb al, 91
:0040140D 99 cdq
:0040140E 185D9F sbb byte ptr [ebp-61], bl
:00401411 D833 fdiv dword ptr [ebx]
:00401413 47 inc edi
:00401414 88F3 mov bl, dh
:00401416 B05E mov al, 5E
:00401418 295831 sub dword ptr [eax+31], ebx
:0040141B 5A pop edx
:0040141C 5F pop edi
:0040141D 7A1C jpe 0040143B
:0040141F C08924DC4E999D ror byte ptr [ecx+994EDC24], 9D
:00401426 EAE68BE6B4D53A jmp 3AD5:B4E68BE6
:0040142D 4F dec edi
:0040142E AD lodsd
:0040142F 339966CF11B7 xor ebx, dword ptr [ecx+B711CF66]
:00401435 0C00 or al, 00
:00401437 AA stosb
:00401438 0060D3 add byte ptr [eax-2D], ah
* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040141D(C)
|
:0040143B 93 xchg eax,ebx
:0040143C 46 inc esi
:0040143D 6F outsd
:0040143E 726D jb 004014AD
:00401440 00000000 BYTE 4 DUP(0)
:00401444 2E BYTE 02eh
:00401445 3DFBFCFAA0 cmp eax, A0FAFCFB
* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004013D9(C)
|
:0040144A 6810A73808 push 0838A710
:0040144F 002B add byte ptr [ebx], ch
:00401451 3371B5 xor esi, dword ptr [ecx-4B]
:00401454 45 inc ebp
* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004013E6(C)
|
:00401455 3A5C5072 cmp bl, byte ptr [eax+2*edx+72]
:00401459 6F outsd
:0040145A 677261 jb 004014BE
:0040145D 6D insd
:0040145E 204669 and byte ptr [esi+69], al
:00401461 6C insb
:00401462 65 BYTE 065h
:00401463 735C jnb 004014C1
:00401465 4D dec ebp
:00401466 6963726F736F66 imul esp, dword ptr [ebx+72], 666F736F
:0040146D 7420 je 0040148F
:0040146F 56 push esi
:00401470 697375616C2053 imul esi, dword ptr [ebx+75], 53206C61
:00401477 7475 je 004014EE
:00401479 64696F5C56423938 imul ebp, dword ptr fs:[edi+5C], 38394256
:00401481 5C pop esp
:00401482 56 push esi
:00401483 42 inc edx
:00401484 36 BYTE 036h
:00401485 2E BYTE 02eh
:00401486 4F dec edi
:00401487 4C dec esp
:00401488 42 inc edx
:00401489 000000 BYTE 3 DUP(0)
:0040148C 56 push esi
:0040148D 42 inc edx
:0040148E 0000 add byte ptr [eax], al
:00401490 44 inc esp
:00401491 1440 adc al, 40
:00401493 0000000000 BYTE 5 DUP(0)
:00401498 06 push es
:00401499 000000 BYTE 3 DUP(0)
:0040149C 0900 or dword ptr [eax], eax
:0040149E 0000 add byte ptr [eax], al
:004014A0 54144000 DWORD 00401454
:004014A4 8C144000 DWORD 0040148C
:004014A8 D0224000 DWORD 004022D0
:004014AC 0000000000000000 BYTE 8 DUP(0)
:004014B4 90 nop
:004014B5 1B1A sbb ebx, dword ptr [edx]
:004014B7 00DA add dl, bl
:004014B9 4E dec esi
:004014BA AD lodsd
:004014BB 339966CF11B7 xor ebx, dword ptr [ecx+B711CF66]
* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00401463(C)
|
:004014C1 0C00 or al, 00
:004014C3 AA stosb
:004014C4 0060D3 add byte ptr [eax-2D], ah
:004014C7 93 xchg eax,ebx
:004014C8 4C dec esp
:004014C9 61 popad
:004014CA 62656C bound esp, dword ptr [ebp+6C]
:004014CD 3100 xor dword ptr [eax], eax
:004014CF 000C00 add byte ptr [eax+eax], cl
:004014D2 44 inc esp
:004014D3 000000000000000000 BYTE 9 DUP(0)
:004014DC 0100 add dword ptr [eax], eax
:004014DE 0000 add byte ptr [eax], al
:004014E0 50 push eax
:004014E1 134000 adc eax, dword ptr [eax+00]
:004014E4 00000000 BYTE 4 DUP(0)
:004014E8 2019 and byte ptr [ecx], bl
:004014EA 40 inc eax
:004014EB 00FF add bh, bh
:004014ED FFFFFF BYTE 3 DUP(0ffh)
:004014F0 00000000 BYTE 4 DUP(0)
:004014F4 A4134000 DWORD 004013A4
:004014F8 08204000 DWORD 00402008
:004014FC 00000000 BYTE 4 DUP(0)
:00401500 90 nop
:00401501 AE scasb
:00401502 17 pop ss
:00401503 00000000000000000000 BYTE 10 DUP(0)
:0040150D 000000 BYTE 3 DUP(0)
:00401510 54 push esp
:00401511 1540000100 adc eax, 00010040
:00401516 0000 add byte ptr [eax], al
:00401518 FC cld
:00401519 134000 adc eax, dword ptr [eax+00]
:0040151C 00000000 BYTE 4 DUP(0)
:00401520 54 push esp
:00401521 1540000100 adc eax, 00010040
:00401526 0000 add byte ptr [eax], al
:00401528 5C pop esp
:00401529 1540000000 adc eax, 00000040
:0040152E 0000 add byte ptr [eax], al
:00401530 58 pop eax
:00401531 1540000200 adc eax, 00020040
:00401536 0000 add byte ptr [eax], al
:00401538 5C pop esp
:00401539 1540000000 adc eax, 00000040
:0040153E B701 mov bh, 01
:00401540 68006C00AC push AC006C00
:00401545 154000DC22 adc eax, 22DC0040
:0040154A 40 inc eax
:0040154B 0000000000 BYTE 5 DUP(0)
:00401550 B06B mov al, 6B
:00401552 1A00 sbb al, byte ptr [eax]
:00401554 0C144000 DWORD 0040140C
:00401558 1C144000 DWORD 0040141C
:0040155C 40 inc eax
:0040155D 001F add byte ptr [edi], bl
:0040155F 003400 add byte ptr [eax+eax], dh
:00401562 0000 add byte ptr [eax], al
:00401564 2C14 sub al, 14
:00401566 40 inc eax
:00401567 00FF add bh, bh
:00401569 FFFFFF BYTE 3 DUP(0ffh)
:0040156C 0000000000000000 BYTE 8 DUP(0)
:00401574 AC lodsb
:00401575 1540004877 adc eax, 77480040
:0040157A 1A00 sbb al, byte ptr [eax]
:0040157C 3C14 cmp al, 14
:0040157E 40 inc eax
:0040157F 00FF add bh, bh
:00401581 FFFFFF BYTE 3 DUP(0ffh)
:00401584 40 inc eax
:00401585 0012 add byte ptr [edx], dl
:00401587 0038 add byte ptr [eax], bh
:00401589 000000 BYTE 3 DUP(0)
:0040158C B814400001 mov eax, 01004014
:00401591 0003 add byte ptr [ebx], al
:00401593 000000000000000000 BYTE 9 DUP(0)
:0040159C 40 inc eax
:0040159D 16 push ss
:0040159E 40 inc eax
:0040159F 005877 add byte ptr [eax+77], bl
:004015A2 1A00 sbb al, byte ptr [eax]
:004015A4 C8144000 enter 4014, 00
:004015A8 0100 add dword ptr [eax], eax
:004015AA 0300 add eax, dword ptr [eax]
:004015AC 00000000 BYTE 4 DUP(0)
:004015B0 5C154000 DWORD 0040155C
:004015B4 DC144000 DWORD 004014DC
:004015B8 10114000 DWORD 00401110
:004015BC 16114000 DWORD 00401116
:004015C0 1C114000 DWORD 0040111C
:004015C4 00000000000000000000 BYTE 10 DUP(0)
:004015CE 00000000000000000000 BYTE 10 DUP(0)
:004015D8 00000000000000000000 BYTE 10 DUP(0)
:004015E2 00000000000000000000 BYTE 10 DUP(0)
:004015EC 00000000000000000000 BYTE 10 DUP(0)
:004015F6 00000000000000000000 BYTE 10 DUP(0)
:00401600 00000000000000000000 BYTE 10 DUP(0)
:0040160A 00000000000000000000 BYTE 10 DUP(0)
:00401614 00000000000000000000 BYTE 10 DUP(0)
:0040161E 00000000000000000000 BYTE 10 DUP(0)
:00401628 00000000000000000000 BYTE 10 DUP(0)
:00401632 00000000000000000000 BYTE 10 DUP(0)
:0040163C 0000000000000000 BYTE 8 DUP(0)
:00401644 84154000 DWORD 00401584
:00401648 DC144000 DWORD 004014DC
:0040164C 10114000 DWORD 00401110
:00401650 16114000 DWORD 00401116
:00401654 1C114000 DWORD 0040111C
:00401658 00000000000000000000 BYTE 10 DUP(0)
:00401662 00000000000000000000 BYTE 10 DUP(0)
:0040166C 00000000000000000000 BYTE 10 DUP(0)
:00401676 00000000000000000000 BYTE 10 DUP(0)
:00401680 00000000000000000000 BYTE 10 DUP(0)
:0040168A 00000000000000000000 BYTE 10 DUP(0)
:00401694 00000000000000000000 BYTE 10 DUP(0)
:0040169E 0000 BYTE 2 DUP(0)
:004016A0 F4 hlt
:004016A1 0100 add dword ptr [eax], eax
:004016A3 005013 add byte ptr [eax+13], dl
:004016A6 40 inc eax
:004016A7 0000000000 BYTE 5 DUP(0)
:004016AC 60194000 DWORD 00401960
:004016B0 70194000 DWORD 00401970
:004016B4 D809 fmul dword ptr [ecx]
:004016B6 0000 add byte ptr [eax], al
:004016B8 08204000 DWORD 00402008
:004016BC 86104000 DWORD 00401086
:004016C0 00204000 DWORD 00402000
:004016C4 2A00 sub al, byte ptr [eax]
:004016C6 5C pop esp
:004016C7 004100 add byte ptr [ecx+00], al
:004016CA 50 push eax
* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004016B0(C)
|
:004016CB 007200 add byte ptr [edx+00], dh
:004016CE 6F outsd
:004016CF 006A00 add byte ptr [edx+00], ch
:004016D2 65006300 add byte ptr gs:[ebx+00], ah
:004016D6 7400 je 004016D8
* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004016D6(C)
|
:004016D8 3100 xor dword ptr [eax], eax
:004016DA 00000000000000000000 BYTE 10 DUP(0)
:004016E4 00000000000000000000 BYTE 10 DUP(0)
:004016EE 00000000000000000000 BYTE 10 DUP(0)
:004016F8 00000000000000000000 BYTE 10 DUP(0)
:00401702 00000000000000000000 BYTE 10 DUP(0)
:0040170C 00000000000000000000 BYTE 10 DUP(0)
:00401716 00000000000000000000 BYTE 10 DUP(0)
:00401720 00000000000000000000 BYTE 10 DUP(0)
:0040172A 00000000000000000000 BYTE 10 DUP(0)
:00401734 00000000000000000000 BYTE 10 DUP(0)
:0040173E 00000000000000000000 BYTE 10 DUP(0)
:00401748 00000000000000000000 BYTE 10 DUP(0)
:00401752 00000000000000000000 BYTE 10 DUP(0)
:0040175C 00000000000000000000 BYTE 10 DUP(0)
:00401766 00000000000000000000 BYTE 10 DUP(0)
:00401770 00000000000000000000 BYTE 10 DUP(0)
:0040177A 00000000000000000000 BYTE 10 DUP(0)
:00401784 00000000000000000000 BYTE 10 DUP(0)
:0040178E 00000000000000000000 BYTE 10 DUP(0)
:00401798 00000000000000000000 BYTE 10 DUP(0)
:004017A2 00000000000000000000 BYTE 10 DUP(0)
:004017AC 00000000000000000000 BYTE 10 DUP(0)
:004017B6 00000000000000000000 BYTE 10 DUP(0)
:004017C0 00000000000000000000 BYTE 10 DUP(0)
:004017CA 00000000000000000000 BYTE 10 DUP(0)
:004017D4 00000000000000000000 BYTE 10 DUP(0)
:004017DE 00000000000000000000 BYTE 10 DUP(0)
:004017E8 00000000000000000000 BYTE 10 DUP(0)
:004017F2 00000000000000000000 BYTE 10 DUP(0)
:004017FC 00000000000000000000 BYTE 10 DUP(0)
:00401806 00000000000000000000 BYTE 10 DUP(0)
:00401810 00000000000000000000 BYTE 10 DUP(0)
:0040181A 00000000000000000000 BYTE 10 DUP(0)
:00401824 00000000000000000000 BYTE 10 DUP(0)
:0040182E 00000000000000000000 BYTE 10 DUP(0)
:00401838 00000000000000000000 BYTE 10 DUP(0)
:00401842 00000000000000000000 BYTE 10 DUP(0)
:0040184C 00000000000000000000 BYTE 10 DUP(0)
:00401856 00000000000000000000 BYTE 10 DUP(0)
:00401860 00000000000000000000 BYTE 10 DUP(0)
:0040186A 00000000000000000000 BYTE 10 DUP(0)
:00401874 00000000000000000000 BYTE 10 DUP(0)
:0040187E 00000000000000000000 BYTE 10 DUP(0)
:00401888 00000000000000000000 BYTE 10 DUP(0)
:00401892 00000000000000000000 BYTE 10 DUP(0)
:0040189C 00000000000000000000 BYTE 10 DUP(0)
:004018A6 00000000000000000000 BYTE 10 DUP(0)
:004018B0 00000000000000000000 BYTE 10 DUP(0)
:004018BA 00000000000000000000 BYTE 10 DUP(0)
:004018C4 00000000000000000000 BYTE 10 DUP(0)
:004018CE 000000000000 BYTE 6 DUP(0)
:004018D4 7012 jo 004018E8
:004018D6 40 inc eax
:004018D7 0000000000 BYTE 5 DUP(0)
:004018DC 2019 and byte ptr [ecx], bl
:004018DE 40 inc eax
:004018DF 0000000000 BYTE 5 DUP(0)
:004018E4 50 push eax
:004018E5 134000 adc eax, dword ptr [eax+00]
* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004018D4(C)
|
:004018E8 FFFFFFFF BYTE 4 DUP(0ffh)
:004018EC 00000000 BYTE 4 DUP(0)
:004018F0 DC18 fcomp qword ptr [eax]
:004018F2 40 inc eax
:004018F3 00000000000000000000 BYTE 10 DUP(0)
:004018FD 000000 BYTE 3 DUP(0)
:00401900 FFFFFFFF BYTE 4 DUP(0ffh)
:00401904 00000000 BYTE 4 DUP(0)
:00401908 90144000 DWORD 00401490
:0040190C 2C144000 DWORD 0040142C
:00401910 D4224000 DWORD 004022D4
:00401914 90144000 DWORD 00401490
:00401918 B8144000 DWORD 004014B8
:0040191C D8224000 DWORD 004022D8
:00401920 00000000 BYTE 4 DUP(0)
:00401924 DC1440 fcom qword ptr [eax+2*eax]
:00401927 00FF add bh, bh
:00401929 FFFFFF BYTE 3 DUP(0ffh)
:0040192C 00000000000000000000 BYTE 10 DUP(0)
:00401936 0000 BYTE 2 DUP(0)
:00401938 DC18 fcomp qword ptr [eax]
:0040193A 40 inc eax
:0040193B 0000000000 BYTE 5 DUP(0)
:00401940 DC184000 DWORD 004018DC
:00401944 DC184000 DWORD 004018DC
:00401948 DC184000 DWORD 004018DC
:0040194C 00000000000000000000 BYTE 10 DUP(0)
:00401956 0000 BYTE 2 DUP(0)
:00401958 44 inc esp
:00401959 000000 BYTE 3 DUP(0)
:0040195C 0400 add al, 00
:0040195E 0000 add byte ptr [eax], al
:00401960 E9E9E9E9CC jmp CD2A034E
:00401965 CC int 03
:00401966 CC int 03
:00401967 CC int 03
:00401968 CC int 03
:00401969 CC int 03
:0040196A CC int 03
:0040196B CC int 03
:0040196C CC int 03
:0040196D CC int 03
:0040196E CC int 03
:0040196F CC int 03
:00401970 9E sahf
:00401971 9E sahf
:00401972 9E sahf
:00401973 9E sahf
:00401974 9C pushfd
:00401975 1900 sbb dword ptr [eax], eax
:00401977 00FF add bh, bh
:00401979 FFFFFFFFFFFFFF BYTE 7 DUP(0ffh)
:00401980 101A adc byte ptr [edx], bl
:00401982 000000 BYTE 3 DUP(0)
:00401985 1000 adc byte ptr [eax], al
:00401987 00000000000000000000 BYTE 10 DUP(0)
:00401991 00000000000000000000 BYTE 10 DUP(0)
:0040199B 00 BYTE 0
:0040199C 1E push ds
:0040199D 1A00 sbb al, byte ptr [eax]
:0040199F 0028 add byte ptr [eax], ch
:004019A1 1A00 sbb al, byte ptr [eax]
:004019A3 0036 add byte ptr [esi], dh
:004019A5 1A00 sbb al, byte ptr [eax]
:004019A7 00461A add byte ptr [esi+1A], al
:004019AA 0000 add byte ptr [eax], al
:004019AC 54 push esp
:004019AD 1A00 sbb al, byte ptr [eax]
:004019AF 00641A00 add byte ptr [edx+ebx], ah
:004019B3 00761A add byte ptr [esi+1A], dh
:004019B6 0000 add byte ptr [eax], al
:004019B8 881A mov byte ptr [edx], bl
:004019BA 0000 add byte ptr [eax], al
:004019BC 92 xchg eax,edx
:004019BD 1A00 sbb al, byte ptr [eax]
:004019BF 00A01A0000B4 add byte ptr [eax+B400001A], ah
:004019C5 1A00 sbb al, byte ptr [eax]
:004019C7 00C2 add dl, al
:004019C9 1A00 sbb al, byte ptr [eax]
:004019CB 00D8 add al, bl
:004019CD 1A00 sbb al, byte ptr [eax]
:004019CF 00E2 add dl, ah
:004019D1 1A00 sbb al, byte ptr [eax]
:004019D3 00FE add dh, bh
:004019D5 1A00 sbb al, byte ptr [eax]
:004019D7 00141B add byte ptr [ebx+ebx], dl
:004019DA 0000 add byte ptr [eax], al
:004019DC 221B and bl, byte ptr [ebx]
:004019DE 0000 add byte ptr [eax], al
:004019E0 341B xor al, 1B
:004019E2 0000 add byte ptr [eax], al
:004019E4 48 dec eax
:004019E5 1B00 sbb eax, dword ptr [eax]
:004019E7 00521B add byte ptr [edx+1B], dl
:004019EA 0000 add byte ptr [eax], al
:004019EC 641B00 sbb eax, dword ptr fs:[eax]
:004019EF 00761B add byte ptr [esi+1B], dh
:004019F2 0000 add byte ptr [eax], al
:004019F4 881B mov byte ptr [ebx], bl
:004019F6 0000 add byte ptr [eax], al
:004019F8 64 BYTE 064h
:004019F9 0000 add byte ptr [eax], al
:004019FB 80961B0000A01B adc byte ptr [esi+A000001B], 1B
:00401A02 0000 add byte ptr [eax], al
:00401A04 AA stosb
:00401A05 1B00 sbb eax, dword ptr [eax]
:00401A07 00B41B00000000 add byte ptr [ebx+ebx], dh
:00401A0E 0000 add byte ptr [eax], al
:00401A10 4D dec ebp
:00401A11 53 push ebx
:00401A12 56 push esi
:00401A13 42 inc edx
:00401A14 56 push esi
:00401A15 4D dec ebp
:00401A16 36302E xor byte ptr ss:[esi], ch
:00401A19 44 inc esp
:00401A1A 4C dec esp
:00401A1B 4C dec esp
:00401A1C 00000000 BYTE 4 DUP(0)
:00401A20 5F pop edi
:00401A21 43 inc ebx
:00401A22 49 dec ecx
:00401A23 636F73 arpl dword ptr [edi+73], ebp
:00401A26 00000000 BYTE 4 DUP(0)
:00401A2A 5F pop edi
:00401A2B 61 popad
:00401A2C 64 BYTE 064h
:00401A2D 6A5F push 0000005F
:00401A2F 667074 jo 00401AA6
:00401A32 61 popad
:00401A33 6E outsb
:00401A34 00000000 BYTE 4 DUP(0)
:00401A38 5F pop edi
:00401A39 61 popad
:00401A3A 64 BYTE 064h
:00401A3B 6A5F push 0000005F
:00401A3D 666469765F6D36 imul si, word ptr fs:[esi+5F], 366D
:00401A44 3400 xor al, 00
:00401A46 0000 add byte ptr [eax], al
:00401A48 5F pop edi
:00401A49 61 popad
:00401A4A 64 BYTE 064h
:00401A4B 6A5F push 0000005F
:00401A4D 667072 jo 00401AC2
:00401A50 65 BYTE 065h
:00401A51 6D insd
:00401A52 3100 xor dword ptr [eax], eax
:00401A54 0000 add byte ptr [eax], al
:00401A56 5F pop edi
:00401A57 61 popad
:00401A58 64 BYTE 064h
:00401A59 6A5F push 0000005F
:00401A5B 666469765F6D33 imul si, word ptr fs:[esi+5F], 336D
:00401A62 3200 xor al, byte ptr [eax]
:00401A64 0000 add byte ptr [eax], al
:00401A66 5F pop edi
:00401A67 61 popad
:00401A68 64 BYTE 064h
:00401A69 6A5F push 0000005F
:00401A6B 666469765F6D31 imul si, word ptr fs:[esi+5F], 316D
:00401A72 3669000000005F imul eax, dword ptr ss:[eax], 5F000000
:00401A79 61 popad
:00401A7A 64 BYTE 064h
:00401A7B 6A5F push 0000005F
:00401A7D 66646976725F6D imul si, word ptr fs:[esi+72], 6D5F
:00401A84 3136 xor dword ptr [esi], esi
:00401A86 690000005F43 imul eax, dword ptr [eax], 435F0000
:00401A8C 49 dec ecx
:00401A8D 7369 jnb 00401AF8
:00401A8F 6E outsb
:00401A90 00000000 BYTE 4 DUP(0)
:00401A94 5F pop edi
:00401A95 5F pop edi
:00401A96 7662 jbe 00401AFA
:00401A98 61 popad
:00401A99 43 inc ebx
:00401A9A 686B73746B push 6B74736B
:00401A9F 000000 BYTE 3 DUP(0)
:00401AA2 45 inc ebp
:00401AA3 56 push esi
:00401AA4 45 inc ebp
:00401AA5 4E dec esi
* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00401A30(C)
|
:00401AA6 54 push esp
:00401AA7 5F pop edi
:00401AA8 53 push ebx
:00401AA9 49 dec ecx
:00401AAA 4E dec esi
:00401AAB 4B dec ebx
:00401AAC 5F pop edi
:00401AAD 41 inc ecx
:00401AAE 64 BYTE 064h
:00401AAF 64 BYTE 064h
:00401AB0 52 push edx
:00401AB1 00 BYTE 000h
:00401AB2 66000000 BYTE 3 DUP(0)
:00401AB6 5F pop edi
:00401AB7 61 popad
:00401AB8 64 BYTE 064h
:00401AB9 6A5F push 0000005F
:00401ABB 667061 jo 00401B1F
:00401ABE 7461 je 00401B21
:00401AC0 6E outsb
:00401AC1 000000 BYTE 3 DUP(0)
:00401AC4 45 inc ebp
:00401AC5 56 push esi
:00401AC6 45 inc ebp
:00401AC7 4E dec esi
:00401AC8 54 push esp
:00401AC9 5F pop edi
:00401ACA 53 push ebx
:00401ACB 49 dec ecx
:00401ACC 4E dec esi
:00401ACD 4B dec ebx
:00401ACE 5F pop edi
:00401ACF 52 push edx
:00401AD0 65 BYTE 065h
:00401AD1 6C insb
:00401AD2 65 BYTE 065h
:00401AD3 61 popad
:00401AD4 7365 jnb 00401B3B
:00401AD6 00000000 BYTE 4 DUP(0)
:00401ADA 5F pop edi
:00401ADB 43 inc ebx
:00401ADC 49 dec ecx
:00401ADD 7371 jnb 00401B50
:00401ADF 7274 jb 00401B55
:00401AE1 000000 BYTE 3 DUP(0)
:00401AE4 45 inc ebp
:00401AE5 56 push esi
:00401AE6 45 inc ebp
:00401AE7 4E dec esi
:00401AE8 54 push esp
:00401AE9 5F pop edi
:00401AEA 53 push ebx
:00401AEB 49 dec ecx
:00401AEC 4E dec esi
:00401AED 4B dec ebx
:00401AEE 5F pop edi
:00401AEF 51 push ecx
:00401AF0 7565 jne 00401B57
:00401AF2 7279 jb 00401B6D
:00401AF4 49 dec ecx
:00401AF5 6E outsb
:00401AF6 7465 je 00401B5D
* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00401A8D(C)
|
:00401AF8 7266 jb 00401B60
* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00401A96(C)
|
:00401AFA 61 popad
:00401AFB 636500 arpl dword ptr [ebp+00], esp
:00401AFE 0000 add byte ptr [eax], al
:00401B00 5F pop edi
:00401B01 5F pop edi
:00401B02 7662 jbe 00401B66
:00401B04 61 popad
:00401B05 45 inc ebp
:00401B06 7863 js 00401B6B
:00401B08 65 BYTE 065h
:00401B09 7074 jo 00401B7F
:00401B0B 48 dec eax
:00401B0C 61 popad
:00401B0D 6E outsb
:00401B0E 64 BYTE 064h
:00401B0F 6C insb
:00401B10 65 BYTE 065h
:00401B11 7200 jb 00401B13
* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00401B11(C)
|
:00401B13 000000 BYTE 3 DUP(0)
:00401B16 5F pop edi
:00401B17 61 popad
:00401B18 64 BYTE 064h
:00401B19 6A5F push 0000005F
:00401B1B 667072 jo 00401B90
:00401B1E 65 BYTE 065h
* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00401ABC(C)
|
:00401B1F 6D insd
:00401B20 00000000 BYTE 4 DUP(0)
:00401B24 5F pop edi
:00401B25 61 popad
:00401B26 64 BYTE 064h
:00401B27 6A5F push 0000005F
:00401B29 66646976725F6D imul si, word ptr fs:[esi+72], 6D5F
:00401B30 36 BYTE 036h
:00401B31 3400 xor al, 00
:00401B33 000000 BYTE 3 DUP(0)
:00401B36 5F pop edi
:00401B37 5F pop edi
:00401B38 7662 jbe 00401B9C
:00401B3A 61 popad
* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00401AD4(C)
|
:00401B3B 46 inc esi
:00401B3C 50 push eax
:00401B3D 45 inc ebp
:00401B3E 7863 js 00401BA3
:00401B40 65 BYTE 065h
:00401B41 7074 jo 00401BB7
:00401B43 696F6E00000000 imul ebp, dword ptr [edi+6E], 00000000
:00401B4A 5F pop edi
:00401B4B 43 inc ebx
:00401B4C 49 dec ecx
:00401B4D 6C insb
:00401B4E 6F outsd
:00401B4F 00 BYTE 000h
* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00401ADD(C)
|
:00401B50 00000000 BYTE 4 DUP(0)
:00401B54 5F pop edi
* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00401ADF(C)
|
:00401B55 61 popad
:00401B56 64 BYTE 064h
* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00401AF0(C)
|
:00401B57 6A5F push 0000005F
:00401B59 666469765F6D33 imul si, word ptr fs:[esi+5F], 336D
* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00401AF8(C)
|
:00401B60 326900 xor ch, byte ptr [ecx+00]
:00401B63 000000 BYTE 3 DUP(0)
* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00401B02(C)
|
:00401B66 5F pop edi
:00401B67 61 popad
:00401B68 64 BYTE 064h
:00401B69 6A5F push 0000005F
* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00401B06(C)
|
:00401B6B 66646976725F6D imul si, word ptr fs:[esi+72], 6D5F
:00401B72 3332 xor esi, dword ptr [edx]
:00401B74 690000005F61 imul eax, dword ptr [eax], 615F0000
:00401B7A 64 BYTE 064h
:00401B7B 6A5F push 0000005F
:00401B7D 66646976725F6D imul si, word ptr fs:[esi+72], 6D5F
:00401B84 3332 xor esi, dword ptr [edx]
:00401B86 00000000 BYTE 4 DUP(0)
:00401B8A 5F pop edi
:00401B8B 61 popad
:00401B8C 64 BYTE 064h
:00401B8D 6A5F push 0000005F
:00401B8F 666469765F7200 imul si, word ptr fs:[esi+5F], 0072
:00401B96 0000 add byte ptr [eax], al
:00401B98 5F pop edi
:00401B99 43 inc ebx
:00401B9A 49 dec ecx
:00401B9B 61 popad
* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00401B38(C)
|
:00401B9C 7461 je 00401BFF
:00401B9E 6E outsb
:00401B9F 000000 BYTE 3 DUP(0)
:00401BA2 5F pop edi
* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00401B3E(C)
|
:00401BA3 61 popad
:00401BA4 6C insb
:00401BA5 6C insb
:00401BA6 6D insd
:00401BA7 756C jne 00401C15
:00401BA9 000000 BYTE 3 DUP(0)
:00401BAC 5F pop edi
:00401BAD 43 inc ebx
:00401BAE 49 dec ecx
:00401BAF 7461 je 00401C12
:00401BB1 6E outsb
:00401BB2 00000000 BYTE 4 DUP(0)
:00401BB6 5F pop edi
* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00401B41(C)
|
:00401BB7 43 inc ebx
:00401BB8 49 dec ecx
:00401BB9 65 BYTE 065h
:00401BBA 7870 js 00401C2C
:00401BBC 00000000000000000000 BYTE 10 DUP(0)
:00401BC6 00000000000000000000 BYTE 10 DUP(0)
:00401BD0 00000000000000000000 BYTE 10 DUP(0)
:00401BDA 00000000000000000000 BYTE 10 DUP(0)
:00401BE4 00000000000000000000 BYTE 10 DUP(0)
:00401BEE 00000000000000000000 BYTE 10 DUP(0)
:00401BF8 00000000000000000000 BYTE 10 DUP(0)
:00401C02 00000000000000000000 BYTE 10 DUP(0)
:00401C0C 00000000000000000000 BYTE 10 DUP(0)
:00401C16 00000000000000000000 BYTE 10 DUP(0)
:00401C20 00000000000000000000 BYTE 10 DUP(0)
:00401C2A 00000000000000000000 BYTE 10 DUP(0)
:00401C34 00000000000000000000 BYTE 10 DUP(0)
:00401C3E 00000000000000000000 BYTE 10 DUP(0)
:00401C48 00000000000000000000 BYTE 10 DUP(0)
:00401C52 00000000000000000000 BYTE 10 DUP(0)
:00401C5C 00000000000000000000 BYTE 10 DUP(0)
:00401C66 00000000000000000000 BYTE 10 DUP(0)
:00401C70 00000000000000000000 BYTE 10 DUP(0)
:00401C7A 00000000000000000000 BYTE 10 DUP(0)
:00401C84 00000000000000000000 BYTE 10 DUP(0)
:00401C8E 00000000000000000000 BYTE 10 DUP(0)
:00401C98 00000000000000000000 BYTE 10 DUP(0)
:00401CA2 00000000000000000000 BYTE 10 DUP(0)
:00401CAC 00000000000000000000 BYTE 10 DUP(0)
:00401CB6 00000000000000000000 BYTE 10 DUP(0)
:00401CC0 00000000000000000000 BYTE 10 DUP(0)
:00401CCA 00000000000000000000 BYTE 10 DUP(0)
:00401CD4 00000000000000000000 BYTE 10 DUP(0)
:00401CDE 00000000000000000000 BYTE 10 DUP(0)
:00401CE8 00000000000000000000 BYTE 10 DUP(0)
:00401CF2 00000000000000000000 BYTE 10 DUP(0)
:00401CFC 00000000000000000000 BYTE 10 DUP(0)
:00401D06 00000000000000000000 BYTE 10 DUP(0)
:00401D10 00000000000000000000 BYTE 10 DUP(0)
:00401D1A 00000000000000000000 BYTE 10 DUP(0)
:00401D24 00000000000000000000 BYTE 10 DUP(0)
:00401D2E 00000000000000000000 BYTE 10 DUP(0)
:00401D38 00000000000000000000 BYTE 10 DUP(0)
:00401D42 00000000000000000000 BYTE 10 DUP(0)
:00401D4C 00000000000000000000 BYTE 10 DUP(0)
:00401D56 00000000000000000000 BYTE 10 DUP(0)
:00401D60 00000000000000000000 BYTE 10 DUP(0)
:00401D6A 00000000000000000000 BYTE 10 DUP(0)
:00401D74 00000000000000000000 BYTE 10 DUP(0)
:00401D7E 00000000000000000000 BYTE 10 DUP(0)
:00401D88 00000000000000000000 BYTE 10 DUP(0)
:00401D92 00000000000000000000 BYTE 10 DUP(0)
:00401D9C 00000000000000000000 BYTE 10 DUP(0)
:00401DA6 00000000000000000000 BYTE 10 DUP(0)
:00401DB0 00000000000000000000 BYTE 10 DUP(0)
:00401DBA 00000000000000000000 BYTE 10 DUP(0)
:00401DC4 00000000000000000000 BYTE 10 DUP(0)
:00401DCE 00000000000000000000 BYTE 10 DUP(0)
:00401DD8 00000000000000000000 BYTE 10 DUP(0)
:00401DE2 00000000000000000000 BYTE 10 DUP(0)
:00401DEC 00000000000000000000 BYTE 10 DUP(0)
:00401DF6 00000000000000000000 BYTE 10 DUP(0)
:00401E00 00000000000000000000 BYTE 10 DUP(0)
:00401E0A 00000000000000000000 BYTE 10 DUP(0)
:00401E14 00000000000000000000 BYTE 10 DUP(0)
:00401E1E 00000000000000000000 BYTE 10 DUP(0)
:00401E28 00000000000000000000 BYTE 10 DUP(0)
:00401E32 00000000000000000000 BYTE 10 DUP(0)
:00401E3C 00000000000000000000 BYTE 10 DUP(0)
:00401E46 00000000000000000000 BYTE 10 DUP(0)
:00401E50 00000000000000000000 BYTE 10 DUP(0)
:00401E5A 00000000000000000000 BYTE 10 DUP(0)
:00401E64 00000000000000000000 BYTE 10 DUP(0)
:00401E6E 00000000000000000000 BYTE 10 DUP(0)
:00401E78 00000000000000000000 BYTE 10 DUP(0)
:00401E82 00000000000000000000 BYTE 10 DUP(0)
:00401E8C 00000000000000000000 BYTE 10 DUP(0)
:00401E96 00000000000000000000 BYTE 10 DUP(0)
:00401EA0 00000000000000000000 BYTE 10 DUP(0)
:00401EAA 00000000000000000000 BYTE 10 DUP(0)
:00401EB4 00000000000000000000 BYTE 10 DUP(0)
:00401EBE 00000000000000000000 BYTE 10 DUP(0)
:00401EC8 00000000000000000000 BYTE 10 DUP(0)
:00401ED2 00000000000000000000 BYTE 10 DUP(0)
:00401EDC 00000000000000000000 BYTE 10 DUP(0)
:00401EE6 00000000000000000000 BYTE 10 DUP(0)
:00401EF0 00000000000000000000 BYTE 10 DUP(0)
:00401EFA 00000000000000000000 BYTE 10 DUP(0)
:00401F04 00000000000000000000 BYTE 10 DUP(0)
:00401F0E 00000000000000000000 BYTE 10 DUP(0)
:00401F18 00000000000000000000 BYTE 10 DUP(0)
:00401F22 00000000000000000000 BYTE 10 DUP(0)
:00401F2C 00000000000000000000 BYTE 10 DUP(0)
:00401F36 00000000000000000000 BYTE 10 DUP(0)
:00401F40
Code Offset = 00001000, Code Size = 00001000
Data Offset = 00002000, Data Size = 00001000
Number of Objects = 0003 (dec), Imagebase = 00400000h
Object01: .text RVA: 00001000 Offset: 00001000 Size: 00001000 Flags: 60000020
Object02: .data RVA: 00002000 Offset: 00002000 Size: 00001000 Flags: C0000040
Object03: .rsrc RVA: 00003000 Offset: 00003000 Size: 00001000 Flags: 40000040
+++++++++++++++++++ MENU INFORMATION ++++++++++++++++++
There Are No Menu Resources in This Application
+++++++++++++++++ DIALOG INFORMATION ++++++++++++++++++
There Are No Dialog Resources in This Application
+++++++++++++++++++ IMPORTED FUNCTIONS ++++++++++++++++++
Number of Imported Modules = 1 (decimal)
Import Module 001: MSVBVM60.DLL
+++++++++++++++++++ IMPORT MODULE DETAILS +++++++++++++++
Import Module 001: MSVBVM60.DLL
Addr:7351B1FC hint(0000) Name: _CIcos
Addr:7351698D hint(0000) Name: _adj_fptan
Addr:7351624E hint(0000) Name: _adj_fdiv_m64
Addr:735168D5 hint(0000) Name: _adj_fprem1
Addr:73516202 hint(0000) Name: _adj_fdiv_m32
Addr:7351629A hint(0000) Name: _adj_fdiv_m16i
Addr:7351639A hint(0000) Name: _adj_fdivr_m16i
Addr:7351B364 hint(0000) Name: _CIsin
Addr:734444AF hint(0000) Name: __vbaChkstk
Addr:7343D86F hint(0000) Name: EVENT_SINK_AddRef
Addr:7351698A hint(0000) Name: _adj_fpatan
Addr:7344E385 hint(0000) Name: EVENT_SINK_Release
Addr:7351B409 hint(0000) Name: _CIsqrt
Addr:734F677C hint(0000) Name: EVENT_SINK_QueryInterface
Addr:73444E5B hint(0000) Name: __vbaExceptHandler
Addr:7351661D hint(0000) Name: _adj_fprem
Addr:7351634E hint(0000) Name: _adj_fdivr_m64
Addr:73529D7F hint(0000) Name: __vbaFPException
Addr:7351B2A1 hint(0000) Name: _CIlog
Addr:735162CE hint(0000) Name: _adj_fdiv_m32i
Addr:735163CE hint(0000) Name: _adj_fdivr_m32i
Addr:73516302 hint(0000) Name: _adj_fdivr_m32
Addr:73515D3D hint(0000) Name: _adj_fdiv_r
Addr:7342DE3E hint(0064) Name: ThunRTMain
Addr:7351B136 hint(0000) Name: _CIatan
Addr:735120EA hint(0000) Name: _allmul
Addr:7351B4BA hint(0000) Name: _CItan
Addr:73510F35 hint(0000) Name: _CIexp
+++++++++++++++++++ EXPORTED FUNCTIONS ++++++++++++++++++
Number of Exported Functions = 0000 (decimal)
+++++++++++++++++++ ASSEMBLY CODE LISTING ++++++++++++++++++
//********************** Start of Code in Object .text **************
Program Entry Point = 00401128 (E:\Deba.exe File Offset:00003128)
:00401000 FC cld
:00401001 B151 mov cl, 51
:00401003 738D jnb 00400F92
:00401005 6951734E625173 imul edx, dword ptr [ecx+73], 7351624E
:0040100C D568 aad (base=104)
:0040100E 51 push ecx
:0040100F 7302 jnb 00401013
:00401011 625173 bound edx, dword ptr [ecx+73]
:00401014 9A6251739A6351 call 5163:9A735162
* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040104B(C)
|
:0040101B 7364 jnb 00401081
:0040101D B351 mov bl, 51
:0040101F 73AF jnb 00400FD0
:00401021 44 inc esp
:00401022 44 inc esp
:00401023 736F jnb 00401094
:00401025 D84373 fadd dword ptr [ebx+73]
:00401028 8A6951 mov ch, byte ptr [ecx+51]
:0040102B 7385 jnb 00400FB2
:0040102D E344 jcxz 00401073
:0040102F 7309 jnb 0040103A
:00401031 B451 mov ah, 51
:00401033 737C jnb 004010B1
:00401035 674F dec edi
:00401037 735B jnb 00401094
:00401039 4E dec esi
* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040102F(C)
|
:0040103A 44 inc esp
:0040103B 731D jnb 0040105A
:0040103D 6651 push cx
:0040103F 734E jnb 0040108F
:00401041 635173 arpl dword ptr [ecx+73], edx
:00401044 7F9D jg 00400FE3
:00401046 52 push edx
:00401047 73A1 jnb 00400FEA
:00401049 B251 mov dl, 51
:0040104B 73CE jnb 0040101B
:0040104D 625173 bound edx, dword ptr [ecx+73]
:00401050 CE into
:00401051 635173 arpl dword ptr [ecx+73], edx
:00401054 026351 add ah, byte ptr [ebx+51]
:00401057 733D jnb 00401096
:00401059 5D pop ebp
* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040103B(C)
|
:0040105A 51 push ecx
:0040105B 733E jnb 0040109B
:0040105D DE4273 fiadd word ptr [edx+73]
:00401060 36 BYTE 036h
:00401061 B151 mov cl, 51
:00401063 73EA jnb 0040104F
:00401065 205173 and byte ptr [ecx+73], dl
:00401068 BAB4517335 mov edx, 357351B4
:0040106D 0F BYTE 0fh
:0040106E 51 push ecx
:0040106F 7300 jnb 00401071
* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040106F(C)
|
:00401071 00000000000000000000 BYTE 10 DUP(0)
:0040107B 0000000000 BYTE 5 DUP(0)
* Reference To: MSVBVM60.__vbaChkstk, Ord:0000h
|
:00401080 FF2520104000 Jmp dword ptr [00401020]
* Reference To: MSVBVM60.__vbaExceptHandler, Ord:0000h
|
:00401086 FF2538104000 Jmp dword ptr [00401038]
* Reference To: MSVBVM60.__vbaFPException, Ord:0000h
|
:0040108C FF2544104000 Jmp dword ptr [00401044]
* Reference To: MSVBVM60._adj_fdiv_m16i, Ord:0000h
|
:00401092 FF2514104000 Jmp dword ptr [00401014]
* Reference To: MSVBVM60._adj_fdiv_m32, Ord:0000h
|
:00401098 FF2510104000 Jmp dword ptr [00401010]
* Reference To: MSVBVM60._adj_fdiv_m32i, Ord:0000h
|
:0040109E FF254C104000 Jmp dword ptr [0040104C]
* Reference To: MSVBVM60._adj_fdiv_m64, Ord:0000h
|
:004010A4 FF2508104000 Jmp dword ptr [00401008]
* Reference To: MSVBVM60._adj_fdiv_r, Ord:0000h
|
:004010AA FF2558104000 Jmp dword ptr [00401058]
* Reference To: MSVBVM60._adj_fdivr_m16i, Ord:0000h
|
:004010B0 FF2518104000 Jmp dword ptr [00401018]
* Reference To: MSVBVM60._adj_fdivr_m32, Ord:0000h
|
:004010B6 FF2554104000 Jmp dword ptr [00401054]
* Reference To: MSVBVM60._adj_fdivr_m32i, Ord:0000h
|
:004010BC FF2550104000 Jmp dword ptr [00401050]
* Reference To: MSVBVM60._adj_fdivr_m64, Ord:0000h
|
:004010C2 FF2540104000 Jmp dword ptr [00401040]
* Reference To: MSVBVM60._adj_fpatan, Ord:0000h
|
:004010C8 FF2528104000 Jmp dword ptr [00401028]
* Reference To: MSVBVM60._adj_fprem, Ord:0000h
|
:004010CE FF253C104000 Jmp dword ptr [0040103C]
* Reference To: MSVBVM60._adj_fprem1, Ord:0000h
|
:004010D4 FF250C104000 Jmp dword ptr [0040100C]
* Reference To: MSVBVM60._adj_fptan, Ord:0000h
|
:004010DA FF2504104000 Jmp dword ptr [00401004]
* Reference To: MSVBVM60._CIatan, Ord:0000h
|
:004010E0 FF2560104000 Jmp dword ptr [00401060]
* Reference To: MSVBVM60._CIcos, Ord:0000h
|
:004010E6 FF2500104000 Jmp dword ptr [00401000]
* Reference To: MSVBVM60._CIexp, Ord:0000h
|
:004010EC FF256C104000 Jmp dword ptr [0040106C]
* Reference To: MSVBVM60._CIlog, Ord:0000h
|
:004010F2 FF2548104000 Jmp dword ptr [00401048]
* Reference To: MSVBVM60._CIsin, Ord:0000h
|
:004010F8 FF251C104000 Jmp dword ptr [0040101C]
* Reference To: MSVBVM60._CIsqrt, Ord:0000h
|
:004010FE FF2530104000 Jmp dword ptr [00401030]
* Reference To: MSVBVM60._CItan, Ord:0000h
|
:00401104 FF2568104000 Jmp dword ptr [00401068]
* Reference To: MSVBVM60._allmul, Ord:0000h
|
:0040110A FF2564104000 Jmp dword ptr [00401064]
* Reference To: MSVBVM60.EVENT_SINK_QueryInterface, Ord:0000h
|
:00401110 FF2534104000 Jmp dword ptr [00401034]
* Reference To: MSVBVM60.EVENT_SINK_AddRef, Ord:0000h
|
:00401116 FF2524104000 Jmp dword ptr [00401024]
* Reference To: MSVBVM60.EVENT_SINK_Release, Ord:0000h
|
:0040111C FF252C104000 Jmp dword ptr [0040102C]
* Reference To: MSVBVM60.ThunRTMain, Ord:0064h
|
:00401122 FF255C104000 Jmp dword ptr [0040105C]
* Possible StringData Ref from Code Obj ->"VB5!"
|
//******************** Program Entry Point ********
:00401128 68C0124000 push 004012C0
* Reference To: MSVBVM60.ThunRTMain, Ord:0064h
|
:0040112D E8F0FFFFFF Call 00401122
:00401132 000000000000 BYTE 6 DUP(0)
:00401138 3000 xor byte ptr [eax], al
:0040113A 0000 add byte ptr [eax], al
:0040113C 40 inc eax
:0040113D 00000000000000 BYTE 7 DUP(0)
:00401144 46 inc esi
:00401145 61 popad
:00401146 4A dec edx
:00401147 AF scasd
:00401148 B93E5C4885 mov ecx, 85485C3E
:0040114D 4A dec edx
:0040114E 9B wait
:0040114F BB230CD13E mov ebx, 3ED10C23
:00401154 000000000000 BYTE 6 DUP(0)
:0040115A 0100 add dword ptr [eax], eax
:0040115C 0000000000000000 BYTE 8 DUP(0)
:00401164 50 push eax
:00401165 726F jb 004011D6
:00401167 6A65 push 00000065
:00401169 63743100 arpl dword ptr [ecx+esi], esi
:0040116D 00000000000000000000 BYTE 10 DUP(0)
:00401177 00 BYTE 0
:00401178 FFCC dec esp
:0040117A 3100 xor dword ptr [eax], eax
:0040117C 019199185D9F add dword ptr [ecx+9F5D1899], edx
:00401182 D833 fdiv dword ptr [ebx]
:00401184 47 inc edi
:00401185 88F3 mov bl, dh
:00401187 B05E mov al, 5E
:00401189 295831 sub dword ptr [eax+31], ebx
:0040118C 5A pop edx
:0040118D FC cld
:0040118E 5D pop ebp
:0040118F 43 inc ebx
:00401190 E271 loop 00401203
:00401192 8B354DA28BBB mov esi, dword ptr [BB8BA24D]
:00401198 FFC9 dec ecx
:0040119A 8A7275 mov dh, byte ptr [edx+75]
:0040119D 3A4FAD cmp cl, byte ptr [edi-53]
:004011A0 339966CF11B7 xor ebx, dword ptr [ecx+B711CF66]
:004011A6 0C00 or al, 00
:004011A8 AA stosb
:004011A9 0060D3 add byte ptr [eax-2D], ah
:004011AC 93 xchg eax,ebx
:004011AD 00000000000000000000 BYTE 10 DUP(0)
:004011B7 00000000000000000000 BYTE 10 DUP(0)
:004011C1 00000000000000000000 BYTE 10 DUP(0)
:004011CB 000000000000 BYTE 6 DUP(0)
:004011D1 9D popfd
:004011D2 000000 BYTE 3 DUP(0)
:004011D5 51 push ecx
* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00401165(C)
|
:004011D6 00000000 BYTE 4 DUP(0)
:004011DA 0500466F72 add eax, 726F4600
:004011DF 6D insd
:004011E0 3100 xor dword ptr [eax], eax
:004011E2 0D011800C2 or eax, C2001801
:004011E7 E0F9 loopnz 004011E2
:004011E9 E020 loopnz 0040120B
:004011EB 2E202E and byte ptr cs:[esi], ch
:004011EE 202E and byte ptr [esi], ch
:004011F0 E427 in al, 27
:004011F2 E5E1 in ax, E1
:004011F4 E020 loopnz 00401216
:004011F6 2E202E and byte ptr cs:[esi], ch
:004011F9 202E and byte ptr [esi], ch
:004011FB E1F0 loopz 004011ED
:004011FD E500 in ax, 00
:004011FF 1901 sbb dword ptr [ecx], eax
:00401201 004200 add byte ptr [edx+00], al
:00401204 23FF and edi, edi
:00401206 FFFFFF BYTE 3 DUP(0ffh)
:00401209 2405 and al, 05
:0040120B 00466F add byte ptr [esi+6F], al
:0040120E 726D jb 0040127D
:00401210 3100 xor dword ptr [eax], eax
:00401212 353C000000 xor eax, 0000003C
:00401217 C20100 ret 0001
:0040121A 00 BYTE 0
:0040121B 3813 cmp byte ptr [ebx], dl
:0040121D 0000 add byte ptr [eax], al
:0040121F 120C00 adc cl, byte ptr [eax+eax]
:00401222 004603 add byte ptr [esi+03], al
:00401225 FF01 inc dword ptr [ecx]
:00401227 45 inc ebp
:00401228 000000 BYTE 3 DUP(0)
:0040122B 0106 add dword ptr [esi], eax
:0040122D 004C6162 add byte ptr [ecx+62], cl
:00401231 65 BYTE 065h
:00401232 6C insb
:00401233 3100 xor dword ptr [eax], eax
:00401235 0101 add dword ptr [ecx], eax
:00401237 0C00 or al, 00
:00401239 C1 BYTE 0d0h
:0040123A F0 lock
:0040123B E0F3 loopnz 00401230
:0040123D 20C4 and ah, al
:0040123F 27 daa
:00401240 E5E1 in ax, E1
:00401242 E020 loopnz 00401264
:00401244 2100 and dword ptr [eax], eax
:00401246 05D002C003 add eax, 03C002D0
:0040124B 2F das
:0040124C 0DDF021200 or eax, 001202DF
:00401251 001F add byte ptr [edi], bl
:00401253 002501CC0000 add byte ptr [0000CC01], ah
:00401259 90 nop
:0040125A 0180A903000B add dword ptr [eax+0B0003A9], eax
:00401260 41 inc ecx
:00401261 7269 jb 004012CC
:00401263 61 popad
:00401264 6C insb
:00401265 20426C and byte ptr [edx+6C], al
:00401268 61 popad
:00401269 636BFF arpl dword ptr [ebx-01], ebp
:0040126C 020400 add al, byte ptr [eax+eax]
:0040126F 005000 add byte ptr [eax+00], dl
:00401272 0000 add byte ptr [eax], al
:00401274 91 xchg eax,ecx
:00401275 99 cdq
:00401276 185D9F sbb byte ptr [ebp-61], bl
:00401279 D833 fdiv dword ptr [ebx]
:0040127B 47 inc edi
:0040127C 88F3 mov bl, dh
:0040127E B05E mov al, 5E
:00401280 295831 sub dword ptr [eax+31], ebx
:00401283 5A pop edx
:00401284 00000000000000000000 BYTE 10 DUP(0)
:0040128E 00000000000000000000 BYTE 10 DUP(0)
:00401298 90 nop
:00401299 00000000000000000000 BYTE 10 DUP(0)
:004012A3 00000000000000000000 BYTE 10 DUP(0)
:004012AD 000000 BYTE 3 DUP(0)
:004012B0 F60000 test byte ptr [eax], 00
:004012B3 0000000000 BYTE 5 DUP(0)
:004012B8 7811 js 004012CB
:004012BA 40 inc eax
:004012BB 004C0000 add byte ptr [eax+eax], cl
:004012BF 005642 add byte ptr [esi+42], dl
:004012C2 3521F01F2A xor eax, 2A1FF021
:004012C7 00000000000000000000 BYTE 10 DUP(0)
:004012D1 000000 BYTE 3 DUP(0)
:004012D4 7E00 jle 004012D6
* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004012D4(C)
|
:004012D6 00000000000000000000 BYTE 10 DUP(0)
:004012E0 0000 BYTE 2 DUP(0)
:004012E2 0A00 or al, byte ptr [eax]
:004012E4 090400 or dword ptr [eax+eax], eax
:004012E7 000000000000000000 BYTE 9 DUP(0)
:004012F0 A016400002 mov al, byte ptr [02004016]
:004012F5 F0 lock
:004012F6 3000 xor byte ptr [eax], al
:004012F8 00FF add bh, bh
:004012FA FFFF BYTE 2 DUP(0ffh)
:004012FC 0800 or byte ptr [eax], al
:004012FE 0000 add byte ptr [eax], al
:00401300 0100 add dword ptr [eax], eax
:00401302 0000 add byte ptr [eax], al
:00401304 0100 add dword ptr [eax], eax
:00401306 0000 add byte ptr [eax], al
:00401308 E900000070 jmp 7040130D
:0040130D 124000 adc al, byte ptr [eax+00]
:00401310 70124000 DWORD 00401270
:00401314 34114000 DWORD 00401134
:00401318 7800 js 0040131A
:0040131A 0000 add byte ptr [eax], al
:0040131C 7D00 jge 0040131E
* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040131C(C)
|
:0040131E 0000 add byte ptr [eax], al
:00401320 8600 xchg byte ptr [eax], al
:00401322 0000 add byte ptr [eax], al
* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00401310(C)
|
:00401324 8700 xchg dword ptr [eax], eax
:00401326 00000000000000000000 BYTE 10 DUP(0)
:00401330 0000000000000000 BYTE 8 DUP(0)
:00401338 44 inc esp
:00401339 65626100 bound esp, dword ptr gs:[ecx+00]
:0040133D 50 push eax
:0040133E 726F jb 004013AF
:00401340 6A65 push 00000065
:00401342 63743100 arpl dword ptr [ecx+esi], esi
:00401346 005072 add byte ptr [eax+72], dl
:00401349 6F outsd
:0040134A 6A65 push 00000065
:0040134C 63743100 arpl dword ptr [ecx+esi], esi
:00401350 00000000 BYTE 4 DUP(0)
:00401354 2C204000 DWORD 0040202C
:00401358 E0184000 DWORD 004018E0
:0040135C FFFFFFFF BYTE 4 DUP(0ffh)
:00401360 00000000 BYTE 4 DUP(0)
:00401364 1C20 sbb al, 20
:00401366 40 inc eax
:00401367 00A45EFF16D6D6 add byte ptr [esi+2*ebx-2929E901], ah
:0040136E 8A4A93 mov cl, byte ptr [edx-6D]
:00401371 1D2FC90C27 sbb eax, 270CC92F
:00401376 3CAE cmp al, AE
:00401378 0A00 or al, byte ptr [eax]
:0040137A 0100 add dword ptr [eax], eax
:0040137C 0400 add al, 00
:0040137E 0100 add dword ptr [eax], eax
:00401380 A4 movsb
:00401381 134000 adc eax, dword ptr [eax+00]
:00401384 00000000000000000000 BYTE 10 DUP(0)
:0040138E 0000 BYTE 2 DUP(0)
:00401390 D813 fcom dword ptr [ebx]
:00401392 40 inc eax
:00401393 0009 add byte ptr [ecx], cl
:00401395 0400 add al, 00
:00401397 0002 add byte ptr [edx], al
:00401399 0400 add al, 00
:0040139B 0000000000 BYTE 5 DUP(0)
:004013A0 0200 add al, byte ptr [eax]
:004013A2 0000 add byte ptr [eax], al
:004013A4 DC1440 fcom qword ptr [eax+2*eax]
:004013A7 00FF add bh, bh
:004013A9 FFFFFF BYTE 3 DUP(0ffh)
:004013AC D01440 rcl byte ptr [eax+2*eax], 1
* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040133E(C)
|
:004013AF 00000000000000000000 BYTE 10 DUP(0)
:004013B9 000000 BYTE 3 DUP(0)
:004013BC E413 in al, 13
:004013BE 40 inc eax
:004013BF 0000000000 BYTE 5 DUP(0)
:004013C4 B8311800FF mov eax, FF001831
:004013C9 FF00 inc dword ptr [eax]
:004013CB 008380010000 add byte ptr [ebx+00000180], al
:004013D1 00000000000000 BYTE 7 DUP(0)
:004013D8 50 push eax
:004013D9 726F jb 0040144A
:004013DB 6A65 push 00000065
:004013DD 63743100 arpl dword ptr [ecx+esi], esi
:004013E1 000000 BYTE 3 DUP(0)
:004013E4 46 inc esi
:004013E5 6F outsd
:004013E6 726D jb 00401455
:004013E8 3100 xor dword ptr [eax], eax
:004013EA 0000 add byte ptr [eax], al
:004013EC FC cld
:004013ED 5D pop ebp
:004013EE 43 inc ebx
:004013EF E271 loop 00401462
:004013F1 8B354DA28BBB mov esi, dword ptr [BB8BA24D]
:004013F7 FFC9 dec ecx
:004013F9 8A7275 mov dh, byte ptr [edx+75]
:004013FC 8602 xchg byte ptr [edx], al
:004013FE 3AA4AA2D714A91 cmp ah, byte ptr [edx+4*ebp-6EB58ED3]
:00401405 07 pop es
:00401406 A7 cmpsd
:00401407 67284E2B sub [bp+2B], cl
:0040140B 1C91 sbb al, 91
:0040140D 99 cdq
:0040140E 185D9F sbb byte ptr [ebp-61], bl
:00401411 D833 fdiv dword ptr [ebx]
:00401413 47 inc edi
:00401414 88F3 mov bl, dh
:00401416 B05E mov al, 5E
:00401418 295831 sub dword ptr [eax+31], ebx
:0040141B 5A pop edx
:0040141C 5F pop edi
:0040141D 7A1C jpe 0040143B
:0040141F C08924DC4E999D ror byte ptr [ecx+994EDC24], 9D
:00401426 EAE68BE6B4D53A jmp 3AD5:B4E68BE6
:0040142D 4F dec edi
:0040142E AD lodsd
:0040142F 339966CF11B7 xor ebx, dword ptr [ecx+B711CF66]
:00401435 0C00 or al, 00
:00401437 AA stosb
:00401438 0060D3 add byte ptr [eax-2D], ah
* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040141D(C)
|
:0040143B 93 xchg eax,ebx
:0040143C 46 inc esi
:0040143D 6F outsd
:0040143E 726D jb 004014AD
:00401440 00000000 BYTE 4 DUP(0)
:00401444 2E BYTE 02eh
:00401445 3DFBFCFAA0 cmp eax, A0FAFCFB
* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004013D9(C)
|
:0040144A 6810A73808 push 0838A710
:0040144F 002B add byte ptr [ebx], ch
:00401451 3371B5 xor esi, dword ptr [ecx-4B]
:00401454 45 inc ebp
* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004013E6(C)
|
:00401455 3A5C5072 cmp bl, byte ptr [eax+2*edx+72]
:00401459 6F outsd
:0040145A 677261 jb 004014BE
:0040145D 6D insd
:0040145E 204669 and byte ptr [esi+69], al
:00401461 6C insb
:00401462 65 BYTE 065h
:00401463 735C jnb 004014C1
:00401465 4D dec ebp
:00401466 6963726F736F66 imul esp, dword ptr [ebx+72], 666F736F
:0040146D 7420 je 0040148F
:0040146F 56 push esi
:00401470 697375616C2053 imul esi, dword ptr [ebx+75], 53206C61
:00401477 7475 je 004014EE
:00401479 64696F5C56423938 imul ebp, dword ptr fs:[edi+5C], 38394256
:00401481 5C pop esp
:00401482 56 push esi
:00401483 42 inc edx
:00401484 36 BYTE 036h
:00401485 2E BYTE 02eh
:00401486 4F dec edi
:00401487 4C dec esp
:00401488 42 inc edx
:00401489 000000 BYTE 3 DUP(0)
:0040148C 56 push esi
:0040148D 42 inc edx
:0040148E 0000 add byte ptr [eax], al
:00401490 44 inc esp
:00401491 1440 adc al, 40
:00401493 0000000000 BYTE 5 DUP(0)
:00401498 06 push es
:00401499 000000 BYTE 3 DUP(0)
:0040149C 0900 or dword ptr [eax], eax
:0040149E 0000 add byte ptr [eax], al
:004014A0 54144000 DWORD 00401454
:004014A4 8C144000 DWORD 0040148C
:004014A8 D0224000 DWORD 004022D0
:004014AC 0000000000000000 BYTE 8 DUP(0)
:004014B4 90 nop
:004014B5 1B1A sbb ebx, dword ptr [edx]
:004014B7 00DA add dl, bl
:004014B9 4E dec esi
:004014BA AD lodsd
:004014BB 339966CF11B7 xor ebx, dword ptr [ecx+B711CF66]
* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00401463(C)
|
:004014C1 0C00 or al, 00
:004014C3 AA stosb
:004014C4 0060D3 add byte ptr [eax-2D], ah
:004014C7 93 xchg eax,ebx
:004014C8 4C dec esp
:004014C9 61 popad
:004014CA 62656C bound esp, dword ptr [ebp+6C]
:004014CD 3100 xor dword ptr [eax], eax
:004014CF 000C00 add byte ptr [eax+eax], cl
:004014D2 44 inc esp
:004014D3 000000000000000000 BYTE 9 DUP(0)
:004014DC 0100 add dword ptr [eax], eax
:004014DE 0000 add byte ptr [eax], al
:004014E0 50 push eax
:004014E1 134000 adc eax, dword ptr [eax+00]
:004014E4 00000000 BYTE 4 DUP(0)
:004014E8 2019 and byte ptr [ecx], bl
:004014EA 40 inc eax
:004014EB 00FF add bh, bh
:004014ED FFFFFF BYTE 3 DUP(0ffh)
:004014F0 00000000 BYTE 4 DUP(0)
:004014F4 A4134000 DWORD 004013A4
:004014F8 08204000 DWORD 00402008
:004014FC 00000000 BYTE 4 DUP(0)
:00401500 90 nop
:00401501 AE scasb
:00401502 17 pop ss
:00401503 00000000000000000000 BYTE 10 DUP(0)
:0040150D 000000 BYTE 3 DUP(0)
:00401510 54 push esp
:00401511 1540000100 adc eax, 00010040
:00401516 0000 add byte ptr [eax], al
:00401518 FC cld
:00401519 134000 adc eax, dword ptr [eax+00]
:0040151C 00000000 BYTE 4 DUP(0)
:00401520 54 push esp
:00401521 1540000100 adc eax, 00010040
:00401526 0000 add byte ptr [eax], al
:00401528 5C pop esp
:00401529 1540000000 adc eax, 00000040
:0040152E 0000 add byte ptr [eax], al
:00401530 58 pop eax
:00401531 1540000200 adc eax, 00020040
:00401536 0000 add byte ptr [eax], al
:00401538 5C pop esp
:00401539 1540000000 adc eax, 00000040
:0040153E B701 mov bh, 01
:00401540 68006C00AC push AC006C00
:00401545 154000DC22 adc eax, 22DC0040
:0040154A 40 inc eax
:0040154B 0000000000 BYTE 5 DUP(0)
:00401550 B06B mov al, 6B
:00401552 1A00 sbb al, byte ptr [eax]
:00401554 0C144000 DWORD 0040140C
:00401558 1C144000 DWORD 0040141C
:0040155C 40 inc eax
:0040155D 001F add byte ptr [edi], bl
:0040155F 003400 add byte ptr [eax+eax], dh
:00401562 0000 add byte ptr [eax], al
:00401564 2C14 sub al, 14
:00401566 40 inc eax
:00401567 00FF add bh, bh
:00401569 FFFFFF BYTE 3 DUP(0ffh)
:0040156C 0000000000000000 BYTE 8 DUP(0)
:00401574 AC lodsb
:00401575 1540004877 adc eax, 77480040
:0040157A 1A00 sbb al, byte ptr [eax]
:0040157C 3C14 cmp al, 14
:0040157E 40 inc eax
:0040157F 00FF add bh, bh
:00401581 FFFFFF BYTE 3 DUP(0ffh)
:00401584 40 inc eax
:00401585 0012 add byte ptr [edx], dl
:00401587 0038 add byte ptr [eax], bh
:00401589 000000 BYTE 3 DUP(0)
:0040158C B814400001 mov eax, 01004014
:00401591 0003 add byte ptr [ebx], al
:00401593 000000000000000000 BYTE 9 DUP(0)
:0040159C 40 inc eax
:0040159D 16 push ss
:0040159E 40 inc eax
:0040159F 005877 add byte ptr [eax+77], bl
:004015A2 1A00 sbb al, byte ptr [eax]
:004015A4 C8144000 enter 4014, 00
:004015A8 0100 add dword ptr [eax], eax
:004015AA 0300 add eax, dword ptr [eax]
:004015AC 00000000 BYTE 4 DUP(0)
:004015B0 5C154000 DWORD 0040155C
:004015B4 DC144000 DWORD 004014DC
:004015B8 10114000 DWORD 00401110
:004015BC 16114000 DWORD 00401116
:004015C0 1C114000 DWORD 0040111C
:004015C4 00000000000000000000 BYTE 10 DUP(0)
:004015CE 00000000000000000000 BYTE 10 DUP(0)
:004015D8 00000000000000000000 BYTE 10 DUP(0)
:004015E2 00000000000000000000 BYTE 10 DUP(0)
:004015EC 00000000000000000000 BYTE 10 DUP(0)
:004015F6 00000000000000000000 BYTE 10 DUP(0)
:00401600 00000000000000000000 BYTE 10 DUP(0)
:0040160A 00000000000000000000 BYTE 10 DUP(0)
:00401614 00000000000000000000 BYTE 10 DUP(0)
:0040161E 00000000000000000000 BYTE 10 DUP(0)
:00401628 00000000000000000000 BYTE 10 DUP(0)
:00401632 00000000000000000000 BYTE 10 DUP(0)
:0040163C 0000000000000000 BYTE 8 DUP(0)
:00401644 84154000 DWORD 00401584
:00401648 DC144000 DWORD 004014DC
:0040164C 10114000 DWORD 00401110
:00401650 16114000 DWORD 00401116
:00401654 1C114000 DWORD 0040111C
:00401658 00000000000000000000 BYTE 10 DUP(0)
:00401662 00000000000000000000 BYTE 10 DUP(0)
:0040166C 00000000000000000000 BYTE 10 DUP(0)
:00401676 00000000000000000000 BYTE 10 DUP(0)
:00401680 00000000000000000000 BYTE 10 DUP(0)
:0040168A 00000000000000000000 BYTE 10 DUP(0)
:00401694 00000000000000000000 BYTE 10 DUP(0)
:0040169E 0000 BYTE 2 DUP(0)
:004016A0 F4 hlt
:004016A1 0100 add dword ptr [eax], eax
:004016A3 005013 add byte ptr [eax+13], dl
:004016A6 40 inc eax
:004016A7 0000000000 BYTE 5 DUP(0)
:004016AC 60194000 DWORD 00401960
:004016B0 70194000 DWORD 00401970
:004016B4 D809 fmul dword ptr [ecx]
:004016B6 0000 add byte ptr [eax], al
:004016B8 08204000 DWORD 00402008
:004016BC 86104000 DWORD 00401086
:004016C0 00204000 DWORD 00402000
:004016C4 2A00 sub al, byte ptr [eax]
:004016C6 5C pop esp
:004016C7 004100 add byte ptr [ecx+00], al
:004016CA 50 push eax
* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004016B0(C)
|
:004016CB 007200 add byte ptr [edx+00], dh
:004016CE 6F outsd
:004016CF 006A00 add byte ptr [edx+00], ch
:004016D2 65006300 add byte ptr gs:[ebx+00], ah
:004016D6 7400 je 004016D8
* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004016D6(C)
|
:004016D8 3100 xor dword ptr [eax], eax
:004016DA 00000000000000000000 BYTE 10 DUP(0)
:004016E4 00000000000000000000 BYTE 10 DUP(0)
:004016EE 00000000000000000000 BYTE 10 DUP(0)
:004016F8 00000000000000000000 BYTE 10 DUP(0)
:00401702 00000000000000000000 BYTE 10 DUP(0)
:0040170C 00000000000000000000 BYTE 10 DUP(0)
:00401716 00000000000000000000 BYTE 10 DUP(0)
:00401720 00000000000000000000 BYTE 10 DUP(0)
:0040172A 00000000000000000000 BYTE 10 DUP(0)
:00401734 00000000000000000000 BYTE 10 DUP(0)
:0040173E 00000000000000000000 BYTE 10 DUP(0)
:00401748 00000000000000000000 BYTE 10 DUP(0)
:00401752 00000000000000000000 BYTE 10 DUP(0)
:0040175C 00000000000000000000 BYTE 10 DUP(0)
:00401766 00000000000000000000 BYTE 10 DUP(0)
:00401770 00000000000000000000 BYTE 10 DUP(0)
:0040177A 00000000000000000000 BYTE 10 DUP(0)
:00401784 00000000000000000000 BYTE 10 DUP(0)
:0040178E 00000000000000000000 BYTE 10 DUP(0)
:00401798 00000000000000000000 BYTE 10 DUP(0)
:004017A2 00000000000000000000 BYTE 10 DUP(0)
:004017AC 00000000000000000000 BYTE 10 DUP(0)
:004017B6 00000000000000000000 BYTE 10 DUP(0)
:004017C0 00000000000000000000 BYTE 10 DUP(0)
:004017CA 00000000000000000000 BYTE 10 DUP(0)
:004017D4 00000000000000000000 BYTE 10 DUP(0)
:004017DE 00000000000000000000 BYTE 10 DUP(0)
:004017E8 00000000000000000000 BYTE 10 DUP(0)
:004017F2 00000000000000000000 BYTE 10 DUP(0)
:004017FC 00000000000000000000 BYTE 10 DUP(0)
:00401806 00000000000000000000 BYTE 10 DUP(0)
:00401810 00000000000000000000 BYTE 10 DUP(0)
:0040181A 00000000000000000000 BYTE 10 DUP(0)
:00401824 00000000000000000000 BYTE 10 DUP(0)
:0040182E 00000000000000000000 BYTE 10 DUP(0)
:00401838 00000000000000000000 BYTE 10 DUP(0)
:00401842 00000000000000000000 BYTE 10 DUP(0)
:0040184C 00000000000000000000 BYTE 10 DUP(0)
:00401856 00000000000000000000 BYTE 10 DUP(0)
:00401860 00000000000000000000 BYTE 10 DUP(0)
:0040186A 00000000000000000000 BYTE 10 DUP(0)
:00401874 00000000000000000000 BYTE 10 DUP(0)
:0040187E 00000000000000000000 BYTE 10 DUP(0)
:00401888 00000000000000000000 BYTE 10 DUP(0)
:00401892 00000000000000000000 BYTE 10 DUP(0)
:0040189C 00000000000000000000 BYTE 10 DUP(0)
:004018A6 00000000000000000000 BYTE 10 DUP(0)
:004018B0 00000000000000000000 BYTE 10 DUP(0)
:004018BA 00000000000000000000 BYTE 10 DUP(0)
:004018C4 00000000000000000000 BYTE 10 DUP(0)
:004018CE 000000000000 BYTE 6 DUP(0)
:004018D4 7012 jo 004018E8
:004018D6 40 inc eax
:004018D7 0000000000 BYTE 5 DUP(0)
:004018DC 2019 and byte ptr [ecx], bl
:004018DE 40 inc eax
:004018DF 0000000000 BYTE 5 DUP(0)
:004018E4 50 push eax
:004018E5 134000 adc eax, dword ptr [eax+00]
* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004018D4(C)
|
:004018E8 FFFFFFFF BYTE 4 DUP(0ffh)
:004018EC 00000000 BYTE 4 DUP(0)
:004018F0 DC18 fcomp qword ptr [eax]
:004018F2 40 inc eax
:004018F3 00000000000000000000 BYTE 10 DUP(0)
:004018FD 000000 BYTE 3 DUP(0)
:00401900 FFFFFFFF BYTE 4 DUP(0ffh)
:00401904 00000000 BYTE 4 DUP(0)
:00401908 90144000 DWORD 00401490
:0040190C 2C144000 DWORD 0040142C
:00401910 D4224000 DWORD 004022D4
:00401914 90144000 DWORD 00401490
:00401918 B8144000 DWORD 004014B8
:0040191C D8224000 DWORD 004022D8
:00401920 00000000 BYTE 4 DUP(0)
:00401924 DC1440 fcom qword ptr [eax+2*eax]
:00401927 00FF add bh, bh
:00401929 FFFFFF BYTE 3 DUP(0ffh)
:0040192C 00000000000000000000 BYTE 10 DUP(0)
:00401936 0000 BYTE 2 DUP(0)
:00401938 DC18 fcomp qword ptr [eax]
:0040193A 40 inc eax
:0040193B 0000000000 BYTE 5 DUP(0)
:00401940 DC184000 DWORD 004018DC
:00401944 DC184000 DWORD 004018DC
:00401948 DC184000 DWORD 004018DC
:0040194C 00000000000000000000 BYTE 10 DUP(0)
:00401956 0000 BYTE 2 DUP(0)
:00401958 44 inc esp
:00401959 000000 BYTE 3 DUP(0)
:0040195C 0400 add al, 00
:0040195E 0000 add byte ptr [eax], al
:00401960 E9E9E9E9CC jmp CD2A034E
:00401965 CC int 03
:00401966 CC int 03
:00401967 CC int 03
:00401968 CC int 03
:00401969 CC int 03
:0040196A CC int 03
:0040196B CC int 03
:0040196C CC int 03
:0040196D CC int 03
:0040196E CC int 03
:0040196F CC int 03
:00401970 9E sahf
:00401971 9E sahf
:00401972 9E sahf
:00401973 9E sahf
:00401974 9C pushfd
:00401975 1900 sbb dword ptr [eax], eax
:00401977 00FF add bh, bh
:00401979 FFFFFFFFFFFFFF BYTE 7 DUP(0ffh)
:00401980 101A adc byte ptr [edx], bl
:00401982 000000 BYTE 3 DUP(0)
:00401985 1000 adc byte ptr [eax], al
:00401987 00000000000000000000 BYTE 10 DUP(0)
:00401991 00000000000000000000 BYTE 10 DUP(0)
:0040199B 00 BYTE 0
:0040199C 1E push ds
:0040199D 1A00 sbb al, byte ptr [eax]
:0040199F 0028 add byte ptr [eax], ch
:004019A1 1A00 sbb al, byte ptr [eax]
:004019A3 0036 add byte ptr [esi], dh
:004019A5 1A00 sbb al, byte ptr [eax]
:004019A7 00461A add byte ptr [esi+1A], al
:004019AA 0000 add byte ptr [eax], al
:004019AC 54 push esp
:004019AD 1A00 sbb al, byte ptr [eax]
:004019AF 00641A00 add byte ptr [edx+ebx], ah
:004019B3 00761A add byte ptr [esi+1A], dh
:004019B6 0000 add byte ptr [eax], al
:004019B8 881A mov byte ptr [edx], bl
:004019BA 0000 add byte ptr [eax], al
:004019BC 92 xchg eax,edx
:004019BD 1A00 sbb al, byte ptr [eax]
:004019BF 00A01A0000B4 add byte ptr [eax+B400001A], ah
:004019C5 1A00 sbb al, byte ptr [eax]
:004019C7 00C2 add dl, al
:004019C9 1A00 sbb al, byte ptr [eax]
:004019CB 00D8 add al, bl
:004019CD 1A00 sbb al, byte ptr [eax]
:004019CF 00E2 add dl, ah
:004019D1 1A00 sbb al, byte ptr [eax]
:004019D3 00FE add dh, bh
:004019D5 1A00 sbb al, byte ptr [eax]
:004019D7 00141B add byte ptr [ebx+ebx], dl
:004019DA 0000 add byte ptr [eax], al
:004019DC 221B and bl, byte ptr [ebx]
:004019DE 0000 add byte ptr [eax], al
:004019E0 341B xor al, 1B
:004019E2 0000 add byte ptr [eax], al
:004019E4 48 dec eax
:004019E5 1B00 sbb eax, dword ptr [eax]
:004019E7 00521B add byte ptr [edx+1B], dl
:004019EA 0000 add byte ptr [eax], al
:004019EC 641B00 sbb eax, dword ptr fs:[eax]
:004019EF 00761B add byte ptr [esi+1B], dh
:004019F2 0000 add byte ptr [eax], al
:004019F4 881B mov byte ptr [ebx], bl
:004019F6 0000 add byte ptr [eax], al
:004019F8 64 BYTE 064h
:004019F9 0000 add byte ptr [eax], al
:004019FB 80961B0000A01B adc byte ptr [esi+A000001B], 1B
:00401A02 0000 add byte ptr [eax], al
:00401A04 AA stosb
:00401A05 1B00 sbb eax, dword ptr [eax]
:00401A07 00B41B00000000 add byte ptr [ebx+ebx], dh
:00401A0E 0000 add byte ptr [eax], al
:00401A10 4D dec ebp
:00401A11 53 push ebx
:00401A12 56 push esi
:00401A13 42 inc edx
:00401A14 56 push esi
:00401A15 4D dec ebp
:00401A16 36302E xor byte ptr ss:[esi], ch
:00401A19 44 inc esp
:00401A1A 4C dec esp
:00401A1B 4C dec esp
:00401A1C 00000000 BYTE 4 DUP(0)
:00401A20 5F pop edi
:00401A21 43 inc ebx
:00401A22 49 dec ecx
:00401A23 636F73 arpl dword ptr [edi+73], ebp
:00401A26 00000000 BYTE 4 DUP(0)
:00401A2A 5F pop edi
:00401A2B 61 popad
:00401A2C 64 BYTE 064h
:00401A2D 6A5F push 0000005F
:00401A2F 667074 jo 00401AA6
:00401A32 61 popad
:00401A33 6E outsb
:00401A34 00000000 BYTE 4 DUP(0)
:00401A38 5F pop edi
:00401A39 61 popad
:00401A3A 64 BYTE 064h
:00401A3B 6A5F push 0000005F
:00401A3D 666469765F6D36 imul si, word ptr fs:[esi+5F], 366D
:00401A44 3400 xor al, 00
:00401A46 0000 add byte ptr [eax], al
:00401A48 5F pop edi
:00401A49 61 popad
:00401A4A 64 BYTE 064h
:00401A4B 6A5F push 0000005F
:00401A4D 667072 jo 00401AC2
:00401A50 65 BYTE 065h
:00401A51 6D insd
:00401A52 3100 xor dword ptr [eax], eax
:00401A54 0000 add byte ptr [eax], al
:00401A56 5F pop edi
:00401A57 61 popad
:00401A58 64 BYTE 064h
:00401A59 6A5F push 0000005F
:00401A5B 666469765F6D33 imul si, word ptr fs:[esi+5F], 336D
:00401A62 3200 xor al, byte ptr [eax]
:00401A64 0000 add byte ptr [eax], al
:00401A66 5F pop edi
:00401A67 61 popad
:00401A68 64 BYTE 064h
:00401A69 6A5F push 0000005F
:00401A6B 666469765F6D31 imul si, word ptr fs:[esi+5F], 316D
:00401A72 3669000000005F imul eax, dword ptr ss:[eax], 5F000000
:00401A79 61 popad
:00401A7A 64 BYTE 064h
:00401A7B 6A5F push 0000005F
:00401A7D 66646976725F6D imul si, word ptr fs:[esi+72], 6D5F
:00401A84 3136 xor dword ptr [esi], esi
:00401A86 690000005F43 imul eax, dword ptr [eax], 435F0000
:00401A8C 49 dec ecx
:00401A8D 7369 jnb 00401AF8
:00401A8F 6E outsb
:00401A90 00000000 BYTE 4 DUP(0)
:00401A94 5F pop edi
:00401A95 5F pop edi
:00401A96 7662 jbe 00401AFA
:00401A98 61 popad
:00401A99 43 inc ebx
:00401A9A 686B73746B push 6B74736B
:00401A9F 000000 BYTE 3 DUP(0)
:00401AA2 45 inc ebp
:00401AA3 56 push esi
:00401AA4 45 inc ebp
:00401AA5 4E dec esi
* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00401A30(C)
|
:00401AA6 54 push esp
:00401AA7 5F pop edi
:00401AA8 53 push ebx
:00401AA9 49 dec ecx
:00401AAA 4E dec esi
:00401AAB 4B dec ebx
:00401AAC 5F pop edi
:00401AAD 41 inc ecx
:00401AAE 64 BYTE 064h
:00401AAF 64 BYTE 064h
:00401AB0 52 push edx
:00401AB1 00 BYTE 000h
:00401AB2 66000000 BYTE 3 DUP(0)
:00401AB6 5F pop edi
:00401AB7 61 popad
:00401AB8 64 BYTE 064h
:00401AB9 6A5F push 0000005F
:00401ABB 667061 jo 00401B1F
:00401ABE 7461 je 00401B21
:00401AC0 6E outsb
:00401AC1 000000 BYTE 3 DUP(0)
:00401AC4 45 inc ebp
:00401AC5 56 push esi
:00401AC6 45 inc ebp
:00401AC7 4E dec esi
:00401AC8 54 push esp
:00401AC9 5F pop edi
:00401ACA 53 push ebx
:00401ACB 49 dec ecx
:00401ACC 4E dec esi
:00401ACD 4B dec ebx
:00401ACE 5F pop edi
:00401ACF 52 push edx
:00401AD0 65 BYTE 065h
:00401AD1 6C insb
:00401AD2 65 BYTE 065h
:00401AD3 61 popad
:00401AD4 7365 jnb 00401B3B
:00401AD6 00000000 BYTE 4 DUP(0)
:00401ADA 5F pop edi
:00401ADB 43 inc ebx
:00401ADC 49 dec ecx
:00401ADD 7371 jnb 00401B50
:00401ADF 7274 jb 00401B55
:00401AE1 000000 BYTE 3 DUP(0)
:00401AE4 45 inc ebp
:00401AE5 56 push esi
:00401AE6 45 inc ebp
:00401AE7 4E dec esi
:00401AE8 54 push esp
:00401AE9 5F pop edi
:00401AEA 53 push ebx
:00401AEB 49 dec ecx
:00401AEC 4E dec esi
:00401AED 4B dec ebx
:00401AEE 5F pop edi
:00401AEF 51 push ecx
:00401AF0 7565 jne 00401B57
:00401AF2 7279 jb 00401B6D
:00401AF4 49 dec ecx
:00401AF5 6E outsb
:00401AF6 7465 je 00401B5D
* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00401A8D(C)
|
:00401AF8 7266 jb 00401B60
* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00401A96(C)
|
:00401AFA 61 popad
:00401AFB 636500 arpl dword ptr [ebp+00], esp
:00401AFE 0000 add byte ptr [eax], al
:00401B00 5F pop edi
:00401B01 5F pop edi
:00401B02 7662 jbe 00401B66
:00401B04 61 popad
:00401B05 45 inc ebp
:00401B06 7863 js 00401B6B
:00401B08 65 BYTE 065h
:00401B09 7074 jo 00401B7F
:00401B0B 48 dec eax
:00401B0C 61 popad
:00401B0D 6E outsb
:00401B0E 64 BYTE 064h
:00401B0F 6C insb
:00401B10 65 BYTE 065h
:00401B11 7200 jb 00401B13
* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00401B11(C)
|
:00401B13 000000 BYTE 3 DUP(0)
:00401B16 5F pop edi
:00401B17 61 popad
:00401B18 64 BYTE 064h
:00401B19 6A5F push 0000005F
:00401B1B 667072 jo 00401B90
:00401B1E 65 BYTE 065h
* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00401ABC(C)
|
:00401B1F 6D insd
:00401B20 00000000 BYTE 4 DUP(0)
:00401B24 5F pop edi
:00401B25 61 popad
:00401B26 64 BYTE 064h
:00401B27 6A5F push 0000005F
:00401B29 66646976725F6D imul si, word ptr fs:[esi+72], 6D5F
:00401B30 36 BYTE 036h
:00401B31 3400 xor al, 00
:00401B33 000000 BYTE 3 DUP(0)
:00401B36 5F pop edi
:00401B37 5F pop edi
:00401B38 7662 jbe 00401B9C
:00401B3A 61 popad
* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00401AD4(C)
|
:00401B3B 46 inc esi
:00401B3C 50 push eax
:00401B3D 45 inc ebp
:00401B3E 7863 js 00401BA3
:00401B40 65 BYTE 065h
:00401B41 7074 jo 00401BB7
:00401B43 696F6E00000000 imul ebp, dword ptr [edi+6E], 00000000
:00401B4A 5F pop edi
:00401B4B 43 inc ebx
:00401B4C 49 dec ecx
:00401B4D 6C insb
:00401B4E 6F outsd
:00401B4F 00 BYTE 000h
* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00401ADD(C)
|
:00401B50 00000000 BYTE 4 DUP(0)
:00401B54 5F pop edi
* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00401ADF(C)
|
:00401B55 61 popad
:00401B56 64 BYTE 064h
* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00401AF0(C)
|
:00401B57 6A5F push 0000005F
:00401B59 666469765F6D33 imul si, word ptr fs:[esi+5F], 336D
* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00401AF8(C)
|
:00401B60 326900 xor ch, byte ptr [ecx+00]
:00401B63 000000 BYTE 3 DUP(0)
* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00401B02(C)
|
:00401B66 5F pop edi
:00401B67 61 popad
:00401B68 64 BYTE 064h
:00401B69 6A5F push 0000005F
* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00401B06(C)
|
:00401B6B 66646976725F6D imul si, word ptr fs:[esi+72], 6D5F
:00401B72 3332 xor esi, dword ptr [edx]
:00401B74 690000005F61 imul eax, dword ptr [eax], 615F0000
:00401B7A 64 BYTE 064h
:00401B7B 6A5F push 0000005F
:00401B7D 66646976725F6D imul si, word ptr fs:[esi+72], 6D5F
:00401B84 3332 xor esi, dword ptr [edx]
:00401B86 00000000 BYTE 4 DUP(0)
:00401B8A 5F pop edi
:00401B8B 61 popad
:00401B8C 64 BYTE 064h
:00401B8D 6A5F push 0000005F
:00401B8F 666469765F7200 imul si, word ptr fs:[esi+5F], 0072
:00401B96 0000 add byte ptr [eax], al
:00401B98 5F pop edi
:00401B99 43 inc ebx
:00401B9A 49 dec ecx
:00401B9B 61 popad
* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00401B38(C)
|
:00401B9C 7461 je 00401BFF
:00401B9E 6E outsb
:00401B9F 000000 BYTE 3 DUP(0)
:00401BA2 5F pop edi
* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00401B3E(C)
|
:00401BA3 61 popad
:00401BA4 6C insb
:00401BA5 6C insb
:00401BA6 6D insd
:00401BA7 756C jne 00401C15
:00401BA9 000000 BYTE 3 DUP(0)
:00401BAC 5F pop edi
:00401BAD 43 inc ebx
:00401BAE 49 dec ecx
:00401BAF 7461 je 00401C12
:00401BB1 6E outsb
:00401BB2 00000000 BYTE 4 DUP(0)
:00401BB6 5F pop edi
* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00401B41(C)
|
:00401BB7 43 inc ebx
:00401BB8 49 dec ecx
:00401BB9 65 BYTE 065h
:00401BBA 7870 js 00401C2C
:00401BBC 00000000000000000000 BYTE 10 DUP(0)
:00401BC6 00000000000000000000 BYTE 10 DUP(0)
:00401BD0 00000000000000000000 BYTE 10 DUP(0)
:00401BDA 00000000000000000000 BYTE 10 DUP(0)
:00401BE4 00000000000000000000 BYTE 10 DUP(0)
:00401BEE 00000000000000000000 BYTE 10 DUP(0)
:00401BF8 00000000000000000000 BYTE 10 DUP(0)
:00401C02 00000000000000000000 BYTE 10 DUP(0)
:00401C0C 00000000000000000000 BYTE 10 DUP(0)
:00401C16 00000000000000000000 BYTE 10 DUP(0)
:00401C20 00000000000000000000 BYTE 10 DUP(0)
:00401C2A 00000000000000000000 BYTE 10 DUP(0)
:00401C34 00000000000000000000 BYTE 10 DUP(0)
:00401C3E 00000000000000000000 BYTE 10 DUP(0)
:00401C48 00000000000000000000 BYTE 10 DUP(0)
:00401C52 00000000000000000000 BYTE 10 DUP(0)
:00401C5C 00000000000000000000 BYTE 10 DUP(0)
:00401C66 00000000000000000000 BYTE 10 DUP(0)
:00401C70 00000000000000000000 BYTE 10 DUP(0)
:00401C7A 00000000000000000000 BYTE 10 DUP(0)
:00401C84 00000000000000000000 BYTE 10 DUP(0)
:00401C8E 00000000000000000000 BYTE 10 DUP(0)
:00401C98 00000000000000000000 BYTE 10 DUP(0)
:00401CA2 00000000000000000000 BYTE 10 DUP(0)
:00401CAC 00000000000000000000 BYTE 10 DUP(0)
:00401CB6 00000000000000000000 BYTE 10 DUP(0)
:00401CC0 00000000000000000000 BYTE 10 DUP(0)
:00401CCA 00000000000000000000 BYTE 10 DUP(0)
:00401CD4 00000000000000000000 BYTE 10 DUP(0)
:00401CDE 00000000000000000000 BYTE 10 DUP(0)
:00401CE8 00000000000000000000 BYTE 10 DUP(0)
:00401CF2 00000000000000000000 BYTE 10 DUP(0)
:00401CFC 00000000000000000000 BYTE 10 DUP(0)
:00401D06 00000000000000000000 BYTE 10 DUP(0)
:00401D10 00000000000000000000 BYTE 10 DUP(0)
:00401D1A 00000000000000000000 BYTE 10 DUP(0)
:00401D24 00000000000000000000 BYTE 10 DUP(0)
:00401D2E 00000000000000000000 BYTE 10 DUP(0)
:00401D38 00000000000000000000 BYTE 10 DUP(0)
:00401D42 00000000000000000000 BYTE 10 DUP(0)
:00401D4C 00000000000000000000 BYTE 10 DUP(0)
:00401D56 00000000000000000000 BYTE 10 DUP(0)
:00401D60 00000000000000000000 BYTE 10 DUP(0)
:00401D6A 00000000000000000000 BYTE 10 DUP(0)
:00401D74 00000000000000000000 BYTE 10 DUP(0)
:00401D7E 00000000000000000000 BYTE 10 DUP(0)
:00401D88 00000000000000000000 BYTE 10 DUP(0)
:00401D92 00000000000000000000 BYTE 10 DUP(0)
:00401D9C 00000000000000000000 BYTE 10 DUP(0)
:00401DA6 00000000000000000000 BYTE 10 DUP(0)
:00401DB0 00000000000000000000 BYTE 10 DUP(0)
:00401DBA 00000000000000000000 BYTE 10 DUP(0)
:00401DC4 00000000000000000000 BYTE 10 DUP(0)
:00401DCE 00000000000000000000 BYTE 10 DUP(0)
:00401DD8 00000000000000000000 BYTE 10 DUP(0)
:00401DE2 00000000000000000000 BYTE 10 DUP(0)
:00401DEC 00000000000000000000 BYTE 10 DUP(0)
:00401DF6 00000000000000000000 BYTE 10 DUP(0)
:00401E00 00000000000000000000 BYTE 10 DUP(0)
:00401E0A 00000000000000000000 BYTE 10 DUP(0)
:00401E14 00000000000000000000 BYTE 10 DUP(0)
:00401E1E 00000000000000000000 BYTE 10 DUP(0)
:00401E28 00000000000000000000 BYTE 10 DUP(0)
:00401E32 00000000000000000000 BYTE 10 DUP(0)
:00401E3C 00000000000000000000 BYTE 10 DUP(0)
:00401E46 00000000000000000000 BYTE 10 DUP(0)
:00401E50 00000000000000000000 BYTE 10 DUP(0)
:00401E5A 00000000000000000000 BYTE 10 DUP(0)
:00401E64 00000000000000000000 BYTE 10 DUP(0)
:00401E6E 00000000000000000000 BYTE 10 DUP(0)
:00401E78 00000000000000000000 BYTE 10 DUP(0)
:00401E82 00000000000000000000 BYTE 10 DUP(0)
:00401E8C 00000000000000000000 BYTE 10 DUP(0)
:00401E96 00000000000000000000 BYTE 10 DUP(0)
:00401EA0 00000000000000000000 BYTE 10 DUP(0)
:00401EAA 00000000000000000000 BYTE 10 DUP(0)
:00401EB4 00000000000000000000 BYTE 10 DUP(0)
:00401EBE 00000000000000000000 BYTE 10 DUP(0)
:00401EC8 00000000000000000000 BYTE 10 DUP(0)
:00401ED2 00000000000000000000 BYTE 10 DUP(0)
:00401EDC 00000000000000000000 BYTE 10 DUP(0)
:00401EE6 00000000000000000000 BYTE 10 DUP(0)
:00401EF0 00000000000000000000 BYTE 10 DUP(0)
:00401EFA 00000000000000000000 BYTE 10 DUP(0)
:00401F04 00000000000000000000 BYTE 10 DUP(0)
:00401F0E 00000000000000000000 BYTE 10 DUP(0)
:00401F18 00000000000000000000 BYTE 10 DUP(0)
:00401F22 00000000000000000000 BYTE 10 DUP(0)
:00401F2C 00000000000000000000 BYTE 10 DUP(0)
:00401F36 00000000000000000000 BYTE 10 DUP(0)
:00401F40