0824:000002F8 int 03 CC EAX:0000000A EBX:000007C8 ECX:000004EA EDX:000007C8 ESI:000000AA EDI:00000778 EBP:0000FFF6 ESP:0000FFEC DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007206 CR0:00000010 0824:000002F8 int 03 CC EAX:0000000A EBX:000007C8 ECX:000004EA EDX:000007C8 ESI:000000AA EDI:00000778 EBP:0000FFF6 ESP:0000FFEC DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007206 CR0:00000010 0070:0000000E iret CF EAX:0000000A EBX:000007C8 ECX:000004EA EDX:000007C8 ESI:000000AA EDI:00000778 EBP:0000FFF6 ESP:0000FFE6 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:1 IF:0 TF:0 VM:0 FLG:00007006 CR0:00000010 0824:000002F9 push si 56 EAX:0000000A EBX:000007C8 ECX:000004EA EDX:000007C8 ESI:000000AA EDI:00000778 EBP:0000FFF6 ESP:0000FFEC DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007206 CR0:00000010 0824:000002FA call 00000582 ($+285) E8 85 02 EAX:0000000A EBX:000007C8 ECX:000004EA EDX:000007C8 ESI:000000AA EDI:00000778 EBP:0000FFF6 ESP:0000FFEA DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007206 CR0:00000010 0824:00000582 push bp 55 EAX:0000000A EBX:000007C8 ECX:000004EA EDX:000007C8 ESI:000000AA EDI:00000778 EBP:0000FFF6 ESP:0000FFE8 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007206 CR0:00000010 0824:00000583 mov bp,sp 8B EC EAX:0000000A EBX:000007C8 ECX:000004EA EDX:000007C8 ESI:000000AA EDI:00000778 EBP:0000FFF6 ESP:0000FFE6 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007206 CR0:00000010 0824:00000585 xor ax,ax 33 C0 EAX:0000000A EBX:000007C8 ECX:000004EA EDX:000007C8 ESI:000000AA EDI:00000778 EBP:0000FFE6 ESP:0000FFE6 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007206 CR0:00000010 0824:00000587 push ax 50 EAX:00000000 EBX:000007C8 ECX:000004EA EDX:000007C8 ESI:000000AA EDI:00000778 EBP:0000FFE6 ESP:0000FFE6 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:1 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007206 CR0:00000010 0824:00000588 push word [bp+04] ss:[FFEA]=00AA FF 76 04 EAX:00000000 EBX:000007C8 ECX:000004EA EDX:000007C8 ESI:000000AA EDI:00000778 EBP:0000FFE6 ESP:0000FFE4 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:1 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007206 CR0:00000010 0824:0000058B call 00000BCB ($+63d) E8 3D 06 EAX:00000000 EBX:000007C8 ECX:000004EA EDX:000007C8 ESI:000000AA EDI:00000778 EBP:0000FFE6 ESP:0000FFE2 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:1 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007206 CR0:00000010 0824:00000BCB push bp 55 EAX:00000000 EBX:000007C8 ECX:000004EA EDX:000007C8 ESI:000000AA EDI:00000778 EBP:0000FFE6 ESP:0000FFE0 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:1 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007206 CR0:00000010 0824:00000BCC mov bp,sp 8B EC EAX:00000000 EBX:000007C8 ECX:000004EA EDX:000007C8 ESI:000000AA EDI:00000778 EBP:0000FFE6 ESP:0000FFDE DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:1 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007206 CR0:00000010 0824:00000BCE mov ax,0001 B8 01 00 EAX:00000000 EBX:000007C8 ECX:000004EA EDX:000007C8 ESI:000000AA EDI:00000778 EBP:0000FFDE ESP:0000FFDE DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:1 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007206 CR0:00000010 0824:00000BD1 push ax 50 EAX:00000001 EBX:000007C8 ECX:000004EA EDX:000007C8 ESI:000000AA EDI:00000778 EBP:0000FFDE ESP:0000FFDE DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:1 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007206 CR0:00000010 0824:00000BD2 push word [bp+06] ss:[FFE4]=0000 FF 76 06 EAX:00000001 EBX:000007C8 ECX:000004EA EDX:000007C8 ESI:000000AA EDI:00000778 EBP:0000FFDE ESP:0000FFDC DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:1 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007206 CR0:00000010 0824:00000BD5 push word [bp+04] ss:[FFE2]=00AA FF 76 04 EAX:00000001 EBX:000007C8 ECX:000004EA EDX:000007C8 ESI:000000AA EDI:00000778 EBP:0000FFDE ESP:0000FFDA DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:1 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007206 CR0:00000010 0824:00000BD8 call 00000B6C ($-6f) E8 91 FF EAX:00000001 EBX:000007C8 ECX:000004EA EDX:000007C8 ESI:000000AA EDI:00000778 EBP:0000FFDE ESP:0000FFD8 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:1 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007206 CR0:00000010 0824:00000B6C push bp 55 EAX:00000001 EBX:000007C8 ECX:000004EA EDX:000007C8 ESI:000000AA EDI:00000778 EBP:0000FFDE ESP:0000FFD6 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:1 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007206 CR0:00000010 0824:00000B6D mov bp,sp 8B EC EAX:00000001 EBX:000007C8 ECX:000004EA EDX:000007C8 ESI:000000AA EDI:00000778 EBP:0000FFDE ESP:0000FFD4 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:1 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007206 CR0:00000010 0824:00000B6F sub sp,000E 83 EC 0E EAX:00000001 EBX:000007C8 ECX:000004EA EDX:000007C8 ESI:000000AA EDI:00000778 EBP:0000FFD4 ESP:0000FFD4 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:1 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007206 CR0:00000010 0824:00000B72 push si 56 EAX:00000001 EBX:000007C8 ECX:000004EA EDX:000007C8 ESI:000000AA EDI:00000778 EBP:0000FFD4 ESP:0000FFC6 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:1 OF:0 AF:1 PF:1 IF:1 TF:0 VM:0 FLG:00007206 CR0:00000010 0824:00000B73 mov si,[bp+06] ss:[FFDA]=0000 8B 76 06 EAX:00000001 EBX:000007C8 ECX:000004EA EDX:000007C8 ESI:000000AA EDI:00000778 EBP:0000FFD4 ESP:0000FFC4 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:1 OF:0 AF:1 PF:1 IF:1 TF:0 VM:0 FLG:00007206 CR0:00000010 0824:00000B76 mov word [bp-02],0000 ss:[FFD2]=0200 C7 46 FE 00 00 EAX:00000001 EBX:000007C8 ECX:000004EA EDX:000007C8 ESI:00000000 EDI:00000778 EBP:0000FFD4 ESP:0000FFC4 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:1 OF:0 AF:1 PF:1 IF:1 TF:0 VM:0 FLG:00007206 CR0:00000010 0824:00000B7B lea ax,[bp-04] ss:[FFD0]=07C8 8D 46 FC EAX:00000001 EBX:000007C8 ECX:000004EA EDX:000007C8 ESI:00000000 EDI:00000778 EBP:0000FFD4 ESP:0000FFC4 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:1 OF:0 AF:1 PF:1 IF:1 TF:0 VM:0 FLG:00007206 CR0:00000010 0824:00000B7E push ax 50 EAX:0000FFD0 EBX:000007C8 ECX:000004EA EDX:000007C8 ESI:00000000 EDI:00000778 EBP:0000FFD4 ESP:0000FFC4 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:1 OF:0 AF:1 PF:1 IF:1 TF:0 VM:0 FLG:00007206 CR0:00000010 0824:00000B7F lea ax,[bp-02] ss:[FFD2]=0000 8D 46 FE EAX:0000FFD0 EBX:000007C8 ECX:000004EA EDX:000007C8 ESI:00000000 EDI:00000778 EBP:0000FFD4 ESP:0000FFC2 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:1 OF:0 AF:1 PF:1 IF:1 TF:0 VM:0 FLG:00007206 CR0:00000010 0824:00000B82 push ax 50 EAX:0000FFD2 EBX:000007C8 ECX:000004EA EDX:000007C8 ESI:00000000 EDI:00000778 EBP:0000FFD4 ESP:0000FFC2 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:1 OF:0 AF:1 PF:1 IF:1 TF:0 VM:0 FLG:00007206 CR0:00000010 0824:00000B83 mov ax,7FFF B8 FF 7F EAX:0000FFD2 EBX:000007C8 ECX:000004EA EDX:000007C8 ESI:00000000 EDI:00000778 EBP:0000FFD4 ESP:0000FFC0 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:1 OF:0 AF:1 PF:1 IF:1 TF:0 VM:0 FLG:00007206 CR0:00000010 0824:00000B86 push ax 50 EAX:00007FFF EBX:000007C8 ECX:000004EA EDX:000007C8 ESI:00000000 EDI:00000778 EBP:0000FFD4 ESP:0000FFC0 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:1 OF:0 AF:1 PF:1 IF:1 TF:0 VM:0 FLG:00007206 CR0:00000010 0824:00000B87 lea ax,[bp+04] ss:[FFD8]=00AA 8D 46 04 EAX:00007FFF EBX:000007C8 ECX:000004EA EDX:000007C8 ESI:00000000 EDI:00000778 EBP:0000FFD4 ESP:0000FFBE DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:1 OF:0 AF:1 PF:1 IF:1 TF:0 VM:0 FLG:00007206 CR0:00000010 0824:00000B8A push ax 50 EAX:0000FFD8 EBX:000007C8 ECX:000004EA EDX:000007C8 ESI:00000000 EDI:00000778 EBP:0000FFD4 ESP:0000FFBE DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:1 OF:0 AF:1 PF:1 IF:1 TF:0 VM:0 FLG:00007206 CR0:00000010 0824:00000B8B mov ax,0B60 B8 60 0B EAX:0000FFD8 EBX:000007C8 ECX:000004EA EDX:000007C8 ESI:00000000 EDI:00000778 EBP:0000FFD4 ESP:0000FFBC DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:1 OF:0 AF:1 PF:1 IF:1 TF:0 VM:0 FLG:00007206 CR0:00000010 0824:00000B8E push ax 50 EAX:00000B60 EBX:000007C8 ECX:000004EA EDX:000007C8 ESI:00000000 EDI:00000778 EBP:0000FFD4 ESP:0000FFBC DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:1 OF:0 AF:1 PF:1 IF:1 TF:0 VM:0 FLG:00007206 CR0:00000010 0824:00000B8F mov ax,0B40 B8 40 0B EAX:00000B60 EBX:000007C8 ECX:000004EA EDX:000007C8 ESI:00000000 EDI:00000778 EBP:0000FFD4 ESP:0000FFBA DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:1 OF:0 AF:1 PF:1 IF:1 TF:0 VM:0 FLG:00007206 CR0:00000010 0824:00000B92 push ax 50 EAX:00000B40 EBX:000007C8 ECX:000004EA EDX:000007C8 ESI:00000000 EDI:00000778 EBP:0000FFD4 ESP:0000FFBA DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:1 OF:0 AF:1 PF:1 IF:1 TF:0 VM:0 FLG:00007206 CR0:00000010 0824:00000B93 call 000019C0 ($+e2a) E8 2A 0E EAX:00000B40 EBX:000007C8 ECX:000004EA EDX:000007C8 ESI:00000000 EDI:00000778 EBP:0000FFD4 ESP:0000FFB8 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:1 OF:0 AF:1 PF:1 IF:1 TF:0 VM:0 FLG:00007206 CR0:00000010 0824:000019C0 jmp near word [0760] ds:[0760]=07E1 FF 26 60 07 EAX:00000B40 EBX:000007C8 ECX:000004EA EDX:000007C8 ESI:00000000 EDI:00000778 EBP:0000FFD4 ESP:0000FFB6 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:1 OF:0 AF:1 PF:1 IF:1 TF:0 VM:0 FLG:00007206 CR0:00000010 0824:000007E1 push bp 55 EAX:00000B40 EBX:000007C8 ECX:000004EA EDX:000007C8 ESI:00000000 EDI:00000778 EBP:0000FFD4 ESP:0000FFB6 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:1 OF:0 AF:1 PF:1 IF:1 TF:0 VM:0 FLG:00007206 CR0:00000010 0824:000007E2 mov bp,sp 8B EC EAX:00000B40 EBX:000007C8 ECX:000004EA EDX:000007C8 ESI:00000000 EDI:00000778 EBP:0000FFD4 ESP:0000FFB4 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:1 OF:0 AF:1 PF:1 IF:1 TF:0 VM:0 FLG:00007206 CR0:00000010 0824:000007E4 sub sp,0018 83 EC 18 EAX:00000B40 EBX:000007C8 ECX:000004EA EDX:000007C8 ESI:00000000 EDI:00000778 EBP:0000FFB4 ESP:0000FFB4 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:1 OF:0 AF:1 PF:1 IF:1 TF:0 VM:0 FLG:00007206 CR0:00000010 0824:000007E7 push si 56 EAX:00000B40 EBX:000007C8 ECX:000004EA EDX:000007C8 ESI:00000000 EDI:00000778 EBP:0000FFB4 ESP:0000FF9C DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:1 OF:0 AF:1 PF:1 IF:1 TF:0 VM:0 FLG:00007206 CR0:00000010 0824:000007E8 push di 57 EAX:00000B40 EBX:000007C8 ECX:000004EA EDX:000007C8 ESI:00000000 EDI:00000778 EBP:0000FFB4 ESP:0000FF9A DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:1 OF:0 AF:1 PF:1 IF:1 TF:0 VM:0 FLG:00007206 CR0:00000010 0824:000007E9 mov byte [bp-05],00 ss:[FFAF]=46F0 C6 46 FB 00 EAX:00000B40 EBX:000007C8 ECX:000004EA EDX:000007C8 ESI:00000000 EDI:00000778 EBP:0000FFB4 ESP:0000FF98 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:1 OF:0 AF:1 PF:1 IF:1 TF:0 VM:0 FLG:00007206 CR0:00000010 0824:000007ED mov byte [bp-06],01 ss:[FFAE]=0000 C6 46 FA 01 EAX:00000B40 EBX:000007C8 ECX:000004EA EDX:000007C8 ESI:00000000 EDI:00000778 EBP:0000FFB4 ESP:0000FF98 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:1 OF:0 AF:1 PF:1 IF:1 TF:0 VM:0 FLG:00007206 CR0:00000010 0824:000007F1 mov byte [bp-07],00 ss:[FFAD]=01DA C6 46 F9 00 EAX:00000B40 EBX:000007C8 ECX:000004EA EDX:000007C8 ESI:00000000 EDI:00000778 EBP:0000FFB4 ESP:0000FF98 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:1 OF:0 AF:1 PF:1 IF:1 TF:0 VM:0 FLG:00007206 CR0:00000010 0824:000007F5 mov byte [bp-08],00 ss:[FFAC]=0062 C6 46 F8 00 EAX:00000B40 EBX:000007C8 ECX:000004EA EDX:000007C8 ESI:00000000 EDI:00000778 EBP:0000FFB4 ESP:0000FF98 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:1 OF:0 AF:1 PF:1 IF:1 TF:0 VM:0 FLG:00007206 CR0:00000010 0824:000007F9 mov byte [bp-09],00 ss:[FFAB]=0072 C6 46 F7 00 EAX:00000B40 EBX:000007C8 ECX:000004EA EDX:000007C8 ESI:00000000 EDI:00000778 EBP:0000FFB4 ESP:0000FF98 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:1 OF:0 AF:1 PF:1 IF:1 TF:0 VM:0 FLG:00007206 CR0:00000010 0824:000007FD mov word [bp-0C],0000 ss:[FFA8]=F000 C7 46 F4 00 00 EAX:00000B40 EBX:000007C8 ECX:000004EA EDX:000007C8 ESI:00000000 EDI:00000778 EBP:0000FFB4 ESP:0000FF98 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:1 OF:0 AF:1 PF:1 IF:1 TF:0 VM:0 FLG:00007206 CR0:00000010 0824:00000802 mov word [bp-0E],0001 ss:[FFA6]=CFC8 C7 46 F2 01 00 EAX:00000B40 EBX:000007C8 ECX:000004EA EDX:000007C8 ESI:00000000 EDI:00000778 EBP:0000FFB4 ESP:0000FF98 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:1 OF:0 AF:1 PF:1 IF:1 TF:0 VM:0 FLG:00007206 CR0:00000010 0824:00000807 int 35 CD 35 EAX:00000B40 EBX:000007C8 ECX:000004EA EDX:000007C8 ESI:00000000 EDI:00000778 EBP:0000FFB4 ESP:0000FF98 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:1 OF:0 AF:1 PF:1 IF:1 TF:0 VM:0 FLG:00007206 CR0:00000010 0CDB:00000306 push bp 55 EAX:00000B40 EBX:000007C8 ECX:000004EA EDX:000007C8 ESI:00000000 EDI:00000778 EBP:0000FFB4 ESP:0000FF92 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:1 OF:0 AF:1 PF:1 IF:0 TF:0 VM:0 FLG:00007096 CR0:00000010 0CDB:00000307 mov bp,sp 8B EC EAX:00000B40 EBX:000007C8 ECX:000004EA EDX:000007C8 ESI:00000000 EDI:00000778 EBP:0000FFB4 ESP:0000FF90 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:1 OF:0 AF:1 PF:1 IF:0 TF:0 VM:0 FLG:00007096 CR0:00000010 0CDB:00000309 push ax 50 EAX:00000B40 EBX:000007C8 ECX:000004EA EDX:000007C8 ESI:00000000 EDI:00000778 EBP:0000FF90 ESP:0000FF90 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:1 OF:0 AF:1 PF:1 IF:0 TF:0 VM:0 FLG:00007096 CR0:00000010 0CDB:0000030A push si 56 EAX:00000B40 EBX:000007C8 ECX:000004EA EDX:000007C8 ESI:00000000 EDI:00000778 EBP:0000FF90 ESP:0000FF8E DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:1 OF:0 AF:1 PF:1 IF:0 TF:0 VM:0 FLG:00007096 CR0:00000010 0CDB:0000030B push ds 1E EAX:00000B40 EBX:000007C8 ECX:000004EA EDX:000007C8 ESI:00000000 EDI:00000778 EBP:0000FF90 ESP:0000FF8C DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:1 OF:0 AF:1 PF:1 IF:0 TF:0 VM:0 FLG:00007096 CR0:00000010 0CDB:0000030C test byte [bp+07],02 ss:[FF97]=7872 F6 46 07 02 EAX:00000B40 EBX:000007C8 ECX:000004EA EDX:000007C8 ESI:00000000 EDI:00000778 EBP:0000FF90 ESP:0000FF8A DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:1 OF:0 AF:1 PF:1 IF:0 TF:0 VM:0 FLG:00007096 CR0:00000010 0CDB:00000310 je 00000313 ($+1) (no jmp) 74 01 EAX:00000B40 EBX:000007C8 ECX:000004EA EDX:000007C8 ESI:00000000 EDI:00000778 EBP:0000FF90 ESP:0000FF8A DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:0 IF:0 TF:0 VM:0 FLG:00007096 CR0:00000010 0CDB:00000312 sti FB EAX:00000B40 EBX:000007C8 ECX:000004EA EDX:000007C8 ESI:00000000 EDI:00000778 EBP:0000FF90 ESP:0000FF8A DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:0 IF:0 TF:0 VM:0 FLG:00007096 CR0:00000010 0CDB:00000313 lds si,[bp+02] ss:[FF92]=0809 C5 76 02 EAX:00000B40 EBX:000007C8 ECX:000004EA EDX:000007C8 ESI:00000000 EDI:00000778 EBP:0000FF90 ESP:0000FF8A DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:0 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0CDB:00000316 call 000002F0 ($-29) E8 D7 FF EAX:00000B40 EBX:000007C8 ECX:000004EA EDX:000007C8 ESI:00000809 EDI:00000778 EBP:0000FF90 ESP:0000FF8A DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:0 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0CDB:000002F0 push bx 53 EAX:00000B40 EBX:000007C8 ECX:000004EA EDX:000007C8 ESI:00000809 EDI:00000778 EBP:0000FF90 ESP:0000FF88 DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:0 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0CDB:000002F1 mov al,ss:[02D7] ss:[02D7]=0000 36 A0 D7 02 EAX:00000B40 EBX:000007C8 ECX:000004EA EDX:000007C8 ESI:00000809 EDI:00000778 EBP:0000FF90 ESP:0000FF86 DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:0 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0CDB:000002F5 mov bx,ds 8C DB EAX:00000B00 EBX:000007C8 ECX:000004EA EDX:000007C8 ESI:00000809 EDI:00000778 EBP:0000FF90 ESP:0000FF86 DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:0 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0CDB:000002F7 and bl,F8 80 E3 F8 EAX:00000B00 EBX:00000824 ECX:000004EA EDX:000007C8 ESI:00000809 EDI:00000778 EBP:0000FF90 ESP:0000FF86 DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:0 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0CDB:000002FA push ds 1E EAX:00000B00 EBX:00000820 ECX:000004EA EDX:000007C8 ESI:00000809 EDI:00000778 EBP:0000FF90 ESP:0000FF86 DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:0 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0CDB:000002FB mov ds,ss:[02DA] ss:[02DA]=0000 36 8E 1E DA 02 EAX:00000B00 EBX:00000820 ECX:000004EA EDX:000007C8 ESI:00000809 EDI:00000778 EBP:0000FF90 ESP:0000FF84 DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:0 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0CDB:00000300 xor [bx+05],al ds:[0825]=0000 30 47 05 EAX:00000B00 EBX:00000820 ECX:000004EA EDX:000007C8 ESI:00000809 EDI:00000778 EBP:0000FF90 ESP:0000FF84 DS:0000 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:0 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0CDB:00000303 pop ds 1F EAX:00000B00 EBX:00000820 ECX:000004EA EDX:000007C8 ESI:00000809 EDI:00000778 EBP:0000FF90 ESP:0000FF84 DS:0000 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:1 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0CDB:00000304 pop bx 5B EAX:00000B00 EBX:00000820 ECX:000004EA EDX:000007C8 ESI:00000809 EDI:00000778 EBP:0000FF90 ESP:0000FF86 DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:1 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0CDB:00000305 ret C3 EAX:00000B00 EBX:000007C8 ECX:000004EA EDX:000007C8 ESI:00000809 EDI:00000778 EBP:0000FF90 ESP:0000FF88 DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:1 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0CDB:00000319 mov ax,[si-01] ds:[0808]=EE35 8B 44 FF EAX:00000B00 EBX:000007C8 ECX:000004EA EDX:000007C8 ESI:00000809 EDI:00000778 EBP:0000FF90 ESP:0000FF8A DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:1 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0CDB:0000031C sub al,34 2C 34 EAX:0000EE35 EBX:000007C8 ECX:000004EA EDX:000007C8 ESI:00000809 EDI:00000778 EBP:0000FF90 ESP:0000FF8A DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:1 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0CDB:0000031E cmp al,08 3C 08 EAX:0000EE01 EBX:000007C8 ECX:000004EA EDX:000007C8 ESI:00000809 EDI:00000778 EBP:0000FF90 ESP:0000FF8A DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:0 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0CDB:00000320 jnc 00000377 ($+55) (no jmp) 73 55 EAX:0000EE01 EBX:000007C8 ECX:000004EA EDX:000007C8 ESI:00000809 EDI:00000778 EBP:0000FF90 ESP:0000FF8A DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:1 ZF:0 SF:1 OF:0 AF:1 PF:1 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0CDB:00000322 cmp ax,E303 3D 03 E3 EAX:0000EE01 EBX:000007C8 ECX:000004EA EDX:000007C8 ESI:00000809 EDI:00000778 EBP:0000FF90 ESP:0000FF8A DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:1 ZF:0 SF:1 OF:0 AF:1 PF:1 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0CDB:00000325 je 0000034C ($+25) (no jmp) 74 25 EAX:0000EE01 EBX:000007C8 ECX:000004EA EDX:000007C8 ESI:00000809 EDI:00000778 EBP:0000FF90 ESP:0000FF8A DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:1 PF:0 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0CDB:00000327 cmp ax,E007 3D 07 E0 EAX:0000EE01 EBX:000007C8 ECX:000004EA EDX:000007C8 ESI:00000809 EDI:00000778 EBP:0000FF90 ESP:0000FF8A DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:1 PF:0 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0CDB:0000032A jne 0000033D ($+11) (down) 75 11 EAX:0000EE01 EBX:000007C8 ECX:000004EA EDX:000007C8 ESI:00000809 EDI:00000778 EBP:0000FF90 ESP:0000FF8A DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:1 PF:1 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0CDB:0000033D sub si,0002 83 EE 02 EAX:0000EE01 EBX:000007C8 ECX:000004EA EDX:000007C8 ESI:00000809 EDI:00000778 EBP:0000FF90 ESP:0000FF8A DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:1 PF:1 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0CDB:00000340 mov byte [si],9B ds:[0807]=35CD C6 04 9B EAX:0000EE01 EBX:000007C8 ECX:000004EA EDX:000007C8 ESI:00000807 EDI:00000778 EBP:0000FF90 ESP:0000FF8A DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0CDB:00000343 add byte [si+01],A4 ds:[0808]=EE35 80 44 01 A4 EAX:0000EE01 EBX:000007C8 ECX:000004EA EDX:000007C8 ESI:00000807 EDI:00000778 EBP:0000FF90 ESP:0000FF8A DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0CDB:00000347 mov [bp+02],si ss:[FF92]=0809 89 76 02 EAX:0000EE01 EBX:000007C8 ECX:000004EA EDX:000007C8 ESI:00000807 EDI:00000778 EBP:0000FF90 ESP:0000FF8A DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:1 OF:0 AF:0 PF:0 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0CDB:0000034A jmp short 0000039A ($+4e) (down) EB 4E EAX:0000EE01 EBX:000007C8 ECX:000004EA EDX:000007C8 ESI:00000807 EDI:00000778 EBP:0000FF90 ESP:0000FF8A DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:1 OF:0 AF:0 PF:0 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0CDB:0000039A call 000002F0 ($-ad) E8 53 FF EAX:0000EE01 EBX:000007C8 ECX:000004EA EDX:000007C8 ESI:00000807 EDI:00000778 EBP:0000FF90 ESP:0000FF8A DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:1 OF:0 AF:0 PF:0 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0CDB:000002F0 push bx 53 EAX:0000EE01 EBX:000007C8 ECX:000004EA EDX:000007C8 ESI:00000807 EDI:00000778 EBP:0000FF90 ESP:0000FF88 DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:1 OF:0 AF:0 PF:0 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0CDB:000002F1 mov al,ss:[02D7] ss:[02D7]=0000 36 A0 D7 02 EAX:0000EE01 EBX:000007C8 ECX:000004EA EDX:000007C8 ESI:00000807 EDI:00000778 EBP:0000FF90 ESP:0000FF86 DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:1 OF:0 AF:0 PF:0 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0CDB:000002F5 mov bx,ds 8C DB EAX:0000EE00 EBX:000007C8 ECX:000004EA EDX:000007C8 ESI:00000807 EDI:00000778 EBP:0000FF90 ESP:0000FF86 DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:1 OF:0 AF:0 PF:0 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0CDB:000002F7 and bl,F8 80 E3 F8 EAX:0000EE00 EBX:00000824 ECX:000004EA EDX:000007C8 ESI:00000807 EDI:00000778 EBP:0000FF90 ESP:0000FF86 DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:1 OF:0 AF:0 PF:0 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0CDB:000002FA push ds 1E EAX:0000EE00 EBX:00000820 ECX:000004EA EDX:000007C8 ESI:00000807 EDI:00000778 EBP:0000FF90 ESP:0000FF86 DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:0 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0CDB:000002FB mov ds,ss:[02DA] ss:[02DA]=0000 36 8E 1E DA 02 EAX:0000EE00 EBX:00000820 ECX:000004EA EDX:000007C8 ESI:00000807 EDI:00000778 EBP:0000FF90 ESP:0000FF84 DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:0 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0CDB:00000300 xor [bx+05],al ds:[0825]=0000 30 47 05 EAX:0000EE00 EBX:00000820 ECX:000004EA EDX:000007C8 ESI:00000807 EDI:00000778 EBP:0000FF90 ESP:0000FF84 DS:0000 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:0 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0CDB:00000303 pop ds 1F EAX:0000EE00 EBX:00000820 ECX:000004EA EDX:000007C8 ESI:00000807 EDI:00000778 EBP:0000FF90 ESP:0000FF84 DS:0000 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:1 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0CDB:00000304 pop bx 5B EAX:0000EE00 EBX:00000820 ECX:000004EA EDX:000007C8 ESI:00000807 EDI:00000778 EBP:0000FF90 ESP:0000FF86 DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:1 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0CDB:00000305 ret C3 EAX:0000EE00 EBX:000007C8 ECX:000004EA EDX:000007C8 ESI:00000807 EDI:00000778 EBP:0000FF90 ESP:0000FF88 DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:1 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0CDB:0000039D pop ds 1F EAX:0000EE00 EBX:000007C8 ECX:000004EA EDX:000007C8 ESI:00000807 EDI:00000778 EBP:0000FF90 ESP:0000FF8A DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:1 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0CDB:0000039E pop si 5E EAX:0000EE00 EBX:000007C8 ECX:000004EA EDX:000007C8 ESI:00000807 EDI:00000778 EBP:0000FF90 ESP:0000FF8C DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:1 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0CDB:0000039F pop ax 58 EAX:0000EE00 EBX:000007C8 ECX:000004EA EDX:000007C8 ESI:00000000 EDI:00000778 EBP:0000FF90 ESP:0000FF8E DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:1 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0CDB:000003A0 pop bp 5D EAX:00000B40 EBX:000007C8 ECX:000004EA EDX:000007C8 ESI:00000000 EDI:00000778 EBP:0000FF90 ESP:0000FF90 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:1 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0CDB:000003A1 iret CF EAX:00000B40 EBX:000007C8 ECX:000004EA EDX:000007C8 ESI:00000000 EDI:00000778 EBP:0000FFB4 ESP:0000FF92 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:1 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0824:00000807 fwait 9B EAX:00000B40 EBX:000007C8 ECX:000004EA EDX:000007C8 ESI:00000000 EDI:00000778 EBP:0000FFB4 ESP:0000FF98 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:1 OF:0 AF:1 PF:1 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0824:00000808 fldz D9 EE EAX:00000B40 EBX:000007C8 ECX:000004EA EDX:000007C8 ESI:00000000 EDI:00000778 EBP:0000FFB4 ESP:0000FF98 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:1 OF:0 AF:1 PF:1 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0824:0000080A int 37 CD 37 EAX:00000B40 EBX:000007C8 ECX:000004EA EDX:000007C8 ESI:00000000 EDI:00000778 EBP:0000FFB4 ESP:0000FF98 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:1 OF:0 AF:1 PF:1 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0CDB:00000306 push bp 55 EAX:00000B40 EBX:000007C8 ECX:000004EA EDX:000007C8 ESI:00000000 EDI:00000778 EBP:0000FFB4 ESP:0000FF92 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:1 OF:0 AF:1 PF:1 IF:0 TF:0 VM:0 FLG:00007096 CR0:00000010 0CDB:00000307 mov bp,sp 8B EC EAX:00000B40 EBX:000007C8 ECX:000004EA EDX:000007C8 ESI:00000000 EDI:00000778 EBP:0000FFB4 ESP:0000FF90 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:1 OF:0 AF:1 PF:1 IF:0 TF:0 VM:0 FLG:00007096 CR0:00000010 0CDB:00000309 push ax 50 EAX:00000B40 EBX:000007C8 ECX:000004EA EDX:000007C8 ESI:00000000 EDI:00000778 EBP:0000FF90 ESP:0000FF90 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:1 OF:0 AF:1 PF:1 IF:0 TF:0 VM:0 FLG:00007096 CR0:00000010 0CDB:0000030A push si 56 EAX:00000B40 EBX:000007C8 ECX:000004EA EDX:000007C8 ESI:00000000 EDI:00000778 EBP:0000FF90 ESP:0000FF8E DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:1 OF:0 AF:1 PF:1 IF:0 TF:0 VM:0 FLG:00007096 CR0:00000010 0CDB:0000030B push ds 1E EAX:00000B40 EBX:000007C8 ECX:000004EA EDX:000007C8 ESI:00000000 EDI:00000778 EBP:0000FF90 ESP:0000FF8C DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:1 OF:0 AF:1 PF:1 IF:0 TF:0 VM:0 FLG:00007096 CR0:00000010 0CDB:0000030C test byte [bp+07],02 ss:[FF97]=7872 F6 46 07 02 EAX:00000B40 EBX:000007C8 ECX:000004EA EDX:000007C8 ESI:00000000 EDI:00000778 EBP:0000FF90 ESP:0000FF8A DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:1 OF:0 AF:1 PF:1 IF:0 TF:0 VM:0 FLG:00007096 CR0:00000010 0CDB:00000310 je 00000313 ($+1) (no jmp) 74 01 EAX:00000B40 EBX:000007C8 ECX:000004EA EDX:000007C8 ESI:00000000 EDI:00000778 EBP:0000FF90 ESP:0000FF8A DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:0 IF:0 TF:0 VM:0 FLG:00007096 CR0:00000010 0CDB:00000312 sti FB EAX:00000B40 EBX:000007C8 ECX:000004EA EDX:000007C8 ESI:00000000 EDI:00000778 EBP:0000FF90 ESP:0000FF8A DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:0 IF:0 TF:0 VM:0 FLG:00007096 CR0:00000010 0CDB:00000313 lds si,[bp+02] ss:[FF92]=080C C5 76 02 EAX:00000B40 EBX:000007C8 ECX:000004EA EDX:000007C8 ESI:00000000 EDI:00000778 EBP:0000FF90 ESP:0000FF8A DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:0 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0CDB:00000316 call 000002F0 ($-29) E8 D7 FF EAX:00000B40 EBX:000007C8 ECX:000004EA EDX:000007C8 ESI:0000080C EDI:00000778 EBP:0000FF90 ESP:0000FF8A DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:0 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0CDB:000002F0 push bx 53 EAX:00000B40 EBX:000007C8 ECX:000004EA EDX:000007C8 ESI:0000080C EDI:00000778 EBP:0000FF90 ESP:0000FF88 DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:0 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0CDB:000002F1 mov al,ss:[02D7] ss:[02D7]=0000 36 A0 D7 02 EAX:00000B40 EBX:000007C8 ECX:000004EA EDX:000007C8 ESI:0000080C EDI:00000778 EBP:0000FF90 ESP:0000FF86 DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:0 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0CDB:000002F5 mov bx,ds 8C DB EAX:00000B00 EBX:000007C8 ECX:000004EA EDX:000007C8 ESI:0000080C EDI:00000778 EBP:0000FF90 ESP:0000FF86 DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:0 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0CDB:000002F7 and bl,F8 80 E3 F8 EAX:00000B00 EBX:00000824 ECX:000004EA EDX:000007C8 ESI:0000080C EDI:00000778 EBP:0000FF90 ESP:0000FF86 DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:0 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0CDB:000002FA push ds 1E EAX:00000B00 EBX:00000820 ECX:000004EA EDX:000007C8 ESI:0000080C EDI:00000778 EBP:0000FF90 ESP:0000FF86 DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:0 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0CDB:000002FB mov ds,ss:[02DA] ss:[02DA]=0000 36 8E 1E DA 02 EAX:00000B00 EBX:00000820 ECX:000004EA EDX:000007C8 ESI:0000080C EDI:00000778 EBP:0000FF90 ESP:0000FF84 DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:0 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0CDB:00000300 xor [bx+05],al ds:[0825]=0000 30 47 05 EAX:00000B00 EBX:00000820 ECX:000004EA EDX:000007C8 ESI:0000080C EDI:00000778 EBP:0000FF90 ESP:0000FF84 DS:0000 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:0 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0CDB:00000303 pop ds 1F EAX:00000B00 EBX:00000820 ECX:000004EA EDX:000007C8 ESI:0000080C EDI:00000778 EBP:0000FF90 ESP:0000FF84 DS:0000 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:1 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0CDB:00000304 pop bx 5B EAX:00000B00 EBX:00000820 ECX:000004EA EDX:000007C8 ESI:0000080C EDI:00000778 EBP:0000FF90 ESP:0000FF86 DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:1 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0CDB:00000305 ret C3 EAX:00000B00 EBX:000007C8 ECX:000004EA EDX:000007C8 ESI:0000080C EDI:00000778 EBP:0000FF90 ESP:0000FF88 DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:1 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0CDB:00000319 mov ax,[si-01] ds:[080B]=7E37 8B 44 FF EAX:00000B00 EBX:000007C8 ECX:000004EA EDX:000007C8 ESI:0000080C EDI:00000778 EBP:0000FF90 ESP:0000FF8A DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:1 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0CDB:0000031C sub al,34 2C 34 EAX:00007E37 EBX:000007C8 ECX:000004EA EDX:000007C8 ESI:0000080C EDI:00000778 EBP:0000FF90 ESP:0000FF8A DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:1 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0CDB:0000031E cmp al,08 3C 08 EAX:00007E03 EBX:000007C8 ECX:000004EA EDX:000007C8 ESI:0000080C EDI:00000778 EBP:0000FF90 ESP:0000FF8A DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0CDB:00000320 jnc 00000377 ($+55) (no jmp) 73 55 EAX:00007E03 EBX:000007C8 ECX:000004EA EDX:000007C8 ESI:0000080C EDI:00000778 EBP:0000FF90 ESP:0000FF8A DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:1 ZF:0 SF:1 OF:0 AF:1 PF:0 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0CDB:00000322 cmp ax,E303 3D 03 E3 EAX:00007E03 EBX:000007C8 ECX:000004EA EDX:000007C8 ESI:0000080C EDI:00000778 EBP:0000FF90 ESP:0000FF8A DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:1 ZF:0 SF:1 OF:0 AF:1 PF:0 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0CDB:00000325 je 0000034C ($+25) (no jmp) 74 25 EAX:00007E03 EBX:000007C8 ECX:000004EA EDX:000007C8 ESI:0000080C EDI:00000778 EBP:0000FF90 ESP:0000FF8A DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:1 ZF:0 SF:1 OF:1 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0CDB:00000327 cmp ax,E007 3D 07 E0 EAX:00007E03 EBX:000007C8 ECX:000004EA EDX:000007C8 ESI:0000080C EDI:00000778 EBP:0000FF90 ESP:0000FF8A DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:1 ZF:0 SF:1 OF:1 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0CDB:0000032A jne 0000033D ($+11) (down) 75 11 EAX:00007E03 EBX:000007C8 ECX:000004EA EDX:000007C8 ESI:0000080C EDI:00000778 EBP:0000FF90 ESP:0000FF8A DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:1 ZF:0 SF:1 OF:1 AF:1 PF:1 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0CDB:0000033D sub si,0002 83 EE 02 EAX:00007E03 EBX:000007C8 ECX:000004EA EDX:000007C8 ESI:0000080C EDI:00000778 EBP:0000FF90 ESP:0000FF8A DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:1 ZF:0 SF:1 OF:1 AF:1 PF:1 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0CDB:00000340 mov byte [si],9B ds:[080A]=37CD C6 04 9B EAX:00007E03 EBX:000007C8 ECX:000004EA EDX:000007C8 ESI:0000080A EDI:00000778 EBP:0000FF90 ESP:0000FF8A DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:0 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0CDB:00000343 add byte [si+01],A4 ds:[080B]=7E37 80 44 01 A4 EAX:00007E03 EBX:000007C8 ECX:000004EA EDX:000007C8 ESI:0000080A EDI:00000778 EBP:0000FF90 ESP:0000FF8A DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:0 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0CDB:00000347 mov [bp+02],si ss:[FF92]=080C 89 76 02 EAX:00007E03 EBX:000007C8 ECX:000004EA EDX:000007C8 ESI:0000080A EDI:00000778 EBP:0000FF90 ESP:0000FF8A DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:1 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0CDB:0000034A jmp short 0000039A ($+4e) (down) EB 4E EAX:00007E03 EBX:000007C8 ECX:000004EA EDX:000007C8 ESI:0000080A EDI:00000778 EBP:0000FF90 ESP:0000FF8A DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:1 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0CDB:0000039A call 000002F0 ($-ad) E8 53 FF EAX:00007E03 EBX:000007C8 ECX:000004EA EDX:000007C8 ESI:0000080A EDI:00000778 EBP:0000FF90 ESP:0000FF8A DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:1 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0CDB:000002F0 push bx 53 EAX:00007E03 EBX:000007C8 ECX:000004EA EDX:000007C8 ESI:0000080A EDI:00000778 EBP:0000FF90 ESP:0000FF88 DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:1 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0CDB:000002F1 mov al,ss:[02D7] ss:[02D7]=0000 36 A0 D7 02 EAX:00007E03 EBX:000007C8 ECX:000004EA EDX:000007C8 ESI:0000080A EDI:00000778 EBP:0000FF90 ESP:0000FF86 DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:1 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0CDB:000002F5 mov bx,ds 8C DB EAX:00007E00 EBX:000007C8 ECX:000004EA EDX:000007C8 ESI:0000080A EDI:00000778 EBP:0000FF90 ESP:0000FF86 DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:1 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0CDB:000002F7 and bl,F8 80 E3 F8 EAX:00007E00 EBX:00000824 ECX:000004EA EDX:000007C8 ESI:0000080A EDI:00000778 EBP:0000FF90 ESP:0000FF86 DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:1 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0CDB:000002FA push ds 1E EAX:00007E00 EBX:00000820 ECX:000004EA EDX:000007C8 ESI:0000080A EDI:00000778 EBP:0000FF90 ESP:0000FF86 DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:0 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0CDB:000002FB mov ds,ss:[02DA] ss:[02DA]=0000 36 8E 1E DA 02 EAX:00007E00 EBX:00000820 ECX:000004EA EDX:000007C8 ESI:0000080A EDI:00000778 EBP:0000FF90 ESP:0000FF84 DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:0 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0CDB:00000300 xor [bx+05],al ds:[0825]=0000 30 47 05 EAX:00007E00 EBX:00000820 ECX:000004EA EDX:000007C8 ESI:0000080A EDI:00000778 EBP:0000FF90 ESP:0000FF84 DS:0000 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:0 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0CDB:00000303 pop ds 1F EAX:00007E00 EBX:00000820 ECX:000004EA EDX:000007C8 ESI:0000080A EDI:00000778 EBP:0000FF90 ESP:0000FF84 DS:0000 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:1 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0CDB:00000304 pop bx 5B EAX:00007E00 EBX:00000820 ECX:000004EA EDX:000007C8 ESI:0000080A EDI:00000778 EBP:0000FF90 ESP:0000FF86 DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:1 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0CDB:00000305 ret C3 EAX:00007E00 EBX:000007C8 ECX:000004EA EDX:000007C8 ESI:0000080A EDI:00000778 EBP:0000FF90 ESP:0000FF88 DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:1 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0CDB:0000039D pop ds 1F EAX:00007E00 EBX:000007C8 ECX:000004EA EDX:000007C8 ESI:0000080A EDI:00000778 EBP:0000FF90 ESP:0000FF8A DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:1 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0CDB:0000039E pop si 5E EAX:00007E00 EBX:000007C8 ECX:000004EA EDX:000007C8 ESI:0000080A EDI:00000778 EBP:0000FF90 ESP:0000FF8C DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:1 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0CDB:0000039F pop ax 58 EAX:00007E00 EBX:000007C8 ECX:000004EA EDX:000007C8 ESI:00000000 EDI:00000778 EBP:0000FF90 ESP:0000FF8E DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:1 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0CDB:000003A0 pop bp 5D EAX:00000B40 EBX:000007C8 ECX:000004EA EDX:000007C8 ESI:00000000 EDI:00000778 EBP:0000FF90 ESP:0000FF90 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:1 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0CDB:000003A1 iret CF EAX:00000B40 EBX:000007C8 ECX:000004EA EDX:000007C8 ESI:00000000 EDI:00000778 EBP:0000FFB4 ESP:0000FF92 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:1 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0824:0000080A fwait 9B EAX:00000B40 EBX:000007C8 ECX:000004EA EDX:000007C8 ESI:00000000 EDI:00000778 EBP:0000FFB4 ESP:0000FF98 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:1 OF:0 AF:1 PF:1 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0824:0000080B fstpt [bp-18] ss:[FF9C]=F000 DB 7E E8 EAX:00000B40 EBX:000007C8 ECX:000004EA EDX:000007C8 ESI:00000000 EDI:00000778 EBP:0000FFB4 ESP:0000FF98 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:1 OF:0 AF:1 PF:1 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0824:0000080E int 3D CD 3D EAX:00000B40 EBX:000007C8 ECX:000004EA EDX:000007C8 ESI:00000000 EDI:00000778 EBP:0000FFB4 ESP:0000FF98 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:1 OF:0 AF:1 PF:1 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0CDB:00000306 push bp 55 EAX:00000B40 EBX:000007C8 ECX:000004EA EDX:000007C8 ESI:00000000 EDI:00000778 EBP:0000FFB4 ESP:0000FF92 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:1 OF:0 AF:1 PF:1 IF:0 TF:0 VM:0 FLG:00007096 CR0:00000010 0CDB:00000307 mov bp,sp 8B EC EAX:00000B40 EBX:000007C8 ECX:000004EA EDX:000007C8 ESI:00000000 EDI:00000778 EBP:0000FFB4 ESP:0000FF90 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:1 OF:0 AF:1 PF:1 IF:0 TF:0 VM:0 FLG:00007096 CR0:00000010 0CDB:00000309 push ax 50 EAX:00000B40 EBX:000007C8 ECX:000004EA EDX:000007C8 ESI:00000000 EDI:00000778 EBP:0000FF90 ESP:0000FF90 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:1 OF:0 AF:1 PF:1 IF:0 TF:0 VM:0 FLG:00007096 CR0:00000010 0CDB:0000030A push si 56 EAX:00000B40 EBX:000007C8 ECX:000004EA EDX:000007C8 ESI:00000000 EDI:00000778 EBP:0000FF90 ESP:0000FF8E DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:1 OF:0 AF:1 PF:1 IF:0 TF:0 VM:0 FLG:00007096 CR0:00000010 0CDB:0000030B push ds 1E EAX:00000B40 EBX:000007C8 ECX:000004EA EDX:000007C8 ESI:00000000 EDI:00000778 EBP:0000FF90 ESP:0000FF8C DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:1 OF:0 AF:1 PF:1 IF:0 TF:0 VM:0 FLG:00007096 CR0:00000010 0CDB:0000030C test byte [bp+07],02 ss:[FF97]=7872 F6 46 07 02 EAX:00000B40 EBX:000007C8 ECX:000004EA EDX:000007C8 ESI:00000000 EDI:00000778 EBP:0000FF90 ESP:0000FF8A DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:1 OF:0 AF:1 PF:1 IF:0 TF:0 VM:0 FLG:00007096 CR0:00000010 0CDB:00000310 je 00000313 ($+1) (no jmp) 74 01 EAX:00000B40 EBX:000007C8 ECX:000004EA EDX:000007C8 ESI:00000000 EDI:00000778 EBP:0000FF90 ESP:0000FF8A DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:0 IF:0 TF:0 VM:0 FLG:00007096 CR0:00000010 0CDB:00000312 sti FB EAX:00000B40 EBX:000007C8 ECX:000004EA EDX:000007C8 ESI:00000000 EDI:00000778 EBP:0000FF90 ESP:0000FF8A DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:0 IF:0 TF:0 VM:0 FLG:00007096 CR0:00000010 0CDB:00000313 lds si,[bp+02] ss:[FF92]=0810 C5 76 02 EAX:00000B40 EBX:000007C8 ECX:000004EA EDX:000007C8 ESI:00000000 EDI:00000778 EBP:0000FF90 ESP:0000FF8A DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:0 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0CDB:00000316 call 000002F0 ($-29) E8 D7 FF EAX:00000B40 EBX:000007C8 ECX:000004EA EDX:000007C8 ESI:00000810 EDI:00000778 EBP:0000FF90 ESP:0000FF8A DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:0 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0CDB:000002F0 push bx 53 EAX:00000B40 EBX:000007C8 ECX:000004EA EDX:000007C8 ESI:00000810 EDI:00000778 EBP:0000FF90 ESP:0000FF88 DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:0 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0CDB:000002F1 mov al,ss:[02D7] ss:[02D7]=0000 36 A0 D7 02 EAX:00000B40 EBX:000007C8 ECX:000004EA EDX:000007C8 ESI:00000810 EDI:00000778 EBP:0000FF90 ESP:0000FF86 DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:0 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0CDB:000002F5 mov bx,ds 8C DB EAX:00000B00 EBX:000007C8 ECX:000004EA EDX:000007C8 ESI:00000810 EDI:00000778 EBP:0000FF90 ESP:0000FF86 DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:0 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0CDB:000002F7 and bl,F8 80 E3 F8 EAX:00000B00 EBX:00000824 ECX:000004EA EDX:000007C8 ESI:00000810 EDI:00000778 EBP:0000FF90 ESP:0000FF86 DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:0 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0CDB:000002FA push ds 1E EAX:00000B00 EBX:00000820 ECX:000004EA EDX:000007C8 ESI:00000810 EDI:00000778 EBP:0000FF90 ESP:0000FF86 DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:0 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0CDB:000002FB mov ds,ss:[02DA] ss:[02DA]=0000 36 8E 1E DA 02 EAX:00000B00 EBX:00000820 ECX:000004EA EDX:000007C8 ESI:00000810 EDI:00000778 EBP:0000FF90 ESP:0000FF84 DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:0 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0CDB:00000300 xor [bx+05],al ds:[0825]=0000 30 47 05 EAX:00000B00 EBX:00000820 ECX:000004EA EDX:000007C8 ESI:00000810 EDI:00000778 EBP:0000FF90 ESP:0000FF84 DS:0000 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:0 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0CDB:00000303 pop ds 1F EAX:00000B00 EBX:00000820 ECX:000004EA EDX:000007C8 ESI:00000810 EDI:00000778 EBP:0000FF90 ESP:0000FF84 DS:0000 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:1 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0CDB:00000304 pop bx 5B EAX:00000B00 EBX:00000820 ECX:000004EA EDX:000007C8 ESI:00000810 EDI:00000778 EBP:0000FF90 ESP:0000FF86 DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:1 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0CDB:00000305 ret C3 EAX:00000B00 EBX:000007C8 ECX:000004EA EDX:000007C8 ESI:00000810 EDI:00000778 EBP:0000FF90 ESP:0000FF88 DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:1 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0CDB:00000319 mov ax,[si-01] ds:[080F]=BE3D 8B 44 FF EAX:00000B00 EBX:000007C8 ECX:000004EA EDX:000007C8 ESI:00000810 EDI:00000778 EBP:0000FF90 ESP:0000FF8A DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:1 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0CDB:0000031C sub al,34 2C 34 EAX:0000BE3D EBX:000007C8 ECX:000004EA EDX:000007C8 ESI:00000810 EDI:00000778 EBP:0000FF90 ESP:0000FF8A DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:1 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0CDB:0000031E cmp al,08 3C 08 EAX:0000BE09 EBX:000007C8 ECX:000004EA EDX:000007C8 ESI:00000810 EDI:00000778 EBP:0000FF90 ESP:0000FF8A DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0CDB:00000320 jnc 00000377 ($+55) (down) 73 55 EAX:0000BE09 EBX:000007C8 ECX:000004EA EDX:000007C8 ESI:00000810 EDI:00000778 EBP:0000FF90 ESP:0000FF8A DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:0 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0CDB:00000377 ja 000003A2 ($+29) (down) 77 29 EAX:0000BE09 EBX:000007C8 ECX:000004EA EDX:000007C8 ESI:00000810 EDI:00000778 EBP:0000FF90 ESP:0000FF8A DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:0 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0CDB:000003A2 cmp al,09 3C 09 EAX:0000BE09 EBX:000007C8 ECX:000004EA EDX:000007C8 ESI:00000810 EDI:00000778 EBP:0000FF90 ESP:0000FF8A DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:0 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0CDB:000003A4 ja 000003AF ($+9) (no jmp) 77 09 EAX:0000BE09 EBX:000007C8 ECX:000004EA EDX:000007C8 ESI:00000810 EDI:00000778 EBP:0000FF90 ESP:0000FF8A DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:1 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0CDB:000003A6 sub si,0002 83 EE 02 EAX:0000BE09 EBX:000007C8 ECX:000004EA EDX:000007C8 ESI:00000810 EDI:00000778 EBP:0000FF90 ESP:0000FF8A DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:1 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0CDB:000003A9 mov word [si],9B90 ds:[080E]=3DCD C7 04 90 9B EAX:0000BE09 EBX:000007C8 ECX:000004EA EDX:000007C8 ESI:0000080E EDI:00000778 EBP:0000FF90 ESP:0000FF8A DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:1 PF:1 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0CDB:000003AD jmp short 00000347 ($-68) (up) EB 98 EAX:0000BE09 EBX:000007C8 ECX:000004EA EDX:000007C8 ESI:0000080E EDI:00000778 EBP:0000FF90 ESP:0000FF8A DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:1 PF:1 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0CDB:00000347 mov [bp+02],si ss:[FF92]=0810 89 76 02 EAX:0000BE09 EBX:000007C8 ECX:000004EA EDX:000007C8 ESI:0000080E EDI:00000778 EBP:0000FF90 ESP:0000FF8A DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:1 PF:1 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0CDB:0000034A jmp short 0000039A ($+4e) (down) EB 4E EAX:0000BE09 EBX:000007C8 ECX:000004EA EDX:000007C8 ESI:0000080E EDI:00000778 EBP:0000FF90 ESP:0000FF8A DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:1 PF:1 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0CDB:0000039A call 000002F0 ($-ad) E8 53 FF EAX:0000BE09 EBX:000007C8 ECX:000004EA EDX:000007C8 ESI:0000080E EDI:00000778 EBP:0000FF90 ESP:0000FF8A DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:1 PF:1 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0CDB:000002F0 push bx 53 EAX:0000BE09 EBX:000007C8 ECX:000004EA EDX:000007C8 ESI:0000080E EDI:00000778 EBP:0000FF90 ESP:0000FF88 DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:1 PF:1 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0CDB:000002F1 mov al,ss:[02D7] ss:[02D7]=0000 36 A0 D7 02 EAX:0000BE09 EBX:000007C8 ECX:000004EA EDX:000007C8 ESI:0000080E EDI:00000778 EBP:0000FF90 ESP:0000FF86 DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:1 PF:1 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0CDB:000002F5 mov bx,ds 8C DB EAX:0000BE00 EBX:000007C8 ECX:000004EA EDX:000007C8 ESI:0000080E EDI:00000778 EBP:0000FF90 ESP:0000FF86 DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:1 PF:1 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0CDB:000002F7 and bl,F8 80 E3 F8 EAX:0000BE00 EBX:00000824 ECX:000004EA EDX:000007C8 ESI:0000080E EDI:00000778 EBP:0000FF90 ESP:0000FF86 DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:1 PF:1 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0CDB:000002FA push ds 1E EAX:0000BE00 EBX:00000820 ECX:000004EA EDX:000007C8 ESI:0000080E EDI:00000778 EBP:0000FF90 ESP:0000FF86 DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:0 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0CDB:000002FB mov ds,ss:[02DA] ss:[02DA]=0000 36 8E 1E DA 02 EAX:0000BE00 EBX:00000820 ECX:000004EA EDX:000007C8 ESI:0000080E EDI:00000778 EBP:0000FF90 ESP:0000FF84 DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:0 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0CDB:00000300 xor [bx+05],al ds:[0825]=0000 30 47 05 EAX:0000BE00 EBX:00000820 ECX:000004EA EDX:000007C8 ESI:0000080E EDI:00000778 EBP:0000FF90 ESP:0000FF84 DS:0000 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:0 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0CDB:00000303 pop ds 1F EAX:0000BE00 EBX:00000820 ECX:000004EA EDX:000007C8 ESI:0000080E EDI:00000778 EBP:0000FF90 ESP:0000FF84 DS:0000 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:1 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0CDB:00000304 pop bx 5B EAX:0000BE00 EBX:00000820 ECX:000004EA EDX:000007C8 ESI:0000080E EDI:00000778 EBP:0000FF90 ESP:0000FF86 DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:1 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0CDB:00000305 ret C3 EAX:0000BE00 EBX:000007C8 ECX:000004EA EDX:000007C8 ESI:0000080E EDI:00000778 EBP:0000FF90 ESP:0000FF88 DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:1 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0CDB:0000039D pop ds 1F EAX:0000BE00 EBX:000007C8 ECX:000004EA EDX:000007C8 ESI:0000080E EDI:00000778 EBP:0000FF90 ESP:0000FF8A DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:1 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0CDB:0000039E pop si 5E EAX:0000BE00 EBX:000007C8 ECX:000004EA EDX:000007C8 ESI:0000080E EDI:00000778 EBP:0000FF90 ESP:0000FF8C DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:1 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0CDB:0000039F pop ax 58 EAX:0000BE00 EBX:000007C8 ECX:000004EA EDX:000007C8 ESI:00000000 EDI:00000778 EBP:0000FF90 ESP:0000FF8E DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:1 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0CDB:000003A0 pop bp 5D EAX:00000B40 EBX:000007C8 ECX:000004EA EDX:000007C8 ESI:00000000 EDI:00000778 EBP:0000FF90 ESP:0000FF90 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:1 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0CDB:000003A1 iret CF EAX:00000B40 EBX:000007C8 ECX:000004EA EDX:000007C8 ESI:00000000 EDI:00000778 EBP:0000FFB4 ESP:0000FF92 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:1 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0824:0000080E nop 90 EAX:00000B40 EBX:000007C8 ECX:000004EA EDX:000007C8 ESI:00000000 EDI:00000778 EBP:0000FFB4 ESP:0000FF98 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:1 OF:0 AF:1 PF:1 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0824:0000080F fwait 9B EAX:00000B40 EBX:000007C8 ECX:000004EA EDX:000007C8 ESI:00000000 EDI:00000778 EBP:0000FFB4 ESP:0000FF98 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:1 OF:0 AF:1 PF:1 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0824:00000810 mov si,8000 BE 00 80 EAX:00000B40 EBX:000007C8 ECX:000004EA EDX:000007C8 ESI:00000000 EDI:00000778 EBP:0000FFB4 ESP:0000FF98 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:1 OF:0 AF:1 PF:1 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0824:00000813 mov di,FFFE BF FE FF EAX:00000B40 EBX:000007C8 ECX:000004EA EDX:000007C8 ESI:00008000 EDI:00000778 EBP:0000FFB4 ESP:0000FF98 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:1 OF:0 AF:1 PF:1 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0824:00000816 inc word [bp-0C] ss:[FFA8]=0000 FF 46 F4 EAX:00000B40 EBX:000007C8 ECX:000004EA EDX:000007C8 ESI:00008000 EDI:0000FFFE EBP:0000FFB4 ESP:0000FF98 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:1 OF:0 AF:1 PF:1 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0824:00000819 push word [bp+08] ss:[FFBC]=FFD8 FF 76 08 EAX:00000B40 EBX:000007C8 ECX:000004EA EDX:000007C8 ESI:00008000 EDI:0000FFFE EBP:0000FFB4 ESP:0000FF98 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:0 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0824:0000081C call near word [bp+04] ss:[FFB8]=0B40 FF 56 04 EAX:00000B40 EBX:000007C8 ECX:000004EA EDX:000007C8 ESI:00008000 EDI:0000FFFE EBP:0000FFB4 ESP:0000FF96 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:0 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0824:00000B40 push bp 55 EAX:00000B40 EBX:000007C8 ECX:000004EA EDX:000007C8 ESI:00008000 EDI:0000FFFE EBP:0000FFB4 ESP:0000FF94 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:0 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0824:00000B41 mov bp,sp 8B EC EAX:00000B40 EBX:000007C8 ECX:000004EA EDX:000007C8 ESI:00008000 EDI:0000FFFE EBP:0000FFB4 ESP:0000FF92 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:0 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0824:00000B43 push si 56 EAX:00000B40 EBX:000007C8 ECX:000004EA EDX:000007C8 ESI:00008000 EDI:0000FFFE EBP:0000FF92 ESP:0000FF92 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:0 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0824:00000B44 push di 57 EAX:00000B40 EBX:000007C8 ECX:000004EA EDX:000007C8 ESI:00008000 EDI:0000FFFE EBP:0000FF92 ESP:0000FF90 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:0 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0824:00000B45 mov di,[bp+04] ss:[FF96]=FFD8 8B 7E 04 EAX:00000B40 EBX:000007C8 ECX:000004EA EDX:000007C8 ESI:00008000 EDI:0000FFFE EBP:0000FF92 ESP:0000FF8E DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:0 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0824:00000B48 mov bx,[di] ds:[FFD8]=00AA 8B 1D EAX:00000B40 EBX:000007C8 ECX:000004EA EDX:000007C8 ESI:00008000 EDI:0000FFD8 EBP:0000FF92 ESP:0000FF8E DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:0 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0824:00000B4A inc word [di] ds:[FFD8]=00AA FF 05 EAX:00000B40 EBX:000000AA ECX:000004EA EDX:000007C8 ESI:00008000 EDI:0000FFD8 EBP:0000FF92 ESP:0000FF8E DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:0 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0824:00000B4C mov al,[bx] ds:[00AA]=3231 8A 07 EAX:00000B40 EBX:000000AA ECX:000004EA EDX:000007C8 ESI:00008000 EDI:0000FFD8 EBP:0000FF92 ESP:0000FF8E DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:0 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0824:00000B4E cbw 98 EAX:00000B31 EBX:000000AA ECX:000004EA EDX:000007C8 ESI:00008000 EDI:0000FFD8 EBP:0000FF92 ESP:0000FF8E DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:0 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0824:00000B4F mov dx,ax 8B D0 EAX:00000031 EBX:000000AA ECX:000004EA EDX:000007C8 ESI:00008000 EDI:0000FFD8 EBP:0000FF92 ESP:0000FF8E DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:0 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0824:00000B51 or ax,ax 0B C0 EAX:00000031 EBX:000000AA ECX:000004EA EDX:00000031 ESI:00008000 EDI:0000FFD8 EBP:0000FF92 ESP:0000FF8E DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:0 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0824:00000B53 jne 00000B5A ($+5) (down) 75 05 EAX:00000031 EBX:000000AA ECX:000004EA EDX:00000031 ESI:00008000 EDI:0000FFD8 EBP:0000FF92 ESP:0000FF8E DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:0 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0824:00000B5A mov ax,dx 8B C2 EAX:00000031 EBX:000000AA ECX:000004EA EDX:00000031 ESI:00008000 EDI:0000FFD8 EBP:0000FF92 ESP:0000FF8E DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:0 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0824:00000B5C pop di 5F EAX:00000031 EBX:000000AA ECX:000004EA EDX:00000031 ESI:00008000 EDI:0000FFD8 EBP:0000FF92 ESP:0000FF8E DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:0 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0824:00000B5D pop si 5E EAX:00000031 EBX:000000AA ECX:000004EA EDX:00000031 ESI:00008000 EDI:0000FFFE EBP:0000FF92 ESP:0000FF90 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:0 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0824:00000B5E pop bp 5D EAX:00000031 EBX:000000AA ECX:000004EA EDX:00000031 ESI:00008000 EDI:0000FFFE EBP:0000FF92 ESP:0000FF92 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:0 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0824:00000B5F ret C3 EAX:00000031 EBX:000000AA ECX:000004EA EDX:00000031 ESI:00008000 EDI:0000FFFE EBP:0000FFB4 ESP:0000FF94 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:0 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0824:0000081F pop cx 59 EAX:00000031 EBX:000000AA ECX:000004EA EDX:00000031 ESI:00008000 EDI:0000FFFE EBP:0000FFB4 ESP:0000FF96 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:0 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0824:00000820 or ax,ax 0B C0 EAX:00000031 EBX:000000AA ECX:0000FFD8 EDX:00000031 ESI:00008000 EDI:0000FFFE EBP:0000FFB4 ESP:0000FF98 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:0 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0824:00000822 jge 00000826 ($+2) (down) 7D 02 EAX:00000031 EBX:000000AA ECX:0000FFD8 EDX:00000031 ESI:00008000 EDI:0000FFFE EBP:0000FFB4 ESP:0000FF98 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:0 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0824:00000826 cbw 98 EAX:00000031 EBX:000000AA ECX:0000FFD8 EDX:00000031 ESI:00008000 EDI:0000FFFE EBP:0000FFB4 ESP:0000FF98 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:0 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0824:00000827 xchg bx,ax 93 EAX:00000031 EBX:000000AA ECX:0000FFD8 EDX:00000031 ESI:00008000 EDI:0000FFFE EBP:0000FFB4 ESP:0000FF98 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:0 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0824:00000828 test bl,80 F6 C3 80 EAX:000000AA EBX:00000031 ECX:0000FFD8 EDX:00000031 ESI:00008000 EDI:0000FFFE EBP:0000FFB4 ESP:0000FF98 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:0 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0824:0000082B jne 00000834 ($+7) (no jmp) 75 07 EAX:000000AA EBX:00000031 ECX:0000FFD8 EDX:00000031 ESI:00008000 EDI:0000FFFE EBP:0000FFB4 ESP:0000FF98 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:1 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0824:0000082D test byte [bx+03E3],01 ds:[0414]=0202 F6 87 E3 03 01 EAX:000000AA EBX:00000031 ECX:0000FFD8 EDX:00000031 ESI:00008000 EDI:0000FFFE EBP:0000FFB4 ESP:0000FF98 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:1 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0824:00000832 jne 00000816 ($-1e) (no jmp) 75 E2 EAX:000000AA EBX:00000031 ECX:0000FFD8 EDX:00000031 ESI:00008000 EDI:0000FFFE EBP:0000FFB4 ESP:0000FF98 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:1 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0824:00000834 xchg bx,ax 93 EAX:000000AA EBX:00000031 ECX:0000FFD8 EDX:00000031 ESI:00008000 EDI:0000FFFE EBP:0000FFB4 ESP:0000FF98 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:1 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0824:00000835 dec word [bp+0A] ss:[FFBE]=7FFF FF 4E 0A EAX:00000031 EBX:000000AA ECX:0000FFD8 EDX:00000031 ESI:00008000 EDI:0000FFFE EBP:0000FFB4 ESP:0000FF98 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:1 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0824:00000838 jl 0000089E ($+64) (no jmp) 7C 64 EAX:00000031 EBX:000000AA ECX:0000FFD8 EDX:00000031 ESI:00008000 EDI:0000FFFE EBP:0000FFB4 ESP:0000FF98 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:0 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0824:0000083A cmp al,2B 3C 2B EAX:00000031 EBX:000000AA ECX:0000FFD8 EDX:00000031 ESI:00008000 EDI:0000FFFE EBP:0000FFB4 ESP:0000FF98 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:0 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0824:0000083C je 00000845 ($+7) (no jmp) 74 07 EAX:00000031 EBX:000000AA ECX:0000FFD8 EDX:00000031 ESI:00008000 EDI:0000FFFE EBP:0000FFB4 ESP:0000FF98 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:1 PF:1 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0824:0000083E cmp al,2D 3C 2D EAX:00000031 EBX:000000AA ECX:0000FFD8 EDX:00000031 ESI:00008000 EDI:0000FFFE EBP:0000FFB4 ESP:0000FF98 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:1 PF:1 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0824:00000840 jne 00000873 ($+31) (down) 75 31 EAX:00000031 EBX:000000AA ECX:0000FFD8 EDX:00000031 ESI:00008000 EDI:0000FFFE EBP:0000FFB4 ESP:0000FF98 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:1 PF:0 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0824:00000873 mov byte [bp-06],00 ss:[FFAE]=0001 C6 46 FA 00 EAX:00000031 EBX:000000AA ECX:0000FFD8 EDX:00000031 ESI:00008000 EDI:0000FFFE EBP:0000FFB4 ESP:0000FF98 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:1 PF:0 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0824:00000877 cmp al,2E 3C 2E EAX:00000031 EBX:000000AA ECX:0000FFD8 EDX:00000031 ESI:00008000 EDI:0000FFFE EBP:0000FFB4 ESP:0000FF98 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:1 PF:0 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0824:00000879 je 000008AD ($+32) (no jmp) 74 32 EAX:00000031 EBX:000000AA ECX:0000FFD8 EDX:00000031 ESI:00008000 EDI:0000FFFE EBP:0000FFB4 ESP:0000FF98 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:1 PF:1 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0824:0000087B cmp al,39 3C 39 EAX:00000031 EBX:000000AA ECX:0000FFD8 EDX:00000031 ESI:00008000 EDI:0000FFFE EBP:0000FFB4 ESP:0000FF98 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:1 PF:1 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0824:0000087D ja 000008AA ($+2b) (no jmp) 77 2B EAX:00000031 EBX:000000AA ECX:0000FFD8 EDX:00000031 ESI:00008000 EDI:0000FFFE EBP:0000FFB4 ESP:0000FF98 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:1 ZF:0 SF:1 OF:0 AF:1 PF:0 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0824:0000087F cmp al,30 3C 30 EAX:00000031 EBX:000000AA ECX:0000FFD8 EDX:00000031 ESI:00008000 EDI:0000FFFE EBP:0000FFB4 ESP:0000FF98 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:1 ZF:0 SF:1 OF:0 AF:1 PF:0 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0824:00000881 jc 000008AA ($+27) (no jmp) 72 27 EAX:00000031 EBX:000000AA ECX:0000FFD8 EDX:00000031 ESI:00008000 EDI:0000FFFE EBP:0000FFB4 ESP:0000FF98 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:0 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0824:00000883 sub al,30 2C 30 EAX:00000031 EBX:000000AA ECX:0000FFD8 EDX:00000031 ESI:00008000 EDI:0000FFFE EBP:0000FFB4 ESP:0000FF98 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:0 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0824:00000885 cbw 98 EAX:00000001 EBX:000000AA ECX:0000FFD8 EDX:00000031 ESI:00008000 EDI:0000FFFE EBP:0000FFB4 ESP:0000FF98 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:0 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0824:00000886 inc di 47 EAX:00000001 EBX:000000AA ECX:0000FFD8 EDX:00000031 ESI:00008000 EDI:0000FFFE EBP:0000FFB4 ESP:0000FF98 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:0 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0824:00000887 jg 000008BD ($+34) (no jmp) 7F 34 EAX:00000001 EBX:000000AA ECX:0000FFD8 EDX:00000031 ESI:00008000 EDI:0000FFFF EBP:0000FFB4 ESP:0000FF98 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:1 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0824:00000889 mov [bp-18],al ss:[FF9C]=0000 88 46 E8 EAX:00000001 EBX:000000AA ECX:0000FFD8 EDX:00000031 ESI:00008000 EDI:0000FFFF EBP:0000FFB4 ESP:0000FF98 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:1 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0824:0000088C mov di,0001 BF 01 00 EAX:00000001 EBX:000000AA ECX:0000FFD8 EDX:00000031 ESI:00008000 EDI:0000FFFF EBP:0000FFB4 ESP:0000FF98 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:1 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0824:0000088F or al,al 0A C0 EAX:00000001 EBX:000000AA ECX:0000FFD8 EDX:00000031 ESI:00008000 EDI:00000001 EBP:0000FFB4 ESP:0000FF98 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:1 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0824:00000891 jne 00000848 ($-4b) (up) 75 B5 EAX:00000001 EBX:000000AA ECX:0000FFD8 EDX:00000031 ESI:00008000 EDI:00000001 EBP:0000FFB4 ESP:0000FF98 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:0 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0824:00000848 dec word [bp+0A] ss:[FFBE]=7FFE FF 4E 0A EAX:00000001 EBX:000000AA ECX:0000FFD8 EDX:00000031 ESI:00008000 EDI:00000001 EBP:0000FFB4 ESP:0000FF98 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:0 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0824:0000084B jl 0000089E ($+51) (no jmp) 7C 51 EAX:00000001 EBX:000000AA ECX:0000FFD8 EDX:00000031 ESI:00008000 EDI:00000001 EBP:0000FFB4 ESP:0000FF98 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:0 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0824:0000084D inc word [bp-0C] ss:[FFA8]=0001 FF 46 F4 EAX:00000001 EBX:000000AA ECX:0000FFD8 EDX:00000031 ESI:00008000 EDI:00000001 EBP:0000FFB4 ESP:0000FF98 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:0 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0824:00000850 push word [bp+08] ss:[FFBC]=FFD8 FF 76 08 EAX:00000001 EBX:000000AA ECX:0000FFD8 EDX:00000031 ESI:00008000 EDI:00000001 EBP:0000FFB4 ESP:0000FF98 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:0 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0824:00000853 call near word [bp+04] ss:[FFB8]=0B40 FF 56 04 EAX:00000001 EBX:000000AA ECX:0000FFD8 EDX:00000031 ESI:00008000 EDI:00000001 EBP:0000FFB4 ESP:0000FF96 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:0 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0824:00000B40 push bp 55 EAX:00000001 EBX:000000AA ECX:0000FFD8 EDX:00000031 ESI:00008000 EDI:00000001 EBP:0000FFB4 ESP:0000FF94 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:0 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0824:00000B41 mov bp,sp 8B EC EAX:00000001 EBX:000000AA ECX:0000FFD8 EDX:00000031 ESI:00008000 EDI:00000001 EBP:0000FFB4 ESP:0000FF92 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:0 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0824:00000B43 push si 56 EAX:00000001 EBX:000000AA ECX:0000FFD8 EDX:00000031 ESI:00008000 EDI:00000001 EBP:0000FF92 ESP:0000FF92 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:0 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0824:00000B44 push di 57 EAX:00000001 EBX:000000AA ECX:0000FFD8 EDX:00000031 ESI:00008000 EDI:00000001 EBP:0000FF92 ESP:0000FF90 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:0 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0824:00000B45 mov di,[bp+04] ss:[FF96]=FFD8 8B 7E 04 EAX:00000001 EBX:000000AA ECX:0000FFD8 EDX:00000031 ESI:00008000 EDI:00000001 EBP:0000FF92 ESP:0000FF8E DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:0 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0824:00000B48 mov bx,[di] ds:[FFD8]=00AB 8B 1D EAX:00000001 EBX:000000AA ECX:0000FFD8 EDX:00000031 ESI:00008000 EDI:0000FFD8 EBP:0000FF92 ESP:0000FF8E DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:0 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0824:00000B4A inc word [di] ds:[FFD8]=00AB FF 05 EAX:00000001 EBX:000000AB ECX:0000FFD8 EDX:00000031 ESI:00008000 EDI:0000FFD8 EBP:0000FF92 ESP:0000FF8E DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:0 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0824:00000B4C mov al,[bx] ds:[00AB]=3332 8A 07 EAX:00000001 EBX:000000AB ECX:0000FFD8 EDX:00000031 ESI:00008000 EDI:0000FFD8 EBP:0000FF92 ESP:0000FF8E DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0824:00000B4E cbw 98 EAX:00000032 EBX:000000AB ECX:0000FFD8 EDX:00000031 ESI:00008000 EDI:0000FFD8 EBP:0000FF92 ESP:0000FF8E DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0824:00000B4F mov dx,ax 8B D0 EAX:00000032 EBX:000000AB ECX:0000FFD8 EDX:00000031 ESI:00008000 EDI:0000FFD8 EBP:0000FF92 ESP:0000FF8E DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0824:00000B51 or ax,ax 0B C0 EAX:00000032 EBX:000000AB ECX:0000FFD8 EDX:00000032 ESI:00008000 EDI:0000FFD8 EBP:0000FF92 ESP:0000FF8E DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0824:00000B53 jne 00000B5A ($+5) (down) 75 05 EAX:00000032 EBX:000000AB ECX:0000FFD8 EDX:00000032 ESI:00008000 EDI:0000FFD8 EBP:0000FF92 ESP:0000FF8E DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:0 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0824:00000B5A mov ax,dx 8B C2 EAX:00000032 EBX:000000AB ECX:0000FFD8 EDX:00000032 ESI:00008000 EDI:0000FFD8 EBP:0000FF92 ESP:0000FF8E DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:0 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0824:00000B5C pop di 5F EAX:00000032 EBX:000000AB ECX:0000FFD8 EDX:00000032 ESI:00008000 EDI:0000FFD8 EBP:0000FF92 ESP:0000FF8E DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:0 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0824:00000B5D pop si 5E EAX:00000032 EBX:000000AB ECX:0000FFD8 EDX:00000032 ESI:00008000 EDI:00000001 EBP:0000FF92 ESP:0000FF90 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:0 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0824:00000B5E pop bp 5D EAX:00000032 EBX:000000AB ECX:0000FFD8 EDX:00000032 ESI:00008000 EDI:00000001 EBP:0000FF92 ESP:0000FF92 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:0 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0824:00000B5F ret C3 EAX:00000032 EBX:000000AB ECX:0000FFD8 EDX:00000032 ESI:00008000 EDI:00000001 EBP:0000FFB4 ESP:0000FF94 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:0 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0824:00000856 pop cx 59 EAX:00000032 EBX:000000AB ECX:0000FFD8 EDX:00000032 ESI:00008000 EDI:00000001 EBP:0000FFB4 ESP:0000FF96 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:0 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0824:00000857 cmp byte [bp-06],01 ss:[FFAE]=0000 80 7E FA 01 EAX:00000032 EBX:000000AB ECX:0000FFD8 EDX:00000032 ESI:00008000 EDI:00000001 EBP:0000FFB4 ESP:0000FF98 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:0 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0824:0000085B jne 00000873 ($+16) (down) 75 16 EAX:00000032 EBX:000000AB ECX:0000FFD8 EDX:00000032 ESI:00008000 EDI:00000001 EBP:0000FFB4 ESP:0000FF98 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:1 ZF:0 SF:1 OF:0 AF:1 PF:1 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0824:00000873 mov byte [bp-06],00 ss:[FFAE]=0000 C6 46 FA 00 EAX:00000032 EBX:000000AB ECX:0000FFD8 EDX:00000032 ESI:00008000 EDI:00000001 EBP:0000FFB4 ESP:0000FF98 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:1 ZF:0 SF:1 OF:0 AF:1 PF:1 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0824:00000877 cmp al,2E 3C 2E EAX:00000032 EBX:000000AB ECX:0000FFD8 EDX:00000032 ESI:00008000 EDI:00000001 EBP:0000FFB4 ESP:0000FF98 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:1 ZF:0 SF:1 OF:0 AF:1 PF:1 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0824:00000879 je 000008AD ($+32) (no jmp) 74 32 EAX:00000032 EBX:000000AB ECX:0000FFD8 EDX:00000032 ESI:00008000 EDI:00000001 EBP:0000FFB4 ESP:0000FF98 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:1 PF:0 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0824:0000087B cmp al,39 3C 39 EAX:00000032 EBX:000000AB ECX:0000FFD8 EDX:00000032 ESI:00008000 EDI:00000001 EBP:0000FFB4 ESP:0000FF98 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:1 PF:0 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0824:0000087D ja 000008AA ($+2b) (no jmp) 77 2B EAX:00000032 EBX:000000AB ECX:0000FFD8 EDX:00000032 ESI:00008000 EDI:00000001 EBP:0000FFB4 ESP:0000FF98 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:1 ZF:0 SF:1 OF:0 AF:1 PF:1 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0824:0000087F cmp al,30 3C 30 EAX:00000032 EBX:000000AB ECX:0000FFD8 EDX:00000032 ESI:00008000 EDI:00000001 EBP:0000FFB4 ESP:0000FF98 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:1 ZF:0 SF:1 OF:0 AF:1 PF:1 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0824:00000881 jc 000008AA ($+27) (no jmp) 72 27 EAX:00000032 EBX:000000AB ECX:0000FFD8 EDX:00000032 ESI:00008000 EDI:00000001 EBP:0000FFB4 ESP:0000FF98 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:0 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0824:00000883 sub al,30 2C 30 EAX:00000032 EBX:000000AB ECX:0000FFD8 EDX:00000032 ESI:00008000 EDI:00000001 EBP:0000FFB4 ESP:0000FF98 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:0 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0824:00000885 cbw 98 EAX:00000002 EBX:000000AB ECX:0000FFD8 EDX:00000032 ESI:00008000 EDI:00000001 EBP:0000FFB4 ESP:0000FF98 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:0 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0824:00000886 inc di 47 EAX:00000002 EBX:000000AB ECX:0000FFD8 EDX:00000032 ESI:00008000 EDI:00000001 EBP:0000FFB4 ESP:0000FF98 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:0 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0824:00000887 jg 000008BD ($+34) (down) 7F 34 EAX:00000002 EBX:000000AB ECX:0000FFD8 EDX:00000032 ESI:00008000 EDI:00000002 EBP:0000FFB4 ESP:0000FF98 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:0 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0824:000008BD cmp di,0005 83 FF 05 EAX:00000002 EBX:000000AB ECX:0000FFD8 EDX:00000032 ESI:00008000 EDI:00000002 EBP:0000FFB4 ESP:0000FF98 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:0 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0824:000008C0 ja 000008D6 ($+14) (no jmp) 77 14 EAX:00000002 EBX:000000AB ECX:0000FFD8 EDX:00000032 ESI:00008000 EDI:00000002 EBP:0000FFB4 ESP:0000FF98 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:1 ZF:0 SF:1 OF:0 AF:1 PF:0 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0824:000008C2 xchg bx,ax 93 EAX:00000002 EBX:000000AB ECX:0000FFD8 EDX:00000032 ESI:00008000 EDI:00000002 EBP:0000FFB4 ESP:0000FF98 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:1 ZF:0 SF:1 OF:0 AF:1 PF:0 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0824:000008C3 mov ax,000A B8 0A 00 EAX:000000AB EBX:00000002 ECX:0000FFD8 EDX:00000032 ESI:00008000 EDI:00000002 EBP:0000FFB4 ESP:0000FF98 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:1 ZF:0 SF:1 OF:0 AF:1 PF:0 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0824:000008C6 mul word [bp-18] ss:[FF9C]=0001 F7 66 E8 EAX:0000000A EBX:00000002 ECX:0000FFD8 EDX:00000032 ESI:00008000 EDI:00000002 EBP:0000FFB4 ESP:0000FF98 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:1 ZF:0 SF:1 OF:0 AF:1 PF:0 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0824:000008C9 add ax,bx 03 C3 EAX:0000000A EBX:00000002 ECX:0000FFD8 EDX:00000000 ESI:00008000 EDI:00000002 EBP:0000FFB4 ESP:0000FF98 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:1 OF:0 AF:1 PF:1 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0824:000008CB adc dl,dh 12 D6 EAX:0000000C EBX:00000002 ECX:0000FFD8 EDX:00000000 ESI:00008000 EDI:00000002 EBP:0000FFB4 ESP:0000FF98 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0824:000008CD mov [bp-18],ax ss:[FF9C]=0001 89 46 E8 EAX:0000000C EBX:00000002 ECX:0000FFD8 EDX:00000000 ESI:00008000 EDI:00000002 EBP:0000FFB4 ESP:0000FF98 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:1 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0824:000008D0 mov [bp-16],dx ss:[FF9E]=0000 89 56 EA EAX:0000000C EBX:00000002 ECX:0000FFD8 EDX:00000000 ESI:00008000 EDI:00000002 EBP:0000FFB4 ESP:0000FF98 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:1 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0824:000008D3 jmp 00000848 ($-8e) (up) E9 72 FF EAX:0000000C EBX:00000002 ECX:0000FFD8 EDX:00000000 ESI:00008000 EDI:00000002 EBP:0000FFB4 ESP:0000FF98 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:1 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0824:00000848 dec word [bp+0A] ss:[FFBE]=7FFD FF 4E 0A EAX:0000000C EBX:00000002 ECX:0000FFD8 EDX:00000000 ESI:00008000 EDI:00000002 EBP:0000FFB4 ESP:0000FF98 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:1 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0824:0000084B jl 0000089E ($+51) (no jmp) 7C 51 EAX:0000000C EBX:00000002 ECX:0000FFD8 EDX:00000000 ESI:00008000 EDI:00000002 EBP:0000FFB4 ESP:0000FF98 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0824:0000084D inc word [bp-0C] ss:[FFA8]=0002 FF 46 F4 EAX:0000000C EBX:00000002 ECX:0000FFD8 EDX:00000000 ESI:00008000 EDI:00000002 EBP:0000FFB4 ESP:0000FF98 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0824:00000850 push word [bp+08] ss:[FFBC]=FFD8 FF 76 08 EAX:0000000C EBX:00000002 ECX:0000FFD8 EDX:00000000 ESI:00008000 EDI:00000002 EBP:0000FFB4 ESP:0000FF98 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0824:00000853 call near word [bp+04] ss:[FFB8]=0B40 FF 56 04 EAX:0000000C EBX:00000002 ECX:0000FFD8 EDX:00000000 ESI:00008000 EDI:00000002 EBP:0000FFB4 ESP:0000FF96 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0824:00000B40 push bp 55 EAX:0000000C EBX:00000002 ECX:0000FFD8 EDX:00000000 ESI:00008000 EDI:00000002 EBP:0000FFB4 ESP:0000FF94 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0824:00000B41 mov bp,sp 8B EC EAX:0000000C EBX:00000002 ECX:0000FFD8 EDX:00000000 ESI:00008000 EDI:00000002 EBP:0000FFB4 ESP:0000FF92 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0824:00000B43 push si 56 EAX:0000000C EBX:00000002 ECX:0000FFD8 EDX:00000000 ESI:00008000 EDI:00000002 EBP:0000FF92 ESP:0000FF92 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0824:00000B44 push di 57 EAX:0000000C EBX:00000002 ECX:0000FFD8 EDX:00000000 ESI:00008000 EDI:00000002 EBP:0000FF92 ESP:0000FF90 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0824:00000B45 mov di,[bp+04] ss:[FF96]=FFD8 8B 7E 04 EAX:0000000C EBX:00000002 ECX:0000FFD8 EDX:00000000 ESI:00008000 EDI:00000002 EBP:0000FF92 ESP:0000FF8E DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0824:00000B48 mov bx,[di] ds:[FFD8]=00AC 8B 1D EAX:0000000C EBX:00000002 ECX:0000FFD8 EDX:00000000 ESI:00008000 EDI:0000FFD8 EBP:0000FF92 ESP:0000FF8E DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0824:00000B4A inc word [di] ds:[FFD8]=00AC FF 05 EAX:0000000C EBX:000000AC ECX:0000FFD8 EDX:00000000 ESI:00008000 EDI:0000FFD8 EBP:0000FF92 ESP:0000FF8E DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0824:00000B4C mov al,[bx] ds:[00AC]=0033 8A 07 EAX:0000000C EBX:000000AC ECX:0000FFD8 EDX:00000000 ESI:00008000 EDI:0000FFD8 EBP:0000FF92 ESP:0000FF8E DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:0 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0824:00000B4E cbw 98 EAX:00000033 EBX:000000AC ECX:0000FFD8 EDX:00000000 ESI:00008000 EDI:0000FFD8 EBP:0000FF92 ESP:0000FF8E DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:0 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0824:00000B4F mov dx,ax 8B D0 EAX:00000033 EBX:000000AC ECX:0000FFD8 EDX:00000000 ESI:00008000 EDI:0000FFD8 EBP:0000FF92 ESP:0000FF8E DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:0 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0824:00000B51 or ax,ax 0B C0 EAX:00000033 EBX:000000AC ECX:0000FFD8 EDX:00000033 ESI:00008000 EDI:0000FFD8 EBP:0000FF92 ESP:0000FF8E DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:0 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0824:00000B53 jne 00000B5A ($+5) (down) 75 05 EAX:00000033 EBX:000000AC ECX:0000FFD8 EDX:00000033 ESI:00008000 EDI:0000FFD8 EBP:0000FF92 ESP:0000FF8E DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0824:00000B5A mov ax,dx 8B C2 EAX:00000033 EBX:000000AC ECX:0000FFD8 EDX:00000033 ESI:00008000 EDI:0000FFD8 EBP:0000FF92 ESP:0000FF8E DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0824:00000B5C pop di 5F EAX:00000033 EBX:000000AC ECX:0000FFD8 EDX:00000033 ESI:00008000 EDI:0000FFD8 EBP:0000FF92 ESP:0000FF8E DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0824:00000B5D pop si 5E EAX:00000033 EBX:000000AC ECX:0000FFD8 EDX:00000033 ESI:00008000 EDI:00000002 EBP:0000FF92 ESP:0000FF90 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0824:00000B5E pop bp 5D EAX:00000033 EBX:000000AC ECX:0000FFD8 EDX:00000033 ESI:00008000 EDI:00000002 EBP:0000FF92 ESP:0000FF92 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0824:00000B5F ret C3 EAX:00000033 EBX:000000AC ECX:0000FFD8 EDX:00000033 ESI:00008000 EDI:00000002 EBP:0000FFB4 ESP:0000FF94 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0824:00000856 pop cx 59 EAX:00000033 EBX:000000AC ECX:0000FFD8 EDX:00000033 ESI:00008000 EDI:00000002 EBP:0000FFB4 ESP:0000FF96 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0824:00000857 cmp byte [bp-06],01 ss:[FFAE]=0000 80 7E FA 01 EAX:00000033 EBX:000000AC ECX:0000FFD8 EDX:00000033 ESI:00008000 EDI:00000002 EBP:0000FFB4 ESP:0000FF98 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0824:0000085B jne 00000873 ($+16) (down) 75 16 EAX:00000033 EBX:000000AC ECX:0000FFD8 EDX:00000033 ESI:00008000 EDI:00000002 EBP:0000FFB4 ESP:0000FF98 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:1 ZF:0 SF:1 OF:0 AF:1 PF:1 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0824:00000873 mov byte [bp-06],00 ss:[FFAE]=0000 C6 46 FA 00 EAX:00000033 EBX:000000AC ECX:0000FFD8 EDX:00000033 ESI:00008000 EDI:00000002 EBP:0000FFB4 ESP:0000FF98 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:1 ZF:0 SF:1 OF:0 AF:1 PF:1 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0824:00000877 cmp al,2E 3C 2E EAX:00000033 EBX:000000AC ECX:0000FFD8 EDX:00000033 ESI:00008000 EDI:00000002 EBP:0000FFB4 ESP:0000FF98 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:1 ZF:0 SF:1 OF:0 AF:1 PF:1 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0824:00000879 je 000008AD ($+32) (no jmp) 74 32 EAX:00000033 EBX:000000AC ECX:0000FFD8 EDX:00000033 ESI:00008000 EDI:00000002 EBP:0000FFB4 ESP:0000FF98 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:1 PF:1 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0824:0000087B cmp al,39 3C 39 EAX:00000033 EBX:000000AC ECX:0000FFD8 EDX:00000033 ESI:00008000 EDI:00000002 EBP:0000FFB4 ESP:0000FF98 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:1 PF:1 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0824:0000087D ja 000008AA ($+2b) (no jmp) 77 2B EAX:00000033 EBX:000000AC ECX:0000FFD8 EDX:00000033 ESI:00008000 EDI:00000002 EBP:0000FFB4 ESP:0000FF98 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:1 ZF:0 SF:1 OF:0 AF:1 PF:1 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0824:0000087F cmp al,30 3C 30 EAX:00000033 EBX:000000AC ECX:0000FFD8 EDX:00000033 ESI:00008000 EDI:00000002 EBP:0000FFB4 ESP:0000FF98 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:1 ZF:0 SF:1 OF:0 AF:1 PF:1 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0824:00000881 jc 000008AA ($+27) (no jmp) 72 27 EAX:00000033 EBX:000000AC ECX:0000FFD8 EDX:00000033 ESI:00008000 EDI:00000002 EBP:0000FFB4 ESP:0000FF98 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0824:00000883 sub al,30 2C 30 EAX:00000033 EBX:000000AC ECX:0000FFD8 EDX:00000033 ESI:00008000 EDI:00000002 EBP:0000FFB4 ESP:0000FF98 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0824:00000885 cbw 98 EAX:00000003 EBX:000000AC ECX:0000FFD8 EDX:00000033 ESI:00008000 EDI:00000002 EBP:0000FFB4 ESP:0000FF98 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0824:00000886 inc di 47 EAX:00000003 EBX:000000AC ECX:0000FFD8 EDX:00000033 ESI:00008000 EDI:00000002 EBP:0000FFB4 ESP:0000FF98 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0824:00000887 jg 000008BD ($+34) (down) 7F 34 EAX:00000003 EBX:000000AC ECX:0000FFD8 EDX:00000033 ESI:00008000 EDI:00000003 EBP:0000FFB4 ESP:0000FF98 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0824:000008BD cmp di,0005 83 FF 05 EAX:00000003 EBX:000000AC ECX:0000FFD8 EDX:00000033 ESI:00008000 EDI:00000003 EBP:0000FFB4 ESP:0000FF98 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0824:000008C0 ja 000008D6 ($+14) (no jmp) 77 14 EAX:00000003 EBX:000000AC ECX:0000FFD8 EDX:00000033 ESI:00008000 EDI:00000003 EBP:0000FFB4 ESP:0000FF98 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:1 ZF:0 SF:1 OF:0 AF:1 PF:0 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0824:000008C2 xchg bx,ax 93 EAX:00000003 EBX:000000AC ECX:0000FFD8 EDX:00000033 ESI:00008000 EDI:00000003 EBP:0000FFB4 ESP:0000FF98 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:1 ZF:0 SF:1 OF:0 AF:1 PF:0 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0824:000008C3 mov ax,000A B8 0A 00 EAX:000000AC EBX:00000003 ECX:0000FFD8 EDX:00000033 ESI:00008000 EDI:00000003 EBP:0000FFB4 ESP:0000FF98 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:1 ZF:0 SF:1 OF:0 AF:1 PF:0 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0824:000008C6 mul word [bp-18] ss:[FF9C]=000C F7 66 E8 EAX:0000000A EBX:00000003 ECX:0000FFD8 EDX:00000033 ESI:00008000 EDI:00000003 EBP:0000FFB4 ESP:0000FF98 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:1 ZF:0 SF:1 OF:0 AF:1 PF:0 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0824:000008C9 add ax,bx 03 C3 EAX:00000078 EBX:00000003 ECX:0000FFD8 EDX:00000000 ESI:00008000 EDI:00000003 EBP:0000FFB4 ESP:0000FF98 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:1 OF:0 AF:1 PF:1 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0824:000008CB adc dl,dh 12 D6 EAX:0000007B EBX:00000003 ECX:0000FFD8 EDX:00000000 ESI:00008000 EDI:00000003 EBP:0000FFB4 ESP:0000FF98 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0824:000008CD mov [bp-18],ax ss:[FF9C]=000C 89 46 E8 EAX:0000007B EBX:00000003 ECX:0000FFD8 EDX:00000000 ESI:00008000 EDI:00000003 EBP:0000FFB4 ESP:0000FF98 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:1 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0824:000008D0 mov [bp-16],dx ss:[FF9E]=0000 89 56 EA EAX:0000007B EBX:00000003 ECX:0000FFD8 EDX:00000000 ESI:00008000 EDI:00000003 EBP:0000FFB4 ESP:0000FF98 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:1 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0824:000008D3 jmp 00000848 ($-8e) (up) E9 72 FF EAX:0000007B EBX:00000003 ECX:0000FFD8 EDX:00000000 ESI:00008000 EDI:00000003 EBP:0000FFB4 ESP:0000FF98 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:1 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0824:00000848 dec word [bp+0A] ss:[FFBE]=7FFC FF 4E 0A EAX:0000007B EBX:00000003 ECX:0000FFD8 EDX:00000000 ESI:00008000 EDI:00000003 EBP:0000FFB4 ESP:0000FF98 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:1 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0824:0000084B jl 0000089E ($+51) (no jmp) 7C 51 EAX:0000007B EBX:00000003 ECX:0000FFD8 EDX:00000000 ESI:00008000 EDI:00000003 EBP:0000FFB4 ESP:0000FF98 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:0 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0824:0000084D inc word [bp-0C] ss:[FFA8]=0003 FF 46 F4 EAX:0000007B EBX:00000003 ECX:0000FFD8 EDX:00000000 ESI:00008000 EDI:00000003 EBP:0000FFB4 ESP:0000FF98 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:0 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0824:00000850 push word [bp+08] ss:[FFBC]=FFD8 FF 76 08 EAX:0000007B EBX:00000003 ECX:0000FFD8 EDX:00000000 ESI:00008000 EDI:00000003 EBP:0000FFB4 ESP:0000FF98 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:0 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0824:00000853 call near word [bp+04] ss:[FFB8]=0B40 FF 56 04 EAX:0000007B EBX:00000003 ECX:0000FFD8 EDX:00000000 ESI:00008000 EDI:00000003 EBP:0000FFB4 ESP:0000FF96 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:0 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0824:00000B40 push bp 55 EAX:0000007B EBX:00000003 ECX:0000FFD8 EDX:00000000 ESI:00008000 EDI:00000003 EBP:0000FFB4 ESP:0000FF94 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:0 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0824:00000B41 mov bp,sp 8B EC EAX:0000007B EBX:00000003 ECX:0000FFD8 EDX:00000000 ESI:00008000 EDI:00000003 EBP:0000FFB4 ESP:0000FF92 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:0 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0824:00000B43 push si 56 EAX:0000007B EBX:00000003 ECX:0000FFD8 EDX:00000000 ESI:00008000 EDI:00000003 EBP:0000FF92 ESP:0000FF92 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:0 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0824:00000B44 push di 57 EAX:0000007B EBX:00000003 ECX:0000FFD8 EDX:00000000 ESI:00008000 EDI:00000003 EBP:0000FF92 ESP:0000FF90 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:0 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0824:00000B45 mov di,[bp+04] ss:[FF96]=FFD8 8B 7E 04 EAX:0000007B EBX:00000003 ECX:0000FFD8 EDX:00000000 ESI:00008000 EDI:00000003 EBP:0000FF92 ESP:0000FF8E DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:0 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0824:00000B48 mov bx,[di] ds:[FFD8]=00AD 8B 1D EAX:0000007B EBX:00000003 ECX:0000FFD8 EDX:00000000 ESI:00008000 EDI:0000FFD8 EBP:0000FF92 ESP:0000FF8E DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:0 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0824:00000B4A inc word [di] ds:[FFD8]=00AD FF 05 EAX:0000007B EBX:000000AD ECX:0000FFD8 EDX:00000000 ESI:00008000 EDI:0000FFD8 EBP:0000FF92 ESP:0000FF8E DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:0 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0824:00000B4C mov al,[bx] ds:[00AD]=5400 8A 07 EAX:0000007B EBX:000000AD ECX:0000FFD8 EDX:00000000 ESI:00008000 EDI:0000FFD8 EBP:0000FF92 ESP:0000FF8E DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:0 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0824:00000B4E cbw 98 EAX:00000000 EBX:000000AD ECX:0000FFD8 EDX:00000000 ESI:00008000 EDI:0000FFD8 EBP:0000FF92 ESP:0000FF8E DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:0 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0824:00000B4F mov dx,ax 8B D0 EAX:00000000 EBX:000000AD ECX:0000FFD8 EDX:00000000 ESI:00008000 EDI:0000FFD8 EBP:0000FF92 ESP:0000FF8E DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:0 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0824:00000B51 or ax,ax 0B C0 EAX:00000000 EBX:000000AD ECX:0000FFD8 EDX:00000000 ESI:00008000 EDI:0000FFD8 EBP:0000FF92 ESP:0000FF8E DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:0 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0824:00000B53 jne 00000B5A ($+5) (no jmp) 75 05 EAX:00000000 EBX:000000AD ECX:0000FFD8 EDX:00000000 ESI:00008000 EDI:0000FFD8 EBP:0000FF92 ESP:0000FF8E DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:1 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0824:00000B55 mov ax,FFFF B8 FF FF EAX:00000000 EBX:000000AD ECX:0000FFD8 EDX:00000000 ESI:00008000 EDI:0000FFD8 EBP:0000FF92 ESP:0000FF8E DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:1 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0824:00000B58 jmp short 00000B5C ($+2) (down) EB 02 EAX:0000FFFF EBX:000000AD ECX:0000FFD8 EDX:00000000 ESI:00008000 EDI:0000FFD8 EBP:0000FF92 ESP:0000FF8E DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:1 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0824:00000B5C pop di 5F EAX:0000FFFF EBX:000000AD ECX:0000FFD8 EDX:00000000 ESI:00008000 EDI:0000FFD8 EBP:0000FF92 ESP:0000FF8E DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:1 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0824:00000B5D pop si 5E EAX:0000FFFF EBX:000000AD ECX:0000FFD8 EDX:00000000 ESI:00008000 EDI:00000003 EBP:0000FF92 ESP:0000FF90 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:1 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0824:00000B5E pop bp 5D EAX:0000FFFF EBX:000000AD ECX:0000FFD8 EDX:00000000 ESI:00008000 EDI:00000003 EBP:0000FF92 ESP:0000FF92 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:1 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0824:00000B5F ret C3 EAX:0000FFFF EBX:000000AD ECX:0000FFD8 EDX:00000000 ESI:00008000 EDI:00000003 EBP:0000FFB4 ESP:0000FF94 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:1 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0824:00000856 pop cx 59 EAX:0000FFFF EBX:000000AD ECX:0000FFD8 EDX:00000000 ESI:00008000 EDI:00000003 EBP:0000FFB4 ESP:0000FF96 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:1 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0824:00000857 cmp byte [bp-06],01 ss:[FFAE]=0000 80 7E FA 01 EAX:0000FFFF EBX:000000AD ECX:0000FFD8 EDX:00000000 ESI:00008000 EDI:00000003 EBP:0000FFB4 ESP:0000FF98 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:1 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0824:0000085B jne 00000873 ($+16) (down) 75 16 EAX:0000FFFF EBX:000000AD ECX:0000FFD8 EDX:00000000 ESI:00008000 EDI:00000003 EBP:0000FFB4 ESP:0000FF98 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:1 ZF:0 SF:1 OF:0 AF:1 PF:1 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0824:00000873 mov byte [bp-06],00 ss:[FFAE]=0000 C6 46 FA 00 EAX:0000FFFF EBX:000000AD ECX:0000FFD8 EDX:00000000 ESI:00008000 EDI:00000003 EBP:0000FFB4 ESP:0000FF98 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:1 ZF:0 SF:1 OF:0 AF:1 PF:1 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0824:00000877 cmp al,2E 3C 2E EAX:0000FFFF EBX:000000AD ECX:0000FFD8 EDX:00000000 ESI:00008000 EDI:00000003 EBP:0000FFB4 ESP:0000FF98 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:1 ZF:0 SF:1 OF:0 AF:1 PF:1 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0824:00000879 je 000008AD ($+32) (no jmp) 74 32 EAX:0000FFFF EBX:000000AD ECX:0000FFD8 EDX:00000000 ESI:00008000 EDI:00000003 EBP:0000FFB4 ESP:0000FF98 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:1 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0824:0000087B cmp al,39 3C 39 EAX:0000FFFF EBX:000000AD ECX:0000FFD8 EDX:00000000 ESI:00008000 EDI:00000003 EBP:0000FFB4 ESP:0000FF98 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:1 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0824:0000087D ja 000008AA ($+2b) (down) 77 2B EAX:0000FFFF EBX:000000AD ECX:0000FFD8 EDX:00000000 ESI:00008000 EDI:00000003 EBP:0000FFB4 ESP:0000FF98 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:1 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0824:000008AA jmp 0000092F ($+82) (down) E9 82 00 EAX:0000FFFF EBX:000000AD ECX:0000FFD8 EDX:00000000 ESI:00008000 EDI:00000003 EBP:0000FFB4 ESP:0000FF98 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:1 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0824:0000092F cmp di,FFFE 83 FF FE EAX:0000FFFF EBX:000000AD ECX:0000FFD8 EDX:00000000 ESI:00008000 EDI:00000003 EBP:0000FFB4 ESP:0000FF98 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:1 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0824:00000932 je 00000912 ($-22) (no jmp) 74 DE EAX:0000FFFF EBX:000000AD ECX:0000FFD8 EDX:00000000 ESI:00008000 EDI:00000003 EBP:0000FFB4 ESP:0000FF98 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:1 ZF:0 SF:0 OF:0 AF:1 PF:1 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0824:00000934 cmp si,8000 81 FE 00 80 EAX:0000FFFF EBX:000000AD ECX:0000FFD8 EDX:00000000 ESI:00008000 EDI:00000003 EBP:0000FFB4 ESP:0000FF98 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:1 ZF:0 SF:0 OF:0 AF:1 PF:1 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0824:00000938 jne 0000093C ($+2) (no jmp) 75 02 EAX:0000FFFF EBX:000000AD ECX:0000FFD8 EDX:00000000 ESI:00008000 EDI:00000003 EBP:0000FFB4 ESP:0000FF98 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:1 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0824:0000093A mov si,di 8B F7 EAX:0000FFFF EBX:000000AD ECX:0000FFD8 EDX:00000000 ESI:00008000 EDI:00000003 EBP:0000FFB4 ESP:0000FF98 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:1 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0824:0000093C mov [bp-04],di ss:[FFB0]=7246 89 7E FC EAX:0000FFFF EBX:000000AD ECX:0000FFD8 EDX:00000000 ESI:00000003 EDI:00000003 EBP:0000FFB4 ESP:0000FF98 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:1 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0824:0000093F mov [bp-02],si ss:[FFB2]=1145 89 76 FE EAX:0000FFFF EBX:000000AD ECX:0000FFD8 EDX:00000000 ESI:00000003 EDI:00000003 EBP:0000FFB4 ESP:0000FF98 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:1 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0824:00000942 sub di,di 2B FF EAX:0000FFFF EBX:000000AD ECX:0000FFD8 EDX:00000000 ESI:00000003 EDI:00000003 EBP:0000FFB4 ESP:0000FF98 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:1 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0824:00000944 cmp al,45 3C 45 EAX:0000FFFF EBX:000000AD ECX:0000FFD8 EDX:00000000 ESI:00000003 EDI:00000000 EBP:0000FFB4 ESP:0000FF98 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:1 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0824:00000946 je 0000094C ($+4) (no jmp) 74 04 EAX:0000FFFF EBX:000000AD ECX:0000FFD8 EDX:00000000 ESI:00000003 EDI:00000000 EBP:0000FFB4 ESP:0000FF98 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:1 OF:0 AF:0 PF:0 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0824:00000948 cmp al,65 3C 65 EAX:0000FFFF EBX:000000AD ECX:0000FFD8 EDX:00000000 ESI:00000003 EDI:00000000 EBP:0000FFB4 ESP:0000FF98 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:1 OF:0 AF:0 PF:0 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0824:0000094A jne 00000996 ($+4a) (down) 75 4A EAX:0000FFFF EBX:000000AD ECX:0000FFD8 EDX:00000000 ESI:00000003 EDI:00000000 EBP:0000FFB4 ESP:0000FF98 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:1 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0824:00000996 push word [bp+08] ss:[FFBC]=FFD8 FF 76 08 EAX:0000FFFF EBX:000000AD ECX:0000FFD8 EDX:00000000 ESI:00000003 EDI:00000000 EBP:0000FFB4 ESP:0000FF98 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:1 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0824:00000999 push ax 50 EAX:0000FFFF EBX:000000AD ECX:0000FFD8 EDX:00000000 ESI:00000003 EDI:00000000 EBP:0000FFB4 ESP:0000FF96 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:1 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0824:0000099A call near word [bp+06] ss:[FFBA]=0B60 FF 56 06 EAX:0000FFFF EBX:000000AD ECX:0000FFD8 EDX:00000000 ESI:00000003 EDI:00000000 EBP:0000FFB4 ESP:0000FF94 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:1 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0824:00000B60 push bp 55 EAX:0000FFFF EBX:000000AD ECX:0000FFD8 EDX:00000000 ESI:00000003 EDI:00000000 EBP:0000FFB4 ESP:0000FF92 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:1 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0824:00000B61 mov bp,sp 8B EC EAX:0000FFFF EBX:000000AD ECX:0000FFD8 EDX:00000000 ESI:00000003 EDI:00000000 EBP:0000FFB4 ESP:0000FF90 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:1 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0824:00000B63 push si 56 EAX:0000FFFF EBX:000000AD ECX:0000FFD8 EDX:00000000 ESI:00000003 EDI:00000000 EBP:0000FF90 ESP:0000FF90 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:1 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0824:00000B64 mov si,[bp+06] ss:[FF96]=FFD8 8B 76 06 EAX:0000FFFF EBX:000000AD ECX:0000FFD8 EDX:00000000 ESI:00000003 EDI:00000000 EBP:0000FF90 ESP:0000FF8E DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:1 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0824:00000B67 dec word [si] ds:[FFD8]=00AE FF 0C EAX:0000FFFF EBX:000000AD ECX:0000FFD8 EDX:00000000 ESI:0000FFD8 EDI:00000000 EBP:0000FF90 ESP:0000FF8E DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:1 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0824:00000B69 pop si 5E EAX:0000FFFF EBX:000000AD ECX:0000FFD8 EDX:00000000 ESI:0000FFD8 EDI:00000000 EBP:0000FF90 ESP:0000FF8E DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:0 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0824:00000B6A pop bp 5D EAX:0000FFFF EBX:000000AD ECX:0000FFD8 EDX:00000000 ESI:00000003 EDI:00000000 EBP:0000FF90 ESP:0000FF90 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:0 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0824:00000B6B ret C3 EAX:0000FFFF EBX:000000AD ECX:0000FFD8 EDX:00000000 ESI:00000003 EDI:00000000 EBP:0000FFB4 ESP:0000FF92 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:0 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0824:0000099D pop cx 59 EAX:0000FFFF EBX:000000AD ECX:0000FFD8 EDX:00000000 ESI:00000003 EDI:00000000 EBP:0000FFB4 ESP:0000FF94 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:0 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0824:0000099E pop cx 59 EAX:0000FFFF EBX:000000AD ECX:0000FFFF EDX:00000000 ESI:00000003 EDI:00000000 EBP:0000FFB4 ESP:0000FF96 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:0 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0824:0000099F dec word [bp-0C] ss:[FFA8]=0004 FF 4E F4 EAX:0000FFFF EBX:000000AD ECX:0000FFD8 EDX:00000000 ESI:00000003 EDI:00000000 EBP:0000FFB4 ESP:0000FF98 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:0 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0824:000009A2 test byte [bp-08],FF ss:[FFAC]=0000 F6 46 F8 FF EAX:0000FFFF EBX:000000AD ECX:0000FFD8 EDX:00000000 ESI:00000003 EDI:00000000 EBP:0000FFB4 ESP:0000FF98 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0824:000009A6 je 000009AD ($+5) (down) 74 05 EAX:0000FFFF EBX:000000AD ECX:0000FFD8 EDX:00000000 ESI:00000003 EDI:00000000 EBP:0000FFB4 ESP:0000FF98 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:1 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0824:000009AD mov bx,[bp-04] ss:[FFB0]=0003 8B 5E FC EAX:0000FFFF EBX:000000AD ECX:0000FFD8 EDX:00000000 ESI:00000003 EDI:00000000 EBP:0000FFB4 ESP:0000FF98 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:1 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0824:000009B0 or bx,bx 0B DB EAX:0000FFFF EBX:00000003 ECX:0000FFD8 EDX:00000000 ESI:00000003 EDI:00000000 EBP:0000FFB4 ESP:0000FF98 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:1 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0824:000009B2 jge 000009B9 ($+5) (down) 7D 05 EAX:0000FFFF EBX:00000003 ECX:0000FFD8 EDX:00000000 ESI:00000003 EDI:00000000 EBP:0000FFB4 ESP:0000FF98 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0824:000009B9 mov cx,[bp-02] ss:[FFB2]=0003 8B 4E FE EAX:0000FFFF EBX:00000003 ECX:0000FFD8 EDX:00000000 ESI:00000003 EDI:00000000 EBP:0000FFB4 ESP:0000FF98 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0824:000009BC mov ax,cx 8B C1 EAX:0000FFFF EBX:00000003 ECX:00000003 EDX:00000000 ESI:00000003 EDI:00000000 EBP:0000FFB4 ESP:0000FF98 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0824:000009BE add ax,di 03 C7 EAX:00000003 EBX:00000003 ECX:00000003 EDX:00000000 ESI:00000003 EDI:00000000 EBP:0000FFB4 ESP:0000FF98 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0824:000009C0 cmp byte [bp-09],01 ss:[FFAB]=0000 80 7E F7 01 EAX:00000003 EBX:00000003 ECX:00000003 EDX:00000000 ESI:00000003 EDI:00000000 EBP:0000FFB4 ESP:0000FF98 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0824:000009C4 je 000009D1 ($+b) (no jmp) 74 0B EAX:00000003 EBX:00000003 ECX:00000003 EDX:00000000 ESI:00000003 EDI:00000000 EBP:0000FFB4 ESP:0000FF98 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:1 ZF:0 SF:1 OF:0 AF:1 PF:1 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0824:000009C6 cmp byte [bp-09],FF ss:[FFAB]=0000 80 7E F7 FF EAX:00000003 EBX:00000003 ECX:00000003 EDX:00000000 ESI:00000003 EDI:00000000 EBP:0000FFB4 ESP:0000FF98 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:1 ZF:0 SF:1 OF:0 AF:1 PF:1 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0824:000009CA jne 000009F0 ($+24) (down) 75 24 EAX:00000003 EBX:00000003 ECX:00000003 EDX:00000000 ESI:00000003 EDI:00000000 EBP:0000FFB4 ESP:0000FF98 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:1 ZF:0 SF:0 OF:0 AF:1 PF:0 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0824:000009F0 mov ax,bx 8B C3 EAX:00000003 EBX:00000003 ECX:00000003 EDX:00000000 ESI:00000003 EDI:00000000 EBP:0000FFB4 ESP:0000FF98 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:1 ZF:0 SF:0 OF:0 AF:1 PF:0 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0824:000009F2 cmp bx,0012 83 FB 12 EAX:00000003 EBX:00000003 ECX:00000003 EDX:00000000 ESI:00000003 EDI:00000000 EBP:0000FFB4 ESP:0000FF98 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:1 ZF:0 SF:0 OF:0 AF:1 PF:0 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0824:000009F5 jbe 000009FA ($+3) (down) 76 03 EAX:00000003 EBX:00000003 ECX:00000003 EDX:00000000 ESI:00000003 EDI:00000000 EBP:0000FFB4 ESP:0000FF98 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:1 ZF:0 SF:1 OF:0 AF:0 PF:0 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0824:000009FA add ax,cx 03 C1 EAX:00000003 EBX:00000003 ECX:00000003 EDX:00000000 ESI:00000003 EDI:00000000 EBP:0000FFB4 ESP:0000FF98 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:1 ZF:0 SF:1 OF:0 AF:0 PF:0 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0824:000009FC sub cx,bx 2B CB EAX:00000006 EBX:00000003 ECX:00000003 EDX:00000000 ESI:00000003 EDI:00000000 EBP:0000FFB4 ESP:0000FF98 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0824:000009FE add di,cx 03 F9 EAX:00000006 EBX:00000003 ECX:00000000 EDX:00000000 ESI:00000003 EDI:00000000 EBP:0000FFB4 ESP:0000FF98 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:1 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0824:00000A00 int 3B CD 3B EAX:00000006 EBX:00000003 ECX:00000000 EDX:00000000 ESI:00000003 EDI:00000000 EBP:0000FFB4 ESP:0000FF98 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:1 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0CDB:00000306 push bp 55 EAX:00000006 EBX:00000003 ECX:00000000 EDX:00000000 ESI:00000003 EDI:00000000 EBP:0000FFB4 ESP:0000FF92 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:1 SF:0 OF:0 AF:0 PF:1 IF:0 TF:0 VM:0 FLG:00007046 CR0:00000010 0CDB:00000307 mov bp,sp 8B EC EAX:00000006 EBX:00000003 ECX:00000000 EDX:00000000 ESI:00000003 EDI:00000000 EBP:0000FFB4 ESP:0000FF90 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:1 SF:0 OF:0 AF:0 PF:1 IF:0 TF:0 VM:0 FLG:00007046 CR0:00000010 0CDB:00000309 push ax 50 EAX:00000006 EBX:00000003 ECX:00000000 EDX:00000000 ESI:00000003 EDI:00000000 EBP:0000FF90 ESP:0000FF90 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:1 SF:0 OF:0 AF:0 PF:1 IF:0 TF:0 VM:0 FLG:00007046 CR0:00000010 0CDB:0000030A push si 56 EAX:00000006 EBX:00000003 ECX:00000000 EDX:00000000 ESI:00000003 EDI:00000000 EBP:0000FF90 ESP:0000FF8E DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:1 SF:0 OF:0 AF:0 PF:1 IF:0 TF:0 VM:0 FLG:00007046 CR0:00000010 0CDB:0000030B push ds 1E EAX:00000006 EBX:00000003 ECX:00000000 EDX:00000000 ESI:00000003 EDI:00000000 EBP:0000FF90 ESP:0000FF8C DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:1 SF:0 OF:0 AF:0 PF:1 IF:0 TF:0 VM:0 FLG:00007046 CR0:00000010 0CDB:0000030C test byte [bp+07],02 ss:[FF97]=7872 F6 46 07 02 EAX:00000006 EBX:00000003 ECX:00000000 EDX:00000000 ESI:00000003 EDI:00000000 EBP:0000FF90 ESP:0000FF8A DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:1 SF:0 OF:0 AF:0 PF:1 IF:0 TF:0 VM:0 FLG:00007046 CR0:00000010 0CDB:00000310 je 00000313 ($+1) (no jmp) 74 01 EAX:00000006 EBX:00000003 ECX:00000000 EDX:00000000 ESI:00000003 EDI:00000000 EBP:0000FF90 ESP:0000FF8A DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:0 IF:0 TF:0 VM:0 FLG:00007046 CR0:00000010 0CDB:00000312 sti FB EAX:00000006 EBX:00000003 ECX:00000000 EDX:00000000 ESI:00000003 EDI:00000000 EBP:0000FF90 ESP:0000FF8A DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:0 IF:0 TF:0 VM:0 FLG:00007046 CR0:00000010 0CDB:00000313 lds si,[bp+02] ss:[FF92]=0A02 C5 76 02 EAX:00000006 EBX:00000003 ECX:00000000 EDX:00000000 ESI:00000003 EDI:00000000 EBP:0000FF90 ESP:0000FF8A DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:0 IF:1 TF:0 VM:0 FLG:00007246 CR0:00000010 0CDB:00000316 call 000002F0 ($-29) E8 D7 FF EAX:00000006 EBX:00000003 ECX:00000000 EDX:00000000 ESI:00000A02 EDI:00000000 EBP:0000FF90 ESP:0000FF8A DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:0 IF:1 TF:0 VM:0 FLG:00007246 CR0:00000010 0CDB:000002F0 push bx 53 EAX:00000006 EBX:00000003 ECX:00000000 EDX:00000000 ESI:00000A02 EDI:00000000 EBP:0000FF90 ESP:0000FF88 DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:0 IF:1 TF:0 VM:0 FLG:00007246 CR0:00000010 0CDB:000002F1 mov al,ss:[02D7] ss:[02D7]=0000 36 A0 D7 02 EAX:00000006 EBX:00000003 ECX:00000000 EDX:00000000 ESI:00000A02 EDI:00000000 EBP:0000FF90 ESP:0000FF86 DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:0 IF:1 TF:0 VM:0 FLG:00007246 CR0:00000010 0CDB:000002F5 mov bx,ds 8C DB EAX:00000000 EBX:00000003 ECX:00000000 EDX:00000000 ESI:00000A02 EDI:00000000 EBP:0000FF90 ESP:0000FF86 DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:0 IF:1 TF:0 VM:0 FLG:00007246 CR0:00000010 0CDB:000002F7 and bl,F8 80 E3 F8 EAX:00000000 EBX:00000824 ECX:00000000 EDX:00000000 ESI:00000A02 EDI:00000000 EBP:0000FF90 ESP:0000FF86 DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:0 IF:1 TF:0 VM:0 FLG:00007246 CR0:00000010 0CDB:000002FA push ds 1E EAX:00000000 EBX:00000820 ECX:00000000 EDX:00000000 ESI:00000A02 EDI:00000000 EBP:0000FF90 ESP:0000FF86 DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:0 IF:1 TF:0 VM:0 FLG:00007246 CR0:00000010 0CDB:000002FB mov ds,ss:[02DA] ss:[02DA]=0000 36 8E 1E DA 02 EAX:00000000 EBX:00000820 ECX:00000000 EDX:00000000 ESI:00000A02 EDI:00000000 EBP:0000FF90 ESP:0000FF84 DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:0 IF:1 TF:0 VM:0 FLG:00007246 CR0:00000010 0CDB:00000300 xor [bx+05],al ds:[0825]=0000 30 47 05 EAX:00000000 EBX:00000820 ECX:00000000 EDX:00000000 ESI:00000A02 EDI:00000000 EBP:0000FF90 ESP:0000FF84 DS:0000 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:0 IF:1 TF:0 VM:0 FLG:00007246 CR0:00000010 0CDB:00000303 pop ds 1F EAX:00000000 EBX:00000820 ECX:00000000 EDX:00000000 ESI:00000A02 EDI:00000000 EBP:0000FF90 ESP:0000FF84 DS:0000 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:1 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007246 CR0:00000010 0CDB:00000304 pop bx 5B EAX:00000000 EBX:00000820 ECX:00000000 EDX:00000000 ESI:00000A02 EDI:00000000 EBP:0000FF90 ESP:0000FF86 DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:1 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007246 CR0:00000010 0CDB:00000305 ret C3 EAX:00000000 EBX:00000003 ECX:00000000 EDX:00000000 ESI:00000A02 EDI:00000000 EBP:0000FF90 ESP:0000FF88 DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:1 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007246 CR0:00000010 0CDB:00000319 mov ax,[si-01] ds:[0A01]=6E3B 8B 44 FF EAX:00000000 EBX:00000003 ECX:00000000 EDX:00000000 ESI:00000A02 EDI:00000000 EBP:0000FF90 ESP:0000FF8A DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:1 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007246 CR0:00000010 0CDB:0000031C sub al,34 2C 34 EAX:00006E3B EBX:00000003 ECX:00000000 EDX:00000000 ESI:00000A02 EDI:00000000 EBP:0000FF90 ESP:0000FF8A DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:1 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007246 CR0:00000010 0CDB:0000031E cmp al,08 3C 08 EAX:00006E07 EBX:00000003 ECX:00000000 EDX:00000000 ESI:00000A02 EDI:00000000 EBP:0000FF90 ESP:0000FF8A DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:0 IF:1 TF:0 VM:0 FLG:00007246 CR0:00000010 0CDB:00000320 jnc 00000377 ($+55) (no jmp) 73 55 EAX:00006E07 EBX:00000003 ECX:00000000 EDX:00000000 ESI:00000A02 EDI:00000000 EBP:0000FF90 ESP:0000FF8A DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:1 ZF:0 SF:1 OF:0 AF:1 PF:1 IF:1 TF:0 VM:0 FLG:00007246 CR0:00000010 0CDB:00000322 cmp ax,E303 3D 03 E3 EAX:00006E07 EBX:00000003 ECX:00000000 EDX:00000000 ESI:00000A02 EDI:00000000 EBP:0000FF90 ESP:0000FF8A DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:1 ZF:0 SF:1 OF:0 AF:1 PF:1 IF:1 TF:0 VM:0 FLG:00007246 CR0:00000010 0CDB:00000325 je 0000034C ($+25) (no jmp) 74 25 EAX:00006E07 EBX:00000003 ECX:00000000 EDX:00000000 ESI:00000A02 EDI:00000000 EBP:0000FF90 ESP:0000FF8A DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:1 ZF:0 SF:1 OF:1 AF:0 PF:0 IF:1 TF:0 VM:0 FLG:00007246 CR0:00000010 0CDB:00000327 cmp ax,E007 3D 07 E0 EAX:00006E07 EBX:00000003 ECX:00000000 EDX:00000000 ESI:00000A02 EDI:00000000 EBP:0000FF90 ESP:0000FF8A DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:1 ZF:0 SF:1 OF:1 AF:0 PF:0 IF:1 TF:0 VM:0 FLG:00007246 CR0:00000010 0CDB:0000032A jne 0000033D ($+11) (down) 75 11 EAX:00006E07 EBX:00000003 ECX:00000000 EDX:00000000 ESI:00000A02 EDI:00000000 EBP:0000FF90 ESP:0000FF8A DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:1 ZF:0 SF:1 OF:1 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007246 CR0:00000010 0CDB:0000033D sub si,0002 83 EE 02 EAX:00006E07 EBX:00000003 ECX:00000000 EDX:00000000 ESI:00000A02 EDI:00000000 EBP:0000FF90 ESP:0000FF8A DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:1 ZF:0 SF:1 OF:1 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007246 CR0:00000010 0CDB:00000340 mov byte [si],9B ds:[0A00]=3BCD C6 04 9B EAX:00006E07 EBX:00000003 ECX:00000000 EDX:00000000 ESI:00000A00 EDI:00000000 EBP:0000FF90 ESP:0000FF8A DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007246 CR0:00000010 0CDB:00000343 add byte [si+01],A4 ds:[0A01]=6E3B 80 44 01 A4 EAX:00006E07 EBX:00000003 ECX:00000000 EDX:00000000 ESI:00000A00 EDI:00000000 EBP:0000FF90 ESP:0000FF8A DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007246 CR0:00000010 0CDB:00000347 mov [bp+02],si ss:[FF92]=0A02 89 76 02 EAX:00006E07 EBX:00000003 ECX:00000000 EDX:00000000 ESI:00000A00 EDI:00000000 EBP:0000FF90 ESP:0000FF8A DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:1 OF:0 AF:0 PF:0 IF:1 TF:0 VM:0 FLG:00007246 CR0:00000010 0CDB:0000034A jmp short 0000039A ($+4e) (down) EB 4E EAX:00006E07 EBX:00000003 ECX:00000000 EDX:00000000 ESI:00000A00 EDI:00000000 EBP:0000FF90 ESP:0000FF8A DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:1 OF:0 AF:0 PF:0 IF:1 TF:0 VM:0 FLG:00007246 CR0:00000010 0CDB:0000039A call 000002F0 ($-ad) E8 53 FF EAX:00006E07 EBX:00000003 ECX:00000000 EDX:00000000 ESI:00000A00 EDI:00000000 EBP:0000FF90 ESP:0000FF8A DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:1 OF:0 AF:0 PF:0 IF:1 TF:0 VM:0 FLG:00007246 CR0:00000010 0CDB:000002F0 push bx 53 EAX:00006E07 EBX:00000003 ECX:00000000 EDX:00000000 ESI:00000A00 EDI:00000000 EBP:0000FF90 ESP:0000FF88 DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:1 OF:0 AF:0 PF:0 IF:1 TF:0 VM:0 FLG:00007246 CR0:00000010 0CDB:000002F1 mov al,ss:[02D7] ss:[02D7]=0000 36 A0 D7 02 EAX:00006E07 EBX:00000003 ECX:00000000 EDX:00000000 ESI:00000A00 EDI:00000000 EBP:0000FF90 ESP:0000FF86 DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:1 OF:0 AF:0 PF:0 IF:1 TF:0 VM:0 FLG:00007246 CR0:00000010 0CDB:000002F5 mov bx,ds 8C DB EAX:00006E00 EBX:00000003 ECX:00000000 EDX:00000000 ESI:00000A00 EDI:00000000 EBP:0000FF90 ESP:0000FF86 DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:1 OF:0 AF:0 PF:0 IF:1 TF:0 VM:0 FLG:00007246 CR0:00000010 0CDB:000002F7 and bl,F8 80 E3 F8 EAX:00006E00 EBX:00000824 ECX:00000000 EDX:00000000 ESI:00000A00 EDI:00000000 EBP:0000FF90 ESP:0000FF86 DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:1 OF:0 AF:0 PF:0 IF:1 TF:0 VM:0 FLG:00007246 CR0:00000010 0CDB:000002FA push ds 1E EAX:00006E00 EBX:00000820 ECX:00000000 EDX:00000000 ESI:00000A00 EDI:00000000 EBP:0000FF90 ESP:0000FF86 DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:0 IF:1 TF:0 VM:0 FLG:00007246 CR0:00000010 0CDB:000002FB mov ds,ss:[02DA] ss:[02DA]=0000 36 8E 1E DA 02 EAX:00006E00 EBX:00000820 ECX:00000000 EDX:00000000 ESI:00000A00 EDI:00000000 EBP:0000FF90 ESP:0000FF84 DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:0 IF:1 TF:0 VM:0 FLG:00007246 CR0:00000010 0CDB:00000300 xor [bx+05],al ds:[0825]=0000 30 47 05 EAX:00006E00 EBX:00000820 ECX:00000000 EDX:00000000 ESI:00000A00 EDI:00000000 EBP:0000FF90 ESP:0000FF84 DS:0000 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:0 IF:1 TF:0 VM:0 FLG:00007246 CR0:00000010 0CDB:00000303 pop ds 1F EAX:00006E00 EBX:00000820 ECX:00000000 EDX:00000000 ESI:00000A00 EDI:00000000 EBP:0000FF90 ESP:0000FF84 DS:0000 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:1 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007246 CR0:00000010 0CDB:00000304 pop bx 5B EAX:00006E00 EBX:00000820 ECX:00000000 EDX:00000000 ESI:00000A00 EDI:00000000 EBP:0000FF90 ESP:0000FF86 DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:1 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007246 CR0:00000010 0CDB:00000305 ret C3 EAX:00006E00 EBX:00000003 ECX:00000000 EDX:00000000 ESI:00000A00 EDI:00000000 EBP:0000FF90 ESP:0000FF88 DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:1 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007246 CR0:00000010 0CDB:0000039D pop ds 1F EAX:00006E00 EBX:00000003 ECX:00000000 EDX:00000000 ESI:00000A00 EDI:00000000 EBP:0000FF90 ESP:0000FF8A DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:1 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007246 CR0:00000010 0CDB:0000039E pop si 5E EAX:00006E00 EBX:00000003 ECX:00000000 EDX:00000000 ESI:00000A00 EDI:00000000 EBP:0000FF90 ESP:0000FF8C DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:1 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007246 CR0:00000010 0CDB:0000039F pop ax 58 EAX:00006E00 EBX:00000003 ECX:00000000 EDX:00000000 ESI:00000003 EDI:00000000 EBP:0000FF90 ESP:0000FF8E DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:1 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007246 CR0:00000010 0CDB:000003A0 pop bp 5D EAX:00000006 EBX:00000003 ECX:00000000 EDX:00000000 ESI:00000003 EDI:00000000 EBP:0000FF90 ESP:0000FF90 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:1 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007246 CR0:00000010 0CDB:000003A1 iret CF EAX:00000006 EBX:00000003 ECX:00000000 EDX:00000000 ESI:00000003 EDI:00000000 EBP:0000FFB4 ESP:0000FF92 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:1 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007246 CR0:00000010 0824:00000A00 fwait 9B EAX:00000006 EBX:00000003 ECX:00000000 EDX:00000000 ESI:00000003 EDI:00000000 EBP:0000FFB4 ESP:0000FF98 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:1 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007246 CR0:00000010 0824:00000A01 fildq [bp-18] ss:[FF9C]=007B DF 6E E8 EAX:00000006 EBX:00000003 ECX:00000000 EDX:00000000 ESI:00000003 EDI:00000000 EBP:0000FFB4 ESP:0000FF98 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:1 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007246 CR0:00000010 0824:00000A04 mov ax,di 8B C7 EAX:00000006 EBX:00000003 ECX:00000000 EDX:00000000 ESI:00000003 EDI:00000000 EBP:0000FFB4 ESP:0000FF98 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:1 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007246 CR0:00000010 0824:00000A06 or ax,ax 0B C0 EAX:00000000 EBX:00000003 ECX:00000000 EDX:00000000 ESI:00000003 EDI:00000000 EBP:0000FFB4 ESP:0000FF98 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:1 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007246 CR0:00000010 0824:00000A08 je 00000A1F ($+15) (down) 74 15 EAX:00000000 EBX:00000003 ECX:00000000 EDX:00000000 ESI:00000003 EDI:00000000 EBP:0000FFB4 ESP:0000FF98 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:1 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007246 CR0:00000010 0824:00000A1F cmp byte [bp-05],00 ss:[FFAF]=0300 80 7E FB 00 EAX:00000000 EBX:00000003 ECX:00000000 EDX:00000000 ESI:00000003 EDI:00000000 EBP:0000FFB4 ESP:0000FF98 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:1 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007246 CR0:00000010 0824:00000A23 je 00000A28 ($+3) (down) 74 03 EAX:00000000 EBX:00000003 ECX:00000000 EDX:00000000 ESI:00000003 EDI:00000000 EBP:0000FFB4 ESP:0000FF98 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:1 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007246 CR0:00000010 0824:00000A28 mov di,[bp+0C] ss:[FFC0]=FFD2 8B 7E 0C EAX:00000000 EBX:00000003 ECX:00000000 EDX:00000000 ESI:00000003 EDI:00000000 EBP:0000FFB4 ESP:0000FF98 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:1 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007246 CR0:00000010 0824:00000A2B mov bx,[bp-0C] ss:[FFA8]=0003 8B 5E F4 EAX:00000000 EBX:00000003 ECX:00000000 EDX:00000000 ESI:00000003 EDI:0000FFD2 EBP:0000FFB4 ESP:0000FF98 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:1 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007246 CR0:00000010 0824:00000A2E add [di],bx ds:[FFD2]=0000 01 1D EAX:00000000 EBX:00000003 ECX:00000000 EDX:00000000 ESI:00000003 EDI:0000FFD2 EBP:0000FFB4 ESP:0000FF98 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:1 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007246 CR0:00000010 0824:00000A30 mov di,[bp+0E] ss:[FFC2]=FFD0 8B 7E 0E EAX:00000000 EBX:00000003 ECX:00000000 EDX:00000000 ESI:00000003 EDI:0000FFD2 EBP:0000FFB4 ESP:0000FF98 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007246 CR0:00000010 0824:00000A33 mov bx,[bp-0E] ss:[FFA6]=0001 8B 5E F2 EAX:00000000 EBX:00000003 ECX:00000000 EDX:00000000 ESI:00000003 EDI:0000FFD0 EBP:0000FFB4 ESP:0000FF98 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007246 CR0:00000010 0824:00000A36 mov [di],bx ds:[FFD0]=07C8 89 1D EAX:00000000 EBX:00000001 ECX:00000000 EDX:00000000 ESI:00000003 EDI:0000FFD0 EBP:0000FFB4 ESP:0000FF98 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007246 CR0:00000010 0824:00000A38 jmp short 00000AB7 ($+7d) (down) EB 7D EAX:00000000 EBX:00000001 ECX:00000000 EDX:00000000 ESI:00000003 EDI:0000FFD0 EBP:0000FFB4 ESP:0000FF98 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007246 CR0:00000010 0824:00000AB7 pop di 5F EAX:00000000 EBX:00000001 ECX:00000000 EDX:00000000 ESI:00000003 EDI:0000FFD0 EBP:0000FFB4 ESP:0000FF98 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007246 CR0:00000010 0824:00000AB8 pop si 5E EAX:00000000 EBX:00000001 ECX:00000000 EDX:00000000 ESI:00000003 EDI:00000778 EBP:0000FFB4 ESP:0000FF9A DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007246 CR0:00000010 0824:00000AB9 mov sp,bp 8B E5 EAX:00000000 EBX:00000001 ECX:00000000 EDX:00000000 ESI:00000000 EDI:00000778 EBP:0000FFB4 ESP:0000FF9C DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007246 CR0:00000010 0824:00000ABB pop bp 5D EAX:00000000 EBX:00000001 ECX:00000000 EDX:00000000 ESI:00000000 EDI:00000778 EBP:0000FFB4 ESP:0000FFB4 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007246 CR0:00000010 0824:00000ABC ret C3 EAX:00000000 EBX:00000001 ECX:00000000 EDX:00000000 ESI:00000000 EDI:00000778 EBP:0000FFD4 ESP:0000FFB6 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007246 CR0:00000010 0824:00000B96 add sp,000C 83 C4 0C EAX:00000000 EBX:00000001 ECX:00000000 EDX:00000000 ESI:00000000 EDI:00000778 EBP:0000FFD4 ESP:0000FFB8 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007246 CR0:00000010 0824:00000B99 int 37 CD 37 EAX:00000000 EBX:00000001 ECX:00000000 EDX:00000000 ESI:00000000 EDI:00000778 EBP:0000FFD4 ESP:0000FFC4 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:1 OF:0 AF:1 PF:0 IF:1 TF:0 VM:0 FLG:00007246 CR0:00000010 0CDB:00000306 push bp 55 EAX:00000000 EBX:00000001 ECX:00000000 EDX:00000000 ESI:00000000 EDI:00000778 EBP:0000FFD4 ESP:0000FFBE DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:1 OF:0 AF:1 PF:0 IF:0 TF:0 VM:0 FLG:00007092 CR0:00000010 0CDB:00000307 mov bp,sp 8B EC EAX:00000000 EBX:00000001 ECX:00000000 EDX:00000000 ESI:00000000 EDI:00000778 EBP:0000FFD4 ESP:0000FFBC DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:1 OF:0 AF:1 PF:0 IF:0 TF:0 VM:0 FLG:00007092 CR0:00000010 0CDB:00000309 push ax 50 EAX:00000000 EBX:00000001 ECX:00000000 EDX:00000000 ESI:00000000 EDI:00000778 EBP:0000FFBC ESP:0000FFBC DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:1 OF:0 AF:1 PF:0 IF:0 TF:0 VM:0 FLG:00007092 CR0:00000010 0CDB:0000030A push si 56 EAX:00000000 EBX:00000001 ECX:00000000 EDX:00000000 ESI:00000000 EDI:00000778 EBP:0000FFBC ESP:0000FFBA DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:1 OF:0 AF:1 PF:0 IF:0 TF:0 VM:0 FLG:00007092 CR0:00000010 0CDB:0000030B push ds 1E EAX:00000000 EBX:00000001 ECX:00000000 EDX:00000000 ESI:00000000 EDI:00000778 EBP:0000FFBC ESP:0000FFB8 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:1 OF:0 AF:1 PF:0 IF:0 TF:0 VM:0 FLG:00007092 CR0:00000010 0CDB:0000030C test byte [bp+07],02 ss:[FFC3]=AA72 F6 46 07 02 EAX:00000000 EBX:00000001 ECX:00000000 EDX:00000000 ESI:00000000 EDI:00000778 EBP:0000FFBC ESP:0000FFB6 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:1 OF:0 AF:1 PF:0 IF:0 TF:0 VM:0 FLG:00007092 CR0:00000010 0CDB:00000310 je 00000313 ($+1) (no jmp) 74 01 EAX:00000000 EBX:00000001 ECX:00000000 EDX:00000000 ESI:00000000 EDI:00000778 EBP:0000FFBC ESP:0000FFB6 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:0 IF:0 TF:0 VM:0 FLG:00007092 CR0:00000010 0CDB:00000312 sti FB EAX:00000000 EBX:00000001 ECX:00000000 EDX:00000000 ESI:00000000 EDI:00000778 EBP:0000FFBC ESP:0000FFB6 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:0 IF:0 TF:0 VM:0 FLG:00007092 CR0:00000010 0CDB:00000313 lds si,[bp+02] ss:[FFBE]=0B9B C5 76 02 EAX:00000000 EBX:00000001 ECX:00000000 EDX:00000000 ESI:00000000 EDI:00000778 EBP:0000FFBC ESP:0000FFB6 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:0 IF:1 TF:0 VM:0 FLG:00007292 CR0:00000010 0CDB:00000316 call 000002F0 ($-29) E8 D7 FF EAX:00000000 EBX:00000001 ECX:00000000 EDX:00000000 ESI:00000B9B EDI:00000778 EBP:0000FFBC ESP:0000FFB6 DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:0 IF:1 TF:0 VM:0 FLG:00007292 CR0:00000010 0CDB:000002F0 push bx 53 EAX:00000000 EBX:00000001 ECX:00000000 EDX:00000000 ESI:00000B9B EDI:00000778 EBP:0000FFBC ESP:0000FFB4 DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:0 IF:1 TF:0 VM:0 FLG:00007292 CR0:00000010 0CDB:000002F1 mov al,ss:[02D7] ss:[02D7]=0000 36 A0 D7 02 EAX:00000000 EBX:00000001 ECX:00000000 EDX:00000000 ESI:00000B9B EDI:00000778 EBP:0000FFBC ESP:0000FFB2 DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:0 IF:1 TF:0 VM:0 FLG:00007292 CR0:00000010 0CDB:000002F5 mov bx,ds 8C DB EAX:00000000 EBX:00000001 ECX:00000000 EDX:00000000 ESI:00000B9B EDI:00000778 EBP:0000FFBC ESP:0000FFB2 DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:0 IF:1 TF:0 VM:0 FLG:00007292 CR0:00000010 0CDB:000002F7 and bl,F8 80 E3 F8 EAX:00000000 EBX:00000824 ECX:00000000 EDX:00000000 ESI:00000B9B EDI:00000778 EBP:0000FFBC ESP:0000FFB2 DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:0 IF:1 TF:0 VM:0 FLG:00007292 CR0:00000010 0CDB:000002FA push ds 1E EAX:00000000 EBX:00000820 ECX:00000000 EDX:00000000 ESI:00000B9B EDI:00000778 EBP:0000FFBC ESP:0000FFB2 DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:0 IF:1 TF:0 VM:0 FLG:00007292 CR0:00000010 0CDB:000002FB mov ds,ss:[02DA] ss:[02DA]=0000 36 8E 1E DA 02 EAX:00000000 EBX:00000820 ECX:00000000 EDX:00000000 ESI:00000B9B EDI:00000778 EBP:0000FFBC ESP:0000FFB0 DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:0 IF:1 TF:0 VM:0 FLG:00007292 CR0:00000010 0CDB:00000300 xor [bx+05],al ds:[0825]=0000 30 47 05 EAX:00000000 EBX:00000820 ECX:00000000 EDX:00000000 ESI:00000B9B EDI:00000778 EBP:0000FFBC ESP:0000FFB0 DS:0000 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:0 IF:1 TF:0 VM:0 FLG:00007292 CR0:00000010 0CDB:00000303 pop ds 1F EAX:00000000 EBX:00000820 ECX:00000000 EDX:00000000 ESI:00000B9B EDI:00000778 EBP:0000FFBC ESP:0000FFB0 DS:0000 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:1 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007292 CR0:00000010 0CDB:00000304 pop bx 5B EAX:00000000 EBX:00000820 ECX:00000000 EDX:00000000 ESI:00000B9B EDI:00000778 EBP:0000FFBC ESP:0000FFB2 DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:1 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007292 CR0:00000010 0CDB:00000305 ret C3 EAX:00000000 EBX:00000001 ECX:00000000 EDX:00000000 ESI:00000B9B EDI:00000778 EBP:0000FFBC ESP:0000FFB4 DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:1 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007292 CR0:00000010 0CDB:00000319 mov ax,[si-01] ds:[0B9A]=7E37 8B 44 FF EAX:00000000 EBX:00000001 ECX:00000000 EDX:00000000 ESI:00000B9B EDI:00000778 EBP:0000FFBC ESP:0000FFB6 DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:1 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007292 CR0:00000010 0CDB:0000031C sub al,34 2C 34 EAX:00007E37 EBX:00000001 ECX:00000000 EDX:00000000 ESI:00000B9B EDI:00000778 EBP:0000FFBC ESP:0000FFB6 DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:1 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007292 CR0:00000010 0CDB:0000031E cmp al,08 3C 08 EAX:00007E03 EBX:00000001 ECX:00000000 EDX:00000000 ESI:00000B9B EDI:00000778 EBP:0000FFBC ESP:0000FFB6 DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007292 CR0:00000010 0CDB:00000320 jnc 00000377 ($+55) (no jmp) 73 55 EAX:00007E03 EBX:00000001 ECX:00000000 EDX:00000000 ESI:00000B9B EDI:00000778 EBP:0000FFBC ESP:0000FFB6 DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:1 ZF:0 SF:1 OF:0 AF:1 PF:0 IF:1 TF:0 VM:0 FLG:00007292 CR0:00000010 0CDB:00000322 cmp ax,E303 3D 03 E3 EAX:00007E03 EBX:00000001 ECX:00000000 EDX:00000000 ESI:00000B9B EDI:00000778 EBP:0000FFBC ESP:0000FFB6 DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:1 ZF:0 SF:1 OF:0 AF:1 PF:0 IF:1 TF:0 VM:0 FLG:00007292 CR0:00000010 0CDB:00000325 je 0000034C ($+25) (no jmp) 74 25 EAX:00007E03 EBX:00000001 ECX:00000000 EDX:00000000 ESI:00000B9B EDI:00000778 EBP:0000FFBC ESP:0000FFB6 DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:1 ZF:0 SF:1 OF:1 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007292 CR0:00000010 0CDB:00000327 cmp ax,E007 3D 07 E0 EAX:00007E03 EBX:00000001 ECX:00000000 EDX:00000000 ESI:00000B9B EDI:00000778 EBP:0000FFBC ESP:0000FFB6 DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:1 ZF:0 SF:1 OF:1 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007292 CR0:00000010 0CDB:0000032A jne 0000033D ($+11) (down) 75 11 EAX:00007E03 EBX:00000001 ECX:00000000 EDX:00000000 ESI:00000B9B EDI:00000778 EBP:0000FFBC ESP:0000FFB6 DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:1 ZF:0 SF:1 OF:1 AF:1 PF:1 IF:1 TF:0 VM:0 FLG:00007292 CR0:00000010 0CDB:0000033D sub si,0002 83 EE 02 EAX:00007E03 EBX:00000001 ECX:00000000 EDX:00000000 ESI:00000B9B EDI:00000778 EBP:0000FFBC ESP:0000FFB6 DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:1 ZF:0 SF:1 OF:1 AF:1 PF:1 IF:1 TF:0 VM:0 FLG:00007292 CR0:00000010 0CDB:00000340 mov byte [si],9B ds:[0B99]=37CD C6 04 9B EAX:00007E03 EBX:00000001 ECX:00000000 EDX:00000000 ESI:00000B99 EDI:00000778 EBP:0000FFBC ESP:0000FFB6 DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:0 IF:1 TF:0 VM:0 FLG:00007292 CR0:00000010 0CDB:00000343 add byte [si+01],A4 ds:[0B9A]=7E37 80 44 01 A4 EAX:00007E03 EBX:00000001 ECX:00000000 EDX:00000000 ESI:00000B99 EDI:00000778 EBP:0000FFBC ESP:0000FFB6 DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:0 IF:1 TF:0 VM:0 FLG:00007292 CR0:00000010 0CDB:00000347 mov [bp+02],si ss:[FFBE]=0B9B 89 76 02 EAX:00007E03 EBX:00000001 ECX:00000000 EDX:00000000 ESI:00000B99 EDI:00000778 EBP:0000FFBC ESP:0000FFB6 DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:1 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007292 CR0:00000010 0CDB:0000034A jmp short 0000039A ($+4e) (down) EB 4E EAX:00007E03 EBX:00000001 ECX:00000000 EDX:00000000 ESI:00000B99 EDI:00000778 EBP:0000FFBC ESP:0000FFB6 DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:1 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007292 CR0:00000010 0CDB:0000039A call 000002F0 ($-ad) E8 53 FF EAX:00007E03 EBX:00000001 ECX:00000000 EDX:00000000 ESI:00000B99 EDI:00000778 EBP:0000FFBC ESP:0000FFB6 DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:1 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007292 CR0:00000010 0CDB:000002F0 push bx 53 EAX:00007E03 EBX:00000001 ECX:00000000 EDX:00000000 ESI:00000B99 EDI:00000778 EBP:0000FFBC ESP:0000FFB4 DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:1 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007292 CR0:00000010 0CDB:000002F1 mov al,ss:[02D7] ss:[02D7]=0000 36 A0 D7 02 EAX:00007E03 EBX:00000001 ECX:00000000 EDX:00000000 ESI:00000B99 EDI:00000778 EBP:0000FFBC ESP:0000FFB2 DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:1 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007292 CR0:00000010 0CDB:000002F5 mov bx,ds 8C DB EAX:00007E00 EBX:00000001 ECX:00000000 EDX:00000000 ESI:00000B99 EDI:00000778 EBP:0000FFBC ESP:0000FFB2 DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:1 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007292 CR0:00000010 0CDB:000002F7 and bl,F8 80 E3 F8 EAX:00007E00 EBX:00000824 ECX:00000000 EDX:00000000 ESI:00000B99 EDI:00000778 EBP:0000FFBC ESP:0000FFB2 DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:1 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007292 CR0:00000010 0CDB:000002FA push ds 1E EAX:00007E00 EBX:00000820 ECX:00000000 EDX:00000000 ESI:00000B99 EDI:00000778 EBP:0000FFBC ESP:0000FFB2 DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:0 IF:1 TF:0 VM:0 FLG:00007292 CR0:00000010 0CDB:000002FB mov ds,ss:[02DA] ss:[02DA]=0000 36 8E 1E DA 02 EAX:00007E00 EBX:00000820 ECX:00000000 EDX:00000000 ESI:00000B99 EDI:00000778 EBP:0000FFBC ESP:0000FFB0 DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:0 IF:1 TF:0 VM:0 FLG:00007292 CR0:00000010 0CDB:00000300 xor [bx+05],al ds:[0825]=0000 30 47 05 EAX:00007E00 EBX:00000820 ECX:00000000 EDX:00000000 ESI:00000B99 EDI:00000778 EBP:0000FFBC ESP:0000FFB0 DS:0000 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:0 IF:1 TF:0 VM:0 FLG:00007292 CR0:00000010 0CDB:00000303 pop ds 1F EAX:00007E00 EBX:00000820 ECX:00000000 EDX:00000000 ESI:00000B99 EDI:00000778 EBP:0000FFBC ESP:0000FFB0 DS:0000 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:1 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007292 CR0:00000010 0CDB:00000304 pop bx 5B EAX:00007E00 EBX:00000820 ECX:00000000 EDX:00000000 ESI:00000B99 EDI:00000778 EBP:0000FFBC ESP:0000FFB2 DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:1 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007292 CR0:00000010 0CDB:00000305 ret C3 EAX:00007E00 EBX:00000001 ECX:00000000 EDX:00000000 ESI:00000B99 EDI:00000778 EBP:0000FFBC ESP:0000FFB4 DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:1 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007292 CR0:00000010 0CDB:0000039D pop ds 1F EAX:00007E00 EBX:00000001 ECX:00000000 EDX:00000000 ESI:00000B99 EDI:00000778 EBP:0000FFBC ESP:0000FFB6 DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:1 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007292 CR0:00000010 0CDB:0000039E pop si 5E EAX:00007E00 EBX:00000001 ECX:00000000 EDX:00000000 ESI:00000B99 EDI:00000778 EBP:0000FFBC ESP:0000FFB8 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:1 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007292 CR0:00000010 0CDB:0000039F pop ax 58 EAX:00007E00 EBX:00000001 ECX:00000000 EDX:00000000 ESI:00000000 EDI:00000778 EBP:0000FFBC ESP:0000FFBA DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:1 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007292 CR0:00000010 0CDB:000003A0 pop bp 5D EAX:00000000 EBX:00000001 ECX:00000000 EDX:00000000 ESI:00000000 EDI:00000778 EBP:0000FFBC ESP:0000FFBC DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:1 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007292 CR0:00000010 0CDB:000003A1 iret CF EAX:00000000 EBX:00000001 ECX:00000000 EDX:00000000 ESI:00000000 EDI:00000778 EBP:0000FFD4 ESP:0000FFBE DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:1 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007292 CR0:00000010 0824:00000B99 fwait 9B EAX:00000000 EBX:00000001 ECX:00000000 EDX:00000000 ESI:00000000 EDI:00000778 EBP:0000FFD4 ESP:0000FFC4 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:1 OF:0 AF:1 PF:0 IF:1 TF:0 VM:0 FLG:00007292 CR0:00000010 0824:00000B9A fstpt [bp-0E] ss:[FFC6]=0050 DB 7E F2 EAX:00000000 EBX:00000001 ECX:00000000 EDX:00000000 ESI:00000000 EDI:00000778 EBP:0000FFD4 ESP:0000FFC4 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:1 OF:0 AF:1 PF:0 IF:1 TF:0 VM:0 FLG:00007292 CR0:00000010 0824:00000B9D int 3D CD 3D EAX:00000000 EBX:00000001 ECX:00000000 EDX:00000000 ESI:00000000 EDI:00000778 EBP:0000FFD4 ESP:0000FFC4 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:1 OF:0 AF:1 PF:0 IF:1 TF:0 VM:0 FLG:00007292 CR0:00000010 0CDB:00000306 push bp 55 EAX:00000000 EBX:00000001 ECX:00000000 EDX:00000000 ESI:00000000 EDI:00000778 EBP:0000FFD4 ESP:0000FFBE DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:1 OF:0 AF:1 PF:0 IF:0 TF:0 VM:0 FLG:00007092 CR0:00000010 0CDB:00000307 mov bp,sp 8B EC EAX:00000000 EBX:00000001 ECX:00000000 EDX:00000000 ESI:00000000 EDI:00000778 EBP:0000FFD4 ESP:0000FFBC DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:1 OF:0 AF:1 PF:0 IF:0 TF:0 VM:0 FLG:00007092 CR0:00000010 0CDB:00000309 push ax 50 EAX:00000000 EBX:00000001 ECX:00000000 EDX:00000000 ESI:00000000 EDI:00000778 EBP:0000FFBC ESP:0000FFBC DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:1 OF:0 AF:1 PF:0 IF:0 TF:0 VM:0 FLG:00007092 CR0:00000010 0CDB:0000030A push si 56 EAX:00000000 EBX:00000001 ECX:00000000 EDX:00000000 ESI:00000000 EDI:00000778 EBP:0000FFBC ESP:0000FFBA DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:1 OF:0 AF:1 PF:0 IF:0 TF:0 VM:0 FLG:00007092 CR0:00000010 0CDB:0000030B push ds 1E EAX:00000000 EBX:00000001 ECX:00000000 EDX:00000000 ESI:00000000 EDI:00000778 EBP:0000FFBC ESP:0000FFB8 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:1 OF:0 AF:1 PF:0 IF:0 TF:0 VM:0 FLG:00007092 CR0:00000010 0CDB:0000030C test byte [bp+07],02 ss:[FFC3]=AA72 F6 46 07 02 EAX:00000000 EBX:00000001 ECX:00000000 EDX:00000000 ESI:00000000 EDI:00000778 EBP:0000FFBC ESP:0000FFB6 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:1 OF:0 AF:1 PF:0 IF:0 TF:0 VM:0 FLG:00007092 CR0:00000010 0CDB:00000310 je 00000313 ($+1) (no jmp) 74 01 EAX:00000000 EBX:00000001 ECX:00000000 EDX:00000000 ESI:00000000 EDI:00000778 EBP:0000FFBC ESP:0000FFB6 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:0 IF:0 TF:0 VM:0 FLG:00007092 CR0:00000010 0CDB:00000312 sti FB EAX:00000000 EBX:00000001 ECX:00000000 EDX:00000000 ESI:00000000 EDI:00000778 EBP:0000FFBC ESP:0000FFB6 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:0 IF:0 TF:0 VM:0 FLG:00007092 CR0:00000010 0CDB:00000313 lds si,[bp+02] ss:[FFBE]=0B9F C5 76 02 EAX:00000000 EBX:00000001 ECX:00000000 EDX:00000000 ESI:00000000 EDI:00000778 EBP:0000FFBC ESP:0000FFB6 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:0 IF:1 TF:0 VM:0 FLG:00007292 CR0:00000010 0CDB:00000316 call 000002F0 ($-29) E8 D7 FF EAX:00000000 EBX:00000001 ECX:00000000 EDX:00000000 ESI:00000B9F EDI:00000778 EBP:0000FFBC ESP:0000FFB6 DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:0 IF:1 TF:0 VM:0 FLG:00007292 CR0:00000010 0CDB:000002F0 push bx 53 EAX:00000000 EBX:00000001 ECX:00000000 EDX:00000000 ESI:00000B9F EDI:00000778 EBP:0000FFBC ESP:0000FFB4 DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:0 IF:1 TF:0 VM:0 FLG:00007292 CR0:00000010 0CDB:000002F1 mov al,ss:[02D7] ss:[02D7]=0000 36 A0 D7 02 EAX:00000000 EBX:00000001 ECX:00000000 EDX:00000000 ESI:00000B9F EDI:00000778 EBP:0000FFBC ESP:0000FFB2 DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:0 IF:1 TF:0 VM:0 FLG:00007292 CR0:00000010 0CDB:000002F5 mov bx,ds 8C DB EAX:00000000 EBX:00000001 ECX:00000000 EDX:00000000 ESI:00000B9F EDI:00000778 EBP:0000FFBC ESP:0000FFB2 DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:0 IF:1 TF:0 VM:0 FLG:00007292 CR0:00000010 0CDB:000002F7 and bl,F8 80 E3 F8 EAX:00000000 EBX:00000824 ECX:00000000 EDX:00000000 ESI:00000B9F EDI:00000778 EBP:0000FFBC ESP:0000FFB2 DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:0 IF:1 TF:0 VM:0 FLG:00007292 CR0:00000010 0CDB:000002FA push ds 1E EAX:00000000 EBX:00000820 ECX:00000000 EDX:00000000 ESI:00000B9F EDI:00000778 EBP:0000FFBC ESP:0000FFB2 DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:0 IF:1 TF:0 VM:0 FLG:00007292 CR0:00000010 0CDB:000002FB mov ds,ss:[02DA] ss:[02DA]=0000 36 8E 1E DA 02 EAX:00000000 EBX:00000820 ECX:00000000 EDX:00000000 ESI:00000B9F EDI:00000778 EBP:0000FFBC ESP:0000FFB0 DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:0 IF:1 TF:0 VM:0 FLG:00007292 CR0:00000010 0CDB:00000300 xor [bx+05],al ds:[0825]=0000 30 47 05 EAX:00000000 EBX:00000820 ECX:00000000 EDX:00000000 ESI:00000B9F EDI:00000778 EBP:0000FFBC ESP:0000FFB0 DS:0000 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:0 IF:1 TF:0 VM:0 FLG:00007292 CR0:00000010 0CDB:00000303 pop ds 1F EAX:00000000 EBX:00000820 ECX:00000000 EDX:00000000 ESI:00000B9F EDI:00000778 EBP:0000FFBC ESP:0000FFB0 DS:0000 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:1 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007292 CR0:00000010 0CDB:00000304 pop bx 5B EAX:00000000 EBX:00000820 ECX:00000000 EDX:00000000 ESI:00000B9F EDI:00000778 EBP:0000FFBC ESP:0000FFB2 DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:1 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007292 CR0:00000010 0CDB:00000305 ret C3 EAX:00000000 EBX:00000001 ECX:00000000 EDX:00000000 ESI:00000B9F EDI:00000778 EBP:0000FFBC ESP:0000FFB4 DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:1 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007292 CR0:00000010 0CDB:00000319 mov ax,[si-01] ds:[0B9E]=833D 8B 44 FF EAX:00000000 EBX:00000001 ECX:00000000 EDX:00000000 ESI:00000B9F EDI:00000778 EBP:0000FFBC ESP:0000FFB6 DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:1 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007292 CR0:00000010 0CDB:0000031C sub al,34 2C 34 EAX:0000833D EBX:00000001 ECX:00000000 EDX:00000000 ESI:00000B9F EDI:00000778 EBP:0000FFBC ESP:0000FFB6 DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:1 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007292 CR0:00000010 0CDB:0000031E cmp al,08 3C 08 EAX:00008309 EBX:00000001 ECX:00000000 EDX:00000000 ESI:00000B9F EDI:00000778 EBP:0000FFBC ESP:0000FFB6 DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007292 CR0:00000010 0CDB:00000320 jnc 00000377 ($+55) (down) 73 55 EAX:00008309 EBX:00000001 ECX:00000000 EDX:00000000 ESI:00000B9F EDI:00000778 EBP:0000FFBC ESP:0000FFB6 DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:0 IF:1 TF:0 VM:0 FLG:00007292 CR0:00000010 0CDB:00000377 ja 000003A2 ($+29) (down) 77 29 EAX:00008309 EBX:00000001 ECX:00000000 EDX:00000000 ESI:00000B9F EDI:00000778 EBP:0000FFBC ESP:0000FFB6 DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:0 IF:1 TF:0 VM:0 FLG:00007292 CR0:00000010 0CDB:000003A2 cmp al,09 3C 09 EAX:00008309 EBX:00000001 ECX:00000000 EDX:00000000 ESI:00000B9F EDI:00000778 EBP:0000FFBC ESP:0000FFB6 DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:0 IF:1 TF:0 VM:0 FLG:00007292 CR0:00000010 0CDB:000003A4 ja 000003AF ($+9) (no jmp) 77 09 EAX:00008309 EBX:00000001 ECX:00000000 EDX:00000000 ESI:00000B9F EDI:00000778 EBP:0000FFBC ESP:0000FFB6 DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:1 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007292 CR0:00000010 0CDB:000003A6 sub si,0002 83 EE 02 EAX:00008309 EBX:00000001 ECX:00000000 EDX:00000000 ESI:00000B9F EDI:00000778 EBP:0000FFBC ESP:0000FFB6 DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:1 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007292 CR0:00000010 0CDB:000003A9 mov word [si],9B90 ds:[0B9D]=3DCD C7 04 90 9B EAX:00008309 EBX:00000001 ECX:00000000 EDX:00000000 ESI:00000B9D EDI:00000778 EBP:0000FFBC ESP:0000FFB6 DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007292 CR0:00000010 0CDB:000003AD jmp short 00000347 ($-68) (up) EB 98 EAX:00008309 EBX:00000001 ECX:00000000 EDX:00000000 ESI:00000B9D EDI:00000778 EBP:0000FFBC ESP:0000FFB6 DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007292 CR0:00000010 0CDB:00000347 mov [bp+02],si ss:[FFBE]=0B9F 89 76 02 EAX:00008309 EBX:00000001 ECX:00000000 EDX:00000000 ESI:00000B9D EDI:00000778 EBP:0000FFBC ESP:0000FFB6 DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007292 CR0:00000010 0CDB:0000034A jmp short 0000039A ($+4e) (down) EB 4E EAX:00008309 EBX:00000001 ECX:00000000 EDX:00000000 ESI:00000B9D EDI:00000778 EBP:0000FFBC ESP:0000FFB6 DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007292 CR0:00000010 0CDB:0000039A call 000002F0 ($-ad) E8 53 FF EAX:00008309 EBX:00000001 ECX:00000000 EDX:00000000 ESI:00000B9D EDI:00000778 EBP:0000FFBC ESP:0000FFB6 DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007292 CR0:00000010 0CDB:000002F0 push bx 53 EAX:00008309 EBX:00000001 ECX:00000000 EDX:00000000 ESI:00000B9D EDI:00000778 EBP:0000FFBC ESP:0000FFB4 DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007292 CR0:00000010 0CDB:000002F1 mov al,ss:[02D7] ss:[02D7]=0000 36 A0 D7 02 EAX:00008309 EBX:00000001 ECX:00000000 EDX:00000000 ESI:00000B9D EDI:00000778 EBP:0000FFBC ESP:0000FFB2 DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007292 CR0:00000010 0CDB:000002F5 mov bx,ds 8C DB EAX:00008300 EBX:00000001 ECX:00000000 EDX:00000000 ESI:00000B9D EDI:00000778 EBP:0000FFBC ESP:0000FFB2 DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007292 CR0:00000010 0CDB:000002F7 and bl,F8 80 E3 F8 EAX:00008300 EBX:00000824 ECX:00000000 EDX:00000000 ESI:00000B9D EDI:00000778 EBP:0000FFBC ESP:0000FFB2 DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007292 CR0:00000010 0CDB:000002FA push ds 1E EAX:00008300 EBX:00000820 ECX:00000000 EDX:00000000 ESI:00000B9D EDI:00000778 EBP:0000FFBC ESP:0000FFB2 DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:0 IF:1 TF:0 VM:0 FLG:00007292 CR0:00000010 0CDB:000002FB mov ds,ss:[02DA] ss:[02DA]=0000 36 8E 1E DA 02 EAX:00008300 EBX:00000820 ECX:00000000 EDX:00000000 ESI:00000B9D EDI:00000778 EBP:0000FFBC ESP:0000FFB0 DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:0 IF:1 TF:0 VM:0 FLG:00007292 CR0:00000010 0CDB:00000300 xor [bx+05],al ds:[0825]=0000 30 47 05 EAX:00008300 EBX:00000820 ECX:00000000 EDX:00000000 ESI:00000B9D EDI:00000778 EBP:0000FFBC ESP:0000FFB0 DS:0000 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:0 IF:1 TF:0 VM:0 FLG:00007292 CR0:00000010 0CDB:00000303 pop ds 1F EAX:00008300 EBX:00000820 ECX:00000000 EDX:00000000 ESI:00000B9D EDI:00000778 EBP:0000FFBC ESP:0000FFB0 DS:0000 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:1 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007292 CR0:00000010 0CDB:00000304 pop bx 5B EAX:00008300 EBX:00000820 ECX:00000000 EDX:00000000 ESI:00000B9D EDI:00000778 EBP:0000FFBC ESP:0000FFB2 DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:1 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007292 CR0:00000010 0CDB:00000305 ret C3 EAX:00008300 EBX:00000001 ECX:00000000 EDX:00000000 ESI:00000B9D EDI:00000778 EBP:0000FFBC ESP:0000FFB4 DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:1 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007292 CR0:00000010 0CDB:0000039D pop ds 1F EAX:00008300 EBX:00000001 ECX:00000000 EDX:00000000 ESI:00000B9D EDI:00000778 EBP:0000FFBC ESP:0000FFB6 DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:1 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007292 CR0:00000010 0CDB:0000039E pop si 5E EAX:00008300 EBX:00000001 ECX:00000000 EDX:00000000 ESI:00000B9D EDI:00000778 EBP:0000FFBC ESP:0000FFB8 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:1 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007292 CR0:00000010 0CDB:0000039F pop ax 58 EAX:00008300 EBX:00000001 ECX:00000000 EDX:00000000 ESI:00000000 EDI:00000778 EBP:0000FFBC ESP:0000FFBA DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:1 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007292 CR0:00000010 0CDB:000003A0 pop bp 5D EAX:00000000 EBX:00000001 ECX:00000000 EDX:00000000 ESI:00000000 EDI:00000778 EBP:0000FFBC ESP:0000FFBC DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:1 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007292 CR0:00000010 0CDB:000003A1 iret CF EAX:00000000 EBX:00000001 ECX:00000000 EDX:00000000 ESI:00000000 EDI:00000778 EBP:0000FFD4 ESP:0000FFBE DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:1 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007292 CR0:00000010 0824:00000B9D nop 90 EAX:00000000 EBX:00000001 ECX:00000000 EDX:00000000 ESI:00000000 EDI:00000778 EBP:0000FFD4 ESP:0000FFC4 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:1 OF:0 AF:1 PF:0 IF:1 TF:0 VM:0 FLG:00007292 CR0:00000010 0824:00000B9E fwait 9B EAX:00000000 EBX:00000001 ECX:00000000 EDX:00000000 ESI:00000000 EDI:00000778 EBP:0000FFD4 ESP:0000FFC4 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:1 OF:0 AF:1 PF:0 IF:1 TF:0 VM:0 FLG:00007292 CR0:00000010 0824:00000B9F cmp word [bp-04],0000 ss:[FFD0]=0001 83 7E FC 00 EAX:00000000 EBX:00000001 ECX:00000000 EDX:00000000 ESI:00000000 EDI:00000778 EBP:0000FFD4 ESP:0000FFC4 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:1 OF:0 AF:1 PF:0 IF:1 TF:0 VM:0 FLG:00007292 CR0:00000010 0824:00000BA3 jg 00000BAD ($+8) (down) 7F 08 EAX:00000000 EBX:00000001 ECX:00000000 EDX:00000000 ESI:00000000 EDI:00000778 EBP:0000FFD4 ESP:0000FFC4 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:0 IF:1 TF:0 VM:0 FLG:00007292 CR0:00000010 0824:00000BAD cmp word [bp-04],0002 ss:[FFD0]=0001 83 7E FC 02 EAX:00000000 EBX:00000001 ECX:00000000 EDX:00000000 ESI:00000000 EDI:00000778 EBP:0000FFD4 ESP:0000FFC4 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:0 IF:1 TF:0 VM:0 FLG:00007292 CR0:00000010 0824:00000BB1 jne 00000BB9 ($+6) (down) 75 06 EAX:00000000 EBX:00000001 ECX:00000000 EDX:00000000 ESI:00000000 EDI:00000778 EBP:0000FFD4 ESP:0000FFC4 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:1 ZF:0 SF:1 OF:0 AF:1 PF:1 IF:1 TF:0 VM:0 FLG:00007292 CR0:00000010 0824:00000BB9 or si,si 0B F6 EAX:00000000 EBX:00000001 ECX:00000000 EDX:00000000 ESI:00000000 EDI:00000778 EBP:0000FFD4 ESP:0000FFC4 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:1 ZF:0 SF:1 OF:0 AF:1 PF:1 IF:1 TF:0 VM:0 FLG:00007292 CR0:00000010 0824:00000BBB je 00000BC2 ($+5) (down) 74 05 EAX:00000000 EBX:00000001 ECX:00000000 EDX:00000000 ESI:00000000 EDI:00000778 EBP:0000FFD4 ESP:0000FFC4 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:1 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007292 CR0:00000010 0824:00000BC2 int 37 CD 37 EAX:00000000 EBX:00000001 ECX:00000000 EDX:00000000 ESI:00000000 EDI:00000778 EBP:0000FFD4 ESP:0000FFC4 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:1 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007292 CR0:00000010 0CDB:00000306 push bp 55 EAX:00000000 EBX:00000001 ECX:00000000 EDX:00000000 ESI:00000000 EDI:00000778 EBP:0000FFD4 ESP:0000FFBE DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:1 SF:0 OF:0 AF:0 PF:1 IF:0 TF:0 VM:0 FLG:00007046 CR0:00000010 0CDB:00000307 mov bp,sp 8B EC EAX:00000000 EBX:00000001 ECX:00000000 EDX:00000000 ESI:00000000 EDI:00000778 EBP:0000FFD4 ESP:0000FFBC DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:1 SF:0 OF:0 AF:0 PF:1 IF:0 TF:0 VM:0 FLG:00007046 CR0:00000010 0CDB:00000309 push ax 50 EAX:00000000 EBX:00000001 ECX:00000000 EDX:00000000 ESI:00000000 EDI:00000778 EBP:0000FFBC ESP:0000FFBC DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:1 SF:0 OF:0 AF:0 PF:1 IF:0 TF:0 VM:0 FLG:00007046 CR0:00000010 0CDB:0000030A push si 56 EAX:00000000 EBX:00000001 ECX:00000000 EDX:00000000 ESI:00000000 EDI:00000778 EBP:0000FFBC ESP:0000FFBA DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:1 SF:0 OF:0 AF:0 PF:1 IF:0 TF:0 VM:0 FLG:00007046 CR0:00000010 0CDB:0000030B push ds 1E EAX:00000000 EBX:00000001 ECX:00000000 EDX:00000000 ESI:00000000 EDI:00000778 EBP:0000FFBC ESP:0000FFB8 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:1 SF:0 OF:0 AF:0 PF:1 IF:0 TF:0 VM:0 FLG:00007046 CR0:00000010 0CDB:0000030C test byte [bp+07],02 ss:[FFC3]=AA72 F6 46 07 02 EAX:00000000 EBX:00000001 ECX:00000000 EDX:00000000 ESI:00000000 EDI:00000778 EBP:0000FFBC ESP:0000FFB6 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:1 SF:0 OF:0 AF:0 PF:1 IF:0 TF:0 VM:0 FLG:00007046 CR0:00000010 0CDB:00000310 je 00000313 ($+1) (no jmp) 74 01 EAX:00000000 EBX:00000001 ECX:00000000 EDX:00000000 ESI:00000000 EDI:00000778 EBP:0000FFBC ESP:0000FFB6 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:0 IF:0 TF:0 VM:0 FLG:00007046 CR0:00000010 0CDB:00000312 sti FB EAX:00000000 EBX:00000001 ECX:00000000 EDX:00000000 ESI:00000000 EDI:00000778 EBP:0000FFBC ESP:0000FFB6 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:0 IF:0 TF:0 VM:0 FLG:00007046 CR0:00000010 0CDB:00000313 lds si,[bp+02] ss:[FFBE]=0BC4 C5 76 02 EAX:00000000 EBX:00000001 ECX:00000000 EDX:00000000 ESI:00000000 EDI:00000778 EBP:0000FFBC ESP:0000FFB6 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:0 IF:1 TF:0 VM:0 FLG:00007246 CR0:00000010 0CDB:00000316 call 000002F0 ($-29) E8 D7 FF EAX:00000000 EBX:00000001 ECX:00000000 EDX:00000000 ESI:00000BC4 EDI:00000778 EBP:0000FFBC ESP:0000FFB6 DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:0 IF:1 TF:0 VM:0 FLG:00007246 CR0:00000010 0CDB:000002F0 push bx 53 EAX:00000000 EBX:00000001 ECX:00000000 EDX:00000000 ESI:00000BC4 EDI:00000778 EBP:0000FFBC ESP:0000FFB4 DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:0 IF:1 TF:0 VM:0 FLG:00007246 CR0:00000010 0CDB:000002F1 mov al,ss:[02D7] ss:[02D7]=0000 36 A0 D7 02 EAX:00000000 EBX:00000001 ECX:00000000 EDX:00000000 ESI:00000BC4 EDI:00000778 EBP:0000FFBC ESP:0000FFB2 DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:0 IF:1 TF:0 VM:0 FLG:00007246 CR0:00000010 0CDB:000002F5 mov bx,ds 8C DB EAX:00000000 EBX:00000001 ECX:00000000 EDX:00000000 ESI:00000BC4 EDI:00000778 EBP:0000FFBC ESP:0000FFB2 DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:0 IF:1 TF:0 VM:0 FLG:00007246 CR0:00000010 0CDB:000002F7 and bl,F8 80 E3 F8 EAX:00000000 EBX:00000824 ECX:00000000 EDX:00000000 ESI:00000BC4 EDI:00000778 EBP:0000FFBC ESP:0000FFB2 DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:0 IF:1 TF:0 VM:0 FLG:00007246 CR0:00000010 0CDB:000002FA push ds 1E EAX:00000000 EBX:00000820 ECX:00000000 EDX:00000000 ESI:00000BC4 EDI:00000778 EBP:0000FFBC ESP:0000FFB2 DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:0 IF:1 TF:0 VM:0 FLG:00007246 CR0:00000010 0CDB:000002FB mov ds,ss:[02DA] ss:[02DA]=0000 36 8E 1E DA 02 EAX:00000000 EBX:00000820 ECX:00000000 EDX:00000000 ESI:00000BC4 EDI:00000778 EBP:0000FFBC ESP:0000FFB0 DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:0 IF:1 TF:0 VM:0 FLG:00007246 CR0:00000010 0CDB:00000300 xor [bx+05],al ds:[0825]=0000 30 47 05 EAX:00000000 EBX:00000820 ECX:00000000 EDX:00000000 ESI:00000BC4 EDI:00000778 EBP:0000FFBC ESP:0000FFB0 DS:0000 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:0 IF:1 TF:0 VM:0 FLG:00007246 CR0:00000010 0CDB:00000303 pop ds 1F EAX:00000000 EBX:00000820 ECX:00000000 EDX:00000000 ESI:00000BC4 EDI:00000778 EBP:0000FFBC ESP:0000FFB0 DS:0000 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:1 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007246 CR0:00000010 0CDB:00000304 pop bx 5B EAX:00000000 EBX:00000820 ECX:00000000 EDX:00000000 ESI:00000BC4 EDI:00000778 EBP:0000FFBC ESP:0000FFB2 DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:1 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007246 CR0:00000010 0CDB:00000305 ret C3 EAX:00000000 EBX:00000001 ECX:00000000 EDX:00000000 ESI:00000BC4 EDI:00000778 EBP:0000FFBC ESP:0000FFB4 DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:1 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007246 CR0:00000010 0CDB:00000319 mov ax,[si-01] ds:[0BC3]=6E37 8B 44 FF EAX:00000000 EBX:00000001 ECX:00000000 EDX:00000000 ESI:00000BC4 EDI:00000778 EBP:0000FFBC ESP:0000FFB6 DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:1 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007246 CR0:00000010 0CDB:0000031C sub al,34 2C 34 EAX:00006E37 EBX:00000001 ECX:00000000 EDX:00000000 ESI:00000BC4 EDI:00000778 EBP:0000FFBC ESP:0000FFB6 DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:1 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007246 CR0:00000010 0CDB:0000031E cmp al,08 3C 08 EAX:00006E03 EBX:00000001 ECX:00000000 EDX:00000000 ESI:00000BC4 EDI:00000778 EBP:0000FFBC ESP:0000FFB6 DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007246 CR0:00000010 0CDB:00000320 jnc 00000377 ($+55) (no jmp) 73 55 EAX:00006E03 EBX:00000001 ECX:00000000 EDX:00000000 ESI:00000BC4 EDI:00000778 EBP:0000FFBC ESP:0000FFB6 DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:1 ZF:0 SF:1 OF:0 AF:1 PF:0 IF:1 TF:0 VM:0 FLG:00007246 CR0:00000010 0CDB:00000322 cmp ax,E303 3D 03 E3 EAX:00006E03 EBX:00000001 ECX:00000000 EDX:00000000 ESI:00000BC4 EDI:00000778 EBP:0000FFBC ESP:0000FFB6 DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:1 ZF:0 SF:1 OF:0 AF:1 PF:0 IF:1 TF:0 VM:0 FLG:00007246 CR0:00000010 0CDB:00000325 je 0000034C ($+25) (no jmp) 74 25 EAX:00006E03 EBX:00000001 ECX:00000000 EDX:00000000 ESI:00000BC4 EDI:00000778 EBP:0000FFBC ESP:0000FFB6 DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:1 ZF:0 SF:1 OF:1 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007246 CR0:00000010 0CDB:00000327 cmp ax,E007 3D 07 E0 EAX:00006E03 EBX:00000001 ECX:00000000 EDX:00000000 ESI:00000BC4 EDI:00000778 EBP:0000FFBC ESP:0000FFB6 DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:1 ZF:0 SF:1 OF:1 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007246 CR0:00000010 0CDB:0000032A jne 0000033D ($+11) (down) 75 11 EAX:00006E03 EBX:00000001 ECX:00000000 EDX:00000000 ESI:00000BC4 EDI:00000778 EBP:0000FFBC ESP:0000FFB6 DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:1 ZF:0 SF:1 OF:1 AF:1 PF:1 IF:1 TF:0 VM:0 FLG:00007246 CR0:00000010 0CDB:0000033D sub si,0002 83 EE 02 EAX:00006E03 EBX:00000001 ECX:00000000 EDX:00000000 ESI:00000BC4 EDI:00000778 EBP:0000FFBC ESP:0000FFB6 DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:1 ZF:0 SF:1 OF:1 AF:1 PF:1 IF:1 TF:0 VM:0 FLG:00007246 CR0:00000010 0CDB:00000340 mov byte [si],9B ds:[0BC2]=37CD C6 04 9B EAX:00006E03 EBX:00000001 ECX:00000000 EDX:00000000 ESI:00000BC2 EDI:00000778 EBP:0000FFBC ESP:0000FFB6 DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007246 CR0:00000010 0CDB:00000343 add byte [si+01],A4 ds:[0BC3]=6E37 80 44 01 A4 EAX:00006E03 EBX:00000001 ECX:00000000 EDX:00000000 ESI:00000BC2 EDI:00000778 EBP:0000FFBC ESP:0000FFB6 DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007246 CR0:00000010 0CDB:00000347 mov [bp+02],si ss:[FFBE]=0BC4 89 76 02 EAX:00006E03 EBX:00000001 ECX:00000000 EDX:00000000 ESI:00000BC2 EDI:00000778 EBP:0000FFBC ESP:0000FFB6 DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:1 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007246 CR0:00000010 0CDB:0000034A jmp short 0000039A ($+4e) (down) EB 4E EAX:00006E03 EBX:00000001 ECX:00000000 EDX:00000000 ESI:00000BC2 EDI:00000778 EBP:0000FFBC ESP:0000FFB6 DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:1 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007246 CR0:00000010 0CDB:0000039A call 000002F0 ($-ad) E8 53 FF EAX:00006E03 EBX:00000001 ECX:00000000 EDX:00000000 ESI:00000BC2 EDI:00000778 EBP:0000FFBC ESP:0000FFB6 DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:1 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007246 CR0:00000010 0CDB:000002F0 push bx 53 EAX:00006E03 EBX:00000001 ECX:00000000 EDX:00000000 ESI:00000BC2 EDI:00000778 EBP:0000FFBC ESP:0000FFB4 DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:1 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007246 CR0:00000010 0CDB:000002F1 mov al,ss:[02D7] ss:[02D7]=0000 36 A0 D7 02 EAX:00006E03 EBX:00000001 ECX:00000000 EDX:00000000 ESI:00000BC2 EDI:00000778 EBP:0000FFBC ESP:0000FFB2 DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:1 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007246 CR0:00000010 0CDB:000002F5 mov bx,ds 8C DB EAX:00006E00 EBX:00000001 ECX:00000000 EDX:00000000 ESI:00000BC2 EDI:00000778 EBP:0000FFBC ESP:0000FFB2 DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:1 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007246 CR0:00000010 0CDB:000002F7 and bl,F8 80 E3 F8 EAX:00006E00 EBX:00000824 ECX:00000000 EDX:00000000 ESI:00000BC2 EDI:00000778 EBP:0000FFBC ESP:0000FFB2 DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:1 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007246 CR0:00000010 0CDB:000002FA push ds 1E EAX:00006E00 EBX:00000820 ECX:00000000 EDX:00000000 ESI:00000BC2 EDI:00000778 EBP:0000FFBC ESP:0000FFB2 DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:0 IF:1 TF:0 VM:0 FLG:00007246 CR0:00000010 0CDB:000002FB mov ds,ss:[02DA] ss:[02DA]=0000 36 8E 1E DA 02 EAX:00006E00 EBX:00000820 ECX:00000000 EDX:00000000 ESI:00000BC2 EDI:00000778 EBP:0000FFBC ESP:0000FFB0 DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:0 IF:1 TF:0 VM:0 FLG:00007246 CR0:00000010 0CDB:00000300 xor [bx+05],al ds:[0825]=0000 30 47 05 EAX:00006E00 EBX:00000820 ECX:00000000 EDX:00000000 ESI:00000BC2 EDI:00000778 EBP:0000FFBC ESP:0000FFB0 DS:0000 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:0 IF:1 TF:0 VM:0 FLG:00007246 CR0:00000010 0CDB:00000303 pop ds 1F EAX:00006E00 EBX:00000820 ECX:00000000 EDX:00000000 ESI:00000BC2 EDI:00000778 EBP:0000FFBC ESP:0000FFB0 DS:0000 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:1 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007246 CR0:00000010 0CDB:00000304 pop bx 5B EAX:00006E00 EBX:00000820 ECX:00000000 EDX:00000000 ESI:00000BC2 EDI:00000778 EBP:0000FFBC ESP:0000FFB2 DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:1 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007246 CR0:00000010 0CDB:00000305 ret C3 EAX:00006E00 EBX:00000001 ECX:00000000 EDX:00000000 ESI:00000BC2 EDI:00000778 EBP:0000FFBC ESP:0000FFB4 DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:1 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007246 CR0:00000010 0CDB:0000039D pop ds 1F EAX:00006E00 EBX:00000001 ECX:00000000 EDX:00000000 ESI:00000BC2 EDI:00000778 EBP:0000FFBC ESP:0000FFB6 DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:1 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007246 CR0:00000010 0CDB:0000039E pop si 5E EAX:00006E00 EBX:00000001 ECX:00000000 EDX:00000000 ESI:00000BC2 EDI:00000778 EBP:0000FFBC ESP:0000FFB8 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:1 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007246 CR0:00000010 0CDB:0000039F pop ax 58 EAX:00006E00 EBX:00000001 ECX:00000000 EDX:00000000 ESI:00000000 EDI:00000778 EBP:0000FFBC ESP:0000FFBA DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:1 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007246 CR0:00000010 0CDB:000003A0 pop bp 5D EAX:00000000 EBX:00000001 ECX:00000000 EDX:00000000 ESI:00000000 EDI:00000778 EBP:0000FFBC ESP:0000FFBC DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:1 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007246 CR0:00000010 0CDB:000003A1 iret CF EAX:00000000 EBX:00000001 ECX:00000000 EDX:00000000 ESI:00000000 EDI:00000778 EBP:0000FFD4 ESP:0000FFBE DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:1 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007246 CR0:00000010 0824:00000BC2 fwait 9B EAX:00000000 EBX:00000001 ECX:00000000 EDX:00000000 ESI:00000000 EDI:00000778 EBP:0000FFD4 ESP:0000FFC4 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:1 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007246 CR0:00000010 0824:00000BC3 fldt [bp-0E] ss:[FFC6]=007B DB 6E F2 EAX:00000000 EBX:00000001 ECX:00000000 EDX:00000000 ESI:00000000 EDI:00000778 EBP:0000FFD4 ESP:0000FFC4 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:1 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007246 CR0:00000010 0824:00000BC6 pop si 5E EAX:00000000 EBX:00000001 ECX:00000000 EDX:00000000 ESI:00000000 EDI:00000778 EBP:0000FFD4 ESP:0000FFC4 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:1 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007246 CR0:00000010 0824:00000BC7 mov sp,bp 8B E5 EAX:00000000 EBX:00000001 ECX:00000000 EDX:00000000 ESI:000000AA EDI:00000778 EBP:0000FFD4 ESP:0000FFC6 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:1 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007246 CR0:00000010 0824:00000BC9 pop bp 5D EAX:00000000 EBX:00000001 ECX:00000000 EDX:00000000 ESI:000000AA EDI:00000778 EBP:0000FFD4 ESP:0000FFD4 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:1 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007246 CR0:00000010 0824:00000BCA ret C3 EAX:00000000 EBX:00000001 ECX:00000000 EDX:00000000 ESI:000000AA EDI:00000778 EBP:0000FFDE ESP:0000FFD6 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:1 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007246 CR0:00000010 0824:00000BDB pop cx 59 EAX:00000000 EBX:00000001 ECX:00000000 EDX:00000000 ESI:000000AA EDI:00000778 EBP:0000FFDE ESP:0000FFD8 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:1 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007246 CR0:00000010 0824:00000BDC pop cx 59 EAX:00000000 EBX:00000001 ECX:000000AD EDX:00000000 ESI:000000AA EDI:00000778 EBP:0000FFDE ESP:0000FFDA DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:1 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007246 CR0:00000010 0824:00000BDD sub sp,000A 83 EC 0A EAX:00000000 EBX:00000001 ECX:00000000 EDX:00000000 ESI:000000AA EDI:00000778 EBP:0000FFDE ESP:0000FFDC DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:1 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007246 CR0:00000010 0824:00000BE0 int 37 CD 37 EAX:00000000 EBX:00000001 ECX:00000000 EDX:00000000 ESI:000000AA EDI:00000778 EBP:0000FFDE ESP:0000FFD2 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:1 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007246 CR0:00000010 0CDB:00000306 push bp 55 EAX:00000000 EBX:00000001 ECX:00000000 EDX:00000000 ESI:000000AA EDI:00000778 EBP:0000FFDE ESP:0000FFCC DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:1 OF:0 AF:0 PF:1 IF:0 TF:0 VM:0 FLG:00007086 CR0:00000010 0CDB:00000307 mov bp,sp 8B EC EAX:00000000 EBX:00000001 ECX:00000000 EDX:00000000 ESI:000000AA EDI:00000778 EBP:0000FFDE ESP:0000FFCA DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:1 OF:0 AF:0 PF:1 IF:0 TF:0 VM:0 FLG:00007086 CR0:00000010 0CDB:00000309 push ax 50 EAX:00000000 EBX:00000001 ECX:00000000 EDX:00000000 ESI:000000AA EDI:00000778 EBP:0000FFCA ESP:0000FFCA DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:1 OF:0 AF:0 PF:1 IF:0 TF:0 VM:0 FLG:00007086 CR0:00000010 0CDB:0000030A push si 56 EAX:00000000 EBX:00000001 ECX:00000000 EDX:00000000 ESI:000000AA EDI:00000778 EBP:0000FFCA ESP:0000FFC8 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:1 OF:0 AF:0 PF:1 IF:0 TF:0 VM:0 FLG:00007086 CR0:00000010 0CDB:0000030B push ds 1E EAX:00000000 EBX:00000001 ECX:00000000 EDX:00000000 ESI:000000AA EDI:00000778 EBP:0000FFCA ESP:0000FFC6 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:1 OF:0 AF:0 PF:1 IF:0 TF:0 VM:0 FLG:00007086 CR0:00000010 0CDB:0000030C test byte [bp+07],02 ss:[FFD1]=0372 F6 46 07 02 EAX:00000000 EBX:00000001 ECX:00000000 EDX:00000000 ESI:000000AA EDI:00000778 EBP:0000FFCA ESP:0000FFC4 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:1 OF:0 AF:0 PF:1 IF:0 TF:0 VM:0 FLG:00007086 CR0:00000010 0CDB:00000310 je 00000313 ($+1) (no jmp) 74 01 EAX:00000000 EBX:00000001 ECX:00000000 EDX:00000000 ESI:000000AA EDI:00000778 EBP:0000FFCA ESP:0000FFC4 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:0 IF:0 TF:0 VM:0 FLG:00007086 CR0:00000010 0CDB:00000312 sti FB EAX:00000000 EBX:00000001 ECX:00000000 EDX:00000000 ESI:000000AA EDI:00000778 EBP:0000FFCA ESP:0000FFC4 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:0 IF:0 TF:0 VM:0 FLG:00007086 CR0:00000010 0CDB:00000313 lds si,[bp+02] ss:[FFCC]=0BE2 C5 76 02 EAX:00000000 EBX:00000001 ECX:00000000 EDX:00000000 ESI:000000AA EDI:00000778 EBP:0000FFCA ESP:0000FFC4 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:0 IF:1 TF:0 VM:0 FLG:00007286 CR0:00000010 0CDB:00000316 call 000002F0 ($-29) E8 D7 FF EAX:00000000 EBX:00000001 ECX:00000000 EDX:00000000 ESI:00000BE2 EDI:00000778 EBP:0000FFCA ESP:0000FFC4 DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:0 IF:1 TF:0 VM:0 FLG:00007286 CR0:00000010 0CDB:000002F0 push bx 53 EAX:00000000 EBX:00000001 ECX:00000000 EDX:00000000 ESI:00000BE2 EDI:00000778 EBP:0000FFCA ESP:0000FFC2 DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:0 IF:1 TF:0 VM:0 FLG:00007286 CR0:00000010 0CDB:000002F1 mov al,ss:[02D7] ss:[02D7]=0000 36 A0 D7 02 EAX:00000000 EBX:00000001 ECX:00000000 EDX:00000000 ESI:00000BE2 EDI:00000778 EBP:0000FFCA ESP:0000FFC0 DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:0 IF:1 TF:0 VM:0 FLG:00007286 CR0:00000010 0CDB:000002F5 mov bx,ds 8C DB EAX:00000000 EBX:00000001 ECX:00000000 EDX:00000000 ESI:00000BE2 EDI:00000778 EBP:0000FFCA ESP:0000FFC0 DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:0 IF:1 TF:0 VM:0 FLG:00007286 CR0:00000010 0CDB:000002F7 and bl,F8 80 E3 F8 EAX:00000000 EBX:00000824 ECX:00000000 EDX:00000000 ESI:00000BE2 EDI:00000778 EBP:0000FFCA ESP:0000FFC0 DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:0 IF:1 TF:0 VM:0 FLG:00007286 CR0:00000010 0CDB:000002FA push ds 1E EAX:00000000 EBX:00000820 ECX:00000000 EDX:00000000 ESI:00000BE2 EDI:00000778 EBP:0000FFCA ESP:0000FFC0 DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:0 IF:1 TF:0 VM:0 FLG:00007286 CR0:00000010 0CDB:000002FB mov ds,ss:[02DA] ss:[02DA]=0000 36 8E 1E DA 02 EAX:00000000 EBX:00000820 ECX:00000000 EDX:00000000 ESI:00000BE2 EDI:00000778 EBP:0000FFCA ESP:0000FFBE DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:0 IF:1 TF:0 VM:0 FLG:00007286 CR0:00000010 0CDB:00000300 xor [bx+05],al ds:[0825]=0000 30 47 05 EAX:00000000 EBX:00000820 ECX:00000000 EDX:00000000 ESI:00000BE2 EDI:00000778 EBP:0000FFCA ESP:0000FFBE DS:0000 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:0 IF:1 TF:0 VM:0 FLG:00007286 CR0:00000010 0CDB:00000303 pop ds 1F EAX:00000000 EBX:00000820 ECX:00000000 EDX:00000000 ESI:00000BE2 EDI:00000778 EBP:0000FFCA ESP:0000FFBE DS:0000 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:1 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007286 CR0:00000010 0CDB:00000304 pop bx 5B EAX:00000000 EBX:00000820 ECX:00000000 EDX:00000000 ESI:00000BE2 EDI:00000778 EBP:0000FFCA ESP:0000FFC0 DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:1 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007286 CR0:00000010 0CDB:00000305 ret C3 EAX:00000000 EBX:00000001 ECX:00000000 EDX:00000000 ESI:00000BE2 EDI:00000778 EBP:0000FFCA ESP:0000FFC2 DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:1 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007286 CR0:00000010 0CDB:00000319 mov ax,[si-01] ds:[0BE1]=7E37 8B 44 FF EAX:00000000 EBX:00000001 ECX:00000000 EDX:00000000 ESI:00000BE2 EDI:00000778 EBP:0000FFCA ESP:0000FFC4 DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:1 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007286 CR0:00000010 0CDB:0000031C sub al,34 2C 34 EAX:00007E37 EBX:00000001 ECX:00000000 EDX:00000000 ESI:00000BE2 EDI:00000778 EBP:0000FFCA ESP:0000FFC4 DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:1 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007286 CR0:00000010 0CDB:0000031E cmp al,08 3C 08 EAX:00007E03 EBX:00000001 ECX:00000000 EDX:00000000 ESI:00000BE2 EDI:00000778 EBP:0000FFCA ESP:0000FFC4 DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007286 CR0:00000010 0CDB:00000320 jnc 00000377 ($+55) (no jmp) 73 55 EAX:00007E03 EBX:00000001 ECX:00000000 EDX:00000000 ESI:00000BE2 EDI:00000778 EBP:0000FFCA ESP:0000FFC4 DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:1 ZF:0 SF:1 OF:0 AF:1 PF:0 IF:1 TF:0 VM:0 FLG:00007286 CR0:00000010 0CDB:00000322 cmp ax,E303 3D 03 E3 EAX:00007E03 EBX:00000001 ECX:00000000 EDX:00000000 ESI:00000BE2 EDI:00000778 EBP:0000FFCA ESP:0000FFC4 DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:1 ZF:0 SF:1 OF:0 AF:1 PF:0 IF:1 TF:0 VM:0 FLG:00007286 CR0:00000010 0CDB:00000325 je 0000034C ($+25) (no jmp) 74 25 EAX:00007E03 EBX:00000001 ECX:00000000 EDX:00000000 ESI:00000BE2 EDI:00000778 EBP:0000FFCA ESP:0000FFC4 DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:1 ZF:0 SF:1 OF:1 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007286 CR0:00000010 0CDB:00000327 cmp ax,E007 3D 07 E0 EAX:00007E03 EBX:00000001 ECX:00000000 EDX:00000000 ESI:00000BE2 EDI:00000778 EBP:0000FFCA ESP:0000FFC4 DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:1 ZF:0 SF:1 OF:1 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007286 CR0:00000010 0CDB:0000032A jne 0000033D ($+11) (down) 75 11 EAX:00007E03 EBX:00000001 ECX:00000000 EDX:00000000 ESI:00000BE2 EDI:00000778 EBP:0000FFCA ESP:0000FFC4 DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:1 ZF:0 SF:1 OF:1 AF:1 PF:1 IF:1 TF:0 VM:0 FLG:00007286 CR0:00000010 0CDB:0000033D sub si,0002 83 EE 02 EAX:00007E03 EBX:00000001 ECX:00000000 EDX:00000000 ESI:00000BE2 EDI:00000778 EBP:0000FFCA ESP:0000FFC4 DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:1 ZF:0 SF:1 OF:1 AF:1 PF:1 IF:1 TF:0 VM:0 FLG:00007286 CR0:00000010 0CDB:00000340 mov byte [si],9B ds:[0BE0]=37CD C6 04 9B EAX:00007E03 EBX:00000001 ECX:00000000 EDX:00000000 ESI:00000BE0 EDI:00000778 EBP:0000FFCA ESP:0000FFC4 DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007286 CR0:00000010 0CDB:00000343 add byte [si+01],A4 ds:[0BE1]=7E37 80 44 01 A4 EAX:00007E03 EBX:00000001 ECX:00000000 EDX:00000000 ESI:00000BE0 EDI:00000778 EBP:0000FFCA ESP:0000FFC4 DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007286 CR0:00000010 0CDB:00000347 mov [bp+02],si ss:[FFCC]=0BE2 89 76 02 EAX:00007E03 EBX:00000001 ECX:00000000 EDX:00000000 ESI:00000BE0 EDI:00000778 EBP:0000FFCA ESP:0000FFC4 DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:1 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007286 CR0:00000010 0CDB:0000034A jmp short 0000039A ($+4e) (down) EB 4E EAX:00007E03 EBX:00000001 ECX:00000000 EDX:00000000 ESI:00000BE0 EDI:00000778 EBP:0000FFCA ESP:0000FFC4 DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:1 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007286 CR0:00000010 0CDB:0000039A call 000002F0 ($-ad) E8 53 FF EAX:00007E03 EBX:00000001 ECX:00000000 EDX:00000000 ESI:00000BE0 EDI:00000778 EBP:0000FFCA ESP:0000FFC4 DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:1 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007286 CR0:00000010 0CDB:000002F0 push bx 53 EAX:00007E03 EBX:00000001 ECX:00000000 EDX:00000000 ESI:00000BE0 EDI:00000778 EBP:0000FFCA ESP:0000FFC2 DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:1 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007286 CR0:00000010 0CDB:000002F1 mov al,ss:[02D7] ss:[02D7]=0000 36 A0 D7 02 EAX:00007E03 EBX:00000001 ECX:00000000 EDX:00000000 ESI:00000BE0 EDI:00000778 EBP:0000FFCA ESP:0000FFC0 DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:1 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007286 CR0:00000010 0CDB:000002F5 mov bx,ds 8C DB EAX:00007E00 EBX:00000001 ECX:00000000 EDX:00000000 ESI:00000BE0 EDI:00000778 EBP:0000FFCA ESP:0000FFC0 DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:1 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007286 CR0:00000010 0CDB:000002F7 and bl,F8 80 E3 F8 EAX:00007E00 EBX:00000824 ECX:00000000 EDX:00000000 ESI:00000BE0 EDI:00000778 EBP:0000FFCA ESP:0000FFC0 DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:1 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007286 CR0:00000010 0CDB:000002FA push ds 1E EAX:00007E00 EBX:00000820 ECX:00000000 EDX:00000000 ESI:00000BE0 EDI:00000778 EBP:0000FFCA ESP:0000FFC0 DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:0 IF:1 TF:0 VM:0 FLG:00007286 CR0:00000010 0CDB:000002FB mov ds,ss:[02DA] ss:[02DA]=0000 36 8E 1E DA 02 EAX:00007E00 EBX:00000820 ECX:00000000 EDX:00000000 ESI:00000BE0 EDI:00000778 EBP:0000FFCA ESP:0000FFBE DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:0 IF:1 TF:0 VM:0 FLG:00007286 CR0:00000010 0CDB:00000300 xor [bx+05],al ds:[0825]=0000 30 47 05 EAX:00007E00 EBX:00000820 ECX:00000000 EDX:00000000 ESI:00000BE0 EDI:00000778 EBP:0000FFCA ESP:0000FFBE DS:0000 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:0 IF:1 TF:0 VM:0 FLG:00007286 CR0:00000010 0CDB:00000303 pop ds 1F EAX:00007E00 EBX:00000820 ECX:00000000 EDX:00000000 ESI:00000BE0 EDI:00000778 EBP:0000FFCA ESP:0000FFBE DS:0000 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:1 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007286 CR0:00000010 0CDB:00000304 pop bx 5B EAX:00007E00 EBX:00000820 ECX:00000000 EDX:00000000 ESI:00000BE0 EDI:00000778 EBP:0000FFCA ESP:0000FFC0 DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:1 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007286 CR0:00000010 0CDB:00000305 ret C3 EAX:00007E00 EBX:00000001 ECX:00000000 EDX:00000000 ESI:00000BE0 EDI:00000778 EBP:0000FFCA ESP:0000FFC2 DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:1 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007286 CR0:00000010 0CDB:0000039D pop ds 1F EAX:00007E00 EBX:00000001 ECX:00000000 EDX:00000000 ESI:00000BE0 EDI:00000778 EBP:0000FFCA ESP:0000FFC4 DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:1 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007286 CR0:00000010 0CDB:0000039E pop si 5E EAX:00007E00 EBX:00000001 ECX:00000000 EDX:00000000 ESI:00000BE0 EDI:00000778 EBP:0000FFCA ESP:0000FFC6 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:1 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007286 CR0:00000010 0CDB:0000039F pop ax 58 EAX:00007E00 EBX:00000001 ECX:00000000 EDX:00000000 ESI:000000AA EDI:00000778 EBP:0000FFCA ESP:0000FFC8 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:1 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007286 CR0:00000010 0CDB:000003A0 pop bp 5D EAX:00000000 EBX:00000001 ECX:00000000 EDX:00000000 ESI:000000AA EDI:00000778 EBP:0000FFCA ESP:0000FFCA DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:1 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007286 CR0:00000010 0CDB:000003A1 iret CF EAX:00000000 EBX:00000001 ECX:00000000 EDX:00000000 ESI:000000AA EDI:00000778 EBP:0000FFDE ESP:0000FFCC DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:1 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007286 CR0:00000010 0824:00000BE0 fwait 9B EAX:00000000 EBX:00000001 ECX:00000000 EDX:00000000 ESI:000000AA EDI:00000778 EBP:0000FFDE ESP:0000FFD2 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:1 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007286 CR0:00000010 0824:00000BE1 fstpt [bp-0C] ss:[FFD2]=0003 DB 7E F4 EAX:00000000 EBX:00000001 ECX:00000000 EDX:00000000 ESI:000000AA EDI:00000778 EBP:0000FFDE ESP:0000FFD2 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:1 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007286 CR0:00000010 0824:00000BE4 int 39 CD 39 EAX:00000000 EBX:00000001 ECX:00000000 EDX:00000000 ESI:000000AA EDI:00000778 EBP:0000FFDE ESP:0000FFD2 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:1 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007286 CR0:00000010 0CDB:00000306 push bp 55 EAX:00000000 EBX:00000001 ECX:00000000 EDX:00000000 ESI:000000AA EDI:00000778 EBP:0000FFDE ESP:0000FFCC DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:1 OF:0 AF:0 PF:1 IF:0 TF:0 VM:0 FLG:00007086 CR0:00000010 0CDB:00000307 mov bp,sp 8B EC EAX:00000000 EBX:00000001 ECX:00000000 EDX:00000000 ESI:000000AA EDI:00000778 EBP:0000FFDE ESP:0000FFCA DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:1 OF:0 AF:0 PF:1 IF:0 TF:0 VM:0 FLG:00007086 CR0:00000010 0CDB:00000309 push ax 50 EAX:00000000 EBX:00000001 ECX:00000000 EDX:00000000 ESI:000000AA EDI:00000778 EBP:0000FFCA ESP:0000FFCA DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:1 OF:0 AF:0 PF:1 IF:0 TF:0 VM:0 FLG:00007086 CR0:00000010 0CDB:0000030A push si 56 EAX:00000000 EBX:00000001 ECX:00000000 EDX:00000000 ESI:000000AA EDI:00000778 EBP:0000FFCA ESP:0000FFC8 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:1 OF:0 AF:0 PF:1 IF:0 TF:0 VM:0 FLG:00007086 CR0:00000010 0CDB:0000030B push ds 1E EAX:00000000 EBX:00000001 ECX:00000000 EDX:00000000 ESI:000000AA EDI:00000778 EBP:0000FFCA ESP:0000FFC6 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:1 OF:0 AF:0 PF:1 IF:0 TF:0 VM:0 FLG:00007086 CR0:00000010 0CDB:0000030C test byte [bp+07],02 ss:[FFD1]=7B72 F6 46 07 02 EAX:00000000 EBX:00000001 ECX:00000000 EDX:00000000 ESI:000000AA EDI:00000778 EBP:0000FFCA ESP:0000FFC4 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:1 OF:0 AF:0 PF:1 IF:0 TF:0 VM:0 FLG:00007086 CR0:00000010 0CDB:00000310 je 00000313 ($+1) (no jmp) 74 01 EAX:00000000 EBX:00000001 ECX:00000000 EDX:00000000 ESI:000000AA EDI:00000778 EBP:0000FFCA ESP:0000FFC4 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:0 IF:0 TF:0 VM:0 FLG:00007086 CR0:00000010 0CDB:00000312 sti FB EAX:00000000 EBX:00000001 ECX:00000000 EDX:00000000 ESI:000000AA EDI:00000778 EBP:0000FFCA ESP:0000FFC4 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:0 IF:0 TF:0 VM:0 FLG:00007086 CR0:00000010 0CDB:00000313 lds si,[bp+02] ss:[FFCC]=0BE6 C5 76 02 EAX:00000000 EBX:00000001 ECX:00000000 EDX:00000000 ESI:000000AA EDI:00000778 EBP:0000FFCA ESP:0000FFC4 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:0 IF:1 TF:0 VM:0 FLG:00007286 CR0:00000010 0CDB:00000316 call 000002F0 ($-29) E8 D7 FF EAX:00000000 EBX:00000001 ECX:00000000 EDX:00000000 ESI:00000BE6 EDI:00000778 EBP:0000FFCA ESP:0000FFC4 DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:0 IF:1 TF:0 VM:0 FLG:00007286 CR0:00000010 0CDB:000002F0 push bx 53 EAX:00000000 EBX:00000001 ECX:00000000 EDX:00000000 ESI:00000BE6 EDI:00000778 EBP:0000FFCA ESP:0000FFC2 DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:0 IF:1 TF:0 VM:0 FLG:00007286 CR0:00000010 0CDB:000002F1 mov al,ss:[02D7] ss:[02D7]=0000 36 A0 D7 02 EAX:00000000 EBX:00000001 ECX:00000000 EDX:00000000 ESI:00000BE6 EDI:00000778 EBP:0000FFCA ESP:0000FFC0 DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:0 IF:1 TF:0 VM:0 FLG:00007286 CR0:00000010 0CDB:000002F5 mov bx,ds 8C DB EAX:00000000 EBX:00000001 ECX:00000000 EDX:00000000 ESI:00000BE6 EDI:00000778 EBP:0000FFCA ESP:0000FFC0 DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:0 IF:1 TF:0 VM:0 FLG:00007286 CR0:00000010 0CDB:000002F7 and bl,F8 80 E3 F8 EAX:00000000 EBX:00000824 ECX:00000000 EDX:00000000 ESI:00000BE6 EDI:00000778 EBP:0000FFCA ESP:0000FFC0 DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:0 IF:1 TF:0 VM:0 FLG:00007286 CR0:00000010 0CDB:000002FA push ds 1E EAX:00000000 EBX:00000820 ECX:00000000 EDX:00000000 ESI:00000BE6 EDI:00000778 EBP:0000FFCA ESP:0000FFC0 DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:0 IF:1 TF:0 VM:0 FLG:00007286 CR0:00000010 0CDB:000002FB mov ds,ss:[02DA] ss:[02DA]=0000 36 8E 1E DA 02 EAX:00000000 EBX:00000820 ECX:00000000 EDX:00000000 ESI:00000BE6 EDI:00000778 EBP:0000FFCA ESP:0000FFBE DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:0 IF:1 TF:0 VM:0 FLG:00007286 CR0:00000010 0CDB:00000300 xor [bx+05],al ds:[0825]=0000 30 47 05 EAX:00000000 EBX:00000820 ECX:00000000 EDX:00000000 ESI:00000BE6 EDI:00000778 EBP:0000FFCA ESP:0000FFBE DS:0000 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:0 IF:1 TF:0 VM:0 FLG:00007286 CR0:00000010 0CDB:00000303 pop ds 1F EAX:00000000 EBX:00000820 ECX:00000000 EDX:00000000 ESI:00000BE6 EDI:00000778 EBP:0000FFCA ESP:0000FFBE DS:0000 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:1 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007286 CR0:00000010 0CDB:00000304 pop bx 5B EAX:00000000 EBX:00000820 ECX:00000000 EDX:00000000 ESI:00000BE6 EDI:00000778 EBP:0000FFCA ESP:0000FFC0 DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:1 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007286 CR0:00000010 0CDB:00000305 ret C3 EAX:00000000 EBX:00000001 ECX:00000000 EDX:00000000 ESI:00000BE6 EDI:00000778 EBP:0000FFCA ESP:0000FFC2 DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:1 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007286 CR0:00000010 0CDB:00000319 mov ax,[si-01] ds:[0BE5]=0639 8B 44 FF EAX:00000000 EBX:00000001 ECX:00000000 EDX:00000000 ESI:00000BE6 EDI:00000778 EBP:0000FFCA ESP:0000FFC4 DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:1 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007286 CR0:00000010 0CDB:0000031C sub al,34 2C 34 EAX:00000639 EBX:00000001 ECX:00000000 EDX:00000000 ESI:00000BE6 EDI:00000778 EBP:0000FFCA ESP:0000FFC4 DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:1 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007286 CR0:00000010 0CDB:0000031E cmp al,08 3C 08 EAX:00000605 EBX:00000001 ECX:00000000 EDX:00000000 ESI:00000BE6 EDI:00000778 EBP:0000FFCA ESP:0000FFC4 DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007286 CR0:00000010 0CDB:00000320 jnc 00000377 ($+55) (no jmp) 73 55 EAX:00000605 EBX:00000001 ECX:00000000 EDX:00000000 ESI:00000BE6 EDI:00000778 EBP:0000FFCA ESP:0000FFC4 DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:1 ZF:0 SF:1 OF:0 AF:1 PF:0 IF:1 TF:0 VM:0 FLG:00007286 CR0:00000010 0CDB:00000322 cmp ax,E303 3D 03 E3 EAX:00000605 EBX:00000001 ECX:00000000 EDX:00000000 ESI:00000BE6 EDI:00000778 EBP:0000FFCA ESP:0000FFC4 DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:1 ZF:0 SF:1 OF:0 AF:1 PF:0 IF:1 TF:0 VM:0 FLG:00007286 CR0:00000010 0CDB:00000325 je 0000034C ($+25) (no jmp) 74 25 EAX:00000605 EBX:00000001 ECX:00000000 EDX:00000000 ESI:00000BE6 EDI:00000778 EBP:0000FFCA ESP:0000FFC4 DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:1 ZF:0 SF:0 OF:0 AF:0 PF:0 IF:1 TF:0 VM:0 FLG:00007286 CR0:00000010 0CDB:00000327 cmp ax,E007 3D 07 E0 EAX:00000605 EBX:00000001 ECX:00000000 EDX:00000000 ESI:00000BE6 EDI:00000778 EBP:0000FFCA ESP:0000FFC4 DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:1 ZF:0 SF:0 OF:0 AF:0 PF:0 IF:1 TF:0 VM:0 FLG:00007286 CR0:00000010 0CDB:0000032A jne 0000033D ($+11) (down) 75 11 EAX:00000605 EBX:00000001 ECX:00000000 EDX:00000000 ESI:00000BE6 EDI:00000778 EBP:0000FFCA ESP:0000FFC4 DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:1 ZF:0 SF:0 OF:0 AF:1 PF:0 IF:1 TF:0 VM:0 FLG:00007286 CR0:00000010 0CDB:0000033D sub si,0002 83 EE 02 EAX:00000605 EBX:00000001 ECX:00000000 EDX:00000000 ESI:00000BE6 EDI:00000778 EBP:0000FFCA ESP:0000FFC4 DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:1 ZF:0 SF:0 OF:0 AF:1 PF:0 IF:1 TF:0 VM:0 FLG:00007286 CR0:00000010 0CDB:00000340 mov byte [si],9B ds:[0BE4]=39CD C6 04 9B EAX:00000605 EBX:00000001 ECX:00000000 EDX:00000000 ESI:00000BE4 EDI:00000778 EBP:0000FFCA ESP:0000FFC4 DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:0 IF:1 TF:0 VM:0 FLG:00007286 CR0:00000010 0CDB:00000343 add byte [si+01],A4 ds:[0BE5]=0639 80 44 01 A4 EAX:00000605 EBX:00000001 ECX:00000000 EDX:00000000 ESI:00000BE4 EDI:00000778 EBP:0000FFCA ESP:0000FFC4 DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:0 IF:1 TF:0 VM:0 FLG:00007286 CR0:00000010 0CDB:00000347 mov [bp+02],si ss:[FFCC]=0BE6 89 76 02 EAX:00000605 EBX:00000001 ECX:00000000 EDX:00000000 ESI:00000BE4 EDI:00000778 EBP:0000FFCA ESP:0000FFC4 DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:1 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007286 CR0:00000010 0CDB:0000034A jmp short 0000039A ($+4e) (down) EB 4E EAX:00000605 EBX:00000001 ECX:00000000 EDX:00000000 ESI:00000BE4 EDI:00000778 EBP:0000FFCA ESP:0000FFC4 DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:1 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007286 CR0:00000010 0CDB:0000039A call 000002F0 ($-ad) E8 53 FF EAX:00000605 EBX:00000001 ECX:00000000 EDX:00000000 ESI:00000BE4 EDI:00000778 EBP:0000FFCA ESP:0000FFC4 DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:1 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007286 CR0:00000010 0CDB:000002F0 push bx 53 EAX:00000605 EBX:00000001 ECX:00000000 EDX:00000000 ESI:00000BE4 EDI:00000778 EBP:0000FFCA ESP:0000FFC2 DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:1 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007286 CR0:00000010 0CDB:000002F1 mov al,ss:[02D7] ss:[02D7]=0000 36 A0 D7 02 EAX:00000605 EBX:00000001 ECX:00000000 EDX:00000000 ESI:00000BE4 EDI:00000778 EBP:0000FFCA ESP:0000FFC0 DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:1 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007286 CR0:00000010 0CDB:000002F5 mov bx,ds 8C DB EAX:00000600 EBX:00000001 ECX:00000000 EDX:00000000 ESI:00000BE4 EDI:00000778 EBP:0000FFCA ESP:0000FFC0 DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:1 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007286 CR0:00000010 0CDB:000002F7 and bl,F8 80 E3 F8 EAX:00000600 EBX:00000824 ECX:00000000 EDX:00000000 ESI:00000BE4 EDI:00000778 EBP:0000FFCA ESP:0000FFC0 DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:1 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007286 CR0:00000010 0CDB:000002FA push ds 1E EAX:00000600 EBX:00000820 ECX:00000000 EDX:00000000 ESI:00000BE4 EDI:00000778 EBP:0000FFCA ESP:0000FFC0 DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:0 IF:1 TF:0 VM:0 FLG:00007286 CR0:00000010 0CDB:000002FB mov ds,ss:[02DA] ss:[02DA]=0000 36 8E 1E DA 02 EAX:00000600 EBX:00000820 ECX:00000000 EDX:00000000 ESI:00000BE4 EDI:00000778 EBP:0000FFCA ESP:0000FFBE DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:0 IF:1 TF:0 VM:0 FLG:00007286 CR0:00000010 0CDB:00000300 xor [bx+05],al ds:[0825]=0000 30 47 05 EAX:00000600 EBX:00000820 ECX:00000000 EDX:00000000 ESI:00000BE4 EDI:00000778 EBP:0000FFCA ESP:0000FFBE DS:0000 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:0 IF:1 TF:0 VM:0 FLG:00007286 CR0:00000010 0CDB:00000303 pop ds 1F EAX:00000600 EBX:00000820 ECX:00000000 EDX:00000000 ESI:00000BE4 EDI:00000778 EBP:0000FFCA ESP:0000FFBE DS:0000 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:1 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007286 CR0:00000010 0CDB:00000304 pop bx 5B EAX:00000600 EBX:00000820 ECX:00000000 EDX:00000000 ESI:00000BE4 EDI:00000778 EBP:0000FFCA ESP:0000FFC0 DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:1 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007286 CR0:00000010 0CDB:00000305 ret C3 EAX:00000600 EBX:00000001 ECX:00000000 EDX:00000000 ESI:00000BE4 EDI:00000778 EBP:0000FFCA ESP:0000FFC2 DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:1 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007286 CR0:00000010 0CDB:0000039D pop ds 1F EAX:00000600 EBX:00000001 ECX:00000000 EDX:00000000 ESI:00000BE4 EDI:00000778 EBP:0000FFCA ESP:0000FFC4 DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:1 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007286 CR0:00000010 0CDB:0000039E pop si 5E EAX:00000600 EBX:00000001 ECX:00000000 EDX:00000000 ESI:00000BE4 EDI:00000778 EBP:0000FFCA ESP:0000FFC6 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:1 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007286 CR0:00000010 0CDB:0000039F pop ax 58 EAX:00000600 EBX:00000001 ECX:00000000 EDX:00000000 ESI:000000AA EDI:00000778 EBP:0000FFCA ESP:0000FFC8 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:1 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007286 CR0:00000010 0CDB:000003A0 pop bp 5D EAX:00000000 EBX:00000001 ECX:00000000 EDX:00000000 ESI:000000AA EDI:00000778 EBP:0000FFCA ESP:0000FFCA DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:1 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007286 CR0:00000010 0CDB:000003A1 iret CF EAX:00000000 EBX:00000001 ECX:00000000 EDX:00000000 ESI:000000AA EDI:00000778 EBP:0000FFDE ESP:0000FFCC DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:1 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007286 CR0:00000010 0824:00000BE4 fwait 9B EAX:00000000 EBX:00000001 ECX:00000000 EDX:00000000 ESI:000000AA EDI:00000778 EBP:0000FFDE ESP:0000FFD2 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:1 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007286 CR0:00000010 0824:00000BE5 fldq [018A] ds:[018A]=FFFF DD 06 8A 01 EAX:00000000 EBX:00000001 ECX:00000000 EDX:00000000 ESI:000000AA EDI:00000778 EBP:0000FFDE ESP:0000FFD2 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:1 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007286 CR0:00000010 0824:00000BE9 sub sp,0008 83 EC 08 EAX:00000000 EBX:00000001 ECX:00000000 EDX:00000000 ESI:000000AA EDI:00000778 EBP:0000FFDE ESP:0000FFD2 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:1 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007286 CR0:00000010 0824:00000BEC int 39 CD 39 EAX:00000000 EBX:00000001 ECX:00000000 EDX:00000000 ESI:000000AA EDI:00000778 EBP:0000FFDE ESP:0000FFCA DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:1 OF:0 AF:1 PF:1 IF:1 TF:0 VM:0 FLG:00007286 CR0:00000010 0CDB:00000306 push bp 55 EAX:00000000 EBX:00000001 ECX:00000000 EDX:00000000 ESI:000000AA EDI:00000778 EBP:0000FFDE ESP:0000FFC4 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:1 OF:0 AF:1 PF:1 IF:0 TF:0 VM:0 FLG:00007096 CR0:00000010 0CDB:00000307 mov bp,sp 8B EC EAX:00000000 EBX:00000001 ECX:00000000 EDX:00000000 ESI:000000AA EDI:00000778 EBP:0000FFDE ESP:0000FFC2 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:1 OF:0 AF:1 PF:1 IF:0 TF:0 VM:0 FLG:00007096 CR0:00000010 0CDB:00000309 push ax 50 EAX:00000000 EBX:00000001 ECX:00000000 EDX:00000000 ESI:000000AA EDI:00000778 EBP:0000FFC2 ESP:0000FFC2 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:1 OF:0 AF:1 PF:1 IF:0 TF:0 VM:0 FLG:00007096 CR0:00000010 0CDB:0000030A push si 56 EAX:00000000 EBX:00000001 ECX:00000000 EDX:00000000 ESI:000000AA EDI:00000778 EBP:0000FFC2 ESP:0000FFC0 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:1 OF:0 AF:1 PF:1 IF:0 TF:0 VM:0 FLG:00007096 CR0:00000010 0CDB:0000030B push ds 1E EAX:00000000 EBX:00000001 ECX:00000000 EDX:00000000 ESI:000000AA EDI:00000778 EBP:0000FFC2 ESP:0000FFBE DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:1 OF:0 AF:1 PF:1 IF:0 TF:0 VM:0 FLG:00007096 CR0:00000010 0CDB:0000030C test byte [bp+07],02 ss:[FFC9]=DE72 F6 46 07 02 EAX:00000000 EBX:00000001 ECX:00000000 EDX:00000000 ESI:000000AA EDI:00000778 EBP:0000FFC2 ESP:0000FFBC DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:1 OF:0 AF:1 PF:1 IF:0 TF:0 VM:0 FLG:00007096 CR0:00000010 0CDB:00000310 je 00000313 ($+1) (no jmp) 74 01 EAX:00000000 EBX:00000001 ECX:00000000 EDX:00000000 ESI:000000AA EDI:00000778 EBP:0000FFC2 ESP:0000FFBC DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:0 IF:0 TF:0 VM:0 FLG:00007096 CR0:00000010 0CDB:00000312 sti FB EAX:00000000 EBX:00000001 ECX:00000000 EDX:00000000 ESI:000000AA EDI:00000778 EBP:0000FFC2 ESP:0000FFBC DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:0 IF:0 TF:0 VM:0 FLG:00007096 CR0:00000010 0CDB:00000313 lds si,[bp+02] ss:[FFC4]=0BEE C5 76 02 EAX:00000000 EBX:00000001 ECX:00000000 EDX:00000000 ESI:000000AA EDI:00000778 EBP:0000FFC2 ESP:0000FFBC DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:0 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0CDB:00000316 call 000002F0 ($-29) E8 D7 FF EAX:00000000 EBX:00000001 ECX:00000000 EDX:00000000 ESI:00000BEE EDI:00000778 EBP:0000FFC2 ESP:0000FFBC DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:0 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0CDB:000002F0 push bx 53 EAX:00000000 EBX:00000001 ECX:00000000 EDX:00000000 ESI:00000BEE EDI:00000778 EBP:0000FFC2 ESP:0000FFBA DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:0 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0CDB:000002F1 mov al,ss:[02D7] ss:[02D7]=0000 36 A0 D7 02 EAX:00000000 EBX:00000001 ECX:00000000 EDX:00000000 ESI:00000BEE EDI:00000778 EBP:0000FFC2 ESP:0000FFB8 DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:0 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0CDB:000002F5 mov bx,ds 8C DB EAX:00000000 EBX:00000001 ECX:00000000 EDX:00000000 ESI:00000BEE EDI:00000778 EBP:0000FFC2 ESP:0000FFB8 DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:0 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0CDB:000002F7 and bl,F8 80 E3 F8 EAX:00000000 EBX:00000824 ECX:00000000 EDX:00000000 ESI:00000BEE EDI:00000778 EBP:0000FFC2 ESP:0000FFB8 DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:0 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0CDB:000002FA push ds 1E EAX:00000000 EBX:00000820 ECX:00000000 EDX:00000000 ESI:00000BEE EDI:00000778 EBP:0000FFC2 ESP:0000FFB8 DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:0 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0CDB:000002FB mov ds,ss:[02DA] ss:[02DA]=0000 36 8E 1E DA 02 EAX:00000000 EBX:00000820 ECX:00000000 EDX:00000000 ESI:00000BEE EDI:00000778 EBP:0000FFC2 ESP:0000FFB6 DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:0 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0CDB:00000300 xor [bx+05],al ds:[0825]=0000 30 47 05 EAX:00000000 EBX:00000820 ECX:00000000 EDX:00000000 ESI:00000BEE EDI:00000778 EBP:0000FFC2 ESP:0000FFB6 DS:0000 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:0 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0CDB:00000303 pop ds 1F EAX:00000000 EBX:00000820 ECX:00000000 EDX:00000000 ESI:00000BEE EDI:00000778 EBP:0000FFC2 ESP:0000FFB6 DS:0000 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:1 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0CDB:00000304 pop bx 5B EAX:00000000 EBX:00000820 ECX:00000000 EDX:00000000 ESI:00000BEE EDI:00000778 EBP:0000FFC2 ESP:0000FFB8 DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:1 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0CDB:00000305 ret C3 EAX:00000000 EBX:00000001 ECX:00000000 EDX:00000000 ESI:00000BEE EDI:00000778 EBP:0000FFC2 ESP:0000FFBA DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:1 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0CDB:00000319 mov ax,[si-01] ds:[0BED]=5E39 8B 44 FF EAX:00000000 EBX:00000001 ECX:00000000 EDX:00000000 ESI:00000BEE EDI:00000778 EBP:0000FFC2 ESP:0000FFBC DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:1 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0CDB:0000031C sub al,34 2C 34 EAX:00005E39 EBX:00000001 ECX:00000000 EDX:00000000 ESI:00000BEE EDI:00000778 EBP:0000FFC2 ESP:0000FFBC DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:1 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0CDB:0000031E cmp al,08 3C 08 EAX:00005E05 EBX:00000001 ECX:00000000 EDX:00000000 ESI:00000BEE EDI:00000778 EBP:0000FFC2 ESP:0000FFBC DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0CDB:00000320 jnc 00000377 ($+55) (no jmp) 73 55 EAX:00005E05 EBX:00000001 ECX:00000000 EDX:00000000 ESI:00000BEE EDI:00000778 EBP:0000FFC2 ESP:0000FFBC DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:1 ZF:0 SF:1 OF:0 AF:1 PF:0 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0CDB:00000322 cmp ax,E303 3D 03 E3 EAX:00005E05 EBX:00000001 ECX:00000000 EDX:00000000 ESI:00000BEE EDI:00000778 EBP:0000FFC2 ESP:0000FFBC DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:1 ZF:0 SF:1 OF:0 AF:1 PF:0 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0CDB:00000325 je 0000034C ($+25) (no jmp) 74 25 EAX:00005E05 EBX:00000001 ECX:00000000 EDX:00000000 ESI:00000BEE EDI:00000778 EBP:0000FFC2 ESP:0000FFBC DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:1 ZF:0 SF:0 OF:0 AF:0 PF:0 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0CDB:00000327 cmp ax,E007 3D 07 E0 EAX:00005E05 EBX:00000001 ECX:00000000 EDX:00000000 ESI:00000BEE EDI:00000778 EBP:0000FFC2 ESP:0000FFBC DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:1 ZF:0 SF:0 OF:0 AF:0 PF:0 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0CDB:0000032A jne 0000033D ($+11) (down) 75 11 EAX:00005E05 EBX:00000001 ECX:00000000 EDX:00000000 ESI:00000BEE EDI:00000778 EBP:0000FFC2 ESP:0000FFBC DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:1 ZF:0 SF:0 OF:0 AF:1 PF:0 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0CDB:0000033D sub si,0002 83 EE 02 EAX:00005E05 EBX:00000001 ECX:00000000 EDX:00000000 ESI:00000BEE EDI:00000778 EBP:0000FFC2 ESP:0000FFBC DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:1 ZF:0 SF:0 OF:0 AF:1 PF:0 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0CDB:00000340 mov byte [si],9B ds:[0BEC]=39CD C6 04 9B EAX:00005E05 EBX:00000001 ECX:00000000 EDX:00000000 ESI:00000BEC EDI:00000778 EBP:0000FFC2 ESP:0000FFBC DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0CDB:00000343 add byte [si+01],A4 ds:[0BED]=5E39 80 44 01 A4 EAX:00005E05 EBX:00000001 ECX:00000000 EDX:00000000 ESI:00000BEC EDI:00000778 EBP:0000FFC2 ESP:0000FFBC DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0CDB:00000347 mov [bp+02],si ss:[FFC4]=0BEE 89 76 02 EAX:00005E05 EBX:00000001 ECX:00000000 EDX:00000000 ESI:00000BEC EDI:00000778 EBP:0000FFC2 ESP:0000FFBC DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:1 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0CDB:0000034A jmp short 0000039A ($+4e) (down) EB 4E EAX:00005E05 EBX:00000001 ECX:00000000 EDX:00000000 ESI:00000BEC EDI:00000778 EBP:0000FFC2 ESP:0000FFBC DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:1 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0CDB:0000039A call 000002F0 ($-ad) E8 53 FF EAX:00005E05 EBX:00000001 ECX:00000000 EDX:00000000 ESI:00000BEC EDI:00000778 EBP:0000FFC2 ESP:0000FFBC DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:1 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0CDB:000002F0 push bx 53 EAX:00005E05 EBX:00000001 ECX:00000000 EDX:00000000 ESI:00000BEC EDI:00000778 EBP:0000FFC2 ESP:0000FFBA DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:1 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0CDB:000002F1 mov al,ss:[02D7] ss:[02D7]=0000 36 A0 D7 02 EAX:00005E05 EBX:00000001 ECX:00000000 EDX:00000000 ESI:00000BEC EDI:00000778 EBP:0000FFC2 ESP:0000FFB8 DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:1 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0CDB:000002F5 mov bx,ds 8C DB EAX:00005E00 EBX:00000001 ECX:00000000 EDX:00000000 ESI:00000BEC EDI:00000778 EBP:0000FFC2 ESP:0000FFB8 DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:1 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0CDB:000002F7 and bl,F8 80 E3 F8 EAX:00005E00 EBX:00000824 ECX:00000000 EDX:00000000 ESI:00000BEC EDI:00000778 EBP:0000FFC2 ESP:0000FFB8 DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:1 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0CDB:000002FA push ds 1E EAX:00005E00 EBX:00000820 ECX:00000000 EDX:00000000 ESI:00000BEC EDI:00000778 EBP:0000FFC2 ESP:0000FFB8 DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:0 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0CDB:000002FB mov ds,ss:[02DA] ss:[02DA]=0000 36 8E 1E DA 02 EAX:00005E00 EBX:00000820 ECX:00000000 EDX:00000000 ESI:00000BEC EDI:00000778 EBP:0000FFC2 ESP:0000FFB6 DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:0 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0CDB:00000300 xor [bx+05],al ds:[0825]=0000 30 47 05 EAX:00005E00 EBX:00000820 ECX:00000000 EDX:00000000 ESI:00000BEC EDI:00000778 EBP:0000FFC2 ESP:0000FFB6 DS:0000 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:0 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0CDB:00000303 pop ds 1F EAX:00005E00 EBX:00000820 ECX:00000000 EDX:00000000 ESI:00000BEC EDI:00000778 EBP:0000FFC2 ESP:0000FFB6 DS:0000 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:1 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0CDB:00000304 pop bx 5B EAX:00005E00 EBX:00000820 ECX:00000000 EDX:00000000 ESI:00000BEC EDI:00000778 EBP:0000FFC2 ESP:0000FFB8 DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:1 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0CDB:00000305 ret C3 EAX:00005E00 EBX:00000001 ECX:00000000 EDX:00000000 ESI:00000BEC EDI:00000778 EBP:0000FFC2 ESP:0000FFBA DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:1 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0CDB:0000039D pop ds 1F EAX:00005E00 EBX:00000001 ECX:00000000 EDX:00000000 ESI:00000BEC EDI:00000778 EBP:0000FFC2 ESP:0000FFBC DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:1 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0CDB:0000039E pop si 5E EAX:00005E00 EBX:00000001 ECX:00000000 EDX:00000000 ESI:00000BEC EDI:00000778 EBP:0000FFC2 ESP:0000FFBE DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:1 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0CDB:0000039F pop ax 58 EAX:00005E00 EBX:00000001 ECX:00000000 EDX:00000000 ESI:000000AA EDI:00000778 EBP:0000FFC2 ESP:0000FFC0 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:1 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0CDB:000003A0 pop bp 5D EAX:00000000 EBX:00000001 ECX:00000000 EDX:00000000 ESI:000000AA EDI:00000778 EBP:0000FFC2 ESP:0000FFC2 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:1 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0CDB:000003A1 iret CF EAX:00000000 EBX:00000001 ECX:00000000 EDX:00000000 ESI:000000AA EDI:00000778 EBP:0000FFDE ESP:0000FFC4 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:1 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0824:00000BEC fwait 9B EAX:00000000 EBX:00000001 ECX:00000000 EDX:00000000 ESI:000000AA EDI:00000778 EBP:0000FFDE ESP:0000FFCA DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:1 OF:0 AF:1 PF:1 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0824:00000BED fstpq [bp-14] ss:[FFCA]=FFDE DD 5E EC EAX:00000000 EBX:00000001 ECX:00000000 EDX:00000000 ESI:000000AA EDI:00000778 EBP:0000FFDE ESP:0000FFCA DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:1 OF:0 AF:1 PF:1 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0824:00000BF0 int 3D CD 3D EAX:00000000 EBX:00000001 ECX:00000000 EDX:00000000 ESI:000000AA EDI:00000778 EBP:0000FFDE ESP:0000FFCA DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:1 OF:0 AF:1 PF:1 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0CDB:00000306 push bp 55 EAX:00000000 EBX:00000001 ECX:00000000 EDX:00000000 ESI:000000AA EDI:00000778 EBP:0000FFDE ESP:0000FFC4 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:1 OF:0 AF:1 PF:1 IF:0 TF:0 VM:0 FLG:00007096 CR0:00000010 0CDB:00000307 mov bp,sp 8B EC EAX:00000000 EBX:00000001 ECX:00000000 EDX:00000000 ESI:000000AA EDI:00000778 EBP:0000FFDE ESP:0000FFC2 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:1 OF:0 AF:1 PF:1 IF:0 TF:0 VM:0 FLG:00007096 CR0:00000010 0CDB:00000309 push ax 50 EAX:00000000 EBX:00000001 ECX:00000000 EDX:00000000 ESI:000000AA EDI:00000778 EBP:0000FFC2 ESP:0000FFC2 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:1 OF:0 AF:1 PF:1 IF:0 TF:0 VM:0 FLG:00007096 CR0:00000010 0CDB:0000030A push si 56 EAX:00000000 EBX:00000001 ECX:00000000 EDX:00000000 ESI:000000AA EDI:00000778 EBP:0000FFC2 ESP:0000FFC0 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:1 OF:0 AF:1 PF:1 IF:0 TF:0 VM:0 FLG:00007096 CR0:00000010 0CDB:0000030B push ds 1E EAX:00000000 EBX:00000001 ECX:00000000 EDX:00000000 ESI:000000AA EDI:00000778 EBP:0000FFC2 ESP:0000FFBE DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:1 OF:0 AF:1 PF:1 IF:0 TF:0 VM:0 FLG:00007096 CR0:00000010 0CDB:0000030C test byte [bp+07],02 ss:[FFC9]=FF72 F6 46 07 02 EAX:00000000 EBX:00000001 ECX:00000000 EDX:00000000 ESI:000000AA EDI:00000778 EBP:0000FFC2 ESP:0000FFBC DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:1 OF:0 AF:1 PF:1 IF:0 TF:0 VM:0 FLG:00007096 CR0:00000010 0CDB:00000310 je 00000313 ($+1) (no jmp) 74 01 EAX:00000000 EBX:00000001 ECX:00000000 EDX:00000000 ESI:000000AA EDI:00000778 EBP:0000FFC2 ESP:0000FFBC DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:0 IF:0 TF:0 VM:0 FLG:00007096 CR0:00000010 0CDB:00000312 sti FB EAX:00000000 EBX:00000001 ECX:00000000 EDX:00000000 ESI:000000AA EDI:00000778 EBP:0000FFC2 ESP:0000FFBC DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:0 IF:0 TF:0 VM:0 FLG:00007096 CR0:00000010 0CDB:00000313 lds si,[bp+02] ss:[FFC4]=0BF2 C5 76 02 EAX:00000000 EBX:00000001 ECX:00000000 EDX:00000000 ESI:000000AA EDI:00000778 EBP:0000FFC2 ESP:0000FFBC DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:0 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0CDB:00000316 call 000002F0 ($-29) E8 D7 FF EAX:00000000 EBX:00000001 ECX:00000000 EDX:00000000 ESI:00000BF2 EDI:00000778 EBP:0000FFC2 ESP:0000FFBC DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:0 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0CDB:000002F0 push bx 53 EAX:00000000 EBX:00000001 ECX:00000000 EDX:00000000 ESI:00000BF2 EDI:00000778 EBP:0000FFC2 ESP:0000FFBA DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:0 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0CDB:000002F1 mov al,ss:[02D7] ss:[02D7]=0000 36 A0 D7 02 EAX:00000000 EBX:00000001 ECX:00000000 EDX:00000000 ESI:00000BF2 EDI:00000778 EBP:0000FFC2 ESP:0000FFB8 DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:0 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0CDB:000002F5 mov bx,ds 8C DB EAX:00000000 EBX:00000001 ECX:00000000 EDX:00000000 ESI:00000BF2 EDI:00000778 EBP:0000FFC2 ESP:0000FFB8 DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:0 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0CDB:000002F7 and bl,F8 80 E3 F8 EAX:00000000 EBX:00000824 ECX:00000000 EDX:00000000 ESI:00000BF2 EDI:00000778 EBP:0000FFC2 ESP:0000FFB8 DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:0 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0CDB:000002FA push ds 1E EAX:00000000 EBX:00000820 ECX:00000000 EDX:00000000 ESI:00000BF2 EDI:00000778 EBP:0000FFC2 ESP:0000FFB8 DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:0 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0CDB:000002FB mov ds,ss:[02DA] ss:[02DA]=0000 36 8E 1E DA 02 EAX:00000000 EBX:00000820 ECX:00000000 EDX:00000000 ESI:00000BF2 EDI:00000778 EBP:0000FFC2 ESP:0000FFB6 DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:0 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0CDB:00000300 xor [bx+05],al ds:[0825]=0000 30 47 05 EAX:00000000 EBX:00000820 ECX:00000000 EDX:00000000 ESI:00000BF2 EDI:00000778 EBP:0000FFC2 ESP:0000FFB6 DS:0000 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:0 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0CDB:00000303 pop ds 1F EAX:00000000 EBX:00000820 ECX:00000000 EDX:00000000 ESI:00000BF2 EDI:00000778 EBP:0000FFC2 ESP:0000FFB6 DS:0000 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:1 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0CDB:00000304 pop bx 5B EAX:00000000 EBX:00000820 ECX:00000000 EDX:00000000 ESI:00000BF2 EDI:00000778 EBP:0000FFC2 ESP:0000FFB8 DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:1 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0CDB:00000305 ret C3 EAX:00000000 EBX:00000001 ECX:00000000 EDX:00000000 ESI:00000BF2 EDI:00000778 EBP:0000FFC2 ESP:0000FFBA DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:1 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0CDB:00000319 mov ax,[si-01] ds:[0BF1]=E83D 8B 44 FF EAX:00000000 EBX:00000001 ECX:00000000 EDX:00000000 ESI:00000BF2 EDI:00000778 EBP:0000FFC2 ESP:0000FFBC DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:1 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0CDB:0000031C sub al,34 2C 34 EAX:0000E83D EBX:00000001 ECX:00000000 EDX:00000000 ESI:00000BF2 EDI:00000778 EBP:0000FFC2 ESP:0000FFBC DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:1 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0CDB:0000031E cmp al,08 3C 08 EAX:0000E809 EBX:00000001 ECX:00000000 EDX:00000000 ESI:00000BF2 EDI:00000778 EBP:0000FFC2 ESP:0000FFBC DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0CDB:00000320 jnc 00000377 ($+55) (down) 73 55 EAX:0000E809 EBX:00000001 ECX:00000000 EDX:00000000 ESI:00000BF2 EDI:00000778 EBP:0000FFC2 ESP:0000FFBC DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:0 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0CDB:00000377 ja 000003A2 ($+29) (down) 77 29 EAX:0000E809 EBX:00000001 ECX:00000000 EDX:00000000 ESI:00000BF2 EDI:00000778 EBP:0000FFC2 ESP:0000FFBC DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:0 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0CDB:000003A2 cmp al,09 3C 09 EAX:0000E809 EBX:00000001 ECX:00000000 EDX:00000000 ESI:00000BF2 EDI:00000778 EBP:0000FFC2 ESP:0000FFBC DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:0 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0CDB:000003A4 ja 000003AF ($+9) (no jmp) 77 09 EAX:0000E809 EBX:00000001 ECX:00000000 EDX:00000000 ESI:00000BF2 EDI:00000778 EBP:0000FFC2 ESP:0000FFBC DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:1 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0CDB:000003A6 sub si,0002 83 EE 02 EAX:0000E809 EBX:00000001 ECX:00000000 EDX:00000000 ESI:00000BF2 EDI:00000778 EBP:0000FFC2 ESP:0000FFBC DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:1 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0CDB:000003A9 mov word [si],9B90 ds:[0BF0]=3DCD C7 04 90 9B EAX:0000E809 EBX:00000001 ECX:00000000 EDX:00000000 ESI:00000BF0 EDI:00000778 EBP:0000FFC2 ESP:0000FFBC DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:0 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0CDB:000003AD jmp short 00000347 ($-68) (up) EB 98 EAX:0000E809 EBX:00000001 ECX:00000000 EDX:00000000 ESI:00000BF0 EDI:00000778 EBP:0000FFC2 ESP:0000FFBC DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:0 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0CDB:00000347 mov [bp+02],si ss:[FFC4]=0BF2 89 76 02 EAX:0000E809 EBX:00000001 ECX:00000000 EDX:00000000 ESI:00000BF0 EDI:00000778 EBP:0000FFC2 ESP:0000FFBC DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:0 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0CDB:0000034A jmp short 0000039A ($+4e) (down) EB 4E EAX:0000E809 EBX:00000001 ECX:00000000 EDX:00000000 ESI:00000BF0 EDI:00000778 EBP:0000FFC2 ESP:0000FFBC DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:0 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0CDB:0000039A call 000002F0 ($-ad) E8 53 FF EAX:0000E809 EBX:00000001 ECX:00000000 EDX:00000000 ESI:00000BF0 EDI:00000778 EBP:0000FFC2 ESP:0000FFBC DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:0 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0CDB:000002F0 push bx 53 EAX:0000E809 EBX:00000001 ECX:00000000 EDX:00000000 ESI:00000BF0 EDI:00000778 EBP:0000FFC2 ESP:0000FFBA DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:0 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0CDB:000002F1 mov al,ss:[02D7] ss:[02D7]=0000 36 A0 D7 02 EAX:0000E809 EBX:00000001 ECX:00000000 EDX:00000000 ESI:00000BF0 EDI:00000778 EBP:0000FFC2 ESP:0000FFB8 DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:0 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0CDB:000002F5 mov bx,ds 8C DB EAX:0000E800 EBX:00000001 ECX:00000000 EDX:00000000 ESI:00000BF0 EDI:00000778 EBP:0000FFC2 ESP:0000FFB8 DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:0 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0CDB:000002F7 and bl,F8 80 E3 F8 EAX:0000E800 EBX:00000824 ECX:00000000 EDX:00000000 ESI:00000BF0 EDI:00000778 EBP:0000FFC2 ESP:0000FFB8 DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:0 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0CDB:000002FA push ds 1E EAX:0000E800 EBX:00000820 ECX:00000000 EDX:00000000 ESI:00000BF0 EDI:00000778 EBP:0000FFC2 ESP:0000FFB8 DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:0 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0CDB:000002FB mov ds,ss:[02DA] ss:[02DA]=0000 36 8E 1E DA 02 EAX:0000E800 EBX:00000820 ECX:00000000 EDX:00000000 ESI:00000BF0 EDI:00000778 EBP:0000FFC2 ESP:0000FFB6 DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:0 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0CDB:00000300 xor [bx+05],al ds:[0825]=0000 30 47 05 EAX:0000E800 EBX:00000820 ECX:00000000 EDX:00000000 ESI:00000BF0 EDI:00000778 EBP:0000FFC2 ESP:0000FFB6 DS:0000 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:0 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0CDB:00000303 pop ds 1F EAX:0000E800 EBX:00000820 ECX:00000000 EDX:00000000 ESI:00000BF0 EDI:00000778 EBP:0000FFC2 ESP:0000FFB6 DS:0000 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:1 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0CDB:00000304 pop bx 5B EAX:0000E800 EBX:00000820 ECX:00000000 EDX:00000000 ESI:00000BF0 EDI:00000778 EBP:0000FFC2 ESP:0000FFB8 DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:1 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0CDB:00000305 ret C3 EAX:0000E800 EBX:00000001 ECX:00000000 EDX:00000000 ESI:00000BF0 EDI:00000778 EBP:0000FFC2 ESP:0000FFBA DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:1 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0CDB:0000039D pop ds 1F EAX:0000E800 EBX:00000001 ECX:00000000 EDX:00000000 ESI:00000BF0 EDI:00000778 EBP:0000FFC2 ESP:0000FFBC DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:1 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0CDB:0000039E pop si 5E EAX:0000E800 EBX:00000001 ECX:00000000 EDX:00000000 ESI:00000BF0 EDI:00000778 EBP:0000FFC2 ESP:0000FFBE DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:1 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0CDB:0000039F pop ax 58 EAX:0000E800 EBX:00000001 ECX:00000000 EDX:00000000 ESI:000000AA EDI:00000778 EBP:0000FFC2 ESP:0000FFC0 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:1 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0CDB:000003A0 pop bp 5D EAX:00000000 EBX:00000001 ECX:00000000 EDX:00000000 ESI:000000AA EDI:00000778 EBP:0000FFC2 ESP:0000FFC2 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:1 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0CDB:000003A1 iret CF EAX:00000000 EBX:00000001 ECX:00000000 EDX:00000000 ESI:000000AA EDI:00000778 EBP:0000FFDE ESP:0000FFC4 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:1 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0824:00000BF0 nop 90 EAX:00000000 EBX:00000001 ECX:00000000 EDX:00000000 ESI:000000AA EDI:00000778 EBP:0000FFDE ESP:0000FFCA DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:1 OF:0 AF:1 PF:1 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0824:00000BF1 fwait 9B EAX:00000000 EBX:00000001 ECX:00000000 EDX:00000000 ESI:000000AA EDI:00000778 EBP:0000FFDE ESP:0000FFCA DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:1 OF:0 AF:1 PF:1 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0824:00000BF2 call 00000592 ($-663) E8 9D F9 EAX:00000000 EBX:00000001 ECX:00000000 EDX:00000000 ESI:000000AA EDI:00000778 EBP:0000FFDE ESP:0000FFCA DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:1 OF:0 AF:1 PF:1 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0824:00000592 push bp 55 EAX:00000000 EBX:00000001 ECX:00000000 EDX:00000000 ESI:000000AA EDI:00000778 EBP:0000FFDE ESP:0000FFC8 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:1 OF:0 AF:1 PF:1 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0824:00000593 mov bp,sp 8B EC EAX:00000000 EBX:00000001 ECX:00000000 EDX:00000000 ESI:000000AA EDI:00000778 EBP:0000FFDE ESP:0000FFC6 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:1 OF:0 AF:1 PF:1 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0824:00000595 sub sp,0004 83 EC 04 EAX:00000000 EBX:00000001 ECX:00000000 EDX:00000000 ESI:000000AA EDI:00000778 EBP:0000FFC6 ESP:0000FFC6 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:1 OF:0 AF:1 PF:1 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0824:00000598 xor cx,cx 33 C9 EAX:00000000 EBX:00000001 ECX:00000000 EDX:00000000 ESI:000000AA EDI:00000778 EBP:0000FFC6 ESP:0000FFC2 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:1 OF:0 AF:0 PF:0 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0824:0000059A mov ax,43FE B8 FE 43 EAX:00000000 EBX:00000001 ECX:00000000 EDX:00000000 ESI:000000AA EDI:00000778 EBP:0000FFC6 ESP:0000FFC2 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:1 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0824:0000059D mov bx,3BCD BB CD 3B EAX:000043FE EBX:00000001 ECX:00000000 EDX:00000000 ESI:000000AA EDI:00000778 EBP:0000FFC6 ESP:0000FFC2 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:1 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0824:000005A0 cmp word [bp+16],0000 ss:[FFDC]=0001 83 7E 16 00 EAX:000043FE EBX:00003BCD ECX:00000000 EDX:00000000 ESI:000000AA EDI:00000778 EBP:0000FFC6 ESP:0000FFC2 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:1 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0824:000005A4 jne 000005AC ($+6) (down) 75 06 EAX:000043FE EBX:00003BCD ECX:00000000 EDX:00000000 ESI:000000AA EDI:00000778 EBP:0000FFC6 ESP:0000FFC2 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:0 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0824:000005AC mov dx,[bp+14] ss:[FFDA]=403E 8B 56 14 EAX:000043FE EBX:00003BCD ECX:00000000 EDX:00000000 ESI:000000AA EDI:00000778 EBP:0000FFC6 ESP:0000FFC2 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:0 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0824:000005AF shl dx,1 D1 E2 EAX:000043FE EBX:00003BCD ECX:00000000 EDX:0000403E ESI:000000AA EDI:00000778 EBP:0000FFC6 ESP:0000FFC2 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:0 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0824:000005B1 rcl cx,1 D1 D1 EAX:000043FE EBX:00003BCD ECX:00000000 EDX:0000807C ESI:000000AA EDI:00000778 EBP:0000FFC6 ESP:0000FFC2 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:1 OF:1 AF:1 PF:1 IF:1 TF:0 VM:0 FLG:00007296 CR0:00000010 0824:000005B3 shr dx,1 D1 EA EAX:000043FE EBX:00003BCD ECX:00000000 EDX:0000807C ESI:000000AA EDI:00000778 EBP:0000FFC6 ESP:0000FFC2 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:1 OF:0 AF:1 PF:0 IF:1 TF:0 VM:0 FLG:00007292 CR0:00000010 0824:000005B5 cmp dx,7FFF 81 FA FF 7F EAX:000043FE EBX:00003BCD ECX:00000000 EDX:0000403E ESI:000000AA EDI:00000778 EBP:0000FFC6 ESP:0000FFC2 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:1 AF:1 PF:1 IF:1 TF:0 VM:0 FLG:00007292 CR0:00000010 0824:000005B9 je 00000622 ($+67) (no jmp) 74 67 EAX:000043FE EBX:00003BCD ECX:00000000 EDX:0000403E ESI:000000AA EDI:00000778 EBP:0000FFC6 ESP:0000FFC2 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:1 ZF:0 SF:1 OF:0 AF:1 PF:1 IF:1 TF:0 VM:0 FLG:00007292 CR0:00000010 0824:000005BB cmp dx,ax 3B D0 EAX:000043FE EBX:00003BCD ECX:00000000 EDX:0000403E ESI:000000AA EDI:00000778 EBP:0000FFC6 ESP:0000FFC2 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:1 ZF:0 SF:1 OF:0 AF:1 PF:1 IF:1 TF:0 VM:0 FLG:00007292 CR0:00000010 0824:000005BD je 000005C7 ($+8) (no jmp) 74 08 EAX:000043FE EBX:00003BCD ECX:00000000 EDX:0000403E ESI:000000AA EDI:00000778 EBP:0000FFC6 ESP:0000FFC2 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:1 ZF:0 SF:1 OF:0 AF:0 PF:0 IF:1 TF:0 VM:0 FLG:00007292 CR0:00000010 0824:000005BF jle 000005FC ($+3b) (down) 7E 3B EAX:000043FE EBX:00003BCD ECX:00000000 EDX:0000403E ESI:000000AA EDI:00000778 EBP:0000FFC6 ESP:0000FFC2 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:1 ZF:0 SF:1 OF:0 AF:0 PF:0 IF:1 TF:0 VM:0 FLG:00007292 CR0:00000010 0824:000005FC mov ax,dx 8B C2 EAX:000043FE EBX:00003BCD ECX:00000000 EDX:0000403E ESI:000000AA EDI:00000778 EBP:0000FFC6 ESP:0000FFC2 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:1 ZF:0 SF:1 OF:0 AF:0 PF:0 IF:1 TF:0 VM:0 FLG:00007292 CR0:00000010 0824:000005FE or ax,[bp+12] ss:[FFD8]=0000 0B 46 12 EAX:0000403E EBX:00003BCD ECX:00000000 EDX:0000403E ESI:000000AA EDI:00000778 EBP:0000FFC6 ESP:0000FFC2 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:1 ZF:0 SF:1 OF:0 AF:0 PF:0 IF:1 TF:0 VM:0 FLG:00007292 CR0:00000010 0824:00000601 or ax,[bp+10] ss:[FFD6]=0000 0B 46 10 EAX:0000403E EBX:00003BCD ECX:00000000 EDX:0000403E ESI:000000AA EDI:00000778 EBP:0000FFC6 ESP:0000FFC2 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007292 CR0:00000010 0824:00000604 or ax,[bp+0E] ss:[FFD4]=0000 0B 46 0E EAX:0000403E EBX:00003BCD ECX:00000000 EDX:0000403E ESI:000000AA EDI:00000778 EBP:0000FFC6 ESP:0000FFC2 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007292 CR0:00000010 0824:00000607 or ax,[bp+0C] ss:[FFD2]=007B 0B 46 0C EAX:0000403E EBX:00003BCD ECX:00000000 EDX:0000403E ESI:000000AA EDI:00000778 EBP:0000FFC6 ESP:0000FFC2 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007292 CR0:00000010 0824:0000060A je 00000622 ($+16) (no jmp) 74 16 EAX:0000407F EBX:00003BCD ECX:00000000 EDX:0000403E ESI:000000AA EDI:00000778 EBP:0000FFC6 ESP:0000FFC2 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007292 CR0:00000010 0824:0000060C cmp dx,bx 3B D3 EAX:0000407F EBX:00003BCD ECX:00000000 EDX:0000403E ESI:000000AA EDI:00000778 EBP:0000FFC6 ESP:0000FFC2 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007292 CR0:00000010 0824:0000060E jge 00000622 ($+12) (down) 7D 12 EAX:0000407F EBX:00003BCD ECX:00000000 EDX:0000403E ESI:000000AA EDI:00000778 EBP:0000FFC6 ESP:0000FFC2 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007292 CR0:00000010 0824:00000622 int 37 CD 37 EAX:0000407F EBX:00003BCD ECX:00000000 EDX:0000403E ESI:000000AA EDI:00000778 EBP:0000FFC6 ESP:0000FFC2 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007292 CR0:00000010 0CDB:00000306 push bp 55 EAX:0000407F EBX:00003BCD ECX:00000000 EDX:0000403E ESI:000000AA EDI:00000778 EBP:0000FFC6 ESP:0000FFBC DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:1 IF:0 TF:0 VM:0 FLG:00007006 CR0:00000010 0CDB:00000307 mov bp,sp 8B EC EAX:0000407F EBX:00003BCD ECX:00000000 EDX:0000403E ESI:000000AA EDI:00000778 EBP:0000FFC6 ESP:0000FFBA DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:1 IF:0 TF:0 VM:0 FLG:00007006 CR0:00000010 0CDB:00000309 push ax 50 EAX:0000407F EBX:00003BCD ECX:00000000 EDX:0000403E ESI:000000AA EDI:00000778 EBP:0000FFBA ESP:0000FFBA DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:1 IF:0 TF:0 VM:0 FLG:00007006 CR0:00000010 0CDB:0000030A push si 56 EAX:0000407F EBX:00003BCD ECX:00000000 EDX:0000403E ESI:000000AA EDI:00000778 EBP:0000FFBA ESP:0000FFB8 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:1 IF:0 TF:0 VM:0 FLG:00007006 CR0:00000010 0CDB:0000030B push ds 1E EAX:0000407F EBX:00003BCD ECX:00000000 EDX:0000403E ESI:000000AA EDI:00000778 EBP:0000FFBA ESP:0000FFB6 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:1 IF:0 TF:0 VM:0 FLG:00007006 CR0:00000010 0CDB:0000030C test byte [bp+07],02 ss:[FFC1]=DE72 F6 46 07 02 EAX:0000407F EBX:00003BCD ECX:00000000 EDX:0000403E ESI:000000AA EDI:00000778 EBP:0000FFBA ESP:0000FFB4 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:1 IF:0 TF:0 VM:0 FLG:00007006 CR0:00000010 0CDB:00000310 je 00000313 ($+1) (no jmp) 74 01 EAX:0000407F EBX:00003BCD ECX:00000000 EDX:0000403E ESI:000000AA EDI:00000778 EBP:0000FFBA ESP:0000FFB4 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:0 IF:0 TF:0 VM:0 FLG:00007006 CR0:00000010 0CDB:00000312 sti FB EAX:0000407F EBX:00003BCD ECX:00000000 EDX:0000403E ESI:000000AA EDI:00000778 EBP:0000FFBA ESP:0000FFB4 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:0 IF:0 TF:0 VM:0 FLG:00007006 CR0:00000010 0CDB:00000313 lds si,[bp+02] ss:[FFBC]=0624 C5 76 02 EAX:0000407F EBX:00003BCD ECX:00000000 EDX:0000403E ESI:000000AA EDI:00000778 EBP:0000FFBA ESP:0000FFB4 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:0 IF:1 TF:0 VM:0 FLG:00007206 CR0:00000010 F000:0000E987 push ax 50 EAX:0000407F EBX:00003BCD ECX:00000000 EDX:0000403E ESI:00000624 EDI:00000778 EBP:0000FFBA ESP:0000FFAE DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:0 IF:0 TF:0 VM:0 FLG:00007002 CR0:00000010 F000:0000E988 in al,60 E4 60 EAX:0000407F EBX:00003BCD ECX:00000000 EDX:0000403E ESI:00000624 EDI:00000778 EBP:0000FFBA ESP:0000FFAC DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:0 IF:0 TF:0 VM:0 FLG:00007002 CR0:00000010 F000:0000E98A mov ah,4F B4 4F EAX:0000409C EBX:00003BCD ECX:00000000 EDX:0000403E ESI:00000624 EDI:00000778 EBP:0000FFBA ESP:0000FFAC DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:0 IF:0 TF:0 VM:0 FLG:00007002 CR0:00000010 F000:0000E98C stc F9 EAX:00004F9C EBX:00003BCD ECX:00000000 EDX:0000403E ESI:00000624 EDI:00000778 EBP:0000FFBA ESP:0000FFAC DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:0 IF:0 TF:0 VM:0 FLG:00007002 CR0:00000010 F000:0000E98D int 15 CD 15 EAX:00004F9C EBX:00003BCD ECX:00000000 EDX:0000403E ESI:00000624 EDI:00000778 EBP:0000FFBA ESP:0000FFAC DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:1 ZF:0 SF:0 OF:0 AF:0 PF:0 IF:0 TF:0 VM:0 FLG:00007003 CR0:00000010 F000:0000CBA0 callback 000D (Int 15 Bios) FE 38 0D 00 EAX:00004F9C EBX:00003BCD ECX:00000000 EDX:0000403E ESI:00000624 EDI:00000778 EBP:0000FFBA ESP:0000FFA6 DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:1 ZF:0 SF:0 OF:0 AF:0 PF:0 IF:0 TF:0 VM:0 FLG:00007003 CR0:00000010 F000:0000CBA4 iret CF EAX:00004F9C EBX:00003BCD ECX:00000000 EDX:0000403E ESI:00000624 EDI:00000778 EBP:0000FFBA ESP:0000FFA6 DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:1 ZF:0 SF:0 OF:0 AF:0 PF:0 IF:0 TF:0 VM:0 FLG:00007003 CR0:00000010 F000:0000E98F jnc 0000E995 ($+4) (no jmp) 73 04 EAX:00004F9C EBX:00003BCD ECX:00000000 EDX:0000403E ESI:00000624 EDI:00000778 EBP:0000FFBA ESP:0000FFAC DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:1 ZF:0 SF:0 OF:0 AF:0 PF:0 IF:0 TF:0 VM:0 FLG:00007003 CR0:00000010 F000:0000E991 callback 002F (IRQ 1 Keyboard) FE 38 2F 00 EAX:00004F9C EBX:00003BCD ECX:00000000 EDX:0000403E ESI:00000624 EDI:00000778 EBP:0000FFBA ESP:0000FFAC DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:1 ZF:0 SF:0 OF:0 AF:0 PF:0 IF:0 TF:0 VM:0 FLG:00007003 CR0:00000010 F000:0000E995 cli FA EAX:00004F9C EBX:00003BCD ECX:00000000 EDX:0000403E ESI:00000624 EDI:00000778 EBP:0000FFBA ESP:0000FFAC DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:1 ZF:0 SF:0 OF:0 AF:0 PF:0 IF:0 TF:0 VM:0 FLG:00007003 CR0:00000010 F000:0000E996 mov al,20 B0 20 EAX:00004F9C EBX:00003BCD ECX:00000000 EDX:0000403E ESI:00000624 EDI:00000778 EBP:0000FFBA ESP:0000FFAC DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:1 ZF:0 SF:0 OF:0 AF:0 PF:0 IF:0 TF:0 VM:0 FLG:00007003 CR0:00000010 F000:0000E998 out 20,al E6 20 EAX:00004F20 EBX:00003BCD ECX:00000000 EDX:0000403E ESI:00000624 EDI:00000778 EBP:0000FFBA ESP:0000FFAC DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:1 ZF:0 SF:0 OF:0 AF:0 PF:0 IF:0 TF:0 VM:0 FLG:00007003 CR0:00000010 F000:0000E99A pop ax 58 EAX:00004F20 EBX:00003BCD ECX:00000000 EDX:0000403E ESI:00000624 EDI:00000778 EBP:0000FFBA ESP:0000FFAC DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:1 ZF:0 SF:0 OF:0 AF:0 PF:0 IF:0 TF:0 VM:0 FLG:00007003 CR0:00000010 F000:0000E99B iret CF EAX:0000407F EBX:00003BCD ECX:00000000 EDX:0000403E ESI:00000624 EDI:00000778 EBP:0000FFBA ESP:0000FFAE DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:1 ZF:0 SF:0 OF:0 AF:0 PF:0 IF:0 TF:0 VM:0 FLG:00007003 CR0:00000010 0CDB:00000316 call 000002F0 ($-29) E8 D7 FF EAX:0000407F EBX:00003BCD ECX:00000000 EDX:0000403E ESI:00000624 EDI:00000778 EBP:0000FFBA ESP:0000FFB4 DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:0 IF:1 TF:0 VM:0 FLG:00007202 CR0:00000010 0CDB:000002F0 push bx 53 EAX:0000407F EBX:00003BCD ECX:00000000 EDX:0000403E ESI:00000624 EDI:00000778 EBP:0000FFBA ESP:0000FFB2 DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:0 IF:1 TF:0 VM:0 FLG:00007202 CR0:00000010 0CDB:000002F1 mov al,ss:[02D7] ss:[02D7]=0000 36 A0 D7 02 EAX:0000407F EBX:00003BCD ECX:00000000 EDX:0000403E ESI:00000624 EDI:00000778 EBP:0000FFBA ESP:0000FFB0 DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:0 IF:1 TF:0 VM:0 FLG:00007202 CR0:00000010 0CDB:000002F5 mov bx,ds 8C DB EAX:00004000 EBX:00003BCD ECX:00000000 EDX:0000403E ESI:00000624 EDI:00000778 EBP:0000FFBA ESP:0000FFB0 DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:0 IF:1 TF:0 VM:0 FLG:00007202 CR0:00000010 0CDB:000002F7 and bl,F8 80 E3 F8 EAX:00004000 EBX:00000824 ECX:00000000 EDX:0000403E ESI:00000624 EDI:00000778 EBP:0000FFBA ESP:0000FFB0 DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:0 IF:1 TF:0 VM:0 FLG:00007202 CR0:00000010 0CDB:000002FA push ds 1E EAX:00004000 EBX:00000820 ECX:00000000 EDX:0000403E ESI:00000624 EDI:00000778 EBP:0000FFBA ESP:0000FFB0 DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:0 IF:1 TF:0 VM:0 FLG:00007202 CR0:00000010 0CDB:000002FB mov ds,ss:[02DA] ss:[02DA]=0000 36 8E 1E DA 02 EAX:00004000 EBX:00000820 ECX:00000000 EDX:0000403E ESI:00000624 EDI:00000778 EBP:0000FFBA ESP:0000FFAE DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:0 IF:1 TF:0 VM:0 FLG:00007202 CR0:00000010 0CDB:00000300 xor [bx+05],al ds:[0825]=0000 30 47 05 EAX:00004000 EBX:00000820 ECX:00000000 EDX:0000403E ESI:00000624 EDI:00000778 EBP:0000FFBA ESP:0000FFAE DS:0000 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:0 IF:1 TF:0 VM:0 FLG:00007202 CR0:00000010 0CDB:00000303 pop ds 1F EAX:00004000 EBX:00000820 ECX:00000000 EDX:0000403E ESI:00000624 EDI:00000778 EBP:0000FFBA ESP:0000FFAE DS:0000 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:1 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007202 CR0:00000010 0CDB:00000304 pop bx 5B EAX:00004000 EBX:00000820 ECX:00000000 EDX:0000403E ESI:00000624 EDI:00000778 EBP:0000FFBA ESP:0000FFB0 DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:1 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007202 CR0:00000010 0CDB:00000305 ret C3 EAX:00004000 EBX:00003BCD ECX:00000000 EDX:0000403E ESI:00000624 EDI:00000778 EBP:0000FFBA ESP:0000FFB2 DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:1 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007202 CR0:00000010 0CDB:00000319 mov ax,[si-01] ds:[0623]=6E37 8B 44 FF EAX:00004000 EBX:00003BCD ECX:00000000 EDX:0000403E ESI:00000624 EDI:00000778 EBP:0000FFBA ESP:0000FFB4 DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:1 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007202 CR0:00000010 0CDB:0000031C sub al,34 2C 34 EAX:00006E37 EBX:00003BCD ECX:00000000 EDX:0000403E ESI:00000624 EDI:00000778 EBP:0000FFBA ESP:0000FFB4 DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:1 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007202 CR0:00000010 0CDB:0000031E cmp al,08 3C 08 EAX:00006E03 EBX:00003BCD ECX:00000000 EDX:0000403E ESI:00000624 EDI:00000778 EBP:0000FFBA ESP:0000FFB4 DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007202 CR0:00000010 0CDB:00000320 jnc 00000377 ($+55) (no jmp) 73 55 EAX:00006E03 EBX:00003BCD ECX:00000000 EDX:0000403E ESI:00000624 EDI:00000778 EBP:0000FFBA ESP:0000FFB4 DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:1 ZF:0 SF:1 OF:0 AF:1 PF:0 IF:1 TF:0 VM:0 FLG:00007202 CR0:00000010 0CDB:00000322 cmp ax,E303 3D 03 E3 EAX:00006E03 EBX:00003BCD ECX:00000000 EDX:0000403E ESI:00000624 EDI:00000778 EBP:0000FFBA ESP:0000FFB4 DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:1 ZF:0 SF:1 OF:0 AF:1 PF:0 IF:1 TF:0 VM:0 FLG:00007202 CR0:00000010 0CDB:00000325 je 0000034C ($+25) (no jmp) 74 25 EAX:00006E03 EBX:00003BCD ECX:00000000 EDX:0000403E ESI:00000624 EDI:00000778 EBP:0000FFBA ESP:0000FFB4 DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:1 ZF:0 SF:1 OF:1 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007202 CR0:00000010 0CDB:00000327 cmp ax,E007 3D 07 E0 EAX:00006E03 EBX:00003BCD ECX:00000000 EDX:0000403E ESI:00000624 EDI:00000778 EBP:0000FFBA ESP:0000FFB4 DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:1 ZF:0 SF:1 OF:1 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007202 CR0:00000010 0CDB:0000032A jne 0000033D ($+11) (down) 75 11 EAX:00006E03 EBX:00003BCD ECX:00000000 EDX:0000403E ESI:00000624 EDI:00000778 EBP:0000FFBA ESP:0000FFB4 DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:1 ZF:0 SF:1 OF:1 AF:1 PF:1 IF:1 TF:0 VM:0 FLG:00007202 CR0:00000010 0CDB:0000033D sub si,0002 83 EE 02 EAX:00006E03 EBX:00003BCD ECX:00000000 EDX:0000403E ESI:00000624 EDI:00000778 EBP:0000FFBA ESP:0000FFB4 DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:1 ZF:0 SF:1 OF:1 AF:1 PF:1 IF:1 TF:0 VM:0 FLG:00007202 CR0:00000010 0CDB:00000340 mov byte [si],9B ds:[0622]=37CD C6 04 9B EAX:00006E03 EBX:00003BCD ECX:00000000 EDX:0000403E ESI:00000622 EDI:00000778 EBP:0000FFBA ESP:0000FFB4 DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007202 CR0:00000010 0CDB:00000343 add byte [si+01],A4 ds:[0623]=6E37 80 44 01 A4 EAX:00006E03 EBX:00003BCD ECX:00000000 EDX:0000403E ESI:00000622 EDI:00000778 EBP:0000FFBA ESP:0000FFB4 DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007202 CR0:00000010 0CDB:00000347 mov [bp+02],si ss:[FFBC]=0624 89 76 02 EAX:00006E03 EBX:00003BCD ECX:00000000 EDX:0000403E ESI:00000622 EDI:00000778 EBP:0000FFBA ESP:0000FFB4 DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:1 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007202 CR0:00000010 0CDB:0000034A jmp short 0000039A ($+4e) (down) EB 4E EAX:00006E03 EBX:00003BCD ECX:00000000 EDX:0000403E ESI:00000622 EDI:00000778 EBP:0000FFBA ESP:0000FFB4 DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:1 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007202 CR0:00000010 0CDB:0000039A call 000002F0 ($-ad) E8 53 FF EAX:00006E03 EBX:00003BCD ECX:00000000 EDX:0000403E ESI:00000622 EDI:00000778 EBP:0000FFBA ESP:0000FFB4 DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:1 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007202 CR0:00000010 0CDB:000002F0 push bx 53 EAX:00006E03 EBX:00003BCD ECX:00000000 EDX:0000403E ESI:00000622 EDI:00000778 EBP:0000FFBA ESP:0000FFB2 DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:1 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007202 CR0:00000010 0CDB:000002F1 mov al,ss:[02D7] ss:[02D7]=0000 36 A0 D7 02 EAX:00006E03 EBX:00003BCD ECX:00000000 EDX:0000403E ESI:00000622 EDI:00000778 EBP:0000FFBA ESP:0000FFB0 DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:1 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007202 CR0:00000010 0CDB:000002F5 mov bx,ds 8C DB EAX:00006E00 EBX:00003BCD ECX:00000000 EDX:0000403E ESI:00000622 EDI:00000778 EBP:0000FFBA ESP:0000FFB0 DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:1 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007202 CR0:00000010 0CDB:000002F7 and bl,F8 80 E3 F8 EAX:00006E00 EBX:00000824 ECX:00000000 EDX:0000403E ESI:00000622 EDI:00000778 EBP:0000FFBA ESP:0000FFB0 DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:1 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007202 CR0:00000010 0CDB:000002FA push ds 1E EAX:00006E00 EBX:00000820 ECX:00000000 EDX:0000403E ESI:00000622 EDI:00000778 EBP:0000FFBA ESP:0000FFB0 DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:0 IF:1 TF:0 VM:0 FLG:00007202 CR0:00000010 0CDB:000002FB mov ds,ss:[02DA] ss:[02DA]=0000 36 8E 1E DA 02 EAX:00006E00 EBX:00000820 ECX:00000000 EDX:0000403E ESI:00000622 EDI:00000778 EBP:0000FFBA ESP:0000FFAE DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:0 IF:1 TF:0 VM:0 FLG:00007202 CR0:00000010 0CDB:00000300 xor [bx+05],al ds:[0825]=0000 30 47 05 EAX:00006E00 EBX:00000820 ECX:00000000 EDX:0000403E ESI:00000622 EDI:00000778 EBP:0000FFBA ESP:0000FFAE DS:0000 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:0 IF:1 TF:0 VM:0 FLG:00007202 CR0:00000010 0CDB:00000303 pop ds 1F EAX:00006E00 EBX:00000820 ECX:00000000 EDX:0000403E ESI:00000622 EDI:00000778 EBP:0000FFBA ESP:0000FFAE DS:0000 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:1 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007202 CR0:00000010 0CDB:00000304 pop bx 5B EAX:00006E00 EBX:00000820 ECX:00000000 EDX:0000403E ESI:00000622 EDI:00000778 EBP:0000FFBA ESP:0000FFB0 DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:1 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007202 CR0:00000010 0CDB:00000305 ret C3 EAX:00006E00 EBX:00003BCD ECX:00000000 EDX:0000403E ESI:00000622 EDI:00000778 EBP:0000FFBA ESP:0000FFB2 DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:1 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007202 CR0:00000010 0CDB:0000039D pop ds 1F EAX:00006E00 EBX:00003BCD ECX:00000000 EDX:0000403E ESI:00000622 EDI:00000778 EBP:0000FFBA ESP:0000FFB4 DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:1 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007202 CR0:00000010 0CDB:0000039E pop si 5E EAX:00006E00 EBX:00003BCD ECX:00000000 EDX:0000403E ESI:00000622 EDI:00000778 EBP:0000FFBA ESP:0000FFB6 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:1 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007202 CR0:00000010 0CDB:0000039F pop ax 58 EAX:00006E00 EBX:00003BCD ECX:00000000 EDX:0000403E ESI:000000AA EDI:00000778 EBP:0000FFBA ESP:0000FFB8 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:1 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007202 CR0:00000010 0CDB:000003A0 pop bp 5D EAX:0000407F EBX:00003BCD ECX:00000000 EDX:0000403E ESI:000000AA EDI:00000778 EBP:0000FFBA ESP:0000FFBA DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:1 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007202 CR0:00000010 0CDB:000003A1 iret CF EAX:0000407F EBX:00003BCD ECX:00000000 EDX:0000403E ESI:000000AA EDI:00000778 EBP:0000FFC6 ESP:0000FFBC DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:1 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007202 CR0:00000010 0824:00000622 fwait 9B EAX:0000407F EBX:00003BCD ECX:00000000 EDX:0000403E ESI:000000AA EDI:00000778 EBP:0000FFC6 ESP:0000FFC2 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007206 CR0:00000010 0824:00000623 fldt [bp+0C] ss:[FFD2]=007B DB 6E 0C EAX:0000407F EBX:00003BCD ECX:00000000 EDX:0000403E ESI:000000AA EDI:00000778 EBP:0000FFC6 ESP:0000FFC2 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007206 CR0:00000010 0824:00000626 mov sp,bp 8B E5 EAX:0000407F EBX:00003BCD ECX:00000000 EDX:0000403E ESI:000000AA EDI:00000778 EBP:0000FFC6 ESP:0000FFC2 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007206 CR0:00000010 0824:00000628 pop bp 5D EAX:0000407F EBX:00003BCD ECX:00000000 EDX:0000403E ESI:000000AA EDI:00000778 EBP:0000FFC6 ESP:0000FFC6 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007206 CR0:00000010 0824:00000629 ret 0014 C2 14 00 EAX:0000407F EBX:00003BCD ECX:00000000 EDX:0000403E ESI:000000AA EDI:00000778 EBP:0000FFDE ESP:0000FFC8 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007206 CR0:00000010 0824:00000BF5 pop bp 5D EAX:0000407F EBX:00003BCD ECX:00000000 EDX:0000403E ESI:000000AA EDI:00000778 EBP:0000FFDE ESP:0000FFDE DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007206 CR0:00000010 0824:00000BF6 ret C3 EAX:0000407F EBX:00003BCD ECX:00000000 EDX:0000403E ESI:000000AA EDI:00000778 EBP:0000FFE6 ESP:0000FFE0 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007206 CR0:00000010 0824:0000058E pop cx 59 EAX:0000407F EBX:00003BCD ECX:00000000 EDX:0000403E ESI:000000AA EDI:00000778 EBP:0000FFE6 ESP:0000FFE2 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007206 CR0:00000010 0824:0000058F pop cx 59 EAX:0000407F EBX:00003BCD ECX:000000AA EDX:0000403E ESI:000000AA EDI:00000778 EBP:0000FFE6 ESP:0000FFE4 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007206 CR0:00000010 0824:00000590 pop bp 5D EAX:0000407F EBX:00003BCD ECX:00000000 EDX:0000403E ESI:000000AA EDI:00000778 EBP:0000FFE6 ESP:0000FFE6 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007206 CR0:00000010 0824:00000591 ret C3 EAX:0000407F EBX:00003BCD ECX:00000000 EDX:0000403E ESI:000000AA EDI:00000778 EBP:0000FFF6 ESP:0000FFE8 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007206 CR0:00000010 0824:000002FD pop cx 59 EAX:0000407F EBX:00003BCD ECX:00000000 EDX:0000403E ESI:000000AA EDI:00000778 EBP:0000FFF6 ESP:0000FFEA DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007206 CR0:00000010 0824:000002FE int 39 CD 39 EAX:0000407F EBX:00003BCD ECX:000000AA EDX:0000403E ESI:000000AA EDI:00000778 EBP:0000FFF6 ESP:0000FFEC DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007206 CR0:00000010 0CDB:00000306 push bp 55 EAX:0000407F EBX:00003BCD ECX:000000AA EDX:0000403E ESI:000000AA EDI:00000778 EBP:0000FFF6 ESP:0000FFE6 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:1 IF:0 TF:0 VM:0 FLG:00007006 CR0:00000010 0CDB:00000307 mov bp,sp 8B EC EAX:0000407F EBX:00003BCD ECX:000000AA EDX:0000403E ESI:000000AA EDI:00000778 EBP:0000FFF6 ESP:0000FFE4 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:1 IF:0 TF:0 VM:0 FLG:00007006 CR0:00000010 0CDB:00000309 push ax 50 EAX:0000407F EBX:00003BCD ECX:000000AA EDX:0000403E ESI:000000AA EDI:00000778 EBP:0000FFE4 ESP:0000FFE4 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:1 IF:0 TF:0 VM:0 FLG:00007006 CR0:00000010 0CDB:0000030A push si 56 EAX:0000407F EBX:00003BCD ECX:000000AA EDX:0000403E ESI:000000AA EDI:00000778 EBP:0000FFE4 ESP:0000FFE2 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:1 IF:0 TF:0 VM:0 FLG:00007006 CR0:00000010 0CDB:0000030B push ds 1E EAX:0000407F EBX:00003BCD ECX:000000AA EDX:0000403E ESI:000000AA EDI:00000778 EBP:0000FFE4 ESP:0000FFE0 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:1 IF:0 TF:0 VM:0 FLG:00007006 CR0:00000010 0CDB:0000030C test byte [bp+07],02 ss:[FFEB]=6C72 F6 46 07 02 EAX:0000407F EBX:00003BCD ECX:000000AA EDX:0000403E ESI:000000AA EDI:00000778 EBP:0000FFE4 ESP:0000FFDE DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:1 IF:0 TF:0 VM:0 FLG:00007006 CR0:00000010 0CDB:00000310 je 00000313 ($+1) (no jmp) 74 01 EAX:0000407F EBX:00003BCD ECX:000000AA EDX:0000403E ESI:000000AA EDI:00000778 EBP:0000FFE4 ESP:0000FFDE DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:0 IF:0 TF:0 VM:0 FLG:00007006 CR0:00000010 0CDB:00000312 sti FB EAX:0000407F EBX:00003BCD ECX:000000AA EDX:0000403E ESI:000000AA EDI:00000778 EBP:0000FFE4 ESP:0000FFDE DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:0 IF:0 TF:0 VM:0 FLG:00007006 CR0:00000010 0CDB:00000313 lds si,[bp+02] ss:[FFE6]=0300 C5 76 02 EAX:0000407F EBX:00003BCD ECX:000000AA EDX:0000403E ESI:000000AA EDI:00000778 EBP:0000FFE4 ESP:0000FFDE DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:0 IF:1 TF:0 VM:0 FLG:00007206 CR0:00000010 0CDB:00000316 call 000002F0 ($-29) E8 D7 FF EAX:0000407F EBX:00003BCD ECX:000000AA EDX:0000403E ESI:00000300 EDI:00000778 EBP:0000FFE4 ESP:0000FFDE DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:0 IF:1 TF:0 VM:0 FLG:00007206 CR0:00000010 0CDB:000002F0 push bx 53 EAX:0000407F EBX:00003BCD ECX:000000AA EDX:0000403E ESI:00000300 EDI:00000778 EBP:0000FFE4 ESP:0000FFDC DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:0 IF:1 TF:0 VM:0 FLG:00007206 CR0:00000010 0CDB:000002F1 mov al,ss:[02D7] ss:[02D7]=0000 36 A0 D7 02 EAX:0000407F EBX:00003BCD ECX:000000AA EDX:0000403E ESI:00000300 EDI:00000778 EBP:0000FFE4 ESP:0000FFDA DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:0 IF:1 TF:0 VM:0 FLG:00007206 CR0:00000010 0CDB:000002F5 mov bx,ds 8C DB EAX:00004000 EBX:00003BCD ECX:000000AA EDX:0000403E ESI:00000300 EDI:00000778 EBP:0000FFE4 ESP:0000FFDA DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:0 IF:1 TF:0 VM:0 FLG:00007206 CR0:00000010 0CDB:000002F7 and bl,F8 80 E3 F8 EAX:00004000 EBX:00000824 ECX:000000AA EDX:0000403E ESI:00000300 EDI:00000778 EBP:0000FFE4 ESP:0000FFDA DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:0 IF:1 TF:0 VM:0 FLG:00007206 CR0:00000010 0CDB:000002FA push ds 1E EAX:00004000 EBX:00000820 ECX:000000AA EDX:0000403E ESI:00000300 EDI:00000778 EBP:0000FFE4 ESP:0000FFDA DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:0 IF:1 TF:0 VM:0 FLG:00007206 CR0:00000010 0CDB:000002FB mov ds,ss:[02DA] ss:[02DA]=0000 36 8E 1E DA 02 EAX:00004000 EBX:00000820 ECX:000000AA EDX:0000403E ESI:00000300 EDI:00000778 EBP:0000FFE4 ESP:0000FFD8 DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:0 IF:1 TF:0 VM:0 FLG:00007206 CR0:00000010 0CDB:00000300 xor [bx+05],al ds:[0825]=0000 30 47 05 EAX:00004000 EBX:00000820 ECX:000000AA EDX:0000403E ESI:00000300 EDI:00000778 EBP:0000FFE4 ESP:0000FFD8 DS:0000 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:0 IF:1 TF:0 VM:0 FLG:00007206 CR0:00000010 0CDB:00000303 pop ds 1F EAX:00004000 EBX:00000820 ECX:000000AA EDX:0000403E ESI:00000300 EDI:00000778 EBP:0000FFE4 ESP:0000FFD8 DS:0000 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:1 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007206 CR0:00000010 0CDB:00000304 pop bx 5B EAX:00004000 EBX:00000820 ECX:000000AA EDX:0000403E ESI:00000300 EDI:00000778 EBP:0000FFE4 ESP:0000FFDA DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:1 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007206 CR0:00000010 0CDB:00000305 ret C3 EAX:00004000 EBX:00003BCD ECX:000000AA EDX:0000403E ESI:00000300 EDI:00000778 EBP:0000FFE4 ESP:0000FFDC DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:1 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007206 CR0:00000010 0CDB:00000319 mov ax,[si-01] ds:[02FF]=5E39 8B 44 FF EAX:00004000 EBX:00003BCD ECX:000000AA EDX:0000403E ESI:00000300 EDI:00000778 EBP:0000FFE4 ESP:0000FFDE DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:1 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007206 CR0:00000010 0CDB:0000031C sub al,34 2C 34 EAX:00005E39 EBX:00003BCD ECX:000000AA EDX:0000403E ESI:00000300 EDI:00000778 EBP:0000FFE4 ESP:0000FFDE DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:1 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007206 CR0:00000010 0CDB:0000031E cmp al,08 3C 08 EAX:00005E05 EBX:00003BCD ECX:000000AA EDX:0000403E ESI:00000300 EDI:00000778 EBP:0000FFE4 ESP:0000FFDE DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007206 CR0:00000010 0CDB:00000320 jnc 00000377 ($+55) (no jmp) 73 55 EAX:00005E05 EBX:00003BCD ECX:000000AA EDX:0000403E ESI:00000300 EDI:00000778 EBP:0000FFE4 ESP:0000FFDE DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:1 ZF:0 SF:1 OF:0 AF:1 PF:0 IF:1 TF:0 VM:0 FLG:00007206 CR0:00000010 0CDB:00000322 cmp ax,E303 3D 03 E3 EAX:00005E05 EBX:00003BCD ECX:000000AA EDX:0000403E ESI:00000300 EDI:00000778 EBP:0000FFE4 ESP:0000FFDE DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:1 ZF:0 SF:1 OF:0 AF:1 PF:0 IF:1 TF:0 VM:0 FLG:00007206 CR0:00000010 0CDB:00000325 je 0000034C ($+25) (no jmp) 74 25 EAX:00005E05 EBX:00003BCD ECX:000000AA EDX:0000403E ESI:00000300 EDI:00000778 EBP:0000FFE4 ESP:0000FFDE DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:1 ZF:0 SF:0 OF:0 AF:0 PF:0 IF:1 TF:0 VM:0 FLG:00007206 CR0:00000010 0CDB:00000327 cmp ax,E007 3D 07 E0 EAX:00005E05 EBX:00003BCD ECX:000000AA EDX:0000403E ESI:00000300 EDI:00000778 EBP:0000FFE4 ESP:0000FFDE DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:1 ZF:0 SF:0 OF:0 AF:0 PF:0 IF:1 TF:0 VM:0 FLG:00007206 CR0:00000010 0CDB:0000032A jne 0000033D ($+11) (down) 75 11 EAX:00005E05 EBX:00003BCD ECX:000000AA EDX:0000403E ESI:00000300 EDI:00000778 EBP:0000FFE4 ESP:0000FFDE DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:1 ZF:0 SF:0 OF:0 AF:1 PF:0 IF:1 TF:0 VM:0 FLG:00007206 CR0:00000010 0CDB:0000033D sub si,0002 83 EE 02 EAX:00005E05 EBX:00003BCD ECX:000000AA EDX:0000403E ESI:00000300 EDI:00000778 EBP:0000FFE4 ESP:0000FFDE DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:1 ZF:0 SF:0 OF:0 AF:1 PF:0 IF:1 TF:0 VM:0 FLG:00007206 CR0:00000010 0CDB:00000340 mov byte [si],9B ds:[02FE]=39CD C6 04 9B EAX:00005E05 EBX:00003BCD ECX:000000AA EDX:0000403E ESI:000002FE EDI:00000778 EBP:0000FFE4 ESP:0000FFDE DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:1 PF:1 IF:1 TF:0 VM:0 FLG:00007206 CR0:00000010 0CDB:00000343 add byte [si+01],A4 ds:[02FF]=5E39 80 44 01 A4 EAX:00005E05 EBX:00003BCD ECX:000000AA EDX:0000403E ESI:000002FE EDI:00000778 EBP:0000FFE4 ESP:0000FFDE DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:1 PF:1 IF:1 TF:0 VM:0 FLG:00007206 CR0:00000010 0CDB:00000347 mov [bp+02],si ss:[FFE6]=0300 89 76 02 EAX:00005E05 EBX:00003BCD ECX:000000AA EDX:0000403E ESI:000002FE EDI:00000778 EBP:0000FFE4 ESP:0000FFDE DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:1 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007206 CR0:00000010 0CDB:0000034A jmp short 0000039A ($+4e) (down) EB 4E EAX:00005E05 EBX:00003BCD ECX:000000AA EDX:0000403E ESI:000002FE EDI:00000778 EBP:0000FFE4 ESP:0000FFDE DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:1 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007206 CR0:00000010 0CDB:0000039A call 000002F0 ($-ad) E8 53 FF EAX:00005E05 EBX:00003BCD ECX:000000AA EDX:0000403E ESI:000002FE EDI:00000778 EBP:0000FFE4 ESP:0000FFDE DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:1 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007206 CR0:00000010 0CDB:000002F0 push bx 53 EAX:00005E05 EBX:00003BCD ECX:000000AA EDX:0000403E ESI:000002FE EDI:00000778 EBP:0000FFE4 ESP:0000FFDC DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:1 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007206 CR0:00000010 0CDB:000002F1 mov al,ss:[02D7] ss:[02D7]=0000 36 A0 D7 02 EAX:00005E05 EBX:00003BCD ECX:000000AA EDX:0000403E ESI:000002FE EDI:00000778 EBP:0000FFE4 ESP:0000FFDA DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:1 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007206 CR0:00000010 0CDB:000002F5 mov bx,ds 8C DB EAX:00005E00 EBX:00003BCD ECX:000000AA EDX:0000403E ESI:000002FE EDI:00000778 EBP:0000FFE4 ESP:0000FFDA DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:1 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007206 CR0:00000010 0CDB:000002F7 and bl,F8 80 E3 F8 EAX:00005E00 EBX:00000824 ECX:000000AA EDX:0000403E ESI:000002FE EDI:00000778 EBP:0000FFE4 ESP:0000FFDA DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:1 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007206 CR0:00000010 0CDB:000002FA push ds 1E EAX:00005E00 EBX:00000820 ECX:000000AA EDX:0000403E ESI:000002FE EDI:00000778 EBP:0000FFE4 ESP:0000FFDA DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:0 IF:1 TF:0 VM:0 FLG:00007206 CR0:00000010 0CDB:000002FB mov ds,ss:[02DA] ss:[02DA]=0000 36 8E 1E DA 02 EAX:00005E00 EBX:00000820 ECX:000000AA EDX:0000403E ESI:000002FE EDI:00000778 EBP:0000FFE4 ESP:0000FFD8 DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:0 IF:1 TF:0 VM:0 FLG:00007206 CR0:00000010 0CDB:00000300 xor [bx+05],al ds:[0825]=0000 30 47 05 EAX:00005E00 EBX:00000820 ECX:000000AA EDX:0000403E ESI:000002FE EDI:00000778 EBP:0000FFE4 ESP:0000FFD8 DS:0000 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:0 IF:1 TF:0 VM:0 FLG:00007206 CR0:00000010 0CDB:00000303 pop ds 1F EAX:00005E00 EBX:00000820 ECX:000000AA EDX:0000403E ESI:000002FE EDI:00000778 EBP:0000FFE4 ESP:0000FFD8 DS:0000 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:1 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007206 CR0:00000010 0CDB:00000304 pop bx 5B EAX:00005E00 EBX:00000820 ECX:000000AA EDX:0000403E ESI:000002FE EDI:00000778 EBP:0000FFE4 ESP:0000FFDA DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:1 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007206 CR0:00000010 0CDB:00000305 ret C3 EAX:00005E00 EBX:00003BCD ECX:000000AA EDX:0000403E ESI:000002FE EDI:00000778 EBP:0000FFE4 ESP:0000FFDC DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:1 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007206 CR0:00000010 0CDB:0000039D pop ds 1F EAX:00005E00 EBX:00003BCD ECX:000000AA EDX:0000403E ESI:000002FE EDI:00000778 EBP:0000FFE4 ESP:0000FFDE DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:1 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007206 CR0:00000010 0CDB:0000039E pop si 5E EAX:00005E00 EBX:00003BCD ECX:000000AA EDX:0000403E ESI:000002FE EDI:00000778 EBP:0000FFE4 ESP:0000FFE0 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:1 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007206 CR0:00000010 0CDB:0000039F pop ax 58 EAX:00005E00 EBX:00003BCD ECX:000000AA EDX:0000403E ESI:000000AA EDI:00000778 EBP:0000FFE4 ESP:0000FFE2 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:1 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007206 CR0:00000010 0CDB:000003A0 pop bp 5D EAX:0000407F EBX:00003BCD ECX:000000AA EDX:0000403E ESI:000000AA EDI:00000778 EBP:0000FFE4 ESP:0000FFE4 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:1 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007206 CR0:00000010 0CDB:000003A1 iret CF EAX:0000407F EBX:00003BCD ECX:000000AA EDX:0000403E ESI:000000AA EDI:00000778 EBP:0000FFF6 ESP:0000FFE6 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:1 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007206 CR0:00000010 0824:000002FE fwait 9B EAX:0000407F EBX:00003BCD ECX:000000AA EDX:0000403E ESI:000000AA EDI:00000778 EBP:0000FFF6 ESP:0000FFEC DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007206 CR0:00000010 0824:000002FF fstpq [bp-08] ss:[FFEE]=1332 DD 5E F8 EAX:0000407F EBX:00003BCD ECX:000000AA EDX:0000403E ESI:000000AA EDI:00000778 EBP:0000FFF6 ESP:0000FFEC DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007206 CR0:00000010 0824:00000302 int 3D CD 3D EAX:0000407F EBX:00003BCD ECX:000000AA EDX:0000403E ESI:000000AA EDI:00000778 EBP:0000FFF6 ESP:0000FFEC DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007206 CR0:00000010 0CDB:00000306 push bp 55 EAX:0000407F EBX:00003BCD ECX:000000AA EDX:0000403E ESI:000000AA EDI:00000778 EBP:0000FFF6 ESP:0000FFE6 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:1 IF:0 TF:0 VM:0 FLG:00007006 CR0:00000010 0CDB:00000307 mov bp,sp 8B EC EAX:0000407F EBX:00003BCD ECX:000000AA EDX:0000403E ESI:000000AA EDI:00000778 EBP:0000FFF6 ESP:0000FFE4 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:1 IF:0 TF:0 VM:0 FLG:00007006 CR0:00000010 0CDB:00000309 push ax 50 EAX:0000407F EBX:00003BCD ECX:000000AA EDX:0000403E ESI:000000AA EDI:00000778 EBP:0000FFE4 ESP:0000FFE4 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:1 IF:0 TF:0 VM:0 FLG:00007006 CR0:00000010 0CDB:0000030A push si 56 EAX:0000407F EBX:00003BCD ECX:000000AA EDX:0000403E ESI:000000AA EDI:00000778 EBP:0000FFE4 ESP:0000FFE2 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:1 IF:0 TF:0 VM:0 FLG:00007006 CR0:00000010 0CDB:0000030B push ds 1E EAX:0000407F EBX:00003BCD ECX:000000AA EDX:0000403E ESI:000000AA EDI:00000778 EBP:0000FFE4 ESP:0000FFE0 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:1 IF:0 TF:0 VM:0 FLG:00007006 CR0:00000010 0CDB:0000030C test byte [bp+07],02 ss:[FFEB]=6C72 F6 46 07 02 EAX:0000407F EBX:00003BCD ECX:000000AA EDX:0000403E ESI:000000AA EDI:00000778 EBP:0000FFE4 ESP:0000FFDE DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:1 IF:0 TF:0 VM:0 FLG:00007006 CR0:00000010 0CDB:00000310 je 00000313 ($+1) (no jmp) 74 01 EAX:0000407F EBX:00003BCD ECX:000000AA EDX:0000403E ESI:000000AA EDI:00000778 EBP:0000FFE4 ESP:0000FFDE DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:0 IF:0 TF:0 VM:0 FLG:00007006 CR0:00000010 0CDB:00000312 sti FB EAX:0000407F EBX:00003BCD ECX:000000AA EDX:0000403E ESI:000000AA EDI:00000778 EBP:0000FFE4 ESP:0000FFDE DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:0 IF:0 TF:0 VM:0 FLG:00007006 CR0:00000010 0CDB:00000313 lds si,[bp+02] ss:[FFE6]=0304 C5 76 02 EAX:0000407F EBX:00003BCD ECX:000000AA EDX:0000403E ESI:000000AA EDI:00000778 EBP:0000FFE4 ESP:0000FFDE DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:0 IF:1 TF:0 VM:0 FLG:00007206 CR0:00000010 0CDB:00000316 call 000002F0 ($-29) E8 D7 FF EAX:0000407F EBX:00003BCD ECX:000000AA EDX:0000403E ESI:00000304 EDI:00000778 EBP:0000FFE4 ESP:0000FFDE DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:0 IF:1 TF:0 VM:0 FLG:00007206 CR0:00000010 0CDB:000002F0 push bx 53 EAX:0000407F EBX:00003BCD ECX:000000AA EDX:0000403E ESI:00000304 EDI:00000778 EBP:0000FFE4 ESP:0000FFDC DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:0 IF:1 TF:0 VM:0 FLG:00007206 CR0:00000010 0CDB:000002F1 mov al,ss:[02D7] ss:[02D7]=0000 36 A0 D7 02 EAX:0000407F EBX:00003BCD ECX:000000AA EDX:0000403E ESI:00000304 EDI:00000778 EBP:0000FFE4 ESP:0000FFDA DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:0 IF:1 TF:0 VM:0 FLG:00007206 CR0:00000010 0CDB:000002F5 mov bx,ds 8C DB EAX:00004000 EBX:00003BCD ECX:000000AA EDX:0000403E ESI:00000304 EDI:00000778 EBP:0000FFE4 ESP:0000FFDA DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:0 IF:1 TF:0 VM:0 FLG:00007206 CR0:00000010 0CDB:000002F7 and bl,F8 80 E3 F8 EAX:00004000 EBX:00000824 ECX:000000AA EDX:0000403E ESI:00000304 EDI:00000778 EBP:0000FFE4 ESP:0000FFDA DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:0 IF:1 TF:0 VM:0 FLG:00007206 CR0:00000010 0CDB:000002FA push ds 1E EAX:00004000 EBX:00000820 ECX:000000AA EDX:0000403E ESI:00000304 EDI:00000778 EBP:0000FFE4 ESP:0000FFDA DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:0 IF:1 TF:0 VM:0 FLG:00007206 CR0:00000010 0CDB:000002FB mov ds,ss:[02DA] ss:[02DA]=0000 36 8E 1E DA 02 EAX:00004000 EBX:00000820 ECX:000000AA EDX:0000403E ESI:00000304 EDI:00000778 EBP:0000FFE4 ESP:0000FFD8 DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:0 IF:1 TF:0 VM:0 FLG:00007206 CR0:00000010 0CDB:00000300 xor [bx+05],al ds:[0825]=0000 30 47 05 EAX:00004000 EBX:00000820 ECX:000000AA EDX:0000403E ESI:00000304 EDI:00000778 EBP:0000FFE4 ESP:0000FFD8 DS:0000 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:0 IF:1 TF:0 VM:0 FLG:00007206 CR0:00000010 0CDB:00000303 pop ds 1F EAX:00004000 EBX:00000820 ECX:000000AA EDX:0000403E ESI:00000304 EDI:00000778 EBP:0000FFE4 ESP:0000FFD8 DS:0000 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:1 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007206 CR0:00000010 0CDB:00000304 pop bx 5B EAX:00004000 EBX:00000820 ECX:000000AA EDX:0000403E ESI:00000304 EDI:00000778 EBP:0000FFE4 ESP:0000FFDA DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:1 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007206 CR0:00000010 0CDB:00000305 ret C3 EAX:00004000 EBX:00003BCD ECX:000000AA EDX:0000403E ESI:00000304 EDI:00000778 EBP:0000FFE4 ESP:0000FFDC DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:1 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007206 CR0:00000010 0CDB:00000319 mov ax,[si-01] ds:[0303]=CC3D 8B 44 FF EAX:00004000 EBX:00003BCD ECX:000000AA EDX:0000403E ESI:00000304 EDI:00000778 EBP:0000FFE4 ESP:0000FFDE DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:1 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007206 CR0:00000010 0CDB:0000031C sub al,34 2C 34 EAX:0000CC3D EBX:00003BCD ECX:000000AA EDX:0000403E ESI:00000304 EDI:00000778 EBP:0000FFE4 ESP:0000FFDE DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:1 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007206 CR0:00000010 0CDB:0000031E cmp al,08 3C 08 EAX:0000CC09 EBX:00003BCD ECX:000000AA EDX:0000403E ESI:00000304 EDI:00000778 EBP:0000FFE4 ESP:0000FFDE DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007206 CR0:00000010 0CDB:00000320 jnc 00000377 ($+55) (down) 73 55 EAX:0000CC09 EBX:00003BCD ECX:000000AA EDX:0000403E ESI:00000304 EDI:00000778 EBP:0000FFE4 ESP:0000FFDE DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:0 IF:1 TF:0 VM:0 FLG:00007206 CR0:00000010 0CDB:00000377 ja 000003A2 ($+29) (down) 77 29 EAX:0000CC09 EBX:00003BCD ECX:000000AA EDX:0000403E ESI:00000304 EDI:00000778 EBP:0000FFE4 ESP:0000FFDE DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:0 IF:1 TF:0 VM:0 FLG:00007206 CR0:00000010 0CDB:000003A2 cmp al,09 3C 09 EAX:0000CC09 EBX:00003BCD ECX:000000AA EDX:0000403E ESI:00000304 EDI:00000778 EBP:0000FFE4 ESP:0000FFDE DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:0 IF:1 TF:0 VM:0 FLG:00007206 CR0:00000010 0CDB:000003A4 ja 000003AF ($+9) (no jmp) 77 09 EAX:0000CC09 EBX:00003BCD ECX:000000AA EDX:0000403E ESI:00000304 EDI:00000778 EBP:0000FFE4 ESP:0000FFDE DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:1 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007206 CR0:00000010 0CDB:000003A6 sub si,0002 83 EE 02 EAX:0000CC09 EBX:00003BCD ECX:000000AA EDX:0000403E ESI:00000304 EDI:00000778 EBP:0000FFE4 ESP:0000FFDE DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:1 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007206 CR0:00000010 0CDB:000003A9 mov word [si],9B90 ds:[0302]=3DCD C7 04 90 9B EAX:0000CC09 EBX:00003BCD ECX:000000AA EDX:0000403E ESI:00000302 EDI:00000778 EBP:0000FFE4 ESP:0000FFDE DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:0 IF:1 TF:0 VM:0 FLG:00007206 CR0:00000010 0CDB:000003AD jmp short 00000347 ($-68) (up) EB 98 EAX:0000CC09 EBX:00003BCD ECX:000000AA EDX:0000403E ESI:00000302 EDI:00000778 EBP:0000FFE4 ESP:0000FFDE DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:0 IF:1 TF:0 VM:0 FLG:00007206 CR0:00000010 0CDB:00000347 mov [bp+02],si ss:[FFE6]=0304 89 76 02 EAX:0000CC09 EBX:00003BCD ECX:000000AA EDX:0000403E ESI:00000302 EDI:00000778 EBP:0000FFE4 ESP:0000FFDE DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:0 IF:1 TF:0 VM:0 FLG:00007206 CR0:00000010 0CDB:0000034A jmp short 0000039A ($+4e) (down) EB 4E EAX:0000CC09 EBX:00003BCD ECX:000000AA EDX:0000403E ESI:00000302 EDI:00000778 EBP:0000FFE4 ESP:0000FFDE DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:0 IF:1 TF:0 VM:0 FLG:00007206 CR0:00000010 0CDB:0000039A call 000002F0 ($-ad) E8 53 FF EAX:0000CC09 EBX:00003BCD ECX:000000AA EDX:0000403E ESI:00000302 EDI:00000778 EBP:0000FFE4 ESP:0000FFDE DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:0 IF:1 TF:0 VM:0 FLG:00007206 CR0:00000010 0CDB:000002F0 push bx 53 EAX:0000CC09 EBX:00003BCD ECX:000000AA EDX:0000403E ESI:00000302 EDI:00000778 EBP:0000FFE4 ESP:0000FFDC DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:0 IF:1 TF:0 VM:0 FLG:00007206 CR0:00000010 0CDB:000002F1 mov al,ss:[02D7] ss:[02D7]=0000 36 A0 D7 02 EAX:0000CC09 EBX:00003BCD ECX:000000AA EDX:0000403E ESI:00000302 EDI:00000778 EBP:0000FFE4 ESP:0000FFDA DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:0 IF:1 TF:0 VM:0 FLG:00007206 CR0:00000010 0CDB:000002F5 mov bx,ds 8C DB EAX:0000CC00 EBX:00003BCD ECX:000000AA EDX:0000403E ESI:00000302 EDI:00000778 EBP:0000FFE4 ESP:0000FFDA DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:0 IF:1 TF:0 VM:0 FLG:00007206 CR0:00000010 0CDB:000002F7 and bl,F8 80 E3 F8 EAX:0000CC00 EBX:00000824 ECX:000000AA EDX:0000403E ESI:00000302 EDI:00000778 EBP:0000FFE4 ESP:0000FFDA DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:0 IF:1 TF:0 VM:0 FLG:00007206 CR0:00000010 0CDB:000002FA push ds 1E EAX:0000CC00 EBX:00000820 ECX:000000AA EDX:0000403E ESI:00000302 EDI:00000778 EBP:0000FFE4 ESP:0000FFDA DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:0 IF:1 TF:0 VM:0 FLG:00007206 CR0:00000010 0CDB:000002FB mov ds,ss:[02DA] ss:[02DA]=0000 36 8E 1E DA 02 EAX:0000CC00 EBX:00000820 ECX:000000AA EDX:0000403E ESI:00000302 EDI:00000778 EBP:0000FFE4 ESP:0000FFD8 DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:0 IF:1 TF:0 VM:0 FLG:00007206 CR0:00000010 0CDB:00000300 xor [bx+05],al ds:[0825]=0000 30 47 05 EAX:0000CC00 EBX:00000820 ECX:000000AA EDX:0000403E ESI:00000302 EDI:00000778 EBP:0000FFE4 ESP:0000FFD8 DS:0000 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:0 IF:1 TF:0 VM:0 FLG:00007206 CR0:00000010 0CDB:00000303 pop ds 1F EAX:0000CC00 EBX:00000820 ECX:000000AA EDX:0000403E ESI:00000302 EDI:00000778 EBP:0000FFE4 ESP:0000FFD8 DS:0000 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:1 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007206 CR0:00000010 0CDB:00000304 pop bx 5B EAX:0000CC00 EBX:00000820 ECX:000000AA EDX:0000403E ESI:00000302 EDI:00000778 EBP:0000FFE4 ESP:0000FFDA DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:1 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007206 CR0:00000010 0CDB:00000305 ret C3 EAX:0000CC00 EBX:00003BCD ECX:000000AA EDX:0000403E ESI:00000302 EDI:00000778 EBP:0000FFE4 ESP:0000FFDC DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:1 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007206 CR0:00000010 0CDB:0000039D pop ds 1F EAX:0000CC00 EBX:00003BCD ECX:000000AA EDX:0000403E ESI:00000302 EDI:00000778 EBP:0000FFE4 ESP:0000FFDE DS:0824 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:1 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007206 CR0:00000010 0CDB:0000039E pop si 5E EAX:0000CC00 EBX:00003BCD ECX:000000AA EDX:0000403E ESI:00000302 EDI:00000778 EBP:0000FFE4 ESP:0000FFE0 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:1 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007206 CR0:00000010 0CDB:0000039F pop ax 58 EAX:0000CC00 EBX:00003BCD ECX:000000AA EDX:0000403E ESI:000000AA EDI:00000778 EBP:0000FFE4 ESP:0000FFE2 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:1 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007206 CR0:00000010 0CDB:000003A0 pop bp 5D EAX:0000407F EBX:00003BCD ECX:000000AA EDX:0000403E ESI:000000AA EDI:00000778 EBP:0000FFE4 ESP:0000FFE4 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:1 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007206 CR0:00000010 0CDB:000003A1 iret CF EAX:0000407F EBX:00003BCD ECX:000000AA EDX:0000403E ESI:000000AA EDI:00000778 EBP:0000FFF6 ESP:0000FFE6 DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:1 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007206 CR0:00000010 0824:00000302 nop 90 EAX:0000407F EBX:00003BCD ECX:000000AA EDX:0000403E ESI:000000AA EDI:00000778 EBP:0000FFF6 ESP:0000FFEC DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007206 CR0:00000010 0824:00000303 fwait 9B EAX:0000407F EBX:00003BCD ECX:000000AA EDX:0000403E ESI:000000AA EDI:00000778 EBP:0000FFF6 ESP:0000FFEC DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007206 CR0:00000010 0824:00000304 int 03 CC EAX:0000407F EBX:00003BCD ECX:000000AA EDX:0000403E ESI:000000AA EDI:00000778 EBP:0000FFF6 ESP:0000FFEC DS:0D38 ES:0D38 FS:0000 GS:0000 SS:0D38 CF:0 ZF:0 SF:0 OF:0 AF:0 PF:1 IF:1 TF:0 VM:0 FLG:00007206 CR0:00000010