----------------------------------------------------------------------------------------------------------------------------------
Module info :
----------------------------------------------------------------------------------------------------------------------------------
Base | Top | Size | Rebase | SafeSEH | ASLR | NXCompat | OS Dll | Version, Modulename & Path
----------------------------------------------------------------------------------------------------------------------------------
0x10000000 | 0x10039000 | 0x00039000 | False | True | False | False | False | 0.0.0.1 [WinCRT.dll] (C:\Program Files (x86)\Samsung\Movie Color Enhancer\WinCRT.dll)
----------------------------------------------------------------------------------------------------------------------------------
Interesting gadgets
-------------------
0x1001e000 : # MOV DWORD PTR DS:[ESI],EAX # MOV DWORD PTR DS:[ESI+8],EAX # MOV DWORD PTR DS:[ESI+4],EAX # POP ESI # POP EBP # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1001e001 : # PUSH ES # MOV DWORD PTR DS:[ESI+8],EAX # MOV DWORD PTR DS:[ESI+4],EAX # POP ESI # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1001e002 : # MOV DWORD PTR DS:[ESI+8],EAX # MOV DWORD PTR DS:[ESI+4],EAX # POP ESI # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10006003 : # MOV EAX,WinCRT.1001FDC0 # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000a004 : # POP ESI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1001e005 : # MOV DWORD PTR DS:[ESI+4],EAX # POP ESI # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1001e006 : # INC ESI # ADD AL,5E # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1001e007 : # ADD AL,5E # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1001e008 : # POP ESI # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10006009 : # MOV EAX,WinCRT.1001FDDC # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000a002 : # MOV EAX,ESI # POP ESI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000600f : # MOV EAX,WinCRT.1001FDF8 # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10002012 : # MOV EAX,ESI # POP ESI # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10002014 : # POP ESI # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000801b : # XOR EAX,EAX # POP EDI # POP ESI # POP EBX # POP EBP # RETN 0x08 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1001201c : # MOV EAX,EDI # POP EDI # POP ESI # POP EBP # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x1000801d : # POP EDI # POP ESI # POP EBX # POP EBP # RETN 0x08 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1001201e : # POP EDI # POP ESI # POP EBP # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x1001201f : # POP ESI # POP EBP # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x10012020 : # POP EBP # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x1000c029 : # MOV DWORD PTR DS:[ECX],EAX # MOV EAX,DWORD PTR DS:[ESI+8] # MOV ECX,DWORD PTR SS:[EBP+10] # MOV DWORD PTR DS:[ECX],EAX # POP EDI # POP ESI # POP EBP # RETN 0x0C ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000c02b : # MOV EAX,DWORD PTR DS:[ESI+8] # MOV ECX,DWORD PTR SS:[EBP+10] # MOV DWORD PTR DS:[ECX],EAX # POP EDI # POP ESI # POP EBP # RETN 0x0C ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000c02e : # MOV ECX,DWORD PTR SS:[EBP+10] # MOV DWORD PTR DS:[ECX],EAX # POP EDI # POP ESI # POP EBP # RETN 0x0C ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000c031 : # MOV DWORD PTR DS:[ECX],EAX # POP EDI # POP ESI # POP EBP # RETN 0x0C ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000c033 : # POP EDI # POP ESI # POP EBP # RETN 0x0C ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000c034 : # POP ESI # POP EBP # RETN 0x0C ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000c035 : # POP EBP # RETN 0x0C ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1001e009 : # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1000c039 : # MOV EAX,WinCRT.10020954 # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1001403b : # POP EBP # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x1000c03c : # ADD DL,BYTE PTR DS:[EAX] # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000203d : # MOV EAX,DWORD PTR DS:[ESI] # POP ESI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000203e : # PUSH ES # POP ESI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000203f : # POP ESI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10002040 : # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1001e041 : # POP ESI # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1000a045 : # POP EDI # POP ESI # POP EBP # RETN 0x08 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000a046 : # POP ESI # POP EBP # RETN 0x08 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000a047 : # POP EBP # RETN 0x08 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10006051 : # POP ECX # POP EBP # RETN 0x08 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1001e052 : # ADD ESP,0C # MOV EAX,ESI # POP ESI # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1001e055 : # MOV EAX,ESI # POP ESI # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1001e057 : # POP ESI # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10004059 : # ADD DL,BYTE PTR DS:[EAX] # POP ESI # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1001a05a : # XOR EAX,EAX # POP ESI # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1000405b : # POP ESI # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1001a05c : # POP ESI # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1000c062 : # MOV DWORD PTR DS:[EAX+C],EDX # MOV DWORD PTR DS:[EAX+10],EDX # MOV DWORD PTR DS:[EAX+14],EDX # MOV DWORD PTR DS:[EAX+18],ECX # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000c065 : # MOV DWORD PTR DS:[EAX+10],EDX # MOV DWORD PTR DS:[EAX+14],EDX # MOV DWORD PTR DS:[EAX+18],ECX # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10006066 : # MOV ECX,DWORD PTR SS:[EBP+C] # MOV DWORD PTR DS:[EAX],ECX # POP EBP # RETN 0x08 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10009011 : # XOR EAX,EAX # INC EAX # POP EBX # POP EDI # POP ESI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000c068 : # MOV DWORD PTR DS:[EAX+14],EDX # MOV DWORD PTR DS:[EAX+18],ECX # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10006069 : # MOV DWORD PTR DS:[EAX],ECX # POP EBP # RETN 0x08 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000606b : # POP EBP # RETN 0x08 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000deb7 : # POP ECX # INC EAX # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000406e : # OR EAX,FFFFFFFF # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10004071 : # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000a072 : # POP ESI # POP EBP # RETN 0x08 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000a073 : # POP EBP # RETN 0x08 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10006079 : # MOV DWORD PTR DS:[EAX+4],ECX # MOV DWORD PTR DS:[EAX+8],ECX # MOV DWORD PTR DS:[EAX+C],ECX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000607c : # MOV DWORD PTR DS:[EAX+8],ECX # MOV DWORD PTR DS:[EAX+C],ECX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000607f : # MOV DWORD PTR DS:[EAX+C],ECX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10008080 : # POP EBP # RETN 0x08 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10004086 : # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1001e087 : # MOV EAX,ECX # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1000deb8 : # INC EAX # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10006090 : # ADD AL,0FF # ADC EAX,<&GDI32.PtVisible> # POP EBP # RETN 0x08 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10006092 : # ADC EAX,<&GDI32.PtVisible> # POP EBP # RETN 0x08 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10006097 : # POP EBP # RETN 0x08 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000a098 : # POP EBP # RETN 0x08 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000409b : # XOR EAX,EAX # POP EBP # RETN 0x08 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000409d : # POP EBP # RETN 0x08 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100060a5 : # ADD AL,0FF # ADC EAX,<&GDI32.RectVisible> # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100060a7 : # ADC EAX,<&GDI32.RectVisible> # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000deb9 : # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100080ac : # XOR EAX,EAX # POP EBP # RETN 0x08 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100080ae : # POP EBP # RETN 0x08 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1001e0b1 : # XOR EAX,EAX # MOV DWORD PTR DS:[ESI+2C],EAX # MOV DWORD PTR DS:[ESI+30],EAX # MOV DWORD PTR DS:[ESI+34],EAX # MOV EAX,ESI # POP ESI # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x100040b2 : # XOR EAX,EAX # POP EBP # RETN 0x08 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1001e0b3 : # MOV DWORD PTR DS:[ESI+2C],EAX # MOV DWORD PTR DS:[ESI+30],EAX # MOV DWORD PTR DS:[ESI+34],EAX # MOV EAX,ESI # POP ESI # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x100040b4 : # POP EBP # RETN 0x08 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000801e : # POP ESI # POP EBX # POP EBP # RETN 0x08 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1001e0b6 : # MOV DWORD PTR DS:[ESI+30],EAX # MOV DWORD PTR DS:[ESI+34],EAX # MOV EAX,ESI # POP ESI # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1001e0b9 : # MOV DWORD PTR DS:[ESI+34],EAX # MOV EAX,ESI # POP ESI # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1000801f : # POP EBX # POP EBP # RETN 0x08 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1001a0bc : # POP ESI # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1001a0bd : # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1001e0be : # POP ESI # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10008020 : # POP EBP # RETN 0x08 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100160c8 : # XCHG EDI,EDI # DEC ECX # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x100160ca : # DEC ECX # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1000c0cb : # POP ESI # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000d3d6 : # POP ESI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1001eace : # POP ECX # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1000bec3 : # MOV ECX,5DFFFFFF # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1001a0df : # POP ECX # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1001a0e0 : # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x100040e3 : # ADD EBP,DWORD PTR DS:[EDX+2] # POP EAX # POP EBP # RETN 0x08 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100040e5 : # ADD BL,BYTE PTR DS:[EAX+5D] # RETN 0x08 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100040e6 : # POP EAX # POP EBP # RETN 0x08 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100040e7 : # POP EBP # RETN 0x08 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1001a0ef : # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x100060f1 : # POP EBP # RETN 0x1C ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000657f : # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1001e114 : # MOV EAX,ESI # POP ESI # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1001e116 : # POP ESI # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1000a117 : # POP ESI # POP EBP # RETN 0x10 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000a118 : # POP EBP # RETN 0x10 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000a584 : # POP ECX # MOV EAX,ESI # POP ESI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1001611a : # ADD ECX,DWORD PTR DS:[ECX] # PUSH ES # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x1001611c : # PUSH ES # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x1001a11e : # POP ECX # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1001611f : # PUSH ES # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x10003030 : # POP ECX # MOV EAX,ESI # POP ESI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10006122 : # MOV DWORD PTR DS:[ECX+4],EAX # MOV DWORD PTR DS:[ECX],EDX # MOV EAX,ECX # POP EBP # RETN 0x20 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10018123 : # ADD ESP,14 # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10006125 : # MOV DWORD PTR DS:[ECX],EDX # MOV EAX,ECX # POP EBP # RETN 0x20 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000e126 : # POP ECX # XOR EAX,EAX # INC EAX # POP EDI # POP ESI # POP EBP # RETN 0x0C ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000e127 : # XOR EAX,EAX # INC EAX # POP EDI # POP ESI # POP EBP # RETN 0x0C ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000e129 : # INC EAX # POP EDI # POP ESI # POP EBP # RETN 0x0C ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000e12a : # POP EDI # POP ESI # POP EBP # RETN 0x0C ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1001a12b : # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1000e12c : # POP EBP # RETN 0x0C ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10006140 : # ADD AL,0FF # ADC EAX,<&USER32.DrawTextA> # POP EBP # RETN 0x10 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10006142 : # ADC EAX,<&USER32.DrawTextA> # POP EBP # RETN 0x10 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000c143 : # POP ECX # MOV EAX,ESI # POP ESI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10016144 : # POP ESI # POP EBP # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x10016145 : # POP EBP # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x1000c146 : # POP ESI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10006147 : # POP EBP # RETN 0x10 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1001a149 : # MOV DWORD PTR DS:[ECX+5D59FFFF],ECX # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1001a14d : # POP ECX # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1001a14e : # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10018156 : # ADD CL,BYTE PTR DS:[EBX+C95FFCC7] # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1001a15a : # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10006161 : # ADD AL,0FF # ADC EAX,<&USER32.DrawTextExA> # POP EBP # RETN 0x14 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10006163 : # ADC EAX,<&USER32.DrawTextExA> # POP EBP # RETN 0x14 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000c167 : # MOV DWORD PTR DS:[ESI+14],EDI # POP EDI # POP ESI # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10006168 : # POP EBP # RETN 0x14 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000603c : # ADD BH,BH # PUSH EAX # ADD AL,5D # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000c16a : # POP EDI # POP ESI # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000c16b : # POP ESI # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000603e : # PUSH EAX # ADD AL,5D # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000a178 : # MOV EDI,3BFFFFAE # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000603f : # ADD AL,5D # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10006040 : # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1001a187 : # ADD ECX,DWORD PTR DS:[EBX+5D5E1040] # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1001a188 : # MOV EAX,DWORD PTR DS:[EAX+10] # POP ESI # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10002be9 : # POP ESI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1001a18b : # POP ESI # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1001a18c : # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1000c190 : # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10006193 : # ADD AL,0FF # ADC EAX,<&USER32.GrayStringA> # POP EBP # RETN 0x20 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10006195 : # ADC EAX,<&USER32.GrayStringA> # POP EBP # RETN 0x20 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000619a : # POP EBP # RETN 0x20 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1001aaf0 : # POP ESI # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x100061b1 : # ADD AL,0FF # ADC EAX,<&GDI32.Escape> # POP EBP # RETN 0x10 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100061b3 : # ADC EAX,<&GDI32.Escape> # POP EBP # RETN 0x10 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100061b8 : # POP EBP # RETN 0x10 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000c1c1 : # MOV EAX,ESI # POP ESI # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000c1c3 : # POP ESI # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000cdb6 : # POP ESI # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000bb99 : # ADC EAX,<&USER32.ShowWindow> # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100021e1 : # POP ESI # POP EDI # POP EBP # RETN 0x08 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100021e2 : # POP EDI # POP EBP # RETN 0x08 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100021e3 : # POP EBP # RETN 0x08 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100041e4 : # ADD CL,CL # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100181e7 : # MOV ECX,EDX # MOV EDX,EBX # MOV EBX,ECX # MOV ECX,EAX # MOV EAX,ESI # POP ESI # RETN 0x10 ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x100181e9 : # MOV EDX,EBX # MOV EBX,ECX # MOV ECX,EAX # MOV EAX,ESI # POP ESI # RETN 0x10 ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1000c1ea : # MOV DWORD PTR DS:[EAX],ECX # MOV DWORD PTR DS:[EAX+4],EDX # POP EBP # RETN 0x08 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100181eb : # MOV EBX,ECX # MOV ECX,EAX # MOV EAX,ESI # POP ESI # RETN 0x10 ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1000c1ec : # MOV DWORD PTR DS:[EAX+4],EDX # POP EBP # RETN 0x08 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10006052 : # POP EBP # RETN 0x08 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000c1ee : # ADD AL,5D # RETN 0x08 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000c1ef : # POP EBP # RETN 0x08 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100181f1 : # POP ESI # RETN 0x10 ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x100061f2 : # MOV EAX,DWORD PTR SS:[EBP+8] # POP EDI # POP ESI # POP EBP # RETN 0x0C ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100061f5 : # POP EDI # POP ESI # POP EBP # RETN 0x0C ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100061f6 : # POP ESI # POP EBP # RETN 0x0C ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100061f7 : # POP EBP # RETN 0x0C ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000c208 : # POP ESI # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000e211 : # POP ECX # POP ECX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000e212 : # POP ECX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1001a059 : # POP EDI # XOR EAX,EAX # POP ESI # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1000421c : # POP ESI # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000421e : # MOV EAX,DWORD PTR DS:[10028FF4] # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10004221 : # ADD DL,BYTE PTR DS:[EAX] # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10004230 : # MOV DWORD PTR DS:[EAX+34],EDX # MOV DWORD PTR DS:[EAX+54],EDX # MOV DWORD PTR DS:[EAX+4C],ECX # MOV DWORD PTR DS:[EAX+50],EDX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10006231 : # MOV EAX,DWORD PTR SS:[EBP+8] # POP EDI # POP ESI # POP EBP # RETN 0x0C ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10002232 : # POP EDI # POP ESI # POP EBP # RETN 0x08 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10004233 : # MOV DWORD PTR DS:[EAX+54],EDX # MOV DWORD PTR DS:[EAX+4C],ECX # MOV DWORD PTR DS:[EAX+50],EDX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10004234 : # PUSH EAX # PUSH ESP # MOV DWORD PTR DS:[EAX+4C],ECX # MOV DWORD PTR DS:[EAX+50],EDX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10006235 : # POP ESI # POP EBP # RETN 0x0C ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10006236 : # POP EBP # RETN 0x0C ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10004237 : # DEC EAX # DEC ESP # MOV DWORD PTR DS:[EAX+50],EDX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10004238 : # DEC ESP # MOV DWORD PTR DS:[EAX+50],EDX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10004239 : # MOV DWORD PTR DS:[EAX+50],EDX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000423a : # PUSH EAX # PUSH EAX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000423b : # PUSH EAX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000e244 : # POP ECX # POP EBP # RETN 0x0C ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000e245 : # POP EBP # RETN 0x0C ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000c247 : # MOV EAX,DWORD PTR DS:[ESI+C] # MOV ECX,DWORD PTR DS:[EAX] # MOV DWORD PTR DS:[ESI+C],ECX # POP ESI # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000c24a : # MOV ECX,DWORD PTR DS:[EAX] # MOV DWORD PTR DS:[ESI+C],ECX # POP ESI # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000c24c : # MOV DWORD PTR DS:[ESI+C],ECX # POP ESI # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000c24f : # POP ESI # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10002257 : # POP ESI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10002258 : # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000c25e : # POP EBP # RETN 0x08 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1001225f : # XOR EAX,EAX # INC EAX # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x1000c261 : # ADD DL,AL # ADD AL,0 # MOV EAX,WinCRT.10020988 # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000c263 : # ADD AL,0 # MOV EAX,WinCRT.10020988 # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000c265 : # MOV EAX,WinCRT.10020988 # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000c268 : # ADD DL,BYTE PTR DS:[EAX] # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10006270 : # MOV EAX,DWORD PTR SS:[EBP+8] # POP EDI # POP ESI # POP EBP # RETN 0x0C ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10004271 : # POP EDI # POP ESI # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10004272 : # POP ESI # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10006273 : # POP EDI # POP ESI # POP EBP # RETN 0x0C ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10006274 : # POP ESI # POP EBP # RETN 0x0C ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10006275 : # POP EBP # RETN 0x0C ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000a277 : # ADC EAX,<&USER32.GetWindow> # POP ESI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000a27c : # POP ESI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000227d : # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000c27e : # PUSHAD # ADD AL,0 # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000c27f : # ADD AL,0 # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000c280 : # ADD BL,AL # XOR EAX,EAX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000c282 : # XOR EAX,EAX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000c06b : # MOV DWORD PTR DS:[EAX+18],ECX # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000a28c : # XOR EAX,EAX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000c06e : # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000e296 : # POP ECX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000c297 : # TEST AL,9 # ADD DL,BYTE PTR DS:[EAX] # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000c299 : # ADD DL,BYTE PTR DS:[EAX] # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000c29b : # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000229d : # POP ESI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000229e : # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000a2a7 : # POP ESI # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100022b6 : # POP EBP # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100062bb : # MOV EAX,DWORD PTR SS:[EBP+8] # POP EDI # POP ESI # POP EBP # RETN 0x14 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100062be : # POP EDI # POP ESI # POP EBP # RETN 0x14 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100062bf : # POP ESI # POP EBP # RETN 0x14 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100062c0 : # POP EBP # RETN 0x14 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100122c1 : # POP EDI # POP ESI # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x100122c2 : # POP ESI # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1001a07c : # POP ECX # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x100062fa : # MOV EAX,DWORD PTR SS:[EBP+8] # POP EDI # POP ESI # POP EBP # RETN 0x0C ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000807f : # POP ESI # POP EBP # RETN 0x08 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100182fc : # ADD EAX,5D40C033 # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x100062fd : # POP EDI # POP ESI # POP EBP # RETN 0x0C ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100062fe : # POP ESI # POP EBP # RETN 0x0C ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100062ff : # POP EBP # RETN 0x0C ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10018300 : # POP EBP # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10018302 : # XOR EAX,EAX # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10018304 : # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x100075d9 : # MOV EAX,ESI # POP ESI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000431d : # PUSH EAX # ADD AL,5F # POP ESI # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000431e : # ADD AL,5F # POP ESI # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000431f : # POP EDI # POP ESI # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10004320 : # POP ESI # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100075db : # POP ESI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1001a328 : # ADD ESP,14 # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1001a32b : # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10002234 : # POP EBP # RETN 0x08 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000cb34 : # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000433b : # MOV EAX,ESI # POP ESI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000a33c : # POP ESI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000433d : # POP ESI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000433e : # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10003b35 : # ADD AL,81 # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000c344 : # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10006345 : # MOV EAX,DWORD PTR SS:[EBP+8] # POP EDI # POP ESI # POP EBP # RETN 0x14 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10006348 : # POP EDI # POP ESI # POP EBP # RETN 0x14 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10006349 : # POP ESI # POP EBP # RETN 0x14 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000634a : # POP EBP # RETN 0x14 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10003b37 : # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000e35d : # XOR EAX,EAX # POP ESI # POP EBP # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000e35f : # POP ESI # POP EBP # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000e360 : # POP EBP # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10006362 : # MOV DWORD PTR DS:[EAX+4],ECX # MOV DWORD PTR DS:[EAX+8],ECX # MOV DWORD PTR DS:[EAX+C],ECX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10006365 : # MOV DWORD PTR DS:[EAX+8],ECX # MOV DWORD PTR DS:[EAX+C],ECX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10006368 : # MOV DWORD PTR DS:[EAX+C],ECX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000636c : # XOR EAX,EAX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000c36d : # ADD AL,0 # MOV EAX,EDI # POP EDI # POP ESI # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000c36f : # MOV EAX,EDI # POP EDI # POP ESI # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1001a370 : # MOV ECX,59FFFFFF # POP ECX # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1000c371 : # POP EDI # POP ESI # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000c372 : # POP ESI # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1001a374 : # POP ECX # POP ECX # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1001a375 : # POP ECX # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1001a376 : # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1000c37a : # XOR EAX,EAX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1001837c : # ADD ESP,10 # POP ESI # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1001837f : # POP ESI # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10006382 : # PUSHAD # ADD AL,0 # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10006383 : # ADD AL,0 # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10006384 : # ADD BL,AL # XOR EAX,EAX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000d096 : # MOV DWORD PTR DS:[ESI+8],EDI # MOV DWORD PTR DS:[ESI+C],EAX # MOV DWORD PTR DS:[ESI+4],EBX # POP EDI # POP ESI # POP EBX # POP EBP # RETN 0x08 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10006386 : # XOR EAX,EAX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10012387 : # POP EBX # POP EDI # POP ESI # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10012388 : # POP EDI # POP ESI # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10012389 : # POP ESI # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1000a097 : # POP ESI # POP EBP # RETN 0x08 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10018390 : # POP ECX # POP ECX # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10018391 : # POP ECX # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10018392 : # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1000639d : # MOV DWORD PTR DS:[EAX+4],ECX # MOV DWORD PTR DS:[EAX+8],ECX # MOV DWORD PTR DS:[EAX+C],ECX # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100063a0 : # MOV DWORD PTR DS:[EAX+8],ECX # MOV DWORD PTR DS:[EAX+C],ECX # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100183a3 : # POP ECX # POP ECX # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x100183a4 : # POP ECX # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x100183a5 : # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x100063a6 : # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000c3a9 : # POP ECX # MOV EAX,ESI # POP ESI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000c3aa : # MOV EAX,ESI # POP ESI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000c3ac : # POP ESI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000c3ad : # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000a3b3 : # MOV EAX,ESI # POP ESI # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000a3b5 : # POP ESI # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100069ba : # POP EDI # POP ESI # POP EBX # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000d09f : # POP EDI # POP ESI # POP EBX # POP EBP # RETN 0x08 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000e3bf : # POP ECX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100063c0 : # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000d0a0 : # POP ESI # POP EBX # POP EBP # RETN 0x08 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000a3e1 : # ADD EAX,5D40C033 # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000a3e2 : # XOR EAX,EAX # INC EAX # POP EBP # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000a3e4 : # INC EAX # POP EBP # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000a3e5 : # POP EBP # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000a3e7 : # XOR EAX,EAX # POP EBP # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000a3e9 : # POP EBP # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100083ea : # ADD BYTE PTR FS:[EAX],AL # RETN 0x18 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000a3eb : # XOR EAX,EAX # RETN 0x08 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000a3f0 : # MOV EAX,80004001 # RETN 0x08 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10013b54 : # MOV ECX,DWORD PTR DS:[ESI+ECX] # ADD ECX,EDX # ADD EAX,ECX # POP ESI # POP EBP # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x1000a3fe : # XOR EAX,EAX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000c408 : # INC ECX # ADD AL,3 # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000c409 : # ADD AL,3 # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10007499 : # INC ESI # DEC EAX # MOV DWORD PTR DS:[ESI+4C],EAX # MOV DWORD PTR DS:[ESI+50],EAX # MOV EAX,ESI # POP ESI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10008444 : # ADD BYTE PTR FS:[EAX],AL # RETN 0x18 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000a437 : # XOR EAX,EAX # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000a439 : # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000c443 : # INC EDX # ADD AL,3 # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000c444 : # ADD AL,3 # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000260d : # XCHG EAX,ESP # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000c45b : # XOR EAX,EAX # POP EDI # POP ESI # POP EBX # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000c45d : # POP EDI # POP ESI # POP EBX # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000c45e : # POP ESI # POP EBX # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000c45f : # POP EBX # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000c460 : # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1001e0bc : # MOV EAX,ESI # POP ESI # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1000446b : # POP ESI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000446c : # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10002472 : # MOV EAX,WinCRT.10002478 # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10006477 : # ADD AL,0 # MOV EAX,EDI # POP EDI # POP ESI # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10006478 : # ADD AL,0 # MOV EAX,EDI # POP EDI # POP ESI # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000647a : # MOV EAX,EDI # POP EDI # POP ESI # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000647c : # POP EDI # POP ESI # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000647d : # POP ESI # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1001448b : # ADC EAX,C68B1002 # POP ESI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1001448c : # ADD DL,BYTE PTR DS:[EAX] # MOV EAX,ESI # POP ESI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1001448e : # MOV EAX,ESI # POP ESI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10014490 : # POP ESI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10014491 : # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10006492 : # ADC EAX,<&GDI32.DeleteDC> # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1001c836 : # ADD AL,BYTE PTR DS:[EDX+3A] # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1000849e : # ADD BYTE PTR FS:[EAX],AL # RETN 0x18 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000249f : # MOV EAX,ESI # POP ESI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100024a1 : # POP ESI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100024a2 : # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100044ab : # ADD EAX,C68B0000 # POP ESI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100044ac : # ADD EAX,C68B0000 # POP ESI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100044af : # MOV EAX,ESI # POP ESI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000e4b1 : # POP EBP # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100044b2 : # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10005b74 : # INC EAX # POP EBP # RETN 0x10 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100060ca : # POP EBP # RETN 0x10 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10005b75 : # POP EBP # RETN 0x10 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100024c0 : # MOV EAX,ESI # POP ESI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100024c2 : # POP ESI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100024c3 : # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000a4ce : # ADD AL,BYTE PTR DS:[EAX] # SUB BL,5 # MOV EAX,80070057 # POP EDI # POP ESI # POP EBX # POP EBP # RETN 0x10 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000a4d1 : # SUB BL,5 # MOV EAX,80070057 # POP EDI # POP ESI # POP EBX # POP EBP # RETN 0x10 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000a4d4 : # MOV EAX,80070057 # POP EDI # POP ESI # POP EBX # POP EBP # RETN 0x10 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100024d7 : # MOV EAX,ESI # POP ESI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000a4d9 : # POP EDI # POP ESI # POP EBX # POP EBP # RETN 0x10 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000a4da : # POP ESI # POP EBX # POP EBP # RETN 0x10 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000a4db : # POP EBX # POP EBP # RETN 0x10 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000a4dc : # POP EBP # RETN 0x10 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000e4e0 : # ADD ESP,20 # POP ESI # POP EBP # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000e4e3 : # POP ESI # POP EBP # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000e4e4 : # POP EBP # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000a4f6 : # POP EBP # RETN 0x08 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000a001 : # POP ECX # MOV EAX,ESI # POP ESI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000aaa9 : # MOV DWORD PTR DS:[ESI+14],EDI # POP EDI # POP ESI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000a52a : # MOV EAX,DWORD PTR DS:[EAX+14] # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000a52d : # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10012537 : # ADD BH,BH # ADD ECX,ECX # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x10012539 : # ADD ECX,ECX # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x1000253b : # INC EAX # POP EBP # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000253c : # POP EBP # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10006544 : # ADD AL,0 # MOV EAX,EDI # POP EDI # POP ESI # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10006545 : # ADD AL,0 # MOV EAX,EDI # POP EDI # POP ESI # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10006547 : # MOV EAX,EDI # POP EDI # POP ESI # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10006549 : # POP EDI # POP ESI # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000654a : # POP ESI # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000a54d : # MOV EAX,ESI # POP ESI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000a54f : # POP ESI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000a550 : # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10006552 : # XOR EAX,EAX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000655c : # ADC EAX,<&GDI32.DeleteObject> # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10002560 : # DEC EAX # ADD AL,8B # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10002561 : # ADD AL,8B # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000a567 : # POP EBP # RETN 0x0C ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10014570 : # ADD ESP,20 # XOR EAX,EAX # INC EAX # POP EDI # POP ESI # POP EBX # POP EBP # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x10014573 : # XOR EAX,EAX # INC EAX # POP EDI # POP ESI # POP EBX # POP EBP # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x10014575 : # INC EAX # POP EDI # POP ESI # POP EBX # POP EBP # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x10014576 : # POP EDI # POP ESI # POP EBX # POP EBP # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x10014577 : # POP ESI # POP EBX # POP EBP # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x10014578 : # POP EBX # POP EBP # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x10014579 : # POP EBP # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x1000657b : # POP ECX # MOV EAX,ESI # POP ESI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000657c : # MOV EAX,ESI # POP ESI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000657e : # POP ESI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000c57f : # AND EAX,7FFFBFFE # ADD EAX,80004002 # POP EDI # POP ESI # POP EBP # RETN 0x08 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1001e640 : # POP ECX # POP ECX # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1000c584 : # ADD EAX,80004002 # POP EDI # POP ESI # POP EBP # RETN 0x08 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000a585 : # MOV EAX,ESI # POP ESI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1001e641 : # POP ECX # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1000a588 : # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000c589 : # POP EDI # POP ESI # POP EBP # RETN 0x08 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000c58a : # POP ESI # POP EBP # RETN 0x08 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000c58b : # POP EBP # RETN 0x08 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10001b99 : # POP EBP # RETN 0x08 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1001459a : # POP ES # XOR EAX,EAX # INC EAX # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1001459b : # XOR EAX,EAX # INC EAX # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1000a005 : # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1001459d : # INC EAX # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x100190f1 : # POP ESI # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1000c5a8 : # POP EBP # RETN 0x08 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100065bd : # POP EDI # POP ESI # POP EBX # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100065be : # POP ESI # POP EBX # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100065bf : # POP EBX # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100065c0 : # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000c5ce : # ADD ESP,14 # POP EBP # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000c5d1 : # POP EBP # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000cba3 : # POP EDI # POP ESI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100181ed : # MOV ECX,EAX # MOV EAX,ESI # POP ESI # RETN 0x10 ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x100010fa : # POP ESI # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100185e3 : # DEC ECX # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1000279f : # MOV EAX,80029C4A # RETN 0x08 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100145ea : # POP ES # XOR EAX,EAX # INC EAX # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x100145eb : # XOR EAX,EAX # INC EAX # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x100145ed : # INC EAX # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10018601 : # ADD ESP,18 # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10018604 : # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10006608 : # POP EDI # POP ESI # POP EBX # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10006609 : # POP ESI # POP EBX # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000660a : # POP EBX # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000660b : # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1001460d : # ADD DL,BYTE PTR DS:[EAX] # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x1001da60 : # MOV EAX,EBX # POP EDI # POP ESI # POP EBX # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1000c777 : # MOV DWORD PTR DS:[ESI+28],EAX # POP ESI # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000263d : # XOR EAX,EAX # POP ESI # POP EBX # POP EBP # RETN 0x1C ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000263f : # POP ESI # POP EBX # POP EBP # RETN 0x1C ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10002640 : # POP EBX # POP EBP # RETN 0x1C ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10002641 : # POP EBP # RETN 0x1C ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10004bc2 : # POP EDI # POP ESI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10004bc3 : # POP ESI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10004bc4 : # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000767f : # MOV EAX,ESI # POP ESI # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1001a11a : # MOV EAX,59FFFF89 # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1000a6b1 : # XOR EAX,EAX # POP ESI # POP EBP # RETN 0x0C ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000a6b3 : # POP ESI # POP EBP # RETN 0x0C ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000a6b4 : # POP EBP # RETN 0x0C ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000bec7 : # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1001a11f : # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10009013 : # INC EAX # POP EBX # POP EDI # POP ESI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100126ce : # CLC # ADD DH,BYTE PTR SS:[ESP+EAX+3B] # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x100126cf : # ADD DH,BYTE PTR SS:[ESP+EAX+3B] # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x100126d1 : # ADD AL,3B # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10009014 : # POP EBX # POP EDI # POP ESI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1001c6df : # ADD AL,BYTE PTR DS:[EDX+3A] # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10018126 : # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1001e6e8 : # POP ECX # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10006127 : # MOV EAX,ECX # POP EBP # RETN 0x20 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100066ed : # POP ECX # MOV EAX,ESI # POP ESI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100066ee : # MOV EAX,ESI # POP ESI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100066f0 : # POP ESI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10001128 : # MOV EAX,1 # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000e6f2 : # MOV DWORD PTR DS:[EAX+98],ESI # MOV EAX,ESI # POP ESI # POP EBP # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100046f3 : # MOV EAX,ESI # POP ESI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100046f5 : # POP ESI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100046f6 : # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10006129 : # POP EBP # RETN 0x20 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000e6f8 : # MOV EAX,ESI # POP ESI # POP EBP # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000e6fa : # POP ESI # POP EBP # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000e6fb : # POP EBP # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10009015 : # POP EDI # POP ESI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000e12b : # POP ESI # POP EBP # RETN 0x0C ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1001a717 : # MOV EBX,C9FFFF40 # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1001c719 : # ADD AL,BYTE PTR DS:[EDX+3A] # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1001a71a : # DEC ECX # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1000e71d : # INC EAX # POP EBP # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000e71e : # POP EBP # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1001d685 : # OR EAX,8000 # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1000e720 : # XOR EAX,EAX # POP EBP # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000f130 : # ADD DL,BYTE PTR DS:[EAX] # POP EBP # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000e722 : # POP EBP # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000bbdb : # ADC EAX,<&USER32.EnableWindow> # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000125a : # ADD DL,BYTE PTR DS:[EAX] # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000f132 : # POP EBP # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1001c737 : # ADD AL,BYTE PTR DS:[EDX+3A] # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1000e73f : # MOV ECX,DWORD PTR DS:[ESI+4] # MOV DWORD PTR DS:[EAX+98],ECX # POP ESI # POP EBP # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000e742 : # MOV DWORD PTR DS:[EAX+98],ECX # POP ESI # POP EBP # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10002be1 : # ADD AL,0FF # ADC EAX,<&USER32.SetMenuItemBitmaps> # POP EDI # POP ESI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000e748 : # POP ESI # POP EBP # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000e749 : # POP EBP # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10012751 : # POP EDI # POP ESI # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x10012752 : # POP ESI # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x1001476d : # ADD DL,BYTE PTR DS:[EAX] # POP EBP # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x1001476f : # POP EBP # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x1000c771 : # PUSH EAX # PUSH EAX # MOV EAX,DWORD PTR DS:[EDI] # POP EBX # POP EDI # MOV DWORD PTR DS:[ESI+28],EAX # POP ESI # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000c772 : # PUSH EAX # MOV EAX,DWORD PTR DS:[EDI] # POP EBX # POP EDI # MOV DWORD PTR DS:[ESI+28],EAX # POP ESI # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000c773 : # MOV EAX,DWORD PTR DS:[EDI] # POP EBX # POP EDI # MOV DWORD PTR DS:[ESI+28],EAX # POP ESI # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000c774 : # POP ES # POP EBX # POP EDI # MOV DWORD PTR DS:[ESI+28],EAX # POP ESI # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000c775 : # POP EBX # POP EDI # MOV DWORD PTR DS:[ESI+28],EAX # POP ESI # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000c776 : # POP EDI # MOV DWORD PTR DS:[ESI+28],EAX # POP ESI # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10012777 : # POP EDI # POP ESI # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x10012778 : # POP ESI # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x1000c77a : # POP ESI # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10019140 : # POP EDI # POP ESI # POP EBX # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10019141 : # POP ESI # POP EBX # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10006788 : # ADD CL,CL # RETN 0x08 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1001b142 : # XOR EAX,EAX # POP EDI # POP ESI # POP EBX # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10002794 : # XOR EAX,EAX # INC EAX # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10002796 : # INC EAX # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10002798 : # ADD AL,0 # XOR EAX,EAX # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000c144 : # MOV EAX,ESI # POP ESI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000279a : # XOR EAX,EAX # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000279d : # ADD AL,0 # MOV EAX,80029C4A # RETN 0x08 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1001279e : # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1001b145 : # POP ESI # POP EBX # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x100127a6 : # ADD DL,BYTE PTR DS:[EAX] # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x100027a7 : # MOV EAX,WinCRT.1001F934 # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100127a8 : # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1000c147 : # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100027ad : # MOV EAX,WinCRT.1001F96C # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100067af : # POP ESI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100067b0 : # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100027b3 : # MOV EAX,WinCRT.1001F988 # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000514f : # ADC EAX,<&KERNEL32.DeleteCriticalSection> # POP EDI # POP ESI # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000e7dd : # ADD DH,BL # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100067e1 : # ADC EAX,<&KERNEL32.GlobalFree> # POP ESI # POP EDI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100027e5 : # PUSH EAX # ADD AL,5E # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100027e6 : # ADD AL,5E # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100027e7 : # POP ESI # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100067e8 : # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100027e9 : # MOV EAX,WinCRT.1001F998 # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100027ef : # MOV EAX,WinCRT.1001F9AC # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000f153 : # ADD DL,BYTE PTR DS:[EAX] # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000a7ff : # MOV EAX,WinCRT.1000A73E # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10018803 : # ADD AL,BYTE PTR DS:[EBX] # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10002805 : # MOV DWORD PTR DS:[EAX+4],ECX # MOV DWORD PTR DS:[EAX+24],ECX # MOV DWORD PTR DS:[EAX+10],ECX # MOV DWORD PTR DS:[EAX+C],ECX # MOV DWORD PTR DS:[EAX+14],ECX # MOV DWORD PTR DS:[EAX+1C],ECX # MOV DWORD PTR DS:[EAX+18],ECX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10002808 : # MOV DWORD PTR DS:[EAX+24],ECX # MOV DWORD PTR DS:[EAX+10],ECX # MOV DWORD PTR DS:[EAX+C],ECX # MOV DWORD PTR DS:[EAX+14],ECX # MOV DWORD PTR DS:[EAX+1C],ECX # MOV DWORD PTR DS:[EAX+18],ECX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000280b : # MOV DWORD PTR DS:[EAX+10],ECX # MOV DWORD PTR DS:[EAX+C],ECX # MOV DWORD PTR DS:[EAX+14],ECX # MOV DWORD PTR DS:[EAX+1C],ECX # MOV DWORD PTR DS:[EAX+18],ECX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000280e : # MOV DWORD PTR DS:[EAX+C],ECX # MOV DWORD PTR DS:[EAX+14],ECX # MOV DWORD PTR DS:[EAX+1C],ECX # MOV DWORD PTR DS:[EAX+18],ECX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10002811 : # MOV DWORD PTR DS:[EAX+14],ECX # MOV DWORD PTR DS:[EAX+1C],ECX # MOV DWORD PTR DS:[EAX+18],ECX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10002814 : # MOV DWORD PTR DS:[EAX+1C],ECX # MOV DWORD PTR DS:[EAX+18],ECX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10002817 : # MOV DWORD PTR DS:[EAX+18],ECX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000bf01 : # POP ESI # POP EBP # RETN 0x0C ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10002828 : # ADD AL,0FF # ADC EAX,<&USER32.CheckMenuItem> # POP EBP # RETN 0x08 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000282a : # ADC EAX,<&USER32.CheckMenuItem> # POP EBP # RETN 0x08 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000282f : # POP EBP # RETN 0x08 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10006831 : # POP ECX # POP ECX # XOR EAX,EAX # INC EAX # POP ESI # POP EBP # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10006832 : # POP ECX # XOR EAX,EAX # INC EAX # POP ESI # POP EBP # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10006833 : # XOR EAX,EAX # INC EAX # POP ESI # POP EBP # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10006835 : # INC EAX # POP ESI # POP EBP # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10006836 : # POP ESI # POP EBP # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10006837 : # POP EBP # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10002840 : # ADD AL,0FF # ADC EAX,<&USER32.EnableMenuItem> # POP EBP # RETN 0x08 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10002842 : # ADC EAX,<&USER32.EnableMenuItem> # POP EBP # RETN 0x08 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000e844 : # LEA EAX,DWORD PTR SS:[EBP-C] # MOV DWORD PTR FS:[0],EAX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000e847 : # MOV DWORD PTR FS:[0],EAX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000484b : # MOV EAX,WinCRT.10004851 # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000f162 : # PUSH ES # MOV EAX,WinCRT.10027CFC # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1001c851 : # ADD AL,BYTE PTR DS:[EDX+3A] # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10012c0f : # XOR EAX,EAX # POP EBP # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x1000285e : # ADD AL,0FF # ADC EAX,<&USER32.ModifyMenuA> # POP EBP # RETN 0x10 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10002860 : # ADC EAX,<&USER32.ModifyMenuA> # POP EBP # RETN 0x10 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10002865 : # POP EBP # RETN 0x10 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000c866 : # DEC ECX # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000e87a : # LEA EAX,DWORD PTR SS:[EBP-C] # MOV DWORD PTR FS:[0],EAX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000287b : # ADC EAX,<&USER32.SendMessageA> # POP EBP # RETN 0x0C ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000e87d : # MOV DWORD PTR FS:[0],EAX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10002880 : # POP EBP # RETN 0x0C ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100076c0 : # ADC EAX,<&USER32.AdjustWindowRectEx> # POP ESI # POP EBP # RETN 0x08 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1001e895 : # POP ECX # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10014896 : # DEC ECX # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10002899 : # MOV DWORD PTR DS:[ESI+14],EAX # MOV DWORD PTR DS:[ESI+8],ECX # MOV DWORD PTR DS:[ESI+C],ECX # MOV DWORD PTR DS:[ESI+10],ECX # MOV DWORD PTR DS:[ESI+18],ECX # MOV EAX,ESI # POP ESI # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000289c : # MOV DWORD PTR DS:[ESI+8],ECX # MOV DWORD PTR DS:[ESI+C],ECX # MOV DWORD PTR DS:[ESI+10],ECX # MOV DWORD PTR DS:[ESI+18],ECX # MOV EAX,ESI # POP ESI # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000289f : # MOV DWORD PTR DS:[ESI+C],ECX # MOV DWORD PTR DS:[ESI+10],ECX # MOV DWORD PTR DS:[ESI+18],ECX # MOV EAX,ESI # POP ESI # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000d170 : # ADD AL,8D # ADD AL,81 # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100028a2 : # MOV DWORD PTR DS:[ESI+10],ECX # MOV DWORD PTR DS:[ESI+18],ECX # MOV EAX,ESI # POP ESI # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000c8a3 : # MOV EAX,ESI # POP ESI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100028a5 : # MOV DWORD PTR DS:[ESI+18],ECX # MOV EAX,ESI # POP ESI # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000c8a6 : # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000d171 : # LEA EAX,DWORD PTR DS:[ECX+EAX*4] # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100028a8 : # MOV EAX,ESI # POP ESI # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100028aa : # POP ESI # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000e8b3 : # LEA EAX,DWORD PTR SS:[EBP-C] # MOV DWORD PTR FS:[0],EAX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100068b5 : # MOV EAX,WinCRT.1001FF24 # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000e8b6 : # MOV DWORD PTR FS:[0],EAX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000d174 : # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100028c1 : # POP ESI # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100108cd : # XOR EAX,EAX # POP EDI # POP ESI # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1000e8ce : # POP EBP # PUSH ECX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100108cf : # POP EDI # POP ESI # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x100108d0 : # POP ESI # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x100068d1 : # POP ESI # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100188d2 : # ADD AL,3B # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x100066ce : # MOV EAX,WinCRT.1000662D # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10005036 : # POP EBX # POP EBP # RETN 0x08 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100148dd : # POP EDI # POP ESI # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x100148de : # POP ESI # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1000c8e1 : # MOV EAX,ESI # POP ESI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000c8e3 : # POP ESI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000c8e4 : # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100028eb : # ADD BL,AL # MOV EAX,WinCRT.1001F9D8 # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100028ed : # MOV EAX,WinCRT.1001F9D8 # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100148f2 : # XOR EAX,EAX # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x100148f4 : # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10004911 : # MOV EAX,ESI # POP ESI # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10004913 : # POP ESI # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1001a916 : # MOV ESP,C9FFFF3E # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1001a919 : # DEC ECX # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1000e91c : # POP EDI # POP EBP # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000e91d : # POP EBP # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000c929 : # MOV EAX,ESI # POP ESI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000c92b : # POP ESI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000c92c : # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000e943 : # ADD ESP,0C # POP EBP # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000e946 : # POP EBP # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000c18c : # MOV EBX,5DFFFFFF # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000b685 : # POP EBP # RETN 0x10 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10010ccb : # MOV EAX,ESI # POP ESI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1001495d : # XOR EAX,EAX # POP EDI # POP ESI # POP EBX # POP EBP # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x1001495f : # POP EDI # POP ESI # POP EBX # POP EBP # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x10014960 : # POP ESI # POP EBX # POP EBP # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x10014961 : # POP EBX # POP EBP # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x10014962 : # POP EBP # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x10006965 : # ADC EAX,<&KERNEL32.LocalFree> # XOR EAX,EAX # INC EAX # POP EBX # POP EBP # RETN 0x0C ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000696a : # XOR EAX,EAX # INC EAX # POP EBX # POP EBP # RETN 0x0C ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000696c : # INC EAX # POP EBX # POP EBP # RETN 0x0C ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000696d : # POP EBX # POP EBP # RETN 0x0C ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000696e : # POP EBP # RETN 0x0C ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000c970 : # MOV EAX,ESI # POP ESI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000e971 : # POP EBP # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000c972 : # POP ESI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000c973 : # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100076e9 : # POP EBP # RETN 0x18 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000297b : # POP ESI # POP EBX # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000297c : # POP EBX # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000297d : # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000698c : # POP ECX # MOV EAX,ESI # POP ESI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000698d : # MOV EAX,ESI # POP ESI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000698f : # POP ESI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10006990 : # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000e992 : # POP ECX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10012996 : # POP ECX # POP ECX # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10012997 : # POP ECX # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10012998 : # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1001299a : # XOR EAX,EAX # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1000e99b : # POP ECX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1001299c : # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x100066f1 : # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100109a9 : # INC EBP # CLC # LEA EAX,DWORD PTR SS:[EBP-10] # MOV DWORD PTR FS:[0],EAX # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x100109aa : # CLC # LEA EAX,DWORD PTR SS:[EBP-10] # MOV DWORD PTR FS:[0],EAX # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x100109ab : # LEA EAX,DWORD PTR SS:[EBP-10] # MOV DWORD PTR FS:[0],EAX # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x100109ae : # MOV DWORD PTR FS:[0],EAX # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1000e9b7 : # POP ESI # POP EBP # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000e9b8 : # POP EBP # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100049b9 : # INC ESI # ADD AL,0EB # ADD AL,83 # ADD AL,0 # MOV EAX,ESI # POP ESI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100049ba : # ADD AL,0EB # ADD AL,83 # ADD AL,0 # MOV EAX,ESI # POP ESI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100069bb : # POP ESI # POP EBX # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100049bc : # ADD AL,83 # ADD AL,0 # MOV EAX,ESI # POP ESI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100069bd : # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100049be : # ADD AL,0 # MOV EAX,ESI # POP ESI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100049bf : # ADD AL,0 # MOV EAX,ESI # POP ESI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100049c1 : # MOV EAX,ESI # POP ESI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100049c3 : # POP ESI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100049c4 : # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100109c6 : # POP EBP # PUSH ECX # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x100109c7 : # PUSH ECX # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1000e9db : # POP ESI # POP EBP # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000e9dc : # POP EBP # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100049e1 : # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100069ef : # OR ECX,DWORD PTR DS:[EAX+5FC0331E] # POP ESI # POP EBX # POP EBP # RETN 0x0C ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100029f1 : # POP EDI # POP ESI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100069f2 : # XOR EAX,EAX # POP EDI # POP ESI # POP EBX # POP EBP # RETN 0x0C ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100029f3 : # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100069f4 : # POP EDI # POP ESI # POP EBX # POP EBP # RETN 0x0C ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100069f5 : # POP ESI # POP EBX # POP EBP # RETN 0x0C ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100069f6 : # POP EBX # POP EBP # RETN 0x0C ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100069f7 : # POP EBP # RETN 0x0C ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100149f9 : # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10014a0c : # MOV EAX,EDX # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x1000c9ba : # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10006a20 : # MOV EAX,DWORD PTR DS:[EAX+C] # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10006a24 : # ADD AL,0 # MOV EAX,WinCRT.10029370 # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10003706 : # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10006a26 : # MOV EAX,WinCRT.10029370 # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10006a28 : # XCHG EAX,EBX # ADD DL,BYTE PTR DS:[EAX] # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10006a29 : # ADD DL,BYTE PTR DS:[EAX] # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10014a2b : # POP EBP # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x1000ca3b : # ADD CL,CL # RETN 0x08 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10004a44 : # XOR EAX,EAX # POP EDI # POP ESI # POP EBX # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10004a46 : # POP EDI # POP ESI # POP EBX # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10014a47 : # ADD DL,BYTE PTR DS:[EAX] # POP EBP # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x10004a48 : # POP EBX # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10014a49 : # POP EBP # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x1000ea58 : # ADD BH,BH # ADC EAX,WinCRT.1002CA10 # XOR EAX,EAX # POP EBP # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000ea5a : # ADC EAX,WinCRT.1002CA10 # XOR EAX,EAX # POP EBP # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000ea5d : # ADD DL,BYTE PTR DS:[EAX] # XOR EAX,EAX # POP EBP # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000ea5f : # XOR EAX,EAX # POP EBP # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10002a60 : # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000ea61 : # POP EBP # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10006a62 : # MOV DWORD PTR DS:[EAX+8],ESI # POP EDI # POP ESI # POP EBP # RETN 0x08 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000d1bb : # ADD DL,BYTE PTR DS:[EAX] # MOV DWORD PTR DS:[EAX+4],ECX # MOV DWORD PTR DS:[EAX+10],ECX # MOV DWORD PTR DS:[EAX+C],ECX # MOV DWORD PTR DS:[EAX+8],ECX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000d957 : # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10006a65 : # POP EDI # POP ESI # POP EBP # RETN 0x08 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10006a66 : # POP ESI # POP EBP # RETN 0x08 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10006a67 : # POP EBP # RETN 0x08 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10012a6d : # XOR EAX,EAX # INC EAX # POP EDI # POP ESI # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x10012a6f : # INC EAX # POP EDI # POP ESI # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x10012a70 : # POP EDI # POP ESI # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x10014c68 : # ADD DL,BYTE PTR DS:[EAX] # POP EBP # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x10006a78 : # POP ECX # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10006a79 : # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10014a7e : # XOR EAX,EAX # POP EBP # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x10014a80 : # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1000d1c0 : # MOV DWORD PTR DS:[EAX+10],ECX # MOV DWORD PTR DS:[EAX+C],ECX # MOV DWORD PTR DS:[EAX+8],ECX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10005155 : # POP ESI # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100191c1 : # MOV EAX,WinCRT.10021F1C # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10004a8c : # POP EDI # POP ESI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10014a8d : # POP ECX # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10004a8e : # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000d1c3 : # MOV DWORD PTR DS:[EAX+C],ECX # MOV DWORD PTR DS:[EAX+8],ECX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1001ea94 : # POP ECX # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x100044b1 : # POP ESI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10010aa4 : # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10006aa7 : # MOV DWORD PTR DS:[EAX+8],ESI # POP ESI # POP EBP # RETN 0x0C ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10004aa9 : # XOR EAX,EAX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10006aaa : # POP ESI # POP EBP # RETN 0x0C ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10006aab : # POP EBP # RETN 0x0C ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000aaac : # POP EDI # POP ESI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000aaad : # POP ESI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000aaae : # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10006aaf : # MOV EAX,ECX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1001eab6 : # POP ECX # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1000d71f : # POP ESI # POP EBX # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000d720 : # POP EBX # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1001eac2 : # POP ECX # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10006ace : # MOV DWORD PTR DS:[EAX+16],ECX # MOV DWORD PTR DS:[EAX+4],EAX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10006ad1 : # MOV DWORD PTR DS:[EAX+4],EAX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10012ad3 : # POP ESI # POP EBX # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10012ad4 : # POP EBX # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1001eada : # POP ECX # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10006adf : # LEA EAX,DWORD PTR DS:[ECX+4] # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1001eae6 : # POP ECX # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10012aeb : # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1001aaed : # ADD ESP,2C # POP ESI # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1001aaef : # SUB AL,5E # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10006af0 : # MOV EAX,ECX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1001aaf1 : # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1000cb00 : # POP EDI # POP ESI # POP EBX # POP EBP # RETN 0x08 ** [WinCRT.dll] ** | null,unicodereverse {PAGE_EXECUTE_READ}
0x1000cb01 : # POP ESI # POP EBX # POP EBP # RETN 0x08 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000cb02 : # POP EBX # POP EBP # RETN 0x08 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000cb03 : # POP EBP # RETN 0x08 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000a587 : # POP ESI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000972c : # POP ESI # POP EBP # RETN 0x10 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10006b0d : # MOV ECX,DWORD PTR SS:[EBP+8] # MOV DWORD PTR DS:[EAX+30],ECX # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10006b10 : # MOV DWORD PTR DS:[EAX+30],ECX # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10006b13 : # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10006b1c : # MOV EAX,DWORD PTR DS:[EAX+30] # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1001eb20 : # POP ECX # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10018b28 : # DEC ECX # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1000cb33 : # POP ESI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1001ab34 : # POP ECX # POP ESI # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1001ab35 : # POP ESI # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1001ab36 : # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10004b3a : # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100078c8 : # POP EBP # RETN 0x14 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10004b3d : # ADD BH,BH # ADD EAX,WinCRT.1002903C # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10004b3f : # ADD EAX,WinCRT.1002903C # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10004b41 : # NOP # ADD DL,BYTE PTR DS:[EAX] # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10004b42 : # ADD DL,BYTE PTR DS:[EAX] # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10004b53 : # ADD EAX,76FFF883 # POP ES # MOV EAX,80070057 # POP EBP # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10004b58 : # POP ES # MOV EAX,80070057 # POP EBP # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10004b59 : # MOV EAX,80070057 # POP EBP # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1001eb5a : # POP ECX # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10004b5e : # POP EBP # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10004b60 : # MOV ECX,DWORD PTR SS:[EBP+8] # MOV DWORD PTR DS:[ECX],EAX # XOR EAX,EAX # POP EBP # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10004b63 : # MOV DWORD PTR DS:[ECX],EAX # XOR EAX,EAX # POP EBP # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10004b65 : # XOR EAX,EAX # POP EBP # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10004b67 : # POP EBP # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10006b6a : # POP ESI # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1001eb70 : # POP ECX # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10004b79 : # MOV EAX,DWORD PTR DS:[ECX+4] # ADD EAX,DWORD PTR SS:[EBP+8] # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10004b7c : # ADD EAX,DWORD PTR SS:[EBP+8] # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10004b7f : # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1001eb80 : # ADD DL,BYTE PTR DS:[EAX] # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10002b83 : # ADD CL,CL # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000eb87 : # POP ECX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000c1ed : # PUSH EAX # ADD AL,5D # RETN 0x08 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100181ef : # MOV EAX,ESI # POP ESI # RETN 0x10 ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1000eba0 : # ADD ESP,0C # POP EBP # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000eba3 : # POP EBP # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000cba4 : # POP ESI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000cba5 : # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10012bae : # POP ECX # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1000ebb0 : # ADD ESP,0C # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10004bbc : # MOV ECX,DWORD PTR DS:[ESI] # MOV DWORD PTR DS:[EAX],ECX # MOV DWORD PTR DS:[ESI],EDI # POP EDI # POP ESI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10004bbe : # MOV DWORD PTR DS:[EAX],ECX # MOV DWORD PTR DS:[ESI],EDI # POP EDI # POP ESI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10004bc0 : # MOV DWORD PTR DS:[ESI],EDI # POP EDI # POP ESI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10004bc1 : # POP EDI # POP ESI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1001abc2 : # POP ECX # POP ESI # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1001abc3 : # POP ESI # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1001abc4 : # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1000cbc7 : # POP EBP # RETN 0x08 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000cbcb : # MOV EAX,WinCRT.100209D0 # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000cbce : # ADD DL,BYTE PTR DS:[EAX] # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000774f : # XOR EAX,EAX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10006bdc : # ADD CL,CL # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10012be0 : # POP ESI # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10012be1 : # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10002be3 : # ADC EAX,<&USER32.SetMenuItemBitmaps> # POP EDI # POP ESI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10002be8 : # POP EDI # POP ESI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1001ebe9 : # POP ECX # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10002bea : # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10002bf3 : # MOV EAX,DWORD PTR DS:[EAX+4] # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10002bfc : # ADD EAX,30 # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000ebfe : # ADD DL,BYTE PTR DS:[EAX] # POP ESI # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000ec00 : # POP ESI # RETN ** [WinCRT.dll] ** | null,unicodereverse {PAGE_EXECUTE_READ}
0x1000ac0b : # POP EDI # POP ESI # POP EBX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000ac0c : # POP ESI # POP EBX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000ac0d : # POP EBX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1001cc0f : # DEC ECX # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10014c10 : # POP ECX # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x10012c11 : # POP EBP # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x10004388 : # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10002c1b : # ADD BH,BH # XOR EDI,EDI # ADC EAX,<&USER32.ValidateRect> # XOR EAX,EAX # POP EBP # RETN 0x08 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10002c1d : # XOR EDI,EDI # ADC EAX,<&USER32.ValidateRect> # XOR EAX,EAX # POP EBP # RETN 0x08 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10002c1f : # ADC EAX,<&USER32.ValidateRect> # XOR EAX,EAX # POP EBP # RETN 0x08 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10018c22 : # DEC ECX # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10002c24 : # XOR EAX,EAX # POP EBP # RETN 0x08 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10002c26 : # POP EBP # RETN 0x08 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10005cb2 : # DEC EAX # ADD AL,5D # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10005cb3 : # ADD AL,5D # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10010c49 : # POP ECX # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x10014c4a : # ADD DL,BYTE PTR DS:[EAX] # POP EBP # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x10014c4c : # POP EBP # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x10018c50 : # ADD ESP,14 # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10018c53 : # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1001ec56 : # POP ECX # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10014c59 : # ADD DL,BYTE PTR DS:[EAX] # POP EBP # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x10014c5b : # POP EBP # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x1000ec63 : # XOR EAX,EAX # POP EDI # POP ESI # POP EBX # POP EBP # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000ec65 : # POP EDI # POP ESI # POP EBX # POP EBP # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000ec66 : # POP ESI # POP EBX # POP EBP # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000ec67 : # POP EBX # POP EBP # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000ec68 : # POP EBP # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10014c6a : # POP EBP # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x1000cc72 : # MOV EAX,WinCRT.1000CC78 # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000bf3e : # XOR EAX,EAX # POP EDI # POP ESI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10008c80 : # ADC EAX,<&USER32.PostMessageA> # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10008c85 : # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000c76f : # ADD EDI,EDI # PUSH EAX # PUSH EAX # MOV EAX,DWORD PTR DS:[EDI] # POP EBX # POP EDI # MOV DWORD PTR DS:[ESI+28],EAX # POP ESI # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10010cc5 : # MOV EAX,DWORD PTR DS:[EAX+4] # MOV DWORD PTR DS:[ESI+4],EAX # MOV EAX,ESI # POP ESI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10014ca1 : # MOV EAX,ECX # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10006ca6 : # POP EBX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10002771 : # XOR EAX,EAX # POP EDI # POP ESI # POP EBX # POP EBP # RETN 0x10 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10018ca8 : # ADD ESP,18 # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10018cab : # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x100049f2 : # AND EAX,1001F1AC # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10002773 : # POP EDI # POP ESI # POP EBX # POP EBP # RETN 0x10 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10002774 : # POP ESI # POP EBX # POP EBP # RETN 0x10 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10002775 : # POP EBX # POP EBP # RETN 0x10 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1001ecc0 : # POP ECX # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10010cc1 : # MOV ECX,DWORD PTR DS:[EAX] # MOV DWORD PTR DS:[ESI],ECX # MOV EAX,DWORD PTR DS:[EAX+4] # MOV DWORD PTR DS:[ESI+4],EAX # MOV EAX,ESI # POP ESI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10010cc3 : # MOV DWORD PTR DS:[ESI],ECX # MOV EAX,DWORD PTR DS:[EAX+4] # MOV DWORD PTR DS:[ESI+4],EAX # MOV EAX,ESI # POP ESI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10002cc4 : # MOV EAX,WinCRT.10002C63 # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10002776 : # POP EBP # RETN 0x10 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10010cc8 : # MOV DWORD PTR DS:[ESI+4],EAX # MOV EAX,ESI # POP ESI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1000c36c : # ADD AL,0 # MOV EAX,EDI # POP EDI # POP ESI # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10018ccb : # ADD ESP,1C # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10010ccd : # POP ESI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10018cce : # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10002cd2 : # MOV EAX,WinCRT.10002C99 # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10010cce : # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10002ce0 : # MOV EAX,WinCRT.10002CB4 # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000ece2 : # POP EAX # POP EDI # POP ESI # POP EBP # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000ece3 : # POP EDI # POP ESI # POP EBP # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000ece4 : # POP ESI # POP EBP # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000ece5 : # POP EBP # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000cceb : # POP ECX # MOV EAX,ESI # POP ESI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000ccec : # MOV EAX,ESI # POP ESI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000ccee : # POP ESI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000ccef : # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10016cf2 : # DEC ECX # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10018cf6 : # ADD ESP,14 # POP ESI # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10018cf9 : # POP ESI # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10008d0c : # MOV EAX,DWORD PTR DS:[ESI+4] # POP ESI # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10008d0d : # INC ESI # ADD AL,5E # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10008d0e : # ADD AL,5E # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10008d0f : # POP ESI # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10006d1c : # MOV EAX,12340042 # POP EDI # POP ESI # POP EBP # RETN 0x08 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10002d1d : # POP ESI # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10006d21 : # POP EDI # POP ESI # POP EBP # RETN 0x08 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10006d22 : # POP ESI # POP EBP # RETN 0x08 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10006d23 : # POP EBP # RETN 0x08 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10008d2b : # ADC EAX,<&KERNEL32.GetProcAddress> # MOV DWORD PTR DS:[ESI+10],EAX # MOV ECX,DWORD PTR DS:[ESI+10] # MOV EAX,DWORD PTR SS:[EBP+8] # MOV DWORD PTR DS:[EAX],ECX # POP ESI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1001ed2d : # POP ECX # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10018d2f : # ADD EAX,C940C033 # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10008d30 : # MOV DWORD PTR DS:[ESI+10],EAX # MOV ECX,DWORD PTR DS:[ESI+10] # MOV EAX,DWORD PTR SS:[EBP+8] # MOV DWORD PTR DS:[EAX],ECX # POP ESI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10002233 : # POP ESI # POP EBP # RETN 0x08 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10008d36 : # MOV EAX,DWORD PTR SS:[EBP+8] # MOV DWORD PTR DS:[EAX],ECX # POP ESI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10006234 : # POP EDI # POP ESI # POP EBP # RETN 0x0C ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000ed3b : # ADD ESP,0C # XOR EAX,EAX # POP EDI # POP ESI # POP EBP # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10008d3c : # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000ed3e : # XOR EAX,EAX # POP EDI # POP ESI # POP EBP # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10004235 : # PUSH ESP # MOV DWORD PTR DS:[EAX+4C],ECX # MOV DWORD PTR DS:[EAX+50],EDX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000ed40 : # POP EDI # POP ESI # POP EBP # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000ed41 : # POP ESI # POP EBP # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000ed42 : # POP EBP # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1001ed43 : # POP ECX # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10004236 : # MOV DWORD PTR DS:[EAX+4C],ECX # MOV DWORD PTR DS:[EAX+50],EDX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1001ed4d : # ADD DL,BYTE PTR DS:[EAX] # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1000a78d : # XCHG EAX,ESP # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10018d57 : # ADD EAX,D0FF006A # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10007e2e : # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000cd6c : # ADD CL,CL # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10002d70 : # ADD EDI,EDI # PUSH EAX # ADD AL,0C3 # XOR EAX,EAX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10002d72 : # PUSH EAX # ADD AL,0C3 # XOR EAX,EAX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10002d73 : # ADD AL,0C3 # XOR EAX,EAX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10002d75 : # XOR EAX,EAX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1001ed7a : # POP ECX # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1001d796 : # ADD ESI,ESI # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10004d87 : # ADC EAX,<&KERNEL32.InitializeCriticalSection> # MOV EAX,ESI # POP ESI # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10004d8c : # MOV EAX,ESI # POP ESI # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10004d8e : # POP ESI # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000cd8f : # MOV ECX,DWORD PTR SS:[EBP+8] # MOV EDX,DWORD PTR DS:[ECX] # MOV DWORD PTR DS:[EAX],EDX # MOV DWORD PTR DS:[ECX],EAX # POP EBP # RETN 0x0C ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000cd92 : # MOV EDX,DWORD PTR DS:[ECX] # MOV DWORD PTR DS:[EAX],EDX # MOV DWORD PTR DS:[ECX],EAX # POP EBP # RETN 0x0C ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000cd94 : # MOV DWORD PTR DS:[EAX],EDX # MOV DWORD PTR DS:[ECX],EAX # POP EBP # RETN 0x0C ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000cd96 : # MOV DWORD PTR DS:[ECX],EAX # POP EBP # RETN 0x0C ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000cd98 : # POP EBP # RETN 0x0C ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10008d9c : # ADD AL,CH # ADC EDI,DWORD PTR DS:[EAX+EAX] # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10008d9e : # ADC EDI,DWORD PTR DS:[EAX+EAX] # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10010dab : # ADD ESP,0C # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10010dae : # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1000edb3 : # LEA EAX,DWORD PTR DS:[ECX-1] # MOV ECX,DWORD PTR SS:[ESP+4] # SUB EAX,ECX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000edb6 : # MOV ECX,DWORD PTR SS:[ESP+4] # SUB EAX,ECX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000edba : # SUB EAX,ECX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1001c79f : # ADD AL,BYTE PTR DS:[EDX+3A] # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1000edbd : # LEA EAX,DWORD PTR DS:[ECX-2] # MOV ECX,DWORD PTR SS:[ESP+4] # SUB EAX,ECX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000edc0 : # MOV ECX,DWORD PTR SS:[ESP+4] # SUB EAX,ECX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000edc4 : # SUB EAX,ECX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000edc7 : # LEA EAX,DWORD PTR DS:[ECX-3] # MOV ECX,DWORD PTR SS:[ESP+4] # SUB EAX,ECX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000edca : # MOV ECX,DWORD PTR SS:[ESP+4] # SUB EAX,ECX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000edce : # SUB EAX,ECX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000edd1 : # LEA EAX,DWORD PTR DS:[ECX-4] # MOV ECX,DWORD PTR SS:[ESP+4] # SUB EAX,ECX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000edd2 : # INC ECX # CLD # MOV ECX,DWORD PTR SS:[ESP+4] # SUB EAX,ECX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000edd3 : # CLD # MOV ECX,DWORD PTR SS:[ESP+4] # SUB EAX,ECX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000edd4 : # MOV ECX,DWORD PTR SS:[ESP+4] # SUB EAX,ECX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10008dd6 : # MOV ECX,DWORD PTR DS:[ESI+14] # MOV EAX,DWORD PTR SS:[EBP+8] # MOV DWORD PTR DS:[EAX],ECX # POP ESI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000edd8 : # SUB EAX,ECX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10008dd9 : # MOV EAX,DWORD PTR SS:[EBP+8] # MOV DWORD PTR DS:[EAX],ECX # POP ESI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10008ddc : # MOV DWORD PTR DS:[EAX],ECX # POP ESI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10008dde : # POP ESI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10008ddf : # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1001adf4 : # ADD ESP,10 # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1001adf7 : # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10016dfb : # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10002e11 : # MOV EAX,DWORD PTR DS:[EAX+38] # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10018e1d : # POP EDI # POP EBX # RETN 0x10 ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10018e1e : # POP EBX # RETN 0x10 ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1000749e : # MOV DWORD PTR DS:[ESI+50],EAX # MOV EAX,ESI # POP ESI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10016e2f : # XOR EAX,EAX # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x10016e32 : # XOR EAX,EAX # INC EAX # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x10016e34 : # INC EAX # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x1000bf41 : # POP ESI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10012261 : # INC EAX # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x1000ee49 : # ADD ESP,10 # POP EBP # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000ee4c : # POP EBP # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000d155 : # POP ECX # MOV EAX,ESI # POP ESI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10010e89 : # ADD ESP,0C # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10010e8c : # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10004270 : # POP ECX # POP EDI # POP ESI # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000d156 : # MOV EAX,ESI # POP ESI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10008ea5 : # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10010ea6 : # ADD ESP,14 # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10010ea9 : # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1001dffd : # XOR EAX,EAX # POP ECX # MOV DWORD PTR DS:[ESI],EAX # MOV DWORD PTR DS:[ESI+8],EAX # MOV DWORD PTR DS:[ESI+4],EAX # POP ESI # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10002eae : # OR EAX,DWORD PTR DS:[EBX+750D0878] # ADD EAX,5D40C033 # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10002eb2 : # OR EAX,C0330575 # INC EAX # POP EBP # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10002eb4 : # ADD EAX,5D40C033 # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10002eb5 : # XOR EAX,EAX # INC EAX # POP EBP # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10016eb7 : # ADD DL,BYTE PTR DS:[EAX] # XOR EAX,EAX # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10002eb8 : # POP EBP # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10016eb9 : # XOR EAX,EAX # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10002eba : # XOR EAX,EAX # POP EBP # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10002ebc : # POP EBP # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10002ebe : # MOV EAX,WinCRT.1001FA00 # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10005277 : # POP ESI # POP EBX # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100076c5 : # POP ESI # POP EBP # RETN 0x08 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10005279 : # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10008ee1 : # MOV DWORD PTR DS:[ESI+70],EAX # MOV DWORD PTR DS:[ESI+6C],ECX # LEA EAX,DWORD PTR DS:[ESI+58] # POP ESI # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10008ee4 : # MOV DWORD PTR DS:[ESI+6C],ECX # LEA EAX,DWORD PTR DS:[ESI+58] # POP ESI # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10008ee7 : # LEA EAX,DWORD PTR DS:[ESI+58] # POP ESI # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10008ee8 : # INC ESI # POP EAX # POP ESI # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10008ee9 : # POP EAX # POP ESI # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10008eea : # POP ESI # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000a27d : # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000d159 : # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10010eff : # ADD AL,24 # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10002f0c : # XOR EAX,EAX # POP EBP # RETN 0x08 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10002f0e : # POP EBP # RETN 0x08 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10008f1c : # POP ESI # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10018f25 : # POP ECX # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1001af27 : # ADD EAX,20 # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1001eaa9 : # ADD DL,BYTE PTR DS:[EAX] # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1001af2a : # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10008d33 : # MOV ECX,DWORD PTR DS:[ESI+10] # MOV EAX,DWORD PTR SS:[EBP+8] # MOV DWORD PTR DS:[EAX],ECX # POP ESI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1001af36 : # POP ECX # POP ECX # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1001af37 : # POP ECX # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1001af38 : # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10016f3e : # POP DWORD PTR FS:[0] # ADD ESP,18 # POP EDI # POP ESI # POP EBX # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x10016f40 : # ADD EAX,0 # ADD ESP,18 # POP EDI # POP ESI # POP EBX # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x10004f41 : # MOV EAX,ESI # POP ESI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10004f43 : # POP ESI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10004f44 : # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10016f45 : # ADD ESP,18 # POP EDI # POP ESI # POP EBX # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x10016f48 : # POP EDI # POP ESI # POP EBX # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x10016f49 : # POP ESI # POP EBX # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x10016f4a : # POP EBX # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x10008d39 : # MOV DWORD PTR DS:[EAX],ECX # POP ESI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000dd3a : # POP EDI # POP ESI # POP EBX # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000cf63 : # POP EBP # RETN 0x0C ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100067e6 : # POP ESI # POP EDI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000cf67 : # MOV EAX,WinCRT.10027A94 # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000cf6a : # ADD DL,BYTE PTR DS:[EAX] # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100067e7 : # POP EDI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000dd3d : # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10010f72 : # ADD ESP,10 # POP EBP # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x1000cf73 : # TEST AL,0D # ADD DL,BYTE PTR DS:[EAX] # MOV DWORD PTR DS:[EAX+4],ECX # MOV DWORD PTR DS:[EAX+10],ECX # MOV DWORD PTR DS:[EAX+C],ECX # MOV DWORD PTR DS:[EAX+8],ECX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000cf75 : # ADD DL,BYTE PTR DS:[EAX] # MOV DWORD PTR DS:[EAX+4],ECX # MOV DWORD PTR DS:[EAX+10],ECX # MOV DWORD PTR DS:[EAX+C],ECX # MOV DWORD PTR DS:[EAX+8],ECX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000cf77 : # MOV DWORD PTR DS:[EAX+4],ECX # MOV DWORD PTR DS:[EAX+10],ECX # MOV DWORD PTR DS:[EAX+C],ECX # MOV DWORD PTR DS:[EAX+8],ECX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000cf7a : # MOV DWORD PTR DS:[EAX+10],ECX # MOV DWORD PTR DS:[EAX+C],ECX # MOV DWORD PTR DS:[EAX+8],ECX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1001ed3f : # MOV EAX,DWORD PTR DS:[59FFFEF2] # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1000cf7d : # MOV DWORD PTR DS:[EAX+C],ECX # MOV DWORD PTR DS:[EAX+8],ECX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10016f7e : # ADD ESP,0C # POP EBP # MOV EAX,DWORD PTR SS:[ESP+8] # MOV EDX,DWORD PTR SS:[ESP+10] # MOV DWORD PTR DS:[EDX],EAX # MOV EAX,3 # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x10002f7f : # XOR EAX,EAX # POP ESI # POP EDI # POP EBP # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000cf80 : # MOV DWORD PTR DS:[EAX+8],ECX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10016f81 : # POP EBP # MOV EAX,DWORD PTR SS:[ESP+8] # MOV EDX,DWORD PTR SS:[ESP+10] # MOV DWORD PTR DS:[EDX],EAX # MOV EAX,3 # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10016f82 : # MOV EAX,DWORD PTR SS:[ESP+8] # MOV EDX,DWORD PTR SS:[ESP+10] # MOV DWORD PTR DS:[EDX],EAX # MOV EAX,3 # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10002f83 : # POP EBP # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10016f86 : # MOV EDX,DWORD PTR SS:[ESP+10] # MOV DWORD PTR DS:[EDX],EAX # MOV EAX,3 # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10016f8a : # MOV DWORD PTR DS:[EDX],EAX # MOV EAX,3 # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10016f8b : # ADD BH,BYTE PTR DS:[EAX+3] # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10016f8c : # MOV EAX,3 # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10010f8d : # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1000e8cf : # PUSH ECX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000cf92 : # POP ECX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000ef98 : # ADD ESP,14 # OR EAX,FFFFFFFF # POP ESI # POP EBX # POP EBP # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10002f9a : # ADD EDI,EDI # PUSH EAX # POP EAX # POP EBP # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000ef9b : # OR EAX,FFFFFFFF # POP ESI # POP EBX # POP EBP # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10002f9c : # PUSH EAX # POP EAX # POP EBP # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10002f9d : # POP EAX # POP EBP # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000ef9e : # POP ESI # POP EBX # POP EBP # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000ef9f : # POP EBX # POP EBP # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000efa0 : # POP EBP # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10016fa7 : # ADD ESP,0C # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10016faa : # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10008fb6 : # MOV EAX,EDI # POP EDI # POP ESI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10008fb8 : # POP EDI # POP ESI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10008fb9 : # POP ESI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000efba : # ADD ESP,14 # POP EBP # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000efbd : # POP EBP # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10016fc0 : # POP EBX # POP EDI # POP ESI # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10016fc1 : # POP EDI # POP ESI # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10016fc2 : # POP ESI # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10016fc3 : # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10012fd4 : # MOV EAX,ESI # POP EDI # POP ESI # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10012fd6 : # POP EDI # POP ESI # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10012fd7 : # POP ESI # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10008fdb : # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1001afdf : # DEC ECX # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10016ff3 : # POP EDI # POP ESI # POP EBX # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10016ff4 : # POP ESI # POP EBX # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10016ff5 : # POP EBX # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10016ff6 : # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1000dd54 : # XOR EAX,EAX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10010ffe : # OR EAX,DWORD PTR DS:[EBX+7502FC7D] # ADD EAX,C940C033 # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10001000 : # MOV EAX,WinCRT.1001F450 # RETN ** [WinCRT.dll] ** | null,unicodereverse,ascii {PAGE_EXECUTE_READ}
0x10011004 : # ADD EAX,C940C033 # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x10017008 : # ADD ESP,0C # POP EBP # RETN 0x08 ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x1001700b : # POP EBP # RETN 0x08 ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x1000300c : # MOV DWORD PTR DS:[EBX+54],EAX # XOR EAX,EAX # INC EAX # POP EDI # POP EBX # POP ESI # POP EBP # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000300d : # INC EBX # PUSH ESP # XOR EAX,EAX # INC EAX # POP EDI # POP EBX # POP ESI # POP EBP # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000300e : # PUSH ESP # XOR EAX,EAX # INC EAX # POP EDI # POP EBX # POP ESI # POP EBP # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000300f : # XOR EAX,EAX # INC EAX # POP EDI # POP EBX # POP ESI # POP EBP # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10003011 : # INC EAX # POP EDI # POP EBX # POP ESI # POP EBP # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10003012 : # POP EDI # POP EBX # POP ESI # POP EBP # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10003013 : # POP EBX # POP ESI # POP EBP # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10003014 : # POP ESI # POP EBP # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10003015 : # POP EBP # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10009016 : # POP ESI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10009017 : # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10001020 : # MOV EAX,ESI # POP ESI # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10001022 : # POP ESI # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10017023 : # XOR EAX,EAX # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x10017026 : # MOV EAX,404 # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x10017028 : # ADD AL,0 # ADD BL,AL # MOV EAX,412 # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x1001702a : # ADD BL,AL # MOV EAX,412 # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x1001702c : # MOV EAX,412 # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x1001702e : # ADD AL,0 # ADD BL,AL # MOV EAX,804 # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x10017030 : # ADD BL,AL # MOV EAX,804 # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x10003031 : # MOV EAX,ESI # POP ESI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10017032 : # MOV EAX,804 # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x10003033 : # POP ESI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10003034 : # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10005035 : # POP ESI # POP EBX # POP EBP # RETN 0x08 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10017036 : # ADD BL,AL # MOV EAX,411 # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x10005037 : # POP EBP # RETN 0x08 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10017038 : # MOV EAX,411 # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x100012b5 : # INC EAX # POP EBP # RETN 0x14 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000780b : # POP ESI # POP EBP # RETN 0x14 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100012b6 : # POP EBP # RETN 0x14 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10009046 : # MOV EAX,EDI # POP EDI # POP ESI # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10009048 : # POP EDI # POP ESI # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10009049 : # POP ESI # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000e80e : # LEA EAX,DWORD PTR SS:[EBP-C] # MOV DWORD PTR FS:[0],EAX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000e811 : # MOV DWORD PTR FS:[0],EAX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000307b : # POP ECX # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000307c : # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10011815 : # POP ESI # POP EDI # RETN 0x10 ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x10011816 : # POP EDI # RETN 0x10 ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x1001b087 : # DEC ECX # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10016d6c : # POP EBP # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x1000308d : # POP ECX # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000308e : # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000908f : # XOR EAX,EAX # POP ESI # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10009091 : # POP ESI # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10009093 : # XOR EAX,EAX # INC EAX # POP ESI # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10009095 : # INC EAX # POP ESI # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10009096 : # POP ESI # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000d099 : # MOV DWORD PTR DS:[ESI+C],EAX # MOV DWORD PTR DS:[ESI+4],EBX # POP EDI # POP ESI # POP EBX # POP EBP # RETN 0x08 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000f09a : # AND EDI,DWORD PTR DS:[EBX] # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000d09c : # MOV DWORD PTR DS:[ESI+4],EBX # POP EDI # POP ESI # POP EBX # POP EBP # RETN 0x08 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000d09d : # POP ESI # ADD AL,5F # POP ESI # POP EBX # POP EBP # RETN 0x08 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000d09e : # ADD AL,5F # POP ESI # POP EBX # POP EBP # RETN 0x08 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1001709f : # POP EDI # POP ESI # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x100170a0 : # POP ESI # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1000d0a1 : # POP EBX # POP EBP # RETN 0x08 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000d0a2 : # POP EBP # RETN 0x08 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100010a5 : # ADC EAX,<&USER32.CallNextHookEx> # POP EDI # POP ESI # POP EBX # RETN 0x0C ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100010aa : # POP EDI # POP ESI # POP EBX # RETN 0x0C ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100010ab : # POP ESI # POP EBX # RETN 0x0C ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100010ac : # POP EBX # RETN 0x0C ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100010ca : # POP ECX # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000f0df : # ADD ESP,14 # POP EBP # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000f0e2 : # POP EBP # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100050e3 : # POP ESI # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100030e8 : # ADC EAX,<&USER32.DispatchMessageA> # XOR EAX,EAX # INC EAX # POP EDI # POP ESI # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100190eb : # ADD ESP,14 # OR EAX,FFFFFFFF # POP ESI # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x100030ed : # XOR EAX,EAX # INC EAX # POP EDI # POP ESI # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100190ee : # OR EAX,FFFFFFFF # POP ESI # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x100030ef : # INC EAX # POP EDI # POP ESI # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100030f0 : # POP EDI # POP ESI # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100030f1 : # POP ESI # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100190f2 : # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x100010f5 : # ADD ESP,4 # MOV EAX,ESI # POP ESI # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100010f8 : # MOV EAX,ESI # POP ESI # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100050fa : # POP EBP # RETN 0x08 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000f100 : # ADD ESP,18 # POP EBP # RETN ** [WinCRT.dll] ** | null,unicodereverse {PAGE_EXECUTE_READ}
0x1000f103 : # POP EBP # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10011104 : # POP ECX # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x100192d7 : # MOV DWORD PTR FS:[0],ECX # ADD ESP,18 # POP EDI # POP ESI # POP EBX # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1000782f : # POP EDI # POP ESI # POP EBP # RETN 0x14 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000d11f : # POP EDI # POP ESI # POP EBX # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000d120 : # POP ESI # POP EBX # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000d121 : # POP EBX # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000d122 : # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10001126 : # ADD DL,BYTE PTR DS:[EAX] # MOV EAX,1 # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10007831 : # POP EBP # RETN 0x14 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000f128 : # POP EAX # POP EBP # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000f129 : # POP EBP # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000f12b : # MOV EAX,DWORD PTR DS:[ECX*8+10027B94] # POP EBP # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000112c : # ADD DL,AL # ADD AL,0 # XOR EAX,EAX # INC EAX # RETN 0x0C ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000112e : # ADD AL,0 # XOR EAX,EAX # INC EAX # RETN 0x0C ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1001312f : # ADD DH,DH # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x10001130 : # XOR EAX,EAX # INC EAX # RETN 0x0C ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000d9f2 : # POP ESI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10001132 : # INC EAX # RETN 0x0C ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000d139 : # XOR EAX,EAX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1001913e : # MOV EAX,EDI # POP EDI # POP ESI # POP EBX # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1001b13f : # ADD ESP,10 # XOR EAX,EAX # POP EDI # POP ESI # POP EBX # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1000f140 : # AND EAX,ECX # ADD EAX,8 # POP EBP # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10009eab : # POP EBP # RETN 0x10 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000f142 : # ADD EAX,8 # POP EBP # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10019143 : # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1001b144 : # POP EDI # POP ESI # POP EBX # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1000f145 : # POP EBP # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1001b146 : # POP EBX # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1001b147 : # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1000314b : # SUB AL,0FF # ADC EAX,<&USER32.CallNextHookEx> # POP ESI # POP EBP # RETN 0x0C ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000314d : # ADC EAX,<&USER32.CallNextHookEx> # POP ESI # POP EBP # RETN 0x0C ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000f14f : # PUSH ES # MOV EAX,WinCRT.10027CF8 # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000f150 : # MOV EAX,WinCRT.10027CF8 # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10003152 : # POP ESI # POP EBP # RETN 0x0C ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10003153 : # POP EBP # RETN 0x0C ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10005154 : # POP EDI # POP ESI # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000cd8e : # POP ECX # MOV ECX,DWORD PTR SS:[EBP+8] # MOV EDX,DWORD PTR DS:[ECX] # MOV DWORD PTR DS:[EAX],EDX # MOV DWORD PTR DS:[ECX],EAX # POP EBP # RETN 0x0C ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000f156 : # ADD EAX,8 # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000d158 : # POP ESI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10008d3b : # POP ESI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1001115f : # ADD ESP,0C # POP EBP # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x10011162 : # POP EBP # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x1000f163 : # MOV EAX,WinCRT.10027CFC # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000f166 : # ADD DL,BYTE PTR DS:[EAX] # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000f169 : # ADD EAX,0C # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000d16e : # MOV ECX,DWORD PTR DS:[ECX+4] # LEA EAX,DWORD PTR DS:[ECX+EAX*4] # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000d16f : # DEC ECX # ADD AL,8D # ADD AL,81 # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10005170 : # POP ECX # MOV EAX,ESI # POP ESI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10005171 : # MOV EAX,ESI # POP ESI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000d172 : # ADD AL,81 # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10005173 : # POP ESI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10005174 : # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000f18b : # MOV DWORD PTR DS:[EAX],ESI # POP ESI # POP EBP # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000f18d : # POP ESI # POP EBP # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000f18e : # POP EBP # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000d18f : # MOV ECX,DWORD PTR DS:[ECX+4] # MOV EAX,DWORD PTR DS:[ECX+EAX*4] # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000d190 : # DEC ECX # ADD AL,8B # ADD AL,81 # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000d191 : # ADD AL,8B # ADD AL,81 # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000d192 : # MOV EAX,DWORD PTR DS:[ECX+EAX*4] # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000d193 : # ADD AL,81 # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000d195 : # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10019198 : # MOV DWORD PTR DS:[ESI+4],EAX # POP EDI # MOV EAX,ESI # POP ESI # POP EBX # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10019199 : # INC ESI # ADD AL,5F # MOV EAX,ESI # POP ESI # POP EBX # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1001919a : # ADD AL,5F # MOV EAX,ESI # POP ESI # POP EBX # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1001919b : # POP EDI # MOV EAX,ESI # POP ESI # POP EBX # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1001919c : # MOV EAX,ESI # POP ESI # POP EBX # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1001919e : # POP ESI # POP EBX # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1001919f : # POP EBX # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x100111a0 : # INC EBP # CLC # LEA EAX,DWORD PTR SS:[EBP-10] # MOV DWORD PTR FS:[0],EAX # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x100111a1 : # CLC # LEA EAX,DWORD PTR SS:[EBP-10] # MOV DWORD PTR FS:[0],EAX # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x100111a2 : # LEA EAX,DWORD PTR SS:[EBP-10] # MOV DWORD PTR FS:[0],EAX # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x100111a5 : # MOV DWORD PTR FS:[0],EAX # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10002847 : # POP EBP # RETN 0x08 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100191b8 : # POP ECX # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x100051b9 : # ADD BH,BH # ADC EAX,<&KERNEL32.InitializeCriticalSection> # MOV EAX,DWORD PTR DS:[10029040] # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100051bb : # ADC EAX,<&KERNEL32.InitializeCriticalSection> # MOV EAX,DWORD PTR DS:[10029040] # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000d1bd : # MOV DWORD PTR DS:[EAX+4],ECX # MOV DWORD PTR DS:[EAX+10],ECX # MOV DWORD PTR DS:[EAX+C],ECX # MOV DWORD PTR DS:[EAX+8],ECX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100036ef : # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100051c0 : # MOV EAX,DWORD PTR DS:[10029040] # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100051c1 : # INC EAX # NOP # ADD DL,BYTE PTR DS:[EAX] # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100051c2 : # NOP # ADD DL,BYTE PTR DS:[EAX] # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100051c3 : # ADD DL,BYTE PTR DS:[EAX] # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100191c4 : # ADD DL,BYTE PTR DS:[EAX] # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1000d1c6 : # MOV DWORD PTR DS:[EAX+8],ECX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10009da3 : # POP ESI # POP EBP # RETN 0x18 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100191e0 : # POP ECX # MOV EAX,ESI # POP ESI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x100191e1 : # MOV EAX,ESI # POP ESI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x100191e3 : # POP ESI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x100191e4 : # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x100182fd : # XOR EAX,EAX # INC EAX # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x100191f6 : # XOR EAX,EAX # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x100191f8 : # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x100182ff : # INC EAX # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1000f1ff : # MOV EAX,DWORD PTR SS:[ESP+8] # POP EDI # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000f203 : # POP EDI # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000f205 : # MOV EAX,DWORD PTR SS:[ESP+4] # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10005207 : # POP EDI # POP ESI # POP EBX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10005208 : # POP ESI # POP EBX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10005209 : # POP EBX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000120b : # XOR EAX,EAX # INC EAX # POP EBP # RETN 0x0C ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000120d : # INC EAX # POP EBP # RETN 0x0C ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000120e : # POP EBP # RETN 0x0C ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1001921a : # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1001df0a : # POP ESI # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1000122b : # MOV ECX,DWORD PTR SS:[EBP+8] # MOV DWORD PTR DS:[EAX+8],ECX # XOR EAX,EAX # INC EAX # POP EBP # RETN 0x0C ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000122e : # MOV DWORD PTR DS:[EAX+8],ECX # XOR EAX,EAX # INC EAX # POP EBP # RETN 0x0C ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10001231 : # XOR EAX,EAX # INC EAX # POP EBP # RETN 0x0C ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10017232 : # DEC ECX # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x10001233 : # INC EAX # POP EBP # RETN 0x0C ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10001234 : # POP EBP # RETN 0x0C ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000923c : # ADD EDI,EDI # PUSH EAX # POP EAX # MOV EDI,EAX # MOV EAX,EDI # POP EDI # POP ESI # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000923e : # PUSH EAX # POP EAX # MOV EDI,EAX # MOV EAX,EDI # POP EDI # POP ESI # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000923f : # POP EAX # MOV EDI,EAX # MOV EAX,EDI # POP EDI # POP ESI # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10009240 : # MOV EDI,EAX # MOV EAX,EDI # POP EDI # POP ESI # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10009241 : # CLC # MOV EAX,EDI # POP EDI # POP ESI # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10009242 : # MOV EAX,EDI # POP EDI # POP ESI # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10009244 : # POP EDI # POP ESI # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10009245 : # POP ESI # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10007db7 : # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10019142 : # POP EBX # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1001924d : # ADD ESP,8 # POP EBP # MOV EAX,DWORD PTR SS:[ESP+8] # MOV EDX,DWORD PTR SS:[ESP+10] # MOV DWORD PTR DS:[EDX],EAX # MOV EAX,3 # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10019250 : # POP EBP # MOV EAX,DWORD PTR SS:[ESP+8] # MOV EDX,DWORD PTR SS:[ESP+10] # MOV DWORD PTR DS:[EDX],EAX # MOV EAX,3 # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10019251 : # MOV EAX,DWORD PTR SS:[ESP+8] # MOV EDX,DWORD PTR SS:[ESP+10] # MOV DWORD PTR DS:[EDX],EAX # MOV EAX,3 # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10019255 : # MOV EDX,DWORD PTR SS:[ESP+10] # MOV DWORD PTR DS:[EDX],EAX # MOV EAX,3 # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10001257 : # OR EAX,10027084 # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10019259 : # MOV DWORD PTR DS:[EDX],EAX # MOV EAX,3 # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1001925a : # ADD BH,BYTE PTR DS:[EAX+3] # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1001925b : # MOV EAX,3 # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1000125c : # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10005276 : # POP EDI # POP ESI # POP EBX # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000f277 : # XOR EAX,EAX # POP EDI # POP ESI # POP EBX # POP EBP # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10005278 : # POP EBX # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000f279 : # POP EDI # POP ESI # POP EBX # POP EBP # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000f27a : # POP ESI # POP EBX # POP EBP # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000f27b : # POP EBX # POP EBP # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000f27c : # POP EBP # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1001ddfc : # DEC ECX # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1000128a : # MOV EAX,ESI # POP ESI # POP EBP # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000128c : # POP ESI # POP EBP # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000128d : # POP EBP # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1001b293 : # DEC ECX # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1000129a : # MOV EAX,WinCRT.1001F574 # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000529e : # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10002f81 : # POP ESI # POP EDI # POP EBP # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100032af : # ADC EAX,<&USER32.SetWindowsHookExA> # MOV DWORD PTR DS:[ESI+2C],EAX # POP ESI # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100012b1 : # MOV DWORD PTR DS:[EAX],ECX # XOR EAX,EAX # INC EAX # POP EBP # RETN 0x14 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100012b3 : # XOR EAX,EAX # INC EAX # POP EBP # RETN 0x14 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100032b4 : # MOV DWORD PTR DS:[ESI+2C],EAX # POP ESI # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100032b5 : # INC ESI # SUB AL,5E # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100032b6 : # SUB AL,5E # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100032b7 : # POP ESI # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100024da : # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10005875 : # MOV ESP,78E8CF8B # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000f2cc : # XOR EAX,EAX # POP EDI # POP ESI # POP EBX # POP EBP # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000f2ce : # POP EDI # POP ESI # POP EBX # POP EBP # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000f2cf : # POP ESI # POP EBX # POP EBP # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000f2d0 : # POP EBX # POP EBP # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000f2d1 : # POP EBP # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100192d3 : # MOV ECX,DWORD PTR SS:[ESP+4] # MOV DWORD PTR FS:[0],ECX # ADD ESP,18 # POP EDI # POP ESI # POP EBX # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10008dce : # ADC EAX,<&KERNEL32.GetProcAddress> # MOV DWORD PTR DS:[ESI+14],EAX # MOV ECX,DWORD PTR DS:[ESI+14] # MOV EAX,DWORD PTR SS:[EBP+8] # MOV DWORD PTR DS:[EAX],ECX # POP ESI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100172d7 : # POP ECX # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x100192d9 : # OR EAX,0 # ADD ESP,18 # POP EDI # POP ESI # POP EBX # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x100192de : # ADD ESP,18 # POP EDI # POP ESI # POP EBX # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x100192e1 : # POP EDI # POP ESI # POP EBX # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x100192e2 : # POP ESI # POP EBX # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x100192e3 : # POP EBX # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10008dd3 : # MOV DWORD PTR DS:[ESI+14],EAX # MOV ECX,DWORD PTR DS:[ESI+14] # MOV EAX,DWORD PTR SS:[EBP+8] # MOV DWORD PTR DS:[EAX],ECX # POP ESI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000d2f5 : # MOV DWORD PTR DS:[ESI+4],EDI # MOV DWORD PTR DS:[ESI+C],EAX # MOV DWORD PTR DS:[ESI+8],EBX # POP EDI # POP ESI # POP EBX # POP EBP # RETN 0x08 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000d2f8 : # MOV DWORD PTR DS:[ESI+C],EAX # MOV DWORD PTR DS:[ESI+8],EBX # POP EDI # POP ESI # POP EBX # POP EBP # RETN 0x08 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000d2fb : # MOV DWORD PTR DS:[ESI+8],EBX # POP EDI # POP ESI # POP EBX # POP EBP # RETN 0x08 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000d2fe : # POP EDI # POP ESI # POP EBX # POP EBP # RETN 0x08 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000d2ff : # POP ESI # POP EBX # POP EBP # RETN 0x08 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000d300 : # POP EBX # POP EBP # RETN 0x08 ** [WinCRT.dll] ** | null,unicodereverse {PAGE_EXECUTE_READ}
0x1000d301 : # POP EBP # RETN 0x08 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10019302 : # MOV EAX,1 # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x100191a0 : # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10009dd6 : # POP ESI # POP EBP # RETN 0x18 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000930b : # POP EDI # POP ESI # POP EBP # RETN 0x0C ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000930c : # POP ESI # POP EBP # RETN 0x0C ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000930d : # POP EBP # RETN 0x0C ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10019326 : # PUSH ECX # PUSH EAX # POP EAX # POP ECX # POP EBP # POP ECX # POP EBX # RETN 0x04 ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10019327 : # PUSH EAX # POP EAX # POP ECX # POP EBP # POP ECX # POP EBX # RETN 0x04 ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10019328 : # POP EAX # POP ECX # POP EBP # POP ECX # POP EBX # RETN 0x04 ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10019329 : # POP ECX # POP EBP # POP ECX # POP EBX # RETN 0x04 ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1001932a : # POP EBP # POP ECX # POP EBX # RETN 0x04 ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1001932b : # POP ECX # POP EBX # RETN 0x04 ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1001932c : # POP EBX # RETN 0x04 ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10011337 : # POP ECX # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x10019342 : # POP ECX # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1000934a : # XOR EAX,EAX # POP EDI # POP ESI # POP EBP # RETN 0x08 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000934c : # POP EDI # POP ESI # POP EBP # RETN 0x08 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000934d : # POP ESI # POP EBP # RETN 0x08 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000934e : # POP EBP # RETN 0x08 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000a33d : # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1001b894 : # POP ECX # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1001b37a : # POP ESI # POP EDI # RETN 0x10 ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1001b37b : # POP EDI # RETN 0x10 ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10009895 : # POP ESI # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10013896 : # ADD DL,BYTE PTR DS:[EAX] # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1000938d : # POP ESI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000938e : # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000d398 : # POP EDI # POP ESI # POP EBX # POP EBP # RETN 0x0C ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000d399 : # POP ESI # POP EBX # POP EBP # RETN 0x0C ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1001b39a : # XOR EAX,EAX # XOR EDX,EDX # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1000d39b : # POP EBP # RETN 0x0C ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1001b39c : # XOR EDX,EDX # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x100013a6 : # POP ESI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100013a7 : # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100193ae : # ADD AL,41 # AND EAX,4 # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x100193af : # INC ECX # AND EAX,4 # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x100193b0 : # AND EAX,4 # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x100193b2 : # ADD AL,5D # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x100193b3 : # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x100033b6 : # POP EBX # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100033b7 : # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000d3b8 : # POP ECX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100033b9 : # ADD AL,0 # XOR EAX,EAX # INC EAX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100033bb : # XOR EAX,EAX # INC EAX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100033bd : # INC EAX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100193bf : # POP ECX # POP ECX # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x100193c0 : # POP ECX # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x100193c1 : # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x100033c5 : # XOR EAX,EAX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100013ca : # POP ESI # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100053cd : # ADD AL,8B # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000d3cf : # MOV ESP,59FFFF3E # MOV EAX,ESI # POP ESI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000d3d3 : # POP ECX # MOV EAX,ESI # POP ESI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000d3d4 : # MOV EAX,ESI # POP ESI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100013d5 : # INC EAX # POP ESI # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100013d6 : # POP ESI # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000d3d7 : # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1001ddfa : # OR EDI,EDI # DEC ECX # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1000c8a5 : # POP ESI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100193e0 : # POP ECX # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x100193e1 : # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10007dfc : # POP ESI # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100033f4 : # XOR EAX,EAX # POP EBP # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100033f6 : # POP EBP # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100013f9 : # INC EAX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1001b404 : # POP ECX # POP ECX # XOR EAX,EAX # POP ESI # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1001b405 : # POP ECX # XOR EAX,EAX # POP ESI # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1001b406 : # XOR EAX,EAX # POP ESI # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1001b408 : # POP ESI # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1001b409 : # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1000941b : # NEG EAX # POP EDI # POP ESI # POP EBX # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000941d : # POP EDI # POP ESI # POP EBX # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000941e : # POP ESI # POP EBX # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000941f : # POP EBX # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1001835d : # ADD ESP,10 # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1000b432 : # POP ESI # RETN 0x08 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10018360 : # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10003455 : # ADD ESP,10 # MOV EAX,EDI # POP EDI # POP ESI # POP EBP # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10003458 : # MOV EAX,EDI # POP EDI # POP ESI # POP EBP # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000345a : # POP EDI # POP ESI # POP EBP # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000345b : # POP ESI # POP EBP # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000345c : # POP EBP # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000d45d : # POP ESI # POP EBX # POP EBP # RETN 0x0C ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000d45e : # POP EBX # POP EBP # RETN 0x0C ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000d45f : # POP EBP # RETN 0x0C ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1001b8bb : # POP ECX # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10019468 : # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10009482 : # POP ESI # POP EBP # RETN 0x0C ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10009483 : # POP EBP # RETN 0x0C ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10003484 : # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000b487 : # MOV EAX,WinCRT.1000B48D # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1001b489 : # OR EAX,FFFFFFFF # POP EDI # POP ESI # POP EBX # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1001b48c : # POP EDI # POP ESI # POP EBX # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1001b48d : # POP ESI # POP EBX # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1001b48e : # POP EBX # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1001b48f : # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10007495 : # MOV DWORD PTR DS:[ESI+44],EAX # MOV DWORD PTR DS:[ESI+48],EAX # MOV DWORD PTR DS:[ESI+4C],EAX # MOV DWORD PTR DS:[ESI+50],EAX # MOV EAX,ESI # POP ESI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10007496 : # INC ESI # INC ESP # MOV DWORD PTR DS:[ESI+48],EAX # MOV DWORD PTR DS:[ESI+4C],EAX # MOV DWORD PTR DS:[ESI+50],EAX # MOV EAX,ESI # POP ESI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10007497 : # INC ESP # MOV DWORD PTR DS:[ESI+48],EAX # MOV DWORD PTR DS:[ESI+4C],EAX # MOV DWORD PTR DS:[ESI+50],EAX # MOV EAX,ESI # POP ESI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10007498 : # MOV DWORD PTR DS:[ESI+48],EAX # MOV DWORD PTR DS:[ESI+4C],EAX # MOV DWORD PTR DS:[ESI+50],EAX # MOV EAX,ESI # POP ESI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100078c4 : # PUSH ECX # INC ESP # POP EDI # POP ESI # POP EBP # RETN 0x14 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000749a : # DEC EAX # MOV DWORD PTR DS:[ESI+4C],EAX # MOV DWORD PTR DS:[ESI+50],EAX # MOV EAX,ESI # POP ESI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000749b : # MOV DWORD PTR DS:[ESI+4C],EAX # MOV DWORD PTR DS:[ESI+50],EAX # MOV EAX,ESI # POP ESI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000749c : # INC ESI # DEC ESP # MOV DWORD PTR DS:[ESI+50],EAX # MOV EAX,ESI # POP ESI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000749d : # DEC ESP # MOV DWORD PTR DS:[ESI+50],EAX # MOV EAX,ESI # POP ESI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000349e : # ADD EAX,10 # MOV DWORD PTR DS:[ESI],EAX # POP ECX # MOV EAX,ESI # POP ESI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100078c5 : # INC ESP # POP EDI # POP ESI # POP EBP # RETN 0x14 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100074a0 : # PUSH EAX # MOV EAX,ESI # POP ESI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100034a1 : # MOV DWORD PTR DS:[ESI],EAX # POP ECX # MOV EAX,ESI # POP ESI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100034a2 : # PUSH ES # POP ECX # MOV EAX,ESI # POP ESI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100034a3 : # POP ECX # MOV EAX,ESI # POP ESI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100034a4 : # MOV EAX,ESI # POP ESI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100078c6 : # POP EDI # POP ESI # POP EBP # RETN 0x14 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100034a6 : # POP ESI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100034a7 : # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100078c7 : # POP ESI # POP EBP # RETN 0x14 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1001b4b1 : # OR EAX,FFFFFFFF # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x100054b2 : # POP ECX # MOV EAX,ESI # POP ESI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100054b3 : # MOV EAX,ESI # POP ESI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1001b4b4 : # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x100054b5 : # POP ESI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100074b6 : # ADD BL,AL # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10001b54 : # POP ESI # POP EBP # RETN 0x08 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100034bb : # MOV EAX,ESI # POP ESI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100034bd : # POP ESI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100034be : # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1001b379 : # POP EBP # POP ESI # POP EDI # RETN 0x10 ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x100068cf : # MOV EAX,ESI # POP ESI # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100108d1 : # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x100094ed : # POP ESI # POP EBP # RETN 0x0C ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100094ee : # POP EBP # RETN 0x0C ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100034f5 : # MOV EAX,ESI # POP ESI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100034f7 : # POP ESI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100034f8 : # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100014fe : # XOR EAX,EAX # INC EAX # POP ESI # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10001500 : # INC EAX # POP ESI # RETN ** [WinCRT.dll] ** | null,unicodereverse,ascii {PAGE_EXECUTE_READ}
0x10001501 : # POP ESI # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1001b503 : # MOV EAX,DWORD PTR DS:[EAX] # POP ESI # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1001b505 : # POP ESI # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1001b506 : # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10007509 : # ADC EAX,<&USER32.CallWindowProcA> # POP ESI # POP EBP # RETN 0x0C ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000750a : # MOV EAX,5E1001F2 # POP EBP # RETN 0x0C ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000750e : # POP ESI # POP EBP # RETN 0x0C ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000750f : # POP EBP # RETN 0x0C ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10007513 : # LEA EAX,DWORD PTR DS:[ECX+40] # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10007514 : # INC ECX # INC EAX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10007515 : # INC EAX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000c384 : # ADC EAX,<&USER32.DestroyMenu> # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10004385 : # MOV EAX,ESI # POP ESI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100138db : # POP ESI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10012386 : # POP ECX # POP EBX # POP EDI # POP ESI # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1001d527 : # DEC ECX # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x100138dc : # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10004387 : # POP ESI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000a388 : # POP ESI # RETN 0x08 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10007533 : # POP ESI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10007534 : # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10017537 : # DEC ECX # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x10001538 : # POP ESI # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10003540 : # POP EDI # POP ESI # POP EBX # POP EBP # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10003541 : # POP ESI # POP EBX # POP EBP # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10003542 : # POP EBX # POP EBP # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10003543 : # POP EBP # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1001954b : # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10015552 : # POP ESI # POP EBX # POP EBP # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x10015553 : # POP EBX # POP EBP # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x10015554 : # POP EBP # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x1000955a : # ADD DL,BYTE PTR DS:[EAX] # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000955d : # XOR EAX,EAX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10011560 : # XOR EAX,EAX # POP EDI # POP ESI # POP EBX # POP EBP # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x10011562 : # POP EDI # POP ESI # POP EBX # POP EBP # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x10011563 : # POP ESI # POP EBX # POP EBP # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x10011564 : # POP EBX # POP EBP # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x10011565 : # POP EBP # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x1000b56f : # MOV EAX,WinCRT.1000B4C8 # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1001d576 : # ADD AL,0F6 # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10009577 : # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1001de41 : # XOR EAX,EAX # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10001596 : # MOV ESI,DWORD PTR DS:[EAX+8] # MOV EAX,ESI # POP ESI # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10001599 : # MOV EAX,ESI # POP ESI # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000159b : # POP ESI # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000d39a : # POP EBX # POP EBP # RETN 0x0C ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100078f0 : # PUSH ECX # DEC ESP # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1001b5a6 : # POP ECX # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x100055b0 : # POP EBX # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100055b1 : # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100075ba : # ADC EAX,<&KERNEL32.FreeLibrary> # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100055ca : # POP ES # MOV EAX,80070057 # POP EBP # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100055cb : # MOV EAX,80070057 # POP EBP # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1001b5cd : # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x100055d0 : # POP EBP # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100055d2 : # ADD EAX,ECX # MOV ECX,DWORD PTR SS:[EBP+8] # MOV DWORD PTR DS:[ECX],EAX # XOR EAX,EAX # POP EBP # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100063a3 : # MOV DWORD PTR DS:[EAX+C],ECX # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100055d4 : # MOV ECX,DWORD PTR SS:[EBP+8] # MOV DWORD PTR DS:[ECX],EAX # XOR EAX,EAX # POP EBP # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100055d7 : # MOV DWORD PTR DS:[ECX],EAX # XOR EAX,EAX # POP EBP # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100055d9 : # XOR EAX,EAX # POP EBP # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100055db : # POP EBP # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100075dc : # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1001d5ef : # OR EAX,1000 # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x100075f9 : # ADD ESI,DWORD PTR SS:[EBP+EAX-7D] # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10003609 : # MOV EAX,EDI # POP EDI # POP ESI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000360b : # POP EDI # POP ESI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000360c : # POP ESI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1001d60d : # ADD CL,BYTE PTR DS:[EBX] # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1000761a : # MOV EAX,DWORD PTR SS:[EBP+8] # POP EBX # POP EBP # RETN 0x10 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000761d : # POP EBX # POP EBP # RETN 0x10 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000761e : # POP EBP # RETN 0x10 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10005907 : # POP EDI # POP ESI # POP EBX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10005908 : # POP ESI # POP EBX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1001d632 : # ADD BH,DH # RETN 0x00 ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x100093b3 : # POP ESI # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000163b : # POP EDI # POP ESI # POP EBX # POP EBP # RETN 0x08 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000163c : # POP ESI # POP EBX # POP EBP # RETN 0x08 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000163d : # POP EBX # POP EBP # RETN 0x08 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000163e : # POP EBP # RETN 0x08 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1001390b : # MOV EAX,ESI # POP ESI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x1000565b : # ADD ESP,10 # POP EDI # MOV EAX,ESI # POP ESI # POP EBP # RETN 0x0C ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000565e : # POP EDI # MOV EAX,ESI # POP ESI # POP EBP # RETN 0x0C ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000565f : # MOV EAX,ESI # POP ESI # POP EBP # RETN 0x0C ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10005661 : # POP ESI # POP EBP # RETN 0x0C ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10005662 : # POP EBP # RETN 0x0C ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10014911 : # MOV EAX,EDX # POP EBP # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x10014913 : # POP EBP # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x1001167b : # POP EBP # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x1000567c : # MOV EAX,ESI # POP ESI # POP EBP # RETN 0x0C ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000567e : # POP ESI # POP EBP # RETN 0x0C ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000567f : # POP EBP # RETN 0x0C ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10007681 : # POP ESI # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1001b682 : # PUSH EAX # XOR EDI,EDI # DEC ECX # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1001b683 : # XOR EDI,EDI # DEC ECX # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1000b684 : # ADD AL,5D # RETN 0x10 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1001b685 : # DEC ECX # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1001d689 : # ADD BL,AL # OR EAX,40 # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1001d68b : # OR EAX,40 # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1001d68d : # INC EAX # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1001d68f : # OR EAX,8040 # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10007695 : # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100176a2 : # POP ECX # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x100016a3 : # POP EBX # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100016a4 : # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1001d6c0 : # ADD AL,0F6 # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x100096c5 : # MOV EAX,WinCRT.100096CB # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100076c6 : # POP EBP # RETN 0x08 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1001d6c8 : # ADD DH,DH # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x100076ca : # MOV EAX,WinCRT.1001FFF8 # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1001d6d0 : # ADD ESI,ESI # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x100036d7 : # POP ESI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100036d8 : # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000be7a : # POP EDI # POP ESI # POP EBP # RETN 0x08 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100196e5 : # MOV EDI,5900001E # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10004a49 : # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100196e9 : # POP ECX # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x100036ec : # MOV EAX,ESI # POP ESI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100036ee : # POP ESI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100176ef : # XOR EAX,EAX # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10003703 : # MOV EAX,ESI # POP ESI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10003705 : # POP ESI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10007706 : # XOR EAX,EAX # POP EBP # RETN 0x08 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10007708 : # POP EBP # RETN 0x08 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000770c : # MOV EAX,80004001 # RETN 0x10 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10017e84 : # POP ESI # POP EDI # POP EBX # XOR EAX,EAX # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1000d71e : # POP EDI # POP ESI # POP EBX # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10017e85 : # POP EDI # POP EBX # XOR EAX,EAX # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10017720 : # MOV EAX,3B000000 # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x1000d721 : # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10007e86 : # MOV DWORD PTR DS:[ESI+48],EAX # MOV DWORD PTR DS:[ESI+4C],EAX # MOV DWORD PTR DS:[ESI+50],EAX # MOV EAX,ESI # POP ESI # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10009727 : # ADC EAX,<&USER32.DefWindowProcA> # POP ESI # POP EBP # RETN 0x10 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000772a : # MOV EAX,80004001 # POP EBP # RETN 0x08 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10017e87 : # XOR EAX,EAX # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1001d72c : # ADD BH,DH # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1000972d : # POP EBP # RETN 0x10 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000772f : # POP EBP # RETN 0x08 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1001b731 : # POP ECX # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x100060ac : # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000360d : # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10005e8a : # DEC EAX # MOV DWORD PTR DS:[EAX],EAX # ADD CL,CL # RETN 0x0C ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10007e8b : # DEC ESP # MOV DWORD PTR DS:[ESI+50],EAX # MOV EAX,ESI # POP ESI # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10001746 : # ADD AL,0 # MOV EAX,WinCRT.1001F558 # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10001748 : # MOV EAX,WinCRT.1001F558 # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10005e8d : # ADD CL,CL # RETN 0x0C ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000b757 : # MOV EAX,WinCRT.10020618 # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000b759 : # PUSH ES # ADD DL,BYTE PTR DS:[EAX] # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000b75a : # ADD DL,BYTE PTR DS:[EAX] # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1001175e : # ADD EDX,EBX # POP EBX # RETN 0x10 ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x10011760 : # POP EBX # RETN 0x10 ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x10007763 : # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10007778 : # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1001d786 : # ADD AL,0F6 # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1001d78e : # ADD DH,DH # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1001b790 : # ADD AL,0 # MOV DWORD PTR DS:[ESI],EAX # POP ESI # MOV EAX,EBX # POP EBX # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1001b791 : # ADD AL,0 # MOV DWORD PTR DS:[ESI],EAX # POP ESI # MOV EAX,EBX # POP EBX # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1001b793 : # MOV DWORD PTR DS:[ESI],EAX # POP ESI # MOV EAX,EBX # POP EBX # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1001b794 : # PUSH ES # POP ESI # MOV EAX,EBX # POP EBX # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1001b795 : # POP ESI # MOV EAX,EBX # POP EBX # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1001b796 : # MOV EAX,EBX # POP EBX # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1001b798 : # POP EBX # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1001b799 : # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1000779b : # POP EDI # POP ESI # POP EBP # RETN 0x14 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000779c : # POP ESI # POP EBP # RETN 0x14 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000779d : # POP EBP # RETN 0x14 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100017a4 : # POP EBP # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100077c0 : # POP EDI # POP ESI # POP EBP # RETN 0x14 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100077c1 : # POP ESI # POP EBP # RETN 0x14 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100077c2 : # POP EBP # RETN 0x14 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100097ce : # POP ESI # POP EBP # RETN 0x0C ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100097cf : # POP EBP # RETN 0x0C ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1001b7de : # XOR EAX,EAX # POP ESI # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1001b7e0 : # POP ESI # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1001b7e1 : # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x100077e3 : # PUSH ECX # SUB AL,5F # POP ESI # POP EBP # RETN 0x14 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100077e4 : # SUB AL,5F # POP ESI # POP EBP # RETN 0x14 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100077e5 : # POP EDI # POP ESI # POP EBP # RETN 0x14 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100077e6 : # POP ESI # POP EBP # RETN 0x14 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100077e7 : # POP EBP # RETN 0x14 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1001d7f0 : # ADD BH,DH # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x100017f6 : # POP ES # SUB BL,0ED # POP EBP # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100017f7 : # SUB BL,0ED # POP EBP # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100017fa : # POP EBP # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000d955 : # POP EDI # POP ESI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10007eab : # MOV ECX,DWORD PTR SS:[EBP+10] # MOV DWORD PTR DS:[ECX],EAX # POP EBP # RETN 0x0C ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000d956 : # POP ESI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10003808 : # XCHG EAX,EBP # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000780a : # POP EDI # POP ESI # POP EBP # RETN 0x14 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10009957 : # POP EBP # RETN 0x18 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000780c : # POP EBP # RETN 0x14 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10011814 : # POP EBX # POP ESI # POP EDI # RETN 0x10 ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x10001815 : # ADD ESP,10 # POP EBP # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10017816 : # INC EDI # ADD AL,3B # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x10017817 : # ADD AL,3B # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x10001818 : # POP EBP # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000b824 : # XOR EAX,5FFFFFFF # POP ESI # POP EBP # RETN 0x0C ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10017eb1 : # XCHG EAX,ESI # POP ESI # POP EDI # LEA EAX,DWORD PTR DS:[EDX-1] # POP EBX # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1000b828 : # POP EDI # POP ESI # POP EBP # RETN 0x0C ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000b829 : # POP ESI # POP EBP # RETN 0x0C ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000b82a : # POP EBP # RETN 0x0C ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000182f : # POP EBP # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10007830 : # POP ESI # POP EBP # RETN 0x14 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10017831 : # SUB EAX,59FFFF6B # POP EDI # POP ESI # POP EBX # POP EBP # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x10005eb3 : # MOV EDI,EDI # PUSH EBP # MOV EBP,ESP # MOV EAX,DWORD PTR SS:[EBP+8] # MOV DWORD PTR DS:[ECX+8],EAX # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10003834 : # MOV EAX,WinCRT.1000383A # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10017835 : # POP ECX # POP EDI # POP ESI # POP EBX # POP EBP # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x10017836 : # POP EDI # POP ESI # POP EBX # POP EBP # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x10017837 : # POP ESI # POP EBX # POP EBP # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x10017838 : # POP EBX # POP EBP # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x10017839 : # POP EBP # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x1001183a : # XOR EAX,EAX # XOR EDX,EDX # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x1001183c : # XOR EDX,EDX # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x10005eb5 : # PUSH EBP # MOV EBP,ESP # MOV EAX,DWORD PTR SS:[EBP+8] # MOV DWORD PTR DS:[ECX+8],EAX # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10002eb7 : # INC EAX # POP EBP # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10005eb8 : # MOV EAX,DWORD PTR SS:[EBP+8] # MOV DWORD PTR DS:[ECX+8],EAX # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10007854 : # POP EDI # POP ESI # POP EBP # RETN 0x14 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10007855 : # POP ESI # POP EBP # RETN 0x14 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10009856 : # POP EDI # POP ESI # POP EBP # RETN 0x08 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10009857 : # POP ESI # POP EBP # RETN 0x08 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10009858 : # POP EBP # RETN 0x08 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10007966 : # PUSH ECX # POP EAX # POP EDI # POP ESI # POP EBP # RETN 0x20 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10009867 : # XOR EAX,EAX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10001968 : # ADD EDI,EDI # ADC EAX,<&KERNEL32.WideCharToMultiByte> # POP EBP # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10001872 : # AND EAX,ESI # POP ESI # POP EBP # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10001874 : # POP ESI # POP EBP # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10001875 : # POP EBP # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10007879 : # POP EDI # POP ESI # POP EBP # RETN 0x14 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000787a : # POP ESI # POP EBP # RETN 0x14 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000787b : # POP EBP # RETN 0x14 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1001396a : # XOR EAX,EAX # INC EAX # POP EDI # POP ESI # POP EBP # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x10005ec0 : # ADD AL,0 # MOV EDI,EDI # PUSH EBP # MOV EBP,ESP # MOV EAX,DWORD PTR SS:[EBP+8] # MOV DWORD PTR DS:[ECX+4],EAX # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10013888 : # POP ECX # POP ECX # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10013889 : # POP ECX # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1001b893 : # POP ECX # POP ECX # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10009894 : # POP EDI # POP ESI # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1001096e : # POP EBP # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x10001896 : # POP EBP # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10013898 : # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10005ec4 : # PUSH EBP # MOV EBP,ESP # MOV EAX,DWORD PTR SS:[EBP+8] # MOV DWORD PTR DS:[ECX+4],EAX # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1001396f : # POP EBP # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x1000789f : # PUSH ECX # INC EAX # POP EDI # POP ESI # POP EBP # RETN 0x18 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100078a0 : # INC EAX # POP EDI # POP ESI # POP EBP # RETN 0x18 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100078a1 : # POP EDI # POP ESI # POP EBP # RETN 0x18 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100078a2 : # POP ESI # POP EBP # RETN 0x18 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100078a3 : # POP EBP # RETN 0x18 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100018a4 : # ADD ESP,0C # POP EBP # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100018a7 : # POP EBP # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100098aa : # XOR EAX,EAX # POP ESI # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10005ec7 : # MOV EAX,DWORD PTR SS:[EBP+8] # MOV DWORD PTR DS:[ECX+4],EAX # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100098ac : # POP ESI # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100118ad : # POP ECX # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10007ec8 : # ADC EAX,<&USER32.SetMenu> # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100138b8 : # ADD EAX,5D40C033 # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x100138b9 : # XOR EAX,EAX # INC EAX # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x100138bb : # INC EAX # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x100138bc : # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10005eca : # MOV DWORD PTR DS:[ECX+4],EAX # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100138be : # XOR EAX,EAX # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x100138c0 : # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10005ecb : # INC ECX # ADD AL,5D # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1001b8c4 : # POP ECX # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x100178c5 : # POP EDI # POP ESI # POP EBX # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x100178c6 : # POP ESI # POP EBX # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x100178c7 : # POP EBX # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x100178c8 : # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10005ecc : # ADD AL,5D # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100018cd : # MOV ECX,DWORD PTR SS:[EBP+8] # MOV DWORD PTR DS:[EAX+C],ECX # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10007ecd : # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100018d0 : # MOV DWORD PTR DS:[EAX+C],ECX # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100018d3 : # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100138d6 : # ADC EAX,C68B1002 # POP ESI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x100138d7 : # ADD DL,BYTE PTR DS:[EAX] # MOV EAX,ESI # POP ESI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x100098d8 : # MOV EAX,ESI # POP ESI # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100138d9 : # MOV EAX,ESI # POP ESI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x100098da : # POP ESI # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100078db : # PUSH ECX # DEC EAX # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100078dc : # DEC EAX # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100078dd : # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100018e7 : # XOR EAX,EAX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100118ee : # MOV EDI,EDI # XOR EAX,EAX # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x100118f0 : # XOR EAX,EAX # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x100078f1 : # DEC ESP # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100078f2 : # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100118f8 : # ADD EAX,1 # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x100018fd : # ADD AL,0 # ADD BH,BH # ADC EAX,<&KERNEL32.CompareStringA> # DEC EAX # DEC EAX # POP EBP # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100018ff : # ADD BH,BH # ADC EAX,<&KERNEL32.CompareStringA> # DEC EAX # DEC EAX # POP EBP # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10001901 : # ADC EAX,<&KERNEL32.CompareStringA> # DEC EAX # DEC EAX # POP EBP # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10005904 : # MOV DWORD PTR DS:[ESI+28],EBX # POP EDI # POP ESI # POP EBX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10001906 : # DEC EAX # DEC EAX # POP EBP # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10001907 : # DEC EAX # POP EBP # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10001908 : # POP EBP # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10005909 : # POP EBX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1001390a : # POP ECX # MOV EAX,ESI # POP ESI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x10009ed7 : # PUSH ECX # POP EDI # POP ESI # POP EBP # RETN 0x14 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1001b90c : # DEC ECX # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1001390d : # POP ESI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x1001390e : # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x10009ed8 : # POP EDI # POP ESI # POP EBP # RETN 0x14 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10007913 : # PUSH ECX # PUSH EAX # POP EDI # POP ESI # POP EBP # RETN 0x14 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10007914 : # PUSH EAX # POP EDI # POP ESI # POP EBP # RETN 0x14 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10007915 : # POP EDI # POP ESI # POP EBP # RETN 0x14 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10007916 : # POP ESI # POP EBP # RETN 0x14 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10007917 : # POP EBP # RETN 0x14 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10001926 : # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10005927 : # ADD ESP,14 # POP EBP # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000592a : # POP EBP # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10007938 : # PUSH ECX # PUSH ESP # POP EDI # POP ESI # POP EBP # RETN 0x14 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10007939 : # PUSH ESP # POP EDI # POP ESI # POP EBP # RETN 0x14 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000793a : # POP EDI # POP ESI # POP EBP # RETN 0x14 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000793b : # POP ESI # POP EBP # RETN 0x14 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000793c : # POP EBP # RETN 0x14 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10001948 : # ADD EDI,EDI # ADC EAX,<&KERNEL32.WideCharToMultiByte> # POP EBP # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000194a : # ADC EAX,<&KERNEL32.WideCharToMultiByte> # POP EBP # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000194f : # POP EBP # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10009955 : # POP EDI # POP ESI # POP EBP # RETN 0x18 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10009956 : # POP ESI # POP EBP # RETN 0x18 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10010f75 : # POP EBP # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x1001795c : # POP ESI # POP EBX # MOV EAX,EDI # POP EDI # POP EBP # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x1001795d : # POP EBX # MOV EAX,EDI # POP EDI # POP EBP # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x1001795e : # MOV EAX,EDI # POP EDI # POP EBP # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x10017960 : # POP EDI # POP EBP # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x10017961 : # POP EBP # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x10005963 : # ADD ESP,10 # XOR EAX,EAX # POP EBP # RETN 0x0C ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10005966 : # XOR EAX,EAX # POP EBP # RETN 0x0C ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10007967 : # POP EAX # POP EDI # POP ESI # POP EBP # RETN 0x20 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10005968 : # POP EBP # RETN 0x0C ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10007969 : # POP ESI # POP EBP # RETN 0x20 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000196a : # ADC EAX,<&KERNEL32.WideCharToMultiByte> # POP EBP # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1001396c : # INC EAX # POP EDI # POP ESI # POP EBP # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x1001396d : # POP EDI # POP ESI # POP EBP # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x1001396e : # POP ESI # POP EBP # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x1000196f : # POP EBP # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10001987 : # XOR EAX,EAX # POP EBP # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10001989 : # POP EBP # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000798e : # PUSH ECX # POP ESP # POP EDI # POP ESI # POP EBP # RETN 0x18 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000798f : # POP ESP # POP EDI # POP ESI # POP EBP # RETN 0x18 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10007990 : # POP EDI # POP ESI # POP EBP # RETN 0x18 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10007991 : # POP ESI # POP EBP # RETN 0x18 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10007992 : # POP EBP # RETN 0x18 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10017999 : # POP ECX # MOV EAX,EDI # POP ESI # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1001799a : # MOV EAX,EDI # POP ESI # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1001799c : # POP ESI # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1001799e : # XOR EAX,EAX # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x100119a4 : # MOV EAX,DWORD PTR SS:[EBP+8] # POP ESI # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x100119a7 : # POP ESI # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x100119a8 : # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x100079ab : # PUSH ECX # PUSHAD # POP EBP # RETN 0x0C ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100079ac : # PUSHAD # POP EBP # RETN 0x0C ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100079ad : # POP EBP # RETN 0x0C ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100119b1 : # POP ECX # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x100059b2 : # ADD AL,3B # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100139b6 : # XOR EAX,EAX # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x100139b8 : # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1001d9c0 : # ADD DL,BYTE PTR DS:[EAX] # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x100019c3 : # MOV DWORD PTR DS:[ESI],EAX # POP ESI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100019c4 : # PUSH ES # POP ESI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100019c5 : # POP ESI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100019c6 : # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100079cb : # PUSH ECX # POP EDI # POP ESI # POP EBP # RETN 0x10 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100079cc : # POP EDI # POP ESI # POP EBP # RETN 0x10 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100079cd : # POP EDI # POP ESI # POP EBP # RETN 0x10 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100079ce : # POP ESI # POP EBP # RETN 0x10 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100079cf : # POP EBP # RETN 0x10 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10009ef8 : # POP EBP # RETN 0x18 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1001d9ee : # POP ESI # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1000d9f0 : # POP EBX # POP EDI # POP ESI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000d9f1 : # POP EDI # POP ESI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100079f2 : # POP EDI # POP ESI # POP EBP # RETN 0x14 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100079f3 : # POP ESI # POP EBP # RETN 0x14 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100079f4 : # POP EBP # RETN 0x14 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100079f8 : # MOV EDI,EDI # PUSH EBP # MOV EBP,ESP # MOV EAX,DWORD PTR SS:[EBP+8] # MOV DWORD PTR DS:[ECX+2C],EAX # XOR EAX,EAX # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100079fa : # PUSH EBP # MOV EBP,ESP # MOV EAX,DWORD PTR SS:[EBP+8] # MOV DWORD PTR DS:[ECX+2C],EAX # XOR EAX,EAX # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100079fb : # MOV EBP,ESP # MOV EAX,DWORD PTR SS:[EBP+8] # MOV DWORD PTR DS:[ECX+2C],EAX # XOR EAX,EAX # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100079fd : # MOV EAX,DWORD PTR SS:[EBP+8] # MOV DWORD PTR DS:[ECX+2C],EAX # XOR EAX,EAX # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10007a00 : # MOV DWORD PTR DS:[ECX+2C],EAX # XOR EAX,EAX # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null,unicodereverse,ascii {PAGE_EXECUTE_READ}
0x10007a03 : # XOR EAX,EAX # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10007a05 : # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10007a07 : # ADD AL,0 # MOV EAX,DWORD PTR DS:[ECX+3C] # AND EAX,10 # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10007a09 : # MOV EAX,DWORD PTR DS:[ECX+3C] # AND EAX,10 # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10007a0c : # AND EAX,10 # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10017a12 : # POP ECX # MOV ESI,DWORD PTR SS:[EBP-1C] # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x10017a13 : # MOV ESI,DWORD PTR SS:[EBP-1C] # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x10009f04 : # MOV ECX,DWORD PTR SS:[EBP+C] # MOV DWORD PTR DS:[EAX+4],ECX # MOV ECX,DWORD PTR SS:[EBP+10] # MOV DWORD PTR DS:[EAX+8],ECX # XOR EAX,EAX # POP EBP # RETN 0x0C ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10011a1f : # MOV EAX,DWORD PTR SS:[EBP+8] # POP ESI # POP EBP # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x10011a22 : # POP ESI # POP EBP # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x10011a23 : # POP EBP # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x10009a26 : # POP ESI # POP EBP # RETN 0x08 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10009a27 : # POP EBP # RETN 0x08 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10007a28 : # XOR EAX,EAX # INC EAX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000d45c : # POP EDI # POP ESI # POP EBX # POP EBP # RETN 0x0C ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10007a2a : # INC EAX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1001df07 : # XOR EAX,EAX # POP EDI # POP ESI # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10007a2c : # XOR EAX,EAX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1001df09 : # POP EDI # POP ESI # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10009f0a : # MOV ECX,DWORD PTR SS:[EBP+10] # MOV DWORD PTR DS:[EAX+8],ECX # XOR EAX,EAX # POP EBP # RETN 0x0C ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10013a40 : # SUB EAX,59FFFFFF # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x10007a43 : # XOR EAX,EAX # INC EAX # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10013a44 : # POP ECX # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x10007a45 : # INC EAX # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10007a46 : # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000c9b7 : # XOR EAX,EAX # POP ESI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10009a52 : # POP ESI # POP EBP # RETN 0x08 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10009a53 : # POP EBP # RETN 0x08 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000c9b9 : # POP ESI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10011a59 : # ADC EAX,<&KERNEL32.TlsSetValue> # MOV EAX,ESI # POP ESI # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x1001da5a : # MOV DWORD PTR DS:[ESI+1C],EDI # MOV DWORD PTR DS:[ESI+C],EDI # MOV EAX,EBX # POP EDI # POP ESI # POP EBX # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1001da5d : # MOV DWORD PTR DS:[ESI+C],EDI # MOV EAX,EBX # POP EDI # POP ESI # POP EBX # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10011a5e : # MOV EAX,ESI # POP ESI # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x10011a60 : # POP ESI # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x10007a61 : # POP EBP # RETN 0x10 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1001da62 : # POP EDI # POP ESI # POP EBX # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1001da63 : # POP ESI # POP EBX # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1001da64 : # POP EBX # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10007a65 : # MOV EAX,WinCRT.10020000 # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10007a68 : # ADD DL,BYTE PTR DS:[EAX] # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100069bc : # POP EBX # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10003a74 : # POP EDI # POP ESI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10003a75 : # POP ESI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10003a76 : # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10004469 : # MOV EAX,ESI # POP ESI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10007a80 : # POP EBP # RETN 0x08 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100019c0 : # ADD EAX,10 # MOV DWORD PTR DS:[ESI],EAX # POP ESI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10009a85 : # POP EBP # RETN 0x08 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10003a88 : # XOR EAX,EAX # INC EAX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10003a8a : # INC EAX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10001a99 : # ADD CL,CL # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10003ab0 : # ADD AL,5D # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10003ab1 : # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10001ab5 : # ADC EAX,WinCRT.10028FD0 # POP ESI # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10009ab7 : # POP EBP # RETN 0x08 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10001ab8 : # ADD DL,BYTE PTR DS:[EAX] # POP ESI # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10001aba : # POP ESI # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1001babd : # ADC EAX,C9FFFF2D # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1001bac0 : # DEC ECX # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10013ad1 : # XOR ECX,ECX # INC ECX # MOV DWORD PTR DS:[EAX+20C],ECX # MOV EAX,ECX # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10013ad3 : # INC ECX # MOV DWORD PTR DS:[EAX+20C],ECX # MOV EAX,ECX # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10013ad4 : # MOV DWORD PTR DS:[EAX+20C],ECX # MOV EAX,ECX # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10013ada : # MOV EAX,ECX # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10013add : # XOR EAX,EAX # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1001dae1 : # POP ECX # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10005aef : # ADD CL,CL # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10001af0 : # XOR EAX,EAX # INC EAX # POP ESI # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10001af2 : # INC EAX # POP ESI # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10001af3 : # POP ESI # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10009af5 : # POP EDI # POP ESI # POP EBP # RETN 0x18 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10009af6 : # POP ESI # POP EBP # RETN 0x18 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10009af7 : # POP EBP # RETN 0x18 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10003afd : # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10003483 : # POP ESI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10003b15 : # XOR EAX,EAX # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10003b17 : # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10007a60 : # INC EAX # POP EBP # RETN 0x10 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1001b487 : # MOV DWORD PTR DS:[EAX],EBX # OR EAX,FFFFFFFF # POP EDI # POP ESI # POP EBX # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10003b31 : # MOV ECX,DWORD PTR DS:[ECX+8] # LEA EAX,DWORD PTR DS:[ECX+EAX*4] # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10003b34 : # LEA EAX,DWORD PTR DS:[ECX+EAX*4] # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10009b35 : # POP EDI # POP ESI # POP EBP # RETN 0x18 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10009b36 : # POP ESI # POP EBP # RETN 0x18 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10009b37 : # POP EBP # RETN 0x18 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000bb3d : # XOR EAX,EAX # INC EAX # POP ESI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000bb3f : # INC EAX # POP ESI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000bb40 : # POP ESI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000bb41 : # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10003b48 : # ADC EAX,<&USER32.SendMessageA> # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10013b4e : # MOV ECX,DWORD PTR DS:[ECX+8] # MOV ESI,DWORD PTR DS:[EDX+ESI] # MOV ECX,DWORD PTR DS:[ESI+ECX] # ADD ECX,EDX # ADD EAX,ECX # POP ESI # POP EBP # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x1000db4f : # ADD AH,CL # MOV EAX,WinCRT.10027B30 # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000db51 : # MOV EAX,WinCRT.10027B30 # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10001b53 : # POP EDI # POP ESI # POP EBP # RETN 0x08 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000db54 : # ADD DL,BYTE PTR DS:[EAX] # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10001b55 : # POP EBP # RETN 0x08 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10013b57 : # ADD ECX,EDX # ADD EAX,ECX # POP ESI # POP EBP # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x10013b59 : # ADD EAX,ECX # POP ESI # POP EBP # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x10013b5b : # POP ESI # POP EBP # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x10013b5c : # POP EBP # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x1000bb5f : # ADC EAX,<&USER32.GetWindowLongA> # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000db67 : # MOV EAX,DWORD PTR SS:[EBP+8] # POP EBP # RETN 0x08 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000db6a : # POP EBP # RETN 0x08 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10005b70 : # ADD DL,BYTE PTR DS:[EAX] # XOR EAX,EAX # INC EAX # POP EBP # RETN 0x10 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10005b72 : # XOR EAX,EAX # INC EAX # POP EBP # RETN 0x10 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10009b73 : # PUSH ECX # SUB AL,5F # POP ESI # POP EBP # RETN 0x18 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10009b74 : # SUB AL,5F # POP ESI # POP EBP # RETN 0x18 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10009b75 : # POP EDI # POP ESI # POP EBP # RETN 0x18 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10009b76 : # POP ESI # POP EBP # RETN 0x18 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10009b77 : # POP EBP # RETN 0x18 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000bb79 : # ADC EAX,<&USER32.GetWindowLongA> # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10011b7b : # POP ECX # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x1000db7d : # MOV ECX,DWORD PTR SS:[EBP+C] # MOV DWORD PTR DS:[ECX],EAX # MOV EAX,DWORD PTR SS:[EBP+8] # POP EBP # RETN 0x08 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000db80 : # MOV DWORD PTR DS:[ECX],EAX # MOV EAX,DWORD PTR SS:[EBP+8] # POP EBP # RETN 0x08 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000bf40 : # POP EDI # POP ESI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000db82 : # MOV EAX,DWORD PTR SS:[EBP+8] # POP EBP # RETN 0x08 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10011b84 : # POP ECX # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1000db85 : # POP EBP # RETN 0x08 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10011f41 : # POP ESI # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x1000db91 : # ADD DL,BYTE PTR DS:[EAX] # MOV DWORD PTR DS:[EAX+4],ECX # MOV DWORD PTR DS:[EAX+10],ECX # MOV DWORD PTR DS:[EAX+C],ECX # MOV DWORD PTR DS:[EAX+8],ECX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000db93 : # MOV DWORD PTR DS:[EAX+4],ECX # MOV DWORD PTR DS:[EAX+10],ECX # MOV DWORD PTR DS:[EAX+C],ECX # MOV DWORD PTR DS:[EAX+8],ECX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000db96 : # MOV DWORD PTR DS:[EAX+10],ECX # MOV DWORD PTR DS:[EAX+C],ECX # MOV DWORD PTR DS:[EAX+8],ECX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10001b97 : # POP EDI # POP ESI # POP EBP # RETN 0x08 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10001b98 : # POP ESI # POP EBP # RETN 0x08 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000db99 : # MOV DWORD PTR DS:[EAX+C],ECX # MOV DWORD PTR DS:[EAX+8],ECX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000db9c : # MOV DWORD PTR DS:[EAX+8],ECX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000bb9e : # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10003ba3 : # XOR EAX,EAX # POP EDI # INC EAX # POP ESI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10003ba5 : # POP EDI # INC EAX # POP ESI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10003ba6 : # INC EAX # POP ESI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10003ba7 : # POP ESI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10003ba8 : # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100029f2 : # POP ESI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000dbae : # POP ECX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10003bb1 : # MOV EAX,DWORD PTR DS:[EAX+EC] # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000d9f3 : # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10009bb5 : # POP EDI # POP ESI # POP EBP # RETN 0x18 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10009bb6 : # POP ESI # POP EBP # RETN 0x18 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10009bb7 : # POP EBP # RETN 0x18 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000bbb8 : # ADC EAX,<&USER32.IsWindowEnabled> # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000749f : # INC ESI # PUSH EAX # MOV EAX,ESI # POP ESI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1001dbc2 : # POP ECX # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x100074a1 : # MOV EAX,ESI # POP ESI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10005f4c : # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100049f7 : # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100074a3 : # POP ESI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10013bd5 : # INC EBP # DEC ECX # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10013bd6 : # DEC ECX # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x100074a4 : # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10001bdb : # POP EDI # POP ESI # POP EBP # RETN 0x08 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10001bdc : # POP ESI # POP EBP # RETN 0x08 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10001bdd : # POP EBP # RETN 0x08 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000bbe0 : # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10009bf5 : # POP EDI # POP ESI # POP EBP # RETN 0x18 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10009bf6 : # POP ESI # POP EBP # RETN 0x18 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10009bf7 : # POP EBP # RETN 0x18 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10011bfa : # POP EDI # MOV EAX,ESI # POP ESI # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10011bfb : # MOV EAX,ESI # POP ESI # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10011bfd : # POP ESI # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10005bff : # MOV EAX,DWORD PTR DS:[EAX] # ADD CL,CL # RETN 0x08 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10005c01 : # ADD CL,CL # RETN 0x08 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10005c06 : # MOV EAX,WinCRT.1001FC80 # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10005c0c : # MOV EAX,WinCRT.1001FC9C # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10005c12 : # MOV EAX,WinCRT.1001FCB8 # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10005c13 : # MOV EAX,C31001FC # MOV EAX,WinCRT.1001FCD4 # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10011c14 : # POP ECX # MOV EAX,ESI # POP ESI # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x10011c15 : # MOV EAX,ESI # POP ESI # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x10011c17 : # POP ESI # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x10005c18 : # MOV EAX,WinCRT.1001FCD4 # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000bc19 : # ADC EAX,<&USER32.SetWindowPos> # POP EBP # RETN 0x18 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000bc1e : # POP EBP # RETN 0x18 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10001c24 : # ADD EAX,10 # MOV DWORD PTR DS:[ESI],EAX # POP EDI # POP ESI # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10001c27 : # MOV DWORD PTR DS:[ESI],EAX # POP EDI # POP ESI # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10001c28 : # PUSH ES # POP EDI # POP ESI # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10001c29 : # POP EDI # POP ESI # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10001c2a : # POP ESI # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10009c35 : # POP EDI # POP ESI # POP EBP # RETN 0x18 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10009c36 : # POP ESI # POP EBP # RETN 0x18 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10009c37 : # POP EBP # RETN 0x18 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10005c42 : # NEG EAX # MOV DWORD PTR DS:[ESI+10],EAX # POP ESI # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10005c44 : # MOV DWORD PTR DS:[ESI+10],EAX # POP ESI # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100054b6 : # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10005c47 : # POP ESI # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10001c4a : # ADD EAX,10 # MOV DWORD PTR DS:[ESI],EAX # MOV EAX,ESI # POP ESI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10001c4d : # MOV DWORD PTR DS:[ESI],EAX # MOV EAX,ESI # POP ESI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10001c4e : # PUSH ES # MOV EAX,ESI # POP ESI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10001c4f : # MOV EAX,ESI # POP ESI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10001c51 : # POP ESI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10001c52 : # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10007eae : # MOV DWORD PTR DS:[ECX],EAX # POP EBP # RETN 0x0C ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000bc6d : # POP ESI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000bc6e : # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10009c75 : # POP EDI # POP ESI # POP EBP # RETN 0x18 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10009c76 : # POP ESI # POP EBP # RETN 0x18 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10009c77 : # POP EBP # RETN 0x18 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100024bf : # POP ECX # MOV EAX,ESI # POP ESI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10003c83 : # PUSH EDX # POP ESI # POP EBP # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10003c84 : # POP ESI # POP EBP # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10003c85 : # POP ESI # POP EBP # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10003c86 : # POP EBP # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10005ca7 : # MOV EDI,EDI # PUSH EBP # MOV EBP,ESP # MOV EAX,ECX # MOV ECX,DWORD PTR SS:[EBP+8] # MOV DWORD PTR DS:[EAX+4],ECX # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10005ca9 : # PUSH EBP # MOV EBP,ESP # MOV EAX,ECX # MOV ECX,DWORD PTR SS:[EBP+8] # MOV DWORD PTR DS:[EAX+4],ECX # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10005caa : # MOV EBP,ESP # MOV EAX,ECX # MOV ECX,DWORD PTR SS:[EBP+8] # MOV DWORD PTR DS:[EAX+4],ECX # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10005cac : # MOV EAX,ECX # MOV ECX,DWORD PTR SS:[EBP+8] # MOV DWORD PTR DS:[EAX+4],ECX # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10005cae : # MOV ECX,DWORD PTR SS:[EBP+8] # MOV DWORD PTR DS:[EAX+4],ECX # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10005cb1 : # MOV DWORD PTR DS:[EAX+4],ECX # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000bcb2 : # POP EDI # MOV DWORD PTR DS:[ESI+20],EAX # POP ESI # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000bcb3 : # MOV DWORD PTR DS:[ESI+20],EAX # POP ESI # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10005cb4 : # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000bcb6 : # POP ESI # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10009cbc : # PUSH ECX # INC EAX # POP EDI # POP ESI # POP EBP # RETN 0x1C ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10009cbd : # INC EAX # POP EDI # POP ESI # POP EBP # RETN 0x1C ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10009cbe : # POP EDI # POP ESI # POP EBP # RETN 0x1C ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10009cbf : # POP ESI # POP EBP # RETN 0x1C ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10009cc0 : # POP EBP # RETN 0x1C ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000dcc6 : # MOV DWORD PTR DS:[ESI+8],EDI # MOV DWORD PTR DS:[ESI+C],EAX # MOV DWORD PTR DS:[ESI+4],EBX # POP EDI # POP ESI # POP EBX # POP EBP # RETN 0x08 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000dcc9 : # MOV DWORD PTR DS:[ESI+C],EAX # MOV DWORD PTR DS:[ESI+4],EBX # POP EDI # POP ESI # POP EBX # POP EBP # RETN 0x08 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000dccc : # MOV DWORD PTR DS:[ESI+4],EBX # POP EDI # POP ESI # POP EBX # POP EBP # RETN 0x08 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000dccd : # POP ESI # ADD AL,5F # POP ESI # POP EBX # POP EBP # RETN 0x08 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000dcce : # ADD AL,5F # POP ESI # POP EBX # POP EBP # RETN 0x08 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000dccf : # POP EDI # POP ESI # POP EBX # POP EBP # RETN 0x08 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000dcd0 : # POP ESI # POP EBX # POP EBP # RETN 0x08 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000dcd1 : # POP EBX # POP EBP # RETN 0x08 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000dcd2 : # POP EBP # RETN 0x08 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10011a26 : # ADC EAX,<&KERNEL32.TlsAlloc> # RETN 0x04 ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x10019cee : # TEST DWORD PTR DS:[8B50FFFF],EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10005f7d : # POP EDI # POP ESI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10009cfc : # PUSH ECX # INC ESP # POP EDI # POP ESI # POP EBP # RETN 0x18 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10009cfd : # INC ESP # POP EDI # POP ESI # POP EBP # RETN 0x18 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10009cfe : # POP EDI # POP ESI # POP EBP # RETN 0x18 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10009cff : # POP ESI # POP EBP # RETN 0x18 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10009d00 : # POP EBP # RETN 0x18 ** [WinCRT.dll] ** | null,unicodereverse {PAGE_EXECUTE_READ}
0x10005d03 : # XOR EAX,EAX # POP EDI # POP ESI # POP EBX # POP EBP # RETN 0x0C ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10005d05 : # POP EDI # POP ESI # POP EBX # POP EBP # RETN 0x0C ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10005d06 : # POP ESI # POP EBX # POP EBP # RETN 0x0C ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10005d07 : # POP EBX # POP EBP # RETN 0x0C ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10005d08 : # POP EBP # RETN 0x0C ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000bd0b : # ADC EAX,<&USER32.ReleaseDC> # POP EDI # POP ESI # POP EBX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10002f82 : # POP EDI # POP EBP # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000bd10 : # POP EDI # POP ESI # POP EBX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000bd11 : # POP ESI # POP EBX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000bd12 : # POP EBX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10001d13 : # POP ESI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10001d14 : # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100024d9 : # POP ESI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10003d1d : # AND EAX,DWORD PTR DS:[EAX] # POP EDI # MOV EAX,ESI # POP ESI # POP EBX # POP EBP # RETN 0x08 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10003d1f : # POP EDI # MOV EAX,ESI # POP ESI # POP EBX # POP EBP # RETN 0x08 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10003d20 : # MOV EAX,ESI # POP ESI # POP EBX # POP EBP # RETN 0x08 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10003d22 : # POP ESI # POP EBX # POP EBP # RETN 0x08 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10003d23 : # POP EBX # POP EBP # RETN 0x08 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10003d24 : # POP EBP # RETN 0x08 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10005d26 : # POP ECX # MOV EAX,ESI # POP ESI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10005d27 : # MOV EAX,ESI # POP ESI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10005d29 : # POP ESI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10005d2a : # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10009d30 : # PUSH ECX # DEC EAX # POP EBP # RETN 0x08 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10009d31 : # DEC EAX # POP EBP # RETN 0x08 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10009d32 : # POP EBP # RETN 0x08 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10011d3a : # POP ECX # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x1000dd3b : # POP ESI # POP EBX # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000dd3c : # POP EBX # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10010f8a : # ADD ESP,10 # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10005ebe : # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10011d46 : # POP ECX # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x10012384 : # XOR EAX,EAX # POP ECX # POP EBX # POP EDI # POP ESI # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1000bd4e : # MOV DWORD PTR DS:[ESI+14],EAX # POP EDI # MOV DWORD PTR DS:[ESI+50],EBX # MOV DWORD PTR DS:[ESI+44],EBX # MOV EAX,ESI # POP ESI # POP EBX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000bd51 : # POP EDI # MOV DWORD PTR DS:[ESI+50],EBX # MOV DWORD PTR DS:[ESI+44],EBX # MOV EAX,ESI # POP ESI # POP EBX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000bd52 : # MOV DWORD PTR DS:[ESI+50],EBX # MOV DWORD PTR DS:[ESI+44],EBX # MOV EAX,ESI # POP ESI # POP EBX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000bd53 : # POP ESI # PUSH EAX # MOV DWORD PTR DS:[ESI+44],EBX # MOV EAX,ESI # POP ESI # POP EBX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000bd54 : # PUSH EAX # MOV DWORD PTR DS:[ESI+44],EBX # MOV EAX,ESI # POP ESI # POP EBX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000bd55 : # MOV DWORD PTR DS:[ESI+44],EBX # MOV EAX,ESI # POP ESI # POP EBX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000bd56 : # POP ESI # INC ESP # MOV EAX,ESI # POP ESI # POP EBX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000bd57 : # INC ESP # MOV EAX,ESI # POP ESI # POP EBX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000bd58 : # MOV EAX,ESI # POP ESI # POP EBX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000bd5a : # POP ESI # POP EBX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000bd5b : # POP EBX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10013b51 : # MOV ESI,DWORD PTR DS:[EDX+ESI] # MOV ECX,DWORD PTR DS:[ESI+ECX] # ADD ECX,EDX # ADD EAX,ECX # POP ESI # POP EBP # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x10009d62 : # PUSH ECX # DEC ESP # POP EBP # RETN 0x08 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10009d63 : # DEC ESP # POP EBP # RETN 0x08 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10009d64 : # POP EBP # RETN 0x08 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000dd70 : # POP ECX # MOV EAX,ESI # POP ESI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000dd71 : # MOV EAX,ESI # POP ESI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000dd73 : # POP ESI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000dd74 : # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000dd76 : # ADD AL,0 # MOV EAX,WinCRT.10020DF0 # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000dd78 : # MOV EAX,WinCRT.10020DF0 # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000dd7b : # ADD DL,BYTE PTR DS:[EAX] # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000dd86 : # ADD DL,BYTE PTR DS:[EAX] # MOV DWORD PTR DS:[EAX+4],ECX # MOV DWORD PTR DS:[EAX+10],ECX # MOV DWORD PTR DS:[EAX+C],ECX # MOV DWORD PTR DS:[EAX+8],ECX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000dd88 : # MOV DWORD PTR DS:[EAX+4],ECX # MOV DWORD PTR DS:[EAX+10],ECX # MOV DWORD PTR DS:[EAX+C],ECX # MOV DWORD PTR DS:[EAX+8],ECX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000dd8b : # MOV DWORD PTR DS:[EAX+10],ECX # MOV DWORD PTR DS:[EAX+C],ECX # MOV DWORD PTR DS:[EAX+8],ECX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000dd8e : # MOV DWORD PTR DS:[EAX+C],ECX # MOV DWORD PTR DS:[EAX+8],ECX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000dd91 : # MOV DWORD PTR DS:[EAX+8],ECX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10007d95 : # ADD AL,0FF # ADC EAX,<&USER32.GetMenuItemID> # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10007d97 : # ADC EAX,<&USER32.GetMenuItemID> # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10007d9c : # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10009da0 : # PUSH ECX # PUSH EAX # POP EDI # POP ESI # POP EBP # RETN 0x18 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10009da1 : # PUSH EAX # POP EDI # POP ESI # POP EBP # RETN 0x18 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10009da2 : # POP EDI # POP ESI # POP EBP # RETN 0x18 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000dda3 : # POP ECX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10009da4 : # POP EBP # RETN 0x18 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10004a47 : # POP ESI # POP EBX # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10011daf : # ADC EAX,<&KERNEL32.TlsSetValue> # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10011db4 : # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10002f9e : # POP EBP # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10013db7 : # AND EAX,59FFFFFD # POP ECX # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10013dbb : # POP ECX # POP ECX # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10013dbc : # POP ECX # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10007dc7 : # ADC EAX,<&USER32.GetWindowRect> # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10007dcc : # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10009dd3 : # PUSH ECX # PUSH ESP # POP EDI # POP ESI # POP EBP # RETN 0x18 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10009dd4 : # PUSH ESP # POP EDI # POP ESI # POP EBP # RETN 0x18 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10009dd5 : # POP EDI # POP ESI # POP EBP # RETN 0x18 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10007dd6 : # ADC EAX,<&USER32.EnableWindow> # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10009dd7 : # POP EBP # RETN 0x18 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000dfa4 : # XOR EAX,EAX # POP ESI # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10007856 : # POP EBP # RETN 0x14 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10007de2 : # ADC EAX,<&USER32.EnableWindow> # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000bfa7 : # POP EDI # POP ESI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1001a1a1 : # MOV EAX,ECX # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10017df6 : # OR EAX,10028600 # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10017df9 : # ADD DL,BYTE PTR DS:[EAX] # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10007dfa : # MOV EAX,ESI # POP ESI # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10017dfb : # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1000ddfc : # ADD AL,BYTE PTR DS:[EBX] # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10017e00 : # LEA EAX,DWORD PTR DS:[EDX-1] # POP EBX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10007968 : # POP EDI # POP ESI # POP EBP # RETN 0x20 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10017e03 : # POP EBX # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x1000de05 : # TEST EAX,8BFFFFE7 # DEC ESI # ADD AL,8B # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000de0a : # DEC ESI # ADD AL,8B # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000de0b : # ADD AL,8B # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10005ec5 : # MOV EBP,ESP # MOV EAX,DWORD PTR SS:[EBP+8] # MOV DWORD PTR DS:[ECX+4],EAX # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10019e18 : # MOV EDX,C9FFFF49 # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10019e1b : # DEC ECX # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1000be1c : # MOV EAX,WinCRT.1000BD7B # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10009e2c : # PUSH ECX # POP EAX # POP EDI # POP ESI # POP EBP # RETN 0x24 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10009e2d : # POP EAX # POP EDI # POP ESI # POP EBP # RETN 0x24 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10009e2e : # POP EDI # POP ESI # POP EBP # RETN 0x24 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10009e2f : # POP ESI # POP EBP # RETN 0x24 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10009e30 : # POP EBP # RETN 0x24 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10007a5e : # XOR EAX,EAX # INC EAX # POP EBP # RETN 0x10 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10002a5f : # POP ESI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000796a : # POP EBP # RETN 0x20 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000de3e : # POP EDI # POP ESI # POP EBX # POP EBP # RETN 0x0C ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000de3f : # POP ESI # POP EBX # POP EBP # RETN 0x0C ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000de40 : # POP EBX # POP EBP # RETN 0x0C ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000de41 : # POP EBP # RETN 0x0C ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1001de44 : # XOR EAX,EAX # INC EAX # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1001de46 : # INC EAX # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10007e4c : # POP ESI # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10008fba : # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1001da65 : # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1000de64 : # POP ECX # MOV EAX,ESI # POP ESI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000de65 : # MOV EAX,ESI # POP ESI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000de67 : # POP ESI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000de68 : # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10009e6f : # PUSH ECX # POP ESP # POP EDI # POP ESI # POP EBP # RETN 0x1C ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10009e70 : # POP ESP # POP EDI # POP ESI # POP EBP # RETN 0x1C ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10009e71 : # POP EDI # POP ESI # POP EBP # RETN 0x1C ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10009e72 : # POP ESI # POP EBP # RETN 0x1C ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10009e73 : # POP EBP # RETN 0x1C ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000be74 : # ADD ESP,10 # MOV DWORD PTR DS:[ESI+8],EDI # POP EDI # POP ESI # POP EBP # RETN 0x08 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000be77 : # MOV DWORD PTR DS:[ESI+8],EDI # POP EDI # POP ESI # POP EBP # RETN 0x08 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000d514 : # MOV EAX,WinCRT.1000D51A # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000de7a : # POP ECX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000be7b : # POP ESI # POP EBP # RETN 0x08 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000be7c : # POP EBP # RETN 0x08 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10007e80 : # MOV DWORD PTR DS:[ESI+40],EAX # MOV DWORD PTR DS:[ESI+44],EAX # MOV DWORD PTR DS:[ESI+48],EAX # MOV DWORD PTR DS:[ESI+4C],EAX # MOV DWORD PTR DS:[ESI+50],EAX # MOV EAX,ESI # POP ESI # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10007e81 : # INC ESI # INC EAX # MOV DWORD PTR DS:[ESI+44],EAX # MOV DWORD PTR DS:[ESI+48],EAX # MOV DWORD PTR DS:[ESI+4C],EAX # MOV DWORD PTR DS:[ESI+50],EAX # MOV EAX,ESI # POP ESI # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10007e82 : # INC EAX # MOV DWORD PTR DS:[ESI+44],EAX # MOV DWORD PTR DS:[ESI+48],EAX # MOV DWORD PTR DS:[ESI+4C],EAX # MOV DWORD PTR DS:[ESI+50],EAX # MOV EAX,ESI # POP ESI # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10007e83 : # MOV DWORD PTR DS:[ESI+44],EAX # MOV DWORD PTR DS:[ESI+48],EAX # MOV DWORD PTR DS:[ESI+4C],EAX # MOV DWORD PTR DS:[ESI+50],EAX # MOV EAX,ESI # POP ESI # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10007e84 : # INC ESI # INC ESP # MOV DWORD PTR DS:[ESI+48],EAX # MOV DWORD PTR DS:[ESI+4C],EAX # MOV DWORD PTR DS:[ESI+50],EAX # MOV EAX,ESI # POP ESI # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10007e85 : # INC ESP # MOV DWORD PTR DS:[ESI+48],EAX # MOV DWORD PTR DS:[ESI+4C],EAX # MOV DWORD PTR DS:[ESI+50],EAX # MOV EAX,ESI # POP ESI # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10003e86 : # ADD CL,CL # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10007e87 : # INC ESI # DEC EAX # MOV DWORD PTR DS:[ESI+4C],EAX # MOV DWORD PTR DS:[ESI+50],EAX # MOV EAX,ESI # POP ESI # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10007e88 : # DEC EAX # MOV DWORD PTR DS:[ESI+4C],EAX # MOV DWORD PTR DS:[ESI+50],EAX # MOV EAX,ESI # POP ESI # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10007e89 : # MOV DWORD PTR DS:[ESI+4C],EAX # MOV DWORD PTR DS:[ESI+50],EAX # MOV EAX,ESI # POP ESI # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10007e8a : # INC ESI # DEC ESP # MOV DWORD PTR DS:[ESI+50],EAX # MOV EAX,ESI # POP ESI # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10005e8b : # MOV DWORD PTR DS:[EAX],EAX # ADD CL,CL # RETN 0x0C ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10007e8c : # MOV DWORD PTR DS:[ESI+50],EAX # MOV EAX,ESI # POP ESI # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10007e8d : # INC ESI # PUSH EAX # MOV EAX,ESI # POP ESI # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10007e8e : # PUSH EAX # MOV EAX,ESI # POP ESI # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10007e8f : # MOV EAX,ESI # POP ESI # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10007e91 : # POP ESI # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000de95 : # POP ECX # MOV EAX,ESI # POP ESI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000de96 : # MOV EAX,ESI # POP ESI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000de98 : # POP ESI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000de99 : # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10012a71 : # POP ESI # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x10009ea9 : # PUSH ECX # PUSHAD # POP EBP # RETN 0x10 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10009eaa : # PUSHAD # POP EBP # RETN 0x10 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000beab : # POP ESI # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10005eae : # ADD ESP,14 # POP EBP # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10007eb0 : # POP EBP # RETN 0x0C ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10005eb1 : # POP EBP # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10017eb2 : # POP ESI # POP EDI # LEA EAX,DWORD PTR DS:[EDX-1] # POP EBX # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10017eb3 : # POP EDI # LEA EAX,DWORD PTR DS:[EDX-1] # POP EBX # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10017eb4 : # LEA EAX,DWORD PTR DS:[EDX-1] # POP EBX # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10003eb5 : # ADD ESP,10 # POP EBP # RETN 0x0C ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10005eb6 : # MOV EBP,ESP # MOV EAX,DWORD PTR SS:[EBP+8] # MOV DWORD PTR DS:[ECX+8],EAX # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10017eb7 : # POP EBX # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10003eb8 : # POP EBP # RETN 0x0C ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10017eb9 : # LEA EAX,DWORD PTR DS:[EDX-2] # POP ESI # POP EDI # POP EBX # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10005ebb : # MOV DWORD PTR DS:[ECX+8],EAX # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10017ebc : # POP ESI # POP EDI # POP EBX # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10017ebd : # POP EDI # POP EBX # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10017ebe : # POP EBX # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10017ec0 : # LEA EAX,DWORD PTR DS:[EDX-3] # POP ESI # POP EDI # POP EBX # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10005ec2 : # MOV EDI,EDI # PUSH EBP # MOV EBP,ESP # MOV EAX,DWORD PTR SS:[EBP+8] # MOV DWORD PTR DS:[ECX+4],EAX # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10017ec3 : # POP ESI # POP EDI # POP EBX # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10017ec4 : # POP EDI # POP EBX # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10017ec5 : # POP EBX # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10017ec7 : # LEA EAX,DWORD PTR DS:[EDX-4] # POP ESI # POP EDI # POP EBX # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10017ec8 : # INC EDX # CLD # POP ESI # POP EDI # POP EBX # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10017ec9 : # CLD # POP ESI # POP EDI # POP EBX # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10017eca : # POP ESI # POP EDI # POP EBX # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10017ecb : # POP EDI # POP EBX # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10017ecc : # POP EBX # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10005ecd : # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10003ed0 : # ADD ESP,10 # POP EBP # RETN 0x0C ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10003ed3 : # POP EBP # RETN 0x0C ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10005ed7 : # POPAD # ADD AL,0 # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10005ed8 : # ADD AL,0 # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10009ed9 : # POP EDI # POP ESI # POP EBP # RETN 0x14 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10009eda : # POP ESI # POP EBP # RETN 0x14 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10009edb : # POP EBP # RETN 0x14 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10009eee : # AND EAX,FFFF3EF9 # ADD EAX,80010108 # POP EBP # RETN 0x18 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10009ef3 : # ADD EAX,80010108 # POP EBP # RETN 0x18 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10019ef8 : # POP ECX # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1000beff : # XOR EAX,EAX # POP ESI # POP EBP # RETN 0x0C ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10009f01 : # MOV EAX,DWORD PTR SS:[EBP+8] # MOV ECX,DWORD PTR SS:[EBP+C] # MOV DWORD PTR DS:[EAX+4],ECX # MOV ECX,DWORD PTR SS:[EBP+10] # MOV DWORD PTR DS:[EAX+8],ECX # XOR EAX,EAX # POP EBP # RETN 0x0C ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000bf02 : # POP EBP # RETN 0x0C ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10005f04 : # ADD EAX,DWORD PTR DS:[EBX+5E5FFFCB] # MOV EAX,EBX # POP EBX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10005f05 : # OR EBX,FFFFFFFF # POP EDI # POP ESI # MOV EAX,EBX # POP EBX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10009f07 : # MOV DWORD PTR DS:[EAX+4],ECX # MOV ECX,DWORD PTR SS:[EBP+10] # MOV DWORD PTR DS:[EAX+8],ECX # XOR EAX,EAX # POP EBP # RETN 0x0C ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10005f08 : # POP EDI # POP ESI # MOV EAX,EBX # POP EBX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10005f09 : # POP ESI # MOV EAX,EBX # POP EBX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10005f0a : # MOV EAX,EBX # POP EBX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1001df0b : # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10005f0c : # POP EBX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10009f0d : # MOV DWORD PTR DS:[EAX+8],ECX # XOR EAX,EAX # POP EBP # RETN 0x0C ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10009f10 : # XOR EAX,EAX # POP EBP # RETN 0x0C ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10009f12 : # POP EBP # RETN 0x0C ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10007f13 : # PUSH EBX # POP ESP # POP EDI # POP ESI # POP EBX # POP EBP # RETN 0x20 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10007f14 : # POP ESP # POP EDI # POP ESI # POP EBX # POP EBP # RETN 0x20 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10007f15 : # POP EDI # POP ESI # POP EBX # POP EBP # RETN 0x20 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10007f16 : # POP ESI # POP EBX # POP EBP # RETN 0x20 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10007f17 : # POP EBX # POP EBP # RETN 0x20 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10007f18 : # POP EBP # RETN 0x20 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10003f26 : # MOV EAX,WinCRT.1001FB20 # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10007531 : # XOR EAX,EAX # POP ESI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10013f29 : # XOR EAX,EAX # INC EAX # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x10013f2b : # INC EAX # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x10019f3c : # POPAD # ADD AL,0 # MOV DWORD PTR DS:[ECX],EAX # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10019f3d : # ADD AL,0 # MOV DWORD PTR DS:[ECX],EAX # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10011f3e : # XOR EAX,EAX # POP EDI # POP ESI # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x10019f3f : # MOV DWORD PTR DS:[ECX],EAX # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10011f40 : # POP EDI # POP ESI # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x10019f41 : # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1000bf42 : # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10005f48 : # XOR EAX,EAX # POP EDI # POP ESI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10005f4a : # POP EDI # POP ESI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10005f4b : # POP ESI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10009f4c : # POP EBP # RETN 0x24 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10004a8d : # POP ESI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10011f50 : # INC ESP # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x10005fe3 : # POP ESI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10019f5b : # XOR EAX,EAX # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10019f5d : # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10007f61 : # ADD BH,BH # PUSH EBX # POP ESP # POP EDI # POP ESI # POP EBX # POP EBP # RETN 0x1C ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10007f63 : # PUSH EBX # POP ESP # POP EDI # POP ESI # POP EBX # POP EBP # RETN 0x1C ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10007f64 : # POP ESP # POP EDI # POP ESI # POP EBX # POP EBP # RETN 0x1C ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10007f65 : # POP EDI # POP ESI # POP EBX # POP EBP # RETN 0x1C ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10007f66 : # POP ESI # POP EBX # POP EBP # RETN 0x1C ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10007f67 : # POP EBX # POP EBP # RETN 0x1C ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10007f68 : # POP EBP # RETN 0x1C ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10003f70 : # MOV EAX,WinCRT.10003F5F # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10009f7d : # POP EBP # RETN 0x18 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10005f7e : # POP ESI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10005f7f : # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10011540 : # ADD ESP,0C # POP EBP # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x10011f82 : # MOV EAX,EDI # POP EDI # POP ESI # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10011f84 : # POP EDI # POP ESI # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10011f85 : # POP ESI # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10011f86 : # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10011543 : # POP EBP # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x10003f98 : # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000df9b : # ADD EAX,5E58186A # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000df9e : # POP EAX # POP ESI # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000df9f : # POP ESI # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10019fa1 : # AND EAX,40 # POP ESI # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10009fa2 : # POP EBP # RETN 0x08 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10019fa3 : # INC EAX # POP ESI # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10019fa4 : # POP ESI # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10019fa5 : # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1000dfa6 : # POP ESI # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10019fa7 : # MOV EAX,WinCRT.10028748 # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1000bfa8 : # POP ESI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000bfa9 : # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10019faa : # ADD DL,BYTE PTR DS:[EAX] # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10017e86 : # POP EBX # XOR EAX,EAX # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10005fb0 : # POP EDI # POP ESI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10005fb1 : # POP ESI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10005fb2 : # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10007fbd : # POP ESI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10007fbe : # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10013fc0 : # INC EBX # XOR EAX,EAX # INC EAX # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10013fc2 : # XOR EAX,EAX # INC EAX # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10013fc4 : # INC EAX # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1000dff7 : # POP ECX # DEC EAX # POP EBP # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10009fcd : # POP EBP # RETN 0x10 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10011fce : # MOV EAX,EDI # POP EDI # POP ESI # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10011fd0 : # POP EDI # POP ESI # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10011fd1 : # POP ESI # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10011fd2 : # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10005ff9 : # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1001dfd8 : # POP ECX # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10005fe2 : # POP EDI # POP ESI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10005ffb : # ADD AL,0 # MOV EAX,WinCRT.1001FDA4 # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10005fe4 : # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10003fe5 : # POP ESI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10003fe6 : # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10004aa7 : # INC EBX # XOR EAX,EAX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10001ffd : # ADD CL,CL # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10005ff2 : # ADD AL,0FF # ADC EAX,<&GDI32.GetClipBox> # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10005ff4 : # ADC EAX,<&GDI32.GetClipBox> # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000dff5 : # NEG EAX # POP ECX # DEC EAX # POP EBP # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10019ff7 : # ADD EAX,5E581A6A # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1000dff8 : # DEC EAX # POP EBP # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000dff9 : # POP EBP # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10019ffa : # POP EAX # POP ESI # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10019ffb : # POP ESI # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10005ffd : # MOV EAX,WinCRT.1001FDA4 # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1001dfff : # POP ECX # MOV DWORD PTR DS:[ESI],EAX # MOV DWORD PTR DS:[ESI+8],EAX # MOV DWORD PTR DS:[ESI+4],EAX # POP ESI # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
Other gadgets
-------------
0x10006000 : # ADD DWORD PTR DS:[EAX],EDX # RETN ** [WinCRT.dll] ** | null,unicodereverse,ascii {PAGE_EXECUTE_READ}
0x10006001 : # ADC BL,AL # MOV EAX,WinCRT.1001FDC0 # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1001e003 : # INC ESI # OR BYTE PTR DS:[ECX+5D5E0446],CL # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1001e004 : # OR BYTE PTR DS:[ECX+5D5E0446],CL # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10006005 : # STD # ADD DWORD PTR DS:[EAX],EDX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10006006 : # ADD DWORD PTR DS:[EAX],EDX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10006007 : # ADC BL,AL # MOV EAX,WinCRT.1001FDDC # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100049dd : # PUSH 5D000012 # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000600b : # STD # ADD DWORD PTR DS:[EAX],EDX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000600c : # ADD DWORD PTR DS:[EAX],EDX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000600d : # ADC BL,AL # MOV EAX,WinCRT.1001FDF8 # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10006010 : # CLC # STD # ADD DWORD PTR DS:[EAX],EDX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10006011 : # STD # ADD DWORD PTR DS:[EAX],EDX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10006012 : # ADD DWORD PTR DS:[EAX],EDX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10012018 : # CLC # PUSH DWORD PTR SS:[EBP-3F] # MOV EAX,EDI # POP EDI # POP ESI # POP EBP # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x10012019 : # PUSH DWORD PTR SS:[EBP-3F] # MOV EAX,EDI # POP EDI # POP ESI # POP EBP # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x1000c965 : # MOV EAX,DWORD PTR DS:[EAX] # MOV ECX,DWORD PTR SS:[EBP+8] # MOV DWORD PTR DS:[ECX],EAX # ADD DWORD PTR DS:[ESI+28],4 # MOV EAX,ESI # POP ESI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000c02a : # ADD DWORD PTR DS:[EBX+4D8B0846],ECX # ADC BYTE PTR DS:[ECX+5D5E5F01],CL # RETN 0x0C ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000c02c : # INC ESI # OR BYTE PTR DS:[EBX+189104D],CL # POP EDI # POP ESI # POP EBP # RETN 0x0C ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000c02d : # OR BYTE PTR DS:[EBX+189104D],CL # POP EDI # POP ESI # POP EBP # RETN 0x0C ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000c02f : # DEC EBP # ADC BYTE PTR DS:[ECX+5D5E5F01],CL # RETN 0x0C ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000c030 : # ADC BYTE PTR DS:[ECX+5D5E5F01],CL # RETN 0x0C ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1001e031 : # SUB EAX,83FFFF03 # ADD BYTE PTR ES:[ECX-7D],BL # ADD AL,0 # AND DWORD PTR DS:[ESI+8],0 # POP ESI # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1000c032 : # ADD DWORD PTR DS:[EDI+5E],EBX # POP EBP # RETN 0x0C ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1001e034 : # INC DWORD PTR DS:[EBX+83590026] # ADD AL,0 # AND DWORD PTR DS:[ESI+8],0 # POP ESI # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1001e035 : # AND DWORD PTR DS:[ESI],0 # POP ECX # AND DWORD PTR DS:[ESI+4],0 # AND DWORD PTR DS:[ESI+8],0 # POP ESI # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1001e036 : # ADD BYTE PTR ES:[ECX-7D],BL # ADD AL,0 # AND DWORD PTR DS:[ESI+8],0 # POP ESI # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1000c037 : # OR AL,0 # MOV EAX,WinCRT.10020954 # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000c038 : # ADD BYTE PTR DS:[EAX+10020954],BH # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1001e039 : # AND DWORD PTR DS:[ESI+4],0 # AND DWORD PTR DS:[ESI+8],0 # POP ESI # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1001e03a : # ADD AL,0 # AND DWORD PTR DS:[ESI+8],0 # POP ESI # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1001e03b : # ADD AL,0 # AND DWORD PTR DS:[ESI+8],0 # POP ESI # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1001e03c : # ADD BYTE PTR DS:[EBX+5E000866],AL # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1001e03d : # AND DWORD PTR DS:[ESI+8],0 # POP ESI # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1001e03e : # OR BYTE PTR DS:[EAX],AL # POP ESI # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1001e03f : # OR BYTE PTR DS:[EAX],AL # POP ESI # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1001e04b : # ADD BYTE PTR DS:[ESI-18],DL # ADC EDI,EDI # INC DWORD PTR DS:[EBX+C68B0CC4] # POP ESI # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1001e04e : # ADC EDI,EDI # INC DWORD PTR DS:[EBX+C68B0CC4] # POP ESI # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1001e04f : # ADC EDI,EDI # INC DWORD PTR DS:[EBX+C68B0CC4] # POP ESI # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1001e051 : # INC DWORD PTR DS:[EBX+C68B0CC4] # POP ESI # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1001a054 : # XCHG DWORD PTR DS:[EDX],EAX # ADC BYTE PTR DS:[ESI+ECX*8+5F],BH # XOR EAX,EAX # POP ESI # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10004056 : # MOV DWORD PTR DS:[10028FF0],EAX # POP ESI # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000c058 : # MOV DWORD PTR DS:[EAX+4],EDX # MOV DWORD PTR DS:[EAX+8],11 # MOV DWORD PTR DS:[EAX+C],EDX # MOV DWORD PTR DS:[EAX+10],EDX # MOV DWORD PTR DS:[EAX+14],EDX # MOV DWORD PTR DS:[EAX+18],ECX # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000c05b : # MOV DWORD PTR DS:[EAX+8],11 # MOV DWORD PTR DS:[EAX+C],EDX # MOV DWORD PTR DS:[EAX+10],EDX # MOV DWORD PTR DS:[EAX+14],EDX # MOV DWORD PTR DS:[EAX+18],ECX # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000605d : # OR BYTE PTR DS:[EBX+67E81CC1],AL # PUSHAD # ADD BYTE PTR DS:[EAX],AL # MOV ECX,DWORD PTR SS:[EBP+C] # MOV DWORD PTR DS:[EAX],ECX # POP EBP # RETN 0x08 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000c05e : # ADC DWORD PTR DS:[EAX],EAX # ADD BYTE PTR DS:[EAX],AL # MOV DWORD PTR DS:[EAX+C],EDX # MOV DWORD PTR DS:[EAX+10],EDX # MOV DWORD PTR DS:[EAX+14],EDX # MOV DWORD PTR DS:[EAX+18],ECX # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000c060 : # ADD BYTE PTR DS:[EAX],AL # MOV DWORD PTR DS:[EAX+C],EDX # MOV DWORD PTR DS:[EAX+10],EDX # MOV DWORD PTR DS:[EAX+14],EDX # MOV DWORD PTR DS:[EAX+18],ECX # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10006062 : # PUSHAD # ADD BYTE PTR DS:[EAX],AL # MOV ECX,DWORD PTR SS:[EBP+C] # MOV DWORD PTR DS:[EAX],ECX # POP EBP # RETN 0x08 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10006063 : # PUSHAD # ADD BYTE PTR DS:[EAX],AL # MOV ECX,DWORD PTR SS:[EBP+C] # MOV DWORD PTR DS:[EAX],ECX # POP EBP # RETN 0x08 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10006064 : # ADD BYTE PTR DS:[EAX],AL # MOV ECX,DWORD PTR SS:[EBP+C] # MOV DWORD PTR DS:[EAX],ECX # POP EBP # RETN 0x08 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10006065 : # ADD BYTE PTR DS:[EBX+8890C4D],CL # POP EBP # RETN 0x08 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000606d : # OR BYTE PTR DS:[EAX],AL # MOV EAX,ECX # XOR ECX,ECX # MOV DWORD PTR DS:[EAX],WinCRT.1001FE64 # MOV DWORD PTR DS:[EAX+4],ECX # MOV DWORD PTR DS:[EAX+8],ECX # MOV DWORD PTR DS:[EAX+C],ECX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000606f : # MOV EAX,ECX # XOR ECX,ECX # MOV DWORD PTR DS:[EAX],WinCRT.1001FE64 # MOV DWORD PTR DS:[EAX+4],ECX # MOV DWORD PTR DS:[EAX+8],ECX # MOV DWORD PTR DS:[EAX+C],ECX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10006071 : # XOR ECX,ECX # MOV DWORD PTR DS:[EAX],WinCRT.1001FE64 # MOV DWORD PTR DS:[EAX+4],ECX # MOV DWORD PTR DS:[EAX+8],ECX # MOV DWORD PTR DS:[EAX+C],ECX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10006073 : # MOV DWORD PTR DS:[EAX],WinCRT.1001FE64 # MOV DWORD PTR DS:[EAX+4],ECX # MOV DWORD PTR DS:[EAX+8],ECX # MOV DWORD PTR DS:[EAX+C],ECX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1001e076 : # MOV EAX,DWORD PTR SS:[EBP-14] # MOV EAX,DWORD PTR DS:[EAX] # MOV EAX,DWORD PTR DS:[EAX] # XOR ECX,ECX # CMP EAX,C0000017 # SETE CL # MOV EAX,ECX # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10006077 : # ADD DWORD PTR DS:[EAX],EDX # MOV DWORD PTR DS:[EAX+4],ECX # MOV DWORD PTR DS:[EAX+8],ECX # MOV DWORD PTR DS:[EAX+C],ECX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1001e079 : # MOV EAX,DWORD PTR DS:[EAX] # MOV EAX,DWORD PTR DS:[EAX] # XOR ECX,ECX # CMP EAX,C0000017 # SETE CL # MOV EAX,ECX # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1001e07b : # MOV EAX,DWORD PTR DS:[EAX] # XOR ECX,ECX # CMP EAX,C0000017 # SETE CL # MOV EAX,ECX # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1001e07d : # XOR ECX,ECX # CMP EAX,C0000017 # SETE CL # MOV EAX,ECX # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10008f8d : # ADD BYTE PTR DS:[EAX],AL # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1001e07f : # CMP EAX,C0000017 # SETE CL # MOV EAX,ECX # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1001e082 : # ADD AL,AL # SETE CL # MOV EAX,ECX # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1001e084 : # SETE CL # MOV EAX,ECX # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10018ac3 : # INC EBP # ADC BYTE PTR DS:[EBX],BH # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10006095 : # ADD DWORD PTR DS:[EAX],EDX # POP EBP # RETN 0x08 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10018ac4 : # ADC BYTE PTR DS:[EBX],BH # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x100060aa : # ADD DWORD PTR DS:[EAX],EDX # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1001e0b4 : # INC ESI # SUB AL,89 # INC ESI # XOR BYTE PTR DS:[ECX+C68B3446],CL # POP ESI # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1001e0b5 : # SUB AL,89 # INC ESI # XOR BYTE PTR DS:[ECX+C68B3446],CL # POP ESI # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1001e0b7 : # INC ESI # XOR BYTE PTR DS:[ECX+C68B3446],CL # POP ESI # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1000c0b8 : # MOV EAX,DWORD PTR DS:[ESI+10] # MOV ECX,DWORD PTR DS:[EAX] # INC DWORD PTR DS:[ESI+C] # MOV DWORD PTR DS:[ESI+10],ECX # AND DWORD PTR DS:[EAX+4],0 # AND DWORD PTR DS:[EAX+8],0 # POP ESI # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000c0b9 : # INC ESI # ADC BYTE PTR DS:[EBX+C46FF08],CL # MOV DWORD PTR DS:[ESI+10],ECX # AND DWORD PTR DS:[EAX+4],0 # AND DWORD PTR DS:[EAX+8],0 # POP ESI # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000c0ba : # ADC BYTE PTR DS:[EBX+C46FF08],CL # MOV DWORD PTR DS:[ESI+10],ECX # AND DWORD PTR DS:[EAX+4],0 # AND DWORD PTR DS:[EAX+8],0 # POP ESI # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000c0bb : # MOV ECX,DWORD PTR DS:[EAX] # INC DWORD PTR DS:[ESI+C] # MOV DWORD PTR DS:[ESI+10],ECX # AND DWORD PTR DS:[EAX+4],0 # AND DWORD PTR DS:[EAX+8],0 # POP ESI # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000c0bc : # OR BH,BH # INC ESI # OR AL,89 # DEC ESI # ADC BYTE PTR DS:[EBX+83000460],AL # PUSHAD # OR BYTE PTR DS:[EAX],AL # POP ESI # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000c0bd : # INC DWORD PTR DS:[ESI+C] # MOV DWORD PTR DS:[ESI+10],ECX # AND DWORD PTR DS:[EAX+4],0 # AND DWORD PTR DS:[EAX+8],0 # POP ESI # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000c0be : # INC ESI # OR AL,89 # DEC ESI # ADC BYTE PTR DS:[EBX+83000460],AL # PUSHAD # OR BYTE PTR DS:[EAX],AL # POP ESI # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000c0bf : # OR AL,89 # DEC ESI # ADC BYTE PTR DS:[EBX+83000460],AL # PUSHAD # OR BYTE PTR DS:[EAX],AL # POP ESI # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000c0c0 : # MOV DWORD PTR DS:[ESI+10],ECX # AND DWORD PTR DS:[EAX+4],0 # AND DWORD PTR DS:[EAX+8],0 # POP ESI # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000c0c1 : # DEC ESI # ADC BYTE PTR DS:[EBX+83000460],AL # PUSHAD # OR BYTE PTR DS:[EAX],AL # POP ESI # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000c0c2 : # ADC BYTE PTR DS:[EBX+83000460],AL # PUSHAD # OR BYTE PTR DS:[EAX],AL # POP ESI # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000c0c3 : # AND DWORD PTR DS:[EAX+4],0 # AND DWORD PTR DS:[EAX+8],0 # POP ESI # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000c0c4 : # PUSHAD # ADD AL,0 # AND DWORD PTR DS:[EAX+8],0 # POP ESI # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000c0c5 : # ADD AL,0 # AND DWORD PTR DS:[EAX+8],0 # POP ESI # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000c0c6 : # ADD BYTE PTR DS:[EBX+5E000860],AL # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000c0c7 : # AND DWORD PTR DS:[EAX+8],0 # POP ESI # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000c0c8 : # PUSHAD # OR BYTE PTR DS:[EAX],AL # POP ESI # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000c0c9 : # OR BYTE PTR DS:[EAX],AL # POP ESI # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1001a0d2 : # MOV BH,BH # DEC DWORD PTR DS:[EBX+48810C45] # OR AL,0 # ADD BYTE PTR DS:[EAX],0 # POP ECX # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1001a0d4 : # DEC DWORD PTR DS:[EBX+48810C45] # OR AL,0 # ADD BYTE PTR DS:[EAX],0 # POP ECX # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1001a0d5 : # MOV EAX,DWORD PTR SS:[EBP+C] # OR DWORD PTR DS:[EAX+C],8000 # POP ECX # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1001a0d6 : # INC EBP # OR AL,81 # DEC EAX # OR AL,0 # ADD BYTE PTR DS:[EAX],0 # POP ECX # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1001a0d7 : # OR AL,81 # DEC EAX # OR AL,0 # ADD BYTE PTR DS:[EAX],0 # POP ECX # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1001a0d8 : # OR DWORD PTR DS:[EAX+C],8000 # POP ECX # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1001a0d9 : # DEC EAX # OR AL,0 # ADD BYTE PTR DS:[EAX],0 # POP ECX # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1001a0da : # OR AL,0 # ADD BYTE PTR DS:[EAX],0 # POP ECX # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1001a0db : # ADD BYTE PTR DS:[EAX+5D590000],AL # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1001a0dc : # ADD BYTE PTR DS:[EAX],0 # POP ECX # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1001a0dd : # ADD BYTE PTR DS:[EAX],AL # POP ECX # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1001a0de : # ADD BYTE PTR DS:[ECX+5D],BL # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10012ad0 : # ADC BYTE PTR DS:[ESI+5E],BH # POP EBX # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x100040e4 : # PUSH 2 # POP EAX # POP EBP # RETN 0x08 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1001a0eb : # MOV AL,BYTE PTR DS:[5D1001F1] # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10007721 : # ADD EAX,DWORD PTR DS:[EAX] # SUB BL,8 # AND DWORD PTR DS:[EAX],0 # MOV EAX,80004001 # POP EBP # RETN 0x08 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1001a0ed : # ADD DWORD PTR DS:[EAX],EDX # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x100060ef : # ADD DWORD PTR DS:[EAX],EDX # POP EBP # RETN 0x1C ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100080f4 : # ADD BYTE PTR DS:[BX+SI],AL # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100080f5 : # ADD BYTE PTR DS:[EAX],AL # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10002108 : # XCHG BYTE PTR DS:[EAX],BL # ADD AL,BYTE PTR DS:[EAX] # ADD BYTE PTR DS:[EBX+C7A5E8C6],CL # ADD BYTE PTR DS:[EAX],AL # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000210a : # ADD BYTE PTR DS:[EAX],AL # ADD BYTE PTR DS:[EAX],AL # ADD AL,BYTE PTR DS:[EAX] # ADD BYTE PTR DS:[EBX+C7A5E8C6],CL # ADD BYTE PTR DS:[EAX],AL # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1001e10c : # POP ES # MOV BYTE PTR DS:[10028F00],1 # MOV EAX,ESI # POP ESI # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1001e10d : # MOV BYTE PTR DS:[10028F00],1 # MOV EAX,ESI # POP ESI # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1000210e : # ADD AL,BYTE PTR DS:[EAX] # ADD BYTE PTR DS:[EBX+C7A5E8C6],CL # ADD BYTE PTR DS:[EAX],AL # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1001e110 : # POP DWORD PTR DS:[EDX] # ADC BYTE PTR DS:[ECX],AL # MOV EAX,ESI # POP ESI # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1001e112 : # ADC BYTE PTR DS:[ECX],AL # MOV EAX,ESI # POP ESI # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1000a113 : # OR BH,BH # PUSH ESI # OR BYTE PTR DS:[ESI+5D],BL # RETN 0x10 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000a115 : # PUSH ESI # OR BYTE PTR DS:[ESI+5D],BL # RETN 0x10 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000a116 : # OR BYTE PTR DS:[ESI+5D],BL # RETN 0x10 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10016117 : # CLC # PUSH DWORD PTR SS:[EBP+3] # OR DWORD PTR DS:[ESI],EAX # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x10016118 : # PUSH DWORD PTR SS:[EBP+3] # OR DWORD PTR DS:[ESI],EAX # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x1001611b : # OR DWORD PTR DS:[ESI],EAX # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x1001611e : # INC DWORD PTR DS:[ESI] # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x1000e124 : # ADD BYTE PTR DS:[EAX],AL # POP ECX # XOR EAX,EAX # INC EAX # POP EDI # POP ESI # POP EBP # RETN 0x0C ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10018125 : # ADC AL,5D # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1001a127 : # TEST AL,0F1 # ADD DWORD PTR DS:[EAX],EDX # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1001a129 : # ADD DWORD PTR DS:[EAX],EDX # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1001e032 : # ADD EDI,EDI # INC DWORD PTR DS:[EBX+83590026] # ADD AL,0 # AND DWORD PTR DS:[ESI+8],0 # POP ESI # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10005033 : # ADD DWORD PTR DS:[EAX],EDX # POP ESI # POP EBX # POP EBP # RETN 0x08 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10008137 : # DEC DWORD PTR DS:[EBX+677EE8C6] # ADD BYTE PTR DS:[EAX],AL # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10005034 : # ADC BYTE PTR DS:[ESI+5B],BL # POP EBP # RETN 0x08 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000813c : # ADD BYTE PTR DS:[BX+SI],AL # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000813d : # ADD BYTE PTR DS:[EAX],AL # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10016141 : # ADD BYTE PTR DS:[EDI-19],BH # POP ESI # POP EBP # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x1001a143 : # INC DWORD PTR DS:[EBX+E85110C1] # MOV DWORD PTR DS:[ECX+5D59FFFF],ECX # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10006145 : # ADD DWORD PTR DS:[EAX],EDX # POP EBP # RETN 0x10 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1001a146 : # ADC BYTE PTR DS:[ECX-18],DL # MOV DWORD PTR DS:[ECX+5D59FFFF],ECX # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x100049f5 : # ADD DWORD PTR DS:[EAX],EDX # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1001e037 : # ADD BYTE PTR DS:[ECX-7D],BL # ADD AL,0 # AND DWORD PTR DS:[ESI+8],0 # POP ESI # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1001e038 : # POP ECX # AND DWORD PTR DS:[ESI+4],0 # AND DWORD PTR DS:[ESI+8],0 # POP ESI # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1001a156 : # TEST AL,0F1 # ADD DWORD PTR DS:[EAX],EDX # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1001a158 : # ADD DWORD PTR DS:[EAX],EDX # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1000c15b : # ADC BYTE PTR DS:[ECX+7E89087E],CL # ADD AL,0E8 # CMP ECX,DWORD PTR DS:[EAX+EAX] # ADD BYTE PTR DS:[ECX+5E5F147E],CL # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000c15e : # OR BYTE PTR DS:[ECX+3BE8047E],CL # OR AL,0 # ADD BYTE PTR DS:[ECX+5E5F147E],CL # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000c161 : # ADD AL,0E8 # CMP ECX,DWORD PTR DS:[EAX+EAX] # ADD BYTE PTR DS:[ECX+5E5F147E],CL # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000c163 : # CMP ECX,DWORD PTR DS:[EAX+EAX] # ADD BYTE PTR DS:[ECX+5E5F147E],CL # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000c164 : # OR AL,0 # ADD BYTE PTR DS:[ECX+5E5F147E],CL # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000c165 : # ADD BYTE PTR DS:[EAX],AL # MOV DWORD PTR DS:[ESI+14],EDI # POP EDI # POP ESI # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000c166 : # ADD BYTE PTR DS:[ECX+5E5F147E],CL # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000c169 : # ADC AL,5F # POP ESI # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000903e : # AND DWORD PTR DS:[ESI+20],0 # AND DWORD PTR DS:[ESI+50],0 # MOV EAX,EDI # POP EDI # POP ESI # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000a176 : # ADC AL,CH # MOV EDI,3BFFFFAE # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000903f : # AND BYTE PTR DS:[EAX],AL # AND DWORD PTR DS:[ESI+50],0 # MOV EAX,EDI # POP EDI # POP ESI # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1001aaea : # CMP BH,BH # INC DWORD PTR DS:[EBX+5D5E2CC4] # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10009040 : # AND BYTE PTR DS:[EAX],AL # AND DWORD PTR DS:[ESI+50],0 # MOV EAX,EDI # POP EDI # POP ESI # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10008185 : # DEC DWORD PTR DS:[EBX+6730E8C6] # ADD BYTE PTR DS:[EAX],AL # RETN 0x0C ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1001a189 : # INC EAX # ADC BYTE PTR DS:[ESI+5D],BL # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1001418a : # INC ESI # ADC AL,3B # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1000818b : # ADD BYTE PTR DS:[EAX],AL # RETN 0x0C ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10009042 : # AND DWORD PTR DS:[ESI+50],0 # MOV EAX,EDI # POP EDI # POP ESI # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1001a18e : # MOV EAX,DWORD PTR DS:[10027D00] # OR EAX,1 # XOR ECX,ECX # CMP DWORD PTR DS:[1002B83C],EAX # SETE CL # MOV EAX,ECX # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1001a18f : # ADD BYTE PTR SS:[EBP+2],BH # ADC BYTE PTR DS:[EBX+C93301C8],AL # CMP DWORD PTR DS:[1002B83C],EAX # SETE CL # MOV EAX,ECX # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1001a191 : # ADD DL,BYTE PTR DS:[EAX] # OR EAX,1 # XOR ECX,ECX # CMP DWORD PTR DS:[1002B83C],EAX # SETE CL # MOV EAX,ECX # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1001a192 : # ADC BYTE PTR DS:[EBX+C93301C8],AL # CMP DWORD PTR DS:[1002B83C],EAX # SETE CL # MOV EAX,ECX # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1001a193 : # OR EAX,1 # XOR ECX,ECX # CMP DWORD PTR DS:[1002B83C],EAX # SETE CL # MOV EAX,ECX # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1001a196 : # XOR ECX,ECX # CMP DWORD PTR DS:[1002B83C],EAX # SETE CL # MOV EAX,ECX # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1001a198 : # CMP DWORD PTR DS:[1002B83C],EAX # SETE CL # MOV EAX,ECX # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1001a199 : # ADD EAX,WinCRT.1002B83C # SETE CL # MOV EAX,ECX # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1001a19a : # CMP AL,0B8 # ADD DL,BYTE PTR DS:[EAX] # SETE CL # MOV EAX,ECX # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1001a19c : # ADD DL,BYTE PTR DS:[EAX] # SETE CL # MOV EAX,ECX # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1001a19e : # SETE CL # MOV EAX,ECX # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10017832 : # IMUL EDI,EDI,-1 # POP ECX # POP EDI # POP ESI # POP EBX # POP EBP # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x100061b6 : # ADD DWORD PTR DS:[EAX],EDX # POP EBP # RETN 0x10 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1001a1c0 : # INC EBP # OR BYTE PTR DS:[EBX],BH # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1001a1c1 : # OR BYTE PTR DS:[EBX],BH # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1001904d : # ADC BYTE PTR DS:[EBX],BH # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1001a1d0 : # INC EBP # OR BYTE PTR DS:[EBX],BH # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1001a1d1 : # OR BYTE PTR DS:[EBX],BH # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1001e1d5 : # INC EBP # OR AL,2B # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1001e1d6 : # OR AL,2B # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1000caf9 : # INC DWORD PTR DS:[EBX+5E0110C4] # SUB BYTE PTR DS:[EDI+5E],BL # POP EBX # POP EBP # RETN 0x08 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000c1df : # PUSH 40 # POP EDX # AND DWORD PTR DS:[EAX+C],0 # AND DWORD PTR DS:[EAX+8],0 # MOV DWORD PTR DS:[EAX],ECX # MOV DWORD PTR DS:[EAX+4],EDX # POP EBP # RETN 0x08 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000c1e0 : # INC EAX # POP EDX # AND DWORD PTR DS:[EAX+C],0 # AND DWORD PTR DS:[EAX+8],0 # MOV DWORD PTR DS:[EAX],ECX # MOV DWORD PTR DS:[EAX+4],EDX # POP EBP # RETN 0x08 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000c1e1 : # POP EDX # AND DWORD PTR DS:[EAX+C],0 # AND DWORD PTR DS:[EAX+8],0 # MOV DWORD PTR DS:[EAX],ECX # MOV DWORD PTR DS:[EAX+4],EDX # POP EBP # RETN 0x08 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000c1e2 : # AND DWORD PTR DS:[EAX+C],0 # AND DWORD PTR DS:[EAX+8],0 # MOV DWORD PTR DS:[EAX],ECX # MOV DWORD PTR DS:[EAX+4],EDX # POP EBP # RETN 0x08 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000c1e3 : # PUSHAD # OR AL,0 # AND DWORD PTR DS:[EAX+8],0 # MOV DWORD PTR DS:[EAX],ECX # MOV DWORD PTR DS:[EAX+4],EDX # POP EBP # RETN 0x08 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000c1e4 : # OR AL,0 # AND DWORD PTR DS:[EAX+8],0 # MOV DWORD PTR DS:[EAX],ECX # MOV DWORD PTR DS:[EAX+4],EDX # POP EBP # RETN 0x08 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100181e5 : # FIADD DWORD PTR DS:[EAX] # MOV ECX,EDX # MOV EDX,EBX # MOV EBX,ECX # MOV ECX,EAX # MOV EAX,ESI # POP ESI # RETN 0x10 ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1000c1e6 : # AND DWORD PTR DS:[EAX+8],0 # MOV DWORD PTR DS:[EAX],ECX # MOV DWORD PTR DS:[EAX+4],EDX # POP EBP # RETN 0x08 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000c1e7 : # PUSHAD # OR BYTE PTR DS:[EAX],AL # MOV DWORD PTR DS:[EAX],ECX # MOV DWORD PTR DS:[EAX+4],EDX # POP EBP # RETN 0x08 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000c1e8 : # OR BYTE PTR DS:[EAX],AL # MOV DWORD PTR DS:[EAX],ECX # MOV DWORD PTR DS:[EAX+4],EDX # POP EBP # RETN 0x08 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000c1e9 : # ADD BYTE PTR DS:[ECX+4508908],CL # POP EBP # RETN 0x08 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100061f1 : # XLAT BYTE PTR DS:[EBX+AL] # MOV EAX,DWORD PTR SS:[EBP+8] # POP EDI # POP ESI # POP EBP # RETN 0x0C ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100061f3 : # INC EBP # OR BYTE PTR DS:[EDI+5E],BL # POP EBP # RETN 0x0C ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100061f4 : # OR BYTE PTR DS:[EDI+5E],BL # POP EBP # RETN 0x0C ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000cafe : # POP ESI # SUB BYTE PTR DS:[EDI+5E],BL # POP EBX # POP EBP # RETN 0x08 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100055a9 : # CMP DWORD PTR DS:[EBX+10],EAX # POP ESI # SETNE AL # POP EBX # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100141f8 : # INC ESI # ADC AL,3B # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1000c1f9 : # DEC ESI # OR AL,CH # MOV BYTE PTR DS:[8300000B],AL # OR BYTE PTR DS:[EAX],AL # AND DWORD PTR DS:[ESI+C],0 # POP ESI # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000c1fa : # OR AL,CH # MOV BYTE PTR DS:[8300000B],AL # OR BYTE PTR DS:[EAX],AL # AND DWORD PTR DS:[ESI+C],0 # POP ESI # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000c1fc : # MOV BYTE PTR DS:[8300000B],AL # OR BYTE PTR DS:[EAX],AL # AND DWORD PTR DS:[ESI+C],0 # POP ESI # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000c1fd : # OR EAX,DWORD PTR DS:[EAX] # ADD BYTE PTR DS:[EBX+83000866],AL # OR AL,0 # POP ESI # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000c1fe : # ADD BYTE PTR DS:[EAX],AL # AND DWORD PTR DS:[ESI+8],0 # AND DWORD PTR DS:[ESI+C],0 # POP ESI # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000c1ff : # ADD BYTE PTR DS:[EBX+83000866],AL # OR AL,0 # POP ESI # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000c200 : # AND DWORD PTR DS:[ESI+8],0 # AND DWORD PTR DS:[ESI+C],0 # POP ESI # RETN ** [WinCRT.dll] ** | null,unicodereverse {PAGE_EXECUTE_READ}
0x1000c201 : # OR BYTE PTR DS:[EAX],AL # AND DWORD PTR DS:[ESI+C],0 # POP ESI # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000c202 : # OR BYTE PTR DS:[EAX],AL # AND DWORD PTR DS:[ESI+C],0 # POP ESI # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000c203 : # ADD BYTE PTR DS:[EBX+5E000C66],AL # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000c204 : # AND DWORD PTR DS:[ESI+C],0 # POP ESI # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000c205 : # OR AL,0 # POP ESI # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000c206 : # OR AL,0 # POP ESI # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000e207 : # OR BYTE PTR DS:[EBX+E8515009],CL # INS DWORD PTR ES:[EDI],DX # INC EDI # ADD BYTE PTR DS:[EAX],AL # POP ECX # POP ECX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000e20d : # INS DWORD PTR ES:[EDI],DX # INC EDI # ADD BYTE PTR DS:[EAX],AL # POP ECX # POP ECX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000e20e : # INC EDI # ADD BYTE PTR DS:[EAX],AL # POP ECX # POP ECX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000e20f : # ADD BYTE PTR DS:[EAX],AL # POP ECX # POP ECX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000e210 : # ADD BYTE PTR DS:[ECX+59],BL # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10004211 : # OR CL,BYTE PTR DS:[EBX+51FF5008] # OR BYTE PTR DS:[EBX+5E000866],AL # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10004213 : # OR BYTE PTR DS:[EAX-1],DL # PUSH ECX # OR BYTE PTR DS:[EBX+5E000866],AL # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10004216 : # PUSH ECX # OR BYTE PTR DS:[EBX+5E000866],AL # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10004217 : # OR BYTE PTR DS:[EBX+5E000866],AL # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10004218 : # AND DWORD PTR DS:[ESI+8],0 # POP ESI # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10004219 : # OR BYTE PTR DS:[EAX],AL # POP ESI # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000421a : # OR BYTE PTR DS:[EAX],AL # POP ESI # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000421b : # ADD BYTE PTR DS:[ESI-3D],BL # MOV EAX,DWORD PTR DS:[10028FF4] # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000e221 : # NOP # DAA # ADD BYTE PTR DS:[EAX],AL # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000e222 : # DAA # ADD BYTE PTR DS:[EAX],AL # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000e223 : # ADD BYTE PTR DS:[EAX],AL # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10004226 : # XOR EDX,EDX # XOR ECX,ECX # MOV DWORD PTR DS:[EAX],WinCRT.1001FB50 # MOV DWORD PTR DS:[EAX+34],EDX # MOV DWORD PTR DS:[EAX+54],EDX # MOV DWORD PTR DS:[EAX+4C],ECX # MOV DWORD PTR DS:[EAX+50],EDX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10004228 : # XOR ECX,ECX # MOV DWORD PTR DS:[EAX],WinCRT.1001FB50 # MOV DWORD PTR DS:[EAX+34],EDX # MOV DWORD PTR DS:[EAX+54],EDX # MOV DWORD PTR DS:[EAX+4C],ECX # MOV DWORD PTR DS:[EAX+50],EDX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000422a : # MOV DWORD PTR DS:[EAX],WinCRT.1001FB50 # MOV DWORD PTR DS:[EAX+34],EDX # MOV DWORD PTR DS:[EAX+54],EDX # MOV DWORD PTR DS:[EAX+4C],ECX # MOV DWORD PTR DS:[EAX+50],EDX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000422b : # ADD BYTE PTR DS:[EAX-5],DL # ADD DWORD PTR DS:[EAX],EDX # MOV DWORD PTR DS:[EAX+34],EDX # MOV DWORD PTR DS:[EAX+54],EDX # MOV DWORD PTR DS:[EAX+4C],ECX # MOV DWORD PTR DS:[EAX+50],EDX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000422c : # PUSH EAX # STI # ADD DWORD PTR DS:[EAX],EDX # MOV DWORD PTR DS:[EAX+34],EDX # MOV DWORD PTR DS:[EAX+54],EDX # MOV DWORD PTR DS:[EAX+4C],ECX # MOV DWORD PTR DS:[EAX+50],EDX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000422d : # STI # ADD DWORD PTR DS:[EAX],EDX # MOV DWORD PTR DS:[EAX+34],EDX # MOV DWORD PTR DS:[EAX+54],EDX # MOV DWORD PTR DS:[EAX+4C],ECX # MOV DWORD PTR DS:[EAX+50],EDX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000422e : # ADD DWORD PTR DS:[EAX],EDX # MOV DWORD PTR DS:[EAX+34],EDX # MOV DWORD PTR DS:[EAX+54],EDX # MOV DWORD PTR DS:[EAX+4C],ECX # MOV DWORD PTR DS:[EAX+50],EDX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000422f : # ADC BYTE PTR DS:[ECX+50893450],CL # PUSH ESP # MOV DWORD PTR DS:[EAX+4C],ECX # MOV DWORD PTR DS:[EAX+50],EDX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10006230 : # XLAT BYTE PTR DS:[EBX+AL] # MOV EAX,DWORD PTR SS:[EBP+8] # POP EDI # POP ESI # POP EBP # RETN 0x0C ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10004231 : # PUSH EAX # XOR AL,89 # PUSH EAX # PUSH ESP # MOV DWORD PTR DS:[EAX+4C],ECX # MOV DWORD PTR DS:[EAX+50],EDX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10006232 : # INC EBP # OR BYTE PTR DS:[EDI+5E],BL # POP EBP # RETN 0x0C ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10006233 : # OR BYTE PTR DS:[EDI+5E],BL # POP EBP # RETN 0x0C ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10008234 : # ADD BYTE PTR DS:[EAX],AL # RETN 0x08 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10008235 : # ADD BYTE PTR DS:[EAX],AL # RETN 0x08 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000c24d : # DEC ESI # OR AL,5E # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000c24e : # OR AL,5E # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000d530 : # MOV DWORD PTR DS:[EBX],EDX # ADD BYTE PTR DS:[EAX],AL # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000c251 : # MOV EDI,EDI # PUSH EBP # MOV EBP,ESP # XOR EAX,EAX # CMP DWORD PTR SS:[EBP+8],EAX # SETNE AL # POP EBP # RETN 0x08 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000c253 : # PUSH EBP # MOV EBP,ESP # XOR EAX,EAX # CMP DWORD PTR SS:[EBP+8],EAX # SETNE AL # POP EBP # RETN 0x08 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000c254 : # MOV EBP,ESP # XOR EAX,EAX # CMP DWORD PTR SS:[EBP+8],EAX # SETNE AL # POP EBP # RETN 0x08 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000c256 : # XOR EAX,EAX # CMP DWORD PTR SS:[EBP+8],EAX # SETNE AL # POP EBP # RETN 0x08 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000c258 : # CMP DWORD PTR SS:[EBP+8],EAX # SETNE AL # POP EBP # RETN 0x08 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000c25b : # SETNE AL # POP EBP # RETN 0x08 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10014260 : # INC DWORD PTR DS:[EAX+EAX*8+83460D75] # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x1000c264 : # ADD BYTE PTR DS:[EAX+10020988],BH # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000c266 : # MOV BYTE PTR DS:[ECX],CL # ADD DL,BYTE PTR DS:[EAX] # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000426d : # MOV AL,BYTE PTR DS:[5F590000] # POP ESI # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000426e : # ADD BYTE PTR DS:[EAX],AL # POP ECX # POP EDI # POP ESI # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000626f : # XLAT BYTE PTR DS:[EBX+AL] # MOV EAX,DWORD PTR SS:[EBP+8] # POP EDI # POP ESI # POP EBP # RETN 0x0C ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10006271 : # INC EBP # OR BYTE PTR DS:[EDI+5E],BL # POP EBP # RETN 0x0C ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10006272 : # OR BYTE PTR DS:[EDI+5E],BL # POP EBP # RETN 0x0C ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000c276 : # OR EAX,EDI # ADD BYTE PTR DS:[EAX+83100209],CH # PUSHAD # ADD AL,0 # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000c277 : # MOV DWORD PTR DS:[EAX],WinCRT.100209A8 # AND DWORD PTR DS:[EAX+4],0 # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000c278 : # ADD BYTE PTR DS:[EAX+83100209],CH # PUSHAD # ADD AL,0 # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000c279 : # TEST AL,9 # ADD DL,BYTE PTR DS:[EAX] # AND DWORD PTR DS:[EAX+4],0 # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000c27a : # OR DWORD PTR DS:[EDX],EAX # ADC BYTE PTR DS:[EBX+C3000460],AL # XOR EAX,EAX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000c27b : # ADD DL,BYTE PTR DS:[EAX] # AND DWORD PTR DS:[EAX+4],0 # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000c27c : # ADC BYTE PTR DS:[EBX+C3000460],AL # XOR EAX,EAX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000c27d : # AND DWORD PTR DS:[EAX+4],0 # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10008282 : # ADD BYTE PTR DS:[EAX],AL # RETN 0x08 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000e283 : # ADD BYTE PTR DS:[EAX],AL # ADD BYTE PTR DS:[EBX+27E8E445],CL # DAA # ADD BYTE PTR DS:[EAX],AL # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000e285 : # ADD BYTE PTR DS:[EBX+27E8E445],CL # DAA # ADD BYTE PTR DS:[EAX],AL # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000e28a : # DAA # DAA # ADD BYTE PTR DS:[EAX],AL # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000e28b : # DAA # ADD BYTE PTR DS:[EAX],AL # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000e28c : # ADD BYTE PTR DS:[EAX],AL # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1001a28e : # INC EBP # OR BYTE PTR DS:[EBX],BH # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1001428f : # ADC BYTE PTR SS:[EBP+E850D445],CL # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1000e290 : # ADD AL,0E8 # INC EAX # DEC EAX # ADD BYTE PTR DS:[EAX],AL # POP ECX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000c291 : # AND DWORD PTR DS:[EAX+4],0 # MOV DWORD PTR DS:[EAX],WinCRT.100209A8 # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000e292 : # INC EAX # DEC EAX # ADD BYTE PTR DS:[EAX],AL # POP ECX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000e293 : # DEC EAX # ADD BYTE PTR DS:[EAX],AL # POP ECX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000e294 : # ADD BYTE PTR DS:[EAX],AL # POP ECX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000c295 : # MOV DWORD PTR DS:[EAX],WinCRT.100209A8 # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000c296 : # ADD BYTE PTR DS:[EAX+5D100209],CH # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10001123 : # MOV DWORD PTR DS:[10028F08],EAX # MOV EAX,1 # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100142b4 : # INC ESI # ADC AL,3B # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x100142b5 : # ADC AL,3B # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10008dcf : # AND DL,DH # ADD DWORD PTR DS:[EAX],EDX # MOV DWORD PTR DS:[ESI+14],EAX # MOV ECX,DWORD PTR DS:[ESI+14] # MOV EAX,DWORD PTR SS:[EBP+8] # MOV DWORD PTR DS:[EAX],ECX # POP ESI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100062ba : # XLAT BYTE PTR DS:[EBX+AL] # MOV EAX,DWORD PTR SS:[EBP+8] # POP EDI # POP ESI # POP EBP # RETN 0x14 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100062bc : # INC EBP # OR BYTE PTR DS:[EDI+5E],BL # POP EBP # RETN 0x14 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100062bd : # OR BYTE PTR DS:[EDI+5E],BL # POP EBP # RETN 0x14 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100122be : # ADC BYTE PTR DS:[ESI+EDI*4+5F],BH # POP ESI # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1001a2c8 : # ADC BYTE PTR DS:[EBX],BH # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x100082d7 : # DEC DWORD PTR DS:[EBX+65DEE8C6] # ADD BYTE PTR DS:[EAX],AL # RETN 0x18 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100082dc : # ADD BYTE PTR GS:[EAX],AL # RETN 0x18 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100082dd : # ADD BYTE PTR DS:[EAX],AL # RETN 0x18 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10001125 : # POP DWORD PTR DS:[EDX] # ADC BYTE PTR DS:[EAX+1],BH # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100062f9 : # XLAT BYTE PTR DS:[EBX+AL] # MOV EAX,DWORD PTR SS:[EBP+8] # POP EDI # POP ESI # POP EBP # RETN 0x0C ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100062fb : # INC EBP # OR BYTE PTR DS:[EDI+5E],BL # POP EBP # RETN 0x0C ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100062fc : # OR BYTE PTR DS:[EDI+5E],BL # POP EBP # RETN 0x0C ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000c30e : # ADD BYTE PTR DS:[EAX],AL # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000c8a0 : # INC ESI # SUB BYTE PTR DS:[EDX],AL # MOV EAX,ESI # POP ESI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000431a : # ADD DWORD PTR DS:[EDI-1],EDX # PUSH EAX # ADD AL,5F # POP ESI # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1001a32a : # ADC AL,5D # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10008331 : # DEC DWORD PTR DS:[EBX+6584E8C6] # ADD BYTE PTR DS:[EAX],AL # RETN 0x18 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10008336 : # ADD BYTE PTR GS:[EAX],AL # RETN 0x18 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10008337 : # ADD BYTE PTR DS:[EAX],AL # RETN 0x18 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10004338 : # PUSH ES # ADD BYTE PTR DS:[EAX],AL # MOV EAX,ESI # POP ESI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10004339 : # ADD BYTE PTR DS:[EAX],AL # MOV EAX,ESI # POP ESI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000e344 : # XOR BYTE PTR DS:[EDI-75],BL # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10018345 : # OR AL,0C9 # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10006346 : # INC EBP # OR BYTE PTR DS:[EDI+5E],BL # POP EBP # RETN 0x14 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10006347 : # OR BYTE PTR DS:[EDI+5E],BL # POP EBP # RETN 0x14 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000434c : # MOV DWORD PTR DS:[EAX+8],ECX # MOV DWORD PTR DS:[EAX+C],ECX # OR DWORD PTR DS:[EAX+44],FFFFFFFF # OR DWORD PTR DS:[EAX+4C],FFFFFFFF # MOV DWORD PTR DS:[EAX+48],ECX # MOV DWORD PTR DS:[EAX+C],6C # MOV DWORD PTR DS:[EAX+28],WinCRT.10001244 # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000434d : # DEC EAX # OR BYTE PTR DS:[ECX+48830C48],CL # INC ESP # INC DWORD PTR DS:[EBX+89FF4C48] # DEC EAX # DEC EAX # MOV DWORD PTR DS:[EAX+C],6C # MOV DWORD PTR DS:[EAX+28],WinCRT.10001244 # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000234e : # ADD BYTE PTR DS:[EDI],CL # MOV BH,86 # NOP # ADD BYTE PTR DS:[EAX],AL # ADD BYTE PTR DS:[ESI+3B],AH # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000434f : # MOV DWORD PTR DS:[EAX+C],ECX # OR DWORD PTR DS:[EAX+44],FFFFFFFF # OR DWORD PTR DS:[EAX+4C],FFFFFFFF # MOV DWORD PTR DS:[EAX+48],ECX # MOV DWORD PTR DS:[EAX+C],6C # MOV DWORD PTR DS:[EAX+28],WinCRT.10001244 # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10002350 : # MOV BH,86 # NOP # ADD BYTE PTR DS:[EAX],AL # ADD BYTE PTR DS:[ESI+3B],AH # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10004351 : # OR AL,83 # DEC EAX # INC ESP # INC DWORD PTR DS:[EBX+89FF4C48] # DEC EAX # DEC EAX # MOV DWORD PTR DS:[EAX+C],6C # MOV DWORD PTR DS:[EAX+28],WinCRT.10001244 # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10002352 : # NOP # ADD BYTE PTR DS:[EAX],AL # ADD BYTE PTR DS:[ESI+3B],AH # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10002353 : # ADD BYTE PTR DS:[EAX],AL # ADD BYTE PTR DS:[ESI+3B],AH # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000e354 : # OR EAX,0C70000 # OR AL,0 # ADD BYTE PTR DS:[EAX],AL # XOR EAX,EAX # POP ESI # POP EBP # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000e355 : # ADD BYTE PTR DS:[EAX],AL # MOV DWORD PTR DS:[EAX],0C # XOR EAX,EAX # POP ESI # POP EBP # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000e356 : # ADD BH,AL # ADD BYTE PTR DS:[EAX+EAX],CL # ADD BYTE PTR DS:[EAX],AL # XOR EAX,EAX # POP ESI # POP EBP # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000e357 : # MOV DWORD PTR DS:[EAX],0C # XOR EAX,EAX # POP ESI # POP EBP # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000e358 : # ADD BYTE PTR DS:[EAX+EAX],CL # ADD BYTE PTR DS:[EAX],AL # XOR EAX,EAX # POP ESI # POP EBP # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000e359 : # OR AL,0 # ADD BYTE PTR DS:[EAX],AL # XOR EAX,EAX # POP ESI # POP EBP # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000435a : # MOV DWORD PTR DS:[EAX+48],ECX # MOV DWORD PTR DS:[EAX+C],6C # MOV DWORD PTR DS:[EAX+28],WinCRT.10001244 # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000435b : # DEC EAX # DEC EAX # MOV DWORD PTR DS:[EAX+C],6C # MOV DWORD PTR DS:[EAX+28],WinCRT.10001244 # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000435c : # DEC EAX # MOV DWORD PTR DS:[EAX+C],6C # MOV DWORD PTR DS:[EAX+28],WinCRT.10001244 # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000435d : # MOV DWORD PTR DS:[EAX+C],6C # MOV DWORD PTR DS:[EAX+28],WinCRT.10001244 # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1001835e : # LES EDX,FWORD PTR DS:[EAX] # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10006360 : # ADD DWORD PTR DS:[EAX],EDX # MOV DWORD PTR DS:[EAX+4],ECX # MOV DWORD PTR DS:[EAX+8],ECX # MOV DWORD PTR DS:[EAX+C],ECX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10002361 : # ADC BYTE PTR DS:[EDI],CL # MOV BH,86 # XCHG EAX,EDX # ADD BYTE PTR DS:[EAX],AL # ADD BYTE PTR DS:[ESI+3B],AH # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10004362 : # ADD BYTE PTR DS:[EAX],AL # MOV DWORD PTR DS:[EAX+28],WinCRT.10001244 # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10002363 : # MOV BH,86 # XCHG EAX,EDX # ADD BYTE PTR DS:[EAX],AL # ADD BYTE PTR DS:[ESI+3B],AH # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10004364 : # MOV DWORD PTR DS:[EAX+28],WinCRT.10001244 # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10002365 : # XCHG EAX,EDX # ADD BYTE PTR DS:[EAX],AL # ADD BYTE PTR DS:[ESI+3B],AH # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10002366 : # ADD BYTE PTR DS:[EAX],AL # ADD BYTE PTR DS:[ESI+3B],AH # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10002368 : # ADD BYTE PTR DS:[ESI+3B],AH # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10004369 : # ADD BYTE PTR DS:[EAX],DL # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000636a : # OR AL,0C3 # XOR EAX,EAX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000c36b : # AND DWORD PTR DS:[ESI+4],0 # MOV EAX,EDI # POP EDI # POP ESI # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1001a36e : # OR AL,CH # MOV ECX,59FFFFFF # POP ECX # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10012377 : # AND DWORD PTR DS:[EDI],0 # MOV DWORD PTR DS:[1002CA00],1 # XOR EAX,EAX # POP ECX # POP EBX # POP EDI # POP ESI # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x10012378 : # DAA # ADD BH,AL # ADD EAX,WinCRT.1002CA00 # ADD DWORD PTR DS:[EAX],EAX # ADD BYTE PTR DS:[EAX],AL # XOR EAX,EAX # POP ECX # POP EBX # POP EDI # POP ESI # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x10012379 : # ADD BH,AL # ADD EAX,WinCRT.1002CA00 # ADD DWORD PTR DS:[EAX],EAX # ADD BYTE PTR DS:[EAX],AL # XOR EAX,EAX # POP ECX # POP EBX # POP EDI # POP ESI # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x1000637a : # OR EAX,EDI # ADD BYTE PTR DS:[EAX-2],DL # ADD DWORD PTR DS:[EAX],EDX # AND DWORD PTR DS:[EAX+4],0 # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1001237b : # ADD EAX,WinCRT.1002CA00 # ADD DWORD PTR DS:[EAX],EAX # ADD BYTE PTR DS:[EAX],AL # XOR EAX,EAX # POP ECX # POP EBX # POP EDI # POP ESI # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x1001237c : # ADD DL,CL # ADD DL,BYTE PTR DS:[EAX] # ADD DWORD PTR DS:[EAX],EAX # ADD BYTE PTR DS:[EAX],AL # XOR EAX,EAX # POP ECX # POP EBX # POP EDI # POP ESI # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x1000637d : # PUSH EAX # INC BYTE PTR DS:[ECX] # ADC BYTE PTR DS:[EBX+C3000460],AL # XOR EAX,EAX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000637e : # INC BYTE PTR DS:[ECX] # ADC BYTE PTR DS:[EBX+C3000460],AL # XOR EAX,EAX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000637f : # ADD DWORD PTR DS:[EAX],EDX # AND DWORD PTR DS:[EAX+4],0 # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10006380 : # ADC BYTE PTR DS:[EBX+C3000460],AL # XOR EAX,EAX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10006381 : # AND DWORD PTR DS:[EAX+4],0 # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10012382 : # ADD BYTE PTR DS:[EAX],AL # XOR EAX,EAX # POP ECX # POP EBX # POP EDI # POP ESI # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10004383 : # ADD BYTE PTR DS:[EAX],AL # MOV EAX,ESI # POP ESI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000c387 : # ADD DWORD PTR DS:[EAX],EDX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000838b : # DEC DWORD PTR DS:[EBX+652AE8C6] # ADD BYTE PTR DS:[EAX],AL # RETN 0x18 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10008390 : # ADD BYTE PTR GS:[EAX],AL # RETN 0x18 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10017098 : # OR BYTE PTR DS:[EAX+754E4010],CL # NEG DWORD PTR DS:[EDI+5E] # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10006397 : # MOV DWORD PTR DS:[EAX],WinCRT.1001FE64 # MOV DWORD PTR DS:[EAX+4],ECX # MOV DWORD PTR DS:[EAX+8],ECX # MOV DWORD PTR DS:[EAX+C],ECX # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000639b : # ADD DWORD PTR DS:[EAX],EDX # MOV DWORD PTR DS:[EAX+4],ECX # MOV DWORD PTR DS:[EAX+8],ECX # MOV DWORD PTR DS:[EAX+C],ECX # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100043a2 : # ADD BYTE PTR DS:[EAX],AL # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100063a4 : # DEC EAX # OR AL,5D # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100063a5 : # OR AL,5D # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100063b0 : # INC EBP # OR BYTE PTR SS:[EBP+830A74C0],AL # PUSHAD # ADD AL,0 # MOV DWORD PTR DS:[EAX],WinCRT.1001FE50 # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100063b1 : # OR BYTE PTR SS:[EBP+830A74C0],AL # PUSHAD # ADD AL,0 # MOV DWORD PTR DS:[EAX],WinCRT.1001FE50 # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100063b5 : # OR AL,BYTE PTR DS:[EBX+C7000460] # ADD BYTE PTR DS:[EAX-2],DL # ADD DWORD PTR DS:[EAX],EDX # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100063b6 : # AND DWORD PTR DS:[EAX+4],0 # MOV DWORD PTR DS:[EAX],WinCRT.1001FE50 # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100063b7 : # PUSHAD # ADD AL,0 # MOV DWORD PTR DS:[EAX],WinCRT.1001FE50 # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100063b8 : # ADD AL,0 # MOV DWORD PTR DS:[EAX],WinCRT.1001FE50 # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000e3b9 : # ADD AL,0E8 # POP SS # INC EDI # ADD BYTE PTR DS:[EAX],AL # POP ECX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100063ba : # MOV DWORD PTR DS:[EAX],WinCRT.1001FE50 # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000e3bb : # POP SS # INC EDI # ADD BYTE PTR DS:[EAX],AL # POP ECX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000e3bc : # INC EDI # ADD BYTE PTR DS:[EAX],AL # POP ECX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000e3bd : # ADD BYTE PTR DS:[EAX],AL # POP ECX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100063be : # ADD DWORD PTR DS:[EAX],EDX # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000ccb6 : # OR AL,CH # OR EBX,DWORD PTR DS:[EAX-1] # DEC DWORD PTR DS:[EBX+1BFAE8C6] # ADD BYTE PTR DS:[EAX],AL # RETN 0x08 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10001b4d : # OR BYTE PTR DS:[EBX+7C50FFCE],CL # POP EDI # POP ESI # POP EBP # RETN 0x08 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000a3d9 : # OR EAX,3B0C408B # INC ECX # OR AL,75 # ADD EAX,5D40C033 # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000a3db : # INC EAX # OR AL,3B # INC ECX # OR AL,75 # ADD EAX,5D40C033 # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000a3dc : # OR AL,3B # INC ECX # OR AL,75 # ADD EAX,5D40C033 # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000a3de : # INC ECX # OR AL,75 # ADD EAX,5D40C033 # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000a3df : # OR AL,75 # ADD EAX,5D40C033 # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100083e5 : # DEC DWORD PTR DS:[EBX+64D0E8C6] # ADD BYTE PTR DS:[EAX],AL # RETN 0x18 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100083eb : # ADD BYTE PTR DS:[EAX],AL # RETN 0x18 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000e3ed : # ADD BYTE PTR DS:[EAX],AL # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000a3ee : # OR BYTE PTR DS:[EAX],AL # MOV EAX,80004001 # RETN 0x08 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000a3ef : # ADD BYTE PTR DS:[EAX+80004001],BH # RETN 0x08 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100030a9 : # POP ESI # ADD BYTE PTR DS:[EAX],AL # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000a3fb : # ADD BYTE PTR SS:[EBP+3],DH # XOR EAX,EAX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1001a403 : # ADD DWORD PTR DS:[EAX],EAX # ADD BYTE PTR DS:[EBX],BH # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1001a405 : # ADD BYTE PTR DS:[EBX],BH # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1000c406 : # OR AL,8B # INC ECX # ADD AL,3 # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10014c97 : # XOR ECX,ECX # CMP EAX,C0000017 # SETE CL # MOV EAX,ECX # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10006433 : # ADD BYTE PTR DS:[EAX],AL # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000843f : # DEC DWORD PTR DS:[EBX+6476E8C6] # ADD BYTE PTR DS:[EAX],AL # RETN 0x18 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10004445 : # ADD BYTE PTR DS:[EAX],AL # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1001a0b8 : # MOV AL,BYTE PTR DS:[5E1001F1] # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1000ccbb : # DEC DWORD PTR DS:[EBX+1BFAE8C6] # ADD BYTE PTR DS:[EAX],AL # RETN 0x08 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000c458 : # PUSH DWORD PTR SS:[EBP-3C] # XOR EAX,EAX # POP EDI # POP ESI # POP EBX # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1001a0ba : # ADD DWORD PTR DS:[EAX],EDX # POP ESI # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10004460 : # INC DWORD PTR DS:[EBX+C6000466] # INC ESI # OR BYTE PTR DS:[EAX],AL # MOV EAX,ESI # POP ESI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10004461 : # AND DWORD PTR DS:[ESI+4],0 # MOV BYTE PTR DS:[ESI+8],0 # MOV EAX,ESI # POP ESI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10004462 : # ADD AL,0 # MOV BYTE PTR DS:[ESI+8],0 # MOV EAX,ESI # POP ESI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1001a0bb : # ADC BYTE PTR DS:[ESI+5D],BL # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10004464 : # ADD DH,AL # INC ESI # OR BYTE PTR DS:[EAX],AL # MOV EAX,ESI # POP ESI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10004465 : # MOV BYTE PTR DS:[ESI+8],0 # MOV EAX,ESI # POP ESI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10004466 : # INC ESI # OR BYTE PTR DS:[EAX],AL # MOV EAX,ESI # POP ESI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10004467 : # OR BYTE PTR DS:[EAX],AL # MOV EAX,ESI # POP ESI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000246c : # ADD DWORD PTR DS:[EBX+450FFCE],ECX # MOV EAX,WinCRT.10002478 # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1001a473 : # LES EDI,FWORD PTR DS:[EBX] # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10006474 : # PUSH EAX # ADC AL,83 # ADD AL,0 # MOV EAX,EDI # POP EDI # POP ESI # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10006475 : # ADC AL,83 # ADD AL,0 # MOV EAX,EDI # POP EDI # POP ESI # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10006476 : # AND DWORD PTR DS:[ESI+4],0 # MOV EAX,EDI # POP EDI # POP ESI # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10014480 : # OR BYTE PTR DS:[EBX+4CBFE8F1],CL # ADD BYTE PTR DS:[EAX],AL # MOV DWORD PTR DS:[ESI],WinCRT.1002158C # MOV EAX,ESI # POP ESI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10014484 : # MOV EDI,C700004C # PUSH ES # MOV WORD PTR DS:[C68B1002],SS # POP ESI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10014485 : # DEC ESP # ADD BYTE PTR DS:[EAX],AL # MOV DWORD PTR DS:[ESI],WinCRT.1002158C # MOV EAX,ESI # POP ESI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10014486 : # ADD BYTE PTR DS:[EAX],AL # MOV DWORD PTR DS:[ESI],WinCRT.1002158C # MOV EAX,ESI # POP ESI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10014487 : # ADD BH,AL # PUSH ES # MOV WORD PTR DS:[C68B1002],SS # POP ESI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10014488 : # MOV DWORD PTR DS:[ESI],WinCRT.1002158C # MOV EAX,ESI # POP ESI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10014489 : # PUSH ES # MOV WORD PTR DS:[C68B1002],SS # POP ESI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1001448a : # MOV WORD PTR DS:[C68B1002],SS # POP ESI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1000248c : # ADD BYTE PTR DS:[EAX],AL # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10007618 : # INC EBP # OR BYTE PTR DS:[EBX+5D5B0845],CL # RETN 0x10 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10006493 : # SUB AL,DH # ADD DWORD PTR DS:[EAX],EDX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10006495 : # ADD DWORD PTR DS:[EAX],EDX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10008499 : # DEC DWORD PTR DS:[EBX+641CE8C6] # ADD BYTE PTR DS:[EAX],AL # RETN 0x18 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000a27b : # ADC BYTE PTR DS:[ESI+5D],BL # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1001e0b8 : # XOR BYTE PTR DS:[ECX+C68B3446],CL # POP ESI # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1000849f : # ADD BYTE PTR DS:[EAX],AL # RETN 0x18 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000e4a6 : # MOV DWORD PTR SS:[EBP-8],EAX # POP EDI # POP ESI # POP EBX # MOV EAX,DWORD PTR SS:[EBP-8] # MOV ESP,EBP # POP EBP # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000e4a7 : # INC EBP # CLC # POP EDI # POP ESI # POP EBX # MOV EAX,DWORD PTR SS:[EBP-8] # MOV ESP,EBP # POP EBP # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000e4a8 : # CLC # POP EDI # POP ESI # POP EBX # MOV EAX,DWORD PTR SS:[EBP-8] # MOV ESP,EBP # POP EBP # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000e4a9 : # POP EDI # POP ESI # POP EBX # MOV EAX,DWORD PTR SS:[EBP-8] # MOV ESP,EBP # POP EBP # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000e4aa : # POP ESI # POP EBX # MOV EAX,DWORD PTR SS:[EBP-8] # MOV ESP,EBP # POP EBP # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000e4ab : # POP EBX # MOV EAX,DWORD PTR SS:[EBP-8] # MOV ESP,EBP # POP EBP # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000e4ac : # MOV EAX,DWORD PTR SS:[EBP-8] # MOV ESP,EBP # POP EBP # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000e4ad : # INC EBP # CLC # MOV ESP,EBP # POP EBP # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000e4ae : # CLC # MOV ESP,EBP # POP EBP # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000e4af : # MOV ESP,EBP # POP EBP # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100060c8 : # ADD DWORD PTR DS:[EAX],EDX # POP EBP # RETN 0x10 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10004b75 : # OR BYTE PTR DS:[ECX],DL # ADD BYTE PTR DS:[EAX],AL # MOV EAX,DWORD PTR DS:[ECX+4] # ADD EAX,DWORD PTR SS:[EBP+8] # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000bb77 : # AND BH,BH # ADC EAX,<&USER32.GetWindowLongA> # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000e4da : # OR AL,CH # MOV CH,5F # ADD BYTE PTR DS:[EAX],AL # ADD ESP,20 # POP ESI # POP EBP # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000e4dc : # MOV CH,5F # ADD BYTE PTR DS:[EAX],AL # ADD ESP,20 # POP ESI # POP EBP # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000e4dd : # POP EDI # ADD BYTE PTR DS:[EAX],AL # ADD ESP,20 # POP ESI # POP EBP # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000c4de : # ADD DWORD PTR DS:[EAX],EDX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000e4df : # ADD BYTE PTR DS:[EBX+5D5E20C4],AL # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000e4e1 : # LES ESP,FWORD PTR DS:[EAX] # POP ESI # POP EBP # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000e4e2 : # AND BYTE PTR DS:[ESI+5D],BL # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100024e4 : # ADC AL,CH # STI # RETN 0x00 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100024e6 : # STI # RETN 0x00 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000db7c : # DEC DWORD PTR DS:[EBX+1890C4D] # MOV EAX,DWORD PTR SS:[EBP+8] # POP EBP # RETN 0x08 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1001eb7d : # MOV DWORD PTR DS:[1002ABB8],EAX # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x100084f3 : # DEC DWORD PTR DS:[EBX+63C2E8C6] # ADD BYTE PTR DS:[EAX],AL # RETN 0x18 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100084f9 : # ADD BYTE PTR DS:[EAX],AL # RETN 0x18 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000ebf2 : # ADC AL,CH # INC EAX # SUB EAX,C4830000 # AND AL,0A3 # CMP BYTE PTR DS:[EBX+2],10 # POP ESI # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10006502 : # INC ESI # AND AL,CH # MOV AH,83 # ADD BYTE PTR DS:[EAX],AL # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10006503 : # AND AL,CH # MOV AH,83 # ADD BYTE PTR DS:[EAX],AL # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10006505 : # MOV AH,83 # ADD BYTE PTR DS:[EAX],AL # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10006506 : # ADD DWORD PTR DS:[EAX],0 # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10006507 : # ADD BYTE PTR DS:[EAX],AL # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10002517 : # DEC DWORD PTR DS:[EBX+C39EE8C6] # ADD BYTE PTR DS:[EAX],AL # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10006344 : # XLAT BYTE PTR DS:[EBX+AL] # MOV EAX,DWORD PTR SS:[EBP+8] # POP EDI # POP ESI # POP EBP # RETN 0x14 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000162f : # ADC AL,8B # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000251d : # ADD BYTE PTR DS:[EAX],AL # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000a51f : # MOV EDI,EDI # PUSH EBP # MOV EBP,ESP # MOV EAX,DWORD PTR SS:[EBP+8] # INC DWORD PTR DS:[EAX+14] # MOV EAX,DWORD PTR DS:[EAX+14] # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1001d630 : # ADD DWORD PTR DS:[EAX],EAX # ADD BH,DH # RETN 0x00 ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1000a522 : # MOV EBP,ESP # MOV EAX,DWORD PTR SS:[EBP+8] # INC DWORD PTR DS:[EAX+14] # MOV EAX,DWORD PTR DS:[EAX+14] # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000a524 : # MOV EAX,DWORD PTR SS:[EBP+8] # INC DWORD PTR DS:[EAX+14] # MOV EAX,DWORD PTR DS:[EAX+14] # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000a525 : # INC EBP # OR BH,BH # INC EAX # ADC AL,8B # INC EAX # ADC AL,5D # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10001249 : # MOV EDI,EDI # PUSH EBP # MOV EBP,ESP # MOV ECX,DWORD PTR SS:[EBP+8] # MOV EAX,DWORD PTR DS:[10027084] # MOV DWORD PTR DS:[10027084],ECX # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000a527 : # INC DWORD PTR DS:[EAX+14] # MOV EAX,DWORD PTR DS:[EAX+14] # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000a528 : # INC EAX # ADC AL,8B # INC EAX # ADC AL,5D # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000a529 : # ADC AL,8B # INC EAX # ADC AL,5D # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000a52b : # INC EAX # ADC AL,5D # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000a52c : # ADC AL,5D # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000c52e : # DEC DWORD PTR DS:[EBX+2387E8C3] # ADD BYTE PTR DS:[EAX],AL # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000c532 : # XCHG DWORD PTR DS:[EBX],ESP # ADD BYTE PTR DS:[EAX],AL # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000c534 : # ADD BYTE PTR DS:[EAX],AL # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10005635 : # ADD DWORD PTR DS:[EDI-1],EDX # ADC BYTE PTR SS:[EBP+E80575C0],AL # DAS # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10006540 : # POP EDX # ADD BYTE PTR DS:[EAX],AL # AND DWORD PTR DS:[ESI+4],0 # MOV EAX,EDI # POP EDI # POP ESI # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10006541 : # ADD BYTE PTR DS:[EAX],AL # AND DWORD PTR DS:[ESI+4],0 # MOV EAX,EDI # POP EDI # POP ESI # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10006543 : # AND DWORD PTR DS:[ESI+4],0 # MOV EAX,EDI # POP EDI # POP ESI # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1001a544 : # PUSH EAX # CMP EAX,3B59FFFF # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1001a545 : # CMP EAX,3B59FFFF # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x100040e1 : # FSUBR ST,ST(3) # ADD EBP,DWORD PTR DS:[EDX+2] # POP EAX # POP EBP # RETN 0x08 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000654f : # ADD BYTE PTR SS:[EBP+3],DH # XOR EAX,EAX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10008550 : # DEC DWORD PTR DS:[EBX+6365E8C6] # ADD BYTE PTR DS:[EAX],AL # RETN 0x1C ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10005638 : # ADC BYTE PTR SS:[EBP+E80575C0],AL # DAS # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10008556 : # ADD BYTE PTR DS:[EAX],AL # RETN 0x1C ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10001639 : # ADD BYTE PTR DS:[EAX],AL # POP EDI # POP ESI # POP EBX # POP EBP # RETN 0x08 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000255b : # OR BYTE PTR DS:[EBX+4889144D],CL # ADD AL,8B # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000255d : # DEC EBP # ADC AL,89 # DEC EAX # ADD AL,8B # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000255e : # ADC AL,89 # DEC EAX # ADD AL,8B # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000655f : # ADD DWORD PTR DS:[EAX],EDX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10018569 : # INC EBP # ADC BYTE PTR DS:[EBX],BH # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1001856a : # ADC BYTE PTR DS:[EBX],BH # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10014571 : # LES ESP,FWORD PTR DS:[EAX] # XOR EAX,EAX # INC EAX # POP EDI # POP ESI # POP EBX # POP EBP # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x10012572 : # ADC BYTE PTR DS:[ECX+2ADD835],CL # ADC BYTE PTR DS:[EBX],BH # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x1000a336 : # AND AL,CH # MOV AL,BYTE PTR DS:[5EFFFFF5] # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10012578 : # ADC BYTE PTR DS:[EBX],BH # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x1000124c : # MOV EBP,ESP # MOV ECX,DWORD PTR SS:[EBP+8] # MOV EAX,DWORD PTR DS:[10027084] # MOV DWORD PTR DS:[10027084],ECX # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10011643 : # ADD DWORD PTR DS:[EAX],EDX # MOV DWORD PTR DS:[10027FD0],WinCRT.10018268 # MOV DWORD PTR DS:[10027FD4],WinCRT.100181F5 # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x1000822f : # DEC DWORD PTR DS:[EBX+6686E8C6] # ADD BYTE PTR DS:[EAX],AL # RETN 0x08 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100080ef : # DEC DWORD PTR DS:[EBX+67C6E8C6] # ADD BYTE PTR DS:[EAX],AL # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000c5a2 : # OR BYTE PTR DS:[EBX+11FF5008],CL # POP EBP # RETN 0x08 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100085aa : # DEC DWORD PTR DS:[EBX+630BE8C6] # ADD BYTE PTR DS:[EAX],AL # RETN 0x18 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100010f2 : # ADD DWORD PTR DS:[EAX],EAX # ADD BYTE PTR DS:[EBX+C68B04C4],AL # POP ESI # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000e5af : # INC EBP # FSUB DWORD PTR DS:[EBX] # ADD BYTE PTR DS:[EAX],AL # ADD BYTE PTR DS:[EBX+C95BC845],CL # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000e5b0 : # FSUB DWORD PTR DS:[EBX] # ADD BYTE PTR DS:[EAX],AL # ADD BYTE PTR DS:[EBX+C95BC845],CL # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000e5b4 : # ADD BYTE PTR DS:[EAX],AL # ADD BYTE PTR DS:[EBX+C95BC845],CL # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100185b5 : # ADC BYTE PTR DS:[EBX],BH # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1000e5b6 : # ADD BYTE PTR DS:[EBX+C95BC845],CL # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000124e : # MOV ECX,DWORD PTR SS:[EBP+8] # MOV EAX,DWORD PTR DS:[10027084] # MOV DWORD PTR DS:[10027084],ECX # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100017a2 : # ADD BYTE PTR DS:[EAX],AL # POP EBP # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100145cd : # ADC AL,CH # POPFD # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x100145cf : # POPFD # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1000c5d0 : # ADC AL,5D # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000b64f : # ADD BYTE PTR DS:[EAX],AL # RETN 0x08 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10007ba7 : # ADD DWORD PTR DS:[EAX],EDX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100085f8 : # DEC DWORD PTR DS:[EBX+62BDE8C6] # ADD BYTE PTR DS:[EAX],AL # RETN 0x08 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100185fb : # OR AL,CH # ADC EAX,83FFFFFF # LES EBX,FWORD PTR DS:[EAX] # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x100185fd : # ADC EAX,83FFFFFF # LES EBX,FWORD PTR DS:[EAX] # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x100085fe : # ADD BYTE PTR DS:[EAX],AL # RETN 0x08 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10018602 : # LES EBX,FWORD PTR DS:[EAX] # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x100027a0 : # DEC EDX # PUSHFD # ADD AL,BYTE PTR DS:[EAX+B80008C2] # XOR AL,0F9 # ADD DWORD PTR DS:[EAX],EDX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10014609 : # POP ECX # MOV DWORD PTR DS:[1002B39C],EAX # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x1001460a : # MOV DWORD PTR DS:[1002B39C],EAX # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x10004355 : # INC DWORD PTR DS:[EBX+89FF4C48] # DEC EAX # DEC EAX # MOV DWORD PTR DS:[EAX+C],6C # MOV DWORD PTR DS:[EAX+28],WinCRT.10001244 # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000662f : # ADD BYTE PTR DS:[EAX],0 # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10006630 : # ADD BYTE PTR DS:[EAX],AL # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10008646 : # DEC DWORD PTR DS:[EBX+626FE8C6] # ADD BYTE PTR DS:[EAX],AL # RETN 0x08 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000210c : # ADD BYTE PTR DS:[EAX],AL # ADD AL,BYTE PTR DS:[EAX] # ADD BYTE PTR DS:[EBX+C7A5E8C6],CL # ADD BYTE PTR DS:[EAX],AL # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000864c : # ADD BYTE PTR DS:[EAX],AL # RETN 0x08 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10002110 : # ADD BYTE PTR DS:[EBX+C7A5E8C6],CL # ADD BYTE PTR DS:[EAX],AL # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1001c662 : # AND AL,3A # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10004bbd : # PUSH CS # MOV DWORD PTR DS:[EAX],ECX # MOV DWORD PTR DS:[ESI],EDI # POP EDI # POP ESI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10001254 : # ADD DL,BYTE PTR DS:[EAX] # MOV DWORD PTR DS:[10027084],ECX # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10002116 : # ADD BYTE PTR DS:[EAX],AL # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1001a117 : # ADC BYTE PTR DS:[EAX-18],DL # MOV EAX,59FFFF89 # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x100086a0 : # DEC DWORD PTR DS:[EBX+6215E8C6] # ADD BYTE PTR DS:[EAX],AL # RETN 0x18 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100086a6 : # ADD BYTE PTR DS:[EAX],AL # RETN 0x18 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10001256 : # MOV DWORD PTR DS:[10027084],ECX # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100046b3 : # ADD BYTE PTR DS:[ECX+174BE],CL # ADD BYTE PTR DS:[ECX+178BE],CL # ADD BYTE PTR DS:[ECX+17CBE],CL # ADD BYTE PTR DS:[ECX+180BE],CL # ADD BYTE PTR DS:[ECX+184BE],CL # ADD BYTE PTR DS:[EBX+A1E4E8C6],CL # ADD BYTE PTR DS:[EAX],AL # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000c11e : # OR BYTE PTR DS:[ESI-37],BL # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100046b7 : # ADD DWORD PTR DS:[EAX],EAX # ADD BYTE PTR DS:[ECX+178BE],CL # ADD BYTE PTR DS:[ECX+17CBE],CL # ADD BYTE PTR DS:[ECX+180BE],CL # ADD BYTE PTR DS:[ECX+184BE],CL # ADD BYTE PTR DS:[EBX+A1E4E8C6],CL # ADD BYTE PTR DS:[EAX],AL # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100046b9 : # ADD BYTE PTR DS:[ECX+178BE],CL # ADD BYTE PTR DS:[ECX+17CBE],CL # ADD BYTE PTR DS:[ECX+180BE],CL # ADD BYTE PTR DS:[ECX+184BE],CL # ADD BYTE PTR DS:[EBX+A1E4E8C6],CL # ADD BYTE PTR DS:[EAX],AL # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100046bd : # ADD DWORD PTR DS:[EAX],EAX # ADD BYTE PTR DS:[ECX+17CBE],CL # ADD BYTE PTR DS:[ECX+180BE],CL # ADD BYTE PTR DS:[ECX+184BE],CL # ADD BYTE PTR DS:[EBX+A1E4E8C6],CL # ADD BYTE PTR DS:[EAX],AL # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100046bf : # ADD BYTE PTR DS:[ECX+17CBE],CL # ADD BYTE PTR DS:[ECX+180BE],CL # ADD BYTE PTR DS:[ECX+184BE],CL # ADD BYTE PTR DS:[EBX+A1E4E8C6],CL # ADD BYTE PTR DS:[EAX],AL # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100046c3 : # ADD DWORD PTR DS:[EAX],EAX # ADD BYTE PTR DS:[ECX+180BE],CL # ADD BYTE PTR DS:[ECX+184BE],CL # ADD BYTE PTR DS:[EBX+A1E4E8C6],CL # ADD BYTE PTR DS:[EAX],AL # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100046c5 : # ADD BYTE PTR DS:[ECX+180BE],CL # ADD BYTE PTR DS:[ECX+184BE],CL # ADD BYTE PTR DS:[EBX+A1E4E8C6],CL # ADD BYTE PTR DS:[EAX],AL # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100066c8 : # ADD DWORD PTR DS:[EBX+450FFCE],ECX # MOV EAX,WinCRT.1000662D # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100046c9 : # ADD DWORD PTR DS:[EAX],EAX # ADD BYTE PTR DS:[ECX+184BE],CL # ADD BYTE PTR DS:[EBX+A1E4E8C6],CL # ADD BYTE PTR DS:[EAX],AL # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100046cb : # ADD BYTE PTR DS:[ECX+184BE],CL # ADD BYTE PTR DS:[EBX+A1E4E8C6],CL # ADD BYTE PTR DS:[EAX],AL # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10001122 : # ADC BYTE PTR DS:[EBX+10028F08],AH # MOV EAX,1 # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100046cf : # ADD DWORD PTR DS:[EAX],EAX # ADD BYTE PTR DS:[EBX+A1E4E8C6],CL # ADD BYTE PTR DS:[EAX],AL # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100066d0 : # ADD BYTE PTR DS:[EAX],DL # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100046d1 : # ADD BYTE PTR DS:[EBX+A1E4E8C6],CL # ADD BYTE PTR DS:[EAX],AL # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1001c6d2 : # INC EBP # MOV AH,2A # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1001c6d3 : # MOV AH,2A # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x100089af : # ADD BYTE PTR DS:[EAX],AL # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100046d7 : # ADD BYTE PTR DS:[EAX],AL # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1001c6da : # ADD EDI,EDI # INC EBP # MOV AL,8A # ADD AL,BYTE PTR DS:[EDX+3A] # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1001c6dc : # INC EBP # MOV AL,8A # ADD AL,BYTE PTR DS:[EDX+3A] # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1001c6dd : # MOV AL,8A # ADD AL,BYTE PTR DS:[EDX+3A] # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10013125 : # DEC EBP # ADC BYTE PTR DS:[ECX+8E0FFC5D],CL # PUSH EBP # ADD DWORD PTR DS:[EAX],EAX # ADD DH,DH # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x10013126 : # ADC BYTE PTR DS:[ECX+8E0FFC5D],CL # PUSH EBP # ADD DWORD PTR DS:[EAX],EAX # ADD DH,DH # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x100066e9 : # MOV BYTE PTR DS:[59FFFFAB],AL # MOV EAX,ESI # POP ESI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000e6f0 : # ADD BYTE PTR DS:[EAX],AL # MOV DWORD PTR DS:[EAX+98],ESI # MOV EAX,ESI # POP ESI # POP EBP # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100046f1 : # ADD BYTE PTR DS:[EAX],AL # MOV EAX,ESI # POP ESI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000e6f6 : # ADD BYTE PTR DS:[EAX],AL # MOV EAX,ESI # POP ESI # POP EBP # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000c6f9 : # INC EBP # OR AL,2B # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000c6fa : # OR AL,2B # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100086ff : # POPAD # ADD BYTE PTR DS:[EAX],AL # RETN 0x18 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10008700 : # ADD BYTE PTR DS:[EAX],AL # RETN 0x18 ** [WinCRT.dll] ** | null,unicodereverse {PAGE_EXECUTE_READ}
0x1001c716 : # DEC EBP # MOV AL,8A # ADD AL,BYTE PTR DS:[EDX+3A] # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1001c717 : # MOV AL,8A # ADD AL,BYTE PTR DS:[EDX+3A] # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1001c72a : # OR EDI,EDI # INC EBP # MOV AH,2A # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1001c72c : # INC EBP # MOV AH,2A # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1001c72d : # MOV AH,2A # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10007688 : # MOV EAX,DWORD PTR SS:[EBP+8] # MOV DWORD PTR DS:[ECX+28],EAX # MOV DWORD PTR DS:[ECX+18],1 # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1001c734 : # DEC EBP # MOV AL,8A # ADD AL,BYTE PTR DS:[EDX+3A] # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1001c735 : # MOV AL,8A # ADD AL,BYTE PTR DS:[EDX+3A] # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1000e73d : # ADD BYTE PTR DS:[EAX],AL # MOV ECX,DWORD PTR DS:[ESI+4] # MOV DWORD PTR DS:[EAX+98],ECX # POP ESI # POP EBP # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000e740 : # DEC ESI # ADD AL,89 # MOV BYTE PTR DS:[EAX+5E000000],BL # POP EBP # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000e741 : # ADD AL,89 # MOV BYTE PTR DS:[EAX+5E000000],BL # POP EBP # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000e743 : # MOV BYTE PTR DS:[EAX+5E000000],BL # POP EBP # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000a744 : # ADD BYTE PTR DS:[EAX],AL # RETN 0x10 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000e745 : # ADD BYTE PTR DS:[EAX],AL # ADD BYTE PTR DS:[ESI+5D],BL # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000e746 : # ADD BYTE PTR DS:[EAX],AL # POP ESI # POP EBP # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000e747 : # ADD BYTE PTR DS:[ESI+5D],BL # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1001274b : # MOV DWORD PTR DS:[EBX+EDI],5FF172FE # POP ESI # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x1000875d : # DEC DWORD PTR DS:[EBX+6158E8C6] # ADD BYTE PTR DS:[EAX],AL # RETN 0x24 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1001475f : # ADC CL,CL # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x10008761 : # POP EAX # POPAD # ADD BYTE PTR DS:[EAX],AL # RETN 0x24 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10014762 : # MOV EDI,EDI # PUSH EBP # MOV EBP,ESP # MOV EAX,DWORD PTR SS:[EBP+8] # MOV DWORD PTR DS:[1002B6C4],EAX # POP EBP # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x10008763 : # ADD BYTE PTR DS:[EAX],AL # RETN 0x24 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10014764 : # PUSH EBP # MOV EBP,ESP # MOV EAX,DWORD PTR SS:[EBP+8] # MOV DWORD PTR DS:[1002B6C4],EAX # POP EBP # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x10014765 : # MOV EBP,ESP # MOV EAX,DWORD PTR SS:[EBP+8] # MOV DWORD PTR DS:[1002B6C4],EAX # POP EBP # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x10014767 : # MOV EAX,DWORD PTR SS:[EBP+8] # MOV DWORD PTR DS:[1002B6C4],EAX # POP EBP # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x10014768 : # INC EBP # OR BYTE PTR DS:[EBX+1002B6C4],AH # POP EBP # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x10014769 : # OR BYTE PTR DS:[EBX+1002B6C4],AH # POP EBP # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x1001476a : # MOV DWORD PTR DS:[1002B6C4],EAX # POP EBP # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x10002be7 : # ADC BYTE PTR DS:[EDI+5E],BL # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000276d : # ADD BYTE PTR DS:[EBP-1C],DH # XOR EAX,EAX # POP EDI # POP ESI # POP EBX # POP EBP # RETN 0x10 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000276e : # ADD BYTE PTR SS:[EBP-1C],DH # XOR EAX,EAX # POP EDI # POP ESI # POP EBX # POP EBP # RETN 0x10 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10012771 : # MOV DWORD PTR DS:[EBX+EDI],5FF172FE # POP ESI # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x1000477a : # ADD BYTE PTR DS:[EAX],AL # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10012799 : # ADC BYTE PTR SS:[EBP+5D0275C0],AL # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1001279d : # ADD BL,BYTE PTR SS:[EBP-3D] # XOR EAX,EAX # INC EAX # MOV DWORD PTR DS:[1002C8E4],EAX # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1000279e : # ADD BYTE PTR DS:[EAX+80029C4A],BH # RETN 0x08 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100127a0 : # XOR EAX,EAX # INC EAX # MOV DWORD PTR DS:[1002C8E4],EAX # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x100027a1 : # PUSHFD # ADD AL,BYTE PTR DS:[EAX+B80008C2] # XOR AL,0F9 # ADD DWORD PTR DS:[EAX],EDX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100027a2 : # ADD AL,BYTE PTR DS:[EAX+B80008C2] # XOR AL,0F9 # ADD DWORD PTR DS:[EAX],EDX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100127a3 : # MOV DWORD PTR DS:[1002C8E4],EAX # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x100067a4 : # OR DL,BYTE PTR DS:[EAX-1] # ADC EAX,<&GDI32.DeleteObject> # AND DWORD PTR DS:[ESI],0 # POP ESI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100027a5 : # OR BYTE PTR DS:[EAX],AL # MOV EAX,WinCRT.1001F934 # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100027a6 : # ADD BYTE PTR DS:[EAX+1001F934],BH # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100067a7 : # ADC EAX,<&GDI32.DeleteObject> # AND DWORD PTR DS:[ESI],0 # POP ESI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100027a8 : # XOR AL,0F9 # ADD DWORD PTR DS:[EAX],EDX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100027a9 : # STC # ADD DWORD PTR DS:[EAX],EDX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100027aa : # ADD DWORD PTR DS:[EAX],EDX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100027ab : # ADC BL,AL # MOV EAX,WinCRT.1001F96C # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100067ac : # AND DWORD PTR DS:[ESI],0 # POP ESI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10002bf2 : # ADD BYTE PTR DS:[EBX+E8C30440],CL # NOP # POP SS # ADD BYTE PTR DS:[EAX],AL # ADD EAX,30 # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100027ae : # INS BYTE PTR ES:[EDI],DX # STC # ADD DWORD PTR DS:[EAX],EDX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100027af : # STC # ADD DWORD PTR DS:[EAX],EDX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100027b0 : # ADD DWORD PTR DS:[EAX],EDX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100027b1 : # ADC BL,AL # MOV EAX,WinCRT.1001F988 # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100027b4 : # MOV CL,BH # ADD DWORD PTR DS:[EAX],EDX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100027b5 : # STC # ADD DWORD PTR DS:[EAX],EDX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100027b6 : # ADD DWORD PTR DS:[EAX],EDX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000ebf4 : # INC EAX # SUB EAX,C4830000 # AND AL,0A3 # CMP BYTE PTR DS:[EBX+2],10 # POP ESI # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100087ba : # DEC DWORD PTR DS:[EBX+60FBE8C6] # ADD BYTE PTR DS:[EAX],AL # RETN 0x1C ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100047bb : # ADD BYTE PTR DS:[EBX+A0FAE8C6],CL # ADD BYTE PTR DS:[EAX],AL # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100087be : # STI # PUSHAD # ADD BYTE PTR DS:[EAX],AL # RETN 0x1C ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000ebf5 : # SUB EAX,C4830000 # AND AL,0A3 # CMP BYTE PTR DS:[EBX+2],10 # POP ESI # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100087c0 : # ADD BYTE PTR DS:[EAX],AL # RETN 0x1C ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100047c1 : # ADD BYTE PTR DS:[EAX],AL # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1001a7c3 : # ADD BYTE PTR DS:[EAX],AL # ADD BYTE PTR DS:[EBX],BH # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1001a7c5 : # ADD BYTE PTR DS:[EBX],BH # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1000ebf8 : # ADD ESP,24 # MOV DWORD PTR DS:[10027B80],EAX # POP ESI # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000ebf9 : # LES ESP,FWORD PTR DS:[EBX] # CMP BYTE PTR DS:[EBX+2],10 # POP ESI # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000ebfa : # AND AL,0A3 # CMP BYTE PTR DS:[EBX+2],10 # POP ESI # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10005150 : # XOR CL,1 # ADC BYTE PTR DS:[EDI+5E],BL # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100067e4 : # ADD DWORD PTR DS:[EAX],EDX # POP ESI # POP EDI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100067e5 : # ADC BYTE PTR DS:[ESI+5F],BL # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100027eb : # STC # ADD DWORD PTR DS:[EAX],EDX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100027ec : # ADD DWORD PTR DS:[EAX],EDX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100027ed : # ADC BL,AL # MOV EAX,WinCRT.1001F9AC # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100027f1 : # STC # ADD DWORD PTR DS:[EAX],EDX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100027f2 : # ADD DWORD PTR DS:[EAX],EDX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000e7fc : # MOV EAX,DWORD PTR DS:[10027D00] # XOR EAX,EBP # PUSH EAX # PUSH DWORD PTR SS:[EBP-4] # MOV DWORD PTR SS:[EBP-4],-1 # LEA EAX,DWORD PTR SS:[EBP-C] # MOV DWORD PTR FS:[0],EAX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000e7ff : # ADD DL,BYTE PTR DS:[EAX] # XOR EAX,EBP # PUSH EAX # PUSH DWORD PTR SS:[EBP-4] # MOV DWORD PTR SS:[EBP-4],-1 # LEA EAX,DWORD PTR SS:[EBP-C] # MOV DWORD PTR FS:[0],EAX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000e801 : # XOR EAX,EBP # PUSH EAX # PUSH DWORD PTR SS:[EBP-4] # MOV DWORD PTR SS:[EBP-4],-1 # LEA EAX,DWORD PTR SS:[EBP-C] # MOV DWORD PTR FS:[0],EAX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000a802 : # ADD BYTE PTR DS:[EAX],DL # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000e803 : # PUSH EAX # PUSH DWORD PTR SS:[EBP-4] # MOV DWORD PTR SS:[EBP-4],-1 # LEA EAX,DWORD PTR SS:[EBP-C] # MOV DWORD PTR FS:[0],EAX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000e804 : # PUSH DWORD PTR SS:[EBP-4] # MOV DWORD PTR SS:[EBP-4],-1 # LEA EAX,DWORD PTR SS:[EBP-C] # MOV DWORD PTR FS:[0],EAX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000e806 : # CLD # MOV DWORD PTR SS:[EBP-4],-1 # LEA EAX,DWORD PTR SS:[EBP-C] # MOV DWORD PTR FS:[0],EAX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000e807 : # MOV DWORD PTR SS:[EBP-4],-1 # LEA EAX,DWORD PTR SS:[EBP-C] # MOV DWORD PTR FS:[0],EAX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000e80d : # DEC DWORD PTR SS:[EBP+A364F445] # ADD BYTE PTR DS:[EAX],AL # ADD BYTE PTR DS:[EAX],AL # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000880e : # DEC DWORD PTR DS:[EBX+60A7E8C6] # ADD BYTE PTR DS:[EAX],AL # RETN 0x10 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1001280f : # ADC BH,BH # ADC EAX,<&KERNEL32.HeapDestroy> # AND DWORD PTR DS:[1002AF24],0 # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x10012811 : # ADC EAX,<&KERNEL32.HeapDestroy> # AND DWORD PTR DS:[1002AF24],0 # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x1000e812 : # MOV DWORD PTR DS:[0],EAX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000e813 : # ADD BYTE PTR DS:[EAX],AL # ADD BYTE PTR DS:[EAX],AL # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10012814 : # ADD DWORD PTR DS:[EAX],EDX # AND DWORD PTR DS:[1002AF24],0 # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x1000e815 : # ADD BYTE PTR DS:[EAX],AL # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10012816 : # AND DWORD PTR DS:[1002AF24],0 # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x10005c04 : # OR BYTE PTR DS:[EAX],AL # MOV EAX,WinCRT.1001FC80 # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1001281b : # ADC BYTE PTR DS:[EAX],AL # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x1001a828 : # ADC EBP,EAX # XCHG EAX,EDX # IMUL EDI,EDI,3BC48BFF # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1001a82a : # XCHG EAX,EDX # IMUL EDI,EDI,3BC48BFF # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1001a82b : # IMUL EDI,EDI,3BC48BFF # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1000682d : # FRSTOR (108-BYTE) PTR DS:[EDI+59590000] # XOR EAX,EAX # INC EAX # POP ESI # POP EBP # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000682f : # ADD BYTE PTR DS:[EAX],AL # POP ECX # POP ECX # XOR EAX,EAX # INC EAX # POP ESI # POP EBP # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10006830 : # ADD BYTE PTR DS:[ECX+59],BL # XOR EAX,EAX # INC EAX # POP ESI # POP EBP # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000e834 : # XOR EAX,EBP # PUSH EAX # MOV DWORD PTR SS:[EBP-10],ESP # PUSH DWORD PTR SS:[EBP-4] # MOV DWORD PTR SS:[EBP-4],-1 # LEA EAX,DWORD PTR SS:[EBP-C] # MOV DWORD PTR FS:[0],EAX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000e836 : # PUSH EAX # MOV DWORD PTR SS:[EBP-10],ESP # PUSH DWORD PTR SS:[EBP-4] # MOV DWORD PTR SS:[EBP-4],-1 # LEA EAX,DWORD PTR SS:[EBP-C] # MOV DWORD PTR FS:[0],EAX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000e837 : # MOV DWORD PTR SS:[EBP-10],ESP # PUSH DWORD PTR SS:[EBP-4] # MOV DWORD PTR SS:[EBP-4],-1 # LEA EAX,DWORD PTR SS:[EBP-C] # MOV DWORD PTR FS:[0],EAX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000e83a : # PUSH DWORD PTR SS:[EBP-4] # MOV DWORD PTR SS:[EBP-4],-1 # LEA EAX,DWORD PTR SS:[EBP-C] # MOV DWORD PTR FS:[0],EAX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000e83c : # CLD # MOV DWORD PTR SS:[EBP-4],-1 # LEA EAX,DWORD PTR SS:[EBP-C] # MOV DWORD PTR FS:[0],EAX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000e83d : # MOV DWORD PTR SS:[EBP-4],-1 # LEA EAX,DWORD PTR SS:[EBP-C] # MOV DWORD PTR FS:[0],EAX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000483e : # ADD EAX,1335E8 # ADD BH,AL # INC EBP # CLD # ADD DWORD PTR DS:[EAX],EAX # ADD BYTE PTR DS:[EAX],AL # MOV EAX,WinCRT.10004851 # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10004840 : # XOR EAX,C7000013 # INC EBP # CLD # ADD DWORD PTR DS:[EAX],EAX # ADD BYTE PTR DS:[EAX],AL # MOV EAX,WinCRT.10004851 # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10004841 : # ADC EAX,DWORD PTR DS:[EAX] # ADD BH,AL # INC EBP # CLD # ADD DWORD PTR DS:[EAX],EAX # ADD BYTE PTR DS:[EAX],AL # MOV EAX,WinCRT.10004851 # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10004842 : # ADD BYTE PTR DS:[EAX],AL # MOV DWORD PTR SS:[EBP-4],1 # MOV EAX,WinCRT.10004851 # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10004843 : # ADD BH,AL # INC EBP # CLD # ADD DWORD PTR DS:[EAX],EAX # ADD BYTE PTR DS:[EAX],AL # MOV EAX,WinCRT.10004851 # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10004844 : # MOV DWORD PTR SS:[EBP-4],1 # MOV EAX,WinCRT.10004851 # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10004845 : # INC EBP # CLD # ADD DWORD PTR DS:[EAX],EAX # ADD BYTE PTR DS:[EAX],AL # MOV EAX,WinCRT.10004851 # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10004846 : # CLD # ADD DWORD PTR DS:[EAX],EAX # ADD BYTE PTR DS:[EAX],AL # MOV EAX,WinCRT.10004851 # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10004847 : # ADD DWORD PTR DS:[EAX],EAX # ADD BYTE PTR DS:[EAX],AL # MOV EAX,WinCRT.10004851 # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10004848 : # ADD BYTE PTR DS:[EAX],AL # ADD BYTE PTR DS:[EAX+10004851],BH # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10004849 : # ADD BYTE PTR DS:[EAX],AL # MOV EAX,WinCRT.10004851 # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000484a : # ADD BYTE PTR DS:[EAX+10004851],BH # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000e84b : # ADD BYTE PTR DS:[EAX],AL # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000484c : # PUSH ECX # DEC EAX # ADD BYTE PTR DS:[EAX],DL # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000484d : # DEC EAX # ADD BYTE PTR DS:[EAX],DL # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000484e : # ADD BYTE PTR DS:[EAX],DL # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1001d6b8 : # OR DH,DH # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10002861 : # XOR AL,0F3 # ADD DWORD PTR DS:[EAX],EDX # POP EBP # RETN 0x10 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10002863 : # ADD DWORD PTR DS:[EAX],EDX # POP EBP # RETN 0x10 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10006166 : # ADD DWORD PTR DS:[EAX],EDX # POP EBP # RETN 0x14 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10008869 : # PUSH EAX # PUSHAD # ADD BYTE PTR DS:[EAX],AL # RETN 0x14 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000e86a : # XOR EAX,EBP # PUSH EAX # MOV DWORD PTR SS:[EBP-10],EAX # PUSH DWORD PTR SS:[EBP-4] # MOV DWORD PTR SS:[EBP-4],-1 # LEA EAX,DWORD PTR SS:[EBP-C] # MOV DWORD PTR FS:[0],EAX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000886b : # ADD BYTE PTR DS:[EAX],AL # RETN 0x14 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000e86c : # PUSH EAX # MOV DWORD PTR SS:[EBP-10],EAX # PUSH DWORD PTR SS:[EBP-4] # MOV DWORD PTR SS:[EBP-4],-1 # LEA EAX,DWORD PTR SS:[EBP-C] # MOV DWORD PTR FS:[0],EAX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000e86d : # MOV DWORD PTR SS:[EBP-10],EAX # PUSH DWORD PTR SS:[EBP-4] # MOV DWORD PTR SS:[EBP-4],-1 # LEA EAX,DWORD PTR SS:[EBP-C] # MOV DWORD PTR FS:[0],EAX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000e870 : # PUSH DWORD PTR SS:[EBP-4] # MOV DWORD PTR SS:[EBP-4],-1 # LEA EAX,DWORD PTR SS:[EBP-C] # MOV DWORD PTR FS:[0],EAX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000e872 : # CLD # MOV DWORD PTR SS:[EBP-4],-1 # LEA EAX,DWORD PTR SS:[EBP-C] # MOV DWORD PTR FS:[0],EAX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000e873 : # MOV DWORD PTR SS:[EBP-4],-1 # LEA EAX,DWORD PTR SS:[EBP-C] # MOV DWORD PTR FS:[0],EAX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10002879 : # AND BH,BH # ADC EAX,<&USER32.SendMessageA> # POP EBP # RETN 0x0C ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000287c : # CMP BL,DH # ADD DWORD PTR DS:[EAX],EDX # POP EBP # RETN 0x0C ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000287e : # ADD DWORD PTR DS:[EAX],EDX # POP EBP # RETN 0x0C ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10003c15 : # ADD BYTE PTR DS:[EAX],AL # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000e881 : # ADD BYTE PTR DS:[EAX],AL # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000c895 : # MOV EAX,DWORD PTR DS:[ESI+28] # MOV CX,WORD PTR SS:[EBP+8] # MOV WORD PTR DS:[EAX],CX # ADD DWORD PTR DS:[ESI+28],2 # MOV EAX,ESI # POP ESI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000c898 : # MOV CX,WORD PTR SS:[EBP+8] # MOV WORD PTR DS:[EAX],CX # ADD DWORD PTR DS:[ESI+28],2 # MOV EAX,ESI # POP ESI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000c899 : # MOV ECX,DWORD PTR SS:[EBP+8] # MOV WORD PTR DS:[EAX],CX # ADD DWORD PTR DS:[ESI+28],2 # MOV EAX,ESI # POP ESI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000289a : # INC ESI # ADC AL,89 # DEC ESI # OR BYTE PTR DS:[ECX+4E890C4E],CL # ADC BYTE PTR DS:[ECX+C68B184E],CL # POP ESI # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000289b : # ADC AL,89 # DEC ESI # OR BYTE PTR DS:[ECX+4E890C4E],CL # ADC BYTE PTR DS:[ECX+C68B184E],CL # POP ESI # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000c89c : # MOV WORD PTR DS:[EAX],CX # ADD DWORD PTR DS:[ESI+28],2 # MOV EAX,ESI # POP ESI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000289d : # DEC ESI # OR BYTE PTR DS:[ECX+4E890C4E],CL # ADC BYTE PTR DS:[ECX+C68B184E],CL # POP ESI # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000289e : # OR BYTE PTR DS:[ECX+4E890C4E],CL # ADC BYTE PTR DS:[ECX+C68B184E],CL # POP ESI # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000c89f : # ADD DWORD PTR DS:[ESI+28],2 # MOV EAX,ESI # POP ESI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100028a0 : # DEC ESI # OR AL,89 # DEC ESI # ADC BYTE PTR DS:[ECX+C68B184E],CL # POP ESI # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100028a1 : # OR AL,89 # DEC ESI # ADC BYTE PTR DS:[ECX+C68B184E],CL # POP ESI # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000e8a2 : # PUSH EAX # MOV DWORD PTR SS:[EBP-14],EAX # MOV DWORD PTR SS:[EBP-10],ESP # PUSH DWORD PTR SS:[EBP-4] # MOV DWORD PTR SS:[EBP-4],-1 # LEA EAX,DWORD PTR SS:[EBP-C] # MOV DWORD PTR FS:[0],EAX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100028a3 : # DEC ESI # ADC BYTE PTR DS:[ECX+C68B184E],CL # POP ESI # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100028a4 : # ADC BYTE PTR DS:[ECX+C68B184E],CL # POP ESI # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000e8a6 : # MOV DWORD PTR SS:[EBP-10],ESP # PUSH DWORD PTR SS:[EBP-4] # MOV DWORD PTR SS:[EBP-4],-1 # LEA EAX,DWORD PTR SS:[EBP-C] # MOV DWORD PTR FS:[0],EAX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000e8a9 : # PUSH DWORD PTR SS:[EBP-4] # MOV DWORD PTR SS:[EBP-4],-1 # LEA EAX,DWORD PTR SS:[EBP-C] # MOV DWORD PTR FS:[0],EAX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000e8ab : # CLD # MOV DWORD PTR SS:[EBP-4],-1 # LEA EAX,DWORD PTR SS:[EBP-C] # MOV DWORD PTR FS:[0],EAX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000e8ac : # MOV DWORD PTR SS:[EBP-4],-1 # LEA EAX,DWORD PTR SS:[EBP-C] # MOV DWORD PTR FS:[0],EAX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100068b0 : # ADD BYTE PTR DS:[EBX+B8F6EBC6],CL # AND AL,0FF # ADD DWORD PTR DS:[EAX],EDX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100046c8 : # ADD BYTE PTR DS:[ECX],0 # ADD BYTE PTR DS:[ECX+184BE],CL # ADD BYTE PTR DS:[EBX+A1E4E8C6],CL # ADD BYTE PTR DS:[EAX],AL # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000e8b2 : # DEC DWORD PTR SS:[EBP+A364F445] # ADD BYTE PTR DS:[EAX],AL # ADD BYTE PTR DS:[EAX],AL # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100068b6 : # AND AL,0FF # ADD DWORD PTR DS:[EAX],EDX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000e8b7 : # MOV DWORD PTR DS:[0],EAX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000e8b8 : # ADD BYTE PTR DS:[EAX],AL # ADD BYTE PTR DS:[EAX],AL # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000e8ba : # ADD BYTE PTR DS:[EAX],AL # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100028bd : # AND DWORD PTR DS:[ESI+1C],0 # POP ESI # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100088bf : # DEC DWORD PTR DS:[EBX+5FF6E8C6] # ADD BYTE PTR DS:[EAX],AL # RETN 0x18 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100088c4 : # POP EDI # ADD BYTE PTR DS:[EAX],AL # RETN 0x18 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100068c5 : # AND DWORD PTR DS:[ESI+8],0 # MOV DWORD PTR DS:[ESI],WinCRT.1001FF44 # MOV EAX,ESI # POP ESI # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100068c6 : # OR BYTE PTR DS:[EAX],AL # MOV DWORD PTR DS:[ESI],WinCRT.1001FF44 # MOV EAX,ESI # POP ESI # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100068c7 : # OR BYTE PTR DS:[EAX],AL # MOV DWORD PTR DS:[ESI],WinCRT.1001FF44 # MOV EAX,ESI # POP ESI # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000e8c8 : # POP EDI # POP EDI # POP ESI # POP EBX # MOV ESP,EBP # POP EBP # PUSH ECX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100068c9 : # MOV DWORD PTR DS:[ESI],WinCRT.1001FF44 # MOV EAX,ESI # POP ESI # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000e8ca : # POP ESI # POP EBX # MOV ESP,EBP # POP EBP # PUSH ECX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000e8cb : # POP EBX # MOV ESP,EBP # POP EBP # PUSH ECX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000e8cc : # MOV ESP,EBP # POP EBP # PUSH ECX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100068cd : # ADD DWORD PTR DS:[EAX],EDX # MOV EAX,ESI # POP ESI # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100188d0 : # OR AL,7F # ADD AL,3B # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x100148d3 : # MOV DWORD PTR DS:[ECX+EBX*2],FF830689 # SUB BYTE PTR DS:[EDX-18],DH # POP EDI # POP ESI # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x100028d5 : # ADD BYTE PTR DS:[EAX],AL # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000c8d6 : # INC ESI # SUB BYTE PTR DS:[EBX+889084D],CL # ADD DWORD PTR DS:[ESI+28],4 # MOV EAX,ESI # POP ESI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000c8d7 : # SUB BYTE PTR DS:[EBX+889084D],CL # ADD DWORD PTR DS:[ESI+28],4 # MOV EAX,ESI # POP ESI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000c8d8 : # MOV ECX,DWORD PTR SS:[EBP+8] # MOV DWORD PTR DS:[EAX],ECX # ADD DWORD PTR DS:[ESI+28],4 # MOV EAX,ESI # POP ESI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100148da : # SUB BYTE PTR DS:[EDX-18],DH # POP EDI # POP ESI # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1000c8db : # MOV DWORD PTR DS:[EAX],ECX # ADD DWORD PTR DS:[ESI+28],4 # MOV EAX,ESI # POP ESI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000c8dd : # ADD DWORD PTR DS:[ESI+28],4 # MOV EAX,ESI # POP ESI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100048de : # INC ECX # OR BYTE PTR DS:[ECX+BE897C5E],CL # ADD BYTE PTR DS:[EAX],0 # ADD BYTE PTR DS:[ECX+84BE],CL # ADD BYTE PTR DS:[ECX+88BE],CL # ADD BYTE PTR DS:[EBX+9FC1E8C6],CL # ADD BYTE PTR DS:[EAX],AL # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100048df : # OR BYTE PTR DS:[ECX+BE897C5E],CL # ADD BYTE PTR DS:[EAX],0 # ADD BYTE PTR DS:[ECX+84BE],CL # ADD BYTE PTR DS:[ECX+88BE],CL # ADD BYTE PTR DS:[EBX+9FC1E8C6],CL # ADD BYTE PTR DS:[EAX],AL # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1001c6d0 : # OR BH,BH # INC EBP # MOV AH,2A # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x100028e3 : # DEC DWORD PTR DS:[EBX+9C92FFC8] # ADD BYTE PTR DS:[EAX],AL # ADD BL,AL # MOV EAX,WinCRT.1001F9D8 # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100048e5 : # ADD BYTE PTR DS:[EAX],0 # ADD BYTE PTR DS:[ECX+84BE],CL # ADD BYTE PTR DS:[ECX+88BE],CL # ADD BYTE PTR DS:[EBX+9FC1E8C6],CL # ADD BYTE PTR DS:[EAX],AL # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100048e6 : # ADD BYTE PTR DS:[EAX],AL # ADD BYTE PTR DS:[ECX+84BE],CL # ADD BYTE PTR DS:[ECX+88BE],CL # ADD BYTE PTR DS:[EBX+9FC1E8C6],CL # ADD BYTE PTR DS:[EAX],AL # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100028e7 : # XCHG EAX,EDX # PUSHFD # ADD BYTE PTR DS:[EAX],AL # ADD BL,AL # MOV EAX,WinCRT.1001F9D8 # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100028e8 : # PUSHFD # ADD BYTE PTR DS:[EAX],AL # ADD BL,AL # MOV EAX,WinCRT.1001F9D8 # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100028e9 : # ADD BYTE PTR DS:[EAX],AL # ADD BL,AL # MOV EAX,WinCRT.1001F9D8 # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100028ea : # ADD BYTE PTR DS:[EAX],AL # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100048ec : # ADD BYTE PTR DS:[EAX],AL # ADD BYTE PTR DS:[ECX+88BE],CL # ADD BYTE PTR DS:[EBX+9FC1E8C6],CL # ADD BYTE PTR DS:[EAX],AL # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100048ee : # ADD BYTE PTR DS:[ECX+88BE],CL # ADD BYTE PTR DS:[EBX+9FC1E8C6],CL # ADD BYTE PTR DS:[EAX],AL # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100028ef : # STC # ADD DWORD PTR DS:[EAX],EDX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100028f0 : # ADD DWORD PTR DS:[EAX],EDX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100048f2 : # ADD BYTE PTR DS:[EAX],AL # ADD BYTE PTR DS:[EBX+9FC1E8C6],CL # ADD BYTE PTR DS:[EAX],AL # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100048f4 : # ADD BYTE PTR DS:[EBX+9FC1E8C6],CL # ADD BYTE PTR DS:[EAX],AL # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100048fa : # ADD BYTE PTR DS:[EAX],AL # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10014903 : # XOR EDX,EDX # MOV ECX,10B # CMP WORD PTR DS:[EAX+18],CX # SETE DL # MOV EAX,EDX # POP EBP # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x10014905 : # MOV ECX,10B # CMP WORD PTR DS:[EAX+18],CX # SETE DL # MOV EAX,EDX # POP EBP # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x10014906 : # OR EAX,DWORD PTR DS:[ECX] # ADD BYTE PTR DS:[EAX],AL # CMP WORD PTR DS:[EAX+18],CX # SETE DL # MOV EAX,EDX # POP EBP # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x10004907 : # MOV ECX,C7FFFFFE # PUSH ES # MOV AH,0FB # ADD DWORD PTR DS:[EAX],EDX # MOV EAX,ESI # POP ESI # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10014908 : # ADD BYTE PTR DS:[EAX],AL # CMP WORD PTR DS:[EAX+18],CX # SETE DL # MOV EAX,EDX # POP EBP # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x1000490a : # INC EDI # PUSH ES # MOV AH,0FB # ADD DWORD PTR DS:[EAX],EDX # MOV EAX,ESI # POP ESI # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000490b : # MOV DWORD PTR DS:[ESI],WinCRT.1001FBB4 # MOV EAX,ESI # POP ESI # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000490c : # PUSH ES # MOV AH,0FB # ADD DWORD PTR DS:[EAX],EDX # MOV EAX,ESI # POP ESI # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000490d : # MOV AH,0FB # ADD DWORD PTR DS:[EAX],EDX # MOV EAX,ESI # POP ESI # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000490e : # STI # ADD DWORD PTR DS:[EAX],EDX # MOV EAX,ESI # POP ESI # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000490f : # ADD DWORD PTR DS:[EAX],EDX # MOV EAX,ESI # POP ESI # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10008917 : # MOV BH,0FF # DEC DWORD PTR DS:[EBX+5F9CE8C6] # ADD BYTE PTR DS:[EAX],AL # RETN 0x18 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10008919 : # DEC DWORD PTR DS:[EBX+5F9CE8C6] # ADD BYTE PTR DS:[EAX],AL # RETN 0x18 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000e91b : # FICOMP WORD PTR DS:[EDI+5D] # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000c91c : # MOV AX,WORD PTR DS:[EAX] # MOV ECX,DWORD PTR SS:[EBP+8] # MOV WORD PTR DS:[ECX],AX # ADD DWORD PTR DS:[ESI+28],2 # MOV EAX,ESI # POP ESI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000891d : # PUSHFD # POP EDI # ADD BYTE PTR DS:[EAX],AL # RETN 0x18 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000891e : # POP EDI # ADD BYTE PTR DS:[EAX],AL # RETN 0x18 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000891f : # ADD BYTE PTR DS:[EAX],AL # RETN 0x18 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000c922 : # MOV WORD PTR DS:[ECX],AX # ADD DWORD PTR DS:[ESI+28],2 # MOV EAX,ESI # POP ESI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000c923 : # MOV DWORD PTR DS:[ECX],EAX # ADD DWORD PTR DS:[ESI+28],2 # MOV EAX,ESI # POP ESI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000c925 : # ADD DWORD PTR DS:[ESI+28],2 # MOV EAX,ESI # POP ESI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000c926 : # INC ESI # SUB BYTE PTR DS:[EDX],AL # MOV EAX,ESI # POP ESI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000c927 : # SUB BYTE PTR DS:[EDX],AL # MOV EAX,ESI # POP ESI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000818a : # ADD BYTE PTR DS:[BX+SI],AL # RETN 0x0C ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10004941 : # ADD BYTE PTR DS:[EAX],AL # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1001418b : # ADC AL,3B # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1000e945 : # OR AL,5D # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000d18c : # OR BYTE PTR SS:[EBP+A],BH # MOV ECX,DWORD PTR DS:[ECX+4] # MOV EAX,DWORD PTR DS:[ECX+EAX*4] # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000bbd9 : # AND BH,BH # ADC EAX,<&USER32.EnableWindow> # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000895c : # ADD AL,CH # AAS # MOV BH,0FF # DEC DWORD PTR DS:[EBX+5F54E8C6] # ADD BYTE PTR DS:[EAX],AL # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000895e : # AAS # MOV BH,0FF # DEC DWORD PTR DS:[EBX+5F54E8C6] # ADD BYTE PTR DS:[EAX],AL # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000895f : # MOV BH,0FF # DEC DWORD PTR DS:[EBX+5F54E8C6] # ADD BYTE PTR DS:[EAX],AL # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10008961 : # DEC DWORD PTR DS:[EBX+5F54E8C6] # ADD BYTE PTR DS:[EAX],AL # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10006963 : # ADC BH,BH # ADC EAX,<&KERNEL32.LocalFree> # XOR EAX,EAX # INC EAX # POP EBX # POP EBP # RETN 0x0C ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100196e6 : # PUSH DS # ADD BYTE PTR DS:[EAX],AL # POP ECX # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10008966 : # POP EDI # ADD BYTE PTR DS:[EAX],AL # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10008967 : # ADD BYTE PTR DS:[EAX],AL # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10006968 : # ADD DWORD PTR DS:[EAX],EDX # XOR EAX,EAX # INC EAX # POP EBX # POP EBP # RETN 0x0C ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000c96a : # MOV DWORD PTR DS:[ECX],EAX # ADD DWORD PTR DS:[ESI+28],4 # MOV EAX,ESI # POP ESI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100196e7 : # ADD BYTE PTR DS:[EAX],AL # POP ECX # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1000c96c : # ADD DWORD PTR DS:[ESI+28],4 # MOV EAX,ESI # POP ESI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000296d : # DEC ESI # ADC AL,0E8 # PUSH EBP # XCHG EAX,EDX # ADD BYTE PTR DS:[EAX],AL # MOV DWORD PTR DS:[ESI+18],1 # POP ESI # POP EBX # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000296e : # ADC AL,0E8 # PUSH EBP # XCHG EAX,EDX # ADD BYTE PTR DS:[EAX],AL # MOV DWORD PTR DS:[ESI+18],1 # POP ESI # POP EBX # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10002970 : # PUSH EBP # XCHG EAX,EDX # ADD BYTE PTR DS:[EAX],AL # MOV DWORD PTR DS:[ESI+18],1 # POP ESI # POP EBX # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10002971 : # XCHG EAX,EDX # ADD BYTE PTR DS:[EAX],AL # MOV DWORD PTR DS:[ESI+18],1 # POP ESI # POP EBX # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10002972 : # ADD BYTE PTR DS:[EAX],AL # MOV DWORD PTR DS:[ESI+18],1 # POP ESI # POP EBX # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10002974 : # MOV DWORD PTR DS:[ESI+18],1 # POP ESI # POP EBX # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10002977 : # ADD DWORD PTR DS:[EAX],EAX # ADD BYTE PTR DS:[EAX],AL # POP ESI # POP EBX # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10002978 : # ADD BYTE PTR DS:[EAX],AL # ADD BYTE PTR DS:[ESI+5B],BL # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10002979 : # ADD BYTE PTR DS:[EAX],AL # POP ESI # POP EBX # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000297a : # ADD BYTE PTR DS:[ESI+5B],BL # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100067ad : # ADD BYTE PTR ES:[ESI+5D],BL # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000e98c : # OR AL,CH # PUSH DS # INC EDX # ADD BYTE PTR DS:[EAX],AL # POP ECX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000498d : # ADD BYTE PTR DS:[EAX],AL # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000e98e : # PUSH DS # INC EDX # ADD BYTE PTR DS:[EAX],AL # POP ECX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000e98f : # INC EDX # ADD BYTE PTR DS:[EAX],AL # POP ECX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000e990 : # ADD BYTE PTR DS:[EAX],AL # POP ECX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10006198 : # ADD DWORD PTR DS:[EAX],EDX # POP EBP # RETN 0x20 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10006038 : # OR BYTE PTR DS:[EBX+FF006A01],CL # PUSH EAX # ADD AL,5D # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10010998 : # MOV DWORD PTR SS:[EBP-18],ESP # PUSH DWORD PTR SS:[EBP-8] # MOV EAX,DWORD PTR SS:[EBP-4] # MOV DWORD PTR SS:[EBP-4],-2 # MOV DWORD PTR SS:[EBP-8],EAX # LEA EAX,DWORD PTR SS:[EBP-10] # MOV DWORD PTR FS:[0],EAX # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1000e999 : # ADD BYTE PTR DS:[EAX],AL # POP ECX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1001099b : # PUSH DWORD PTR SS:[EBP-8] # MOV EAX,DWORD PTR SS:[EBP-4] # MOV DWORD PTR SS:[EBP-4],-2 # MOV DWORD PTR SS:[EBP-8],EAX # LEA EAX,DWORD PTR SS:[EBP-10] # MOV DWORD PTR FS:[0],EAX # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1001099d : # CLC # MOV EAX,DWORD PTR SS:[EBP-4] # MOV DWORD PTR SS:[EBP-4],-2 # MOV DWORD PTR SS:[EBP-8],EAX # LEA EAX,DWORD PTR SS:[EBP-10] # MOV DWORD PTR FS:[0],EAX # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1001099e : # MOV EAX,DWORD PTR SS:[EBP-4] # MOV DWORD PTR SS:[EBP-4],-2 # MOV DWORD PTR SS:[EBP-8],EAX # LEA EAX,DWORD PTR SS:[EBP-10] # MOV DWORD PTR FS:[0],EAX # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1001099f : # INC EBP # CLD # MOV DWORD PTR SS:[EBP-4],-2 # MOV DWORD PTR SS:[EBP-8],EAX # LEA EAX,DWORD PTR SS:[EBP-10] # MOV DWORD PTR FS:[0],EAX # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x100109a0 : # CLD # MOV DWORD PTR SS:[EBP-4],-2 # MOV DWORD PTR SS:[EBP-8],EAX # LEA EAX,DWORD PTR SS:[EBP-10] # MOV DWORD PTR FS:[0],EAX # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x100109a1 : # MOV DWORD PTR SS:[EBP-4],-2 # MOV DWORD PTR SS:[EBP-8],EAX # LEA EAX,DWORD PTR SS:[EBP-10] # MOV DWORD PTR FS:[0],EAX # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10014c46 : # OR BYTE PTR DS:[EBX+1002B6DC],AH # POP EBP # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x100089a7 : # MOV DH,0FF # DEC DWORD PTR DS:[EBX+5F0CE8C6] # ADD BYTE PTR DS:[EAX],AL # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100109a8 : # MOV DWORD PTR SS:[EBP-8],EAX # LEA EAX,DWORD PTR SS:[EBP-10] # MOV DWORD PTR FS:[0],EAX # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x100089a9 : # DEC DWORD PTR DS:[EBX+5F0CE8C6] # ADD BYTE PTR DS:[EAX],AL # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10014c47 : # MOV DWORD PTR DS:[1002B6DC],EAX # POP EBP # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x100089ad : # OR AL,5F # ADD BYTE PTR DS:[EAX],AL # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100089ae : # POP EDI # ADD BYTE PTR DS:[EAX],AL # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100109af : # MOV DWORD PTR DS:[0],EAX # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1000e9b0 : # MOV BYTE PTR DS:[EBX+EDI],75 # OR BYTE PTR DS:[EDX-10],DH # POP ESI # POP EBP # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100109b2 : # ADD BYTE PTR DS:[EAX],AL # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1000e9b4 : # OR BYTE PTR DS:[EDX-10],DH # POP ESI # POP EBP # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100049b7 : # DEC DWORD PTR DS:[ECX+4EB0446] # AND DWORD PTR DS:[ESI+4],0 # MOV EAX,ESI # POP ESI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000519f : # ADC BYTE PTR DS:[EAX],AL # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100049bd : # AND DWORD PTR DS:[ESI+4],0 # MOV EAX,ESI # POP ESI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100109c0 : # POP EDI # POP EDI # POP ESI # POP EBX # MOV ESP,EBP # POP EBP # PUSH ECX # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x100109c1 : # POP EDI # POP ESI # POP EBX # MOV ESP,EBP # POP EBP # PUSH ECX # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x100109c2 : # POP ESI # POP EBX # MOV ESP,EBP # POP EBP # PUSH ECX # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x100109c3 : # POP EBX # MOV ESP,EBP # POP EBP # PUSH ECX # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x100109c4 : # MOV ESP,EBP # POP EBP # PUSH ECX # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10001c4c : # ADC BYTE PTR DS:[ECX+5EC68B06],CL # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10014c4e : # MOV EDI,EDI # PUSH EBP # MOV EBP,ESP # MOV EAX,DWORD PTR SS:[EBP+8] # MOV DWORD PTR DS:[1002B6E8],EAX # POP EBP # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x100049d7 : # ADC BYTE PTR SS:[EBP+E80575C0],AL # PUSH 5D000012 # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100086fa : # DEC DWORD PTR DS:[EBX+61BBE8C6] # ADD BYTE PTR DS:[EAX],AL # RETN 0x18 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100049df : # ADD BYTE PTR DS:[EAX],AL # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100149ec : # MOV DWORD PTR FS:[0],ECX # POP ECX # POP EDI # POP ESI # POP EBX # MOV ESP,EBP # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x100149ed : # MOV DWORD PTR DS:[0],ECX # POP ECX # POP EDI # POP ESI # POP EBX # MOV ESP,EBP # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x100149ee : # OR EAX,0 # POP ECX # POP EDI # POP ESI # POP EBX # MOV ESP,EBP # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x100149ef : # ADD BYTE PTR DS:[EAX],AL # ADD BYTE PTR DS:[EAX],AL # POP ECX # POP EDI # POP ESI # POP EBX # MOV ESP,EBP # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x100069f0 : # MOV BYTE PTR DS:[ESI],BL # XOR EAX,EAX # POP EDI # POP ESI # POP EBX # POP EBP # RETN 0x0C ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100069f1 : # PUSH DS # XOR EAX,EAX # POP EDI # POP ESI # POP EBX # POP EBP # RETN 0x0C ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100149f2 : # ADD BYTE PTR DS:[ECX+5F],BL # POP ESI # POP EBX # MOV ESP,EBP # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x100149f3 : # POP ECX # POP EDI # POP ESI # POP EBX # MOV ESP,EBP # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x100149f4 : # POP EDI # POP ESI # POP EBX # MOV ESP,EBP # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x100089f5 : # MOV DH,0FF # DEC DWORD PTR DS:[EBX+5EBEE8C6] # ADD BYTE PTR DS:[EAX],AL # RETN 0x0C ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100149f6 : # POP EBX # MOV ESP,EBP # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x100089f7 : # DEC DWORD PTR DS:[EBX+5EBEE8C6] # ADD BYTE PTR DS:[EAX],AL # RETN 0x0C ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100149fb : # MOV EAX,DWORD PTR SS:[EBP-14] # MOV ECX,DWORD PTR DS:[EAX] # MOV EAX,DWORD PTR DS:[ECX] # XOR EDX,EDX # CMP EAX,C0000005 # SETE DL # MOV EAX,EDX # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x100089fc : # POP ESI # ADD BYTE PTR DS:[EAX],AL # RETN 0x0C ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100089fd : # ADD BYTE PTR DS:[EAX],AL # RETN 0x0C ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100149fe : # MOV ECX,DWORD PTR DS:[EAX] # MOV EAX,DWORD PTR DS:[ECX] # XOR EDX,EDX # CMP EAX,C0000005 # SETE DL # MOV EAX,EDX # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10014a00 : # MOV EAX,DWORD PTR DS:[ECX] # XOR EDX,EDX # CMP EAX,C0000005 # SETE DL # MOV EAX,EDX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10014a02 : # XOR EDX,EDX # CMP EAX,C0000005 # SETE DL # MOV EAX,EDX # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x10014a04 : # CMP EAX,C0000005 # SETE DL # MOV EAX,EDX # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x10014a07 : # ADD AL,AL # SETE DL # MOV EAX,EDX # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x10014a09 : # SETE DL # MOV EAX,EDX # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x10014a1e : # MOV DWORD PTR FS:[0],ECX # POP ECX # POP EDI # POP ESI # POP EBX # MOV ESP,EBP # POP EBP # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x10006a1f : # DEC DWORD PTR DS:[EBX+4C20C40] # ADD BYTE PTR DS:[EAX+10029370],BH # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10014a20 : # OR EAX,0 # POP ECX # POP EDI # POP ESI # POP EBX # MOV ESP,EBP # POP EBP # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x10006a21 : # INC EAX # OR AL,0C2 # ADD AL,0 # MOV EAX,WinCRT.10029370 # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10014a22 : # ADD BYTE PTR DS:[EAX],AL # ADD BYTE PTR DS:[ECX+5F],BL # POP ESI # POP EBX # MOV ESP,EBP # POP EBP # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x10014a23 : # ADD BYTE PTR DS:[EAX],AL # POP ECX # POP EDI # POP ESI # POP EBX # MOV ESP,EBP # POP EBP # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x10014a24 : # ADD BYTE PTR DS:[ECX+5F],BL # POP ESI # POP EBX # MOV ESP,EBP # POP EBP # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x10006a25 : # ADD BYTE PTR DS:[EAX+10029370],BH # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10014a26 : # POP EDI # POP ESI # POP EBX # MOV ESP,EBP # POP EBP # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x10014a27 : # POP ESI # POP EBX # MOV ESP,EBP # POP EBP # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x10014a28 : # POP EBX # MOV ESP,EBP # POP EBP # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x10014a29 : # MOV ESP,EBP # POP EBP # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x10014a30 : # MOV EBP,ESP # MOV EAX,DWORD PTR SS:[EBP+8] # MOV DWORD PTR DS:[1002B6C8],EAX # MOV DWORD PTR DS:[1002B6CC],EAX # MOV DWORD PTR DS:[1002B6D0],EAX # MOV DWORD PTR DS:[1002B6D4],EAX # POP EBP # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x10014a32 : # MOV EAX,DWORD PTR SS:[EBP+8] # MOV DWORD PTR DS:[1002B6C8],EAX # MOV DWORD PTR DS:[1002B6CC],EAX # MOV DWORD PTR DS:[1002B6D0],EAX # MOV DWORD PTR DS:[1002B6D4],EAX # POP EBP # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x10014a33 : # INC EBP # OR BYTE PTR DS:[EBX+1002B6C8],AH # MOV DWORD PTR DS:[1002B6CC],EAX # MOV DWORD PTR DS:[1002B6D0],EAX # MOV DWORD PTR DS:[1002B6D4],EAX # POP EBP # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x10014a34 : # OR BYTE PTR DS:[EBX+1002B6C8],AH # MOV DWORD PTR DS:[1002B6CC],EAX # MOV DWORD PTR DS:[1002B6D0],EAX # MOV DWORD PTR DS:[1002B6D4],EAX # POP EBP # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x10014a35 : # MOV DWORD PTR DS:[1002B6C8],EAX # MOV DWORD PTR DS:[1002B6CC],EAX # MOV DWORD PTR DS:[1002B6D0],EAX # MOV DWORD PTR DS:[1002B6D4],EAX # POP EBP # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x10014a37 : # MOV DH,2 # ADC BYTE PTR DS:[EBX+1002B6CC],AH # MOV DWORD PTR DS:[1002B6D0],EAX # MOV DWORD PTR DS:[1002B6D4],EAX # POP EBP # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x10014a38 : # ADD DL,BYTE PTR DS:[EAX] # MOV DWORD PTR DS:[1002B6CC],EAX # MOV DWORD PTR DS:[1002B6D0],EAX # MOV DWORD PTR DS:[1002B6D4],EAX # POP EBP # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x10014a39 : # ADC BYTE PTR DS:[EBX+1002B6CC],AH # MOV DWORD PTR DS:[1002B6D0],EAX # MOV DWORD PTR DS:[1002B6D4],EAX # POP EBP # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x10014a3a : # MOV DWORD PTR DS:[1002B6CC],EAX # MOV DWORD PTR DS:[1002B6D0],EAX # MOV DWORD PTR DS:[1002B6D4],EAX # POP EBP # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x10014c5f : # PUSH EBP # MOV EBP,ESP # MOV EAX,DWORD PTR SS:[EBP+8] # MOV DWORD PTR DS:[1002B6EC],EAX # POP EBP # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x10014a3c : # MOV DH,2 # ADC BYTE PTR DS:[EBX+1002B6D0],AH # MOV DWORD PTR DS:[1002B6D4],EAX # POP EBP # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x10014a3d : # ADD DL,BYTE PTR DS:[EAX] # MOV DWORD PTR DS:[1002B6D0],EAX # MOV DWORD PTR DS:[1002B6D4],EAX # POP EBP # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x10014a3e : # ADC BYTE PTR DS:[EBX+1002B6D0],AH # MOV DWORD PTR DS:[1002B6D4],EAX # POP EBP # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x10014a3f : # MOV DWORD PTR DS:[1002B6D0],EAX # MOV DWORD PTR DS:[1002B6D4],EAX # POP EBP # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x10008a40 : # ADD AL,CH # POP EBX # MOV DH,0FF # DEC DWORD PTR DS:[EBX+5E70E8C6] # ADD BYTE PTR DS:[EAX],AL # RETN 0x08 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10014a41 : # MOV DH,2 # ADC BYTE PTR DS:[EBX+1002B6D4],AH # POP EBP # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x10014a42 : # ADD DL,BYTE PTR DS:[EAX] # MOV DWORD PTR DS:[1002B6D4],EAX # POP EBP # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x10014a43 : # ADC BYTE PTR DS:[EBX+1002B6D4],AH # POP EBP # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x10014a44 : # MOV DWORD PTR DS:[1002B6D4],EAX # POP EBP # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x10008a45 : # DEC DWORD PTR DS:[EBX+5E70E8C6] # ADD BYTE PTR DS:[EAX],AL # RETN 0x08 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10008a4a : # POP ESI # ADD BYTE PTR DS:[EAX],AL # RETN 0x08 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000d1b7 : # MOV DWORD PTR DS:[EAX],WinCRT.10020DB8 # MOV DWORD PTR DS:[EAX+4],ECX # MOV DWORD PTR DS:[EAX+10],ECX # MOV DWORD PTR DS:[EAX+C],ECX # MOV DWORD PTR DS:[EAX+8],ECX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000aa4d : # ADD BYTE PTR DS:[EBX+3E7CE8C6],CL # ADD BYTE PTR DS:[EAX],AL # RETN 0x0C ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000aa52 : # ADD BYTE PTR DS:[EAX],AL # RETN 0x0C ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000aa53 : # ADD BYTE PTR DS:[EAX],AL # RETN 0x0C ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10006a55 : # AND DWORD PTR DS:[EAX+4],0 # MOV DWORD PTR DS:[EAX],EDI # MOV DWORD PTR DS:[EAX+C],1 # MOV DWORD PTR DS:[EAX+8],ESI # POP EDI # POP ESI # POP EBP # RETN 0x08 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10006a56 : # PUSHAD # ADD AL,0 # MOV DWORD PTR DS:[EAX],EDI # MOV DWORD PTR DS:[EAX+C],1 # MOV DWORD PTR DS:[EAX+8],ESI # POP EDI # POP ESI # POP EBP # RETN 0x08 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10006a57 : # ADD AL,0 # MOV DWORD PTR DS:[EAX],EDI # MOV DWORD PTR DS:[EAX+C],1 # MOV DWORD PTR DS:[EAX+8],ESI # POP EDI # POP ESI # POP EBP # RETN 0x08 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10006a58 : # ADD BYTE PTR DS:[ECX+C40C738],CL # ADD DWORD PTR DS:[EAX],EAX # ADD BYTE PTR DS:[EAX],AL # MOV DWORD PTR DS:[EAX+8],ESI # POP EDI # POP ESI # POP EBP # RETN 0x08 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10006a59 : # MOV DWORD PTR DS:[EAX],EDI # MOV DWORD PTR DS:[EAX+C],1 # MOV DWORD PTR DS:[EAX+8],ESI # POP EDI # POP ESI # POP EBP # RETN 0x08 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10006a5a : # CMP BH,AL # INC EAX # OR AL,1 # ADD BYTE PTR DS:[EAX],AL # ADD BYTE PTR DS:[ECX+5E5F0870],CL # POP EBP # RETN 0x08 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000ea5b : # ADC DL,CL # ADD DL,BYTE PTR DS:[EAX] # XOR EAX,EAX # POP EBP # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10006a5c : # INC EAX # OR AL,1 # ADD BYTE PTR DS:[EAX],AL # ADD BYTE PTR DS:[ECX+5E5F0870],CL # POP EBP # RETN 0x08 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10006a5d : # OR AL,1 # ADD BYTE PTR DS:[EAX],AL # ADD BYTE PTR DS:[ECX+5E5F0870],CL # POP EBP # RETN 0x08 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10006a5e : # ADD DWORD PTR DS:[EAX],EAX # ADD BYTE PTR DS:[EAX],AL # MOV DWORD PTR DS:[EAX+8],ESI # POP EDI # POP ESI # POP EBP # RETN 0x08 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10006a5f : # ADD BYTE PTR DS:[EAX],AL # ADD BYTE PTR DS:[ECX+5E5F0870],CL # POP EBP # RETN 0x08 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10006a60 : # ADD BYTE PTR DS:[EAX],AL # MOV DWORD PTR DS:[EAX+8],ESI # POP EDI # POP ESI # POP EBP # RETN 0x08 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10006a61 : # ADD BYTE PTR DS:[ECX+5E5F0870],CL # POP EBP # RETN 0x08 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10006a64 : # OR BYTE PTR DS:[EDI+5E],BL # POP EBP # RETN 0x08 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10006a76 : # ADD BYTE PTR DS:[EAX],AL # POP ECX # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10006a77 : # ADD BYTE PTR DS:[ECX+5D],BL # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10004a88 : # TEST AL,0F1 # ADD DWORD PTR DS:[EAX],EDX # POP EDI # POP ESI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10004a8a : # ADD DWORD PTR DS:[EAX],EDX # POP EDI # POP ESI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10004a8b : # ADC BYTE PTR DS:[EDI+5E],BL # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10010a9b : # DEC DWORD PTR DS:[EBX+5E5FF445] # POP EBX # MOV ESP,EBP # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10010a9c : # MOV EAX,DWORD PTR SS:[EBP-C] # POP EDI # POP ESI # POP EBX # MOV ESP,EBP # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10010a9f : # POP EDI # POP ESI # POP EBX # MOV ESP,EBP # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10010aa0 : # POP ESI # POP EBX # MOV ESP,EBP # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10010aa1 : # POP EBX # MOV ESP,EBP # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10010aa2 : # MOV ESP,EBP # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1000aaa3 : # ADD EAX,FFB1A0E8 # DEC DWORD PTR DS:[ECX+5E5F147E] # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1001eaa5 : # POP ECX # MOV BYTE PTR DS:[10028FC0],AL # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1001eaa6 : # MOV BYTE PTR DS:[10028FC0],AL # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1000aaa8 : # DEC DWORD PTR DS:[ECX+5E5F147E] # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10006aa9 : # OR BYTE PTR DS:[ESI+5D],BL # RETN 0x0C ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000aaab : # ADC AL,5F # POP ESI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10006aad : # OR AL,0 # MOV EAX,ECX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10006aba : # XOR ECX,ECX # MOV DWORD PTR DS:[EAX+10],2 # MOV DWORD PTR DS:[EAX+8],ECX # MOV DWORD PTR DS:[EAX+C],ECX # MOV WORD PTR DS:[EAX+14],CX # MOV WORD PTR DS:[EAX+16],CX # MOV DWORD PTR DS:[EAX+4],EAX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10006abc : # MOV DWORD PTR DS:[EAX+10],2 # MOV DWORD PTR DS:[EAX+8],ECX # MOV DWORD PTR DS:[EAX+C],ECX # MOV WORD PTR DS:[EAX+14],CX # MOV WORD PTR DS:[EAX+16],CX # MOV DWORD PTR DS:[EAX+4],EAX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10006abd : # INC EAX # ADC BYTE PTR DS:[EDX],AL # ADD BYTE PTR DS:[EAX],AL # ADD BYTE PTR DS:[ECX+48890848],CL # OR AL,66 # MOV DWORD PTR DS:[EAX+14],ECX # MOV WORD PTR DS:[EAX+16],CX # MOV DWORD PTR DS:[EAX+4],EAX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10006abe : # ADC BYTE PTR DS:[EDX],AL # ADD BYTE PTR DS:[EAX],AL # ADD BYTE PTR DS:[ECX+48890848],CL # OR AL,66 # MOV DWORD PTR DS:[EAX+14],ECX # MOV WORD PTR DS:[EAX+16],CX # MOV DWORD PTR DS:[EAX+4],EAX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10006abf : # ADD AL,BYTE PTR DS:[EAX] # ADD BYTE PTR DS:[EAX],AL # MOV DWORD PTR DS:[EAX+8],ECX # MOV DWORD PTR DS:[EAX+C],ECX # MOV WORD PTR DS:[EAX+14],CX # MOV WORD PTR DS:[EAX+16],CX # MOV DWORD PTR DS:[EAX+4],EAX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10006ac0 : # ADD BYTE PTR DS:[EAX],AL # ADD BYTE PTR DS:[ECX+48890848],CL # OR AL,66 # MOV DWORD PTR DS:[EAX+14],ECX # MOV WORD PTR DS:[EAX+16],CX # MOV DWORD PTR DS:[EAX+4],EAX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10006ac1 : # ADD BYTE PTR DS:[EAX],AL # MOV DWORD PTR DS:[EAX+8],ECX # MOV DWORD PTR DS:[EAX+C],ECX # MOV WORD PTR DS:[EAX+14],CX # MOV WORD PTR DS:[EAX+16],CX # MOV DWORD PTR DS:[EAX+4],EAX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10006ac2 : # ADD BYTE PTR DS:[ECX+48890848],CL # OR AL,66 # MOV DWORD PTR DS:[EAX+14],ECX # MOV WORD PTR DS:[EAX+16],CX # MOV DWORD PTR DS:[EAX+4],EAX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10006ac3 : # MOV DWORD PTR DS:[EAX+8],ECX # MOV DWORD PTR DS:[EAX+C],ECX # MOV WORD PTR DS:[EAX+14],CX # MOV WORD PTR DS:[EAX+16],CX # MOV DWORD PTR DS:[EAX+4],EAX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10006ac4 : # DEC EAX # OR BYTE PTR DS:[ECX+89660C48],CL # DEC EAX # ADC AL,66 # MOV DWORD PTR DS:[EAX+16],ECX # MOV DWORD PTR DS:[EAX+4],EAX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10006ac5 : # OR BYTE PTR DS:[ECX+89660C48],CL # DEC EAX # ADC AL,66 # MOV DWORD PTR DS:[EAX+16],ECX # MOV DWORD PTR DS:[EAX+4],EAX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10006ac6 : # MOV DWORD PTR DS:[EAX+C],ECX # MOV WORD PTR DS:[EAX+14],CX # MOV WORD PTR DS:[EAX+16],CX # MOV DWORD PTR DS:[EAX+4],EAX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10006ac7 : # DEC EAX # OR AL,66 # MOV DWORD PTR DS:[EAX+14],ECX # MOV WORD PTR DS:[EAX+16],CX # MOV DWORD PTR DS:[EAX+4],EAX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10006ac8 : # OR AL,66 # MOV DWORD PTR DS:[EAX+14],ECX # MOV WORD PTR DS:[EAX+16],CX # MOV DWORD PTR DS:[EAX+4],EAX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10006ac9 : # MOV WORD PTR DS:[EAX+14],CX # MOV WORD PTR DS:[EAX+16],CX # MOV DWORD PTR DS:[EAX+4],EAX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10006aca : # MOV DWORD PTR DS:[EAX+14],ECX # MOV WORD PTR DS:[EAX+16],CX # MOV DWORD PTR DS:[EAX+4],EAX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10006acb : # DEC EAX # ADC AL,66 # MOV DWORD PTR DS:[EAX+16],ECX # MOV DWORD PTR DS:[EAX+4],EAX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10006acc : # ADC AL,66 # MOV DWORD PTR DS:[EAX+16],ECX # MOV DWORD PTR DS:[EAX+4],EAX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10006acd : # MOV WORD PTR DS:[EAX+16],CX # MOV DWORD PTR DS:[EAX+4],EAX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10006acf : # DEC EAX # PUSH SS # MOV DWORD PTR DS:[EAX+4],EAX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10006ad0 : # PUSH SS # MOV DWORD PTR DS:[EAX+4],EAX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10007723 : # ADD BYTE PTR DS:[EAX+208308EB],AL # ADD BYTE PTR DS:[EAX+80004001],BH # POP EBP # RETN 0x08 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10006ad8 : # INC ECX # ADC BYTE PTR DS:[EDX-10],AL # XADD DWORD PTR DS:[EAX],EDX # LEA EAX,DWORD PTR DS:[ECX+4] # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10006ad9 : # ADC BYTE PTR DS:[EDX-10],AL # XADD DWORD PTR DS:[EAX],EDX # LEA EAX,DWORD PTR DS:[ECX+4] # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10006adc : # XADD DWORD PTR DS:[EAX],EDX # LEA EAX,DWORD PTR DS:[ECX+4] # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10004ae0 : # ADD BYTE PTR DS:[EBX+9DD5E806],CL # ADD BYTE PTR DS:[EAX],AL # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10004ae4 : # AAD 9D # ADD BYTE PTR DS:[EAX],AL # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10004ae5 : # POPFD # ADD BYTE PTR DS:[EAX],AL # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10004ae6 : # ADD BYTE PTR DS:[EAX],AL # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10012ae7 : # TEST AL,0F1 # ADD DWORD PTR DS:[EAX],EDX # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10006ae8 : # XOR ECX,ECX # CMP DWORD PTR DS:[EAX+2C],ECX # SETE CL # MOV EAX,ECX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10012ae9 : # ADD DWORD PTR DS:[EAX],EDX # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10006aea : # CMP DWORD PTR DS:[EAX+2C],ECX # SETE CL # MOV EAX,ECX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1001aaec : # INC DWORD PTR DS:[EBX+5D5E2CC4] # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10006aed : # SETE CL # MOV EAX,ECX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1001aaee : # LES EBP,FWORD PTR DS:[ESI+EBX*2] # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10009728 : # MOV AH,0F2 # ADD DWORD PTR DS:[EAX],EDX # POP ESI # POP EBP # RETN 0x10 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10014af2 : # OR BYTE PTR DS:[EBX+8B5AEB06],CL # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x100109b0 : # ADD BYTE PTR DS:[EAX],AL # ADD BYTE PTR DS:[EAX],AL # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10008c7e : # AND BH,BH # ADC EAX,<&USER32.PostMessageA> # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10018af8 : # MOV FS,WORD PTR DS:[C4830000] # ADC BYTE PTR DS:[EBX],BH # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10018af9 : # AND EAX,C4830000 # ADC BYTE PTR DS:[EBX],BH # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1000cafa : # ADD ESP,10 # ADD DWORD PTR DS:[ESI+28],EBX # POP EDI # POP ESI # POP EBX # POP EBP # RETN 0x08 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000cafb : # LES EDX,FWORD PTR DS:[EAX] # ADD DWORD PTR DS:[ESI+28],EBX # POP EDI # POP ESI # POP EBX # POP EBP # RETN 0x08 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000cafc : # ADC BYTE PTR DS:[ECX],AL # POP ESI # SUB BYTE PTR DS:[EDI+5E],BL # POP EBX # POP EBP # RETN 0x08 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000cafd : # ADD DWORD PTR DS:[ESI+28],EBX # POP EDI # POP ESI # POP EBX # POP EBP # RETN 0x08 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10018afe : # ADC BYTE PTR DS:[EBX],BH # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1000caff : # SUB BYTE PTR DS:[EDI+5E],BL # POP EBX # POP EBP # RETN 0x08 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10006b00 : # ADD DWORD PTR DS:[EAX],EDX # RETN ** [WinCRT.dll] ** | null,unicodereverse,ascii {PAGE_EXECUTE_READ}
0x10004b20 : # ADD EDI,EDI # ADC CL,CL # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10004b22 : # ADC CL,CL # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100029ee : # AND BH,BH # XLAT BYTE PTR DS:[EBX+AL] # POP EDI # POP ESI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10004b3c : # ADD AL,0 # INC DWORD PTR DS:[1002903C] # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10004b3e : # INC DWORD PTR DS:[1002903C] # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10004b40 : # CMP AL,90 # ADD DL,BYTE PTR DS:[EAX] # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100081e1 : # DEC DWORD PTR DS:[EBX+66D4E8C6] # ADD BYTE PTR DS:[EAX],AL # RETN 0x24 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10004b4e : # ADC BYTE PTR GS:[EBP+830577D2],AL # CLC # PUSH DWORD PTR DS:[ESI+7] # MOV EAX,80070057 # POP EBP # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10004b4f : # ADC BYTE PTR SS:[EBP+830577D2],AL # CLC # PUSH DWORD PTR DS:[ESI+7] # MOV EAX,80070057 # POP EBP # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10004b55 : # CLC # PUSH DWORD PTR DS:[ESI+7] # MOV EAX,80070057 # POP EBP # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10004b56 : # PUSH DWORD PTR DS:[ESI+7] # MOV EAX,80070057 # POP EBP # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10004382 : # PUSH ES # ADD BYTE PTR DS:[EAX],AL # MOV EAX,ESI # POP ESI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10004b61 : # DEC EBP # OR BYTE PTR DS:[ECX+5DC03301],CL # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10004b62 : # OR BYTE PTR DS:[ECX+5DC03301],CL # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000cb65 : # DEC DWORD PTR DS:[EBX+C95EFC45] # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100081e7 : # ADD BYTE PTR DS:[EAX],AL # RETN 0x24 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10014c92 : # MOV EAX,DWORD PTR DS:[EAX] # MOV DWORD PTR SS:[EBP-20],EAX # XOR ECX,ECX # CMP EAX,C0000017 # SETE CL # MOV EAX,ECX # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1000a73d : # DEC DWORD PTR DS:[EBX+77E8EC45] # INC ECX # ADD BYTE PTR DS:[EAX],AL # RETN 0x10 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000903b : # DAS # ADD BYTE PTR DS:[EAX],AL # AND DWORD PTR DS:[ESI+20],0 # AND DWORD PTR DS:[ESI+50],0 # MOV EAX,EDI # POP EDI # POP ESI # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1001eb74 : # OR BYTE PTR DS:[EDX],AL # ADC BH,BH # ADC EAX,<&USER32.RegisterWindowMessageA> # MOV DWORD PTR DS:[1002ABB8],EAX # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x100029f0 : # XLAT BYTE PTR DS:[EBX+AL] # POP EDI # POP ESI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1001eb76 : # ADC BH,BH # ADC EAX,<&USER32.RegisterWindowMessageA> # MOV DWORD PTR DS:[1002ABB8],EAX # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10004b77 : # ADD BYTE PTR DS:[EAX],AL # MOV EAX,DWORD PTR DS:[ECX+4] # ADD EAX,DWORD PTR SS:[EBP+8] # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1001eb78 : # ADC EAX,<&USER32.RegisterWindowMessageA> # MOV DWORD PTR DS:[1002ABB8],EAX # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1001eb7b : # ADD DWORD PTR DS:[EAX],EDX # MOV DWORD PTR DS:[1002ABB8],EAX # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1001eb7c : # ADC BYTE PTR DS:[EBX+1002ABB8],AH # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1000eb7d : # ADD BYTE PTR DS:[EAX+ECX+6A],DH # OR AL,CH # DEC EDI # AAS # ADD BYTE PTR DS:[EAX],AL # POP ECX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000eb81 : # OR AL,CH # DEC EDI # AAS # ADD BYTE PTR DS:[EAX],AL # POP ECX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000eb83 : # DEC EDI # AAS # ADD BYTE PTR DS:[EAX],AL # POP ECX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000eb84 : # AAS # ADD BYTE PTR DS:[EAX],AL # POP ECX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000eb85 : # ADD BYTE PTR DS:[EAX],AL # POP ECX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000eb8a : # DAA # PUSH DS # ADD BYTE PTR DS:[EAX],AL # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000eb8b : # PUSH DS # ADD BYTE PTR DS:[EAX],AL # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000eb8c : # ADD BYTE PTR DS:[EAX],AL # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10011742 : # AND AL,4 # MUL ECX # RETN 0x10 ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x1000a743 : # INC ECX # ADD BYTE PTR DS:[EAX],AL # RETN 0x10 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10014c99 : # CMP EAX,C0000017 # SETE CL # MOV EAX,ECX # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10011744 : # MUL ECX # RETN 0x10 ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x1000eb9a : # OR AL,CH # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000eba2 : # OR AL,5D # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10010ba3 : # ADC CL,CL # RETN 0x08 ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10014c9c : # ADD AL,AL # SETE CL # MOV EAX,ECX # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10018bb5 : # ADC BYTE PTR DS:[EBX],BH # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10007691 : # ADD DWORD PTR DS:[EAX],EAX # ADD BYTE PTR DS:[EAX],AL # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10004bbb : # DEC DWORD PTR DS:[EBX+8908890E] # POP EDI # POP ESI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000b74a : # ADD DWORD PTR DS:[EBX],ESI # DEC DWORD PTR DS:[EBX+3169E8C7] # ADD BYTE PTR DS:[EAX],AL # RETN 0x0C ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1001abbe : # MOV AL,BYTE PTR DS:[59FFFF37] # POP ESI # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10004bbf : # OR BYTE PTR DS:[ECX+5D5E5F3E],CL # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000cbc1 : # ADD EBP,EAX # SUB AL,1 # ADD BYTE PTR DS:[EAX],AL # POP EBP # RETN 0x08 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000cbc3 : # SUB AL,1 # ADD BYTE PTR DS:[EAX],AL # POP EBP # RETN 0x08 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000cbc4 : # ADD DWORD PTR DS:[EAX],EAX # ADD BYTE PTR SS:[EBP-3E],BL # OR BYTE PTR DS:[EAX],AL # MOV EAX,WinCRT.100209D0 # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000cbc5 : # ADD BYTE PTR DS:[EAX],AL # POP EBP # RETN 0x08 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000cbc6 : # ADD BYTE PTR SS:[EBP-3E],BL # OR BYTE PTR DS:[EAX],AL # MOV EAX,WinCRT.100209D0 # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000cbc9 : # OR BYTE PTR DS:[EAX],AL # MOV EAX,WinCRT.100209D0 # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000cbca : # ADD BYTE PTR DS:[EAX+100209D0],BH # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100141f9 : # ADC AL,3B # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10012bdc : # MOV AL,BYTE PTR DS:[5E1001F1] # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10012bde : # ADD DWORD PTR DS:[EAX],EDX # POP ESI # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10012bdf : # ADC BYTE PTR DS:[ESI+5D],BL # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10011750 : # AND AL,8 # MUL DWORD PTR SS:[ESP+14] # ADD EBX,EAX # MOV EAX,DWORD PTR SS:[ESP+8] # MUL ECX # ADD EDX,EBX # POP EBX # RETN 0x10 ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x10002be6 : # ADD DWORD PTR DS:[EAX],EDX # POP EDI # POP ESI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10011751 : # OR BH,DH # AND AL,14 # ADD EBX,EAX # MOV EAX,DWORD PTR SS:[ESP+8] # MUL ECX # ADD EDX,EBX # POP EBX # RETN 0x10 ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x10006beb : # OR EAX,1D39C033 # MOV AL,BYTE PTR DS:[5B1002AB] # SETNE AL # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10006bec : # XOR EAX,EAX # CMP DWORD PTR DS:[1002ABA0],EBX # POP EBX # SETNE AL # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10011752 : # MUL DWORD PTR SS:[ESP+14] # ADD EBX,EAX # MOV EAX,DWORD PTR SS:[ESP+8] # MUL ECX # ADD EDX,EBX # POP EBX # RETN 0x10 ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x10006bee : # CMP DWORD PTR DS:[1002ABA0],EBX # POP EBX # SETNE AL # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10006bf0 : # MOV AL,BYTE PTR DS:[5B1002AB] # SETNE AL # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10002bf1 : # ADD BYTE PTR DS:[EAX],AL # MOV EAX,DWORD PTR DS:[EAX+4] # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10006bf2 : # ADD DL,BYTE PTR DS:[EAX] # POP EBX # SETNE AL # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10011753 : # AND AL,14 # ADD EBX,EAX # MOV EAX,DWORD PTR SS:[ESP+8] # MUL ECX # ADD EDX,EBX # POP EBX # RETN 0x10 ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x10006bf4 : # POP EBX # SETNE AL # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10006bf5 : # SETNE AL # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000ebf6 : # ADD BYTE PTR DS:[EAX],AL # ADD ESP,24 # MOV DWORD PTR DS:[10027B80],EAX # POP ESI # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10002bf8 : # NOP # POP SS # ADD BYTE PTR DS:[EAX],AL # ADD EAX,30 # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10002bf9 : # POP SS # ADD BYTE PTR DS:[EAX],AL # ADD EAX,30 # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10002bfa : # ADD BYTE PTR DS:[EAX],AL # ADD EAX,30 # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000ebfb : # MOV DWORD PTR DS:[10027B80],EAX # POP ESI # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000ebfc : # CMP BYTE PTR DS:[EBX+2],10 # POP ESI # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10011756 : # ADD EBX,EAX # MOV EAX,DWORD PTR SS:[ESP+8] # MUL ECX # ADD EDX,EBX # POP EBX # RETN 0x10 ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x1001b201 : # DEC EAX # OR BYTE PTR DS:[EBX-37],BL # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1001ac08 : # INC ESI # INC DWORD PTR DS:[EBX+C95E20C4] # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1001ac09 : # INC DWORD PTR DS:[EBX+C95E20C4] # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1001ac0c : # AND BYTE PTR DS:[ESI-37],BL # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1001b202 : # OR BYTE PTR DS:[EBX-37],BL # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10002c22 : # ADD DWORD PTR DS:[EAX],EDX # XOR EAX,EAX # POP EBP # RETN 0x08 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10002cb1 : # AND EAX,DWORD PTR DS:[EAX] # ADD AL,CH # ADD AL,0BC # ADD BYTE PTR DS:[EAX],AL # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000f207 : # AND AL,4 # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10006c2c : # ADC BYTE PTR DS:[EBX],BH # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10002cb3 : # ADD AL,CH # ADD AL,0BC # ADD BYTE PTR DS:[EAX],AL # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10006c3d : # ADC BYTE PTR DS:[EBX],BH # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10014c3f : # MOV EDI,EDI # PUSH EBP # MOV EBP,ESP # MOV EAX,DWORD PTR SS:[EBP+8] # MOV DWORD PTR DS:[1002B6DC],EAX # POP EBP # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x10014c41 : # PUSH EBP # MOV EBP,ESP # MOV EAX,DWORD PTR SS:[EBP+8] # MOV DWORD PTR DS:[1002B6DC],EAX # POP EBP # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x10014c42 : # MOV EBP,ESP # MOV EAX,DWORD PTR SS:[EBP+8] # MOV DWORD PTR DS:[1002B6DC],EAX # POP EBP # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x10010c43 : # ADD AL,0E8 # LEA EBX,DWORD PTR DS:[ESI] # ADD BYTE PTR DS:[EAX],AL # POP ECX # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x10014c44 : # MOV EAX,DWORD PTR SS:[EBP+8] # MOV DWORD PTR DS:[1002B6DC],EAX # POP EBP # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x10010c45 : # LEA EBX,DWORD PTR DS:[ESI] # ADD BYTE PTR DS:[EAX],AL # POP ECX # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x10010c46 : # PUSH DS # ADD BYTE PTR DS:[EAX],AL # POP ECX # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x10010c47 : # ADD BYTE PTR DS:[EAX],AL # POP ECX # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x10008762 : # POPAD # ADD BYTE PTR DS:[EAX],AL # RETN 0x24 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10006c4e : # ADC BYTE PTR DS:[EBX],BH # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10014c50 : # PUSH EBP # MOV EBP,ESP # MOV EAX,DWORD PTR SS:[EBP+8] # MOV DWORD PTR DS:[1002B6E8],EAX # POP EBP # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x10014c51 : # MOV EBP,ESP # MOV EAX,DWORD PTR SS:[EBP+8] # MOV DWORD PTR DS:[1002B6E8],EAX # POP EBP # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x10018c52 : # ADC AL,5D # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10014c53 : # MOV EAX,DWORD PTR SS:[EBP+8] # MOV DWORD PTR DS:[1002B6E8],EAX # POP EBP # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x10014c54 : # INC EBP # OR BYTE PTR DS:[EBX+1002B6E8],AH # POP EBP # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x10014c55 : # OR BYTE PTR DS:[EBX+1002B6E8],AH # POP EBP # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x10014c56 : # MOV DWORD PTR DS:[1002B6E8],EAX # POP EBP # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x10014c5d : # MOV EDI,EDI # PUSH EBP # MOV EBP,ESP # MOV EAX,DWORD PTR SS:[EBP+8] # MOV DWORD PTR DS:[1002B6EC],EAX # POP EBP # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x10006c5f : # ADC BYTE PTR DS:[EBX],BH # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10014c60 : # MOV EBP,ESP # MOV EAX,DWORD PTR SS:[EBP+8] # MOV DWORD PTR DS:[1002B6EC],EAX # POP EBP # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x10019210 : # CLC # DEC EBP # ADD BYTE PTR DS:[EAX],AL # POP EBP # POP EDI # POP ESI # POP EBX # MOV ESP,EBP # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10014c62 : # MOV EAX,DWORD PTR SS:[EBP+8] # MOV DWORD PTR DS:[1002B6EC],EAX # POP EBP # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x10014c63 : # INC EBP # OR BYTE PTR DS:[EBX+1002B6EC],AH # POP EBP # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x10014c64 : # OR BYTE PTR DS:[EBX+1002B6EC],AH # POP EBP # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x10014c65 : # MOV DWORD PTR DS:[1002B6EC],EAX # POP EBP # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x10006c70 : # ADC BYTE PTR DS:[EBX],BH # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000cc71 : # OR BYTE PTR DS:[EAX+1000CC78],BH # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000cc75 : # ADD BYTE PTR DS:[EAX],DL # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000cc7d : # ADD BYTE PTR DS:[EAX],AL # RETN 0x0C ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10006c7e : # MOV AL,BYTE PTR DS:[3B1002AB] # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10006c81 : # ADC BYTE PTR DS:[EBX],BH # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10008c83 : # ADD DWORD PTR DS:[EAX],EDX # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000ccc1 : # ADD BYTE PTR DS:[EAX],AL # RETN 0x08 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10010cc2 : # OR BYTE PTR DS:[ECX+4408B0E],CL # MOV DWORD PTR DS:[ESI+4],EAX # MOV EAX,ESI # POP ESI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10014c90 : # MOV EAX,DWORD PTR DS:[EAX] # MOV EAX,DWORD PTR DS:[EAX] # MOV DWORD PTR SS:[EBP-20],EAX # XOR ECX,ECX # CMP EAX,C0000017 # SETE CL # MOV EAX,ECX # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10014c91 : # ADD BYTE PTR DS:[EBX+E0458900],CL # XOR ECX,ECX # CMP EAX,C0000017 # SETE CL # MOV EAX,ECX # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10006c92 : # ADC BYTE PTR DS:[EBX],BH # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10014c93 : # ADD BYTE PTR DS:[ECX+C933E045],CL # CMP EAX,C0000017 # SETE CL # MOV EAX,ECX # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10014c94 : # MOV DWORD PTR SS:[EBP-20],EAX # XOR ECX,ECX # CMP EAX,C0000017 # SETE CL # MOV EAX,ECX # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10006c97 : # XOR EAX,EAX # INC EAX # POP EDI # POP ESI # MOV DWORD PTR DS:[1002ABAC],1 # POP EBX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10006d1b : # ADD EAX,340042B8 # ADC BL,BYTE PTR DS:[EDI+5E] # POP EBP # RETN 0x08 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10006c99 : # INC EAX # POP EDI # POP ESI # MOV DWORD PTR DS:[1002ABAC],1 # POP EBX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10006c9a : # POP EDI # POP ESI # MOV DWORD PTR DS:[1002ABAC],1 # POP EBX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10006c9b : # POP ESI # MOV DWORD PTR DS:[1002ABAC],1 # POP EBX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10006c9c : # MOV DWORD PTR DS:[1002ABAC],1 # POP EBX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10006c9d : # ADD EAX,WinCRT.1002ABAC # ADD DWORD PTR DS:[EAX],EAX # ADD BYTE PTR DS:[EAX],AL # POP EBX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10014c9e : # SETE CL # MOV EAX,ECX # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10006ca0 : # ADD DL,BYTE PTR DS:[EAX] # ADD DWORD PTR DS:[EAX],EAX # ADD BYTE PTR DS:[EAX],AL # POP EBX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10006ca2 : # ADD DWORD PTR DS:[EAX],EAX # ADD BYTE PTR DS:[EAX],AL # POP EBX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10006ca4 : # ADD BYTE PTR DS:[EAX],AL # POP EBX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10018ca9 : # LES EBX,FWORD PTR DS:[EAX] # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10008cb1 : # OR BYTE PTR DS:[EAX+EAX],BL # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10008cb2 : # POP ESP # ADD BYTE PTR DS:[EAX],AL # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10008cb3 : # ADD BYTE PTR DS:[EAX],AL # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000ccb5 : # INC ESI # OR AL,CH # OR EBX,DWORD PTR DS:[EAX-1] # DEC DWORD PTR DS:[EBX+1BFAE8C6] # ADD BYTE PTR DS:[EAX],AL # RETN 0x08 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10002cb6 : # MOV ESP,4C20000 # ADD BYTE PTR DS:[EBX+B5E8EC4D],CL # ADD BYTE PTR CS:[EAX],AL # MOV EAX,WinCRT.10002C63 # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10002cb7 : # ADD BYTE PTR DS:[EAX],AL # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000ccb8 : # OR EBX,DWORD PTR DS:[EAX-1] # DEC DWORD PTR DS:[EBX+1BFAE8C6] # ADD BYTE PTR DS:[EAX],AL # RETN 0x08 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10002cbb : # ADD BYTE PTR DS:[EBX+B5E8EC4D],CL # ADD BYTE PTR CS:[EAX],AL # MOV EAX,WinCRT.10002C63 # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1001d775 : # ADC BYTE PTR DS:[EDX-A],BL # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10002cc0 : # MOV CH,2E # ADD BYTE PTR DS:[EAX],AL # MOV EAX,WinCRT.10002C63 # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10002cc1 : # ADD BYTE PTR CS:[EAX],AL # MOV EAX,WinCRT.10002C63 # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10002cc2 : # ADD BYTE PTR DS:[EAX],AL # MOV EAX,WinCRT.10002C63 # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10002cc3 : # ADD BYTE PTR DS:[EAX+10002C63],BH # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10010cc4 : # PUSH CS # MOV EAX,DWORD PTR DS:[EAX+4] # MOV DWORD PTR DS:[ESI+4],EAX # MOV EAX,ESI # POP ESI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10002cc7 : # ADD BYTE PTR DS:[EAX],DL # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10001777 : # ADD BYTE PTR DS:[EAX],AL # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10002ccf : # ADD BYTE PTR CS:[EAX],AL # MOV EAX,WinCRT.10002C99 # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10002cd0 : # ADD BYTE PTR DS:[EAX],AL # MOV EAX,WinCRT.10002C99 # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10002cd1 : # ADD BYTE PTR DS:[EAX+10002C99],BH # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10002cd5 : # ADD BYTE PTR DS:[EAX],DL # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10008cd7 : # POP EBX # ADD BYTE PTR DS:[EAX],AL # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10008cd8 : # ADD BYTE PTR DS:[EAX],AL # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10002cdc : # CDQ # ADD BYTE PTR CS:[EAX],AL # MOV EAX,WinCRT.10002CB4 # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10002cdd : # ADD BYTE PTR CS:[EAX],AL # MOV EAX,WinCRT.10002CB4 # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10002cde : # ADD BYTE PTR DS:[EAX],AL # MOV EAX,WinCRT.10002CB4 # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10002cdf : # ADD BYTE PTR DS:[EAX+10002CB4],BH # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000ece0 : # PUSH 16 # POP EAX # POP EDI # POP ESI # POP EBP # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000ece1 : # PUSH SS # POP EAX # POP EDI # POP ESI # POP EBP # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10002ce3 : # ADD BYTE PTR DS:[EAX],DL # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1001ace5 : # INC EBP # OR BYTE PTR DS:[EBX],BH # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1001ace6 : # OR BYTE PTR DS:[EBX],BH # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10018cf3 : # MOV EDX,C483FFFF # ADC AL,5E # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10018cf7 : # LES EDX,FWORD PTR DS:[ESI+EBX*2] # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10018cf8 : # ADC AL,5E # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10008cfc : # ADC EAX,<&KERNEL32.LoadLibraryA> # TEST EAX,EAX # MOV DWORD PTR DS:[ESI+4],EAX # SETNE AL # MOV BYTE PTR DS:[ESI+8],AL # MOV EAX,DWORD PTR DS:[ESI+4] # POP ESI # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10008cff : # ADD DWORD PTR DS:[EAX],EDX # TEST EAX,EAX # MOV DWORD PTR DS:[ESI+4],EAX # SETNE AL # MOV BYTE PTR DS:[ESI+8],AL # MOV EAX,DWORD PTR DS:[ESI+4] # POP ESI # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10008d00 : # ADC BYTE PTR SS:[EBP+44689C0],AL # SETNE AL # MOV BYTE PTR DS:[ESI+8],AL # MOV EAX,DWORD PTR DS:[ESI+4] # POP ESI # RETN ** [WinCRT.dll] ** | null,unicodereverse {PAGE_EXECUTE_READ}
0x10008d01 : # TEST EAX,EAX # MOV DWORD PTR DS:[ESI+4],EAX # SETNE AL # MOV BYTE PTR DS:[ESI+8],AL # MOV EAX,DWORD PTR DS:[ESI+4] # POP ESI # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10008d03 : # MOV DWORD PTR DS:[ESI+4],EAX # SETNE AL # MOV BYTE PTR DS:[ESI+8],AL # MOV EAX,DWORD PTR DS:[ESI+4] # POP ESI # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10010d04 : # INC EBP # OR BYTE PTR DS:[EBX],BH # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x10010d05 : # OR BYTE PTR DS:[EBX],BH # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x10008d06 : # SETNE AL # MOV BYTE PTR DS:[ESI+8],AL # MOV EAX,DWORD PTR DS:[ESI+4] # POP ESI # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10012aca : # OR BYTE PTR DS:[ECX+27EB0FE],AL # ADC BYTE PTR DS:[ESI+5E],BH # POP EBX # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10008d09 : # MOV BYTE PTR DS:[ESI+8],AL # MOV EAX,DWORD PTR DS:[ESI+4] # POP ESI # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10002d0a : # ADC EAX,<&USER32.GetCursorPos> # MOV DWORD PTR DS:[ESI+40],EDI # MOV DWORD PTR DS:[ESI+3C],EDI # POP EDI # MOV DWORD PTR DS:[ESI+28],1 # POP ESI # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1001ad0b : # OR BYTE PTR DS:[EBX],BH # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10002d0d : # ADD DWORD PTR DS:[EAX],EDX # MOV DWORD PTR DS:[ESI+40],EDI # MOV DWORD PTR DS:[ESI+3C],EDI # POP EDI # MOV DWORD PTR DS:[ESI+28],1 # POP ESI # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10002d0e : # ADC BYTE PTR DS:[ECX+7E89407E],CL # CMP AL,5F # MOV DWORD PTR DS:[ESI+28],1 # POP ESI # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10002d0f : # MOV DWORD PTR DS:[ESI+40],EDI # MOV DWORD PTR DS:[ESI+3C],EDI # POP EDI # MOV DWORD PTR DS:[ESI+28],1 # POP ESI # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10002d11 : # INC EAX # MOV DWORD PTR DS:[ESI+3C],EDI # POP EDI # MOV DWORD PTR DS:[ESI+28],1 # POP ESI # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10002d12 : # MOV DWORD PTR DS:[ESI+3C],EDI # POP EDI # MOV DWORD PTR DS:[ESI+28],1 # POP ESI # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10002d14 : # CMP AL,5F # MOV DWORD PTR DS:[ESI+28],1 # POP ESI # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10002d15 : # POP EDI # MOV DWORD PTR DS:[ESI+28],1 # POP ESI # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10002d16 : # MOV DWORD PTR DS:[ESI+28],1 # POP ESI # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10002d19 : # ADD DWORD PTR DS:[EAX],EAX # ADD BYTE PTR DS:[EAX],AL # POP ESI # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10002d1b : # ADD BYTE PTR DS:[EAX],AL # POP ESI # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10006d1d : # INC EDX # ADD BYTE PTR DS:[EDX+EDX],DH # POP EDI # POP ESI # POP EBP # RETN 0x08 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10006d1e : # ADD BYTE PTR DS:[EDX+EDX],DH # POP EDI # POP ESI # POP EBP # RETN 0x08 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10006d1f : # XOR AL,12 # POP EDI # POP ESI # POP EBP # RETN 0x08 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10006d20 : # ADC BL,BYTE PTR DS:[EDI+5E] # POP EBP # RETN 0x08 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10008d2c : # AND DL,DH # ADD DWORD PTR DS:[EAX],EDX # MOV DWORD PTR DS:[ESI+10],EAX # MOV ECX,DWORD PTR DS:[ESI+10] # MOV EAX,DWORD PTR SS:[EBP+8] # MOV DWORD PTR DS:[EAX],ECX # POP ESI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10004232 : # XOR AL,89 # PUSH EAX # PUSH ESP # MOV DWORD PTR DS:[EAX+4C],ECX # MOV DWORD PTR DS:[EAX+50],EDX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10008d2e : # ADD DWORD PTR DS:[EAX],EDX # MOV DWORD PTR DS:[ESI+10],EAX # MOV ECX,DWORD PTR DS:[ESI+10] # MOV EAX,DWORD PTR SS:[EBP+8] # MOV DWORD PTR DS:[EAX],ECX # POP ESI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10008d2f : # ADC BYTE PTR DS:[ECX+4E8B1046],CL # ADC BYTE PTR DS:[EBX+8890845],CL # POP ESI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10008d34 : # DEC ESI # ADC BYTE PTR DS:[EBX+8890845],CL # POP ESI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10008d35 : # ADC BYTE PTR DS:[EBX+8890845],CL # POP ESI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000ed38 : # ARPL WORD PTR DS:[EAX],AX # ADD BYTE PTR DS:[EBX+C0330CC4],AL # POP EDI # POP ESI # POP EBP # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000ed39 : # ADD BYTE PTR DS:[EAX],AL # ADD ESP,0C # XOR EAX,EAX # POP EDI # POP ESI # POP EBP # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000ed3a : # ADD BYTE PTR DS:[EBX+C0330CC4],AL # POP EDI # POP ESI # POP EBP # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1001ed3d : # ADC AL,CH # MOV EAX,DWORD PTR DS:[59FFFEF2] # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10002ce1 : # MOV AH,2C # ADD BYTE PTR DS:[EAX],DL # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1001ed4a : # MOV DWORD PTR DS:[1002AD80],EAX # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10002d64 : # ADD BYTE PTR DS:[EAX],AL # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10016d67 : # MOV EDI,DWORD PTR SS:[EBP-4] # MOV ESP,EBP # POP EBP # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x10016d69 : # CLD # MOV ESP,EBP # POP EBP # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x10016d6a : # MOV ESP,EBP # POP EBP # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x10004d7c : # ADD EAX,0EC7E8 # ADD BYTE PTR SS:[EBP+FF501C46],CL # ADC EAX,<&KERNEL32.InitializeCriticalSection> # MOV EAX,ESI # POP ESI # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10004d81 : # ADD BYTE PTR SS:[EBP+FF501C46],CL # ADC EAX,<&KERNEL32.InitializeCriticalSection> # MOV EAX,ESI # POP ESI # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10004d8a : # ADD DWORD PTR DS:[EAX],EDX # MOV EAX,ESI # POP ESI # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000cd93 : # ADC DWORD PTR DS:[ECX+5D018910],ECX # RETN 0x0C ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10008d99 : # PUSH ES # ADD BYTE PTR DS:[EAX],AL # ADD AL,CH # ADC EDI,DWORD PTR DS:[EAX+EAX] # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10008d9a : # ADD BYTE PTR DS:[EAX],AL # ADD AL,CH # ADC EDI,DWORD PTR DS:[EAX+EAX] # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1001ed9e : # MOV DWORD PTR DS:[10027420],WinCRT.1001FCF4 # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10008da0 : # ADD BYTE PTR DS:[EAX],AL # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1001eda3 : # ADC AH,DH # CLD # ADD DWORD PTR DS:[EAX],EDX # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1001eda5 : # CLD # ADD DWORD PTR DS:[EAX],EDX # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1001eda6 : # ADD DWORD PTR DS:[EAX],EDX # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1001eda7 : # ADC BL,AL # MOV DWORD PTR DS:[100274B8],WinCRT.1001FCF4 # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1001eda9 : # MOV DWORD PTR DS:[100274B8],WinCRT.1001FCF4 # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1001edab : # MOV EAX,F4100274 # CLD # ADD DWORD PTR DS:[EAX],EDX # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10010dad : # OR AL,5D # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1001edae : # ADC AH,DH # CLD # ADD DWORD PTR DS:[EAX],EDX # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1001edb0 : # CLD # ADD DWORD PTR DS:[EAX],EDX # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1001edb1 : # ADD DWORD PTR DS:[EAX],EDX # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1001edb2 : # ADC BL,AL # MOV DWORD PTR DS:[10027550],WinCRT.1001FCF4 # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1001edb4 : # MOV DWORD PTR DS:[10027550],WinCRT.1001FCF4 # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1000edb7 : # DEC ESP # AND AL,4 # SUB EAX,ECX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000edb8 : # AND AL,4 # SUB EAX,ECX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1001edb9 : # ADC AH,DH # CLD # ADD DWORD PTR DS:[EAX],EDX # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1001edbb : # CLD # ADD DWORD PTR DS:[EAX],EDX # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1001edbc : # ADD DWORD PTR DS:[EAX],EDX # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1001edbd : # ADC BL,AL # MOV DWORD PTR DS:[10029240],WinCRT.1001FCF4 # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1001edbf : # MOV DWORD PTR DS:[10029240],WinCRT.1001FCF4 # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1000edc1 : # DEC ESP # AND AL,4 # SUB EAX,ECX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000edc2 : # AND AL,4 # SUB EAX,ECX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000124b : # PUSH EBP # MOV EBP,ESP # MOV ECX,DWORD PTR SS:[EBP+8] # MOV EAX,DWORD PTR DS:[10027084] # MOV DWORD PTR DS:[10027084],ECX # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1001edc4 : # ADC AH,DH # CLD # ADD DWORD PTR DS:[EAX],EDX # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1001edc6 : # CLD # ADD DWORD PTR DS:[EAX],EDX # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1001edc7 : # ADD DWORD PTR DS:[EAX],EDX # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1000edc8 : # INC ECX # STD # MOV ECX,DWORD PTR SS:[ESP+4] # SUB EAX,ECX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000edc9 : # STD # MOV ECX,DWORD PTR SS:[ESP+4] # SUB EAX,ECX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1001edca : # MOV DWORD PTR DS:[100292D8],WinCRT.1001FCF4 # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1000edcb : # DEC ESP # AND AL,4 # SUB EAX,ECX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000edcc : # AND AL,4 # SUB EAX,ECX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100127a2 : # INC EAX # MOV DWORD PTR DS:[1002C8E4],EAX # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1001edcf : # ADC AH,DH # CLD # ADD DWORD PTR DS:[EAX],EDX # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1001edd1 : # CLD # ADD DWORD PTR DS:[EAX],EDX # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1001edd2 : # ADD DWORD PTR DS:[EAX],EDX # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x100027a3 : # ADD DL,8 # ADD BYTE PTR DS:[EAX+1001F934],BH # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000edd5 : # DEC ESP # AND AL,4 # SUB EAX,ECX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000edd6 : # AND AL,4 # SUB EAX,ECX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000124f : # DEC EBP # OR BYTE PTR DS:[ECX+10027084],AH # MOV DWORD PTR DS:[10027084],ECX # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10008ddd : # OR BYTE PTR DS:[ESI+5D],BL # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10010de2 : # INC EBP # OR BYTE PTR DS:[EBX],BH # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10010de3 : # OR BYTE PTR DS:[EBX],BH # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10016def : # INC DWORD PTR DS:[EBX+458B0CC4] # OR BYTE PTR DS:[EBX+E58BFC7D],CL # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10016df0 : # ADD ESP,0C # MOV EAX,DWORD PTR SS:[EBP+8] # MOV EDI,DWORD PTR SS:[EBP-4] # MOV ESP,EBP # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10016df1 : # LES ECX,FWORD PTR DS:[EBX+ECX*4] # INC EBP # OR BYTE PTR DS:[EBX+E58BFC7D],CL # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10016df2 : # OR AL,8B # INC EBP # OR BYTE PTR DS:[EBX+E58BFC7D],CL # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10016df3 : # MOV EAX,DWORD PTR SS:[EBP+8] # MOV EDI,DWORD PTR SS:[EBP-4] # MOV ESP,EBP # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10016df4 : # INC EBP # OR BYTE PTR DS:[EBX+E58BFC7D],CL # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10016df5 : # OR BYTE PTR DS:[EBX+E58BFC7D],CL # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10016df6 : # MOV EDI,DWORD PTR SS:[EBP-4] # MOV ESP,EBP # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10016df8 : # CLD # MOV ESP,EBP # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10016df9 : # MOV ESP,EBP # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x100067aa : # ADD DWORD PTR DS:[EAX],EDX # AND DWORD PTR DS:[ESI],0 # POP ESI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100067ab : # ADC BYTE PTR DS:[EBX+5D5E0026],AL # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10002e05 : # PUSH EAX # PUSH C95B5E5F # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10002e06 : # PUSH C95B5E5F # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10002e0f : # ADD BYTE PTR DS:[EAX],AL # MOV EAX,DWORD PTR DS:[EAX+38] # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000c377 : # ADD BYTE PTR SS:[EBP+3],DH # XOR EAX,EAX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100067ae : # ADD BYTE PTR DS:[ESI+5D],BL # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10018e19 : # FADD DWORD PTR DS:[EBX+5B5F00DA] # RETN 0x10 ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10018e1b : # FIADD DWORD PTR DS:[EAX] # POP EDI # POP EBX # RETN 0x10 ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10018e1c : # ADD BYTE PTR DS:[EDI+5B],BL # RETN 0x10 ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1000ee2a : # PUSH EBP # OR BYTE PTR DS:[EBX+C95E10C4],AL # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000ee2b : # OR BYTE PTR DS:[EBX+C95E10C4],AL # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000ee2e : # ADC BYTE PTR DS:[ESI-37],BL # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000ae30 : # ADD BYTE PTR DS:[EAX],AL # RETN 0x10 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1001ad0a : # INC EBP # OR BYTE PTR DS:[EBX],BH # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1000c260 : # OR BYTE PTR DS:[EAX],AL # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10002e47 : # ADD BYTE PTR DS:[EBX],BH # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000ee4a : # LES EDX,FWORD PTR DS:[EAX] # POP EBP # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10008e53 : # ADD BYTE PTR DS:[EAX],AL # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1001a7b9 : # INC ESP # MOV EAX,F8831002 # ADD CL,BYTE PTR DS:[EDI] # TEST BH,CL # ADD BYTE PTR DS:[EAX],AL # ADD BYTE PTR DS:[EBX],BH # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1001a7ba : # MOV EAX,F8831002 # ADD CL,BYTE PTR DS:[EDI] # TEST BH,CL # ADD BYTE PTR DS:[EAX],AL # ADD BYTE PTR DS:[EBX],BH # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x100044ad : # ADD BYTE PTR DS:[EAX],AL # MOV EAX,ESI # POP ESI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1001a7be : # CLC # ADD CL,BYTE PTR DS:[EDI] # TEST BH,CL # ADD BYTE PTR DS:[EAX],AL # ADD BYTE PTR DS:[EBX],BH # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10004a42 : # ADD DWORD PTR DS:[EAX],EDX # XOR EAX,EAX # POP EDI # POP ESI # POP EBX # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100087bf : # PUSHAD # ADD BYTE PTR DS:[EAX],AL # RETN 0x1C ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10002e7d : # ADD BYTE PTR DS:[EBX],BH # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1001a7c1 : # TEST BH,CL # ADD BYTE PTR DS:[EAX],AL # ADD BYTE PTR DS:[EBX],BH # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10008e89 : # LES ESI,ECX # ADD DWORD PTR DS:[EAX],EDX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10010e8b : # OR AL,5D # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1000426f : # ADD BYTE PTR DS:[ECX+5F],BL # POP ESI # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10010ea0 : # OR AL,CH # ADC BYTE PTR DS:[EAX+EAX],CH # ADD ESP,14 # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10010ea2 : # ADC BYTE PTR DS:[EAX+EAX],CH # ADD ESP,14 # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10010ea3 : # INS BYTE PTR ES:[EDI],DX # ADD BYTE PTR DS:[EAX],AL # ADD ESP,14 # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10010ea4 : # ADD BYTE PTR DS:[EAX],AL # ADD ESP,14 # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10010ea8 : # ADC AL,5D # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10002eb1 : # OR BYTE PTR DS:[C0330575],CL # INC EAX # POP EBP # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10016eb4 : # MOV DWORD PTR DS:[1002C8C8],EAX # XOR EAX,EAX # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10002ebf : # ADD DL,BH # ADD DWORD PTR DS:[EAX],EDX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10002ec0 : # CLI # ADD DWORD PTR DS:[EAX],EDX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10002ec1 : # ADD DWORD PTR DS:[EAX],EDX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10004ec6 : # ADC BYTE PTR DS:[EBX],BH # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100085b0 : # ADD BYTE PTR DS:[EAX],AL # RETN 0x18 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000a27a : # ADD DWORD PTR DS:[EAX],EDX # POP ESI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10008edf : # ADC BYTE PTR DS:[EAX+89704689],BL # DEC ESI # INS BYTE PTR ES:[EDI],DX # LEA EAX,DWORD PTR DS:[ESI+58] # POP ESI # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000eee0 : # XOR AL,3B # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000227b : # MOV AL,1 # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10008ee5 : # DEC ESI # INS BYTE PTR ES:[EDI],DX # LEA EAX,DWORD PTR DS:[ESI+58] # POP ESI # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10008ee6 : # INS BYTE PTR ES:[EDI],DX # LEA EAX,DWORD PTR DS:[ESI+58] # POP ESI # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000827d : # DEC DWORD PTR DS:[EBX+6638E8C6] # ADD BYTE PTR DS:[EAX],AL # RETN 0x08 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10002ef0 : # ADD BYTE PTR DS:[EAX],AL # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10010ef8 : # MOV EAX,ECX # POP ECX # XCHG EAX,ESP # MOV EAX,DWORD PTR DS:[EAX] # MOV DWORD PTR SS:[ESP],EAX # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10010efa : # POP ECX # XCHG EAX,ESP # MOV EAX,DWORD PTR DS:[EAX] # MOV DWORD PTR SS:[ESP],EAX # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10010efb : # XCHG EAX,ESP # MOV EAX,DWORD PTR DS:[EAX] # MOV DWORD PTR SS:[ESP],EAX # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10010efc : # MOV EAX,DWORD PTR DS:[EAX] # MOV DWORD PTR SS:[ESP],EAX # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10010efe : # MOV DWORD PTR SS:[ESP],EAX # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10004f03 : # ADC BYTE PTR DS:[EBX+468B084D],CL # OR AL,3B # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10004f08 : # INC ESI # OR AL,3B # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10004f09 : # OR AL,3B # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10008283 : # ADD BYTE PTR DS:[EAX],AL # RETN 0x08 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10013891 : # INC EBP # OR BYTE PTR DS:[EBX+1002B394],AH # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10008f1a : # ADD BYTE PTR DS:[EAX],AL # POP ESI # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10004f24 : # ADC AL,CH # XCHG EAX,EBX # CDQ # ADD BYTE PTR DS:[EAX],AL # RETN 0x08 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10004f26 : # XCHG EAX,EBX # CDQ # ADD BYTE PTR DS:[EAX],AL # RETN 0x08 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10004f27 : # CDQ # ADD BYTE PTR DS:[EAX],AL # RETN 0x08 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10004f28 : # ADD BYTE PTR DS:[EAX],AL # RETN 0x08 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100076c8 : # OR BYTE PTR DS:[EAX],AL # MOV EAX,WinCRT.1001FFF8 # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1001af30 : # OR AL,CH # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10016f39 : # AND EAX,DWORD PTR DS:[EAX] # ADD BL,CH # MOV AL,64 # POP DWORD PTR DS:[0] # ADD ESP,18 # POP EDI # POP ESI # POP EBX # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x10016f3b : # ADD BL,CH # MOV AL,64 # POP DWORD PTR DS:[0] # ADD ESP,18 # POP EDI # POP ESI # POP EBX # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x10016f3d : # MOV AL,64 # POP DWORD PTR DS:[0] # ADD ESP,18 # POP EDI # POP ESI # POP EBX # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x10016f3f : # POP DWORD PTR DS:[0] # ADD ESP,18 # POP EDI # POP ESI # POP EBX # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x10016f41 : # ADD BYTE PTR DS:[EAX],AL # ADD BYTE PTR DS:[EAX],AL # ADD ESP,18 # POP EDI # POP ESI # POP EBX # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x10016f42 : # ADD BYTE PTR DS:[EAX],AL # ADD BYTE PTR DS:[EBX+5E5F18C4],AL # POP EBX # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x10016f43 : # ADD BYTE PTR DS:[EAX],AL # ADD ESP,18 # POP EDI # POP ESI # POP EBX # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x10016f44 : # ADD BYTE PTR DS:[EBX+5E5F18C4],AL # POP EBX # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x10016f46 : # LES EBX,FWORD PTR DS:[EAX] # POP EDI # POP ESI # POP EBX # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x100027e1 : # ADD DWORD PTR DS:[EBX+450FFCE],ECX # POP ESI # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000cf48 : # ADD BYTE PTR DS:[EAX],AL # RETN 0x10 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000c28c : # OR BYTE PTR SS:[EBP+830A74C0],AL # PUSHAD # ADD AL,0 # MOV DWORD PTR DS:[EAX],WinCRT.100209A8 # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000dd37 : # OR BYTE PTR SS:[EBP+EBP*8+5F],BH # POP ESI # POP EBX # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1001a28f : # OR BYTE PTR DS:[EBX],BH # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10008d3a : # OR BYTE PTR DS:[ESI+5D],BL # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000c290 : # OR AL,BYTE PTR DS:[EBX+C7000460] # ADD BYTE PTR DS:[EAX+5D100209],CH # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000cf65 : # OR AL,0 # MOV EAX,WinCRT.10027A94 # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000cf66 : # ADD BYTE PTR DS:[EAX+10027A94],BH # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000cf6d : # MOV EAX,ECX # XOR ECX,ECX # MOV DWORD PTR DS:[EAX],WinCRT.10020DA8 # MOV DWORD PTR DS:[EAX+4],ECX # MOV DWORD PTR DS:[EAX+10],ECX # MOV DWORD PTR DS:[EAX+C],ECX # MOV DWORD PTR DS:[EAX+8],ECX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000cf6f : # XOR ECX,ECX # MOV DWORD PTR DS:[EAX],WinCRT.10020DA8 # MOV DWORD PTR DS:[EAX+4],ECX # MOV DWORD PTR DS:[EAX+10],ECX # MOV DWORD PTR DS:[EAX+C],ECX # MOV DWORD PTR DS:[EAX+8],ECX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000cf71 : # MOV DWORD PTR DS:[EAX],WinCRT.10020DA8 # MOV DWORD PTR DS:[EAX+4],ECX # MOV DWORD PTR DS:[EAX+10],ECX # MOV DWORD PTR DS:[EAX+C],ECX # MOV DWORD PTR DS:[EAX+8],ECX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10010f73 : # LES EDX,FWORD PTR DS:[EAX] # POP EBP # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x10006037 : # DEC EBP # OR BYTE PTR DS:[EBX+FF006A01],CL # PUSH EAX # ADD AL,5D # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000c294 : # ADD BH,AL # ADD BYTE PTR DS:[EAX+5D100209],CH # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10016f7d : # INC DWORD PTR DS:[EBX+8B5D0CC4] # INC ESP # AND AL,8 # MOV EDX,DWORD PTR SS:[ESP+10] # MOV DWORD PTR DS:[EDX],EAX # MOV EAX,3 # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x10016f7f : # LES ECX,FWORD PTR DS:[EBX*2+824448B] # MOV EDX,DWORD PTR SS:[ESP+10] # MOV DWORD PTR DS:[EDX],EAX # MOV EAX,3 # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x10016f80 : # OR AL,5D # MOV EAX,DWORD PTR SS:[ESP+8] # MOV EDX,DWORD PTR SS:[ESP+10] # MOV DWORD PTR DS:[EDX],EAX # MOV EAX,3 # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10016f83 : # INC ESP # AND AL,8 # MOV EDX,DWORD PTR SS:[ESP+10] # MOV DWORD PTR DS:[EDX],EAX # MOV EAX,3 # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10016f84 : # AND AL,8 # MOV EDX,DWORD PTR SS:[ESP+10] # MOV DWORD PTR DS:[EDX],EAX # MOV EAX,3 # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10016f85 : # OR BYTE PTR DS:[EBX+89102454],CL # ADD BH,BYTE PTR DS:[EAX+3] # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10008f86 : # DEC DWORD PTR DS:[EBX+2EE81446] # POP ECX # ADD BYTE PTR DS:[EAX],AL # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10016f87 : # PUSH ESP # AND AL,10 # MOV DWORD PTR DS:[EDX],EAX # MOV EAX,3 # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10016f88 : # AND AL,10 # MOV DWORD PTR DS:[EDX],EAX # MOV EAX,3 # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10016f89 : # ADC BYTE PTR DS:[ECX+3B802],CL # ADD BYTE PTR DS:[EAX],AL # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10010f8b : # LES EDX,FWORD PTR DS:[EAX] # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10008f8c : # POP ECX # ADD BYTE PTR DS:[EAX],AL # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10016f8d : # ADD EAX,DWORD PTR DS:[EAX] # ADD BYTE PTR DS:[EAX],AL # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10016f8f : # ADD BYTE PTR DS:[EAX],AL # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1000ef95 : # POP ECX # ADD BYTE PTR DS:[EAX],AL # ADD ESP,14 # OR EAX,FFFFFFFF # POP ESI # POP EBX # POP EBP # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000ef96 : # ADD BYTE PTR DS:[EAX],AL # ADD ESP,14 # OR EAX,FFFFFFFF # POP ESI # POP EBX # POP EBP # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10002f98 : # OR BYTE PTR DS:[EBX+5850FF01],CL # POP EBP # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000529c : # ADD DWORD PTR DS:[EAX],EDX # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000cfad : # INC EBP # OR AL,3B # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000cfae : # OR AL,3B # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10008fb3 : # SUB AL,0 # ADD BYTE PTR DS:[EBX+5D5E5FC7],CL # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10008fb4 : # ADD BYTE PTR DS:[EAX],AL # MOV EAX,EDI # POP EDI # POP ESI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10008fb5 : # ADD BYTE PTR DS:[EBX+5D5E5FC7],CL # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100066d1 : # ADD BYTE PTR DS:[EAX],DL # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000efbc : # ADC AL,5D # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10012fc5 : # MOV DWORD PTR DS:[ESI+4],EDI # INC DWORD PTR DS:[1002C8CC] # MOV EAX,DWORD PTR DS:[ESI+10] # OR DWORD PTR DS:[EAX],FFFFFFFF # MOV EAX,ESI # POP EDI # POP ESI # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10012fc7 : # ADD AL,0FF # ADD EAX,WinCRT.1002C8CC # MOV EAX,DWORD PTR DS:[ESI+10] # OR DWORD PTR DS:[EAX],FFFFFFFF # MOV EAX,ESI # POP EDI # POP ESI # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10012fc8 : # INC DWORD PTR DS:[1002C8CC] # MOV EAX,DWORD PTR DS:[ESI+10] # OR DWORD PTR DS:[EAX],FFFFFFFF # MOV EAX,ESI # POP EDI # POP ESI # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10012fc9 : # ADD EAX,WinCRT.1002C8CC # MOV EAX,DWORD PTR DS:[ESI+10] # OR DWORD PTR DS:[EAX],FFFFFFFF # MOV EAX,ESI # POP EDI # POP ESI # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10012fcc : # ADD DL,BYTE PTR DS:[EAX] # MOV EAX,DWORD PTR DS:[ESI+10] # OR DWORD PTR DS:[EAX],FFFFFFFF # MOV EAX,ESI # POP EDI # POP ESI # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10012fce : # MOV EAX,DWORD PTR DS:[ESI+10] # OR DWORD PTR DS:[EAX],FFFFFFFF # MOV EAX,ESI # POP EDI # POP ESI # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10012fcf : # INC ESI # ADC BYTE PTR DS:[EBX+C68BFF08],AL # POP EDI # POP ESI # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10012fd0 : # ADC BYTE PTR DS:[EBX+C68BFF08],AL # POP EDI # POP ESI # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10012fd1 : # OR DWORD PTR DS:[EAX],FFFFFFFF # MOV EAX,ESI # POP EDI # POP ESI # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10012fd2 : # OR BH,BH # MOV EAX,ESI # POP EDI # POP ESI # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10008fd7 : # SUB EBP,DWORD PTR DS:[EDI] # ADD BYTE PTR DS:[EAX],AL # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10008fd8 : # DAS # ADD BYTE PTR DS:[EAX],AL # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10008fd9 : # ADD BYTE PTR DS:[EAX],AL # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10016ff1 : # ADD BYTE PTR DS:[EAX],AL # POP EDI # POP ESI # POP EBX # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10016ff2 : # ADD BYTE PTR DS:[EDI+5E],BL # POP EBX # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10000ff3 : # ADD BYTE PTR DS:[EAX],AL # ADD BYTE PTR DS:[EAX],AL # ADD BYTE PTR DS:[EAX],AL # ADD BYTE PTR DS:[EAX],AL # ADD BYTE PTR DS:[EAX],AL # ADD BYTE PTR DS:[EAX],AL # ADD BYTE PTR DS:[EAX+1001F450],BH # RETN ** [WinCRT.dll] ** | null {PAGE_READONLY}
0x10000ff4 : # ADD BYTE PTR DS:[EAX],AL # ADD BYTE PTR DS:[EAX],AL # ADD BYTE PTR DS:[EAX],AL # ADD BYTE PTR DS:[EAX],AL # ADD BYTE PTR DS:[EAX],AL # ADD BYTE PTR DS:[EAX],AL # MOV EAX,WinCRT.1001F450 # RETN ** [WinCRT.dll] ** | null {PAGE_READONLY}
0x10000ff5 : # ADD BYTE PTR DS:[EAX],AL # ADD BYTE PTR DS:[EAX],AL # ADD BYTE PTR DS:[EAX],AL # ADD BYTE PTR DS:[EAX],AL # ADD BYTE PTR DS:[EAX],AL # ADD BYTE PTR DS:[EAX+1001F450],BH # RETN ** [WinCRT.dll] ** | null {PAGE_READONLY}
0x10000ff6 : # ADD BYTE PTR DS:[EAX],AL # ADD BYTE PTR DS:[EAX],AL # ADD BYTE PTR DS:[EAX],AL # ADD BYTE PTR DS:[EAX],AL # ADD BYTE PTR DS:[EAX],AL # MOV EAX,WinCRT.1001F450 # RETN ** [WinCRT.dll] ** | null {PAGE_READONLY}
0x10000ff7 : # ADD BYTE PTR DS:[EAX],AL # ADD BYTE PTR DS:[EAX],AL # ADD BYTE PTR DS:[EAX],AL # ADD BYTE PTR DS:[EAX],AL # ADD BYTE PTR DS:[EAX+1001F450],BH # RETN ** [WinCRT.dll] ** | null {PAGE_READONLY}
0x10000ff8 : # ADD BYTE PTR DS:[EAX],AL # ADD BYTE PTR DS:[EAX],AL # ADD BYTE PTR DS:[EAX],AL # ADD BYTE PTR DS:[EAX],AL # MOV EAX,WinCRT.1001F450 # RETN ** [WinCRT.dll] ** | null {PAGE_READONLY}
0x10000ff9 : # ADD BYTE PTR DS:[EAX],AL # ADD BYTE PTR DS:[EAX],AL # ADD BYTE PTR DS:[EAX],AL # ADD BYTE PTR DS:[EAX+1001F450],BH # RETN ** [WinCRT.dll] ** | null {PAGE_READONLY}
0x10000ffa : # ADD BYTE PTR DS:[EAX],AL # ADD BYTE PTR DS:[EAX],AL # ADD BYTE PTR DS:[EAX],AL # MOV EAX,WinCRT.1001F450 # RETN ** [WinCRT.dll] ** | null {PAGE_READONLY}
0x10000ffb : # ADD BYTE PTR DS:[EAX],AL # ADD BYTE PTR DS:[EAX],AL # ADD BYTE PTR DS:[EAX+1001F450],BH # RETN ** [WinCRT.dll] ** | null {PAGE_READONLY}
0x10000ffc : # ADD BYTE PTR DS:[EAX],AL # ADD BYTE PTR DS:[EAX],AL # MOV EAX,WinCRT.1001F450 # RETN ** [WinCRT.dll] ** | null {PAGE_READONLY}
0x10000ffd : # ADD BYTE PTR DS:[EAX],AL # ADD BYTE PTR DS:[EAX+1001F450],BH # RETN ** [WinCRT.dll] ** | null {PAGE_READONLY}
0x10000ffe : # ADD BYTE PTR DS:[EAX],AL # MOV EAX,WinCRT.1001F450 # RETN ** [WinCRT.dll] ** | null {PAGE_READONLY}
0x10000fff : # ADD BYTE PTR DS:[EAX+1001F450],BH # RETN ** [WinCRT.dll] ** | null {PAGE_READONLY}
0x10001003 : # ADD DWORD PTR DS:[EAX],EDX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1001700a : # OR AL,5D # RETN 0x08 ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x1000900f : # ADD BYTE PTR DS:[EAX],AL # XOR EAX,EAX # INC EAX # POP EBX # POP EDI # POP ESI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10001012 : # ADD BYTE PTR DS:[EBX+102AE8F1],CL # ADD BYTE PTR DS:[EAX],AL # MOV DWORD PTR DS:[ESI],WinCRT.1001F474 # MOV EAX,ESI # POP ESI # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10001016 : # SUB DL,BYTE PTR DS:[EAX] # ADD BYTE PTR DS:[EAX],AL # MOV DWORD PTR DS:[ESI],WinCRT.1001F474 # MOV EAX,ESI # POP ESI # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10001018 : # ADD BYTE PTR DS:[EAX],AL # MOV DWORD PTR DS:[ESI],WinCRT.1001F474 # MOV EAX,ESI # POP ESI # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000101a : # MOV DWORD PTR DS:[ESI],WinCRT.1001F474 # MOV EAX,ESI # POP ESI # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000101e : # ADD DWORD PTR DS:[EAX],EDX # MOV EAX,ESI # POP ESI # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10017027 : # ADD AL,4 # ADD BYTE PTR DS:[EAX],AL # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x10017029 : # ADD BYTE PTR DS:[EAX],AL # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x1001702d : # ADC AL,BYTE PTR DS:[EAX+EAX] # ADD BL,AL # MOV EAX,804 # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x1001702f : # ADD BYTE PTR DS:[EAX],AL # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x10005031 : # TEST AL,0F1 # ADD DWORD PTR DS:[EAX],EDX # POP ESI # POP EBX # POP EBP # RETN 0x08 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10017033 : # ADD AL,8 # ADD BYTE PTR DS:[EAX],AL # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x10017034 : # OR BYTE PTR DS:[EAX],AL # ADD BL,AL # MOV EAX,411 # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x10017035 : # ADD BYTE PTR DS:[EAX],AL # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x1000903a : # DAS # ADD BYTE PTR DS:[EAX],AL # AND DWORD PTR DS:[ESI+20],0 # AND DWORD PTR DS:[ESI+50],0 # MOV EAX,EDI # POP EDI # POP ESI # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000103b : # ADC EAX,<&USER32.UnhookWindowsHookEx> # MOV EAX,1 # MOV DWORD PTR DS:[10028F08],0 # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000903c : # ADD BYTE PTR DS:[EAX],AL # AND DWORD PTR DS:[ESI+20],0 # AND DWORD PTR DS:[ESI+50],0 # MOV EAX,EDI # POP EDI # POP ESI # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000103e : # ADD DWORD PTR DS:[EAX],EDX # MOV EAX,1 # MOV DWORD PTR DS:[10028F08],0 # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000103f : # ADC BYTE PTR DS:[EAX+1],BH # MOV DWORD PTR DS:[10028F08],0 # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10001040 : # MOV EAX,1 # MOV DWORD PTR DS:[10028F08],0 # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10001041 : # ADD DWORD PTR DS:[EAX],EAX # ADD BYTE PTR DS:[EAX],AL # MOV DWORD PTR DS:[10028F08],0 # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10001042 : # ADD BYTE PTR DS:[EAX],AL # ADD BH,AL # ADD EAX,WinCRT.10028F08 # ADD BYTE PTR DS:[EAX],AL # ADD BYTE PTR DS:[EAX],AL # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10001043 : # ADD BYTE PTR DS:[EAX],AL # MOV DWORD PTR DS:[10028F08],0 # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10001044 : # ADD BH,AL # ADD EAX,WinCRT.10028F08 # ADD BYTE PTR DS:[EAX],AL # ADD BYTE PTR DS:[EAX],AL # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10001045 : # MOV DWORD PTR DS:[10028F08],0 # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10001046 : # ADD EAX,WinCRT.10028F08 # ADD BYTE PTR DS:[EAX],AL # ADD BYTE PTR DS:[EAX],AL # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10001047 : # OR BYTE PTR DS:[EDI+1002],CL # ADD BYTE PTR DS:[EAX],AL # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10001049 : # ADD DL,BYTE PTR DS:[EAX] # ADD BYTE PTR DS:[EAX],AL # ADD BYTE PTR DS:[EAX],AL # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000104b : # ADD BYTE PTR DS:[EAX],AL # ADD BYTE PTR DS:[EAX],AL # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000104d : # ADD BYTE PTR DS:[EAX],AL # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000305a : # ADC BYTE PTR DS:[ECX+46893446],CL # CMP AL,CH # CMP AH,0FF # DEC DWORD PTR DS:[EBX+B850E8C6] # ADD BYTE PTR DS:[EAX],AL # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000305c : # INC ESI # XOR AL,89 # INC ESI # CMP AL,CH # CMP AH,0FF # DEC DWORD PTR DS:[EBX+B850E8C6] # ADD BYTE PTR DS:[EAX],AL # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000305d : # XOR AL,89 # INC ESI # CMP AL,CH # CMP AH,0FF # DEC DWORD PTR DS:[EBX+B850E8C6] # ADD BYTE PTR DS:[EAX],AL # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000305f : # INC ESI # CMP AL,CH # CMP AH,0FF # DEC DWORD PTR DS:[EBX+B850E8C6] # ADD BYTE PTR DS:[EAX],AL # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10003060 : # CMP AL,CH # CMP AH,0FF # DEC DWORD PTR DS:[EBX+B850E8C6] # ADD BYTE PTR DS:[EAX],AL # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10003062 : # CMP AH,0FF # DEC DWORD PTR DS:[EBX+B850E8C6] # ADD BYTE PTR DS:[EAX],AL # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10003065 : # DEC DWORD PTR DS:[EBX+B850E8C6] # ADD BYTE PTR DS:[EAX],AL # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1001906a : # ADC BYTE PTR DS:[EBX],BH # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1000306b : # ADD BYTE PTR DS:[EAX],AL # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10008813 : # PUSHAD # ADD BYTE PTR DS:[EAX],AL # RETN 0x10 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10008814 : # ADD BYTE PTR DS:[EAX],AL # RETN 0x10 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10012815 : # ADC BYTE PTR DS:[EBX+2AF2425],AL # ADC BYTE PTR DS:[EAX],AL # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x10009088 : # ADD BYTE PTR DS:[EAX+ECX-7D],DH # ADC AL,0 # XOR EAX,EAX # POP ESI # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000908b : # AND DWORD PTR DS:[ESI+14],0 # XOR EAX,EAX # POP ESI # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000908c : # ADC AL,0 # XOR EAX,EAX # POP ESI # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000908d : # ADC AL,0 # XOR EAX,EAX # POP ESI # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000f098 : # OR BL,CH # AND EDI,DWORD PTR DS:[EBX] # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000d09a : # INC ESI # OR AL,89 # POP ESI # ADD AL,5F # POP ESI # POP EBX # POP EBP # RETN 0x08 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000d09b : # OR AL,89 # POP ESI # ADD AL,5F # POP ESI # POP EBX # POP EBP # RETN 0x08 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1001709e : # NEG DWORD PTR DS:[EDI+5E] # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x100010a8 : # ADD DWORD PTR DS:[EAX],EDX # POP EDI # POP ESI # POP EBX # RETN 0x0C ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100010a9 : # ADC BYTE PTR DS:[EDI+5E],BL # POP EBX # RETN 0x0C ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100030aa : # ADD BYTE PTR DS:[EAX],AL # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100010ae : # OR AL,0 # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100050ba : # DEC DWORD PTR DS:[EBX+97FBE8C7] # ADD BYTE PTR DS:[EAX],AL # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100050be : # STI # XCHG EAX,EDI # ADD BYTE PTR DS:[EAX],AL # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100050bf : # XCHG EAX,EDI # ADD BYTE PTR DS:[EAX],AL # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100050c0 : # ADD BYTE PTR DS:[EAX],AL # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100010c8 : # ADD BYTE PTR DS:[EAX],AL # POP ECX # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100050e0 : # AND DWORD PTR DS:[ESI],0 # POP ESI # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000f0e1 : # ADC AL,5D # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100030e5 : # ADC BYTE PTR DS:[EDI-1],DL # ADC EAX,<&USER32.DispatchMessageA> # XOR EAX,EAX # INC EAX # POP EDI # POP ESI # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100030eb : # ADD DWORD PTR DS:[EAX],EDX # XOR EAX,EAX # INC EAX # POP EDI # POP ESI # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000bc1a : # LES ESI,EDX # ADD DWORD PTR DS:[EAX],EDX # POP EBP # RETN 0x18 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100010f3 : # ADD BYTE PTR DS:[EAX],AL # ADD ESP,4 # MOV EAX,ESI # POP ESI # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100010f4 : # ADD BYTE PTR DS:[EBX+C68B04C4],AL # POP ESI # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000bd7e : # ADD BYTE PTR DS:[EAX],AL # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000f0fa : # OR AL,CH # MOV EDI,83FFFFFE # LES EBX,FWORD PTR DS:[EAX] # POP EBP # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000f0fc : # MOV EDI,83FFFFFE # LES EBX,FWORD PTR DS:[EAX] # POP EBP # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000182a : # ADC BYTE PTR SS:[EBP+5D0275C0],AL # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000f101 : # LES EBX,FWORD PTR DS:[EAX] # POP EBP # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10011102 : # ADD BYTE PTR DS:[EAX],AL # POP ECX # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x1000282b : # SUB BL,DH # ADD DWORD PTR DS:[EAX],EDX # POP EBP # RETN 0x08 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000282d : # ADD DWORD PTR DS:[EAX],EDX # POP EBP # RETN 0x08 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000782e : # XOR AL,5F # POP ESI # POP EBP # RETN 0x14 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10001117 : # ADD EAX,28F0CA3 # ADC BH,BH # ADC EAX,<&USER32.SetWindowsHookExA> # MOV DWORD PTR DS:[10028F08],EAX # MOV EAX,1 # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000dd84 : # ADC BYTE PTR DS:[ESI],CL # ADD DL,BYTE PTR DS:[EAX] # MOV DWORD PTR DS:[EAX+4],ECX # MOV DWORD PTR DS:[EAX+10],ECX # MOV DWORD PTR DS:[EAX+C],ECX # MOV DWORD PTR DS:[EAX+8],ECX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000111a : # POP DWORD PTR DS:[EDX] # ADC BH,BH # ADC EAX,<&USER32.SetWindowsHookExA> # MOV DWORD PTR DS:[10028F08],EAX # MOV EAX,1 # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1001a82f : # LES EDI,FWORD PTR DS:[EBX] # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1000111c : # ADC BH,BH # ADC EAX,<&USER32.SetWindowsHookExA> # MOV DWORD PTR DS:[10028F08],EAX # MOV EAX,1 # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000111e : # ADC EAX,<&USER32.SetWindowsHookExA> # MOV DWORD PTR DS:[10028F08],EAX # MOV EAX,1 # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10001121 : # ADD DWORD PTR DS:[EAX],EDX # MOV DWORD PTR DS:[10028F08],EAX # MOV EAX,1 # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000f122 : # STC # ADC DWORD PTR DS:[EDI+E],ESI # PUSH 0D # POP EAX # POP EBP # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000f123 : # ADC DWORD PTR DS:[EDI+E],ESI # PUSH 0D # POP EAX # POP EBP # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10001124 : # OR BYTE PTR DS:[EDI+1B81002],CL # ADD BYTE PTR DS:[EAX],AL # ADD DL,AL # ADD AL,0 # XOR EAX,EAX # INC EAX # RETN 0x0C ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000f125 : # PUSH CS # PUSH 0D # POP EAX # POP EBP # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000f126 : # PUSH 0D # POP EAX # POP EBP # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10001127 : # ADC BYTE PTR DS:[EAX+1],BH # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10001129 : # ADD DWORD PTR DS:[EAX],EAX # ADD BYTE PTR DS:[EAX],AL # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000112a : # ADD BYTE PTR DS:[EAX],AL # ADD DL,AL # ADD AL,0 # XOR EAX,EAX # INC EAX # RETN 0x0C ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000112b : # ADD BYTE PTR DS:[EAX],AL # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1001312c : # PUSH EBP # ADD DWORD PTR DS:[EAX],EAX # ADD DH,DH # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x1001312d : # ADD DWORD PTR DS:[EAX],EAX # ADD DH,DH # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x10019133 : # AND DWORD PTR DS:[EDI+4],0 # MOV DWORD PTR DS:[EDI+8],1 # MOV EAX,EDI # POP EDI # POP ESI # POP EBX # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10019134 : # ADD AL,0 # MOV DWORD PTR DS:[EDI+8],1 # MOV EAX,EDI # POP EDI # POP ESI # POP EBX # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10019135 : # ADD AL,0 # MOV DWORD PTR DS:[EDI+8],1 # MOV EAX,EDI # POP EDI # POP ESI # POP EBX # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10019136 : # ADD BH,AL # INC EDI # OR BYTE PTR DS:[ECX],AL # ADD BYTE PTR DS:[EAX],AL # ADD BYTE PTR DS:[EBX+5B5E5FC7],CL # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10019137 : # MOV DWORD PTR DS:[EDI+8],1 # MOV EAX,EDI # POP EDI # POP ESI # POP EBX # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10019138 : # INC EDI # OR BYTE PTR DS:[ECX],AL # ADD BYTE PTR DS:[EAX],AL # ADD BYTE PTR DS:[EBX+5B5E5FC7],CL # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10019139 : # OR BYTE PTR DS:[ECX],AL # ADD BYTE PTR DS:[EAX],AL # ADD BYTE PTR DS:[EBX+5B5E5FC7],CL # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1001913a : # ADD DWORD PTR DS:[EAX],EAX # ADD BYTE PTR DS:[EAX],AL # MOV EAX,EDI # POP EDI # POP ESI # POP EBX # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1001913b : # ADD BYTE PTR DS:[EAX],AL # ADD BYTE PTR DS:[EBX+5B5E5FC7],CL # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1001913c : # ADD BYTE PTR DS:[EAX],AL # MOV EAX,EDI # POP EDI # POP ESI # POP EBX # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1001913d : # ADD BYTE PTR DS:[EBX+5B5E5FC7],CL # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1001b13e : # INC DWORD PTR DS:[EBX+C03310C4] # POP EDI # POP ESI # POP EBX # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1001b140 : # LES EDX,FWORD PTR DS:[EAX] # XOR EAX,EAX # POP EDI # POP ESI # POP EBX # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10005149 : # ADC BYTE PTR DS:[EBX+FF561CC6],AL # ADC EAX,<&KERNEL32.DeleteCriticalSection> # POP EDI # POP ESI # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10003150 : # ADD DWORD PTR DS:[EAX],EDX # POP ESI # POP EBP # RETN 0x0C ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10003151 : # ADC BYTE PTR DS:[ESI+5D],BL # RETN 0x0C ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10005152 : # ADD DWORD PTR DS:[EAX],EDX # POP EDI # POP ESI # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10005153 : # ADC BYTE PTR DS:[EDI+5E],BL # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000f154 : # ADC BL,AL # ADD EAX,8 # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1001115d : # ADD BYTE PTR DS:[EAX],AL # ADD ESP,0C # POP EBP # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x10011161 : # OR AL,5D # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x10005905 : # POP ESI # SUB BYTE PTR DS:[EDI+5E],BL # POP EBX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000f167 : # ADC BL,AL # ADD EAX,0C # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000d16a : # INC ECX # OR BYTE PTR SS:[EBP+A],BH # MOV ECX,DWORD PTR DS:[ECX+4] # LEA EAX,DWORD PTR DS:[ECX+EAX*4] # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000d16b : # OR BYTE PTR SS:[EBP+A],BH # MOV ECX,DWORD PTR DS:[ECX+4] # LEA EAX,DWORD PTR DS:[ECX+EAX*4] # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000f187 : # MOV ESP,89FFFFFF # XOR BYTE PTR DS:[ESI+5D],BL # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000d18b : # INC ECX # OR BYTE PTR SS:[EBP+A],BH # MOV ECX,DWORD PTR DS:[ECX+4] # MOV EAX,DWORD PTR DS:[ECX+EAX*4] # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000f18c : # XOR BYTE PTR DS:[ESI+5D],BL # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1001118f : # MOV DWORD PTR SS:[EBP-18],ESP # PUSH DWORD PTR SS:[EBP-8] # MOV EAX,DWORD PTR SS:[EBP-4] # MOV DWORD PTR SS:[EBP-4],-2 # MOV DWORD PTR SS:[EBP-8],EAX # LEA EAX,DWORD PTR SS:[EBP-10] # MOV DWORD PTR FS:[0],EAX # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10011192 : # PUSH DWORD PTR SS:[EBP-8] # MOV EAX,DWORD PTR SS:[EBP-4] # MOV DWORD PTR SS:[EBP-4],-2 # MOV DWORD PTR SS:[EBP-8],EAX # LEA EAX,DWORD PTR SS:[EBP-10] # MOV DWORD PTR FS:[0],EAX # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1000e843 : # DEC DWORD PTR SS:[EBP+A364F445] # ADD BYTE PTR DS:[EAX],AL # ADD BYTE PTR DS:[EAX],AL # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10011194 : # CLC # MOV EAX,DWORD PTR SS:[EBP-4] # MOV DWORD PTR SS:[EBP-4],-2 # MOV DWORD PTR SS:[EBP-8],EAX # LEA EAX,DWORD PTR SS:[EBP-10] # MOV DWORD PTR FS:[0],EAX # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10011195 : # MOV EAX,DWORD PTR SS:[EBP-4] # MOV DWORD PTR SS:[EBP-4],-2 # MOV DWORD PTR SS:[EBP-8],EAX # LEA EAX,DWORD PTR SS:[EBP-10] # MOV DWORD PTR FS:[0],EAX # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10011196 : # INC EBP # CLD # MOV DWORD PTR SS:[EBP-4],-2 # MOV DWORD PTR SS:[EBP-8],EAX # LEA EAX,DWORD PTR SS:[EBP-10] # MOV DWORD PTR FS:[0],EAX # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10011197 : # CLD # MOV DWORD PTR SS:[EBP-4],-2 # MOV DWORD PTR SS:[EBP-8],EAX # LEA EAX,DWORD PTR SS:[EBP-10] # MOV DWORD PTR FS:[0],EAX # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10011198 : # MOV DWORD PTR SS:[EBP-4],-2 # MOV DWORD PTR SS:[EBP-8],EAX # LEA EAX,DWORD PTR SS:[EBP-10] # MOV DWORD PTR FS:[0],EAX # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10005199 : # INC DWORD PTR DS:[EBX+2900425] # ADC BYTE PTR DS:[EAX],AL # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000519a : # AND DWORD PTR DS:[10029004],0 # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1001119f : # MOV DWORD PTR SS:[EBP-8],EAX # LEA EAX,DWORD PTR SS:[EBP-10] # MOV DWORD PTR FS:[0],EAX # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x100111a6 : # MOV DWORD PTR DS:[0],EAX # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x100111a7 : # ADD BYTE PTR DS:[EAX],AL # ADD BYTE PTR DS:[EAX],AL # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x100111a9 : # ADD BYTE PTR DS:[EAX],AL # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1000e848 : # MOV DWORD PTR DS:[0],EAX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000d1b3 : # MOV EAX,ECX # XOR ECX,ECX # MOV DWORD PTR DS:[EAX],WinCRT.10020DB8 # MOV DWORD PTR DS:[EAX+4],ECX # MOV DWORD PTR DS:[EAX+10],ECX # MOV DWORD PTR DS:[EAX+C],ECX # MOV DWORD PTR DS:[EAX+8],ECX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100051b5 : # ADC BYTE PTR DS:[ECX],AL # ADD BYTE PTR DS:[EAX],AL # ADD BH,BH # ADC EAX,<&KERNEL32.InitializeCriticalSection> # MOV EAX,DWORD PTR DS:[10029040] # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100051b7 : # ADD BYTE PTR DS:[EAX],AL # ADD BH,BH # ADC EAX,<&KERNEL32.InitializeCriticalSection> # MOV EAX,DWORD PTR DS:[10029040] # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100051be : # ADD DWORD PTR DS:[EAX],EDX # MOV EAX,DWORD PTR DS:[10029040] # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100051bf : # ADC BYTE PTR DS:[ECX+10029040],AH # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100191c3 : # POP DS # ADD DL,BYTE PTR DS:[EAX] # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x100182f9 : # LES EAX,FWORD PTR DS:[ECX+7A] # ADD EAX,5D40C033 # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x100191dd : # CMP DH,0FF # POP ECX # MOV EAX,ESI # POP ESI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x100192fb : # PUSH EDX # OR AL,39 # PUSH ECX # OR BYTE PTR SS:[EBP+5],DH # MOV EAX,1 # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1000d2fc : # POP ESI # OR BYTE PTR DS:[EDI+5E],BL # POP EBX # POP EBP # RETN 0x08 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100191f3 : # ADD BYTE PTR SS:[EBP+2],DH # XOR EAX,EAX # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1000f1f9 : # ADD DWORD PTR DS:[EBX+F67501EA],EAX # MOV EAX,DWORD PTR SS:[ESP+8] # POP EDI # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000f1fc : # ADD DWORD PTR SS:[EBP-A],ESI # MOV EAX,DWORD PTR SS:[ESP+8] # POP EDI # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000f200 : # INC ESP # AND AL,8 # POP EDI # RETN ** [WinCRT.dll] ** | null,unicodereverse {PAGE_EXECUTE_READ}
0x1000f201 : # AND AL,8 # POP EDI # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000f202 : # OR BYTE PTR DS:[EDI-3D],BL # MOV EAX,DWORD PTR SS:[ESP+4] # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10005204 : # ADC BYTE PTR DS:[EAX+EBP*8+5F],BH # POP ESI # POP EBX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10001205 : # OR AL,CH # CMP AL,1A # ADD BYTE PTR DS:[EAX],AL # XOR EAX,EAX # INC EAX # POP EBP # RETN 0x0C ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000f206 : # INC ESP # AND AL,4 # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10001207 : # CMP AL,1A # ADD BYTE PTR DS:[EAX],AL # XOR EAX,EAX # INC EAX # POP EBP # RETN 0x0C ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10001209 : # ADD BYTE PTR DS:[EAX],AL # XOR EAX,EAX # INC EAX # POP EBP # RETN 0x0C ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1001554f : # ADD BYTE PTR DS:[EDI-2B],BH # POP ESI # POP EBX # POP EBP # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x10019211 : # DEC EBP # ADD BYTE PTR DS:[EAX],AL # POP EBP # POP EDI # POP ESI # POP EBX # MOV ESP,EBP # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10019212 : # ADD BYTE PTR DS:[EAX],AL # POP EBP # POP EDI # POP ESI # POP EBX # MOV ESP,EBP # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10019213 : # ADD BYTE PTR SS:[EBP+5F],BL # POP ESI # POP EBX # MOV ESP,EBP # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10019214 : # POP EBP # POP EDI # POP ESI # POP EBX # MOV ESP,EBP # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10019215 : # POP EDI # POP ESI # POP EBX # MOV ESP,EBP # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10019216 : # POP ESI # POP EBX # MOV ESP,EBP # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10019217 : # POP EBX # MOV ESP,EBP # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10019218 : # MOV ESP,EBP # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10007db0 : # ADC BYTE PTR DS:[EAX-18],DL # POP ESP # INC EBP # ADD BYTE PTR DS:[EAX],AL # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10001228 : # AAA # ADD BYTE PTR DS:[EAX],AL # MOV ECX,DWORD PTR SS:[EBP+8] # MOV DWORD PTR DS:[EAX+8],ECX # XOR EAX,EAX # INC EAX # POP EBP # RETN 0x0C ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10001229 : # ADD BYTE PTR DS:[EAX],AL # MOV ECX,DWORD PTR SS:[EBP+8] # MOV DWORD PTR DS:[EAX+8],ECX # XOR EAX,EAX # INC EAX # POP EBP # RETN 0x0C ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000122c : # DEC EBP # OR BYTE PTR DS:[ECX+C0330848],CL # INC EAX # POP EBP # RETN 0x0C ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000122d : # OR BYTE PTR DS:[ECX+C0330848],CL # INC EAX # POP EBP # RETN 0x0C ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1001722f : # MOV DWORD PTR DS:[C9FFFF75],EAX # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x1000191d : # MOV DWORD PTR DS:[EDX-C],EAX # MOV ECX,DWORD PTR DS:[ECX] # MOV BYTE PTR DS:[EAX+ECX],0 # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10008079 : # OR BYTE PTR DS:[EBX+7C50FFCE],CL # POP ESI # POP EBP # RETN 0x08 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10007db4 : # INC EBP # ADD BYTE PTR DS:[EAX],AL # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10019249 : # ADC AL,0 # ADD BYTE PTR DS:[EAX],AL # ADD ESP,8 # POP EBP # MOV EAX,DWORD PTR SS:[ESP+8] # MOV EDX,DWORD PTR SS:[ESP+10] # MOV DWORD PTR DS:[EDX],EAX # MOV EAX,3 # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1001924a : # ADD BYTE PTR DS:[EAX],AL # ADD BYTE PTR DS:[EBX+8B5D08C4],AL # INC ESP # AND AL,8 # MOV EDX,DWORD PTR SS:[ESP+10] # MOV DWORD PTR DS:[EDX],EAX # MOV EAX,3 # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1001924b : # ADD BYTE PTR DS:[EAX],AL # ADD ESP,8 # POP EBP # MOV EAX,DWORD PTR SS:[ESP+8] # MOV EDX,DWORD PTR SS:[ESP+10] # MOV DWORD PTR DS:[EDX],EAX # MOV EAX,3 # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1001924c : # ADD BYTE PTR DS:[EBX+8B5D08C4],AL # INC ESP # AND AL,8 # MOV EDX,DWORD PTR SS:[ESP+10] # MOV DWORD PTR DS:[EDX],EAX # MOV EAX,3 # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1001924e : # LES ECX,FWORD PTR DS:[EAX] # POP EBP # MOV EAX,DWORD PTR SS:[ESP+8] # MOV EDX,DWORD PTR SS:[ESP+10] # MOV DWORD PTR DS:[EDX],EAX # MOV EAX,3 # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1001924f : # OR BYTE PTR SS:[EBP-75],BL # INC ESP # AND AL,8 # MOV EDX,DWORD PTR SS:[ESP+10] # MOV DWORD PTR DS:[EDX],EAX # MOV EAX,3 # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10001250 : # OR BYTE PTR DS:[ECX+10027084],AH # MOV DWORD PTR DS:[10027084],ECX # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10001251 : # MOV EAX,DWORD PTR DS:[10027084] # MOV DWORD PTR DS:[10027084],ECX # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10019252 : # INC ESP # AND AL,8 # MOV EDX,DWORD PTR SS:[ESP+10] # MOV DWORD PTR DS:[EDX],EAX # MOV EAX,3 # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10019253 : # AND AL,8 # MOV EDX,DWORD PTR SS:[ESP+10] # MOV DWORD PTR DS:[EDX],EAX # MOV EAX,3 # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10019254 : # OR BYTE PTR DS:[EBX+89102454],CL # ADD BH,BYTE PTR DS:[EAX+3] # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10019256 : # PUSH ESP # AND AL,10 # MOV DWORD PTR DS:[EDX],EAX # MOV EAX,3 # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10019257 : # AND AL,10 # MOV DWORD PTR DS:[EDX],EAX # MOV EAX,3 # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10019258 : # ADC BYTE PTR DS:[ECX+3B802],CL # ADD BYTE PTR DS:[EAX],AL # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1001925c : # ADD EAX,DWORD PTR DS:[EAX] # ADD BYTE PTR DS:[EAX],AL # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1001925e : # ADD BYTE PTR DS:[EAX],AL # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10008865 : # DEC DWORD PTR DS:[EBX+6050E8C6] # ADD BYTE PTR DS:[EAX],AL # RETN 0x14 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000c28b : # INC EBP # OR BYTE PTR SS:[EBP+830A74C0],AL # PUSHAD # ADD AL,0 # MOV DWORD PTR DS:[EAX],WinCRT.100209A8 # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1001703b : # ADD BYTE PTR DS:[EAX],AL # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x1000886a : # PUSHAD # ADD BYTE PTR DS:[EAX],AL # RETN 0x14 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10009290 : # ADD DWORD PTR DS:[EAX],EAX # ADD BYTE PTR DS:[ESI-37],BL # RETN 0x08 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10009292 : # ADD BYTE PTR DS:[ESI-37],BL # RETN 0x08 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10001298 : # ADD BYTE PTR DS:[EAX],AL # MOV EAX,WinCRT.1001F574 # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10001299 : # ADD BYTE PTR DS:[EAX+1001F574],BH # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000529a : # TEST AL,0F1 # ADD DWORD PTR DS:[EAX],EDX # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000129c : # CMC # ADD DWORD PTR DS:[EAX],EDX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000129d : # ADD DWORD PTR DS:[EAX],EDX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100052a7 : # INC DWORD PTR DS:[EAX+10] # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100012ab : # OR AH,BYTE PTR DS:[ESI-75] # DEC EBP # ADC AL,66 # MOV DWORD PTR DS:[EAX],ECX # XOR EAX,EAX # INC EAX # POP EBP # RETN 0x14 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100012ac : # MOV CX,WORD PTR SS:[EBP+14] # MOV WORD PTR DS:[EAX],CX # XOR EAX,EAX # INC EAX # POP EBP # RETN 0x14 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100012ad : # MOV ECX,DWORD PTR SS:[EBP+14] # MOV WORD PTR DS:[EAX],CX # XOR EAX,EAX # INC EAX # POP EBP # RETN 0x14 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100012ae : # DEC EBP # ADC AL,66 # MOV DWORD PTR DS:[EAX],ECX # XOR EAX,EAX # INC EAX # POP EBP # RETN 0x14 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100012af : # ADC AL,66 # MOV DWORD PTR DS:[EAX],ECX # XOR EAX,EAX # INC EAX # POP EBP # RETN 0x14 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100012b0 : # MOV WORD PTR DS:[EAX],CX # XOR EAX,EAX # INC EAX # POP EBP # RETN 0x14 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1001edc8 : # ADC BL,AL # MOV DWORD PTR DS:[100292D8],WinCRT.1001FCF4 # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x100032b2 : # ADD DWORD PTR DS:[EAX],EDX # MOV DWORD PTR DS:[ESI+2C],EAX # POP ESI # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10001922 : # MOV BYTE PTR DS:[EAX+ECX],0 # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100063b9 : # ADD BH,AL # ADD BYTE PTR DS:[EAX-2],DL # ADD DWORD PTR DS:[EAX],EDX # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100192d2 : # MOV BH,8B # DEC ESP # AND AL,4 # MOV DWORD PTR FS:[0],ECX # ADD ESP,18 # POP EDI # POP ESI # POP EBX # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x100192d4 : # DEC ESP # AND AL,4 # MOV DWORD PTR FS:[0],ECX # ADD ESP,18 # POP EDI # POP ESI # POP EBX # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x100192d5 : # AND AL,4 # MOV DWORD PTR FS:[0],ECX # ADD ESP,18 # POP EDI # POP ESI # POP EBX # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x100192d6 : # ADD AL,64 # MOV DWORD PTR DS:[0],ECX # ADD ESP,18 # POP EDI # POP ESI # POP EBX # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1000e879 : # DEC DWORD PTR SS:[EBP+A364F445] # ADD BYTE PTR DS:[EAX],AL # ADD BYTE PTR DS:[EAX],AL # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100192d8 : # MOV DWORD PTR DS:[0],ECX # ADD ESP,18 # POP EDI # POP ESI # POP EBX # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x100192da : # ADD BYTE PTR DS:[EAX],AL # ADD BYTE PTR DS:[EAX],AL # ADD ESP,18 # POP EDI # POP ESI # POP EBX # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x100192db : # ADD BYTE PTR DS:[EAX],AL # ADD BYTE PTR DS:[EBX+5E5F18C4],AL # POP EBX # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x100192dc : # ADD BYTE PTR DS:[EAX],AL # ADD ESP,18 # POP EDI # POP ESI # POP EBX # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x100192dd : # ADD BYTE PTR DS:[EBX+5E5F18C4],AL # POP EBX # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x100192df : # LES EBX,FWORD PTR DS:[EAX] # POP EDI # POP ESI # POP EBX # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10008dd1 : # ADD DWORD PTR DS:[EAX],EDX # MOV DWORD PTR DS:[ESI+14],EAX # MOV ECX,DWORD PTR DS:[ESI+14] # MOV EAX,DWORD PTR SS:[EBP+8] # MOV DWORD PTR DS:[EAX],ECX # POP ESI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000e87e : # MOV DWORD PTR DS:[0],EAX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100192f6 : # ADC BYTE PTR DS:[EBX+528B0C51],CL # OR AL,39 # PUSH ECX # OR BYTE PTR SS:[EBP+5],DH # MOV EAX,1 # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1000d2f7 : # ADD AL,89 # INC ESI # OR AL,89 # POP ESI # OR BYTE PTR DS:[EDI+5E],BL # POP EBX # POP EBP # RETN 0x08 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100192f8 : # PUSH ECX # OR AL,8B # PUSH EDX # OR AL,39 # PUSH ECX # OR BYTE PTR SS:[EBP+5],DH # MOV EAX,1 # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x100192f9 : # OR AL,8B # PUSH EDX # OR AL,39 # PUSH ECX # OR BYTE PTR SS:[EBP+5],DH # MOV EAX,1 # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1000d2fa : # OR AL,89 # POP ESI # OR BYTE PTR DS:[EDI+5E],BL # POP EBX # POP EBP # RETN 0x08 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000e87f : # ADD BYTE PTR DS:[EAX],AL # ADD BYTE PTR DS:[EAX],AL # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100192fc : # OR AL,39 # PUSH ECX # OR BYTE PTR SS:[EBP+5],DH # MOV EAX,1 # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1000d2fd : # OR BYTE PTR DS:[EDI+5E],BL # POP EBX # POP EBP # RETN 0x08 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100192fe : # PUSH ECX # OR BYTE PTR SS:[EBP+5],DH # MOV EAX,1 # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x100192ff : # OR BYTE PTR SS:[EBP+5],DH # MOV EAX,1 # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10019303 : # ADD DWORD PTR DS:[EAX],EAX # ADD BYTE PTR DS:[EAX],AL # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10019305 : # ADD BYTE PTR DS:[EAX],AL # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10001924 : # OR BYTE PTR DS:[EAX],AL # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100063bb : # ADD BYTE PTR DS:[EAX-2],DL # ADD DWORD PTR DS:[EAX],EDX # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000532e : # XCHG EAX,EBP # ADD BYTE PTR DS:[EAX],AL # RETN 0x14 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000532f : # ADD BYTE PTR DS:[EAX],AL # RETN 0x14 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10019333 : # AND DWORD PTR DS:[1002C8C4],0 # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10011334 : # POP SS # ADD BYTE PTR DS:[EAX],AL # POP ECX # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x10011335 : # ADD BYTE PTR DS:[EAX],AL # POP ECX # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x1000c292 : # PUSHAD # ADD AL,0 # MOV DWORD PTR DS:[EAX],WinCRT.100209A8 # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10019338 : # ADC BYTE PTR DS:[EAX],AL # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10001343 : # POP DWORD PTR DS:[EDX] # ADC BYTE PTR DS:[EDI+3B],DH # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10001345 : # ADC BYTE PTR DS:[EDI+3B],DH # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000534c : # INS DWORD PTR ES:[EDI],DX # XCHG EAX,EBP # ADD BYTE PTR DS:[EAX],AL # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000534d : # XCHG EAX,EBP # ADD BYTE PTR DS:[EAX],AL # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000534e : # ADD BYTE PTR DS:[EAX],AL # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000a338 : # MOV AL,BYTE PTR DS:[5EFFFFF5] # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000c293 : # ADD AL,0 # MOV DWORD PTR DS:[EAX],WinCRT.100209A8 # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10001366 : # ADD EAX,WinCRT.10028FDC # ADD DWORD PTR DS:[EBX-37],EBX # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10005891 : # NOP # ADD BYTE PTR DS:[EAX],AL # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10001369 : # ADD DL,BYTE PTR DS:[EAX] # ADD DWORD PTR DS:[EBX-37],EBX # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000136b : # ADD DWORD PTR DS:[EBX-37],EBX # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10013892 : # OR BYTE PTR DS:[EBX+1002B394],AH # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1001b375 : # FADD DWORD PTR DS:[EBX+5E5D00DA] # POP EDI # RETN 0x10 ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1001b377 : # FIADD DWORD PTR DS:[EAX] # POP EBP # POP ESI # POP EDI # RETN 0x10 ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1001b378 : # ADD BYTE PTR SS:[EBP+5E],BL # POP EDI # RETN 0x10 ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10009388 : # XCHG EAX,EDX # AND BYTE PTR DS:[ECX],AL # ADD BYTE PTR DS:[EAX],AL # POP ESI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10009389 : # AND BYTE PTR DS:[ECX],AL # ADD BYTE PTR DS:[EAX],AL # POP ESI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000938a : # ADD DWORD PTR DS:[EAX],EAX # ADD BYTE PTR DS:[ESI+5D],BL # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000938b : # ADD BYTE PTR DS:[EAX],AL # POP ESI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000938c : # ADD BYTE PTR DS:[ESI+5D],BL # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10018344 : # LES ECX,FWORD PTR DS:[ECX+ECX*8] # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1000139a : # XOR ECX,ECX # CMP EAX,-1 # SETNE CL # MOV DWORD PTR DS:[ESI],EAX # MOV AL,CL # POP ESI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1001939b : # CMP EAX,WinCRT.1002B70C # ADD BYTE PTR SS:[EBP+12],DH # MOV EAX,DWORD PTR SS:[EBP+8] # MOV ECX,DWORD PTR DS:[100285E0] # MOVZX EAX,WORD PTR DS:[ECX+EAX*2] # AND EAX,4 # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1001939c : # OR AL,0B7 # ADD DL,BYTE PTR DS:[EAX] # ADD BYTE PTR SS:[EBP+12],DH # MOV EAX,DWORD PTR SS:[EBP+8] # MOV ECX,DWORD PTR DS:[100285E0] # MOVZX EAX,WORD PTR DS:[ECX+EAX*2] # AND EAX,4 # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1001939e : # ADD DL,BYTE PTR DS:[EAX] # ADD BYTE PTR SS:[EBP+12],DH # MOV EAX,DWORD PTR SS:[EBP+8] # MOV ECX,DWORD PTR DS:[100285E0] # MOVZX EAX,WORD PTR DS:[ECX+EAX*2] # AND EAX,4 # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1000139f : # SETNE CL # MOV DWORD PTR DS:[ESI],EAX # MOV AL,CL # POP ESI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100193a0 : # ADD BYTE PTR SS:[EBP+12],DH # MOV EAX,DWORD PTR SS:[EBP+8] # MOV ECX,DWORD PTR DS:[100285E0] # MOVZX EAX,WORD PTR DS:[ECX+EAX*2] # AND EAX,4 # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x100013a2 : # MOV DWORD PTR DS:[ESI],EAX # MOV AL,CL # POP ESI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100193a3 : # MOV EAX,DWORD PTR SS:[EBP+8] # MOV ECX,DWORD PTR DS:[100285E0] # MOVZX EAX,WORD PTR DS:[ECX+EAX*2] # AND EAX,4 # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x100193a4 : # INC EBP # OR BYTE PTR DS:[EBX+285E00D],CL # ADC BYTE PTR DS:[EDI],CL # MOV BH,4 # INC ECX # AND EAX,4 # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x100193a5 : # OR BYTE PTR DS:[EBX+285E00D],CL # ADC BYTE PTR DS:[EDI],CL # MOV BH,4 # INC ECX # AND EAX,4 # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x100193a6 : # MOV ECX,DWORD PTR DS:[100285E0] # MOVZX EAX,WORD PTR DS:[ECX+EAX*2] # AND EAX,4 # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x100193a7 : # OR EAX,100285E0 # MOVZX EAX,WORD PTR DS:[ECX+EAX*2] # AND EAX,4 # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x100193a9 : # TEST DWORD PTR DS:[EDX],EAX # ADC BYTE PTR DS:[EDI],CL # MOV BH,4 # INC ECX # AND EAX,4 # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x100193aa : # ADD DL,BYTE PTR DS:[EAX] # MOVZX EAX,WORD PTR DS:[ECX+EAX*2] # AND EAX,4 # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x100193ab : # ADC BYTE PTR DS:[EDI],CL # MOV BH,4 # INC ECX # AND EAX,4 # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x100193ac : # MOVZX EAX,WORD PTR DS:[ECX+EAX*2] # AND EAX,4 # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x100193ad : # MOV BH,4 # INC ECX # AND EAX,4 # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x100033af : # OR BYTE PTR DS:[ECX],AL # POP EDI # POP ESI # SETL AL # POP EBX # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100033b0 : # ADD DWORD PTR DS:[EDI+5E],EBX # SETL AL # POP EBX # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100033b1 : # POP EDI # POP ESI # SETL AL # POP EBX # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100033b2 : # POP ESI # SETL AL # POP EBX # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100033b3 : # SETL AL # POP EBX # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100013b5 : # MOV AL,1 # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1001adf5 : # LES EDX,FWORD PTR DS:[EAX] # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x100033c1 : # POP EAX # ADD BYTE PTR SS:[EBP+3],DH # XOR EAX,EAX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100033c2 : # ADD BYTE PTR SS:[EBP+3],DH # XOR EAX,EAX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000c8a1 : # SUB BYTE PTR DS:[EDX],AL # MOV EAX,ESI # POP ESI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100013c8 : # XOR AL,AL # POP ESI # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000e8a3 : # MOV DWORD PTR SS:[EBP-14],EAX # MOV DWORD PTR SS:[EBP-10],ESP # PUSH DWORD PTR SS:[EBP-4] # MOV DWORD PTR SS:[EBP-4],-1 # LEA EAX,DWORD PTR SS:[EBP-C] # MOV DWORD PTR FS:[0],EAX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000434e : # OR BYTE PTR DS:[ECX+48830C48],CL # INC ESP # INC DWORD PTR DS:[EBX+89FF4C48] # DEC EAX # DEC EAX # MOV DWORD PTR DS:[EAX+C],6C # MOV DWORD PTR DS:[EAX+28],WinCRT.10001244 # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100193dc : # OR BYTE PTR DS:[EDI-1],FFFFFFFF # POP ECX # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10004350 : # DEC EAX # OR AL,83 # DEC EAX # INC ESP # INC DWORD PTR DS:[EBX+89FF4C48] # DEC EAX # DEC EAX # MOV DWORD PTR DS:[EAX+C],6C # MOV DWORD PTR DS:[EAX+28],WinCRT.10001244 # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10004352 : # OR DWORD PTR DS:[EAX+44],FFFFFFFF # OR DWORD PTR DS:[EAX+4C],FFFFFFFF # MOV DWORD PTR DS:[EAX+48],ECX # MOV DWORD PTR DS:[EAX+C],6C # MOV DWORD PTR DS:[EAX+28],WinCRT.10001244 # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100033f1 : # ADD BYTE PTR SS:[EBP+4],DH # XOR EAX,EAX # POP EBP # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10004353 : # DEC EAX # INC ESP # INC DWORD PTR DS:[EBX+89FF4C48] # DEC EAX # DEC EAX # MOV DWORD PTR DS:[EAX+C],6C # MOV DWORD PTR DS:[EAX+28],WinCRT.10001244 # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10004354 : # INC ESP # INC DWORD PTR DS:[EBX+89FF4C48] # DEC EAX # DEC EAX # MOV DWORD PTR DS:[EAX+C],6C # MOV DWORD PTR DS:[EAX+28],WinCRT.10001244 # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100013fb : # MOV AL,1 # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1001b3fe : # ADD EAX,2291E8 # ADD BYTE PTR DS:[ECX+59],BL # XOR EAX,EAX # POP ESI # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10002355 : # ADD BYTE PTR DS:[ESI+3B],AH # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1001b400 : # XCHG EAX,ECX # AND AL,BYTE PTR DS:[EAX] # ADD BYTE PTR DS:[ECX+59],BL # XOR EAX,EAX # POP ESI # POP EBP # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1001b401 : # AND AL,BYTE PTR DS:[EAX] # ADD BYTE PTR DS:[ECX+59],BL # XOR EAX,EAX # POP ESI # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1001b402 : # ADD BYTE PTR DS:[EAX],AL # POP ECX # POP ECX # XOR EAX,EAX # POP ESI # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x100118ab : # ADD BYTE PTR DS:[EAX],AL # POP ECX # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10004356 : # OR DWORD PTR DS:[EAX+4C],FFFFFFFF # MOV DWORD PTR DS:[EAX+48],ECX # MOV DWORD PTR DS:[EAX+C],6C # MOV DWORD PTR DS:[EAX+28],WinCRT.10001244 # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10018357 : # OR AL,CH # TEST EAX,83FFFFFF # LES EDX,FWORD PTR DS:[EAX] # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10018359 : # TEST EAX,83FFFFFF # LES EDX,FWORD PTR DS:[EAX] # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1000e35b : # ADD BYTE PTR DS:[EAX],AL # XOR EAX,EAX # POP ESI # POP EBP # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000635c : # MOV DWORD PTR DS:[EAX],WinCRT.1001FE64 # MOV DWORD PTR DS:[EAX+4],ECX # MOV DWORD PTR DS:[EAX+8],ECX # MOV DWORD PTR DS:[EAX+C],ECX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10005448 : # ADD BYTE PTR DS:[ESI-37],BL # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100068b8 : # ADD DWORD PTR DS:[EAX],EDX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10003452 : # MOV EAX,C4830000 # ADC BYTE PTR DS:[EBX+5D5E5FC7],CL # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10003453 : # ADD BYTE PTR DS:[EAX],AL # ADD ESP,10 # MOV EAX,EDI # POP EDI # POP ESI # POP EBP # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10003454 : # ADD BYTE PTR DS:[EBX+C78B10C4],AL # POP EDI # POP ESI # POP EBP # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10003456 : # LES EDX,FWORD PTR DS:[EAX] # MOV EAX,EDI # POP EDI # POP ESI # POP EBP # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10003457 : # ADC BYTE PTR DS:[EBX+5D5E5FC7],CL # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10019460 : # MOV ESI,DWORD PTR SS:[EBP-8] # MOV EDI,DWORD PTR SS:[EBP-4] # MOV ESP,EBP # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10019462 : # CLC # MOV EDI,DWORD PTR SS:[EBP-4] # MOV ESP,EBP # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10019463 : # MOV EDI,DWORD PTR SS:[EBP-4] # MOV ESP,EBP # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10019465 : # CLD # MOV ESP,EBP # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10019466 : # MOV ESP,EBP # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x100088bd : # MOV BH,0FF # DEC DWORD PTR DS:[EBX+5FF6E8C6] # ADD BYTE PTR DS:[EAX],AL # RETN 0x18 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10006369 : # DEC EAX # OR AL,0C3 # XOR EAX,EAX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1001947a : # POP EBP # OR AL,8B # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1001947b : # OR AL,8B # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1001b484 : # CMP AL,0FF # DEC DWORD PTR DS:[ECX+FFC88318] # POP EDI # POP ESI # POP EBX # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1001b486 : # DEC DWORD PTR DS:[ECX+FFC88318] # POP EDI # POP ESI # POP EBX # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10003f8d : # INC EBP # OR BYTE PTR DS:[EBX+ECX-75],DH # INC EAX # ADC BYTE PTR SS:[EBP+5DF475C0],AL # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000b48a : # ADD BYTE PTR DS:[EAX],DL # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10005495 : # XCHG EAX,ESP # ADD BYTE PTR DS:[EAX],AL # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10005496 : # ADD BYTE PTR DS:[EAX],AL # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000349d : # INC DWORD PTR DS:[EBX+68910C0] # POP ECX # MOV EAX,ESI # POP ESI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100088c5 : # ADD BYTE PTR DS:[EAX],AL # RETN 0x18 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100034a0 : # ADC BYTE PTR DS:[ECX+C68B5906],CL # POP ESI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000b4a3 : # ADD BYTE PTR DS:[EAX],AL # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1001b4ab : # MOV DWORD PTR DS:[EAX],9 # OR EAX,FFFFFFFF # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x100126c8 : # ADC BYTE PTR DS:[EBX+835CEBC3],CL # CLC # ADD DH,BYTE PTR SS:[ESP+EAX+3B] # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1001b4ad : # OR DWORD PTR DS:[EAX],EAX # ADD BYTE PTR DS:[EAX],AL # OR EAX,FFFFFFFF # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1001b4af : # ADD BYTE PTR DS:[EAX],AL # OR EAX,FFFFFFFF # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x100074b0 : # ADC BYTE PTR DS:[EAX-18],DL # POP ESP # DEC ESI # ADD BYTE PTR DS:[EAX],AL # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100074b3 : # POP ESP # DEC ESI # ADD BYTE PTR DS:[EAX],AL # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100074b4 : # DEC ESI # ADD BYTE PTR DS:[EAX],AL # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100074b5 : # ADD BYTE PTR DS:[EAX],AL # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000e8c9 : # POP EDI # POP ESI # POP EBX # MOV ESP,EBP # POP EBP # PUSH ECX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100114ba : # ADD BYTE PTR DS:[EDX],BH # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1000b4cb : # ADD BYTE PTR DS:[EAX],AL # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1001237a : # MOV DWORD PTR DS:[1002CA00],1 # XOR EAX,EAX # POP ECX # POP EBX # POP EDI # POP ESI # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x100034de : # ADC BYTE PTR DS:[EBX+1062FFC8],CL # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000637b : # MOV DWORD PTR DS:[EAX],WinCRT.1001FE50 # AND DWORD PTR DS:[EAX+4],0 # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100138d1 : # ADD BYTE PTR DS:[EAX],AL # MOV DWORD PTR DS:[ESI],WinCRT.1002158C # MOV EAX,ESI # POP ESI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1000637c : # ADD BYTE PTR DS:[EAX-2],DL # ADD DWORD PTR DS:[EAX],EDX # AND DWORD PTR DS:[EAX+4],0 # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100138d2 : # ADD BH,AL # PUSH ES # MOV WORD PTR DS:[C68B1002],SS # POP ESI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1001837d : # LES EDX,FWORD PTR DS:[EAX] # POP ESI # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x100014f0 : # MOV BYTE PTR DS:[EAX+2],DH # ADC BYTE PTR DS:[EBX+FFCE8B06],CL # NOP # MOV AH,0 # ADD BYTE PTR DS:[EAX],AL # XOR EAX,EAX # INC EAX # POP ESI # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100014f3 : # ADC BYTE PTR DS:[EBX+FFCE8B06],CL # NOP # MOV AH,0 # ADD BYTE PTR DS:[EAX],AL # XOR EAX,EAX # INC EAX # POP ESI # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1001237e : # ADD DL,BYTE PTR DS:[EAX] # ADD DWORD PTR DS:[EAX],EAX # ADD BYTE PTR DS:[EAX],AL # XOR EAX,EAX # POP ECX # POP EBX # POP EDI # POP ESI # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x100014f9 : # NOP # MOV AH,0 # ADD BYTE PTR DS:[EAX],AL # XOR EAX,EAX # INC EAX # POP ESI # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100014fa : # MOV AH,0 # ADD BYTE PTR DS:[EAX],AL # XOR EAX,EAX # INC EAX # POP ESI # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100014fc : # ADD BYTE PTR DS:[EAX],AL # XOR EAX,EAX # INC EAX # POP ESI # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000c8d5 : # MOV EAX,DWORD PTR DS:[ESI+28] # MOV ECX,DWORD PTR SS:[EBP+8] # MOV DWORD PTR DS:[EAX],ECX # ADD DWORD PTR DS:[ESI+28],4 # MOV EAX,ESI # POP ESI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10012380 : # ADD DWORD PTR DS:[EAX],EAX # ADD BYTE PTR DS:[EAX],AL # XOR EAX,EAX # POP ECX # POP EBX # POP EDI # POP ESI # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1001b504 : # ADD BYTE PTR DS:[ESI+5D],BL # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10007506 : # AND BYTE PTR DS:[EAX-1],DL # ADC EAX,<&USER32.CallWindowProcA> # POP ESI # POP EBP # RETN 0x0C ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10004381 : # PUSHAD # PUSH ES # ADD BYTE PTR DS:[EAX],AL # MOV EAX,ESI # POP ESI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000750c : # ADD DWORD PTR DS:[EAX],EDX # POP ESI # POP EBP # RETN 0x0C ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000750d : # ADC BYTE PTR DS:[ESI+5D],BL # RETN 0x0C ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000d510 : # AND DWORD PTR SS:[EBP-14],0 # MOV EAX,WinCRT.1000D51A # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10007511 : # OR AL,0 # LEA EAX,DWORD PTR DS:[ECX+40] # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000d513 : # ADD BYTE PTR DS:[EAX+1000D51A],BH # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000ae2e : # MOV EDI,DWORD PTR DS:[EDX] # ADD BYTE PTR DS:[EAX],AL # RETN 0x10 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000d517 : # ADD BYTE PTR DS:[EAX],DL # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1001d525 : # ADC BH,BH # DEC ECX # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1000d529 : # ADD EAX,89EC4D8B # OR AL,CH # MOV DWORD PTR DS:[EBX],EDX # ADD BYTE PTR DS:[EAX],AL # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000d52e : # OR AL,CH # MOV DWORD PTR DS:[EBX],EDX # ADD BYTE PTR DS:[EAX],AL # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10001530 : # ADC BYTE PTR DS:[EBX+48D1E8CE],CL # ADD BYTE PTR DS:[EAX],AL # POP ESI # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000d532 : # ADD BYTE PTR DS:[EAX],AL # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10001535 : # DEC EAX # ADD BYTE PTR DS:[EAX],AL # POP ESI # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10001536 : # ADD BYTE PTR DS:[EAX],AL # POP ESI # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1001953d : # MOV EAX,DWORD PTR SS:[EBP+8] # MOV EBX,DWORD PTR SS:[EBP-4] # MOV ESI,DWORD PTR SS:[EBP-8] # MOV EDI,DWORD PTR SS:[EBP-C] # MOV ESP,EBP # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1001953e : # INC EBP # OR BYTE PTR DS:[EBX+758BFC5D],CL # CLC # MOV EDI,DWORD PTR SS:[EBP-C] # MOV ESP,EBP # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1001953f : # OR BYTE PTR DS:[EBX+758BFC5D],CL # CLC # MOV EDI,DWORD PTR SS:[EBP-C] # MOV ESP,EBP # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10019540 : # MOV EBX,DWORD PTR SS:[EBP-4] # MOV ESI,DWORD PTR SS:[EBP-8] # MOV EDI,DWORD PTR SS:[EBP-C] # MOV ESP,EBP # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10019541 : # POP EBP # CLD # MOV ESI,DWORD PTR SS:[EBP-8] # MOV EDI,DWORD PTR SS:[EBP-C] # MOV ESP,EBP # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10011542 : # OR AL,5D # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x10019543 : # MOV ESI,DWORD PTR SS:[EBP-8] # MOV EDI,DWORD PTR SS:[EBP-C] # MOV ESP,EBP # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10019545 : # CLC # MOV EDI,DWORD PTR SS:[EBP-C] # MOV ESP,EBP # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10019546 : # MOV EDI,DWORD PTR SS:[EBP-C] # MOV ESP,EBP # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10015549 : # OR EAX,DWORD PTR DS:[EAX] # ADD BYTE PTR DS:[EBX+7F00087D],AL # AAD 5E # POP EBX # POP EBP # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x1001554b : # ADD BYTE PTR DS:[EBX+7F00087D],AL # AAD 5E # POP EBX # POP EBP # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x1000954f : # MOV AH,0FF # INC DWORD PTR SS:[EBP+C70774C0] # ADD BYTE PTR SS:[ESP+EAX+2],DL # ADC BL,AL # XOR EAX,EAX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10009551 : # INC DWORD PTR SS:[EBP+C70774C0] # ADD BYTE PTR SS:[ESP+EAX+2],DL # ADC BL,AL # XOR EAX,EAX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10009555 : # POP ES # MOV DWORD PTR DS:[EAX],WinCRT.10020454 # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10009556 : # MOV DWORD PTR DS:[EAX],WinCRT.10020454 # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10009557 : # ADD BYTE PTR SS:[ESP+EAX+2],DL # ADC BL,AL # XOR EAX,EAX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10009558 : # PUSH ESP # ADD AL,2 # ADC BL,AL # XOR EAX,EAX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10009559 : # ADD AL,2 # ADC BL,AL # XOR EAX,EAX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000955b : # ADC BL,AL # XOR EAX,EAX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10008391 : # ADD BYTE PTR DS:[EAX],AL # RETN 0x18 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000b569 : # ADD DWORD PTR DS:[EBX+450FFCE],ECX # MOV EAX,WinCRT.1000B4C8 # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1001d56d : # ADD DWORD PTR DS:[EAX-A],EAX # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x100048e8 : # ADD BYTE PTR DS:[ECX+84BE],CL # ADD BYTE PTR DS:[ECX+88BE],CL # ADD BYTE PTR DS:[EBX+9FC1E8C6],CL # ADD BYTE PTR DS:[EAX],AL # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000b572 : # ADD BYTE PTR DS:[EAX],DL # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1001d57e : # OR DH,DH # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1001d586 : # ADC DH,DH # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1000158c : # ADD BYTE PTR SS:[EBP+E80874C0],AL # POPAD # PUSH SS # ADD BYTE PTR DS:[EAX],AL # MOV ESI,DWORD PTR DS:[EAX+8] # MOV EAX,ESI # POP ESI # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1001d58e : # AND BH,DH # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10001590 : # OR AL,CH # POPAD # PUSH SS # ADD BYTE PTR DS:[EAX],AL # MOV ESI,DWORD PTR DS:[EAX+8] # MOV EAX,ESI # POP ESI # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10001592 : # POPAD # PUSH SS # ADD BYTE PTR DS:[EAX],AL # MOV ESI,DWORD PTR DS:[EAX+8] # MOV EAX,ESI # POP ESI # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10001593 : # PUSH SS # ADD BYTE PTR DS:[EAX],AL # MOV ESI,DWORD PTR DS:[EAX+8] # MOV EAX,ESI # POP ESI # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10001594 : # ADD BYTE PTR DS:[EAX],AL # MOV ESI,DWORD PTR DS:[EAX+8] # MOV EAX,ESI # POP ESI # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10001595 : # ADD BYTE PTR DS:[EBX+C68B0870],CL # POP ESI # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1001a7bf : # ADD CL,BYTE PTR DS:[EDI] # TEST BH,CL # ADD BYTE PTR DS:[EAX],AL # ADD BYTE PTR DS:[EBX],BH # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x100055a6 : # POP EDI # XOR EAX,EAX # CMP DWORD PTR DS:[EBX+10],EAX # POP ESI # SETNE AL # POP EBX # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100055a7 : # XOR EAX,EAX # CMP DWORD PTR DS:[EBX+10],EAX # POP ESI # SETNE AL # POP EBX # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000139c : # CMP EAX,-1 # SETNE CL # MOV DWORD PTR DS:[ESI],EAX # MOV AL,CL # POP ESI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100055ac : # POP ESI # SETNE AL # POP EBX # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100055ad : # SETNE AL # POP EBX # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100075bd : # ADD DWORD PTR DS:[EAX],EDX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1001b5c9 : # TEST AL,0F1 # ADD DWORD PTR DS:[EAX],EDX # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1001b5cb : # ADD DWORD PTR DS:[EAX],EDX # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x100013a3 : # PUSH ES # MOV AL,CL # POP ESI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100055d5 : # DEC EBP # OR BYTE PTR DS:[ECX+5DC03301],CL # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100055d6 : # OR BYTE PTR DS:[ECX+5DC03301],CL # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100013a4 : # MOV AL,CL # POP ESI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000b5e0 : # ADD BYTE PTR DS:[EAX],AL # RETN 0x08 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100058fc : # SUB BYTE PTR DS:[EBX],BH # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100055eb : # OR BYTE PTR DS:[EAX-18],DL # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1001d5ec : # ADD BYTE PTR SS:[EBP+EAX+D],DH # ADD BYTE PTR DS:[EAX],DL # ADD BYTE PTR DS:[EAX],AL # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1001d5f0 : # ADD BYTE PTR DS:[EAX],DL # ADD BYTE PTR DS:[EAX],AL # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1001d5f2 : # ADD BYTE PTR DS:[EAX],AL # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x100075f5 : # ADD BYTE PTR SS:[EBP+EBX+3B],DH # ADD ESI,DWORD PTR SS:[EBP+EAX-7D] # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100033ab : # XOR EAX,EAX # CMP DWORD PTR SS:[EBP+8],1 # POP EDI # POP ESI # SETL AL # POP EBX # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10003608 : # DEC DWORD PTR DS:[EBX+5D5E5FC7] # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1001d60b : # OR BYTE PTR DS:[EDX+EAX+B],DH # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x100033ad : # CMP DWORD PTR SS:[EBP+8],1 # POP EDI # POP ESI # SETL AL # POP EBX # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10007611 : # POP EBP # OR BL,CH # ADD EAX,4589C033 # OR BYTE PTR DS:[EBX+5D5B0845],CL # RETN 0x10 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10007612 : # OR BL,CH # ADD EAX,4589C033 # OR BYTE PTR DS:[EBX+5D5B0845],CL # RETN 0x10 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10007614 : # ADD EAX,4589C033 # OR BYTE PTR DS:[EBX+5D5B0845],CL # RETN 0x10 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10007615 : # XOR EAX,EAX # MOV DWORD PTR SS:[EBP+8],EAX # MOV EAX,DWORD PTR SS:[EBP+8] # POP EBX # POP EBP # RETN 0x10 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10007617 : # MOV DWORD PTR SS:[EBP+8],EAX # MOV EAX,DWORD PTR SS:[EBP+8] # POP EBX # POP EBP # RETN 0x10 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10011618 : # MOV DWORD PTR DS:[10027FBC],WinCRT.10018381 # MOV DWORD PTR DS:[10027FC0],WinCRT.100182EA # MOV DWORD PTR DS:[10027FC4],EAX # MOV DWORD PTR DS:[10027FC8],WinCRT.10018C25 # MOV DWORD PTR DS:[10027FCC],WinCRT.10018306 # MOV DWORD PTR DS:[10027FD0],WinCRT.10018268 # MOV DWORD PTR DS:[10027FD4],WinCRT.100181F5 # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x10007619 : # OR BYTE PTR DS:[EBX+5D5B0845],CL # RETN 0x10 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1001161a : # MOV ESP,8110027F # ADD DWORD PTR DS:[ECX],10 # MOV DWORD PTR DS:[10027FC0],WinCRT.100182EA # MOV DWORD PTR DS:[10027FC4],EAX # MOV DWORD PTR DS:[10027FC8],WinCRT.10018C25 # MOV DWORD PTR DS:[10027FCC],WinCRT.10018306 # MOV DWORD PTR DS:[10027FD0],WinCRT.10018268 # MOV DWORD PTR DS:[10027FD4],WinCRT.100181F5 # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x1000761b : # INC EBP # OR BYTE PTR DS:[EBX+5D],BL # RETN 0x10 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000761c : # OR BYTE PTR DS:[EBX+5D],BL # RETN 0x10 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1001161f : # ADD DWORD PTR DS:[ECX],10 # MOV DWORD PTR DS:[10027FC0],WinCRT.100182EA # MOV DWORD PTR DS:[10027FC4],EAX # MOV DWORD PTR DS:[10027FC8],WinCRT.10018C25 # MOV DWORD PTR DS:[10027FCC],WinCRT.10018306 # MOV DWORD PTR DS:[10027FD0],WinCRT.10018268 # MOV DWORD PTR DS:[10027FD4],WinCRT.100181F5 # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x10011620 : # ADD DWORD PTR DS:[EAX],EDX # MOV DWORD PTR DS:[10027FC0],WinCRT.100182EA # MOV DWORD PTR DS:[10027FC4],EAX # MOV DWORD PTR DS:[10027FC8],WinCRT.10018C25 # MOV DWORD PTR DS:[10027FCC],WinCRT.10018306 # MOV DWORD PTR DS:[10027FD0],WinCRT.10018268 # MOV DWORD PTR DS:[10027FD4],WinCRT.100181F5 # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x10011622 : # MOV DWORD PTR DS:[10027FC0],WinCRT.100182EA # MOV DWORD PTR DS:[10027FC4],EAX # MOV DWORD PTR DS:[10027FC8],WinCRT.10018C25 # MOV DWORD PTR DS:[10027FCC],WinCRT.10018306 # MOV DWORD PTR DS:[10027FD0],WinCRT.10018268 # MOV DWORD PTR DS:[10027FD4],WinCRT.100181F5 # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x10001625 : # OR DL,BYTE PTR DS:[ESI+6A] # ADC BYTE PTR DS:[EBX+FF078BCF],CL # PUSH EAX # ADC AL,8B # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10011627 : # ADC DL,CH # ADD BYTE PTR DS:[ECX],10 # MOV DWORD PTR DS:[10027FC4],EAX # MOV DWORD PTR DS:[10027FC8],WinCRT.10018C25 # MOV DWORD PTR DS:[10027FCC],WinCRT.10018306 # MOV DWORD PTR DS:[10027FD0],WinCRT.10018268 # MOV DWORD PTR DS:[10027FD4],WinCRT.100181F5 # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x10001628 : # ADC BYTE PTR DS:[EBX+FF078BCF],CL # PUSH EAX # ADC AL,8B # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10011629 : # ADD BYTE PTR DS:[ECX],10 # MOV DWORD PTR DS:[10027FC4],EAX # MOV DWORD PTR DS:[10027FC8],WinCRT.10018C25 # MOV DWORD PTR DS:[10027FCC],WinCRT.10018306 # MOV DWORD PTR DS:[10027FD0],WinCRT.10018268 # MOV DWORD PTR DS:[10027FD4],WinCRT.100181F5 # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x1001162a : # ADD DWORD PTR DS:[EAX],EDX # MOV DWORD PTR DS:[10027FC4],EAX # MOV DWORD PTR DS:[10027FC8],WinCRT.10018C25 # MOV DWORD PTR DS:[10027FCC],WinCRT.10018306 # MOV DWORD PTR DS:[10027FD0],WinCRT.10018268 # MOV DWORD PTR DS:[10027FD4],WinCRT.100181F5 # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x1001162b : # ADC BYTE PTR DS:[EBX+10027FC4],AH # MOV DWORD PTR DS:[10027FC8],WinCRT.10018C25 # MOV DWORD PTR DS:[10027FCC],WinCRT.10018306 # MOV DWORD PTR DS:[10027FD0],WinCRT.10018268 # MOV DWORD PTR DS:[10027FD4],WinCRT.100181F5 # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x1001162c : # MOV DWORD PTR DS:[10027FC4],EAX # MOV DWORD PTR DS:[10027FC8],WinCRT.10018C25 # MOV DWORD PTR DS:[10027FCC],WinCRT.10018306 # MOV DWORD PTR DS:[10027FD0],WinCRT.10018268 # MOV DWORD PTR DS:[10027FD4],WinCRT.100181F5 # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x1001162d : # LES EDI,FWORD PTR DS:[EDI+2] # ADC BH,AL # ADD EAX,WinCRT.10027FC8 # AND EAX,C710018C # ADD EAX,WinCRT.10027FCC # PUSH ES # ADD DWORD PTR DS:[ECX],10 # MOV DWORD PTR DS:[10027FD0],WinCRT.10018268 # MOV DWORD PTR DS:[10027FD4],WinCRT.100181F5 # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x1000162e : # PUSH EAX # ADC AL,8B # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1001162f : # ADD DL,BYTE PTR DS:[EAX] # MOV DWORD PTR DS:[10027FC8],WinCRT.10018C25 # MOV DWORD PTR DS:[10027FCC],WinCRT.10018306 # MOV DWORD PTR DS:[10027FD0],WinCRT.10018268 # MOV DWORD PTR DS:[10027FD4],WinCRT.100181F5 # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x10011630 : # ADC BH,AL # ADD EAX,WinCRT.10027FC8 # AND EAX,C710018C # ADD EAX,WinCRT.10027FCC # PUSH ES # ADD DWORD PTR DS:[ECX],10 # MOV DWORD PTR DS:[10027FD0],WinCRT.10018268 # MOV DWORD PTR DS:[10027FD4],WinCRT.100181F5 # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x10011631 : # MOV DWORD PTR DS:[10027FC8],WinCRT.10018C25 # MOV DWORD PTR DS:[10027FCC],WinCRT.10018306 # MOV DWORD PTR DS:[10027FD0],WinCRT.10018268 # MOV DWORD PTR DS:[10027FD4],WinCRT.100181F5 # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x10011632 : # ADD EAX,WinCRT.10027FC8 # AND EAX,C710018C # ADD EAX,WinCRT.10027FCC # PUSH ES # ADD DWORD PTR DS:[ECX],10 # MOV DWORD PTR DS:[10027FD0],WinCRT.10018268 # MOV DWORD PTR DS:[10027FD4],WinCRT.100181F5 # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x10011635 : # ADD DL,BYTE PTR DS:[EAX] # AND EAX,C710018C # ADD EAX,WinCRT.10027FCC # PUSH ES # ADD DWORD PTR DS:[ECX],10 # MOV DWORD PTR DS:[10027FD0],WinCRT.10018268 # MOV DWORD PTR DS:[10027FD4],WinCRT.100181F5 # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x10011636 : # ADC BYTE PTR DS:[C710018C],AH # ADD EAX,WinCRT.10027FCC # PUSH ES # ADD DWORD PTR DS:[ECX],10 # MOV DWORD PTR DS:[10027FD0],WinCRT.10018268 # MOV DWORD PTR DS:[10027FD4],WinCRT.100181F5 # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x10011637 : # AND EAX,C710018C # ADD EAX,WinCRT.10027FCC # PUSH ES # ADD DWORD PTR DS:[ECX],10 # MOV DWORD PTR DS:[10027FD0],WinCRT.10018268 # MOV DWORD PTR DS:[10027FD4],WinCRT.100181F5 # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x10011638 : # MOV WORD PTR DS:[ECX],ES # ADC BH,AL # ADD EAX,WinCRT.10027FCC # PUSH ES # ADD DWORD PTR DS:[ECX],10 # MOV DWORD PTR DS:[10027FD0],WinCRT.10018268 # MOV DWORD PTR DS:[10027FD4],WinCRT.100181F5 # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x10011639 : # ADD DWORD PTR DS:[EAX],EDX # MOV DWORD PTR DS:[10027FCC],WinCRT.10018306 # MOV DWORD PTR DS:[10027FD0],WinCRT.10018268 # MOV DWORD PTR DS:[10027FD4],WinCRT.100181F5 # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x1001163a : # ADC BH,AL # ADD EAX,WinCRT.10027FCC # PUSH ES # ADD DWORD PTR DS:[ECX],10 # MOV DWORD PTR DS:[10027FD0],WinCRT.10018268 # MOV DWORD PTR DS:[10027FD4],WinCRT.100181F5 # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x1001163b : # MOV DWORD PTR DS:[10027FCC],WinCRT.10018306 # MOV DWORD PTR DS:[10027FD0],WinCRT.10018268 # MOV DWORD PTR DS:[10027FD4],WinCRT.100181F5 # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x1001163c : # ADD EAX,WinCRT.10027FCC # PUSH ES # ADD DWORD PTR DS:[ECX],10 # MOV DWORD PTR DS:[10027FD0],WinCRT.10018268 # MOV DWORD PTR DS:[10027FD4],WinCRT.100181F5 # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x1001490a : # CMP WORD PTR DS:[EAX+18],CX # SETE DL # MOV EAX,EDX # POP EBP # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x1000563e : # DAS # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1001163f : # ADD DL,BYTE PTR DS:[EAX] # PUSH ES # ADD DWORD PTR DS:[ECX],10 # MOV DWORD PTR DS:[10027FD0],WinCRT.10018268 # MOV DWORD PTR DS:[10027FD4],WinCRT.100181F5 # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x10011640 : # ADC BYTE PTR DS:[ESI],AL # ADD DWORD PTR DS:[ECX],10 # MOV DWORD PTR DS:[10027FD0],WinCRT.10018268 # MOV DWORD PTR DS:[10027FD4],WinCRT.100181F5 # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x10011641 : # PUSH ES # ADD DWORD PTR DS:[ECX],10 # MOV DWORD PTR DS:[10027FD0],WinCRT.10018268 # MOV DWORD PTR DS:[10027FD4],WinCRT.100181F5 # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x10011642 : # ADD DWORD PTR DS:[ECX],10 # MOV DWORD PTR DS:[10027FD0],WinCRT.10018268 # MOV DWORD PTR DS:[10027FD4],WinCRT.100181F5 # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x1001490b : # CMP DWORD PTR DS:[EAX+18],ECX # SETE DL # MOV EAX,EDX # POP EBP # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x10011645 : # MOV DWORD PTR DS:[10027FD0],WinCRT.10018268 # MOV DWORD PTR DS:[10027FD4],WinCRT.100181F5 # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x1001164a : # ADC BYTE PTR DS:[EAX-7E],CH # ADD DWORD PTR DS:[EAX],EDX # MOV DWORD PTR DS:[10027FD4],WinCRT.100181F5 # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x1001164c : # ADD BYTE PTR DS:[ECX],10 # MOV DWORD PTR DS:[10027FD4],WinCRT.100181F5 # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x1001164d : # ADD DWORD PTR DS:[EAX],EDX # MOV DWORD PTR DS:[10027FD4],WinCRT.100181F5 # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x1001164f : # MOV DWORD PTR DS:[10027FD4],WinCRT.100181F5 # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x1001490e : # SETE DL # MOV EAX,EDX # POP EBP # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x10011657 : # ADD DWORD PTR DS:[EAX],EDX # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x10005658 : # XCHG EAX,ESI # ADD BYTE PTR DS:[EAX],AL # ADD ESP,10 # POP EDI # MOV EAX,ESI # POP ESI # POP EBP # RETN 0x0C ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10005659 : # ADD BYTE PTR DS:[EAX],AL # ADD ESP,10 # POP EDI # MOV EAX,ESI # POP ESI # POP EBP # RETN 0x0C ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000565c : # LES EDX,FWORD PTR DS:[EAX] # POP EDI # MOV EAX,ESI # POP ESI # POP EBP # RETN 0x0C ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10003663 : # ADD BYTE PTR DS:[EAX],AL # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000d671 : # ADD BYTE PTR DS:[EAX],AL # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10007672 : # MOV DWORD PTR DS:[ESI],WinCRT.1002045C # MOV DWORD PTR DS:[ESI+28],1 # MOV EAX,ESI # POP ESI # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10007676 : # ADD DL,BYTE PTR DS:[EAX] # MOV DWORD PTR DS:[ESI+28],1 # MOV EAX,ESI # POP ESI # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10011677 : # ADD BYTE PTR DS:[EAX],AL # FCLEX # POP EBP # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x10007678 : # MOV DWORD PTR DS:[ESI+28],1 # MOV EAX,ESI # POP ESI # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10011679 : # FCLEX # POP EBP # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x1000b67a : # INC DWORD PTR DS:[EBX+775E06FE] # OR BYTE PTR SS:[EBP+5D0475C0],AL # RETN 0x10 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000767b : # ADD DWORD PTR DS:[EAX],EAX # ADD BYTE PTR DS:[EAX],AL # MOV EAX,ESI # POP ESI # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000767d : # ADD BYTE PTR DS:[EAX],AL # MOV EAX,ESI # POP ESI # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000b680 : # OR BYTE PTR SS:[EBP+5D0475C0],AL # RETN 0x10 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10007683 : # MOV EDI,EDI # PUSH EBP # MOV EBP,ESP # MOV EAX,DWORD PTR SS:[EBP+8] # MOV DWORD PTR DS:[ECX+28],EAX # MOV DWORD PTR DS:[ECX+18],1 # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1001d684 : # PREFETCH QWORD PTR DS:[EAX] # ADD BYTE PTR DS:[EAX],0 # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10007685 : # PUSH EBP # MOV EBP,ESP # MOV EAX,DWORD PTR SS:[EBP+8] # MOV DWORD PTR DS:[ECX+28],EAX # MOV DWORD PTR DS:[ECX+18],1 # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10007686 : # MOV EBP,ESP # MOV EAX,DWORD PTR SS:[EBP+8] # MOV DWORD PTR DS:[ECX+28],EAX # MOV DWORD PTR DS:[ECX+18],1 # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1001d687 : # ADD BYTE PTR DS:[EAX],0 # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1001d688 : # ADD BYTE PTR DS:[EAX],AL # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1000768b : # MOV DWORD PTR DS:[ECX+28],EAX # MOV DWORD PTR DS:[ECX+18],1 # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000768e : # MOV DWORD PTR DS:[ECX+18],1 # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1001d690 : # INC EAX # ADD BYTE PTR DS:[EAX],0 # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1001d691 : # ADD BYTE PTR DS:[EAX],0 # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1001d692 : # ADD BYTE PTR DS:[EAX],AL # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10007693 : # ADD BYTE PTR DS:[EAX],AL # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10011697 : # SUB AL,4 # AND AL,0C9 # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10001698 : # ADD BYTE PTR DS:[EAX],AL # XOR EAX,EAX # CMP EBX,1 # POP ESI # SETL AL # POP EBX # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10011699 : # AND AL,0C9 # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1000169a : # XOR EAX,EAX # CMP EBX,1 # POP ESI # SETL AL # POP EBX # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000169c : # CMP EBX,1 # POP ESI # SETL AL # POP EBX # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000169f : # POP ESI # SETL AL # POP EBX # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100016a0 : # SETL AL # POP EBX # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1001d6ab : # ADD DWORD PTR DS:[EBX+EAX+6A],ESI # ADC BYTE PTR DS:[EDX-A],BL # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1001d6af : # ADC BYTE PTR DS:[EDX-A],BL # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x100036b8 : # ADD BYTE PTR DS:[EAX],AL # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000c91f : # MOV ECX,DWORD PTR SS:[EBP+8] # MOV WORD PTR DS:[ECX],AX # ADD DWORD PTR DS:[ESI+28],2 # MOV EAX,ESI # POP ESI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100076be : # OR BH,BH # ADC EAX,<&USER32.AdjustWindowRectEx> # POP ESI # POP EBP # RETN 0x08 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10001920 : # MOV ECX,DWORD PTR DS:[ECX] # MOV BYTE PTR DS:[EAX+ECX],0 # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100076c3 : # ADD DWORD PTR DS:[EAX],EDX # POP ESI # POP EBP # RETN 0x08 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100076c4 : # ADC BYTE PTR DS:[ESI+5D],BL # RETN 0x08 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100096c7 : # XCHG EAX,ESI # ADD BYTE PTR DS:[EAX],DL # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100096c8 : # ADD BYTE PTR DS:[EAX],DL # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100076c9 : # ADD BYTE PTR DS:[EAX+1001FFF8],BH # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100076cd : # ADD DWORD PTR DS:[EAX],EDX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100096d9 : # MOV ESP,DCE8A5F3 # PUSH ECX # ADD BYTE PTR DS:[EAX],AL # RETN 0x14 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100096de : # PUSH ECX # ADD BYTE PTR DS:[EAX],AL # RETN 0x14 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100096df : # ADD BYTE PTR DS:[EAX],AL # RETN 0x14 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100196e3 : # OR AL,CH # MOV EDI,5900001E # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x100176e4 : # POP ECX # MOV DWORD PTR DS:[1002CA0C],1 # XOR EAX,EAX # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x100176e5 : # MOV DWORD PTR DS:[1002CA0C],1 # XOR EAX,EAX # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x100176e6 : # ADD EAX,WinCRT.1002CA0C # ADD DWORD PTR DS:[EAX],EAX # ADD BYTE PTR DS:[EAX],AL # XOR EAX,EAX # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x100176e7 : # OR AL,0CA # ADD DL,BYTE PTR DS:[EAX] # ADD DWORD PTR DS:[EAX],EAX # ADD BYTE PTR DS:[EAX],AL # XOR EAX,EAX # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x100176e9 : # ADD DL,BYTE PTR DS:[EAX] # ADD DWORD PTR DS:[EAX],EAX # ADD BYTE PTR DS:[EAX],AL # XOR EAX,EAX # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1000770a : # OR BYTE PTR DS:[EAX],AL # MOV EAX,80004001 # RETN 0x10 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100176eb : # ADD DWORD PTR DS:[EAX],EAX # ADD BYTE PTR DS:[EAX],AL # XOR EAX,EAX # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x100176ed : # ADD BYTE PTR DS:[EAX],AL # XOR EAX,EAX # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1000db34 : # ADD BYTE PTR DS:[EAX],AL # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100076fa : # ADD EAX,DWORD PTR DS:[EAX] # SUB BL,8 # MOV DWORD PTR DS:[EAX],1 # XOR EAX,EAX # POP EBP # RETN 0x08 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100076fb : # INC EAX # ADD BYTE PTR DS:[EAX+C708EB],AL # ADD DWORD PTR DS:[EAX],EAX # ADD BYTE PTR DS:[EAX],AL # XOR EAX,EAX # POP EBP # RETN 0x08 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100076fc : # ADD BYTE PTR DS:[EAX+C708EB],AL # ADD DWORD PTR DS:[EAX],EAX # ADD BYTE PTR DS:[EAX],AL # XOR EAX,EAX # POP EBP # RETN 0x08 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100076fd : # SUB BL,8 # MOV DWORD PTR DS:[EAX],1 # XOR EAX,EAX # POP EBP # RETN 0x08 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10007700 : # MOV DWORD PTR DS:[EAX],1 # XOR EAX,EAX # POP EBP # RETN 0x08 ** [WinCRT.dll] ** | null,unicodereverse,ascii {PAGE_EXECUTE_READ}
0x10007702 : # ADD DWORD PTR DS:[EAX],EAX # ADD BYTE PTR DS:[EAX],AL # XOR EAX,EAX # POP EBP # RETN 0x08 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10007704 : # ADD BYTE PTR DS:[EAX],AL # XOR EAX,EAX # POP EBP # RETN 0x08 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000770b : # ADD BYTE PTR DS:[EAX+80004001],BH # RETN 0x10 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1001770a : # NOP # MOV AL,BYTE PTR DS:[EDX] # ADC BYTE PTR DS:[EAX+EBP*2-75],DH # XCHG BYTE PTR DS:[EAX+3B000000],DH # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x1001770b : # MOV AL,BYTE PTR DS:[EDX] # ADC BYTE PTR DS:[EAX+EBP*2-75],DH # XCHG BYTE PTR DS:[EAX+3B000000],DH # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x1001770d : # ADC BYTE PTR DS:[EAX+EBP*2-75],DH # XCHG BYTE PTR DS:[EAX+3B000000],DH # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x10017711 : # XCHG BYTE PTR DS:[EAX+3B000000],DH # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x10017713 : # ADD BYTE PTR DS:[EAX],AL # ADD BYTE PTR DS:[EBX],BH # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x10017715 : # ADD BYTE PTR DS:[EBX],BH # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x1000d716 : # MOV ECX,DWORD PTR DS:[ESI+34] # MOV DWORD PTR DS:[EAX],ECX # INC DWORD PTR DS:[ESI+34] # POP EDI # POP ESI # POP EBX # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000d717 : # DEC ESI # XOR AL,89 # OR BH,BH # INC ESI # XOR AL,5F # POP ESI # POP EBX # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000d718 : # XOR AL,89 # OR BH,BH # INC ESI # XOR AL,5F # POP ESI # POP EBX # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000d719 : # MOV DWORD PTR DS:[EAX],ECX # INC DWORD PTR DS:[ESI+34] # POP EDI # POP ESI # POP EBX # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000d71a : # OR BH,BH # INC ESI # XOR AL,5F # POP ESI # POP EBX # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000d71b : # INC DWORD PTR DS:[ESI+34] # POP EDI # POP ESI # POP EBX # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1001a056 : # ADC BYTE PTR DS:[ESI+ECX*8+5F],BH # XOR EAX,EAX # POP ESI # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1000d71d : # XOR AL,5F # POP ESI # POP EBX # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1001771f : # XCHG BYTE PTR DS:[EAX+3B000000],BH # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x10017721 : # ADD BYTE PTR DS:[EAX],AL # ADD BYTE PTR DS:[EBX],BH # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x10007722 : # INC EAX # ADD BYTE PTR DS:[EAX+208308EB],AL # ADD BYTE PTR DS:[EAX+80004001],BH # POP EBP # RETN 0x08 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10017723 : # ADD BYTE PTR DS:[EBX],BH # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x10007724 : # SUB BL,8 # AND DWORD PTR DS:[EAX],0 # MOV EAX,80004001 # POP EBP # RETN 0x08 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10007727 : # AND DWORD PTR DS:[EAX],0 # MOV EAX,80004001 # POP EBP # RETN 0x08 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10007728 : # AND BYTE PTR DS:[EAX],AL # MOV EAX,80004001 # POP EBP # RETN 0x08 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10007729 : # ADD BYTE PTR DS:[EAX+80004001],BH # POP EBP # RETN 0x08 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1001d72a : # ADD BYTE PTR DS:[EDX],AL # ADD BH,DH # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1000972b : # ADC BYTE PTR DS:[ESI+5D],BL # RETN 0x10 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10005736 : # DEC DWORD PTR DS:[EBX+917FE8C6] # ADD BYTE PTR DS:[EAX],AL # RETN 0x08 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000573b : # XCHG EAX,ECX # ADD BYTE PTR DS:[EAX],AL # RETN 0x08 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000573c : # ADD BYTE PTR DS:[EAX],AL # RETN 0x08 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10011740 : # MOV EAX,DWORD PTR SS:[ESP+4] # MUL ECX # RETN 0x10 ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x10011741 : # INC ESP # AND AL,4 # MUL ECX # RETN 0x10 ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x10017742 : # ADD BYTE PTR DS:[EAX],AL # ADD BYTE PTR DS:[EBX],BH # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x10008e8b : # ADD DWORD PTR DS:[EAX],EDX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10017744 : # ADD BYTE PTR DS:[EBX],BH # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x10001747 : # ADD BYTE PTR DS:[EAX+1001F558],BH # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10001749 : # POP EAX # CMC # ADD DWORD PTR DS:[EAX],EDX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000174a : # CMC # ADD DWORD PTR DS:[EAX],EDX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000174b : # ADD DWORD PTR DS:[EAX],EDX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000b74c : # DEC DWORD PTR DS:[EBX+3169E8C7] # ADD BYTE PTR DS:[EAX],AL # RETN 0x0C ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1001174e : # MOV EAX,DWORD PTR SS:[ESP+8] # MUL DWORD PTR SS:[ESP+14] # ADD EBX,EAX # MOV EAX,DWORD PTR SS:[ESP+8] # MUL ECX # ADD EDX,EBX # POP EBX # RETN 0x10 ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x1001174f : # INC ESP # AND AL,8 # MUL DWORD PTR SS:[ESP+14] # ADD EBX,EAX # MOV EAX,DWORD PTR SS:[ESP+8] # MUL ECX # ADD EDX,EBX # POP EBX # RETN 0x10 ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x1000b750 : # IMUL ESI,DWORD PTR DS:[ECX],0CC20000 # ADD BYTE PTR DS:[EAX+10020618],BH # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000b751 : # XOR DWORD PTR DS:[EAX],EAX # ADD DL,AL # OR AL,0 # MOV EAX,WinCRT.10020618 # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000b752 : # ADD BYTE PTR DS:[EAX],AL # RETN 0x0C ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000b753 : # ADD DL,AL # OR AL,0 # MOV EAX,WinCRT.10020618 # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10011754 : # AND AL,14 # ADD EBX,EAX # MOV EAX,DWORD PTR SS:[ESP+8] # MUL ECX # ADD EDX,EBX # POP EBX # RETN 0x10 ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x1000b755 : # OR AL,0 # MOV EAX,WinCRT.10020618 # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000b756 : # ADD BYTE PTR DS:[EAX+10020618],BH # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10011758 : # MOV EAX,DWORD PTR SS:[ESP+8] # MUL ECX # ADD EDX,EBX # POP EBX # RETN 0x10 ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x10011759 : # INC ESP # AND AL,8 # MUL ECX # ADD EDX,EBX # POP EBX # RETN 0x10 ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x1001175a : # AND AL,8 # MUL ECX # ADD EDX,EBX # POP EBX # RETN 0x10 ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x1001175c : # MUL ECX # ADD EDX,EBX # POP EBX # RETN 0x10 ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x1001d771 : # ADD DWORD PTR DS:[EBX+EAX+6A],ESI # ADC BYTE PTR DS:[EDX-A],BL # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1000b775 : # ADC AL,CH # WAIT # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000b777 : # WAIT # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10017779 : # XCHG AL,AL # ADD BYTE PTR DS:[EAX],AL # ADD BYTE PTR DS:[EBX],BH # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x1001777b : # ADD BYTE PTR DS:[EAX],AL # ADD BYTE PTR DS:[EBX],BH # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x1001777d : # ADD BYTE PTR DS:[EBX],BH # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x1001d77e : # OR DH,DH # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10013783 : # CLC # CMP AL,76 # CMP BYTE PTR DS:[ESI-18],DL # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10013784 : # CMP AL,76 # CMP BYTE PTR DS:[ESI-18],DL # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10013786 : # CMP BYTE PTR DS:[ESI-18],DL # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1001b78c : # MOV EAX,DWORD PTR DS:[ESI+8] # AND DWORD PTR DS:[ESI+4],0 # MOV DWORD PTR DS:[ESI],EAX # POP ESI # MOV EAX,EBX # POP EBX # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1001b78d : # INC ESI # OR BYTE PTR DS:[EBX+89000466],AL # PUSH ES # POP ESI # MOV EAX,EBX # POP EBX # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1001b78e : # OR BYTE PTR DS:[EBX+89000466],AL # PUSH ES # POP ESI # MOV EAX,EBX # POP EBX # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1001b78f : # AND DWORD PTR DS:[ESI+4],0 # MOV DWORD PTR DS:[ESI],EAX # POP ESI # MOV EAX,EBX # POP EBX # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1001b792 : # ADD BYTE PTR DS:[ECX+C38B5E06],CL # POP EBX # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10007799 : # PUSH ECX # AND AL,5F # POP ESI # POP EBP # RETN 0x14 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000779a : # AND AL,5F # POP ESI # POP EBP # RETN 0x14 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1001d945 : # ADD BYTE PTR SS:[ESP+ECX+3B],DH # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x100017a1 : # INC ESP # ADD BYTE PTR DS:[EAX],AL # POP EBP # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100097a2 : # PUSH ECX # ADD BYTE PTR DS:[EAX],AL # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100097a3 : # ADD BYTE PTR DS:[EAX],AL # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000c91d : # MOV EAX,DWORD PTR DS:[EAX] # MOV ECX,DWORD PTR SS:[EBP+8] # MOV WORD PTR DS:[ECX],AX # ADD DWORD PTR DS:[ESI+28],2 # MOV EAX,ESI # POP ESI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100077be : # PUSH ECX # SUB BYTE PTR DS:[EDI+5E],BL # POP EBP # RETN 0x14 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100077bf : # SUB BYTE PTR DS:[EDI+5E],BL # POP EBP # RETN 0x14 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000bea3 : # STI # PUSH CS # ADD BYTE PTR DS:[EAX],AL # AND DWORD PTR DS:[ESI+14],0 # POP ESI # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000b7d4 : # ADD BYTE PTR DS:[EAX],AL # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10007ea4 : # DEC EBP # OR AL,CH # TEST AL,3C # ADD BYTE PTR DS:[EAX],AL # MOV ECX,DWORD PTR SS:[EBP+10] # MOV DWORD PTR DS:[ECX],EAX # POP EBP # RETN 0x0C ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000bea5 : # ADD BYTE PTR DS:[EAX],AL # AND DWORD PTR DS:[ESI+14],0 # POP ESI # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10007ea7 : # TEST AL,3C # ADD BYTE PTR DS:[EAX],AL # MOV ECX,DWORD PTR SS:[EBP+10] # MOV DWORD PTR DS:[ECX],EAX # POP EBP # RETN 0x0C ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1001d7ee : # ADD BYTE PTR DS:[EDX],AL # ADD BH,DH # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10007ea8 : # CMP AL,0 # ADD BYTE PTR DS:[EBX+189104D],CL # POP EBP # RETN 0x0C ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100017f4 : # PUSH CS # ADD BYTE PTR DS:[EDI],AL # SUB BL,0ED # POP EBP # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100017f5 : # ADD BYTE PTR DS:[EDI],AL # SUB BL,0ED # POP EBP # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10007ea9 : # ADD BYTE PTR DS:[EAX],AL # MOV ECX,DWORD PTR SS:[EBP+10] # MOV DWORD PTR DS:[ECX],EAX # POP EBP # RETN 0x0C ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100037fc : # DEC DWORD PTR DS:[EBX+FFFEE08D] # DEC DWORD PTR DS:[EBX+FF73BF0] # XCHG EAX,EBP # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10003802 : # DEC DWORD PTR DS:[EBX+FF73BF0] # XCHG EAX,EBP # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10007808 : # PUSH ECX # XOR BYTE PTR DS:[EDI+5E],BL # POP EBP # RETN 0x14 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10007809 : # XOR BYTE PTR DS:[EDI+5E],BL # POP EBP # RETN 0x14 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10011810 : # FADD DWORD PTR DS:[EBX+5E5B00DA] # POP EDI # RETN 0x10 ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x10011812 : # FIADD DWORD PTR DS:[EAX] # POP EBX # POP ESI # POP EDI # RETN 0x10 ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x1001b403 : # ADD BYTE PTR DS:[ECX+59],BL # XOR EAX,EAX # POP ESI # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10002a5b : # XCHG EAX,ESI # CMP AL,0 # ADD BYTE PTR DS:[ESI+5D],BL # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10001816 : # LES EDX,FWORD PTR DS:[EAX] # POP EBP # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10002a5c : # CMP AL,0 # ADD BYTE PTR DS:[ESI+5D],BL # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000382a : # DEC DWORD PTR DS:[EAX] # ADD BYTE PTR DS:[EAX],AL # ADD AL,CH # INC EBP # AND EAX,DWORD PTR DS:[EAX] # ADD BYTE PTR DS:[EAX+1000383A],BH # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000382c : # ADD BYTE PTR DS:[EAX],AL # ADD AL,CH # INC EBP # AND EAX,DWORD PTR DS:[EAX] # ADD BYTE PTR DS:[EAX+1000383A],BH # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000782d : # PUSH ECX # XOR AL,5F # POP ESI # POP EBP # RETN 0x14 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000382e : # ADD AL,CH # INC EBP # AND EAX,DWORD PTR DS:[EAX] # ADD BYTE PTR DS:[EAX+1000383A],BH # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10003830 : # INC EBP # AND EAX,DWORD PTR DS:[EAX] # ADD BYTE PTR DS:[EAX+1000383A],BH # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10003831 : # AND EAX,DWORD PTR DS:[EAX] # ADD BYTE PTR DS:[EAX+1000383A],BH # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10003832 : # ADD BYTE PTR DS:[EAX],AL # MOV EAX,WinCRT.1000383A # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10003833 : # ADD BYTE PTR DS:[EAX+1000383A],BH # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10003835 : # CMP BH,BYTE PTR DS:[EAX] # ADD BYTE PTR DS:[EAX],DL # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10003837 : # ADD BYTE PTR DS:[EAX],DL # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10007852 : # PUSH ECX # CMP BYTE PTR DS:[EDI+5E],BL # POP EBP # RETN 0x14 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10007853 : # CMP BYTE PTR DS:[EDI+5E],BL # POP EBP # RETN 0x14 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000d098 : # OR BYTE PTR DS:[ECX+5E890C46],CL # ADD AL,5F # POP ESI # POP EBX # POP EBP # RETN 0x08 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10008965 : # PUSH ESP # POP EDI # ADD BYTE PTR DS:[EAX],AL # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000c966 : # ADD BYTE PTR DS:[EBX+189084D],CL # ADD DWORD PTR DS:[ESI+28],4 # MOV EAX,ESI # POP ESI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000c967 : # MOV ECX,DWORD PTR SS:[EBP+8] # MOV DWORD PTR DS:[ECX],EAX # ADD DWORD PTR DS:[ESI+28],4 # MOV EAX,ESI # POP ESI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10007877 : # PUSH ECX # CMP AL,5F # POP ESI # POP EBP # RETN 0x14 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10007878 : # CMP AL,5F # POP ESI # POP EBP # RETN 0x14 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000387d : # DEC DWORD PTR DS:[EBX+B05BE8C6] # ADD BYTE PTR DS:[EAX],AL # RETN 0x08 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10003883 : # ADD BYTE PTR DS:[EAX],AL # RETN 0x08 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10005ec1 : # ADD BYTE PTR DS:[EBX+EC8B55FF],CL # MOV EAX,DWORD PTR SS:[EBP+8] # MOV DWORD PTR DS:[ECX+4],EAX # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1001388b : # MOV EDI,EDI # PUSH EBP # MOV EBP,ESP # MOV EAX,DWORD PTR SS:[EBP+8] # MOV DWORD PTR DS:[1002B394],EAX # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1001388d : # PUSH EBP # MOV EBP,ESP # MOV EAX,DWORD PTR SS:[EBP+8] # MOV DWORD PTR DS:[1002B394],EAX # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1001388e : # MOV EBP,ESP # MOV EAX,DWORD PTR SS:[EBP+8] # MOV DWORD PTR DS:[1002B394],EAX # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10013890 : # MOV EAX,DWORD PTR SS:[EBP+8] # MOV DWORD PTR DS:[1002B394],EAX # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10001891 : # ADC BYTE PTR SS:[EBP+5D0275C0],AL # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10005892 : # ADD BYTE PTR DS:[EAX],AL # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10013893 : # MOV DWORD PTR DS:[1002B394],EAX # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x100018a6 : # OR AL,5D # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100098a7 : # ADD BYTE PTR SS:[EBP+4],DH # XOR EAX,EAX # POP ESI # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100118a9 : # SUB DWORD PTR DS:[EDX],EDX # ADD BYTE PTR DS:[EAX],AL # POP ECX # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x100058ab : # OR AL,8B # INC EAX # CMP AL,3B # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100058ad : # INC EAX # CMP AL,3B # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100058ae : # CMP AL,3B # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10001ec8 : # ADD BYTE PTR DS:[EAX],AL # RETN 0x08 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100018ca : # XOR BYTE PTR DS:[EAX],AL # ADD BYTE PTR DS:[EBX+4889084D],CL # OR AL,5D # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100018cb : # ADD BYTE PTR DS:[EAX],AL # MOV ECX,DWORD PTR SS:[EBP+8] # MOV DWORD PTR DS:[EAX+C],ECX # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100018cc : # ADD BYTE PTR DS:[EBX+4889084D],CL # OR AL,5D # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100138cf : # AND DWORD PTR DS:[EAX],EBX # ADD BH,AL # PUSH ES # MOV WORD PTR DS:[C68B1002],SS # POP ESI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x100138d0 : # POP EAX # ADD BYTE PTR DS:[EAX],AL # MOV DWORD PTR DS:[ESI],WinCRT.1002158C # MOV EAX,ESI # POP ESI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x100018d1 : # DEC EAX # OR AL,5D # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100018d2 : # OR AL,5D # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100138d3 : # MOV DWORD PTR DS:[ESI],WinCRT.1002158C # MOV EAX,ESI # POP ESI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x100138d4 : # PUSH ES # MOV WORD PTR DS:[C68B1002],SS # POP ESI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x100138d5 : # MOV WORD PTR DS:[C68B1002],SS # POP ESI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x100078d6 : # OR BYTE PTR DS:[EBX+51FF5008],CL # DEC EAX # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100078d8 : # OR BYTE PTR DS:[EAX-1],DL # PUSH ECX # DEC EAX # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100018d9 : # ADC EAX,DWORD PTR DS:[EAX] # ADD BYTE PTR SS:[EBP+8B0774C0],AL # ADC BYTE PTR DS:[EBX+7462FFC8],CL # XOR EAX,EAX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100018db : # ADD BYTE PTR SS:[EBP+8B0774C0],AL # ADC BYTE PTR DS:[EBX+7462FFC8],CL # XOR EAX,EAX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100018e1 : # ADC BYTE PTR DS:[EBX+7462FFC8],CL # XOR EAX,EAX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10003ed1 : # LES EDX,FWORD PTR DS:[EAX] # POP EBP # RETN 0x0C ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100078eb : # OR BYTE PTR DS:[EBX+51FF5008],CL # DEC ESP # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100078ed : # OR BYTE PTR DS:[EAX-1],DL # PUSH ECX # DEC ESP # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100058ef : # ADC BYTE PTR DS:[EBX],BH # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100058f8 : # POP ESI # SUB AL,8B # INC ESI # SUB BYTE PTR DS:[EBX],BH # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100058f9 : # SUB AL,8B # INC ESI # SUB BYTE PTR DS:[EBX],BH # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100018fa : # ADD DWORD PTR DS:[EAX+9],EBP # ADD AL,0 # ADD BH,BH # ADC EAX,<&KERNEL32.CompareStringA> # DEC EAX # DEC EAX # POP EBP # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100058fb : # INC ESI # SUB BYTE PTR DS:[EBX],BH # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100018fc : # OR DWORD PTR DS:[EAX+EAX],EAX # ADD BH,BH # ADC EAX,<&KERNEL32.CompareStringA> # DEC EAX # DEC EAX # POP EBP # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10005903 : # XLAT BYTE PTR DS:[EBX+AL] # MOV DWORD PTR DS:[ESI+28],EBX # POP EDI # POP ESI # POP EBX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10001904 : # ADD DWORD PTR DS:[EAX],EDX # DEC EAX # DEC EAX # POP EBP # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10001905 : # ADC BYTE PTR DS:[EAX+48],CL # POP EBP # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10005906 : # SUB BYTE PTR DS:[EDI+5E],BL # POP EBX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000591b : # OR AL,CH # INS DWORD PTR ES:[EDI],DX # MOV CH,0 # ADD BYTE PTR DS:[EAX-18],DL # PUSH EBX # MOV ESI,C483FFFF # ADC AL,5D # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000591d : # INS DWORD PTR ES:[EDI],DX # MOV CH,0 # ADD BYTE PTR DS:[EAX-18],DL # PUSH EBX # MOV ESI,C483FFFF # ADC AL,5D # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000591e : # MOV CH,0 # ADD BYTE PTR DS:[EAX-18],DL # PUSH EBX # MOV ESI,C483FFFF # ADC AL,5D # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10005920 : # ADD BYTE PTR DS:[EAX-18],DL # PUSH EBX # MOV ESI,C483FFFF # ADC AL,5D # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10002843 : # SUB AL,0F3 # ADD DWORD PTR DS:[EAX],EDX # POP EBP # RETN 0x08 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10005923 : # PUSH EBX # MOV ESI,C483FFFF # ADC AL,5D # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10005924 : # MOV ESI,C483FFFF # ADC AL,5D # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10005929 : # ADC AL,5D # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10002cb5 : # ADD AL,0BC # ADD BYTE PTR DS:[EAX],AL # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1001d93c : # AND BYTE PTR DS:[EAX],AL # ADD BYTE PTR DS:[EBX+EBX+3D],DH # ADD BYTE PTR DS:[EAX],AL # ADD BYTE PTR SS:[ESP+ECX+3B],DH # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1001d93e : # ADD BYTE PTR DS:[EBX+EBX+3D],DH # ADD BYTE PTR DS:[EAX],AL # ADD BYTE PTR SS:[ESP+ECX+3B],DH # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1001d942 : # ADD BYTE PTR DS:[EAX],AL # ADD BYTE PTR SS:[ESP+ECX+3B],DH # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10001945 : # OR BYTE PTR DS:[EAX+6A],DL # ADD EDI,EDI # ADC EAX,<&KERNEL32.WideCharToMultiByte> # POP EBP # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1001d947 : # OR AL,3B # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1000194d : # ADD DWORD PTR DS:[EAX],EDX # POP EBP # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000994e : # ADC BYTE PTR DS:[EBX+75F685F0],CL # WAIT # POP EDI # POP ESI # POP EBP # RETN 0x18 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10009954 : # WAIT # POP EDI # POP ESI # POP EBP # RETN 0x18 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10002845 : # ADD DWORD PTR DS:[EAX],EDX # POP EBP # RETN 0x08 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10005962 : # INC DWORD PTR DS:[EBX+C03310C4] # POP EBP # RETN 0x0C ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10005964 : # LES EDX,FWORD PTR DS:[EAX] # XOR EAX,EAX # POP EBP # RETN 0x0C ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10001965 : # ADC BYTE PTR DS:[EAX+6A],DL # ADD EDI,EDI # ADC EAX,<&KERNEL32.WideCharToMultiByte> # POP EBP # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000196d : # ADD DWORD PTR DS:[EAX],EDX # POP EBP # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10001984 : # ADD BYTE PTR SS:[EBP+4],DH # XOR EAX,EAX # POP EBP # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000e998 : # INC ECX # ADD BYTE PTR DS:[EAX],AL # POP ECX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1001d994 : # POP DS # ADD ECX,DWORD PTR DS:[EAX] # ADD BYTE PTR SS:[EBP+EAX+D],DH # ADD BYTE PTR DS:[EAX],AL # ADD BYTE PTR DS:[EAX+C95B5E5F],AL # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1001d995 : # ADD ECX,DWORD PTR DS:[EAX] # ADD BYTE PTR SS:[EBP+EAX+D],DH # ADD BYTE PTR DS:[EAX],AL # ADD BYTE PTR DS:[EAX+C95B5E5F],AL # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1001d997 : # ADD BYTE PTR SS:[EBP+EAX+D],DH # ADD BYTE PTR DS:[EAX],AL # ADD BYTE PTR DS:[EAX+C95B5E5F],AL # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1001d99b : # ADD BYTE PTR DS:[EAX],AL # ADD BYTE PTR DS:[EAX+C95B5E5F],AL # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1001d99d : # ADD BYTE PTR DS:[EAX+C95B5E5F],AL # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10008445 : # ADD BYTE PTR DS:[EAX],AL # RETN 0x18 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100119a1 : # MOV DWORD PTR SS:[EBP+8],EAX # MOV EAX,DWORD PTR SS:[EBP+8] # POP ESI # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x100119a2 : # INC EBP # OR BYTE PTR DS:[EBX+5D5E0845],CL # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x100119a3 : # OR BYTE PTR DS:[EBX+5D5E0845],CL # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x100179a4 : # OR BYTE PTR SS:[EBP+2],CL # ADC AL,CH # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x100119a5 : # INC EBP # OR BYTE PTR DS:[ESI+5D],BL # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x100119a6 : # OR BYTE PTR DS:[ESI+5D],BL # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x100179a7 : # ADC AL,CH # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x100079a8 : # OR BYTE PTR DS:[EAX-1],DL # PUSH ECX # PUSHAD # POP EBP # RETN 0x0C ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10009ef2 : # INC DWORD PTR DS:[80010108] # POP EBP # RETN 0x18 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100059ae : # ADC BYTE PTR SS:[EBP+3B0474C0],AL # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100139af : # ADD EAX,90 # DEC DWORD PTR DS:[EAX] # XOR EAX,EAX # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x100139b2 : # ADD BYTE PTR DS:[EAX],AL # DEC DWORD PTR DS:[EAX] # XOR EAX,EAX # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x100139b4 : # DEC DWORD PTR DS:[EAX] # XOR EAX,EAX # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1001d9b6 : # ADC BH,BH # ADC EAX,<&KERNEL32.CreateFileA> # MOV DWORD PTR DS:[10028C0C],EAX # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1001d9b8 : # ADC EAX,<&KERNEL32.CreateFileA> # MOV DWORD PTR DS:[10028C0C],EAX # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1001d9b9 : # CMP CL,DH # ADD DWORD PTR DS:[EAX],EDX # MOV DWORD PTR DS:[10028C0C],EAX # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x100019ba : # ADD EAX,FFFFB1E8 # INC DWORD PTR DS:[EBX+68910C0] # POP ESI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1001d9bb : # ADD DWORD PTR DS:[EAX],EDX # MOV DWORD PTR DS:[10028C0C],EAX # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1001d9bc : # ADC BYTE PTR DS:[EBX+10028C0C],AH # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1001d9bd : # MOV DWORD PTR DS:[10028C0C],EAX # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1001d9be : # OR AL,8C # ADD DL,BYTE PTR DS:[EAX] # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x100019bf : # INC DWORD PTR DS:[EBX+68910C0] # POP ESI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000d1b5 : # XOR ECX,ECX # MOV DWORD PTR DS:[EAX],WinCRT.10020DB8 # MOV DWORD PTR DS:[EAX+4],ECX # MOV DWORD PTR DS:[EAX+10],ECX # MOV DWORD PTR DS:[EAX+C],ECX # MOV DWORD PTR DS:[EAX+8],ECX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100179a2 : # OR AL,68 # OR BYTE PTR SS:[EBP+2],CL # ADC AL,CH # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10003451 : # ADC EAX,830000B8 # LES EDX,FWORD PTR DS:[EAX] # MOV EAX,EDI # POP EDI # POP ESI # POP EBP # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000d9ee : # PUSH EAX # OR BYTE PTR DS:[EBX+5F],BL # POP ESI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000d9ef : # OR BYTE PTR DS:[EBX+5F],BL # POP ESI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100099f5 : # DEC ESI # ADD BYTE PTR DS:[EAX],AL # RETN 0x08 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100099f6 : # ADD BYTE PTR DS:[EAX],AL # RETN 0x08 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100039f8 : # ADD BYTE PTR DS:[EAX],AL # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100079fe : # INC EBP # OR BYTE PTR DS:[ECX+C0332C41],CL # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100079ff : # OR BYTE PTR DS:[ECX+C0332C41],CL # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100139ae : # INC DWORD PTR DS:[90] # DEC DWORD PTR DS:[EAX] # XOR EAX,EAX # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1001da1a : # LES EDX,FWORD PTR DS:[EBX+ECX] # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1001da1b : # ADC AL,0B # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10011a1c : # MOV DWORD PTR SS:[EBP+8],EAX # MOV EAX,DWORD PTR SS:[EBP+8] # POP ESI # POP EBP # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x10011a1d : # INC EBP # OR BYTE PTR DS:[EBX+5D5E0845],CL # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x10011a1e : # OR BYTE PTR DS:[EBX+5D5E0845],CL # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x10011a20 : # INC EBP # OR BYTE PTR DS:[ESI+5D],BL # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x10011a21 : # OR BYTE PTR DS:[ESI+5D],BL # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x10011a27 : # MOV CX,SEG? # ADD DWORD PTR DS:[EAX],EDX # RETN 0x04 ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x10011a29 : # ADD DWORD PTR DS:[EAX],EDX # RETN 0x04 ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x1000c89d : # MOV DWORD PTR DS:[EAX],ECX # ADD DWORD PTR DS:[ESI+28],2 # MOV EAX,ESI # POP ESI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1001d9b4 : # SUB BYTE PTR DS:[EDX],AL # ADC BH,BH # ADC EAX,<&KERNEL32.CreateFileA> # MOV DWORD PTR DS:[10028C0C],EAX # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10007a3a : # ADD EAX,FFE241E8 # INC DWORD PTR DS:[EBX+C0330020] # INC EAX # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10007a3f : # INC DWORD PTR DS:[EBX+C0330020] # INC EAX # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10007a40 : # AND DWORD PTR DS:[EAX],0 # XOR EAX,EAX # INC EAX # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10007a41 : # AND BYTE PTR DS:[EAX],AL # XOR EAX,EAX # INC EAX # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10004463 : # ADD AL,0 # MOV BYTE PTR DS:[ESI+8],0 # MOV EAX,ESI # POP ESI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10007a55 : # ADD EAX,FFE226E8 # INC DWORD PTR DS:[EBX+C0330020] # INC EAX # POP EBP # RETN 0x10 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10011a57 : # ADC BH,BH # ADC EAX,<&KERNEL32.TlsSetValue> # MOV EAX,ESI # POP ESI # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x10011a5a : # MOV CL,DH # ADD DWORD PTR DS:[EAX],EDX # MOV EAX,ESI # POP ESI # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x10007a5b : # AND DWORD PTR DS:[EAX],0 # XOR EAX,EAX # INC EAX # POP EBP # RETN 0x10 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10011a5c : # ADD DWORD PTR DS:[EAX],EDX # MOV EAX,ESI # POP ESI # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x1001da5f : # OR AL,8B # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10017a62 : # AND BYTE PTR DS:[ESI-37],BL # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x10007a63 : # ADC BYTE PTR DS:[EAX],AL # MOV EAX,WinCRT.10020000 # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10007a64 : # ADD BYTE PTR DS:[EAX+10020000],BH # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10007a66 : # ADD BYTE PTR DS:[EAX],AL # ADD DL,BYTE PTR DS:[EAX] # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10003a69 : # MOV AL,BYTE PTR DS:[6A1001F3] # ADD CH,AL # OR DWORD PTR DS:[EAX],EBX # ADD BYTE PTR DS:[EAX],AL # POP EDI # POP ESI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10003a6e : # ADD CH,AL # OR DWORD PTR DS:[EAX],EBX # ADD BYTE PTR DS:[EAX],AL # POP EDI # POP ESI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10003a70 : # OR DWORD PTR DS:[EAX],EBX # ADD BYTE PTR DS:[EAX],AL # POP EDI # POP ESI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10003a72 : # ADD BYTE PTR DS:[EAX],AL # POP EDI # POP ESI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10003a73 : # ADD BYTE PTR DS:[EDI+5E],BL # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10014c45 : # INC EBP # OR BYTE PTR DS:[EBX+1002B6DC],AH # POP EBP # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x10013a92 : # INC DWORD PTR DS:[90] # DEC DWORD PTR DS:[EAX] # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10013a93 : # ADD EAX,90 # DEC DWORD PTR DS:[EAX] # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10013a96 : # ADD BYTE PTR DS:[EAX],AL # DEC DWORD PTR DS:[EAX] # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10013a98 : # DEC DWORD PTR DS:[EAX] # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10003aaa : # ADC BYTE PTR DS:[EBX+62FF5DC8],CL # ADD AL,5D # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10017ab2 : # AND BYTE PTR DS:[ESI-37],BL # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10002475 : # ADD BYTE PTR DS:[EAX],DL # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10013ad5 : # MOV BYTE PTR DS:[EDX+EAX],CL # ADD BYTE PTR DS:[EAX],AL # MOV EAX,ECX # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10013ad6 : # OR AL,2 # ADD BYTE PTR DS:[EAX],AL # MOV EAX,ECX # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10013ad7 : # ADD AL,BYTE PTR DS:[EAX] # ADD BYTE PTR DS:[EBX+C033C3C1],CL # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10013ad8 : # ADD BYTE PTR DS:[EAX],AL # MOV EAX,ECX # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10013ad9 : # ADD BYTE PTR DS:[EBX+C033C3C1],CL # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10007adc : # ADD BYTE PTR DS:[EAX],AL # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10001ae6 : # PUSHAD # MOV EAX,15FF1002 # OR DL,DH # ADD DWORD PTR DS:[EAX],EDX # XOR EAX,EAX # INC EAX # POP ESI # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10001ae7 : # MOV EAX,15FF1002 # OR DL,DH # ADD DWORD PTR DS:[EAX],EDX # XOR EAX,EAX # INC EAX # POP ESI # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10001aec : # OR DL,DH # ADD DWORD PTR DS:[EAX],EDX # XOR EAX,EAX # INC EAX # POP ESI # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10005aed : # MOV WORD PTR DS:[EAX],ES # ADD CL,CL # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10001aee : # ADD DWORD PTR DS:[EAX],EDX # XOR EAX,EAX # INC EAX # POP ESI # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10003f28 : # STI # ADD DWORD PTR DS:[EAX],EDX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10009af3 : # PUSH ECX # AND AL,5F # POP ESI # POP EBP # RETN 0x18 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10009af4 : # AND AL,5F # POP ESI # POP EBP # RETN 0x18 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10003afb : # PUSH EDX # OR AL,5D # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10003afc : # OR AL,5D # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10011813 : # ADD BYTE PTR DS:[EBX+5E],BL # POP EDI # RETN 0x10 ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x10007b11 : # LES ESI,ECX # ADD DWORD PTR DS:[EAX],EDX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10007b13 : # ADD DWORD PTR DS:[EAX],EDX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10013b21 : # INC EBX # XOR EAX,EAX # CMP BYTE PTR SS:[EBP+C],AL # SETNE AL # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x10013b23 : # XOR EAX,EAX # CMP BYTE PTR SS:[EBP+C],AL # SETNE AL # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x10013b25 : # CMP BYTE PTR SS:[EBP+C],AL # SETNE AL # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x10013b28 : # SETNE AL # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x1000db2d : # POP ESI # ADC BYTE PTR DS:[EBX+D87E8C7],CL # ADD BYTE PTR DS:[EAX],AL # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000db2e : # ADC BYTE PTR DS:[EBX+D87E8C7],CL # ADD BYTE PTR DS:[EAX],AL # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10003b2f : # ADD BYTE PTR DS:[EAX],AL # MOV ECX,DWORD PTR DS:[ECX+8] # LEA EAX,DWORD PTR DS:[ECX+EAX*4] # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10009b33 : # PUSH ECX # SUB BYTE PTR DS:[EDI+5E],BL # POP EBP # RETN 0x18 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10009b34 : # SUB BYTE PTR DS:[EDI+5E],BL # POP EBP # RETN 0x18 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000bb35 : # INC EDI # INC ESI # SUB BYTE PTR DS:[EDI+EDI*8+C0331001],CL # INC EAX # POP ESI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000bb36 : # MOV DWORD PTR DS:[ESI+28],WinCRT.1001FF8C # XOR EAX,EAX # INC EAX # POP ESI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000bb37 : # INC ESI # SUB BYTE PTR DS:[EDI+EDI*8+C0331001],CL # INC EAX # POP ESI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000bb38 : # SUB BYTE PTR DS:[EDI+EDI*8+C0331001],CL # INC EAX # POP ESI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000bb39 : # MOV DI,SEG? # ADD DWORD PTR DS:[EAX],EDX # XOR EAX,EAX # INC EAX # POP ESI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000bb3b : # ADD DWORD PTR DS:[EAX],EDX # XOR EAX,EAX # INC EAX # POP ESI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1001a18a : # ADC BYTE PTR DS:[ESI+5D],BL # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10003b46 : # AND BH,BH # ADC EAX,<&USER32.SendMessageA> # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10003b49 : # CMP BL,DH # ADD DWORD PTR DS:[EAX],EDX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10003b4b : # ADD DWORD PTR DS:[EAX],EDX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000db4d : # XOR BYTE PTR DS:[EAX],AL # ADD AH,CL # MOV EAX,WinCRT.10027B30 # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10013b4f : # DEC ECX # OR BYTE PTR DS:[EBX+C8B3234],CL # PUSH CS # ADD ECX,EDX # ADD EAX,ECX # POP ESI # POP EBP # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x10013b50 : # OR BYTE PTR DS:[EBX+C8B3234],CL # PUSH CS # ADD ECX,EDX # ADD EAX,ECX # POP ESI # POP EBP # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x10013b52 : # XOR AL,32 # MOV ECX,DWORD PTR DS:[ESI+ECX] # ADD ECX,EDX # ADD EAX,ECX # POP ESI # POP EBP # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x10013b53 : # XOR CL,BYTE PTR DS:[EBX+CA030E0C] # ADD EAX,ECX # POP ESI # POP EBP # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x10013b55 : # OR AL,0E # ADD ECX,EDX # ADD EAX,ECX # POP ESI # POP EBP # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x10013b56 : # PUSH CS # ADD ECX,EDX # ADD EAX,ECX # POP ESI # POP EBP # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x1000bb5d : # AND BH,BH # ADC EAX,<&USER32.GetWindowLongA> # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000bb60 : # MOV BX,SEG? # ADD DWORD PTR DS:[EAX],EDX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000bb62 : # ADD DWORD PTR DS:[EAX],EDX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10005b65 : # ADC BYTE PTR DS:[EAX-1],DL # ADC EAX,<&KERNEL32.GetProcAddress> # MOV DWORD PTR DS:[1002ABB4],EAX # XOR EAX,EAX # INC EAX # POP EBP # RETN 0x10 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10005b68 : # ADC EAX,<&KERNEL32.GetProcAddress> # MOV DWORD PTR DS:[1002ABB4],EAX # XOR EAX,EAX # INC EAX # POP EBP # RETN 0x10 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10005b69 : # AND DL,DH # ADD DWORD PTR DS:[EAX],EDX # MOV DWORD PTR DS:[1002ABB4],EAX # XOR EAX,EAX # INC EAX # POP EBP # RETN 0x10 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10005b6b : # ADD DWORD PTR DS:[EAX],EDX # MOV DWORD PTR DS:[1002ABB4],EAX # XOR EAX,EAX # INC EAX # POP EBP # RETN 0x10 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10005b6c : # ADC BYTE PTR DS:[EBX+1002ABB4],AH # XOR EAX,EAX # INC EAX # POP EBP # RETN 0x10 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10005b6d : # MOV DWORD PTR DS:[1002ABB4],EAX # XOR EAX,EAX # INC EAX # POP EBP # RETN 0x10 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10005b6e : # MOV AH,0AB # ADD DL,BYTE PTR DS:[EAX] # XOR EAX,EAX # INC EAX # POP EBP # RETN 0x10 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10007b70 : # ADD BYTE PTR DS:[EAX],AL # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10011b77 : # POP EBX # SLDT WORD PTR DS:[EAX] # POP ECX # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x10011b78 : # SLDT WORD PTR DS:[EAX] # POP ECX # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x10011b79 : # ADD BYTE PTR DS:[EAX],AL # POP ECX # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x1000bb7a : # MOV BX,SEG? # ADD DWORD PTR DS:[EAX],EDX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000bb7c : # ADD DWORD PTR DS:[EAX],EDX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10011b7e : # OR AL,0E8 # PUSH EDX # SLDT WORD PTR DS:[EAX] # POP ECX # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x10011b80 : # PUSH EDX # SLDT WORD PTR DS:[EAX] # POP ECX # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10011b81 : # SLDT WORD PTR DS:[EAX] # POP ECX # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10011b82 : # ADD BYTE PTR DS:[EAX],AL # POP ECX # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1000163a : # ADD BYTE PTR DS:[EDI+5E],BL # POP EBX # POP EBP # RETN 0x08 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000db89 : # MOV EAX,ECX # XOR ECX,ECX # MOV DWORD PTR DS:[EAX],WinCRT.10020DD4 # MOV DWORD PTR DS:[EAX+4],ECX # MOV DWORD PTR DS:[EAX+10],ECX # MOV DWORD PTR DS:[EAX+C],ECX # MOV DWORD PTR DS:[EAX+8],ECX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000db8b : # XOR ECX,ECX # MOV DWORD PTR DS:[EAX],WinCRT.10020DD4 # MOV DWORD PTR DS:[EAX+4],ECX # MOV DWORD PTR DS:[EAX+10],ECX # MOV DWORD PTR DS:[EAX+C],ECX # MOV DWORD PTR DS:[EAX+8],ECX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000db8d : # MOV DWORD PTR DS:[EAX],WinCRT.10020DD4 # MOV DWORD PTR DS:[EAX+4],ECX # MOV DWORD PTR DS:[EAX+10],ECX # MOV DWORD PTR DS:[EAX+C],ECX # MOV DWORD PTR DS:[EAX+8],ECX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10001b8e : # OR BYTE PTR DS:[EBX+8090FFCE],CL # ADD BYTE PTR DS:[EAX],AL # ADD BYTE PTR DS:[EDI+5E],BL # POP EBP # RETN 0x08 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10001b92 : # NOP # ADD BYTE PTR DS:[EAX],0 # ADD BYTE PTR DS:[EDI+5E],BL # POP EBP # RETN 0x08 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10001b93 : # ADD BYTE PTR DS:[EAX],0 # ADD BYTE PTR DS:[EDI+5E],BL # POP EBP # RETN 0x08 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10001b94 : # ADD BYTE PTR DS:[EAX],AL # ADD BYTE PTR DS:[EDI+5E],BL # POP EBP # RETN 0x08 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10001b95 : # ADD BYTE PTR DS:[EAX],AL # POP EDI # POP ESI # POP EBP # RETN 0x08 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10001b96 : # ADD BYTE PTR DS:[EDI+5E],BL # POP EBP # RETN 0x08 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000bb97 : # AND BH,BH # ADC EAX,<&USER32.ShowWindow> # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000bb9c : # ADD DWORD PTR DS:[EAX],EDX # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100149f0 : # ADD BYTE PTR DS:[EAX],AL # ADD BYTE PTR DS:[ECX+5F],BL # POP ESI # POP EBX # MOV ESP,EBP # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10007ba5 : # LES ESI,ECX # ADD DWORD PTR DS:[EAX],EDX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100149f1 : # ADD BYTE PTR DS:[EAX],AL # POP ECX # POP EDI # POP ESI # POP EBX # MOV ESP,EBP # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1000972a : # ADD DWORD PTR DS:[EAX],EDX # POP ESI # POP EBP # RETN 0x10 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10003bae : # POP ES # ADD BYTE PTR DS:[EAX],AL # MOV EAX,DWORD PTR DS:[EAX+EC] # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10003baf : # ADD BYTE PTR DS:[EAX],AL # MOV EAX,DWORD PTR DS:[EAX+EC] # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10003bb2 : # SUB AH,0 # ADD BYTE PTR DS:[EAX],AL # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10009bb3 : # PUSH ECX # XOR BYTE PTR DS:[EDI+5E],BL # POP EBP # RETN 0x18 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10009bb4 : # XOR BYTE PTR DS:[EDI+5E],BL # POP EBP # RETN 0x18 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10003bb5 : # ADD BYTE PTR DS:[EAX],AL # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000bbb6 : # AND BH,BH # ADC EAX,<&USER32.IsWindowEnabled> # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000bbbb : # ADD DWORD PTR DS:[EAX],EDX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100149f5 : # POP ESI # POP EBX # MOV ESP,EBP # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1000dbc4 : # MOV ECX,8BFFFF80 # INC EBP # OR AL,3B # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000dbc9 : # INC EBP # OR AL,3B # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000dbca : # OR AL,3B # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100149f7 : # MOV ESP,EBP # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10001bd2 : # OR BYTE PTR DS:[EBX+8490FFCE],CL # ADD BYTE PTR DS:[EAX],AL # ADD BYTE PTR DS:[EDI+5E],BL # POP EBP # RETN 0x08 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10001bd6 : # NOP # TEST BYTE PTR DS:[EAX],AL # ADD BYTE PTR DS:[EAX],AL # POP EDI # POP ESI # POP EBP # RETN 0x08 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10001bd7 : # TEST BYTE PTR DS:[EAX],AL # ADD BYTE PTR DS:[EAX],AL # POP EDI # POP ESI # POP EBP # RETN 0x08 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10001bd8 : # ADD BYTE PTR DS:[EAX],AL # ADD BYTE PTR DS:[EDI+5E],BL # POP EBP # RETN 0x08 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10001bd9 : # ADD BYTE PTR DS:[EAX],AL # POP EDI # POP ESI # POP EBP # RETN 0x08 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10001bda : # ADD BYTE PTR DS:[EDI+5E],BL # POP EBP # RETN 0x08 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000296b : # OR BYTE PTR DS:[EBX+55E8144E],CL # XCHG EAX,EDX # ADD BYTE PTR DS:[EAX],AL # MOV DWORD PTR DS:[ESI+18],1 # POP ESI # POP EBX # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000bbde : # ADD DWORD PTR DS:[EAX],EDX # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10001bf1 : # INC EAX # ADD BYTE PTR DS:[EAX],AL # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10001bf2 : # ADD BYTE PTR DS:[EAX],AL # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10009bf3 : # PUSH ECX # XOR AL,5F # POP ESI # POP EBP # RETN 0x18 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10009bf4 : # XOR AL,5F # POP ESI # POP EBP # RETN 0x18 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10011bf6 : # LES ESI,ECX # ADD DWORD PTR DS:[EAX],EDX # POP EDI # MOV EAX,ESI # POP ESI # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10011bf8 : # ADD DWORD PTR DS:[EAX],EDX # POP EDI # MOV EAX,ESI # POP ESI # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10007c04 : # ADD BYTE PTR DS:[EAX],AL # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10005c05 : # ADD BYTE PTR DS:[EAX+1001FC80],BH # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000d71c : # INC ESI # XOR AL,5F # POP ESI # POP EBX # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10005c07 : # CMP AH,1 # ADC BL,AL # MOV EAX,WinCRT.1001FC9C # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10005c08 : # CLD # ADD DWORD PTR DS:[EAX],EDX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10005c09 : # ADD DWORD PTR DS:[EAX],EDX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10005c0a : # ADC BL,AL # MOV EAX,WinCRT.1001FC9C # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10005c0d : # PUSHFD # CLD # ADD DWORD PTR DS:[EAX],EDX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10005c0e : # CLD # ADD DWORD PTR DS:[EAX],EDX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10005c0f : # ADD DWORD PTR DS:[EAX],EDX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10005c10 : # ADC BL,AL # MOV EAX,WinCRT.1001FCB8 # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10005c14 : # CLD # ADD DWORD PTR DS:[EAX],EDX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10005c15 : # ADD DWORD PTR DS:[EAX],EDX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10005c16 : # ADC BL,AL # MOV EAX,WinCRT.1001FCD4 # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000bc17 : # AND BH,BH # ADC EAX,<&USER32.SetWindowPos> # POP EBP # RETN 0x18 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10005c1a : # CLD # ADD DWORD PTR DS:[EAX],EDX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10005c1b : # ADD DWORD PTR DS:[EAX],EDX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000bc1c : # ADD DWORD PTR DS:[EAX],EDX # POP EBP # RETN 0x18 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10015c20 : # INC DWORD PTR DS:[ECX+15DC6] # ADD BYTE PTR DS:[ESI-18],DL # PUSH SS # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x10015c23 : # POP EBP # ADD DWORD PTR DS:[EAX],EAX # ADD BYTE PTR DS:[ESI-18],DL # PUSH SS # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x10015c24 : # ADD DWORD PTR DS:[EAX],EAX # ADD BYTE PTR DS:[ESI-18],DL # PUSH SS # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x10015c26 : # ADD BYTE PTR DS:[ESI-18],DL # PUSH SS # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x10015c29 : # PUSH SS # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x10009c33 : # PUSH ECX # CMP BYTE PTR DS:[EDI+5E],BL # POP EBP # RETN 0x18 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10009c34 : # CMP BYTE PTR DS:[EDI+5E],BL # POP EBP # RETN 0x18 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10007c39 : # LES ESI,ECX # ADD DWORD PTR DS:[EAX],EDX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10007c3b : # ADD DWORD PTR DS:[EAX],EDX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10003c4a : # LES ESI,ECX # ADD DWORD PTR DS:[EAX],EDX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10003c4c : # ADD DWORD PTR DS:[EAX],EDX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000bc65 : # ADD BYTE PTR DS:[ESI-1],DL # NOP # PUSHFD # ADD BYTE PTR DS:[EAX],AL # ADD BYTE PTR DS:[ESI+5D],BL # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000bc68 : # NOP # PUSHFD # ADD BYTE PTR DS:[EAX],AL # ADD BYTE PTR DS:[ESI+5D],BL # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000bc69 : # PUSHFD # ADD BYTE PTR DS:[EAX],AL # ADD BYTE PTR DS:[ESI+5D],BL # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000bc6a : # ADD BYTE PTR DS:[EAX],AL # ADD BYTE PTR DS:[ESI+5D],BL # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000bc6b : # ADD BYTE PTR DS:[EAX],AL # POP ESI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000bc6c : # ADD BYTE PTR DS:[ESI+5D],BL # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000dc71 : # ADD ECX,DWORD PTR DS:[ECX+458B087D] # OR BYTE PTR DS:[EBX],BH # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10009c73 : # PUSH ECX # CMP AL,5F # POP ESI # POP EBP # RETN 0x18 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10009c74 : # CMP AL,5F # POP ESI # POP EBP # RETN 0x18 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000dc76 : # INC EBP # OR BYTE PTR DS:[EBX],BH # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000dc77 : # OR BYTE PTR DS:[EBX],BH # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10003c7d : # OR BYTE PTR DS:[EBX+FFC88B10],CL # PUSH EDX # POP ESI # POP EBP # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10003c7f : # ADC BYTE PTR DS:[EBX+6452FFC8],CL # POP ESI # POP EBP # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10005c9b : # ADD AH,CL # MOV EAX,ECX # MOV DWORD PTR DS:[EAX+4],1 # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10005c9d : # MOV EAX,ECX # MOV DWORD PTR DS:[EAX+4],1 # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10005c9f : # MOV DWORD PTR DS:[EAX+4],1 # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10005ca2 : # ADD DWORD PTR DS:[EAX],EAX # ADD BYTE PTR DS:[EAX],AL # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10005ca4 : # ADD BYTE PTR DS:[EAX],AL # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000bcae : # INC ESI # AND AL,0FF # XLAT BYTE PTR DS:[EBX+AL] # POP EDI # MOV DWORD PTR DS:[ESI+20],EAX # POP ESI # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000bcaf : # AND AL,0FF # XLAT BYTE PTR DS:[EBX+AL] # POP EDI # MOV DWORD PTR DS:[ESI+20],EAX # POP ESI # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000bcb1 : # XLAT BYTE PTR DS:[EBX+AL] # POP EDI # MOV DWORD PTR DS:[ESI+20],EAX # POP ESI # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10007cb3 : # ADD BYTE PTR DS:[EAX],AL # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10014a1f : # MOV DWORD PTR DS:[0],ECX # POP ECX # POP EDI # POP ESI # POP EBX # MOV ESP,EBP # POP EBP # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x10014a21 : # ADD BYTE PTR DS:[EAX],AL # ADD BYTE PTR DS:[EAX],AL # POP ECX # POP EDI # POP ESI # POP EBX # MOV ESP,EBP # POP EBP # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x1000dcc8 : # OR BYTE PTR DS:[ECX+5E890C46],CL # ADD AL,5F # POP ESI # POP EBX # POP EBP # RETN 0x08 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000dcca : # INC ESI # OR AL,89 # POP ESI # ADD AL,5F # POP ESI # POP EBX # POP EBP # RETN 0x08 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000dccb : # OR AL,89 # POP ESI # ADD AL,5F # POP ESI # POP EBX # POP EBP # RETN 0x08 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10006a22 : # OR AL,0C2 # ADD AL,0 # MOV EAX,WinCRT.10029370 # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10005cd1 : # INC EBP # ADC BYTE PTR DS:[EBX],BH # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10005cd2 : # ADC BYTE PTR DS:[EBX],BH # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10014a25 : # POP ECX # POP EDI # POP ESI # POP EBX # MOV ESP,EBP # POP EBP # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x10007ce8 : # LES ESI,ECX # ADD DWORD PTR DS:[EAX],EDX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10005f7c : # XLAT BYTE PTR DS:[EBX+AL] # POP EDI # POP ESI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10007cea : # ADD DWORD PTR DS:[EAX],EDX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10013cf3 : # ADC AL,3 # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1000bd06 : # ADD BYTE PTR DS:[ECX+15FF1C47],CL # ADC BL,DH # ADD DWORD PTR DS:[EAX],EDX # POP EDI # POP ESI # POP EBX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x100081e6 : # ADD BYTE PTR DS:[EAX],AL # RETN 0x24 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000bd0c : # ADC BL,DH # ADD DWORD PTR DS:[EAX],EDX # POP EDI # POP ESI # POP EBX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000bd0e : # ADD DWORD PTR DS:[EAX],EDX # POP EDI # POP ESI # POP EBX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000bd0f : # ADC BYTE PTR DS:[EDI+5E],BL # POP EBX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10003d1c : # AND DWORD PTR DS:[EBX],0 # POP EDI # MOV EAX,ESI # POP ESI # POP EBX # POP EBP # RETN 0x08 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10009d2b : # OR AL,8B # OR BYTE PTR DS:[EAX-1],DL # PUSH ECX # DEC EAX # POP EBP # RETN 0x08 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10009d2d : # OR BYTE PTR DS:[EAX-1],DL # PUSH ECX # DEC EAX # POP EBP # RETN 0x08 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10008f88 : # INC ESI # ADC AL,0E8 # POP ECX # ADD BYTE PTR DS:[EAX],AL # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000e4de : # ADD BYTE PTR DS:[EAX],AL # ADD ESP,20 # POP ESI # POP EBP # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10008f89 : # ADC AL,0E8 # POP ECX # ADD BYTE PTR DS:[EAX],AL # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10011d38 : # ADD BYTE PTR DS:[EAX],AL # POP ECX # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x10007d41 : # ADD BYTE PTR DS:[EAX],AL # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10008f8b : # POP ECX # ADD BYTE PTR DS:[EAX],AL # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10011d44 : # ADD BYTE PTR DS:[EAX],AL # POP ECX # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x1000bd4f : # INC ESI # ADC AL,5F # MOV DWORD PTR DS:[ESI+50],EBX # MOV DWORD PTR DS:[ESI+44],EBX # MOV EAX,ESI # POP ESI # POP EBX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000bd50 : # ADC AL,5F # MOV DWORD PTR DS:[ESI+50],EBX # MOV DWORD PTR DS:[ESI+44],EBX # MOV EAX,ESI # POP ESI # POP EBX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10009d5d : # OR AL,8B # OR BYTE PTR DS:[EAX-1],DL # PUSH ECX # DEC ESP # POP EBP # RETN 0x08 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10009d5f : # OR BYTE PTR DS:[EAX-1],DL # PUSH ECX # DEC ESP # POP EBP # RETN 0x08 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10007d76 : # LES ESI,ECX # ADD DWORD PTR DS:[EAX],EDX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000dd77 : # ADD BYTE PTR DS:[EAX+10020DF0],BH # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10007d78 : # ADD DWORD PTR DS:[EAX],EDX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000dd7e : # MOV EAX,ECX # XOR ECX,ECX # MOV DWORD PTR DS:[EAX],WinCRT.10020E10 # MOV DWORD PTR DS:[EAX+4],ECX # MOV DWORD PTR DS:[EAX+10],ECX # MOV DWORD PTR DS:[EAX+C],ECX # MOV DWORD PTR DS:[EAX+8],ECX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000dd80 : # XOR ECX,ECX # MOV DWORD PTR DS:[EAX],WinCRT.10020E10 # MOV DWORD PTR DS:[EAX+4],ECX # MOV DWORD PTR DS:[EAX+10],ECX # MOV DWORD PTR DS:[EAX+C],ECX # MOV DWORD PTR DS:[EAX+8],ECX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10004a40 : # TEST AL,0F1 # ADD DWORD PTR DS:[EAX],EDX # XOR EAX,EAX # POP EDI # POP ESI # POP EBX # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000dd82 : # MOV DWORD PTR DS:[EAX],WinCRT.10020E10 # MOV DWORD PTR DS:[EAX+4],ECX # MOV DWORD PTR DS:[EAX+10],ECX # MOV DWORD PTR DS:[EAX+C],ECX # MOV DWORD PTR DS:[EAX+8],ECX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000dd83 : # ADD BYTE PTR DS:[EAX],DL # PUSH CS # ADD DL,BYTE PTR DS:[EAX] # MOV DWORD PTR DS:[EAX+4],ECX # MOV DWORD PTR DS:[EAX+10],ECX # MOV DWORD PTR DS:[EAX+C],ECX # MOV DWORD PTR DS:[EAX+8],ECX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10007d84 : # ADD AL,CH # POP SS # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000dd85 : # PUSH CS # ADD DL,BYTE PTR DS:[EAX] # MOV DWORD PTR DS:[EAX+4],ECX # MOV DWORD PTR DS:[EAX+10],ECX # MOV DWORD PTR DS:[EAX+C],ECX # MOV DWORD PTR DS:[EAX+8],ECX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10007d86 : # POP SS # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10008a42 : # POP EBX # MOV DH,0FF # DEC DWORD PTR DS:[EBX+5E70E8C6] # ADD BYTE PTR DS:[EAX],AL # RETN 0x08 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10008a43 : # MOV DH,0FF # DEC DWORD PTR DS:[EBX+5E70E8C6] # ADD BYTE PTR DS:[EAX],AL # RETN 0x08 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10007d9a : # ADD DWORD PTR DS:[EAX],EDX # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10011da7 : # CLC # PUSH DWORD PTR DS:[ECX+ECX+6A] # ADD BYTE PTR DS:[EAX-1],DL # ADC EAX,<&KERNEL32.TlsSetValue> # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10011da8 : # PUSH DWORD PTR DS:[ECX+ECX+6A] # ADD BYTE PTR DS:[EAX-1],DL # ADC EAX,<&KERNEL32.TlsSetValue> # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10011dac : # ADD BYTE PTR DS:[EAX-1],DL # ADC EAX,<&KERNEL32.TlsSetValue> # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10011db0 : # MOV CL,DH # ADD DWORD PTR DS:[EAX],EDX # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10011db2 : # ADD DWORD PTR DS:[EAX],EDX # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10007db3 : # POP ESP # INC EBP # ADD BYTE PTR DS:[EAX],AL # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10013db4 : # ADC BYTE PTR DS:[ESI-18],DL # AND EAX,59FFFFFD # POP ECX # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10007db5 : # ADD BYTE PTR DS:[EAX],AL # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10008a4b : # ADD BYTE PTR DS:[EAX],AL # RETN 0x08 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10007dc5 : # AND BH,BH # ADC EAX,<&USER32.GetWindowRect> # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10009fa1 : # OR AL,5D # RETN 0x08 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10007dca : # ADD DWORD PTR DS:[EAX],EDX # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10007dd4 : # AND BH,BH # ADC EAX,<&USER32.EnableWindow> # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10007dd9 : # ADD DWORD PTR DS:[EAX],EDX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10007de0 : # AND BH,BH # ADC EAX,<&USER32.EnableWindow> # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10007de5 : # ADD DWORD PTR DS:[EAX],EDX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10017de9 : # MOV EDX,DWORD PTR SS:[EBP+8] # AND EDX,DWORD PTR SS:[EBP+C] # NOT ECX # AND ECX,EAX # OR ECX,EDX # MOV DWORD PTR DS:[10028600],ECX # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10017dec : # AND EDX,DWORD PTR SS:[EBP+C] # NOT ECX # AND ECX,EAX # OR ECX,EDX # MOV DWORD PTR DS:[10028600],ECX # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10017def : # NOT ECX # AND ECX,EAX # OR ECX,EDX # MOV DWORD PTR DS:[10028600],ECX # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10017df1 : # AND ECX,EAX # OR ECX,EDX # MOV DWORD PTR DS:[10028600],ECX # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10017df3 : # OR ECX,EDX # MOV DWORD PTR DS:[10028600],ECX # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10017df5 : # MOV DWORD PTR DS:[10028600],ECX # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10016fa9 : # OR AL,5D # RETN 0x04 ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10006500 : # DEC DWORD PTR DS:[EBX+B4E82046] # ADD DWORD PTR DS:[EAX],0 # RETN 0x04 ** [WinCRT.dll] ** | null,unicodereverse,ascii {PAGE_EXECUTE_READ}
0x1000be16 : # ADD DWORD PTR DS:[EBX+450FFCE],ECX # MOV EAX,WinCRT.1000BD7B # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10002a59 : # AND AL,CH # XCHG EAX,ESI # CMP AL,0 # ADD BYTE PTR DS:[ESI+5D],BL # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10003e1c : # ADD DWORD PTR DS:[EAX],EAX # ADD BYTE PTR DS:[EDI-75],DL # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10007a5a : # INC DWORD PTR DS:[EBX+C0330020] # INC EAX # POP EBP # RETN 0x10 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10003e1e : # ADD BYTE PTR DS:[EDI-75],DL # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000be1f : # ADD BYTE PTR DS:[EAX],DL # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10006a5b : # MOV DWORD PTR DS:[EAX+C],1 # MOV DWORD PTR DS:[EAX+8],ESI # POP EDI # POP ESI # POP EBP # RETN 0x08 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10007a5c : # AND BYTE PTR DS:[EAX],AL # XOR EAX,EAX # INC EAX # POP EBP # RETN 0x10 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10002a5d : # ADD BYTE PTR DS:[EAX],AL # POP ESI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10002a5e : # ADD BYTE PTR DS:[ESI+5D],BL # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10007e46 : # MOV DWORD PTR DS:[ESI],7FFFFFFF # POP ESI # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000be71 : # XOR EAX,DWORD PTR DS:[EAX] # ADD BYTE PTR DS:[EBX+7E8910C4],AL # OR BYTE PTR DS:[EDI+5E],BL # POP EBP # RETN 0x08 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000be72 : # ADD BYTE PTR DS:[EAX],AL # ADD ESP,10 # MOV DWORD PTR DS:[ESI+8],EDI # POP EDI # POP ESI # POP EBP # RETN 0x08 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000be73 : # ADD BYTE PTR DS:[EBX+7E8910C4],AL # OR BYTE PTR DS:[EDI+5E],BL # POP EBP # RETN 0x08 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000be75 : # LES EDX,FWORD PTR DS:[EAX] # MOV DWORD PTR DS:[ESI+8],EDI # POP EDI # POP ESI # POP EBP # RETN 0x08 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000be76 : # ADC BYTE PTR DS:[ECX+5E5F087E],CL # POP EBP # RETN 0x08 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000de78 : # ADD BYTE PTR DS:[EAX],AL # POP ECX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000be79 : # OR BYTE PTR DS:[EDI+5E],BL # POP EBP # RETN 0x08 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10017e7b : # OR BYTE PTR DS:[ECX+E6],AL # XOR BYTE PTR SS:[EBP-3C],5E # POP EDI # POP EBX # XOR EAX,EAX # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x10017e7e : # ADD BYTE PTR DS:[EAX],AL # ADD BYTE PTR DS:[EAX+5F5EC475],AL # POP EBX # XOR EAX,EAX # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x10017e7f : # ADD BYTE PTR DS:[EAX],AL # XOR BYTE PTR SS:[EBP-3C],5E # POP EDI # POP EBX # XOR EAX,EAX # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x10017e80 : # ADD BYTE PTR DS:[EAX+5F5EC475],AL # POP EBX # XOR EAX,EAX # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10017e81 : # XOR BYTE PTR SS:[EBP-3C],5E # POP EDI # POP EBX # XOR EAX,EAX # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10017e83 : # LES EBX,FWORD PTR DS:[ESI+5F] # POP EBX # XOR EAX,EAX # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1000be9d : # ADD BYTE PTR DS:[EBX+E8001066],AL # STI # PUSH CS # ADD BYTE PTR DS:[EAX],AL # AND DWORD PTR DS:[ESI+14],0 # POP ESI # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10017e9f : # ADC BYTE PTR DS:[EDX],BH # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1000bea1 : # ADD AL,CH # STI # PUSH CS # ADD BYTE PTR DS:[EAX],AL # AND DWORD PTR DS:[ESI+14],0 # POP ESI # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10007ea2 : # DEC DWORD PTR DS:[EBX+A8E8084D] # CMP AL,0 # ADD BYTE PTR DS:[EBX+189104D],CL # POP EBP # RETN 0x0C ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000251b : # SAHF # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000bea4 : # PUSH CS # ADD BYTE PTR DS:[EAX],AL # AND DWORD PTR DS:[ESI+14],0 # POP ESI # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10007ea5 : # OR AL,CH # TEST AL,3C # ADD BYTE PTR DS:[EAX],AL # MOV ECX,DWORD PTR SS:[EBP+10] # MOV DWORD PTR DS:[ECX],EAX # POP EBP # RETN 0x0C ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000bea6 : # ADD BYTE PTR DS:[EBX+5E001466],AL # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000bea7 : # AND DWORD PTR DS:[ESI+14],0 # POP ESI # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000bea8 : # ADC AL,0 # POP ESI # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000bea9 : # ADC AL,0 # POP ESI # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10007eaa : # ADD BYTE PTR DS:[EBX+189104D],CL # POP EBP # RETN 0x0C ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10005eab : # MOV EAX,C483FFFF # ADC AL,5D # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10005eb0 : # ADC AL,5D # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10003eb6 : # LES EDX,FWORD PTR DS:[EAX] # POP EBP # RETN 0x0C ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10017ec1 : # INC EDX # STD # POP ESI # POP EDI # POP EBX # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10017ec2 : # STD # POP ESI # POP EDI # POP EBX # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10007ec6 : # AND BH,BH # ADC EAX,<&USER32.SetMenu> # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000a521 : # PUSH EBP # MOV EBP,ESP # MOV EAX,DWORD PTR SS:[EBP+8] # INC DWORD PTR DS:[EAX+14] # MOV EAX,DWORD PTR DS:[EAX+14] # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10005ec8 : # INC EBP # OR BYTE PTR DS:[ECX+C25D0441],CL # ADD AL,0 # AND DWORD PTR DS:[ECX+8],0 # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10005ec9 : # OR BYTE PTR DS:[ECX+C25D0441],CL # ADD AL,0 # AND DWORD PTR DS:[ECX+8],0 # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10007ecb : # ADD DWORD PTR DS:[EAX],EDX # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10005ecf : # ADD AL,0 # AND DWORD PTR DS:[ECX+8],0 # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10005ed0 : # ADD BYTE PTR DS:[EBX+C3000861],AL # AND DWORD PTR DS:[ECX+4],0 # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10005ed1 : # AND DWORD PTR DS:[ECX+8],0 # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10005ed2 : # POPAD # OR BYTE PTR DS:[EAX],AL # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10005ed3 : # OR BYTE PTR DS:[EAX],AL # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10005ed4 : # ADD BL,AL # AND DWORD PTR DS:[ECX+4],0 # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10005ed6 : # AND DWORD PTR DS:[ECX+4],0 # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000a526 : # OR BH,BH # INC EAX # ADC AL,8B # INC EAX # ADC AL,5D # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10008fd1 : # OR DWORD PTR DS:[EBX+E95D1CC1],EAX # SUB EBP,DWORD PTR DS:[EDI] # ADD BYTE PTR DS:[EAX],AL # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10019ef2 : # OR AL,CH # MOV AL,16 # ADD BYTE PTR DS:[EAX],AL # POP ECX # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10019ef4 : # MOV AL,16 # ADD BYTE PTR DS:[EAX],AL # POP ECX # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10019ef5 : # PUSH SS # ADD BYTE PTR DS:[EAX],AL # POP ECX # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10019ef6 : # ADD BYTE PTR DS:[EAX],AL # POP ECX # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1000bef8 : # OR BYTE PTR DS:[EBX+75C08500],CL # CMC # XOR EAX,EAX # POP ESI # POP EBP # RETN 0x0C ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000befe : # CMC # XOR EAX,EAX # POP ESI # POP EBP # RETN 0x0C ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10009f02 : # INC EBP # OR BYTE PTR DS:[EBX+48890C4D],CL # ADD AL,8B # DEC EBP # ADC BYTE PTR DS:[ECX+C0330848],CL # POP EBP # RETN 0x0C ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10009f03 : # OR BYTE PTR DS:[EBX+48890C4D],CL # ADD AL,8B # DEC EBP # ADC BYTE PTR DS:[ECX+C0330848],CL # POP EBP # RETN 0x0C ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10009f05 : # DEC EBP # OR AL,89 # DEC EAX # ADD AL,8B # DEC EBP # ADC BYTE PTR DS:[ECX+C0330848],CL # POP EBP # RETN 0x0C ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10009f06 : # OR AL,89 # DEC EAX # ADD AL,8B # DEC EBP # ADC BYTE PTR DS:[ECX+C0330848],CL # POP EBP # RETN 0x0C ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10009f08 : # DEC EAX # ADD AL,8B # DEC EBP # ADC BYTE PTR DS:[ECX+C0330848],CL # POP EBP # RETN 0x0C ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10009f09 : # ADD AL,8B # DEC EBP # ADC BYTE PTR DS:[ECX+C0330848],CL # POP EBP # RETN 0x0C ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10009f0b : # DEC EBP # ADC BYTE PTR DS:[ECX+C0330848],CL # POP EBP # RETN 0x0C ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10009f0c : # ADC BYTE PTR DS:[ECX+C0330848],CL # POP EBP # RETN 0x0C ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10007f11 : # OR BH,BH # PUSH EBX # POP ESP # POP EDI # POP ESI # POP EBX # POP EBP # RETN 0x20 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10003f19 : # FCOS # DEC DWORD PTR DS:[EBX+A99AE8C7] # ADD BYTE PTR DS:[EAX],AL # RETN 0x0C ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10003f1b : # DEC DWORD PTR DS:[EBX+A99AE8C7] # ADD BYTE PTR DS:[EAX],AL # RETN 0x0C ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10003f20 : # TEST EAX,0CC20000 # ADD BYTE PTR DS:[EAX+1001FB20],BH # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10003f21 : # ADD BYTE PTR DS:[EAX],AL # RETN 0x0C ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10003f22 : # ADD DL,AL # OR AL,0 # MOV EAX,WinCRT.1001FB20 # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10013f23 : # DEC DWORD PTR DS:[EBX+EEBE445] # XOR EAX,EAX # INC EAX # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x10003f24 : # OR AL,0 # MOV EAX,WinCRT.1001FB20 # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10003f25 : # ADD BYTE PTR DS:[EAX+1001FB20],BH # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10003f27 : # AND BL,BH # ADD DWORD PTR DS:[EAX],EDX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10013f28 : # PUSH CS # XOR EAX,EAX # INC EAX # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x10003f29 : # ADD DWORD PTR DS:[EAX],EDX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10019f2b : # LEA EAX,DWORD PTR DS:[ECX+14] # MOV DWORD PTR DS:[ECX+8],EAX # MOV DWORD PTR DS:[ECX+18],2 # MOV EAX,DWORD PTR DS:[ECX+8] # AND DWORD PTR DS:[ECX+4],0 # MOV DWORD PTR DS:[ECX],EAX # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1000d2f9 : # INC ESI # OR AL,89 # POP ESI # OR BYTE PTR DS:[EDI+5E],BL # POP EBX # POP EBP # RETN 0x08 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10019f2e : # MOV DWORD PTR DS:[ECX+8],EAX # MOV DWORD PTR DS:[ECX+18],2 # MOV EAX,DWORD PTR DS:[ECX+8] # AND DWORD PTR DS:[ECX+4],0 # MOV DWORD PTR DS:[ECX],EAX # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10017f2f : # AND AL,7F # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x10019f31 : # MOV DWORD PTR DS:[ECX+18],2 # MOV EAX,DWORD PTR DS:[ECX+8] # AND DWORD PTR DS:[ECX+4],0 # MOV DWORD PTR DS:[ECX],EAX # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10019f34 : # ADD AL,BYTE PTR DS:[EAX] # ADD BYTE PTR DS:[EAX],AL # MOV EAX,DWORD PTR DS:[ECX+8] # AND DWORD PTR DS:[ECX+4],0 # MOV DWORD PTR DS:[ECX],EAX # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10019f35 : # ADD BYTE PTR DS:[EAX],AL # ADD BYTE PTR DS:[EBX+61830841],CL # ADD AL,0 # MOV DWORD PTR DS:[ECX],EAX # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10019f36 : # ADD BYTE PTR DS:[EAX],AL # MOV EAX,DWORD PTR DS:[ECX+8] # AND DWORD PTR DS:[ECX+4],0 # MOV DWORD PTR DS:[ECX],EAX # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10019f37 : # ADD BYTE PTR DS:[EBX+61830841],CL # ADD AL,0 # MOV DWORD PTR DS:[ECX],EAX # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10019f38 : # MOV EAX,DWORD PTR DS:[ECX+8] # AND DWORD PTR DS:[ECX+4],0 # MOV DWORD PTR DS:[ECX],EAX # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10019f3b : # AND DWORD PTR DS:[ECX+4],0 # MOV DWORD PTR DS:[ECX],EAX # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1000bf3d : # CMC # XOR EAX,EAX # POP EDI # POP ESI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10005fe1 : # XLAT BYTE PTR DS:[EBX+AL] # POP EDI # POP ESI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10011f4e : # OR AL,CH # INC ESP # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x10019f55 : # MOV DWORD PTR DS:[EAX],9 # XOR EAX,EAX # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10019f57 : # OR DWORD PTR DS:[EAX],EAX # ADD BYTE PTR DS:[EAX],AL # XOR EAX,EAX # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10019f59 : # ADD BYTE PTR DS:[EAX],AL # XOR EAX,EAX # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10003f65 : # ADD BYTE PTR DS:[EAX],AL # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10003f6c : # OR DWORD PTR DS:[EAX+EAX],EBX # ADD BYTE PTR DS:[EAX+10003F5F],BH # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10003f6e : # ADD BYTE PTR DS:[EAX],AL # MOV EAX,WinCRT.10003F5F # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10003f6f : # ADD BYTE PTR DS:[EAX+10003F5F],BH # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10003f71 : # POP EDI # AAS # ADD BYTE PTR DS:[EAX],DL # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10003f72 : # AAS # ADD BYTE PTR DS:[EAX],DL # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10003f73 : # ADD BYTE PTR DS:[EAX],DL # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10005f79 : # OR BYTE PTR DS:[ESI-1],DL # XLAT BYTE PTR DS:[EBX+AL] # POP EDI # POP ESI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10009f7b : # PUSH ECX # ADC AL,5D # RETN 0x18 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10009f7c : # ADC AL,5D # RETN 0x18 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10011f7e : # CLC # PUSH DWORD PTR SS:[EBP-36] # MOV EAX,EDI # POP EDI # POP ESI # POP EBP # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x10011f7f : # PUSH DWORD PTR SS:[EBP-36] # MOV EAX,EDI # POP EDI # POP ESI # POP EBP # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x10019542 : # CLD # MOV ESI,DWORD PTR SS:[EBP-8] # MOV EDI,DWORD PTR SS:[EBP-C] # MOV ESP,EBP # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10003f8e : # OR BYTE PTR DS:[EBX+ECX-75],DH # INC EAX # ADC BYTE PTR SS:[EBP+5DF475C0],AL # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10003f92 : # INC EAX # ADC BYTE PTR SS:[EBP+5DF475C0],AL # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10003f93 : # ADC BYTE PTR SS:[EBP+5DF475C0],AL # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10009f9b : # OR AL,8B # OR BYTE PTR DS:[EAX-1],DL # PUSH ECX # OR AL,5D # RETN 0x08 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000df9c : # PUSH 18 # POP EAX # POP ESI # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10009f9d : # OR BYTE PTR DS:[EAX-1],DL # PUSH ECX # OR AL,5D # RETN 0x08 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10009fa0 : # PUSH ECX # OR AL,5D # RETN 0x08 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000dfa1 : # AND DWORD PTR DS:[ESI],0 # XOR EAX,EAX # POP ESI # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000bfa2 : # ADD BYTE PTR SS:[EBP+5FF375C0],AL # POP ESI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10005fac : # OR BYTE PTR DS:[ESI-1],DL # XLAT BYTE PTR DS:[EBX+AL] # POP EDI # POP ESI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10005faf : # XLAT BYTE PTR DS:[EBX+AL] # POP EDI # POP ESI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10007fb4 : # DEC DWORD PTR DS:[EBX+7890FFCE] # ADD DWORD PTR DS:[EAX],EAX # ADD BYTE PTR DS:[ESI+5D],BL # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10019549 : # MOV ESP,EBP # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10007fba : # ADD DWORD PTR DS:[EAX],EAX # ADD BYTE PTR DS:[ESI+5D],BL # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10007fbb : # ADD BYTE PTR DS:[EAX],AL # POP ESI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10007fbc : # ADD BYTE PTR DS:[ESI+5D],BL # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10018ff5 : # ADC BYTE PTR DS:[EBX],BH # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10011fca : # CLC # PUSH DWORD PTR SS:[EBP-3D] # MOV EAX,EDI # POP EDI # POP ESI # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10011fcb : # PUSH DWORD PTR SS:[EBP-3D] # MOV EAX,EDI # POP EDI # POP ESI # POP EBP # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x10019ff8 : # PUSH 1A # POP EAX # POP ESI # RETN ** [WinCRT.dll] ** | {PAGE_EXECUTE_READ}
0x1000e849 : # ADD BYTE PTR DS:[EAX],AL # ADD BYTE PTR DS:[EAX],AL # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000dfd9 : # FSUBR DWORD PTR DS:[ECX] # ADD BYTE PTR DS:[EAX],AL # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000dfdb : # ADD BYTE PTR DS:[EAX],AL # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10005fde : # OR BYTE PTR DS:[ESI-1],DL # XLAT BYTE PTR DS:[EBX+AL] # POP EDI # POP ESI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000dfdf : # MOV CL,9 # ADD BYTE PTR DS:[EAX],AL # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000dfe1 : # ADD BYTE PTR DS:[EAX],AL # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10003fe2 : # ADC AL,BYTE PTR DS:[EAX] # ADD BYTE PTR DS:[ESI+5D],BL # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10003fe3 : # ADD BYTE PTR DS:[EAX],AL # POP ESI # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10003fe4 : # ADD BYTE PTR DS:[ESI+5D],BL # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x1000aaa6 : # MOV CL,0FF # DEC DWORD PTR DS:[ECX+5E5F147E] # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10015551 : # AAD 5E # POP EBX # POP EBP # RETN ** [WinCRT.dll] ** | ascii {PAGE_EXECUTE_READ}
0x10005ff5 : # PUSH 5D1001F0 # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10005ff7 : # ADD DWORD PTR DS:[EAX],EDX # POP EBP # RETN 0x04 ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10005ff8 : # ADC BYTE PTR SS:[EBP-3E],BL # ADD AL,0 # MOV EAX,WinCRT.1001FDA4 # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10005ffc : # ADD BYTE PTR DS:[EAX+1001FDA4],BH # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}
0x10005fff : # STD # ADD DWORD PTR DS:[EAX],EDX # RETN ** [WinCRT.dll] ** | null {PAGE_EXECUTE_READ}