; analysis/unpacked/image.bin
eae2 mov byte ptr [0xe81], 0
eae7 mov si, 0xec7b
eaea call 0xec62
eaed jne 0xeb48
eaef xchg dx, ax
eaf0 add byte ptr [0x11cf], al
eaf4 inc ax
eaf5 inc ax
eaf6 mov word ptr [0x11a8], ax
eaf9 sub al, 8
eafb mov word ptr [0xec01], ax
eafe inc ax
eaff mov byte ptr [0x11b0], al
eb02 mov byte ptr [0xec15], al
eb05 add al, 2
eb07 mov byte ptr [0x11bf], al
eb0a mov byte ptr [0xec2a], al
eb0d mov ax, 0xd180
eb10 call 0xecbb
eb13 push ax
eb14 call 0x111ce
eb17 mov ah, 0x40
eb19 call 0x111ce
eb1c mov ah, 0xb7
eb1e call 0x111ce
eb21 sub cx, cx
eb23 mov di, 0xecac
eb26 mov si, 0xec4c
eb29 call 0xeaab
eb2c mov bl, 0xff
eb2e jae 0xeb42
eb30 mov byte ptr [0xeca8], al
eb33 mov di, 0xec95
eb36 mov si, 0xec5a
eb39 mov bp, 0x4a8
eb3c mov cx, 0x601
eb3f call 0xec39
eb42 pop ax
eb43 call 0xecbb
eb46 or bl, bl
eb48 mov bp, 0x1185
eb4b jne 0xebac
eb4d mov dx, word ptr [0x11cf]
eb51 add dl, 0xf8
eb54 mov al, 0x2e
eb56 out dx, al
eb57 inc dx
eb58 jmp 0xeb5a
eb5a in al, dx
eb5b mov ah, al
eb5d xor al, 0xa6
eb5f call 0x111d8
eb62 in al, dx
eb63 xor al, 0xa6
eb65 xor al, ah
eb67 mov cl, al
eb69 call 0x111d6
eb6c mov ax, word ptr [0x11a8]
eb6f mov word ptr [0x1186], ax
eb72 mov dx, ax
eb74 inc ax
eb75 mov byte ptr [0x1198], al
eb78 or cl, cl
eb7a mov cl, 2
eb7c jne 0xebae
eb7e in al, dx
eb7f test al, 6
eb81 jne 0xeba9
eb83 mov cx, 0x1f
eb86 mov di, 0x1185
eb89 mov si, 0xebfc
eb8c push cs
eb8d pop es
eb8e rep movsw word ptr es:[di], word ptr [si]
eb90 mov al, 5
eb92 mov byte ptr [0xe86], al
eb95 mov bx, 0x100
eb98 call 0x11189
eb9b mov word ptr [0x114a], 0x79
eba1 mov byte ptr [0x11cd], 0xbb
eba6 mov bp, 0xebf9
eba9 mov cl, 3
ebab test ax, 0x1b1
ebae call 0x1185b
ebb1 mov ax, 0x2001
ebb4 call bp
ebb6 call 0xebe9
ebb9 mov bh, al
ebbb mov ax, 0xff02
ebbe call bp
ebc0 mov ax, 0x2104
ebc3 call bp
ebc5 call 0xecc4
ebc8 call 0x1185b
ebcb call 0xebf3
ebce xor al, 0xc0
ebd0 or bh, al
ebd2 call 0xebe9
ebd5 or al, bh
ebd7 add al, 0xe0
ebd9 jb 0xebf8
ebdb mov byte ptr [0xe81], cl
ebdf mov ax, 8
ebe2 call bp
ebe4 mov ax, 0xbd
ebe7 jmp bp
0edb cmp byte ptr [0xe81], 0
0ee0 je 0xebd
0ee2 mov di, 0x10ac
0ee5 mov word ptr [0xf08], di
0ee9 mov word ptr [di + 4], 0xffff
0eee call 0xf0a
0ef1 add di, 8
0ef4 mov word ptr [di - 8], di
0ef7 cmp di, 0x10f4
0efb jb 0xee9
0efd sub ax, ax
0eff mov word ptr [di - 8], ax
0f02 mov word ptr [0xf06], ax
0f05 ret 
33f1 cmp byte ptr [0xe81], 0
33f6 je 0x3473
9cad cmp byte ptr [0xab4], 4
9cb2 jne 0x9cbd
9cb4 mov ah, 0x16
9cb6 mov cx, 0x90
9cb9 lcall [0xad1]
; analysis/resources/00_037.bin
2b8e push di
2b8f push 0x7800
2b92 call 0x3264
2b95 cmp ax, 0xc
2b98 jne 0x2c04
2b9a push 0x141d
2b9d push 0x59
2b9f call 0x3218
2ba2 push 0x141e
2ba5 push 0x20
2ba7 call 0x3218
2baa push 0x141f
2bad push 0
2baf call 0x3218
2bb2 call 0x2510
2bb5 call 0x25c6
2bb8 call 0x2646
2bbb cmp word ptr [0x1a], 0x1e
2bc0 ja 0x2bc5
2bc2 call 0x28e0
2bc5 call 0x29ce
2bc8 push 0x141f
2bcb push 4
2bcd call 0x3218
28e0 enter 0xa, 0
28e4 push 0x541e
28e7 push 0x80
28ea call 0x3218
28ed push 0x601e
28f0 push -1
28f2 push -0x20
28f4 call 0x32b2
28f7 push 0x701e
28fa push 0xff
28fd push -0x18
28ff call 0x32b2
2902 push 0x101e
2905 push 0
2907 push 0
2909 call 0x32b2
290c push 0x1e
290e push 0
2910 push 0
2912 call 0x32b2
2915 push 0x41e
2918 push 0xff
291b push -0x1d
291d call 0x32b2
2920 push 0x541f
2923 push 0x80
2926 call 0x3218
2929 push 0x601f
292c push 0xff
292f push -0x10
2931 call 0x32b2
2934 push 0x701f
2937 push 0xff
293a push -8
293c call 0x32b2
293f push 0x101f
2942 push 0
2944 push 0xff
2947 call 0x32b2
294a push 0x1f
294c push 0
294e push 0x8000
2951 call 0x32b2
2954 push 0x41f
2957 push 0xff
295a push -0xd
295c call 0x32b2
295f mov ax, word ptr [0x1c]
2962 add ax, 0x802
2965 mov word ptr [bp - 2], ax
2968 mov ax, word ptr [0x1c]
296b add ah, 4
296e mov word ptr [bp - 8], ax
2971 mov word ptr [bp - 0xa], 0x3c
2976 mov ax, word ptr [0x1c]
2979 mov word ptr [bp - 4], ax
297c mov word ptr [bp - 6], 0x3e
2981 pushf 
2982 cli 
2983 mov dx, word ptr [bp - 2]
2986 mov ax, word ptr [bp - 6]
2989 out dx, ax
298a mov dx, word ptr [bp - 4]
298d xor ax, ax
298f out dx, ax
2990 add word ptr [bp - 4], 2
2994 mov dx, word ptr [bp - 2]
2997 in ax, dx
2998 test ah, 0x10
299b je 0x2997
299d in ax, dx
299e test ah, 0x10
29a1 jne 0x299d
29a3 mov dx, word ptr [bp - 4]
29a6 mov ax, 0x4828
29a9 out dx, ax
29aa mov dx, word ptr [bp - 2]
29ad mov ax, word ptr [bp - 0xa]
29b0 out dx, ax
29b1 mov dx, word ptr [bp - 8]
29b4 xor ax, ax
29b6 out dx, ax
29b7 popf 
29b8 push 0x301e
29bb push -1
29bd push -1
29bf call 0x32b2
29c2 push 0x301f
29c5 push -1
29c7 push -1
29c9 call 0x32b2
29cc leave 
29cd ret 
13e3 mov word ptr [0xb51], cx
13e7 mov word ptr [0xb53], cx
13eb call 0x13f1
13ee xor al, al
13f0 ret 
13f1 mov di, 0x9c2
13f4 mov cx, 0x10
13f7 cmp ch, byte ptr [di + 0xa]
13fa je 0x13ff
13fc call 0x1341
13ff add di, 0x17
1402 loop 0x13f7
1404 ret