Figure 5: A slice through the code from Figures 1 and 2, extracting instruction mnemonics, a branch target, and a Windows API call.