Disassembly of File: C:\Progra~1\Navnt\POPROXY.EXE T.DateStamp = 3A837E94: Thu Feb 08 21:22:28 2001 Code Offset = 00001000, Code Size = 0000B000 Data Offset = 0000F000, Data Size = 00002000 Number of Objects = 0004 (dec), Imagebase = 00400000h Object01: .text RVA: 00001000 Offset: 00001000 Size: 0000B000 Flags: 60000020 Object02: .rdata RVA: 0000C000 Offset: 0000C000 Size: 00003000 Flags: 40000040 Object03: .data RVA: 0000F000 Offset: 0000F000 Size: 00002000 Flags: C0000040 Object04: .rsrc RVA: 00011000 Offset: 00011000 Size: 00002000 Flags: 40000040 +++++++++++++++++++ RESOURCE INFORMATION +++++++++++++++++++ Number of Resource Types = 3 (decimal) Resource Type 001: RT_ICON Resource Type 002: RT_GROUP_ICON Resource Type 003: RT_VERSION +++++++++++++++++ ICON INFORMATION +++++++++++++++++++ Number of Icons = 4 (decimal) Name: IconId_0001 height= 16 width= 16 # of bits= 4 Name: IconId_0002 height= 16 width= 16 # of bits= 8 Name: IconId_0003 height= 32 width= 32 # of bits= 4 Name: IconId_0004 height= 32 width= 32 # of bits= 8 +++++++++++++++++++ IMPORTED FUNCTIONS +++++++++++++++++++ Number of Imported Modules = 11 (decimal) Import Module 001: LiteScan.dll Import Module 002: EmailRes.dll Import Module 003: EmailCfg.dll Import Module 004: MFC42.DLL Import Module 005: MSVCRT.dll Import Module 006: KERNEL32.dll Import Module 007: USER32.dll Import Module 008: ADVAPI32.dll Import Module 009: SHELL32.dll Import Module 010: WSOCK32.dll Import Module 011: MSVCP60.dll +++++++++++++++++++ IMPORT MODULE DETAILS +++++++++++++++++ Import Module 001: LiteScan.dll Addr:0000E48E hint(0004) Name: LiteEnableAP Addr:0000E47C hint(0005) Name: LiteProcessItem Import Module 002: EmailRes.dll Addr:0000E4AC hint(0000) Name: ?InitEmailResources@@YAPAUHINSTANCE__@@XZ Import Module 003: EmailCfg.dll Addr:0000E4F8 hint(0015) Name: ?GetProxyTimeoutValue@CProxyConfig@@SAKXZ Addr:0000E4E6 hint(0040) Name: AddHostsEntries Addr:0000E524 hint(001B) Name: ?GetTimeoutProtection@CProxyConfig@@SAKXZ Addr:0000E574 hint(001A) Name: ?GetTempDisabled@CProxyConfig@@SAHXZ Addr:0000E59C hint(000D) Name: ?GetAction@CProxyConfig@@SAKXZ Addr:0000E5BE hint(0014) Name: ?GetProxyListeningPort@CProxyConfig@@SAKXZ Addr:0000E5EC hint(002C) Name: ?SPAGetSpecialAccountInfo@CProxyConfig@@SAJKPADIPAK1@Z Addr:0000E550 hint(0019) Name: ?GetShowIcon@CProxyConfig@@SAHXZ Import Module 004: MFC42.DLL Addr:80000C4B hint(0C4B) Name: MFC42:NoName0000 Addr:80000CBB hint(0CBB) Name: MFC42:NoName0001 Addr:80000BA6 hint(0BA6) Name: MFC42:NoName0002 Addr:80000C40 hint(0C40) Name: MFC42:NoName0003 Addr:80001652 hint(1652) Name: MFC42:NoName0004 Addr:80001171 hint(1171) Name: MFC42:NoName0005 Addr:80000BA9 hint(0BA9) Name: MFC42:NoName0006 Addr:80000C09 hint(0C09) Name: MFC42:NoName0007 Addr:80000CBE hint(0CBE) Name: MFC42:NoName0008 Addr:80000EF6 hint(0EF6) Name: MFC42:NoName0009 Addr:80000EF7 hint(0EF7) Name: MFC42:NoName0010 Addr:80000EF1 hint(0EF1) Name: MFC42:NoName0011 Addr:80000BA0 hint(0BA0) Name: MFC42:NoName0012 Addr:80000FF0 hint(0FF0) Name: MFC42:NoName0013 Addr:8000120E hint(120E) Name: MFC42:NoName0014 Addr:80001148 hint(1148) Name: MFC42:NoName0015 Addr:80000E9A hint(0E9A) Name: MFC42:NoName0016 Addr:8000031E hint(031E) Name: MFC42:NoName0017 Addr:80000C07 hint(0C07) Name: MFC42:NoName0018 Addr:80000215 hint(0215) Name: MFC42:NoName0019 Addr:80000231 hint(0231) Name: MFC42:NoName0020 Addr:8000082C hint(082C) Name: MFC42:NoName0021 Addr:80000A3D hint(0A3D) Name: MFC42:NoName0022 Addr:800004AF hint(04AF) Name: MFC42:NoName0023 Addr:800004DF hint(04DF) Name: MFC42:NoName0024 Addr:80000AA5 hint(0AA5) Name: MFC42:NoName0025 Addr:800004E0 hint(04E0) Name: MFC42:NoName0026 Addr:8000032F hint(032F) Name: MFC42:NoName0027 Addr:80000B01 hint(0B01) Name: MFC42:NoName0028 Addr:80000C37 hint(0C37) Name: MFC42:NoName0029 Addr:80000219 hint(0219) Name: MFC42:NoName0030 Addr:80001047 hint(1047) Name: MFC42:NoName0031 Addr:80000209 hint(0209) Name: MFC42:NoName0032 Addr:80001613 hint(1613) Name: MFC42:NoName0033 Addr:80000E20 hint(0E20) Name: MFC42:NoName0034 Addr:8000015E hint(015E) Name: MFC42:NoName0035 Addr:80000C36 hint(0C36) Name: MFC42:NoName0036 Addr:80000E1D hint(0E1D) Name: MFC42:NoName0037 Addr:80000E4F hint(0E4F) Name: MFC42:NoName0038 Addr:800004B0 hint(04B0) Name: MFC42:NoName0039 Addr:800018A3 hint(18A3) Name: MFC42:NoName0040 Addr:80000E00 hint(0E00) Name: MFC42:NoName0041 Addr:8000021F hint(021F) Name: MFC42:NoName0042 Addr:80000323 hint(0323) Name: MFC42:NoName0043 Addr:80000321 hint(0321) Name: MFC42:NoName0044 Addr:8000015C hint(015C) Name: MFC42:NoName0045 Addr:8000021D hint(021D) Name: MFC42:NoName0046 Addr:80000297 hint(0297) Name: MFC42:NoName0047 Addr:80000451 hint(0451) Name: MFC42:NoName0048 Addr:80000B02 hint(0B02) Name: MFC42:NoName0049 Addr:8000035A hint(035A) Name: MFC42:NoName0050 Addr:80001AE3 hint(1AE3) Name: MFC42:NoName0051 Addr:800015C4 hint(15C4) Name: MFC42:NoName0052 Addr:80000B67 hint(0B67) Name: MFC42:NoName0053 Addr:80001B10 hint(1B10) Name: MFC42:NoName0054 Addr:80001B12 hint(1B12) Name: MFC42:NoName0055 Addr:80000B30 hint(0B30) Name: MFC42:NoName0056 Addr:80000ACC hint(0ACC) Name: MFC42:NoName0057 Addr:8000106C hint(106C) Name: MFC42:NoName0058 Addr:80001021 hint(1021) Name: MFC42:NoName0059 Addr:80001559 hint(1559) Name: MFC42:NoName0060 Addr:8000144A hint(144A) Name: MFC42:NoName0061 Addr:80000337 hint(0337) Name: MFC42:NoName0062 Addr:800010B6 hint(10B6) Name: MFC42:NoName0063 Addr:80001A06 hint(1A06) Name: MFC42:NoName0064 Addr:80001633 hint(1633) Name: MFC42:NoName0065 Addr:800003AD hint(03AD) Name: MFC42:NoName0066 Addr:80000C6C hint(0C6C) Name: MFC42:NoName0067 Addr:800007CD hint(07CD) Name: MFC42:NoName0068 Addr:80001907 hint(1907) Name: MFC42:NoName0069 Addr:8000039C hint(039C) Name: MFC42:NoName0070 Addr:8000184E hint(184E) Name: MFC42:NoName0071 Addr:800014BB hint(14BB) Name: MFC42:NoName0072 Addr:80000AE0 hint(0AE0) Name: MFC42:NoName0073 Addr:8000079C hint(079C) Name: MFC42:NoName0074 Addr:800014B7 hint(14B7) Name: MFC42:NoName0075 Addr:80000331 hint(0331) Name: MFC42:NoName0076 Addr:80000235 hint(0235) Name: MFC42:NoName0077 Addr:80000AA6 hint(0AA6) Name: MFC42:NoName0078 Addr:80001082 hint(1082) Name: MFC42:NoName0079 Addr:8000125A hint(125A) Name: MFC42:NoName0080 Addr:800010B5 hint(10B5) Name: MFC42:NoName0081 Addr:8000039A hint(039A) Name: MFC42:NoName0082 Addr:800003AB hint(03AB) Name: MFC42:NoName0083 Addr:80000A36 hint(0A36) Name: MFC42:NoName0084 Addr:80000486 hint(0486) Name: MFC42:NoName0085 Addr:8000155A hint(155A) Name: MFC42:NoName0086 Addr:80000B65 hint(0B65) Name: MFC42:NoName0087 Addr:80000AF8 hint(0AF8) Name: MFC42:NoName0088 Addr:800003C4 hint(03C4) Name: MFC42:NoName0089 Addr:800018AD hint(18AD) Name: MFC42:NoName0090 Addr:80001056 hint(1056) Name: MFC42:NoName0091 Addr:800018F8 hint(18F8) Name: MFC42:NoName0092 Addr:80001548 hint(1548) Name: MFC42:NoName0093 Addr:80000CF6 hint(0CF6) Name: MFC42:NoName0094 Addr:8000177A hint(177A) Name: MFC42:NoName0095 Addr:80001692 hint(1692) Name: MFC42:NoName0096 Addr:80000A2E hint(0A2E) Name: MFC42:NoName0097 Addr:80000C6F hint(0C6F) Name: MFC42:NoName0098 Addr:80000C68 hint(0C68) Name: MFC42:NoName0099 Addr:80000DB7 hint(0DB7) Name: MFC42:NoName0100 Addr:80000E8C hint(0E8C) Name: MFC42:NoName0101 Addr:80001092 hint(1092) Name: MFC42:NoName0102 Addr:80000AA3 hint(0AA3) Name: MFC42:NoName0103 Addr:80000956 hint(0956) Name: MFC42:NoName0104 Addr:80000BF3 hint(0BF3) Name: MFC42:NoName0105 Addr:800013EC hint(13EC) Name: MFC42:NoName0106 Addr:800013EF hint(13EF) Name: MFC42:NoName0107 Addr:80001173 hint(1173) Name: MFC42:NoName0108 Addr:800010CF hint(10CF) Name: MFC42:NoName0109 Addr:80000D16 hint(0D16) Name: MFC42:NoName0110 Addr:80001394 hint(1394) Name: MFC42:NoName0111 Addr:800003CF hint(03CF) Name: MFC42:NoName0112 Addr:80001560 hint(1560) Name: MFC42:NoName0113 Addr:800014A9 hint(14A9) Name: MFC42:NoName0114 Addr:80000B3F hint(0B3F) Name: MFC42:NoName0115 Addr:80000B3E hint(0B3E) Name: MFC42:NoName0116 Addr:80001037 hint(1037) Name: MFC42:NoName0117 Addr:800017A7 hint(17A7) Name: MFC42:NoName0118 Addr:80000FED hint(0FED) Name: MFC42:NoName0119 Addr:800006F0 hint(06F0) Name: MFC42:NoName0120 Addr:80001137 hint(1137) Name: MFC42:NoName0121 Addr:80001475 hint(1475) Name: MFC42:NoName0122 Addr:80000951 hint(0951) Name: MFC42:NoName0123 Addr:8000142B hint(142B) Name: MFC42:NoName0124 Addr:800018E6 hint(18E6) Name: MFC42:NoName0125 Addr:80001101 hint(1101) Name: MFC42:NoName0126 Addr:80000A59 hint(0A59) Name: MFC42:NoName0127 Addr:80000681 hint(0681) Name: MFC42:NoName0128 Addr:80000ED6 hint(0ED6) Name: MFC42:NoName0129 Addr:800012E5 hint(12E5) Name: MFC42:NoName0130 Addr:80001154 hint(1154) Name: MFC42:NoName0131 Addr:80000A58 hint(0A58) Name: MFC42:NoName0132 Addr:80000807 hint(0807) Name: MFC42:NoName0133 Addr:800018E8 hint(18E8) Name: MFC42:NoName0134 Addr:80000EA5 hint(0EA5) Name: MFC42:NoName0135 Addr:800013C9 hint(13C9) Name: MFC42:NoName0136 Addr:800006BF hint(06BF) Name: MFC42:NoName0137 Addr:80001484 hint(1484) Name: MFC42:NoName0138 Addr:8000098E hint(098E) Name: MFC42:NoName0139 Addr:8000084C hint(084C) Name: MFC42:NoName0140 Addr:8000149D hint(149D) Name: MFC42:NoName0141 Addr:80001213 hint(1213) Name: MFC42:NoName0142 Addr:8000114B hint(114B) Name: MFC42:NoName0143 Addr:80000E27 hint(0E27) Name: MFC42:NoName0144 Addr:800002A2 hint(02A2) Name: MFC42:NoName0145 Addr:8000016E hint(016E) Name: MFC42:NoName0146 Addr:80001040 hint(1040) Name: MFC42:NoName0147 Addr:80000474 hint(0474) Name: MFC42:NoName0148 Addr:80001ADC hint(1ADC) Name: MFC42:NoName0149 Addr:800014A2 hint(14A2) Name: MFC42:NoName0150 Addr:8000094B hint(094B) Name: MFC42:NoName0151 Addr:80000B19 hint(0B19) Name: MFC42:NoName0152 Addr:8000154A hint(154A) Name: MFC42:NoName0153 Addr:800018FA hint(18FA) Name: MFC42:NoName0154 Addr:80001540 hint(1540) Name: MFC42:NoName0155 Addr:800018EF hint(18EF) Name: MFC42:NoName0156 Addr:8000083B hint(083B) Name: MFC42:NoName0157 Addr:8000081D hint(081D) Name: MFC42:NoName0158 Addr:800016B3 hint(16B3) Name: MFC42:NoName0159 Addr:800012AB hint(12AB) Name: MFC42:NoName0160 Addr:800014BC hint(14BC) Name: MFC42:NoName0161 Addr:80000490 hint(0490) Name: MFC42:NoName0162 Addr:80000FEF hint(0FEF) Name: MFC42:NoName0163 Addr:800014B6 hint(14B6) Name: MFC42:NoName0164 Addr:800014B4 hint(14B4) Name: MFC42:NoName0165 Addr:80000D12 hint(0D12) Name: MFC42:NoName0166 Addr:8000095C hint(095C) Name: MFC42:NoName0167 Addr:8000144F hint(144F) Name: MFC42:NoName0168 Addr:80000441 hint(0441) Name: MFC42:NoName0169 Addr:80000F52 hint(0F52) Name: MFC42:NoName0170 Addr:80001663 hint(1663) Name: MFC42:NoName0171 Addr:800009D0 hint(09D0) Name: MFC42:NoName0172 Addr:800009FA hint(09FA) Name: MFC42:NoName0173 Addr:80001186 hint(1186) Name: MFC42:NoName0174 Addr:800018E7 hint(18E7) Name: MFC42:NoName0175 Addr:800010B2 hint(10B2) Name: MFC42:NoName0176 Addr:80001241 hint(1241) Name: MFC42:NoName0177 Addr:80000339 hint(0339) Name: MFC42:NoName0178 Addr:8000035C hint(035C) Name: MFC42:NoName0179 Addr:80000452 hint(0452) Name: MFC42:NoName0180 Addr:80000991 hint(0991) Name: MFC42:NoName0181 Addr:80000785 hint(0785) Name: MFC42:NoName0182 Addr:80000320 hint(0320) Name: MFC42:NoName0183 Addr:8000020B hint(020B) Name: MFC42:NoName0184 Addr:8000021C hint(021C) Name: MFC42:NoName0185 Addr:80000317 hint(0317) Name: MFC42:NoName0186 Addr:800003C7 hint(03C7) Name: MFC42:NoName0187 Addr:800007CB hint(07CB) Name: MFC42:NoName0188 Addr:80001567 hint(1567) Name: MFC42:NoName0189 Addr:800016A5 hint(16A5) Name: MFC42:NoName0190 Addr:80001337 hint(1337) Name: MFC42:NoName0191 Addr:8000136F hint(136F) Name: MFC42:NoName0192 Addr:800012FF hint(12FF) Name: MFC42:NoName0193 Addr:8000115F hint(115F) Name: MFC42:NoName0194 Addr:8000113B hint(113B) Name: MFC42:NoName0195 Addr:800007F0 hint(07F0) Name: MFC42:NoName0196 Addr:8000156A hint(156A) Name: MFC42:NoName0197 Addr:8000125B hint(125B) Name: MFC42:NoName0198 Addr:80001653 hint(1653) Name: MFC42:NoName0199 Addr:80000217 hint(0217) Name: MFC42:NoName0200 Addr:80000D4B hint(0D4B) Name: MFC42:NoName0201 Addr:80000628 hint(0628) Name: MFC42:NoName0202 Import Module 005: MSVCRT.dll Addr:0000E772 hint(0186) Name: _onexit Addr:0000E764 hint(0055) Name: __dllonexit Addr:0000E74C hint(000E) Name: ??1type_info@@UAE@XZ Addr:0000E734 hint(0168) Name: _mbsnbcpy Addr:0000E77C hint(0060) Name: __lconv_init Addr:0000E728 hint(0177) Name: _mbsrchr Addr:0000E71E hint(02BA) Name: strcpy Addr:0000E714 hint(0297) Name: memcpy Addr:0000E7A2 hint(0249) Name: exit Addr:0000E78C hint(00D3) Name: _exit Addr:0000E6E6 hint(0041) Name: _CxxThrowException Addr:0000E794 hint(0048) Name: _XcptFilter Addr:0000E7D0 hint(0083) Name: __setusermatherr Addr:0000E6BA hint(02A1) Name: puts Addr:0000E6B2 hint(025E) Name: free Addr:0000E6A8 hint(01BF) Name: _strdup Addr:0000E694 hint(0049) Name: __CxxFrameHandler Addr:0000E68A hint(0299) Name: memset Addr:0000E680 hint(02C1) Name: strncpy Addr:0000E7C4 hint(010F) Name: _initterm Addr:0000E7AA hint(008F) Name: _acmdln Addr:0000E7B4 hint(0058) Name: __getmainargs Addr:0000E70A hint(0159) Name: _mbscmp Addr:0000E6FC hint(0123) Name: _ismbcdigit Addr:0000E7E4 hint(009D) Name: _adjust_fdiv Addr:0000E676 hint(02BE) Name: strlen Addr:0000E838 hint(00B7) Name: _controlfp Addr:0000E65A hint(0188) Name: _open_osfhandle Addr:0000E650 hint(00D7) Name: _fdopen Addr:0000E648 hint(0113) Name: _iob Addr:0000E63E hint(02AE) Name: setvbuf Addr:0000E7F4 hint(006A) Name: __p__commode Addr:0000E804 hint(006F) Name: __p__fmode Addr:0000E812 hint(0081) Name: __set_app_type Addr:0000E824 hint(00CA) Name: _except_handler3 Addr:0000E6DE hint(023D) Name: atoi Addr:0000E6C2 hint(0008) Name: ??0exception@@QAE@ABV0@@Z Addr:0000E66C hint(02B6) Name: strcat Addr:0000EE78 hint(01AA) Name: _setmbcp Addr:0000EE6C hint(01C1) Name: _stricmp Import Module 006: KERNEL32.dll Addr:0000E874 hint(0241) Name: SetConsoleCtrlHandler Addr:0000E856 hint(0004) Name: AllocConsole Addr:0000E846 hint(011A) Name: GetLastError Addr:0000E88C hint(00EE) Name: GetConsoleScreenBufferInfo Addr:0000E8AA hint(0152) Name: GetStdHandle Addr:0000E8BA hint(0250) Name: SetConsoleMode Addr:0000E8CC hint(025B) Name: SetConsoleWindowInfo Addr:0000E8E4 hint(0258) Name: SetConsoleTextAttribute Addr:0000E8FE hint(0257) Name: SetConsoleScreenBufferSize Addr:0000E91C hint(008B) Name: FillConsoleOutputAttribute Addr:0000E93A hint(0271) Name: SetLastError Addr:0000E94A hint(022C) Name: ResumeThread Addr:0000E95A hint(0265) Name: SetEvent Addr:0000E966 hint(01E6) Name: OpenEventA Addr:0000E974 hint(003F) Name: CreateMutexA Addr:0000E984 hint(001B) Name: CloseHandle Addr:0000E992 hint(0259) Name: SetConsoleTitleA Addr:0000E9A6 hint(00B4) Name: FreeLibrary Addr:0000E9B4 hint(013E) Name: GetProcAddress Addr:0000E9C6 hint(01C2) Name: LoadLibraryA Addr:0000E9D6 hint(01AA) Name: InitializeCriticalSection Addr:0000E9F2 hint(0055) Name: DeleteCriticalSection Addr:0000EA0A hint(0066) Name: EnterCriticalSection Addr:0000EA22 hint(01C1) Name: LeaveCriticalSection Addr:0000EA3A hint(02CE) Name: WaitForSingleObject Addr:0000EA50 hint(0287) Name: SetThreadPriority Addr:0000EA64 hint(0296) Name: Sleep Addr:0000EA6C hint(0163) Name: GetTempFileNameA Addr:0000EA80 hint(0165) Name: GetTempPathA Addr:0000EA90 hint(0057) Name: DeleteFileA Addr:0000EA9E hint(016D) Name: GetTickCount Addr:0000EAAE hint(0126) Name: GetModuleHandleA Addr:0000EAC2 hint(0150) Name: GetStartupInfoA Addr:0000E866 hint(00B1) Name: FreeConsole Import Module 007: USER32.dll Addr:0000EAE2 hint(01DE) Name: PostMessageA Addr:0000EB00 hint(00FF) Name: GetDesktopWindow Addr:0000EB14 hint(01E0) Name: PostQuitMessage Addr:0000EAF2 hint(02AE) Name: wvsprintfA Addr:0000EB34 hint(008C) Name: DestroyIcon Addr:0000EB26 hint(01A0) Name: LoadImageA Import Module 008: ADVAPI32.dll Addr:0000EB4E hint(015B) Name: RegCloseKey Addr:0000EB5C hint(017B) Name: RegQueryValueExA Addr:0000EB90 hint(0176) Name: RegQueryInfoKeyA Addr:0000EB80 hint(016A) Name: RegEnumValueA Addr:0000EB70 hint(0172) Name: RegOpenKeyExA Import Module 009: SHELL32.dll Addr:0000EBB2 hint(0079) Name: Shell_NotifyIconA Import Module 010: WSOCK32.dll Addr:80000002 hint(0002) Name: WSOCK32:NoName0000 Addr:80000012 hint(0012) Name: WSOCK32:NoName0001 Addr:80000017 hint(0017) Name: WSOCK32:NoName0002 Addr:8000000D hint(000D) Name: WSOCK32:NoName0003 Addr:8000006F hint(006F) Name: WSOCK32:NoName0004 Addr:80000009 hint(0009) Name: WSOCK32:NoName0005 Addr:80000004 hint(0004) Name: WSOCK32:NoName0006 Addr:8000000A hint(000A) Name: WSOCK32:NoName0007 Addr:80000070 hint(0070) Name: WSOCK32:NoName0008 Addr:80000008 hint(0008) Name: WSOCK32:NoName0009 Addr:80000013 hint(0013) Name: WSOCK32:NoName0010 Addr:80000034 hint(0034) Name: WSOCK32:NoName0011 Addr:80000003 hint(0003) Name: WSOCK32:NoName0012 Addr:80000010 hint(0010) Name: WSOCK32:NoName0013 Addr:8000000C hint(000C) Name: WSOCK32:NoName0014 Addr:80000016 hint(0016) Name: WSOCK32:NoName0015 Import Module 011: MSVCP60.dll Addr:0000EC08 hint(00CB) Name: ??0runtime_error@std@@QAE@ABV01@@Z Addr:0000EBDE hint(07B3) Name: ?sync_with_stdio@ios_base@std@@SA_N_N@Z Addr:0000EC2E hint(0122) Name: ??1runtime_error@std@@UAE@XZ Addr:0000EC4E hint(00E9) Name: ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ Addr:0000EC98 hint(00CC) Name: ??0runtime_error@std@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@1@@Z Addr:0000ECF4 hint(004C) Name: ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBDABV?$allocator@D@1@@Z Addr:0000ED94 hint(00A5) Name: ??0_Winit@std@@QAE@XZ Addr:0000EDAC hint(010D) Name: ??1_Winit@std@@QAE@XZ Addr:0000ED74 hint(0109) Name: ??1Init@ios_base@std@@QAE@XZ Addr:0000EE14 hint(01FB) Name: ??A?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEABDI@Z Addr:0000EDC4 hint(0437) Name: ?c_str@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEPBDXZ Addr:0000ED54 hint(009E) Name: ??0Init@ios_base@std@@QAE@XZ +++++++++++++++++++ EXPORTED FUNCTIONS +++++++++++++++++++ Number of Exported Functions = 0 (decimal) +++++++++++++++++++ Possible Strings Inside Code Block +++++++++++++++++++ :00402F18....NullString..Pjdjdj +++++++++++++++++++ ASSEMBLY CODE LISTING +++++++++++++++++++ //********************** Start of Code in Object CODE ************** Program Entry Point = 0040AF46 (C:\Progra~1\Navnt\POPROXY.EXE File Offset:00001000) ========= :00401000 55 push ebp :00401001 8BEC mov ebp, esp :00401003 51 push ecx :00401004 894DFC mov dword[ebp-04], ecx :00401007 8B45FC mov eax, dword[ebp-04] :0040100A C70000000000 mov dword[eax], 00000000 :00401010 8B4DFC mov ecx, dword[ebp-04] :00401013 66C741040000 mov word[ecx+04], 0000 :00401019 8B55FC mov edx, dword[ebp-04] :0040101C 66C742060000 mov word[edx+06], 0000 :00401022 8B45FC mov eax, dword[ebp-04] :00401025 66C740080000 mov word[eax+08], 0000 :0040102B 8B4DFC mov ecx, dword[ebp-04] :0040102E 66C7410A0000 mov word[ecx+0A], 0000 :00401034 8B55FC mov edx, dword[ebp-04] :00401037 C7421000000000 mov dword[edx+10], 00000000 :0040103E 8B45FC mov eax, dword[ebp-04] :00401041 8B4810 mov ecx, dword[eax+10] :00401044 83C101 add ecx, 00000001 :00401047 8B55FC mov edx, dword[ebp-04] :0040104A 894A10 mov dword[edx+10], ecx :0040104D 8B45FC mov eax, dword[ebp-04] :00401050 8BE5 mov esp, ebp :00401052 5D pop ebp :00401053 C3 ret :00401054 CC CC CC CC CC CC CC CC CC CC CC CC ............ ========= :00401060 55 push ebp :00401061 8BEC mov ebp, esp :00401063 51 push ecx :00401064 894DFC mov dword[ebp-04], ecx :00401067 8B45FC mov eax, dword[ebp-04] :0040106A 83781000 cmp dword[eax+10], 00000000 :0040106E 7508 jne 00401078 :00401070 8B4DFC mov ecx, dword[ebp-04] :00401073 E8B8000000 call 00401130 --------- :00401078 8B4DFC mov ecx, dword[ebp-04] :0040107B 8B5110 mov edx, dword[ecx+10] :0040107E 83EA01 sub edx, 00000001 :00401081 8B45FC mov eax, dword[ebp-04] :00401084 895010 mov dword[eax+10], edx :00401087 8BE5 mov esp, ebp :00401089 5D pop ebp :0040108A C3 ret :0040108B CC CC CC CC CC ..... ========= :00401090 55 push ebp :00401091 8BEC mov ebp, esp :00401093 51 push ecx :00401094 894DFC mov dword[ebp-04], ecx :00401097 833D6803410001 cmp dword[00410368], 00000001 :0040109E 7507 jne 004010A7 :004010A0 33C0 xor eax, eax :004010A2 E981000000 jmp 00401128 --------- :004010A7 FF1548C04000 call dword[0040C048] ;;call KERNEL32.AllocConsole :004010AD 85C0 test eax, eax :004010AF 751A jne 004010CB :004010B1 C7056803410000000000 mov dword[00410368], 00000000 :004010BB FF154CC04000 call dword[0040C04C] ;;call KERNEL32.GetLastError :004010C1 8B4DFC mov ecx, dword[ebp-04] :004010C4 89410C mov dword[ecx+0C], eax :004010C7 33C0 xor eax, eax :004010C9 EB5D jmp 00401128 --------- :004010CB C7056803410001000000 mov dword[00410368], 00000001 :004010D5 6A01 push 00000001 :004010D7 8B4DFC mov ecx, dword[ebp-04] :004010DA E8B1040000 call 00401590 :004010DF 8B55FC mov edx, dword[ebp-04] :004010E2 66894206 mov word[edx+06], ax :004010E6 6A02 push 00000002 :004010E8 8B4DFC mov ecx, dword[ebp-04] :004010EB E8A0040000 call 00401590 :004010F0 8B4DFC mov ecx, dword[ebp-04] :004010F3 66894104 mov word[ecx+04], ax :004010F7 6A08 push 00000008 :004010F9 8B4DFC mov ecx, dword[ebp-04] :004010FC E88F040000 call 00401590 :00401101 8B55FC mov edx, dword[ebp-04] :00401104 6689420A mov word[edx+0A], ax :00401108 6A04 push 00000004 :0040110A 8B4DFC mov ecx, dword[ebp-04] :0040110D E87E040000 call 00401590 :00401112 8B4DFC mov ecx, dword[ebp-04] :00401115 66894108 mov word[ecx+08], ax :00401119 8B55FC mov edx, dword[ebp-04] :0040111C C7420C00000000 mov dword[edx+0C], 00000000 :00401123 B801000000 mov eax, 00000001 --------- :00401128 8BE5 mov esp, ebp :0040112A 5D pop ebp :0040112B C3 ret :0040112C CC CC CC CC .... ========= :00401130 55 push ebp :00401131 8BEC mov ebp, esp :00401133 51 push ecx :00401134 894DFC mov dword[ebp-04], ecx :00401137 833D6803410000 cmp dword[00410368], 00000000 :0040113E 7507 jne 00401147 :00401140 B801000000 mov eax, 00000001 :00401145 EB33 jmp 0040117A --------- :00401147 FF15C8C04000 call dword[0040C0C8] ;;call KERNEL32.FreeConsole :0040114D 85C0 test eax, eax :0040114F 751A jne 0040116B :00401151 C7056803410001000000 mov dword[00410368], 00000001 :0040115B FF154CC04000 call dword[0040C04C] ;;call KERNEL32.GetLastError :00401161 8B4DFC mov ecx, dword[ebp-04] :00401164 89410C mov dword[ecx+0C], eax :00401167 33C0 xor eax, eax :00401169 EB0F jmp 0040117A --------- :0040116B C7056803410000000000 mov dword[00410368], 00000000 :00401175 B801000000 mov eax, 00000001 --------- :0040117A 8BE5 mov esp, ebp :0040117C 5D pop ebp :0040117D C3 ret :0040117E CC CC .. ========= :00401180 55 push ebp :00401181 8BEC mov ebp, esp :00401183 83EC08 sub esp, 00000008 :00401186 894DF8 mov dword[ebp-08], ecx :00401189 8B45F8 mov eax, dword[ebp-08] :0040118C 668B4808 mov cx, word[eax+08] :00401190 66894DFC mov word[ebp-04], cx :00401194 8B55F8 mov edx, dword[ebp-08] :00401197 668B4508 mov ax, word[ebp+08] :0040119B 66894208 mov word[edx+08], ax :0040119F 6A04 push 00000004 :004011A1 8B4DF8 mov ecx, dword[ebp-08] :004011A4 E8C7010000 call 00401370 :004011A9 668B4D0C mov cx, word[ebp+0C] :004011AD 51 push ecx :004011AE 8B4DF8 mov ecx, dword[ebp-08] :004011B1 E83A030000 call 004014F0 :004011B6 668B45FC mov ax, word[ebp-04] :004011BA 8BE5 mov esp, ebp :004011BC 5D pop ebp :004011BD C20800 ret 0008 --------- :004011C0 55 push ebp :004011C1 8BEC mov ebp, esp :004011C3 51 push ecx :004011C4 6A00 push 00000000 :004011C6 6A00 push 00000000 :004011C8 6A12 push 00000012 :004011CA E861040000 call 00401630 :004011CF 8945FC mov dword[ebp-04], eax :004011D2 8B45FC mov eax, dword[ebp-04] :004011D5 8B10 mov edx, dword[eax] :004011D7 8B4DFC mov ecx, dword[ebp-04] :004011DA FF527C call dword[edx+7C] :004011DD 8BC8 mov ecx, eax :004011DF E85C040000 call 00401640 :004011E4 B801000000 mov eax, 00000001 :004011E9 8BE5 mov esp, ebp :004011EB 5D pop ebp :004011EC C20400 ret 0004 :004011EF CC . ========= :004011F0 55 push ebp :004011F1 8BEC mov ebp, esp :004011F3 83EC28 sub esp, 00000028 :004011F6 56 push esi :004011F7 57 push edi :004011F8 894DD8 mov dword[ebp-28], ecx :004011FB 833D6803410000 cmp dword[00410368], 00000000 :00401202 7508 jne 0040120C :00401204 8B4DD8 mov ecx, dword[ebp-28] :00401207 E884FEFFFF call 00401090 --------- :0040120C 6AF5 push -0000000B :0040120E FF1554C04000 call dword[0040C054] ;;call KERNEL32.GetStdHandle :00401214 8945E0 mov dword[ebp-20], eax :00401217 8D45E8 lea eax, dword[ebp-18] :0040121A 50 push eax :0040121B 8B4DE0 mov ecx, dword[ebp-20] :0040121E 51 push ecx :0040121F FF1550C04000 call dword[0040C050] ;;call KERNEL32.GetConsoleScreenBufferInfo :00401225 6A0F push 0000000F :00401227 8B4DD8 mov ecx, dword[ebp-28] :0040122A E841010000 call 00401370 :0040122F 6800400000 push 00004000 :00401234 8B55E0 mov edx, dword[ebp-20] :00401237 52 push edx :00401238 FF15ACC44000 call dword[0040C4AC] ;;call MSVCRT._open_osfhandle :0040123E 83C408 add esp, 00000008 :00401241 8945E4 mov dword[ebp-1C], eax :00401244 6830F04000 push 0040F030 (StringData)"w" :00401249 8B45E4 mov eax, dword[ebp-1C] :0040124C 50 push eax :0040124D FF15B0C44000 call dword[0040C4B0] ;;call MSVCRT._fdopen :00401253 83C408 add esp, 00000008 :00401256 8945DC mov dword[ebp-24], eax :00401259 8B75DC mov esi, dword[ebp-24] :0040125C 8B3DB4C44000 mov edi, dword[0040C4B4] :00401262 83C720 add edi, 00000020 :00401265 B908000000 mov ecx, 00000008 :0040126A F3A5 rep movsd :0040126C 6A00 push 00000000 :0040126E 6A04 push 00000004 :00401270 6A00 push 00000000 :00401272 8B0DB4C44000 mov ecx, dword[0040C4B4] :00401278 83C120 add ecx, 00000020 :0040127B 51 push ecx :0040127C FF15B8C44000 call dword[0040C4B8] ;;call MSVCRT.setvbuf :00401282 83C410 add esp, 00000010 :00401285 6AF6 push -0000000A :00401287 FF1554C04000 call dword[0040C054] ;;call KERNEL32.GetStdHandle :0040128D 8945E0 mov dword[ebp-20], eax :00401290 6800400000 push 00004000 :00401295 8B55E0 mov edx, dword[ebp-20] :00401298 52 push edx :00401299 FF15ACC44000 call dword[0040C4AC] ;;call MSVCRT._open_osfhandle :0040129F 83C408 add esp, 00000008 :004012A2 8945E4 mov dword[ebp-1C], eax :004012A5 6834F04000 push 0040F034 (StringData)"r" :004012AA 8B45E4 mov eax, dword[ebp-1C] :004012AD 50 push eax :004012AE FF15B0C44000 call dword[0040C4B0] ;;call MSVCRT._fdopen :004012B4 83C408 add esp, 00000008 :004012B7 8945DC mov dword[ebp-24], eax :004012BA 8B75DC mov esi, dword[ebp-24] :004012BD B908000000 mov ecx, 00000008 :004012C2 8B3DB4C44000 mov edi, dword[0040C4B4] :004012C8 F3A5 rep movsd :004012CA 6A00 push 00000000 :004012CC 6A04 push 00000004 :004012CE 6A00 push 00000000 :004012D0 8B0DB4C44000 mov ecx, dword[0040C4B4] :004012D6 51 push ecx :004012D7 FF15B8C44000 call dword[0040C4B8] ;;call MSVCRT.setvbuf :004012DD 83C410 add esp, 00000010 :004012E0 6AF4 push -0000000C :004012E2 FF1554C04000 call dword[0040C054] ;;call KERNEL32.GetStdHandle :004012E8 8945E0 mov dword[ebp-20], eax :004012EB 6800400000 push 00004000 :004012F0 8B55E0 mov edx, dword[ebp-20] :004012F3 52 push edx :004012F4 FF15ACC44000 call dword[0040C4AC] ;;call MSVCRT._open_osfhandle :004012FA 83C408 add esp, 00000008 :004012FD 8945E4 mov dword[ebp-1C], eax :00401300 6838F04000 push 0040F038 (StringData)"w" :00401305 8B45E4 mov eax, dword[ebp-1C] :00401308 50 push eax :00401309 FF15B0C44000 call dword[0040C4B0] ;;call MSVCRT._fdopen :0040130F 83C408 add esp, 00000008 :00401312 8945DC mov dword[ebp-24], eax :00401315 8B75DC mov esi, dword[ebp-24] :00401318 8B3DB4C44000 mov edi, dword[0040C4B4] :0040131E 83C740 add edi, 00000040 :00401321 B908000000 mov ecx, 00000008 :00401326 F3A5 rep movsd :00401328 6A00 push 00000000 :0040132A 6A04 push 00000004 :0040132C 6A00 push 00000000 :0040132E 8B0DB4C44000 mov ecx, dword[0040C4B4] :00401334 83C140 add ecx, 00000040 :00401337 51 push ecx :00401338 FF15B8C44000 call dword[0040C4B8] ;;call MSVCRT.setvbuf :0040133E 83C410 add esp, 00000010 :00401341 6A01 push 00000001 :00401343 FF1510C44000 call dword[0040C410] ;;call MSVCP60.?sync_with_stdio@ios_base@std@@SA_N_N@Z :00401349 83C404 add esp, 00000004 :0040134C 8B55D8 mov edx, dword[ebp-28] :0040134F C70201000000 mov dword[edx], 00000001 :00401355 6A01 push 00000001 :00401357 68C0114000 push 004011C0 :0040135C FF1544C04000 call dword[0040C044] ;;call KERNEL32.SetConsoleCtrlHandler :00401362 5F pop edi :00401363 5E pop esi :00401364 8BE5 mov esp, ebp :00401366 5D pop ebp :00401367 C20400 ret 0004 :0040136A CC CC CC CC CC CC ...... ========= :00401370 55 push ebp :00401371 8BEC mov ebp, esp :00401373 83EC28 sub esp, 00000028 :00401376 894DD8 mov dword[ebp-28], ecx :00401379 833D6803410000 cmp dword[00410368], 00000000 :00401380 7507 jne 00401389 :00401382 33C0 xor eax, eax :00401384 E927010000 jmp 004014B0 --------- :00401389 6AF5 push -0000000B :0040138B FF1554C04000 call dword[0040C054] ;;call KERNEL32.GetStdHandle :00401391 8945E4 mov dword[ebp-1C], eax :00401394 8D45E8 lea eax, dword[ebp-18] :00401397 50 push eax :00401398 8B4DE4 mov ecx, dword[ebp-1C] :0040139B 51 push ecx :0040139C FF1550C04000 call dword[0040C050] ;;call KERNEL32.GetConsoleScreenBufferInfo :004013A2 8B5508 mov edx, dword[ebp+08] :004013A5 81E2FFFF0000 and edx, 0000FFFF :004013AB 83E202 and edx, 00000002 :004013AE 85D2 test edx, edx :004013B0 750F jne 004013C1 :004013B2 8B4508 mov eax, dword[ebp+08] :004013B5 25FFFF0000 and eax, 0000FFFF :004013BA 83E001 and eax, 00000001 :004013BD 85C0 test eax, eax :004013BF 743A je 004013FB --------- :004013C1 8B4DD8 mov ecx, dword[ebp-28] :004013C4 0FBF5104 movsx edx, word[ecx+04] :004013C8 85D2 test edx, edx :004013CA 740B je 004013D7 :004013CC 8B45D8 mov eax, dword[ebp-28] :004013CF 668B4804 mov cx, word[eax+04] :004013D3 66894DE8 mov word[ebp-18], cx --------- :004013D7 8B55D8 mov edx, dword[ebp-28] :004013DA 0FBF4206 movsx eax, word[edx+06] :004013DE 85C0 test eax, eax :004013E0 740B je 004013ED :004013E2 8B4DD8 mov ecx, dword[ebp-28] :004013E5 668B5106 mov dx, word[ecx+06] :004013E9 668955EA mov word[ebp-16], dx --------- :004013ED 8B45E8 mov eax, dword[ebp-18] :004013F0 50 push eax :004013F1 8B4DE4 mov ecx, dword[ebp-1C] :004013F4 51 push ecx :004013F5 FF1564C04000 call dword[0040C064] ;;call KERNEL32.SetConsoleScreenBufferSize --------- :004013FB 8B5508 mov edx, dword[ebp+08] :004013FE 81E2FFFF0000 and edx, 0000FFFF :00401404 83E204 and edx, 00000004 :00401407 85D2 test edx, edx :00401409 7427 je 00401432 :0040140B 8B45D8 mov eax, dword[ebp-28] :0040140E 33C9 xor ecx, ecx :00401410 668B4808 mov cx, word[eax+08] :00401414 85C9 test ecx, ecx :00401416 740B je 00401423 :00401418 8B55D8 mov edx, dword[ebp-28] :0040141B 668B4208 mov ax, word[edx+08] :0040141F 668945F0 mov word[ebp-10], ax --------- :00401423 668B4DF0 mov cx, word[ebp-10] :00401427 51 push ecx :00401428 8B55E4 mov edx, dword[ebp-1C] :0040142B 52 push edx :0040142C FF1560C04000 call dword[0040C060] ;;call KERNEL32.SetConsoleTextAttribute --------- :00401432 8B4508 mov eax, dword[ebp+08] :00401435 25FFFF0000 and eax, 0000FFFF :0040143A 83E008 and eax, 00000008 :0040143D 85C0 test eax, eax :0040143F 745E je 0040149F :00401441 8B4DD8 mov ecx, dword[ebp-28] :00401444 0FBF510A movsx edx, word[ecx+0A] :00401448 85D2 test edx, edx :0040144A 740D je 00401459 :0040144C 8B45D8 mov eax, dword[ebp-28] :0040144F 668B480A mov cx, word[eax+0A] :00401453 66894DE2 mov word[ebp-1E], cx :00401457 EB08 jmp 00401461 --------- :00401459 668B55FC mov dx, word[ebp-04] :0040145D 668955E2 mov word[ebp-1E], dx --------- :00401461 8B45D8 mov eax, dword[ebp-28] :00401464 0FBF4804 movsx ecx, word[eax+04] :00401468 85C9 test ecx, ecx :0040146A 740D je 00401479 :0040146C 8B55D8 mov edx, dword[ebp-28] :0040146F 668B4204 mov ax, word[edx+04] :00401473 668945E0 mov word[ebp-20], ax :00401477 EB08 jmp 00401481 --------- :00401479 668B4DFA mov cx, word[ebp-06] :0040147D 66894DE0 mov word[ebp-20], cx --------- :00401481 66C745DC0000 mov word[ebp-24], 0000 :00401487 668B55DC mov dx, word[ebp-24] :0040148B 668955DE mov word[ebp-22], dx :0040148F 8D45DC lea eax, dword[ebp-24] :00401492 50 push eax :00401493 6A01 push 00000001 :00401495 8B4DE4 mov ecx, dword[ebp-1C] :00401498 51 push ecx :00401499 FF155CC04000 call dword[0040C05C] ;;call KERNEL32.SetConsoleWindowInfo --------- :0040149F 6A01 push 00000001 :004014A1 8B55E4 mov edx, dword[ebp-1C] :004014A4 52 push edx :004014A5 FF1558C04000 call dword[0040C058] ;;call KERNEL32.SetConsoleMode :004014AB B801000000 mov eax, 00000001 --------- :004014B0 8BE5 mov esp, ebp :004014B2 5D pop ebp :004014B3 C20400 ret 0004 :004014B6 CC CC CC CC CC CC CC CC CC CC .......... ========= :004014C0 55 push ebp :004014C1 8BEC mov ebp, esp :004014C3 51 push ecx :004014C4 894DFC mov dword[ebp-04], ecx :004014C7 833D6803410000 cmp dword[00410368], 00000000 :004014CE 7504 jne 004014D4 :004014D0 33C0 xor eax, eax :004014D2 EB0A jmp 004014DE --------- :004014D4 8B4508 mov eax, dword[ebp+08] :004014D7 50 push eax :004014D8 FF1554C04000 call dword[0040C054] ;;call KERNEL32.GetStdHandle --------- :004014DE 8BE5 mov esp, ebp :004014E0 5D pop ebp :004014E1 C20400 ret 0004 :004014E4 CC CC CC CC CC CC CC CC CC CC CC CC ............ ========= :004014F0 55 push ebp :004014F1 8BEC mov ebp, esp :004014F3 83EC34 sub esp, 00000034 :004014F6 894DD0 mov dword[ebp-30], ecx :004014F9 66C745FC0000 mov word[ebp-04], 0000 :004014FF 66C745FE0000 mov word[ebp-02], 0000 :00401505 833D6803410000 cmp dword[00410368], 00000000 :0040150C 7504 jne 00401512 :0040150E 33C0 xor eax, eax :00401510 EB6F jmp 00401581 --------- :00401512 6AF5 push -0000000B :00401514 8B4DD0 mov ecx, dword[ebp-30] :00401517 E8A4FFFFFF call 004014C0 :0040151C 8945F0 mov dword[ebp-10], eax :0040151F 8D45D8 lea eax, dword[ebp-28] :00401522 50 push eax :00401523 8B4DF0 mov ecx, dword[ebp-10] :00401526 51 push ecx :00401527 FF1550C04000 call dword[0040C050] ;;call KERNEL32.GetConsoleScreenBufferInfo :0040152D 8945F4 mov dword[ebp-0C], eax :00401530 837DF400 cmp dword[ebp-0C], 00000000 :00401534 7505 jne 0040153B :00401536 8B45F4 mov eax, dword[ebp-0C] :00401539 EB46 jmp 00401581 --------- :0040153B 0FBF55D8 movsx edx, word[ebp-28] :0040153F 0FBF45DA movsx eax, word[ebp-26] :00401543 0FAFD0 imul edx, eax :00401546 8955D4 mov dword[ebp-2C], edx :00401549 0FBF4D08 movsx ecx, word[ebp+08] :0040154D 85C9 test ecx, ecx :0040154F 7409 je 0040155A :00401551 0FBF5508 movsx edx, word[ebp+08] :00401555 8955CC mov dword[ebp-34], edx :00401558 EB06 jmp 00401560 --------- :0040155A 8B45D4 mov eax, dword[ebp-2C] :0040155D 8945CC mov dword[ebp-34], eax --------- :00401560 8D4DF8 lea ecx, dword[ebp-08] :00401563 51 push ecx :00401564 8B55DC mov edx, dword[ebp-24] :00401567 52 push edx :00401568 8B45CC mov eax, dword[ebp-34] :0040156B 50 push eax :0040156C 668B4DE0 mov cx, word[ebp-20] :00401570 51 push ecx :00401571 8B55F0 mov edx, dword[ebp-10] :00401574 52 push edx :00401575 FF1568C04000 call dword[0040C068] ;;call KERNEL32.FillConsoleOutputAttribute :0040157B 8945F4 mov dword[ebp-0C], eax :0040157E 8B45F4 mov eax, dword[ebp-0C] --------- :00401581 8BE5 mov esp, ebp :00401583 5D pop ebp :00401584 C20400 ret 0004 :00401587 CC CC CC CC CC CC CC CC CC ......... ========= :00401590 55 push ebp :00401591 8BEC mov ebp, esp :00401593 83EC24 sub esp, 00000024 :00401596 894DE0 mov dword[ebp-20], ecx :00401599 833D6803410000 cmp dword[00410368], 00000000 :004015A0 7505 jne 004015A7 :004015A2 6633C0 xor ax, ax :004015A5 EB59 jmp 00401600 --------- :004015A7 6AF5 push -0000000B :004015A9 FF1554C04000 call dword[0040C054] ;;call KERNEL32.GetStdHandle :004015AF 8945E4 mov dword[ebp-1C], eax :004015B2 8D45E8 lea eax, dword[ebp-18] :004015B5 50 push eax :004015B6 8B4DE4 mov ecx, dword[ebp-1C] :004015B9 51 push ecx :004015BA FF1550C04000 call dword[0040C050] ;;call KERNEL32.GetConsoleScreenBufferInfo :004015C0 8B5508 mov edx, dword[ebp+08] :004015C3 81E2FFFF0000 and edx, 0000FFFF :004015C9 8955DC mov dword[ebp-24], edx :004015CC 8B45DC mov eax, dword[ebp-24] :004015CF 83E801 sub eax, 00000001 :004015D2 8945DC mov dword[ebp-24], eax :004015D5 837DDC07 cmp dword[ebp-24], 00000007 :004015D9 7722 ja 004015FD :004015DB 8B4DDC mov ecx, dword[ebp-24] :004015DE FF248D06164000 jmp dword[4*ecx+00401606] --------- :004015E5 668B45F0 mov ax, word[ebp-10] :004015E9 EB15 jmp 00401600 --------- :004015EB 668B45EA mov ax, word[ebp-16] :004015EF EB0F jmp 00401600 --------- :004015F1 668B45FC mov ax, word[ebp-04] :004015F5 EB09 jmp 00401600 --------- :004015F7 668B45E8 mov ax, word[ebp-18] :004015FB EB03 jmp 00401600 --------- :004015FD 6633C0 xor ax, ax --------- :00401600 8BE5 mov esp, ebp :00401602 5D pop ebp :00401603 C20400 ret 0004 :00401606 EB154000 DWORD 004015EB ;; ..@. :0040160A F7154000 DWORD 004015F7 ;; ..@. :0040160E FD154000 DWORD 004015FD ;; ..@. :00401612 E5154000 DWORD 004015E5 ;; ..@. :00401616 FD154000 DWORD 004015FD ;; ..@. :0040161A FD154000 DWORD 004015FD ;; ..@. :0040161E FD154000 DWORD 004015FD ;; ..@. :00401622 F1154000 DWORD 004015F1 ;; ..@. :00401626 CC CC CC CC CC CC CC CC CC CC .......... ========= :00401630 55 push ebp :00401631 8BEC mov ebp, esp :00401633 E8DE930000 call 0040AA16 :00401638 8B4004 mov eax, dword[eax+04] :0040163B 5D pop ebp :0040163C C3 ret :0040163D CC CC CC ... ========= :00401640 55 push ebp :00401641 8BEC mov ebp, esp :00401643 51 push ecx :00401644 894DFC mov dword[ebp-04], ecx :00401647 8B4510 mov eax, dword[ebp+10] :0040164A 50 push eax :0040164B 8B4D0C mov ecx, dword[ebp+0C] :0040164E 51 push ecx :0040164F 8B5508 mov edx, dword[ebp+08] :00401652 52 push edx :00401653 8B45FC mov eax, dword[ebp-04] :00401656 8B4820 mov ecx, dword[eax+20] :00401659 51 push ecx :0040165A FF15ECC44000 call dword[0040C4EC] ;;call USER32.PostMessageA :00401660 8BE5 mov esp, ebp :00401662 5D pop ebp :00401663 C20C00 ret 000C :00401666 CC CC CC CC CC CC CC CC CC CC .......... ========= :00401670 55 push ebp :00401671 8BEC mov ebp, esp :00401673 81ECB4050000 sub esp, 000005B4 :00401679 C785F4FEFFFF01000000 mov dword[ebp+FFFFFEF4], 00000001 :00401683 C785F0FAFFFF00000000 mov dword[ebp+FFFFFAF0], 00000000 :0040168D C785E4FAFFFF00000000 mov dword[ebp+FFFFFAE4], 00000000 :00401697 C785F4FAFFFF00000000 mov dword[ebp+FFFFFAF4], 00000000 :004016A1 8B4510 mov eax, dword[ebp+10] :004016A4 8985ECFEFFFF mov dword[ebp+FFFFFEEC], eax :004016AA 8B4D08 mov ecx, dword[ebp+08] :004016AD 898DE4FEFFFF mov dword[ebp+FFFFFEE4], ecx :004016B3 C745FC00000000 mov dword[ebp-04], 00000000 :004016BA C7857CFAFFFF00000000 mov dword[ebp+FFFFFA7C], 00000000 :004016C4 C785F0FEFFFF00000000 mov dword[ebp+FFFFFEF0], 00000000 :004016CE 8D9580FAFFFF lea edx, dword[ebp+FFFFFA80] :004016D4 8995E8FEFFFF mov dword[ebp+FFFFFEE8], edx :004016DA C685ECFAFFFF00 mov byte[ebp+FFFFFAEC], 00 :004016E1 837D0C00 cmp dword[ebp+0C], 00000000 :004016E5 7507 jne 004016EE :004016E7 32C0 xor al, al :004016E9 E9820C0000 jmp 00402370 --------- :004016EE 8B450C mov eax, dword[ebp+0C] :004016F1 50 push eax :004016F2 6A00 push 00000000 :004016F4 8B4D08 mov ecx, dword[ebp+08] :004016F7 51 push ecx :004016F8 E8C3970000 call 0040AEC0 ;;call MSVCRT.memset :004016FD 83C40C add esp, 0000000C :00401700 6A64 push 00000064 :00401702 6A00 push 00000000 :00401704 8D9580FAFFFF lea edx, dword[ebp+FFFFFA80] :0040170A 52 push edx :0040170B E8B0970000 call 0040AEC0 ;;call MSVCRT.memset :00401710 83C40C add esp, 0000000C :00401713 8B4514 mov eax, dword[ebp+14] :00401716 C70000000000 mov dword[eax], 00000000 :0040171C 8B4D18 mov ecx, dword[ebp+18] :0040171F C60151 mov byte[ecx], 51 :00401722 8B550C mov edx, dword[ebp+0C] :00401725 83EA01 sub edx, 00000001 :00401728 89550C mov dword[ebp+0C], edx --------- :0040172B 8B85ECFEFFFF mov eax, dword[ebp+FFFFFEEC] :00401731 33C9 xor ecx, ecx :00401733 8A08 mov cl, byte[eax] :00401735 85C9 test ecx, ecx :00401737 0F84D80B0000 je 00402315 :0040173D 8B95ECFEFFFF mov edx, dword[ebp+FFFFFEEC] :00401743 8A02 mov al, byte[edx] :00401745 8885E8FAFFFF mov byte[ebp+FFFFFAE8], al :0040174B 8B8DF4FEFFFF mov ecx, dword[ebp+FFFFFEF4] :00401751 898D70FAFFFF mov dword[ebp+FFFFFA70], ecx :00401757 83BD70FAFFFF09 cmp dword[ebp+FFFFFA70], 00000009 :0040175E 0F879D0B0000 ja 00402301 :00401764 8B9570FAFFFF mov edx, dword[ebp+FFFFFA70] :0040176A FF249574234000 jmp dword[4*edx+00402374] --------- :00401771 C685ECFAFFFF00 mov byte[ebp+FFFFFAEC], 00 :00401778 8B85E8FAFFFF mov eax, dword[ebp+FFFFFAE8] :0040177E 25FF000000 and eax, 000000FF :00401783 89856CFAFFFF mov dword[ebp+FFFFFA6C], eax :00401789 8B8D6CFAFFFF mov ecx, dword[ebp+FFFFFA6C] :0040178F 83E909 sub ecx, 00000009 :00401792 898D6CFAFFFF mov dword[ebp+FFFFFA6C], ecx :00401798 83BD6CFAFFFF34 cmp dword[ebp+FFFFFA6C], 00000034 :0040179F 7765 ja 00401806 :004017A1 8B856CFAFFFF mov eax, dword[ebp+FFFFFA6C] :004017A7 33D2 xor edx, edx :004017A9 8A90A8234000 mov dl, byte[eax+004023A8] :004017AF FF24959C234000 jmp dword[4*edx+0040239C] --------- :004017B6 C785F4FEFFFF02000000 mov dword[ebp+FFFFFEF4], 00000002 :004017C0 8B8DECFEFFFF mov ecx, dword[ebp+FFFFFEEC] :004017C6 898DF0FEFFFF mov dword[ebp+FFFFFEF0], ecx :004017CC EB64 jmp 00401832 --------- :004017CE 837D0C00 cmp dword[ebp+0C], 00000000 :004017D2 7626 jbe 004017FA :004017D4 8B95E4FEFFFF mov edx, dword[ebp+FFFFFEE4] :004017DA 8A85E8FAFFFF mov al, byte[ebp+FFFFFAE8] :004017E0 8802 mov byte[edx], al :004017E2 8B8DE4FEFFFF mov ecx, dword[ebp+FFFFFEE4] :004017E8 83C101 add ecx, 00000001 :004017EB 898DE4FEFFFF mov dword[ebp+FFFFFEE4], ecx :004017F1 8B550C mov edx, dword[ebp+0C] :004017F4 83EA01 sub edx, 00000001 :004017F7 89550C mov dword[ebp+0C], edx --------- :004017FA C785F4FEFFFF01000000 mov dword[ebp+FFFFFEF4], 00000001 :00401804 EB2C jmp 00401832 --------- :00401806 837D0C00 cmp dword[ebp+0C], 00000000 :0040180A 7626 jbe 00401832 :0040180C 8B85E4FEFFFF mov eax, dword[ebp+FFFFFEE4] :00401812 8A8DE8FAFFFF mov cl, byte[ebp+FFFFFAE8] :00401818 8808 mov byte[eax], cl :0040181A 8B95E4FEFFFF mov edx, dword[ebp+FFFFFEE4] :00401820 83C201 add edx, 00000001 :00401823 8995E4FEFFFF mov dword[ebp+FFFFFEE4], edx :00401829 8B450C mov eax, dword[ebp+0C] :0040182C 83E801 sub eax, 00000001 :0040182F 89450C mov dword[ebp+0C], eax --------- :00401832 E9CA0A0000 jmp 00402301 --------- :00401837 8D8DF8FAFFFF lea ecx, dword[ebp+FFFFFAF8] :0040183D 894DFC mov dword[ebp-04], ecx :00401840 8D95F8FEFFFF lea edx, dword[ebp+FFFFFEF8] :00401846 89957CFAFFFF mov dword[ebp+FFFFFA7C], edx :0040184C 6804010000 push 00000104 :00401851 6A00 push 00000000 :00401853 8D85F8FEFFFF lea eax, dword[ebp+FFFFFEF8] :00401859 50 push eax :0040185A E861960000 call 0040AEC0 ;;call MSVCRT.memset :0040185F 83C40C add esp, 0000000C :00401862 68E8030000 push 000003E8 :00401867 6A00 push 00000000 :00401869 8D8DF8FAFFFF lea ecx, dword[ebp+FFFFFAF8] :0040186F 51 push ecx :00401870 E84B960000 call 0040AEC0 ;;call MSVCRT.memset :00401875 83C40C add esp, 0000000C :00401878 C785F0FAFFFF00000000 mov dword[ebp+FFFFFAF0], 00000000 :00401882 C785E4FAFFFF00000000 mov dword[ebp+FFFFFAE4], 00000000 :0040188C 8B95E8FAFFFF mov edx, dword[ebp+FFFFFAE8] :00401892 81E2FF000000 and edx, 000000FF :00401898 899568FAFFFF mov dword[ebp+FFFFFA68], edx :0040189E 8B8568FAFFFF mov eax, dword[ebp+FFFFFA68] :004018A4 83E809 sub eax, 00000009 :004018A7 898568FAFFFF mov dword[ebp+FFFFFA68], eax :004018AD 83BD68FAFFFF34 cmp dword[ebp+FFFFFA68], 00000034 :004018B4 0F87AC000000 ja 00401966 :004018BA 8B9568FAFFFF mov edx, dword[ebp+FFFFFA68] :004018C0 33C9 xor ecx, ecx :004018C2 8A8AED234000 mov cl, byte[edx+004023ED] :004018C8 FF248DDD234000 jmp dword[4*ecx+004023DD] --------- :004018CF C785F4FEFFFF02000000 mov dword[ebp+FFFFFEF4], 00000002 :004018D9 8B85ECFEFFFF mov eax, dword[ebp+FFFFFEEC] :004018DF 8985F0FEFFFF mov dword[ebp+FFFFFEF0], eax :004018E5 E918010000 jmp 00401A02 --------- :004018EA 837D0C00 cmp dword[ebp+0C], 00000000 :004018EE 7626 jbe 00401916 :004018F0 8B8DE4FEFFFF mov ecx, dword[ebp+FFFFFEE4] :004018F6 8A95E8FAFFFF mov dl, byte[ebp+FFFFFAE8] :004018FC 8811 mov byte[ecx], dl :004018FE 8B85E4FEFFFF mov eax, dword[ebp+FFFFFEE4] :00401904 83C001 add eax, 00000001 :00401907 8985E4FEFFFF mov dword[ebp+FFFFFEE4], eax :0040190D 8B4D0C mov ecx, dword[ebp+0C] :00401910 83E901 sub ecx, 00000001 :00401913 894D0C mov dword[ebp+0C], ecx --------- :00401916 C785F4FEFFFF01000000 mov dword[ebp+FFFFFEF4], 00000001 :00401920 E9DD000000 jmp 00401A02 --------- :00401925 837D0C00 cmp dword[ebp+0C], 00000000 :00401929 762C jbe 00401957 :0040192B 8B95E8FEFFFF mov edx, dword[ebp+FFFFFEE8] :00401931 8A85E8FAFFFF mov al, byte[ebp+FFFFFAE8] :00401937 8802 mov byte[edx], al :00401939 8B8DE8FEFFFF mov ecx, dword[ebp+FFFFFEE8] :0040193F 83C101 add ecx, 00000001 :00401942 898DE8FEFFFF mov dword[ebp+FFFFFEE8], ecx :00401948 8B95F4FAFFFF mov edx, dword[ebp+FFFFFAF4] :0040194E 83C201 add edx, 00000001 :00401951 8995F4FAFFFF mov dword[ebp+FFFFFAF4], edx --------- :00401957 C785F4FEFFFF01000000 mov dword[ebp+FFFFFEF4], 00000001 :00401961 E99C000000 jmp 00401A02 --------- :00401966 8B450C mov eax, dword[ebp+0C] :00401969 3B85F4FAFFFF cmp eax, dword[ebp+FFFFFAF4] :0040196F 725B jc 004019CC :00401971 83BDF4FAFFFF00 cmp dword[ebp+FFFFFAF4], 00000000 :00401978 7652 jbe 004019CC :0040197A 8B8DF4FAFFFF mov ecx, dword[ebp+FFFFFAF4] :00401980 51 push ecx :00401981 8D9580FAFFFF lea edx, dword[ebp+FFFFFA80] :00401987 52 push edx :00401988 8B85E4FEFFFF mov eax, dword[ebp+FFFFFEE4] :0040198E 50 push eax :0040198F FF1588C44000 call dword[0040C488] ;;call MSVCRT.strncpy :00401995 83C40C add esp, 0000000C :00401998 8B8DE4FEFFFF mov ecx, dword[ebp+FFFFFEE4] :0040199E 038DF4FAFFFF add ecx, dword[ebp+FFFFFAF4] :004019A4 898DE4FEFFFF mov dword[ebp+FFFFFEE4], ecx :004019AA 8B550C mov edx, dword[ebp+0C] :004019AD 2B95F4FAFFFF sub edx, dword[ebp+FFFFFAF4] :004019B3 89550C mov dword[ebp+0C], edx :004019B6 8D8580FAFFFF lea eax, dword[ebp+FFFFFA80] :004019BC 8985E8FEFFFF mov dword[ebp+FFFFFEE8], eax :004019C2 C785F4FAFFFF00000000 mov dword[ebp+FFFFFAF4], 00000000 --------- :004019CC 837D0C00 cmp dword[ebp+0C], 00000000 :004019D0 7626 jbe 004019F8 :004019D2 8B8DE4FEFFFF mov ecx, dword[ebp+FFFFFEE4] :004019D8 8A95E8FAFFFF mov dl, byte[ebp+FFFFFAE8] :004019DE 8811 mov byte[ecx], dl :004019E0 8B85E4FEFFFF mov eax, dword[ebp+FFFFFEE4] :004019E6 83C001 add eax, 00000001 :004019E9 8985E4FEFFFF mov dword[ebp+FFFFFEE4], eax :004019EF 8B4D0C mov ecx, dword[ebp+0C] :004019F2 83E901 sub ecx, 00000001 :004019F5 894D0C mov dword[ebp+0C], ecx --------- :004019F8 C785F4FEFFFF00000000 mov dword[ebp+FFFFFEF4], 00000000 --------- :00401A02 E9FA080000 jmp 00402301 --------- :00401A07 8A95E8FAFFFF mov dl, byte[ebp+FFFFFAE8] :00401A0D 889564FAFFFF mov byte[ebp+FFFFFA64], dl :00401A13 80BD64FAFFFF3F cmp byte[ebp+FFFFFA64], 3F :00401A1A 7402 je 00401A1E :00401A1C EB0F jmp 00401A2D --------- :00401A1E C785F4FEFFFF03000000 mov dword[ebp+FFFFFEF4], 00000003 :00401A28 E9BB000000 jmp 00401AE8 --------- :00401A2D 8B85E8FAFFFF mov eax, dword[ebp+FFFFFAE8] :00401A33 25FF000000 and eax, 000000FF :00401A38 83F83D cmp eax, 0000003D :00401A3B 7545 jne 00401A82 :00401A3D 8B4D1C mov ecx, dword[ebp+1C] :00401A40 81E1FF000000 and ecx, 000000FF :00401A46 85C9 test ecx, ecx :00401A48 7438 je 00401A82 :00401A4A C785F4FEFFFF02000000 mov dword[ebp+FFFFFEF4], 00000002 :00401A54 837D0C00 cmp dword[ebp+0C], 00000000 :00401A58 7626 jbe 00401A80 :00401A5A 8B95E4FEFFFF mov edx, dword[ebp+FFFFFEE4] :00401A60 8A85E8FAFFFF mov al, byte[ebp+FFFFFAE8] :00401A66 8802 mov byte[edx], al :00401A68 8B8DE4FEFFFF mov ecx, dword[ebp+FFFFFEE4] :00401A6E 83C101 add ecx, 00000001 :00401A71 898DE4FEFFFF mov dword[ebp+FFFFFEE4], ecx :00401A77 8B550C mov edx, dword[ebp+0C] :00401A7A 83EA01 sub edx, 00000001 :00401A7D 89550C mov dword[ebp+0C], edx --------- :00401A80 EB66 jmp 00401AE8 --------- :00401A82 C785F4FEFFFF00000000 mov dword[ebp+FFFFFEF4], 00000000 :00401A8C 8B85ECFEFFFF mov eax, dword[ebp+FFFFFEEC] :00401A92 2B85F0FEFFFF sub eax, dword[ebp+FFFFFEF0] :00401A98 83C001 add eax, 00000001 :00401A9B 8985E0FEFFFF mov dword[ebp+FFFFFEE0], eax :00401AA1 8B4D0C mov ecx, dword[ebp+0C] :00401AA4 3B8DE0FEFFFF cmp ecx, dword[ebp+FFFFFEE0] :00401AAA 723C jc 00401AE8 :00401AAC 8B95E0FEFFFF mov edx, dword[ebp+FFFFFEE0] :00401AB2 52 push edx :00401AB3 8B85F0FEFFFF mov eax, dword[ebp+FFFFFEF0] :00401AB9 50 push eax :00401ABA 8B8DE4FEFFFF mov ecx, dword[ebp+FFFFFEE4] :00401AC0 51 push ecx :00401AC1 FF1588C44000 call dword[0040C488] ;;call MSVCRT.strncpy :00401AC7 83C40C add esp, 0000000C :00401ACA 8B95E4FEFFFF mov edx, dword[ebp+FFFFFEE4] :00401AD0 0395E0FEFFFF add edx, dword[ebp+FFFFFEE0] :00401AD6 8995E4FEFFFF mov dword[ebp+FFFFFEE4], edx :00401ADC 8B450C mov eax, dword[ebp+0C] :00401ADF 2B85E0FEFFFF sub eax, dword[ebp+FFFFFEE0] :00401AE5 89450C mov dword[ebp+0C], eax --------- :00401AE8 E914080000 jmp 00402301 --------- :00401AED 8B8DE8FAFFFF mov ecx, dword[ebp+FFFFFAE8] :00401AF3 81E1FF000000 and ecx, 000000FF :00401AF9 898D60FAFFFF mov dword[ebp+FFFFFA60], ecx :00401AFF 8B9560FAFFFF mov edx, dword[ebp+FFFFFA60] :00401B05 83EA20 sub edx, 00000020 :00401B08 899560FAFFFF mov dword[ebp+FFFFFA60], edx :00401B0E 83BD60FAFFFF3D cmp dword[ebp+FFFFFA60], 0000003D :00401B15 0F87F5000000 ja 00401C10 :00401B1B 8B8D60FAFFFF mov ecx, dword[ebp+FFFFFA60] :00401B21 33C0 xor eax, eax :00401B23 8A812E244000 mov al, byte[ecx+0040242E] :00401B29 FF248522244000 jmp dword[4*eax+00402422] --------- :00401B30 C785F4FEFFFF05000000 mov dword[ebp+FFFFFEF4], 00000005 :00401B3A E90F010000 jmp 00401C4E --------- :00401B3F 837D0C02 cmp dword[ebp+0C], 00000002 :00401B43 7239 jc 00401B7E :00401B45 8B95E4FEFFFF mov edx, dword[ebp+FFFFFEE4] :00401B4B C6023D mov byte[edx], 3D :00401B4E 8B85E4FEFFFF mov eax, dword[ebp+FFFFFEE4] :00401B54 83C001 add eax, 00000001 :00401B57 8985E4FEFFFF mov dword[ebp+FFFFFEE4], eax :00401B5D 8B8DE4FEFFFF mov ecx, dword[ebp+FFFFFEE4] :00401B63 C6013F mov byte[ecx], 3F :00401B66 8B95E4FEFFFF mov edx, dword[ebp+FFFFFEE4] :00401B6C 83C201 add edx, 00000001 :00401B6F 8995E4FEFFFF mov dword[ebp+FFFFFEE4], edx :00401B75 8B450C mov eax, dword[ebp+0C] :00401B78 83E802 sub eax, 00000002 :00401B7B 89450C mov dword[ebp+0C], eax --------- :00401B7E 8D8DF8FAFFFF lea ecx, dword[ebp+FFFFFAF8] :00401B84 51 push ecx :00401B85 E830930000 call 0040AEBA ;;call MSVCRT.strlen :00401B8A 83C404 add esp, 00000004 :00401B8D 8985E4FAFFFF mov dword[ebp+FFFFFAE4], eax :00401B93 83BDE4FAFFFF00 cmp dword[ebp+FFFFFAE4], 00000000 :00401B9A 763C jbe 00401BD8 :00401B9C 8B550C mov edx, dword[ebp+0C] :00401B9F 3B95E4FAFFFF cmp edx, dword[ebp+FFFFFAE4] :00401BA5 7231 jc 00401BD8 :00401BA7 8D85F8FAFFFF lea eax, dword[ebp+FFFFFAF8] :00401BAD 50 push eax :00401BAE 8B4D08 mov ecx, dword[ebp+08] :00401BB1 51 push ecx :00401BB2 E8FD920000 call 0040AEB4 ;;call MSVCRT.strcat :00401BB7 83C408 add esp, 00000008 :00401BBA 8B550C mov edx, dword[ebp+0C] :00401BBD 2B95E4FAFFFF sub edx, dword[ebp+FFFFFAE4] :00401BC3 89550C mov dword[ebp+0C], edx :00401BC6 8B85E4FEFFFF mov eax, dword[ebp+FFFFFEE4] :00401BCC 0385E4FAFFFF add eax, dword[ebp+FFFFFAE4] :00401BD2 8985E4FEFFFF mov dword[ebp+FFFFFEE4], eax --------- :00401BD8 837D0C00 cmp dword[ebp+0C], 00000000 :00401BDC 7626 jbe 00401C04 :00401BDE 8B8DE4FEFFFF mov ecx, dword[ebp+FFFFFEE4] :00401BE4 8A95E8FAFFFF mov dl, byte[ebp+FFFFFAE8] :00401BEA 8811 mov byte[ecx], dl :00401BEC 8B85E4FEFFFF mov eax, dword[ebp+FFFFFEE4] :00401BF2 83C001 add eax, 00000001 :00401BF5 8985E4FEFFFF mov dword[ebp+FFFFFEE4], eax :00401BFB 8B4D0C mov ecx, dword[ebp+0C] :00401BFE 83E901 sub ecx, 00000001 :00401C01 894D0C mov dword[ebp+0C], ecx --------- :00401C04 C785F4FEFFFF01000000 mov dword[ebp+FFFFFEF4], 00000001 :00401C0E EB3E jmp 00401C4E --------- :00401C10 8B95E4FAFFFF mov edx, dword[ebp+FFFFFAE4] :00401C16 83C201 add edx, 00000001 :00401C19 81FAE8030000 cmp edx, 000003E8 :00401C1F 7323 jae 00401C44 :00401C21 8B45FC mov eax, dword[ebp-04] :00401C24 8A8DE8FAFFFF mov cl, byte[ebp+FFFFFAE8] :00401C2A 8808 mov byte[eax], cl :00401C2C 8B55FC mov edx, dword[ebp-04] :00401C2F 83C201 add edx, 00000001 :00401C32 8955FC mov dword[ebp-04], edx :00401C35 8B85E4FAFFFF mov eax, dword[ebp+FFFFFAE4] :00401C3B 83C001 add eax, 00000001 :00401C3E 8985E4FAFFFF mov dword[ebp+FFFFFAE4], eax --------- :00401C44 C785F4FEFFFF04000000 mov dword[ebp+FFFFFEF4], 00000004 --------- :00401C4E E9AE060000 jmp 00402301 --------- :00401C53 8B8DE8FAFFFF mov ecx, dword[ebp+FFFFFAE8] :00401C59 81E1FF000000 and ecx, 000000FF :00401C5F 898D5CFAFFFF mov dword[ebp+FFFFFA5C], ecx :00401C65 8B955CFAFFFF mov edx, dword[ebp+FFFFFA5C] :00401C6B 83EA3F sub edx, 0000003F :00401C6E 89955CFAFFFF mov dword[ebp+FFFFFA5C], edx :00401C74 83BD5CFAFFFF32 cmp dword[ebp+FFFFFA5C], 00000032 :00401C7B 7748 ja 00401CC5 :00401C7D 8B8D5CFAFFFF mov ecx, dword[ebp+FFFFFA5C] :00401C83 33C0 xor eax, eax :00401C85 8A817C244000 mov al, byte[ecx+0040247C] :00401C8B FF24856C244000 jmp dword[4*eax+0040246C] --------- :00401C92 8B5518 mov edx, dword[ebp+18] :00401C95 C60251 mov byte[edx], 51 :00401C98 C785F4FEFFFF06000000 mov dword[ebp+FFFFFEF4], 00000006 :00401CA2 E984000000 jmp 00401D2B --------- :00401CA7 8B4518 mov eax, dword[ebp+18] :00401CAA C60042 mov byte[eax], 42 :00401CAD C785F4FEFFFF06000000 mov dword[ebp+FFFFFEF4], 00000006 :00401CB7 EB72 jmp 00401D2B --------- :00401CB9 C785F4FEFFFF07000000 mov dword[ebp+FFFFFEF4], 00000007 :00401CC3 EB66 jmp 00401D2B --------- :00401CC5 C785F4FEFFFF00000000 mov dword[ebp+FFFFFEF4], 00000000 :00401CCF 8B8DECFEFFFF mov ecx, dword[ebp+FFFFFEEC] :00401CD5 2B8DF0FEFFFF sub ecx, dword[ebp+FFFFFEF0] :00401CDB 83C101 add ecx, 00000001 :00401CDE 898DE0FEFFFF mov dword[ebp+FFFFFEE0], ecx :00401CE4 8B550C mov edx, dword[ebp+0C] :00401CE7 3B95E0FEFFFF cmp edx, dword[ebp+FFFFFEE0] :00401CED 723C jc 00401D2B :00401CEF 8B85E0FEFFFF mov eax, dword[ebp+FFFFFEE0] :00401CF5 50 push eax :00401CF6 8B8DF0FEFFFF mov ecx, dword[ebp+FFFFFEF0] :00401CFC 51 push ecx :00401CFD 8B95E4FEFFFF mov edx, dword[ebp+FFFFFEE4] :00401D03 52 push edx :00401D04 FF1588C44000 call dword[0040C488] ;;call MSVCRT.strncpy :00401D0A 83C40C add esp, 0000000C :00401D0D 8B85E4FEFFFF mov eax, dword[ebp+FFFFFEE4] :00401D13 0385E0FEFFFF add eax, dword[ebp+FFFFFEE0] :00401D19 8985E4FEFFFF mov dword[ebp+FFFFFEE4], eax :00401D1F 8B4D0C mov ecx, dword[ebp+0C] :00401D22 2B8DE0FEFFFF sub ecx, dword[ebp+FFFFFEE0] :00401D28 894D0C mov dword[ebp+0C], ecx --------- :00401D2B E9D1050000 jmp 00402301 --------- :00401D30 8A95E8FAFFFF mov dl, byte[ebp+FFFFFAE8] :00401D36 889558FAFFFF mov byte[ebp+FFFFFA58], dl :00401D3C 80BD58FAFFFF3F cmp byte[ebp+FFFFFA58], 3F :00401D43 7402 je 00401D47 :00401D45 EB0C jmp 00401D53 --------- :00401D47 C785F4FEFFFF07000000 mov dword[ebp+FFFFFEF4], 00000007 :00401D51 EB66 jmp 00401DB9 --------- :00401D53 C785F4FEFFFF00000000 mov dword[ebp+FFFFFEF4], 00000000 :00401D5D 8B85ECFEFFFF mov eax, dword[ebp+FFFFFEEC] :00401D63 2B85F0FEFFFF sub eax, dword[ebp+FFFFFEF0] :00401D69 83C001 add eax, 00000001 :00401D6C 8985E0FEFFFF mov dword[ebp+FFFFFEE0], eax :00401D72 8B4D0C mov ecx, dword[ebp+0C] :00401D75 3B8DE0FEFFFF cmp ecx, dword[ebp+FFFFFEE0] :00401D7B 723C jc 00401DB9 :00401D7D 8B95E0FEFFFF mov edx, dword[ebp+FFFFFEE0] :00401D83 52 push edx :00401D84 8B85F0FEFFFF mov eax, dword[ebp+FFFFFEF0] :00401D8A 50 push eax :00401D8B 8B8DE4FEFFFF mov ecx, dword[ebp+FFFFFEE4] :00401D91 51 push ecx :00401D92 FF1588C44000 call dword[0040C488] ;;call MSVCRT.strncpy :00401D98 83C40C add esp, 0000000C :00401D9B 8B95E4FEFFFF mov edx, dword[ebp+FFFFFEE4] :00401DA1 0395E0FEFFFF add edx, dword[ebp+FFFFFEE0] :00401DA7 8995E4FEFFFF mov dword[ebp+FFFFFEE4], edx :00401DAD 8B450C mov eax, dword[ebp+0C] :00401DB0 2B85E0FEFFFF sub eax, dword[ebp+FFFFFEE0] :00401DB6 89450C mov dword[ebp+0C], eax --------- :00401DB9 E943050000 jmp 00402301 --------- :00401DBE 8A8DE8FAFFFF mov cl, byte[ebp+FFFFFAE8] :00401DC4 888D54FAFFFF mov byte[ebp+FFFFFA54], cl :00401DCA 80BD54FAFFFF20 cmp byte[ebp+FFFFFA54], 20 :00401DD1 741A je 00401DED :00401DD3 80BD54FAFFFF3F cmp byte[ebp+FFFFFA54], 3F :00401DDA 7402 je 00401DDE :00401DDC EB77 jmp 00401E55 --------- :00401DDE C785F4FEFFFF09000000 mov dword[ebp+FFFFFEF4], 00000009 :00401DE8 E9AE000000 jmp 00401E9B --------- :00401DED C785F4FEFFFF00000000 mov dword[ebp+FFFFFEF4], 00000000 :00401DF7 8B95ECFEFFFF mov edx, dword[ebp+FFFFFEEC] :00401DFD 2B95F0FEFFFF sub edx, dword[ebp+FFFFFEF0] :00401E03 83C201 add edx, 00000001 :00401E06 8995E0FEFFFF mov dword[ebp+FFFFFEE0], edx :00401E0C 8B450C mov eax, dword[ebp+0C] :00401E0F 3B85E0FEFFFF cmp eax, dword[ebp+FFFFFEE0] :00401E15 723C jc 00401E53 :00401E17 8B8DE0FEFFFF mov ecx, dword[ebp+FFFFFEE0] :00401E1D 51 push ecx :00401E1E 8B95F0FEFFFF mov edx, dword[ebp+FFFFFEF0] :00401E24 52 push edx :00401E25 8B85E4FEFFFF mov eax, dword[ebp+FFFFFEE4] :00401E2B 50 push eax :00401E2C FF1588C44000 call dword[0040C488] ;;call MSVCRT.strncpy :00401E32 83C40C add esp, 0000000C :00401E35 8B8DE4FEFFFF mov ecx, dword[ebp+FFFFFEE4] :00401E3B 038DE0FEFFFF add ecx, dword[ebp+FFFFFEE0] :00401E41 898DE4FEFFFF mov dword[ebp+FFFFFEE4], ecx :00401E47 8B550C mov edx, dword[ebp+0C] :00401E4A 2B95E0FEFFFF sub edx, dword[ebp+FFFFFEE0] :00401E50 89550C mov dword[ebp+0C], edx --------- :00401E53 EB46 jmp 00401E9B --------- :00401E55 8B85F0FAFFFF mov eax, dword[ebp+FFFFFAF0] :00401E5B 83C001 add eax, 00000001 :00401E5E 3D04010000 cmp eax, 00000104 :00401E63 732C jae 00401E91 :00401E65 8B8D7CFAFFFF mov ecx, dword[ebp+FFFFFA7C] :00401E6B 8A95E8FAFFFF mov dl, byte[ebp+FFFFFAE8] :00401E71 8811 mov byte[ecx], dl :00401E73 8B857CFAFFFF mov eax, dword[ebp+FFFFFA7C] :00401E79 83C001 add eax, 00000001 :00401E7C 89857CFAFFFF mov dword[ebp+FFFFFA7C], eax :00401E82 8B8DF0FAFFFF mov ecx, dword[ebp+FFFFFAF0] :00401E88 83C101 add ecx, 00000001 :00401E8B 898DF0FAFFFF mov dword[ebp+FFFFFAF0], ecx --------- :00401E91 C785F4FEFFFF08000000 mov dword[ebp+FFFFFEF4], 00000008 --------- :00401E9B E961040000 jmp 00402301 --------- :00401EA0 8A95E8FAFFFF mov dl, byte[ebp+FFFFFAE8] :00401EA6 889550FAFFFF mov byte[ebp+FFFFFA50], dl :00401EAC 80BD50FAFFFF3D cmp byte[ebp+FFFFFA50], 3D :00401EB3 7405 je 00401EBA :00401EB5 E9E1030000 jmp 0040229B --------- :00401EBA C785F4FEFFFF01000000 mov dword[ebp+FFFFFEF4], 00000001 :00401EC4 837D1400 cmp dword[ebp+14], 00000000 :00401EC8 0F8594020000 jne 00402162 :00401ECE 683CF04000 push 0040F03C (StringData)"US-ASCII" :00401ED3 8D85F8FAFFFF lea eax, dword[ebp+FFFFFAF8] :00401ED9 50 push eax :00401EDA FF15DCC44000 call dword[0040C4DC] ;;call MSVCRT._stricmp :00401EE0 83C408 add esp, 00000008 :00401EE3 85C0 test eax, eax :00401EE5 750E jne 00401EF5 :00401EE7 8B4D14 mov ecx, dword[ebp+14] :00401EEA C70102000000 mov dword[ecx], 00000002 :00401EF0 E96D020000 jmp 00402162 :00401EF5 68 h :00401EF6 48F04000 DWORD 0040F048 ;; H.@. :00401EFA 8D 95 F8 FA FF FF 52 FF 15 ......R.. :00401F03 DCC44000 DWORD 0040C4DC ;; ..@. :00401F07 83 C4 08 85 C0 75 0E 8B 45 14 C7 00 03 00 00 00 .....u..E....... :00401F17 E9 46 02 00 00 68 .F...h :00401F1D 54F04000 DWORD 0040F054 ;; T.@. :00401F21 8D 8D F8 FA FF FF 51 FF 15 ......Q.. :00401F2A DCC44000 DWORD 0040C4DC ;; ..@. :00401F2E 83 C4 08 85 C0 75 0E 8B 55 14 C7 02 04 00 00 00 .....u..U....... :00401F3E E9 1F 02 00 00 68 .....h :00401F44 60F04000 DWORD 0040F060 ;; `.@. :00401F48 8D 85 F8 FA FF FF 50 FF 15 ......P.. :00401F51 DCC44000 DWORD 0040C4DC ;; ..@. :00401F55 83 C4 08 85 C0 75 0E 8B 4D 14 C7 01 05 00 00 00 .....u..M....... :00401F65 E9 F8 01 00 00 68 .....h :00401F6B 6CF04000 DWORD 0040F06C ;; l.@. :00401F6F 8D 95 F8 FA FF FF 52 FF 15 ......R.. :00401F78 DCC44000 DWORD 0040C4DC ;; ..@. :00401F7C 83 C4 08 85 C0 75 0E 8B 45 14 C7 00 06 00 00 00 .....u..E....... :00401F8C E9 D1 01 00 00 68 .....h :00401F92 78F04000 DWORD 0040F078 ;; x.@. :00401F96 8D 8D F8 FA FF FF 51 FF 15 ......Q.. :00401F9F DCC44000 DWORD 0040C4DC ;; ..@. :00401FA3 83 C4 08 85 C0 75 0E 8B 55 14 C7 02 07 00 00 00 .....u..U....... :00401FB3 E9 AA 01 00 00 68 .....h :00401FB9 84F04000 DWORD 0040F084 ;; ..@. :00401FBD 8D 85 F8 FA FF FF 50 FF 15 ......P.. :00401FC6 DCC44000 DWORD 0040C4DC ;; ..@. :00401FCA 83 C4 08 85 C0 75 0E 8B 4D 14 C7 01 08 00 00 00 .....u..M....... :00401FDA E9 83 01 00 00 68 .....h :00401FE0 90F04000 DWORD 0040F090 ;; ..@. :00401FE4 8D 95 F8 FA FF FF 52 FF 15 ......R.. :00401FED DCC44000 DWORD 0040C4DC ;; ..@. :00401FF1 83 C4 08 85 C0 75 0E 8B 45 14 C7 00 09 00 00 00 .....u..E....... :00402001 E9 5C 01 00 00 68 .\...h :00402007 9CF04000 DWORD 0040F09C ;; ..@. :0040200B 8D 8D F8 FA FF FF 51 FF 15 ......Q.. :00402014 DCC44000 DWORD 0040C4DC ;; ..@. :00402018 83 C4 08 85 C0 75 0E 8B 55 14 C7 02 0A 00 00 00 .....u..U....... :00402028 E9 35 01 00 00 68 .5...h :0040202E A8F04000 DWORD 0040F0A8 ;; ..@. :00402032 8D 85 F8 FA FF FF 50 FF 15 ......P.. :0040203B DCC44000 DWORD 0040C4DC ;; ..@. :0040203F 83 C4 08 85 C0 75 0E 8B 4D 14 C7 01 0B 00 00 00 .....u..M....... :0040204F E9 0E 01 00 00 68 .....h :00402055 B4F04000 DWORD 0040F0B4 ;; ..@. :00402059 8D 95 F8 FA FF FF 52 FF 15 ......R.. :00402062 DCC44000 DWORD 0040C4DC ;; ..@. :00402066 83 C4 08 85 C0 75 0E 8B 45 14 C7 00 0C 00 00 00 .....u..E....... :00402076 E9 E7 00 00 00 68 .....h :0040207C C0F04000 DWORD 0040F0C0 ;; ..@. :00402080 8D 8D F8 FA FF FF 51 FF 15 ......Q.. :00402089 DCC44000 DWORD 0040C4DC ;; ..@. :0040208D 83 C4 08 85 C0 75 0E 8B 55 14 C7 02 0D 00 00 00 .....u..U....... :0040209D E9 C0 00 00 00 68 .....h :004020A3 CCF04000 DWORD 0040F0CC ;; ..@. :004020A7 8D 85 F8 FA FF FF 50 FF 15 ......P.. :004020B0 DCC44000 DWORD 0040C4DC ;; ..@. :004020B4 83 C4 08 85 C0 75 0E 8B 4D 14 C7 01 0E 00 00 00 .....u..M....... :004020C4 E9 99 00 00 00 68 .....h :004020CA D8F04000 DWORD 0040F0D8 ;; ..@. :004020CE 8D 95 F8 FA FF FF 52 FF 15 ......R.. :004020D7 DCC44000 DWORD 0040C4DC ;; ..@. :004020DB 83 C4 08 85 C0 75 0B 8B 45 14 C7 00 0F 00 00 00 .....u..E....... :004020EB EB 75 68 .uh :004020EE E4F04000 DWORD 0040F0E4 ;; ..@. :004020F2 8D 8D F8 FA FF FF 51 FF 15 ......Q.. :004020FB DCC44000 DWORD 0040C4DC ;; ..@. :004020FF 83 C4 08 85 C0 75 0B 8B 55 14 C7 02 10 00 00 00 .....u..U....... :0040210F EB 51 68 .Qh :00402112 F0F04000 DWORD 0040F0F0 ;; ..@. :00402116 8D 85 F8 FA FF FF 50 FF 15 ......P.. :0040211F DCC44000 DWORD 0040C4DC ;; ..@. :00402123 83 C4 08 85 C0 75 0B 8B 4D 14 C7 01 11 00 00 00 .....u..M....... :00402133 EB 2D 68 .-h :00402136 FCF04000 DWORD 0040F0FC ;; ..@. :0040213A 8D 95 F8 FA FF FF 52 FF 15 ......R.. :00402143 DCC44000 DWORD 0040C4DC ;; ..@. :00402147 83 C4 08 85 C0 75 0B 8B 45 14 C7 00 12 00 00 00 .....u..E....... :00402157 EB 09 8B 4D 14 C7 01 02 00 00 00 8B 95 EC FA FF ...M............ :00402167 FF 81 E2 FF 00 00 00 85 D2 75 50 8B 45 0C 3B 85 .........uP.E.;. :00402177 F4 FA FF FF 72 45 83 BD F4 FA FF FF 00 76 3C 8B ....rE.......v<. :00402187 8D F4 FA FF FF 51 8D 95 80 FA FF FF 52 8B 85 E4 .....Q......R... :00402197 FE FF FF 50 FF 15 ...P.. :0040219D 88C44000 DWORD 0040C488 ;; ..@. :004021A1 83 C4 0C 8B 8D E4 FE FF FF 03 8D F4 FA FF FF 89 ................ :004021B1 8D E4 FE FF FF 8B 55 0C 2B 95 F4 FA FF FF 89 55 ......U.+......U :004021C1 0C 8D 85 80 FA FF FF 89 85 E8 FE FF FF C7 85 F4 ................ :004021D1 FA FF FF 00 00 00 00 C6 85 EC FA FF FF 01 8B 4D ...............M :004021E1 18 8A 11 88 95 E8 FA FF FF 8A 85 E8 FA FF FF 88 ................ :004021F1 85 4C FA FF FF 80 BD 4C FA FF FF 42 74 55 80 BD .L.....L...BtU.. :00402201 4C FA FF FF 51 74 05 E9 8C 00 00 00 8B 4D 0C 51 L...Qt.......M.Q :00402211 8B 95 E4 FE FF FF 52 8B 85 F0 FA FF FF 50 8D 8D ......R......P.. :00402221 F8 FE FF FF 51 E8 85 02 00 00 83 C4 10 89 85 78 ....Q..........x :00402231 FA FF FF 8B 95 E4 FE FF FF 03 95 78 FA FF FF 89 ...........x.... :00402241 95 E4 FE FF FF 8B 45 0C 2B 85 78 FA FF FF 89 45 ......E.+.x....E :00402251 0C EB 45 8B 4D 0C 51 8B 95 E4 FE FF FF 52 8B 85 ..E.M.Q......R.. :00402261 F0 FA FF FF 50 8D 8D F8 FE FF FF 51 E8 3E 04 00 ....P......Q.>.. :00402271 00 83 C4 10 89 85 74 FA FF FF 8B 95 E4 FE FF FF ......t......... :00402281 03 95 74 FA FF FF 89 95 E4 FE FF FF 8B 45 0C 2B ..t..........E.+ :00402291 85 74 FA FF FF 89 45 0C EB 66 .t....E..f --------- :0040229B C785F4FEFFFF00000000 mov dword[ebp+FFFFFEF4], 00000000 :004022A5 8B8DECFEFFFF mov ecx, dword[ebp+FFFFFEEC] :004022AB 2B8DF0FEFFFF sub ecx, dword[ebp+FFFFFEF0] :004022B1 83C101 add ecx, 00000001 :004022B4 898DE0FEFFFF mov dword[ebp+FFFFFEE0], ecx :004022BA 8B550C mov edx, dword[ebp+0C] :004022BD 3B95E0FEFFFF cmp edx, dword[ebp+FFFFFEE0] :004022C3 723C jc 00402301 :004022C5 8B85E0FEFFFF mov eax, dword[ebp+FFFFFEE0] :004022CB 50 push eax :004022CC 8B8DF0FEFFFF mov ecx, dword[ebp+FFFFFEF0] :004022D2 51 push ecx :004022D3 8B95E4FEFFFF mov edx, dword[ebp+FFFFFEE4] :004022D9 52 push edx :004022DA FF1588C44000 call dword[0040C488] ;;call MSVCRT.strncpy :004022E0 83C40C add esp, 0000000C :004022E3 8B85E4FEFFFF mov eax, dword[ebp+FFFFFEE4] :004022E9 0385E0FEFFFF add eax, dword[ebp+FFFFFEE0] :004022EF 8985E4FEFFFF mov dword[ebp+FFFFFEE4], eax :004022F5 8B4D0C mov ecx, dword[ebp+0C] :004022F8 2B8DE0FEFFFF sub ecx, dword[ebp+FFFFFEE0] :004022FE 894D0C mov dword[ebp+0C], ecx --------- :00402301 8B95ECFEFFFF mov edx, dword[ebp+FFFFFEEC] :00402307 83C201 add edx, 00000001 :0040230A 8995ECFEFFFF mov dword[ebp+FFFFFEEC], edx :00402310 E916F4FFFF jmp 0040172B --------- :00402315 8B450C mov eax, dword[ebp+0C] :00402318 3B85F4FAFFFF cmp eax, dword[ebp+FFFFFAF4] :0040231E 7245 jc 00402365 :00402320 83BDF4FAFFFF00 cmp dword[ebp+FFFFFAF4], 00000000 :00402327 763C jbe 00402365 :00402329 8B8DF4FAFFFF mov ecx, dword[ebp+FFFFFAF4] :0040232F 51 push ecx :00402330 8D9580FAFFFF lea edx, dword[ebp+FFFFFA80] :00402336 52 push edx :00402337 8B85E4FEFFFF mov eax, dword[ebp+FFFFFEE4] :0040233D 50 push eax :0040233E FF1588C44000 call dword[0040C488] ;;call MSVCRT.strncpy :00402344 83C40C add esp, 0000000C :00402347 8B8DE4FEFFFF mov ecx, dword[ebp+FFFFFEE4] :0040234D 038DF4FAFFFF add ecx, dword[ebp+FFFFFAF4] :00402353 898DE4FEFFFF mov dword[ebp+FFFFFEE4], ecx :00402359 8B550C mov edx, dword[ebp+0C] :0040235C 2B95F4FAFFFF sub edx, dword[ebp+FFFFFAF4] :00402362 89550C mov dword[ebp+0C], edx --------- :00402365 8B85E4FEFFFF mov eax, dword[ebp+FFFFFEE4] :0040236B C60000 mov byte[eax], 00 :0040236E B001 mov al, 01 --------- :00402370 8BE5 mov esp, ebp :00402372 5D pop ebp :00402373 C3 ret :00402374 71174000 DWORD 00401771 ;; q.@. :00402378 37184000 DWORD 00401837 ;; 7.@. :0040237C 071A4000 DWORD 00401A07 ;; ..@. :00402380 ED1A4000 DWORD 00401AED ;; ..@. :00402384 ED1A4000 DWORD 00401AED ;; ..@. :00402388 531C4000 DWORD 00401C53 ;; S.@. :0040238C 301D4000 DWORD 00401D30 ;; 0.@. :00402390 BE1D4000 DWORD 00401DBE ;; ..@. :00402394 BE1D4000 DWORD 00401DBE ;; ..@. :00402398 A01E4000 DWORD 00401EA0 ;; ..@. :0040239C CE174000 DWORD 004017CE ;; ..@. :004023A0 B6174000 DWORD 004017B6 ;; ..@. :004023A4 06184000 DWORD 00401806 ;; ..@. ######### :004023A8 00 00 02 02 00 02 02 02 02 02 02 02 02 02 02 02 ................ :004023B8 02 02 02 02 02 02 02 00 02 02 02 02 02 02 02 02 ................ :004023C8 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 ................ :004023D8 02 02 02 02 01 ..... :004023DD 25194000 DWORD 00401925 ;; %.@. :004023E1 EA184000 DWORD 004018EA ;; ..@. :004023E5 CF184000 DWORD 004018CF ;; ..@. :004023E9 66194000 DWORD 00401966 ;; f.@. ######### :004023ED 00 00 03 03 00 03 03 03 03 03 03 03 03 03 03 03 ................ :004023FD 03 03 03 03 03 03 03 00 03 03 03 03 03 03 03 01 ................ :0040240D 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 ................ :0040241D 03 03 03 03 02 ..... :00402422 3F1B4000 DWORD 00401B3F ;; ?.@. :00402426 301B4000 DWORD 00401B30 ;; 0.@. :0040242A 101C4000 DWORD 00401C10 ;; ..@. ######### :0040242E 00 02 02 02 02 02 02 02 00 00 02 02 00 02 00 00 ................ :0040243E 02 02 02 02 02 02 02 02 02 02 00 00 00 00 00 01 ................ :0040244E 00 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 ................ :0040245E 02 02 02 02 02 02 02 02 02 02 02 00 02 00 .............. :0040246C B91C4000 DWORD 00401CB9 ;; ..@. :00402470 A71C4000 DWORD 00401CA7 ;; ..@. :00402474 921C4000 DWORD 00401C92 ;; ..@. :00402478 C51C4000 DWORD 00401CC5 ;; ..@. ######### :0040247C 00 03 03 01 03 03 03 03 03 03 03 03 03 03 03 03 ................ :0040248C 03 03 02 03 03 03 03 03 03 03 03 03 03 03 03 03 ................ :0040249C 03 03 03 01 03 03 03 03 03 03 03 03 03 03 03 03 ................ :004024AC 03 03 02 CC .... :004024B0 55 push ebp :004024B1 8BEC mov ebp, esp :004024B3 83EC14 sub esp, 00000014 :004024B6 C745F400000000 mov dword[ebp-0C], 00000000 :004024BD C745F000000000 mov dword[ebp-10], 00000000 :004024C4 C745FC00000000 mov dword[ebp-04], 00000000 --------- :004024CB 837D0C00 cmp dword[ebp+0C], 00000000 :004024CF 0F8679010000 jbe 0040264E :004024D5 8B45FC mov eax, dword[ebp-04] :004024D8 83C001 add eax, 00000001 :004024DB 394514 cmp dword[ebp+14], eax :004024DE 0F866A010000 jbe 0040264E :004024E4 8B4D08 mov ecx, dword[ebp+08] :004024E7 8A11 mov dl, byte[ecx] :004024E9 8855F8 mov byte[ebp-08], dl :004024EC 8B4508 mov eax, dword[ebp+08] :004024EF 83C001 add eax, 00000001 :004024F2 894508 mov dword[ebp+08], eax :004024F5 837DF000 cmp dword[ebp-10], 00000000 :004024F9 0F8E10010000 jle 0040260F :004024FF 8B4DF8 mov ecx, dword[ebp-08] :00402502 81E1FF000000 and ecx, 000000FF :00402508 894DEC mov dword[ebp-14], ecx :0040250B 8B55EC mov edx, dword[ebp-14] :0040250E 83EA30 sub edx, 00000030 :00402511 8955EC mov dword[ebp-14], edx :00402514 837DEC36 cmp dword[ebp-14], 00000036 :00402518 0F87B8000000 ja 004025D6 :0040251E 8B4DEC mov ecx, dword[ebp-14] :00402521 33C0 xor eax, eax :00402523 8A8174264000 mov al, byte[ecx+00402674] :00402529 FF248564264000 jmp dword[4*eax+00402664] --------- :00402530 837DF002 cmp dword[ebp-10], 00000002 :00402534 7517 jne 0040254D :00402536 8B55F8 mov edx, dword[ebp-08] :00402539 81E2FF000000 and edx, 000000FF :0040253F 83EA30 sub edx, 00000030 :00402542 C1E204 shl edx, 04 :00402545 8B45F4 mov eax, dword[ebp-0C] :00402548 03C2 add eax, edx :0040254A 8945F4 mov dword[ebp-0C], eax --------- :0040254D 837DF001 cmp dword[ebp-10], 00000001 :00402551 7513 jne 00402566 :00402553 8B4DF8 mov ecx, dword[ebp-08] :00402556 81E1FF000000 and ecx, 000000FF :0040255C 8B55F4 mov edx, dword[ebp-0C] :0040255F 8D440AD0 lea eax, dword[edx+ecx-30] :00402563 8945F4 mov dword[ebp-0C], eax --------- :00402566 EB75 jmp 004025DD --------- :00402568 837DF002 cmp dword[ebp-10], 00000002 :0040256C 7517 jne 00402585 :0040256E 8B4DF8 mov ecx, dword[ebp-08] :00402571 81E1FF000000 and ecx, 000000FF :00402577 83E937 sub ecx, 00000037 :0040257A C1E104 shl ecx, 04 :0040257D 8B55F4 mov edx, dword[ebp-0C] :00402580 03D1 add edx, ecx :00402582 8955F4 mov dword[ebp-0C], edx --------- :00402585 837DF001 cmp dword[ebp-10], 00000001 :00402589 7512 jne 0040259D :0040258B 8B45F8 mov eax, dword[ebp-08] :0040258E 25FF000000 and eax, 000000FF :00402593 8B4DF4 mov ecx, dword[ebp-0C] :00402596 8D5401C9 lea edx, dword[ecx+eax-37] :0040259A 8955F4 mov dword[ebp-0C], edx --------- :0040259D EB3E jmp 004025DD --------- :0040259F 837DF002 cmp dword[ebp-10], 00000002 :004025A3 7516 jne 004025BB :004025A5 8B45F8 mov eax, dword[ebp-08] :004025A8 25FF000000 and eax, 000000FF :004025AD 83E857 sub eax, 00000057 :004025B0 C1E004 shl eax, 04 :004025B3 8B4DF4 mov ecx, dword[ebp-0C] :004025B6 03C8 add ecx, eax :004025B8 894DF4 mov dword[ebp-0C], ecx --------- :004025BB 837DF001 cmp dword[ebp-10], 00000001 :004025BF 7513 jne 004025D4 :004025C1 8B55F8 mov edx, dword[ebp-08] :004025C4 81E2FF000000 and edx, 000000FF :004025CA 8B45F4 mov eax, dword[ebp-0C] :004025CD 8D4C10A9 lea ecx, dword[eax+edx-57] :004025D1 894DF4 mov dword[ebp-0C], ecx --------- :004025D4 EB07 jmp 004025DD --------- :004025D6 33C0 xor eax, eax :004025D8 E983000000 jmp 00402660 --------- :004025DD 8B55F0 mov edx, dword[ebp-10] :004025E0 83EA01 sub edx, 00000001 :004025E3 8955F0 mov dword[ebp-10], edx :004025E6 837DF000 cmp dword[ebp-10], 00000000 :004025EA 7521 jne 0040260D :004025EC 8B4510 mov eax, dword[ebp+10] :004025EF 8A4DF4 mov cl, byte[ebp-0C] :004025F2 8808 mov byte[eax], cl :004025F4 8B5510 mov edx, dword[ebp+10] :004025F7 83C201 add edx, 00000001 :004025FA 895510 mov dword[ebp+10], edx :004025FD 8B45FC mov eax, dword[ebp-04] :00402600 83C001 add eax, 00000001 :00402603 8945FC mov dword[ebp-04], eax :00402606 C745F400000000 mov dword[ebp-0C], 00000000 --------- :0040260D EB31 jmp 00402640 --------- :0040260F 8B4DF8 mov ecx, dword[ebp-08] :00402612 81E1FF000000 and ecx, 000000FF :00402618 83F93D cmp ecx, 0000003D :0040261B 7509 jne 00402626 :0040261D C745F002000000 mov dword[ebp-10], 00000002 :00402624 EB1A jmp 00402640 --------- :00402626 8B5510 mov edx, dword[ebp+10] :00402629 8A45F8 mov al, byte[ebp-08] :0040262C 8802 mov byte[edx], al :0040262E 8B4D10 mov ecx, dword[ebp+10] :00402631 83C101 add ecx, 00000001 :00402634 894D10 mov dword[ebp+10], ecx :00402637 8B55FC mov edx, dword[ebp-04] :0040263A 83C201 add edx, 00000001 :0040263D 8955FC mov dword[ebp-04], edx --------- :00402640 8B450C mov eax, dword[ebp+0C] :00402643 83E801 sub eax, 00000001 :00402646 89450C mov dword[ebp+0C], eax :00402649 E97DFEFFFF jmp 004024CB --------- :0040264E 8B4D10 mov ecx, dword[ebp+10] :00402651 C60100 mov byte[ecx], 00 :00402654 8B5510 mov edx, dword[ebp+10] :00402657 83C201 add edx, 00000001 :0040265A 895510 mov dword[ebp+10], edx :0040265D 8B45FC mov eax, dword[ebp-04] --------- :00402660 8BE5 mov esp, ebp :00402662 5D pop ebp :00402663 C3 ret :00402664 30254000 DWORD 00402530 ;; 0%@. :00402668 68254000 DWORD 00402568 ;; h%@. :0040266C 9F254000 DWORD 0040259F ;; .%@. :00402670 D6254000 DWORD 004025D6 ;; .%@. ######### :00402674 00 00 00 00 00 00 00 00 00 00 03 03 03 03 03 03 ................ :00402684 03 01 01 01 01 01 01 03 03 03 03 03 03 03 03 03 ................ :00402694 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 ................ :004026A4 03 02 02 02 02 02 02 CC CC CC CC CC ............ :004026B0 55 push ebp :004026B1 8BEC mov ebp, esp :004026B3 83EC1C sub esp, 0000001C :004026B6 C745FC00000000 mov dword[ebp-04], 00000000 :004026BD C745F000000000 mov dword[ebp-10], 00000000 --------- :004026C4 837D0C00 cmp dword[ebp+0C], 00000000 :004026C8 0F86E6000000 jbe 004027B4 :004026CE 8B4508 mov eax, dword[ebp+08] :004026D1 33C9 xor ecx, ecx :004026D3 8A08 mov cl, byte[eax] :004026D5 894DF8 mov dword[ebp-08], ecx :004026D8 8B5508 mov edx, dword[ebp+08] :004026DB 83C201 add edx, 00000001 :004026DE 895508 mov dword[ebp+08], edx :004026E1 8B45F8 mov eax, dword[ebp-08] :004026E4 50 push eax :004026E5 E8A6020000 call 00402990 :004026EA 83C404 add esp, 00000004 :004026ED 25FF000000 and eax, 000000FF :004026F2 83F801 cmp eax, 00000001 :004026F5 0F858F000000 jne 0040278A :004026FB 8B4DF0 mov ecx, dword[ebp-10] :004026FE 8A55F8 mov dl, byte[ebp-08] :00402701 88540DE4 mov byte[ebp+ecx-1C], dl :00402705 8B45F0 mov eax, dword[ebp-10] :00402708 83C001 add eax, 00000001 :0040270B 8945F0 mov dword[ebp-10], eax :0040270E 837DF004 cmp dword[ebp-10], 00000004 :00402712 7574 jne 00402788 :00402714 C745F000000000 mov dword[ebp-10], 00000000 :0040271B 8D4DEC lea ecx, dword[ebp-14] :0040271E 51 push ecx :0040271F 8D55F4 lea edx, dword[ebp-0C] :00402722 52 push edx :00402723 8D45E4 lea eax, dword[ebp-1C] :00402726 50 push eax :00402727 E8A4000000 call 004027D0 :0040272C 83C40C add esp, 0000000C :0040272F 25FF000000 and eax, 000000FF :00402734 85C0 test eax, eax :00402736 7507 jne 0040273F :00402738 33C0 xor eax, eax :0040273A E987000000 jmp 004027C6 --------- :0040273F C745E800000000 mov dword[ebp-18], 00000000 :00402746 EB09 jmp 00402751 --------- :00402748 8B4DE8 mov ecx, dword[ebp-18] :0040274B 83C101 add ecx, 00000001 :0040274E 894DE8 mov dword[ebp-18], ecx --------- :00402751 8B55E8 mov edx, dword[ebp-18] :00402754 3B55EC cmp edx, dword[ebp-14] :00402757 7D2F jge 00402788 :00402759 8B4510 mov eax, dword[ebp+10] :0040275C 8B4DE8 mov ecx, dword[ebp-18] :0040275F 8A540DF4 mov dl, byte[ebp+ecx-0C] :00402763 8810 mov byte[eax], dl :00402765 8B4510 mov eax, dword[ebp+10] :00402768 83C001 add eax, 00000001 :0040276B 894510 mov dword[ebp+10], eax :0040276E 8B4DFC mov ecx, dword[ebp-04] :00402771 83C101 add ecx, 00000001 :00402774 894DFC mov dword[ebp-04], ecx :00402777 8B55FC mov edx, dword[ebp-04] :0040277A 83C201 add edx, 00000001 :0040277D 395514 cmp dword[ebp+14], edx :00402780 7304 jae 00402786 :00402782 33C0 xor eax, eax :00402784 EB40 jmp 004027C6 --------- :00402786 EBC0 jmp 00402748 --------- :00402788 EB1C jmp 004027A6 --------- :0040278A 837DF820 cmp dword[ebp-08], 00000020 :0040278E 7416 je 004027A6 :00402790 837DF809 cmp dword[ebp-08], 00000009 :00402794 7410 je 004027A6 :00402796 837DF80D cmp dword[ebp-08], 0000000D :0040279A 740A je 004027A6 :0040279C 837DF80A cmp dword[ebp-08], 0000000A :004027A0 7404 je 004027A6 :004027A2 33C0 xor eax, eax :004027A4 EB20 jmp 004027C6 --------- :004027A6 8B450C mov eax, dword[ebp+0C] :004027A9 83E801 sub eax, 00000001 :004027AC 89450C mov dword[ebp+0C], eax :004027AF E910FFFFFF jmp 004026C4 --------- :004027B4 8B4D10 mov ecx, dword[ebp+10] :004027B7 C60100 mov byte[ecx], 00 :004027BA 8B5510 mov edx, dword[ebp+10] :004027BD 83C201 add edx, 00000001 :004027C0 895510 mov dword[ebp+10], edx :004027C3 8B45FC mov eax, dword[ebp-04] --------- :004027C6 8BE5 mov esp, ebp :004027C8 5D pop ebp :004027C9 C3 ret :004027CA CC CC CC CC CC CC ...... ========= :004027D0 55 push ebp :004027D1 8BEC mov ebp, esp :004027D3 8B4510 mov eax, dword[ebp+10] :004027D6 50 push eax :004027D7 8B4D08 mov ecx, dword[ebp+08] :004027DA 51 push ecx :004027DB E870000000 call 00402850 :004027E0 83C408 add esp, 00000008 :004027E3 25FF000000 and eax, 000000FF :004027E8 85C0 test eax, eax :004027EA 7504 jne 004027F0 :004027EC 32C0 xor al, al :004027EE EB57 jmp 00402847 --------- :004027F0 8B5508 mov edx, dword[ebp+08] :004027F3 33C0 xor eax, eax :004027F5 8A02 mov al, byte[edx] :004027F7 C1E002 shl eax, 02 :004027FA 8B4D08 mov ecx, dword[ebp+08] :004027FD 33D2 xor edx, edx :004027FF 8A5101 mov dl, byte[ecx+01] :00402802 C1FA04 sar edx, 04 :00402805 0BC2 or eax, edx :00402807 8B4D0C mov ecx, dword[ebp+0C] :0040280A 8801 mov byte[ecx], al :0040280C 8B5508 mov edx, dword[ebp+08] :0040280F 33C0 xor eax, eax :00402811 8A4201 mov al, byte[edx+01] :00402814 C1E004 shl eax, 04 :00402817 8B4D08 mov ecx, dword[ebp+08] :0040281A 33D2 xor edx, edx :0040281C 8A5102 mov dl, byte[ecx+02] :0040281F C1FA02 sar edx, 02 :00402822 0BC2 or eax, edx :00402824 8B4D0C mov ecx, dword[ebp+0C] :00402827 884101 mov byte[ecx+01], al :0040282A 8B5508 mov edx, dword[ebp+08] :0040282D 33C0 xor eax, eax :0040282F 8A4202 mov al, byte[edx+02] :00402832 C1E006 shl eax, 06 :00402835 8B4D08 mov ecx, dword[ebp+08] :00402838 33D2 xor edx, edx :0040283A 8A5103 mov dl, byte[ecx+03] :0040283D 0BC2 or eax, edx :0040283F 8B4D0C mov ecx, dword[ebp+0C] :00402842 884102 mov byte[ecx+02], al :00402845 B001 mov al, 01 --------- :00402847 5D pop ebp :00402848 C3 ret :00402849 CC CC CC CC CC CC CC ....... ========= :00402850 55 push ebp :00402851 8BEC mov ebp, esp :00402853 51 push ecx :00402854 8B450C mov eax, dword[ebp+0C] :00402857 C70003000000 mov dword[eax], 00000003 :0040285D C745FC00000000 mov dword[ebp-04], 00000000 :00402864 EB09 jmp 0040286F --------- :00402866 8B4DFC mov ecx, dword[ebp-04] :00402869 83C101 add ecx, 00000001 :0040286C 894DFC mov dword[ebp-04], ecx --------- :0040286F 837DFC04 cmp dword[ebp-04], 00000004 :00402873 0F8DFC000000 jge 00402975 :00402879 8B5508 mov edx, dword[ebp+08] :0040287C 0355FC add edx, dword[ebp-04] :0040287F 33C0 xor eax, eax :00402881 8A02 mov al, byte[edx] :00402883 83F841 cmp eax, 00000041 :00402886 7C27 jl 004028AF :00402888 8B4D08 mov ecx, dword[ebp+08] :0040288B 034DFC add ecx, dword[ebp-04] :0040288E 33D2 xor edx, edx :00402890 8A11 mov dl, byte[ecx] :00402892 83FA5A cmp edx, 0000005A :00402895 7F18 jg 004028AF :00402897 8B4508 mov eax, dword[ebp+08] :0040289A 0345FC add eax, dword[ebp-04] :0040289D 8A08 mov cl, byte[eax] :0040289F 80E941 sub cl, 41 :004028A2 8B5508 mov edx, dword[ebp+08] :004028A5 0355FC add edx, dword[ebp-04] :004028A8 880A mov byte[edx], cl :004028AA E9C1000000 jmp 00402970 --------- :004028AF 8B4508 mov eax, dword[ebp+08] :004028B2 0345FC add eax, dword[ebp-04] :004028B5 33C9 xor ecx, ecx :004028B7 8A08 mov cl, byte[eax] :004028B9 83F961 cmp ecx, 00000061 :004028BC 7C27 jl 004028E5 :004028BE 8B5508 mov edx, dword[ebp+08] :004028C1 0355FC add edx, dword[ebp-04] :004028C4 33C0 xor eax, eax :004028C6 8A02 mov al, byte[edx] :004028C8 83F87A cmp eax, 0000007A :004028CB 7F18 jg 004028E5 :004028CD 8B4D08 mov ecx, dword[ebp+08] :004028D0 034DFC add ecx, dword[ebp-04] :004028D3 8A11 mov dl, byte[ecx] :004028D5 80EA47 sub dl, 47 :004028D8 8B4508 mov eax, dword[ebp+08] :004028DB 0345FC add eax, dword[ebp-04] :004028DE 8810 mov byte[eax], dl :004028E0 E98B000000 jmp 00402970 :004028E5 8B 4D 08 03 4D FC 33 D2 8A 11 83 FA 30 7C 23 8B .M..M.3.....0|#. :004028F5 45 08 03 45 FC 33 C9 8A 08 83 F9 39 7F 14 8B 55 E..E.3.....9...U :00402905 08 03 55 FC 8A 02 2C FC 8B 4D 08 03 4D FC 88 01 ..U...,..M..M... :00402915 EB 59 8B 55 08 03 55 FC 33 C0 8A 02 83 F8 2B 75 .Y.U..U.3.....+u :00402925 0B 8B 4D 08 03 4D FC C6 01 3E EB 3F 8B 55 08 03 ..M..M...>.?.U.. :00402935 55 FC 33 C0 8A 02 83 F8 2F 75 0B 8B 4D 08 03 4D U.3...../u..M..M :00402945 FC C6 01 3F EB 25 8B 55 08 03 55 FC 33 C0 8A 02 ...?.%.U..U.3... :00402955 83 F8 3D 75 16 8B 4D 08 03 4D FC C6 01 00 8B 55 ..=u..M..M.....U :00402965 0C 8B 02 83 E8 01 8B 4D 0C 89 01 .......M... --------- :00402970 E9F1FEFFFF jmp 00402866 --------- :00402975 8B550C mov edx, dword[ebp+0C] :00402978 833A00 cmp dword[edx], 00000000 :0040297B 7F04 jg 00402981 :0040297D 32C0 xor al, al :0040297F EB02 jmp 00402983 --------- :00402981 B001 mov al, 01 --------- :00402983 8BE5 mov esp, ebp :00402985 5D pop ebp :00402986 C3 ret :00402987 CC CC CC CC CC CC CC CC CC ......... ========= :00402990 55 push ebp :00402991 8BEC mov ebp, esp :00402993 837D0841 cmp dword[ebp+08], 00000041 :00402997 7C0A jl 004029A3 :00402999 837D085A cmp dword[ebp+08], 0000005A :0040299D 7F04 jg 004029A3 :0040299F B001 mov al, 01 :004029A1 EB38 jmp 004029DB --------- :004029A3 837D0861 cmp dword[ebp+08], 00000061 :004029A7 7C0A jl 004029B3 :004029A9 837D087A cmp dword[ebp+08], 0000007A :004029AD 7F04 jg 004029B3 :004029AF B001 mov al, 01 :004029B1 EB28 jmp 004029DB --------- :004029B3 837D0830 cmp dword[ebp+08], 00000030 :004029B7 7C0A jl 004029C3 :004029B9 837D0839 cmp dword[ebp+08], 00000039 :004029BD 7F04 jg 004029C3 :004029BF B001 mov al, 01 :004029C1 EB18 jmp 004029DB --------- :004029C3 837D082B cmp dword[ebp+08], 0000002B :004029C7 740C je 004029D5 :004029C9 837D082F cmp dword[ebp+08], 0000002F :004029CD 7406 je 004029D5 :004029CF 837D083D cmp dword[ebp+08], 0000003D :004029D3 7504 jne 004029D9 --------- :004029D5 B001 mov al, 01 :004029D7 EB02 jmp 004029DB --------- :004029D9 32C0 xor al, al --------- :004029DB 5D pop ebp :004029DC C3 ret :004029DD CC CC CC ... ========= :004029E0 55 push ebp :004029E1 8BEC mov ebp, esp :004029E3 6AFF push -00000001 :004029E5 68D9B14000 push 0040B1D9 :004029EA 64A100000000 mov eax, dword fs:[00000000] :004029F0 50 push eax :004029F1 64892500000000 mov dword fs:[00000000], esp :004029F8 51 push ecx :004029F9 894DF0 mov dword[ebp-10], ecx :004029FC 8B4DF0 mov ecx, dword[ebp-10] :004029FF E878800000 call 0040AA7C :00402A04 C745FC00000000 mov dword[ebp-04], 00000000 :00402A0B 8B45F0 mov eax, dword[ebp-10] :00402A0E C7401400000000 mov dword[eax+14], 00000000 :00402A15 8B4DF0 mov ecx, dword[ebp-10] :00402A18 83C118 add ecx, 00000018 :00402A1B E856800000 call 0040AA76 :00402A20 8B4DF0 mov ecx, dword[ebp-10] :00402A23 C7411C6E000000 mov dword[ecx+1C], 0000006E :00402A2A 8B55F0 mov edx, dword[ebp-10] :00402A2D C7026CC54000 mov dword[edx], 0040C56C :00402A33 C745FCFFFFFFFF mov dword[ebp-04], FFFFFFFF :00402A3A 8B45F0 mov eax, dword[ebp-10] :00402A3D 8B4DF4 mov ecx, dword[ebp-0C] :00402A40 64890D00000000 mov dword fs:[00000000], ecx :00402A47 8BE5 mov esp, ebp :00402A49 5D pop ebp :00402A4A C3 ret :00402A4B CC CC CC CC CC ..... :00402A50 55 push ebp :00402A51 8BEC mov ebp, esp :00402A53 51 push ecx :00402A54 894DFC mov dword[ebp-04], ecx :00402A57 8B4DFC mov ecx, dword[ebp-04] :00402A5A E821000000 call 00402A80 :00402A5F 8B4508 mov eax, dword[ebp+08] :00402A62 83E001 and eax, 00000001 :00402A65 85C0 test eax, eax :00402A67 7409 je 00402A72 :00402A69 8B4DFC mov ecx, dword[ebp-04] :00402A6C 51 push ecx :00402A6D E8AE010000 call 00402C20 --------- :00402A72 8B45FC mov eax, dword[ebp-04] :00402A75 8BE5 mov esp, ebp :00402A77 5D pop ebp :00402A78 C20400 ret 0004 :00402A7B CC CC CC CC CC ..... ========= :00402A80 55 push ebp :00402A81 8BEC mov ebp, esp :00402A83 6AFF push -00000001 :00402A85 68F9B14000 push 0040B1F9 :00402A8A 64A100000000 mov eax, dword fs:[00000000] :00402A90 50 push eax :00402A91 64892500000000 mov dword fs:[00000000], esp :00402A98 51 push ecx :00402A99 894DF0 mov dword[ebp-10], ecx :00402A9C 8B45F0 mov eax, dword[ebp-10] :00402A9F C7006CC54000 mov dword[eax], 0040C56C :00402AA5 C745FC00000000 mov dword[ebp-04], 00000000 :00402AAC 8B4DF0 mov ecx, dword[ebp-10] :00402AAF 83C118 add ecx, 00000018 :00402AB2 E8CB7F0000 call 0040AA82 :00402AB7 C745FCFFFFFFFF mov dword[ebp-04], FFFFFFFF :00402ABE 8B4DF0 mov ecx, dword[ebp-10] :00402AC1 E8AA7F0000 call 0040AA70 :00402AC6 8B4DF4 mov ecx, dword[ebp-0C] :00402AC9 64890D00000000 mov dword fs:[00000000], ecx :00402AD0 8BE5 mov esp, ebp :00402AD2 5D pop ebp :00402AD3 C3 ret :00402AD4 CC CC CC CC CC CC CC CC CC CC CC CC ............ :00402AE0 55 push ebp :00402AE1 8BEC mov ebp, esp :00402AE3 A1B4C34000 mov eax, dword[0040C3B4] :00402AE8 5D pop ebp :00402AE9 C3 ret :00402AEA CC CC CC CC CC CC 55 8B EC 51 89 4D FC B8 ......U..Q.M.. :00402AF8 50C54000 DWORD 0040C550 ;; P.@. :00402AFC 8B E5 5D C3 55 8B EC 6A FF 68 ..].U..j.h :00402B06 19B24000 DWORD 0040B219 ;; ..@. :00402B0A 64 A1 00 00 00 00 50 64 89 25 00 00 00 00 83 EC d.....Pd.%...... :00402B1A 1C 89 4D D8 8D 4D DC E8 56 7F 00 00 C7 45 FC 00 ..M..M..V....E.. :00402B2A 00 00 00 83 7D 08 00 74 14 C7 45 FC ....}..t..E. :00402B36 FFFFFFFF DWORD FFFFFFFF ;; .... :00402B3A 8D 4D DC E8 2E 7F 00 00 E9 86 00 00 00 6A 00 6A .M...........j.j :00402B4A 00 8D 45 DC 50 8B 4D D8 8B 11 8B 4D D8 FF 52 14 ..E.P.M....M..R. :00402B5A 85 C0 75 11 C7 45 FC ..u..E. :00402B61 FFFFFFFF DWORD FFFFFFFF ;; .... :00402B65 8D 4D DC E8 03 7F 00 00 EB 5E 6A 00 6A 04 6A 00 .M.......^j.j.j. :00402B75 6A 00 68 j.h :00402B78 E8C74000 DWORD 0040C7E8 ;; ..@. :00402B7C E8 0D 7F 00 00 89 45 F0 8D 4D DC E8 FC 7E 00 00 ......E..M...~.. :00402B8C 8B 4D F0 89 41 6C 8B 55 D8 83 7A 14 00 74 1B 8B .M..Al.U..z..t.. :00402B9C 45 D8 8B 48 1C 51 8B 4D D8 83 C1 18 E8 B3 00 00 E..H.Q.M........ :00402BAC 00 50 8B 4D F0 E8 EA 4C 00 00 8B 4D F0 E8 B2 00 .P.M...L...M.... :00402BBC 00 00 C7 45 FC ...E. :00402BC1 FFFFFFFF DWORD FFFFFFFF ;; .... :00402BC5 8D 4D DC E8 A3 7E 00 00 8B 4D F4 64 89 0D 00 00 .M...~...M.d.... :00402BD5 00 00 8B E5 5D C2 04 00 CC CC CC ....]...... :00402BE0 55 push ebp :00402BE1 8BEC mov ebp, esp :00402BE3 51 push ecx :00402BE4 894DFC mov dword[ebp-04], ecx :00402BE7 8B4508 mov eax, dword[ebp+08] :00402BEA 50 push eax :00402BEB 8B4DFC mov ecx, dword[ebp-04] :00402BEE 83C118 add ecx, 00000018 :00402BF1 E89E7E0000 call 0040AA94 :00402BF6 8B4DFC mov ecx, dword[ebp-04] :00402BF9 8B550C mov edx, dword[ebp+0C] :00402BFC 89511C mov dword[ecx+1C], edx :00402BFF 8B45FC mov eax, dword[ebp-04] :00402C02 C7401401000000 mov dword[eax+14], 00000001 :00402C09 8BE5 mov esp, ebp :00402C0B 5D pop ebp :00402C0C C20800 ret 0008 :00402C0F CC . ========= :00402C10 55 push ebp :00402C11 8BEC mov ebp, esp :00402C13 51 push ecx :00402C14 894DFC mov dword[ebp-04], ecx :00402C17 8BE5 mov esp, ebp :00402C19 5D pop ebp :00402C1A C20400 ret 0004 :00402C1D CC CC CC ... ========= :00402C20 55 push ebp :00402C21 8BEC mov ebp, esp :00402C23 8B4508 mov eax, dword[ebp+08] :00402C26 50 push eax :00402C27 E86E7E0000 call 0040AA9A :00402C2C 83C404 add esp, 00000004 :00402C2F 5D pop ebp :00402C30 C20400 ret 0004 :00402C33 CC CC CC CC CC CC CC CC CC CC CC CC CC ............. :00402C40 55 push ebp :00402C41 8BEC mov ebp, esp :00402C43 51 push ecx :00402C44 894DFC mov dword[ebp-04], ecx :00402C47 8BE5 mov esp, ebp :00402C49 5D pop ebp :00402C4A C3 ret :00402C4B CC CC CC CC CC 55 8B EC 51 89 4D FC 8B E5 5D C2 .....U..Q.M...]. :00402C5B 04 00 CC CC CC ..... ========= :00402C60 55 push ebp :00402C61 8BEC mov ebp, esp :00402C63 51 push ecx :00402C64 894DFC mov dword[ebp-04], ecx :00402C67 8B45FC mov eax, dword[ebp-04] :00402C6A 8B00 mov eax, dword[eax] :00402C6C 8BE5 mov esp, ebp :00402C6E 5D pop ebp :00402C6F C3 ret ========= :00402C70 55 push ebp :00402C71 8BEC mov ebp, esp :00402C73 51 push ecx :00402C74 894DFC mov dword[ebp-04], ecx :00402C77 8B45FC mov eax, dword[ebp-04] :00402C7A 8B482C mov ecx, dword[eax+2C] :00402C7D 51 push ecx :00402C7E FF1570C04000 call dword[0040C070] ;;call KERNEL32.ResumeThread :00402C84 8BE5 mov esp, ebp :00402C86 5D pop ebp :00402C87 C3 ret :00402C88 CC CC CC CC CC CC CC CC ........ :00402C90 55 push ebp :00402C91 8BEC mov ebp, esp :00402C93 A19CC34000 mov eax, dword[0040C39C] :00402C98 5D pop ebp :00402C99 C3 ret :00402C9A CC CC CC CC CC CC 55 8B EC 51 89 4D FC B8 ......U..Q.M.. :00402CA8 00C64000 DWORD 0040C600 ;; ..@. :00402CAC 8B E5 5D C3 ..]. ========= :00402CB0 55 push ebp :00402CB1 8BEC mov ebp, esp :00402CB3 6AFF push -00000001 :00402CB5 6866B24000 push 0040B266 :00402CBA 64A100000000 mov eax, dword fs:[00000000] :00402CC0 50 push eax :00402CC1 64892500000000 mov dword fs:[00000000], esp :00402CC8 51 push ecx :00402CC9 894DF0 mov dword[ebp-10], ecx :00402CCC 6A00 push 00000000 :00402CCE 8B4DF0 mov ecx, dword[ebp-10] :00402CD1 E8AE7E0000 call 0040AB84 :00402CD6 C745FC00000000 mov dword[ebp-04], 00000000 :00402CDD 8B4DF0 mov ecx, dword[ebp-10] :00402CE0 81C1C4000000 add ecx, 000000C4 :00402CE6 E8B5680000 call 004095A0 :00402CEB C645FC01 mov byte[ebp-04], 01 :00402CEF 8B45F0 mov eax, dword[ebp-10] :00402CF2 C780A401000000000000 mov dword[eax+000001A4], 00000000 :00402CFC 8B4DF0 mov ecx, dword[ebp-10] :00402CFF 81C1A8010000 add ecx, 000001A8 :00402D05 E8747E0000 call 0040AB7E :00402D0A C645FC02 mov byte[ebp-04], 02 :00402D0E 8B4DF0 mov ecx, dword[ebp-10] :00402D11 81C1BC010000 add ecx, 000001BC :00402D17 E8E4E2FFFF call 00401000 :00402D1C C645FC03 mov byte[ebp-04], 03 :00402D20 8B4DF0 mov ecx, dword[ebp-10] :00402D23 81C1D0010000 add ecx, 000001D0 :00402D29 E8020A0000 call 00403730 :00402D2E 8B4DF0 mov ecx, dword[ebp-10] :00402D31 C781F001000000000000 mov dword[ecx+000001F0], 00000000 :00402D3B 8B55F0 mov edx, dword[ebp-10] :00402D3E C7023CC64000 mov dword[edx], 0040C63C :00402D44 C745FCFFFFFFFF mov dword[ebp-04], FFFFFFFF :00402D4B 8B45F0 mov eax, dword[ebp-10] :00402D4E 8B4DF4 mov ecx, dword[ebp-0C] :00402D51 64890D00000000 mov dword fs:[00000000], ecx :00402D58 8BE5 mov esp, ebp :00402D5A 5D pop ebp :00402D5B C3 ret :00402D5C CC CC CC CC .... :00402D60 55 push ebp :00402D61 8BEC mov ebp, esp :00402D63 51 push ecx :00402D64 894DFC mov dword[ebp-04], ecx :00402D67 8B4DFC mov ecx, dword[ebp-04] :00402D6A E821000000 call 00402D90 :00402D6F 8B4508 mov eax, dword[ebp+08] :00402D72 83E001 and eax, 00000001 :00402D75 85C0 test eax, eax :00402D77 7409 je 00402D82 :00402D79 8B4DFC mov ecx, dword[ebp-04] :00402D7C 51 push ecx :00402D7D E89EFEFFFF call 00402C20 --------- :00402D82 8B45FC mov eax, dword[ebp-04] :00402D85 8BE5 mov esp, ebp :00402D87 5D pop ebp :00402D88 C20400 ret 0004 :00402D8B CC CC CC CC CC ..... ========= :00402D90 55 push ebp :00402D91 8BEC mov ebp, esp :00402D93 6AFF push -00000001 :00402D95 68A6B24000 push 0040B2A6 :00402D9A 64A100000000 mov eax, dword fs:[00000000] :00402DA0 50 push eax :00402DA1 64892500000000 mov dword fs:[00000000], esp :00402DA8 51 push ecx :00402DA9 894DF0 mov dword[ebp-10], ecx :00402DAC C745FC03000000 mov dword[ebp-04], 00000003 :00402DB3 8B4DF0 mov ecx, dword[ebp-10] :00402DB6 81C1D0010000 add ecx, 000001D0 :00402DBC E8EF090000 call 004037B0 :00402DC1 C645FC02 mov byte[ebp-04], 02 :00402DC5 8B4DF0 mov ecx, dword[ebp-10] :00402DC8 81C1BC010000 add ecx, 000001BC :00402DCE E88DE2FFFF call 00401060 :00402DD3 C645FC01 mov byte[ebp-04], 01 :00402DD7 8B4DF0 mov ecx, dword[ebp-10] :00402DDA 81C1A8010000 add ecx, 000001A8 :00402DE0 E88D7D0000 call 0040AB72 :00402DE5 C645FC00 mov byte[ebp-04], 00 :00402DE9 8B4DF0 mov ecx, dword[ebp-10] :00402DEC 81C1C4000000 add ecx, 000000C4 :00402DF2 E839680000 call 00409630 :00402DF7 C745FCFFFFFFFF mov dword[ebp-04], FFFFFFFF :00402DFE 8B4DF0 mov ecx, dword[ebp-10] :00402E01 E8727D0000 call 0040AB78 :00402E06 8B4DF4 mov ecx, dword[ebp-0C] :00402E09 64890D00000000 mov dword fs:[00000000], ecx :00402E10 8BE5 mov esp, ebp :00402E12 5D pop ebp :00402E13 C3 ret :00402E14 CC CC CC CC CC CC CC CC CC CC CC CC ............ :00402E20 55 push ebp :00402E21 8BEC mov ebp, esp :00402E23 E808000000 call 00402E30 :00402E28 E813000000 call 00402E40 :00402E2D 5D pop ebp :00402E2E C3 ret :00402E2F CC . ========= :00402E30 55 push ebp :00402E31 8BEC mov ebp, esp :00402E33 B9900B4100 mov ecx, 00410B90 :00402E38 E873FEFFFF call 00402CB0 :00402E3D 5D pop ebp :00402E3E C3 ret :00402E3F CC . ========= :00402E40 55 push ebp :00402E41 8BEC mov ebp, esp :00402E43 68602E4000 push 00402E60 :00402E48 E8CF800000 call 0040AF1C :00402E4D 83C404 add esp, 00000004 :00402E50 5D pop ebp :00402E51 C3 ret :00402E52 CC CC CC CC CC CC CC CC CC CC CC CC CC CC .............. --------- :00402E60 55 push ebp :00402E61 8BEC mov ebp, esp :00402E63 B9900B4100 mov ecx, 00410B90 :00402E68 E823FFFFFF call 00402D90 :00402E6D 5D pop ebp :00402E6E C3 ret :00402E6F CC 55 8B EC 83 EC 1C 89 4D E4 C7 45 F8 00 00 00 .U......M..E.... :00402E7F 00 68 .h :00402E81 ECF14000 DWORD 0040F1EC ;; ..@. :00402E85 6A 01 6A 00 FF 15 j.j... :00402E8B 7CC04000 DWORD 0040C07C ;; |.@. :00402E8F 8B 4D E4 89 81 F0 01 00 00 8B 55 E4 83 BA F0 01 .M........U..... :00402E9F 00 00 00 74 14 FF 15 ...t... :00402EA6 4CC04000 DWORD 0040C04C ;; L.@. :00402EAA 3D B7 00 00 00 75 07 33 C0 E9 DD 00 00 00 E8 83 =....u.3........ :00402EBA 05 00 00 85 C0 75 07 33 C0 E9 CD 00 00 00 FF 15 .....u.3........ :00402ECA 3CC04000 DWORD 0040C03C ;; <.@. :00402ECE 89 45 FC 83 7D FC 00 74 09 8B 45 FC 50 E8 B0 07 .E..}..t..E.P... :00402EDE 00 00 6A 00 E8 B5 7C 00 00 85 C0 75 15 6A FF 6A ..j...|....u.j.j :00402EEE 10 68 CB 5D 00 00 E8 9D 7C 00 00 33 C0 E9 95 00 .h.]....|..3.... :00402EFE 00 00 8B 4D E4 E8 88 7C 00 00 E8 03 7B 00 00 6A ...M...|....{..j :00402F0E 00 6A 00 6A 00 E8 D8 07 00 00 .j.j...... :00402F18 50 6A 64 6A 64 6A 00 ;;n "Pjdjdj" :00402F1F 6A00 push 00000000 :00402F21 8D4DE8 lea ecx, dword[ebp-18] :00402F24 E887070000 call 004036B0 :00402F29 50 push eax :00402F2A 6A00 push 00000000 :00402F2C 6800F24000 push 0040F200 (StringData)"NAV Email Tray" :00402F31 6A00 push 00000000 :00402F33 8B4DE4 mov ecx, dword[ebp-1C] :00402F36 81C1C4000000 add ecx, 000000C4 :00402F3C E8497C0000 call 0040AB8A :00402F41 8B4DE4 mov ecx, dword[ebp-1C] :00402F44 81C1C4000000 add ecx, 000000C4 :00402F4A E851000000 call 00402FA0 :00402F4F 85C0 test eax, eax :00402F51 7504 jne 00402F57 :00402F53 33C0 xor eax, eax :00402F55 EB3E jmp 00402F95 --------- :00402F57 8B4DE4 mov ecx, dword[ebp-1C] :00402F5A 81C1C4000000 add ecx, 000000C4 :00402F60 8B55E4 mov edx, dword[ebp-1C] :00402F63 894A20 mov dword[edx+20], ecx :00402F66 6810F24000 push 0040F210 (StringData)"NAV_EMAILSCANNERCONFIGCHANGE" :00402F6B 6A00 push 00000000 :00402F6D 6A02 push 00000002 :00402F6F FF1578C04000 call dword[0040C078] ;;call KERNEL32.OpenEventA :00402F75 8945F8 mov dword[ebp-08], eax :00402F78 837DF800 cmp dword[ebp-08], 00000000 :00402F7C 740A je 00402F88 :00402F7E 8B45F8 mov eax, dword[ebp-08] :00402F81 50 push eax :00402F82 FF1574C04000 call dword[0040C074] ;;call KERNEL32.SetEvent --------- :00402F88 8B4DE4 mov ecx, dword[ebp-1C] :00402F8B E890000000 call 00403020 :00402F90 B801000000 mov eax, 00000001 --------- :00402F95 8BE5 mov esp, ebp :00402F97 5D pop ebp :00402F98 C3 ret :00402F99 CC CC CC CC CC CC CC ....... ========= :00402FA0 55 push ebp :00402FA1 8BEC mov ebp, esp :00402FA3 51 push ecx :00402FA4 894DFC mov dword[ebp-04], ecx :00402FA7 8B45FC mov eax, dword[ebp-04] :00402FAA 8B80DC000000 mov eax, dword[eax+000000DC] :00402FB0 8BE5 mov esp, ebp :00402FB2 5D pop ebp :00402FB3 C3 ret :00402FB4 CC CC CC CC CC CC CC CC CC CC CC CC ............ :00402FC0 55 push ebp :00402FC1 8BEC mov ebp, esp :00402FC3 83EC08 sub esp, 00000008 :00402FC6 894DF8 mov dword[ebp-08], ecx :00402FC9 C745FC00000000 mov dword[ebp-04], 00000000 :00402FD0 6830F24000 push 0040F230 (StringData)"NAV_EMAILSCANNERCONFIGCHANGE" :00402FD5 6A00 push 00000000 :00402FD7 6A02 push 00000002 :00402FD9 FF1578C04000 call dword[0040C078] ;;call KERNEL32.OpenEventA :00402FDF 8945FC mov dword[ebp-04], eax :00402FE2 837DFC00 cmp dword[ebp-04], 00000000 :00402FE6 740A je 00402FF2 :00402FE8 8B45FC mov eax, dword[ebp-04] :00402FEB 50 push eax :00402FEC FF1574C04000 call dword[0040C074] ;;call KERNEL32.SetEvent --------- :00402FF2 8B4DF8 mov ecx, dword[ebp-08] :00402FF5 83B9F001000000 cmp dword[ecx+000001F0], 00000000 :00402FFC 7410 je 0040300E :00402FFE 8B55F8 mov edx, dword[ebp-08] :00403001 8B82F0010000 mov eax, dword[edx+000001F0] :00403007 50 push eax :00403008 FF1580C04000 call dword[0040C080] ;;call KERNEL32.CloseHandle --------- :0040300E E8957B0000 call 0040ABA8 :00403013 8B4DF8 mov ecx, dword[ebp-08] :00403016 E8877B0000 call 0040ABA2 :0040301B 8BE5 mov esp, ebp :0040301D 5D pop ebp :0040301E C3 ret :0040301F CC . ========= :00403020 55 push ebp :00403021 8BEC mov ebp, esp :00403023 6AFF push -00000001 :00403025 68E0B24000 push 0040B2E0 :0040302A 64A100000000 mov eax, dword fs:[00000000] :00403030 50 push eax :00403031 64892500000000 mov dword fs:[00000000], esp :00403038 81EC4C020000 sub esp, 0000024C :0040303E 57 push edi :0040303F 898DB8FDFFFF mov dword[ebp+FFFFFDB8], ecx :00403045 C745EC00000000 mov dword[ebp-14], 00000000 :0040304C C745F000000000 mov dword[ebp-10], 00000000 :00403053 8D45F0 lea eax, dword[ebp-10] :00403056 50 push eax :00403057 6819000200 push 00020019 :0040305C 6A00 push 00000000 :0040305E 6850F24000 push 0040F250 (StringData)"Software\Symantec\Norton AntiVirus\eMail Protection" :00403063 6802000080 push 80000002 :00403068 FF1510C04000 call dword[0040C010] ;;call ADVAPI32.RegOpenKeyExA :0040306E 8945EC mov dword[ebp-14], eax :00403071 837DEC00 cmp dword[ebp-14], 00000000 :00403075 0F8526020000 jne 004032A1 :0040307B C685E0FEFFFF00 mov byte[ebp+FFFFFEE0], 00 :00403082 B940000000 mov ecx, 00000040 :00403087 33C0 xor eax, eax :00403089 8DBDE1FEFFFF lea edi, dword[ebp+FFFFFEE1] :0040308F F3AB rep stosd :00403091 66AB stosw :00403093 AA stosb :00403094 C745E800000000 mov dword[ebp-18], 00000000 :0040309B C745E404010000 mov dword[ebp-1C], 00000104 :004030A2 8D4DE4 lea ecx, dword[ebp-1C] :004030A5 51 push ecx :004030A6 8D95E0FEFFFF lea edx, dword[ebp+FFFFFEE0] :004030AC 52 push edx :004030AD 8D45E8 lea eax, dword[ebp-18] :004030B0 50 push eax :004030B1 6A00 push 00000000 :004030B3 6884F24000 push 0040F284 (StringData)"DebugLog" :004030B8 8B4DF0 mov ecx, dword[ebp-10] :004030BB 51 push ecx :004030BC FF1504C04000 call dword[0040C004] ;;call ADVAPI32.RegQueryValueExA :004030C2 837DEC00 cmp dword[ebp-14], 00000000 :004030C6 0F855F010000 jne 0040322B :004030CC 837DE801 cmp dword[ebp-18], 00000001 :004030D0 0F8555010000 jne 0040322B :004030D6 837DE400 cmp dword[ebp-1C], 00000000 :004030DA 0F844B010000 je 0040322B :004030E0 6A00 push 00000000 :004030E2 6AFF push -00000001 :004030E4 6A00 push 00000000 :004030E6 8D8DCCFEFFFF lea ecx, dword[ebp+FFFFFECC] :004030EC E8EF030000 call 004034E0 :004030F1 C745FC00000000 mov dword[ebp-04], 00000000 :004030F8 8D95CCFEFFFF lea edx, dword[ebp+FFFFFECC] :004030FE 52 push edx :004030FF 6801500000 push 00005001 :00403104 8D85E0FEFFFF lea eax, dword[ebp+FFFFFEE0] :0040310A 50 push eax :0040310B 8B8DB8FDFFFF mov ecx, dword[ebp+FFFFFDB8] :00403111 81C1A8010000 add ecx, 000001A8 :00403117 8B95B8FDFFFF mov edx, dword[ebp+FFFFFDB8] :0040311D 8B82A8010000 mov eax, dword[edx+000001A8] :00403123 FF5028 call dword[eax+28] :00403126 85C0 test eax, eax :00403128 746F je 00403199 :0040312A 6A00 push 00000000 :0040312C 8B8DB8FDFFFF mov ecx, dword[ebp+FFFFFDB8] :00403132 81C1BC010000 add ecx, 000001BC :00403138 E8B3E0FFFF call 004011F0 :0040313D 8B8DB8FDFFFF mov ecx, dword[ebp+FFFFFDB8] :00403143 C781A401000001000000 mov dword[ecx+000001A4], 00000001 :0040314D 68DB5D0000 push 00005DDB :00403152 8D8DC0FDFFFF lea ecx, dword[ebp+FFFFFDC0] :00403158 E8637A0000 call 0040ABC0 :0040315D 8985B4FDFFFF mov dword[ebp+FFFFFDB4], eax :00403163 8B95B4FDFFFF mov edx, dword[ebp+FFFFFDB4] :00403169 8995B0FDFFFF mov dword[ebp+FFFFFDB0], edx :0040316F C645FC01 mov byte[ebp-04], 01 :00403173 8B8DB0FDFFFF mov ecx, dword[ebp+FFFFFDB0] :00403179 E8E2FAFFFF call 00402C60 :0040317E 50 push eax :0040317F FF1584C04000 call dword[0040C084] ;;call KERNEL32.SetConsoleTitleA :00403185 C645FC00 mov byte[ebp-04], 00 :00403189 8D8DC0FDFFFF lea ecx, dword[ebp+FFFFFDC0] :0040318F E8EE780000 call 0040AA82 :00403194 E980000000 jmp 00403219 --------- :00403199 C685C8FDFFFF00 mov byte[ebp+FFFFFDC8], 00 :004031A0 B940000000 mov ecx, 00000040 :004031A5 33C0 xor eax, eax :004031A7 8DBDC9FDFFFF lea edi, dword[ebp+FFFFFDC9] :004031AD F3AB rep stosd :004031AF 66AB stosw :004031B1 AA stosb :004031B2 6A00 push 00000000 :004031B4 6804010000 push 00000104 :004031B9 8D85C8FDFFFF lea eax, dword[ebp+FFFFFDC8] :004031BF 50 push eax :004031C0 8D8DCCFEFFFF lea ecx, dword[ebp+FFFFFECC] :004031C6 E8EF790000 call 0040ABBA :004031CB 8D8DC4FDFFFF lea ecx, dword[ebp+FFFFFDC4] :004031D1 E8A0780000 call 0040AA76 :004031D6 C645FC02 mov byte[ebp-04], 02 :004031DA 8D8DC8FDFFFF lea ecx, dword[ebp+FFFFFDC8] :004031E0 51 push ecx :004031E1 68DC5D0000 push 00005DDC :004031E6 8D95C4FDFFFF lea edx, dword[ebp+FFFFFDC4] :004031EC 52 push edx :004031ED E8C2790000 call 0040ABB4 :004031F2 83C40C add esp, 0000000C :004031F5 6A00 push 00000000 :004031F7 6A00 push 00000000 :004031F9 8D8DC4FDFFFF lea ecx, dword[ebp+FFFFFDC4] :004031FF E85CFAFFFF call 00402C60 :00403204 50 push eax :00403205 E8A4790000 call 0040ABAE :0040320A C645FC00 mov byte[ebp-04], 00 :0040320E 8D8DC4FDFFFF lea ecx, dword[ebp+FFFFFDC4] :00403214 E869780000 call 0040AA82 --------- :00403219 C745FCFFFFFFFF mov dword[ebp-04], FFFFFFFF :00403220 8D8DCCFEFFFF lea ecx, dword[ebp+FFFFFECC] :00403226 E805040000 call 00403630 --------- :0040322B 8B45F0 mov eax, dword[ebp-10] :0040322E 50 push eax :0040322F FF1500C04000 call dword[0040C000] ;;call ADVAPI32.RegCloseKey :00403235 8B8DB8FDFFFF mov ecx, dword[ebp+FFFFFDB8] :0040323B 8B517C mov edx, dword[ecx+7C] :0040323E 52 push edx :0040323F FF1578C44000 call dword[0040C478] ;;call MSVCRT.free :00403245 83C404 add esp, 00000004 :00403248 68DD5D0000 push 00005DDD :0040324D 8D8DBCFDFFFF lea ecx, dword[ebp+FFFFFDBC] :00403253 E868790000 call 0040ABC0 :00403258 8985ACFDFFFF mov dword[ebp+FFFFFDAC], eax :0040325E 8B85ACFDFFFF mov eax, dword[ebp+FFFFFDAC] :00403264 8985A8FDFFFF mov dword[ebp+FFFFFDA8], eax :0040326A C745FC03000000 mov dword[ebp-04], 00000003 :00403271 8B8DA8FDFFFF mov ecx, dword[ebp+FFFFFDA8] :00403277 E8E4F9FFFF call 00402C60 :0040327C 50 push eax :0040327D FF157CC44000 call dword[0040C47C] ;;call MSVCRT._strdup :00403283 83C404 add esp, 00000004 :00403286 8B8DB8FDFFFF mov ecx, dword[ebp+FFFFFDB8] :0040328C 89417C mov dword[ecx+7C], eax :0040328F C745FCFFFFFFFF mov dword[ebp-04], FFFFFFFF :00403296 8D8DBCFDFFFF lea ecx, dword[ebp+FFFFFDBC] :0040329C E8E1770000 call 0040AA82 --------- :004032A1 8B45EC mov eax, dword[ebp-14] :004032A4 8B4DF4 mov ecx, dword[ebp-0C] :004032A7 64890D00000000 mov dword fs:[00000000], ecx :004032AE 5F pop edi :004032AF 8BE5 mov esp, ebp :004032B1 5D pop ebp :004032B2 C3 ret :004032B3 CC CC CC CC CC CC CC CC CC CC CC CC CC ............. ========= :004032C0 55 push ebp :004032C1 8BEC mov ebp, esp :004032C3 6AFF push -00000001 :004032C5 68F9B24000 push 0040B2F9 :004032CA 64A100000000 mov eax, dword fs:[00000000] :004032D0 50 push eax :004032D1 64892500000000 mov dword fs:[00000000], esp :004032D8 83EC1C sub esp, 0000001C :004032DB 6A00 push 00000000 :004032DD 8B4508 mov eax, dword[ebp+08] :004032E0 05D0010000 add eax, 000001D0 :004032E5 50 push eax :004032E6 8D4DE4 lea ecx, dword[ebp-1C] :004032E9 E8DE780000 call 0040ABCC :004032EE C745FC00000000 mov dword[ebp-04], 00000000 :004032F5 6AFF push -00000001 :004032F7 8D4DE4 lea ecx, dword[ebp-1C] :004032FA E8C7780000 call 0040ABC6 :004032FF C745F000000000 mov dword[ebp-10], 00000000 :00403306 8B4D08 mov ecx, dword[ebp+08] :00403309 83B9A401000000 cmp dword[ecx+000001A4], 00000000 :00403310 0F84E2000000 je 004033F8 :00403316 8B550C mov edx, dword[ebp+0C] :00403319 8955D8 mov dword[ebp-28], edx :0040331C 8B45D8 mov eax, dword[ebp-28] :0040331F 83C001 add eax, 00000001 :00403322 8945D8 mov dword[ebp-28], eax :00403325 837DD804 cmp dword[ebp-28], 00000004 :00403329 775A ja 00403385 :0040332B 8B4DD8 mov ecx, dword[ebp-28] :0040332E FF248D1E344000 jmp dword[4*ecx+0040341E] --------- :00403335 6A00 push 00000000 :00403337 6A0C push 0000000C :00403339 8B4D08 mov ecx, dword[ebp+08] :0040333C 81C1BC010000 add ecx, 000001BC :00403342 E839DEFFFF call 00401180 :00403347 EB4E jmp 00403397 --------- :00403349 6A00 push 00000000 :0040334B 6A0A push 0000000A :0040334D 8B4D08 mov ecx, dword[ebp+08] :00403350 81C1BC010000 add ecx, 000001BC :00403356 E825DEFFFF call 00401180 :0040335B EB3A jmp 00403397 --------- :0040335D 6A00 push 00000000 :0040335F 6A0E push 0000000E :00403361 8B4D08 mov ecx, dword[ebp+08] :00403364 81C1BC010000 add ecx, 000001BC :0040336A E811DEFFFF call 00401180 :0040336F EB26 jmp 00403397 --------- :00403371 6A00 push 00000000 :00403373 6A0B push 0000000B :00403375 8B4D08 mov ecx, dword[ebp+08] :00403378 81C1BC010000 add ecx, 000001BC :0040337E E8FDDDFFFF call 00401180 :00403383 EB12 jmp 00403397 --------- :00403385 6A00 push 00000000 :00403387 6A0A push 0000000A :00403389 8B4D08 mov ecx, dword[ebp+08] :0040338C 81C1BC010000 add ecx, 000001BC :00403392 E8E9DDFFFF call 00401180 --------- :00403397 C6057003410000 mov byte[00410370], 00 :0040339E 8D5514 lea edx, dword[ebp+14] :004033A1 8955E0 mov dword[ebp-20], edx :004033A4 8B45E0 mov eax, dword[ebp-20] :004033A7 50 push eax :004033A8 8B4D10 mov ecx, dword[ebp+10] :004033AB 51 push ecx :004033AC 6870034100 push 00410370 :004033B1 FF15F8C44000 call dword[0040C4F8] ;;call USER32.wvsprintfA :004033B7 C745E000000000 mov dword[ebp-20], 00000000 :004033BE 6870034100 push 00410370 :004033C3 FF1574C44000 call dword[0040C474] ;;call MSVCRT.puts :004033C9 83C404 add esp, 00000004 :004033CC 6890F24000 push 0040F290 (StringData)" " :004033D1 6870034100 push 00410370 :004033D6 E8D97A0000 call 0040AEB4 ;;call MSVCRT.strcat :004033DB 83C408 add esp, 00000008 :004033DE 6870034100 push 00410370 :004033E3 8B4D08 mov ecx, dword[ebp+08] :004033E6 81C1A8010000 add ecx, 000001A8 :004033EC 8B5508 mov edx, dword[ebp+08] :004033EF 8B82A8010000 mov eax, dword[edx+000001A8] :004033F5 FF505C call dword[eax+5C] --------- :004033F8 8B4DF0 mov ecx, dword[ebp-10] :004033FB 894DDC mov dword[ebp-24], ecx :004033FE C745FCFFFFFFFF mov dword[ebp-04], FFFFFFFF :00403405 8D4DE4 lea ecx, dword[ebp-1C] :00403408 E803030000 call 00403710 :0040340D 8B45DC mov eax, dword[ebp-24] :00403410 8B4DF4 mov ecx, dword[ebp-0C] :00403413 64890D00000000 mov dword fs:[00000000], ecx :0040341A 8BE5 mov esp, ebp :0040341C 5D pop ebp :0040341D C3 ret :0040341E 35334000 DWORD 00403335 ;; 53@. :00403422 49334000 DWORD 00403349 ;; I3@. :00403426 5D334000 DWORD 0040335D ;; ]3@. :0040342A 85334000 DWORD 00403385 ;; .3@. :0040342E 71334000 DWORD 00403371 ;; q3@. :00403432 CC CC CC CC CC CC CC CC CC CC CC CC CC CC .............. :00403440 55 push ebp :00403441 8BEC mov ebp, esp :00403443 83EC20 sub esp, 00000020 :00403446 C745E001000000 mov dword[ebp-20], 00000001 :0040344D 68C0C54000 push 0040C5C0 (StringData)"N32USERL.DLL" :00403452 FF1590C04000 call dword[0040C090] ;;call KERNEL32.LoadLibraryA :00403458 A3840D4100 mov dword[00410D84], eax :0040345D 833D840D410000 cmp dword[00410D84], 00000000 :00403464 7504 jne 0040346A :00403466 33C0 xor eax, eax :00403468 EB6D jmp 004034D7 --------- :0040346A 68D0C54000 push 0040C5D0 (StringData)"_GetPASSKEYCookie@4" :0040346F A1840D4100 mov eax, dword[00410D84] :00403474 50 push eax :00403475 FF158CC04000 call dword[0040C08C] ;;call KERNEL32.GetProcAddress :0040347B 8945E8 mov dword[ebp-18], eax :0040347E 68E4C54000 push 0040C5E4 (StringData)"N32User_GetUserState" :00403483 8B0D840D4100 mov ecx, dword[00410D84] :00403489 51 push ecx :0040348A FF158CC04000 call dword[0040C08C] ;;call KERNEL32.GetProcAddress :00403490 8945E4 mov dword[ebp-1C], eax :00403493 837DE800 cmp dword[ebp-18], 00000000 :00403497 7406 je 0040349F :00403499 837DE400 cmp dword[ebp-1C], 00000000 :0040349D 7511 jne 004034B0 --------- :0040349F 8B15840D4100 mov edx, dword[00410D84] :004034A5 52 push edx :004034A6 FF1588C04000 call dword[0040C088] ;;call KERNEL32.FreeLibrary :004034AC 33C0 xor eax, eax :004034AE EB27 jmp 004034D7 --------- :004034B0 8D45EC lea eax, dword[ebp-14] :004034B3 50 push eax :004034B4 FF55E8 call dword[ebp-18] :004034B7 8D4DE0 lea ecx, dword[ebp-20] :004034BA 51 push ecx :004034BB 8D55EC lea edx, dword[ebp-14] :004034BE 52 push edx :004034BF FF55E4 call dword[ebp-1C] :004034C2 A1840D4100 mov eax, dword[00410D84] :004034C7 50 push eax :004034C8 FF1588C04000 call dword[0040C088] ;;call KERNEL32.FreeLibrary :004034CE 33C0 xor eax, eax :004034D0 837DE001 cmp dword[ebp-20], 00000001 :004034D4 0F95C0 setne al --------- :004034D7 8BE5 mov esp, ebp :004034D9 5D pop ebp :004034DA C3 ret :004034DB CC CC CC CC CC ..... ========= :004034E0 55 push ebp :004034E1 8BEC mov ebp, esp :004034E3 6AFF push -00000001 :004034E5 6825B34000 push 0040B325 :004034EA 64A100000000 mov eax, dword fs:[00000000] :004034F0 50 push eax :004034F1 64892500000000 mov dword fs:[00000000], esp :004034F8 51 push ecx :004034F9 894DF0 mov dword[ebp-10], ecx :004034FC 8B4DF0 mov ecx, dword[ebp-10] :004034FF E8DA760000 call 0040ABDE :00403504 C745FC00000000 mov dword[ebp-04], 00000000 :0040350B 8B4DF0 mov ecx, dword[ebp-10] :0040350E 83C110 add ecx, 00000010 :00403511 E860750000 call 0040AA76 :00403516 C645FC01 mov byte[ebp-04], 01 :0040351A 8B45F0 mov eax, dword[ebp-10] :0040351D C700E4C64000 mov dword[eax], 0040C6E4 :00403523 8B4DF0 mov ecx, dword[ebp-10] :00403526 8B5508 mov edx, dword[ebp+08] :00403529 895108 mov dword[ecx+08], edx :0040352C 8B45F0 mov eax, dword[ebp-10] :0040352F 8B4D0C mov ecx, dword[ebp+0C] :00403532 89480C mov dword[eax+0C], ecx :00403535 8B5510 mov edx, dword[ebp+10] :00403538 52 push edx :00403539 8B4DF0 mov ecx, dword[ebp-10] :0040353C 83C110 add ecx, 00000010 :0040353F E850750000 call 0040AA94 :00403544 C745FCFFFFFFFF mov dword[ebp-04], FFFFFFFF :0040354B 8B45F0 mov eax, dword[ebp-10] :0040354E 8B4DF4 mov ecx, dword[ebp-0C] :00403551 64890D00000000 mov dword fs:[00000000], ecx :00403558 8BE5 mov esp, ebp :0040355A 5D pop ebp :0040355B C20C00 ret 000C :0040355E CC CC .. ========= :00403560 55 push ebp :00403561 8BEC mov ebp, esp :00403563 51 push ecx :00403564 894DFC mov dword[ebp-04], ecx :00403567 8B45FC mov eax, dword[ebp-04] :0040356A C70004C74000 mov dword[eax], 0040C704 :00403570 8B4DFC mov ecx, dword[ebp-04] :00403573 E808000000 call 00403580 :00403578 8BE5 mov esp, ebp :0040357A 5D pop ebp :0040357B C3 ret :0040357C CC CC CC CC .... ========= :00403580 55 push ebp :00403581 8BEC mov ebp, esp :00403583 51 push ecx :00403584 894DFC mov dword[ebp-04], ecx :00403587 8B45FC mov eax, dword[ebp-04] :0040358A C70024C74000 mov dword[eax], 0040C724 :00403590 8BE5 mov esp, ebp :00403592 5D pop ebp :00403593 C3 ret :00403594 CC CC CC CC CC CC CC CC CC CC CC CC ............ :004035A0 55 push ebp :004035A1 8BEC mov ebp, esp :004035A3 51 push ecx :004035A4 894DFC mov dword[ebp-04], ecx :004035A7 8B4DFC mov ecx, dword[ebp-04] :004035AA E8D1FFFFFF call 00403580 :004035AF 8B4508 mov eax, dword[ebp+08] :004035B2 83E001 and eax, 00000001 :004035B5 85C0 test eax, eax :004035B7 7409 je 004035C2 :004035B9 8B4DFC mov ecx, dword[ebp-04] :004035BC 51 push ecx :004035BD E85EF6FFFF call 00402C20 --------- :004035C2 8B45FC mov eax, dword[ebp-04] :004035C5 8BE5 mov esp, ebp :004035C7 5D pop ebp :004035C8 C20400 ret 0004 :004035CB CC CC CC CC CC 55 8B EC 51 89 4D FC 8B 4D FC E8 .....U..Q.M..M.. :004035DB 81 FF FF FF 8B 45 08 83 E0 01 85 C0 74 09 8B 4D .....E......t..M :004035EB FC 51 E8 2E F6 FF FF 8B 45 FC 8B E5 5D C2 04 00 .Q......E...]... :004035FB CC CC CC CC CC 55 8B EC 51 89 4D FC 8B 4D FC E8 .....U..Q.M..M.. :0040360B 21 00 00 00 8B 45 08 83 E0 01 85 C0 74 09 8B 4D !....E......t..M :0040361B FC 51 E8 FE F5 FF FF 8B 45 FC 8B E5 5D C2 04 00 .Q......E...]... :0040362B CC CC CC CC CC ..... ========= :00403630 55 push ebp :00403631 8BEC mov ebp, esp :00403633 6AFF push -00000001 :00403635 6839B34000 push 0040B339 :0040363A 64A100000000 mov eax, dword fs:[00000000] :00403640 50 push eax :00403641 64892500000000 mov dword fs:[00000000], esp :00403648 51 push ecx :00403649 894DF0 mov dword[ebp-10], ecx :0040364C 8B45F0 mov eax, dword[ebp-10] :0040364F C700E4C64000 mov dword[eax], 0040C6E4 :00403655 C745FC00000000 mov dword[ebp-04], 00000000 :0040365C 8B4DF0 mov ecx, dword[ebp-10] :0040365F 83C110 add ecx, 00000010 :00403662 E81B740000 call 0040AA82 :00403667 C745FCFFFFFFFF mov dword[ebp-04], FFFFFFFF :0040366E 8B4DF0 mov ecx, dword[ebp-10] :00403671 E8EAFEFFFF call 00403560 :00403676 8B4DF4 mov ecx, dword[ebp-0C] :00403679 64890D00000000 mov dword fs:[00000000], ecx :00403680 8BE5 mov esp, ebp :00403682 5D pop ebp :00403683 C3 ret :00403684 CC CC CC CC CC CC CC CC CC CC CC CC ............ :00403690 55 push ebp :00403691 8BEC mov ebp, esp :00403693 E87E730000 call 0040AA16 :00403698 8B4D08 mov ecx, dword[ebp+08] :0040369B 89480C mov dword[eax+0C], ecx :0040369E 5D pop ebp :0040369F C20400 ret 0004 :004036A2 CC CC CC CC CC CC CC CC CC CC CC CC CC CC .............. ========= :004036B0 55 push ebp :004036B1 8BEC mov ebp, esp :004036B3 51 push ecx :004036B4 894DFC mov dword[ebp-04], ecx :004036B7 8B45FC mov eax, dword[ebp-04] :004036BA 8B4D08 mov ecx, dword[ebp+08] :004036BD 8908 mov dword[eax], ecx :004036BF 8B55FC mov edx, dword[ebp-04] :004036C2 8B450C mov eax, dword[ebp+0C] :004036C5 894204 mov dword[edx+04], eax :004036C8 8B4DFC mov ecx, dword[ebp-04] :004036CB 8B5510 mov edx, dword[ebp+10] :004036CE 895108 mov dword[ecx+08], edx :004036D1 8B45FC mov eax, dword[ebp-04] :004036D4 8B4D14 mov ecx, dword[ebp+14] :004036D7 89480C mov dword[eax+0C], ecx :004036DA 8B45FC mov eax, dword[ebp-04] :004036DD 8BE5 mov esp, ebp :004036DF 5D pop ebp :004036E0 C21000 ret 0010 :004036E3 CC CC CC CC CC CC CC CC CC CC CC CC CC ............. :004036F0 55 push ebp :004036F1 8BEC mov ebp, esp :004036F3 FF15F0C44000 call dword[0040C4F0] ;;call USER32.GetDesktopWindow :004036F9 50 push eax :004036FA E8F7740000 call 0040ABF6 :004036FF 5D pop ebp :00403700 C3 ret :00403701 CC CC CC CC CC CC CC CC CC CC CC CC CC CC CC ............... ========= :00403710 55 push ebp :00403711 8BEC mov ebp, esp :00403713 51 push ecx :00403714 894DFC mov dword[ebp-04], ecx :00403717 8B4DFC mov ecx, dword[ebp-04] :0040371A E8DD740000 call 0040ABFC :0040371F 8BE5 mov esp, ebp :00403721 5D pop ebp :00403722 C3 ret :00403723 CC CC CC CC CC CC CC CC CC CC CC CC CC ............. ========= :00403730 55 push ebp :00403731 8BEC mov ebp, esp :00403733 51 push ecx :00403734 894DFC mov dword[ebp-04], ecx :00403737 6A00 push 00000000 :00403739 8B4DFC mov ecx, dword[ebp-04] :0040373C E8C7740000 call 0040AC08 :00403741 8B45FC mov eax, dword[ebp-04] :00403744 C7003CC74000 mov dword[eax], 0040C73C :0040374A 8B4DFC mov ecx, dword[ebp-04] :0040374D 83C108 add ecx, 00000008 :00403750 51 push ecx :00403751 FF1594C04000 call dword[0040C094] ;;call KERNEL32.InitializeCriticalSection :00403757 8B45FC mov eax, dword[ebp-04] :0040375A 8BE5 mov esp, ebp :0040375C 5D pop ebp :0040375D C3 ret :0040375E CC CC .. :00403760 55 push ebp :00403761 8BEC mov ebp, esp :00403763 51 push ecx :00403764 894DFC mov dword[ebp-04], ecx :00403767 B801000000 mov eax, 00000001 :0040376C 8BE5 mov esp, ebp :0040376E 5D pop ebp :0040376F C20800 ret 0008 :00403772 CC CC CC CC CC CC CC CC CC CC CC CC CC CC 55 8B ..............U. :00403782 EC 51 89 4D FC 8B 4D FC E8 21 00 00 00 8B 45 08 .Q.M..M..!....E. :00403792 83 E0 01 85 C0 74 09 8B 4D FC 51 E8 7E F4 FF FF .....t..M.Q.~... :004037A2 8B 45 FC 8B E5 5D C2 04 00 CC CC CC CC CC .E...]........ ========= :004037B0 55 push ebp :004037B1 8BEC mov ebp, esp :004037B3 51 push ecx :004037B4 894DFC mov dword[ebp-04], ecx :004037B7 8B45FC mov eax, dword[ebp-04] :004037BA C7003CC74000 mov dword[eax], 0040C73C :004037C0 8B4DFC mov ecx, dword[ebp-04] :004037C3 83C108 add ecx, 00000008 :004037C6 51 push ecx :004037C7 FF1598C04000 call dword[0040C098] ;;call KERNEL32.DeleteCriticalSection :004037CD 8B4DFC mov ecx, dword[ebp-04] :004037D0 E839740000 call 0040AC0E :004037D5 8BE5 mov esp, ebp :004037D7 5D pop ebp :004037D8 C3 ret :004037D9 CC CC CC CC CC CC CC ....... :004037E0 55 push ebp :004037E1 8BEC mov ebp, esp :004037E3 51 push ecx :004037E4 894DFC mov dword[ebp-04], ecx :004037E7 8B4DFC mov ecx, dword[ebp-04] :004037EA E811000000 call 00403800 :004037EF 8BE5 mov esp, ebp :004037F1 5D pop ebp :004037F2 C20400 ret 0004 :004037F5 CC CC CC CC CC CC CC CC CC CC CC ........... ========= :00403800 55 push ebp :00403801 8BEC mov ebp, esp :00403803 51 push ecx :00403804 894DFC mov dword[ebp-04], ecx :00403807 8B45FC mov eax, dword[ebp-04] :0040380A 83C008 add eax, 00000008 :0040380D 50 push eax :0040380E FF159CC04000 call dword[0040C09C] ;;call KERNEL32.EnterCriticalSection :00403814 B801000000 mov eax, 00000001 :00403819 8BE5 mov esp, ebp :0040381B 5D pop ebp :0040381C C3 ret :0040381D CC CC CC ... :00403820 55 push ebp :00403821 8BEC mov ebp, esp :00403823 51 push ecx :00403824 894DFC mov dword[ebp-04], ecx :00403827 8B45FC mov eax, dword[ebp-04] :0040382A 83C008 add eax, 00000008 :0040382D 50 push eax :0040382E FF15A0C04000 call dword[0040C0A0] ;;call KERNEL32.LeaveCriticalSection :00403834 B801000000 mov eax, 00000001 :00403839 8BE5 mov esp, ebp :0040383B 5D pop ebp :0040383C C3 ret :0040383D CC CC CC ... ========= :00403840 55 push ebp :00403841 8BEC mov ebp, esp :00403843 6AFF push -00000001 :00403845 6865B34000 push 0040B365 :0040384A 64A100000000 mov eax, dword fs:[00000000] :00403850 50 push eax :00403851 64892500000000 mov dword fs:[00000000], esp :00403858 51 push ecx :00403859 894DF0 mov dword[ebp-10], ecx :0040385C 8B4DF0 mov ecx, dword[ebp-10] :0040385F E8CCFEFFFF call 00403730 :00403864 C745FC00000000 mov dword[ebp-04], 00000000 :0040386B 8B4DF0 mov ecx, dword[ebp-10] :0040386E 83C120 add ecx, 00000020 :00403871 E8AA730000 call 0040AC20 :00403876 C645FC01 mov byte[ebp-04], 01 :0040387A 8B45F0 mov eax, dword[ebp-10] :0040387D C74034FFFFFFFF mov dword[eax+34], FFFFFFFF :00403884 8B4DF0 mov ecx, dword[ebp-10] :00403887 C7413800000000 mov dword[ecx+38], 00000000 :0040388E 6A00 push 00000000 :00403890 6A00 push 00000000 :00403892 6A00 push 00000000 :00403894 6A00 push 00000000 :00403896 8B4DF0 mov ecx, dword[ebp-10] :00403899 83C13C add ecx, 0000003C :0040389C E879730000 call 0040AC1A :004038A1 8B55F0 mov edx, dword[ebp-10] :004038A4 C7424400000000 mov dword[edx+44], 00000000 :004038AB 8B45F0 mov eax, dword[ebp-10] :004038AE C7404800000000 mov dword[eax+48], 00000000 :004038B5 C745FCFFFFFFFF mov dword[ebp-04], FFFFFFFF :004038BC 8B45F0 mov eax, dword[ebp-10] :004038BF 8B4DF4 mov ecx, dword[ebp-0C] :004038C2 64890D00000000 mov dword fs:[00000000], ecx :004038C9 8BE5 mov esp, ebp :004038CB 5D pop ebp :004038CC C3 ret :004038CD CC CC CC ... ========= :004038D0 55 push ebp :004038D1 8BEC mov ebp, esp :004038D3 6AFF push -00000001 :004038D5 6885B34000 push 0040B385 :004038DA 64A100000000 mov eax, dword fs:[00000000] :004038E0 50 push eax :004038E1 64892500000000 mov dword fs:[00000000], esp :004038E8 51 push ecx :004038E9 894DF0 mov dword[ebp-10], ecx :004038EC C745FC01000000 mov dword[ebp-04], 00000001 :004038F3 8B4DF0 mov ecx, dword[ebp-10] :004038F6 83C13C add ecx, 0000003C :004038F9 E828730000 call 0040AC26 :004038FE C645FC00 mov byte[ebp-04], 00 :00403902 8B4DF0 mov ecx, dword[ebp-10] :00403905 83C120 add ecx, 00000020 :00403908 E807730000 call 0040AC14 :0040390D C745FCFFFFFFFF mov dword[ebp-04], FFFFFFFF :00403914 8B4DF0 mov ecx, dword[ebp-10] :00403917 E894FEFFFF call 004037B0 :0040391C 8B4DF4 mov ecx, dword[ebp-0C] :0040391F 64890D00000000 mov dword fs:[00000000], ecx :00403926 8BE5 mov esp, ebp :00403928 5D pop ebp :00403929 C3 ret :0040392A CC CC CC CC CC CC ...... ========= :00403930 55 push ebp :00403931 8BEC mov ebp, esp :00403933 83EC08 sub esp, 00000008 :00403936 894DF8 mov dword[ebp-08], ecx :00403939 C745FC00000000 mov dword[ebp-04], 00000000 :00403940 8B45F8 mov eax, dword[ebp-08] :00403943 8B4D0C mov ecx, dword[ebp+0C] :00403946 894844 mov dword[eax+44], ecx :00403949 8B55F8 mov edx, dword[ebp-08] :0040394C 8B4508 mov eax, dword[ebp+08] :0040394F 8B4804 mov ecx, dword[eax+04] :00403952 894A34 mov dword[edx+34], ecx :00403955 6A00 push 00000000 :00403957 6A04 push 00000004 :00403959 6A00 push 00000000 :0040395B 6A00 push 00000000 :0040395D 8B55F8 mov edx, dword[ebp-08] :00403960 52 push edx :00403961 68003B4000 push 00403B00 :00403966 E8C1720000 call 0040AC2C :0040396B 8B4DF8 mov ecx, dword[ebp-08] :0040396E 894138 mov dword[ecx+38], eax :00403971 8B55F8 mov edx, dword[ebp-08] :00403974 8B4238 mov eax, dword[edx+38] :00403977 C7402800000000 mov dword[eax+28], 00000000 :0040397E 8B45FC mov eax, dword[ebp-04] :00403981 8BE5 mov esp, ebp :00403983 5D pop ebp :00403984 C20800 ret 0008 :00403987 CC CC CC CC CC CC CC CC CC ......... ========= :00403990 55 push ebp :00403991 8BEC mov ebp, esp :00403993 83EC14 sub esp, 00000014 :00403996 894DF0 mov dword[ebp-10], ecx :00403999 C745FC00000000 mov dword[ebp-04], 00000000 :004039A0 8B45F0 mov eax, dword[ebp-10] :004039A3 83783800 cmp dword[eax+38], 00000000 :004039A7 7458 je 00403A01 :004039A9 8B4DF0 mov ecx, dword[ebp-10] :004039AC 83C13C add ecx, 0000003C :004039AF E81C050000 call 00403ED0 :004039B4 6AFF push -00000001 :004039B6 8B4DF0 mov ecx, dword[ebp-10] :004039B9 8B5138 mov edx, dword[ecx+38] :004039BC 8B422C mov eax, dword[edx+2C] :004039BF 50 push eax :004039C0 FF15A4C04000 call dword[0040C0A4] ;;call KERNEL32.WaitForSingleObject :004039C6 8945FC mov dword[ebp-04], eax :004039C9 8B4DF0 mov ecx, dword[ebp-10] :004039CC 8B5138 mov edx, dword[ecx+38] :004039CF 8955F4 mov dword[ebp-0C], edx :004039D2 8B45F4 mov eax, dword[ebp-0C] :004039D5 8945F8 mov dword[ebp-08], eax :004039D8 837DF800 cmp dword[ebp-08], 00000000 :004039DC 7412 je 004039F0 :004039DE 6A01 push 00000001 :004039E0 8B4DF8 mov ecx, dword[ebp-08] :004039E3 8B11 mov edx, dword[ecx] :004039E5 8B4DF8 mov ecx, dword[ebp-08] :004039E8 FF5204 call dword[edx+04] :004039EB 8945EC mov dword[ebp-14], eax :004039EE EB07 jmp 004039F7 --------- :004039F0 C745EC00000000 mov dword[ebp-14], 00000000 --------- :004039F7 8B45F0 mov eax, dword[ebp-10] :004039FA C7403800000000 mov dword[eax+38], 00000000 --------- :00403A01 8B45FC mov eax, dword[ebp-04] :00403A04 8BE5 mov esp, ebp :00403A06 5D pop ebp :00403A07 C3 ret :00403A08 CC CC CC CC CC CC CC CC ........ ========= :00403A10 55 push ebp :00403A11 8BEC mov ebp, esp :00403A13 83EC08 sub esp, 00000008 :00403A16 894DF8 mov dword[ebp-08], ecx :00403A19 C745FCFFFFFFFF mov dword[ebp-04], FFFFFFFF :00403A20 8B45F8 mov eax, dword[ebp-08] :00403A23 837834FF cmp dword[eax+34], -00000001 :00403A27 741B je 00403A44 :00403A29 6A01 push 00000001 :00403A2B 8B4DF8 mov ecx, dword[ebp-08] :00403A2E 8B4938 mov ecx, dword[ecx+38] :00403A31 E85A040000 call 00403E90 :00403A36 8B55F8 mov edx, dword[ebp-08] :00403A39 8B4A38 mov ecx, dword[edx+38] :00403A3C E82FF2FFFF call 00402C70 :00403A41 8945FC mov dword[ebp-04], eax --------- :00403A44 8B45FC mov eax, dword[ebp-04] :00403A47 8BE5 mov esp, ebp :00403A49 5D pop ebp :00403A4A C3 ret :00403A4B CC CC CC CC CC ..... ========= :00403A50 55 push ebp :00403A51 8BEC mov ebp, esp :00403A53 6AFF push -00000001 :00403A55 6899B34000 push 0040B399 :00403A5A 64A100000000 mov eax, dword fs:[00000000] :00403A60 50 push eax :00403A61 64892500000000 mov dword fs:[00000000], esp :00403A68 83EC18 sub esp, 00000018 :00403A6B 894DDC mov dword[ebp-24], ecx :00403A6E C745E400000000 mov dword[ebp-1C], 00000000 :00403A75 6A00 push 00000000 :00403A77 8B45DC mov eax, dword[ebp-24] :00403A7A 50 push eax :00403A7B 8D4DE8 lea ecx, dword[ebp-18] :00403A7E E849710000 call 0040ABCC :00403A83 C745FC00000000 mov dword[ebp-04], 00000000 :00403A8A 6AFF push -00000001 :00403A8C 8D4DE8 lea ecx, dword[ebp-18] :00403A8F E832710000 call 0040ABC6 :00403A94 8B4D08 mov ecx, dword[ebp+08] :00403A97 E8B4030000 call 00403E50 :00403A9C 83F803 cmp eax, 00000003 :00403A9F 7E28 jle 00403AC9 :00403AA1 8B4DDC mov ecx, dword[ebp-24] :00403AA4 83C120 add ecx, 00000020 :00403AA7 E814030000 call 00403DC0 :00403AAC 3DFA000000 cmp eax, 000000FA :00403AB1 7D16 jge 00403AC9 :00403AB3 8B4D08 mov ecx, dword[ebp+08] :00403AB6 51 push ecx :00403AB7 8B4DDC mov ecx, dword[ebp-24] :00403ABA 83C120 add ecx, 00000020 :00403ABD E81E030000 call 00403DE0 :00403AC2 C745E401000000 mov dword[ebp-1C], 00000001 --------- :00403AC9 8B55E4 mov edx, dword[ebp-1C] :00403ACC 8955E0 mov dword[ebp-20], edx :00403ACF C745FCFFFFFFFF mov dword[ebp-04], FFFFFFFF :00403AD6 8D4DE8 lea ecx, dword[ebp-18] :00403AD9 E832FCFFFF call 00403710 :00403ADE 8B45E0 mov eax, dword[ebp-20] :00403AE1 8B4DF4 mov ecx, dword[ebp-0C] :00403AE4 64890D00000000 mov dword fs:[00000000], ecx :00403AEB 8BE5 mov esp, ebp :00403AED 5D pop ebp :00403AEE C20400 ret 0004 :00403AF1 CC CC CC CC CC CC CC CC CC CC CC CC CC CC CC ............... --------- :00403B00 55 push ebp :00403B01 8BEC mov ebp, esp :00403B03 51 push ecx :00403B04 8B4508 mov eax, dword[ebp+08] :00403B07 8945FC mov dword[ebp-04], eax :00403B0A 8B4DFC mov ecx, dword[ebp-04] :00403B0D E80E000000 call 00403B20 :00403B12 8BE5 mov esp, ebp :00403B14 5D pop ebp :00403B15 C3 ret :00403B16 CC CC CC CC CC CC CC CC CC CC .......... ========= :00403B20 55 push ebp :00403B21 8BEC mov ebp, esp :00403B23 6AFF push -00000001 :00403B25 68D4B34000 push 0040B3D4 :00403B2A 64A100000000 mov eax, dword fs:[00000000] :00403B30 50 push eax :00403B31 64892500000000 mov dword fs:[00000000], esp :00403B38 51 push ecx :00403B39 81EC8C000000 sub esp, 0000008C :00403B3F 53 push ebx :00403B40 56 push esi :00403B41 57 push edi :00403B42 8965F0 mov dword[ebp-10], esp :00403B45 894D80 mov dword[ebp-80], ecx :00403B48 6800200000 push 00002000 :00403B4D 8D4D94 lea ecx, dword[ebp-6C] :00403B50 E88B400000 call 00407BE0 :00403B55 C745FC00000000 mov dword[ebp-04], 00000000 :00403B5C 6A00 push 00000000 :00403B5E 8B4580 mov eax, dword[ebp-80] :00403B61 50 push eax :00403B62 8D4DDC lea ecx, dword[ebp-24] :00403B65 E862700000 call 0040ABCC :00403B6A C645FC01 mov byte[ebp-04], 01 :00403B6E C745D800000000 mov dword[ebp-28], 00000000 :00403B75 8D4DD4 lea ecx, dword[ebp-2C] :00403B78 E8F96E0000 call 0040AA76 :00403B7D C645FC02 mov byte[ebp-04], 02 :00403B81 C745EC00000000 mov dword[ebp-14], 00000000 :00403B88 C745E801000000 mov dword[ebp-18], 00000001 :00403B8F C645FC03 mov byte[ebp-04], 03 :00403B93 8B4D80 mov ecx, dword[ebp-80] :00403B96 8B5134 mov edx, dword[ecx+34] :00403B99 895598 mov dword[ebp-68], edx --------- :00403B9C 837DE800 cmp dword[ebp-18], 00000000 :00403BA0 0F8437010000 je 00403CDD :00403BA6 8B4D80 mov ecx, dword[ebp-80] :00403BA9 83C13C add ecx, 0000003C :00403BAC E8FF020000 call 00403EB0 :00403BB1 89857CFFFFFF mov dword[ebp+FFFFFF7C], eax :00403BB7 8B4580 mov eax, dword[ebp-80] :00403BBA 8B4844 mov ecx, dword[eax+44] :00403BBD 51 push ecx :00403BBE 8B957CFFFFFF mov edx, dword[ebp+FFFFFF7C] :00403BC4 52 push edx :00403BC5 FF15A4C04000 call dword[0040C0A4] ;;call KERNEL32.WaitForSingleObject :00403BCB 8945D8 mov dword[ebp-28], eax :00403BCE 8B45D8 mov eax, dword[ebp-28] :00403BD1 898578FFFFFF mov dword[ebp+FFFFFF78], eax :00403BD7 81BD78FFFFFF02010000 cmp dword[ebp+FFFFFF78], 00000102 :00403BE1 7405 je 00403BE8 :00403BE3 E9E9000000 jmp 00403CD1 --------- :00403BE8 C7459000000000 mov dword[ebp-70], 00000000 :00403BEF 6AFF push -00000001 :00403BF1 8D4DDC lea ecx, dword[ebp-24] :00403BF4 E8CD6F0000 call 0040ABC6 :00403BF9 8B4D80 mov ecx, dword[ebp-80] :00403BFC 83C120 add ecx, 00000020 :00403BFF E89C010000 call 00403DA0 :00403C04 898574FFFFFF mov dword[ebp+FFFFFF74], eax :00403C0A 8B4D80 mov ecx, dword[ebp-80] :00403C0D 8B5148 mov edx, dword[ecx+48] :00403C10 3B9574FFFFFF cmp edx, dword[ebp+FFFFFF74] :00403C16 7D38 jge 00403C50 :00403C18 8B4580 mov eax, dword[ebp-80] :00403C1B 8B4848 mov ecx, dword[eax+48] :00403C1E 51 push ecx :00403C1F 8B4D80 mov ecx, dword[ebp-80] :00403C22 83C120 add ecx, 00000020 :00403C25 E8E6010000 call 00403E10 :00403C2A 898570FFFFFF mov dword[ebp+FFFFFF70], eax :00403C30 8B9570FFFFFF mov edx, dword[ebp+FFFFFF70] :00403C36 52 push edx :00403C37 8D4DD4 lea ecx, dword[ebp-2C] :00403C3A E8F96F0000 call 0040AC38 :00403C3F 8B4580 mov eax, dword[ebp-80] :00403C42 8B4848 mov ecx, dword[eax+48] :00403C45 83C101 add ecx, 00000001 :00403C48 8B5580 mov edx, dword[ebp-80] :00403C4B 894A48 mov dword[edx+48], ecx :00403C4E EB2A jmp 00403C7A --------- :00403C50 8B45EC mov eax, dword[ebp-14] :00403C53 89856CFFFFFF mov dword[ebp+FFFFFF6C], eax :00403C59 8B4DEC mov ecx, dword[ebp-14] :00403C5C 83C101 add ecx, 00000001 :00403C5F 894DEC mov dword[ebp-14], ecx :00403C62 8B956CFFFFFF mov edx, dword[ebp+FFFFFF6C] :00403C68 52 push edx :00403C69 6830F34000 push 0040F330 (StringData)"X-NortonAV-TimeoutProtection: %03d" :00403C6E 8D45D4 lea eax, dword[ebp-2C] :00403C71 50 push eax :00403C72 E8BB6F0000 call 0040AC32 :00403C77 83C40C add esp, 0000000C --------- :00403C7A 8D4DD4 lea ecx, dword[ebp-2C] :00403C7D 51 push ecx :00403C7E 8D4D94 lea ecx, dword[ebp-6C] :00403C81 E83A410000 call 00407DC0 :00403C86 898568FFFFFF mov dword[ebp+FFFFFF68], eax :00403C8C 8B9568FFFFFF mov edx, dword[ebp+FFFFFF68] :00403C92 895590 mov dword[ebp-70], edx :00403C95 E896D9FFFF call 00401630 :00403C9A 898564FFFFFF mov dword[ebp+FFFFFF64], eax :00403CA0 8B45D4 mov eax, dword[ebp-2C] :00403CA3 50 push eax :00403CA4 6854F34000 push 0040F354 (StringData)"%s" :00403CA9 6A03 push 00000003 :00403CAB 8B8D64FFFFFF mov ecx, dword[ebp+FFFFFF64] :00403CB1 51 push ecx :00403CB2 E809F6FFFF call 004032C0 :00403CB7 83C410 add esp, 00000010 :00403CBA 8D4DDC lea ecx, dword[ebp-24] :00403CBD E83A6F0000 call 0040ABFC :00403CC2 837D9000 cmp dword[ebp-70], 00000000 :00403CC6 7F07 jg 00403CCF :00403CC8 C745E800000000 mov dword[ebp-18], 00000000 --------- :00403CCF EB07 jmp 00403CD8 --------- :00403CD1 C745E800000000 mov dword[ebp-18], 00000000 --------- :00403CD8 E9BFFEFFFF jmp 00403B9C --------- :00403CDD EB74 jmp 00403D53 :00403CDF 8D4D88 lea ecx, dword[ebp-78] :00403CE2 E88F6D0000 call 0040AA76 :00403CE7 C645FC05 mov byte[ebp-04], 05 :00403CEB 8B4D8C mov ecx, dword[ebp-74] :00403CEE 8B558C mov edx, dword[ebp-74] :00403CF1 8B02 mov eax, dword[edx] :00403CF3 FF5004 call dword[eax+04] :00403CF6 50 push eax :00403CF7 6858F34000 push 0040F358 (StringData)"Keep-alive error: %s" :00403CFC 8D4D88 lea ecx, dword[ebp-78] :00403CFF 51 push ecx :00403D00 E82D6F0000 call 0040AC32 :00403D05 83C40C add esp, 0000000C :00403D08 8B5588 mov edx, dword[ebp-78] :00403D0B 52 push edx :00403D0C 6870F34000 push 0040F370 (StringData)"%s" :00403D11 6AFF push -00000001 :00403D13 E818D9FFFF call 00401630 :00403D18 50 push eax :00403D19 E8A2F5FFFF call 004032C0 :00403D1E 83C410 add esp, 00000010 :00403D21 C645FC04 mov byte[ebp-04], 04 :00403D25 8D4D88 lea ecx, dword[ebp-78] :00403D28 E8556D0000 call 0040AA82 :00403D2D B8533D4000 mov eax, 00403D53 :00403D32 C3 ret :00403D33 6874F34000 push 0040F374 (StringData)"Unexpected error encountered." :00403D38 6894F34000 push 0040F394 (StringData)"%s" :00403D3D 6AFF push -00000001 :00403D3F E8ECD8FFFF call 00401630 :00403D44 50 push eax :00403D45 E876F5FFFF call 004032C0 :00403D4A 83C410 add esp, 00000010 :00403D4D B8533D4000 mov eax, 00403D53 :00403D52 C3 ret :00403D53 C7 45 FC 02 00 00 00 C7 45 84 01 00 00 00 C6 45 .E......E......E :00403D63 FC 01 8D 4D D4 E8 15 6D 00 00 C6 45 FC 00 8D 4D ...M...m...E...M :00403D73 DC E8 97 F9 FF FF C7 45 FC .......E. :00403D7C FFFFFFFF DWORD FFFFFFFF ;; .... :00403D80 8D 4D 94 E8 48 3F 00 00 8B 45 84 8B 4D F4 64 89 .M..H?...E..M.d. :00403D90 0D 00 00 00 00 5F 5E 5B 8B E5 5D C3 CC CC CC CC ....._^[..]..... ========= :00403DA0 55 push ebp :00403DA1 8BEC mov ebp, esp :00403DA3 51 push ecx :00403DA4 894DFC mov dword[ebp-04], ecx :00403DA7 8B45FC mov eax, dword[ebp-04] :00403DAA 8B4008 mov eax, dword[eax+08] :00403DAD 8BE5 mov esp, ebp :00403DAF 5D pop ebp :00403DB0 C3 ret :00403DB1 CC CC CC CC CC CC CC CC CC CC CC CC CC CC CC ............... ========= :00403DC0 55 push ebp :00403DC1 8BEC mov ebp, esp :00403DC3 51 push ecx :00403DC4 894DFC mov dword[ebp-04], ecx :00403DC7 8B45FC mov eax, dword[ebp-04] :00403DCA 8B4008 mov eax, dword[eax+08] :00403DCD 83E801 sub eax, 00000001 :00403DD0 8BE5 mov esp, ebp :00403DD2 5D pop ebp :00403DD3 C3 ret :00403DD4 CC CC CC CC CC CC CC CC CC CC CC CC ............ ========= :00403DE0 55 push ebp :00403DE1 8BEC mov ebp, esp :00403DE3 83EC08 sub esp, 00000008 :00403DE6 894DF8 mov dword[ebp-08], ecx :00403DE9 8B45F8 mov eax, dword[ebp-08] :00403DEC 8B4808 mov ecx, dword[eax+08] :00403DEF 894DFC mov dword[ebp-04], ecx :00403DF2 8B5508 mov edx, dword[ebp+08] :00403DF5 52 push edx :00403DF6 8B45FC mov eax, dword[ebp-04] :00403DF9 50 push eax :00403DFA 8B4DF8 mov ecx, dword[ebp-08] :00403DFD E83C6E0000 call 0040AC3E :00403E02 8B45FC mov eax, dword[ebp-04] :00403E05 8BE5 mov esp, ebp :00403E07 5D pop ebp :00403E08 C20400 ret 0004 :00403E0B CC CC CC CC CC ..... ========= :00403E10 55 push ebp :00403E11 8BEC mov ebp, esp :00403E13 51 push ecx :00403E14 894DFC mov dword[ebp-04], ecx :00403E17 8B4508 mov eax, dword[ebp+08] :00403E1A 50 push eax :00403E1B 8B4DFC mov ecx, dword[ebp-04] :00403E1E E80D000000 call 00403E30 :00403E23 8BE5 mov esp, ebp :00403E25 5D pop ebp :00403E26 C20400 ret 0004 :00403E29 CC CC CC CC CC CC CC ....... ========= :00403E30 55 push ebp :00403E31 8BEC mov ebp, esp :00403E33 51 push ecx :00403E34 894DFC mov dword[ebp-04], ecx :00403E37 8B45FC mov eax, dword[ebp-04] :00403E3A 8B4804 mov ecx, dword[eax+04] :00403E3D 8B5508 mov edx, dword[ebp+08] :00403E40 8D0491 lea eax, dword[ecx+4*edx] :00403E43 8BE5 mov esp, ebp :00403E45 5D pop ebp :00403E46 C20400 ret 0004 :00403E49 CC CC CC CC CC CC CC ....... ========= :00403E50 55 push ebp :00403E51 8BEC mov ebp, esp :00403E53 51 push ecx :00403E54 894DFC mov dword[ebp-04], ecx :00403E57 8B4DFC mov ecx, dword[ebp-04] :00403E5A E811000000 call 00403E70 :00403E5F 8B4004 mov eax, dword[eax+04] :00403E62 8BE5 mov esp, ebp :00403E64 5D pop ebp :00403E65 C3 ret :00403E66 CC CC CC CC CC CC CC CC CC CC .......... ========= :00403E70 55 push ebp :00403E71 8BEC mov ebp, esp :00403E73 51 push ecx :00403E74 894DFC mov dword[ebp-04], ecx :00403E77 8B45FC mov eax, dword[ebp-04] :00403E7A 8B00 mov eax, dword[eax] :00403E7C 83E80C sub eax, 0000000C :00403E7F 8BE5 mov esp, ebp :00403E81 5D pop ebp :00403E82 C3 ret :00403E83 CC CC CC CC CC CC CC CC CC CC CC CC CC ............. ========= :00403E90 55 push ebp :00403E91 8BEC mov ebp, esp :00403E93 51 push ecx :00403E94 894DFC mov dword[ebp-04], ecx :00403E97 8B4508 mov eax, dword[ebp+08] :00403E9A 50 push eax :00403E9B 8B4DFC mov ecx, dword[ebp-04] :00403E9E 8B512C mov edx, dword[ecx+2C] :00403EA1 52 push edx :00403EA2 FF15A8C04000 call dword[0040C0A8] ;;call KERNEL32.SetThreadPriority :00403EA8 8BE5 mov esp, ebp :00403EAA 5D pop ebp :00403EAB C20400 ret 0004 :00403EAE CC CC .. ========= :00403EB0 55 push ebp :00403EB1 8BEC mov ebp, esp :00403EB3 51 push ecx :00403EB4 894DFC mov dword[ebp-04], ecx :00403EB7 8B45FC mov eax, dword[ebp-04] :00403EBA 8B4004 mov eax, dword[eax+04] :00403EBD 8BE5 mov esp, ebp :00403EBF 5D pop ebp :00403EC0 C3 ret :00403EC1 CC CC CC CC CC CC CC CC CC CC CC CC CC CC CC ............... ========= :00403ED0 55 push ebp :00403ED1 8BEC mov ebp, esp :00403ED3 51 push ecx :00403ED4 894DFC mov dword[ebp-04], ecx :00403ED7 8B45FC mov eax, dword[ebp-04] :00403EDA 8B4804 mov ecx, dword[eax+04] :00403EDD 51 push ecx :00403EDE FF1574C04000 call dword[0040C074] ;;call KERNEL32.SetEvent :00403EE4 8BE5 mov esp, ebp :00403EE6 5D pop ebp :00403EE7 C3 ret :00403EE8 CC CC CC CC CC CC CC CC ........ ========= :00403EF0 55 push ebp :00403EF1 8BEC mov ebp, esp :00403EF3 51 push ecx :00403EF4 8B4508 mov eax, dword[ebp+08] :00403EF7 833804 cmp dword[eax], 00000004 :00403EFA 750E jne 00403F0A :00403EFC 8B4D08 mov ecx, dword[ebp+08] :00403EFF C70101000000 mov dword[ecx], 00000001 :00403F05 8B4508 mov eax, dword[ebp+08] :00403F08 EB1C jmp 00403F26 --------- :00403F0A 8B5508 mov edx, dword[ebp+08] :00403F0D 8B02 mov eax, dword[edx] :00403F0F 8945FC mov dword[ebp-04], eax :00403F12 8B4DFC mov ecx, dword[ebp-04] :00403F15 83C101 add ecx, 00000001 :00403F18 894DFC mov dword[ebp-04], ecx :00403F1B 8B5508 mov edx, dword[ebp+08] :00403F1E 8B45FC mov eax, dword[ebp-04] :00403F21 8902 mov dword[edx], eax :00403F23 8B4508 mov eax, dword[ebp+08] --------- :00403F26 8BE5 mov esp, ebp :00403F28 5D pop ebp :00403F29 C3 ret :00403F2A CC CC CC CC CC CC ...... ========= :00403F30 55 push ebp :00403F31 8BEC mov ebp, esp :00403F33 51 push ecx :00403F34 8B4508 mov eax, dword[ebp+08] :00403F37 833801 cmp dword[eax], 00000001 :00403F3A 750E jne 00403F4A :00403F3C 8B4D08 mov ecx, dword[ebp+08] :00403F3F C70104000000 mov dword[ecx], 00000004 :00403F45 8B4508 mov eax, dword[ebp+08] :00403F48 EB1C jmp 00403F66 --------- :00403F4A 8B5508 mov edx, dword[ebp+08] :00403F4D 8B02 mov eax, dword[edx] :00403F4F 8945FC mov dword[ebp-04], eax :00403F52 8B4DFC mov ecx, dword[ebp-04] :00403F55 83E901 sub ecx, 00000001 :00403F58 894DFC mov dword[ebp-04], ecx :00403F5B 8B5508 mov edx, dword[ebp+08] :00403F5E 8B45FC mov eax, dword[ebp-04] :00403F61 8902 mov dword[edx], eax :00403F63 8B4508 mov eax, dword[ebp+08] --------- :00403F66 8BE5 mov esp, ebp :00403F68 5D pop ebp :00403F69 C3 ret :00403F6A CC CC CC CC CC CC ...... ========= :00403F70 55 push ebp :00403F71 8BEC mov ebp, esp :00403F73 51 push ecx :00403F74 C745FC00000000 mov dword[ebp-04], 00000000 :00403F7B 8B4508 mov eax, dword[ebp+08] :00403F7E 50 push eax :00403F7F E8366F0000 call 0040AEBA ;;call MSVCRT.strlen :00403F84 83C404 add esp, 00000004 :00403F87 8945FC mov dword[ebp-04], eax :00403F8A 8B4D08 mov ecx, dword[ebp+08] :00403F8D 33D2 xor edx, edx :00403F8F 8A11 mov dl, byte[ecx] :00403F91 83FA3D cmp edx, 0000003D :00403F94 7534 jne 00403FCA :00403F96 8B4508 mov eax, dword[ebp+08] :00403F99 33C9 xor ecx, ecx :00403F9B 8A4801 mov cl, byte[eax+01] :00403F9E 83F93F cmp ecx, 0000003F :00403FA1 7527 jne 00403FCA :00403FA3 8B5508 mov edx, dword[ebp+08] :00403FA6 0355FC add edx, dword[ebp-04] :00403FA9 33C0 xor eax, eax :00403FAB 8A42FF mov al, byte[edx-01] :00403FAE 83F83D cmp eax, 0000003D :00403FB1 7517 jne 00403FCA :00403FB3 8B4D08 mov ecx, dword[ebp+08] :00403FB6 034DFC add ecx, dword[ebp-04] :00403FB9 33D2 xor edx, edx :00403FBB 8A51FE mov dl, byte[ecx-02] :00403FBE 83FA3F cmp edx, 0000003F :00403FC1 7507 jne 00403FCA :00403FC3 B801000000 mov eax, 00000001 :00403FC8 EB02 jmp 00403FCC --------- :00403FCA 33C0 xor eax, eax --------- :00403FCC 8BE5 mov esp, ebp :00403FCE 5D pop ebp :00403FCF C3 ret ========= :00403FD0 55 push ebp :00403FD1 8BEC mov ebp, esp :00403FD3 6AFF push -00000001 :00403FD5 6828B44000 push 0040B428 :00403FDA 64A100000000 mov eax, dword fs:[00000000] :00403FE0 50 push eax :00403FE1 64892500000000 mov dword fs:[00000000], esp :00403FE8 81EC88000000 sub esp, 00000088 :00403FEE A19CF34000 mov eax, dword[0040F39C] :00403FF3 8945E0 mov dword[ebp-20], eax :00403FF6 8B0DA0F34000 mov ecx, dword[0040F3A0] :00403FFC 894DE4 mov dword[ebp-1C], ecx :00403FFF 8A15A4F34000 mov dl, byte[0040F3A4] :00404005 8855E8 mov byte[ebp-18], dl :00404008 A1A8F34000 mov eax, dword[0040F3A8] :0040400D 8945EC mov dword[ebp-14], eax :00404010 668B0DACF34000 mov cx, word[0040F3AC] :00404017 66894DF0 mov word[ebp-10], cx :0040401B C745DC00000000 mov dword[ebp-24], 00000000 :00404022 8D4DC8 lea ecx, dword[ebp-38] :00404025 E8546B0000 call 0040AB7E :0040402A C745FC00000000 mov dword[ebp-04], 00000000 :00404031 6A00 push 00000000 :00404033 6A20 push 00000020 :00404035 8B5508 mov edx, dword[ebp+08] :00404038 52 push edx :00404039 8D4DC8 lea ecx, dword[ebp-38] :0040403C E8396C0000 call 0040AC7A :00404041 85C0 test eax, eax :00404043 0F84CC020000 je 00404315 :00404049 8D4DC0 lea ecx, dword[ebp-40] :0040404C E8256A0000 call 0040AA76 :00404051 C645FC01 mov byte[ebp-04], 01 :00404055 8D4DBC lea ecx, dword[ebp-44] :00404058 E8196A0000 call 0040AA76 :0040405D C645FC02 mov byte[ebp-04], 02 :00404061 C745C400000000 mov dword[ebp-3C], 00000000 --------- :00404068 8D45C0 lea eax, dword[ebp-40] :0040406B 50 push eax :0040406C 8D4DC8 lea ecx, dword[ebp-38] :0040406F E8006C0000 call 0040AC74 :00404074 85C0 test eax, eax :00404076 0F84BB000000 je 00404137 :0040407C 8D4DC0 lea ecx, dword[ebp-40] :0040407F E8CCFDFFFF call 00403E50 :00404084 83F803 cmp eax, 00000003 :00404087 7D05 jge 0040408E :00404089 E9A9000000 jmp 00404137 --------- :0040408E 8D4DE0 lea ecx, dword[ebp-20] :00404091 51 push ecx :00404092 E8236E0000 call 0040AEBA ;;call MSVCRT.strlen :00404097 83C404 add esp, 00000004 :0040409A 83C001 add eax, 00000001 :0040409D 50 push eax :0040409E 8D559C lea edx, dword[ebp-64] :004040A1 52 push edx :004040A2 8D4DC0 lea ecx, dword[ebp-40] :004040A5 E8C46B0000 call 0040AC6E :004040AA 894588 mov dword[ebp-78], eax :004040AD 8B4588 mov eax, dword[ebp-78] :004040B0 894584 mov dword[ebp-7C], eax :004040B3 C645FC03 mov byte[ebp-04], 03 :004040B7 8B4D84 mov ecx, dword[ebp-7C] :004040BA 51 push ecx :004040BB 8D4DBC lea ecx, dword[ebp-44] :004040BE E8756B0000 call 0040AC38 :004040C3 C645FC02 mov byte[ebp-04], 02 :004040C7 8D4D9C lea ecx, dword[ebp-64] :004040CA E8B3690000 call 0040AA82 :004040CF 8D4DBC lea ecx, dword[ebp-44] :004040D2 E8916B0000 call 0040AC68 :004040D7 8D55E0 lea edx, dword[ebp-20] :004040DA 52 push edx :004040DB 8D4DBC lea ecx, dword[ebp-44] :004040DE E87F6B0000 call 0040AC62 :004040E3 8945C4 mov dword[ebp-3C], eax :004040E6 837DC4FF cmp dword[ebp-3C], -00000001 :004040EA 7446 je 00404132 :004040EC 8D45E0 lea eax, dword[ebp-20] :004040EF 50 push eax :004040F0 E8C56D0000 call 0040AEBA ;;call MSVCRT.strlen :004040F5 83C404 add esp, 00000004 :004040F8 50 push eax :004040F9 8D4D98 lea ecx, dword[ebp-68] :004040FC 51 push ecx :004040FD 8D4DC0 lea ecx, dword[ebp-40] :00404100 E8576B0000 call 0040AC5C :00404105 894580 mov dword[ebp-80], eax :00404108 8B5580 mov edx, dword[ebp-80] :0040410B 89957CFFFFFF mov dword[ebp+FFFFFF7C], edx :00404111 C645FC04 mov byte[ebp-04], 04 :00404115 8B857CFFFFFF mov eax, dword[ebp+FFFFFF7C] :0040411B 50 push eax :0040411C 8B4D0C mov ecx, dword[ebp+0C] :0040411F E8146B0000 call 0040AC38 :00404124 C645FC02 mov byte[ebp-04], 02 :00404128 8D4D98 lea ecx, dword[ebp-68] :0040412B E852690000 call 0040AA82 :00404130 EB05 jmp 00404137 --------- :00404132 E931FFFFFF jmp 00404068 --------- :00404137 8B4D0C mov ecx, dword[ebp+0C] :0040413A E801340000 call 00407540 :0040413F 85C0 test eax, eax :00404141 0F84E9000000 je 00404230 :00404147 8D4DC8 lea ecx, dword[ebp-38] :0040414A E8712B0000 call 00406CC0 --------- :0040414F 8D4DC0 lea ecx, dword[ebp-40] :00404152 51 push ecx :00404153 8D4DC8 lea ecx, dword[ebp-38] :00404156 E8196B0000 call 0040AC74 :0040415B 85C0 test eax, eax :0040415D 0F84CD000000 je 00404230 :00404163 8D4DC0 lea ecx, dword[ebp-40] :00404166 E8E5FCFFFF call 00403E50 :0040416B 83F803 cmp eax, 00000003 :0040416E 7D05 jge 00404175 :00404170 E9BB000000 jmp 00404230 --------- :00404175 8D55EC lea edx, dword[ebp-14] :00404178 52 push edx :00404179 E83C6D0000 call 0040AEBA ;;call MSVCRT.strlen :0040417E 83C404 add esp, 00000004 :00404181 83C001 add eax, 00000001 :00404184 50 push eax :00404185 8D4594 lea eax, dword[ebp-6C] :00404188 50 push eax :00404189 8D4DC0 lea ecx, dword[ebp-40] :0040418C E8DD6A0000 call 0040AC6E :00404191 898578FFFFFF mov dword[ebp+FFFFFF78], eax :00404197 8B8D78FFFFFF mov ecx, dword[ebp+FFFFFF78] :0040419D 898D74FFFFFF mov dword[ebp+FFFFFF74], ecx :004041A3 C645FC05 mov byte[ebp-04], 05 :004041A7 8B9574FFFFFF mov edx, dword[ebp+FFFFFF74] :004041AD 52 push edx :004041AE 8D4DBC lea ecx, dword[ebp-44] :004041B1 E8826A0000 call 0040AC38 :004041B6 C645FC02 mov byte[ebp-04], 02 :004041BA 8D4D94 lea ecx, dword[ebp-6C] :004041BD E8C0680000 call 0040AA82 :004041C2 8D4DBC lea ecx, dword[ebp-44] :004041C5 E89E6A0000 call 0040AC68 :004041CA 8D45EC lea eax, dword[ebp-14] :004041CD 50 push eax :004041CE 8D4DBC lea ecx, dword[ebp-44] :004041D1 E88C6A0000 call 0040AC62 :004041D6 8945C4 mov dword[ebp-3C], eax :004041D9 837DC4FF cmp dword[ebp-3C], -00000001 :004041DD 744C je 0040422B :004041DF 8D4DEC lea ecx, dword[ebp-14] :004041E2 51 push ecx :004041E3 E8D26C0000 call 0040AEBA ;;call MSVCRT.strlen :004041E8 83C404 add esp, 00000004 :004041EB 50 push eax :004041EC 8D5590 lea edx, dword[ebp-70] :004041EF 52 push edx :004041F0 8D4DC0 lea ecx, dword[ebp-40] :004041F3 E8646A0000 call 0040AC5C :004041F8 898570FFFFFF mov dword[ebp+FFFFFF70], eax :004041FE 8B8570FFFFFF mov eax, dword[ebp+FFFFFF70] :00404204 89856CFFFFFF mov dword[ebp+FFFFFF6C], eax :0040420A C645FC06 mov byte[ebp-04], 06 :0040420E 8B8D6CFFFFFF mov ecx, dword[ebp+FFFFFF6C] :00404214 51 push ecx :00404215 8B4D0C mov ecx, dword[ebp+0C] :00404218 E81B6A0000 call 0040AC38 :0040421D C645FC02 mov byte[ebp-04], 02 :00404221 8D4D90 lea ecx, dword[ebp-70] :00404224 E859680000 call 0040AA82 :00404229 EB05 jmp 00404230 --------- :0040422B E91FFFFFFF jmp 0040414F --------- :00404230 8B4D0C mov ecx, dword[ebp+0C] :00404233 E808330000 call 00407540 :00404238 85C0 test eax, eax :0040423A 0F85BD000000 jne 004042FD :00404240 8B15B0F34000 mov edx, dword[0040F3B0] :00404246 8955B4 mov dword[ebp-4C], edx :00404249 A0B4F34000 mov al, byte[0040F3B4] :0040424E 8845B8 mov byte[ebp-48], al :00404251 8D4DB4 lea ecx, dword[ebp-4C] :00404254 51 push ecx :00404255 8B4D0C mov ecx, dword[ebp+0C] :00404258 E8F9690000 call 0040AC56 :0040425D 8D55B4 lea edx, dword[ebp-4C] :00404260 52 push edx :00404261 8B4D0C mov ecx, dword[ebp+0C] :00404264 E8E7690000 call 0040AC50 :00404269 8B4D0C mov ecx, dword[ebp+0C] :0040426C E8EFE9FFFF call 00402C60 :00404271 50 push eax :00404272 E8F9FCFFFF call 00403F70 :00404277 83C404 add esp, 00000004 :0040427A 85C0 test eax, eax :0040427C 7478 je 004042F6 :0040427E 8D4DB0 lea ecx, dword[ebp-50] :00404281 E8F0670000 call 0040AA76 :00404286 C645FC07 mov byte[ebp-04], 07 :0040428A C745A000000000 mov dword[ebp-60], 00000000 :00404291 C645A800 mov byte[ebp-58], 00 :00404295 8B4D0C mov ecx, dword[ebp+0C] :00404298 E8B3FBFFFF call 00403E50 :0040429D D1E0 shl eax, 1 :0040429F 8945A4 mov dword[ebp-5C], eax :004042A2 8B45A4 mov eax, dword[ebp-5C] :004042A5 50 push eax :004042A6 8D4DB0 lea ecx, dword[ebp-50] :004042A9 E89C690000 call 0040AC4A :004042AE 8945AC mov dword[ebp-54], eax :004042B1 6A00 push 00000000 :004042B3 8D4DA8 lea ecx, dword[ebp-58] :004042B6 51 push ecx :004042B7 8D55A0 lea edx, dword[ebp-60] :004042BA 52 push edx :004042BB 8B4D0C mov ecx, dword[ebp+0C] :004042BE E89DE9FFFF call 00402C60 :004042C3 50 push eax :004042C4 8B45A4 mov eax, dword[ebp-5C] :004042C7 50 push eax :004042C8 8B4DAC mov ecx, dword[ebp-54] :004042CB 51 push ecx :004042CC E89FD3FFFF call 00401670 :004042D1 83C418 add esp, 00000018 :004042D4 6AFF push -00000001 :004042D6 8D4DB0 lea ecx, dword[ebp-50] :004042D9 E866690000 call 0040AC44 :004042DE 8D55B0 lea edx, dword[ebp-50] :004042E1 52 push edx :004042E2 8B4D0C mov ecx, dword[ebp+0C] :004042E5 E84E690000 call 0040AC38 :004042EA C645FC02 mov byte[ebp-04], 02 :004042EE 8D4DB0 lea ecx, dword[ebp-50] :004042F1 E88C670000 call 0040AA82 --------- :004042F6 C745DC01000000 mov dword[ebp-24], 00000001 --------- :004042FD C645FC01 mov byte[ebp-04], 01 :00404301 8D4DBC lea ecx, dword[ebp-44] :00404304 E879670000 call 0040AA82 :00404309 C645FC00 mov byte[ebp-04], 00 :0040430D 8D4DC0 lea ecx, dword[ebp-40] :00404310 E86D670000 call 0040AA82 --------- :00404315 8B45DC mov eax, dword[ebp-24] :00404318 89458C mov dword[ebp-74], eax :0040431B C745FCFFFFFFFF mov dword[ebp-04], FFFFFFFF :00404322 8D4DC8 lea ecx, dword[ebp-38] :00404325 E848680000 call 0040AB72 :0040432A 8B458C mov eax, dword[ebp-74] :0040432D 8B4DF4 mov ecx, dword[ebp-0C] :00404330 64890D00000000 mov dword fs:[00000000], ecx :00404337 8BE5 mov esp, ebp :00404339 5D pop ebp :0040433A C3 ret :0040433B CC CC CC CC CC ..... --------- :00404340 55 push ebp :00404341 8BEC mov ebp, esp :00404343 5D pop ebp :00404344 C3 ret :00404345 CC CC CC CC CC CC CC CC CC CC CC ........... ========= :00404350 55 push ebp :00404351 8BEC mov ebp, esp :00404353 6AFF push -00000001 :00404355 6861B44000 push 0040B461 :0040435A 64A100000000 mov eax, dword fs:[00000000] :00404360 50 push eax :00404361 64892500000000 mov dword fs:[00000000], esp :00404368 51 push ecx :00404369 894DF0 mov dword[ebp-10], ecx :0040436C 6800200000 push 00002000 :00404371 8B4DF0 mov ecx, dword[ebp-10] :00404374 E867380000 call 00407BE0 :00404379 C745FC00000000 mov dword[ebp-04], 00000000 :00404380 8B45F0 mov eax, dword[ebp-10] :00404383 C7404400000000 mov dword[eax+44], 00000000 :0040438A 8B4DF0 mov ecx, dword[ebp-10] :0040438D 83C148 add ecx, 00000048 :00404390 E8E1660000 call 0040AA76 :00404395 C645FC01 mov byte[ebp-04], 01 :00404399 8B4DF0 mov ecx, dword[ebp-10] :0040439C 83C14C add ecx, 0000004C :0040439F E8D2660000 call 0040AA76 :004043A4 C645FC02 mov byte[ebp-04], 02 :004043A8 8B4DF0 mov ecx, dword[ebp-10] :004043AB C7415000000000 mov dword[ecx+50], 00000000 :004043B2 8B55F0 mov edx, dword[ebp-10] :004043B5 C7425400000000 mov dword[edx+54], 00000000 :004043BC 8B45F0 mov eax, dword[ebp-10] :004043BF C7405800000000 mov dword[eax+58], 00000000 :004043C6 8B4DF0 mov ecx, dword[ebp-10] :004043C9 C7415C00000000 mov dword[ecx+5C], 00000000 :004043D0 8B55F0 mov edx, dword[ebp-10] :004043D3 C7426000000000 mov dword[edx+60], 00000000 :004043DA 8B45F0 mov eax, dword[ebp-10] :004043DD C7406400000000 mov dword[eax+64], 00000000 :004043E4 8B4DF0 mov ecx, dword[ebp-10] :004043E7 83C168 add ecx, 00000068 :004043EA E851F4FFFF call 00403840 :004043EF 8B4DF0 mov ecx, dword[ebp-10] :004043F2 C781B400000000000000 mov dword[ecx+000000B4], 00000000 :004043FC 8B55F0 mov edx, dword[ebp-10] :004043FF C702A0C74000 mov dword[edx], 0040C7A0 :00404405 C745FCFFFFFFFF mov dword[ebp-04], FFFFFFFF :0040440C 8B45F0 mov eax, dword[ebp-10] :0040440F 8B4DF4 mov ecx, dword[ebp-0C] :00404412 64890D00000000 mov dword fs:[00000000], ecx :00404419 8BE5 mov esp, ebp :0040441B 5D pop ebp :0040441C C3 ret :0040441D CC CC CC ... :00404420 55 push ebp :00404421 8BEC mov ebp, esp :00404423 51 push ecx :00404424 894DFC mov dword[ebp-04], ecx :00404427 6A01 push 00000001 :00404429 8D4508 lea eax, dword[ebp+08] :0040442C 50 push eax :0040442D 8B4DFC mov ecx, dword[ebp-04] :00404430 8B11 mov edx, dword[ecx] :00404432 8B4DFC mov ecx, dword[ebp-04] :00404435 FF5204 call dword[edx+04] :00404438 8BE5 mov esp, ebp :0040443A 5D pop ebp :0040443B C20400 ret 0004 :0040443E CC CC 55 8B EC 51 89 4D FC 8B 45 08 50 E8 6A 6A ..U..Q.M..E.P.jj :0040444E 00 00 83 C4 04 50 8B 4D 08 51 8B 55 FC 8B 02 8B .....P.M.Q.U.... :0040445E 4D FC FF 50 04 8B E5 5D C2 04 00 CC CC CC CC CC M..P...]........ :0040446E CC CC 55 8B EC 51 89 4D FC 8B 4D 08 E8 D1 F9 FF ..U..Q.M..M..... :0040447E FF 50 8B 4D 08 E8 D8 E7 FF FF 50 8B 45 FC 8B 10 .P.M......P.E... :0040448E 8B 4D FC FF 52 04 8B E5 5D C2 04 00 CC CC CC CC .M..R...]....... :0040449E CC CC 55 8B EC 51 89 4D FC 6A 01 8B 45 08 50 8B ..U..Q.M.j..E.P. :004044AE 4D FC 8B 11 8B 4D FC FF 52 20 8B E5 5D C2 04 00 M....M..R ..]... :004044BE CC CC 55 8B EC 51 89 4D FC 8B 4D FC E8 21 00 00 ..U..Q.M..M..!.. :004044CE 00 8B 45 08 83 E0 01 85 C0 74 0C 8B 4D FC 51 E8 ..E......t..M.Q. :004044DE B8 65 00 00 83 C4 04 8B 45 FC 8B E5 5D C2 04 00 .e......E...]... :004044EE CC CC .. ========= :004044F0 55 push ebp :004044F1 8BEC mov ebp, esp :004044F3 6AFF push -00000001 :004044F5 68A6B44000 push 0040B4A6 :004044FA 64A100000000 mov eax, dword fs:[00000000] :00404500 50 push eax :00404501 64892500000000 mov dword fs:[00000000], esp :00404508 83EC24 sub esp, 00000024 :0040450B 894DD0 mov dword[ebp-30], ecx :0040450E 8B45D0 mov eax, dword[ebp-30] :00404511 C700A0C74000 mov dword[eax], 0040C7A0 :00404517 C745FC03000000 mov dword[ebp-04], 00000003 :0040451E 8D4DD4 lea ecx, dword[ebp-2C] :00404521 E80AF2FFFF call 00403730 :00404526 C645FC04 mov byte[ebp-04], 04 :0040452A 8D4DD4 lea ecx, dword[ebp-2C] :0040452D E8CEF2FFFF call 00403800 :00404532 8B4DD0 mov ecx, dword[ebp-30] :00404535 83796000 cmp dword[ecx+60], 00000000 :00404539 741B je 00404556 :0040453B 8B55D0 mov edx, dword[ebp-30] :0040453E 8B4250 mov eax, dword[edx+50] :00404541 50 push eax :00404542 8B0DB00B4100 mov ecx, dword[00410BB0] :00404548 E8B3300000 call 00407600 :0040454D 50 push eax :0040454E E80D500000 call 00409560 :00404553 83C408 add esp, 00000008 --------- :00404556 C645FC03 mov byte[ebp-04], 03 :0040455A 8D4DD4 lea ecx, dword[ebp-2C] :0040455D E84EF2FFFF call 004037B0 :00404562 C645FC02 mov byte[ebp-04], 02 :00404566 8B4DD0 mov ecx, dword[ebp-30] :00404569 83C168 add ecx, 00000068 :0040456C E85FF3FFFF call 004038D0 :00404571 C645FC01 mov byte[ebp-04], 01 :00404575 8B4DD0 mov ecx, dword[ebp-30] :00404578 83C14C add ecx, 0000004C :0040457B E802650000 call 0040AA82 :00404580 C645FC00 mov byte[ebp-04], 00 :00404584 8B4DD0 mov ecx, dword[ebp-30] :00404587 83C148 add ecx, 00000048 :0040458A E8F3640000 call 0040AA82 :0040458F C745FCFFFFFFFF mov dword[ebp-04], FFFFFFFF :00404596 8B4DD0 mov ecx, dword[ebp-30] :00404599 E832370000 call 00407CD0 :0040459E 8B4DF4 mov ecx, dword[ebp-0C] :004045A1 64890D00000000 mov dword fs:[00000000], ecx :004045A8 8BE5 mov esp, ebp :004045AA 5D pop ebp :004045AB C3 ret :004045AC CC CC CC CC .... ========= :004045B0 55 push ebp :004045B1 8BEC mov ebp, esp :004045B3 83EC10 sub esp, 00000010 :004045B6 894DF4 mov dword[ebp-0C], ecx :004045B9 68F4F34000 push 0040F3F4 (StringData)"Poproxy Init" :004045BE 6804F44000 push 0040F404 (StringData)"%s" :004045C3 6AFF push -00000001 :004045C5 E866D0FFFF call 00401630 :004045CA 50 push eax :004045CB E8F0ECFFFF call 004032C0 :004045D0 83C410 add esp, 00000010 :004045D3 8B45F4 mov eax, dword[ebp-0C] :004045D6 C7404400000000 mov dword[eax+44], 00000000 :004045DD 8B4DF4 mov ecx, dword[ebp-0C] :004045E0 C7415800000000 mov dword[ecx+58], 00000000 :004045E7 8B55F4 mov edx, dword[ebp-0C] :004045EA A198F34000 mov eax, dword[0040F398] :004045EF 894250 mov dword[edx+50], eax :004045F2 8B0D98F34000 mov ecx, dword[0040F398] :004045F8 83C101 add ecx, 00000001 :004045FB 890D98F34000 mov dword[0040F398], ecx :00404601 C745FC00000000 mov dword[ebp-04], 00000000 :00404608 FF1528C04000 call dword[0040C028] ;;call EmailCfg.?GetAction@CProxyConfig@@SAKXZ :0040460E 8945FC mov dword[ebp-04], eax :00404611 8B55FC mov edx, dword[ebp-04] :00404614 8955F0 mov dword[ebp-10], edx :00404617 8B45F0 mov eax, dword[ebp-10] :0040461A 83E801 sub eax, 00000001 :0040461D 8945F0 mov dword[ebp-10], eax :00404620 837DF003 cmp dword[ebp-10], 00000003 :00404624 770A ja 00404630 :00404626 8B4DF0 mov ecx, dword[ebp-10] :00404629 FF248DC1464000 jmp dword[4*ecx+004046C1] --------- :00404630 8B55F4 mov edx, dword[ebp-0C] :00404633 C7426403000000 mov dword[edx+64], 00000003 :0040463A EB2E jmp 0040466A --------- :0040463C 8B45F4 mov eax, dword[ebp-0C] :0040463F C7406412020000 mov dword[eax+64], 00000212 :00404646 EB22 jmp 0040466A --------- :00404648 8B4DF4 mov ecx, dword[ebp-0C] :0040464B C7416412000000 mov dword[ecx+64], 00000012 :00404652 EB16 jmp 0040466A --------- :00404654 8B55F4 mov edx, dword[ebp-0C] :00404657 C7426422000000 mov dword[edx+64], 00000022 :0040465E EB0A jmp 0040466A --------- :00404660 8B45F4 mov eax, dword[ebp-0C] :00404663 C7406442000000 mov dword[eax+64], 00000042 --------- :0040466A FF1524C04000 call dword[0040C024] ;;call EmailCfg.?GetTempDisabled@CProxyConfig@@SAHXZ :00404670 8B4DF4 mov ecx, dword[ebp-0C] :00404673 894154 mov dword[ecx+54], eax :00404676 FF1534C04000 call dword[0040C034] ;;call EmailCfg.?GetShowIcon@CProxyConfig@@SAHXZ :0040467C 8B55F4 mov edx, dword[ebp-0C] :0040467F 894260 mov dword[edx+60], eax :00404682 FF1520C04000 call dword[0040C020] ;;call EmailCfg.?GetTimeoutProtection@CProxyConfig@@SAKXZ :00404688 33C9 xor ecx, ecx :0040468A 3BC8 cmp ecx, eax :0040468C 1BD2 sbb edx, edx :0040468E F7DA neg edx :00404690 8B45F4 mov eax, dword[ebp-0C] :00404693 89505C mov dword[eax+5C], edx :00404696 C745F800000000 mov dword[ebp-08], 00000000 :0040469D FF1518C04000 call dword[0040C018] ;;call EmailCfg.?GetProxyTimeoutValue@CProxyConfig@@SAKXZ :004046A3 69C0E8030000 imul eax, 000003E8 :004046A9 8945F8 mov dword[ebp-08], eax :004046AC 8B4DF8 mov ecx, dword[ebp-08] :004046AF 51 push ecx :004046B0 8B4DF4 mov ecx, dword[ebp-0C] :004046B3 E828000000 call 004046E0 :004046B8 B801000000 mov eax, 00000001 :004046BD 8BE5 mov esp, ebp :004046BF 5D pop ebp :004046C0 C3 ret :004046C1 3C464000 DWORD 0040463C ;; " :00404C1A 8D45E0 lea eax, dword[ebp-20] :00404C1D 50 push eax :00404C1E E80F600000 call 0040AC32 :00404C23 83C40C add esp, 0000000C :00404C26 8D4DE0 lea ecx, dword[ebp-20] :00404C29 E822F2FFFF call 00403E50 :00404C2E 898588FDFFFF mov dword[ebp+FFFFFD88], eax :00404C34 8D4DE0 lea ecx, dword[ebp-20] :00404C37 E824E0FFFF call 00402C60 :00404C3C 898584FDFFFF mov dword[ebp+FFFFFD84], eax :00404C42 6A00 push 00000000 :00404C44 8B8D88FDFFFF mov ecx, dword[ebp+FFFFFD88] :00404C4A 51 push ecx :00404C4B 8B9584FDFFFF mov edx, dword[ebp+FFFFFD84] :00404C51 52 push edx :00404C52 8B85FCFDFFFF mov eax, dword[ebp+FFFFFDFC] :00404C58 8B4844 mov ecx, dword[eax+44] :00404C5B E8003A0000 call 00408660 :00404C60 898580FDFFFF mov dword[ebp+FFFFFD80], eax :00404C66 8B8D80FDFFFF mov ecx, dword[ebp+FFFFFD80] :00404C6C 894DEC mov dword[ebp-14], ecx :00404C6F 837DEC00 cmp dword[ebp-14], 00000000 :00404C73 7F46 jg 00404CBB :00404C75 8D9570FEFFFF lea edx, dword[ebp+FFFFFE70] :00404C7B 52 push edx :00404C7C 68B8F54000 push 0040F5B8 (StringData)"CServerSocket::DoUserCommand(), Error in First client Send." :00404C81 8D8D74FEFFFF lea ecx, dword[ebp+FFFFFE74] :00404C87 FF1520C44000 call dword[0040C420] ;;call MSVCP60.??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBDABV?$allocator@D@1@@Z :00404C8D 89857CFDFFFF mov dword[ebp+FFFFFD7C], eax :00404C93 C645FC0E mov byte[ebp-04], 0E :00404C97 8D8574FEFFFF lea eax, dword[ebp+FFFFFE74] :00404C9D 50 push eax :00404C9E 8D8D84FEFFFF lea ecx, dword[ebp+FFFFFE84] :00404CA4 FF151CC44000 call dword[0040C41C] ;;call MSVCP60.??0runtime_error@std@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@1@@Z :00404CAA 68E8D34000 push 0040D3E8 :00404CAF 8D8D84FEFFFF lea ecx, dword[ebp+FFFFFE84] :00404CB5 51 push ecx :00404CB6 E879620000 call 0040AF34 ;;call MSVCRT._CxxThrowException --------- :00404CBB 8D55DC lea edx, dword[ebp-24] :00404CBE 52 push edx :00404CBF 8B85FCFDFFFF mov eax, dword[ebp+FFFFFDFC] :00404CC5 8B4844 mov ecx, dword[eax+44] :00404CC8 8B95FCFDFFFF mov edx, dword[ebp+FFFFFDFC] :00404CCE 8B4244 mov eax, dword[edx+44] :00404CD1 8B10 mov edx, dword[eax] :00404CD3 FF521C call dword[edx+1C] :00404CD6 898578FDFFFF mov dword[ebp+FFFFFD78], eax :00404CDC 8B8578FDFFFF mov eax, dword[ebp+FFFFFD78] :00404CE2 8945EC mov dword[ebp-14], eax :00404CE5 837DEC00 cmp dword[ebp-14], 00000000 :00404CE9 7F46 jg 00404D31 :00404CEB 8D8D40FEFFFF lea ecx, dword[ebp+FFFFFE40] :00404CF1 51 push ecx :00404CF2 68F4F54000 push 0040F5F4 (StringData)"CServerSocket::DoUserCommand(), Error in Second client Receive." :00404CF7 8D8D44FEFFFF lea ecx, dword[ebp+FFFFFE44] :00404CFD FF1520C44000 call dword[0040C420] ;;call MSVCP60.??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBDABV?$allocator@D@1@@Z :00404D03 898574FDFFFF mov dword[ebp+FFFFFD74], eax :00404D09 C645FC0F mov byte[ebp-04], 0F :00404D0D 8D9544FEFFFF lea edx, dword[ebp+FFFFFE44] :00404D13 52 push edx :00404D14 8D8D54FEFFFF lea ecx, dword[ebp+FFFFFE54] :00404D1A FF151CC44000 call dword[0040C41C] ;;call MSVCP60.??0runtime_error@std@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@1@@Z :00404D20 68E8D34000 push 0040D3E8 :00404D25 8D8554FEFFFF lea eax, dword[ebp+FFFFFE54] :00404D2B 50 push eax :00404D2C E803620000 call 0040AF34 ;;call MSVCRT._CxxThrowException --------- :00404D31 E8FAC8FFFF call 00401630 :00404D36 898570FDFFFF mov dword[ebp+FFFFFD70], eax :00404D3C 8B4DDC mov ecx, dword[ebp-24] :00404D3F 51 push ecx :00404D40 6834F64000 push 0040F634 (StringData)"%s" :00404D45 6A01 push 00000001 :00404D47 8B9570FDFFFF mov edx, dword[ebp+FFFFFD70] :00404D4D 52 push edx :00404D4E E86DE5FFFF call 004032C0 :00404D53 83C410 add esp, 00000010 :00404D56 8D45DC lea eax, dword[ebp-24] :00404D59 50 push eax :00404D5A 8B8DFCFDFFFF mov ecx, dword[ebp+FFFFFDFC] :00404D60 E85B300000 call 00407DC0 :00404D65 89856CFDFFFF mov dword[ebp+FFFFFD6C], eax :00404D6B 8B8D6CFDFFFF mov ecx, dword[ebp+FFFFFD6C] :00404D71 894DEC mov dword[ebp-14], ecx :00404D74 837DEC00 cmp dword[ebp-14], 00000000 :00404D78 7F46 jg 00404DC0 :00404D7A 8D9510FEFFFF lea edx, dword[ebp+FFFFFE10] :00404D80 52 push edx :00404D81 6838F64000 push 0040F638 (StringData)"CServerSocket::DoUserCommand(), Error in USER response Send." :00404D86 8D8D14FEFFFF lea ecx, dword[ebp+FFFFFE14] :00404D8C FF1520C44000 call dword[0040C420] ;;call MSVCP60.??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBDABV?$allocator@D@1@@Z :00404D92 898568FDFFFF mov dword[ebp+FFFFFD68], eax :00404D98 C645FC10 mov byte[ebp-04], 10 :00404D9C 8D8514FEFFFF lea eax, dword[ebp+FFFFFE14] :00404DA2 50 push eax :00404DA3 8D8D24FEFFFF lea ecx, dword[ebp+FFFFFE24] :00404DA9 FF151CC44000 call dword[0040C41C] ;;call MSVCP60.??0runtime_error@std@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@1@@Z :00404DAF 68E8D34000 push 0040D3E8 :00404DB4 8D8D24FEFFFF lea ecx, dword[ebp+FFFFFE24] :00404DBA 51 push ecx :00404DBB E874610000 call 0040AF34 ;;call MSVCRT._CxxThrowException --------- :00404DC0 C745E801000000 mov dword[ebp-18], 00000001 :00404DC7 C645FC0A mov byte[ebp-04], 0A :00404DCB 8D4DE0 lea ecx, dword[ebp-20] :00404DCE E8AF5C0000 call 0040AA82 :00404DD3 C645FC02 mov byte[ebp-04], 02 :00404DD7 8D4DDC lea ecx, dword[ebp-24] :00404DDA E8A35C0000 call 0040AA82 :00404DDF C645FC00 mov byte[ebp-04], 00 :00404DE3 8D4DD8 lea ecx, dword[ebp-28] :00404DE6 E8975C0000 call 0040AA82 :00404DEB E909010000 jmp 00404EF9 :00404DF0 8B4DD4 mov ecx, dword[ebp-2C] :00404DF3 8B55D4 mov edx, dword[ebp-2C] :00404DF6 8B02 mov eax, dword[edx] :00404DF8 FF5004 call dword[eax+04] :00404DFB 50 push eax :00404DFC 6878F64000 push 0040F678 (StringData)"%s" :00404E01 6AFF push -00000001 :00404E03 E828C8FFFF call 00401630 :00404E08 50 push eax :00404E09 E8B2E4FFFF call 004032C0 :00404E0E 83C410 add esp, 00000010 :00404E11 8B8DFCFDFFFF mov ecx, dword[ebp+FFFFFDFC] :00404E17 83794400 cmp dword[ecx+44], 00000000 :00404E1B 7455 je 00404E72 :00404E1D 8B95FCFDFFFF mov edx, dword[ebp+FFFFFDFC] :00404E23 8B4244 mov eax, dword[edx+44] :00404E26 898508FEFFFF mov dword[ebp+FFFFFE08], eax :00404E2C 8B8D08FEFFFF mov ecx, dword[ebp+FFFFFE08] :00404E32 898D0CFEFFFF mov dword[ebp+FFFFFE0C], ecx :00404E38 83BD0CFEFFFF00 cmp dword[ebp+FFFFFE0C], 00000000 :00404E3F 741A je 00404E5B :00404E41 6A01 push 00000001 :00404E43 8B8D0CFEFFFF mov ecx, dword[ebp+FFFFFE0C] :00404E49 8B950CFEFFFF mov edx, dword[ebp+FFFFFE0C] :00404E4F 8B02 mov eax, dword[edx] :00404E51 FF10 call dword[eax] :00404E53 898564FDFFFF mov dword[ebp+FFFFFD64], eax :00404E59 EB0A jmp 00404E65 --------- :00404E5B C78564FDFFFF00000000 mov dword[ebp+FFFFFD64], 00000000 --------- :00404E65 8B8DFCFDFFFF mov ecx, dword[ebp+FFFFFDFC] :00404E6B C7414400000000 mov dword[ecx+44], 00000000 --------- :00404E72 B8F94E4000 mov eax, 00404EF9 :00404E77 C3 ret :00404E78 68 h :00404E79 7CF64000 DWORD 0040F67C ;; |.@. :00404E7D 68 h :00404E7E BCF64000 DWORD 0040F6BC ;; ..@. :00404E82 6A FF E8 A7 C7 FF FF 50 E8 31 E4 FF FF 83 C4 10 j......P.1...... :00404E92 8B 95 FC FD FF FF 83 7A 44 00 74 55 8B 85 FC FD .......zD.tU.... :00404EA2 FF FF 8B 48 44 89 8D 00 FE FF FF 8B 95 00 FE FF ...HD........... :00404EB2 FF 89 95 04 FE FF FF 83 BD 04 FE FF FF 00 74 1A ..............t. :00404EC2 6A 01 8B 8D 04 FE FF FF 8B 85 04 FE FF FF 8B 10 j............... :00404ED2 FF 12 89 85 60 FD FF FF EB 0A C7 85 60 FD FF FF ....`.......`... :00404EE2 00 00 00 00 8B 85 FC FD FF FF C7 40 44 00 00 00 ...........@D... :00404EF2 00 B8 .. :00404EF4 F94E4000 DWORD 00404EF9 ;; .N@. :00404EF8 C3 . --------- :00404EF9 C745FCFFFFFFFF mov dword[ebp-04], FFFFFFFF :00404F00 8B45E8 mov eax, dword[ebp-18] :00404F03 8B4DF4 mov ecx, dword[ebp-0C] :00404F06 64890D00000000 mov dword fs:[00000000], ecx :00404F0D 5F pop edi :00404F0E 5E pop esi :00404F0F 5B pop ebx :00404F10 8BE5 mov esp, ebp :00404F12 5D pop ebp :00404F13 C20400 ret 0004 :00404F16 CC CC CC CC CC CC CC CC CC CC .......... ========= :00404F20 55 push ebp :00404F21 8BEC mov ebp, esp :00404F23 6AFF push -00000001 :00404F25 68ADB54000 push 0040B5AD :00404F2A 64A100000000 mov eax, dword fs:[00000000] :00404F30 50 push eax :00404F31 64892500000000 mov dword fs:[00000000], esp :00404F38 83EC48 sub esp, 00000048 :00404F3B 8B4508 mov eax, dword[ebp+08] :00404F3E 50 push eax :00404F3F 8D4DE4 lea ecx, dword[ebp-1C] :00404F42 E8795C0000 call 0040ABC0 :00404F47 C745FC00000000 mov dword[ebp-04], 00000000 :00404F4E 8B0DC0F64000 mov ecx, dword[0040F6C0] :00404F54 894DE8 mov dword[ebp-18], ecx :00404F57 8A15C4F64000 mov dl, byte[0040F6C4] :00404F5D 8855EC mov byte[ebp-14], dl :00404F60 C745F000000000 mov dword[ebp-10], 00000000 :00404F67 6A2F push 0000002F :00404F69 8D4DE4 lea ecx, dword[ebp-1C] :00404F6C E8215D0000 call 0040AC92 :00404F71 8945F0 mov dword[ebp-10], eax :00404F74 837DF0FF cmp dword[ebp-10], -00000001 :00404F78 750D jne 00404F87 :00404F7A 6A5C push 0000005C :00404F7C 8D4DE4 lea ecx, dword[ebp-1C] :00404F7F E80E5D0000 call 0040AC92 :00404F84 8945F0 mov dword[ebp-10], eax --------- :00404F87 837DF000 cmp dword[ebp-10], 00000000 :00404F8B 0F8E23010000 jle 004050B4 :00404F91 8B45F0 mov eax, dword[ebp-10] :00404F94 50 push eax :00404F95 8D4DDC lea ecx, dword[ebp-24] :00404F98 51 push ecx :00404F99 8D4DE4 lea ecx, dword[ebp-1C] :00404F9C E8CD5C0000 call 0040AC6E :00404FA1 8945C8 mov dword[ebp-38], eax :00404FA4 8B55C8 mov edx, dword[ebp-38] :00404FA7 8955C4 mov dword[ebp-3C], edx :00404FAA C645FC01 mov byte[ebp-04], 01 :00404FAE 8B45C4 mov eax, dword[ebp-3C] :00404FB1 50 push eax :00404FB2 8B4D0C mov ecx, dword[ebp+0C] :00404FB5 E87E5C0000 call 0040AC38 :00404FBA C645FC00 mov byte[ebp-04], 00 :00404FBE 8D4DDC lea ecx, dword[ebp-24] :00404FC1 E8BC5A0000 call 0040AA82 :00404FC6 C745E000000000 mov dword[ebp-20], 00000000 :00404FCD 8B4DF0 mov ecx, dword[ebp-10] :00404FD0 51 push ecx :00404FD1 6A3A push 0000003A :00404FD3 8D4DE4 lea ecx, dword[ebp-1C] :00404FD6 E8B15C0000 call 0040AC8C :00404FDB 8945E0 mov dword[ebp-20], eax :00404FDE 837DE000 cmp dword[ebp-20], 00000000 :00404FE2 0F8E88000000 jle 00405070 :00404FE8 8B55E0 mov edx, dword[ebp-20] :00404FEB 2B55F0 sub edx, dword[ebp-10] :00404FEE 83EA01 sub edx, 00000001 :00404FF1 52 push edx :00404FF2 8B45F0 mov eax, dword[ebp-10] :00404FF5 83C001 add eax, 00000001 :00404FF8 50 push eax :00404FF9 8D4DD8 lea ecx, dword[ebp-28] :00404FFC 51 push ecx :00404FFD 8D4DE4 lea ecx, dword[ebp-1C] :00405000 E8815C0000 call 0040AC86 :00405005 8945C0 mov dword[ebp-40], eax :00405008 8B55C0 mov edx, dword[ebp-40] :0040500B 8955BC mov dword[ebp-44], edx :0040500E C645FC02 mov byte[ebp-04], 02 :00405012 8B45BC mov eax, dword[ebp-44] :00405015 50 push eax :00405016 8B4D10 mov ecx, dword[ebp+10] :00405019 E81A5C0000 call 0040AC38 :0040501E C645FC00 mov byte[ebp-04], 00 :00405022 8D4DD8 lea ecx, dword[ebp-28] :00405025 E8585A0000 call 0040AA82 :0040502A 8B4DE0 mov ecx, dword[ebp-20] :0040502D 83C101 add ecx, 00000001 :00405030 51 push ecx :00405031 8D55D4 lea edx, dword[ebp-2C] :00405034 52 push edx :00405035 8D4DE4 lea ecx, dword[ebp-1C] :00405038 E81F5C0000 call 0040AC5C :0040503D 8945B8 mov dword[ebp-48], eax :00405040 8B45B8 mov eax, dword[ebp-48] :00405043 8945B4 mov dword[ebp-4C], eax :00405046 C645FC03 mov byte[ebp-04], 03 :0040504A 8B4DB4 mov ecx, dword[ebp-4C] :0040504D 51 push ecx :0040504E 8B4D14 mov ecx, dword[ebp+14] :00405051 E8E25B0000 call 0040AC38 :00405056 C645FC00 mov byte[ebp-04], 00 :0040505A 8D4DD4 lea ecx, dword[ebp-2C] :0040505D E8205A0000 call 0040AA82 :00405062 8D55E8 lea edx, dword[ebp-18] :00405065 52 push edx :00405066 8B4D14 mov ecx, dword[ebp+14] :00405069 E8E85B0000 call 0040AC56 :0040506E EB38 jmp 004050A8 --------- :00405070 8B45F0 mov eax, dword[ebp-10] :00405073 83C001 add eax, 00000001 :00405076 50 push eax :00405077 8D4DD0 lea ecx, dword[ebp-30] :0040507A 51 push ecx :0040507B 8D4DE4 lea ecx, dword[ebp-1C] :0040507E E8D95B0000 call 0040AC5C :00405083 8945B0 mov dword[ebp-50], eax :00405086 8B55B0 mov edx, dword[ebp-50] :00405089 8955AC mov dword[ebp-54], edx :0040508C C645FC04 mov byte[ebp-04], 04 :00405090 8B45AC mov eax, dword[ebp-54] :00405093 50 push eax :00405094 8B4D10 mov ecx, dword[ebp+10] :00405097 E89C5B0000 call 0040AC38 :0040509C C645FC00 mov byte[ebp-04], 00 :004050A0 8D4DD0 lea ecx, dword[ebp-30] :004050A3 E8DA590000 call 0040AA82 --------- :004050A8 8D4DE8 lea ecx, dword[ebp-18] :004050AB 51 push ecx :004050AC 8B4D10 mov ecx, dword[ebp+10] :004050AF E8A25B0000 call 0040AC56 --------- :004050B4 33D2 xor edx, edx :004050B6 837DF000 cmp dword[ebp-10], 00000000 :004050BA 0F9FC2 setg dl :004050BD 8955CC mov dword[ebp-34], edx :004050C0 C745FCFFFFFFFF mov dword[ebp-04], FFFFFFFF :004050C7 8D4DE4 lea ecx, dword[ebp-1C] :004050CA E8B3590000 call 0040AA82 :004050CF 8B45CC mov eax, dword[ebp-34] :004050D2 8B4DF4 mov ecx, dword[ebp-0C] :004050D5 64890D00000000 mov dword fs:[00000000], ecx :004050DC 8BE5 mov esp, ebp :004050DE 5D pop ebp :004050DF C3 ret ========= :004050E0 55 push ebp :004050E1 8BEC mov ebp, esp :004050E3 6AFF push -00000001 :004050E5 6811B64000 push 0040B611 :004050EA 64A100000000 mov eax, dword fs:[00000000] :004050F0 50 push eax :004050F1 64892500000000 mov dword fs:[00000000], esp :004050F8 51 push ecx :004050F9 81EC80010000 sub esp, 00000180 :004050FF 53 push ebx :00405100 56 push esi :00405101 57 push edi :00405102 8965F0 mov dword[ebp-10], esp :00405105 898DB4FEFFFF mov dword[ebp+FFFFFEB4], ecx :0040510B C745E800000000 mov dword[ebp-18], 00000000 :00405112 C745EC00000000 mov dword[ebp-14], 00000000 :00405119 C745FC00000000 mov dword[ebp-04], 00000000 :00405120 8B8DB4FEFFFF mov ecx, dword[ebp+FFFFFEB4] :00405126 E835050000 call 00405660 :0040512B 8985B0FEFFFF mov dword[ebp+FFFFFEB0], eax :00405131 83BDB0FEFFFF00 cmp dword[ebp+FFFFFEB0], 00000000 :00405138 7537 jne 00405171 :0040513A 8D45B0 lea eax, dword[ebp-50] :0040513D 50 push eax :0040513E 68C8F64000 push 0040F6C8 (StringData)"CServerSocket::ForwardData(), Client socket not open" :00405143 8D4DB4 lea ecx, dword[ebp-4C] :00405146 FF1520C44000 call dword[0040C420] ;;call MSVCP60.??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBDABV?$allocator@D@1@@Z :0040514C 8985ACFEFFFF mov dword[ebp+FFFFFEAC], eax :00405152 C645FC01 mov byte[ebp-04], 01 :00405156 8D4DB4 lea ecx, dword[ebp-4C] :00405159 51 push ecx :0040515A 8D4DC4 lea ecx, dword[ebp-3C] :0040515D FF151CC44000 call dword[0040C41C] ;;call MSVCP60.??0runtime_error@std@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@1@@Z :00405163 68E8D34000 push 0040D3E8 :00405168 8D55C4 lea edx, dword[ebp-3C] :0040516B 52 push edx :0040516C E8C35D0000 call 0040AF34 ;;call MSVCRT._CxxThrowException --------- :00405171 8B4508 mov eax, dword[ebp+08] :00405174 50 push eax :00405175 8B8DB4FEFFFF mov ecx, dword[ebp+FFFFFEB4] :0040517B 8B4944 mov ecx, dword[ecx+44] :0040517E E83D2C0000 call 00407DC0 :00405183 8985A8FEFFFF mov dword[ebp+FFFFFEA8], eax :00405189 8B95A8FEFFFF mov edx, dword[ebp+FFFFFEA8] :0040518F 8955EC mov dword[ebp-14], edx :00405192 837DEC00 cmp dword[ebp-14], 00000000 :00405196 7F37 jg 004051CF :00405198 8D4580 lea eax, dword[ebp-80] :0040519B 50 push eax :0040519C 6800F74000 push 0040F700 (StringData)"CServerSocket::ForwardData(), Error in Client Send." :004051A1 8D4D84 lea ecx, dword[ebp-7C] :004051A4 FF1520C44000 call dword[0040C420] ;;call MSVCP60.??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBDABV?$allocator@D@1@@Z :004051AA 8985A4FEFFFF mov dword[ebp+FFFFFEA4], eax :004051B0 C645FC02 mov byte[ebp-04], 02 :004051B4 8D4D84 lea ecx, dword[ebp-7C] :004051B7 51 push ecx :004051B8 8D4D94 lea ecx, dword[ebp-6C] :004051BB FF151CC44000 call dword[0040C41C] ;;call MSVCP60.??0runtime_error@std@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@1@@Z :004051C1 68E8D34000 push 0040D3E8 :004051C6 8D5594 lea edx, dword[ebp-6C] :004051C9 52 push edx :004051CA E8655D0000 call 0040AF34 ;;call MSVCRT._CxxThrowException --------- :004051CF 8D4DE4 lea ecx, dword[ebp-1C] :004051D2 E89F580000 call 0040AA76 :004051D7 8985A0FEFFFF mov dword[ebp+FFFFFEA0], eax :004051DD C645FC03 mov byte[ebp-04], 03 :004051E1 8D45E4 lea eax, dword[ebp-1C] :004051E4 50 push eax :004051E5 8B8DB4FEFFFF mov ecx, dword[ebp+FFFFFEB4] :004051EB 8B4944 mov ecx, dword[ecx+44] :004051EE 8B95B4FEFFFF mov edx, dword[ebp+FFFFFEB4] :004051F4 8B4244 mov eax, dword[edx+44] :004051F7 8B10 mov edx, dword[eax] :004051F9 FF521C call dword[edx+1C] :004051FC 89859CFEFFFF mov dword[ebp+FFFFFE9C], eax :00405202 8B859CFEFFFF mov eax, dword[ebp+FFFFFE9C] :00405208 8945EC mov dword[ebp-14], eax :0040520B 837DEC00 cmp dword[ebp-14], 00000000 :0040520F 7F46 jg 00405257 :00405211 8D8D50FFFFFF lea ecx, dword[ebp+FFFFFF50] :00405217 51 push ecx :00405218 6834F74000 push 0040F734 (StringData)"CServerSocket::ForwardData(), Error in Client Receive." :0040521D 8D8D54FFFFFF lea ecx, dword[ebp+FFFFFF54] :00405223 FF1520C44000 call dword[0040C420] ;;call MSVCP60.??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBDABV?$allocator@D@1@@Z :00405229 898598FEFFFF mov dword[ebp+FFFFFE98], eax :0040522F C645FC04 mov byte[ebp-04], 04 :00405233 8D9554FFFFFF lea edx, dword[ebp+FFFFFF54] :00405239 52 push edx :0040523A 8D8D64FFFFFF lea ecx, dword[ebp+FFFFFF64] :00405240 FF151CC44000 call dword[0040C41C] ;;call MSVCP60.??0runtime_error@std@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@1@@Z :00405246 68E8D34000 push 0040D3E8 :0040524B 8D8564FFFFFF lea eax, dword[ebp+FFFFFF64] :00405251 50 push eax :00405252 E8DD5C0000 call 0040AF34 ;;call MSVCRT._CxxThrowException --------- :00405257 E8D4C3FFFF call 00401630 :0040525C 898594FEFFFF mov dword[ebp+FFFFFE94], eax :00405262 8B4DE4 mov ecx, dword[ebp-1C] :00405265 51 push ecx :00405266 686CF74000 push 0040F76C (StringData)"%s" :0040526B 6A01 push 00000001 :0040526D 8B9594FEFFFF mov edx, dword[ebp+FFFFFE94] :00405273 52 push edx :00405274 E847E0FFFF call 004032C0 :00405279 83C410 add esp, 00000010 :0040527C 8D45E4 lea eax, dword[ebp-1C] :0040527F 50 push eax :00405280 8B8DB4FEFFFF mov ecx, dword[ebp+FFFFFEB4] :00405286 E8352B0000 call 00407DC0 :0040528B 898590FEFFFF mov dword[ebp+FFFFFE90], eax :00405291 8B8D90FEFFFF mov ecx, dword[ebp+FFFFFE90] :00405297 894DEC mov dword[ebp-14], ecx :0040529A 837DEC00 cmp dword[ebp-14], 00000000 :0040529E 7F46 jg 004052E6 :004052A0 8D9520FFFFFF lea edx, dword[ebp+FFFFFF20] :004052A6 52 push edx :004052A7 6870F74000 push 0040F770 (StringData)"CServerSocket::ForwardData(), Error in Command response Send." :004052AC 8D8D24FFFFFF lea ecx, dword[ebp+FFFFFF24] :004052B2 FF1520C44000 call dword[0040C420] ;;call MSVCP60.??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBDABV?$allocator@D@1@@Z :004052B8 89858CFEFFFF mov dword[ebp+FFFFFE8C], eax :004052BE C645FC05 mov byte[ebp-04], 05 :004052C2 8D8524FFFFFF lea eax, dword[ebp+FFFFFF24] :004052C8 50 push eax :004052C9 8D8D34FFFFFF lea ecx, dword[ebp+FFFFFF34] :004052CF FF151CC44000 call dword[0040C41C] ;;call MSVCP60.??0runtime_error@std@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@1@@Z :004052D5 68E8D34000 push 0040D3E8 :004052DA 8D8D34FFFFFF lea ecx, dword[ebp+FFFFFF34] :004052E0 51 push ecx :004052E1 E84E5C0000 call 0040AF34 ;;call MSVCRT._CxxThrowException --------- :004052E6 8B95B4FEFFFF mov edx, dword[ebp+FFFFFEB4] :004052EC 8B4A44 mov ecx, dword[edx+44] :004052EF E8DC2F0000 call 004082D0 :004052F4 888588FEFFFF mov byte[ebp+FFFFFE88], al :004052FA 8B8588FEFFFF mov eax, dword[ebp+FFFFFE88] :00405300 25FF000000 and eax, 000000FF :00405305 85C0 test eax, eax :00405307 0F850A010000 jne 00405417 :0040530D 8D4DE4 lea ecx, dword[ebp-1C] :00405310 51 push ecx :00405311 8B95B4FEFFFF mov edx, dword[ebp+FFFFFEB4] :00405317 8B4A44 mov ecx, dword[edx+44] :0040531A 8B85B4FEFFFF mov eax, dword[ebp+FFFFFEB4] :00405320 8B5044 mov edx, dword[eax+44] :00405323 8B02 mov eax, dword[edx] :00405325 FF501C call dword[eax+1C] :00405328 898584FEFFFF mov dword[ebp+FFFFFE84], eax :0040532E 8B8D84FEFFFF mov ecx, dword[ebp+FFFFFE84] :00405334 894DEC mov dword[ebp-14], ecx :00405337 837DEC00 cmp dword[ebp-14], 00000000 :0040533B 7F46 jg 00405383 :0040533D 8D95F0FEFFFF lea edx, dword[ebp+FFFFFEF0] :00405343 52 push edx :00405344 68B0F74000 push 0040F7B0 (StringData)"CServerSocket::ForwardData(), Error in Command response Send." :00405349 8D8DF4FEFFFF lea ecx, dword[ebp+FFFFFEF4] :0040534F FF1520C44000 call dword[0040C420] ;;call MSVCP60.??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBDABV?$allocator@D@1@@Z :00405355 898580FEFFFF mov dword[ebp+FFFFFE80], eax :0040535B C645FC06 mov byte[ebp-04], 06 :0040535F 8D85F4FEFFFF lea eax, dword[ebp+FFFFFEF4] :00405365 50 push eax :00405366 8D8D04FFFFFF lea ecx, dword[ebp+FFFFFF04] :0040536C FF151CC44000 call dword[0040C41C] ;;call MSVCP60.??0runtime_error@std@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@1@@Z :00405372 68E8D34000 push 0040D3E8 :00405377 8D8D04FFFFFF lea ecx, dword[ebp+FFFFFF04] :0040537D 51 push ecx :0040537E E8B15B0000 call 0040AF34 ;;call MSVCRT._CxxThrowException --------- :00405383 E8A8C2FFFF call 00401630 :00405388 89857CFEFFFF mov dword[ebp+FFFFFE7C], eax :0040538E 8B55E4 mov edx, dword[ebp-1C] :00405391 52 push edx :00405392 68F0F74000 push 0040F7F0 (StringData)"%s" :00405397 6A01 push 00000001 :00405399 8B857CFEFFFF mov eax, dword[ebp+FFFFFE7C] :0040539F 50 push eax :004053A0 E81BDFFFFF call 004032C0 :004053A5 83C410 add esp, 00000010 :004053A8 8D4DE4 lea ecx, dword[ebp-1C] :004053AB 51 push ecx :004053AC 8B8DB4FEFFFF mov ecx, dword[ebp+FFFFFEB4] :004053B2 E8092A0000 call 00407DC0 :004053B7 898578FEFFFF mov dword[ebp+FFFFFE78], eax :004053BD 8B9578FEFFFF mov edx, dword[ebp+FFFFFE78] :004053C3 8955EC mov dword[ebp-14], edx :004053C6 837DEC00 cmp dword[ebp-14], 00000000 :004053CA 7F46 jg 00405412 :004053CC 8D85C0FEFFFF lea eax, dword[ebp+FFFFFEC0] :004053D2 50 push eax :004053D3 68F4F74000 push 0040F7F4 (StringData)"CServerSocket::ForwardData(), Error in Command response Send." :004053D8 8D8DC4FEFFFF lea ecx, dword[ebp+FFFFFEC4] :004053DE FF1520C44000 call dword[0040C420] ;;call MSVCP60.??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBDABV?$allocator@D@1@@Z :004053E4 898574FEFFFF mov dword[ebp+FFFFFE74], eax :004053EA C645FC07 mov byte[ebp-04], 07 :004053EE 8D8DC4FEFFFF lea ecx, dword[ebp+FFFFFEC4] :004053F4 51 push ecx :004053F5 8D8DD4FEFFFF lea ecx, dword[ebp+FFFFFED4] :004053FB FF151CC44000 call dword[0040C41C] ;;call MSVCP60.??0runtime_error@std@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@1@@Z :00405401 68E8D34000 push 0040D3E8 :00405406 8D95D4FEFFFF lea edx, dword[ebp+FFFFFED4] :0040540C 52 push edx :0040540D E8225B0000 call 0040AF34 ;;call MSVCRT._CxxThrowException --------- :00405412 E9CFFEFFFF jmp 004052E6 --------- :00405417 C745E801000000 mov dword[ebp-18], 00000001 :0040541E C645FC00 mov byte[ebp-04], 00 :00405422 8D4DE4 lea ecx, dword[ebp-1C] :00405425 E858560000 call 0040AA82 :0040542A E9A8000000 jmp 004054D7 :0040542F 8B4DE0 mov ecx, dword[ebp-20] :00405432 8B45E0 mov eax, dword[ebp-20] :00405435 8B10 mov edx, dword[eax] :00405437 FF5204 call dword[edx+04] :0040543A 50 push eax :0040543B 6834F84000 push 0040F834 (StringData)"%s" :00405440 6AFF push -00000001 :00405442 E8E9C1FFFF call 00401630 :00405447 50 push eax :00405448 E873DEFFFF call 004032C0 :0040544D 83C410 add esp, 00000010 :00405450 8B85B4FEFFFF mov eax, dword[ebp+FFFFFEB4] :00405456 83784400 cmp dword[eax+44], 00000000 :0040545A 7455 je 004054B1 :0040545C 8B8DB4FEFFFF mov ecx, dword[ebp+FFFFFEB4] :00405462 8B5144 mov edx, dword[ecx+44] :00405465 8995B8FEFFFF mov dword[ebp+FFFFFEB8], edx :0040546B 8B85B8FEFFFF mov eax, dword[ebp+FFFFFEB8] :00405471 8985BCFEFFFF mov dword[ebp+FFFFFEBC], eax :00405477 83BDBCFEFFFF00 cmp dword[ebp+FFFFFEBC], 00000000 :0040547E 741A je 0040549A :00405480 6A01 push 00000001 :00405482 8B8DBCFEFFFF mov ecx, dword[ebp+FFFFFEBC] :00405488 8B95BCFEFFFF mov edx, dword[ebp+FFFFFEBC] :0040548E 8B02 mov eax, dword[edx] :00405490 FF10 call dword[eax] :00405492 898570FEFFFF mov dword[ebp+FFFFFE70], eax :00405498 EB0A jmp 004054A4 --------- :0040549A C78570FEFFFF00000000 mov dword[ebp+FFFFFE70], 00000000 --------- :004054A4 8B8DB4FEFFFF mov ecx, dword[ebp+FFFFFEB4] :004054AA C7414400000000 mov dword[ecx+44], 00000000 --------- :004054B1 B8D7544000 mov eax, 004054D7 :004054B6 C3 ret :004054B7 68 h :004054B8 38F84000 DWORD 0040F838 ;; 8.@. :004054BC 68 h :004054BD 74F84000 DWORD 0040F874 ;; t.@. :004054C1 6A FF E8 68 C1 FF FF 50 E8 F2 DD FF FF 83 C4 10 j..h...P........ :004054D1 B8 . :004054D2 D7544000 DWORD 004054D7 ;; .T@. :004054D6 C3 . --------- :004054D7 C745FCFFFFFFFF mov dword[ebp-04], FFFFFFFF :004054DE 8B45E8 mov eax, dword[ebp-18] :004054E1 8B4DF4 mov ecx, dword[ebp-0C] :004054E4 64890D00000000 mov dword fs:[00000000], ecx :004054EB 5F pop edi :004054EC 5E pop esi :004054ED 5B pop ebx :004054EE 8BE5 mov esp, ebp :004054F0 5D pop ebp :004054F1 C20400 ret 0004 :004054F4 CC CC CC CC CC CC CC CC CC CC CC CC ............ ========= :00405500 55 push ebp :00405501 8BEC mov ebp, esp :00405503 6AFF push -00000001 :00405505 6820B64000 push 0040B620 :0040550A 64A100000000 mov eax, dword fs:[00000000] :00405510 50 push eax :00405511 64892500000000 mov dword fs:[00000000], esp :00405518 51 push ecx :00405519 83EC24 sub esp, 00000024 :0040551C 53 push ebx :0040551D 56 push esi :0040551E 57 push edi :0040551F 8965F0 mov dword[ebp-10], esp :00405522 894DE4 mov dword[ebp-1C], ecx :00405525 C745FC00000000 mov dword[ebp-04], 00000000 :0040552C 8B45E4 mov eax, dword[ebp-1C] :0040552F 83785800 cmp dword[eax+58], 00000000 :00405533 7407 je 0040553C :00405535 33C0 xor eax, eax :00405537 E903010000 jmp 0040563F --------- :0040553C 8B4DE4 mov ecx, dword[ebp-1C] :0040553F C7415801000000 mov dword[ecx+58], 00000001 :00405546 8B55E4 mov edx, dword[ebp-1C] :00405549 837A6000 cmp dword[edx+60], 00000000 :0040554D 7447 je 00405596 :0040554F E8DCC0FFFF call 00401630 :00405554 8945E0 mov dword[ebp-20], eax :00405557 8B45E0 mov eax, dword[ebp-20] :0040555A 8945DC mov dword[ebp-24], eax :0040555D 8B4DDC mov ecx, dword[ebp-24] :00405560 8B55DC mov edx, dword[ebp-24] :00405563 8B02 mov eax, dword[edx] :00405565 FF507C call dword[eax+7C] :00405568 8945D8 mov dword[ebp-28], eax :0040556B 8B4DD8 mov ecx, dword[ebp-28] :0040556E E88D200000 call 00407600 :00405573 8945D4 mov dword[ebp-2C], eax :00405576 8B4DE4 mov ecx, dword[ebp-1C] :00405579 8B5150 mov edx, dword[ecx+50] :0040557C 52 push edx :0040557D 8B45D4 mov eax, dword[ebp-2C] :00405580 50 push eax :00405581 E8DA3F0000 call 00409560 :00405586 83C408 add esp, 00000008 :00405589 8B4DE4 mov ecx, dword[ebp-1C] :0040558C C781B400000000000000 mov dword[ecx+000000B4], 00000000 --------- :00405596 68F4010000 push 000001F4 :0040559B FF15ACC04000 call dword[0040C0AC] ;;call KERNEL32.Sleep :004055A1 837D0800 cmp dword[ebp+08], 00000000 :004055A5 740B je 004055B2 :004055A7 8B4DE4 mov ecx, dword[ebp-1C] :004055AA 8B55E4 mov edx, dword[ebp-1C] :004055AD 8B02 mov eax, dword[edx] :004055AF FF5018 call dword[eax+18] --------- :004055B2 8B4DE4 mov ecx, dword[ebp-1C] :004055B5 83794400 cmp dword[ecx+44], 00000000 :004055B9 744E je 00405609 :004055BB 8B55E4 mov edx, dword[ebp-1C] :004055BE 8B4A44 mov ecx, dword[edx+44] :004055C1 8B45E4 mov eax, dword[ebp-1C] :004055C4 8B5044 mov edx, dword[eax+44] :004055C7 8B02 mov eax, dword[edx] :004055C9 FF5018 call dword[eax+18] :004055CC 8B4DE4 mov ecx, dword[ebp-1C] :004055CF 8B5144 mov edx, dword[ecx+44] :004055D2 8955E8 mov dword[ebp-18], edx :004055D5 8B45E8 mov eax, dword[ebp-18] :004055D8 8945EC mov dword[ebp-14], eax :004055DB 837DEC00 cmp dword[ebp-14], 00000000 :004055DF 7417 je 004055F8 :004055E1 6A01 push 00000001 :004055E3 8B4DEC mov ecx, dword[ebp-14] :004055E6 8B55EC mov edx, dword[ebp-14] :004055E9 8B02 mov eax, dword[edx] :004055EB FF10 call dword[eax] :004055ED 8945D0 mov dword[ebp-30], eax :004055F0 8B4DD0 mov ecx, dword[ebp-30] :004055F3 894DCC mov dword[ebp-34], ecx :004055F6 EB07 jmp 004055FF --------- :004055F8 C745CC00000000 mov dword[ebp-34], 00000000 --------- :004055FF 8B55E4 mov edx, dword[ebp-1C] :00405602 C7424400000000 mov dword[edx+44], 00000000 --------- :00405609 EB20 jmp 0040562B :0040560B 6878F84000 push 0040F878 (StringData)"CServerSocket::TerminateConnection, Unexpected error encountered." :00405610 68BCF84000 push 0040F8BC (StringData)"%s" :00405615 6AFF push -00000001 :00405617 E814C0FFFF call 00401630 :0040561C 50 push eax :0040561D E89EDCFFFF call 004032C0 :00405622 83C410 add esp, 00000010 :00405625 B82B564000 mov eax, 0040562B :0040562A C3 ret :0040562B C7 45 FC .E. :0040562E FFFFFFFF DWORD FFFFFFFF ;; .... :00405632 6A 00 FF 15 j... :00405636 F4C44000 DWORD 0040C4F4 ;; ..@. :0040563A B8 01 00 00 00 ..... --------- :0040563F 8B4DF4 mov ecx, dword[ebp-0C] :00405642 64890D00000000 mov dword fs:[00000000], ecx :00405649 5F pop edi :0040564A 5E pop esi :0040564B 5B pop ebx :0040564C 8BE5 mov esp, ebp :0040564E 5D pop ebp :0040564F C20400 ret 0004 :00405652 CC CC CC CC CC CC CC CC CC CC CC CC CC CC .............. ========= :00405660 55 push ebp :00405661 8BEC mov ebp, esp :00405663 83EC08 sub esp, 00000008 :00405666 894DF8 mov dword[ebp-08], ecx :00405669 C745FC00000000 mov dword[ebp-04], 00000000 :00405670 8B45F8 mov eax, dword[ebp-08] :00405673 83784400 cmp dword[eax+44], 00000000 :00405677 7407 je 00405680 :00405679 C745FC01000000 mov dword[ebp-04], 00000001 --------- :00405680 8B45FC mov eax, dword[ebp-04] :00405683 8BE5 mov esp, ebp :00405685 5D pop ebp :00405686 C3 ret :00405687 CC CC CC CC CC CC CC CC CC ......... ========= :00405690 55 push ebp :00405691 8BEC mov ebp, esp :00405693 6AFF push -00000001 :00405695 6800B74000 push 0040B700 :0040569A 64A100000000 mov eax, dword fs:[00000000] :004056A0 50 push eax :004056A1 64892500000000 mov dword fs:[00000000], esp :004056A8 51 push ecx :004056A9 81EC84030000 sub esp, 00000384 :004056AF 53 push ebx :004056B0 56 push esi :004056B1 57 push edi :004056B2 8965F0 mov dword[ebp-10], esp :004056B5 898D7CFDFFFF mov dword[ebp+FFFFFD7C], ecx :004056BB C745E400000000 mov dword[ebp-1C], 00000000 :004056C2 C745DC00000000 mov dword[ebp-24], 00000000 :004056C9 C745C000000000 mov dword[ebp-40], 00000000 :004056D0 8D4DC4 lea ecx, dword[ebp-3C] :004056D3 E8B8390000 call 00409090 :004056D8 C745FC00000000 mov dword[ebp-04], 00000000 :004056DF C745E000000000 mov dword[ebp-20], 00000000 :004056E6 A19C0E4100 mov eax, dword[00410E9C] :004056EB 8945EC mov dword[ebp-14], eax :004056EE 6A4C push 0000004C :004056F0 E88B550000 call 0040AC80 :004056F5 83C404 add esp, 00000004 :004056F8 8945A8 mov dword[ebp-58], eax :004056FB C645FC01 mov byte[ebp-04], 01 :004056FF 837DA800 cmp dword[ebp-58], 00000000 :00405703 7410 je 00405715 :00405705 8B4DA8 mov ecx, dword[ebp-58] :00405708 E833E1FFFF call 00403840 :0040570D 898578FDFFFF mov dword[ebp+FFFFFD78], eax :00405713 EB0A jmp 0040571F --------- :00405715 C78578FDFFFF00000000 mov dword[ebp+FFFFFD78], 00000000 --------- :0040571F 8B8D78FDFFFF mov ecx, dword[ebp+FFFFFD78] :00405725 894DAC mov dword[ebp-54], ecx :00405728 C645FC00 mov byte[ebp-04], 00 :0040572C 8B55AC mov edx, dword[ebp-54] :0040572F 8955E8 mov dword[ebp-18], edx :00405732 C645FC02 mov byte[ebp-04], 02 :00405736 8B8D7CFDFFFF mov ecx, dword[ebp+FFFFFD7C] :0040573C E81FFFFFFF call 00405660 :00405741 898574FDFFFF mov dword[ebp+FFFFFD74], eax :00405747 83BD74FDFFFF00 cmp dword[ebp+FFFFFD74], 00000000 :0040574E 7540 jne 00405790 :00405750 8D8578FFFFFF lea eax, dword[ebp+FFFFFF78] :00405756 50 push eax :00405757 68C0F84000 push 0040F8C0 (StringData)"CServerSocket::DoDotTerminatedDownloadCommand(), Server side socket is not open." :0040575C 8D8D7CFFFFFF lea ecx, dword[ebp+FFFFFF7C] :00405762 FF1520C44000 call dword[0040C420] ;;call MSVCP60.??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBDABV?$allocator@D@1@@Z :00405768 898570FDFFFF mov dword[ebp+FFFFFD70], eax :0040576E C645FC03 mov byte[ebp-04], 03 :00405772 8D8D7CFFFFFF lea ecx, dword[ebp+FFFFFF7C] :00405778 51 push ecx :00405779 8D4D8C lea ecx, dword[ebp-74] :0040577C FF151CC44000 call dword[0040C41C] ;;call MSVCP60.??0runtime_error@std@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@1@@Z :00405782 68E8D34000 push 0040D3E8 :00405787 8D558C lea edx, dword[ebp-74] :0040578A 52 push edx :0040578B E8A4570000 call 0040AF34 ;;call MSVCRT._CxxThrowException --------- :00405790 6801100000 push 00001001 :00405795 8D4DC4 lea ecx, dword[ebp-3C] :00405798 E8133A0000 call 004091B0 :0040579D E88EBEFFFF call 00401630 :004057A2 89856CFDFFFF mov dword[ebp+FFFFFD6C], eax :004057A8 8B856CFDFFFF mov eax, dword[ebp+FFFFFD6C] :004057AE 898568FDFFFF mov dword[ebp+FFFFFD68], eax :004057B4 8B8D68FDFFFF mov ecx, dword[ebp+FFFFFD68] :004057BA 8B9568FDFFFF mov edx, dword[ebp+FFFFFD68] :004057C0 8B02 mov eax, dword[edx] :004057C2 FF507C call dword[eax+7C] :004057C5 898564FDFFFF mov dword[ebp+FFFFFD64], eax :004057CB 8B8D64FDFFFF mov ecx, dword[ebp+FFFFFD64] :004057D1 E82A1E0000 call 00407600 :004057D6 898560FDFFFF mov dword[ebp+FFFFFD60], eax :004057DC 68C8000000 push 000000C8 :004057E1 6A00 push 00000000 :004057E3 8B8D7CFDFFFF mov ecx, dword[ebp+FFFFFD7C] :004057E9 8B5160 mov edx, dword[ecx+60] :004057EC 52 push edx :004057ED 8B45EC mov eax, dword[ebp-14] :004057F0 50 push eax :004057F1 8B8D7CFDFFFF mov ecx, dword[ebp+FFFFFD7C] :004057F7 8B5150 mov edx, dword[ecx+50] :004057FA 52 push edx :004057FB 8B8560FDFFFF mov eax, dword[ebp+FFFFFD60] :00405801 50 push eax :00405802 E8B93C0000 call 004094C0 :00405807 83C418 add esp, 00000018 :0040580A 8B4D08 mov ecx, dword[ebp+08] :0040580D 51 push ecx :0040580E 8B957CFDFFFF mov edx, dword[ebp+FFFFFD7C] :00405814 8B4A44 mov ecx, dword[edx+44] :00405817 E8A4250000 call 00407DC0 :0040581C 89855CFDFFFF mov dword[ebp+FFFFFD5C], eax :00405822 8B855CFDFFFF mov eax, dword[ebp+FFFFFD5C] :00405828 8945E4 mov dword[ebp-1C], eax :0040582B 837DE400 cmp dword[ebp-1C], 00000000 :0040582F 7F46 jg 00405877 :00405831 8D8D48FFFFFF lea ecx, dword[ebp+FFFFFF48] :00405837 51 push ecx :00405838 6814F94000 push 0040F914 (StringData)"CServerSocket::DoDotTerminatedDownloadCommand(), Error in Client Send." :0040583D 8D8D4CFFFFFF lea ecx, dword[ebp+FFFFFF4C] :00405843 FF1520C44000 call dword[0040C420] ;;call MSVCP60.??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBDABV?$allocator@D@1@@Z :00405849 898558FDFFFF mov dword[ebp+FFFFFD58], eax :0040584F C645FC04 mov byte[ebp-04], 04 :00405853 8D954CFFFFFF lea edx, dword[ebp+FFFFFF4C] :00405859 52 push edx :0040585A 8D8D5CFFFFFF lea ecx, dword[ebp+FFFFFF5C] :00405860 FF151CC44000 call dword[0040C41C] ;;call MSVCP60.??0runtime_error@std@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@1@@Z :00405866 68E8D34000 push 0040D3E8 :0040586B 8D855CFFFFFF lea eax, dword[ebp+FFFFFF5C] :00405871 50 push eax :00405872 E8BD560000 call 0040AF34 ;;call MSVCRT._CxxThrowException --------- :00405877 8D4DB8 lea ecx, dword[ebp-48] :0040587A E8F7510000 call 0040AA76 :0040587F 898554FDFFFF mov dword[ebp+FFFFFD54], eax :00405885 C645FC05 mov byte[ebp-04], 05 :00405889 8D4DB8 lea ecx, dword[ebp-48] :0040588C 51 push ecx :0040588D 8B957CFDFFFF mov edx, dword[ebp+FFFFFD7C] :00405893 8B4A44 mov ecx, dword[edx+44] :00405896 8B857CFDFFFF mov eax, dword[ebp+FFFFFD7C] :0040589C 8B5044 mov edx, dword[eax+44] :0040589F 8B02 mov eax, dword[edx] :004058A1 FF501C call dword[eax+1C] :004058A4 898550FDFFFF mov dword[ebp+FFFFFD50], eax :004058AA 8B8D50FDFFFF mov ecx, dword[ebp+FFFFFD50] :004058B0 894DE4 mov dword[ebp-1C], ecx :004058B3 837DE400 cmp dword[ebp-1C], 00000000 :004058B7 7F46 jg 004058FF :004058B9 8D9518FFFFFF lea edx, dword[ebp+FFFFFF18] :004058BF 52 push edx :004058C0 685CF94000 push 0040F95C (StringData)"CServerSocket::DoDotTerminatedDownloadCommand(), Error in Client Receive." :004058C5 8D8D1CFFFFFF lea ecx, dword[ebp+FFFFFF1C] :004058CB FF1520C44000 call dword[0040C420] ;;call MSVCP60.??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBDABV?$allocator@D@1@@Z :004058D1 89854CFDFFFF mov dword[ebp+FFFFFD4C], eax :004058D7 C645FC06 mov byte[ebp-04], 06 :004058DB 8D851CFFFFFF lea eax, dword[ebp+FFFFFF1C] :004058E1 50 push eax :004058E2 8D8D2CFFFFFF lea ecx, dword[ebp+FFFFFF2C] :004058E8 FF151CC44000 call dword[0040C41C] ;;call MSVCP60.??0runtime_error@std@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@1@@Z :004058EE 68E8D34000 push 0040D3E8 :004058F3 8D8D2CFFFFFF lea ecx, dword[ebp+FFFFFF2C] :004058F9 51 push ecx :004058FA E835560000 call 0040AF34 ;;call MSVCRT._CxxThrowException --------- :004058FF E82CBDFFFF call 00401630 :00405904 898548FDFFFF mov dword[ebp+FFFFFD48], eax :0040590A 8B55B8 mov edx, dword[ebp-48] :0040590D 52 push edx :0040590E 68A8F94000 push 0040F9A8 (StringData)"%s" :00405913 6A01 push 00000001 :00405915 8B8548FDFFFF mov eax, dword[ebp+FFFFFD48] :0040591B 50 push eax :0040591C E89FD9FFFF call 004032C0 :00405921 83C410 add esp, 00000010 :00405924 6A00 push 00000000 :00405926 8D4DB8 lea ecx, dword[ebp-48] :00405929 E8321C0000 call 00407560 :0040592E 888544FDFFFF mov byte[ebp+FFFFFD44], al :00405934 8B8D44FDFFFF mov ecx, dword[ebp+FFFFFD44] :0040593A 81E1FF000000 and ecx, 000000FF :00405940 83F92B cmp ecx, 0000002B :00405943 7446 je 0040598B :00405945 8D95E8FEFFFF lea edx, dword[ebp+FFFFFEE8] :0040594B 52 push edx :0040594C 68ACF94000 push 0040F9AC (StringData)"CServerSocket::DoDotTerminatedDownloadCommand(), Error in Command response Send." :00405951 8D8DECFEFFFF lea ecx, dword[ebp+FFFFFEEC] :00405957 FF1520C44000 call dword[0040C420] ;;call MSVCP60.??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBDABV?$allocator@D@1@@Z :0040595D 898540FDFFFF mov dword[ebp+FFFFFD40], eax :00405963 C645FC07 mov byte[ebp-04], 07 :00405967 8D85ECFEFFFF lea eax, dword[ebp+FFFFFEEC] :0040596D 50 push eax :0040596E 8D8DFCFEFFFF lea ecx, dword[ebp+FFFFFEFC] :00405974 FF151CC44000 call dword[0040C41C] ;;call MSVCP60.??0runtime_error@std@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@1@@Z :0040597A 68E8D34000 push 0040D3E8 :0040597F 8D8DFCFEFFFF lea ecx, dword[ebp+FFFFFEFC] :00405985 51 push ecx :00405986 E8A9550000 call 0040AF34 ;;call MSVCRT._CxxThrowException --------- :0040598B 8D55B8 lea edx, dword[ebp-48] :0040598E 52 push edx :0040598F 8B8D7CFDFFFF mov ecx, dword[ebp+FFFFFD7C] :00405995 E826240000 call 00407DC0 :0040599A 89853CFDFFFF mov dword[ebp+FFFFFD3C], eax :004059A0 8B853CFDFFFF mov eax, dword[ebp+FFFFFD3C] :004059A6 8945E4 mov dword[ebp-1C], eax :004059A9 837DE400 cmp dword[ebp-1C], 00000000 :004059AD 7F46 jg 004059F5 :004059AF 8D8DB8FEFFFF lea ecx, dword[ebp+FFFFFEB8] :004059B5 51 push ecx :004059B6 6800FA4000 push 0040FA00 (StringData)"CServerSocket::DoDotTerminatedDownloadCommand(), Error in Command response Send." :004059BB 8D8DBCFEFFFF lea ecx, dword[ebp+FFFFFEBC] :004059C1 FF1520C44000 call dword[0040C420] ;;call MSVCP60.??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBDABV?$allocator@D@1@@Z :004059C7 898538FDFFFF mov dword[ebp+FFFFFD38], eax :004059CD C645FC08 mov byte[ebp-04], 08 :004059D1 8D95BCFEFFFF lea edx, dword[ebp+FFFFFEBC] :004059D7 52 push edx :004059D8 8D8DCCFEFFFF lea ecx, dword[ebp+FFFFFECC] :004059DE FF151CC44000 call dword[0040C41C] ;;call MSVCP60.??0runtime_error@std@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@1@@Z :004059E4 68E8D34000 push 0040D3E8 :004059E9 8D85CCFEFFFF lea eax, dword[ebp+FFFFFECC] :004059EF 50 push eax :004059F0 E83F550000 call 0040AF34 ;;call MSVCRT._CxxThrowException --------- :004059F5 C745B401000000 mov dword[ebp-4C], 00000001 :004059FC 8B8D7CFDFFFF mov ecx, dword[ebp+FFFFFD7C] :00405A02 83795C00 cmp dword[ecx+5C], 00000000 :00405A06 741C je 00405A24 :00405A08 68983A0000 push 00003A98 :00405A0D 8B957CFDFFFF mov edx, dword[ebp+FFFFFD7C] :00405A13 52 push edx :00405A14 8B4DE8 mov ecx, dword[ebp-18] :00405A17 E814DFFFFF call 00403930 :00405A1C 8B4DE8 mov ecx, dword[ebp-18] :00405A1F E8ECDFFFFF call 00403A10 --------- :00405A24 B801000000 mov eax, 00000001 :00405A29 85C0 test eax, eax :00405A2B 0F8473020000 je 00405CA4 :00405A31 8B4DE8 mov ecx, dword[ebp-18] :00405A34 E817080000 call 00406250 :00405A39 898534FDFFFF mov dword[ebp+FFFFFD34], eax :00405A3F 83BD34FDFFFFFF cmp dword[ebp+FFFFFD34], -00000001 :00405A46 750C jne 00405A54 :00405A48 8B8D7CFDFFFF mov ecx, dword[ebp+FFFFFD7C] :00405A4E 83795C00 cmp dword[ecx+5C], 00000000 :00405A52 7518 jne 00405A6C --------- :00405A54 8B957CFDFFFF mov edx, dword[ebp+FFFFFD7C] :00405A5A 837A04FF cmp dword[edx+04], -00000001 :00405A5E 7552 jne 00405AB2 :00405A60 8B857CFDFFFF mov eax, dword[ebp+FFFFFD7C] :00405A66 83785C00 cmp dword[eax+5C], 00000000 :00405A6A 7546 jne 00405AB2 --------- :00405A6C 8D8D88FEFFFF lea ecx, dword[ebp+FFFFFE88] :00405A72 51 push ecx :00405A73 6854FA4000 push 0040FA54 (StringData)"CServerSocket::DoDotTerminatedDownloadCommand(), Client socket is invalid." :00405A78 8D8D8CFEFFFF lea ecx, dword[ebp+FFFFFE8C] :00405A7E FF1520C44000 call dword[0040C420] ;;call MSVCP60.??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBDABV?$allocator@D@1@@Z :00405A84 898530FDFFFF mov dword[ebp+FFFFFD30], eax :00405A8A C645FC09 mov byte[ebp-04], 09 :00405A8E 8D958CFEFFFF lea edx, dword[ebp+FFFFFE8C] :00405A94 52 push edx :00405A95 8D8D9CFEFFFF lea ecx, dword[ebp+FFFFFE9C] :00405A9B FF151CC44000 call dword[0040C41C] ;;call MSVCP60.??0runtime_error@std@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@1@@Z :00405AA1 68E8D34000 push 0040D3E8 :00405AA6 8D859CFEFFFF lea eax, dword[ebp+FFFFFE9C] :00405AAC 50 push eax :00405AAD E882540000 call 0040AF34 ;;call MSVCRT._CxxThrowException --------- :00405AB2 E879BBFFFF call 00401630 :00405AB7 89852CFDFFFF mov dword[ebp+FFFFFD2C], eax :00405ABD 8B8D2CFDFFFF mov ecx, dword[ebp+FFFFFD2C] :00405AC3 898D28FDFFFF mov dword[ebp+FFFFFD28], ecx :00405AC9 8B8D28FDFFFF mov ecx, dword[ebp+FFFFFD28] :00405ACF 8B9528FDFFFF mov edx, dword[ebp+FFFFFD28] :00405AD5 8B02 mov eax, dword[edx] :00405AD7 FF507C call dword[eax+7C] :00405ADA 898524FDFFFF mov dword[ebp+FFFFFD24], eax :00405AE0 8B8D24FDFFFF mov ecx, dword[ebp+FFFFFD24] :00405AE6 E8151B0000 call 00407600 :00405AEB 898520FDFFFF mov dword[ebp+FFFFFD20], eax :00405AF1 68C8000000 push 000000C8 :00405AF6 8D4DC0 lea ecx, dword[ebp-40] :00405AF9 51 push ecx :00405AFA 8B957CFDFFFF mov edx, dword[ebp+FFFFFD7C] :00405B00 8B4260 mov eax, dword[edx+60] :00405B03 50 push eax :00405B04 8B4DEC mov ecx, dword[ebp-14] :00405B07 51 push ecx :00405B08 8B957CFDFFFF mov edx, dword[ebp+FFFFFD7C] :00405B0E 8B4250 mov eax, dword[edx+50] :00405B11 50 push eax :00405B12 8B8D20FDFFFF mov ecx, dword[ebp+FFFFFD20] :00405B18 51 push ecx :00405B19 E8A2390000 call 004094C0 :00405B1E 83C418 add esp, 00000018 :00405B21 89851CFDFFFF mov dword[ebp+FFFFFD1C], eax :00405B27 83BD1CFDFFFF00 cmp dword[ebp+FFFFFD1C], 00000000 :00405B2E 7424 je 00405B54 :00405B30 8D55E0 lea edx, dword[ebp-20] :00405B33 52 push edx :00405B34 E8B7E3FFFF call 00403EF0 :00405B39 83C404 add esp, 00000004 :00405B3C 898518FDFFFF mov dword[ebp+FFFFFD18], eax :00405B42 8B8518FDFFFF mov eax, dword[ebp+FFFFFD18] :00405B48 8B08 mov ecx, dword[eax] :00405B4A 8B148D980E4100 mov edx, dword[4*ecx+00410E98] :00405B51 8955EC mov dword[ebp-14], edx --------- :00405B54 8D45B8 lea eax, dword[ebp-48] :00405B57 50 push eax :00405B58 8B8D7CFDFFFF mov ecx, dword[ebp+FFFFFD7C] :00405B5E 8B4944 mov ecx, dword[ecx+44] :00405B61 8B957CFDFFFF mov edx, dword[ebp+FFFFFD7C] :00405B67 8B4244 mov eax, dword[edx+44] :00405B6A 8B10 mov edx, dword[eax] :00405B6C FF521C call dword[edx+1C] :00405B6F 898514FDFFFF mov dword[ebp+FFFFFD14], eax :00405B75 8B8514FDFFFF mov eax, dword[ebp+FFFFFD14] :00405B7B 8945E4 mov dword[ebp-1C], eax :00405B7E 837DE400 cmp dword[ebp-1C], 00000000 :00405B82 7D46 jge 00405BCA :00405B84 8D8D58FEFFFF lea ecx, dword[ebp+FFFFFE58] :00405B8A 51 push ecx :00405B8B 68A0FA4000 push 0040FAA0 (StringData)"CServerSocket::DoDotTerminatedDownloadCommand(), Error in Client Receive." :00405B90 8D8D5CFEFFFF lea ecx, dword[ebp+FFFFFE5C] :00405B96 FF1520C44000 call dword[0040C420] ;;call MSVCP60.??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBDABV?$allocator@D@1@@Z :00405B9C 898510FDFFFF mov dword[ebp+FFFFFD10], eax :00405BA2 C645FC0A mov byte[ebp-04], 0A :00405BA6 8D955CFEFFFF lea edx, dword[ebp+FFFFFE5C] :00405BAC 52 push edx :00405BAD 8D8D6CFEFFFF lea ecx, dword[ebp+FFFFFE6C] :00405BB3 FF151CC44000 call dword[0040C41C] ;;call MSVCP60.??0runtime_error@std@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@1@@Z :00405BB9 68E8D34000 push 0040D3E8 :00405BBE 8D856CFEFFFF lea eax, dword[ebp+FFFFFE6C] :00405BC4 50 push eax :00405BC5 E86A530000 call 0040AF34 ;;call MSVCRT._CxxThrowException --------- :00405BCA E861BAFFFF call 00401630 :00405BCF 89850CFDFFFF mov dword[ebp+FFFFFD0C], eax :00405BD5 8B4DB8 mov ecx, dword[ebp-48] :00405BD8 51 push ecx :00405BD9 68ECFA4000 push 0040FAEC (StringData)"%s" :00405BDE 6A01 push 00000001 :00405BE0 8B950CFDFFFF mov edx, dword[ebp+FFFFFD0C] :00405BE6 52 push edx :00405BE7 E8D4D6FFFF call 004032C0 :00405BEC 83C410 add esp, 00000010 :00405BEF 68F0FA4000 push 0040FAF0 (StringData)"." :00405BF4 8D45B8 lea eax, dword[ebp-48] :00405BF7 50 push eax :00405BF8 E883190000 call 00407580 :00405BFD 888508FDFFFF mov byte[ebp+FFFFFD08], al :00405C03 8B8D08FDFFFF mov ecx, dword[ebp+FFFFFD08] :00405C09 81E1FF000000 and ecx, 000000FF :00405C0F 85C9 test ecx, ecx :00405C11 7405 je 00405C18 :00405C13 E98C000000 jmp 00405CA4 --------- :00405C18 837DB400 cmp dword[ebp-4C], 00000000 :00405C1C 7427 je 00405C45 :00405C1E 8B957CFDFFFF mov edx, dword[ebp+FFFFFD7C] :00405C24 837A5C00 cmp dword[edx+5C], 00000000 :00405C28 741B je 00405C45 :00405C2A 8D45B8 lea eax, dword[ebp-48] :00405C2D 50 push eax :00405C2E 8B4DE8 mov ecx, dword[ebp-18] :00405C31 E81ADEFFFF call 00403A50 :00405C36 898504FDFFFF mov dword[ebp+FFFFFD04], eax :00405C3C 8B8D04FDFFFF mov ecx, dword[ebp+FFFFFD04] :00405C42 894DB4 mov dword[ebp-4C], ecx --------- :00405C45 68F4FA4000 push 0040FAF4 (StringData)" " :00405C4A 8D55B8 lea edx, dword[ebp-48] :00405C4D 52 push edx :00405C4E 8D8554FEFFFF lea eax, dword[ebp+FFFFFE54] :00405C54 50 push eax :00405C55 E856500000 call 0040ACB0 :00405C5A 898500FDFFFF mov dword[ebp+FFFFFD00], eax :00405C60 8B8D00FDFFFF mov ecx, dword[ebp+FFFFFD00] :00405C66 898DFCFCFFFF mov dword[ebp+FFFFFCFC], ecx :00405C6C C645FC0B mov byte[ebp-04], 0B :00405C70 8B8DFCFCFFFF mov ecx, dword[ebp+FFFFFCFC] :00405C76 E8E5CFFFFF call 00402C60 :00405C7B 8985F8FCFFFF mov dword[ebp+FFFFFCF8], eax :00405C81 8B95F8FCFFFF mov edx, dword[ebp+FFFFFCF8] :00405C87 52 push edx :00405C88 8D4DC4 lea ecx, dword[ebp-3C] :00405C8B E81A500000 call 0040ACAA :00405C90 C645FC05 mov byte[ebp-04], 05 :00405C94 8D8D54FEFFFF lea ecx, dword[ebp+FFFFFE54] :00405C9A E8E34D0000 call 0040AA82 :00405C9F E980FDFFFF jmp 00405A24 --------- :00405CA4 8D4DC4 lea ecx, dword[ebp-3C] :00405CA7 E8F84F0000 call 0040ACA4 :00405CAC E87FB9FFFF call 00401630 :00405CB1 8985F4FCFFFF mov dword[ebp+FFFFFCF4], eax :00405CB7 8B85F4FCFFFF mov eax, dword[ebp+FFFFFCF4] :00405CBD 8985F0FCFFFF mov dword[ebp+FFFFFCF0], eax :00405CC3 8B8DF0FCFFFF mov ecx, dword[ebp+FFFFFCF0] :00405CC9 8B95F0FCFFFF mov edx, dword[ebp+FFFFFCF0] :00405CCF 8B02 mov eax, dword[edx] :00405CD1 FF507C call dword[eax+7C] :00405CD4 8985ECFCFFFF mov dword[ebp+FFFFFCEC], eax :00405CDA 8B8DECFCFFFF mov ecx, dword[ebp+FFFFFCEC] :00405CE0 E81B190000 call 00407600 :00405CE5 8985E8FCFFFF mov dword[ebp+FFFFFCE8], eax :00405CEB 68C8000000 push 000000C8 :00405CF0 6A00 push 00000000 :00405CF2 8B8D7CFDFFFF mov ecx, dword[ebp+FFFFFD7C] :00405CF8 8B5160 mov edx, dword[ecx+60] :00405CFB 52 push edx :00405CFC A1B00E4100 mov eax, dword[00410EB0] :00405D01 50 push eax :00405D02 8B8D7CFDFFFF mov ecx, dword[ebp+FFFFFD7C] :00405D08 8B5150 mov edx, dword[ecx+50] :00405D0B 52 push edx :00405D0C 8B85E8FCFFFF mov eax, dword[ebp+FFFFFCE8] :00405D12 50 push eax :00405D13 E8A8370000 call 004094C0 :00405D18 83C418 add esp, 00000018 :00405D1B 8D8D50FEFFFF lea ecx, dword[ebp+FFFFFE50] :00405D21 51 push ecx :00405D22 8D4DC4 lea ecx, dword[ebp-3C] :00405D25 E8744F0000 call 0040AC9E :00405D2A 8985E4FCFFFF mov dword[ebp+FFFFFCE4], eax :00405D30 8B95E4FCFFFF mov edx, dword[ebp+FFFFFCE4] :00405D36 8995E0FCFFFF mov dword[ebp+FFFFFCE0], edx :00405D3C C645FC0C mov byte[ebp-04], 0C :00405D40 8B8DE0FCFFFF mov ecx, dword[ebp+FFFFFCE0] :00405D46 E815CFFFFF call 00402C60 :00405D4B 8985DCFCFFFF mov dword[ebp+FFFFFCDC], eax :00405D51 8B857CFDFFFF mov eax, dword[ebp+FFFFFD7C] :00405D57 50 push eax :00405D58 8B8D7CFDFFFF mov ecx, dword[ebp+FFFFFD7C] :00405D5E 8B5164 mov edx, dword[ecx+64] :00405D61 52 push edx :00405D62 8B85DCFCFFFF mov eax, dword[ebp+FFFFFCDC] :00405D68 50 push eax :00405D69 E822050000 call 00406290 :00405D6E 83C40C add esp, 0000000C :00405D71 C645FC05 mov byte[ebp-04], 05 :00405D75 8D8D50FEFFFF lea ecx, dword[ebp+FFFFFE50] :00405D7B E8024D0000 call 0040AA82 :00405D80 8D4DE0 lea ecx, dword[ebp-20] :00405D83 51 push ecx :00405D84 E867E1FFFF call 00403EF0 :00405D89 83C404 add esp, 00000004 :00405D8C 8985D8FCFFFF mov dword[ebp+FFFFFCD8], eax :00405D92 E899B8FFFF call 00401630 :00405D97 8985D4FCFFFF mov dword[ebp+FFFFFCD4], eax :00405D9D 8B95D4FCFFFF mov edx, dword[ebp+FFFFFCD4] :00405DA3 8995D0FCFFFF mov dword[ebp+FFFFFCD0], edx :00405DA9 8B8DD0FCFFFF mov ecx, dword[ebp+FFFFFCD0] :00405DAF 8B85D0FCFFFF mov eax, dword[ebp+FFFFFCD0] :00405DB5 8B10 mov edx, dword[eax] :00405DB7 FF527C call dword[edx+7C] :00405DBA 8985CCFCFFFF mov dword[ebp+FFFFFCCC], eax :00405DC0 8B8DCCFCFFFF mov ecx, dword[ebp+FFFFFCCC] :00405DC6 E835180000 call 00407600 :00405DCB 8985C8FCFFFF mov dword[ebp+FFFFFCC8], eax :00405DD1 68C8000000 push 000000C8 :00405DD6 6A00 push 00000000 :00405DD8 8B857CFDFFFF mov eax, dword[ebp+FFFFFD7C] :00405DDE 8B4860 mov ecx, dword[eax+60] :00405DE1 51 push ecx :00405DE2 8B95D8FCFFFF mov edx, dword[ebp+FFFFFCD8] :00405DE8 8B02 mov eax, dword[edx] :00405DEA 8B0C85980E4100 mov ecx, dword[4*eax+00410E98] :00405DF1 51 push ecx :00405DF2 8B957CFDFFFF mov edx, dword[ebp+FFFFFD7C] :00405DF8 8B4250 mov eax, dword[edx+50] :00405DFB 50 push eax :00405DFC 8B8DC8FCFFFF mov ecx, dword[ebp+FFFFFCC8] :00405E02 51 push ecx :00405E03 E8B8360000 call 004094C0 :00405E08 83C418 add esp, 00000018 :00405E0B 6802400000 push 00004002 :00405E10 8D4DC4 lea ecx, dword[ebp-3C] :00405E13 E898330000 call 004091B0 :00405E18 8985C4FCFFFF mov dword[ebp+FFFFFCC4], eax :00405E1E 83BDC4FCFFFF00 cmp dword[ebp+FFFFFCC4], 00000000 :00405E25 7546 jne 00405E6D :00405E27 8D9520FEFFFF lea edx, dword[ebp+FFFFFE20] :00405E2D 52 push edx :00405E2E 68F8FA4000 push 0040FAF8 (StringData)"Unable to open temp file." :00405E33 8D8D24FEFFFF lea ecx, dword[ebp+FFFFFE24] :00405E39 FF1520C44000 call dword[0040C420] ;;call MSVCP60.??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBDABV?$allocator@D@1@@Z :00405E3F 8985C0FCFFFF mov dword[ebp+FFFFFCC0], eax :00405E45 C645FC0D mov byte[ebp-04], 0D :00405E49 8D8524FEFFFF lea eax, dword[ebp+FFFFFE24] :00405E4F 50 push eax :00405E50 8D8D34FEFFFF lea ecx, dword[ebp+FFFFFE34] :00405E56 FF151CC44000 call dword[0040C41C] ;;call MSVCP60.??0runtime_error@std@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@1@@Z :00405E5C 68E8D34000 push 0040D3E8 :00405E61 8D8D34FEFFFF lea ecx, dword[ebp+FFFFFE34] :00405E67 51 push ecx :00405E68 E8C7500000 call 0040AF34 ;;call MSVCRT._CxxThrowException --------- :00405E6D 8B957CFDFFFF mov edx, dword[ebp+FFFFFD7C] :00405E73 837A5C00 cmp dword[edx+5C], 00000000 :00405E77 7408 je 00405E81 :00405E79 8B4DE8 mov ecx, dword[ebp-18] :00405E7C E80FDBFFFF call 00403990 --------- :00405E81 8B4DE8 mov ecx, dword[ebp-18] :00405E84 E8E7030000 call 00406270 :00405E89 8985BCFCFFFF mov dword[ebp+FFFFFCBC], eax :00405E8F 8B85BCFCFFFF mov eax, dword[ebp+FFFFFCBC] :00405E95 8945BC mov dword[ebp-44], eax :00405E98 837DBC00 cmp dword[ebp-44], 00000000 :00405E9C 740C je 00405EAA :00405E9E 8B4DBC mov ecx, dword[ebp-44] :00405EA1 51 push ecx :00405EA2 8D4DC4 lea ecx, dword[ebp-3C] :00405EA5 E826340000 call 004092D0 --------- :00405EAA 8D55B8 lea edx, dword[ebp-48] :00405EAD 52 push edx :00405EAE 8D4DC4 lea ecx, dword[ebp-3C] :00405EB1 E8BE4D0000 call 0040AC74 :00405EB6 8985B8FCFFFF mov dword[ebp+FFFFFCB8], eax :00405EBC 83BDB8FCFFFF00 cmp dword[ebp+FFFFFCB8], 00000000 :00405EC3 0F847F010000 je 00406048 :00405EC9 8B857CFDFFFF mov eax, dword[ebp+FFFFFD7C] :00405ECF 837804FF cmp dword[eax+04], -00000001 :00405ED3 7546 jne 00405F1B :00405ED5 8D8DF0FDFFFF lea ecx, dword[ebp+FFFFFDF0] :00405EDB 51 push ecx :00405EDC 6814FB4000 push 0040FB14 (StringData)"CServerSocket::DoDotTerminatedDownloadCommand(), Client socket is invalid." :00405EE1 8D8DF4FDFFFF lea ecx, dword[ebp+FFFFFDF4] :00405EE7 FF1520C44000 call dword[0040C420] ;;call MSVCP60.??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBDABV?$allocator@D@1@@Z :00405EED 8985B4FCFFFF mov dword[ebp+FFFFFCB4], eax :00405EF3 C645FC0E mov byte[ebp-04], 0E :00405EF7 8D95F4FDFFFF lea edx, dword[ebp+FFFFFDF4] :00405EFD 52 push edx :00405EFE 8D8D04FEFFFF lea ecx, dword[ebp+FFFFFE04] :00405F04 FF151CC44000 call dword[0040C41C] ;;call MSVCP60.??0runtime_error@std@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@1@@Z :00405F0A 68E8D34000 push 0040D3E8 :00405F0F 8D8504FEFFFF lea eax, dword[ebp+FFFFFE04] :00405F15 50 push eax :00405F16 E819500000 call 0040AF34 ;;call MSVCRT._CxxThrowException --------- :00405F1B E810B7FFFF call 00401630 :00405F20 8985B0FCFFFF mov dword[ebp+FFFFFCB0], eax :00405F26 8B8DB0FCFFFF mov ecx, dword[ebp+FFFFFCB0] :00405F2C 898DACFCFFFF mov dword[ebp+FFFFFCAC], ecx :00405F32 8B8DACFCFFFF mov ecx, dword[ebp+FFFFFCAC] :00405F38 8B95ACFCFFFF mov edx, dword[ebp+FFFFFCAC] :00405F3E 8B02 mov eax, dword[edx] :00405F40 FF507C call dword[eax+7C] :00405F43 8985A8FCFFFF mov dword[ebp+FFFFFCA8], eax :00405F49 8B8DA8FCFFFF mov ecx, dword[ebp+FFFFFCA8] :00405F4F E8AC160000 call 00407600 :00405F54 8985A4FCFFFF mov dword[ebp+FFFFFCA4], eax :00405F5A 68C8000000 push 000000C8 :00405F5F 8D4DC0 lea ecx, dword[ebp-40] :00405F62 51 push ecx :00405F63 8B957CFDFFFF mov edx, dword[ebp+FFFFFD7C] :00405F69 8B4260 mov eax, dword[edx+60] :00405F6C 50 push eax :00405F6D 8B4DEC mov ecx, dword[ebp-14] :00405F70 51 push ecx :00405F71 8B957CFDFFFF mov edx, dword[ebp+FFFFFD7C] :00405F77 8B4250 mov eax, dword[edx+50] :00405F7A 50 push eax :00405F7B 8B8DA4FCFFFF mov ecx, dword[ebp+FFFFFCA4] :00405F81 51 push ecx :00405F82 E839350000 call 004094C0 :00405F87 83C418 add esp, 00000018 :00405F8A 8985A0FCFFFF mov dword[ebp+FFFFFCA0], eax :00405F90 83BDA0FCFFFF00 cmp dword[ebp+FFFFFCA0], 00000000 :00405F97 7424 je 00405FBD :00405F99 8D55E0 lea edx, dword[ebp-20] :00405F9C 52 push edx :00405F9D E88EDFFFFF call 00403F30 :00405FA2 83C404 add esp, 00000004 :00405FA5 89859CFCFFFF mov dword[ebp+FFFFFC9C], eax :00405FAB 8B859CFCFFFF mov eax, dword[ebp+FFFFFC9C] :00405FB1 8B08 mov ecx, dword[eax] :00405FB3 8B148D980E4100 mov edx, dword[4*ecx+00410E98] :00405FBA 8955EC mov dword[ebp-14], edx --------- :00405FBD 6860FB4000 push 0040FB60 (StringData)" " :00405FC2 8D4DB8 lea ecx, dword[ebp-48] :00405FC5 E8CE4C0000 call 0040AC98 :00405FCA 898598FCFFFF mov dword[ebp+FFFFFC98], eax :00405FD0 8B8598FCFFFF mov eax, dword[ebp+FFFFFC98] :00405FD6 50 push eax :00405FD7 8B8D7CFDFFFF mov ecx, dword[ebp+FFFFFD7C] :00405FDD 8B957CFDFFFF mov edx, dword[ebp+FFFFFD7C] :00405FE3 8B02 mov eax, dword[edx] :00405FE5 FF5008 call dword[eax+08] :00405FE8 898594FCFFFF mov dword[ebp+FFFFFC94], eax :00405FEE 8B8D94FCFFFF mov ecx, dword[ebp+FFFFFC94] :00405FF4 894DE4 mov dword[ebp-1C], ecx :00405FF7 837DE400 cmp dword[ebp-1C], 00000000 :00405FFB 7F46 jg 00406043 :00405FFD 8D95C0FDFFFF lea edx, dword[ebp+FFFFFDC0] :00406003 52 push edx :00406004 6864FB4000 push 0040FB64 (StringData)"CServerSocket::DoDotTerminatedDownloadCommand(), Error in Command response Send." :00406009 8D8DC4FDFFFF lea ecx, dword[ebp+FFFFFDC4] :0040600F FF1520C44000 call dword[0040C420] ;;call MSVCP60.??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBDABV?$allocator@D@1@@Z :00406015 898590FCFFFF mov dword[ebp+FFFFFC90], eax :0040601B C645FC0F mov byte[ebp-04], 0F :0040601F 8D85C4FDFFFF lea eax, dword[ebp+FFFFFDC4] :00406025 50 push eax :00406026 8D8DD4FDFFFF lea ecx, dword[ebp+FFFFFDD4] :0040602C FF151CC44000 call dword[0040C41C] ;;call MSVCP60.??0runtime_error@std@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@1@@Z :00406032 68E8D34000 push 0040D3E8 :00406037 8D8DD4FDFFFF lea ecx, dword[ebp+FFFFFDD4] :0040603D 51 push ecx :0040603E E8F14E0000 call 0040AF34 ;;call MSVCRT._CxxThrowException --------- :00406043 E962FEFFFF jmp 00405EAA --------- :00406048 8B8D7CFDFFFF mov ecx, dword[ebp+FFFFFD7C] :0040604E 8B957CFDFFFF mov edx, dword[ebp+FFFFFD7C] :00406054 8B02 mov eax, dword[edx] :00406056 FF5014 call dword[eax+14] :00406059 688CC74000 push 0040C78C :0040605E 8D8DBCFDFFFF lea ecx, dword[ebp+FFFFFDBC] :00406064 E8574B0000 call 0040ABC0 :00406069 89858CFCFFFF mov dword[ebp+FFFFFC8C], eax :0040606F 8B8D8CFCFFFF mov ecx, dword[ebp+FFFFFC8C] :00406075 898D88FCFFFF mov dword[ebp+FFFFFC88], ecx :0040607B C645FC10 mov byte[ebp-04], 10 :0040607F 8B9588FCFFFF mov edx, dword[ebp+FFFFFC88] :00406085 52 push edx :00406086 8B8D7CFDFFFF mov ecx, dword[ebp+FFFFFD7C] :0040608C E82F1D0000 call 00407DC0 :00406091 898584FCFFFF mov dword[ebp+FFFFFC84], eax :00406097 8B8584FCFFFF mov eax, dword[ebp+FFFFFC84] :0040609D 8945E4 mov dword[ebp-1C], eax :004060A0 C645FC05 mov byte[ebp-04], 05 :004060A4 8D8DBCFDFFFF lea ecx, dword[ebp+FFFFFDBC] :004060AA E8D3490000 call 0040AA82 :004060AF 837DE400 cmp dword[ebp-1C], 00000000 :004060B3 7F46 jg 004060FB :004060B5 8D8D8CFDFFFF lea ecx, dword[ebp+FFFFFD8C] :004060BB 51 push ecx :004060BC 68B8FB4000 push 0040FBB8 (StringData)"CServerSocket::DoDotTerminatedDownloadCommand(), Error in Command response Send." :004060C1 8D8D90FDFFFF lea ecx, dword[ebp+FFFFFD90] :004060C7 FF1520C44000 call dword[0040C420] ;;call MSVCP60.??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBDABV?$allocator@D@1@@Z :004060CD 898580FCFFFF mov dword[ebp+FFFFFC80], eax :004060D3 C645FC11 mov byte[ebp-04], 11 :004060D7 8D9590FDFFFF lea edx, dword[ebp+FFFFFD90] :004060DD 52 push edx :004060DE 8D8DA0FDFFFF lea ecx, dword[ebp+FFFFFDA0] :004060E4 FF151CC44000 call dword[0040C41C] ;;call MSVCP60.??0runtime_error@std@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@1@@Z :004060EA 68E8D34000 push 0040D3E8 :004060EF 8D85A0FDFFFF lea eax, dword[ebp+FFFFFDA0] :004060F5 50 push eax :004060F6 E8394E0000 call 0040AF34 ;;call MSVCRT._CxxThrowException --------- :004060FB E830B5FFFF call 00401630 :00406100 89857CFCFFFF mov dword[ebp+FFFFFC7C], eax :00406106 8B8D7CFCFFFF mov ecx, dword[ebp+FFFFFC7C] :0040610C 898D78FCFFFF mov dword[ebp+FFFFFC78], ecx :00406112 8B8D78FCFFFF mov ecx, dword[ebp+FFFFFC78] :00406118 8B9578FCFFFF mov edx, dword[ebp+FFFFFC78] :0040611E 8B02 mov eax, dword[edx] :00406120 FF507C call dword[eax+7C] :00406123 898574FCFFFF mov dword[ebp+FFFFFC74], eax :00406129 8B8D74FCFFFF mov ecx, dword[ebp+FFFFFC74] :0040612F E8CC140000 call 00407600 :00406134 898570FCFFFF mov dword[ebp+FFFFFC70], eax :0040613A 68C8000000 push 000000C8 :0040613F 6A00 push 00000000 :00406141 8B8D7CFDFFFF mov ecx, dword[ebp+FFFFFD7C] :00406147 8B5160 mov edx, dword[ecx+60] :0040614A 52 push edx :0040614B A1980E4100 mov eax, dword[00410E98] :00406150 50 push eax :00406151 8B8D7CFDFFFF mov ecx, dword[ebp+FFFFFD7C] :00406157 8B5150 mov edx, dword[ecx+50] :0040615A 52 push edx :0040615B 8B8570FCFFFF mov eax, dword[ebp+FFFFFC70] :00406161 50 push eax :00406162 E859330000 call 004094C0 :00406167 83C418 add esp, 00000018 :0040616A C745DC01000000 mov dword[ebp-24], 00000001 :00406171 C645FC02 mov byte[ebp-04], 02 :00406175 8D4DB8 lea ecx, dword[ebp-48] :00406178 E805490000 call 0040AA82 :0040617D EB47 jmp 004061C6 :0040617F 8B4DB0 mov ecx, dword[ebp-50] :00406182 8B55B0 mov edx, dword[ebp-50] :00406185 8B02 mov eax, dword[edx] :00406187 FF5004 call dword[eax+04] :0040618A 50 push eax :0040618B 680CFC4000 push 0040FC0C (StringData)"%s" :00406190 6AFF push -00000001 :00406192 E899B4FFFF call 00401630 :00406197 50 push eax :00406198 E823D1FFFF call 004032C0 :0040619D 83C410 add esp, 00000010 :004061A0 B8C6614000 mov eax, 004061C6 :004061A5 C3 ret :004061A6 6810FC4000 push 0040FC10 (StringData)"CServerSocket::DoDotTerminatedDownloadCommand(), Unexpected error encountered." :004061AB 6860FC4000 push 0040FC60 (StringData)"%s" :004061B0 6AFF push -00000001 :004061B2 E879B4FFFF call 00401630 :004061B7 50 push eax :004061B8 E803D1FFFF call 004032C0 :004061BD 83C410 add esp, 00000010 :004061C0 B8C6614000 mov eax, 004061C6 :004061C5 C3 ret :004061C6 C7 45 FC 00 00 00 00 8B 8D 7C FD FF FF 83 79 5C .E.......|....y\ :004061D6 00 74 08 8B 4D E8 E8 AF D7 FF FF 8B 55 E8 89 95 .t..M.......U... :004061E6 84 FD FF FF 8B 85 84 FD FF FF 89 85 88 FD FF FF ................ :004061F6 83 BD 88 FD FF FF 00 74 15 6A 01 8B 8D 88 FD FF .......t.j...... :00406206 FF E8 24 01 00 00 89 85 6C FC FF FF EB 0A C7 85 ..$.....l....... :00406216 6C FC FF FF 00 00 00 00 8B 4D DC 89 8D 80 FD FF l........M...... :00406226 FF C7 45 FC ..E. :0040622A FFFFFFFF DWORD FFFFFFFF ;; .... :0040622E 8D 4D C4 E8 AA 2F 00 00 8B 85 80 FD FF FF 8B 4D .M.../.........M :0040623E F4 64 89 0D 00 00 00 00 5F 5E 5B 8B E5 5D C2 04 .d......_^[..].. :0040624E 00 CC .. ========= :00406250 55 push ebp :00406251 8BEC mov ebp, esp :00406253 51 push ecx :00406254 894DFC mov dword[ebp-04], ecx :00406257 8B45FC mov eax, dword[ebp-04] :0040625A 8B4034 mov eax, dword[eax+34] :0040625D 8BE5 mov esp, ebp :0040625F 5D pop ebp :00406260 C3 ret :00406261 CC CC CC CC CC CC CC CC CC CC CC CC CC CC CC ............... ========= :00406270 55 push ebp :00406271 8BEC mov ebp, esp :00406273 51 push ecx :00406274 894DFC mov dword[ebp-04], ecx :00406277 8B45FC mov eax, dword[ebp-04] :0040627A 8B4048 mov eax, dword[eax+48] :0040627D 8BE5 mov esp, ebp :0040627F 5D pop ebp :00406280 C3 ret :00406281 CC CC CC CC CC CC CC CC CC CC CC CC CC CC CC ............... ========= :00406290 55 push ebp :00406291 8BEC mov ebp, esp :00406293 6AFF push -00000001 :00406295 6819B74000 push 0040B719 :0040629A 64A100000000 mov eax, dword fs:[00000000] :004062A0 50 push eax :004062A1 64892500000000 mov dword fs:[00000000], esp :004062A8 83EC10 sub esp, 00000010 :004062AB 8D4DE8 lea ecx, dword[ebp-18] :004062AE E8C3470000 call 0040AA76 :004062B3 C745FC00000000 mov dword[ebp-04], 00000000 :004062BA 8D45E8 lea eax, dword[ebp-18] :004062BD 50 push eax :004062BE 8B4D08 mov ecx, dword[ebp+08] :004062C1 51 push ecx :004062C2 E809DDFFFF call 00403FD0 :004062C7 83C408 add esp, 00000008 :004062CA 8B5510 mov edx, dword[ebp+10] :004062CD 8955EC mov dword[ebp-14], edx :004062D0 8B45EC mov eax, dword[ebp-14] :004062D3 50 push eax :004062D4 6840434000 push 00404340 :004062D9 6890C74000 push 0040C790 (StringData)"POPROXY_ID" :004062DE 8D4DF0 lea ecx, dword[ebp-10] :004062E1 51 push ecx :004062E2 8B550C mov edx, dword[ebp+0C] :004062E5 52 push edx :004062E6 6A00 push 00000000 :004062E8 8D4DE8 lea ecx, dword[ebp-18] :004062EB E870C9FFFF call 00402C60 :004062F0 50 push eax :004062F1 6A01 push 00000001 :004062F3 8B4508 mov eax, dword[ebp+08] :004062F6 50 push eax :004062F7 6A00 push 00000000 :004062F9 E806470000 call 0040AA04 ;;call LiteScan.LiteProcessItem :004062FE C745E401000000 mov dword[ebp-1C], 00000001 :00406305 C745FCFFFFFFFF mov dword[ebp-04], FFFFFFFF :0040630C 8D4DE8 lea ecx, dword[ebp-18] :0040630F E86E470000 call 0040AA82 :00406314 8B45E4 mov eax, dword[ebp-1C] :00406317 8B4DF4 mov ecx, dword[ebp-0C] :0040631A 64890D00000000 mov dword fs:[00000000], ecx :00406321 8BE5 mov esp, ebp :00406323 5D pop ebp :00406324 C3 ret :00406325 CC CC CC CC CC CC CC CC CC CC CC ........... :00406330 55 push ebp :00406331 8BEC mov ebp, esp :00406333 51 push ecx :00406334 894DFC mov dword[ebp-04], ecx :00406337 8B4DFC mov ecx, dword[ebp-04] :0040633A E891D5FFFF call 004038D0 :0040633F 8B4508 mov eax, dword[ebp+08] :00406342 83E001 and eax, 00000001 :00406345 85C0 test eax, eax :00406347 740C je 00406355 :00406349 8B4DFC mov ecx, dword[ebp-04] :0040634C 51 push ecx :0040634D E848470000 call 0040AA9A :00406352 83C404 add esp, 00000004 --------- :00406355 8B45FC mov eax, dword[ebp-04] :00406358 8BE5 mov esp, ebp :0040635A 5D pop ebp :0040635B C20400 ret 0004 :0040635E CC CC .. :00406360 55 push ebp :00406361 8BEC mov ebp, esp :00406363 51 push ecx :00406364 894DFC mov dword[ebp-04], ecx :00406367 8BE5 mov esp, ebp :00406369 5D pop ebp :0040636A C20400 ret 0004 :0040636D CC CC CC ... ========= :00406370 55 push ebp :00406371 8BEC mov ebp, esp :00406373 51 push ecx :00406374 894DFC mov dword[ebp-04], ecx :00406377 6A00 push 00000000 :00406379 685CC74000 push 0040C75C (StringData)"+OK POP3 server ready " :0040637E E8374B0000 call 0040AEBA ;;call MSVCRT.strlen :00406383 83C404 add esp, 00000004 :00406386 50 push eax :00406387 685CC74000 push 0040C75C (StringData)"+OK POP3 server ready " :0040638C 8B4DFC mov ecx, dword[ebp-04] :0040638F E8CC220000 call 00408660 :00406394 83F8FF cmp eax, -00000001 :00406397 751E jne 004063B7 :00406399 6864FC4000 push 0040FC64 (StringData)"CServerSocket::Salute(), Error sending salutation." :0040639E 6898FC4000 push 0040FC98 (StringData)"%s" :004063A3 6AFF push -00000001 :004063A5 E886B2FFFF call 00401630 :004063AA 50 push eax :004063AB E810CFFFFF call 004032C0 :004063B0 83C410 add esp, 00000010 :004063B3 33C0 xor eax, eax :004063B5 EB05 jmp 004063BC --------- :004063B7 B801000000 mov eax, 00000001 --------- :004063BC 8BE5 mov esp, ebp :004063BE 5D pop ebp :004063BF C3 ret ========= :004063C0 55 push ebp :004063C1 8BEC mov ebp, esp :004063C3 6AFF push -00000001 :004063C5 6839B74000 push 0040B739 :004063CA 64A100000000 mov eax, dword fs:[00000000] :004063D0 50 push eax :004063D1 64892500000000 mov dword fs:[00000000], esp :004063D8 83EC14 sub esp, 00000014 :004063DB 894DE8 mov dword[ebp-18], ecx :004063DE 8B4D08 mov ecx, dword[ebp+08] :004063E1 E87AC8FFFF call 00402C60 :004063E6 50 push eax :004063E7 8B450C mov eax, dword[ebp+0C] :004063EA 50 push eax :004063EB 8D4DEC lea ecx, dword[ebp-14] :004063EE 51 push ecx :004063EF 8B4DE8 mov ecx, dword[ebp-18] :004063F2 E859000000 call 00406450 :004063F7 8945E4 mov dword[ebp-1C], eax :004063FA 8B55E4 mov edx, dword[ebp-1C] :004063FD 8955E0 mov dword[ebp-20], edx :00406400 C745FC00000000 mov dword[ebp-04], 00000000 :00406407 8B4DE0 mov ecx, dword[ebp-20] :0040640A E851C8FFFF call 00402C60 :0040640F 50 push eax :00406410 FF15DCC44000 call dword[0040C4DC] ;;call MSVCRT._stricmp :00406416 83C408 add esp, 00000008 :00406419 F7D8 neg eax :0040641B 1BC0 sbb eax, eax :0040641D 40 inc eax :0040641E 8945F0 mov dword[ebp-10], eax :00406421 C745FCFFFFFFFF mov dword[ebp-04], FFFFFFFF :00406428 8D4DEC lea ecx, dword[ebp-14] :0040642B E852460000 call 0040AA82 :00406430 8B45F0 mov eax, dword[ebp-10] :00406433 8B4DF4 mov ecx, dword[ebp-0C] :00406436 64890D00000000 mov dword fs:[00000000], ecx :0040643D 8BE5 mov esp, ebp :0040643F 5D pop ebp :00406440 C20800 ret 0008 :00406443 CC CC CC CC CC CC CC CC CC CC CC CC CC ............. ========= :00406450 55 push ebp :00406451 8BEC mov ebp, esp :00406453 83EC0C sub esp, 0000000C :00406456 894DF4 mov dword[ebp-0C], ecx :00406459 C745F800000000 mov dword[ebp-08], 00000000 :00406460 C745FC9CFC4000 mov dword[ebp-04], 0040FC9C (StringData)" " :00406467 8B45FC mov eax, dword[ebp-04] :0040646A 50 push eax :0040646B 8B4D08 mov ecx, dword[ebp+08] :0040646E 51 push ecx :0040646F 8B4D0C mov ecx, dword[ebp+0C] :00406472 E83F480000 call 0040ACB6 :00406477 8B55F8 mov edx, dword[ebp-08] :0040647A 83CA01 or edx, 00000001 :0040647D 8955F8 mov dword[ebp-08], edx :00406480 8B4508 mov eax, dword[ebp+08] :00406483 8BE5 mov esp, ebp :00406485 5D pop ebp :00406486 C20800 ret 0008 :00406489 CC CC CC CC CC CC CC ....... ========= :00406490 55 push ebp :00406491 8BEC mov ebp, esp :00406493 6AFF push -00000001 :00406495 6879B74000 push 0040B779 :0040649A 64A100000000 mov eax, dword fs:[00000000] :004064A0 50 push eax :004064A1 64892500000000 mov dword fs:[00000000], esp :004064A8 83EC24 sub esp, 00000024 :004064AB 894DD8 mov dword[ebp-28], ecx :004064AE C745DC00000000 mov dword[ebp-24], 00000000 :004064B5 C745E4A4FC4000 mov dword[ebp-1C], 0040FCA4 (StringData)" " :004064BC C745ECACFC4000 mov dword[ebp-14], 0040FCAC (StringData)" " :004064C3 8D4DE8 lea ecx, dword[ebp-18] :004064C6 E8AB450000 call 0040AA76 :004064CB C745FC01000000 mov dword[ebp-04], 00000001 :004064D2 8B45E4 mov eax, dword[ebp-1C] :004064D5 50 push eax :004064D6 8D4DE8 lea ecx, dword[ebp-18] :004064D9 E872470000 call 0040AC50 :004064DE 8B4DE4 mov ecx, dword[ebp-1C] :004064E1 51 push ecx :004064E2 8D4DE8 lea ecx, dword[ebp-18] :004064E5 E86C470000 call 0040AC56 :004064EA C745F000000000 mov dword[ebp-10], 00000000 :004064F1 8B55EC mov edx, dword[ebp-14] :004064F4 52 push edx :004064F5 8B4D0C mov ecx, dword[ebp+0C] :004064F8 E8C5470000 call 0040ACC2 :004064FD 83C001 add eax, 00000001 :00406500 8945F0 mov dword[ebp-10], eax :00406503 837DF000 cmp dword[ebp-10], 00000000 :00406507 7435 je 0040653E :00406509 8B45F0 mov eax, dword[ebp-10] :0040650C 50 push eax :0040650D 8D4DE0 lea ecx, dword[ebp-20] :00406510 51 push ecx :00406511 8B4D0C mov ecx, dword[ebp+0C] :00406514 E843470000 call 0040AC5C :00406519 8945D4 mov dword[ebp-2C], eax :0040651C 8B55D4 mov edx, dword[ebp-2C] :0040651F 8955D0 mov dword[ebp-30], edx :00406522 C645FC02 mov byte[ebp-04], 02 :00406526 8B45D0 mov eax, dword[ebp-30] :00406529 50 push eax :0040652A 8D4DE8 lea ecx, dword[ebp-18] :0040652D E806470000 call 0040AC38 :00406532 C645FC01 mov byte[ebp-04], 01 :00406536 8D4DE0 lea ecx, dword[ebp-20] :00406539 E844450000 call 0040AA82 --------- :0040653E 8D4DE8 lea ecx, dword[ebp-18] :00406541 51 push ecx :00406542 8B4D08 mov ecx, dword[ebp+08] :00406545 E872470000 call 0040ACBC :0040654A 8B55DC mov edx, dword[ebp-24] :0040654D 83CA01 or edx, 00000001 :00406550 8955DC mov dword[ebp-24], edx :00406553 C645FC00 mov byte[ebp-04], 00 :00406557 8D4DE8 lea ecx, dword[ebp-18] :0040655A E823450000 call 0040AA82 :0040655F 8B4508 mov eax, dword[ebp+08] :00406562 8B4DF4 mov ecx, dword[ebp-0C] :00406565 64890D00000000 mov dword fs:[00000000], ecx :0040656C 8BE5 mov esp, ebp :0040656E 5D pop ebp :0040656F C20800 ret 0008 :00406572 CC CC CC CC CC CC CC CC CC CC CC CC CC CC .............. ========= :00406580 55 push ebp :00406581 8BEC mov ebp, esp :00406583 6AFF push -00000001 :00406585 68D5B74000 push 0040B7D5 :0040658A 64A100000000 mov eax, dword fs:[00000000] :00406590 50 push eax :00406591 64892500000000 mov dword fs:[00000000], esp :00406598 51 push ecx :00406599 81EC0C010000 sub esp, 0000010C :0040659F 53 push ebx :004065A0 56 push esi :004065A1 57 push edi :004065A2 8965F0 mov dword[ebp-10], esp :004065A5 898D14FFFFFF mov dword[ebp+FFFFFF14], ecx :004065AB C745EC00000000 mov dword[ebp-14], 00000000 :004065B2 C745FC00000000 mov dword[ebp-04], 00000000 :004065B9 8B8514FFFFFF mov eax, dword[ebp+FFFFFF14] :004065BF 83784400 cmp dword[eax+44], 00000000 :004065C3 7437 je 004065FC :004065C5 8D4DB0 lea ecx, dword[ebp-50] :004065C8 51 push ecx :004065C9 68B0FC4000 push 0040FCB0 (StringData)"CServerSocket::ConnectSPAUser(), User command when socket already open." :004065CE 8D4DB4 lea ecx, dword[ebp-4C] :004065D1 FF1520C44000 call dword[0040C420] ;;call MSVCP60.??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBDABV?$allocator@D@1@@Z :004065D7 898510FFFFFF mov dword[ebp+FFFFFF10], eax :004065DD C645FC01 mov byte[ebp-04], 01 :004065E1 8D55B4 lea edx, dword[ebp-4C] :004065E4 52 push edx :004065E5 8D4DC4 lea ecx, dword[ebp-3C] :004065E8 FF151CC44000 call dword[0040C41C] ;;call MSVCP60.??0runtime_error@std@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@1@@Z :004065EE 68E8D34000 push 0040D3E8 :004065F3 8D45C4 lea eax, dword[ebp-3C] :004065F6 50 push eax :004065F7 E838490000 call 0040AF34 ;;call MSVCRT._CxxThrowException --------- :004065FC 6A40 push 00000040 :004065FE E87D460000 call 0040AC80 :00406603 83C404 add esp, 00000004 :00406606 89850CFFFFFF mov dword[ebp+FFFFFF0C], eax :0040660C 8B8D0CFFFFFF mov ecx, dword[ebp+FFFFFF0C] :00406612 894DA8 mov dword[ebp-58], ecx :00406615 C645FC02 mov byte[ebp-04], 02 :00406619 837DA800 cmp dword[ebp-58], 00000000 :0040661D 7421 je 00406640 :0040661F 6800200000 push 00002000 :00406624 8B4DA8 mov ecx, dword[ebp-58] :00406627 E8B4150000 call 00407BE0 :0040662C 898508FFFFFF mov dword[ebp+FFFFFF08], eax :00406632 8B9508FFFFFF mov edx, dword[ebp+FFFFFF08] :00406638 899504FFFFFF mov dword[ebp+FFFFFF04], edx :0040663E EB0A jmp 0040664A --------- :00406640 C78504FFFFFF00000000 mov dword[ebp+FFFFFF04], 00000000 --------- :0040664A 8B8504FFFFFF mov eax, dword[ebp+FFFFFF04] :00406650 8945AC mov dword[ebp-54], eax :00406653 C645FC00 mov byte[ebp-04], 00 :00406657 8B8D14FFFFFF mov ecx, dword[ebp+FFFFFF14] :0040665D 8B55AC mov edx, dword[ebp-54] :00406660 895144 mov dword[ecx+44], edx :00406663 6A00 push 00000000 :00406665 6A3F push 0000003F :00406667 6A01 push 00000001 :00406669 6A00 push 00000000 :0040666B 8B8514FFFFFF mov eax, dword[ebp+FFFFFF14] :00406671 8B4844 mov ecx, dword[eax+44] :00406674 E8E7250000 call 00408C60 :00406679 898500FFFFFF mov dword[ebp+FFFFFF00], eax :0040667F 83BD00FFFFFF00 cmp dword[ebp+FFFFFF00], 00000000 :00406686 7560 jne 004066E8 :00406688 6A00 push 00000000 :0040668A 6874C74000 push 0040C774 (StringData)"-ERR" :0040668F E826480000 call 0040AEBA ;;call MSVCRT.strlen :00406694 83C404 add esp, 00000004 :00406697 50 push eax :00406698 6874C74000 push 0040C774 (StringData)"-ERR" :0040669D 8B8D14FFFFFF mov ecx, dword[ebp+FFFFFF14] :004066A3 E8B81F0000 call 00408660 :004066A8 8D8D78FFFFFF lea ecx, dword[ebp+FFFFFF78] :004066AE 51 push ecx :004066AF 68F8FC4000 push 0040FCF8 (StringData)"CServerSocket::ConnectSPAUser(), Unable to Create Client socket." :004066B4 8D8D7CFFFFFF lea ecx, dword[ebp+FFFFFF7C] :004066BA FF1520C44000 call dword[0040C420] ;;call MSVCP60.??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBDABV?$allocator@D@1@@Z :004066C0 8985FCFEFFFF mov dword[ebp+FFFFFEFC], eax :004066C6 C645FC03 mov byte[ebp-04], 03 :004066CA 8D957CFFFFFF lea edx, dword[ebp+FFFFFF7C] :004066D0 52 push edx :004066D1 8D4D8C lea ecx, dword[ebp-74] :004066D4 FF151CC44000 call dword[0040C41C] ;;call MSVCP60.??0runtime_error@std@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@1@@Z :004066DA 68E8D34000 push 0040D3E8 :004066DF 8D458C lea eax, dword[ebp-74] :004066E2 50 push eax :004066E3 E84C480000 call 0040AF34 ;;call MSVCRT._CxxThrowException --------- :004066E8 8B4D0C mov ecx, dword[ebp+0C] :004066EB 51 push ecx :004066EC 8B5508 mov edx, dword[ebp+08] :004066EF 52 push edx :004066F0 8B8514FFFFFF mov eax, dword[ebp+FFFFFF14] :004066F6 8B4844 mov ecx, dword[eax+44] :004066F9 E8C2220000 call 004089C0 :004066FE 8985F8FEFFFF mov dword[ebp+FFFFFEF8], eax :00406704 83BDF8FEFFFF00 cmp dword[ebp+FFFFFEF8], 00000000 :0040670B 7566 jne 00406773 :0040670D 6A00 push 00000000 :0040670F 6874C74000 push 0040C774 (StringData)"-ERR" :00406714 E8A1470000 call 0040AEBA ;;call MSVCRT.strlen :00406719 83C404 add esp, 00000004 :0040671C 50 push eax :0040671D 6874C74000 push 0040C774 (StringData)"-ERR" :00406722 8B8D14FFFFFF mov ecx, dword[ebp+FFFFFF14] :00406728 E8331F0000 call 00408660 :0040672D 8D8D48FFFFFF lea ecx, dword[ebp+FFFFFF48] :00406733 51 push ecx :00406734 683CFD4000 push 0040FD3C (StringData)"CServerSocket::ConnectSPAUser(), Unable to connect socket." :00406739 8D8D4CFFFFFF lea ecx, dword[ebp+FFFFFF4C] :0040673F FF1520C44000 call dword[0040C420] ;;call MSVCP60.??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBDABV?$allocator@D@1@@Z :00406745 8985F4FEFFFF mov dword[ebp+FFFFFEF4], eax :0040674B C645FC04 mov byte[ebp-04], 04 :0040674F 8D954CFFFFFF lea edx, dword[ebp+FFFFFF4C] :00406755 52 push edx :00406756 8D8D5CFFFFFF lea ecx, dword[ebp+FFFFFF5C] :0040675C FF151CC44000 call dword[0040C41C] ;;call MSVCP60.??0runtime_error@std@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@1@@Z :00406762 68E8D34000 push 0040D3E8 :00406767 8D855CFFFFFF lea eax, dword[ebp+FFFFFF5C] :0040676D 50 push eax :0040676E E8C1470000 call 0040AF34 ;;call MSVCRT._CxxThrowException --------- :00406773 8D4DE4 lea ecx, dword[ebp-1C] :00406776 E8FB420000 call 0040AA76 :0040677B 8985F0FEFFFF mov dword[ebp+FFFFFEF0], eax :00406781 C645FC05 mov byte[ebp-04], 05 :00406785 C745E800000000 mov dword[ebp-18], 00000000 :0040678C 8D4DE4 lea ecx, dword[ebp-1C] :0040678F 51 push ecx :00406790 8B9514FFFFFF mov edx, dword[ebp+FFFFFF14] :00406796 8B4A44 mov ecx, dword[edx+44] :00406799 8B8514FFFFFF mov eax, dword[ebp+FFFFFF14] :0040679F 8B5044 mov edx, dword[eax+44] :004067A2 8B02 mov eax, dword[edx] :004067A4 FF501C call dword[eax+1C] :004067A7 8985ECFEFFFF mov dword[ebp+FFFFFEEC], eax :004067AD 8B8DECFEFFFF mov ecx, dword[ebp+FFFFFEEC] :004067B3 894DE8 mov dword[ebp-18], ecx :004067B6 837DE800 cmp dword[ebp-18], 00000000 :004067BA 7F46 jg 00406802 :004067BC 8D9518FFFFFF lea edx, dword[ebp+FFFFFF18] :004067C2 52 push edx :004067C3 6878FD4000 push 0040FD78 (StringData)"CServerSocket::ConnectSPAUser(), Error reading socket." :004067C8 8D8D1CFFFFFF lea ecx, dword[ebp+FFFFFF1C] :004067CE FF1520C44000 call dword[0040C420] ;;call MSVCP60.??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBDABV?$allocator@D@1@@Z :004067D4 8985E8FEFFFF mov dword[ebp+FFFFFEE8], eax :004067DA C645FC06 mov byte[ebp-04], 06 :004067DE 8D851CFFFFFF lea eax, dword[ebp+FFFFFF1C] :004067E4 50 push eax :004067E5 8D8D2CFFFFFF lea ecx, dword[ebp+FFFFFF2C] :004067EB FF151CC44000 call dword[0040C41C] ;;call MSVCP60.??0runtime_error@std@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@1@@Z :004067F1 68E8D34000 push 0040D3E8 :004067F6 8D8D2CFFFFFF lea ecx, dword[ebp+FFFFFF2C] :004067FC 51 push ecx :004067FD E832470000 call 0040AF34 ;;call MSVCRT._CxxThrowException --------- :00406802 E829AEFFFF call 00401630 :00406807 8985E4FEFFFF mov dword[ebp+FFFFFEE4], eax :0040680D 8B55E4 mov edx, dword[ebp-1C] :00406810 52 push edx :00406811 68B0FD4000 push 0040FDB0 (StringData)"%s" :00406816 6A01 push 00000001 :00406818 8B85E4FEFFFF mov eax, dword[ebp+FFFFFEE4] :0040681E 50 push eax :0040681F E89CCAFFFF call 004032C0 :00406824 83C410 add esp, 00000010 :00406827 8D4DE4 lea ecx, dword[ebp-1C] :0040682A 51 push ecx :0040682B 8B8D14FFFFFF mov ecx, dword[ebp+FFFFFF14] :00406831 E88A150000 call 00407DC0 :00406836 C645FC00 mov byte[ebp-04], 00 :0040683A 8D4DE4 lea ecx, dword[ebp-1C] :0040683D E840420000 call 0040AA82 :00406842 EB55 jmp 00406899 :00406844 8B4DE0 mov ecx, dword[ebp-20] :00406847 8B55E0 mov edx, dword[ebp-20] :0040684A 8B02 mov eax, dword[edx] :0040684C FF5004 call dword[eax+04] :0040684F 50 push eax :00406850 68B4FD4000 push 0040FDB4 (StringData)"%s" :00406855 6AFF push -00000001 :00406857 E8D4ADFFFF call 00401630 :0040685C 50 push eax :0040685D E85ECAFFFF call 004032C0 :00406862 83C410 add esp, 00000010 :00406865 C745ECFFFFFFFF mov dword[ebp-14], FFFFFFFF :0040686C B899684000 mov eax, 00406899 :00406871 C3 ret :00406872 68B8FD4000 push 0040FDB8 (StringData)"CServerSocket::ConnectSPAUser(), Unexpected error encountered." :00406877 68F8FD4000 push 0040FDF8 (StringData)"%s" :0040687C 6AFF push -00000001 :0040687E E8ADADFFFF call 00401630 :00406883 50 push eax :00406884 E837CAFFFF call 004032C0 :00406889 83C410 add esp, 00000010 :0040688C C745ECFFFFFFFF mov dword[ebp-14], FFFFFFFF :00406893 B899684000 mov eax, 00406899 :00406898 C3 ret :00406899 C7 45 FC .E. :0040689C FFFFFFFF DWORD FFFFFFFF ;; .... :004068A0 8B 45 EC 8B 4D F4 64 89 0D 00 00 00 00 5F 5E 5B .E..M.d......_^[ :004068B0 8B E5 5D C2 08 00 CC CC CC CC CC CC CC CC CC CC ..]............. ========= :004068C0 55 push ebp :004068C1 8BEC mov ebp, esp :004068C3 6AFF push -00000001 :004068C5 6831B84000 push 0040B831 :004068CA 64A100000000 mov eax, dword fs:[00000000] :004068D0 50 push eax :004068D1 64892500000000 mov dword fs:[00000000], esp :004068D8 51 push ecx :004068D9 81EC7C010000 sub esp, 0000017C :004068DF 53 push ebx :004068E0 56 push esi :004068E1 57 push edi :004068E2 8965F0 mov dword[ebp-10], esp :004068E5 898DB8FEFFFF mov dword[ebp+FFFFFEB8], ecx :004068EB C745EC00000000 mov dword[ebp-14], 00000000 :004068F2 C745FC00000000 mov dword[ebp-04], 00000000 :004068F9 8B8DB8FEFFFF mov ecx, dword[ebp+FFFFFEB8] :004068FF E85CEDFFFF call 00405660 :00406904 8985B4FEFFFF mov dword[ebp+FFFFFEB4], eax :0040690A 83BDB4FEFFFF00 cmp dword[ebp+FFFFFEB4], 00000000 :00406911 7537 jne 0040694A :00406913 8D45AC lea eax, dword[ebp-54] :00406916 50 push eax :00406917 68FCFD4000 push 0040FDFC (StringData)"CServerSocket::DoDotTerminatedResponseCommand, IsClientSocketOpen() == FALSE" :0040691C 8D4DB0 lea ecx, dword[ebp-50] :0040691F FF1520C44000 call dword[0040C420] ;;call MSVCP60.??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBDABV?$allocator@D@1@@Z :00406925 8985B0FEFFFF mov dword[ebp+FFFFFEB0], eax :0040692B C645FC01 mov byte[ebp-04], 01 :0040692F 8D4DB0 lea ecx, dword[ebp-50] :00406932 51 push ecx :00406933 8D4DC0 lea ecx, dword[ebp-40] :00406936 FF151CC44000 call dword[0040C41C] ;;call MSVCP60.??0runtime_error@std@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@1@@Z :0040693C 68E8D34000 push 0040D3E8 :00406941 8D55C0 lea edx, dword[ebp-40] :00406944 52 push edx :00406945 E8EA450000 call 0040AF34 ;;call MSVCRT._CxxThrowException --------- :0040694A C745E400000000 mov dword[ebp-1C], 00000000 :00406951 C745E801000000 mov dword[ebp-18], 00000001 :00406958 8B4508 mov eax, dword[ebp+08] :0040695B 50 push eax :0040695C 8B8DB8FEFFFF mov ecx, dword[ebp+FFFFFEB8] :00406962 8B4944 mov ecx, dword[ecx+44] :00406965 E856140000 call 00407DC0 :0040696A 8985ACFEFFFF mov dword[ebp+FFFFFEAC], eax :00406970 8B95ACFEFFFF mov edx, dword[ebp+FFFFFEAC] :00406976 8955E4 mov dword[ebp-1C], edx :00406979 837DE400 cmp dword[ebp-1C], 00000000 :0040697D 7F3A jg 004069B9 :0040697F 8D857CFFFFFF lea eax, dword[ebp+FFFFFF7C] :00406985 50 push eax :00406986 684CFE4000 push 0040FE4C (StringData)"CServerSocket::DoDotTerminatedResponseCommand, SendLine() == (<=0)" :0040698B 8D4D80 lea ecx, dword[ebp-80] :0040698E FF1520C44000 call dword[0040C420] ;;call MSVCP60.??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBDABV?$allocator@D@1@@Z :00406994 8985A8FEFFFF mov dword[ebp+FFFFFEA8], eax :0040699A C645FC02 mov byte[ebp-04], 02 :0040699E 8D4D80 lea ecx, dword[ebp-80] :004069A1 51 push ecx :004069A2 8D4D90 lea ecx, dword[ebp-70] :004069A5 FF151CC44000 call dword[0040C41C] ;;call MSVCP60.??0runtime_error@std@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@1@@Z :004069AB 68E8D34000 push 0040D3E8 :004069B0 8D5590 lea edx, dword[ebp-70] :004069B3 52 push edx :004069B4 E87B450000 call 0040AF34 ;;call MSVCRT._CxxThrowException --------- :004069B9 8D4DE0 lea ecx, dword[ebp-20] :004069BC E8B5400000 call 0040AA76 :004069C1 8985A4FEFFFF mov dword[ebp+FFFFFEA4], eax :004069C7 C645FC03 mov byte[ebp-04], 03 :004069CB 8D45E0 lea eax, dword[ebp-20] :004069CE 50 push eax :004069CF 8B8DB8FEFFFF mov ecx, dword[ebp+FFFFFEB8] :004069D5 8B4944 mov ecx, dword[ecx+44] :004069D8 8B95B8FEFFFF mov edx, dword[ebp+FFFFFEB8] :004069DE 8B4244 mov eax, dword[edx+44] :004069E1 8B10 mov edx, dword[eax] :004069E3 FF521C call dword[edx+1C] :004069E6 8985A0FEFFFF mov dword[ebp+FFFFFEA0], eax :004069EC 8B85A0FEFFFF mov eax, dword[ebp+FFFFFEA0] :004069F2 8945E4 mov dword[ebp-1C], eax :004069F5 837DE400 cmp dword[ebp-1C], 00000000 :004069F9 7F46 jg 00406A41 :004069FB 8D8D4CFFFFFF lea ecx, dword[ebp+FFFFFF4C] :00406A01 51 push ecx :00406A02 6890FE4000 push 0040FE90 (StringData)"CServerSocket::DoDotTerminatedResponseCommand, ReadLine() == (<=0)" :00406A07 8D8D50FFFFFF lea ecx, dword[ebp+FFFFFF50] :00406A0D FF1520C44000 call dword[0040C420] ;;call MSVCP60.??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBDABV?$allocator@D@1@@Z :00406A13 89859CFEFFFF mov dword[ebp+FFFFFE9C], eax :00406A19 C645FC04 mov byte[ebp-04], 04 :00406A1D 8D9550FFFFFF lea edx, dword[ebp+FFFFFF50] :00406A23 52 push edx :00406A24 8D8D60FFFFFF lea ecx, dword[ebp+FFFFFF60] :00406A2A FF151CC44000 call dword[0040C41C] ;;call MSVCP60.??0runtime_error@std@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@1@@Z :00406A30 68E8D34000 push 0040D3E8 :00406A35 8D8560FFFFFF lea eax, dword[ebp+FFFFFF60] :00406A3B 50 push eax :00406A3C E8F3440000 call 0040AF34 ;;call MSVCRT._CxxThrowException --------- :00406A41 E8EAABFFFF call 00401630 :00406A46 898598FEFFFF mov dword[ebp+FFFFFE98], eax :00406A4C 8B4DE0 mov ecx, dword[ebp-20] :00406A4F 51 push ecx :00406A50 68D4FE4000 push 0040FED4 (StringData)"%s" :00406A55 6A01 push 00000001 :00406A57 8B9598FEFFFF mov edx, dword[ebp+FFFFFE98] :00406A5D 52 push edx :00406A5E E85DC8FFFF call 004032C0 :00406A63 83C410 add esp, 00000010 :00406A66 6A00 push 00000000 :00406A68 8D4DE0 lea ecx, dword[ebp-20] :00406A6B E8F00A0000 call 00407560 :00406A70 888594FEFFFF mov byte[ebp+FFFFFE94], al :00406A76 8B8594FEFFFF mov eax, dword[ebp+FFFFFE94] :00406A7C 25FF000000 and eax, 000000FF :00406A81 83F82B cmp eax, 0000002B :00406A84 7407 je 00406A8D :00406A86 C745E800000000 mov dword[ebp-18], 00000000 --------- :00406A8D 8D4DE0 lea ecx, dword[ebp-20] :00406A90 51 push ecx :00406A91 8B8DB8FEFFFF mov ecx, dword[ebp+FFFFFEB8] :00406A97 E824130000 call 00407DC0 :00406A9C 898590FEFFFF mov dword[ebp+FFFFFE90], eax :00406AA2 8B9590FEFFFF mov edx, dword[ebp+FFFFFE90] :00406AA8 8955E4 mov dword[ebp-1C], edx :00406AAB 837DE400 cmp dword[ebp-1C], 00000000 :00406AAF 7F46 jg 00406AF7 :00406AB1 8D851CFFFFFF lea eax, dword[ebp+FFFFFF1C] :00406AB7 50 push eax :00406AB8 68D8FE4000 push 0040FED8 (StringData)"CServerSocket::DoDotTerminatedResponseCommand, SendLine() == (<=0)" :00406ABD 8D8D20FFFFFF lea ecx, dword[ebp+FFFFFF20] :00406AC3 FF1520C44000 call dword[0040C420] ;;call MSVCP60.??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBDABV?$allocator@D@1@@Z :00406AC9 89858CFEFFFF mov dword[ebp+FFFFFE8C], eax :00406ACF C645FC05 mov byte[ebp-04], 05 :00406AD3 8D8D20FFFFFF lea ecx, dword[ebp+FFFFFF20] :00406AD9 51 push ecx :00406ADA 8D8D30FFFFFF lea ecx, dword[ebp+FFFFFF30] :00406AE0 FF151CC44000 call dword[0040C41C] ;;call MSVCP60.??0runtime_error@std@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@1@@Z :00406AE6 68E8D34000 push 0040D3E8 :00406AEB 8D9530FFFFFF lea edx, dword[ebp+FFFFFF30] :00406AF1 52 push edx :00406AF2 E83D440000 call 0040AF34 ;;call MSVCRT._CxxThrowException --------- :00406AF7 837DE800 cmp dword[ebp-18], 00000000 :00406AFB 0F8442010000 je 00406C43 :00406B01 8B85B8FEFFFF mov eax, dword[ebp+FFFFFEB8] :00406B07 83784400 cmp dword[eax+44], 00000000 :00406B0B 0F8432010000 je 00406C43 :00406B11 681CFF4000 push 0040FF1C (StringData)"." :00406B16 8D4DE0 lea ecx, dword[ebp-20] :00406B19 51 push ecx :00406B1A E8C10A0000 call 004075E0 :00406B1F 888588FEFFFF mov byte[ebp+FFFFFE88], al :00406B25 8B9588FEFFFF mov edx, dword[ebp+FFFFFE88] :00406B2B 81E2FF000000 and edx, 000000FF :00406B31 85D2 test edx, edx :00406B33 0F840A010000 je 00406C43 :00406B39 8D45E0 lea eax, dword[ebp-20] :00406B3C 50 push eax :00406B3D 8B8DB8FEFFFF mov ecx, dword[ebp+FFFFFEB8] :00406B43 8B4944 mov ecx, dword[ecx+44] :00406B46 8B95B8FEFFFF mov edx, dword[ebp+FFFFFEB8] :00406B4C 8B4244 mov eax, dword[edx+44] :00406B4F 8B10 mov edx, dword[eax] :00406B51 FF521C call dword[edx+1C] :00406B54 898584FEFFFF mov dword[ebp+FFFFFE84], eax :00406B5A 8B8584FEFFFF mov eax, dword[ebp+FFFFFE84] :00406B60 8945E4 mov dword[ebp-1C], eax :00406B63 837DE400 cmp dword[ebp-1C], 00000000 :00406B67 7D46 jge 00406BAF :00406B69 8D8DECFEFFFF lea ecx, dword[ebp+FFFFFEEC] :00406B6F 51 push ecx :00406B70 6820FF4000 push 0040FF20 (StringData)"CServerSocket::DoDotTerminatedResponseCommand, ReadLine() == (<=0)" :00406B75 8D8DF0FEFFFF lea ecx, dword[ebp+FFFFFEF0] :00406B7B FF1520C44000 call dword[0040C420] ;;call MSVCP60.??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBDABV?$allocator@D@1@@Z :00406B81 898580FEFFFF mov dword[ebp+FFFFFE80], eax :00406B87 C645FC06 mov byte[ebp-04], 06 :00406B8B 8D95F0FEFFFF lea edx, dword[ebp+FFFFFEF0] :00406B91 52 push edx :00406B92 8D8D00FFFFFF lea ecx, dword[ebp+FFFFFF00] :00406B98 FF151CC44000 call dword[0040C41C] ;;call MSVCP60.??0runtime_error@std@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@1@@Z :00406B9E 68E8D34000 push 0040D3E8 :00406BA3 8D8500FFFFFF lea eax, dword[ebp+FFFFFF00] :00406BA9 50 push eax :00406BAA E885430000 call 0040AF34 ;;call MSVCRT._CxxThrowException --------- :00406BAF E87CAAFFFF call 00401630 :00406BB4 89857CFEFFFF mov dword[ebp+FFFFFE7C], eax :00406BBA 8B4DE0 mov ecx, dword[ebp-20] :00406BBD 51 push ecx :00406BBE 6864FF4000 push 0040FF64 (StringData)"%s" :00406BC3 6A01 push 00000001 :00406BC5 8B957CFEFFFF mov edx, dword[ebp+FFFFFE7C] :00406BCB 52 push edx :00406BCC E8EFC6FFFF call 004032C0 :00406BD1 83C410 add esp, 00000010 :00406BD4 8D45E0 lea eax, dword[ebp-20] :00406BD7 50 push eax :00406BD8 8B8DB8FEFFFF mov ecx, dword[ebp+FFFFFEB8] :00406BDE E8DD110000 call 00407DC0 :00406BE3 898578FEFFFF mov dword[ebp+FFFFFE78], eax :00406BE9 8B8D78FEFFFF mov ecx, dword[ebp+FFFFFE78] :00406BEF 894DE4 mov dword[ebp-1C], ecx :00406BF2 837DE400 cmp dword[ebp-1C], 00000000 :00406BF6 7D46 jge 00406C3E :00406BF8 8D95BCFEFFFF lea edx, dword[ebp+FFFFFEBC] :00406BFE 52 push edx :00406BFF 6868FF4000 push 0040FF68 (StringData)"CServerSocket::DoDotTerminatedResponseCommand, SendLine() == (<=0)" :00406C04 8D8DC0FEFFFF lea ecx, dword[ebp+FFFFFEC0] :00406C0A FF1520C44000 call dword[0040C420] ;;call MSVCP60.??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBDABV?$allocator@D@1@@Z :00406C10 898574FEFFFF mov dword[ebp+FFFFFE74], eax :00406C16 C645FC07 mov byte[ebp-04], 07 :00406C1A 8D85C0FEFFFF lea eax, dword[ebp+FFFFFEC0] :00406C20 50 push eax :00406C21 8D8DD0FEFFFF lea ecx, dword[ebp+FFFFFED0] :00406C27 FF151CC44000 call dword[0040C41C] ;;call MSVCP60.??0runtime_error@std@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@1@@Z :00406C2D 68E8D34000 push 0040D3E8 :00406C32 8D8DD0FEFFFF lea ecx, dword[ebp+FFFFFED0] :00406C38 51 push ecx :00406C39 E8F6420000 call 0040AF34 ;;call MSVCRT._CxxThrowException --------- :00406C3E E9B4FEFFFF jmp 00406AF7 --------- :00406C43 C745EC01000000 mov dword[ebp-14], 00000001 :00406C4A C645FC00 mov byte[ebp-04], 00 :00406C4E 8D4DE0 lea ecx, dword[ebp-20] :00406C51 E82C3E0000 call 0040AA82 :00406C56 EB47 jmp 00406C9F :00406C58 8B4DDC mov ecx, dword[ebp-24] :00406C5B 8B55DC mov edx, dword[ebp-24] :00406C5E 8B02 mov eax, dword[edx] :00406C60 FF5004 call dword[eax+04] :00406C63 50 push eax :00406C64 68ACFF4000 push 0040FFAC (StringData)"%s" :00406C69 6AFF push -00000001 :00406C6B E8C0A9FFFF call 00401630 :00406C70 50 push eax :00406C71 E84AC6FFFF call 004032C0 :00406C76 83C410 add esp, 00000010 :00406C79 B89F6C4000 mov eax, 00406C9F :00406C7E C3 ret :00406C7F 68B0FF4000 push 0040FFB0 (StringData)"CServerSocket::DoDotTerminatedResponseCommand, Unexpected error encountered." :00406C84 6800004100 push 00410000 (StringData)"%s" :00406C89 6AFF push -00000001 :00406C8B E8A0A9FFFF call 00401630 :00406C90 50 push eax :00406C91 E82AC6FFFF call 004032C0 :00406C96 83C410 add esp, 00000010 :00406C99 B89F6C4000 mov eax, 00406C9F :00406C9E C3 ret :00406C9F C7 45 FC .E. :00406CA2 FFFFFFFF DWORD FFFFFFFF ;; .... :00406CA6 8B 45 EC 8B 4D F4 64 89 0D 00 00 00 00 5F 5E 5B .E..M.d......_^[ :00406CB6 8B E5 5D C2 04 00 CC CC CC CC ..]....... ========= :00406CC0 55 push ebp :00406CC1 8BEC mov ebp, esp :00406CC3 51 push ecx :00406CC4 894DFC mov dword[ebp-04], ecx :00406CC7 6A00 push 00000000 :00406CC9 6A00 push 00000000 :00406CCB 8B45FC mov eax, dword[ebp-04] :00406CCE 8B10 mov edx, dword[eax] :00406CD0 8B4DFC mov ecx, dword[ebp-04] :00406CD3 FF5230 call dword[edx+30] :00406CD6 8BE5 mov esp, ebp :00406CD8 5D pop ebp :00406CD9 C3 ret :00406CDA CC CC CC CC CC CC ...... :00406CE0 55 push ebp :00406CE1 8BEC mov ebp, esp :00406CE3 83EC0C sub esp, 0000000C :00406CE6 894DF4 mov dword[ebp-0C], ecx :00406CE9 C745FC00000000 mov dword[ebp-04], 00000000 :00406CF0 8B4D08 mov ecx, dword[ebp+08] :00406CF3 E848080000 call 00407540 :00406CF8 85C0 test eax, eax :00406CFA 754E jne 00406D4A :00406CFC C745F800000000 mov dword[ebp-08], 00000000 :00406D03 EB09 jmp 00406D0E --------- :00406D05 8B45F8 mov eax, dword[ebp-08] :00406D08 83C001 add eax, 00000001 :00406D0B 8945F8 mov dword[ebp-08], eax --------- :00406D0E 8B4D08 mov ecx, dword[ebp+08] :00406D11 E83AD1FFFF call 00403E50 :00406D16 3945F8 cmp dword[ebp-08], eax :00406D19 7D2F jge 00406D4A :00406D1B 8B4DF8 mov ecx, dword[ebp-08] :00406D1E 51 push ecx :00406D1F 8B4D08 mov ecx, dword[ebp+08] :00406D22 E839080000 call 00407560 :00406D27 25FF000000 and eax, 000000FF :00406D2C 50 push eax :00406D2D FF159CC44000 call dword[0040C49C] ;;call MSVCRT._ismbcdigit :00406D33 83C404 add esp, 00000004 :00406D36 33D2 xor edx, edx :00406D38 85C0 test eax, eax :00406D3A 0F9FC2 setg dl :00406D3D 8955FC mov dword[ebp-04], edx :00406D40 837DFC00 cmp dword[ebp-04], 00000000 :00406D44 7502 jne 00406D48 :00406D46 EB02 jmp 00406D4A --------- :00406D48 EBBB jmp 00406D05 --------- :00406D4A 8B45FC mov eax, dword[ebp-04] :00406D4D 8BE5 mov esp, ebp :00406D4F 5D pop ebp :00406D50 C20400 ret 0004 :00406D53 CC CC CC CC CC CC CC CC CC CC CC CC CC ............. :00406D60 55 push ebp :00406D61 8BEC mov ebp, esp :00406D63 6AFF push -00000001 :00406D65 68B5B84000 push 0040B8B5 :00406D6A 64A100000000 mov eax, dword fs:[00000000] :00406D70 50 push eax :00406D71 64892500000000 mov dword fs:[00000000], esp :00406D78 51 push ecx :00406D79 81EC40010000 sub esp, 00000140 :00406D7F 53 push ebx :00406D80 56 push esi :00406D81 57 push edi :00406D82 8965F0 mov dword[ebp-10], esp :00406D85 894D80 mov dword[ebp-80], ecx :00406D88 C745EC00000000 mov dword[ebp-14], 00000000 :00406D8F C745FC00000000 mov dword[ebp-04], 00000000 :00406D96 E895A8FFFF call 00401630 :00406D9B 89857CFFFFFF mov dword[ebp+FFFFFF7C], eax :00406DA1 8B4508 mov eax, dword[ebp+08] :00406DA4 8B08 mov ecx, dword[eax] :00406DA6 51 push ecx :00406DA7 6804004100 push 00410004 (StringData)"%s" :00406DAC 6A00 push 00000000 :00406DAE 8B957CFFFFFF mov edx, dword[ebp+FFFFFF7C] :00406DB4 52 push edx :00406DB5 E806C5FFFF call 004032C0 :00406DBA 83C410 add esp, 00000010 :00406DBD C745E800000000 mov dword[ebp-18], 00000000 :00406DC4 6808004100 push 00410008 (StringData)"CAPA" :00406DC9 8D4DDC lea ecx, dword[ebp-24] :00406DCC E8EF3D0000 call 0040ABC0 :00406DD1 898578FFFFFF mov dword[ebp+FFFFFF78], eax :00406DD7 C645FC01 mov byte[ebp-04], 01 :00406DDB 8B4508 mov eax, dword[ebp+08] :00406DDE 50 push eax :00406DDF 8D4DDC lea ecx, dword[ebp-24] :00406DE2 51 push ecx :00406DE3 8B4D80 mov ecx, dword[ebp-80] :00406DE6 E8D5F5FFFF call 004063C0 :00406DEB 898574FFFFFF mov dword[ebp+FFFFFF74], eax :00406DF1 8B9574FFFFFF mov edx, dword[ebp+FFFFFF74] :00406DF7 8955E0 mov dword[ebp-20], edx :00406DFA C645FC00 mov byte[ebp-04], 00 :00406DFE 8D4DDC lea ecx, dword[ebp-24] :00406E01 E87C3C0000 call 0040AA82 :00406E06 837DE000 cmp dword[ebp-20], 00000000 :00406E0A 0F84A4000000 je 00406EB4 :00406E10 8B4580 mov eax, dword[ebp-80] :00406E13 83784400 cmp dword[eax+44], 00000000 :00406E17 741D je 00406E36 :00406E19 8B4D08 mov ecx, dword[ebp+08] :00406E1C 51 push ecx :00406E1D 8B4D80 mov ecx, dword[ebp-80] :00406E20 E89BFAFFFF call 004068C0 :00406E25 898570FFFFFF mov dword[ebp+FFFFFF70], eax :00406E2B 8B9570FFFFFF mov edx, dword[ebp+FFFFFF70] :00406E31 8955E8 mov dword[ebp-18], edx :00406E34 EB79 jmp 00406EAF --------- :00406E36 6874C74000 push 0040C774 (StringData)"-ERR" :00406E3B 8D4DD8 lea ecx, dword[ebp-28] :00406E3E E87D3D0000 call 0040ABC0 :00406E43 89856CFFFFFF mov dword[ebp+FFFFFF6C], eax :00406E49 8B856CFFFFFF mov eax, dword[ebp+FFFFFF6C] :00406E4F 898568FFFFFF mov dword[ebp+FFFFFF68], eax :00406E55 C645FC02 mov byte[ebp-04], 02 :00406E59 8B8D68FFFFFF mov ecx, dword[ebp+FFFFFF68] :00406E5F 51 push ecx :00406E60 8B4D80 mov ecx, dword[ebp-80] :00406E63 E8580F0000 call 00407DC0 :00406E68 898564FFFFFF mov dword[ebp+FFFFFF64], eax :00406E6E 33D2 xor edx, edx :00406E70 83BD64FFFFFF00 cmp dword[ebp+FFFFFF64], 00000000 :00406E77 0F9FC2 setg dl :00406E7A 8955E8 mov dword[ebp-18], edx :00406E7D C645FC00 mov byte[ebp-04], 00 :00406E81 8D4DD8 lea ecx, dword[ebp-28] :00406E84 E8F93B0000 call 0040AA82 :00406E89 E8A2A7FFFF call 00401630 :00406E8E 898560FFFFFF mov dword[ebp+FFFFFF60], eax :00406E94 6874C74000 push 0040C774 (StringData)"-ERR" :00406E99 6810004100 push 00410010 (StringData)"%s" :00406E9E 6A01 push 00000001 :00406EA0 8B8560FFFFFF mov eax, dword[ebp+FFFFFF60] :00406EA6 50 push eax :00406EA7 E814C4FFFF call 004032C0 :00406EAC 83C410 add esp, 00000010 --------- :00406EAF E9CB050000 jmp 0040747F --------- :00406EB4 6814004100 push 00410014 (StringData)"USER" :00406EB9 8D4DD0 lea ecx, dword[ebp-30] :00406EBC E8FF3C0000 call 0040ABC0 :00406EC1 89855CFFFFFF mov dword[ebp+FFFFFF5C], eax :00406EC7 C645FC03 mov byte[ebp-04], 03 :00406ECB 8B4D08 mov ecx, dword[ebp+08] :00406ECE 51 push ecx :00406ECF 8D55D0 lea edx, dword[ebp-30] :00406ED2 52 push edx :00406ED3 8B4D80 mov ecx, dword[ebp-80] :00406ED6 E8E5F4FFFF call 004063C0 :00406EDB 898558FFFFFF mov dword[ebp+FFFFFF58], eax :00406EE1 83BD58FFFFFF00 cmp dword[ebp+FFFFFF58], 00000000 :00406EE8 7428 je 00406F12 :00406EEA 8B4580 mov eax, dword[ebp-80] :00406EED 33C9 xor ecx, ecx :00406EEF 83784400 cmp dword[eax+44], 00000000 :00406EF3 0F94C1 sete cl :00406EF6 884DCC mov byte[ebp-34], cl :00406EF9 8B55CC mov edx, dword[ebp-34] :00406EFC 81E2FF000000 and edx, 000000FF :00406F02 85D2 test edx, edx :00406F04 740C je 00406F12 :00406F06 C78554FFFFFF01000000 mov dword[ebp+FFFFFF54], 00000001 :00406F10 EB0A jmp 00406F1C --------- :00406F12 C78554FFFFFF00000000 mov dword[ebp+FFFFFF54], 00000000 --------- :00406F1C 8A8554FFFFFF mov al, byte[ebp+FFFFFF54] :00406F22 8845D4 mov byte[ebp-2C], al :00406F25 C645FC00 mov byte[ebp-04], 00 :00406F29 8D4DD0 lea ecx, dword[ebp-30] :00406F2C E8513B0000 call 0040AA82 :00406F31 8B4DD4 mov ecx, dword[ebp-2C] :00406F34 81E1FF000000 and ecx, 000000FF :00406F3A 85C9 test ecx, ecx :00406F3C 7455 je 00406F93 :00406F3E 8B5508 mov edx, dword[ebp+08] :00406F41 52 push edx :00406F42 8D45C8 lea eax, dword[ebp-38] :00406F45 50 push eax :00406F46 8B4D80 mov ecx, dword[ebp-80] :00406F49 E842F5FFFF call 00406490 :00406F4E 898550FFFFFF mov dword[ebp+FFFFFF50], eax :00406F54 8B8D50FFFFFF mov ecx, dword[ebp+FFFFFF50] :00406F5A 898D4CFFFFFF mov dword[ebp+FFFFFF4C], ecx :00406F60 C645FC04 mov byte[ebp-04], 04 :00406F64 8B954CFFFFFF mov edx, dword[ebp+FFFFFF4C] :00406F6A 52 push edx :00406F6B 8B4D80 mov ecx, dword[ebp-80] :00406F6E E8DDD7FFFF call 00404750 :00406F73 898548FFFFFF mov dword[ebp+FFFFFF48], eax :00406F79 8B8548FFFFFF mov eax, dword[ebp+FFFFFF48] :00406F7F 8945E8 mov dword[ebp-18], eax :00406F82 C645FC00 mov byte[ebp-04], 00 :00406F86 8D4DC8 lea ecx, dword[ebp-38] :00406F89 E8F43A0000 call 0040AA82 :00406F8E E9EC040000 jmp 0040747F --------- :00406F93 681C004100 push 0041001C (StringData)"RETR" :00406F98 8D4DC0 lea ecx, dword[ebp-40] :00406F9B E8203C0000 call 0040ABC0 :00406FA0 898544FFFFFF mov dword[ebp+FFFFFF44], eax :00406FA6 C645FC05 mov byte[ebp-04], 05 :00406FAA 8B4D08 mov ecx, dword[ebp+08] :00406FAD 51 push ecx :00406FAE 8D55C0 lea edx, dword[ebp-40] :00406FB1 52 push edx :00406FB2 8B4D80 mov ecx, dword[ebp-80] :00406FB5 E806F4FFFF call 004063C0 :00406FBA 898540FFFFFF mov dword[ebp+FFFFFF40], eax :00406FC0 8B8540FFFFFF mov eax, dword[ebp+FFFFFF40] :00406FC6 8945C4 mov dword[ebp-3C], eax :00406FC9 C645FC00 mov byte[ebp-04], 00 :00406FCD 8D4DC0 lea ecx, dword[ebp-40] :00406FD0 E8AD3A0000 call 0040AA82 :00406FD5 837DC400 cmp dword[ebp-3C], 00000000 :00406FD9 0F8406010000 je 004070E5 :00406FDF 8B4D80 mov ecx, dword[ebp-80] :00406FE2 83796000 cmp dword[ecx+60], 00000000 :00406FE6 0F84B3000000 je 0040709F :00406FEC 8B5580 mov edx, dword[ebp-80] :00406FEF 83BAB400000000 cmp dword[edx+000000B4], 00000000 :00406FF6 0F85A3000000 jne 0040709F :00406FFC 8B4580 mov eax, dword[ebp-80] :00406FFF 83785400 cmp dword[eax+54], 00000000 :00407003 740E je 00407013 :00407005 8B0DAC0E4100 mov ecx, dword[00410EAC] :0040700B 898D3CFFFFFF mov dword[ebp+FFFFFF3C], ecx :00407011 EB0C jmp 0040701F --------- :00407013 8B15980E4100 mov edx, dword[00410E98] :00407019 89953CFFFFFF mov dword[ebp+FFFFFF3C], edx --------- :0040701F B9940E4100 mov ecx, 00410E94 :00407024 E837BCFFFF call 00402C60 :00407029 898538FFFFFF mov dword[ebp+FFFFFF38], eax :0040702F E8FCA5FFFF call 00401630 :00407034 898534FFFFFF mov dword[ebp+FFFFFF34], eax :0040703A 8B8534FFFFFF mov eax, dword[ebp+FFFFFF34] :00407040 898530FFFFFF mov dword[ebp+FFFFFF30], eax :00407046 8B8D30FFFFFF mov ecx, dword[ebp+FFFFFF30] :0040704C 8B9530FFFFFF mov edx, dword[ebp+FFFFFF30] :00407052 8B02 mov eax, dword[edx] :00407054 FF507C call dword[eax+7C] :00407057 89852CFFFFFF mov dword[ebp+FFFFFF2C], eax :0040705D 8B8D2CFFFFFF mov ecx, dword[ebp+FFFFFF2C] :00407063 E898050000 call 00407600 :00407068 898528FFFFFF mov dword[ebp+FFFFFF28], eax :0040706E 8B8D38FFFFFF mov ecx, dword[ebp+FFFFFF38] :00407074 51 push ecx :00407075 8B953CFFFFFF mov edx, dword[ebp+FFFFFF3C] :0040707B 52 push edx :0040707C 8B4580 mov eax, dword[ebp-80] :0040707F 8B4850 mov ecx, dword[eax+50] :00407082 51 push ecx :00407083 8B9528FFFFFF mov edx, dword[ebp+FFFFFF28] :00407089 52 push edx :0040708A E891230000 call 00409420 :0040708F 83C410 add esp, 00000010 :00407092 8B4580 mov eax, dword[ebp-80] :00407095 C780B400000001000000 mov dword[eax+000000B4], 00000001 --------- :0040709F 8B4D80 mov ecx, dword[ebp-80] :004070A2 83795400 cmp dword[ecx+54], 00000000 :004070A6 741D je 004070C5 :004070A8 8B5508 mov edx, dword[ebp+08] :004070AB 52 push edx :004070AC 8B4D80 mov ecx, dword[ebp-80] :004070AF E80CF8FFFF call 004068C0 :004070B4 898524FFFFFF mov dword[ebp+FFFFFF24], eax :004070BA 8B8524FFFFFF mov eax, dword[ebp+FFFFFF24] :004070C0 8945E8 mov dword[ebp-18], eax :004070C3 EB1B jmp 004070E0 --------- :004070C5 8B4D08 mov ecx, dword[ebp+08] :004070C8 51 push ecx :004070C9 8B4D80 mov ecx, dword[ebp-80] :004070CC E8BFE5FFFF call 00405690 :004070D1 898520FFFFFF mov dword[ebp+FFFFFF20], eax :004070D7 8B9520FFFFFF mov edx, dword[ebp+FFFFFF20] :004070DD 8955E8 mov dword[ebp-18], edx --------- :004070E0 E99A030000 jmp 0040747F :004070E5 68 h :004070E6 24004100 DWORD 00410024 ;; $.A. :004070EA 8D 4D B8 E8 CE 3A 00 00 89 85 1C FF FF FF C6 45 .M...:.........E :004070FA FC 06 8B 45 08 50 8D 4D B8 51 8B 4D 80 E8 B4 F2 ...E.P.M.Q.M.... :0040710A FF FF 89 85 18 FF FF FF 83 BD 18 FF FF FF 00 75 ...............u :0040711A 54 68 Th :0040711C 2C004100 DWORD 0041002C ;; ,.A. :00407120 8D 4D B0 E8 98 3A 00 00 89 85 14 FF FF FF C6 45 .M...:.........E :00407130 FC 07 8B 55 08 52 8D 45 B0 50 8B 4D 80 E8 7E F2 ...U.R.E.P.M..~. :00407140 FF FF 89 85 10 FF FF FF 8B 8D 10 FF FF FF 89 4D ...............M :00407150 B4 C6 45 FC 06 8D 4D B0 E8 25 39 00 00 83 7D B4 ..E...M..%9...}. :00407160 00 75 0C C7 85 0C FF FF FF 00 00 00 00 EB 0A C7 .u.............. :00407170 85 0C FF FF FF 01 00 00 00 8A 95 0C FF FF FF 88 ................ :00407180 55 BC C6 45 FC 00 8D 4D B8 E8 F4 38 00 00 8B 45 U..E...M...8...E :00407190 BC 25 FF 00 00 00 85 C0 0F 84 93 00 00 00 8B 4D .%.............M :004071A0 08 51 8D 55 A8 52 8B 4D 80 E8 E2 F2 FF FF 89 85 .Q.U.R.M........ :004071B0 08 FF FF FF 8B 85 08 FF FF FF 89 85 04 FF FF FF ................ :004071C0 C6 45 FC 08 8B 8D 04 FF FF FF 51 8B 4D 80 E8 0D .E........Q.M... :004071D0 FB FF FF 89 85 00 FF FF FF 8B 95 00 FF FF FF 89 ................ :004071E0 55 AC C6 45 FC 00 8D 4D A8 E8 94 38 00 00 83 7D U..E...M...8...} :004071F0 AC 00 74 1D 8B 45 08 50 8B 4D 80 E8 E0 DE FF FF ..t..E.P.M...... :00407200 89 85 FC FE FF FF 8B 8D FC FE FF FF 89 4D E8 EB .............M.. :00407210 1B 8B 55 08 52 8B 4D 80 E8 A3 F6 FF FF 89 85 F8 ..U.R.M......... :00407220 FE FF FF 8B 85 F8 FE FF FF 89 45 E8 E9 4E 02 00 ..........E..N.. :00407230 00 68 .h :00407232 34004100 DWORD 00410034 ;; 4.A. :00407236 8D 4D A0 E8 82 39 00 00 89 85 F4 FE FF FF C6 45 .M...9.........E :00407246 FC 09 8B 4D 08 51 8D 55 A0 52 8B 4D 80 E8 68 F1 ...M.Q.U.R.M..h. :00407256 FF FF 89 85 F0 FE FF FF 8B 85 F0 FE FF FF 89 45 ...............E :00407266 A4 C6 45 FC 00 8D 4D A0 E8 0F 38 00 00 83 7D A4 ..E...M...8...}. :00407276 00 0F 84 25 01 00 00 8B 4D 80 E8 DB E3 FF FF 89 ...%....M....... :00407286 85 EC FE FF FF 83 BD EC FE FF FF 00 0F 84 8C 00 ................ :00407296 00 00 8B 4D 08 51 8D 55 98 52 8B 4D 80 E8 E8 F1 ...M.Q.U.R.M.... :004072A6 FF FF 89 85 E8 FE FF FF 8B 85 E8 FE FF FF 89 85 ................ :004072B6 E4 FE FF FF C6 45 FC 0A 8B 8D E4 FE FF FF E8 77 .....E.........w :004072C6 02 00 00 89 85 E0 FE FF FF 8B 8D E0 FE FF FF 89 ................ :004072D6 4D 9C C6 45 FC 00 8D 4D 98 E8 9E 37 00 00 83 7D M..E...M...7...} :004072E6 9C 00 74 1D 8B 55 08 52 8B 4D 80 E8 CA F5 FF FF ..t..U.R.M...... :004072F6 89 85 DC FE FF FF 8B 85 DC FE FF FF 89 45 E8 EB .............E.. :00407306 1B 8B 4D 08 51 8B 4D 80 E8 CD DD FF FF 89 85 D8 ..M.Q.M......... :00407316 FE FF FF 8B 95 D8 FE FF FF 89 55 E8 EB 79 68 ..........U..yh :00407325 74C74000 DWORD 0040C774 ;; t.@. :00407329 8D 4D 94 E8 8F 38 00 00 89 85 D4 FE FF FF 8B 85 .M...8.......... :00407339 D4 FE FF FF 89 85 D0 FE FF FF C6 45 FC 0B 8B 8D ...........E.... :00407349 D0 FE FF FF 51 8B 4D 80 E8 6A 0A 00 00 89 85 CC ....Q.M..j...... :00407359 FE FF FF 33 D2 83 BD CC FE FF FF 00 0F 9F C2 89 ...3............ :00407369 55 E8 C6 45 FC 00 8D 4D 94 E8 0B 37 00 00 E8 B4 U..E...M...7.... :00407379 A2 FF FF 89 85 C8 FE FF FF 68 .........h :00407383 74C74000 DWORD 0040C774 ;; t.@. :00407387 68 h :00407388 3C004100 DWORD 0041003C ;; <.A. :0040738C 6A 01 8B 85 C8 FE FF FF 50 E8 26 BF FF FF 83 C4 j.......P.&..... :0040739C 10 E9 DD 00 00 00 68 ......h :004073A3 40004100 DWORD 00410040 ;; @.A. :004073A7 8D 4D 8C E8 11 38 00 00 89 85 C4 FE FF FF C6 45 .M...8.........E :004073B7 FC 0C 8B 4D 08 51 8D 55 8C 52 8B 4D 80 E8 F7 EF ...M.Q.U.R.M.... :004073C7 FF FF 89 85 C0 FE FF FF 8B 85 C0 FE FF FF 89 45 ...............E :004073D7 90 C6 45 FC 00 8D 4D 8C E8 9E 36 00 00 83 7D 90 ..E...M...6...}. :004073E7 00 74 1D 8B 4D 08 51 8B 4D 80 E8 CA F4 FF FF 89 .t..M.Q.M....... :004073F7 85 BC FE FF FF 8B 95 BC FE FF FF 89 55 E8 EB 78 ............U..x :00407407 68 h :00407408 44004100 DWORD 00410044 ;; D.A. :0040740C 8D 4D 84 E8 AC 37 00 00 89 85 B8 FE FF FF C6 45 .M...7.........E :0040741C FC 0D 8B 45 08 50 8D 4D 84 51 8B 4D 80 E8 92 EF ...E.P.M.Q.M.... :0040742C FF FF 89 85 B4 FE FF FF 8B 95 B4 FE FF FF 89 55 ...............U :0040743C 88 C6 45 FC 00 8D 4D 84 E8 39 36 00 00 83 7D 88 ..E...M..96...}. :0040744C 00 74 15 8B 45 08 50 8B 4D 80 E8 85 DC FF FF C7 .t..E.P.M....... :0040745C 45 E8 00 00 00 00 E..... :00407462 EB1B jmp 0040747F :00407464 8B4D08 mov ecx, dword[ebp+08] :00407467 51 push ecx :00407468 8B4D80 mov ecx, dword[ebp-80] :0040746B E870DCFFFF call 004050E0 :00407470 8985B0FEFFFF mov dword[ebp+FFFFFEB0], eax :00407476 8B95B0FEFFFF mov edx, dword[ebp+FFFFFEB0] :0040747C 8955E8 mov dword[ebp-18], edx --------- :0040747F 837DE800 cmp dword[ebp-18], 00000000 :00407483 750A jne 0040748F :00407485 6A01 push 00000001 :00407487 8B4D80 mov ecx, dword[ebp-80] :0040748A E871E0FFFF call 00405500 --------- :0040748F E985000000 jmp 00407519 :00407494 FF154CC04000 call dword[0040C04C] ;;call KERNEL32.GetLastError :0040749A 3D99800080 cmp eax, 80008099 :0040749F 751D jne 004074BE :004074A1 6A00 push 00000000 :004074A3 687CC74000 push 0040C77C (StringData)"-ERR TIMEOUT " :004074A8 E80D3A0000 call 0040AEBA ;;call MSVCRT.strlen :004074AD 83C404 add esp, 00000004 :004074B0 50 push eax :004074B1 687CC74000 push 0040C77C (StringData)"-ERR TIMEOUT " :004074B6 8B4D80 mov ecx, dword[ebp-80] :004074B9 E8A2110000 call 00408660 --------- :004074BE 8B4DE4 mov ecx, dword[ebp-1C] :004074C1 8B45E4 mov eax, dword[ebp-1C] :004074C4 8B10 mov edx, dword[eax] :004074C6 FF5204 call dword[edx+04] :004074C9 50 push eax :004074CA 684C004100 push 0041004C (StringData)"%s" :004074CF 6AFF push -00000001 :004074D1 E85AA1FFFF call 00401630 :004074D6 50 push eax :004074D7 E8E4BDFFFF call 004032C0 :004074DC 83C410 add esp, 00000010 :004074DF 6A01 push 00000001 :004074E1 8B4D80 mov ecx, dword[ebp-80] :004074E4 E817E0FFFF call 00405500 :004074E9 B819754000 mov eax, 00407519 :004074EE C3 ret :004074EF 68 h :004074F0 50004100 DWORD 00410050 ;; P.A. :004074F4 68 h :004074F5 88004100 DWORD 00410088 ;; ..A. :004074F9 6A FF E8 30 A1 FF FF 50 E8 BA BD FF FF 83 C4 10 j..0...P........ :00407509 6A 01 8B 4D 80 E8 ED DF FF FF B8 j..M....... :00407514 19754000 DWORD 00407519 ;; .u@. :00407518 C3 . --------- :00407519 C745FCFFFFFFFF mov dword[ebp-04], FFFFFFFF :00407520 8B45EC mov eax, dword[ebp-14] :00407523 8B4DF4 mov ecx, dword[ebp-0C] :00407526 64890D00000000 mov dword fs:[00000000], ecx :0040752D 5F pop edi :0040752E 5E pop esi :0040752F 5B pop ebx :00407530 8BE5 mov esp, ebp :00407532 5D pop ebp :00407533 C20400 ret 0004 :00407536 CC CC CC CC CC CC CC CC CC CC .......... ========= :00407540 55 push ebp :00407541 8BEC mov ebp, esp :00407543 51 push ecx :00407544 894DFC mov dword[ebp-04], ecx :00407547 8B4DFC mov ecx, dword[ebp-04] :0040754A E821C9FFFF call 00403E70 :0040754F 33C9 xor ecx, ecx :00407551 83780400 cmp dword[eax+04], 00000000 :00407555 0F94C1 sete cl :00407558 8BC1 mov eax, ecx :0040755A 8BE5 mov esp, ebp :0040755C 5D pop ebp :0040755D C3 ret :0040755E CC CC .. ========= :00407560 55 push ebp :00407561 8BEC mov ebp, esp :00407563 51 push ecx :00407564 894DFC mov dword[ebp-04], ecx :00407567 8B45FC mov eax, dword[ebp-04] :0040756A 8B08 mov ecx, dword[eax] :0040756C 8B5508 mov edx, dword[ebp+08] :0040756F 8A0411 mov al, byte[ecx+edx] :00407572 8BE5 mov esp, ebp :00407574 5D pop ebp :00407575 C20400 ret 0004 :00407578 CC CC CC CC CC CC CC CC ........ ========= :00407580 55 push ebp :00407581 8BEC mov ebp, esp :00407583 8B450C mov eax, dword[ebp+0C] :00407586 50 push eax :00407587 8B4D08 mov ecx, dword[ebp+08] :0040758A E811000000 call 004075A0 :0040758F F7D8 neg eax :00407591 1BC0 sbb eax, eax :00407593 40 inc eax :00407594 5D pop ebp :00407595 C20800 ret 0008 :00407598 CC CC CC CC CC CC CC CC ........ ========= :004075A0 55 push ebp :004075A1 8BEC mov ebp, esp :004075A3 51 push ecx :004075A4 894DFC mov dword[ebp-04], ecx :004075A7 8B4508 mov eax, dword[ebp+08] :004075AA 50 push eax :004075AB 8B4DFC mov ecx, dword[ebp-04] :004075AE 8B11 mov edx, dword[ecx] :004075B0 52 push edx :004075B1 E80A000000 call 004075C0 :004075B6 83C408 add esp, 00000008 :004075B9 8BE5 mov esp, ebp :004075BB 5D pop ebp :004075BC C20400 ret 0004 :004075BF CC . ========= :004075C0 55 push ebp :004075C1 8BEC mov ebp, esp :004075C3 8B450C mov eax, dword[ebp+0C] :004075C6 50 push eax :004075C7 8B4D08 mov ecx, dword[ebp+08] :004075CA 51 push ecx :004075CB FF1598C44000 call dword[0040C498] ;;call MSVCRT._mbscmp :004075D1 83C408 add esp, 00000008 :004075D4 5D pop ebp :004075D5 C3 ret :004075D6 CC CC CC CC CC CC CC CC CC CC .......... ========= :004075E0 55 push ebp :004075E1 8BEC mov ebp, esp :004075E3 8B450C mov eax, dword[ebp+0C] :004075E6 50 push eax :004075E7 8B4D08 mov ecx, dword[ebp+08] :004075EA E8B1FFFFFF call 004075A0 :004075EF F7D8 neg eax :004075F1 1BC0 sbb eax, eax :004075F3 F7D8 neg eax :004075F5 5D pop ebp :004075F6 C20800 ret 0008 :004075F9 CC CC CC CC CC CC CC ....... ========= :00407600 55 push ebp :00407601 8BEC mov ebp, esp :00407603 83EC08 sub esp, 00000008 :00407606 894DFC mov dword[ebp-04], ecx :00407609 837DFC00 cmp dword[ebp-04], 00000000 :0040760D 7509 jne 00407618 :0040760F C745F800000000 mov dword[ebp-08], 00000000 :00407616 EB09 jmp 00407621 --------- :00407618 8B45FC mov eax, dword[ebp-04] :0040761B 8B4820 mov ecx, dword[eax+20] :0040761E 894DF8 mov dword[ebp-08], ecx --------- :00407621 8B45F8 mov eax, dword[ebp-08] :00407624 8BE5 mov esp, ebp :00407626 5D pop ebp :00407627 C3 ret :00407628 CC CC CC CC CC CC CC CC ........ :00407630 55 push ebp :00407631 8BEC mov ebp, esp :00407633 6AFF push -00000001 :00407635 68CAB84000 push 0040B8CA :0040763A 64A100000000 mov eax, dword fs:[00000000] :00407640 50 push eax :00407641 64892500000000 mov dword fs:[00000000], esp :00407648 83EC0C sub esp, 0000000C :0040764B 6834010000 push 00000134 :00407650 E8CB040000 call 00407B20 :00407655 8945EC mov dword[ebp-14], eax :00407658 C745FC00000000 mov dword[ebp-04], 00000000 :0040765F 837DEC00 cmp dword[ebp-14], 00000000 :00407663 740D je 00407672 :00407665 8B4DEC mov ecx, dword[ebp-14] :00407668 E853000000 call 004076C0 :0040766D 8945E8 mov dword[ebp-18], eax :00407670 EB07 jmp 00407679 --------- :00407672 C745E800000000 mov dword[ebp-18], 00000000 --------- :00407679 8B45E8 mov eax, dword[ebp-18] :0040767C 8945F0 mov dword[ebp-10], eax :0040767F C745FCFFFFFFFF mov dword[ebp-04], FFFFFFFF :00407686 8B45F0 mov eax, dword[ebp-10] :00407689 8B4DF4 mov ecx, dword[ebp-0C] :0040768C 64890D00000000 mov dword fs:[00000000], ecx :00407693 8BE5 mov esp, ebp :00407695 5D pop ebp :00407696 C3 ret :00407697 CC CC CC CC CC CC CC CC CC ......... :004076A0 55 push ebp :004076A1 8BEC mov ebp, esp :004076A3 A104C24000 mov eax, dword[0040C204] :004076A8 5D pop ebp :004076A9 C3 ret :004076AA CC CC CC CC CC CC 55 8B EC 51 89 4D FC B8 ......U..Q.M.. :004076B8 E8C74000 DWORD 0040C7E8 ;; ..@. :004076BC 8B E5 5D C3 ..]. ========= :004076C0 55 push ebp :004076C1 8BEC mov ebp, esp :004076C3 6AFF push -00000001 :004076C5 68F5B84000 push 0040B8F5 :004076CA 64A100000000 mov eax, dword fs:[00000000] :004076D0 50 push eax :004076D1 64892500000000 mov dword fs:[00000000], esp :004076D8 51 push ecx :004076D9 894DF0 mov dword[ebp-10], ecx :004076DC 8B4DF0 mov ecx, dword[ebp-10] :004076DF E8F0350000 call 0040ACD4 :004076E4 C745FC00000000 mov dword[ebp-04], 00000000 :004076EB 8B4DF0 mov ecx, dword[ebp-10] :004076EE 83C170 add ecx, 00000070 :004076F1 E85ACCFFFF call 00404350 :004076F6 C645FC01 mov byte[ebp-04], 01 :004076FA 8B45F0 mov eax, dword[ebp-10] :004076FD C7802801000000000000 mov dword[eax+00000128], 00000000 :00407707 8B4DF0 mov ecx, dword[ebp-10] :0040770A 81C12C010000 add ecx, 0000012C :00407710 E861330000 call 0040AA76 :00407715 8B4DF0 mov ecx, dword[ebp-10] :00407718 C781300100006E000000 mov dword[ecx+00000130], 0000006E :00407722 8B55F0 mov edx, dword[ebp-10] :00407725 C70224C84000 mov dword[edx], 0040C824 :0040772B C745FCFFFFFFFF mov dword[ebp-04], FFFFFFFF :00407732 8B45F0 mov eax, dword[ebp-10] :00407735 8B4DF4 mov ecx, dword[ebp-0C] :00407738 64890D00000000 mov dword fs:[00000000], ecx :0040773F 8BE5 mov esp, ebp :00407741 5D pop ebp :00407742 C3 ret :00407743 CC CC CC CC CC CC CC CC CC CC CC CC CC ............. :00407750 55 push ebp :00407751 8BEC mov ebp, esp :00407753 51 push ecx :00407754 894DFC mov dword[ebp-04], ecx :00407757 8B4DFC mov ecx, dword[ebp-04] :0040775A E821000000 call 00407780 :0040775F 8B4508 mov eax, dword[ebp+08] :00407762 83E001 and eax, 00000001 :00407765 85C0 test eax, eax :00407767 7409 je 00407772 :00407769 8B4DFC mov ecx, dword[ebp-04] :0040776C 51 push ecx :0040776D E8AEB4FFFF call 00402C20 --------- :00407772 8B45FC mov eax, dword[ebp-04] :00407775 8BE5 mov esp, ebp :00407777 5D pop ebp :00407778 C20400 ret 0004 :0040777B CC CC CC CC CC ..... ========= :00407780 55 push ebp :00407781 8BEC mov ebp, esp :00407783 6AFF push -00000001 :00407785 6815B94000 push 0040B915 :0040778A 64A100000000 mov eax, dword fs:[00000000] :00407790 50 push eax :00407791 64892500000000 mov dword fs:[00000000], esp :00407798 51 push ecx :00407799 894DF0 mov dword[ebp-10], ecx :0040779C 8B45F0 mov eax, dword[ebp-10] :0040779F C70024C84000 mov dword[eax], 0040C824 :004077A5 C745FC01000000 mov dword[ebp-04], 00000001 :004077AC 8B4DF0 mov ecx, dword[ebp-10] :004077AF 81C12C010000 add ecx, 0000012C :004077B5 E8C8320000 call 0040AA82 :004077BA C645FC00 mov byte[ebp-04], 00 :004077BE 8B4DF0 mov ecx, dword[ebp-10] :004077C1 83C170 add ecx, 00000070 :004077C4 E827CDFFFF call 004044F0 :004077C9 C745FCFFFFFFFF mov dword[ebp-04], FFFFFFFF :004077D0 8B4DF0 mov ecx, dword[ebp-10] :004077D3 E8F6340000 call 0040ACCE :004077D8 8B4DF4 mov ecx, dword[ebp-0C] :004077DB 64890D00000000 mov dword fs:[00000000], ecx :004077E2 8BE5 mov esp, ebp :004077E4 5D pop ebp :004077E5 C3 ret :004077E6 CC CC CC CC CC CC CC CC CC CC .......... :004077F0 55 push ebp :004077F1 8BEC mov ebp, esp :004077F3 51 push ecx :004077F4 894DFC mov dword[ebp-04], ecx :004077F7 8B45FC mov eax, dword[ebp-04] :004077FA 8B4DFC mov ecx, dword[ebp-04] :004077FD 8B516C mov edx, dword[ecx+6C] :00407800 895074 mov dword[eax+74], edx :00407803 8B4DFC mov ecx, dword[ebp-04] :00407806 83C170 add ecx, 00000070 :00407809 E8A2CDFFFF call 004045B0 :0040780E 8B45FC mov eax, dword[ebp-04] :00407811 83B82801000000 cmp dword[eax+00000128], 00000000 :00407818 7426 je 00407840 :0040781A 8B4DFC mov ecx, dword[ebp-04] :0040781D 8B9130010000 mov edx, dword[ecx+00000130] :00407823 52 push edx :00407824 8B4DFC mov ecx, dword[ebp-04] :00407827 81C12C010000 add ecx, 0000012C :0040782D E82EB4FFFF call 00402C60 :00407832 50 push eax :00407833 8B4DFC mov ecx, dword[ebp-04] :00407836 83C170 add ecx, 00000070 :00407839 E842EDFFFF call 00406580 :0040783E EB0B jmp 0040784B --------- :00407840 8B4DFC mov ecx, dword[ebp-04] :00407843 83C170 add ecx, 00000070 :00407846 E825EBFFFF call 00406370 --------- :0040784B B801000000 mov eax, 00000001 :00407850 8BE5 mov esp, ebp :00407852 5D pop ebp :00407853 C3 ret :00407854 CC CC CC CC CC CC CC CC CC CC CC CC 55 8B EC 51 ............U..Q :00407864 89 4D FC 8B 4D FC E8 6B 34 00 00 8B E5 5D C3 CC .M..M..k4....].. :00407874 CC CC CC CC CC CC CC CC CC CC CC CC 55 8B EC A1 ............U... :00407884 18C24000 DWORD 0040C218 ;; ..@. :00407888 5D C3 CC CC CC CC CC CC 55 8B EC 51 89 4D FC B8 ].......U..Q.M.. :00407898 00C84000 DWORD 0040C800 ;; ..@. :0040789C 8B E5 5D C3 ..]. :004078A0 55 push ebp :004078A1 8BEC mov ebp, esp :004078A3 51 push ecx :004078A4 894DFC mov dword[ebp-04], ecx :004078A7 8B4508 mov eax, dword[ebp+08] :004078AA 50 push eax :004078AB 8B4DFC mov ecx, dword[ebp-04] :004078AE 81C12C010000 add ecx, 0000012C :004078B4 E8DB310000 call 0040AA94 :004078B9 8B4DFC mov ecx, dword[ebp-04] :004078BC 8B550C mov edx, dword[ebp+0C] :004078BF 899130010000 mov dword[ecx+00000130], edx :004078C5 8B45FC mov eax, dword[ebp-04] :004078C8 C7802801000001000000 mov dword[eax+00000128], 00000001 :004078D2 8BE5 mov esp, ebp :004078D4 5D pop ebp :004078D5 C20800 ret 0008 :004078D8 CC CC CC CC CC CC CC CC ........ :004078E0 55 push ebp :004078E1 8BEC mov ebp, esp :004078E3 51 push ecx :004078E4 894DFC mov dword[ebp-04], ecx :004078E7 8B4508 mov eax, dword[ebp+08] :004078EA 50 push eax :004078EB 8B4DFC mov ecx, dword[ebp-04] :004078EE E80D320000 call 0040AB00 :004078F3 8BE5 mov esp, ebp :004078F5 5D pop ebp :004078F6 C20400 ret 0004 :004078F9 CC CC CC CC CC CC CC 55 8B EC 51 89 4D FC 8B 45 .......U..Q.M..E :00407909 08 50 8B 4D FC E8 CD 33 00 00 8B E5 5D C2 04 00 .P.M...3....]... :00407919 CC CC CC CC CC CC CC 55 8B EC 6A FF 68 .......U..j.h :00407926 32B94000 DWORD 0040B932 ;; 2.@. :0040792A 64 A1 00 00 00 00 50 64 89 25 00 00 00 00 51 83 d.....Pd.%....Q. :0040793A EC 20 53 56 57 89 65 F0 89 4D DC 8D 4D EC E8 29 . SVW.e..M..M..) :0040794A 31 00 00 C7 45 FC 00 00 00 00 C6 45 FC 01 8D 4D 1...E......E...M :0040795A E8 E8 40 01 00 00 89 45 D8 C6 45 FC 02 8D 45 EC ..@....E..E...E. :0040796A 50 8B 4D DC 83 C1 70 8B 55 DC 8B 42 70 FF 50 1C P.M...p.U..Bp.P. :0040797A 89 45 D4 83 7D D4 00 7E 11 8D 4D EC 51 8B 4D DC .E..}..~..M.Q.M. :0040798A 83 C1 70 E8 CE F3 FF FF EB D3 C6 45 FC 01 8D 4D ..p........E...M :0040799A E8 E8 20 01 00 00 EB 7F 89 65 F0 C6 45 FC 04 FF .. ......e..E... :004079AA 15 . :004079AB 4CC04000 DWORD 0040C04C ;; L.@. :004079AF 3D 99 80 00 80 75 20 6A 00 68 =....u j.h :004079B9 D8C74000 DWORD 0040C7D8 ;; ..@. :004079BD E8 F8 34 00 00 83 C4 04 50 68 ..4.....Ph :004079C7 D8C74000 DWORD 0040C7D8 ;; ..@. :004079CB 8B 4D DC 83 C1 70 E8 8A 0C 00 00 8B 4D DC 83 C1 .M...p......M... :004079DB 70 8B 55 DC 8B 42 70 FF 50 18 EB 06 B8 p.U..Bp.P.... :004079E8 ED794000 DWORD 004079ED ;; .y@. :004079EC C3 C7 45 FC 03 00 00 00 8B 4D E4 8B 55 E4 8B 02 ..E......M..U... :004079FC FF 50 04 50 68 .P.Ph :00407A01 B4004100 DWORD 004100B4 ;; ..A. :00407A05 6A FF E8 24 9C FF FF 50 E8 AE B8 FF FF 83 C4 10 j..$...P........ :00407A15 B8 . :00407A16 217A4000 DWORD 00407A21 ;; !z@. :00407A1A C3 B8 .. :00407A1C 217A4000 DWORD 00407A21 ;; !z@. :00407A20 C3 C7 45 FC 00 00 00 00 8B 4D DC 83 C1 70 E8 AD ..E......M...p.. :00407A30 00 00 00 85 C0 74 2F E8 F4 9B FF FF 89 45 D0 8B .....t/......E.. :00407A40 4D DC 83 C1 70 E8 B6 00 00 00 50 8B 4D D0 8B 55 M...p.....P.M..U :00407A50 D0 8B 02 FF 50 7C 8B C8 E8 A3 FB FF FF 50 E8 FD ....P|.......P.. :00407A60 1A 00 00 83 C4 08 8B 4D DC E8 78 32 00 00 89 45 .......M..x2...E :00407A70 E0 C7 45 FC ..E. :00407A74 FFFFFFFF DWORD FFFFFFFF ;; .... :00407A78 8D 4D EC E8 02 30 00 00 8B 45 E0 8B 4D F4 64 89 .M...0...E..M.d. :00407A88 0D 00 00 00 00 5F 5E 5B 8B E5 5D C3 CC CC CC CC ....._^[..]..... :00407A98 CC CC CC CC CC CC CC CC ........ :00407AA0 55 push ebp :00407AA1 8BEC mov ebp, esp :00407AA3 51 push ecx :00407AA4 894DFC mov dword[ebp-04], ecx :00407AA7 6A00 push 00000000 :00407AA9 E85C2F0000 call 0040AA0A ;;call LiteScan.LiteEnableAP :00407AAE 8B45FC mov eax, dword[ebp-04] :00407AB1 8BE5 mov esp, ebp :00407AB3 5D pop ebp :00407AB4 C3 ret :00407AB5 CC CC CC CC CC CC CC CC CC CC CC ........... :00407AC0 55 push ebp :00407AC1 8BEC mov ebp, esp :00407AC3 51 push ecx :00407AC4 894DFC mov dword[ebp-04], ecx :00407AC7 6A01 push 00000001 :00407AC9 E83C2F0000 call 0040AA0A ;;call LiteScan.LiteEnableAP :00407ACE 8BE5 mov esp, ebp :00407AD0 5D pop ebp :00407AD1 C3 ret :00407AD2 CC CC CC CC CC CC CC CC CC CC CC CC CC CC .............. :00407AE0 55 push ebp :00407AE1 8BEC mov ebp, esp :00407AE3 51 push ecx :00407AE4 894DFC mov dword[ebp-04], ecx :00407AE7 8B45FC mov eax, dword[ebp-04] :00407AEA 8B80B4000000 mov eax, dword[eax+000000B4] :00407AF0 8BE5 mov esp, ebp :00407AF2 5D pop ebp :00407AF3 C3 ret :00407AF4 CC CC CC CC CC CC CC CC CC CC CC CC ............ :00407B00 55 push ebp :00407B01 8BEC mov ebp, esp :00407B03 51 push ecx :00407B04 894DFC mov dword[ebp-04], ecx :00407B07 8B45FC mov eax, dword[ebp-04] :00407B0A 8B4050 mov eax, dword[eax+50] :00407B0D 8BE5 mov esp, ebp :00407B0F 5D pop ebp :00407B10 C3 ret :00407B11 CC CC CC CC CC CC CC CC CC CC CC CC CC CC CC ............... ========= :00407B20 55 push ebp :00407B21 8BEC mov ebp, esp :00407B23 8B4508 mov eax, dword[ebp+08] :00407B26 50 push eax :00407B27 E854310000 call 0040AC80 :00407B2C 83C404 add esp, 00000004 :00407B2F 5D pop ebp :00407B30 C20400 ret 0004 :00407B33 CC CC CC CC CC CC CC CC CC CC CC CC CC ............. :00407B40 55 push ebp :00407B41 8BEC mov ebp, esp :00407B43 E808000000 call 00407B50 :00407B48 E813000000 call 00407B60 :00407B4D 5D pop ebp :00407B4E C3 ret :00407B4F CC . ========= :00407B50 55 push ebp :00407B51 8BEC mov ebp, esp :00407B53 B98D0D4100 mov ecx, 00410D8D :00407B58 FF1538C44000 call dword[0040C438] ;;call MSVCP60.??0Init@ios_base@std@@QAE@XZ :00407B5E 5D pop ebp :00407B5F C3 ret ========= :00407B60 55 push ebp :00407B61 8BEC mov ebp, esp :00407B63 68807B4000 push 00407B80 :00407B68 E8AF330000 call 0040AF1C :00407B6D 83C404 add esp, 00000004 :00407B70 5D pop ebp :00407B71 C3 ret :00407B72 CC CC CC CC CC CC CC CC CC CC CC CC CC CC .............. --------- :00407B80 55 push ebp :00407B81 8BEC mov ebp, esp :00407B83 B98D0D4100 mov ecx, 00410D8D :00407B88 FF152CC44000 call dword[0040C42C] ;;call MSVCP60.??1Init@ios_base@std@@QAE@XZ :00407B8E 5D pop ebp :00407B8F C3 ret :00407B90 55 8B EC E8 08 00 00 00 E8 13 00 00 00 5D C3 CC U............].. :00407BA0 55 push ebp :00407BA1 8BEC mov ebp, esp :00407BA3 B98C0D4100 mov ecx, 00410D8C :00407BA8 FF1524C44000 call dword[0040C424] ;;call MSVCP60.??0_Winit@std@@QAE@XZ :00407BAE 5D pop ebp :00407BAF C3 ret :00407BB0 55 push ebp :00407BB1 8BEC mov ebp, esp :00407BB3 68D07B4000 push 00407BD0 :00407BB8 E85F330000 call 0040AF1C :00407BBD 83C404 add esp, 00000004 :00407BC0 5D pop ebp :00407BC1 C3 ret :00407BC2 CC CC CC CC CC CC CC CC CC CC CC CC CC CC .............. --------- :00407BD0 55 push ebp :00407BD1 8BEC mov ebp, esp :00407BD3 B98C0D4100 mov ecx, 00410D8C :00407BD8 FF1528C44000 call dword[0040C428] ;;call MSVCP60.??1_Winit@std@@QAE@XZ :00407BDE 5D pop ebp :00407BDF C3 ret ========= :00407BE0 55 push ebp :00407BE1 8BEC mov ebp, esp :00407BE3 6AFF push -00000001 :00407BE5 684CB94000 push 0040B94C :00407BEA 64A100000000 mov eax, dword fs:[00000000] :00407BF0 50 push eax :00407BF1 64892500000000 mov dword fs:[00000000], esp :00407BF8 83EC14 sub esp, 00000014 :00407BFB 894DE0 mov dword[ebp-20], ecx :00407BFE 8B45E0 mov eax, dword[ebp-20] :00407C01 C74004FFFFFFFF mov dword[eax+04], FFFFFFFF :00407C08 C645EC00 mov byte[ebp-14], 00 :00407C0C 8D4DF0 lea ecx, dword[ebp-10] :00407C0F 51 push ecx :00407C10 8D55EC lea edx, dword[ebp-14] :00407C13 52 push edx :00407C14 8B4508 mov eax, dword[ebp+08] :00407C17 50 push eax :00407C18 8B4DE0 mov ecx, dword[ebp-20] :00407C1B 83C10C add ecx, 0000000C :00407C1E E8FD110000 call 00408E20 :00407C23 C745FC00000000 mov dword[ebp-04], 00000000 :00407C2A 8B4DE0 mov ecx, dword[ebp-20] :00407C2D 8B5508 mov edx, dword[ebp+08] :00407C30 89511C mov dword[ecx+1C], edx :00407C33 8B45E0 mov eax, dword[ebp-20] :00407C36 C7402000000000 mov dword[eax+20], 00000000 :00407C3D C645E400 mov byte[ebp-1C], 00 :00407C41 8D4DE8 lea ecx, dword[ebp-18] :00407C44 51 push ecx :00407C45 8D55E4 lea edx, dword[ebp-1C] :00407C48 52 push edx :00407C49 8B4508 mov eax, dword[ebp+08] :00407C4C 50 push eax :00407C4D 8B4DE0 mov ecx, dword[ebp-20] :00407C50 83C124 add ecx, 00000024 :00407C53 E8C8110000 call 00408E20 :00407C58 8B4DE0 mov ecx, dword[ebp-20] :00407C5B C7413400000000 mov dword[ecx+34], 00000000 :00407C62 8B55E0 mov edx, dword[ebp-20] :00407C65 C7423800000000 mov dword[edx+38], 00000000 :00407C6C 8B45E0 mov eax, dword[ebp-20] :00407C6F C7403C60EA0000 mov dword[eax+3C], 0000EA60 :00407C76 8B4DE0 mov ecx, dword[ebp-20] :00407C79 C701ACC84000 mov dword[ecx], 0040C8AC :00407C7F C745FCFFFFFFFF mov dword[ebp-04], FFFFFFFF :00407C86 8B45E0 mov eax, dword[ebp-20] :00407C89 8B4DF4 mov ecx, dword[ebp-0C] :00407C8C 64890D00000000 mov dword fs:[00000000], ecx :00407C93 8BE5 mov esp, ebp :00407C95 5D pop ebp :00407C96 C20400 ret 0004 :00407C99 CC CC CC CC CC CC CC ....... :00407CA0 55 push ebp :00407CA1 8BEC mov ebp, esp :00407CA3 51 push ecx :00407CA4 894DFC mov dword[ebp-04], ecx :00407CA7 8B4DFC mov ecx, dword[ebp-04] :00407CAA E821000000 call 00407CD0 :00407CAF 8B4508 mov eax, dword[ebp+08] :00407CB2 83E001 and eax, 00000001 :00407CB5 85C0 test eax, eax :00407CB7 740C je 00407CC5 :00407CB9 8B4DFC mov ecx, dword[ebp-04] :00407CBC 51 push ecx :00407CBD E8D82D0000 call 0040AA9A :00407CC2 83C404 add esp, 00000004 --------- :00407CC5 8B45FC mov eax, dword[ebp-04] :00407CC8 8BE5 mov esp, ebp :00407CCA 5D pop ebp :00407CCB C20400 ret 0004 :00407CCE CC CC .. ========= :00407CD0 55 push ebp :00407CD1 8BEC mov ebp, esp :00407CD3 6AFF push -00000001 :00407CD5 686CB94000 push 0040B96C :00407CDA 64A100000000 mov eax, dword fs:[00000000] :00407CE0 50 push eax :00407CE1 64892500000000 mov dword fs:[00000000], esp :00407CE8 51 push ecx :00407CE9 894DF0 mov dword[ebp-10], ecx :00407CEC 8B45F0 mov eax, dword[ebp-10] :00407CEF C700ACC84000 mov dword[eax], 0040C8AC :00407CF5 C745FC00000000 mov dword[ebp-04], 00000000 :00407CFC 8B4DF0 mov ecx, dword[ebp-10] :00407CFF 83C124 add ecx, 00000024 :00407D02 E879110000 call 00408E80 :00407D07 C745FCFFFFFFFF mov dword[ebp-04], FFFFFFFF :00407D0E 8B4DF0 mov ecx, dword[ebp-10] :00407D11 83C10C add ecx, 0000000C :00407D14 E867110000 call 00408E80 :00407D19 8B4DF4 mov ecx, dword[ebp-0C] :00407D1C 64890D00000000 mov dword fs:[00000000], ecx :00407D23 8BE5 mov esp, ebp :00407D25 5D pop ebp :00407D26 C3 ret :00407D27 CC CC CC CC CC CC CC CC CC ......... :00407D30 55 push ebp :00407D31 8BEC mov ebp, esp :00407D33 83EC08 sub esp, 00000008 :00407D36 894DF8 mov dword[ebp-08], ecx :00407D39 8B45F8 mov eax, dword[ebp-08] :00407D3C 837804FF cmp dword[eax+04], -00000001 :00407D40 7459 je 00407D9B :00407D42 C745FC00000000 mov dword[ebp-04], 00000000 :00407D49 6A02 push 00000002 :00407D4B 8B4DF8 mov ecx, dword[ebp-08] :00407D4E 8B5104 mov edx, dword[ecx+04] :00407D51 52 push edx :00407D52 E899330000 call 0040B0F0 :00407D57 8945FC mov dword[ebp-04], eax :00407D5A 8B45F8 mov eax, dword[ebp-08] :00407D5D 8B4804 mov ecx, dword[eax+04] :00407D60 51 push ecx :00407D61 E884330000 call 0040B0EA :00407D66 8945FC mov dword[ebp-04], eax :00407D69 837DFCFF cmp dword[ebp-04], -00000001 :00407D6D 7508 jne 00407D77 :00407D6F E870330000 call 0040B0E4 :00407D74 8945FC mov dword[ebp-04], eax --------- :00407D77 8B55F8 mov edx, dword[ebp-08] :00407D7A C74204FFFFFFFF mov dword[edx+04], FFFFFFFF :00407D81 68B8004100 push 004100B8 (StringData)"SOCKET CLOSED" :00407D86 68C8004100 push 004100C8 (StringData)"%s" :00407D8B 6AFF push -00000001 :00407D8D E89E98FFFF call 00401630 :00407D92 50 push eax :00407D93 E828B5FFFF call 004032C0 :00407D98 83C410 add esp, 00000010 --------- :00407D9B 8BE5 mov esp, ebp :00407D9D 5D pop ebp :00407D9E C3 ret :00407D9F CC 55 8B EC 51 89 4D FC 8B 4D FC E8 B1 01 00 00 .U..Q.M..M...... :00407DAF 8B E5 5D C3 CC CC CC CC CC CC CC CC CC CC CC CC ..]............. :00407DBF CC . ========= :00407DC0 55 push ebp :00407DC1 8BEC mov ebp, esp :00407DC3 6AFF push -00000001 :00407DC5 6892B94000 push 0040B992 :00407DCA 64A100000000 mov eax, dword fs:[00000000] :00407DD0 50 push eax :00407DD1 64892500000000 mov dword fs:[00000000], esp :00407DD8 83EC1C sub esp, 0000001C :00407DDB 894DE0 mov dword[ebp-20], ecx :00407DDE 66A1CC004100 mov ax, word[004100CC] :00407DE4 668945F0 mov word[ebp-10], ax :00407DE8 8A0DCE004100 mov cl, byte[004100CE] :00407DEE 884DF2 mov byte[ebp-0E], cl :00407DF1 8D55F0 lea edx, dword[ebp-10] :00407DF4 52 push edx :00407DF5 8D4DE8 lea ecx, dword[ebp-18] :00407DF8 E8D30F0000 call 00408DD0 :00407DFD C745FC00000000 mov dword[ebp-04], 00000000 :00407E04 6A00 push 00000000 :00407E06 8B4D08 mov ecx, dword[ebp+08] :00407E09 E842C0FFFF call 00403E50 :00407E0E 83C002 add eax, 00000002 :00407E11 50 push eax :00407E12 8D45E8 lea eax, dword[ebp-18] :00407E15 50 push eax :00407E16 8B4D08 mov ecx, dword[ebp+08] :00407E19 51 push ecx :00407E1A 8D55E4 lea edx, dword[ebp-1C] :00407E1D 52 push edx :00407E1E E8C92E0000 call 0040ACEC :00407E23 8945DC mov dword[ebp-24], eax :00407E26 8B45DC mov eax, dword[ebp-24] :00407E29 8945D8 mov dword[ebp-28], eax :00407E2C C645FC01 mov byte[ebp-04], 01 :00407E30 8B4DD8 mov ecx, dword[ebp-28] :00407E33 E828AEFFFF call 00402C60 :00407E38 50 push eax :00407E39 8B4DE0 mov ecx, dword[ebp-20] :00407E3C E81F080000 call 00408660 :00407E41 8945EC mov dword[ebp-14], eax :00407E44 C645FC00 mov byte[ebp-04], 00 :00407E48 8D4DE4 lea ecx, dword[ebp-1C] :00407E4B E8322C0000 call 0040AA82 :00407E50 C745FCFFFFFFFF mov dword[ebp-04], FFFFFFFF :00407E57 8D4DE8 lea ecx, dword[ebp-18] :00407E5A E8232C0000 call 0040AA82 :00407E5F 8B45EC mov eax, dword[ebp-14] :00407E62 8B4DF4 mov ecx, dword[ebp-0C] :00407E65 64890D00000000 mov dword fs:[00000000], ecx :00407E6C 8BE5 mov esp, ebp :00407E6E 5D pop ebp :00407E6F C20400 ret 0004 :00407E72 CC CC CC CC CC CC CC CC CC CC CC CC CC CC .............. :00407E80 55 push ebp :00407E81 8BEC mov ebp, esp :00407E83 83EC08 sub esp, 00000008 :00407E86 894DF8 mov dword[ebp-08], ecx :00407E89 C745FCFFFFFFFF mov dword[ebp-04], FFFFFFFF :00407E90 8B45F8 mov eax, dword[ebp-08] :00407E93 837804FF cmp dword[eax+04], -00000001 :00407E97 7508 jne 00407EA1 :00407E99 8B45FC mov eax, dword[ebp-04] :00407E9C E990000000 jmp 00407F31 :00407EA1 8B 4D F8 E8 97 00 00 00 25 FF 00 00 00 85 C0 74 .M......%......t :00407EB1 28 8B 4D F8 E8 A6 00 00 00 89 45 FC 83 7D FC 00 (.M.......E..}.. :00407EC1 7E 15 6A 00 8B 4D 0C 51 8B 55 08 52 8B 4D F8 E8 ~.j..M.Q.U.R.M.. :00407ED1 8B 07 00 00 89 45 FC EB 54 8B 45 0C 89 45 FC 8B .....E..T.E..E.. :00407EE1 4D F8 8B 55 F8 8B 41 1C 2B 42 20 39 45 0C 7E 0B M..U..A.+B 9E.~. :00407EF1 8B 4D F8 E8 67 00 00 00 89 45 FC 8B 4D 0C 51 8B .M..g....E..M.Q. :00407F01 55 08 52 8B 45 F8 8B 48 20 51 8B 4D F8 83 C1 0C U.R.E..H Q.M.... :00407F11 E8 CA 0F 00 00 50 E8 1E 30 00 00 83 C4 0C 8B 55 .....P..0......U :00407F21 F8 8B 42 20 03 45 0C 8B 4D F8 89 41 20 8B 45 FC ..B .E..M..A .E. :00407F31 8B E5 5D C2 08 00 CC CC CC CC CC CC CC CC CC ..]............ :00407F40 55 push ebp :00407F41 8BEC mov ebp, esp :00407F43 51 push ecx :00407F44 894DFC mov dword[ebp-04], ecx :00407F47 8B45FC mov eax, dword[ebp-04] :00407F4A 8B4DFC mov ecx, dword[ebp-04] :00407F4D 8B5020 mov edx, dword[eax+20] :00407F50 33C0 xor eax, eax :00407F52 3B511C cmp edx, dword[ecx+1C] :00407F55 0F9DC0 setge al :00407F58 8BE5 mov esp, ebp :00407F5A 5D pop ebp :00407F5B C3 ret :00407F5C CC CC CC CC .... :00407F60 55 push ebp :00407F61 8BEC mov ebp, esp :00407F63 83EC08 sub esp, 00000008 :00407F66 894DF8 mov dword[ebp-08], ecx :00407F69 C745FCFFFFFFFF mov dword[ebp-04], FFFFFFFF :00407F70 8B45F8 mov eax, dword[ebp-08] :00407F73 837804FF cmp dword[eax+04], -00000001 :00407F77 7435 je 00407FAE :00407F79 8B4DF8 mov ecx, dword[ebp-08] :00407F7C 83792000 cmp dword[ecx+20], 00000000 :00407F80 7E2C jle 00407FAE :00407F82 6A00 push 00000000 :00407F84 8B55F8 mov edx, dword[ebp-08] :00407F87 8B4220 mov eax, dword[edx+20] :00407F8A 50 push eax :00407F8B 6A00 push 00000000 :00407F8D 8B4DF8 mov ecx, dword[ebp-08] :00407F90 83C10C add ecx, 0000000C :00407F93 E8480F0000 call 00408EE0 :00407F98 50 push eax :00407F99 8B4DF8 mov ecx, dword[ebp-08] :00407F9C E8BF060000 call 00408660 :00407FA1 8945FC mov dword[ebp-04], eax :00407FA4 8B4DF8 mov ecx, dword[ebp-08] :00407FA7 C7412000000000 mov dword[ecx+20], 00000000 --------- :00407FAE 8B45FC mov eax, dword[ebp-04] :00407FB1 8BE5 mov esp, ebp :00407FB3 5D pop ebp :00407FB4 C3 ret :00407FB5 CC CC CC CC CC CC CC CC CC CC CC ........... :00407FC0 55 push ebp :00407FC1 8BEC mov ebp, esp :00407FC3 6AFF push -00000001 :00407FC5 68B2B94000 push 0040B9B2 :00407FCA 64A100000000 mov eax, dword fs:[00000000] :00407FD0 50 push eax :00407FD1 64892500000000 mov dword fs:[00000000], esp :00407FD8 83EC24 sub esp, 00000024 :00407FDB 894DE0 mov dword[ebp-20], ecx :00407FDE 8B4D08 mov ecx, dword[ebp+08] :00407FE1 E8122D0000 call 0040ACF8 :00407FE6 8B4DE0 mov ecx, dword[ebp-20] :00407FE9 E8E2020000 call 004082D0 :00407FEE 25FF000000 and eax, 000000FF :00407FF3 85C0 test eax, eax :00407FF5 7408 je 00407FFF :00407FF7 8B4DE0 mov ecx, dword[ebp-20] :00407FFA E881020000 call 00408280 --------- :00407FFF 8B4DE0 mov ecx, dword[ebp-20] :00408002 E8C9020000 call 004082D0 :00408007 25FF000000 and eax, 000000FF :0040800C 85C0 test eax, eax :0040800E 7421 je 00408031 :00408010 8B4D08 mov ecx, dword[ebp+08] :00408013 E838BEFFFF call 00403E50 :00408018 85C0 test eax, eax :0040801A 7E0D jle 00408029 :0040801C 8B4D08 mov ecx, dword[ebp+08] :0040801F E82CBEFFFF call 00403E50 :00408024 E97C010000 jmp 004081A5 :00408029 83 C8 FF E9 74 01 00 00 C6 45 F0 00 C7 45 EC 00 ....t....E...E.. :00408039 00 00 00 8B 45 E0 8B 48 34 89 4D EC EB 09 8B 55 ....E..H4.M....U :00408049 EC 83 C2 01 89 55 EC 8B 45 E0 8B 4D EC 3B 48 38 .....U..E..M.;H8 :00408059 7D 34 8B 55 EC 52 8B 4D E0 83 C1 24 E8 76 0E 00 }4.U.R.M...$.v.. :00408069 00 8A 00 88 45 F0 8B 4D F0 81 E1 FF 00 00 00 83 ....E..M........ :00408079 F9 0A 74 0E 8B 55 F0 81 E2 FF 00 00 00 83 FA 0D ..t..U.......... :00408089 75 02 EB 02 EB B8 8B 45 E0 8B 4D EC 2B 48 34 51 u......E..M.+H4Q :00408099 8D 55 E4 52 8B 45 E0 8B 48 34 51 8B 4D E0 83 C1 .U.R.E..H4Q.M... :004080A9 24 E8 31 0E 00 00 50 8D 4D E8 E8 08 2B 00 00 89 $.1...P.M...+... :004080B9 45 DC 8B 55 DC 89 55 D8 C7 45 FC 00 00 00 00 8B E..U..U..E...... :004080C9 4D D8 E8 9E 2B 00 00 89 45 D4 8B 45 D4 89 45 D0 M...+...E..E..E. :004080D9 C6 45 FC 01 8B 4D D0 51 8B 4D 08 E8 09 2C 00 00 .E...M.Q.M...,.. :004080E9 C6 45 FC 00 8D 4D E4 E8 8D 29 00 00 C7 45 FC .E...M...)...E. :004080F8 FFFFFFFF DWORD FFFFFFFF ;; .... :004080FC 8D 4D E8 E8 7E 29 00 00 8B 55 E0 8B 45 EC 89 42 .M..~)...U..E..B :0040810C 34 8B 4D F0 81 E1 FF 00 00 00 83 F9 0A 74 0E 8B 4.M..........t.. :0040811C 55 F0 81 E2 FF 00 00 00 83 FA 0D 75 77 8B 45 E0 U..........uw.E. :0040812C 8B 48 34 83 C1 01 8B 55 E0 89 4A 34 8B 45 F0 25 .H4....U..J4.E.% :0040813C FF 00 00 00 83 F8 0D 75 51 8B 4D E0 E8 83 01 00 .......uQ.M..... :0040814C 00 25 FF 00 00 00 85 C0 74 08 8B 4D E0 E8 22 01 .%......t..M..". :0040815C 00 00 8B 4D E0 8B 55 E0 8B 41 34 3B 42 38 7D 2A ...M..U..A4;B8}* :0040816C 8B 4D E0 8B 51 34 52 8B 4D E0 83 C1 24 E8 62 0D .M..Q4R.M...$.b. :0040817C 00 00 33 C9 8A 08 83 F9 0A 75 0F 8B 55 E0 8B 42 ..3......u..U..B :0040818C 34 83 C0 01 8B 4D E0 89 41 34 8B 4D 08 E8 B2 BC 4....M..A4.M.... :0040819C FF FF EB 05 E9 41 FE FF FF 8B 4D F4 64 89 0D 00 .....A....M.d... :004081AC 00 00 00 8B E5 5D C2 04 00 CC CC CC CC CC CC CC .....].......... :004081BC CC CC CC CC 55 8B EC 83 EC 0C 89 4D F4 8B 45 08 ....U......M..E. :004081CC 89 45 FC 8B 4D F4 E8 F9 00 00 00 25 FF 00 00 00 .E..M......%.... :004081DC 85 C0 74 27 8B 4D F4 8B 55 0C 3B 51 1C 7C 14 6A ..t'.M..U.;Q.|.j :004081EC 00 8B 45 0C 50 8B 4D FC 51 8B 4D F4 E8 F3 00 00 ..E.P.M.Q.M..... :004081FC 00 EB 70 8B 4D F4 E8 79 00 00 00 8B 4D F4 E8 C1 ..p.M..y....M... :0040820C 00 00 00 25 FF 00 00 00 85 C0 74 05 83 C8 FF EB ...%......t..... :0040821C 52 8B 55 F4 8B 45 F4 8B 4A 38 2B 48 34 89 4D F8 R.U..E..J8+H4.M. :0040822C 8B 55 F8 3B 55 0C 7E 06 8B 45 0C 89 45 F8 8B 4D .U.;U.~..E..E..M :0040823C F8 51 8B 55 F4 8B 42 34 50 8B 4D F4 83 C1 24 E8 .Q.U..B4P.M...$. :0040824C 90 0C 00 00 50 8B 4D FC 51 E8 E0 2C 00 00 83 C4 ....P.M.Q..,.... :0040825C 0C 8B 55 F4 8B 42 34 03 45 F8 8B 4D F4 89 41 34 ..U..B4.E..M..A4 :0040826C 8B 45 F8 8B E5 5D C2 08 00 CC CC CC CC CC CC CC .E...].......... :0040827C CC CC CC CC .... ========= :00408280 55 push ebp :00408281 8BEC mov ebp, esp :00408283 83EC08 sub esp, 00000008 :00408286 894DF8 mov dword[ebp-08], ecx --------- :00408289 6A00 push 00000000 :0040828B 8B45F8 mov eax, dword[ebp-08] :0040828E 8B481C mov ecx, dword[eax+1C] :00408291 51 push ecx :00408292 6A00 push 00000000 :00408294 8B4DF8 mov ecx, dword[ebp-08] :00408297 83C124 add ecx, 00000024 :0040829A E8410C0000 call 00408EE0 :0040829F 50 push eax :004082A0 8B4DF8 mov ecx, dword[ebp-08] :004082A3 E848000000 call 004082F0 :004082A8 8945FC mov dword[ebp-04], eax :004082AB 837DFC00 cmp dword[ebp-04], 00000000 :004082AF 74D8 je 00408289 :004082B1 837DFC00 cmp dword[ebp-04], 00000000 :004082B5 7E13 jle 004082CA :004082B7 8B55F8 mov edx, dword[ebp-08] :004082BA 8B45FC mov eax, dword[ebp-04] :004082BD 894238 mov dword[edx+38], eax :004082C0 8B4DF8 mov ecx, dword[ebp-08] :004082C3 C7413400000000 mov dword[ecx+34], 00000000 --------- :004082CA 8BE5 mov esp, ebp :004082CC 5D pop ebp :004082CD C3 ret :004082CE CC CC .. ========= :004082D0 55 push ebp :004082D1 8BEC mov ebp, esp :004082D3 51 push ecx :004082D4 894DFC mov dword[ebp-04], ecx :004082D7 8B45FC mov eax, dword[ebp-04] :004082DA 8B4DFC mov ecx, dword[ebp-04] :004082DD 8B5034 mov edx, dword[eax+34] :004082E0 33C0 xor eax, eax :004082E2 3B5138 cmp edx, dword[ecx+38] :004082E5 0F9DC0 setge al :004082E8 8BE5 mov esp, ebp :004082EA 5D pop ebp :004082EB C3 ret :004082EC CC CC CC CC .... ========= :004082F0 55 push ebp :004082F1 8BEC mov ebp, esp :004082F3 6AFF push -00000001 :004082F5 68D4B94000 push 0040B9D4 :004082FA 64A100000000 mov eax, dword fs:[00000000] :00408300 50 push eax :00408301 64892500000000 mov dword fs:[00000000], esp :00408308 83EC78 sub esp, 00000078 :0040830B 898D7CFFFFFF mov dword[ebp+FFFFFF7C], ecx :00408311 837D0C00 cmp dword[ebp+0C], 00000000 :00408315 7507 jne 0040831E :00408317 33C0 xor eax, eax :00408319 E94F010000 jmp 0040846D --------- :0040831E 8B857CFFFFFF mov eax, dword[ebp+FFFFFF7C] :00408324 83783C00 cmp dword[eax+3C], 00000000 :00408328 7D09 jge 00408333 :0040832A C745F0E8030000 mov dword[ebp-10], 000003E8 :00408331 EB0C jmp 0040833F --------- :00408333 8B8D7CFFFFFF mov ecx, dword[ebp+FFFFFF7C] :00408339 8B513C mov edx, dword[ecx+3C] :0040833C 8955F0 mov dword[ebp-10], edx --------- :0040833F C745EC00000000 mov dword[ebp-14], 00000000 --------- :00408346 8B45F0 mov eax, dword[ebp-10] :00408349 69C0E8030000 imul eax, 000003E8 :0040834F 50 push eax :00408350 8B8D7CFFFFFF mov ecx, dword[ebp+FFFFFF7C] :00408356 E8A5010000 call 00408500 :0040835B 25FF000000 and eax, 000000FF :00408360 85C0 test eax, eax :00408362 0F849E000000 je 00408406 :00408368 8B8D7CFFFFFF mov ecx, dword[ebp+FFFFFF7C] :0040836E E80D010000 call 00408480 :00408373 8945E8 mov dword[ebp-18], eax :00408376 C745E000000000 mov dword[ebp-20], 00000000 :0040837D 8B4D0C mov ecx, dword[ebp+0C] :00408380 3B4DE8 cmp ecx, dword[ebp-18] :00408383 7308 jae 0040838D :00408385 8B550C mov edx, dword[ebp+0C] :00408388 8955E0 mov dword[ebp-20], edx :0040838B EB06 jmp 00408393 --------- :0040838D 8B45E8 mov eax, dword[ebp-18] :00408390 8945E0 mov dword[ebp-20], eax --------- :00408393 C745E400000000 mov dword[ebp-1C], 00000000 :0040839A 837DE000 cmp dword[ebp-20], 00000000 :0040839E 7E1C jle 004083BC :004083A0 6A00 push 00000000 :004083A2 8B4DE0 mov ecx, dword[ebp-20] :004083A5 51 push ecx :004083A6 8B5508 mov edx, dword[ebp+08] :004083A9 52 push edx :004083AA 8B857CFFFFFF mov eax, dword[ebp+FFFFFF7C] :004083B0 8B4804 mov ecx, dword[eax+04] :004083B3 51 push ecx :004083B4 E83D2D0000 call 0040B0F6 :004083B9 8945E4 mov dword[ebp-1C], eax --------- :004083BC 837DE4FF cmp dword[ebp-1C], -00000001 :004083C0 7534 jne 004083F6 :004083C2 8D55B0 lea edx, dword[ebp-50] :004083C5 52 push edx :004083C6 68D0004100 push 004100D0 (StringData)"CSymSocket::Receive(), recv() == SOCKET_ERROR" :004083CB 8D4DB4 lea ecx, dword[ebp-4C] :004083CE FF1520C44000 call dword[0040C420] ;;call MSVCP60.??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBDABV?$allocator@D@1@@Z :004083D4 C745FC00000000 mov dword[ebp-04], 00000000 :004083DB 8D45B4 lea eax, dword[ebp-4C] :004083DE 50 push eax :004083DF 8D4DC4 lea ecx, dword[ebp-3C] :004083E2 FF151CC44000 call dword[0040C41C] ;;call MSVCP60.??0runtime_error@std@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@1@@Z :004083E8 68E8D34000 push 0040D3E8 :004083ED 8D4DC4 lea ecx, dword[ebp-3C] :004083F0 51 push ecx :004083F1 E83E2B0000 call 0040AF34 ;;call MSVCRT._CxxThrowException --------- :004083F6 837DE400 cmp dword[ebp-1C], 00000000 :004083FA 7505 jne 00408401 :004083FC 83C8FF or eax, -00000001 :004083FF EB6C jmp 0040846D --------- :00408401 8B45E4 mov eax, dword[ebp-1C] :00408404 EB67 jmp 0040846D --------- :00408406 8B55EC mov edx, dword[ebp-14] :00408409 0355F0 add edx, dword[ebp-10] :0040840C 8955EC mov dword[ebp-14], edx :0040840F 8B857CFFFFFF mov eax, dword[ebp+FFFFFF7C] :00408415 83783C00 cmp dword[eax+3C], 00000000 :00408419 7C4D jl 00408468 :0040841B 8B8D7CFFFFFF mov ecx, dword[ebp+FFFFFF7C] :00408421 8B55EC mov edx, dword[ebp-14] :00408424 3B513C cmp edx, dword[ecx+3C] :00408427 7C3F jl 00408468 :00408429 6899800080 push 80008099 :0040842E FF156CC04000 call dword[0040C06C] ;;call KERNEL32.SetLastError :00408434 8D4580 lea eax, dword[ebp-80] :00408437 50 push eax :00408438 6800014100 push 00410100 (StringData)"SOCKET_READ_TIMEOUT" :0040843D 8D4D84 lea ecx, dword[ebp-7C] :00408440 FF1520C44000 call dword[0040C420] ;;call MSVCP60.??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBDABV?$allocator@D@1@@Z :00408446 C745FC01000000 mov dword[ebp-04], 00000001 :0040844D 8D4D84 lea ecx, dword[ebp-7C] :00408450 51 push ecx :00408451 8D4D94 lea ecx, dword[ebp-6C] :00408454 FF151CC44000 call dword[0040C41C] ;;call MSVCP60.??0runtime_error@std@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@1@@Z :0040845A 68E8D34000 push 0040D3E8 :0040845F 8D5594 lea edx, dword[ebp-6C] :00408462 52 push edx :00408463 E8CC2A0000 call 0040AF34 ;;call MSVCRT._CxxThrowException --------- :00408468 E9D9FEFFFF jmp 00408346 --------- :0040846D 8B4DF4 mov ecx, dword[ebp-0C] :00408470 64890D00000000 mov dword fs:[00000000], ecx :00408477 8BE5 mov esp, ebp :00408479 5D pop ebp :0040847A C20C00 ret 000C :0040847D CC CC CC ... ========= :00408480 55 push ebp :00408481 8BEC mov ebp, esp :00408483 6AFF push -00000001 :00408485 68EAB94000 push 0040B9EA :0040848A 64A100000000 mov eax, dword fs:[00000000] :00408490 50 push eax :00408491 64892500000000 mov dword fs:[00000000], esp :00408498 83EC38 sub esp, 00000038 :0040849B 894DBC mov dword[ebp-44], ecx :0040849E 8D45F0 lea eax, dword[ebp-10] :004084A1 50 push eax :004084A2 687F660440 push 4004667F :004084A7 8B4DBC mov ecx, dword[ebp-44] :004084AA 8B5104 mov edx, dword[ecx+04] :004084AD 52 push edx :004084AE E8492C0000 call 0040B0FC :004084B3 83F8FF cmp eax, -00000001 :004084B6 7534 jne 004084EC :004084B8 8D45C0 lea eax, dword[ebp-40] :004084BB 50 push eax :004084BC 6814014100 push 00410114 (StringData)"GET_PENDING_BYTES" :004084C1 8D4DC4 lea ecx, dword[ebp-3C] :004084C4 FF1520C44000 call dword[0040C420] ;;call MSVCP60.??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBDABV?$allocator@D@1@@Z :004084CA C745FC00000000 mov dword[ebp-04], 00000000 :004084D1 8D4DC4 lea ecx, dword[ebp-3C] :004084D4 51 push ecx :004084D5 8D4DD4 lea ecx, dword[ebp-2C] :004084D8 FF151CC44000 call dword[0040C41C] ;;call MSVCP60.??0runtime_error@std@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@1@@Z :004084DE 68E8D34000 push 0040D3E8 :004084E3 8D55D4 lea edx, dword[ebp-2C] :004084E6 52 push edx :004084E7 E8482A0000 call 0040AF34 ;;call MSVCRT._CxxThrowException --------- :004084EC 8B45F0 mov eax, dword[ebp-10] :004084EF 8B4DF4 mov ecx, dword[ebp-0C] :004084F2 64890D00000000 mov dword fs:[00000000], ecx :004084F9 8BE5 mov esp, ebp :004084FB 5D pop ebp :004084FC C3 ret :004084FD CC CC CC ... ========= :00408500 55 push ebp :00408501 8BEC mov ebp, esp :00408503 6AFF push -00000001 :00408505 681ABA4000 push 0040BA1A :0040850A 64A100000000 mov eax, dword fs:[00000000] :00408510 50 push eax :00408511 64892500000000 mov dword fs:[00000000], esp :00408518 81EC74010000 sub esp, 00000174 :0040851E 898D80FEFFFF mov dword[ebp+FFFFFE80], ecx :00408524 8B8580FEFFFF mov eax, dword[ebp+FFFFFE80] :0040852A 837804FF cmp dword[eax+04], -00000001 :0040852E 7543 jne 00408573 :00408530 8D8DB4FEFFFF lea ecx, dword[ebp+FFFFFEB4] :00408536 51 push ecx :00408537 6828014100 push 00410128 (StringData)"Socket not readable." :0040853C 8D8DB8FEFFFF lea ecx, dword[ebp+FFFFFEB8] :00408542 FF1520C44000 call dword[0040C420] ;;call MSVCP60.??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBDABV?$allocator@D@1@@Z :00408548 C745FC00000000 mov dword[ebp-04], 00000000 :0040854F 8D95B8FEFFFF lea edx, dword[ebp+FFFFFEB8] :00408555 52 push edx :00408556 8D8DC8FEFFFF lea ecx, dword[ebp+FFFFFEC8] :0040855C FF151CC44000 call dword[0040C41C] ;;call MSVCP60.??0runtime_error@std@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@1@@Z :00408562 68E8D34000 push 0040D3E8 :00408567 8D85C8FEFFFF lea eax, dword[ebp+FFFFFEC8] :0040856D 50 push eax :0040856E E8C1290000 call 0040AF34 ;;call MSVCRT._CxxThrowException --------- :00408573 C785E8FEFFFF00000000 mov dword[ebp+FFFFFEE8], 00000000 --------- :0040857D 83BDE8FEFFFF40 cmp dword[ebp+FFFFFEE8], 00000040 :00408584 7325 jae 004085AB :00408586 8B8DE8FEFFFF mov ecx, dword[ebp+FFFFFEE8] :0040858C 8B9580FEFFFF mov edx, dword[ebp+FFFFFE80] :00408592 8B4204 mov eax, dword[edx+04] :00408595 89848DECFEFFFF mov dword[ebp+4*ecx+FFFFFEEC], eax :0040859C 8B8DE8FEFFFF mov ecx, dword[ebp+FFFFFEE8] :004085A2 83C101 add ecx, 00000001 :004085A5 898DE8FEFFFF mov dword[ebp+FFFFFEE8], ecx --------- :004085AB 33D2 xor edx, edx :004085AD 85D2 test edx, edx :004085AF 75CC jne 0040857D :004085B1 8B4508 mov eax, dword[ebp+08] :004085B4 99 cdq :004085B5 B940420F00 mov ecx, 000F4240 :004085BA F7F9 idiv ecx :004085BC 8945EC mov dword[ebp-14], eax :004085BF 8B4508 mov eax, dword[ebp+08] :004085C2 99 cdq :004085C3 B940420F00 mov ecx, 000F4240 :004085C8 F7F9 idiv ecx :004085CA 8955F0 mov dword[ebp-10], edx :004085CD 8D55EC lea edx, dword[ebp-14] :004085D0 52 push edx :004085D1 6A00 push 00000000 :004085D3 6A00 push 00000000 :004085D5 8D85E8FEFFFF lea eax, dword[ebp+FFFFFEE8] :004085DB 50 push eax :004085DC 8B8D80FEFFFF mov ecx, dword[ebp+FFFFFE80] :004085E2 8B5104 mov edx, dword[ecx+04] :004085E5 83C201 add edx, 00000001 :004085E8 52 push edx :004085E9 E8142B0000 call 0040B102 :004085EE 8985E4FEFFFF mov dword[ebp+FFFFFEE4], eax :004085F4 83BDE4FEFFFFFF cmp dword[ebp+FFFFFEE4], -00000001 :004085FB 7543 jne 00408640 :004085FD 8D8584FEFFFF lea eax, dword[ebp+FFFFFE84] :00408603 50 push eax :00408604 6840014100 push 00410140 (StringData)"GET_READABLE" :00408609 8D8D88FEFFFF lea ecx, dword[ebp+FFFFFE88] :0040860F FF1520C44000 call dword[0040C420] ;;call MSVCP60.??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBDABV?$allocator@D@1@@Z :00408615 C745FC01000000 mov dword[ebp-04], 00000001 :0040861C 8D8D88FEFFFF lea ecx, dword[ebp+FFFFFE88] :00408622 51 push ecx :00408623 8D8D98FEFFFF lea ecx, dword[ebp+FFFFFE98] :00408629 FF151CC44000 call dword[0040C41C] ;;call MSVCP60.??0runtime_error@std@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@1@@Z :0040862F 68E8D34000 push 0040D3E8 :00408634 8D9598FEFFFF lea edx, dword[ebp+FFFFFE98] :0040863A 52 push edx :0040863B E8F4280000 call 0040AF34 ;;call MSVCRT._CxxThrowException --------- :00408640 83BDE4FEFFFF00 cmp dword[ebp+FFFFFEE4], 00000000 :00408647 7504 jne 0040864D :00408649 32C0 xor al, al :0040864B EB02 jmp 0040864F --------- :0040864D B001 mov al, 01 --------- :0040864F 8B4DF4 mov ecx, dword[ebp-0C] :00408652 64890D00000000 mov dword fs:[00000000], ecx :00408659 8BE5 mov esp, ebp :0040865B 5D pop ebp :0040865C C20400 ret 0004 :0040865F CC . ========= :00408660 55 push ebp :00408661 8BEC mov ebp, esp :00408663 6AFF push -00000001 :00408665 6854BA4000 push 0040BA54 :0040866A 64A100000000 mov eax, dword fs:[00000000] :00408670 50 push eax :00408671 64892500000000 mov dword fs:[00000000], esp :00408678 81ECB4000000 sub esp, 000000B4 :0040867E 898D40FFFFFF mov dword[ebp+FFFFFF40], ecx :00408684 8B8540FFFFFF mov eax, dword[ebp+FFFFFF40] :0040868A 837804FF cmp dword[eax+04], -00000001 :0040868E 7508 jne 00408698 :00408690 83C8FF or eax, -00000001 :00408693 E9F9010000 jmp 00408891 --------- :00408698 8B4D0C mov ecx, dword[ebp+0C] :0040869B 894DE4 mov dword[ebp-1C], ecx :0040869E 837D0C00 cmp dword[ebp+0C], 00000000 :004086A2 7507 jne 004086AB :004086A4 33C0 xor eax, eax :004086A6 E9E6010000 jmp 00408891 :004086AB 8B 55 08 89 55 EC C7 45 F0 00 00 00 00 8B 85 40 .U..U..E.......@ :004086BB FF FF FF 83 78 3C 00 7D 09 C7 45 F0 E8 03 00 00 ....x<.}..E..... :004086CB EB 0C 8B 8D 40 FF FF FF 8B 51 3C 89 55 F0 C7 45 ....@....Q<.U..E :004086DB E8 00 00 00 00 ..... --------- :004086E0 837D0C00 cmp dword[ebp+0C], 00000000 :004086E4 0F8EA1010000 jle 0040888B :004086EA 8B45F0 mov eax, dword[ebp-10] :004086ED 69C0E8030000 imul eax, 000003E8 :004086F3 50 push eax :004086F4 8B8D40FFFFFF mov ecx, dword[ebp+FFFFFF40] :004086FA E8B1010000 call 004088B0 :004086FF 25FF000000 and eax, 000000FF :00408704 85C0 test eax, eax :00408706 0F8409010000 je 00408815 :0040870C 8B4D0C mov ecx, dword[ebp+0C] :0040870F 894DE0 mov dword[ebp-20], ecx :00408712 817DE000040000 cmp dword[ebp-20], 00000400 :00408719 7C07 jl 00408722 :0040871B C745E000040000 mov dword[ebp-20], 00000400 --------- :00408722 C745DC00000000 mov dword[ebp-24], 00000000 --------- :00408729 BA01000000 mov edx, 00000001 :0040872E 85D2 test edx, edx :00408730 0F84CB000000 je 00408801 :00408736 C745D800000000 mov dword[ebp-28], 00000000 :0040873D 6A00 push 00000000 :0040873F 8B45E0 mov eax, dword[ebp-20] :00408742 50 push eax :00408743 8B4DEC mov ecx, dword[ebp-14] :00408746 51 push ecx :00408747 8B9540FFFFFF mov edx, dword[ebp+FFFFFF40] :0040874D 8B4204 mov eax, dword[edx+04] :00408750 50 push eax :00408751 E8B2290000 call 0040B108 :00408756 8945DC mov dword[ebp-24], eax :00408759 837DDCFF cmp dword[ebp-24], -00000001 :0040875D 754F jne 004087AE :0040875F E880290000 call 0040B0E4 :00408764 8945D4 mov dword[ebp-2C], eax :00408767 817DD433270000 cmp dword[ebp-2C], 00002733 :0040876E 7434 je 004087A4 :00408770 8D4DA4 lea ecx, dword[ebp-5C] :00408773 51 push ecx :00408774 6850014100 push 00410150 (StringData)"CSymSocket::Send, send() == SOCKET_ERROR" :00408779 8D4DA8 lea ecx, dword[ebp-58] :0040877C FF1520C44000 call dword[0040C420] ;;call MSVCP60.??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBDABV?$allocator@D@1@@Z :00408782 C745FC00000000 mov dword[ebp-04], 00000000 :00408789 8D55A8 lea edx, dword[ebp-58] :0040878C 52 push edx :0040878D 8D4DB8 lea ecx, dword[ebp-48] :00408790 FF151CC44000 call dword[0040C41C] ;;call MSVCP60.??0runtime_error@std@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@1@@Z :00408796 68E8D34000 push 0040D3E8 :0040879B 8D45B8 lea eax, dword[ebp-48] :0040879E 50 push eax :0040879F E890270000 call 0040AF34 ;;call MSVCRT._CxxThrowException --------- :004087A4 6A64 push 00000064 :004087A6 FF15ACC04000 call dword[0040C0AC] ;;call KERNEL32.Sleep :004087AC EB02 jmp 004087B0 --------- :004087AE EB51 jmp 00408801 --------- :004087B0 837DD832 cmp dword[ebp-28], 00000032 :004087B4 7E3D jle 004087F3 :004087B6 8D8D74FFFFFF lea ecx, dword[ebp+FFFFFF74] :004087BC 51 push ecx :004087BD 687C014100 push 0041017C (StringData)"CSymSocket::Send, loopcount > 50 " :004087C2 8D8D78FFFFFF lea ecx, dword[ebp+FFFFFF78] :004087C8 FF1520C44000 call dword[0040C420] ;;call MSVCP60.??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBDABV?$allocator@D@1@@Z :004087CE C745FC01000000 mov dword[ebp-04], 00000001 :004087D5 8D9578FFFFFF lea edx, dword[ebp+FFFFFF78] :004087DB 52 push edx :004087DC 8D4D88 lea ecx, dword[ebp-78] :004087DF FF151CC44000 call dword[0040C41C] ;;call MSVCP60.??0runtime_error@std@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@1@@Z :004087E5 68E8D34000 push 0040D3E8 :004087EA 8D4588 lea eax, dword[ebp-78] :004087ED 50 push eax :004087EE E841270000 call 0040AF34 ;;call MSVCRT._CxxThrowException --------- :004087F3 8B4DD8 mov ecx, dword[ebp-28] :004087F6 83C101 add ecx, 00000001 :004087F9 894DD8 mov dword[ebp-28], ecx :004087FC E928FFFFFF jmp 00408729 --------- :00408801 8B55EC mov edx, dword[ebp-14] :00408804 0355DC add edx, dword[ebp-24] :00408807 8955EC mov dword[ebp-14], edx :0040880A 8B450C mov eax, dword[ebp+0C] :0040880D 2B45DC sub eax, dword[ebp-24] :00408810 89450C mov dword[ebp+0C], eax :00408813 EB71 jmp 00408886 --------- :00408815 8B4DE8 mov ecx, dword[ebp-18] :00408818 034DF0 add ecx, dword[ebp-10] :0040881B 894DE8 mov dword[ebp-18], ecx :0040881E 8B9540FFFFFF mov edx, dword[ebp+FFFFFF40] :00408824 837A3C00 cmp dword[edx+3C], 00000000 :00408828 7C5C jl 00408886 :0040882A 8B8540FFFFFF mov eax, dword[ebp+FFFFFF40] :00408830 8B4DE8 mov ecx, dword[ebp-18] :00408833 3B483C cmp ecx, dword[eax+3C] :00408836 7E4E jle 00408886 :00408838 6899800080 push 80008099 :0040883D FF156CC04000 call dword[0040C06C] ;;call KERNEL32.SetLastError :00408843 8D9544FFFFFF lea edx, dword[ebp+FFFFFF44] :00408849 52 push edx :0040884A 68A0014100 push 004101A0 (StringData)"SOCKET_OUTPUT_TIMEOUT" :0040884F 8D8D48FFFFFF lea ecx, dword[ebp+FFFFFF48] :00408855 FF1520C44000 call dword[0040C420] ;;call MSVCP60.??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBDABV?$allocator@D@1@@Z :0040885B C745FC02000000 mov dword[ebp-04], 00000002 :00408862 8D8548FFFFFF lea eax, dword[ebp+FFFFFF48] :00408868 50 push eax :00408869 8D8D58FFFFFF lea ecx, dword[ebp+FFFFFF58] :0040886F FF151CC44000 call dword[0040C41C] ;;call MSVCP60.??0runtime_error@std@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@1@@Z :00408875 68E8D34000 push 0040D3E8 :0040887A 8D8D58FFFFFF lea ecx, dword[ebp+FFFFFF58] :00408880 51 push ecx :00408881 E8AE260000 call 0040AF34 ;;call MSVCRT._CxxThrowException --------- :00408886 E955FEFFFF jmp 004086E0 --------- :0040888B 8B45E4 mov eax, dword[ebp-1C] :0040888E 2B450C sub eax, dword[ebp+0C] --------- :00408891 8B4DF4 mov ecx, dword[ebp-0C] :00408894 64890D00000000 mov dword fs:[00000000], ecx :0040889B 8BE5 mov esp, ebp :0040889D 5D pop ebp :0040889E C20C00 ret 000C :004088A1 CC CC CC CC CC CC CC CC CC CC CC CC CC CC CC ............... ========= :004088B0 55 push ebp :004088B1 8BEC mov ebp, esp :004088B3 6AFF push -00000001 :004088B5 686DBA4000 push 0040BA6D :004088BA 64A100000000 mov eax, dword fs:[00000000] :004088C0 50 push eax :004088C1 64892500000000 mov dword fs:[00000000], esp :004088C8 81EC44010000 sub esp, 00000144 :004088CE 898DB0FEFFFF mov dword[ebp+FFFFFEB0], ecx :004088D4 C785E8FEFFFF00000000 mov dword[ebp+FFFFFEE8], 00000000 --------- :004088DE 83BDE8FEFFFF40 cmp dword[ebp+FFFFFEE8], 00000040 :004088E5 7325 jae 0040890C :004088E7 8B85E8FEFFFF mov eax, dword[ebp+FFFFFEE8] :004088ED 8B8DB0FEFFFF mov ecx, dword[ebp+FFFFFEB0] :004088F3 8B5104 mov edx, dword[ecx+04] :004088F6 899485ECFEFFFF mov dword[ebp+4*eax+FFFFFEEC], edx :004088FD 8B85E8FEFFFF mov eax, dword[ebp+FFFFFEE8] :00408903 83C001 add eax, 00000001 :00408906 8985E8FEFFFF mov dword[ebp+FFFFFEE8], eax --------- :0040890C 33C9 xor ecx, ecx :0040890E 85C9 test ecx, ecx :00408910 75CC jne 004088DE :00408912 8B4508 mov eax, dword[ebp+08] :00408915 99 cdq :00408916 B940420F00 mov ecx, 000F4240 :0040891B F7F9 idiv ecx :0040891D 8945EC mov dword[ebp-14], eax :00408920 8B4508 mov eax, dword[ebp+08] :00408923 99 cdq :00408924 B940420F00 mov ecx, 000F4240 :00408929 F7F9 idiv ecx :0040892B 8955F0 mov dword[ebp-10], edx :0040892E 8D55EC lea edx, dword[ebp-14] :00408931 52 push edx :00408932 6A00 push 00000000 :00408934 8D85E8FEFFFF lea eax, dword[ebp+FFFFFEE8] :0040893A 50 push eax :0040893B 6A00 push 00000000 :0040893D 8B8DB0FEFFFF mov ecx, dword[ebp+FFFFFEB0] :00408943 8B5104 mov edx, dword[ecx+04] :00408946 83C201 add edx, 00000001 :00408949 52 push edx :0040894A E8B3270000 call 0040B102 :0040894F 8985E4FEFFFF mov dword[ebp+FFFFFEE4], eax :00408955 83BDE4FEFFFFFF cmp dword[ebp+FFFFFEE4], -00000001 :0040895C 7543 jne 004089A1 :0040895E 8D85B4FEFFFF lea eax, dword[ebp+FFFFFEB4] :00408964 50 push eax :00408965 68B8014100 push 004101B8 (StringData)"GET_WRITEABLE" :0040896A 8D8DB8FEFFFF lea ecx, dword[ebp+FFFFFEB8] :00408970 FF1520C44000 call dword[0040C420] ;;call MSVCP60.??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBDABV?$allocator@D@1@@Z :00408976 C745FC00000000 mov dword[ebp-04], 00000000 :0040897D 8D8DB8FEFFFF lea ecx, dword[ebp+FFFFFEB8] :00408983 51 push ecx :00408984 8D8DC8FEFFFF lea ecx, dword[ebp+FFFFFEC8] :0040898A FF151CC44000 call dword[0040C41C] ;;call MSVCP60.??0runtime_error@std@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@1@@Z :00408990 68E8D34000 push 0040D3E8 :00408995 8D95C8FEFFFF lea edx, dword[ebp+FFFFFEC8] :0040899B 52 push edx :0040899C E893250000 call 0040AF34 ;;call MSVCRT._CxxThrowException --------- :004089A1 83BDE4FEFFFF00 cmp dword[ebp+FFFFFEE4], 00000000 :004089A8 7504 jne 004089AE :004089AA 32C0 xor al, al :004089AC EB02 jmp 004089B0 --------- :004089AE B001 mov al, 01 --------- :004089B0 8B4DF4 mov ecx, dword[ebp-0C] :004089B3 64890D00000000 mov dword fs:[00000000], ecx :004089BA 8BE5 mov esp, ebp :004089BC 5D pop ebp :004089BD C20400 ret 0004 ========= :004089C0 55 push ebp :004089C1 8BEC mov ebp, esp :004089C3 6AFF push -00000001 :004089C5 68A1BA4000 push 0040BAA1 :004089CA 64A100000000 mov eax, dword fs:[00000000] :004089D0 50 push eax :004089D1 64892500000000 mov dword fs:[00000000], esp :004089D8 81EC90000000 sub esp, 00000090 :004089DE 898D64FFFFFF mov dword[ebp+FFFFFF64], ecx :004089E4 C745EC00000000 mov dword[ebp-14], 00000000 :004089EB C745F0E8030000 mov dword[ebp-10], 000003E8 :004089F2 8D45C8 lea eax, dword[ebp-38] :004089F5 50 push eax :004089F6 8B4D08 mov ecx, dword[ebp+08] :004089F9 51 push ecx :004089FA 8D4DCC lea ecx, dword[ebp-34] :004089FD FF1520C44000 call dword[0040C420] ;;call MSVCP60.??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBDABV?$allocator@D@1@@Z :00408A03 C745FC00000000 mov dword[ebp-04], 00000000 :00408A0A 8D55DC lea edx, dword[ebp-24] :00408A0D 52 push edx :00408A0E 8B450C mov eax, dword[ebp+0C] :00408A11 50 push eax :00408A12 8D4DCC lea ecx, dword[ebp-34] :00408A15 51 push ecx :00408A16 8B8D64FFFFFF mov ecx, dword[ebp+FFFFFF64] :00408A1C E81F010000 call 00408B40 :00408A21 C745FCFFFFFFFF mov dword[ebp-04], FFFFFFFF :00408A28 8D4DCC lea ecx, dword[ebp-34] :00408A2B FF1518C44000 call dword[0040C418] ;;call MSVCP60.??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ :00408A31 6A10 push 00000010 :00408A33 8D55DC lea edx, dword[ebp-24] :00408A36 52 push edx :00408A37 8B8564FFFFFF mov eax, dword[ebp+FFFFFF64] :00408A3D 8B4804 mov ecx, dword[eax+04] :00408A40 51 push ecx :00408A41 E8C8260000 call 0040B10E :00408A46 83F8FF cmp eax, -00000001 :00408A49 0F85D7000000 jne 00408B26 :00408A4F FF154CC04000 call dword[0040C04C] ;;call KERNEL32.GetLastError :00408A55 3D33270000 cmp eax, 00002733 :00408A5A 7434 je 00408A90 :00408A5C 8D5598 lea edx, dword[ebp-68] :00408A5F 52 push edx :00408A60 68C8014100 push 004101C8 (StringData)"CONNECT_ERROR" :00408A65 8D4D9C lea ecx, dword[ebp-64] :00408A68 FF1520C44000 call dword[0040C420] ;;call MSVCP60.??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBDABV?$allocator@D@1@@Z :00408A6E C745FC01000000 mov dword[ebp-04], 00000001 :00408A75 8D459C lea eax, dword[ebp-64] :00408A78 50 push eax :00408A79 8D4DAC lea ecx, dword[ebp-54] :00408A7C FF151CC44000 call dword[0040C41C] ;;call MSVCP60.??0runtime_error@std@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@1@@Z :00408A82 68E8D34000 push 0040D3E8 :00408A87 8D4DAC lea ecx, dword[ebp-54] :00408A8A 51 push ecx :00408A8B E8A4240000 call 0040AF34 ;;call MSVCRT._CxxThrowException --------- :00408A90 8B55F0 mov edx, dword[ebp-10] :00408A93 69D2E8030000 imul edx, 000003E8 :00408A99 52 push edx :00408A9A 8B8D64FFFFFF mov ecx, dword[ebp+FFFFFF64] :00408AA0 E80BFEFFFF call 004088B0 :00408AA5 25FF000000 and eax, 000000FF :00408AAA 85C0 test eax, eax :00408AAC 7402 je 00408AB0 :00408AAE EB76 jmp 00408B26 --------- :00408AB0 8B45EC mov eax, dword[ebp-14] :00408AB3 0345F0 add eax, dword[ebp-10] :00408AB6 8945EC mov dword[ebp-14], eax :00408AB9 8B8D64FFFFFF mov ecx, dword[ebp+FFFFFF64] :00408ABF 83793C00 cmp dword[ecx+3C], 00000000 :00408AC3 7C5C jl 00408B21 :00408AC5 8B9564FFFFFF mov edx, dword[ebp+FFFFFF64] :00408ACB 8B45EC mov eax, dword[ebp-14] :00408ACE 3B423C cmp eax, dword[edx+3C] :00408AD1 7E4E jle 00408B21 :00408AD3 6899800080 push 80008099 :00408AD8 FF156CC04000 call dword[0040C06C] ;;call KERNEL32.SetLastError :00408ADE 8D8D68FFFFFF lea ecx, dword[ebp+FFFFFF68] :00408AE4 51 push ecx :00408AE5 68D8014100 push 004101D8 (StringData)"SOCKET_CONNECT_TIMEOUT" :00408AEA 8D8D6CFFFFFF lea ecx, dword[ebp+FFFFFF6C] :00408AF0 FF1520C44000 call dword[0040C420] ;;call MSVCP60.??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBDABV?$allocator@D@1@@Z :00408AF6 C745FC02000000 mov dword[ebp-04], 00000002 :00408AFD 8D956CFFFFFF lea edx, dword[ebp+FFFFFF6C] :00408B03 52 push edx :00408B04 8D8D7CFFFFFF lea ecx, dword[ebp+FFFFFF7C] :00408B0A FF151CC44000 call dword[0040C41C] ;;call MSVCP60.??0runtime_error@std@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@1@@Z :00408B10 68E8D34000 push 0040D3E8 :00408B15 8D857CFFFFFF lea eax, dword[ebp+FFFFFF7C] :00408B1B 50 push eax :00408B1C E813240000 call 0040AF34 ;;call MSVCRT._CxxThrowException --------- :00408B21 E96AFFFFFF jmp 00408A90 --------- :00408B26 B801000000 mov eax, 00000001 :00408B2B 8B4DF4 mov ecx, dword[ebp-0C] :00408B2E 64890D00000000 mov dword fs:[00000000], ecx :00408B35 8BE5 mov esp, ebp :00408B37 5D pop ebp :00408B38 C20800 ret 0008 :00408B3B CC CC CC CC CC ..... ========= :00408B40 55 push ebp :00408B41 8BEC mov ebp, esp :00408B43 6AFF push -00000001 :00408B45 68BABA4000 push 0040BABA :00408B4A 64A100000000 mov eax, dword fs:[00000000] :00408B50 50 push eax :00408B51 64892500000000 mov dword fs:[00000000], esp :00408B58 83EC40 sub esp, 00000040 :00408B5B 894DB4 mov dword[ebp-4C], ecx :00408B5E 8B4510 mov eax, dword[ebp+10] :00408B61 8945F0 mov dword[ebp-10], eax :00408B64 6A10 push 00000010 :00408B66 6A00 push 00000000 :00408B68 8B4DF0 mov ecx, dword[ebp-10] :00408B6B 51 push ecx :00408B6C E84F230000 call 0040AEC0 ;;call MSVCRT.memset :00408B71 83C40C add esp, 0000000C :00408B74 8B55F0 mov edx, dword[ebp-10] :00408B77 66C7020200 mov word[edx], 0002 :00408B7C 6A00 push 00000000 :00408B7E 8B4D08 mov ecx, dword[ebp+08] :00408B81 FF1530C44000 call dword[0040C430] ;;call MSVCP60.??A?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEABDI@Z :00408B87 33C9 xor ecx, ecx :00408B89 8A08 mov cl, byte[eax] :00408B8B 85C9 test ecx, ecx :00408B8D 7512 jne 00408BA1 :00408B8F 6A00 push 00000000 :00408B91 E890250000 call 0040B126 :00408B96 8B55F0 mov edx, dword[ebp-10] :00408B99 894204 mov dword[edx+04], eax :00408B9C E981000000 jmp 00408C22 --------- :00408BA1 8B4D08 mov ecx, dword[ebp+08] :00408BA4 FF1534C44000 call dword[0040C434] ;;call MSVCP60.?c_str@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEPBDXZ :00408BAA 50 push eax :00408BAB E870250000 call 0040B120 :00408BB0 8945EC mov dword[ebp-14], eax :00408BB3 837DECFF cmp dword[ebp-14], -00000001 :00408BB7 740B je 00408BC4 :00408BB9 8B45F0 mov eax, dword[ebp-10] :00408BBC 8B4DEC mov ecx, dword[ebp-14] :00408BBF 894804 mov dword[eax+04], ecx :00408BC2 EB5E jmp 00408C22 --------- :00408BC4 8B4D08 mov ecx, dword[ebp+08] :00408BC7 FF1534C44000 call dword[0040C434] ;;call MSVCP60.?c_str@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEPBDXZ :00408BCD 50 push eax :00408BCE E847250000 call 0040B11A :00408BD3 8945E8 mov dword[ebp-18], eax :00408BD6 837DE800 cmp dword[ebp-18], 00000000 :00408BDA 7412 je 00408BEE :00408BDC 8B55E8 mov edx, dword[ebp-18] :00408BDF 8B420C mov eax, dword[edx+0C] :00408BE2 8B08 mov ecx, dword[eax] :00408BE4 8B11 mov edx, dword[ecx] :00408BE6 8B45F0 mov eax, dword[ebp-10] :00408BE9 895004 mov dword[eax+04], edx :00408BEC EB34 jmp 00408C22 --------- :00408BEE 8D4DB8 lea ecx, dword[ebp-48] :00408BF1 51 push ecx :00408BF2 68F0014100 push 004101F0 (StringData)"bad host addresss" :00408BF7 8D4DBC lea ecx, dword[ebp-44] :00408BFA FF1520C44000 call dword[0040C420] ;;call MSVCP60.??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBDABV?$allocator@D@1@@Z :00408C00 C745FC00000000 mov dword[ebp-04], 00000000 :00408C07 8D55BC lea edx, dword[ebp-44] :00408C0A 52 push edx :00408C0B 8D4DCC lea ecx, dword[ebp-34] :00408C0E FF151CC44000 call dword[0040C41C] ;;call MSVCP60.??0runtime_error@std@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@1@@Z :00408C14 68E8D34000 push 0040D3E8 :00408C19 8D45CC lea eax, dword[ebp-34] :00408C1C 50 push eax :00408C1D E812230000 call 0040AF34 ;;call MSVCRT._CxxThrowException --------- :00408C22 668B4D0C mov cx, word[ebp+0C] :00408C26 51 push ecx :00408C27 E8E8240000 call 0040B114 :00408C2C 8B55F0 mov edx, dword[ebp-10] :00408C2F 66894202 mov word[edx+02], ax :00408C33 8B4DF4 mov ecx, dword[ebp-0C] :00408C36 64890D00000000 mov dword fs:[00000000], ecx :00408C3D 8BE5 mov esp, ebp :00408C3F 5D pop ebp :00408C40 C20C00 ret 000C :00408C43 CC CC CC CC CC CC CC CC CC CC CC CC CC ............. :00408C50 55 push ebp :00408C51 8BEC mov ebp, esp :00408C53 51 push ecx :00408C54 894DFC mov dword[ebp-04], ecx :00408C57 8BE5 mov esp, ebp :00408C59 5D pop ebp :00408C5A C20400 ret 0004 :00408C5D CC CC CC ... ========= :00408C60 55 push ebp :00408C61 8BEC mov ebp, esp :00408C63 83EC08 sub esp, 00000008 :00408C66 894DF8 mov dword[ebp-08], ecx :00408C69 6A02 push 00000002 :00408C6B 6A00 push 00000000 :00408C6D 8B4510 mov eax, dword[ebp+10] :00408C70 50 push eax :00408C71 8B4D0C mov ecx, dword[ebp+0C] :00408C74 51 push ecx :00408C75 8B4DF8 mov ecx, dword[ebp-08] :00408C78 E853000000 call 00408CD0 :00408C7D 85C0 test eax, eax :00408C7F 7438 je 00408CB9 :00408C81 8B5514 mov edx, dword[ebp+14] :00408C84 52 push edx :00408C85 8B4508 mov eax, dword[ebp+08] :00408C88 50 push eax :00408C89 8B4DF8 mov ecx, dword[ebp-08] :00408C8C E86F000000 call 00408D00 :00408C91 85C0 test eax, eax :00408C93 7407 je 00408C9C :00408C95 B801000000 mov eax, 00000001 :00408C9A EB1F jmp 00408CBB --------- :00408C9C FF154CC04000 call dword[0040C04C] ;;call KERNEL32.GetLastError :00408CA2 8945FC mov dword[ebp-04], eax :00408CA5 8B4DF8 mov ecx, dword[ebp-08] :00408CA8 8B11 mov edx, dword[ecx] :00408CAA 8B4DF8 mov ecx, dword[ebp-08] :00408CAD FF5218 call dword[edx+18] :00408CB0 8B45FC mov eax, dword[ebp-04] :00408CB3 50 push eax :00408CB4 E873240000 call 0040B12C --------- :00408CB9 33C0 xor eax, eax --------- :00408CBB 8BE5 mov esp, ebp :00408CBD 5D pop ebp :00408CBE C21000 ret 0010 :00408CC1 CC CC CC CC CC CC CC CC CC CC CC CC CC CC CC ............... ========= :00408CD0 55 push ebp :00408CD1 8BEC mov ebp, esp :00408CD3 51 push ecx :00408CD4 894DFC mov dword[ebp-04], ecx :00408CD7 8B4510 mov eax, dword[ebp+10] :00408CDA 50 push eax :00408CDB 8B4D08 mov ecx, dword[ebp+08] :00408CDE 51 push ecx :00408CDF 8B5514 mov edx, dword[ebp+14] :00408CE2 52 push edx :00408CE3 E84A240000 call 0040B132 :00408CE8 8B4DFC mov ecx, dword[ebp-04] :00408CEB 894104 mov dword[ecx+04], eax :00408CEE B801000000 mov eax, 00000001 :00408CF3 8BE5 mov esp, ebp :00408CF5 5D pop ebp :00408CF6 C21000 ret 0010 :00408CF9 CC CC CC CC CC CC CC ....... ========= :00408D00 55 push ebp :00408D01 8BEC mov ebp, esp :00408D03 83EC2C sub esp, 0000002C :00408D06 894DD4 mov dword[ebp-2C], ecx :00408D09 C745E800000000 mov dword[ebp-18], 00000000 :00408D10 6A10 push 00000010 :00408D12 6A00 push 00000000 :00408D14 8D45EC lea eax, dword[ebp-14] :00408D17 50 push eax :00408D18 E8A3210000 call 0040AEC0 ;;call MSVCRT.memset :00408D1D 83C40C add esp, 0000000C :00408D20 8B4D0C mov ecx, dword[ebp+0C] :00408D23 51 push ecx :00408D24 E897000000 call 00408DC0 :00408D29 83C404 add esp, 00000004 :00408D2C 8945E4 mov dword[ebp-1C], eax :00408D2F 66C745EC0200 mov word[ebp-14], 0002 :00408D35 837DE400 cmp dword[ebp-1C], 00000000 :00408D39 750C jne 00408D47 :00408D3B 6A00 push 00000000 :00408D3D E8E4230000 call 0040B126 :00408D42 8945F0 mov dword[ebp-10], eax :00408D45 EB26 jmp 00408D6D --------- :00408D47 8B55E4 mov edx, dword[ebp-1C] :00408D4A 52 push edx :00408D4B E8D0230000 call 0040B120 :00408D50 8945D8 mov dword[ebp-28], eax :00408D53 837DD8FF cmp dword[ebp-28], -00000001 :00408D57 750E jne 00408D67 :00408D59 6826270000 push 00002726 :00408D5E E8C9230000 call 0040B12C :00408D63 33C0 xor eax, eax :00408D65 EB22 jmp 00408D89 --------- :00408D67 8B45D8 mov eax, dword[ebp-28] :00408D6A 8945F0 mov dword[ebp-10], eax --------- :00408D6D 668B4D08 mov cx, word[ebp+08] :00408D71 51 push ecx :00408D72 E89D230000 call 0040B114 :00408D77 668945EE mov word[ebp-12], ax :00408D7B 6A10 push 00000010 :00408D7D 8D55EC lea edx, dword[ebp-14] :00408D80 52 push edx :00408D81 8B4DD4 mov ecx, dword[ebp-2C] :00408D84 E807000000 call 00408D90 --------- :00408D89 8BE5 mov esp, ebp :00408D8B 5D pop ebp :00408D8C C20800 ret 0008 :00408D8F CC . ========= :00408D90 55 push ebp :00408D91 8BEC mov ebp, esp :00408D93 51 push ecx :00408D94 894DFC mov dword[ebp-04], ecx :00408D97 8B450C mov eax, dword[ebp+0C] :00408D9A 50 push eax :00408D9B 8B4D08 mov ecx, dword[ebp+08] :00408D9E 51 push ecx :00408D9F 8B55FC mov edx, dword[ebp-04] :00408DA2 8B4204 mov eax, dword[edx+04] :00408DA5 50 push eax :00408DA6 E88D230000 call 0040B138 :00408DAB 33C9 xor ecx, ecx :00408DAD 83F8FF cmp eax, -00000001 :00408DB0 0F95C1 setne cl :00408DB3 8BC1 mov eax, ecx :00408DB5 8BE5 mov esp, ebp :00408DB7 5D pop ebp :00408DB8 C20800 ret 0008 :00408DBB CC CC CC CC CC ..... ========= :00408DC0 55 push ebp :00408DC1 8BEC mov ebp, esp :00408DC3 8B4508 mov eax, dword[ebp+08] :00408DC6 5D pop ebp :00408DC7 C3 ret :00408DC8 CC CC CC CC CC CC CC CC ........ ========= :00408DD0 55 push ebp :00408DD1 8BEC mov ebp, esp :00408DD3 51 push ecx :00408DD4 894DFC mov dword[ebp-04], ecx :00408DD7 8B4DFC mov ecx, dword[ebp-04] :00408DDA E821000000 call 00408E00 :00408DDF 8B4508 mov eax, dword[ebp+08] :00408DE2 50 push eax :00408DE3 8B4DFC mov ecx, dword[ebp-04] :00408DE6 E8A91C0000 call 0040AA94 :00408DEB 8B45FC mov eax, dword[ebp-04] :00408DEE 8BE5 mov esp, ebp :00408DF0 5D pop ebp :00408DF1 C20400 ret 0004 :00408DF4 CC CC CC CC CC CC CC CC CC CC CC CC ............ ========= :00408E00 55 push ebp :00408E01 8BEC mov ebp, esp :00408E03 51 push ecx :00408E04 894DFC mov dword[ebp-04], ecx :00408E07 E8F21E0000 call 0040ACFE :00408E0C 8B4DFC mov ecx, dword[ebp-04] :00408E0F 8B10 mov edx, dword[eax] :00408E11 8911 mov dword[ecx], edx :00408E13 8BE5 mov esp, ebp :00408E15 5D pop ebp :00408E16 C3 ret :00408E17 CC CC CC CC CC CC CC CC CC ......... ========= :00408E20 55 push ebp :00408E21 8BEC mov ebp, esp :00408E23 51 push ecx :00408E24 894DFC mov dword[ebp-04], ecx :00408E27 8B4510 mov eax, dword[ebp+10] :00408E2A 8A08 mov cl, byte[eax] :00408E2C 8B55FC mov edx, dword[ebp-04] :00408E2F 880A mov byte[edx], cl :00408E31 6A00 push 00000000 :00408E33 8B4508 mov eax, dword[ebp+08] :00408E36 50 push eax :00408E37 8B4DFC mov ecx, dword[ebp-04] :00408E3A E8C1000000 call 00408F00 :00408E3F 8B4DFC mov ecx, dword[ebp-04] :00408E42 894104 mov dword[ecx+04], eax :00408E45 8B550C mov edx, dword[ebp+0C] :00408E48 52 push edx :00408E49 8B4508 mov eax, dword[ebp+08] :00408E4C 50 push eax :00408E4D 8B4DFC mov ecx, dword[ebp-04] :00408E50 8B5104 mov edx, dword[ecx+04] :00408E53 52 push edx :00408E54 8B4DFC mov ecx, dword[ebp-04] :00408E57 E834010000 call 00408F90 :00408E5C 8B45FC mov eax, dword[ebp-04] :00408E5F 8B4804 mov ecx, dword[eax+04] :00408E62 034D08 add ecx, dword[ebp+08] :00408E65 8B55FC mov edx, dword[ebp-04] :00408E68 894A08 mov dword[edx+08], ecx :00408E6B 8B45FC mov eax, dword[ebp-04] :00408E6E 8B4DFC mov ecx, dword[ebp-04] :00408E71 8B5108 mov edx, dword[ecx+08] :00408E74 89500C mov dword[eax+0C], edx :00408E77 8B45FC mov eax, dword[ebp-04] :00408E7A 8BE5 mov esp, ebp :00408E7C 5D pop ebp :00408E7D C20C00 ret 000C ========= :00408E80 55 push ebp :00408E81 8BEC mov ebp, esp :00408E83 51 push ecx :00408E84 894DFC mov dword[ebp-04], ecx :00408E87 8B45FC mov eax, dword[ebp-04] :00408E8A 8B4808 mov ecx, dword[eax+08] :00408E8D 51 push ecx :00408E8E 8B55FC mov edx, dword[ebp-04] :00408E91 8B4204 mov eax, dword[edx+04] :00408E94 50 push eax :00408E95 8B4DFC mov ecx, dword[ebp-04] :00408E98 E8C3000000 call 00408F60 :00408E9D 8B4DFC mov ecx, dword[ebp-04] :00408EA0 8B55FC mov edx, dword[ebp-04] :00408EA3 8B410C mov eax, dword[ecx+0C] :00408EA6 2B4204 sub eax, dword[edx+04] :00408EA9 50 push eax :00408EAA 8B4DFC mov ecx, dword[ebp-04] :00408EAD 8B5104 mov edx, dword[ecx+04] :00408EB0 52 push edx :00408EB1 8B4DFC mov ecx, dword[ebp-04] :00408EB4 E867000000 call 00408F20 :00408EB9 8B45FC mov eax, dword[ebp-04] :00408EBC C7400400000000 mov dword[eax+04], 00000000 :00408EC3 8B4DFC mov ecx, dword[ebp-04] :00408EC6 C7410800000000 mov dword[ecx+08], 00000000 :00408ECD 8B55FC mov edx, dword[ebp-04] :00408ED0 C7420C00000000 mov dword[edx+0C], 00000000 :00408ED7 8BE5 mov esp, ebp :00408ED9 5D pop ebp :00408EDA C3 ret :00408EDB CC CC CC CC CC ..... ========= :00408EE0 55 push ebp :00408EE1 8BEC mov ebp, esp :00408EE3 51 push ecx :00408EE4 894DFC mov dword[ebp-04], ecx :00408EE7 8B4DFC mov ecx, dword[ebp-04] :00408EEA E851000000 call 00408F40 :00408EEF 034508 add eax, dword[ebp+08] :00408EF2 8BE5 mov esp, ebp :00408EF4 5D pop ebp :00408EF5 C20400 ret 0004 :00408EF8 CC CC CC CC CC CC CC CC ........ ========= :00408F00 55 push ebp :00408F01 8BEC mov ebp, esp :00408F03 51 push ecx :00408F04 894DFC mov dword[ebp-04], ecx :00408F07 6A00 push 00000000 :00408F09 8B4508 mov eax, dword[ebp+08] :00408F0C 50 push eax :00408F0D E8FE000000 call 00409010 :00408F12 83C408 add esp, 00000008 :00408F15 8BE5 mov esp, ebp :00408F17 5D pop ebp :00408F18 C20800 ret 0008 :00408F1B CC CC CC CC CC ..... ========= :00408F20 55 push ebp :00408F21 8BEC mov ebp, esp :00408F23 51 push ecx :00408F24 894DFC mov dword[ebp-04], ecx :00408F27 8B4508 mov eax, dword[ebp+08] :00408F2A 50 push eax :00408F2B E86A1B0000 call 0040AA9A :00408F30 83C404 add esp, 00000004 :00408F33 8BE5 mov esp, ebp :00408F35 5D pop ebp :00408F36 C20800 ret 0008 :00408F39 CC CC CC CC CC CC CC ....... ========= :00408F40 55 push ebp :00408F41 8BEC mov ebp, esp :00408F43 51 push ecx :00408F44 894DFC mov dword[ebp-04], ecx :00408F47 8B45FC mov eax, dword[ebp-04] :00408F4A 8B4004 mov eax, dword[eax+04] :00408F4D 8BE5 mov esp, ebp :00408F4F 5D pop ebp :00408F50 C3 ret :00408F51 CC CC CC CC CC CC CC CC CC CC CC CC CC CC CC ............... ========= :00408F60 55 push ebp :00408F61 8BEC mov ebp, esp :00408F63 51 push ecx :00408F64 894DFC mov dword[ebp-04], ecx :00408F67 EB09 jmp 00408F72 --------- :00408F69 8B4508 mov eax, dword[ebp+08] :00408F6C 83C001 add eax, 00000001 :00408F6F 894508 mov dword[ebp+08], eax --------- :00408F72 8B4D08 mov ecx, dword[ebp+08] :00408F75 3B4D0C cmp ecx, dword[ebp+0C] :00408F78 740E je 00408F88 :00408F7A 8B5508 mov edx, dword[ebp+08] :00408F7D 52 push edx :00408F7E 8B4DFC mov ecx, dword[ebp-04] :00408F81 E86A000000 call 00408FF0 :00408F86 EBE1 jmp 00408F69 --------- :00408F88 8BE5 mov esp, ebp :00408F8A 5D pop ebp :00408F8B C20800 ret 0008 :00408F8E CC CC .. ========= :00408F90 55 push ebp :00408F91 8BEC mov ebp, esp :00408F93 51 push ecx :00408F94 894DFC mov dword[ebp-04], ecx :00408F97 EB12 jmp 00408FAB --------- :00408F99 8B450C mov eax, dword[ebp+0C] :00408F9C 83E801 sub eax, 00000001 :00408F9F 89450C mov dword[ebp+0C], eax :00408FA2 8B4D08 mov ecx, dword[ebp+08] :00408FA5 83C101 add ecx, 00000001 :00408FA8 894D08 mov dword[ebp+08], ecx --------- :00408FAB 837D0C00 cmp dword[ebp+0C], 00000000 :00408FAF 7612 jbe 00408FC3 :00408FB1 8B5510 mov edx, dword[ebp+10] :00408FB4 52 push edx :00408FB5 8B4508 mov eax, dword[ebp+08] :00408FB8 50 push eax :00408FB9 8B4DFC mov ecx, dword[ebp-04] :00408FBC E80F000000 call 00408FD0 :00408FC1 EBD6 jmp 00408F99 --------- :00408FC3 8BE5 mov esp, ebp :00408FC5 5D pop ebp :00408FC6 C20C00 ret 000C :00408FC9 CC CC CC CC CC CC CC ....... ========= :00408FD0 55 push ebp :00408FD1 8BEC mov ebp, esp :00408FD3 51 push ecx :00408FD4 894DFC mov dword[ebp-04], ecx :00408FD7 8B450C mov eax, dword[ebp+0C] :00408FDA 50 push eax :00408FDB 8B4D08 mov ecx, dword[ebp+08] :00408FDE 51 push ecx :00408FDF E84C000000 call 00409030 :00408FE4 83C408 add esp, 00000008 :00408FE7 8BE5 mov esp, ebp :00408FE9 5D pop ebp :00408FEA C20800 ret 0008 :00408FED CC CC CC ... ========= :00408FF0 55 push ebp :00408FF1 8BEC mov ebp, esp :00408FF3 51 push ecx :00408FF4 894DFC mov dword[ebp-04], ecx :00408FF7 8B4508 mov eax, dword[ebp+08] :00408FFA 50 push eax :00408FFB E880000000 call 00409080 :00409000 83C404 add esp, 00000004 :00409003 8BE5 mov esp, ebp :00409005 5D pop ebp :00409006 C20400 ret 0004 :00409009 CC CC CC CC CC CC CC ....... ========= :00409010 55 push ebp :00409011 8BEC mov ebp, esp :00409013 837D0800 cmp dword[ebp+08], 00000000 :00409017 7D07 jge 00409020 :00409019 C7450800000000 mov dword[ebp+08], 00000000 --------- :00409020 8B4508 mov eax, dword[ebp+08] :00409023 50 push eax :00409024 E8571C0000 call 0040AC80 :00409029 83C404 add esp, 00000004 :0040902C 5D pop ebp :0040902D C3 ret :0040902E CC CC .. ========= :00409030 55 push ebp :00409031 8BEC mov ebp, esp :00409033 83EC08 sub esp, 00000008 :00409036 8B4508 mov eax, dword[ebp+08] :00409039 50 push eax :0040903A 6A01 push 00000001 :0040903C E82F000000 call 00409070 :00409041 83C408 add esp, 00000008 :00409044 8945FC mov dword[ebp-04], eax :00409047 837DFC00 cmp dword[ebp-04], 00000000 :0040904B 7412 je 0040905F :0040904D 8B4DFC mov ecx, dword[ebp-04] :00409050 8B550C mov edx, dword[ebp+0C] :00409053 8A02 mov al, byte[edx] :00409055 8801 mov byte[ecx], al :00409057 8B4DFC mov ecx, dword[ebp-04] :0040905A 894DF8 mov dword[ebp-08], ecx :0040905D EB07 jmp 00409066 --------- :0040905F C745F800000000 mov dword[ebp-08], 00000000 --------- :00409066 8BE5 mov esp, ebp :00409068 5D pop ebp :00409069 C3 ret :0040906A CC CC CC CC CC CC ...... ========= :00409070 55 push ebp :00409071 8BEC mov ebp, esp :00409073 8B450C mov eax, dword[ebp+0C] :00409076 5D pop ebp :00409077 C3 ret :00409078 CC CC CC CC CC CC CC CC ........ ========= :00409080 55 push ebp :00409081 8BEC mov ebp, esp :00409083 5D pop ebp :00409084 C3 ret :00409085 CC CC CC CC CC CC CC CC CC CC CC ........... ========= :00409090 55 push ebp :00409091 8BEC mov ebp, esp :00409093 6AFF push -00000001 :00409095 68EBBA4000 push 0040BAEB :0040909A 64A100000000 mov eax, dword fs:[00000000] :004090A0 50 push eax :004090A1 64892500000000 mov dword fs:[00000000], esp :004090A8 81EC0C010000 sub esp, 0000010C :004090AE 898DECFEFFFF mov dword[ebp+FFFFFEEC], ecx :004090B4 8B8DECFEFFFF mov ecx, dword[ebp+FFFFFEEC] :004090BA E8BF1A0000 call 0040AB7E :004090BF C745FC00000000 mov dword[ebp-04], 00000000 :004090C6 8B8DECFEFFFF mov ecx, dword[ebp+FFFFFEEC] :004090CC 83C114 add ecx, 00000014 :004090CF E8A2190000 call 0040AA76 :004090D4 C645FC01 mov byte[ebp-04], 01 :004090D8 8B85ECFEFFFF mov eax, dword[ebp+FFFFFEEC] :004090DE C700DCC84000 mov dword[eax], 0040C8DC :004090E4 33C9 xor ecx, ecx :004090E6 8A0D900D4100 mov cl, byte[00410D90] :004090EC 85C9 test ecx, ecx :004090EE 7510 jne 00409100 :004090F0 68900D4100 push 00410D90 :004090F5 6804010000 push 00000104 :004090FA FF15B4C04000 call dword[0040C0B4] ;;call KERNEL32.GetTempPathA --------- :00409100 8D95F0FEFFFF lea edx, dword[ebp+FFFFFEF0] :00409106 52 push edx :00409107 A104024100 mov eax, dword[00410204] :0040910C 8985E8FEFFFF mov dword[ebp+FFFFFEE8], eax :00409112 8B8DE8FEFFFF mov ecx, dword[ebp+FFFFFEE8] :00409118 51 push ecx :00409119 6860024100 push 00410260 (StringData)"NAE" :0040911E 68900D4100 push 00410D90 :00409123 8B1504024100 mov edx, dword[00410204] :00409129 83C201 add edx, 00000001 :0040912C 891504024100 mov dword[00410204], edx :00409132 FF15B0C04000 call dword[0040C0B0] ;;call KERNEL32.GetTempFileNameA :00409138 8D85F0FEFFFF lea eax, dword[ebp+FFFFFEF0] :0040913E 50 push eax :0040913F 8B8DECFEFFFF mov ecx, dword[ebp+FFFFFEEC] :00409145 E836010000 call 00409280 :0040914A 8D8DF0FEFFFF lea ecx, dword[ebp+FFFFFEF0] :00409150 51 push ecx :00409151 8B8DECFEFFFF mov ecx, dword[ebp+FFFFFEEC] :00409157 83C114 add ecx, 00000014 :0040915A E835190000 call 0040AA94 :0040915F C745FCFFFFFFFF mov dword[ebp-04], FFFFFFFF :00409166 8B85ECFEFFFF mov eax, dword[ebp+FFFFFEEC] :0040916C 8B4DF4 mov ecx, dword[ebp-0C] :0040916F 64890D00000000 mov dword fs:[00000000], ecx :00409176 8BE5 mov esp, ebp :00409178 5D pop ebp :00409179 C3 ret :0040917A CC CC CC CC CC CC ...... :00409180 55 push ebp :00409181 8BEC mov ebp, esp :00409183 51 push ecx :00409184 894DFC mov dword[ebp-04], ecx :00409187 8B4DFC mov ecx, dword[ebp-04] :0040918A E851000000 call 004091E0 :0040918F 8B4508 mov eax, dword[ebp+08] :00409192 83E001 and eax, 00000001 :00409195 85C0 test eax, eax :00409197 7409 je 004091A2 :00409199 8B4DFC mov ecx, dword[ebp-04] :0040919C 51 push ecx :0040919D E87E9AFFFF call 00402C20 --------- :004091A2 8B45FC mov eax, dword[ebp-04] :004091A5 8BE5 mov esp, ebp :004091A7 5D pop ebp :004091A8 C20400 ret 0004 :004091AB CC CC CC CC CC ..... ========= :004091B0 55 push ebp :004091B1 8BEC mov ebp, esp :004091B3 51 push ecx :004091B4 894DFC mov dword[ebp-04], ecx :004091B7 6A00 push 00000000 :004091B9 8B4508 mov eax, dword[ebp+08] :004091BC 50 push eax :004091BD 8B4DFC mov ecx, dword[ebp-04] :004091C0 83C114 add ecx, 00000014 :004091C3 E8989AFFFF call 00402C60 :004091C8 50 push eax :004091C9 8B4DFC mov ecx, dword[ebp-04] :004091CC E8A91A0000 call 0040AC7A :004091D1 8BE5 mov esp, ebp :004091D3 5D pop ebp :004091D4 C20400 ret 0004 :004091D7 CC CC CC CC CC CC CC CC CC ......... ========= :004091E0 55 push ebp :004091E1 8BEC mov ebp, esp :004091E3 6AFF push -00000001 :004091E5 6815BB4000 push 0040BB15 :004091EA 64A100000000 mov eax, dword fs:[00000000] :004091F0 50 push eax :004091F1 64892500000000 mov dword fs:[00000000], esp :004091F8 51 push ecx :004091F9 894DF0 mov dword[ebp-10], ecx :004091FC 8B45F0 mov eax, dword[ebp-10] :004091FF C700DCC84000 mov dword[eax], 0040C8DC :00409205 C745FC01000000 mov dword[ebp-04], 00000001 :0040920C 8B4DF0 mov ecx, dword[ebp-10] :0040920F E82C000000 call 00409240 :00409214 C645FC00 mov byte[ebp-04], 00 :00409218 8B4DF0 mov ecx, dword[ebp-10] :0040921B 83C114 add ecx, 00000014 :0040921E E85F180000 call 0040AA82 :00409223 C745FCFFFFFFFF mov dword[ebp-04], FFFFFFFF :0040922A 8B4DF0 mov ecx, dword[ebp-10] :0040922D E840190000 call 0040AB72 :00409232 8B4DF4 mov ecx, dword[ebp-0C] :00409235 64890D00000000 mov dword fs:[00000000], ecx :0040923C 8BE5 mov esp, ebp :0040923E 5D pop ebp :0040923F C3 ret ========= :00409240 55 push ebp :00409241 8BEC mov ebp, esp :00409243 51 push ecx :00409244 894DFC mov dword[ebp-04], ecx :00409247 8B45FC mov eax, dword[ebp-04] :0040924A 837804FF cmp dword[eax+04], -00000001 :0040924E 740B je 0040925B :00409250 8B4DFC mov ecx, dword[ebp-04] :00409253 8B11 mov edx, dword[ecx] :00409255 8B4DFC mov ecx, dword[ebp-04] :00409258 FF5254 call dword[edx+54] --------- :0040925B 8B4DFC mov ecx, dword[ebp-04] :0040925E 83C114 add ecx, 00000014 :00409261 E8FA99FFFF call 00402C60 :00409266 50 push eax :00409267 FF15B8C04000 call dword[0040C0B8] ;;call KERNEL32.DeleteFileA :0040926D 8BE5 mov esp, ebp :0040926F 5D pop ebp :00409270 C3 ret :00409271 CC CC CC CC CC CC CC CC CC CC CC CC CC CC CC ............... ========= :00409280 55 push ebp :00409281 8BEC mov ebp, esp :00409283 83EC08 sub esp, 00000008 :00409286 894DF8 mov dword[ebp-08], ecx :00409289 6A2E push 0000002E :0040928B 8B4508 mov eax, dword[ebp+08] :0040928E 50 push eax :0040928F E8DC000000 call 00409370 :00409294 83C408 add esp, 00000008 :00409297 8945FC mov dword[ebp-04], eax :0040929A 837DFC00 cmp dword[ebp-04], 00000000 :0040929E 7504 jne 004092A4 :004092A0 33C0 xor eax, eax :004092A2 EB1F jmp 004092C3 --------- :004092A4 8B4DFC mov ecx, dword[ebp-04] :004092A7 83C101 add ecx, 00000001 :004092AA 894DFC mov dword[ebp-04], ecx :004092AD 6864024100 push 00410264 (StringData)"MME" :004092B2 8B55FC mov edx, dword[ebp-04] :004092B5 52 push edx :004092B6 E8851C0000 call 0040AF40 ;;call MSVCRT.strcpy :004092BB 83C408 add esp, 00000008 :004092BE B801000000 mov eax, 00000001 --------- :004092C3 8BE5 mov esp, ebp :004092C5 5D pop ebp :004092C6 C20400 ret 0004 :004092C9 CC CC CC CC CC CC CC ....... ========= :004092D0 55 push ebp :004092D1 8BEC mov ebp, esp :004092D3 6AFF push -00000001 :004092D5 6829BB4000 push 0040BB29 :004092DA 64A100000000 mov eax, dword fs:[00000000] :004092E0 50 push eax :004092E1 64892500000000 mov dword fs:[00000000], esp :004092E8 83EC10 sub esp, 00000010 :004092EB 894DE4 mov dword[ebp-1C], ecx :004092EE 8B4DE4 mov ecx, dword[ebp-1C] :004092F1 E8CAD9FFFF call 00406CC0 :004092F6 8D4DEC lea ecx, dword[ebp-14] :004092F9 E878170000 call 0040AA76 :004092FE C745FC00000000 mov dword[ebp-04], 00000000 :00409305 C745F000000000 mov dword[ebp-10], 00000000 :0040930C 837D0800 cmp dword[ebp+08], 00000000 :00409310 7428 je 0040933A --------- :00409312 8D45EC lea eax, dword[ebp-14] :00409315 50 push eax :00409316 8B4DE4 mov ecx, dword[ebp-1C] :00409319 8B11 mov edx, dword[ecx] :0040931B 8B4DE4 mov ecx, dword[ebp-1C] :0040931E FF5260 call dword[edx+60] :00409321 85C0 test eax, eax :00409323 7415 je 0040933A :00409325 8B45F0 mov eax, dword[ebp-10] :00409328 83C001 add eax, 00000001 :0040932B 8945F0 mov dword[ebp-10], eax :0040932E 8B4D08 mov ecx, dword[ebp+08] :00409331 3B4DF0 cmp ecx, dword[ebp-10] :00409334 7502 jne 00409338 :00409336 EB02 jmp 0040933A --------- :00409338 EBD8 jmp 00409312 --------- :0040933A 8B55F0 mov edx, dword[ebp-10] :0040933D 8955E8 mov dword[ebp-18], edx :00409340 C745FCFFFFFFFF mov dword[ebp-04], FFFFFFFF :00409347 8D4DEC lea ecx, dword[ebp-14] :0040934A E833170000 call 0040AA82 :0040934F 8B45E8 mov eax, dword[ebp-18] :00409352 8B4DF4 mov ecx, dword[ebp-0C] :00409355 64890D00000000 mov dword fs:[00000000], ecx :0040935C 8BE5 mov esp, ebp :0040935E 5D pop ebp :0040935F C20400 ret 0004 :00409362 CC CC CC CC CC CC CC CC CC CC CC CC CC CC .............. ========= :00409370 55 push ebp :00409371 8BEC mov ebp, esp :00409373 8B450C mov eax, dword[ebp+0C] :00409376 50 push eax :00409377 8B4D08 mov ecx, dword[ebp+08] :0040937A 51 push ecx :0040937B FF1554C44000 call dword[0040C454] ;;call MSVCRT._mbsrchr :00409381 83C408 add esp, 00000008 :00409384 5D pop ebp :00409385 C3 ret :00409386 CC CC CC CC CC CC CC CC CC CC .......... :00409390 55 push ebp :00409391 8BEC mov ebp, esp :00409393 51 push ecx :00409394 894DFC mov dword[ebp-04], ecx :00409397 8B4508 mov eax, dword[ebp+08] :0040939A 50 push eax :0040939B 8B4DFC mov ecx, dword[ebp-04] :0040939E 83C10C add ecx, 0000000C :004093A1 E8EE160000 call 0040AA94 :004093A6 8BE5 mov esp, ebp :004093A8 5D pop ebp :004093A9 C20400 ret 0004 :004093AC CC CC CC CC 55 8B EC E8 08 00 00 00 E8 13 00 00 ....U........... :004093BC 00 5D C3 CC .].. :004093C0 55 push ebp :004093C1 8BEC mov ebp, esp :004093C3 B9940E4100 mov ecx, 00410E94 :004093C8 E8A9160000 call 0040AA76 :004093CD 5D pop ebp :004093CE C3 ret :004093CF CC . :004093D0 55 push ebp :004093D1 8BEC mov ebp, esp :004093D3 68F0934000 push 004093F0 :004093D8 E83F1B0000 call 0040AF1C :004093DD 83C404 add esp, 00000004 :004093E0 5D pop ebp :004093E1 C3 ret :004093E2 CC CC CC CC CC CC CC CC CC CC CC CC CC CC .............. --------- :004093F0 55 push ebp :004093F1 8BEC mov ebp, esp :004093F3 B9940E4100 mov ecx, 00410E94 :004093F8 E885160000 call 0040AA82 :004093FD 5D pop ebp :004093FE C3 ret :004093FF CC 55 8B EC A1 .U... :00409404 74C24000 DWORD 0040C274 ;; t.@. :00409408 5D C3 CC CC CC CC CC CC 55 8B EC 51 89 4D FC B8 ].......U..Q.M.. :00409418 48C94000 DWORD 0040C948 ;; H.@. :0040941C 8B E5 5D C3 ..]. ========= :00409420 55 push ebp :00409421 8BEC mov ebp, esp :00409423 83EC5C sub esp, 0000005C :00409426 6A58 push 00000058 :00409428 6A00 push 00000000 :0040942A 8D45A8 lea eax, dword[ebp-58] :0040942D 50 push eax :0040942E E88D1A0000 call 0040AEC0 ;;call MSVCRT.memset :00409433 83C40C add esp, 0000000C :00409436 C745A858000000 mov dword[ebp-58], 00000058 :0040943D 8B4D08 mov ecx, dword[ebp+08] :00409440 894DAC mov dword[ebp-54], ecx :00409443 8B550C mov edx, dword[ebp+0C] :00409446 8955B0 mov dword[ebp-50], edx :00409449 C745B407000000 mov dword[ebp-4C], 00000007 :00409450 C745B800070000 mov dword[ebp-48], 00000700 :00409457 8B4510 mov eax, dword[ebp+10] :0040945A 8945BC mov dword[ebp-44], eax :0040945D 837D1400 cmp dword[ebp+14], 00000000 :00409461 7414 je 00409477 :00409463 6A40 push 00000040 :00409465 8B4D14 mov ecx, dword[ebp+14] :00409468 51 push ecx :00409469 8D55C0 lea edx, dword[ebp-40] :0040946C 52 push edx :0040946D E82E000000 call 004094A0 :00409472 83C40C add esp, 0000000C :00409475 EB04 jmp 0040947B --------- :00409477 C645C000 mov byte[ebp-40], 00 --------- :0040947B 8D45A8 lea eax, dword[ebp-58] :0040947E 50 push eax :0040947F 6A00 push 00000000 :00409481 FF15E4C44000 call dword[0040C4E4] ;;call SHELL32.Shell_NotifyIconA :00409487 8945A4 mov dword[ebp-5C], eax :0040948A 8B45A4 mov eax, dword[ebp-5C] :0040948D 8BE5 mov esp, ebp :0040948F 5D pop ebp :00409490 C3 ret :00409491 CC CC CC CC CC CC CC CC CC CC CC CC CC CC CC ............... ========= :004094A0 55 push ebp :004094A1 8BEC mov ebp, esp :004094A3 8B4510 mov eax, dword[ebp+10] :004094A6 50 push eax :004094A7 8B4D0C mov ecx, dword[ebp+0C] :004094AA 51 push ecx :004094AB 8B5508 mov edx, dword[ebp+08] :004094AE 52 push edx :004094AF FF154CC44000 call dword[0040C44C] ;;call MSVCRT._mbsnbcpy :004094B5 83C40C add esp, 0000000C :004094B8 5D pop ebp :004094B9 C3 ret :004094BA CC CC CC CC CC CC ...... ========= :004094C0 55 push ebp :004094C1 8BEC mov ebp, esp :004094C3 83EC60 sub esp, 00000060 :004094C6 57 push edi :004094C7 C745A400000000 mov dword[ebp-5C], 00000000 :004094CE C745A800000000 mov dword[ebp-58], 00000000 :004094D5 B915000000 mov ecx, 00000015 :004094DA 33C0 xor eax, eax :004094DC 8D7DAC lea edi, dword[ebp-54] :004094DF F3AB rep stosd :004094E1 6A58 push 00000058 :004094E3 6A00 push 00000000 :004094E5 8D45A8 lea eax, dword[ebp-58] :004094E8 50 push eax :004094E9 E8D2190000 call 0040AEC0 ;;call MSVCRT.memset :004094EE 83C40C add esp, 0000000C :004094F1 837D1400 cmp dword[ebp+14], 00000000 :004094F5 7461 je 00409558 :004094F7 837D1800 cmp dword[ebp+18], 00000000 :004094FB 742C je 00409529 :004094FD C745A000000000 mov dword[ebp-60], 00000000 :00409504 FF15BCC04000 call dword[0040C0BC] ;;call KERNEL32.GetTickCount :0040950A 8945A0 mov dword[ebp-60], eax :0040950D 8B4D18 mov ecx, dword[ebp+18] :00409510 8B55A0 mov edx, dword[ebp-60] :00409513 2B11 sub edx, dword[ecx] :00409515 3B551C cmp edx, dword[ebp+1C] :00409518 760A jbe 00409524 :0040951A 8B4518 mov eax, dword[ebp+18] :0040951D 8B4DA0 mov ecx, dword[ebp-60] :00409520 8908 mov dword[eax], ecx :00409522 EB05 jmp 00409529 --------- :00409524 8B45A4 mov eax, dword[ebp-5C] :00409527 EB32 jmp 0040955B --------- :00409529 C745A858000000 mov dword[ebp-58], 00000058 :00409530 8B5508 mov edx, dword[ebp+08] :00409533 8955AC mov dword[ebp-54], edx :00409536 8B450C mov eax, dword[ebp+0C] :00409539 8945B0 mov dword[ebp-50], eax :0040953C C745B402000000 mov dword[ebp-4C], 00000002 :00409543 8B4D10 mov ecx, dword[ebp+10] :00409546 894DBC mov dword[ebp-44], ecx :00409549 8D55A8 lea edx, dword[ebp-58] :0040954C 52 push edx :0040954D 6A01 push 00000001 :0040954F FF15E4C44000 call dword[0040C4E4] ;;call SHELL32.Shell_NotifyIconA :00409555 8945A4 mov dword[ebp-5C], eax --------- :00409558 8B45A4 mov eax, dword[ebp-5C] --------- :0040955B 5F pop edi :0040955C 8BE5 mov esp, ebp :0040955E 5D pop ebp :0040955F C3 ret ========= :00409560 55 push ebp :00409561 8BEC mov ebp, esp :00409563 83EC5C sub esp, 0000005C :00409566 6A58 push 00000058 :00409568 6A00 push 00000000 :0040956A 8D45A8 lea eax, dword[ebp-58] :0040956D 50 push eax :0040956E E84D190000 call 0040AEC0 ;;call MSVCRT.memset :00409573 83C40C add esp, 0000000C :00409576 C745A858000000 mov dword[ebp-58], 00000058 :0040957D 8B4D08 mov ecx, dword[ebp+08] :00409580 894DAC mov dword[ebp-54], ecx :00409583 8B550C mov edx, dword[ebp+0C] :00409586 8955B0 mov dword[ebp-50], edx :00409589 8D45A8 lea eax, dword[ebp-58] :0040958C 50 push eax :0040958D 6A02 push 00000002 :0040958F FF15E4C44000 call dword[0040C4E4] ;;call SHELL32.Shell_NotifyIconA :00409595 8945A4 mov dword[ebp-5C], eax :00409598 8B45A4 mov eax, dword[ebp-5C] :0040959B 8BE5 mov esp, ebp :0040959D 5D pop ebp :0040959E C3 ret :0040959F CC . ========= :004095A0 55 push ebp :004095A1 8BEC mov ebp, esp :004095A3 6AFF push -00000001 :004095A5 6849BB4000 push 0040BB49 :004095AA 64A100000000 mov eax, dword fs:[00000000] :004095B0 50 push eax :004095B1 64892500000000 mov dword fs:[00000000], esp :004095B8 51 push ecx :004095B9 894DF0 mov dword[ebp-10], ecx :004095BC 8B4DF0 mov ecx, dword[ebp-10] :004095BF E8A2180000 call 0040AE66 :004095C4 C745FC00000000 mov dword[ebp-04], 00000000 :004095CB 6A0A push 0000000A :004095CD 8B4DF0 mov ecx, dword[ebp-10] :004095D0 81C1C0000000 add ecx, 000000C0 :004095D6 E8F50A0000 call 0040A0D0 :004095DB 8B45F0 mov eax, dword[ebp-10] :004095DE C700B4C94000 mov dword[eax], 0040C9B4 :004095E4 C745FCFFFFFFFF mov dword[ebp-04], FFFFFFFF :004095EB 8B45F0 mov eax, dword[ebp-10] :004095EE 8B4DF4 mov ecx, dword[ebp-0C] :004095F1 64890D00000000 mov dword fs:[00000000], ecx :004095F8 8BE5 mov esp, ebp :004095FA 5D pop ebp :004095FB C3 ret :004095FC CC CC CC CC .... :00409600 55 push ebp :00409601 8BEC mov ebp, esp :00409603 51 push ecx :00409604 894DFC mov dword[ebp-04], ecx :00409607 8B4DFC mov ecx, dword[ebp-04] :0040960A E821000000 call 00409630 :0040960F 8B4508 mov eax, dword[ebp+08] :00409612 83E001 and eax, 00000001 :00409615 85C0 test eax, eax :00409617 7409 je 00409622 :00409619 8B4DFC mov ecx, dword[ebp-04] :0040961C 51 push ecx :0040961D E8FE95FFFF call 00402C20 --------- :00409622 8B45FC mov eax, dword[ebp-04] :00409625 8BE5 mov esp, ebp :00409627 5D pop ebp :00409628 C20400 ret 0004 :0040962B CC CC CC CC CC ..... ========= :00409630 55 push ebp :00409631 8BEC mov ebp, esp :00409633 6AFF push -00000001 :00409635 6878BB4000 push 0040BB78 :0040963A 64A100000000 mov eax, dword fs:[00000000] :00409640 50 push eax :00409641 64892500000000 mov dword fs:[00000000], esp :00409648 51 push ecx :00409649 894DF0 mov dword[ebp-10], ecx :0040964C 8B45F0 mov eax, dword[ebp-10] :0040964F C700B4C94000 mov dword[eax], 0040C9B4 :00409655 C745FC01000000 mov dword[ebp-04], 00000001 :0040965C 8B4DF0 mov ecx, dword[ebp-10] :0040965F E8DC080000 call 00409F40 :00409664 C645FC00 mov byte[ebp-04], 00 :00409668 8B4DF0 mov ecx, dword[ebp-10] :0040966B 81C1C0000000 add ecx, 000000C0 :00409671 E86A0D0000 call 0040A3E0 :00409676 C745FCFFFFFFFF mov dword[ebp-04], FFFFFFFF :0040967D 8B4DF0 mov ecx, dword[ebp-10] :00409680 E8DB170000 call 0040AE60 :00409685 8B4DF4 mov ecx, dword[ebp-0C] :00409688 64890D00000000 mov dword fs:[00000000], ecx :0040968F 8BE5 mov esp, ebp :00409691 5D pop ebp :00409692 C3 ret :00409693 CC CC CC CC CC CC CC CC CC CC CC CC CC ............. :004096A0 55 push ebp :004096A1 8BEC mov ebp, esp :004096A3 83EC08 sub esp, 00000008 :004096A6 894DF8 mov dword[ebp-08], ecx :004096A9 C745FCC0000000 mov dword[ebp-04], 000000C0 :004096B0 8B4508 mov eax, dword[ebp+08] :004096B3 50 push eax :004096B4 8B4DF8 mov ecx, dword[ebp-08] :004096B7 E8E4090000 call 0040A0A0 :004096BC 83F8FF cmp eax, -00000001 :004096BF 7508 jne 004096C9 :004096C1 83C8FF or eax, -00000001 :004096C4 E9F9000000 jmp 004097C2 :004096C9 8B 4D FC 51 6A 10 6A 10 6A 01 68 87 00 00 00 E8 .M.Qj.j.j.h..... :004096D9 93 09 00 00 50 FF 15 ....P.. :004096E0 00C54000 DWORD 0040C500 ;; ..@. :004096E4 A3 . :004096E5 980E4100 DWORD 00410E98 ;; ..A. :004096E9 8B 55 FC 52 6A 10 6A 10 6A 01 68 88 00 00 00 E8 .U.Rj.j.j.h..... :004096F9 73 09 00 00 50 FF 15 s...P.. :00409700 00C54000 DWORD 0040C500 ;; ..@. :00409704 A3 . :00409705 9C0E4100 DWORD 00410E9C ;; ..A. :00409709 8B 45 FC 50 6A 10 6A 10 6A 01 68 89 00 00 00 E8 .E.Pj.j.j.h..... :00409719 53 09 00 00 50 FF 15 S...P.. :00409720 00C54000 DWORD 0040C500 ;; ..@. :00409724 A3 . :00409725 A00E4100 DWORD 00410EA0 ;; ..A. :00409729 8B 4D FC 51 6A 10 6A 10 6A 01 68 8A 00 00 00 E8 .M.Qj.j.j.h..... :00409739 23 09 00 00 50 FF 15 #...P.. :00409740 00C54000 DWORD 0040C500 ;; ..@. :00409744 A3 . :00409745 A40E4100 DWORD 00410EA4 ;; ..A. :00409749 8B 55 FC 52 6A 10 6A 10 6A 01 68 8B 00 00 00 E8 .U.Rj.j.j.h..... :00409759 13 09 00 00 50 FF 15 ....P.. :00409760 00C54000 DWORD 0040C500 ;; ..@. :00409764 A3 . :00409765 A80E4100 DWORD 00410EA8 ;; ..A. :00409769 8B 45 FC 50 6A 10 6A 10 6A 01 68 8C 00 00 00 E8 .E.Pj.j.j.h..... :00409779 F3 08 00 00 50 FF 15 ....P.. :00409780 00C54000 DWORD 0040C500 ;; ..@. :00409784 A3 . :00409785 AC0E4100 DWORD 00410EAC ;; ..A. :00409789 8B 4D FC 51 6A 10 6A 10 6A 01 68 8D 00 00 00 E8 .M.Qj.j.j.h..... :00409799 D3 08 00 00 50 FF 15 ....P.. :004097A0 00C54000 DWORD 0040C500 ;; ..@. :004097A4 A3 . :004097A5 B00E4100 DWORD 00410EB0 ;; ..A. :004097A9 68 CA 5D 00 00 B9 h.]... :004097AF 940E4100 DWORD 00410E94 ;; ..A. :004097B3 E8 B4 16 00 00 8B 4D F8 E8 30 00 00 00 33 C0 8B ......M..0...3.. :004097C3 E5 5D C2 04 00 CC CC CC CC CC CC CC CC 55 8B EC .]...........U.. :004097D3 51 89 4D FC 8B 4D FC E8 A1 08 00 00 8B E5 5D C3 Q.M..M........]. :004097E3 CC CC CC CC CC CC CC CC CC CC CC CC CC ............. :004097F0 55 push ebp :004097F1 8BEC mov ebp, esp :004097F3 6AFF push -00000001 :004097F5 68C8BB4000 push 0040BBC8 :004097FA 64A100000000 mov eax, dword fs:[00000000] :00409800 50 push eax :00409801 64892500000000 mov dword fs:[00000000], esp :00409808 81EC74020000 sub esp, 00000274 :0040980E 57 push edi :0040980F 898D88FDFFFF mov dword[ebp+FFFFFD88], ecx :00409815 C745DC00000000 mov dword[ebp-24], 00000000 :0040981C C745F000000000 mov dword[ebp-10], 00000000 :00409823 A1B0024100 mov eax, dword[004102B0] :00409828 8945E0 mov dword[ebp-20], eax :0040982B 8A0DB4024100 mov cl, byte[004102B4] :00409831 884DE4 mov byte[ebp-1C], cl :00409834 8D55F0 lea edx, dword[ebp-10] :00409837 52 push edx :00409838 6819000200 push 00020019 :0040983D 6A00 push 00000000 :0040983F 68B8024100 push 004102B8 (StringData)"Software\Symantec\Norton AntiVirus\eMail Protection\Ports" :00409844 6802000080 push 80000002 :00409849 FF1510C04000 call dword[0040C010] ;;call ADVAPI32.RegOpenKeyExA :0040984F 8945DC mov dword[ebp-24], eax :00409852 837DDC00 cmp dword[ebp-24], 00000000 :00409856 0F8568030000 jne 00409BC4 :0040985C C745D800000000 mov dword[ebp-28], 00000000 :00409863 6A00 push 00000000 :00409865 6A00 push 00000000 :00409867 6A00 push 00000000 :00409869 6A00 push 00000000 :0040986B 8D45D8 lea eax, dword[ebp-28] :0040986E 50 push eax :0040986F 6A00 push 00000000 :00409871 6A00 push 00000000 :00409873 6A00 push 00000000 :00409875 6A00 push 00000000 :00409877 6A00 push 00000000 :00409879 6A00 push 00000000 :0040987B 8B4DF0 mov ecx, dword[ebp-10] :0040987E 51 push ecx :0040987F FF1508C04000 call dword[0040C008] ;;call ADVAPI32.RegQueryInfoKeyA :00409885 8945DC mov dword[ebp-24], eax :00409888 837DDC00 cmp dword[ebp-24], 00000000 :0040988C 0F8528030000 jne 00409BBA :00409892 8D4DCC lea ecx, dword[ebp-34] :00409895 E8DC110000 call 0040AA76 :0040989A C745FC00000000 mov dword[ebp-04], 00000000 :004098A1 8D4DC8 lea ecx, dword[ebp-38] :004098A4 E8CD110000 call 0040AA76 :004098A9 C645FC01 mov byte[ebp-04], 01 :004098AD C745D400000000 mov dword[ebp-2C], 00000000 :004098B4 C745D000000000 mov dword[ebp-30], 00000000 :004098BB 837DD800 cmp dword[ebp-28], 00000000 :004098BF 0F84DA020000 je 00409B9F :004098C5 C745C400000000 mov dword[ebp-3C], 00000000 :004098CC EB09 jmp 004098D7 --------- :004098CE 8B55C4 mov edx, dword[ebp-3C] :004098D1 83C201 add edx, 00000001 :004098D4 8955C4 mov dword[ebp-3C], edx --------- :004098D7 8B45C4 mov eax, dword[ebp-3C] :004098DA 3B45D8 cmp eax, dword[ebp-28] :004098DD 0F83BC020000 jae 00409B9F :004098E3 C685B8FEFFFF00 mov byte[ebp+FFFFFEB8], 00 :004098EA B940000000 mov ecx, 00000040 :004098EF 33C0 xor eax, eax :004098F1 8DBDB9FEFFFF lea edi, dword[ebp+FFFFFEB9] :004098F7 F3AB rep stosd :004098F9 66AB stosw :004098FB AA stosb :004098FC C745BC04010000 mov dword[ebp-44], 00000104 :00409903 C685B0FDFFFF00 mov byte[ebp+FFFFFDB0], 00 :0040990A B940000000 mov ecx, 00000040 :0040990F 33C0 xor eax, eax :00409911 8DBDB1FDFFFF lea edi, dword[ebp+FFFFFDB1] :00409917 F3AB rep stosd :00409919 66AB stosw :0040991B AA stosb :0040991C C785B4FEFFFF04010000 mov dword[ebp+FFFFFEB4], 00000104 :00409926 C745C000000000 mov dword[ebp-40], 00000000 :0040992D 8D8DB4FEFFFF lea ecx, dword[ebp+FFFFFEB4] :00409933 51 push ecx :00409934 8D95B0FDFFFF lea edx, dword[ebp+FFFFFDB0] :0040993A 52 push edx :0040993B 8D45C0 lea eax, dword[ebp-40] :0040993E 50 push eax :0040993F 6A00 push 00000000 :00409941 8D4DBC lea ecx, dword[ebp-44] :00409944 51 push ecx :00409945 8D95B8FEFFFF lea edx, dword[ebp+FFFFFEB8] :0040994B 52 push edx :0040994C 8B45C4 mov eax, dword[ebp-3C] :0040994F 50 push eax :00409950 8B4DF0 mov ecx, dword[ebp-10] :00409953 51 push ecx :00409954 FF150CC04000 call dword[0040C00C] ;;call ADVAPI32.RegEnumValueA :0040995A 8945DC mov dword[ebp-24], eax :0040995D 837DDC00 cmp dword[ebp-24], 00000000 :00409961 0F8533020000 jne 00409B9A :00409967 837DC001 cmp dword[ebp-40], 00000001 :0040996B 0F8529020000 jne 00409B9A :00409971 83BDB4FEFFFF00 cmp dword[ebp+FFFFFEB4], 00000000 :00409978 0F841C020000 je 00409B9A :0040997E 8D95B0FDFFFF lea edx, dword[ebp+FFFFFDB0] :00409984 52 push edx :00409985 8D8DA8FDFFFF lea ecx, dword[ebp+FFFFFDA8] :0040998B E830120000 call 0040ABC0 :00409990 C645FC02 mov byte[ebp-04], 02 :00409994 6A3B push 0000003B :00409996 6A2C push 0000002C :00409998 8D8DA8FDFFFF lea ecx, dword[ebp+FFFFFDA8] :0040999E E8D5140000 call 0040AE78 :004099A3 8D85B8FEFFFF lea eax, dword[ebp+FFFFFEB8] :004099A9 50 push eax :004099AA FF15CCC44000 call dword[0040C4CC] ;;call MSVCRT.atoi :004099B0 83C404 add esp, 00000004 :004099B3 8945D4 mov dword[ebp-2C], eax :004099B6 C785ACFDFFFF00000000 mov dword[ebp+FFFFFDAC], 00000000 :004099C0 6A3B push 0000003B :004099C2 6A00 push 00000000 :004099C4 8D8DA8FDFFFF lea ecx, dword[ebp+FFFFFDA8] :004099CA E89192FFFF call 00402C60 :004099CF 50 push eax :004099D0 8D4DCC lea ecx, dword[ebp-34] :004099D3 51 push ecx :004099D4 E899140000 call 0040AE72 :004099D9 8985ACFDFFFF mov dword[ebp+FFFFFDAC], eax :004099DF 83BDACFDFFFF00 cmp dword[ebp+FFFFFDAC], 00000000 :004099E6 7432 je 00409A1A :004099E8 6A3B push 0000003B :004099EA 6A01 push 00000001 :004099EC 8D8DA8FDFFFF lea ecx, dword[ebp+FFFFFDA8] :004099F2 E86992FFFF call 00402C60 :004099F7 50 push eax :004099F8 8D55C8 lea edx, dword[ebp-38] :004099FB 52 push edx :004099FC E871140000 call 0040AE72 :00409A01 85C0 test eax, eax :00409A03 7415 je 00409A1A :00409A05 8D4DC8 lea ecx, dword[ebp-38] :00409A08 E85392FFFF call 00402C60 :00409A0D 50 push eax :00409A0E FF15CCC44000 call dword[0040C4CC] ;;call MSVCRT.atoi :00409A14 83C404 add esp, 00000004 :00409A17 8945D0 mov dword[ebp-30], eax --------- :00409A1A 83BDACFDFFFF00 cmp dword[ebp+FFFFFDAC], 00000000 :00409A21 0F8464010000 je 00409B8B :00409A27 8D45E0 lea eax, dword[ebp-20] :00409A2A 50 push eax :00409A2B 8D4DCC lea ecx, dword[ebp-34] :00409A2E E81D120000 call 0040AC50 :00409A33 8D4DE0 lea ecx, dword[ebp-20] :00409A36 51 push ecx :00409A37 8D4DCC lea ecx, dword[ebp-34] :00409A3A E817120000 call 0040AC56 :00409A3F 6A20 push 00000020 :00409A41 E8DAE0FFFF call 00407B20 :00409A46 89859CFDFFFF mov dword[ebp+FFFFFD9C], eax :00409A4C C645FC03 mov byte[ebp-04], 03 :00409A50 83BD9CFDFFFF00 cmp dword[ebp+FFFFFD9C], 00000000 :00409A57 7413 je 00409A6C :00409A59 8B8D9CFDFFFF mov ecx, dword[ebp+FFFFFD9C] :00409A5F E87C8FFFFF call 004029E0 :00409A64 898584FDFFFF mov dword[ebp+FFFFFD84], eax :00409A6A EB0A jmp 00409A76 --------- :00409A6C C78584FDFFFF00000000 mov dword[ebp+FFFFFD84], 00000000 --------- :00409A76 8B9584FDFFFF mov edx, dword[ebp+FFFFFD84] :00409A7C 8995A0FDFFFF mov dword[ebp+FFFFFDA0], edx :00409A82 C645FC02 mov byte[ebp-04], 02 :00409A86 8B85A0FDFFFF mov eax, dword[ebp+FFFFFDA0] :00409A8C 8985A4FDFFFF mov dword[ebp+FFFFFDA4], eax :00409A92 68F4024100 push 004102F4 (StringData)"127.0.0.1" :00409A97 6A01 push 00000001 :00409A99 8B4DD4 mov ecx, dword[ebp-2C] :00409A9C 51 push ecx :00409A9D 8B8DA4FDFFFF mov ecx, dword[ebp+FFFFFDA4] :00409AA3 E8380F0000 call 0040A9E0 :00409AA8 85C0 test eax, eax :00409AAA 754D jne 00409AF9 :00409AAC 6AFF push -00000001 :00409AAE 6A10 push 00000010 :00409AB0 68CB5D0000 push 00005DCB :00409AB5 E8DC100000 call 0040AB96 :00409ABA C78598FDFFFFFFFFFFFF mov dword[ebp+FFFFFD98], FFFFFFFF :00409AC4 C645FC01 mov byte[ebp-04], 01 :00409AC8 8D8DA8FDFFFF lea ecx, dword[ebp+FFFFFDA8] :00409ACE E8AF0F0000 call 0040AA82 :00409AD3 C645FC00 mov byte[ebp-04], 00 :00409AD7 8D4DC8 lea ecx, dword[ebp-38] :00409ADA E8A30F0000 call 0040AA82 :00409ADF C745FCFFFFFFFF mov dword[ebp-04], FFFFFFFF :00409AE6 8D4DCC lea ecx, dword[ebp-34] :00409AE9 E8940F0000 call 0040AA82 :00409AEE 8B8598FDFFFF mov eax, dword[ebp+FFFFFD98] :00409AF4 E9A8010000 jmp 00409CA1 --------- :00409AF9 6A05 push 00000005 :00409AFB 8B8DA4FDFFFF mov ecx, dword[ebp+FFFFFDA4] :00409B01 E8AA0E0000 call 0040A9B0 :00409B06 85C0 test eax, eax :00409B08 754D jne 00409B57 :00409B0A 6AFF push -00000001 :00409B0C 6A10 push 00000010 :00409B0E 68CB5D0000 push 00005DCB :00409B13 E87E100000 call 0040AB96 :00409B18 C78594FDFFFFFFFFFFFF mov dword[ebp+FFFFFD94], FFFFFFFF :00409B22 C645FC01 mov byte[ebp-04], 01 :00409B26 8D8DA8FDFFFF lea ecx, dword[ebp+FFFFFDA8] :00409B2C E8510F0000 call 0040AA82 :00409B31 C645FC00 mov byte[ebp-04], 00 :00409B35 8D4DC8 lea ecx, dword[ebp-38] :00409B38 E8450F0000 call 0040AA82 :00409B3D C745FCFFFFFFFF mov dword[ebp-04], FFFFFFFF :00409B44 8D4DCC lea ecx, dword[ebp-34] :00409B47 E8360F0000 call 0040AA82 :00409B4C 8B8594FDFFFF mov eax, dword[ebp+FFFFFD94] :00409B52 E94A010000 jmp 00409CA1 :00409B57 8B 55 D0 52 8D 4D CC E8 FD 90 FF FF 50 8B 8D A4 .U.R.M......P... :00409B67 FD FF FF E8 71 90 FF FF 8B 85 A4 FD FF FF 50 8B ....q.........P. :00409B77 4D D4 51 8B 8D 88 FD FF FF 81 C1 C0 00 00 00 E8 M.Q............. :00409B87 05 06 00 00 .... --------- :00409B8B C645FC01 mov byte[ebp-04], 01 :00409B8F 8D8DA8FDFFFF lea ecx, dword[ebp+FFFFFDA8] :00409B95 E8E80E0000 call 0040AA82 --------- :00409B9A E92FFDFFFF jmp 004098CE --------- :00409B9F C645FC00 mov byte[ebp-04], 00 :00409BA3 8D4DC8 lea ecx, dword[ebp-38] :00409BA6 E8D70E0000 call 0040AA82 :00409BAB C745FCFFFFFFFF mov dword[ebp-04], FFFFFFFF :00409BB2 8D4DCC lea ecx, dword[ebp-34] :00409BB5 E8C80E0000 call 0040AA82 --------- :00409BBA 8B55F0 mov edx, dword[ebp-10] :00409BBD 52 push edx :00409BBE FF1500C04000 call dword[0040C000] ;;call ADVAPI32.RegCloseKey --------- :00409BC4 C745E800000000 mov dword[ebp-18], 00000000 :00409BCB FF152CC04000 call dword[0040C02C] ;;call EmailCfg.?GetProxyListeningPort@CProxyConfig@@SAKXZ :00409BD1 8945E8 mov dword[ebp-18], eax :00409BD4 6A20 push 00000020 :00409BD6 E845DFFFFF call 00407B20 :00409BDB 89858CFDFFFF mov dword[ebp+FFFFFD8C], eax :00409BE1 C745FC04000000 mov dword[ebp-04], 00000004 :00409BE8 83BD8CFDFFFF00 cmp dword[ebp+FFFFFD8C], 00000000 :00409BEF 7413 je 00409C04 :00409BF1 8B8D8CFDFFFF mov ecx, dword[ebp+FFFFFD8C] :00409BF7 E8E48DFFFF call 004029E0 :00409BFC 898580FDFFFF mov dword[ebp+FFFFFD80], eax :00409C02 EB0A jmp 00409C0E --------- :00409C04 C78580FDFFFF00000000 mov dword[ebp+FFFFFD80], 00000000 --------- :00409C0E 8B8580FDFFFF mov eax, dword[ebp+FFFFFD80] :00409C14 898590FDFFFF mov dword[ebp+FFFFFD90], eax :00409C1A C745FCFFFFFFFF mov dword[ebp-04], FFFFFFFF :00409C21 8B8D90FDFFFF mov ecx, dword[ebp+FFFFFD90] :00409C27 894DEC mov dword[ebp-14], ecx :00409C2A 6800044100 push 00410400 (StringData)"0.0.0.0" :00409C2F 6A01 push 00000001 :00409C31 8B55E8 mov edx, dword[ebp-18] :00409C34 52 push edx :00409C35 8B4DEC mov ecx, dword[ebp-14] :00409C38 E8A30D0000 call 0040A9E0 :00409C3D 85C0 test eax, eax :00409C3F 7513 jne 00409C54 :00409C41 6AFF push -00000001 :00409C43 6A10 push 00000010 :00409C45 68CB5D0000 push 00005DCB :00409C4A E8470F0000 call 0040AB96 :00409C4F 83C8FF or eax, -00000001 :00409C52 EB4D jmp 00409CA1 --------- :00409C54 6A05 push 00000005 :00409C56 8B4DEC mov ecx, dword[ebp-14] :00409C59 E8520D0000 call 0040A9B0 :00409C5E 85C0 test eax, eax :00409C60 7513 jne 00409C75 :00409C62 6AFF push -00000001 :00409C64 6A10 push 00000010 :00409C66 68CB5D0000 push 00005DCB :00409C6B E8260F0000 call 0040AB96 :00409C70 83C8FF or eax, -00000001 :00409C73 EB2C jmp 00409CA1 --------- :00409C75 8B45EC mov eax, dword[ebp-14] :00409C78 50 push eax :00409C79 8B4DE8 mov ecx, dword[ebp-18] :00409C7C 51 push ecx :00409C7D 8B8D88FDFFFF mov ecx, dword[ebp+FFFFFD88] :00409C83 81C1C0000000 add ecx, 000000C0 :00409C89 E802050000 call 0040A190 :00409C8E 8B9588FDFFFF mov edx, dword[ebp+FFFFFD88] :00409C94 C782DC00000001000000 mov dword[edx+000000DC], 00000001 :00409C9E 8B45DC mov eax, dword[ebp-24] --------- :00409CA1 8B4DF4 mov ecx, dword[ebp-0C] :00409CA4 64890D00000000 mov dword fs:[00000000], ecx :00409CAB 5F pop edi :00409CAC 8BE5 mov esp, ebp :00409CAE 5D pop ebp :00409CAF C3 ret :00409CB0 55 push ebp :00409CB1 8BEC mov ebp, esp :00409CB3 6AFF push -00000001 :00409CB5 68EDBB4000 push 0040BBED :00409CBA 64A100000000 mov eax, dword fs:[00000000] :00409CC0 50 push eax :00409CC1 64892500000000 mov dword fs:[00000000], esp :00409CC8 81EC30010000 sub esp, 00000130 :00409CCE 57 push edi :00409CCF 898DCCFEFFFF mov dword[ebp+FFFFFECC], ecx :00409CD5 C785E0FEFFFF00000000 mov dword[ebp+FFFFFEE0], 00000000 :00409CDF C785E4FEFFFF00000000 mov dword[ebp+FFFFFEE4], 00000000 :00409CE9 C685F0FEFFFF00 mov byte[ebp+FFFFFEF0], 00 :00409CF0 B940000000 mov ecx, 00000040 :00409CF5 33C0 xor eax, eax :00409CF7 8DBDF1FEFFFF lea edi, dword[ebp+FFFFFEF1] :00409CFD F3AB rep stosd :00409CFF 66AB stosw :00409D01 AA stosb :00409D02 C785ECFEFFFF00000000 mov dword[ebp+FFFFFEEC], 00000000 :00409D0C C785E8FEFFFF00000000 mov dword[ebp+FFFFFEE8], 00000000 :00409D16 8D85E8FEFFFF lea eax, dword[ebp+FFFFFEE8] :00409D1C 50 push eax :00409D1D 8D8DECFEFFFF lea ecx, dword[ebp+FFFFFEEC] :00409D23 51 push ecx :00409D24 6804010000 push 00000104 :00409D29 8D95F0FEFFFF lea edx, dword[ebp+FFFFFEF0] :00409D2F 52 push edx :00409D30 8B450C mov eax, dword[ebp+0C] :00409D33 50 push eax :00409D34 FF1530C04000 call dword[0040C030] ;;call EmailCfg.?SPAGetSpecialAccountInfo@CProxyConfig@@SAJKPADIPAK1@Z :00409D3A 83C414 add esp, 00000014 :00409D3D 8B4D08 mov ecx, dword[ebp+08] :00409D40 81E1FFFF0000 and ecx, 0000FFFF :00409D46 83F90A cmp ecx, 0000000A :00409D49 0F8525010000 jne 00409E74 :00409D4F 8D95E4FEFFFF lea edx, dword[ebp+FFFFFEE4] :00409D55 52 push edx :00409D56 8B450C mov eax, dword[ebp+0C] :00409D59 50 push eax :00409D5A 8B8DCCFEFFFF mov ecx, dword[ebp+FFFFFECC] :00409D60 81C1C0000000 add ecx, 000000C0 :00409D66 E8E5030000 call 0040A150 :00409D6B 85C0 test eax, eax :00409D6D 0F85FC000000 jne 00409E6F :00409D73 6A20 push 00000020 :00409D75 E8A6DDFFFF call 00407B20 :00409D7A 8985D8FEFFFF mov dword[ebp+FFFFFED8], eax :00409D80 C745FC00000000 mov dword[ebp-04], 00000000 :00409D87 83BDD8FEFFFF00 cmp dword[ebp+FFFFFED8], 00000000 :00409D8E 7413 je 00409DA3 :00409D90 8B8DD8FEFFFF mov ecx, dword[ebp+FFFFFED8] :00409D96 E8458CFFFF call 004029E0 :00409D9B 8985C8FEFFFF mov dword[ebp+FFFFFEC8], eax :00409DA1 EB0A jmp 00409DAD --------- :00409DA3 C785C8FEFFFF00000000 mov dword[ebp+FFFFFEC8], 00000000 --------- :00409DAD 8B8DC8FEFFFF mov ecx, dword[ebp+FFFFFEC8] :00409DB3 898DDCFEFFFF mov dword[ebp+FFFFFEDC], ecx :00409DB9 C745FCFFFFFFFF mov dword[ebp-04], FFFFFFFF :00409DC0 8B95DCFEFFFF mov edx, dword[ebp+FFFFFEDC] :00409DC6 8995E4FEFFFF mov dword[ebp+FFFFFEE4], edx :00409DCC 680C034100 push 0041030C (StringData)"127.0.0.1" :00409DD1 6A01 push 00000001 :00409DD3 8B450C mov eax, dword[ebp+0C] :00409DD6 50 push eax :00409DD7 8B8DE4FEFFFF mov ecx, dword[ebp+FFFFFEE4] :00409DDD E8FE0B0000 call 0040A9E0 :00409DE2 85C0 test eax, eax :00409DE4 7516 jne 00409DFC :00409DE6 6AFF push -00000001 :00409DE8 6A10 push 00000010 :00409DEA 68CB5D0000 push 00005DCB :00409DEF E8A20D0000 call 0040AB96 :00409DF4 83C8FF or eax, -00000001 :00409DF7 E924010000 jmp 00409F20 :00409DFC 6A 05 8B 8D E4 FE FF FF E8 A7 0B 00 00 85 C0 75 j..............u :00409E0C 16 6A FF 6A 10 68 CB 5D 00 00 E8 7B 0D 00 00 83 .j.j.h.]...{.... :00409E1C C8 FF E9 FD 00 00 00 8B 4D 08 C1 E9 10 81 E1 FF ........M....... :00409E2C FF 00 00 81 E1 FF FF 00 00 83 F9 0C 75 19 8B 95 ............u... :00409E3C EC FE FF FF 52 8D 85 F0 FE FF FF 50 8B 8D E4 FE ....R......P.... :00409E4C FF FF E8 8D 8D FF FF 8B 8D E4 FE FF FF 51 8B 55 .............Q.U :00409E5C 0C 52 8B 8D CC FE FF FF 81 C1 C0 00 00 00 E8 21 .R.............! :00409E6C 03 00 00 E9 A6 00 00 00 8B 45 08 25 FF FF 00 00 .........E.%.... :00409E7C 83 F8 0B 0F 85 95 00 00 00 8D 8D E4 FE FF FF 51 ...............Q :00409E8C 8B 55 0C 52 8B 8D CC FE FF FF 81 C1 C0 00 00 00 .U.R............ :00409E9C E8 AF 02 00 00 85 C0 74 75 83 BD E8 FE FF FF 00 .......tu....... :00409EAC 75 6C 8B 85 E4 FE FF FF 8B 10 8B 8D E4 FE FF FF ul.............. :00409EBC FF 52 18 8B 45 0C 50 8B 8D CC FE FF FF 81 C1 C0 .R..E.P......... :00409ECC 00 00 00 E8 DC 02 00 00 8B 8D E4 FE FF FF 89 8D ................ :00409EDC D0 FE FF FF 8B 95 D0 FE FF FF 89 95 D4 FE FF FF ................ :00409EEC 83 BD D4 FE FF FF 00 74 1B 6A 01 8B 85 D4 FE FF .......t.j...... :00409EFC FF 8B 10 8B 8D D4 FE FF FF FF 52 04 89 85 C4 FE ..........R..... :00409F0C FF FF EB 0A C7 85 C4 FE FF FF 00 00 00 00 8B 85 ................ :00409F1C E0 FE FF FF 8B 4D F4 64 89 0D 00 00 00 00 5F 8B .....M.d......_. :00409F2C E5 5D C2 08 00 CC CC CC CC CC CC CC CC CC CC CC .].............. :00409F3C CC CC CC CC .... ========= :00409F40 55 push ebp :00409F41 8BEC mov ebp, esp :00409F43 83EC20 sub esp, 00000020 :00409F46 894DE4 mov dword[ebp-1C], ecx :00409F49 C745F800000000 mov dword[ebp-08], 00000000 :00409F50 EB09 jmp 00409F5B --------- :00409F52 8B45F8 mov eax, dword[ebp-08] :00409F55 83C001 add eax, 00000001 :00409F58 8945F8 mov dword[ebp-08], eax --------- :00409F5B 837DF807 cmp dword[ebp-08], 00000007 :00409F5F 7D2E jge 00409F8F :00409F61 8B4DF8 mov ecx, dword[ebp-08] :00409F64 833C8D980E410000 cmp dword[4*ecx+00410E98], 00000000 :00409F6C 741F je 00409F8D :00409F6E 8B55F8 mov edx, dword[ebp-08] :00409F71 8B0495980E4100 mov eax, dword[4*edx+00410E98] :00409F78 50 push eax :00409F79 FF15FCC44000 call dword[0040C4FC] ;;call USER32.DestroyIcon :00409F7F 8B4DF8 mov ecx, dword[ebp-08] :00409F82 C7048D980E410000000000 mov dword[4*ecx+00410E98], 00000000 --------- :00409F8D EBC3 jmp 00409F52 --------- :00409F8F 8B4DE4 mov ecx, dword[ebp-1C] :00409F92 81C1C0000000 add ecx, 000000C0 :00409F98 E863030000 call 0040A300 :00409F9D 8945FC mov dword[ebp-04], eax --------- :00409FA0 837DFC00 cmp dword[ebp-04], 00000000 :00409FA4 7460 je 0040A006 :00409FA6 C745F400000000 mov dword[ebp-0C], 00000000 :00409FAD C745F000000000 mov dword[ebp-10], 00000000 :00409FB4 8D55F0 lea edx, dword[ebp-10] :00409FB7 52 push edx :00409FB8 8D45F4 lea eax, dword[ebp-0C] :00409FBB 50 push eax :00409FBC 8D4DFC lea ecx, dword[ebp-04] :00409FBF 51 push ecx :00409FC0 8B4DE4 mov ecx, dword[ebp-1C] :00409FC3 81C1C0000000 add ecx, 000000C0 :00409FC9 E852030000 call 0040A320 :00409FCE 8B55F0 mov edx, dword[ebp-10] :00409FD1 8B02 mov eax, dword[edx] :00409FD3 8B4DF0 mov ecx, dword[ebp-10] :00409FD6 FF5018 call dword[eax+18] :00409FD9 8B4DF0 mov ecx, dword[ebp-10] :00409FDC 894DE8 mov dword[ebp-18], ecx :00409FDF 8B55E8 mov edx, dword[ebp-18] :00409FE2 8955EC mov dword[ebp-14], edx :00409FE5 837DEC00 cmp dword[ebp-14], 00000000 :00409FE9 7412 je 00409FFD :00409FEB 6A01 push 00000001 :00409FED 8B45EC mov eax, dword[ebp-14] :00409FF0 8B10 mov edx, dword[eax] :00409FF2 8B4DEC mov ecx, dword[ebp-14] :00409FF5 FF5204 call dword[edx+04] :00409FF8 8945E0 mov dword[ebp-20], eax :00409FFB EB07 jmp 0040A004 --------- :00409FFD C745E000000000 mov dword[ebp-20], 00000000 --------- :0040A004 EB9A jmp 00409FA0 --------- :0040A006 8B4DE4 mov ecx, dword[ebp-1C] :0040A009 81C1C0000000 add ecx, 000000C0 :0040A00F E82C020000 call 0040A240 :0040A014 8BE5 mov esp, ebp :0040A016 5D pop ebp :0040A017 C3 ret :0040A018 CC CC CC CC CC CC CC CC ........ :0040A020 55 push ebp :0040A021 8BEC mov ebp, esp :0040A023 51 push ecx :0040A024 894DFC mov dword[ebp-04], ecx :0040A027 8B4508 mov eax, dword[ebp+08] :0040A02A 83780410 cmp dword[eax+04], 00000010 :0040A02E 7510 jne 0040A040 :0040A030 8B4DFC mov ecx, dword[ebp-04] :0040A033 E808FFFFFF call 00409F40 :0040A038 6A00 push 00000000 :0040A03A FF15F4C44000 call dword[0040C4F4] ;;call USER32.PostQuitMessage --------- :0040A040 8B4D08 mov ecx, dword[ebp+08] :0040A043 51 push ecx :0040A044 8B4DFC mov ecx, dword[ebp-04] :0040A047 E8320E0000 call 0040AE7E :0040A04C 8BE5 mov esp, ebp :0040A04E 5D pop ebp :0040A04F C20400 ret 0004 :0040A052 CC CC CC CC CC CC CC CC CC CC CC CC CC CC .............. :0040A060 55 push ebp :0040A061 8BEC mov ebp, esp :0040A063 E8AE090000 call 0040AA16 :0040A068 8B4008 mov eax, dword[eax+08] :0040A06B 5D pop ebp :0040A06C C3 ret :0040A06D CC CC CC ... :0040A070 55 push ebp :0040A071 8BEC mov ebp, esp :0040A073 E89E090000 call 0040AA16 :0040A078 8B400C mov eax, dword[eax+0C] :0040A07B 5D pop ebp :0040A07C C3 ret :0040A07D CC CC CC ... :0040A080 55 push ebp :0040A081 8BEC mov ebp, esp :0040A083 51 push ecx :0040A084 894DFC mov dword[ebp-04], ecx :0040A087 8B4DFC mov ecx, dword[ebp-04] :0040A08A E8F50D0000 call 0040AE84 :0040A08F 8BE5 mov esp, ebp :0040A091 5D pop ebp :0040A092 C3 ret :0040A093 CC CC CC CC CC CC CC CC CC CC CC CC CC ............. ========= :0040A0A0 55 push ebp :0040A0A1 8BEC mov ebp, esp :0040A0A3 51 push ecx :0040A0A4 894DFC mov dword[ebp-04], ecx :0040A0A7 8B4DFC mov ecx, dword[ebp-04] :0040A0AA E8D50D0000 call 0040AE84 :0040A0AF 8BE5 mov esp, ebp :0040A0B1 5D pop ebp :0040A0B2 C20400 ret 0004 :0040A0B5 CC CC CC CC CC CC CC CC CC CC CC ........... :0040A0C0 55 push ebp :0040A0C1 8BEC mov ebp, esp :0040A0C3 51 push ecx :0040A0C4 894DFC mov dword[ebp-04], ecx :0040A0C7 8BE5 mov esp, ebp :0040A0C9 5D pop ebp :0040A0CA C20400 ret 0004 :0040A0CD CC CC CC ... ========= :0040A0D0 55 push ebp :0040A0D1 8BEC mov ebp, esp :0040A0D3 51 push ecx :0040A0D4 894DFC mov dword[ebp-04], ecx :0040A0D7 8B4DFC mov ecx, dword[ebp-04] :0040A0DA E851000000 call 0040A130 :0040A0DF 8B45FC mov eax, dword[ebp-04] :0040A0E2 C700B4CA4000 mov dword[eax], 0040CAB4 :0040A0E8 8B4DFC mov ecx, dword[ebp-04] :0040A0EB C7410400000000 mov dword[ecx+04], 00000000 :0040A0F2 8B55FC mov edx, dword[ebp-04] :0040A0F5 C7420811000000 mov dword[edx+08], 00000011 :0040A0FC 8B45FC mov eax, dword[ebp-04] :0040A0FF C7400C00000000 mov dword[eax+0C], 00000000 :0040A106 8B4DFC mov ecx, dword[ebp-04] :0040A109 C7411000000000 mov dword[ecx+10], 00000000 :0040A110 8B55FC mov edx, dword[ebp-04] :0040A113 C7421400000000 mov dword[edx+14], 00000000 :0040A11A 8B45FC mov eax, dword[ebp-04] :0040A11D 8B4D08 mov ecx, dword[ebp+08] :0040A120 894818 mov dword[eax+18], ecx :0040A123 8B45FC mov eax, dword[ebp-04] :0040A126 8BE5 mov esp, ebp :0040A128 5D pop ebp :0040A129 C20400 ret 0004 :0040A12C CC CC CC CC .... ========= :0040A130 55 push ebp :0040A131 8BEC mov ebp, esp :0040A133 51 push ecx :0040A134 894DFC mov dword[ebp-04], ecx :0040A137 8B45FC mov eax, dword[ebp-04] :0040A13A C70024C74000 mov dword[eax], 0040C724 :0040A140 8B45FC mov eax, dword[ebp-04] :0040A143 8BE5 mov esp, ebp :0040A145 5D pop ebp :0040A146 C3 ret :0040A147 CC CC CC CC CC CC CC CC CC ......... ========= :0040A150 55 push ebp :0040A151 8BEC mov ebp, esp :0040A153 83EC0C sub esp, 0000000C :0040A156 894DF4 mov dword[ebp-0C], ecx :0040A159 8D45F8 lea eax, dword[ebp-08] :0040A15C 50 push eax :0040A15D 8B4D08 mov ecx, dword[ebp+08] :0040A160 51 push ecx :0040A161 8B4DF4 mov ecx, dword[ebp-0C] :0040A164 E817050000 call 0040A680 :0040A169 8945FC mov dword[ebp-04], eax :0040A16C 837DFC00 cmp dword[ebp-04], 00000000 :0040A170 7504 jne 0040A176 :0040A172 33C0 xor eax, eax :0040A174 EB10 jmp 0040A186 --------- :0040A176 8B550C mov edx, dword[ebp+0C] :0040A179 8B45FC mov eax, dword[ebp-04] :0040A17C 8B480C mov ecx, dword[eax+0C] :0040A17F 890A mov dword[edx], ecx :0040A181 B801000000 mov eax, 00000001 --------- :0040A186 8BE5 mov esp, ebp :0040A188 5D pop ebp :0040A189 C20800 ret 0008 :0040A18C CC CC CC CC .... ========= :0040A190 55 push ebp :0040A191 8BEC mov ebp, esp :0040A193 51 push ecx :0040A194 894DFC mov dword[ebp-04], ecx :0040A197 8B4508 mov eax, dword[ebp+08] :0040A19A 50 push eax :0040A19B 8B4DFC mov ecx, dword[ebp-04] :0040A19E E8ED030000 call 0040A590 :0040A1A3 8B4D0C mov ecx, dword[ebp+0C] :0040A1A6 8908 mov dword[eax], ecx :0040A1A8 8BE5 mov esp, ebp :0040A1AA 5D pop ebp :0040A1AB C20800 ret 0008 :0040A1AE CC CC .. :0040A1B0 55 push ebp :0040A1B1 8BEC mov ebp, esp :0040A1B3 83EC0C sub esp, 0000000C :0040A1B6 894DF4 mov dword[ebp-0C], ecx :0040A1B9 8B45F4 mov eax, dword[ebp-0C] :0040A1BC 83780400 cmp dword[eax+04], 00000000 :0040A1C0 7504 jne 0040A1C6 :0040A1C2 33C0 xor eax, eax :0040A1C4 EB70 jmp 0040A236 --------- :0040A1C6 8B4D08 mov ecx, dword[ebp+08] :0040A1C9 51 push ecx :0040A1CA E821050000 call 0040A6F0 :0040A1CF 8B4DF4 mov ecx, dword[ebp-0C] :0040A1D2 33D2 xor edx, edx :0040A1D4 F77108 div dword[ecx+08] :0040A1D7 8B45F4 mov eax, dword[ebp-0C] :0040A1DA 8B4804 mov ecx, dword[eax+04] :0040A1DD 8D1491 lea edx, dword[ecx+4*edx] :0040A1E0 8955FC mov dword[ebp-04], edx :0040A1E3 8B45FC mov eax, dword[ebp-04] :0040A1E6 8B08 mov ecx, dword[eax] :0040A1E8 894DF8 mov dword[ebp-08], ecx :0040A1EB EB08 jmp 0040A1F5 --------- :0040A1ED 8B55F8 mov edx, dword[ebp-08] :0040A1F0 8B02 mov eax, dword[edx] :0040A1F2 8945F8 mov dword[ebp-08], eax --------- :0040A1F5 837DF800 cmp dword[ebp-08], 00000000 :0040A1F9 7439 je 0040A234 :0040A1FB 8D4D08 lea ecx, dword[ebp+08] :0040A1FE 51 push ecx :0040A1FF 8B55F8 mov edx, dword[ebp-08] :0040A202 83C208 add edx, 00000008 :0040A205 52 push edx :0040A206 E8F5040000 call 0040A700 :0040A20B 85C0 test eax, eax :0040A20D 741D je 0040A22C :0040A20F 8B45FC mov eax, dword[ebp-04] :0040A212 8B4DF8 mov ecx, dword[ebp-08] :0040A215 8B11 mov edx, dword[ecx] :0040A217 8910 mov dword[eax], edx :0040A219 8B45F8 mov eax, dword[ebp-08] :0040A21C 50 push eax :0040A21D 8B4DF4 mov ecx, dword[ebp-0C] :0040A220 E8FB030000 call 0040A620 :0040A225 B801000000 mov eax, 00000001 :0040A22A EB0A jmp 0040A236 --------- :0040A22C 8B4DF8 mov ecx, dword[ebp-08] :0040A22F 894DFC mov dword[ebp-04], ecx :0040A232 EBB9 jmp 0040A1ED --------- :0040A234 33C0 xor eax, eax --------- :0040A236 8BE5 mov esp, ebp :0040A238 5D pop ebp :0040A239 C20400 ret 0004 :0040A23C CC CC CC CC .... ========= :0040A240 55 push ebp :0040A241 8BEC mov ebp, esp :0040A243 83EC10 sub esp, 00000010 :0040A246 894DF0 mov dword[ebp-10], ecx :0040A249 8B45F0 mov eax, dword[ebp-10] :0040A24C 83780400 cmp dword[eax+04], 00000000 :0040A250 745C je 0040A2AE :0040A252 C745FC00000000 mov dword[ebp-04], 00000000 :0040A259 EB09 jmp 0040A264 --------- :0040A25B 8B4DFC mov ecx, dword[ebp-04] :0040A25E 83C101 add ecx, 00000001 :0040A261 894DFC mov dword[ebp-04], ecx --------- :0040A264 8B55F0 mov edx, dword[ebp-10] :0040A267 8B45FC mov eax, dword[ebp-04] :0040A26A 3B4208 cmp eax, dword[edx+08] :0040A26D 733F jae 0040A2AE :0040A26F 8B4DF0 mov ecx, dword[ebp-10] :0040A272 8B5104 mov edx, dword[ecx+04] :0040A275 8B45FC mov eax, dword[ebp-04] :0040A278 8B0C82 mov ecx, dword[edx+4*eax] :0040A27B 894DF8 mov dword[ebp-08], ecx :0040A27E EB08 jmp 0040A288 --------- :0040A280 8B55F8 mov edx, dword[ebp-08] :0040A283 8B02 mov eax, dword[edx] :0040A285 8945F8 mov dword[ebp-08], eax --------- :0040A288 837DF800 cmp dword[ebp-08], 00000000 :0040A28C 741E je 0040A2AC :0040A28E 6A01 push 00000001 :0040A290 8B4DF8 mov ecx, dword[ebp-08] :0040A293 83C10C add ecx, 0000000C :0040A296 51 push ecx :0040A297 E884040000 call 0040A720 :0040A29C 6A01 push 00000001 :0040A29E 8B55F8 mov edx, dword[ebp-08] :0040A2A1 83C208 add edx, 00000008 :0040A2A4 52 push edx :0040A2A5 E8A6040000 call 0040A750 :0040A2AA EBD4 jmp 0040A280 --------- :0040A2AC EBAD jmp 0040A25B --------- :0040A2AE 8B45F0 mov eax, dword[ebp-10] :0040A2B1 8B4804 mov ecx, dword[eax+04] :0040A2B4 894DF4 mov dword[ebp-0C], ecx :0040A2B7 8B55F4 mov edx, dword[ebp-0C] :0040A2BA 52 push edx :0040A2BB E8DA070000 call 0040AA9A :0040A2C0 83C404 add esp, 00000004 :0040A2C3 8B45F0 mov eax, dword[ebp-10] :0040A2C6 C7400400000000 mov dword[eax+04], 00000000 :0040A2CD 8B4DF0 mov ecx, dword[ebp-10] :0040A2D0 C7410C00000000 mov dword[ecx+0C], 00000000 :0040A2D7 8B55F0 mov edx, dword[ebp-10] :0040A2DA C7421000000000 mov dword[edx+10], 00000000 :0040A2E1 8B45F0 mov eax, dword[ebp-10] :0040A2E4 8B4814 mov ecx, dword[eax+14] :0040A2E7 E89E0B0000 call 0040AE8A :0040A2EC 8B4DF0 mov ecx, dword[ebp-10] :0040A2EF C7411400000000 mov dword[ecx+14], 00000000 :0040A2F6 8BE5 mov esp, ebp :0040A2F8 5D pop ebp :0040A2F9 C3 ret :0040A2FA CC CC CC CC CC CC ...... ========= :0040A300 55 push ebp :0040A301 8BEC mov ebp, esp :0040A303 51 push ecx :0040A304 894DFC mov dword[ebp-04], ecx :0040A307 8B45FC mov eax, dword[ebp-04] :0040A30A 8B400C mov eax, dword[eax+0C] :0040A30D F7D8 neg eax :0040A30F 1BC0 sbb eax, eax :0040A311 8BE5 mov esp, ebp :0040A313 5D pop ebp :0040A314 C3 ret :0040A315 CC CC CC CC CC CC CC CC CC CC CC ........... ========= :0040A320 55 push ebp :0040A321 8BEC mov ebp, esp :0040A323 83EC14 sub esp, 00000014 :0040A326 894DEC mov dword[ebp-14], ecx :0040A329 8B4508 mov eax, dword[ebp+08] :0040A32C 8B08 mov ecx, dword[eax] :0040A32E 894DFC mov dword[ebp-04], ecx :0040A331 837DFCFF cmp dword[ebp-04], -00000001 :0040A335 7536 jne 0040A36D :0040A337 C745F400000000 mov dword[ebp-0C], 00000000 :0040A33E EB09 jmp 0040A349 --------- :0040A340 8B55F4 mov edx, dword[ebp-0C] :0040A343 83C201 add edx, 00000001 :0040A346 8955F4 mov dword[ebp-0C], edx --------- :0040A349 8B45EC mov eax, dword[ebp-14] :0040A34C 8B4DF4 mov ecx, dword[ebp-0C] :0040A34F 3B4808 cmp ecx, dword[eax+08] :0040A352 7319 jae 0040A36D :0040A354 8B55EC mov edx, dword[ebp-14] :0040A357 8B4204 mov eax, dword[edx+04] :0040A35A 8B4DF4 mov ecx, dword[ebp-0C] :0040A35D 8B1488 mov edx, dword[eax+4*ecx] :0040A360 8955FC mov dword[ebp-04], edx :0040A363 837DFC00 cmp dword[ebp-04], 00000000 :0040A367 7402 je 0040A36B :0040A369 EB02 jmp 0040A36D --------- :0040A36B EBD3 jmp 0040A340 --------- :0040A36D 8B45FC mov eax, dword[ebp-04] :0040A370 8B08 mov ecx, dword[eax] :0040A372 894DF8 mov dword[ebp-08], ecx :0040A375 837DF800 cmp dword[ebp-08], 00000000 :0040A379 753B jne 0040A3B6 :0040A37B 8B55FC mov edx, dword[ebp-04] :0040A37E 8B4204 mov eax, dword[edx+04] :0040A381 83C001 add eax, 00000001 :0040A384 8945F0 mov dword[ebp-10], eax :0040A387 EB09 jmp 0040A392 --------- :0040A389 8B4DF0 mov ecx, dword[ebp-10] :0040A38C 83C101 add ecx, 00000001 :0040A38F 894DF0 mov dword[ebp-10], ecx --------- :0040A392 8B55EC mov edx, dword[ebp-14] :0040A395 8B45F0 mov eax, dword[ebp-10] :0040A398 3B4208 cmp eax, dword[edx+08] :0040A39B 7319 jae 0040A3B6 :0040A39D 8B4DEC mov ecx, dword[ebp-14] :0040A3A0 8B5104 mov edx, dword[ecx+04] :0040A3A3 8B45F0 mov eax, dword[ebp-10] :0040A3A6 8B0C82 mov ecx, dword[edx+4*eax] :0040A3A9 894DF8 mov dword[ebp-08], ecx :0040A3AC 837DF800 cmp dword[ebp-08], 00000000 :0040A3B0 7402 je 0040A3B4 :0040A3B2 EB02 jmp 0040A3B6 --------- :0040A3B4 EBD3 jmp 0040A389 --------- :0040A3B6 8B5508 mov edx, dword[ebp+08] :0040A3B9 8B45F8 mov eax, dword[ebp-08] :0040A3BC 8902 mov dword[edx], eax :0040A3BE 8B4D0C mov ecx, dword[ebp+0C] :0040A3C1 8B55FC mov edx, dword[ebp-04] :0040A3C4 8B4208 mov eax, dword[edx+08] :0040A3C7 8901 mov dword[ecx], eax :0040A3C9 8B4D10 mov ecx, dword[ebp+10] :0040A3CC 8B55FC mov edx, dword[ebp-04] :0040A3CF 8B420C mov eax, dword[edx+0C] :0040A3D2 8901 mov dword[ecx], eax :0040A3D4 8BE5 mov esp, ebp :0040A3D6 5D pop ebp :0040A3D7 C20C00 ret 000C :0040A3DA CC CC CC CC CC CC ...... ========= :0040A3E0 55 push ebp :0040A3E1 8BEC mov ebp, esp :0040A3E3 6AFF push -00000001 :0040A3E5 6809BC4000 push 0040BC09 :0040A3EA 64A100000000 mov eax, dword fs:[00000000] :0040A3F0 50 push eax :0040A3F1 64892500000000 mov dword fs:[00000000], esp :0040A3F8 51 push ecx :0040A3F9 894DF0 mov dword[ebp-10], ecx :0040A3FC 8B45F0 mov eax, dword[ebp-10] :0040A3FF C700B4CA4000 mov dword[eax], 0040CAB4 :0040A405 C745FC00000000 mov dword[ebp-04], 00000000 :0040A40C 8B4DF0 mov ecx, dword[ebp-10] :0040A40F E82CFEFFFF call 0040A240 :0040A414 C745FCFFFFFFFF mov dword[ebp-04], FFFFFFFF :0040A41B 8B4DF0 mov ecx, dword[ebp-10] :0040A41E E85D91FFFF call 00403580 :0040A423 8B4DF4 mov ecx, dword[ebp-0C] :0040A426 64890D00000000 mov dword fs:[00000000], ecx :0040A42D 8BE5 mov esp, ebp :0040A42F 5D pop ebp :0040A430 C3 ret :0040A431 CC CC CC CC CC CC CC CC CC CC CC CC CC CC CC ............... :0040A440 55 push ebp :0040A441 8BEC mov ebp, esp :0040A443 83EC18 sub esp, 00000018 :0040A446 894DE8 mov dword[ebp-18], ecx :0040A449 8B4508 mov eax, dword[ebp+08] :0040A44C 50 push eax :0040A44D 8B4DE8 mov ecx, dword[ebp-18] :0040A450 E8BB87FFFF call 00402C10 :0040A455 8B4D08 mov ecx, dword[ebp+08] :0040A458 E8E3000000 call 0040A540 :0040A45D 85C0 test eax, eax :0040A45F 0F8483000000 je 0040A4E8 :0040A465 8B4DE8 mov ecx, dword[ebp-18] :0040A468 8B510C mov edx, dword[ecx+0C] :0040A46B 52 push edx :0040A46C 8B4D08 mov ecx, dword[ebp+08] :0040A46F E8220A0000 call 0040AE96 :0040A474 8B45E8 mov eax, dword[ebp-18] :0040A477 83780C00 cmp dword[eax+0C], 00000000 :0040A47B 7505 jne 0040A482 :0040A47D E9B1000000 jmp 0040A533 :0040A482 C7 45 FC 00 00 00 00 EB 09 8B 4D FC 83 C1 01 89 .E........M..... :0040A492 4D FC 8B 55 E8 8B 45 FC 3B 42 08 73 47 8B 4D E8 M..U..E.;B.sG.M. :0040A4A2 8B 51 04 8B 45 FC 8B 0C 82 89 4D F8 EB 08 8B 55 .Q..E.....M....U :0040A4B2 F8 8B 02 89 45 F8 83 7D F8 00 74 26 6A 01 8B 4D ....E..}..t&j..M :0040A4C2 F8 83 C1 08 51 8B 55 08 52 E8 B0 02 00 00 6A 01 ....Q.U.R.....j. :0040A4D2 8B 45 F8 83 C0 0C 50 8B 4D 08 51 E8 9E 02 00 00 .E....P.M.Q..... :0040A4E2 EB CC EB A5 EB 4B 8B 4D 08 E8 A0 09 00 00 89 45 .....K.M.......E :0040A4F2 F4 8B 55 F4 8B 45 F4 83 E8 01 89 45 F4 85 D2 74 ..U..E.....E...t :0040A502 30 6A 01 8D 4D F0 51 8B 55 08 52 E8 6E 02 00 00 0j..M.Q.U.R.n... :0040A512 6A 01 8D 45 EC 50 8B 4D 08 51 E8 5F 02 00 00 8B j..E.P.M.Q._.... :0040A522 55 EC 52 8B 45 F0 50 8B 4D E8 E8 5F FC FF FF EB U.R.E.P.M.._.... :0040A532 C0 8B E5 5D C2 04 00 CC CC CC CC CC CC CC ...].......... ========= :0040A540 55 push ebp :0040A541 8BEC mov ebp, esp :0040A543 51 push ecx :0040A544 894DFC mov dword[ebp-04], ecx :0040A547 8B45FC mov eax, dword[ebp-04] :0040A54A 8B4014 mov eax, dword[eax+14] :0040A54D 83E001 and eax, 00000001 :0040A550 F7D8 neg eax :0040A552 1BC0 sbb eax, eax :0040A554 40 inc eax :0040A555 8BE5 mov esp, ebp :0040A557 5D pop ebp :0040A558 C3 ret :0040A559 CC CC CC CC CC CC CC ....... :0040A560 55 push ebp :0040A561 8BEC mov ebp, esp :0040A563 51 push ecx :0040A564 894DFC mov dword[ebp-04], ecx :0040A567 8B4DFC mov ecx, dword[ebp-04] :0040A56A E871FEFFFF call 0040A3E0 :0040A56F 8B4508 mov eax, dword[ebp+08] :0040A572 83E001 and eax, 00000001 :0040A575 85C0 test eax, eax :0040A577 7409 je 0040A582 :0040A579 8B4DFC mov ecx, dword[ebp-04] :0040A57C 51 push ecx :0040A57D E89E86FFFF call 00402C20 --------- :0040A582 8B45FC mov eax, dword[ebp-04] :0040A585 8BE5 mov esp, ebp :0040A587 5D pop ebp :0040A588 C20400 ret 0004 :0040A58B CC CC CC CC CC ..... ========= :0040A590 55 push ebp :0040A591 8BEC mov ebp, esp :0040A593 83EC0C sub esp, 0000000C :0040A596 894DF4 mov dword[ebp-0C], ecx :0040A599 8D45F8 lea eax, dword[ebp-08] :0040A59C 50 push eax :0040A59D 8B4D08 mov ecx, dword[ebp+08] :0040A5A0 51 push ecx :0040A5A1 8B4DF4 mov ecx, dword[ebp-0C] :0040A5A4 E8D7000000 call 0040A680 :0040A5A9 8945FC mov dword[ebp-04], eax :0040A5AC 837DFC00 cmp dword[ebp-04], 00000000 :0040A5B0 7557 jne 0040A609 :0040A5B2 8B55F4 mov edx, dword[ebp-0C] :0040A5B5 837A0400 cmp dword[edx+04], 00000000 :0040A5B9 7511 jne 0040A5CC :0040A5BB 6A01 push 00000001 :0040A5BD 8B45F4 mov eax, dword[ebp-0C] :0040A5C0 8B4808 mov ecx, dword[eax+08] :0040A5C3 51 push ecx :0040A5C4 8B4DF4 mov ecx, dword[ebp-0C] :0040A5C7 E8F4010000 call 0040A7C0 --------- :0040A5CC 8B4DF4 mov ecx, dword[ebp-0C] :0040A5CF E86C020000 call 0040A840 :0040A5D4 8945FC mov dword[ebp-04], eax :0040A5D7 8B55FC mov edx, dword[ebp-04] :0040A5DA 8B45F8 mov eax, dword[ebp-08] :0040A5DD 894204 mov dword[edx+04], eax :0040A5E0 8B4DFC mov ecx, dword[ebp-04] :0040A5E3 8B5508 mov edx, dword[ebp+08] :0040A5E6 895108 mov dword[ecx+08], edx :0040A5E9 8B45F4 mov eax, dword[ebp-0C] :0040A5EC 8B4804 mov ecx, dword[eax+04] :0040A5EF 8B55FC mov edx, dword[ebp-04] :0040A5F2 8B45F8 mov eax, dword[ebp-08] :0040A5F5 8B0C81 mov ecx, dword[ecx+4*eax] :0040A5F8 890A mov dword[edx], ecx :0040A5FA 8B55F4 mov edx, dword[ebp-0C] :0040A5FD 8B4204 mov eax, dword[edx+04] :0040A600 8B4DF8 mov ecx, dword[ebp-08] :0040A603 8B55FC mov edx, dword[ebp-04] :0040A606 891488 mov dword[eax+4*ecx], edx --------- :0040A609 8B45FC mov eax, dword[ebp-04] :0040A60C 83C00C add eax, 0000000C :0040A60F 8BE5 mov esp, ebp :0040A611 5D pop ebp :0040A612 C20400 ret 0004 :0040A615 CC CC CC CC CC CC CC CC CC CC CC ........... ========= :0040A620 55 push ebp :0040A621 8BEC mov ebp, esp :0040A623 51 push ecx :0040A624 894DFC mov dword[ebp-04], ecx :0040A627 6A01 push 00000001 :0040A629 8B4508 mov eax, dword[ebp+08] :0040A62C 83C00C add eax, 0000000C :0040A62F 50 push eax :0040A630 E8EB000000 call 0040A720 :0040A635 6A01 push 00000001 :0040A637 8B4D08 mov ecx, dword[ebp+08] :0040A63A 83C108 add ecx, 00000008 :0040A63D 51 push ecx :0040A63E E80D010000 call 0040A750 :0040A643 8B5508 mov edx, dword[ebp+08] :0040A646 8B45FC mov eax, dword[ebp-04] :0040A649 8B4810 mov ecx, dword[eax+10] :0040A64C 890A mov dword[edx], ecx :0040A64E 8B55FC mov edx, dword[ebp-04] :0040A651 8B4508 mov eax, dword[ebp+08] :0040A654 894210 mov dword[edx+10], eax :0040A657 8B4DFC mov ecx, dword[ebp-04] :0040A65A 8B510C mov edx, dword[ecx+0C] :0040A65D 83EA01 sub edx, 00000001 :0040A660 8B45FC mov eax, dword[ebp-04] :0040A663 89500C mov dword[eax+0C], edx :0040A666 8B4DFC mov ecx, dword[ebp-04] :0040A669 83790C00 cmp dword[ecx+0C], 00000000 :0040A66D 7508 jne 0040A677 :0040A66F 8B4DFC mov ecx, dword[ebp-04] :0040A672 E8C9FBFFFF call 0040A240 --------- :0040A677 8BE5 mov esp, ebp :0040A679 5D pop ebp :0040A67A C20400 ret 0004 :0040A67D CC CC CC ... ========= :0040A680 55 push ebp :0040A681 8BEC mov ebp, esp :0040A683 83EC08 sub esp, 00000008 :0040A686 894DF8 mov dword[ebp-08], ecx :0040A689 8B4508 mov eax, dword[ebp+08] :0040A68C 50 push eax :0040A68D E85E000000 call 0040A6F0 :0040A692 8B4DF8 mov ecx, dword[ebp-08] :0040A695 33D2 xor edx, edx :0040A697 F77108 div dword[ecx+08] :0040A69A 8B450C mov eax, dword[ebp+0C] :0040A69D 8910 mov dword[eax], edx :0040A69F 8B4DF8 mov ecx, dword[ebp-08] :0040A6A2 83790400 cmp dword[ecx+04], 00000000 :0040A6A6 7504 jne 0040A6AC :0040A6A8 33C0 xor eax, eax :0040A6AA EB3E jmp 0040A6EA --------- :0040A6AC 8B550C mov edx, dword[ebp+0C] :0040A6AF 8B02 mov eax, dword[edx] :0040A6B1 8B4DF8 mov ecx, dword[ebp-08] :0040A6B4 8B5104 mov edx, dword[ecx+04] :0040A6B7 8B0482 mov eax, dword[edx+4*eax] :0040A6BA 8945FC mov dword[ebp-04], eax :0040A6BD EB08 jmp 0040A6C7 --------- :0040A6BF 8B4DFC mov ecx, dword[ebp-04] :0040A6C2 8B11 mov edx, dword[ecx] :0040A6C4 8955FC mov dword[ebp-04], edx --------- :0040A6C7 837DFC00 cmp dword[ebp-04], 00000000 :0040A6CB 741B je 0040A6E8 :0040A6CD 8D4508 lea eax, dword[ebp+08] :0040A6D0 50 push eax :0040A6D1 8B4DFC mov ecx, dword[ebp-04] :0040A6D4 83C108 add ecx, 00000008 :0040A6D7 51 push ecx :0040A6D8 E823000000 call 0040A700 :0040A6DD 85C0 test eax, eax :0040A6DF 7405 je 0040A6E6 :0040A6E1 8B45FC mov eax, dword[ebp-04] :0040A6E4 EB04 jmp 0040A6EA --------- :0040A6E6 EBD7 jmp 0040A6BF --------- :0040A6E8 33C0 xor eax, eax --------- :0040A6EA 8BE5 mov esp, ebp :0040A6EC 5D pop ebp :0040A6ED C20800 ret 0008 ========= :0040A6F0 55 push ebp :0040A6F1 8BEC mov ebp, esp :0040A6F3 8B4508 mov eax, dword[ebp+08] :0040A6F6 C1E804 shr eax, 04 :0040A6F9 5D pop ebp :0040A6FA C20400 ret 0004 :0040A6FD CC CC CC ... ========= :0040A700 55 push ebp :0040A701 8BEC mov ebp, esp :0040A703 8B4508 mov eax, dword[ebp+08] :0040A706 8B4D0C mov ecx, dword[ebp+0C] :0040A709 8B10 mov edx, dword[eax] :0040A70B 33C0 xor eax, eax :0040A70D 3B11 cmp edx, dword[ecx] :0040A70F 0F94C0 sete al :0040A712 5D pop ebp :0040A713 C20800 ret 0008 :0040A716 CC CC CC CC CC CC CC CC CC CC .......... ========= :0040A720 55 push ebp :0040A721 8BEC mov ebp, esp :0040A723 EB09 jmp 0040A72E --------- :0040A725 8B4508 mov eax, dword[ebp+08] :0040A728 83C004 add eax, 00000004 :0040A72B 894508 mov dword[ebp+08], eax --------- :0040A72E 8B4D0C mov ecx, dword[ebp+0C] :0040A731 8B550C mov edx, dword[ebp+0C] :0040A734 83EA01 sub edx, 00000001 :0040A737 89550C mov dword[ebp+0C], edx :0040A73A 85C9 test ecx, ecx :0040A73C 7402 je 0040A740 :0040A73E EBE5 jmp 0040A725 --------- :0040A740 5D pop ebp :0040A741 C20800 ret 0008 :0040A744 CC CC CC CC CC CC CC CC CC CC CC CC ............ ========= :0040A750 55 push ebp :0040A751 8BEC mov ebp, esp :0040A753 EB09 jmp 0040A75E --------- :0040A755 8B4508 mov eax, dword[ebp+08] :0040A758 83C004 add eax, 00000004 :0040A75B 894508 mov dword[ebp+08], eax --------- :0040A75E 8B4D0C mov ecx, dword[ebp+0C] :0040A761 8B550C mov edx, dword[ebp+0C] :0040A764 83EA01 sub edx, 00000001 :0040A767 89550C mov dword[ebp+0C], edx :0040A76A 85C9 test ecx, ecx :0040A76C 7402 je 0040A770 :0040A76E EBE5 jmp 0040A755 --------- :0040A770 5D pop ebp :0040A771 C20800 ret 0008 :0040A774 CC CC CC CC CC CC CC CC CC CC CC CC ............ :0040A780 55 push ebp :0040A781 8BEC mov ebp, esp :0040A783 8B4D08 mov ecx, dword[ebp+08] :0040A786 E8B5FDFFFF call 0040A540 :0040A78B 85C0 test eax, eax :0040A78D 7415 je 0040A7A4 :0040A78F 8B4510 mov eax, dword[ebp+10] :0040A792 C1E002 shl eax, 02 :0040A795 50 push eax :0040A796 8B4D0C mov ecx, dword[ebp+0C] :0040A799 51 push ecx :0040A79A 8B4D08 mov ecx, dword[ebp+08] :0040A79D E800070000 call 0040AEA2 :0040A7A2 EB13 jmp 0040A7B7 --------- :0040A7A4 8B5510 mov edx, dword[ebp+10] :0040A7A7 C1E202 shl edx, 02 :0040A7AA 52 push edx :0040A7AB 8B450C mov eax, dword[ebp+0C] :0040A7AE 50 push eax :0040A7AF 8B4D08 mov ecx, dword[ebp+08] :0040A7B2 E8E5060000 call 0040AE9C --------- :0040A7B7 5D pop ebp :0040A7B8 C20C00 ret 000C :0040A7BB CC CC CC CC CC ..... ========= :0040A7C0 55 push ebp :0040A7C1 8BEC mov ebp, esp :0040A7C3 83EC0C sub esp, 0000000C :0040A7C6 894DF4 mov dword[ebp-0C], ecx :0040A7C9 8B45F4 mov eax, dword[ebp-0C] :0040A7CC 83780400 cmp dword[eax+04], 00000000 :0040A7D0 741F je 0040A7F1 :0040A7D2 8B4DF4 mov ecx, dword[ebp-0C] :0040A7D5 8B5104 mov edx, dword[ecx+04] :0040A7D8 8955FC mov dword[ebp-04], edx :0040A7DB 8B45FC mov eax, dword[ebp-04] :0040A7DE 50 push eax :0040A7DF E8B6020000 call 0040AA9A :0040A7E4 83C404 add esp, 00000004 :0040A7E7 8B4DF4 mov ecx, dword[ebp-0C] :0040A7EA C7410400000000 mov dword[ecx+04], 00000000 --------- :0040A7F1 837D0C00 cmp dword[ebp+0C], 00000000 :0040A7F5 7433 je 0040A82A :0040A7F7 8B5508 mov edx, dword[ebp+08] :0040A7FA C1E202 shl edx, 02 :0040A7FD 52 push edx :0040A7FE E87D040000 call 0040AC80 :0040A803 83C404 add esp, 00000004 :0040A806 8945F8 mov dword[ebp-08], eax :0040A809 8B45F4 mov eax, dword[ebp-0C] :0040A80C 8B4DF8 mov ecx, dword[ebp-08] :0040A80F 894804 mov dword[eax+04], ecx :0040A812 8B5508 mov edx, dword[ebp+08] :0040A815 C1E202 shl edx, 02 :0040A818 52 push edx :0040A819 6A00 push 00000000 :0040A81B 8B45F4 mov eax, dword[ebp-0C] :0040A81E 8B4804 mov ecx, dword[eax+04] :0040A821 51 push ecx :0040A822 E899060000 call 0040AEC0 ;;call MSVCRT.memset :0040A827 83C40C add esp, 0000000C --------- :0040A82A 8B55F4 mov edx, dword[ebp-0C] :0040A82D 8B4508 mov eax, dword[ebp+08] :0040A830 894208 mov dword[edx+08], eax :0040A833 8BE5 mov esp, ebp :0040A835 5D pop ebp :0040A836 C20800 ret 0008 :0040A839 CC CC CC CC CC CC CC ....... ========= :0040A840 55 push ebp :0040A841 8BEC mov ebp, esp :0040A843 83EC14 sub esp, 00000014 :0040A846 894DEC mov dword[ebp-14], ecx :0040A849 8B45EC mov eax, dword[ebp-14] :0040A84C 83781000 cmp dword[eax+10], 00000000 :0040A850 7573 jne 0040A8C5 :0040A852 6A10 push 00000010 :0040A854 8B4DEC mov ecx, dword[ebp-14] :0040A857 8B5118 mov edx, dword[ecx+18] :0040A85A 52 push edx :0040A85B 8B45EC mov eax, dword[ebp-14] :0040A85E 83C014 add eax, 00000014 :0040A861 50 push eax :0040A862 E841060000 call 0040AEA8 :0040A867 8945F8 mov dword[ebp-08], eax :0040A86A 8B4DF8 mov ecx, dword[ebp-08] :0040A86D E83E090000 call 0040B1B0 :0040A872 8945F0 mov dword[ebp-10], eax :0040A875 8B4DEC mov ecx, dword[ebp-14] :0040A878 8B5118 mov edx, dword[ecx+18] :0040A87B 83EA01 sub edx, 00000001 :0040A87E C1E204 shl edx, 04 :0040A881 8B45F0 mov eax, dword[ebp-10] :0040A884 03C2 add eax, edx :0040A886 8945F0 mov dword[ebp-10], eax :0040A889 8B4DEC mov ecx, dword[ebp-14] :0040A88C 8B5118 mov edx, dword[ecx+18] :0040A88F 83EA01 sub edx, 00000001 :0040A892 8955F4 mov dword[ebp-0C], edx :0040A895 EB12 jmp 0040A8A9 --------- :0040A897 8B45F4 mov eax, dword[ebp-0C] :0040A89A 83E801 sub eax, 00000001 :0040A89D 8945F4 mov dword[ebp-0C], eax :0040A8A0 8B4DF0 mov ecx, dword[ebp-10] :0040A8A3 83E910 sub ecx, 00000010 :0040A8A6 894DF0 mov dword[ebp-10], ecx --------- :0040A8A9 837DF400 cmp dword[ebp-0C], 00000000 :0040A8AD 7C16 jl 0040A8C5 :0040A8AF 8B55F0 mov edx, dword[ebp-10] :0040A8B2 8B45EC mov eax, dword[ebp-14] :0040A8B5 8B4810 mov ecx, dword[eax+10] :0040A8B8 890A mov dword[edx], ecx :0040A8BA 8B55EC mov edx, dword[ebp-14] :0040A8BD 8B45F0 mov eax, dword[ebp-10] :0040A8C0 894210 mov dword[edx+10], eax :0040A8C3 EBD2 jmp 0040A897 --------- :0040A8C5 8B4DEC mov ecx, dword[ebp-14] :0040A8C8 8B5110 mov edx, dword[ecx+10] :0040A8CB 8955FC mov dword[ebp-04], edx :0040A8CE 8B45EC mov eax, dword[ebp-14] :0040A8D1 8B4810 mov ecx, dword[eax+10] :0040A8D4 8B55EC mov edx, dword[ebp-14] :0040A8D7 8B01 mov eax, dword[ecx] :0040A8D9 894210 mov dword[edx+10], eax :0040A8DC 8B4DEC mov ecx, dword[ebp-14] :0040A8DF 8B510C mov edx, dword[ecx+0C] :0040A8E2 83C201 add edx, 00000001 :0040A8E5 8B45EC mov eax, dword[ebp-14] :0040A8E8 89500C mov dword[eax+0C], edx :0040A8EB 6A01 push 00000001 :0040A8ED 8B4DFC mov ecx, dword[ebp-04] :0040A8F0 83C108 add ecx, 00000008 :0040A8F3 51 push ecx :0040A8F4 E817000000 call 0040A910 :0040A8F9 6A01 push 00000001 :0040A8FB 8B55FC mov edx, dword[ebp-04] :0040A8FE 83C20C add edx, 0000000C :0040A901 52 push edx :0040A902 E859000000 call 0040A960 :0040A907 8B45FC mov eax, dword[ebp-04] :0040A90A 8BE5 mov esp, ebp :0040A90C 5D pop ebp :0040A90D C3 ret :0040A90E CC CC .. ========= :0040A910 55 push ebp :0040A911 8BEC mov ebp, esp :0040A913 51 push ecx :0040A914 8B450C mov eax, dword[ebp+0C] :0040A917 C1E002 shl eax, 02 :0040A91A 50 push eax :0040A91B 6A00 push 00000000 :0040A91D 8B4D08 mov ecx, dword[ebp+08] :0040A920 51 push ecx :0040A921 E89A050000 call 0040AEC0 ;;call MSVCRT.memset :0040A926 83C40C add esp, 0000000C :0040A929 EB09 jmp 0040A934 --------- :0040A92B 8B5508 mov edx, dword[ebp+08] :0040A92E 83C204 add edx, 00000004 :0040A931 895508 mov dword[ebp+08], edx --------- :0040A934 8B450C mov eax, dword[ebp+0C] :0040A937 8B4D0C mov ecx, dword[ebp+0C] :0040A93A 83E901 sub ecx, 00000001 :0040A93D 894D0C mov dword[ebp+0C], ecx :0040A940 85C0 test eax, eax :0040A942 7413 je 0040A957 :0040A944 8B5508 mov edx, dword[ebp+08] :0040A947 52 push edx :0040A948 6A04 push 00000004 :0040A94A E821E7FFFF call 00409070 :0040A94F 83C408 add esp, 00000008 :0040A952 8945FC mov dword[ebp-04], eax :0040A955 EBD4 jmp 0040A92B --------- :0040A957 8BE5 mov esp, ebp :0040A959 5D pop ebp :0040A95A C20800 ret 0008 :0040A95D CC CC CC ... ========= :0040A960 55 push ebp :0040A961 8BEC mov ebp, esp :0040A963 51 push ecx :0040A964 8B450C mov eax, dword[ebp+0C] :0040A967 C1E002 shl eax, 02 :0040A96A 50 push eax :0040A96B 6A00 push 00000000 :0040A96D 8B4D08 mov ecx, dword[ebp+08] :0040A970 51 push ecx :0040A971 E84A050000 call 0040AEC0 ;;call MSVCRT.memset :0040A976 83C40C add esp, 0000000C :0040A979 EB09 jmp 0040A984 --------- :0040A97B 8B5508 mov edx, dword[ebp+08] :0040A97E 83C204 add edx, 00000004 :0040A981 895508 mov dword[ebp+08], edx --------- :0040A984 8B450C mov eax, dword[ebp+0C] :0040A987 8B4D0C mov ecx, dword[ebp+0C] :0040A98A 83E901 sub ecx, 00000001 :0040A98D 894D0C mov dword[ebp+0C], ecx :0040A990 85C0 test eax, eax :0040A992 7413 je 0040A9A7 :0040A994 8B5508 mov edx, dword[ebp+08] :0040A997 52 push edx :0040A998 6A04 push 00000004 :0040A99A E8D1E6FFFF call 00409070 :0040A99F 83C408 add esp, 00000008 :0040A9A2 8945FC mov dword[ebp-04], eax :0040A9A5 EBD4 jmp 0040A97B --------- :0040A9A7 8BE5 mov esp, ebp :0040A9A9 5D pop ebp :0040A9AA C20800 ret 0008 :0040A9AD CC CC CC ... ========= :0040A9B0 55 push ebp :0040A9B1 8BEC mov ebp, esp :0040A9B3 51 push ecx :0040A9B4 894DFC mov dword[ebp-04], ecx :0040A9B7 8B4508 mov eax, dword[ebp+08] :0040A9BA 50 push eax :0040A9BB 8B4DFC mov ecx, dword[ebp-04] :0040A9BE 8B5104 mov edx, dword[ecx+04] :0040A9C1 52 push edx :0040A9C2 E877070000 call 0040B13E :0040A9C7 33C9 xor ecx, ecx :0040A9C9 83F8FF cmp eax, -00000001 :0040A9CC 0F95C1 setne cl :0040A9CF 8BC1 mov eax, ecx :0040A9D1 8BE5 mov esp, ebp :0040A9D3 5D pop ebp :0040A9D4 C20400 ret 0004 :0040A9D7 CC CC CC CC CC CC CC CC CC ......... ========= :0040A9E0 55 push ebp :0040A9E1 8BEC mov ebp, esp :0040A9E3 51 push ecx :0040A9E4 894DFC mov dword[ebp-04], ecx :0040A9E7 8B4510 mov eax, dword[ebp+10] :0040A9EA 50 push eax :0040A9EB 6A3F push 0000003F :0040A9ED 8B4D0C mov ecx, dword[ebp+0C] :0040A9F0 51 push ecx :0040A9F1 8B5508 mov edx, dword[ebp+08] :0040A9F4 52 push edx :0040A9F5 8B4DFC mov ecx, dword[ebp-04] :0040A9F8 E8B1040000 call 0040AEAE :0040A9FD 8BE5 mov esp, ebp :0040A9FF 5D pop ebp :0040AA00 C20C00 ret 000C :0040AA03 CC . ========= :0040AA04 FF25D4C04000 jmp dword[0040C0D4] ;;call LiteScan.LiteProcessItem ========= :0040AA0A FF25D0C04000 jmp dword[0040C0D0] ;;call LiteScan.LiteEnableAP :0040AA10 FF251CC04000 jmp dword[0040C01C] ;;call EmailCfg.AddHostsEntries ========= :0040AA16 FF2564C34000 jmp dword[0040C364] :0040AA1C FF2560C34000 jmp dword[0040C360] :0040AA22 FF 25 .% :0040AA24 5CC34000 DWORD 0040C35C ;; \.@. :0040AA28 FF 25 .% :0040AA2A 58C34000 DWORD 0040C358 ;; X.@. :0040AA2E FF 25 .% :0040AA30 F0C34000 DWORD 0040C3F0 ;; ..@. :0040AA34 FF 25 .% :0040AA36 ECC34000 DWORD 0040C3EC ;; ..@. :0040AA3A FF 25 .% :0040AA3C E8C34000 DWORD 0040C3E8 ;; ..@. :0040AA40 FF 25 .% :0040AA42 E4C34000 DWORD 0040C3E4 ;; ..@. :0040AA46 FF 25 .% :0040AA48 E0C34000 DWORD 0040C3E0 ;; ..@. :0040AA4C FF 25 .% :0040AA4E DCC34000 DWORD 0040C3DC ;; ..@. :0040AA52 FF 25 .% :0040AA54 D8C34000 DWORD 0040C3D8 ;; ..@. :0040AA58 FF 25 .% :0040AA5A D4C34000 DWORD 0040C3D4 ;; ..@. :0040AA5E FF 25 .% :0040AA60 D0C34000 DWORD 0040C3D0 ;; ..@. :0040AA64 FF 25 .% :0040AA66 CCC34000 DWORD 0040C3CC ;; ..@. :0040AA6A FF 25 .% :0040AA6C C8C34000 DWORD 0040C3C8 ;; ..@. ========= :0040AA70 FF25C4C34000 jmp dword[0040C3C4] ========= :0040AA76 FF25C0C34000 jmp dword[0040C3C0] ========= :0040AA7C FF25BCC34000 jmp dword[0040C3BC] ========= :0040AA82 FF25B8C34000 jmp dword[0040C3B8] :0040AA88 FF25B0C34000 jmp dword[0040C3B0] :0040AA8E FF25ACC34000 jmp dword[0040C3AC] ========= :0040AA94 FF25A8C34000 jmp dword[0040C3A8] ========= :0040AA9A FF25A4C34000 jmp dword[0040C3A4] :0040AAA0 FF25A0C34000 jmp dword[0040C3A0] :0040AAA6 FF 25 .% :0040AAA8 98C34000 DWORD 0040C398 ;; ..@. :0040AAAC FF 25 .% :0040AAAE 94C34000 DWORD 0040C394 ;; ..@. :0040AAB2 FF 25 .% :0040AAB4 90C34000 DWORD 0040C390 ;; ..@. :0040AAB8 FF 25 .% :0040AABA 8CC34000 DWORD 0040C38C ;; ..@. :0040AABE FF 25 .% :0040AAC0 88C34000 DWORD 0040C388 ;; ..@. :0040AAC4 FF 25 .% :0040AAC6 84C34000 DWORD 0040C384 ;; ..@. :0040AACA FF 25 .% :0040AACC 80C34000 DWORD 0040C380 ;; ..@. :0040AAD0 FF 25 .% :0040AAD2 7CC34000 DWORD 0040C37C ;; |.@. :0040AAD6 FF 25 .% :0040AAD8 78C34000 DWORD 0040C378 ;; x.@. :0040AADC FF 25 .% :0040AADE 74C34000 DWORD 0040C374 ;; t.@. :0040AAE2 FF 25 .% :0040AAE4 70C34000 DWORD 0040C370 ;; p.@. :0040AAE8 FF 25 .% :0040AAEA 6CC34000 DWORD 0040C36C ;; l.@. :0040AAEE FF 25 .% :0040AAF0 68C34000 DWORD 0040C368 ;; h.@. :0040AAF4 FF 25 .% :0040AAF6 1CC24000 DWORD 0040C21C ;; ..@. :0040AAFA FF 25 .% :0040AAFC FCC14000 DWORD 0040C1FC ;; ..@. ========= :0040AB00 FF25A4C24000 jmp dword[0040C2A4] :0040AB06 FF25ECC04000 jmp dword[0040C0EC] :0040AB0C FF 25 .% :0040AB0E E4C04000 DWORD 0040C0E4 ;; ..@. :0040AB12 FF 25 .% :0040AB14 DCC04000 DWORD 0040C0DC ;; ..@. :0040AB18 FF 25 .% :0040AB1A E0C04000 DWORD 0040C0E0 ;; ..@. :0040AB1E FF 25 .% :0040AB20 F0C04000 DWORD 0040C0F0 ;; ..@. :0040AB24 FF 25 .% :0040AB26 E8C04000 DWORD 0040C0E8 ;; ..@. :0040AB2A FF 25 .% :0040AB2C FCC04000 DWORD 0040C0FC ;; ..@. :0040AB30 FF 25 .% :0040AB32 F4C04000 DWORD 0040C0F4 ;; ..@. :0040AB36 FF 25 .% :0040AB38 F8C04000 DWORD 0040C0F8 ;; ..@. :0040AB3C FF 25 .% :0040AB3E 0CC14000 DWORD 0040C10C ;; ..@. :0040AB42 FF 25 .% :0040AB44 00C14000 DWORD 0040C100 ;; ..@. :0040AB48 FF 25 .% :0040AB4A 04C14000 DWORD 0040C104 ;; ..@. :0040AB4E FF 25 .% :0040AB50 08C14000 DWORD 0040C108 ;; ..@. :0040AB54 FF 25 .% :0040AB56 24C14000 DWORD 0040C124 ;; $.@. :0040AB5A FF 25 .% :0040AB5C 10C14000 DWORD 0040C110 ;; ..@. :0040AB60 FF 25 .% :0040AB62 14C14000 DWORD 0040C114 ;; ..@. :0040AB66 FF 25 .% :0040AB68 18C14000 DWORD 0040C118 ;; ..@. :0040AB6C FF 25 .% :0040AB6E 1CC14000 DWORD 0040C11C ;; ..@. ========= :0040AB72 FF2520C14000 jmp dword[0040C120] ========= :0040AB78 FF2548C14000 jmp dword[0040C148] ========= :0040AB7E FF2528C14000 jmp dword[0040C128] ========= :0040AB84 FF252CC14000 jmp dword[0040C12C] ========= :0040AB8A FF2530C14000 jmp dword[0040C130] :0040AB90 FF2534C14000 jmp dword[0040C134] ========= :0040AB96 FF2538C14000 jmp dword[0040C138] :0040AB9C FF253CC14000 jmp dword[0040C13C] ========= :0040ABA2 FF2540C14000 jmp dword[0040C140] ========= :0040ABA8 FF2544C14000 jmp dword[0040C144] ========= :0040ABAE FF2578C14000 jmp dword[0040C178] ========= :0040ABB4 FF254CC14000 jmp dword[0040C14C] ========= :0040ABBA FF2550C14000 jmp dword[0040C150] ========= :0040ABC0 FF2554C14000 jmp dword[0040C154] ========= :0040ABC6 FF2558C14000 jmp dword[0040C158] ========= :0040ABCC FF255CC14000 jmp dword[0040C15C] :0040ABD2 FF2560C14000 jmp dword[0040C160] :0040ABD8 FF 25 .% :0040ABDA 64C14000 DWORD 0040C164 ;; d.@. ========= :0040ABDE FF2568C14000 jmp dword[0040C168] :0040ABE4 FF256CC14000 jmp dword[0040C16C] :0040ABEA FF 25 .% :0040ABEC 70C14000 DWORD 0040C170 ;; p.@. :0040ABF0 FF 25 .% :0040ABF2 74C14000 DWORD 0040C174 ;; t.@. ========= :0040ABF6 FF25BCC14000 jmp dword[0040C1BC] ========= :0040ABFC FF257CC14000 jmp dword[0040C17C] :0040AC02 FF2580C14000 jmp dword[0040C180] ========= :0040AC08 FF2584C14000 jmp dword[0040C184] ========= :0040AC0E FF2588C14000 jmp dword[0040C188] ========= :0040AC14 FF258CC14000 jmp dword[0040C18C] ========= :0040AC1A FF2590C14000 jmp dword[0040C190] ========= :0040AC20 FF2594C14000 jmp dword[0040C194] ========= :0040AC26 FF2598C14000 jmp dword[0040C198] ========= :0040AC2C FF259CC14000 jmp dword[0040C19C] ========= :0040AC32 FF25A0C14000 jmp dword[0040C1A0] ========= :0040AC38 FF25A4C14000 jmp dword[0040C1A4] ========= :0040AC3E FF25A8C14000 jmp dword[0040C1A8] ========= :0040AC44 FF25ACC14000 jmp dword[0040C1AC] ========= :0040AC4A FF25B0C14000 jmp dword[0040C1B0] ========= :0040AC50 FF25B4C14000 jmp dword[0040C1B4] ========= :0040AC56 FF25B8C14000 jmp dword[0040C1B8] ========= :0040AC5C FF2520C24000 jmp dword[0040C220] ========= :0040AC62 FF25C0C14000 jmp dword[0040C1C0] ========= :0040AC68 FF25C4C14000 jmp dword[0040C1C4] ========= :0040AC6E FF25C8C14000 jmp dword[0040C1C8] ========= :0040AC74 FF25CCC14000 jmp dword[0040C1CC] ========= :0040AC7A FF25D0C14000 jmp dword[0040C1D0] ========= :0040AC80 FF25D4C14000 jmp dword[0040C1D4] ========= :0040AC86 FF25D8C14000 jmp dword[0040C1D8] ========= :0040AC8C FF25DCC14000 jmp dword[0040C1DC] ========= :0040AC92 FF25E0C14000 jmp dword[0040C1E0] ========= :0040AC98 FF25E4C14000 jmp dword[0040C1E4] ========= :0040AC9E FF25E8C14000 jmp dword[0040C1E8] ========= :0040ACA4 FF25ECC14000 jmp dword[0040C1EC] ========= :0040ACAA FF25F0C14000 jmp dword[0040C1F0] ========= :0040ACB0 FF25F4C14000 jmp dword[0040C1F4] ========= :0040ACB6 FF25F8C14000 jmp dword[0040C1F8] ========= :0040ACBC FF25FCC34000 jmp dword[0040C3FC] ========= :0040ACC2 FF2500C24000 jmp dword[0040C200] :0040ACC8 FF2508C24000 jmp dword[0040C208] ========= :0040ACCE FF250CC24000 jmp dword[0040C20C] ========= :0040ACD4 FF2510C24000 jmp dword[0040C210] :0040ACDA FF2514C24000 jmp dword[0040C214] :0040ACE0 FF25F4C34000 jmp dword[0040C3F4] :0040ACE6 FF25F8C34000 jmp dword[0040C3F8] ========= :0040ACEC FF2524C24000 jmp dword[0040C224] :0040ACF2 FF2528C24000 jmp dword[0040C228] ========= :0040ACF8 FF252CC24000 jmp dword[0040C22C] ========= :0040ACFE FF2530C24000 jmp dword[0040C230] :0040AD04 FF2534C24000 jmp dword[0040C234] :0040AD0A FF 25 .% :0040AD0C 38C24000 DWORD 0040C238 ;; 8.@. :0040AD10 FF 25 .% :0040AD12 3CC24000 DWORD 0040C23C ;; <.@. :0040AD16 FF 25 .% :0040AD18 40C24000 DWORD 0040C240 ;; @.@. :0040AD1C FF 25 .% :0040AD1E 44C24000 DWORD 0040C244 ;; D.@. :0040AD22 FF 25 .% :0040AD24 48C24000 DWORD 0040C248 ;; H.@. :0040AD28 FF 25 .% :0040AD2A 4CC24000 DWORD 0040C24C ;; L.@. :0040AD2E FF 25 .% :0040AD30 50C24000 DWORD 0040C250 ;; P.@. :0040AD34 FF 25 .% :0040AD36 54C24000 DWORD 0040C254 ;; T.@. :0040AD3A FF 25 .% :0040AD3C 58C24000 DWORD 0040C258 ;; X.@. :0040AD40 FF 25 .% :0040AD42 5CC24000 DWORD 0040C25C ;; \.@. :0040AD46 FF 25 .% :0040AD48 60C24000 DWORD 0040C260 ;; `.@. :0040AD4C FF 25 .% :0040AD4E 64C24000 DWORD 0040C264 ;; d.@. :0040AD52 FF 25 .% :0040AD54 68C24000 DWORD 0040C268 ;; h.@. :0040AD58 FF 25 .% :0040AD5A 6CC24000 DWORD 0040C26C ;; l.@. :0040AD5E FF 25 .% :0040AD60 70C24000 DWORD 0040C270 ;; p.@. :0040AD64 FF 25 .% :0040AD66 78C24000 DWORD 0040C278 ;; x.@. :0040AD6A FF 25 .% :0040AD6C 7CC24000 DWORD 0040C27C ;; |.@. :0040AD70 FF 25 .% :0040AD72 80C24000 DWORD 0040C280 ;; ..@. :0040AD76 FF 25 .% :0040AD78 84C24000 DWORD 0040C284 ;; ..@. :0040AD7C FF 25 .% :0040AD7E 88C24000 DWORD 0040C288 ;; ..@. :0040AD82 FF 25 .% :0040AD84 8CC24000 DWORD 0040C28C ;; ..@. :0040AD88 FF 25 .% :0040AD8A 90C24000 DWORD 0040C290 ;; ..@. :0040AD8E FF 25 .% :0040AD90 94C24000 DWORD 0040C294 ;; ..@. :0040AD94 FF 25 .% :0040AD96 98C24000 DWORD 0040C298 ;; ..@. :0040AD9A FF 25 .% :0040AD9C 9CC24000 DWORD 0040C29C ;; ..@. :0040ADA0 FF 25 .% :0040ADA2 A0C24000 DWORD 0040C2A0 ;; ..@. :0040ADA6 FF 25 .% :0040ADA8 00C44000 DWORD 0040C400 ;; ..@. :0040ADAC FF 25 .% :0040ADAE A8C24000 DWORD 0040C2A8 ;; ..@. :0040ADB2 FF 25 .% :0040ADB4 ACC24000 DWORD 0040C2AC ;; ..@. :0040ADB8 FF 25 .% :0040ADBA B0C24000 DWORD 0040C2B0 ;; ..@. :0040ADBE FF 25 .% :0040ADC0 B4C24000 DWORD 0040C2B4 ;; ..@. :0040ADC4 FF 25 .% :0040ADC6 B8C24000 DWORD 0040C2B8 ;; ..@. :0040ADCA FF 25 .% :0040ADCC BCC24000 DWORD 0040C2BC ;; ..@. :0040ADD0 FF 25 .% :0040ADD2 C0C24000 DWORD 0040C2C0 ;; ..@. :0040ADD6 FF 25 .% :0040ADD8 C4C24000 DWORD 0040C2C4 ;; ..@. :0040ADDC FF 25 .% :0040ADDE C8C24000 DWORD 0040C2C8 ;; ..@. :0040ADE2 FF 25 .% :0040ADE4 CCC24000 DWORD 0040C2CC ;; ..@. :0040ADE8 FF 25 .% :0040ADEA D0C24000 DWORD 0040C2D0 ;; ..@. :0040ADEE FF 25 .% :0040ADF0 D4C24000 DWORD 0040C2D4 ;; ..@. :0040ADF4 FF 25 .% :0040ADF6 D8C24000 DWORD 0040C2D8 ;; ..@. :0040ADFA FF 25 .% :0040ADFC DCC24000 DWORD 0040C2DC ;; ..@. :0040AE00 FF 25 .% :0040AE02 E0C24000 DWORD 0040C2E0 ;; ..@. :0040AE06 FF 25 .% :0040AE08 E4C24000 DWORD 0040C2E4 ;; ..@. :0040AE0C FF 25 .% :0040AE0E E8C24000 DWORD 0040C2E8 ;; ..@. :0040AE12 FF 25 .% :0040AE14 ECC24000 DWORD 0040C2EC ;; ..@. :0040AE18 FF 25 .% :0040AE1A F0C24000 DWORD 0040C2F0 ;; ..@. :0040AE1E FF 25 .% :0040AE20 F4C24000 DWORD 0040C2F4 ;; ..@. :0040AE24 FF 25 .% :0040AE26 F8C24000 DWORD 0040C2F8 ;; ..@. :0040AE2A FF 25 .% :0040AE2C FCC24000 DWORD 0040C2FC ;; ..@. :0040AE30 FF 25 .% :0040AE32 00C34000 DWORD 0040C300 ;; ..@. :0040AE36 FF 25 .% :0040AE38 04C34000 DWORD 0040C304 ;; ..@. :0040AE3C FF 25 .% :0040AE3E 08C34000 DWORD 0040C308 ;; ..@. :0040AE42 FF 25 .% :0040AE44 0CC34000 DWORD 0040C30C ;; ..@. :0040AE48 FF 25 .% :0040AE4A 10C34000 DWORD 0040C310 ;; ..@. :0040AE4E FF 25 .% :0040AE50 14C34000 DWORD 0040C314 ;; ..@. :0040AE54 FF 25 .% :0040AE56 18C34000 DWORD 0040C318 ;; ..@. :0040AE5A FF 25 .% :0040AE5C 1CC34000 DWORD 0040C31C ;; ..@. ========= :0040AE60 FF2520C34000 jmp dword[0040C320] ========= :0040AE66 FF2524C34000 jmp dword[0040C324] :0040AE6C FF2528C34000 jmp dword[0040C328] ========= :0040AE72 FF252CC34000 jmp dword[0040C32C] ========= :0040AE78 FF2530C34000 jmp dword[0040C330] ========= :0040AE7E FF2534C34000 jmp dword[0040C334] ========= :0040AE84 FF2538C34000 jmp dword[0040C338] ========= :0040AE8A FF253CC34000 jmp dword[0040C33C] :0040AE90 FF2540C34000 jmp dword[0040C340] ========= :0040AE96 FF2544C34000 jmp dword[0040C344] ========= :0040AE9C FF2548C34000 jmp dword[0040C348] ========= :0040AEA2 FF254CC34000 jmp dword[0040C34C] ========= :0040AEA8 FF2550C34000 jmp dword[0040C350] ========= :0040AEAE FF2554C34000 jmp dword[0040C354] ========= :0040AEB4 FF25D4C44000 jmp dword[0040C4D4] ;;call MSVCRT.strcat ========= :0040AEBA FF25A4C44000 jmp dword[0040C4A4] ;;call MSVCRT.strlen ========= :0040AEC0 FF2584C44000 jmp dword[0040C484] ;;call MSVCRT.memset :0040AEC6 56 push esi :0040AEC7 8BF1 mov esi, ecx :0040AEC9 E8D6010000 call 0040B0A4 ;;call MSVCRT.??1type_info@@UAE@XZ :0040AECE F644240801 test byte[esp+08], 01 :0040AED3 7407 je 0040AEDC :0040AED5 56 push esi :0040AED6 E8BFFBFFFF call 0040AA9A :0040AEDB 59 pop ecx --------- :0040AEDC 8BC6 mov eax, esi :0040AEDE 5E pop esi :0040AEDF C20400 ret 0004 :0040AEE2 FF 25 .% :0040AEE4 80C44000 DWORD 0040C480 ;; ..@. :0040AEE8 CC CC CC CC CC CC CC CC ........ ========= :0040AEF0 833DD80E4100FF cmp dword[00410ED8], -00000001 :0040AEF7 750C jne 0040AF05 :0040AEF9 FF742404 push dword[esp+04] :0040AEFD FF1540C44000 call dword[0040C440] ;;call MSVCRT._onexit :0040AF03 59 pop ecx :0040AF04 C3 ret --------- :0040AF05 68D40E4100 push 00410ED4 :0040AF0A 68D80E4100 push 00410ED8 :0040AF0F FF74240C push dword[esp+0C] :0040AF13 E892010000 call 0040B0AA ;;call MSVCRT.__dllonexit :0040AF18 83C40C add esp, 0000000C :0040AF1B C3 ret ========= :0040AF1C FF742404 push dword[esp+04] :0040AF20 E8CBFFFFFF call 0040AEF0 :0040AF25 F7D8 neg eax :0040AF27 1BC0 sbb eax, eax :0040AF29 59 pop ecx :0040AF2A F7D8 neg eax :0040AF2C 48 dec eax :0040AF2D C3 ret :0040AF2E FF25D0C44000 jmp dword[0040C4D0] ;;call MSVCRT.??0exception@@QAE@ABV0@@Z ========= :0040AF34 FF2568C44000 jmp dword[0040C468] ;;call MSVCRT._CxxThrowException :0040AF3A FF255CC44000 jmp dword[0040C45C] ;;call MSVCRT.memcpy ========= :0040AF40 FF2558C44000 jmp dword[0040C458] ;;call MSVCRT.strcpy //******************** Program Entry Point ******** :0040AF46 55 push ebp :0040AF47 8BEC mov ebp, esp :0040AF49 6AFF push -00000001 :0040AF4B 68D0CA4000 push 0040CAD0 :0040AF50 68D8B04000 push 0040B0D8 :0040AF55 64A100000000 mov eax, dword fs:[00000000] :0040AF5B 50 push eax :0040AF5C 64892500000000 mov dword fs:[00000000], esp :0040AF63 83EC68 sub esp, 00000068 :0040AF66 53 push ebx :0040AF67 56 push esi :0040AF68 57 push edi :0040AF69 8965E8 mov dword[ebp-18], esp :0040AF6C 33DB xor ebx, ebx :0040AF6E 895DFC mov dword[ebp-04], ebx :0040AF71 6A02 push 00000002 :0040AF73 FF15C4C44000 call dword[0040C4C4] ;;call MSVCRT.__set_app_type :0040AF79 59 pop ecx :0040AF7A 830DD40E4100FF or dword[00410ED4], -00000001 :0040AF81 830DD80E4100FF or dword[00410ED8], -00000001 :0040AF88 FF15C0C44000 call dword[0040C4C0] ;;call MSVCRT.__p__fmode :0040AF8E 8B0DC80E4100 mov ecx, dword[00410EC8] :0040AF94 8908 mov dword[eax], ecx :0040AF96 FF15BCC44000 call dword[0040C4BC] ;;call MSVCRT.__p__commode :0040AF9C 8B0DC40E4100 mov ecx, dword[00410EC4] :0040AFA2 8908 mov dword[eax], ecx :0040AFA4 A1A0C44000 mov eax, dword[0040C4A0] :0040AFA9 8B00 mov eax, dword[eax] :0040AFAB A3D00E4100 mov dword[00410ED0], eax :0040AFB0 E822010000 call 0040B0D7 :0040AFB5 391D64034100 cmp dword[00410364], ebx :0040AFBB 750C jne 0040AFC9 :0040AFBD 68D4B04000 push 0040B0D4 :0040AFC2 FF1570C44000 call dword[0040C470] ;;call MSVCRT.__setusermatherr :0040AFC8 59 pop ecx --------- :0040AFC9 E8F4000000 call 0040B0C2 :0040AFCE 6824F04000 push 0040F024 :0040AFD3 681CF04000 push 0040F01C :0040AFD8 E8DF000000 call 0040B0BC ;;call MSVCRT._initterm :0040AFDD A1C00E4100 mov eax, dword[00410EC0] :0040AFE2 894594 mov dword[ebp-6C], eax :0040AFE5 8D4594 lea eax, dword[ebp-6C] :0040AFE8 50 push eax :0040AFE9 FF35BC0E4100 push dword[00410EBC] :0040AFEF 8D459C lea eax, dword[ebp-64] :0040AFF2 50 push eax :0040AFF3 8D4590 lea eax, dword[ebp-70] :0040AFF6 50 push eax :0040AFF7 8D45A0 lea eax, dword[ebp-60] :0040AFFA 50 push eax :0040AFFB FF1594C44000 call dword[0040C494] ;;call MSVCRT.__getmainargs :0040B001 6818F04000 push 0040F018 :0040B006 6800F04000 push 0040F000 :0040B00B E8AC000000 call 0040B0BC ;;call MSVCRT._initterm :0040B010 83C424 add esp, 00000024 :0040B013 A190C44000 mov eax, dword[0040C490] :0040B018 8B30 mov esi, dword[eax] :0040B01A 89758C mov dword[ebp-74], esi :0040B01D 803E22 cmp byte[esi], 22 :0040B020 753A jne 0040B05C --------- :0040B022 46 inc esi :0040B023 89758C mov dword[ebp-74], esi :0040B026 8A06 mov al, byte[esi] :0040B028 3AC3 cmp al, bl :0040B02A 7404 je 0040B030 :0040B02C 3C22 cmp al, 22 :0040B02E 75F2 jne 0040B022 --------- :0040B030 803E22 cmp byte[esi], 22 :0040B033 7504 jne 0040B039 --------- :0040B035 46 inc esi :0040B036 89758C mov dword[ebp-74], esi --------- :0040B039 8A06 mov al, byte[esi] :0040B03B 3AC3 cmp al, bl :0040B03D 7404 je 0040B043 :0040B03F 3C20 cmp al, 20 :0040B041 76F2 jbe 0040B035 --------- :0040B043 895DD0 mov dword[ebp-30], ebx :0040B046 8D45A4 lea eax, dword[ebp-5C] :0040B049 50 push eax :0040B04A FF15C4C04000 call dword[0040C0C4] ;;call KERNEL32.GetStartupInfoA :0040B050 F645D001 test byte[ebp-30], 01 :0040B054 7411 je 0040B067 :0040B056 0FB745D4 movzx eax, word[ebp-2C] :0040B05A EB0E jmp 0040B06A --------- :0040B05C 803E20 cmp byte[esi], 20 :0040B05F 76D8 jbe 0040B039 :0040B061 46 inc esi :0040B062 89758C mov dword[ebp-74], esi :0040B065 EBF5 jmp 0040B05C --------- :0040B067 6A0A push 0000000A :0040B069 58 pop eax --------- :0040B06A 50 push eax :0040B06B 56 push esi :0040B06C 53 push ebx :0040B06D 53 push ebx :0040B06E FF15C0C04000 call dword[0040C0C0] ;;call KERNEL32.GetModuleHandleA :0040B074 50 push eax :0040B075 E8D6000000 call 0040B150 :0040B07A 894598 mov dword[ebp-68], eax :0040B07D 50 push eax :0040B07E FF1560C44000 call dword[0040C460] ;;call MSVCRT.exit :0040B084 8B45EC mov eax, dword[ebp-14] :0040B087 8B08 mov ecx, dword[eax] :0040B089 8B09 mov ecx, dword[ecx] :0040B08B 894D88 mov dword[ebp-78], ecx :0040B08E 50 push eax :0040B08F 51 push ecx :0040B090 E821000000 call 0040B0B6 ;;call MSVCRT._XcptFilter :0040B095 59 pop ecx :0040B096 59 pop ecx :0040B097 C3 ret :0040B098 8B65E8 mov esp, dword[ebp-18] :0040B09B FF7588 push dword[ebp-78] :0040B09E FF1564C44000 call dword[0040C464] ;;call MSVCRT._exit ========= :0040B0A4 FF2548C44000 jmp dword[0040C448] ;;call MSVCRT.??1type_info@@UAE@XZ ========= :0040B0AA FF2544C44000 jmp dword[0040C444] ;;call MSVCRT.__dllonexit :0040B0B0 FF2550C44000 jmp dword[0040C450] ;;call MSVCRT.__lconv_init ========= :0040B0B6 FF256CC44000 jmp dword[0040C46C] ;;call MSVCRT._XcptFilter ========= :0040B0BC FF258CC44000 jmp dword[0040C48C] ;;call MSVCRT._initterm ========= :0040B0C2 6800000300 push 00030000 :0040B0C7 6800000100 push 00010000 :0040B0CC E80D000000 call 0040B0DE ;;call MSVCRT._controlfp :0040B0D1 59 pop ecx :0040B0D2 59 pop ecx :0040B0D3 C3 ret --------- :0040B0D4 33C0 xor eax, eax :0040B0D6 C3 ret ========= :0040B0D7 C3 ret --------- :0040B0D8 FF25C8C44000 jmp dword[0040C4C8] ;;call MSVCRT._except_handler3 ========= :0040B0DE FF25A8C44000 jmp dword[0040C4A8] ;;call MSVCRT._controlfp ========= :0040B0E4 FF2518C54000 jmp dword[0040C518] ========= :0040B0EA FF2538C54000 jmp dword[0040C538] ========= :0040B0F0 FF2544C54000 jmp dword[0040C544] ========= :0040B0F6 FF253CC54000 jmp dword[0040C53C] ========= :0040B0FC FF2540C54000 jmp dword[0040C540] ========= :0040B102 FF250CC54000 jmp dword[0040C50C] ========= :0040B108 FF2530C54000 jmp dword[0040C530] ========= :0040B10E FF2520C54000 jmp dword[0040C520] ========= :0040B114 FF251CC54000 jmp dword[0040C51C] ========= :0040B11A FF2534C54000 jmp dword[0040C534] ========= :0040B120 FF2524C54000 jmp dword[0040C524] ========= :0040B126 FF252CC54000 jmp dword[0040C52C] ========= :0040B12C FF2528C54000 jmp dword[0040C528] ========= :0040B132 FF2510C54000 jmp dword[0040C510] ========= :0040B138 FF2508C54000 jmp dword[0040C508] ========= :0040B13E FF2514C54000 jmp dword[0040C514] :0040B144 FF250CC44000 jmp dword[0040C40C] ;;call MSVCP60.??0runtime_error@std@@QAE@ABV01@@Z :0040B14A FF 25 .% :0040B14C 14C44000 DWORD 0040C414 ;; ..@. ========= :0040B150 FF742410 push dword[esp+10] :0040B154 FF742410 push dword[esp+10] :0040B158 FF742410 push dword[esp+10] :0040B15C FF742410 push dword[esp+10] :0040B160 E843000000 call 0040B1A8 :0040B165 C21000 ret 0010 :0040B168 E8A9F8FFFF call 0040AA16 :0040B16D 8B4C2404 mov ecx, dword[esp+04] :0040B171 8B542408 mov edx, dword[esp+08] :0040B175 85C9 test ecx, ecx :0040B177 884814 mov byte[eax+14], cl :0040B17A 899040100000 mov dword[eax+00001040], edx :0040B180 7509 jne 0040B18B :0040B182 6AFD push -00000003 :0040B184 FF15D8C44000 call dword[0040C4D8] ;;call MSVCRT._setmbcp :0040B18A 59 pop ecx --------- :0040B18B 6A01 push 00000001 :0040B18D 58 pop eax :0040B18E C20800 ret 0008 :0040B191 E900000000 jmp 0040B196 :0040B196 68 00 06 00 00 6A 00 E8 C6 FF FF FF A2 h....j....... :0040B1A3 CC0E4100 DWORD 00410ECC ;; ..A. :0040B1A7 C3 . ========= :0040B1A8 FF2504C44000 jmp dword[0040C404] :0040B1AE CC CC .. ========= :0040B1B0 55 push ebp :0040B1B1 8BEC mov ebp, esp :0040B1B3 51 push ecx :0040B1B4 894DFC mov dword[ebp-04], ecx :0040B1B7 8B45FC mov eax, dword[ebp-04] :0040B1BA 83C004 add eax, 00000004 :0040B1BD 8BE5 mov esp, ebp :0040B1BF 5D pop ebp :0040B1C0 C3 ret :0040B1C1 CC CC CC CC CC CC CC CC CC CC CC CC CC CC CC ............... :0040B1D0 8B4DF0 mov ecx, dword[ebp-10] :0040B1D3 E898F8FFFF call 0040AA70 :0040B1D8 C3 ret :0040B1D9 B8 . :0040B1DA F0CF4000 DWORD 0040CFF0 ;; ..@. :0040B1DE E9 FF FC FF FF CC CC CC CC CC CC CC CC CC CC CC ................ :0040B1EE CC CC 8B 4D F0 E8 78 F8 FF FF C3 B8 ...M..x..... :0040B1FA 18D04000 DWORD 0040D018 ;; ..@. :0040B1FE E9 DF FC FF FF CC CC CC CC CC CC CC CC CC CC CC ................ :0040B20E CC CC 8D 4D DC E8 58 F8 FF FF C3 B8 ...M..X..... :0040B21A 40D04000 DWORD 0040D040 ;; @.@. :0040B21E E9 BF FC FF FF CC CC CC CC CC CC CC CC CC CC CC ................ :0040B22E CC CC 8B 4D F0 E8 40 F9 FF FF C3 8B 4D F0 81 C1 ...M..@.....M... :0040B23E C4 00 00 00 E8 E9 E3 FF FF C3 8B 4D F0 81 C1 A8 ...........M.... :0040B24E 01 00 00 E8 1C F9 FF FF C3 8B 4D F0 81 C1 BC 01 ..........M..... :0040B25E 00 00 E8 FB 5D FF FF C3 B8 ....].... :0040B267 68D04000 DWORD 0040D068 ;; h.@. :0040B26B E9 72 FC FF FF 8B 4D F0 E8 00 F9 FF FF C3 8B 4D .r....M........M :0040B27B F0 81 C1 C4 00 00 00 E8 A9 E3 FF FF C3 8B 4D F0 ..............M. :0040B28B 81 C1 A8 01 00 00 E8 DC F8 FF FF C3 8B 4D F0 81 .............M.. :0040B29B C1 BC 01 00 00 E8 BB 5D FF FF C3 B8 .......].... :0040B2A7 A8D04000 DWORD 0040D0A8 ;; ..@. :0040B2AB E9 32 FC FF FF 8D 8D CC FE FF FF E8 75 83 FF FF .2..........u... :0040B2BB C3 8D 8D C0 FD FF FF E8 BB F7 FF FF C3 8D 8D C4 ................ :0040B2CB FD FF FF E8 AF F7 FF FF C3 8D 8D BC FD FF FF E8 ................ :0040B2DB A3 F7 FF FF C3 B8 ...... :0040B2E1 E8D04000 DWORD 0040D0E8 ;; ..@. :0040B2E5 E9 F8 FB FF FF CC CC CC CC CC CC 8D 4D E4 E8 18 ............M... :0040B2F5 84 FF FF C3 B8 ..... :0040B2FA 28D14000 DWORD 0040D128 ;; (.@. :0040B2FE E9 DF FB FF FF CC CC CC CC CC CC CC CC CC CC CC ................ :0040B30E CC CC 8B 4D F0 E8 48 82 FF FF C3 8B 4D F0 83 C1 ...M..H.....M... :0040B31E 10 E8 5E F7 FF FF C3 B8 ..^..... :0040B326 50D14000 DWORD 0040D150 ;; P.@. :0040B32A E9 B3 FB FF FF CC 8B 4D F0 E8 28 82 FF FF C3 B8 .......M..(..... :0040B33A 80D14000 DWORD 0040D180 ;; ..@. :0040B33E E9 9F FB FF FF CC CC CC CC CC CC CC CC CC CC CC ................ :0040B34E CC CC 8B 4D F0 E8 58 84 FF FF C3 8B 4D F0 83 C1 ...M..X.....M... :0040B35E 20 E8 B0 F8 FF FF C3 B8 ....... :0040B366 A8D14000 DWORD 0040D1A8 ;; ..@. :0040B36A E9 73 FB FF FF CC 8B 4D F0 E8 38 84 FF FF C3 8B .s.....M..8..... :0040B37A 4D F0 83 C1 20 E8 90 F8 FF FF C3 B8 M... ....... :0040B386 D8D14000 DWORD 0040D1D8 ;; ..@. :0040B38A E9 53 FB FF FF CC 8D 4D E8 E8 78 83 FF FF C3 B8 .S.....M..x..... :0040B39A 08D24000 DWORD 0040D208 ;; ..@. :0040B39E E9 3F FB FF FF CC CC CC CC CC CC CC CC CC CC CC .?.............. :0040B3AE CC CC 8D 4D 94 E8 18 C9 FF FF C3 8D 4D DC E8 4F ...M........M..O :0040B3BE 83 FF FF C3 8D 4D D4 E8 B8 F6 FF FF C3 8D 4D 88 .....M........M. :0040B3CE E8 AF F6 FF FF C3 B8 ....... :0040B3D5 30D24000 DWORD 0040D230 ;; 0.@. :0040B3D9 E9 04 FB FF FF CC CC 8D 4D C8 E8 8A F7 FF FF C3 ........M....... :0040B3E9 8D 4D C0 E8 91 F6 FF FF C3 8D 4D BC E8 88 F6 FF .M........M..... :0040B3F9 FF C3 8D 4D 9C E8 7F F6 FF FF C3 8D 4D 98 E8 76 ...M........M..v :0040B409 F6 FF FF C3 8D 4D 94 E8 6D F6 FF FF C3 8D 4D 90 .....M..m.....M. :0040B419 E8 64 F6 FF FF C3 8D 4D B0 E8 5B F6 FF FF C3 B8 .d.....M..[..... :0040B429 B8D24000 DWORD 0040D2B8 ;; ..@. :0040B42D E9 B0 FA FF FF CC CC CC CC CC CC CC CC CC CC CC ................ :0040B43D CC CC CC 8B 4D F0 E8 88 C8 FF FF C3 8B 4D F0 83 ....M........M.. :0040B44D C1 48 E8 2E F6 FF FF C3 8B 4D F0 83 C1 4C E8 22 .H.......M...L." :0040B45D F6 FF FF C3 B8 ..... :0040B462 18D34000 DWORD 0040D318 ;; ..@. :0040B466 E9 77 FA FF FF CC CC CC CC CC 8B 4D D0 E8 58 C8 .w.........M..X. :0040B476 FF FF C3 8B 4D D0 83 C1 48 E8 FE F5 FF FF C3 8B ....M...H....... :0040B486 4D D0 83 C1 4C E8 F2 F5 FF FF C3 8B 4D D0 83 C1 M...L.......M... :0040B496 68 E8 34 84 FF FF C3 8D 4D D4 E8 0B 83 FF FF C3 h.4.....M....... :0040B4A6 B8 . :0040B4A7 50D34000 DWORD 0040D350 ;; P.@. :0040B4AB E9 32 FA FF FF 8D 4D A8 FF 15 .2....M... :0040B4B5 18C44000 DWORD 0040C418 ;; ..@. :0040B4B9 C3 8D 4D D8 E8 C0 F5 FF FF C3 8D 4D A0 E8 B7 F5 ..M........M.... :0040B4C9 FF FF C3 8D 8D 74 .....t :0040B4CF FFFFFFFF DWORD FFFFFFFF ;; .... :0040B4D3 15 . :0040B4D4 18C44000 DWORD 0040C418 ;; ..@. :0040B4D8 C3 8B 85 68 FF FF FF 50 E8 B5 F5 FF FF 59 C3 8D ...h...P.....Y.. :0040B4E8 8D 64 FF FF FF E8 90 F5 FF FF C3 8D 8D 38 .d...........8 :0040B4F6 FFFFFFFF DWORD FFFFFFFF ;; .... :0040B4FA 15 . :0040B4FB 18C44000 DWORD 0040C418 ;; ..@. :0040B4FF C3 8D 8D 30 FF FF FF E8 77 F5 FF FF C3 8D 8D 04 ...0....w....... :0040B50F FFFFFFFF DWORD FFFFFFFF ;; .... :0040B513 15 . :0040B514 18C44000 DWORD 0040C418 ;; ..@. :0040B518 C3 8D 4D DC E8 61 F5 FF FF C3 8D 8D D4 FE FF FF ..M..a.......... :0040B528 FF 15 .. :0040B52A 18C44000 DWORD 0040C418 ;; ..@. :0040B52E C3 8D 8D A4 FE FF FF FF 15 ......... :0040B537 18C44000 DWORD 0040C418 ;; ..@. :0040B53B C3 8D 4D E0 E8 3E F5 FF FF C3 8D 8D 74 FE FF FF ..M..>......t... :0040B54B FF 15 .. :0040B54D 18C44000 DWORD 0040C418 ;; ..@. :0040B551 C3 8D 8D 44 FE FF FF FF 15 ...D..... :0040B55A 18C44000 DWORD 0040C418 ;; ..@. :0040B55E C3 8D 8D 14 FE FF FF FF 15 ......... :0040B567 18C44000 DWORD 0040C418 ;; ..@. :0040B56B C3 B8 .. :0040B56D F8D34000 DWORD 0040D3F8 ;; ..@. :0040B571 E9 6C F9 FF FF CC CC CC CC CC CC CC CC CC CC 8D .l.............. :0040B581 4D E4 E8 FA F4 FF FF C3 8D 4D DC E8 F1 F4 FF FF M........M...... :0040B591 C3 8D 4D D8 E8 E8 F4 FF FF C3 8D 4D D4 E8 DF F4 ..M........M.... :0040B5A1 FF FF C3 8D 4D D0 E8 D6 F4 FF FF C3 B8 ....M........ :0040B5AE E0D44000 DWORD 0040D4E0 ;; ..@. :0040B5B2 E9 2B F9 FF FF CC CC CC CC CC CC CC CC CC 8D 4D .+.............M :0040B5C2 B4 FF 15 ... :0040B5C5 18C44000 DWORD 0040C418 ;; ..@. :0040B5C9 C3 8D 4D 84 FF 15 ..M... :0040B5CF 18C44000 DWORD 0040C418 ;; ..@. :0040B5D3 C3 8D 4D E4 E8 A6 F4 FF FF C3 8D 8D 54 ..M.........T :0040B5E0 FFFFFFFF DWORD FFFFFFFF ;; .... :0040B5E4 15 . :0040B5E5 18C44000 DWORD 0040C418 ;; ..@. :0040B5E9 C3 8D 8D 24 ...$ :0040B5ED FFFFFFFF DWORD FFFFFFFF ;; .... :0040B5F1 15 . :0040B5F2 18C44000 DWORD 0040C418 ;; ..@. :0040B5F6 C3 8D 8D F4 FE FF FF FF 15 ......... :0040B5FF 18C44000 DWORD 0040C418 ;; ..@. :0040B603 C3 8D 8D C4 FE FF FF FF 15 ......... :0040B60C 18C44000 DWORD 0040C418 ;; ..@. :0040B610 C3 B8 .. :0040B612 28D54000 DWORD 0040D528 ;; (.@. :0040B616 E9 C7 F8 FF FF CC CC CC CC CC B8 ........... :0040B621 C8D54000 DWORD 0040D5C8 ;; ..@. :0040B625 E9 B8 F8 FF FF CC CC CC CC CC CC 8D 4D C4 E8 A8 ............M... :0040B635 DB FF FF C3 8B 45 A8 50 E8 58 F4 FF FF 59 C3 8D .....E.P.X...Y.. :0040B645 8D 7C .| :0040B647 FFFFFFFF DWORD FFFFFFFF ;; .... :0040B64B 15 . :0040B64C 18C44000 DWORD 0040C418 ;; ..@. :0040B650 C3 8D 8D 4C ...L :0040B654 FFFFFFFF DWORD FFFFFFFF ;; .... :0040B658 15 . :0040B659 18C44000 DWORD 0040C418 ;; ..@. :0040B65D C3 8D 4D B8 E8 1C F4 FF FF C3 8D 8D 1C ..M.......... :0040B66A FFFFFFFF DWORD FFFFFFFF ;; .... :0040B66E 15 . :0040B66F 18C44000 DWORD 0040C418 ;; ..@. :0040B673 C3 8D 8D EC FE FF FF FF 15 ......... :0040B67C 18C44000 DWORD 0040C418 ;; ..@. :0040B680 C3 8D 8D BC FE FF FF FF 15 ......... :0040B689 18C44000 DWORD 0040C418 ;; ..@. :0040B68D C3 8D 8D 8C FE FF FF FF 15 ......... :0040B696 18C44000 DWORD 0040C418 ;; ..@. :0040B69A C3 8D 8D 5C FE FF FF FF 15 ...\..... :0040B6A3 18C44000 DWORD 0040C418 ;; ..@. :0040B6A7 C3 8D 8D 54 FE FF FF E8 CF F3 FF FF C3 8D 8D 50 ...T...........P :0040B6B7 FE FF FF E8 C3 F3 FF FF C3 8D 8D 24 FE FF FF FF ...........$.... :0040B6C7 15 . :0040B6C8 18C44000 DWORD 0040C418 ;; ..@. :0040B6CC C3 8D 8D F4 FD FF FF FF 15 ......... :0040B6D5 18C44000 DWORD 0040C418 ;; ..@. :0040B6D9 C3 8D 8D C4 FD FF FF FF 15 ......... :0040B6E2 18C44000 DWORD 0040C418 ;; ..@. :0040B6E6 C3 8D 8D BC FD FF FF E8 90 F3 FF FF C3 8D 8D 90 ................ :0040B6F6 FD FF FF FF 15 ..... :0040B6FB 18C44000 DWORD 0040C418 ;; ..@. :0040B6FF C3 B8 .. :0040B701 20D64000 DWORD 0040D620 ;; .@. :0040B705 E9 D8 F7 FF FF CC CC CC CC CC CC 8D 4D E8 E8 6A ............M..j :0040B715 F3 FF FF C3 B8 ..... :0040B71A 10D74000 DWORD 0040D710 ;; ..@. :0040B71E E9 BF F7 FF FF CC CC CC CC CC CC CC CC CC CC CC ................ :0040B72E CC CC 8D 4D EC E8 4A F3 FF FF C3 B8 ...M..J..... :0040B73A 38D74000 DWORD 0040D738 ;; 8.@. :0040B73E E9 9F F7 FF FF CC CC CC CC CC CC CC CC CC CC CC ................ :0040B74E CC CC 8D 4D E8 E8 2A F3 FF FF C3 8D 4D E0 E8 21 ...M..*.....M..! :0040B75E F3 FF FF C3 8B 45 DC 83 E0 01 85 C0 0F 84 08 00 .....E.......... :0040B76E 00 00 8B 4D 08 E8 0A F3 FF FF C3 B8 ...M........ :0040B77A 60D74000 DWORD 0040D760 ;; `.@. :0040B77E E9 5F F7 FF FF CC CC CC CC CC CC CC CC CC CC CC ._.............. :0040B78E CC CC 8D 4D B4 FF 15 ...M... :0040B795 18C44000 DWORD 0040C418 ;; ..@. :0040B799 C3 8B 45 A8 50 E8 F7 F2 FF FF 59 C3 8D 8D 7C ..E.P.....Y...| :0040B7A8 FFFFFFFF DWORD FFFFFFFF ;; .... :0040B7AC 15 . :0040B7AD 18C44000 DWORD 0040C418 ;; ..@. :0040B7B1 C3 8D 8D 4C ...L :0040B7B5 FFFFFFFF DWORD FFFFFFFF ;; .... :0040B7B9 15 . :0040B7BA 18C44000 DWORD 0040C418 ;; ..@. :0040B7BE C3 8D 4D E4 E8 BB F2 FF FF C3 8D 8D 1C ..M.......... :0040B7CB FFFFFFFF DWORD FFFFFFFF ;; .... :0040B7CF 15 . :0040B7D0 18C44000 DWORD 0040C418 ;; ..@. :0040B7D4 C3 B8 .. :0040B7D6 98D74000 DWORD 0040D798 ;; ..@. :0040B7DA E9 03 F7 FF FF CC 8D 4D B0 FF 15 .......M... :0040B7E5 18C44000 DWORD 0040C418 ;; ..@. :0040B7E9 C3 8D 4D 80 FF 15 ..M... :0040B7EF 18C44000 DWORD 0040C418 ;; ..@. :0040B7F3 C3 8D 4D E0 E8 86 F2 FF FF C3 8D 8D 50 ..M.........P :0040B800 FFFFFFFF DWORD FFFFFFFF ;; .... :0040B804 15 . :0040B805 18C44000 DWORD 0040C418 ;; ..@. :0040B809 C3 8D 8D 20 ... :0040B80D FFFFFFFF DWORD FFFFFFFF ;; .... :0040B811 15 . :0040B812 18C44000 DWORD 0040C418 ;; ..@. :0040B816 C3 8D 8D F0 FE FF FF FF 15 ......... :0040B81F 18C44000 DWORD 0040C418 ;; ..@. :0040B823 C3 8D 8D C0 FE FF FF FF 15 ......... :0040B82C 18C44000 DWORD 0040C418 ;; ..@. :0040B830 C3 B8 .. :0040B832 30D84000 DWORD 0040D830 ;; 0.@. :0040B836 E9 A7 F6 FF FF CC CC CC CC CC 8D 4D DC E8 3A F2 ...........M..:. :0040B846 FF FF C3 8D 4D D8 E8 31 F2 FF FF C3 8D 4D D0 E8 ....M..1.....M.. :0040B856 28 F2 FF FF C3 8D 4D C8 E8 1F F2 FF FF C3 8D 4D (.....M........M :0040B866 C0 E8 16 F2 FF FF C3 8D 4D B8 E8 0D F2 FF FF C3 ........M....... :0040B876 8D 4D B0 E8 04 F2 FF FF C3 8D 4D A8 E8 FB F1 FF .M........M..... :0040B886 FF C3 8D 4D A0 E8 F2 F1 FF FF C3 8D 4D 98 E8 E9 ...M........M... :0040B896 F1 FF FF C3 8D 4D 94 E8 E0 F1 FF FF C3 8D 4D 8C .....M........M. :0040B8A6 E8 D7 F1 FF FF C3 8D 4D 84 E8 CE F1 FF FF C3 B8 .......M........ :0040B8B6 D0D84000 DWORD 0040D8D0 ;; ..@. :0040B8BA E9 23 F6 FF FF CC 8B 45 EC 50 E8 57 73 FF FF C3 .#.....E.P.Ws... :0040B8CA B8 . :0040B8CB A0D94000 DWORD 0040D9A0 ;; ..@. :0040B8CF E9 0E F6 FF FF CC CC CC CC CC CC CC CC CC CC CC ................ :0040B8DF CC 8B 4D F0 E8 E6 F3 FF FF C3 8B 4D F0 83 C1 70 ..M........M...p :0040B8EF E8 FC 8B FF FF C3 B8 ....... :0040B8F6 C8D94000 DWORD 0040D9C8 ;; ..@. :0040B8FA E9 E3 F5 FF FF CC 8B 4D F0 E8 C6 F3 FF FF C3 8B .......M........ :0040B90A 4D F0 83 C1 70 E8 DC 8B FF FF C3 B8 M...p....... :0040B916 F8D94000 DWORD 0040D9F8 ;; ..@. :0040B91A E9 C3 F5 FF FF CC 8D 4D EC E8 5A F1 FF FF C3 8D .......M..Z..... :0040B92A 4D E8 E8 8F C1 FF FF C3 B8 M........ :0040B933 28DA4000 DWORD 0040DA28 ;; (.@. :0040B937 E9 A6 F5 FF FF CC CC CC CC 8B 4D E0 83 C1 0C E8 ..........M..... :0040B947 35 D5 FF FF C3 B8 5..... :0040B94D D0DA4000 DWORD 0040DAD0 ;; ..@. :0040B951 E9 8C F5 FF FF CC CC CC CC CC CC CC CC CC CC 8B ................ :0040B961 4D F0 83 C1 0C E8 15 D5 FF FF C3 B8 M........... :0040B96D F8DA4000 DWORD 0040DAF8 ;; ..@. :0040B971 E9 6C F5 FF FF CC CC CC CC CC CC CC CC CC CC 8D .l.............. :0040B981 4D E8 E8 FA F0 FF FF C3 8D 4D E4 E8 F1 F0 FF FF M........M...... :0040B991 C3 B8 .. :0040B993 20DB4000 DWORD 0040DB20 ;; .@. :0040B997 E9 46 F5 FF FF CC CC CC CC 8D 4D E8 E8 DA F0 FF .F........M..... :0040B9A7 FF C3 8D 4D E4 E8 D1 F0 FF FF C3 B8 ...M........ :0040B9B3 50DB4000 DWORD 0040DB50 ;; P.@. :0040B9B7 E9 26 F5 FF FF CC CC CC CC 8D 4D B4 FF 15 .&........M... :0040B9C5 18C44000 DWORD 0040C418 ;; ..@. :0040B9C9 C3 8D 4D 84 FF 15 ..M... :0040B9CF 18C44000 DWORD 0040C418 ;; ..@. :0040B9D3 C3 B8 .. :0040B9D5 80DB4000 DWORD 0040DB80 ;; ..@. :0040B9D9 E9 04 F5 FF FF CC CC 8D 4D C4 FF 15 ........M... :0040B9E5 18C44000 DWORD 0040C418 ;; ..@. :0040B9E9 C3 B8 .. :0040B9EB B0DB4000 DWORD 0040DBB0 ;; ..@. :0040B9EF E9 EE F4 FF FF CC CC CC CC CC CC CC CC CC CC CC ................ :0040B9FF CC 8D 8D B8 FE FF FF FF 15 ......... :0040BA08 18C44000 DWORD 0040C418 ;; ..@. :0040BA0C C3 8D 8D 88 FE FF FF FF 15 ......... :0040BA15 18C44000 DWORD 0040C418 ;; ..@. :0040BA19 C3 B8 .. :0040BA1B D8DB4000 DWORD 0040DBD8 ;; ..@. :0040BA1F E9 BE F4 FF FF CC CC CC CC CC CC CC CC CC CC CC ................ :0040BA2F CC 8D 4D A8 FF 15 ..M... :0040BA35 18C44000 DWORD 0040C418 ;; ..@. :0040BA39 C3 8D 8D 78 ...x :0040BA3D FFFFFFFF DWORD FFFFFFFF ;; .... :0040BA41 15 . :0040BA42 18C44000 DWORD 0040C418 ;; ..@. :0040BA46 C3 8D 8D 48 ...H :0040BA4A FFFFFFFF DWORD FFFFFFFF ;; .... :0040BA4E 15 . :0040BA4F 18C44000 DWORD 0040C418 ;; ..@. :0040BA53 C3 B8 .. :0040BA55 08DC4000 DWORD 0040DC08 ;; ..@. :0040BA59 E9 84 F4 FF FF CC CC 8D 8D B8 FE FF FF FF 15 ............... :0040BA68 18C44000 DWORD 0040C418 ;; ..@. :0040BA6C C3 B8 .. :0040BA6E 40DC4000 DWORD 0040DC40 ;; @.@. :0040BA72 E9 6B F4 FF FF CC CC CC CC CC CC CC CC CC 8D 4D .k.............M :0040BA82 CC FF 15 ... :0040BA85 18C44000 DWORD 0040C418 ;; ..@. :0040BA89 C3 8D 4D 9C FF 15 ..M... :0040BA8F 18C44000 DWORD 0040C418 ;; ..@. :0040BA93 C3 8D 8D 6C ...l :0040BA97 FFFFFFFF DWORD FFFFFFFF ;; .... :0040BA9B 15 . :0040BA9C 18C44000 DWORD 0040C418 ;; ..@. :0040BAA0 C3 B8 .. :0040BAA2 68DC4000 DWORD 0040DC68 ;; h.@. :0040BAA6 E9 37 F4 FF FF CC CC CC CC CC 8D 4D BC FF 15 .7.........M... :0040BAB5 18C44000 DWORD 0040C418 ;; ..@. :0040BAB9 C3 B8 .. :0040BABB A0DC4000 DWORD 0040DCA0 ;; ..@. :0040BABF E9 1E F4 FF FF CC CC CC CC CC CC CC CC CC CC CC ................ :0040BACF CC 8B 8D EC FE FF FF E8 97 F0 FF FF C3 8B 8D EC ................ :0040BADF FE FF FF 83 C1 14 E8 98 EF FF FF C3 B8 ............. :0040BAEC C8DC4000 DWORD 0040DCC8 ;; ..@. :0040BAF0 E9 ED F3 FF FF CC CC CC CC CC CC CC CC CC CC CC ................ :0040BB00 8B 4D F0 E8 6A F0 FF FF C3 8B 4D F0 83 C1 14 E8 .M..j.....M..... :0040BB10 6E EF FF FF C3 B8 n..... :0040BB16 F8DC4000 DWORD 0040DCF8 ;; ..@. :0040BB1A E9 C3 F3 FF FF CC 8D 4D EC E8 5A EF FF FF C3 B8 .......M..Z..... :0040BB2A 28DD4000 DWORD 0040DD28 ;; (.@. :0040BB2E E9 AF F3 FF FF CC CC CC CC CC CC CC CC CC CC CC ................ :0040BB3E CC CC 8B 4D F0 E8 18 F3 FF FF C3 B8 ...M........ :0040BB4A 50DD4000 DWORD 0040DD50 ;; P.@. :0040BB4E E9 8F F3 FF FF CC CC CC CC CC CC CC CC CC CC CC ................ :0040BB5E CC CC 8B 4D F0 E8 F8 F2 FF FF C3 8B 4D F0 81 C1 ...M........M... :0040BB6E C0 00 00 00 E8 69 E8 FF FF C3 B8 .....i..... :0040BB79 78DD4000 DWORD 0040DD78 ;; x.@. :0040BB7D E9 60 F3 FF FF CC CC CC CC CC CC CC CC CC CC CC .`.............. :0040BB8D CC CC CC 8D 4D CC E8 EA EE FF FF C3 8D 4D C8 E8 ....M........M.. :0040BB9D E1 EE FF FF C3 8D 8D A8 FD FF FF E8 D5 EE FF FF ................ :0040BBAD C3 8B 85 9C FD FF FF 50 E8 66 70 FF FF C3 8B 85 .......P.fp..... :0040BBBD 8C FD FF FF 50 E8 59 70 FF FF C3 B8 ....P.Yp.... :0040BBC9 A8DD4000 DWORD 0040DDA8 ;; ..@. :0040BBCD E9 10 F3 FF FF CC CC CC CC CC CC CC CC CC CC CC ................ :0040BBDD CC CC CC 8B 85 D8 FE FF FF 50 E8 34 70 FF FF C3 .........P.4p... :0040BBED B8 . :0040BBEE F0DD4000 DWORD 0040DDF0 ;; ..@. :0040BBF2 E9 EB F2 FF FF CC CC CC CC CC CC CC CC CC 8B 4D ...............M :0040BC02 F0 E8 78 79 FF FF C3 B8 ..xy.... :0040BC0A 18DE4000 DWORD 0040DE18 ;; ..@. :0040BC0E E9 CF F2 FF FF 00 00 00 00 00 00 00 00 00 00 00 ................ :0040BC1E 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ :0040BC2E 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ :0040BC3E 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ :0040BC4E 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ :0040BC5E 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ :0040BC6E 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ :0040BC7E 00 00 .. --------- :0040BC80 83BDECFDFFFF00 cmp dword[ebp+FFFFFDEC], 00000000 :0040BC87 0F8513000000 jne 0040BCA0 :0040BC8D 6810044100 push 00410410 (StringData)"127.0.0.1" :0040BC92 E9A18DFFFF jmp 00404A38 :0040BC97 00 00 00 00 00 00 00 00 00 ......... --------- :0040BCA0 8B95B8FDFFFF mov edx, dword[ebp+FFFFFDB8] :0040BCA6 52 push edx :0040BCA7 E98C8DFFFF jmp 00404A38 :0040BCAC 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ :0040BCBC 00 00 00 00 .... --------- :0040BCC0 83BDECFDFFFF00 cmp dword[ebp+FFFFFDEC], 00000000 :0040BCC7 0F850C000000 jne 0040BCD9 :0040BCCD C745E4AE1F0000 mov dword[ebp-1C], 00001FAE :0040BCD4 E9088DFFFF jmp 004049E1 --------- :0040BCD9 C745E46E000000 mov dword[ebp-1C], 0000006E :0040BCE0 E9FC8CFFFF jmp 004049E1 :0040BCE5 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ :0040BCF5 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ :0040BD05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ :0040BD15 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ :0040BD25 00 00 00 00 00 00 00 00 00 00 00 ........... --------- :0040BD30 83BDECFDFFFF00 cmp dword[ebp+FFFFFDEC], 00000000 :0040BD37 0F8513000000 jne 0040BD50 :0040BD3D 8B8DF0FDFFFF mov ecx, dword[ebp+FFFFFDF0] :0040BD43 51 push ecx :0040BD44 E9CC8EFFFF jmp 00404C15 :0040BD49 00 00 00 00 00 00 00 ....... --------- :0040BD50 8B8DFCFDFFFF mov ecx, dword[ebp+FFFFFDFC] :0040BD56 8B5148 mov edx, dword[ecx+48] :0040BD59 52 push edx :0040BD5A E9B68EFFFF jmp 00404C15 :0040BD5F 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ :0040BD6F 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ :0040BD7F 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ :0040BD8F 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ :0040BD9F 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ :0040BDAF 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ :0040BDBF 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ :0040BDCF 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ :0040BDDF 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ :0040BDEF 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ :0040BDFF 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ :0040BE0F 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ :0040BE1F 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ :0040BE2F 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ :0040BE3F 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ :0040BE4F 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ :0040BE5F 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ :0040BE6F 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ :0040BE7F 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ :0040BE8F 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ :0040BE9F 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ :0040BEAF 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ :0040BEBF 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ :0040BECF 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ :0040BEDF 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ :0040BEEF 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ :0040BEFF 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ :0040BF0F 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ :0040BF1F 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ :0040BF2F 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ :0040BF3F 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ :0040BF4F 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ :0040BF5F 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ :0040BF6F 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ :0040BF7F 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ :0040BF8F 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ :0040BF9F 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ :0040BFAF 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ :0040BFBF 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ :0040BFCF 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ :0040BFDF 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ :0040BFEF 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ :0040BFFF 00 . *************** Cross Reference Listing **************** ==00401000::00402D17, ==00401060::00402DCE, ==00401090::00401207, --00401128::004010A2, ==00401130::00401073, ==00401180::00403342,00403356,0040336A,0040337E,00403392, --004011C0::00401357, ==004011F0::00403138, ==00401370::004011A4,0040122A, --004014B0::00401384, ==004014C0::00401517, ==004014F0::004011B1, ==00401590::004010DA,004010EB,004010FC,0040110D, --004015E5::00401612, --004015EB::00401606, --004015F1::00401622, --004015F7::0040160A, --004015FD::0040160E,00401616,0040161A,0040161E, ==00401630::004011CA,00403C95,00403D13,00403D3F,004045C5,00404719,00404B6E, 00404D31,00404E03,00405257,00405383,00405442,0040554F,00405617, 0040579D,004058FF,00405AB2,00405BCA,00405CAC,00405D92,00405F1B, 004060FB,00406192,004061B2,004063A5,00406802,00406857,0040687E, 00406A41,00406BAF,00406C6B,00406C8B,00406D96,00406E89,0040702F, 004074D1,00407D8D, ==00401640::004011DF, ==00401670::004042CC, --0040172B::00402310, --00401771::00402374, --004017B6::004023A0, --004017CE::0040239C, --00401806::004023A4, --00401837::00402378, --004018CF::004023E5, --004018EA::004023E1, --00401925::004023DD, --00401966::004018B4,004023E9, --00401A02::004018E5,00401920,00401961, --00401A07::0040237C, --00401AE8::00401A28, --00401AED::00402380,00402384, --00401B30::00402426, --00401B3F::00402422, --00401C10::00401B15,0040242A, --00401C4E::00401B3A, --00401C53::00402388, --00401C92::00402474, --00401CA7::00402470, --00401CB9::0040246C, --00401CC5::00402478, --00401D2B::00401CA2, --00401D30::0040238C, --00401DBE::00402390,00402394, --00401E9B::00401DE8, --00401EA0::00402398,00401EF0, --0040229B::00401EB5, --00402301::0040175E,00401832,00401A02,00401AE8,00401C4E,00401D2B,00401DB9, 00401E9B, --00402315::00401737, --00402370::004016E9, ##004023A8::004017A9, ##004023ED::004018C2, ##0040242E::00401B23, ##0040247C::00401C85, --004024CB::00402649, --00402530::00402664, --00402568::00402668, --0040259F::0040266C, --004025D6::00402518,00402670, --0040260F::004024F9, --0040264E::004024CF,004024DE, --00402660::004025D8, ##00402674::00402523, --004026C4::004027AF, --0040278A::004026F5, --004027B4::004026C8, --004027C6::0040273A, ==004027D0::00402727, ==00402850::004027DB, --00402866::00402970, --00402970::004028AA,004028E0, --00402975::00402873, ==00402990::004026E5, ==004029E0::00409A5F,00409BF7,00409D96, ==00402A80::00402A5A, ==00402C10::0040A450, ==00402C20::00402A6D,00402D7D,004035BD,0040776D,0040919D,0040961D,0040A57D, ==00402C60::00403179,004031FF,00403277,0040426C,004042BE,004047E8,004049FB, 00404A22,00404C37,00405C76,00405D46,004062EB,004063E1,0040640A, 00407024,0040782D,00407E33,004091C3,00409261,004099CA,004099F2, 00409A08, ==00402C70::00403A3C, ==00402CB0::00402E38, ==00402D90::00402D6A,00402E68, ==00402E30::00402E23, ==00402E40::00402E28, --00402E60::00402E43, ==00402FA0::00402F4A, ==00403020::00402F8B, --00403219::00403194, --0040322B::004030C6,004030D0,004030DA, --004032A1::00403075, ==004032C0::00403CB2,00403D19,00403D45,004045CB,00404B8B,00404D4E,00404E09, 00405274,004053A0,00405448,0040561D,0040591C,00405BE7,00406198, 004061B8,004063AB,0040681F,0040685D,00406884,00406A5E,00406BCC, 00406C71,00406C91,00406DB5,00406EA7,004074D7,00407D93, --00403335::0040341E, --00403349::00403422, --0040335D::00403426, --00403371::0040342E, --00403385::0040342A, --004033F8::00403310, ==004034E0::004030EC, ==00403560::00403671, ==00403580::00403573,004035AA,0040A41E, ==00403630::00403226, ==004036B0::00402F24, ==00403710::00403408,00403AD9, ==00403730::00402D29,0040385F,00404521, ==004037B0::00402DBC,00403917,0040455D, ==00403800::004037EA,0040452D, ==00403840::004043EA,00405708, ==004038D0::0040456C,0040633A, ==00403930::00405A17, ==00403990::00405E7C, ==00403A10::00405A1F, ==00403A50::00405C31, --00403B00::00403961, ==00403B20::00403B0D, --00403B9C::00403CD8, --00403CD1::00403BE3, --00403CDD::00403BA0,00403D4D, ==00403DA0::00403BFF, ==00403DC0::00403AA7, ==00403DE0::00403ABD, ==00403E10::00403C25, ==00403E30::00403E1E, ==00403E50::00403A97,0040407F,00404166,00404298,00404C29,00406D11,00407E09, 00408013,0040801F, ==00403E70::00403E5A,0040754A, ==00403E90::00403A31, ==00403EB0::00403BAC, ==00403ED0::004039AF, ==00403EF0::00405B34,00405D84, ==00403F30::00405F9D, ==00403F70::00404272, ==00403FD0::004062C2, --00404068::00404132, --00404137::00404076,00404089, --0040414F::0040422B, --00404230::00404141,0040415D,00404170, --004042FD::0040423A, --00404315::00404043, --00404340::004062D4, ==00404350::004076F1, ==004044F0::004077C4, ==004045B0::00407809, --0040463C::004046C1, --00404648::004046C5, --00404654::004046C9, --00404660::004046CD, ==004046E0::004046B3, ==00404750::00406F6E, --004048AE::00404827, --004049DA::00404947, --004049E1::0040BCD4,0040BCE0, --00404A38::0040BC92,0040BCA7, --00404AE6::00404A53, --00404C15::0040BD44,0040BD5A, --00404EF9::00404DEB,00404E72, ==00404F20::00404812, --00405070::00404FE2, --004050B4::00404F8B, ==004050E0::0040746B, --004052E6::00405412, --00405417::00405307, --004054D7::0040542A,004054B1, ==00405500::00404741,0040748A,004074E4, --0040563F::00405537, ==00405660::00405126,0040573C,004068FF, ==00405690::004070CC, --00405A24::00405C9F, --00405CA4::00405A2B,00405C13, --00405EAA::00406043, --00406048::00405EC3,004061C0, ==00406250::00405A34, ==00406270::00405E84, ==00406290::00405D69, ==00406370::00407846, ==004063C0::00406DE6,00406ED6,00406FB5, ==00406450::004063F2, ==00406490::00406F49, ==00406580::00407839,00406893, ==004068C0::00406E20,004070AF, --00406AF7::00406C3E, --00406C43::00406AFB,00406B0B,00406B33,00406C99, ==00406CC0::0040414A,004092F1, --00406EB4::00406E0A, --0040709F::00406FE6,00406FF6, --0040747F::00406EAF,00406F8E,004070E0, --00407519::0040748F,004074E9, ==00407540::0040413A,00404233,004049E4,00406CF3, ==00407560::00404B98,00405929,00406A6B,00406D22, ==00407580::00405BF8, ==004075A0::0040758A,004075EA, ==004075C0::004075B1, ==004075E0::00406B1A, ==00407600::00404548,0040472E,0040556E,004057D1,00405AE6,00405CE0,00405DC6, 00405F4F,0040612F,00407063, ==004076C0::00407668, ==00407780::0040775A, ==00407B20::00407650,00409A41,00409BD6,00409D75, ==00407B50::00407B43, ==00407B60::00407B48, --00407B80::00407B63, --00407BD0::00407BB3, ==00407BE0::00403B50,00404374,004048E2,00406627, ==00407CD0::00404599,00407CAA, ==00407DC0::00403C81,0040485D,00404980,00404A8C,00404D60,0040517E,00405286, 004053B2,00405817,00405995,0040608C,00406831,00406965,00406A97, 00406BDE,00406E63, ==00408280::00407FFA, ==004082D0::004052EF,00407FE9,00408002, ==004082F0::004082A3, --00408346::00408468, --00408406::00408362, --0040846D::00408319, ==00408480::0040836E, ==00408500::00408356, ==00408660::00404C5B,0040638F,004066A3,00406728,004074B9,00407E3C,00407F9C, --004086E0::00408886, --00408729::004087FC, --00408801::00408730, --00408815::00408706, --0040888B::004086E4, --00408891::00408693,004086A6, ==004088B0::004086FA,00408AA0, ==004089C0::00404A41,004066F9, --00408A90::00408B21, --00408B26::00408A49, ==00408B40::00408A1C, --00408C22::00408B9C, ==00408C60::00404935,00406674, ==00408CD0::00408C78, ==00408D00::00408C8C, ==00408D90::00408D84, ==00408DC0::00408D24, ==00408DD0::00407DF8, ==00408E00::00408DDA, ==00408E20::00407C1E,00407C53, ==00408E80::00407D02,00407D14, ==00408EE0::00407F93,0040829A, ==00408F00::00408E3A, ==00408F20::00408EB4, ==00408F40::00408EEA, ==00408F60::00408E98, ==00408F90::00408E57, ==00408FD0::00408FBC, ==00408FF0::00408F81, ==00409010::00408F0D, ==00409030::00408FDF, ==00409070::0040903C,0040A94A,0040A99A, ==00409080::00408FFB, ==00409090::004056D3, ==004091B0::00405798,00405E13, ==004091E0::0040918A, ==00409240::0040920F, ==00409280::00409145, ==004092D0::00405EA5, ==00409370::0040928F, --004093F0::004093D3, ==00409420::0040708A, ==004094A0::0040946D, ==004094C0::00405802,00405B19,00405D13,00405E03,00405F82,00406162, ==00409560::0040454E,00404734,00405581, ==004095A0::00402CE6, ==00409630::00402DF2,0040960A, --004098CE::00409B9A, --00409B8B::00409A21, --00409B9A::00409961,0040996B,00409978, --00409B9F::004098BF,004098DD, --00409BBA::0040988C, --00409BC4::00409856, --00409CA1::00409AF4,00409B52, ==00409F40::0040965F,0040A033, ==0040A0A0::004096B7, ==0040A0D0::004095D6, ==0040A130::0040A0DA, ==0040A150::00409D66, ==0040A190::00409C89, ==0040A240::0040A00F,0040A40F,0040A672, ==0040A300::00409F98, ==0040A320::00409FC9, ==0040A3E0::00409671,0040A56A, ==0040A540::0040A458,0040A786, ==0040A590::0040A19E, ==0040A620::0040A220, ==0040A680::0040A164,0040A5A4, ==0040A6F0::0040A1CA,0040A68D, ==0040A700::0040A206,0040A6D8, ==0040A720::0040A297,0040A630, ==0040A750::0040A2A5,0040A63E, ==0040A7C0::0040A5C7, ==0040A840::0040A5CF, ==0040A910::0040A8F4, ==0040A960::0040A902, ==0040A9B0::00409B01,00409C59, ==0040A9E0::00409AA3,00409C38,00409DDD, ==0040AA04::004062F9, ==0040AA0A::00407AA9,00407AC9, ==0040AA16::00401633,00403693,0040A063,0040A073,0040B168, ==0040AA70::00402AC1,0040B1D3, ==0040AA76::00402A1B,004031D1,00403511,00403B78,00403CE2,0040404C,00404058, 00404281,00404390,0040439F,004047D6,00404AE9,00404BFC,004051D2, 0040587A,004062AE,004064C6,00406776,004069BC,00407710,004090CF, 004092F9,004093C8,00409895,004098A4, ==0040AA7C::004029FF, ==0040AA82::00402AB2,0040318F,00403214,0040329C,00403662,00403D28,004040CA, 0040412B,004041BD,00404224,004042F1,00404304,00404310,0040457B, 0040458A,00404869,0040498F,00404A9B,00404DCE,00404DDA,00404DE6, 00404FC1,00405025,0040505D,004050A3,004050CA,00405425,00405C9A, 00405D7B,004060AA,00406178,0040630F,0040642B,00406539,0040655A, 0040683D,00406C51,00406E01,00406E84,00406F2C,00406F89,00406FD0, 004077B5,00407E4B,00407E5A,0040921E,0040934A,004093F8,00409ACE, 00409ADA,00409AE9,00409B2C,00409B38,00409B47,00409B95,00409BA6, 00409BB5, ==0040AA94::00402BF1,0040353F,004078B4,00408DE6,0040915A,004093A1, ==0040AA9A::00402C27,0040634D,00407CBD,00408F2B,0040A2BB,0040A7DF,0040AED6, ==0040AB00::004078EE, ==0040AB72::00402DE0,00404325,0040922D, ==0040AB78::00402E01, ==0040AB7E::00402D05,00404025,004090BA, ==0040AB84::00402CD1, ==0040AB8A::00402F3C, ==0040AB96::00409AB5,00409B13,00409C4A,00409C6B,00409DEF, ==0040ABA2::00403016, ==0040ABA8::0040300E, ==0040ABAE::00403205, ==0040ABB4::004031ED, ==0040ABBA::004031C6, ==0040ABC0::00403158,00403253,00404835,00404958,00404A64,00404F42,00406064, 00406DCC,00406E3E,00406EBC,00406F9B,0040998B, ==0040ABC6::004032FA,00403A8F,00403BF4, ==0040ABCC::004032E9,00403A7E,00403B65, ==0040ABDE::004034FF, ==0040ABF6::004036FA, ==0040ABFC::0040371A,00403CBD, ==0040AC08::0040373C, ==0040AC0E::004037D0, ==0040AC14::00403908, ==0040AC1A::0040389C, ==0040AC20::00403871, ==0040AC26::004038F9, ==0040AC2C::00403966, ==0040AC32::00403C72,00403D00,00404C1E, ==0040AC38::00403C3A,004040BE,0040411F,004041B1,00404218,004042E5,00404FB5, 00405019,00405051,00405097,0040652D, ==0040AC3E::00403DFD, ==0040AC44::004042D9, ==0040AC4A::004042A9, ==0040AC50::00404264,004064D9,00409A2E, ==0040AC56::00404258,00405069,004050AF,004064E5,00409A3A, ==0040AC5C::00404100,004041F3,00405038,0040507E,00406514, ==0040AC62::004040DE,004041D1, ==0040AC68::004040D2,004041C5, ==0040AC6E::004040A5,0040418C,00404F9C, ==0040AC74::0040406F,00404156,00405EB1, ==0040AC7A::0040403C,004091CC, ==0040AC80::004048B0,004056F0,004065FE,00407B27,00409024,0040A7FE, ==0040AC86::00405000, ==0040AC8C::00404FD6, ==0040AC92::00404F6C,00404F7F, ==0040AC98::00405FC5, ==0040AC9E::00405D25, ==0040ACA4::00405CA7, ==0040ACAA::00405C8B, ==0040ACB0::00405C55, ==0040ACB6::00406472, ==0040ACBC::00406545, ==0040ACC2::004064F8, ==0040ACCE::004077D3, ==0040ACD4::004076DF, ==0040ACEC::00407E1E, ==0040ACF8::00407FE1, ==0040ACFE::00408E07, ==0040AE60::00409680, ==0040AE66::004095BF, ==0040AE72::004099D4,004099FC, ==0040AE78::0040999E, ==0040AE7E::0040A047, ==0040AE84::0040A08A,0040A0AA, ==0040AE8A::0040A2E7, ==0040AE96::0040A46F, ==0040AE9C::0040A7B2, ==0040AEA2::0040A79D, ==0040AEA8::0040A862, ==0040AEAE::0040A9F8, ==0040AEB4::00401BB2,004033D6, ==0040AEBA::00401B85,00403F7F,00404092,004040F0,00404179,004041E3,0040637E, 0040668F,00406714,004074A8, ==0040AEC0::004016F8,0040170B,0040185A,00401870,00408B6C,00408D18,0040942E, 004094E9,0040956E,0040A822,0040A921,0040A971, ==0040AEF0::0040AF20, ==0040AF1C::00402E48,00407B68,00407BB8,004093D8, ==0040AF34::004047CE,004048A9,004049D5,00404AE1,00404B69,00404BF4,00404CB6, 00404D2C,00404DBB,0040516C,004051CA,00405252,004052E1,0040537E, 0040540D,0040578B,00405872,004058FA,00405986,004059F0,00405AAD, 00405BC5,00405E68,00405F16,0040603E,004060F6,004065F7,004066E3, 0040676E,004067FD,00406945,004069B4,00406A3C,00406AF2,00406BAA, 00406C39,004083F1,00408463,004084E7,0040856E,0040863B,0040879F, 004087EE,00408881,0040899C,00408A8B,00408B1C,00408C1D, ==0040AF40::004092B6, ==0040B0A4::0040AEC9, ==0040B0AA::0040AF13, ==0040B0B6::0040B090, ==0040B0BC::0040AFD8,0040B00B, ==0040B0C2::0040AFC9, --0040B0D4::0040AFBD, ==0040B0D7::0040AFB0, --0040B0D8::0040AF50, ==0040B0DE::0040B0CC, ==0040B0E4::00407D6F,0040875F, ==0040B0EA::00407D61, ==0040B0F0::00407D52, ==0040B0F6::004083B4, ==0040B0FC::004084AE, ==0040B102::004085E9,0040894A, ==0040B108::00408751, ==0040B10E::00408A41, ==0040B114::00408C27,00408D72, ==0040B11A::00408BCE, ==0040B120::00408BAB,00408D4B, ==0040B126::00408B91,00408D3D, ==0040B12C::00408CB4,00408D5E, ==0040B132::00408CE3, ==0040B138::00408DA6, ==0040B13E::0040A9C2, ==0040B150::0040B075, ==0040B1A8::0040B160, ==0040B1B0::0040A86D, --0040BC80::00404A31, --0040BCA0::0040BC87, --0040BCC0::004049DA, --0040BCD9::0040BCC7, --0040BD30::00404C0B, --0040BD50::0040BD37, *************** END OF LISTING **********************************